From 905dba3d4e602f531cd63235c5adeaabfbd3e20c Mon Sep 17 00:00:00 2001
From: Michael Golowka <72365+pcman312@users.noreply.github.com>
Date: Mon, 11 May 2020 17:02:58 -0600
Subject: [PATCH 1/8] Add docs for password policies
---
website/data/api-navigation.js | 1 +
website/data/docs-navigation.js | 1 +
.../api-docs/system/policies-password.mdx | 141 +++++++++
.../pages/docs/concepts/password-policies.mdx | 278 ++++++++++++++++++
.../public/img/vault-password-policy-flow.svg | 1 +
.../img/vault-password-policy-performance.png | Bin 0 -> 131598 bytes
6 files changed, 422 insertions(+)
create mode 100644 website/pages/api-docs/system/policies-password.mdx
create mode 100644 website/pages/docs/concepts/password-policies.mdx
create mode 100644 website/public/img/vault-password-policy-flow.svg
create mode 100644 website/public/img/vault-password-policy-performance.png
diff --git a/website/data/api-navigation.js b/website/data/api-navigation.js
index 9115fa4d969..bae5d479387 100644
--- a/website/data/api-navigation.js
+++ b/website/data/api-navigation.js
@@ -130,6 +130,7 @@ export default [
'plugins-catalog',
'policy',
'policies',
+ 'policies-password',
'pprof',
'raw',
'rekey',
diff --git a/website/data/docs-navigation.js b/website/data/docs-navigation.js
index 74dc5e819bc..415480d83be 100644
--- a/website/data/docs-navigation.js
+++ b/website/data/docs-navigation.js
@@ -33,6 +33,7 @@ export default [
'tokens',
'response-wrapping',
'policies',
+ 'password-policies',
'ha',
'integrated-storage',
'pgp-gpg-keybase',
diff --git a/website/pages/api-docs/system/policies-password.mdx b/website/pages/api-docs/system/policies-password.mdx
new file mode 100644
index 00000000000..090d39a2901
--- /dev/null
+++ b/website/pages/api-docs/system/policies-password.mdx
@@ -0,0 +1,141 @@
+---
+layout: api
+page_title: /sys/policies/password - HTTP API
+sidebar_title: /sys/policies/password
+description: >-
+ The `/sys/policies/password` endpoints are used to manage password generation policies in Vault.
+---
+
+# `/sys/policies/password/`
+
+The `/sys/policies/password/` endpoints are used to manage password generation policies in Vault.
+Not all secret engines utilize password policies, so check the documentation for the engine you
+are using for compatibility.
+
+~> Password policies are only available in Vault version 1.5+.
+
+See [Password Policies](/docs/concepts/password-policies) for details of how password policies work
+as well as the syntax of the policies themselves.
+
+## Create/Update Password Policy
+
+This endpoint adds a new or updates an existing password policy. Once a policy is updated,
+it takes effect immediately to all associated secret engines.
+
+Prior to Vault saving the password policy, it will attempt to generate a number of passwords
+from the policy. This helps prevent creating password policies that are impossible to satisfy
+as well as prevent password policies that are overly restrictive which prevents both a poor
+security posture for the policy as well as preventing performance problems due to slow
+generation times.
+
+| Method | Path |
+| :----- | :----------------------------- |
+| `PUT` | `/sys/policies/password/:name` |
+
+### Parameters
+
+- `name` `(string: )` – Specifies the name of the password policy to create.
+ This is specified as part of the request URL.
+
+- `policy` `(string: )` - Specifies the password policy document. This can be
+ base64-encoded to avoid string escaping. See [Password Policy Syntax](#password-policy-syntax)
+ for details on password policy definitions.
+
+### Sample Payload
+
+```json
+{
+ "policy": "length = 20\nrule \"charset\" { ..."
+}
+```
+
+### Sample Request
+
+```shell
+$ curl \
+ --header "X-Vault-Token: ..." \
+ --request PUT \
+ --data @payload.json \
+ http://127.0.0.1:8200/v1/sys/policies/password/my-policy
+```
+
+## Read Password Policy
+
+This endpoint retrieves information about the named password policy.
+
+| Method | Path |
+| :----- | :----------------------------- |
+| `GET` | `/sys/policies/password/:name` |
+
+### Parameters
+
+- `name` `(string: )` – Specifies the name of the password policy to retrieve.
+ This is specified as part of the request URL.
+
+### Sample Request
+
+```shell
+$ curl \
+ --header "X-Vault-Token: ..." \
+ http://127.0.0.1:8200/v1/sys/policies/password/my-policy
+```
+
+### Sample Response
+```json
+{
+ "policy": "length = 20\nrule \"charset\" { ..."
+}
+```
+
+## Delete Password Policy
+
+This endpoint deletes the password policy with the given name. This does not check if any
+secret engines are using it prior to deletion, so you should ensure that any engines that
+are utilizing this password policy are changed to a different policy (or to that engines'
+default behavior).
+
+| Method | Path |
+| :----- | :----------------------------- |
+| `GET` | `/sys/policies/password/:name` |
+
+### Parameters
+
+- `name` `(string: )` – Specifies the name of the password policy to delete.
+ This is specified as part of the request URL.
+
+### Sample Request
+
+```shell
+$ curl \
+ --header "X-Vault-Token: ..." \
+ --request DELETE
+ http://127.0.0.1:8200/v1/sys/policies/password/my-policy
+```
+
+## Generate Password from Password Policy
+
+This endpoint generates a password from the specified existing password policy.
+
+| Method | Path |
+| :----- | :----------------------------- |
+| `GET` | `/sys/policies/password/:name/generate` |
+
+### Parameters
+
+- `name` `(string: )` – Specifies the name of the password policy to generate
+ a password from. This is specified as part of the request URL.
+
+### Sample Request
+
+```shell
+$ curl \
+ --header "X-Vault-Token: ..." \
+ http://127.0.0.1:8200/v1/sys/policies/password/my-policy/generate
+```
+
+### Sample Response
+```json
+{
+ "password": "..."
+}
+```
diff --git a/website/pages/docs/concepts/password-policies.mdx b/website/pages/docs/concepts/password-policies.mdx
new file mode 100644
index 00000000000..3178e4448e0
--- /dev/null
+++ b/website/pages/docs/concepts/password-policies.mdx
@@ -0,0 +1,278 @@
+---
+layout: docs
+page_title: Password Policies
+sidebar_title: Password Policies
+description: >-
+ Password policies are used in some secret engines to allow users to define how passwords are generated
+ for dynamic & static users within those engines.
+---
+
+# Password Policies
+A password policy is a set of instructions on how to generate a password, similar to other password
+generators. These password policies are used in a subset of secret engines to allow you to configure
+how a password is generated for that engine. Not all secret engines utilize password policies, so check
+the documentation for the engine you are using for compatibility.
+
+~> Password policies are only available in Vault version 1.5+.
+
+## Design
+Passwords policies fundamentally have two parts: a length, and a set of rules that a password must
+adhere to. Passwords are randomly generated from the de-duplicated union of charsets found in all rules
+and then checked against each of the rules to determine if the candidate password is valid according
+to the policy. See [Candidate Password Generation](#candidate-password-generation) for details on how
+passwords are generated prior to being checked against the rule set.
+
+A rule is an assertion upon a candidate password string that indicates whether or not
+the password is acceptable. For example: a "charset" rule states that a password must have at least one
+lowercase letter in it. This rule will reject any passwords that do not have any lowercase letters in it.
+
+Multiple rules may be specified within a policy to create more complex rules, such as requiring at least
+one lowercase letter, at least one uppercase letter, and at least one number.
+
+The flow looks like:
+
+[](/img/vault-password-policy-flow.svg)
+
+## Candidate Password Generation
+How a candidate password is generated is extremely important. Great care must be placed to ensure that
+passwords aren't created in a way that can be exploited by threat actors. This section describes how we
+generate passwords within password policies to ensure that passwords are generated in as secure of a
+fashion as possible.
+
+To generate a candidate password, three things are needed:
+
+1. A [cryptographically secure random number generator](https://golang.org/pkg/crypto/rand/) (RNG).
+2. A character set (charset) to select characters from.
+3. The length of the password.
+
+At a high level, we use our RNG to generate N numbers that correspond to indices into the charset
+array where N is the length of the password we wish to create. Each value returned from the RNG is then
+used to extract a character from the charset into the password.
+
+For example, let's generate a password of length 8 from the charset `abcdefghij`:
+
+The RNG is used to generate 8 random values. For our example let's say those values are:
+
+`[3, 2, 7, 8, 8, 3, 5, 1]`
+
+Each of these values is an index into the charset array:
+
+`[3, 2, 0, 8, 7, 3, 5, 1]` => `[d, c, a, i, h, d, f, b]`
+
+This gives us our candidate password: `"dcaihdfb"` which can then be run through the rules of the policy.
+
+In a real world scenario, the values in the random array will be between `[0-255]` as that is the range of
+values that a single byte can be. The value is restricted to the size of the charset array by using the
+[modulo operation](https://en.wikipedia.org/wiki/Modulo_operation) to prevent referencing a character
+outside the bounds of the charset. However this can introduce a problem with bias.
+
+### Preventing Bias
+When using the [modulo operation](https://en.wikipedia.org/wiki/Modulo_operation) to generate a password,
+you must be very careful to prevent the introduction of bias. When generating a random number between
+[0-255] for a charset that has a length that isn't evenly divisible into 256, some of the first characters
+in the charset may be selected more frequently than the remaining characters.
+
+To demonstrate this, let's simplify the math. Assume that we have a charset of length 10: `abcdefghij`.
+Let's also assume that our RNG generates values `[0-25]`. The first 10 values `0-9` correspond to each
+character in our charset. The next 10 values `10-19` also correspond to each character in our charset.
+However, the next 6 values `20-25` correspond to only the first 6 characters in the charset. This means
+that those 6 characters `abcdef` can be selected more often than the last 4 characters `ghij`.
+
+In order to prevent this from happening, we calculate the maximum value that we can allow an index to be
+based on the length of the charset we are selecting from. In the example above, the maximum index value
+we should allow is 19 as that represents the largest integer multiple of the length of the charset array
+that is less than the maximum value that our RNG can generate. When our RNG generates any values larger
+than our maximum allowed value, that number is ignored and we continue to the next number. Passwords do not
+lose any length because we continue generating numbers until the password is fully filled in to the
+length requested.
+
+## Password Policy Syntax
+Password policies are defined in [HCL](https://github.com/hashicorp/hcl) or JSON which defines
+the length of the password and a set of rules a password must adhere to.
+
+Here is a very simple policy which generates 20 character passwords from lowercase characters:
+
+```hcl
+length = 20
+rule "charset" {
+ charset = "abcdefghijklmnopqrstuvwxyz"
+}
+```
+
+Multiple rules may be specified, including multiple rules of the same type. For instance, the following
+policy will generate a 20 character password with at least one lowercase letter, at least one uppercase
+letter, at least one number, and at least one symbol from the set `!@#$%^&*`:
+
+```hcl
+length = 20
+rule "charset" {
+ charset = "abcdefghijklmnopqrstuvwxyz"
+ min-chars = 1
+}
+rule "charset" {
+ charset = "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
+ min-chars = 1
+}
+rule "charset" {
+ charset = "0123456789"
+ min-chars = 1
+}
+rule "charset" {
+ charset = "!@#$%^&*"
+ min-chars = 1
+}
+```
+
+## Available Rules
+
+### `charset`
+Allows you to specify a minimum number of characters from a given charset. For instance: a password must
+have at least one lowercase letter. This rule also helps construct the charset that the password generation
+utilizes. In order to generate a password, a charset must be specified.
+
+If multiple charsets are specified, all of the charsets will be combined and de-duplicated prior to
+generating any candidate passwords. Each individual `charset` rule will still need to be adhered to in
+order to successfully generate passwords.
+
+~> After combining and de-duplicating charsets, the length of the charset that candidate passwords
+ are generated from must be no longer than 256 characters.
+
+**Example:**
+
+```hcl
+length = 20
+rule "charset" {
+ charset = "abcde"
+ min-chars = 1
+}
+rule "charset" {
+ charset = "01234"
+ min-chars = 1
+}
+```
+
+This policy will generate passwords from the charset `abcde01234` however, the password must have at
+least one character that is from `abcde` and at least one character from `01234`. If charsets overlap
+between rules, the charsets will be de-duplicated for the to prevent bias towards the overlapping set.
+For instance: if you have two charset rules: `abcde` & `cdefg`, the charset `abcdefg` will be used to
+generate candidate passwords, but a least one character from each `abcde` & `cdefg` must still appear
+in the password.
+
+If `min-chars` is not specified (or set to `0`) then this charset will not have a minimum required number
+of characters, but it will be used to select characters from. Example:
+
+```hcl
+length = 20
+rule "charset" {
+ charset = "abcde"
+}
+rule "charset" {
+ charset = "01234"
+ min-chars = 1
+}
+```
+
+This policy generates 20 character passwords from the charset `abcde01234` and requires at least one
+character from `01234` to be in it, but does not require any characters from `abcde`. The password `04031`
+may result from this policy, even though no alphabetical characters are in it.
