From df23fd33546611abcceca62ea3feaca54c971576 Mon Sep 17 00:00:00 2001
From: Kalyanasundaram Somasundaram <ksomasun@ksomasun-mn1.linkedin.biz>
Date: Wed, 25 Nov 2020 13:38:11 +0550
Subject: [PATCH] Deployed 3bfbf06 with MkDocs version: 1.1.2

---
 404.html                                      |  10 +-
 CONTRIBUTING/index.html                       |  76 ++++++++++++-
 big_data/evolution/index.html                 |  40 +++----
 big_data/intro/index.html                     |  20 ++--
 big_data/tasks/index.html                     |  20 ++--
 databases_nosql/further_reading/index.html    |  10 +-
 databases_nosql/intro/index.html              |  22 ++--
 databases_nosql/key_concepts/index.html       |  18 +--
 git/branches/index.html                       |  10 +-
 git/conclusion/index.html                     |  10 +-
 git/git-basics/index.html                     |  10 +-
 git/github-hooks/index.html                   |  10 +-
 index.html                                    |  24 ++--
 linux_basics/command_line_basics/index.html   |  10 +-
 linux_basics/conclusion/index.html            |  14 ++-
 .../images/linux/commands/image10.png         | Bin 53238 -> 60696 bytes
 .../images/linux/commands/image22.png         | Bin 50147 -> 90158 bytes
 .../images/linux/commands/image24.png         | Bin 44474 -> 37213 bytes
 .../images/linux/commands/image27.png         | Bin 57334 -> 75722 bytes
 .../images/linux/commands/image28.png         | Bin 57225 -> 74007 bytes
 .../images/linux/commands/image31.png         | Bin 60940 -> 82195 bytes
 .../images/linux/commands/image32.png         | Bin 61191 -> 75214 bytes
 linux_basics/images/linux/commands/image5.png | Bin 34740 -> 35016 bytes
 linux_basics/images/linux/commands/image6.png | Bin 42407 -> 46293 bytes
 linux_basics/intro/index.html                 | 104 +++++++++++------
 .../linux_server_administration/index.html    |  66 +++++------
 linux_networking/conclusion/index.html        |  10 +-
 linux_networking/dns/index.html               |  10 +-
 linux_networking/http/index.html              |  10 +-
 linux_networking/intro/index.html             |  10 +-
 linux_networking/ipr/index.html               |  10 +-
 linux_networking/tcp/index.html               |  10 +-
 linux_networking/udp/index.html               |  10 +-
 python_web/intro/index.html                   |  10 +-
 python_web/python-concepts/index.html         |  10 +-
 python_web/python-web-flask/index.html        |  10 +-
 python_web/sre-conclusion/index.html          |  10 +-
 python_web/url-shorten-app/index.html         |  10 +-
 search/search_index.json                      |   2 +-
 security/conclusion/index.html                |  10 +-
 security/fundamentals/index.html              |  70 ++++++------
 security/images/image26.png                   | Bin 153623 -> 241797 bytes
 security/intro/index.html                     |  12 +-
 security/network_security/index.html          | 106 +++++++++---------
 security/threats_attacks_defences/index.html  |  76 +++++++------
 security/writing_secure_code/index.html       |  18 +--
 sitemap.xml                                   |  78 ++++++-------
 sitemap.xml.gz                                | Bin 214 -> 214 bytes
 stylesheets/custom.css                        |   1 +
 systems_design/availability/index.html        |  10 +-
 systems_design/conclusion/index.html          |  10 +-
 systems_design/fault-tolerance/index.html     |  10 +-
 systems_design/intro/index.html               |  10 +-
 systems_design/scalability/index.html         |  10 +-
 54 files changed, 596 insertions(+), 421 deletions(-)
 create mode 100644 stylesheets/custom.css

diff --git a/404.html b/404.html
index d295ac9..012d833 100644
--- a/404.html
+++ b/404.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="/stylesheets/custom.css">
+    
     
       
     
@@ -545,13 +547,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -636,7 +638,7 @@
 
   <li class="md-nav__item">
     <a href="/big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
diff --git a/CONTRIBUTING/index.html b/CONTRIBUTING/index.html
index b4bd045..d87f5ca 100644
--- a/CONTRIBUTING/index.html
+++ b/CONTRIBUTING/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../stylesheets/custom.css">
+    
     
       
     
@@ -56,6 +58,11 @@
     <label class="md-overlay" for="__drawer"></label>
     <div data-md-component="skip">
       
+        
+        <a href="#building-and-testing-locally" class="md-skip">
+          Skip to content
+        </a>
+      
     </div>
     <div data-md-component="announce">
       
@@ -545,13 +552,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -636,7 +643,7 @@
 
   <li class="md-nav__item">
     <a href="../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
@@ -857,10 +864,37 @@
     <input class="md-nav__toggle md-toggle" data-md-toggle="toc" type="checkbox" id="__toc">
     
     
+      <label class="md-nav__link md-nav__link--active" for="__toc">
+        Contribute
+        <span class="md-nav__icon md-icon"></span>
+      </label>
+    
     <a href="./" class="md-nav__link md-nav__link--active">
       Contribute
     </a>
     
+      
+<nav class="md-nav md-nav--secondary" aria-label="Table of contents">
+  
+  
+  
+    <label class="md-nav__title" for="__toc">
+      <span class="md-nav__icon md-icon"></span>
+      Table of contents
+    </label>
+    <ul class="md-nav__list" data-md-scrollfix>
+      
+        <li class="md-nav__item">
+  <a href="#building-and-testing-locally" class="md-nav__link">
+    Building and testing locally
+  </a>
+  
+</li>
+      
+    </ul>
+  
+</nav>
+    
   </li>
 
     
@@ -871,6 +905,34 @@
               </div>
             
             
+              <div class="md-sidebar md-sidebar--secondary" data-md-component="toc">
+                <div class="md-sidebar__scrollwrap">
+                  <div class="md-sidebar__inner">
+                    
+<nav class="md-nav md-nav--secondary" aria-label="Table of contents">
+  
+  
+  
+    <label class="md-nav__title" for="__toc">
+      <span class="md-nav__icon md-icon"></span>
+      Table of contents
+    </label>
+    <ul class="md-nav__list" data-md-scrollfix>
+      
+        <li class="md-nav__item">
+  <a href="#building-and-testing-locally" class="md-nav__link">
+    Building and testing locally
+  </a>
+  
+</li>
+      
+    </ul>
+  
+</nav>
+                  </div>
+                </div>
+              </div>
+            
           
           <div class="md-content">
             <article class="md-content__inner md-typeset">
@@ -882,6 +944,12 @@
                 <p>We realise that the initial content we created is just a starting point and our hope is that the community can help in the journey refining and extending the contents.</p>
 <p>As a contributor, you represent that the content you submit is not plagiarised. By submitting the content, you (and, if applicable, your employer) are licensing the submitted content to LinkedIn and the open source community subject to the BSD 2-Clause license.</p>
 <p>We suggest to open an issue first and seek advice for your changes before submitting a pull request.</p>
+<h3 id="building-and-testing-locally">Building and testing locally</h3>
+<p>Run the following commands to build and view the site locally before opening a PR.</p>
+<pre><code>pip install -r requirements.txt
+mkdocs build
+mkdocs serve
+</code></pre>
                 
               
               
diff --git a/big_data/evolution/index.html b/big_data/evolution/index.html
index ff1a9a1..12dbbc6 100644
--- a/big_data/evolution/index.html
+++ b/big_data/evolution/index.html
@@ -14,7 +14,7 @@
     
     
       
-        <title>Evolution and Architecure of Hadoop - SchoolOfSRE</title>
+        <title>Evolution and Architecture of Hadoop - SchoolOfSRE</title>
       
     
     
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -85,7 +87,7 @@
           </span>
           <span class="md-header-nav__topic md-ellipsis">
             
-              Evolution and Architecure of Hadoop
+              Evolution and Architecture of Hadoop
             
           </span>
         </div>
@@ -552,13 +554,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -653,7 +655,7 @@
     
     
     <a href="./" class="md-nav__link md-nav__link--active">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
     
   </li>
@@ -910,14 +912,14 @@
 <li>
 <p><strong>HDFS</strong></p>
 <ol>
-<li>The Hadoop Distributed File System (HDFS) is a distributed file system designed to run on commodity hardware. It has many similarities with existing distributed file systems. However, the differences from other distributed file systems are significant. </li>
-<li>HDFS is highly fault-tolerant and is designed to be deployed on low-cost hardware. HDFS provides high throughput access to application data and is suitable for applications that have large data sets. </li>
+<li>The Hadoop Distributed File System (HDFS) is a distributed file system designed to run on commodity hardware. It has many similarities with existing distributed file systems. However, the differences from other distributed file systems are significant.</li>
+<li>HDFS is highly fault-tolerant and is designed to be deployed on low-cost hardware. HDFS provides high throughput access to application data and is suitable for applications that have large data sets.</li>
 <li>HDFS is part of the <a href="https://github.com/apache/hadoop">Apache Hadoop Core project</a>.</li>
 </ol>
 <p><img alt="HDFS Architecture" src="../images/hdfs_architecture.png" /></p>
 <ol>
 <li>NameNode: is the arbitrator and central repository of file namespace in the cluster. The NameNode executes the operations such as opening, closing, and renaming files and directories.</li>
-<li>DataNode: manages the storage attached to the node on which it runs. It is responsible for serving all the read and write requests. It performs operations on instructions on NameNode such as creation, deletion, and replications of blocks.</li>
+<li>DataNode: manages the storage attached to the node on which it runs. It is responsible for serving all the read and writes requests. It performs operations on instructions on NameNode such as creation, deletion, and replications of blocks.</li>
 <li>Client: Responsible for getting the required metadata from the namenode and then communicating with the datanodes for reads and writes. </br></br></br></li>
 </ol>
 </li>
@@ -933,30 +935,30 @@
 <li>Resource Manager: It is the master daemon of YARN and is responsible for resource assignment and management among all the applications. Whenever it receives a processing request, it forwards it to the corresponding node manager and allocates resources for the completion of the request accordingly. It has two major components:</li>
 <li>Scheduler: It performs scheduling based on the allocated application and available resources. It is a pure scheduler, which means that it does not perform other tasks such as monitoring or tracking and does not guarantee a restart if a task fails. The YARN scheduler supports plugins such as Capacity Scheduler and Fair Scheduler to partition the cluster resources.</li>
 <li>Application manager: It is responsible for accepting the application and negotiating the first container from the resource manager. It also restarts the Application Manager container if a task fails.</li>
-<li>Node Manager: It takes care of individual nodes on the Hadoop cluster and manages application and workflow and that particular node. Its primary job is to keep-up with the Node Manager. It monitors resource usage, performs log management and also kills a container based on directions from the resource manager. It is also responsible for creating the container process and starting it on the request of the Application master.</li>
-<li>Application Master: An application is a single job submitted to a framework. The application manager is responsible for negotiating resources with the resource manager, tracking the status and monitoring progress of a single application. The application master requests the container from the node manager by sending a Container Launch Context(CLC) which includes everything an application needs to run. Once the application is started, it sends the health report to the resource manager from time-to-time.</li>
-<li>Container: It is a collection of physical resources such as RAM, CPU cores and disk on a single node. The containers are invoked by Container Launch Context(CLC) which is a record that contains information such as environment variables, security tokens, dependencies etc. </br></br></li>
+<li>Node Manager: It takes care of individual nodes on the Hadoop cluster and manages application and workflow and that particular node. Its primary job is to keep up with the Node Manager. It monitors resource usage, performs log management, and also kills a container based on directions from the resource manager. It is also responsible for creating the container process and starting it at the request of the Application master.</li>
+<li>Application Master: An application is a single job submitted to a framework. The application manager is responsible for negotiating resources with the resource manager, tracking the status, and monitoring the progress of a single application. The application master requests the container from the node manager by sending a Container Launch Context(CLC) which includes everything an application needs to run. Once the application is started, it sends the health report to the resource manager from time-to-time.</li>
+<li>Container: It is a collection of physical resources such as RAM, CPU cores, and disk on a single node. The containers are invoked by Container Launch Context(CLC) which is a record that contains information such as environment variables, security tokens, dependencies, etc. </br></br></li>
 </ol>
 </li>
 </ol>
 <h1 id="mapreduce-framework">MapReduce framework</h1>
 <p><img alt="MapReduce Framework" src="../images/map_reduce.jpg" /></p>
 <ol>
-<li>The term MapReduce represents two separate and distinct tasks Hadoop programs perform-Map Job and Reduce Job. Map jobs take data sets as input and process them to produce key value pairs. Reduce job takes the output of the Map job i.e. the key value pairs and aggregates them to produce desired results. </li>
-<li>Hadoop MapReduce (Hadoop Map/Reduce) is a software framework for distributed processing of large data sets on computing clusters. Mapreduce helps to  split the input data set into a number of parts and run a program on all data parts parallel at once.</li>
-<li>Please find the below Word count example demonstrating the usage of MapReduce framework:</li>
+<li>The term MapReduce represents two separate and distinct tasks Hadoop programs perform-Map Job and Reduce Job. Map jobs take data sets as input and process them to produce key-value pairs. Reduce job takes the output of the Map job i.e. the key-value pairs and aggregates them to produce desired results.</li>
+<li>Hadoop MapReduce (Hadoop Map/Reduce) is a software framework for distributed processing of large data sets on computing clusters. Mapreduce helps to split the input data set into a number of parts and run a program on all data parts parallel at once.</li>
+<li>Please find the below Word count example demonstrating the usage of the MapReduce framework:</li>
 </ol>
 <p><img alt="Word Count Example" src="../images/mapreduce_example.jpg" />
 </br></br></p>
-<h1 id="other-tooling-around-hadoop">Other tooling around hadoop</h1>
+<h1 id="other-tooling-around-hadoop">Other tooling around Hadoop</h1>
 <ol>
 <li><a href="https://hive.apache.org/"><strong>Hive</strong></a><ol>
 <li>Uses a language called HQL which is very SQL like.  Gives non-programmers the ability to query and analyze data in Hadoop.  Is basically an abstraction layer on top of map-reduce.</li>
-<li>Ex. HQL query: <ol>
+<li>Ex. HQL query:<ol>
 <li><em>SELECT pet.name, comment FROM pet JOIN event ON  (pet.name = event.name);</em></li>
 </ol>
 </li>
-<li>In mysql: <ol>
+<li>In mysql:<ol>
 <li><em>SELECT pet.name, comment FROM pet, event WHERE  pet.name = event.name;</em></li>
 </ol>
 </li>
@@ -979,7 +981,7 @@ What is the output of running the pig queries in the right column against the da
 3. <a href="https://spark.apache.org/"><strong>Spark</strong></a>
 1. Spark provides primitives for in-memory cluster computing that allows user programs to load data into a cluster’s memory and query it repeatedly, making it well suited to machine learning algorithms.
 4. <a href="https://prestodb.io/"><strong>Presto</strong></a>
-1. Presto is a high performance, distributed SQL query engine for Big Data. 
+1. Presto is a high performance, distributed SQL query engine for Big Data.
 2. Its architecture allows users to query a variety of data sources such as Hadoop, AWS S3, Alluxio, MySQL, Cassandra, Kafka, and MongoDB.
 3. Example presto query:
     <code>mysql
diff --git a/big_data/intro/index.html b/big_data/intro/index.html
index 741df2f..43e158b 100644
--- a/big_data/intro/index.html
+++ b/big_data/intro/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -552,13 +554,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -704,7 +706,7 @@
 
   <li class="md-nav__item">
     <a href="../evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
@@ -996,7 +998,7 @@
 <li>Basic understanding of System Design.</li>
 </ul>
 <h2 id="what-to-expect-from-this-course">What to expect from this course</h2>
-<p>This course covers the basics of Big Data and how it has evolved to become what it is today. We will take a look at a few realistic scenarios where Big Data would be a perfect fit. An interesting assignment on designing a Big Data system is followed by understanding the architecture of Hadoop and the tooling around it. </p>
+<p>This course covers the basics of Big Data and how it has evolved to become what it is today. We will take a look at a few realistic scenarios where Big Data would be a perfect fit. An interesting assignment on designing a Big Data system is followed by understanding the architecture of Hadoop and the tooling around it.</p>
 <h2 id="what-is-not-covered-under-this-course">What is not covered under this course</h2>
 <p>Writing programs to draw analytics from data.</p>
 <h2 id="course-contents">Course Contents</h2>
@@ -1021,7 +1023,7 @@
 </ol>
 <h1 id="overview-of-big-data">Overview of Big Data</h1>
 <ol>
-<li>Big Data is a collection of large datasets that cannot be processed using traditional computing techniques. It is not a single technique or a tool, rather it has become a complete subject, which involves various tools, techniques and frameworks.</li>
+<li>Big Data is a collection of large datasets that cannot be processed using traditional computing techniques. It is not a single technique or a tool, rather it has become a complete subject, which involves various tools, techniques, and frameworks.</li>
 <li>Big Data could consist of<ol>
 <li>Structured data</li>
 <li>Unstructured data</li>
@@ -1042,12 +1044,12 @@
 <li>Take the example of the traffic lights problem.<ol>
 <li>There are more than 300,000 traffic lights in the US as of 2018.</li>
 <li>Let us assume that we placed a device on each of them to collect metrics and send it to a central metrics collection system.</li>
-<li>If each of the IOT devices sends 10 events per minute, we have 300000x10x60x24 = 432x10^7 events per day.</li>
+<li>If each of the IoT devices sends 10 events per minute, we have 300000x10x60x24 = 432x10^7 events per day.</li>
 <li>How would you go about processing that and telling me how many of the signals were “green” at 10:45 am on a particular day?</li>
 </ol>
 </li>
 <li>Consider the next example on Unified Payments Interface (UPI) transactions:<ol>
-<li>We had about 1.15 billion UPI transactions in the month of October, 2019 in India.</li>
+<li>We had about 1.15 billion UPI transactions in the month of October 2019 in India.</li>
 <li>If we try to extrapolate this data to about a year and try to find out some common payments that were happening through a particular UPI ID, how do you suggest we go about that?</li>
 </ol>
 </li>
@@ -1091,7 +1093,7 @@
                 <span class="md-footer-nav__direction">
                   Next
                 </span>
-                Evolution and Architecure of Hadoop
+                Evolution and Architecture of Hadoop
               </div>
             </div>
             <div class="md-footer-nav__button md-icon">
diff --git a/big_data/tasks/index.html b/big_data/tasks/index.html
index fcd25a5..8e3fcaa 100644
--- a/big_data/tasks/index.html
+++ b/big_data/tasks/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -552,13 +554,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -645,7 +647,7 @@
 
   <li class="md-nav__item">
     <a href="../evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
@@ -688,7 +690,7 @@
       
         <li class="md-nav__item">
   <a href="#post-training-tasks" class="md-nav__link">
-    Post training tasks:
+    Post-training tasks:
   </a>
   
 </li>
@@ -936,7 +938,7 @@
       
         <li class="md-nav__item">
   <a href="#post-training-tasks" class="md-nav__link">
-    Post training tasks:
+    Post-training tasks:
   </a>
   
 </li>
@@ -962,9 +964,9 @@
                 
                 
                 <h1 id="tasks-and-conclusion">Tasks and conclusion</h1>
-<h2 id="post-training-tasks">Post training tasks:</h2>
+<h2 id="post-training-tasks">Post-training tasks:</h2>
 <ol>
-<li>Try setting up your own 3 node hadoop cluster. <ol>
+<li>Try setting up your own 3 node Hadoop cluster. <ol>
 <li>A VM based solution can be found <a href="http://hortonworks.com/wp-content/uploads/2015/04/Import_on_VBox_4_07_2015.pdf">here</a></li>
 </ol>
 </li>
@@ -1007,7 +1009,7 @@
                 <span class="md-footer-nav__direction">
                   Previous
                 </span>
-                Evolution and Architecure of Hadoop
+                Evolution and Architecture of Hadoop
               </div>
             </div>
           </a>
diff --git a/databases_nosql/further_reading/index.html b/databases_nosql/further_reading/index.html
index c4f4422..b3bafaf 100644
--- a/databases_nosql/further_reading/index.html
+++ b/databases_nosql/further_reading/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -554,13 +556,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" checked>
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -654,7 +656,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
diff --git a/databases_nosql/intro/index.html b/databases_nosql/intro/index.html
index f3c389d..909794e 100644
--- a/databases_nosql/intro/index.html
+++ b/databases_nosql/intro/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -554,13 +556,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" checked>
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -738,7 +740,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
@@ -1078,10 +1080,10 @@
 <h3 id="types-of-nosql-databases">Types of NoSQL databases:</h3>
 <p>Over time due to the way these NoSQL databases were developed to suit requirements at different companies, we ended up with quite a few types of them. However, they can be broadly classified into 4 types. Some of the databases can overlap between different types. They are</p>
 <ol>
-<li><strong>Document databases: </strong>They store data in documents similar to <a href="https://www.json.org/json-en.html">JSON</a> (JavaScript Object Notation) objects. Each document contains pairs of fields and values. The values can typically be a variety of types including things like strings, numbers, booleans, arrays, or objects, and their structures typically align with objects developers are working with in code. The advantages include intuitive data model &amp; flexible schemas. Because of their variety of field value types and powerful query languages, document databases are great for a wide variety of use cases and can be used as a general purpose database. They can horizontally scale-out to accomodate large data volumes. Ex: MongoDB, Couchbase</li>
+<li><strong>Document databases:</strong> They store data in documents similar to <a href="https://www.json.org/json-en.html">JSON</a> (JavaScript Object Notation) objects. Each document contains pairs of fields and values. The values can typically be a variety of types including things like strings, numbers, booleans, arrays, or objects, and their structures typically align with objects developers are working with in code. The advantages include intuitive data model &amp; flexible schemas. Because of their variety of field value types and powerful query languages, document databases are great for a wide variety of use cases and can be used as a general purpose database. They can horizontally scale-out to accomodate large data volumes. Ex: MongoDB, Couchbase</li>
 <li><strong>Key-Value databases:</strong> These are a simpler type of databases where each item contains keys and values. A value can typically only be retrieved by referencing its value, so learning how to query for a specific key-value pair is typically simple. Key-value databases are great for use cases where you need to store large amounts of data but you don’t need to perform complex queries to retrieve it. Common use cases include storing user preferences or caching. Ex: <a href="https://redis.io/">Redis</a>, <a href="https://aws.amazon.com/dynamodb/">DynamoDB</a>, <a href="https://www.project-voldemort.com/voldemort/">Voldemort</a>/<a href="https://engineering.linkedin.com/blog/2017/04/building-venice--a-production-software-case-study">Venice</a> (Linkedin), </li>
 <li><strong>Wide-Column stores:</strong> They store data in tables, rows, and dynamic columns. Wide-column stores provide a lot of flexibility over relational databases because each row is not required to have the same columns. Many consider wide-column stores to be two-dimensional key-value databases. Wide-column stores are great for when you need to store large amounts of data and you can predict what your query patterns will be. Wide-column stores are commonly used for storing Internet of Things data and user profile data. <a href="https://cassandra.apache.org/">Cassandra</a> and <a href="https://hbase.apache.org/">HBase</a> are two of the most popular wide-column stores.</li>
-<li>Graph Databases: These databases store data in nodes and edges. Nodes typically store information about people, places, and things while edges store information about the relationships between the nodes. The underlying storage mechanism of graph databases can vary. Some depend on a relational engine and “store” the graph data in a table (although a table is a logical element, therefore this approach imposes another level of abstraction between the graph database, the graph database management system and the physical devices where the data is actually stored). Others use a key-value store or document-oriented database for storage, making them inherently NoSQL structures. Graph databases excel in use cases where you need to traverse relationships to look for patterns such as social networks, fraud detection, and recommendation engines. Ex: <a href="https://neo4j.com/">Neo4j</a> </li>
+<li><strong>Graph Databases:</strong> These databases store data in nodes and edges. Nodes typically store information about people, places, and things while edges store information about the relationships between the nodes. The underlying storage mechanism of graph databases can vary. Some depend on a relational engine and “store” the graph data in a table (although a table is a logical element, therefore this approach imposes another level of abstraction between the graph database, the graph database management system and the physical devices where the data is actually stored). Others use a key-value store or document-oriented database for storage, making them inherently NoSQL structures. Graph databases excel in use cases where you need to traverse relationships to look for patterns such as social networks, fraud detection, and recommendation engines. Ex: <a href="https://neo4j.com/">Neo4j</a> </li>
 </ol>
 <h3 id="comparison"><strong>Comparison</strong></h3>
 <table>
@@ -1229,19 +1231,19 @@
 <h3 id="advantages">Advantages</h3>
 <ul>
 <li>
-<p>Flexible Data Models</p>
+<p><strong>Flexible Data Models</strong></p>
 <p>Most NoSQL systems feature flexible schemas. A flexible schema means you can easily modify your database schema to add or remove fields to support for evolving application requirements. This facilitates with continuous application development of new features without database operation overhead.</p>
 </li>
 <li>
-<p>Horizontal Scaling</p>
+<p><strong>Horizontal Scaling</strong></p>
 <p>Most NoSQL systems allow you to scale horizontally, which means you can add in cheaper &amp; commodity hardware, whenever you want to scale a system. On the other hand SQL systems generally scale Vertically (a more powerful server). NoSQL systems can also host huge data sets when compared to traditional SQL systems.</p>
 </li>
 <li>
-<p>Fast Queries</p>
+<p><strong>Fast Queries</strong></p>
 <p>NoSQL can generally be a lot faster than traditional SQL systems due to data denormalization and horizontal scaling. Most NoSQL systems also tend to store similar data together facilitating faster query responses. </p>
 </li>
 <li>
-<p>Developer productivity</p>
+<p><strong>Developer productivity</strong></p>
 <p>NoSQL systems tend to map data based on the programming data structures. As a result developers need to perform fewer data transformations leading to increased productivity &amp; fewer bugs.</p>
 </li>
 </ul>
diff --git a/databases_nosql/key_concepts/index.html b/databases_nosql/key_concepts/index.html
index 4dd12fe..1b4d7be 100644
--- a/databases_nosql/key_concepts/index.html
+++ b/databases_nosql/key_concepts/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -554,13 +556,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" checked>
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -724,7 +726,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
@@ -1052,21 +1054,21 @@
 <p>NoSQL systems support different levels of eventual consistency models. For example:</p>
 <ul>
 <li>
-<p>Read Your Own Writes Consistency</p>
+<p><strong>Read Your Own Writes Consistency</strong></p>
 <p>A client will see his updates immediately after they are written. The reads can hit nodes other than the one where it was written. However he might not see updates by other clients immediately. </p>
 </li>
 <li>
-<p>Session Consistency:</p>
+<p><strong>Session Consistency</strong></p>
 <p>A client will see the updates to his data within a session scope. This generally indicates that reads &amp; writes occur on the same server. Other clients using the same nodes will receive the same updates. </p>
 </li>
 <li>
-<p>Casual Consistency</p>
+<p><strong>Casual Consistency</strong></p>
 <p>A system provides causal consistency if the following condition holds: write operations that are related by potential causality are seen by each process of the system in order. Different processes may observe concurrent writes in different orders </p>
 </li>
 </ul>
 <p>Eventual consistency is useful if concurrent updates of the same partitions of data are unlikely and if clients do not immediately depend on reading updates issued by themselves or by other clients.</p>
 <p>Depending on what consistency model was chosen for the system (or parts of it), determines where the requests are routed, ex: replicas. </p>
-<p>CAP alternatives illustration</p>
+<p><strong>CAP alternatives illustration</strong></p>
 <table>
   <tr>
    <td>Choice
diff --git a/git/branches/index.html b/git/branches/index.html
index c9ec39f..89c5916 100644
--- a/git/branches/index.html
+++ b/git/branches/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -592,13 +594,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -683,7 +685,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
diff --git a/git/conclusion/index.html b/git/conclusion/index.html
index 99efe77..9fb8a9e 100644
--- a/git/conclusion/index.html
+++ b/git/conclusion/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -588,13 +590,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -679,7 +681,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
diff --git a/git/git-basics/index.html b/git/git-basics/index.html
index 35c57e9..12f5542 100644
--- a/git/git-basics/index.html
+++ b/git/git-basics/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -689,13 +691,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -780,7 +782,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
diff --git a/git/github-hooks/index.html b/git/github-hooks/index.html
index 95341bb..30113ad 100644
--- a/git/github-hooks/index.html
+++ b/git/github-hooks/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -592,13 +594,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -683,7 +685,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
diff --git a/index.html b/index.html
index 8dd6ce7..599eed8 100644
--- a/index.html
+++ b/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="stylesheets/custom.css">
+    
     
       
     
@@ -559,13 +561,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -650,7 +652,7 @@
 
   <li class="md-nav__item">
     <a href="big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
@@ -901,29 +903,29 @@
                 
                 <h1 id="school-of-sre">School of SRE</h1>
 <p><img src="img/sos.png" width=200 ></p>
-<p>Early 2019, we started visiting campuses to recruit the brightest minds to ensure LinkedIn and all the services that it is composed of is always available for everyone. This function at Linkedin falls in the purview of the Site Reliability Engineering team and Site Reliability Engineers ( SRE ) who are Software Engineers who specialize in reliability. SREs apply the principles of computer science and engineering to the design and development of computer systems: generally, large distributed ones.  </p>
-<p>As we continued on this journey we started getting a lot of questions from these campuses on what exactly site engineering roll entails? and, how could someone learn the skills and the disciplines involved to become a successful site engineer?   Fast forward a few months, and a few of these campus students had joined LinkedIn either as Interns or as full time engineers to become a part of the Site Engineering team, we also had a few lateral hires who joined our organization who were not from a traditional SRE background.  That's when a few of us got together and started to think about how we can on board new new graduate engineers to the site engineering team.</p>
-<p>There is a vast amount of resources scattered throughout the web on what are the roles and responsibilities of an SREs, how to monitor site health, handling incidents, maintain SLO/SLI etc. But there are very few resources out there guiding someone on what all basic skill sets one has to acquire as a beginner. Because of the lack of these resources we felt that individuals are having a tough time getting into open positions in the industry. We created School Of SRE as a starting point for anyone wanting to build their career in the role of SRE. </p>
+<p>Early 2019, we started visiting campuses to recruit the brightest minds to ensure LinkedIn and all the services that it is composed of is always available for everyone. This function at Linkedin falls in the purview of the Site Reliability Engineering team and Site Reliability Engineers ( SRE ) who are Software Engineers who specialize in reliability. SREs apply the principles of computer science and engineering to the design and development of computer systems: generally, large distributed ones.</p>
+<p>As we continued on this journey we started getting a lot of questions from these campuses on what exactly site engineering role entails? and, how could someone learn the skills and the disciplines involved to become a successful site engineer?   Fast forward a few months, and a few of these campus students had joined LinkedIn either as Interns or as full-time engineers to become a part of the Site Engineering team, we also had a few lateral hires who joined our organization who were not from a traditional SRE background.  That's when a few of us got together and started to think about how we can onboard new graduate engineers to the site engineering team.</p>
+<p>There is a vast amount of resources scattered throughout the web on what are the roles and responsibilities of SREs are, how to monitor site health, handling incidents, maintain SLO/SLI, etc. But there are very few resources out there guiding someone on all basic skill sets one has to acquire as a beginner. Because of the lack of these resources, we felt that individuals are having a tough time getting into open positions in the industry. We created the School Of SRE as a starting point for anyone wanting to build their career in the role of SRE.</p>
 <p>In this course we are focusing on building strong foundational skills. The course is  structured in a way to provide more real life examples and how learning each of the topics can play a bigger role in your day to day SRE life. Currently we are covering the following topics under the School Of SRE:</p>
 <ul>
 <li>Fundamentals Series<ul>
 <li><a href="https://linkedin.github.io/school-of-sre/linux_basics/intro/">Linux Basics</a></li>
-<li><a href="https://linkedin.github.io/school-of-sre/git/git-basics/">Git</a>  </li>
+<li><a href="https://linkedin.github.io/school-of-sre/git/git-basics/">Git</a></li>
 <li><a href="https://linkedin.github.io/school-of-sre/linux_networking/intro/">Linux Networking</a></li>
 </ul>
 </li>
 <li><a href="https://linkedin.github.io/school-of-sre/python_web/intro/">Python and Web</a></li>
 <li>Data<ul>
 <li>Relational databases (MySQL)</li>
-<li><a href="https://linkedin.github.io/school-of-sre/databases_nosql/intro/">NoSQL concepts</a> </li>
+<li><a href="https://linkedin.github.io/school-of-sre/databases_nosql/intro/">NoSQL concepts</a></li>
 <li><a href="https://linkedin.github.io/school-of-sre/big_data/intro/">Big Data</a></li>
 </ul>
 </li>
 <li><a href="https://linkedin.github.io/school-of-sre/systems_design/intro/">Systems Design</a></li>
 <li><a href="https://linkedin.github.io/school-of-sre/security/intro/">Security</a></li>
 </ul>
-<p>We believe continuous learning will help in acquiring deeper knowledge and competencies in order to expand your skill sets, every module has added reference which could be a guide for further learning.  Our hope is that by going through these modules we should be able build the essential skills required for a Site Reliability Engineer.</p>
-<p>At Linkedin we are using this curriculum for onboarding our non-traditional hires and new college grads to the SRE role. We had multiple rounds of successful onboarding experience with the new members and helped them to be productive in a very short period of time. This motivated us to opensource these contents for helping other organisations onboarding new engineers to the role and individuals to get into the role.  We realise that the initial content we created is just a starting point and our hope is that the community can help in the journey refining and extending the contents.</p>
+<p>We believe continuous learning will help in acquiring deeper knowledge and competencies in order to expand your skill sets, every module has added reference which could be a guide for further learning.  Our hope is that by going through these modules we should be able to build the essential skills required for a Site Reliability Engineer.</p>
+<p>At Linkedin, we are using this curriculum for onboarding our non-traditional hires and new college grads to the SRE role. We had multiple rounds of successful onboarding experience with the new members and helped them to be productive in a very short period of time. This motivated us to opensource these contents for helping other organizations onboarding new engineers to the role and individuals to get into the role.  We realize that the initial content we created is just a starting point and we hope that the community can help in the journey of refining and extending the contents.</p>
                 
               
               
diff --git a/linux_basics/command_line_basics/index.html b/linux_basics/command_line_basics/index.html
index bc25c5b..574ff27 100644
--- a/linux_basics/command_line_basics/index.html
+++ b/linux_basics/command_line_basics/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -763,13 +765,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -854,7 +856,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
diff --git a/linux_basics/conclusion/index.html b/linux_basics/conclusion/index.html
index 2685e61..1d677b7 100644
--- a/linux_basics/conclusion/index.html
+++ b/linux_basics/conclusion/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -599,13 +601,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -690,7 +692,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
@@ -962,8 +964,8 @@
                 
                 
                 <h1 id="conclusion">Conclusion</h1>
-<p>With this we have covered the basics of linux operating systems along with basic commands
-which are used in linux. We have also covered the linux server administration commands.</p>
+<p>We have covered the basics of Linux operating systems and basic commands used in linux.
+We have also covered the Linux server administration commands.</p>
 <p>We hope that this course will make it easier for you to operate on the command line.</p>
 <h2 id="applications-in-sre-role">Applications in SRE Role</h2>
 <ol>
diff --git a/linux_basics/images/linux/commands/image10.png b/linux_basics/images/linux/commands/image10.png
index a62ea9c8c9363b5cf755fc4613ec3a4557e5b5a3..715cda3bdba73219797715bb5edec1b462750e15 100644
GIT binary patch
literal 60696
zcmb@tby!qi_dX1YqzH<DG>Fonq|{Ifs0`gH%>cvD9TEa6rAW7Q4&5*UN_R6u3eqri
z!~71<^R4TB|MT<Ab)A@V&W^M8-fOM<Uh8~RQIaPnq$b3|!XkdH@KOy6>z)i27PbvO
zE^y_tFb^9G>#hYvR#xS;tSqC76U-7~XMu&K@G({!Pe;9*B28cIwRHf#0zvb~$Aa&_
zk?P@K7X;=9KZ#b6QN-tPb5U)r{>&CfZb<GpT#aQa`?H$o6R}~hskDWKp~0_^p5*BF
zr7io-2fog$gNghY_QZO3T&&c4EsAlUH*Q6<az}T5z^i1*&aP01!n!{cz~q2!<P#v%
z@i8LemJ05Lf6pcjmg<qVp@zYHBu0Cf^3%gxSkVGu{K16M^gqE^3%_n9Heq3z;*aSo
zb4C}GJu<y5a+mbCE=NjE2dBmh*@#+_sV6@jne4IND=r=U(Z#Z^m69k@iN51m#UQ=K
zLH;HiYweK~EhFi{2U1ok@yEQp#vfLtx3IP?NYQ}_se5;<CL~Y!Lr%{wi<ycCY^A!G
z9(>@6mt4Yd^<(0i4E|)0h)r3WdcI8I@YiWi7CHOEp%_%BpLCxtt5EPK?5T|FEVfjE
zsm06hNP0nXwz@LE_XOod(F_j=%GrOKjLfXDMSz&qA9MsgDy48~$bKK6k=Uq{jUO@T
zVE=8k^Vi+qiX!n@iTb_qB&V9wwQSB0M5wQmP4B~^F`8dqFj1LuU_Gi<`TCH!T<9n6
zr<7BLYGO;xCo6I!$gWt&!c!=t<>&0hRvSMqZgqN!yz=-z?6?QN-u!%ERE4YkFpTW+
z*iow+(dq3y8fgR8uTBr}JYRkyPz|cbf5nu!F;lMfML;!%*G*ZAlr}FB#oQY)KDA`7
zYG3yTcBlN~_h&}@lnm-vlzB-EQD4b_vg9xQ9IZSvGaKJq_`pc$AdUYH`>7ojBZK+v
z*S7Ay!k0Pp1h;({@pPqd-1GJLUod;Vdr6qSmw|st@CBbOWaSP?_$Mi*F@M^T!gL-+
z=XX^O@8s@z+;yZ6!>Qk`b$S=)(xv~v14r;HtcmDdaeY}qN6WZl2Fsf))qDFDF1Xwu
zGk=nr;ye#u3rk+Wu4ACTlP+CWzi2mO^$a<99NZZ!)ONegRR(Wy;^FJ^%OahQfO}mG
zx!o_8dcz&Xy4FA9EnP>`@hvIN;M6V950T)J1gA-4#ua_kj}_aTUl#e+N+~!wrE0*=
zX7T80*zesVMJOwDkcmR`6{0vwbRs;n&?!`|<#_Pw`+&@pydU%<cgMYVR%J0$B3o=)
zBsx<B#n_Eubn1(lf```ch>5*E(}c0&?JKnGbxxjYXsRvhEg}D$OY`Frz8odepb1ar
zO=gNW|45`mdrD4P?xEJ&b)QRETUZ-QWB%ch?Z#8*1^s|$gZ>lTQ+MBETCcCKnbTdr
zL}1af1)-X*DhK?8eCSee7VL7Q*m*TJ9ma#O=5a+G<f(2uzayr7CujeI=rn+ll&~Z4
zQ8bp?4|5%>=LUmL&xreO9Y_<f-RAtESB7nejrzf}OEyKa(W>h3;PMvF``!i7I^s!X
zRu5dSAGSlGjQ9kZ%y)l2DwndmZ}pSdgc)0b?ZJniOzaAxUq2|^f67Os`~DkKQ8aOv
zRyOq+l}LEX%K;{67xyw~<ilk|ll=2<A=DX``E;U$7Fo0c55Q8anYwElRrrQsJhGfa
z94;h!p=mF9GbV@c9a14bV=EGwnZ_j$b#&C}+>QHWVd`XePwP{xnWhf+1U_cHNC$5s
zqPhL!i`!O<JPyS23m@yS(mxHh#{Z_-HT0mH3pD<PUXnOvy_NdzjRVW+1CL;WV6HX+
z8G_7|vLJ^r2kM<%r8e8gU%H+k$(k4K6`3r_tRBQa5Wau%AUO>BGxVp?gOBElPAq3J
zrV2i4*ag8=X;q;vfi54$UVFWrc&r~i+hww>QSr?{k%tw{!oX_GB*}E5>cU?0(D=>W
zR|<*Jx=PbZkZgnRE^6obUK-wol7azA;8f+3j0rVmb+n4H4FsYKIkS$K{A%4lS~!Hv
zbJf~xnGj0?^?&Th$r=7uWl@z{#e(EUz7<WimnZq2H$t@5yEcBPe&~Hzi@dx21t|{A
zJT};Vvn{&Ki5zrg6Ri=YP3;zaCHhAc&xL2*WmC;%+oit2XI7*kwjtCN<?4O($Sdo}
z^l<+$Zex2wEbl}kJsXzCP{=!GoR0uwzFo`Wc9dB<P~Gad)#26wk;}s#{xSF7DjKR{
zxf>&0BpsF6k{N39b<w5$O}kkLonknobNRV*VsGL_qHqE_G?94eE*Y^tU$NU%tO+bU
zgys&_$M821$JB<xUa&sCdx8VcjUWavpGh2HM?NYTU%z=}Hza0f5x4y+geWBb-n`_c
zu=?0ox4?i)?z+(E=iFw?70X3SzRDxZyuOD1#1-k4=@r|)sAPBDXI!_qo>16wDd}9c
z@|ip8)E5(K5fycgjPbRpLF&gV#w!MU<~W86r)=QkhPH)*DA7@`2-iy2sE7~!FOqeI
z1ceaOYIf5#rYP4ME4%rrY1C5`cSTXHw++mEu#&d|UXECja>sW`*iiZ7(Enwv%dO9G
zX4zw!z;)l{ftaSKp_5!{bIQ|!<P?+~soZIJbYwpD@Q#f0V%@`rvAP+CZdxkA3J>$E
zuGK6%xtvHnk&V85<<hj$`cjl3ENX&5!p&uGtz+1~QKX(=hGVw0ess2dX0<`M4zcTS
zOzLTOT({o6OS@X%RXKf-6<-@aQ#4W3i|P=Y_0Dn^L%pZ#HR=Iv%I*>zCvG~At){}`
zVF75rdBml`rPHO`g#?|Mq?~}|MMCJc*0m3&<eCn<`2FE~hFhYyxNn~YXa<l376%1O
ziv^}R(27i_NTjT`mbUIM$hN}jT4ttaa!I+Kh-V9A3u;ITJa>^@YkpQ#R$P`;mgX?H
zo45$R9~{;d7JGkNoImZocK;^Tri9z^RGfmIxzBP)7oMt;>VAHQ<62$$l2%kB8I*=Q
zqBIKoc~ippb9b|Cv%C&^DrH&*u@<MxrMh9q%HIP&`G4pAL`V9klBSf2FS>n~{mxe|
z@|u;MyFhdu?4+<?xEx84#nPAN!1U|MtFI%`Z{C34%zi<NJ$Lzy{Fn+!gFJ-@vrH=|
zf!1ftW4h~OqQJw6ZRt*osnKaEEn-)<B|`v3(7#||*SB`x;m#(`V6b$XU>naDgmvuN
z>s<ep!oED+Yu%#ChMxhyog8a}Ij0#tztDYYetH2`QXCjaxt>{`Y4%)hI&5lJ^MyoK
zJ)IZ#_wq~b)75&snXn<|x;;kkne7vLOI1-#;Nhbm?H8|dg7(G!T(!M#>uIYU{hCXc
zP%3OFdiDEm9@Se*adtw^b4M1C`m;*UxIe{bl{<qgeRHCCi80UfJWG#eJ~)f5ei%dv
zri)5iUBiEs{wn%p%&lNFR5xU|*z|z}L4+yIecAZZXr!eJHXQfs)U^Be#M7O(6TD{{
z99$B{D|%W+$0h~u*3Z!L{>FR0n2J7&lHTSxn31#rlcA%T#X^r^(V-T3iC3N1%tnJ?
zv0#p^QAujWu|d83S)A*bYmX}(xhgsFCUgR>gE0y6Xg}&%=xL?_3-e5$TE;kx#`a4m
z+twyP*-`t~c-<tzwIQ&QqKYDpdAS*_y6wH=>}@MQbBs=NySe;yWRzHrn3&tIZJUDQ
z($YC-gSRKKURLosGNxvAUztf#aI9g>eztc;zlLN>edl6n^)MZ_6*V*O^WHb(IAgmt
zBJ@${o6YD3Dp!f4-{+Ab-$H8I%}9iW&jsm4`S!a8vf|`9qp0Zh{ZhPq7Wb~nUa@*5
zn}cUrE0sWYX(K)tW5Mc^dL6Y@X_4Z-$MI#xN~wz}B90T7tzqYu)qCky>2Sn?Yv#`P
z)nBp*uWPUT@uKRTuO~Sny`Xp+R7VvZ;(^DX<?-kugu#+wql3h`7b@Z>jWB8yDP~Uy
z12xBbZ~lUPKpf4cxraLB9hUCQ?tAB+6#BVe`ocoBJIgPaPIy6K{tg$J3yYQVpX3=t
zDM7iCJpQJ8+2;kQ(JVs~!+1=>sr)McbY;uVSIML6nbVoYvsOglb;A^YX5PVv%U78B
zx5m_nnX{fHO=p-Lx_QzQelhp0MbNKtlkQ?R@uVA_eh9vhI#<~n-ZNXu>r!?<KRCaz
z@DcG}V0+&hVrhA6_e2S6jUDS5Py0dp%cE476zP$KD^>s|c>JUdd+$~Tg<Ij0Xf45e
z-?HgD()LqDksAckSg!62Hq@%-4UGl$*1H|D9;kWD$X%=l;)6clPEJms8)ytZI)92A
zD=D`Soy5V^*4Ro?%Hi_Mbl!P4HXog7ynO0PqH*8jJ^aESyEFIGnrRg4V*q!2ve0>L
z2?k?v0O$BvIM~!!cYrehieQ1TY5wP24x0_@_P?&*!omuLVB!4NGfKem<`)fYH)Z~P
zy!|x<3lI4B0N6Y-ZvFSu_hd3||Mxkz4R8-jT3z<_Yv8DE=44@E?`#cofnQ6d02c@x
z6m*@juqdA1Y}l{Wp6mkkPeL?wTy(&SqGm8CkBK?V)PlzY>TpvJmbix~a0<0>F=6z8
z+SxmcdPqF}*At?^`ORhC$Bh4a#Kl(Pu?|>;Q5NQ8!6?Wh!1L@eh>($yQQXPgQdI4w
z+<z4Z{z*Kxc5!hK<>hsEcjs~E=Ycs{@je$35#fEt$IHjZ4Lrf^>}l^};=yh2%>3_4
z{=1%+7S3i)5C<0s%%1V4UK3N8tBb_r$2SfA&+p&;wD5rZZ%g*h|MgnH3-aFF;eF2Y
zjQ4-)28xQ`ToqM;cv#r!yo5jjnE`Ep_=N<YiT|s>|L@lSHu>+On$8wZvM?x6(gpOt
zQva{Q|M%wqx8T3p)cwD0^8Mc?|IeNODk;u;^XmUc6#tg<zpes;1`&$${?DL+2nlU=
z(|~cLg}hYO0FJ;c``51;*s}rK%@NoF&Bx6wyRfjNuwK8E*6_gInsxVisM-E&?>6=W
zFA~F7NiNvyhM(@Js;GQ=TqCcds#?bQm@z+pN-V?l_A8BsTO;1+=97Eax3c$V#L8mq
zD%iih{Cc@_u{YhnHHJ=2^~H#!xQIBBi}B*#!e@Ms^$&Nu4ES49HGFefxy<-fa1w^c
z|G38YQV$48gB4{A+#>#I=YYOwvq+Kd_gqd<W8;uYVg0k+SC#jS<_~^X*#7gXNbC5p
z1EaN9Iw$@EV-OvD3x_F&G~ST;p9}v-ECFe76Q5*_+&>f+AnkxB4;k?jgX^~b6T&Z5
ze9yQXdsZ&^4=3!6h@NC(Nq0T@X)*a95Wa&2AbfaVRLT8+I=x7x7zys+%djx<H2x=q
z&q>CJ?`h#@_n%lrui2zX`3M}R{}aMDNCbq>d0_URSVamlz$$tj)?3PJ{DW5(H<rgx
zMqdb~uA?*c2OY-!k4HqU3h3%X3EzT)W&K*4OucHGwGf(5kdqx>y$Y9lxrp<(_wV12
zcWEuruhkg-{^1*sVFONWGRU`PqIfpr;L8_+(q2M*Mu%<u8IL7m8)Vg&TemJ#V+chk
zzo+|MgIimzN>gK&75|A|Dpdeh1^Hh2-Z%xD$}<%N=De9hgDvlHeRT8k>;PF|(TH^Q
z(9o~3kJpV}lf6DTVW?m#_=&@WI6v3-JsgfFBq32gyw=@AKI}>suI-8E&AUr=S-OTZ
zm?Bd2^lhB8vcVVA5!g(*tp3r~FnGGc%KaV%1$CiZZOvF~Q0Uj|1zPNXpi>!jae(<w
z#E<v7SSkqDRlsX3s^=Sf)+CFv#H=i{-<9E)`yXL;Gi83|gcSIS8l?M;Xn(E2_zN~J
zfxgYU%P;#l$m&LA61OJf>+8hQwdKJ?%hr1&piFgEWy4{=sTYttMr+qqMm~!Wi{7|?
zk!WJ&_#zeci(@(k<n2oLf1t$!%z?#~XgBuSJwps_SIVKuQ6GS~eL-S9<u1ADWByw<
z=(W3Be9fv{#K!u`d<dsm$0O-3D@9VL<)^qzliX^pfp-kzPX~e-&3#1KH!H8Nyb5|_
zq7oRhG32Qp*=N_^*bHBFM$#j`UzItI+*m`s`EL~`Ky5`{M;tpR*SneRE5c?~O1Wi>
z&g~(t{jM6CQc~|_{ZEJPM_g``+)2fM!>-=y`M1V6`pJz!2^REpKfiJ}&iAa;kLB?d
zUH#$hhSn@;=qJBVpVq|cL>{U2L*PXugP2;*n^=e2;f*I-;}RvJ)|)kSUm@Oax7PNT
zvwG4c)2EfUxYM?ev$dzbGMd|EeQN+-`%P+nuNW*aI({_{S>uJCy>2*}Ym9yR)^c^^
zI9YDUThD#S{=hroYlj%@L^E0Fgw1w>YXHJ9<*!nL_Er&d+j{dlzP0{u-_Kzj(6dIa
zBg^xPKMArl^4y4pUwCXyImU9RgBRJK;X{sg8aCZDOEsj&3$-SCG;OQB`bDn<Edw7j
zKjtA2W^{g!DkOJqKeDAr_|f+v<KtC0qq$<{w~Jah<MJOLN*Ng$jTSXJI^lWNj%rT8
z|3IcDFN;^gLVZgq+=ZOe&!nZLZHDq+eIg>gN45V^ucpp0u^$~zCoRo7UibPfbhbeP
z@WCnm*3eC+09wn|{teGnu$n&U2;p*Hta=WZbD4td`i0*N&hP_coJ6)CzTOkb9VNv(
z4LD4OpB`dZEJ^p9AoqQ<&?rKX^UBv!ZgDOHW<R=;XlJJQDmqS9I8f>GQHxfT9O=GZ
zD%AkdU#|OrB4$7$8!xW&ykAF1cV*)~#ZMe-!^~cr;W9BZGrO7<a0rN9yQ_cAmS@3F
z%x+@0T*YBh@6&Mn{<p^3AP(qyuW4hA&|`eh^#f_r{gHmP9txn=9!0~{gD3c&uC(gs
zM))$hhg8d#e`_?tj2XeWOqG`6ya*S^_LO^X^STZk{ryUOWq|gqf*F@{l7G##0Y>Uo
zaA>E&WjZERD=2z$!{?{F?CIGV`{T!tTQr{>6f33kG}~3?!5u}U6%cnRqmpq3&$4G~
z;hXMpRLqFOm88cJe>59%?^5xziO=kyIkuk-#2`c&0G~}Xa_i3Dj)|@2P3PxJQ|EAO
zf2Vyl77n$UUcBoFcZl%)nj)=0Q&Xs!l|)F%UhL!P%xN`{vVZUv{){Y4%zLF+DHT+r
zo~M-TpsryJ*=f2X>T{}4{C;4&R#;Q&Jz_ZAimxxP(QSKTpS;Kw6v;UDM-fk20akru
zp=wsZ%M8)osZqL>D;raLWcH*zxLNjyk^&A*uDs&u3J&!SMWrzACr@5(PQb=~epK(f
zO#dV}I4A$+9HAylIx-+Xni~NqjrU><m8*TD<yoCzo^6?D{R8p`mbHayIr}|n+{t_v
zJ!?K_8CluXvjhQ1VW3i)%PMcKPnvkWW}}v?MW6YqK?MqY<sKp<D`QqleE~a&g<1~q
z0{Uj9l4ySZ?0|AT`Yg@6C2zb)TQgJU&bK+-!^drc7Cm=U#oU$FM{-6bPO66bg|$`U
z`g9eicodUs?MAzdF%D@=X+g1Uss<6%<D<mF2CV+hkyd>Ne+Cg9w%bTz%jA44d(*(^
zYi#U}!Y>?JY<YGa99iW=#Kfb+S)F~A7O^V>`U!QL$0-I?lY}c5LuGz+e|qD!f%wZn
z%l28SD0y)Z9*NEPhO1t=Q*~S4-UI%vCLwzb$)1V6lj7+Eml+?*tU+I2=RO-vj$|u`
zd(M5~lxgiICXu6iWUN)DXExkM4dShv6`hUav~as=zMe14jn2eWiYfv@#G=X3g}!m9
zNq(yV>%lZ%J%mYCVo-#r_s*98wPDnbr(jU@2SUoR{#edOL>E_$&+JIuSNcR&#4OSs
z_d;by6Vb4xkRw`U=XNnM{CoG@b}IQ>t;8D-&qU3;SZ$_%yIBnQEKdEewwql&=X&{<
zaD%Y~Kf9Z8`8d@1ml%R~P^@rX=;Bx7K=q-C6AlyfN8YQ?D}{b<HCa7kC5=I3Kf3K@
zUg?5|*qhtHDlE$e`DAe-&d1>p*k{5|cdr-tug+Fabt3H5Sui=px{A>p*R<IaC8&&2
zWkkXnqpImj2xE4w+C8#dYQcSPi@~)1)F|QemJ-OQRpLY^z94i&p>|Hs_-J!n_2UEK
zglHv8tGR8XHpNq$i%7#HG53I$>lJV4Or6Mtfj0v;1oMVix{G$D@u*i>HkQ@h-W@bY
zyIV@YG2qgI7eO<r9ivZE=y!$W(ETk(mT;IBMJMKNn?`Wr%Wqyc0Spj);+L2r>DdR$
zwE9PNF>UQ_;~R64qHbFrfn>|*^w)^1^X4t*9|u>y{=0e9l8X$&9>R8Oc^v8u-$s%%
zs)$Fc(Yp!9JE*+8bT5N#`no|Mt&w11evy-&wC0P$h<f)B-;0=oyX@LKED|Snl;cJE
z>UW4J9ArG1Sn?t5^%6#2hGOnJj<@3p?l9?B)%DNRR%_JSbH~;_-<YdrVFl+yM^{Rc
z1R$S6d{1J|P`L7BO+Hp1KCxhVuBP^Dme^R3B^6~G)H}VHGz&@-5^z7>66ti>tl3Ty
zw`d5#Jd?=-D~M;B$a)z2fph}S4vfnLS4SHMvHH_0fAsn06Lblw0gext@rojrUA-q!
zl18tpoqiHG2KvbNJbc<KM_ZCrd~-8FsCe>sq-CM*0mXQUy85KCao<)iP6{|<Ldeyt
z!}EZv796uW@Zm+kF(6#X@zxnNpG)1+sxBJg*PJBXCEBqx9^c3bYZ2eEn0}8A{up!g
zOS|3Ww?}m2%w#g&4y;5e70Kz&bAYimxb#IKFc}RJ7hjLJQD|E-cPeRx_(0*mHCi43
z3_tu`x7*3df`7It_$c`9-98xgSrVIJxM(kBntxAKt|8j!Bk{taR|$g5$dU5g!;FSj
zK7xJ|_mfZYZ!Qk4;(P*L3ClL&qm*5>!)QeV)JtQ~Zb@r}NmqgipgV*(f8cPDQKM?m
z8YM_@>U(9GO_pQl!00)(JA}A4>))v;1EVP=H?B>2uMS6HHuKjY*DVJ`VbZY(Dw}e$
zjHwubIn(AvAhjFaQ5kxV$t)bVclqM;LKw~81zhSqgB9*4O~?(dojEaFoh~WNy3fyg
z4fV-a+X#!biVdzlH{SM{!b<a{uoIqVx^O=n{?jdg=!K3?c~)uVS->~$vNmKgnC{qu
zlp7*{Yt;>k5zm@W4m$j!J>O6g`Id6<S?2U_rQ6wtd0zecVC!AWBhThM$S1Bfo)bI7
zWH1xDAupAzZ2PE($i{IMN=aiTVQb()cY6HJ_xg<Vj<MauXHI<2u_`OjNPW-^gdp#U
zchw_nK6!XFnJFuOIGM0VeR_<?vTUiRLiVUu2$C-^=B~kfpjc(%K;st<+nV>6GV4$p
zqcpz9KOfOtzVi6I#=@Q>r`$jC8TOEr``+l_;j>lY;lzu3+o%MzX^zM0oV|524}&!(
z{~rB|<sH^@n#S}_2J~{3IZ|pPC)}b}tI)Tz({<rT>)YwA!s29M82vQk?gycfd_&N2
zmn?_zH4CeNZ9H;er4j90%q$-zSF*e`D{|m1(u!k}6{@ifo6D%3S0Upc#Lfke@ki2%
zaL|xq+67`d#<z6Fam?oZ(O|%zZIz(BK%Jx!5TedVL>-x4t{a3xulp?ZHM2UHS6V*#
zAwm*1%TV;9w3w3-BRKIP(t-E(-})3|0B11LS!`4!t$+dvIY_~3KMp!?ydtFBCp=4$
z^fzjBOJvl$HEt>NPPK6kn!Cq4Q(2?~fBJSdU)u`=pC~~)$<mc;y?KW%-G%eMG$3k;
zP-dko%`g?5uywv!%70>bX~H{b;Ulr^eYAcMNANiHfa}e~WP-H9h3_NLEj(66^LA&}
zz`&F^aT+dUvsL=>6H>*u6EO&nvbw<NL@-;CdY)TD`6+RE+HJ?w)iRj>*e0wgXJNF}
zsOX71X+<g|xC&dIM(Z=D;?)${>{yw!VKvk_YE*Q?wT%*^gD{ENX}G|q6Y*hMSmDIi
zEqEhQEsWhYkSh8jKnA6kJX8k$1V7$@8_QkVBWVXa>b-j7-1BYY<u$XsG~uhIvp;a>
zWWcsr(4h!V#YW5xA8<A2GfCWjCaPc{-Sy*EfY(|pUY~n;!rt3cuir#6$c}bt^r5Eb
zXcLt)&z9g6x)i!swH-~x?<M>a>3q!_6fJ~v=7mnHkZxPcl6sdxmU0xVwteC^-*TIf
zh~#sNUhzpLQ)WXglyzGOkvJ?5xFv_J3jrM3HR18YN!6R<2RR_UCXd9?5E|cPpR<D`
zEDK|@-_RXbOys$5`1z5)ym#M0M_N4HjX$#qKl(Pya?bXy?U#_xx+@)vf^D+<63wyb
z4(ue1%qtQm0h0Y&gPsH6-NWb3lQyLL{>m<HZJf_<3xRl;R6pA>G8+dxAS5}U14bsI
z6-}(t+h~767&w)RnkeAbuYoM(_9N|#4*v8OnZEjzukb~t&=lDt&UCNQ9*`)!<y1<y
z!mHL~`Y1VxqO@4I5?MQtaesvQiwnFZFxvl8MC)i{LhJhSZ04-0B(OIQKGG9w`;93p
zom#jU{{0n^_lK51#i25<eil*d<U70}eqVR`%+Mm1q$8y!?S>{RpjzzO(bm?1E8Aqu
zJvz{LD9X*cXN*dzj9olU#bJy2>Ffhz=`KWvqDo0p?F;VkG^_WiQRJLjwjUBnXd)|_
z+BQo$sm(x2h4xpdlp(9bGld<-Y-paH3L=tBt5RAF)n=VeIUM9+)(Li+=uYGhbsn5v
z(21m-R#b<$ozRQ>o>vuW!pxEQyaIIRgfd86<N%4gLz`2Ym1-ElrxJaHG+?iVOxnH|
zs$?1zGcI*RB#$2l3{VCxgLY<VU`^7-J|LZOSix`dyOL0uTp_7?;0^LV4&mb4ju&Q%
z*~5O5hgA-O8!-Sc#98XyuT8ptGHeFS(74GN)W!6URX@@d37A0oEe}K~;#zbSROW8!
zBi+R`?^E0e&fxb#WfJ2nCp??pf;Er2Ju=xT38&(FF_|dh{2t&>VAn+%n~M6sM{+n1
zyUdg~7o_K*F|SYhqapdwEbJ>|XFuoC4#zEYMss?N{Vct$dyTK_kK|^}{CC(V*Oi>$
z=O<1iqeBhOt30)5Le1&v1m|w?SE)58aI0dSdL)4okABO@X6<nR-p;sGCG5hdnY!Ib
z9z2?2hc@}^I7or&d&cZ2-DUvDDT`m1&C!hwaxO0~9g;P(Wipy$uA2}0)RjH%#BL2x
za_beQ`%~o@HlDl)$dvFtVUH*9!&w>RrCFdp>#b#Z_pMbT3Q$WHJ>Qxhz1+8_zFhBw
zy9N;)dfZY3@OjS@?<K%s{eBruwzk*TKG%G4)UM2&dN$wWS>$Z2QKF{{BiYKjm0L1U
znI_S#b>cQwtb34xW%@PMg;wmCJUHA;)2f_Up67Wh4~<6BbKgkI{=`*solh`S_IaN+
zDIeQfww<h1!{`1K@00Dx!CVuE*0!e=2PW-bgy#*03AD-C)uwDgcBl5|htozSPTjx)
zlzvG=dKUmIcnp3!Db7*!vl_WBuTQ9)XM)wCVSPruTOtRk4knp_0UOtsqbzq5`xk5a
zJ;*sGhq1}7E17{s!z1RjoWH-^y$#|Nwwubn&nz#-gt)@HSC~<63?<#Yt||HU^sUAt
z6o~BNh#?!MSX2Ndi2!YhOs~Q^@0}z=`5GCf-{lx$06ZlY@RCNUIx7XDZ)baqkvy0g
zh~ws%lGvXd_WCpKS24L^dkU<F`r1h}!4LaqCbg<r*CR3qTs6{jS@KbkpS<lF2qSLc
z87eDMK0{G%qh0u$SdPUx<~*g;i5qK6K*nktN^tTjSl%Nw3HpIc^?Ti$I4&MklSfx@
z3V?hIDy@Fo4;&&}H7~PLA?H=tGBhm+YUUP3^IXNmu@V$!Y&#Ld?p|uJvuIa#ezC}`
z*oE=!ob!7(Sfq@O*Qj%lo;;c=U-CK|Z=n{xM(b#u%+DhQ#1Zy>!UQr6Wlhq5t4Zkr
zavbDPI?lKZAhklk+_9K{ncFNz*I(SrJL{_)!u{ZP{m0$&mPp#4=f<)!GGj&V{;%W=
z@ONHfW@@6YPTMDy61pm9aOLC@CMu2PuL=??R~o=NX@lEE=@3$}GWQ??aSJEPPV!(E
z?XW$|xtZ=8YeK`qgim#wjo|tan0S7VP&UWolk*}0^r)`91J!g8W=7p>Tp;rf&S@jj
z1>&p}bahGdA!%3NDe5h;jMo6KfWR0;`*ISe33RoUtRwwm(5riIgA<?Xs;)?@WPFmv
zM|ePh4L32abqyRfo8~!^7*#xs)SCD5E^`K3eZMpLRSbV!1j8g7vbinIu#r#j(f650
zhG<d<Vy!>et@$=f@o8TrFQlVSq{k-k6VZyYtKQj`)v<_1jSrYiRQw(0kSf>(RCg+=
zu83Mymc$hLUni~z1bTru?U8hd!{Ht4+rdyYy0|@;Ti`q&hU5xOV)?a}Y3w~Xm4OPo
zpVfT4Jv}h66qX*kvC<Q(SouA@a;ipVZniK;t3+>!pKXg1e|<XL*U(On5plku4?g$)
zG%0a@k-wOGzbcJPsCx4kd2khRX$<DNy~>fIrbxuB9^wg|+<Pu;u%YY6-GZFQr4g;-
z&Kw4~4`R)12b0?SqeAvbit!lM{sWFQlhxhk6G_Lm$`-9&h6H8U@pg{)PW>pSfUUmN
zwy(I)DR0Ai?uZvm#b2{nX8=k_ENr6IIM0iqW}z{U5b25IF2SR(Qx<W4SuKxrO`1Xe
zfJ`3=<RCX6@lW^+`ff3wgSK6#STtzVEdDlh98C>yujdKl@QIY6FmQQ$K$_-Bni4$B
zTKd`GezsqAYgpR{qF<tY$}D9%^-gz$UswkT5mQ%36RZ3bwtKh#LwdAuWl7Hu1FZwV
zr8#xicO>=dpmDbSU~_T5evRiH_;-dNMst^lZwH_j#^ofzO@W1y)+9cQhCy!**qpdt
zxm}IZau^|tFRV>kh|z6ltKM9`3~Z|`KJogRC1Kr4@6wKK@;V-{N)^e@eYB(te%d~%
zDa5qIbjLvi&wV%eXI5;Ji<-HB%8{-#hsR<J8)*M)%>)9;U$kx@io_1YT7;)$63d{r
z_fb6b`XC(h7{A_m(q3X{=RSb_e-YTYZyskGd9HiHJ6>LhdpR$7pSR(34H(#27*yJ{
zd?M%kE#f+>Q7ZR6Fq+@8Z#d&bQiwaZSFzVBp|N=t3~=FVS0{6aHWz^YOxO^r<JMx^
zE#j5b*wk|OyyNH37m?C@ad*s-Y$M!O{Mv&xk9|nU(5vIKgxBWk{VdaJ9OU2<kxZ$;
zVz)c4Z?-=sm7T^s3iN;`m`inEE`ou71j2J@hj86=bM;yCw=@!BeUx!xcVOI{D~t%b
zqxeH0$XH{uOd_5HoL?gy)UbboAZ@D+*sdWF|32Gz(&1fr?7ly=*j}#pEDNSlZtCf~
zdyS=8pf+8!?a>)&=mp!&vvIU?7PQxx_w4Yfx!A6i97p#{SAZLYnrNI~Oy0LHZNFT?
z9`3wAAGsg@LHjf5*x!!d78Ng~6LXU{=AQ8OrW0yP9zy#S6YKtMuv?1ozCw(27ifHx
zJ;=S_yO?49<!F%sy+2f(UhLhn?s^b86O!5`bGEl~3*nRc!sOe=Sm|O&V`QR=5`av3
z#7IqO+9|kGRs_mDOF6j&6rm_rH)`a7e8)Xkj|pb{^)Cv#aK}4L(6Zc%&v3{{Hv8V3
zGODI{*XAi5zuWh;E#$1#5NCmfU09h+eMN5SnDY8)4u5M-xYAUYke21Z*J+%bOU*)a
zg7IQqumw0qzmM^&gd`1%UwNnP`KUn8w6|ovJmAnW%SRTj_WBC=T}oCEJ2*xhZBi6C
zWCreZE_Gr`N(T>zx~)r`Ft14WtLI=gQ?-)y*nqM2kpeu0CGzjpixpZYpnQP!Xeg;H
z(jE|$?)tvN&+}Zmi<m}eJ=W+-z-r*u^iVDQi-fmOf8tSXDWWBz5w@vU|HgM4RXacX
zBv}{MfmqTQ3C15y^zMl)D|46~{vHv>ZA=9VD^<z7l_cbvqP@F|Li?%BUk5#OdE6xt
zvI++Jz0|3^_A9Mf(4<XL)O|n<2T}{RBjvNLDb{<Z=MHZyO<0XyX{0mJ!(+AHUxp;T
zYuU_GnvPRFS$ep)f-*@@mNMn9H56cD>pH{3-nw!T>;S0d@kaC^zrE^7<}CXBh(@#N
zl-LM+8UWRz^XjN<8vC7?w^XtrKHuZG?cHT#g%W0gD9dyi$6rI+Dz0djpy+@^X0TMx
zNfl*3MZx?|SKbSdo6yGY;QfBdh1uWB-mvb<LmND%M#*_i_=(@^nt&1hj))8WR0eO3
zRuzB)kD40y-=3)tdK1rK5~$;t?LqcpdAic-XrPgSUEqn^`vGmzk(z{~?UTrsQzxCK
zOfl~%FijlWvu8sos1Gq^+h0;e-NzI8tscB6!mOCl9CHIqU92$1)vqpy%>E4w$($86
zUNl)S?n`IU9@<SucmNodgXixSF3vAMXWB<UJ3o{2M|h2klXL3*B;KCJZI!3@@8I-^
zpONmm4Y*-v+b1@Yr4shCMyQ$+!6^YgIoMlT^PS-+$uqsy*4CY;C3?>%Ip4>r0KI$)
z!pQJOT$>fk_ypt5(j^O5S}JOMApFyJu+w&_zp8H|;1+0=#)7~l-dwvdG4}Z28$~OT
ziwFMvn~97f5;mnZQtlrSP5jcUW6a-b&EGI>QgswW<$U9{9hCJ4rTgs1Y8P1@LemAe
zlZdIu9FfY~`v3}|>4cjHxjgS=$nw_+I(JQpE?ccsAaj_nuqawdT$v}%rE&rs))h2#
z4>v;sWkdvj4LGjEk;(~fgYn*=Rab_eO>P%W9_z6!NiQ6o0_R5)P)G!U%(<Eg)!)Y6
z)ROMXbO`T#sFbr-N^XLP;)~d>ywohznIl%!h3EF`LApo&*uQ7zkqwM?>^3;tFE^9R
zH=5Nm!XAG+y;-21XK~v+PdPoZIuVE@Uf%gUzP`vq8EC{3Mn12DaQi}bxL@@Loc>&&
zj^0PcDiGe!n7yiZiw|#Y0F?~+@qSJz==<vB_NtK2aXtY_BtP_1_blN$Cw{%du$sjF
z+NhFxCTqrOePjZhGk$Q-MkGbVwv<1f^}8S`i#zFlC2z<YppT!O7;F3}hoZDt@I`(Q
z%OK0_D^Ys3+YQ8@!oys6H`Rio+e4#N(pzBc=SK}<pZ6?hrtase*5+#STgR-FRLxYK
zzk2!dg{>sUK>Ns}JlQTN+iD6u+~oP$WgwV`j2fIQphht&w?VbpcQifG3&b!yDe7+k
z_yPDu`Q|8ZQe2;*{oCBe)?dP}K0V|siTN<I8bqA7GgmojrT>SnW_EY>+Q>wA@OrD+
zb$7^QT1%ED*r3tAIaevQAgeR-m#5ue4d#!n8XnVj_4JP&+h(tPvrr+xvDq-%HK>IW
zR7=mnLw(TWEgNUz&*3;sWLZB&|B|DH0PxQ|T$dG}eH&TcLCm6?w!7;<&f%mUSn}S@
zFfdw+3DS}M5mBVoum7;J{#m(v<#u?EeZ#9fFeBf}E_pER?!<*sRtg-qI{^jPuN(?4
zBWzfl)~#G!4>*o8I*?Xa6;+I|$irh$!T2?Q<J9J<9Ut)%f{Z+rxL$S!^_x-~^do%l
zFwIjPW`g*L{jCO5z`H8F@%>tRG^Ng~W&<gAHcp4gj9Pyz-;<ehw4&iQXzIf`Xq!EV
zq6#)BH?7`*UZ@o3{(MU)lhkLwl*?Uh`iGh<w~5r;g=B51zpk7aOj;45O<JMUjH>dx
zl6xg*gm30|<4jk<vicIU+QLC@v1_k{tf%rFiO6guNNs710jjU>ynkqsFp}bNMD^lR
zuCC?u*CqP1Ii-g5ny*Gf5}AU~AxlF;DuCkC{~XUXimav)SWhoNmixxjkTwU)vYZum
z-w&>$RION!IR9OFqFIgX?|IbTU(@BbG4l#li&oraAPyq}G6)R#xa9v17%6N5*$rkh
z*boptM8+ia81@x`KyW%=o)X-||4mFxb}H)TNQ1-QuJpwF9~{ZsOjMOad=BXJ-mKw=
z-lJ2KC2Ju(9v)fa#Gk(UWpuvRX-p=FW*5bWEC8{_?8SNi^;65fM}HbS1vbV@{2R63
zKVw=g+N*~%nggjTYoQEsYcuu1H27wBm{yY*vmtBYbI}Qa(%le*jjwR)H|yO2BH^9N
zr}D~@qwSmGC963=AS=tHo>0&?<gRaj|5jp*My8Ce@H@L&xJrHG@z&gCDd_S7Zm$3E
z3jBW8<}PYLuhLC@d$y5xV#ntWQ%N`4KYYBta@DlNzn*9$M;V?ArY>|V*{~V@EfmY8
zDn1~UEz!Y5Hdn=6UTHNr*<~!>Yt&vX@Rbuk@wu7YmB=~kIG_D+I{8E!E+YeGzEaQr
zR`c*}MEviUr2A@BI+TA$5HoTE5svWZD2N1pA}h=us)zWABhJ^rM<Zk}WKxEDNKY}o
zyyEw0DFRB3YP3xy<2vvW0Kym4m#tPG?e8ZGyI1tYaxc|PL-`lK>ahqseDKu)tIxSF
z*yv<i7Y?v{4Mn~uSA!MOm1RT0?P)u5-IuvFkdjK1oL*?Kxaa=2jtC42avJWr0dxQ&
z0nF*5lX>sa8A@FPdYa=x4`)L<Nw*opI9k|<4XIP#)JL!5`uG?@{Cd+f+F1wR=O><I
z4;~aI7flFD_gw90kescM%{rgZ8Da0St6RO;eEH<N>&WczFJYnR^Wjco4z@M(zNl{o
z(h7qC+x+t(Oug}quWM%~UIKxKo6McnB^`Jp_=QJtVqPnQUnW3HyvYqX(0kNP9_(|v
zc)S4wGB{KihnlUv8)J;kSk}fT&yDeaC#h`b+yioGI6BV%R)xK~QDKQno6=pM$a?_p
zV$TSy{Wh+22<kqQoX=<;dJlTE-Wk-C^b236qprKORgysF%?BdNk*0bK+YO`fuOPTZ
z@8npy#-m`L-ycKAYX><2ZOcJw(6GfV>ah^*edX8;0epVnvtM{U0BhO!1|f{M-V1LT
zpXRqpwE$u{Dg<ORU@JY#Z3RVUb0<8egO&cQ`bvxz5NuC%uEIDk0GKbuEB;_ZcM6U!
z^7_3O+ALGiY~-zuQM^8>xP`O=S7tTmJ!WQ>2z4-yxq<%<TFwk(`9|Z3l}Up3s#jjs
zDP`&Kg=z_mG}<?tN!EX8-8P$wPb4tfRq@f)towzSw6CP3BuVOI5mf1V>wxL}GzM;t
z`o`-Dq*Z7<pZHrn!+8tBhp)?{9L$${BJt~$BFox=oTsn9ha=>|KhmZZd!8xGLs;=U
zNoUlBCcr&A-IlL8gL`!Md?e)Q5YM5puQPf}0Y0z^o~eUWZj8OHyT30wT6m1=Lc6FZ
zs_oQIU6BQc7x-*nfl1Xkbe^dYt$;OmW>kT64f8^^l2(g5Nu}m-F<JNbzsQSj^k2i-
zy=&}t3bcw1<Qv`4g53U&!qb2H<F)6BFBDxj#|{a_^L{ces~a**7QtP#0bbcKND@N}
z-{C#pPdWhNoDeC@oKfo_9C2oJd(O+4)wfEtL98)c7^6u#BB2?h&#m5&&7obI&u8&w
z1Mo+RT-F~LIYTFBp*t~R=!W?j-bVOGt*%U2kS0LeJEORu$+pcQ?$)7@hb`3YxH<E5
zW6J$WLQYX8C*HdYCVvD=lBoF19Y~y)*Pb`;b?Bcj!S_VTd^!x%5`^b{uD<Npdxr8^
z4Qv(rogYG26B;dgYkt}d{H-m=&(;eNpbEaMc`aw5;GdbpwbEzFPtd(krob&p`{022
z1bshw(AM99_VpY0l4b9MA_9iFiAybEA8Y-sPX^jM6+lSok{>cS;JPmiPjeg#7VY^~
z!h>=lpX^Ft&jNY)|BDtk6$-l#*p+Rht`e!5*Woap;6ndgPtw!RV$YL>V46U{{01l8
zD4nm&_|uuPG|d-E{uYDufae~tdbBBgZpTqI2}RKvZ;s0<OB^M{$6Rsc++iXj=UBk0
z?TzQ<teqWPmPEOFD5~f6tLRvd9h80}z`e=PyF-M7eCyg_=?tr~K6_8l_H-s=eVXMt
z9OFsKhkU)#ld4{AJAM<GSX)%uZkB0ttG;28Q$&b<UqQoa8lU)Hth1sE`+ZN?-o_DO
zw?#*jju+2rpx`p3d}bZtUd`^x5+n6l+SYDo`<mzLtMiKb)~vA{nvXX?eA*3`{h~)6
z1yONax_+-g48Er|J1`Uy%0Ns&pgDV9+dT)n`?sl>BNbAB!)@>XqHwQ&a+$=yN0C|h
z;@%tNk#cDA;BOwqgX-QVhR0`C=pwVw8hcW{$B)$}DdG7*zLMdDqdVGQll&N;h)Da!
z`SCguO$R&r<q~Y>qz!INTcx?kvJI15UN0ygO`sUqfc&iU-!J9|lf`uZ^u#&Bt&#~U
z#`pp#Xzc3s%;wXMSgcJqBzYszEf`%1<DDgPzkQ!L3ZqdkQa(mTDYNVISO1EvSe`Ep
zI(n^4$3OHDeW42rTE>@|^8|F`(JwqB?ocIshe87Eb9@OD=`xwJcriV%i~75Fpp%RB
zfY%V|E~93nvC-W7eEK!{t3O(<@W!&IC6Kl5h}DXe$wNQCbF1IzLalAflWTku67Bdr
zqoFCsn1@a~8xqN-IgHtOOz9BptK}tW8)SASLHC6>#pV&{w%}G{I?vgK3F_Ww3hu2c
zdwMZ9@qvXB?~IpC>yz+!dhcav;VBv_s&yRvN%*`up%Q!x?_x0&RW!-Tn-9z*BszfZ
zxXG9gLAAuHIANIkaipdQnNhsz+&GYp$lLg%eGY)g*^i)5;W-c8C`n}Z6>-hvaE2;T
ziEg9PDl>dbbW7y<-zGpS6abE#Z{G~(LFC3{zaI!xFGSgVtVcqo<keC1ac@z+!3Hqg
z@#HBw)uyGTjive88B43ias?=7UiQZ`Vts223uqk1bRadAW+tpaz-5iZYkgeU6iVYP
zF*uLIB=Mm8Bq=E{TEzL!Sa(Lu$9wd;e^%2sH-bI0Ld~F91<j-PUK~^)HR0yRz;g9;
zj(v0Pe5l+LBgXLv<T6F#1*B4n(lMW|$G0j+x%myfa8+Gw`_Pmon6|0N4miqQ7w<wZ
zj=p<ZQt%iIHB->U(Exbhe7_e)PD?9xdfvy68Rg`aunKgWmWVI5$h}|oc5+8aKfT%b
z0WFKHcF9J+DD?P-s7pW51keuD_B-)je=1`4>#Y=c%gC%i0H~C9xD+!EP&t>OUqH=1
zx>Hh+3%8R3r=0x(Uzd$#_U-9LWy$NqqT{V;_g4X3dFg%z62?9gMb-N^^o;3G^vdPH
zsc7m;?jrTZkU8I41lhoeKqyiL17u;F?!=l9@(ogZD>v_6s(ba|*gCKDE$#@<TpHcG
zIL2!}*pU}?JFIIIZxJ?Z1m&hlq-oBH*UygIEsR{_c3v7aaPH#%o!^KRAi#K&SnwpT
ziqZV)yjpN&(0C@7&-?Y;_!5=D`16FxSdc#L!RlaMqn^OzeX=kr$!i9(gmA(=pQ~~C
z1_YE-n9=;is-6BeSiw4sK+x-!q^4qYPw8Z)FU_AGS0+UZ$+zjC=GmWgh$#9j)<&0j
zsLI<uAlv&<PEn(h4S@{OZKM{jrF4Pcs><{ifM<o?<|(BgpV5^Cia1$Lwx=RD6Z6t`
zZM-YffzJY@-D`ZLI{V$9)XU%GqrG$K{=QBqFnDWl$~K9V!E+13t=lj|%oES8uXi%%
zT`O8;yF^ZVXt(4ECXnuu`9Qe#Wq@vcPQ3CH1^d=faT4NPd740`Twe2_{DIN^%4=Rp
z64hUXe`c&oh?S8OL&}mD9gx0=O)AQ05vf`s`*$+Yv6|IyEK2l%7^URp48fMyrT7gC
zLVGcZe<uO!;`^^&0jr%`{mBRgRxso6lTe8~(#`RZixz?HOaQ6#MMNj^_}FV9mP&>6
zs;qUtr*A|1(XXN?8w)hLX$)m))Gnc8=^L1pMkOi!iB_`u3?M!IeDMOF>OEH3y&<?c
z2FEb=CkYN(WjUlZd5-l}8H5CfKzhd3%agdFYbUePS7XHxW;2R~>5?rNlE!y_*of@+
zVHKEyOGoN9-k}!JXq62OuSEN`+r3ApEq>1f`bLj+zx}BD6PJ7hWTqGD3_spUvYjY(
z_p$6tS>kU>>I`Oq>gPdWY5VBAsi4?h$C=cFzn*9hAKy&0mpQ;hTj5Hqw(q|+x<xV0
zXu-QV58)TIznn)_c^0|t%xnuFrX5}ts6Ewea3L6nYwO#Br;3(jF~GO9`O&8TN_pzp
zny&O*pNbw^lkB)jb<HK`O6Ew^g3A$avIh~Qdxj8)RW)r!=9h(^y-N~_s@bOBoAz6o
z<~g_RV_g17CVjqNWWr*%G%H7SpDJ@ulA&;DXlN~&b>pf<Vw1f23ij*Mc+v|<#pB1{
zZ)K*@mFQK=se?0kMylTDOnlJ`jIPOa89jemG5@iDrN!8;4amLO9tOVOsDfdzw~@`-
zR$zq+sQ{_zizb6<zJ}EuvDitR?;|<<uD+C^#8$5U<?&=rMEpzz%k($ke6q@=TQRn7
z4;OA*8&LN2t=8Jwa2D|C2%IBf!FWmTsQ={Y=iX<&=XT=->g_&*SF;wAZ%9YdhN3gu
zU4gW&X{%25QF{pLXp0v04wdRIz+VzM-BfzEHf)x=cWl9Wmy-Iy$w4+a*;`<3yCw4T
zY8&+QV&31%X78(oUY&J;+t!pt+wWD)Yz1ku8m{kwcW!HriM!j5H@y;`)j$$3A*~KD
zX+B2sk+er!9lqcVfJpOH2R!Bx76D4jG|XnT&A1*wVH=0`*XvaJUfi?BTnDi{Nm3Ge
zrws%w02rKkGGPP_6%yC2z1~)G7?U`|nG2^8Q@e4HI>J>ERBmJ!zP4`qoIpxNH|MwX
zA3IH;8tGr`F&K>x`xec&0Pcl*ESLb3U^{!mue006aan>0i?RvK;+`WuRNHD#+8-Er
z6zY@EJ)7L7qT;t4+idn0ZJnkS`K~7g4LkZp-wdW%>(N0#Gz+yxLeU6|z8=pj9;B73
z^5};3;M10iUV2oB1}04aS!JoU+i;IYC-vE|K_`-UKqBs!k^C2#0oQLl(9$d|*U{2?
z<JmOdZUSqs(je`>b+XhxV@WG8@F$K0Mjt<z+rlKJd7cx%7lI92Y)|O7=c=_YNNAre
z{@PN)+G^PR#Noa}L>$?xXl7oC((fd6@wprp+c;Ed)VcWl%;bl9F0?1)yPe9DbDek8
z<3?-K`exUsx;2g?{C4=+Zp|xi>@v83<NzUiL+hi1t-ZD)Vn)qUJ!RHNJWv1VFoY>C
z6Ep^uSZM|3)Z2;x0`!@z=^JV9-akE#W4C&Jqnt^H<;a5jERgpk+Cvs26Sd@N4n-Xn
zG6qtK9AzA9*2|(Hj-RLB*`PnPGWg^ITs9J?Do~>F^~B^dq0F)G61l7A{(U&En0Mx}
znBT@2d*^Ts>J`aH<U0opHhP_Al-4%LDb11l4%0SmnuPm6ePpH800%JDR`i^HdRb08
zOFAq>gDy{ru6ElMQlB$TpN2qXw~jW5ye`X?dgA)U*zA)r6R@e}V8U(wUeIkK9NZ*t
z?pn{e6(Qm<RdD^J4Cx3iokY73xzTA_%Cq?xW<aqTHXJJL4&&m&Ikm<(o2=8D)BVn?
zM{OW*v2wFS;<-4s9p@uFq~wM`osm-6Y-Rh-Z2H8(psQ+Wit4=oMIx~~a=z_~<!-77
zW96;e2L%cBEMmgP7l;V~o;g_Cx%ctb!B!9C)ArHE=M`aogf~V%E8cj!=(!ndl2r9s
z^X~JV`n(Tw)VmD?Z4^$ml||rWP%i{BR|5@26>gb1TMau8x@x)~q_4Uof$S51nys2l
zdzwow(u8>f`TGYFeM>XOLQke!mdpkueHNxe{_!+?0A#w2JwI(09&b7;F<K;Ih+nN{
zD`hkX^zY%X)gaBQI1YlH!4SXeQ|FYBWX5428D7A9<z-%MFIk$X*)3+_8J*WmOiV_d
zk(*Ho(p_~EmAwGt@f&Bx=gy-g6ptk-UyCaxm%;Z&{c7znf+0YGCIv;u^I6qwA6_g<
zih;A_72js`HD4Kr15<{A*RMIm=c>F=qri@O>+&~3Lv{~N;Ou*`9aXXILbR$Z7*KJ!
zBQ&W7VB~_+xrEJW0L!<WuZTs^iXej-eeqDHJ8d-tK-M;*;S#M%rqP?YaPWNPxMun|
zltDfphLI-ZYi&qiE}&tuQc7Q_5|<;f><|wPzNQzp|7zsF#LenpCHv(g-DgU$Hal7I
z;ib^a`O-fU+x@=P&$QSi&qWEEc{S=X&JX=wmnc4Z{u%NCycI?jTm{WT6MLx(ac!@<
zFM69`?!PAiT^gkOfqt$wc}B*zRvCh>#+JOUr%R2bO*RkPqnM9!3GQFm+&Z#@83S-L
ze-3`6auabDESEFxob(QiZqd*Q`Mb}xqxFD~0M8S;>765O4kvJAq(L<oa7xW0ugaa~
z+8j|gYnr0h94qxeRKccq0(!olH-9)yInOq7N#`tJZ(vMP1udz8>L*5Pgd{K|hfjI3
z;+x4vBY<x+X%uOa424{}SR2rDjm=5N_8i*nkQ_zDca9VPkG=N}YHEGghPMS!6hQ%z
z4vK<QL7H?dAkswXB}ngJ=n#sCA_@Tn=}iFzsnUB8g@lgu-b<)KT0*GblYPG5x6jNz
z@60~r%=gZ`@6W$7%n%prxz}B;>$<Pirj)H&nAG`Ar7emJQdHD~jg31{m~daixD_&t
zrTMcQ9E?_;>#J%H{3>xKUceZVrz>hORIFG!D!pm14!?qbbN0sT2k75;zwK-<Ztap_
zNvobOo!Y23DZk<;cNnogm=*HN!&Kd)dj67mE`p58Gb0Yx)^VWG&y_u7C;%G3Te#l0
zN4%$PI&TAUxqi*FgdW4iJ8NiTPp!Jp9cc~R)RU1Kj~NP#k5c)|xqo>9w8h=gq4dB^
zmmGRw(OwSYE81?08^KEhIe9AaLSC0)wZoJBJL^Z*vjyp;o{P?zdeFIzJ8IXGts2LD
zNv#)tvAXq(<|GtaPYF|d^O&TZqDvri`r0+<HJ=n7N*+6mtx=a@F=yC!79R-(TwYb(
zj(+aPc<KJ_0XpD9V!4^vl8An5(^#BtP|msS+=;Hi7@-5j4^gDuW%gr^`DiCT1H_Z3
zU)pZ*eL_#`j^L(8y_~<c*W$9=ma8@UUOl{Rb>VmIbmM1iWrhEde7o_thpjrf{XWzj
zMm7l|zNND<x8&>J&iHA`_h>KCAHg=fGGG6G(%Dn&yEU+f0Z*f?who*@ORJ~>uJ)@#
z=a%5ED7LmX2%cDGJ>Af}+bVo@_?MAs3Pl%gbBJ?o5h3cq6JkRTmvLVmcK9*RT;hw$
z=Q$kL%6hEkG2#1$Kw?~dea`FP!UNeazD{ee2@3$dS%SOMt)Dt@*OG05_Z<hVs%Eg3
zU);JT#u{YkAZxcDgB3@uE!dzD`*327*Je{$-tdI{NXiO*{k+%C%gQ=bXh^k2cd;XW
z!@|u&*@c;TILrF|kFyX|M{@P{-h$xneyfRuBg1q0W5Ts(GDHa|l~0M`$}i)sx5<^b
znljSQHEbERL15c=5j&D7@u@_j)UHXib?CW)H#O$lrxI#;d9@c72fM1nHa|GeUFPk7
zpRTC7!%-#IyBB%mgA1Cu-Tdcu3n%WplO!kIK*a;R!Ne=?%XUAJstGb?*w-)m8hv|n
z43wj}qs2ab-ok|W(F;C8sSiGnujc9y6ZNzy07AsNSIA#Z{tq>8@y`3Dcut#Gw8VAs
zs_k5XVKFXupO#(ZExmB`;tx0Pg%f6%XkR7nuAO%nujxB`?z-z3WxRunc_+qu7`D9T
z{{^B^ZEzR0h4-p*wRQO6hDDUKX90ESqC$^%+%?4uoV~MW6^AROVA!NE7RfJOo0o0+
zmP++2ol7tC>3;$ATWYmh$LqrzFSfyK-F`=rWaUe|C{p!Ca7^6Zx4^Ua&@C3j<O1Up
z008ZpZSI-2x5xvlAzB3xEegh7x07!~<E$AkQL;$n&b8{;0M0Yvjtd}IhR~yweqW@E
zdIDEfmLZx=b{(U5eX}3Xi*yIWiER3q(aKSm9enIW+a@|g=U2Pv6Vb}jPx}V~r#tNL
zr8`7ZP@LVK_FIs5@t^xWYK&I3Lkkpr5|RX1>9f1OeWS1eQUM1lKJ}E*j`h4x6f4Y9
zp1LsHn$GXVXPj-KFsu(r{AS^ax>kBoVcT%K)DTfk>%av3=G;@!&6-lQ|H=-OS;F-`
z*#)NFeh0~tfx)5QGckN4)3qq)D|;~2??QGlxfmPO6d~1-HknJeaTta5nww8DB3hzr
zl^WmCYMAt-d5*a?(paZdicZG!SgCOi(wpW_y|T%bvb^i|<^roAy0&kWj8Vj@W3GCr
z(!0!nPQ-4w>2z1I1lFL;ejwJE^0rAs-RK=Sx|e!eBc-O&&2ENN?Mj9Bw(X6Fx=miB
zgYKx}8(R$Keq>^fqq%O&qVa6AYJ8BQ(X-hK3Fx~LE=R7`14#Vg{UhHv5m^4&JtuA5
zt1qXp9Idf+N?2I*o$r!cl|GH!d`4wgHR=qoEM-S*@^3FSs!F<O4T*Lq&FjrqhDFUE
zy5*Z4D6HOM?>;vGoy;ENeEY-l`f+>SNF~BTWK=U&Ryvd-e(;uQij-H<w@3=I<lFTH
zPczje0~khLMnBGpMxV5AO`+hWt()?m6WKc_L%nj^N4o%G^^&JPrO)%hWWuFyCRswC
zm79YQMHcPZDu?k&mQNXdOW|3d2T`Ny2<j<wnuyQ(juvqX(7~JAKkSvcO-{?b@T%8-
z@1p~<M4pH7m88?~=93@a;C^>pEIm$|4XJu|Pn^Dd?Z>sGU&|&g%xL?j4WXamG6fT_
zoRoo>WR#ph&CGix>V3Mw>#;F=lUdg9Zkejf8sdPQq7=1V`R2&=lL)u@FsFlcUy$mm
zlj4iBUxs5e_h2SJ)36fu)M*ry#$S_bQTB2}Wp{^d25YUt&-QdGMPdhezrYK@h)90E
z%_@PuIN=Wy@6B4uJ{#(w(t7zl$%UNgP1$5BR<iPesr`GW1Mty(ZR%Ug-&7;Yly0|;
z8y_3yeNqTEcr~Re4H=HB%lIqd-ZTP~*P~SV4%TDhPk;SdfF>`n#h_K^k3DAV^Pd!K
za*yZ$#?);Uv3X3k=|8!Tu+g3amH~}Xt)JQd)BkYH?yMWgHHlh`{_DaXHUhl%>H4g*
z&0oiH+)o*<K-_%Om-LSRaUb!&Q0IS#*MCb$@$c~Z?}gmI!|Q)<cqP!EKXc|WAkyYK
zl1KL4AY_!x{Zsc8X)a!T&#{@vZbmxS8LN)pnA1R>r+3@vy-7ln+`B%*NyEaD!htf+
zJZ^^iOCX<dKR}rA)z;=_4?sJgg5e;VQ=Na)*m17y{m%xr&t{6@iwo;B<Py*)KoT{O
zJLE!p(a+-3L&g&O!EY%*9{SaOs7U-%>u9A5cc3w8@`Vfii#_#fS2o(>Z%erD1cR|M
zJ36O7&hU%$wPWux{q<McJSDU~Jlebkdl-kWH-J`1v-wg>(w*<<6*98aE`p-ouEU3d
zUc!)!l4+w7;&ZMiQ@ubGH<m|Av6QU<x8?Tx=>}|ko+c%}3JO{Tn=QMr4NbSTapm{#
z-$V0T$^QDUj{7OYJwTZ5RjyG^Rf<0%CqdLE7q}K(5~%|%6~p%472n@e=;10iSXx;j
zk45KuqfVJkS%CWfuz9Jn6=d0{l{1i~F%$DHxT5Gri}IZt%g42m`K!1-&pVs(m2GzW
z3w*sNob2l-8>`SeVL;*v&_RjSh)Nf9WNNC%!woQ`fn%#g8+QTSuBju-@>-joP>x3d
z3jrP^Kl2;6JBnHU_34^~*G5KnJhI8~jtdv)u_4PBUu|8Tq5SWqoxkeazdi*Bb4Pr6
z8Nuqm6(%7&T5p$4$s(1Tsu<dhU6pjj7zUr*Kd=alNS5^Y1#fivtuH1eb@vo0B9l_~
z@QIKKaz|lpz<XiHQN3kirSrD^AI|kZ8o{!D&;=H$3=jc40H$ntFP&Iq-kx@s<Xo0U
zx;J4P2yDINSe8%ZJY-;(_NgKIPG`sm2vdXg&z~1%DYby0VAN*3%B@;v=eG--S**F_
zc8YWCNDQ(+Pk&)uk@d+~Rq5y)w*Aw+H*PL{q~sSaVD(uJ!jbUhWz>{0PxV=GZ-rN9
zg)baIUmfndyaa|DS;4=bcPe7+)OyYXPZB<Eu<CVzRVEEMawODP><1`&n2rDSSReOO
z1UX6feJY`Q$ny+)0|MCwoZP)vfR+rHOiaF_m`NA_gOlV`Gt-?SSl-6YQA%Id1Zv0r
zbz9Q);=?Q3flIw#7fag<>JB~~o*M5-8H3fvY?2Y*7N2S0i@5PJf|mP39}pOR7#EiI
zM#dFV_u{)UY3VO6>dkJJ8c#sH4=ed0seF(cm3Bv`yv_H8BMfVGb)|^i=~H+-zH-EV
ztnA*Zq|_I9qG;mpjOw^!+aLU=dmHgWF5%2w_to93aj%>LW$59)mx#moBjp%gkJ!fT
zFONUH)UWnN=zJ3t7S?oI8vD|oSdJXFU;0p|c@UEgX@zZL3Iq^WZomxx2Xf;X4hWm-
zY4$fjGUb4&9nrc2goKV<8hRI}rZ7c2<15333U^%Qf9uahsn=<zij8lOi$VN-1^M)U
z7o0qKa@0*dSt8H2k8yFb{vJl?e;|}z$W5OHvE*D|^Of76tc1rjk;&<+SB}cNE~Cp6
zj3a0CN~|vyXo<%A_GY=|bSNsUrh^UiZLEP4mr<1~rfLRxkoQKyLvZ;)RjX&<@dkvy
zk|6l>mii&Jd{dr*Hka|ZRDKgs_iAPyI=sDb*Kxc=1-N)rj*N(vX>C+Z)7G90t2+`k
z1oXM6eABs{6fybM%Y17Cqh2AGe0d83fBz4Jw2dL*ti&93b6=8>S3Iq?>XeBt(3I4e
zY9N>oO&+R(A{A9#>r2hTlJ7(E$eV<HAUC1Fv@tE=ntG~C9^)fTZC&fQ>b%s{RB}50
zjH?gGxq<Z&IXQXv;i)$zR-F*A5n8dleq4I_uQ~F>=?vkEuaXFo*4XOi<h5dS$JZTr
zv>SFs&qL493D^#PTB|$wQ6dG&^$IOBok|nCDZUe0Jv({W4vL1y(Ris{Ik!$;K~wO<
zIpFo>G2W#@0Q6pxoQr#A=|`x5nJUGzpROsE`cIs27%MZ1;#40%`0kDQ9$SR**Tn}A
zmSJ8-{0#ET20g%xNN1<?(L2P^6kQMbV(H*AC8K7Nu*nBtaD*-$-BfHJRxL64X^B=J
zVe;DgEjpyrsaxe*nIP(v#~_lO?U1N#J6aLo$m>_z`FIY$i7xe6lW9+oHui_dfAqhh
zuB>VH8Ldlv6=4HQh~Tj)(kn(XY%k*=CmMi#z#^h7xx@^`pSo##FG9fGU%yj!pwF&)
zfyV<V&w<;A^U091bttMo8Y16RICH~hbf>Nl_#%qfKNjmaxIdBUTW3G?2)uiQ?qH|q
zVRCpV=T~}{dxyk3d9p>H&3Ma}0W|6{{PCYmAB1?SPB?)L=HT~rcEejk8ml3T8INdN
zC8rwSu=vR76<cl(-`Hg>z|m)^%j_YC$~3=T(l2?IaQ1EjvmukqJpbcohd$g!RT)<A
z?KfxMeq>vn@Q`Ew^od)S?QuW=eh!UB=bKHe0DZnu%2K}9CY@q(;sC>b0MXe&Zix;g
zhli4I&|vgV;>I<D&ePXex=p2hP7rhY)R81@ck<1X7~XiTGJ6|<Fb?u0RamZiYwgIw
zaP(GMzUUJ>s5Z7!Tzv``S5Br~am#xal7@uHT|C8IguP-`lxVs#HdsI2Kc1du7n*aC
zBqQ*uHVypkRjv0DZKFdjs5W~33ytQ3ofpuR0`rG^cX0U5ku`L=8~SA}ow2i<A?#o>
z`{OiLc32eRYw=LN59Ku90iSPA_zb&zqqAZeLpB}tH5Iv4V5v#MzA4`fJbsYh12`MJ
zm&?=!<{ACHR^j4RxU(7vbEWzUV7`3%3>BN)i$DJRADZ6DS-y<GXGg>uyZa@1{(zF4
zKrMwpN~|@sic2(X?yG8`vdO~=D3~u(bE>^dP4(56|Fxdv;?Ia1-FvJ><vatIY<LAN
z;G|^_$qwh;Nx9>qZRr1#Z~fOb^@gM&W4gBJ7}0m*wc(-XI*;5+9LI!`Tj!ji3sb(+
zaFc6VuT`{!k9*~8a%{>c<Imom7bx}JbMGpcC=`4yS7+UqedBpW%{c)co{%@JUfe8R
zTW<$l!ZGWK#;H%KUhUf)J)N#(_s=H3IUg9)gV_1l&t`66VUgrNH7Dr#+ekx0qp$|m
zxaNPv3dP*9qLG?e%zV@E!e5rhnYMBcb6fs6_xS%knSRXx6>ylbgBdna3uDW{gZTyn
zgRlaYu6(0JuA4WNe!jtfoGzc}2r>Dohzu4}M7eYxc=#ORCuYhF^25!-rG<=QW$o$?
z!h^fakk{p#d<0B)OKx^$b?HyI#q3I&OpibpOngl-qfW652Y$t>BNQ|3CjMbDd<Gd&
z#(sDB%Em1RXi2$x8X1lqEo^enD5#qZsfu<FhfAFpt1%l+g;S)<ib_8tt-CXncp)X?
zph>>8Io}yxXvWzv;-sDrVd<pw;`Mf&5Lrd%NI4?ru!1i0xvncc>f`)p1hv(Z@WsZB
zfs`^Vcxj%!^9QZxy7ERul_oc;qtDUtzjJ4nP<(*j;8Dt7QQ0KovOglo%|*{tuDp&G
z<%c(hw5AEg8n|;`J$oI2>&UVmDN~gYa~iL)o+z}d-#t4630D;x6E})-n*AAW;5y81
zsgkO93sKYIi@Ol^lTuPVPbyw{+-i(Ml=_t+OC0q0PoHi&$!T_-Dev+LziLnXXITX$
zC1{m5u$@I=q_OHRBSf@VjJ?+v2Q6ZmdqnWa$m?^3eu;cnbqZ~1naL)6RJT?~Bq{F3
z#QK*TKWI9s&3ybTX$l6$zTAdetL0-<C>9s<`j$jTgmg#U<VN<p@IGoCLqGW>_a!Bp
zU_sdwN}>GnscbTKFxZVR47sFkg@W<2F(%nV^I{Rhkl24e3H>W|nLm=Fa=tz=R`Xyp
zPW%vV-B<LWs_5!h%%E@hshP11?%D2C$FZ`vI!EZC3}^G^?w?&=%gHk#0tntK1`zb>
z+n?!XD0ufGbcPd&kPg?Kdl$K=Kymzg!uE~y%$d9SvzOFm4`wU&yEmiA;UecYPc)5r
zudqf}wj|X1@aWw(9ZWS_=1(R^c1j*~UlCsDc)9eR<lJG`;&7=;4R&d>>zm0>*ImRO
z>syx&yy~oTrK?KdF%tFvcaI)`dqg5udw?CA9*2>lkj#=9IU4~DJ)Qd&QX30T-*Yhb
ztS=#(Pwh6c=2vo@RqN;A%v8a1T##8A+}Q}R>1##cj5IZAJSN;+n4mlLi{tynVVE&l
zi0}4xbP!ja$H(KJ9~I$_nRA~R0tW~V&q5`6ckxkyBRbh5*f?dcc%gD)oW#zUQG$1u
z$-|jf_uI#3HB~)TZaHzcFx%GSHG12R`*6t~6RfdD?hXKK%6uj@ag(1vEa220s*&#S
z27`$0hmJa|{zfk1RHPN33W|u@@j@=<v=Hs9m639tm0}!=phZjX&SYTtbi0PxbgMue
zch*Wp^9^RR318g1K)>$W*x_QBezM?^x*(u}#Ss%X1$`Qt%sV%ZR7uBtRGB8qJ?h6F
zgj{Ys1rk}f>^ka-*kN84mq3BUq#`Ks-q?L;l27+~;o<J`=Qkaxb!^_uE_XL_HAvQC
z`G5WEWRFw9>8YB4P4ySXf_H}pyA6@om8WOIGqp)B)g{PWYl-sXj|~Z;U{pYbF+K=q
zsYa467Z^W3nDCPn;74pNRm^l8>D$~Y1VZNNlxi|Xw3@-?r1$;`h_u-Zr8NaTJw2_*
z&La-h3gMV)g&E}M#o-nXbFYzAT!WLp2ec3NnVOhF!e(|d{`_5j7>bsbRzu@G<=q$>
zO=vDe3>1fo#rYAl-+Ueq@Uq-@v^)9M_P+h}yQBkwnv^&co8&2PblU&=C{F`^u}$a3
z%_hzipE7P&JRa?DU^3VI5-veRop?q;L-oqA{`36LcLg;<!iRf}u`^SODZ!v*Xn*sL
z|4Moh#X2AvCYi6ZQnsvCO3E8MbkSwrhZ!jQR7T@9llQG#P<JC*PcBj)`&8xT34tl~
z`}@K4Liz=`T5?$^c6AsW06aY-V~16Xo{>X~y)`}8Ua2iXS`ryb&+1gWtyZ&+3?>Af
z|1K-o<{LA`jd_HzRIf1@RlA1)OqDa5lTkZ4wskH$1&0$rsHBMTBg2xfbW(T;eo;?d
zSC{QnASO@VI18S7JwrpLL<fYDec{lTt}m-W8v6PS*PC@gOVyXGJ<DyXbm>)_j%CuV
z^;OTKgYc!<`~iKtyurnZvT(KJ@=#>+?Q<_9lw%r7Y>cmWCel33^vfnUPY#xRb^K)6
zPebUq20kcnN*=$<d?BZO`ZRm7bB`Y<5t%XT&B>P$+rPVOgoyZ(rgwl#)^;3T<2Y8Y
z{~sZ_{aB8why{`W-c)k@W>)Va)vLA^)xBgQp0$rG<Y(^o|5V;=A>vEec))$ttF)<$
zI)0d(>AeR`AH6+oAn`<ei8(0DLOf!t9+!^&=>HMm&Bb;`k5Zr=yiDWRrxTD1x)#g1
zF9&KwJkpOTL1(%=_1O!&Zsgd{P6REuueqZo6H3RAw9`wUK+sFq2p6aj@g+r9f!ZND
z5i5E2I92vP?tq*$s13PqV&}mtYmR+7|4t@<4<|x0QE{v)DG}~BDt9Zf9+FBc60&TI
zqXmB8@4&y@ebyaf63yh%XF1Ejh{ndo!U;bZq0dps(dJ8cTh{JMd$7qtrbl0F*%20B
zY>5(cse5~tdOU3Er(&KnSCK(^ej#>Pb$O+z?$Fy&#SeFo{lYStd5MjPXX3H?X(9So
zqu$GE(7{h+4?0u!?q}wS0+NVvz}pC{k%hl?s--62Ex0k<bCpz?^nN#GN|~+i%)ry6
z*gUJg`{$7>4A~YBoOSfx=QJJkSPecT;=x$Tk(+-RA-P&|FUhz6CiMG>JurhdbB~Rr
zHHQ4z`6N14Nq<p0uzwBvqQ1ukTJVw|BC_Vrhx;UjT}T7P2VRYoLza9*6gAyzgnnl<
z>)u|)`Yz8jYHtN!+nOi>Q{&aI;CiIY2-@oQ^ooj#XQ}|FxfJ9h<cH7MG_8O6n#4uf
z<1~A0|1V++*-?Vr7vRQPF&}xw)A{IRA=r;W&ZtXKr>YzXU*>!CG6Mc6T`MQ1tK6wz
zu)^%k%hEX|E##&^g%s(8x6b`bp}DJ12jrV<dJymUjXd7IBd2Az+Z0te{(;z)5%9RN
z>a|PZvfjqR4#OO^U0<Kdh7hLl6z|>2o%zJdMbE&rH1RJ3Q_$(RC=|csT3i^Ku?LaB
zB0Fpnu6xU0zTVRfJ!+gpfBpLPzA@IVF+h&);D<6VYo_}+EPNB6&Pr8KquL<T(<dUO
z+6Bqoco}h>LV0?TlQmcxHz-|O3cBR!mDD3E!W_CdSOl-dF0oLK`zz)acMOv}<xFu^
zkUD7FEY*2!|M=S$ncFUti{|+%e8Nk%Ij_1pVbU>Y9nE=X*#+JZA`<NP1h$B`Z0522
z293YPAn(#Ly3MxHujwG~X7*C6x*vu7iE~1CoBKwx5sG09jAZ+>SsY2adbbV>TmdkA
zS)g`D(-l*r<=qxaf7|TnRQS7a+4zK4{5>YbAPEul0l-*Q{mxuN#coT8Ex*WFTCCLX
zrYq5>8Fa8V1No{d-gftC=;$()H~Tm|#(e8`c4jy}>MEwDCcD`hx=t0?{YYq*g!nA>
zLB}Y{vq<$6kzwq|?+|u5!9AKa@))P74U>_oO|EpQgTuv^FVoJ=Ee^h8Nc9)JlOSS{
z`K;M(VB!+MtF<(>50^hPc#M0YDsU<FUHJ})TlDvgSy?!fJiXgeq&b;;j$IK!%cV!%
z1iW3^rvwziv3>T~>-wN>ib}?YaWuw-<z)%tliznCj7DBwXY~`m?moPYQYuAiNv1#B
ze3C5cAR1a9nE%!nJAREp*!r=^Z8K!sLh38FH{n-GTh=Oi-zWUN-u&aAJcC~(T-eM_
zYSXd)ydLF5DSYi<9_mC6lhFP`AoS01es2@*gotNk78?@<STs4(|6yi^iISn;B3|(K
zte=Lare>*#&ijya{8d*SSzHy9H52#Q*UX4Xm^()|2&eaEEgViEsw-Q1wD05}o<D*q
zdjv3HxpiR97+Tt|&oh?l^dUADRmEt3C_utac7Df3i>j!kM8g|<yHkoaGZmi`C+qJg
z@r4*jyNH``C5b<em;k@~Xw7r#$AiLk%MoPSEX*P`kaAd-#b+|i8Vu`G-7UeQtCEd?
zBP2)Z6b_`L@}YZqV)v`v9lDuWRq-6Vsh;|?JlYD*2udPqNmCUeDdEO%i-$=~M<i6M
z-3`i2^>UQj`b{ljR$9`pXSM3-*JM^`RPJCK4<EFN^_>o+{L(8?o>uR^I&y=(X*nIN
zeq@|zeGRZ2J=wiZ&y8lQw4x{E&JX<NkKG2#u}PkcKXaGm`FF(n;7{CrUaj8spOl#m
z8nwHP#z(v5`c9IpFQt~-{KJoS`i5+Dp+m1xILYflQb(B?-ZR-`bjl1d4O%)78qVZj
zVxS*FND2-4wK{m9*8KdHX1SePWfW408C<m40Ew>f8E*Pxa3I~NT2zEC`4uIr_tsm_
zm99*)1;%T(KSGssi<bM7XX3^ckxHB_tab%sC6=8+d7B+|yo9iBAGesdTTXfY0}Ab<
zrF&qrq1Kl=bxomB=~PE3D2~}I8>+{ziKowS5boc+llNrv!AuJee{f`EWI~AgkBDmu
zVPOMNY_mUJhh(3G!x_c$$?vjwP9ii64U_VHakZ3b%ILgqKLm9Bx(=#zfD$stW?t?%
z(h!K7U}2UhQSXeGhN&ez?_Lz#+W!0_ZZVgXnBe=fbOS2QzhXCX0cKe6@`YL7HfKQ7
z>yWy0cVl8=6aq<=^qQ8`g>cB<VrHW|<<l$0YB%Hd8Y}BUfbsM5=$8>dp8y|ms+PGR
zV|}z0YRFF)Yvku(2pjvDm8-%sdyklVNOQ&<yx{7n5C16il-jP%*4hB4ewn?-9~uUk
zxw*V4K1-FJzdxbOaAWRa6NmG30O_wo7#}^I8Dba6e?qkpdYcppKv>bQ5A~i}Y;*z(
z-&1NbJo6m~Wo0PFYsW4{Cr-xG0SHsbe?)b_kpYEUWgaUVlK^xP-*Cwg8$*n6=#JvW
zCJ^*-VorWFcbrv18Kn7ByqAV{R*E}k`s)WCq{=ALo@U2MP6l5|&V3tA<Fe9g)9N|D
zNET(~5O?^q9aJZ8+#Nw=X#BTF@-43EL>+Mip<C|rsP0l&O;Zf#I8$kI>6N|iB@lUG
zjY=d<z$B7GzR63_d3G@F*3|0KoZxJwqFK1P@2=91@I<Fl-?lix+syiq8SIE-u$ecj
z26dVW76R>agZ7DtDOfmOzu7X!Y@0;P!z{;EEZ=0YR#pPF`M}2?V#r^<qN!Ed)EuRt
zu;=d3QwdZKiq#hkIOUQ0{h2ve%O(&8H9J430a%w1c6bmXkd9&@Ljpgu9zkOI9l6Op
zfXhsX;m4cYM;xdNYWD3veE5(7c0zFSEB&?TM?4baz60&h-uG|%H3L=DDzH`Z&}NH)
zTvw;vTg3dw5gGt;(5l!mAT?(64PVy!<_v&j<XT6yFgFj+Ib<wG*k+hxJXJ~p^m;KD
z1Pm)~xew)8`Rp!QEyfWO8ElWM0Zg&Vzi3^|(I5`pXY8udYIV&`OS_64-TN3Pyg25X
zTc&`+R5wIevBJ~R(p<e8f;FJO*irZSW0i?wGX4k{23U=qhms=Mg%#ETLpLR1>xc`D
zd#pZjnr@>4+%ByJr18eSi`UVO@mA+mu>JOk-)THEL5xmDCfA!2IBhN-zjq6;KL;4H
z$-`>5Wd__B%+9__3FWGVh@2Th?@M6(Ckr2Thc0?Lz^x8<9<P*I;a;-M`t7k^Oh<(p
zFOCm)+$LgDI$d-l;wzhZ@qBxlMabp#AuE5QMd`I~Ki$_`T{_>TGF2GY51af{P$)1{
z4<^~9qX`}8_c|!0GaYd#znOKTvI}Wsh7ohIGjI$g;&G$WRbYE6-((hcrzrdGj3TQq
z6KH0{L9U?!^BClDa-kXOLg4_U8pTe=O0{?BS@6;}jKCKhs7vt$A!MY6ibKu$#@5Z=
zAT1Lep4{rO9a9Cdk@igG4KWv$Wkk5BM8_KLUEDIYg@y7})*vQnOGA}JQR$Y}*7U0c
zT1eS63NDG1f#HHF#6~~L*^k%Yp^aJtsE_p?mrsMuO}-v4^s1OyI()b<^u|<k%(BC!
zJMv8o)O<vMAKy*}sF1S9Zf9{7JOtuTC8{D5d6K3jw_?loFayVGNym!yelFuD5b2uk
zwLdc!)}hBOIy$<`wpNvd{pm$wGQ&4hkQr!qG&!Of2^8evRyWVOF;4bU2pu1!erZiz
z6-;2@HBd6i0F1gx472#1o4|&6HL;T^6r@vz@Rbkp4wpGl!x>{0pin3c9j%VZT+ZE?
z=;+3kA!F3eI<;B%EN)uB-|Lz}I7|7XxK@6NgOU>jXv(}ozE4x;jMrS>fTBgd^U&wr
ze>}SU7oCC}-^qC3AQ1b3gS|=BEQhZ=xNLR!epEJ_xzeQ|-t4qyofmCn>{dWoLeOqh
zuOW=j#j_J}*m9Fcj|g#i#G~1H{8<$=WJ?Nwv2bKczWZPNQUCZc0j-^UQ{RiFhs69v
z9~}V|w2bV!Nz6HXx1|CcBSlsiF)YsiA2&srGGFJ9KTcjzx-YN!4-xPGyKd0`wKpXo
znuPs`?vFo?j^t27694jxSQ+#9pw%}-HW_PT4c3UB-PgD%pQ~#oFPBTBtZC1MZHR2(
zz%sz!F%<H!eJo7WO)JFlzs$O#dEfq{2GycPi$_P_ownEVDz}WyF)sZHZnz<<wasyW
z2jj}e87LUbc_`_K7|+<`CjHrNd39H;<>}v}+JN~=5%v5XhJXh5=z(DYG3fJYZ55#A
zY205S>P!BQycD5z@WMQ`+%o+h>(L6653!1b<^}QSu;r1mj!OBvF%i4|P*Df%aG-B#
z0ON}3?!ax+{x&_WT;T`AlnEMpsv@ql9PShA=t4{tbDB*QvI~4YP&aB|WTydI!;RRr
z)o)9>a~oNEM+V|$;rbz8j;ly-v(I#3TsqyR=SJl(3xH~+LDLlkUHaP$C!L3NdS-e$
zzci$W%f!FBX0=y9RNNt`xtiF_fte7}u^Ri%D5_3vxqvYzx9Cyy5f!l0ek*8(Y@AV-
zp)Mcy*73p5>1gE}^qYgeW2H*DbI>x8FWq=z%-M*ur}BCML9m2M^<kit`u$vL=U4jr
zlAYPrfduE~*BBxIc)5VHG=@~pJ*rj60zWU!l|sd}Ebb4wefZ8)Sy_e9D!%+mOI@F>
zE|eDES7%JtHA;BEn+w6)1I7g{Xl1n+09i(<OVe4U`kK_>u{#{+D`&}ZM3mc)-%gVQ
zMOxYF5_IS@T|-B0m4I7IPhHAIo5@1QWQnc{XgU`+cZ)$(5RD?dO4`rAWk?W6L2InE
z#<m{W8hW%_RPsker*<aY;Q^H7MUkkEh#V0I2Djz@ulwR+h@-<drjs9yA1HO->?S7g
z$n`#c1TR2^Jhx<mwSBDFJY34Lfv)*dA~TetqF&7GXXz9;64)T@Sh;a7z~9G*0R|>M
z*XuGJ^eH{k5#H)JFbF!viW%%wVKdUG_~82W&+kc@Ca&PLRZ@Xf1*1jrd`=@4%;F=C
z#TLC;8rKXAw6!lE;AFT`{C4pfZAHuGjOULJalVifq2-EWn~gDWWWkM!a4!uQi%7PF
z%j|OGS32sB`t3<8#Uh=G@Fk41FHY<=5XPZIr!uH$>IFb9N{J5HzloFda2)rUOFZx^
z)G_o}weXrk8aP!;^4G3p$L-W-aNMu-+!h^iq~|=^)hYaWVPrn<XnBGq_-FWz)`#dA
zK8XE&BA$D4m5*#M2@Ek5&3w%?6Ek9gs(wE8W2e126P2Y=ZsnqU!Fy|vU18kS0pclS
z<npUtvGKs)-!tBb-HE|Zb!)lW;Ih4nq@4R&p%rjYS5%H^8gr^_w1iI7mMe@^xfP>r
zo)wK;mV97iV<T!s1X^~QT$OO8%Wj68U^}iW3+!LGBPeAz?ytx`d)y6O-wO<iHS~cn
zc{Q*PAzXh?hZHpA!&VsQETZ)#we<yeOEb-qFW6b!E<o&huhg_cG_=cBFk!4UvZ8?S
z;Tze+qmA!pb{LS~wY*At{HN}5@JW)3ucWS?6}q5y5*}S(<US&KRv4l0mE8gb$<cIl
z5WRW#18@fl<||t&Y`YLneTdgDaqJU<O)Lzc6gnXXG4!u^ADv8ylD$F)XAo(_hO)}C
z`ymeaf$w$jiQ{(xG--13r`erqrrr&Dr1}lvI}$`B`wi`W0{wmSJi_VsB5EdGK9JN)
znV(*Y1E`<7gEu}`-<8>GyVvFRvtwu%(8KpTllM@tHFcGKtDd2cb_4wDz0^4LYd)vC
znF45AVI9QMQ)tAVm?O?EBwVDi&*A&QXMx+rW=Z1EC-%b*DDHcqLuro!*PZH^97b{>
zHaDihYmUSD$}kt_ER;DJ1(<#OnEVFiHPRK}_MOZghkP9pdq3hNwm0qhnS1ke#PVx*
zyB7vLaQ41H+sOo63O#qGI3tthy4N~k0gOb<MUUYm<X6w&>-Wsk^@{t7%zR+`vSx{?
zxWjt+CfvBMw0@a&%BngLtlz%v7vmbut9~~`8ItHw2Hih6luUzMa?Y*jem?VUs=Q%a
zY?NkAeV=WBz6kheL3=e$&9wFS)0Nr{Wa}~r)a~nUEy}XZcP6H`)BnTf`@c#G0e5M*
zg4t$aYhh|HL-~p}4|bwD)07AD{2x;lDQIZ;2+q|4&u;fJS!P~+%}ebDZdpQS;$>Jx
zSF#6lCRp@hQLg+H_r`rY51@O@xQ69|x{IeMnW;Eao~sBuj&k`XRa<tZP`_bux0k~1
z^vEvk`Ifhn9Y1ENvSJ8Nlh0x!Dy?UC*@8^m1FS04X%7JY4$n*nNZHJanX)Ob0OZz#
zxw(ru<wgSY9m%n^<r^Pe(AzV^cKjjy$zl(&+J2YThZhPf^TPu#$ch)(neY1MUvV}v
z^z2HFrT^CEA0<gl2-Ffn;EriSX;(p~<B(De=S}3ba2Y{N&8E|kp;qATwhnx6t(s4C
z%sf4t1!ZZla%HU!Cm-F}-7M|C#%z@Yb<QovNVFP0U4J&;rU(7`>pir2l3mb$eB)FC
z?Vb-YqPivC$5ir7V^MO`#*PT~HKwCGQ?-MziF?yM>N2f~1r<v7A{1HObd&ssonn_r
z^$IP&%PS%$Sbb(kuo1LT%08G{k5uv14-*YQuUgp<)mRQ{>pJQjDN1C3g8HRln<+7s
zCk<qC&`iL^kW!4mz_}$%YL)zsbFTvwZR8(92k~)(#uX|w>@p98)Z&J3he<d;12nhn
zNb&4s$?cBtoP5A-jbEqZz$H2%lnj06t{0Abw_?cko;<n4c`)BwvE5&Njk%hLy8cIi
z6X9gz4|~nRnQ73;F8VZd18p5L6!&C~_LbLXpLRCZ;5S`1w<CYe1~EEP!7zo&y}6a1
ztJQ02DnCM*i)t4qYc>Vm*2fx^0&n3I7>3~uQ;qRTukW6Pdvvbn6gt)a;=TMT_8`i-
z>+|i2I)bajNI7Xr<myke_v91y+2r?4C;YrlptiPp<YxEr=bQtORohGawE8~lpLNW(
z77EvMj9KDwD+6`Xd_mXi8)r$B52#mbHr1e*p-do}$0xI)JCf-N!s+S2ra2!Vp*FDX
zDI${j6&qC*hd~$D+r@5grc@GxZN27td`rG*>-m783tW6RE1>WQ2-JYoI|epRSby4E
z^XF0+bB4K&`1FXc_D;-_umdgFLdDvlKQGWs*%!lSx|KV^;i5~CI%dNqVDsgd#=2qm
zYv&{5t?&cv2+!hUy`*x>`j;e1S2lJlb|QI9HJ(fm-={9h4-^>7l3rk<Vssy3D;u}n
zv>qz5=za7vSOjq(#>K}62W#mKc1mPTCFf=x$|tB<{dP1AUA8|%zaPTTB<x^Gp0%Jx
zLgMUQ{zE$3UmyL>GkR-nEe%QQReSm&L!G9l>+d;_u_#~Wd)J?5&<Gf3YC?tuWdKrh
zi~h4o(?qJXd*~G}yAQEi-d^L}V#jY)<Ua161M^DJ^h1Aav3udn1=;Yvk&+G)_T|1D
zI&cP|50oB4=W~bFf1DFQ1I&7vwPLMo(6QQq+tDR;*>zO-aJw<q%f+T?qp03L6kzxE
zG8Cc^p`Dg1K0{hc-wJsXoklC5`<U68nP7P`0otIXT|8ak2xbpS7A4bmPTw+-f{3S6
z?!*}|u{t*w=aoOIB}l(MXpwVU+C_GRIfcUnhfD1eRomlliw);?-4qzqEr*PGPF221
z|2b@DvD{tH=U;i-&t+o~B-#BM{MHwf^dRWroy<mgvenpEoIIrwDk(;Sv%}(hNg>&X
zYRa|Er-><IegH3#om8oI9b!xI+X&#|=kL%~kNXX=uT<^iIHQ-+?ohR;u)dRyn|BLL
z5?x(h=*m%7*?qntBq>?uQ0+bHc|cp(r#+UY0B<yDQkTK=Ryo!<e29s$6d`JCVLyB3
z?%|6b7NOZ`agN17U3?XGcM95a6Mf$cKg~9)#L3KPmAt-Jb8F@lr4$nxv$rb*-PE%7
z^~zesOy^8WwPRR<NC@{AQy_im%5JaH&<DBl)0N{lCvx)Og80!DjH32bW+*ATc5S<a
zJQYb{OhpfipyTMskfB7ydJubI=eY02%ZSV*cSl3m>bIKj=Hp-19J|#bQvIZ4mIew^
zrPXf7<dj+qoQZ!+%+-AQ^J*G^-6K`3v9~;=V!al}sZh@6@u*6QA43|CnBQII4>w*J
zk#$<d``2)g8hiIS2SzL&hI7_2gU(&$O{JYi_r;>mVG*=UGRKD%KK=nX&N}oj@J@M}
zYl?=9%>9n3d4SRlnMm<bIA6UO^ROE}<Rbz0?<TMKtb2LMH|aoprLim3{%xsZ;MyX^
zk|hgR)n)OxEUg@EtaZzW&h*V7g9pO_#EtD5gt481K{OZ%XK3V1^{E;y9=A^CUtf+2
z3z30g63Vf2vBn{XdrV9&mYvOs>P`}_x;zlr+*dB{?Dx_JajtGso4K+`ihGI=Y?PEl
zjlF((Z)>k-p6h7o%hoVkA4jqHOJK*=esS^e<<yME{bRc0?*T{?Dko3EjvKe@BxJ8Y
zM+eFqs$qg=sK&a(Z7qlu3Uu7aGB9ELVh68#<1p_B#-M~;{7t?t6zo{t7%JX6dI+|8
zLjAVC>Q+A?Yj*A1S~NyQ@DzkwrNRV}h;_@$_PGWHj)X*BHsQD|Za*2I^rDChX2bAN
zYC3CX2C>KTh(TRjgV(@@sQIXX@Rz(XglaH3|2}*lbe^+j4^p$$og-+mL|3T>|7>BQ
zky9Z~XSxCw@pWt6a%!HY-nMc)k66jBSlP(gd>Q2x5}A176c*k}n#u~AuXdPbq-&th
z##i*!Rj$fs^*^%SyTa`s`}Yy1C0&oP3to0TiISLoJ0@ICl$pkckr6TV<}nGm(3#3v
zlT7x;BH=T7Ioc4irgv^Oil|RN6&fGJo_`zpV1iXerCI`#a2k|*>mx4ye7*H|HJv38
z@Ia+mwr8i-9quwhdj&a>d(@m-Lta8_7LLRe5s}MaGd|@fAE?`O5YIa-zAIlVOct6z
zJ*mg#LiV#%6Z@gF7vCWHtG7bk2K1_1p3hD9g(%*(^r6Pd{tow?T%$zWDu8_XMuC_c
z^9Kn5sVkVk5Rx0ANIh8Y=Sy=OtE$WorA?;qnVbPSFH^AbwvMbQpHB7|hl8hs8{)lK
z>c3~4UZD-$S}iuPukE{B*myZnq34Ebntb4HWkTt@ko4Rd-mj&%EZbA4ZzEDJvikfs
zsrlWV10^go#vbi%OypagBBr*5og|@sl^cJWO48ksQ^L(qY`DyhI;S^>P9(%mp*=03
zvRE}R;#}nO=@OfsnP?palz~%i@eix<3Z<Drzv?`~)SRY~9;DQ+m8N|ul2^S-x<g$;
zr30YMh(}ARph(u>`*+T$vgr(to;&_Qf80GoqX~BRnG%hOp;F230Xp_p#}H9CHqU3U
zZ~n;39wAJ`edjt4INcxOR&|j?<i*?%pfTZ@E5vsb6T7znF??<&>EIC&GxWD7U?DF5
z18QEGnC-70fL-Pdb;0r+zu3O`{^%y#naU?Di2}sPHvb(ce+QpF{yR|qp1}ScDF2H<
ziE_yYBq-p0#2G~G<3^)VU^yDKRbX{r&t@?kYaG#U9ocKGsbS{*#B4X*U`BDT2to`N
z<#+WY3F9l?Y`xolh*j;bPxtn$hclE)th;y<I8tq>Hh|McsJ|~>t1aOU&p69b=aqw9
z#v=``jS&U|g*T-Gk8Fj*=J^sh16mtJ5GuB9`}xRaC3rWhpeLRhf3zX;_k;h(Klx66
zmd2dQdCX1nerJlLLaMX}yn`{9H7CF7QFJgtJvN{a{#KF2R|r$JHy(%W+u|P35~=K{
zvQsQb8B6bEslE@8oS3I(_ENjLPiFFAGdTrcw6-N&h)MZuB;@>OhDz<wJ9ALQ`*jG|
z{XG3f*@a)|_Ec7}3(WLlqql@)@UuO07$rL<kCl%L6HcA}Imln1(x-PB6&pBN1?rH_
zb+1T>xdsM8MR(p7%`^Mmh;9Uou>R75W!uh;dCmZogxk{nbOnm^tSl}kRWC2E^UUrp
zNzi#bpf~qxtfHN?jivLTjw=a(3`|#;Q(Sj|lPJN5TXO~NciN%5^#0%kTSu0Ih$yWD
zwuOYfQxexJeyF2}PTnN6KWmgSm!f3$x#(nab;=!c`*Ur!)Fl)MBmSS9=FV!fRfFm^
zC-}pc@3oB3DK3xl73QdB34tF-d0hldER{;%1$E3yzW~c83}F+gW*|dE?a=6nSwo)E
z+ibg8hv&rT<N^5t07UT0*Qg3yLHYfI-R<I;{n@C_=^$`sSq7M3dgIQf`5woJH!R+A
zOs<oDfNo{9++3V2zWLOwr`;pi%Ow^wSfQsslaffFl7>=BknnqoH$)u63o_9I;<FJ4
zGm{xeq!PTPzPSWxIp!W(=`wG*CU|@i?unBCMg$1=^z?MaYX7IM94p*PC>_5cjlcMI
z(iKr3&F(S5#16(S%-FRc%35x1Be&=p`~lhdcW(~Ybs;)U2}*DSr%FM0OzG20w)^g0
z`ZFJTI^aM%%U4`&rf;@DaWC@s?DPxEs=XI$whQF(ifcp!#eXoZ%emF=H5=128sOPo
z@nrR%UK~Wzol4Iw5l+mp{f%xtqB#|XiHI&hr@(Gv7pjdv#PX><{vrbLn<{*GFP3(I
zu%cNv==2PT$~9HA@LqTex_Mho3^{&uQ=l=$mr@sl%h`B+gNPPLPUIqiBbs`{N)t<Q
zXg2<S6@eDGN+Ha@rf&v!Uq{AS0S0puEfDNz;2uukxkvnT^=BeCqZ}h9N&{6=R=TX}
zJVo;~5aPGu9kPUV&ERE%*lofu*}w^uT@<H(Nn2QSG{l6M_1)~x1gfy04%1mUA+T#j
zCJyXrcJ%i6TUUE^3#WR*C*A^+WS!A@8G-$tx%JGDqomhN1=ZN13?xL4N+_>zUY`+}
z_8?>f%eOo~)9j=O^2H|0(PEk`+V(?i^jv#2QQ-DfLR8YFz{DjyFdvc^$yj}^B-$hH
zT{dlF;Whi+F(ROtD4K(oK0wP(gyfa2($85;xWjxfL;ejxMxssq86u*qW%saBuy3LD
zBTfjK)#1`+n1sm>SmAb=q#|I_$7_gUEx8D^+WzE0A$Vt(?NB^I`Y^Syy%Tmc38+D8
z1;y4FzM_N0X8-~*Z7;39A&+vZ7C{_gmI=yS`}Um@q<gLZb1LT_k_8IO{dq+Pv?Bfb
zR_R=P7hkmnLWxL0B-aSH?fSiUtp58pu0z&|tTeB3H8g3ARlEd%8*egBz0g`iN!Y26
z{oGxI<WwoaX{qc+Uf~pS#Im!POzV6%!&C5DjP0eqc348cb>*(a%Lp%SA^?Jq5vK|C
z?uK%BBjBN0JKQj%UP@vp3bXoslA+NeQm{SlJL)o!MW`d=ksBKu)?;7H+7iVC#Ez!V
zg(FFmB`oc_8Gz?A9KShl<<iQKA%a1;nA2PjXll{XPgkwpHtR^LjLw7;^SIWZp#jFU
zy-mw$ohj9pZxTq)Q%df~t^;l-qFqZwxAZU@x@LTIX-sq?BO6t?I4{}I@HWc1Qz5KE
zR44uFt@s>4uDo^J+NxCLQg%+m#G$wH6SJPrKVlX`#3oEpo@)n`ksg|OS`}i5NLxO_
z$s&B+Lxi(*@eHyc-f#jJ;5SoM^Q4mDJyamuFkeBZ_}WIFXmp)ALB?_suszoN3xk=R
z`GTf9B3?$!Jq&vov0E|+u8*+eErG(Py#_r*VpafY=|~_gfsfuLn{UJ+nt$p`+?M;`
zP_vY9V5e=4P9#0&#3UhvL7)#kffSw2!y)%#Ax45Z&1qt6ddHZBo`ONR3Cnv&e0yti
zddV(m9t%htvGFUL_Q3Fw+aRX@iiEx9s4vd9l0h$Sy_&(sQz(z%ie}##8Q9YyE~}GX
zlWX6sNR;TTln!KTbMJQq5<UsKyOvf_Vd<V_b8CGuGc{b1)t?)@wl|_JR*}Ja)H9vG
zQ0GWG-Lk#Wj#Dj(hFKyvdR3JSo$RkffCzc-d;M5fM8(^{^&5w(N|3iZIYd}s-1B@I
z>Hc-nk!!`C4q74|M>CU#6!J}>y?^iA|M5@AAAWrHGQviuDW{-@V|RP(+F9|-bIec%
z?IbaOKmK331&~^x)3O=TUG&~A6<oLN7TKsUBb$@nYj;u)|Mb(T1N?IEMm9U0;?bcE
zypg?SOY6u6P5{K8m}!Fat+T5TL`-ve>ohso7-X^9EA0<8W`W&bDfURU?#-HVR`&!s
zaDDP#cw>`BIr0Xh2fRmp&jCWU5pgg4Eevp$=kCtimZ;k@iE&}abJT$-Vu7sBbAi<c
zJ`$<+fstQp=GV_KIBd=L7F~uRrj?hN)~8Q}fWR*f^*KG34U^dTwa{Jp)OEScro?_+
z>YW{}6-po2P`Lne)k3q0P=Yv;(8DQ#N~B{fB2LQmO&vnzj5fl)i#7J*JA2o1#3ir<
z`CgIf5`oyPazNOC=|{?zmQw^_Cmi1&m)Lt{(+Hjz#lWhvdu#EAmlBisvxypp>XkB&
znw=;5W^b?Jua6P4Pi1@a@pJj6cTepn4y}L<`~^aTn-vX~4*K&L35+n{Q`_{4r{k?4
z!8#Cnqe3Z69j**uhz>=!%yyrRZHt8n$Q<dESvJ>$t}aD#mC9kH^zCqK_WIJYUeo$`
z-NAMDLBEk2pdeKnGhOQKjP)sn5dm2}rXoy?h8wOrdY>U}z}T*(r6tDa!#P>RHu78{
zl3}&T3IN-EBW~|Dviq%aHpp6Y1RdKp3+EH;%oDpA9Q@1VKg4{nbRj}(CI`yXX?Fkb
zHXcj8f+?{1Pk%Ctb$gh-!p45-NH%jX(ekT-YRUZ}Rw>?G;Pvp)wew@R@$kGd4DIL7
zFC*yR5u+#j0ANf?aZIZ~^{oqx;%rWHfXP9w`FU7=h&>XQZ))YQWzzwAEC#(~#vX<`
z*_<W*=ppV?#N2UTK!nA*lu<DBh8Gsd(zPcR#1QyF>_VRyGL)Ha{n{+sGN%YK)b9pC
zcBPY!?l_p<7PNu0etL+tB<6qqwgG&l_|dr+Bo^qPbF_4db82vE**Ka+w-LdXR==bd
z(*a~(MEKtU4t!-KL!`=~@M*>;Wnv`zT$%viUAuz^;$Q&<cnyEQk=3fb77(xPPkkt!
z0Ymg5S29Bn1Az}*&KqH`Lw-d!P>6-?bp41KY9)qN|Ne;M@niWW&^s&s45FAR?)<`w
z3$Aiq1RMCC_A7n<oi(KewW2q6v8)8mbu-WqeNFAP-a2LHs%Dq;Tm?+5VNnHeH9Mv&
z#a8Y4o_XrT9C!qQTv!?LC?9lB%$rW79)~wa$%ctdFtHl@ZEJN8LDz@MZHm3^E9We`
z$~zqkQJC6vXSwx6Crji-MHbd@DXjT;N@Ml4-K`-Jfa~-Nf)09pYBn5^Bgj_(o1JE;
zz9HhSSB2EzY`7NwMTFb8u;oE0F|Am@pP)n&EnOo!*%~WBLjg2uVkxl0&l!@ly<9i>
z-WGKiaph|<ExYPUx{rNU%rI$e833=FnR&<K6fA4xipP=C6zpuiR)U{01(l|fp|kGy
z6Q6{BuI7S5<u#VBveihD`9=cqC~M^7^&$4Gyf#+s_$w3vKWKoael}7uIfzC%3T*KX
zmu^(u*3L~7G*bW~6N4lis$L`VG*jJL_L;ld7>@XSV?Vf)>1<XB@;Z3CDQ;i~v716n
z(qH0WJA;?b)B}|YxK2v2_)o`I>?V8?^grBR(>qvAw;*AUEfv(6=^L1N%bC*A2X^7{
zA~D<iL^&c?oh3j=6TZ7hnZ2!$(%~asU<begUdaguf`-Vtgi06Hdv8M`!@_SP;_030
z4%AfQe*5juOrfTMM)<HEjZlAbEw2Z0kWk6s<}U|-!|ErM0%QNG0XYm@)+J`9C6^~u
zbdit{vp}`w>;BAUaFJmocTVo5#zv81u&k(L!wc575&O3KH9ONh1Wm*d_DJplTulj{
z%9n{$7N})#3Wf2Ul{*}<uqURqAYmsYftTVMvc&L9n%6)QvvrO0BPW9C%5nrGRp09U
z0~TU32^<v4oGz1HV%8TwRsltbb~*Jn>>q=-e@77IL@og<J%u-mnSa+Q{NtYlEZqQR
ziDPQLYs7#QeGdVf$-w+2l^9AiI}t4ZyGd%)5wo`a??Cx?p!}m}>feF#zX+6lf2lSJ
zx8?giUsThyq0kSUZgnY#Zor=mt$09M$)Fm^P<jXx@#_^>u^?hDo`iuk$}^Qa08Iv4
zSrE}EQd-&Fg{YN7S$bjHQ7$kvDuE3xRblJFTl(d;^gy)wZiC}2@TWFz7%=V(7C`Li
zg!&!8<Af}h{GVI}j*4+PU5@ZFfQSUH+4dfmA?cLhi_x|!s<s(7RfuVyb<ctejk=c|
zeVQ6KY8Jat>k@AL>sg=q7X{3MOx%`9lKZaL5%l@<ba+(*e=Y3Kg+kD3i@l3di%^El
zDP48mm<^wKub3K4P@#eMY{zqa-}xE!&IUeS3v0ksGA#S5!_^Tv>zY#Qv&9+^?Xp=N
zsQN#KKmH!;e$FRJSYLs+4?fshE{7$#{wVCq)(WXPl_0SlvQQyk&T$6+Gw>~~z@Sa$
zDnU(){t+!=>%*9v>sglDDK^2ts$+Z`2qiZQlpaIzBGn!f{9mCDpO|HW1wZ|MyUqC?
zhJjhzeZH1g?3?zZ|G3Wlt!#f+SO54dFyetoh-qS8S#UCJjYg3fYTcV}1pC^9R}YK;
zW@ztn3YeIH`8H%JxhK<~d2_x!<c4a({aWvB)8^1w9b?t-89)4pr}!cj-uFaX2~z7G
ze{-L%ko6tk-Ox2#;oW=%KdQ|fK$peVN!(%a+gbO|*_(YLizG&ZyCZOp20|sI#Ns~U
z6J_|~`C9F6!{sqi)gQrl`FirrBcQ^~bWFbD4TQERmg?DBkA5I~#*wkU#c}#k0gKcQ
zw^aM?4CqQBY>nX7|Dbsk4csfHUz{RqoDG*z`w`(4?kr{lXUyMo*&1>g_-re+^Z3ck
zffCq*&9#nptv1w#dyE4v^dhU8nw_SG`C^gf-(%n(|K$5oHGy3mDYavi_O?$wM|J2k
zk_TYF9a#MlXyOYXl8wye6d{CZbj)SG4Q`jucv;8T#mpz!)h@TfwlA9&#RBsr1X<;G
z(?*}&J3HMxGyCWG;TuIoEj^Xc0?615*5J*9_5_h)D;v0-i%5{duv^jeBReLSHWQFd
z5=Fnpb@)QOfy^6Tuc2M#3a@!h1j_#6`_V%};|rE^xcF-(bF)D7uz2WQ67|90V@(4o
zBovDKv|CdSIOUtjFxApPsJXnty!dSJx54!6L@NE~>({+DX~pj4?>uGl`E}?u#w?pC
zBqF+8X4a;9GE5orr#nyGn5ftCn~5z4c;o}Efr{ykb2F2HxXyFdUqnPF(qL`z(pJrv
zj*Y{%N?%d<;}6E?1iuK-cYjyE`{&;ya7Q5Qit9s`eFFO%P$$bIHsP#jD7v%1FkGsP
z-JhViTjq3B?1^tgr8|yEc&!bZWJ*tOeoZATU3N&L|KyJ6NElmNTg~cDT?kiX@w(a#
zZ7j8XGV>YD3fI#9sv}67>VNnkL*$E^o;%#7L*}|px^rgBR_z|;6&lJ+k?aMjc-mXU
zOae#O{-5@)G%Cq_jn7t1li5s`3u;<gS#BeW3zRmMmfF~u2}z+hHO-Ys!wiwhvT{LO
ziZV0HH5VjMaY3cUL^CuuT+tHOa@P`9?*E;S_nv#sJ;VKY{m2InukU|(p69n+kJx<J
z0SIX;r(ZP~d5xzKR;gN-alfR6F1_r$xGo~zJ9Y84`B;s|>~~Z%s>J@$d`c@_#pExA
z#$&FHH6-a+Qo8!JODW@|^jk+X7FhSs#rBW*o|ZR>QzrPG61N>kokd@PIPhR;Jv4Fs
zM8IbByKb<lhgUcol)RK_-&3~fJkuOBq@i}nt3Ah8S^_7ahb9)#JYO=JK{KA*zVWay
z52ss84K?U4b~#9L>n5<Eu~A90hnCOh2Lg;7n!)ppRRcoTQPvUHtL%Zrh{a9rbNXC9
z7_BFc(~kSas;~MN`*mcy+ZLYnWcICsUbXf#&ZFH~oc$34NEj$I&f{goD94%h;D80;
z*#OEbQWo0&3+W+fZGqAKcAVL`8YF-Pfg#@ephtmLld|zr^0VGt0?@>;9QcCtU=@+#
z7S#9)h#L-J&RNy=Z)%uvQe5xKeN<vx;t<OVD=x{I6Xqa<I7*R@%jr|B-BUpyUKH1s
zLuP_zZi~Yb1&RjX1@Pf0JG85x4A!|ntXV-!*YX3M;MY!adKzc$r{L>8S4g0<79@!5
z-)KbFcfPjzrGv^71=&L&3dxkb)X`k*lQeFrE~k#%@36L-TpsU^6%QwLfCC}jUvR^R
zdL%BI-IC=Oe8P9-OJPcq!97ON7iXa|F=)jg7xH&w7|XH;tk!`()-LDyuHWhu9L$l8
z7N74{Y7W-(taJk_2}gm|C?;>KV?L1q3~pbtrYy-tUxG#&WBiyJiag7iGJgZnT_UrW
z^5SFp6Y&f`2eB64ab<RaVvZ{0&19eB*S)oFfnhe6YhyCf?Jr=(6{@%RQGAW0g*dR^
z;a{yTy@#VP=y0adzum_FUJL%GPb5;vz&*1HJOP;3YOddb)HJN=#4~RU)aN{=YHxJO
zwL2<ZBh_r~ShWE6!#zQNSc5uX!i?~17HS6tG}Q&-I8b4f2U73jmiU>q*KO~xY&dvk
z)s{HGkN3)bet{Rx<$vi|vw&b)M%54<C7w5KqAl!+jq5H^YNC<mCPw=_n!xHxWFY=W
z?}9s}rgHGw_=6vID)BD03W#^2lJ)=#r#C@<1<j^w*A@h<Mx>v2QW7A}Sgy+7p;@h&
zWQQSlLL`v!F7LG8sRp=Gpmv(76lagN7m-{$FBb)h#H&#X_wxu%xQxr7z*>mhLzXzs
zPnc<1E=k0a`HT>VSRLbcA{mA=>o!%?$KI7qj++(%+UG2%GYOi5b4>@;aLACndCr~o
z9%3wzk$D9nqN4|1ZEB3ops78GRB1Jc<ykDwD_eZxoWt<9^l7LH9x~_?$p{j0rGR{2
zM}HsHJ1tblbe#Pg#|+ozMRhPD3CI1(SaF2a<Ai+2yRohLnVH(*q*)cCT?|LG;?!Q;
z-m@ln`h=}tv0Hw=rsp1a8Po|@Q09T%UKUtnA+@}%0cd<`6+>^MnrT2a+TiLLqjIN(
z39(^muQI^r84sc<2Uf1CU45TW{@fjDvBtQc9?)ajHD^-Onf?V?4rY=~EieJLFqMR6
zJtZwn3>cdA{|wAN%JMz2;wNCgTW{h`NF>5CCBR7u(5n9Ink>B7?o~A&`i3i$WL8=N
zy%7cIjbujQYkcz&f<Dg0=JbnwzNva3-)Yg8FfyU#E~c8jLn7BcySdf&E$`SW?h8Yu
zuk<kR;7B3@H`Ae^Ar>~K<nnobl<i*r@I9nOHUe8%9jJKIpWX&E%PH=_C1kiAqW*}f
z1pID9wf-!47J%7s^?n3T(wBEb)022j25@NF31kZt1aH;ddQ(j*YyiKay{I$`r<hVQ
z9=~oUMaoqexNEh7+@zB&QZuX^oh=(o+-Yk$!`<e|CXF4sV7ryL!qFN$ix2OppW*Jm
z$F<IO;-M@Ugi|1WXb7E&SPPy>3qnBUNbnQ3Hnz0=7xpW@3^_3?!BB6R`X(A+JiRHm
zR8vg+(l#9?0z9*qJW>b1*YoHJpdUCUCCkTk6?u6FjeVHgH)R9b3U)cLp;iGT3&9m~
z*itT!Z-e7{o`3sRw5t^sA~M<qGYh;sK?d->$5bYW4=7@n2md<Mx{(Fg4xT|i)RK-a
z^A`Ce0~yAP(@xM(FBoQjOC`r)br&-5y?!E{dJpY<uyU32v6(co11KqH<~V-AZ$+`N
zP~3Rg>!zY_#0A<bSL<GQfXQ~6%O_E5^`mXThNH_KFei&fD`q%QicqNtsYe`36`ncg
zNkyQJbx#m-VMX5j7q8=D_!<->Q|!4kV90x*3|j5Rd{%RIk2P?B_mXKBZ-#d92z1%m
z8(2d1>m}FYpe7<G$;YYIT2qiHpay2!naQhe-z%Mr%{=QF{(|k;BA9s{B?bzeH-7v$
zvN7>f*IuQYm6G(JB-m~3DXiMf@pdl7zwG=-+32gHL^7fXcI0;dqc(Hnw~60e7}8}J
zjjggm&o>m?&<445z5ThBZL$cyR+<1(sH^@GtR)(X_{Yl3iZM_OzE1pgV3NB4Vj&-T
zJNJ?C?(<`$Lm;Rv)D&aX8Bm%kraN|wMDEcD8*Mh9{-Bj~$iqdAbOI}$uN--euh`u}
zzUNnYUpQ)|nSCPpVeq4ZtIMTn+{tcTP;y^{Gk~G#v12~qzh6z4!A(Ho23$qa$m>vf
z1j(`a0k7vG;vt$ZK;*o)D;k_r=BG(+m#uy!rB{YU-E?RBcD~p3V6KsdtHj-(Z}W3=
z9;<@1h~|9ELfNYDW2m}TejeeKZB9*q57o0NvE#k!ZEeKTAmBkxE~N~#wKfW_q@KH6
zB?}Th&HJmk;DHqbbaXYU9*<)HAJY#1PNOeGdIKbL@`ox=!&Zx5CsRw^;(&8i6Dha`
zKyJ7YQOYKVY(#DKntxlKvo8Mkp_JuGiq85S;pbXJtm4^V)9_`167c2bbdizfv!e>)
z#$uc8FY9G(HjBUszk3=g{Q=1Yf{TS%KY<<o+<`~%FLR^3j^AdQHcr{-iR9qel0X$m
zPHZ>`(F;2Zdg6=_T`8_U)Mn;Eb#<X{TCZMs$QvC7Yr%2@UlP&+vsdzI&%02$Si8wF
z$6+E`KS9_T)-VZW?Cs}aIPYbc5dFBa1v(&~GLQcZCkyc5s}1Jj`J|xhZ|s;<c4q5<
z#fa-Rj9j@vM;B|hD0*fiUqgN5(G|Nk9qgk^VUh&ChxFSUv&iFXOPS)!psa}A&l$E1
zLNs!9ZpoEfVhpD~hM4iCpPrecavh6?2daFi-^(9>k7>G`YFCtnEB=A9A3zmR6zd!D
z`dH2#BU^qg#LK+qS2I|z@dn*9A6*_aG9<wCLIcFd*9O+kpeE)eqI>IAm#4^o900s3
z(9gHRGTcJpU|x8JWwHR0;Q6d}jx7+{&kgGaw!ltW65R@_h|7A<l7*dqX?P%w*BAZ9
zc4x|hJx}wXBVC)94m=8+OZ!a^T$}3E+Nf#}J|hX)Q}gHdv^!gp4teS&m=yq-f?7!L
zFNEQ(soGX6(;1z`J#o%N-^vNY*Y5XmEwGrF$|RxrXx)Rm<M!PS1_qB~TVVVhC>?NY
z?5&?)2K9i>BJb<uo|?Dt=<g*@ef+&l$80icO)tQXy6e~s99Q_srey=iw6%`;yGC}5
zKRe3A*k+$&?u#ZpU2L)AA9ariHUYobiTQZ}bdU90%^OcNsdM2SUTu+244b9`T_;KX
z%a7+)8kd^JIGfquy;J)8_gq=P5A2@~(>XgG9!y`fK2G?c-RHv6o7BKjhJ=fA6uzo`
zzeB(7jmV)5ace8~E9jqg$V-5C-R^2pmHw^G`PG+84c94@`me${QxYWd<fCZHT92HC
z*SqhVC7wqL!a_pZghKQIsq5VBW_GyKd=`U>p=2XYMB$0}u`T9wif(&nML@?8EH$U)
zYkfn?PK|M<5dv+hPphb?08tgXT}px}W)%I3YDTe2i!69lZ`^k-0C>(6#4vfBt92H!
z%0>s)2cFQ2T*qxpRo%ZqMWY}vs)^T$W?g3$XU!A|K6`u}_trHvrT3NK`)P#d46TYr
zqP4TL^NH{<_sZ#BV@D?^r{>nDM{avG_C^wh-=%F|XmGPbnBuWYhS@O80+%AaZr<6w
z!<&1GiaJHDR}e3r&ft8_gH0S8$T}@vFs8_bR$o4d`TH+V^HM(a_6k>@S-2)!jbytp
zrJhbE2*#)WLi6dYFBwxY)U-lsu2b5xACJ(}%CE9edHGXn^Q8(t9)l@(#vLK&_4aQY
zW+@FFOG_k=BYDm7zH)L$=oB82+R6%c$!qSO;q^60Lw3v1L6qJ&ga%f%`48PcMueIP
zR>kzq&ApXg?|=Q6X-mt(8uD9>b8-S=OF9@`t*r_h!hK`ZQAB=7zx0yeXV1k8S+Gs6
zsVTni?o?E$GFjkQfsw1oLzr?|h^sxPH1jnF3tWuFxwW@aOz#{dE$|;#EuXqbn8w7x
z5O77qhZ<XGB%N9sMH~3IpaLQaCi_2h_VlRUH~3N$xk+iDroOcq2$ebhJ=^&-DROXm
zeLfuCeujO~HP7hlEnk1pnzI@Too95k^~QDr?LT$!|3%N-yX$&EM0{zTIY`t}FwQo!
z*{AH{6ofhL>}-AVBtAIAEw-?bmtMlq>h7V*Rk+OBkanO<+aEM5FUS=nyrPSgoTx#$
zHhy`{1e2wfgBmg{wLi9j8Z!NaU78G7lO~i*D0h3ZPKNJzq64@C*2#Bea9{ZI&@J#C
zD)OQPS$IK?;OdTn?<32y66HWmYphnGC5u8f9q`x`FPvJE#fMV`NOir;gOB}v*3q}$
zS%cnG?``J1Ea`}FP<6h$G#V$%I5HZ9Bf8wR9h1d($rA)uCVzadE=z*uHjtpn)=6rS
zp@06l4y2pHUq40360@oU#jHB+$&#gViic7wZygEo{Qm*+7ozw71LR-suK&#eQU*x(
aZXZ9q+4n14!{r<BXKU?nwD9mhBK`@jn=N1f

