From 283f9b81ae3515eb79254c560cc6620be2b1dcbf Mon Sep 17 00:00:00 2001
From: yackob03 <jacob.moshenko@gmail.com>
Date: Wed, 16 Oct 2013 14:24:10 -0400
Subject: [PATCH] First stab at token auth. The UI could use a little bit of
 polishing.

---
 auth/auth.py                    |  78 ++++++++++++++++------------
 auth/permissions.py             |  19 +++----
 data/database.py                |   7 ++-
 data/model.py                   |  89 +++++++++++++++++++++++++-------
 endpoints/api.py                |  86 ++++++++++++++++++++++++++++++
 endpoints/index.py              |  57 ++++++++++++--------
 static/js/controllers.js        |  49 +++++++++++++++++-
 static/partials/repo-admin.html |  66 ++++++++++++++++++++++-
 test.db                         | Bin 69632 -> 69632 bytes
 9 files changed, 360 insertions(+), 91 deletions(-)

diff --git a/auth/auth.py b/auth/auth.py
index 21c28d420..2d77d6094 100644
--- a/auth/auth.py
+++ b/auth/auth.py
@@ -32,19 +32,34 @@ def process_basic_auth(auth):
   credentials = b64decode(normalized[1]).split(':')
 
   if len(credentials) != 2:
-    logger.debug('Invalid basic auth credential formet.')
+    logger.debug('Invalid basic auth credential format.')
 
-  authenticated = model.verify_user(credentials[0], credentials[1])
+  if credentials[0] == '$token':
+    # Use as token auth
+    try:
+      token = model.load_token_data(credentials[1])
+      logger.debug('Successfully validated token: %s' % credentials[1])
+      ctx = _request_ctx_stack.top
+      ctx.validated_token = token
 
-  if authenticated:
-    logger.debug('Successfully validated user: %s' % authenticated.username)
-    ctx = _request_ctx_stack.top
-    ctx.authenticated_user = authenticated
+      identity_changed.send(app, identity=Identity(token.code, 'token'))
+      return
 
-    new_identity = QuayDeferredPermissionUser(authenticated.username,
-                                              'username')
-    identity_changed.send(app, identity=new_identity)
-    return
+    except model.DataModelException:
+      logger.debug('Invalid token: %s' % credentials[1])
+
+  else:
+    authenticated = model.verify_user(credentials[0], credentials[1])
+
+    if authenticated:
+      logger.debug('Successfully validated user: %s' % authenticated.username)
+      ctx = _request_ctx_stack.top
+      ctx.authenticated_user = authenticated
+
+      new_identity = QuayDeferredPermissionUser(authenticated.username,
+                                                'username')
+      identity_changed.send(app, identity=new_identity)
+      return
 
   # We weren't able to authenticate via basic auth.
   logger.debug('Basic auth present but could not be validated.')
@@ -54,42 +69,37 @@ def process_basic_auth(auth):
 def process_token(auth):
   normalized = [part.strip() for part in auth.split(' ') if part]
   if normalized[0].lower() != 'token' or len(normalized) != 2:
-    logger.debug('Invalid token format.')
+    logger.debug('Not an auth token: %s' % auth)
     return
 
   token_details = normalized[1].split(',')
 
-  if len(token_details) != 2:
-    logger.debug('Invalid token format.')
-    return
+  if len(token_details) != 1:
+    logger.warning('Invalid token format: %s' % auth)
+    abort(401)
 
   token_vals = {val[0]: val[1] for val in
                 (detail.split('=') for detail in token_details)}
-  if ('signature' not in token_vals or 'repository' not in token_vals):
-    logger.debug('Invalid token components.')
-    return
+  if 'signature' not in token_vals:
+    logger.warning('Token does not contain signature: %s' % auth)
+    abort(401)
 
-  unquoted = token_vals['repository'][1:-1]
-  namespace, repository = parse_namespace_repository(unquoted)
-  logger.debug('Validing signature: %s' % token_vals['signature'])
-  validated = model.verify_token(token_vals['signature'], namespace,
-                                 repository)
+  try:
+    token_data = model.load_token_data(token_vals['signature'])
 
-  if validated:
-    session['repository'] = repository
-    session['namespace'] = namespace
+  except model.InvalidTokenException:
+    logger.warning('Token could not be validated: %s' %
+                   token_vals['signature'])
+    abort(401)
 
-    logger.debug('Successfully validated token: %s' % validated.code)
-    ctx = _request_ctx_stack.top
-    ctx.validated_token = validated
+  session['repository'] = token_data.repository.name
+  session['namespace'] = token_data.repository.namespace
 
-    identity_changed.send(app, identity=Identity(validated.code, 'token'))
+  logger.debug('Successfully validated token: %s' % token_data.code)
+  ctx = _request_ctx_stack.top
+  ctx.validated_token = token_data
 
-    return
-
-  # WE weren't able to authenticate the token
-  logger.debug('Token present but could not be validated.')
-  abort(401)
+  identity_changed.send(app, identity=Identity(token_data.code, 'token'))
 
 
 def process_auth(f):
diff --git a/auth/permissions.py b/auth/permissions.py
index 7ce41d7c9..c0661bbf2 100644
--- a/auth/permissions.py
+++ b/auth/permissions.py
@@ -80,19 +80,14 @@ def on_identity_loaded(sender, identity):
     identity_changed.send(app, identity=switch_to_deferred)
 
   elif identity.auth_type == 'token':
-    logger.debug('Computing permissions for token: %s' % identity.id)
+    logger.debug('Loading permissions for token: %s' % identity.id)
+    token_data = model.load_token_data(identity.id)
 
-    token = model.get_token(identity.id)
-
-    if token.user:
-      query = model.get_user_repo_permissions(token.user, token.repository)
-      for permission in query:
-        t_grant = _RepositoryNeed(token.repository.namespace,
-                                  token.repository.name, permission.role.name)
-        logger.debug('Token added permission: {0}'.format(t_grant))
-        identity.provides.add(t_grant)
-    else:
-      logger.debug('Token was anonymous.')
+    repo_grant = _RepositoryNeed(token_data.repository.namespace,
+                                 token_data.repository.name,
+                                 token_data.role.name)
+    logger.debug('Delegate token added permission: {0}'.format(repo_grant))
+    identity.provides.add(repo_grant)
 
   else:
     logger.error('Unknown identity auth type: %s' % identity.auth_type)
diff --git a/data/database.py b/data/database.py
index 8d2ad291f..04fd33b8a 100644
--- a/data/database.py
+++ b/data/database.py
@@ -99,10 +99,13 @@ def random_string_generator(length=16):
 
 
 class AccessToken(BaseModel):
-  code = CharField(default=random_string_generator(), unique=True, index=True)
-  user = ForeignKeyField(User, null=True)
+  friendly_name = CharField(null=True)
+  code = CharField(default=random_string_generator(length=64), unique=True,
+                   index=True)
   repository = ForeignKeyField(Repository)
   created = DateTimeField(default=datetime.now)
+  role = ForeignKeyField(Role)
+  temporary = BooleanField(default=True)
 
 
 class EmailConfirmation(BaseModel):
diff --git a/data/model.py b/data/model.py
index 8148cf6b1..5a1a3ff57 100644
--- a/data/model.py
+++ b/data/model.py
@@ -26,6 +26,10 @@ class InvalidPasswordException(DataModelException):
   pass
 
 
+class InvalidTokenException(DataModelException):
+  pass
+
+
 def create_user(username, password, email):
   if not validate_email(email):
     raise InvalidEmailAddressException('Invalid email address: %s' % email)
@@ -159,25 +163,6 @@ def verify_user(username, password):
   return None
 
 
-def create_access_token(user, repository):
-  new_token = AccessToken.create(user=user, repository=repository)
-  return new_token
-
-
-def verify_token(code, namespace_name, repository_name):
-  joined = AccessToken.select(AccessToken, Repository).join(Repository)
-  tokens = list(joined.where(AccessToken.code == code,
-                             Repository.namespace == namespace_name,
-                             Repository.name == repository_name))
-  if tokens:
-    return tokens[0]
-  return None
-
-
-def get_token(code):
-  return AccessToken.get(AccessToken.code == code)
-
-
 def get_visible_repositories(username=None, include_public=True, limit=None,
                              sort=False):
   if not username and not include_public:
@@ -485,3 +470,69 @@ def get_private_repo_count(username):
   joined = Repository.select().join(Visibility)
   return joined.where(Repository.namespace == username,
                       Visibility.name == 'private').count()
+
+
+def create_access_token(repository, role):
+  role = Role.get(Role.name == role)
+  new_token = AccessToken.create(repository=repository, temporary=True,
+                                 role=role)
+  return new_token
+
+
+def create_delegate_token(namespace_name, repository_name, friendly_name):
+  read_only = Role.get(name='read')
+  repo = Repository.get(Repository.name == repository_name,
+                        Repository.namespace == namespace_name)
+  new_token = AccessToken.create(repository=repo, role=read_only,
+                                 friendly_name=friendly_name, temporary=False)
+  return new_token
+
+
+def get_repository_delegate_tokens(namespace_name, repository_name):
+  selected = AccessToken.select(AccessToken, Role)
+  with_repo = selected.join(Repository)
+  with_role = with_repo.switch(AccessToken).join(Role)
+  return with_role.where(Repository.name == repository_name,
+                         Repository.namespace == namespace_name,
+                         AccessToken.temporary == False)
+
+
+def get_repo_delegate_token(namespace_name, repository_name, code):
+  repo_query = get_repository_delegate_tokens(namespace_name, repository_name)
+  found = list(repo_query.where(AccessToken.code == code))
+
+  if found:
+    return found[0]
+  else:
+    raise InvalidTokenException('Unable to find token with code: %s' % code)
+
+
+def set_repo_delegate_token_role(namespace_name, repository_name, code, role):
+  token = get_repo_delegate_token(namespace_name, repository_name, code)
+
+  if role != 'read' and role != 'write':
+    raise DataModelException('Invalid role for delegate token: %s' % role)
+
+  new_role = Role.get(Role.name == role)
+  token.role = new_role
+  token.save()
+
+  return token
+
+
+def delete_delegate_token(namespace_name, repository_name, code):
+  token = get_repo_delegate_token(namespace_name, repository_name, code)
+  token.delete_instance()
+
+
+def load_token_data(code):
+  """ Load the permissions for any token by code. """
+  selected = AccessToken.select(AccessToken, Repository, Role)
+  with_role = selected.join(Role)
+  with_repo = with_role.switch(AccessToken).join(Repository)
+  fetched = list(with_repo.where(AccessToken.code == code))
+
+  if fetched:
+    return fetched[0]
+  else:
+    raise InvalidTokenException('Invalid delegate token code: %s' % code)
diff --git a/endpoints/api.py b/endpoints/api.py
index 0a2ccf9a0..08344e38b 100644
--- a/endpoints/api.py
+++ b/endpoints/api.py
@@ -456,6 +456,92 @@ def delete_permissions(namespace, repository, username):
   abort(403)  # Permission denied
 
 
+def token_view(token_obj):
+  return {
+    'friendlyName': token_obj.friendly_name,
+    'code': token_obj.code,
+    'role': token_obj.role.name,
+  }
+
+
+@app.route('/api/repository/<path:repository>/tokens/', methods=['GET'])
+@api_login_required
+@parse_repository_name
+def list_repo_tokens(namespace, repository):
+  permission = AdministerRepositoryPermission(namespace, repository)
+  if permission.can():
+    tokens = model.get_repository_delegate_tokens(namespace, repository)
+
+    return jsonify({
+      'tokens': {token.code: token_view(token) for token in tokens}
+    })
+
+  abort(403)  # Permission denied
+
+
+@app.route('/api/repository/<path:repository>/tokens/<code>', methods=['GET'])
+@api_login_required
+@parse_repository_name
+def get_tokens(namespace, repository, code):
+  permission = AdministerRepositoryPermission(namespace, repository)
+  if permission.can():
+    perm = model.get_repo_delegate_token(namespace, repository, code)
+    return jsonify(token_view(perm))
+
+  abort(403)  # Permission denied
+
+
+@app.route('/api/repository/<path:repository>/tokens/', methods=['POST'])
+@api_login_required
+@parse_repository_name
+def create_token(namespace, repository):
+  permission = AdministerRepositoryPermission(namespace, repository)
+  if permission.can():
+    token_params = request.get_json()
+
+    token = model.create_delegate_token(namespace, repository,
+                                        token_params['friendlyName'])
+
+    resp = jsonify(token_view(token))
+    resp.status_code = 201
+    return resp
+
+  abort(403)  # Permission denied
+
+
+@app.route('/api/repository/<path:repository>/tokens/<code>', methods=['PUT'])
+@api_login_required
+@parse_repository_name
+def change_token(namespace, repository, code):
+  permission = AdministerRepositoryPermission(namespace, repository)
+  if permission.can():
+    new_permission = request.get_json()
+
+    logger.debug('Setting permission to: %s for code %s' %
+                 (new_permission['role'], code))
+
+    token = model.set_repo_delegate_token_role(namespace, repository, code,
+                                               new_permission['role'])
+
+    resp = jsonify(token_view(token))
+    return resp
+
+  abort(403)  # Permission denied
+
+
+@app.route('/api/repository/<path:repository>/tokens/<code>',
+           methods=['DELETE'])
+@api_login_required
+@parse_repository_name
+def delete_token(namespace, repository, code):
+  permission = AdministerRepositoryPermission(namespace, repository)
+  if permission.can():
+    model.delete_delegate_token(namespace, repository, code)
+    return make_response('Deleted', 204)
+
+  abort(403)  # Permission denied
+
+
 def subscription_view(stripe_subscription, used_repos):
   return {
     'currentPeriodStart': stripe_subscription.current_period_start,
diff --git a/endpoints/index.py b/endpoints/index.py
index ecf27d70e..375fa94b4 100644
--- a/endpoints/index.py
+++ b/endpoints/index.py
@@ -19,25 +19,26 @@ from auth.permissions import (ModifyRepositoryPermission,
 logger = logging.getLogger(__name__)
 