+
+#### Parameters
+- `charset` `(string: )` – A string representation of the character set that this rule observes.
+ Accepts UTF-8 compatible strings. All characters within the string must be printable.
+- `min-chars` `(int: 0)` - Specifies a minimum number of characters required from the charset specified in
+ this rule. For example: if `min-chars = 2`, the password must have at least 2 characters from `charset`.
+
+## Performance Characteristics
+Characterizing password generation performance with this model is heavily dependent on the policy
+configuration. In short, the more restrictive the policy, the longer it will take to generate a password.
+This generalization isn't always true, but is a general guideline.
+
+Here are some examples policy configurations with their performance characteristics below:
+
+
+No Restrictions (94 chars)
+
+```hcl
+rule "charset" {
+ charset = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!\"#$%&'()*+,-./:;<=>?@[\\]^_`{|}~"
+}
+```
+
+
+
+One each: Alphabetic, Numeric, and '-' (63 chars)
+
+```hcl
+rule "charset" {
+ charset = "abcdefghijklmnopqrstuvwxyz"
+ min-chars = 1
+}
+rule "charset" {
+ charset = "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
+ min-chars = 1
+}
+rule "charset" {
+ charset = "0123456789"
+ min-chars = 1
+}
+rule "charset" {
+ charset = "-"
+ min-chars = 1
+}
+```
+
+
+
+One each: Alphabetic, Numeric & All ASCII Symbols (94 chars)
+
+```hcl
+rule "charset" {
+ charset = "abcdefghijklmnopqrstuvwxyz"
+ min-chars = 1
+}
+rule "charset" {
+ charset = "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
+ min-chars = 1
+}
+rule "charset" {
+ charset = "0123456789"
+ min-chars = 1
+}
+rule "charset" {
+ charset = "!\"#$%&'()*+,-./:;<=>?@[\\]^_`{|}~"
+ min-chars = 1
+}
+```
+
+
+
+One each: Alphabetic & a subset of unicode characters (256 chars)
+
+```hcl
+rule "charset" {
+ charset = "abcdefghijklmnopqrstuvwxyz"
+ min-chars = 1
+}
+rule "charset" {
+ charset = "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
+ min-chars = 1
+}
+rule "charset" {
+ charset = "ĩĪīĬĭĮįİıIJijĴĵĶķĸĹĺĻļĽľĿŀŁłŃńŅņŇňʼnŊŋŌōŎŏŐőŒ"
+ min-chars = 1
+}
+
+# Filling in the rest of the charset to 256 characters
+rule "charset" {
+ charset = "0123456789"
+}
+rule "charset" {
+ charset = " !\"#$%&'()*+,-./:;<=>?@[\\]^_`{|}~"
+}
+rule "charset" {
+ charset = "ĀāĂ㥹ĆćĈĉĊċČčĎďĐđĒēĔĕĖėĘęĚěĜĝĞğĠġĢģĤĥĦħĨœŔŕŖŗŘřŚśŜŝŞşŠšŢţŤťŦŧŨũŪūŬŭŮůŰűŲųŴŵŶŷŸŹźŻżŽžſ℀℁ℂ℃℄℅℆ℇ℈℉ℊℋℌℍℎℏℐℑℒℓ℔ℕ№℗℘ℙℚℛℜℝ℞℟℠"
+}
+```
+
+
+[](/img/vault-password-policy-performance.png)
diff --git a/website/public/img/vault-password-policy-flow.svg b/website/public/img/vault-password-policy-flow.svg
new file mode 100644
index 00000000000..3c000b7112d
--- /dev/null
+++ b/website/public/img/vault-password-policy-flow.svg
@@ -0,0 +1 @@
+
\ No newline at end of file
diff --git a/website/public/img/vault-password-policy-performance.png b/website/public/img/vault-password-policy-performance.png
new file mode 100644
index 0000000000000000000000000000000000000000..b3a15fd9ad71255c49c7c7d0ef0e084fabf762e2
GIT binary patch
literal 131598
zcmeFZXIK<#);0=?q9|YhRFr5ygeJ!(sUQdvl$=wOGjx-a5hN=hN|s=gL2^!_AWF^|
z5hO|m$#7Qbo|!%0_n!AV?{&`kH$8jLWp`CQRkfZK?)zTL?RQ^Zij;(!gn)p6RQj%j
zA_2kCA_4*;u46~xmwA@fC;|csS2tyKoT7m!+io{z3-yt8Y$k(0l?UwI%|w6#9t+bXxTQQhMvN>br770?l{*1ILV
zSMtr8lwZ`#W_IqPp5EEYDwk*uGvn6i_57C}3-PTw9&%m3R<9Lnidxl*<*f29MXhW%
zulC2e%Vi%#$BR8b!k+cAs0d>)g(1mCuwx*Y94*9tCaOq+mx$d-$+?j>fgCC@l{@EGcsFHK{?pI
z9o0K*zf&d8&&jzxe+=Q=Y~!&+!tn8O}fDyyA`HD}SNwROF%;Qy21z
zz>#%>VS6n6S|fYl8t2oWa?9P8*4fMp!Rw8tIU%*z4!ump-?q}6CSs|V*bi54Oo+Sf
z&-^Y%CjDAr7xpt}N({E~P^s>1zpJmbWzycg(iIQl?bg1RRoFe^aYA3;qV$!jmSv@T
zr$#EbnyJTB*qGFL`{b8W7aR-PnP#}hWw~3q=B)DBt3MpNrmAb)-K{#>V)eqXA=YWc
zxOdn|Y+~RzQygxEIVH|%+r3No!QRU1xd+&s)UAumK`e_8#+8)53{uG3g;H=cP9|Oc
ze&;lOLZzWeMnF4@gMXy8?#)R~E@nOx!8?Jc>gPSs3nETpj2lw++-ds{hIYm7v|Ps>
zNKTwg*r6`AO)Pp^yDIrJ?eWvTEZlUG>X3U7~It(x>oul%$T^*
zcR=;VCr%vCMH$`qW`3eQ+#4M2Id^DyzTq_$+6#1o=Uw@B>uDRl4LdLdqM!KR*Y9Z!
z9&>qdMqA#UKfdX+>EdZ8C(3ZyDFGq=TLxNhXsGS`dVTrg3oTk2UpAf}X_+<`Fd6Q7
zhB2g@Gvfa~u<)}~dn96rq;7Kh8Yk0bzxaq8S+V!CZw0B+dYmxI^rn_VCN@qI&q*2|
zqpS|KiJ(--X){
zfup!^ZN%Xbeg{s4YC}gy4#}KG=MwJ7&V=0Xfe}}eFNL(}f(>09&xU0uuQeGF#Mqb3
zQ!Yt=-T8d~voVnv%MU)%@Ubi|mvC;6H1}lP=%B_=vLxj#V%1C;uio6vzSChO=2zL;
zd0OFK#8LjHan$+TSiuKZ!^eD{cvxQ`mRli?PdVKte4%KXRchk+<+=|Jn1w(MvZkJf
z$n9&fl_&!${);2(rEYwJZTtcEyQtdj8t0D~k5WXLAGzZiTy>p6e4Bvge??hgYYostg3B#)bw)s-
zS5wHH)-{PA4To+73yIP1I6li+AT-xJ`tSdb`L*y!|KXdiYmfLf%p{M<
zJt_-FKO{|^f4>r&r@p6Rdq&F1n&2`jW?1dkw;v<7*)ZWc-!G{jzSUFrB428*^%?3g
z>sz&>l9vbyUPaZAdk}{zd@JH@6ThC&N`iYo&(RW6RM%eO^xfpV$`{7xyN(`=S(bU)
zlL@>h6UVQ+6DX8EakIB-6XmCAxKYDV@{>0TYXPR_84x@`Q
zA};S9yLsMy#i;-NS>e|t7ZolOYB(KQ#@uxI+WMh>uJ+7O-{-@34RgMC5momTh
zB>1qXXjToC^7T17vx*~^D5;kZ+5RdzbZ|-k?(D|3vGi{;t=6R?!_y|D>9N8NNpTf}
zXKqWyclsYEWZt9~{1qqILiVob$rL$<;n|M8z@f4wj|Y3F7;Ce&UKE^o-+1#3afeJ0
z6+xbam{gyOob0Fo=>W@gD6P_+2F&p`Gt&2m3#8YAzaHk4SM(f;VhJZW=FHI^EXl;M
zd083f{p+Ky&ZrsfT>@b~9LaP->`QT*TXOHI0|P(Qh`Fx?er@M1@$b0Qzv%SwMeeNz
zmFsjbWgpt`=IWmj5h#-l!ajSbjd^0k%%fnPsC0^e=|0OD!F#%rXI#1P%|5&KtI0u`
zx3~!2A6pkO(|=xoI{&QVo&;K7#!;wCN53v@$(L}MY%}nw?`e{HJm<
z@nQ2emEjdq8Ukk$WABWr;SQg6CE=tY(nGzF|60ep&7Y4=HC9Z&az=(FhA3Kg^i-pi
z-0nk3p^?bsc>^XplV?}-j}%|{dhPiQ>c+SCCq*dx625(kx+=sp@|83Q-Im93H8b`^
zBIS>|`zC$wd3U8}9+65l3laHsd?8FX)Hvg=^;CDZE{~T!OUjXx;U3|K)QQ{TM2%V#
zXJWG6e{d=|b)`yAMdVs#^EJ!^c7F?<>)IqF5kaRs?w36ju~sT`${YxYKg=-gaCvow
zCy(h2OZ@_>
z@h(6>Jp0(4N7tEV?zsKDaPo!FnH9@*-cyoyB{;Gln=mL{jh-dAb6@&KtLzHn^o?(7
z{Aoe-mwyR~%DO*KE}vG;Xbrg3(}GoZDPMcpHJg39azlkCw2V>jVX;oV#usezynpAZ
zO_`!Ponzh2c;T0Z8WsK>b4Pe|h~-5DVyYfykYx2FFcYw)6UP%i$}OsG{;o%TNlIml
zx6#_dN@TIXoQ9Wk#LTgl4>dzMolHpup3r9f&{?RSgMB7KM(_($CALzb)_qgczl
z`sL(0r5_jbvz|D8kQwT6-==rF>MBBUmaB~8)@VH!>N{E0^t%5@;~eGKl@lt($)4U+
zRUto*7@u9f{fhmE)0@e0H$IODGvo0VoLF*WPjbKQ^O|5->}{^4~TB%EYtY8Skk$~==F9F^iv!CFe3w9hWwfN5Kon4fazxW;ii
z(Z`*_=ls?44^=I%4;38^nqO9uGUL^yZuOaY!Jl?yUATbg4Ab>d9Y1|-x@$Z7=JCn-
zZV5D(Gum#U-Q1t1Gb*~NJs!o@JT7q5M;ZG}RSsXQq+x2*c1)U@A{`BS^G1*O`PcU4
z%XNmjjPyoA(f4gbh;CQENPb=y$0{z|(rCGH(^TzsUxH2D+fjkuds`jHlM=L8YTKE(
z>HJgCU2+>g{FCo8oeU6&mEqT93DwyKeF`u
z#eIGRRZL0kb(f`0<4HB7uoaCnvR@MSO&yLzmeM_*jisfDOP^&}CRyvr3^sqfy+6+V
zEY{aHh%ER+4)KGFoywOJR*%#q;T`P)TP)4kYUGa(2;Ze2BqUog!^MgP58+B%I?Zlb