literal 53238
zcmZU)19WD=(l#2~nOJYkiEZ1qF`3x5?M!SZ6Wg|J+cs|IeCPlEd)M82?bX=T)mYtK
z)m2Z2$;*nt!(hVz0Rh2FhzlzM0f7R5fPe*{Aii^A#Kt<m17HV5F+rfpN!*j~M4*Yf
zgsF@S5Y=}a3J4q+1qk#X$@dEcj12_-pEwYZBrwkZ#ub4n{!0S_1QcQp1omGV&F}Ev
zBmVt;m;P@EngjfQIp%=;A8JrQ4(R`h0}K2sw#uwG`W-;qifcFk0l}jF`+$McGBCfn
zX_zakJF3e_a~j!L(Ha=r7@E+!TG{?91;p*j`5m<~aWnw9T3K2<aJupk{fC0{JN_@5
zjtKA{5=RRjB6S&gfRK&734n!`nU<c27X|<TaN8T3aw-ao{<rvdiihZzqoXY+9i5Ad
z3#|(it&P1I9Rmjk2OT{l9V6q<Z;GD|Zq|+lu0O3Ei2sMl|KTHS;$UQNZtG}nV-5Jn
z*TB%m$&rVM=wC(u`}|Kk9nDSuZ%x(?|LxXy2kHL(p<|$>r~6;t-$l9q<#Ni|o11*s
z{Et5`1NVO@|37*Et%sZLU*-R=#{5rD|C9UORbCiwy8j(EUKr_Kat$CLejo{90cBU<
za~*Jf9g#&|I~SYuMv2qP<=yGL0Rs$meLEd=9sL@j0raMz0Vji+fsOD#ty*c4@q-(M
zA6-}LY;;#0Waf%g&|lK&E>@SrYz}6Vsl<C2c<G%Qmeo+|U^F1;z!AP8-9-Ax|C8hb
z2L8&74Vmcu-<<y!0R>1ha1CD1|NqyrITYAseTJoI2Lv!5Uz|+(b(32i*z+4SZDE_c
zyR^{##AI2AMr;uLH?wY8!S1OS`pos~o0TaWa$uXfn*TP04vYqL7d)f`;5R!xO|!Gp
zgMyAu!@>eTySz?C*yE><-YQy2uWMyhSKnxjKFf8{8I%qT?41@vE@Q0quLsMYP_{fd
zPIIQE<rcF+;NFS3xqc`pDEb({jeP5@BLD5@G7O0KB9s?3)CZrtw7Hm*Rf4fefiFFD
z^64pdSXgv?*{SAAtQr-vz9g$(=m|xvo4L8U%3z_7dl^`O`O3bbAorF5Oyt`7I?dT4
zhPaUtYzp!hEfaf|`N~~p0Ke23nH7N;{$dAr%Ow8x72W5t9_zU$Sg41QQhEPCpj0-m
z#PcGEGOLEFF6o&=L|a31^_`TBL;e2@f!`MK_YkiL{5>r^1p=vv=ncSAPWwwfcDrck
zRBxkMQK8l58G-Toh(k0$x}Z<%&uRRlxfdH9g@klK#kI>Zf_b%VhaiQ9fx%#Q9*zu5
zxD1{L5?Hcm*fw52DjH^vI5q6D8hO-mH|jN5G^t2~%=oCuh6x><h*+?&*>(awwYb2<
zyv-K4J9smS-zMDwZndLfz3Bb%*Z1VG#QE1U)^$$L2w@zRm{T0h9FP5Dbx25Xer%-a
z9j>-l;IZ{UwAsXcOpWw9>BlvnvUSfnr}(T*xnx=$+CMrsh$ADqv>&rf1r>R!AY1@d
ziW>?_s)QaPh*7&CJm3=vX3PlF3eSM%o1O0WI8haohW5`vkN60c<>qE6alted#@h0m
z>X#-${gl|#QIK`v?9IjPY(Py7vUNkdmCRu05)W7j0v0kp5jf7BanpuNLa7ph@2N^C
zSuNPsqmQnaLcAhlj`K?1Y5a!N#^5C-RCOlD5hk>gT($$8H4WVx{@Bz&IMR56Knk7J
zzs2DF1*MJ?d$ByIy<z3csX(K84{7qCV3=0U#lqqg4~tfm11Q6?8iH$5Qp^DR9>V@#
z!`zR@pp5qWP%>WAIRYr~qPxDJk9`b+zklPbk`i(F*(S9YlqizP;*zWBITezS^as?K
z_l|P3rIxZUO=YS)%+@lN`0kHcRCNNvp!Z13ta48apM)bDQRh2ou^L6r$oQ~W4Y>>S
za)0wp<3Wd(+A1iNDl04R;vBdBjB{JUZ-NJIR5F?)8^Ogygdou>lI2maY<r}tH%ei|
z(eu1XVg%UL#KouUE$;O8HXc}Stztph`sEaY#~)1tMlfTkfc@mF940tkaK`R4_FA#L
zTtrh_;~~eE;nsSOOXNpJrRPMbHp?q2;{1DI#<A8IM;%GcaE88D-Z3SVI)pJ-0~oo#
z=CT|Kxrl`BB^BlH)T1OvQW-)+6ptceXQ4?#KZ)4rsY=9tcR)<yC+Mriik6m^%7y9h
zG$EtyG?+%KagDJtLb87z3^dHW%1VxtFO&JSHwiPd@*ETb!eejG9T5q;u%J-Jg1V%H
z`zpza#^RUFQ9TxBVk(ss`cx9rr+wu*;|D}oj0>h@zUaWCVMKa<&v1P{Z=Z;*ZLH_V
zgp2)reV@tnw!*5<`%BMqbszF}Ypo<84z)|lI|kwvX{kx9cPe-@j32h(!VyzZTODX&
z3Aaj;gam$ifGGOvF#RFC8kVjEUHmX0lHrS6h>^rTN+z0l=ut+__`F4A`zgrRguhYA
zBVK<DGlhm)jV2LQ_B|oPd$m;k0$vfsduEr^{s8Tdgyip{`30qkUtA`wnele2`6arj
zv@0AfvmhRD5JJt&f<8VMr!5p;{9=V=0k?BjbV5v<RpsRgp`o^=RW`Bw6{9!EXEGij
z5Jelay%G?g-pCXJHMwShZs%3FQp`d$xSd}^1qCEXoCa&!-OtVJUTRkG%ky~mxmJ_i
zoy&wEhij`~Vj%B_&peFv`hEfdANRPp?mIR=NR~*ppEhj5we4?SVim>02nH7iBK{ao
zw#b6`6A^|*_p`4T%*JLZif{^V3vSd5WfnM)E`V^by)#-guDkX*p&&0{M5qg-*l1qJ
z&nRI}B=-?jXCha_4LbuRf^k2n@9i0}H0<<+jMSTpwJOQVO3d8F#`2r+uOqq-O8^S6
zNDCJjJ^PU~8XY^^zj{LKZ?k0;A<9~dL^r+P@P3*L3gXTegxhYZz3$Lspd~e=Tr2Lk
zUHQaE&~{3z@WAy5iRMF>Ya;U6vT@%On7ez69>J<5<6jVF`VH7JKxG9|^CX7_8i*{!
zg*!FXo085oI=IBGA>6<pv%7man3DE$Zy{)`kT~OmXxBl*I*<&5z80Tl7@d14Dk>_(
za++INgAfu_UH*}AxN1jn&QKB#tV?0|G5e4o!!gS984?_PCKUxQqhGY00p=hYqg8X(
ztoa!BEn27H!Q5#;XIJvHr_$+Kwt})fShD-Etq3At6@-KWSi=~Q&PCrGDNoT+VY|=Z
zx*kyqC#`h7OA8)G;+bT>>OAirq*uJ2Ms9mTvPU7Wx+qURLV8WC?b^meBw}b?DOKqL
z@rKiF+6}Ee@UB|#78}nl(Q7Xzwl1*VoMQrl0>9^tT~cjlr!K2?fr9&zpuT=ih3-X(
z#`Kzo983i|GzW3+S=_S=D7{h)g5HVX(JBZkhA3XqN)%+)!J2})M{>5vUPH^$LZ17e
zSt^#RTudc_!&Xb1h4%yzaG^#bCk{maI7ckUllVz(oTo!&MR{R;1{|~%MP|#ad9_YJ
z>BPc6(aZsLFAfp7=LsN>a;D$b21;+k#}lu>dLTug-<pcU#3Z_GLf@2*cJz=E;@!BO
zB33wkdkx67y>;l$JEGcp=Ww(0frMDKxo)j!M{vd`-fubj{OjYH9Cj9^Pt{oewmsL_
zeV?k!E_@Vr6MzOP%RJBXbhk!hQTxYzXZG>%D~5?N=WoB(TO)xo!ZMlchD`cmUl=e)
z?DaLki$95HRqCFE?svJW$=GsDe%r<`XbI55k^&g7oDRCSwGpcaa6_vU@5*-%cN^kO
zPthp>$1mxp*+{(*i$@1Za4y(ZI+#tf95J@b+_@xvFHa%nTbu_+9vL)I@3H;h(70j?
z?aL$~XsUoCjw%g|<dDJP_s0^wDGO`-)raj!3~k{YPRgwVvY`9up)>i6I%x{cKLG&@
zJm)iG$ZBT+zUA4Aag&^(pdI*5EILI!?kAA`TaS;)gq_N3x#WfN7`p9brj|>8-P8@K
z?X^ujAF&K4JG)z}t=KnNi4j#pw@8NEc+a4FJSG`}^42UJIv*6>qZMQ=z1d7@Pu@Qo
zU%*~~3ASt|@2r?GZjKYzDDzXPdG=NvzSX7er!amO(~?YopoVy2h9@y0nH87HJ){AT
zq@0;kyIGE~YNhb<R9mD2l6|<`%%k#~=Q@!K$MMT|6K)gTjCRVJ&=9S;<z))eYZeZY
z@&ur;&_OaJlIiS)c44Y*odRHM>!=$#a_mb-e9$RXSwO8U{4jGQK^LUsS6@L{8AN=X
z;Y5r%*6zr|EIOpAm|$61t8PSpJyD+mf=|eddDW&C$t_pAK>G<P4fi_3B)Mo38Vev<
z(-DL$9~l9}YB+}%FzWBP1=lDF<(O|_akdbV<{L(g9Hr)BP9G@i{za(yIQa?|G0HpC
zIm~PDx)ogsbR!cQ6R&?RC4?)%o(yV}oV3)?Fd?4`_h&qkw**v$0%vAuhZe_K>i}&b
zUQa&S!TrZ?>e5H6dg8r8fEB)5%<BW1N`uy4oUZJ|ef9Puq`&a;Oq3y77P<*9JGywt
zak=6{dR=;D%(uLESdrcaohIH&EpDWek#&*lUF4L6FwUGcv+MITe$^Z1{Hcpp6q~<O
zr7uEZ=Om=UlKT5GlMZKpvc3^fr*_qV83}Zp9=I%SlJN|Hk886JV!Cs{z{4k#MM_j4
zVzF|P<@{Cu98`3g6rhvMEF3d)yvxKz-5d1V0)P9F3e$&qFB1_Wbw%;h2eo<|Ak6I#
z2r92E4QiruB?c4n+iwR+PxUGS9!IZ{mUdhXb8Q5%Ig|?y(JflWuMh)&m5`C?VD!`t
zy9k8c9oy#R{B!ZniHtRM!ncXW#(vF#wXD8u8rWx5*D~c^M^IbE+32}>l@2#jACw<u
zWJvUb+FQvo0mjpzKW2+(%b1tU>dx9jY;Z4Rl<}-ZuAs7D=PtbCpGNGC3BnT&Oc;g@
zT$xvm?h_TP{~!XFub7fe;va3%9okr)iiDC(g3rdncFI3C`zl)y9pZo_pblN(S4@L2
z$%)-oX3D)_J5brtlRT60wp`j?guEH1NJ7PkdkG_De3Qpfsm#eIEd0;|w%g2qAk3dv
zj85ycww5u@Rv25YY@*73f=x8c7JbEXHq2-P!f=prb((zpb7!*c(0D{;-m{rAX~GJJ
zd3HKJfpg7qIkr<${AbFSMH@H{n>E{tx_lWJhMKNNFPL;NYd0TIVEUPs$<Qev7E>WS
zFW_kHjTNim;p{fnvVr;p5Edl|8rJ~5RXRM3{GpO$+4HV(VT=a}Jq6IHtK{!8nL7&O
zm}1NC<gifP<;j;tkEti#m`!#@nb*R_$awlC*M~%G2d$6o3;!l&uE7EquErHZB1x2Q
zbl)Z=6SlU?MZj(RV|PhhLjs;VqR@}uGWO-J{fyCaSzV(u1Je=z*OE}!P^iI2u4yXW
z-Jx|0@=3LUQQ)O}-O>+9W#wVjGflN65Vif%)nW|Vlnn!5(WtbX$oaAbaLhUXB<Nps
zjH$Ye?u7#p8!;as@g(?fkP5%os%&sm+FVn4Ji_*&*aWTkNJ!22M+dwkdPdOLWfjVh
zVN9LmRrM$-DH9&wg53Hz2KyhA5);8Z{~Wl3imX#^ksjeD0d_F)4%krucl%hYmDou$
zd+mFaRu<_FxJ@02m$siHV<ugX2&o#xjx<$47-EuvDP3mrhoF&UIxTYvd1g>>gWBK?
z+TJd><k;95x3jFVxqU6QHOO$~7M+e{eB``jvXeTZt%YnCG5^FgHS)0n926-5cnVka
z*lj{SM34l43>v{YSa+y3x85+v%Sj~PGmSbP&ZEH{3DrtzWYP+>476VWhJl?DKY&|J
z8BdOnkhjuoqI=7SKdqn$D{p|38d6`j(lfi<PgzYKVj!QY)jzU*_&5@a1u1Zl?y@+9
zz`Oqb0+R2v><~PO3hw;iAgR{!1zV%Bf}hCHzp$}P<9E3Q2|9H^24^V7(0wcR=~|IE
z2^4JEXY-wth+(I4*Dq_UWO`X!d{n<Spv;VGw9gM8#6TJH)rsfz_gPYIPVv*Sw0fR^
z0Jbsp`V(%o^h=*^<rSlt4dd%=0m<`9%?3?fw+FmbL_rN`U{AOO^@jtJ_HrRRWL{Nz
zK*2GnK#DDCT0Do&g>at-tCtvcDpwvtfBHCMN2`P_uId&ca`&m1hzaOpdKgem+CJIh
zNs!t3GDB=2Tp)rMPiN}E?X=L-h(CDOXlUG?2~Po3(OMmRKsSAI(jwu7Fm#Y`c_~()
zicsO987A5m=M4^k*6HE>(TJ3UQE{jN{rG$-022XpM+)!L)H48Oo<I?&gm*#t><Ke~
z8=WqVT1=Kpw+PP-b90NvrsJd2^YO$((4{aS<UUS?8sm5JA3eJUX-qy{Nhzs=8y_CX
zL!(N#am>r!-X>+MB?X1JUu}R?rZ@5qw^uB)u@r{<c@1F&g_`&0y{X%+CA}H5z8ZpY
zMtT;znq1A0M&%5q#iaiC(47zdey;KROOJEvw~Hn=62er>0K;h?3*(K}hub^3y8XK;
zzIhC>m{by}WNY6YJF#*2`E1RZ>dy}n%+s*H#w1$Zv55<#*9ISsF{vw+x7i+>L9=`v
zU2wR|dR@8xy+j&yWMb&F>LgoV&6v8my-6obCggU~yBvhP*yDeg8u5MJ34%NT4^mf<
zWaO$CHdN(h1<fVGHxpx1f0pz-uoTC+CB$)kA06hYH;hUoJh|{!x=M60Q1K9G_Uf$@
zX%4K1Rbv9OH0)$g5_lE!h(G`fp>f9aW|yB~qItzMk~uKdB?>V?V2tOEUR=MfG3k+U
zrVWTm$ykM{q#{(DScTq@Rp!zjxR!3llL))Q<msz9ERuI*%lf;|R87qNNQ(Gx(cmD-
z^(#0a2M0uU-yCoort|UlaM;d^&J$_F`bUl#QuUn$NitcDtO#<F(`UVC2V?Dy*pD^P
z6QX%EzYS761b+B^zOflFdx-trsEQy5&AH1ouwTu!`JlyT;t<9H<_Vsy*o_cz%lnA1
zRP`7uE5HNtUT5v_)TD@eEPaMcyK?5{sTezd%Ya;Y&;AfF>x%L9#4_718Ony5j;oLX
zf&Pry8-h#ZaPUsv9`?KK@0&AOf3}-#k|PL<ELdK{DlW|uaEixvt@<5E$i3Bv>UOwt
zba2^b{b!yxz_E5jq{XK7MU~^@o-cqOIF!~?W+ermT&dET=j%Pf{wTA_z@Znq_V<LS
zrMrkkc$j$%9$|M_TzQ!`%lJk$3@Z!W=;zy2xirz*@#h;sGKQ|ZRBFsf+ZFlJ*B;dh
zXq(EA-!?Ri{iB6Gj;?J_%k8EI!KfZxi+mVfk%XYJ8n}1NxB4%YT@Qu?BrhiLy|K8%
zF8rh_KTWL3gO4x}c2?zBQ7b)M3|*L;y@kJ>5z8K?cP&_pyhZbe>Nvl(AVnmgCIu(Y
z_H51Y;f20nc>Rb4GRs-}wfnJtM>oRbG6h7;F1dJQm%z(6&xYUsN#uILAyL`&iLGM`
zFlYb@ykHoTPS~G^^Yqw+g)<Ip2IU?K>-e;d<-Wb{0Gu2CNDqR=IP=iJ+N<6g^>o|r
z5j&{vE82a7NlKzt8+*afC0i-S7!^X~BlF>XFn$6VVi>~x8N>Zb*YeSr-h*V4J8yn_
z@TY2&;IsNqesmbu_x@O-?bG-3cF;#Jx#Nk~S7nW{nRiz+5{+7oRv^<l8C8~DwYIi)
z{(x~U+3T6kEQ8i8(=9l|>+;|_o=q-Tu(sB4K@_QRIc3&}B|`{aZ8pTXkn*nPhyWqc
zN86)NI)z@BjT9cPK+E38D+HD_DJhBZY)S8+^~@$g<jyC4r*CMaHt9w81f|OrsS;<g
zDz<L2lfSa{lu;#N59sA)DEpKxE&<fs)vJd4{W_n~WV9zfD~nb@{w9wT4|L&cxOpP&
zq1<r)iVf(4M0+$>Q&<8@rL81c1kv~Fc}T{7-EK%+bdVqE0hub-G1PDsZf3FwZAkTk
zoNddogGRSjSeEmq>en2QO75QMU#@UygU$Mzm6RrQpK|%)#@K{9*|pL2T-3yOc&Txd
z5V5ZuWAQ9O6_!}q{i%*m7>=8QJ;2}MHQkbo+>XxYU20G2qv2({1d|7BF{)uO4g@4r
zPJE3n>mcs0-m%)PPLFa1Pi5sFDKBXD{R~IqQeK^_XonRVR4r#65sJ#%yDHYv5kv>I
zzjko1LV48;kiC@gVx@<pd)LUNJk0-D2+hFU;Xr%cvC@+7hz8L*`d%goTCY4se=7dk
zGwil!M?lSHaB<!aH<hp}l-{(mS+Qyglk5)(F(Qa!v8b_^jB8L5O{RvRmM{K%kwzk#
z;nc4qleNNgLMRheQBfH?((@!A7*GL(=7jr(Glh{!b2875<E9ji53ww1(_!d&0+X$H
z<Ee6>P*;S7LF-Pv87Z1>|4!22xr$+~Wn^mKZE%@svLWcegLngH6tg<8p=<0gL(=Cf
znrvQiA*7~Of<VC4$3J^1N=9k9pQYY!^?BD()VWNP0YmXgEULMn6-Xy1B^}NFbR{bI
zmAXo|>Yn0ebc9R!cdgnR>$CkXB3M$=6hepQO~770aKWn?2)wS}{XDXJ0OnF>_V~6y
z2qPPdwjC7(1;8NQOVrI~{{@OT#$lEXy$~y2WmuE3e&MxToy+)fcy`k<ILcSqhOHPp
zQ%lt*pM4XwzfXe2V$WWA(gN9Eg(CCIf}Xh3&xA3MUhPXP3cK_XaneHun+FV&!Ppos
zF;@uU?uVVf34BTn*X4V$w&x7^>qM<5u38G;nA}Lenx1#X5YN-P&K9x2@PduxbY=Uk
zq6xnypvRJq9v?I{#%1e+KNWpW&26gy4Hflg2ri>Y=leSz$J2Y)sLPf&l}3Q*NN~I2
zhTmFZ#JHM!m#apzZR7jHEcJmVJ%QIO?w>X3DKM1CdSC+|-regy-w}%b4guY_sfccG
z8g!1FL$sX|BRgDU?cl^jV{xwFG~@c{_7rZnjP<uEE_wtxd%inv1}90Uq(ba?J=)bA
zqrB*9w#d9621)JTbNIHHFSBG8F!eOSaRW0L&MT^b)Ro&R-~C|+GJ{A(E!hni6eqpN
zkng&{%jm?SAzcP@UVjd|mS;!y>Sge+s;EGDbebe4lRvfFeEG9&pYTYkV{AXcRnizO
zQGfOJxR!0au?j-(RSyoAB**)KJN_aO&ro2M!MPX7C&XeCu+FfDp33Y-m&!z^l`6an
z2QMzCT=d?!c9}T$=^3uJvE^|EN>5->0|lhgZE|K3)A9J{W^eGgeXtfI;3bC%wr{)U
zJPi8AelYbYPmklxzZx;^B^a|h+Qj7G_T|r(l!)73M!r_H;m44Sftr7gmSsPv`Y3fS
z`h-g|8T%j~Q|X<SBlwO(9yNXLEsw*MX!dw0fWbggnv&c{f_5mHQYE|HKxhC7q%zY9
zgO4nN9PbUqr1W2D^Gr07%0(4^t1>LAA74ErxcID?jYRNeyZpp+-d?CCw925?EhfR*
zUJnP>y&=?gpUQqG0NYsu4UI~&=KwSP7wKzumZo*F&N1jeH|hMgjJAx|#ue*v7ZPt!
zzlKQq&h;mg+#q(vA3{{hmxj^QbOVykPpo$rnFs?|)FL=;vTWb&>^Gd)1hAc`oy!S|
zSV4nR?>%kAvY*bD)O3A5WW+g7tIbWAplp{3Xw+$@xIgGLppt$B`(gF*OAGfLH%Uje
zxHzV!bb`8QeOcS?OqkK^L0)xG%kh0=WOzO5*_w^<x38#L5-?&MWqKrg-c3BoySQVN
zu?yiz5bEwpGLw>8L-aQzSegCE`>|Bdr*?OSbGiZ6V362+LJT^D^nFI)qrhW-jy2kE
zznkoB=%c9iETX#~>O>?Kix$piSB1OlVSb)SV^77xVtkm+KWIzkyPH7|Ai<Id=5RO?
zaI(nA^7y3x36Zclof~k_^L7;<hRP@MWu;7xiCe7BTNV$03~Bg-6{u;`Jw)4XU`zRD
zsCt@X^RS>H2Lvp`j5?tifOWlZH>>R`Rzym5BtD2wV8NDTUSUkdJ`{K;ihxc0z{QAl
zn1(t)2CWx%>Pst?t>f3xP-5520m8<E2FR5v{S$O7<Igys%{Si+=T*wrMsrYI`Hc{(
z9%c$;!o6Jy`a52pz=dgQNv?}3=+8ld<R;`Y?~l2?Zr^==LA!Qs`<a(;(83rvWABk4
zsofk$es5RK%ux4Z+o;JisSd}f)%Eq-*6nt!+;`)sC0ah>l(qY3RlLa&v@P1YU`2`j
zwK4K&rzqljKF@Z^o^KCBjHc(tC3Sy$*s?0dhjK#*h%vNX@mEvvCo?|Zw%9gjT_E6a
z%dQ+M3p}3Y<oE{6<$eTNO}WLJFc|a(+TAV_BessM2A3wVcD1y(bC=xckY05?6_J=l
zB{ZBhv#AW-<w&gI{{%tz%L?L;G3ICAHr&jeBf#Tyn?UWj%DA1Rh1EnrNAk-%+}_sz
zI4j}L$Z4T=HS^;VNoOZv#uRVA4@!e|>MoY+lBsNYq|!k?D&S8-W+W(AGZSjiZ=}&_
z{Q=4eT?~Z<BIuWQ{iCA9Ay$n>$J|~d8D9p|`}u~v<eohqrK~h|_;2Z7m839(lx|FQ
zbS3-_zbC6@R<Q9=3TQ^z`S}RG&*uD&l$dXQWu$4#lbTw!BJgyaASd1-6a_svl=G&4
zFA>;43#Zp{O>%CdDZ`muK;mRo0^rXLdO>cw&a2~e!S`|Q&|>l$^_tRetii#(lhdjD
zF?@G`=XhB{z!}E$Rh;bxb1Gci>Od?+Z?oz7;(RDg=^wsmpdNMPA_S7~Al?1@9Q-J|
z5Dp5y+B{}3XDeZd$|e0w{;18#Y}=u?*vc-`W{e5uh5;7ly|Z}B5&j%yw}FO+oU}9m
zLg661e~paeaXH@@v(pKptox^Svp5Eqx;2EPF?l2bb+*@SrS98jHS5*;l^4cc4>g|&
zl6NK#&Lc53^WTrh4K*yXT`_HO0PpQFs=QY#KbiEpP_n*BI{WOm5h{kbI1?&tbAU5B
z)kRWL^5AdNreENb)G}^j$<E`9n4FSIu{hELZvO1tn}16xp%MZw(w0zl*-|xpI|vZ-
z7SffNh{zZs-~0Z6=l<cr*m&v|a70k}1L+^_{mtij{V@pREaqrh8XDBDX=x7pNZf#z
zNh&I;gO4Y^#4Dd?0anXl&>CG}&<EgHUQ&Phn2>stTFJU*c2xXeySm<+*CjW^X`0rr
z0Acu=$v^pkox|v(Oz>!U%dbfgtVk$Hf23hB8lALqloG^E51}kq!`k<cG-{_T1FoXN
zqG6$BVdwScm>$pZ!J>veV<+dzPN@@AQjDUGqX{j55BCWeeVW&du3y>YK&UZipN^uC
zS4}3tBLfp+<DI(AfI(#eJT&ML&5~K^(&K*|Y&`$$=fXREp2L(gspy%+SLqhA$%(;p
zwi^NHv1G!(2DcDWq3ZREXlTOfevc57(@J7visz)L@OAhR$QE_hbM4uIN6-?r2#ziA
zkjtM=Q-QvbkHwST8Sn0URin5^GZL5v^l4gd-uJ@Nm2xJJ^xZvwYq!I>A^84U5DXYZ
z6ksApBb2GP?+$V&*+(ASJ`W2^0?X`hp+`)N!mO5DAhIz65jpU~^;v!k{3vN~mQzQ1
zuE=Go7_CgrU!OjseKFj$7&@+<vh|*^AcFe*hwK_nWMc8#ej(%glYn!XEt8d(qjYj;
zkWU4fVCq})uM?7=Z+kI31yn{8KfO=&d!Be)OkA#^7ra87G&(lb<tY$(pF>yOQYx-m
zj%3{sg^%iq5nX(`J|ORxh7yY~!ys)evu%2gJQTGvXW{rev9LfNb~9ZzmDVCDm5N8o
ztGJ8d0AZgUU)3Rx1dKi|8xL}+-?F{ssWW7Ml$v(oi9(}r)y%`ssu^Q7tb9%OIsme?
z#r{C$D>hZWhSA{le(eAoDNkGH2y@Wxq8s#aZU`JFV&24xMSJG;jbps`KD`Pw|HlQH
zXlbj%VJe2c$p>*l0sfZvnG+`Al)M&pr9aa-t6O}={m`7j^=BR@ka~hr=zBW@<44Fr
zw*58m<yDA@$Ja;9e32-s!$*eqtNFM5g42_ZgJp2UN>Aueo$T7K`Yko2CO)mWYd6ur
zHr$n6FyH!f-2QxS&00J~n(LGvvyV+&TpeYzeBf;ocN^KfEu(gGa5GpM@d#%3kly?_
zszh1s5ZAC8+ABnn<k6fM+=#QM`huE*D#X!=!qVUqVWBkFp2nHd1ti0SU*|OQtE2d-
z1buy7o#sk#;`e^&jwXV)mU4OPdAP+x5-{j%NrCZv39$P_3vBgXl@+aVhv!;~i2-+2
z&cWd)tpKN*eW!`O_TmP_w`U>eiEx@23#n3@bB`TDCsKGYMFr9TPMW0^b;ndg1+Lo*
zvP{1DcwkqY`0}d6E-ZmS1!0?6UDxA6Mx)I+Q?_}YU@JDA?(MvzI6NJ`Mo3N+k>{2U
zGbM!b=5R$O1)V(p^i=cZ(qr7#JM0vLk2cxbS&HQ}a?LuizFs+#M!Y#*y%6~2<7wmP
z4fKb=a}P1RYH4#gnx6yXPiDhQ3i&$!gP4#f^oP5cQ21ti*7~mZ`#Bd~qMPX1XP(U?
z;X##4{dzI5M`L{-qc=wre<9{5x!#<{Nri@05Mnhw7Au4S=qN=Mou6#ld^-4U``)h1
zIB=%un+w}D6*)QTv>#_8l1Mmf$d#B^ZBHa_<`bS3WRElLzW^ONpa~8OAtxx1`D6yK
zjvg;Hy6?n<!f3G}`0Z+<LS0|qqCcsgS3{GIcWcE@INabq<!ROF>|kGMGCteqUGaje
znGZ^*nO1`v66`%c*8hA@*PzI_R?cVHw?dm5l{{*5QsfE~)^M`x+pkM?*At2Hb41nX
zwZ9+iB7ynT)b-+lE%9aB&G`|Vbb6RRRssg@*fsP?oAB#!?P?#0U0fd%tj~iJbvui6
zu6PSTY|v!idoy&*^jY8!&HMPQw4d3eE5a3{BIrG`+hR|B4m2nv*xT*hYj-NUTpjz8
z!fq~CGWp{~eaKy;`)vOHWNB<(2qBqg=ON0k{B<sxTNx|1x*Ca8noDr_Bmv>B|IzDl
z1!G^kWSkIfx%gf!Ox{2s+B&#6Y;S1esosa{&HWmSR4S|A<8u(igqM*iMAA5MuOVWK
zMdd2Pc}Hs*hqMamH@}UPvNT`Pa>|isD-S4N>NdcKk|u9dBc=Ug@ynRF-4@x%`cX|u
zCqEi=lIux&`&68n{fPTx9M)EKrXT{(m{S^nU|e6e<GFoS)ird1xdMe4={O)g*jO6Y
z?^S~9az11Iz)kGL_j?uj^v8}(to??^R)GCJa)?E3e~cZz=dnWS%LF+UUV0b3SRO+R
z8k!nFHn#nJ)S}k$#U2pC0AfN%SMK{UDcpd^;LPiIe7z1!m%F7Hl}hX5H3~l%cJ=Xk
z22zj;5YbQhwe&0CpP~8<>DbkI72Js-K?V=1I$RX)@mcJK>X6!H`y?e0h{GW=TNskd
z+HIl_NLX95QG%CloyIODox?GeStjGcsi5f(7$(5`ZKC+~s9<bikSa8-kHI!89J;qf
z3N3JmU)%a8ShtzGwr8Lu->|slxYp0&Oz&iO>zy{!`1dIvUA4o2K#-@~Z5Wav^G_!y
zda|Mn%U=}Z5)BZF$hu!X2qf>Np8`TtwX;rZa3b2hK#)>flSijR{pqOGYjx;UHf&p-
zZHxrOHRQd)+V%@j2Med1b$Q%~)=AX;^Z@M|Sw99AP&Ec~zU`1ISC82TX=*6y3=@;2
zw5hxxsco2NKHCoLeCjI6XZ}?TJiMRvA~~aS(r`R3b_6&f=0+dl{MxoX9M2GJLg5Zs
zt;n0|>ZSejk2F>2wFv}r?G6ri+eo{(CcMY5PAu)MGvMYTA}o&^;t2y|_SKm37pDBZ
zxttsnbyfRSdIiD?<SUj-V!=5ck1ZI?8_Ug(l)jf9I$j;RIK4DnTw>NO7rZW;@4*sK
zZJ?|9`TT;3%bs5!a-*L8<o5xNq`FaKBlC+T>DF;y`f&%<LdC5rMkUUzLzfAOz+s_q
zO2Hv+xIiPJM}{+Wb>2Z2YsA-|4ORPx=zd|Oef!6^kdPeXeM1C3MOj<Y3?a>t*XG&X
zGB?dj5*|ICe4dYkI5yOG435XYoJh5_6~nH^dVB*bpbs;=rtXz^^R1xXN}$i@n$|gm
zjt@qmXR2e4%VBvISe*1Hk56DA=0>1PZ1SwHe^)b`TV4^5NsTxODu%y5_dPwojZ#OH
zhDZmv?_|%2PFhWJJgs}Rsbx6Ry`$D3p^-N%8x5@B1idhi`ubtjT3;}>yk4;lkJ0hu
zQ>oV*>^(c2Qu=^&rZ1>x&cZ6WNQzyi*ul=<JF6|Ui?gHXmk6zfNq8NM(ecjnP1!%c
ze5e!_1_OV4%79d=eB4FNpEB@?_qH$pz?yfWBs%L=v;EWW@k97y4EV)g?L+RmfAP6F
zIhBtGvz73}wYE=DCdNNwAFG-Ozl?3XiH?~Q;~n+`MkPqWK3(;6G>NmT%oDF&pIL@F
z@JOKrW*iGCka4u^l=xevCPt-0dXCh}&PI>OV(E=?Hfh-AW?>p8TvFihOmoVxMLPia
z%_Ar-FDC5A-JtW=GZp+ZtlR4jbc<#gU{p0-0!XSu!@oJc?&EaR>!PFk$5XjeeAd?R
zMb3^Fwl=(W`7wq?f(F!Y@ccX2$;wA@NTnnzntzX*lJXu7uW=U_M3*_9vF#hG+-n{4
z^+hogxI$o5kB`wO&~@CGaX)wSl-bv!RLY!mCikO3OP~zGIhI<2g!$yd>`Q+hjy&?j
z1O21|Momnk<n#Q(`|La?2>@$3J#{#UEmg|#ZU{jsqai=z*Kx$o{(L>tcDr054}4Sn
zv9q?gQNkr*=fTV9I;Vx!A^GwAaYQS$ifakLtc=G>PHJ<;K&w<?%Omq?G%pzQjwqkt
zBF5ZJYrRKY_d!%`663F}fzdGPQ@R&}*d4ouKMz_wqESAymU&dv-<)lntzuaHVo0gb
zs8fAhF{2X>R~C)O0U7M>pdA8@7Q2ByxqVE}9@TNN3|uOuk%`<(tr5r(wx-n%xboTF
zu}0K=*A0D8lIzO3@p(5mL=PI?*k0GHwykNEK?qtRhA0~iyN_$&a4SK@bgSfVKuv+{
z%iy@1cTlkpufq`2_2#hT5}fbOm@*f(_P3MdM+}y3*gWX49GOKMbyQpxS;&G~meux{
zP+@eN6?Q|5;Gyff$DJRjK7toiyygFfzQOr-AS(vgySCg7xkwUe6I@Lb915KXgM_-Z
zP96-SA|n^Yw<(wKVoR%s@~d2c#o-fxow&tMl4ng#Wc2X_DQAx5BSa2uOw~a|C02Da
zbAzx<<Jh#zZU{Me@A~(d_&6K_9*GCdxTY_OEvBI~AQ4^PJ7oYyeNm_hIge5!j6KD#
zI8R}@tyyL*{yOn*ohJbecqNSok=3%lY1qc(gY55qr6LB@emh9q2|##)fe9TmH1p}J
zD*HZNISMh&xgnh<n<g+Z=jefUypcZX#af{SWPviuuk`{rT4`N|{XogtOv|dOx<!4W
zrio=2J;m$YArNNaRFalkn)4<VV6Q0wkg7(?xJBtwf9GAu3{Z^e1DL&5j81>JW0h6d
zJ4QE6?H?%tCLX?q5NoQ25IO>C<N19ndn7MAV<p#tdYJ^nh*3POs0%_Xa^dMDPnQpk
z;k;iC)aU^=2E9(sF*b+-Li)3B(?PLt1>JwGb-gK55Y39+JB8K&LdI!c#;(~P-4*+{
z?SFrGwtj%T{lMD6KKIT@oJGu9jwfu%=^=+gFz)jl`JtANn4GB61AnUX>N44aF#^w~
zU7i)SoUNg@8l2%VnL6rgi?&Yi<f7cdCFJ`i`hIp3VmyBwCU2%$H4d5T+Q@f<5Htan
zh@1pqI<f6zZB;bY=enBSmdqNbgx-mf*M&&#VXL;WwMjtav)_HT_CCegdP;Mf7fQQ5
zHu{<s%O8SE5Q$jy(}!0Zj7zaKYMtNzB@W8gEz>OIo9+k)YNc9f9wQi*0!@Njj9Z_5
z-ZXW&8Z&|UE359Rv7R{q$SLyAgjZS0W#bTi>cgEHmB5|XRR7+a_CeQM7UaFEre-*e
zdcEpKpJMz8W(K*Rt2Z2&Yk1|dQiCK3{uUyJE4Jf9hT=XQua92mi#u85Zp<S0N|goz
zr|+^&mzRO9Pn_q|#?x(=3t#M2*BeSYa-|68&N7BkV%dnQ@?t5Mp;3M=_$n~pJDG+}
zG^EHteep7lL|F8E>xv1gL9LT5wQnm5UQVEdoq3d0uYn=`PqWDxyZ)m95+T_UP7Juq
z_B~Z68LwCKVju!DgC23-WyEHU1CFB)8C0@8$*Esimrbe6dvm%`ZKZc<(f}dq6sRfv
zRW7<FIOlL<W`LEU0FS>}3y<}h(!UeHAHwN;Oe6#*W<bo4Cjq<|Z9D585yp!eKSk`W
z{dw-wO}>_Yia77Ki|rcuqD|ZWwoIRp58U{r->g};<8OZf%s`9{@KYnT9oOp$asoz~
z;QVOb87qDXr)16Z3~mC>TDWzAMzDnNE11~3BGDSY4Ss!8GTBOJCfk8@T^-Ev(F$G1
zogr7iuA~V&2~}2)BdqMMc1OM)LqLA<)_G0%siuNc2S3p!*d}9twu8;kgFT9JVsEUi
zdNl=P`PJ~)LXRsHL;wmFKHP{vC>(AzPG}c}+iU3%DY;ok`|T~$?^x?m9?NB<`=f;Y
z4wo-jr{uWb=c_7C0tthS_+c1N2+vCiQ@>E=C1N6T3PwP=RN-$hhmBMDb3;6Q5Y;v&
z>Mrru6fcft8r$mfGP1jn%dc!Kgi!*>T#E$cRIb`T(w@Od{55i9G{4<wD3a=;F<C$x
z@7m{z_(k8qz@UW(-`@2{PJ3yi<B$%2IHq1sc|rR{4Kvq)i(~(fbU2KmW}x>6;J)r0
zSjH^0K^~!;+n1`kBmL}zKgP2pu6u$nMxM?JF>-JrY{g<&3wS6A5WR&~<@LQq0bXtG
zdFWGy`}<wmw0eD$(ZMhE7>2yYdBfZeKFFUl2b^p%@3-Yu3s%?uFLnBKOejWn^z)0O
zBoOg`qDfdUK`cX1%_i+Q^Rd3X+DzA2I!Ns|fr%$3;kcnGv)}m7R2Uhd766|wRv}_V
z0^x3DWm=bATfD2ZrpQ6k=T=Qyq<2T&#gEDyXW=(i9B=Awq{G|{uHdcC@Xj#?R^Sie
z_@Qp`TX;iI=;^uC2hN78djBRH8=(4Nc9oWv1$N#y&J>iS>g;A{uT?aT2)7V{dO?0}
z*R{as`G)hdwwCK`?-IBpK_flp9?^v5W+HCjNZ$f#vSJ*#%-e))BRm|&wJh~$9wngV
z$asjEqZ_B|`Vx3E%*v<9AIN+P{m*{52lq5Qc^DD)?4poZ#uMjzpTnS0n_V_21S8fZ
z#3qrA8D9w5ANSC?&GV7Xo^|tt&gQIi$jup-WwbXHW#iDY!+zlq|7looKP;Fq0ig3F
z%>r!dEZCaY_lu{9gY5uBzpN)n+qPG}i=!ffcmN)scVu$hqs(6<Bchc|^ka@;q}$0(
zoXylb9LKGb{Wliy%{-ZL(Cqx8voZ?k`^v>sII5^UuK+Aq*Dl;WU?F?O#5Qa9{0Kf0
ze5_#_2Rc}~;Bj*JM_^R;!FdCQz#j3SynJG(cLuvw2V(-lyB;J^N=f_pJ?xBrGcy?l
z#4A0xpJk^_h1fryUUKR!*eubx+?x3K8|*<kO<bw_xk%PI7UNqk*XTsj${h9)JuV34
zcphlhFAsm~M266>@=h0#u&}87L#kW1J(#BQ`4Bp%Wz&|c{Zzo{_;~FXFr2O*@Q+2e
zh5T?e+~WvwH9K<m2i;3|Jv_#1x(K&x5qf`J{}$V$^N`uzuPs`I6Zb+%iOL@LbAL%K
zYma|(C#ERKI65$oEa(3_IeC0Td{B^jhk?n!P=(sXM(**U`t3_%46_^&#c@eE=+gWe
zh7e_Gj#WX6#mMCg{mSi>uX0Dh2NqORq7CScQY3tjGUU^1YR%fw8cHwf3x`};EyIA)
zNx{lrz`>)JY6yH@MJ`*8c$2(ik?v<d%upLaDZ?~R2amdmu@|_1jm!29YeCE=v#pIG
z>EPGvXa(XsAFeEMM~L<&+D=>NbarBiZs6#5XOYD4-DKEKp@<b{m#+ZNVwCU0Ra8~3
zJ0Cbqvw6QEswqWDrXT*z7w3X61z*?nu5f_7dTk$7G0VqSf)|{ip=F=plnpT1A8oa{
z_UxMvp%Po04H<t!2s=uxWoneysVr&6HSCtAdnglKmX-eq>zN-C5-;xeFfbrgZcXNw
zM6ZZO@jTmco8ayL9H^<RXxF|ddCq{?s;@bwNVy6@^(FRtyp->^Jt*_U!&uQy<W>3`
z+XFYCO+i8VcX0wyYDeef+lvwmS<I*Z^@nNUWhh4=VE#JoN}eU+pum0c8)IwIA8PQM
z+<u&44v8E}w=b_SqtaDJk+5@43-k?D<+_$Jet$`WZ#ai=?_jDptKu#~fx&dm!DtYR
z$vQc8>jOs4Zp@&aSDqDJwM0@=%t+K`pg(!-pS!FR$~E?7jcvzDCTdQGhZ#YV@ZlOx
zI~Sd%e!ic>rK4DCDurjKJ%858vFq=6qyd>&UEN=-VUF$e4pG-BBs|YzXkjQeDQeX}
zApk!eDq-37zej7T{$JT<BtJ@{<3RGy^vouDx1QGEgt<HPbN_N`DVX9kwQ@hOW4WQq
zt!2E>y2m+@`Yplbk&;0K*F>O~MfsW8HMjl+#``0^F<HUT1u9vO*_d{vN_5S|yj4JU
z{CVRY7s#@qH75ZsWI70hRFy?j>f-6b$Zqgz6#<ncw>l|<g&SOU;jK0`{x%BqOmBRi
zotrD5sF^`L)N??qbCuT36QNq6{`XHJ4TC(Vly+o)#AZv8G>3S$(-%34?)Sb84T2lz
z*z0TA>x}{z?8mT|YvygROhQjHZl^Y$Y}UaI%An8Va5q*U_nSr;`mMX<6Ox{Y51<Lg
zy7!ij>pAVW>}ykzo@$+&+x7Sa;CMYI&ZT<N<2cw)=uVW5r&^YAB)@JmXc^&u`SF))
z#FEtdNy*x;)x^^hjHET%ac?K&GCqzt#G;EilA4Ls+w1K<?%M?|`1A!0n!F=Fwr_~F
zHt^3R_`N)l|G_<XY=dqvJ$x;b{br{5Am@6Z1Nz9>@U){_xOj2ha{;;_H%B3VXI~Jq
zneg}K(C9#YGMPHoNBAlQ)3tR>PQzCr&J1BDp*NUp?b)6(B$nJpU7Altr-&RgU8nf2
z{)C|pdUXDt`rfP=3JBg$(?l`(9s}&mB3Hp|{Vyc>cHc;djx~y_OBBPx|8^`dsNDbk
z(J{oWT5+wT_&X5)B>B49_q^!^hwZlp))bQNyS0lfU{%L_BwDJ^o~fSyVm#w+Rebol
zISLa3Ay#|PkN_-N3C>YOI-O|1yu2T4sA)@8cft|JJB3cI%P5bS1o4W%wwt$g)+&D2
zde5fwhSAa!qFX3EKfJ+u1EL|7K7z~(aB&Me=39R6ZfT2AB)X+#lo$#-#E#NjKPO)$
z$7_^BDWn!7o8YuLLcvjF9Jsl1{OGcLZTI>?tHr5j#dF#6hLFnm0JRZw0H7z<NX1I|
zMS*OtP<n(MLO^Af<;0so!wv0`CQ)ne)LB;VluWJir)2jBuolUo+*Rlxw1nE(qB*zA
z)(-A$hqv&!e@zO1sjc@WRSROe7QXxN50|b&wN4Ore$2$AlgoS$eY!ttx?VCm_p*U9
zlkY(m3+VlKTsKrzl<|n-Ma!8#H(d*j=)Uh9`sqgeJJeHbhYo&kdX9D4ZDu(cJP@dC
zmvMv)0VoPZcaexo^P}y(s$sKU{H{$=z#8(Az!=h!c$;%BnL}LfYC}q9jY@`N2`f20
z?4UfRb|{y&^3F-KkrSKL`^)|?y2%jmqyBG#W>UIBIm|+@aY=FEI%Z~Ln{U!_b8=iN
z<n~6(BgRe1#nflAh!v<u5f^dEHlmz}J0VE7Q*{$wdzU2^*aQv(Nu38v))b4D(prwB
za*KX9O`_ihm%mv*LgL|3z%ol;t2;{c_$YWq?U$-zVQJfc^t)8FVH@+`RzpI9&e@;S
zug7={gq=J&LKw`;tJ^lkaZbwMHn91HM2`EFGFmLg&<A^KlF6<sM1Y*TbrD`W#gGj1
z4+hvVvJ!R1N4i~a4o)}eVJp|<<ON-?{Mi~k_@kGHQ*@hFzN@Bd&&Zv>L5N!W7^`h5
zDDJ;Tj8nz^f}n!QQIupPhi-<nT~WOUGKA$_PC3GG+$K|PVb_28tu!SPj*MfMD)P9O
zyuH^UKExEhJauKq&Cw5HL!#B&?D|hROey}}FPU&#n9GNmd~U>&rOlgP`1$0H5*B0>
z%uD5G(#5#fI%J{6vk`eUcF!YPL}jh~u3t*4)gW_XM^~P~GFFYauwuWsV)hGL6z%yR
zYD?gAr1rN{BO~E^;|TjV6rhIj>uPC??<&==vomBowM+D3fO~A9*3GbwVd<{LK%cE)
zTFZFtx##IWcT~Ogpzbjt0;|70&l1es&IQ8L%K;u<?5`cT_2TOWDM<vkTKlCf+9p;Z
z+=0N*8QJI6AAGUqZNP7}E%4nI2DlPl26b<>?xHZ_N_xkRa^ihD$(h19PO&Yw1H@{o
zXE|b3h)4nMi^_fUn<gc4T}!%cBU(0{Wmm#tK~#i)lCeo6FeZ9%%$J|f2p@Qj$zTyK
zGp5J;m#uf2?B^<Q=RPc$xjQg1BD6^h*F+YL(m^(v`dcrXkg(2?2)}Q*2+O0YLNu|Q
zSW(5CkuDC2&w5L7cD(4INETU1Ml4ARE9-^DM9g<e9r|7DwMa^g&*t=ka0>T9ljD}-
z2TFhC+kNhmjy-7T=mapjkLR<28})Y*Hu0;y$*fF7?<WcdcTZ=O32>7MhKnBV6{XvN
z_PB?Ovh}CAxv1e!G>LFU=(GRW#_ab<<S!^39BX&0+y6%4IbU7%)XsABrQ2|At~IME
zY!1R;v3WDL1H9-W(CHK)0<C0C{jIG=e3_Z^I_xGk7U1nB8jFibAMC-_k9XayCKZE-
z$yjxU*dT3`B)#f4yd7(RUuJ>$zMb<nU%-9JWytuA8d0xOl6WB~Gc!B%kpzC=1?coM
zBEQLJoAmTJaIM{CzAoq3WX41fnL%`ODDW7ZSb`3pdchG|HT0SmU(ml5LTz*!-9i&6
zcsZphx5Q9K7wH3h^1;Q>mjOeg>7LY5MhrNpA@5ASxROS?(e6f5AJV#!C=eM9jcoDr
z1px`pM$K=8-;+zh0K9nS%lXoZL(+>re$%>r$Tw8cOZ``<LU2YSgPP6@TWS=KK<DQz
zaT3H&jZOhPb$T6_?$VYbo;Y%*s}h7cXkZsp#Q5LM8D=Y?A(TuThDr-_mU(BgOIiPJ
zPj|rh;kEV8%TSCXErj>L7*#VTO#AWYOT=)yeCGMHN4}128}ms--zC($@<|L3#Ml~j
z&7~qn|HZ|fIP`->rwOWISH02pi|o@d!zEovYFX~56xG2I^>fQfS4HR#!l@&*>64_S
zQ4bg)nwEL?y1!YfKCxBZJqZgkI86+AXg0pl&Ky48@*21Wr{MR|sNQD66h&A%A|Yb8
zP50v^;}pH(lGb`6dzhfrv9LZ>0T!C*&HG(KJ%1d|j*isC1H>jYKQpI{<xEd2xC#!g
z(v5;|(#T`-c4#B)+fN8hTd8*0In=p)L?*||U)$3;ni*eOIXE%>jDdxm=Y^c@JD$!Z
zWx8$`bKW*ZP!C4ZjCDAfPM7WZ&bJX+SKX`#&EPd1;f*UuDQG&C1}R!GabbnM-h}V5
zKC*n_!J?cbn8Yv^l7>S14b|+@`SgB38;z_f)23wIGCopa%QrZx@g7r}V=b$S2~_8k
z{DNVvR5;xG2E@+ml%<AH-W6wi5fZdNL9p6q6mS(8rPw{7#(g`5G0U{9`p++Ib>6mx
zVn%04?-q<Se>ls;gv0a^iDIe__9dQ_bc>dqE1hfYnZJAO=<W0a)Tu@-GJ_BzU)H#)
zX?Fml)T3oi37tduK7yZ)w<opU8}=(HUDywL#gVL5SpN@qZxvNn(=_U0K>`E|PH=Y!
z3GVJL32wn%f=eK{YjAfbIIM*`!QI{6oip>E{hj?L|95$A_8wzhzyRiKx~r?Js;i#T
zP>VSdbK~{6g<y!t`Le4+rxf6a!g0(M)_Bv_$3p`d0{Q+Y3%_RhL$7Q#)*HHI@0WL<
zns!ZGfxE2SEbAOLL8;}WrBHUP2wJj}vSFPHXO3-Gd;9Fe#$Iwzt|$Hx=WUtTs%Bns
z;V@@oiR17ZY%q~3=szrgR3xK;1{^VijI~(#XTK-@0KL?L;!mg_b?BokDw-uTj((o_
zHVNNPjPL}4_4h%NF|o0mVE2<zj)UnP!-*bpCpmo_0=`l3rulTO!qP=5-9v6(KT9u{
zLu$M9plsrHUt!w^b^BIIYl6X+JCpxhHvvu)(=9W+l2fu_7Vf~W#`nunxM#7SN7)%?
z*6+D8l5TbOj#d$mA3sC-f!b$h_nVV4+CLZ;;aS@&?W}qpIjIlQRd|yQCjPRiCm-Rx
zfubyzwFjca9k3+I4S02KTRfkTS=d2v(Y9+6+~$)Kck6={lg##3Z`6xK%A1eH8h6((
z)<Rn=bY=vhIv*eO<A+NP#2cI)rs0<!S-9buG}>fQ6~oj_j4ShLp_<Pr_h_?sU?#3M
z*`-}w^Tc#(?V}0Vl`FrGLQI_p1^ND%)n-p!xc*9YX^pNxjs^XQpIc)DTJ*f3i%E{5
ztpHs&J?>n6HR`Tz)RUOE2?3I&KR-Y2DA$bOV+vgNs_VGQ>K69C8DCzpd)PZ1Z+?eF
z{FtCzRpQv*Q>&!e`9xMISBD_tl&j@5l{Xu^!EaTv2QA(YeY3<UPUza8`K=#$q2c1E
z-AOTm<L!hX30K(46WsGAA*x!bEtog91CVcW^_M66EGuXP^XZgc)spHhd2b%b6wK>*
z1A44c%jB@#fJFmbK9AD!03z2-eGPI>3A?o)PVIL)q;i$k4QAsvyo7d}RrZf(y?tZi
zvYid8l=6=UXv`$Rx6hr-`E|HX_>!e34@;mgFZuqIFg<&(y07eq#>5BbOrBnG7iSO?
zdEO$Zl<GtcoFm^_@NfMtuWcX-z#z^OcRQFVn~|Q5M}M_pHJIDxO2fh@rDl-I{g8?n
zPm{Ol)8*pf(UR)Ay;sR!65Xop#-g$S+xY{OC9TUv5iLkUQ|+=g5`%aH)cm6;?GdOZ
zJ-hXPXLZ;f0g{U4^Ko=~f%`6{op?k>4s2(xqTSxC82?w*TN<NHH(<D}DB(BL=VJ>v
z6vXmES7F>akr|cEk31H**H1VUKskLQ5-zJoM6$C#_t6>itoM%hNq<!@!S_Zwgiz~f
z(_Sv-R3k8FxIQ3EjX}3-a5nAfn{Hjw6ZXn!NBQ^_u`i$te)>`d$AUR$bczw)mmjQ}
ziMq~3BE8qjl9JFk^;Ri<^GbClzxfrzqM19a!~}&tuU<GXFZ%S3UDH!c@bs~tqDGl|
z8FxGdGnqZOFSuQhakDVk5vtlNm-;?k{q(pT>pgwnDhM~IfMXJqrPtyM4cC{->2Rg}
zW_a%jeQnw{r{(JUCDXaK0Nqgx$!pXXu8&K`1z&#>9~&F4IZDu4%n!liv^~%ku34x2
z?g2BI&>LyY5C{Fn?^=!rV$0udpx@iSsa=J^PdE%_-{`C_Cvxz;Jbw`e<=0l@#bf`|
zQ(GL4W#2Ss8?n2+iwruq;fVG3CSDaoII7;edD}N_K`tA@?#YZ$+nC|lI_yo*u8AAf
zmeG1bQqlwqIa$JR2gj#7ewkYJ)@eWui9&;7urhi8Zc<Y94bgSX&=AtEPG+JOm%FW(
zKEx6J?;K>40vRdUu7+b<22TM&n!*dv$|K5=4y^J;G;g4*_1c9zn#tmP$S|sB(%mJ1
zgoB23Z6r!EF^Xs{<moA$xTefZ1?$Eu#zw;)*<%~K!2uVeX+eDVZd<?EXgG=<YxhpU
z%p<psTf5IXjB0N&6ManIC}I}N)EIksq+amu6XM&dB07z7pWGK<CDG;`I7ly+t9|Ny
zU8vsf_(_iI&fpXC&U;+u%+_n<dD5u1B@~#4o0S*hySuv(+~96sTwJc}su3I%Ga~_<
z2J{pBI@9*L;#;w!%VgJ|Lj;JOnQm(8>Y>QG%JGm~kEflR$rj}?P6soFRi>|Sve7BP
zNqW?lr#%t4WDmy&I9n-v=_x66BcRi!?S4_}mFo9Q<<shFoP>FOaWQv#t@@v2xZn<3
zGxFP6)IbJ}3+gsDXPsZ?s3smL`jQWY?%v!UL-&)ZW)(IK+FVb_FDC#=uLLQ6<zqLW
z0@peN`hn7=E6ooMZ&WQN#?jkLhXUAkne2}_O<cEbj+=@47$$5K`e&N1z7NQZTIeYN
zsk_`t+Kd<O%np-iZPEB|mt8t*0n<{1fodt{r;d?K<KTT}d#4joysp=ss+FmRHJIP)
zQ9~k7EqgITQYYPz9SaSu$n*P_ocsxuuKs%oSgAM;_DZ@#mjvyfHT=Ifh_g_pIIuxv
zZhJF#ZpSRbm^E=@(-NJ>m_T)w^whpgms$2_qS$SyHs21x3r0bc&`vQ~#jq3vsZps2
zqwX<RlWTc`MpB<C)i6)gJC1W>BfeJ9{&ahKC^*QlQEh#?=Dyn?l8?i;PCZVa#i2sz
zLWO2$&yhv2VsC+NcRKzNoQ^>*EbfXM96Db(sU$kYF6+5;wZUTu!sX~!Vr4Tr)thlR
z5w@%PIRc?t!;$5n%rc}6;;GTk<Zy(=Ha90sxz^iC1OMF6Csr1mB7j9lMk0^fjfnSd
zJ^`mJUp(nI$1t<Hv$dRUbK5`PnF!lQA)p9P73)<01nW=CXo#iPI}!Pnn(QqExvbpC
z&@We%+LIG~UAjPp9|OhXu!@i)n05LzUcg|HFITh@x>G!IXdWXVvG$uKEn?q)lSYO;
zaY<<Bmg6?Qft+j^%o!p3+GI&3W!(TVuCwZ(y3zF`0nVwqRo5L_tBj9II3ObWFqKrI
zZ{E2%|K1E&C7+cQt_Wr~0N=WO8FgZ51EV(@050qiU1WD<=6pw;n4u9Iy{HqLFgVvv
zT+LrP$pJOpE<2!#5Op^wDK6y>^U4s+XD2yd8o^5}yRl-GVmxq6Dd~FbVSZ}5HNoY!
zuBO*b3dD33uQnPt!XH%>RIMfZwRXIZBtu4=`HOjF7D)+&sI3=T_kPcna1ZBOaSYmQ
znaBMv_P)*j*vXII4Ov^&hdI6P2F>P=-#9NjyxCyx>J|69vprO@2Jdk#^)EAvA!0F(
z^LpN2_WL)fyqh${kH5>^DW9z2n1jf9YSne{<9T^()u)RMIu{Vd7&^S$Nh`Z1J^^1e
zxnT|d>NJPl?`~2wXs-?xF(~IDVhrou6^rWfxr_1TJ!x^MSv>45hRmdJ^5RilolWOk
z>LSbMt^HkTObfM~Gsei6hbyxCg&oOFb?tV81?eNv<Aeo4_&|JcYiQ`va5{z^i590l
zMc|r0hTM!Q4f<FB@rEZlJs6snDn~0ZkytKFizJ&PWBrO>=xA-}>&i|^a)ileHw=EZ
zH=f%`JH{_hH&dE<#BM+G5wxzd>H6pQJy4%DkC_iS``+uqCXCgmQt}eY-UqCnd2BmH
z1Q?{@h9zR4v!}g67r@gxal)$a<(o)C%WWxnBlf!6VqI^3%oS{G^HJn;Q13EY*DqAs
z0UVCWN$0?}F}Sbug^&T+Nck<4?*rQ?q8HTQ6CynW=$>x`!#Bt+#Uug<GJMo|VtcN6
zxNI@RPryAq4d)h%TQQC1OgJsFM8*W@q4^c(55u3JopR7NRJM$J!kQ_VymRU*m_B+W
z9yK}cu{Peu3}$V-<c7WD9a?(1Tio0@`FvDx<absmx>rb(Kf#}BGj~Y>w&}q&+B`O-
zrvq&z?X(l`%IM+BrsvCTC!Iu(G_LfHv<}5gyx6C+66I9JHZWbZ-^@Pi>*3g63}hv|
z$3w3$*}BD$_Y?U_h=n(Q4a?$+lltpJB-?U6+JpDYL;i9^$MF6X@vP(}_tn>XBGm$!
zQ-Xqdw@lahGqj0N);B6==0&<x{Ew#?mPb;H8%ZZAT^+G^s}9#^LWPsOk9~$3Tdi_p
zVFZz~9PHNZ9vpUi>G)l4_NkO0R2bgD!Ru8H@%%s%Dk|~FIK1djyHc5+;%2VM1d&}9
zmt+wf_)6FEs!;25RKZy`?`A*VRUYVNzK5``>6X<nyJ>H`2_D2$*D9Ea^C;8SEPW_0
zMB|@~7+kI6uo$JjyUqE!S=F1aFf)-KIevZi{BRtzbi*T{8i}z^wqyvQns9+g+cx^e
zd>&idk#n*eJoE9Cq5gzG1ln8b1@|`Ws`7Vr$gU?)9kSira7bW{&k><#uc0<itGmgj
zw}nZ!<s!fsJi-!CY_W9sTFVzr-=k-b#utNyS6R_1gzh`QrtxPvUbgRj_jS-q4+$uc
z5*+17iK!AJUmYA6$ii+>0zdBKyY7x9QqX6ksQIL-8oe2X9>>TcM5FE%$ha<Vekn4C
z^1RR0XGNI2p`)WSW?VD?pRNy{Uu#wj7LH*U&4uvDkpJBDEHua?r!w@hhGZGrbuQ_L
zOwp)&wQFw}dN&{?UX`(@_{wkH7M7~~0t$JYlSH{I1N0@FufR8-3ayx3n?LoIniQo?
zinen`*E@$Uhk-#R#UJCO4l{sOgB<*2B>fj0mzneSvntuuC{e-jX~4$klBZYr1m}bY
z%kYnCWjc8j1yqFck3k3sQFzQ*NUe|Oq3hx&QgKqH8dX9kGi`O>U`q%uTbEzT_{mYH
zD2fI-u7asDlvIOCOJz!L3l0W27y4qOj55sq>vKF%H!t*TpHB+X6Pfs41gx@)v(kH2
zC(7|>tTmDQqU=PIyU;p;EOfKRU@JSx;I~*<Yu0i589(36L*?=k!=xmqy1zFW7FmQ^
zZ9-TPiN{-EWlWP1>GtmnQGF$4%Xhb#qcAl`3|O7P<*Q;MBE$(l*GTO2bXzxLLfKM=
zO4m;5YjpTt9v!+P@0k2TP=v!Rj6H@^IdS+&M_+^mcFVqcdRGza=(A&>qAZkrzFX@h
zI%AmG!(lP`$h)E+CZcNw;X5eMxjhmkPH!o@e}LZx!AY2YYk7B$c|K>7;pc-ibtBml
z{V6ykWZW)z<wKgFih;6V!b^&c$pG{Xx4C+bxO~^X7x?&Sl+aFQsI$}0M;xIiGnjeu
zMU7H68A4vNesHo#nOGI4a453)GZa}<cp3CWyGQlUpIaprt>2G&bLjH{sLeMib&%Wb
zh5^!47*653*c3kNw=SD&0+X=9^71PjK{oROevia-c+JmMUzIG28BY&EBZ90}^ZLaG
z@vy?XlaodaOdIwW>esKXb0~4<Y+%N~j&rQDB0Lq#=>hG}qUtwisb_Yxq@y`RAlQyM
zo<quKlAKIu?yD%8&)8x*P-0i*%|xR&O*z&BrKW*Dy@ZQcq2}iBw}Qyt#2?r+e0rCF
zM93p?V{13Cg;SQ8=rH^#@92R?rFZ-RC7wbWYcSpYolhOp%t^ooGp_Fl--8nP9^IK}
z<7@9%5bQO-{``uD!gQ>RtgCD7<sP?$HE2uhFe474|AoVY&Pjus#C0vO=?!37-Oo?$
z5O~}&vNLEQPgP}g_H^iXjuhvA-ATJy4QfO;M1C;SY-BGYkM_JBWNJ+)NPnv6>dG?=
zvjiBC9{sFyzj=L^gfNfUh7$|8j9+D6^?8f<EKuhr2$NNC!RtTA;JglaMRB4?O7J!j
znhv4tyqXJDw@7NXwBI?%rzlE*TsScGzLfm<z}#Z>ohbqirr{4l*qr0HGWHRO;^;2%
zs>lQWQ9dI&AQ4E;t+)w_*UeHh>rZ*o>IOT@L|4zVRk3-Qg)+e)Jj+6=ln_sdFwy&}
z<4ay5gJqbrv2O_EQoQy6b>=XYJ8)*Y-B6V(HB(sYLBD&Nh?}nBfS$9$gsrEbF#Sih
z2Z*Ken4X`vakMkSMnY<Ml*>N*3YlEQz_4S|BI4xzx{ho%Axv8YeE#Akj0((&B_#pR
zmhIIOzeg8ygSo7t6CZkzmL!Gm?L0n_#3#i%u?!y&#QAwh9y-j&DW#y!h&SXBbJ&t`
znAlq`#ydnmN}Frydq=A+OW&({ONGq1f#6<YN=m>8MuPj|H3R17zwD0Re4h{LgduPl
z%^J{%HKk)>@+-0IrG)sr&uXuN1%F{sq<F>9+tY5;_O7*L?Tq2gkqiodItgulMhfK4
z4<Xo+(#eMhNiqJyzys@qH2mIpEC<o%_V>7w9bdb;-!v&(^OFze_6w8aFm_yANE;m`
zf6Q@|svxa2tw#5^g24$Zt0if+v(o<A<ikM2Adb(mmG;dm7G^}o&hCth5^y`(H?&!<
zr*HeTbK@qFTok|Y3d=#xkA7PE0_xNI-l^BpFxt#}XMhL4a&C{q@leRyh;g*(Zx-t#
zCleIF&|y&VBarYTvT^vUXaY+8LjI|c{dQ(mHPwE&Q!Qhtsq*P^I+gY0Ftmw7>Qi?)
zA^z-ohJXd@X5pitzR^Y3k(_G%BLik#zg*ZAC+<!`@&0|!>u}nzJK$t+eEw8BUNrIy
zC!-2|($`1b;A$hbFzGX=5$yF)!p(c#&K33~sKAhU2C`W-n5Sia%~FZMG6XUq@N$SN
zb_mmK9o8@A&2UJNlN|IB8MJFXx(nOdCSa#VydcCvnQmO>-;5%wyzqz-`Nm0kol58Z
zYz+Cs#pI2@r4o9q^5{+d1#Cq6_n$kz9gsJonc^(Or8IL9wlW5a8a#WZ)D;~<O7cd0
zJenaQs8s8@T@t(9Jtet@PfhXZii<m)0pZcME=9C7MNu(I;_}Npla2zJ3La?*$v&#o
zas<mma{#}Bc@L)jv;_hK2KkAg^%)@PHGS)<;gF0=P}M&_aannT-p=L|`CVU^d=f(i
zZsBd0)8^wqe>8@bs4;_@PTDU_&+J<F{;!RY*i`!wP!n4N^fw`yJ8{D}DG}ql!8ej3
z-QE6%@i^}FnGx2H0+aUW)=a0)i1VQ*-@kLFd}1X;)|PaPp`pm<Can~aNlwwa4ixqu
zjnZ@BriFlPq3~T#;n%K-nH_-C7sHG$L;C_gv5B-;$0x$h3xhupM3BW*QLT%6cHI%<
zX<R|j_F*lILqAcZ?FXBlep%S<37v(gd4=8+&zGLtaL(=3VLh5u5$}Xg;Ah2(CX@1%
z;;SSwFLxTVLZJ;7(?fyv3LO547rt|c(FsO{y2-iiwaG<~fw~B<9A1<s!&(6;Pyedq
zE)?cz>d6~Wuf#jT`;vH8qKBic(lGrVF<4$A5QZ2H3HirJwml7P5iB%>=6A;H58JBh
zC=Y&<I4-Ioo%@es%%sb%Kag?^?+1LIi;C4Wv_3;hVyb8e4&B3|gR?3v^p<|`373^T
z*MJVp=Tg}hyzU5-5^LgMjN2OQTMh2GL~L6wYP&CaLVeM0^p2!0MthU^7vfx;u{4g|
zuo+*8VvcL<6!Is1-ObH{XDs$q%^SKXdpEbeC{Ft(MIxWFw?w_{!(2px$jVpF9e+Vk
zWeWj1xI@bLv>_@ECQ?;J*07b`X<kEPc@4*SeCx5}DXZZIIWM?n`>Xt(wtn<P{^8D%
zV3)l^xlGTxx`6>b(#zo5*kJUVl*?by#ny+3sdS+%>h@Xs77Zz1kH&u6a-ZNYIbi*T
zISPnOHJosgQHw6Jz@6$}_o3x3$+b9edfQRBk)JrI9c*{rKPyh<A;m(d`|jpPiG-XG
z|8gNuy#=nS3e52c99=WKZbF%p?5^mL+=EsV9z4+%$ssW59u;2cS@?a(P$tqi65$dE
zmF;9z3itJQqLQr@eXV0Wzh30vw`UjMgfQzwb@V3Y0Ifb48-cEl3A&<rnsAY1ekCvG
z=+a%PuPOAw2GUmsez5$3y-S4FR|Kl@l?*I`FgmJAeI}#(yIc~{ZsKx1oMwiS@z%Ul
z@JS2~d$IQ;>^n@H6%9?DpC|bJ=m$H6eO9=Uo<AY?iC7exW#mF8Y&2V$cnV?HbQLtR
z!k`BA!QAL(k7BsHn0=OY{m*UScAz#Y)ALM5)j73cJ8>m{PgsjyZ^6Zji~u8uJLz+N
zzfGKzi5_<qJ(t*O@*Oijx}zokJCi8NV6o$?j(8U-k9qu9wstwMA8>;`CqMj+E$Oic
zGuOLcp>GeJS3Rm^kjAR`iDF6hbCH2-A8{sRJo`7zpMHhQ4NT0D)yW!?;m9zfE6!5+
z!Eo@lRke8Zcy~#i2{u<+?G5>bGR1K@QK4cNBca7o7cM9|F~WF$TbU3mTugqRPh;cV
zFvsOo&-`WBHcBbb)LCatq_^xL7i^4+l~Y`d|AGG+a#*q}J>{hejN~7WZVE1Wl00#K
z?6mp563&fGF5FBvZ^>pT%(T6tsMpA$UOm$Dt=~F@PJ2ttY(G;;Bjgte&E3+p*PP<>
zH5f>usJuYiwL=Q>ZNr876@OC|Yd6GgfYP*1JdA(=7f91KhFjSvbXchFsAi&!DYsiJ
zB-HZ_!w=n?4Qs_7b2N!3E!h9WA?ieGm3&pEDXsU|+%3K6HlhC_iIeKhu)odmBVPo#
z!5OpF%G1U@M=U!)295@yn6_%A`i-UXwbe#Z7>ukue11h0{o&nGcXP=J3(>Up1H&1F
zTvvcMxV>41+<d`c_a?F?^?Ak174-1!=7EwTR@~j`+GBfjM?#zvi^VV@Q0$DHgLm-D
z_;NxH?!%8)!5-V4V1JT9+=oiG<+1$+8!vi(Xz%(Roc1PKm|Ok1&n(01tE;P@8`(u#
z>KK^kr`uXM0vv`YFS5ekf-|n~2kW-mZ{B{L_S3+yoD6p&jTMFhgHC*(AXq-28eaPy
z!>+LXkpHU0@+3MKV*j4^5zb*_DE=tEx!Jhp>~{r%cBDY0v4Ar#8#fq+Ada(d0obhJ
z@KMyZvEP=mnB5GGt&$j^xFH}}Rk)KguTxEUM!pI-IcvlK@LX;r)Raom)vrDRH=Dh!
zey?wGX*ITUsA>Zkq`#usVu>^CjA<`gdW8B2>WRN68tQdOKjUFH-bL<R{(QXbQ^t@Z
zs;5p;d1Sw-t!j``0W9x-IL*K@_fN`<1%TI-sIcPFwEgG%fBjhCM7WKW7*z4gG8p(L
z{-ivEupkG0F6Z-qzN!a;AAdlgFZlop^Z3L3P{Qp0nJ@EgOV_anAk@E7?gEJ-R|DZ(
z$d|wJl3I2a#eTO5>4U>fvbPkjzQ+7}zJTcjD#?unBu;JSYd!&dV+uBMRByrc9r*-k
z8MtHikF~3xLjC<=g7}XgPN~ZGosLEq$7##TQYc7yG@zg#LFaS+{`gTS7l;UNq9Azc
z{~IRzBa9n4w9uZIwr6aYSfFH28yhorN-h|ThSX14W-K58@xzz+thXw&QiYc8fP#(9
z6p=>KB#Ie@mC#7*KDS3&MWuo5<3~vc2fA}Jr}Hxug)aad7bi^ICoWMP$l9)jX~4-E
z9<LwyV@3a2U|$Bb)6fXnn<>tD)@ivW;d~z%F~G<~!XH=1_1zl8a!h`R%F1acfEgH2
zy+cPsLsF%Y66UHv#|;V@fZdy6(uqMgFg{*v?8_;d@EGd!&-ERLF@wMOhf(ntNPL&@
zp9%%umGLG?3Ut4p_X9v4a1CW3p<5h*^Q}t%z))0XCNXGca+2KD_3k&LXu$mhly}n;
zz9Ngo@QF!3%eR<viV$P{6v<2JlMWS-bnh>cqh!xsI)1}+cVJxoU>!@r$0r8`4Lwz7
zq-+s7IW;vH5?^Bc+;Vr`DesV%nJHvoD4dtq9o@4#_)q!t-y=l-J;E#yT;A(F0DiGI
z?#gO6zRU_-HT<p*L4C9{-&xblsjjvM@=<*k`8KTY?n~s27H^k~=R%P6R35uqp%Fx#
zoN|E37wQQo(lCbnqvrLBH@~F3eB$XT^9ucCa`C6Qq2I~)_I)JEwoGF8m$C`_$!>HA
zX4ow56aQml@j>x+WGCY(vyq>~VpR<FCYhvDojjj7aT@Kvl^|bVFy=GG7BcJhg*#>f
zDpyKVzdnmbDLs-3!(J)+onIF(jLwqgh+V30Zvb9Y45!0(|J_aoop9iry{J1qE?-|r
z0HjXq2W#9EQw9@@kvX1xeO`6*Uu5JOZ5K^!_pMr2ujoL?7UCvQRvHB?jdW7z^t9TC
z=PzTSAt8A!*#t4j-m})1$^n^q-BsPY6I8O+%}z~ku@n2aZC=#H!cvJX>|c}P=#=36
z;N$&-JS+v&Onec}J1})U4;Cl6+ASENSvtMB3A7TA-Q3<51QmZu3azYUmXwqXC@4b>
z2Lz*3{MoX5sO#OxKS>sUDK9JdLwihm^m8^sroNGc-3Fv2_8sZ|p+1E##2g$N#l^*2
z;q1$Cy%{cI+r!U-(q6yuZh77y2}-%t%wk0&V$*s-r_!^HUXq9m05_f3VIV;Z^|U5b
zk6Ek@fV;Lx7l{~v6oxwBJ`p}lEEL=;Vlw<Fr{j6$<a*w(Zl^k|8N>~%^uyC=XqLtP
zQgI?TJ6lLBf*@<;9tDTec<aNFlnL9nr~feR|D|Q>1oRT$6RUti;8CJm7FEyZEnedJ
zpU*_tFBFxONY!<m%35wa-j{!yfKO8jhXnz(TQ-wkow3mk!0qSeeo1*0063Pmlgz^l
z6&DSl%~8^*6kB$GflhMXM6=%ZQwpa__mFya-s>*s8S<SsvkKUTZ1>zMB)g6w@=7HW
zrTBo3jSs6@QMa?r;QqgG^Zz~+xWs;s4#4ayX~mJ{h{-3|fS*Os0Te{drNPyzUnBr^
zd6WhC4bc0lTOG2HMGtS^VUi3c{F-r@vzRXI%FW6`bNBUc3oydXeVcPustV9O7%B2p
zW0KM7=1LO#x)UE|kDqpy@J5&!m_U!kznR$R85{xz*<`szxaQh~E@K?&DJa$&8R5+g
z=$I4o>~y)kj0Yhz(A4hc|Eo8_|0f5#P*Ba2@M&G1@Xj1299x?had(+ZaGmE{ba8j^
zuVtfw;_pIbRl#>9I<#l%8d@X(vB<n-gzrfxQcy606A^i!qUqioB)$-dWBKLB&pM3?
z8f}u;@!8qJVs#)VM`atD^0ZPgSSg-?Dw1onv(>Gr$V$ORy`ScZf`&pkDMBr=mr-`|
z`LBcX_qW=>B(e}2z3KDu|IP`!?0#64f;BIJiN&OoJwq0V5*7Y^3mp%=uxC?cZe7fW
z4bS9uuRymF!z~`Kgq@xJAo{_TSw(fmcMU#4mO<3MFKfbRQX<d{0Rchns_5&Ar|t$a
z5sTRCP+G@82Pqv5#@Cv})?+&@)~1%Q8{^skFDc?LRR^$0oN=K$)??-}AvuMOjB*M4
zH57Qw*E&Sqe*J<wIM_RqV!8@Mhwt>EhssgX)!kYADk&e9<?>0=cR_Qi#w<`;ORF?W
zGAr86*|~1fVP)c8hwMjaK#v-;a638%24isWm{4=HUSZ&vyW0DY@7Thk!Ft~RMYUK7
z{hpaPW*C@TNh>Q577soBqBf)yNpeccWmCAM*@i&sdvPwo6Lm@)N?-RtAo`-;umo=w
zyutOAfaep-501eEhS>Sy+DZ)EfTamxNAIZF9};s&l$1>MBC0^W)CTbfTw)r@F@;WZ
zM^FXagW=yY1Mtb9p{yn!KDIn+>XKk|$UfsV+yo#Pp$iEKT`6fF!V*X1VC3Bt1{m`w
zgyXQhjX?}_MbP8%2TpukUbhC1tF2!1&UW`;$zYzsBe<j(*9+`@Cp9(it_PVBUhnB`
z4rj6!Z0rn1Lowti%#w2zbPRviSjp=DVg&%_V{;f}mXs=@N=ip(XH6F}a)gC8`gNT7
z<;jZfiA_E)>~r*98%@WTc!N<!KmD5}Dq$<y&$v)I38MLwA1T!`)Dvu?IwLv6Vq#;i
zlKGvSYOCEofIbI@-buvu5@kT<8|V7_3tiDt;}okiyHu1$*|a|C95-xyq+wbhHtdy4
zSZpyUDzQ<zq9639_Wz#;<f!p)naQSr!7w1lrJ%@j3)QLY^N~qr6RapHE-@BxBVF9x
z4))foWW^&3xQR6$WZ%6gQqFe)6~v(1vZJA)xn=P0J>5$<I>rIi6De(N-pSJQ%e##i
zH>I0bdkgiEn!JNgq;kNC>CJgH8M{^0n*og5T>=&vkK!59Ng_va>B6n2_ID`fw~hO6
zn|25O@H0ND#E1QTg8ts#43A>iJ+TlLw@d0IyWXW)kVjQ6dGFw6f2VOrgG>?!pL7C!
zI^u|0_iv1%gqm7D*u+vW%m8Sa5ZAozI3|5XPgX_U8?n9Oanb1UcvfJ)_G(A6)yoq&
zZ+}31H6&s&XjuGuqJ4f!7Aa_7je{No@j-)qukn2~)qfdU0sNs70(>5tV-Y@j0_<K#
zr~O$s_CU~Dr(;G$R1|9CZpTG#d7avqp@yjvbl<GK^R?!YfypAc15Z|lxLgI<K^Q3>
z8F+sx23SKM9d%8r-whiG97iE3Lyo~<^DA>2I=a|jwnOnSDbYawjNwE(#8oQh>nVCx
zy2h8@WmlhGMQxjxc;`ITlLRBp>cy>PX6xDfn`LMOR3VhCSMUg%&{U4h6#o8L#E#GY
zSW>$n9Idt<5cbt_v)cVIXU-?-9#L2ftHT@EU&D)y4qvwGH(jr{*v?WH?H(9*6XV0D
zv05hxSoFSglM6uo`?EkcYDkEBllA%Y({B8F(0AaPTwQAaqZCxrh}R_*Ir*x*cM~BZ
zHe&}6$NmOj`VdY)FOaVtuwlCb=ReiDA%h>!2YuQ`8}q*ugd`lh^F|EYzY20wf5V~2
z&$$s+YcaD{Jy=o0NAlies15uu%v{l1JM+x{_U&6CX-M`^-mB`z`)tI~0-KK?t+Z(F
zNFyrkj!t7?Bz*q$(R+Y#n}lBH`<%9^Y;=tuBK~rQ3X6o}Q&Qd{BoY*Rl9i=wnCD;q
zY-MG+Sc5PpeA8`F!EaemYo4H^tf+&lu{>VXkq{tj#_p(H@Xctdc&cwWox~zEiZ*Sy
zb|)~RM(3>IB0^J9T{Cd*r%hs13H(|0ZFKw;N}`S%qnG!usUb)frNt-+g#Y~!xIwsV
zfD<9ARc#@5a+1a2FeQI>Svs-nr${seNV3{Ic$#1(Wn~P$$6bue5j={5^XQnvxH%^f
z!H3!pzS8sLJcIAtbiVrsSWSgAG~6XDY^tD%MI`H~)-5uZ2lQYewBu1sRULOGI&9Bw
zSr7My?LBa8iwrf~I2>L4Jvj?7--LX2BX7U-7f>^l^o$;|xNJtl(KmWbm*Stznds^P
z(NV0|stO8vYic&&JFH=z11$oVHm~z9AAVHMu$}2}7&~i6XBs;$WvwaGayic4MW{qq
zw5EqrWw;;(_dh9o`UH*njv;x5WI0;4aZ5rXsNQ1P^+DSejD^@f9-NzNl)^+)hQ`#l
z-GY&_8St-l1J+P41?C$mjC98E6;J7k#y7wON`fDKM0r}6{=s<x;c>qgsMKA|9)q3+
zCc^UqFp=R`2kfwnnpO750|Num$@7E$L7FTUd*gX^loXtV-4v>)j#38d`fJ!DVG*p7
zGU}1iF5;{}hX+zh+4SH>UGLZOE&f)59gUV0?Ee;W;Ohl4R5qwC&%VMw=FQD`VgBCm
z4El*9Qi$SQ7QOdE-OA|i-UWAcaUf(Ai|Z>EX@4{xAm6({Big-C1j>3}+@H-jcZ8Ls
zxcKgFwE+e6148j6AfoBsZPW1*s){mjd{$v-A*zoSgKYn5RFUzH92proC_K1o!?s^O
zIMm@jOane)`Z*7Z<>Q}%)OHOIlLj${S_Gdl)0FF7Z{&v%{lhfFm8gcy&C1HpUp$_K
zg^v~Wna!>OL{Fk6TvlTv?&SprIXGH|s8rhPD2hrtUyni{Vv@?rTIZFbR?$P{3X2w^
zo`n+IRfH#4AAxOkSLeCV_<{PiTeF`$QEfEG|67dz5oyan0fkK;M=$WlyS0jS0T6l>
z3*SR&Jj~TVF_(%eyGD8d(_-lDEzVo4(oX$AB0sy0o@9iI8MBW7MJ;2_PRibrxYT_4
z@zuuylFwY(IoYH2HZ}`3GY^f&C@FSA9g8p*zJ9R8QX)azlPT4X{XAV%MiLS;+b~~m
zc=#p%z0G}K>g0$EVS)nqM8)sApwR=8lPPI}4-zYB#gPgdPR(@!f?idytF&N5MBPr!
znS7oQxbpH3aEnSz3^d8`99veS({|+<rt`X8qaxKS-kLR|FWd=0!nHg|*8Kb{-Az};
zu@GJ<I%lfUQD)xVhLZ?O!f1s&&)cc1M=VLB8ru2~o#O-JEb)6VZoDC{>GF2OIC>)X
zBI9yreMU`9EioZSBN}EU_8!Ji1``>&USaEm8Afmp=!{=kdXVS2s?)#paK!_DkR~;@
zkkaYB1(W{SIz`>|FX%awc{Z73Rt)@UCh;#TDrP#n;-12YcqxzLakj)@O*WK3LT9#o
zxhbu;1+h(P6ZfY%kw+TcQLoA0pc6y>>*ITj1|KZlhZK@ADtEVt+SMhJMQmfdx@Wk~
z8kPE%>>@fL2<$BDn@R@|deg(;2yYSZFORJ-i)-BP&G&-%9B;ufZP7OIHRrDf&?wVm
zb!g5sn!g~FH>}exdOehpnzu}wX@l@|y?IfRyUGpYE}_P<NDc4KMeFzhM4e1(L!y(=
z%wvpbD3)|z;zv;#A#=BHJh8Eb)}f6g{~jhJ`YfX_;f+rr90{wCP<e5Rf^xhc72!(?
zxeNB{m^e|dU2j_0{64znVx^EhBN!8{>MiKK(pjW8Pe4KXV_<M3R*_2HdQMdp0t)|m
zVK53N`YX|RN<Oxvmd3_cS^7l{JLz+z9NT!P$hAsi?_JNAZ?_k|b36uZR2ucOUl*)z
zq&hHljpq%@dK3~Xo@K>X5_<IQH7qlgB*GJgL>@gabjSXoB`RP2Gg^q?h}YtZcF6Nj
z-9O&%(49$ekjRIJhmR9iN(~%gWffPCOC5bNzKRv|3BJaoMPj>@5-vV&yy4Sw+QOV3
zYst(U!ozO@iPrS%t9@ZA)vAIg6FUm8U-m$Fx;IWP5Oxq$2`g;SsIzQbs<2t%!{Kp>
z`atN2zWy#PA8O~@#fYfbwgSS0ISb@EWwA|reBd8L6oAqs0TfwoWg(s^UAwyOuMZXe
zbc}W9L)!T@q*Hz<yx%NdY>@-rytA6Bt}$2B&@fGWMEXUvml#c&rHW`b%{0>ei~UKm
zSnq1jz(N!5o*t;@MH=RNpx<lYYZH-ovNFu<n64||;Q7~S2dD`FbtqoKZ+Ve9ss*Iv
zNYdhVc2%lP_OSz2_H_71&d+x{x~rp|k?+q~%rAAYoK@9dJkPQcEle()@I!wIpLg-U
z_(H$oc@3l_#=G$0)f+4&DV_B0Pg&R<)y|~c?xwJGb&2Q2L0>!XCxd07c?AEkP{>Dt
zz@EFnr5PKN^x*z<sEcW7MGp`mp=iX$AfKdBM(<OmXIVP9lEUcVLZhb8sJDIxz&u4g
z?)%-ZfuN8~*Saz1I6L`bQ&I`24B6^Rk)e^Yv-&{-vrM%*mk^*MQAY5rGaFrv2mzJR
z-?dd|CP}HN;4Zd@dw;RN%*ljLw#0PUqtVYFj#}K2X*R>{{G}-BWQnO^g80%Y{Vhh`
zU?N}|r_?=lr45JS^CPIL)@rn7y+uGk+m_sObSr62##W*rCI4wdijDzfo36E#l{-+u
zy}|R{-K8$oil^%6G#uGgIkZ>*+XTvNhWRGuvkP4x3?Cc<FYe}6?MN6Y5UWyWZfTwn
z(^!^ZT5jw>M&_w@Rov3@+V#$uQp<zSroJl>QB*XDGXDVQM?51GnNkZA@;G#^<Y6s|
z)-eW|EbJKJH(Ac_)D?w^AJ#728X)c@|Co9HC;<foR8P1oMmDyZ?5Pz>5>?udE#r_&
zz_xUl|0*0iRIA+RMm}j+T^3bx%xo6b<LBmSS-L1~X|7tLCdpM%W>qJp&O*vlql5(_
zT*~VI@P{l{dO`_O30&H#s`O2JT^^vk__RgcDRAz^fsfcK2EA8pkMn|0BW@Mna~0f-
z^1qHGf=@_{{<j&{rUvg)&pNZA9I<N4+W(GZ^eWmpkJ`37oQ{iY#Y}y<;HUO+>>q!S
zE=5c|aC%&Hdbj-NPzum8A?7B)c3`GI1pks4@^uuU|A^*aj}h~MGLnDjxdZ?4lu<tz
zY5_M?J{#FTrqLY_cnI$i{?0?pzXv0Lf}RPnCwSZP;g44yngI{FuCYlyk^bW;yb?Z8
zxo~S2(|^3O^8c@af79`)sjtURk3uCD`8b>*Jj6TW_vm8ruR{mW?7nHlt4qPPFH?C|
zR!669!f2R#!V;#`GL{^lMdE^<3>~hJf0<fY37Zzm9P1VGMl&nC=hk`hG;~hWDjeCq
zsrU4TH2Hh?NE1`P3VI!q+hvM@neq{95K+Z)gJOM@siZ#0*I7knI!SMCUdSoig@@$y
z`$_VQD&)8TWc7#1RI-1cG`>gZzYj#mr`HSGw<{b)I&WGZ8&1-aeQGTbw-St<7Yrl0
zammDu$ar|PB7{dLCw%}za}7`;$1bHJNO+6bjjmg#cRbrmwz^VQ0imbVbTo;zQ|}JE
zAH_Wk@^R2?q{M?}BkLs)|D5~>40t@q?A8s<?vki6Dg=Og@bR2|$%8I}<B=H&hZ*AR
z>@4P`>JG7}sH}VbgT>i!^U21|jFvG~KqOA!2U0CkvQ8+(&dwHUhEI`26W5)%tsKaT
zV~Xh2TjHiBhQ3n^D`plJ!VOFWoScmf$Mf81m>a?xKLSaO9%fw<{;;&6e(ML0bu!!%
zHLt)QUA`_CQ&h|j+m~&A);2q#OyDjWer~wCM!MCIsKP>KG*|%-t+)0c%l@%l9$wrk
z{LP+jnM=d*9Y$MUOkHyo$P2o1L}8HO{t(Tmwg?0mQA~PdLn+A+mNT>r9voeda~ljI
zte7pE+ImwnGtn{^UUQ2BD4QuD)9c~k@ICU2>&A-_|7*Zb5_u`rF}1X;4f$jp6t{9B
zE-Y*qSccV)fA;mFLN#W1VQ6q{exFBL`RDSCN!_9X6Zh)h&O|eeR|~gZ^Y&K{CD2<m
zFtdsjdSk?lt}B6|Sfr4H!_O@bz#e3=d4>YufZQ6*)@9`RK%RUL5`kTpzJ%=2_k;v2
zN#+|ppv8&H#jix$&FH|K@^Z+2Qqy7!JQ@E&ZEXxp%%W!WkF}g4gOp8;W9V&MpSRKl
zSUjTlnAt;r*$e-%A;~Mrpm-StYCNn(L^yzCB*W{&W){O9#|s(Lj>eEEZ@#m)j2thE
zj3;NehLNk8evw_mC{LKs6#QM7bZ~?&5P-R5zUVNL)<^hp8V2Y@`cu2v<Bk^KGyfzN
zVuQ<7^&h%U<KO2Tvn^|C;<`MTL3#gW7+xzU9p{~7Fw45C-Qfbv|8R0BMmM0yW!xM#
zEe8?<k=lc)()Cad0%SpF+ukxBxi^G9Lt)D?xyR&@7PAu%C!pX##*4LnDnd~MgKsK5
z<_WJg)(kdWFo@~YH%ZCf<8G~gl9YVsBhP;)^t`;l7-p5`aa7B`iq<|py^S3i0*8q0
zX(Fx4Q(J@>==X;-N@QxnxT*LQj*g-?3LrDKuG2~$4zr#Fx)IilPueiv`GG_Nf+Afn
z)I0Hyqc4>5*%{sdpzdD$iq^2375;ZX%~tjm(pdLKPk495FegzY?|r5J=e#6aQ*(1c
zB`GFJiO4sb-z}Tr)q+&}_a_Rl!O0i6<+n#u9Ji}}hn#GWbX4rv>?`(>?|$ND>Hj50
zO|p6qb`nb;e_kM}LYR(3_VvLx-)2JJoER9*RU1?HY5G=eT=x`DaR!Bl3e>37g@huD
zt2*%}Cx1YJzP+3nVQAF4;9{$x{XB3em&V#XY<3%;(64$D67n6mAyQGFaq`%IPVh#i
zrmKiHIZwJ(AlpfGsPhlHBcBq+81n@JWl$*}>EmI8=1kw}cm8eZctY_~3M`7pQB&dr
zt(C5e`qw{anLj_;9C2v*i+T!&x^Sd=*kD55@0@W&0`x-m!s6oUTI={?&~>t2@2k7+
zgjGiM*$=;dd7&|S_2b&{IkjHs`oSmk1u+-ZsM^f5-mVXhL)bO&M5;}`?uH}s2*S6%
zCCfH^kT`E%xlfoC`r8R=63y&|2?~L)2nxD~Er_!=%2m#i%J@9E3}mv+Bl-uO&$3QR
zGRCh_V>5IgY=<?d7Q0<ZwfBw18q3zg2mZ2f@^<&user4hQtTVl4*&Giy6dc$$fAyy
zkc#|pe6U>6a5pVIjJBxqN;nxe8S>A!>!DDL8bWn#l^F;Jz78K2<|W}$(XzY~)&)@>
zy_+%q@`adwk*4H8txm~i;L^;Ub7pWFjl{WODm;BgEQqGRYWn+AlyGDM%#C#EetZa?
ztZnN_g?B6=*#(P`z5MG?IvF0TDIBW5T~Nu)gNkP>#)T`YMWUy%v51`<oq?q$;n>lM
zarcER1msVpLTz^wd%va%@@3P=J4oiHo3ce6K29PU2rp8&RUCzX>=z9V4Q^|?>aII1
zZ?+Z|5^C9s+x1s#Pxjog!eMoc+YD0C<e0fWJR|r^xlSWo{(z|JWwBc=^t*SXIuW|y
zP%#a|XU{j3<W_R;&aT#q=`F#hSjj=a^^9FR*_HBYgM3)vy5YL{kdtl5<@`a<V&S!j
z^qx7Pgn<zK{1edjM=YE`ANh?cJj1;;iyY^ch`)=<sDEZlcEmCYHtV16w;t8+*N+iI
zDaZ!_p#^&ZAhK7&7+D^?33%6hSVJ$b$pVnOa{D`3%uXz2lH#nw;btmyeVdQL*s)Y6
zOVI^uENkoAen1QbO624x0}9Z%S3O~d%-vR(UKgw|aIhSZ6UjGjuTWF0=IZ*&y6H^K
zz1+?aR{ttlsHh9m`sU!glIIU67ZQCJz(*cIXE(l+D>%1(Jd0#sRd2ngaJ!LX_eH~a
z7ryfHOzZK}wn`<#ZO5I-p*QX8#^c2>@=(c47aCDSFBu8n@~~M>TiG4|<b|U41i8K{
zsLJKc<FI)ptKoJAd+tNBbauzqUO`58C=(wQsR`G%=TE$|vuIMeNxr`iJ`@0V1|>q&
zkXMWB`M$dJe9~d$iOB0=VKA3dzu~(8@;fdVo7St>eD|k@XA1Q7_6;;NML$>!o4%Wx
z1;s^#gh&DT<Ocq6L#k_|X<6~Lz{MO~utWQkH%J;rEHxftS}O)93zI<~^Y%O2pweFo
z@Ys8meY2l`cFY4Y^GCp@jZh-97l^RFO-|N~j$1?l3R*dV%Q~NpNNzDa_<$sMNqOl`
zvw}1{33&Arf6XJQRwjndhaG&IcCQDy6I5a=bo(tq(LCiIbr8Mg0PK~QiWFo2GRD3B
zatqVh<@*u+$-?MuLB+G^3|*g$3_IVagG`X1)S!7@s2dE3$bI!i@OI$eMo@EtK;)KB
zLj}pbKu6{0)lm3)SZ^wclW=h&PoB}GMeTy+H%|xjd><`msR?6C&Jx{C$bhLaEW)r=
z)mF9YHE;c?E+Sl8T#UzJ?dXj`)XMX~lL~a3cxRE<ln{60x!N8Wo%oXggG#P5WQ$WG
z^VYT%*6R;5x-F7)bb}Dp)9p$^MfC$QCykm=^|;+}V{6C4NlT#a<2oDAMQmAW-wiZ>
zkhA13spAE9qG)xvUa7QuLcb(pmYUARgJ(woRTZ^Iq`lTi@gy!Q^SaziBfca0;QU;#
zt`*WJab;bT)NpsZAy0AUfz>0qJM~q1hK!Hpwb!<%W98<bvhv6QB}gK0iP^HO5T`mx
zO2Y!1CFysz-kScib@UV|)pp3yRJEk;W9#KwVH?o*)!b%@iEe=p4rTZ)<oYF)B8sG;
zAx223^r4msO3*QTeN8ZgB+E%JAnU|pk%YzvmrX#MX)TZbcxSE8YOf+y_SXN}G_y|s
zxQcYHdGyxW+BrdJC~h~nmKmHWuk+BSF0_|9D9bB0jYOn>wsBa_!%My;3Y?wQ(99uG
z6BQM8*^9q{o+(rp*{NL-SNl>O6#3oxcvKjrO1^c4$)M8@Xnz4mm*8o*G^}1mqu0L#
zA^2xBv8|j0RRu~!SMvKewZh_(ulIiBH&Sm&VxXv!T9(k;Qz*<pjg6vs7}I#)X~q$|
zb}l~M>6B%vQl^KU$4uEXwxbVPMO%}j)A7jxnWP&L++WD(=mzDAZbzj)1IZXZ@30e9
zNNHJ14{DtQ@c;5mh=hrEVS-XR*T_@qr77rJ;X|j}xQhkMFnzP{NG)dQMZZkL)AVx>
z4_hz>M*!h%iww{Ee2s6-Iyuf824o7#nkGAxvh$iPgjs6Z(y<GP44MIV7kuJhTC)m^
zoiD^KY5umgnu7!))!X+U2|t(7Di!O04|G=~lZC1k4;n7=Q4q|A5(bf3Jv)nti_hh$
z>)4UNO6}<&=giZM75#?=FfMX+es16LeD8gz1t?}wk+xmac#HM*>`L=3gW#(H0XMg%
zUnN%Wq!StI<*hUeZ#Ms4=_{CTL(t<93X+d<^3sAYrOa`0Dw%b4?e^^Z_{kJQ17td3
z5=ewUe3@DwVK%5_I*SU@EmanIB3>baqqQPtP!prp96w=uX5r<icFD+uk$ncr7QNAk
z&79L-qaG!Ijrx_it*xwTubK%zF#NISAP``_Lnuc2iOJu2=u;2r(s>VK#{#%d&xd>|
zWg(`HJeI5wzkmQS45Fs>wZLcdbR;XWLQdkmJmcGgCzSba&_qlnO$Cy^lD2eUN>KTO
zx%35}V<Cj%nUe0wW^7;BFNeQP?StQMJiBWFVin?=#&4eQMySSGy|L0?TD{lW;f}>!
z_wr9bSFSs{{)0@-U0fL@)Ih**BQH^>{h$Kmuix2|-B2S{Y|d%WfyN<67*u|7M=Im8
z3*LBlCS5Kmo{q3l@fPu~eM}DHrscDH;>pmuK-u_?ODqh>7j(0X=zjD8QeE5i`{f0-
zn4C4CRBna1y%cNp&p=Z5T~rZK(O2kwS4{vV8xdQ_g^-msQ0i5g*jXH#G-EJT)CgKO
zV?xAYL=ZeCvGu)lP*5b+nGf?BP?h+nj+dAGt>eL|`%uW=$49om6g-x{4iof)onKMW
zuIU~f-ueuZ>czKtgafo}?jZ%KP|Pg5CGC<MN@T=taa4rAbF;=rS~;$oVD4`DzxGLn
zkIw<@ErQHRs${)?IX>i8+}ctdGH*s=VkG{Tr@1b1Ap^>Ll*90FPGeHOy0Ok2VdGm0
z%irr`YAuntVYL$Tw+HV<?i<zMKScNv`Lh3XDghRAHDih3y0<0pUSt7$o3|jhs~GE@
zv+=jgN>Zn8<fX-snDOz{eN1iQMBd-<%Uh*&S_#bdpvz=z@-9zoV~6WEvpd8bWTiq&
zn2k(zWfm>yJ32a5d^4+xaCJRch$xIdD8ahmuNzDI@lgId1^`5x&3>!i#e!=$UQ(ft
z4T0C3M!Onlq`{}b8o<?9*ZRq}6BiL(IP`<YjH4{6I>}Ga*z~kDuh_s~9<IKoWMUq;
zaG8?N@qc)|^1}bzO9-3MEZ;Vm_MgCGwkv+Gjxlg`U>98U%iRP^NJ>@`64g2(Pp=r7
zj22RffEe6}Cg|)-9l~W9up(;T*ERg<u1o0cz{A8tjESqW=q(K!Qwa&>cXZKZ-x1Pc
zJ+7xI$crm0mpF;uNL-Z?aj6_S5^|rXJL(L2{<W4wV#L(NdQM)Bn0Wg75tXC1)V=T5
zN=F@N-*P3+9C;iKA1d1(A~BRx{Ck>wwg1tSU^SB+|JScD3Dd-PF4A@y<^S|;Q5Rvn
zT#%G)Td^}D{&ek#;Sm&kVAc{l#7X~n>{2|$tG?s=U+17dB0T?h{<;tQtS&t{In2?~
zk*S4+xO;DBKwrUdU;x*S*ATbI2zXI?XOpOk$o%G+<=U0uFFXGWlpvje3Pj;<VTp~P
zj3bAEp$9x#dsa?a8M3TwSz(ctkpBo`r1<x~?Zo*c(0u@wf1o=m{*iDY)mu{D(dp%Y
z?QJ#SW^TTbxgt==$RyML&lgzw2}o!OZKFKyfssR-^*-~W%928?8<0h%Cxp$<bCqhQ
zFeO-Um-c4qsxfu-_GahiLQQ=LheuSl5xuc4zkYiDh{l-Jw;K!PokB#Hurts-bv{Gu
zJtiS7U+b=}HkDb~@EUxYIc2`&ZdU%M2oMvaIzown2x(Erl{TurT*W|SFMGn0k+3ZD
zyrrNprl!#$;$YWXg^!D$`O%xpy&RP={SnCc$gImJ#N6WiLdC*~Xh!PX(V|~iRMZo2
zH3)qjh=dzHUTw}+U(<1L1Rh1eS$*^8Wcr}N7r&IQ&~^xb2=(;|F^C>y_#uE!HH?%p
zIFZYsiEhKSsz7V2t59O<&Tn^!rvOxFJvMShGz07>>!YH^9#k(RoDY6ME@>ERiC#8C
zSXcaHj(FVqa`J=AiuT^bxZm>~L9&CA;-_GW(8Tq;MBQ$nt4-LgKN5MDcvfllo3(Qf
zf`6OCz}MXJ#HKvNW$5Vfsc-$Vv!&SBvDThjc>!zM3lGT1tA9|dt*v#ro_pzhg`G;L
zuME9*@ja_BSIl0xDFhXhh}P0Augh?1;KcU%74}AxMTKCiSJFc5%Hm=e0G8pB<J}_v
zlt`VWYewp2K7>)dgy<Uc=LTJM|D6#~6WmMkkxM9M0AE2fEf7d$z@$pGE#)m;IYDvZ
ztMj;@RznW9Z^5c)Ik#!t=D7StV4(kbzX(3owrDuVCc}tcw+^+ndHb`L_mfjlL`b#2
zbD8u1Q{7v})ERYMyFh7?7BBAZR@~i-YtbSt?(W6i-MzRK_ZD|6x^dTyyPlipOTPD^
z@A-ND9I{E8G}+v`)?8y=W30NmiTNiP#x~zLIc~^e(>G*amPlQxBerGdL5{EGSYRmT
zhKyn)@tT>Df4u%a&4NOl88*3&;PP-vX$vwf)R?9QCbp{5PjC%)yBqSS6G4P)3jy!9
z{;*1r$#w_9(9_e`f4?~aL_68O^D#c^H4SWl6ZnEU!j=U+o*p&aJ`iit4jV*hOZO6L
zeO|VUgU+;tj_&g87ey9-U`VH3i$y;|FDb8nzx?BoSR^pJy87*L+kN0>=!KAo$X{<H
z<YUoS<6R4!Pxi@=?jA7`=f5=C4in@zL!QoIJDs%ae@;C-PPgzL_S09sPKR1I6LoAQ
zF4*oBbO-@_R7eC6%Ys6)#ksTi{`6S=Ip9#=FeXlmW}Qrw7oQ)6)sl)vJL;ttkifIm
zSWSJQVLHPYx&Y;EqUQ<NFe_4qVbAP2PF|qP>wYx;9dX-up>wN?1rEJ_`%u8YtKm5c
z9|Cz{bw=@T-!k}Cn|7WCyMx>)R1`e;oC$s&vy6<&W>pKY-fGA7o15?3ly6$I4m1ns
zUc+dWt|<)+NO1yc?8_rRqao~`KvvM#Evl*H-cg2v#b%a2|Ni}Zv?y^>tBwr@G(r~c
z!_vNj=4Kr4n=ZCk<=Ds?Z`Yq}WK&_E?yeFnb6H8KV?1JwWE|9y{wbNF1+QT(_-=FD
zXP<UeQT4xttfgMtg7%E{FLo6%+<;DQZZ2xgackcZv*9-6%|p%c$+Y^==@zC;{;>o;
zz`y(u7`gMlIjkA8h;aMt@Hvh9tptH%x(m+?@u$f``oEUC9C;E*Xi-wN_~ykcvT1fF
z{f3O4Xo(cdvBJYCHPBh!PvzPhUtQM%k`#4yQTkaXqRSKw13{NK1TzD*Bewt6l>ZUi
zR4_~=&Z*GhK1Fh$G12;!+H)rYr9S{V$?;;KRXNOa1FcDELgdFVaVb+rBAAUXB!Oxh
z`m8bIs~4pU*bLa1eTp_WWS7Rlp=eiO4H@eUSqe_^q~YUy>fDV<cW+;?areNnq_p%Q
zszJeQV!Rq?E3*6t`RjEP1e}APU=$qk0BHl^qdux{f#L5TPrm}l;}4J?t=lJz?0;jf
ziCF5O@uIpF6gbowBqAa#O)@(#L!BzcFSJwSA0+ddTHg<kl-6!KAuLSh5Jb(W8AmLW
zmg)(lJ9MHrF$e`nD3`(^qGNLZl*{l3HVkSKZ^`S5T?;!?AIu!%E?yw}cX_i!0f=v+
zj-o|m!5nOC3te|4Bv44@0yp;d_Tae<I5G3E4Rl+~U_>|<iqOzdIu6mXrsat6@b(i?
zqnsr@I$?5^qnz9>zhjIMF<o7s6vgUX-ME#<BWbS4u3WKmCI=hq{6cbrtx&N~n1Q6^
zUvz?S&De}bXPwfgy&?AZ(=-BSO>AD@uqDcuBO;t2edNH=fg~}=KDY6{7#j1g9eU<Q
z;@b(0xVeEw`7~<Y_{a;yrrCm|?ia}SM~aHddQMRCz&AiM*Dyyj)i_t!cs$!jqt1-~
z4hhe%K&HK#BB1$XBT4|dau}jCaqHCO+lZO=W6;7#U}*04_dZ$!wAaiIaI=8;Q#fRF
z6wo6tH}@n#ZTo1ke*sKR4#B{s<S*9|xCz3CjG#c3rX~{QLOD^TT$P`(Ip}2$-Mzg;
zqyW)T>M$`*UuZ2sV%4}7mE7^0dara{6l@X|Rk__7B*W0wS&?!+Jv-;Tf}N<9D_j7e
z*+4EH6OK7YXf(Dl7nK%&oK8Q&>uK<}6P&~2w~nQPmZyC9Hw|%3iObV#7tgRg!6;pa
z8hrT76Z~*_XIdhEwlM@y$-Zc(z1>e{_G~7r44QYWfDzrvGc>sDLY1wZ(DxE52o8E;
zcbs8l><mP}m91(dA){wQZ&-0+v9q&d{&q%&MnPl3s&bI&e%!@(J<NWpsG?FGAkh2y
z-}cBj!i$*A3L}a(w1gL3Ad|GP(JZwcM=9HxKfqG`^$G98*k~*Pp44tqjBnYnE{P;b
zmF<S~!@l~?#*a5wH3trP2Av2ap&=pFu5D3~{gR9`6^z}0k+<4l-b4H5V5sW*2uN_U
z$xWDql(ffwa<)4t6r28!`$4($D)$~&Zf4Yatn?n=WT=AUip{I#6$IQN>;IXZ<n-#o
z7;N5(c<PYDhYg+9WM$BOb0wwcAZ1{{cms3M7bnk847Z0X_Tgh*S#AH5^wv3`DEA)D
zHxQGPldqQBbO&AS!2SWi^^;@o4jNflH2Nu8Q9G%JCnqTa>+XChv{N9eOv|dD7>1B+
zV0Vo|TgAT!fg}C^;3a+o*&?CT%0Ff7JGoDDRR+!jj&mCdv0qjAbLX%ZE|eEDK$Ucj
z?SE@8(Dx$Q14`da`&)D<7=p$QR+tA((f+^50?)VuJtkG%Cjf^8)kom|p>`(-QI?{z
zs7O##GZhv#O}H@_9^XuY55qBnUNT;ngqj-e=I}3)E!c5(V^W3z!v}Q<<!Wma@Clrl
zFNe4Y%JJWd9@KkH1niJ9Q!AGk6&NlB8i+~+GJhEQGyJ;VJpAaBjZ74&2HOMIM@YG4
z)6oS)TFG)2RV9D=hT0o}Yq+LBgIMcOq1Lp|tLw5x-rd`?I%gPJe=zk%Nk_*}hBdyV
zpbi_L&dA7n^as}8-u%t7?mVt&M@3P(n;qb?wc~?-9~PaGqMxH*KKVtbtC68~mDj|p
zAIMk@3O&>OPxtnAYf`Tp4Vfn+E8za0a%=$@$he4(NJG@BGI1X7km`z+<!;H_pWHG7
z6r14oX+GXv?9qFBHU}e>%Uw?W9a{}&kxObtrrZ$`3ymCvFEngAGXL9|->pHXbw}^@
ze1DLC-KR>ykAsU#zX+5hAVT-Utle2g<-udGlBD0XaJyCpKy)8r*mLV;{jl0sWjQ#Y
zo(r8VFt<i+3I12L0;BHQLgvaB5`@LZntj0K$DmdBGSrQNA#@YHQvU+CIBK1pPy={k
zPPfu4>B9GiS-gk~N$D`Vzw7|RGV2TsgUsjP>L&si0uN}0jt8Yv-J9%nkpS5^m6cS_
zS-wVv&N7F?j^}olt?5|{J(-hclFgGY#GW{LKEFf?Q;)gH&?2fVS1k+T|26spnkuoz
zk+NCwV%<TQn16Uzpsd(<>wA3lhbuE9W2EX$hw|uxb;Cao*5r(viq}eq4bPwRe_p}k
znQN#5L_5BOsK3@F4IfZIs7q%`mW05g6Q(kr0Sc-{LTS#tAu{Eo2nM4LZO+%e^#Jd-
z;5d11lnU61F*JEj0zz+xb{81}@s6^?NW=r51-qcv_3c-f{|KD+;^HpVR-Pzsg_K0x
zv<QH~pqtNmrD<9n_VT9zXetJ%FQW2eR*6jccP}1+qVeGY%Hwv+qlMvfXQf%``N_Fn
zdO)#qAt>EV+W|=Tlb~?8`~D#@nx=!Sxw3ow@I!oJ;6{9$eCJD6S0A2desDC?0SqcS
zdWf<--#oOWqa&Zknl9~-d2i#t%p0*!HY(9wEvPatzYHfql|br-fczFWXT92_PN@a8
zjGPNMXVPVymRMzkii)ZpGo9TrRJCR@-*E)DxU8(ZwJCK71$d0Sv}%sqS;#GDCjI@{
z8C2v4^P>3lcVc5vtLz*J*3t50A-*Aj{my>jNtp=@4&EZ-CgQ_342}|nwm*s!S^xb6
zbbF0v|JBjP`JjYi-b~&qve6CFl86lLV0=^q#CkiF_l`y7mhm0$4wkC*l|yuXIgNa}
z$K&uy_cS9!!Vkk_tR7qToK(=+*z^s@YHzA(&YYs~ALGx1BEw+&B_0sD%tAx+S@?Ho
z!PyL1&FRd-@myix*FB)>>Eu`LTWCL!s{ViDD*?gQjkDG|NG;{eCEqjq=zd{1E@$}z
zLc%2C{=_7L4y~?^=OrPN+mxicB0AjV<)zC#*cr^p&JNF3CtF|n$nVgYOUx)R772qi
z@F^yjJ>y(ZInPB~1#V#ciPTC;51k5Bt6(q2`AU!g$j;0ctm)B*kYQkVV4!;UFOMSX
zm?wpJ?U|~5%?fvlxzv)+o5}M0iuQ`c)oDO%o0jeiMW;O-^L`S!>Xa>W5$k?gx>w1!
z1tD5$7UeZJtKE5+G+a2LaFIA@f<zbnNi{p`9E`pjY1Gjzsh=t_I!O-=UPh0=MnJuO
z(Z&G+D&|dYs-RsTc`?riv48`GsnZ8fmOvt6VxiFhO+7@g!V#u*Fgx1RDX_Dv0Z>OL
z&gzpprlp<?*NiPR9Ukga(G<roM#E0cLYdE&#pPd8Ln8IhF&myN(0T{895;)g&gC&@
z>(K~zzt4pd69WQ=vQje)$&f_j#_RAZ-85>ytd&+i$c&1CG!s}NyQ{bUt#w}TVAyD;
zfezq|#Z|=+fk0O`Ks8uvK6v(RU7TL<xWLqN`!cviU`_HHq4aLGE9$et#Sx37a3v01
zI4wKHu!YCf{Lan%m|P;XQ(>;Es6UeW)0G`hA&HUs23xT&n<eNY&(^ZxT4#V$dg`*)
zozD$5fBm~i`&Yww6#^8oEnJG+=Sg;qhpE5&kHL{jW5NmDtO*83i??%t%dyJs5~oa~
z3AKr<X|Bo^joorkNN>-d-|a&3b5=VN;7u`E7eO0igErs$^^NmvSGme|Nr}3E=N&G&
z;?mB!w2~_)4bA@eltM7DCGi{%f>|9Mz9zFwOSbpzR#I}uDsHh$ol+|?^S0`|e98Ac
zJ_pti;~vV9_rR8fHd7On`V*a%(esR2G>+46d1>mS|Mxf#3lEt~l9QkR&a%AcW;1T=
z1<qkWDtE=ifht%I1Nc9loy5iIHzW6)=VkT<7e_l-eBVhD8ODSx!v7X)pGzo_6&iKj
zZDDbEmH1oo1rYmXoHbQcDd09&)Ypr5hjZ9O0dxx*7LCgO{=Q8Yf_JaZI{lu&*TxW}
zw!nYkjC%mehtsjAS}akHiP2mtIT(M!hl4wX)Xz4?KNe$Ib~zUS_EO(y4n>k8agG}i
zA+O9UYklVz6yDisy|emo?(JvY;n-O;Rl0_#gNcbbyG20ba={Opvzf`V`gF>y;TG4p
zrgK#HK=$7PA<)hx_)pcPcAfadT3Sop6#5n+$;_fi*v(Dv!0ZS%7+Fg2I#|7PLTdlA
zsI(N*T8g>-#sHDP?S`=NaB@YGyi_S1rwuc)yk9Il7^$vltEj^C_o|Q|llStD%Wh5(
z*%;XX4w{*73p@hChF#Fgal>Q_7wXgHQOogKC~f7R4qcab^Ig5kI{@?}RRISN-sb<O
z1-|O-D;O2@m709y%|s?44eOvZJ67Ww=~d_E0NM-Ie$cXZ87S5D8)tKKdm~PM=j%v`
zSUm%&eUS@2N%eQjoDifDcy;%TAb8Xcf0^5YDXWg~k7e395%3v^dw?#5tXy~$v6(Mg
zYBvq=Ge{B{TYe7*0mg5>2O<#Cb{4`rB8(`N58<9vL1WnbJLd)c$K|11Vxo|Pj7|-=
z_qN~@snp&AwiNZ3-Go@8%uw!lsaRJd(K#nEA8s*~B$KSD+9^(dsp6&S(u~Nxg(d`*
zRZ(ey*xYq#TF5eTx22N`uuk9WmrM|9g%V(kMG0l!`l`1Qfwp*ghiOCBEUygpyia(b
z#6*5wFsk4{vFEA@=QtEy8_84#Wz6-8yN47-2S-H-C;RKxN%tqXBVA@oK0BWG?rx<X
zD>9P%wkgph|MLW{_MyPiK(4okswF8gqtY;-pyOG|1%-Z)RhvEk1aRt$=3f1UT0PQl
z!xwf$z;m9W55VtX<MlJ~_3CSeR1hi+K+;G%N1`?ki+61#ezQz4=NR*5jJ6yAU*S%O
zj;9r<T1=#<-}w(}Q*{8#RADk(olpL%<R<dLM+QhxNTSStdkc;Lmg$5qqxnkm1cWX~
z0Pe(xSU3IWYjh+4MD+j1U;n%1;PWGEqOh>=`0{dOef<>!2P_<dkV#(?1EtgYSFL)H
zp8Dj(`y+p5hF9$c;EDkC4>}PI;)A7SQK_l$=Wrxo_30nTjhM!sVr^m}6p<bl3h&p4
zW=8TY$a<mrx5a&rlMb4JVGC%+ot>364~V!{j4{)CtKdv;kN?jy_X^g(o80K#(wO<B
zph{TdZUUa4SBmM${UZtNJ{aw+R<}~ZUxKVvUw3mGJ+G`xEwZbHTzJYnw_aJ<FeW7?
za3)c0Y9<7%)?urZHlc_Dd+8D#rxhML=q4J5Y?=o@zuY0gEAdJhTq1etX!D`%FBO%W
z|Jg-JF|jb~EJ+A!xF_*@7bR$9M3zWDhAuDF=r6}btfi&9>BhH@+kMqfcbYk6umt+1
z#c*K9%j#YmoWb;xy{b_&QdP$A!{xOJk4K8g1Uh*4U2SdsA5wiaVCmVL8(<GseIe%#
z8;(C4eft*LNBa5Wk1}&pAt51R{<|Br;r4TOEe@wevNDZ?_m%#ii-SbZ#TRqd^O}01
zPMDDHj0-}*u1@<Ur4@gMQ&`3;_1^L7hKR?>q-v$cWU2oE@{*B(AXlA8aJ73F?0}d{
zqj6zZ+oJI*<?Blh@nV}|l-h2$VT?sH1ZG)OARwHp@oaF2$>WB}zxZTsP=WZD+lVF#
zymwC*(j$Ie-{<b1=?1mZoC&j~uEb})b~<63?xJFW0FMK2uEyANyYq|#=+VqT%XF~0
zyzmbz2Zv$Lpeo?OYdO968<hq|NDCcj7%L_=_}|L<?~SnFth)0gFo<?a3x#1_<ZUO2
zO@{eEo@4E2+LQnA=hM%U481dfx_LV<@*L#-F(VgIwaZgeA(P9v;M6q77pf$*$!P{+
z&9&gLh>r_HHVfby+b)FJ9QiDMpZqI&aH%Cag{f&V=gIHKZ#r1IZl|sv2sjlwyKqKY
za_hPNtt2CX;t09i0G$vs;PN1GV}C`*9E$kUr_R{Xr9t&lwent|Zj4S#qx2<#pO{dj
zfMylqBk2qZL8AoP^pMuAr|>{wLN>5bw_QALL)UlpX_4tb{9)}{J!}pRX>MloEMa|5
zquPM{?Ch+^s+PR56jpH|^^o6oU6+c6rpx{K5#|jHqTn}GzBVGB>tk&7SCl%?8VN-%
zOHPK}+^Oijz=l~*NXn9smJZ!=HQ80I2=?uG1Vb)59mx7r(s4P$X1Y8ua-IcuS;~o2
zJAgrT2TX?BC{+D=A%JI(xH21xT8g=Uz7`b_WO*~)&X~z4D4;E@=c-TuE`#HRVuf4)
z>VvM8XLejbqxg!s08k5kMT+i2+V}vS<g*@2GXw*t-H-pzD2WfOf02US1bAbW6}7Z{
zf(X2j4ST}_xAlsWgx_{P!QlJNK0iVMc9w|le3c7nS&7l!EueK`%w*6_6^_T%Nu#%y
zMnO(aEZ5nn>;1^qO_`s(bQeg$%C54O14CHr5lc~AR!~2k_sQji|7O3`nOW3=G6XzT
zyR77Bj*{uNFBMKG0NEAz4Oj586Ii|iqaEF{>kd6xC>UdaMUfHiH4*^m+i;v2kIfxk
zNtGYskc&Hg>*lPVMXJa6{|>jqL!%Q%@t#r5l<NkY{=E{j^5QysPg|w0T<ppr%-d$O
zUrcET*uWBpat<8vTvj3NyvqFT=|!})S!sqi*5)?kdN--#4qL}|L_9tDp4^^Swi*?-
zjiD_n7Zk#Qw!$}lXdvvhEa01IW=JRoeh|J>aJqEg-Q`dLvjMcb9~Sy+crqLC%&PpT
zl@cos4z_Uzp~-QIyIFQ~j=cN!eg4;0<5nW>1fzM8N<B>#8;u%?2f=&q{jBMs?Pd34
z&wG`LT*K8LPn?gnXcl^Di2Iyp{ayL+YWXUCW_254VeMT2wx%vz92f=`Hc_Ol!^d6|
z6Vh*T5f=wFNAcgy@h{P6`@tafq9<kP+c(>SVJI433%O)fIxotg3T_cVbflxU81_Y0
z!#Ku`PS@m+a&e(-B{;@z<a~2n*cxk+iyLzEc)aug0&+C45)a;{uzs;;`w=MKXV2^w
zPf9hFmNUzEH)?8yMTi+zvhTKs|7*TJ@y(TV2QvQowzuE@zS((|NoL5hJ*bx2Nlv7t
zlY3_Ve^JvsWG}*U7M-Xz5~xNb$c@Uu#C0JtQ4Qc0J0t7xtd#R=dMS+ZNdBPHfMD{Q
z=237!Vmf`}#3G0G8-d#QQ*wLUQ%;74Z&-7*gWzMgzgI66=T_*s1vb{tR<01Osmqxp
zne*^047{g~BXcl!F-iPaG1x`)AwVPA4^bEc?tLC#VdBgZFNnOO69u0J2Lw{puuy}m
zFMMZo<ALI1PfR>|VDjmXxi6jUyso)>@Cqc?_p`jb=W6PGUc_4-q&B@E(`qo<#CrO)
zD?Z5CsCU@!n|v$7FED3$;s06)3%=03{7G);i^yfY6cWL^t?(g5MOaI9Y}=+bsy@T6
zyu|BoZCmj-`Xa<F%4*bT&GsZee~uqidt<4`A)8@Q>P$*OF*<4rn_QS@*xaH)YgZ@r
zjD(+;->K$MYq)S3TGWW0$k#vGlG}~=?@0q?!pli3m|U8pHjfefYRa384@E`C1D(hR
z5d?)&jr&{A;^yqIeU|C_SZq}=^2RYEP-SoYvbs95e|%$<SaW|Gi*+1@GF5qf&e5W@
z7l4CI4q;nTSxs|Y<nuwQlneU$fUz+x`}^LL4VBGnGtK|$Ze%Gq2ou4GwnQI{6W()E
z$l9R}bbP78^Lv+{^Rr%Rbnn&)=uzlz1fpZHdq5#_iFW0ryHa`#!WD<2D6U67JP0pL
zk8ZzoR4lSeXDo!(I&^_WGJ6Y+B%n#9fjxf`20tRrjm_+}9)QQk=8`qijBgVDH;(>t
z58QBB%Ze*VVK#vda~<MVszZh0ZuFl?m`&#SQejV>w)k0DF=;!x*n*ndvu`V)RKNny
zkzZJtVxm|X%z_7rirX;%<_t)j(R9^oNI%-0$g>%1yUwZj`TH*70uv=R7LU@KS>u<B
zPfF8uCeOGG_pg>^q(Z19LmvL+I$5|$$PB_)%k6RcmlyP6k2POfq!=~s9&pNJc5<vR
z)CM^X?Pc2bj-B=k5X439(pI}o8<;Z`WkxA`U%mIZ2j>b(X<tgSva)KX=yEX7Q1qVu
z=%)N08tn?P;uwGFm<FHez1-BOmx@xM*MMiP##7Hxrsu;l#tjpeMAy?Dg2oNOU9W=_
zEGI70fr@+f5Kn{%Z}p1M&gOx}a~5${dlEI*)LJ0RrxrGohV*{epyRzhi~}&7`ky}h
zdYq$tI~I6uyTtt?11LTd-{Cgr=S9kd6YeGLcSa>tRSN<Pi~EFoggrg|GUTKpB>-8&
z>fxN;<zga;Oo;D~g@l;c`g#~+r=kRY$ist24L&AjRE|gx3Gd>bZ0<Y$`$PLv-<#^^
zr~4GXB@;?V+;wDI50X*hhF8}Ru$)tl=K;|Q6J`gg(bL{o%ihNVz(!wTGGr*8HSB}K
zyR@#j%H12x2*8ZDPr{Gkab8ZI+j5JKLsO8KD@=|6G)2*XP@+hH@P+h#Iv=5;Wjr?E
zp)J+>eMM!eG55t|IOQDuYQg%ahV27h1^DcjU5)JRgpbcZw^H_niJCH3)K#RF+A=&H
z7rEZ(j+5(B*Yk{MZf>@04-Abr&U7U}yS5W9P*QT6*W^$cY*UMyq0NuGJ3-m7Ic}>t
z4bw}HxIM?TxH7P?g-Kw18xY`fcuFaH^0}@?N-6|$fkxQO%=|EU8L8{{>&BEr+VAfi
zA`Oi5m+w_scaiQdaiy8uE<`<^=7DnL2BL#=!vZdb8|uxSu~gGCtd_E}vR}ba;>H!v
zao-(V*rEPUaE*YHGCt(G8#NAhXMQbNC4BlNZfKADClmm;PJPVqymIAS5AMn)K&Brl
zomEv=m#OGidg<OxD6}nG5PF=%OnQu0m!s{Q7CQ%^pa(Orzcv*$1NJju2rLUl&Kd*$
zv^^86dpK;Q4e#UB##KXk64%LZk<&jg$3Wi>31BxYQ?8(>fr<aykor3Y<%P910=h4W
zegIu4?C#3@bVGWDsZrZADg=Wcc)j9{i=E<$j5(|5q<$D5pJ*_k)K^dIRNol?uc3E=
z=s(E>?Q<H0>{c`}a=UAQ$b-tORMMa}cmn89Xw++KlP*lC(`=5v7{(aV*e&7LH#X?M
z@Up7BmBe0ldHlxJz~wAbsk(5$jzLNR3OYrjNNWRu++?Jkp`+&#H!n)|H7y2h?_xiv
z@JgYs7!IH3tpCi<SK(zn4g-Ib5uA-jV;=cuc?>k~0B`10DKZKQMQ%1iSdx{nzXL^7
z2%<!h#H8wGpBJEitCdqnOMhW5Dz`0Blm!@T-MYGI>&!?5T=qFzmCuB={o2OFsMPhU
z!yXMrZyW?P{Ugm=q%G7{Hf8d<I6o$-q(uN(0-!>*P9?}+R$y)(Iq8r<Jqu+IEX03m
z87*jEr5{DG6N?Dw1kHN0<9Jk@-!emC8P^T+6p}mM6+S=Eh2wMd>Z;)))YsQbYs^SE
zrGsckV;6v2i~7wh#09zKASWSbiQi7ztY>!W8xQZjB4U)VWh68-8day<u9uJwIk{<s
zdCBp&TrB?=S&R?V(KH%IA|;#($3ffPH;-UcC33V+!eT;2L=yr)7nq|Pd~Q3F(t*s3
z`reYM2+9EPEj4aLde1q!9UfQZpqZ)j(dbw>&#5kWNvX+82aCJ9Cg^zInF^pGNyX34
zgaBB`I*<)l0~AYHj7)$2t&st1BMwj_Q}d#JS5>NACU9BJMp?Htsa|}aKn$iKGm>p|
z;W98FskZAOIXJKddW|Vma7l~E_|{K5mh*{U$5&&vACYzRJ4FR#Leo!*ef-2j!Q034
zkx9KlF)?czb#~}S>7GbeOU{AwPNha|S0G%cD9ASwlBO$~Xrk<YUcb=Mf(@`Q?5}*l
zw)NCB+j>=3WIfplm!8+u*4x%KQxi*uM6LwV-)tQnh)FtLA>fAETFD~`&h|$qVuqFr
zj!!$x$D#n+xaH5v){tA!ga9x+A40>1s=hv9I%TxjT3|K>C9@rfYdfsnI+YRY;DBDB
zfW|A3xe<e+zf9U@jES720#`KD*x2jK1grMq#bZ6B`Sj_7*xOWj#n6MN8+UVto729m
z_46@-K0E5d`=wY_jT$rJNjIdP92ogN)55G!KP2w)*iN0(9Q;w^6~{_j0xmN;pwBFt
z%%M_ZdaLlIqO$;{2JlGLE&y?qo^%Oi?Y{?AOHW4{hN?}wPyuWTrONa7(|w3Dsfwt0
zSV&Z7C&{AIy+sY5g$oAzc6_pB+CTO)$?Sy}uDDSihsGeMe7ab@Ko$mx=Mee+Z{#*;
zHm|;3ZSYu}w9T2@1Ak2o47Q{|E-5v)`5V!&I&Yl$d#>8u@Dk(!H+`mY6ECVeV56(d
zN3R(B*LEsKVouMp9K=u)d7x?5&@iWF9h6_PP}f}9x&5po@V>I+Dwb7hk(S6}acBFV
zB|fmKdAX%As}v3`O?aR-?KWf@?h9*kQZllS=J|9-hdjrffOT<+JEQW89#JNWgcIlN
zZhPW-!b1$=+BzsQBqY%z_ILqt!U*lwxF<B>CD5iEJ2y1S5f{Fp%JTcap%A+iKAD(A
zXCfV{b~L$$or;v@9ITsW<Jm$a+_|DmH}xRnyrw2>*W24<9%lkCr+w<H5;Tg>e@G6%
zYv7{9g1@O+lknCq>6=lk!C>_M!F^+0Wc6@|?fkW`vLmwnLqlEZj2)fW#t(~fQG^0t
zI)AedI%Zfpx5xh58D1hrMoo&|Gjen`zLc*OmpKS@<pVbREFpnm`A*=!_qXut>JJ}D
z*#q)#&W2>HgJG$unkM|c@Wo1wec*<<zunzeJ<)%#V}G<`oWjLuo(*;uE=s5ZlY%aF
z!GbSfWyP~u)lcSjM19FBs-4oE+0w@SFf%okot-TyI%v1(IE(M(s(A-tDxK^r7B)l5
zuV^u(5c982dD8Xrz5$?c&R1gf$rN4zYgvwE3RHJlJYzndnMy{XTv-26J^^mr@e_v1
z&193EbKi%$40%gW0Wvsua6&}vB)kPkC9>N;*b=nd3_1D_$8QlKI1Y>K$%#%3_-XTh
zQhd2A+1|z|7M(VG<i<l;L$MZ5CJ$9tQ6cT960VHRcd#Z3GBRh}14YJ*`xh67kcfJi
zB*Lp#Sb~|?QINtZ8r<7-_Xw2&psLHI4%XJ>q*g5FxBktN03J60eeP33nVdSr1T1z`
z)MKU7Wwk4TCXfdmIXnBfK;@%R1dAeny)sp|L{=|mlWd8CNg(Ag>u(PR=R6AI;G{1T
zYj!66qbh%$MTO;t%&ja041?QRMMTw}^SiZf<QE=&wHXU3Bl4#1#+iQRugb}<@?_)Z
zs#W#EZ8ePw0D>zLH|Mo;&R&g{HadG`w!m|Wr7itR4s<7j?8OGh=<(>KzUoT51wy=)
z9JATcdHwZKWPn*+!VB#2S{~lThWbdv*OlS?N;>u7iv<vBg4??Df>+;?Z49gM<Klz!
za>A=Wc_j&aiTmd4XwoaG+9#7(5OR`b(N+DG)-p#5VB3fP9~}5{W|QT~QeB(pIZJ@Q
z#qtWeyFdY0=hUP2bp`QE5B01Jm9OJ9;QYu;=u1e70Rn+?yn&L*MYsn$zf;6Nc$BTK
z7L?O>-jy!uRXx#;zVKAf&f0L}9S?q<>A-76dL=|2nn69IL5Yfq+t(0I0D5wetC)YV
zbo9W_pBS}83UhGixiXh_=#T?a%)wzH!ZPNxnp%&L^)%d_U7ZRm<NoWDW-ffhum}iy
zBwkQqJm4bB2~2~rsQ68dZgB~#p8CG!oQif7a<c_o5dA`iRhQ1Ii+7Vn{xVd|Q{PZE
zE_Y3%*E!N-MJE^x<~0A5^Qz*}g?r2a_}m#wM#&;93)D3f3V}P8yPw%bjd<V4aT^{d
zi3hOQKD`G*>x)Xwg+={mTY(%A!MD=N%CsK*jCWU3LULBjCA9Vp^;6q`*Bpzt2nim3
zP+?`x7q&@`kMXq(TE&9~s|lGauseM)F+LYso%gHCW^J+D3u&(nCg)ePP%C_9d8RYv
zw63S;d(?H(n8d{3o)!8k<vx7xPgfaS_y7t@V!>--ZY|=d%GRFALnzO8n_P~~Zb4^e
zhO3~V5-_K+a_#R6swg)XmsVm`QbMgVsy4jOkCX2T-}@V#oV+?`bq=KK!rN~T_t=l|
znbrqIVNu%GQBjwQeRjCHwrCj}du=+I!+#06vh6GeDXLEVsJ(FcfH#L}-~OPY;eJx-
z-9{vEqP%*2zjo?!0@VHMR|{6+^|1c3T;#9|fv}2c2<zV@rNhO6yaKg~8^o8m7J&cJ
z4##0b1rldh?ior;ORMd+Xn<|S-Z$PK@l13)Gf5%A3F&$TkbdNjRh%kSnjH_<rLG1j
z=HL6OVW&eiV_i)<52&Q#;Y_F11-3v8s(RV)zw!cM9nWC?4>-K2vLoeG3>D%=M#*Rf
z^;=@ET_!$DKLi!FeiSJbS(~5`qlC6mAo}Rpv8Z^Y+wG6pK3>l1Zw9aFL?^|^&)EVl
zT(wI2TBEa3sr@4ZglXyUC}9<&#*iqUqvQzS(iO&Wj*nAHt-^*ob@%k>AGcAyboj9t
zuKA7^^>VCxk@E|Ca%x*K_@%UG{T&hZq+_&E^<0ueq5$QW76|S6+`|90Vn~h$SeY<8
z4jP3kE_4O0#jZTyJpTIC^Bygtq~zVu`#n22q*t=_SB@8xUcOLw-|wg5SPO!Xx92-p
z>%cA{XggVz2E>Y;aiC$IY%U@iwbay9%LuhZJ6_6_XEl{*lXW)_4_3AE2gI5u2Q(nQ
z!0tBYI0m`$I|}`pog%EX%+UB8RgSh@dTOd!;Dv`MU}|F-Wv?6xz)TN%dJ`zK?&c3$
z@V%vQ+X?`!!>YdcFNn=)yY2O`cg(XZC@Im5fv9eYQFf<g?7kT7-tO+2yhH<%$F#rg
zXj}hOgO5IMwj6EQ7Ns-%x+HywLIs-Z2F0_#q`>Ir0-Fh2z&`5%ETf$GKpkF}f39{K
z=+Y+lmhQUGb+sn!I`@Dh2fZd1)$p?ip8ashixW8Y2FRsgwN=#9ivqx3Y<b>WI)EQw
z_OaQ<E?k>ZmS;wiQdW+Gg(38Eox#><b3-^v_2hYnI2m1xQJg-_FkP{Jm?F>fNSE%t
z%=JQsvFR@b?eF8X0#CP8(eyJhBM0FgU_}_+<GkHO8xdIt@yoX|)2f%fR8=FQlJ;Vj
zvq`HcuZKGdphpiQ8sM)MMZ=(N+=QJJf~o&-bGjY@d*IttUysPlJmJ%1oasr>adT^$
z%xX$Vr_rcp$HMAOVgqU=pO`=?DmE3=ktJAuUKIi2{+`w&Y(&LGMBZ4nT_P^JY?O^)
zIv(m=9LU%n&~t?DkTFy}wH#v@0?`=txz^hX2j_|k8X->JaDdqH{&N;TeU(~IU)dLq
z^-TAphfFYSW%E0rD$Z+_`TX^9vFV%{$lm(J4%t=^s%ELP!QRHb!qN}-dITjTKIv*c
z1a~GW|H)p@`}uRC%&ejZ*i{fHAiijtmP|0SVm|<g?goL=fpUOsvcG2W%?k-pHC9{f
zl;Ni2&<eQGDfr(>YE1XXpfMTsn}p-BLB1dfZ@fE@jwNGT5M^Cvb8d;eW04u0Z#J=2
zJs$4XheV-^U4Cp<a^^~9srLj?Bu8N}FIz<6v?Y;EBXKYe1`&E$9Ox`;^hI?|cij68
ztCEP8n3;Z~e;v0rw*-692%(rw^HGy5MJq@G+K=Tz!i9?6YSBN<x*ee~!>I%|b|%t(
z>0aS<Vs3XcB;BU78pE!@mGmx8fP(|cdGQvL<s<zFta`<0-_J#*shJtWk$rM3UI#oN
z)cWhr<t;1pX90lmB}y}orU-C6E8N)4i(;~la8tWTnXS+XTG4Y3%TN~j<)%XntSO|i
zSH;V;8t~$N9-8NTYZkOLQ>|ngQ06)u7dcG*UL3pykM{4P!wKy_oDtn4zU<8+;j$*w
zb=$Q-6}%#Yd6e-EfqF|gCOQUaD^EPKRz3<A8vlL!?YkBFI}q<ju^x01xz^xt*tqB-
z3?A><435wSgY1wu=;$+^I-|f=Td*wGe9&25xyvz3qLhf;!E17k4A=8JqiIp0laAk8
z@@pq)zV}FCUYD3rHf)U5REPj(mK9)iq`@v8o*Mj3W}B4F@@vx3;g!N`@aXq5=Svn_
z@EgHa!aKc(3<*~N{h}L|@(wq51tmAO19bEogc@3?<{{qhZgIX*u4^cxZ<j16Yv}TR
z6d~THJ?h^nD7d9t3FO)Xw!?tz!k!*fCC8h!pn2DZ^+Y!s2NU$t$Lln!`?F2Xo#Bn>
zn2FiW9@g5@`udqOAqOF&e6=C7YMT-Ok95>|UOKMm5rW}5t|<UtT(F+{a_;bwWODD+
zI4nlL7TZn)WWVlc!wXE5n%yKgL0*RdZAsi`BWG;(#bU2IgKzB*!OmwQPFGhTGKIb$
zkZ;O-6R*%ugCzk-{kQMil{qf@wFQc0%#oe`A;yL#8OFzm0MRBcsu88r!JWShTb39G
zY(Gg+bTF@vS5~%JMP=TKefiSlz@4=-mpESHR9*fkF;lKXYEPi;vgS%rUte3kE?t?$
z<W;6qTHv>^kP>Xg^h$-FvwT@w*q#xA6qOgqWS@JrQWh_9;V1UhZHWZ#c>KFZm7LpX
z@(LE35E}&5yma~bA66~9doP6?Wiwp9g7V?M(n-tAYyh_6p79(%dR`z0kN<8LZRmK;
zILj0gGBy!JdqPE;AM<r5CN3>3U}Y4={c+P1XPlywMEovQatCQ|^C>ns=LvEFh&U#Q
zjYVUY!XYpt2zFCY`kPKbMkDU9TlyExfa>)@BLGk|Y~qlDw~6^^FX%Erqy3Y5D<tta
zh4&fSqRu2({u;g^Ha?Jj&qkyXKxYpdqY_)tW1?eXs608_yFw^40@37omq&|lii(Q5
zAz|>seSM+Q>^W>tPmd~C=@;q59eycQOvFsmLOLo*H#loT&6Iudt?_ath~(O);wh{L
zQuN7(50K+OVlJfPt`{I+I<f}O_HDrB0F3^thxm};1ypSmBqhh@<(6)Vdp>zSJ9gt<
zWTNEYT0|#9nDkc&a>IV`LWnt=KfRpQGk3+UP;dobau~IX`HT96U^aMIYg^#medi9@
zIZCG`s%;2HtSisap&@a2cuJ-1i6c2CKl)Jjd`4Rd@`$)#pIGBJ^w3Vn3jk=XQHwdL
z*DBh}wC?~V+7+P<d18oFN;JOdgufiQjQ7$|nwbSaKJ!vSKbXs&(5<kO-*1o%!!K^f
z(-GR724V|l9<?zsB+2O!V(fyp{qo6*6%;BX(0aB3mv~u)h$YhDik6)~;u;VH{exmU
zjR<w&ocwun7E|ZzK`4A!hAYoxCKW$f;iZU-au*UJ-vLt((yO@vmit9(bV4V-befvs
z^5iD*K>6-eBWct6kvi7<#V9bG>>7Q6&DHaTbha3CqoO5)fSCJ>qV9wknJBQ)A_IT#
z%t1SFWo`*BFC)R5`OrWkVwQ8gf5Y}niV}o#8LFbLzHzm19J`^B_SfI#GQLp+d?_Up
z+ht}hS>zl3dKKw}3Dr^#F~KO=hRiL@BmDsKvCu{WdI4~k&F7J6D2%T7M-N)oZGPVT
zPq2tQ!vphkpAf`)#EGO@m47vUZz_eIK%r2rb6C9DIY2=}!>@V-nOm<HU}kl#NgNvQ
zWI&XU(1=*NzZt=@+`W5bhk!uvl@b+FfqTt`RxKdUS-uSp4VlC0<C!4y6mV#S0;0=?
zBL$vzJs+O0Mp@ZQ4nj95!@>IB536Aek#zr9FuxOK!t$$vgrl~UGLh6QrlHa+QJ_f-
zU5yP*3?(6_K`6&jFf~Q@_m!Ru4E#kIFBxHpktQhIwO?1Z%$IrU%U93Lx5Ixl_nk>d
zNTfIKIpJ}+_5O(Oc+|SRwF79Vv|i2}Q}eh7HYX-|7q>F_?8c-MmkwA$mxieeAMMS|
z&+nZ(IM`j<n;K}fGJu@)|9G1m%vi>!+?F*np3BG#?IoyVC=0J+U6o+{+24klv$AVA
z!3(o)8-ze4f`Iy;4>A<Au-cFQdJ6h?qD+#1p~wcUEWA@=_=4X4L0uW6vah#(E^U^R
z#TK%>hUyOL>$Qt^vF<fs3`0zk5rv|hZ8O%g&imxsAF@5BCn%u(@P@4yYqrOCGio2S
z7QFr2iByeDZJzzM*Rcv*nvjk?)UAt#9<|;Qfb>5{02~d|E}VZp#6&xMTS9SR-&|;c
zm~j5cPp?MVj(N%0Ty^82yNkabpxQmzSd!pb>#KJ`g+D21j{^xPeYVlJ&<6t%<!0A=
z2NQstyv4>$(Z*e_zDQ5ug?h^zskl#jcM;rr3hwagib+5Fup!SJH-oEh>g|gmIe$RF
z{?A7c78zCwGMALb0m4}(Y_0q&Ves8RzW3JPEEOfCgpLd^5THg%ua{C-fji%#zjcG0
zAttjfl5bkQ<}`FwtTsIhGE1+6h>>`(05h7*lvz0HS*(<l{KV9~LD7>?cC<t*#Aa7E
zR!?ds#J4p1I|&3WnX%r1*;RuT!>Ff2-u%~*K)`;mgCeFDys*xF+f^_`ULrFKO6Fwt
zn<>|lSzFU@xBSxL^cW${;4NpG$I}0IQO>C)VQ`S)q?OZ-I|G!@jSJPiOG8bsOz5EC
zwq5&qQ0rV-FS>bg@pM#<e`b7_d0_Lj*8X=(#NZIaWN<g!M@-Dh?E}A$0xGgf?{M9u
zRywhv1tI?D^N!DF`FEhuv+6^~k7YYmwHaE}Zsj!x9L7hT!vNSF9Ae|q^n%vb>5nXQ
z2|W^N@SF{r^n<JG<nO7NnT0%Oe0J5PKe$hRQB*8G3TZ@H2!SJ=a&&fXC_zzjd4RT@
zJCTw8j3a{(F=DiCcC1#4g4c0!>)QHuSR-ugDnW^@qqHV%77`)%>*}kA_7k-4=o=Eo
zrL#{A&*>`C)15ccAYQBfHZHe{;R$Nnu+UKj9i6sMc@5Gbg2<;6latbE9M3{aH4<Mq
z9j%eX{L^kMJ~F4Xv1k?SCO|4VR7GqE0Jgem7p`=^`?qZD%~N%A+X8Irz0HkY{Xp=;
z3>NLdhWvK0?!x^1m-O7(B1#gdUa;xU&Q3J5R$jd@)Gmm~*AMi~i|DrI?6AMPOCkT)
zvQD*l;IEK#i<ZYF?}HQBzyd!<@%6-(C22#8AMcS<=E^8DhI7%591_=DsiJngJb6K&
zu~47pE?DFKnlKxQe@>QEqQD-qQx1S@Ca-5^aB>aYW>_yjRL=J2JA(Jw+@9NXj6!Xc
z!bt-ny*#1^X~TawbY1D_IbQHRKSV!yUJyk{r~O_j4dZsrm}sp#cn6asla|V*n&C)M
zJ~$}NZD&N7QVxe_J(+j3_TLv80xCz8sHpy{qtkNEgsB|Pc5n_)dXqFS1PKGMZ)~V5
zr#t!``{`Fnna?&#8ctX#oU2-7AyXSgrS^)d5n%?o<=XasR018*cJ|+CZL=FBG6cM1
z{+?81yBMdQX;018oeX(HOTjM#o5E<;TfF7t*}}g3@VCt%uuwirarV?!@#E;*H%-x8
z8Ju3Rzl@D+OLXJlRWOhHjE(sVv*@&>i%GM7B3ffM;ebqv=zW#ut_IL<YblN$Q@g9F
zCO?aWv$ht>p%))$1VvcYU<tp0M27gkA0GwM@#lyq+&iaVj#Ax$OIA5UNuvmj@KJqK
zABtdhe}F}Tt_~`^jEy_7maoWgvx2?qyzo7<-hcR6C;&!-tCyq|;|WyMu_PZ!Pmwu2
z?V2({A)Hhz*OXK8S7;^tZV#=hK0BV((2;i(P(8PbV6bn$JjU_YSx;NiurK^-K5~73
zXR<<%c1<{lD?a^WWqV#QlIf7w1I;XTh=QZ&rbohiBCDsRtSLT%ekcDB+Yr)MBZNQv
ziwR7rQiK=3ZW_JT&5=MhgIlaES>`)63g!A<G-uer*yp1@o!+*`D-1hMy!21AlIFB6
zzsOot_1C08)f<c-aXCV3<Yn^*L&Gkvy$^HrtTo0AI?I#}BjsfB)|Ck-235^>;|zm5
z>y3AY3(K|G<BW!4KWjE;udR_1PVB8iNlW365x_I99OP7QP}qu>zOQvY?%2Joa~-UA
z(GcAQ%s+449QWX97}!OFcme-3hTZT$8mresqgVa)v4G_4le6x;RSP)a=HwCQ=D(jg
zWNGNkUw!#E0cyMhj8wjV%tDBgS|Xac&5E*DIk&b)32flFgSFrB(n-1>FMD3_UAgpM
z(afWg-{zNCCDbU)Nieou<o;r0#wD@KPwd0oc^b-$=9ZS0&J7QDxayrtxQSu@Raeq@
z!*Ufnyy~jhT22#!qoe)o$M<mpuaO}D(Y%Cq?<6M5^pA6U!S(=mPkqpvp|NUkZ?Cwt
zoSa%c`H6O4Zhtc1Z%XB`W=QGWF!g8AEPzb3G%|TL1R$G1`*s3j)S0vU2Yl8|-Lf9R
zY(fg|yU`d-chgVp1$BPwfeX`@LyU|DF<qxbO<dAM!3xMiM5n}_X%|D<D1_?+8jU6)
z&3sl5RLx(u)^DPS&E6!I7DqIw_msGgF=~hw%5Bl+kl6PGe#A-V;b^Edovxgvr2erp
za$nypU}l7;I@|b#>8+~O4=?k+x33-_UPPa4m%r$z#FxzZY_|KFm9sLkva*BjL<G<q
zD<UI6py6}d^|$mO7X2o!G*zCg2p5zYi2Z=}lI9RHT-C;TDf{is$<d5s8ZDBK1XKCX
zS70Y@n^k1llus%9=7T1SHv<lj-}6ujKS_|q<xjWS)(D|9k^L%y-)(X3sGPj#A9gY~
z#|6)y6My?AYfKAf{eDQ+++*&4gZ%5&HO!G-#a;28#w<JIuG0JSo#h(*q?x5Pe?aW>
zQByA%E80S(I#Tk=j8}}KB5Be;<S+Gc-Bv3-jR-nr?R*)XE_YFTj?bX<kjZSt^)6N6
zM4bes{os=1m7I%9OR|dmaR*uT(x@qrN0p}$f1xlvVwakjAVQnOSa1Qim)=908HS`8
zpIuyOolQ$lj+b@DfWAqXw}zKzP@P;{-=0Dz@@RSOjau>FbEV){8#I8l&uv9a_o^?=
z%P8ibV>vZxJhmIu!gZ(I3}{!U4}N4obV_n)lM1PJ*g7L;zdmtjz{XZCuCE9Ix#)<@
zXEIp1JafleR`8J!gm*(%^VzU7@;O5-RIIs?Dv^?{x7Y16bNaoiT&P~?eiF?;7Kj_t
zn{;?n?+Pn}G?k9s<`;;2VC!H+wPMX(BWD+6yMiPpf^ReugoePTiUF`A+cuF4!A92p
zDQ`yj%(SKybmL&d+YQ7Q4&0B-dH6>wChw$UgrZs!_{iwK2IAC{zgHLWODi#7GMZzb
znVQAm|K})BUykC(7P;Q~1mW28pB~sR2*E^HMFV`rZp)(yv*n34%OvPR`gjnGz><qc
z)jTb!Cpx4jS_&@F=a9FkqtX(0p|0vtcOk<ftp_$N)#h8vtjIZ$*6u&UHVLq-+LY>=
z&Ws>X<0E-1S|bUsy@$DV%6Yb`U*9p9c9zez>iX(UJRyUHmcUu2Je7rU3B-W9o?RM$
zeDm2o-^!8{xt`Dz5)1mj>R|{dAt2^w^5h*h8Xe64R6#FynMe?tNDvAd<Gav*l}EsT
zJirP5xM2}Odi9F^5c~lv_yZc2ZrJy~Zx#gX4cZTgQ)6F(|C)<{Ny!HS<p%^DvPSaT
z|2sqd=N~7O5RmI*(0s2>2m%U{1OhPoR587Ob>u{=@(@tnS#WNzo=FI3C{YNYtM*kN
z<MsLc&Vm5;XGFXBpCb4_M+zMb0W`jTchbE+pC1B{u*lvNyO6IB5EdB{HX6bw;LGdt
pf%Jw#CVKij{^s=oA`?M9!_c~>W7K(a)j$A0QetwV6~bSA{~rN0wnG2_