 
-def generate_headers(f):
-  @wraps(f)
-  def wrapper(namespace, repository, *args, **kwargs):
-    response = f(namespace, repository, *args, **kwargs)
+def generate_headers(role='read'):
+  def decorator_method(f):
+    @wraps(f)
+    def wrapper(namespace, repository, *args, **kwargs):
+      response = f(namespace, repository, *args, **kwargs)
 
-    response.headers['X-Docker-Endpoints'] = app.config['REGISTRY_SERVER']
+      response.headers['X-Docker-Endpoints'] = app.config['REGISTRY_SERVER']
 
-    has_token_request = request.headers.get('X-Docker-Token', '')
+      has_token_request = request.headers.get('X-Docker-Token', '')
 
-    if has_token_request:
-      repo = model.get_repository(namespace, repository)
-      token = model.create_access_token(get_authenticated_user(), repo)
-      token_str = 'signature=%s,repository="%s/%s"' % (token.code, namespace,
-                                                       repository)
-      response.headers['WWW-Authenticate'] = token_str
-      response.headers['X-Docker-Token'] = token_str
+      if has_token_request:
+        repo = model.get_repository(namespace, repository)
+        token = model.create_access_token(repo, role)
+        token_str = 'signature=%s' % token.code
+        response.headers['WWW-Authenticate'] = token_str
+        response.headers['X-Docker-Token'] = token_str
 
-    return response
-  return wrapper
+      return response
+    return wrapper
+  return decorator_method
 
 
 @app.route('/v1/users', methods=['POST'])
@@ -47,6 +48,13 @@ def create_user():
   username = user_data['username']
   password = user_data['password']
 
+  if username == '$token':
+    try:
+      token = model.load_token_data(password)
+      return make_response('Verified', 201)
+    except model.InvalidTokenException:
+      abort(401)
+
   existing_user = model.get_user(username)
   if existing_user:
     verified = model.verify_user(username, password)
@@ -100,13 +108,17 @@ def update_user(username):
 @app.route('/v1/repositories/<path:repository>', methods=['PUT'])
 @process_auth
 @parse_repository_name
-@generate_headers
+@generate_headers(role='write')
 def create_repository(namespace, repository):
   image_descriptions = json.loads(request.data)
 
   repo = model.get_repository(namespace, repository)
 
-  if repo:
+  if not repo and get_authenticated_user() is None:
+    logger.debug('Attempt to create new repository with token auth.')
+    abort(400)
+
+  elif repo:
     permission = ModifyRepositoryPermission(namespace, repository)
     if not permission.can():
       abort(403)
@@ -135,7 +147,10 @@ def create_repository(namespace, repository):
 
   response = make_response('Created', 201)
 
-  mixpanel.track(get_authenticated_user().username, 'push_repo')
+  if get_authenticated_user():
+    mixpanel.track(get_authenticated_user().username, 'push_repo')
+  else:
+    mixpanel.track(get_validated_token().code, 'push_repo')
 
   return response
 
@@ -143,7 +158,7 @@ def create_repository(namespace, repository):
 @app.route('/v1/repositories/<path:repository>/images', methods=['PUT'])
 @process_auth
 @parse_repository_name
-@generate_headers
+@generate_headers(role='write')
 def update_images(namespace, repository):
   permission = ModifyRepositoryPermission(namespace, repository)
 
@@ -164,7 +179,7 @@ def update_images(namespace, repository):
 @app.route('/v1/repositories/<path:repository>/images', methods=['GET'])
 @process_auth
 @parse_repository_name
-@generate_headers
+@generate_headers(role='read')
 def get_repository_images(namespace, repository):
   permission = ReadRepositoryPermission(namespace, repository)
 
@@ -196,7 +211,7 @@ def get_repository_images(namespace, repository):
 @app.route('/v1/repositories/<path:repository>/images', methods=['DELETE'])
 @process_auth
 @parse_repository_name
-@generate_headers
+@generate_headers(role='write')
 def delete_repository_images(namespace, repository):
   pass
 
diff --git a/static/js/controllers.js b/static/js/controllers.js
index 534ce6020..d6765a309 100644
--- a/static/js/controllers.js
+++ b/static/js/controllers.js
@@ -469,6 +469,40 @@ function RepoAdminCtrl($scope, Restangular, $routeParams, $rootScope) {
     });
   };
 
+  $scope.createToken = function() {
+    var friendlyName = {
+      'friendlyName': $scope.newToken.friendlyName
+    };
+
+    var permissionPost = Restangular.one('repository/' + namespace + '/' + name + '/tokens/');
+    permissionPost.customPOST(friendlyName).then(function(newToken) {
+      $scope.tokens[newToken.code] = newToken;
+    });
+  };
+
+  $scope.deleteToken = function(tokenCode) {
+    var deleteAction = Restangular.one('repository/' + namespace + '/' + name + '/tokens/' + tokenCode);
+    deleteAction.customDELETE().then(function() {
+      delete $scope.tokens[tokenCode];
+    });
+  };
+
+  $scope.changeTokenAccess = function(tokenCode, newAccess) {
+    var role = {
+      'role': newAccess
+    };
+
+    var deleteAction = Restangular.one('repository/' + namespace + '/' + name + '/tokens/' + tokenCode);
+    deleteAction.customPUT(role).then(function(updated) {
+      $scope.tokens[updated.code] = updated;
+    });
+  };
+
+  $scope.showToken = function(tokenCode) {
+    $scope.shownToken = $scope.tokens[tokenCode];
+    $('#tokenmodal').modal({});
+  };
+
   $scope.askChangeAccess = function(newAccess) {
     $('#make' + newAccess + 'Modal').modal({});
   };
@@ -512,7 +546,7 @@ function RepoAdminCtrl($scope, Restangular, $routeParams, $rootScope) {
   var repositoryFetch = Restangular.one('repository/' + namespace + '/' + name);
   repositoryFetch.get().then(function(repo) {
     $scope.repo = repo;
-    $scope.loading = !($scope.permissions && $scope.repo);
+    $scope.loading = !($scope.permissions && $scope.repo && $scope.tokens);
   }, function() {
     $scope.permissions = null;
     $rootScope.title = 'Unknown Repository';
@@ -524,12 +558,23 @@ function RepoAdminCtrl($scope, Restangular, $routeParams, $rootScope) {
   permissionsFetch.get().then(function(resp) {
     $rootScope.title = 'Settings - ' + namespace + '/' + name;
     $scope.permissions = resp.permissions;
-    $scope.loading = !($scope.permissions && $scope.repo);
+    $scope.loading = !($scope.permissions && $scope.repo && $scope.tokens);
   }, function() {
     $scope.permissions = null;
     $rootScope.title = 'Unknown Repository';
     $scope.loading = false;
   });
+
+  // Fetch the tokens.
+  var tokensFetch = Restangular.one('repository/' + namespace + '/' + name + '/tokens/');
+  tokensFetch.get().then(function(resp) {
+    $scope.tokens = resp.tokens;
+    $scope.loading = !($scope.permissions && $scope.repo && $scope.tokens);
+  }, function() {
+    $scope.tokens = null;
+    $scope.loading = false;
+  });
+
 }
 
 function UserAdminCtrl($scope, $timeout, Restangular, PlanService, UserService, KeyService, $routeParams) {
diff --git a/static/partials/repo-admin.html b/static/partials/repo-admin.html
index 10ebaaee9..967a36892 100644
--- a/static/partials/repo-admin.html
+++ b/static/partials/repo-admin.html
@@ -56,7 +56,53 @@
       </table>
     </div>
   </div>
-  <br>
+
+  <!-- Token Permissions -->
+  <div class="panel panel-default">
+    <div class="panel-heading">Access Token Permissions</div>
+    <div class="panel-body">
+        
+      <table class="permissions">
+        <thead>
+          <tr>
+            <td>Token</td>
+            <td>Permissions</td>
+            <td></td>
+          </tr>
+        </thead>
+        
+        <tr ng-repeat="(code, token) in tokens">
+          <td class="user">
+            <i class="icon-key"></i> 
+            <a ng-click="showToken(token.code)">{{ token.friendlyName }}</a>
+          </td>
+          <td class="user-permissions">
+            <div class="btn-group btn-group-sm">
+              <button type="button" class="btn btn-default" ng-click="changeTokenAccess(token.code, 'read')" ng-class="{read: 'active', write: ''}[token.role]">Read only</button>
+              <button type="button" class="btn btn-default" ng-click="changeTokenAccess(token.code, 'write')" ng-class="{read: '', write: 'active'}[token.role]">Write</button>
+            </div>
+          </td>
+          <td>
+            <span class="delete-ui" tabindex="0" title="Delete Token">
+              <span class="delete-ui-button" ng-click="deleteToken(token.code)"><button class="btn btn-danger">Delete</button></span>
+              <i class="icon-remove"></i>
+            </span>
+          </td>
+        </tr>
+
+        <tr>
+          <form name="createTokenForm" ng-submit="createToken()">
+            <td>
+              <input class="form-control" placeholder="New token friendly name..." ng-model="newToken.friendlyName">
+            </td>
+            <td>
+              <button type="submit" class="btn btn-sm btn-default">Create</button>
+            </td>
+          </form>
+        </tr>
+      </table>
+    </div>
+  </div>
 
   <!-- Public/Private -->
   <div class="panel panel-default">
@@ -113,6 +159,24 @@
       </div><!-- /.modal-content -->
     </div><!-- /.modal-dialog -->
   </div><!-- /.modal -->
+
+  <!-- Modal message dialog -->
+  <div class="modal fade" id="tokenmodal">
+    <div class="modal-dialog">
+      <div class="modal-content">
+        <div class="modal-header">
+          <button type="button" class="close" data-dismiss="modal" aria-hidden="true">&times;</button>
+          <h4 class="modal-title">Token code for {{ shownToken.friendlyName }}</h4>
+        </div>
+        <div class="modal-body">
+          {{ shownToken.code }}
+        </div>
+        <div class="modal-footer">
+          <button type="button" class="btn btn-default" data-dismiss="modal">Close</button>
+        </div>
+      </div><!-- /.modal-content -->
+    </div><!-- /.modal-dialog -->
+  </div><!-- /.modal -->
   