zoyZU@BR$!MBJj^nRk)?Wq)A4!p-RU;<9aT%^aaQ1^SNlHw$hvPXs=XD6Lo=c^v!w9
zTWsdkxlfi~QZ&owIqwW&*z|9BUPf)u@jRZyG96Ry9PU^>QrlZv9E4lAxZ5P|tXng7
z%Je#F?mUO>B5u~1z?)n~cmuopcw}Z}HB$M$Um;$Qu&(dXl;-Urrnezo=i3+^RW@&M
zq0jP8$b`zWv)p;Znkr@V*=C{{yQ0Qydg-vuIT6=~bh(eCp3>$;N#7%Fws>sw)#zSM
zwpNBC;kMOWmyzRQZXQ)wS84rILz5CNpSZQSLE4??)DaaOIrlH1?IdrJiX_=7EMr|P
zIMQ#&=9j0Xv{U4q_^!Ry`r;N-sWboECrpPE)k_2Djuiw`T-GSBA)}Tg_x_k_UKHT#
zbUnL8lE>_U*M+vFwSvxKF6FmV#+?+}{2kg#qQ7p&avw`PQx@EhDK~u2RE)EI91z@Z
zh3|Nku5?yrMXsKLF_hxXrS7RQUU);B2?lH(=QNg|6RF`n-^#ZC}43I`b~ezs=X
z7;-;f}MF>sICjplIQu2l`|@UOSU_1d!;Zt?0z2vKjtO#J7i
ziBE-J`HaT?>J$CvL*>F;#<@l(C)7_KBhCq
z^20U^?`RL0LmqnvbI=pq6erCS<_PIKL0fw>cAQ0onLFo+gVVbmw+*TXgb`#YiSzMz
zujnn$k)5~7cgg%8e^q~a^vCjddxH8ZsbjT26OQW=GoxwrrO+}_4~@zr@VZ}^TC?>T
z&e_?=URa@cbAg=XIr;ad8se4}mbotR&{NlCUXzN+jmMqey+mkB@h0=hhYyAF#F4oo
z7Y|w7(L5y6x-=l+7LQ*mY9155VCIpDc3Ey1R!kqKYUQ2cVq!0Gd9=W#fR-CuzDTZ$5Mfll$&7mxLzaq5|{gL+7@@9$QoG)$y3I+7aRU6;h^7Py)+)u`C&mM7$
zZ>AkSl~}SSapF0NSM2t*PA;Y^h&KGDp1bun6HdSTtYY(>u$R?5HgA0n+$gQ1$WYGb
z8c@S_W;l_F&%O4O3dCO2uY1+a=#u3+wvJI*PwWQ@4VliF3?_(w{9cdcMRm!EGla6N
z-U*Q&n=gCtEzF(HeBb=~wiv@6>H_=ASaZ?SjJSn&bO$o8WG_UyuZLKEWxBV3{dinu
z*Q6CJ#+_K(>rr$2B@E+x15D6akvw@%e_3*B?q+>O9>_VhJ7
zzLO&DZOjsg4{KfnRg&sv?h>##X#(2IIxm$Ph(kDHodjYDKGU>mcdXLsP
zMQPu4gCgN}Dy60)N9mflS;vcl5&@FzBgA4<8DwlNW#|%;$KQybhb4t2283@`C$}-y
zKNk@hFspG8rr_V@S
zPc=MzRryqs3e%_C{=dd)_X!)=U*2QrJ$hbn@`2CM{^chJwTm`cyB|xUDS{6_Iybm~
z{^;ZKn@J{vqYXvF0))G*HLpfiUeDF6G0hZ4P>CFJD|!?#7lHpt_*&@ZK^Q}H-sLTG
zk}csSFUisHBW|{jT2zXQCq?Dy9`ZQ8svsmId-U>rEHQ#cjAEiB!Y*i7z}gsRK<{F0WrIb#h%o+M
z7Y%<#er9K+|9uM1QiM@m?moS^t%ET=4;v2~2kMTCxf2(oC<(o=gOLeZQ9|;sCE%L~
zqZtlohh}GYc6MfS=4P{XFlFZy6cl9V;9}?ELctj*tg8*qzy)Q4y^JjJXAKEsEXKjy
z4rgv_LyxR!U})=z6Jcb8YC4gnMg
z7m7=e{qNVqQ8~GPUTuT@%Zgx6b{7LXc1|`9c5CZ@y8?^5HIT;4c6Drgm12*uUQs#9`#8-_LDjWWo*)_503$zeY-0?*2coLCk1sZf*Db
z3gqm+pJ{~o=XrLH4pzU-V$#wkuk~7UPKAR9ZrW5qVy;kuApD2>ttyTzp0bMn-(RD2x%WA&Q3&!-+C55#&Je
zaPS!k@bMe-3m6#wZ7FFREY83NV~i{Xi?f--Iv6e!UO{d_PLv6kAt#E*keeT6z`@Ul
z;uPdJ=HxQsH|7@L{o4`>4(1RE23CK6Dr6}mSjv!t#}IDGjl%Hq@}qdTj0{i$COiTt
z_>qfCkjL1B-;nF~Qpi4_Z{3#`VdP@t_}4G@tqgD`whq=JjB*ATdIhC_9Z@#7HdewJ
zAXek#6%gd&<`dxN6BOVS;Nbt)Nvg&USnzUWQBDpvPM+UKj4)_PSkeHz&D`3+)R^7Q
z#`O0AWM9zt&0UPG)Fohbn?ILw@^cFOFNZb$ewc&*&$95!XmJN)1DvgcvaPL^2qW@J
z^vI2WM;^WKUonN2wZ#}9vG@CAVQ=f67npDQUsO2pzET&4dHFZI8iC;Z2&@4~gV4z7Q@
zzml>2pKpKimX-N$Q_<7^&J}0_3}QtQMy!F8vC;1x0z3XWgfTO)F*Syy{8vQ&<9GA_
z!rM&@xeN_4CWa^@K@%Pn4~CN)Wx&m2g5nc2!tfdJ81V6MbN>74SX&dEvw?&0EmMd=
z*k_2q-}_8|{g0C}|NH6AX2ysIa&U2=ICxQc`Yoag`MyuV%lm!tllF8}*!f36m{
zwR44dH^V77+x)k;|1VDbvx2NS213jBzkBq5J4N_+SgK%+9mH*|k*xQ(hrVU?*SCK-
z2vWY#RuN-JJjf**--(sFl*Cytz;x_*U;(q@-{fSy2F;+C?@z|Ub*J8dkxq>qZN+*|
zsqb&aAGpfEgZ=r`9GYri_{SH5hwSuyhyL;Hp~6!9eqD(7E++WcKYk;i3e-E;?yav*
z`}=wScF}*nJXH99ZG)wacR@7g&$spU^;JX^sl%U~J4_{EdX9
zw
z?yjP#nU2R_BPAtmG|6YaaYH6IH&?ULtuQeusWj~`=UDoZ@;Iw{Z?L+%t*yvIkQmqL@}qWNZW8)%i()%&b-RuA^74^n!1
zdIsHc;^X5Lm6Qq{=Ts>vD6Z4ff724WmfdFYH3H=}@luL{mez)Kb$@4ZZso^U$+mot
zEredCLr
z9UaGDboBS9>C1sve|ux2ba!v>9Dnsz5WIMyWiOj`-}_tp`}+llhEA)ggnso%&sxYR#*s
ztIN#Ju5C@z!=s`nODiQg`ASe=;B{73SwBBN9%M`x`Q)$6=v&tLkPcM3Z^Ve(%gM{n
zer2!jdadV`w!CcLIhRwtU*@$E7VnW!S3ro>0Jn0QA9(lt`E!leSad8JI~f>EBVd15NQmC4odT0)>SsPa7FJfWp#``ZMfmfG+SK|?N_@|kS1eN%zVI;9
zeYu!2m*qtB>(!4Q5ylGG-wqMmFEPYm&i(WvBO|jgH2knBNKb!LL2R#JWo4zLgz(Qp
z4~6a+4l!kPr_T=-Tec_O*>1M=N_zS7^tf|uY%Dbmjf$NehlBZ!aAE&LFlgrK}qwrpkca}73`8YVnQ3#pB11|K6#Hh{@$4$Ye9STdUwY$_ff0
znW`Ci`T2zoKV;seq?A8PKG9g_IH#J5o|C%*@j8
zK+1}Wp@Xh7)6@5zor_QFH+=kfoq@rihfk=ovbeCY(WZEG#eMNvMTIagFK-&y3)d_w
zE9+9phR5R(<3~kNkJB0yYQBnz$s8KeMjm2pYz(WK_3PKK^!$7!r*a+0T!_)l%u->)
z5Hn0pnj8TO^Yg21ZEZnrfqyJ)ZTSn!Yin<*sHmismurPmoI96NQX&x2fHO0@TUc0_
zo|D7h;;OFxrlX@HJUTifGc!}rH`Ecb<5Em^YyRN;4R-e4clTZ+b?42S^GL=7UqMQh
zw|6xfjph**WrG+3H+uH$nYo39j9QLvH=G|he)`Or#E%~(tcOY-K<2dB82I(eiSpdJ
zjNIG@moHx?AtO`0efx0)n@&2s-VtKr)^gIoz`)dZ@9wOxuUlAKtEj2HzC`A0#TN~s
zTxizLh*XLjH!OOvvlddYN&dmX$O4BB9pZsV3=KU47i8q*C?JPILe#(&sn~Trv^F00
z^r-4od1y2@H`k++5)+YKh3A9H<=L{cjeGLs379}lPA(`aI+|BhG#g^t*x1;7`THj%
z1+{IM{*^7NcCve!L`6rk>g=JuU<&IX@djTKOjJsdzYseRhg6NVnNBcFTT84^q5XKh
zhEOFrt#B%KswHxA$H5%l$lQFUm#JY?PpjCb8%m1_P0?Iif;ifFA*MklCUVYwsg}6V
zdXP`)YOBy(|jeC{G&EkrI3HhG3d7D7v)nKRK=Y^FC!UHok)p
zBPP3aUr#Uo3NsUv6x7~MNZ964?&)ykHJeU{KPAgrmy!aru&{P0vi%#Q-g=ajls1DM
z0|OQ@i;La|JNZZNjN-v!#lgdnIdd2m*5`WHmmBCZ^7A|A-OMa4l{7RWuP`$(+#1~(
z*$9t_aFP2p>gOgZ(`j
z8JTU>7C-_e4Xd+Rvt5q5LTL1mS8qp0V!%0e>IUzPh2i{`+Fwvf(km*41gO|6*Fxc<
zAzG@`oSfdNc<%*Ak>TNCG;aFEGFDSFD$aHCLg&`|!TIf<`K=IaR#9rQ+Xr+!0{M^&@6(`ba8AYt6v+uPfoP71-T&#Dx=-@#y#;L6ms
zHJr%u$FpC)e2Los
z%N1!z)&u#bAr=-E$a_%d^*RRWlseoARaRF|m7?=hhU3_xUT`&}vRas%+Ye5*w8(?i
zXC@lMWaQ<0pjd~;$BWHvn1bhlTTU;#IN@;9v)vhpxxRn@USQfvi_*w@I(zeX@H||6
zv%}W6(p5T{7McbDUcEEC7?{#ORcBL-yn07l+lwOG(S_xiRm8>4vFqYa+!MAJxU~H}
zfE`{d74bCMCwT9@UT+n9`{jyW=bwF?7*7KOgV3sl)Wz9ZuAT>KYW#EC0|Ns?XbRh*
zl7yutyO14iMMXoBVaCgshtbsRU^WHOt&bFF*Kr)$apLo7h>y9DgUygvZ{7%)zH9vU
z?XBq6#MvB%uC=#si;LBAsf-mw|ou#>MuN;5D+L^fqarum~huA8}ty1NXw57gmC;+iyMC5_21Sb`Gq^4)7gz
zCCc5=CV>#??Vkjyb}y=q}$C#OitTXQ&Xcu?#y!I25xi7AcSE~7Lp>`aW*_#
zuR7av=ND86=N5VlR9`)>t#`e@;LSuvl(Z>rJL@yV^^~)6>&!dnV;oSQz)*3SeWmo%v!@
z(rO(xow8&o{UWPP+`3bZ(J?VyDe+$E0Mg5kgpDkyXF_>+9=>yqqEOa%i#vnsM*hG=^Tqw_4iR^gzG~
z`)E=H+<_uYD-=06FtDa@u%<9OGZVR5F3zA9HB=tFo48{aSZH15kpF68o*TLh7h`VwUqT(7fA2Qz$G}JE^TbQ
zZZ^SM(#fYN*;Z}gkz&Qm`wq%<*|P@_F+8MGQ;7M@FGM%vp^j=%^DWp|T3hqRs)>n-
z0Z%N8P2nGL5ua*_T|IBnZ^f4*Zo3cGy)P%%Trq%yblcn3WRl-pp4d7%I;vijl!TOw
zRX0+%aykS$A{%94X*so95f>MyA>NUg$Qbg&C+~VQ*#p|8aV^0zrc0Xr1;cFtr}qU)45;1&fwBhQW})o5f+0vcFVUe0Rm|-
zHQC-TFt97XRWt+8-`38~*D<@)f&yh}IMXKI1aq`Y`B1BxqV
zKl}ZA4ghvYX_=j$=XFdaCL)@SG>vNqmP~o-)Z6y<2S7WN^*q_K2W
zpc8kR?faoOSXks}zPq}*uG*Mx+;(*>9W10ebLKmhMR<5Pz`aknVdSL}d}%ullMCyg
zES*8;bUu-TNPxX%W@NnG*x0x_QuN}*sb^200vEkMK0ZEBicLY-=(lhBo-2(^Xz%?B
z&I%nTr=nl;gHwDGadl&DOz|FxfQLKh05v10BPI3iTYAAuWI)bmr`wb8>DjUZgy#tE9*`2%{%dO
z2uG2vV|Q|Ln*IFpa+%Y7R9aAsn71yVWZH~c;p3#F-A~9xQ+X|W&SO)NJPaF$UwrrV
zHG9U}w>9(Bi0%M*b#Tufu*E=?XSt%H;>6Tc%Kp9=ji^T-&y}=co8JC>Q%V||tfnSe
zX+?l|a7|!>aSB~00xLkYfy@P-hC~{mRa25=g?Q1d@NkMO_1wqR+kZl->hMBivqB=Z#q
zWGyL`^2xA0ey=~C8IUu@vCW+wOGuk;dLd?6z%yC(2c12%qpXGdyRSuB3K4R_tum^T8mD11gc)(yr`@6c@iv4
z$)b9ln_FqIVl^0f;tgeGWwWi79{~3wu>zkE5WC)`B%`3fzkq=vIbP{i)(<;IBn4HSyE
zipj^<7gUD{zGPE~T1_o2IqQ$S2NP=v_rSpGm5ZJVpm88owr6l?$ch9nA17>1-O_HD
zI}HH4*N60?tTn5Efcjvuts2M`Q1+~dk}((zqNSWUb7qp4{rsPhqT-7uD?-E*sC*#?
