Re: Code Signing Issue

From: Gordon (jgord@hotmail.com)
Date: 03/27/03


From: "Gordon" <jgord@hotmail.com>
Date: Thu, 27 Mar 2003 12:13:17 -0800


The file you referred displayed the same dialog as my exes (see attached
picture).

Here are some links to EXEs signed with our certificate:

Our software (packaged within MS-IExpress self-extracting EXE):
http://www.consultingnation.com/downloads/CNSXP.exe

Windows Calculator:
http://www.consultingnation.com/downloads/calc.exe

"Michel Gallant (MVP)" <neutron@istar.ca> wrote in message
news:u5wDtUB9CHA.824@TK2MSFTNGP11.phx.gbl...
> Well, it certainly isn't true of all Thawte certificates.
> I have used a commercial Thawte Class 3 code-signing cert to
> sign win32 PE files, and they show the security dialog when
> dnlded via link in IE.
> Also, self-extracting .exe files, generated with WinZip and Authenticode
> signed similarly show the certification validation dialog.
>
> Here is a win32 .exe signed with that Thawte cert:
> http://pages.istar.ca/~neutron/GuitarToner.exe
> It is a simple implemention of a multimedia guitar tuner gui using
> Win32 api.
>
> Cheers,
> - Michel Gallant
> MVP Security
> http://pages.istar.ca/~neutron
>
> ""Jennifer Lesher [MSFT]"" <jennle@online.microsoft.com> wrote in message
> news:#LxSZmA9CHA.1684@cpmsftngxa06...
> > Hi Gordon,
> >
> > I'll look into this, but I kind of remember some issues with Thawte
> > certificates, which is why I wondered if it had ever worked. I'm pretty
> > sure I've seen this before. More later,
> >
> > Sincerely,
> >
> > Jennifer Lesher
> > MCSE/MCDBA
> > Microsoft Online Support
> >
> > This posting is provided "AS IS" with no warranties, and confers no
rights.
> >
> > Get Secure! - www.microsoft.com/security
> >
> >
> > |
> > | I've always had this issue. I tried signing Calc.exe in the windows
> > | directory and got the same results.
> > | The file is signed but never displays the desired dialog upon download
> > | initiation.
> > |
> > | ""Jennifer Lesher [MSFT]"" <jennle@online.microsoft.com> wrote in
message
> > | news:DDkDII$8CHA.1536@cpmsftngxa08.phx.gbl...
> > | > Hi Gordon,
> > | >
> > | > So, has the certificate ever worked, with any exe? At first it
sounded
> > as
> > | > if the problem was with the IExtract packaged exes, but now it
sounds as
> > | if
> > | > it's all exes? Has this always been the case or have you gotten the
> > | thawte
> > | > cert to work with some downloaded apps?
> > | >
> > | > I look forward to hearing from you.
> > | >
> > | > Sincerely,
> > | >
> > | > Jennifer Lesher
> > | > MCSE/MCDBA
> > | > Microsoft Online Support
> > | >
> > | > This posting is provided "AS IS" with no warranties, and confers no
> > | rights.
> > | >
> > | > Get Secure! - www.microsoft.com/security
> > | >
> > | >
> > | > |
> > | > | Turns out we get the same result when signing a regular EXE
written in
> > | VB
> > | > | 6.0.
> > | > |
> > | > | Any ideas on how to resolve this issue?
> > | > |
> > | > | "Michel Gallant (MVP)" <neutron@istar.ca> wrote in message
> > | > | news:OkO7K1L5CHA.2420@TK2MSFTNGP09.phx.gbl...
> > | > | > .net framework seems to treat assembly downloads differently
from
> > | native
> > | > | .exe
> > | > | > downloads. I noticed this as well (whether or not the assembly
is
> > | > | Authenticode-signed).
> > | > | > Hopefully future releases/service-packs to .net will at least
> > provide
> > | an
> > | > | indication,
> > | > | > on web-link download, that the assembly is signed with a valid
> > | > | Authenticode signature.