 
  <!-- Modal message dialog -->
diff --git a/test.db b/test.db
index 179b19de4a664e47ed3df83801c4a01a53cc08fb..70f675eb8b5456ef1685ecf21e299269f3c919c9 100644
GIT binary patch
literal 69632
zcmeI5d5|5~b>6%CzQJIy6X5U>1VPRKB*7sGyxtdXAP9^gE}*zCvRP2Cz>ok2o&mU+
zid2tuV!KqSN@AC6|KV6mx#A@$mt(t<$VtUY9J^d9%eGXO<&quQk{rpBU5Qj$;y9_w
z@7}j{&otI2$pqOWs_|Ygx9_>jx#xW6JNG^D*ux8F@|j|B>12Fn#?e}uu50(r%xIc^
zwWeu@`2XPV7Cy8FU-(xqeLlxW%GmpbJri7ABfcQ-xkLQD__p}E_#5%%-idQO*qm-!
zplN~cRtwy+i;`w;;IMr=hppQ<Y}m+Q-CB9n#kVy6YyO%RXj<Uy&;nDs(6%32ICK1L
zvJQE5@okO&n!lz6nihClw7`_uKGmE5a{U+Li_Cv)@-MzEgl~jwTHx)}0+T{$(@S}r
ztu=(!et8Lhe=P<;JI+onoRaIm5MR>7cf^;(-@cuirIEF1fwxBstQFI`od04<v~@NA
zjkTgZrRKj}{|#}cCjKRd=C5girUfpt1rlSew!J%X&y;rhY;s~Dy~&Pmvh16lwt{^R
zo_*=Wslx{!&5l3t%p*U%?}4Y!zWd#eKlGHH9(?j_`i_SVKIJWC%g+X9k3aIvBi53?
z_{<A&x|r-cxww2hKlS3`eaBA53n%uaiznZsuhn*TC%h>w%U?PZCnxg$TYl(?L$4ll
z7fzpgVe!O)&T~u09(s83O#ak@mw3^9c<hN6&c1Ny>@ja?--)xwy=PB9c>m%7^Pv}(
z)8mUvOZN@Rl5ddfzajow6W`>}{537mw7^@l1=fk}dQVXq>&4Egfez@+|4(S*6XGjx
zO~D(fnihClw7~V^9{pT~gwYn>)VbIH?`Y!xitoHFTB#ATX@RB%T0+weaKS0*|F6|v
z()jQ1^#%QpjU7T4KOlbjd)q`^L!WHle6!v?telz?i^mpDE$2%wEu?w*vvKh8`2$bR
z&pdhH{)gvhc9k#fnz?n?Lbhw>fk&R4KRo~V%p>o5a^{hz9)5V{(Z?S+a^UgjW*(Y<
z?v9yVr{a_Ou9>F~Jbv(<2OhuG_Pn{_opUFQ$##c2T(xj2%U>xMepEhIJ|X%QdFqh|
z9(!t@mmZpbwpt(c$gY`pJyJa_tEuWR_kx&gPfzRJKuNr`cp{hoZ&f9fr@jl49cry<
z-#D$ON-$Zbs-65W(SKiGg5kAZ%?GdV)wr8Zs4BlPr>cCG4wC<0Q?0T*b&*w;x1Og%
z=&sZ8^76}zOWD!m@$&I%zi~B}ZgKVOus6B<QogiMEaVJ|CypF=_+dsy`RekSrG?Y^
zQ8{MH!(r~(HIwZ<^oy<<OIGpdpq}#I$=aT;+}3M5c}lj!;Ne|!k4&y<&ra)SM+GYZ
z<PB@jU20!QIgkcL_D;<`v35;+Zd!kNRNhb~dFNEMYvrk<!yBq~9G#w%^S{FC``%9c
zru3!-nihBywSb)e6WS3?JEEV}|F`jv#E*?pxz}%=VoB}jZ@j8j45hcy#Z$$CBo{9%
zo?3NceRVBab^Rh2mUJ;Y*DBAtpfq8vt?>B#JLVssf8^l&6C-8IjdL?{DSG+nQofv@
zsb5W0O^^0vtG^{B<Z?!?Mu#wAo_yfQ{BSjz>uT#J+fhgF-mG-_DzPaz%U7M<Si5Mf
zx=lUY)Ay^c$@Wx@HP<!PPqz0{h27_<Lci5k6|t$h%&fYuR!_Ce$|Y>o<-rmu@0fdi
z?S{$r+?@W#Lu$Mfd6qB9HdCfo_1os^NU2`D$YFAM1A%o^+NDaQRn}&C1eFcOevQ;f
z8WoVAVmOtpkI|5LX(J<IPVcr=cT~k2G->thmTE^-FAg5*jf3j7N*74{uUY@c(0R?H
zO$%JXEzr#WE4cHTsy8h#W(zd_|CkNfJl?dx72E>N`hNv?UQ_j^1;%WFX8w=afX(Ag
z3tYi1AnpG(+G863eM<i^;|}AO#M-gMdH*JGWq`~cu3SYPkB*?w>V>P$i)D_UIv1Q-
zx?`^EY@TfY05w>wgHlI#mMQ}-TdmKwetoL({^~uY=Sv?I#4C~S>dg{!9ld%N@rBVh
z`N&*%cFSb@UDW!S3)H#~Vpog5`V#9qM8Yqorh}X3-h0(#dv;du9#m-kOAE^j$-;?+
zGp~+5P50~3Cv1!^TqHt&9(KUo4{lx4zI|4IO|{RcWJPTleZ8h%gFeAwbfHAh7@d^W
z>XRMLZd1a&;VI#k^3#jU3uhLWULAdESA`p0xCG&rPsizbLRIIHpCL1<_l1KIqkH?c
zQ=y0~UrwPx$XML2nJ4F;eR8f@|HsmH&BIL#T+uDi%>OI8`<lu(EihIKNc&&q|9z{;
z{~N0zn}?egcr&-aIyV2<ae8UtB?wk(|F2#$pj`hA@l{QHwb=pe&D?!W-I^8{uLahN
z9eRKM8*=}z-u##A|Ag^PP5g=YXX32z_}Kh4E%26Zf&CL}w4K}ac#s3Xd^}#tGvf*M
z&&&wdyJIFkwRq-uzBD5t(3vzoHKTUV*>`VijkbMu>iOOj>K)}{kE)G8N+rykK6~PX
z+_qyTd3A=8W=L*2k?q?qsKBf~+|=V(ymTx+b>?h*%9uB}v_pS!P&c;dIDI02#W>je
zw_NtiY~VR_GCuX{OtKW8N{{Eu)Hj<s6CYdNw?|hZT7zPi7i2NU6Y8H*A^YU|KOy)3
z`YJnfe@pyNJ~n?%3p6e87HWYBq3gy(OHAo4^--v!(GvQU(To2*t!Yndf2coe{A+QI
z_{s4_f92}Q_B}+3ZdAdVkw!f_3QG{e7@fbi8nqc+s6NmO|BbH7&_<<1;%F1o#2<Ne
zu=3S1wxYr>y=2&7fakjYyQ{Ij(M#0rqX+BiFf3XI_ImN8*B`rPvb}q^{v!)2o)o8P
zzPx;9@x}a9>En)SM5%P;B11~W(n5YJJMn5ixK&Oqp(f`~iz-QY!Q`mXz2#`qxig%2
zxk@d*aKWR5XBD72lb<}jxD+qFT9Z>Xcf38>-n(1xZd6@cYAu!WRQi5>ZI_mADCJ0%
z&Pv&O*-`JkmO;dudO_^cE#!m^0)q_T(uJMX5nQ@beWW*hN|)tJD~0Zwdtv)z+u`l&
zSIOCL)Y9WOoaenV@muzQ4Dyy9QE%*DQ}MqE@j*>|R{WOup!i$yOXJV}ri7*inid$R
z1-7;DPlmR;@=GSBTia**J9v#ej#j&cBQdyh<VT3BTX+$J^8+VhE5#0X{_42|a{X`e
z|HkR7=GmqNuG|)A;{R7}-!(OFT43B3Xy*U8E!aHYw7`|y0?quta{I2SdD8;pwt)2i
zC&h1T;_vuX-Y<*Ki_eHp^0oPETA*oxE2IV1PEPQv-GumzHESlcDSc{UazdV&GFod|
z>V#M;dbb#2jiJsM6FUD+sr`Q^v<Ecp0sSRo()ej{*JTR*`fb-uwmnaO<K-0zRHyT$
zlMBnsq#TXH9HVnLRzqNQxAa3!7uxD~kfyf!zVaq*@~(b?D&RDF;e~UmM)y`q7=&5Q
zyE)uoYhAhR-OOBf(~imZyr*|NE25O6hB?}g^^9IRx;9%4`qbSrczk8Ja#Tnq4Ak9p
z{RJ!3Z{WJO?Yf8x4f{uiqiPEw5;nMLt~;}Hvi%q>boe|iRF1{fmALyNsx^9U7%Ll{
zTG3kN_YrEo|AxtSOci@6iFHp6w&APB0PF6&sbAG|MWIJEsW0>V{XA$^8JDdJA?^Q3
z@n>rPe|`b<%i;^-&&1a+QwKDUH7(Gzz?-H86wPN+@_yFH!-xSSg#6C_|5H=F`Tx1W
z{Qpb5fd3&r_ofk{sYufTO$%IJ3zVk6`Z${Z#>)BsSvmi|E&dlQ;4g{)E<SsCFKnJ_
zTA*oxH%AM|84nB~k89+yH6f3pLI57E|DV)g|9?~b73kmJh(8yfd~?Xq)S_vDrUfpg
z1twbx2b^5fnvxU0_q8>lzKT}wD-fW(Y8b5+_}>J@ZxSDqFFAw`_%`-`4+Z#h7{Q+=
z7VvxGx5a<%-Eb*2Y3^-WplN~caSI&0n-?4iIo#)R*x%uB*X<nc+`}Q-%^|#zgTI4=
z*XH1E<6v#(U`o%wGa=)DExoJhUE@Q>--)AqZT`NWE%5sFH%_+OZT&~uDsHlHGCr28
z!_9p}xWAX4I(LzwkZdu1kzapPk0?~ToES9x%^8^?bUaUATt0iU`l~eZ!pa{nlIIpr
zo>bc#%8lbzA<5?tyNpoha_EGt)tscLrRCB4eb;l!KhpTj47>id`@8=21R6f2zV4}F
z{3~wh!Q$$qeDUznU31wiNjB|4l1=ZiQ7vgTb?Vl-(kr*EctiEtT=#}ulkF#X%~2J`
zsCmuN6`iGSnX8QkT*TAotqpy);$^$$492=H{y>iSdwTzTKL>yFuBHW=7WnSAz}<I<
z=k<=|b}X-BJ008Y*nIFicF?iIjvaLzv*TDD$L=^zXP2}B4jAw6;s4(t|L@D<FU9A?
zAB#W0^8c^mKZ$=QepURk_<8Yj;%CH9h<_@6RCL8_>=d#n7DOtZ7te^t#6x0U>=%)6
z#9pyS%!(aiT5J|mLKy$g_>S>)<7>uW8J{=))cCaV`^N7YA2)u}_zmM%j9)Z9YW%G6
zQ^r3xK4AP~s?hws{aQc)R0q`YK6Tu$j`ynLJ@VMPTOIFG$2-+AQpZpo19kM((NjlP
z9UXZTwmMqsXsTmJ9rvl@UUj@f9dB31+thJR9dA{~J?eOiI^L{~H>u-pb=;+nv+6jb
zjyI~~4eGd49j{l%9qM?UI&N3TYt^x>j@PK;v^rj`j@#66t2$n#j$71mvpQ~)M`NQp
zZcxYd>bOoFr_^z+Iw}azP!M2$3ji7V8{z+Q{cjn6C`aD?;@8D-aeeR0+ixf~62C=S
z;NHU%>=B^1{5VK`tFSC9OI$lCqBw{G+YLf1kNKt1-1Vcx^ISKLv%*Pi-wTq^4z0LI
zLnq@H(H=psERh6-nHO;urZVY2u-wA3GduG0f>(G+klRrZdP$zzS&@ZS6uLzg#Ytji
zR&HB%bTwr;{j&UolYShBQIu0ZinJWpixVpiOxy88zp#oT^qe3lipVTdCk*qj@KY<c
z{lHGlY09$uWm$HdMOm7KneAn1?%Sd5Ik}tpabagcl4cGi7DXCxE%xjzr9f(Gd3;E1
zC*CUk|1DydCcZ)3|4&)-KPLW-_z-)6b;TKROuSnh5%&p;8=AkS1>Tk|uyM<Twq4gx
zuy5w_nFA9WH<!NN-CDnCLYvn0m;8OEE!J=Beew30mRP@`_r=|3cEtMiy)Vu_^ER=5
zo%(WmX)&7?8-d`5#ZQY(YbUfFy1vXVUJIv=T`ktb?Um)*`^>FkJ@j6_$OkvD`j;Nu
zU~GcvJ9==vu^z^6|G_C^9i-oBeM&yq+5qu)yFS&ErzP$GE#kv6{wH_;`fKq;;(vc4
z{z!a6{5Np_{~&%1eekciq4{fCplN~ce+x(}{(!Rm?^d?It!#fw+5R16``@N)|7m6W