zJ}h^ssi`|Ye}3K|_+oc=cMb6n$@Ld&>vpQ#ETQ0C{FcPlK+VB19RY=mVBc?QRRDQ)>g3ITvW+5pW5(-)rd!T@!la0qCZ2ZnMmtT%A)o
z%qW!OMb-JVlsHA;>J8&%7Tq^gl$BHS@*H%rF~fckzKHfQe(FtFSQugqK;fY22*>e5
zZ34}=S6KtZZv*AF5-X@b0aU0Jbk`*09N_wxosQnsqlHC9H-J(B0aOKI$b7dFR6~$Cg~^1}fC!Ovf2cz+
zC2vk?%H-VU@^~3;CbVIkkCW4&%-5BgkqvmTWltvOGi!inYJix`OPS(aZfj_0=sp>Z
z6>?68yS#e!s($K{kQ1W6N=}bAL)?L=Vp(t@;8S99a`GUWc7A>yZ`nqv?2>T_NiGY+
zw>HM1H;4C=xdgqDuriG3{N5{K+m0s*qKxzsLRe;pgA7;v)<$8?z
ztDC*=fV<$wJ6(cEu9ckUcWvKBZQbgaCR
zZ-wRb)z^?|_O^SgdqTX{E*GbxX6EES9xT!AKk0SNgTf~}$m8i5_xL<$P~HcN2bI0+
zS=yzF2$p(G27n6!t@DMpoSYoqA`8$$r-v475kNJrBU%tf__xOM1BH^NMvy4A=nDXF
z2xeRbj|d0R4Lk`mjBQT%G0@PD&dSKhkc&+L84&A4FZQbsgCN*mVLfL<;0xW|-Nk$R
z2-;_0sD-~>0~@1qDIp;N5p^3{re+YWJDT4%YO>56lBt{9cFbZWCA==)fFMgXgU@zE
z*z%Jy=!o&ncN(I)bUmqMC6q+gmimVQASj_Vj-)+I0UMuVe@+)+SnEM7QT=NHC1h9d?
zinlbG-0+#(0|y5_pajw?;3AGGPQRd_$}HD!s+sDXmP_O5AM({%>zxKb^sX!hx??7u
zjVS^Yt>If3=;!x9TRR47KE?U-W+!PZ3N@j28Iim>eCSYtRezpfNG&8(g!Y31ad#U%
z1Q0W;g86{n|B2#E-W@XhDiT?nMM>YUqGso8j~@CI#x)1MZ9pw2+V-O*bJSAz(<3$9ce1
zqI#yF_OpED1tF{t#aKt~@Gy0CyAG-<^GT@<{&rGrBU
zZgCz2nZ3y%(H^X8rqI0*jZBo5{W{T#Gs-kzx_g|FRy>hStcodJ>p
zuINzH^E7@+1gKfE2ATtF-D-M~MX1Y{>(;hFC$XW_U!A|AATQ4+;<$)I%VA%*iq?(L
z{$my(G&GcJE^M1yXn7p0v2NrI(aG;y@3s8`P~
zPHa5n2WI8U!8*>Cp(@aVgt7~s2L(X^4F|6avMf$cmVjc$=NR!iJp9e%rnHO<*A0~_
zx!T%VB=;cQOOX1D=Obfca3`o+;zTk42Q*m@nyQMxhMPfS%(DC#DQTr;H#?}~_?r`|
zxAP-wCqUS)Z)o^|Lsw>FCfz45U%6t`vj;6|{J2$qzsay~_78UUU
ziL`_!;e1r73LpclPeZo8<#uk|ek5dI9Q#Sw<=#4yk-*^Ks09>&Q>4+xom0fQsyRI~
z!|>Ob!6w<#j6NjLTR;YN<6X#4o>YczS|aH6h)Y?7%zzfR254)pKImdGg}!S(^p2rw
zcAFaodsFT@mmcc
zqVWUTruF@%nQsy#AB#55%mA`J{T9R|yaijYhYVC=gk}dT7#qI>@D1526?{#}cOr_{
zQg%vzQrHNn5p+ztt^b0ly{HQNnm?_MX%}K^WN{m%Y@dT)msX7-U&M@K!
zy8(IMHH+#vydI!#2z@9=@1UEmA=E^C^ytvQS{9L3_KQYGFH_a>VNxix_+O`KXhat0
zqnn|;c7yOvqy{M)Ki2@_LRMDu+CY8U?i*-!axBprH&
zIpQII+M6}bo4EI&vZm;iI}H~Gch8KtPSL!Ih!|Oa|9#At4xtsI`qBJp|lj2Sx6NNQHv1af?X
zm9-0@;U(aMYP5Rd;X?OB6}6T
z;k51ywYd+^PDs9oC{cOvAOTt+h>nkRTrE(*j+&a92BY%LLke&2v}Yn8P4pB(m0OGm~u05FB+WJ&A4v6;TD^5XigW&<%kRoDQ%>)we%vxP?PHi
z$cMJ&L9%jkt})I(ok}PF3Ymwtn4^y5h&+~;$CX2)4=EPecqjs#R{Ef`$j1n9=E(m5
z#9;QxpAv-p_DF71WgVR?5DIc)oq?hw8n>>;@*R|JMPF8(GjKD_Dvwf4z+}IEYJlM1
zTv|1{|En00tP5P04V6+bpo7?qRG9yig7qU(Njj?##P#UWBV-#I!Xcot?+o@xd^SdigTqb@{mz;%`pnt0zv0jf2qBgr$dQnf_x||$S`I7nV{)>^
zav}FwjS^+Yn(K-Uu*M!5mBAtZ$nN{Ak>i%zd-{`kQ0<&ixE(%TKEByb1+iG(F7Om&
zF2=$l9eERw*J%VDB=~KHHtUOFv?a>Ngoc*3YTiIbgtU7)T|dS;o7)xu=YsSP82>^(
zRT@NE+yw;%)8GjqFSq3v(7}2p{9qsG8
z?ptR-q}tI-^BO=HDBGZND1);7;0Mya1lS7AoKF;1lvGq@juQ2sJ~dhtQa22A+C3bB
z5HERl2~u>iPW##O=cjuf4Rm+EgXb1}lI6~Ma;>*1=P4Q6#_X#69mdU4TvSQiq;7W6B-CDfQ0GU0<6aa&n?W!**=dR
z%rg#vI=?7wJU2W+-P6WvItqoXB8R1SD;gM;NA2RO$0ac@1ftvYO5VEl2u_Ba_=8Hj
zsHn)x@|85CGti6ptHh5UJz7EbN+^D=hgUc;17&1lVgV90u$v#`RKNG*;SNP@&q;`L
zo7kxkkza2>l}peNl1^zAyV_{^nHSm?VEIppH1G!G%=-GWEL&u%<-Ng^D`_Pq>d;!@K?BTX7ZlWh$D+P;3CK@4@YSx)
zPGoWf6R-U!{2uiEVLT)#xC?M7%tBn8D^h2LDJ{D>I|ZoE&#r?ouu4X(rKL68qGV<^
zP4kQedI)%u1Rz~p`swgugeU)q@@eOK)nM*
z0W{8kMSh`+Zk{a40%QltGFt63w}8O)jBYoD$6rc6HZ(+M7e-=jn(@%ZwO&XDLK2_T
zhcG^<`ZHB;LPHZ%;@o5q;yc?Qhp8wprXLR@u$oP<^a)vwTX
zby8618FW}oNQ*|icC4Y9-#=}o4WSn2wQZi0&=rgM;E3&aqf!jU+@YUr8|SNfYfIf7vr7Z
z_1`{2OAEsg7FIiumyqE$U>_~pRbRfy6mN|IO<&x8;RtXWvA{)JOUq6WI{+M;i1dQ<
z19E-UIn%YdS<)-$2IqDIr7M_+OQBbz^uEwzYel2=;5G%o;&i)GxApX%Y@H0~0BVe?
zDJdn9i*DWoVFAQ>L|PrGbO(sI7IaeTJRO~F*+Q&*3J@3={4gcCDpCrf2I8Larev1W
z88A2^yILvT0ZT)qdn;?150m!oktD
zDL*qii|ESGF3?z!FhbmPuN2&Sq2|=Br$Teb*N<Wxq5xSB@Jr0Na(NnS+D`9iE?=-Gq>7
z_j}MU7L{Qvg!#SQ{NmcyJ7Gcl?@!b6hYfShpy}c4NehDj!q8(lFD4W#A1myt2t7^R
z(axcvpFMn#lpvhOije1&6F&*HD-FO`DqF5PtL|v|i>p_!Mz+ksc0z_X6|w2)HORFz
zs|Vpi@KW$#+}CL*i92_g1qAwVVgOA$K`AiJ5MR&iRkE8f
z*G(yB0Qmx_8-5O-m!}9_uU8ES^F*d40_`NX(M^!t*3~)BQ&JjJo3zc~%I4MX-u)a?
z`|I}VQXM%=X*CuM!)tT{QLpr=hfZNf&_#aPvHMO=zbYQ@m79;(2O*Sxn0&-@Lk9#$
z_e}px7!5&2EkKoV^8`!<+WY#}ViLGwXC)Q}&_ICGZN)%Xi0&?lha`j)fB94ne|hi$
zvWdP#z&zH$7HP%Bz1CYWzz3}uS)h*i#mMPtGh}cJv~uK3cUe=@6bO(RUe*j~^?)MH
z+ypX(s*DUt?Vn0l<4hoay5$8VV%X)RvyO1>{fJ^kcK>%5J|>}4hkF#L}e9S-RxG;ou(`jD;NWkoQkvb>=fG6!D@+s
z)TNncw`kJFq??sNv1I+*}sNPPY6NCi!nBr^DQi6{SHm$_xT@-2!>Bu2s
zH8yp3cyuoonT~;`*bOiRq&j4H0aC?~C@3ozV+{0_n4dezhh%r!q(M~_#K)YagVAD!`
z2^uBZKv{7eNh$AnC~0o(~BDTkdv$S5-OGn@~v!)HB!
zYi-HkM`{d!WzePqEs^=O>b-f}LXg3;bSpKPnVHL6SMiXYaWfrPi%IGrnv6|MM(mGF
z-F^`jl@3!Z;2;-rJeNP6qlN(yNYjB!HXu2kW7BRc#ZFbIPQm~z5c%&H1=(P#3<C3m?_hNx(R4AD4xz^=@txH%nlS<)+0?hAc$eA
zIl5WUcDybss*4N^d2ScLqYZsnME36L)n{T3e`S)x$BIn)pz#PtWgmTl28P#0`DkNn
ztAc7q_uP&@=P!bfrG;ulBCig;tJINjIc5{!tHX%RDgUUW7%*h9XlX`%AuJ
zZ_rC%p*0vDZ+7<_xnUi_u9poKEhc#nCJE_g2e(v$xhAdY0;9%IK_NxhyZ?*5H-GDK
z{oeo0^HeGG&|r>A$WS6p2pKjZr9$kGAv8ydN`z2Jr3_`0BqFJlB1Fb0X%G!cqIv#2
zuD##y@A3HqzCV6mKfI1Z``NSmzV7Q<>s;q~u61u~#Rhk*Y@0K14dq%q@t8z4oa==A
zIIHT>_+hj;RYKtTxtJOr9Xe_6PYt*Mv}nkSsefIe7JzwQ{tF@K#;<%-Vpistt+T2%
zN&qSJGQP=`XBRm+CHyEaw{)_m_(6M6vvSu(k%LYtm+6M031qi=6_+RTPfCgw@c!?O
z8z0#y;SpKAcW(@C=GL|O?Vl`sgw$x^(Yhq}Fm#?l$wxGQ5G81IZ>%3MLmL#H?^&+O
z2@%ZdwrwhvdK?4soWZ8v$}V$17_p>)HAub|jr_{juMOF>5tlAKo>sq>yg<=bliYoj
zt&=qs1>nHypZmvf8Qk9dLh$SFnn>LH{(M_VUfW|*@A^wi`adg8hrwR2h5lFfEB{yY
zg3o0(!Y&=z`OTJ?GWS6yhL8x?rV0-2>MjLrrE?Bc*34E6QKMS6N4NZv68L#TK1FZs
zyO1`UthmFZNsVqR@`_(P&&;g9-@?`^$xU=~>w*B>8i0yrJz?~-7cbr|b7@+cmYSOT
zVMY~Zy1$Xct7qQ?1h0eJQ=8HMO~SuF#-Vp_n%@~zU@k6-q?un`W%)UFhy9Oh;X7gV
zi2kIQz!<4~`VeN#%Kq8%{oA+P+F6eiw`FR!KSVmVTU_#i>|UM~xh~1M^HnY&-VG+kzBfAKG8|tkY!Q7K|#rjj{%}QWohMEVi*v8N^8W4242k
z5rjkcUmM(p4M9)M`fPA@brnvL$h9#~th)cAoH<^L7a8*uLTYa0pBJAKb#!#Lu_HgV
zqkcr~-A0WdJQYBjCx3)M?&0CT#)z`-E_kjP(L0$Y<^>XFs
zTSkia-mezkcFek>Oy03$$H>p~s7!_G7jg6Et7#vP(MYht+OOU`NcHn(3OSKBVfOFe
z{ap4r8mNNO@?wYc&48a~O?9Z!@sq9Yu3PdVqs8ul2rux_9K&Fg_R4)d(z)25xp6BY
z(}NEb#1k#~BLCuI@fbIZIiG*7R>3WEe}5SoDqHO;*x^J1!;uv?sl0gxO$fqVk8yyW68Muf)H6a07dAs1O;Pth
zcrcs4f$L);$6ZK&*=9eAFJT-PR)Fo>#i>B1g2cO8QBl!V<-l?TAXrz3;L#|yS1w;3
zKWEN*cFsNZkLv&~LJFr0k&(ITXJWq)u$CWJokJQBe`eaW^uk@^XUtfQED3HFwXjCt
z?8?;CR5yZ|cZaEn*?u=HfkrN1fF@>LQ1Rl9S(sGJ>)
zF4A?B>qof#SJx#z+aeMiZnXWMuh`hpqEoL9_3m8l2)xWxPAK1`7n-uvCJR!V8`^d2
ze?NRk?o+2-rlsZO?{J|2OElW%vc9a!pZb#6|Lxi9ExkaZ(|x7XCr_SliLqSZBce6zXDxuU_4lauXc%Igi8BrV`&5Tpl8k%s@zN0Aochh1Hre)h_&*=)(7S)K%)w^eO`9$Y%m5v_SNVVb)1&SxPya)y;s=hM
z{s*%DzkmF^`ouKzt9{y${it^eyE1(~vsT7h))2+t3oT}bjDzI=%U(~t)K#!X8!