> > | > | > - Mitch
> > | > | >
> > | > | > "Gordon" <jgord@hotmail.com> wrote in message
> > | > | > news:OYUZVLG5CHA.2088@TK2MSFTNGP12.phx.gbl...
> > | > | > > Hi,
> > | > | > >
> > | > | > > Does anyone have any experience in code signing software
> > | > | applications
> > | > | > > packaged using IExtract 4.71 (distributed with Visual Studio)?
> > | > | > >
> > | > | > > I have a Thawte certificate. Once we're done signing our
EXE
> > and
> > | > we
> > | > | > > right click on the EXE (locally), it shows the digital
signature
> > | > | properly,
> > | > | > > also when I run chktrust.exe, it shows that it succeeded by
> > poping a
> > | > | window
> > | > | > > indicating that EXE is signed by us. However, after uploading
the
> > | file
> > | > | to
> > | > | > > our webserver and upon download initiation, the message
displayed
> > is
> > | > the
> > | > | > > same as an unsigned EXE: "This type of file could harm your
> > computer
> > | > if
> > | > | it
> > | > | > > contains malicious code,"
> > | > | > > instead of: "Do you want to to install and run "AppName.exe"
> > signed
> > | on
> > | > | > > 3/4/2003 and distributed by...."
> > | > | > >
> > | > | > > Any help is truly appreciated.
> > | > | > >
> > | > | > >
> > | > | >
> > | > | >
> > | > |
> > | > |
> > | > |
> > | >
> > |
> > |
> > |
> >
>
>

begin 666 GuitarToner.exe.png
MB5!.1PT*&@H````-24A$4@```8X```$@" (````L< .U`````7-21T(`KLX<
MZ0````1G04U!``"QCPO\804````@8TA230``>B8``("$``#Z````@.@``'4P
M``#J8 ``.I@``!=PG+I1/ ``+=Y)1$%4>%[MG0ET%<>9[_7.G#/OS)O,RTQ>
M,IG)\I+,<U9G<Q+/3)*)0U9OB1W;6;S$(?%DG&"#;6*,P08,MC$VB\&L9E\,
MF,WL&# "@<0J!!+[(D" 6"200"#VK5]=%:FIU-;5??OV[>K[UZG#N?2MKJKO
M_WWUJZ_Z]NW[/[96K2W"'Q2 `E @P0JT?:I3$4&5AS\H``6@0%(5Z-Z]>ZM6
MK:ZCB@`+!0I `2B00 5$5/VO&QZCY6\__3@I[_L,*6W?]]FV?T?*Y]K][Y;R
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M?@(8"%7T$T!Z2H2?``)50!50E0)4L3O/*:T$<H5$E3*KXE,GX68%^A:[6>'/
MM,K<J<"?16]6H$?(S0KT!;E9@;X@-ROPE<EK>K,"CRJ^`KM9@3_(;E80FL(&
M$!M ; "3L 'D;X_G,ZP`J&)S6[D!I._2^ZKH:_Z^*GI$1A4]3N^KHJ]M4$7O
MJZ+U>531(_2^*OI:N*^*'B2THB_H?57T-5 %5 %524"5G$]18 5 %;\!I-.;
MOU9%C_!_R4&5,#"@"K> XA;0A-P"2N:F\ E@!%F5#:IT=ZM36 3*JF3VL0U@
MH*R*MD/O5J>O@2J@"JA*)JKXZU.YNE9%*6"#*EJ37E:GKX4-(/E6#3U.OUA#
M7],OUM#70!6^6(,OUJ3CBS5D.K.L*B>?`%)D"#<KT(/L3]X`LK?XFQ7X4]AW
M`,.ABGP'D&]->5F=5*#?`11&BVM5N%:%:U4)N5:EO"G4ZEH5OJZ,KROCZ\KX
MNG(NOJ[,9U7FV]:!*CQ9`4]6P),5\O9D!8(JPB#+OZR^6(.'P. A,'@(#!X"
M$_HA,(0^@?["?P<0J *J@"J@*C2JPCVR"D]6P),5\&0%/%DAUB<K1(8JR^<S
MH!H4@ )0($X%\&QU/$X>"D !!Q0`JAQP4IQK%_J"`LE4`*@"JJ `%'! `:#*
M`2<E<Y7#J*! G H`54 5%( "#B@`5#G@I#C7+O0%!9*I`% %5$$!*." `D"5
M`TY*YBJ'44&!.!4`JH J* `%'% `J'+ 27&N7>@+"B13`: *J(("4, !!8 J
M!YR4S%4.HX("<2H`5 %54 `*.*! =*C:7+%EZZ:JG7OW'3QZM.[8\>.L'*\_
M=OS D>.5._>75U145JZOJE@9)XS1%Q2 `BE0( )4;:DJWU6]9_^AHPV-)TXU
MG3QSYLR%"Q<O7KI\\3(M5RY<NGSVW(7FYC.-)T_O/]JXOG)+V<JR31M6I4 ^
MF `%H$ \"F2-JNW;]]4>;6AH;#IUZNS9<P115Z]>$WX;AO[WXN6K9\Y?.ME\
M[MB)T]4'CRU;O:%L1?&6RC7QV(E>H `4<%J!\*C:7%6^<5OUH<-'&QL;3S>?