zPb=I1YGwOxRkr^IW&3YX;s5n2{6D4k|7xlIzgj)~|2>-VqvFR6O@Gh#U%<Ea8@oGi
znQR}~qj#TJ!DC0kS6SgJwk6~GzFHJ`gfQ0^v62bSU5e^o;e7)I_x364wr-wmAEbV_
zU#NbS_wKFY;+1Pvu`a4QbKUpvo^0>gqrY*_itG_;Un%^y{)_ujk;=7;jE*S5XU-K8
z>4EGQ+_+5LR*q$iYI0eLBy(qPnruh(L%XIQ26Y;}gJ!w?d|fbj;vB6%ysY;B+9E#M
z!~ec6z6J;A^Y{Uu7QZikSA1OjruYr<E8-Wqq4{fCplN}Bh!&6*z=W~@S|#*PC<{O+
z3qU9fKqw19C<{O+3qVxRKZOS>3t$ERcZ)cvVf}v%i~nQdQ{pegPl_KGA7<XaPb`B7
zJ}(~ShUTwnfu;rOT3|y<->y&e{OK*~ORM)~^SYKktqX|_Z0dgm8Q9qW2rjUp{}EJR
zeea|6(ATLlM6ZmgjV*nLF8X-D+WrHe0h8*ZAs<+y9x!?jOsEHp{sXPvT@pSJQ?03K
zg&i2{T2tHm0D!drCp1SB_ZjcgKc;<?j~Dvu-aD~Q>u&7M9hlWOM-jlPljKPPG8qMt
zmxgYbghgSdMPlbbmYEd;Nt%i6q=^e88|02#*pZzjRv3n7;wAVex3dMi?fG}6UQ{?h
zwLqX=;zc%qrDJ-rpA@c@S^&0IoE9+!1hEg68-=E2n_iOoK^!<)nA@i1?6u6jmOo>;
zciQ%ymb=e#d_N3NEzb1$D@Lb#5ZI$9z|;=kr)1lVy)@u;NnmB6>-tITT3M7hHnlI3
zAm*%P2YzaUC&y-zhnW>dg>RZxRRGgZb5La`jT~Ag$_vxuQ<mhp<wI;qT|0H`fS09V
zW(JNICAk!_$THWHKyRG@X6Rb3ITD~_b%@<|x(CEiigxS=QIh#Z5cpwiS!V3Sv1fuy
z$7$xKW>~}~Sg<A0;M~ql-?7ukj;)-A4U5c9s#2uj-<E5|px6@8j`K9P+{m|0$17ah
zPD2oEKQ$dY&lA&5=$qJb_+Z9?WrMEQN<rt@E2Ze}H-<87%PfXbWV>$Q=Z+affbnUR
z1Rfn>2AOGlW=vIWD+A3A?Z6JgSdNA$ibK=QRt_aI3|wwYlF%%|ILWQVr>?&3h7rTW
z1Mm;rAmy6rCRXC*amWa;e1LNooZqXL!E>CzuJlCr9(^dmW{-jIc)6vj>BNj-pTQf2
zUKDw5T9^qlz^A5>YejjUMNXbG7|g^E3O_TGsM-rrkP;)X{LssNFLH?%&=Oe|(0K(7
z9tB01#Bq*nPHZ}kWjl_O=1H6c0b`h!s+kO?6FR<ElAt&LcWdGv;}!i^wXbNBG+6!X
z-oI`jqTY6VhCRWMAd9TXEAl){iZBZqZdsP)iJLiTRz#5*5vqt1mvL@E=?eXXj>}Wa
zsfuU@c24-iay*M${E)as7}!?eMuC?UW+taL6WwtlJMjEGARfZB4>DdJq;4M7iD+B$
ziIIp#$Lsi=?mI|z>?^GsLx*=2nVH7)5z{;m{2&Zd$8(wRg=K~@S|=f<69=Jb=3$x>
z{PFY9^BDGN8drtzQ`As~hGS00i4zj^VG#IP!gTktJai-5r;SXDUh@Li%B>)Yikt}=
zggFgaCxjLGo?jYiJt2Zl*y$cxI}~I`%3RDc-bXow7tq3?i=Jhqd(79|&AIOSG@Zk&
z57D<a6Vwc|+%pS1jLoVbnP=HW#9e8eGUv_I4A9+0>ScZ!BVAe)h(xd~2&HCDWSq)H
zP!vi=ms4_$_6^YtrD;D9q<jD5P>gmFM7fFX%h88!9#DG}C-c%VsdH=>1^U+ZbJIhc
znvCx_r1f|klPB?gf5o7RSRSY=Bc?F<A8MC2kG;$c9RhP1D^un=uIZYNp9UxdhgM`Q
zN>JzwioAB-pcp)Fl^EUo)(nN%=CH7#WMXDKs>RM7nv-B&8b^-lGapmWcVnNCfxZf(
z*hQb&g&Pz};l!Eau2=~J;&?H0z$=_QO-!F@LJ4R=E6DRavQn3^lV)7Vi^OrffS{k_
z`BCNs)FDo4`@%D6o9fKy&HouqgvLqz=d~|sGb<+lfz3k^rvp#w&d?7TPA(&(pe`Ow
z>ZRz@#Lqm(bwf8vl8E-tqrlIImHIx*jpY~2<?3)_n%SvkG8p3&i-5%?%#swff{Km`
zbh48Np2_43^90+0(IAx!v)|5H=$zVqa#*MA(&QJC2-UrJ(@=)Z4r(=GW%TXbOX84_
zF0%$pB27Kp$yq|t*^YxcHlxB$7`<}w4zW2BY1ZT`*84D$`p!bT+l;G#Xt0|m0X?1(
zK}Np^Iq~2q_Cki1<;JcVMFeV1ME7$kM_o5j8Pxu$n?$EOzi}wQP8KttNUrB%ctz-c
z)(*5vkTK4joaK@TH|vULhXo4A%R-wzON+?OSsaK<`_)c}SpYpN$cmJ4<TA&w)3D9#
zl*yKQmS^z_;?l&iBMghg_F{$@jb;}%voA7h1)$IERm#gUJKc9~7|O9b4uTYgo3MD~
zE)&wvy#URv77>;^j0`{GCwiO&EyPSg$z=`}85T_(VgId|FU*P5mm&GU3NYwW7G2Cb
zi+Z9aY^kzjfoQSBjlA3onLue=U?TXesVuCua(GPSRg)e$EQ>B#KNMxB<6A8J35^v-
zLGHP}lLcO$WX$U#F08;d=^z*J7`9o+#L43zaU#nqu+5lC)h=;alw2;dig_4uK2s!0
zP{u`=^P1R=(<n_awR7y6j0wk@l+kPGI-kjs)*8XKBj@dCO!d?-qR9B)M(ufx|30dH
zRk!q4^xrbp8jl)3ZTy9}Rh$<8zN!x{>D&CoRCnXlxK`0SWGVW%c6zH<%(#ZK=oK@r
zt!f-r92H~Sk+XhS&Uj|ox<NT(E@Er?<&0}#O%2K!Q`v3omou)LI?*p@T&1<4U(UFO
z+uD9P<62G_VVbr<`;f+eU(wC)>g>NHRdKGHdvXeFdM_;;$Bm>0$0`l2q{y-0G5`e>
zWp1HS@eEzGe^$gcUkcX@v5+j**)Zq~$^ovhvHU&ETC8%G_FVd9t{M0yON5!=(POz_
zZ$vq|8n-OPcJ>nVZ0;vsvSm<Cf<+TyU8BpT_rp6WCgH^{>uF)JhO)!}T!06-7DlIs
ziHCO~4R92`)9#mJr!3d5=S5y%Mt}~~JGVVf;l{xyi~S5ICyz`s4yFGQ<bL40a&^UE
zHUSXKK{*(Sm}4eZKSn$iwye-)skS2Q#t1kDiz0%w7GSpd_@6Afkqy{^Pf0@*>Gpm(
zSdW&O<^gZSx3p4hQ2chB9~)8d^n=ieB&ZWbEN3(nVqz)K6_kq2kPLWf<62pp2KC82
zjLO0>tsusO!nJg1J<}-)%xCFOVQg8*ja%+Z*arB(GVutogLuXYxAn_$X+a<8Lte(g
zlpUP9L6o`J>UebYat2J4I(V%y01xJzA31>sX5wN7h3Rema<IB`pdp`jiJdIM;`gis
z<w9NPZ>#XF*mVov#lH6g7705vGikxZI54qUB-anh0e--5$E;!14sZryC-V5iCB+ZT
z@H#PffC*Uh<H(~-IR;!z;V3q-B7+-;<xp*W7vFa!szY0O^b(64L)&+XT)H^`1B_7Y
zO%t36OC-k_02PS?O5LI2{~G)MM8=~25kA~|u9<j_^FMoz^Z)RtyN9+7O|%_&V`B}Z
zs)-g$GZQGRNMe8vR8fKp9y-|mUTm3>2XcW6i!Q=rP3RBCT;$m~#&ifc<lyYA_LLoP
zN3(=eD%XV^j_!k7hhpp*m+!ekjG}<8ie7{5igS>sF?bogQz))6`jjainP`y&J(IX0
zkWY?R?YdA^0b&a@NSzqIg#sH{ngcN`zhecR?%}J3!ptV7TQIk9o>CW=ix+|HqKm=v
zLZICYn929hIkt<TZrQGh3kaAHg0Tb+U_@0I;7(*fJ!X)7DHG?2p20oKiwNuk&proC
zO2OOQf@#N{34N8}&44kWZ)=5dVfU8cvXU^}LtBQD>_DN6wX9SnL4})1$kK)bjq(Nj
z<sTdMXQKB#-^bNMpV2c#j&epQW;A{v?ig-C&gxLtEqF$CqpLUn+5g8k7WALfKC4~Q
z{-1B=$=@z@&zP%qwR<F9$(XUR3JO-m1nkQOV@iC}@|iuX(>|*VGYK>l{0V>|#WfAU
zonv_15`bGh`CZHpujDch23q&<HA69G{X%lNB^W^{Bxb#Lh*{(b;3T07r*J^fz=m1T
zO^K5EtjCxkrUyvI>W$Y~6$A4HOb;+HNI;fiU>qiz)LwARF@=Z=_%ZlC7K&qA%nye`
z0|r{)c}zd>_c}3L?0}$V@<*t#>7gWh#-+elB|#YzBgw%!nAWBjhBz_60a$sc0s=!(
zm=F!fU6yy?xfF9O167ti1$vDcQ!9z|muou2iaItx#^I}n!px4F8&DM{jDy0#K*QK2
zMS#!@$g-c}?q|SM1W168Y#?SU2VhJKKa#o=+roCxaKxu-g&`K@Ms+$l>h$LS@AT&X
z&uG7+&7FJUeiP63M|TYS!|{^wY@%v^5Gc!Sz?u;I4TuNikVpm?qA5{WKzhf^3e4#k
z3zTm2WYCJ~j#`#$j7`L?W}0}Y^l}_&Fx$)Nn%yJU4Mo}uHciKaCK9*+&*m@1ks#<p
zng~WWXfsg&&?4q#jE2a;wW5^ZQVv}20R>h?0*a*SptWH4fkS!>uzQq8n9nx0E+I<d
zZ_H3E`jB{xNkk4@lt>O%zI1A86`05B<g5f<%NeNM2e%L9*+a#~a#yPI*kGL)5FV%)
zk`$oN7{MUPMA$6L_DvigLL#Ye+Q6S+gaESmR4!;7YBM7}r>2YCFvJjAt;u>_)IEId
zP?%Y!t8}=Cz)I{9O=G55?btOQs)wMl8`~Cf3oFAa3|XWpH=>eM22(#yys9t`rVepF
z8=Nn~Sp#zhsKn$+h@TM&lz|z5e?mvREhH#SYLoOqFfnriJ`AfmVFHKLqFQ0D5dVMN
zrSF=)zcg+HWAmUK7F9g`ocLD`6i;pzt8#1-J!W~4;Sd?LFF>}jV_B{74tzigh6D((
zn*`a;K{+w{J&G(Qbwn?kxD*Tz(0Dt_h<l-EJPDI02}_x0g305#$~7(slxLaV+Al|u
zE{O9Lz5`57(2>vsBnqN}1RJf8z(nK_O$Q9m?Kmu$Ch}flnnaIrTirc_a$p36SOUZq
zQt%cZQLw*>zwpL5A>xl|>J=GIafF_smXc9GU>^L%W^UPg`{hKgO9%&4fOwvhq!#f>
zL?j63fLIX~a#_fT;>pWNl1I3w@C-1ZQUD8*>uhUKPLAi#(5KCaXMl7Qfnh$IA;B}=
z9btau@C76$LHs-;UMWMA7J&&c88^;n`sLvKXC47+*d@ROusZN;a0LjzryxN%4l+X!
z2OV*xJwyT^eh$%4X~<Febgo|xO+f3@QI<t~l$OqH;#~o=3qnXHV^qW=Z6G6jZIF3P
z5Z{z*I2nTuooe4SEN48|=c++D7Csu0cfvb(Ab?1@H2D(zB`Su_Frle9L=A`_LfnYL
zJi}`vV&H+70XErp^wxiV|MxcIG5xIeLHSbvm-~0*avxmvT=xfW9O~DHyfLwos(vjb
z4=ICDli<*X%vO^KD@Gt;7K_!+@>$ls0*y<M5&NBJ6F?dxJBACxl&X!c5P$QdQlO}A