z@%`}k_jzB!C_F}}+ZqxTNK*+StR6gg(7K{}@uEdSia74$V+GP7oSl8SrTYGM(Cie`
z#2b)n8Vv=9A>|T(W@_NaqdXDeRlsm{^_Jj@5X_8kF6lvihoW&zq=f*gy}rhuf`8#@
z>Wtqx07Sv+({%<8(8bMIUs3&Ye>|p+tHJ<{m6w1)Yu-KK0T@2q(bRYixKp?Yp(;7P
zPI^0P1GkT>*P^_7bz#;edTB@$qCSZ~@N4zofB(4mpdC_=TYm>VHDhOP1P0@-dw0?<
zA=(lM`VkQkqD3mdX$DAU=u@jN5B5kg-}ELjN-`m}n}|-bz2h$RrEsUmIMdMRPPk@S+^h(n`_D
zK7daYi}AG^Hw?0~vw7SfG+Ha;11W<3p_Uwv{kpmSm#Ja>I8!=l#Tr7&k~jZ(@L(OG
zm(0UfcuP(DYwetto5I*lRmH_%a*Kchx2}j`A%$z6T6rS*NYoRGiZxB`LBd21#VOh$
zfL-hk=n!la*WbQfarfT6NjxTssszjCPqc5j?taX!<)UZvxo*qlsn-CqIt?b|I1;h
zBGLVI?%cUqpGzR5VU_mb`{!D>QDCF!G+w9=5Z8+!Aw(1M8U`2jUq7v^tv}|sx8}c~
z4@0T_j}kSqWz$Z`%r!ife_KUxT&-BX{FK&$1(rKX=-F9Kx`$f6Yo6xi&@`fW*UVLD
zc5JdqQ>U(QsIRQeF^zfMr(eGx$JO!-VRYIs#h)qLf3WMpjlJuyuneV2ZC{nBo|VGi
zmDM#TwUsAj2^`(tFsl6$jXaLAoqv4Zc<*y%F6PMZqdG4^L$cN
zDa8oA#rBliwbdc*#w2u;&&lm=`RxLBPZ0u_fGWLJ{{>`fFxM2_;2TJluN6X
z=%-C;NK+E6NXrgKvgWP-5)??~w7$G=xYR&*g*~?Wnn#`cV_vKd-d8C+(wglh?Kdvz
z`9QV5w{10T`)*nz{yLm<7gjJ-
zr5qg+~^x~zgMYWoq@_9L-JEa0f7IltY67?4BRy(}*t4KOsn
zy{#VS%SulBZ+ohI=jy=x(x3x*0=t!Iz&JJeYBoy!Ym9XezBcE^7p6bxvaV^OP_}Do
z%yhYloBFLy<}AmCTh6uDO|ON8rQC7E_iWzcJQFmW^k$>rfrMtcdzlDl;!>GS@&=x3Q9s_abOda;aTcD0b@0rvojyIg_Lugn$nb@@iOV6PMO~f=?zAh1_+**hVo^Iw+~Z{cBNCt#3%nrdJ!Skk5p7
z*tGS7sh|O21FHMQ(xqGbMsHNvqeGp=eqR!rh2>62=B?rFH6aG=ma*$1QI=l2G%B_0
z^jEJs_`8YYkA1aPY}fa!uT|3phyotbn)aVbt)g!K;@cKR-O>7WP?BiZ6%BzQje!b;
zSvKxFVWHcAl3-tSTn)Z3)laQzviW$e+%=+^No-Xd$O)GTOjs{O+ps9Ko$F#kgiU#R
z;=_EJw_9OzR&n-+_oJt?yYTqqI-F?=-IUz^G|%D4Uv^i1=4;w7pY2gI@k=*X>F9c|
zh&K^${Qnpjyx$tOY^v{aU(aXWlVb;4ct;<=TBP4a`yYKhdy2z4=k(}bem`~742nYn
z>}L8LR;oz&m{9rG&3%#O4|{QMuHgk8O!`v7Z~yY(Ea8_fl&YgOg{(tS;p3we>$fm~
z3w2%BXXJ7Gztq`92-Y;8^fkyD5Kb&11k^=goY9
zDO0B0Fii^9Y%N=6;IG_~gG>m3i_?TTo4~(1cdj4h${J{CX{Bz;gFoxutyoQN`t-A3
z;t%WvuBc?U|FX#>8}@_P@9aDMpo;_Rbn5*1=gEh=51DN<-a4r@wrZ`DlLj1B0oKsV
zk&(xVfkLH`nPRNJX3Zdotcu(?U+UpPHQ<>e{=wFpfKo6t^^Fu7>jX&VwI~@;>Ad*|89B_?L?=$9Wm
zG)>cQ3HPmn>*~_AYvGR{&)s@Tx!JtLJ&3?44@C$X$iB19cYw5iaPTY4?&1OPU%iLV
zT2VE4ijq?J!-vBWaz%e7
z88gli1o&pPdG_@w5z8+PR@*roz2ht9WABj~P5E;6)tX)55ZLmC-@m)_1a98Ex&3qO
zad2nvfDssoJWre`rZbC+EGjQQ#`bb)EjJAb?Dltu_L21JkC`yRlQX~uftiqEblZ)hteW$wu@cB9~?-g!EBP4*T
zW@6F>OlhR$-!(M|Z|)yW9FEgfHxNLCBrwyZO&zE*hE;)H-vZ!O-krcij_2g$INRTH
zh*4%tgXkQa(y>oL|I~S@SsmIkFW$U)LSF9#t$OZ2Fkrt$Wp12g=wo~uj&Soc=gg6Z
zz_PKKW@2K3a^1hr*CZ9~S;Dzb6^uGsg*|Mem
z_9_pMpjJ%~jsI1{i3w);?Ekuer8XVfol2Kn95QTJ`{z?1xbjaqIa3`Qsyc@4>(IV0
z{lyFU*|X0BV2<=3_3D<{V>hP&Hn+3$T;H)v%#&Tans4$vdsZ6nR$595G+`&ezgs4d
z9R+fMsp%-THs%F|wr>4Ldf%vsa<+vLqVAWJkT~S--W7|@pcNrv+{FG0n&ylTny!?W
z891G@7?yL1z?`VS~^7Ut6RAIDp3f
z?#q{#{JN>poW(ry!`=Je#wY`{t@`uF9GRKj{x&P?Nw9_kvkboaE}JW>rsl^LNe&#S
zy?3wbCEepdYw3)jIrlOzq!K^@gJ;>MaOYiJHzL7$4_5hlwtP9NTkoGRG8>_GSzbF5
z%-~sjHii6T{>0wqx*Z@3%%Gi|BP~?+eA7qSeZ&swvfy+N&Z3)}TUF^Bd73c^V^1J3
zhp2A3we!nt{AFE#{mkpZd=dhWx_ylYjueU@e@&OUJOByRwsU9B?5ZhU&Q9{5b6`q!
z@k@s>nQ>6H)NvgK&vl$xTwDwZMcmfrcvJMXK6lCGWP(2ra0A3ODF9kSW21zO%n@SN
zt5>hKf4X&uQ3;`!FTb}O#*~o@)H{Y#cWmG8KW&>NrdusjQ&aOVIC1uryc&VAMSszv
zu}TFg4Aj?CsIBXCbhZZasPQw7YkwQ@d_Pv2C4l{_~qR^EYlBt!AC~jSezeST=6j
z|X0g9`PhIe(v1^M{^1sR08H#>A*%40AhrbZ>i`6LQ^~
zcke97dNsFUR->V
z@^SqgJ0|0Z%S~|b!`4f>y%ilT@vZ9mz&l4wR|aZpYY*T^>+APmV}LdK@Rx`jufx0V
zB6zI1X`KAx#W5b-`wt%|TazC@?mTGFpq^{9K7G<>6Oi#~&+zs0BawIKR4E$W>cAI7
zpWhHxKWx?>1;`ZvPXhyw`T9!HlO(Zs)9>0^sFNeKBXTLqs;ZBlJ?qJ@=$;rpVfQPv
zOpgTXB}@9k5r_=|V-$uI&DDL3G93p=Qi?UL7xnojGG9tCHN~T+PrK7T!2+N1^RrC#
zkPyGd&OH|S1zvgQmj~`Rx>m1V&3#rCBzG3x)YjUM0dt*ZQ$w*PgRHHsqhp|%+{Y|F
zr)-|;;q1^$Pe(^$*sx=fk&}6XDKp8FjAL<)i<`w&IlU76J%NOR!Enu*aW{Tbq;Q+N
zcJD6pdpLRGM7deBa77Ny{qiMX>SnJ`B}CROR4fl`v)1<+seV7-ash~w)2?n?br83Y
zz##SW=RiCLCxe5R
zIylTBdd-|Y`!=%GlM^E*d0VkOq;{+~7M7NJ91m*QJ|kwIVIWk{+L$eT^AgZFpHLV(
z_HAC?iGYA1L^nm_`vWX3Ej=6W-n#WDE9)FbSxQneg((`%H%3kCu$u}?Y!b=_{s-DG
zb$^oHQ)+Bg-Dm3<8tpiOJ^J^zB$tzO@iIL|5CmVDJwG!6^W#?nm$|tddCnkMeF%@*
zc*BM<#Zhr_0f0SBH1oG_S46a7?|DyHdG!`|f-GrLmcZ!}v&1km5vzOsvEti!wwE*O
zs2gG03Teeq7&GS7*|Rz;S4vUH8idRZLZF*!p4!7R9|o)U12b*yF6?RnM_k$**-&r8
zB@!MyI4{-~hYzP@@U*Q1#L{!=_v7L`k1yM_Nr9GDEhZfhM3mXFYvk0ZYkKzX{TP;n
zzJ9rJdWW5Gh%AL%Bau6eP?aQrFOMZzRWWEPWkn5HMAs!Jlz=m%VuLVwO|WG{P+>
ztvitV>avhmSnQ)?V=H5;1R7Uw@j=831qk`|gBw_011RS#1|pg2;0
zFT;8xIeaG@NltcI`Hvs>otkG5A!Ri*MgYOKWCl;pa&~z(kE9P%tgND9S61&JwUJI^
zt#2QW5zZfzSKRh}j-O$&Z{KthRK)e`!W!rKU@JW%0-jTaO0i)nAeR62*JiBaxbQDt
zym%1GpvsA4c;@U`TC$-yO3uFZz}vUn(C{E>5`COmieY^4(j|Gwfh}YrNqd`R%lf13
z4%e_h1N33Di@0C6^jBi-NFPps#K@6L2^Kg4ndq|7(()-43dt~TNPfOw@5|5qQ?@?M>S6qjO2I4GvoSE5w+_-ROyRJM%i6KK48W{8e
za*|VC=jJMAwF3ip!;Dk(O)#slr#zlJcdq%b;nLDNt5yxYO?8BRLN?lh8Yoy7=)Obnd!q|Avc2au?a?$1x3(x<|Y+5
zEr59fjN^Vw3A9e6hVBQ%<@p;aYhAr^<->
zsh%aut%#chkQ*D~&tdVsXu9YjXPxLN%i05=6Wf}s65HDx2pQN>H)B;NXC>~5&PEDq
zqh(f7T6)Z>p^894a`s3~=L{qvlfTpHx+-K>UYNbl3#ljim<6*S4^-xwQKpJ?D!kd*
z*<$Gsn!r1YZg@m_7)d)-5(bD6W3oPCGfex@1}`f$e7N_~qeqQGYeA5Lm`wJcl4BVb
zSM~e18BRMA(^|tUI^I6TA5emGG0z15$|@+h!Gy-(q#$Y$K}of`8NLiPJV!(*&J1aP
zyL*m9ogz?ozbDl24;)D`=QhP%E$
zmxh6uvfAnjIh0ej2b@69QPM5uPLin!f8WSZS~gJ1qe5w>ab
zX3t1Jk}npMrW?{U-DN=ZLBbsRRD$i^&E385*RM=e1~0wi!NUl4H0pgX^3mKv5!vaK-`TTif<<(wzp3qY
z>HYgvYypPK3@it*&fu|83BAeAo{)YQRt5;@nUJ7?#k~Z_sG`wQ+l{_|MnD
zxyHP#TX3r-m9<#?WE1>69${CJXu5$*1!Q#KSKgJ|w|M~Ogn>N)fIwBYvdMm}{;trQ~D1n<`qh>$@zhJJO{QfL~5jk%v
ztx9Y<%)3;}X)CVaB^B^Rr1s89-VL;$OU)?LCO#u&;8*Nru0;rkG7_K0Kg|{`7Gun
zJM_tuZoquxL3-%rfT$pvmFw0mV)`h_B{#_>gwq_IZ<6F3#CAol(8!81Rnoob)ZSWe
zjGASjCleV@=_;NF#OtT1J9gwXak$}rJnxP>EfH3S7_D%JHjpPwMonkNno?*uZTb}T
zLohlvB5ka_zbo`p<37f!F`YtgzQ2I#EE&yTYAQ$FINXU%KPIU>^`;+zt?1$H{jIe=
z-x7?XmCuEPLv&0{+v8qM$y~5)+XPV9ox69{?