diff --git a/linux_basics/images/linux/commands/image22.png b/linux_basics/images/linux/commands/image22.png
index e2e96c906b36fe7aa43a6a5c3096dcc1b67462a8..0ab43ae6071f4e2513b9396834628610c07668c4 100644
GIT binary patch
literal 90158
zcmeEuWmFq&*De(*P@sYohYA#Tx6&49p*R78m*5uMrO*P!X(?`{6t@QVpuw#;1Sq7q
zYk)v<hUa~r_xslQe!ZMOXPtGjR+!1m-1p4fvuE#pUDv(|QBjg3BA_C`!^0zb^ZJz<
z9v(3-9^O^YTQ`6$!ZV`jczAbAEnmJ=dGqomgNh^6%+kgb5AStItkz9!^)B)>U9~qB
z{<mJ=ZU}iK@c!#vo$FWf0&+h-iB@^>_7<zFvubli*t0k?eKLok3OwVNZ55oMMEX6(
z(x#^RdhJ2o$<gnN8}}OaeVmpD68Uf}i8XFF@KT8z-^PWlU5#eui0%lyS;q9^N9pS*
zynBQGjP_Ryy!~GwLLwrrs@%Z%b+1$7sUB+SYv|2I;<Sb+LP@XUMe~2+`$!;7*QSW~
zyZvfnJszI%tr1;iw&=W{4~?&h+_}2|W=+XLuxSXtjHn`+c+%#;XovUyEoy%ejAv2x
zT%tfF8sDRwUV4L-O#TPn%ERY040rbf?=n9Zf5gRQ7`QCGfwyUTcRL^<br;`!OzM~~
z==kKUkg>4e`gteg{Xq73DHM*q4;NRjxA=`jY{J6W<5dc)pLT1q$jN8cw;!r?lkU-G
z<_okzpT2OJx$->E*!0!+DLMhNXVpJ_-`|E6MAP5D4P$A0_Y1l5EJE_J`hCQQhsEU1
zwLjj+e@m>>{&6c}+}`f%a!31}g|{N{nTfhR@g&Ef$*N~g_eH3%$;S7f(Kyg&VMa=0
zR=kH5Dql#6V1jKoLQ{@kR}h(jo-E0dOm)UO<R9BIn1%hAZ?^Jf=TN63&w<4+vfS8j
zmv6goP<}&;^wWb!BZtkdgvZx*sipOpzc}8%>G3M`w(5tPTQZCpYe<;pXMWWfE>~sE
zyEHk8(~o;1Mki1vs&>`#P<&X(cWwhd3VL-siku|+s4rw~Ou4AG;j$A5WOVm;AOnHD
z^ev++Pi-g}=uNJ@v3BzjI?JNFea)NUCiwYvw_F`Q;m00EuL#n2zuh{!{rT3jpe1~g
z@X+UsBYrf$^3ypPoQ%rtjbw@4?>NwXx?ZzW<!BV=+^Kut{kp&xXg#4(Va?AxMB}K#
zHzxT^RpPx;=NlX$8Etosuk(bjd`kX(rJ9}&KVAA~&AbiLoO^2E=wru6!Io<+E-!A*
zkCDECofT*!{E0j1v%7>*J>d>wovR@?QP^l&UesIU_3GbrgCsXeKBh@z#1(|-#)_@a
z{So=vOd&8np{mF7%=F>YPYXMTZ*7@v2N=mgGVsDE(XsH1e8*tf#-oAr@BJ?(<a}*I
zI1t1}=09U5L^hsjl4wudF1%9riB^3+L*T%|h=|BDjQSJv&Ar!+yB*`l8X&cK9n{p~
zsWjgWf>*<Y8r0#*T*-{_CLx5{G{<CjVeV?po%h&<w1l+qH0DSTt=FD9{nqv89`GCE
zn7H#E*NnwtAE&!~j=-aN_F=mIysY0>(3>{p`fr=8=PX<r>-M7`@aAra+RIU1b21{L
zF_N`wB0TnIxJ!Ttco>bR)?}h>&Z9Tr$W7FHbzl1SvukWkIzO-2T$yg-+<7oTvev9>
zfB)<%=lh=DqSZv>%FOOJJe#ZsgBfn!&Uk#M?IG;B%{}urqIZw4ync2+u#J)Bwdj|?
z*Y}?C5`y1<Wh{s$>eT!}bwVi;p7N@n(YBN0kL0hwvxs^*p07bv-^_ApMF~tZY54Ce
zK4;DVuV|Ft(*MNyl5LRHnM5Zz?G@Lz@gd>^%Bip`ZwVpBaS4P7M78#vxKLALM;l_z
z&{zman`7)2ZnZ%B=2%2SYl!eQ^Lb8tBDvoo)p+Tl1I_UZ)I0j_w6g(*?b|4cW9F-=
zM)LMd$M@Yo-u}qm!vErSM#|3*_Mhyjwz8F4tRH>ud@}W*Vcza7quB%V`|<aM?xF7|
zf3j^0ZZo(aV)E9J=_JPZwYS=pypQE+<-yJY&VeIuJQc<s=|<0VzWbw5`c>~OC-XKF
zJ+mRB6eC*InWd7{Q2vh0>qKd=(xj5*554csYNxrL8eaKQ0{%&gsmev)#?+M6w^a<S
zEG@y7Cl(RoUo85D^9QGLTr}4k$HbB(`$7;|SwmmTP0LfunWi|V6hu?)<Ve2f{32ZG
zSs6W0Kkz!Jn!2<3c}m<i<4A8)ep7UlZEC>fnP{abO=_2@jOe21O=r$k=XEvbP3M|g
z?-`NW*xF#1X&0}<hn|^-#s_-`aci4nVmWAy^dHb1`h2bt!(6x`?ko1?4a83~d&;Yb
zs|Z(wrEJcXp{CjQ=Fzq)W;-#`1=3L&jTyo3zRWwf%C|y-Xy1lgcKqRSO6*C*Bnl;L
z2PYDt?mQsU<t=obh<yhQ52D7W3<;NyIHJ-Q@`U#C5)1V67+C5-y~nQ$Iq*_KdHYPt
zx-4V1=5Mr~2N4Fv6VFMV38{~abn*8)XRitlhh;aIEt$=m@s=H$<@DC}B`!%XO)gpY
zMkTv}x!JF>KOwhfSJFOf<~4E9t|=tYBrNFoHNxAXW?3^@I$Ao=J<B?jKVeles&Aby
zFfBUl8R1gq5)~2HC!7ox6cB_@s@Y6d8c(}an%m4xOin+Y<|r+w^0I=O43u$|mcZbs
z=We&06V_A~?fX8jbh`FBApf{e-gen@zApw6)pwLlZAf|ApPVu+dsp^2JUTL$YG~_)
z(|k2)?MO9}zKe!Zpw!*uymL9zMm8%_M`W!xSGhQ?xTbho9~w1AFX8IEyMh?<s}rfY
zjbxoEt{I+bMK0G0Rl|4ekM4Td996G&?a(aObe2u-XU12>BMZg~dZrO#GhUf)V$<(w
zdknfI*I(}3K1y778d**)iHG`c`_947^v)d5Trm=~5Gh%HGfYA-Ruk)uE5g!VDSUtM
zp8l%nRgP;X{vdynfWi+SrNsi$>}f<MQzTNBn~R(Ge!pynRyQIik=b|IpNRk9{~@3u
z#n0pXa;1U0;Ai2_q@QW_13QWHiuXQ#>iiUYZ&REv?Y&mtI_0{A>(NBqYaJ8sKS7;0
zRh3ltauE(I)i9K1RNVtxYL1BFs4G1638Or2kWEMqf{s#|hF+}E@eEZx<WRQI-^RC)
z)3zPymwGqlr}(_<_m|&!VIpssSvc}UR}~#!@8$oAyq(F^n`Y10{zT@>uV{IBMfsV}
zQ(`>M3sWJfmT8txErpmSm6Ie_ktQ)+H8D|&Ly0Zvjtr^MX(^3j=hviy07uaG+tj9a
z<(@tM`t^a2(k%iloS)$qu`6$~{g(23bHG?|L0N5^|AM1K)kn5T29M9QpBtWH6qVlg
z_orZye~=9xf9enFTh)9lBg>!8iTio_Cij9hAFU^>iMec!(0Tmu4!)}TR*j$ZVN)wc
zChNnV*y4H1`<CvOs^Kr$v<byR`l9CxcXB8d%*0s;*iIdoB-OdgJmMA$Ps+9imU?GJ
zZzjg@<aiVxA_JYomIDW-1=2;O%&{fy#q9;5h8(XA2CD~c=IaAV;Dos1>{oTK41P6s
zLWknokBz$)#-45|jB%Z4u(C@SF6n3*9KFjkT0Pm8^E2G_!Ik!!7WFj5K@Ft!81)?>
zroX%O3l22Niae`5k!!UAg#uaD21Ti*M|w4KCvh$#F5ND)WU6FD>$YPh+PHTg+*=R3
ze|I-fD++N=9-GD356AXNCtFt~*s@ITVQ+Sk2vr3^iwa5$Sm$Jsn$?@TM?W^reNAxM
z4Xq|}laWzkSz=<Y?VDD4N5#dnwzXa!L^_#;t5Y$R%X`X<QUW8jBX%=ANZm@34fQPy
zYWW}?x)Ft(^M3F1?daQPb42jNVEOgvT1pp*!-dnxpszudtq>9+p;G}mQQp1I{>(Tz
zwkS$EUEdT>@A+Nq0~uz|WD~_1<}xKoo3vlvn30d_<2s0{^0Y{CpQHGnhDxdPDIyMI
zxQ!vF#%1Dk^Yjw<Z<ma%@5}8k;htE}+|h!HtuN@TpdQJ1>S;tdE&RUw;-Asz0=OPZ
zzs_Fb)N?wbjaq1WcuLHU04muK>$Tnv4TK-gq`3v#=NuGo&Fpz)qw{^;&U~Q3S{*P9
zBbrO{lb<~%<M(`-T&NtqD1~IU6sMo@?vK;F>ETTMclz<Tgk!m7zR9x2tuIoCSmZHs
z{-hZmfUTY2%gEUeJd?rADHu}0ktf|KkQ3BqyJ6g;1T*`!QNXuuofb2bi0;}>KTyOx
zKULWs+J&HUI+fi{_fIjV-Xea#pS^DmGBdlngI2;@VZr0(Y~62tb(ji$e)mwq1<xP%
zaTMKhW%uega@Ty6Xw~iaK0hb%rR^pPBG+z9<GHxeTT!W+)Yj$ISnMEPx=+vHe%-;l
zFFxS?6^%yQu5IIPZRbvK;3Z|}Zzr)bw$wF~6tg<F8_zlI#O7{i82&kSA<?+!{=Nj`
zccmjcbj3J|`4NCSLQS>bm?<jau>$M2@UCB>!ovsFt^i-jE7bp9m%Z`~@7iD6uj1ha
zTjE{+`xqr)dGUz`z87u&wY>Hv2=6BF>pt*x|917CqltOHUHfPKswc1yPg?!un>WBx
z9pY$eYUgADb#A#{{u<bD+x|7!2@j9_>BaZT8?`4pK>y>G8rsg<if=_BP+QJ-CQxHj
zPIp`Ti+=FL-9>>_TT|zE4DPlzc21)15|92mLKIlP*v$2a;jcrSttB35E2=QOggTls
z2ypUqazBzJU|?VncQi2*ReL4-cXQyE#3Ku5XM0gDE;lzfPB%VIsG~U-kBEo}7dI~#
zFE0mh1c#G{o%1_)4m+pE|LWwQeqNb6K^!gZoh_ku3>W>rGlsf2OFVjXaiV{J{&k(E
z?w0>`COfCUZwt6Vu8TcfJe=HI|Lz-TDt@t5RK?QW)JFT2r7bXKz&RxO1o`;I|7!3*
zcKz2W|J4-aWa{`5Y74Y<mi(_#|GV*j-}%2c{Og?H|2pUYcFO;@=kJ!{To<?g--hB}
z<NViFV4x)l#JT?c&?E_}6rYI!&ymLRm9hq~1gz}hb43F9^Xy;Ci}gx@8arkX9^P}j
zH?O2M+^=lRm?w~erf&R>XH>W=-Tu*1)%hMO|C8m6O#6G04gu!3&z62#6I;6yS@)kN
zI<=&<r*MCNM)1Xn>S3cO(ac*CKJMy(R(pzZl~GWRQmRw>8WybwO<m%cdV8Dt%GK+)
z?lL@ok9V0BBjQ^l_e@f*<<~yBWDkFx*YRpVxWV=RqYH_=eT%oBM~C*oWpCx;LIT2P
zFEa}N9y_D|x30p!hIR0p^oI$HOr_mZYG}u?18RA#Od|YJrt;SyEj7MpKp}<Fq3Q1Z
zlR1d3x=qpuYN61O2MVa6j<iseR|;KLR#us*<7|!jt6*X_xm3}oW%b)h*3eM%G#|!p
zCgn6!T_UUE=Q&F2vS<iNlxzgm;tdhcgB9VOZ<&ubZ7*xfBQ{s05lIb_6=u$CmDbc;
zhu-W-g0?yd>I8hQGp<$c%QI+W`N^*>CtzCd(=J_D+d@$p10)qJ5RnY6;Zu@aESw}(
z=r4s3E#)^k%+$%8T94$u+o~}&HHE#Xt1zDUIq&2`Lnr%hOZm@Mnl=al>uyXG^Zn2i
zr)x)7HRq`~Qep^S+2ZRL=PJey5b<~jvNHKj)@iYic@A0OQ$lMFi&q>LC{>dJnQZrq
zn?jgrQb8subS5dhrt<9Lu7?i=ohRzWSRON9?!Dzszjcdu?02B#$&W4A`H`;No34@W
z4-N2RQ7jBMUq*IXz%r~`g)&?Sk=qWtK@|ES+-u86Mf`AN|1;|b$Zh@nqz>jTz{X3!
ztEp9CR`tN7aB`imO4e=Ub8uU~7?c9Aif)O$<PvyTYt#nM0KQJ0i<q!$*AlGhYJ}7N
z@lmqm&}Qxf<DK7(PGP^CF6F?SK+mHciX8`LTj~5ZW+#l!BR|K|_09-CA*?ApSavb~
z_2W(1xGIr_ewD$D``KqNNW<Y+e?a2XntMKHUFNX%II;Ew9*DX1#~zNVx8*jYylW;n
zRy$=$Unsv7zrdfb#kYAiNt1-62zmRH*N?oSPLHOG!}^3UUi=ml4C5~Oos*Uy`iz_2
z`@_+hOBQ}rvyO_+ll4ygHX}c|qlkoNd3~`b@gk>ssh4tT*k^!2OUXA<4fw2eVKRq3
z*G)tadHxL<U<>m=SL?nQX$1calVWmPC|h|1Z7FMvviOOO_YkJwp@5Y}+gB^2uhw70
z*WMPWfw!Euej3gVWWI@E3LFjy#}D;51qLq7pmEN2$8E;rrA_536WDY-PZ}}bD%V!K
z?$RF+4#(OJBv8}NIA9LJ4ExZbpYtOOkR-VrBB7{s%x&I&BENyl`02mhN6FCxYu#ub
z#rhw1Z}@ZP7?|SXWGDZ0jaKH`wHlrtlA9EAj){*bMLW>x6p9FINFzi(6<A*;x-`*{
z-Ze@2P>r)5ui)uCh9~u|`AQ?exBHUE@hO-4TrdrC9G%BrVQW#Baf#e+*RNA9NA5#C
zLm5yTWx%jBPS)E8Gob2!$~*an2ZTG#PCU4rX}|cUiBG93z#8WH6vRhFX~@hJJDOK3
zO;q=&Qy4?2HvJ)-h>HJH$OGnn$zFPQx%1P*OlLLAwy%kIzAL5X>Q+5rQclvd%$&P#
z(hH6?)8zBA%Ti80>^hwk{Ti1o(&yh_;OT9q0XJv>>uS3AJzb_2w0ih}=}BgdaFjek
zbw)iPd^Gk~<Yfj$rR=&DD0&w)lRTh-?sW@lf9$i?U#_TFD=hROoaLaRgHEiSbrVO^
z!&&Fd-srxrXJOUScALlhxbq>uh5a2G;b%;-gh?}=>-xL4>GWo|q*Lu%hKB0FWneYm
zo%xR4&P-*Q$v@q#)@2*tzTDVXi-y@X)DEGlGrwC7GX*B<q33iLmVMzSHKlpYrKJ2~
zunr#BXk4;vk0ytc^_SuZS~0;iFKm|Z_L%}?@HZo0p>$)bX`JN)%vPBkzlDmF8|#c)
zR~D|T#rnaXV*adobIk)!8c=zh(43>WH?B2`C##U%Z7$7gi)K?(k5OJ;-q@IYqwaWt
z4T7w8P-Vt=H+z`Nju#0<;gf4KP@H;g9#(yy{wz@ni((UZ`amR#xED-MYF!Mo;<uUL
zmW`w#V@`3FJ=i#rKPpyaEiX`thJlaz4?7Xlru%TYf;d8%y;N>r<AY5MMEqa}<<Mj6
zW}aTav)!VeLvNGXhl>7yy{Eu6!&GJ9vOX5kHR+YyNMY!6Xe*BW!?!yDQPvVONg6v`
zc}x<q)R*I{{42@8Yo>3=ujzfS>**A|>k1au>Z%VJlA(wMBC(8#$i}abteR~Tc)DL?
zFrBCPmf!Es52eC9vX*I`MlxVshC;okI!}^Jw)IZ?<4vqn(o&ar83{Xy=_MaYVvoz*
z8<!P!kxpFgD?E^V@2c$e-iFLMzRv1yR<@4HX&Xu)DsaAK5YanKr#9Ys+o*nmSfv%-
z>-+$j*DTu0G433E=YUeI>d4)YNSk!+*c|UzN<Qa6_vg5FH4FzOFE?WN>IMWZ<p}Co
zRSE*a=eDPfv)Ao^CBIx~gkGoYd7Slp*fNKXUd(PzK<#d!0XbGaqx>L#PHixcov=7o
zkx+YaAl<F`slzA;*BAJ0Z}}ItgI==dg%(j+W}+7Statzo+hx*iZ_~K9<u<jH#Q-7r
z+OV%VVDZbuKLCVADTjD%djSTm6bgxyWG5Cefm_rJzNld^ZWnk%c13+>``gRNNG$^o
zNRZ3xA2;dGqJ+;!=mMKGbb2Z`$5KoOS!a?Fhr7Wg%7oL3`aOJD4+Et4erjOTET+LA
zGAm982wDEs?7QUFMGbEbFemZuYauwcj}LMTdak-px~KbWwF?VVZv#;-Qz5?Jp?#6U
zMEYkOSODP(rf1<3dRiyQBnoZx@jh7;3T*mQ7!Zy-Tke8kipAPq5LSHBxWWsKb%}4N
zig7~uU^dalxNA}28LdIt8JgDXQxys+uHCyeB7%0vXX8*`$-EB-4GH2k?1T<Vy+zF#
z!L-zmWy4cU=Pt6bC@D`U`-pLK;ig92OOkcEi%?}(C=n^edNd6kKu!tSOfW3#o+0z*
zx(v1(=<7BejPB42*8eik=3b`ENxdt!U2a=0FFj!?=<<ti7}8_gC3&vc-Qvx{eqvXG
zM$u#FRZZs>?NY6S;pWi}!~Mx7a6^j4@Em0$`Gd8?cN=wc@6=nvhq-#~ofl&%5U$|6
zycFE2K_@8XbK~{mI>h@c@czNZv)j^$J*vpt|2dfQKaqYO4ZBh3I9=Ie9=jdM`LSg0
z<&@1Z91%d6{cU)J14QWcXNcMS7U@#SG8!0{Pjt*_B0ciK1tqhLTQ!*MLQnl3iv*B)
z!9$yFwALsVxzE{^kI|QS`F?Bs%G|5W!rIxwO368NMC7_lv4Kky*hO&jw4T(&reWgy
z?z~rt5+ScrY7@_la%A0Bqf~L-(yv0}={cwI?wb>=5FjCNwwZK^Ki(MTa%`^Mv#q6d
zP)Tt(y&cE^sU0&*JgUJnIdP4p&5{4yAmvx3BEVfCvKj7#I$ejdT&I-69c*elcD3i=
zQ$7|gtn^KBUKoN6M^2MV@Xh%F$@P>`nZ-=43(~zcc1V=aNmCGhliriPme%D(c;D41
z%L3L;?Ih5>xAT=QV+L#mh2y!u8utd2Mql~$zlckAo@EO95$aVoQR^o4sMd7!k-9K1
zeR#?wM_zylyfA4g&5NGK@Bqt;!73K%fF~u`O6rZp&;MMjY1|(t5k1azUt3Lc*c6Cw
zn-iSO)v?B5Z_>9%ifuk<&A-KKklY~05<Xe}CMI#}Plt*xZq|z)p;U)`9ApZ*v3yjC
zbnIzUm81JYs1@&bgrIf_4Wuv-){V+z={-n3KH!rmWBrEe5lWtS|I_(-x1@|K^d5Mz
z^-PnC&?U{S-x7v4s51q<WYaLMKZWmZD-?$w%;eilo5pXV>YWBUL6BZk_cGZBWp1$b
z$~w7{UfaELtM7TWwn=jPOYNfpLR0n)+9sd*qw@TB`J>F!eHam63p8~mo#Y~@$jsB7
z9PXT78~ahZD=hb)0gZn}?A+q_3=o&BC8N6YqiHryaa`|<+^4u)&qKA?+J#a}mRo`a
z9H0>0?|t1h`M#iv8KV!84w#~GnVvYpzMb&=tvq*wXxR784WDAx&T7=rbergUA=vWn
z&wOU@vt9Ec)1Fl0jfuQwxOZI*t%>-?C)7f~et+-P>h|WMGxuNEj}HbueIP~(VGnW^
z&D@vwH*XNrkotkmV_vwlb_ayBRT&Clw;Oeh7h|VPV{fc4LQ_{IK{WNd+0&?SzJc`S
z{IiJV6d#?9GPGUIU31g9W)0O+a9K9^Y1aZlNgi%Ma+_8cT4t@;W$$TG>^-+yozDO{
z<<Pe78_jPx;v?jxb8nJ#IJK1cE>pY)*}bK<!WnoVU)G(Tw`Z2msy(z5b%%GWayrt%
zuJQ)iTxPf517_2hWRH-(gXHSdB<gl9_yJdd1rW`}&jwRrM}}ja`9n&6!H6h&`kQp#
z&YIE(ft0L>Z1j;o1{$^)r=Pu2wO>t_(=LG)k1h~Q^6M-H#||EFDi+lzN>SICgS<=B
z?g}<Y@lF2{|Ak)YpvUwTCR$$x=lWAIGjwWSi~I8%2>KKTI|HmQ^~=QCNQ1!Dhw1ru
zcsZ-iN_Q9bqn2KTlVRw%jg0Dd$HaE`dP>@<q4f^{l;d1D^)6Q1G&UB3*{tNGf`FtE
z*N*1I)CAz6WOPv?Yd^o6=XVN2WDo<A>$ICw6@4#E4+#}wSZ_<7?Vxri9t@cHmjyW-
zzq{FHRZy%}P99UX=2uWW%W`_2f?v@cn6cy<y&I3cW(*q(TS5r(7SN$Lg?x-hZ3++9
z6iLo5P}lBqtQPC_Wy#Z(VQuf-F_=ZoS~#Sv+ZnJ4<{;&QZ(88!-3Xz%E|9U!piwP|
z;GyKc&A{>RR^?J_Yebx`jgCp8iu&s!NRA>ZnBKRLUwF*2!DS(Gx?}(}&4wc;>CYFY
zbDV(f&da60(upB`H7!Iamge5VBLfmppRgI9K}S&-dRBCA8<|Q2H;H+qsRy&=e?6+2
zV{2K6Mq-SLb>`v?eI5wSIlI_x?qBIn#HTd$I$YJxI`5X*?iv6`ZyVxjxedA-=N>S<
zO*s8(L&w53Q*JptVYbc*I~+?kA6U7&-H7qsaBI33D9{;YX}5u%vK}wgSy<(}PU*K^
zHVie!5Yv{0rnE~VMhx?xo%X7e$R-OakmEm4kL}^q-6Xxp-rjbN@!RHwqK1`c>498P
zXGrXPuvNJ&ggKS++D#(PQ|xBVa=(L}U{s(^dFKocj*VY}O;J(5nroCgFVU|_zf9uJ
zt%VPu8CJJN60w~opM?d&0agMU&}^xvxjC7M_i8({am1(?X`rjxKwi>BUQT)pegl(9
z?3DZk@EGC9qjo8~tJ4}pgsLl%dPV>Sk(t;G{%pSElY=$vN~`-N&qfa5>Hdc%DdHZE
zs<Ciosq;s~B4-mT$$?u4<%EPu8UFtK<%WrUn8mc~Nr35|#LDl?g$%j0X9NR%n+y<7
zv|1AvK7r7B>C3ZYb$B&;EBQOB){mvP;EbjOv(53B3(lHmCySEwb}R0Fm!v>&jT4|r
z3iIc84tNL&>1b!7Hsc5#my}F!S={eV-kS`hamfG~T2%APpg(ukOhHst)2;>8D*=9r
zL}N?P-XpZs&TAT<jV>Oug9JzO$LL}>c8w3FR!0`v7}enEa~DH9!EuV?W$?1g#}jt3
zPQX_X(uPBjp8EndYY`{=d8{Z+eRU8b4>gcJu+2uuo6T)CQ~UIUX=pz%zHBWP7mmGl
z<5m7QVUgr*NYv~D7K_9ZI&DxiOzF*=1MFF<wl{1n5DR$D6woG;r;4ejyO=BtXSzPd
zO{kh}WHD1H`Yy?Q?~S!+RTU|oI1ZVpb(E6IlO>`-X7YA>U6#6pUTDT1#9nG&@ZAo+
za_(YNcfQ55GcH}TuVv`tuu<JA2z##C#RES-Mk#}nB~X}cOutbDW=qU;U-&V(&g*EN
zZByk-1fSk?fQ1z>nn@Odk|*1gs;WNYAX+yxPb0kmeD6NyiB8YYc)lVC=(C~bGkXgF
zpS?R7NzMaTFxzAlDYz0nZI(GXf(TlVgOJ_M$I6J6q0If9up^cU{@=@71!N}dwJ>C`
z(40GGLECsSx3V;X@<aGy^}=7|qh|{F%Nrzp_?T|P^$CYf_v2<Uh(CVz&3sPy!qf%e
z%h8(Zu}heiMw~rFPpmh&Z`H&*`cL>__x}i=4PGnd-Z+r|kf*=R1rN2YoO!I(Ui^e`
zHtU-W5Ed8fKAFZDR@}W_$lj@KkwB~Gyc_E<b12j?n9&+Ki#Y{zZ&$LLR8N}uv1z=2
zi}pd!pkZ&8ZH?Q?L!(X_FA{&@{euT#tnAq;OE;)pLbm-n1FTH>f=<<PcP_#Rk&t%D
zUGBGYc|~<w<WTrD8^!Zpbo!hYxk;~~0;X=OMoLS>;rBObnE`Kcd`ht*U3VqGd28VB
z4+U?t?s-cRdeYesex6K`i}TZn5VspEw6ux#$i{OyDe7>LlP&Gh`tcU@R9Sr0kjKV-
z(SPWy0n!l}p=IFnn8}23v%B&DGj^WPidxAe=J;r-URNGTB7SUfAiUc<Vb#;OP`IIQ
zH<}MRq86-(4*^$K0~w7>30kVqIW^f7#5q3q4MN^zt8p-as-^#2AfH6CknNG;y*9~X
z(mD9ul}ze~NB!wkGLJ9vI5ggy=`wWXh=u<NYv=KAx6FmD5+=<WhIAs9kPy@1`>deK
zq-zwVa$^NrQmm3EyB%A7pi%|0)?b3`1zVMl7?&{C7LZ_)hEJjQX!V|L<MBqSwqr<p
z=2`1j^?u`uL(3|U9n<_nAny-_4>+v1=M(cv9v<uuZFbV}JRw{%?W(7wO9;@DIym`}
zOYmC)EqS-YSt{$<p98t;lwJ+!cN^9Fl7Z2`=Y#1J0<S4QBXG)cEANRDlgW2ZAX)NF
z#;2qJo6NW96;PYh@8z$fz9^JL&Oa`FZ}3zzk6^`VK%A72bE19_ovWIe*}9f$JTbU{
zha?=3qOvZ8Sus9~w-f$8y}RoN#_u52DX^NhZ#`Vt5`(hqM3wb7KEpa~M#!vxhWnXG
zBjo6OcnSMc@8ty;x1VSTbyjO6KSjmHr-cXVR`g2o0yIM`C<OUbt)jEE@Dvg;>j)1y
zEKSc_Fl?WO)^UpBd{8gGdA5DJ2g3&GUoe_{sY+Wy4vv~{oDd~y^Nq4#m%b4kliy74
zvlR&kW6Lu%LKl)lTNN=D#;JD8IEOlF)7KG+@gwP&VBgSL)od5HYgkO0DBouawBP=;
zF*CDLqKg=iLYI^$pLMPEKAsy(yG(>qiMgPb98gc0<vx7rj$u_0;0TEs(|Jb7s_84i
z(S3#MPK29ZkrrfZIgfceN@=}F{Z{`ED<`&c-Gc7ug~A(+Yx$d~_OvL|*wr<Pr0kuA
z?#=P8z$b*vY$A6}3a>BviGu+DtDL?KDdQAFd~1GbcB?ej&m<ix)e8#lNmrQfI49X4
zM<F76(obKq^4jg8i+6`Q(#cyKy*6M@dVAYW#{P)m0=dTN_45hKWuM3R)qB%Ih7I&#
zX40@T%~S@+Kw<Z9#$cDI=DaWZPZ<#-TKPxE0KAt=W=F=8;OFd^OuJem1{uLB&Qp~u
z-w8XWp+~)MbAoYdi*=y!2?k%<1pLK(?CK}kNo3>kLD6?F^`8gFbUEfArH()JsuNmd
zCTFWT>6ty6Vlr@FxQ1x@+6~I#6fZxl5__fgdJCWWElv<;Jq{~}3JBvI0F@MW7uu^6
ziB+%nQyZ5l3IT90*qlsYT))JL+~n-gjnXpz)@koB34*{jexO0<L`l89?FQIo;0zPf
zkDEJ>YGcVsCHrur@60P{JM#<+q+wBgWvm$|p)r<pse(vxU!`@s$CrBHU-;{gnH1`(
zX;}QUsEM=S6)~9200o{J$S4{|ncwWty=DcC-aTFC4AXa=ZG86435y@!E`w|2B}`T1
zMC9(giH2S6+}?qeGC;s!u=A{U-SN%`<wvvwHVVyf8S*z|3)z)xCoMg&amnDb3~9t{
z13a{^a)L)Tj_}!E&|vcEa{E=nw<Nq<uyOz0jWRCsKu380QVi?tVig#lQvLbQ;Ty>v
zQBv5ii@RoDczZ>?&nwKopQmfFdZNd*tuv3Yn8rXa^psP4^-4?G_ct;4doMrvO5yI$
zM2QK=MkVotYg>FJE)}R2Bb=<TfEmpntV8Q*y*50IRJHm1F0NZ=yLftw4%#ro#-!Yx
ze^ay6W%ZYc;KVlwe*(Fz?|zXRYL&f7G~<ia=Zj?3d8Sr@@gRPivw{|gs`Y4Wu*2x6
zP@6889+2ZsdIUVBaz2Dx(rOtNy+pcgbHKFMWeUnyhL?jUd^;L4p>y<v+sd&KY&8JB
zxE-o~32^efh&&gFNQp%n1iX!n!)LT68y6B$+x;*y9*%|$*4P_Gp;V^y*D2XT&$iQn
zbZFLL*=GpV#uwW12_&)F!!_FnLiT8dc%8%w8KWhRqF{bTGKdevlB{&Tf4aUK>9sSU
zJ{6uKsr)8|gMP4vE>=zw@zObW4o#M&efkwrMm#UEd+Y-<=y3UN&`=x5jI|xMMYWQY
zHLaB2-G*a59BDi|u|v74tuK;EIp3z05y)p#0|KF%25h@-yD<uGKJZY`#ytamCJi71
zUAqRhe&PN4ha!#|jgxmUo`>r)=bm7hQOo(!H(4=2Ri+?L-Z5ph4tt!5M(p))>5~5L
zbrWSFRLBl3d>Kp>mL_2s*~1BEBD6b-Vkx^dxU`LXeB>nFnV^{eM4@dP0JaXAN0RK-
zzYmP8d>c_6%AbI^Pet#2?C_&I4Q~3t<cz~=i}4a~&XOsh8aWndO|$VH;ZAxAS!WNd
zoE|VMg+HAt)GK00V1U$6EV_vTS&X}0)bK*(^cD-jRn5cdP-z5^76MYK1U_X4x!tO3
zo3sOBmHAa`&~U4VZJedl@J~JL5^1l({P<E|@}hFPrFjbVxS^lI4>xApbiY$q_L@Hn
zfp~LN)@C4LzXXFt?uxvJCf-Yv6aZ^j*Pc-L-T1`TH6WZtyLv(1FU0@a&Dibl-Kcm2
z??;-tF0r}E-IYqyQ|BI=54nGjzqqxtl#G2a?Yw#aFb5>oTZJjYWPsoAa#`bCf||_M
zN=g|}8NqH*7eo`2rkeh4RX8KQ9)(V>jNX2_!uS0-p<+jaE?$tyTmL>1$z$Pu_)aNO
z5}($3N>C^u+_ImDO7N2y6bH508z(9YjRV`4BjaZ0TI*;jUf!U%>ChvPxR}9!Vh`cJ
zjKpP?2yibo_(h}A2=)<vizXrPvmEJn2sl>s*_7LgcF|x81H^yRO)M991aHwXs7Ns!
z7n5moDcBYOh=x4@;dSRQX#{aW5xvy;NJ(zMyLJXh{&#oxDimZRVb#Bfe;hFU3uJR4
z02d}Wj!T`aL}+`iW)b-JXjsBFL#@dJ@6cD{j@YX!r8O&H1{J3%piG|0Gtt7?ykAYa
zfO%{5?R}O@XZ`rfeALgSM96lGUvqs>Qc1GL%UREDlYLP8@J!8}2cOE&eK%G(8^gj=
z|HbOdsLxi4g-}&Mcm$PDXnfg@bsgDsze=Cu3v&J$)2j1@L!sH?F?2caO=(28M#^Qp
zzE#=9$c+~DNh3%XPJcIOh31#~9M3ZkdF*eNa`zXql?YgkaQm)dJXG)Q0Ssw~0%wCL
zP*9+!1Y2vpfCSij$GR5@g#&1xOq6FTq~+sn&>VlVmhbAgSQ5XbTJ?II?sh1^ys8%E
z#{?!X{c1j=GVxxS??8Qe?A1HUfU27Fei+7%%>P-MXJv{ZUT+_Cl<veC_<7jC^~b*x
zcvI+m%K%*YIFAUSWdD|+#bESBSpgeSU0)vqgvxEk)5U32JKnBL<3JeOIRVhWrgJf?
zqhPjv4v@uJ#&*<@OY%&nU$NEV*HA@l^nepvr~7b(R>zpGEqMf$K)!R@IR;0iUy0;7
zJvz^OR<3J_l2-!s^?(J^OBA)J6aa9(hXZO$%!^&*vTiF=meSU+-D*Hfh4xiVWavmE
zdN?Jdj%Li!fL!>4fvHpb+p*$Jr^lV{D~y<q3y(?OX{G%T^{dC_)4f(XQb{cr`(Gg)
ze-&*65#`KzO;Ii*4#(%za;c6_a-bbw6gUlT<!I(SLLrF(CJM=0v*yX6!>*lRl`bjO
zW{8`u=$!vrXgoh8N2^0>Ahx&i0M&exo~^fPP+EYvJNs+<pEt3=-pj7hJW|LnU%s#p
zP6$)++gwop`ZVrMv%5Kq@jZ>>F8hiE7>$ZOSVwxK3AbZgXUmDyo{`;kN|MgEN@9!0
z7L$${tU02l-Cx~-5DA&{qapurgQ&PvA4GATvfzuuW%AD4qN^1E4?6iPCUYp<BLz9d
zF<Sn_vk>gU{ZwG;Jdttts08G^bF=;mAaf|&RKLr4@!IBKg$LHVN1IP3UMP$t?LIl}
zL5H&P9-Z&zXzz3R6_p$7onXdwtPfv9SPWOW^(jo)OZYJz!00CgSS_bH$*M*>EFP^R
zxXy3B(v&ammgc&k_Rjc7+FQV6t)eb#q*Hxi7jX)!d=dGF>TrKC&_Z^|;})drl*4rO
z!X6<Yh^~@J(EI)gS#ce?&Eq+;@}h1I^*f4yH;&$mAXm@|`E06aLQqNKq*~kW+$Ahr
zZCWGI;ZQ&*+*b;nzKT(6oD=cz#@LP{$n^y|G=hN4!ltm|2=STq36@SbnAi^x8>$)A
z@Td2-&jHdb246CsV=wV*phijU>1p+!Qe0c^=S;Kp-PKeifFcPP=lP>tM6nX5hZv8_
z)1idRAOP-?TO;`lD046Vl3xu^2q81)ho9V!>$=%~WKqK@RfU)|eQLTJmq!9MD%kLU
z?)fJHg-MXztf}*C2FMy}9BW7sz-QUZ@~~!OuVAS~9@LlNpxLk)F`gE(7_VE&9qFwr
zji_&fP7g#dpy=whY2pn$?fC6Ra=AMrQ$;&~o1|7R4fTq(bt%pFkx2Iu9@B<Yd?!fB
z+pH%yv6=JDV*ls`Ew>si<sQ{ggaRWO+UVogTbeT5nxdF27y;Oa1UcZkUulML<DUc(
z(`r`Z(89TZ>~tosCV<e$a_F;ZfY#4<1Ij>PSmV0arjNb&K9W#1=^T4DG!4=+psCxa
zx6QCJJ5|(ki8#!}ae=wfen_?4{Z(fAPotW)h8h`r{x|6&{8D}1nK^+9E0)&4py}0j
zXwr`ozkfeQoh%yywOUM?Ue~qseBW)<_P7pJJD`vfmUPxw)6C;lW@&`gW2@Jfp?%aZ
zUXtVUMh>%3zi!<NeKk8+g;kI<In6TPeU;?Iy9+)La*m!Blb6rdYSV4pT)W^0=J?aL
z;TT~xQ^Z-^3q3&idoG?F_%&OD_v8i<)vJMJx)6=5!Y71PAmm>h&U#9iv7=^Uq3Con
zRGh-kphlnZ$>=hsamb;epXXi6$2Fuuks$nFU0*|F?;mIX_=PqZGdB?UlWl9?AYIp8
zYQE`UPcZa@9CSV#c?m#Zz-qipe-TbH<ELAE-vTJ5AY9(Rxvvww8`7~Ib|_k`PAZ8x
z+vkFW6}d$Mp72kOfJ?ehADzd_)`b0sNHE5;#%Wc|aTY%w5v!$7kLm$I*&7{>q(*-*
zKzt8e%HGemQ>4;*Z8fShK1(Q0O;5)8K{h5}C)uM@TocC4+CCMa(xw&Vn)kCn1q>!N
z0laLU=AlO8I4D)ReS9_0Ebq(w_}mYpE!@#H-@n6!CO?}0$hK<kvG4JGhqhzh(}h)L
zEZ0;yOYxYn#ZL5uRe}D(Iuu^OOQZL2qx=J(k`yDch&%lIT6(JB1bZXE23BBlCvpZZ
zk>}(2C$V!I;!`SnIxPVOca<s~bWZL+niNj%&etp(-p66lAXQBnfriAs`58BZa5Al9
zb;j2TQ@%$Y+Y|0FMP|8s6XoDx_7NBJVtL*C3C&4Y3@sV~D3@IU;e0n1SgpA_wF`NH
zr?oj%beHSMyYLzJ;f50zq7g%TfxOwMR0xV^eU^z}yRz$YAA*QNix;JO*?^3}S)sWc
zZd>|JmF(9+!({0?=kAu+ww!5mEl1@9zg;yp)FQ3{cVgR{0E3N=)wOk``;wc+u$34m
zLX)S>N0r^CT`&*-l1va{v6|wk!$5rG5|e5?S*oiRA>7l{TmBByJhop5>1Z30qthWJ
z6~Ex8KeHd}%!Gb8EXCV!8P`i{kV}085_xL|Hz9jKBK{|LWd>8QMydHw3k$?L++!uF
z3ORo0EW00TarNF*^)rkjjf9o+JaU8XBEmVWv2;-2H!v%uJk+n6k?;iQr7a;&P{k(l
zq{QL8BEC;$em_Q8GAz~gT<*@9i%JEZ&!9i1&2my)$K>6>nd{={ct<+`fn_5f#!6j^
zy1kn#aKYWWv&37Kz4G3hr&g7GEi6cw?jpAK(H+Q>Sc{&I9Vz#iUP(j&>I<fQ(%gLX
zeh)}mZ1F2<;dpB%^fWmoFg(qt*nFd6AS3Yk0-)~GE~okET#yehrZpP446`_uk0wyc
z9ln5MZ)pnmPTupn5Z&(qkx%<epo(87s{?1X(SA#-f`WpRGy<p@h5cMgwmqs6#v%EP
z6HTXHnZ`cc7aAaxMjUNwg(lloi%wPQ+XdAiJ*Q_J)>fA_C_NRN{Qk_>0qTG?1<2to
zNF_?RR8D+uf06w_H);9V6f+7EDZ=hLQEbg#Z(rcPx~PTv`8YC4^|AS#?7me7NQs+a
z=+k&@@f*ZcG;XsVhDcA$43Ejq;A=9bf~mO9DXGIYAJ|4|4{1w(o=@=T_y9<w*RFVN
z?E8MazNf)P>Hd+-{3I!ZVskg?BU*8b*Q%Jwlb^@;!`j)nB<~gJa_Lmt>S?m<|53-0
zT_{djAij8g*Hz^9?9Y3TbMW!y$hQ=4(u$Tx)oq<Y+4VDiE$m7t0Y7S_5N6V2XPPCx
z4Z^E!5Y*3?M_fsUr>Tm~TYNZ|=I~g_eWCbiuEtmE?(-)dj@DnLQkQ@MG4HsLB|&g@
zV#*vrOS+jTkw>zTbg_hGBqiFa{BxfrE|FS3|8|1_C?0K+=_1Jk)CzCxs;<ntcxT&#
zm7$vFqt+#Gvh4<(YB|`d>%zGiXA+G^k!hW&YbqAK@je)0hP7*oQ3T$h<{A{1#Qf>g
zt_BsHJ$A&9+9>$vXb2P?eh<4SKj{o~R>LnnbN$7F>t)SIRnf@X1RzEv;PuM7jkK_{
zXN|_uFn&Tg-_M|r>;-qDlQcwGDktrt*n9aTo`2njXkvg$!u~#~IlGCU_lD3N^lU`-
z61#1D4kxkWeJT;We%mRtK$wRlwF0#?AyVg-lP`ohQmJD>C79v?lHL6QDf98TsCEh{
zZC{dLPrjd$;r<1pCzjfH|2;HF;Av;V(qPFP7mvxxpbhc46JrDEfxKT{l5zfoR^t~-
zE8IES=dXx?J@<=94BVS42lHyRI}UBssrV|G8T#$pBE9Bb?)n}zC@{i7Wp|PJ1;zI-
zBv+7_ZJb1vYHN_l`f|D-%aPPi-SD$(0paw%J38#~;2*YU$GbH~$N~7-eV@~V2x#MG
zjL&vs_(0j(C!$g#1A-FQ8P71ir~P9^6fBO^0GggK%H%LsIl`#SY_^gZ^rcBi+)0FU
z1yTwj-FuD~!npj@WhO_IQ#a1N7qgflu}45*#@N%7;>Vyq@5R`0)adwZFGxiX$Vkdu
zEa|C>;Rc1}zd~!!^ZQ($9h`MrTKw@EJbQ^bbiHFdhe8c|8;~do+KyCvojWuMeRVC{
z>Zh~~fLLdIuCz{$Z_4~O;jSE=ld<?|r@F{~%WqbZ*ZZ%f5eIep*cwZ^lEzcn`Y(N`
zhQj+M1Z~+c+n>@o+8$YCr5^kPC!3WW*qYGvSm({lz@g{gWG`&C(=<^sw|Ls-Ue%1Z
zt*QmHzT$i<kRv`0ys~cQ-=V<)lm2iTsM33r-kT=bb<#H|dbSa>buV7u(Jn(D`-bIf
zY=A7w8A!4zp?K~y$XRUn2Vds67+3p!uuS>c;T1S>I7m~UOTNrO11RM&d5eDApGL_?
z>Y03>t@t4Rq4<*mq+n}BqEw!7G>=dT>8t!7=~c6y%&rq2=?UDvExlr?FSV96qaDWe
z-9E8#)-h0-XB6$}mU8v5c4aYu+6U(zM@drVn8p&$d7szl-D3AMR3zZdu2A&LqcQ+b
zenpC_Rde8cmpW388oc~yfl?sDvjh;UBD&W`0Sz6lP|))kZLj&QeNwp!MwOwTf}Sbr
zp3aUIXbE{8jrg2Y3NUtR&pz^j4<9otCZ%jLFCJOeTb@%3+C&pB#zNDlw#s`NYwV2(
zD74%#dtnAOMmDCK=&9vs_oGRQ(z)W0SpDL$8V!kqQ){lUI1UO{t90K7IatN+h5<|c
zwQ;CQZs7^QPInxMZRwMm)UP56AnQef7c&6JPvx&n+Ez|WoO<J4W`UsUt?i}1x7C%A
z^gUc!G!rxcGv_?xihiBZRa!W;*;}b7H1p)5$VpEd=3NKwLzN9Qexh}o6(Zy{^Vhr7
zgcu{bdw>KmPY9ACWKJ7FC9KSzf1+$L<D>QjNX;8yBNqH}*I9>Y@KJn#GIP44Cemf#
zoQJi56}<sqvfA}R(5+C#{s2)0_KIKZ1yPF~U~n{#U(rG%K*zLwYsPs+!;ImJQt<PB
zubL(`TM}M?JYd+W-mG0gdc?fQEvSEaf+F3k+bFeO$hWrZ4D9ptJ5q`u0)UzusKZi{
ztNvJ?#-;bou7YNbgC--wTWZy-YAmUsW3$SDI*%7}^4_qqulEQjNeB<)s^KkeJPmpX
zV8J_zKxtvS`)Sur$5G{dioXh`{tV?{bD|9!OU4a-n5L=>E#u~Py)mJfKhB86<#xp?
zBqc;PD$m^`J6-DZ_hBKgS+acJ*y?drVg8~U=*D&PsonCh!?p3K$5F!1BE^bzHD$^z
zUF^Cp*go-{_dW|F>XB>&ud?sH%jd-?9Zg4*6lk8lXWy8*DATCaE$(WdU!3+n92FW8
zAbf!pH8MIG=A#+!$$v-ZFd^;WEf}RCU0$1fQM^=sDGKRJlQ)@(_)!Jp?(6hgfiAcX
z#1bgvDJ<L4aZn_Gu4mQt^zoX8k8Xa-(P=WY1E~1AVAu<O{ni}LRx}Q#twq4OM8yi)
z1RL&y8^=kFJ+~W3P+y1pLzN{@zTefT2e|x&rfWz2Ap4#wed|p)qH4}39VDLO5nDHc
zU8G3=G^(|&V%fwpXXpzDAf{}-onW0VoL(x*tS_H}!1J)8sx;KePfrFBS418<AnD6@
z!Am79F#^?+B;q?Oy)QL}b^L(oDMMy?PYKcn(B2|Pv*_rDLavD4dSzycsPJLsPd@0$
zhF=28`bVq#FH?30_7}3^4WouK<;+2ARP92BjanM9JAfwCUQ{)wp4)P=D_7FNtDsC$
zRIxqCb870}ytmzYQHndR?`6sUv*~Kh=Q*c=YeVP9>JXbi2j5XlgT;*Jkd5T(5esZ1
zT{CQcc-B8NQj}jwq{fTCAEA-T5jbezbzXG545mP!C+lU+q>*bu5BJZ<`&dsoD%$Ql
zwA_~KaGkazTlL~A<G}Zm!Y%YvACA?bx^mLOE@l{1@1nxk_t0GMGsoQ*19F**FF5vc
z9)Z{Zwm1!cx+QSVe(-yH0Bk-e)wrsVYWXyEEaIR>^j$B1Fi^Y0(JzT!c<o>BfMTV`
z^#(Z`FS#732AggljvV$^DZ*I*r{{M^>B=I`!TKwRLf@%xbm2?bK!___CC8~^{)9{Z
z^OLQ*?T)N?9J7JPVuYRwKPba{xhQR@a&u3HGbhE>73n%XGl`K}-!b!)iWEL;T5&+C
z%1F1FxJw^lFzMEIy*^Q_kvV6}2ei77J`ied61v{aR+YRc?s@1b#aVYY<ql*R0Qo4D
z{l(^FSL{-Pw}#e5{Xd13w&1WwRH6nmlTz9n0{d(?9E@Uptbn4gjC<+}*xq)o!R@ci
zioLe;5qKx-3E^49C&N>8)I~iZ#S5zRz#N1LBdiOYP>|07GP6kqB`JVTvDm7JQtm+l
z9{a&>7bT$!M`GJOEf(;$71d10-k+{OPBm^8d}#MgmSFP%&bjQt>MtMg%eX-e>}Tq!
zwkw10;CWWM1UEIAf5swIk^&{wn~J<wibWxqhN%&jycp0Q1yt%RYDE>2PpblGv(2$4
z>*;gy%yEcLo4)*{fvc0J9LRiAnxDAYn!6LmMY<h>?^+kufr&x@ozE}XHzw)vBj34(
zgIc>Mjw4jOBb<&J#r(s5dW4CrgWG0h=e2b4o^JlFNq#T4{rwc6G(Maz2EU#4qalS=
zjf$qUy{PPo+cyVty&inV9Q|UgDg*Wy(76I*cUGL<Bf=8FK72d)+1m8++5Rk#aa*UJ
z5r;$$djZX<Zq)(j(<;($$ak3H#OZw4nPU&4g|MnSaK`s6&k$h2(g85H?!KOCz{Bfh
zM}SjINC@mT`?AT=72wQ4ZbP?9+X>B-jf@P*dSLEp*l6o=bXe9M2++FW<%VX7f;9v&
zJzQ{`a?3Ik_Qqr5n&q5BY!>eQ3I?UTJ5x2+VGXS(yO0PdnlMFnmPNI|WGP~i75bXc
zm^{bzf|3SGmh02#4&O=iX;q2biAN5@yZp{-KwRqpX5b|hJfHL&l6edgeY-v<l{`+!
z)kwu<=J!}GqC21rl5^u@fxDaf97|I|zNMzOP>)pAnZv1so{>L7W<8-eidsxkE2K<x
zev&^bdr~}3&loo05>IO!3&N%l9*m_6MqRn)%h3yI>-=1UxAWu8q?<F-w$=%c=%ws>
z<oaK_?(J_*o_C%;efl~7^Jq_i%BrxfDVTvhFp^0rB>_`#^sqEq^TUn9GWd-etQsB%
zh)Y4bGxS}#6*})-1o`Xc`UC99Kmcs@{LOa%ADcdPmnw~RdxI%8Py^{7Kr$Ahc%qO2
z<B#W$TD#t9=2o2NX-Uwvn3g=bm==%kqaH0JA%y>Yxy{MkEhV->S?O?nG+p#41^kBd
zTT=4NqXw>I!Ke^RVpE*g3(f{e-WQv$@&l_iA<)U0#A&fG{D4lV_iFNCcEd0WRT4(A
zcS+z-h$j$>MT>yEx3<q~Dtl3A*CF~#pehwHU^bC;hiDT1B^v)D73O}vK=6*>JE51M
zSO4y1gcuMJr(lt0(w86t|EZq0`T?jp5qjhw9{qD|mr&CxUIKOXu7#Q4e|o*dY$|^$
z7C_a09N+%!5{>_P6wf#B0{J2Bx&`@VIJ3Wd`3HjVJiE*kmcJk9|2LEW`2_wiH<Pfg
zn{5C5FM$8>CHVg)^FLqO|C>CEO2LQlzGR`WO56A-LEE@+7WGFLl=1OV-FBw)LK{`h
z!y7XHCr&i^c@ZJ+7*s{-LZzGduCQz|nr}K%pvAQ|R+L;c{S}Ze9FK%p0I`GyjYO;H
zxt(*sb#onZQY*s(DeS=R0D*l}=RO~(Rn}p4TmDke`0vY4P{zL~zFP-oHtzRJ@R5V7
zLHvLm4@`h$)gLP@Eqy5Fs&_!o&2WTV|9!kx0A;n+N{vxW7KrfLs^z(;@v!vo%5ytE
zQ^2iM8!W#bD82U|z6$?s82wK`-^Q*}q5<(*7*nX8>9KF73jALTt0Hr-CWk}kZ${XF
z6mgi)oF_AxZAy`Cgn(9ruHBjPMfO#^2RTW`pm73N<hz+?$^VPJ_l#;X>-xrL9F<W-
zK$>)HfFK|sy{o_=O+<PV5~P>VYY-SkAQVCAMM3F;p?6dup(DKpBtd$S-r+r$&wbDT
zU61Qo?+m#={69QjTv_>mSI)K1KKtxn*?`SE*2w?wEdS5X%r=t~C6}AZH-~L7cgROy
zkn(FA)-L<aFkX2UfjUKJORLON0*8eDX3-G1;Ihyw_Kb{Cy1t}E?X9$$%zMR!3T#JL
zj#lfvz~}(ft7frd$$kE7A=f~x{4TKRwbiJLcv>oNvjxEU#y3H%jJ|t^)WF9;BlGQ5
z2GGmVx?e3W?q*n(wfHhmfY4e{%`&q5LFX+Yr?eM~z(qXwgZHu08H2ZLKU$uX0a`-W
z!bpEkxqtVYo2+Nr*5oi(&dc2F5Zf!}Y`*<$XAvkof_*ooZt0jJz=dO{htl;jt##LB
z9o3a52U{sfX$dZ#WNPlbV(oK`;(0SZhxHghXOA^;lPflMd7%p`*H_x6ZDp!Ipo8P+
z_5Ss~A0cVt04)wG(hIz{LTL3w`Rl@1q}a7hZ0axGa&$cGJ-3(9o`4BjuDKBU_)Wv=
z2#t<0oyFnW{=Hm*j1Ta$sxjm$8Q!2-MxB|8uwN*d=IuJ{<evT<HCxRFd+_1-5&m(X
z_og}t{n3~w!DHrViStjA9<vnZrAEZcH66tmg{0YG``V##Lanz0Z%&@5<JZ@^h;JpZ
zdwN6Xwv2tc^bi0TqAfW}+tNXN^vB@=wI9=?E=7@BP-^YwJNF(SZ4}}})OKrcK1u@J
z7h#<WU%rGp+bVpGl#h2Wv(Ie%!^Bf(EoKn#GN<?VwR&?+3cg&$jk}KE@FfG|Edh~F
zdny7~<uIVn%igg+aB2mpH(`TcCNyGBv6>)f0T6B`kot4N|J&clwgK2Kh_zDiu(Vm>
zsrmlKfPdFgXLg#|Q);s}@++UpO#CQ9fh3}<IfbwKg2ZCAy7m`zd4#Hj!v%?@FGBf1
z%J+gxB>bY70JyKxE&;W{ebM7*sb5c=^7j;P`oWHQpv<EY*Or;;OUY<kEU&GK7X4G#
z^8UnELWFUId8}ULjO`K7O?}f6e{9-Rn6?Iq`$1n6s2^ZXG#5j8AO9duZmaxXIq;w6
zEVHrvrtSKz)P~zU`qces_vM0g!fv9rMANn=@P+^x^yyyDCqM=ObP4SQu<LuXqR2r?
zdM!%C`L$N_QPSweN|E{)3LK7HH}GFC-65!R=V`oWgW<e3%)S?lD<~-`O&q%1j{%CW
zil)^7lsuO-F~$BkJG6037It*=O8V!X#;d1Dip3ZpOD^&|!6yv0NPw`=nrUb;@*W>w
z)qW1Y?cn!&1zN5T<S{w$q+?pCfcuUAj^3k`^8&_>pJaXjbNY1>%e!@=_$C&?_br2!
z8<$rm_6iiD*;PZ9+WiJy))omk<7Erq$<8(}z9vzdD?EQY#D6-X9vxCaNlcly;w}Wl
zLFeG-7NE12uCy;RSohir{9Lh0a=iiYpWPMqHo0SEj9f++o2c-Bypw2kv2f<uLLeJV
zo-*|qvgdz?plkz32YH$gE)-O6-_0u>=90G&^Y|WFzB)HgXyGo1xUQM;N~`U2I7H~2
zPIZ5Lqju0tqs(5ZOX{0UlKbI1#6+Xc?*cK32x8(JIO~9?P+2oVR+tkO%e)kT7A+)0
z#%nzeuz2C9i(*`Kk8RP9*1+*`%IuS^No@c@Q(cDDz-89ZWocco1N4iE7(;iHhDd1W
zEiwoU|Ne15E%^U)54IJYSo4YG*D@akqCf<oY{&yniG?l}6iK5MQF%r?JX+S(yD}no
z!IsC5I;-)W6<|R&AP@sm<XKI+ENw)TBNW?YKmPCb3c0}3UHQ1Ph=JszF!LCDLFH%s
zFbswg7alQf;vuFcJ`pzqIKJ|77$ZO@klfo3)r&;L7|}3*CwT2h#Et#rS*Re2d#w4O
z?5ci=HT}G+p+xwCo1=^FJ6}*QexSI2gNG*!@P8YDLk<fBfS+R)zQL{*chP;+&DUjd
z_}v%YjXtaTcEVbxS7yDn18^eA=#Kp7Z{gobWa^5)J{7#JKrg3bFi)>1%cKs;n=}X-
z%>2M~iZl7v^%nM6b1V!9n$bH`D`uTov-c(1d_F0V%~IjuSq*W7*@U6%dB7e_e@jM0
zP&k|@;ce1I{5t>gWy8zs=9HRT#?8_L*;IA=>+-j(y5Bk?fEQ9%DNdjN-Hj>>VPQGU
z(8unVMEq_>e|=VX($Kx7>K->ly<b6-mVH~9_xz$efTi7l#m}p2tZVNdj{<iiOZ>Ux
z|1gTUf<P3IOvCfgUO{PPUk8^m8`{gpUTHZ}!*2wv_#gil{JwwMe@7U!Iio_c9IUmJ
z8}kF)A6~`8U<3dq6+|;_ht`&?JZA2m6){zF^hY0{&iXcW)Np>pokxG3&e-Rg+o)A)
z-bKQK7EC4icL7?BU1Bzb(}^|nNW?U_k>wUtiZTdU>w1u}gOYLHZH{Ri*^}vL?*^jF
zLQ&b^_+6nmlato+k%-`HbP<pS)}an(6Ej~5ED9QiERtzSd3w{b7E1<jOqnTeZYn8~
z6*E4rGQR`ou6q(h{GX}N{|Ve))FN<hIR0nktSkVhv>tWa!>u&ZnKZt<u6fpG2u&D9
z>?3ey$t43J;6h|9ntFcsaF9=UG)ozEk-u=pXNTOt0e1~b5xv=(hYRZjEs5d?Oc*1b
zno7bgG3o8^>1q7bypKs@jos`d_iQ`4fM4<avB;zUdWmhhP=@mOMneZkWeX{!r@~of
zq!l7qsDM(2-xS{v2Z$u37lm7%o`WQ;An5q?b3r!6j*B}m${cQMcI||)KG0qLa%U5e
z^<Qz&&-cGKSc!?(cCX$Ku^}utA2DmTv^*~FJahb|WxH<xDc#Wcv`KCOZ5rtXNT_4J
zb$}mn*ljBmzym@d4GD9(!z(#VNM}mlG<QL*bcf{HJ|`7CiRRV(-@Tjt9Mw0;Nqgtm
zU|RE0IYP!>Lw@*-#ATGf9@u0L<t67$G9kl^)v8nU;6;as9tE`KY%JtVO-K@vJ+fwh
zT%axI<<sZ;6BVcH?3i-%OYaryI)1Vo{2&LlI;K+tLSYzG7~s-|R4pCWdEm3B%_g6}
z00}(Kx<GyHRH9;0hH4HDsZFLB&cF;%m;^1s0V3*|kCHt1xdTvo@eP)vSsJ$hPnzLY
z7AwFjG&l}&1zqhjRD$CK-rWG3m?<5L3P!-N?LDE7zaM|uWgi(+W--fQJmp73iFs}x
zcD5$bRG#wL3&+2;_*Z~-xu{5qR45UdyUhZ?5NksLiM&LFMqDEJBhH#5MaM6WpM3n^
zCHe1Z=>N}4^6{w1ecV+0rNz<5<;5o-l$Rfcoz<q`He0B155rw$P(~T?qibSxse~AW
z&;x@8y}Dl-E_&bT&0=GIyH)A!=I6ZGex6D9Pfk9W%>|3<O?<p}O1#)w#le<0?w{|@
zNAiF%mj8#{GBF5Nm<m9!UI>j&6SF00z?Lk(Tv9{Kmb@hZKs|+i$5iG2=LP29rSs4G
zP8)!Fgpl4%-v1s{{~%X<X#zMWqh7r)F}Xn(!a2Dgj8y&njDPzZ*(+2Oa9cRpR>eP$
zjlb6LKNKWvpor$tFMcjGV8~PHws=8ENC=WgTwHDcl9gmqVK_31hVALXHu}<B6Z<tD
z7*YfOh6u`Zg~qrpSnRyFBoUUrzu&s$Urj0y1MVdi(@C^IaOGRve411_B)z=6yp-?N
zt5+`$5^tIU%I09tN~Xk;^6jv-qxqEg75#IFg)W(3<UuJ)o5w%_u^JvV$t*7~-&}O|
za&&e`PEJmopoRVZUTXnicYK^_x$X#Y)vD!a*U0|(r_-+|$n@9>fJkz=R@2aH<y2R;
z=ALDLo*p$VZU0E33OkjcMMsE6x+0bzo5Ez`D^xz_OG;NX(MW}KQ(0fE@+`K(iMO=2
zrUS1?Wgo@Ou?6ZTTSupsUaOVOk!37Ul~Kp%w0({!ITpL&U;D<BCsG7-yu(GW@>Xo`
zUxg2HojrRtCflm7uWx0sjDRmEsE3t}d5S2p@a~k7EFWpwR@v3Pdqx+#{-@{K6jqs!
z{5jxx@>@r3iT~|b{(1k&!YG<T*$C{3woDOHPU^*Kw^5-i_0J-nTlHip%6o>+00%#6
zIy%0}YYHeP<`LT>o5jh7M&85B@4!K-5ttO04t~=sddy+kw8D=7RWW##0%V1E^3WJ-
zjRy}32gks(Hg>9u@}wZAo(@}uh1%UG=CyjVN7Bh*{AzX{<PA9ElKRiF?5id@4U6&n
z3^p~X8Q-{Z<9Q*wDt=SukXLxbHae*W?2zW-h5>x!od{rA;W)uY0L@Z7c!R;2DTg*H
zaW}6E#OGwSz@wBxg-Ya_AA>%AyhYN5AXc}pW<8f==tVh8N00@RDJmTfj<^5X&j0+w
zs>bV2B=qW{6NBZetEA~!S)7ZV1`c&}SZ2R_C`Oq}0$N&DQfDuV7dy}$bjk>Zi|u|t
zwE-9MJKWdx#!2&=xAZ1?;hG)%yb-q5U8f=WT|=x15@_u@LgJfETz&l;0s;W&cNytA
z%!e=5RBt;Y_;|br-74O^d;y+Uw83}$3Tv`JHt@VajL`MaP8nZ`;ZnP3H?Wt6x-8Zf
z&Dv(rR(4(Tz%`XnQ$})kZ`011*U0^V74OGel`)o$8uGrUtZddYnXRFx7w<eCrPjjT
zLI{;xzPmP+J83&xI=sv8JG`EhKt;q!5gBoUOuVTaw|RhX#x8Zndu)&7BI)XC=C(GT
zQPSCeP4Qm1ur==P-2u7TgtE*#un6__kvbg6&CC5Z9%7HHoRmzr*-8Peg0}y}gKW>6
zqylfgoz`ML5PayV;Tp5<hGr`}rBDd|6r2m?<mFW>d&u!C1{lR$9orv}pcJy&A>qM<
zAG+VN>A&Ht;FbWx^3LDYGS|{CB4)Gf09*G!l)5C+WZ}a>M9&zCQRGtpY{jgA`a`Du
zzM!srqmlK)1-t_v+4DQ+rQEWqn4RtQKR5ULmOZyfL5hZiob6$*S44#v*X+r&M=RM7
zLuz3&ImO@-iTLudEX|;d*UI6v@22PaVwr(}Dq;w8{rvuRDtayl*Rxj?3f_Z4Ct0cC
z)J=FtJ83F4bwi><^~L#u0oa7~dfnIV@^AeTe%ou#DRY1RoX-CCH+e}=(1_a3e6;K<
zH0RobS`oCq?)p=}Kf*LHEiFy5My4uG%3IB4sh>bXLdI9OAcDZ3!73mSh~52J!N(0=
zjJA|LneBfNw=AjuwJe#<cQN^->;h_WqSyQNtF{DA(T9eFn&HbYY3S<4^^DKW%~|5?
z!&s@|lB>_};9IzPLuh#tGCT8?GVZcCk1DP7_H^>~EGs({6B96Gy07I(=t-(~ZEd@~
z(_hL&H#b<@*i!dos;k>5>l^xXRUmc?)bh7h!M7Be87jG3!`&gid-jxDV+UBvky6!;
z{ykQYs~zHd1N;^pqe+!SZR<|x4S8&6#bVCL$gpS1xR0+rN^;xvZ0@a3a_UgpJHLnz
zbT^4uU8NP<sEme){bSxo^~*jAxUr{4i(Rl}kA)Xi>GQWWFBc8S9IUSmS{$V|yoH;+
z4gA|t@^guMi{1Y;Gu*JmyKH-s;HMxbCpTOK&Ofa29t#6&^$|kfz~coOzx3*t<gVO-
z0HttJlg@l~@o#w^Uq2~Evk~0iUZShW1}?iRqk`nvx!i(;HE*Esr3J3}mM8|H$1fz3
zh`9mm(^-Cz!+ieyd3$f(FATVa@nvd4Nl#|f$9vSLH8uJM-tY5sr9ngl&ON;KXgXjf
z<s@5ZNQl#t-uC1wcLC@<Rv_X7QFg<n!PBV+%6UZ{5l**JFbtBhY7zP99HTV8E@i3w
z`!brC%7;t~3bUdan}Qnc{WVrT1wB10HS!GAM3(4GmEhSPi{5AS+%2u?@}W~*8LIP1
zA0|TmyoKC`JcHhre%&PHtGsMqK3i&jR-n{Yj}rJrS+38Z-Qa<*T(N(ii3YAP<fww$
z!^iO{n(nE7MD$5yrO({jW`hY!mLDO#8{hj?O9K`Q?Yye1tE-*eM5JkHWOA>^yq!BH
zs|!XbROV|sBa-6MqPOxfFoIX;iLQnQOQ-Z&EEqVz68h&w4vg_06T{Kr>U>uAVdveZ
zMr8bn;~&WsO@98TS>bJ^S-`Cyjl95KJ>QX-?p>Czyg0ltR75E5>5PaqW}yIS{9ck*
zOQ&-H3ecu)_ZQ#kfFO)weMP2P`+YyXt7<?&<Ke@X_DnL!+Y1$2Z<?=SE-5`<@w@YK
zR-TlIBN<%YRsp=Ts3)v4n5`K!=(8q`=;jNL*znr?<3zZ*l`OijPyqNjUUbJD$V#p@
zY4Y3eZ^ubk*pGT|y+?12RlVCQ?3^2M7`S+AW^KVK7)yv4V;r%sas{PmrZ*=1Ksdg^
zL-!oZYM2r#JA?=(?5)TC)n^3yh4>kbZHIEqU%rY_kTW$c&f|=T7qpPq($acpF2HX$
zR}8$dALBMXHeO|>ce2-XuO%cT%zUw0j1zG%);Dlj!5ZX8{6;<~aWC4vmwAW+=5~P)
zdFjrTy>lc)ykj<s7w&Qx`9yu)hZp<$ls<f@bu^WeLopoc6<c;m*4TBwZHB6g=-`k(
zE4vB#qqWZGn(AVg5`=6LVl3Jdm?ahq9eluSiQB|25rySRIn1*4>fzopv-{yr2In6q
z!d$T<%hhyMOUOqT;D$aqcx?lFT5=f|i-%V=S?0s%u73CUatYh;WZ;mpFMhW^!qxkL
zn05j~qU@MDd_VtL?QV-;mqm1#b7_+2W&xqoeY9-wBsKt~yRWzbSi6u;>yY2r4ydW!
zaja|8?VZ^Y$1z9x>o&!(au=hPEP?qLF^1~yj#@toY-wrH^?e@(!>rR=y|-TprHY7X
z<=a!GrlIM71?s382JF##FBB`p6>cYKf4?;xj4B&<yTj!49Z7mM3X;oG?k)P=?d|QI
z>@DJ0u9afz*RyzEoPsObiIKnn&xvFe2bET0O0*{*Z=VPgX!?=u+WpFfp+I^77l@w$
z`w&uq_6&axT^UC*1Cp54b;d`d*7HVbIfY#BiD6y;dZOZlCnbELw*uxeKYVS>cPntT
zAa{D<L;d;Z%6zqK!(|SM&Kv4}wHzH%NBE|P=1y}%(Mz~03<v9h;8{}A9-9cMLzn&a
z=}dW$mx)|;r&AzldCXp$#(pAMq>JWI4;wf-R2V(_c%>QMSdf;H!G18@E<AD-+_8eu
zjZ=xhkoSF$mm9y?<jnSpn|H&cQnd4&D~E(_ovP&Fps&XL`}cK1=mj5R{tTwNLR)>g
zrnI=xd)e<IM~aKWLyJGzVjq7KKYo6=W$R!4yTF)7y%qvUo8(<xRohaeB%o7tZK^YL
zXKhMROTZMZ)KjSYZiuU^(lwWpo4b8>5IQ0UaOBTF1=clZ^Z5V=1c`=va$GzW+;Dr>
zuL`-Byag+hI)5(!6{_yH?~rOPbNol7(2YN}3OsQ*UED6iHVZy{aO_epnZ6TrJ|dNA
zrwE8^_?$CDcq=_UN$AHtw*s$9dcI~Oq<!f){-Mpbd~y}s1>f3hX=`J`M8;^{aci<D
z7AfKQN!^;a?@Ko9N@p26B{#l0B{pqiWX3~kwxkRrS0wt3jz8GU-v?@;z+!omVFfjA
zVT+}Ubd0uN1ogEa-nFt)0w>nMCMTm|61Yp8W91iMIc%j`!G{(!yj6;Z4HwV0_SS>(
zJa?znn6D@a@b(<Ovr7=PP(v~A+1+jLcB@qT=dFhSFMpNF8lR*mje25Qq?ORf)oc=7
zSjfr6)e@f)*G}4hRg<pBA7kr*m}=7_tFl2JOXB~pr?X^(cCjs6Ka!n@Xt8tw-P*AH
zZ_>ozwt1qUflXtvs7ge)_H`GSGACRav-gOI8t4NaG_ZA&N<@y&@BGDI0a&>Y&gd@%
z9)C+b`4|Ek*oKJyvAe{?QZmr#q}x=G6I1wetAUA9je6cx{~IL#x`O_1ko=Xc{{7*9
zgXF)rC;mf05;-7;q2<wU09^+Lqbiq>gvq)~cb+u@Yx4BMLZ^ybmDQ4-hYYz2TlPj*
zG+zZ@*UZGcRni2S+n~Fus_jmmK|w#aL;m(R{?Beig4+zR>=PxRqG8xYKPJ23;_&Y7
z?xz0B!0|s(MrNwB00msfFjVSNbkM!<A^UWzS6<mzCF0|+dkxT3hrI=STH5e*Y)s76
zPmRw3jH4Bw6DQ(stdb~wWemB8+pg#F3wOYV8}#c85<&Jlxq9yhc(hP>$8dYzInAc5
zqbtpGjq_f>vkhjg=Jf`EjWm9zyh5<xNTLm_JItuH6DyHe+P-7kpXpu<dJ^pkLScA3
zK50HQ1uoFX@4dMY7x^dqa{2sW`OcI~e0Mo#l=JaVmL_lL&dTC8^DAOSep){0{9^j+
z*N@^Ebc~FQ7#~Yc{MkcD-WuyXZ)b>K=}+X7?@R$MSG(>;agyfNhRB@~1U7l=j3AQk
z<*}xV{8#FZbpKJd_j%WQOunf~_uVTE72=d|MeG*SYZ#A7Rsy>0^3_I%T6)@%#Sc0v
z$>MhCz4^1t)f@Nns+NXbGfVs%=mjk>Z-b*@3uOfBOc^(o+b@$P+(V+G8Z(6+a|qg3
z9T@Xl_s*=-6LY0u8;45z?TCTYh%jM&nM|EK&(4MQbS|*g2SuPj{5+MH?*fy5w(C`O
zuo=Ey(+lsjvxDoTkDQnglbtc5{Ak`LQDBznu^((fI3!^Su5g}K08N2Kle==%pn<QI
zAQZaRDIv8v3XA2uaih(%6GG)cFP*nAnvI#50)+o}(0U@QU|DH&jy9v<-DVoY1@2=9
zY)Is1D}L+s!K|D-m3fW(6h_h6sOjXbT+vmIpc`2nx!?gC#ic~TvNbcNdgs+P2Vv7t
zTLqA3)7+d0FX1M_zf{a<L{_K!2Du^Rj*9SESI#RL>qXkf$E!Fl060b?nG&v|apT{~
z_@Dm<wgRZ5jm}fjJGVcR+J%M%6)P1zZV!K7Iwtn)nt%N@XkrWiHhsi~OKhTxzUAaP
zJm*Gw`(8cMnB=wjR!N|pUt$RDH1TNCtcsR;n7#AxYt2BqxxBo7+i6z6VtdE}=QeQ{
zy`38nE+R8l>L7X05GbZeUQn}yDPLHfpG%G@cf7JS;@%0Y&J&%Nn1#Gl^6DnEH8g8{
z*x74^zYfimtSAi0Mb4s+<P;m9=p5Ddj>nEYB0?l{lHmh{u5B*+Jx=o8w7Tx+hMyRg
z+HKfID5rW1zO{<JD1~2x5ToS+wG#l(_H?Y?*sN-Ph$-H$p*!+8*ck+N|De4GCLJ00
zh|jEfWlAHL=_+3Q_cP>Y65s#$P2O9m@xDEnzSW>6VISKKh>vK%ug#;P3GzA6D7G76
z2hfNIXe{BsUqO}{va_FO-L(Q~?}fAsWAVbEc`_7n|A{x0id-$28LP1wPK9Rhl+KmS
z3#dylZ8s;Pt+(uF4~7~6lxtQ)Ru*DTc4um|`b+bv=He#7PEjEUxtaqFxb)7c5qZ}P
zaiUrj{ywx&Q{D6qi9&7+PtT#xN}~>1emprwtVz^t@HIek)t5VYA9touC0A{1%K@sq
zJB}X=HrTc7v;O4JD!oU?kxEZ4wLa(+zZvJ7LJatjxA5c53}rgV59Av?Ae;fGrT)Ba
zp^6*^AXafV?f>X#Xjll$$<0l7trDu$i3B*Yb{IEb)lK1HkHDGHY}js9VJHNA{}{aC
z3;@sn07SDr{KO*Ny&$an@S&Eu8DtC#TKI2EuJQ2BfS`8XwAwH>cHJN|o9hLiT50``
zs>a!)nGAZ3P2TNrb&1DU5Bj{)0^axRT@}umP?Mr!>y?gigeKDS$2C|DcZP`TLX$g$
z*HmvN90jKytj{E|9L#oZHRw(6v&Xl@X?BQN4b<9IZ*4xYe07pyUcznAYT4r`Fd}vv
z_2P<jXm?c9umLG4X>@jYW2mZIn{kqmja$;dQIrR8QG@~Pd!y!F7!f;dvIN@u`Dn}>
zB>Yi?z@)dJU(_(R$HKyj+*bM*nB=&;2t)_Iw7k=Keu&lhm9KXquE}9`dm^Jb&Z`E5
z%8PCFx<@s`@f&qVg89{}?ki&?tUN288@Sx#4x)yB)2bYV(vXIpC4>!_Jl_~te$f*;
zaYX^cQ#J~0(U3Y(^84x+`Oio!mA0OT3Xw*AoA;EBjg4YkH+-CiXa+Ds17pPvUnkz4
z8TXk!AeFHhtM=qa?l*V<gFZX}C_?8{Ha^F`C*oo&YfO4;h7DFK2*BYhrvYmD^3|)U
zTh^d24oqGf;!;#B+a3cT$>6TMyr;{;;3bQIA39cvr4M!w3>^2K(iu^TjJk|m2t+{`
zrfR}Vd2mpfm1tGTmn|8kD^II67mZ+_G3L>|dsk6+ZEq67`Re^VFLy}p4QOccw3W+_
z5aFM(ss}MbiZtoT#Vn7?fz4Uk+qZDEvAIC}u)YSjR`2L9zX;7L-IaT&q0v#Y@D?L;
zurmft8Zh)yI!bZ`Hc3e|TQb`-;OU2~!cRRtrJ;NO;ya}$g||E%l&n@`dlSnnSvd9=
z;zTFE9z?%}^(47>B#Gs^aS;d+GDVLbz&p-!{PWZOuMPrR-AM+ZUK$C{P<rG@2oruT
zgG1f{EnM?#<^<5`N^<RRz&F;_T*yrJGTUG6rE&^D1u?l9E|&bkE_OJeC@_q+OYHAr
z-|=3G4+7<*n^**-47crb&xFcUBKN!^)ERxusQFUmj-hK`K6>Y|FMe7^LfmUpmjkr$
zyPueW9<~aA+JVQ@gvUa#g;{SCKUAidPv^^EqygQ3sa4u$-p(x)%pbc^wJ)bQUYm&3
zRF|Xx<bSbFvCZ;m$fip06~AI55y@#XU3Tmw{d_`na>ro4U7}@ou@W^cwE~FNwj?3$
z9Io87oE$EQKCYRmmOH{yP`&@qb~w}B%UDyBidmw7%6Ym&)n?pX!|(yqfQh#!lk4Og
zF}Y>{C37NOcXu?5j1GKR7p0GX(O~<+c5;=ssXWU|Lqh{z=>O^J>+(TRbY2M}3jwJ6
z?7QY@4lIMr9J5gCb$EIGd6{r5O9cnim3KeKur6;~w7B%58Qx8lQ%w_im*fISou17h
zi-__)P?g<&wp<M+=M|3p3dXmjd?mO`*`66lxJGqZF>G71(7&Y;_TWOyewTRS-HdyY
z=#GZE<41X9>WMH=33ZRBpxQ-7u4WcZC%J1t%9Rau$F`vgTMil?ZnK%M>QQWjfMC=(
zQbO7*zpf$})v91gcl<N!)+2ufMmU(9c?VR`?chLE9nsO#qqljFlgLm@j_F6vm_<mr
z1@A4_@L0?drcHe44Yo$WEbSnC<*_FE{Z}EV?FId>K;blx=Llkb+4H*Yh|oT0QCFXy
zQOTZpct<V8W50F~S!I{@`Zb$xTk3MTNQd<F=dApEHR2dBtfv@&@F^8|l-Wk2J=e6l
zQyvS%Z?9~6V={k}QMMuF3keB1oIeu+=1j}(FI94<ff=8qGF+t#RnG8C0fqKeQkALd
zk3?)k3SA`#tsX>c2F(n=QwDR7f|Sjrw!iukqCz_&I+7*6E!52C?-BCg_sqcMPfg0Z
zaGIqG$TBT3uYsea%$S!V@T>iJ_0RIb(xlHoEJUeejF>Q6_MFC%n|0QZ2Lmi-dcmDI
z_8=Qy0E+H#DoGT$Cz|2kHm_h9kHC^3C2RLr=iy%`0*XyjrE3V2(Gd~vOGhQe-7Hgk
zT3@7N8i0)^4FRj#ls%Bl<hTC<ffI^t9IbGM?QaM3KW-cJSlX#;Og!@9I8C;DnQL07
z-=2r_28v90hH^U9TVWk48wb&MsHv%YrP!ygO*Ae>ZTV~t)v3Z%w1~MRrv8B12xK~q
zV9*0Cpu9rtyEsYDdv-I9hx<Fte>SQB%R}0BgIf{j7e}tmvx^-hi6WdJ!|0WrX{B<<
zGuTd~my4nE#ycxce!x@e&F(P+Kn9>4B~2QwrHP+W6;>VV0UqKry=WLz7fA9*%&yG9
z{3!XVzu$u|yZ`OZ)z2H*AHx=@1CV*fnB=Co18x=eYyIx$z-aR`bSc!Vegd4<Q52I=
z;qrl~&?SRm@6+Um>>bN~O8Zjrv|@Z`q=;kdQZ~&40!M-_NC;)4tJCGvwL!3%4-*>6
zdQQ*z_fW<)!Xb(*wcG$Vt$M52Z;&eNt6+%u=DO0Y{F_;C7XOQ6idkY9Vqr>9Am-)|
z^8hcCvO%}RTJ+eiR9afKB;a|bK}_)2p|ALbA!oD6rY^AD>W$-3k0!QPsLWO;uebKj
zcNcbp8=XO3O7-;Xz|GLH8e!CV=3zxJee2~*>H#&Myqug6&|SlpjfaQ6xf8^p$s!X5
z+`aiRD0(mlvdu7KYmgWeV^tM;{8Oh+b*0I#4c7s%Q~^5LY=-I<G{B(>;;@8@67axh
zo8LApJHNa-(bWH5Uml=m3Q7p23y<==73CHs1macTccRy(+9QUXry7d0dulsvM(_Mp
z8U6DQs|wIldG?U85|tx>goMA7Vb1yZy_+W=Tdo2LiGXXp12M!2PoOW0vmo0LJO0Tl
z`^fwP0IlLHC(4M~sFDErYAbrS%S1#G^g#fCf%z)9?*>FHtZWMSBU5^Je9!-!PX6{c
zy73UAm|?%oL&U<eb%H;#miI<Fh=_}8o(iO^(G=OIC1PPCA@!eU|NT^A_Kr3?fO}tM
zGa^a<_A>sQ|C$8BACa`l>Le!Wxub#Tsil{!?kN!qI|+>iOA+dwCMN1%DFK+(eD2x!
z|E80Fzl#4<IsvCI3}k+wu&Pp=?ns6>L4dvs1T$gJ!NpS2CY`tt%9I@g#Bb$$kb>j+
zV(C1coqkyekPUG1@VxI!m2fa_OO)VaS4*H)ms#@}bssl5RKFdzw^(KYzw`3c(d^Dg
zxzt81s~>|#k<+32R~=%Q2S?og)n^5k$_b@iN7aI`lD<ksa4`jJmcDsyEiIa8cJ*Kg
z-r-2~(mqEoSv=-Dp6RhYLDG2Ypi^bcC~55QaF4Z-QZbnVh%Kzz1OELY{`u+n`>oSI
z@GhS(wTKCaj$mG+%DbkfxEl@2_NMI7!JqCt!!&cG(k%OapCC_(19VfY$G3NxX*L5L
zVtj{R>my*;<jpW^ISdmW5&e$HBM9#rwIq<?CrFl_gG&K#KbrE2V&nR(U|O~O+N4)z
zl2Wj1VjZZ)2d!cc%mA~;_1*Huax`$KAF&(ZJA2kC@MQpMJhX=hVoD?l^b|fD-!jwH
zQ;o$Ix2F<K5levZ_`&qbWeHC-=tYBJl?-)NhpU5cw=iPfHaRx<Y>Pt%EQ`An#2hp<
z=#Mr@@-Q@XTG`Ri)-E070W_}{oX1Z#vR5cAzsq63s1!-yv|pH{6uJxs(j>XG#Pi=e
z!>`>@VECm4{s2Fh>l)$QA;xoFX8j{1YXaf`-LmNne%HC;q}{@#JoJ?H%4ZYS&~WDA
zfhwa&v@xyx@edZulTepjS6iEb)%SbEO!qtI;T))SCp@x98Cb^>)lX{#9QH1a?PEi`
zO6?MplywX}eGOgP$zGt$+p_(pl`e$)tQ16GXbo%`PBmB7-ibs@(+CmqJm;Y28FWbG
zAq-`*0CL;m(lY~mlyd&P!sp}63X<Ee55Nc<WUBM>bINqHdSe4cRo4xHEolkd%7UOD
z{kwP9l&ckiYsW2KBHmL9)G8%-PA9W~d!5&Cnym*KyPJp|<R8xfo%)3L-8U4@Gg5>0
z?QD!nhPc}Z;UhG(5TJ`zp24A@`Ae@Zvm@I9$F2}K?z%mI1O28~DjV#cDG|_Dm<rTj
zX7!z18uZLu?1@p0yUE{gT&Dhzk8roq;j|w$AP6V{XeGsS>Z#~l9967%7Zl;f$l2x@
zoK3n*4ovtD&n8oBW4nkE6#x}gQ@NYs9_SLWNLQ#Jq{pANjvl(<*bP~v9!ZoAd&R;N
z@B%1Jl_iF4B`3eFQ(G3Sz@unJ*Dt+Rqv++$N%JFTxqW;C!I@or%zOC`VzYv-F*9`^
zT*Bz!DvU5<mPi{~q99+vo4_O~UU)f_uNK9#yHwpKhnct|6Bfh6-3=5|Ah;D{m!#?h
zo5~xfeDM=OOKqN8K$Ktxfc`KvtTwEmZlCRpK&f)7&E@~ZE0bYdcXL_n7PA}LK0`%N
z{J#MxNBEJ^c9t4Df2n;L2DGNl&EKsI=XN%FNezT?ZjVb8Z7ukH(O4O_ap<izh(wrb
z*buR=+J2y6yHBRmbPC9N4nc3G5t1u`d*UBJu9W26QIK}DW6|sF31%EW&(_TB^IqJl
ztGXO6zWO2Qmq{=ph^DUMdkDngUz7?!ZFFBhzVt@+3N;iu^Z8YhNUzZsVs?9k_wEgz
z2YgEGSEgP%s|}ahP%ZDzzk)<kYBfvnD(0;aa+!TN+5%9WBM4wzdobvzx*EW?zf+>u
z@<|%N1z6bz48na%jJUz+hgQjZu>_ARGYJa_2q+F4QVQ8yaQE=pU&(|-1Hug+Tg)Pg
zbw~pq!w$Vvk8b*vFZB^%zTYXUCNRMlJO5is80&#$yNd%jY5`aF#^KJCgqSxNZGD*t
zeTe1cj|~0rA+^Ik;i+!HbfuUbljL^dHdr(a5OT%BDUYZWR6d78V?FnG1B%itB3#qo
zz7?HLd8&Rmy=p@kp0{r~!!d>&A%jdTK|Nqvxq(Tv4^`%?V&|IfRJR#=$_6_hM1=m#
zvH^O=xJ82kV@8ZJn8^jT{_U7V>~EtEHb)?izg--<x>~;2zK^TYbv{b)6XN3&zXrDv
zyXaopQDj%64rbY*T8K;lU<@pXR@VG5Ep5GPxb=;JJCH;v93;}WC6(YQlm8?_r1Tn1
z3Tc!8s-u2hMl`=}sSw^`)@*jr1{Y9@<OdBI&S`zO2LvN`848H<63Qpe$1&>Bl5K(Y
zC6|1_2)D&mx>j$_38IIsf%q~vC&vtMzeC)|_imC&WY9%FWg~oM=s*5#^Gn>RA1G0^
zRzksr#LZb|k)w$O&}3bEuqWodnKa|~>D|gcDIZp;PE=ZL?_02#9Pr1L;5FVJ;a2*C
zAOC6Zh#E-vojW$hjSu$9r-l=O;Gl5K9Vm8M(~dKK@?U2|*nOzsGE_?wOO4gH$)`-T
z>z4?Z*nB>NUJ?goQNn2o?&vQQ4NB3_?Ab6-;_^a8KI9otwOn}(48x6ZG1=5RKvsL7
zV-n@u-5B9wIcUXo6<bByib)wWf8T;SnF6!?O5**_3uVhGVm+5K0WY7gM)DE*Kwav<
zNAhT2Ika!y^X&y9ZmpJ)Cp@X(c|DzK77K%Ke1UfO*4eY9>7W+}RO~b$8@?bD1l$dN
z_G|u_O2W5T0AdK^-YyjjKOD@SujJ>5ANH7}3~EpnF;1p(YO_xQwDZckT6r+y#<^wa
zBLOstovnwWv8f*HY6ssc0Gw1aD0J%h>6$H){DdbR+_3n%e53q}=Bsj_b~89=sT-cZ
z`7J#y?Q#u|gcTx;bt5F<s-edMzfADBkzb>k9L8mh+)(nMZ4J?e;E;FS+!7<E3&V1D
z(l>IY%Byrbr3&M_HOla`c@nHm&6YGO*$u}B;_3$CG7LAyx(mii9SMa?9m3@>tY>GD
z$N$;7R;L(TBUheIvxb7k{EbYp>8-k}_7xi)!)L-F24t;o*>(Ykz}RY#4X{_$>Yff~
z65~SpPS7;pZ%QbRG1}i7H))JDA<OsEhj*wEafOk6ZF=_BFdHl=d=d6l(E-?unp;hC
zadX3xSrP%!GrC8A==MMl{sApCryXMX;5JsUshE6kCZIm+v*M|Wlc^Jk-;XnB9r{X)
z^7@wJ51?t~SuTDi{d}v{IOCBI_vY~Qm#c<x5@P%oJpxHS2j57#YJIC*rb$?lOcG1Q
z%TOQ$5^)q#G->)P(8EWaJB<htA|`a-zVURI0-R~kblR7Y9w8mPZ7PPLfUD>cVX^x9
z1?i-GBpQa@?0V-s-J~XMI1HGp-q=RE6gpg$d;1VHCaQ7P;y^ryi`#i_eEM$W%3f9l
z5q-E-4JeNt?4?qYER?yUQg8B)`K&E^tfMpWtp(4nM$^!tv=?yR1ks5<VP^C1OP}W(
zNldRh_0FKtngU@6FyvHhW7!)JBz?b)62X_<`C-bz=uplTE<N`FAcEmg3m<CwZzhTH
z0}G3+oR+&F+%z<dSs;!lNKaGij*xs2V$oq)$yEX(#A0i=g4qaL8O~RZpAskIWsSi+
zq(xO#ffxLHI=Z^$Gw+7iC;@3j-4Cf>y*C!55e;Nl1DBf0tFKBCvG5F)vc@FzvAs#4
z=~I57?vC}{lDPnUWJCqx+oDR51-o@Jej;H0cHG!rhr}{Azlv2?f?t3~|M+(kAO&HA
ztWSXRkJRRvciBwYMod@Hbft#I*kvF~{sFx_1<*^9m@{lLt7~O4y0a1Z{jmV&xv(<?
zj>FVqkD3iHNRYI<0Hm#r1A#$zd*5CoqKISr!U@5qy7zS>|D<b8H*XDr9Cj`|x)Bl(
z@OiS}b!o7WP+v(8#dJp^9TkU42(b4R4w>5h<M^qR?fa1d6!1rNlr=;k-M>?0nE<yf
zB%Kx!k0Sd>?DyXVcuDR?{M=6d2j9%mfq60G@~?<!k5TBJ2YvL`U%RdlaWekmzk3Q$
zQQS4I{g1TJzY)7JfuIHMB)k4QF$?<|37YY{Mh}S~hW+CIjSb*fOcYYY^d0{dCb37@
zu^JLZy=25M$Y@pBORt}#jb45p;PJ-e4rMNFhP8%rUzfOLs8$!+_#^i)m;QUpuC(;t
z>%)}HuR`RR`5tB`Tj%zd8vpW!^8T5D*O$2lPC5-OWz<JKrAeP87m;R#Z~82|cMKh*
ztZg|M6BUxL&j4sA@s}=Q81qkL?ZNVo^5z`B=$CyWO9l3Z@ULk^9Hzi5eH4Us1(9*U
z4(2i0p15o9H-h(n-aQpyYdBYB9ltvOcDE`B$ib7(OaDP``1ygHNCAlGM%*4vkOjH#
z422yLU8$45PtpQhbusPUF}nGGy@^}?0P3P*8zyRtHt~GP3q%3WRWz0bm!_GCn;S<?
zd~QTLc12}n=Xbn+L);@~%NCIe(9+Oh<>^uw6<MWj0$v3x;E&!ZwjD}id0$w_#g&_5
z_O0dB%4qQ{zvpUimOVTR4eVVuyzL7P=lX2S^yjLgn<qEz&54oMZevJq<+2f8gKDWy
zCmdC?IY+rTyvPKauwvwF%*KXjGxO@LLlXYELL1npfTv>9LN|<Ezg<HB&YXhW-1w&9
z?6UMsWO{mOshf8xI);eDX7Z_Q(HVghuNEZ)j;|nO38$R?;ll@w?b(~ALse^l^kIX4
zPcL|-wCn21CPJj~`Pwr@xlfy?=;!C=%wlm~3U*+WcKZ3|tH(benr!?Z1H*t3_d1XD
ziM{mV;(6^LG<>#Dx9G85@pUWaWbwt6B4xsYm^tEea3(fKE4NI)E*qQ%N}oB7Us+OE
zR?8OsE>Qb@I-CEI>``7BFP{nZKv=~!T3-F6IixOC@Li2!>k=4hue|{O5$Rhrl~Hw7
z%@;ol?2k2Gs7%?n#&I|48W|;*sKf003kpyy-oA>87|f%1BEWA?zQ`>(Oi{-!VpIre
z3!piR^Mv<hk1_Ak6|nnT($B*fg&)rWzGjX028z3&{HmJF;$-_quO)7GqYDuG%=)Ht
z3+EE;OV0^p)JI@h{O-M#scX?PFklq4Xb*m9wwilGFqW8Dc?T8A2Bo%?4*S#Z2GffT
zPRrm{9KUY`Dd-K2s@S#44cHsuS@~2$0R_lHs&aM;u`(jz7b^${Yc===)|sVzipq$n
zbI9Jm`n<q-$<^<1n{6*2rZ)z(jo<`L%?$nO2mk1|t0GK%FwJbNp;~IvH>h<)FnN4;
zch0AQw^1<um8Jgq2Y&_9N!Lik`i#a(s10vtwXHxrxT3L8D#!A+_SRb7f6y&X`>Hb>
z2sYYY4nK5nBp@BFt5>E*vhz{#P6vR)Gg8k?OrWBmRnL?Zz8)@P?>HqTvjaC@!0mm_
z%FS)<Efv!Je%Lni<&AIuOVHL5?hpf0a)T~28V8`rgiu6OT(ShncR|z!liO9}Z8fFZ
z+A@WCawS69RkQ8<rN`{H{BctAC7e8qF<M52a4V)S%T0gSQ$C}Hx0yK+u>nppT!Tcd
ztEY<6e5>5z>3F=|jn7^5uuTs{k+xbWRwcW)<f)Sb<8@Y}dt2bWK0pxjpVg*7E89A?
z&kf{_NuFyF(#DiEn__P@<S=(HQ*ujt$#kcZ6$}qo&U`_1@{tK-3{-D+`YC?fZP{K}
z(?Xjya%gCvC22Fo#XFMs0Fr-XJm-FEbch(U1D`!;*|%4fI~)BEb|0&~udHPET3=wa
z>CbBivF6zLjjl0nUO|!CRw})C?+|U>H<w3J7EyIwAxT8?>{($x5EY^8CcEBX4ERMb
z!5xqoavthnUD0qWc@?kkT^@%|>x8*<<2TIhf38OU_BXPEKUj;&1T02OMuK~ubE(z>
z+JihJ3(v}1d71GW1BVxwC6*FO+<Myi1JzOVf@96YSAcw}XWuXtG@sBedh#!0`9hkb
zGcmm!DdF%3p%_DL>*J?}FFvQhx(#NkFYn5l)$<0YB6s!9Ntx?b3(nVxsq-+KRr}$M
z_$|M5iKS+S(iwW_NeX{!&Ql995o#*8S{oi7&dS=pIp(ppcoFd_D@*AV6ESJ(>&Rs&
zitlP%Hug66S|7^P>Gyn919%=|BG*~GW+D=+*g%`~D>(d1()mJ>2j`yyZE>CunS=e|
z#v%f{eMV0XbLmca*qY+G2p3C%7n~?&cUu~XVq1E<kr-gfxtQiU-@nnxu+-yd2$&mu
zDn|xMz8#%c^mGQkzaVCcjAiKwPcTa-^&VhMHxyfB-VLQ4`qU5-@(m4d2IsMx9ar1M
zu2NN{w^jU06&720A17M<{Di{A=9-=dv|ISphm`@X+>tam7^C#-46sI;YiGNUu4u$P
z2L^V)rzGcS3GAx_aw$$V@s;gf2l4X5p(*AgnVg(q3Ya|;;}-7d5m#H>t_D#y(`~0#
zrJLfGT0Azt3&KY2MEZlymPr->f3MvK;*MbKQ$}|fxs1TImR4vd6?B{xG4`45+vuF5
ziX@}+ZT84acF!S~a9cKJC=08(<h8kg?gM;vazbQ%EttWbKQc#@&6}nD2~SqI3hN(<
zrFQt|za9`eR$!1Y$;3+m7%pdbJTJo(TlK&iJnLb-O{7HuD2sCvA}M|ojSm$ud^oP@
zKhyAOgJtT=9zHE^XNvch4B9KUyL0g`6j=veA-L&@=;nhbYX=T*(l0?Q&J;N;&-l&A
zt@NZOQPy}bGV>UeHl3u-&CP{<%S>&2iA_aWq<BhCb^6I@7Z_7Tvy_Xd9d@0G_nfT>
z7k~UmTY?aW)c&rHT*JpJ=ObiPJ#Xrl*}p33<OVYbWh6ayd;9ty_u>BeLHySt>OaN)
z#WnzycpmV5qky5YGneF`IFPBN+vOM#0CtxSSX{y&0k+2a0seNiS<ku$Vpp@P?&wqe
z9$bJP$U1{JvV}&xuU!cC_)1P?HuL3@o?J6{%dn%`-_o=r5#GV?i5LpzQ2z1gmtTH4
zI`SGwaQgQE*ae(>oL1kE$X5$4J6Z8=8Vb^^hVYOY)A|cxMkX*%9(37r9*t;A6!>Ql
z_}+8J41N$vFq89Iw&PSg=!oA+3?n%$Am{uksluH%Uk^aQo8o)Ow$!@$W~=^cXLI<<
ztJG9h^KaiMUkUj<R#QW<3f@Q%aY*^SEm?xEf4Pf;i<>K|f>rRM<Ja1i2ycgo(b3UK
zp-@_$@Q(S7kk!K8WhY|DWjAP>nm5@9Io4$kM>Y6QB!?-K0{iPdm(bWTl6PP-^+{Hp
zjlx%w1{TSW`Q6sPH?<nj!VN*;;IdGNW+U8dQ=vNcJz942_g+AuU+a`&kl2_{)M#(z
ztz$p*8A%p$cWl$ut4g%T4TN?|Be}2K5QAaz2D1kG15hPbiiuGA&3%xqArmOI8DM`#
z=E(;}`^3F0C@#Jwyi{Y?rgDnRFK0f7n=jb8Lz>6Q$tg<bJnM@2LgD<OhOu!<8$B^`
zZ%dt3CWn#1Ioc(yx55OicOgz*EeR9LE1FmIYq{Q<4|}gl@63cj1tEresd~P)d<M@A
zp>eP=B8FH|Gzt5A(Zd(U{W`bj7ey4-rsl71sJJVRT8yV+v8g_^8h66cb~%9r)U06i
zMhQJIeKf%XIRF%7aL?T&yV4P<T1Kf1jC0h})5kyLW!Xqi76M%lusNRjg2Y`EaM`Zo
zX_f=lZaRiY4VUFoBxV@6VoG*MZ$)wPTyKw49|t;@hTOoE5HaUz%zQx|^OnqaOK`6$
z_>k|FrkdD~IB=~CJ_G_EFbgy%C4X098%GWvJR%%WG*O-+#5^kFDe$NsD~;0)pMKj6
zoy`spX7$-dNbdBm@y}JcVC&7_)9kGe-B8>8hVCjb8P_eaiACwFr3eUZF8NuiB;C9Y
ztKH2oO@GGk+C8B0!fQM)z6i*KuJhY3Y+n>Hz3sDw8-&K~KKO)@?*c}lGvj^{gSJIu
zT{h8SX{Pn3`wFslB^<`~2bZ7J6GHjwI=1cTLq~~;y&D&rLfF7{)Q}F#>JEPytJ5%A
zu?A?7R%pvEJm+;DC0FSi5zojNfD?Fox^irI7l0s9tL^cEB1pt!@X88D>buWR=_8^N
z!Jr{~dwYR0cyqUIAzZ0XY<3AX>zr`Qipg%I6uL&ijW%9`?G!Gy)a$X)Cj!1n^BOie
zeusfAvhRc*4cxHy!R*IJ<~gBe#>Qi-5jjg7YDr*#tEXJ`-cnHRIl6voc;3oW?)W4D
zb6}0!{EC03&riO2>l(M7c>)o)W_YTsHVM6scD{>y1CVmEv3P9<UtDQy;#7ClH0*m7
zn@R^*jb3>Jz?PqyI?vh)Q}j+b76Z*F^s8H|y(qStxDA{-1yibs;j$0$M$*V($V5ij
zPM;eTahs{Kvn@t+TJ{%PaXH4Z?(FPnZE$mQhh7VfZFqZKlTa~j93nEt#6-oef&x6N
zf&5xA%EZmFs|+Ic)ByPmt=SwcnX8o#r3EjUVEN_shdHTt@60s}4Vi$+Vlc=EywclW
z3BB|^X84BY5(z99F)z>jgdQclt+^er;}R4@W7^ZLG&HoH@Qa9Wfb5#vqNSlhIqRn!
zb0f^EClkA%=d4|Y3e)`5C~T*n`8i5H`vcr`F0Z;tH957m+u~(xtWL7vHJV3BBJN|>
zsW2k2Ns6Y^{&_%^eCLwSZ+}%L|NKLf0%*_M=H)mLGi}Bu7~nMe4}O;+#*6}<4*Ivk
z+I>X%+m+k}QU#vtf2I=CjxN*yT@%LKxx~MHBmH@Qe$>AVdW135pF59TS%5z}#0iv7
zVOkqRaJ*$7@lXQglk(XK3u4l*Ej8%SV{&%ciP%aXVgQVjf9>gaK_V7bRv3&&dJNO@
zCC2nmR~aB%15vlP>4`gIPtq5mb83Tse*J&@o4jiPm9kN~w119>g^dgYe`H8kYn&J@
zWB&z^2}<5lAW#4EEb>>3|8F|^IkXEk*m46=stLD%)I?k!>YqSn<q@gWRP1UYh27mp
z_jpJdsTHQxlG7lr51UX5FuVYc4L`hh-(5RO7Cho+#lIsWQonLsXsTp`A?1)sUaM!&
zgzyph))=021VN$egK7OA*XUs@_-km7=BS(}6Rm;95sIwdyNW>!RW6IvicCmL+nNp9
zuHr1ETlbO&vNY10+S|jTmX+~)QBk^;E><`6i#gd<;+XiVMLEZOoE^13ta9YM86YOv
zlxVZ%2B0LCt6{)oWES0}z<4)T`+XW4jdk8Emy)YulCZCr&%s7k`FA|G+34Vk5Rbt(
zLwjRmLzhnlX3I5hkjVbs?dbL^d_rY~xz*LxTz~8=d9z|Puu0T3-)OiEtW*B>2L1VW
zz{6zwPtub!d@wQen%zOmMc8ZMC~P#}K;u}X_gh7m1N`~nGv6N$V1^e$Ec+_WM-d}o
z=x?-%ieP4^b=mAu0fRI?bkKa@x6917F2r1WZRtQw3|k&!#2#!N@Km}QI6U=IO_016
zLPx6zbjW#C_9IQ5Ci%)RuIlZb$O-<hU#~!T9`}L?G7V6wRyy~Vo+t0x)qSo4*K^qZ
zpTYb#{R=ru(71+h+V(`nX!fw^f!_t#sfoBX-6w}GP22lL<XAO{#Yl~OKvc#!<k#|I
z!V)RoWp{+0%Kil=e&3_LFBVu}Z*=GyfP#u#YX5H1PA+MBp;Mn7J*&^xjzNoMoZxNL
ztW>A;)`QWl&LG&*s3({Rb>T%c6&d5L=YWh3{HX2#&l1zFvSnd@pN3d;XRS=cS!Q}c
z>#xs_|GEn`Uw4quM@X)I*<NcOP?R&3d+_E`_W96hqnkHtnRZ-#>elz*(i}9r3w<^O
z(dBAE{FgxTKc;#D@pyT((y|@waQ_tjnoPCWZdN@$gVB$U?7^>%bGbKYqN*3b;MP|<
zhgviVDnXZH>llP>FB(<4glNCl$E5X&)z@95&u*ApZ5=&+bK)2OJgTf7Fu~*W)0HmZ
z2vuf3f9<JWwTF@xw%)W};i_{hdA~uOP4&vKbM_<CP?VyM;l>^qh*Q^pQNR}5t*Y1h
zL+LHv0haY{A|YI2DI84SvZ!t)<}S}hp#kQ``<9Kf8zU!H{&3gNt6kcj$F0o!*M+r&
zXt_&D9&V@OV-k_6Xm>D&1N}|7s<(U#8u!c1TgU0-?3^1B@+SMkq-jtp1yE+FOr85V
z<Np0`{LN3ef}t=IPc0hFV~rzyRDqF??O_oT7)$*Lw>J;W0Q0-byXr5?$jInDFg9iZ
zHz-G+&7Cg~bujQs>+eGx4)PH!I05zuiHTy5&5Bs-g|BhwFT|`*RwndB+fDWEibuYi
zD)&Te`jZA9)$@Q`=;e5WzDEl)Z@LQ2TT#~{WDZpz+qD<x<+V*}yd0Pu>Q-)pJKRI{
z#w4*dv!c{R3R1co#IBEuzc@3TX?N$VuHQj^GhNvJT;fbsy>ZD>BrvP<?s}&@4fpf9
z3GA^R%A!pk9<rSibNsr4nAow9S5s3f++6Zridf^TmV_Ctej$e3L6LO<ieohFnS3iP
zPt=2Org$JG)!kzwl=Ig^gI$^r*B=2BhAy;n0qO}J=qqS}ZN5=qeqowG>9E_tw*7kC
zLrZ~p;lC=C<9vwuv6)_&ATKgYxcnh)wYwhQ<xF^Q-S>iDgpcpB+8*!f+FI1XtemH(
zXR-B&)RiXDxx~&iyAk2$O0aVjx5$vRAi$ap!AWfUCEdXGgWQ&7Pljt-k{CB|q@XkL
zTQdS9L)hnuiD_BiA4^p>?!~`rTWj^8p!?w?#~S-YMKEbfpsetdo<%Z)j)~CC%NC6^
zM*Z{5Ytwvxu(TyfLmlj>J>Z*yi5Xd70LP@(uUJhr=}V<Jw^rRuy&_KQ;j0Y7mK4f$
zN7A%3eBnE!v<=@UOrWV_adTfq^+~XIyNGzjbAhtS=LN=`)>!d>5+Yi%dcs6-v~?A`
zm0G7y8<benFO#uQFOC!>qRVz4PaAE8zNuGuSaStef!IWKy+}+nI1rWI{~kS4H*Sgs
z<8`p~7D<ME!D#bV+85E9cen}#%*FzCvX@W<f<KU8crSUfadB%#6NB`CgKZ8>AnO@R
zZ20PK-0?d_M}m;VX(lHZAAU1<*f-^%iw;MvWMKG=_uI`rK$h4UcgA;NQ`An;bEmt`
zYx9H15C{O%)OKvapeFY7G7GO~`t52^Yc@#2QM(#A#Z$cIcFI?C#(_?{F(<~081KEp
z+ppC~=-1ZP2sQ2|!C}IqZ0Q&4pZQU`k9nHp{Dz0MR<dS12(4Nwgc*8#(nD`(%Y*{V
z3?(H~y|XAZfK9cpeh<bjG_x~iREpFloE6|zmdY3(f8)CcqF1Ys2WO7JpyF3>?l7~J
zsCQj<2l*f|WO8zH{?Y%I1h|TYI(HtqO0Kmjw;~NNXNl@-dP9rOZ}g1WeTGq8W<!=M
zE{^_U(oNF`C}t7qkWf0UQ>PP!c|zP4hcVBjyx}hQfetKiW}v`9LB5BX%At0nKuZq8
zQ#vR)=5bJgk^&@(uxDh9?B2Azh8O9Ke9V1Bylih6>N0)%_DutHvxiIUsQmT`eO(or
zSh$_nO(4@8L}F`zcI+zAEp2gt#JQVG?z|-s5^_ltysG!L^tEHoURB5uG@B}NA!!U^
z@w}{%`8g<-y!z&qtnJ()-Vi_O@0MDT2%PIkqmBvk<y=!-)qZa75(hAK%S=WfeO6~9
zbqhU|FbV6+z%;X`{HV4L7&_0hcXnF<F<$)2dJo@BOI+5)pR3xx`wh5%_wKO4DmmwG
znQ*wxmH8U_;T+QL?3w$2dPQT~9Q6*-ULw-q%va5H<h-weSQ5*$I0?$9-Po1x)&iYV
z^gX5x^gXqq)zvhCs99M69i~zT8t>>l)P9(^P%gSOcm<sON0F4ze1HwH*~d%RyYe~S
z>BLMRhUdy^pQP_;ybgS*q!YJ*aqzAllW(snDBPF2Udx$YxPL?0^>LDvg_`8fr1Q$>
z&;l_121x_?@pv!Q@|+j*ID#AP8c8fxnw(=4zbutknW4^1L&hkaRjYbfdstA02ew4P
z@3J3F=Hx@;J~M&b7g7($0M~8_FZ*h(m$7FA*g1(Pp(9;S=mB9?ew+CGt<Zd<s=GZI
z@-Jc&8CCyJd*2z>RMvJqqoa;8RzNzaRHY38=|u;DL7J#EX-Wb}H&Q}plu-l{5RjrY
z1q7640O=4F2pt5ZLr_9bAchutzI}Y&_s=u)UDrIG@7H%d{+scdGw0;&bMJevweGd9
zo&L}m$)V%q1l*3EG&BJ7Yv766*GBHUXw+CX;vPSmQ!U{`E!LGdXY-^T$A4Z3B0@*a
zjvi5&_!EM*^OO}#y9%ft5JfVCIH;c;(pJT%z=pEoO7i=DIHLK`y?hpglx_U>{q5Ip
zZYn>o_z)k*iqts@5Y!t&(O?XegW^qNjb~?X85I?%J+2n8_WNRQ=*pHdW`UiB<D_GI
z5p~)lr1oqudi^w*I;<s_jJN}Pn7y(_-@m_DoPNA|kqAOjX}}mxhrdeY?zL2&yrM33
z9`0(|`BMO%KN%SKWkV-(JSr$J@%oPB*|RtwK7Va3KR@DjtGhd4!3g~+M#Jbnc5a8_
zLp=*zjecGJ{v-Kg_C2eh%WLmF+E`dkO)_p4FWj^qy-OMIk>rTm0ArP+!9gvRx<AY8
zJXdAE={i=ZQxJ;n%I+NYo8gPa0RMAIf4AZCd9{{{FxJ(DQ*A%ZyFJE({zS&Lxw^Xo
z4eA=`PfWgi0H;Gy&$)}xY?rUI8!(b3ZlAQI@n-5o8$95b&338TSRCof1Qb?F34_EG
zThsXZ=*EH5aX2`4^ZdxcPa~(u-XRs|b{U^oWiPLO2}^HK-`Y_<CvK`Qa>O6Z>5pJ2
z*j30a_LrLNdF}z`om+(9ktSIqHO`F<zm}B+%qZVp>1yS3=g!3{?fw2GeCn~=o>dTC
zHDFWSIKEhM_C}d&%%_r?8r375cP?eA2={~X5yDg>e>p&lNJ&XSb>&->Ad7;Igm)uN
zN%2rKXv4E|-L=v_9p$l^Z|yUt@i0UN;oTqcqGj?2IQMm>3F7qzfz8Bif_pWm{B~rB
zWz^mygQ8LbzPDT}zU=365eQm&rMR3Q3G82mAQBH9N0hOf4S*7x=3l)gc+~FLq-+vq
z8i3G4cDh$#W8Vfnhf)*{S#I><WHkJCzX}==EgWrYdP?BYrO%^SP+E`a_m{h{dykGP
zWE-UN3j}RjsBVqw(Z^=J5*zHtjwp=eV^Z#H$KaO@RW3m%saARW`O-lQP?J&z>0HZg
z<5ruL<%tZIE<<JU?DWKhc;JK($RAR-(D{v<D=h_mc3QyVGi6%tp#2OV2tw9fdcCnc
z(<D{RcMM64%EK=si(wr-Q1_ty!=rYpN^!SBFcT~S$eTM(#31}ZW25nntK9alD)%2g
z1O}E8x(h4^Zr`~6#JEh!bGi|PLUYsV81D&(PXex9esQabuNzZcAWJfSdPqOYaGz*S
z_WdX0iGc!@N|oJ^S!7x8z_*?$d%)VOB_0jBTrK;?;>Y&I@4mn8{q!^H=>^k$T!}>n
zK;HfOEYf~*dfLIuINwIWsb^A=lA<@!p>ROQ-_5O%RI5;UNOo;DZKx0L@3E<-q@*OC
zlDNw^U>)K)N-qyUl1Bad+IHYf^jJtf?gRE(CWZO=5{p|i_4MXUqejQ{qmfIWc0%sD
zf$s%M^B{lzam(a^5Oa*=)a%&bJut@GMfg?Bp)+NbmJk3Zz^YjLlsG8hQsH~AzWA_E
zHg-;a^iC*vVQdc`?27@^oJp?N9W-cRpm=Ow`b#rFH;+U4!BB3AY4zi=ssawMSv^V@
zP(I}|>;w|vOP%CyUoi*g46rH^B&@kJ>-em_N!7F<PTRl@6E<lHn}uc9?@t2zagVn#
zbjM1SmEiMj`$RD9&bR0lYnJ}q`*OSPgF~Kq&Q~ogj?dlsGSR3991&kZu9xXqrhXfK
zU}QAs_DG>Y-%~%ox#hbP%+9<=4_G*eS)cqo9lADjJC{$uD34bLAW+YI;Ny-BoU7OZ
z7KWntG6;^4-h3}ap!_fv^ZlFgh39pEnCefwyk!XEY2NIIIHez|1mVb@g8)~TFCD*@
z3gc;R9)@VPAH8&73>e+p1oWl3?YRXN7*F$#8%#@C?VXK+^98JGf%&4k>%$m0Pjem`
z-`oF@PZvfZosR_kbkM6(8l0zb0n<|G!_QS>zaNnP`4a~q>Nc-Bjl+4G{yzX^&wT+S
z1cU6$l?I>Q>dT(GI2ccp|08&s^M5SDnd80k-$L?l_2NR%@n#@&0$oam=gg6AAX&@J
z$0jMFuj;4BDYag1o7W41S9LS@Sa6`)ySk!TjZ{U-Xw?Q_g6&MtEuuD#+w`>bIU6=e
z+X?yE<`va)8L6)Zp8I5eBX1A2Y{U@q%Dqug(2)V6DH=axG#<VF)80+q9L^}k{Bx+s
z*;=LWIHsX5uPoN0OI=1p4jnq=ETIej=%=ZkujAY>`K5+B&#B>Vhob~5Dy=UhX6PEn
z2^j9=(rYT0k<qnBqks*)z$$+-oSHW*@%a2j;tpe6MXGkPX3&>>SWrQs+;ke8tLSq%
zniCm%h1gs5b>>rPT)o;_q5BV;R!(d9B`y9k<X3BBY$MXVo?c-ABi-0r59%0_SBAwF
zt7q0`hf10bZC=aP$319_%mC@$w+9LhCTC_G^IzrXW1}@TRD**D(fFJ1KVTgJ*!L<F
z+xTkyll>0qK33zB{P$-w0^SLd>s>P<2~^X{Jhjn)A!Z|N?WEgLD-Omi)+8PI^(6cG
z@VvqbMftH(GvY81xmVEAqZ=w`c9eVG6Q32%UDMI3f2d)tLtLRzO0)=K(gQJg5f9IQ
zTj>8m<$27v$6LMGcktGM#)Xi|(*W*{i};0SP0I>2+cI8*kIbu3PKfllI983VAqRBl
zP)_3?dl?3R$=k=mp<QIKMZCYkf|$<p0G3QSfCDe6+lk(lcN$e(tfO>+Y~IJz0H|e5
zA{&NBEJdI?VQe)&qmm&o{G_}XmO<iTg8-8GVpL1)V92`|`kZLGDB$h<T|Y{KL#7w>
z-I2RrCR+1B$KtGEghM-XFga3MT~w;>YYL=v{u9{UuuQxN6Nqk&NMFkr*s@&ses%ee
zdo*4`_vT(bW=e0>Gt#c=wOjQDN0r709JWsn{ajep`$bojk3+#K#K75Oweyh&fsb!w
zWo$w8Fh`kFugHGFj$Nq-!Ts(>C^#6HLt%k?gs>+Z+~5??K7a|+x4}76T&h~^m7e|U
zxQUaN3%p1oR&Ux=-aKbRS;pbh<L0g|qXb~x-pC)o$ENx4h>^EFK)gPEo=y%H5akWI
zexgjDNn|R~vA)wo9M^CHAsL#%pQKBl{s&9!-^~uT84z4ee*s{EowYIX?x#T6u`+lk
zGFQyjTY)%#7=U7t36hrA$4z&F)?-A;AjW1(_qT@!_&;jw22xhLRoS2A*Y(genD_5N
zGS~UDFs!})xX^#-)7&ZY<1SLT`&hqT#B$%jIPe$CxsQ8G^-{E3--6Bz5Ss_M&%waR
zU}Fn98Msr;;)7LJ-dW?nJme9gr30k>7sbih>rKsg4U49x$tgH*?xrLg#Oh6{oQvY!
zFjyJGuYrGH<WR0z)rcv3FT@{0^cUtK4bDrtUg3;ZyX!$MUXF^1i@WwV3!ERLl&2>_
zZjypCUupi_*z`Z=eE-t%T(JJem;qjojZdZ2s0Mgz9p`Z`_Aa=8ztYc7#&b9qS~_bv
z2LLJ1{o0Koz>ca}JZjb`ZKNs>_Lx}AcwieJdV$7d6CO_#g144OzOCida@&Xw1xo6t
z+^j6Qep;P{iCH7+u5f6t(U$%8;;{HNK2|fUk4k+pXh_bXp4-?i{V%(=^6r`q<(7FP
z4L;z}8gg0xDMIq8?DtTe|NC>UUWAw<CRmK<QM?Z7(_9tBBWir-3lT8j*g0%+LcxuO
z&*e4|hN;R9?PlZD(zZGo*FlcH^0&LyU$l7|G#TSuYW`k&YZ4MRY<rI=Bh<G7%?p&Z
zM0gJW@BiXED*A<!KZB)=Ojl2CwDeF-pMPDEUof%4B};y;85ITIqczg6=QPpMeLINv
z&IKkmNW&_y=d5EB*+_L+VBb-Yz(o#kT8vEf8CLi602^}(X7^nMqb@9?IAbDAhZBz8
z!vFLYAa4MQX8QZBBCW2&RgP?wIHRzJG0eCCU_nq>^?#a}ougJ<Bh;ZuN;yqyBOV-w
zx!D}38(%trDn{MCX0D7W*6h1*KC$Ul&bAR7+oWib|I(|OiIin2+`eTFc<bxA`a$T2
ztGZIX*dxs!up(e=ZvNP~9GFZsVKSQ<K1^tt+-t}NDVBBhRrnSnk2a9X7q8VaG$Q!Q
z#^o!Gjuviq2ux&KF6M%fWX2dKym~iS588tKx}Lo1op|@74l$ReokNP#hc)u-FMMSN
z&_jjTob<J}ilvB1K{cD*bHKFv**UT1UzD>|&a1Dj_kujnBu?MCjhMLkLGz%Ud1@p%
zouP3x53<yzG<bHY^Cr6utE@&b12h34pK@nnjy}2^>bx2??+FXV8WQ<-clS$gcdPo0
z2hCJW&$nglR4wef;S!`QxI@;-l5}c`G_hMp0CLCG)_x4(ToH*j!3CzL8<O3(tpVg|
z%w^3_t7P0;Uwt>Oy~ztB-{)9v7bH>F=Xmqx;w{(OzLWSq)1V2CFo6?lRYd|19z4*!
zfCu$*x;>SrOLh5bjq2=MPGzr4?O-$lv@X)<+0zGvC_S`czw(`HU12!@AghkI1qo(+
z(W-$)a<-1CsO~3cuVpfW!x}5ltnhI4E4KTJMSyX^J1-1z@zpUT2uM34Ev@hjP_~Vc
ziI*&#oFsPYgxG)O6#z$<S2j>a70R`ItiL4)e5PKY@|~2DFa&!#=Mz%(f~oG$h+4+v
zway42`7bmb<275efx*dKIA!@$F^H!MyakH-nK7IUAHwQOYfHFH=0hMql#J7XD8bb#
z4>0Y--eP4CTFW4*@z*eEF~K3L=OJQPxUU0W;cLA51V%*Eh37UbsG!GalfE%zwDkmC
zhk3lRva+SPE9{rZu{FhC*-`nY*OT%ieCZoac42&F230cI0;y2_njsx<K4P$Yv*`3+
zHn@M@!GI$@#7j-GGMf0SX(`5(ajPKfQQzK$n9G8ovHY4nq}(x)9Fu;DOvJ^`0YFhZ
zUD7847zT^N+V-B;u>k4^nJiy`9DIz))QuyygzN=x9PgCQXV*IU3i`PrmScA#n&9Ad
zH}FfN*#u~`4ZQE>=Q>3y!9eY<Nbds_7%&i)iUvuaN}00)A=?(zKIY@=oam`B&R!mn
zyjca&(q}|PMTbImA0#${Ql9QSSutPRvL6<e1N0*xs0tL(C<1eJ`u13r$<>Lar6tAn
zk4W+YhJ;&JuxQ{&3z72~y;Y4pg&gNwi-@re+VNnB9N_+^Z2jN7`FsASpkW*^pVCxC
zDZ>FbyWNr4RT{z3O8)D8V1!M^zJ)|7DL%vv<E0>7VxWNn?Fc_x^4hSForNax_BcAz
zyv7%8(AEJ*y6P_u-2^nFcw{gn9c1*~2;7{Tf!OzkBs}@r*zv@-kkw$E;`D62-GKFG
zqc+cKyVyE3oy^=D{m3{|8={FFW@kc?JFC?Ws_sMnJHKPR;mB!!+|vf3+P)OYfkt{0
zp9Q;6iVV^eE1+@uq=Y%A@XMDbo?xferT`_fV;4V!#M|4Zb9aCNS3}h~GdeNZBj<iJ
zSG1}B^3<cFnb&fTv@Ew?zgcXb>~4IzIVlN-=HiEYrQbLlX(zzp0HuVsyN&zg<fH^s
zQN$>X8}bwQ#eWsY6#G-Gxnj@DgK$2FOlVrnWqaZi3S=m$u74y$p-W9V0zo&t3B_;E
zcN`U1vw^(2{hl1rFLNH*(Kw_jk_@kvgIGfJvU)NRnpAWvBO&Bxha{h!WY+?;^W@Z&
zNxT%Fl@$=0>pxXi+ke<!Z9ie_V&K*S1`7Y|JLg6S4$1_}p>567l$cjUV2|0Pz?o(G
zDd8ZvA28mfFkI%Ax;Y>Z#+Xgn?ex1|GG7*XH8m_1FPWG6qV<8fe0KI892^DNh0g?O
z=qq5V$Fag_hJU!%2Tl0!oezL@ksBaUs6V3R42;!t;ifm>K+JSH_~BgSxha5^-`W*F
z`kUhQkGD2+J^(BC8JEB?<pjQt@c{BKNRoiHo=kNB<nR573TJ-uCud<m$B2tWe)k)e
zG^q{zUoQZFQv7$x{Pj@$-zD>xulB#o<nNZrz5F8x;P0Ub40(@%nQ`5r>%@leYfvH~
zl!2pcnl~C}d*v9<8ufUAWjUDrpKbtWW4pC{rMyuxoaVgQ2NKpz&&)KToA{59xL4bQ
zlQ-ho$@Ae}&+&*=!o-6}yIW{<d#bF0O$a#^%p-7Q=6kJb;($pqw%17Itg@H60wm#<
zyixi{8^=TJ5!TD}?aoNj2)X!eoNBpn%Wlo}1<{qM5l0jJcQErG_ni0G_Z0)VFo-oE
zGSmF+R_1zDhKoj|0N`#08jE(uc!&U)?2h;%SclCEUJiSW#<7?oEX>WXu-_aFVx(qv
zO@kQ4a}rOJldC_>gN`^!7T9nJtZ8kN(~mZJb`esXf3c|ipv?Lmz|sG1DW@!<b13LM
z)h1#iyKn{y3+#S=;tvnGoV)4d<P`YzeG_`l-mK}-aY2_GSIMIt3Onj+x~Yjr^!le?
z>p$QiY^+sROb(beCVSM1x100GxqNqFzHmw$>N+dBiE3n0_3nve*W&I&T2Ga|Z?JJl
zM}V~EOCx0kf?)mxX`qZ+Cw&XSO5=oNlB#)g(@;JuAW^bjvyhLbcLBj^wn6%FD3214
z+!DK-TE2bWYxdEgCoL2x`%oJ?i!hk23#Nx4IajyNA}(l+q?UPsRn#y_V|T8f6J%JN
zQ#9v(@am6S#=RMw>y%{>pn{X_H@$wn!5ZLRKv%7m6^awD?zb#*QDsu=A$2%Pw<?be
zY5ajN1vEpL`<e#@X4ba1KmLebzjZ*%eX)4)@f;={J-v_qQPAj;ePe5vu8sS5FG|ok
z%vW4UJ&NGJ+x#PaV8kN=h_>RcVmW0HQhe(p>yss?@hEyM808WbEgN!(RHT?OdA4Zf
z7(_Zh@VPnV@6oRS&H+g>%=+YBBaO4cn2xEKV58O5<h-KDEdgISht4DuHIvoy0LChL
zw8SV98MUEB+#F!8n)0qivVus{Gss$=zf{<N+|Zl?L%v`z$lTogm<M6?s%tU*p{`qk
zgavol_V%DJb0<2sa_Rt&$Ed7LFg+Yt2Kx~+Bc&@5yPJ%VORpu7#K6@Ka`YHSz#`t|
zT+(`oEW`;0S5tXP96AeaV(A!giXsMt+J=i5aEmTO#tZ6}R5k#3x1{{|&+qXsZ>QN5
znjacf?z5)%C8kFJLzXOc#y0t$B5k`Zqu8#G@2HW=LLz<3rAYs`@Hq}ph05_`M*_0f
z`gu{jGTWiEJ(bA2{SZmK_W&;!d!C}pCxvvakutYfH4tJRZIkRS+MM(V#?k76JPSmM
zRL-RFn^~iEuco(N7i}ykACm+`c4~Wp>*Gb@`dE3oPH=E=F~mARNmiWl)JW7~Sg15%
z{a0mg>SO&N`jlC>N6xM|FzFjtLvM3*SI~>2u<1eSa%+Q>&$%CCWYBVd-AVrGzqv<c
zhiH-m0u{1r;~umuWzXq$+@e}}uJ`YEMw4y<K0Ol9HecWEjV3;Iv}T*TGPyKBDN<v#
z^mwa<sP(1Ca^Csc4LP7_Icp+p)dt<lQzu%Qm`}T9mZ1487O9%RmtUIZYj@#DY+R2)
z_t>Q#q~h;otMRISz&3<u#GT-Xd+`C)eRRLzLxO;{GG_C=enSPCoY|G20<?`0?;G0o
z+Z^LaVdgcrwCJt{Znw;!hv#M*0T!LrX^;)noMLHy^Y;dw^U{SWZP%<h8H1GP>w(Q*
zZ!n4W9&&K{a&IGu*l3F4KPhP`MafmXJE_o(X{vSRJ7E<ZQWe+;=<;g=Hm^=08xQqS
zfyY-3b5Y#nbmM&3TqiDceCJeQ-E{P;PHeha>ew6O`U?6(7cvC70vU3j9(f2DnAoOm
z=K&ia16Tu!|Fb;J1T`W+Znfy@Q)M@Q*U}dGw}%kZ(^HM@PMKFP)^CHi|9J7)AfTqW
z0ct*DX5)uW30RxcO>A7TQf>#Mzqil;G$FQ06HXGU*IH)@0KNcX?-lZE7cfPOr|pI{
zH5b(xy5**=!ZBz?l|#&M-SV0qe#4<Q?od1!O7I_(j|N69!k*$hDR-CX!12f|XHU3z
z;cUu$a|MtcunS~4Ky8Wp7MPWyNbMj#VCNdiO-5KiNi-f&apeG;S<9|hVpDIIqDET4
z?$qm#$fb9%xb;ftE_bJ-L$Ju`T`leK!kw|h=$*smg~gOxz~6<upkRXq!4{6xg1WhK
zPbM_eJwL*}>t1G2v`$_%YbqOYt^6$sz0nB3>nIlKsxxUJx2`-%NRVO<!ZBrTcK%i>
zo!inI!N(hSTqH%=+n+aZwwvB(Hr{Vu;q{3AkP^%j#;**pz@r?@rOA?saM5&w2dBkD
z6jNnLc99)qB2OVsJxE@!R+MafH|~fOzju2JeL6Yx0VgZ_-aX8s+AVDHYt@k-wttmn
z`%z2TP6rpkcARQ#{6>MgPtQ)lC;xWF;A%-m_*gFIdAuNZ!2A1>Cm)}=|9p?nOR>vO
zmllGWU8mojN_xcFY2_%X7(l2V^(<sCYQO)u|4HPYa8<K;x%-%}TXQddbADlI&9ynN
zsL9r&T6~cZa<fNk8^a~z#N%Go@({g^*15!xl#kqhcz#Ch+G^IgUn0@O%$5<SMNGwz
zq@;|p5kO;5HJ|C%G-W@9-Z2Ql1@B0O19*DM+7nKAt#jzR6V@nwh1<z)Wf9d(AJ43p
z#MkLENOdejCpw&#V`OwF{5XzBA%flXHczUG_aiW^OYI-936PZ^zP&?LRhz{u3ZqS!
z6b^Hg>RcAmF1^+#@@@YO<h^Tr;<k$3!==7d5V8X3|0r7BR^8np1sHp7F8dz6z!(|H
zU-?5uW6%!c>R?PBF%Bk~)l|$-`DW6D*(5{fz|Su((%;YGyBXNHr9;3o$=82W<}<DD
zB$(BjV04R~g?`C%(xCe_-<~0NHIM>UTg5MDD|DpD$fo%&Jyo14Eg^$~(i+ft5XQZV
zq3#LSH7B_n0&c}_#4Vsf$uXVZ?ZynpFL@(1Kp)n?Zni7T&%J(|TEbXFUrt9ZM_{)E
z?wG5tb>+;6e~Xhv&o%DYHL@pm1uTFGsEHNX&Bk2Rp2;=luF8C0ULwW_H1t;;0_BgW
zQ3sP^*m#1zzg7R^g4;2%M`w^##;cTpXao77Q&m3J3TvZ5iMI#b`+m>)wg1&M(eh}g
zm^({P&H}qvR{G?%uEu1hzi8dYW^%>qv<os?&8KBi&ttK!uan+ct?3!Z>v>d^`O?1S
z;$9{{CBMXU>gwXwGKgi&j8Z?lpP(qz+SZz(8)u&}P^dzDnV7<(C)sz3Mq2RzQ~E!4
zGuoFkfb^X93`Q{BsVk56?7N1_A5C%4{c@+^yjiq;vRpW@;k;erMP8?e2_SvusG~v+
zP(f}IFv_h_OY_~{9rVpST)YfaTjoyjM`YZFF+(@}KNgL1p#fzz!_J?>{Hn<d`K}Ej
zjkGtdrgCo8zqBhK^N9iqott$C@~2n583T*8faiGFp+Ltk`HjOk%ss#I)1ks<MH=yw
zK{g_xQ>sIp+kqj}%dN5fc>(H#%jCT0Kbcor&*bJJWMm{Y>voFXcUPITQR`Md*DN!o
z3pbW=G6DV6n$?x8iwGS3tLD*&<xVwO@N`Rs;}~W=y1`gfgq7F8zC9ETqm1kmz4BFy
zm_Ce`EFYENukg6weiu0vM5|GeD5K&%ucA^^ZlUuE<h#bq-ab}z>T$$3nyL`Nn5Xr|
zY~Z*-vJ?;S8N5hM(|62|dm<vPVH>pSoj(-3BPK4HXSHMiV^2JE^|>hr7n9Byv8#3q
zm~^A=<FMgRv_`uL3G$Y#YNUBz275Q!&%WVD%&uCL1|3_|f*aava-{!;3yyPX>6)K?
zOHWVF?YE=c5m=KH-tTWCFWfrxY4{8>@?-~cRz+F|kc`Et1}qOLh2<6ia6fCQcXa<K
zS`)~C*8H@H>NzRwAv=`u*gEp)2P8=|UbIDs7~OO@(mv7cYGv$}d;eV%Eu!ji7#U~a
z(|B9fJV;BCoycNkJ}%E;ZVsq)dyd$&JZap%JJDxm%}Y@6W!9V__w5u#2hUg|#%ukg
zw;3&22L<Ckpvcr7;60tW5aDtb;c({2_ZOb$SN1vE$KV4P9TU^Zn>u+3lEp!iz%Z|N
zZNnPOQ+<B4&5xwkVu~u}9`1r)2HKb;%ZATphiIq;=y)G+>fg&a{3tedg1WR$Pro#<
zTK-6`7Y;JcR(#<i8<%D2ZGH&h0u-X8R}nZg=P6R!<B(&We9MbLvtM+`&6$P~K;Ac9
zkRv)*Jua}J&Bo4dKhSexVtlbm!BBnG2z+(<uC?>;xd|4M?uLgRQwm4Up1s&v8|%P#
zcMxxEW2%nnJ`QJlxp42k7=k~5`UOuuG6GP#bmE8yf#=)MJ##h=RXj1;9RXYg*tZr-
z0$ktrO?RVH*N&S+Jg^M}o~c!qG|uzRUT-a}M4e8nGpK@io5W7PfgB^|=`{b%jS5;_
z*hF|v8m_oUiS;Cp^q69l;`Zl3=e7=Vd9wQxg%)Ti9#8HJXd;mO6=<}!06eTReQM7>
zV^mEx^CkN0#VswTt3un`k<xafVPs_MCnuSJHL6wR8=D>f?$;)5x5tA!%*%A+Y6_AO
z_RhS1Ug=re>t0tS+N+;nis?k2h8+e8>Q`DVrS-DUMe*-k3{+gqL_H(tqnwecw+HXM
znvK=Jr7x<~xmCFyD^4yJ-%Z)Jez|OO7tZ+AA;ag-Be2VhhCq#z#f*rIT+TjYN@C3A
zr0a~AbmDaOs~w-R_sl+PYLm=RNo`#Z%RGwn+*-u}OXbc0B}`fZcic!U0@)onARasS
zm>CGtFy^xA=#3n<9hk8_aF)rXd-tUfQn%|b$2mP>Rxn;vFz?-?Pv~i8c&%j^=vb9G
z#SIp3IiNp*c*}=8J_TjG7S_`<wt-w`41)T8!un+_@5Zi?VQ~JUp9_qA?4~X|)LoRj
zTicb}sAvxqTHCGmnc;{yZqaM3dUxYEdvUsvk-+o@+eKJElNP+W;cMSa(S32p3(Ldk
z?jn_EpsJ9G-YVKNoqWgvYs{mvwzpB!9nZ8t9nG|<t*SiuSYuaFux`iaZs6_)2fcrU
zM(pjXIp$GA_W_2k7!8%Ky|8ZoBy{@#!~-n7a)RFF2hg6iI^T~2uHh&<J7af`bFFQj
z_C#6^^BB1)ge^`aXw8;pQUCBT5;vZIQV+O$>YX<~H!mVgoXDEwWM`LAIcu10Pn-kB
znvS|p(LD`DOp2=XKZQ;HZb9f}K!q#ul5dFY-~IJJeEQtOdm^xJZzb+%!@%>dXo8EJ
z|4AB7e9ou+KWY(&-?Rn8F%r!^4KBicp999w!B5Vif1E+O4cZf8{ug2Yj&|hJV{nnf
z?<3(%n7+MuAqFo`Egpvv=lhfM@8BX2KR14VBlE+(;Zx6>&3Sx=Jm8FrofiTZ(fn!$
z2ex-Rb_JDxxSFZ}=V`c4fQy{=#s9+(<nKPw=kh;`A^IO$ukpZnn!^XdMUK^&!};)d
zeq!Ttsh8Tq!Fig8&_#Z>k@#;J`JXTS|4kXWaFK%x1jlf?C3>(H+$eh#5%EYjPCe2{
zV@Kk$o?ZyPw!^;E0C7XI4r@z|UWFr8`6|xBW)*|4$P)6Wl{@AWcKsnqm$}2-%S_;V
ze$YirKY1+(+7>|$+aw6CNhEjcq;E%G#yJspb&31OsxFlP%wp~(k4~mGZn`DugtQP>
zD8C-Up=&q3+=Lg#x>z4SCYF1Ktj*&csd-dMtjgP3A;GrJ?NgC$(TynpiV)YM)uS*Z
zE^ZE+KzrcT{%UyZwdLrYdUy2T3k^}E`L}_lFLB|0wVm8BZbR($z58bo?j@@U=;2qQ
z4gM7GD1ZuR4VMnJWHoT?C!CmBsaDj+a=!iOSY{||sH9#cqScZfC$kR3nN-hMY>cjU
z<8R2(zi>i-R~-H?yTu{x=cgjD1PjmAiq&ivkjHmq*{yvhJ%p<_$0!;wG}^$%bXxor
zL^QGh$DsrKfhh3C7|Uw5m5&`p?~>1VS1#X|<(Ai%eWnBE0H=_ZG%M|^NvdC;3kD+u
zX{TWv4KF<Z;ip3x&FkeV9ucXSVJQz45yNe{O<PY*EOVBebl%11Q=XYZf{p(iDq{kT
zUmJFr9<wwx<yRQ>bxB!mVmTwpXUeGbe21&V0v!P=5m-3I$+!phVTtJZmL^~m>tfG%
zdB78~%k8)`x1B3iq%KJN5$63Ste+uERl5q53-xkR28z<%0KrXb8rqSHI9*hCTtlCE
z+R{kxQL=lLF>gTo7yOQoTFL6l&DJNcx?e1d(8o$?OZ~lZ0BKcsufvB(yuBVu9exx;
zYf{>giZXjxV`D&kh;A2{MqQUw&*tJ&@!$s0?`<UV|K;8Oqth^3F$BEkC+k}T?hak-
z#%pf5Mh9=BwW%dE8uDvo5z1wm-|P3qkd>Ga;EH6hB$XOCFF;PPq+wAK$g(sCRmRG@
z*-x)D%j5++2APk2Z{3MCo+42nPCnNRdyD+|j-XTGV2~%(bT()AtosJ#hihER*Hiwn
z(BUs1*M%2{B)YYTg=76V$Fx9203a3baNU^!lwf#JT*ghmGSjj5Kw8QLrUFbarB<5t
z>P98I*SXoW{MzBW86E~wmldng?@~j+RP8(u&_55|@IKJQ7jP*h5yi&daadPW$-Qi2
zjU}k8ied5n`ivj<=skmeR@E<mW|C`ygJhQ@P|6e9$?kl#=*?4>mLD%dXl(mz`O=|?
z630Yhf|^eRgT(Vx&F8~GoyN+U6`Zp7^poSgSU}&4XxC~eKP4uOnJ!!`5h8~gduWeU
zd6!U}h^A_o@LM#T`DeK%s>1;oTkXw*9OfC3Sj>?M8J{7)EmsyGdOfkwKYL<|<>?di
zjdwcahg!YaZKi3{bshxr;%I4O>6@fr2q==uEN)J6$X`od&B!m6!vx)8;+S8@pjc^=
z8)g)3lros(@kAQsj3Q|o{-fpi_bcPw39&bq0DiVQ&4MS+FCf++QsA({Vr6sOk+7pY
zC&UXYep?HK=IV61UyhtKHdfDRUZ19PHF^Y>`1^Ft$|2*@hE}N`_8fV5I7ryk#;LI;
z51fy9tp{lQ_L1fl?E!;uFn06%KPAkbAy*s?(_VHkkX?)s9FN9@R4<(2;A+AJDLhl?
zN>5k^qV}eUJg?tD+EyhaSaCWP0#4(x-S`%V5sAAoXxF8{wsT!M(wAjT-3Mfz&YLIH
z4!{uxh+Tq+A4TU$o^GE?`JuYNwIL3CzcP=+)fjwkg<{>dtNy0~%UHE^{;X>!lFM&M
ziX)<UcW+1#0!OH6a>#`vJPrdTEPcFLT<J#Kd;pGbtA6HC>RM8D2ALKC17`WxeXaLI
zM(gB6QBYe5&*^+~@3);YL7OYCZWj*_m_f9P`H092Fz~iKR{Y`eg6B2XUKZ)PuU)gF
zm6|?X?G_~&*0J;*M&x69^$xjJ2qLiq>XvT4M9o96_c@~=IP+!q*`RM>U}q{~ww7t*
z$K$!^m)H<*W}B#Q-)`Bd;xz0v<hwYelQH%>Z?eEFZQEygVWO6yJ#ENbnrZXoGGU3H
zNy9i<#iOoYmrz6v$&u&o;fI~`OzY%n0VR@U(YKt4Ml~>Znwtl|-6W6upk!L$_Pv@{
z5#XeMvU&l10n4wJJ-qO{9+tz}*N0k8<M-<_soi*79~B9<ZXq+o=*`f=O6==v?7i4A
zhVrkZ5N4<|OPo_UJ%eSJ4Ty1O_Q)Pl+g|tmeD9uy#l!qf1*PvFQ3q8p<J;z9S?*r5
zJ6wXlQEjqBwdLHtI~v?HM*mnJ-I3~Ro@3}*V_dGdnX8E$0o>pI!`zeKn8(V*29uql
zF12Kb8u`gN^Pp896OZus(sd`w$J0>11j?OjWvV@uX&DqdYqt9(SJN)p&A;KQo}{9n
zLZ3`au9$RJKoN{pdg{vWd-S|wWX2xxVMgT_D;BDLX9+XWm@94gBB<TS=nZLRKfwdw
z6!C&mJ1<I=`}NeqbugdMw4YLBw%R?5vAK$>@i&Z-seJ>%q6_6a!r!Q}@f0irxw$e|
z*%E={5#|!_N~b%-0#mERnmO!DT8NXBW{gbqCm6MeE$Q6}Ta-QvR+OP6Z>Tm^A$Ioc
zQ;z^(n;37IT>hsyu>RgF;HOFo3Gqq^9uD^tu4gq=6?7N4V<g`p(=ppSlcc!tgdE~S
z6b$8$HqKQ49bwqqrby4K(<P31<|uVC5-tCO?(#1sU$5@l?Ug?Vwy~8hSjV*m)&k47
zR<nieNiwp9JIgrwyU<WOXkzD@k-Ah7YH$mr8+C`M$Fp<wa+Lj!@VT6=v8G1Oy4_pV
zcgB8uLt0@9;X`?Qt?;%*j$tab63oAz;SXAA85L@B?S@r7e}!=E?0~C;i=nf1joIDa
zwVmBA1ANGM6VoXF)p>_~jew9z0@$zWZbL7<T{aXLjoU^S)om-gSI#{f^z5=O+3LZ#
z4IyWIw^Co|#>l88Z@qekrxdC*yw1x<gb+Uok?D>TPaSO^oz^5hk|u1QbFadOP;1SK
zYOws4G;XFpWvr%na#TnM#?Joy*Pjk$H=9@TN#2l;_U^Y4e<p7!4{%|SOhBZQqcw=s
zp%O5}&n4r(GRUd0nAti)riYLOl3i;q`q+TAB3?8slWmxqP|y+Z5txcVs5j)v#g>@G
zg^R^<ZE%q_S|b2Zyh0j8#T_m=gM5accTPnDq3&|su+m?;w|@>@iHY62FOKM}R#~0z
ziyV4cl9>^hMvs`odCxZtc6&hK3dK!5d&sQ|%EF99M;8_qb93T>OcEAE$J!S?1*2E_
zv20vzm)nZZ!)c73AKQ1Ru6g}ha@odoGO_;XuB1XGeyQ$-=6EDve_m})Ag2s8$N?oC
z@-6njAQWYEm`_<1q8gvX13pR&4j*-DpR;!ieX-g-oDVZ7;(?T|n|xg{$t;Y@&2_ks
zB&A0B+#MKq@3jA<o2_9QELADjG0QB;RyS3rB>(eY`7fWcgzh&wuEwu~bF;GzztV#%
z*#T3*xIzjhI$C{G$a2f$NDmf6@|SrgXCV?`@T}XdUJ|*z9vxSVDx<<Whh$wSkVK?;
z_n$=%pKY3Pn;-EwiYq812|s<Z-X`};m-6zY;`x?bWgMtdl?Fv(;^J*>J}{`_pAH#6
zH$BOvFyb0lF*WUyVL&k*O3QBiuya&V6_Q`rqORIKLoefYkd;$6x)SM=ab4P4jndZ=
z+HDr$Jm>b&Lu{8~@P3gF-LLK20Q<G_TX?|A;F(U<Od~H!zc7t-5ma8yXhn4(cYRuJ
z<JVK;7u)S@EGr*fm(vCP0O*gIMh&-giC6*0>vjEbbSx150LZ(bmDAuPYS{$*LMFyA
zVU18UnLr3a=4rknX8y~tOA!~)wCb%;yVaC2i^oh@9@++Pm{7}_?#TqMH}7*_GuGid
zq2g-$ly0NCqaRDB|5?)#;Zm@g42qx<7sY2$(U!Ovz|Tp0$>qt+-#1+e3$M5c;S~cb
z1i2&Xw+UikX#(I%Rek-YE3hCEc1Y|r>~GBo1{__sH)ZydQ|fKduGIu31F<(R=7W>W
z*O;c|h-g0rVbPtUI>nYjjn>xIX%uz?L!@qFqf&=;O0o@>`P1Xj{;~9~^!Da}W*B?%
zF|i-+-9HD4m;g}u#_WnqNp&Vinfr|cc;$GA@=OM3vUKk5YiwPeuM>~Nnusc8GbAq)
z0ay^VCBVsPuluS84ucGYU*9M<!QK|!QB_4T{=nN;RJTBSLaM%r)u7`=E#f}4M29R|
z$geGa)0INV{tvPzSEMK~Hk*I3YXDU%fGmlwdCm2l9WJQ4EayHdcKPz<f3a(#r#q9B
z1nbr(@_ZLJILLhiBw)b9b6g<s>z6Y$%V&7YSUjmpSG!s$(>T_+{Ia%1tPIkf=u*TK
ze|T6ALB!&6%_liw0qyrseB;p2#-(o6R{3wX?*dS=B-ggcCd&oPepYszla`L|8G1<{
zV~jU}L0P*GqO2inBBl-!>63CEyS-e<IIPibC^mgZ#}8H=h-LwGfF3eBn63lkI?e@v
z(J2`7*GPd=^@9OF)#xE{55_e<-2m6PQN0?h2xHeb-v*3b<hVH;syX*9L>>B2cJ9Dn
zFy5^1W8>l=;D3T~jVmtT8ZHa{TVLROQ*;(Fgj6u{AdG7~?>_`6o#6sTJq%vx-2}%K
zl+`xz#9w;)e|~2d3fKY3_12OW2Iqj@DE+*-VjU;^_fXM4TEh2khy&WsrJQsWj!##l
z?S&XLok#C4UDSVYXKzgb5!&xwD*#9Kagy-I8S;ce0-TNYzlG%AtMIo%LU`A&;5;gp
z;8AS_jEJRM+XU5jR!Y{_Mp_8(l4t5N5SgIaFgC{fBBryI;7m&puonu%5bjlT+W2+^
zjuo%0^j255`_ACUFU<IxAl3{FeDP%>!`8ZUjq4%dk=QHC*eAb;+krd+0EP7;M=PQy
zVlGBE%^oFQ5}K+{-+G#i_lfPkeGgD(L8>GHHTjnHqrU|&3QPsVsA*qie>zmvJb3ff
ze)J|_tUN-h(Q>)A8pw_HxP$0-7j<@<8VL*K<I4Utf|-{^IkME+y;AI)R4d8a@9{})
z!tUmXugCf$--&QXU~#nnl9qBI`nbl3+kotm*;-6~a@%dz#>U2FHH)WEYw5e);y5vF
zx%g<QSgR|E_TVIp((_JQ;>sH>VxOtyc|)a*ia~Uk8zlN&8dTq+Mw+{%9^TD7Lp~lR
z02r<}Mqbnk!%wed9f9VtEl=qwaAZ?e{fbxIN{P$}Jl={86Y#kbi}&!FUy((KbhaqY
zq(o-s=jT5od^iDP?^|Ep2Q;?kR##5|shs7?uy+n5bjuJ@N@pympX3Tyn+5Yzez)>V
zdm{Xb^hE`Oftv>;3+@J1_2v#wU(Sdt1v7RSXnLa=(R*N=dv1qi6U2LIS$Q`;z%R9m
zPmNtY56&{fLR0PYvQm|kudRp~Y$D5hV309C+-p2_<yS4Dm$F@vjS8_}t-48@r%)j8
zt>t;UANR5{<IW&6i8#BD^^8jcg_LQx`hoF4Rx@jFYoMkw-d03vyKf?Ipj2OW;g{o&
ziyCZ7tWkn)|H3DqG3@l%i70q<EVV6Hc|oS5VsoBCu0Pr|W1kY(BLm<|MmAUNQB?_&
zAIA4BmtRN?9H8$_(mud44!+RbQrvzMimX4}A9;SjN)Rwh!LbV(XA!%*nA$ieEXS0=
z4G<jdobqX=-FNAgBS7&4irWEQJ3HhVS+UuwcbApBgr(*E7-N*9Df@6u?GHb2ztX*Q
z@j7pS^K}IoI)*T!QCPE`Atsf!#h5`D8p@_c&W#&&*~B|!_3{+eElrpQZ%h@hu6%|j
z#*k5Zh}PDn{?z|qEBW_*_@1pLbXE$AZTZtN)$cCACnh)Ig|+GkW8NOFl~WG*o(OT&
zz;4_bvbeMw7oT!|YAqBb->FL3uK1EYa?+erb>S21M0;J(Qfo96`)p_(%+s4~*hVt(
z``YulDHCLA4uOatjWhuTlCNbJ;bm3Vs~q0+w%i*eeOcuqpeQzoNKpUx+xibak>?`N
ztMT2ipP3Osm_7g@M0QqV%!gp?`aQbIZ9ogC@JiY=%9{s4NSg0__yI_QH>5(0;^R;&
zn`6Hg+w=LpI%d=-h+0KCVj%;7o4DA6k&ub!^(SW6rL+>Ipea28?B*)P-o;6~%PpXB
z(t{%fJz`rFX;ZzJr2is6PA!ptMQJ17O4~b5VA<UZ4&ZPy^TK;}E>XZ?FV@ZM`cf7!
z<c%3yNWM$_%)uY&&5S%lK0ILiO(|=0nqJ&i6b@LAGeuZ)?{uFr`>=}LDskY$^3WvF
zv#CBTI-;YR_E^DQrWQj8VkC)@heI5nbTOj5ZY9c*rOhDwsOjo72UmPwl(BNPSDg#2
z>RBXw<(L+cv_*>-=T={uWsNz>H6FOUu)az0K-4p{zwHPz&g&FN;6V*yXJ_yB4wZyH
zS*>=y*GbkM5NU$?tk(UiUitV&=m}3oyJ71C%eBF?B)!&$F*V{HoHEq6fDp4-i;~N<
zjFnjvMeJAi!g$S>8rp2&m-abnM;8FH69g(A@7s=vSJ;HZN<<n%-vy+rjyJt=+H6=)
z^w-X<4UY&cq*E@cS%H{fH=%6%7DI~rGX-P3^RyO68lR4U_wP&k#(h&Y<T}SRj)8Gs
z7xxV0Gx`!BvOw^gkI}R4$~KS8($dZF2o9UCIab<zj>TcjpgYqRGc$<Rw%6&iinN_h
zI4!ueB=i;@yx3OIBC4$o3cJ^C4A;C03#q1%6oFe`?1_o(eeXLI#)bBe25V+r;}X|k
z6%FDRml!Wwl4GcS?j$rF6iqum)uOUC7?cR1UP}?tPDHe>wto<*%OUwC*T9THc*+x0
zDafnYP?;eG&5Z9J7ftcf29bFk)?RS3kAt<q@$kXTbf4ja=xMH?r3h?O>K*^lr)<Z?
z&z)OJbANL^)c5PI3Nj9-(7c!q;F=WlbR|8}MY>J=oH}DP65m8RpyOv@k>Wp32O9t@
zZ?w_nsJ)9dq6&Dt^Y72-?}GN)^%}^xw}D`m<%wsziPHw&K!TfS*Cm9!c#SWwZb0Tg
zC_Mk(3YznRGbM}hPMfV%G-+!gK7N1i2xinT-FG8?;EWSuS}kb)Y*Q0gPCBQsu<+2P
z(u~asg|WbZKvj2hpiz;w6i~YB1rdcA5@0`3I;+J0F@RQsP4yX4u<_sM+dx1qi4Zv}
z*AnAStemmtRv>v<VtG{LxaD%w6Y&;|g-kCWr?TmPzpek|;IaJ-dW3HN^{->yL6PIr
zV|_1rMPxv%WX;>C)c)`-COQBT6<dZ-3NRpOCq!U8aK}J@8-<dn^&(S;Auaa8z|gN|
zsKE92)foYd@o9E06>pN9dfKn20oEOTsVQoKOcKgmxa(HjSWe>S-V)-1=4S$z=wELa
zw<Ct$%4KRc;gD<8p`mART;0C9fYYqhrLDJS>EUk&HVsJD1qqgd5LjBk&d$-Oh8a6C
z;@&GLF4ze&AJ<4T7|8N$5@_(bc1%m1`w#)sVFJOA*iCIjflK>D-)SRZE*FQcY=yT@
z)ehV1<mjOtC!#fm#5>|KAX_cnG3ZDbZvxV%lwZQ~A9ZK$#<QKZwC~E|5-;d6j*($S
z!#Hyh%D}Phw+0<T`jfquU6Kb9;^VcJP4l!sBGwv6U*%`xu=Rp8PSTdui<_3@=#Z*Y
z3TPSYK##%4=1z_5#gw^#8)X)1;FW|-^5CuF&qkUQnW*0ZZj;l9`GF$aO16RVuLD-v
zU_8&=ZLnIp>9Tmi6E?n?(b&2i?~(Bas)Y!`;WiAC;<Fhz&s+V>2t$&>Pf9*>#B`*o
zshmAk7{ktGW?}!*cl|}RU7v|*=OUNFZswqOIf>rV#9I6|rrtJsD$!O-#Yj|4-lI>-
z48^<regwebk<=T{Voo0Gb;8X#PQ}Mz4=_*W6;|Dq$Dv2pqmkuf0l+3LBvwB#WqI~1
z!v@E0W**$ByA<*)CPA2;OZEf|rUytB!J_&p@HS%VPJGty<{M8jXUGN$R(t`pT1(Sk
z^@{|8Cl5m0WRJ+LDI~qS;#PO*T=CEbfDSV{mRzP=BWQIyR|~Vu{m`UvtODtd3AJ{>
z-T3<TC)L8W!C<&em}_s`Z&RaKG!ke;rVYexS)H^;*au8e?U#7JzsGx5BnhyPV|2$f
zeohL85<3=esN_0q*Ef2J2;?S8yLT7tq5N^`rsh!%Zk?SMM(yip?Xm>^K>AS9?T^oc
z%jEr*o|rEvSl`tm=A`?JwU|qbYnrC^SB$uOBDl}LenvOv4bo4CW)w?+RxaIuJ9S%9
z4>U_eZWkY%*N4obFp6sKL1;_J9rtTGj9=~?aTKm!S@X#&O5U~=<>&Inc$qscP!EH^
zRyXRf3z!kNLm_Z7mYsZo%YEyB)b2dl6wOquDjZkqnTx=T27@NA?T8<jQwu&rbs{E=
z7UkV<Azr;^@C+Y7^QG0w32IDIq&2W$(#3%b1bFFsjooY$GeNcM!}|FFj8t)q#v;9r
z<XsM{FFA9|f6G09_t=Qrh%Cq({VaCwbzFd^vKF3ZG1GWhVf*|X$27+;mgP=-nGXs4
zjg49s!xWDi_K}4*j!#6jh%B8N;)%xB<rtd~Uozre(npY;&d;H#Ek}QAA>tB{@kSK+
z0=vn8B4PWMSl3mY0x1eavdIGFZV4==^YZ{3_>>>5L1ib=)+g8|hTbBYj>E~@XgrfB
z(O+A64A|`*e*yk$B1SF!=Z+pxzCAu0(kHAthjurn1M7R7<`EV7vxtPI7h$|fZMptC
zEjh8+!*N&<6Is$D(g9xn@nDt8rM@A?y#v`?9HRCumDdCW_}9&)GV@C%s=MHD_3P&$
zur{L>q?;4ph0!_zZ=56}$SrsKvD!vG;JEn%_}MgVf&^pH*dhO^_dAR+kcjBj6`;d(
zDFh>hHr#WlMyPAz5B^$MbHdJ>D`3I<P7PvmbwflwTZu6i5a2rI*|v>!@p$AJhb>0U
z|G!xF3LYd0?P!15`Tm0HcPd3yn^lU8ZDwRd))VuwnR*%8B`~77EVWR{cn`z{(vz3N
zort-|JudBRt}ZRU^1tiNq<C^ov4{!(&$d=PFNhzgBShz<2TN^KPfMFkkInx1kFe0c
z|AHk%ppWx?|0~we^Z>bj>vH5<Ow{g8eQMd(JsGE-oIV>{B(87b?P()O_Up4V;vw4P
zKUVgrB`&AkLJyG^;&a7I7cno?v>e=n^_n3686FoK9=&XX`(4&1XzEo>u|1%U!4V<Z
zqb`;Cqd1I1;%753IbrqFY|z?}AdnfgZd`u&^5si<wPsZK#c1^ywqNp`I7Mi6E3uyB
zX2IY@2K5gWS~#mAm1oLCL~*gCYY|=VZKe%osz|m^9JY5qDsizq%lB<*+_}qTlFoN$
zW}Muh9t15?S`aJ=W6@bqD}Eks1H3sYh|+kQRAWIJtAB`lls2;RuNh9Wv{Lt8WgGu5
zc*v@D>ME3^;4p>(7Fnb&agA&)4}y{+$Vp5aOXmM2fHux0d-6&5x&0bUbBRQh3HX^i
z;;>(qQP*u4a3+<5CBci=dQvw%uSb3!y4I1LuZZr+fv`QI3hftz%i$Z+&V#wPtb(Q*
z@eG^Vr8GaxYyjRQ+WPJT;<o6SO<QkW-oUTHevBNh10vv-WhIK%lhl(P01TxC8uwn#
zup@l@maC(}Jx)>Zv4M)+O-iGoihK2iCQ>aU0>q!9213@qG*!$cjLe7&n3BGJeHQ|5
zd^(X8ctv#heyO|&5@|zQNA8Y?9w3}3A5}hO<4ccElJ~yh?v{z`2i-mG+W{PEyQ&EQ
z4vA7+`m=(zdoP9`1V_lG1x&|4!<#jFp>de;yOdO5P?d@}kCE&c3?Zn+VbuWlyp0u%
zRzJH~OZ)Oog%%A5ocikWjU@!$a==PO?aaKyg`!*a4~@O;ZuyTe#*K`2(+T=XHd}<Y
zBHZr4=wpo^@rJ32tCM7a+K7tMo+Upyc|r&4tDzn8t4Owp7BMz9)*QL&0}0M@fhcdY
zin`1QQ9YKE=HmlqF|5lHFpp6wJu`z=+Gw<~kCQubPzdQPg<O@(bV<w-Q}Q5&0`nlp
zncW2HJ{WD|9~TZEgt*V8w$AAKqblnhg4B?O!{|;WjxL4sc#D#3v^zm|;t$eRyBSu$
zUQe&>jO3|)-9zD^l(gV-(spyQzAE}$+-VsVbkZhx8g|*Uad32PJxlNWT|_=xn8?t{
z;p$72n+bTa4+hfxhVvWt)cqhN0=au<U7F}M#6Ca-WBWF4TyMsl^BUZ1eWF;SH4q6F
z4o@FABqSsdf#R8uLE5@fL!Tb$tMeo!mbxT5P}!j56FH~i+g#<MT+H7QBz;8BL0C)w
zbI3Ol1f^g=so#mvFFmaUvUND+UDx-Fm+N1Z8g-yZB5S2mk-%x-5-|MEycoLKB1fDM
z1H`t4tYc$&Tu#Gh)Nd2OTZB8*miq*&`qPSc3=_=h#O{)SEP@;O&pOj(#9P*VF4rX0
zY`shjYlxIS5^f|S#HEbwL*Mv*S^PcjZ`}Lgp~kyzBbR{scQRX~U-E1?@Ny9|%08VS
ze2tTkzN-l|tRh4#U-|FXI5}2$rctFvh-a7HatUB@c%-`A1N6l|`oAAVd9DqyvQKQ`
z(9~kCphkWm*%G2)?69A50dtRAVu8azJ^<~%`QR310FF^OH$=)B2g6~hpT7Y=Doa4f
zjxvld?n)*=D9*P^!%;G@fg?5Y7Olt@mZsu5;AFKo9>5`~Kb*XRlA!LaQebda7jO`7
zFGhePWVkX2e$)rGgkZkE@ALlA*)!J|tat7y4mce3AxrS1zF`a$eSi7*anJd4V7+H<
xfB62-|Bnl|z)An)+U}+|jGpuVvm)}98S|d(KplQQ`UCi*t7Ukp@VA@y{||9;;Ozha