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M%\[2X8 ?B3"OA+<,72M!8&.UK(.N4UD3Y1%A).;V>:"813:C2GA71PUE%T+
M""+[Q@D/`GMS9']9^EJIIZ_WY<CQ-=-FA)%@R*:1P*A:6K&]:L?>ZMK&QO-7
MFBYYQ\]XQ\YZ]6>\NF:O[DQF<_?'5XION'?Z+>W6=1JZ_LPUK]^D\J)/_:D%
M5=T_=]?P#0<NU#9[>TYXU0W>WB;OV&5ORY$+\];LGKIL\X !;Y0L76 S:&4=
M\XHMK G\2B[#3C>]64TY-'7S1. 7WY?O!)#'K#S=-YZR`8<\AY5'=/-3..X[
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M\PS,TN\ZF"H[M5%)D$(I@BX.!:<(KI>#W*"P'!BRVD$G:23U`Z-JWO+UQ>MV
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M[__X>,^7NJ55:-@%!:! -@H$1M6TQ:LGS"N;4[9CY>Z3]*H3`1,M9%M']G0;
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MRML/7'#K[7?VZ]USY8K%@<RS=YM]S4 #*(3*D4@G-V)HUO I9#8`-8PA$AOC
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MVN7NG]XY\LV!X;X`2*4)=.<(OS(K'<]_:L978*^%"D+O0C7^O\K1^G:AVV;*
MP^!KANM7$$=IJ3 >E@0)AO@.3\Z>^"/"NX*G6./\"SGG"C0&OK(RJ'21HPL`
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M.?M-7T[=@\:A`!1(I@+19U6\G01,0\=->FSHBO;CM]P%5/WYQS63&0H8%11(
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MS'"B?$H*`@4F0('\*N VJG0\TEVE,APW(T^@#S: ^8U:]%Z "KB-*K;CX_=K
M\IY+)HON:K?O%2[=977EY3#E5K0`@PPF0X'L%7 >5=E+@!:@`!1(O@) 5>:>
M!A0H``42K@!0!4Y!`2C@@ ) E0-.2OARA^%!@1@4`*J *B@`!1Q0`*ARP$DQ
M+%GH`@HD7 &@"JB"`E# `06 *@><E/#E#L.#`C$H`%0!55 `"CB@`%#E@)-B
M6++0!11(N ) %5 %!:" `PH`50XX*>'+'88'!6)0`*@"JJ `%'! `:#*`2?%
ML&2A"RB0< 6 *J *"D !!Q0`JAQP4L*7.PP/"L2@`% %5$$!*." `D"5`TZ*
M8<E"%U @X0H`54 5%( "#B@`5#G@I(0O=Q@>%(A!`: J@RK^EP%U/SL:@S/0
M!12 `CH%@*KKJ%(*E,!?1=;]WBH;?]!?(90QC=D"!1*H`%#E$JKLT6E?DP9E
MT/H)#&4,*=T*`%7JB2K_1JGA%P"%M^2?_V,5?&L:HLW\&_0,-\+/T#,2\5W[
M_F2TS@1^#,I?.=0-4NY=0*3\ZXWIGGBP+J@"0)5XK8J?0I936I>8R+R3&[=/
M:H*BRK"EE;$K,,BPG=1IHD2YD*^Q7G3*(+\+.H$+ISY0Y9]5&:[F*&<X7Y^?