z;5zhSLPA>2QH)I@@z5kI&Sh!>lShLojCW&PRLTBYQlbaoBu$gXSB{>D3>~+tuoD>n
zoWBpw8@%rGjEn~3eodoPuc*co1cV(|hs|>K{E@;%W{|}16p?Zq>%SaGS=%>h_V%%3
z#uS#9zd-o4V`46p(r6{6Wr}Yvk?RGc)@Mixqwf~#>oaD2o`FeyP0dM8Go($A-o2&D
zt$8$%;^G!aL0&<9le+SxK4oV|?<&;dCiH1Z;@8Dw=V?C@DblGAS?6Yj`?Rvt6#AX|
z-Ze%K90B={fwcPDGbyv5^?AKfeYExTRH5AJD!)vc@k(xw4bu_5M`@01_z;R0J{W4#
zI7}uN+o0Cgt>dW@xhcI*>&cknV(0>7&WwPa#SH!H<>25zq=TK6mX8QLf4-ryB%~2<
zyh7F+NaY^=`W2(RN`J18@@i_b7eI_LPO^2CawD2q6+pplhFQ&@;U(vTLf&PZYu^0>
zzedvV3beb;-u3tMdrFEBR5{|62G0@ou&SnPW%BOG`n`ag01by3?7i)|
z_oFlG2rEKM&^s|)BBmJvZz@D6;E}No#Uz^h@$vn~8~hI_YuDa%c3<`P%*glCTCKcn
z0{fpT^wsIL^?J+RxRg81r`KQ2u$<5xja;(wQGO#uq=>xR_c4m0wMbVUy#gv
zl9Dv7AO6Mz(k<%!PF4la!*HhiY%ND~mWTI1i0=gRAV8$Lt@e>peCEDvbC7B>t{D$6
zuM`R;&fO)7LgEf)6{Z#jVFnRc(DwBpX=$2HA3+>3@fYEzJBO#I(k({ElH5PV?ifZ@
z_wD=l-?VR>^7l_a)VceuyLUH3%K@*Yq@@L1oG^a;#&7AT9x_wNdx+{09u4CEB8n*1
z=E>W)ryHwFVwgMe#Aow^pNId~3ot4Z8qKb$W&+`B^AqnOS`Q);4T;l;`}+F&^H^DM
z-$674ip>;pYkSh;vrx3Ix9=?GcehH
z5d7lcpm+j*K_+H9b{r==A~+3Kw>=3a52cq1vB16e4|bWr79jse2yWyKmLCIbTQc{4
z-??=*Ts%^2PcXh;B2)av1GkCU9pL!#?8_%V@fo%3ufL>WalUaJxz8c+^?9~Med(Kc
z!VvOT&^1d84F|x(P=I!pm%rq!m(?mmQB5`Yh!V$$R+o7zJiSkW*Pu5NZ|S>-?+aF7(-G2=yD0k?iZQKtsyN
zJ&3{FOc$S2vN$tb_1VNolqFR2sZc{aLmuTAvzhLu@^=LUA!5B@EXvFC(-qgp_JK8U
zbaE2%6h-Oap+m#i#sLA@iSN{=cUrs{M7f9>fD1bajmMCHUHkVxp-qI7Cm{Cw
z*K6ZjMf1;dv#m}FR_Tl)mXIew*5V=Z(_RhC}r3Iv6cOfEt
zMY~51PB`=ESCAId8t1YyLgkA@l~Na#5Lx#k*~6Hh~01T12KtZ(Jar
z!p<)#$XxWcdJdUF*cC9u=+?%LBr;ojdo(Xs76cgG=@5e&9}}0TG&d1%;A^_Ub0c@h
zk&j^^2g=Bx*(Jj%rako4`Ie8)GZ`eSk(d
z)=v5QF8J%OyQa%`hV5N3%_sA8F{N%g8@;&r36pySwZ(I1c#olxQ92?@!0de!sqv<%
zsfpx|qW_XIYAyF_olq-7R)<2~1rkNCorN?Dtap9rI1-lfcU@gE^Z@LxKe4kKQk395
z`OYBLgJ_^UV}?x5F~Ago!__&KgXw+zI0!oB^XFkW(dR3jpRr@;;ck7y?%((4kTQlr
znjP>Pv4hwJ;KX~Gfg&!dD%P&$r?rdJy8}cxWHbc^*7f7Us4)e}N<{^+OCj6~_|}0+
z(Cz(|sPl4jl$3nPx1?4Gpk!ul1EWw%8Ppoi@q&C?s;<#jW(I(v_pa}G{v09>)C*PL4fUqU4yE*yrQ5#-D=buQ!r=A*7d
zuZnkUT%w-tm8}D-`%FAyCa&0h|ACpx>{PDG+S%l?Hw`QS!vZ@e}VCy
zz=(3fFGfe762v$%46zoM%j3MfV7h%SUBAxUs!@0bE`br5pVcdMHD8(UR6oLJl%_5n
zcsxEqKx20lTZKr5vMH7{v9WlVO4wCm3zx-x2Pm6$0=hVD={&$mZTxr-lFV?T80q#g
zg_}2C0i>%INGx${lt2jTQ*;fJ2yeY+?)x#2u8NcmOkOz;Jt6X#UG-S_KZIGq2&-&}
zh>bl5nMSbBez0#6F-+a=kDHL?kRQ-ksdKR!%wYGUUOj@K5R^7xP83jjt5=^3acK)+
zcsXe2t@R)ArUE9ZCcKSbXJk}`;#FTBPvr{(vV7gTiQ1d%#~%KilOrGsJ}+iYx0SfG
z>18Avur6Th#D=fON_5XKmhq&oul%MQ*!2aF4CBU)LmDv6d5Xf#cFB&m=+524^8ERj
z)Fw^oDGWvsE)1(LfQ-0*|9+398^SF4!lKH`DKmZS?Crmnl`RAf3g!;SM#|b2N(XR|
z2a}xzaDkBr|5sHNE})KJq?H`-3gd+e)OK_U2S$18>(NAP@v;M+1KkY5r-V)91zcex
zuEy8z-pM2H5Hf@S$xs}`wo^t)7>k8ihkh&6GzRm{+unC$ht9%~vGUEA&c`DS^Z!I`
zOS%?$G}z^|>h){aLfJ~(WS>5Lnno0o!ex!c+(|msB~{Nr3h!mxa>BsRPm+_x0HC&d
zmv%oWFxe)3n&t>qE1@rtT=B*bocn;22^m5qfP>{g?)ve50*@I?Yr8XvT{mmbw;t>S
zz}Q}9M}Q05>YN)2yQ{0K3xEK_X0(1i7Nk^xDsSH0f_Fi1E?S$8LSca?sdOZyq!!?l
z+&KQ9h=>9jlteHwPwOS7o*KVL8okDkDe**c$8J*T97O`9=gopdAp8qozq&%UjB=`x
zh>MHcWNE32M$@hDP&dAxhuN^CdKfY=fQW2NGU)A92{5ffC&W4dbxo|UTcqPf4Vrz=
zdK5IIHrtWBSPdkpVv5p9+;8{psi6T#Uh|`&MB-o1H~
zOmKTfEsA1EZ8e-I$c>AdQBl!bu+Qbc?8Lw+A^=KowElb;Da`B*f%^3E*-*C&fdgv~
zcegsCJM#1~A_D``#{iCnvE$RHhLm+nxpwN;(1?h1kg~hnAILr)MGQ@NtN=FjfvSmZ
zs-NghGfGN=o+YEO;%Ou$Vj;G}CF|A=CEcSCokvaWU9_29IyhAOT5?To?e9N-FyKjJ
zQxYCU%-s`DcH($3MB>OOmzGmdl1z(8;RaQvPQ@58ic>6}_O)wei%agZ^>OwIs)5EV
zD&YR;Z}VUQSOq2or4oXLtb&Dm3q=Y#SXW2`GixgvO@RgN%M*$mAv?k4NvC@wlKgJ?Z83brh-_MjPwJ-S=3W4HK=Pu9#zl2g#sruzc4`Md3nhSjn-DAh5b$@?VPQH-fZh$@u>u;VE
zgnRwItB7kz@r(NJ3|LY0da^)u8a<9Tw%U=;O;93>*vqs^!_;C
z8mIdn0vF|js3)3g%2JvJT~U%wroLiJl3L)66(&#a3qwbR%Ojb?ZFP!f#BK@_c3HCKbbk!NLoBPVtrvnMFx-DO@BBamE9w{#i=o`E)AO4vKp*G
zH;aeFaqK9=XWR5xwrm;eD+&fASy#(MM3D8d+a**bvp;xPzyLaj^THJoy2qXx$uyw8KxpU;0BKl!eDm20&dvw!