literal 50147
zcmb@tWk4KF(=H4oBuEGj2@b(E5S-xd?(RVrcPGK!U4pyYqKmsb?7||!-5oyeNAkYs
zJAcn^&rD5kb@z1lbamBLwV?`f;wVUXNH8!kD3TH)N-!{QNMK-KV-ViG=BQD;WrczH
zU}_;OtRN{YOrqdmYi40>3Iih%nyCI>LwN`%OIu0uhd+V@VtXhVn_mK&)?3(;pTz;>
zF$zL52(&Ivid_xi)JfR7*!EKmFh;_?4UAzZx+6w{rlz_&eL=(NF@BXD=j|8Xjyn^n
z-(F}^n_b_*WPa?BNebVGi=kqO83=q|N12~rD-jKYKIu<t2dn4hFVr6z840KG?!kBX
z03Sy2N?lh)2O9OFK7|{G1qTzu8uBdwNsy>l7G|vvF0~B?#t30nTb?ear23Q58?Fy%
z8=ABk1^sj?oWhY!sEg#i_M|p2elnXETbeLGngn>u6k_1r>xl&qX|bj9VRk<W5Rjl<
z1fo$1d?#aK(huAbJcKziMLYSKl6eMiKF@#qE$H^{v7EGg+)7}O6eEy6nSb+ze(WWw
zO=s&jD$n8%BX^MuT3?NxbgsKtTA5!!?KE`4yi&GaTM8lP6<C21BU6#wWg<3gYGAdG
zA7V{e3^4{`4Nb4%G-Q`LlJAQ$M*pu*l{ii<`F_d2Q(HCi5h54tY!Y?``aW#Pa3$xZ
zYL6tN-l{G&Q9ELA;XS7tq1(p1sK#=Vem0_o`P85ghlNtZ-uo^r<5r>p#Y~laTMTu1
zFwwsB7C>Sap1<B@=|j(;OoUTZle|Uq?xIhs7elZ9ojO(sCfV#&mkaXkn=^bt9jZ77
zjQ8#$VTg*qnh``vbM_%MYO$<}@k}oAYG?#Sso*aok#mciCW<ydDO>oO(A=+j-*AbQ
zVQ`Dmh@<1Mdnt=IduQtIjE(2c)&fb8>;w@EU@5FWlMtJ{k+gF4=6Eb1LVV*z@?KNm
zt!uH?H_k8a1|mq=XTK315n~akgSO#OBf<noXMG8#OS2hC91ZI248%UVeXu7AdE0#2
z<Y18GG^mZ?_LeQqwhh^!yt%rhzhln+H>Fgb;>Yt^r*{mYIlX8`Z<!-@L(<n^fy6}c
z*@D&0>(&tSugeqH0RsW--EX>`h2F2vV@cLLmTC0+e;gz(9OB#@iLmDx+zWlb`5Z&Y
zvMB?33tS_bM17AMkj0ymR2Hh8$a4Vw!<Ep5%eJtns6#_-`iUZB<Mc`fKn0i}#ZeUn
zl}B^WN92?`1dDZCPdw$03oVNK074o1KN^@<$1idnQmdhAEFzY}wuTTYujjB`{xCp6
z@d(Ecp?ZHV(Q!7gaI2!Kw63+eymc@5?H!WH46+J-L^@MCX|hQuvIfB|Hd>9FQr93l
zJ%>7nI*bYw>&j}M!f{R8|LcVBJj3D#zn8A(=jSik&asg&1k}I4ZBKRMKI~qE8E@CD
z3j}DGR1WOse!)QBaodT1e&c9>LSP_f(}{fRPlATj|MOD}j8dnGhB>p&gu_>qQMe01
zMCvzmom$nf*0A7C##78i)cr0+JB&v-M!%6YZXn8nJeAu!k4~$}U=jqxoG%}GKh+3W
zqnr1l7=D43pvDO7C8d$zjti7Pr(i+W^h+Qui$NJw%g4L>%oUL#GENE@Wcb539rzg8
zCeEA?g!kL5n2;OEG>?E4Lsoz)M{`%D9zi#RQJ8L$)(KTBI7@`-_rlc2%g@W<urkQT
zMoB5i{ry0V4@qIBMh?~=)xr{uRW%sq5nlGnG~Ulgw)cc`zA;~Cv_lbJ3kAYthfQ=P
zZ{VNmx)HAa)bBgl<h`YW%QTR(qrAm%3qTB@?`9Q3%*m+!Wfx+HcU&mfZABJ4NWP5O
zzHTE!YKCc!k&MBCeuI%70_Y9y)x!uik#V5Bi#L++Qi3fBsL!eocKYcQI4kKPJx`_`
zvodJ-N2NAFM~0E=gp!y_pOl~UM$w6;5ldg{gQ!HRpr+iCoJGD)u9MPzv4@IhDL<Qk
znrx<g#qW6~dF2xYeM<`qO^dr9kqdD@#%4+<my4X$4m##}()h+g`wI%D66#IsGwUgr
z8J4BFGi}6CbBm^tcSm;TE|o7mFPoM>9K|kw2jpDq97!E<AJHvOI8$>sauZ|@af@<q
zaldzB+;cimayoKqZt+^-YDsJfb_P3pUVZY&yE3{wzf9Ucn&&CHQOVA?Eg~*un$<4`
z$-X2!3%~2HHnaN-*ALh4(r+PF1UuEa>SrDUP%t}<7c3Ku&gsYrHjG<$>XGU(4kDC^
zuo(Em?3g-|`jE<zauS@1viSiMMVqDEWiipvHX;Zg{&Q%AROB_DE{BKhD9cB-ab`UW
z9b2!3w;c8?pKV#jOzMU#;*Zzg^*jY32PJ=m@;`DY&(039jyo0ZvCo7TwwrC6t(&pb
zU6~b)wv4523vMrMTa8AiyJ~)=hodLQv7(pLc<f>^vDauWM^ZyB8<?JD=~l96o~xa!
zofuxFohn_lteVrcDrEz6&v-;S*EvT=299y2YqGPkgO-%6ml}=0&W+~Q(8VP%1(>0>
ztjW{T)?}iNskW*Hv?<_<;FPkjuw^$EyF2JIY7hD2wuI<>?u5ak%B|}lmf4;`F`k|Q
z7DE%ejfjaV#+y18a$E;uwafw`#6tw1*=pTPo(6aFti=kVw7B+1i{&e`Dw`|8y0+2t
z#Jny}XS@AVzO7u%h!EP9%I2As9>`7$2M}~>ca7$5eGS|jIwja?9;{os$V+ZYhLp{h
zjez@kRy^}udBA>zBYMMp2g0X_*Qp1Nvpbnp$+rF{K2Xr3&ZEPl%L6Z=F~1nA*+WY3
zv)Z%QOT{xGY`Nd1A2A#^9K)MCe^r0fpXI*-1bKdD*%5FpW$<R~bX9hpuL*bA0y`i}
zkU}(i^6&Yq`D`lutjtcryX{}gs>`d>s<Z4SPE*%q(E~yTLlV)CzJJT|Qy)9{e8B5+
zy_h7SW#aWGXz;zFoZ@+Lzx^(-W>YP?6%&BZ5Lp=w%iNYS$Lwl+WL(rw^jV&On5V<x
zaT7RYU$-&d`)#AB_aw?U6D_0q`?^c6a4t&?mn0PpLkahutb@dP>7OXXJj&55JJLRK
z(YWatDJfa0mDpt-W~Yti&`gUg3knMk$|d<UzCDOZ{7`dzwCq%BceVpbW=vK_2hY<R
z{-9SuFt%oDJ-Ul-2Y>K(B0#X4t(!3x^doUsve0+CbhJqGS+lIJrPqJM!M-VgZi&P_
zmN2%R;z3qUW_&#38S)3x?*6CkvaLtS+aju-0{Y$8!zX=IQ;qB(WuM3SXqL!5-zykS
zQAUXs>r-dXgJ{98bDpiIZolr~?xvZzLc)|v4qfi2jSoeirOm$6Akp31Q}QW)t#eP>
zD!;2cp4c8;<$j+U&s^kQc?Ah{<k<<F0JCLt^P4|c^;Pzjh3PX$=uHAAt=HQEQ9;Nr
zm4za$B6`yugSJyieYZwK8}k&$((_DrDzx;x`rBG+de?>}277lW;=cN4-Y>PIrWGUY
zNw#`|I;6Vx#-?k-x@DJY*cBc?56FHCTRB^Sm0m?=?X^y`_+66otn;ulA+{nm$^l@$
zO5?@wms`)(@Y--YzAOjh(ydv%-Av+`V7gUP3V;TD{``Ijm7^)hwxX=Ij20>eQ3D>G
zUFRQ}`<T3FwD*{ZFGWT36!7r4^c`82Tvt}E0$M!XQMB^P_m<-uch2QW`PpV$W^GnR
zAli+nhswtfn>&};wujLWsF$Dj@9W=3U6H|`f~5{(T0T4TUTxe*1tkPE_86mbaNM&I
zakHEcj^`zb(?x$K()P*l@LE56#uTOUNH>vPp{kSPv(B3KdYBDRUeM}qs?Uo0?tPtH
ztuL3kp21~5|8h9x*s=35+dR7pwC0?1oV(K}4DxvPD4r{8IF7q12pZu_#s~M;6M`_@
zw*Jh;l!0_MbzALt?>)egz4#p9nPnauBwN1rM9+gh+d$CON|tM|UD0Lb@yfYp;Z3QJ
z>!Y`Au=+sF1L+MDUx=^WL(bZIop_iyF*hz>AwQ$9(OLd|33w(?*HAb4CFNFp=i5?U
z$8jA0)idN4vVPYE`uW_l_${aCBJff41uCtN2ZG!UZ>l=lTA#EpxK}-_CUmg*v>p&X
ztfbxyon&9iJ_y_^oK2k>Zx#*8yWU^iKbU%P`L0p>bp@H3!JXd7!R*q&d}Zvp=n=Wf
zv=u<R;&q1ce+iho>4rUn`;FsLy2;&y=;vL%1TSc_SQfR9C<x>1N^FUzXwuSJ(){DJ
zU)T){eVP6MgYkXBE8*tm2C#qff^bs2$N-a8SbCC1OWNJqg<47L)Mo^BJWVV<$<hCF
z>x`;`?&eqZ;0rrY7`AH^O-1%<cet5qNSevY!qC3b2r%%l7%*>MDcIL93@jcD{J&@z
z7%5o%zqAr8^?!KaU|@nRVBY?RN9*<a&qw0*crE>(E8K6m|8l$``Tgd<G;GX2tfUtH
zv9A|II|)rk7#L*Ce-2ofw2V)$HE3F>XgF!e%5WRo0vHWVY>iAA-2is~l!E#0#{EhH
zOq~o#+yK@#j@)j%WdGveex?7(W+Ef`7mJe>FPVm{0*SD#gDD9cBP-)qGCm{{5|Zx@
zCT849B4Yn3{(8qt_QT1^j+=?e)zy{J^&6wDgE<p37Z(@PR~9A~7KT?221j=rCqp*|
z8^<sIuH?V<h?qJWJ6PB`S=ic;{8O)?k*%{6FB#cC4gLN6`#GH~%>Jh(8^`~2>$QVS
z|NO$l%=ne*Z{4p&zyFiVE$?7q`r7h8_46@*{}<=~k@uf=zBB#P`2TvCfA{oXxvyR2
zL;BA2ci8xlWV)#|VPFJcBt-;O++Ytg;SI3W=LcTwU8xYsyAb78id~VNUBQhHs*T5$
zt<K2>0^pUFCIxVdLOsJV9trHmF(Q=9oP`M$vHIwZ&;w|N<J-x2CeJqzhv7u3vCmXZ
z>Oq$n9J#>%k$C(B);@B+mnVIThnKd#vlG0w=2vm90qQW$RM;^9v%tR3X1T=N)+QQh
z|KBBfl3=i7js~>@p-D+sAt4BY3lS#umA0aWid_5nX=_k_lk#&19WN}n$0ySfZS*r?
zD=WHTI!o*Ej~}5?u60&26*?P6U(h~%qRzlq)YP;JgI3yKwMk)+!2T!QZepH3<h2^?
zflsf_vyrZOmOUn?r^7-{(XcADx39?iNJweM>B*j-JyegzR5eQJ)SFyw>ajm%gbfZF
z(30ZYPgQ*csi~-MdtOtLo95I^)$qA<H`k24oyA))lU}BoC%<_lq&Wn8eIbze?|@8N
zAUqmkqhX7sr)wVp+(blDG*P8SN?nS-;t>%=G{8&SPYMRF_v2RydwajJX}SAIp91<M
zNke0XXs?Q<8l|PB)hkN(X(!V$m-;jMdAn+R$ZRYEEG%qsSyhkciFZU>VqZuYlKr)7
znz+S|UI<e0ST_?Z>s#|o_wN`Ro7G<KM0#Fl*owDGQ;^wOf8JLfzz%;a(zBo-Y&SFB
zvr%MOX{D&BXr@Ne;~EeMfO`G_=rVy!V;-NxhVPz6<5V?uqdWZw9iNXpT{AM@O8EVg
zo*{3as~I&)y+p)<jIK&W^+0wh2zfN=4Sa4W=R<`^c8a;T<%vr~Zl}bH#y2b0tJT$C
z3G90fL&8G^o|jqd8yw!2o>r5T>&8d(UPDk_SDcHeKgFi&i2nj&RcNXD6-YmSNlMf!
zE-wX}jAqveLnnhns<k@IP#hkP!ofD}*ocVsDZHLh)FgR<s??=r2O@&#fl+|6w_00E
zC?AnTEbN=T&cAOeE4Aje6zU}yI-^2-#uB1qNU(4#W8_=$jT|gLT3X^C*_u6MW`2u@
zL5%rVvbKfum4Fu!O)92Fe@0GPo0eu8@PmERd#@0E!~ZFm*f+&5{}1C2w5E)sx!KYj
zIepqei}1+Mh6ctB%#BPyowZvFcy*jdaK@to9Ua}M%Yvne+51fePE68#5(;F{$)n-2
zIyFb)YyBelUTr;J7GAT6rnphIvQdg;HsFQqu<?N;!@hqA0U4#IKHIk|+*n`0Qp;5l
z4v*dKV-xrK3nvLZ{U_0bq|Hg;m!EmjM5IY6B#)Of<Zai>pjfh<s+IAb7h<O59?5@A
z(m(Sg4hPnSwHFn*X>kc40P4M+04`E13i!p#aVzTl{#ZX#HK<L4G`L{&8By3<a?1rX
z7viZ#7tyG$=Z)<PdQ_@uV;#o7OD?aftepCSRfeIc4-FXHRiW2R3kE$ww-68!1r-eZ
zy!8Edvb+g?y+`f#KomOpAbVmf{ul-JsPbU==vYGuI1mIGLdH8z2n+1Q!~$|Z&FyA`
zan*I*3uv16Hu>4$$r%}uuvM?lt!+S5BwBhzSQXk#^PMa9eb~uhCTwg%0Fs2YOg``z
zSEUAMo$3$iUzw5V*Xg1vU_`NbC}uxj9G5&3Nj3!FKkLgWWmH(k!xx=QR)bC&Fypiw
z9fBL_6t;es$i^a|ASN8RL|LJmcB+1Lk~{HpsPh`!TfkN&sgOp6xSp(BPuVZG<ll%`
zXkNXmr1y}8-GEl^dGNcvFqj*FYb$LATD0~Wiq8a2R8FKn|6pgLz@zxwE+q7mf~Y_c
zl7>f4X`t+y;WE+_q{9xRx!Z`Exm$S)yIiz0wIlX03!r7^Ch(b7R8%}zFF#|Rnli+|
zMDt@A`mk+D<S~|R<?*zf+snYDfW?Dt#D=dK1H|O=Wak}rgtCw*9cx2J53c5B=kqEn
zE$VKL$7?Bq)>)#*3#cl~tQO1JDxV++Ih(@5ztBk*R;D3F_A-&OW9RsTSIEA}nV!ec
zR+neKOAg!Eof^Gy!m$2A%5=5Fhp0~nFgF~kh1}y0Cqg%^V^5h^tq<C*56jO^TPJ0j
zd<@r~Z0wDh`YtwmkH-W$f0v4r9voN}RuR_3w1nQdr&aWhRBn8k{)tB@#xC&NNN%1|
zX3<`tyYJ26sdX_){`2vkMNK1PJc-Ld#qh*i32d^b$46NOTE>z%Kvkz}D9>aK?I;RS
zZ7}?AD@$E$4|UuGp~TPXlaBJc855|wtyeY8M#g!}j{PcJH}h7(K*z_d20ak1cIa8G
zgD=J(Mlc1y|6xdyc>@VEL=-uBn8p$fE#VbVnih>M#Y+A(zyy6NiO0yJNZ~`1#kkd_
zPb!Q|Uv0u%BcOmQ1vSqmB#mT{h3?mob_rrwDFlZNbDKCx#yF1G(zM*{M#oJ{A^$v%
z!-?(--<Ejs_~Ue99+n;g!p|PQ;AP{IOGq^f%}%xQF0tUkFd($Gh~;n>14k(p^tC4k
zBCAQ-rXER390paUhB}<6rbAl!6vxQ&2c&7&?1uab;hZci8W2tyB;>-_gXq+;hwz_G
z+0|8KS}^mJW~%+GSAC92{@`Ne727pOy5gKkOh^c5S+<>4R0Bf<40q0N@NOU2x6Cf@
z<_mAO*u_PiKn+!@B_Yw_tfrElSF7P+bJL4_VojGf95`{bnmf}fLvs!<_YWgjS%t$L
zWt~9Z0hc!Ow;cbL>91!OQ8+$z0hM_LW(B?N&H4`55H$5j9CS{Zcd>mFq7^B+3=MdH
zMgdF(-u<%hK3DqkXdJOADb(o;*anx<F$mw6H#Uq+GTQu;3T@{P4)A3a90p1|XBYEr
zS9?ZjYuu)+@mmW-Rjh*$4(|)SHal-*qot&V8aZ~4@7lx%8A8^MX73fGe>Fy8W1pOL
zK-9LraMNPZUEnmzA7lrtwzn9p|4f}<@a-hp_?Q$v0lJl}bsvl2Ll0=}O|AVskJeta
zHL~p<mCQQPSaDOJqq~(?548LRV~+Awt%>!-xUTjg<-F#G@4c2<H52Go#4_JWRKz5N
znz*iJN3SO~E-t{HxIMf$<pY;|3Jq0Od=o%KRMg-&L;nce^`1C1VV1n@?B17rmpJ$E
zs?orwp%^Gs=~-b>V(&u4TkRR`zi6JlDY70TV{+0Fih(>XClEwUMp2-uW}p<Uy!Az>
zHoHP=X?&82<a4`6A(F6oEE3XKuSHQN1v77j+s=`^f@&<2z2uUd8moVPQbYZ$MszK?
zq6h}EJsAe(rpR7NXM`qlOp`VHxjGL=O2S4p7;^C^VzIG+7OnKhK2&ZMi6L$8)i$oD
z4O@27FN733G8VB%&NnKWDj%$rk7^riLPVR&`KU3rzE?BY>7Fn!lVXe{HS&MqW*7B&
z*-sP8FYF~#gHSbCFyJ;d`=5CDJT-~D*j(|Cd8tt+^%GukZ0Mmb{FS_*Oo4}&o|kJb
zc1{+J{9j~e9(a`Y3$Gg#TulxvWkM=&t%(R#zNG(fXe>nXQn&`;FrE9<`s)h2ui`q5
zNI6np;N7`Br1H{0*1Jp=KH>2Z4xIITV505Gq(eGx|H~3xkop~6(gFBc?EC#9=A!S*
z(<BAM+?V|QwyiDfYcbEcQm+UC_n@{=dA6?ooM589^|-xKMM%dbN-ff=4_Rl4AJ2VY
zjob5Gk*M7fg^=fa(et)dI8Xh}>(|#RFB}0Pojlr=!pvj{^}gw9=@x?65AfcuKQP&E
zsV;1^IZlWzRO*gVh_7@PPNeu_%H7k=OH})6d7w%<gXwMe)z|XuiNiZr-bg1i_9%*H
zhAaZfYf^5T5KD5B2-aeRqkDO8Af&MO%(ur6#CA&sFH|wpr|ZF+lST5jUUzc~I2;$-
z+9zv+AOgmWUuSa*(6y92@!WDOx2G!(W~1I%7Y0l!y{KQPL^N)HXfV5G0hK~I!vn&o
z{AL4%g@tJbPlI1j7n?8JQgzw#G}^^O=FCahDIp2bWmO$S=9%6>5Z6L-_7Dt;y3Z5e
zpE!M<@6<C~*Hz<80XdrGVWNnNuG9@gTNN69ih2Em-|Cp=D=>pxSLtfR_1A~#s`@m|
zGi^Sw4f*Lok@N7jxcR#8cCzUv<Qb9X6GG3?jfaD?9;~@slNoh;(=Zrs@QfG(hdWvd
z#ro-cl;!#9kQO}wUF(t8<;^!QpmJ4r)OZ=AktA*$GG3Q6qlRftRAWFo{#pVJCVMJ7
zC%vp&V6NQ}i`VrMu7te&H&MI&SqtE9F7jm22}!w*E<Ll%L7zi{$?zfQnGMhLq`ipx
z*8g@RyvlBjO`U|NsEXJ37%?GJC#j*7*4>H}usoY>ebkN+ErojxyYW0%DdKUm!~P%T
zE=FL7Y)u)ySKDU(ld5wG0vf4RJJOm1l-91HUE+!hp5eC1=12+sF`6ZZN(16%X=OR3
z9iR!gXTO@3eh!M4=N1fDBEe)=-JP~a-e&5&TF|#T!`r`(k0W3h9`GWkyy<j>`jD6C
zJ^;=<;^URAeMQ_-DuO=}MhL!nZ+-m<+oYkyInUX<LNkn=$L_uBe!7LMdKqA?Q%4cb
zgOsi;otpUDSC>O+;M&g%>+Dv9WKZ79m|x6yMe?!f;0Ytl+53FJ;v^|qfJ-dLQrc75
zxW)m#we!%_W#w{Qe0=qdp6Bv6MHLlm@B7~$KC>(aJl!GVtPN3Rca;=n{5g!@ni7wU
zfnH;Lz-PxQ%JwNOdinh;Xfsy)WWaer&s3<TwP!5o>gk4m!|%<tV=I7=QmBp(l}0Ig
zD<3l&cfBdQS*3)mtbu7(^??7y9mPD$J#FU*L`ba$tNJb~&MK9?gjkOIPUi7`#Khf&
zRn+=d2DAo`I=;jEA*GfX&@Uy)cWRqKhXm<YL)uDNx|S&pPuJp`MY>$vln?E8Xzmr?
z)tB>}F;`Da?(G#ZaXtvL1wE`{#n{QR(c8#WPS5%D&Np4AASm+9hr*rBDo=!wB`_pq
zX-WP;JE#%*5O01z#sL-kp;1hOQ95ZQBh^6t?&jq}F(DyDjat^X3G}%26->lg&9Anz
zvw7TVgG*sj{q$@p*?QKmePpXrL0j7EOEFy7IDPIB;bHh;T6Dd%qyinsf=KUu2+Pg3
zwu4WoxT2`oM3wJM9|Z;QF6qG}i?)uBedt^NU)y)G8Sz#H_N+ryRZK*#niD}c9gfVq
zk`tTK5T$0i3MU5dZ0VlYe~&goB;+8T9os|Y_oWRby(B^3>H34Gt7qfG<uL#$q@VZ4
zq~mHB8F|rFZ$9FSsGMA5<jgEkOWmk14Ex-hm*rcl(d2J`3_5hmN?|<mV<tF*ipWeB
z(^6n*?;v=eGMr~OE-8qJw<UdY_RqVEVYXKK!{3>0lU9m>GU--qrNzaaVA~gDs%)>H
zS7o_hO^31Swh5fp{K-OsbM!$SMpK^yrA1OE#t5ffyu86$&4Z)d&EFcBCo@YUcD1h%
z(6`wH{buH+>4WPs$)r|D-xHhIKB`x01s-#8QR-xSUu%A1af%^;(t|{aYU}Fg#VFM)
zh0~b<n9HiEx7+C_--ickO-E{eoEZ%r&!T?*yk84X;0s{}J_n_roeIB*sJZCZ{V4HF
z?#NL;_|=Gq-VeeR^bKp9QqS@Fqxgm5xu7-kA+?AYd!f8tH0J{gF0J=`ee=z$tsm+e
zeMco{VXUE0{SNea9uDtD?6R0sDD%UG6;SF|?B~;Y+GFppA)<1pz)`VOXJ$N|FR4*y
zmPun18j5(Xv%OfiN2xj4^a3iNp>4PgkQj|>+?411_&N8x2S<C+YP;vsKr3{`XLHPz
z*>-&5{HB_xviTlKkwB@h@6ZJ7JvOIqH2tUKcH`m<;e%ZNvFC@^Wu*&{($&@Ft!#a!
z^t#^@-`JR!Pw1c>(ZVHO$ZFK0nz}&!GzsN9=2~fZ*5$kFz0hc)l*bydxz=gmwLC_v
z{A<K<fA&8r^eZMQwkL^#7YP6?&C3gek%#Z_(hr9-(dA?YZBb=zz8UH-;o#sH4#gFi
zZ7CS)2eNr%Rtb%!HCQP!2}O4Vs&Oeku&x|+2ZmoNVCos=_Am(CRxCg-sENzecQ&ti
zj=M*gB5UlAjjs0R&I|chj-`)h;VN5AE_*AQR;`I$A@TBjfIX2b**YI?Psd-Yn+0jW
zGOx$m&9@Pp_a9W$e|%*hE!guwCvVtG_W{^sboN`R-&G3&nyNmrQbW1MO*d4$7WkYe
zrs!pwR$Qov+}3>TO_kPpK0h2aH9gt9c&(AraJqfFY*Mt64p50&D3l7eVjCPgvI14n
zs#SHIr)iQ{$I#=@Yy5y~&^wsQRVaqT!2ZlAwavtNpAz5O?GT2dy7juYk9&GhUuJl*
z)Wa3pbrQ16ZFKvLzV()~<cae~+h|5%<iC09+sKp6=2ySFJs+vEzg-uXs*0bI)P>BZ
z8KUN0wlL$06ZnKsS5J9x`lNlW5$<#E>|7xTL=L4+mNCHBR=56HL4SE7;EdZOu_?5k
z3lh`y&g_*8#MAaRn^RIGn}6rcet9CsZ|VOEUetPf;Gu+^%vt%>9ITkX3zFF1-QA`B
zelv=h>lZEVXiVB4@w}X}d)w68ZgZI8D=9NYl+r{ZPlPalSE44=gd?Yw4mP&1pcx(>
z=HLWr{Yo&5?A?;M#7;yF9R9E1X@!B!rX{KTRB}@RyNyy?j2r&b?IuMb@7&BXfcWF^
zxwsVYZA@5o@xUm9ezd#M_mKD}P@lh0pk`!Ii1cpI%j1LhUBuPzm&3Y=UWz|V7`~GM
zt;ZdxdE&e~OFQl8m<w}nffV68YhiR%=z<IOONu!=Z5K@43;Nz>wr*EH)5+&^TC_Gf
z2uNpA#o<|eXG8EK`dvjNu$@qRp52#4mR9Ran{S$V4jRiOyq>O_l(3EsnnyKg<eH+}
zLYcb5ncAbm8QTOBT0bG~N7rfFLHk>6f3G-;-xPIMvAMQSb=r13jVGWUG1Ag9!;1v2
zpL9HQz22(RMbeTSb-O;8l<HV|8qWTxn=B6eqWW{5O8yy^DZ&RGmDde~Sid3?E1=Lq
zHFpS)oAKpmT^>yF^zY#T*!KkVa4yYlrqO-T{64?VHu)PrVMmT|o_4M)z>8Fn(585D
zsHZ-h_<|C4PVFSSAU%-!*>(o<#b!Q^MXhXOfWHx<y><)`p`}9o#J`(o*@&>T)UuZ)
z_YBYQ93mciT5*PYJoo~rn8$R6PJ>`~TwS90*L!D9@2y^v9;R>8ZTr0Kg-3EdabA97
z^-4LwsQ%3Opo#v;e)e<9*+|pIMpDG_isSDaeJwRJ94TI#>3kZD8;2;M#K+!RY%B7)
z>e+Tg%h<)d_7w~JIn{;DDRJVjeb;Y7QCd!`c08}$Z3BYBTeD4|)AhZeME@Hv2<3kP
z(8Z3o%M^sfnc})7xgus-v`BpoP&HDOQ4-p?5)2H|r<+6EK;(B4-~H}QC1*He2Z~e;
zS9{HR8{rFIaJZ!4m9e`wFmpvarDHBj>{GZL(-2c!$TR~&Ux4f=VHKru$O(mT;f3EB
zlJPKUWh{9t|HS6XaF*EeKmWm0<_kJ%<k%h^5zaT^q-9732AO#uwB%Hm)E4z~7qjGF
zI7>QSx7HxA-!axJth=9WP*5h6o>ty8S!?o1QIsjF-F$V-QGyqFI&ZL`EP>Ab8L)$Q
zL*ahaZKqf=Y2gyj!R+AK{p0KXvMNux&8QnE>-w{^f$X&NoRS#z9bCh+=|lt+`9zYN
z6Ga^zBRB^)5zgzCx?~M}pQOAu%nA_i`aST|t75d;=zF`4uiYB{`I}kloUCyO3(Ir`
z_(2O|u8|0YN5)A#&*?fImeOtO7Nt=wi{dlK8~8ou+?U4Vnq_Vi8K26;EM>_6ls2M)
z%;%Z=Uhc0b*EXp>GH&%`$}f04X*E%Db9d`>srb93mqmQU;wa0_RZ>QRc;h|f`U;o&
zB`3~>n3e=<V4F+D`TMSgQV}sP)b^nA&k}xg76zMVW1<nHS^Ls?=y^L_y77W=&@(w~
zTYA$ueWN{omkpwP`Z`L_P-;hO{DiE$C0U`P!k2)B{~z_&$>(3TJ&8h>z)DF!Lp+Kq
zt4fl36=tmYF<4)ZJ^b{yZ1R3dZl%_;PZdngKp9;qPHK3l3q(idhf6vgi6ujn)aSg-
zt66TbZ!p-{7MZ~?@@pQ>&M17(x8HcYbaRwjg#+_rVqj)DJhk~D-#D!n#)frmflU{_
zj$9=I<$^=YvnvG#vZ3(zVq(EYebdfK=u$V$-6a>-+MbQ81ZVbn_UAmnoh&x1Mr;#;
z?{2Q6Da>OtRmToY9k+1zTOa$|n$zAb0>*{&M_0JiDzqXu<(oBD56z8^T9nZD(-~yz
zv}nyHGH9Whi^#l6C#c2UH3M1Ju&dlwA#XE4ob!qTm#ttYAHtL84)om4A2VeBcqtWQ
z-p8|v65muUlyS?v42u`)j70ra?)erM=cE*cW!2j(opVgPm5^5vsR+W2qq&x&X37m*
zSKaX$6C#vA64wk3@7f;YXw9q7tmYH7-!UHCW+JOns+3F@9$VvcL|Qq}=I~5_JhShc
z^1)qQu!GvV<e&+(?>CV6ja+sFTs^mrC(2=I>=B-mHt|9R0W&e*JKbR!i-n8bGY_B0
zzS<ML9oLB&lAQ(6N@t@lE5wJ#5Ba~|41e990s~5yCv9GtoZ8<VJ;-6&O*0t}a+ss|
za-9WL8WlJgo`5G~t|?zhck0!PYF#EugretNIJZ-b$qR}x-<J98*h+6_YS_zKU={Rn
z4Z>nlGOGDr7N&+2PE6ua`{Ni?*&e9gy1YFZ;~b$`sAy<pUfpv5qgrJDmVr2zmzY?M
zEhRJAPBd^K{Q@*HEJr(I$GpNntP5M=V3mY9kD3w_ZWO=dVN4=;A>IA@j^M`LUbkop
z8C_tDWMN4pzow=p&O@Hy=CTfMD`m|zP%6|DrL=cEjZI!mG*q-;e&2AH&-)jYTFWDn
znpmq|G5uNghkeg%{W0h9qVehLZe@J5?A$1in?|^wVjR_7?8{3hwIrh`!B|t@Tr$L*
z_37ip8WgzRwX%NZ5DO??0TG_$EaMVjk({X&#A%jCo3?7znN<XbzuStA1x6>#TH70!
zziLCPj@HhtN4@DhFKW?SFn<R-Q?7Fd2kj<Gr9?xI0(oUJx%<4fS%#j3cI`(@HE8y&
z;*^rU$-WkNK9JZPGM_}7Qa>a?_+hU7-hR9sE=P;K-s1Z&ZJ0^>2MY|tCf!pTbQ;C*
zD~qu=H*P$qsKC?YPq;frK91U*z^{(J<$w<T6XRvn`41A>X(J8f_1XPg^TvRscY8C=
zU`2T0=$YRx3}TwfswDo~R8kR9nCZ&8x{)QyJ`Kuy_%718^h-|34Ei>Ej%?uMLLcXB
zT2F^RhI1tM0yP1Ds^;%mrZ(c{sclaPU0H8huG-{0wrM|S8zEIaWCTmD;Hhe`&LnE#
zUw)j6lr{d`A_WT?VFJza$$!5~$p6mwme=$8D_xitHR~Jj#RRYE(wt4p8FyU(Rv1qb
zzTZg}RJY7Cw}r-{0z+NW;l{m+qqo$x#o`-AI@HwBiWcHjV!-da`k`+A2T3!SRnL6-
z4^7ff%}svGg~!Ha3VgjH9-jY!m|Efdk8=Hrt#iZrPFdaYX&u^;bRy5Ext3{S4bF&h
z{1~4Ov<uQ4(!bWV2Zp&cWnWvXP~N6Wr-b=>RE#fo0FhhAuZ-Y-h}b|YQ@D(2iF`LC
zfj<*HN6n&~%ultNq-~OFO2!DstUB2Nv~)WRt*ayKgy-q+O6<xjo=Q2s$%5~6%YxD|
z=GO@U%t#mm)<2zH)Jjzl-;Z-W$jHk?d1l;<R>F6+PAs`p=07z-oC3g`eDdQbUl7sp
z(kMjBHyImVd>%APO$gJIsc-}EXl@sD_ciEaMc~+yj5OHtA5L1qnKt286_b^7og51~
zLHNo}-{b*q5!pc0p!8M^`5|gm6`iQE%C_#H4BzKK&aH%aavvk&5ypb916=(}^$7f%
z&y>%X4R3)r3Ffns{^jp?9dp8haa5f)xn?UWf%y&>6L&$lwOv~+(J3r*?pK>FKT6^X
zK*`r^2%CrHSc-gw;bn8}8)7aAW2I;8mWoORwpF}0ov-u#^J1I_zxgTHXs@<mdw%y>
z@7UC>^>PnlGXqry9gM(uf1FL5J-gT->SOy0u9%aqIl_~RynRy<(2?%O9LY_OQG>xW
zMP&D}?RBHduKFRSlw#JUWQFjxOeH^!TJnnKJUuyM9aF5*AlJ6Xc(eDtOd1mXeW9jq
zSR6*)C`!KKYMhmorR61pS{kCo<Qi{mQ*9@l@ytxT?A<5kbIuIkRd=$tT<QnqstC*X
zSFNda^#-~+<@23CSPW+}M;MKekvW_JKrFr4ne>O4Hh1X!X4BUzGuLKNaO>*f??$->
z#vfK#r0VIq$^yj*vxYb#8DI{?8Q)B@rO3*jDe>rP=5Zr!vm3mQ$aDaI^wYQpAa!pl
z3mBc3pWDK&npBU`+L)j3_Q-PdKD1AR0UWB-z=PQY@p%7i|H8ZInY|vj(cGIw_>?Hz
zi-gW-<3>SYssu6$RQ6w)%Lg<<8z&co65WyiV1<Sp;8PruQ8+Fbv>qpuqtyFcFM9$_
zJn)Ti&}EsQl0gJUND>+v)xG?4?pc9_g=&hm-MvC}Zok4MlU1fn<H$*?8B|Z-@f?Nc
z{o#5VZ%p6TcrnA<0{o<m4vF}HX=T7UoR44tsJKX{q7Y3#uX%wD)+QD8e#dI_XL_VE
z0B2XlDzfoge&=S@jQLs#6>(w;U6GQ9T?{SDxaMo1(J{2DfG$byiD&*IIOK|24U3H-
zOOwpT>dJ_18f3-(S3r)-3mjs0SgqFn(h?x+UHPKJPo^Ofg0Gxny`$Q=QAcrbmK}I-
zcCS-1@wEuMu2+>#&O{wW=SFnK0@8G<g)5Sd#OUpDQ+xCSeP1cgn1Y0BvQ*A$e<gQ=
zR%F1$07Attq5I1Lzle>1v19jpLULtyOD>W!-$!2S{CsEc`F&Pkw^DW6>Ipvy=9cMP
z;pk!)Aw2}n`C?m+qpLc<cyV)Mu8S1kNnHx9ihV4<-eZoeOz)^A1n||4%FF&hgO!!j
zcD><UZ&vG#sNgfky0*n|FjB57)VsCM4hWjMZc*W&Q%^-GKA2B39@<#K_{J=+wCnS;
z17op5_M6Iz>xr&}+!(s)Bzi9BX`2UJ)P22VR5HbGv2jy)stGF^iktdv2iG2)Mj|+e
zf&t`%E9f%?z&-V&p7lckEgx|c=VXD~%lIPA5*&hjwtZfR&rC^YK5DX$zkhw~`6CH6
z-k;6pbrfkVa91;g@}?slpV^~pd^r>+a)zUn%OGF){@xX0AI<9;ih;YS_4PYu1E6?L
z1ib&qmb53+)M{q7i<Fo+H@Kf>V$WuEj;q~B?<^h>b7*%@5XL*x&-((w+!){ORcgOp
z#((uhEZAMhE^LM~b<{qUqOH0d$nH*Ag^V&2pVgozNlLqxmSr>w-GS}Gjb0-ji~tN6
z=JBMkruHm)*)M^}<~cySW{TL|U7te%#=mYQZWP#TZ2<_6vY-Su5(?+SVL2_{9{ygn
zzz%~c$W1bvM(n+FPBD)A=8cMw>%?B=)dv(D){iCJPjutl2Om7?z8m!-K<qZhlwQ`e
zj}=OWz21mLa4OO2gGf|C{E5#<^jh_UkTR7Jo*PKrR)qswN4(VH0D*TaurnhfAi%98
zux37i;K~9uiPJB@t)WsvjQHgi1-jue{>Qo)JRgECE_uIzwLVP-cZz{-vO}sz&s@3I
zG)0<KMQgCVeT~ll9M5p7>0YU+9rEJCH#LoFyIL^dcx$`(!}X^<ymoW|T^-;xd{im1
zfyPb?<@s!YIDr+Yjx=GC;W(a(qf;@rd7)N`aiE;r%-w9;+~nkcq+VN~c+9u+d8X-F
zoY=7~zm=g8>N~+3lqysMw&}6{jnov)cO3u-mPFd_?smvGzpR#85ht+cyuUdympT|t
zt+RtZp@yJ6wRpm1cn$AyZk+b~PD)s++gZztUX3;XoxT&<&NJCFc(mB9#UPrv6;5t7
z3lBUCIyhb0$=)0wrZhN|-Yn3!@(Jl?B?dm8sIP~7`B--{HYPh+-@Z&gFG`GLQTn~P
zBs|;gku)58>RH=nkLFN)1IiRFxM1U5?h<_M*|gm9&O~~7%NBH}!_tEtUQJ8~|ITw5
zI?%cew;jd1yY^*txJF?5EtGt?Z_?0neL<gc^A~FWkmEj<>FoX)u8v)0vsR)6A$I$*
zXgE&#l~{$$YgKWYVyx_<zs^+eiZR3Wbi4{p?ma%=tU3nwky?z7EaK|->oajq@bX6S
zKVv;!RqYsV<PVt@Oh3@jRW(AFzlGrc^-yI-b-E}EsC-yn`=YPH?$EAcDSAhp7;W`)
zs;0woKTJ_i5s+At?RC!l%CtMXKYg>}$-&rhE5sT;qUz?x$pT(I?6}{za=1roeJjh$
z<Fu$y5<y7QEgyjROa1YQ1@Ws3i@t?fURhN$QL^4W2i?yi+vf(d7Iy4Mf+@&B)N+6j
zcKsCuHx$}oV?{}&>QyLrhmV2D@<+C5Uj3AN+)TwrE_*%(_)y7Hu3qupV-=BK77N})
zUonj3Po#YxC7c}?>t(Z4*V?73Ul$y`++}@r6$QWkiqQ88DrLx5X&-1jo<89=5@KVU
ziZg1qsQ3iGCm)Ib@@T7QY{iqj^9X=~tL*Z^V+k31vUpoIS6o-)nywS4cbFL6YO+WG
zve6HxU!o<`Rup%q9Q|rg(dsfmAWRXTp2()P0$lObTu!?+7|g|&yJ$~Y0kvbA5}K?}
zN$}@9mNWZ1poZ=6)#&+{DIDtgmOp>UGd#zaI5#h6^0WGNF_M)4NVW<J)pLaQ6|%~O
zGChkmFG6aKw3u>~Ox}&GW!hc)qMS#Uj`ZQld`zV=KYj-C-Yl*hiw`6uE-XR|GJ$}c
z8hW2@X)svH_fI3(hTZ2CtR_3ZK<?dFrkQY$(an1<)JhjkrzOU_u^(lQ@=P~7#dELM
zipeeDlSs_q>Fw9G-@0-;7<<tm2ru08e#pGZ*Ln<9OR!V*35A${iHkQ<piCM#(;C=%
zVXOruB9HUq1`~RO06pghZwx#o4Tj76P6cX{;lX*c*E>c#8$bUO^Ca>60^M%QH(NiI
z7LQh%=W`VVkeyxFgDCp$8`M#j)U*HdPUuLOvb0d(^D7#zL|>6Cey36IR`a&IvbuSe
z`042e+MnqPVGxSn3@hN#*)o3q83;T)rxWq>z`g?fOs1vrJZ^3!1li+|A31%)ED@-z
zG{E~_zK}Dfs6jv>960&v@`6<))ry{rrt>Sk5>4kZa~!ah&dvg3pRaIY>)MWUuOqlI
z9No+nvRXLb9%lHsU8hnpdyIx>ah&2w=lv{2>Y6Ehipb)9r=@D0Ecno1#b&!h`~9FX
z+!jRX3aab*R#`#Yt|hhn@ED*RlRqyj;N_K}TSc3trE}JDVAD<51l^}5j$@f0`>0AU
zisRU_vr#9{-z`~`LDNTXo;sZa^1V6cGDDoC-PW2_!k*Ii&5U~8LMIr-PN0sN02$W!
zMRvA3Se@h=VxQY7dTUwPG=Bz(pPMtiMw7}}ORIxJLyb^9<>%*DQ2EgJbcn^ft<L~h
zDedu6`k|l7r7zt!0+(({OPS;{b&9#J*C<c+%{15!?CP3>1mUiEM-vRT1&JaFMa6kK
z>%3fQU2-P`J{Oik7~+=cm+Kww=hXELca+q7d>=0a6R^S>^3*x#Mw=U}yZ3*2Jud|-
zt(|ds5?uo0<-WtZu6SnyjmCr=a&fXQza_U<u6S%tOEdPDZFFzZa@}`#Zv6&@zH2&w
zRy9T)54bo8{;y!a+gZ5W+?*Drz>#vgt%BV*m=x(TKpl&F`9vG%mjJd6TMF2n#M))C
zsY8yQ(&EziQ2|XdJ4Ot6LsWa*=6CN2Ss~?kv>H~8Ut|&YfhI%vD+vVj6LcasL{ELr
zyXa@>+4OL8&?5$52eUfG_BfAi(?O{GE~V&wR#!A8<)Zh~{lSL=rmEs|gwBG3*X163
zv-$u-r@kF3z{s((4a}FgjJ#o`p)Zn(i<;}y1Jp_faPoUvl|!@LuQg4aN8&cqFU#24
zeY}w~latM%4L-fw34x94+PW6@eL{4-)I)E?BKy_#y#vEum0Dbe#IQLFH4?e1X2n{9
zl9(f6te@|Ry%0h-#Ol=E>X4`fti5App9|Y6L49^P3&e4?JC_^?KgY4Dc?<P^;3e|D
zByCNa!`StHIC4!fYBKOgs)j{Cy6X87{oT^GQMZYVfrMH<q1s1l`-s;5!+zKwCL7gd
zVg}F*W}yV5Uad;U8|ftaf%cmf^Le_hieY&zEj(7aA`M9B_E>hbFYilv<Q%>79ehEz
zA{N7eJ<=X_IYYeTRbK#cNB>&aFS|&M){mS9{GK*WDM$<9qPtJ$Wwxh#RGWu`DkW>W
zjQ%THhYH}7DdW>8SEyuxts&5@L`DC^2=P5T)#-uT(L$$Pq^Ke;Js?^4+Vukwi-r+V
z%U~UuuL{eLcHmKo_N=<T?-xcXV^fvyO4A$Vc)*9p-J1O<Y+QVr8XCI53tixPkQKSX
zcd3K|)IZOG1wgvQghu`{j|kTpbLB)dRcfa8%a_ys^pjVI@Wi#oy-KX2dTFwr5B9f0
z`B>qGc`1f0uX9PBCN+0rUXKJ`<g&if9C##E)p2cA@=E>ozEX$yYJCP9EBiu)DxHR9
zIen^Qea5_hVw+5^yO%bE?&cK-)@POFSw`ZYHDvca*v*Nuh_5h`m@=&zl%=G~j!ya?
z_<*v1U+p`DTS<5`_3QJcxsp#6XT)sS>8ae)sApuMtV4|Akn1H2j#LTwR7%9+$WSCq
z*D|yrwfydbLI!3U=>Q^rY0R>p>c0?T_sC`$bjg-NeoF~^D)T!6(g4Nf<W=6m))W-x
zV1i2In0I|zfzF6=D@xJ{o9xMb=GxKF+cs_Pg{12S3Dv=nkhMlUs&NVI3}N9p4ru7Q
zee{ASJ(KR9Ph!*2ipZ%7a!`C08w1-o+!pVfW%kR8migsDeN{5vd;2t&A2<uy=e5^d
zR~?r1jX^3UOf*{S9|NQ2IQ<n$e&{JdR;xD4Eb$cdmDfJEHlwJ<%%<gs!m}qM4tv{d
z7?Je?s0YKI05(KN2P@i^njw=qWQYi}VYwOX&tt+pGuA|^y-nAnR+dXDk}(RJs=sob
zwS8<<{7Z|=(M4OjHaoVwGw%<nBuHA`S$Q@w?(vqVH8*u{v_n0$tEhMx^vVh9+FIKi
zg=6L^l(8nZQGC7-{`RHo%l-3q2%2yMdV8;9<@Y$;7N~b2VIiT|QA&}X<f&VFx^Eks
zhS3ywG4Q29x(yik)SnxKuLBGEcRcIs`49mPEDAe?tS%`1P1}N<-gZ4tNe_*q*r4Xi
zape&K?O?Gpi6n$4gY4Ha_Fd>CgnT~OvV@$$=Y;l1!V!M*hoX*=F<F5)ytpJ4t&mzQ
zmgh{f(|GZqg0yJqz>h>L%(tRnZ$=qsxP-hz3h12av5qr&DuvQ{<aTBXzo^2@M({`Z
zwvM;0pY2=b`8?9rH}A|D`%2F|%nRJ!0wuyp6_ABW5Mt6KI(f@@s#bl4yz-klEjmG3
z2JCB8!xBb93Dm4P{nB?9NhM?zf~4`q2bx|P@o>$Bg>rBAxIH~9Y>!lTT_03PRTjvx
zHH0Y?+O+!BhBYD=6xh#L^p<Al=hNYZ1`eD{%F@s0t&~iK(|y!O{E+&zG!%9wA9joP
z_;|&#(-mrdbAqxXlDOtFWvXiG+vc~=fJ;L*vOI)T4IJICSkA~~xgTNXk363z6d`gF
z9yK3VXHrMte&24%m8%{TlE$yui<pfd2M{6K6R#?bliMx$qU@%o;AbHIM1dn~m{D<q
zNNyh4a+Ro$sOcK5z<pkjG~QauE<$=Y=g3v_@NNGE?MQFH56_QI*{jj<cy2w=UM|qZ
zgSh0f{?6S3@t9;mMU7r*go_hVW_sjbb;J>U(FQ4GwJ;3v{>+9jTzWOHaiS41hHR=B
z=8zrxgYNp&k>dibpQSRXL^{z4($ctVk$h7Fl&}ceo<6>buGj85c%2mG7`$I|+yL}G
z)|%M!mbG~~(exara&+w#+i@Lmc0y@^J}k389~a7AnN9NT1buH>g^qUxyar7v^JVEn
z_AWaL0qglY^TbU@%+<o>@{QbSBkg*;Kcqi2Ir%IY)t+%Rx*SLD%$}8=?tRBGIQIU6
zk9xe;dhrOj_r%k!x?A?0iCO{{oqmmripnBAscAVH>t3&3cif2DN&DN;3yj4|B#E7N
zfZk`s$7Y0-C=z7x*jvXHo|B}%JdWsSR5Y(}gg-wwY~2%3Er<Vp?ELwEOi(ue%suqE
zlCIN@zj^;AyyX3mLQYa0#QqCq{M%RN{}Dj}b`R!5>t8qg|6}&U7}hqeA+2wImJD#N
z?FC5VggSKp|HfSG;lQe}Q&N4g=sB-J{^9}xe!m@NqYDeoR8;1FcXZhQ8tx~oncc8}
zefD{c#jXt-8q1wzWn~4sh!0d}|95Qu9Sr`ey)H5$g=hn~*eE`R<Bs*Gjjc54leM_Y
zccnFKA$)+eQKe*O6Q`wVp<#axtFAUE*XR&1Q=*{6t2wLr0hj~)#d`iTK)Qi`6WC}C
z9>t!jUe@_E#P12cILA3RRsNWmr#Ivk6udgi=zCv%SCIwM+qvQs&(s>qjiDI17sWrP
zC>TCU<Ln?$upHK%bRi%i37ML{>N5KN)srN<oc~ulzx?!_tP3Y7{*f3pYNG>-HB9UI
z@p1xAPM4IdVd3Ftj~97%1B6XE=2iY0x(X4$1)OK#v_#HA!V!}<$-deiI~_c{#-4n&
zUQ|#NfMa%?w?1rN$Qm3z4xg^I1W&;K7sCAazW@YwsMfwAhqy_n_H{eAdc2wscD2;R
z%d=9k$;rWKX?XcXMPJz2aY92wfk%zne^S&S&I^QQh?;ek5V*N7J-=#Ru_d1CpCG*m
zZJQ27NQ1*+E2ELIku_L<L#TeQ*#dzXOXsh2{)Z4KqO87K3y0bbF)$p&W?)&_sK2_H
zqQ&p1>F5UdiQN#EHh#{5e0?K6*%O$JrWl$}eu{p@Xg@qT1c#;1VTeeViw95>AIw+w
zTNGsno`7CpC-@!`#P258oB?BF<ICNG<-vcwM*p2Vf4>PVG*wF04q@<XxSyewDi)FV
zp*_T7M0R(@lf>iZbAV)g$3P6JaJAPR5`KIPT6F74i)iCPEE@5bVR5cnhnCIQVB%ib
z_lMDwF=#_>bAC6_7qqP{Q<sPV^HF9$4PxBCmiWJk%xu5^kGHpssw(WFMgaloM!G|~
zyBnmW8>G9XySqE2LAtxUyGvR+1O!3y+q@~h-yP%rxa0nDIL<hnUC*=DnrqIv_D3`%
z$7=f>KDw4$6o=E5`7@8F2Z*NU4tJ5QB}IMKl9<LCD1Rf()h4?gtMYK59W~leT4G_S
z9aJ|*+BeXjcD!(P$ZXq>uDa8Q8Xer}y}Ikhg2Wy1KNlC^^HE<wi2w>7zCrVBwUFJ<
z-`~=GU@Wzv0s~e|#wu^_0!qLx)Sy3w%P~!zO{lL25dZo~(KT!N&14A*>Ay3#IA-wr
zHh2r@9xo2^5La;l;bCWa^M7na|NPIABlN8ZDC5VX28#2LAqm9DH1qeu%I-cct&>Vp
zr8^Y`{;ak0F+~2SO?`csW1p(9Uu1Wls*U9}m*!IK7I?2$0g$O{z&&z(mewq&sLZY%
z9UB%zl@j8;7C-%BWo=ZG@2;D3S*^4qG=H3;Q9IH|Oik5$#Fj#N_b$L%`|Z%JaYBMp
zc2g19aHxDk*8kj)WZ-GX7|S!%m8;hd=(8)uPPO1Ih_D|n^NzDwSR7k<&J7_qIHAYr
z%8S);20|<voVGAY*`w3-Ly}EbobLPw0sk|S=q{3P#uGXyvq?&o#>A!hzs0|OyHKHR
zp>!v~GX!XAH5dhHDT)Ya<!%ApG!c7aR;1mVQIZ~#lUC!2ncr7=NvJ?kyMl;WnfWS0
zwL#yGfz42yDL_L{$BALM>_j%cs63ZlCwOlxuZ|ZnVBd`;Z(bo)hr#(%k*@$-AylW`
zjhKh$ix>h)&+A?MPz`-64GIl+HQ3T)Z@7QeTfe9id3)<p`W6KfGo<}yeUxvVVles{
zv$E}uOUHB9=(wVyq^3T~#;RbgHyyq4RnXsz7V0vA2{CR#iKhHes~P&`?9uk=_rCt+
zcS?@aI>o6xac5W#)tiz;YE`|5+mE)-k2jlJ;`pegA@LoJ&CSCpCCBLhX5s&}^ScP*
zUp62{G!;@{f8qgI;-q+_+XSBgoZGJvwB39#BeK$OIR}~Xr^^$l{UYg*1r~%{=*WoJ
z)~_N*7eUZV2qr@%l$7uigl;jq7BrP$P}xn^y~v%1f`UO8HS|HFh3h_1=g+g*=zvt1
zJ)KB!L9%K&)lgJ|o__waSFzgB(!Nj*+hS!U5w!6tGyW@Ilz=f#Zxxl42!AkRB_<I<
z!ov$o+Eb~uEV{gC?9>hebSe=NfR!xM{R}JrtE0G?di@;4g|MzqXCyon(rynuh}TS`
z-7K62C}_<`r~0}&CMQD!fd|=tql$m{1~VdjKF*xGZNzKPDq&F!eWI}=5F8qlNbn2T
zf{Im(?hC-Iw&keCPu99*FZQWm<?{(eeZRuR#s(89L;KYwATUtEsSK$$sc#@qv)%zG
zKb%dQl!IevAYgP!jx$+NxQ{vPziq*P1*3?6<`j=)rQcHyZPT%OOP`|!G1<=^$Jft-
z2_k!|2XU?Lfu>VTY;5>>5tK+sPY#{h_4Q>j?b7$9++1Q(a&rB>F?CEHmnrglRFvA2
zhX{gYaCq+5w@?x3JQX&nMKDlu{xYlv1~8R$F;DV@isQQ?DHh5CicV^ILi8DTsqtuG
z1kNSJfU4?hWT5lg<U=8DZqG$UZ6QZTr|Eg;*dK1NAsk16W6oHuhQujoXqYcJIx^Dp
zt@-o#qon_WaDLd`oEbmRfs++AUR*CiTcp<z=Ia01AO0$2`NBg1n_^mB8QShKZ+m-N
zL@z{OGLyGX@mr0Cv|bf`%}c^T{m2tKNZ=0Meh=3(qAVH`K5u@o8xlF(UzO8KDq6Xd
zyNkb5VW6LjjJl(w;Cv5+N-JiOsEeCY;qb{5t~0Er|7eZ=dF<PEaF4G(rh6sip&KC)
zp?zU(`qF7ESpJakRaE;Lhg$yq$45tU8X93h_j<cK7{413QJWpQ{S^5P1&ttLkk=P{
z`#!s=2^Z+phN3Y?_%9&XX_v4ZXr*hg&t2v`RzMgAH5r+emRo=vV`9VnmveY|5ZSZH
z=VovrRFJ;DphXpCB8rdL;K7AkeLD!E$#rOo0x%0@@gw_LPyxhmrrX86?Z&A@ZRLE(
zrssFwklrh6d!k|k#PnoUoT9x5s97D2#`Di^o_~hG|NN`lih5oQmaAHtgd~%JgMkxD
zOevwJ-R$O{9uhh#0(f=u56VSdMawB@o}40X2<t6L-}g&U=_pIjC6~~iCf*P_YswzH
zPl|16aYIW~BGP3(bX&{$ugmJ6+x<lAMY{8C)eN1#Xmb<9lxuA>TOb_K%+eCbX8uhY
ztmy^4c&*L#UoY3fj<z_Z2Y-jp<X#Iey;_Vu;9T@CI?|@bGHYdX^y#mHN7g*Sv%O@m
z%b%{SP@hS^DQ>^7Fu_##mVYI2(#@Ze2O^TMb}#T1JmhS!8Dy+q|8a-?^Sp1rfS@B~
zk?aQi^(+5heZ31oSzu+v_hB!6YRCHrZs+gsJTb3Qio~Wf>QaTHKpnQ5t`9#kiEsgx
zTg?2M>D++p>&T*t;zqDQym=@)Sj?axaAH!@p(tnSjN>-0U=`&>I~wcT)~q+Oe;Jzt
zx}4+%l!{Hw%|$)5z=eeUstt#~$XI^`bbv)gMejuOL4AFnGR+UU<PyVD4s7MMdgSHR
zBOm6&**Wn;geG;=i^|Gajf{6V**=4`{`GvEm_W0r2}?ZY*y{+Hc|oP#O*X9Ja9*mx
z;q!FSppTD_r<~6kO5a{+E@OmSs~4-Os!^&$fhY<o{f0t7=sQvl=P^aV^r8rY#|a2I
zw@uIM=)lkN`h~tX@mqO7goK0{oy=$+3c-Hw9Crx*FR&vk+C|UBHfy4Xp6j07Q4O)i
zgi>ufO@r(GFx+(b^>`Zat%!(=uSPaDG=%NufptD{y;0Tn<lP&4f>2+6tg0vyLWA-K
zhk(d!szNf!@??_b*x~?EHsbK`hmfdHU+?tJBr3)U+*!NdyNfH$Gt6#b_4x=D=_-Y}
zW8p;q7AO8QU@(C3DGLCuXP~VS4j_l^AF5iB_h;>zXwekhu>)2t?ChbABuoBY^Cj~f
z*LBQ{X4{Bz0LCw)RPz%?;0629_6P~YHXZ{_4UO!qt}X$2rWJ#I3|gHC&l_Giqupx>
ziIAA381hNRZ?A$QD9V8rxW|znIu5Gd$RJVh6U5Co&tOUd^NSQ7SD1CzeeE*sMuc8O
z4v@kOCn|jdgP7D*U-@S@$Tx2hM0~(Y-$ItaLxjY8GU{Id*|H}Bi<!}Roo6hQRdt(p
z1eqX<Fe%ZX`uXWTm0P7UllP(z^|?>oB$H?mzUSycKfUy`-roGH+ztXw0h&cgC^KFj
z5(dXy0yv~wDKM)Wc)cFpbDT99SZZR}bX;JQ%cS`M_gm6$jD$hA3xwx(v$yF&%x?aO
zdugCtQ#E4RK&MZfAgb3SEAj^S*xGb~*5Ti?0C=wFc3hqx5k-(WCt89Ku=J0Eg2Y;M
zn`2%_a9>%8uJ?3mX&UTI#QEc%M-m?APnscNVM1PBd`wJCq!Mk(Ms+0#5h|&vW+_a+
z#oO-B?l~^{cHoD3s%^jT?GYEc(*eyyIeC@$kD?8gAF~8a6Hx((`XQ!;f>R#(orl-T
zp~=>6@_@v-8&negC*Ln$Ec2ZXeOp?@Msw$()qlpl+9jJGKW6i$Y&&PG(eHxh<@Q(w
z`6KdmB_KXtj?&MT({pj5P^-MtSc~%W6FR=XJGLPu&tGn6bsR;Z9{!-#;7~!yRDGcr
zr|%5%;_zKBA^wh$AQ2&6Pw{>}Zheu{Sm0SJ^gVR-4s1BCkti+0_&Dvt;Ooi~a1oJg
zqC$v}uz%C{xv+!IY^9+XYP5=cW5=vkT$5{cx>Ao1K}t;gf*F#pgM))5y-WMT6Y@%0
zbZYb=)TDzo)awZK6!TCGy=FeVAK^SjlK#Rmyc|>Dj+cq>y1WB{cEASXlNb2XYKI2v
z7;mpBCl}LdW-%>H6Q1ZbJTbur8?^8^wb1JPQS+@t5VcG}=}2Iy?g7G@tW+e1bLnr)
z=Zp6T^P^au4u?!ypRW@oB!}6kKltE|{#!c!udqDD`2u9*(Q{>@1zcTI_hsF$kBnBa
z8v(2rx|Cv@Puj1!u_cac92WF-Vg4O5mYId6n765A+zPR_BF(RzWs|Hyc@puZrK2P4
zZ=N^p4S4U~=~KGkIS!<TN&OXPCPcg5!-OnR1N~78=U@HF8<Kb5%vaZ~8rN+1QulQM
z`&O0tF4J$CKENLa6#t7mU0ZLLFdM&$s}%twutdLAYOzz*yO}zb<8zwD1>KlD>|`Ns
zZ->*@>?ql}o?N^?AEBn#{8iSID`_{s67fqv?{Cm{00-_77o>^~Q7%-0RoZd?3pR8(
zC4?l316NNk$K`4|n6y`!Upj+pUaLYZif3kK-~3m}%nVaNa4-oAi^w+j7qCFua$2hj
zRWIY|gUk%``5Bw`YbP!DapmnEbV3MN&5JSS$*l=)YvBzqf3mK2D57pqd}?VEkWq`j
z!p%~`OVQgh8x#Pp@wIfNq&|h!B5Ce+$k92cp+QBf0!(^&Y65^1+kqGZn+uvY??lPq
zHoTwTAn@37xLxD>^yI?K&9jH^lFWarsAxTdw5xBCN=RfV4XUtKQ`PzHd^L&}mRJg-
ze%~vc`nvpmaVqsejJEf;w2=3yajn}HTdxxkc(Ne$_xCrf);lOEscfg)bci-uugPhu
z(!+cxI<>L1taJ3CpuEoYa2S_h*xiX>p6JHYKeSDZ2CQI7Bf+p=EM7h8rGBV?9K&Q>
zprAs{?6BCh$R=(De=zq`XU?`g>r6@JB0I}wA$0u3ylU1mQEw2!uRiyLM9%JG+HIZ0
zI9&h!aO0h--l)EvXnuW1(K_QH#gDxH7M1PTfGkaK*Ia{7>+E%z)KwwWRS2N8Y#5lU
zWWp=A&_gIR=Mvu(cAI98FVf0%32ROpZ}~r_hn%goY9@c(&H%<oSXqF$*?lOmipIXi
z1x$2hHNOG)ns&*kyJ@Y~;sFo##>2eLjz04Br4jm`O1vCNr;v(BV=(W7!hXdFee4}>
zwZa<Dco=j;Lq#LVWme&MkB&QHa`rW!lLdCf)2`~qh*J^nadcXVhsWiii2^mL)Sb`d
z^F0Jz^LHB*MJ71v%LO4?TI)w7970(3&q?<ge;;*1ylWpO#62APLO$-A3Tl479;hV(
z7cQqt_IT}Qs)fR!b-W*yLn0%qw?6Mp^d}7S>jSDe2Ea3q%ejq-TlMVKP+3$2#jXYD
z$FEKh9VaDaLgSwzXHP2t)P|0YlU^Ls#1Hac{pCw^n1X&WwN2{>=yz2)G>s;Y|NLgH
zYa6D-7%lje2J>O?9<`!lk1N8Gnq2MEr|9Xt!4<W|5=Q$zWEAFYH1dbt<WGzy6ZDzQ
zT<cKcLJCa4G?-NMQUi%^!mlbw?nIxD=rL1M0%+x>0yp?(w=UnJ<IJ7W`EECbrBm5v
z!;lbg8XB7v9^VvZx`oZ1+8%j%0KOfU(|PYa)k@#E$C7Sc5iv2>?5oq&MTIL!2neff
zr(Fu3qqF${aePnQok35ZIyzoC?ODPkq)D{@N&KWQ5T&S#011h(ah@0$ih{}I0QC!l
zy#!c%2)pRJMdihULPB8M+jD^<W}iHMlgaWwvV3=#>_1{98<PH5hv(~inmiBW+YigD
z^St@J*MN0I_r9mcPhMI3qiPw#2fMegitG~}u+zAwAMKEKoii}IPrf-tCB?#eda>ZK
z;%biw<y%{9^%`ZGjR=6(1^?;kW^{_IJ-9DqPVLG~N-7*)F|a`4C=f`YX=J^Q<M#Wu
ziz}6a$7#8ZH6z1c=D(e&C^(DT{fD;uXZ<>*4s~0H(z323rwbw(Ms0ge<gR~v{umP<
z@81{TqKGCbDaGjh1oq8+5|yb2SAE%2)UK#@({B7rfed;=wg7)|6n@Bc9P8-EyT+s~
z$>`z=vpNGSl-Fnr02pL11+00Z99e!HX=N`?RD`U!h9nP6_-Ma*E~Ue2@R5_EVri2l
z>j#lm5BXDl3z;BMG00Kd%FqTUxSPMg!-?$+=($2rG64!8Q4x_Mb^111%p+rEd3pbp
z7BO(i>7K}I*vE>;ZownG2KW*2Rf=)1`PkAV9n`;@Efepnw9$}m8rW3mzIkC&X`%cT
zIkLiie)vtX_eO>d7-v_7zk(1?ec<_)gn#`a(5%A*Qxb53Gsz5m^=%0OfHl}Mcnumz
zt9pS?m-UKViC@J?LQpC~56D;L4KRWM6Zn)Hj`gF+t1Ut*01+_x?=dz1DipgANUF5a
zk;>o905gpC_Ef;ZZ%O3%o}Ro+&8-D3j@^pmI(F|Z&CLaCaR~?q530{D;3HR^9+FJ<
zbzYx`FP@BUtFq81dZQ`jLkY<U<bqxTKs<ny@kY@12?!`c1_r2MQdI2joh2!KBEclY
z#9C-6@0670QiyBukC9PuNe9JOE`V7Fx!>wSh-=YhjB8Ew-oIM%F<nvQfIe8n(U-j1
zMMN}!n1=>)G<ovJd8XUdLA1WS^xVkSj{=bcW6|Xjgy_%ChEAuEkn)D+=GfB9cK6MH
zH5CrNfP;B@s>{ff1G6r=jvf@U>oF1eZW$2xz7ysbd`&A5qQx#%DIW+1N?(A1@B!FX
znNU+p%Xg~O-qm(x7&kPV+u_fMZ}B;B+ud)(^!16s-n==v4GMzfek#l&-`-2NNf?b5
zHrL=O0o?L8bbnJ46H;A;?~oi@!=MnmS6FjBvf*BYHET{d3tMa6m&1h|M@6v*N%L=a
z(d$DZpah?e`Y{=|G25;eEJ7k8PR`ZVE`CmS>fWp&3YxkEM8FFQ3)fOmYVrhdzv?>z
zi-8z4OI<+e91#kNK`M}nfZ2GgFI(`<>4K!xD1*_FQbJ;qewPpE<)O_ZiFg#??Ctbd
zl;s2lOdyI_S+!r6ZUa+@LWAxgY1CWLq>^ccwXJCV{QP5AE3?!@-2@Zyl&$&hPiS#n
zzkiBJWdu2f8FeO>%={1U_OEWQ#Xq9sv9hrk&pW!5Q19n`^ytfKmkShJ=ZC`-_8XJQ
zdSLz#4#!T!?8$xgAbxo51Rn<A*tBs-PC>FV+TC?ItzTpWa7%7>o3-b9I3Ni^e4pv!
z=Xlz<(ShkYSAF|^Cpso}88%Vbab39i@5mJjbvp(jrTAT_jIf~J74YoRDkv(-X=~Gl
z^#Fd`@Q>B2XZP8_fWvK$7c>e8&ie7)Ppm0Ao}b>nU(cH)EK}DE8@bdtq_6hmT)QU%
zs<^Me{5!wo)zxWzt4kuJrw7K%I3>EossJM(w40uv++$~XF+}?l9eR&M5Haar?{A<-
z-3OL?CTC|SuhwFSVBK_KO#1%)GN<v_7o!n?E^*iY^$mTGEpdK+x$uIZ0&J$!o9^xx
zPQ>q@DnyK&*mlsdaUJY<K=XluvOJ0K+Me^BX^}-w7pQu!4@hF7EX=3V<mc+x*Zceg
z4BSH{M6OoJY;<U-s)eAXUAH6NuTfT?vo1wf%`{tG&|%{X=V#GwTYbLmogKRqMv{U?
zkt1&r0a&Dp3HsRVOLCy;^wLq#W=82Nr^cx@mWj{4?vRi=&YjJ!=s<wQpsP9kN)DNW
z1NAzhXUC(QheC+_kSQlz5fT!zEDs0fST$HR9yNb0vY$~B9W?b75;vO`@_PgMeML>#
z(4pe|T(?ZKRf*3^(WQLd<x!NBv`=#~;*j}#z11d1d=hlqOL>bmEd8&3P)6hnHKfe@
z&HVfPymF?yw5(+HsqV0jvg#sDm?)}!&1{u9S=A3dcOtctGz)E{@yx`8?@h*sJbDUU
zRZR>8!T7&0PU`pZ*@CIamzO!;QP0#{e7&aCY{2#I+}2n|NOFnS2!Cr=*$Zj=AEnm6
z@?tU63-n138n7@`bT0b(l^ked=>2HFsp(K>F4Q~U<n1G#2|MhRt?q~=ncppGFOJKV
zL5~Z#HI)}g+8JY(9dzB#nB^O?I4%s0uiEIiSNpi(C0yk)jQwE^=cKyN1%8+ObsQ9U
zPqZ12iB!*pmaGzrqvYMjaO7ILmUB~>TIF?j_`Y=>i}|bmud*z=r7aQ$i(j~*TN12B
z-HvNvAt6<E<Kq>pNoWd-aR)O>Id+5U!8CRFLjlnIABcK9$y_|SW?K8yPeNL={x7AY
ziJ6PCU`Tjm-$)w-$NiU|7nS>2u^dshtvfxr#Ax65rDA&o?D9t5Nr?tfVi0(7AOL#f
z6wfRUJEmW2&NhnrBO@j93R+|%q6EL!*P@PzVWga#-r18GELisjshjI$@O;|i1uU)%
zjw9d>AAW=$VFNk$=I^EKKnKQW*FB?YUrwmexRdzY79a;L*7<W{H8yiylu4azd9eLD
zE)Ip~sZTM5-<v3kbC2S<qPV!ae!z`IlCAW%PeMAKO_47OqMuh~5$MCb!}oqbuB`$n
z*_~m)D(PGq5+VmM<C4;$AK|#y3%~zo^v6GUln>%R8sHYtDBb+tGR?{?1iW{jrY40E
zd5M!E){uz%!P7;nQ@CyT@ZBHOX>>SH^TgV97vOmts;dQ6XY#*iH#wM5tq0_b0K+-e
z^t!XN1*+Y^!|O?LZ90BaZEx?0T)52X%Rs_m`WQs>A`^IC;RBs64OR!pJZ_d|(m&f=
zz7rz<04u#P@X!L?X$k;EC2VEIYu&WfB6Fr{AX;Ze_PLSPv~+iRW`^oa{g_O&GB1FI
z&0N_*<|j2HQO!$lJgdY1;^Fhh9l-G_Fp1AQhFAJ=V?Ec$6k8Wsq_T{;pg$x1f7XHE
z%Td?ks9*p$A_Yx}K$RLTfF(`o<grO|RiGc0R5;I6nww=$qgz_IfLR`uV);5@??#YV
z!iiBR-k~qX<#=9>cP!3x+Tqu;M%m}8#CLUNJLSq2$Nu{9jrh+C1lnn6;2sq|P0opF
zDDSP6Wz=dL#)h59xHZx=r(0DaRVuXt?w>C}n3$O@Z!dSL&+m>a)j-^y(g3IpNyNxF
z5LH=LlIU1VL8_0A+)vCxD#0f^vc9y0$=y*<fK@=&-*9R?QA7VXhw4D}(mkBJLq^&R
z4hnilqs=sEJx4?M6h%fNM?=g^hF96}bHb|f#|5B+*UZvj66$kPP|%{uLSIM*63}pH
z^||7y@E&3;2U0ni{Uq;AIM_~;ZDK;g_HT@JF+hZ%rfM!Kp97r_PoerMhD`x+L<tlc
z=1Sbvh?l9QZ#!<4pfCS}BEwnU4SUnp%Zx*V!6>0*I<p1-&wDgl&Zn$^{=gzB?s6s(
zlld3f)#Pa~qk&GsWD$JSB0c-M3v)%&Hd8q2^pC9Pn@)WlN+I(R0iajK0GlKP41WKk
ze0%B7nK%l}9Uze}gw|VxO_i#$OK05W_4$DtOy~A1l;(kmD!`I*bHf6Zi;%Q*U5;9-
z6CPkkH<Zr2B2k!ak@6;eN$Yky`~$#<7_`MwF*GzZ-NTt(wQ7Bco*toTKzeW$PaKd|
zp}LC5FWm)<D<P@1uqg%2rBgExeSI>(Q}+P(FbB1>rU#*o>z8!&0p>o+b3m?`>}Y1O
zTCmZzo&csD`<8uuWiQIyybOR^GTLR+LQg3xqq(>AXrp?c1vuUEH+X?esSV5;geuQH
zgDkh<$=vw6Fyiy|iJ3}i^>D;8_k@B)Of1<Km5>T=Oo?o{bE|8p3-OaftalkpWyW}Z
zy79I>DlXLB9YL4dHE<N9?CAxQS6zha^ntQlOCw!~=BhTV8?l4WRbxqK&9A9ZpdoU7
zY5ATdVaBZ5v_b$o1DSxeK5{#*A1t8bj+PVgRY12y1mpYMJrl0DSlFOur<7EAsbwQz
zi?XfXBd1k2Gh4_=U|tO*`**740^!e7O6?l`ZMnJl$C@y_2EMlW`Q!!}hI3$4JdfC$
zI%-M?<#<A)!Ea&zJCW@L9c0g<036e{XEHG0E{RUn!V6%EG>v}FeK)nM4NIU=kEEb2
zt?2-nR%;VxQ-YQcB&B0hh(bgj70aNYR7TmDHdKkLo8u_;(joh)qSWFj&^9?{^~VYV
zR+I09q;4xEA@<vuxjAA<5kfx}U9E@wD|caoa5RdmMy2NUu)zTzC1kq+NHsm-dRx;^
zo}RVJB8Uj~0Bqum`upkplW1~S*W63|yOyB=i&$A#|L*!4f!v~^WP@G4f0%Y1eYLHs
zYF~iU|Nmcy`i6XC3GucdBzv{4=x^}Xl@<LDXUX6T38Z95k(<|xjEMxI3Snk#EvD|u
z3XG~P_(c81hTBD1N62rt#^?#aW~CLfp2n-c?MPoOo)c-X)p8U7)l;|R_Zx`nAg5t3
zSldSzo2?<gd*@dlhz^BtxnWEuf}S=~qH*w0GUu~0NN&0Ox`@e0>~gC1sjDkv-!-_%
zT|P&Y?0tjC0}MZGg?+<c*U+H<>!ca*)pJLFh|YYhrs_n?A<`#0>_W-q3ew=#?~9A;
zbgRb2Aj^{Y%|b{{SJ%690{%Z?73f1Z`V<)vYts;fi~M#u$Pu?YYc?U_<TQ)N(P_3v
z$9MhC$n$uGdNA)!s8T^ECL!0Fo^%5Wzg?0TpAq)^=U0Q1rDWTa>cNn$UPM%K>8ewF
z-nY8rEehbb%wN~jab629vTKpgQz81w(DZ*x{D|`rg*DN;I>4~o3fy-;YXn+Yj*gDG
z5u`vv7EQa=I1KEP@ZsU{d@eqk1mGGL(3L|_i1rXF7gkCZ5;zq3COCd-eR1781oUy$
z$R9pL>7!yURbTg6P+7<QRc9N5@iAi+tt#8=*HIDx8h1RprcJHZdO-6Pfz66teE2wB
zuE`E~x*+uN<k_hRIXE!cHylX7{Ab6&P_XdZK1hgHsfhy2mF0uB^SbefxT0dbr}N@*
zzq5sKeZSM^*H4XfYWN?;$o-{Ft&Wz%^d}?DH=~O?&HGP*&-b0-v6<N6FAk3V4ECv3
zXL=wcV}{Mmp|x@R(qmyS6SlNW=yz+1z)shQNyCl?e5AWgH>6Sd!KW~A4sh(&T%V{2
z=otSyLFgY*<TL7dC|GWon1>c=5?!jryC{HZX*~{v#n=wQsp!q_Zp|xhh5&#MCYL4s
z>dmzH4zD4?lDGG2MMZ_EfY0X-M{bGJWcYxia?mJQo2VLJd^II*M!{~k<OX;2Z$42w
z*vAG9sri#k@ymp>r%cSq!&wuxPX@xMB_+qmm<Q24JqpL^EM`DQ5Zj8ImKNQ+{ak<4
z_C*_?TC*^U3y`U0)sKtX-tc~Ye%WVQ27?_mbn4>^m0^f~wPLy|gkLCyW`TOjH}ccd
znXQ#Y6gQT~*5UJ}rK|F)pXfI<tvUz%;BdI+8ia-X$_B(G?Qz2vXa@(gJi=%~@uq)m
z1ru!5PIidcY9h5b{@2R!Pk>N0iUiy>edpD$fJd~hRXkAKv>c)MiKv>$e12-=U<+Sr
z7-Tf4z)`Ty$cR%ih>AHCD|FAz5zsDe0+zbQ$8Ze#Za`ociqBh9o)q%GKQD!Ru8yr!
z{+v@@R5kTRcWAS_0S_0KR3*Z2)yaTIEQ({MqZBL`^w`>btt(rAMn?gp(??0mu76kM
zv`uB^#+*^u>Ya=1B(*{JYntlB9Na@6RK6g)t_+5;I<@I$-6WfpzixMLZ(EO&jl<wh
zi6(`=m+$lbLs;^sC&VBGJbeQ|3iA#hf2*ulXj-lF-6zlAkSz`$YC8a79|(O1hem^c
zf7o{ZW<8!2tmBUvmaf0G0U7B&lQe|aD5jZ2qEOT$s#^dv*VB*j$<)mC+3R<~!3IA@
zt;u-JQl#h2^4r!^wy`1_tvZQs<xGIogPl6WNj9Ag`DX0~5!YeLm(94lN0dWTtMb>%
zJ&1Htmt$>0-R|1;&(8_Tm>)LM$<oo$S&Qa$Z$S7%>8pGHhvX4?X<2}O2r8{V9*Id@
z!|=Xe6`i8m9VGBBqlEL0<v@6JX?zh%<_)%mR2zt?J3GqMmj?r5R-#n#@{|<LGVPC2
z7x-Og5F2!=^$WymfoEahUtTDis%xQ5TKGNtYlU5W*ik0v-<{+ovzG&Ns8{&ZTw*(n
z9{Hon-ah|2<L)TGJbH6GnPfQZKH2BA-RG24I}9QOMKY$a0!HiJaAkxBRcjQjph1zB
zAe0L2F08JHD%3MV=*|^tFz9Y0m2`UZWnZI5oyA95<hM3oT*cW;`=_7c6Z<^-oP*nG
z78UV?-_;a#D^g)A7sCOzs_o}QYYOYJ{x`Q{tEZLdvvuoz_6-l-xVSht3HfQ2FP?kF
zA(8D}V-W?tl`K`&%Vn$h6wC2|`wU}xTHZLQ{6)$+$@7zRW+phhe%xw4{Df8Gi2;H_
z02D^f2MjG61cIU}PoN77sl7@zpg?pNKGJGvoH`~)i9L0(=^`G`utp~>uz9phjTjzW
zG`lw6=_OgMN{;UXqqN-`yXHb~%|#z@+*KVUKb;m;&~NA`>kwi4n2KM2H9qB@;Z_-S
z2H~gt<5&W|?NmrpAR<{JursV26qQATF*$kCctfgEi$j^luAB@UCg9sU22~Ej`<O{t
zm4y;cd9c(f6%5Do^Q;mwGKu7YczYULp7f+qQ*uI;7LBXOB<*5X&RqG)5>is7>dr$a
z>hRasd)R4a)4CzBuPzfw3yg@-E)|r1al!k+Lb!WDg}sH;=Y^4<J#=zwHEdD>4`Zv0
z&BQm^1cs2t=n%?cB`Jsbz6mBGr;}wOgH|ZRH)f*5Hazg=z0AUIv^=Ex;{2q3dym(c
z`r}0&U1xT0aG7uz=V+Fc77JM?^(bC+g|{X2-}?;Q2JkEaenWvWO1n}ja|Ran(J|}Y
zB&-@P?)H#qSn(!slol=9?&nlOp~cPz``ETdT>&w=g$l|z$5Tpud;Ci?TIkT~ni*28
zXybV3>GBTppv1&Pij^98WO+bTCuG#=h_LbcW^bZEnS$h|B37!lW&{(N*z&2+EOzPd
z8%^wd)V=)v!8jP9x#cK&anud>=r}zl1<is9bG0Aol8lQB*Rh^KxJuemf1-g2k1Ntf
zNFf)Tly|TGC%ye&w-pWy6jp!*&33q|bmUIMFyCaWAURX;vm)x=<R_o;^v3L_d^8eq
zxZY`gZkYJ@rv{nY7F=iEo1m6zokBHad2%|-RilTWubXUbQaHtH@p&(23JM4B=CI=s
z8dZZ_KQJTF{bQB>dl3mt!GP0%OqYpBWUYi>)v>_gF@f(4L^99*aO1(BwVirDy}s`2
z&3{W+(Rrrv9TA5FRI(l}tLC?p&2w=*VVX{?X!w+Ng>9{M8p?=<=?}izSeyUb@3+7*
zKTuJ@?Cv@O*s0*q=ggr6>D?ZKufH)BHV#g;SFhMN_aFQhW3wOA4&9_AEt~+aTt*N+
z{vl|tl&C0Kht?IDz7cuZe5q=>)hV7eB$1fktK&df`}$1y6$lsLI^i7QtWNKg$6=Kq
z^xQ)4#3YrBzp<L3Y?r+A@$jAGZ*=qhz8gKzFrxu2`*c4=`PnMfys<(IMsO^l<DF#*
z3!bIfVa)OKjRp8kmY=iuAM4Hc+0)ktl5nKJ*H7CIiB^Put-&tY58I`#-Z5LY<tsPo
z?bOL|CQSz+DG{HBxv0=Id2iDdwp02q{N;G+bIkt)h?iThYXbw$12P>vtt;>*{2c0i
z52;1YG9vA4Raif_%z%(TbotsXot=N>cYndb^@mTvoicx(hz&hb6?RMqe>tdMV=2z~
z_^EL%z1%qjLd&#+^bhx$MztI5ADUl!gkP^-LZpLa5W~U!BOI5Lrs%(xc2*P!b)z?z
zw*?>NpWFOb3&@+8_NVuo@c#~PFK545NYVxJz3^w_UcAD;qTW9)suGp~Wck<|Y#j)L
z|6X7q5MEqhZ~|Wc?|=H-U%I#S%Ub(5cfM%IA?W2S(d)zbfbscyAqvzH=>cP8+rE6o
zadUP?)L7-(baF2czB@x@(6(RCbo#Iub(E8Xy<(g5>SX-Xvp<0$%|frOMlPj50m?1i
z$2+EMlkg29awkGa1PLKP+qkmAt=AaXwYa9`kC3iK$jaLdPSJ7t6z{Ay9d%?K{dRs{
z22RMSYD@LcM+%-UAR(=_mr0KO>tLPr*0!}ZCi7h|ZTjK}C+`pe8|3V-tcaK?IS0wA
z^Q)hqx6G);>%fU$1jH7mqA9(Q<58w6BK{~J-GAdhX8y>||1NlN?vk_o_inX?0p5@~
z?S1boaURP_2pWi^syFl9tZ8@en8A3=v~O@QeI>f0f(~$ZZ3Bf{m)&3nDHYz($b`6z
zb~sjvvf`{Ck+8x=GXI9|#Nm~jGi9NknDfU*a5}xEI#*^d?=zd&Bt8*8j7hraeX&2U
zPEPj+EVu(yQe)}c!{Tc4TaLr;vv&I%&p~r@38$Ge){P`2ByT$J=IN`f*X+kQ4kXZQ
z$`dw;rm19qRER6+^F?uN+X6Ggt)0)#I^ZZr7+b$gFci~Yq-eyi;f<cYiWpt%s6doO
zLEROaPNJotSTbqdH0U2mbom+CD5t0xIjs0~^B^xuNJNC=^5@U<BkGR^m*0n>5GP}D
zG&6|xf{j0{aIeUK%q%ZM|FEth<T4!Hwa*1e5U5`%e#m(81A1!iKfEcQnEqU$PQZQw
z$yW@YFaYA`f^X|t%XrrB+fDyy+aaR2R?csewY|u!I}XKAc>sYfG*Ek!0JELk;0PGs
z85L-gqi(|zjf_&;?k0MRh!}#qk#0^sKZKX9oUkb+sE&MfsjF+yR7ZOT)%t5Cejp?S
z4G98goTdYa0SzYHx4PSX(0f?a)TPqr$of(PL&)l;W@f_XlEi0CkChy@cc1`yMlx>K
z`OsfY4gy#K%v@Wg!Fn-_9h}^Nsb3#ccRCJfi5PJ*GE~klWd`jC{=7trsvB@HRG*=#
zLd;a_#+o)%aXd~%CZg)S&?Gu-b3XCNv4Nn-0^1>J)sEdY=Z!(2^e3;?Sq5lul4J25
zfR6$fig(<mc_u88OXVEhlI}m(Q%BJqI#FYqO+*-;*;3WGs+c`LYDii@Fy{AYddUA{
z*9pYHoOGaWHa6+u(E-7e?!yNZfh#)A@WwP&o5FdADe_0Yx(?xFU_=_K+<}{e1KL-a
z)lUm<F>$yB=?`zpuWn_X$y8`Q1=L$4=}E~af-^Y<1TM?d&)zJ|H%e|br*{X-@8JA-
zv3{C_gjh(&$mN2Ho~yP?Rtvi_c1<Fb8YE}1N=&siq%pQbY~zLjy0_;ZpRro!91c)s
z(%*zeMD&$ORSGyKV~o?%x?I=ajMHekNy|<^rT%I}1qwO)ayf5i;kCiQf7W^b3UE+B
zzYUzQ!wufEZD2s`SrH*AN4e#|p@q)GADT)*F}|uEisSnxmho*OLg7rYYhGU7cy$hT
z(NJ3D5)T;}g!lb%Il0`lflYJswBg6S2~QmMZ?+k@Smd4}_JAsbR2><|A1QB${m;z^
zUMS!bqzg#<bJuvb`~tIb>g&hLK4#V-8sj^my`z6p;z|e}u`Oov_}vfo#p`aF16ayq
zj2#gnqv+Nh?uJcCPRxkT&125x$kWM?lyu8UNl9TJ?AMMfJ5?%LMOw<D6ZnXa^PMH?
z=7Jp3Ki`V|k$QldtI%isFsyy+emxDLbq3N$m~`i2x$vj$l3p+gH@7AeiXMl6Ik%e|
z>1|PYoYi5I!vc+#7a&{f@6Ty&?uYA~(Nk4cRtEYcZ)0Op!WtT!4B;e1&CH5fsI`K7
zdSvV^YqbhB?}9~A^t8Afq;RnDy>5wIcKLtkYuY7#DHRM+Hn{Z63f))yBk%Zt`C>qY
zhK`<a`yIJI3ISQ+>U+^Zc6aLS=Hp_4m_b!@=DRp{78VKeUOL}kR$&!KM^=1KOE$W;
zO|aPnTfk|R!sm&7c`0t7X-2!EA?fT&?|s|b4{$-X3@zDRXmu7&-vMLH;8<#~#(vU#
zk2S1>zDaWDWaR6(<%|J!&^ec`xrP~&O1?IwYA_%uzP%H@pH34D2^|_5N)9B2HRFRh
zz2HY_bIyiT;{dmNYv*8B80OOo>BaPPb`5OQsNSkAgK>+YDS3$x<K6sEcI*QY_>q8X
z?Hk<qOnhDH*3}!t?x1Vx?6sx(rHsEyM-MPiN}(IxByFl8M~!d3sjdpi@=<RPzeMGE
z|AI9W<9HLx<S+ummjtxE#K$NxK6!L_tCRu6Uad^9idl5@%;m}{Sg2fcgE5;}WSWn1
zY0_rR=yOQp`a|>;ZYbmIt!yR_G{L0%ry5GSL+BneS5I$LuRrrYVG1}HfL6A<^$<nd
zrNh&cG6PalEP+=;Q18v(<h+;u5=Iuz&kPUc*qYgBK5zb6LRGa9oNz5}4JuLJ!Qx1#
zRyaC-(@;~L)jlYquMl=Wr>15GoNz^um$m<hKNkzF{KNm&{{nB2Hg=Xt?Wbr&6hFU(
zgc}n!%pcvLkb4tB7QSeZ0#}L6=h4JjP@RMPlV4qTAw7K+3H?x{2%Jzx=9C=iLR<9>
zYzEQj;+UMtz>H}4Ea13!IL4l0fMmq=$on&d$w6O9f#iNnNy0Yqi&|(vm|I}$CaF~n
z9JW;D<a}fJLsIK!p|_;AgkLv6BGB?ZY-$7J<RKI1;fpHQ%o`917*$#d++}LJt)aD8
zRO8a(LMl7%z+QMdNVp+}!R9r5%Vh<_1zvo5e?*e**SkGS0Juonrv(l8aeFjttzGYx
zgt=~s(D2wNLOivrU7;^-E2$j6ma@_xGcqz<E{hAx9ibIiZh?<JrE<kA>bNg^!*{jJ
z*USjjo&q9J|Jg&9<G{c`7l2bWG+lsFQf5zeKln_n`d77x3}oSLhZT9nc~V~i>`eDP
zLCf_vEMVGUnHis&a`DG6KAlh3PG5k*=1eryJxDLe`gYOtCQZGPr8j3(UL4OCc$E@z
zmX}ipI8FHZVPRHYgY4JEL?YE-d^ZMJt_u-3tT=<H`3{2GeIDxt&ih2Y&DTL(g;3X1
zppK7(=UZr44b|Zwqr?#ppQw^je(`uwX(@Xoczl7J$0i7#pAjv<jX->r&CoX<H#fHy
zchdk{sML%SC-4MRNUlLY7>Xf)cg8l(Iw&sk5fim5?`go=Z*<~!iF!AIG&e&~l$Hfg
z^ce**KFv1&g)c(|Hkk-7E1&RF+hKBK4-MD#uo2Bc;$mWSbv&~g1;Zvb(zr3+OC^zv
zCDL_^Vze<?j-H;e1e@`S0|J~eTXfjqUb<Q{(Hq`1v>cn|8i<=UXa2K}ds)-yn3^yy
z#j1%-18yp>KkEVkIcRX2H@P1Rm_IHTOtm$91%01&`T3;rhmxU@Q5uLy;o!V<$btpW
z&4ZL$(<Vv22^_29F<Ya<kZTT#+Lc6S41<!2rPzRv7POof<#K`t96k$_-OP`?@^-v}
z0wc8=L+G=n9UDj{_DYal^y{*F2JF}C+!pqwz!ab7f`cdbU{*gpyI{2~ie0Ye;%;q#
z#c#=n)=K~<nrEdw_@#1s=75^bk%6G3!kV^DGUjoT6vq8W*-wGQ0tSjGa5c;V#AbxX
zJ8ub{J{SZy>C+%KtT`Qm^3%*U+2qpH1O`ge=!A+rY{P8vN<D4SV}6H~wXa{<m>ot{
z5m8uj+mQcEeR8^uV2>z12bE?>Gi2RCkf<oGDIZS_E5e;PH{uI4Yl!Y<(munput3FT
z`jZ>z*A6=$+q>IS;tRjdVZH*JVN=d7nDE#q+z{C0xXW8ZYu@vj#CLaYvDfQMf!%|P
zR9b)T|E_3J-AM&x{-nY!&p$(+511fr7YJ$5Gfx}mpXd2t1I+;Pd*jai((KhOnFFAZ
z-`!+y`l}y*P6ANYb9v|cte`(@i~q-;zFK8z<7PUnYXekl(m6Oq$G2yJS+A23;`^x|
zSV*6KcFTq0UhN)hJz4o9wMRh`bR6GSTw7KC?47<${`1TPeDNUeSl{Gok156(=ryiR
zt#2j$I#9v*oIDze@LNZ5^&wJwnsxKst#!+uGbRPepe47J7ymO}q!_OKS{1`vz#Kol
zG)LZvI&yZv{S^2+<JE<bBB7urQ|bxoCeuOl5R;m|DCf2Y5?k9{taU(3N^r=k4t|-4
z-QkyY1DhAu{5Wk|PW7AfqU<qcF{i1ObML#AA0IL@ywY)ApE55hlnbPYe{_+=d!92{
zR1cugNaT1p?`6;xfD|I*08SRrJOu1#c_Y`F@cWgWcns^-<+%q}D`nV!^SKi72Kjlz
z{iEmmhxnL;ggKnDtL&T{`HFgUn|4-=&wD&!R}nd;W~WO=47Db>JYj!c5Zb{<Ums(E
zI@#V`hpyH6z`GTFkMnME4%-0-#m4F#VFxECK%B1A2fSn?fJj(8r=~;@46Pg)6xc<v
zv6;Gl(c$#XXti|Bn5n66oZAAP?*UPHU|uvIOs{x^sJvYwR@&~yF#4YhN{-MJ94rZx
z5n?-TD<r}p$8=PKM(v#P*Q!m4>(s&mP#$-HMMg#rO-_o-PUv#rB7AX}2~~id@vWWY
zgLVC#C$AzOY;A)GX-KNO6O`Drmv(FmXwOo(5ZmQkT_G0AHQz=L(srT-0(7&hQO_Y9
zb0^7GxH5r$$3^6;3x{I!^?@MFP^e^NAVJ1isO);Yd0r*(K*LDZT_{N2DZt43$$yVy
z(-xW+#WmycJZ|IVzo_Gl`s{j51~)dwEL;sFrrQ`2+uys%X`8~~%li|anl-rMqnv9`
z#|I<83l)sPP_%6<t$}GRPP{>{3!E1S!v-!D{PFO-H0)A_f^s>?_s!ev_IAAeFQ4f$
zz3!kRaQM}0@bK#z>!sEPxM%>Glfgg)+sCIf_a8e|slob7=hZ0E4*Ea8&Z||)F;U!W
zU?m{(JwOHHdLSvxLXr>>O`w%qY`J-QGMkr#kFnN00mM%R=+OGTcW9^dA0fo|nF=We
zE@Z)rv~Mt_OK+iUG$u3C*vq9qERp;cliLY}&GMV^*P-zdX|{WvWSS6q5G-ydxS6+b
zi9{OX6!fbBJ5l_|JA;wTgUX9@n^&`wqDo^Rsm6;@k%7Ba%jI6gTe7Wl(Gdx0v2=4o
z(&`AZz4xD<H+f#wyzYvGx}O)ga8+pHGcst^q0(Ky&X+ExOd>R1oyGKTRpk^EjF(l$
zq#>0*PmwV)BENs!OD4aa`q9bp3o{_N)d3xNCkdxyqgCG&(VK!Z5?t5jLrf+Pc>h`j
zBxGPh>$TY2d}Eij0V2|yf!Fm&wSWK<;ofhz!fD6A;Cq6_S<3OZMzJ%t-u?og-a8bI
z8hzcJe_UxbxH^z;F;9AU;Q3k1Y~;yf)1m(9S0W_yxN-ZB^j|2&@h8EnJFK;)*K320
zuUC2#I2ejgifj-Ud=iaSIqlPXX=!PuV}wJMia{5yc7<N#aFjzz4#y)yN(MyXWa;Hn
ztoS+>i=~CGF%Q!Bn!R;t>FL$BTl;(1{QOSjQTOxo-ygt#;}Z*t)9QF$JGNcTe3p>F
z4j6(eJOtH`mxjW4eRK{8;OM3YIsH2=K*1xL2Ja@*K9DdRKi;5R+Nl3Mghr94!(%zw
zcy(GF&xp^{Mz(OaEDD<w&CagcxV^X->yyVtsF{Y#oV@r@OexgH*4|Im&O5S~@gEN-
zCgQzk(!xSo;49o*GW4;h2;cuYI0ZOZ9Nm<jGHd-fCW{NlS^EvX<r)<wf_k0nCZJ&@
zY3D7evhUX~)2T=E502;qLYv;5^A$Rvon`rSt<j;U5g93SD`(ur^>q6wbu+J_;T;aU
zHOty0H(5FgU2l6G=$0P@?3SbI5Th(4fv0@4?4OI85EV)SBzH2OS?@PkFksU9X#BN?
zi8vUK4OO$jvb)Xor=j^;;O%92G^6V!Y47=2>yO{C)9veYwX{k>27v);jRp0D%*ME;
z4V^@56N4X@2wYuV0UJ2dlf!j=QF%G@JrJ!v0b0_Gub}#p_GQf&wf?V~xY;kok0DeN
zU+nlhzmg-d?-D^ffO}rVPzlX=yag&$p_b8fity(puPY!60B|9)2ah)>0+(sf^0)0$
zJVxIL$Nb9PW@AAw@>GOiW_0!CUg^ebZtG5Xv*O~WtC{feZe|mFeZJO~7Ngr_8FQ%y
z8#Pny*dMPG=Q<jcE|61V<PwzU3{0&-tsj5NaBTVrUmO_J0*+RNGM)An76Ol_-xzk=
z9}2hQr09Bbf^iMaMbWZn4P@qzlPKNmgG4aKivWGW_GIIea>p_w1vjva8gd#chOeHR
zPHLp&babqvWF#fUer?9aSrs$QKBh&!D#Jh^{3Ho=v5+<tIeRTBXe*ghV^~WUcTQ?2
zu1+t#2L=#Xj+d9!pR91$-=$sOY<T0WcrdUnP>Imf()I=uw7n^(r%c`yW2VJZFg;61
zt#_Cfy1u${7!DKB?P)?@YB8#3A&n4!TSlb2N7y0%Dyj$)A)SMWtooXYUtW&5<(uS_
zaA}xSz{IvhSSzj~V`J+Z_nMb&1R;}%V}duX0t0M1Fa76~7A1DNiT2zz)90HQl-vR(
zg!(#fk7PWu(pb&R8@_^^Eu?S$Ras{UbOq`D&Xj&WtP~V<GjA*IUD8qt1ZEmrQkV7z
zT^D>+-vnT;?KSJ-a7>Bi=M^AB0e+c0OzsIP+2^BDqmI#3y2HDI)>a&y;^Tv}Ge+U|
zBODEe65U+yPGg~UZyUNe1;9U1QE}>r{@ma6`sgRhFOB>(m#Pmzy|c@K<LN4SB{e9&
zg_#-D%-JE0N%gN%y47k|MjXC;{-q9dX9~T4JR-vR*^rm*e{#X%f~cg!iW6;q2rC_f
zQ_T~D69ag2`(WeTW;>iG+pQmDAkzZ@U4Ykk%tXke&dg<qG-T^9Xd_9OEnIcNbXC&a
zA6b`x`Nh6F>%9Bz&nnaDLT(=0FP82E{*da+(T>LpJHUiHVPh4(krDG4eoMGL&nr4W
zn9hvrb*mS5TBWx@hB1m%z6&%un)fu)^R>SBz|s#?dVBi)USD6Q>p%PKwz#$`1Krje
z{ge974jDxi2859QHk0Gr+>H)^vA&@Pg<YC|-!s~&{kWf+qfn|^DfnTSO-Wgq<h=<J
z;H3>nNHF~A4#-PhoW&Ol>6NJ<`4u_nvB-KwC8jYJhTA)?Hd4N>X`Brm9fDwKh;lVn
zI0KP5!IU#neY^Ilo<IQ>1q^st1E(ijH8(Ua_aS#0vpIiVTiiZ@JtFzc4YRbpsWQ9}
z>g($}`Go+?DhFP@_Z*V^$xASbfQ*&ck*PKjK4aZ_IJ+;ENb7x;J(qN6Gz&G<@`e7&
z@lJoTPLB;KYHqEenRW;ru2+2?TIZj=B0>&uOIg(uc;6QE)1WgrL}7I^yvv`p<L8vo
zP9n*tD_Gjx$rhUzGo$o7fJ$L-rQSmNT)w9K9bMrXI0DzWwWn}8rQEa2y1UEi^$mlr
zZp+m#DCWRju2p3j8Cu}o8-bl0uIv>}4+>_oDbWL8*%Y%Yn62&pM0mj71~NAmk|)nN
z&jCwoTB@npigD)B9(Krw9mrntwPDqAIw4{0*kwLl-3l`yHOjSF)}Pbt7CF7mT;H^Z
zB*J@>#?kFPGB{1P`-($CZ1tWBEkG-+-va%s(enyOhhZA^4ocT?gugfTdw?kJyK%r4
zIIvXaWiqOe?OdHUcBF3PR4@`NGYpU%yec_@WG=TZ!fy)~Wp_8?P%#WZg@$IFv8@ti
zq87E!$EXN#Ff=KU5Eeo#u}I&HIflrOF~Yd%mU$IG1vbI&fE}<pyQStd?8br1wnQc{
zl_L+l?#tG_jl60~8lcEjjPu{>={W^(o{*1j%^x>$lO0d{uR$=l+gtsG)E=t9Kr@0G
zf0Q5FQs9Nn)6zH6FT}6}8dLpZxt%&zhmJ!kCOVAkDj2<k-f(n^=dDKA=6<!#ku1R;
z-}&6)&%s49*>uouJl5J|3^{kgO#a!R27&mM1cGCHLhJfO_vc@G`Moe#e%=mzujm5c
z%K#}xHn~yoM~A5Eqnr=u(8u%W3GuIge!PyN3sTeg{deo1cj*=y27rgqPt(7L{``1J
z6YP->zLHO^kp*rplh8OelaS3!+B6;?e}jelN2B${^eRr@9dgH?3)%;)n_{XGG{i|5
z5guMtL7#<~M0@YIqo$M;HxLk|Re!GKI9Rl8Tj(~m`rlb6gM8O~OY1qg&-LeZQcV4L
zLDi;&n->m5B)p&i!-{65UOVgm9S)09J(dn=5fRahA;3#J9438Cp7kw)+GjVGxYLo_
zNuUc=OH1Q^SUhaaI{x!gvIT6RUOHyo;wr{WKsUxZ^D>OOqGu?UL^`PF__Sx6OzNWY
z{*3iLXfH}=xIv>y3xQdB^sp}PYY8Un!QFz;mOK{J=cVx&dSl@ZR)UW&%8GweiUOUm
z0eyW&UW$|hjUAvLO)zTQ{i91OTCn#soaq4BbYp9jF&_*NH}=w>BLH6{ZnJA%b$vcI
zz+5e9)FIT;wc}#w*gj<%F_S(b??DNRib6zjZ?T}ED-&^2!dOR#wY~ce0>Vo2K}1l=
zxpm{O8tsJ%13EOl*=-7@nXC-MhI~Lrg>Ed(F}8Ceueul-?-Wl$QZj+q0q2FE`r-Wy
zi!iJ<mib6g^A_HJ&3aANO#>See&k7o3mJJUBqW9_-kM#=igDve3;$1u0SfcL00x>K
zq-wz)hhk8r_XzXFalyuJi(rDiJ9zbU;PYg=4;C|mu!aT|U5n{ENlD4ESy3^u?XT(9
z49D=1<xj+yX)7ATrb=mLVy>>7R3p@5EykQzMh(Lz>grf4D=TBaX=%&VYR!3b4GgAe
zeUXB7vEIFk8H7dufLpZ$Z)Q=e^?G4mAZDI8M#@{yP2aZ{-p|f-#CgmyNCc4pSO8}H
zcbA}Nk&uxs<Nh2XiQWdpfMPmNrhw%juUODOY~>lo@!Lh`z{wzfB31)2km!I}H+6_X
zaCm_$E#!)CFF(<Dz4^}retFiu1WJU2!c`7nr2$P6s2*Qzdp-<}<C)_N9rLi<Qeg5T
z!@~n@K$~v9_+P!b^cdTb?CS~A!&rMwz}u-(CZiCdQz5A7h!lbhPI)4zL}swLG*!$c
zc~mMjfVZ_ZeFG=JkA54?|CHYxw2*8%iOiey8fpUS7Emm|c@oq;F|nZZ_vsvVJUzYT
z*9B6^X;#>1b91axa>!J|Mdo7-ANkY?6|ddK+y;E$zBsL<QmnVgf~8W#w;v>#Io@}$
zoSWL*49#_XAir$_OskA`+u)y{zBO)i1Mdn&41y;JA1M)oBoGUHRS5r+Q&OquPLrl)
zW1DzRs8<-xk&1Q@LOeXBD(ViSlNsld9yy9Sv*&v34j4r@uEEvTUg3Q_PF_7t91{m1
z;irJvNe)<GtXf+0#8;Vg+mp#?!7#Yvl5(qrOk%d$j8})t7C46nCk3g-AB7R-$xu-d
zZVU_-Pti_mpHek3X_QVqW>^)2BcN;N*Lor}9E#~SZgrBqfv>;JSfmA&R?0^OUQoZ6
zl5XAB4cBgNWz`GM{>`$%tnm8()b-U-RejN)gi_MoodVL`f}n(;NJ__(4rwGMr9)ao
zTBI9k1nF)h9wFU6I_L2Htyu%i41cl~?{V)v=iI$NwfVcEItT94@8F@r2VbQ?6Tri(
z4AfkQ5r$EkQi=#OqJeSID{)cSmQ@t?e-~CpT)vL5sIG04Nk2$845!57c(_%lls%aK
zR!d7=KN?&Zsj|2ba;B`3q}DS(l10;^yP&xWHS<jy=P%#l;wk-T%P`M%FFjX9L*pH#
z^HyRhm?*KSICL7{XIbJlV!@_&z_Qc0s;8LB{hK^fOv>?7a4>J0ULFxDMr9d`w%pFX
zGo1+QL(2&^zy9x)*C425sqx}Hj@NM=R35Jt0pB+NV~_bXmorz#eXNAi*QfVmcI3$T
zN=wui-VuMhof#1H+{Gl{+M=T4G!{q9_a2{+U5{Ss<0E9M_nerCRZS!iH65LgAUR&O
zV#o67_trv>P>qj~qkoADv@Qv}U@59VvCovEJ2o~3=&9@2L%WJ9r{{rL9aI%3{mV@M
z=Zpkf2pjN0k0i+>RFZsuP$p@e-i*n~>X1Xj6gvQ(aGCjuCh@uYGw~~+=Vjp0n2kK&
zshhB}u`%aQ!>lvmt}xRrqk5Su4e9=uybWv@sU|OI6-)M;o2Y*Mh*Rh-(D=<THmoG}
zc`CB8Mkn|7=^TajUlW%SZ)0{HK0c0#-r4&bP-pY~BD;WNCR3_@pBkc3mti}r9o7Mn
zh}d81P+*sf$IlSK2(K<5@d$j5Q@bKr&yA=K%Ia=;fyGZuU!Usf6-`|OG;O}tvba4s
zdZ~H7HR^8lC_(D$V=8&@$?52EWc4GlLQ3>LiU0+UhPL{M(^C#?A~L%2H%{}viN3;?
z(8=Og^@|G%csGS%ahQ1_pWYkJ{xKC?`<4VofMxbI0u)&1u*1?s><uYdRU(a^$Y{ZN
zamPJ4?&OB+T3a%ga!=^h&c=X;f%0p#POttbP2)oO>sKy(MC2@^p^N~4$O%k4#pf^g
zXe2uoPgp*r=89(KKzvfaC)(DgsXHX`^%_<DdJE6{s1-8OzjmeIaF1Vp@9Tq1-MH!`
zXf>&>{wT;%VxYG_NEcE!Or!0bw?8<)G-(_O!^;2h<3~HsKm+<aS7B1pw>UVIf$i;t
z4tb@<9m&cRjfdkY4t=$lurl|66R+@lSaGBjwE-WsCzX28D{~yT6(9O_JxY#;w349@
zFoapvJ-)>C-OQa<eD(8dwd4Bh&(^Fm{qwv$De5vZ#E-iL7EbV9%Ea`>WQRJdd9S4t
z;gF?$T8Vdd@VwvMH%H1+&y!$dh?8TASmcNP9h;z`9Q)ouIF;ooi77Y_S6-f;j#GVk
zh*@5w6<NZWg8If$`u*#VinEpkc`lBQo$;hHa;uqnd41#qcK|7s`3{Dg+IIQ<w;vhm
z$%qictNO9;d3nD9gb{Q|hF0o4%cz*d`!Z)q3=_Z;YrE52ACAa9xUZ#EIbLh4GqnWq
z(~J_Ch$(JJ)%Mj+Z*!$Jh@tffL+`zg5^iLj6z>ThgHtKvki-ue>!zCF^gQF`!LXGJ
zdK=P}nT^zT_5y?LW}cSL`>tm<vY(r72RgC3>GZ3$m4Oa7C;tleRJwBMC+2?HNBr{G
zyXSCo<kOocAxx&0pxCk*7A&KthRAQj=HG9Y9m<cb_&iuZO6J1{5R;@w=i8Aj2n!qG
za$IBnEMHp7aWc5%w8Exav2+R=PnFlNKLUSJd0#D~AC}+UlkuYS!A;|b$RAyZL?aBc
z+`{_})cio41J1)tIU07pXMw6yDzCH{cnsKE@{8*Y5*?H009VE1WUDW*jkt&&D;$%I
zHdRnbH6D{F+UY3!?x>aNm-1~0?E>I;U~6P<?lGrYOwbhn=<cf<y-~q#JtqQK|K-C~
z5z6lqsIk=a{QScYm?<NP4u?IWS~?<LU)+JCs3Iks5wSfT`}`-fv_)xuu{e>x#CvWw
z|4mB9(y}fo#zh$swJ&fjgMsRUdxVhh-CHR+cthAOevrqIshFGzp>bDalzuc;sjhpx
z-L;s{2OU{D{+ld%hi<{26afX-Lrab7;ub%Cs*3Fr*z^ND=*lF8SD^kqaug3`l1)?U
zNT;6S_LZwpqdX+`d9XkgP%U#CSi4q(N20#Y_tp|8x_v@_1RcY3?5kI<3b!lg6MX^$
zxPMJ&3Cj+*p_%{hNBdH-!R;Ty_B_3aRFcLf*r2PV&}A1l%-i3@j7{w8wT+ljJxLcX
zs`D~vJ<!GzdFJcOnpr*b=WCBxoUb_>#i<t-Fa@{N<!~AxALN*X8+3DiF6<1fP~N@5
z#Q)km^k*6gNR-a>jO`g!MX1@+{AXz*#s*Jt@r+co#tekBgSKe1(^Kl_Y-FDO#HJz&
z$S71>Gh;p0H@53X@qZ4dsy0?5=Non{Q*>Ka=!5V<iJG4ANjXzgQ<1OV^hf}B@1cq&
z4-LPucmm9UIJlht86!(AK~#<Js!SovDQvQ;s&ys;PZ#QNpnSusOC_c-LZK>(^nTvn
zFI-aN(u2c)LLR1hm=vY^246)$<ehOk5{>WcS%M@bd8mcI$@^ik+G)~37x!jh90vcg
zJn8XbnBkuWo5<GETfPd%k~l+Iz1pc>NeqMUGPAM?QsO3c$52kQR7|Yl0NOC&FcMXt
z$w|SfX}|uL9P&N#`vA0Pshqe#MdX1E(yuz)g8<%Ae<O+7*`cIwlS_Bq6ef4<#Bu$b
ze$Hj4a%A%`o=rF86CR^v8E1~H%;wXIMmjDU(zl`GivmnvLqOUvMP6QBT|@g#?hgnx
zKoydf&B&=TukNr%zVpyajvs=J2s*3LiRyG!gije644wV`+{!gtfv*}s9Ro1g-w#j)
zA-#gwm_e;u=Vo)F<h;g6fh&aHe$=+$C%YUwW;RyI7L|_cNF%2F4kcOwYL-@;>ZNaf
zkms@{6++O>!^IoG2@z{1XiKW~6?CxdSj`Rj_G<pt{Ny1ZZSqyo+Ibd@Rn$sJZ0q-P
zBu-8)LOHmcy8mu_U2u4xvOcM^ibrL{{31?~py&P&B)c?8Z3=C1kBqfru-YHbUhnBI
zfhpT9zQ`}3JEUn|XCyalf02C~PEZOQJrD@|NM=-3E}Lz+xC`_>2#{<(^O1QbTxzqe
z{uhgi$+zVV%&xN1>13HhnSax`L+MvkIvtn!KQLH@s<^G*jVfhZo9JH(^ozkb1!i3y
z-Vg_<H;-g2W%b-oP0PJ!PP&K%`q3bio{kZtA03moqobo&R5zt-?k?jNR_rJ^nN5B$
z^AqKJN3pUXAu8(r%BKYRa5*<E8Z<OUqrO^P5~DHthijD(DCh>bRQEO#W@dC0)4Wjl
z3-sZ0d3v{YcXqhb_){=gx>z8ytez62DFrkjN)A!!NZQ4*Mx@s(-#=9<xaA(QsB%+Z
zi)(!Et9@e;Lcq3G)t4f$8KhXb8D~KA=FI82EmoJ=TE@txyNSG>u92~ER#7XdQMMMg
zZb(Q-Z*F6%`v%KDo7QfEP#ltV?&(OeBjQ;0^_`ve8>XSk+)w($u4f{~{{yRr4>oV3
ziG-AU>Z;@ZzzMQlS5ov3JV1JEZhnOxNXc!~X6In?_AT=3;rCgxe_wz8{5jEDySLE|
zCQI(oxq$1>){<h||9frdAq1+S&)&)|0A+r-)~X19R+LPdjCguig0|)4D~|KarHKgd
z?SV5qh;cd4XD+XfpnJ@X@FYR^BOclC>)75aKZv3Ld~m-}wt~)=qm!t|m?ZrKB!;F!
zHcd+}y;D2Dn3Eg1xg=r)n5i;D{+12C+t%CVYe7&mU4xWkFyTF7#`Ql|X#1IE{uqiK
zm?XcpR${@Oqxdz<@b%|L*Zth!I8vN<i5U7`KjC<=L`VVAVDZL73paPfyz#g*>IYym
zlHy(PcP=|-xuwVB%q+^zK7e=(!>viKl^V5tb>r(x%oYuWCP{VYM)Hvz4g)Mbn>mu(
zyV>gxf-kCMmZzJpC+k0$9I(TEZ3ii4VHP?%Y<g~|B;+nLwplC2;rLk^UFez<^B{vf
zsy0#+@B2v^;ljeg3c0ODbso`BLEw{DucC84)SlAXYQxe)ksilYT0?X<WoxrEp4;NK
zTisPs{?|mHN*<I}bk_g;-Te{391kBqe%v>LNfsXoOhfn}7>$`-H&WvI6oO7JD9KIO
z=ekuY#BJ4`EMMIqV3{E$<8Fa~CQ#HSakZ}uTsM8ek=2l~Kbo3rSh8qYNLj8hqc3}#
zu_bwS1l+@mrZw>dUmj5L>;~T<omFl)XZKP7r;=dup+6$>@W*>8I5ldyrl^rT+u7R-
z60T~=$NUaA1?Ize2HG=zE13S#&7aH6oJG?Es?r-xvW`RFVa+^3;ciL%PY0;fSH+1B
z6S~)X69HK{Ig9$ov!QemqDUzMg|c9<Mjp+6YU`bnMuocOLF3o5$8g7Bt85=~neEwm
z{Odv{mhd9?I-iCb|Eah%Ih%Q2Gi&2fX(eQHJ#D=*LHWU|3P0y9mx`rj{?z#7WY|fT
zl;CbX^xRTdJSHbV+g1GiUsoNsWmAwz^vh{N4<o46x2^5L%u&Ky&f~%f_hM6wS+wS*
zJ={CTsie=%ncn$8J!YsRiJIQnpa?%zWN%O!D^UY_PRZj;#in0{0{ra%Y(WBexE9Au
z4chVC2dd$bk=|qAe<J5ylB8$AdJ3Z6@za%mrP=;OwSO)Be#*4GmrFQcclUZ1LDcSA
z!c=%};dSKj7M9+HMDyLo$DsH>g;4GgwG0nUc(^qqUAlA`t%>&R;2?H+v1(2aJ4@bE
zBl(DfD`G=9z{Ku@5X4r3Xy1q`?rTMjT3D<yVWRQt*SIC7mJdZ4;)unK$e%P_yyl6G
zKSC^>-cA%W{36u9?wF{22a5tIC%~^sf!5EQ=F}%lCa)`)KVTiSppz9p5y;SbOoZo{
zN5^b_>)V{-y?!0j$FeD46}9rQINe~>04DbMakmQ#zV)m{p@NBVY<nPuO|gkq0k!c6
zWBy1jB{mL@VMIA8PB+GVu;L|nNn=~ne&?e|P1T(&@d|L8oIGL6qVJ$)>$TygR*3fq
zlzvCa@NA<a=~9<_d*=~H{b-#HA8tWG!9QuGG%p`5Fm5W2G0@)bd6n^$hJLd3jT|BE
ztgg{OCiieV`no~@_1-xHYUgD5A?nQZA|-?fO;K2HdCg8O*`TI=SO&W#1GUzta58my
z;}%xV^U@$iD(vhN*Q<_`Y5nVuGxZ3(yqXxus{?7f8p+&lxFGTlL#9KfbF@Cc#Ce-r
z@hdk*T6a|87jjnP*SflXL6lwyB@8_WjfE&<_~`fki?#oHglvnYbB;6HtGzwWH=orM
zIHSWE6vUrZpl1)${@d8F$U`;%{Og}1D(U+yNGrt4ZtRB|Gc&WK&eM1kek(=?Tp}WK
zg!ogKMD$eo(J@q0Nh!SRz5gF8Zi-zMZ@5h4|A=5ldVy*<Qv#=}q{<7X`<*Y^4NLb#
zgZOa|S#)ZuKbUq-oR`N^=h2C2E_^a1cSA?hnKV5@<SwT_r%8H5(zqPMCJ$7gGuz86
ziHMkqj1RZ!UXGgWpM4RETmp59WPemN_qlrJ11j~>^C#YkWOs{tV5KVoR=TH;nk$jA
zigGB4^xtFVyi77Gquk#w#g&<)?=)+UXMYCL_XYNE<n~&{xOlX$CI%Tvuvt6THg=@m
zWQ{za-#J3lISC5oT54X;iB3PlU0+|9_4GtU%Vs@WQWgbuq${$YgY383oUY!AN)5i#
zr90cZS>VRtv40u!^5?XQ#@2al&p`df5UxqZx5`<>b4;yA?23_LcC^C62q|b9+y6YE
z?djZGKQhX`wgh4M-)ZYnjC{So!R>~(m^uGmXd$kVDz$+}bsb$@`+8`6oTd-q?UiMr
zY_*9r7%99gY`EuIzvt|f^s|s0v+j#!Y`S)#nU#gW6yCPPuX}iejjz`uNe_5mh;)Ud
z?rL_7D+1}8wX$41wRQYD;ffxejxVRPMI#>`OWf_B8<?>N#i>2hT8RwI;L<}IH-FgH
zP1PXVsvAqO+U=*F>lT$GOZ=9;`$t}cYt?XByPn7G)Sd#Kxrg8jMJ@%EGj736a1R@+
zn~PSfFXs}LZ@({ZK4^=r8P4P#p3U9b`|Jg1yChovmEFDb{ebIn=3gMZ)9!prdqC`S
zfXBw6aI2sD|9|i|Xzs$8IJNGu$Kb?smE7U&c!9d@rVep+*wamq6kguZ<>@a_Wk@~S
zo&R+2MtTP~G*1W8)NpW~tozJa+YC);mSksB^!@wi2_3t%g#9|HVfGIaaS?9%`4fY^
zkOJy@RaDevefJXP@PNZh1`#X8L@*|HvBbW$dscjQFg;V{)tEsUohQ~teAtV`)<A!M
zGoT|LbD417ls>rVc89&4-k!gA0x<ta5AzLSmpt=BPUwM87>TfEAhZ8t{%&zqLIO!k
zD+wjq@Qv==6MRCOUtffj=YeVDDcE1%i_8z+aUWa+2Xn6Z<adYk0hkiH01P`akQK=(
z+Eo{~Qm;!S(Th&2-s=-Y^k^7sKA8)e5yFvVJ@%cOg3Woe`$@aZtbvo0+B7@B^>kUo
z?r*eQ^Sa}XV=Le;5@9DxHS-rRPTp#uWp%=p@uy|$g?x-m-k`0&YEMaYTcassx5|Z)
zk)`bIwMGIlJ0uC#^Y=n5k9BJO>CFFTlm2HdT^Jzn=dvCJN?vFOtI<VdwVC1D>PA*W
zy@-H}7=O!IM3fS1yg)a!FNHs47kGggzb94<hzEx%H}fbDw0x8DQ&b8X4>Q~Qw;%_+
z5WUi-u5lO?HUi@XTA?6qtC^<d`5Tig6Rj^`u*wgejsPNkS8Z;#DKm3JrRUUF@%2cz
zul-D6zDfC6Wl+=Bp)(yANd&g~(viqcn_&=zML&4A{36h}!pVGuR<hfu3L20|Ktaqm
zZGg<|PwU8(Mi$S?%3rHgn6d+Xj#sasU9C_~MFo0-jt5J77>PAP#7D04MHojT=Q;11
z(D4iuXdOKNx(Lt;cP}?R(YU+)=J8N8;WAp&goS5TP$PkmsxKEJZu4__pk{SP<Q1no
zt!x-M)ATlw$CztY+cXF<GBT2a{;gE&xbL%5?|?U?vAVKyL0LmT6q&N7`1oS~d(otS
zo@$Oktcj}Q3q{4YG4EQP@tNRHpFWe~SXQy$$HQ*)K=g1!TE&j-KVlX!YUV$NavIFT
z!J=*w3_;0>1@wL-4AVbK%pD%0p}p^IoY40k!MfpCva*&9`ZkK~#?&<E#Mt|`fPhJe
zG7ZMu9+~#B@OK>ZjE+qiMJ){Yn)cHq-2R!Ag8(IjpxG5@|J`Z_)O|OuDV~4;q25>w
z5@DH-aF)){IMzZIS3aJ_ea9EGffN|8MT>f37!>B?|6uCI#KzcfuyiCHrb|00&IWl6
z!O0{5$9L=$$^?uoxv$E!Cn2-Ee54>ZJA1L9+$$957=aiz3K9UHI@xo9bPsgg<p7Oj
z+i2SHRi*?j?JsYQ?d@&I>=rk2Kr<1knf*`OQibu1Zw8-FNhxvGr^AjS_$@t&-~-s-
zyzAj6;w!fbCleSa-+bhML9~E&dxia{%|?|}R7odTD63GI4Yd6f8Y+<g=kwt9PK?%%
znc(nG+|x%>?=n!yYinzJkKsv3R?0I4%!W8Xt~Vq_2?4*_L?t;z><ZQqPW7m+^+{6n
z91K}|b<@_o>AqzVa7$TuwO0;J<s+6~i?XuX&=ZCw4TiHmK>$ZhCW}sH7AR{yscBI~
z;dv0fGIG3Pr`Z7HF7kc$G`NF`Nk(JNuGwx2CH3$*S_|C-<0VC{kp6>I3vu0-mPl+$
z@dxcsr?*${o?bT;Ej?mJ%TsGz9wf-h!mf7{P`|53MT1aRB0X0e0Hqi%hy2#8e2*$h
zL2wiG4sg`Lx!me9f(4v~mGer03p@e>0*L3yo}uf-K2sllgL{#l^t-xb32%77-ST&=
z*>2*Jn47Be(k)IyobNIb_$YvictCx|D|}fvVos1Dakge0^Sk8hz6LkLZg*V%9*8Ad
z>=S@KwYNvb6n71r`f0b2%k5OG#x%U0B3_-3pe(xod8*j=Mm>zeE;s>$x?4V}vS$4a
zEb&Q~z#Gr2gn1Zhi>7}cV3$<+ALb<q$mam92*~?SK#8jd$qf0u>vjCLOHsyP^n3Km
zGTz`+{#PLWM14FLHNe!n5+6?p6Vl7sYWUaPgF`?O&NCp00a`|49`_2j)BcI6a>#%i
zIj~q{^D=!Yn>}@Au~}u)6lb~X{Q(<=(8sJDM9(}RP{SbRcD&K-5mWW0M3(o9QV4(U
zUUvk%f7=Qupw@pU?9clhFYSET31~GmRjSvEj5fF2Y@YvuBY0g8UCNAHS*TD|mi6*#
zRD_X1a%S1tW^Pp6@IXXFJK;JhVOrc_thAngxLSaST6EpzDscNX2-X__MD<ld23Q|&
zMyF`_Oz3}@s`of=ysD7(!q_QX8r&vLTpMN|l2&ud6uJhCP(Y)zUO}E$d3ky76N>Fh
za~NUy&Y=a9<E+tGVB-HJ%zH{b4-l5PS;~;If5Pj*UqeCcPLfwO1%(aPFOxqrlZnq&
z=^H`89Y)Oci`rF`lI`3=Yu7!uD{Jjkdz6xdBm$E347f!6Rg)<;PAQY@EmapDcZK~;
za&X*$W-G)eJ5^s`-d)brK$5EN-?+5Iz$nudmG=Zl<l+K9+Qdeh?e0<2^Wu|w=x}eo
z2eU9bzo@@1!@v?dur+}!_gHDO0|xZzz{I!AH~qVVu)m$^Bwq<0lMrHv7d7l4nLr@P
zu+WeydG;<<pf#;=)V5t_)BJxh(GW?;dDZW|I%6!JA|cg9L9Dche#qI0BxR2AY``6m
zQ8<oY2cS`M@5}ZM*eY34FiHX{wXkr#SpkQvq7EZBGUJQw=haEek40x#R8MU<JHFbV
znFCcF2bgsnJ(Z(7ShviWMfvp}0q>7M^DojPoD8AN496Yd(YTAW_6M(!m)74wB`wRx
z@UnKX%$hlk+kGJ;gn5^pT_j<jE67!AUui%YrQ{GW#m&4$FG~8OOqE8ak3CYoT$(PA
z_)>t1&^BbosV3p7>Ii;_*705z!hcI=$jfJ;2sAtz3h-|HE8Z7hP1tKotft<NoM&c~
z;YtUgw_Kg?BJ1O|#K)`axGp?{$mUy-h%d*ds}n4z{7obQb;_zzWE9~0x=(+9FDjDK
zn^SRUv|Us4l=f3RJpaJ*#=9RK`oq?Y?~tygqgUi^G5h958CdWsx1cPhv-3Idr_<2U
z87B;znl7Kf(ro!!<bbH+vsJ!Sy~#@tg*R{TK{oq^6J_Ieqq4P`>*b+9@;nf&`sNX!
zIy}e1hQi<R;R5B^%jOlw-*edC>xR>nG4ooPi_O~FQ0cN)T1^9G%wPR<er#)DA^YM5
z>YV4UC%HF>k=^sFW_Zg@3Oena&{}@%E!i5Ar@|(hYDHF$cn;~bU5i!)`1uVt$BlYZ
z&oOh9CDhAUAEmd*y)X|aw|uvU^Id|z__p`P*9#YA5}U0-0)yHLm#s!j*UYxmLLx^=
z<arq}2{&J{?#D=O^Cu@oZlAH=q9K_wrPr59<xGt2ERUZ$*I_92**Llt7#)H#=c6y;
zuu{wEc;Pgs_Z9NWMerK@^A{n}?LpyJu>V{8#`<4K%IhG>bw$lCTyj^@RBp0y*{O^^
z_(BF&5vqj+px+BUKwjq*ljc3yW3RP|H7@|F8xvAJEcuW^t>S`9noi2kwvZ9<*y7FI
z#7cTfJqM0;gYI-(|H&vs;r7Lh5_*FyW3@^vIA>`pNoa6Cn<2LFqmouk|J*sx$yNx|
znKD^Zcdhxtp@rknDA#Z6lHw!%Zf5Z=bPZUvGj_OrF3l-a{SZ1C1XSo(vGa?@)!nJ$
zJ?1+-%6t$u$`+euU5zp8{7L*PxwK6WDC}G(B>(oQ_^nxwuw<oownv~P?KWEv;u%P9
zL~f+s@5C8ymk1x9f-Xtrg2WZ?_Q#x<qX6NW`9<pK=i9$VK?4Mr)c(79rQ1OGd@jvR
zOvJv+it2686gBgMGf&bvNwMs8`r+x9f2WUdhd!)LvtQPIq58f$?{vEc-BTqzX+gl=
z_OhuCNRC($E1P3a9X>W0S~4>Fg@dyr^W9N)B3o7Xhk!tJdh2$ab=@wP(L?t4UXC@6
zZ(OuGx@}$D>jp<hk*XclCnB~!I5T~CUwx1DJ7M&t0!1b@tq@E512|F-;N3}2FCBY8
zS63$_)<FUR@dfDP#rh0EPPQ&)H^w?e+E<{TLP%*8;iF%Vf$2U$#$C)THM|UItm`{#
z?iCf1K!{Td2MIFOJyBbZoC3FRi4Oui&VN?rga?wrVGhIS(vDep`*kP?xUtABbmxaP
zjiFwf2hMcrWt29`OdA$eM*lvW3$DDAqvqy*jSxVIPe5=ZiRaB-ULp8aP>;#qRkW6o
z0DJBei%rBL^^#0GMZvxq9(if66$=Ez*9bM)jX-9O2fR-PIN0<3X8Ye0BmNS&y?PEZ
zC7Y0_*UeEu2Dq%-6ypslBlxeA&Y*l6V6x=}R1xrq4ns4;rL#*(G#cC{KME?es|4mH
ziW?#jbCjfYbPBEoDLz(OPxFf&O<K)(z`}`>-}?MRL#3rh*>`rL)B6}{&5-i<1RF$r
zlTErnLA+A<x`P)}l?{7)69{>6nYq$1!)~Q+8)&^#c^{<QkiUH@lMJ19LKL{J_{n76
zu)?2$|AJdDv0ed*%+?kgI;kkR(;+*fB~5M;FuWwO1wh2ri*y2BWy+onSXx*-)znNx
zFMOY5efIWv#(@Kjlb~e{j#7LMbgkh^+j|w&#<R5?QE6$_v!^d}@y>>S13JsryADx9
z|56UsNcIJ`>h3_+iSpvT(it?S5hBCXw2B-2fBuL8UDwjCOOm1=$I05p2DiZ6kfEs<
zug|3Yi?B$p)}p!O^D2px@5Q#9zQ59WBHLatrG~h{R#HYBPsZI=FDY-FOZ+yPpYZc|
zKE>5yDt{0XKiMPj-UEVJzqd9&34+Mo>0b&RqO<9oBnd$Q_m&ZQ<%8$ti3>3Gr$$eC
zEv1|<{Pyl>UJ(G&f*uUvs6YZ@N)-Jk+F_oIFZZAu8)KGH$;lyESu$2LH8{YV5d%*G
zuq$@i>YOfM9h2-DKNQ?PDBm0OJ5I5ZlM4cA*t&t|yVp$Q{f>^cJ$-ycPcBB$3x_!r
z5}y3_N5xYC4WN3FW*BVX8WEUUcVj-4W>!`btX^Gth#vkWpG-C1t7Yvy4JG7gX+vH5
zP<%*o1ohUBea6B%!4|BZaSv=oV8<>&4@SblBym?$9Sei!ZXMk-Z0&6rpO{zz=3%a>
zu>O~kQ&pjDK}jU6@*!<bLhEh%Df7}3L~J@{A0s^(w}WaliDV<nJ_dgO&OB=!ADt<i
z^v!fR#B}A{zT<NE0oB=ZE7oe#y!3!_aAfn1&7SMk>%pD3?GY4y#@_bzT^Vg)zWPR^
z=e>6(0@DpF=!ceirk>k_@yNm8aAWKSi!hlSc_n!IH#RDYS0!hma{FKZ;f!4pclD2)
zmMtow_x`7&Mleu%wialpk9WUmwAXB~$iq(?Xt^P|>M)ny%j<T6U@SIh1F;$>e5<=(
znls79VR!yDS4UieM$hNQQq5{-lCN$@LPCsCZ!Z%Q|0D(l0U23ssi>*0J6l+V`Wpf~
zkY+f$&<gX*LmDkwKC{Gru;oQRZEgQ%=aA<C{khV5%!~6{w6V|xF+$`@hMt}=xsR`s
z&-EfN!O$T~z8F(vyx<fKARTPLyB*rG6#b2H)I<b`{%oqYt9MP3js*G(G}P1=O691Y
z0(=+0D9G@pyUrMmy0}P8OS*J#?1S(WN7EG=9ovBFmT_XV{gck^b6nE58RSeMF4nPA
zgk*;!RSu<Lx^(wahGi6vt;Ost)xAAPJ6jlD*GWLdYnPvJV14vTPdy^=Pa*N=xW8$s
z8)sxi0hmn|mX@u+&WNRN_#tC7el24P56Y&IolSZm$<0&>fw1c~ZFKi6SO3b!bB`6$
z&%GRbW~u79Zl|C^$46a&aNp4{`4EB9XKi+U>y1+1_AqscI>N*1b>6FR7j`Zm2)E;>
z@Y7oTAi}84m_&Tr+9askgxJ+D`&86T;MPmX@k?Dv4BkV5k&qlZS<5*%luyM+VKX(z
zsW15=QyyT=x`VhryK{=;&Nubrr>~-4Jy-0PQgezuz>CiF=}WrDpCYgfa=-`gBJq*^
zgA$6h3HP5dc_)r+?5D3*R%pUM*V2khTG$v>eaW4W|NVQL(5hZAeUe&!<uUO#7A{UI
zOTZqcLs;V}LZZ`Vwb7Yx(4s$HguuDHeAU9qQe>>5*1~(ml&KZRKpK}dI9K5fdg4ER
zWCHK*X%$cS5#S5qPx&RbB-F19i%aEfyJ={Dfs{J0>ghtN9R9zbn8f1^U%yy62T~#5
zf7SuP%A~ZZ0}YUrmp@ZP==;!%xyk+(W*%R(pBY^&kFP3P2V+jTgHbfSG=+uRS2Q}#
zs5%*$P7rpir^G%dD5o!O;i<kpXa|-^f8WlU+YYDe3MZZuYShGG{M>I(v2U)p>|5bz
z((z}_j-cacg4^k*WFfAGjBmt9W|_R@tFR5W9n!|qwQ0KC1;|>6*2EQ!z^o%8(kgm_
zB;BaQfkItIb%hy!+eVuW=E|LT0cLC!-v+P%OjO7HRn;FX?wkn2p}J@Vtb-G|3KhS?
z?&6Hhh93@CTsvrxBjU^*3X`!Sb5(`E6Ls}!>LXJNixocs`3*l#3knNc2{iQRHa|_4
zxv{s0Q()@1KYQ2qM_Y%6$A%%JE?<DcxPS59cQfC7_X%a209jnIjdZmLxuNUP&s6~C
z*<gNnaTZc9cI*_E_H7CstE{}7-lwFDe0y7+T~00yu6_Cag4#MF2rRVf_f|ji_Sir5
z5Rw@180aQvmaZybQ?Rsr)Lm65r)^Py-m|d+8oJ;+!YGu2X1!wgeS#n7fiFEPtpf5c
z2lE^|A}B(E3^R#IugMFsUl@jtDjfJ?;U|GrSj-%S_IbL3u5QDrPC2AO5pjm4CA9T`
zc1WD6wm`EKmq^Es5~Ot;5LII(%+WMXRr88ugesIhDdct_a-a^p>+eJPF4<%%DLVWp
zt991Y{o@)_t(eGc&BQc&i)=!DJ><_^VvVBc<!H*40l>N#;C&T}7JjF?%vtwWPg!3v
z`Zn6E)k-7c>o)3C5MyA3Lv({Q%&A8}JYCa_bKTVV?5s66`I+h8@6nKy#=^JNa|P2@
z=~tImsrPc15NHQ&Nus2*SaLr6gb3DV<^0+lBPl2l#@fcqP|()KU0lq-c?^Oy^Kl4Q
zBvqwR$BW*E9vtur<@T5e&UwI;z$C#-Vy^dJ@RL52*c%HSB~?%bVo^bgG8-htFZSrl
z8`pXQCQIxQL1)&BuH~Gf8)(=N@-EE{0eHJ(E!|7)Tjj}}Ctr2;05Esx*YWY(b#p;=
zrMIrM5&wN0De=GL55@_vk7qw^w#!m&%Ie;7)0CYgU$g5StUGt0_px(A_1*Ug6eZ^2
z@I2P+eq7fd1x^*Uw5}+bmgz;N*t(;YmX<=!k-EGt&Y{;&rCJ^o==^+8e7WkhCF1mh
z7r!F2Aro;x>^jD&QO9ygmUYB_Of4ZLVx!jhaHG<7Wu1xBWQ`dFJaqDC!p8`Gy0etN
zNjBdI{RGL=A%bcy$|x(nZZjq{jwhcXqVDvM_xm*C5)=J_ZEFfY$x<al>46i<C_{oy
z7*0&~$wbpmT#j#t;n@MAB729vO#{iky?xDQkqD>TKi-S=4OY9g^dRB~6t53~mmuko
zpTvR>Bw1b^RZs7Q>XTbqNd7WKnP|AK>A^39a!ky6|B<RWQ`Shd+<YPYVI1+=tMf~-
z*i-jdo)wXMfNC?E|MS^^zpRbd8P|4LE&=HvUxEY?&m?h#Tjt<sVKO$K$mS1yYG)8F
z2*}7@t~9f>Y0pvWiH_x&{8Ho_=qwot<~xF@`0E%D5a7$xFR0W{7S1iiA>7SytP)VL
z<$GdsCDPg5&D&vN_ex94w13R<Bp#X475n<wdo>x#Ui=;CC6Vun3l97wo4Kilx8!q+
zD}$yKx7+{lS!TD>5oo8S^HJ8Wg{d}L1ta0tt{v0~!`>{kKZP|E79zet9b&dA`jxnk
zycm8h%AytNsmN7pE37A0QuYH)S?m=3NyC8=i7+27L7dYd!oQq&OjL2CZ?2o#KyNdY
z$a4;_n8-PYpLyOtVHJkN6WRBbZYnCDlh*~moBpK4el6~l?CxT`WVk8Mz&mPu@Eb5X
zrr3^9dNb0SD(nqgL;B@|BW2e4Q%S1{B}7&d1W&$^;0|VWMzLV=TQRq>SI?LgiM-k5
z2hvaJ+=FAWuTSV1Wenebnv*8;I?dN#k|gPmOHQ_ev}rT((N$kA6K;B-ia&m=b!^Ca
zN2}-SMTp`Gw^#>dCP6ce4GV&hU4+J=lr|pCvc2*f52>hfQ>0Fp^6&pbfP)iQGsz4R
zF@JfZLggK|B+W^QBXu!ShGBeBLkpTiLpYFeR;XK}GKMo~-Igzqy1pDVa6xhISAOh+
zw(!B2L4TIK$9sH}`GzJULTy45te)4Pj|^K{h-Q`>^6^!sKO;pF-Wso>7#P`A-=bUX
zc-DnoR5AxMl{Z*_H9R>QQso>8sNQoJh|;yW9s2>8%R0%Xht$x^cxTTXj>JJd+T?|k
zs-9!9>**`X$h%#-Ga-s5&RKr~<`yCA+6iW~+^#j~@)6H@>q&2S?Ow?U!~9Wqp)_En
zkp<Q?tfgN4yF{pr4?N1Xz-?z0Km#~ICoe(F=Y3a!V*vN-8u@NPN2NG_4Sx|c&lVEg
S^BWHQym<Cfrs%1`$NvQ;N5Xvo