zJuh#+(0%TPp?LE$ej7!O@5=m9846?K$AsRXPoc^Syp4=CAPgj5r+~7PN#mJ77GYKN
zLzq>?V__w7?9tDJ(<8^TiPW?DU<{-_Gz=CM8Pnn_AwHbR08A2{kb)ZpHbH)#TJ4;8
zJ{+n_K=M4hOLU*!Ih1X`R2t)`$*OEAzzVaPL|5=pSOUbwVI9#nMBW(7KzA{<hcm+*
zb_u?Q1<_*%T^12AbI91OlMS_MMYT)gik&mMPh39~3_8zvIAB#U57maM#1I4WAR`%F
z1cM-9C=dWAyv)!fwhtKq_{YNN11z!393f*5Y!<k?PB2@ta4slVZ~hmWxWS0@$FxG*
zKAMc*#rb@E_pt4V<l|ZOa56v0O+?BVir8c*W`LgzG!x&MS?RF8qOjrhL24mg+hjpQ
zxmDXvF0Z}`MvN5%-^P>d3e-4SPfl`NKo|oqR2PZ&xHwUG=UEY86+;R!U8fc-VG(uQ
zdV6Wbpjfe;iUZjoXHS(r(dc>jIH{@~EQy#dgmsiVV7g3d=mwaBpw_H48L$EDt%Bt}
zkOVz2ZXh=^T4A^Q1dJ2N5LUpNQn2vEc;%8VN$|mo7!s^K9#}Ir3AQ+i-VWd-KsSK_
zi*b|I4HM)CfWF``S-o>iH<=yE`3&R<$)N%sbO|;90YFc)Q&xUF5o{odMR1XYlNblc
zIFvpjAs~+|<ya!|3S<I1o%lUg3?O@k>LRL-G?EgP1cWn~0R%4KZOIa#F*zaJ9F#My
z2s<-_m{2nvd_p7cCCk}8Ix`gVF+wh5*&@|(Ye7uHpQCRw2BgJ&u#!Ylh8PG@l(7t9
z*U;Ytp$a%1C;{nf5*gwl_?-3Y5N3~410k3F%JMqIHbA}k?`vYKF{|&@{L$<`->2@G
zJ;Qc+ZCu;4+AbkRBl-|i4G#)REHoS}r^L@K7&s0zDgu54GvNAKk=!1^PJEzU44;&Z
z9@4CSKC=);7uJQV2RZZE@j8y*ae|Hm_wI*o8H#-t#R8FzH5Ae?n?Pieap^-~g|Hf6
ziAy+}fDe&3;Adz>(9d8v!$ZaOlceGmBtjX?3*{~lX$mD6H;?F)^cf2T#@)mDhOY+C
z&SK%0{3u9M6b-~EX-CTZUA=DOkut?DV{Vtl?w-1NDDxuhve*FvK!*Vh03ConfP>IO
zlAA?b14cB~zJx#UhnShfQ>h;+5N+jIE67s;o_GY%l>%mPkHbbB7V3>TfU#^t3`1K4
zGV199_``(5xk-rw1{TmAk(XLmmp~XM`ZzLoU%Y83@WQzEesydE+2^<$k^=-85d{ZZ
z79R{mkBBC*2qcpusp!$6aAI)PunOs7$?1{|$(l|EsfaFFv9a}6uakT8f4?Rsj7fcs
zw*P#yzUEr@(Cx#<+Cdza)s^rnWNQ!1QuY@}rs_V);Kp2m%M~zTSm<C86Q{-eBsc>q
z%N`~xELj;#BiPRpmZ1&U$OK|`mLM#lOGx-0o+L{u1ayL>u&HbZ8l>-oeKQ0gh}W)m
z%u6`lt4BxoeYdS2EZW_T;|7bXoeno3k+Eqw^{zBf$RS{9EYO<Ng`ohS3l9y8--l*L
zV6ngyXY8W~v0aHM)O9*|4y@|ca-2ue_x5`$&ukQ$6Lnm(<3eY9ZEn;6ljC~J)dm2X
zgFFEXPuf6ix8q~7IUw-3RDcKptWW%_7$-YKrAej%%7SP$N{@_^NTwaE9`zu1L7C)z
zA&+ag;azP5bYHo3B)yK$G8QINl^!N0YynJnkU_#lEMn+NxO_f(9%i{>bFk?Tq*uwI
z#&!eG2RQa56I-H*wbFxsSeI#^me(`7U*dl|jjftt8lG{NalqJW95&u%JZI#_DdUHY
ze`4HZTx<Lb<HN?U8UMxjBjbz4H`qIDJ39hBEM5>FAV=^s;xjdRp*eMBw!j*)!Ng|0
zbI*FQW3Y*&S^9i?OKhHE4?S*SM+uJXM#0gU6x+DHV@!#*{MTm38&!bHRBEji)2gt|
zrINOkK5r|1Zf_E^gEzw&xaumgr}PyH!PfE(QRnLF*K5l6t61H1=?3)UwWS++>T>(l
zV(;J;Lj`(WTR5vuvWw=9>qJy{9<%!TonrqvE@4^joDuWqzKS1t!*21=d2e9f&KqwL
zk6q{<RNc&+c;+H*V@be=(@6PwK{FmVUT0U%uZf$)dyLKc@97`Ye?k8V{WblB{yh7E
z{et+n;y<!G*k{-!>>K)%`aAVV-=lBU{*U%~?c;C<e@gp+_FjrP&!1{{-|F~w$9Fou
z+c}^*W_ad4H3)iN_p1@Z=X+JFc~-}>JD$_=+>YmUJip@w9WU&7QRi;e=;ylOF4bGL
zSMO9Ey!uk4M#GBpp{jiOWS}ZPJmag%_rI#j^VuzpJeRFkt6#0s2y>l|>vmkP<NBRW
zX*dqg?<<Yk-pRe?(wxp6^DRiy7rX6i?J9^FaNGT@?&Nr-%ymS1DJAT-#lofB&-!(f
zCl)X95nQ;NLvi-fpThCG<u38sWj%<2wP$~;t6%QJEYG(p#p-p|D8(uh*(Qgd)@=|w
zb(P!(kAHpn%f`)O_wWkI3LAQ(lc$5u+KuAI-Zhy`rhfnL3gG{a8vws<5HA@Md)(bG
zXI#K*wqFi7USI;2kwF*~>>w!tJWRrj7+69gNkMpys2^q^Bu?la>`V!21l<<bp3I#%
z*f%I=Ovn7@K{;cB8n^Vz85j86H7IAy;K&XAa>k9(UppvgOc(d|UO6o`=XA+r%1ID}
zt6aeOk#VOG2si`yg*X5y7)XGmC7@GC$dJg%woRb<ku%RWpl-h$C&jrcJOFOUjNnQn
zXW~k_Bm={OAW0JTqy=X~qUwMMfGu!|;1A1PQ2|=~<j$V|f93OkaAf+RJGqAA<qA~&
zHzEfF&n!@KavWixk{wG7nuxy*Ip2gf4*dqA2?^*#oCyqjBz@!6Ng5DLlX`LqQN}Q=
z;bRS#d(43Dk$ppv_KvG2sv?0%!b~Ag9i@^IG<PKCfChqVD-#6anFGhfsidG2a0Ht!
zij*A%NMn@Kh=@&%L(bzoyc&@hiqw5@?@*pSpnPM|465=Zu<c>(gD!;d0tniAxl5)f
zWM4Q_GA==GKj9zJeTgKoodfyJ9H2c1ZXt8j>*PTfhhYtN+LNby_>Q44v&8PkiosWf
z$vyBuFC}mfp&-r(@Q_0Y!s}+tXgRN;eu5z6a4_LA${iO-#)g+gE(%y|QZEeglBfnQ
zLKr#!CrJ8L{QuhgUw0_!^tf89DyhuQVM7ebVq`Ed<{)hQa6dvBz9Nw&<-5#(4g<o-
zu;*cUctnL@vjF}<d8q3)fD<TjqhZ+UV25|_b%ru*24|94KB!*MRrsx-Z4gF?H$kyu
zCP0a0djXGmOMY!m4n2EFP#f|{c{^C<icl2@r;N@7uvQpd5CCOBPG&n3vyc=Nh_?xG
zKEz>&N(Qjpq#0&`1t-X*8nrSI$TLfbZVS4pJrrPe+!UQ^Cy>z%@<{$Dn_hse=Q54h
zCUJ%h5nP~0CJ+?0l&uk1U1FH@5ZzD&E-H@nAU2Y&6M&%^)($r!D2J_)B;%5Vs**5t
zasrLe0YFyCfbrRb!Kbcd4O=J!&{tw5tg$ZLORg7bzfMXAFk<K_NSw8jK;)_;&f?8=
z5Ah3H{Uv9|xM^HfNr-eY1tOZ>WRD6qS&{L<kU31EGQlsH%@_!f1LQX0a8!sKxkw$;
zBdG~_vlcQW7US0O8GGyhrv~{ypVGYZxbUS*Z(=U+k#N{Cd)dyNZ3T#%6EMmcm!xGA
zEhdjVrKxC1I9n_Mtm2Fb$&w>d7qF87)0SWip_&yPgBs1G9RS^yB0zOXxJLy*+au$I
z^@71<vXK!P`B(*5X>16=LPrdbiA8j`Ziq!}#%`4s8l|zyXh-+KU?|TXsOxAb*nH&R
zutO3=aB^~FJ~<;BY9QGz1mYkL$ixIF6FDq?a?;t|fannkb1Qb3A*w<&k9{)Ob;Wd~
zHACw#C4i#~j8a<y@sJovn1t7sS}aDSFd>~OHvs^yua(D_DT*sJ@KB!aVSgyhEIZ%8
zV}uRMUP6AvHau`LU`;1E1VibkLFL78MF3nK_Ar3WK&+P-DH4%W@2-d@!igeWB$q|(
zU<!u2XhAPb=|%!V5U4N*FnibuA7vnSdtoC0n2#7dgp{57ZCK#>&<3@_bPst$Np_H+
zXhKb3PXRVr2vH_fUD6SWd$8jbyer6!Hsd3e0S&l3@IMfNc?~NI_TCCg3$t00Vp#C8
z_t_$Z{)N9pAOSWQStqb8AY-$aNx=w?8Q+P_;b8M6m_rb{AwSpHXV5=kd##pa$p2lH
z{i}Uw%<TV?wz&L{JwImxN;fMi9xp9S5~`%3<0)YUK&3_vlI=l)6gzA{mL(w<ib#T0
zK{^}JBN(ryf1vL#jjIpBK{;d2!~X9|w8otRe!o5t0k8`pj1X+cO(BF#{voVkHp(FH
zMedme1A(v>s*MagmnAWT6{ohm!Xj~^y9VVj-LT29o?!(-7lvKKt|rj1$QX^;y@pI8
z^5@tx2jU?b4b8>2BIrr>&+=qW^4<M%#<jBgzm?G%cVc<H`b<EBl$04bkyy+8u0~3-
z69y;xjNNQVqLF(YK@eg$7aSt29Uq|(l(s{2Fa!I)DKY^H<H(&uNU)XL(-6dmodXdf
zXKxhtBZKk*V1vcVL}z6t(#<9yEDSJk@wZ7g-ruhe3~}5MY%6jR35P?Cf~=X7+04*o
zpEmZsBV3Nv4}pUeEnH66p(LXhM2cyCE52_~4#`?90#b*w%Nsq+TIb-wq3if@5y<3n
z<1>h&5S>ZtX6YjDLv9V1ThOL)l<(=S{~yuBUgH`4ecDH~r!If4mY+OQ{xa6*?sIn!
z741AJcVmsu>UxeIW?o2oG|Cx^z=tIVNyo&=#gW4LC2J4kfTXw>lnyEuotTp?j|O%K
z<JS0E?C(hWMpU90tXj{@(TncWcMWCRKkgi^%Enp<$x%{`@NmiMk=p|@yf6%)9ilc#
zn+H>38>Bd67bmtv!stgVnRCm=JM8eaY7s#;GJE}!lYeg6x=-9W6pTqV9!OOcOnO*s
zii0O_!rd*HC^>mbBqc(LqI#@^7E?kFcb0qhUjrAw7|SBqbL1Cb&D047yDlsR)XyPU
z_t9u575U2J{k%|BDl(NIkC6*Ob{Tnzu*Jw?BUPV04lqw-UILpmu~nAZ3laOmCap{E
zmW3&cp$3w(N-B3B+zEKytJnN;Ag$;B@6^P8<2C))wXbSBOOv(x;DMpMd&XUYtMV4?
zfCpwq&K#*GU}=z_AOS;<AX`PkHRQfXri9E>!REw6$G(9#i%}^3eyhgD@%E8p!OjaK
zc_%u<;3DD1?&14}!px4Vf2+cfmo4)(*@_DqI=E}Zc43mINV*n@rWO-VvhQK<vHK)O
zXb6_UZX8^a+cB`4+Um|j81++5wZe1{?H@|AW84*~DhV7#ssv@9{5;k<{3B0}Owcu4
zD3XELgaiB;5<Za$tPA>vAEzQM2-uT7%^<F?8iq*1h5$}!7!JCnd*I%o7}Mh}&{Z+m
zaRWC5_nr(WbODVmIhZN?F3KG=af<Q)+fe4!VuIr!SOA-npbcLUybVmCMhv*w@bFi3
zNcY}*hB9m>8+)w9xGDo1(69j|z64pCWG{yhoaH6}>_@}SGr*cq-rzt2GQ%(@Mj$Dp
YRwAti_N;?bSmT_bz(Wged0B@44{!zg0ssI2