z+3i-JeYa=E*15U^bvC{3GnYD_1VSnO~Ld+O;IAq?p@x3oOUP99J@$Kr|inw&|(NlA0gfK3(5i8#shB}SkL
zFEG*PH;l7q>yzity?%ba*ZYJH2XWJCEA!4vOY3Ahq;@Yni|IH(WOril?6cI
zGz7r7GvL?)MENW2Pj=Z*x}AKLEc>nlK#_;IJudIa_`
z{EsqUYV|H%ySC7O5I3t*lFW|^PZ(pa)=B;%MY!^()LB
zs$$-SDY}AT!{WpfAdySHb^Lql)+&^;C=o2B#?*@&$$!6Jhf@^`TmqmoGv#5<<<|Ux+@>-*k{0c
z=+{Z6`Z~ee2r;dRXNa*q^Oo>N@RAZ=lIcV&*Z_m)T!TkDNURh78BzOM~JU*
zl8n|(5<6i4AIg}C6MwkZ8g`J4T!;w^(bbG-~1d
z3Qh|(CK#L
z)22h;h{z@Q4mLT(Db^uhYHVTtfEyI1Rz?f*?JJFqGfv7bfE#qaHkB=$LGp0d54Bu4
z3Fm@YB?7oYT}#YsoRH)U$X9Xj*_cE(vV|(;1X&E(T;@r0_WNy7y`cR##!4sG$#pI#
z+)+A@K_uat5FUn1-PD8KEv#ttP~eX|0p-ZPaijxDbRw9Sk4A9ivk<_~s2$VfHt-yU
zT_4U{Ybcu3)iwVd{@CoQIJIgrJ}&-Nw6jQnm6c10R76i)1ugH2>ekEt5I1jAwjo58QwO#Q6
z018&+#wDKY#gHXA!5{m42CW!lJVak-vhtL5F`2=_3MhQJL_j*mP4)lCP#9uKXXg^Z
zrLWJQxhZ{sm?v>)<8(E(a5V3XUHJ~%MdVjgvt;{{_Ig<2a2x5;Rvm(6W3mAEr%ZX6
zDMNT^%7jyYuhP>yO0SvMkgJ?%AuO=>w8*F_qX{O$!GPb)e216*O{ig2vy?8;zX9H6
zumHGxrrMMmilV}J?Fv*`6b*ilDHrITPdv&7@{70=rV_{~3z!w-x7C8>Fz+^!1~l0{
zv!+cOhyxusqN1w0fE3E~r)YRo=W;}Vzqsy;p`pLu4qTG3Fp}5b=z3HR7!ssYa&~+q
zujF_*Z-8g62iz(g^e-@pj
zH}>y7L#B2CP0}OLd}bW)<};U=88%H9o?7I4x)#_agJ*0X%-xHsi9bL0fHQTpXwjjv
z2e|N_(m(NoJ=z1gJjQBFCS10ToWxho@5fA5{mWkHAu<=b*=N4wJrtd=ag*Pm~p5uVM0$N7|$Hvu$U*=*&>mKCde*0A_Q##JTA^Z
zte`JR?3wS3TZRH`K2d=6fSpmHcq4Ym$4+^fkzrdBbYPc_P3qgXlK5<7H(#ge!ASd@
ze!j}IX`9kd%A)nYshM*!6db0tXeJ>!y5?ZmR$+GZ#Y@SyPAcyK4<-Ca(YvvQCBJ%g
z0`5tWfj!6df1~Q)TPmz{R#t+Kh7xz56EuE>EeVafYH{fxmNMlFP;R}J56<~5Z!a%2
z-}fG`1vIZEHf`jop8M2r^C7GC(ywYans@`b^LnWvEWsLE*4DqpiG*3$EMUhQ57
zy>u^+<4G;wm4s_=*s#DgOBb}su{*?zYvDBXDbR2uKh4UD&A(P^A`KKU!+Di5lP?nD
z5%d5XmIBw~iU%E)k~Kl(BUXgsao~#RA%h3s+Vo5^+7e@uKwE-y=b2Iklio;z7+)o8
z{e#D~L&Om18E?2?dmAt5fpQl8FggntmZ^QrW;x8;S{g+iCJv?CvQ3t@dG<0_3dYJl*99uKFp1s|;Nn{tPAcq+FexF`h6o>qkml&N!|hNKAk&Uo|}i&vh$7aM!}
z>{)lh7w~0}{1KfK#{@&iD5I}CFI~NQBtAa=Q}F6lt2SX77Wp68&f>V)i}60Lm+E2^
ze3_HUomqo@$`JI13x
z!AeT*@YFvIbuXx)iVDY@S{saw6^CaD#~~fwU*jnqNu{25Av2E>DmfsCl42{P*l;OY
z5AJbO(Z6Y)fMS#;+H(NL1gjEy8GbLTJIxd0zQU<~6h%6=^(7KBqFhmYl28BUbkI%CjSM<2GJp
z*o|P})@b|ZTThxCSrde_FC{bAu3J}^tx4SleKcNC@iHYWN>H-0BV<~zx}99~PNrSL
ze_etRzyh7fmD`zk@B(B+)7riG@^2
zGqGqe;&@oHJ(V*40xfx5xiSX-Hnk)k8v_Ejq188-4W%*XLdKj28!Uv+hV{h9GKzSI
za+D4U#?!qdpDIC)23C#j65;^OK5uf7ZOKFV$+%h
zdV1lRcW=Nb!%?uPN(!316AaIs4)r3J)zgk)X|k&?z54jkk53>;51wtaHDu5PN(-K@
zr;iWG)Qc53q&{rwCJ(nmdoaC&&%9oqE&W5{TnM{OzsFglHBecumbP$iR0f#|Hy~L~
zg@g!El8VMW)yn$Mm8cpcEHntE3*S$ovrQK#iMPRNC@Ttb{v6vFlZiY|wTg=EY!;rt
zHSN}P%gpPR`SSt0C)3DkhmxjY2n?ECh+wGU=xI+Nl6Kg
zd-d!2xKeHLA#}Y|LDmsoX3&Lr+eyT|Iyv*}kQFHLhYW02s~JLAU%&Fc*_bDHX4jeJ
z_%e&>w^{7*=i|Q#N_d4>KDU^;z-<_YX#4(|TG+(UKRpw(KYtd57N}hG;fN*+WEnQ2
zDy~hKqmcDh+wrHQsIyG{2CQ#A2#(^jS0PU`)2}CjO2-afK`>URJMqsye}~*g<>D1u
zBOb)Zmk~ucJg~3aD^zy@gDBI;PG8qjT%|ZmKl@rTL{t@NIq|r#l5(WJ$OF*8hy)?iQ@ZmF^zZW$q-JU)9eq~IXQJ}r511WeUkLQUH~+;%+i_vJxqAY#_*sbIuiii
zV-*y%m5)$yc?~(EGZi}jD3*dm$>bAH1
z=bI9>*zp7lQ8G@MvebNTaAaA1MZ)C+38{H|mT9vXvAy0TguUOV*;3URMbSKoZoL6D
zkHOifeUzw7k~)Zf@5u7#fzYEJp4#XBgs!4I{Wiu?8F`
z421(ey#F|4o0U~_pl2kaoO9#%L7qKUy-E1W-gLO4x@O?nF>-h9^9#`zy0k7N4rBHZ
zcG+I#goERZOQ-06fliFg?J^iz%SDjW_)Mg}nGo3_6iWcV!X$}w{qXgKyPyJ0`ast)
z`upDu`7~!;!aa*yz*225EAmBQMg^Jc(xuMiILOr9yLMe94v~(E%|c=q@*0(((s5l0iIIpkQD;)3@4cz3uZbw{&E9ZLuEO3A2UQ!FpMU@j
z@ORkhT$VV+$?4@GkIU>AUyo03-@mU|BVlx^lb8-8at6+(q@Ex1{E7zEMv*au;5NEb
zk8dxJjeg$RHj%#NLEe!->DG~l6X9bX@eX0(<%WL1u4tqmL=CCSATa|{4^xIOK6r2*
zT~D;|$Hmzt1v63YG2PoQ;32wb72MOJ>k@yQFpLT@ifsiT&V8`&7+jWM?HLR5i1A*{
z(>AuAE2*vJr2muB&Uk+Iiv`*|m{SnZPETsoy8=
zoEn!d;-A%VVR14;;?~1nY@H~6TUxrg!VmQFsamJZZoc~8-|e6YokA@g8OrlI50*9L
zbA95)Yu6eV=@gK~X7a2szc_5ZgqXc0B$YS3N}*C;P`5h`!{8igwtV6he08lWtyXTb
zl?=L<(0iw5=Ek>yjvskAzK=wm+uoei{(@T1wxLRv)#~Kw0!>UtfM)0o^m8toHCZl}
z#L}c-?;uZIjgg@Gg;Eku$xQZu9rn}aX)~!qH0raF_g&vak|GI5{D#|I#C&-(b)?Rd
z1=|VfvgdwO*;#HNp0eCg25%`#>OU)gc>6X5`w%*H!{W^R#8=gc9_A#a{S}`M@qhu0
z9BE!(qjb_AmcB?BPN97zEsp?am3_cnN$bz&wr{~7FqmY^4+ZuK4==gWZxSi8)0>-u
zA94^m7V-Z};?iv$aAaZNTDNgD!i9*&KubiPd<2ZJtZ}@
z3$>LV&JWsXh1WgK`{bIgMX4*?yu22L|DDR}qOXL8zPXl@0S6OCC5D8va$Sr=CN?-=+}K$%;#9>tB8eBls`fm6ViVMN;TbK?$5B>|FCD7+gI}RL<>IqI0Jn_rnQ}
zjks_aar(+#{rm=@>xd3gUL!h^#)+-f%{w+fRFU-YzHpp0URI7Sx9h+G>wCXcomzD+
z%q2Nby&a?^rL*41NZ-2@x}$?1Z++fIp-TXK3}o7DQvlaHVbISjJx2N*g|@)N)k)H`
z3uunND3>kGco)&1jaxQ6rYHID7D1YJ0Gi1nmPPd_I5d^tLX(3B|SIYr2Ji)H5mQcdzjkN%3HZZ`yG8(*}xmgM}M?p^4W~C
zbdE$t&fVTFZH?o!lQypA%}q$}|+}kSb{aZ7?iz+<}{=PF~t_0NYL^s(EYI
zin{ep__9%u6v=D@c%zxP2~G^3rFHXKXz2V4U4PaVy&8IduzVKH+XcUV)rmh~-Dj}!!HNX2CCRV*A7oC&1!=}HW1B4C;4}5+IF%b)S`5-b0P3D<
zuCgV=U-sUKJFi?Tyd`RrPEa5MzG*1!%1#0n^(#*&R}RqQ6{6RSuP(6sIEZQDSvKrm
z(OPJh)#dPs6HDV=tb=5;xd48a@FmATqqa+@j=c4&zi1`lOfV1iDE4Cv+DuXDMK`{f
zEW_p*>lBb?{w!UEW{!QctI9Ti%zp)1JxZkP+~AU3RdQ<46{wkcklR!d14fMaQh4E+
zx2lfSVZ-qX$vwBv7&g4$(V62-+=Q9yp{+!|V|8DwXac@r_Nn=mKZ<8~>)t&v>H}Bp
zVe!-xF0GpQ*UXS(+H$wMTMkz?Xpf1Bd5k?&N!~P~RQ>hx$PcmNIUO+^zsl%v`M!eE
zQV$f)lkYVsV57VhFNf`0_9oa^LGrG{5$Zkrvf1heGJ}q#iJDyW)>f8CZ$4#HoIw~|
zbU``tdyC0*in9C6g~1`P$Tgdjf4F1kZlVnio*aL5DjJ@C`_JbOa&xw&ZAzUuv^uD-
z>(26###7dqJ)w-L?cLpFYJjdm@d_()b$X&cvSy+EP4V^4lAdlEng&_dS4}+IY*L;v
zNw+RZH8WjbH)(v3-2s>oAyY96%oV)5!Za7{jpp3a57!3??ZNKPw;7pLJHF_lQWI|)
zXe$wYTlf`@zE{5)74;MwGp*f6*+|bdq~5Io3~#HO)0`X@NhQeBD%J?qjoBvJ+;
z9;Y%f2%ND*H!v}tw{DJkb1QJhjucEv(mP8KIOvIzh
zPb9N-SlhRnm|_@5F}Z%kp?ShL3nj{3H@J`J85wh@fe#-RlMSknSr#zc0o%{=!0x7@
zhWg$+BUMlN_if?LhRCpDjMeG7G8+5Cy~C+oIH`xV<&rV)s5sPZ5BNnfC1nvICx0od
zKK*@W(Vn=f>T2P>b<>iCPCd-PTMRp$sa=JQG~?yV%|CW%xG00ztUeBYQBo~Ea-yC3
zNEK~dTnmV=?<=G4+;IyG97bb)G$qT5=3;zIC^0(t#i;r{d{=X=v;g=zXnMc*rkc^p
zzWK_Wac48yK-2VPpNwB^6{p2}`=$&t35l|38;lq}*?@PD#?sv2^z*JxW9@fc4
zSEgDRj~^(Kygu#v$O;$3!aDH*91f>@?9uu4;ObQ|tOZxcVJ6?G7(rx*Vg%mesJiEV
zq2b
z2cye6$|#vA%1`$T2v`_4W{&TvjEoY-G9m{(_K=VlmaTw&-q(sKe6+KkWUXBnd8NyG
zDMlSYtRkEAWOkWJV091_(8QR%8|)u-0Y9@?L$58CI=Z5>G%^uqLD
zY5?(j6lg)XIPuvp{8mLA`kXMf$PgKI>t1IDIYPY7p<}o^ybUtTU@<;B#ZGJdz|$FF
z?6(3udS`w8coE}Ri$||t51_Uf;HjO(`3KDaoS}=poq$PwQfMNg(I6Oe3q*~H$!Y1kzY2#4lqQ9>yM+IIx$nD$y_40fUAZS;jzrC-TFDa;Q+|zDiYTAEpNPoZ}Py-rg-?L~CvKtM0VR3Oo#OeWDH~$!;
zvf_HAi=Jgj)V^~;3|zXl;TpS_Jcbbbd{!siM9G}BMQ!`L5$tJgL|g2LhP&rE`?d?k
zK|@)12pjnX64|p4ijHf8{S@%1tQtQqoM!~N=6*NWKbEl>KeF0hyzgqRkRwd3mUA|~
z8V~utp`WhBw_O3{6P}+bscvkbvVx3pHG6zS3{OyU41uws0gOp5J*nJjIdP@O*L#D!