diff --git a/linux_basics/images/linux/commands/image24.png b/linux_basics/images/linux/commands/image24.png
index 1b15077a9e33e359f5573fd2a8b3c8f7cfe3e80d..5c8c62d940cb313a71948013382ed6882a290183 100644
GIT binary patch
literal 37213
zcmeFYRahLs_B~1<!9swL;2tb^fB?Y*B)Gd1+}#~Q0>NDe2`+>C;KAJo8{FMpZ*$K1
z$-VdKpK~7W!=3MIneMLY?&_+&*Is*7kerO@D^vnhI5@ah;$mME;NZ}Cf&E})L|~nb
z4^IRKhh}6ZEG#E3EKDY6Z)0p`X#@u+78Iw7q^8)5lcuR4Zt90DhSC)Dj@>sFQ{(xw
zg75i1C?n;Bq>$;H9p(R2hrEx+*2cCQt%lPV?x<!8ex=>7FKA?>t<@RO2a5D9X+CK>
z^>Wx8PGWncO@g=}!lj}&OT~xmz(>+BMt1*1s-(`&t`LiWdp+VuZu?Bf(@&@?C@c(K
z4)NBfZ<i2G{#;dCNoz6uQFRnI_$@qK<i}rZKTripI;7#2I^mNV;o$U<Cp2a0BMZv#
z^bxqwFjv&+QgXWJl|BiF)nZIjcG!_y!}&_Bp02CInbv;h1ItCeaH}E}+@r&m$cEd(
z`%FZJdHNHR<}>d*W@g==n}U0A`$m|D-xE`hUzkh^T(JdQUEdXv7Y$i_?jgte$&eth
z`p7W&7~iP1{u_g5+Em}|OA4KjT04mAI*LxpzfLpxHE~uUdxs5`kkkCL&jtEMUovM&
z*s<T&m3jN3l!GHlu~5osJM_lpw%&*FQz&9}`Qw$~IM!$TCj3rnP|HRRo3gcz-R$l}
zTan^Q$V$@ePr$fRo~eEBfW<}d0MdVL6Zxnd^@$u`pAHVMS}ywSt8$JG#Nd=GvFcaG
z%9I--7_&Wbc7<0~WX2)c%YV$h85k8waPrC%)@cz>J0&`>bgB?l-~M{@ZsPop^UEuQ
zV?seKnrM40B)2cYDDwUg<gerzJ9FhKQ6J@Fn4M)+Fp2V#U=;mf(CJk}dFwg}n-}Fl
znICl6a7h*6aPyK$Bcic8sPk7l#w)K444}tLKgm#S1(Cl!qq4*&BQ-=2w{Y>|yvrd$
zLGUC)QvdwiC0~Q>6NTHiFR1Cqzme}yqLAMQY`nk-4gO3%;X^c5n9fAz@U6=Bn+Uoq
znjOin=a8dX`)~1%J(^gq&)K7G8ee`Zf|M0>HAC%wQ%hvYqn}hbA~FVLbYSW~X9?Z<
z1zLJmM@sS{U9b$YY&mE0VRrc9NB0koHiR}OA*AKWx8mh@V6`qk^d8dO-cPIjp>{ky
z+d)XH50S*It5S2%>y}7HFpw~Qr153MgM&2Vcy<@pxMKg{vQJIRYtg<p!lU}Na&#_b
zMPoHgj-&jwr6_`XGBl&mK2W6jV)#CDNN8Hr+bW2$3;ml(S<E!o-g^}cwP}>1XAQrI
z6_+#E&rH9)dgUHM_=^VVM6CI^d+JI_Sz%dYb$0zmkPQ*_%lJzr!cY)1h&;hC=%pIb
z6*gwMtHPh2*9@GhoT_k2i*L^@cBmYdH2ppd`%E%UqxnAmd3boBNOy_~gClzH4{N-y
z9P;MyBu;t0WSR4smRV`n7U~bTh{$a#ijUy%?G@2C5$o2MSAJxes9oRjBH<KT4b@Co
zw1(|Jyc&Q%6-0TDK;NoS_RR7btd;5L%{0c&A9-7>J9sAF{w40ZS5vYyu88if79)XV
z$S4^UXdQUvpDkaTbiC4|cqaB9>t_c!tr&OoPqEijtS{AlW68mhuX<Fn39j+ELQ}pB
zkz4gJuJMokybEg-Wr+<S_-&j|%#CW4Mf4F%`ZG<2`j%1^vi2_~Vfqm|M+}X?v@guR
zr$*7w@MlAwNxd}Ck57Er)m5j479VV+Z*PgN5*%lstj0Kr{J0HPLz)b0Y7hE^V6x0)
z`$}{vs17bYc=%7k3gMBqEAhg2-Oj^RzAGB|)Nc~D)K^%pKTv)!w0#sp$w(>lxBX>H
zaF8q0X7MhnhjR8!)3UV`x$zqltOP91*OyqJUsfG~9XeP+hEn#_*D?BHo(j(jepIDZ
z1v-9r{5c`+E;;#5GjhI1Z%wHpR!fSB=8&3{MweWG{8HYLw&ty_1lm`zBtdnV85y%|
ztxQLSn|yaAk3s=<zhvoD+2Y@m3bKlaa=PYbX6k0wreRajri0^!BeQu<D!a{-Jjwin
zL0vgHqp?*+RjF0fvy8Kn+^N>07@2uvFSq))pl6C_9%r?)X!}vKyjB?(TKf|F-23#i
z!%pwHYq*J0d%3@IuX7_gGHpBVDmd;tLh3!|x$5KU1D#+_9_M)OS?Bs^Cui|H`;$C*
zmrCi`HhH9l%oDo#Ez*y%55kCDWyZGn@Llj-&Ru3AdCx{$7ko`3t>lc4Vg$j05gE-H
zfqK!)j_nfd1_8uUp=RA{EDlNiNw-OyiHCtnuU66CywYSXa-NRUvk46#e1RVnDiL-;
zpv~!SGr)?@KE$G9re)(f^_<g=72k$+(6F-CEaqStvHd>aWk3S@qQD)e;>1Mn$05hu
zZI1Df+$Q4<<7H#k%5&qqf%?Iu4Z)3>4U2&Ykc;{U26zTa918{+wYxv8hIVR@B2<-^
z;O?;r);0w*2($uPG2FL6H(EGtUJBK=C}f9mkGqFCRXRn4{T%!RQs-djXqi#4oT<@=
zIn|h0E>6$Ds9=m0;93uJ8^hsB=8DqtmetQL$c~9Sa_hE(QCmIE19o$3t}`f3CyrP=
z%G}!aBB@O&R70Q?m<XoGRcK^*KEddLki&A_+xm&RInrJteD(@g!~34iEK8A`a1E}V
zfqdDLv=T@OOxq@6l9bQc@p!9i)Te<9f-*-pUjiAQZ=c(&=d5cvvc14`v%IL=?mZ&f
zg!EL-oMt7|Cd`2+!Tqo<o_UWf7ao`|alcL<|E};6%0<$y!^CE4X@ZU4q4#3Toz|WG
zo%1apv4McdN8{VXzz3BF&&T2i;%7y^XTGHH-0+MD*M7==7~hNhe+cq?PqQWBnn~eH
z+5A)T=VVFvk4;_k+{|1qCIcmJ_Qz~?C4rADj>20_AHZcrWyxh}w!=qB%hIoZ{Ob7?
z_j;d~EzMVTa2J1<&-r3HUQEN#b1k3;NnS?&B)`jUtFC-iC8FVt6(M6-NyIaj#zZKK
zi^0A@UKa_zED<SBv;Ey_-KbsV%1{T}N?yldxKAo(N*V96bEa@6YdM!V4J~5<_qMdX
z*h%49I7$}vK$<OiC*{}Zu}BFCX^Hu$SsoV0mD!+Fvotd*GfwIm*<}9hIm4J<NKAzE
zXi{6cJy~jGT1qp|J%T_0U<d}6j4TJXUfaIdeLnm{u#LTqDXPUZZc9AZXQOZ+PyIn1
zTv^}Yw_<Ns`-6Ul%q@yIs)_1WT1IMUDCJ>pZLY~}t?{g}UBSyNyozd(*T>x(G@!2X
zZZ~m<$7z3p#4X!15MEwN;p1Dp*7n=4IsPX+>-TNGZGCOE<I%aqi6xxc-1jSJdH9mX
zytJtFH+IzgiXST7;@69=D-VV@1{S!Hl44l$+)B>pemd}M{v3v}r*jLKJd}2pbb^C*
z8O3x)>P9S=8-HT7ynHOl{nGG7XRNu$W;DL@O22nylIlQmlKEPRj)6~iLqkR9La*T4
z_VuBtkM6P8W5s|`aeq_1jgFuexwf5w(Ndo__)G=6*uBnuZl|8Th&{(br#Q9ZLJJ~#
z9q%;Z)aOKuEsy<b*J`p<?NQI)wf($rsjrDpnv-ef$~eY$JZ?}BWKo-FMGHH5K<dTd
ztPQX!23LUT7DeV%>h_N>viD8A4IkB-+6_f#!XtQcczB#U_st6~N=g>2>OI_EX=D{`
z&&Jejp2(65uus%aSkL#*Y1UxuDIVOeZl0yv>_yBidir|(zWBZWCoB*zP+~W-9^Z-Y
zeB~xQAU2?;-2j7=^M;*-oAsn;C@Wr+J_4Ua(>ul8bNTq;%~u+CkfHQEO{EOKW!jkM
z?ZgkoDUGh$s<d!kuZx5-U76J76fV2T$GuU9=1uf;ll0P-C8vyo%*{^W7WW7Dd?>j3
zAo?;Vpr1d15Y|;i+=Au0z6Om1w`i?uH`wysxWmFa2svTnvpm+QHvCO-9=n}3KU>b{
z(_8{=^Ug{R=1)9wFAKe0?!0UQRlCb?$uF7tfBD$nW-KjNiUy04a^v#n3NZQTA7|eb
zz{az*^|TWn6R$)!*=8!6526LmALg#+maqS`e1E8)X3NMs{dxEGaZys2pk?m5Z&lgB
z#`3Uf%B}QvA-0*_yJ463c0TE{_b~lT`u6jU-0|qK!D?QQtjo>m&8?9qm(S9B-#-Dy
z#_&g%GH_e8a37f3Pustor`mkRJm+(Q^LzXOy=;4S4F4O)xp0-c7RA@AZ03ca^)xtq
z2SpIh$%WLMK;E#vp#Wlf)Ftc+TYMZtgTvw-_Kdx}ytLXmd_+FXpJs$h&MiDlrXz1_
z_=8bG=h&&g=x`L5f0&`WcIAYj^xD<8^w#HDcW&^Oegw_Cr|82-P25;o8jcRwM}~X;
zi~#Nhu=fmD_@5E}_rA!p_izaRI1Ud77ib3e{9o6|0NbZuB(OY{`R5iPIsgs{_=g27
zuD{{`>uPk~-w6M;4;KuagA-H~78eJ$iU#&ZM%E6dHjbEv@YTQp6k9QM2RJw!s;A|d
zxB}%7Q2&&flA5EMv=q02jTMugp^d%~ldF~OQ$29JuH3+`m64+!nX8qhwF9>+-@AWY
z!42#`9cF$<_K!;(E%@H4Nz0K5+t?eCu`_*S`tXh)m5hvx*WS>WTj7hyzlsC@_}-a1
zI@)qGGrPFBFuAZX+1Q&fvv6^7F@IoXW@Tjru3&U<vv$;TWwdsn_-7^mRnHeA2LpRE
zTSqe+YqF<$_4I9=9Qoe8d%Dqo|Ni-$My_W6b0=$uf4vs)g3M26m|2)UF#mVmKvCYO
zqug?4u11z>U(Bq4HUsX#&&KibBkw;7{J&29&n^F1RN2AEUf9M8DCx-mKdt_+!vFi^
z|Fhsf?y3Gi_he!F^uKTUzs~%tBro&RtN*X2_-8x+<0#P3{HVOl|NYVUQP(l|qJZy6
zWcEc?3D^R?>>t0c!1_I~JZ*tR>h<r4h)p=S&v4>j1eIK$?ajNmzJ-!>9h0JDP@c(b
zHMs~TKNGB1`~1cI5FR%wd@P$&{xjy6U@~p@!=?bbF^@xbO21Y<lNA|fPEgr1tT!jA
zx2|kFJm(HW=sr!ugsV9kUl>u|<W2dgVSa{t_Wa*m`61)}5?o?w8-$R-Ba`{U{d=ov
z6inADgk_3<ua<v2#+ODozwTe0o5BD7Q;~h6`MflW{v+Z)P!;Ae{BshDg%tXC|8856
z`TC~9`HAvi^8W{_`rPpn(>2u9q2$-U`30Za-Whns{m)nbiK<>Re_mo)8HBw15A=xt
zzjOVcG~)lqJJ*%-3oUK!&VF!qM=1U{@9~1yg8kzILR7*AwaVUe`?Ue;?Xlb_JQn@L
z#jES<-i!SPDl)Rx>3E93S(?<m+3wD{&C#sx3YXGaNW^t#3%xrp|JCmwbr49B?mo;%
z?qI&5w2NW~O)Nv`n#yd9l7oK(VWv3clbr;UZZjRTPGi|E^;yJgyReZ%Uz^3Re(*0&
zBq|KWJ3FbiTnNV;(zu;On6&G$Rt~wcR~H;T9`4*I-A)WQ_;i}wwPn(H8HdyO99(yb
z)Y-r;@&usE#`N@-y_rf~PcN@91ET%YtK&Dv{I+6up7%s)31NS2b};XsBlC*1utbc|
z$V8Gg7im|Dt#pMM=+t@zmQ)z+%DCZo!6mzWH!WjzwIwakDsQaoa%4}xSoRN8D3_2v
zc3Uy9B;*y_SL}5rCEf$8gEM%~-ONc$ny_@ky8DbyDFxfEHa27y&tj!Pwc@R(tz<dZ
zUnzBxSiCaV`azmnTDrsppby6`*ZZ~jnFv{W>bbHYvg^}zyB&fzKB?wf?N|q>{Z7-I
z?kIORyLfJ;VuB#sZ({I@-jBl6vT01*cz99$KTxuAragXA<!XMD^E%zwAIm%Z2JyH|
zYlm$?Pc^UCV)}OYNT==|M%%j;cEMft=Y8x3nx$!}>oGgZlqDV`{8LJi6?Ws!_WQF=
zr=L{*+S`%2KN-k{Rni05bUI~JE>GLQj&S1sMwQ!e?e&PH)3weP>7N_8MTzhZn|Dm4
zam@7fQKJ=GtvVZ)KiA65?I!x~+{Ux#0(CfU=j8pe?_Nj*;6+LlbQwIRNn;6k^Y)wN
zC~l^)8g!*#!e9f$6r+8DhsDt>2JU$TBqjrijM@#C*re&Lzw;|2>{>lS4EqxQKrHT9
zMC;GD=w;u1O5E71EYn?kJ>6_oy*3orZYhhlKV&?tPB!mx_R{j(E359>yZQJ*dgb4r
z65Jw?Fi4_ioj`r(7Mw&nX3?m2J0A>EJ_-JDo<CBna^-^9K4jVrtceSVpGVNc_Od`m
z{hn&lOj>noM~#+W{uVR%Z2?}C<tEJS2S1Bn_tYv0*9wx^L|IAQJ*+HuSfAAR?mACT
zVH3=3dBNqiQREs|KqvcP<yX~m(}3m5`x`zYsg3JstH~$CaOlg@s5koY_2Baw8)d)l
zxkHtua+~ynu|{=a5Lq=kn|oX_9WJvDM=K)woeTlkMWfM`gn9{bio3SDquaaQuR35=
z^w&`3^BE4=5nfZbz+8G->+0_7S}T~A<FEJ5MZb*)*i43ck&Frx^}0&5xg`>8V3G`A
zubRVYMs^GK*gSq&Vx22(6kc@FN!_tr>D4l?a!&|rU&o;5!<3aP5l2-^wj}Ntdm}(3
zj~to0S7Oz-Vj#FnZVccLUVPbY>W`<TvRmz9=lmKM&`lk-+k3g_5<?mECh5{!hn+{I
z_#sCN;t8FeEU|jIJ)7fCDG@s|XELl~V>X>1r}Z*}YiuqG`>)a7FAl(`XAR0da$-m<
z9iPw9d!A(sB(lh_bOjlteVaOHI#Cb1F-|O3DIPW~GIt9#s2)y%yvz~qK3Lh^wE#@U
zNy&4P)y@c-V_se&L=qQkU5cRM@2aJQu4wxNu-cO7Z1I@Hs^=uqs46<-OBn>{PW>5@
zXbImuN;E6QUbyiM?#ojhZLKRyP(N~uDCA1%E!;lbBjs58<JjLXelR%SQ8qm5@r&kl
zV|7UHlvEMhwDIUK)~p@;4}R!8*>n}>eKi^ql7kJD2aPHzjoNz=&ve89{Fk^)Wc>+4
zuU#&Gdj+5qQc#FIFaSjPhTSCnp~TYYP14@fa0)kBZ!{G<XN&dHD6gM?oFYvV)lX&H
zkk%{&N{*lEOCx?(Pow>`E+5NPDyB<OrBs7#TWPn@NWI*?7**GWtv&SmWIY~I>4Pgf
zJQ1&LxK}66>e(Ut<n$Z}>HpqEG`#>^#Njc<WggAZm3v1Ci$UMd%0No*yQ>Wp?;E#F
zG`vq*clYq^q4k|dTg#~;nkhzkDpuURch@27*QcBD(i}c0ytB5A7fA3CrPAGg8OUFt
ztyy3&cn{Vf&uY?V%0HjoJ8rb}`?dYyf|r42+ZPnW-Q2ina$#<VbSCYVgrv%iz8D(*
z4UYeaah3&oXV5+fmB;CTYTRTXesef2iKfZ*A)itzvGq>tAWL?w)vx_zrSqi&=p5Bg
z)FNz37kKd-XCnNH&q}X&cW7pt98%YMqNMdZe(CWpU3ww*+9*Cmc1MtcF!q{kDh+$1
zd++YP7K>Dv^>eswke<n~wHUtm>o_Vir<I4;HFW<*;U}{YiE4{4-pPqk&!T9Yjh2@7
z+E?FIUl`0Y0FUX>{pYiNC-{ivbKd%&3}j?WR?$CpA?PI2bogx9oCsgiJyk?&tYJA_
z+*|lEsYmf|dt-v`c!n!C-ZRu%&*Pxz>9oi!jdp$=EX9P6wL!%s*{s0`9+D#;Et$U!
zju?hnM1^d%W`!g-Os+oU9vq$=KjtW-ool*XBeull6S-=&SeL)0OVmB{P+@*WP#p~g
zbN)(CPv@F<K2W2F*c)>$ngPQua<yBw&?ivXRWC`j;`?7m5~E+2Qqg%QhhLMGWKfdS
zYI)Iak{|}KWsdop^hC<o7g8739oTg;8cW$Zgit*U-*sLVl+O7a$ua3PQsOde%V*Sb
zzKqHShAXSd(EFe_G|`E49V<Ho<H)&NN1Cl6aL|ueS|q%ll&U3KaW8k0!!_ztP<VHI
zrJhilm4<8(F?~%(Ft%hGpAYqLx`66tGj$-wBV%)OvmQZaqBRSZ=!Io8lQzMztqU%3
zW+-<5V4bMfqj#bF-px6o$n-{(HJJxn;fHxpB~Pht?H5$sK4$K>`3ascB>Je>OD30p
zBP?iADt4iX_=<TL^`z*M2%wrPRkp;l`HAw80E3*Pi$Z2^dL_3@I9>D6<$TA<fH&=i
z-;1%*(OhPIAWAtbC~%7<czq*x<ABY;lXMFLPCFdy?6-Ma7P{jnx*yGGfn#vc6|zZQ
z!c^ktpnARgt+J)1MXSY5Q6}XR6$bQh*qwhm!o}5RD3PV<*t@LiCY8@a=j_w$qGB{<
zP}pYqkL5G|O=hiF-%Y_~?fxce$uy-gSNFopun=Cw!$hC(^bZT{@rT8a=HMcA)(~%1
z^`g0nL#<)uc8MljoA=;V8kv4!q)Q_&rd_A|=AJmVe;}o~qNen#EjQAuijmtb5n*D9
za6-=T>+p#~CLaNx>e2|UI$QCf^cK^(2)9f*m3MSUiL-2Rs1h`)`(?+S+D)YAEfmZ;
z%^w=?Cz>Mg`P9y)HM-81{!l11SSv!j_eFlW2>2{G(yl7^C4$}aSV>i4+C?8Yy8hUY
z)K`auxg@6{4MV3}REvsIcwGLRu=~9Jd+x(64<TZcfC|;=SA$gxg@deUYO6s&=ytZ8
z-`&c(vI3pzjaW3LIHlc62a6DGJwz_>7Zdns`GD`%XnQOUfZan==7f?l)YWfkwd5N6
zVzElcsJ<dGI30Ckd5`Mlnuv%E%9iLfP$Que#RI6X;P<-GOr05MkX;wsbs&Z&;dKf4
zetolxJ!~WzwSCKC%eV}I&Xmn%LAQ|BvPnx`k4JL)eU;x}Do^0(N0l6j7qmAz<l@O6
zgF2M_Nc!(Bz%;UHJyBVYJ$-Q&owu#zMjORK%ELlDRzG|$yU%oU%%P|v2Fd7Vxx<O7
zBr`wpIg51ldBNykcaAhmcn|vxh?mgx+?1DCTn<vqdF{oEnfVhggWtwJM_D19!XU!%
z;c~qCH2|trQz_Ol8K_QRPLT}W`K;jwf8DX`kJU9N9nVmZ+)y6&A<vtG&&A2s89*rN
zHJ;U$GZpQL2IRaV`JgQOB^Hw*O9i>=HRTc|onUOncfHCUc_7sDnIUabF6X_vBCTqf
z3lGw0zMV_!`Al58A<c&hpGTc&PFWd)@GZs13mBSuwQ<wytIB32f5hq>_v$_@%`k|L
zqiwC~;j^wf&BMGYLe4^qf!k?1%Uh)vXfV%t^@I5)n-&l%p>cJ&M3j&wWJc|pS6<~Y
zMefw8X%7eq2TSioKJZTW?s06nbd_b?e;HOZkRQJb^lJ~hj6zr3xl|!JPb*L<j*exJ
zm%^fwFxBBXx?iDiIha#6s8R_)yB}S4nAIM;!dvj`9!O#nFVULG{&Jidt@whQPx(k*
z0F2JDi`j6fD6mQ#!{vZT;c5*LHGz*<?Fx@fW-kOEnP^dzX>B#J+AlB-)O~w!JV!@H
z`?}+zPFvb%FZe=8{jWnCxMv}stI&C!7wtqhQi2Kmy6=Esb~V5$dq|Z%OoXW)F5v8P
zy8I2R=bCJV@nDx6g6%~&t~_~dGCO}1;<*K(9_Q_$@U5rP3*`Rz+iB{29EByjjUqR?
z_h-#j<}=gCF5ABq#6r+9r4v7W6$vGvcR5^mS*<R|8Om;@p<7s3mSr963C;BPL_#Nt
z*QJ(<qN1ZL)MTaTAItEvxGucdEJPWVPUH1{2Q8e!A%zl{G@%iXO(A1KfLJy8^)9C+
zm27$;PCaHkCPIYIK-6Ujc2xWz)K!V86u!jo&qvX`(Nz|+laB_x*7NnJeVFD8jgYTM
z3p*1fW&^a6uEV2{^BTZy^=`4O8pWZWZFeb{2$f831{eBuE93-A#&n&pt(s$pjU=A4
zacN9BsMe;-q<mDyVb&p!NdMxgxSbo;Pvz6hD?*sn+^z02lwdu7i?^(~>!AbDZ+^WL
zTCh=|<7j&1&#D|+KIx~rYqWfaFOsj>^2V{<U;&=$JNwIchU;cjkx6-#xQ_Pr_8Z&4
z-PxU<D1)v>?J8FY@5CRyYQ}7;K-4rQ?X$dWsid~K9O;Ik%m_xUeBUa|Q87A|_a+~C
zl6gL<jUL7`TX05!IBmGDIIeP!P<eM;#MH6BJ)XrBDioW4#g3P?L=^U4{CdPV^qd65
zY4P4^cak-k!)c_-`hG)%qUe0a{qi7lj{oELoBF0&X_!o**=6oIQxV1AQk9=S;sUYK
z3;2kyAvp0iJhcfD*!?eF7HpM8qGPCYg48$846vhjXTU8|s(LjE&Kd9e`6qn@-fIih
zJ8u7mcck*y7DWnhyxRI{{%m~8UYRlUqQBaLlT!Cj^vQrgJ}paj>*^q3?HUiZ_o%d4
zDQfHX?$)l$?x-sDBZoG88q&1x?3I?r{G%<jFP>f%J#h0(^)d%Rwf@zpx7*cGMg;*`
zrSUMv@!duDk4uyJq5_2c*_#a1hhkXS*Lj!&sDDSKOAAs#IGl~}r9pW-7o9So>c?Bx
z#===P5645pA5%ov)9JDiqNRt3J=x;por{Z$4;H7D&5w`wrNv6}VcGQsBkm|x2Rn#E
z&G!L)6Wf*Ft6ylOw~x9jq4CDcG5Yx<c{5+1?jC(RT8wWoCk-p8;UOTL-<zpj#2h8p
z*IoSeYHui!e-xQPv#qoKYq`q4i2Y?aD)nQ7YsYCMAJ3Fz^2f9t7qc0<G41=bJegZI
zwa+e_7wm;zA8ch7o4rIO;!7wwt)Kr~3C8u2MMS@nspi>WOV;!s!mGnchGvOI7`9@x
zhq+{0N1&OZ&>rPS9G+MqK@Sr9T@!vdHX3;tBJ=JX*;7IBW?OVIdL#K$+qn!Oi;)l9
zZ(OB7lZvRgOy7RwIC-pYFv7wDWOf~lRf|&~N|lC1YSx*LP1Ci*nuF>ByV`1^e@z*f
zG69r9G!ltZ`}73u>KCNUB7Z;b=_)6f48-BK<Tak1O9VZ4b{1^1=yF_;yc7dmfKyCJ
z$BuVmIh?>;d&lY>yH@>@j9*a@{DwxR_xMeovj5y0w-Ww_h6cin?(9M;2GMZKOyMx@
z>~+f}yS+NyC)$WgyZ+-w(+=GH^(pT9SPp$A3~=?#c9~x`E^mg;E8jA#P}TDdc#8v`
zY|FULbLU!H>$`$7w^XIaFh8`+S<~?sQ#k4)r9_HYaQ?S&{;pXGq;7t&ylf)|kux2c
zxetc?a%EQQD)Srf7`ixmF?R|yY}35%)wZ9KU9NR?_4#lb9OBW_HP{CM=Ed|XjVW_2
zm#xcLd16so)DNs0)#q^)D1qB7Gvx-gbB#_g<gLyyLeUD7VY=&+jq(}U+7;zO4aK3<
zhTmNjvAq^9=lM9UQh@s(Naj)xZdUD~-rL&Tr17{U{y=baHV4gU`x1mDk@5YS>T9qe
z#~*g$4`9XGq`m2CPPO-w;hV+Yd(g_tDvK#0-U%K-<|(L6Rh6m{B*)t({)u~)O6L~D
z0xzbXR~T%P6iog8Dg8;|@xrNJufEDGR2zeY`yG3;>9@wsGej$Pui59c4-Xz3dZJc2
z?eRB!dHxIBatUHh0;q+?TKDMH=)vaTn^&5BHTw-=mr3V*>XXDTNPK_@ROzv<VvDR|
z-IH6(Q>Ll5L<>TPq4XXC_|6@YnB>FXkGx0uSh?vw7v*SMi;`ox;#Q~4<Ci4}Ih;yY
zcRSU)E14J2!>$hV@NJW-A8OS>0L~5}{x<-iALnbpss$lLuqfG<iq^`AWF=C4%R<sb
z>WpX7rpodrqDf%ZW$_QirjL!8ECz`|Fq$mCGkPiA!ej-c<@Q6FiH7371ik6IDyLB1
z+NWUa$#Q7~7)=1wsKhhsQdmq{%Po_EodvPOdt+(+N9PhaZJ2svS(>hR&*NsDlBf4J
z^OxlVqaBfZu{at%4x26K>xC!5i0ynHmy(v)dpC6&RA$h^Aj)5)i;X74ZS+}fpumVb
zVg|UWas$HalBrq|%yE0)=Et0VmA)(8+@7GAya5A+90}T2J5%w@fS9MkXwY&Ykl(s9
zn0>6#NR)!ejBB{zY)XDf9!cEk(<m#+<%FvxteM`H_hOGT86T`vKvt~D5%mM*P2%nL
zalYI(+svVtn9lR*Ax5u~p~WgihuW-;pf@ne#vFK+*{g1r7Cb=~$x~B^z0O#nkpZo4
zNs;uMwcq4fp<efGBk;IT_z0`nk3gvqSJ&qOi0tts{@C<WJ<M->5)6DuIW>9C4|4%*
zl5>&3t~C7#EdAMjF!|M3;Xdb%i^r5FP2$mVl|r$`*VXw9|3vputMqHs*pEWV@sjAo
zW3mM7MHJlA=1p5mdO>5@VRFTVw(QLkSwe0g4hFW3tc4FI2SVFp=N=SN`2w{H4rR4B
zsWf7kXF7E*kA6j35Ebf&n+77Tn+W_XsVG*6XHJUwR0%nk@&_K{f!_h6)w>)LFz3ZW
zmu<#Cm2mh7ZeK7$LOh}j@zDarBBDsUR=g2v^SLF&$+p@s=yH(jP8YCk23sGoIiQCo
z{fC-7{BmJ6APy_G@1Z`VJWPS;r0fg#_0L$nZmLf1U9_pfOyoXCw`Qpr2>!K6{e}6@
z&g*u%5zh|B$tQ~q<id5_vYr0L0`N)0=m?=R6(&*ZlA96|*xxD{xJOhf9H}5)o8j%Y
zvX!~746n)_j3Y%!FSm{jl76?Tv<F1I1_HSL0--z2d^ztRT;{abv6Vlj&xU~4pQM4<
z9!C#=TGSjpX8n;0X-5isZ04q4i`4aFeHiP0Mf6cYB#eY+I34LHbEV-RB{+UKVXZeN
zDT9Q#@y2bA5}*4_badY)Jf7RB`NMbPw6ubORmWZR`+#CY=*~G^2kz2V+54tJd4OZ{
zW74T-c!|RhmEQe8=c4p&0_)58ZRoY#uL-bbKeZCK;dBJ6`9$5fE{MZsELDhc0gf~u
zwV&#UL9TyzyT~17IDDu(k&|Q|y0&_oI=7)pb6cLsdl@8#RP{`SB^HN`(37d}0-+*&
z{cO7sp5v(kR>x^Px3jG%Aj(_`kqui)uc`QvaXx3YP~p#@Su=}F!p(ccXfx50I!LIB
z7Zww*h)b`dBa_B$P?K$~29N?c116{5<$Jer<~drm-Z8wVKE{?eYV7aBZ{6xf4GTEW
z_Siq?O5F>m-SD!*Po8edys<KNGqz$kJ8{G>Tu{VNIvO2S$m*gQ18;Ihb19D4%@$Up
z1~TbXv@L5nzICnQueBylWpN0Xdaw!@^ssnn+*YWOqCMq2(M9|R4=WIXPp1r4szM>&
z_0Wa5ryi3uIY~Z(Fz;NdjZP(?b;<pX)JLX#H~$9sb4C5K+q(J-;nMJ;H(?T=hj91S
zo9X18D^7=T`qAA7?>Vsou#j6kS!{E>^&4=OkkD}23&bBp+CGV>%r&NyBWU0)ujZop
zFOx;EZ#6_3;UT!g!ZkM9R&VOY7NtQCd5$-^c{2<qGXh0E!Y_Gs6v9jmlup-TX?;F5
z%5XzJ*4SK%fXar71U4lD!{;s2eAa%EW{a=7bNJEC%c*4<dtrCH<SQzGtvpPX7ti$M
zrXL<Hx8w+|4|l4vt2A3kn)-G3tCkQ50;CMLm@&Z3Cx|!$wDobZ2IuC0`g>xY^GJXa
zp55a&pCB`nD+MT{bz|$rIy>-3(>V<iK1ZUJaUOKM5lM||Q-*Q_q-r4!^Er|DVl}IA
zBJ;F~KN3o)yyyg1savgfK<Z^bkjLfVHSzOCQX${rlOF8`$4Hq+3z~xiJ4Vpj*5aes
zxok7*tomTsa-;p(k&HNqBMjftYO=A3L4L51`+e#syLU4g8=)pUN?qDpm+{sbRgL40
z(~#5JrUAt6G(MjGDJ#uHtAsf4q*8I|LSZ$_=bOtzv&N~pdH>`OF8d2KPP^<0JT6LL
zqxT`!giw`ZW#o~HE#vlK{!$ulC5x6HIIfM^LVparli#zM3}TaFcU0-TQ(QV8mj(Cb
zzeZ5r`c&W+5<w~u^$a1fKNR0V$f}&`$TYhA?@7Sd3`a6ZBzda8s7fAd`ez#I8z5r7
z5^M)`IQIEg@u<Q&mv-d>ABFh40rZ1TI#-fB{ymw%iC%rip0t0NqMNA3Ufr6(<Dy99
zgEUeIL%%Jwkkhnh>s#?pQZFTyjXSPRWODV3Ca>G@*o(q<Qzg2!W?EIAr134}FG!pm
z=70am3Z>?`*CJ<BWqvdmw}n_<o14v570)2&Meuly!AxDMQiM5CCgsWB&l6p~Tl#5K
z+1^5{Kp8U#QW4uxq8-GHx5gSsz4U^(?~CLQq08d+at6G0^*q}uH-CFKiiaVpC)#h2
z%H!}v6<J=tr&lS7GahWILGkXCcW{}ysD4TYj4MUhK_e^*j%NM7IgIcoY4j$uS6XVd
zC}C0lvaz1bm=+Wk;UfMVCgIoZk5nVkg(fKDe!yXNQ4K(eN#k%3o(g?$3{4!A9=C8q
zcwP(dDs$YScI$S1?JTMCPurkMU^5iDuc;bjeO6V)6s|m2=nr+>woUai$U-;VkUON|
ztZgORgMz1Wq#)+@ry}3BY-cA>3ZsrFuw%oFe*8Y&U?z7bZQ7e}609)l*B_#_f>tPt
zjvoF{eF1XXvbnB+L~9e<KxD0yGabKjdEdp(h?w~SamLkJPy`x2hlaP}V7U9dcaW4{
z_gA06*s+{o(BzE{?nAXw^Zv;^Jwhg+A`y)r{`=I1Jp7^K5{toiIJ=kRM~NH{l1U2u
z>iI)Xs*CZdQ~pB!83%XqEesk}k*|&Iot)T*J%I!Tt$bl-JI5CXn(9pdaBha}4IIZq
z?kxZYA!X4Hx-aU|JiM=Nz8XM#wtZ+km`tPVvPWR4yStjA?ef-jLNKdf+_-RQ@G?_a
zGJ_F!h&T!W*U1e<>Xm{!9Hx2!e;n%$8c~-4z&>H`qRuXgLwl2PbrV2j%r2X+k}G}x
zwa`avCYQXzIW@P!c)v@o-EDI77u_!4N!@t?J`P9%pS$JE^uD>JGP1{RyT5d)mSGRy
znG_)fAE_?4y)fKf5unm({LR5Puc8KII=&)l3u~Uu%~u-~KV?7Wta``d#_FYM0-v!t
z(17EBOw&YhxG2V98Op8>#9sPm7(LJY$S1qDh?8p*Qn1K?TCOkpb7tM<E<MRS$hfA~
zsNeR<dVk`d`g6h>F-7d}O{EK}PxKVCxwm;$RkQ1{(9Ibk!=m^20+BA?WuNMm5;_U5
ze&ZBJewoD|c(<^{Oz*`e-4zOm-D>Wr?{<?<W%jX@)xtH<#gyP0>yMitEU|H|9@ibY
z(v|8V7Zr}%bl8b!m0V*0@?6|)d=Zi(IdvFjQpvTnh=HJNV3LF(ku;cldqEnj(}eWP
z8^<JG7^wzdP_Mtaa+4wQfbWLOt8u;VqnSc~A@)nkCiC8E2A6{c?0cQl3;v>o{frhD
z6kd&qtB}7=RJ>+<vQfhAXJ^QfR=SkcYc)g%H-Lj}xvyzD+Zmmq{*@2Hb^5UX(>&J`
zI=1a&WeM-;ap@+xPN)0)CEfw7a?}(W@|xm3z6N9mx58pdXY^S*r#8_G64_LKdQ#O#
zg_2#BT2-ypy>0*Kk7ih>931%{;?VciG>}g>2B`=q8LLq|w~a;TkG2jsZAfruC3aP$
z4L?6F7>kJ?@<_4kqZ4w7r15#+%x1_R@QC_#j|2H>lk};${)EzI`+*2j7)3$R><3P(
zS!$;p&RP^+=dF>x#0KsW6ZL~R2tC_l%Hc#}l?6=eg_?i(IiN@3zpe^LmE^BUVVY<G
z^0A3LF6ipzmT8nSDLtNPVW1j`_AaY6Ks~ZiGoq5rZbf!~d#<#sfZ@P7|EmDTP0Ws&
z%+u5v=k4Vo){hg`InVdO(eq-@tw8SD0phhAZn;>mQ7y3XVZp#1T}hrX{pIHHhwmZr
zE<?ZM4U8tX>`uP03+=S(2B2++;&it}5Oa2Ew_Mt<_mv1$Ra&)WfNCu{XLSx2Ae$58
zAFZ`iZ!Y)E0vOK)1tRXDWfkd~z$nUtdVqD><Lys6%+ArB=ZHXTCeFP{Y@nG$aK!cP
z;i^oF=mMZ6Q10&<Q@p>`BgT2O7-ikQvpQ6*;W5XBkI?Y@`$XTv%V+Qr8TpS1e%-oV
z5z*Yb(2w5*GUhVJb+sEEzoKFvM{hbm<G-~{L_f(EOC7Y7bG(5k-`jeBl;8eCI3V1)
zQ1IkT+y)dmo;wK3o=gZEY&96qJvW+;^fqotX%5q+k&a7iLi|L`O1G*ku`!fNXQ$uI
zk*?p_S3OoI4*ND}vw<$}*eSncmyHT~MSPQ`IPAW+Wqo`mWi-^!sOc=WUoUM1ACV>c
zD*EQ!9QIsn@yG5-99X2XppyLaEf=3~t*Y}OJwHFcjXfbpcbdW}>(`Ut0n_*Z<7&-!
zLy*A-A{M?L`R#3m&stY1t#*7_z?L)RBJjy84Pa6Giv*}=p2Hm3%p9OvSFODxhVN^)
zCREdX9?C=U`8v?B_*MRNwjIVrCG7aXI7(w<X%+D{M+YMYl}=ZSl45eyM%#?v9|16^
zCodg}?Q?ED+hF03I)Ql5;@XS4JyH(ZavpJavglnB^ct|(dLsim&O3Xs{yn}t5=|A-
z8*283O1&a`!=YGtc`Lq{JJ`z<uqbw0M=U4f!*ABhWBzEKzSC24)AZ}!9;X&tmsnTE
z<lRc0%+)p-m2PR4)t&d0Tw+1<?<)CgS9GKTWZ47St^wPCd(SS}7f)-1*e?W;&TAf9
z&SRKCeev>{4&*FCdZ}-CSavLXn7G8R`+~TkkCbh*H^kRhb;0APb=4W$)zT1=BoKX{
zhB2AF%B*s)7~Y^oDiNz_kTpBR%{>?A&<msl{`O5cbwM_;tk37H;OeHCo9OMB8^x+K
zF#KgwJ^BD__I>b`=p`w`QJwM&66Mw0;h5hameVV}V}h~yKO$I#550-E!XV*~e#%!O
zV0$_k2hsV7&JW~+u8Ke(ZZYtvSG|+=l-^5gX3M0GnaWpL3-VnIqZC{mC)i(>I1C03
zB?i>Uc7<*m%_n~~{-Dm;zQL@d!4HtS0r`>o-=80cwKo)uY*%epuI)NAuK5tdk`IXm
zpdA_~{=p(26p*lDsKqV!1eOAqS-snAy5@Gq^BSrY7^9zL7sY5m#Ml*<UX;v`o(L1t
z939LCaWb(HNHE^sJKSZDzH>XxH3wB|02VZ?bx8;t53Sp!4Tj2FqQx&8j7_h9N_bc1
z>BQx_m9KcH4IiNr<EQ-hiWs@4@of7vo;yQ~gRDtHUsD9Q1tMV(M~RlsFy(5F5fpT_
z`ECvmo^HoU;)WM~R)BYaIh;3{)N8G5?wVM8#9)iQim+ij$|pS0s4}Hw(bgV>p*bwE
zgrV{tRKMaS;c}PaFFaDO3jhrehPTH3LgpQMa0phq$}f_he##J>EG-L<>eZDoaTmcV
z&L2~(`9kUZx&iB&-)is%yDH2e8tqCiF;tnH-$di;Ot3&PPr<KSS^teIud`O6aw)N%
zpXhx!x4Uazw)CzUzv#JaOLRQlZ?yt_F6bG)B)n1`Bv#dk%kD1Lus>cso-v66z_*;2
zHn-;hfmE*8&G95#Gq~Mk-|ff2&i8uQgLpn_tD4Oh7DzAIjVwj6I&0y<N6-<~yZKu!
z$p;EMHLNw@xK22{12TszD=YeH{5~Y#KHljxy7qp=urk_>R|fKTBgcR?jU`#DRJY;v
zte$7!U%O`H#&SUaEr<Nr-@1BbN0DQl%4`WALCoWn;B|}M=xn-o5@(T#UgNgX5^)gy
zF)eL}TM%@L%Rq(8q=Q~#GeR;{`qO2p-1~m^WHn!KWn;s5VIp?%F|uU-<`YycAA?S}
zIrNUpp#snV!g#x*bLevbz_L<0ySb1<^$swjP}hl4Rm~Uk-@CFcF8M1QHg&K)D__lV
z8{EpV^X@=yPdZ<kI41xItVp{dAe7+P-<%r_?P@y^#BWgJcsMh>ZEG@9kz;f-ffD^e
zPtMfs$&3TYZB%gdmj)1p(sMZ&vmrRw7gUJHxOX)GveN*q7H>s~gaSbAvA|(%b~_2B
zi%e*r^O?Vq&IFP4C(vgRFdOv0WS@MYB)QfpsTz7ISFDlV`%4djQa<y?2E||syQ=%y
z-r<>pdjZ@vK(<@9Wq?&m6F96|P;k)0c3wr?D*N(C#!GFqkjkdtNQ|zmuSI*8w&;%*
zXY|Jp#W5tYC3nAZ^?X5~``78BR?RoAKyE#agt>z~z^ZllT|(Dt&Ol*`RFS=ReCa?7
z0NkSh;GT>y$o%eGj$&TTiPvF?F`1Zd#pNY}a@GuGp1<zU+{T7<f6nKJM&q)tq~paN
zy4Ox)N)(Q316)Ednnr{Opyd)6ckqkag9$mU;+R{^R~*&K@241ZhA-zWg<=HI2*|U1
zh-|9*e_nXX?>7LWt_EPg2j`jS>Wt^LK52QA+=5Z7n^HGMM&`04mRNugv%(lEB%bmq
z>iSdtXqk?G{K-gfnLb!WIy=H#;Oyw=!!V2I+Ayp6*{3H(t@X>pxa-qg$r;w1fyI&J
zYQjz+FTO#fR<2)MWp)|1m8;$qO2VhM<E=b?_i!-pVZV8x4Y0rdqi8o<qrec{6NY4b
zk9O~kXACJ)<B+WuqGsdYeT3C`<$biA5CL$Th4o9ToUf-Mg|rnR(pkmM1O*QsmQyK&
zP=tuv3(HtQa|}9k@_95-$Tr1?Tm=JKE%UzpyTPf<#UK={4o)r<-sHFchCK4q%f@lP
zZvIYvF$Uc3@8T<U67fIE*V?j7!d>Jv1NSfE6fqt^tp>f(hy7!nmC9E%TQ?2P`*C!n
zKD5m6@IsB7W!}f9vh7NQiwPWm`T&@h(5Gx3Y(42QP6d2DmU;cYP6tutrT+OwsAM5_
ziQ#sz%;IC{_M03HXmDmbfBbqS!MWjS{C?joL`AUQF6!Rq%X5-NpGQ9R-|)7_t4Qp)
z2lKm(vuDSvG|Mt?mEj{;47y?sd=BGdX`?~Z38h+b_M~3#IIZXG3-z4FN(BJGtfFj{
zTt471Q81-7S=hQ<X+qut8%SLo>jUrxz$n#YaawDwhH_8mBRDWI`7tj&dF~X5Pf)te
zw<Tpx#fJyjC-G>?^72PXDDUlB?;DCbd|~L|lSaHy2~1UM{enZt91Mgm;<Ht08^iz`
zCrzhPLJlMmoceYWj<d46HlbmN;{D<TAI+)i*GHRs*$a_KIBm3;0I`t#Vby1!ea#|Q
zw|3>yz$#a_xLA}`(U3e7IyQ!aOR6KhXgt_oYh9MC{_!y#!oDYu6a9I0*-T$4%XLF-
z3*!^OMWG_ZI`OkvCL~_taW+hN%1rZu02#ZdT66u@=M`9e`4jNV{OL3OJlByd*R3DD
z;@k2Vr*#b4VQW?wm%Ab0c2><09nbD}N2YezcXjdAq|(V#Ej3z{qN%0zxdnV4wCva2
zbgdW0GT0nWdCIX~`-u|Ez#2UK4f|sM5WV4Z0V_W$05TBI^~6S6M<qbQwK>;hk!m;`
z4@E=Vfxxn7rYbzI&5tiHG2-57*H=~8ck+TDk9TgqjZZot0U!CMckirEymMv=0x|YY
z#?wq8ZucHzdJUB(!=THz^v(=3fD~|aD<2{JA_Seh#(G>Fm=<8;U2U~X*Bir=7p5Gd
zLTuC<9an0JE)5WJ44SN(tj1C{L*iD-jT55wH)rbSX_eK%JAU0SPV+(%RB40OH;iwp
zt)|p*?y8kM({GYtMXIRSeaym$mr?J2z67S}#~%VADdoQrk}fl179&K=yUay#<$c$<
zZzJR>+9W+)#RQbr;rJt?-H+9#Nse37gWDHEUQ+Q4NukC~gq${r7)J$VqYr$9VO~Z4
zqTRA7(L;+D@%u2BByuXRk}{^(uU#kh?HM&cDp)1548mXyhrXWb4dru9F3eYKj|~Z6
z^WnXzyud26`H78bK(y3LlMZEpZ4JaUBhWvUl@bm-i^-MVnR#xOz@$mF=y*`@J=<j>
zaT;+zC=;3?o}MSWzA>ozN63tv_)Q#qgx9TO!enuBp>fBjja64b>GPBr1ZV=`yZvnl
ztWwm(Y$`WtrZ8W&%;oS|fpSBXwA=`<-KP@6;WT9xrgR!WYWvC=d%jhzX0F><Gs`G&
z2EexfcTvcN^|r6llT&}<$sW79=|hokv=5oOY@mSjq5?$p$ySYk!<w-k%AW0;XKlSd
zx$o0g2<ZsHb=+$P<i^ga)b^Ugq778Q`12uP`(h5g(VBa-nwyBI)#bDCf||N1vm4AJ
zL0-P?p;@F~#NdBVTds@;^(H?uWo|S1Yp99L3_#7OPe+N&x+LmnQ&Qr_Q2u;jK0XhO
z$e%A0dd>;a;X@yXVgVN-4v1SQfn<?Fd0U|U($edvnHPZ8HRPK^ffdYn?DF=2ZVL;x
z(cm8#-m^rWW!N52OkOhxsjI^)Hp5p^%xrmNn<;mwmHxm8fEezMTK7(P&;`f-#BBqq
z;j(W38jwx>1MhrraG+42z=h9lA4w@rH1T|A^>hMRu6VJGYYv2LRYtKT{N)A7=~^$X
zgYl#FIDdY3w(esFtIfkZNT!hLMX@^$JSVpAxU@I^Se~L^9jm<*d-4On(<Hs-9YeQh
zPOCxi+g|1N9jV?p`UYu-Wna<&LK$ub(??L)E{Q6?g5aO!_8Un$D4Ycfoq+P65uD-&
z8UU%pnC#TzMTMXflJZw+kGbZeJFCyXg>8dKPL}=%gANHkUP&O{AElcA47I7$_8ECq
zY%yh3<rcn13&?pP<CMA!bD6@S?xPOoPtet6;T^<v+rDhEsD@5=s2_Q0$D^{wJc|HB
zwMcE(R_E(^t3j5CQ|Jd5eXxt>=g+=pTQjm71NV{#yXA7uv(2WXZDT4gOaLXzyXlr^
zh!r;i@DVsD4}U#R@3ZUE<dY6SA9@8)DzVO1AlOIDouxim0omBphKrsgw#{__Du_hV
zh(~v1A~11xtR!*AnP1&V1-Cq=jaJm^cM?Dkpc?RL0vH^5j;)qEvBwJ45-->sjb^r!
zQD34fWOO54l0M0>PnPt)nTiKeoI9-))UY#`Mk~}i+GWueOH^x|?5WF5(*YghMhE6I
zuh6_Z56w-L;t3-ZP@lA!e#fcw=?st^JVgbg<ZQ(G<6(9|SX5QKg~u+VD@G!w1B=6p
z#<vY8<eBghvtZRyn;fqO9FA8%+@-veK6IL*^8u4S2;M+j3vl>s&V5kcP(~^hC`yD4
zgC%>TJ1MPGJ^|u0M6<b~RB2ec9RTc2NL}Zu%s^5}H-YWnK<IBDPKU)uFR|m-C&X>U
zqj;0tdH|+G>Agel)eT^18R!9j8Utuo<y!c<r%a(0<(`+?szId8Y3rD)-qg}*xk5gm
z(AI-gm`i7S`+Q;p#9=-1V4eqms`mNSnO}c=X*7owPhi14v~fvOZKe|NLjB2Kn}qeJ
zQ;NTW(JM@kQOh5tsZ?9q2MOZ=xn&KxIPnpKLe-Prlw8fi;B?~^f=?}qzjv+so;Qe9
zc(Q2Tv<i2JYrW)qcrWzIlz#relo$=lS*z8A0joZIcRA58K8mFdAE8;h9}BR`1py1)
zf2>dY;&$!tuEar?#YQyugvp#Hg~w@?KZMU+B9sj_%9ah*0F_bKC!@YZd5vnz?5@^v
z&r4k(Fu<agAhVm`Szv8J=G8E~{(HuAnektOoF20c(wOW}Ra&-4{iL^3rHheabOTNs
z16->OKqw%QD}^6=6#RrjiZU-T7?1K>hNG!so&-5>y-MZEcDD|_yzbX7_F?woFFG7k
zdXbe2yQ-c91XB>_{eU%kwXxhdMxdkEDSfa$NLkErEWj$fAN;ylQND#(r<ga4mr*lL
zw-!UEEYS-HUDpO<B<JSl7#i?>oLUR5?{P#vF=k%~f)Fy70)L_L)`KBDMkm7}gc(iM
z=)bKODuiXg<*(VZ&KjYB%KZ;LphI=YH*y<q%>s1Nyq;(8)m&xLea?4Yja9=gMG~j%
z`Ai;Wfkb`7cDpDBv5rAlv&bdC$n?M{#GpHfku6sy(!MZgWLA85p3P)9$$|5UY?`aK
zF=(<~j{Yd0AxA9r(!zCol&@*1hAQMSR)K1<7RAKk_A=P({ZqI(Sy5P84ulYHvP}*}
z!fpV^rjRd&KYGY{`&ILv->pbVuDH6sbF#t|3;+}G;(<7q(@qhkWPFF|;6#hVy>*!m
zQ=y01WM<QoqufM?UvgjU0jT}cov7pnW*tPE4eb`|%Cjx#B66dqK)Ml-^NJtKaqu_~
zM@J3ZIjn-tdtAn)gIw!8@)tGaJ}W=Ucwet`UZ3<66zZ`TU-M8NnaZy-|DQ}9{l5k6
zKWc$ET#UqZ;?3{Re!OE~6I|L-czFPHqn)N8BfFBbJtQ&$cmUfRuh4NDYfO-x%KK^=
zi9_$53G)>|m!0!9m(DVHT;8d$BkYXCfh%jR_FPWZ@bLxoDu4+{G#!{qi86TNF5x|`
zS=2os&IHH9NpU)0b`ok@CwgUYTEkN+z^360hcrD;hS+BD2ya%<<I-I+jG5pE1bdYK
z=&I0S;;tgfT-*zD#hUwUO1PTC-Ru8q?>nQK+_tWd2y#FXJ%~!T0RjrrI|v9!7eeSo
zdMET=!~&u~R75%fkrG00p$9=g=`Hl$LJc4#gplw(-1puy#(CfG$31d?Uj8`-nCIEq
zd#yRwnse<Z0-Y#nmW5O?hdgx{zcJwQfh1hm{tUst)xJ%sT3=J)OcpNj(jem}Mu~vP
z?ATi$HEeJlZ?Z2c4+<q6vEy_5b3E3TTsk<CQHp>#+SOE272tc|OsA2hj~64>mO35U
z+m(ff!pk3hYP5Qc%Rz2Vhdx;ybaE{pmKfs$yf*^wP4@I+yz}VSJ;2Dh^L;0?06q?6
zsp(rU=2a+VZqA`dAA?qrPE@RPeqMJvMSdMy(1zKw_^p=`V>)G7DxaG8U3e~tQIF@1
z4w|k76xa0cy&MK!zXiX|$ej0nJ1mW!^Zq%=ARbEk45&ID17ZJOkt44<qHsWgV(`rs
z-W!R6b~<v2=~so7hx^8NE7EfHDqm2>e9sYH{jp=$(`gF&@|YLsIF*ZQjr*i7YSCK;
zW;8h$8EK}C@Nva*4zoXNEwz}x3MYa=eO>M`pPp0fs07lF-80RrIw2U&Ft75Wsr`dK
ztI+~^h=eZk>Fgg=eyo@J3pc;*pJei|U}M0!<hQirbzm-<DD2cARmLc~qgET2sqDje
zKZ@Uy{Ni^G^aG=ukew&ZRu26EjGn5<<1GCG_af?zRlJw^tFv108?dz60F$AD=`TxY
z&)Qn|BmR3~Z2+iMxlgYYbg=b)KK51d-p8c)09VPf^`YV1Nds0Xzw4`5zzy}j(j^Jr
zYsICKDv`w?a(*Sf4GQ}XAV+KL1j?H9oP7?1xz=BJxwPIrvqm62lrNKr_V@}Ipj2?I
z!3w+Ruo1=ccB(%Ye%y<Aod${q8!y(^;yPXSc}~PSA_d8Ly_uD&HUpO&P(`Ht0)YB_
z^xwJ4pr-{3XHDz+B>ncDxj>s=ghBT(P!6;PDl~IBW3J6k;(kvNCw@`*z~*G&!&PDX
z%a$|RurDVd1yEnXbxZ2DlaWWR1$^mD!pAZ`@>h9HxCg)w%usZq5F=i|ugi}~cWoY=
zRaGuX9>Q3%{Ib{Sk{>9{S7PfRR)5)|)uD}OecV+n%F)1exW>AP#qyd5gF$Z)y;ha^
zhIarQ^9NsAMBh|avm+EH^<J5~%G;a*;W|~to&!!E%|ow6aXetT<>?c-aup;~X!OHA
zpc4?wU0#0!Wc0qKrM%~#Lb#om5%RJ%?wk7s;~pD_8r4}O*U3tdUZDvOpBXs?!yYl3
zng7Yep!ofcZ{|7etn>mw4i&IPNdoFN*vVw>B~@4Bd`5F<$B28Z?gRdXt>lP^+H(7;
z$6n9wWm3~->E1+%xzE4pK;4v<l?|oOt>v@RB}@Q-+<LAE)zR`cK6)mbxHnzV!|Es%
zPP4)ZcsKdkTz*0XA4U8mBQs;!XO<|3-BC-@rBFFbE9<e45Jj*lJ>VJW{Z!SC8oCBk
zjr^nKPAzpTyT*razdv0Gmyz~`<yO{5Kv@|w8Uc}ar0bk<nNQ~WB!*?_(ke8Qa{MJ$
zzP1Pux^@7#@Li6Dvl6qk<2#`9d!rnbJk2nCT~a$uqVEYjbY3HAFixK0=UdW7mU^N|
zbX-y`FK;V;7ors**8>Pgm#~U`R=)ca{y9y}OEj+rR0~bSqZ+eGM8m5reiNnM5mGy}
z)N;lRf~34iA(JlniFY#@37NhR$f-lK;%fs<PT1xZy;<jGZbj<8@%#cW#8UN6yK04!
zCV<vbWP-cl{)I2TO4kJ6j{JindYg|f`+L}nh}4TyNwinO<8Hnnh_QT;2D04tc;LaC
z8wD4aDk0N4!Xir|P3>bw$4=?cS}**Y6fu9JtGSK&u2JRWKTvCviUQV;?Tpf7G7E)6
zN*%dqq|2GYm2LEYIW#_O%sBDpc^!P)Y*d=;Uj)28fS>U$Tqo<@0pNC-RbcU`3)o1y
zJVn49{CKCJWbxqp``gJ2dU70-V)5z~#nmlQ4&*%ETZ;fH_Bi^cA|9{{d(3dv3yd?$
zv*tgkAe?A~O-xOq)6-mcB#WNMFoBJ~TpVRsfjvklURyiATy2~;Nch06#-WnRokh*T
z@x-Dz#{)!RTVz(x8_#QcRob_?OmTB>Q)Vt^&{Ll>8Q@%5O&O8V=M-FUk1IA!tNec0
z%ME^QD<)68jm6&HS1sf>%`zyt^+C&!UE87|q43a`)!tjXE2k?N`D3ycmx+w~`Tf)V
zvMXG=4~botFZ=n-tGNSDM4q~-E?Ute?-w0^xdnEK<-};(rj1Gb<#N=Yn#b4HCqq<5
zpSel?^5gtzX?Uazkn2A8L4Vs{-zfijuv>{ISV!c>#Km8ROMm*(`?Q}mT6r;hr!o9`
zy#1%gE$lJJ32LYL9r@xf(Cp98`WvhG(CZ4IA7xQawNv`nTmQ20=*9<N+)tGC*`|$O
zd6K`r%73@l-`jHk-Clo2fPZK6{fD>LF)%vr_}FR_^yIhSM6R5G`;AHe6wSrswr!;0
z^^TEv2G#vw9+k&B#C~~|<b1<Fw2kQFvNUw=QgNvv<j>1j-kY`-9kNyd<}_Q`c3z+N
zHMOhhnZQXq*(5rcVF=%YKRHSEtaaj0xcS)md~xd-vRA6(Y!^=-;VwO#d47K3#+KjL
zuEa~H4oqjrkAML+hhc7!e?829>#O<KFJCiz);Rx4)K2L?@RnP22R#(5XUWc@b1i}?
z$QRtqy*FxT-bh_uF|&IWE8*>!_b}{;!DzM8Mbdj_MsCG9JgGJsa00-eQwWN+`3Sa!
zDcHuK#3Ln{I7b!JZM#;vb#tG2EIdABQs0>LT|ZDHboqLV+`L)AfmsacN<w!sp09B#
zpWcs2t^Me>)ajoHl{;OQyb&CBY%;?iN_ukNNDLIlaj-02BYRX8a^xO|5l}nQ#9Mym
z*1K24ycD{^0*PkMq@t50j%Sqg$imXw<G8KuW02DfPD=;h$eVbbAKb6^#rQAL9k}&h
zN9Sv!U&h3e&Vh^<m-*T3>+pqhmh(DJ9%fjrl&wNXbY5X2YDg@UbgTZs7FbbP5f+cX
ze&uu<rT^N=m(kp;X1{iI+RX}@rnNkvm6KicKGJA?f;Hnaz?tk7*`kggYwfKZBM}2G
z)0KKHZ|S>wnddo!);oczr!oo~4j+RlhLn%eJ5<f*^t9B~=9-}#h@P^uSLj$`^~yX+
z&XZ&8+{Q}+zR^xYk8*7gl@jk;xWA@(UO)HC18+{=dgd1OCBM4Y2M!wbRs;!p9-})2
z9N4l@X1^o<=r`B+mSSRusKVOHz5JH$7t73ra%}m*nK*VsmO_DH4dySMPPLUwivTpD
zUW40=4(`zPyZ4!yE5FELpjF1AG?dYgS<<!&ki>kNV;(m3jV2=_n;4~%s=1Q#<@VOT
zv4U=%t_sD%W73|8>%^0<U*)jBle3yqYyNVkKY<G0_W{r*xWaiUNme%l|1+zqhUT*D
z!OK>X!%ScI`<~ACQlB^q%#pg{o=aXB&aGt~w+}H7?d==BZF0YAoQHNS<vk4}`;R?H
z*$k)KLa!#B(gh!VlGa%$_BXB+W{G0cn>VW`IREjoq*slFscYaWx0}A?WKdoT&cA_@
z{%<(54g_GP;TGMEtpp0uXm&|pE%294wVn@e2m}8m{D<`%0a(}VrQ&iS0AXkUXjVAg
zuBiZq3YHPioH?WV_^}utTNC~|0d?K)!tX+XZc9h&U;Rf%-ij@^l($=u^twrJQS@Zc
zYun8hj;H!if$E2q7o^USpUYF)<EEyi1-ZEudn|Us2XeFk&7m3K4DScpgY?&~;h>e+
z4{B;~OS}j550=mA=??`P7{;T#xkdCiHB)-0>M6@1)1*+L${dg$t<*URN_bFpDL0tg
z#NPw+iKcI{ogrVWjFO7Vj-^N;0%}j#H@`wpzv#d5_GjRzO*}VHyla1d+x^hAHUtD1
zk@^j%7q4)e^ww#qP#mGRdSq``1op7fUEFoDuc5zh^vGhCJ*6^7t8EPfL*_76(NGKM
zEq3Hut60TxLg~8qkP<-)xmMo&MyVPyuuWCEB4_(j)kW2AQOC^@*Ky=#FC0|j>N%dR
z(?VUd@Zm#y98Wx1*R;kvd=EC3NO&C+)0ZYq=nTYmx&8iA9*BU^koUI~uP`R*10E*#
zse$mMjcGq;=M;{h2dWkpEnN*9uIov{mmNp*3h+$PUehqTQ++3ws*1@*dAAHI9NEDI
zMur>XQ#m|E`I&Y8I}&n*WgOc!&1Q(<`~gmwW*=Z(^;+(oy|CGu#j$LV82}b`88hgD
zIAzPfqE1W)zoyHT031}LgZY<K5gX`IHhss#s8OSapg5{Tn|mossMq<-e)+oa=O^jo
zY8OP0h$s}AMKy6mU0pcWlaE%RyK927D6{QM$n?I<RPH)?jx%>@)9q#<pcPA3rEgDu
zVr%)pb$6Mze1?#f&A7+_TaomsGw*`9WIv?ysAwxRtwrOi<=zO+N*rf;=J?bsE-|H6
z_G$O6jujyB`<i%BP!=HiEVK2-1lH7qNYnG^-Jw9-bs1T9vT3eeVNr}CycRVFPX+nY
zB`0ZZzakYa=M;>mY}r&e#(}Fn6emYZs{vnO5gErWgR?w*zc}OT-7@TL4todG;;<Q8
zhCxxf_1rVA<G_ZqP@9fV+AVJuy)-frsi>U~?9D0999~m7x56Uz)pxm4Uq|WM?68b&
zc6(m(+kL$C>x~*9ST(lLeHRI9>yb&$K1Z{<GK)3!UMo1pykrJhAv0<(L!y019gka(
ztJy}@Z5MHfR4VPIu4K*%i%9~YjOs(Yh;Z1RI~M=SkCQv6Rq8lXBKHEZ`*irC<_Lcd
zJTGy|;%o*&W3m4IW)wO_{JgqN!<W?;D|^!VJ;Q~D`5rbMRbia~s?dhnox6kht;Vkp
znP<}!c_!N^OL|UYvDGNvJTsU;dk0Y?W;djZE(*;W7}E2*2P({_@;}rotvg%|SRKo%
zcZImW1)26S2t|kHqmwGu_PTR%LV?{usc%$R(|56E1xEB;$%MF{iH${=<q>!U;K{Ii
z-WZRtgYwp_WHWu-DSDTg6Mek7ieB>~q`F*LM1~yuq^<4H`;~(gid-go$%TxUW5yx;
zU~z>>>7CBhA-;d4<M96*!T%ka@IP3z@zv#%g?~YLaV;($7Ecpkvrv4dbP6hqP+`;5
zylSw64Q-*X*xLm`CFltND$FNa_D_5F?rGj^s&+Az6<+pjloULNusgialSAB4g&Oj2
z*`Ez+p7Lus(ATuJsGm~@H>Ec|6n(JFUyceT`O9nV`OATFG_>>#`)VigV#li;P;b*%
zrwQ--<|Rf*WZiVm=Zu06RW|b;^!E%J?WpQm{f%H6X`k{X7Q<h&>DKJB$29k4q7Zti
zN-|%E5BJtqfvH$}(Tw0p|9Z+wdgikO#Q{sBVMziTPMlsVlRX5fipI<W4~gPqK}~OE
zEx&<U*s;Iu?@~)bXr|;zuX?jkm-MFQW}Tykqv4HEjnhLJ-nxgCze`<YBE?{<37Vz>
z4qW;p=NN%OA_zdudH1f^lQ<r*E-+(e60^V1_*EfK8zGnXwZyXJtz-XzFFLmmEkks+
zcgFt&OZXgBfgJdt@I!+VdAzlStYpYM2XguQY^Drxp!U0CSlcZ{>NSJ|8!*U)QN}{Z
zxTNn~R}8CkcC5BGHPw&Bm*<?4eO{fv_R}G7?i<zQ(B}#f*RlLED!YN(5_Uc2AuIlS
z%TtDOa&p}X1X|`ndhg`B92~8wnUPeFLiqjb3`1WB_N0war{OBG`JkK+dH2tqqgajK
zxa=zCu~D;EQ-QC46RF8uR9upD*z(BKEa#KfNS{%GFg-Ig;n^1}8~G3l>MKt+jL<g0
z^=B(8xmQ@SS1liXQyT4cQB_t2rYeSC@Xh=9iJKl9V~0p39j>{u2u-h2(e=ALeU8}Q
z{3bZ9NGp}}ZaejU^4i|b7rOcOmwiq5Q#Zy!kBJEv*~Ie{C~0|aJZN-Bx@L79U-R1^
ztORU)^kSz1DpgfvqqnxILXYL*?lCN>vK`NB5fA27yONLVsW=Mt9%C<6)Ra}%__!8L
zRD0HLINvP|dBL>1(<3<%m`2BRP#VWV*b8prw6@{d?@ALiR{$cabl|>!(%O(QNlTgy
zyZZ9Bv;{w*czTC#b+T_><2B#n(<I4f!zy~`rS^jk<m$z8i?kZoY0D^q{^@`*5U++{
zmDOP0<}Mj;?4YJEvc}Y=!)(b)GWgKhdu=;`>EiA!aY)X7?RCL`mw>-yrPJa?giSkI
z&&#V^60>FT0-Zq&mf5sp8+&KlH5P3>jrJUQFq=m|%~M46b!<LXD`$C|^YBNE6O?tb
z*1or~0UNZRwjqnD#WUi&1IJ1i?L@!XBN$|QOQNw2Yd&#2`mLNd#I2T?y+aSEQiX1|
ze2n=>2BlO_C<EMMwkh9KvqToEEEkP}?Uu}3p2Gui*nubr$J)=1*rtSQl3NC4w!#{C
z%MVSeS8#Ye=Vj0B4{YTjL=L(Sled`ebtMWK*mQi<P87%zwr?zx$uJ^=as{(bD4eEx
zH`7FI4NNW+U16mgOA>LZney9VQB+b2knJZ274)5(sDp;RFdNuHDs|lXSqDKlqT7wc
zj+qvJ#9lWkqn)3h7Y_PX8(_1Q%%yiT-z4j^ZBNRa?!wLmTZEK|y;p1un<Tb64hzwv
zmiokHY_zi!lr`7#MkP{QqNSz9p>u>PU?nc&&D&_T?O@4rNCD<h+J?-pW#UG1!H6$p
zP1C5#Et2U_tz<{M&H?ef(5R%B^LOJcBWVzEr<kB|&s@YD+&L9MX(+8$RnbzfStT;7
zZkfIpBk4L2Xr&~EzUPw62@8><;|!kDy<8zzH#)5e_Vc6i&9AB&V8oH`)bIX$0?Yf5
zw!HzVt;8`RI5kiYkgy8J0jwP7U?2x6%GVPkmDQN(d)pYj4UkNy-I47#F{;$Q-HFm*
zeKZ2m*!VC9-*Q1}sUu$BD%z$j+4YH=n<a&2ZLX>9hR7HE>WszVz)Q_VLe5%#AizpF
zjuNiq0>dwhw`l)fiSK{$m22P|#uTi$4cT-c_4ftNb9}k}yfm!rb%okwZ^C3EREA^%
zl^Sa+c(^=TpuJg_QR#x+cBr-AKK2@xX3_B5D9<r0oxa>mDGA2cHM{#x4#)v^drcAL
z((cg7?<cV*;)2dFFU!QUl;Brv@kKgsC5_g~sdlowM^q!~17wy#;_jy3l!R-m<BTu!
z7mzTkqgZoMI8aByy5SOg7boy<KR%UzMRERWZ|h#iN7>Naoul$m!pzK5WC1ZG&2Lp)
zbVR(jAr`*7;^4XAjdW~oy|4MI=j#i~WjU)we_Kk!2FnVpGkQq(W0ZTF`pTEkW0`<2
z7zIswg`S<?L6ciU<5+E7-H(`0gk-&$K0S{h&x5;|aoluf=M_Ka(VrsGjQDWptv=5b
zDTXZ4S<2)JEuSvwo;qN<Wq^}g%xUnz!=+0ncp#QjYZW~l?lf3CuX8~%pmH8}8+Aaw
z4j4NNF0#}TUS3v^moIl{769Pq;DAQuXR`q&BYR@FhC_^bmMS~(pxK0ioV+SHqE1Hs
zMMRXFJOtY%q*)3K+iI(<kkPE9wjJM}6!OJ3c_D;8-PJZxi|_QwQ&>7cNGuqF9LhY<
z0TNy#dIsueSD0nSE^WV1jc@oygS;5*`6WDoSUTG}4nZkyqHvW!#9QpFa@f(zv&{<)
z*dGq3TtlP2l3%4m+zHvnKbrJYpyT|_5tZ1{KIFj@?K)YiV_~6!W+?ziPzKn?!1WSz
z;*>V^%i|uP%*8<L^?6c82*wIV`^|>4t?k!%0N`MX=_qQ*aG#g);&u<{vFH&5&A3nb
zn!{ZuC1fnd9LzO+$=bEez+A-XuV%ocA(dBw|7$1zy?>gRggIaKEB{(VE1Q(B%oZqO
zxYYqWo*}ukr%HaSm$vH;s&E}>;oLGny1Lv?5S^rH9Bplb9%mpJC!Xe!*sFp;5>(XG
z{hu^Ci1J3$xlYKbmHoY_ctAN0)CzXj_?UvFaEV){sWs69`3)F<EdpU%d2^-G7~*mE
z<^I$p&c}<}lH<-77nkw0xAWr+FoZ?(A(nAn)Z)eKl9G~u(22(<{DJDnIf*mfAw8%s
za%T^dezVrJb0ln-`h!6m6V)B~aJ_rxCxtn&>2Cg=uEE^VMtEaFhrz}~rDjG3eu91c
z&6i4um&B~JR)h+jG6L_?6+~9MKb|THu_$e{Rt;0G9pVC^`ZDWb+Un}<^z73iPOl3a
zYSIYALW61}Eg5`J-iEZ(&JlL3+Ux|~m`H@i2dA;5CwOri)Uc2wxC{kMWbdWU3l5c7
zwV^*R630sYooXzATtfP6^2>gYlQZSEO;M^i(-+=F+FX*{BlKCVyxAPzInnB_RVK@Z
zzNafLvv|<6JqUs><3qIY<g8F;@jP0NAm=<Gj*6Xf+;MQW7DQCa4psn+&*^fl?jUFF
zIS|#@mOzlR0wTlDirK4AyHg@(WeEa+y+>z_P%DPM3<?rQCDY=TKVPGi&Y79Hf&1Z<
zeQT*V1Ja@Qu<lY@@36TpMss80#_T>|80xA(F6(x3DdwBz3D~GgPB(3$*g&ys$!ihp
zp1SD|Lwp_h8l-d~DCt&zOzQYB+`jKtcbP_VNPl#fk%R@x5zQ@mb4<$Lqn3E}o=LvQ
z2CLVSJ0#n^pO~T9ng=s>=@+R$-!*3gNY66|AdIp|hG-*d$DMH4dYLokn_Nyq`5eYs
zLJuC4$ggP0x(q1ourd&RdcZR!m}b+xrk&uRrgBgYd${lb0&71V(U^%V^f-02x*Dd;
z^p5Fh>;Y(!KX_Lf<)TMA%5ZIdHO&V++ZchoQ3)lfjzczd0ChT_14_<X+&Vb5gK4cZ
z^xoD89AsR-eW>R8q_@9L)b+#RKGVn9;yLeO(@ZXy)-IJscgkKW>+)`~W?L$Wax4_3
zwno7Ae@8}CIlTsW&l~V6w~)CEr&v56#PXp}8dY1R%W?Wr4^c^2eMIoa4gM?FFPCU{
zxz?+Rzj#sM-J!ZjL=emQauCWrob-X*dMuJtMHvcayHq?4$6u9K2@~no7A=EQ=_;{G
zNk^l8i$7AYB&7%krb+m2#N|J?1XeuW`GMzx0e~&CL|RY{p@n2nP>#CJz#1bV$T+oT
zcMz~l3S7x%-#RElemHX~BrJwGLBb=M7`nsV0XRd`4y{xO${r46t!`ijan~?xwT5HZ
z+P*GI=y1M=j$1#YvisXHl3VH`gTP~2pOvS1XU^4J=#f7Dpaf-r&AQpaf!iFBwvk$w
z+~%|I*N|Gr1)0gcIFBPZ7dzt7v}!0%1l5=$%%**KXrl`<#H3&@;-r@U6n_v)+?|bx
z-7`UP?maGY&E~c#7M$mzv(Goo$>7${d)ky7JK=72ed~=9ly#GQ*DSaKRpY&}ykEjX
zp!EZ9#*l6(oRJxyGAb}>=*^K|$?lR}$+j&33TZaURVOSYCN;o*sdH0+S;?D{z{H8+
z-m0?hyEp0>oAv~5+62}&FLD_V<p=B0^_yM}Yx9b<|5pp=?*;aM67oh0V94OIa@zaG
z`KXmxZ<l#MDdSRnZ}kf#w=+kM@tVliNR5Uady0x|u1$ovhkXuQB;k5?+3-I*29QI$
zdk-84Uwr>n{k8p9*I=qXe(J{>$JPj%Z);?;`kJuq`pXNHKqI30N{K66-h;isW*{3j
zxZ8U5+P$rW+sYR=NZzqpi#;5}qWUO1*5PPTGYq+ei+8t#cM%$pXM^jFY`O?oC(sXm
zsM_Fc7&cG0<oTf#G1r*u=aTW}(3?0!YB1Z;>Tl8`6)%7})~`q$mmHcha<uI7KiB{e
zw7{(TJLguF|BfEfyiD@gGpucIjg-^DTRT`#$_Qy{qUSa*oNpt!bqz>F8r16Aw14y=
z6dBTGd@2}Q{TBJXyk`5t=^8QJnLue+b|Q+LwJnCBkbrer49{A>RL{1FsBpR+#4UG7
zle(HkBZVC;)0aqgq=Qi!vTu!KG!q#~OFY!n)E>jfBuci`L_12L^)N#-EZVowBjcv<
z+$Wtu5R(gvPm^GYFS(H}iARZz*11=M<od$dHnyFo!vc;<(zwm)a(7smrTh%yhh6fQ
zm#<^+08I2+$;z65EQ}j^rb6bIY(>Rbsj{gp@Nc}m){CB*)%xHZMwlv%taXY9!qqpV
zN=n?j6IO@=<qlTC`#%WT&#hgN@KmJQu<{kU*ec$h7x`wh+n53bz24_4jCUs?RR_JQ
zzjCm>dlqV8!Cr1ZtN!X0y)O=kv1&i4PKU)co;7B&1uKz3wPZ%s_@r><OrJ^>c7@~4
zD?>>$Y!s}-Pw%icdQ?(lPbTL!?G9hkUkgD!!c7fxHG|Iw?yY8rolOH5>)Zc~`wDR!
zDb{AVsF8g>DeT;I7hXpnT`Lb%?={yFIlTOLx<qR%x)TLaAPi+7*S>E4PS8XZ5}jvr
zen+aeS|(uEm(EqH5bz+0TRl=z%JZl|Oys455qd*S_<=Z1Eggexf})znVh^u`O;Zqq
zIBQ51;@o~{E2j{CZ0+{$QnBv`aC7I+ur`=pVxuKhd`q}IkAA(tWTVy7r|BS@GF+y#
z`U9bF8(K4cSu^CP*?nPe0S!wZROWVATWd6v<KZx@W>!@48*PVPuK!ztH4iRz^EQz3
zUp#+NfkA2j_tv>@AtwU|i~BSr`~|ob)Y&u{GnbH)`HhX=(la&&OTm)&&5ls#EjJ7o
zjBkhMnvMrfJj<lvyUMNGOH(g1NOado+^^{V26L|wa`LH{NfFb#c{7rp3Ancf@%?)&
zHBA?07w<oQ(R6rM1bNH)iQ7BiYJj36yn-~y5y;$*6AM>~+ifsxeYqw_6kFD~@x)wV
zUu8XEin4r*(1NXzB9;ZrxOc6#0B1I84HAq<pgy^kL$yrDalVyC$f4;vJ(tdRh1sJ&
z{B~z&$WFI%w@y}0`Zkc$7YP0xszB%B+Xf30lT(ueauwq;K5)ULnuXM&a<bj@CrbTa
zsfI`3$p^3v$V>pSd@fsgslZqL<>RM&X<4^k#Wp!?b36e+qcn?jz;2ynAf)dsZFyhs
zO};~2#I6(+3e~S*)L-kJy=|*umpWeUu{iiiW1op@-C=2mu#sQAI*}ExnW~yMRdsWY
zGLAPm5{eGS`3@aXy!}9NHTaz1wJcsPxZ-)+T!WI&uAxrgG9QHvS+`!(_#AVfp#yN}
zE_js#k4Qj_4-0Gmy7<nOP>Cte4h&K=HHnemxftjmxRRBt5S?$6L1lDJ{{5Qm|A*hX
zX`hG_O6&jud~H+!hNi;B6UxL}h6Bd3DM4lXhT#i#MS>n5ff9u_XQubUYpN}qtrH?F
z8s6}wJ9P|C-l>;wP!MSBt6JufLGxvA^EfI%`Y0W4kZ?uQxFR6c)g=T9G|vTcy<L+=
zpUvRTXD7djzWL+aM42ya6^%0E@8g&0vF$!EiDn$a!O2%0wpN{*g`5xWrp8EaRA=2R
zqS1}--k^6Tt4On2Y!|LUx#+VHi8$S}X+x`cOqxzn+NAmoLHOn>&=Yc3b^@C5f#IH^
zz`olix<e3)EJ(b;ee(uYT*XShYz$}7Yr|R}n)=;2&+ZU%3X1BBX>?>zR;rLw=@6>?
zfIcU2U69eQ96i@S`bkF*oG+Hyd^i@k1Nho**RG+2huGe4R>f3V-~t`P_=LP5<V4Vm
zAw}oGmyxi9HxZHOGm~dP;y-|8E#CSgNfM(L*D#3muz=Yet|c>+c`rZF0YB<lTk4KA
z7BvYinDP(Ig+kQTqa>ty6?QOuI`R_eo6=UP2y<if&an9qkC1tTwL%F0qSIc$0x&oi
zHl>VorCpATPtz*lw(ih#sqp(Dz@8#L??ZK-Cj%(`Xpff0SIZd@H1;+`ADf2?ssV>o
zfZ|Rt>OD}aL;&4%M*Pqv;HZvlT%+?;Jwb~T{?o~;?|$&G+5#pqT!e(f%(Di7X>vUa
zXf@bh-}|^@s;Hd&E+?ZMCaVj~U+%N24_r=C(of!U{#l$k`5PG&Yxn&>lU&Y1E5`v|
zV~#9j3C_DV){AC>#0&z>x7Fe4{RBtPP_dgrOi}lq+(5}IDA2pgKLhZ*@o>UwsL0U)
za8MnGGm@!L><0xLi)zP>^S++f9M=QsbS|91j{80wuiO-x<(p17X}`@mDed*N7H*r+
zQO`fz&F}hooq%T};F85FH`K4T?vw}4ZKtgc<EUVcK|U$7x2Mq0fo9>tvNntCegwes
z5T6y_<{F{fHH90VQ=In;cMGu#kyNJj!mfbm`*ObeH;mNS#5Fa&sm+k@@nT_JE(CI!
znyuB@D1_cUFL~dz%KhPU#ysG9oe1biaSo0S?z@Ry#jVH6><_ILAlt4ZS|psGm$!9_
z#)(2$>4ncII|<uAk);=z){kKppZK~iimrCzOBMLq_A#dO55E-D(~{PDSuR6^!9sjv
z*o$sta{sg<0J9H$macJo8alvmF;P*2=ZWTMNG&c2)$tqnu6g%MmRiK4$S=W?UdzSQ
zSMTMTRD0A2onA0eWq)#bmX84`$hqC@AQ^2MMw3Olno@<a;vp$eq+45z`IV>7^?@<7
z`qdsbUMuWb*3Cww+44|2zo_Ww0T`!df+4ZrbE&(NVR}Uc<lSHUA>GtGAR-jdTevrM
zx{G9qtB-8LWr(2sJN6hVe(*s<+J4FEFiHo257@y<quHKuAN!ppSV|*s>4`<2c4nR<
zIv-0HQ_kX({G0KbNNR;mM-TiQ&tzE7z>g-10dN0QBbm)h*L;n@dBXz$O;(FE?}+aL
z#c{_4?T_oR<v*z|{H&?OZVayg+8cL-g{E}@m_V2?av66msFctX@mncrPZZ>;vXcZZ
zL(_K|lg<Trv?@Qj)3`O@lQA)wL#~-u_ZPZ%uj5w-eA6vITdmuaW^R^g<>E3YgY%@u
zlzj3tZDpOGikeT=$?U&>&w0`>94xUieiisipGt~je(~JtaGS{qZo^LlnX)k6+)V8(
zr4+)6QTWM|Cpr(iAS1ebbbtJ@yUhth;H-i{G&y+R{i3bq;|aoH8=L-0<@lzs#kYkx
zhWc?lj6lgsgaw)d)74bFAdmt;=ny!)FAlNKGrZ`R0bNDcHgSH(4BU--n~FNh>&ukw
zJ&0sG-oQP!`5x*O*ttAggGu{D{ge6@$#Q6@*u6|w!M~{P=sD}^&<}F47Zc*X8)Ghq
z6JM5d?Qv<iNSfY;t)qdwP_XHa2K(NQYwTFHX-`54olr<qn*&zamP#snpLL%E+z8=?
zncVR1e|ZHY@iX}i92O#_NmE!De>0~(5a+a?;?MZNt(b)LifR8;-ASVW+*G8JaLVGG
z!HG_-<WZ#MSfzI~)DnrU-@{|f@e^trmbjv1-9~b_6mTEGTW_2+OMgDM!C|S|-p{u^
za4fyIHR4KuKL2jiJkg1#mx#wujotu?KnJ4>@FYoJizH7!oUDg^#1Z1qUlu2GJR3pp
z*jKtYeUX|~qPR=<`}u8FZuE{#$2zmi6`0aYpHHDNGA7M$-NMv{Tly-G(KnjpED<-L
zUOZGdo~|XE`nd;npla8BRNrgsI8PcNOtP)!$9KwLIvLh4ZqF*m?kx=T@O0}os;?A>
zjTj2%+|^2(z|K=FB|8p~<Wk>=FHY^qR?oc|3&{7SHFaqUIuWS7L)W~HK3p$@CmprK
z+w#p3BX+AR!JOAR2}+f!aE$%%?9HwuX+E@SYMRgSlJ9W$9=A!=lkjkZhM)>;4N@Tw
zxc&2SrqUij;v)tZ#*}1Qr|2FfQ@=Mxx(<AVo3FjtX5$eN(R0${)AI+pqd^Yd=)4L?
zo2EEU%|`*gi_E7%m1oF#(;Gv1x2`iLX<2Eo%WTdUytk^bY;oK)hNnSU1e>VB77q|D
zjC56jo+FY14&QVMBb5F>7qkic1?XZqX}T}m2q56!g-l7cC-UUb$-EUn9|1Qbu8`*e
zfjMtOGNi8)f*MezD_4a$A4hU(`VH$|xbVp?n$%NYB<eDi2edkS-1Z)8O#|aD#53A2
zbd}g3!Y?qq&v<A#Rp*Z`v(rZxf)%pV%s+qTIJo}DhYs={vJ_mT@Yk=hS}DB{)W#45
zg&q2?J>Q8>yAUBKy(Y_ss&E7k$3k&G;X?;ggxGTH6{zat`%#IvBU+<bW`o#RJAeWh
z`WvmRn&=Hj6b$I@<pQv?CVw}pHLsXXzU%T<JlG^fGhrrw50CbX4!{L(9PWvxYCI+w
zSBS7TsV;*-!2-w<9J9hSGklLpB+*x8YeE8pvQnZ2+1uNPH%#6K3Vck>O4$q-D$ZXx
zPdiZ7BbCh^$9;Dq<r)B-@KY{+?$e~RW0fuubV;W5B26@;i@`+29G7RKY=O>1|Jrpz
zTY}pi%2UO--%XfL&gAyo1CB07p4Jm74^U15S5d_+_Q1@w`}!n+GzU0$H(w5jBww0a
z@yff&5q&T%b)K492jDKcnMz=KUfsuM!bHBsH@{@LUEwrblmt|AH6JB82CmrQNXZY)
zAoTVHh1C*$?YhbrF8uDrO*i%sMk6-%=6z_w%=|P>cYwzGJ*}>3Q!uEa)U2LI7jEg_
z($=;HFuHQ*QB^wLDStDC6hk(s=&#@618Adec>aFLualY3$bG7+-anq<`w)<<%l7tn
ze*RJs>o4@f`XV6gOSED$pg7$ZdBT21jQ|@-<y43n>*-EAutH&-Hvt=o=lWU1saE|T
zjprN2z(j-2q4A!MQ*{siQ8;`j4)8SFnBb@M|AD1<0+xO>fZ*?cI_=!a3JF92`rFPD
z+Wb?|_kVnCVa_MMdt-<!AM`If<yZJE(2WE{sN(x!;9vRczkd9?0zh(VyS9N@JQYp+
zpA*CkoFKtAnPTeGFMTN>Vr_G-C)P=w{sbi|04Hc^gi<f;ukZc~MeB!^z}=w<1xQ%@
zFJFoB=PCYg@cMHp{v9dHe}mWGJ5~P;UVkgeegBUJug2rEIA>>A2(&@yH{eG_QS(uu
I{L|<E59!BIiU0rr