M>_)$%6J:PXX_G4_3E%@1N*8;DG"NS$TSF/A42$E2:K[23&6"IN-=X4Q(6*I3
M`*BR0I5./AE5AB.ZG,(R.F7Z*',6<R8HOZO#DSD!E,%D0)4AO[-/*BU50K6T
M*@!4!4.5DA>6L]J *MT\%\+.GHS*=(^AS0P:^UYTABMS2?F@( BPE5;*1&(7
M4.6/*GX7X\L.8<MCV #*S=H`2]Y,Z39W_&8JT ;0/#">+T(7O#C*_9TA@^/W
MDI%$-AI)F0) %>Y6AP)0P $%@"H'G)2RY1'F0($0"@!50!44@ (.* !4.>"D
M$$L03H$"*5,`J *JH `4<$ !H,H!)Z5L>80Y4""$`D 54 4%H( #"@!5#C@I
MQ!*$4Z! RA0`JH J* `%'% `J'+ 22E;'F$.% BA`% %5$$!*." `D"5`TX*
ML03A%"B0,@6 JNM?5U9^H=?F^\/)#XAT6)%\G3'"G"H`5*F?K" _`T#IAO@I
M$.+A<[IG5/E:%+]U.8UU-.ZT`D!5H:#*,DR!)TNA4"UF!8 J-:J$3$3W-"66
MX\B/S9-/$8Z$@(+\+#K?QU>1>#+;(H]*:93AZ5<QARRZ*TP%@"KQ6A6_]9.W
M3@)?E.Q@=)";LMQ7ZF)1UYVY(]X*`Q]UQ@H/R5-:5YB3!U;'J0!0Y9]5\9E+
M-JB2,Z"@GLX%JH11V8!)KA/4$-2'`D$5`*JL4!4TS3%/^*!.8DF3#$U[LLA)
MDV7V9]-%.(MP%A2P5P"H"H8J759%I[V<]<B7B@1 V+M*V;4-1PP;0/O3(]_,
MVAN.FE" * !4^:.*84AYH4>')Y8!L3@3CA@N&RE#4X<JN5EE1_PX!:HJ6^"1
M:AAY4"LPZZ! . 6 JLCN5L_+%1R9%&!'N)F LQ*N`% 5`:KX)(7?*,7@>Z J
M!I'111(4`*HB0%42'(DQ0(%T*P!4`550``HXH !0Y8"3TKU:PCHH8*,`4 54
M00$HX( "0)4#3K)9<U '"J1;`: *J(("4, !!8 J!YR4[M42UD$!&P6 *J *
M"D !!Q0`JAQPDLV:@SI0(-T*`%5 %12 `@XH`%2)C];#=^C2O3C#.D<5`*K4
M3U9PU)U9#MO\Z(@L&\?I4" ;!8 JH,HG^4>:F<T$P[E1*0!4:9]7Y?N )^(#
MW>/THG(/WPY[:)3PM!GAN0YR-=\G9[%>E";KGH=%S^*?VR=8;3XQ%Q*AS10K
M`%2)UZKX&<BFHG):*A^JE[M8,3\/2T:&S1$9+H+)\G\%KLD/P!$$E 5!FI:[
M($EQRT"5-JN2IYPP^9. *B&'DG'&5V#CU\%"64&H;.A1R %U2190E6*@Y,XT
MH,IA5"G!)&<]RNA19D/RUE*95_IN_<RI&5"5N_F<XI:!J@)"E9P?&7:[RNM0
M9CCRA-+U9=A1IGB:P;3L%0"J?%!%IQ:?@\C[/L.EY>P]Q&=)PDCXL?&CD@<L
MC%](J02+=+TPKO$5S$A2]HNL*L*H*)RF@"H'[M/UO5"MV^(53AS#TM0K`%2E
M#55R3I3Z((:!A: `4.4,J@HA'&$C%- I`%0!55 `"CB@`%#E@).PTD(!* !4
M`550``HXH !0Y8"3L*)"`2@`5 %54 `*.* `4.6 D["B0@$H`%0!55 `"CB@
M`%#E@).PHD(!* !4`550``HXH !0Y8"3L*)"`2@`5 %54 `*.*! .E'5O7L1
M+5B+H `42(<"*405(=3RY<L]KX@4\D<L3(>K8 44*&0%TH8JGE,$5819-K3B