zy86SHZMkdLEtZ*@y*|^@<=!h&FQ=vfYxZxtLK06OcxfKJaqHF|(MC6vhphqEYS`Cc
zA97F0SQ2eyaApXbg<%42M7=KEy2+tWVT4VkRYzX!mx@#1tU#M-`!QIe!bBK$y33!Z
z85JvqGI0bEwPi~7Qj8WSPo3(B4ka25m_Q`oJmK0ZFBA|U2xG01-gV6OF1krvK!5+H
zs3hsh0XfRFh$1K(tbn@A&Cdw-JT+=l&b3L0j0g7m{(bq?CG#4is!)HDzkC@14bgz_
z_BRCI-GC_<&Y$-px1C|l*`NdxY5-PGCgTG3Zs}Ub885SIk^vy9y#)SgffqR09I>IEo!V5iXY^C
zYL8};%8L=P+!9V2S2n*$njGsrzgC=*DsEg54EaH55*?Xfw{-P;t0oGg(k=*|fW(L%
zWaS*@xv#3+mHdA6#(oc(JL2Kx_2a#R6Zg%Mia8XRZJzI#7m%|hL-l~ot{k8u+Px2>
ziALjvax@{6-4f0u_#H-BOqRBD(QCg
z@q7q8y2ks%IJe+FnyM?six&iz&^~cUC8DnMO=l>w`}@je5dXgwU!---jM<8!Ep1w#W9hV$?s^kE|Ix$6KY7#;Ey$r%uVP(JcGR
zeCN)k-nNK0m%DZCyw_07K7z*FXl2!#eF>#6M?-t%E+g&%Cn1b%GQ&fRrwjtMq?Q6X
zCtJE9ZwQ;1L5NWA!N-_C#k7LU6W8wr>I-j`(2Qv}$=f*x+EBCzbIwHTA!X9$CRbLU
z3UB~jBIsyS=15gnS1(_^y4#GvzF>=4;kr1gPW>sr;d^jaMyG>Fa>i~uFcjrZhunUB
zNv}WgM2_7?3&`o_1f0U7UlkE?hm5l-_a4G~8@=%%yxAkUY{j*KqHtvrgR*Va#ui${
zM{H?l?6o<4zk@aGr-@c|)hCE0%=hVG-T}G1qRJkAYhz3{+3c^u3qt||JUQVQE&5^o
zGot5*VII8JI54|EBT#wnqMX^YSF|6T(o>y2-5p~Q&X|INf(|mr-0?l&>wV!EPT2z-
zfe7clpE`llkF2}bRjQzdxQq;veplYN=UHFhYAwmY$m1_EK9yz12)p}c*TeozvPy3)
zNsiI9-O+s`3AY*Ky~!6F(~*877WHu@vhF!F7K!GY2067werlBUP%dAz$69h`FyYId);ooKR(xZqh7D)^YJ*x
zaUADyI+tC&e0$KqfetXO>YGz3^LFfAld~t#<@N2Jn(vt>*Z|g5fKbVZi#fIE`qMTk5!#-TsSi(
zE>j8@)Fnvro2(ty5#_M)b0_D$$w^7I{XR9DIAe4Vts@sM*e%OC78@&Z1XTtzrIzD5
zU%7t04O?H<3n#c`3uQ)qt<8-f>42yr%^Vy1nwjO`1vtX7eabVV;jN%0iF#p!AwdDCHvmqac^(Fi
z{AfEgR;*!A!u=ZBmv&xAbk1(HMr>XdUpI`aF1dr==Lj(V%rfF~u@^Wk|92CBks#kn
z^t#BuI;pJV#0ZwhP=e->CKnfCp`8ZvmoV?5=wc;)^RTvC8w62tk$Sel#No+v>C?=Q
z0yhEqI0E&8anB5Flgc>-+4WAfuls=0fR;;of@Ij-_79kUo5+QciyK24iH2RV`XB~$_RgDvUK*cv`0wnl29)(xX<1;iGQFsa0u3oR%uRfVB{G$0G99`H4?S&l(0%&j7B>R`Q0F88ojWc%V0ys88aFvT+gI%8gxWjDl_NafULf-LSR0GuGt!
zqT3;;qn8f>6{u#sp5|@iq;4aL-r_yMh>bdLmU{$Y(^fqxQQMAhHw+n}dQB
z6|&mB;V(FxpV}IMD}(oxr^AiiS~vKGjFC|u{mLa!WYY3e^0+b*M0w_Kts`C&_~y_P
z`_ln39hB2!Uxv}5Cx!wd^0-9tLZIYn$UkH8GM^p48fAu#W`%XFUu*g}B&Iwuq$Plc
z@B_FDrJV25LV0kf=A4}I?T*ukrgZJHbCmcAfvvpZZ8=x>X?#oc$#6DSkPqu>eooO)
zw`F7>Pmn_TEczWkRD+QdwU1YzK1QFrfn&>gmdGyOfUe0ErzE5}BlJQU(Q6K#kOtqM
zQ1tCD{^{kl@>-^Q+|2Jl7)h>QUJa5ad_^hg#(Lbi&W~oae;RQCU;uMJrsx>p@7=ez
zvcEasOnr_SEuT=J1VEa+^y*eT#r#MEtg<~`Pr8eGw`-U?sy>yJ}
z9z?Zr^@vrNiTPs26Y)$uik;pw^*n;mt3Pn-YXKZ%ziq4l1IwCQ(J+jozZ&w=o4azPqY@hD`qV-$J6Cp2mBk
zg!nPKx23OegeH^^7kM$4s-g*)vS51wuLV4~+IQqi;zWcU%U24&8`4@}k>FB4z~C9@cA;8$=t@HE
zrSbA+-EI|eKNWTgTe1+6a}nFXI#)&Us7mv0v_ku7WNfVWG8$l3D#>#wZu~DFJ77hR
zL=z#!URG8bKR?(5m$tS5_DP&5o7divIolERinxlZqIt`f{xV!@-Lp&Q&Q6Hx>$=To
z+xP75iyz9TO+zyx=^fY>dD1qKJeXbo_;Hb_fUt8HrT>Q}WAb_yMDAEa3+r6hLtXJJ
z=aktwMF~j63_p@)3)h&xGwzFrCcRttpH2L41qUdk_sBHC+
z4q#v{Or{C@%nF;NoSZg*Lk5dn(c?o1b_sa0e!T)dpl=vvl>vlE!+u^vtuF+l-r
z4VhH23EcapxxQrqA)NS{LLKCW%v+uXiqo~v>5eJ0J5RXJppou0Ww~;EkKi#K0+W3a
zN8D&~g%s-mv{m39hayf_Z5Vvt&6=pmH8-kjD!AO@$4;V{3V=*MI@77!pZD0DlfGEw)Zqf49Z+ay{-t
zPN%Qo+`)h_%8!w%npDhFFD;l5v0vv*S}mVk9k1G1H&zO*X5jVW?p?(t{cq$JE7GhR
z5%k#B`-Y=~Ggd3XfurB-?l0C~5Cu&E&_xhLlX(Y}>Kp~5=s%p@`ZSJeq@q>8aIKE_
zB1|3%zO5EFwA$+O@gf`G@*CF_d3sfpiZzIyscAquAGzD+!<
zKt#7q8Lv;GqnGz%Z!ti$&9PV1A$=GCK(VEfR-;u
zMiE9AB>1+k?F_uI>a}+(S~4Nhn4#N3r39-o?%p1FCGZ38<=}%m4#R`S7c1D$CDi(mEQD|n1U<)Y1G{Sq(@W?)QA+Pia(R9_*GCL?2
zRbFc1Xe5j3%Kn62KYCya=9~vFmM(pz4Jae_v0xR9EGVMW4TRmGu+%Qc(qgN5vM0R{
zLYeHVF0Zou3_P(?%6K07?@!Mr1MK@4P>gR#&@4er$O?z?it18TGa
zt?36-UX%iyQ!m6n`6cvMMTI5)aUF)O4dSB9aXubL@qn;FM_uvm%P*c>b#ay0H_W>Y
z|JvZb1ks7d#^`F#CE2zfys`&Pj2vf9brGkM)NM{ad^yo;^=b#K-J|O`kBQg`(0)k~
z%}tdDC2Ncx^eJbbQvt?=!lmOaaR}ytH0<6CXSB5}tyVbDsFqr*kX#^#4R!9bLeFy^
z6T{jxR&BkWa@>h-N;%7we$bCx%WV_*76fHus#Eh1Q#3WqCAbxLZ~ilwe;1tqgJZM
zL7(rrAu@7W;MRW7bev*As%du<*~entm1R52!C_>2-_YUa7|VSOUop`X0`f2F2wA9t
z_J-{RI>+_CxvURuR_rKP
zkm_X1dBJg(R`D@EZ^;rQskBo|_#a140*d6&V6QRb##thX%t%}V2`F_47gZD<
zu&FXqN>nA2g^p=D2y|Cg;jrdMY$zcW=t9S<{-H)lq+Ra=qWx$Wk#p)Tugf6~VyW})
zeE42n#(p?mnu|tgx9B2iE+9eb$>6c6&oDN+KUp?u$)^V6n8ISBuvbLhT%7h0Dme1-
zB!P+yT0lmU`knRl8szi~;X%xS{T9H0HVu&8GG`?%wsfkZOrwS=U^=4xy!8YLM@nrR
z$duBzJ19Q@k#-=t%UH3I%*?5w`QA#Acm(856qS*VYFL9<
z&Y>|RQ!-3rl7=-!KM5mj3U=9Xw&T?wIgqCB}D?y%x0i
z!I~$3mSf%7mSm=lU&Vykv&A)(@;GDPAWh!eMr0bVW)1+K!)c`nwOKaCg9LDbDVY;t
zpFids%^8DSG(i7KKfn?(=QHy9!LwNaoX60UI3tN;9pO1>$Kjv*PQ3TNa$tO9{0ww8
zq$?}JD@72eo&sGNfJ6K)sh(aiT}j%)X2n9a#pefEM2M-JKH_vkftdZxp*M7Bt#J?f
zg^11-P*%0gKZ+oi0#CR-iKhxOp0g{)P3Eqk>>L;z(G2SR{jT^TgcWVte=L6Q>sy7WxXZ&-7{b)2IH_-2h(@hZ0N0ToI(=
zb9jqg#Bs_ZI9}=8ouU_fe(wbyGRcSu3(=qD=jT(G2n>t-0~lMphY7W^vcR~W0ncf7
zzr|W2@P%ylO?C23EAq{HmrO#HjT?+57dv;$O?vU7^=$8-ExB$D3Awz{L#Izm_Jo4}
z#q7AyD2DACWL>>+xMmC29=Vw>ZoahSdLH3e#c>K`6ke>G^4C=@WdO5)PK&Fs<3sGG
zd>7C{Ea7KMKOiD9YXb&MTY{ki@XMBRj6Nrf8x|D01A9R;dN_N}Eqm%#aCg6P+TWmX
zLj`a?$z&NH1_eM0UZh5x+qjyAp9Y;dQ=`|n_m$czkZw7jYyk^uU8SO|OqZ{UI7zJN
z$t80FFTZWwSgoD7(6HFU?28wsAo8;i1_UoT4;C+8NvzG-Zg!3EF6at26LMNGa`7W=
zO2rPRtZ-nEQ`(lcfn4iE=9ca*L}#%6!Mr(dQi6ZcZas{h9Y5}BR{7!)Gd|~PLGu*<
zCfxo3#ByB2w3P#sn+gZ!jxb&O%XZo8uhsA7KiES@=^_`1pU-K1|2p0j=&5Vbf(1h(
zuKp~|s+)(pSRim-mOuoeKE=9Lz*~7WJRetl+%=xOF!7i{VkABhT>DX3SU(uXK@{~I
zZEqSDcFteQ=&R)W<84SgqORCb&J3Z5x9|;VgB~V54b%E8u7I_$GS=#(q13RxZ$`W4
ze==BSyOI9A2rhsdZblMu+eiE2NGm3;H|cxczrXpye(=h9OIxFHSE^mTu9=Bzff*2#
z0)T4qRT~2hQkfHXWw*(Sldq~uLz)hs&~d>h6DE6h5Aif!SM_-Sh#|cOhcgP^h$!?P
zP7w!&^>p_4L%Pm8n3F%yv$l-DBk`9+pvL$KbyV1}$6(yzPf5gZi+DE~J{C4f3|I~N
z{)4j-Ba9%9BE=Fqk1%`~lZhv}i*5xjSv<^Poy(`&U{3*{dQK3E6yu@>rd&@bbo~l+
zx1)`1-EvEh#qZt_d#O!>4CX8*Mfah+rtQ-Jnda&-oMcAWC9cQ-$=|TMlz%U|Ms_Wg
z>I278Ks4qPi@=CV`SXuq!?7Y(Y1JzQ<^Wuz36ipk&48MSak`QVM^>C~|KRbNsvhMB
zph$veulwByT3`315zO&=+7D)lH!uk!wJsWLa{$zrR(;DRgl-v2D=nNBI1h-w3Pps*
zz9?c9zov*1!~Jq2kQ0W%C(N4Flx)pYe>_&h|9i72K??P*-DDw9j$U|O3sFa%JgIlb
zi$W7_f6x*4Rj;nH2am3iSS<@=0R3<5yIpQv_Ow|(Wj>E2<B|M;bNHwUDZ~*!ar33!
z)D?xN5>OhCaoa$n!5jL78Tos?T(UCa&Q1$G
z-I3|Jiw;u7;G~m~kZ@??(llptViMl2nv{-w0k0Uh-Yt|xiwMog5{LwZ-+8x_LS}T>
z)`SYal~)y*Q_0qB?F!}~m
z6DK|%_uwg#CLSibRY9~txJ;hLMlP8!uji7U5jheuL+^ghXjiUh6t+0z+nuDO4bBQT
z$J9BLI7Qhi@&j76*+FjyxUzwVpmA<#O+Jqmq|b~