literal 44474
zcmZsC19&CfvS>81ZQHh;%#Ll_wr$%JCllMYHL>l9oxJ?#o_p?l-+jHm-m6x1VO8(d
zyQ^x|ijbF;fP=<{1_A<tladrw1Ofsj{D$)&!N0$O!MarbX`B=#gn_E3aZkTH!6xcb
zrZO@>)ZZ{9&<|i_AkcqEzCS>~*g!x21p@&|1LOP$Rs^Q}Hw_37P?!Y}*uQBszuSKf
z$?x-<``;~SKJfoY%m?{zYEZ&_(Eo;k^8R6?sFG3pZlLTXHJpHeU{L-!fq^o!F~6m0
zSSYJItIGhmjqGgb4UFv!P3YZi?Em2c;&tc#25n574G7(BtZkjR-T8?BMZx_I|AS^A
zCj1wPvlSn)x{N%bh@GPeAsam_JtHwcG$A1&ucNUkx1y-{zuCWge8lF?&i3343~p|2
z^lmKlc8+EYOk7-C42;YS%*=G(6m(7=w$29bbhb_;|0U$V<%pU%897?mJ6qV<68<CC
zz|hXcnU9$GA4UH;{%f4h7N-BB$=2!LW_=sT@Xr+nCVEDO|H%Gk<^2cCE$3)q@~!zF
z`TR`0|DybVaR1iB%kYo#|7$S+W$C}L-=^|I^D_MBw(&y)`YAMkfCPc0M1_>yfiHA^
z=xcM#=MGNdI;GcHC`yk{UN)&6(KuzHE+k`p>9)!2j=P%-cif_Zz$NW-?hH<%zV^sz
zR&7_iT{anwAX432tv}s^<rO8Eva+0^;pBCRS=U0UgVBPZ14sFb^%CnN{a1G#C}3-y
z5Fsn%|HA!;L>^Kde9#r_|6%yoMg1%yeXMvJ@TRHJ|48}|S1oM#CFuY3{#$D=yGSoH
z;X15kR>J>B7Z&0=#Qz!`dVo!+zlmTo)*?H}{~pA*v}T0=pGmO56aLmLWj5mfdk})P
zA-%-2N=TBIC=7jlLiHv;jo@ggD~f;Bs|I>LA&*=RLq1lBAgu%rL&Cr%92~Tgzufod
zw7-H=(U&_5tao}uiHZhGI~x9;d90|YNO5emsL}Oa_tWQAP%ucuB-ob?tFd0Gg?dpL
z9hS)|enEXN-OR~FEIlYvhZ4i7rPD;Arg>PgfI1hP2LQr_IzpS;VVBrk6jg^G;Yl%Y
zMu=y-5O-FjrK1yS8DnSuq;%ESgF9)-L^amBlsC&+&u6ZzNJd1&I#Z0c|5;l4so-D|
zwV!d%LryNdXIQv#&BH)lX~~GNC~1dbp#RQ!fPsT@TJl8BKcT3pO4ii$po2`KG<~_-
zp=RyvO4IT32ozOi^dzAlrJP*#s1d_o4qDvaEW|{_PqLDQ7YGF9XD(Tbicux}n)QB!
zgpyWF4lYZ)yGx{~T-$G_%`Yi^%J2Y(vzZj<W?X`TghU*2?o+zJLn&ssPi(wULPsYX
zyk+5*wyiyBZ@blLk)*6rZR1oI;R0G~OM}wy2nO+xIG@<bo<_t}o@c!R89K*IWHUV5
zy~2jH(&|vSsC?McX0OG=zn<;D!oWWNp`BNUoWzvN@k}t2CB)j_7vIE+KpMop6u_Ra
z4{5wL`(kU!LU*Tu<<+3_J!^|p>{my1@PO%~+3moY&hcp7wjHVlhlUIcq=*N8sN20<
z32aZ?&G6Bcp9T>ETb!INohlr{^w}yqD0E-6eEB-QT2Qn>3Yfxx(F1}4Jtyi9X%2QJ
za+73mILdP30$sQqpOHpJp+*Q6lr>|;KR%u^Zcj+!q#W~L*&-b3@8GjLq5m9@-i+iC
zOW-<`S#Q;A$S4X4QOZe0@UrZaX*5z|AagSlx&HwLt=nvLND>tv8C|5ANtujx-Z?ZT
z4bRe;!+~x430VUB#aZI}`l6O`GwIaJjRy$#1D_}G#?2Da=a-JeIXKE<NHh=$%ZG)l
z_U-MI=_da%<K^x5=c4U)HfToL(6P}F)2FG$W8GH^tQ`iVtB#}xsiW>D;>K|-#7x@N
zH8mb<F1p)EJDq7fGvf`jG~Ww1Z-)1yleDym8oY}p8ZK3Uv$X{k1ASZ!BafuxvYlnT
zU1RQTXGec*N{5PL!#<CcY-E%iGLn+^7QUdMFY<-+oZxt(`|V=R86U{!^}(-a3?)tg
zYAv~(v9R_u5QZUTlj6F<oIA4M_F}W6h1LJa`+n~D_R}j5sM7e|mXGd^zVKs{9qc!>
z>biY{or?lk>klnCVR*DSzxRDwN#TB8X>5G_a?E(iGQY(oo4-Pnyua27F2e;eU0FoW
zOfFXD9A8gMUjZImnDGew&)TL_*>paHbJT*rBTy(t%S&_jSbR;z*)ik8f+wd;FZ8Vk
z^W4H?V}U@4>)-H`5~j!S<0i(b5B$Ee$nK6mLpQM)i?ck*m9RslymcG`F6z%^9oNcB
zr7bNZA>aevB~O#U!4IH{g<Ft#5WCS~riuqbMnglvPdOMxWVvs^u-L67o#uS_ahUJr
z7zt+##_GiAtjmPWg2eJWNDu>acIy*`GgvLmxPCO!)39_cshlNcehYLUYh6{=slmKg
zrI?>)h_8e0YsDx}EsW(>gy+@Qi^Em@O$h3Ur#!t!w75bHmsJ<Ei^i$Oa?$mqo4-xr
z!M7x^z{1??&r7V3V4yGP`IE?&z`pm>adJEM9;>IM1Q>QS3mGee3WwVAlDn5e8qaTm
znGi3oZpr|Mxc88POn}rIhuvBp7P7bnHrW@m9I=>@-C7F__OXer$ukXl@>knPVy(~k
z_=Jg$P(-kVcqM12o|@VS!!nO%;?Q<-H5vxSjiRt{U=ccOagF}%%Ej8|ERSKAvTt&)
zlbik<Bpm&bklgKHKspBotZOtxs|w>&rq|3e%T<y5+Nc=Fo#|f{@Ff2AWo?#fdKz(e
z`_@Fu`R)nuD8U&aeUcOP@U<8HoJHAgBUpQ0cL)~#`{%`(Hmg;Yz%@P<C!4}4tn(p9
zCkW4da*Tlh;y0S6aw8j=n2OYl85umU0QQvR<n~;Lt7WRCKkPXi;V9QNS`ZPa!g8B8
zswwB-1XDBooB1Hk;po75kpAFUo-+NHQSNWvGg}voV9~D1CN6C0A>2#k))>bJQYmHc
zOE9ENMB{v1i~a@$?eV()jzqt=4LpCWteNe&b_+ywo<gX9RqR|Kbh01L%X!_J*%kX9
zY3JKJK7EpafRmW5ThlR1=fJox{26Xr`J2)+{j;S(0_%BCybApYU}QC6y4?cl%nu^(
zqI_1+Zk9x!F~l)pIt*3g6FWmMHF~e^vi6=)U+MX`FhrlRtiMyJiFF=S1m#(#qq)h7
zO{9;jcd#@+D*mL^b4y<pU^JF!LaoM4z;vTU8S1kE{Lg<Rs9=+nD=^riVMF;~8BDTu
z2VLM+zzN)`QbMxG!x$DP6;pCMsfIy8K{{n)a`t?cC4irMR$hCgnDlqOqSxdeD~37a
zb=Gr0kHywW=r%OVl{;8pzEUNtJctFk)3F<hx3;^TO%)ZK$<7t&dRm_z*8MLbv72{&
z<ZAGB`n9Qs$44~;F~O(9Df{SooHI#N@3W9*C+jnZ-O}Th1<p(JaK4|{FB588;<d`^
z>c3qXFeO;vUUjBXDplv|pxk1xFD1vv#|!=}DHpq<xaz1L^b5(<fH5+tq6h;oOA)C4
zs7&&2S=9t<<^W?4FbJ0$jTbnk9Z2<vFg7k?3&`*M4cOclt!x<?FrLbEiJS|MTdwxv
zda+NKj3~ml^}=d?X4F+ixCj%@@5Vn1S14y})}xi<y@8EpNJ=K1W&A;%*zb(unumO_
zViXs+zDLP6=fy&56XFbt4qYJ6q|xHr#rw7aGv8vTmuvv~3^hUwW|Hq|Y;K;8>ouv6
z2tuMjQ(#TA_t<q6C<yB6K2WG=Jhw-7ySTtoB$vmZZ)cyoS0>0{Qr4}2oP>N>MuHF)
zgw{%ao!EgNE8H?rtdKOW)dU_`hTXa!<61nPLp%+dMe0^;D#$s4={dA{^ZM$^=v;u$
zITxh|y4a8s_328PC-dv_pP&75WtD>t1U*2NP>|#%IM`exp+Qhux@o%FfIJ<xSj{#R
zq=&=MuweJjZJR#%_Ey?GbS{yBrEfOO+rpxaI-rh9Uf@Ck1<agv`c6&tpgIJi!a^pO
z#|~@=HVF9GHxk%kYkSSALEX~-b+hYfW6sdg>yk@@iI7gb5s4OL6Bl@%KXztg!@KSB
z4^CE<jPoAls?*FS8tA<BApUJUK<ql-SfkavTv=5`I`jUf49mjL1<h^LV!zzR3^M@s
zr;H6<C(f|@U`<6uB6K#Ea4BUdxrb=2Kr<FdD)6eQ{CYGk$T|ne{jsgGT?G@AI|Mfz
zV}+`6&0Y~Mf>wNg;1A2an^-*^B|59S<??lLoe7@Uk1C{mS8$5;^b`AcxP^HEhEuAg
z0%~gN-D2x9#iTRJixW5+8ZSy%+n_93pc6zOFG9u0D<KyqoNrAqAh>yRa|XU66eBP{
z=y{?Ef?4942`)XRL8YV=nBQjdiotmZVM%q0EMQ$$4rc=^?ZxC8RaF9MbuvjB3GU&G
z5q%G<Df<HA^abOa;c~*h-Cb@3udD_!eIAkgx#!lcf~<*%v<~cS$;il`sN};_G+q6S
ztczB0<Y!^$h4sIn73&U>kuyPhp4M~+Up90(#Qc-E<X|7sT6?KNbJ><qxD}a4heX6o
z7D9k0M4Q65y4VYGjYTf@dewMVz4$N!j)u)d-OEtX(0fzZ_#|xPjDm8jM(u@MDulea
zStlX9gwZa5CTd0SQKOY+q_hzY?Q1VCUOdt{&X(*b1{CFiW+JlG1c8_lonj|o(jrX+
zn%O|s5pcSy5}IB#zQYX}M8?-nRz%}jl&Dy7j;PAzgGvHZi2=zn^MM^aYQ~$%th=Nl
z(vfz!KVADP+y8dhXMK<e@AQu%qzQPAi;GPXJ1QWXiFVgei1!xK{hVyNkV|ThWJ5#P
z&0)vEjlK5vm8&}bgqaAot9q@>tAlycf@Djc$fg-gWj5Jbq?R+n!D7%&C*;Q)Uzne`
zFMgR&j=T`U4u1wMv(fkbC7R7CIhY0icX)B40co!`kiDd=to-}YH~S9AZE6A<V`q}V
z#(Mg>j}rr$A8nJmOI9?xRE(L;bmX5qZpQ=WSp=<$x>BKk#tSM@iU9>$*(O&UW9e;e
z_Y=eMGXbd}o*EGkL-^ehNC@wJtsR^elSj3Q4Aqigml6C<FLhX0!E<_Hf=75WG|C9y
zv{X*fMDFH-i&WX=Z|fkP)(l1TdULPqPP3<cywsd`*1hwl#`fA;D1O~2`-jD8J=&Rn
zpFAVNU@8jqN9Rn&OIJ||oWE?%m76I=QGPz+Lm1O9qj`JV8l1tkHy)7v;L`B(omGBT
z--C$uP$|or&L9H_q=13f!1q|WOG`(s=<moz$qgXU1iH3O>)UA&NR;mBZ7cuLz_XNe
zFFU7`h~;d<d}HeUS_v^iwe1uK_I|{fKW_Xp;9mC0A_jNFH9rva2nQb><l4NC-lDk@
z?A=ig$y0mLpd~pswwb+la}{DkXvxK?p`$8WO+y@SgR(72-$3ISd)CP?hP1<nP}aaa
z3$d}Lf!`W^t%CBBO3M6#rRq1+vFU*Q!N8FniLz*Urqxl*FJd1|I=+h=M$I+s(0y&n
z1WhU@E~?$P(A6?KbL9z369wygSMlEHWLMedyTpC>X$A+SB6JvJe2Bbz_lScAh}l5X
z^NE0r+{}D$qnb&b4Qp+Fzyv1cjl-OMmd24fY0I-_6p|z)CsuI*t(aJGz2{OQ`Zg01
zGc$ygrY14E@5Aid@BV}3+d;Ffho>$m6k*LgPO=2Olw*Rl+HmF5We%0w<rGguO~2FE
z4!OY0RBQr!9>yFZ5s6Bu%393!YD<GNhKFjOyesnkJ(j~#Ju@1Nh}l0b7_D0_dt4N0
zYusJ_j4;1CJJ~9H`Ujfgyt|bZ%HdY02KQvmX&6@cwT&O7B9g>lj)~a50MGe-BxnuF
znyQEDWzAJUxOwGNHzx}?2Bd9eL!zT)Lqo&TLJC~uueq{an!$ye#I+x*j{(h~EcndE
zjogP_twr->0E?ErMla!ZzjM%yib@<-B?N5A8bNKqtv$P5SHynwB&WkJh-P`)4j=RB
zRM!Y}t=Da^<-E=OdTp&f8^qr=HQkbV?cWOy!rI!(QATr}N$JUSrxs9(>dJL0QQl<1
zK~<TCiP|vgQ$QZl(-A+Fjax|vB_{eq8f2I<zphe9Z*DlPQy%Q#{g0GR8%r-lj3JYd
zjTU)RlNxG=>Srqrv;s@6v5PuYD(6aG2i=oYi>>faV!9_BnfTvGL<|fPECra?jD^ib
z6pMLHPu<Dk-Zr@)?=iuHH<LQ>hg`G{VhRV0-3`mE<p--yPfQ`;0v0`N9>m-B!mu?I
zR<-v0MM1gk<X~}==M)SqOASsF+bSZDbG^EapDq#NIE-rZuY-=~6yZ`*UC#gfl$DL8
z)vguH^*EA3b7Le|!>(3@u5qJY3q^J~j+Foaf|YyCt#?6?&+WOs0;5cJdWGg|^z@|U
z<dlvP{}x?5oWt1nTkv-;5Aeuk$U}e5N6k#Ev2lNur8@%*H9tz|M6(YI2C2EJwNvS`
zYLL606DQ<DX|dQWgJE%J2?i^qQ)zX`qc9j!%}hI~exiSoeY_&5q1fZOhDRHVr<J|P
zxz?<lKuV4V4mJ*)n!SsJ!r_sBygh{-^u&=;Pz34QCI&u))PuX|)ft9N=5gq4d0o?`
zd{3c5`4a9FKdrM3Zz!HmDy-q}WP?WYUo}Z&zT#xr0cR!Tsz@~Is5E*t6g(_M!)Z4d
z3qW|Ut94Cp<NiL0%9nPdee4Chg<WfBHtnj$DzoV%C8ONUiJz6pO=2;#)gRjXkz?gQ
zpb#;NFuBc*P*DU}SQW2(w<gB!qSL(RxLAz(K)1LgSePihNrmY2WOrQrX~(01Auz_F
zR^ITKoFEn850)eKY#$0H#sV9VwRo*7htI5+_T%MdqqPPDDq2OQ#fIMG2Hv*lxlFa_
zkJ7k#PE7pUZZR_fLE;t7J0M+jK7Bgr@a;R2PyrbA$Yu5U%Tjswq~&3x{9rK6zaBUj
z8{GI_dw!;EDS#V_tm&u=?%`bfGGN}BGl3}+#lwgiE>CZ(Z-8NJ92TFGkuz!i>h(rF
zxFekRmXZW0McGTJo+%!NxrT#QjcRlY-Y!R8G_UhBTg*>0oB!1x8=s8lFZYQz1A}Ly
zQ`<K@9OoU>A(!KS2~9?=5nj`Xq$(@>JqHMOBd2?>F57}VqL%I_2~_UlY?h9!?B(4B
z;L&!kB2bovM@5JVs8gQncQ-F@L5x**0Q}$nDq}@EK2A+5f8>L?LMLxA0B@={QOo(h
z*)-E?bz`5pF+3<V{{+KSX?D4aTslGEf*uM&;FAW2I|-`;wE=fuFxr7SEP7H-(a}=}
zLC`yThks~QAwZpGMAfI;;j>F00GHV|TGXXyFgX8Hr3CAAy|tDBwagh(aV_#Y__3kD
z3F(9h7SaH$r;kqnD+!nSV_(>~uzfcOxR2c&a!+iZaVvUMw;oIaSs!nG9}`j5|2x1;
zRhE46cmx>`An*V@t~tpy^}?&JC!e_{A=p;xxvm!9&W+@aJ}m3RAms!H4Ja-W)1Zo~
zB?Xb!ymSebYvN)e;4`Pf7;aKHC3k*2k}!MTQ%WL0bdaI@qVxu>t#M~?A4((Mdb6Dh
z+${biJhG}QLr_!fINEyf9fo2eqf$*}SdJd4YT2Ta!1D=?1{FENBbQlI+2nr8ZaA#0
z=}v{A=fwD+#ZsJCAA$tyPp<piFxfR8|ND$0H+CSERNIOLJzT3$QG@U4GpqkrQCX8L
zC-4He>bzs;g-h-J0GD#GaA{eGbC@Ej2<0V>>;vFB1E1rSts&*DK=6<|Es7fEE?n+e
zGJ?P!`P}`k+U7l>L9+Ez6U<z;n|1fty9qPC?s`%N)UixC7)eYJh2fUH?t2{P(#;5b
zA%EryXTc`T*JrBI@vbtw_J-#g1@3OW;U|AQZL5jL;6{YR^3!c(w6vAHj+><E5EFPm
z*8%ce>4wdI8Jm(DsUiCGlYOu_T)Is_%8%z{qwd>=g?(Nlt$Nk)G4Y4#*P*RifBUq{
z+I(XCpU+Bd=k&310rp`&1)h~)>{F&|!(rOI=)WftdI;PywOy7>%A6AGTYkMl7f-Zo
zc(%Mhb>!L0n-IG?WB&j%p8Qj-LCvw{o|Wx=3w2^7WC@HPiE?Q+^Z7HD=Z1M>9k!)}
zQ*g1awonruAqy5dCQ(k{4Y5C!C_Rb2OzbR-z?WD}rVH@>#ufQcTmVsxvO)S0unK;`
zAFqq=*KgtYC?KomBqlEI*}!((=`w_tHgWCuPNW9tlDSo-7uAAQ0T8Jif*8zF{nqL*
z&ES1KQF2@{fS~DvV1XNQ&t^Mkz>W7v5EYBx?H@^%iF|opucH{#Fv}+9x$aCV3S_dR
zkJs(`+dtv>xN4?vi(eA#CELET(UJ2K-N6RskT9#Be|`tOYE%<+_zPxQF&aH2jF)v$
zZKqm9N5^KLbFaTB1<lr3TzH9XAF49#tOFI9xpte8^B5F6J4w}1EvEq4380IA9K+}Z
z-7Z|@B;bh(YM6g8JpxY4Soa9tXVI>#>O;`-(wVZ~YdlBS%>feBy*jqio=Y<F`GMND
z|A=Gq{MX>BJ}bbo`=uArT$XX;2PT(e@I}Lnu47+F+QdahkKn5SNVOu3X47Z^swhK!
zDsfoM?aIE~*v$w5%(Yky*n|f7aT6871UeE@EMC^!*>!#peEi4briAOp4I`8ygt65U
z@GuN1DcP{$-n$Mw*S($Nmyg@8+<{FOx1(!-)y{Wb>GS27vcw?ICl=yPp~jl?Oly{d
z++cECa`0+Qd&fOP+jn)yJgnfVDCZ@^%B;%+<hf|mH6_O_lM;f!yH?w8pz3!2Nl)?%
zn53w+2>Q^KVhN5OdxWGb?f!aOj?Prw9vhRH^IU|N(u2+)auL87Js>8#RiV;(-&$ka
zcsr0B4ts0ZIQPZ(UY6}RE_IS8MNPIqzBN`aAe;LgCXPvB`FA_)-=8mDsY79knBjG9
zv-EHkm=zc5>8st&4#cK(Ty<&;$5<Kr%XA-QU1#_Tp$*TCx*b49%h4t?bRSq|@SRIE
z{iW+8!cK)^qJ(&qc})f-nmRSh4HLULWH!B*e2S8NpK7vz5Z`;=uxZgTF3lky6@nn3
zY}s(+fS-9UQt|1_(SXpyv=hb^0IeHHP5kx7*&s6jKNE~M5&-<7+}6wv3wdsNflV%(
zy(84|tZQf(nC-A;aQp5Q_fzwgkSuxECzSA_Sw4rEiwWD}+8?D`=^oVE@i-^ICu2Xv
ziD`t>jqlIzlG0zgw?|rEsUrU6Tpw#YGf&yeC48KAaCqG6AD2zX__w_1uN>RXeB*40
zCQ$vttuH!OsX+jg0e|3+o8`E)t6nEcVZ&dwR^30$5L0^b3naHZ-*i-lPfjS&W;E!Z
zqN-u8GHav9s)yPw5U$;IE;-i8hlcVI@c0$3+RnwB==HbVz^~iSyG7RVrhqv2n~yYE
zn(R?@wIlITG_zrTS?q!{a*S8eBa<|fr#rgmf%XSM^*lSqa_^)HOX6^21mKVP--GND
z6Dj!l{<XQv$Wv=yvO&IuJ?Tq)Y26LYGCo_Rae#K|tN?|mU^*fTutyf+XBpfWT>qh%
z<F@6iGR=MN{j&R3Ls*9m5}~r-gyjv~2#kE8e1U2XWtaK>a%`rL?JBPzMfz-Z%dt%E
zmz2w4V8Dy)phK{1U|PkS9x*x6cB~VPl3^#o4JBjG<k3J|!V8WgJ>>U%!?$YmBvqS$
zMf{10c>BW`q=6a5<mOk;K`hTzid9WcAe36#>SCHlhE)>Ab;kR1w4b-#)23Szhpv~d
zZTky6;90KX2SxGL^wYDg8r(%1E9wFLG)+w>{8CG?<(yDCI@zeU^T}~Lcyx~g2}LBM
z$LXP3%Gr<E{s3(g>D$P|IK6ilXgWXai&5{+&*62)Jt#jl1|%nx?B(gt@we>YQrR|b
zyik{sOO79nDE*$r1MuOKBSUH0<>?qCTx|QX77f<q0;xk9@F;OS&NW@HzqP$@P+#Dq
zM((5g<V&rSDYLj&u1o%LsFI|l-WqXi6D*eX;7&WXZWy0$>Gq~w8GS;Yyklngp3-5P
zI?Za6?9+IkF7^{+bn5C=uOgW)W1$!GO7S+mzI@RrY~_?-A>H8AIj&4GOZ*@4$Y&9G
z{B$CsHw_TV#vj#MsFW3*DESQy!dMLl5nb{ogIO4JGAkaKkw8ca(FcxGQc{@xx|^N$
zgyThGFh_(TYfW8Zi_Bt@5w^e50NISXWM;KT2zoYsUhhV4>8%<X8IA*uR<#5ClCu1#
z?zonj#hB%xp+_-2Q)PB5v-!8={IJ<hW#rfdL7TriJ(!K3r*Ge*5zu6goRS!7G|*Ah
z$rtP<)l2YX+@Nqt7JsS3vmNfs@rqn^?wexqn)_3CqquF^|5<-oj|lLrOCfl$|3pSf
zqxPH9BWCEirM@L7V=SIMdn52o)$Q})J%ZytL5xW1IhsyOW3n3@8mV}3x*=Z4vegWA
zgV3iawqd8LqHT}af(7AA1hy#YULPW<s4^DbljRBW<G*dycHZ@{{F@+{DU}@Dk0?^X
zZqv)oC07m)vv4Ljee7*F+Y5X<xe#aY3#&xgKvKRlB8H>Y($TFvEgDZigWvs0rC@Nq
z(=43Xj|U2MLWEC_zI9+=VDs=^R_{EJ9oh5xxZ4+J?C(^|2Gz0-k4m{fM#Mn!$d2I_
z$Kk$@(&Jc?YZ67Crz(9XQ2Q&Wgds(L*efFWY4knVkoSh)*Vh;-tzvn#$yz{^O%nT^
zsn6Nj8QS-I1L?|>C3ZRs4BrOk<Jha0Q=#-R!EbAujI0WrM{heDkf>OHP!M)ybIVE9
zCV+m6g9`3F+OC8`N<^hxqV16(@xGPryk`J5CYEBs69)<W$>_6pUelBG@wl$lHPjtN
zuF$v2@qnj8@052rwi)j<&86h~ev0uj(~`$F0mf(}jgm%}L(yVb;JKutM(F~-z>r>T
z;dC^@F9aTQ6*|y0OtH^oug!ly%U3@WFp<28JW`jSUkUkG2n8Y<YpG_;Z`*Zg+jf*m
zgVw!uslS#{f$LH$vw!`a6jN0NSFW>Fuz5WpK`2w&o}jVZ{3w?aYTku&#aP&uGQ)y3
z5<DW}<{oyLS$esNdOEjS9>70^#A3`BxMD5o`y6qoM{yMwok!!3miz6VSGvU#O&|bn
zagGP_Su%0C>U6YAEqQ5LuZ@IcAYVh5U_e4Ku4TtdV`SiD^4e0+RYI2zJ|TDHf5xV)
zcEAFT5_UP-p6k5luu}dh`T5vFLdIf+cyf*2xlBo?#_;mYc*=DQs*6!gm(umb1<3W@
zBYLupA1+9kW4!jHnD9I^WZyf-E2a4`^(ar3KHATAVgT>TthSy9ba0+q*k6a=Hqfog
zom*A*DGMJiVwumzF>`lC&cSF3D|Wu$E)YDw4P)VS5Pa1AgkTe#9AbB-|4z1^YQL}Z
zxgo1b(~Nopx?Z{4?h|3qgxHfRh>|DWcl(E!Q9>J8%%&4IQYwv4c7#@PFkzY!rS=w^
z*aq_~MHsr?GqZiy#)Jp%AATIt8?H5ClWIF#bTGSxfQ`T=$8GuHv6HUG4!P|U$J*71
ze)@epV8GTa|I+?x;N2}NwJ#1!5cs4INRJPPvS%%_VXEMd;YtiAYybk~)5mqWkMPYv
z*lPr8{jJd@J%wsy00tOvN0Bs!3svrkh$Mj3xrS~Uy10Bz$aPMo&!A8$(S_(b_{o=!
zkOa;g0DmJbd1p33ENO;LuUSF9$Ydl=`Eduub9JJq#R$OeT+WYHM)*}RYS%NBsOR^h
zN$1{1bC`_?$mm$(n2`KkpHD#`V`2%mrvNUesBCpt4N75s6*xP)Zhhz!proxB@D{`4
zYEyN5o6RQw;65_sZEit($9hN^68puAiLIuhN=b4L#S^O*-EJY$;6E`r8s9_U)MzN!
z`qvN}7h;QuiAeJ_CNBnRGwX%X;x;D)27T-|SHm2~k+kg<wPfDg*fZYncVKw+8<(9i
zmWrfiBnF2LVT(uSbb{g@hyKCDc=CA=Tn|$IFqWs`IM<CTef=N9&3Np+r!!ba`1q+X
zvG^?06^C#Id?6rwW&=TDXZYpoGMEn)S70a82>hOZt8@%^kFV)IsWU84oZ1Hmz%Xr@
z<qv>@OP@UWFypkN#00<6W7+5#Kpw?H@xUbs_<iA>$y!7L6WOptJq3WiR=Q2`iXIs}
z>P79^V#{*$!cwO7{uOI8ajN6x*hd-iPH!a_cyyV+7BHI*<UU7^9t)9&pdV5n4fGkc
z$71phRy1I}OL;l+lE8CG=e<2ia$GIOpv*#K4z7X{4Wm5SjOT89yUIelGq87x9mqy&
z)3<a&#Ng>tXN|+*Q7v!DXssG+VcD<my!p$Y+TvKJ&2^}G0j~>60UP0aY~Os^FBVns
zy^^l9!3J_=sYb^pGe={>(vX67w#g&;ihv2#SI`_+I2+q9z=yy}KK;1UHFyB#es)&r
zT4N6bu<Al}0hM!!VLM$_`+i0YE`Qo_hlH3^sAA~3cWdTj3d;ue2S}YRL@{(xW9T{O
z&a6G*u&U~M!w;W%UCtf6C`jPLlMJ#PG%f2Yp9$Q@9@5y)|Kh+JwL46++g6=~D3%p}
zH65>q&#lhQxyhb%zhWDkC>EXc<2)<tnOJc!Iy@<i?G0u@o@YBtaqNrK!6AU*Gm|zA
zBt*GiDMVmhebM*ueY-@!gy<%f6Zl}&T?(}Yg}5e+<9Ce1^&AzNK3IGJx;V=AohSO+
zep|K{V$V#NEx(MBEbY1NpwCaQpeTCnns5B}?Q|tA$o60#>TQzxY^^x#<=*!Cw1{lG
z$~`%;)R_(pj0YiX0EgaKu~Et2Vul;f<j7O#*78x$x;-DmmgHnVxlfG+HA`#-Jhf00
z27Egl<PaA<anj(Mf-y*+lvGqH2m-I7x;_tZFRzty8>`t)S7OX?6?oQu3vn+p?=hZ4
zSfoY40yDAYMPu~)Zxi%wy++3aMPf$pYPvpn`*+@MxzkajgG9I2%enDE@Edx&{bom-
zB=7>tvb?9T9{Ud%M3;EfDJoT3=3IBDW6MP%Dk^M=b8Zlfw`tU;olnn2pU)lFK7^$?
z9(bHPDg3*b0^bfy(FP<APz5I2m3AH9>j2|ZEKf;ax(_+J2;*Sr{f0&UB}*TCw-hki
z8|T2@(9e`hkhdbJRm4Z*Cmaa05fDb>zoEs%=NM(57UpqJoH26YNdxek1hAuii=2%6
z^Q~d*%^-sz0Y1DvWtzzPs54ruj(Qm#lDWP|9-PN3Vna96M$_4Cx4l7M$!fa3vV2bu
z4(pe0G(3FF{-%KRYb7}@p`%YWInzn^->Z1idZ&)0ETZ}npX+wpL8X;Bi*_Y40L-H)
zt^DE3EW0j-Hm(?_RSZ4feSJZI^jQl12T}xHxr)bx$+ZuHl2dxpi+)yJ%&NF@kmq$5
zf`Qge@%vj2N9JO=o1`As?O!RxX6@MK&6L3kscb<z#OuWQk~Q#>9<GI5zWLpUAD(>1
zxf%QxzU$Z1{}g@Yg!zOW0DcKEP!M?kty`mi%2gio-f%q6x$XUMGnj*gVr?Fpps83A
zEUvTj_KtpMGpn1O4nRSLdxZr)=5Ql~59VjULX_PjE$tqalCIwh@c>5|AB^CsVC~F^
zTTPcQk?qp${y0L32$xM$D0EXk<G8mM?H4K(YUeq4<i<Gv)*AcT@zI=hu(<G95RE<N
zZ@qyU`J=T)ku}7<rpwih0acRsMZzl(i$z!d5zCvTSWe)Ao3y+E?Pz+cZ_u;0o+Ce?
zwlDCejD~+WY?+q7kjTWrpt|$p=+1sO^E4GZ<LOlKp$~!}L@mRLj0)>2Y{4~n%Qr{s
zBODq3kIxZ7gYmY{Q(_$dt1`U6J7UqKC%dd+#|1M|ZW4Z?RZYe(S4eNVc@2CVUL?k-
zEK<x_eDB%MvjPj8&*%NP3}&0xs@o+Df(o;suxQ0If8`KQ*I|^CIGlrW3If-4m@>)d
z(NRF!$D@F7_sc7eR49!sh0-{u0wUt?aV=to?&k`}l3w1NsP@}i=(h7*hy(tz6%!ML
zKKCe9z@T_pMu@)m@Q`?)x@VK--_OrCKy=kj#Wju#2t6`9r@r2hzdU5`*q_!~R+Ejb
zp4G=jww=JI^3qQPR@-pw<!M*K9Pg7a{G=>K{(WR-1FuGsXuWT*Yxv~1z_B2wLw@Ju
ztCsZA$UV*7)Q@F6H`$a^4(&qaI%;a3G$La^7U9U3JB+|-#igbM;M1hUz?^1U%wG)2
zW%t&eUV;QAjO2I~d2664PT94&?=o@*to>%Q$Ec^>BRBnsDEsAWO`-S~mQJL!zJ#xS
z@s?5hu>v}=0hy>lV*}n_Kzx4f1E!cvju0vkSE-Iq!KJ!)xbV|B9GmWZ_n#QT=FS4s
znrGh?dv}C3;4=Z42hmt^fmcfUKqF-Fi4e#DFU6$<_@9`Q8{^)35^s4fe=N@URYW9W
zv1^paKi~J&5WH1_ZU6SQagzo|FNwRmci>K2*KZgF4@ops_PS;`F2UW7*nKJVurz=N
ziHjNSOR$&>hTomPU3U?EFD#@+qO1U_eyzpf$NFE9@%>JWztOKX7thMsJkGO14F(BN
zhnzR+jU;=1`8nu=uX^HHJn>6Rj;xI)b#yzHOQY@9SSZGM7;$!a+x;gK0cpImPkKv*
zyi~zMpYKv)12F-N27nim#gw<kp7pvS>v@)kBtjZlXt{VRAWVf$rydt&Xj=OE&&vjY
zQrQW+XFz?(8y1fp-4>3>Mnebk>(ykOjwr^Q3Xg%3R_*EZGGe$%V^t*Ob(w}ifI+RF
zoDhkfTzSTzJphcwfSJDLRA@i(XDRhjP*?=h$CQ?5Ij>qZb^Ir2qjZ0?nVvjKY+wIk
zkZw5U8Ix3&8Sf^qnMb#ylH@ff>`}&x@7G5h>RsQMvP`czge{p;Or+wuFfM(IrA&gc
zaj`)Ft7a_co_v#t$kD*TlpVG>J}d*1ewMwyF%+*j8$G%5@MEC{7{Ch?fc5g7xK)Xw
zVkQs?jZIK?f28UMj`ui0;N7r({#zH{KkZKvn5Vp!Z7jnr6%kPnGYyPb9w39}c7iR!
zS=3c|8+p(x5*x5w8MKM8;_||e5o*`@5^KmGN`!#DU!$o*dT7twdn0HD+UD^?KR#)(
zBN_d!6Sq*<=&Tlpx5UIaE^ybrTr<0kr5*zsnE8=L4Slp|6CqgCmBS@&g(=<D8v|K~
znP4C^M&Zo0NJeIu;;Pu}J|N+a(&XTMisMVcBE9ih#-&PxsMp^}w^7d|iN8R1Wtc!*
zeE^T&PHjawDIy?^g0oo72_i&MEX2b;*&ex5hpZwIJGwJ!lY>X=6)u;sn3FISM*Xu&
zSBtpg!qtDBjc%Kao>wb^2=f$2E@cGYsfgPwWJZS9mq9Bv=)Felg0kQhu1l^;ORwSx
zVt%5&-m>fpz4F>%U}TKPu8Y)d!zJ%F^#Bm|5`)E}SlxZ(*}AGzjS048C8O^NI~eao
zvlM&fw_`BmeIL@X-7W6}kd9U~p&eYspax@SJ8jk3NfIH#=25Ivqf0rj?!n@5_j;yX
zqR8_tNbeW$eZw<rh#u}63KEKAAJ2R@Wb?~>;iZIxp_J+`zxA}WY&ZOy(b?68M>tD@
z6|YYl`7+YLA1K6_`CjnHTU?X5!;%GZ6<tHKR!kNB<#S@_Lm0BUof{=FQ8djxi_n5o
zr`(m3Lio`{x^tTEn6}ImRuydCqS54)8-r!Bs`UCE0>2eUx6-si!cx&*Y>)VSFex@U
zvVKXvf!N^&mbWMzrdG?YVA?!!BrpRkdwz%lzce!mG9zv&omcZ#vQI46P?}KaVC(`*
zLqzaie3$PsMvUxFBtmLoZ7t>_)^dN)?47h>6Z|ARS@LwfIa(?sCSY0xf|>~?h^EG<
zmSnItq8aiG+Lo(;gGLd0|I3dOL5mfa1BIw?_Rs#=xoryN#jCx72!rNDRJX8+3Er7Z
z9KMj_6CVNy&*hDDnotj`@hD-2?>^aI_N43Pguf}NUB@`UOD#HZe;+uu#{wX(N?rR}
z({~KRAnY^6aNLgET_Fa}R4SKR8f+{OaWF6{ukMU>QC1W;y8I2(vR%g=7=2}(<6ubE
z@*~H79B%{7h<@aMsvH_9pUOf&Df}p~>nT`?@BsLJJaF8Ne#kr|fg-GkurFdb|2(bi
zAjWeR5|?jI9z8A1CA?1_eB|gLm~_NHIf!Z5h^otp9deFYyS!CHohQZThGa_ReV#Sa
zmyhBd=HAAMyzv;gcPgp~+;6!10oKki67-ou$tGg9S=Jzs@2BSy#e)^vEtg&!v?j!8
zL?+<Zm4%=A1Oa!(Ac5D-a1_F(zjj}KR^J8&`$ouyz=%HreM#xwODn>NUTW1lnjp1m
z6eo3tF96_Yef4{2;>hQIAj$T*SF%j^KBBSLJ{r(k7Q~%=c_u*^Z`uA>#+!;(;6~uY
zJae=cAcR|KW9+!S3J2Cc`4r}92IutcrGLD)TB-)1oj6lntTd{LrY00_MccZp(($hx
zRT4d?w=Qfs4xductm7@<gTH<Geih=v6G?CTiV!wVC|b&*8Yc2{XN4WR{lz~P*{=FS
zM_3nfK?sIzHVQwU&yq-2zD`QEGq|M3*WL9gebb3JFJ^hE&A|+)US(4+k%LdgA!qx@
z3iaaHT_w_(6{=YVNSZB{7xPN7n$!NInv3rfQFa!gmGs8ye%|}}AhSe7fAaAIIi51j
zfiZ>wOIfqpnUZYX>w0tPLz1CTl$r6lrvJ)b=^VCt`Ea79J7I(%>?|niB|mHA4<f};
z-$E}{47&yQoyFA}qN4Oyb=Rl3$3x0-T_LmhC0JYJ<^BU@F+=sugEwHt05+@7*uJ~q
zQsT4SPzn$vL>i5N)vPZO($@$|c5HQvE?7(?hBZ_k=F6|%<CuNGW52`L6!UR6^W`*h
z!15=|bL{P^p{3m}x^Xk%LaZ0^{i#QwAKh3FGt(>|Ph`oke;Gtft}I=VY0KSaEd`6I
zn@e!E+zQ~*9~ntKD5+$2&RFf_J)gAv?ahXCoReZBpK!Z_Sn-?BU#=233lwIO!X099
zHd~vE`d=!=x=LQK%vUiR=VrRTUv*rY9Nw;SS`l^+-Hf@lC2iFBwR=CF_8gYx`Ld0b
z`}VPucd<3bH%=Vv$F{~Wv@WF1L*NJc=0=4aVaIKJr`KxJ|4@t5Rz9*)=Bs4j-}pY?
zm}z9RjPL6zD<^ZC$8)S+POeDFO3PPtkTcI1=Huw1$vw<Ca(%Xv_~0A2c)vim9Ui^a
zF0dkAFIH^wC&l($b5B0OUU$DCVg6=z<4J$!mAv;4avh=CYO@8O;DtHJx*T!!xhY;Y
ze!aJ1^gG!Ux6|}Ts!rMuj_h@#jGixGW63>FvAG`_pl-3IP7Q)zg9w9#S8U7VzVm`h
zAJMYwKzQ1p6<`z)3d!;r`mU<ALNcfBwzYxQA>|Ka31fG4K8z%&Ama;cpXr9d0N>;6
zFl+!2V9=*sVbV0o@7{3uO7ipvdW|*ssf?OUV3U&9x1d_R9`W4Bw&S4S70B}B`R>yZ
zVuPwsMJvaN29<7fKTJc^Hel8i$@(<h6Up;O!Du31-iFMG(St7N6CxF_#c}0FB+{GZ
zUk*f~MIBUFmGtG3_I-q3Gr`$v_(d-)VU;Q21wxI=v9xX5%)q1um=q{qh8*WACsy)G
zdNpo2E@ZEKDlqL5wv#EsA<%9Gs53I+gFcj7yg6(Ld5NUh__s^!S)a*W>t<t)Q7R_d
z*sCCYc-s?AD1ARCudiCg`_~`3_1ue0u=8u0Y&ST3b^=ms>-1oNj)SA>!Lc!p9b3*t
zgkLGx`8`rgjMu!tUIU@vjUK@`a<N<s6dN24Lco3PO%uVnHSYd|K~CP)+8Gf0f38iQ
z!|UV=VS;46j54X~mnAS4-)~i!;XZorA^wDQFk)e8y3Dr0?57O6z9dEM{R(WVpYi4K
zFTcJX?!6D{>|B!mfp9czIkL2K7JITEc%3PBeVpf4Wi8yAv;)iQ&wy(Nt|HWxc)67k
zmOqEc&mL%&b0Dlzk^pSLSH}DYA(k6+<?Bwhy3g>#{O~B_NqYgv)xp6R!Ik+tYgS^O
z-e-q_X%;5lkjrLULc-6lTWqz5ijgL`#DP#Q*0xZn^W&{5VxY5C>8{Z5WXGn?4cZmI
zZDG-o@J{xv93$5cq+|A2(8ap**G$O;YJLn35A>tXbxWoY$Kl&y+V%nO3ajxG9tgMY
zr9^(|F`y!YiSrc1!E}~s(IoA8=Upre3Rb!4$d0e&^d;*_;Om{{<ti&K89Wdj#I;GY
zHksWS0?ZQ@RJgVcJbF+)T_ai}!)SD-RWg`f1&SR;I!tf@EsSvK%|I|c*Gh+KSas@s
zxR4%A5)(_j)f%}~a!=H(f1d2;p<j=;nJ@VJ$3%_aj`E38vhwmlUs@q?liU;CXjoFC
z2Rf9IV5p8;?#Zs}9IsxWW9Q>zT4H>9RZ-_UvfTGH`ylAl(Q!Q$JL~229Q`}uU5oEc
z!3*m-EC2S3sMBp0lOq?wa2}i2y_Q>Th{xB#q0akr)oc7u5gT}Uay$#IdMzdo?YTi?
z?%8nmlL!0g4-8$PffGOKr{=A#V$2b6IWT~qe#d;*{e?h}TIhSW@&^+Eps&oxA;H8|
z1Y2nso-o=HYcep*M;6M{!EP@YuP@r2z7f-H>;1>yMzP^Wm)#KpzcAxg=^Rv>VN9iP
z7pxD@xS2o2TX%-%cm;6wcif8Q<!9KAzh;xoKVCszP6k>Q$5tOWYw2h6u|6p^+O2;~
z*Q+D66t3d$C*jx0^6lz-JZ4CwRP!#WaI>{?n~`-YFkxa(+wIp$FEnFg%?jXDZ^raW
zcl1xq%!Jt}X5jk0*Wnw5P}?NAVTJxUTb5s)uLutUhg0@QziEbl_I`PZTUnA6+b));
zfU%8I+Hi31bDZTrj1%~D-aLMh3YbElcIV=vNiGB@0W&mI9?0bNP+JkUB#(Mv75<Tu
zk%yq<3!Pxw{a}k`b!Q40W}lw}Bm0z<9UDV^-5(OA{83gvBzR=h7btd?*&GzTt^y(#
zpqHjcx=(R&x;4dY6l5|vqet;wPf)K&U_15xy|=<_Vy+4CL;)7E;80yQRGxoD3Ft7u
zQy5aaEkz_T?tu#`?By;zn7~p~IPf#qYvlU(HtC-=r3gy57FvjFt{w;kEYk1E8ub$z
z1#*a_?-<w$3Ev_^EH>fq+yqnv51HrtkzHsj=UO2v+|M-nl=eupdA~u<V!drv@sSOt
zBnc>9N8Z~}6l#<+SO~}PoZN7$UBuy$K+)X`P5WOXm`y=*g%WMl!oP8r=p}oxPBOx4
zz`0-KYutN#cW=i=u6z9*GqZr1%;aaakTIZPS#g_)?7@8dTU%dBEE1v0sa#rhL`sLi
z%5n{dgLs(N7T<i1ufH>`ZH2di`^gp;KnPYn@3&D=9#F>K_1D$``h?na=FY!x?_PCc
zwZI?kuJUc58w<-@JdYq8@<r1OXcz4%9XR@CC;Iz|U4F*A(D4s<c=VlTvFm4OoZen8
z6YK$sD>q@oOYqiUl*!RIV0DD(rZ3{F87Sog(JFK^x&bQG*i&}SbGJIKs~UKLW5<IL
z6>4_xZ!oKVH4)>X!MWewOL$xoNgO8_?C41AP<J{=`@!n*&!0aXdJtjt32^OO<YReX
z-OGZ>DoFu6e<d_LxU3HvVN{&3+aeeHA(paXYnYw>;BwuL4kWL;ben=X-Nz60avQ8E
zuA!WXvk=hYZ2Ns@DG$#X1pL=F?WqEQd2KnM0BPX2QdA!f>X&UYxp(5sxhjGwE9DiZ
zEPL#oQfP*hDq~a>Uz?Yly%~IR=wEopvc<&+!BszZ_6IUTyP6>}!8{M7i-Dcv{62*n
z6$b7x3UIbKkR3(TyDDdE?DVXwo*ue4kG2c!V<zMwMEIxt1v9~<0Zr7QE9!FKgNSy_
zK(Jd^QcF`de{V=G7<BzE_0%WhdJl$&O5#=rDsj1GW8|nZa(Uyy-*CDo1B1keVYQz!
zXgNLTf@E1hXTWwE1VM{E8z1z`sx6d%uvoC@JvDc?VVUo(8}K%y|B4!2*7K7f>U}h?
z7}-R{U9i?hWx_Mlx4XSkdbi0W9U?n@aECy6GfEilse+Om-Yo5(Qxi4}6OPmdeL#zU
z!I!+#j6nnHXH*EF*T7kiuqnI5Q$0E?KSm{O9QI+_5A84~eoJ;EjA7+5x|-g>`%X`>
z!+sa&{j5z=i2c#Ny4yRpY%k+;&*U{4cJ22|n$<UqiPYu{7Nr8IN~=Y792$L`$F3&n
zCj+0}<Azba7p^=bn`Lq{Q9-0CEN&|1QNMCczsXmCLVy-0E&PjEJEkd0*mlTY`Br_R
zP8G3YLv8S_04`Dv5yD|X9Aujj;StK1f|j2ysbr9(n4Urq#0dQFzXyj+DA)6jw#>fv
zc+(QNz$R5mf=0T<)6R|M+mY{ta98B8z~OLr{&<?>Qq0o#5yit^K%C`^JxutjgRO=7
zN8z?yn!Kql3;M&vfs@5ZD&$Igr$k1PA@4Q6JM3P(8@(1V&dW?-S7{SvigD=NDiW}h
zc(KBIuz?Einfx(#Sy9w$vW%h5HAwePX(G8^>H`ny15gGWh<TqPY<ks|Z!e+bNR0p}
zZ`60(Aq>?OfHws~k4)+D3dc${5N#Y+gE&bL&9G%zPHwsL)~x&>?RghFl+Qs7_?5Y<
z$xHWvXZ}2;{oMa}cCSjEcbCv>+J0Un`{l21{$+f!x7>k&w&h`K*TY3WX-Lhk+7jdh
za8l5PS8L;L^!3l|?sd4rYgNKRFTv=ml3V3zs``@2syBAm^16GdQ8<Q<0~^bRBVfm5
z?a?N`=wyh#Nm_JTLrJh@2>l3yFRp#kDyN65exK{n6IeCd9@stOlz25I7qS24w$CXi
zzsbZPHv<gLz%4^KFu4OLEol}<XBd%%(r)BgmlCty9VnVYI;-Rp)@H}VVPXImW|Z;F
z9&q<3wjlteLOB-^54t)iUn~C_Cn_6gy)X>U9AY}N5+CS;a-v(a{dg62nHY59Z&^kU
z_(S}??f4JzAF+L<97<B^4ZblCj3i_j>CyGuk%)nJERpu~bn`K3xj+Ng;`PwL`K0zt
z#ex7H1Ws$%Om8Kb$udH=r5wBH%>=b0|Dr#~NGtVyfPC4A+>A2G#?!!bqT0ny>C?;~
zO`<b*Sa)!49;8OTHqzTHW0!jv4lHJ?>CG^mdjSO(faT@E>Gw4|Z_C8#n+zaRGZB#(
z?2drta<dUuI&|O^lIz}(3MaR@Xsv5^x)1iosnx5_Sn;fr?-)T-x|Aeufv>_*g0^x;
zTz!EwiQw{WQg*Y>j|VlZ-trChN`2OAiDUZ{Lm@&h`u$iyK%b&*Fv#Hq!Yl22%>`+O
zW9++tO1ase{Ia5gI)le8_toMr9E8!Z2zyr$GVJ0pRTCG=GEeN+cBZ;5c%g}_m$UXJ
zC?|X&N>~t4KRmzM79AK$AqS=ux9km|AtbG1%!qmHRXg3;0ebd(*9aP#eM_YZDyXTT
zf0Zqik2zC;y^PT&7@F2(tZ4pe+4bm#^%`C%5XKjdrKEM%naS-If!}n$Az0X<LzD{*
zB~S!Xm*>I3?_ME~^Bp2;S#15_kzOe}R$hDvB(#b<>Q0)UA6A~C28_+fTMpdsPpXT2
z@%1-|0C1;XjG8Io;B9eibJvh(-kqJyAE)z6Jd9nh;5IAc-rTL3TdQu@+u*c!n_Eo|
ztj#qyQu~WNpP2{<4u9iC2O6s=A>IfO-Zk54CAerH<D&bj&6F}{w^T0ZPqEBnrm`D0
ziV94<Z~2#tV@sUGZ64P+Y}SdJ*f;^wKWv^Btcmg7<u6Oxdnx-pBw-_M^ZVbAs=+|J
z@aFl0C$U20o%On%HL69$$pl@fH9sHvX&gUXlpLP%XPV~H=f?U^=GGS0CCiM&xPlcf
z_Wh<aDY^m^H=^7h{||NV*ce&YwTs5KZFJDFjgIYfY^P(hl8)IO+w6|5j#E*`wry9q
z>wfn0p0m%sf5EAbwd%tfHOHEBtT8SGJ*Zv5kco4i651)7XRL6r@#V(q{ZP(MDb?wX
zQ`f53RiAyPcA8}ps(%E9?#A@}F}jK+e9{*&hEHJqA1#2S6Ib44r{fG4AYzeos@80d
zUhYWYJn}R-6bXR=tBsc6QbC(1-0H$lLo^osd{41_84d~qbKaJwBAc&*!HZfyDL$*x
zn>gwHYM$*v?Kw3qb2%>28M*9!YcY&j6KqANt8{i4vuCBq>Ip6`8Im))F!1PmnxYJy
z=i#Pjfm6N+g-2IieC|Zzr2M5Xywfim?w>;_L1JdYys=<H<8koitF-`Er$ewWgk-Q=
z=&gs}IsoA)45`epS3FJYB71HR#Y_`T<%^D?ThZ&IV3pftd~FK8IAz6EJnjKmo_>Zw
zOHj^kUu+yw%VXJ)U*q)F#1AwF?&ged!i#^cy6>pIu6nT-+8P@ru{dA<#qf@1^o{UW
z)wOt#OZz<eBj9meft`Sv6T0i9mk6dhn!8Jz_nO^n11dxCkba3fvHA8JZu+4Qhx?I9
z(-g1AhAowsSfaA8z(FYnFLXcY*3TVzZ#5LHM}i0*N`ti-;p&mR$75O3o-G^(gKlXF
z!xQ^Xa@naEBhp!XNm)}8{SZM`_Yz0wun-e09vnGO&vq4h4u_(`LUjZRbK#W={<9@C
zq7S7?VZs)syN`oWhdf6xH;4urtLng4c>5(}ri7t}41m_r>a%$*hrzo`!O!UelCNP}
zo26g)HiTzeu!^0^fRETi(3(R7-8b7GAoroTCe|H=jJ{R)$kadO@-xo40x~6KdRETd
z#6Ojq+AvQA1CHTq0`i%{nJPj_B91ToLf#1?%AdQRUAuxoNgx|%pAtl`V@<(4&Q0l6
z427MXCHIG>LQ)ne_3ugbUC`$h(g{SR1c{WAz)!+HmwZ)kf8TpF+Ch#(*7mbUKG$_e
zo=wog%*SHwH9%ziqUEm{Cp<uU7dI)d!TXQF)*)z<#xdA>P99j8i}e~7HX(-I(w<0w
zBCMm}IAmt0j6lFlMbM*whP=fHmg9%G)!(^8U|!&lq6Cq(bC}Re`ZAiai4M}p9IVM(
zha(C9fOp2@q|AIzEP|HK-+k73Dt(aQ)Zve5xMNmw@)q6N=X)833FG7L<AO?Q{8<4$
zTo$IyyCwuSzT&qfjFoefJ&KGS84%7pOHuJ?z^@!Jd!4teTDk8~-hZW+<1uUmI68dx
z<<xa{6U7m4RQ7e4?u``@u&6MX<imonx|6t6>JG%e7qC>}Z#u|ZhnCXvGY^70rh~G1
ziWL%){acUzygp>`mug-q;T8J0a|4RIB9nu0RvcWaS+#?IP3ZiSHo-Imi=``4%k7<%
zt2i?Jo~X%#zttZ~8HLMMMvdN4jJ1>}1AxVVhK5y5Opf%i)PqqnKT;}N+sr6)U%K_o
zOro!c92i{hhpWjy0xH%qO^6BY8tvxwQvSHPj3w0r`%qb-y_iOpI*e7l^g+GXQFVmn
znO~SRE}N&9(T1{Sz%ysu{(Qr0p7^3h_j5*_Ssr!2S=YZhSv*2MzoIP{N8npw#eDtk
znu_hpjd44^V}(m|<(UCRElCNz9}qL>IVi$&i-Q5feLKR8KjHCCdN^atSAb%;bdK<t
z1rv07T~?oCC!3tZCe7=T+%J~PT4|5N(O4$G0?Kfgd}PB$kEEA~EJh}~|E5qCJEBeQ
zy`XRfs%TyK@G>k80w(k<L=3VnI81@pSO>L_?E7pR1oM1z%Z`tE1Z0eJ`8AoG3fcM2
zGK@{=or2$3Le~{F=$R&3I}fr4LtSP$WOl@c-R40Yr9s!L;I>tQsTiM@>U0^->BeJ1
zbmEzA_7S4UfR2g5%*Jq{(G4h?Xrw0my@Gt+K0XP<LFqjeUD$4*<~pgg#=m)9ICc7|
zW%BP|tz`jtfv5{*Y~ZgK8YE(d_0#;m`CS~n@a$}Z!F+-u56LHZbTS(7+@y8QW6^Qy
zv+^<c_3^Ze5QVJ24;Hy@Y59l}ckk`{fHxuMx1W2}!-LwMk@i@JNe7`D+m)%;g0TaA
z!6%poOGjbYHH*IunLd2?B^8e{MhB@cm#4Tfwsg5}&tGA04Z}jVphFWU`8<JfgjE+B
zHyhZf1|1R#wWwUsGx~ua=BYp1?cre14Ji5f<vgLWuU{@33gF2}o%PEbgn97CRLj$O
zNb|b3-q7iP2fa}njFtjM=D23|mcMTL;`2cHzU`0VvXVv+2q>|dzFd~g*DHc<ZnVeT
zI5&dz*Wc}c-#a$no*z?coau%NrSO^H2F3*kJirK6=-vD@0>w1Y{{BJR&!W{`CEaA{
zP`n8>#l%>`lA);OE(%F5vpoddyi3939EPMCrwcqc2X+)f4q3vC1_Knu(A?I*e$z%2
z95y0p#r36l(NB#%m9nE1ScmF|v?K$ufQ{+;dcH>o&kC)IRT0rAWq$*h37@YNligSK
zv2KXEih3f(^}H>DFpaK(DwRA#Q?&yagc&&T-E4&WyH4I_>1R{)28BHy*&y?#>=)av
z>}!{<?Bm_b-zq2jbLgjgVX#@Wu<eHPhKZ1-xAO~j!VBmk&nST_i+)G9H~f<Xd@tF^
zmLofDKa)-FvO&cj0QYS8_3KFt4{IbYv(r_la>WeSj2rw(YdW&-ig5Qe7ht7MNT>^5
z`0YNKvl6t_aSF{X9!prq$b6;r?-t6=48mjAg$#Om%RxPYZ$qthw$&#C+0Sh#erF<I
z2^onM|N0F|(W=)6LefQn-*A3U*Y%eC^0${kjk*Ehf2g66=(1Q7yB4@FEaRKOyD=04
ze|Rr6|GX6@qZ{gOE}d@9?f~kq1w_VPP`9<&<7k-3I}Xv8Jjsx`Bsw^3iTeQBg7!NK
zsz2Yn)!LMO4)vl?GV0vYkyDOFO|Q6CF6s(OnpTok{JClUITV6=liKHE6buWep%r6)
zOBST1lENUF4umFE@?cX+OJ&su_&VOCdwD~cHtW@%6d$J-k>n;5v<d<j|L%y=13PQN
z7{`<Peg!;iNDf}kD@>A}$RLyBEP(L_EI<;!XfRE!Th3vH<MrW1(IXF~qQW>Sa&;M%
zBXS#a+5|3Un{H{Alc>NX&)M%wQ9)H+k7tP|bVfpjjv+c=SB<fBa2efX_4+&)7@W_3
zN|8|kZCVlP6{ANU<UjF(`b0*)uCKluV&R>)!NFH@yh*XxHJ5Ir9s`)yf-L&;SUxQ%
zk?`vFwcS0#ugA@GuO|UubaPym^ZNq+q<@W{B{B9VO$iOqtp5D7RG6hm2}SnY`0?6@
zn_PyXfYncOXxqzvbWu9~G5j7`cDYG&I(3Lm#fWi*NOUJv$j*%dwbmzc0WQgdiFd+E
zL}V?a@T;4wZ;2yc*yeT=vAP-x0-xUykdecmrNdANn;XEQ9JyrIk+Adhfp42mCxOuJ
zZH`C22<3t7%o+#dui^(iHfeyj-dGi~A<r2wtot#v*P%YBg-6v@v6P2{>PvJCV~UzH
z_$WTUZj)73j!r6x2};Xou=3MfjGgRy*eT?NHG)267twFlLI!4F;Ns46m<)emUbzp+
zu+4ZV(OYNE9{wA=dh+LadW78IRYpce-tt-k-70p_tlK?LKg6D81=Xk&tvuQuUQl`C
zZ3{cwrJ&0;!_Eah^h9L<0Ep*bs5UICwyha@d48=l0bLbMmY_^_^<(gHv>oj*)LY$i
zM8(@FjtS<1{{E(-ve|F@x?ECRQc~%!OOBmt68H*g0m;9O%_xK-dBU@M(F4Sd*dDD%
zyqc1H>{gr;*6Azs6R8=kW`(>0%SwjEW@z2^cN9v8QD>{w$mYj&orfC!dFh*UU5DWG
z&87=g&g{RW3n~xwjlV?2(5(U19b4+Q;F?*lz0?eQ)ZksW3+U477ISod^a7)gh%Pn4
zpOkZj<i2(9l9ABdr=c9Bl@cIG>dwUkieT*&6|1<CoDuT?Y|~lo7n##YhZ2HSyf^9F
zh;T!}Z4`wH%8b_xq1#;+@K7_4>M+~y2eTd@v3k7)o2*hv_{QKiK(iuXhnAgEUOsxX
zZdk8sWl7M;`rYcSvZ6oX>Y3Q7f1`BeGcFe&81}17=6{6AT~S(gEcwSjCBt@FR}|WX
zacpr^l>ComIaS|_V$3GWnyt^x2);9H+OXl5E=k<+z*bBX{cACf@JW#mA}s0FwXi}k
zAarBXJYmFjtjbGVpj)<yU#lT|k`Sm9850A3B*G`!nDE4&J2a)^2-hq%1N>9k8ZKOh
z(@FchHeY0skiipItTAqvzIfNkuEpK)LR=&rNtv#(@n*zcWoK7)6qJg^;Vv)b(4;7b
z$0x39o$B!<V4goB%M|uH%h=zBiB~I7Tr{(aq!Wu~Nc<akNLTR*hXYdvu2QX}ly<nq
zIDq-IZfw>-x4T*_@Yxa#t>UjcasFaIv6ip2G3ai$Wssqk<L)!sMewA+t!B#EP#p2x
zMgB7P^+Zeuqrq$S@Yhd3GOtV$&m(a%wRF0%e})N_Noz&sg>y~`va8qV)<OAQ2{mk{
zect@%ceglka*z#X&yc%Ap=c#VtcjrfX;4**qK=)u-u$GF-NVL1yqJ!$hL`tC>rwe=
z#NzwAKqtj{BBYo2^8+y*y0AC8d-gqE1L13C>s=}nOSf*RVi#OB_J`_fF@p(n>y(-u
z@d5D(v8L!z5*BL)p<F!{a$$+Wp(&;TxUKy5Tkp!qWl+j_SqH-SYQ?y-;mJc6=J8b2
zU?cDp7o<(9H(2HA?2KS#Rv>cxnL_m=cx5C6)L`+ql6ERb*^`}M8VjE|Ds-+eOpwL)
zD!tG8bW1pFAP#%Hd^*&!Cg350vd9ziY`nXnhKbR>z)wie$nPH3JAGQ<V<4{=0~D0)
z(Qe=g(#+s}R3TYQ4~gQIxIAf{v;G8GR-F1Rep&l*<1uJzWJABiR3wtNzhzUR${IvM
z$oHv1;j^<M|9Ojaa4ZAxFt&{RM_v#puYKg*WC&(bzx8S7c0Zb_<_GB3nvv8lUZqHV
zkW|!7$tru2V;0*Iw{zUtAUREYggQZpaxASTQGrDOKO*En0i|=QQD>?hB$tnjn2*e*
z{_r|Bp{Qn_0tI*2SKM`DEihoWm54*YOy5r^X_mxMt4O${bzep`%4O&Bv=$7Y-s=kL
zKB(g~T>&T#wjE|O;2XJz6)GL;&Z&P^K5uUaT4Q)-nbAV}Ufdo|rh;df`e=e@CUlo*
z0>XfEpjSPIHJ!mKofm)U)Dkf+ep+joRJe8<QwTB{MOIP+5f5_(S&U~Tn=PwG)_$7t
z9Sig6IZ7!jP9L<v`$@OhY~h-njX+Qr3J9a)ll!dwN^dbI=0gmaHHipg%s*-rc7B>&
z!xyCX`8PRQ&pw~*<cj#W>_F6mQWz<xjQEToyng;+QSu-;tfYoIXwvep9SuB&k9xbf
zknM^2L%}uI8S(7q4i5hF19uVK&bk(smMJp&wZ>Qe=?oeyy}#;ovBy*1173oUd-w(f
z02|ex*7kH;4=+}0vwr3~(?dJ0%;@BTQyE<GvP*0RW=%C5aG_YVf(``t{_+~B!-Nhj
z%IX&t741(5Iwe8A!EZSvA{(-vezwPC(Y8^L;3oUa#?}XmZvYkAH*$sBolxA-IiQL)
zDYkP-`l+B2pd@djOU{3k{}x780A`8rh{wu~+n`^Afx;t{@RzI~zQ^34y`msL`u%Ia
z$u6|;zy|<_#gXbiT+x)Ov0Bq4S^*9Mfx#|eI_U)bmTUBhZcEjX;3gE$?28l~V;{0{
z&1^poi}l^>mr~-g3hW4{?7*B~-|zS&Ur?J(**tx;D_=Ns1H_dD?`ag<DKEGp+3B&!
zOuUxo1Zf0#NT27MPTG7&0^RvxmM&JbnY2sSog-q2_(^sd{tB}^3Gp+iee1ZFZWSe^
zNed>lMWLA|$>TCPAei4J!FOE{od9|-NrJhXtWQ^yJD)w+NV?;`XD#Xzx7t&yGdEbj
zq{j1<=6yn3!p(1N>%u3~v>yGsQz0;)UUQ3dVl(nqOvV^>@Je!<Y#t#2MHcQg*@eD4
z)u}cLos^{PdhL7qnOD}%jvPF{x2@L6*=@idDl_U4x!&Wn^Uri+9uG<5@_NYb-fI^8
zi0Xfu!Bw&#_9`(kIA-};Z;(To^8Fo*f_}4_d`A{|3zFA<z^HKdR<j6zC_`$nnpCqZ
z8N%(5171<Dp<1!oW*%A~jHHXA4!s6LKYFa9T=CCZzk;F6ID!$zrqz7Jp0Rp4N(t~*
z%Hd_oNDEQf-ZO+8jw|yVaE_xrUKwz!A#aZ<I-ALbuRi5K)p>Z$VzQfp$&8AWubkY}
zM>Trllnkm}F%avN&AD|%L_B5@jL;|p3a*R?Br~6|6+6x$LT`*e9^=;7-aJ7EztI1h
z^MmFZ_8brv9@gBvej_)=mHSwO$8hq*CWkrnt-GtpF<=cFUtRJ~HRZif0kPn*=*!JG
z=j4c%j^VbI2nstIus}J@z!gB^It*CS{t$n^-?2}Wo!>3q@I5*UXDk$U*->`A5`P&1
zGZSe$oOte>ig47eB=RHZ;oiZrHdFG06N8nVP;KYUeilQV2@Jc6oFiHF&h^hPn+a;;
ze^;7X80Cmjsbca~6jhiR7~~R<Xv8y9%HPXp?L$N~0G0ZG#!PlRhP(paq_f*NzKFc+
z8TwcaUAUgl>$KBLYIrF>fay`VeB=;_o4}h9`aFglw<eR5d41(zrJjNalJD!uy_HCC
ze!>MO&}U=;XL1$4#(TdDprFV$jTUj9*x#a{K(>>Svau-y0%6{tuqVr<STbO&S8v#a
z+N*?)dfxV5E`t&mje>~H8<2kbIVOok-J<P!sqQAh4_aE^59&_G(~f(uwaO(-K9CT1
z^rt+&f^MgQpXwe++-RV2q<=>+9Ub#-&~1J^>K`X9pf^KXq&ADBhm8|t*LIooLg|DU
z2y>@~f;G1kEG?VXK6*Yz^qu}t*&c`1T{$rxmlEM=iFUs{nEN2P-wYiu_Lcs2nf^j@
z9PPPsuVZSxO98s-SJ|Ic5!LCSAj#ABg&lDLlA#j$CdLx5E2aP&3kqC>xS#8Qxv3#d
zxARZG%N^{NI_`%Z43UUyLou<lD2)Sd8w}97nP+G;(33a_M^acWwRG!w3P8kDWz<Ep
z`9|Ct=YQhJg!^*f^dlUBAhUG=X9R@y1fFJM{Jtg+XK0cijE4qXO5y0lj78FMS0>{b
zL%kSQ`&G|`<~uSzxUpYc)Bvu-y*F{hEuq=oeRcJ>6M_r{Sq*5Vm;Mi+G+o_IBs$V@
znH22^P1utI^3uR0`ty~YC+3ibpJOcD%I~k(6E?M>qqoM{fC-Kx)T&O03jeozFTM!N
zay?PL-7DX;9Qx6$nr;dvooda)Xtmm9{8N~VL^h0|_aE2#F`(D+hMGkEZ<&R;+kp4x
zyj9_Us8FVc!RpuCAlj22@Sc7|8i)9@6^gEz6r4eT>O#h4lYf=)KtQu|r!G;XAkW(R
ziRzjSaQSmeZL$-eZga@mhze&BnHfCdM4bzf7RNpINj7ga0AmlXiZM&*@JcNa=x0j@
zegq{;^Wf`x4q1cvTwKcF7`Pwh%Y>OeRf@gIjCw380=|4JHlx$Ewid)VjpF0>?)!et
z@fL1B|3%5+tEd|R&guA;f12a{ToUKrGGT(bxFDAFNy;}N!Kyx<-C&GQeR5NpknOke
zSuT8wx@=oAevMUxdEn-+CVa1pzq-28V}U06jxqsy$gbJy_o3?w`nS}fGM^gmO@qYS
znzqE$)anVREfz+tp%uRjV2<QFH-5QvpDUZHmQ1V5F10g$F*(g;%ccP7&kao1zH1<t
zExegh7Dg_;3pCBCfvjJG3Z3K1c&wv*QJ(+F*X*u47#KbrG<V^H(0wpx?Lr=xy{mt)
zLm*v1?adCXZ`ry`91hAw)*dRpcD2ic$@o}QsdoUmPF-PUvTD9k+Th!ed5PjN8~nzi
zTYoSLT>wB92spiG!n#fdppQU5ZiaDbXoALtdT*}shc%Q%#N#9ArB=RQk=d4HG^7I<
zc)JOo-oaHKW02?r$DqT!gw&Fd2Bz;Yd=plzRY*6ZrS+m|1oW=80<8fJeK6#8ten9x
z%8c@1^w?#pq1U<`J8`LT)>5pD)w~}t)|0P&nVYoG93Vp;Bp>*3j~qK_KYseKN|ldc
zlill!K|$f9$5MK%f?oO6M5{pMS^X%qtOQ*XtNkz+Ty`w*yMSRSCe?DC6+vY9_{iu~
znANcHJc*VhlE1})^L-JQPR?p9x8udfuU4=3u$Iw;nVxUlt{XmS!}XT@c2K-AwnNr!
z>G7PbNobc@)|uN=*hqP&+NE<d1D^iB{Qi*f?KGZX*|z<3TWD(|k&RRst4vwxGmRko
zoej;VFpD<OGncS<Cm;zI=V+3SZq{dw5<BK~Om+PZPnLRGoy8bxYOjtU4Gg!!xU!?U
ze7N;pQ<T_9xGMd1n;}v@YbPSbV=c$<GHB9T{7&pCk*hu4eT+XIX6YWU@_-sYDNBL^
zl&WiPm~zS94Y6h8lIO`{jfp;c+djnApi3QlnJmAVYFM>mQ$S&1Jj?Oj>JCVzuH~5f
zBrTrOD??NYF;GRKDC@aNDewEfV((OF<Qq$PmO=iJNu1|jeLHiht*tc@@F@D5AQgat
zmh7Q+(7$C)!T6a;<KB6OctbaaGknAEQEOzFBp4dOW3@7}8hv4t;NgSYOT;rfe*+FO
zxi@}Vw&DFLsZ!(5r1o}td0#b*BfPQC@z*6n1NvXuH7=95rKpM>iJ0^`d)`}16xe1r
z<{-j^&DWR7puk|HYXBCJ5&SdJw4ESHQuVKPD<U@077*|1*!;fGjTL_vumrTuCt|Nf
za)$d%n&&X~$y)~dEA3+u`E8<{WR~Kef%(0|SF7Hq*lXJu&;7a6z1)s(l6uG0{&M))
zy|-z%QC$}xggaR{nn-8}e?A+Nn4riNYH0dsROf3c#8-anJO-}~j|5jY**-C--X15(
zeE$Gq39~=f;lFi%FtK*OW-7Lw&_%_KX<nFWnFWdrqwLo(X&~<}8ol7pMR_J)20h6+
zu4WGYyw#E%SM+(x3Tj93m0-UN3!m~Vk*x^in^j$O@LM#Cy}U^%;D;8%?Y)$7YFe+E
zwHcV&+rH!`vRx1-WukVgeLX*--eZ>y^**WbnM@v=TYOm+;`PvN7Lr+hocd-lJT+}{
zHQG|B{4T%Vf6)PMoxxH(z%5c3WW7K-6}Qcr=S}gbmKw8v-VM*(9W>sOXlW0hAPVnY
z*oA6C<k5$P4XZRxZ$4=83UYowa9arTxy_0R&CbTX*-@x5>l8)k$X9GCztw@;eEh3B
zs}b58<wAUGo|_wF0KuV(I@Y<{{lI7!Lp~nbTWnq3b<5MOL>NM$YU{5<yZzYT2%V9r
zq0EnY(M#@;S2W<Sw4uC~vq%>YI(X_lE?rGo2WwaKmk@;HR}J<$ZLe-ao|-)~*b0VL
zH1s;(XZm|=GT+Rj*PySUeHkp?o@#3;8SvN<oMpG2>-D4;CAW_J@}*Ga#mJo_P)#o7
zj+{;6JTuR4qokJm$#BpsbtJ0$c4Zu!ndo-EdTiCH8+o-{xL^YpK$@!SUHHpuaq<_E
zQs9GjWw^j+4fH_xA8j{!(!4%x{okDZ3l*!^RYH*)cDct6PbXthk%;dF9iTUbla6&l
z*voRpyElDsmF=t349d6I4MnIY268r0;JlJVFW>HNYw9-vz>)6UAo*}K;!wfUxflO~
zSRj|ul_AmXT;Ssu7~f<hJa~BPZARwKQ`6Wk$nO(6We2qdRXmeW72EL~Lt?vs#3pU5
z&|IJS%3uPQuIfg&Kwvo+K>NI$YtQ=&!>;_$wy_(45q{3{fFIlKU>s20$TN(Rpct{o
z0P|B?KJ&Fq?Dw%ST~Giao<4PcsurX%sH4B-W#4rR@WRv$(yTxzX3lQqaj*%VeCD1q
z&563j`J{%Nf@-5ky<OlRHp81MtIUmXL6dGx(-&t4_ZMg7E2(Di@ibp29GPCah?c3Y
z5!S7qW%`)x$&Xtl4<(0kBQdJK>(L6VZK}t2#$M+*ma-}V`btZ0X%YKn9aCT+nZ(39
zkdSe`H&lj6aXsdcj(?RH4w6%ihl{J+Gyj=rRpmZng-F(+$u~C2dgJ!7N(BXv4TIa}
zgD9%6*KG~cLeSOB>KWy42{2H+2^bwMu+M(}$L})O`uC>EfKMffb5Gz^dNSrz`qtB4
z2>7J@2);gMW)5^x^@)%wW|$P4yS6q0z{W3NOvS-z@jeKaUM5J_2Ko<qAk;9V9Hg%X
zdl7hdI|5)g%8L)Owx9Jc4-&PH=M?`;G<q26k(Qx#uoYvY{A~jG<Q?m1IROMtWHSWr
zU45=oTJ}nhb;ka%og7wc<nP{MFGXg%J?zUi8z2Uj+bzyR+g6$)98HD9c;;^QHq!_E
zDlbnar(iR49=fl_pRX+}>MI!KM(<b~+a`?KsCO4N5m=KN(O092;v-0p5PwECSi|PM
z`0jtb?00gRs((3vHt!<gNB_WnSU4|8>d8N2k=t=Y;EA^xJjDd2v_BVbn6igJT|TaL
zYZ)(epSYl*yd)4#&S9CX-0#n0t<odh+ql7dSubWHuct|-T*V8@Tlu@*u$%Ym_*yxX
zgOGMLRwGQ07sny?TT78VMA<@}x<Obl2|ljC^I3N5^J>p*|7n<1>y1v>(cJ5UtXAbn
z+)DVgG@b3ti{twVn%z2<?d@&V#~Jy|FZH+S0><UbeydObqq^(mRZkob=PKEi=dH7H
z8<K+(!N$wwG_O-}u?4f-8`7ds<aX4g!@a}>dS%jAphGD2%P1+YF$-8UyMcpfmr7Vj
zNCGnq4#QCSnFjCnko6~P_p|h$mkXIEZ{uotMLAO&8v?p0B;0Q9d5SJ-PKl3gg)NpJ
zrc;S7uG=8%ktLU+?KXPxlD~Iys%<8F%hdO}R~l(|__F;X-XG=}phKw6uaz4r%E#zB
zoqzD<-s&}I2?Vw>okL}J<N9_un3pQqe!yNZCR=Vxu%KEe4gi7WQl*s7+}s}ZJl(pV
z2Q&ehp!|q>lxMk!7m4sda77tKPsS9{A7Jh8&pgw!9j#ikO_lm3^SmdtW5fG)^QI;!
z00OB?`S_q7CA&C>2jZ_q$GRxTc^U>V$-n8xXYp;Cm0&jn?V8U&KPSsJ{={&m{K7lm
zm}N$8j$VZ3uBMi86Ed_e`T$CW!si%?nr6E*+>6d+X;}~CNBg~|v<xPrhnv>JiA(yN
zYHgNRRHTBCQ-^ho17fa0&<2{U8kbg9sM^?m`a@+5^e%D{ewzr)t>a7VldnPcR^Pp=
z4Rx4_3x>Asf9!k&Owy0@e&$y5IYsP5anOiF>RH;aVbyLwt1_Kx>p4K2;2(>!?6R;(
zNK8_B%_7QkXBfREjJ<9fWEWX9@&EJo;CIufKt7y`YG22cT`<JqCDNLH!2%#?s6iu1
zywJYfMH3@UKZcE2=s|VS71J{PKnLWP8E<ONzn{H-DQJZ`<bg~wF~RCdRNeiAR9)&*
zeh`i8Ye3?=RJT+jpzLE+NDaqQzD$?3<qT;2c@nhwam6WQ*hSl5ZC5%{UVb8iql&9Z
zUT6{*KndyY!+AzV$hUF4W#Smfa7GXHOU8u1nI)Ad&pCh?(jSVP*w_E(vQby*Fn2^#
zHmfc6B&2>$3(Sv};cNPA7VGRlj)Q84t%NYVm8=NOYT(5=JYUdR6p&myYDS;PaBmh7
zHseoRe$5Et^io&|uPiR~NwiG|Q6u5lES33^tD0l%w@9%Bb1~U7Mln{Lzc%sj9iPm9
zFOVFCD=oHDxw*#0#HoI<pFg3hsF^2|Bho0CC`*Om-I&z@!#&vE6<~T1)thPWl6#{9
z?IoxpF%gfWv+rd~X<Kq9vI}W=MAS%QTQOtq4q|JVMn3_HaVBs)k?(@dg8@ct0ve9T
znfF!Y-@iCe8_H!mntK*HCr9MALLocA=Yo2%r`&XKwn}<V$S_k1(3W>hJ!ww#8(NWn
z7Yj4tT^BMM1fZT<61_mvzO(a*{rc?fdQ<bAOS5B$+cx^Ul(Yh$a?N1~%T!Nep^KFa
zPG=uDJ${^wHUa)HiWd;%WklJ@l%dQ>=dyG)?KVIOmaVKinRn^2U@)zD3U$rae2Tb#
z!jqTP*AJ&Chn6z`fdDrpIE@$R21yDnC*tMhrh_MbX1vr#{9H$t=ORB?)&VYjGj7!5
z(N}yh+*msMlNBu8L}0#g5%a~Dzw3jwFBMj)dQGR77--fVAMWYU+l~&QTCvCmqLJLP
zgdPK^i8{!RqfPU1x<8u(E;Y3zAr{1ry9yqAio9q%2mAC5(Kq)Ub`4E*0lq)vzP&9W
zz;(^KIpw#xP3-tcxF039s0(6UJ$~~Yq8P8)p6Udb*YOm&n*8g!DniRG1WVn0v@DeM
zZr7TYb>umKe^wiTYD7xx3p{jNg`A-^SAX+ZQmg7s&!Dn}MXO$;YKW$`b^(pCni`vH
zm_^hr4E>B9vp0W1B0`gNG>&W>-&eI8Oz6BlA=zjYG-$1yR*ZZ*<gPbWs6oV9xNjj0
z>;*_Dc`aNSE)hK)<PPC9;g`*{wZAuh64Buv?VXL!&Iv=^A5dD0mkVm)5#=)}y=|z<
z>e(8Lt)C#ZE|ysECkhDO)-L8EVBAv3vg8z0om<ab%>!F!o4C!xVycfm3D88Un*Wqu
z-&YMY1+~mS-D$CE93K2>!BeqbX`F<tunX8qA7GIpj%XX5<QFk#6Oqf}G4)?C*GWC!
zWf!5ub%JnH5NP7|Y5r4q{sL!9%kEW!{zK?g(qmykRnge}=Pmrl3Q;=UYH;IEH&{t%
zPwR9mwz>LN;y!jDC|ZIjwXMp1Be{<H#B^q3<#K``?~L4Z={zp9C%n>G)0$3Nvqb%*
z*aYi1aFhJ}HjMs7NB>~5YH;$;CO5{>4;0zO;O3X)kfhHg#Nh<0u;rYgre9>!Uojgd
zn2lxjtMG?4SErNiA2c81`x@zse+`wz@Rtdcs3Y3G=vC8;%`kYV?qVaeNNi$4Whhr@
z@=hejIKxS@cDQJ@TTb(<VEc`UxsM&3VudxM$fnuA=_CB#4l6wm05N@@))sUNhtFWW
z@c*xG3?9H!2F&a~N2^ep`nLtl)jvAcuaxGO`u}#EIgbZlTOn1?%Kx_w%oaM>y5&i7
zXrtwSTx0%UubLH7@U=$4Vjl7T`$oaPAqO{Mt|MZ*oc?QT^MBlJqagU2t(UB0$p7)>
z|JcTe!Z1VcpcDFS{yPR6FYvXQi^LU}e+Lg41Qt>sAm@1a^Y0j@F8&c&U#DzB)cbev
z?-*cr98rt2fPcr3zm8dpBHJNphu!$^;9tRhI~YO3OE3S9L9Bxs42t!Pn4`1#ckoaD
z$S=Gn);<0^hW|e;VDEXZ89m+7FMN*85Ya$thwXb$Jk5E-doQzTW|W?at^#$(X@^oJ
z@^1;}^Ej}6Wo6V`WW-ie8Q0Gr=K=8kT2c=ma+h5?P~SJS#4uqob<~!%)avl(Jmx(N
z$DF2{E>}D}!1_@-4kjS|TB;L9JZIQ1m3LSOfV&MjsE^y6mx-~lF@+n6;6^u*k&efS
zoD9K7LC(t@PB(c4)<A*-YlVap+4i?Chm<4#3xrHPZA?`d96)ZISOSI^+7)X~ULLQH
zkFTCYgdqgK*vkXAbLQ*J<JrXB%?%AXdCfx?jU@C?!5`D^-qDOG8)M5axw&L}r~Unv
zpG!w8%q*Oi65cDl+KbYn#U{nJ@(;qtC!gOmbvCCg0av%+6C(E|+`;i%kC(jRqN7_H
ztOju@!Y8O`F;=nsRb&bb7Jm@1hQg_A>;efznM=_}B~_fl$mcpC$i<XD54UZgH)mkD
zTqJztnh$|tpb;>ZqBE!7|3}e_?2tpn+k)}jTKtO~<`DzJ@GCPz^-k4LNT~m3C!_>L
zE(u>j%a>69+?T-zuv8<+hmZyN$lnt&hK>;`I+$we6!Yi-N>;+3#&Nkb^&cfsf$IV6
z^3u{F_sYCH*7KF7tf5$bzz&}ZDeLb=uWj6c_}BpmQS#BTb@9W=&e&Y<SMi(2M{Byk
zZhb9@B^w)?eBOgUQZ18zQhsW{sekop(zhh#1T|pjYHErXNu!svIr+<6yVP}NsR28f
zF6tD9ACE)A-0y#nF);W*AaiJo3W!Kf;sP!r#qzsZ_YclWH*<tT$^7=5aBy))Hl;jX
z86784$79;t1vo`Ne1RWoX6gc3nhTzY1hu<o=jXkBGQyvAuV_iV*7z!`s<;I!MK(n4
z*3lJghWNXSz7M=>Y8futdlq(lIkch1fs_)%Jla8U_k$c*Tm*_`XJ^Z9Z=3qZ2gRIt
zzlc_Sh>cFJD~XGX3u{AMH&+;z6w_#^tN&C31Gv|OA5Iq+Et;+zx*>M{+UcO)gOXD-
z6&Xh4aImm;E{e`U&yP(jTO+Y?Kfyj$7*`MBdV3=B%8L0Gxx@ef<auDz+?=My(AcjW
z#?<q`pD(cauCUvmc-X_Q*1;Z48^z94-K@jwQjv6F_Y(hPDWp`s4E5AGEJodBc}<H0
zd~Id|xe!~OuH}F-M73X|dcygBaPOahmnE{HmihUi0~E;1kfkeZp;h4%M}cpsFT~>$
z@S_UGt(9YKsI93Y?kUEzIDm_oU~X}C@}633*hc$rVzg=pL*kQ@{cvPKEdq@yo<`Si
zOq&c5=hJ$1RQdnO)fTCLa@BJ$0{{#7fqSr!-H<7nfG0Apkfmeof#9UweZz?#0`LIF
zsSpQ#+jGy5%8kI)6BYf1dQrWAq%q%1*Xoc4&byq1;QRHx!P|x|H)zMlD?XDC<<nO$
zmvyL&4_B@>cZm)-1r6MP)<zYk{1AbntCe%x5l&NGT_Pi+V+3E2Vj_HP9GVjKf%3->
z%m|Xtzfc1mI@FXqysXvSxmMR}x0SHNzvm%=<q?1pmonTPUc<yCxQtMS5CFI=VQpJm
z2Fr^LrEODFu)o3lT5xa(=-9soxig$c{D1$^Vwiju2;~s2!}({O(Up}CYA}AanYT9v
z??FF^cg8*@UPS7$Q{{rXZjGK--@LFr=_yc17^TZ9i5w%#J_6gmhoh19O@`!lG*J3~
zD%+pt=VU2ZG=AZQg@<pdWE{#!!2x_r5ThlIld1J;@o^K~`rv;RsXl;nSadx`U))qw
z5xJ&-g@GZN0WF`4&*A@P?ZH{92EL^k=yvQ(w0jbIifAuf{{Zvazf<GA%CfQ;e#quO
z@(U)8@;ZKz?Xw8Ygh!TR+&o&EYibj-b0n4om{nfi-k0PE-tu)#RL@>~d&^Y8JgP=W
zZ<}@wrYe#gnN0H{Hyl?9+5im?50?Zqaa#p?E_%&-GX1kf{Im2I6!}n*f}cD>g-l#A
z%28g(wm><LqEH!-P(I$?Wc7yV8U_9ED-c@0R|341-ByWJYWg?fA`Xr!sHQA2*d!2G
zu}nPMGxLm^+f03eCDCaAv$p>v^&wS0lq~w`YN}aIWKJaelV_?j8arHM<wZ1+gNyEi
zIjk;tR|`XE6cVk9+}=qnz?Ueh`Tb8Wg14?1jHzJcuJVR^t^X#=f1c-mw)6?<{Kd;)
zF|Far$t);7J@&aIjINGSJRYQl=)LU|3K)81gezJn9=ON7V56&KjY$A@!axK1qM!%R
zcN#sAWRO(m)!Ym24FcV$>E&cz_8q~qa$JhsQ|Gk5m)j-ICo&i;4jTw}mMxGqMc4Qb
z(bAv)iO!R`I4-@TJ#>0mxOh_MpGOwFY-k8~@{lmkOKg4d(I}RXJ)v=;4GcBmaYc^F
zsXUQ}%g<`2Y8j?1XemP&Fmd@5K}g7`g`=bLD@|@OLNkG9{gdJF**||GRaRGUKU6+s
z`MSztu)Sd%sT33d*3h+*+kW|oeh;TprIPWkHZN^yY@DgD;n#%TPVAH#OY!#c$#j9U
zB7{Z&1~98?Y0Wq5BGk}@v|32C5%C;VSfN{&vb1fx4|L^Ih*B$tLdqCw%{NIqi(%_g
zC&NmTli>}x%_QaE?5S4u8#InSt8E4bD51pF*E4GHhTM`e7sQFLef(kej_#RS>Db9_
zX`z>r{(dFst8QwFc)q;uKJM)+Gu?AX)7*8FPxZbL%ogIho-*ah`u^u;H;k|sX@Loj
zHSn|fNS_Z8-x8A#oad?6d38YXx%Pi{J3;Cxdl-ybsM=5jbaW1;G(tg+igJ^(;|`HG
z;MC<r>vzJSpl6RaE4`~__-2v&QW4u@O*J)hg4R&ePd%|9wp%PRvhi4j3{!)LB|Fi}
z*BAx{hTM!63Pu)|64JF&R=hx)4u#}wj;XVF96TK&tDZnfm6bRM0(x?zI=G^&Bz;9%
zDSg>z)0sWn<lK!2GjntBp&0IYK3eFM_PanSYhfiX>8HSOHh!9Brbyl9kpw+~y%Do2
zK0e-U(AS1ksrp}52$~cA?4y8Qmf<lQZ8$`Bmw>Mb6>gx7a%4dWzlLUk6jYOz@j9!;
zK9J8a0wfg&)i6mzdIoFl$cOE*%rv{Xa=~0OjS<XM0oa9SrO^le?QVDR;dy(8hmqsE
zye`{7b>y$-^Nbv2Hndu|A4y$*kK;X#BY(^fnf!6-L8u4=p(Gc45(qjdndAMO682kw
zOvML`QkPz7HO)8|sgr4M41J%d)tN!0CqTyB29(x#S><a)ui1s+Zm(DU&XoI~&G3j6
zfI#UVtQHl6T1L9MnDvcZ@Eg{;*XH>gm}Azki$RM0_gB_N=dJ2!?;TlLm45R~QNml&
zpBGO`TAGIlefpx@c``~E6co)4|2LuY$*#+H_~UU-<&xT3=jh1D;+}j6tJnbV`Ic1J
z9QoTb;jezj>yIMEhk1UZjZMZMrpY<_5`V^NkdTYb7Xx6X(8U3Pojaf362-hWZ+SC4
zR~T@xvF%}c^7F-z5Ky*o*WoI+)+^*MVvx`(pH6FtkLDK-rqhi59mvviMY8K}<=czJ
z5GV`N!{&GCVoNwDh5jNKczcznp08!defU1$TE$8tDns?yAc>2yFfx~ci;pBa65iY-
zc5^f~>=QZr#dmqPP45h|-IqG&p<nB0dr|zof=oZuw%z+t8$QtqWQH2{A?tk(cv&~o
zySslp^W|AV_=Gm7yM6^hI}kS8T-BXvA@n$-z>-fH3a{oYi}0wGe~f*muC1e!<)ilX
zt2o#?_3pULcxpF6RCaJ2zwCi<xa0f%Yj?s_YBR#uSO0)dd9YQ)@7|pEyN0+-x^%2N
zw;k2S-2gD~j5|7Bj_ZC17&iUjxbQfbTwy))nRl~i6F<O*1auuDK@j#GCQAy{*4)R3
z(9-&Fim7J2q-Dc5#cY>=a|7{MWKZ1tuu6X+gASd{7bi#LTo26krYfPKuXjFm+&t!U
zHtFuI{{1`KtGKd4B`^8nHgiS&fA8Y}Wtn{ZvtSZ76cu$dE-;BSq%>P7?j6jEn~_VR
z&k*yT5XK-T{>!vI9X`!>Tr777hHFfN4)YWkDxmpJA@L+KWgb1Np<^fhw7=mHV~?u!
z-r5EQKnjEAX1Q)(Z*{Bad-*%s9<1O96rBwWP)Z&zRj^g~a#=dgBz*6t>5uzCms36B
z)V7lw5=Esu^-xOgQ4pS8X6eTp8Ff*Y<XeH>;Vhk3{#K1U1_u#ufbMQ`DH*BEm;P|n
zl7@*)Wzo0B*xV=JY^NYk-g6l`XKbKhz^Zxgz9gCk)%V{!eTLGt&)uuvI6}??@eq0p
zoK|ziyMOD+h<^Sm;c|@_ZY#q{p(-O2Ru54hWA(9bC2+BHJw%3hCNx_0WQqGX=g}B%
z{G?5UwMd)xZv>KtoD1FC0WbYbm)E8^fVsys0y3RC^Rci7U)4sI5f?WtiweUx-wGEW
zTSEWq6W`%l%u%!c`xhXITe9u1xl`}EYeZA6HjE@L6EOj$Y;PgMpf_$Vr;Sy2UeTma
z*@spnxYrXnn&EoXohk&s*7tAw-nkbI<cg%@x0-nfP@FHbq&6EMZm=dLgQBBvO8$02
zdxCHmr+$A;n_V)G=MgNPxW8Qi5VB%olDvffRK%EwjWv{p5Eot-hhT>i_%#Lc_9NH^
ztB6@oOW}X*vq3=q-ZNy_=gncKcY!zM|KDn%3kyKT8hmBOL`yG4xV<|hx-Rj!;YQDi
zkLMOeE)S}6Ut1O<s(xES12ccDrg%5~73lN)vBJXWiFY*+D67=Y|G>$|Ce)t$4op9a
zG8bTf&BuV!ILho1`#SlsL;iNXJ46(2vlmI}{_*yx{v5ph`$DY`Mf@~2^|am3*bW*f
z0;rsrh>hd2Sn~FL%;D$qe_|8Fh<|fZaTkDGAb<z!C(9N|C+y9i%ek*s@v2E+T}Ic*
zg*An2a6k8(c?Q^mqEk9gAppI=KW3-^yYZs}=3sxzAvRA`u_f*b6G4JPiVoHAb(jov
z=$V(<d7T__){jG<4Hp83xm-o@_p92t{>Uq5LAQ8URr9eGM}}5$S?rK2OhQbX?+Iz|
zw@8Nm)3DMuy#Zd&P#(LYpR3T<Jr2*^`w+2@S5BQu{t~A)U~ojPsV6jeq|ggyLllUZ
z)><0%vY_+<`xAu3gW9is(;UC>%SgP4J6lj@DY&|iFV0U;`hO3HQ8fxgoWC3^YuWTk
zD9!U}|BCXXxp{#%B$T8imh69uB)|fObCB(?CcXBnE`(;#QoALzFj(p7E`gqmy$>D+
z;tKi66c-Lg280PK8R7=o&f&1+=(?Tg(A4{BiNc}pXXvdK9fQc(2du-U<7~Ju!W1cH
zVTiHj`fzf9zA4Djee2qdU%qSU7PisUuFYg+7cOQI=8=Jj)pFNlJH2o!tlKS{!q4lr
z{*M0m+<QW7kD}{Q#M)!Cc~?fPOKZ<!dAU4s;vq70)ef2!q=&T&7pI(VbO-5e0PHKD
zL)W8pwK-wLX%#-D>l{Dcbd2W)a1H{23iX69tq5png_M$TS?+8{eV(Bo;fW}H0U4~V
z;Y7Rjc{<l$A?8;!6IJn=VFjC=xH|9`4FXC`&q%{u=BE9XxhAmZP$kF<DU;}wiXS(8
z!szn2;ykUtSv3ubnQNHs+nqM339;StTWtR6irnx&{kV>ws(RoVZT<03P!<0XcZ`PX
zajh|qx%B0Hy&)znLH_yTWzfBM+%4{Edx_QiG4&bln8F&R<LQ_E?SHFO0YU&-7c^9<
z$@$6P-Bo|W?0L(kRsIk<)68{f6g9%H!PW<>d*avpQS|C;>d9m4Y-J#+XiA)ETKk;6
z3>k)li0ApZ8E$38-MgPty}Z_MOq#u~@sociS@S>Zx2WOPhym#b8YsC|i=JMxd}+v6
zVsM}AKd$_qw~E3Vt@g3x6^VM9skqm)le9#$F(5pzMjP!9d5E~&h5iP8pvo&NbDZ$h
zGC|0Z?{@zFJ-#H1gM(Aw70-Gvr&IuQfgTH=Xl@+r(|tA*qiCpO>=C90?5oDne(Zn(
z)n{so2Xg<4OsQ>GEANuq*bsTJ2bx0n`>SpS+FIdDf)(tpHhRYDktr*G@2~?y1|S`n
z>S2P{v8QSaQiG||Qyb1v=4uMf)XyHse_-}9`#b!nqkwPh4`865{OKzDo%pQFuYrNd
zJ^{1POxH&KG|BGlvxUegCP*fhKzdT-7RJ!q1@Ue4f$<u#&LPR<{9-H6PxjzQ@KQ(y
ztaHsKRpRJP_bz@D0I=VpK0YYzkD#7F8!_C$xx^(n8WYs&_{77IgXhn+Sl(CQ(n`Pi
zqZQ9!%J>Oi@d_4(cjt4L=qMw@|GXDfV;oIG$)XZ_Ze9WPkF~WkAeV#qKqR7>Ca$Th
z9~nA=o0jOBgj@m7$L<WAX{v%hI&XG~`j~nb4gE^4hp@>OB9IKc33oOfqqlGeU)M<Q
z2C&h2F-1sDSN{aSciqh}-JK!VXn6Rf+7f30XVhfKCDDbP(Q`OFqD=$U;6&e_rhzB-
zvnnEARAHeSkPlS6BpjyrNqaQ=Ycsz}Wj+oe|NV|`A=7=akt5~Q{l?ODwezdd4XCZ$
zv^FO__)vmP7hiVz;f$)3!7;*?F@x`#J>n_;OS`)CF!zPtPo8+3C5x%GMj&nf%PNL`
zcyx2a$}&rT>#m`=jlR5mC4Y_iV#UnD=%`&1k3}u*mtk+-sAhBory^-`75fE;9nt{|
zvV__!n>9J`$8-E!?2yk#Jg^*}^VEa+2?l(O)C6@cmK#zwY(-M%B1&F>?-1~QzZP@1
z`w>`B|5H&v2a?O-$vM+wzr?*4_K=8}k%9Uig<K?=Ebxd-n>2F>ZYOH!0_xYxc}ZoZ
zUHivnLT$t^>1}9_{D7vjc<<ezxW>rUC(xmBy^`W*A8+`nwZ-?pxo22e%p8r6Z8<;4
zhn~pRWWLnhfq+gk(=rL)ZgLJIU91kiJ$z}-z+-u36|~e<d9kw}jzGP}#=^4Mxdu+#
zXe*I$SYTW(@E~>OTq{2-{<i|U2o+1f6YHbyTk_mdE<#Qq*L)2vsHv_l03#B{3Bq_i
zwGgU|nv&n&Tl{QjIaAGtV(U3^>(vDvo-mR~0jE95`64pWF{nkK&&1)vCw76P=0RjP
z2<9zUF*QpK;}xa4&NdvER>j1-8}jkfwKr*T2V}81PHiA*Kf<p7p;XlGtgTz>+VELp
zxotB(QY&WZq^tRdzj+4iq*S}0IQ_<_%@sw5CnC0>JF-WTCbq}?Z*JnuFIAl*&aA(;
z7w#}V+q?@Nd;~t|@%TMBb|UZFpNNZ^35jtZ<MHGhjSHID>(mrJ4J2#tIt;s^A7bue
z#?smlBe#K%QWNqb8?VZ1O`J(Vk@-E_Rm9N^{V)A8N+$P>1%ET?%y|R^qJitnjaK)L
zXAI1lCwzD^MI5OmrTe;k^z@4cW*%#4`vrZ4u0-4iFzpX3zv8y2ZxPQ2IbE0I&Luk)
zK;yG2>8|3Ga>>cr-wqguo}TXsJ0q{?+dUqV8tn#wT)uO%e#XOYLAO~+$6zz6!sQRI
zhB_^V13rP7z>(P*wVOCX;pn)vgiz14fQzE>g{oCV9wrr`_rxkBCnThJQx)4~hszrk
zeZ5Bk82A_B)$+8%&Tsf4d#J_6wJ{I9uL%ezuAiqn+uX*h_Q!N)mg*J^>=|lG|DV=K
zh}hy3@sEXz-tXTaAehwUzKCm*6c(}JsES9KISEm`mWTX^Sef-$+_d<f5IJl?#N~}6
zbsOykLwt-z$g#2q%c*G;kL#$QrEn4x6JyP)XMH7qM1(XT-vBNCX}Q@0K8~z^;}=WU
z(sum40}Zp$YY`^f&!yltu+XCwJ@g3`ZOMG6dS~8xQ24doC4u?g>+NKBy1>*ojChj}
z>j|MrgMR2A>TWPoI=Ult^4lWK+V!+)CT$MONO&U3TaEx<o-=ZB%HBW{NYYAOZsxgj
z^BQRpl9xjAI1&$(b-&9T=`i#<7S)zm>N!N->P2HO)V%pjo0FUD2_fIBbXZ(Gy!4`2
zLxUcri$qhov$oNdDsffeLNfv1JLjUE??Uk)m$=7!>!u#lexfj^;(qFdjWY?NfH|5!
z<iRwY#wN+#mNB^I(1ISdy_IIt0T0ICis$Am1Ov<QC!v!3J~qjD`hZiW=AXh3sfKu-
zA??Bm-Z6iOa|ORdop?1+zI}?HZ<tOFqo5Ah8H0PYt~JS9v!?M|XWSQH79Zyt|C{ji
zq)Ud}`@mDUv_tz*1b_w-ZJSSR{g7^ric_)lBRut!y7IimG^8RP;w9nC1_Qd>FJc?c
z9I=>PzONpDk4t)Lf0~=ed6V~Vu`05>n<;ASwy%csX{78Z`Hg=<ZI7-H;lo<qdVLH3
z+mbp34+Nni%~?ah?a{^85UBR2nO{fui$-SQ(S||wM34rneZO$$GB_HLP-YQV<HpAo
zHR9N+T7xlfY73y1+8ZD+hFMhk-#J$^Uze?pzOn1}+3eSC-2#c1(FQqx3N7UY28w5x
zy5}>72=P&sLQx5a8u=eve$%-{m|Mz#q}&K8pH7E)V?*dU)e?Va(RS&`t96}}UCz*C
z)2_YszABJW+GrHHPR`M=sFnHX2S7YS9<t?bv@xYg*I~GRym?I@B6r(_)W*hCXsGPm
zd1HU>V!Dec-v`urJxuLS0(daHLn2`@hM)vR@{hZP*Uzvrk>7(!!#need%5q9ij?!u
zS08J8w#P8*1IkMo(@L}5v;S9nUlkU|vaXE`Ffcd^3GO6#a2ebkf<qv<`w-kUxFie`
zEO>wr+?^o7H4N_V5?sz?@3q#sIQRe6-}m)Q*K~K)SMT@Ak_!8|*|3$xA!o0NR84p&
zkW$10zpR$mC%8w&)I;pvfu^m~&H?v{W_)^noAyrP4(X&eHB|0OtsyM8<@l+kY9R>)
z>4Ni#1fJMobblXHlE=E><&o^}nc!vpknfl)a|qRKoy8&%==RE$I_+t0Mx7sX<oa>j
zLLjkw*}!JJ=ra`O&`32Xz>nePb)D6schh*x=yS5vBzqd9bSB~pQU>_=>8?MX8HEeJ
z=@wSGMcEqZQ}XPVUMT(VLv`82+dV@9lBjbsn}9hw)(!4XQgd+AqO#JP%0;^nhsiIm
z@MM~!u^c7BWpn^0rm~3<+B2(()R`GVBT+|E0Q}dmx--rz)(f$lM0n8J;A>I*Te+4k
zoB1um86KN)ppWHf%;k`x7k)M1<yWB3uT*0XUXZ-u{N(_HrOyx^9~u@GbYV7%NtyFI
z7UQoZ_{Nkh`nc)OjT-I6l*_hpw&aVUrygfX_=U;avJEyWFw_|I*dvzxz;eQTXjQ~N
zex{M-hW!P(*0hIc8KtVP5=h|U64c0e2u^DyVUY%)b#0@E`F)6~%Jf`WRh&(FGshVS
z-|1Y6@Xf8)`-QQo1ysc!NWD=V7!;M1MnvqLv?pUBqZY!M(!vl9?*@oN@|-7FJh%(}
zldifQ09$js7tPFX6O!H43OYNBbS9hqm5k*dEab1ha=>4#y!A7ESeV7qDpmHp5%Nh?
zW;qASZaus3QBd6m%)lsDlWX7*D7WY=RGK)Mx%hLcb$U$&-88l3=D6{?9nJQ^>sXDk
z3r7w><ahqldasN_lnX*1(=Qf=E$4vk465_^dpBMV`m-B%ep-zr;G?RsUQq!N5A(D5
z_*TalSb!~21UWcXmY>fzK*C5GM~OTZ(Xp$Yc7_3ka}6s$ndz&p+|D0bTaoTIr%)Iv
zFlk%I#Id?(!~ieKwL(kFm`Cua&cWp-RKia-ADxbxVKtX`1c3F0ItaH>V2{eD3^N%k
zRHsRt@bF&pFZXDn1Yv5PzzrH+-U#Sp?T3K3=O15%+=&ZF{<c1)w%5gcoSO@y07wI$
zFF$(fBfN5$ByU`&Fs=C=)KEY2nR~b3)s&;K%r6rA)tOTUu_p_19swe3Akf6zTuBD6
z#o3q-M{ms(reXV6a*R^+T%%Z|CaKY5_K$c1a)rM0(iwYL))}e}7KporJ>J_uC~_Ql
z-TuAp2^yux@yK#($|+`w)X(y2d1{?JwRKeP1(Pr==($L2#mTAvhcu_=C?7XAh_KQ0
zD2ZoOslR#ikv?IgZ4@lmlB)<L6~3~$$f9kbnq)t`>nziIev%U8leew8hWhzv{TKUI
z2MC4yc?=d==kPsg6~T>TJn>7uEq|H5e)CC%X%7xpNkQ!}d3bs!%4nOu|6r29PawYh
zXRimqxpivOc|LpWe)IbSo3$M(NNj|(RU*HJ@o2ox^K8X}C8dV?xI3{dNr6q&jtMut
zhl854XrvJm(8;ihnd6Z<&0(b~%h-QQrv9EpwvbPoziD<-;|}+F_WO#7&R&*wU~<|X
zRs!XZvd!=;ClFHbs}Cqx>V=^QG4=q)Lvzdt!Nc62nq9)EO!Fd2G&s}W`5YIAPnz*k
zWe1Q@O*-+a$hC}&lz!J|K{<7l+zSp5$?u+8!Vlllj2srNQidVXbk%&)ohN3koSxrr
z8i~J9K5rJ1{Efz5w$t&<xOG~SiS7zvg!thO`;&CFC~-9~&oNwO3Vxp$8)`4CZI_Bg
zY^ym97P9or&-RQR<~0u!3KE+hryt35Pr^C8lGt*;8Q4&<@Z<qC4z={W==^+0hz%ek
z-(&fhOZ7MY65UB7o%@R4AINfiSXxe{t@cZQMPeu0xBiR|#Xqn_zfLx<D%9v>5dfP1
zng{`agBwzn0)>9QxVZs9KH+ed=9=j&y%1f0Ny_DwYsk{(LI)!5>SeHu_=3kvQ-;EN
zdZRB)kJU#}+ABW5?R$XtNK@AG2s1|99G)g3B>e2Yjkh3^l0pJPyga%Vn<&>u`HPHf
zssQX^IC{Hek<Ujwiq}*Hnn<Ttc6HT=vW=koh)!pp7`tMjLxU`#*Mt2|)q`(AzD*up
zzrWs#C+R!$ecrCE(G%Gr3w0ESAt+iA*HZsXwZ8}=><j7aiz}NeJlbN#G_Z?d%s+yg
z{3M^BpAV-1ALFkLg{&!a!fBK$Z+_3ll_UMC{T_O&FE@8skej^2u5jORcS7s4+jS4?
z>QrYoIWejT!>J`kJ(s4roYqwP3_SmU6(W?|eKj?ib8GxECB=|Ee#x<CZ8)<2_V#S{
z@rhRGpnU4(<aTDySvr~Csb9{KXmT=IB|;wM6?xSJ<nNV83a$wKOWZ;ReiVq`Zar_7
zV5RO%(B@mb(LjmpnKseX<|KXyw%~LG{@9k!ZY{NWn;uW12FyUkw?f@{={YKBJrVoD
zdZXGX4BDxuCqMe&(1kG}yI9YwU;TSBKk{{R-w>0VACjD8;PmUzM%yW(k8fvH5x*2c
z+bpZT_2|AEwmz{*AVZYyBVoSWsUjpbdwoUgE+qOqkWFQ>VWNZ}nK-1Wn%=EkyETG!
z1g!b0+$Bm+?T5g905wR7or}$CQHG>K=r7W_W8#Pf_0bcoI1D<>L*K*Dw6r3|!^|VA
zOjfiIByc4Y8$~F2II|pO%PC$!dai<(VsdnytUi|l%%=~%zSlu&Wsszu=FEN<Z>EZ(
z*Ms!A%;_T!@;?ok%#;N_9;{^k{9J0NG121}Y9y_t{8!uQLk&AiT&ybhhK9@g^gSSB
z9))@fa+b%w7D2wu9pQDQeU1Ab7laB#={82c8~NYvbP%n}2fW=0X1ykd{<Bjla&EdW
z9A#Si%Y}=*&K)Xs-GUw5O2`{}Ixw@(p<a>Ny?t+SaXS&#<=Wex<Ga!3X_O^`MvlJL
zq|)uwU)9@Jtpr<BS(jRy@^Etx(VOp-hyWI8;H6Rbk#aU=c2Po7{L`^A5`^`NZ3y~k
zri+%$C-FhRael7WdJLPCmnUU%^34catVa1E-7fj=Z{2qVehb(r%T&)Wjoq<|NC|CL
zo3O~pH;rsJ<b8Y|ST)z%8TVW|bhJI6y<lAYx5zCaD1v1A)EHbXe#yt98k`j#T%S^_
zX#t9&3eE=~V6S4@^~G)drxs$1;;+MTle>kDAMbFuo$9uLy4^;OPDmhq;Upu@J-St-
zIw82S!W{Ul`0wJdCYdV-qBbrseQl!7N?3ECtfVe*$r*x&7#@L2)`Fbbka{NZ!c(4v
z1;!s_2ir&luVkHz2;y)yXjSID3Y!VcMDJEmh$>8W7r#8r<gRmL8_w`bcN>llKnFTh
zSZ${5$Y;-<jix2MV`VdHkA7`iiVY8-8)bJ!OWRf!c4RKw(yQ=FLYQrP=l`1xXH^~&
zxb&TDSfh`E9kq&dZO@uI$h;{k49nR-a%*d=*6PRy^2$yd=9)zKzQ4+#H)%`)*A8I#
zakVd!v!51IXpBEF@F2@&<t*J%n@yMn|Dy2QLkU^EG)lN-pN@3AdYAneWWi_jOCyeU
zwc^Ga$KtVkPt|hrB!0{3hqL^G|CV^UKyp=pPc1_Cfmh$VHq#(%;%MkY7t5;gm9|U2
zTyRqeGwjPvWQ=BFuT7{c#4kD9(B;$#a3ascG$c;4M-d!%jg+AqH)Ba8*^GZ%(=KMF
zBmUBbzC=pKbzEg!f&3Lk=^I+sPoF+b>b~Px%feDh%XnTZ_GlsfN+-$=HDANzOQn;;
z=8vrh;<~KeO<2dg;sK|xs(?0GZ(=GD)C`E`7!!{M+d^m1&fh}QGXA=7nR`~LZfxJ}
zBEUesopT5ZSXbz;u{SLXqzI>nZNe|IwJFMtAH0exZ(dWi&e3ID+JF4)^W~q(*22r9
zT14CP3ig{`#%p0O8Zb!5-QLb_jt*LPhp|0So><NQP58;@dz2ZwH_la32|-ycv{V{_
zJDxU{+#yb+g#4PDgeK3gv?QqPR}lbl0;79&x}wOo0{T5n|HAYk3mwxh<zxS=9kARv
z=>~v30|MczQk<cz(G0FaW5g4NzYaQoo#+uUlG`5CA8Ea5%z|@;DiPmfelu(dPM^$V
zG%m*_e1vWEeKtd$Ye%LxZ!2w%wqvQ+)O-7`rIa)b|A$!@2KYR996Ru{5pca;4_0rT
zXMhxWs5fw-vh|>0XfK#3o-@R~Wo+MnRhwJq)4VP+<mmRQ@cKZCbK0{Ajuy=)X%8^F
zBC>*;qrz@Q&+{;@(ipI*GY@9$|GRJ_%5)MUjWoT|ZQ}VR11O&{ry3k#<75^+J9AY@
zqbv!2xDPKjWDTt3r_H-NJ&v~w3#fd5S>R@p&f2qsTu!9<>u@G_pMcof`}_WYQ#gsP
zuqZ;=?RsrzpSkd|==zRHGu}7yTE}}2!%ji!P18(LIMaVBoOp~jRvY&e0lCSoknjc{
z@$s%ecIxh3>O?dlOB@1iEI2HDttTSQ?KFBz9_3bN5zmDFN<c^YN{B8<cpD2VIOA<d
zRK?NWp5xd_T5%yn-_iN!NQD=o{Z~I{<;Vt6+--4_+`{g?4^sXVXo<rt`MV^`cn}D#
zxwW7eN2;peZ=3iOb8k&Zx#rlvy#gq%I${BX#iH`c3Y;pEx4u{W{4M|C0ZCYsskdv`
z$ZI0y^2(4(J*Sr5Jd^nvdw(FNgEJt!n9lSEc4;=Hp8R6PHe^-KT2f3;qZ1D&f5NFt
zFsIC33>&-2+8ME5O`vPE^=CZroX#VHL>iQTT$)Xng8HNZD15uzg)6x*?&O6|<~wYI
zVUFwu9LE(O^q!T+9H)r|$}V{7Mf@C~J0W`ULZKtwqdf{7->ks|z<zBeD>hx_f;l)m
zKV)84pN^26mL|@mCKBC#>x0<KRMaBEQEsjOzWDc%eKrjh7u647hxwq#8~YQ1yJ|Ld
zKR19jl+fj!zEiuQFXU3nrBVz;t?j<R#!rG1#MN$*S*v4w@;CT<=>%wouKVyGf_9tb
z<Y-CV5#_M0DC`*fsn&5l#)SOuY%>k4bPDmrazi#0$uGrHBN1qaq29RxB*XrK0T?z5
zSB~2+V-v}HRk+s68=D5~_k)ErExq|#az)bf^7554HstvF+i$#k4OB5qty)IUbc(a2
zj?lIG_^7=C`;Dj${eDREFSWsXk3HXIG{9**Z<H}VoJZT8|4zvFTz(9@Iv(MBj~>59
z?sqzG&tB!*fW&Rk&$7Fq7Y+ivXKAcbQQlXBz`IcizqgrPzpy^YvtsCH@rN(mbT$&d
zr;6HN*89;@BH=V&J4Zh=8<VAA9>46vxPkaO#?CPqpQ0+LCWt2VPF)a0jlZ>g*1jRQ
zt?I4?v^<2#2R`4^@x0$xh;R7)_8$^~4FMvd_<UH&Z_FFh>&mbE4t2c@iK~{~l~@#Z
zU(2;>vg^uO8;r}AMMwZYP6b(5VrHiHGdPz@a1fEzgdZK|n=L60y7+wp?T++KDhkIU
zs`itpP6|wB5%wh0TexiDVF)&zL86E0<@P}84<y+0&Ag$}4v6T5ZNLHn*LBzJH_OP9
zeZkQb4pjJd9(0vG&|geY9ah61h{$YR27~628?dwf%AE#T&wdyRGjp|8Wo|cete@by
zknrJ__IV%0D{o2w#PqFYyZqxf3XS#*$8UX<zFcLG1+bdIw=CwrTV!I|`S)l`VBEjg
zKR%+dnquxp;lr%~<K^o?ippUs>J&}YkmS}%9CQ$<;AnwQ^I2kJ?|g{k^#$gQ(u$(7
z$bZO~f0$NmG;l(c(m*X;TjG*SAEZ3#prWO}uUsFsp?V)2i;}qTbmF1oI@gVOfHV^A
zE?nAR{rmdbv@Ts-$G;1sy{_A_<13Q`(AZw*H0SdL-jV4HRbqZ+BAnP*oZ}I#fP;<A
z*<UY8ZT%N<&qpn=iomhnM<Wt8a*e=kCl(J`k+O~VDFJi+NYZcp-uWDiaKKc`84%<b
zkdTpIvVBW<G+H%synue&HV7eE?~X=LyWB{CLjo`0uK)5M_>n$LM`b}<!Ac0Wt66B6
zYOXuY?sH>Bt$w+fVQFU@{qxBJ+(AyE>edeKBq>BEU&P)*(wDvlU7|%xVYw~cu~}Wq
z0w(!Nj|dwkn4W@NYdw~%N?$g36p(jFuFm_O=60dRKmn4MhFa2`mX@@?lz9AamdO<r
z6zsVAeNfWwlK-x6C}hP^60xNQ_z=oZoO-th3ggK5dB0AW)wkOIDrZq{jzl8^-rqKk
zl;nW{@dZC@28ZSpTDbW&C5%xIZ0}ET#2^-m9st}xcxG%!X$;@Qe4Tn!^&x=^AU@Z2
zN_A`OFC7-<Rp3(ll{;i=54o((_4S%oVn@u=<2v$mu^RJErH)TwduArs=d5>DKqNVC
zg(b^ww^fPr8E=jAa#<;by*1>E<vI3;g!4UXkYMj;?EzNZu|_noL=M|cH_SB+w1Act
zAeT;)>Uwi>UG|C<{IjuL)_X4a=5i|hF!#%JdE#g5c?@hyo<vHo-Pe>;hA&0=^0ZHs
zc0~^j9GBWt9bFm6zmkuT(VtLvul{MDAC|{C?BLrrNLBGR=~8i0CKKe_EbaFmW;abo
z$ZY6cU0f8tVp6FtH1v>&4>D!{asGB-5v8j=Oy~Pkv}`Pi)hXK5Bu>2L<^O)n=<tu(
zK(dHpZ?)K>?gnmJV$!GdHpT#xGaxe(lTw;0@ZsykXY8Hbv82}ImwcengzkM8+y#oT
zFu-X-0Lk}5-KjpTGMmMlsLN@wXBk~1|13O7Nf_`_J*k|wC(h-i*z8PT;%7T0v?WF|
zb5h)KH!_nOX2<uxGarzw+}rZ@lKQhvJzG;eigX7Him&t4L?8LNx90vDKmy(&E&FAn
zN9>ru_?(TEG*z=zcXIf9ED-4q<&{#|igQu}<-Yox9bz_YJdT2ion>9ZLHL-N3tD=5
z(n`>Z!rWCo-v{hX3Gj#UO8PtRE!p|z5iVKhsEOgxpG6sy-yCKU3E79_TO&M8Q87tW
zL887n0S3*(V4|(6*<iX5YGa?D;fFG|LU1m1-zwX_6JyO0@*@EeX(uFPW@R6=n-qCm
zR8SyI7qpR8pwi-b^5uH@e&ACGR&;^zuNkAU!V@IJ46;}phZF-^6PoOwZq*QFzOR~t
zv6Lbq@C+OYA}&4ZSdew_*vi9(@5?BZ=A(sxt@7Z@p}`p*yJ=v}MR0XVe-ryx&4hny
z{U8>=GziL~g-!ddxhNh^Zpr624otTi7Wf<>{OEpxj8#W?>-u!$Jhqv#jl%Od%soud
zO`AN&PBXgM<Ai!%{mA}Z9jf`uNr?gVMP!@+6dt&3n*rwov`oYn!uuq$5aWPgluy*=
zoUvdE27n?!V%#=PvWM*VvEh&>=QX|EHIdbwAzeoh0K?=xk7*^vMaWM@h4{R}=lhKI
z`zJJ^i&)zTJQ=DW^q#ZWDYblW=XR;ox9~>q{P$;dB3az$Al-mlQ4c{r$5FF|a7<Fj
zC4JwWetjIUAvM*<4R-SYH;UqY4}|Q%prddA2-QZePc;L4D}68U$>V3E^pA_?LDpzB
zih*E|{bqd^9Xor7qg6m*o&7J;Yj|W-vcmq$EiZoRSkq0!H9c)3`_UD@3!@A;07Y5T
zrQ)KjqEJ-)d<!rNkU@EDJv3aFP}qKosoP(*1MA-eQ8#g$fBd==*W^6)!aCDxR7M-<
z*!ggKcOY}Q)R3cTutLMg)l@rTalB1s)=(9GlxmQlSh;ES82iv!TslvR13MDB-TZin
zHxW#5hf(Sc*Gw`v&NYW>UvKmH4(B*E$36K?VNEwUXSCsH5P|4<d3imGkw!4=LjF1I
zu7(9+P^$)!A2I}V4h@#QqUT9!V=$5t_GIT~7Oup@Ey5K0Wu5IR^v$3x0wu*84r)O3
za~_FP6Tk<D5Zl$DV0SpWFqJETe0X;};MZxTjv;%iuEFE$*$j`Rnv0-~)>ZsQ=-|8b
z;N*qInNH<@j>Ro-B^-GPa5Cj+c~IP-tWSRuZ9wdM;@o_;!YiBGgjSBP8em~XtUd*w
zvF?s+rrghbTJFd(B9RtbGh%OcDSB-du%9zF8A;VTbtsazfi_{}xhMtC)}<+XFEjUo
z{ga%S<f_+w*0n7h^1}n9J%n(j#=fhGPEbdh*YA;hZPUw97FUU)`$O`al2Zq6;v1@P
zWtxBXh*rt~>fl~*g?VuEInJ9+*W{McSu&VY%xdVVTd-$|sHL1|?k+gLY!h_GR!QTG
zujn|welxrp-W-8RDNi*L_z{lF2#K8D#E=JC6pAEdzV-W=;=U0#J9XpQpGI#RO0Ij6
z*?hOZ@QO<)CA?&xeTMiP8!hmXS^&H8AzHtc`^BV1>L6;wizztdd)ccSGlE_2w<91*
z;7`$e(|Y;<zT3c>om7vv;aE|l4WnmZ7>BbCRpC67++HzOzLro8jo0p@u{Ab}u>80k
zZWC<D^yopjO~$PtkN4ymkJI9Wm4krj|5oIPx^N=+Iz~#Ua#_W)wU+we5Z?qc4p?za
z<oZ)o3bojI36a=xzFb_vgqo;q$MfUNrz-ByP}qznuiP7)Rc$ZM;E6+8LX9FR<x0M?
z*CoiY9g&g6`Xk^0#(KTOT1_>YhXz@1Z<N~A7}r)>BlBrf?3q$Ak{9Du{qfw--|7&{
z)>4f`V?;Bb*~xwswJai*t_M_J&Oml2<enwq+zT9!;6rEY`Y>A&({+H*_HMq-h$DZ^
znOk-f&U-3ns&}MZ7C^L(8V_Ik4o+j6m4+36wT8t9x%eZlwD5#;_MfNSeCYMBlv1C}
z(%^30=j<V_cxCS#Yrg6>xzS)+i88!LXfbSytZ3eMqtjBNaFgD=#p0W7sH-<3{z@gR
zDAP;$>6a(xlFMTqkI&^xzHKV!6OgGN9`WXJixYpy+OKc89(GtoCIuVo>v4k#K=t#t
z>AFo#x0k?cZVhZuA@Yc15V(VhylRU3aoBddqwf0W08FN%JVU~e&r%(;OkMDrY1^Jt
zxawtrGEw$QzVC5Uk5?-`xR4`{mTvcYb~sO8*VyUq=PdE^Fsr0-;_w_iOEwlx3S_KD
zxAnK~WB!)&@5&r5K87c50K+utke1zfkarg#3144Vv{H<$v>UyUReRk2>}=7HqSML$
zU^A2ejt}+TB7SB|dVqmKsf8&Khm}La&~3i@`A%(lR}AWp3BfIuX>Zoo^6KY<?oAX8
z={VcMWwvA)j<=q{W5*Vndr(6sGsH1`NdW(JI1f;?LViBvK_Jy_C9oq*HC-sYn@&^j
zn<Z6o3-i*gtxb*Cg34b+P!ir3x_FhI$Me1WeBa-=4I<Q=S5Fs`8yb%(mvKI|)LfAu
zO1mWb!Cu^(o^hR@N4<V+M{g8w6In+_pt>{C8V&E#5P@jvZuwdx^f&ZQk5)Q3)>a4=
zC>IIVkl8~{+IO5Ums>7?rMkD_TW~o@B@_Pg3L%Y=2bk5j2)dC&jjfSWD{+Yc`gFR_
z=a^BqOAQ;;>xY=c^wF@5&~43~vmW}4<UGG#I33QLuAQ(7NQ=Gu7vpFQ7C*?$BqMZB
zVa<aA`lNNX*%%8a<Y%(#2i3p<HX6&N-@C{)i~~LxmV$<DToq8b-I4d6?oaYqtR91_
z=XMD&kpdPqa!&EahoII1qGPYI#*(UGkFcMwnRFh^zLscd^X?xsOjGW-gVFX?*hFyl
zMxSkP<mZ=NBNlv|ziKYemUi62!Kh@aSw}pQs>O#liq>?yEnb$7%lDMINIC@gtXoC}
zPW^oH!l#&Bl4-|qqk#-YHPJ2-YjaDI7GongRo*LpaIq=1`l{16X(sZ#qH%PzJ_Pgb
zv_g%$j^DzBMuMD`_3cfHBPLJ0;bw^iZ)RKvyJhH;IE2b}6wt^2iUE3cY^-M9N3Ik@
z{G3q3gRvO`v45nw9w*-IA70XTKXCLM4>Z0bF6+XADBUD}32j1i`ytsbH5{jUm+1K^
zzgDe}elqKsVx`y4V+e_4|CPBg6(AG*co}0ecTTwNtI+;g9WFmxc4ZqQSd5v=pM!Ij
zWr*Lpu*>vI;|s&8uZ5@iWx_9lj(m~dzx<an75_(W1&9R#_m!xfot+m3DempjF*j3Y
z@A&BMGeYWdZuewGO30p#jg7ad^gBy}$pdp$LZ;B*#28HSuI3}>scFqIvxoyZb7lJ(
zTM?Al){TU=%pr)Yw1Ky`;J1}djYul5w4!XTEbZuQ9wcln!$k&Lj%84Gg-hJEo1c!-
z&Hx(5rXHe+e0UUh)X_~M->P6W>B=%600kwf;hRY3ciwJQpo0v&z>`Q2yQ0pzZMlF2
zYzk8n)YV_tld#ne-BSIgRk<@E1_fL%J?Cm@hJJBYS4V(%TQ}|<dGhK|DYt!hnQA|l
z1euTPRVf0T$!SWy>s8IyN-mxV@uR;tAr9*`F=*XnT3)L}0wWQ>Am)@rrRnxl0t8nU
z)DFfPo?{jesDZQpnAQ<kF5y{!@;nALLC?^Gci?}px%nl;c6m`y_GVy&<-Prm)Ex-!
zz%z{IjZ?B0OrOvsAW7vVhdYm)y4(nDPri2AvpLezTk+Hp`F3*GEmHlR!*}=`+=<B0
zKbiV2z!BW|B_I(<?k1hp7`d8l|Et{GFw<~vRQTDfeFY3|Ey*h#-MgP9MSH40vGC^C
zYzp{~^5)MuHCB9xT#7%qxOFkQ?Nr1U9KsB2ty)FHss9V+JuvriEFx9ZsYO0T{ukVR
zsmQtgHbMizoSNmBvNoX2vN9&u(^2EsGOdm$i89$QN7D#<THkEJP^acSAyPp%`u^YY
zCWgqfr#)m^L}-%>HB2!chXc7g&yN{r`xYV`Ax7=k>odz39vh$pDaX3*=68-4vbDh*
zpZuO~C0kU&;GqU2c$`uw<eQFE{Sl`Z7wd#-{8WeIU=|_I68$FQN)tq1=sFCi)y(e9
zxO*VqSTMC4I*!a(l6izxKI13m1acrZU~(pcC&ClsO+%oM&Uh*!-grj$kz{*^HN`b{
zI;0?`M=Z!zDKsz7Z2m_*7Vc9(;K(}xCBy|O%uV^l_lxlvs-{{-bv1=Nmt<O&;_u)j
z?GyDdPAifIB8Z{7x;)kJbJ&Xsl7M2Ur(0)bL<G}hM4YhAaV!6vpk!c0!{{*gblqlu
z4!j;8HDK95D%I#^4g1j-QHA?L^^dgjIp+)9`$@Qr7Td}ig#1~+kTYdol#>aU)wMsK
z;!?C_-hU%5^;Q*l-A_IElZA$g$Yq{1iKK?hxx<_+o4gU*%JeTtXUt3-^uh@N*hLb&
zlte#do}S~~F(!JS845-vL!4N;Mejn9WPHnhUu9t0Rzrs#nJSS*n8NE|NHF@&@ryet
z+D@kby^;IV?am}ThGYaOT*^a-h3)l<FIDB>j98A(@M5>$;0A?k#1i=8vrLQtu4ViS
z;sFFx_pL!*MviuF(hez=<bU3$OE&-*_H94uu~6hkP>+(DyH+K-)pqIrhY~F!(Q@5d
z5+mIv(y7&X!eAu4!|x2yYP-%P>Pjokg>Q9)_Cc4|4ARTXRsLj5zb3~`H((5V8dfu$
zJUp3Z8|x)dlwvb%psuE-j3ui)yde?s>su9x@Oi9-)tuWb2=Qyil5O(^dpsNR1<Gul
z3)=!729}bkvz8u%V<4N!ex-rou+N<|bhhAXHUxj|@aW|t=j<`3&CB2`)M^oF^<1&*
z9v}Lun=HjyBkrY3DRC3r70~*s?|n&Wbx6L~$wnGmdh6s<`_Jf-^$&)K`3{G`TH-)W
z1tve9$~IN`N~$djXU|*rjv%jqK%I_tKgTwL<5VI;;a8(6GW}N!u_{AxRToP|v%4TF
zXEluN8+_gw-cPA5Qx<8i$0&zTp{V{3INYnl<lNfYy61}}d?7o5#y&}!<-urU<|cUy
z!o=gArZi8V+Gcqvt6cr#TIT86Kp{<tMQtSrrEYAX(9QzhKYHWeChZL~IbMurcr-+#
z9t)X`>w{(boKfZyoFOPxq|D5lOWg6_&nF^J()*D-VIon~k?lVsEEF_`Hjw&Gk4L9|
zEvx*Ci;@GH+Ymyi_{u98e#nu$C)gD*e_SlM*gr8gesnsBgf$7DZD1|k?!L4NQBUu^
zNV^CL!Kd@{;zkaqdgqD$p7zv8OY3F-JnUz$;`~d}?y_$G+X>DRcJ8w3BY&J7G!mMy
z1zZ9Ot8aJtkE5TlM#Ehkhjekk5FuIty%2=Tn2mv1+4lumjzRP4PR4j3Dwv>a@tMjy
zAW4|pc)ff)es+3_k|l$0hLuY*oQp@_Qp9kTti4Y3@mQ;MiUSc3-~zLzme1uC6PPIA
z=Y;n9t@sBsv-4%5xJOYt&x9Hcbmv8f&f|4g5bZB^baee7v&E`RgYjHB5&bl-8!X8T
z$MFoK*trXmqv&v^4SWa7!biY-f}1hrArZwV)Sl8f@*p9ib;ia;nG{jJ5nWmHs8e{5
z32Q=-6-(`ZwQq}KswyoL;X;9Sc&3v%R1Arw^U@BTFJ|#G%ac+e$E&&*_hn`-i}SV9
zz0Eq9{kvHayc{mxKrG&D?r9p?oB9IlK|Ykmjgb?et~=jfN?j3hB)Bts5GsY>AJp#B
zOC20uW*q@4RoKNT?1@1D;Qe@y=Zm^i`~}CZk%M)%d(`vyojUdEh@={VoWb?E-NTy@
zR%AkO35BGW_M3m09oQ&H%t7QBf7N0C(=PcV*8LB&-35d=bQEQ%&-?M8lj?u8!~fNh
zQb@tUx%jo>!haeJ|5f?I2j)`z5x8Pk@|69bVeXi4yh$h`2l^jn;J-igN9gGR*QLq}
zcTSf7TUP%wdi*s&3t^8Wz`)?28~gkI)B*Fs@RRcqf>O=DpzA-Q#ryxXJIrrvZU4`-
tY|!8{u0>`Y`I{B?|0nhT<VkftqlrXqNo8++%R_))3NotF6_O?){{y{~Zv6lN