MGQ<N/SF/Q4>^G@DG]\L_S"]'H])UFG<U7)FNND#*D;]D66+K*!Z/I!!5C% T
MM[)!%=7:\$!+&V?D*#+RA8Q\]6LC=;[JA'"Q[I0032FMCJJ=?$EJWV^J4,52
M*O*BA5"9/:!E8@54"4$#5$62IP!5]C RUTP;JN@E*AY5]HF5,JNB>T,A[>(/
M\ALB?E_&V,?O+H7*RCAF]5FG\L"4&T#A1-[Q\EMR+\+.CK=:V3(;`S\\W>#Y
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MUG;R.WGRVWM:?1JA72E!E4PE`5XLU8I0.V53<L*%.>"KN2R:[RF15X";(I<T
MV@;3@"IAW\%O6(37T6J'UJ `%(A-@92@BNA%+#'_Q:8I.H("4"!R!=*#JLBE
MT>WO^"N:0IWX-Q'Q]QB/SN@%"J3PLGJ<3DT:&I(VGCA]@;X*2@%D5<&>?Y@T
M-"1M/ 4U>6!LG H`5=<?_\(^A+*YL86_-T=Y<XUPATZ@>UMT=_<(C<A=).%S
MM#AC%WT5E ) U5\\J8IGD/(ZE/GF.OY=>KKO$2$MDJ$6[DA!!3&,+00%@"H?
M5/&W.PCHD3=?OF#B+\DK]VZZ-GW!)XRS$&(7-A:4`D"5"56ZC$9&DB]*6%0I
M-X/*=_DV[=LOJ/"%L86C`% 5#:IL-H8TI1(PAPU@X4PV6)J-`D!5^ T@0X]\
MA4MW:5S8`.KV@,(%<L.%=KYK_BQER]D$"LZ%`OE5`*@*=K-"?KV%WJ% P2H`
M5 %54 `*.* `4.6 DPIV(87A4( I`%0!55 `"CB@`%#E@).PM$(!* !4`550
M``HXH !0Y8"3L*)"`2@`5 %54 `*.* `4.6 D["B0@$H`%0!55 `"CB@`%#E
M@).PHD(!* !4`550``HXH !0Y8"3L*)"`2@`5 %54 `*.* `4.6 D["B0@$H
M`%0!55 `"CB@`%#E@).PHD(!* !4`550``HXH !0Y8"3L*)"`2@`5 %54 `*
M.* `4.6 D["B0@$HX#"JS#_*8O^3+>9?"<TR1'0_NI5EL[D^W5X].I*$FQG4
MG%S+FZ_VY9\^RM=(0O0+5%V?9KQV$4:V^0=*#0Z+< SV82'_2IC-N8:?,K0Y
M/;8Z.5V38K-"V9%-M(0.Q?R:QGIW&%5L,><7=O***] YC>#0\6$3?+ZF!:T`
M5 55+"'U@T9+T/I),#/]J!*27ID=\J]^ZM($F]\'59[+[X]DPO(_-<IB0OC]
M464=VI2RIF"F4(>=*(0@J\8&;&A''JIL9J!AZP;#EA_9"F%E$M3@1Z@TV49D
M&=\V$:5<_P0U=+X3ALJJR2-AL60P1!==2:!/H#&D'%4&,/%N-B1H_%O"5!1:
M4"9T_"FZTPTG6@[,,!*E`LJ@%RP5ZLCM"" (H:=RV#)]9(0I9?$=H1(?LOA"
M-5\=S#&F:]]P5C8]!AU,(%CDM[+;J%).#UW(FD'C&^B!<""OYX9579D+&)90
MF1'FL0G+LKVE_#3C&[&9S#;U#:@28,34$]('&:\&,1."*E]X98DJ@[ME5?-+
MGT"]`U5_\>F538)CDZGI4&7.DGC/18@J959B8ZF *EU@*:>6S 5+PMJ+(*P]
MOCT6"*H,[@:J\GQKDDV:("_@;'W695O"G#&P@W]+F7'H)I7-R&WJ!,KX;!H,
M@6-EAFL&HB&K\LTL=+F)H<=PJ!+288,R0D0IF6OC*5_;Y7BS"<Y *4P"*SN?