literal 69632
zcmeI5d5|2}ec!wL&F*5cxCnAN1VNCy07!620@L@w3k1m}NQ$6Hf)YtvEVxf%NdOD)
z0z6EWoFQ|TDpg9XlH)%dNpvZ;<8rwi+m%F4Dpusk<x(uiQdyQuc4SL(BujQBQt2qi
zNh+WB=Iq_x1)!lRfan#~n3?W=)4$()?{|EE-}mO|<Bu$y$!ChirIYcQ8Aoeqx~|<b
zGoxwxRhp*V&;NUWH}Rs;d&9r_(Cal`(#HNT?;GRnxcIWX=2r2y;(Ov-;;+QlIv=cY
zWBqZhfm#D^mIiK|p`{ykak%Ch4%@eL*tD6$#trhQi|=auSO3)-s5NjoXkbzo+K%TI
z&Ky6RY(!pNd{5)Q`mfeNt%1uz1CwIMWM}?M|1ZQ>nE%A&U%4!VuZ65Na5-sULI`bo
zDUY)ahR~WXEs^hUAOL8_*~x`d(*FzbRZV<fd{zAQ<)oHc)>;FXhXyu?X<g2LF)5n5
zn*YWI(VSHCU;2MT+^&g#$)WzMHBf8dJT;IQ8?+tmvAZU<(`S<t3+Y}v-fP)=Uw+`B
zr7$<$r=2tI{7cLJA@kughYy@Byd?hdpLiiZG;clkLb!bNLI0t9)2EX8)X9G2zN62_
z>0)x=<l^%2{L~AJ_dItpUN~_eT|D_?`UY)Rd(4~Evi!v}adIN>eoO0K``%X`JM+rB
zA3GWcXCHWE{-rc{^uVF#pE+{$d9$_T-@9}qJMm8E!F!LMedxgl&MqB)@Kkd4`Q`NZ
z;?mMRy|&~xNdIq$ztqHcIMjc&25JqwJvFdV?9e-g%9s+nCVMuZGygxWiBF5KzdZ%7
zrK&Y>S!m!oahJYUAYn9xH@UX||Gp;vkNEy&p`}{LS_8EP8bZ?zaKTBL|8LM<)cEgj
z^#%P8jh#XlKPrCd?^Z=^L!W5gc%$Avtdg1&i_a~bTF#eVTuAfb*T#KM%pZDke&)$T
z_dYT|vwQf|?wOl+FJ!xC9(wf2`NQ*1%sl$eCubgg*CUV2JodyxM-Dyl%*;FHpSf*j
z_o?_~zI*1~hn~3a!9!2nY<u2Z|H`=&#zeElGhDH7D$8FUZv2?MZTJJxeUNuO`q1O=
zn&(UJpMSdiJnEL+Gw*z~{IPsY^$c^*i;3p+wB8Ps#7m1Oa{2#8Swi{In;_Z!jq&CU
z(|W1|lWnS}lP|`)-`AC(f3EZ7y|3>)aXTGTkNo<adgQZoko^C6`H|&E=lRI;(seq7
z?m8VWFTb?7lpQ-BFCQ=W8)tKw7MDNm_a>)b%$F95g`7cg^vIz{9${n*pItt)v~W5<
zCdbV1aF}~~e4@FJe$kb(<Rc#IJ*WJ4qO#{pmvwX}KazUr-MoA5(TVZq?6iJ%(6ACf
zUa(>9R=YyVfz)fV^U>VV4dczZY5k=^dwrSYm6PSJl^-4JUr>I=!N+rQ{+C#Nf439A
zZoSq(t$~Y319JY4X>VxS8~QIBHyZy+yyqf%IQ1y6ZJ3;B&duqszeBm9BG2-r_)MND
z|6G1IRd!9~lNaEml$Tf)Sv)cS!2A>QkKQ+bbYPlsCv!9S9*nIFUe0~va8%KKq7@C~
zr_PjJRNsruy|{6r8O`bKrg8yg@s!u%`^%qhE<1(t$=)p;=TJV^b7fMZxu2YxXddKy
z_f&oFK=g78Th{&R!Ch;8`_L70ZD-R&^GA7t#r2=y*x)AASbm<Z-RCLCaOG=;?jL%o
zdPF+p^2Jg`gYVm28U^x}x%TYliRL?b>Zi`})XG<{?7D3i_`Kal&O@C%Y474WiT~C9
z|6;Rw_4CvkcxyCJ&;PeZ&-J&|8n_rWP|yF1u~+J6sx|P|XrP||Z;hVoZ>cqKF>0X3
z|1ZW~sh_FVz+0n%4*vfgP5X{<o$+C@S5OLgyZ^m*;}$CaE&cUZR7F9RSJTB)#e&=e
zWnuBust>N{La|*Q!m9J<Sz1UJv$e<wLy+uhO2c}Ehtn?|TgsPnN(NO$Z}p_dy0TSY
zlCm;{YRc}J`(au<`OuO1LAjx=ZKdAO(%UyG{CbtxG@RwDKE1LMw_bIby14^ZuR167
zsgyO>HnvfE;1N2dhgDbhN*Jq7T-AMwF41At`QDA|JV75LfA19&&DmMKeV-aGFD@)E
zBnu}N&b%^sHC-McgA?aDGS*>5%)Mv(c=Og-{Z-WmgO(MgWAOIsvb=*6L&TK9hw`yH
zB#%1&f4f_|TE1EXYippM|7+`}K2vMp?XCeC|Eu+X->ujGz1{n|mhUpwz(zLz*m-(s
z;YG4Nwf|RVF`)GShWLgizEST0b{UV3TJ*QQ2BySLy*vL6x&K#Z{ww^?_>Lz2NPIw?
z6&^3^zgh!tYYiM68`pO2(Bs}3_~qmAQl1${)ju;!`RT>wg)@swuiQ2hpISU~JYSlT
zP~c1&pPEs-=N!1ZF|O^HoqV=4g*r!h+hb}Ykf9c4PM<w-LT=kJle{uROEWBPI*}dN
zA$WjUy}zl)bMex1@u@Rs<5R}G!Kt143%zG!i;mML@|TVKI{yy0{Sq5^&YX--y)u(5
z#i!Ea`7+O&&76s!TRyN)S0Y-yW|kLZGsaQ%&rl-=<oqAkc5B*h{aXEl#&zNr@xgNE
zx6fXw;Lq1R1%D3IGkDc3!=Hl_7XW`QpN`XY(D8K;Qn2#@vUzR>{@~i~(<%OamM^C)
z5R>r#?wKd&pMG-g<*O!|cY*repn%tbOveTd@MVL~ca#y>!HMz>9l&{TRz5_jMR?<5
z(}3Q5b+GcQr52Q;It%*xBlX(ucbB>CgD+8+4{oe_hJMqM$lk$*Uz@smqPb^}{`#}3
z=i@ZZmzU2hzL1|9dbzXQ_d{pSv-2;oDzaWNWJuu3wV}iJ4z3*@2J2KqjyETo`}gSW
z&8ky|<W!Z6q4(EScE->JL#2<QPvv8DiXP8jGtqSTrm0om)GbL2-L<Pc>W0pgD;z^7
z<QMg88#4YMll%XDgPr-mEB+@h>%Uq9wFcfs8W<D0Zj3d=q~1_3g*qAyp-&o}`TrqJ
zd_nw{_>lN(@vq-Tg4d$d8n`4iaAkx1q#wJhyku;;v17KogV!MAXfzun61^)2d4#yC
zK^D>byq835r`i6_U!9ad#{c#Dze{qE)DK;2U}OzQ|6kAlk=0l?P;20l)IdG|FUfAJ
zAG+4So1%ew{=X?|tQ)B{a7k)F)&I2*Xxaz#Eyf+je-+REaK(7<4oY9tK050?hN>1U
zbLrJ(DZ34wxPI*lNa>bN(QD{NSqCX!G56Xn*G@D&Pk;TT6}8UO`O?XS<z=dagF6PF
z&6I0kRhM*&Osg07l=my`)n!&+H(a}tS9Kdy#mm7Lp1b@xxVF@S+$8keHM7C?q;oTK
z?JYYen)9CCZmlR&4is}tZ7@1qB^{ibE%)2txdxZ?ZeLli99*ILu>0&h&~@j0pss?e
zzHRq;JW#)X<aS_{jSLsp+B3T*nvbKQ!|P~hcvx4pxaT|`YjB_H#PuGoe5u<1b3**K
zCjN$B<^G!ZlK8y%3~%edS_8EPE)flEm>AP^S>iLs$H%lueR6DKOnx$HG{zh11F=DL
zE-}Qop*}IjbpD;3l=1(B_!G7NKfeI_HSuNfC*oU|h~V{O)*7fau%-r7nSVmo{m12D
zzyJ_JzGwgc-u(Y!Z~p%|QNaHYUtF`v`b4dPS_7Ac28O1;dO4W?#>)Bs1v&q}C;k^K
zz^{t`F1~PS2v|R5t$|tt)f$j9o-{xn$K|mxCXb>-037)L&uFlJza##F?EkOCpNh{^
zw^@H$YoOM^#jJsehQa|R#v7Az;&<LQ#?)KU=)462kY^2}(IEeq_`lFUsp+3I{;~M^
zi&?h%+1AiN``+s(nlUJIXN#x-z&n7+duu_;MU<*5_jb|dwN?_HtIhSH`W}4F5~IPF
zOUQcewd-z}Xf~Vr-*2kQ%fiX{xm+D?>ON3+?=|(=c@|T$#q<S!1WVnbaPi?E{_1aY
z#<Q??E`4G7?8)-)uE-NBH%F77EuK87ei1~j5?dw6`h}Z;(8I+S7VqV(t6Ewfe82B{
z&hT&5JvGB7V9o9(U>$+_cd57g%2k3DmvnkXeJH=Uf9vkKF$UEZ@o_n{?k5KL9{GO<
z1^iQ11bmKK!0(FR7XPVp!5ZVQ{<zjat$`ng2JX9)Z@o9<aF5I3V2i^Yw{p0BABSiU
zhwugt{!R{FlY@ID2Wu+_QzHMZF@vKnexIXuSLYx3vi_?zP;21Q)WDs$iD&he<+d!Z
zWjig~ZP~o=TXxX0!<HSj9JA$EEyr#-PHVTc0*8#B?BM_3X8qsS#Gi{Via!*;kLUlS
z_>bb>ieDAKBt9lSEPh7(l=!FOABnbjm7PKs#ezu1v*Ic7xOj({7Y9Wo9I;>Q6SHEc
zm=;^bq!7mcHNJ0r%lM}87si*2KQ=yR{GRbU#wU#5G=9VQ72_9;pEG{e_-W&x8Sgj#
z0gq7sU49x+0M#LNyhj}ms^i`2c$Yjj?o`J+)bVz8jMOny$3Pu@b@bHHRYyl2g{_X3
zI-2U(QpW@8xL+M_Q^#A?@fLNQQ^%Xtai2Qgq>eYL<6d>#qmH}PaaJ8?)bR#&yj~r5
zspEC(xKkakRmUCbc#S$X)$wX|oL0xH)bUDn+^&vSsN*(u+^UXS<k8ryj+@kRN*y<<
z<D@!nP)7v;8VUmJE&-OMzXAR){eQ#wZ*t@v62C5vi|aaXF2A8zOZ+y`z}<((*rh{n
zI9XzuK~}_O;aQ;_+ivKEMeatX9h<q81)iISju*zJ6U25J#DNuLv1j^z8vBLi-i|(k
zPFo_)@*;6OuSlZUrn%U&?KH}`*h$kk^ph}3a?>^Alm>I#i9FLQoHVqPBrqM@nxQSH
z+g4}>d1$*u929ZxS#BJpZk+I(kspS37Uo6f#<}U!x?2Q=??#0g*m)5rZdRCKel2a;
zowf{aa_u0AT)xNkQY&;U)6Fxt2wmHaEhk8wEDyst@f<UW<2-k*&^P1Uwmm0ytzb;z
zf7`@vO?;cW{~zP?KQ4Y*e1yHg+Tx6OPW*^CBJL3u7u0{X1};ktY~D7e?a=iT?3=lK
z=Fr&YtwV3`Y)ow#)24O(MgM?li>b|>H{Jo$5>uNxZ`=cBOH565-Z%%$Tg22x_2%@_
zVm2){PY$&=Ew*eJ({}3mGP`&!oO<pmF$K3zwr?LWw~Hz0eY}x3Zo>Ny-MGov0@H7B
z<CHN4<F9)oyL>?Uo7N}gjg3tZ|90q;9eEmZ{*P<VX!`e!XN~`-|2^$*c=KlbwRhb#
z(LAzGZy#O3eMYh}483A6E6yJ{2MAr=#7gLys}wzam|#8F+^XHUaiV!2&v)y&o^Jr!
z(&GLy&RRNG7VEqoXYTA?eqw{C==`L2xw#IAJItQv0d8CG0eW|=@!kE?bJ;9gOf`F3
zOm#jVd^upb`sn8JcU4@r0$46J!A54+@1AHL<!g>99ar3cYz0QIE}5(B{`0td-KPPn
zU-4x;;7{(EXztsmzkb(>^&TjCAPaA9={{1o3Q;<Dp4Eu;cd+Y7cg__U>ayY5!Qe?$
zg=5_xtsh+5Z$bV3_crlSS^t;2fBmKS3iba#5`Q2*E&dC*|GyW%Mm+HITu}ej8mKk!