diff --git a/linux_basics/images/linux/commands/image27.png b/linux_basics/images/linux/commands/image27.png
index 9004989bca83c9c682e8d35fecd6e0f859f801b2..7041cbc195dfecce8e148bf28f6ccc4fdd9a0558 100644
GIT binary patch
literal 75722
zcmbq)bzD>b-!>)+Dj*?}q5{$&%?K3`rAs<wl+?!Po`uLL5$Td{kZvY1LP{7tV3MQ9
zs8M6j`2K$P@4lbs`Oo{jUT5dCbIzyhdSCDBglcQ5+@xTlAR{BY`SOL5E*aS^UNW+a
z0oSgQ?o1IF)5yqf*g7aGYQI!eyr=C3wsUZ{B_n$g8f!>yq}RicW~%%0&AV$at~ZC?
z7k~SW+T`+ug7^6!AAZq(rhbjr%R{HNI_yy#y*WK(sG1C@*ikJAyJ_AFd}?cJZie{u
zEBVXY(w3d(-9UHDV4^6IC$Zl9Dp~5S7WKHWwToZ41-^6zlUH(OXIH$4BBS~Jj>GkW
zMZmjfouLsC7qzdRK!2?>lj-amn(LdPBZ-DXcVKiE$-anv7X3)^l&wR9><{8%ViOq|
z@Y;x}7T=eGAB@0D(l@B*jd@dYI{Eaa6eDV>CLVS`I6!1?)faY`jLF{AK9MWZ{&K~)
ziv8&ZFTH9u*$U$mmV4B@!PMMOWbX?JSq5XCZjf!-Qe)pIq~fmFk0~6AemXolE#@d5
zaC*|saXXklUSWaA-%pHdGF$pi1(<jP^i@jXg&MUdOCLq^s(+|6O`>7VDirSkb3XH&
zx$vX_XseVt#U@VwsP0G5+w0{;U)XP7FX!p78lGNx6e0gW?{?=0#!?24hU~ZT-xC{+
zvadyqyMn%9x)3+!)urRJ5>0#KsSaOF);@B-EzNY645R^nA-;;1;<yXsC1b4C{z`YV
zT%zMDEamV;^-a5150{@)O?AgY3J+cG*@b1#wK@jz3+S;i<dw%S@m$?SsCL}8sJd!M
z_nG$o$bPFA<>4h9^HVeKuWq-=eU)I>bw1QzQ|8E6n=Utq7So9l^3pP(X30xLJ?M=X
zomjBZ0oAF3uat*o3R{TYVb>$Olb6IE^_9MZD}SK_S$Sk_J&OAie2>EQ>9yAvIGyj_
zW4F2V(#bne@-&C-`lWz-<i<}fd*_>oN<Hv>twfQI`+n{8di1qNpO&vsg~Oh3j6hk2
z3)2PfxxcP*ef|8F&kYFM=galmwQjHDJi1M9`&<_P3T~o&U0na8ptEHZ@|{aHOXt>3
zg~wHa(2Ndh;AN5UmCwn4F4VEJT}glXqkhhL+Fp2S@Ze+DM~SveZJy7_=f>z>mY)_G
zb-ugR&7RvMwa^<50d%j1k}sTnVST)yK7G0F58H1la;lGMav5<&p{B8bb@Zb2x7Iu2
z;}be&JdbP{IX};D@2k6Ty9{zLyi$f2N6CzZXB4`HJa0J|BxDXen@|aI2^HwP_1gYN
z%!KsDBLga<iR;A|8b7n@&1H!1y?K4}re7HIXKwPH7cIE1@k9Mrx^pHAQ%lEBMXypQ
zAu08l!;^)QIpS?XDUDbT>8Z<obX&V=_$3V`4axM;bo)+gobG>2-w6*w#{?#Byd}1t
zot-^M_l%ApV|nxe)kLTq2$Be3O}YHXIp+zFkp8;s=m#?NRT)>6yO-Qw-(-3H9Q2d&
z@ZCLXiq7|pU&wTS+8Ei3m<_rK-|V}%`}F#wOME{~eq3<Afch!8O*=ug)~e%r`}CsV
z+ulDibvMVgxP7kr{dD>ra_`#pj0ZP57|WkH)7W?1w0dyi#iQH79UMF_WWEN!py7N>
zY5evZN70v?-3HlAM|Y*eQ<MfcT)G7o<%fe$Bbro1zI|f)ZkNw0Lt&f6B6eHj33rC^
zihk8K^Us2ce7|`;s7ylAl!U&I58c|kI~8_8ozfZ@mq6LsS!Z-34rU8<bG~H&i?x1b
zBrtZ3xLRaHJ{Hm39x8RoeooN!rplktI<j=wU~Bw5^R~GU>+E|=1a?90ko#ilYgJdS
z!`nU|uYcrk6MJ?&Bjv{j*Uzp@Te+HTPWPj`A5PIW&w<oA>}c(8$KRHu!QW2)?9vg^
zVR1XuM%|6;C<gc<K=(qy$Evid5RdmB!6PsI)W+_cewpdETGX%jW~MI4jpbtJw&YOY
z!0UMM)X-U~-cWv#_|#Z)Qqv*ZEYm~xINwj-zfeK^U6MwsR>}7<T`fJVwxy$kgR#TW
zn~3qRZ~Bpizo+s%4c1%607>%wp`AH7L*J@wt5U1DrUa(cWKuyYRGE3hlq<a}qkDRL
z{(H4kH#VcEWL+{2%r;dwWj6Vy20b6i)X1=;_Q)v9EXk022(Egp>w0W@)HejoNH@eb
zgm|Jn{r4IDvi5;{J9}|!n`3}HyncE%IFG$hXv8ufu0i~Erg*jUhn?%)i=7ucy*eG9
z=Uo{3Is4ZBi;K41cFfbFr%@R#86j3*=RDd~+pRybs)svtEsD4&_9mVrN+w`K5^pZt
zpuK7OxY%nV)(RZ{iTTRi&~Vj=1157xKXBjUTjB#E77k|Mfbq+ckjHnykNa&ZdmLi6
z=B~CAK2d&(zlByfmDC#<=@A?7$X%5{hUGTfE!)l6J+9oh%j;|CPh5VwJh|-D7nSU7
zEX;qA{~?1DzoyY?>th>;QGGFm0cBCw@W|sfU5EP7iqVR}U$eYJg%gftqvlS9;wTxU
zUxa6+XH-ORzf`iZgt!EJQrCI128i;kv3EvKOrkhZ0u@EI{*GXq!AhZuvU2#s6Ypyt
z32WL*uKm#~-Cli==|!K(>z+Fvw*jwY%-x=+Hm7h7B&VRBQ$Ifp{}P$cG_>{1eXfqK
zVWe)Fy@%zlc!iG*p&OIs{5&VpM0%|+U#m2&w7wK&4vrdQm-F(#t#l4S8>Q>7PxH={
z)+1-yr!ftZb?|N118QIAgSyq8Z5B*@cje@6R(x&zbkSH*FRBwT<DcaXK)q${wfH5!
zuDE^uAaUJ&1e0184}OOYLc>qZPTfwuPUKjv6`qUPog{>u8Jq<WOU_s?6u;ej%YISj
zqQIr2cdy=2y)XXo@hRYank$R+WQtr0rnR(n=Z|75xUOY-ayplq|DkNQShl#nf|!Vh
z;!3k{(U0OENk7tD2e%XFG-y74?*1H0vneZ@_SUd}{qDM)*TF>G3lp1w#ZTSjI+{8=
z`JIrJy7C2ss76{BW`T&(s0$)Z38Nz3)|=LOoositSl9tAZl?=%Ly*e(fez96ybf$6
zG?hB#hwPkJrefyfa_N`cJOTwWs~T=Eb_y3GuV-=frMYq-9x8tw{-Ua?p*j;i1rYI=
zp9)QNNORzHkmQ=wN|Illwu$MfkBQP4N^DDayO;VUEu{rOxTNrjv=H?Fv32fSp>e&k
zetGcY(>C!o!D#rK*p-*L(B;CuJmWLtqRNJjck^zL+K+sb_k5#SqnkNTG&I!*22#$Z
z7pI$j7n}B)+I0gRBC9yjvQWRE<UV7A`|Am70ME@4Hs9=kkc&F%x?*&UKif}~b3W_<
zmI!Tc+kUmxBEROcCX`B=%Mj*o<lR-XljWh{JBDz{>j_u-#w`^eRc;L~_sz<XC&q~6
z`Ihca2fG6>!GkFAbQuNvvob^}q6lUw@WSGE-EZf)reG>KC9yPDsZq&dxTPCB6o)tj
z_RNoQZmEq49qIG(%ULd)7+4%w6}(<O!m2<mae>5&KHHMs<~Xp$Q!@^8h_&sXU*<)7
z2J|I<b$-)p4dTV(IZhTOsTBui^(seko+F;WJXz^==x?sOjFlM?tv>j)@BjMqtC?9t
zQgHInF2)rZ+y6A#sW!od2eorX-a{o>`w3i9R8ho>em-qbw~0H*-n0+0AsRKe+o()N
zMgejF058O*W5Gdb>8wkGzwb?xtm4(Fm>SHE7KeiPNW%zdrgz%3hH67^>tq45mk!>D
znnnk_4g7xaeX}(pgfT>Q{Y%4LPr3d1<H%3nKGn2aQ%Oo5i?hi*-sv95ic{f>y31x7
zl;RgKhdZNH=Jrdr(U{?`)RcEl8xA-b`KUK;(pg)T7AYHe5dXtcGj%RS8Zt)Q7;<mH
z+)B4kFN6Q_%-G7rAQa(#XMXvkMb%qh@j0J*<>Q%AomH&x+dfN+qhE^PW(($xu5!nI
zsE7_`NfdGl0HOfPH^=&~Bf!D%{h2iH5ZAoD(yf^t|6F`wkoRdIIK;54{DcE9B>x%e
zdXn*Hu2Kc2!Y*@1K372y3dCg}7od<?=2qtM#Dqf?jOb)#%hp$g{j=%A>A9m;`1`Yl
z3DJza-QZJYB3jLo2|j)FYvGkU*csbA?pt;;`>jPhsBxY3WF`^cgH7MlIC*lcjT^#Q
zFXVM=c^~f{pV$USL;pN_+xp4Q?&3CHlWc{DOjxjew_RyJ75s#HU(S>49r5ERzU>0;
z;&%qG!UdVy>u&>pOkQ~knkb4~yZ)5S)0^FqNynz4v7r9VcBi5b3QZioL3UeqFyI>=
zk9S$a60c$NCj`inatpCZyc}(ftyHDF9ta@XeLFTEn_;<l=t-qd<MX!c1bU$>7q$Y7
z;=WI^J7Bg(FYPom$Viq5*)_7u7nsPdkU|$or~C!x|Ae1kctm#TpZgcd$U+>*F8})-
zP15!J_(D3*<NWJ->FXyla?-!sq|@j7#s7Ny7Vq~<{}sL%Kzc^@R8R5cOVU-(+RfG$
z<o*WiQ3!c({^Yvr3uAXOG6v4`^TJErhufs|#~t*IJd8BdWvsz2f>t(Qpsk>fi|cth
zWU@Xoq@atfht)kF7iW;WjE~&?f8LNGh0kvb-M{zGD;`dA_l-2P?<s=aZ10H+iU|te
zm#4UQ@1Crijh&3H((`{uC;gMV|Hi|^RYpk2+uK{vTT~G2W-lZnEiEl1{8;GmV*%0|
z0`9&b4=W!5ko$vwCGubCDA~GOyE(XeIDkR-&eOF5f;~Ot?%zMp=s(B5%4zH4@ZULs
z-2YuIQU!(1p9qNv3Jd)wZBkU(^Sd(I4nDTdMoJDYq&6evAulTNSVH!n2>;)s|IYGX
zQD3>+x+#KPNHIO+|GU-y9r=Gg{C^|<lc({2=P4oje`WbUp8Pwetk8MY|3_2&tDXP3
zOKNC&3R$85becRx*Nnb5sUKM!l(h6oSJEguKQ73VejfendLB+O8=MxRCL?=7_EPDo
zzR!h?8P7U>&$FL6stAvQd$5R5iiyuK*aWQJtJtZe(J3snoY!m1L;)~n1o+XY!>@n2
z^?r7CV-Q+&<A(Pi3#Nw_7~k!IRB89+0832Yei?q3$FOLCSFio~Te1rmFJGg+_vCK^
z3FPnGo*{g-cNzXZjeAe-ao^MTc<`4+_*cPq`S0nc*vo(){#7;pUHOl&t^Y+^+<Wpm
z?aD{kt~w^-uiKMUkhj`Ha{rr3T<fcRs|`t8ZHoTibSyP*1Nq+$iu2Zd=gUCNJ0O}W
zdHdgO`&WrQQ^x;qDsfME@FHn+=I%bf*!$_HW082MOYMvd@2lbj)9u6SwDaX%X_41g
z^CJE_kAIb~l1^&l_oanmQ6kN&B7>ey$)MAZZ$=x;!x=@~;;_5-|8`9Eej;_`WZi(l
zOVYrSNeNU<@mjOYQjK-Um>((7vmO<ffX%gk8r&6W{@bp8m!t9|zi!X0SHYRnWy+bk
zKdI!-(y!RT)b{W1KFmjVrNMY&xQSMn#SeE<NM&g?7VJ@(vP&)jE<{L%!|3^z<3xOZ
z|MA%=zyLQUAZjBOCe>4qYa>--c{NPC{&3(%^ai^UM6BcTJ*ABQW`X!Q|L~r^SxRZ=
zZ9hTp=^*Qk8Yk2v%OI2d!(JhHXAKI=M$4sc^vrOvN{!+gy_zF`V^kS@YiGh9J3|>G
zezLd9+_(vOeM2(?{k6*6eP1Cf@I($+U--&BZ>AOupRg`dK)k(hDL&g)%J8p>2jnCb
zuUN3_tMB7Mxsw;pF}dHC6cHJUA<vQf5@FXDf?;aQ^aAou8Nl+ciepqe6~VG<ra(i#
zRMzG8+z+dE>q-Id&+jf>70`J|H4XKza;mk~FEEq#o}HAbaU7L6-al~(H3^B~{G0WF
zUz0TU5vz{;8JPR}X3vDCS<-5>A-6K(c4j`p)Q+yy$o^H81Fl`8$6OjT&AWb$K7I@E
zG{4Tn5-n|>stwW1*--hLJ;dnX@<&+jthnVLJ_cSv*I~rkTT;Q-+)k~yALyU9uLKJJ
z%>;T~e#a>D8N!i1@A;9NZE|FyzF@Apz{x)6YV6KZZx?9-xf2=iyA}q|5ES%$9g8nx
z?%;cMJc5?^^gr{&*t-v`0$!DxHK23VdHld<@xIsT`LYL7Wg7?kp+C*e%o4f;clE#O
z9PPNjHeSA97nA`+z(gE&vOjY!g5$Iy%T6nI|E77#-Z@-U)6e&r&E;X>HS{Vt^uUJV
z_P@Z?7OQ7of7s7F;_A<|YNyZA%~6d;7#ZhFaU!f^xHMqbX}LQ7v?^x$N3my`)`G21
z>u~PX1N;?EEj`cc7siVWxgAG~6WfY*>a`uGCvYN;dn=6MjviaPJLFr#IZii@2>8iQ
z`f9*@Bf*m9{sWW}X%*P*ji6FEe)x%sJ#h?B!qWS!Lc+zQ%WqvG!f`Y%Ow|G1Q|}}q
z(t<rwY{DG_MEv?z9tW<CmCz=GrewVZDye!(=TKm{g8c={hJKVYTBcCH^eb<hL*8Kz
zcRB*A7(zc#rW_VweYC`!-TlLCD*@cH4^mG`Xsg{j*=pQmSuYzGD>Nu!qUF*IXNR8h
zr1`A{CnT_8YDWz%#Z6qAmBm0!x(yiK&V=%X`J+1)Fm}HK!3L`3hx)~&)){b2&2?HT
z=FRo@X*;}*JHaY0tb@=>@mdP$m~MB%{&=WB?F9eYNCE4sLjA~%iI`!TiWAR2-&=8;
z-srAcv`4z=c-7%XL(QyRkw>vZ%_M%Kok}5;=79>mb7f%7l;iH3nz>`0tmoC!_69HT
z>dTT6(l?pqWg7ws<^e~qYNzp{V3VoAX-xGj@0gkUe!fn#AL!;J9^fw@Ce59P^<nrK
z$qFFNaH4?U!3I4#59_;JE9FA@SikRVz~x74Lp|K{NZby(KI>1+VidJgPed1-woKw{
z_a#i9S1-l&&R{2ZCr{*$50R4%a<0V9q0*Vi)kg8nMg`}I?TNxysFiVS?dcrh?*LJP
z+B;5O{Zm}GOr_cEB>RofE<b~WCHXK^n8vs<pBE~}Meq&EX5pqag1%C_94IK?J0KpG
z&z19;=ML|!ySL^1_h8_bO*VzSV-dE1?V-%?#Z}d>G_A%X0iZkmk{|{FQ;Dcge5KT$
z>tm5goQeoKxk$~S@fA8g&4GyQ6oxf(C;`4ukFiYJwC4}a0G61DFGPo6BOOQeR`%eV
znPC6~02}m$i&`^utfY1zSR1fe7g!uqs#EPa>SkqM<K!jamz#jyA4f-?upMgctr4t~
zo=fc-HJR()@SJks&SR|5-J-4Nb}0+I6<TiHd4{F!J&QK4<z|B`nCCGCr^=Z7DmEQY
znbsRU_TSlR1ci<onu`C*5y^@{O0)a?*5To2W$I$}S7Hg8NC!64@!AbJF|-r*kV24l
zjameh?Fg)%A}lgy?7ew-($m#dg95Qe7&?9n<LQcEXBTQYRP~U;&oc_Y*5;T>HqTE`
zwoC?(J)W^gJx5lLhm(4@_}9`F%Bua7axJ(e%szdSg^GxQ*E5#=_&zCX1SNP{=Xqd3
zalk==nh7z-@iYcrJ1aYe>IgPDuB$iMSZ3hsG^v(B0&IaB1=18g%;F{@pvL`Uk0ul3
zz&-N@=YDhf%_PdJwOSX}4NO6CjpPz9Fxpwq_s#SZHdBlv)zI;C?JC($IJ*@8S<d>`
z6;(MlA~ORnD5bDvX2b!HjJbQnXr><nZ|)O8%8*^tnz)TRW3owN?FC#rRr7pF?Q9e|
zTfjrSSrA;|81w!Hy(tM5$fS6xjueX%&IVc(wPcUXrUS7bM7YdR#x5r{XwgXdwcift
zC}MCE;e_fl{A@G)FtGc#akKbGSmh$_uMpJhw99dY+U1HA^z7#EpCQb>U6{!?;946E
zy^;0QAW-RR{FYqSXw7D>#&5ob2)-P$&HSuep<VziWB+hR=U0gST`-T|aYb)ggi~1~
z=N%nep^-96p&C@_E1Q@lRgit&pEo7dV~;vwt#v<pPu;~V<<7=VgFCyd^|tqc7(+L!
zKjCEp8)!r4x@Q5C`!jT-8dUT|h+~M)N=6q6hs-Q|Zl@a1!1ZPhRn+hc`_K2-FSJD(
zDiOu53x%nwfuMk+y1MQ6m9Sh12@Bii$L%#=vHkOPSor$a`}M0F<Gy#ym}=1wu%KAq
z0bwgSDoZEp(-r*9WEc8mm)ZL==CdLOMpj2{yGILl<-o?7gRrIHZwPmp6b4drXT8ZZ
z4}#yqn9+I95MB#*_oeai>GyGwvAJzu;DO0Ls_2$TrZyTIE3+ih&B`%IP9I{$jz9+)
zb`08f98&`>-rX7;eOj^n>xT-&9Vgk-ZRkRpKRfK*CGvg`0o4|8vseZ$=gwJj^6v!b
z*&y`Dv}wDIuY6Fx5i?eKWGA3nP2!CRr^V}chJxVj);>wyhEp}fGyksZUF@{X;3_K)
z0|6KKaN7Ft(yr8>?+>isNIZ3?0q?JkMz{=DwVigfo^}xlSZ*Z-kR9?~r2r*grN5gJ
zOv1j}_QFO{SxX|N?CyyzlC!Mwpki8SkUzH{4A0Tt?W+WIs`1DQIAtz&u39wWK505k
zEnQtrOZE~pUh!>@sO|KWJOw<rjS)c_NNPmRa9xRhRoRosSrdcAyS4A(g`se}^|~Jm
zww2WbW4I|N@Zc+F(|K#Tzgl7WM@i^RVP)rR^?Tq#2W^xF4f3k!6<gzN36k+377fzX
zFEPoX9{DCa${+4j11ajx-HWX$sW~o$s8WR80_^>qylR-!tl$so)Gl{Px`iK98%SOa
zND?!yf7IDK0QbhG+uaSb?P3Rj%r<@?Eo`s8oRp_@I`8KB99k_YE)BS8VD7r^SiKEo
zgx=81@Y>1FiNKmRB&zw0F12)palNco)9Tpz%xp)2O6D-(O`~2i9gt1mqkpH&UIBhw
zXu8pGav}J8MU^(BBv)YmNBgaC+DHHwQ|^jrvYS++i&?`glz>Xa^@$3_`J(N*CT!zV
z=gYWRnN7jfN9uSJhHQ-&v>Zj*p)pJL*X%0)Y>c6{B8y5}AaNqb#u@WFy^^07h;I7D
z4Qsrjtc_LG{k;0q0lRS!f@eGlf|SOzwaovJG;KemYqlkE*$&CZ`H~AJXWiN&$!8O|
zw#rO{qy`f=r)i&@X>`_U^*{?ofpDq@qOk2D*af6$e4qA5D+0H_b0`Z{J0N9Bo0rq;
z3%+xXqnD6_3wxpiQJ|R?0j1$1NxSmB*i=E79DYLFTkr^z9<&_1;yQqc4vsu}?bEnf
z6B@}wC#XJfiXMnymQ=--nAF)<5};>C<I`x=DNgkyvBVmE=~mPQ_)Y#z+d-PYv4!It
zE@aHJyB<|O;ZEkN>2xeo?s*BB>?n<rU%Sm7c<KOJn_i^jHF$~qSy2!)>CsVAGtEC{
zWL<66Bwj>nj?Z3`3WHG}ZcWz;6ZqkM(GF8a40rao_N`A7g2swWB_(5p!ul(CtdFko
zprD=FxC!g1&wOQdZ*qP3p&Rvt#4FEk8k%rxm@rG$f>W^sHA;H+v%!UO#bg)K-k%rZ
zJvq`*rYF3=S&PP$wvU;*L^m1myB!no8Re_XF2HUqT;&^MVO_o=f;&A({$RS<Tri;b
zSzYUgki}A$o@*OJU1{pHvZ&|%N#br!-CV3=g|9>l4a+Qyke_KDSbwlHeSRQ{Ql+F9
zs@txRBJ9OvX>Q7_1|kK!K9cPB6D;&|%W6VV@vzjGx&3D17F-Cv!EnOrs&qpY69=ns
z0Q2L}{I{ESBa?y1xMaF!@4Xcf2frmz+<F<oE!vWS7gXaA*4?7U$-Q%vRf50b^)3qB
zpyIWudY&b=89TRFp*QsKS12tv;*MniJsN+=arGusN{iN}-nU6%<zOU(Y>_sOxYZ<m
zFzYm)$>?$TnZ}{wkLggB%HT8}0D!9+=NpylCT$ptk7>oQjjKhksye7HbEgL|gs=sf
z-Qcq}v36KD(H>+?yFb=T^tIY*F{1A3Yr(9${7?q1t%P?0mRH*6-|r5FZ-7b6LMV57
znEPPk!>czKjjmDk=Dm!xPs7!Aw-}16sWbJrr01phX$G7j#(9!b^rh4p94x&iudK3_
znEQZ&*lgC{)ZoTe*){+QAvlY_F;0H!@{r8kj(Bm(i`Zt&*o0e{2Bnpe7X{&%z~DWz
z`=p6@royAUW+MBN-&4o9sS3fsqpu!wTXN#{%(Peyt)@)%h=U!gObU~IDh{9do9`ri
zP|sr@&7BrO!uQgWIAKbL_0f`;u*r(Ut=UGRIUUCUBk$SKU`W@iR6)ThZopO(D9kiJ
z;Yx^SjEel&1{(TA_6(i3&`uX+N3y?E>D~0sWGr00Y+`11PHflFE>V}<PBdQX?d+g3
zZ_!u&sZ@<EbTFCwSa%c$a2uBnyKd+*oJ~D$ivylbS9;pc0b^bn3}^`VWllKvaxs)n
zR{4fA%HPMIgl7N`7QqgM(-eGSkJK-23{@J+9xYblM#s@g=oZq}0?8pU4syUUId2}=
zeuY!eaU!Pc5|ykB^71b?hiAaNUO?xN3TskwLc+=RUb-c8lNLXH;(Cf1;&v-Xjqo5Z
zb}<M@3~1cwe_wT4Z;!3tEj?LiqZHB-`IB(U0Sk&F!MpJm%~Y8yd1(%ET6sND>_K}k
zDJcDOez>{H5*8K9Nt-GKy6CYYLLcOHvO_TPUFr<>w;9PFg3R0`!p`wy^KjJ=k3%7_
zr^IdPSNZI*hC3}|B^HR5C(I{eWV#N;5MUkfWOg5);CkJQX9!*g;D#?Ig{|xC=rdif
z0Uy73vW)LSe{EOw`0Q6M|Hxl*aAJ^u9@)uzy4ymQuB<X1Mk#><%Bv>L!ZD*6AuQDK
zmR?p3rOyx-i^>0n41E`TPW-(1Vas|jO}AvD*Q%;n-+R9xOsM`bTfiYMK@0*k1`Ei-
zy^z(JQ*ONoLrYISb>?1poiRlLo9|)io8RAq&I+dGjk|Zdv$Q&U%bIBP)Dp!ENyFr@
z1dPwjcka}NAT^RzBrcRZOL8`FL)E(^Pup~!dUU^ZD4f*Of@`yw#s#z!+3aZ#H35Vs
zy0QMC{+y=3mNZ_MOkmF?uao7*y7evc1zcBpWOUZBP3!G;;s5|2F17!SHjL}Yd;+&~
zh%fP`FR|4LfgSC_F|#3=3(Bd$!_RXN6uc~ofJYUrm{k(4-e94F${mIKEcAQ3(PHF@
z8>#u`jRsrP#_DxzYyH4O{%43&ds_u`!1|1j)J)@G_BEm8#RT-2x%cL@M~Abnea{IY
zM$kNq5EO#Q7n`YEtl1wk?f8I4r&03k4%*|p>oMj`c)9KL1mU1(XRB?4oe|6kC_7w1
zvRQ<9cTyjbirQqBgRYpbHCveE8%e$P`@O$gHh%!v3bohGm-5<}Xj2<hz`sdyZ1AP<
z%$p(F2E!)zkoehEv#Lm;;VO9Gft*;y4-f<`F=>+}we$HymPz#zOtYFqBXsQaYDMW)
zVvi_=TE2$c$<cTMDJ%yY{|vVg^gVv>^{VoThZmJLJ@f)KD(ZYs(%9>p#Ty;pDoy9o
zm~|!4*B6u>!4*jSM&!EQ={Z892X=n#nzf0sgLKT1-?{Q-avcR8=arNeg~Dytead%>
z>UrWh(FzL-8`zO6tN!w0gyx#R+H|kcQS!gan1{D8F%VZp0yE8Vx=6Y@ktJ)l&_B+d
z<980QlT|HI@;(9;1+ZX&)WN0H(y*ekdY;^Gx2YKplH19t<b3SU*~(1e4dh_U=NO`w
zUBGy=3dNQxc|weK`7??t17qK%HnGZ6o*DOXfoSEYN7p|*P>Bp@MQz0-_r;_0s?uqP
z7vU{|C-J_TInDM@<s^%=%l+LN=6^BI*JA+jGUaZ;^l?!_4K1d0Pi6w~mxku1!}Rhc
z<#JCRJVRKX>_r4lv42gTiq~M1UD$&ojP1{w-^{<Z^Esj)N9;?UHBu7^6YIVChGn34
zwLOl^3~d#|T)fNP0r+OB1(@b|mkPT#&*)nI1FBHI;cp#ZhfqJ?eXvIM*9x&HK#Kv`
zI+24(`>1@g0^PF$A2CFAUe5J!(dQAttivDlbj7CTiuHi?blBxuS}hp?NjWh}R{Lo?
zdS1JCjx}lVmcDWoKT8)S@-pUS){E(dyn`M~riv2JHX6Nur$<Iw2Ca(fnWdoZAxDY9
zZzGt?#Pq%d>}nY1YP(mqDUCW0&&i*#F?=8=%J=FGas?cyAz#|3+&A9QNCwY7E+rAb
zVmcKLLzsgVoT5$Z-q{H@^;xHcG9DMBC3gpt;{Wmnqwo)XWW^Z7nu4u%)^GP&Q*wzl
z{8FTP*IoUcZ+3nuB@dD-k~I9Q{(9`_WB~I@dR2nm5R~0SgGSZhH@aEC06CjurP@=c
zqjci2Bk)wL!iVYgS+z3G9WFMxMck?@cyxaQnP*uw8&pfOev7TsrKRD|BbYkv&1cmw
znD4i3(Q<3T+M{IUE&PtE#mr0hUWlN4HJ>5cp4$6tPgh2DNR-s@7dx%|&KUA&?x&!c
zzR@Ve0FR^Rz4dZ@uJ{%!QmGrGb`!h9P3+a0p`g81iAmEuVfUUd5DA*zJHbX>`v+y!
zZ65gRK9mvo-OKgbBIqc%+-$V)NN*6~*0@mv-P@FuyS+KOyPL_A;(nX=U}chTK<1>)
z2Qx$UtLj&-SkQ5gsl$8o4{aEG5qqSkX(x%~rW_p2*O60hD(n2kCn<QjY_ho#IpE)A
zXbFwEUt4i$G1kz51q<KRB~h}Cu1%)kMn1uoy+THS-LX=~Y1sK{bCeRD*`1dj2+4gR
z;*U-F1QT}}4Hp{z`0J~l26s;NH1W>^+%YpY8w!s1vpCu{HG|5Z{w6A;Qm3*DijdES
z`<(va*(<M~E_=w4v;CGQfr?#V@KU_c^rcCE1ua^^bBvPdP-dCyP;ri-Y!tZjdSLFA
za$j=2YW_{i<7=E*O{*Q5NoYqxGNfGSZ%FC4Pp+TyYR>wBsuc8UQJV&(BI0bI@q52k
z7~R$67nfRbb6|Qke&~>VUoPub3u-`_W&jRu<{JPIhp#-=z-7}CS%^)0r<tKPWlhI+
zECDO!A`U>DN8MdRLH)j~0L=)#vIdUQ`h&OxDdw_Sg#eoU^>IGomeXI%kPaR04w5R0
zV({F|`}6bZkYD4>e65(3pn~-7pAYz`^|EGJ4dxU!UOOb9tYvvwi~#Y|KT?b;EkE5s
zTDMIG!;GDMNIVB3D@xATam4V+3o3aH+=hu$sZJeM6tgceasQYo@!d78#1u>)B^zKk
zlCP7sJ;u*8(@4k=xv#O3GHQ?!5bU$CZ=VTDl?k4af$ur8_)jaSrgj*a<R_#eZ%WQG
z8CnEdC(_K-W7614YGyNqb+#9@<Rdg4c9s){tSQoyq1$V{TFSj7FdulQGPGc(A@B~k
z=}2?$G{gHGe&Tk8-~*4_`q;sc!}=eJ2<MCQck|L&NMy=kzOnmppzy*}$c?*9_UTBG
zw7^n#9Y)!OAX|c<KEGP$?qA^)-+#Oe#scm+YcUJWgms~@jQRL<_?@DXvFtZ@OH69R
zKxhx4%cjag14}~SrZeZNH!Tp3YrV5AC^qs=a`u3fux&d}sSIF;eR?1bRAzBd#P#=|
zNsFj7G&HWQ#d!xMHp(yG`~J5Ai5bql=G9cEr_&@Zpx?wF4C`Ie^q8)Lly4q1sz}^~
zI8tDCP}84aR0^j)DUh*X5x>2aQ;uJ!M^i;wn5|xZrCu<Jh?8zvpUrZ;m6v`nF16kV
zRT{k=!yXdFNK@8)Y@nW?A(q7Ijy~{LisgN^6Edh_H61wk0obuk6O7rRBH2U=tHa`v
zXS<eJ;3U^1<**!=N$=X1F|k>v#4+5uP~d!5deF;^xjtILEveV(b@LUJ?t1jSOW?0W
zRxv;jx`i-L*lXSxS_oM=BT(T$NvhHTN)(TK4>yJf>~$1s&pS-+oaX6`F+B-9c!6)*
zTTirH&wd%>#)0dvoo35=-hVdR3ol#L$^gE+8Fl?{Bm<PsNiNUVESQx?B*~Ku$zfqW
z;q69|5(lm`P)`$cU(ug%5M(<&MULy_dEs!(5*FNC*{j}_sE;t3cyox08Ht&;2WW^?
zo}M*o{X>64ObQMU0NAc~P?=+@oAln!jou!c$F@Tr19ue>Lhv<)#;u?y;b|N@Nhs~|
zSL^2UC~)JQKm%j^L{XV6tAMGqnV9*HB|DS~X~O1eLrmy=kP(K6R_K%vuVJbFnAP&y
zk+aD{oM~-@m10Q$Ud!+^1f^gT|5n{@OZT&ZE9JJ)Gde14x4T#Zjf$(sk{mXd)a0Bc
zMjt1a9u5H5mGE?+mbCZdL4hZO(M|>AW}meLVcH@9!c9ptp>tN)2-@rk+e+N12J4Ol
z{z;F7$@jdm$kNOJaydNsE5D-=iLZFSpRzP`j3>w!zDkyu6hw)HePb$V+IoMTUQbB!
zyX9aek4^ihn^DzCH3?bUn)!^lC_O;O2P%1n$&s2#7tv2J<2PPUDDuy`Lt)GkDBd8A
zm}AweW~BRC3cJ7**Wm&YufB;)&H;`51dYpPo)Hm1p9c7{&H7GHa`{-2lhV-+GIL;q
z;8Z*#8^pfjKerimirIS8h&<3K2O`?scXwZRbVrvDag_j9u<i^bBU1<(W}g-)!ljuY
zrNC~wH|w_4o7eNUv5UlLumN(aOQvjMZM6M<Bs7;>!q0G>$=J?DY#^hS0-^0<7+094
zqkNFD{y#S80s_OX1zG1>4N8y?76t5M;n=$>tnRu=&n87RDpKTWJV0@r`YFr;Cx4}k
zSXO_MFJ-SuX;WqiJ>zm5Ei{%gkkBdDS@3jk1<v*O258rUQdf=$_BsW_d!Zh3etWQz
z8VBYWt^xU`BC~q8J;FXpY^c<2?uKCF=~Uf8gXw+1ps~w8-fN^|@3W8M9xK1!G|bw$
zi}gSZy37;GN+w)`4=dIi%ctFt?L)R4`T;vVnE7mYYWWLA1lvsIY78HppuNPL`=+Pq
zbB5vNT5>F0&TF#TMW2_3x8-Q8QRL0<KO^Rv$qfl;Z_S`vtTM8s{rwlCs9&FYW4we8
z#OfpLh|0n$c*#0MqQpJsBC2XqBB``_jGtTOV2hx4iizf)A46dyqaQq9rrHf5n(1fE
zbDW!)W&t3ve9JQ7@~XvocAq~(D?T`SkwrXR!vLX#<{9E^5*zK`5N-_N=TZl$fgv4|
zGta8H!fhclP;#b8gS5wt%U+S>q^fGYx{g4BTfRI)tkSN^6E?!$)ULO<)A4Shf(Gk$
zBbmdvrmoYgQQT2TiwT86<yI$FCdw7{d1#=e(>4S~X*YdbtLjmSc_ZsWi$6$%!*;Z-
z2xIQ*Fdfv@99#fJ2kt_|97ldoyZ84fA(UBp$BGOk|FH}8^1Q5A;RFd`3A9@XqkMqU
zT)ifVowSaW;V;xrWc!uoI~E*`fVn@Ot8o2Jlw(Z2h<N%Tq+^6fRBOg`B!fhAIOe|a
zJ#jHrM&>%5Z=xLx$+h9fwjDm!o#COoLQVW^Bt*fe017yxhOP`M)9`}Q)IkjydXG&2
zy!wv<j~CBbH<E3Thi#LKHpkSHlmza4cF?~flQyoz<!hHar1t2P?|E@D8AjDvha6X$
z;aY{LLZgC;gnI)Smczg;XJ%sH799@$UU@!BP-)X~r|yTsdg*xaF(Wzoqm}(kl1+qX
z8*)UM+cEP>Sor4nEY3A%PJUXylZqk%#X(tut24@Py-f+h|HRZkHIC9ocX67rufHV>
zm^lyWVx=cGEuLl`f+DJuyS{KJ+TG0^E3%Z_f@5kX{MP&RNDiwY^V^Dug(w9XLCtcz
zo}O6J3iK@HaGdmg04tmS22IaeQzoGlJ~y`FF}g1T+Ni6qud1BEM^VsIavKN&v+S6a
z7?x~@fGF15s8Iu#+a$Vsx1t9Iz*c}kg*J1|&_5qS*qR=YEMRLZrp4~)2U(=8pzH00
z4-DPL;?7k-GxyP)RZ*`;#{)Oi^~Bdnu6#PdTa3cO6<_vq;w{yn_FR3V7&H{^Qm)pR
zN|7EN+@1`sx87SHhn7ZK+y70^kiA<y*B~60ZSuz5<sB<D<KWFE%SU~w$ck-*C$j`T
zkJXXUlr(-5Ra)0%o#J{b!n2~reGD(bM=7Wzv*N=^yVO#8QeOJ2LW59w1ro^5B+Zhm
zd7*CWrEp*M6sht)YlA|49>M0lCaJB72Vt3Y8#mpVc+a?%BO9}?zg_Cps$@-Wt9WGy
zuIUSbsj&IFnguR#@_a7T-9~3CuOF`FSprFp`(O-=?Hk`6`}F-NDZ)q$CC96?eNF*=
zGYEoyewCXY<~dGMO@nQmq_@9k&F@Rj@+5t$oBOnm2osWJt9BawB_!E$l<U7yfeI1<
zc67J7Q_i=tv+>3mDG{#j1M^sG!USrk`ESYm2-Gi2gRS32X#%jc=8ZvjW4N^haU1Nr
z+XDa)tQkL5;%XVG7Q-evmHmo>o_qj*{grym>p=i!Pf8xq%z3lrcrDpyafo|(SEY-$
zNKCLHs=;HGDK8abu_d3#oQ?uD%THk|RrEEWqLl)sDq$M65iNniu-!lo*1r<d*qu)+
zT-Ss3zMW_0xK%9f#h{zc^NS2wT)E@F{2*~E7Q#ZHs-aJ~<07p)h>w#!UQ*c1I>Ld!
z^{;O{yZcWAgO0cy$BK=mo-;hEnFZAz3ThbeyUfw^8hnn?JakV%&W&VBJ%YYHXFDWu
z5HFhF0+N=jAuLT$4v!RBU)AE4<>%2F24-fp$|5=tY_oS50MuActz^sKzZK}(gg;Xe
z$*J1rS0;5VF0XF;v@$b@;HQifsKg68WB?h=(&FCt22jV9%+;c=b{dpSbz<RE{XqiG
zlZ)LX$|)tYGdGw~pb<(XcUtE|*sl%C>}*S3#<kAV@h->z{xJuGbZts16_wO}K9{GZ
zM<NGh6-Ww%ayn%HjDAmH@2iMdCh_nLp0{ig0X|6+GDPTMY17WU)Xw$?<VbH}{cdjy
zrr)$CG99|Aw}y^yyTAPB=>dM>YuI4eRi0`7_!jcXxYQG4drQVa*>UMx3LD?0h|{8(
zpqY6hx$MCq5^{Eh7=GarQol?3bRq4^f=bTkI+JS0`oW&D@>K?x`^m4R^SZj5hoFC@
zhrCR2QSDX!#M}oC+?zp)V1$4dl`eF53zeF6zTyE>Hdvr%OXFgr+l7bNn85)<?Y(_N
z_6}Z>*)4Nm?yW#=pXNEIPCLnKSio`)7gO913Uu-`H+2in!Q_hTma>TNaB*IJs`u<F
zWQvD7@26t}fg^;KITZkxK;vu+xNFGL%;+-a?UJiMW73YaC>rDVQg9KHXf|Tg##(}K
zi_eZd!y2n!_l5d5RXP-XJLLv*5v#3VZ}Zye$x%%}u~Nh)(ac4Y3ZAd2rA_jsaNHPU
zdhSGjo#zYud_i7HLR+T;huOjL33~ubSGud}-YQZ^+{T?6m4lt=WCk-nPzi^n2c2<V
z$q?;=Qv&p-oyyFue}Cr~T0)kJILv3?jW=G#-tpY{l3bTWb)k}VP<H)&9r2wCMoOPQ
zeJhJFg}u98Ixa>KFycW3wJ(gz2QHL%rNf?HA|Fh&x@+$<<p7O9Y5}Ajza<>|m^Db8
z<GTP2t(kyb2FSuq!%i8Ean17Gs)Ax;mO#Qy;sAm9Ttt<&;xlK=BP^Ru&1jb=?J%58
zf>lt2h9sI{GRVCm_3Ku-=&+3H^BL|m4-?s=kzMx<S?+Xe_P<%1e^#9H;vI(mL^@Xj
zpT<4@yVkaOzboy_>J|q4?eB8h(hPSpyHGQWqwaNvvodSR;+%D^`QT@WumgXrMZ$}C
zR>@@5I1LtmlILDvqw#z_O!MDjf=VBJCLt+{8q=-nouxeGXZ75}P&OhK326(>>-S1B
zPnIZIz^Py(NXpJ7G!uK!;mef3Ed*}Va7Hyks50~&ARB*EP4A8+bYWBXLq%IFL)!-u
zdKgo4Iz0}<XFZQt3#LCMsblJS-k}3fa`ozAD@hXOd<PTF<}4?e2f&<I)hN2kOZ?X}
z=3yjNPzXx}RPeodJ!HW{NHaMyJ{1}-Xud!q^237&L44u~rh)sf7Ro)?ORAUGg8ik!
zXtDK}j5@-Af2PWD<TnO3yRLy2EtGSmt>DF3U|1ZE<h<*Okep$#?i!E{b+rnCrCOeX
z)f0p{W&^S9hl??T^XD9`h;`?Hn~CMQ*608Q`dkBWvD}lJD&L&N9bqi{>6q-D1YJ<}
z=`#yW?wV2J<7QdZga{UC-mMl)Yu(Nov-KWJXFv|CfAW|q;u3y_VSjB*pee;1NhxDt
zVfQUj<H<A#Wl#?{1j7ku>QAjDUhX6n2}Y2n8b@Kaj|^OHcOwj95E3bJPvcJ?dEvQF
zv$Xy=y&leNd?OkC=@u)Av~Y*W?)Fjgh^0us?Z?IwCwXVM@o0Caq*)^cqJF^fDh4vA
zY`9ozDAD8IDPY=FQ&JlVS?E%!iL6g`m0rM|YW~%ZGDVVSh8@BTiuFZGo8~jky2Y&-
zrEI#fJo*6-pNBKvJvZdueYmO;=liP2LV#(cjJ?`vJX}M<A&!!sJa_dCplYV*4G=YE
z3XZ0{s`d#oxfAq~mYLmWyPQ$R*=VF#=YdJp#3L_<T0I@={kAZnycdok`DVU;&WFeA
zV8lCecD=p3IS^Y6em|Z)+dYLrZu#J4JJw?5R8{uG46`zGk~gi?G*#`CbKRe>lc}hT
zK_j{J?zte$13UX5Qg%5zLCR`bD!*!w<YyH)H+{#q(4L{6cxL&eIdBDe>4R5v6p`Ws
zeMyq&M_wpTjF>Ov_+hIznsARK^9#%5i49ZBPbgXcRRmI}+4#+vwlzAG)s^j2qB&Ax
z$Spav`}5MlONd>Bb8Xwfxy*18o=z_W-#O;T<~jeuaNbEz&YjVK62H-T$fw?~;y+$b
z%4~LS0M^*zbq~NtS8oEB#N=E_Qi7Km^L{)&MYl=B-g6cLCdOJHwr4lZ;FW*4gux;T
zi%P#{HeJUVj|;icm=V!emF$Flw!e@hWUr4U9|eD;zfbvR%o3bBP1mi!?rs!~>b5}z
zAUB6SI$K2rGy2e$Tc=7kF|w7`@zWJXkYpF{&~)foHT79+K%gd@kfBSx4{;{m4UPVa
z-{mW7xjUGH^=0^KH=gT9;clpUVcwBP)}`Sfss4vBrH9rFJ<3W~8MrN!vNC_?a3K=5
z#+fT-M}tKZAzlG#KxB^t5ZL2Fl9qMc9JgR|Dyg>P=;*V+j%_wd?eDo~IgJb1GaJ~i
z`(XO-05?5Aoa5(Wnx!*~Ks1RMLQ0m9{72J->SIR-)>Z7Q<W1AO)!M-M?3lsN9IG-@
zf46VuQeLCaGv%*PAvqK13@v?MZZxcG2KPWX6#|~Y4swHGAKWs4`~3RqNO(m8H~ZKg
zmS`%5s(aNZMOZ&Tl}25ndZU1ZaBC!`T<oT)r!KS!PY47t;8VOheR1fnExx432L!xa
z)+<=@^27U0JHNsfgdFbw34b>drEtd5jD*Vv9_Rk9Fi2vYcyvc*w9HbnHf~UX_}FXK
z6Q1xTvsAfWpimpv;3O3G;Ff}vat3`^T)f6t7Lfp-5v>c3)pSa+$?`tJ4S~DnW*(5d
zI^ry9*r}I(wpNNnjt9nTTxUt!D&W^Iwk!h)Ht<Qm5{1rRx_S#{3aWnqf-lS_a;+`l
zdx*s*)v9I?-!7@WFPGd}t<H`%>>289aVB0uwkXvIrra;ZR{ZdQ4<6_-z6Q*l5N#2n
zdH;Yoi8Sr5(#F+3%Qup@uW3DAe=ea>0Yt3gUohCu`k`hZlS|`^0hQK$J!1rvV0~R_
zRUm$1U90|OUX0ymqAIGk7$f7gLCwwL?J*RXxOw6Z%YbeW+)tBAH5gRw$8963ayPIB
z3^vgHQOR>Tm|KS3*~B@VH1q56T?J^DZF{@;99x`wmvM_EH^kxN+y`tyhfjxa?{C#R
zSqvYNd|?<azJqlXv_@q4%AJ(E+$>P_kw-Ky>@cy)Gn43|X_;ZC2wm6u<F%q3f9ENg
zma}8j1omyadxk>|{O`W~c%AfC8%NbZD>3WSPWOYrLlR_t@18HNpZP^WKdv=|gcCho
zoWDj|KAz{<Jk-n6j2IAVX28$jU7J#JGi{N>6|0~lyzPalH7AfPs*WGvB_X$Y>?9aQ
zQqkl-V&vN-IRk2|LSXB~l?K!P_>%Ii2B*R3UI4a<ouspP-LyaEkLw?2XV921O(F3d
z<E{o#{%61W&akEA^J)HUNm(b40Ap)T#pe=L8^P@qh|Ef{JRi}7VQJQz*iM3|@i_@@
z>gT@TU^$)g-Y)PW*IBHPWv0A9z;TM)%IR<sWNebvy>)to$3b?L1%&oGkz$er>95Uh
z>QYaWu$F`B+@h{!dJK26m@%gyeB=F_T6c-S>YbD(&f3B7jQM2}t-uUkp<5R-Zxp@@
z*;(v?kQ|3y;^Q;AYY+QQLtd%sSq@5{jEIHeR?O%Uq4NGj0b+w_Y0GkMH`j{+N7J01
zUy#WhOkPg~V1TY;U@h<&!g$r^Z#v5;?g~i;iVMeo>Y#1r<rf)uKlhqGh?0_;B5Bf-
zY9}5Q3P=X}Sr~_P&$l^G&7VV06&6n*ERw6gY8^xpqLZ^u$e$yXp>H*9kp=$8)nN3>
z^wFr#pVqGV^)h&m#=S<&78D`xkCm6pS340mha$z~oL_gaROymtpz)SF-UV)d?%djj
z<j8e%b)L(FaVyqZ2=Vb*mR-@MlB$Klt$Jq)^tfdUdvB~TalOaB1IiXyp^v;9g`bg3
zU*sBJ${LWI4dA{dzc;}s=`|hR*co)PMc+kO>YngGGOYT23xeKyi9E0fTH5#7&gh!Y
zifT}bEsV`l!4GEIMKA>~q>g4-Pp97RJpI@UvV_v{<vkLB-dYFO+3szQE0`Cp-f<!l
z4kArKErmY@`cByMJU*9OcQHgJ%dH#*jvHA8Uk%1271vnVAU7*E_mG;Al>?_;EacUb
z)%{!!Ennxy2jx#>(}E5VZPIt-UrSI`th+DLgk<~sU?yIF@U&+}*rLNW<TrO#F*uE+
z7e{s!atazzYK>)Mpaz4cgB?9({7Up{<6c`>S)W*jheV$7S}#<7d3(aSa=E;Riy7fq
zB=HjT3MtO(IiAT~DSo=Gi1pdrul)zT3nA&+hFj3e;H0_uldXDjFI35<y2a$jpEZEm
zs525>rh;C&d&_ihJvUh*>e2xkP=WRJO5MR*4rvlkI2-Q-9aWPA$sO*H&3z(_r07?!
z7qh~(G!j`GH!AdCm-D(Jg_^eA&OIv8$`gr*;u?}(QoeM<1M-i5|F<wDT@+yMo6lx-
zEwJsQv6h3&WQFeroM=&Q31aQdgZtZBW;?UO&!!|LS8)whku(pU53KDq{ndAuM$4Da
zt@{xTJJzzM!`*L(L2p($Cg%NY`LbP0M#oH*!WfdXSAkABKOAE74dE6e1?GGjOht^=
zT@evOS)JL!c1ou^YUwM41uYSemF>g%-ZJ;6rp8YP{Tv?8lSWh`*O7Qc^_ba%E6V$N
z55;7HPF!9GjO~XVmY(2o^I>J3U(isYk7|I;szB$s``IKZ(VaSy>6peSYjZ3geCL<X
zxdlGdLSP%RiH*&&4U5QnN|ESDB2dEKcIJKtlQ?&hGOlc8veNKelHWu)IKi0;eoWb~
z7FbwVK3e71Ch4l+N;$AtiY}jn`T>&9XU5tQ_SLR7^>iGrL_+3B5OO}(qB$s>J1wAQ
zL|70ob_?K~+&EyGli;2c%cM+_5dzg=SIDWDZd-bvNVJf05S!T<H5-Z5_+4aF4oumJ
zq78dr8E+9J;60P4p5_(Ao$BGdCEt_Ye(qm-pm)vSF>gPY^j3XWDTzU^@(ha29NCbH
z;bI^!B_5t!Cw;|HO)Rl@6y#+lv7}yW(O2?OHM0%W&2~=>XBs>+HIEG&4NA<M<5<DJ
zzqi&qN!#^JOa~tC@PXCCSnX+3m*lg*5%mjnIj5=|So<Z+6imd>j|^0G><E7QnIzea
z8;uFWh8=#HB(<2wq(l3IZP>k!_#2?(4=PsuY+WYn*#k#1>fZ{(2chXcTtO?NfSsBn
z3}zog`na(t7*>>*9>G+Skjql~4S=8WbW|=$5_ccM9O4$-TT#EOA~_sbji(be*aDWS
zB{7o%jRtwC$Kw;Zqj5Z%B}{t5&3o3z$&iy&eD0&8Azj5OUt?<qV{A1>u$;7aD(`x@
z7^uU?U*J80={O?Q@EQklgPFb4c-cV7b31AURST6#=c(7mEqY+b)NgUt-T}aGlN_{$
z%ij5mEt3mz0+OMdwW!=j`h97{KkZRSxE8SO&^QD(+0vW0JL?|hRldwrv{Y)?PH&jt
zz}g&iDB^dD#g6(rum&C<n7+op^tvVSS4Q*jy&p=XPw_4t7LWbT?)epcMRUJWTSVhw
zal$hMza4Yx#r8QK{XSsvERP+pv<TRst4P0ISIpeM-^jm2T<;6=-W}cptinBc4ZW@B
zIX%|@hrRcVifYT+g^voNq5?tzk_~_q>3~R%N>Is?ML-Klk}PsYOh}PbBuNyMoIx@a
zDg_D%A~|anIa=gcbyuCY&*`u2Zo6f__Z#<z{}_&Puf5lrYlde&b52U<?AVjF>K*k(
ze2-hw_C~29jRkboX4VN?>`pW~^!)s)#-M!4JedFLc*^UR(^aKLgV7k9K9Rbjln%_t
zGjWdqzct}nP7EasREs_cH~Ky1K>@BIJ@YALk(4^_fY_~4Kc_f)xW4Asne~I<<mN$T
z*P$2KS+2<)?XW&~&#_2mhT0xb>hg%h>F1kdPUKoT!YT<e!WW!I=4PdY(?=GHx{ERN
zaSc&ZX5iJHSTC5$VU`4ItLsi;o+ia%f<AVPzJGYc;Jt5Kv%$p|SmNDLzALk_C()N^
zxublV5gX!VVWDwK@8}{eM?MZp7JU)kshRF8cAsD9s^`4U8qAp&adH>A!Ki~EH7JaX
z<$t>Cid(V+d@SH0Z;`ILyAg%Ity`c5su-h#n(dzKCh7k-=EwD~;2{iQ*{Qoq<o!<^
z6JT*3WTVxtSqA^OiolU=Uh&Uf06*S4N>WAd?Q5)&KmOSdznhO16en0<g^f?|isbS?
zD;tV~hdjVdXZ&!fA7}8d$5K<n1!$xDPVOqz|353&y`=#UVKGqIRT=HyUa<K-ND9W5
zx6ohO4Tkc!G$ef(c*xgsNjQ{k<swzf)?1Wbgd+d9!9yq;yR@NftMCZ`MRExgD?yR}
z2dBV8#Ph-~L)g||YUTSY_TQ?NAL|H8mFq!AfQ`y!0xYu7O4phCXFNKHmYBi{|9uok
z!eS&{zgkN`k!238(*^bSQAe0_8RP5*`Sgu*FX`s%^JnQ93owafu&>N?g?^~eLaK!@
zo#O%}4<t7>m{cl2ayJ+y5I5WJ?wp4pHwXB{12|9WN{>F?M=B4gC&dTndJOqN{RtZ|
z;JhX$j_9<U$C%c5HO@Fz)8^N%>K~$)yQo92Ix<xJ{g(gCm9DF%<fD0kty*vi3w>_?
z`&zad62zT;EYXCeto3iH0tie6!}3uG_xpEHzI#%4b`j6qUNUu6iSoFZgHH&Xj3f!J
z9czvbfByQGazg)Wr|@7mHFP!LXdpY=xiNsNY31`_0n(TG9N^P_fqnlZ6@(U*N}$}j
zO$n8%5*l{noysV-zMn_e4lwge20Q~vRjjFikU}1nsgvIDfWd@DY{<v^c~(pV-!3t}
zzgblBlLd<RQPHMO4!ZfKGJc>IYaLV?;=cx(AOH?=c8_j`p^)2%{lxmfhephJ-0L%5
zHGtAn=vSPJn105i)VB5D$G76g+Y{qX+IhRda_x}gXGH;QFRH>jWRpIJdqFY(C`&J!
zezomw16Q_Ku(l06bvJm%UyK&R-}kC2W{3-_&TaM$kUVFG8rLe;)kmPZ7>>Br-r;v*
z7arPQ=<2xk^~@u%5ii_^^{`Ls$tV-I5jolIZ?rEEPf%um{p#ocAc_9#7ud2P*)ULt
z0Q->BRibp5Nu+#I0{vrG;6L2+C4mCnhk#X4eL;Hr3sLFSWf-OKJqoIz*WEV9b<)*%
zq$l?L%nkis1b+A5t7?)_KI}D9pG&M11*w9Ji{qgGND!%r765$wUc-Vv7L32n?O*;u
z+Lm)K5IdVIh;W&HB>;M>Z27L9Iko{(Ah=1nBsv-IRRO4LY#-!9zQESbt%U$V9Mw0e
zxEz_GZ(osdrNSwv0K16%LfBHgw|^yAv6e^(EMHDCz&Hz5v)IHV+HD~Uljijxz#W}i
z)ECfbi849&0M(Uk5DcHPs&E=Zo#s-Dp>C61yHec?Ks8VXt%OpNgtQ)|GHJQMqZ>R;
z(SmXVUE%C<vJM+P3COk@s>XcuYU~`r?O&e4_ox2vF3`9s>2joNBrxsUe>lXz)bs4H
z*F=p6;KiNvZrv5I^XKc3ERuk3by0_sHrN|daRo>+iIKW$fSelY>N(qbP%?u$1cSG{
z?5JAPM1FW>fYE8Irq0xlpK{fNc7wPI>K~v$xC>wsOa^G7A!4m1INg;UjllF*7$Up$
z;uL4>OHuS6#ZZ@dZt_*EOt$le$q*LsV+>}|KK<qp%$59gS+b~dEu_9JzgewMNnfq2
zUBy@$@^erlD1Yb*cJn7Zh{pAzw`Cf_SdEvfq39pbn2Odg>pVtU0qk!I?txX~2+_?)
zH$&?L(M2sm@|>GPkF4xQiEVx7+YUBp`+0_>kz$o{`(I;8sdLb8q~y_fR<=V(v!qG%
zd8Jnfnh+>oQYU=?Xi@|yg`%NoR2OqW*}X;hc~2xzA@Wx#8asK;W2%FaAn2s)rsPr6
zT7`h!jms7s7CZ#oTAg8M78!s)K<SKkwQT*o?*IGs3LqZj>w1B80)1o%zLg9h{q{eq
znn!mT_UBdD&E`|eU(Y-WGcFxGZR)=g3%G#>`Ru7<;{)kh$mzXboDV>d(E>Y4@XCmE
z4F*h5BfE~v1CT#`B|iHIXFd&xztE48<^`f+ajb)^p2zuhH7ExS1FXQa`hW&H=}SsS
zNCSGnlgpTt31}W~OHCbu9qv#-s4R4@Voh}%@xueuYQnG8Ar|!hVxLIzR-P?t)=;V<
zY&Yi@u87VdI^SzU_KCy-FtWPR(-{}A4`=cofm|piJ0A@rbtxgSLHxF-CMH2GuUf3M
zXMa<3WV5>FAn=$F6Qxr1Y*l5!PE!@zqBfsLLE*g;a>8USE-gj{AMtl#`f0n~l1|zL
z!kC~+!#M+!tA^vCMOn(sgqc!!Voge0zOVWA`avPr>CTL66<2bKF5`N=^M_It?rlEU
zDW=d#Qw!Rf_dhKe@2wreER{ET4zk|@wC-5}*Uv96RcI9gwR^Vq*_Q7&&^)cBSWr1V
z+kw;{EV4438$zi5htiw9fH86F<C(8q8V7|ro7Zx050>NcO}38ppbF(!xa{W5ZNk>4
z3NLg5q?P(8`Bq;b?u{|mKT+A{(Ko6<ij3S$wFVAxXO7WXxPA^J4E`(}WDYQ-U=nnV
z6LK1T&nP^)HaU>*@3Yy*fL}f<Sid&p-D>)V4TAc*Qzw0p^d^3Kq=FKld`0w4axZ~|
zh!k8uixI}F`~Cq6P&vbd%o|BXYUZEn-jIri>H+GW;GYdeao(vrf6Nd8u&)xoKq!zC
z+4u#(^=J1OhJ=l{0<^TqkHS#yr?1K16>tm{c!<vzPhJSmFzg1sF`GA8ukS!ORNyCo
z2AcsBxlo>A!~o#H8TUIYyQ&WOAF~&*0f5O?io`M~*q4O~fNFC__H=9hhv4Q%U;F>7
zkZj9&yR&f`=m~ml8w^eHT(UYzdm-k$JWXtZ{G&s+sBizKsK|N!7?}dK?r6%j@^8Pl
zTvW7-B~#k}p!s${VDjyEY6m#T?jAgQoFk$4!c&dUdijzw;}?e<UQ}hh%kJ38%*h$H
z>gjvkN{C-taA*CIvE~HOyJ}tWGYD2-8Qctnng8C|BnS_A#=)V>x2NsOkKXl1rw63z
zQxCWpzB>mCc2!34w|CdNdq=B~Oj;F!>XtVH_hNO0yN&?mAqN5If9x9{6usvQu0?N8
z(r;Vb|1SReFI><6cLe0|rWW%0P93A9%f;pV>|hiMWqs>bn7@dqvW~gVLB1#m8f4F2
z6Pk-A8RB-mpL#*69+4W_plD)mf0#{JTse%94Fso;nwn6CMK6Vzn3%8$N*lxlKGYPI
z43lGxL_RNlD<p)dlIJl>3)w4q0cS2{$G|*}s~0lw4mXjj(Xp%Duxv;Bo7@zR)hHY6
z?xtTF=YLc+Un|DuwO+W6OL7RlCfYMq!39Cieha{oU7>*kBG^muZ+CVOgX87~Xr;m`
zzzpu{!F6`DqL>{k&z<DfpUq2Jg0M~<`q)LK439Pc9U<9`53EwNH!!Hk_Q63Ge%0uP
ztjO$?TEFXunMFn5aJXdr7N9ZK6DU}Y6<gNyewCvA4;TN3(k+kNn@I^{W{$%;wtZ}(
z2rM?oKjmy+4{xxxyM>C}utvUr{6@%YNL$D+Isq}0TQ<$%G^W>s5o%0)?4OxZ26w9y
zQh;DpP}HQ)?uul<gh|;kQ%SFDwZv{YNfXvXJe(Rj+CL9|zR?^R8ClqPe+c*fR9bzy
z><a$w0y7hRV;Zg$9Ix^33lLU6Kz&Ao1NH)Y-^ZhTzA_aDdXb>Y7-~CSC4{k~od;ds
zozpfkiHsj1aACA(?AdagjUy!XK~TZ+$sPf^_fZ%J$5z#|=Ih^XkT;9<-fjl>R3OIr
zhsX4vOa~qJr|b)u3jd_zGdW9bT7|i}{L1-gr5tM$?f57?NCFZdpML}<HfXKZ;<Ff#
zk&~k)TAlIYL_^qstW%$zuobk|7W^c20i#ym*`a}2V3*C5AAiW~7<2*c?lS6Bao2NK
zEq(s<9f4%m2<vWdPslMF5XO77&E$U9wz0Plm08{Pl9n*HyssgI6oLW*ygIO4sf8S{
zmt&epa`!4B`mRk>j*Kv>u;9%db$rB7LVv!=e>%LsJHUUv&Kd1wg9j*P2N5m}BIZ)z
zM0BlIo$%6>l{xlJU?XpSwLVn2S5NM_k2<A%IGmO+*DF5y#ZieX;*u^spCM!8_M{cE
zF=0)S;EMWC4GGQGs+7+^0HZjP70ynad=FaoTu3b{5(X{1JTAq1c5fiRVhkS9(ZZly
zsZY*(GpS%(YYRzKbm{e);Zl;DD>KpWMb4dT^h8(x-YT=uv%$dQ6@l1m4n<PEv^W4L
zV{dQI;@0bqyN?SGdj9<R{a3FnY_8q@`U<&ud_tu(mp@kQuLIo8A71(#0BBRUS7(tN
z`?9`qP!6?v9r-a`=1TSYQ(p7w;}Z={Fy0=uEmbHgFNZt;z=g2LNM!G`AS4z|6xr<Q
z;^gD!=SQ|<4C;?tC9v~eH8{PrABxhb>!-PBk+DAKILDr@DZ?{8GeaAhmNs5K`IHyi
z;`4G6G?EU6B3XvnB&)U7Z+kx8z10Rp_K(QYz&3qLX~wk_r(=M@eCi2Bs^qWF9eN2m
zLAv%NU<Zr+X>bkp&ogoi3x(56ZX>r5)1K|6mtV%zG5(92``;dX0F^w)xfj?Np_#_9
z=pDH1Mi47))HMNyp6%65@%i-##75B=#OwF%&4HJvbX#s>TRJqu7FfM51~d(=4Km1y
zZ<ZVW?tkM=HKZ;2a*qbs?)9K;V>(CB-XSA1Q$yEub8B#Y{^cobtW~1w_~HM;fBv^p
z7C@y>GR?2iH6ozr;rW0Ts&ENeP?zmaQ*qY@l3}Q$I0HON{E9(Ru)@7*+NiP-BRbFx
z$eGXH=y}U=2uHeSFMG9oUmyu&Mj4p-i3-Q6r8pDK*h2E>m*%zy=xQ{C6d+j~B0E`=
ztnT2AKzmToPb|JO9>i_cpe{Ca4098-!QRjxblVy_*|=95%Jw9S2NY4kxYc_33E#GO
zg9l8wv(q&FPp@t-ik*z+=W?DMrBL5pyQ)8SHb9o|)5Lj<3cK&g+VxkU0NHo_MVagF
zeX2<b((Ag9*!v9nbU1q3HB!keTl?57>^wlpa7_p9UILQ^DWCb0+R||eSu6s4SjBm~
zmL=N6PhC-<#~eKc;mLR8&0uG?v<mZw8Mn9~7$qA34W)e*s8HVh?r~_PfjC;YMo1ud
z7f#Bbs_vzNd`8T}s!=8g0g!ww7_8B}+)&O3;cFi62T%*s{8QT>lN^8isTObmwRAA!
zigqtMcjTD>erQv!nz!45DJ0kNSth_*)Eq;acSC{w^W}dD$@i!IOGy5djlXQ~FCqEA
zBqWdfwF=YHxE>y6Wx25b2+B@?p*f1bjc7(6%*1rk$s%hGl9Camy{Micju`#cyZDYB
zCB&S=;OgosbY0#ggyo#Da!#>EiA8by=g-H~)j#69jh7Ifwzk!T%{crz?rcg$#jEHc
z;Q=Vf+}J6S8`W$^xH4P*uC%a2Bk2*p=m_8R423dR#FVbknw+D7&sR(zaw1`^-i#nA
z!{(28SjOj;WdVhj|BQ>YY5;op_<&uFUYUD88~?CB@gB0t#tNgODZ{TnTbfM%mt_C^
zA75(70pKS~nDj05B&een2qmR?k1U#_lysb(b#KBEU+VT`kCYf{YvboT^uviWdEU5B
z3#_c6q3W!)XQ4o02j~PJgE<lv6`Yneze^>0j#pSa*aW2kXv*WmQ|oZrz@x`mNC7(@
z=N^WP3k_A{ipVHI8{xSdcf7By#@Q}9>a}n}3)|#v_GTV{waG4ZGK!STntIQLdaOTb
z#0mN*u-RwpyY_mb{dN!|zGzUmC@WFgXPJF>VFdIO?!6V4a4PyEeT&qe9>K1hXcPm8
zCqU~QW<}NJ&xR!#FI1(5oZAE&BGDBbw{G2fx-`(=k7!Xg9`jG<j6Dl!smrurDZ>_e
zE7_Inc13t)a#cAQzi^M$*oi~qEW3L7KXodGa=Bj%Pmmj-2Q!J(16mTj7ubn1J5L^6
zds6}_+)BO}V9E?9%*6(px5TVa8j2D>g%w_Z^Y*R;6mS2IJf4J-4O&ENVv-zcMYFQ9
zj>SHFh$);ZpF0`-k;@qp3;^V*MnHGau2>!S)+~uNX?;D6T-d;5r)vGH5Rty(THf_x
zC@27jR<(ToL0I5n)?-!v4n4j0Wq9NlF|;YiBIxdbc@xOOR&4oEAjTbnj}5#quEzl7
zd&}S+JpKH6S5;nK9;&jkKO-+ItbHa76*MBj0k~sE9K!DNy!habwop<&U@>2ZZ@m@T
zr#+XSCWT40Vw+TxXs@2vuU~7+-IgyQe!MA6evH>3FT{Ic$951oF@ztOaiHd*pA?63
zBV<mIz7n5ekdl&u^>s)4c-qE050m2uY>CuM!_SGe6H)=++sL2U*2!8DitJnghDA8~
z4SLNa;Cm?28cp1Zea5gVqK_dI#W}3Q;rasm04>X%m7SfEWu^!6QfKy4G10B8>@x@I
zngkC4+<La)D}xnL#?KE+4Du!{_-+^$zU$%o^WOfvp#ZZdPm*5&W2l&}vFqvSX&dVl
zORBL5Av{QV8bHWCW-c})E=wq6MKtrvJ(Ei}+w;M>4b2$A#eN**Z499TxTd6!_O^eW
zl5&y@1nX`?785ZZpTtuAiIsOd94j}v#j)>`>cI#)%5hd`8tve6mKO4e0#`)P*|zoY
z80o2G>u`o1AEye?7qP6yyrISFq?4`X4wO_Z845NT`2r!;@c6|&TvS|s@LcIYW!*S~
zPFv8~*5^@Fut*g7??)k=l|0Sf8c|)lvY6$eg?b6AB>D{oKCYxK;^K85`y|H+DWw;P
zyNI6==<hEZif*#&1(qw$j!si%Lta*Q+bVOtA<hw_Z@fTPVOM%lxEaFR{}ym=Z;hmG
zPHt}KhGUH(HN3XiTHCI4<LG(JIn6uh-N^3Waudm90j8{QhnkQ2__`f;I?!g(%#X8l
z1nDEI+Y(u4$payU!SP9el#|lYkT?-Wcyoi?eKW6WK6KyFc)E&st-{|Lps2?)=K(f|
zNJ}|M++S~3R=V~i+(+D@oPYvN09Giw)g_iE%fF@>pEQF*^+_rPwN_tX%aP{h+j&xr
z)f<#pFd79#zQj<wAW+texCYu17UH||=Z$X9$2qnJYtEN=i-?NCpn5{I03X7C38H8a
zY>Q*cuif+lEjx$sgG<GTRaIwfXwOK<14lG%Un$YE1Hna`s(ds&!JTk(R_N<e;Yh7n
z5DKN1@)_jAxrvQaLUVUjYt)6bApwuC4wA4ii>7+<trndKlhTrs`cvVu$J^SxPMCU*
zy|%VDDU_7X$;v{hi}sy4y51m5(z&DCs|uoVp>aeH<Lxh#I7HuP3vysCA>A?tKtotZ
zmsL8AWxXGB0@>LWH2SLV;HLud`JE**?1*L}6EIgJQxZ^<{v@2$Hvb^9k8?tWNN^qM
zzp)iZPxRh=hkt)cvmRz(!n{yjlVLoQpavxwQ;jC!#h`Cl2*`f&i1uEu>2+$R!c1=C
z!MNBIGjvl%M#dvGF4{gj(W}PBsUS9p;@ePZF)R2z(QmwBeP=}sGm_{_*n!1EF`x(N
zI7w3e+~f$mEFZ~`FiN>aka#4zdV0BGuz?Gh($Z3E8zZJ8!O`{G8<dFo!D!GC!!pNc
zdUxIF|K>>)M3G&gh3CE6+1l06-aq}3WHNyI9rS=ga0#dt;Lx3&(Y&(*g{yZAfPS1`
zjG)jcH!A_=moK+x6$(}FG6067?pQ%l-jg!`7p^6c^+KU@o&mV9;oihoQ0!AaXsETd
zNqe0L<srWW<R6vPe<vVrJtC>U{l-FlNl`)fhtA6{VfjY~`<FKPQ#Joh?0|rfZ~#Ow
zlEkMP?0G;r5=2f(&(#PGU1%dkCiqjvzT$o!onN&L4B`&Rtgc50%^5^1k2-ybhvH#!
zd^)?ghD(=4{Py+j&AY|eY_q;%`9Jcl^JeRpM~lG3F-9oBOELwS7XWWPKPw=+W78Ft
zl$7=aYZcyk2j!h7wF68+D|OI`iqu55@tf;I*E$-w8wVtYo|hWO$_p$hE?ZRfhb4{d
zoJ~kM0F$y1g3_SEOOay;41U07u=@yVNNn7He{+!{!RJ0IAvp$0vP<Ul<7q9tPSU2w
zAeia}<^d%8e>kDL9W7D|#p~pxd?~6+3hcpnZA_t#tp2qn8{iD>Z0ackWc_(2HJpnM
ziXbO9l3zIvw}iv7pvPqx&fiOI&wD+C9f8$h@AEmutpzttGh(zLQBBwwNNk+Gw)tad
zFsgQP1ns|fv8A{TQ@h1VN2Q78en@4;9n0{)@EHv7yt3g+{ML*>xP94<_1*T)PL@Dl
zVlU|XU4>{>)jSBJJq`s0EpQ{h0y>1RW`{&*Y}>H-cHRiOED#;sEP&?nTkN1c<#a+<
z?Isl3NnJm~MZJvjMz*TPE(24#bLY+lwS*kkZ1mgG3{eVZ(r@!jMVyDkB<rq}zjYoH
zDmMH(2w0nXflfTwBu8jxjG&T%&sR*;-qe74+OGvbhNQ5vQZh|LhKI|4P3qu95QYT{
z5Y*$pE$N(c`rvW^Mzp!1_>Vrp4=w!n*QdKw9)2F<TU+XW&24I<J>Lvnj{_4{AMLEl
zi8C!Z>iMjxWUM<JF^7=L2S-hc!F-lJVjJYH!I&MZZ=7r|@Id;we|~}_?oe?#+wKSO
z$1wr~UVFf6L9K2;>oc+6UL4HCf84jKe!8g7E?#a9E57lpgS1t`P;dA3T*_yz8SA<G
z&}<B9QoL|D@3BWy9qgg`?6+^1h?JdnUSK-_8_B%^C64UQlka<oGH=LXUmJE-1r0c|
z<gfSV3j~4LuY7VnA7<#5ila@0`9Wrm%XYlgm($M;oB5;}mMG`F8Xt3ZVr*0z%B7S~
z-r8%y44*F>F~EvN?_|9TGxgpHJ?gxW$XNVl^T~&sPc!wh^)c0+OHwyOdrY?i#c??{
z8^eXaUst1N`bW>{C*h_AUaeBnj20hWKhOEjwITUJ?!nC@_xk#K=#j7L!5BiKE0nN7
z@X#~+3~?kjKxi&HJ^!`0Q**9+{hPo8upXuY_T4jg0%T8+URy)TSGv}Jebiy({z0=r
zevo;23g!!`<LmBGxq3Kb?`>453RFohnw_42wn;;@X9l!{gku?HZrxmSi;&xD4_pX6
zabZ9AOd_av@12;TP!cd^JS}j``cWjWKGy^^2HX(CnGvnREpMY5lD@}$`#N(vJITYz
za+dHQALyM3S}5B2w}2E-!=%(<bP<B?0u@~{`yhzL9r<<;8>dY1K_M9dq#*Gph5a92
zIoTS39_=pl5VYSOl2g9DHG3S)CHXemD!aNKvi|mdzLG#3RO)6T%_K-pOzCKby}3uh
zDd{|3&0>}0t)K`@TQW39<`{S|f~sQuI0VZgpG*l3P=G@MQUjjJYoL0pA{ZKS_3K5x
zJI7x~^SxI1wIjcF<R4Z4Kij@vGV(8E1TdK>x~W0{EpFt&T=g0cuYS%W31?Hkg$N%=
z1vD;3q`Cw)TDNdVAM>R5H-$}x4XwCELBSDKn4|#6id&h*?P{RqpRVv91+VzoVvSIq
z2yQoLTUO0B%VHtB`m`s_#1$xnJ+jN7@;b_4lHsRfy?^|%d=l)UeMXG^48fSjAm<uQ
zY7g<T7<{#_aj0SU?C<1s5&|;r^hZX^bpWxk*e$-QA{V^6BKx02|DP|z-~UB^YH#LY
zSaF}-Vb<D9qrvY!lW*_+UQqu2>+dkj??Ya&4O%52Ib$tJx%&?VtG!6E`k6KVDO-Bx
zDoCn`Bs_q!F?Y1u&;HYc|HTLY+uzXf1CIRj*7M(4@1OcG4nX(-*v+Mg@Q_Ge1I%J~
zw_&NBk%(BCqPdQahzMU0=1A}mB=_peK5Bq__0E50<0&l_2ybW@w>GR6A2warXo-`P
z8?W8IRsHSltjDTjF*b6$H}F3Tz`xxOYD4e6q&9}ZFAEEW2<zzsxY{lDM@Ge#jkA6J
z{`nogDnGR~-~E`5=M(P*%sG11Xo1jyg>oqe0?r<}CbI@Sb(5t?DD;mz@>B<2g3hGV
z8SfBHqxVjB5b{sbg64q1evy#?s%L%e`dZsWZzYj#X+rQ3`_5>6S36?VX~8p35Xv10
z$fE>{{y__LP8x7s$%FI4Q%XhIxyMgo0`_e+etB~*H7`$~+t^(<gth7tz%$^Wl!_t%
zqz%GI2vefpX5Z0~*q;&DKXvP0$_zzffc8e_`Yxv$H(1FQtNPeA&SB5u<PxYDDO?TR
z)@1y{9DTPw8CE!11TLuk)BpeLLI1@cLkyGWKzcp5hYA$JvU}fDixn2yzr299^jaAK
z6@N(^gQh~oJGrQeyZO+_r%I%X<ia72h!6D@6Y=yT8>@S?^}6!!j5THF1)GP-oaj$g
z+SNF?Kd(lzNC1)Ix8I1w;n@x8Kl_Bw4td6Rxz@;iTZ@gnG2%{5bH8M{GI(?|LipS@
zRYw5>^>_U8>X%gc`9E^zKX|UHKhNx>?R-g{pI^5Hrmd?ey2nB<<~ZYcy!XSAm28#x
z{jGOe0w(Zp%w?0-CYCnXM%tEk)>hVEUM-u83_9|y1K>y=+l9!&G5USZm2turx9rMr
zY)>vZKDM7&z6GUCZ})5YTNjSNyWb@E_46PJ6{#n$Bnb;#EfL?eD|Hpkh#{0%L%~cB
zjB*wzP{1gT4oWBPOqf5p?E737P-em$WGD{7$5$%Fp*-A)Ty!!SG2mv8tKrEXC4(^t
z63&QDRYfKv=Dn{&=@hwmtT*`{Dv(83#G(3zi-s1m=~-ssP?-14d#KpzIu<C|8ZucJ
z;A^2?y?TWtmJgUmo49S349rfx31kZe<J3+FA6LMzFw#OWF^>b~706(5VvcN}g@kSA
zZ~(<DgBZcj<=L}mrzfW01~n%AF5M7PBUf|@^U~qp>-PUb&x~?^8oh^7!YCoP*TTd4
ziYMwzY|i3B#kf?|)zxc;^hNR?4Y>_*`YnwxsFXRFIIn(;5jtDi=eL$&WJ=tK-^T^T
zn%ALW){6?5Mawb#o7pmh;f(cge^~}F1&Y*5L&0acy|K``9UFtb{<Y}~VxZI>(IH!t
zYKE@G<BFA)(=}L~naqIUy|&)mj9AtaD_0j%X}JIAh5ybH{WofGRFJe6FxW>#>y{%Y
ztEF&k%vmdkmgncB($te^KwrC$4;iyl+!ss>x8|!9N7T0z;gOeDdyagbav3~pc`e>)
zI+nO9+7N#M(x%AY+e^-%YgdrkW^Y(@(+13Y88Kgf&)#@<b}kr_Q(4zfOWN(C#Uc;y
zMRba5w!XHmZb^SazM(d=Bl;|7qR;eH`SxPFkU!yWm#pn6C=O?V*IsqmjF`)>u-i+@
zN^A2bsTTr|wp&G*wilWQT6gD2UshF3Eid=5NPqo$DkIZ~jor#o%V#Fn9noKM93QPh
zWWqJblzSa>gHW)$XRj?E=|Gd_G7J_H@hfkn8t;7EQUZfIQvvn3sp+zTgHa(uiO=LJ
z%z2_UG?3j>+SJnmYZcA}fl9S!?~HtM@?F$SvVS-vn3d@SM@H`fX%z_WN?n5hM@D%e
zde0`5K2f36)Vg+LiK!4S`gL;#YTd!!k>4PZ)RYe#fQ#;J(}ti|3koR@z#V2C??CF{
zb&8A(#vCwl2EqmD?IkCJiLHvsLt=-~?7fQ$t#gLb<IQdsJcD_QIT=cCwND53C}5Po
zNI>Bain@Vkgzg;q1ckR}eg94};?y@5D2#sQsyoTp2EzVHC|&PF&dX~R(s+bHNOA;(
zn#gM*&HeW+Lt#|@QX}7mIRVNC?0#3kq+qeuT}2ipc6}#N!NDn6m69Nhnd)R?@v>t|
znHrKLAL!)P`lNu-&%N3(9=8@OU?Qm!JPvEG@h+R}f35l~GP2?AgJ1;V?gRW+ilw3e
zOx8Lmlk{+(E{Tya*Y~BLhM;Kg)G-~RyQw7<c^Tt2u%j|tj&noSeeyM*$*pAqe$BLf
z&AcUMZ6t}+ykVG~!Nf;NkxOU6loHa4)0A}Av<i(xAB&F?=V;#fi`!XfAy<q;JyyDc
z3I`Iml(_ga%DEg?p<IPcvP19;!>juABRj1D$c<MF%1h%g2^ou`veSOs_@^0FGD3RK
zP~$L|wy7!Gt5=*KWEC*?-|oT%{L4+ufd$+>1ZQ*l_Nn~VvPJfNx^%TzrhHAWvuT=1
z$0_OgLa<ou<fj+DB{m(BlCHDV`}Qw~I}BCkRcj;jPh1$vDAzY-rGf%^(vZ^v4qt)4
z^x~(Q_B@k;QFqn!4tyK%kIROHxaKRYu61^Hp0-UoEa^T^N5NWdW>+>ODrDckygr68
zP`v4AwhU!;GA2PSY6Z;aqM~v_KQZhc)ux+9BN#z&K7?@t=dtv$%xM~ulUo;kiuC+9
z_uRuM=BrMDD@YqjB^S>Q8hM|Wjy}S>`PV`0=8qYbWRANi^Z5#%hqE<SVV}Bswq;v4
zrpRex<BJYLu-Y8oI1h<zBqIWk&f!*i8dL!H@$D6p8a}r{&-@rsd*v(8YI|#a0=U?9
zrDqH7;WlmaTb>*z&ff2}8o5wh##5;wL;)$b@%cb<$UT<Sdm8p!SW`C??z@c@YD_qW
zYuJ&<ghreIyZwOzX13Wg0=lKk25Ep&{^iLUi=2$iOSdvpQmlJQ)k{7SvOzrvP_c&9
z>#2t2x3z(qy_p1sGRgsHR?mI3kn^);DFCj#)B{Qr*^PbdwG>w^F+dgIU*|i}$auLJ
zAGe&XvPmM{)s`eVxis~-<BsShhn55>G1DXw33|b+@zU?0XbNgWslDowq*w>>b$cyk
zet|p5z$}5WYQE5HdB`QA*SG8qa=D#&oLIPGkb1^D8#^HvYZrqL6&pcG%`?)5%i%$7
z-)3CW2x3>m=l_iHMb0N*qJSBfShFp(wH#rPU5swTeQs86L^iU~sQ4^MNt|fdWSQO@
zOeMGIu{~ba(@@-|{(iW@a6|(_4<iow>*{3BU9^xLv$;Wn=yewjIoE)9t8)Vw4Jn6c
zo&21f5KOQf>N$)zMSZ5bJxi}y&%wxN?)4?SSz{s{DWaCJg#vsX0Pw}jd#C}sVm;}V
z`Xpz`tuOC9+beV$UzYlKs!K1mtjBB)mv{(n<!5;r*?q3E>U_Ym*6Z72-B+YkROWCS
z(4sKko}`{MiEGV_+l{9A%W~QZkX~dT#cKFO1M&56UKF3vF@L{rf=EJ}AIy2Y<zt@#
zgO>Edpf+-pW+arJ|2elUD2y&#61afPEgQac3knVQj=Ud90($|z7$Y<D(MzgoV_XU`
zIyIqavR+Wz#!kHL%Hr~c@Z|EVr~Ex8#74#yToS2iBD6*8o>PiUB_m9vD96=9fi={V
zjFa`XoUQHgE4)s4tJf`S3`Q0duW#v4DVt2<Bifdy&LXny-9ptQcP@P}gAl~Yb5N1=
zWc)c?C^$z9JlEt~uqv*{;2NxuDf*<W7y-{HetT*3xN5Y%a`>?E0XWx5D7(ucM_SEi
z=QX~)*eYDFa=<BDLCCowM{n9pw;Z?1j5FSvWzE#RHRc4GEV@iq$0lPLZe&8hEdtI_
zlW-dDq;+Szs*m~-{9WWn2HdCPYSfYE@^o4ftEbDN8=k1JMUlZeUQbz%ROBZk!m^;)
zHA838CvFcd<ULwo^|RKnYL4zvOwZfVm&)*H{@8;lTN~j%2p2Hj*0%fX&I`azJt*L2
z!8pkjiQjymh+IqX4*_-iFRRp6xiIRYJ6Ai&j~YxY4X!tW^7oGsx%p^<^5J3oBs<_y
zI^0w{3XM-F@dqYVvtNj-X4P(avYmgzf4dx~8S1@IBbUCa6fxiD3}!~V01utB***L?
zgWUR?M;VmT(0q{%N|BvpL}}Sl+ZHn3um6LDN$t0{s>n|-R4^*Uaea)g=;-=VQUWV*
zocZG1)pDiH7&N5uFFSCpRgKD`nK4UhQ1)8>`bV-uCo_7Bt=2rgZlr^~Hqvmn3X>Fc
zs9DJatp%Dgd(^KeDHU!x+{3jFIJQWvkxIXZFB}cwRE^4UQijwz!SHOr-2?FM*CGzH
z_JtFPRpTyYH$Qw9pGaqD(DC=?vQ$etKIP&y<^_h(;j+zkE?;xPw;>|by*RC+1dZ9a
z6TFl|D%SkUc(~w@?yrBq-GlJ?%9-SH{KNM4SE>{74z{+oxTx7&6qsu6!e>@1eWkCf
zX0>1DsND8r5EUx54x^<vd&FnI;Z8<;80}R5E`<Ck4>Dkz>=0LmVbAbXdeX5|fk|}s
z{UwCA4hA`fG?}_^;P^Us&)f|ndf_9*UDspr4KF`P*g|rx<q3PqVY)48)VOE{!s*(T
z+!KXHBkBg(Gfhod9$z0sWAB<>W1=<n5PEBY${w?%{i(0{#~&NA2E084Czz=aH<AJy
z0xqnD`t67Xvkg@#gEEs<dQ3`W8Bbcrl%cjUb1(ycSmuIyco6N#BVPZls+cI&EocVU
zAerMH%9ZRR{5fXN$gr4OpG6}u2NutwqjL|#^9&15W<~P{^XQ~Cq=w7V2%@+9`(aBW
zkjxIvncif?=KyG4>o5QhdzfnkchAD!v-g1@M~2}#`URA}5_Mj*)VkLkmuq7nWK8I4
z0p9kN_)zjsFLXCYI-?G7uA25O1cbxUS_d%Z10wS@6i+@!3_y@8$_v2|Fn9T{0AZ#l
zIA%bpODOmyB;O0tFCqE<n*I`!e=^JeOF}|UqdVJP>`k&H=jO7SrekEhTd#U2Qb6(P
zL-k0I6oZ+IUy0+0Tkei>u~l1WlG*J`U<AnPRW&LobOh#95?f%x_jgW^Rqg3tD0Z>2
z00@lI&CgTNA5BVztY^=}elLDM!8*v{3<wp@5C>`HUb`iGfQ?3(o($hTIvEfOO#fX}
z*^t+TXHm~aS9l|zMb#&I&oTix?!(4G!D_|}wVqml_5wY?rBl=rx{`TrVV0<In61Qo
z(0_zgdoeZ{HwJ=D1_HL|QAjdkxZo%hXgf##1{rK=I}^-DK@9d9n@=RTUrhXlZ&XE~
z9sR{XLK*=PRa~Sc@nA-ViN;6}%UKHE++J307;vcK*4X$OUKGt!sV;;zXyAche7|MZ
z?Pu1V?MQbIshAj_9Lab5JU6hQ76ce?eB-S<91!uv4NAMm3Yc#DtBpzw1d%Yw>2Hdb
zAD+Gv@)^x2cc0z&1T-hlWd7b>`~}SXH-CT?Zj(|%DdL3kRNQA(KQ<80zf$93R;wQC
zu0pIo((VgMd5j?B2S@xjkNY>j;V`&<j}inT0|Ll3R{xOkkGxMc%)F+$7`;BNVN)^e
zoadnU4D!kNz0A5=g@7J|oM82TMCd~&`N*!{Hf34c(ZNnxHK>%U;c4mpA^0|RS7~~$
z-$mIElm?lZtp<xPf7*8}227JEpIvN6ey~7)cu4n(j+PP1SAfPkqK}dh+DPqq@!8(;
zNrnj}z_GDr^PT+w!ZGtx2^!qccIo=uLA$>t9=sPSB;fGpoWcvWTc#{NliFaSWywp+
zpHOW7EOa?00e7k3tCQ_u5O0OVe!!S}VszE$xK%tpq8!)i9q}Am@UTjLNHW7v-;|zV
zdp2HtsvdVN7W7zhACeJ$nBd~2=r(%+lK(3eaQ7&DzPN1|xy3K0h`fY6DPr?Eu5jej
zJH(sq2bVrVc{sJ9*j{p=B|g7$mR|f8GYK$xMa!wrP2vQKceodUZ0Zov$VyreonbZo
z7gNQTRNgt?oUfhm$KJnj>XdM7d?gfcjHAGT?2vFqZ?-{r%(p>WZEfu*8GL|S>Bdyz
z-V%FO45D_M(I>^R3_FX1;$x$<PB-Vvmxjghqa8zOF`!@{!j5<6%D*9psWvwu7GEB0
ze{rEoF%2|yUhTCd#)#uXp~|^;z+FnXL&cZ@mR(cs7(g=GV?}J74sULX4W`9Bf>bIg
zsFM8UE-JN^iDn|+S2?V849&*MKv*oY(-KOzgR&zBa?D9@9ab@s##pqLD8Wa;=A#Js
zbsZAtpkZu7q!c**12@|v`?5Ysm9#cX<Hon-l+L#x0XcP*3}?!dv6O9c$9J|IqfT{{
zUPyZX@_*@NS9%gd6J@F<-j~>*FDY_G=$zfXLk2*h?i!M?ajW|Xcr8yxy}wzs2UE!m
zBZtu*gJKQ7y*fzR*d;OeA-JE-0!k2ymz;fo^sMK$eyk>v?w6T9ygZAXywO;$EkpyU
z!Jt_p>C4g5Oe0WO&<8|L1G?Yi$B=Sy$)*6m@Ur3iXS4JZ|8nFYVA-9%nE=7xr_L|{
z>?czuNW2pH3jonMa?l70b&+fuMy;C@-2ka}>eFL@aa}my4Z(5xEx-%V{bpVjLh>zs
ziO6@3^)C_mUY>r5$p0M?=>>QLiOMpN<|<;V&(;NoDp*+P@nxIpJ9g0j6Abm;JN!tK
z2E0C{RiJ>O=QpmWH#<)KG0s5I)6>((;>(@M&I<FEBr!S5RxdeH5KYg&d4@~VPb$jd
z9n>-al3M{ntoEim*wq0?+VoIy31GG9K{-qI`_2cn-0II+QuAwNxzs#(0NbswiH#fr
zI3S;lB-Jwv+LxJN<BQuKDM&38TurbNjx7hFH8#b}gr;~Tsragu9TeM6rmsmN-IGXo
zNOQ;F`5};NGyudbKsZXt$T)KquwpnlIVEOXBSyk%1zL$4m?wGa`9*2p-=CkblVpH<
zqV>B1CJN9z)&0x4K+m)AmmMyWthC&<G>#g6yq0Z=%oY}}+KUa^dYys;+TA<UpZdDq
z>+kPp6j^5$@?0E{aE0V{a{Q6l^usZGV`SWSc+xv2xT_hhLL~)F0jLna31TX0t8htv
zFjX>6huEQB*7&}oH4Mz&&=G^=>MhcqiAl!lr3wb8hDq~H6@j^!4}F%BBgNocn6|@5
z87m#Pzcys2ynJ~&vlc%-8d(On{CpR65CtXjwZ1R^h73mB2v;$0=HJhiTf5z4Tey|D
zrLyW(|8jNXO-W|H5~vS)x)?9PUSG%W9-=0h&<U+y&o((o+pez~3o1`&utsPk`C0nR
z$}NBMx<^t3F`KQbfRtG^+VYG?$GnPl?frh(43!vH+!091VE-R$Zae#j?ulE|WO^>O
zc8{@oMi&1yaOr8k6-ABLN{E3OL4^+X>gnP>f4|dVl3s?Z$CMQ?WEcp6;sHP%1F(*N
zIX(-FQ+*+kYwCiBAwRwrYiMNmjn@(6;SXB!lY}cDW{>Kec^h;}Q%Z{9vc$SF{5Hl;
z6iVWcOkb6>@YcN4X@`ob$}>DXmzc6ar}$#!1P0u^_nGmJap)q`Ygbsj=L?Mo{br5;
zc5l>df~4!!)%^{Q4WC~{LWCr&<4IyQ)9*v7%6zvvFz#}VLBD#rXr!UWd?Eb!Su0Er
z#R5x@sk4&Hbf-{XnNQ#1db`m?gL>KElqg0K+NPV5G*;DIsp>WVxybfh;~qUp|H&6B
zr21<Vub;1WiFLcQQNB^(NjA@Qy!d7eEeZT`g%VDYAVNS5$gy4P)X{kK<djBJg;1gF
z!|7=YeCJ4F5H3vaT$F&()e%uhQ3!`7Dah_#k(kb*5whz=w!iSL@*2pil0nWArK#mu
zgy8UK{qCwZNKW}<w7kN8nD@&3asNvEG-<T^^qkMe;`3g2;zB)|u;SGDfZi9<T?7sG
zZYyB;%eF6*kVx_A_wP<dUfwZ&;y&Uls2uO+7Q#;S0SxTzff{;9k-<5JGa1R)J9~D_
zmmLK{6Wsa*(mN`tu`RI+DoL_61_uQN3=7U^$c`<0EM{7zfZm7`@sQB0PvRsx%<62H
zxy40fzKr|FDGz|c*&V=7F>c9G)qmjjl`9>xoH+xBH}&Zl868iL_p%JBBEGoT(><OO
z`%?z;`yX#mf_zG0b+xp>MpqlI*St2m!$wcf6_9*t#pgnj6hAJGwdaqd;p2D(gMgbr
zjlp0fyl38`0(~YX*C*B|P6<n>LPAvJ6ZeAL9_WrggqV#n2It9XPa=vm46R*f@qhd6
z{Y_bQHn*wI5_#zPrrwpAd-?}?Yq#b*d$*V=Fra(<(+McJ)}Fn93I@pImuzgdR|=7M
zc4L43^ybPq8Y(dKA)|^1zmyb~AX%R)X2O1N|J=8YSK_vvp2(piVit~i+aiPIO<a)N
zu<NhM0A0G!pZF2+)>(6OFwKxbW4l2%u--Pm#?&!_<T_O?Y@07nbx2vYk+L_eZvDK%
zHvbEi%n?-Zqg!u;kW-utqa~}$XL07l7lC3PyjYr%EsblwU1Jg_8i5XKf8BToKzs?1
z32!7?IR1IIKP#XjxB0aa`!L8cNB`&}aKF;ZX>m{|LS>0&wXm@GfZ%jSzyIwwX*j7*
zI2aP+#wrHWRa1oGHvsY#iDpkCO@4Cp=S_cC?C0Zm&3%WR`7pej^||Oumo@NHoN7x;
zMI~K^)wCdjPk%@h_IP>{(?o)|zD6L4+|A<INrk|mU=k~Bnw4&I$7s!1*-0fapQ}A7
zQ%3IC15l0ziWLE>7o4a=)m%4z)QtW8R6(Vek<Z#UbL@g<c)r-}-b&YO@tGDH{5u{0
z$Ifos>l1(=>(A{i0M+m8zD6oD2o4U$C6t+l0FL>X%Nk);0{QtvdgH)CHS<E-bJo}v
zA{ATIv#178=!^OCMhf!^z3KV#O6KS_z|D>K9#%rGEcmha?YlGt#b2U+uSt59nSM!P
zwYJc9;5(ADo8COuY>Vw4m<Rrhzxb_NQ7Z5)v$#@wY{?Vu#-js{5yfQ=!Z+Rq_YKgY
zna?#xLybOiDo9EH83(;;$H6%vkLUyt=uA>p<xuj|!(QnhJnL8FIo`5{%OEn*3)U`Q
zUKPb?W<lvVyJv4G%^8rIGr1S%I4mfDo_z~C00*>Zng@2xS7c>La@F81!Fa48e4yM=
z)DfP`Jb9vtp+6A`|0A=ILq2&A$xd~zXoGAQDMAI6JSxlcLuWyrJVn}=mxl*%&Qt96
z3(=Bj^mctk8I)&Qlh7Qdein#rY;<%Zpqn!#7eMJvdmtxMUV$7YXOpKI-HKfQN}<xm
zHdI{3>lUJ)YpmpHWc0G*bzw;n9Js0MU|d@mzD?s1dS@<HGi(D=o30#-fV+UfXt6IG
zQZueaI%?e(+EyVbu{+0kt#)H*K{7u_MvPd(JqVI;=T35pJGA?1EUzWxC`kduQQM=S
zwD2P&=X?46rx$))25{tI7bs+rJpd9P{*Md&=)5=_L5iSyiUm?@0y0<)v^KQE;5$4!
zB%t-eg?mvza`3AGB)^pA{20oiQtK`s{oc#{DM|MPY|(M`2@WWS%8@b23MmX<qz9TJ
zu2lhwrjXZam-><5{nK^${>P*LZzzgnz?H&qa<*5e7(El?H9M$fWCQ~<5}#bMTHKF>
zBrAr#q_{W@b)`MMjf)f%gThGr<>8lBE;Id{!hLpF(0B*28FE}31YOSKevF`=QLv<Z
zbK!2nPf652{`h(*IjEfO1x;5NK`n8-3wF)CC!Y!>YJb)L#yd&|fe;FIKR)2gC3<W`
z_M|x3j4{mXK++9Ne}JN(61u*yk%i`zN<7Qhm_>Hi%F|b>xR&D9PzrW0K2UR64H@t?
zBXIz8jmuC;iA$-BqO-kvlG&gq6^vJ3@zSMBB$OVI609^O6M~%moD{YR4RNV}{$TYH
zN`oM302l$MD_mmS8#xAJn7B{P%bSf@94*5oxTgcOj6Vnz{VRetNjO`xfs_3u4hgA6
zpbnA6<r@tiJvZc89;sJD@oglQii2zEFzRsTfx9;?@0&-td~7*EL$086xyqn0FP2u~
z%d>H<ajh_$hs7z@cWL2|E^1`Zr6%8Ll1{pjRJFD`&(9o|c}6<^<AiVG((G%$1+S5{
zoVLxat?fjA<atH)R(?pZ@)y+uc6bGhsJ(F`Wt$9JD3g8k(D>(9pvBT8H*Rpml!bEK
z|8Xt@42F3W+#1BrHYj+t%po>6eLpc#^i=K2+=8-&aLFVjG{2T9fFJOj3=J6#b_iHT
zkph3WvaYT!<U94UhFJ8*T)LZz^w;|VNW9Vns5G%zt?0bI;OkGFU%T3nE*o9k3+as4
z)kur?7FjICEH>OfBOuV~Fq&JIuAEd$q2#KkSE@ho<!j)4Sk2aar1Q*+K=xpT#vMK|
z<r!*4e8WMzb_Gn*_Glv#w_-3hYxfN=7rwQ?9;uUUU$oR}7S7Nh!<LyB5^Fowq*vIS
z=iPwCs0wpJYNA*dP2HPv4~0fMDIPxVqvqyq+oP`-w<@J%p=43InzVmuB#CKdx~th}
zaU?yFrfkU1{qz8Q9AZI~pg@5V1*}naLyP3kS7n2yV~T5uzOwG`za^A$DQD~R7q_MF
z2eTuUXN!scO6upeAlAOy-LIo()!km}{Lo(Q*)dx>>|uU+xvy$u;wW6h)A@XfeTU?h
z&#i*nUsHMuRr5jnj3*FNB(>$F1>=S0x~xCHM7kMtq_?3=M|!uG$YGR+5Crc9MF8a&
zfscg2VC~g<3;<+-LAkR9$i2ocTKLFIZHnovQkL$eb{mVmFU-R;va*`GW$iy@E`<qA
zy-H8vIBs}tEh{rK$daFQ#AB5f=1^?@^;2Y}lgZefwIQ0Vh3MJjb)o_MX8FjT!1~b-
z`IeVo6F?+h&st`}PT@<edObX1(IaC%Ke%RFlMc!A^YJ5HP;r;Z$K}h|uM$<BUoi)f
zx<s6LU(uMvO3P{3l|lC;S)s*wW3kD!7^5ZJyYSFLO&MnGh|F~;je*ESm9GaMg*z0h
z-}9KrjZVGs&c4W7)m3l1>-a<iE<8L)!g;v4Tjw5VF;LIuy^NAG_4X8T7!;ovu8c5C
zK$;GEbmV?WPI-x~6lnNIEBzmxqyMju`6c)eNl|oK5*{CBJu1HW=nNlU%RE0!e|unP
z4P#$M<cIU}cC0*oitTko*Wi{rG{Qi2_H6$HN(Q9}u8J2J8U{0(Xj8w?WQ6{QpIZ65
zAKS&((X;ESx$612bjq}+ZV6~>X+17(*1eA0Kt)c~-N>53ZmvzV`pPwg_;T$(GMnVQ
z5OOxKaYbzKWJXM?4HPCH>4Jf!?K8dC9Pm}mf)^jcs+2rE`>f`R{+J$=K<{5ZpJqL1
zT~+>NyV&V2s*$+NfL!pUqJ;aUy(EXS`*M_>LCJ_)l%Y&wDBk??Gj7xU68$CitOFv}
z)DIp!=o@-f$*ZrcTMy7SME9&auKFuOV|IQm4H}J5Jj^D|!JXmp?ZghQ0x5X<9;&Yq
zTEZ}tI^(PYre)Y|uGaamWU0Rk0Ixw~yHtQjU16o;jW~gM5KNC5Arj<6yq1Gn7R%j7
z?U8kRwz$C3S6mkQxGmef)*|lGKnXtzwD-CSWRw#Gm>mXw*U!Bcd6YNLU+`R#_zgQ3
zb+;QW*I=+npyVbpE}e#It&|USZX{#<``wquKVoymxL;NYSayF*l;QSTo{j(j>&?r4
zP(u8GP`dXs$=LihasJlr6&neWHMwsW4@(f9Wn|Lmwgd=4Nt-jDcw9#6r}G(1A+G?Q
zziSjHOhbD6y@HVC>{%Kolo10IOtzqKuP5ME54h)htiM4kDJUp(kH4dmL$#VMu$~K2
zEQLmDx2u*n-4Ba9XUpVHoEx94*>W(7)fL0c5SF9GXJ#o+o`cq<(abbigA5RrFQ-=L
z@I~<(6Jn(t+EY9a%h+5zEHyVFVLQ<h%j~<!MyDFZ_Yq>74rW0u?z^aw!D9E>Zr`4m
z<t90EJeE_){|!aqt+A|l6UQq1ch)_5>W3L`-`w_@#FJE74chW!|N2VoJ6se%cW+8z
z?4Y5?>rQ)JPiA<0?22wk4%jhYnLa1vw_RVpKnTQ{5fj;h6i>!V<pjNb`*yOcSS9}U
z+q%imo{cO|nwpwC?3QB~T?Rib_s7RUN`%!#AIs1IwXW{Z51r80(^E1sGLp<GC+wWF
z?XEAM;I40P+!ld%=a~>oC7`H=Z=B@Qz%S`oO`I+gw`%pqFE&Tu7=S0qYml>D@(Nm~
zvuNrJS_Mo;V8St#H92Xfa}IPQ6^y|sO&vv%lao*7avux2xRYyCEK1L}&atyLfgYq;
z8zO#-PR2v&+{p3Gh;)30SFRrO_O%V4T$+<HPfw_9C>;<DdHVF}&Fh8YHR!CSCd1cW
zt}VWfrqb(QGCVe?kV&r{*B~jUe0kC}LErWDB8PG&1qVR^y4ap911Lpnxk{j9+g8G6
z3kp^cCl4M%o9x92;d6Sgg0CryiYV2D;K=^klJ7h_YK~u9@@q@}Gcf*3O8%9UOxtM{
zW|W_4YHlVuGyoY&$;tx5GqVu@Nimbq(MBRWvklmk9z4*F@bR8zj)X;;ZMauM!InGE
z1xV8B=8Po!iP-j^E*&bpLC1aXo|!7at+&>f1aD+zWt)SN*+P%@r!k_w%917Jc72N;
z3p<|7tY`Rm1%tbDjbEXQhuj8~8pBvW-@rUqRBwrqkRlmQ{k&_ig|;|$-l+Tx+lhH1
zlnB}^NIu~J+-<I($8Ds>ie>SgUtyz|mvX9dXi9Q&vi==icgz^CetmsVe!aSXt&FL^
z@8#;G!+d^EvMrj&3me&LaP_qN8xp<!PF=oyS=2-N$;J9-JPY;wWy8lc<<1JQnyQt$
z4PH-x!Yq4l6(C8Y>$91ul48)tX1309<pl;k<ZBl1|K^pD<M7?KmF=TaE{}9HB!nKa
zh;baEq?GG9OKOZ6@48Bk2hEcL3$PO>iy!^x%kzB#<j)v?QITZl&HSb^CqKW^IqC`8
zDeCI$D=R5kR8|4<(4}XQQQiGE_;F(b6IynutPpHxynBwE&2Y8RpbM_6ux;448x6}g
z$Pa4DYRWJ$HMI@ItPRI81hRO!Y<u@F-!w$tYlJ~aoynUX>dZ_=z@M$Rt5BN1xl4uU
zTO1=b>R&DgT<a?*-T`S+YP_jZ&!x^Z!J>ci$)k5+jEtHxJA>&D4+Nuvac`H}P)SEv
zpVGSJfToa{#OL%n=^Cp3j)8LnDjjL+DYiWt+GxL>_=W0qY(0tjhyXr1G_v&L{6Bo|
zh4;o0C+fR}tXc;>JUS;CB^KYfh+$T!IJ@+ay*Av9k8%4Io1^%h95mxZPkH$}k7Qix
z9G)*QE=w>UEDl$?apT5ng>GX5ccUzAdZL>pUkp*9)Kp)e$-u<*5{uV+f2A6)u|BU`
zzt2WnDP`TmrTcPQ6+&U_W#CA!UEZN#g6R7^h9BNq0^<=baUThzVMwIKd=LnV<%LPw
z4LPJ|7#cs}8QUKAYEHtc1THsErHMNXu8S`hnBO|0l*U#|9F{_$cQ(hRBMvG0Ww!++
zZ6?HrKmSwYb|DM_k^-biirHLxWiDE5GOIUxZCJ>6v*n0s*^rxAa9Mga-O5Z)+psa{
zu)jPtAZXe89H#9}+aT`uzL132yq|h&sG~#cyEes;kH+gSR%m+uz6FC418bF$FN$V}
zuYL#wBN`GV(wA_j_BZqvw%JijOXKU`Ap1DqIZK|B6`sb6yM6iu&<LmDC$S~Bx`Z2K
zwhTpVyG3-G2(s&+QiaynBTi|XY!&xC*bf0HN)DqOwbw#^uD42Yo(Pj@?C>pf1T&SK
zoo+o)QW8RL_a5nH^X&ZM0qSSF`eB7HOHTXwV;+fH);*E<+Rzegkb9L?%6-d{&$Rlq
z&LR{($>J3b!F#B=fwEB09Uv!1#M>I^hA@45_x|Jyh+z7UfKJ7w3?$oaE=w;v#U#){
zTTd@CH&<$sgeH8cMJpqb_{y<({Ff8ljr*v=P@v!+T0!-D?tp4axah6HGX#&hG5kG0
zit+f47@@ZMuPR6TImA8c2wU|vYlBf8$MG8sT=j3{q~XVc6kDaPM39ix2u*2fRw;+1
znli7I=NSh1(o&j72p&U8xLId`oE26HN+{jh<XP$8$0Z{`3C?W6g)Q;*FZZxHXEoa-
zo`%y4pi(K~sRh;J=?YEny?b#Xu%7c&Yx6;PqSQ9FeEj*0*nxBO^e{}HRRY^P4H=25
z+M*&j8}m;1`i;dZ5RUdOkR*@MWAM{OT}MW@76D->DSOvz$*trtorJ?coqnEG`tapC
z5{aaP(Q{ouv0}HsqJxgI_K&fAc*?1Y>z5m3L{}|ReRz!Z;=znIsR|rtyP(MuPb(~)
zMZ^nj27xhy3&W|#A(z~A_;`7n{mi%5qj9}B4U~IYb^NxOECGE*j9cC7T<zA*g$M=A
z^z2nAxAd_i2`yZ|DSW2)_Q1m_XX{VN3L>|bUt4RT{ph&fp=M0GK4?57(Wyuyz+2H@
zijGvCvg{sqoltLINZ#js7v=4{RTs0kDkU+*P`1-wivP6FUAb+j(yAxz{NoX+$pR0n
zX*9^O=%kv~c*XWK%(_n~wwd~-Ueyw^Mf^LP`(G%)4Q{Q8yQpA>)_#s>h69B;*DBzC
z8|aDpci|ynux5kK($gm1fAbn7)&^WB>46>Dda18P&7I(J?V2#cV{w3d$_p4n+q{|+
z50m^ab)LS37+>y5LE@DAtfB-==%rkyX}a_z;g;GE7^oZzWIzj&RBK0CTgXh_mb3KM
zAf=FRLreV8px6i>+zLagZ`J>4@5<Vm%CcxFrF69=STZP1v4kQFk%%(M5J16z2#AR&
z8bARF2*{U)Fo=jqBa#Uvw#;G^1r#I-ip;UZBq)KB!4R4u8W6&i0SrSyNT1Z#Pu&mQ
zpXo>MFF5zybJy8>t-bfE%?ods3!;_U8MJ0(Mm`B<&w%@l7F-auEhHkEA*U~PBGi={
zV8cAOK&!;FfZM+ejEK5Q@Ib1nys1Jb&nV5QXoCqtF(?GWs#ly9j4(S}ZDeXn?(Xgl
zbhik5zx&VGLz;aIL(ku_g*IP$bMO6VR+ZA>7I!GJ+6(#y{pzV-duRXsAmH>SpugmA
zU7qQ)UKXKWvR2i++|+@680(8^V9HFo@O_K_yzJ5a5bD^@bviYw41m3rr982`2jL?|
za8u%C+2k*2sZq430jsXZ`1Y`_CcjudK1azJD(?`z5E$nmeGA*06s%sP4N0!sSB3x=
zB<(`GZvPojM`97xWxO42zw#8q^0W@1CI^~avzfi8E_hJ9vAxRO!G0!?+QaW?DhDct
zUc$6NdF~pi3fP}$tUR-d32g#_5Y+Z@4UTs{!$mw4PXt6&;pbBUGIpJ?#B`6&5e^34
zBFW-i7^h=PZ@U?k;A$unn}VjePlA+T4~WUC7yck&=S5pQbm4EgC(;(iTd32*(~f7s
z1%Kf=|L*`bec${?HuS&$Z?itT>DLK)Y9?-Rs4I)9jRHIVlCQS5cF4PlO#)H#0tIyA
zU?Udz@yKb0c=)Gc7;)^0Ei{c_iJP&^VR}>SEtV<ZEp70;XhBt@C=-ok;_2y-&YM8{
ziUhIo5>U+f1T@xliwbO0+o{y1A5BU%DiVpIQVxn%;#qAfXz0tsu3A+!ej0N#+}QIu
zqN>GW{jMam6)D$5RNuFztJ;-VCmtTq|M1W}#$j%H4kygYa#!DV;6-n=U!ot!BMyy;
zpDBoL*$HAHXnCF49rLeW;b@W5@Om8-)H0Iy7B}3F9gX$aArorhIM1M=c6&;>g-P>@
zvF~+Kl2#w$260Ga#{5jRdW%x{R=k2RIe9hNKeHnbI`CqCi+&?SiZfq_K-nDGXl~g^
z8*M$Z#P+uFk}COMBJ@_DGxO3=9A&(Cdy&?mLd&TkUetov#Zxfy{L{}FUx)*jmQbDf
zu0&nr2#Z{u;SZb~bNsL3G5IU)_BqXYJ1~h%SMv~w`9X2r(p?5?f?=POCL&HDu&NaL
zPBu6NfXZ?Y!U%0$Pt4lC5_RDeO3`IQwG2qS?esrhphzj_k7?^9cW=bW4=2mX*1^Te
zniTZ8XSETt53s@Po$+n;vWf$p<bu^JXP^AaDoj^}oWHNJVHAHHw>&ezuAs6%f3L$Y
zI$+%(=0dllVMZ`gI4Up`#6i86NlIH_2n4Y&Ab;_wO9$J3Yo9;wT)}$th~Fc8&Ya2L
zdkT$a?Mf1DIe_i(LQwarG9oLrNlU4W8ABBoW=$UpLyk+SF-cNpP6_{4<XEh2(=6d9
z@KvrAIt5Q==7;Q)&fAG7ii0zp$fr`Ob+Wy!KmuWstuZ?3Z(jwE<*)qK7o-rc8f`A_
zPBpLTgn#{c-&8)e7OxLx?{DLFcSsyRSpx{(wcT=mL+r$zn(4|KILQ$ckLp~ujSYjq
z85UMRL-`BW4D;M*C>h6`1uYVs2bE1Qmc8_x62xyRG!K`)CPOzmSRNUkJ7+7*^_$B1
z`b7Ruqco*T9od`E$V2EEV8BRvPVq}6p(4v0e_!WLvyt~wNA94!IDU=xdN$L;HQul@
zbw*|P^6eewZwo(EAid;FsTNIfO)KavNPuO%4*;#y68~`(4EVAhi$!6chv8yH4N2&e
zC!-`Jl~@n!)V*LNw}eL%<X6DS#;D=UspzI(0un!eIQ={U2Mes-11j5O?tQOAkgcGh
z7};3+WTZ`BgM7ZMs8DP7F@uYO+5s`4=Z1WYisc^c(5Ec=3`)xQNH8s_Hh+?mAWGB^
z8g15OAt8H7kKbjrW;~LNdIgF%>x)|~w^<DuHX<w++dJalz*F#E2AeZgOfZnjw^{5d
z)*$fx<D9uyC%PX>g~8se#UHeKJ~3ZJm}W0r%wE$f;Nkm<1f)Q@H<-z22A1HqP6Or4
z7R&5lz6OmZ+&CR=T~>`ZnE?99U7h!T$*n(;+G;1>p|{|$&jhg|p^Y|QUvy@ujWAMh
zCoIB_JJ!JDc34po?l_}WUskY^gHa)W+$~-=i8+pwYdtD2cZ-8pW`aOT7X5HMf?Jsx
z-h*X5Q}ZV19SHr<V2Dye)ZpC0K(;fxcETyB^xl$xO=#4eyLU%pFLDN#!#<VR$aApF
zG);%QM~{TQQ$-_p3fQ154qTOMW<}6jU`LM<81J3Yr%sjGZTGsja=9=@lx`j`S}vYi
z5~nDxZM`be>#Col_+VE0`N!}PR~ClqadUf9$QAT@#89&|Cb?~o3cAfL^|fa~OB?W;
z7<p`Z#07*aCE-1+E`WhPXHH~KC!Efmjy!z}aUFenpUyErHIdNj%)eFmGAsLI1lb-{
zr19cnNqW|!!x{59*~u-)$(OEkp%a(Lpo(L{jQA+}p{<RtudmBvqTu=x<c(wwo;l7U
z_qj_qcqFM1=u9>!L4ot#%kUl(4aezQ!Y&#x?dY-x(A4d(yMYS)pnywCL!=+a`^I`~
zNB&NF^J*wC5;mL@9#M#%A?eC;NZY5p`&Z?$8BFx<{W>=a86VT?6sbPawsJPj@HS5v
zouCq%eBlo^xxH;QUX_nS2Sxr%m#gPpRoE=6G%$WN)M@^QZwvVsUGQy3{+&1Zwj<wm
h<iA18|LKe<)QwEmrWr$Xu6+j{cULc$szc|l{}T=BvOxd<