M5?GF*?*.0 <I(7/6A1J+72%J9>39S%YY>'+V8:[#S.$')H_-$,VRI4J<Z8:A
MFUJ!ABW/#=XN@VGRBF*)) %J-HY@IRC'9B"O(69DO\AZ^L8P/PN$RH(:LC@)
MI))R2&E 50Q:N^)@5\89@\LB["*_JN:W]PAES+(IH,IG]RJLGUG*G>O3$=;1
M*IP$[\.GU*= 59XOM$4[M= :%$BK`D 54 4%H( #"@!5#C@IK>LD[(("]@H`
M54 5%( "#B@`5#G@)/N5!S6A0%H5`*J *B@`!1Q0`*ARP$EI72=A%Q2P5P"H
M`JJ@`!1P0 &@R@$GV:\\J D%TJH`4 5400$HX( "0)4#3DKK.@F[H("]`D 5
M4 4%H( #"CB,*B_5?ZU:M=(M./S#:E+Y6FEXJKWM&=Q=L(8+8> VJNRS1[=J
M4J\84)76\"56ZQXD0$QVRXGVHS6[NV -!ZJ<R77-J+*?":[4O+YL%A7ILBI7
M# DZ3J#*1C%D54DDETU69>-=M^H`56"T(6*!*N=1Q3\HV=W7)$:!*J *J$HB
MCWR]8K,!3,<C(JD50!50Y3LI,H'BW-6[: ?,?Y26]WU3S!M PR\@Q"E%#*C*
MG9>S63.BO59E^!6,<-XTFY8[PW%979%A)>U7/>Q1E4V@T%#@6\B^M6PF0ZY1
ME5,O9R.=NZC*QFJ61UO&#*Y5B=-5F+V6.D9;S1Y5V?>;9;1E/P#60LRHBG#D
M6<9,Y*@2EI\L76PX/<N6S88CJPJ052GW"\)VB5W)SM)MO&/L495]I[H6E&8*
MB5A4.\=XKE4%LI2:QIPB6VK0)R@$XT25/&QFILZ;? 4*9>$4%A6":+XZ`%6!