z)@wj!@rP9If2Yd*ZI%05D)(=x-2WDp`%kOfe_G}KSE<~8yUP7HsoZ~)qW?@O`p=}=
z|Er<)|7uA5Z=3kJ4*vHo@l7~DUm_3qocKNQJK_`KH^py=UlG5^1@&L8fm#DU3=K#N
zFs3X(V+j2d$^r;w0fe#uLRkQzEPzlJK$Orwg$F7Nu!8@)P28v9{lAIF|G4<9_%rcA
z@lV7@nfLD#%OHZ!ipRL1{;M@mYoJO4n;QBKeXNsDZ&Pm?oi|%IHuPy-NNiwB_a(@{
z=I%>yflb|)paN5!moh`&sM-*nHYPVW^qsos;sG1FH-H9AsF#MkVO-r{bZ!_^HyGU;
z8l9^od>|$plhX=2Fg7+OcXR=O&ia2x6ZaVJ(?70#M{}w~EPd9#du*fD-rSx$G^=kd
zMg$<w#7hvbZe<I0+w*Vt;wUfyC<7-kJz!cVDFWLEX?62758c>zLO@g3bfd_(_^fb3
zKQ)Ue%}g^2L&r8PXTN3cx9l0qx!n$LH=_d)Ex6XH#hET~%V@RlBkbu2Fu61Hd;nl8
zivv3<{4}&O*DvzK&HdDMGbazT5IEH}1K)SdFbM3-b@(6+3kmFcMOlC-wNul{9LELU
z<&_s@QJ6$Q7P*1rrf!sap5;4s?u0yZ?E85Tr%CMkRuEc=7gh>j0Sr3>0a{jz+HI?S
zNc5#>hISA;X`Uoe;qdT|<?v?(R+iXtmc&V#WvG>Bw!o#s(90|bG&#>=2dLS};<6O6
z=jE1FM2VHh89K;wE6jZ>j!mEEcO5UWLeKUC549JzpC_T6BY0ZmzL}+VQ7HwTX04Q>
zeUJ@kyFGEG9mU|~sUM|59+;V*7Fohu&&%9A2u;T|Q@T6x5g`r}FAq{H^Xa<8$?T%=
z(y|O;7MZb`<$e+6t{1pbVp~ZH-fz*9g<E84k;IvmI;ojPq0b0F1|Go6?bNa@w@QXE
z1Z^K0O7ukgF1;_oR@?PFGmV|l3~h%}1L%K|*^%d3X&hvs6{FC?^t{yJ`!hyao|>NT
z=6t1>n?=4tf;hMQ*iHS^iO@GX&(jb!XEBctk{?D{>e*%<*_LHzzRj#D{JgL;r-<Xs
zk18byT;Cq<h0grnqlvqWm-S!OzOG5qQ2DQY@5Y{pded~h#7iPCjnc&AX^JQ=Ogku2
z6QLv9OJa}F;CoJF=UE!~N#bR3Vn--C4D)P-h%Wu=2MJTax2)8(?8pxyepA*gD1KyV
zk|A-PMG0d&bNqw`DX`dK8aUi!Vi{J>cgsA$IO8D))5U0cEx*-%fThk|qjf_X1@t4+
z&+&ZJ>4$;m+hJG~S>*d(7KUjYV{C$i|Aj&9F&f=4i32xGLrOF&=X@5}bZ11V#&hk$
zaRb*ii^5H_A_x+yPOfhvSeiIdK`ke9LJCnyVMf$xOjmZ{3Zo^3KuXhIDMZi;TkZQd
z^aa^jgi-7kc9b|lh>B5}8wQrotc`Lfh|DDSn6qY@xt2xIDhu7ri|Ly<2$-vBP#$op
zP3cP-%OXO(mg`_oi!gBLy@<ie__aI-%j{xkTqp49hm;{-*w{%E<4`FG)6HAe8$qjm
z??hjWrt2hFUd&L!$n`AhXStQ8N$MmC-R@JylEyR1GCR!Of@x%1S&{g;8AX<r@cYFj
zCxXEXd`_oWL(4TC$IN{%ax%0*xy}z=%eFJqjcuBhwK*%{RUSAN7A)hEN-<0;a>JGV
z(Y|NAFT|Bjj#AUq!~oFEJ|ov>s^d5;IbgjA$-*LvVlxebn2`{2NgUan#27e5Ru+Qs
zk^2tzG_@j|8loMd9VhmR0Q>Eja!^{4L%9#b6~y!nM&4rX*sh-xVPUTlLVCi`$CH$W
z=*<5aO@zit{bSl!wV4%@|IpUHh|{qjC76}K57NSo9V<eg9`h!}Q>1ooVdw1B#YYyd
z<9h{8mBE(go{MdzY#NnC%xKF^Ewo}|NnHG`^!JhD_(g!_w&T!acF;jV!1T+CB5{kz
zH5tcgLBTa$B_i_%b@<WHa1)XU)xLX6Uxuytm%t5TE5qY+X-qYiAj3&5Gvax3+(B5x
zR_YRlFsU%#Aw^opOv41_#nFmx@}na1Fmygc*CKXEnGJrH6!fv5p^u`#=X-9F*^W&G
zHYBLYBBwC3D9TY&wG8-eXQ-P*t3AKDFTk!MmOUK1Ntk1z9Lr0IF3?emvv3M8#$sYO
zL&i>&N1+>q(w!v{b}Vrtf~ayQU>y+ED)8()kd@{+k8I_MWhZt>uoGdyL&lY5IuS$A
zBAjt7ri|+{a_wyOIFrUJ!mLN-apt!yv(<iZQ(ulfDH9`!Z3^2?Y`QM96azw}g{rJH
ziX0rAo8%cI17A#6NMpogcTLoqGq}ofcxHkvw-X1|Tf}j$o5s9z5~3~Q1#F9zo469<
z1-xexW+w9~3*>n6W1gUDFqw3sKjbVso&-58{Qmq@UzA<MCYUeZOtJ(8M|gnT#QK^!
zZRb2u7)h>yG%W??c)phi%*_iAzlg;N`C*;mAQ%Tz;FK7LQJlg7aD5kt5fcJ1&z#72
z6A#G(({xhI2A$+%7%`fj!$8b3t5Osn`|nnCiNyalX&=-0@0+@<zoP$^vB7xE_!q{X
ziJQe~@$bsk;D_{Xer&S6d2-a~>H*n`K5CR{beb78;1-=`M$JANhZWbw7<B|r_1YOR
zyxZ7qXH;i6-fd^p$Y7$|&Zx#_Q?H#7Bge^ZJEI0}8+z@G=nU{Hnl?q)uYFxN^_MTo
z+5e^(osPbQNoW|w5m*7CWtuw)8N4477!kBYMUcbAvMjtkZiav{_Xyj<IJ3O~3Kj0c
zxw6|1>@TOVxFI4VAWy}NC(yd^FJwO<?!?7#=Xhuty5V_9Tcr1ONLXzf^rFk(61E3C
zU}i+D5m_}}3SW^&G4U!%V_@P9^TamsPPj8ydNLXGg<j6L1DGV)ZQbX=t=MJ)u8`ox
zT{3eM#}_!bJejZLg-_@PMJ-Hmvra7I&RC|Sw&@XClN0Riwu7f3R3pAjT+=3i%R`G?
zJhY-TH<3@q&Ex`PVcbm0lV(IkiR0Tr&Rvcl@9MVWr8d9;VtECAkl-GF7!d^#QCTVm
z$|J%!Vv7PY8h)PiT!J~FnK>>IL9ngcjvwT1Y<g%jgxhA5Hzk%t8~`53m!q7<JbK0^
z*9V(Huf(KrL@1P!V|#IYMYo**n1d)Tw+V>~xPTr*zytdzKw?Ps$ko!^cOeVPASg16
zBq59^gtZ~!*->Wh@3j*qMB~I#1p#U5=0H?{4=K(Xya!MvW(+WvKtss198%-}EGSMR
zm6^p}cI%)WpUyUANR<%k6gFr_Ms{LFUXY@tP)3}d#8gO|(}KQEfI$iwP*~6uZ|JpC
zkY5pPU~e-Egn&#Me9QudNyw=KayifPJR;qMOL9U95^dj3h#2xP_E{Jp<Nt=n{y&ki
zsK3FByDxCM{p<x^|JGgJzW>U8h_-XoiC+%Ua-w>sG02gL2>}o@)50Sfc9WPqJc&p?
z$rhM1mP=Pg1iB#zRFRk#C=kFyRfq=4=S4#yno3<*!_j_tdtZ!w1g@47No<0F7crM*
zx&++fXFf9tP^MriN+6Nw-${ca0<HAykhzNG!OWD!0E6;vyMP?(fUIE#;?Ti#$QcAI
zBKfoMT2qobhAK$~)1<JG6>I4LG=h{>AQxmJrsEGH&7K$*831Yj;Vb&W%#J#_%ff^<
z)&;N)!-%=eET%kIhs8rfg|)H5%pp&L7CB^D06OwYVrBwyDLG(nr7(oeQBWyN`~Gcx
zNp_BE?#hxlWGHa~_6mj&fjRTe##oYn`4~~M62~O(v~$}J5s@CYGA99025XiaXRP{a
zK*@4_vh~%Hbml+%|M<p&{$cG4+8q}%K`-XX-yC!g>7++GnPLAxEdXhQgv1a437U5V
zKOD$WQm29IQYYtEE&<YDPrDgtjt@R*uIL_S6yrZ&Gy%0y0|55($-D7yK-W<~i)xZu
z*!3VML3cgN_7g^72CxR$ThTpsU<bqbS#Q>~4`1CEV-^S`h8>PqPH;-#CLs_u0ZR^6
zXyND+pkTZKxqw7vvHzfv*aaIJyyF3+m&FLo2%iX9J+mT-U~)y6r35>f8F~Q-Vv1D=
ztT4cb;a2PrVQfiUcc`e~&MU?60?g6sQD#M$vFW}f`|xTR*eXRFXzeK@mJrD|$=iL`
zp#;P{2L1);2a6+w@O(f!fMO=H?OU?`Q<j9VD&<bo#ZKWzX`0B$a$LfX3}5X5N}D_`
zP!;A57%v5r_5tU@l)_R13{lk~j_H^~P=BvOki-VaIDA!Km|2kFEGCh|dHdjSL^8yf
zj2sD-T7Y5zxw6ti5Jjj*IEJwRPoYQ@MHGhY6*gJM6IMYk?-b~t=mfCG1By<~98e6X
zECZ8ufTM{nGZ1MQ{oo}w$W%l$m9MT_0LXxK6Vz6AOK1Lnsx$w8M*EaDxAy$Mh-dp_
zJNy0NL^9^~C6MgLGI9hzVZMOC;=uA4s4GY;mT$xkBj1zmoAA@b&PSAqu(&G_KCCcP
z3d9Dar2v>pOjANV@{<@0lAe_<5f%b;0?VW^p<h9lQJ~71JC%cr(j22=b$<*m*K8lT
zwlC8DQJ0LA=Zl0fGXh7CD5glk+nl06OMufrSV@irWNnIzWlJ)ue55c;7My7$4V^_s
zQZ-+|T}zl>Z@%<JYCpWAFV8+8UrJd-8zF`hh*v_%at0As6Fn2*$3VdhZx6Jec!EC4
z@q-k2z08Y9(#rBU9vP0E=UGCO@5+7#2~>zU?w#d56hGKbBf!2z6k4%m<QiCfpg>F|
zX;!5?Ci*FXu)`~A+lQ~|3o{G;3VvTO4@rzdLUc-9Sxg#7{ULHFN96_4AwI!1Nq8g}
z$!J4etToCh{jL~q7F8)LO$fINJU(d*BiZ!QBF!l<5z>=Y$p^=Yf%^ek=Q+t~jvcj`
z{b{ti1TN=)=!e5~%c0JZ`Tu6^X^sCr@@8TH-TY)!+jv#4oz!C1CJX>CmjP&mUGx)@
zrGzZaWC0bJGpZ$l$BmHmq|^#{R|M4e(7t<fubmMG-i~fNquQ9A{dUNS?LaOUBmd1Z
zd>#0J?<L3sjBLwTgp3;>Wk-|_apy=yO$gN2!h6`)_1ej(I~I(b1abjb0`)W0Lug2l
z6PS2zT!e{{k~K`e0(t`pH8q4dX3$V<-Q8`6DosJlT;h{IXRb|!*P*J3;VUAU^U^+N
zToP`ZRs*OStfb>RnY~_^Shw`r8L?8dwc8H12MUI?J{DjNFgsvEOw>atK=2ZQq)>CC
zK5GMFAhqvEjzR)BkwmG>_%M6zjF>lV@3u2)^=M14oe^!uHNAF5jBJ}7|IhFL-eNqi
zpVdC3J+!v}Ki8Qf=epp$&$r)mL*Kr>BcSv)3RbexS&#|RVnV4)!h8Tfo{XMSkMbQO
zDJ3AJMq{T5bvhT;4DlD1nmhm>31n31EI<&0iZrqB{8ntg(0=CnzIgL2=>)3+Kf;iK
z^T=v@O7`k7qp2rR&U9f25Zba-RF+36`$8znnTa-$2$rra9{dRk`;?tY*mILYq+~`>
z7P1rODIp`i9SjMFQAilc#-gOSdeUQ%OGV|Vh=m=DMle**8*(43cb90tdskn!gQLQU
zW!XRnGgJaO!~(V?d?$NB0eI?EW@-s=ok>VT*bPKSC5(uT2#i{*odx7d)qY;)0V@l}
zl{;s&k6zaotb=8aV7JSH<=9q;GxP{VE6ef8-^du@ldz6BB(IUMH0+dw0wxL|NrT}6
z6N#)}*2tk^RdpKC>@eSIjZW*#|3VYj8<GCFR%km0lk`oT&&T)lbq7=qL55s4_sLm_
zOfc}^FVHwh+{je{aKI~5qADCWJQG%8lcGzg6<<V&bw%M9_5{g2xF#?;DJ5ZGY)b@{
z0x-@KJ`q?I{2`aT9I!0Ppk?7S%&6ctO6ZmG5;y@V*81^z<#s9#WP_YNRk}o@XQL6_
za(S2p<j91^wyJA~#D0`4;8hV5GC|>hIk3OT=%p<qp0LP-CDkoRBhMxfs-UzH8oKZ+
zoC`2r{hedl$!uTFr-)lf94HI~glB>LI)|u&iUH*gAOt#%p$n;jp0R<n%oLiDL&zWb
z8IVS_k`+b~ATZ$|5dXkZgxUh&!pL_Bf`AubI7y}rMQ<hsd=r|oFpQ8CAud7qtK=jQ
zM3LcLXqUE+&GdzQoPj&i9suRebX}Qz0rNpRapCar{Ib+U7!TG`K<A46j1CVeA9$Pv
zdF4Zj0VGA(gz6*=Qvr5zK|*%szpshy#;m?y^9Qqky;tos`}%r$RZdgLG$@BL2R;Ps
zOt2~8VFp40WeMU7^O{l_E*7wg-3<UX5-JhQaOzcMy#UaX0s%G=ed27vI?1akTY;%S
zt$=uINuV5l7gQ=rB@}cd=L32uXMBs<QDF<&rh!3uL3-(IkHma-yq4p)oS@~vz5DT-
z`eL7jqak@s!2O;~!-x!kmILZ)A;dW|W!nZ|0lJY~ALto_<XBicxWn*`Knhoo)*yC3
z^aAdJua;9f0`w&mfLe(!2Q5NaHm;yiQ)USmC#nc=!$7k@iJ-Yv!VC~@0mMfXyM5}$
zzRZjGPzlVX;DR#Yg;7ZQ3HW6*^JI~szz(FuFOXVcv=;C<O;~Rd3nBLg)+%>3!Fm=l
znsLzZ6eUHP01F6{d>NKe&d9-(f!#9y%^1LyS{?C_3*ZV{D69rjT@e1T0=HW$6zkiw
zepk0&*xMI)Vbr>6SzrbV40g{4m4Mh70Ax}yL~v+NsE9fw0h*J5hmwHF$}KQINq&qk
z!z<>pim@8l2ho68_5*ivXZ|15#F#Omk820loAnjv+V|huSJqAf^^uCBWo5Zu9%Aw-
zt=a`pr;CkuA<X7X{Lo3MRb^HI5XZP8Fu?2(GXwvEx#9PG{9%={P(9OTwX)jpyJf29
zwA-6UO@hmEfXhHGgl8a&aIpUanDo+#Wz-BQ46?icx@Z7Y3AH4QD5VnsI+S`{nBoag
zQKcL*ARl6;tr6U<-tVnH$~y+liCV7Na-p-mIyX?jgsj{1aAeRRRK(Mi%@WvXloxQK
zvPcNv?GZu2kAs1hO5R@XXHXn~3-TmgK`~6Jz){b(C0!RxA1*gKkmZX4*e^v&8}UK)
zq$&Wi<%$og7eRsfqgC+mic#;u<E<)|p8qr-RzUmZn+MYCIG~ZRrgHaN)E?xz6(%~-
zCyWCuIQ#{l>Jkxc5<wQV0a&n*6mtPDuxnKNnD<ociELJ{r66eYs9jn=NYJ*r`z8Lj
z%h;|Nrs47XpNEX?#$n@~#xq84oHBmG_=m<`;~L|i8y_`(&G^s89~fUTzRliYJA@@3
z5zmYFvqtdq;`0@Dq5kO7)WEo=jft&#>#ixWv$u()IrRG0hS)mE9(r8DigJ#uM(5~E
zh%33gWlV~u{MTm38`XeXsnpmYrd4BGhg#Y;^!m!7*Uc?rw)f3&2Cle5>>GLug<$*e
z1ySp&^4qJ2uUECY>7ffS57!J`(6JUft`hruU(vT8*EWT->O)|ho!5$}>T}Y;>voBQ
zYn;Lm@0t<wYoBFX&g=JxcdUB>`*z-NlX(1G*AUUn%!#MY<1%7gayX48KhJB%6UJ-o
z%K1&PSNxc<RsUW6<N7b?Kc&B_pU|Hb9}&MG{*Cw#><;#Mb_x5o{-pk(9_jn^?b`p=
zzNCGE%E3=-@7LZ-Gwb{*z57<nw_Co`^4-=U)iM1~?oorF^Y)+`F}%K8Y0a}*p55}C
zmglxSujTnIFKBsT%ZplfDy6S=!5yl%D$m}oI(YS|NR5USpNHz<hd&I|!}mY&)x&q+
zs)y&bJ2diKwq7m2wT4ER>$F_A<$5jGZ?%SoWB>C5L!-9y;r`*)oYrmg4am*syY1_0
zKhOySZn?M7o*1o_xt2&Tq=h}USh$eu$;bA3V(|iRA%(j!6lX8|F2aPH?hvp3KsS;x
z?mO6M>p$qtL}xcE!|Juhm0^_&*(Un0Hf|ETbhWsRB?(i*Z#Higd-`WstgxvwI=MS&
zZP+Ys=$w<Q$<*(EZejwzxz)dQ%)kYn>eV?$B#caV+Zh$8n(eg{L#`z!mkT@r7hF@~
zk8pfKxsD8m9;-A1N&5r6gy=%XOx==Q9|N*@=y_zQy>>>7wC8&5jEJf3>9sQ=#pvp8
zJEImguJ5%oBH(aiuN@ZU1^{?ul$1}w-rx#=3`2d0s3)^d5A-T!Q5Ae3*<YT;swY4k
z7VvtBgl`V?+8Gh++ShAmMDXaQPCE_2L9iH-OQ_*gN=e2tAUIGM*06z|P_m^U4i?7}
zR2IB}DNz7|0qwz1F~Mccpp*Z9>XPUGwE8fF15IZnPV|cWP3C7F)iekxuy?7wk<C$c
zrA%(Z#V2cnAZO>WG~$e+JqxyM7#^%RO$u4Rsa)Ylbsc*BY8ayL?g<0hM-KEw+Fy(~
ze9Iz9RtYTs2+ki^gh_3HS>{s`q^u8PAckYkrV0+@1~ek%1rP>BDFkDtVDYLFa@KEC
zre8;-_QU)8^6VRxj$f81hH%H?Mu^IAJ`&dV!jXq8@7Vz77Nm(BW&qSCs36cAp);`?
zu;egGm>I#GN<I^43|3(+dD@3>>kBhG>Kcx+FksynDKHn9Ds0{>S%WYnVUknzqiZr&
zJ%f|5DqHU33vm*1q^mYAX6p)%+F(`Zu&+dE^<NJzV!X-uKgOb8#s9Bd|LgW8o%X3T
z0=`l+im0bhjb>{JW&mV!Fb)`GtamIt7Foy*E?99uC5pAM7RwY_CIV8oqRhkKav;z{
zRDq(R%GI*MB3JJN^g~IdHVvr*(J9$MZe|VwB!ix^RR%<87VK2uLX-<i!?4jJ4sYM>
z^kvuzi-y(2&>=Hc(6YG#`!;8c6TmBKkdlbTDjRf;1E7Wubj3yvkY|_|KFDmCgyr6n
ztM@4;!bdWZo;rj_9i62pEE!=fwk1iua0*zmPVt=;G_2`nn`zWSnOd%<uS9fV6+^Ng
z47~<)Q@by~?5InR$^u9xB0N;qVuMOjqk*6b`A6<?P3gr(4~!^Tx`8mq&e4wKLc|VB
zZcKPd_|Qrguus|Dsxog>P!3xINhlhP6hxIJ!C&*>EVU1zH84a$fSKU<YeoxO9rzZN
zBY0ty8W?5lTwn(5VL){Slr5J_c&dgIdk?@N8gxZ};>dj%_ywJAop<M`G^Mg6G5dnc
zqA81_7%>=NN`5A+C%S|sK9t*-Vo(?%p~IYJGXb`mh_is5Jv`IGI8>SdpG9F+JcmC2
zZ`JxgGJ>an@D;$F_+$+IQx$`4!;b1KXQDuas$pto5c%ZRCPi*B0o{Oo1@J(WcUXkN
zT68a^lh{chJJf9lwxc6S?Q*$2H4>loC{#)zvQkrotdCV^OB70RIXhD@k0Ak49kgJR
zngMmRFuA82FHuP$Acs5#^AisUQ-rt>V?{}k)n|p|4l|^wI?0NxMOo9PMgvuW1vV}V
zu?nx-4*TPzgz-d^a!U_jaTeKQ0Fj9(AmEe}vvCFGyUb>@89XS~i=B8_isQ&l6s$YD
z?Tl(s-EKR;>vHW!z|sUr@+n+63>sWHhmv6e&ll<t%R^XzhY^J%=)xMHo<!85$b49%
zZabq|N2l8kbzQmK5Xvt34s=7<7P5-P{vC1~kCa%0QB8n>d!XEhNt8~_VqXlH`7(nF
zd+o5p0G-Ti#?ip;VJis=W(;!*p=_L=Fe|8-vgFcb_k5U<F*Fi(&Swt<mPk>pzoXj@
zaWML4e+uX_6ddHvGH8Ug1d`dz*7=YlU`7=zFq8}h%o6)iP=Mq|_;5z3&+oJ|hRdST
z3xQJZAHh6z;5o>hQXpF~fS86T8>TWFATW;cUWA6!rrFd#WH~0Ec7K~-41a=2vhi^~
z)m^v^_<1Os>>6bu58M?}6iCt}mktC?){Z)KDrSKlKj2ZA-oftkq$HE*ht03lo*?if
z*>VIc2-A}dCSZ0D1(DHEb(cYsT!YGnFi^gz)U&xwWZu<@|3BOD|8HoY)x7gd&@bY(
z07t^UVctLLI4m1xxuz7-7yGaf0|gd)I<XXwWkrfy3gwhqKg&!YqVW?9EUaNKE=h04
zDB(n5?p6lQ41Fxkz{RMDWf<*jKOFSs**9vwSC$8k0#=fdNE8VxolSnQs;2y*2u3aM
zB4RHpdhGopmrAp%2AgQHd;$u)kL*sRqmjhCVd8vQp7vqCFU;(yld>!fkuiny0OSGR
z!Q!8cZAEY=HoOs-&lc;5iJW0)cx*!!%1wos_i8^KC{mJsSLOfVFF|Lj?40)fUSE=(
zqq>!{Bp&`tZi<7cPBR(yx>QZsDvNDFyqq;zA$}4f96No;AkxKgN%j!+P=+E=Yh}R{
zYK0dLt^ezFOK1MSp^5#*Q~LX~H?()1-~2z<RY%Ts!Fiu=KXYea(etDF-Lj%dSs|1W
zv9snpXT1)jGm5YThb+Uk*qaaX87m4TzZ~F>dN`PgWF%qiK~jJNs)h`?3)8A{$gHkj
zwBLP4U$%pgbVu@aW!dnpl5<Baf@CC(L<K%B1|~C3E;1q8#Q0$L5s*v@Vnd>N7UQ#!
zf@Q?)`%_7xlk3jbwN?GfO#A5VeZkmzYqTHYDGNr(SFo8P(LAXm3zgY(D@fS^i&&oA
znNWrewutIj83KiZ713}^VL!_#R3bTabw%39zKcxtb9P$$v8XQ<oBWLya+Reb=|%f+
zLfDp!NzZPOxP8|8$-O6Gn9*~rP%}L=NpK1!5_}^kz)XpVeHby7c^Hun8&Iw<RVV-7
zrHO;atNO2N-_UjqP0aSghx+pF8#R<K%gb(5U@s71+=QJi@Fj5cSi4b>E)(fM8bf@>
zF4B_>Kzju#a6voRjRI<XNTy!Vi;QU^!GXMEt$uNla%21OJ$+$jN6jb7!hr3w*dI_v
zF22o(VF@!?lnu3osRe11m0^rP+#<wvxImKPCD*yJ>IX7D$$q6UWZ%Omz>qNQ`w#Xd
z**R(?S(bz;62yd|5E{V&pp#O>fRLxwN3u5wTV7x()Y^aOIxJ(9`x%gSLP;j)01B;?
z1iG#@G`V_`v=80g7h`(Vz<PxktORmVJyat03t_dB98?+Mx&%6iXZVFJOYV+Faz=;-
zb66s2?6<=5>4;^>)uW3Y(43*!q{L|7eOF(Gt)m9xWf_R`S?UM$WnsnGr;w@Pu;huV
q1xvkPw#!vf?C;95RZ?PhfMZMn{{w2WvngAcR>}Y$6#<85$o~gkW%K3$