M+Z(+02SXAI^?0OC*GO-UCTT%>U39M.9;QTP<QF)^WN9BYYCWK$I>=>QMSV;-
MB!Q5S#O"^)71ZWL=0 <F/@;DEGVC#AO P)R2LW<SJMC$UL6QC9/,=>Q1E<T,
MD<>@S"/D155818.NI;I^\X4J7X?*(O.GR&$0- `2@BI!!V%E4BY.AIEB(P*R
MJL"T"I=5^2Y'-MY2UK%'5>@NE">:(\^P1$<RC+R@RI!H"+D);Z,27J%%R 6J
ME"F/958E&&*SR4!698).A#<KA$-5.K(J99#I(L_F>(@92YN-&54Z]P6%5S*S
MJFQ0%6(Z`%4QH8KZE?WQJ:_A8&JR*ME&@R!"<I'][H\UF&M467I9QV[!4D$T
M.<^R1W:.LBIY!\<KH(Q>I3=MLBJY91OSL0$,O '4R9I-_-FX2E?'?@.8KQ%F
M8YU\;CQ95;1CCK"U:%$5X<!RW110%0Q5?#XEY%;Y`H$]JK(,)J7M6;89^O08
MLJK08\OIB1&B2A?,^8IDLVY 53!4Y30*PS5NCZIDAF!0JY%5F1^M%U1/5^H#
M506$*GJ-( 7_$A.052D1$^''1TE#&%!56*A*6OR%'@]0!509@N=Z>) :SL';
MN0';SV&;#2"ID[X_/+!8#I*"C7-!"K=1E;ZYRBPR/UN=O)O6/]W5-S)C"]/=
M!6MX>E"5UKG*[-)E889/>=+QEM+P@G5WP1J>'E39[Z=0$PI `=<5<'@#Z+KT
M&#\4@ +V"@!5SG]<:.]LU(0"[BH`5 %54 `*.* `4.6 D]Q="3%R*!"5`D 5
M4 4%H( #"@!5#C@IJG4)[4 !=Q4`JH J* `%'% `J'+ 2>ZNA!@Y%(A*`: *
MJ(("4, !!1Q&E<TWPE+\5<^H%BNT`P6<4,!M5)F_'D4<`%0Y$848)!3P5<!Y
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MM2_4MY'+UW"Y`F\7\Y1.3 `E=PH0S9W/JOC8%6)(F7'0$!<`P28,.RZ\H*<P
MG-'Z-([901YVO,^$$VE3=!C"Z<)4H2?RE97#X <@M*Q\B\>HKD%SITQ#P0KY
M.-\^[PYJ..U%UQHO%#]F=J+@`E^Y; S7=21X2N?KW,W5`F\Y/:ABBZK "-G!
MC#*,%#PRA"G*(XEU0>L(+&.+/#\A6?I SV6GT%$)$U48JCQ./G'0L56P11@`
MWR9OOGP6?X3OE]DN8X+1Q]":``)64VZ-OL6$TIT8:.1R(\K3:35Y-6+^XB.A
MP D2F_EI0!4_&P7A!&JP$!3FGHPJ-B&5:ZD25?S4XJ<$11)_"E^3;]\&52QQ
M4&86_!P39AI_HN6,Y6G(GZYDJ&R@\HB!.#KHZ&11HD16((3A9E0)+HAMKA9X
M1RE!E1(3E!%RH#-VL-DN+*'L1'YCPIH2\BQ:F:W_[(40[OP\9&_)_?*CU1%!
M=[HP0CGODU7R[4))V'A092FIP4?"..VU]445[X(")TALYJ<'54K)E*B2-VB&
M+(F?_T+:S^]W* 78M!%FA7RB;H+I3N3IR7<DS$;+MY2],.:RT5IV*F2@\CP7
MS&>]4Q$,N#1(RO?"-H^^(S<;K@P,?HT1.E*NA;%-W4+KR&U4^7I+N0&4#](C
M[#A?07C-DG]ACM&1T'?E4<E[$+ZFKCO6H- L/P9AMMB_Q0]2-DIHAQ\)LY2U
MP*NGM(6VQB-)>2[?,N\+@Q-ES/F.7&>XDCM"2 BC4@[,-R91(9P"#J.*G_^&
MU_:ZL#59>"&WH%OM[?M*;$TE4$*/EE<RVAQ$=D&T(P]M,D[,D0(.HRH7BNB0
MITN4<C&&O+<9;;(@9Y11&2CGL-&./*IQHIU(% "J''C\122>1B-0P&D%@"J@
M"@I `0<4`*H<<)+3BR$&#P4B40"H`JJ@`!1P0 &@R@$G1;(HH1$HX+0"0!50
M!06@@ ,*`%4..,GIQ1"#AP*1* !4`550``HXH !0Y8"3(EF4T @4<%H!H JH
M@@)0P $%@"H'G.3T8HC!0X%(% "J@"HH``4<4."_4:5[K@".0P$H``62H$#F
E9R#,/U.,=Z$`%( "25#@_P,$F/PE@LZ^C0````!)14Y$KD)@@@``
`
end