literal 57334
zcmZ5|1AJZ0)_2S{M$_QLwi=$Ov2EM7)wGRm+qP}nX>6O{>2vRU-}ip|%>K>nIcwI;
z+T*qUvwz9Sh<--+iU0-%_E}u)y8;*(Bq10WL=_wiC`L~oHxuN6J1U3@f>li59f2N#
zjMc<Vq@}^AL18#BXmB(z$iF0@9~k&oFzA26U|<s9xc><&fK&dP1_BH$#2gIj-!vK^
z|L-LRx<RS`?L%gP|1ZZZi2tF6B+P>RpD;w#-(*y`O20rJyq%c3BN!MW`rjKIEG6v=
zh?}~(lA4p6v=o=2tu?*Ak*$F-y_>b&-&9~cZd{<CwXu^vp_{dpjU$&EFY!MVT%hpZ
zXa-`!e@L7xd5P7e<p_mr9gGRt=vnC*iGc`&goHc}MkZVe-$nkN9Q4FXZ06)-$Hl<l
z>gr1G%0h4JV9LP6$;rvU$jrdZOb4Q%b9A?H(s!e?aU}T{lmFrK-PqC4!Q9Tt+}4Kh
zFJFBFTW2R;V&cCU{pb2uIi1W+{x>HZ$A60j5|H8VKMYLtj12$b4NA)MH<nA*!Q2>>
z^I!fzCZ2yN|10j_`S39O&HVoq=3kQj6AKa*h`__}pVtONkm{jO2Ls~=6aOxt<OY74
z4x5D0zwiS&)lnu0Iw8%s5AHW5p-Fo|sg7d@agrm<n8!G$zRDOU1;6kwi3yy9an6e#
z-;U$r<>jG(s<ATNGnQ4}_4#>a+j*x<MQ0i1)}o|2>mGgx(*Jhl{9Top=iQo7VDSIt
z{D}CWgFgF1iTV8>mo*P32X4+b*M|Dv#9){x4d7^m|JV7eknlt2&CA`0{C^oL@h`#r
z7gIkdjc_o`C>5b`-01%<gdDg&?td`_M>AuCP~zA4%x3%j{}Ti{$ol`56ch#(7OHL~
z-Hil|(BBuszg)9X+)b^jZ$QMXc{RCaac)jb#wJ=xSy{5xWun>_0|P7Je<bBE@~c7x
zy^T``2sxmjAOxA=DD~T%EKp&4dnd1?<%firH|wj+zYFjI1}f1zc>EY~48J8h9OCDg
zv9NiEef5LUUle$z7@zq%T@=)mXeaqTYNRsRg|^Yrok{Zw>T3sH{v++FK8VG=9dup)
zs_klnbU*+EDLI#x(;{YrxPX4KlFH2O0Gj#e>g6ShVjC(faw576$A-32n8)k;3#~GL
zN8(geM2TNq^Q8SjrZm{(Z!llJU%%ihS(sJSl&CQ=m7OD=(5QGI-jtsr!hfOgv2oW$
z_7T&mHX|pFCLa5_lYygM0zn06tCaEL5><H`8eXC0RFA(KK_j+@A1+u-z5lqIs;jT0
zA9p-iC@(NtdVYEm7j_S(&R2o5v<x<JcS!(C3F`Fa9v)?gZd-Hy9P>-^a65MLvt~s=
z0Q2yq_NG{Ki$(Ji)hyU2WYAl!a|dO%;)U601I}~}zGv7+M6x?XG6)AHONq<2a`QI+
zZFBVYs8$L7SFFX`#MBS?xf_N?1XJ!acoRbZXDG(&Xk9t#x0k}<;zF%rk|F^S`Cx`=
zSw7jsi_X-7$#Az!Pn#?)Xkp`-Mp@IR2dczUU8O22?6}L!!gu0LAC`HFQRU9}$MnCI
z?GguSc=%)kkK<@Re}7^j0fgW&YuPltuW;GZ%)MGX-vUU9+X4}A$($#yM)?B4<|BPY
zcrVPT0s|q9HKh|ieX)yM^STM=`nr7~L(D;{gc-%4H5sn(V6VF*(A;qRQ>N3$aJL}U
zMy{WFD*bG#N=%s__%Q6yjM$C;x3?^bLukPoQFLF`48W`1d<}CW)PsT=q^2ny14dXo
zY6|S&Lc&LN@umBDlW)1p%l}ET*>3iao+)RGzyXXUd(pWil-AVr7y*pSrkSnRk9kPE
ztF<~*kjEI{qx>FFx8Qz0%!{uMMO%i$CT(m5;zWJ<+wZcNAnuQ{WDy%{o4s8Q{Ril;
zei>$P+AdBUT?8`3&C2g^o!|^pNc2m^fI4H>CPf!&ROe(ARb7-H@+c}DEm7`&nk}d<
zts?yvBmII(e`93veh&}t$lWQ@kd5OYxm~3xl}$(fbeovf1qKgyxtRTI-D0L$uXK_E
z&o+=ZT=@Gsa+ub`N@#8$H{wxk6GG9dXRRj@Vgv;XE6B%;imsH=y0ZFJDESjSd<?&J
z=H8yNLNUwJ>2JSi=2UtUSnAoja`nv$F~DA+wolZ1M-?(UK<ab&k-sL*);D~-vQFze
zM?Wg0^KhP1E6#Lg&ZDOzDFroW0-6a`)zad~0_`(qeT(wzE8xEerz&0uopL`tH}ZD5
z4}noL>O;hD<O)#RkUH%hU*!a8H?Xk2TH#^dTqBTr-$+Dmf0wj4AjL!yQkFwCq_7TJ
zyB@(uW3&T|jiF%`Jjg@C%0y4B-Eu%yE55Pc!c?`o#Np#DvQU@BpS1t}J-SAYw*MXX
z9ajH~WpYw-D&8jrEd>)Oo69QjJFMb~2aXyq&f_ul)f~--j*$^v#!X+G{g+1UxmCf-
zAUQl7)Z?`2pQ}nov~$jiB}zYUo0QvWEIWxm@3P6AV7v_JCR3yIlkGVl({OP~#lyUw
zHsbujwyfpvo|h!0rk<<o#vH{?32J>fEIcdIxMo9IfrFSqLPngv{xR}<Px4MIo|N1<
zI_Qydc$m&%ef7Kb6(4E13m|)Mv%$KwOsjgx*_!)kxwg}MGpP<Nz)A5_YHPAIz%n*V
zCXqq2aQaHmUhoBJos@`3Lqc*?`UNI30md%$mwl4PIa!K~xw$a@xtx^!hu&K|=8-{I
zD*OC<gOFfszGR}&Y<E<=Vrpf<wVx+UX-w#*U6Df|L-+4JTs9A%bjg5#SW+@Fk)5Eg
z!FhsjRn+zP2_*`REO;lR=Onsv6xk(|tIp;;wc2HqHTdcwBoeDU8Hr-EKk%h{bq4AF
zPF1h7@NW4K2D%Ys&uJg7lP+k09Nyp-+sNFRO9XyXU7db*ciUN&Uvu7gy@QDm8^++^
zJ~2fQQ`g2fyfp;0AprX{Cz-P>-s!y>w=0C?Zx5=GHxo94GQ78B8tdE8@7snXVNs1X
zXEiY9^}GCDf~vEtXH<TTyIi`VkOK92c{S6`FFWY1U%T;0@Zs&FOPpw<=#FIIANaQ9
za5%CW%XHdxd|t04RjYgR9TSy?hiTXmW87=}7$NhCxE;fNcqaAuL=1Lvr5U^(+tOKI
zjeDPeIRAbwnTm$WH9Br*FDu2RAf#LlbL;E>G1^iuNBKR1_ndTGG0W?*n|t50a89QM
z2x$UXA-~etxI0Nmxh8O%GCP{5ktXka%`h^qh`q;evDCDF`U$-P9EtGM%!mDk$N5Zo
zl(8V3P^m_z==(mfn=Ld*u-~Yyq_kn+OKj&KgI{XxvxgvBENCEfk3$dn{Gg=IEEfMN
z^|T#|>}+X6qTO<jI<}yq)%Ny6_yPWmQZk7_wamU<IpSj=7`M?`5nwk~O(Fgg_g#7A
z+IS(Yzs9QgW;HVG+-M}kpCxhPz-a6aFe2}z6@*bF*x<AN^`TiHFhqQkAYB<gd<OB&
z3G<m&y~?P*Oq+8OfAG9-z*)r@Nuq>zhP_b_6Ai71R^^*~mz%hRN`Gxx%`$tiQ;ss{
zW|O{q?h)zXO_tVbnDPv6cwgYZy1z3VsBu8Vmh#}w9DX5nc=7);LqyD9a!0oH)G_DU
z2~`r+R8b_+@m441dH?$T4x_ja9sqwh9X_k<%XESm7YX?TpV&0>4!~)*1in)GHJ7&s
zb;S|80)i4M$KY&yL1(LkdU#|aA=5X7{N~_;?4li(i0M0Y28Obr#aB#f!k^uzBq|s6
z9`go52d{|q3ooBy1p;A`<T172I^32M;^W0#Tq5#phZ!FR?0wJJGWmS7d7g(LW0KNL
z&Y^FJlSaRb1{W(B#>~HRwLfOensJ#{O(n6^n>Z;2A^fPHm0!785~LI)n0kpMSlx%R
zojh^b0|tq}t$BO6CXCXz3kfnE=eY|$?yp|#y*+Fw3Dj5KJ0#-l8QvZm?v9iWNL=W&
zI~fs5oY0TlIvgBe52bNB?p3q`VuBIhqbkh3$yi#a!uXe8b11mEEd%j9Plu@=0mdVt
z%!zSvBdZr}6rCUJqT9~vaRpLAU5LNsTufS|(wrilj_1Tz#p)Ma{a&9Ayxd=}LP$CD
zQyZ$Oi<gcWTsLq0>TEM}!Wv6ZG$|R{E`Qh1GmZ=jV~59IB}OXef1BSmoay7<eLB#M
z8zgwibW$RN+E=k$q>b(!z@tDvZ&Qzt%qVd62GQ(|R(3>(GH`7+CpPpZ+(Kokwp3NA
z#YeJf+{f<CeCQDJvW+Jle%bq?|HZ__WEh$6l`>J+Cs`n2CBJcZzl6BZc}~mE9DT(&
znfgKw7y;b>&Uvv`>y)zSv)_n`gJV9!kB@}~%ppNb-J6~4h<dqb9VK0DmIScm%+7hs
ziTXchjSSN#c%Fm8Ul{}Btydl^JKyLTI&Z_APV>ef-p1ZqU2rMCtzSmrIZZJdV--lC
zijWJA*#bz2`^kh?M6ia*3~i@O)r;lF^aS^CE?dQ<e#WttCMNYZZUW_z_`K>!$;p#k
zu(7aA;;3JvM(fw|^SQ1IR(~THS2@H>rM{QaYShVfyy!=K7lt~9JIHWX``RzJT85*o
z6yfH=kGdX1VA+s?>``Z{2|GQFYLYhvwB%VPB#6MqN@x;gV`PTk+sTm}7@mT>XSoaX
z=>2Ju4|JsHd`=j9Hf+hOyPzh!6DhM=8L}*ku(MX{)T-#%7dg{9EbJ5>T$`Gl)Lpzz
zBDZb3j{%~$CPz<a5&BxY{t?Np-W!<^XC<Lvmu_`Vl*|nIf@4{x^#gh&Sb5eN>g$u~
z-(|ml1Ai9{CW>EwE0fmVyxy7q?PADzgU6&cuXP0MVKZfTtvYhhqgZ$rCFU{7RJC_n
zna0uWSjW=>x5KTxs06DA<4N$AUJ^=>c+H91#YX#X7Gy{<njF>Qrd_)h*S$nCuVV)_
z5!1j!*NsCPzy3RTsv{+!am^zn?J9FN?9vPqV)AkP?Bi<CD%X$S>_<(YbwbBhE%R5M
z_{2oj145k&PR{22r5<R<<21|H(EBh7rxlV?sN6*@C+PqkUeTeYYV1-*d79IOqGm*l
zC}&IgLoJdzf|5{rk?%o^R3dhERVjCUl92@KM!Q2oyXUPJssiss{%A4jio56b!OQY4
zD&b-B0@pc+la7VpA0hRYizN`(u?ya_Ck6b3{#p5S67(D&ct=y&f!yIov%V|{a8Pe$
zWr8>yMU@DDOiLlQ>+-g@(UPAArIMNVJ|{aZzB!D~C*o!=kxy0X0+Jd3xM<hri|Kgp
zxjR0#-F(nItbY@aQ97&#H}M~8?ez8A|6|4SJ1ZuJcYSvO=jx<LV%>Em1K9~fKXNI7
z=-Pft0Cr?gRfnNd>P1Bw)iV{dmPuk>&2K9s?u&68S+v~K?(F1V)ig<XjS?U59Naid
zGI4_0>G0j5r!yk<#HLBPK=w^Vv|I_^+-MHLoZsyef?(@VwBrO&sJYRV0v{jU8Uy8U
z71XEWhb!C22l2e)%#qK<D)86%s3ok$^4m!%$RsDv({~?mIwc)mkV;;;XQzp&<06CH
zM4!HVJEz9{Q5jWNp{-TSx)x;C!jyuH`+RpoGl=gRHl|x8*FnH4mkGP>MCw?Iqg`vS
zVHkRVim{wlCjDG&VK*9Iy1<<hbn+<!7y2neU1Kx@m+N`=YyM|BK0wf65vBKj`Z1+x
zg;VviXC_h2htG@Ifnc~i%4O=!Cr06ZIEuJ)nu<0Va_JUrUrTxx@$jEA0m-!{sgimN
zUyDeVIn|Gzi!Y@HP8l>iR4_l$h0!EAn8SkgL?nbt{6r-F2AY(B(p{FAD00Fd0D?I;
zJ3~#;f^Pe?MZTSn=_c9$qc(c}r^7X>?l2EL_qnU<ImO5l#_9Q8bYtNQRvqSyfJ!>3
ziDhgYDKQwNLk9dhQB9+i`?A4Bd43dR5{&K@nnwFxgjq@NT~tFW1#)~(h6jN~q>B27
z#uqy)VSa7?;^Czl2^p>@C(h%d-t^|@dZeg}>uZOjjq+3)GE+$Zv&Wst=niks;>(>f
z7%d8jj;x4j?&9C`g8<)(P$zFH_+RO+$$^f6FKq5$bclO>Tu}2OcHJEZp}t#NK<2&j
z#5x{tDXr0g*ksP^k0~MV#dX(XN}X_?yFQW`acHx!OG3Z=WsCNd@)O`Z+i~2f{aBjS
zcBXW11$|^2e{-FCkGmsoIUvsxa^hfjf7rY*okUfaZG#d($uQzqlVi<K^uqxh+Nh66
zbZFgmT|W-FueUBo4uTLb*C&$m8O~pQp|VpdUZ?$KWp!?u81N-sfa7ZSW9aQcMv1Jv
z^~vTY^d+$I^U$b{=UZl5fqT<s&gkwSphM2FlAvI5WuRJ<rbx&PkHf5}t=xI8vojX^
zWwp4{&68l$_rqH{@_tWMizL(QwIagcc5dTf|1G0LyAyGAeV>=NP{d~@T7q`um)=F-
zwOa#OpJ+0T*2(w7$}VMnnPNYP5!ex@(Q@?Ngw)D!&cP?AgA2)y!e_povVD*bQz(V0
zFeKko!c~yJl#dRN#7r9^CC19|$cXaP9q6ti`#gLR_#GMP+K6m~bY^*bDC88k&G~Rq
zB~TEL?3QEgd$reiy-Wd+5L7V57obV3v+>@`hP{ZMo0DPoS<Ck@w{Bgr-E7|rMCP0J
z!mG5d>cmN}GY?dab3rQ8t`)ggt{pk4Y#pHlG(>b?6c=X39%Op=tmS4^NjW$=%z4?x
zrFqR<$>>-&-!`J*;+n?cr2<FT9CqQn*;#ezS)m_yyzlN@udhTeESl$_RL0x?*@<>7
z!n@T&7;LR1=B={}wk0cu_ifaMTy7s{MPwho@$QV>?22QGO)J6+fP)7FVMY-S^<p59
z%j;YGj!%k`J0Sb<$N{U50zQ&t$}daev6tobdONFx8HB`Mh})WY;GFT|hT0lThHVB%
zf2b_VaXdt_`+75R-<CJg(T=tEmG@ZgrWif@7Xu^y(|zh>SS?Fhs^&M=^&Gtxq8WjX
z=U3jNrRqS`Yk3h(Q})b;wMV24R1M$6@V828!b!1YE~?&(!j50z?O2+ID2q<)Jh?3o
z@(gep5A2)c@^7#LpV7i;vTSIm8%E9=H;qI9Wl<I~C!BLQf{ixXcfL^(UQ&$vnkYSG
zX#O`9W@z~%Bj7?0iqN~B%0JRKOw%4dRmFxJEiNBuQAU=UV`Jdu9W0-tZYFd$@G(j$
zcA`-73n_yO=x5z-Js3f1@TKki$z|TZ+}X>=&Qyu5Lvr@f{D}ztjh9zQ+Ps96jB_}N
zYn$UdSoUBdefRz4LIK+7$NM`1se-gc3i>nc^a>BRd&=ADAhX$)AI!sG`&UGl^q<cM
z#65xG*Y>we6r=MM^3<1IZ&vt!Jau$BYUrj$S8*yB4FmlyaI&(9k{T33Cs;;o)(4Fs
zITeUQ2)G34n;(fO0OM<@#(2P2{u^`hlozG&=LWC)Vb5nz#Az;?gta!bTtcnvg5WRE
zpsGMo1T<7caNkoVGhXR53;9CwdLTv7;XI9C>^p<6bVOM-^W0yyn*<?-(OuZiW8C~W
zsZ6k0e<?=OrL~irj5pvk>gz7h5;OGt1DfNHhc>6qgjo*s{a&v`7013~mVfYA$z$RC
z`bXvS)9-<XkXs4wBJvYBe1TjqGH@(uS8WfH;rok%R*g|H*MJXMXED`4KroHb-nIKo
z<3|Uxk)19Z-w~}L5^i}d<el7~l3XU5YKH!n9x{^ydoN&tOgcR*z$>a%b$O$-Ek`h2
zH*wU~qPD|r*ud~N3d)zfi85Z}Oz-;{or7-a2d<Vl{L)+gpLI`-^?EnPojcGQF<?Yf
zs{wSlkFR%&-$b7LwoRe0##3jFpKo=ISL)0M2tGDHfa*U!;aL6FuRNPC4OuG%!hBnI
zD|eDtEaPFjC<cV-seNqOJV!i#;d?j0??19W2h+`iM#TEULQko>qBnMha>nNSa@J^c
zLFAcyA=fY^LS%GzzP_q`(Jjz@3_Cm9SFHQ6pY`6$yR(hHdu^Zig=jhU&+)vaQN#0?
z)moJ}BU<&x`wNw>@2rir#|xmUa_yt5SLE>|WkD8tOk-~@sawwk;WIK1<8Zmx(mhiC
zeQ9N9v}<7-!{!H%q671cvOEq^VTQ-=G>4I2)N8^?mecQY5w08VYN8=B(Yw1FCPvly
zXEhSz=zNQt3~|V-h7m#2BA2P}XN@=(5lM6*`0OGRJUgt8lLhZY7hl-;n|8Nv=Jfdn
z==gWE+}(p;Z*P<^W%!~&6Zhd^l;H-4#qGw7{CLk6cFhO)%P0!IfP|!^<6^vG!WrVQ
z^xlarV6i~C9D&e>@2+{JrQyNs$g%fz;+U6PPefTkgX#||mBkO&3R>;w^oHdOn|zc9
z0N;5h*YKc1^7TY%#Bw?{#;|zwacUjEj_;1OVT$QZfG6!jgYTTYsic#YXgXVYo4|Ya
zQqSOcn4ZULmTQ5Qo*~z_<M`425Y4}uze{BZV5Q$_x9XwHJm)JpN`}WVYWg^Ng+Jrf
z0Iuz@Fn0Qd%qjz+yk~mraEvg`9m^<Q=fy_r*!{WZ`E25j91B7K<N^lNMagcS+0N_p
zlA$b{91z8I`5N<jD-hX|;i~p=#cU}iy7-7R1-s0>*|V=^(;C_G4HYc1=zRT|LGR(0
zh)Y_rfu&~;?ys5S5W-Kd2e*o0Tc5JwdJu!|Bl(`BWVr8kxt^Lo-dp!x06sDDB*;vI
z;e^>j(Ce**$roRUsy>bTtGtK2@;~vOFOiI=6Ab}hhjs?qOgpo4cUvp@9G=L3UfFW~
z2{K%3Kg#rZ4rVIs4W>~kWA>rn@_!Eh<?@Qevr8Y_K}VAoZrgEXv4gCSWAJ^qesRN&
zJ0%tIc2oQK8)PR2CI1iu#0(CvN8WNsEStzvSs*YiWwA`BEaHY?^rJWvvO>Vi%faD#
zcLLt^<mb-ESbg*~zB5do8@_R1@#X=SdRON47Nl!xG~q7dV%QfZt$P5M!g~^vVvIse
zSZsB3)3EQv>|s&vKoYybvDOKW!~$p;Qy_ulvskaVM}FLgx~j;}I0D%(&WmGoxg~JU
zP2y{p<;x#m4UcZ)42TSsop%U*y?j$WH=G2%<ShdnAFH`qKznXzgC2ylPgATK+)J7;
zX53YiNOAeiRV0%jQ^zZ+Rf-snBJm(apP2ZS0-Jtn5jq1;am3zqfp=ELA4pdH9=Z}g
zsd*QLtaQX*CP80i4k$960>md9Y^7-J2h&|osz2S)9p!e2_3!I6z`2n_m73EEa+|{S
zpMJZyEgYFw6XX&3Yn=d!b)8_MsD0wU?UKaQ#N~<Xx1b6La9Uc^eWTzZ*2fkhg|^66
zD!S0bSlFqPE}3sgig27C5x$=KAYkjj&455VeYo)5@^v`CZxq|~2~@5sSLn_ajQ?Fe
zpw3E#!_r6kg$VhCarc;usBz6JcevG8FQ)HsF2x0_OfKESVedB?^J&+#!+vt%H%fpA
z50ca8w}+F?L`T4)pp~1wA!^^+D?&Om*6mkhw_=jl=aWy~{(~)2(P`LxQd(1iKqXHd
zYaCS9^EE!>yOjEYuup@yP`p7eLVBrJFH(*z-xsSd6a3n`jfN0N$hc^h*IoGtA4&j_
zaeZRx<1kO3XP?#EJ!03qMoFLcPuj!eY=T$fb}<yw5HKG#4GOBcN0Gqc-Z|jpa<(+9
zKHgzVy50hlF{!Cb8jJbhe!JwIxRzr-UZ1iV@ug#V6qIQ<PEZoEXUZ{3RiP#G{#og<
zg`apz&^J+O(DGcDzJ4xcKv=-<9uriXV^lHaX}L?lB~=!EngG6paTPl$hg|hWJ|@<@
zsVU51Lm|K|$g9_Sw6AOdNGLMg+I~f{|6o=*wz7!iyNZ(s!XT|_;*TQUsnsV#BXp4d
z;&ShuT_LjDMGYBd8stF0K@*daQ3<{=+PlhK`EcE+fG`OC)IZVSDceua)Le?tkuHs^
z+i+V6gN{8%m3M-;0=JNISV6)p*T)0Ng_`B{>ABOJR2N!5ZZ_pEzwW|DYHrG;+6CG~
zJwTiUA_H>(qqKT6>)^9XuTQd!dnlvlg4UDV8$;I5F94Kr3NMaJT28k|f0@e8lXpZc
zdghapEXAG%p~Ye@+&J@rFupOS7q1>{#<BV7fpcD%A=ryfqL=g5L@n2|_yX%Ko?`?O
zolT#Ym@pg`35sC3+DcT>q54Iw;<4(9-?>_bFFlA1qc0a7+2(hNVPy~xbFIc)LYO^i
zoHx5~$Uv72`xL+p&#Z&KiclOP!tc+B*hjacqbgq<EB8l&EqaP@AWTjS{;fF3x;H-z
z&i8-B%^}Ams!AN}T_cHP+=pMlmh|&^Ux7O~6oJyf)%8SmZgH(O@R%j84{!5qFxkgW
zWay=$;BL225$neHeZ4Zx_4)*|c<vO?Vjf;ymy9C@(bA>_N9oFyFmU+RTc4YD<YFT!
zS`c@TkcOPx#<Hbsgri|&Tk2$SL?C001YV<JW#kAt23Rd68AqfB-2!wL-k*m@Wxg?(
zc&<5yViWIA$cmj(Px3wFJ-KBJzQ?QTSYn`f;z{&dT1;Ff$?UAoL`B7!=rnn1$UTfz
zVu~<APUML{;OP3lL;esGG0Bk8OtVzOD(U(eyl3+Mo_qDDIu}BW0tl4(pb(FyH#?*X
zbKA(RzqfwTY_thnb9re;!(9|-u1!lGahT^^hrvZA!Hnd6uj2&SzJi#~f*(GerO0bo
z^NccTnhLkxui)-Erw?F!`c`=G1^nw-Q(c}QSN?sJ<3zK#bi4@8Cc0J#d)QHN2!M5t
zk}#=Sio%MW{ZSpKpKEoR>PK~WsOS6js4cU7k2TlLD*tj;C*29GzoXiiVhtlTDy1y%
zP0o{bmgw3(YAg@oToDSqG0b2iHf`ld3H3vfg0J!|%X}u3H7WZ5(_PIw4SUD?)>rS}
ze;UJO!251K$#cas_PlnQl=}AS#FPtGX-DfgqegDcp~lh0fuGIpOmCywK3r_${7^61
z@O*H-DfS%<L;?zS%uhE?$qk0Ug#n*0S(<kuQjbNguemcM$yVHVn(1NhYvcGZLU3)H
z2Bf^e4jd=#mh?&XmJf8|K6D(iUoX04>&MAjGt+-Q^e1i(-5oznYrg?&oVctfZ%3W&
z2RY~#K`q`Km~mv_+X*Q$ioEGvX1(aXmqX7t9o?s?d}M3RIN9s5XK_>?Ci-`P-Vph#
z;1X??6VMc;e_v9d|CKGruhay?8~LrUBauu{6zIdlD>33!?-ZYUa!BN+4O;?nvs~if
z?&T8h^mBIOyQqzzMETbMXC;H10Ze9_*Le$=>E*RmYUpMz<1^{Twc<hIyZ!`QC{j3m
zY3Q`Tt=*$Avs}X#?In6-e0GKVRa@QIpb`QRyTIWQ?*~4!i2S_1(y3DpEq3S3{Rknd
zu5Ha>s`a~k1auq<_Ow~-u}qTb7A%oB6zc+9OcE;tr^04Goy{{kl!djs)*ZYc7&yD6
zikoTCOx6)tk<x|oN!H)E$LQbzztU%F`K8%;AQyZN=Qsrxd4?7?Hd>H+GOjcX0Z+p1
z-Z{Adn#4&q-ach&R+270xNbVUllQRAk0{p-pLsa@e6A;O2#isD_ym1@{pdA^QGAi7
z!*$Q7h&-bvkJI!yLb2Xo8b<j{*nKNxGCt1s0%zm0ED={p@}rw!a{@%)muxq^$FM$7
z0O*`vPxFiWUltt2#Vzs>1$UgyIvc&-_Ci_)h5`pj2OCVKCRaJFqZSsi@ZWk;cvn^V
zt+<nz_q<t3<{B^bl)Y-C2~Ih^s(-VsU_gw0!Ova*o^G+^)-nnI7@83-t&`?-Hk>`&
z;2oz_J<xV*er6nFH}9hQiY)#(;6|;%VeUD3R@<XBH3AZB&N|11z6&q`oMLilusZtc
z&EC)$vc`!R3CHpxr;z&Bh%I+I?kIFItHysIE%Cz2R{os$>_EqOLa3gP=KeByRG1Qh
zUKVKt8Nr}aBQ=i6Ah%asi*Z<Hb_cn=^$nQ}9O<Y5g>vy46PL8SG^JyHRI%y#fY7Q@
zO9O)kS+Yvcpq*6;;`N_)2wEtB+Tq!2B8vB64@fZ|NeI`RrzzXz|5YIPa!@p6#8`+p
ze~y}vz@G3s)QN#U&9$?emu7uX(NtR@MwD3k3@W$@0US!7m0AfyV{@%96U5f0JVKOC
zkxXmoW#vw!%WAe}zV$|1r_=oLLB4CIK#jelO`vk~cre{-$mxzT+$^M}kDuh(=-U0c
z2f67aCT4t+Jl>>Z_?aend9`D?_gHO*k4oXDrfs`GVG2HJD*HhbwD=^CdUlN%cGT^s
zD*4E%{;$<pc@m@<g&NL)J%9c>moqLlcrO(}=kK3F(>X1FXAxMkIrjznMHWY+Qd2Xs
zRnH22rr1n?0jXDfKLR7ihSW1VJ_<>EI7OZ=rC{x?aW$&+vM1<S*KX=oeZgS=<h7G|
z$EP_QFRyT~m&@=ZHN9SBzl>FPzNe`lXc_7<(%C<p*DD9Iakb<-$K6@(hx(RfEXh<E
zr{(VdP*bW?w2;MrD!O~=+DpLk;_kxiL`-V#?gS&(e4b-A5ht(6=na!0J{dbClfpgY
zwIj$)X7PCv@p(Nmb${Ah+&ifR4(MZEww55vHlh9|a`IH<_w2E_!E7Oj_?(0<`Pul+
zHT$eWC${D{1{O}=?fjk0D(TwlevngAF*Gdq<o1=S7K7qOh80#cl%iMGt;QbYUBD*O
zN}u$%_3Wd<lOZWvswuBIRdPE=yg+ln!c#T)-ik`>i3-7)z18~O%t1EQq6@-;Rx{7+
z9`LU{^$`NRQi&f7Y0?0HP0kTv)_2p-xQ-eNktMAkF54^aI7j0SFclS^HO8?(EMsdM
z7^LwB>^e9RSI{#(8KztDXA<xY+i}eO&sm$?Z*0PaH~ued$0)V^-j`_oSS(;fdcxXC
z>Sx7UQA>)hn@=wR7X{KsTpDch=<sX-Vv5D)O6aFzKf@0SEls<soBZR9N$Re#-uZDC
z7#MTEGSa{!*5@+IfLpa{H#@}hJe=;V__SKedNd=vIb-XrMO*b^57DM9ReRp#+R^{a
z*w?!Ux}@lS_y2(H>F~VBf1!ufTddb_@jEE3?647$wo<qHnxQG`R;J{OZ@P=LiJJ8#
zFOS2ATc!B6ZNhQ$ec@Uu+U>Gibeu}695H*YAS6(DC6EAZL14r4gG4*X#-B6fMh(?_
z{`fOmes0LZ8k!*W7!zuS_c<B<{MsO`1j62@Gq{H!^-U^@%p$~O0)4EnL7WG4-}p$?
zlP$-c8My-@)%_7JR1VoF+KzQcGZ5%P=bgH{n&lQx4;R`&%J(N4HY%@?qyrp23S;<;
zN5Twmn~ukAqo><gs{L=EEuas8`}WjIJ>o9m(_eGvWhC)dJp!Bs_~b6}8H(eugEKXG
zAF^qBA^Qd_%JoSnwjI{s*VYahgVrZRDCpZ~lAvI&-t(nF$qGUI1{P+PtNHaE%Z}4N
zzFVkDt$2Fgm($$)(TE(w*lz0GoBi=`x~ZD8T>}RV_7Iys5A9>gY~>Rv;NgQ#5i9Zl
zTv+FGO2XqwJ>+wLx*(b)0euk~C=OT>+q*!_7T>44Z;l8MKIZE9uz}Bstk3HR&WHX!
zFX<0bY5dM&4AcYOxb1!KZMb{8M|9vUv`}RtHo+os&=04@p?KT1B;bq7V6~KENkM-7
z*BWSyOppam!CT1r6+qQIWW{0WR0rd;W7!i@9L!ja1MUut;{XqB=aqesih|tp;?37#
z4|7K;+W~`avdv&*9rAv2(u=-rODmbzvqA>;HJ|6^7M*+?WbGU~#4LzdXChkB+Aw*~
zJ}ts7d$HeakIn0>Kn@t@vf^E)LkJ5-_`@<Ijm^sH1E8~lw1&Y#6#P5exBl`o^lD2*
z+r%6e#PFMUev>W#Sw(YR<2mcsmE6H833K6`<!PblIS8`aD1Ti@sa)`%%UGSJ!&9~_
zsWG}}e?Ia)e%90b9Kg`|I7FKUjeB$!k^rx{DqCpXS0(t%88nB9ga&aS>tm6oU^KYG
z7vPt&P>ROKV~%g&?ERRDsyKuFb8(;58wp+;Le#ZZpiWS+&APv&V^dI|j4up;iV!TU
z<?iSD9e_Dvot~U}*2Sk~S{d9E{0k4|II@a8-l(|L>q~ys(OhIG&yNt;Vm?9F2MVg@
zil?M@m@vHsNU~j!T8_!bNUae990B{>|Ms#P!B#;brb5|1i0A&Wx20iJu=%cm+nK31
zUn7!6IUC_)H65Sbwxb1Fk(MxNp*%7zzraCqUJ1Fo0sl02-O$4Xick4F6Al;%2K5(=
zR6(?LhcHw@wVxr~k18mkyai{?cq1Rqb+vy|msR!h-rAFn*@xzwqImnm1BS*7=JA`>
z<0uQkKqwyWT?>NLI>$$wtqS86%f8~oVZ5tc5!=P;^lO%OL!D|T6PcdqMaW}QA-=Ld
z%92)9A=63x=O%(q^s?u0F#pwoS`&44`UcEnDP%rGsjey#fEFa+vlEIQlK|8z%vhqy
zyMUUtI6vnUjvn8_X-T!EbY(j=ksY(|pQpk+-;a(KnGx?Avnw<fR6phKctFkd5xBH0
z*h49uSn>`1f(D@7qrQbh;}|88?}PiS8qj<1%LtON)%bBf7vvi0(MtaL5c=`gSbQzu
zdnfbuRPK0+1e3fzoegA1kN*?tUsEZsa962x6&Q5KzDn0+(5}Yi(v4i8x9w47z?-v#
zgz3{=;zjsYTvF23gr%EX)9u-;P=V}=i0b5>>c^*tV*HJ2-a37*Rb(ivw(mqygi6gO
zG}o-!=BF@+_2Ive;@i^hyq4J^#G*Zv{lIMAe5@{9C0Wd%juR40v9a370(e%+!@p(u
z@+p$8X3&&UJ9Dkl?W=_+Y;rjp>H{ai2qrrj)lHwC1!H2+@<e<?_VojpcTDw1b$kJZ
zw|G86YGw`-Yforjr@PBM&XRo;U)VRL(>IrQE>{C^<SY(0xQ=IKY+CQgZ*aKp5jfv<
z2S++yPOVKYYdYQ6VBNc65k|mUT3%Oer4z1pDx+nA8N~Qp_i+Xc8m6YE&8LUXTmH!<
zDwP_fumFd=FnrHyb;JGz+=hlX{rh^+ch|;GIM=~4pX73Z0^kFgCZZR^kAKHWeh6oH
zw|0maNJmE}{)Jh=*M>h}9w#SQLpPf3l035Y$3QG}si}B3A{I<6gSuXLx9Q;0SgXVe
znG0Mm4i{lK2ReFH3cAr@o0BxB4njUPTKl__{uYBv{0cUjufK+bTBH0FiOfi3>@><*
z?gC1ozs*MF68F}*x<s#3Wma03sZ_5A<E)X03)nW0+nAecpX`E@;M`!-G7stv7-Nrt
zF6KcCQMD=!x8e$fh~-wsQH7g*ll^Ux_uwCmn-%DuB#CDULMUN>q$22~YPyb&3IQyc
zK5q~4_B-@*IK3ib7aP3cGk=odDUH;YuJ%(aLH1)4uE38^Tw-n1tg{=g!ockB93t(+
zkwCA?JW>iy5_1G}E$c2|#xKvaJ6~qw5m<-gVv3_r=5Nj_ERT0fYHNQHgCNxGCx2~{
ztMjpRO}o!Jp)Y;KQ5CUkhn`t7aMQ|@op+nmf2dWrwEeIJ4H<$9A{NE1zWH`bewrwQ
zQ=2OD`Qp(9zK;S$kp!dGUFy@8;4>((dlz^!qbwrLAs@g{a5+9Xh!OLP`F=)HDubxb
ztt0NFaP{`V1GAuhw{l+>4y6JI528WaP($Z*mAx#Mq8WOqz%4r+3YPl}0WnV?dHw16
zy5ej1T&<-FLo^}-0Y#F>0!x`zvj*^GmscCQJvDh^{#{3<Lc_2iU08F_7U>MDheU8v
zr+rKVp+I@THU%X8xh0D*7iP;)8ou!rPdmj!G(*{WIQy))=yyRU@~VExg``coYc`v;
zcxuMXoKl|)LlYPwuhOKm+6R>8hm8;?i)G9Do7~9VJ#HYUXB|&PYAUKm<a75$H<0_x
zcIRRjy-m-f-eQl~{p9RH>IDoJsxEPFR5e8=$NL_~;CN%>Bri7N8)D>!%WAj@Ou1B9
zz(!x~oQ|Tertj^tHofD;kBg?~#T)Lwbx}tKp;PSFbxJL|cYDsI{Sul>LP{m&d8CEk
zhoXJ<0&k)w%=LEOhXWm>SWpUGO1tlon8YQ>lU}ZhwR@-&bdPu59nqnX-h!dOKek-c
zIiVDom^gkCMdUd=BriG~$>&unsH}Qczuugo;RyNGIB#5Q(`ktNM}rNg;SBtEP;PbS
zyf5HGOiL?|R{J_puYh8V5=tLSFw|Q>^D=@^&$9c5zWzmXo%eZyDQ;0+twLp}BK&P~
zz1FI_3UFUu6LO@Ps!4_a+oCW6zQ%2u$6a7N3<l}cwxUu|7x){~ICL%=KS)vLJ+Y!4
zW!ol{gWYlg&q_%jX?jy4T1GvzP%zBvqnEY$y~WG_SFZ7Lp{(uEyepq`mrkk4w?F6c
zJ<<?#k0Gc5&jE&r^s9UFJ-q?*VKpMsJtb?_P~W<3Q7y$Vj@aqx1-A`WaXS+!GQE^8
zIUm|2=cG<x()+2#-?#^Cndr(xhjZ_6EzN(}Th~=E7>HVSH!ERd_K#^41$W|Jf_4b-
zR?`_I#1@5KBJO97j-nUPWXw!JkS(=wgMFG-<R|N?_m-;D`d#B;T<gUMwX#X8^NGa@
z{x-jQ(|1*|59a||?W$|Y+*?cx)(!%=?Nz<Zm;$YeKOSqyoi}i7o#mgiObr(a_6Yu|
zZ)FIbvmm5BBH|%gV&~~vvD*HQo9-*Kv$tRahs`z%cl`}^caM7&cN3Yj1NC)Zg-Gdn
zb(<Y0jC>1Z;3mH238nk#FKj5q?UF;i6$~Ab>6ZJhyG7mnO=q(8rXnr~5y#KS?HSQ6
z2+f!pe>(mBpvM^z3?g^b4(60NUrrH?W(VSrvydDyD7M}Yna-zx6O;gkHV$<pT;7qi
z+cpANh_E9FJYP#_V~Y5d4~`JIiiR8Z4Das30vFbU6!bDS?&q2ZbT}>0a+2P>_QNXO
z_+Xc^QsXmD009==_sd-{AjcvZ+w@<Q4wr!G6=(bSrGL~?vtkad`fH(<Pk+6`;m<&A
zV@Dr`<z-H;`cu$OA4(T03B~zjLEt@&Tl<Y|KiTjeAQds7?NOnWVEPq$wL#XiqnHlM
zNJ=71#Tfrx@e8yS_5L|ugs0&>HAgQ6`S;XK(YMwdZ9gFsl@56rkp3&iKkz<5m7I?v
z_S}Pi(Z+tP;ZpPa;nMUIUC&@XnFJht?+qa<soX-jHZe^C17l`94c5qhI1Q<WH}(4h
zt-MS_o`h*eNyEEEMH@K<MGDU<D&9?gwC|&K*2XbkBg#CFsdBM)tw%MU(<Q3IvT<V4
zL53;CXedLwK^!tqs%_^DJryM-D*{S|Xj@;OoBN@E>#b%^9F^>eXYh?QjA}DuZUUQg
zt+U=}J@5N?eChDZHPqjx;l>GGsltDG`a>!l8yDkq*<ijUQc5{z#miy(DgLTVjB~*l
zJ^Wc-F1^;_(^1~$j`N5YCBReehumz`*ZR?O>Qa?gD#rs(!5GY`X%Ue~E~WF110VG!
zyNVTaiV}tGTV?|b?Y1lkWi$j804gOulZBw)#>H3|o-(CMlc(_Lyb>u<b?yC6U*e;q
z7KvP%tzg)}+nq?h0X*@akxWPzhy6kP=;)XhLCb@gZX)zeTUzL_S|^=D`rCne9{S@t
zy}tKkt>&{PZ0=O-sHcdHii0xy+!$HU<~!UYUn<+1>`;Qcl#6pU?{?VQa%}<C2x0>X
zpGbDIShs=+7IoS^QhI`qEk+tXcX^R=Qi)(44GrFXTcd8=a0pCU(t}~!)Hj9}k7FVP
zBjJ575XB#H!nS@1#h#3f&W%(?&psiQGbM&VhWi7jcJ*??z{gx5WOf0^5jhPWl<AXZ
zQjpZodwOwVq@8D*`Gyp~H@Yu5h;$|5&l1i1E-=)4L8M{I6~G)3KTo7(YGTFS<6Ms)
zaMx5&?=ni$Fj8EYUW_iJgfn;qSI=#oiDt@$7G=7-&XTnj+_I!EBa;o%#|SNytrPaQ
z3}u^E)iy70792DW-2b^H$iW95rK%3UJ$%TnZW^e!x|HjAC$Y?ZnC<-7+vm(tu2uw(
zg*S7JH9BM|uNqPpUn?+PWbLV)Orcv&-Fou7N6(!cZAyYuv{joOkQvh7Nk&bzmcey@
zoqjof^d_8G-1I8UHB~*TYx5p|CbaE%k7>J|DRt{kGDSIuRC#-Oh?eE^RCcIw?j9Oi
znE-fZK5G_g9e*T7ms<)fJ8(vw=G1ks3@}lj;aD|K5$qVGJH#hgG#}5`AF!=a{5>nA
zODy+Ld=Sjp7y#SgHtykL<uZD^9$$HpfcB>MM{rU$+h=oj1orw@qN;#=@i4Or>p;mM
z3bj2RpiPYd;F~O!<Q7>G!6V9Erb)e=jAKIoJcW|(F6=E@GdIl6Vpw0M+d4=22@>W$
zCX@lElwp>mHVQB3Bgm~xy-M8_UgFz>;0ill@d<>M^WEL`K_-i{wm+J*Z!W5tO7ZMd
zoa<)ds1y5_OSZ*BW0z-nPj9s%84|o0YGdk0w)`)8)YCG>yv{@oi)7!hNqFn^LAF8W
z`x+YK?pIC`l+!t)Za4)LgxJ^|GF@r$g$nf?-ZII(&BBaqh7CJqm*Waz?Np7`rP>Z?
zwX;^A$&1TCB-Y>{bv%!ZYQl97YwXd4iNwMT9~tsB_t5(ut`S%$o5_}Y6|NzYF)-BM
zk|Rn-w=AK-CZ=2?tQe&r=_qX5uW~fS`q<2DFW;IDJHLhM>IE<<-qJEaozrW3jzX>o
z@w#Tzx<KZM_L*-2)j`1Tyu5<X3NF4!hZ<2?XU=8-+qln^H`UZ#CMOq&igN)Emw|&r
zs=B^3zGJV_IfjOL-?7oy1g&TSf*rk!=+)HZTf{5c?=93jeG1lm2EUK*I4DNYmE;9#
zS~(>hMe)0@6!xV!WP5%2yi`PzF$nN%A}!6WN54eGu10!MJIEu;6+FZkTB;G*aJ#|B
zFK^d)KHB!yZgGl+4EY>inCYQZ(RR%>i-T64j>C<fwdE{f&EWg`9!Njcv`ng>`4$NC
zS<d){UA^QCNCcdT!$kO!flD>aWKxIO89L9^V!vijk$jW1vINY%gbGvMGny?>K7P2e
zf$WSl9#sJ?T{0?Zrd+2Q)b&N8TOJN67PTCkz4CvHzuDc&hm1lZ19J+rLfQD_$FF-?
znqwnWCenG8*=<&KsS_1pAz^P5Q*E1P<7hT&wKO6rvAH~^2$-ngM&{LLspQG}5=wnK
z{&l*@>zAMEv)?0H7yhti^@_Ob1rtBe>%)54b4aiGso-RM6iN^cSmoStwt#CqS0uFC
z{s5dY_w<clzFClv@1|~-PNO&C;1`86xP2AlyzGL^lg$L0v`6}8x-=l11CEEpT)hQ2
zJIK}kd@Uv3F%Cwa2^oLwgKtbtw%hPI&}O;YJ)9=ltDAkNYxlTk6s{(R*DXp09bAzC
z!F<3R>1Oz4JwtZI)H|6Z&#u$slTH!=3~N=4rk_!7qg>8b`oDL-F(I)0nb345rH~_V
z-|c=*lz55o-hFjsh@X}HXq@Q6WDo^7=2)#%$&8P2eKFmE!LIX%yo~=9ahAuzMmMEC
z!yLZOIcIelkp5n_?6?a8HZ0!gidiK3fDoV)QI3<mlJ{RvIaGzjgRZ%pR~Wd2WK$4y
z@z?M6!rdU|%RWKuMYSW#k>w}^zcrJmLc*TWyj(O!rWH8zc|H1b31S}-%nPgr7Ed`&
zc9I4+k19_emLe?)J3}#DmdweE1i_=9$A8oDmG?!SCjX4rtJKjc^`@2Kc`n?1aQ<ui
zX8?yHE{qvL1n<5W=k*X1vt1XM<6A<QlxijS0)su&;0le)M+N|Ios|+oT>6aEb;G_i
z&3PZErD+S|=`nWF_&&|O#w~jXeOAo|g!5FTZ#ndGL<p0Ep~RC+r2jTp6}dAWY=>{J
z-f5GZ=K1bh|AudxW3W3RZdt0Xb(a&$5G4xmmM=uDl$#~@W!YZUO1Yc-(;Vph4JCm=
zSAQkI+a~zX@c@QRUbw||)0rY?4*n3Md3(e%e)Oos%7u}Hxm1;obyDbY7IZ8od73tf
zCc|r{bF3Z-k<ZY?`GFVtuv(hyH$=#*!E8m=>0rOJLjSIsdXWT^ilit3YSyW4nbgOt
zr9bruL+UgKt;Les3z%-5J5-$I($w4fq+#5{ie&{OzC1`fVYBV_Zizi7KaNrv%`(Zc
zKKGVvs$C>82>~B*ULcXk@_c}k`SN$ayd?=$<X2~4{Rg_9j78Vuj(`*d3J9E_<5P>^
z@CtJ$T292(X*pEJW4{G+rl*^k_i)Tt@(d$t6BQ9j!JL@3G>06+v>5+f=c<kw1v-y1
z+WsIlhrMWCP&k87>~<tL+<aUzs!ZA3)y8-h5Pbjc)=aNcqZA=8a2f*eZD?d#&B`K#
zpY6xU7xDZvr<GGIw@Yy3u8zc^=lg*7(&QUJAM>~s_)xOhgHvOELtg(>!OC!0RAj~`
zf3kO8JU%j_k`KwStl=A9aDFg4sLut((iG4pys`?M&G*Y1+{8)i3lp~cz20PB`(0S{
zSWLbq!%?KTq1X;`50bYjB<u^l++!PCmNp6hVaxV)_4TGC{S<1A7bX}}YE-5<HWL$*
z$QL0V8VuY$q1B<<5)Pi*EnbnO-cwn2-oAS9h$*?t&c|18clYaVhdbpR>6HfSUgYER
zR`Q{zgY;6F0gLUzqisBllcgn&qhblSvIrM97+Ryl4%HinmILEftIcDWB1>G4+e7k4
zJl8cQ6YcDI%Y|cug60Aq<CZA7s&^Tox>_PSy74&pMSlt)<!FuZ=w1OXAff3|2|sw{
zJqSAqANkMLpWZP?xFfw=EO6%#zhWz7?pM91^HkZfk#k1Q^=Y}hTs7k964DN05Dv~b
z1G?e7>gyY5ycsSAVbd0D)fnPSqIz8Ecz6Uymu96>{10gGhDS%45VN@4EP=UmLGUDS
zAO%cZ7{ImIeSuIq^<p?yH*rzdQ{Ei}^*iP>%*+>qG|_Hu#@(CXzKA}^^z5no9EZQy
zYkT36j(Sq=>Z4Fw&GTmc<HQ?R6#?&~Q_Z@Ua?xzu^0#KPfTvL5Sf?zfxM<VD5lf}Q
zcs0Z=XSl=NR1-dHWs*m;oM?u;YIYTZ;a_wBcqRo%jrbFIF%F5XIq6q<?wCQ*=C!FV
zRmN}HdQ2}$VBeI&+D2D+<dlp;dS%dyhy>0c*0y_D3_yXE2)5rBaZ0oc$+)4uONIMv
z9~1yWdJAl%U#Ga+69Z@Z>QMww$C&Sff4`87r9LF4c|5zD0LXRW?t?!Y8{Zb8);L|^
zVXnlarpXt5_rwS7^a@SXDu;`rNu-cz&&@|eJoP=4xP?oaf1PBuW2?lvcznn8E%wx@
zJ$XpyVmupF1~lkM<*xeUuAG1%k<j7?^hvB)-!WV79roDJ>mEJ`@%s<;ju#Qcw>C->
zSp<VMHG^x???DE_Hl>NqE#_DfKE6Vv^@kew#oCC+3%DHens=cMtM^l;*80I{EFgR3
zecSqq+g)QqY&()Up_)Dc1Tz$q7Z2pf501yI*M2gx>q8RRA?wEVyb)1b7UQxE3s!!&
zu@U;e=YV!oN*TThJ_ci_S*}D=1twsdyIf?L0K>@w90=*RiI4^SEpm)Fj-^wZD(SdA
zTJLJeli6K5O(Op!RCun`dt1HR;rocn9bTDJ6LyRPMuKF*2Q%Cxa%~lia}uvG&5u`}
z2fK5JvkuBGH%N=f8C+zPlvE@S=&87_U&?uIP7zI5mu{MWz9P>pZ-DA5?S5}}k||zM
zKnD}!<mI{(mZDfN*35^y0dMo;GS+1vOi{Qz(&(V1w^{TF1$GwQ^<r9g!}sE|wsc3P
z%U5mFjOMLhE-S67vQOtHiB2;S(H8V8>vcG*6TCODiX{`;F}smCd}hrVs{MN=xjgO-
z;(3v>Z+fHoop3DFlmQa}n15h?-VhOa$N76*fhrVTF?yJFm+&*@)oTE}L04WIf+6ao
z$B{rB6Ny8jKD^g2Iw9JwKT<rlpe^}SqQ<g8-;Vg#w*aQPLMMDq5fK?gxnnUJ)P#EA
z<>-~N=xEVt74F|$Gl!e5R1r;(dP4CQmz_X$$nnEbjp_}AmtoIk77m6cZ(du&tF3?N
zp&YY2gBFHEMErm3y=72bTh}g16G)KYmY_}0KyVE~8VL~G-Q7uWw;&1buEE{iNrJls
zm*5)Q?JoBFy?Zyi>ej9M=lnS5RCQ4+E4}8LGUgc1koh#zY|fqG25!QUW>L<|(w4KF
zvxS(+*90%xHb91z>REnAWUCt+g#&i6aPWmMLoi?lek)yVRFR(?eRCuPT{6#UvUuyZ
z)-RdGbbiG@d?T2(QS|fMt|p=mHn}j7Bnt;a>`qDJdn)v)(exGzf;Ngg2Ea#3ERZS}
z9JjjTIG#^*nR3<rfdo>0-@MYoPn>Do9VFQ&#QG^kqa6+jw1%q0hvmqvoHM^>`?GSx
zl6a<mn@MIiSF($_sINo`BFvqozoIMYZ(cev(V}>{Ib!RziZiacHAg<z-P&{`hjZaV
zkVbh^Gkh08$%{}kkbyGeZh^784;uUq*yXW^Xl290o6E>NUa^?%FoVy<@7!vWe?Jdd
zGFp1slRRDSDPyuLI#r}vIll%&)<<xvws%NSu?N@s`ue)Ya51k12Z-75r@F2q9?$v?
zDT@2-O{X#G=P;GSl3l;)z$JZ0E8cQ>g~n3gW85?NbesrVG#H8dXcNmwm@mmQdZMyL
zM%WGAV!or6{vDOJkAPl?r>t(f(dBL>1N@E)c<QWLZ;j^djW%9kWF(lvP%*JYF-DU0
z7>x`~#knPbh7<rHm2PL3$|WlvR(J8-aGBIe6K_ePo{U@0R-0yMI4vx)ZJ|0}{O;-(
z9SDs<&iu_KutHM#EH$8dZRxM@&@K(E)>~K~Wza8JZ<b5^Q~JsC&n8_h>N<kIF{rvr
zh1szuMZH@-`zX{*9rAl-jbDKn@_T#ndrIkJ7ToWKrn2}BR|&2n8#VTZ!oulO-Vw+L
z<Y*bi8*wl&NUslRQ?nTL4{IG5V&YDZa9U)tzA$VzYc}OVI{cLsWw<wU3KU{S+5OOE
zsLb&({u*SLQ^03Gz7nIX9T%tVA~itOkl;!-sO?Fo&^5>=+}43zj;<oE!J@9}J-||Y
zb-l^|qlkGU)i%fNbb_OkJjXTc&vqAPE^Iwnk+as5-@3L}Mwf?O`A6O~f~wnC5#iY8
zD$bp=^Vdpw9dEP>l}p*zYC7g{6;aW_P3%O38R#1vMT>d8hW;3HjNd9v^&6s-w)B5<
zYtf!y=Zzv{T&C1&N7(OhbU!(lWbI97i>N&JVStk`$&qlD{!?%K4Q^XhA#U(%XQ%sK
zgFU_^-ryJ~df=q>ln(u8FZ_bg$xCNHE|e{NO{z`|sgY2bdxSv?9_lzU8LO$f_EiES
zv3LPi5kDum+_`xBUW^-dtGTQW<p$!?Q7)A6+W|`ABd@ZzJemVt>;<sC))%=vYcjh&
zJ`_Te=U(;b!d7Nx1$M9eY)+A1N1za}=RdjN=v)LT+wUw$GczLxzw+CkMMhURR#XMB
zLf`HAJOxm47sd5Kn}$q;xBzwLwbk!(53UzPZ9fogH}3M+1Nic7PxUFqG~D8z@`}m?
zrd*j*0YndzPTQZq6{WkWJVouB;VSWL-E$Xt8yHCYa7t5$e4}N-wdbvI>Z|YLLY29R
z8$$2jl4XJD{i@1OmJZUgd)paW2N}sM-o6wcuq9<FlzCevA=vSSa)z=$9QB<=)?sED
zEFavJUUOGaJd@by1bIQNYJPKhQ`PE==rxPeTu6$x<DTNtTHNB6X!mJ>$$3;()(_zw
zR6~hL2X^}zyUWc?=?N;Mki-n(EdyLyJNN9&0TaA!xL%|gHABU08c<l@ujQE0eDUH%
z5&6qLT57hyiLX@2^kX^hnY)cii*Vb7tt=O;d(Hdp%*L@?JyhGr1qB(f{x)lQTj10l
zjs>S;pis!M(-%4Otz=B0LhjXj;~!O~t=%Fdo&`~kMbQ_&qRo!qPm+4yg+&2b53gEG
z6Fi)#hGXmQc@>%_e9~o{4QoEv2&Ni72M!|>4hj@fN+wb<_#*DtbW$9SZ;y+PClG7G
z%B?$LeLS|&WHdAkgt?ZEne4Cj&CGA}--+mMXIUzHI*^PLy<v~fGA-475-^5;IrMU)
zmw&s7xa91o(@VTf>hD!stvy{N&F1u<>p{^^<DcvN%HA!qcWEN^L=gJ94SD|F*cIeM
zWn|ah077uT-ly6~Ikwhcd46q4tqL42?Zh*fIeB^H&9ylj9zL!J?}&gh+Zxtvq-+sk
zj9~2Nw^mWjRmmTT_%)FM2bNoseOtuG3;&yZmXUFBv1c!JP`u5HPu$}ES7O6I!IP!4
zd6U>Xt1!kr{LhHe*Huw-UsXTRt}@A=>E<&X^_BUuV2bdCluKPsihaA#>WlQInXhs5
zvrMb(pP@cF`qjtMaxAUrV^5xwA__1_sMz4IzJvIsNeR~pq-4zdr-vAnlz*tNMf_lD
zq{N<!QfyChKDWhZlJ}f=T-jX>lQl($>_^GOmfr7uy(cp-Z&H?y%ULX8oPQL3FrS3*
ze^k0|*;-e(&&f0R&dU5s>{!)|*RS_%a?xm_p3hfj{DT%TZgORP!Th%rxJ_ycE!5Fc
z0<}@$ZLN_L4hg}~#ltHURXO>!`1h~QM!HhTpY3u8rDRvvYD@kU5d5xCf2<5&E8#be
zq_{3-xR8cCPI_+`<phz5On6K4E;sLIZ@>T!b|{3-Txng+dG|1P;;m~i(~3qZ(wR6z
zYe8>M)M&Z9G>g2tevt(i-Tb#dWvG4Iib4GpcNv<79dvl+sw)z2Z|x0=h0?w%7D)6b
zzg1pv(yw@DI=en%RAV_?5aq<mzUGw|Ir@Fo(KRssQgXAKic9n8m@s?6on=zWO#tuK
zQb(x%E}>!3ysuhF8Zy0~MO&m@&|2)|zV4q8A$QC@F1x2%xt{OYEB*&ghMt;3(q5vT
z%qHOBz>J%h*CY)%Rx>zsB)wE)@sx7u@=tx3J^$G%(ng8JZ83`0$M_ZASFgsKG<L;n
z>xFb9ed1mkW%f+sI7bNUgFZ0^N!l624|Xh5gHBgYciCk8$^yC0me4~5*`z-%SAiH>
zA|q`oho?gke7n`NVgdg_Xp(&D)kI9SK(yqnRf>%z+gOo6*@8TS`jW2>CLV#RNFFr}
z{a8#IK?#e_@qRu0cWOG0Up$|-b5k(%7{^dYt=}x+OQhjr5$XOaHhF^zryn1TjSZY-
zmJR3qg<KX$tzg4htmmTEhpx`~Yi5KhcpJ<h+9&_9;?(dsqzQMsStrwaOrT}B=9S%E
z=tup~0NCm=7u%U<Q~V!=RbP<}`<o#L|6FIc8ui07PnN~WG8EjPZw_We(M6N$iJ$Ie
zv1Zp2uca1`FUiErAM3`&i`(SFFi&j8<{6iHql>GY7xg+lcmTev-EJiI-3y&p2%N+m
zx#{e2M*15cNvQ2EP)O&CX;ey8QAi!GL6nl4mm;%%w$;W&R`+I9PdW9fp2+*?(}iD=
zR@*Z4D6(Y6+KG*~*5vQkQQ?w@44*wY&TLBV^z+nM)bzxX**GNptlw;$^mW8Ekm>5n
zN%B&a{J5;R>XKZ4hhG(8B_|b~23pRG_LHXE9pMlw?!K5f<#eKFC^#yvq#ipa@)vYT
zHq%&t<#oNnunt_{e{@~`Q8+6H6DUo;FU@o}U49=B2L`wVI8`jnMPN%p#{DY6Z)R9O
z@n8oMIb-a1^XzoJCmxnZ%g)iAPJY?Mh{pGs1yeVMU0vJci6PA{cFnNEqWW6_XTLV$
zEZ7wNsQutP1=D@{-ddgvPvc%gI8jYoILjd#<Rzq>izP?D*XkK3R|1e!CLDI7JZ7Zq
zyPEN&&XMD)xX#yO>^PxB?GrT_t?KOKMA0gCZf%4ND(_yG(G9Z$Dcex524p$ow#~ec
zmJIf3U#V^K6aVNwWz|N`(YPXjBnc7Ca8(eF5NEJ5KUA7P)X4$zD!N}ZeSgtRHAZ+%
zuz`hG9{vmXw1r|Gh*6yo(ZQ`e=zbu}N(`bQF78Tnd<D3d-Zi3arF6J~h7bRM`W#3-
za4c17#nV2zZ4&hmHt8`l%y>kK)%Ffi26Q;+qFeIlcDf{HI_xNAVT|A7*7t$_{&=_J
zSO4g?H~R-KB+;ZICEUROQd|ASk<}Ch5O(bs;jKTuJwpzn0b5q6sZu}c;s1smhjq(V
z(9LMaBqXE;f$m02H0L#}=NlBo#A&mOn&beTs&r1?3e9r_EV2{IL&;;h5Zp6(F(;?8
zi|gy4H0^h)^?JV@GVJ$97JmSwMd8cKHi`<{rZlsX-WZP-4&a)i@^+AA%GY8u@B%&e
zymye3k)fG2tC%<Bv*`cC?DWy|gT$AprEv5REbxS)BG+=cVoV5T!rczZ(cWZQ!^-*Q
zTL^&e@PlLP$Ugq1nEz=%eFD*G9zoQrH4Qr^T6~e$lzF|()?lhEqvCu)ker=e=@l7S
z2%?gH^wH5#c3GK>(Lf^ILrG4{^_lGl@g3UwONt7`YWz??R^gDYf0}(Divnt3fR@GN
zg5PMjKs+uEjbA!%e&J%(Nrd-AljcK<SG~NvoM5V@p{I{k)^Zo@3~N-7dv_k|(=p1m
zb%6ZWcKOeydDu6pq)UpGI_-wvwNv^rBBQVdYQzSL((S;IX)kF}2*m69^FF5)4wePk
zt5*hdhWCmTtM=1n9tnw-@AF6XBA56ci6v0;B-+*}QKs;rER#SnM)9e*j!yct0LFCL
zrzqgSqHIAy@-#p|<`ZJ7RI0^e?_UJQLhD5sZ9C)3O`~kR=ao-&Uq{@^A|v%9M4bLC
z8B$9LwOPR+jD0zX9UNTX6M=B?43)Z%5jS^T5<pGm&{`#fCtm*aT>8Qw=P`HvQSYaU
zu&Y4u6h=f_8%+I4E8a_Za-rM<I*X4K4{T@9pDIdF=`rXl0$RjCk`i#>oR7S|-npT9
zc7TkzAk%I)UdN61Bl^11+8R!U!+;!?@l4egv)cv#A6abbSB8db%y&nHtH2507^(c`
ztg^iR6k^9miv<wr#d$e~c$rLRfXQ?1q6n<&eucNq5bw=w^{c$kmeZ6c+fuigzax}k
zWYifgcJ)+LLRwuC9E?7Z^b{2ntB@5)Pxtlr?@sp~yaJPwwgW_aweE*j|0#z0pT9Bz
zUX!oEcMY35<t1jJ(}n3etE;$Mq9QBAs|TlEw$4fp8Fn8eBX64OD~ty4YhitMFa!hy
z2Yy|}#WVb;*8HF5hPUCGq(I&UAPNJKoI$@-S<RLHXhkip1sJ`M&}4AkNyO6)=f4!z
zKf_E1xOyg7n>=&7JqoJ8aL)o*MRSUxcf44=I-dN~G7yd~dxmh)1PfbP(EUY5waLVf
zknse4Yqm7(vuwaS9UnzGIhx9iJJZmZSjAn?k0y#o>lE%qv1CuF!mdv@?e7a$aD<T)
zgeee46Wd5RPhZZ&H26m4BdRRC!Qt}HqqC$^u~Mxk6g*@@)D(0dl0N;@)xUb~zym5(
zhA?(Spp#_hD0<r)wRXg1i%*K?nA?YOEV_sYhj5Lfcd&VQc)%`(#c6r`B&40#aw(R-
zD(ULR{_uG4Y65MAIOxyy;GSOfB~Anp(DmJ!+1RiC&Rorkk_rbsNzQj*I;D?B^92H{
zQ5&i5Vh!gnzzM4GFVJ<N4H0lX^%<^73Dj=#{$qG6!2cA1#(N<undc&AXqbI*dHq2~
zCmm34;uacB<P?-I+#CWmsYxa#CXV_m8M@b2y0-C2Z}Z%C+n;u-|HuCQkBoa!fl3u2
zjD?CJp+?~61nlEQd%qJtHCp4Kxdn_KO==^r0z5K(MSMBETCRHxv`W^vlW?kMm{$K9
z<{3I@KLuWVuT;m!&np5A?!vC^2NKEd$_h1jFj)BuRzVPID2ZeF^LHPkfe>o|IfW4Z
z&mTE{oPSj}|5dp6A3<>ShX9<H3UTqR#>~Uxnzs|t1t|q0_0u~BxBelKGx_@RvIC!r
zVo^!Zc1%*EqG+vKdER#xzEo1HZHbK29$gLG9-!=xdL&dp4R7!R8m1=gFFQi+UAwWB
z3WqyAZR-{ha;g&&5*F)1-OCmUv%<u|q0nq}h)GX}JjoVT77BQ!M>Mjid><h%#VboR
za$U$En(?-_Z<C4iUn-60)zSnKf|y=(_}u9L?sl>*Lo`q$p%luyji4yxqhX|4ok<!+
z)k?FG=2>zAScDpb)g;y=$#ANF&7lMGgV@Pze>p&}oC4o)>gd5|!;ulbIL#|5i3AE#
zUUK4TGb{aRG5<zR{$o;BpbY;i!8nDM#PcMzYJXTzOsxLZm6fTaMD!!vP$SsJ$4P!Q
zxc6gvC6~6aAiL?C7|qFNOI7FW=vYNj*-r`6VbY?pRaI6;Yj|m*4h}7Z9v8X|9$)k$
z;i*oSmcWRJsIjl*7b4E~-idwqa7oO7#R9cpz*OH0!7jW*RziN@_IUr^utF|(mWbPl
zPt)zd`5{U+udJSX;(j(gOV~F^kM23xx3m8JFDAvm<=aH^;b66j3aA0{JLkmWcAJ4=
z2WfL{ZSBv?a&#&#F0re#S&<`~AbW>mc6keRx5vWQMukxI`a@GggK!6#{OZpBUARw&
zfIP_I7Og0m_oI$BPi!G={`Ixc8slTR82$x32M-s6MVQt5-o6DJFQ#t0S9Lurg`URe
zJrYKdYAh}61FZ}6r&uU`;5FC~XMzhU5*!hMVUMn~WuYn_`({#KS58q;euJ<T+I9ff
zRj3aLgmHjgNnmjV9es(x@aGouiC23AL^rE`F4Vzd0v<`ZM2(i8R8}q%8UHUN3uS<+
zc)f|@jvQ@?GZ+<=er+NMfBDh%e%pnZu8~v;A}tj-(LKBREod+zJRH3e7a`~OdzErM
zzg45snCL7MP1$C@uZgsmVUOfNR7V*DVM-BkufR@+7>Ahn&CVnp%ZD6?KiR!PW!O83
zBtIKG0@7%xPbZ#H)0t|@8~pZp%WQTsVzY`NQdg-j0`a)NMYDY)Ite$eq_WLB^mr-3
z-oMC}6lpWMgaTgvT)BHj9Ge-+t+C*7O;o>;`oRicbBr-4M$~K2gksN5ge{_&t3y^*
z^)&%UQF!wiF+D)R5}W0)y-IxB7Pw{pt0c<GRFfjxokO#`OjrbB;sYQ0SYHg!z%`k{
zk%QZMq%<swp1&BD{?lOoE!p$V`Dixy<q<$M*3&4zU=lfmCCy8ho90oFX!-MHHry3r
zG+Mkm&vC!)I#+O3bo3S%STd&r3woh}>&7TA<=5a}+L<|>gL2i94UW<*X;{)1aok4-
zw-s)eG^));)zNV=Up*n|CtLI408bIw*RNmwqlo6qf=~pQoDaNRvyF#9k*N`-Vu%xA
z^V8|^?2jxKt4LcRHhLlcR0KLT)~^6EZf*&8!Hz7!092c9((eS(h`q?m`tAI_1qC!j
zmrhzGO?t^EfGa*)yDEEW0ttEc$Z9=+z8F}&+^&J%LFOEJrG$^+koKwdv%NMZYO0I2
zaU^vD&!2&cN5g_)-N!?G6wNMZ-;PEaECU_MpdpkuCE~@i0HMX{)oCSOSuHIJrgFq>
z(YumWJnWa+Az!|TA|fHlQG8#d#+PB|=9A$rC^XNis#3sxqd^X^qXi~AEgv!)558eJ
zDo-FIDb@&TB6>Vz$+kkHb^&&#UT;$;mQm#djR2ACUjFa?-Cr=CeF!+~!Neh=_^q44
zwfvjPaQj)LwhVQp@le!$%Qb&2{pFa(ShhJydjr_{l7fq7*<L&)p8JU8(F<;{5S>zB
zeZ;)@L?rC$eEpyH&77*rsm3n&G<=Pv*PKlniP+UJKFNZ|V?uiLU^s*pa1h~t#A+88
z_9Hy~b?e29`Qn963qcxM2wbl1MM!k4lBlzD_VfnLMl5mdBUxE;himFZZ002<LXf==
zEnb(`l2yECZGB{Cf#X*%KwP31Dt=6jk00&>e8~%&Jtn{%gwi!j`VY7N@3;RK&WW2A
z$aJzKC5+VA;gMxtN)rdSDF+f0VuQWC2dPBQpTNSx6^IP{!ap?Mppp?XtFek19kt0X
zDvCV{6q~LYP!{WQ`%hW@{}_WdzRzCDwBWlt4@{hwG`hN^6?W5<(@Iej%W7NG=IN_=
z(GQ{}E2ZW}O7`eMpfH~uRx8)5?OQ>CSs^*q`v-36BK5{`>=yGGn3udaFSaI2TLHzV
zJd;Zv1kk@-TwZR8cCqK@=SMW%xLs~_<uhAel`^}}oV#e&*@^8@18yT`dhhf99M1XM
z(6pse4Aaw4P82?mF*B<Xldy}on5pXsuiq(gHT*&POnj1FGfTe<l@5P^8gLp-$2=l-
zN?Ijx84~H{8&0E6`e6~Dr(;$aClT!bmtp%sm=C0>mh6#4EhOq*o;s~Ybgfp6NyT6j
zZIyw@h%SIaa-!iqCbzCHUr>O;--kN9wPwe~a8^YD=1SzBi(yhbv1pI?*@L<tgrj}+
zs-N)%%Q|DGTU!+plK&?zW%%zjM3UYWz1>RoqSB&YfGRvUA$Du2IBm~Mez_UPxY3H<
z9Qw6S|H5ta5^X!!=+vkP+1V680o}fJO^l*q1%-Q%fq_9cQ2a#Uer%MVM~yY|vW&}a
zlR8r*EE;rs{SqEt458%nQDl5P*m3StRPfu~XJ5Y{#9%5yIG^f;|4ScLae+z!E|P3|
z0hM?b%*cp{*DOXi^owrSDcslnQ3J3IYro#DZWoq>*VU=8nCT6apAj<)Jw+j=Jib>e
z$b2;-r>Zz_!NvUnN;3cxTjq)YXgN8R-C#F~l&hc{Cfk~1&jlQ{BR9YYF?A=WrtYRj
zpRMV@`*HZp`<r*Z%YKWw&+7VmkAB$QP|-`^HQ)5Vt*u6dMqGN{<z#|iM<yv(xtcI5
z{%eMe9+YWhlDeK7TW4tV4+CyWcEy1_xrw;~IV7ZByK;UJ{(S9%xhB2K*7oaO7HK~E
zjbwNK-PU^#s{ngXMHwzTQKmQ@48gzh>VLyMAP6AXwv%<}<>er!ppmiTcoI1ruG2Fz
z5=i&bna+l{)FuINr`OohO+^HEYxv=a|9SE+Q#G~s;DWZlX}r7JdvK}UAUdur+S8m$
zps!zo?LL362Hc(stNEw4MHP{EBvzbrq>n6|5~WO|i7@S=lky@x^{}?m8*N&_Gh)im
zPf;0r)PH8zWeK(1t&8yBl2K%@HD3La_!oRi_k)}9h4q;ji;C2%?tX7GYsn#|pb&j{
zU$(A<jQb{XnkDx`?H?jPGBBOR%izB#UH(?=jow~Ev|t%tuBx!8_sAQ)Kovj_lL*OH
zr|)$6$GiF0`w99J6KsEMANLp_(07O3`=%$CQg5Mtzu<Wts%}rSP&b7D)T!kYx*g~q
z{SMd{b#qI0J$ZuEJ#IR-7LM^ud`RobL;{cY?T5QF%Y?r-`hPCkq%aS-s7_*IpR6ll
z{BD<%)zYPR{!>pCe59)^7jRT=DDDp&xvEYLi|*)<qamU5>vQ^h3=bD&NeCBNh`2_*
zNT{gM!^7a7ZWXfDyQ`#=tugg<x3)vVUJ+B%1P#YqI^Y0^#fP2Pg29c@Zxu<L%&PyA
zFkJM5xA1ViBI$!pI0QuW4+nf6jJ-b!fmwe^y4%u|v7#<wPq_uBTZ%1!JHWsICr?gb
zwh*`KnegLPofm7%1vWFu0|_)b2?edvo9G8ZB;hdPEv>^jsm6ECM};=Wl9S>LioERE
z8)9Cq(m1xYN}O1K6*d32SKd4y+KkC<oq7c$0LIo>peVc#IKEESMdBEol%mKB@J312
zA9Nh|cRy2-+2{@+z<3<Y(E;M^FX4YkOBP~cehWT2?4>R3*~(2bTT*RBb8|i(s9oEw
z9E|35zn88tSl|Ct*Z;3|foQ_=W_Y#bl2N=BR_4+M549ddCfg3G=3vY4E`1C=c%Yd|
zFuoJHIwLBo)LyF}sObN2_XxiMELBJktmti)O$7zQT)C9J71_sY3$7&5$PAo|UdIZ+
z7;Yus?i8^EA4Q}_(5nA_^Y5RRSh9y}QUm47tYw<Vk*A0`rUp0fA_0YbhemX0(rYUd
zK<dA8$f3U^_$VWj;xQfv$T2>&nJWvFmQ2&^Md=$(^!nKxy}pm=Vc?^}z`&5pG*Z5!
zuPg+pdfx+w1-QF51c?T93w}b|c;I@e8LmkV<PEQ=V2}rxA&uN=9x)(=uerRuoRyO!
zd~<t?GQeSvTLe@#YF?cYyxCG8-wo^yIIm$|4}Rq8XgsuYIJxB@C<tqCoTFG_&?8sb
z`!*VlGg-f3UYhq-;?Dl&6W37&>c+uk`ceB+$wz9Im%okH9kQ%P2CU@WH3|OOcd2UR
zHT}WldVt7c!aUu;Xmq!iO6?`fW9>};V6c7tZuwl#iAYpcH$88XBqXKTlPqe^2P;k}
z5%RE4XR@8ky}+=1vb&mfG*cx=T7iME>~Jx!-g8mE0)rcaEDT*gOh=~n8;E%f9ZL+x
z8$7Z2KuPu6R_mSZRf6pTmFMpHY1J3g^TWu6>lT*NP{$^o>u(lYBKrE7yv|!212wSK
z_CKOUb1JV@Auu2~^#A_3N4}u<ijKp1TOGsz_}U+*6iUVV9J<VN8~-$jNb??k$#-E>
z9vC1h5h>~?Zo&BPV?YBs<N!~tUDSxEXrYqzM6z>$S$hZkw0a*)Hpx53-O*FNYrlem
z+`>XyUHoi3ao4G>nBs;QR!h;D8NF%q3NIK~1n__V)Z-l}!+iChNSVo~Z9e^Ow0gYF
zi?3d5Il>}+J7GDyFl;<YTpFz`p&Q=8^J^LMPw(NLYPTtaeqbxq<(DzaqZH1bbeW4Y
z>_&@{+s|y>7k^qQh!)G4tKqq<m@Lyg|HHf|a_4j{Nb?4v$4XxSY8t%fkS}PwoI<$1
zjhHBPAcG%R06pxF87jQVUE9pxOqF3ge<~TKigNWmjhLCAGFz0~q!T*>bZtIdPVmoU
zdh<VwW6Qb8Ta4O*L1o0mAPp247^t9utt4U`cXms2eRG`r1$yAZZOY9$&dr+6*~ANO
zo(s`<Mi$m;4s8Pa9A_Je$wAOxy{23$#6&MO^(Q)=lhSgUsukIBRdTFF0q2Nomu7re
zoG&8%?{oqa3qgf*!+|8K&qyXnRNq~6y{p!}<x<uwUwn_7)9mcwk;?T>zvSx&PQvtC
z5!Ab~3q<HS#q6e~OWRGN&#*ugWi%1yUNrUj;_%$A^}2e1d&eVXsOO)RLjad~!nV+W
z%BwRYd#Y$?f)r$A%DbMRv`~82Th*H0k1Sw#4hX)5nraZ7ztqE;@#dhA)&yw?(~&g9
z4aPtT)(d)&_Nfn>2Eq+Jl!zd#3VXps5*T~H|1;kpxL_ENFW(cWzN2?1z<|h&$8XS~
zpGAjU5I{*TjCV33I>bhJ01bM|fTmiZ+x|bHDF~x+YgHOwbXr>OO%wN8eb^lL{QO>t
znemq0j2rXL^`(4rD6|j?k}u7|=-K!u1qLB0$Z4d9hQ>Rv*W@=>f48VjtGmQbly1w4
z_(Ca7ocYSu!rVMpt-tHtB4L{^bQ`=F2Zk`^6fd(W;QjN|)oY9H&=k{!kJqJTO-=KW
zkdP#&Ok`;i6l}#C*^9JOd8|77;kS2p<;2w`K=L*nkD9teKhT6J|D9O|F0xdg<je@7
zzsi#0Jmi#2V%J<T?*!a0g?61`#rEw#`92fV)A{y0>?X&t11=XCBKCXL%8j<ULn`SF
z{ziU2toDapX#|eme|Pl21@Et2Q0R}PPZKC<+KF_#9LKSfvhURRdXHL`lW<|>Jerl_
z6+?5CfcE9KVZ(XqESvtiz{CVc!mt3sw7w9k&_7bI^99cBwAE(TDl;9tOnkbT89F>w
z9)sj3AeJrn=UD7%!qd$f440Xh&^KC5qOI3^l2@K-7g@iG-9M}p^sTa~cxIcI5kU*5
zzgC;JVwr?$uyQdCZcu%0ZL=0UY)(df!tx<~b#-+Eqn^1o{AbYnSF$*Gc=fjn_4x`j
zG0ARwh1w&TVLaJu_w1xuIl?LB^p1qu(7TzD`(Zanyattff0r6D86SAZ#Z_g{!#wY_
zGH`W+*J2^|KF4IP?o$EN9)D+ON->(pLFUz-wY99Rt!<5_C^&pyOt7G^@Fes8wx(XH
z5s}<)`r`_HKOXdMT-9iEw1m)fMVs6<tTh~$G)meR<+a@37D{|Sa;;!goEWRH6u|sS
z&o*xT@p_$}Qvr?VV=kq1Vl)aqdp|2X`&P<6m!_xZ@_s?d%Tkp$5zV;B&_f7U2Q9**
z&nl7OBbteP_b>V}Zh9=CSXjozwUUFR)E{Ft<%3DU_|3@G-rg^k&Rxkk%{|oPtkPWK
z<LgZ<0gr>vB-^%W*TF`ET##8uR^!q>*higLdYJhB%Gr^@mBXyg#K_RMwrH%D97YA@
z`ST|R6M3<*sCc|@WQ|Uat?<NtS?7&`f>1}SJ!~_9pWxVnvvfsw4NeIR3Ywqu$EAc;
zTrYS*o@@g9pUNl*dJNP~Q9`EC56y(wRkHdI9n8!v2Z*=fLvK=rceTJh#BGneq|g=z
z`hheBLOeI>9r9f3NR}E4pO?}CPbclzyn*ig^VBxl`%?D<5B=^^gT@t0tDb1UTjZj<
zc1?(kj;^tqU$3FS?AhhT{Tm(tJp`Y_lJR;?(L3f!5$Dn+O>WNYcodk9<rom8s}F_{
za3rQywUEt*H`l+F$Bc9}^1y(W(;_eHLLKMQE_TY&JZdFY!a=y8)P>UBJ0WF(VoM^I
z-+sn+cU|<q0(hNj9Mv4SBO3SXCoOIDKMy02?|g?I<#*DhMk^;*vZ(_M)MwSU*ZvDh
z*KhD*B*)m4-Q{yr&UkTfaZl_<k~Uzw<)!cC0h;+NO6dgshW!xQm_b&BeOr*yqd^(N
zw$OpfdDi^}*xkmr`?T*8^VQfCzX}P|kds-63Br1(8}%pW`ysC<U`8T6i)9CWHxIrW
zmmk`U*AJBiD-=5^%k?NE3U9u>u3Qd)YWamqTP+3H`-U5j-64K7Y#^!DWHjsR6F%>0
zGjXw91A>(Oxq5NO1le)EtC6rgvpH6l5>dz=(I+g47jQrDnV<|3V=`=um2WC@Hm(Dp
zC9F~<DCa9UYAJ}>-KLg)OER=vM0%X=sLySmU7;8$oRsZuZc9LK1I8QJI}|Xbf>Zmq
z^z^n5@SpkRX)wb%YA1?!nY0kUq@;c9_~ddj(z@B>$(=1P<s1NL+l;SlIASNy6*zBJ
z=Ri<`Q>yI^Ay;!q&?Z^*4^lA}L&hDP2;F;E<uZUTPh?(bX1*hldF1dOpdy7>fDbzY
z-DBNs7gl?sPX0Kyey_S0-C1z`GhCG~KQTJ<LGev%i^U)0zlCJUo^)xJ9h}-?**H>V
z9#uPI%<I|CpZLzPM2hdWnG2x%W_7<}tzC@uoeHBP-3tDBvL)@QHK~1$C7Hk_9U{3$
zSycD^;t`l5M84qlQVA<4&(4`qZ1Y8`w{oyd3O_rG$KNIxSjc%ZZCQIOyYIT_TEV01
z+^lCgT`>{;<&DDHl#L_GEEz5q)W{K5wb~{X%eX^P$AV%|2+zhwMzU47b@5}x-~WWC
zdHqtq^D@3*Inw6#W@9ojok=o)(5CF&gi>DxX;x8@1QuoR1n{nzlN`36CxJM}^aF%{
zj~g%!Hq=Xt!kf3~08C#WvlMt=yM;n)*$Mxlp0UDyR;s$X%f9WKp#9zD#x~&LZ4K7^
z{%%fSvs>QPU};HI^<+z=j|QrzZ?Rr5fmSDkERsT<xbtIU9UP}ZIBq-bCwEZ9OgN+x
zS^1-K2bDG5gUqw;%qI0opdLkd9@3VF0FLeS50CwYiW4I-UR*nG*&!-U!bBj9OCMkO
z$KbQM^r$fvEwq4zV|mMBL5gCFt#FXmlC&xv5*JDmiPAZQMHyd={`k5w&pw-;g7|2>
z42%u1Uk=4*K+lema8UiOOemueEf=aLEXB!L$O_Njdf`0Mh&JA`I1q_<_CNJL45V<#
zuB{oO4w?H}5tJ}!m#ba2n`I+_1@8iWqW$ehAb=Uez4l?hpdk6d>xLA+VIxa<ra7ei
zWZvoCvZg>$(J&!W^Ym)7-ng)?u5O6*^z?M5!a2L%Dq^c+QW)ovI_|E9Fi!Gan6+;B
zg*D7nCwxEZGFzDYn!_WK)X)%FvNP{JSo=HkThml9R^%4^PSx1L4r=A>URSIS_w}x=
zmAbR@*Db_8RGscefTbSyKoREk>(By+*}jI8v9!r=PjI)Jf?B@C(8h8_eT_0o0KtpT
z>G+nb#1ZHWJGd(<ykJVp({kB@cLaz}d2>wVa~qa)Ii?m$6O+_W8W-o+&p6KQCU%q_
zZ-8VZz?;Fw7MlCcpiu_dNIoWQ-m}cz?4e2<Ev~&A3D&z)x16tN95_prq-xnx&~*NJ
zzu8TOwvR}Xqpf9Fpf-QH(P+Ql>}Yb9{Jx;roHgUepU3W!2J&i5tn``W=P$iX6l$$j
z^(C!$Pc=Wbi&WzF7|0bW6_0dE5}Ynq#GRb*rHz%OG%Cob<Y7s3Dv1z!#G}63m5GVQ
zHWugI?Wx(GSWI=2>uNnzkxXHimK-2*KQs39f`^ua?yp{@Vvr`PGnW!T5z-66ededr
z;9PWHaM{k!;Sr5P#5ApC!0d@moU$D=9fL1TXu=r2KMc#&yvTdOqMDLYGZSlxwv77w
zADsj2J%9cOqsdNKD-RBT$vFHJ**XaYFG7@4+^}{wU9Z-){rl7C+5I|k;}quxz>R&q
zsFB;uBQ;T2gbxiio`*rem~@R6P984j+SMzzc0YW~Or~-Q%42Bg=wu_dq$ZK^9R9?F
zIvLN}TQ^!-+?|XKZJKL0YQ$-tDM}`CtG||~9vvBZe{s+jPxg=d#uyCSV)jH&oTVcp
z-QiCj8~LZMqqS1E`4cm?_mxIN?D|f@pH^IjGG+0EmJj3A)Mu-KBAsH*MkO@vi#%eF
zO)bZT-RYnzcjL;}L>V&^jCbybV^CZ71Ot%5az`UUQF207vIM*&*?|?KgElsItBVQc
zBUa--ujJ<o<mrl;W?Y-Na9yE%v+nwb?M0=N<PG=vl7^Pf<~TZE+;G-sO18gIQs3sC
zVF3_=s(DpoKL4vmN`9WEMV*aqKd~RG1&EFlyc+?;Kh95E<R5$t<DG%tO%fPnBMH6m
z5FIcGwi`lYAqf3VQVg)yb3|Ia_s}=J;Sj)2^2<=5)s4T97Ys9bkp?#OO(5><^*pPC
z9r`^lFoD;Em)XcZx+w}g9gZ{$W!oV-qQGkeJ9^(g8qog<odk1|D-ZmBKQ=!fC@erj
z_nNhJhOV;U=7#&Ho~D`EmcsCxB*{ncW9f-E1`%X*%L+$GaHhOa^Bw-L{m!=~M*cHg
z4cLsNzK;xpzqXFhvv5)JygifwHM=E=6wd`iB)BIP8RUdWrauF5t`5UI(-RRZ$44+o
zJWT&UEj$P=T3L<PS?HIHSat)Ovs|`PiAupWiIZq<@=Yvn>G9>pefD?McM8b3#6@)K
zjwjPyNRJF(Slbs1Un}vqW}PvO2Zz<A+NmfcTXt&s3cVj3>?!8vY7ljyp#{hjA-Eex
zP6qwgjJ-V)uGH91Jnc>LM#<6cp&?~0t(<0&p?;FyIe6%IaC&0^uxP6*{z&h2vtZc5
zJwZre3G*KB==4&%E3^=U?vaA?VD!FsU3|h(t2Rq$x!v2}tXo-FGO+A<_6U?*XzTpA
z8Je$IqkbJ~Hjs#Ce~@84{2tGJZfmAM`Oz{kGQ$Z=z?55Z1qLA}Z`)7ahyqsBy+CW)
zOy$w{maM%oFd%X@+lm7(idApFl{9SM+pR_fBw-BQ%O4%?R^H25TBbz(X`Wv^nInQ4
zUMU}F@fms&OK%?%z;z|pe7d*)>+OcyR5L~CWZ~Yd<K_)AUncjAchlXSi?iO}8_XMn
zYUvtAuTTpR57e_jYt53#NIm7#UUR3r%C!0P>><7qosU9j+q}znAM14gehdV6_P%Wr
zM4ljK-f_X?;yfUJwZ>rm3plAVmAgHmA9ky#eY+iJx5RJ#F~dL`hVvQp*0-U02wtc=
zO&#(+NXdEH87Spbr>WG>LYIl*GEF?U8+jx32(=k5TdGb5C?M|D#*2Kx?ge)Q1o_t!
zHm-hgv}Sa4`0y&0mb6^qk5RjSHR_N5=A>+s2I73=`~WZPgNYQgFU)BWNMbJ;rK_DQ
zsJGoX$=5p_{vH<ZjleMJ;}>9}zDF<2KQzCH+zN#i+B^_}!0Z%_l0L2E1nt<)L;$Z_
z>cV-;xdF*AJ9lYu;aCrqJ7lEe(9FV&Eo8|39AWwz__<4{nYu!{_~W_%TSn&4DXy`v
zkN!GPAVa2RJBG;OAb_uFX4m{<$XH_orhA${8`M+i2i0DsuwRHimNgV;*jMk^UGF)X
zT~(O^GQ)GR^!=*+ymY+jGDvZ8I62>C!W<%?EpBTIWm~}DMY!-PM3R+)-YUJHnC{!7
zL)-KF9>!;<Qw7RN9M&W1i!OmQg*j$jp}6p{MqcQTP}d7t*p`>g3}#OWEG#UToYt=T
zbNSZ9I4ojl33%o5qaUP_(87M=1sg~0YfQw1GZK*BXJ;DLjk7Q^X9qYzmiHZ`G1wyW
z74><eMivogp-x6A*3g6N&i7(~6`fJY#Fv--Hc=S61(YL=W_`fYoS<b8n)}qHd9`?d
zTjGsq_VWnuDU8~rv6p}=q!$k59i3`LzgyQ_#kryy@3gwXqoCMZ?1T3(`9;(YzgGz2
zZo{PBUef(Jw7e)w1AeL+@KqY*H<E2rcb9xAO%0rPJ=Dc8pNmMCiY|(julNI}{F7Kc
z?=<Y~?d!*2z1`$pM!!8H@#xiPoW=ce(xP$J@CFLpdbJHBtR{?l-QR?Hn0TzPm8$X7
zNHDbCSkF5yKFLYx>Y3Im-Tm5QFzV;)#=@vux;wIw$o^&O<A`g;{N+r6dau&pHhULb
zmF)(7ipSNnlPP^PGmQZW`%Y#at5e=ML+F`$f$!b&^Qqu5L8<eEonuaeg7T}e;t~|J
z8rg=|X&*D%pFVH2w9b*BMm%}@(<(@qjOGoE-K-@d!XrJkD%FMu`tkJ1JHRyrTvwcg
zEk4BdcR9vg!~;*csIZY53pD@0l85uytb(E5{Zt%yiabKJVPm@PQxto`ABUClctk|^
zLWSwk@O}fqubS+($3wBfz7p4HvmfVco|NyfJ5^Ox<<-=b7$@;m&YtAqFwQ1TjE`IV
zdcvbvwafcR#=8By7-qbthSC2MM{svr*PECq9jn`>!K1N2?2Wp266<RD9j{!sprWXN
zn{Y;9I*ERZgQ~{@rS%Y=S9mdqK`g$$Z=%gV#4^fn3*P!Y<9d^OHbKi<fr6iJAmIJ6
z$I4R3hi9S=mFI+d&&*=mK7^Z%%@Li~<!c#K5&%*H=Y|2<{l1=rJ~}d;tun_dw4bkg
zs)mpOMA8SPVnSZ`pV_aatW>MkHfsRS8<m=V53yX5I!2QYd<)g3daMIUnDQ`-@BB1t
z)u&FDz7X)9FuQaDr2JYnfiA(^$Yt7PkJbhb>JfzJ*^v9#1;I;o4X7*z2u^DQ7A}19
zk_09!?C*G}7la;O*aIemNre7h>w*qyxz5COemp~;?Ic?aeHJ-bbu4<`zjxNZI&j|i
zHR=&gLWdJ}gF%El!r2ka2SO5`d<953!h|!eQq%aBNj{-#vBW{e=-WtOTejiNtv^Ke
zM8g8XG$NFchSQo^1vZBw%&)$$BED$3nASIH*xJr6XvMBPdJhn5Wx~9=<4!6zHS8j^
zn5lNI?URV-oJHY!@mvn6f&i5O3e&xK>Wx7H;jY{+V4n6yw44oVYI3u;`%&dC5;Pra
zUE?gm^a!T@#(u#DGT_9xw1k=g^eGn5HsxLdmdGQk0Y*TFJOxFF|IZGFSM8ekFBiaH
z)7q8_WFgM_zh**p2cm-xK+Mlx-4u^*4goh^*MG=DD_TYbV3qhGtC-L?%Z!1WJhsc!
z(A|3h2jE*U*akYu^U!D5?$o!RupbG84-Civ9lidMl<Wd26@#H<P9$jS@{}Kd#|U3E
zV4-iGNqE6j7)ufQ{UbIou%E#Yn3r%u^#8=x0Y}G`5&|>LLKO-PuDtot0c;NY3R(<c
zym_#|Uc3JvQ~UpaI(=LnRQ`nZ_C*~XJ*6eFr%m}Ycq@1i1U;3*B5jVKAFHU@5-QZR
zbTX{?azM5X)nTVaYM!!tHNTiH=PZ<dZDW6^`s|dL6AgMEiU2Q3bksNOTSr-ql`6}o
zb)L)Ib9*~Xfu}^V$glqK^U4BXTadv(exb^Fg~t8<nr}QmH}#tkvu-cnS>||0vRR?_
z?Xo|?L$1PfIqR*N<<6WSG3q04s2v+ffxP}AJa<f|QU`fPSf(?adU}{JHedZM0v%*9
ztWXb~33H`dYJ^#4!wu_N`SSrVsOH~wm6`YW&;Ec|Ha-A2;T_Z7O!V$88|M?~;hbqd
z%*2_8VeU<;-_6a91x(NGbnU(j^{P}A%4otPNp*sA!-HsjZIAUR(rlF4+at=MqMhZj
zzF#PBvbVM>jotzQ8R3k$*wT-2e}WCgl;)5g<sZW3AK)Ybw?)1m3dUmHZqn7fwe^B=
zdb#45<aL-zjh$f{!;i1f%Ty)}+kytx0?riLn(a=Borfc%aSElRxGG1EjLu}JaPwbG
z<?>-kK?$19M>sbUhzp+)O@d8faq*s+*`Lj3^RU=v2MSj^#%GWAa60l-C-x(x>;;hm
zHsf2}brI-sw*k<dM#URK$$*0`G{3oC(^@F>$`n73YM!g~k^gx^2jJdi`vUVWGyvk*
zBo->s?`7jpB-d9;t{l0s)m9~eo?(gQj5eQDLKz7dSPzT?cbLPcsL%a;Ty|y`3J|fV
zXc8pyGUt6mO6p>p>%@j`kF8aQ5V4G3<A<1BhpzL#Y-4oQeH6*pX@v&{-b7XP87<X*
z-Sp3jWu?CFIERI@yJm`+xw-w0rRS(5$KBjsD%&*-%eqMJOn)7T)&$)?_d4{91398Q
zAPl#ok&tg3tGabr<DGeKATDCosc3$<{KS4cKX=nVO*?m@aB?${wlz0y@<#o%I*GNW
zVmvxthN7^Rpbx6G=W$;5u%biVpB<L?-%StycE2jk1)?|?+{fizaIm0(R335dtL2T8
z-O8bzGP2NLohY;tqOZw(IVD@5=KqD(L(Zo(oGhj{+5rHXHCg)UVe`g(%~S-U7BAlJ
zmI>McKYq1&fh9fBP~E4<RwI;ew}=_Nuu&cit*QhW!U1n`TKS$9%@1~_-aTpIPTP7C
zBY<RCjMG3&aF=@h@{-?=3_~)7OVM_tU+!l-lA^M5AsF9Yj@`*A<d=MYG%ZGcaq-x@
zMSK5L*E7V4;Ixd;!IBK+H9V-^LUbSx-6eSS>UX+>#UkSp%K4(x9}$LO#4eJJ87~FJ
zkiE)TWKwCqV`(Dy@rVkPu^ocM3exPM_M%5<F#Mr*V~R>D30+PFT}f6q#~`y+Acref
zBfKnRV2{<~i2L?zeaC+JYuEX^IoyNQEpzQwjm4{V!$e+vZ-+l-dydZwp_T$1jttU%
z8s6-DFd7LPgN<jlcco_kbKCxW{(P(TZl}0}=nD!>jpP?gs-wwP-V7`$r%a<Mm{Fjj
ze1Bm7<D*2=Zfn~YG;l1~5<f037MJ=(_gGFy;ptJIIh*Zzutj$nzrkdQ@IZ>EubSG7
zf&#W|;K=CteQ5wK)bPsUVBH(TXZoUUZJdC51vT||I7}$xdnecG_e<+qpY0kkQ3LFU
zmoIaov!vQ}+V(ach4*Y|8EIg@P*m#bUxymKNAB9`O!6=mhFI^AnLg?M_8xhzMwD~h
zn1uGx@ChCQ+Hc}4cQAr-qopWuf_`2h%<v=8_V&%yKy(y%9MU!npvw>Vkb?{Ezc!8x
z0}0Gfl{v-wZ4{EQu4=cRG_|jZrB4=qGDF+eRZ$%U_;3^QEQN1cxyf!m-{9fh5u$p0
zQvq(NHTZ(@7_iq#yDn7w-h_X-fW*ZeM&J%0&g#mhqtlzLteTLoXa7spn3@pDP*`@~
zdv|klyz`VmK@O9xS$|D5E{z{5KH|*_+kynHK~m&r%_2e}sPdS%VQCRjm{2sNp?5hQ
z))DNB{-Ahu9yA0*u<zBoh_0WWhu7#fH0PuM-FkUEzg{AO*A(i@00k#(=+XNx8CrVL
zW)|{mIEp4;=Qe3tbKh~guk~s76Z1GO=uu#PP%h9F^c%pT)UNa27%@?yjcr{Dy&a5M
zWL<H?Hu@Z38E+-d=W$xN*l@eI=T4CO?~v~c8;~|U`a8%{=-wzO2p7oDUHR~S{FUIc
znIUo#cMZ^K)Gl5XywJW_R<`e<q964|T+zHJ%O-KawtMF}6YVkQ++~@_;~HVMLm+9w
z)Z_Ok+GIn&R2VVb*M~G9x?X74Ly<PBsC-KuG%_=jGc#kU*5a0(dOwLA*u{mtFBT7i
z|D4F{?!R!fjwM+aPcb`DLPu1dK^7xce;TK)WqdXuZ+gi&Mo(^npPpMW`Pc)up#@5I
z!gn*1U?TF3VoY0Q<>V~z!-htZ-`YN8#>R+@#5pWZ3l^d#7rqZ#zL>5lR@&#g{k$IT
z+bb3{J~b}2C1TAO3x#dF%OQ*R?Hd<e*Z0YE^<`0e?Y;D~Ub=kj7UYs&{Zm}qe^}M_
zIV92TmD#$6o;#mSZ=C+BZB`c7z6i(xDjiZ9XAnqk+f|_uEx7AJJ{DlS3zb`U3)HG>
z9XU}6*nM(@z7IBg>3$Euld~`lm^Y?U-~MzuF}eAL40Ws`Tb#{sn|p$THECO|#YMrf
z)D6mH9=Ko~C=#I0rj%HI(b8`G)f^Bd<&qT2d4!Pi@us|>q(tfcd!R0?lLqr^-9dyz
z&iLG1QBIE0#N^~w3EyJozWceEtyPlIpjsaL*ovaM`kX@7w~@=8J+!2ae_~|^xeqZ4
z3bAYp1jNR2K7gWmLB#Ur2fWJ|VnAV4kr3$^O!K^5X`}9UBc7uJ_vsa}UdsA%Ui_Nc
z`0&X2e(1b1!Ug03+_02ut_i;)owQZd)g8C^^Q%+xG|+zBHNaqFg{ogB0g=KXI4pFq
z?j?h7YDonrv{SxB23mX?ekWYhEW(K`!%4Vniu`Kqph>+3KNf`$k;NDac))->kuNF<
z7C`+Lna57bqwY_q1|GSlFF>$%C~UA=n6*&0zs&>)cn8OF^w>gaM@Coxgpe&!e1e9o
z!MFgVH*t>Qeg>s?$RGev|G!QC2Xz0x&7}|760!Cn?vqRBUbI!(A;Jjb*uC-jluNNB
zXPOxH9fv26!WtL+Izmr@aCH_F4uzTZ{&4KTY>0lqrQNBMe?NDTiEcinWRU{n3mI|o
z0JT}Jn7BB^*F4XdAHjCQzY=J~81Las<+Ee~>;37IH&E{Lx(|p3wbRhQR`~ECpLWm0
z+FJfq#PBv-wVCyNG*3x|St5{p^bIdUK!!40t6Dlj(Oy#p3T!JhRcC9GW_i{lJ-JQt
z#`ou2Tptg;6S++zk&wRi4h^vymn)WF_GBd{sZ{|Pqlt;hEo)DAxk+u$=1wJP8&dM~
z{+m}&vV))kT8#6`lIZF3O+<PK3+G7jK{#%Y@QIvPe^c6F?;aA&H8~gNNF-!^jWRAQ
zri(SDs^~Jd1w*&-Jl3n!wY`FZ1gk6T)9;lB3^K%f952QBJA~dXYs{2F@<SJ`BoJ{|
z_}ROQ7GT+kJ_g~r6%(m^RPba2R0+_iu)9ex{?<P&FuXdeZOvrxIJ7NEj6orGs8B4~
zr6S&!v$c(C+Vh6ARX_VGOvW5!RiXPss*2z7Ikbjiw191S4zAgl1L^}xR#!%WYJ#-O
z{_N=kUDt|=G?h0c0Hdpf<DzX^N$VdfcNjj8-xOTC!=LRoGXhM?O{w%|zf654cD`mT
z_xT4pLI&a8rk|1%q85BoZtSJ)I~g5qHJ__9Q||cf7dD_?vt7~GlCOQYoQrC46g_QZ
z)%k>}ojhVwZm-5(wflImb-3!~TZxUdb0$RvDI5LI29A&GW8dNcC37#8HUEh5{b9-`
zu=c!GzxEBAX>g%ab8B*7FB<K5g32^eIs?>Km<}^HBW@&t5QBog<&2Xp&wMG;uI=zP
zYWOWFi$a_0sde)LYH{4*-IU=A^B9*qx*p=oQd~gj(yBQUZ8q<waq-q0ndEq#B<qx5
z2Zxm`<2-fOiIhEjDy-OsO?TM>2Ui#f0&j|mx{&le#yLvq`}YgB*Rzeci73z4)_z)D
zKjU+X?Z^nHy)DxR>VP9eh$j^J?!0L)r>YFEt$u$e8sF(-=dv~r%hz?q`kfhv46W1v
z2cZ;J6o4-{eH^C0l0R2%dOfM2tf?(LJ44mHA4_YrY{XaBVsSH&HhL8Pb|YIVh0!a}
z{?K^RUMX#hGGy5kPz<=Rc=xx~^Y$AgY>NubW^A7knW2oAS6lak^$M3^Wck?jsjEeo
zqeq0qx!-bUGx&8YRrJ);4fb?j0e-+WYH4V|%;{CCy>^<YacD$`jwnHNrXFf<cfmdm
ziL9nRNwes>h1!5)x0#=t_GuQ_zk%^qE|%&MnvH6b`p5B@hapyJ3OS<u5kL+q5rR1!
znnK4jn*iM_FA_MnF_cmioRl29%(^OpdzUke5E5<u&Rx-ZaJkzh5}igJgvFSSm4f)v
z#W@6pFyW)DDx07+=Q^XJQs~ITxgmf8udvuTs4|7wzGMf{Tv@&mHmB-eNjT*;4hpct
zT<9Lk&gqEl(CAdTeoElvU1nzH_hRMfxNYFLE^}rQN%4^TA1toB3y#FdaAp7>eE7PT
z!;vBd<mnUvcouM4UFtra!r?mj%Cc~Nt-ut8fuj{FT;8^$-o^p?QS-Yj3I)4HQe^+>
zroGVt;QAeW`i{b}4b)K-j*iOJ7N0AV>k*Xq1-p6FT_-!QZ#69U?(cMJ-zl*BTCkC3
z-Pe&e4;jCNj#Bt5Jv2<ahY%px$n(kF{qyYExV-dEUS_CWpVn#7-Lu)HNU2;+)2<>_
z7W-R!z7hT)ysfCT8&7&)8O%}bV0&ncOSO~<6Y0DO0o#geJ+W)7{uS-TeLZ&!C;~x^
zy0TddvSS10{G1%h>Z+=S)6r2(MFoXALjr*;t7*vbS7{A$^+21on8op`E#xX&W$_wU
zZCAQSmcBd0tF#kT9!B`wg#w%)yi$|3^4ZuEOu%cQj&`kDVUWOknLkueP$0%)JUCos
zD$i!rZ*hCk#m7XJX6@KDC5J;Gw0jdNPXBB9bJ#EckkcGIx_u6t&;6xP7{Lo7`~Yp(
zU)4tSJh!T#Ad=6Oa<CMzI4Bz<x%=3N%Ij2K(!5S1narxrwqjgh<Z~I!FqR#s^{uw~
zmQ~(NZo?-4Pr%HqbL%**Sx9W3_5W$_t-_)T+x}5P1w=v-5Rfhb2}x-bq(dZz4rzt~
z=`ICPKuQ_`X=$k;h7^?UW=QE8x@#}qZ(pyAZ=d}4$v)a1dCkSdTI-4X{?#LDzB%pF
zq8|@#1_&R$xo%~3|MvTq4wr1SDu;_-3IOE7nVu)UZgSr5&|s<%Mn%&4B_f4HBZtfs
z-^1dXlckxec^KNxKv%yEwHf@j#*7hp2A22H3d-jMR4p0t;vO&g&WWD<a?TJYtYW_a
z#$%4M$c`e9X4|cb3TN{PhxiYJqUgUrM#qi9oaY0*Rzp$;J7V&=fuVW~kUD?`z~YD1
zsCl50itY^v2T+Jo-;Pkkk+FD+x~13tDm)N!y0c;up2S{}_&iO%Fnb~6=$U9x4a`3!
zPsi7HmwMV<ppw>nda~M9P)ayLj33;F15Go)c)5wprMUhM=CkIn(;08ar7}Q<FDt2N
zxdgW&6zTUMRO6GepT<~7)}0(F)Hf<@Jfp~Xa;jm`e$VfKVGMwtvcr(IC{R$#=^jqK
zJQn8T<2S!wOE_RzgVe7$HLIM$WgGu+%070#f3w^STDY1guqgkkc3nL>4&e<n!QJ5d
zhvq+tbIjzI`Nry1hU(EmiB?y4U7r!;?@pD~Oo_JpNla;L{lr2{{6k`rnl}WV1rYtt
zFtWEf{^SS*C3wH|YmB)5oH6Eod5&0)vr11RPTsK?+2`qGgG_lyrwj`0+EbWk76tL5
z8IxPQ^qQ!N|CofDuI_SCG8ZHL|GM%1kgHTL+pSkPJf+pim#4?`Mcp6qXbi9cQ>6f2
zn+4*+#c2<cG$6{zP`2E)>Zk=&KaRauov@H3R>S}GQ9y?n5f)bUXIOExV)Rl9;1=y4
zz=wXt8jY>?HRC()y?@`vrrBKjWe_RM{iT;cc%RU<_Nc=941db?YUW|sNc;eayo3lT
z7}{Ep2b>9+`D|IGr4NoauDlKf1uB6h<+gjL?sR6Jy<^ugRg$`3cFV1=igu8?l5E8y
zP5n)wsq_4q`1`%Brk(?(ts+<FxYl;#1-WW@(T|N9o2N&OZ>&=PV_1QYTH2I;X$jfi
zw7V)!OiWaAMI`8!XVJu%{8{OBy`0$ZMJRN4!xBYu<@;sZy#Hv%S`W08=)m^{>z3;*
z)-JX@!v{;z{}^P{Wk`yjop4UU0pT8z;vMR*Y#?~quQC6BbXrrszgxre`|>n8uj$-1
z(JlA5{P$*(0T6Nk$q`K>3iF-!Q#lOe^wCJYn#|!dR}2)M#-;JS+!OT}MNAt@%ZW?i
zA(Qmy_t7~Ur9sOi;UjJUF(O2EYH-EpY#vaQdmNAhh+U_15)|u!(<@RSr?E4((BpVc
z#(B$|plZ4-%)41tXf8ltEkY9C0g$q~xy_j@c4#Du`=(g`>3uz^zUNVB>lLJ!gbPwb
zZ3~fJI|ha`I^=Q7&GxL59o7&|>s!8N6Ca}w*OVdSk$s4o4eYh4yFtz4kX1gN$}A>0
za%xZ9B@$J)j1S1HT0={xBVlS$qW=F&SoR<F)>Gz&a#HcP$oEc8E>?eA<UB5`8=&j(
zJCxQQ<*Wi3@yI)?aMNa7GQdiJ$G-wAJA-Zi+>2p@tOKzweUb#z8CHX&mdiz&m3ExA
zfs&wh9UyaVdue0*6-_N<1u#c-ijiWjB<uZ^jE2#s>|hOd?F830KS$&g$`Iu%L4Dab
zZhN&)hO0i>SMa(I0z+Zdy7GgbCRgHZFG`80UIQNq2b*IyDf6?eLc&B*>_Y1WM^Myc
zbs|?ilP+I=MTHUt5NbHUsNl3$eDyu1Gu6=~_?9H?V3Ot;G%Q6d(U80M<G;$)&+r-y
ze;QqAK>REt6_Q9(YQ5Od9SfnB;(AmxvTrr77Xu*Ka!CXY=N0zU|GJK1&uhU*ZKdf4
zSyf}HSFdgt;eFDtq!u=t@L8yKSAgccE#Y_{gw+ZbyryE`@^+y1bfVxl9s9F-xTo_~
zH1-BEbIvG{Z{u4>fV%T<WA|5O2l%7m;<zAC1J!7Vaf|T(|3d&%{{Qawyzre08-m$B
ziAc@aEv4h>bzT499?o7!8Qe<L(b-AS)#(6cg$c(nuNP?BuVNVfA{FpI!{yLHs>#dx
z$5A;QC2GSlvJYM!28KI=Q1LN>>o*v283MvXrBr@p>V{bbRyH;@*5rxs*0bJRcnf{9
z{CW@KvH%O!pkk7rT}8N?O0NZ~7yuRFwZ8VVbhGtjwd&q7bq+4)dHh{m+&dR1u6+E7
zXbzRZ!Rc$())f2ejxWILn48%(-Z(C#WiFreCfrQ~g&`}H?4prX<9Rq9bq`T10DE3L
zzgZF0o_U71<zX9mqXYu<sSN;yLBG7X$Tq_(QTY{*d^*SC$RLnli#(ya+MH?LE$%I-
z1V+OE6eDH=weaX)v6>rOLs#Uv>hgfw(J@Ym2`dNIemPCQ3|{^`9&Bsi$N~<+y9!L!
z?E`U6JHO*h^Np<RJi7Q8AE&*RO{%mRwh(vBo!-wT(u*%)Wc@4^2ZZI#Pusmm+x0jV
zUe^A%D0$KS55*A^W#i07fiI*}iDFh&7k0HBjDJQ9H0k~l5}dU^)d3xQM7Clw)C0N3
z+tdOHuTSmmT>Uruv5x`YB_mC2CqF*HZA@};``BG2-H1A?a%0R_&Iga!^><aK9D6r8
zyvD47o_)-_;pzg0`ZC7P6hI);1U3T!ovl7jTfLa~#I3jz6M4X;=#cD)YTYkOHOMgH
ziZAp5yi(!o-F9NCWy??B!1Ob$7U~5KY7P&IZZfVOxS@$?5Ad;+wzQ@u3>sdnkJ??A
z&1D+J<mB-66%&<_8oqT6(V{mcZt0ciouDhBiJ(U}JbYhK*=rkwo%>h~XoWuzh;94|
z0@P@lt2JwDP{m`d^n@~|PJX8wV4nZn{YN|K3^DT1zX8v5DjX7us+WY4od%N5WW}}{
zC2Rg7<DjV8-+6YH>1!I)lwkWwTVdm;qW5MLQIId}!>7)j0Gv-f!s&aW_9`RNW;nkB
zItm>rAj_T@<{czqP|^R~^<<@*acLAZStJ^X9`!TQ1O^%p4%?Qw$Nm7$SxWN$CG(VI
zkQn0CDr#YD?EhB3{A}Am$PqNqKLT0}V8341c;#NAlUTX-nVG78DEDibsDXA@lI>{)
z%l(strEbH5O<^6yxcYq$K0RO48#c_8#!vTX<d7&6FEbTH__{OTMyT46+>jjiznAKL
zD5&o?*UAe$M4!+^bcSMb(@_t4%7E3skN7a?QNBxXNPb?&8zQmTHA!kQmE~mDFi$cU
zPamIpmyNMp9<g^R<0R_3o;E|ZPpEEzc7lEyuD=+vPaa0YW{h*}ye>MgH~c&Zf53U_
zDh~9bQ$Z;Xu{Sg#jYfv&n<;|%U!0?H<^Cg8fWY?9(AUU5tvNXDG^FYaB^%T~-Zp3j
z;v0W-a-JnZk5nNlaflRL@clZc<9dtniGAuPP^JWDo$f;Fi`0|_S)i8r2C&I0IXh1z
zQe8u|n^(w=e^boTDdqNCFb0u|9U6}Ys8xo3)~UKjveYaPks|&qxs*HpN6hAP+?;>U
zN{5m0Rd6fWRx`7&;pCnF{$w-^?_1JRXeC+HF(&fEBc)2NSF1VX0!0%Vb-NxTbzAjV
zP6xx{L+7`#cqZIaM?1l)*2@Qv?$ZMl`$NmlrD371b6n@{D}6Kal%P_)UMO^(*W&V-
z`M2-@I&;t3kO2bUi_i7~p!skv(|E*41K-d1$+d<$zS2M6u{r)Z?>)Ba3aA(1O9$i-
z{j{Fv8Og#A!JW%?uHTk|L`P?Exz)UU@>L10^ClmJ?a@7R1%R9w`>{HhWA&>=do7ev
zQ8%JoC87GpR`C;~o)aDC4o{`q>1vKya}dytwGjEb+LcsQy>4fi`yg%w8p7us0D=A>
z#96TUHx`Eja4P}eFMOTAx2hQiwYKI#o-21>+yGCCF=dU7rI7IYg2CSB$Z|}UcXpj{
zoRYzj!it(RR6}05%>#|%Z`fcN0<gM`q64SH6A4W_{iOhUdj?J~tr4XpfrKr}yxiQ^
zQE=+ZD}{Odf6FQ%7e+lkjZ4G}VZhmdaNj~3=$}TxZ(}rxHMPJNZcvk6EVJuqe?KoS
zZu%s(o0`{#qio4jJ(a=JWE;_lx+**Br}Uhod;HmSt79FVjU)sCTXo7-l08JbLFzYF
zVu%sYkX1&Ion>5^0zj+UmbLapxbY42^qdj+&bI@BgS+yA1FPi}0e!ZLM;m*j%&s5)
zm4av(#Y{gv`+wzACeM4ji+<^&kNkONCVaO>Ah4OXaz&$k7tRBsj?e(T^7*pwzF2MR
z2pr!P0)$US2nkJe&3@3gC47k#9?1w7K^<0<n}_YpZ8|D|h8Rts3QcjjSE-$@eGbr4
zF*2$S!*r2baGw16KfS=j*Yo%K_=1}7(-+Wtjuo$Uzr72=rrd?QyL2(J4-*fmryNw9
zH!N*!)c|vFlSIm>dW%K*BtB>oVegY}JEN`omKA_DQ~>28*>>gBqDRIez}MsN18Apw
zXbM0zH=wu#G+G~fV%fm&mk>wCkQFD?1U-HUqZNRVk+kRpJJ}_^r=p=}Qe)?Xu7ifl
z3HX+@vc(SYi+w77XafWR8lZ7b_(%v~bNa>|ZpboMm?h9wv3`M#U)cAO0e#krP4x{F
zb{~*U?PD4f|64w<jrRZ*<OJ8d(U6`37kKLbGZ;J$B!O=s6VffZA&$5JF7QG^>mLgT
z6rX9px7<r+he(4d=l}EDcrCpHvW!i|Z?yKazW(2@>~_Rm$EMhc9|ous;;}uzVIypV
z2*t!IUS2EhJD#?_)ervN%^Z8&`}ygO+0OYNy?fT<d1wcqM;F2zJtTJvOyu+Y=(1s>
zDg=9jdy~m|*?5HB5^EhD`|!!5E`d3d1QJTOfa$AC*VTaenI9!4t?_FRIEi*84!PCl
z<nRv}Dj#*%Y3EeHH!KYhgX-MFg*`nSYA;{%u^XQMwkP`cOpBrZwFA5D_3U)AiQB5$
zss%t)aCMwh=a$`|oSpkups+PO$lBz7u}~y_rM;Z8cb}Lf93m%|Hi4WEh=6FAFoQ<1
zB<HnoJzqH{j?^jyhdPML=bP>6qO;JfU!ZbJtjm6CjS}Yl;ukfePcEvL4g2PTDAV8n
zA}1y${gKZ$e#JWi9;Y;b<P47{QdSnZo|GvOsafo$SZ2}fG+a>d1@`Vz{wp5cwCRVo
zW&-hSfVce$u*ODtmK7cdusg}Gkqi44U4Lok$2nKS17_GeKpv;AHqRt_IVLK!5b;5g
z0K!5lVsredb>3sPDag4QuVF~vbt<btbccZP0gh4v_wRDzoy3YUlzSE#Pj(VN4bGHj
z?<TppPr8s2r}mApaP3Ebiq66s`U7yxoo>tYjN*wm^aKR^0bIhI$#ReW>Apq%cf%>K
zX4|*afbYQj$`g|KXEmmjk@nD}_nHBBYPlZ-o!CE_7(Uh!wcK>k<_ANhjWjrJzi)qV
zs&1-Q)YdM+p&1~{X((1X{t3A{>Ghra)!KwbZB;YQr%~>a-O<54<uu=`p=waH<$Wc8
z8x!3wE?YVIZ!DmqFH+BhumjFoFf$A+9=Np*Cc$Y}o9Mnxnhk5H9$xMv55(?-v(0p^
zw&Cf(G9O@d^>Cl!=c{xw6^D)vThIOaaF9XmZP*!Gw^FqE1^of`t%~DWlM2|na$u=O
z`JHojFeKpDNO%{J0Nv_xqokxvMn&S{;+~1rREkpdMw{+WTOmE&UYNBWZi*tf@djXg
z1;2j%7#~@bm+(k!y|GpRGHq9M2H2X+tBm{1ed7r@bW}2`s!S2LFi#L)-q~W2+dz9C
z8>;b43;*u^k6>ljSR*`NlP+PcEc}LJvn?4AbA2MaqJMl>*k9`@(G#1Br@~5!ymAn|
z9nnGqfIn2pe<o^Z_A3B3sA@@GWH(VIzvVT0#%Fh_=UVGJ4WAIIG<Z!o&R$h@6M_UZ
zcYv&LL(R42FKX`UVr$Vh#fmg4SJ}Dg_VVgbWxX0Fhi6YfgnhQ>v~A!^^ugoWG0L-q
zUayW@@e%o9i?<_!s61LWardp`QT*FC)T!6h8qkUb$E-?0z6c9g0eDs7bNlzW4-G17
zgk4cXg3AWq5m)ET>|A)gn{6v>kf+1WqgQ&=0_eY$U6NpDJJ+Hn&%>vH(#u%-r3y>J
zg!jXPZ^3&e|CR#m+OTUF=&j_-#rQWzI;h(9-tkcr%s@O6xNE`8<&w1ir8va$M1ivk
z;6ONShg!uBRb2~6#WrRG#V>cRs$r3`0f*Gua^P+M5f!>&te@6hWKl+5snq%i`zVo$
zNUlk^D3fm9-0gdwla#KLS?}LtBzvs2yYP92>enAmq^|u95ic5dB*}#r^+$g)oroIq
zzA@P%JOL>Kp#osACk}VctuV`vO)L?`*K?B4Y}0Jrop5ub@WlGMUUZfKoRW#ro#6Q$
zK8&LCa+3v@E{~+q4K<r~Mc$SK0G1<lEfIqd0=-OMk%MyNu&~#d*_KJZC7%G_y64Q9
zA*tAPuK{xoAn5%Hma;dqUso&niWTK9)+3>xdscxzF44AgW~AnK8f%YzZ|c$Rkgrqi
zQBl7g*lWG?KlvaN`%%9^{uwk3ARNRQt%S^^V}X^OM;~>0oR_*1J2RCz5cL4^w?C=(
z<9!Ovjq^5o{87i=3kB%t2z34<aUz$GqDyVW^zzRedmj)`1VbyKPgi+lm`2<gw*sVY
zjWBbb_-2>5^Xg7@#CkA%m8(o)L2oa|DWP2eK*5pIgWh$@Ess<KgS~Vn6><ga_KO*k
z2C%Hd7Q<h*e4}&<j=y(DxN5cqVAu@~(tV6;Mn#vu5g>$j^Yq8zRLRNDya8KDl4}3x
z%IpWyPJHeazL%AI!NGTvy#{o<p3@z8obO=qnRPs@fIAO7@{XTj7yqZ)-##S)<iXEw
zKgug&<-x?h)Q!`>WY<5<RhXnGoon{7IkvPMD^lRRC;)m_R=`D4XKlOMXP=#9AUq<o
zMfgTt{Ra?R-J?FIleV04fdG<SABHn4B}I-NDJ-vob`>D9XU4gi;&VWGolg)6b@}UX
z5wCDEr+1;aR3vSh71mZ(!!kXBhOU!7`AeM7$80uThRemaXQ=y~M-2)G2BO4hTkgaz
zvT0h+y+0urH_jF^k*oBrYCO>g)k6lo|MA40<>wVVc{am-igM*}ookM@9Gf*3*Vo7K
zUe|?GZI?6#gySWVm)q~T5J}+=Z25S874w*GRg$o>&tfpJ`Yh_(bnbq-s$%zg6J9|M
zy(3_H13sF&Hpa4Wgjz0kWC@)_UkyBKeY_|I5N5Q$lq+ZKbAXVNEz5rYAgekY>NKPJ
z_x@f)Qrxr);l9Vo*L+>VA#F0p&oRQcy_JJ<%yr}4x;jWJtiKFkb2gBs0SK-lWyf%8
z7uoGJ<%&@*buQF~#{&Wy&&*5L)?8|~=j_L6O8Wx{DHLsMb}UXWw(Ry?%$A9m6#D><
zzMgz-B%dbnBzZ#_ydFr<FkgS}3nGRMr!nK8jl*q)IQGHp15WG7D*3@M`Vyp%Cu*r1
zuPC{-df7(`pwGq!2t0q{31Cr|w<SY>HFwkN=Em4}orpCSg)giD(Wt2|e7UG}bvpW>
z(h@OK@c|#7H^HY=T~BYtrS7L`ZW0peHVWj6x*%URHA>`^-E`q<U8g;Hju=!oBQwLo
z@GC|7>Nj4P(>COE%X9%L2I9_)+>FdF5t29g(YkAe*XWqna*@9BFQ|kq1YrK$Dq)JR
za^K`CW;j)*jmC8oPYdEIRwAZNE5{vyqu2iOJ3BMh>4R4ziR*IbE{(xYty0r*+gmb}
z?g2d_>ykR93#o~M-n9UsK>X#SUL3;3z(6x|RSl}gspEpy?7p{D19kJy%*fF9t+}u*
zD^!GSBI3d}4nNp{94cr)+!r?fDe=+#`yIFJ;31&h$=>S~h6D!QF1q*#Yrg+Q8raHx
zRBi_b*6fgu9-Yfq1Cb)%ouQQp2TZVuC*CJ)hNH{kM^=?H&?{rfw!1u!<_1VF({cxw
za&raMlA+?ZF>0VmCSe4~00bVK{@?D<%iTCEr?p(>q&zj2+ZgDiQZ^B?OllqgAma>h
zJS*eN219$j7fM0YC(@Mm$4x@(T|AS=w1>}&=c@JLn2%DfN<#MYlkEC3Ssc5K0&hil
zAM4IN1kJZY-Rq*@;oT>ItVTDa+;&PF$l(~8dilxQ8flQ3W*nrWtE;Y~18~%NHd|VC
z%|W7v0u6Pqs71~&6Gbf|;lq5a+jr|M$4zef16FQfL|TrUNxGiYHI%}z-WX`w$g}WU
z{_b!Vnme9XH!whPENJAGIwH;N?Cm32*;=cr*;jvNF}jp?9-1%<djR?N-)!@&*<Uw@
z#oBOc+cJaucA9JZK#bp5j!GiooBye~bALM3Tsj;TJMH(&us*zd(6oc`S-?kjEBW96
zuVyh;*LgK7&T^?MaAJJST3%_zr?T=s7#&>DxsC~-8;gnv-UWg}^ejda|C1~i?saSf
z5KD6NP;0#kHVWB|?*Z_IjQspgjrNK9x~6hGcLP%WV-3e?m+r)hz8Ejlnw1KO`OU@V
z!S$X(<I>pp-csxLE7d~7N)f2jMu{DNowm}O7cbPCB>DowU3gy4VG>-ZDG85O&C}iH
z0|@Fj02fyVlPo1Q0)tJrK3+RxTZl@s9s`klX4x=VS67{UNS&$6rr0B6;~h689ut2j
zmp_0;C{2oPkf{ZM4@SBO9~oQ|IvzyhTn})99^PBBAWuZXm$I#bU^9`j48#`Ed((PP
zL0#}H8@eH$R24HfzopZkn!|<HVPM@cdMeJs*@jOQC1^wuKKc!`zN+UA?!2H^&zU69
zc90ZvJ|J}S|Nq1Pt~38HZV%x;60dIL;uglq-Nf+Su7+9>XIIyx@Mz_%7+&fdtLt`g
z<0otye$$5}QoPyeQeTwV^YZoWq?Fd$lxe>dCjQvbFc}&f%hM8xoVpRhgncY?4cs_v
zUA3Pr_jDzX&ECIzTSG8g3aZ%<Usq`|{q8;8+|RprLx#r3ivWGr#a=>##Zhm3b>FQR
ze#WmX5c#O7rW@+pd-;BL3KDO!g*3FS(rRjI^p4%OJbQ<*#NH(W2a$dUVy2!DVjrqE
z$tRgS0CL4faTN^ulmsrMeXF-PzNB)gP0fARLC)V@NIKQIQOa^{T=$JYG+cVRmM(vx
zgT(drtt@uJKuk<h&!lBxk%RJ`rL8*>-HO7{NPMkUv^1jpvJKi{e**^L1l&?l%C3m0
z@Iu`Yt6vM%HCOez6)Qm7O&7!erAw)zK!T=ECL1BVNuG}Ua&nRoRu}tJI}hLwWc`gQ
ztf=3lhlM>KE;;>iLo0~74fHbU{SoAANlJaPmIrITR)-r2^2k|ZCQiMUx6cO0YWoAj
zep=yjyVztQ?ZWpw{*<<gU8|4&Za4G7POn|0@$1L%>JWr47=wMZiBV6E)$%duZ~6}$
zYT<*?hN&bxY8M2cvr;_)ep3N1=V>OBV*K~dM9h|R{;jKt(4x^WO5v$z@VOe%k&lth
z1j6bKrw4Wb3nQ-qi6N4ZJ~QO$4f^jbnFacTXutT$?<Fz+34N*Go1$L9O}z?TzukFv
z0&QSmU=3~vWXU`qTIE?v+B`A$OakmJKLSI-h73^`8B8iE3%`OyTYV-bCY(>nERsI1
zx>}#NXlJ(;RBajF6#y5<mc-ji*Wr^2&!c)y%8wdGyJ1!z@$S0-p;^VTc+?>TLNC8E
z_4bG9!zSu8Uag`;*mazMoSYr9y1glj#5`@K@jM;)!_2BGSyIFOXRcrVroXrOVNU_B
z#DEmYyMV3*$Ue2&%N{;m8?8?R&<Mo$*}(AYc7@~Y55(CIhkRXNDDU^awVBE1ZYH?S
z$i#uOj$0$G&TcXDL6G=43+_tt)klHH8S^U7e>*KBl>23$AX0Ct3<?2J&nHq6;P4kq
z=03#!JkW%!!2t(5-VYN6m9;h31n<R~OACRTHJ#~$4QGH$b^5cq_3RAU?XcrFYD5nL
zg0Sz^U4Pc5{HQV(Rs5>MsOLUAATI3@pDBKwd7b8Gw`aTOl&3qGJ-QOOoH~@Jkw4`F
zAmpveA*9p`OZGgLX{5@NHzY?AG!_{3*fb~RnGV8<)yePE6p2|lpW957kKdE6dc$K8
z3J8!rUOf_)mNkCikDM7AiWlv{rNAZW(&!EloPZZbzQ8FH0;3*)xXSQW#Oo(N3U$ey
zjw6`?o66CBStgz)hM9f0#lR>rtc^K&Uh?7GoNqr&A$4^9^$jIKakE^YErD=M<@z(c
zMh7+W<>iCRM77*|hX-+DD^G(Rbq699%{=<=%5-VbiGGD(yv1x&m7!XKlaNT&PW?Yh
zKWrNP&zXNz;sH%>y^IU6g{i5ke%7r(Vw(FkK@u^t$squx7~GL<d03Eu;^Opjqt6{3
zQb%mUTmF}2gmb&&Dx-I<4p38#Ke#LG{-wWe+ek(@Rp<f@HVK^hN?`iu)~YWQZmnr$
z6{(X{xpMB<%axHC?i%Dax*ZlS#RHQXSdCu)HHz#3D<W<=(9edT4V<Y0yo{&jo?cQo
z5LxTI%FOwib^Lo?$)bD~Po0kY^4PZOYeG$iD3;;pTN%{$h}t&<ThE1$UWVa`m_Ll1
zMrhr@Ums%w!`dy2m_Tel!gFI9Cax^J>1~VbAYSKlc8FQsWGzU)nwd^+g=kE>KfW?k
zv2`em!owz%#Q<EtZ~LvG#Ol$SB|_GlL;VwZg@3uNr%v-=u>9c?4y|ZwN}b<<aCn%)
z?=0o~^kzENfKN6!wEh7bNF|4_U3;F&J&R1i6J%dn7xosME6Zk%+NqDuJopX2d3U!f
z$C);$OtX9H`W&4FnN5_xrO=~O{94e&nAQ->Xqo60NbS4r;&tOnRAgxA1o`ZYVt(Z~
zri6=F>)Di-SKMY0WY?J1xtfWJiDA(RNo$g#hK?4+HRC%9Mf&zNQF$ES7X*r3MP`?r
zr4~Hin!=H&m1WoIahoNw1P;M!qO7ufnQw^^1VZGUpprvkc93ve(QZS+qH<x$yzLN{
zv{2FtX=fz$?G5{sHTQzrak=Mya`d}{HPVIZ;ohV>>fUg{5lFp5`Qyr2tpr}H^n=ya
z)yN+|o@iJ4d{|I<#7Ra*mWK8=%(N1RfI0OJYbz)Y6wRN2WLpvMlR-*5SyWOot8QgI
zeXqzKM7wI+&2!k+H>~Ya_2;)<awfW$&4<?8eFx+mKsY1QS7uUqef{LjoE&6g*pDBw
z?yzo(-QV;}?E&X317kzB)><N}CngQ_Dj@7B^cH&WKDw&SSISIyk@oH%;`YzXDKx&P
zgQ=UMeMV^ncw|_KW`f3&;_H%7QC_d}dFtYcZCdV;r;coH-@f-xPuqr*Qc}X2!!8<c
zAm{fI{Bkfp`K%lLY~8=T8vV=!cVXSo@TtJmKCb&#9SjbCDfv;iGtF2MNZZf-F~;sX
zbpSmXhzl!sv-sv*VA+SwnS9|Gx?*3hO$xHS0UU*<(JbeFn&=T$ijw3j*S;a^a#sal
z(w=VzjgGfQDHKQC#$D>n{7kg*uIB#z$bs>3mf>N~#TbYI4^j^rF5oz#=MJ6M5qvwX
zC#SeSZswuLu0N%ZDTX8v0rLcarqPYVZ$)6V_Ir0;-VtA0!1>#<OyI1bJ(siR@u6Wh
zS^gP=PUfTO8J1T4^Oo$NW0QqDH=!0eL{b}ADd2Hq)OJgROk&cmn2*%?fIXW<BQumj
z{MFmH-<Y(>Wlt5ccCm?`?(<omek?C{Y4aKMWf<S;`hgN(Dn~=3d@m>ULfzoC)-2VZ
zdN>^3Ue^2EF|<5!&W8o`1ZlYTF;d8Hucw}zk}Kain(zDmrlH}Lyg5mGBE*o3kM6Sz
z#S|Rw(vVBc5|L@z&>|(1K<nkq?*yiVfusk&WuY|RNlx+SUMoJUR_#mG1{}vdf@#}x
zww3nty5{;{P0g}pIVt;MLO{NT#t2+5Tg)~imcqrAHHTA|6~cNQUazX=qx$2&GaKBS
zM1Ma%K=?6(*X~E${>DHb;o)KCWLu*i-N06P(OS$P?)&n`YK%N8H!n)p_9S6dhFg1$
zLdW_3jb|^0iQen{Qh=DuoFl?u@EdD?nDy|;G%Y2iezps}+v}7P6Y2KYfiDjG&zRdz
z0JlW_W{TG?3qo=E>iZ2$--3CzT6sk$X-*|Lu5K79$r|}gn>))g)X5cVlMA7*KLxjn
z=_TdtSB-q5nSCKFC0`lcKE(2Mvk!5qon#mjYa3}b7!2E#aa0IO?t49|dgF1g+!ldg
za<evbE+RTi$4eKvT~TSft>R*|M;yLd@&XO+uag-SIO5ofYhUi}{`r__V3kUkyfq(d
zI6d897_h$|pXQk?h(qA<RP)Af&H;Wi+5>7*Xanp;6GH;eGU3_r<q>BzkRc<lq*Q3b
zg0zMTam##(k~EKrKPWT%6H4~L%=%@yV>NO|kD%0Mylxjke5CMV&S@M`+&}awLQJgA
zmoW^4Vm8X)0z<w^a^Vg}kEy?q^>F;Nj7`agusfl^9RB!uTa2<MnZ$Ku?+k@7<Y+j5
z!}63ha;*+8fFQpaJo8fv{gyF4@h1;FAf+aaT7AZo4DEM5{q)(M14;P?A{j&>0w4m5
zsH}$ABwu?XK5E(*)1V8T#Y6ACO}J@Ul;s5p1hRbPtgSm<WKH&^QK&<<VgQ#y+g~2e
zs1*2JA~AVWL!}RRPq9SN*ls)k+1nxlcQx(oQps+!Dd*+GJLhB`)3>r8mnycUJ|SXW
zQb@$1_wkL&MgJTrAtP}(I^2nxiYc|)V>;RSB0yHfAt(Eoy;{(!v=}azzOwf$^GfmC
zy?-pJfB1uKJ+yw@ku*1Fs)#9K&#oMJ_$j`Nw~KN;1M^u{TFGzx;dTDSQ!U}L`!`Cn
z&wk99pU%38{+j$=4*4oOxYZo?Zm|g4bNGAOIuOL(Z5k+guZ+UHSr;^0YMExM#c1Xv
zDE&G5TU*(gLSBO}wXqo^lB%Ac<0hVVoyHMA^|~I+a~qJ*__>{+-oZfY#=Yx+4=zNS
z7q|zneF}8jyHj%$pznEP4z%UQE|Mogpm)1z`=R|^L^M}`R!y!hfC6sb__*r~diQoI
z8hT5oYY-G9&oqj^X3fX(7T3X#-V7b%Q`{E*C`f(U$aPI1mr-<#g202uPC(qrIYU_l
zx^91CCV-MQ7l<wf2^Rd~Ze!CJ)C=oTfF49MkU_%TW&6Ysoc+a#ODIw6<yr-f{rmWT
zek1)?dOMHg_J7NHc@;>>$jC`a1?(Rjj6>=!r&A29*0E(hJpo`{&O4{A4O>p`P|n6i
zaYfH#!|10B;Qs?)L}=r#%3AGX&@b|zW1VeBOP`|?<B&eTyfsfnD=I4brapgzeygd<
z{?!AMUoR~zDtY-U6*6&HuWVK~H;M3sJy3^-jX~c8r0?F%k%hzwLe!Arp5$<lhQUbc
zt`tMg(t-PG67;xFC+uU5hod%onu74=epyy#rWUtMR#IYw+vm{WSR>cU+?^G^iu<tL
z2`JQTc%C2-&IwF;Z@w?)b)UJYd4l%$_vMsbf^BBtosU~_h#^<A9%SM^1vpYWhtHdg
zUXxQKEhaS7(*TFO6^PEX$PH%ZR(A(P((uux2{%%J2KhAS_0mR3%yQsd$i1~q<}hh5
z(>Yn~xEP_$!@$U>@qox1>%xC#V1gC4RASsLtzGh$*8O}Z$m~3TWngl^I8pJy#}s?@
z86UNY!+`1fh^y(J0(Xbz14#S*px&<=8#WZ5?hFF`l&tnRVt33Wf8h}6%d$!~Z?mbO
ztD9pv$bMrdtTk+OL}y?|2Kc$o!~(iRV!^c^ocL953n}}Tv@jI{q!RklFJ4Xp#Op$&
z40YUIkEqO_Q1)o}p>lt=1{RxWHi29b4mENb$sk^}<Wc>1SAmg@ji<aiMXh%;_Q#VP
z>fp1J1dG(KUzJ5(3=HfsaBz$awGqD5qc8wrx!9!JLr=64Y18SF735V^%0|awN!o(q
zmwcwc@FMVdZv4Hna`fXZ?_nmL<x3=Rx}TbGNzSflyX;Yr?=t!ppI2zRQsvxy5dswn
ztg>J6s68HgTlP2J_c5po+dg3C5HT1j(&xlGKrj-nL<Jnjqc6|?lfwc1{Bw-ywE$ZO
z>C}_K^d?CK#n3&IdcaD++Tq$+w5vZbwHWF`OhL*_MwVf!v-5E0#LMMu`+lkN*=erB
z_#&j8vY|#}_m4_!cD4&b>G<nMBAAQw+$)8JU$_lWh*eeJ{EDQ)YApA7y*FY%VbRKJ
z)nO&Aj1f4B_zqPeS$`0R=UiZ%>E*eJ>B~#?)eY;4v)voa9o8+8;adv6Tj4$J5$wAB
z9ogMkOj?S-?!e!cUt9=0m5UFx^-GJG5UN8|=Btp!MCx<IWA_DrCS7tmIwe@g(f~WR
zw@!&7YdllMSyJ=i17u}Js}rl8_1f2tsVjPuKcR3w3ftp8AF76$dFARI8S%$IXY5-!
zqjY^wa1)-Hc=!%J#bfRH+2}f1t<KS~@gU)OuGZlw<%*Q}ESlGUp*i3Plz_W#tbQw^
zeYEfL^Wp7Z#Ovh_QB%xE90<hKNQ=Drh^5+m<XdZ|@&wJ)&CxVIMqzl|1T4k(^0peL
zy^ZgazW!pmu87)XIEhsFSAm|P_wjS?6_#=Mn@4FEN}5Gp>ODg1q3ClNg@yW;7ai1X
z-bWmK&6~;se9v^WGxx&x<;P<yH=fBWbegUWwPW@`w5w%ycY~FDBOaEyXRen0<()4T
z-Ui*;Mqu0ln_JIcF~fqPjVWV0CF6c43f{ynJ&GERM~5Hk8v>&<vl%8%p6BJe$StN!
zahp38;oY9#m507S)t^ymmoB^|Vvx_whWAqmOz#i=7}sU{J($xrV|ba5!@r98zQy}!
z$}Z8=TLwtaS9C$;;a?<KzH9H1FY%UE7Ldd&)~o(Cl3A5J#JB&{@X}B3UDHW6iD_c)
zZ8EL(2SS8)pl#)mKQKfw-`e`&8|U*RhIg}-*1fQ{PLgag+P>)L`kqyvru1jgEHRNN
z`R6;x6F<vGeGe>zvY_^o@9S0eS4&B%o!W12;Q}Yopi1ZHeczU-t8WZ;HwP10J2gQX
zYPcSX?dzd-NS{6*v7MQ)W|HKcS#Fk|y(`RR2b!gi4zCOE&fyX2O(9>I5cewawJB%n
z{XD^D*jlDi(H+vw<+LpE@UbI%^K57Kpxz`4!{*+-0R>K^nNY1Am(7?Vo(N037}5p^
z*Jz;4Np{JbvfWlwRu1!8|F$LDU7u_&RWR0+e*!MjJ`r!5qMbBM;<@gMQzl!#v$ETw
zzQ}9%!vLIDeK@bRUs0UoLu+y-;3{1=5Vm}EFf{0*t?Nm{`yiI1&k<Pb*ah@_zfj^R
z2qO@`3vbH-C*Ki~a{LUr@Ud{>aJ{hxJ!;2DJwr?9BW=&tOn2H#a_B0-&8n&zn^wWY
zJnbVJ7_BYo;ef7Vk3lLm-%cAlDqclKU+R!BCr8IY+6*txvHI(oCmwdOPlU1xvkmWG
zj6GG@s)m^NJS{n^Ube4vG-Ou(W;x>$?^xrQRJHB~(v2Bq-t{WN{KQE+5^5U5QPSTt
zTD2oHn#A?DvZ)dFreZa@d$(1CEz5HEo)yd)<CAAuYiPIQ%tvb>pt3xTdxdX#35YE1
z5)EQHNW&93Eqvz{5noc8KYokV<e3=p|C!F#`la)0R8(~-;%)IN^KP{{>Sz|!X!u_>
z_$~XAK^sE$%NcafB9ar<Y7-MbZFD^x*R7j6Yz2IVAtF01Umb>2dqil+?>X(~7Zur7
zZ`IFeW%+mKe(PENZH^&XX&KSCEA0!DbNk*m5gxrDRmN{=E`RkIIFD*fjM*bhf`&%m
ze4CkR^4_;S`u0@Qk9a*?XS_-MZpkL=JK+8<)D*q<%X_|KbIZ-9qGa7WobXf?Ew|FA
z@xJ9`U#ue^l8}s<p>747zG!X@CMJlN!_Gm@xlTpQxk&f6_mrMh@sZWoz5308=-M2b
zhW=7icFC*NJ&Zly&k>KKZ*Z&9-=Z?P1}%z&?f8gj4W@mc=9GCVI)x_Co95N-|21S}
z64Jr=+qGdU@E7F8@xRYHJC2raOv}$CZw+<nP*V}52jGVU@-G~^W%ns4Objv@eh*1y
z0tx%N%ly?2P(~-|U1)K2M~`29ady88%_!bMmFNY%?&`B&AtUkSaQOHu)Xv}T>O=Km
zIcd$v>jQaRl2O#a0oy{Wvkl+sS~%E>e?(7C>g^evMM=e*L;AU=d7B3wP>ODgxX|7}
zG$hb_?+{YjcN7N3^H{(a7EFC-H|;;XFB*DR0vz#|a2BX0<>A`7A-HF{?irJ|orYYo
z7Zy&Qz@{`8sI_#=W8%3R8*9Kb?;dXD!Dp>rx-nBaxKHoiXYgSp%JR5xkK?Kvb6~t?
z(ALlpVrMwTEE+zuRY{GN+B)?S0;+1H6B`>1XAMpdCr&aNoScOzYY$o*F1NRM<|JmI
zN&yrSlS>)^1hm^i9oO-hnLQS7-7rp-Opb}`@yhEW`ZpEvI2bbFY|lEemWoj*TPvRR
z^8JME$b`Ad<^zuE{kwvfZWdZomkLq7wYz!e`^@4%<LBGNVQnkMHDB$i<TFSh74q@^
zjmjo|=1+?B%GFenaU(l9FC86SclfESE>T)>O&1Q6cT}plfwJHtbhoX8co#WS#C0Ll
z(USU*`B}DL9M!94S*YWehe{n^R~}g?6C90AwB)C$evrx&4MN_(C{^GrSsrZ6ScY0!
zMnH=Z{U{Rb=W{;_r>trgsT2%}h>`^*oTzX978H)btG*?bNTz2}e@r`LAo^@NWodlW
zmkbTZ-LDbuCaton{R})Cw!se{KK#_XtSIrL8?H!I(!7)6iK=AibmBF18hF_b#4$J@
zWV^@U@%3z1e`rA5NsvW8WwY#wdzvHwi;$sm?+Qr7f&cl9_kax|##CIln@%|akqn7#
zx{z~9&?S2NHJk$s4RHOsEkYr&U%!H_-hTP~<U>O1d~-*8&Nq&nRJaxir`Yd1_bd6O
zjs#a*h!*Bz!Y8VQ?}o_RV9Uw(#JW~$$oBD8-{pLkEzKavqMB|(1Ur5{UtpJDlJa;$
z3bO-gXBQR1Sue}9phCPkDb~R|H~_Tsq!T^fgCpXYh(qQyP%q@?7X+1<Ofs>c=}l(n
zpV&d3zp`czv>M2ySNQ$=x4a6Mr8$S88MVc?9i@|D%F2XxoHBwTv3N{&u|-qCy#n7D
z8S0a|(C#FgUoWH8HEQW!l-arUN9KEd#>s|fv~twX)#P^z{(V_NEtG!(oaJCUy6PN=
zMd|C{u=1K*y}TU$yt~v%_r?SB!pHbD4d^rc%R+-@o^Q@3^VCR`N@sNdk}^~2qP3VS
zuXoj}zLA!g?_D&n&r`LFAMfPzV~8IgL?DvI$Z9xhEqRJ2zbUTbq2kPrIN|`s|F}t&
z|KElb4;`x0ix1pp9g4ZUl6%&^QAU+Sn&om@ZvF2DCjW;1SPWYtu1`4v^`4<p{=ME?
zmWBG3c3aUf;e4~Df@*m6h~ed~`ieo#oN>>FWLK%1Fm0MJXOJ-UCqxN<(?C7**Sq-7
zl;Az3A$+nc&s<QfaXgocyzM<baT6Cx*(B0X!Bd;remou?=MhJXCq~|zD13Q$_rQ8@
zL!}V?HZa0L|9aMuT4K_Z1ZGWtsJ<ycP1L;tY2c|~LZ^5<c_74qDqrQv%uVAfug%W>
zQ{*BU%)iN+BBX?BxWeZNl6eE*TqDsd1#3FxpEcufNOhdfMn>@Es5GAJ;3zY@A%2Ni
zT}73$_uNBGy~v4e(Qjn~HLvs<KzIaUo&UrTOMfaWXMOFo;*&Act=!zkpRbnBpRgoY
zPYaCAe#aGnxnR7X`hK;FoDq`=d+ud$Oy_>G*wD!?aMjiIM@;f?lrIQFu~hs;B01Y)
z6mBnn@*=@LdVg|~uC5|XA=y3d?fZM)5_kM||0xKJTJGM<M@x5o#?Rlu5SiT<@P0y3
zK4iq9<<B3Xt>h9nGZnL}i^rGIF)>z^gE|C-*YlqfqUWAG-olBegk`Pbl<GE!W6&AR
z5(rnTMa|zy2@akrT}^i8w)F~IeIov|`190fFj6S}z40e5jepN~21bhscZpwHIXw>b
z?v4rC(G0LnN|)hvyMnKO{xDG}mlp?-xSFz6YLCeC1Z?Tr6-B=Pg@Y;7yzX)Iyv)42
z^lXiR{sPme9iTEdOOKDMUW-RwesKc<3c#fS$d@Jlr_$yP>5tY#VyLP9@g8BF`~?LW
zO6${i&-WawUc40kW`{JOEy3}zg5kDB=khGB=3Fu$T({ssu9%-}i?<G(o0BLOOFKE9
zB@g6`3yM#gtm2oH^uMV-6HRC^ihQV;Xc?Y1Ct2Bl$qZom-}FZ&2W$=9!IBU3!SD$v
zwyNs=fdTS}fa6E)9g1-A74aUvL!i@k(X5%;Ki})UU+Df0%Hw1_j@U}XUs;Sw+T3qn
z*>GZ_)!RFzaG@5^TM?Vs&#SI}Wm|v3kKiC&xjSsLg0VRmnGpGQRNrZ?vb*~4X7vWf
zUb*X*!O6uI6<68M<q(tt=zgG~%QUK?OF;=ICTbWs?V?vxOO)Vt$fx$%Dl)dpi42Ut
zk!&s>ULNBOojhk+Ty7J#EB>mcEUFeJZu`Qr0&%epHK^=-`!*e>WeFvS@AawPD_VR5
zf!KWr)5T4vDAGq5Xo_C`>=N96H*Pp%j`_(T6@M@(IfgYW%dVqK5<l)_FTA7`&({N0
zy}T*o8x@YfGRIZ>55;)2gQ04_!y@4Eik6R2m3+;m9Zz7AMqx{vwK}7<?W?agqx0F3
zoPuLrW|o<JI;ZlRDDUjgF};fXkL)ny%bo5B0oY=~W7l8pyN!0JXUMETYw>b^6C`}I
z)UyAxIm!M@D@&(DDQDNCjsTo$^B<FV+>T2&JTFI_5aD-7yjN<eDk|`@6Gl?A`gltQ
zaPAR#@0ge8-x@!hW>PpjU$Zcqtg3yz8H9ppYcsY|d6s5c0O6P4h0A-`{^)^&w^Fkt
z_AT6Zo0dnaManZ7m=%nh7^)8w^B0q5M36($1u+(>`s_zn=Hs*a8_S^uFWtABh#l5)
zLtx8$2Ai@2Gtqg%k9aE{D{Q(%MyjSs7?r-Kd^4KLEnV-9(%6kD_R@B6bljMvt|>XB
zt-d%kl-JaZJwIO-FF8Y~gpee&0!&QCYfJmM^>vf*V(#AVs3>mDwYB7gzUI+ADiGco
z`IIp7TjKJ)s|EDHP^X5CNmbUPY0n0rH>-qcy-RxS?BXJ?pb)YuTi@KnHBE;7sb^F5
z^>aBUQervlyg_EkpkKr3eAE+}YfHMefH=5r!bU(JAXF0ZQB3apq}?o5xu1c<gqf~f
zP_Aa<#apG`GW(Bgl|I?3X=*Z22-L&E$c%+DN!!Z*vH%+^?L+fPA9~J<&4$G>lQ7_V
za^F}miDZIz&PEAzm0`asV|pg0KL%M8xAw7o^z^=Yhm!NjFL}@X^q=|V<*+on!jsn0
zh51%qMkWY|b$?Ths>#o?boiXWSl3h_Oep3=QFyywCzy_>Y1UV)N^hwvg>mL=I*`A%
zs&$Zt$9e7HS)cc0`g+BRM;%IF#;fyVc=S+-OEkNyFc`&=nDz6^5lX}QAbQvVv?fx^
zn|)kq;@eZN(_Tmg4dNx5Yn=8S&ApJQ9E9=1SY!5j5RD%RlIv>oPA}$~8T;@zJoDDg
z{${?dUWnRi2TCM*KE8^>S`S-x5B#HVbIXGV9`!k?KAPr9+Ycy{*u@4pU!D2f0ElNV
zFjCe6sJJBOvvVvuzN!>Ob%=U0T4G4Qc@vdjCZa>9^t$il#lDR1u_Tmwa!H$l-zM4<
zrEPxt<(t{dHsl*EExH&cJ<GP^pAW3U`X@$Mi2j5NB=@97Kn(PuXHk|GE|hOaQyQ*n
zJ?g25WG9dlrWdCI|H1ZwgXJSB9UwAmfMEEzZO?nG;wL_6P|ZD^%@w1$Te#<*$<V4W
zoC2dg8g~qf4#ZvVv>cQZVPw?ys=r0_k}h-VUKVm_=&9X#uh3w?8f{q}&#xHe$3OP$
zc=?mK2uGIbof<#X0>o;C<OYiCLQ#>P12OE{;91fY|4ga0jOSI-M?PNOjvjsDQjY_L
z-P6Q|aoBaqrdCu`^u4a=!{e0S;JU)?ntZ6E7wR{Z4_5KQu^$*4W3Avj>mDGWR_$=g
zjtebk=%+fEC~n?VNpC%~2u?vRhw#xp>F**KczWQxh&2vqOJGVrM{6320%z?B8A(8T
zI6@8p(0$<JuQQmY^uq}sKUwPa43y~Urn2psdAv@@VVK{l)3n*C$;t|X{DoLT`tk^2
zv=P;_epUV<%d($9gUMt3Hpj^sOFV(d9<0NZ{^Yle*@j(B;H3oaJ^~tpj(Vu>-|~_J
zy-N6q6~O#o%Q;ekUjzc6uK?iwU+grODFFD>W-Lj8Uz9+b^98xM04DYtNH-n&hW+ok
zq5~gu4nA({IvWN+`a=_mKs13LaFXg3_)XU_A;1AUs*ZHvpGD)hE&lH}0soV{hWNRy
zl|g_N8o&fxVu4^G34m?|e0I{^pTRHsq5Zo0uS)6qGw)qv`)xl2Z!k2#DX`Qa@D9zN
cmgv}UQ;nbs?-!;n8t_l<m9kXPOQZMy7j6O`2mk;8

diff --git a/linux_basics/images/linux/commands/image28.png b/linux_basics/images/linux/commands/image28.png
index e11d3fdd1744c7d8a674532111842dd08f655daa..af1718fbe66e9e57a6d7a49b3f038b2b16dbecf0 100644
GIT binary patch
literal 74007
zcmb@tbyOVBwgw7>K(HVaNFcZd4;~zXySsaEcS~>y?(Xgqe3+2n?k>R{f(|gq>-^5S
z=ic?+UpM#7THRgK-6dVMYuDc2{wiEiUIGJ^02K}n4ns;(R2dHLB?BBBg3t>j;7*}V
z4JI5Mx|yYjh@zB;2&tlzy}6~0862Esc#;OPrpf?bwvMvYr!OxgQNZEk9G?@hv=QOU
z0!o7@V--KjzMyk+QR?~@`7Rk(57%+x8=SF7_cx{p480*^VKXy5-JX!ajM&fBo#)^S
zU+3MiG`1(&v{rW{xU83*vdNJL2(dJbv3<eF4b+8&^^!4g*yCTw9N_hRzI^NrkBUN2
zM1uJb9=?TBy3){7)m@8z(wKN1@d^PhmOYFu2vwN4TMq754?<c89GvlsX&nXn*s|I;
z#?QFXu{N~mGK+fYRX>PCHDk_Gb~}>U!F`t9yx7))`_wGNU!fTL+_RBH_=pZyx)5&f
zjSwLz)<rNDjSwF>GqXYPuJ94uu^HBBKx)?6bBkHQ8@7;}+xtqg%28{felnb3h7`fg
zCx(%y<PP2KTuk2iPsX02nRNb|KQp**<LG1qTXfQ~i3-X&y6vexx~{+rl^L6f<}VU+
z;J$0A_4|xcR}o8sgHlJ^Z8W*O_by6+LItNc@J%(IOIzXRl-#s-&B7N^a}IWiyL~<A
z8?xLf1!+1%DVR5E3(fDGakvQ{GmNqAW1rOGK9J!X)4{#@rWpSUqmHv1DI)Vm@*9S^
z8s&~S=3;-6WBH9Osd;4KdY6?S1EUHtUP)cbHZ9Uck90SVej}2`t1uAx^i`J|+Rd}G
zx5BzK@lH6%o}v*bN`b8}#K`gvmh05x*p(8P-4xWZ2usqID2AeD<~L21>{_JlpVx)w
zzt?AbO`-z#x+I+>CLXt&x^%O9s^QkeWajKwFe$2o@C!qDDjR%K64Pf=*6zMs_eI1g
z&wNOcwS*AeOSRcPP<R@OqUN0CzPLw;d+{!0=Q-xr2qCg*f5OS~941m{!$t=~@s}Rx
zj>KVzt-qU{43k~@b#OcoIpXa*&<rbEYs-2&XB=~>r3;i^p4Yn|F^1=LV;Li|eBBGn
z_yylWLi{{OxVClOX4&HX;@EXiUl8YyXFps&BCpTBlB&C}(Cq#4vY(`Q;KSz7S4ZCd
z{cz;X$5<lPP1$9{mS4o<n8=tx+5CCQ72!HbyoYOB+=*SUIp*e-bZOt2y`c)*_<bd7
zOJh4mhNmV5sf^*7{hC+q6e`|%J@$}4`f*;u&o-Q~_obmlZNfbF(K~fa&3Tkc`1UX&
zmGwN1%TI<F7+#TY!)TDtB|Fdh=5AEgl-IR47q{<(*^p30r_fa2e$8OcAWJa~N7E#{
z!NsccQ10r-X5iA`(tuN4dv#@fK;`^P=ga#s|5?U)^v_RSkB^TOIj(V0aD?vympUFA
zM*TQ_h%ym>*%S%UGOHds%ml)%A@Mj!;6HOV#2_>jxBHHE^Mw=(wKw2RES&OpQ%wsN
z-7%;47{dq`!YJ>a(SO&jg|~rU`p)zlG>>`ErR0EfkHGYK=oe25#+(9;2a?x!>+w+1
z7btlY=-qGXglw=ax-pC>;3ePT1b36sO7g@9OJY;8qG^3jB&&$U=vOZ!xW(uGnkhO;
zX4}uWB`_I$AJrkjk{CjeYhFskgKAbl$c`f?M3bkrr`q^JFN{fqew@w)Q#&+UlsR{9
z;^ig&VkEpQnu&38Dq3%Eiza$<gqg9E%}e!&Boj4F#@QE7`xTnVvr*um;UAt^tTQ=a
zNc;+Kfy;>)>q^;p`&-Y0Xf?o~=X8_*h6W+aP}+g|2FD`^C5Yh%`$v?#%-TSQFb9H@
zV)-A|<Z=C!iy-j2oh+F-$O0z?hYK5ulM!ay9onsr6K*Q&M17lJEa{^RUl!Du-5BZ;
z;1WD7<s~yqt`ob`Z?vUapQtO#L~}|_LSsNCNCs7Mp>29)AdN02nI^0yzaVc}sGIMi
zd{^qF>Rm3#@g-d@OQ9-vR#`#iRMEi7(o)Ov_EXec{HKwr^6|wISM|frS>AMkk?`K4
zqKU*tv&O7O>P5yy8J;XV3C#SGNwmG8y_rjuOYh6(MfBsiMLyfSYu#h%W1eIB#WB}+
zJWV`=Spz&`Jlj0TE=>C_hsrL;F0E}oE8J~KZK1A9uHIK~yb7+2FV8QN4~}PfOQ5Pb
zh4v*R<;>Ftr4YHN#77aN-db}9e1u+vUbkLL@e=rn@2j6JVr>=8e<ui62*>1g=7k!?
zue<z|{%I0IB>UB}Z;Qn_Z72<v#+7;+nuf874#Lo3t#q4DGP3^~^7c7?_*dzuYXUtk
zFZ*HEmmH%k`j)!(K68j%j;#3htRtok1C|LV>qtKzLeN4|Uakq=bE!;E53rBA6z_9R
zMHYk2cg)w#SsSj*ONQG<(sqP*7Iv(MV=~;e-ZLODP~urL$ZOtrv6?z+wpOC5qgC`x
zPP6_{wrriLpQ#@kT&0^RpSP-+(X%e+SmK%TigImmjfn~#`H-Q-$-xO(P_|iUGG20R
zvang3Us$4AVyv%d_O`M&9cy5&uc?D<3c0^<Nj*^9b{L7<>vtP=T;B3nKyf{H!QoZo
z(Q^{d0%uZ<W@IjjV~O8<jg2lPm^k_9yx#JvZMtQdWPlK#qu#^xp?|l)M!YCmoBLq6
zRG~V%y0v;q&pu|Bgx}5OY_E61zn!}kWtncJx^-&h=kjhFR}18~!!?$t&2`KEz;D9c
z*8YZti-MHql;w)qilL=m-WBfxciyGXL__+60*4~MQLfVtou_xRYEtaKocgUn?se~-
z?%iPgL?(jb?B=l4&`0%0pQoxvBKXSBm!C-xcn}z$-F{K~f*DX57$nRaknKRoy^zVD
zx!YCUb^c4F%f6*^d11L2i-D4_kiC#YRgj&<MPv{BzM{6WHoZ36VeEI>x*T>;Sbta&
z_Awt@_GgWeL;OR2x9j<2No`Y~t&o0XC3&Uu(q6~Cmby*#n0AouTgIsB7<iVB)EO3c
zlVg*TUSfO&LK5Cir~A#83CD(w(QdYllJ3)J|17M`TE2C+e35+CI&LW%TE;S-eK{w|
z^YX1|lmhDEYzML)O0oFKSZQfF>6N%eUKW>)#qcc4Y)dLjF6sq^bb<Y4(}aQ6gc!Mr
zv>!Q6q*<}qnVq~3&jdpNMKJQq%w~8G+u`{k;#iRI4~`#9aga|*ds4;zJLSVAT8~;4
z4Q<_DHk=%rgXkAXJ>!Vtz*I0fdD+p?%*W-eWw7T~$7RP)WnataMyfSFe=om`VJ&s?
z!_)&_*W+no&qAM21SMHz_E&Gd|AdJZ1)lS6Km7RoWAI1wRD3Z}YBiT0&%*|K3BHUu
zA1x~Vog=k?%KHY-<n7AahLf?K;Z+{wv;>wC&+4n?U}xUl;ISo+93DZ7$C{q%o{9(q
zMoIngmT{Z)j$lj(+EaD0XuGKXWM{wqL~_rK@xaC`)rrh3^Q|f!1HZwJwz~ecQJLZX
z?Wu&n!I|$<{jgcp5IEUhUs#t+&(Xx}*Pvd-r8;hvSBuy3K^sRUN0GIDRaX7AZmYy?
zvg@?#peqrs5-!G}?QD(alTo0@&#S>-gW$JvTuci$<_Qi{Nh87;*3GH5v`goY$OD*M
z%^~(x74;Q#YvRl5Eyriqg~t|trcavSpQaKE(J{P5yu5Bb$5v(6)zz!EZQh<3+69&S
ziwRA;=L%$k9Mf&nb}K{6I!%~IDkreb-OC*NqnPD2pU=Lz*SW`CQK4@_r4M7<@Ll<@
zHtwQB5<{APnqYEq-Ek1}u%7pi79>m1$KVs|_+@(ete-uC#Av)SOyyQ+8sr6RvL}6D
z(?Ke8+P%$<+0lHy*D19I@>%Pd+>WzPM-$GSyDxJra%v#IT=P!ycY8!2UXNa-GZo)X
z;-N($LjoypmwFqCAUGb|TQjj05Zz6^b_f1DucfH&w_Hn8i@bKI_5$D}@53JZV93=<
zwtJ{U$z}D)%DHzjwA|1A-q$`<qpuD|24xlq^LK#d{aSC3h>#%Rc`Z;Z$mDN)R(Myo
zG*zHyq?huPdLyyRw$RXd5-)i5xO}s`e%l2Jcx;<z%PYAEz88C1lQAHGEZ+`psyW-+
zoPy^(YhbI1og9AcheWWIH0Z!-&ZQho=uYu$;>={Tq+h}P?&1z+=ELp(>)q$B5OZ^c
z-%xqDJzBW;Og}Gvie6>e3t?UHyTW~W3YvlbfImaX#d9m)<Y`9v>|49=T-a{DBKiPD
z7|zw5#EL-4w5`3Y_0#WO5s#&{r%7};9KJE1L?{$$dvN;n;<R+05iY&B{4|}8>_>YS
zW;LBlkMWxG@1)YxJcF$pS4>rGkIywQfB3%Qh&|&N8gjtzh%nQXGMAHsqXW_};1J;n
z;GP31c;FC#fBT=bIQ%=fXaC$sfP)LQghTxIJMzHw&o34@{^a@B^;vuf95V0^2RJ-(
z5&rA#mkhbj{ws|j1U!QiRuPes0<J11PG)9y&Y$dE%%)lFfEy?dl3LDiaClUI4tObL
z%HKfwbC#-_E}C+(JSO(GOh%^m#%4?&whn*Ff#dVw0g|?6E=Hstwl;RoJRbby|GdEi
zr2pJzCMW&p6&GuMa!ol!QW1M6Gg1yFcBc2_0;r^<q<l`M<~+)x;{VPL{NpG8<l^GM
z!_4gN?#|@S#$@kg!OX(V&CUFtm6?^55qN{q+0)L&$b-?&nc`oC{8u@mX3i!~mJTkK
z_I9Ly$~7{!cXi<>C;wB?e}4aJr<sT4f7fK^{O`{KK9Kp(6J{2s_sst(8_3G{=Pr+;
zrH7e~rl_SY&}Tp$0&JYDANc;s@c()A-&OuAtD3W!lZd@7kkdurzkB`Png8d*|98fJ
z>eTx0IytyF|7Vr|<H^5s@-hGU^#9Qn|LW&|?gAYxfXc`GpFtBqJyV+|2F8)lQdB_|
zxB^o4=Lb&;oZkKG`X^l`cW_4tfrAr*lM)qH^?*NGarb#;2CY34!Qly76>htHIoY23
zPAnq#GbsWcdC$j$d>1TXVMQ#_=XGB`lVb)TOnRS!-CyL<1f4Hi7*e+n6pw$zsrD2c
zW6oGvSV=ogyy^3H+_<40bJEeo5`u$A{6C()AY+Az)ZV~(b>RM=%YsK_fDaIpNBqCG
z322CiA$&j&GWFK8|KsQV`KHf?anAquj)F%d*8FUE_66k@?*E7HBh}m@{Lkna=YCE}
zNhy>|5g&!!%KW+#id$lFpqV%QyL!H8QVG?*sd!1l8z?l4Cz&IV^@>qju>%aQB0@oJ
zBSU-56qlQun+i6u;YX+wCDp(8i04)jKRY|CyWTr$b>8rQ3|MY+rB6OG8eWJZ7ekfq
zLb#<gc;s`s+;dz2Th~<TeiN_O2je-r1u%;JUB8C8A|OWAoy69Qyy({bA|7=h)m)uL
zWfX8T3kVOQ^cBI?){o#w7Wa~QCq&~op*rK>BCV<3cy>!1>zdi>B~r-!dAn|#3pd`e
z+2tCp!CE2feFOaY2HKd^MtAtu_3=`@>)}h!W)qEtde@BQ4o9}TQ$(FGID{9Zpa0h<
zEc)j!@JzOi%u2Ar(hyeK+~T2Y-WoW|7<e2%2C^$kGoidBZ0=!I;-twajg~7Py{_&R
zl?x^9ju!^itc%Pl+?>w4%QTxxCcNDvUNKT8KuGAd8q6J+#;aEZl4%7Ml7<iq?U?QZ
z{?`rr=Tor$^rVu-2p2!%7vr7?$x*@u%4iM3!>Q36Xv%Z6*F#kq&BQ-SF0f;C0O55c
z`LcKR5RCRZHj}#{GA1VGoAB#<=KlPiA*%Q9-+S2@Qa0x+<{`w>r@;Ie^xHlnR6iFz
z2j#C>Ax2JYrY6!GXm{enf=vf92W$h8UJ@{E_WCn>jnw`{um02c-yaZP;E{y#ta+{>
z7)0Nx9!z`ccYr&p#y&Xwik<f8>_kNBu8iI9gg3r@i-Koz3m?68f`NY@&TgaFC%Y(X
z2;Tg?PI0arxZ|`lyddfK@lw-v{JX$psga&k>ihMThYxfZ27Yq#*?dI&oWBK{0u0Xt
z#)-RhSS<!9*Zg_K**BnPtryVW9S}&z)wTEen!k+fviAeF4?Riv-;Ks+p>AL}u;12+
zv*X-c#N-qi2iI?GZ=2aB$!iYl{7QSnU&lajCU7lBrs;DON~&%1J&~kOW`sbEO25Nn
z_WCBn(y?er!1^OZWx^On-j1C>6P2)QrJitew#f@qs@`yRI@&wy_Y-Z@i7{lkBaFwZ
z0h8m>CB`kcIt`XhS(qNq9-m*$hdZ5Q8eA?&HX;6<M*kHKBGvTSc<DL3Y823u>U&SV
z=oQct7L@&U4h65^)R9{At9~D~S$U#zho;d&`{`#wekWPG<rZu(XKa=5-)RJo4L}rf
zT11E&+*1u%%t;_&P1%Ml<asokt^qxJ-kE<Yt}`0?+tncKB`_`%>+fnY;_yf{zp|@+
z)r~V`5hrd6?VLc2#LT+P^Cj)t5GmLS{OcN$5Lj3>zn=Q)bZi9q@*&vu#w|7f^y4q?
z*f`!~<g#D(G0lLL3JMNmaP^JSN2mNzvBPRVyw;^q@W375?b#6t_oJWZzOlRD4sv(d
z&D2QfHRIUpy$8fd{nZ_B`&C%$t2AHV#2lhksKhL5$C!if$Wo>Pm&y38XziZYW&WHA
zuwe2M&wle=TCU++Lm)Z&>B;q18V{J86GEioNRjqi5USO6#7MO0)nwn-9R=|ATb#l_
zyEXtl6N0`^DSVH(0h*KOkh{m_($_^nMP)Twv!&NZL+@a+7|l+ikcb{Ix`242EN=8h
z(cfO|CfO|1O9Bd7tRUQDbaxHs;mD*<zJIogcWbgpCT_{0Avr{`Cjz(LFXGcXFC9+%
zRcd&6_)&{Jo<9ofXrVzm0P$?3&HQQDS$M8SXU+R|&}^ak^z+e*_jfPIg*Yarv2ktb
z7yY{YV5;hv7_v6!4ZD>lk!s!64N-b`LNuA#N-c&0568`csJC2{{r3tn(6+0$RKK)q
zEhW<nr4l5w`C3njky%dB;-lU+i{BB_s#n%_v+ag~eR<uE;v-X-GLG9-X80al<fVXD
zJ-MTCJ8kD%db%6ADzAo;X{i>5-TD+_zh~CWZQq<F)SC{VTEmWyr=8mkyYAyT<*W|x
zU%q&eh)b_N6j#tE*YSq%tvI#j^x;SToWb~o`blTr@k|-7)sr=UMYoe>=QT%tb!XpK
z{W%Kp)KUz0t#^W8q#As0|0gu3-{VHy4!;!(pGm=%n{BV|=8O9t4><bN=V%p4bGG{9
z<Z!5DNmqCH>Z&nK%I3DWhcvdne+itu!d7zm<Zn<ci%*qz%dp~isGkoricZm9V|TOw
zj1F%1*|8gvhEe8~zP(1iVM7+P!B?~3K8YGgdt~pVPLmxbG`)Uq=CE0@3t_gkco)Lt
z<-cTC9hZB!-Y%ETE}vbYCAZNRV-Hps%X7lbNif;zh$)kiMZp7QSbuP@&g>P)7OR4)
zfKQRqy%kLHzy?&(iQ{d%`*+^gM+p}@H?6BRmp<dxbFN^$cIaR*TH9)tcS-MVFzQaj
zXqRX>P8y{BtP(bb;XFdb1|5vr(f3k%+6lR+Vc1(cp)~hDx?rw6hF<X6uN08;F#q)O
z*BrALP84P>RG=A%zfC`uG(Mphm|e4a$o~9YsMYGk;=r1@L_R0EKtdtxgaYmFX3F;j
z8Z3&yo@a~+q27gUjJ!0E<EY23{E+u%(kVDmT?ErL6u0LBwqhs*%|TzS0|M+czbt)u
z7HT@RQ+0j{iQMw{A9KzR`z^$d$Dov7iegbNbG9KynS|oOZd1RB9F+?QFWpkpX=1DM
zZpH_@1O|i7K}Mk$hZj@Da*PHs_>MIFEQ~QoS}Se-41kO_5g$VF*z3fPU*{w!Q$^~)
zO0bid2tIt;bGTmSzO|lRn{@wPLhbM(nwZbmLKYp5BlFhnJ|(_8D8G2WF&X|@=)eKT
zVbyQB7=<|U=S4<=ZR%kqXL-aV-=+<1FOqG~VV8ntvj+Y{j-aH23$hex+##tF`QywF
zG~=R_HQzjj&M{i;`q!>Je4bV`;)mzv7COg5Vv?z3Qg}fE66hrFTAj9QKWgyXRcS-$
zcgJ8lecycBXJ>DVcB`^wc->BtzXXO1b@=0H_OT7Aq-{s3k5sufSPWV9Flp52CD5w)
zC6I|g-uJDIg}aiY;>je@*=^+9D?|KjX|0CYvnOuUYhoIxcl5q_Wyxk-hYrKsjS7EK
zUiGIR)6yDMN1<*HNk&;zNFPj>RSJz{yLg;!P|<f!JGfjw?F`=EMsBx-Q&MOvmq<|=
ze0{?(kU-U7b2aaKKVZ1fXjx&V*7%9c+TRMSC?cIgXY^e7`pU>4W%vHxbTreSK_%)n
zKcg2jtyX?2Zq;ms&QL^Y{4F&H%n)G@D=(W^5WI>>#ABSLbMcy?Nx)z%ZLc1fUUgql
ztax2LbmH%*9o-aYoaApk%kR&2pUA)B(W}wX*f;sEaEIKH(I{jmSFhZKAsMeTB1W$7
z^DWK|CeqR#FMUgTMSFS=4bZPSb=$M5-UMO$)jbx#QwWlfE2Md+Jh(d@wS=Fa-iz7o
zMutTE48=$s)?(#3jJk8mWYF#yZhP7qf;P4`zmE5EHNXP97fEIhw-I0ARWB7x9Omp0
z-kZ!4a(n##o%Le*=WNuyaTqT9($a<z?jdc|H$fs!W%(Qd&@3JF(q}Ytp$f8AltWAF
zDTh_F?pdx%TLl{&(cy{`%hlyv2SXqbT}*UV5sK4$TWyoarl?!1fL5BE_L5T*v%hq3
z=E<<=1A9(}#s+G<^Zjczr({>}emz{P_m_NG1T)a9SH`_Q<a7(DuU&;5HK<i;R+>kZ
z&o+Lmoo&dO%e5*9FYCmA0?XzI4B0B@gQE|}5U9oP?H?Jetr8!68g^{APd(8Jy}n7G
z&t}xfBn{$b4)|a5kojA6K#j9{sl8f2UvAT-<i+In*3CXL%$XTJ>CYnaVKll-&<0nn
zezKRFch+OxGKmsVuhxFMKj1;O_CyLPk;zf#tkkoi)}eM1D87L4Z%KfTEJ;g1Lzg#u
zTUE7qQFE86=p-z?vJ33kl3}0DR<3P}6i%y0DY+gp8MM&CLfo(!d0MUenr1ev5xBhf
zXDo8RzJ+Fiwr!W{m08nhb==;oluCLIn3F?ldVQ$VM%V>mp0Edk(P__pT(*@l9UeCi
z8EweKvh9)!KmXjK`;DSs2G3NQ>TC5{j{#Y4pC&IeOX&4m<xbswhcPn@fAMGndcg-i
z#vd0N%_1ffbLm`hDF%K65u73?k=2`RN1O?>;xV`4=4t)v1#$}TW#CRE8E12agjciy
z6o*arZi#|&KIO29COMfh^>6W@^u<%OTNROkkSJ}<wb$ny4`Ase)X4?JitRxG(BQ(<
zUG-R%Ub`>>ho|1C1lC$>=dKaId^&qsT4%c8^x4tv1oG^(7H`w^_w$u#J#uu!nv8IJ
z>p5G86N<Jh9>6f!4IH7I|6zBwvrZu)x3#2~%%HQL=}!iwx2Qg1^_qTvNL;0|?J}|d
z)$910b1qC?c3O;L^J6foriyhH&B<d<OdG^rY{M<c>*_#l|5K+5&2~uhp5Goz%n|$d
z-vWn55IhxXh9;{SSug03@pHE(;c#WO;ljy>>l&lSY458IF=xsYl<On2QWSWOAMFm%
z)WZu)*;qdN6ZC;N{)|T}Mqe04oITCsCpmVzD=#+ByxE4G`xl+fi-!w>SE~ZsC1tD|
zku|cSKJ%MvrE2uMI$gOB*|mNL-P3K%U^*C-2;DkKlD}rxdZrw=$SzC!{N8y?+6qLw
z=<iH%0Z*`C{k{fjjQ5uliber&4q1pU0)o$ng6ze$us`+-Nk0q8%_Rl(E;kiVSPqva
ztm>xpBSy~1{o*hk?~CVkA5|1i^Ha|azu8FNw<Z(RF_;>!8tV((3LOyiMt|o*r1t|A
zZ!=@S4lL`E$nUKlv*x?I()Gk;T3ZTw2D?7SrZXM1ExzBM{@^{KY15vD?ny8D-2!6w
z)L|7+!b82~K?tv?*|pKy;5Yfrng(RJbLD}4WZUe2(0R?-Crab{JS}&?HT=M^Zs!6+
zbW<s7exJ5!#@2RxkAv2_c*znliHCKYy+;<Wlp(^-6QoM76}pU1_<F>~wuz}9z360i
zB(*Hx%+}BF)*G&GIFz^vT*#vAPoLSc`8H~oI?MfJ&$_|q(qC5GtwnMP4E-8=2BHpr
zD;9#wu*wd46u7Sq-16jUK68dN>G>Y@tv`>vJ>QOFmcZbc;*Lxu9pm?z^&Qvb>hK=e
zM8_LS|6cDthAH;UY>q0l)t*v1vEOm-!g8*fAIG#<1Q4@sb&TS%Oh-(FLx`%*9Te6t
z+MG6g3nCO|zPAr|Ii1j8{|GiaX|Im7uP>Y|(a^A*ZLC{J4jPq-Okv<kxN8eTifJC<
z*M6O~F+X%9;lw69=6cph((Znmbhz_Kyy`S^Byo{!KS0Yiz|saRBJSjB{7gpABVpGh
ziOp*^R8%r}Xk4PrF;$PZcQ)NA)Ir3|kJJG#TSd)kOB0*`firq|m_>=qeuR;3T?gN1
z8L||<fKdGJkrW_@LNZ*}h6&Fqs5d5F9OIB%INGikFi$IKKTC`xQexP%b544YW}_72
zP=+ycJDDa_Dwx$#i!<uADIaiI5$^=`H11FKlT4L_^~zQYZ+)|duQ%OC<#s)2ydpZ=
z>`O?bRgv7Eq@uD-pSC;HZ*!5-XJuJvbA9_WlYEy}^WNqrWwyJm(Q@iTj{9b>+ydA;
zhLGE9IbFJVib{o&&2enS?HwSWO2e^TB%u-gCr}5=--#^F0u5str%;L$m~VDKkK>vT
z&A03tGOc=3r>`z=p&8@bxoP!9*oMMv_)JOiO%WhM%`5?5ap@Fa_50BrE(+8@F52?I
zo>RXYsr1gt{&e)xvzg~lk?}m=U`_J(Cla1ztC6!V!YiQ-=B$PCOj8~ct0j@InWcr<
zswT3vcW5<zN*<6WYfdG0E>yTr(OAjWu|Z$=8wXr0Rfbe{+Fsz#G8oh?rk}fBXUZ3%
zH`SBuJL2=22dS2;j@q8<3kiJ&R(o0bbWK?j8uq1(IbDe!5!t<|Q@=Vl6MDCH+iEq1
z$P&Y|p^43}GPc&nMc@$v+S7%GwZ)PP^MDL_u7=|D75-~LzztIOztp6g<UwC}Pvk0#
zbc=+>XsSqZ#7<l5ol>1`($p54m=Bdh<5la;M|do)$OW_T@MmP4*%q9}Kd;6!h}L>Q
zmh$ElzkD>?ny&-p3FKR+M4#KixK=u4=APU(Oz~MS(V7Q}ymVbY<{(8@V{be@3oTUH
zwaf2n5#PR^tXvpk9Y2zY*y>7PKb||;EwR&xGsYe622(&Ut|jh>1A2Z3_RtDGP*cgg
z0!2L>q2zh-VUh^YA-^Q9582!qNzj>0hb3DdRYCg}T{FVuOJ=V0QtW&E$QGPaZ`K|I
zJ)u2(JI*d`CBA~bzfdA~{HAJ!iS}(rVU-H4ed}B!YYtiHUK`!C++Ig5-=6bub0*!M
zB0q$p=oYvHh|LxBnf#UN{Wb6hY9Z`f7KIPRv~fhUU{}oieN1^f(fzXB?U>_Bl6P$^
zsSyILZE@GWC~p>P$y6_3y9DBLcr6Aq>G4R#*k!E*hB^D4!%qGCxj=rgU~kM1YjI3^
z+MZW4A?H>J;_);JOf-JuV-MaZkaMq!Yp3Hy4h4fv#~=B<vDJ0?Ap}p1+H`<nnmm%x
zJQ$u(VtSIfR^*U}FzOzRj;GV?Cl~Vak#ZI(l7P6_5k++DHY+9AoZ#1wr{uv!*SD1q
zvt|CLol~=@#Yd!Km_Hgg4hGsVGM1?g#9eDkcdb7<%Ugx<xGu^%3mm`ZH^*lybdN3z
zVceJfP;oZL$@ctWOz?>&jm;vSI_i*DrO)Ng;DnE=GE5CRqEcImEx#j+pGB$^xcVF|
zC3V~m{7ER8Uc=3^>?Be-?<0Qmg;+t(A3Gy$$6G|c@T*Djk?TWkLdRTd)<Vp$eNQjl
z$9w1KueV+SgnS<Jt)1*v(~2?_Dp8L|+YQ(SV$bxl!gejsUNIcFfAX>Hi;$4(ZudBI
zN`pAW*(^4yMH2~<O_j(c18x*A2=o&jZv<?*+18`}`BM%B0hPkz+3O3)+E-Y#qLQ-@
zh%=c%X?j^EB0@ZpV89Rh@QU8>x)C$xyme=UU?}&C@A647=DDxe@K02{s}KI1l@OHr
z1MS`F2Y#;M>E0MYd<M|W_n_=H)iPyaaewY%o>QB-p%iABC-|HJN)ziE3xDycVrHH7
zA|zc*lZgjFVBSk%$a@2Jh}haSP0~BHo;HmINa&Ty&x4-G9Z4n-(c;j!5rx^X1}L*d
zI|s^cr1VoHO7~dv3_v>f1mEXQ@m*yX^))$dqfVYwsmHUJAngj|=FBx}y}h+~^mpR_
z-S&9EAQtiJm4Si5?y41J9GY-4yQTzdCuY}V&~A+V%I3H=Wlq=N>pywg=CGbWoCA^M
zv{@zxe7N{39rskE`zBXG|H0)c@2fk-dW)fhj!?r1fsgm1e}xTZ%L1XGK8IzFouxY4
zBoO-^wasdWT)Aou5gk)o&d5~RAG6aHjRWD?Gqam87S@dm7Q2KlT|vm%(A72wB-A2q
z!E;;Hb9ihDczWR_v`*R73~hcp@*s6T*s<xY(d1bEk|FcO)5A~MN_s1VP~NF$B1n-*
z^eN58{Jh<@YZ~>YO7zRM{&UAu;c?Bw0LKt7E96>xsClJ{tmBGg$NHc0I^|dHuA1>#
z-Ihh!wnt@8S%o9P=ubAejW%ZyI$?7K7J~Tp`6_cSn9BpjykU>&{2DxN2TXtmxwUj=
zAPsI~PPM(NGidTV*y?1`gY^#!n#&BT(wbgH+>TE3M7h^*Gmt;Jm%xBYxgyYiUvIQ&
zemkPMA0#m+S(}>XSDGhxqRXB6Nqnu{=9bR#{NSzA{svWZ44vjX$nblmTx<4nmA4W;
z0@?yk8}y((q?W20$lj|uOBEWamlspfo-TvNBfA8t1D41mSJ*zwM_k^hc*k>>yC?jx
zE#wB~wWr?=X|-Mpo|dyDf-<d6MOogWngGlZL!a_wavb`wb4>lxx9)^~!vbM@uX9hJ
z$@>sPDxR`#so3g6(OC`=+JS4Q@pif*S;|tzFtadMK;a56Nq_76Ykr-k64R|+kwTx_
zNxQkk9PTF<r;Rn|T^V(dV>B_xa0JgWEJnU``i1IGaep>=wk_qRBewIV1xy3B<5Aa%
z@jp^J>MIX5*)IQv^9IX@*+p;7uM#%VDe{`z`L6OowefZ!sOQ(_DXpdpzoJAmVFEte
zQ@rCQq`BCy?GfX6s=WeNxLy7=(cS**^O?CdFTOrq!8yPCrJ6MvHPBpd<m)l71K|L%
ztm#sJ`-5peeH<#(=oV;NuIFf`C#%=6$3+ZArW*`qYTvgEDarWWmU@9niN&zU`q#4l
zMH8PPdfq|bZ=vAApO4uOUVkHx@x0@l!lNlRya<mm^Z4HXWUfZD-7Rq1eqNU;<VD5F
z?x92!0bLD;^@gb09X`)W*~Adzh-k;#bwAS>;!~LvOr93oB|J8{vhr|Ry=UAoksoMy
z&|_Xw5!ufyBeJgO_^-rYF<8Az9O|}kt2OmsYpD@T`Do5sK*VFUrMA?q1&@s=L?C1J
zW{;MxK@g_&fX=Kry`Nz4^-h~w?yko~GM(00oc^~nMq95!DkZ-+)IBnrSfbYBZdl8+
z%#UrM&Lo8+yjBKS?$=>NlwZ<*?Y8-t7-tEPV7e8%oGdkTrN94FlfWUdF8Mr?pbMRV
z@8jdGd*1SUN2C5CmA>X82`F@#nmU_(iccn`V%?|nA$v>$J=xrxPXGSK{UeF*V~+n*
z!mKTCi=1M^T(iHG>E$S|Eu~Qa;<d_Tn;i13^DN<nWgJ<`?|`0X<~&;tAS~<8`veyU
z7NVS*!zs)$_op>$lmOT{s$tKrGM)~ey_P54#)0tAixwbzWm$}6kEBsr+AoHUA@#GF
z=T{P;>$f_I>02&}kES{^b%@1ub%{vG-Voj01G)n2WrlBD+<b7!$ICY}$C<WYLjolt
z$2gpe6UT5xHF0SC_Gy9@h)lkofRm$GiXF;&=s&QjdAPI4xlRC3a306P6N!eo)x-n>
zzu<;FKSCa#?oChP(WU$?s(_yU=aGHUS+yU<vh=+sWZ$8;7AoY7-i1DQ+UnowxV&JV
zs`M_BH;NiQe;?T6b){chjrM?yb|m)H`I3-bms;VLQT5Wcra%w{Pmjan>)%DV{-B-V
zGn<1eT|Rlyh8r#V8$>kGm3;VKAJf6-TYAk~-MGxKxpz-xjuY8>hszsy7^-)egw*sJ
z)k&_0T)}UbMH{=2uWg;sQeB*uhvc*e{Uejb-yH3Cw-!Y{C137OMl9p|eR|I0d7cul
zQsUAU4{Hv^Wzc8M6B)~Xs2X2SPNTzf3V)}G-rD&9%P~LK?Ljrm8ka1AZZrP=is+FV
zW&zoCd_t$!oc^F@5^GN*fBlAjamjb@JDvr3o&c9`FM}swPTQ%#kx0~*=4~5-uomk+
z9nRJae18PX?cow$WU;P~IFE6~1|nnf=A~rAc+95t$w3Un{9elu?0_u1E>;5&u93zr
z{}GFlCc#A;ozGkJirV-0qr7AL*Ni%>8tkv?12waJ0I-O<-s_5IqR)tt+sQoP`P03n
z+*89GKL5^J{7;0{`mI)i+xI|AJA7^<E)NB#Wr-hp7R7fl+(`hrl(j3ys@D1@G?{)l
zt6yz^$vUMfF|<K71ehTOIsiQtwBj#+>)0_}sWg*DSfYX<lj1uY<X1vGSlsO0{>|sc
z2wBSPr01GDm!xt^TPFG4j@wIXkCh2o1Kn1uER+|4C;KoO1p=C}nM(5?^SszKClaj@
zV*`M%(>EP#$g*LmBm#*m=+)}lc#a9;J~pYDQo7jjUF1gIy??0bfIdn%ZFEa{Cpq{F
z3>%)!<<Llfvr5XemWOCQ&0gM=8U)P|bs4vWhQG%C569tu5m);{BmXD*q?NGxD(Ah|
z&tWOMA?O%VA8&T_r>Ry8vmPlD1!l1Y=L}A!Bpa<9Cs?OWv)w?w8NJ!!r4~R^U|Hz!
z%*Yflp=JyYLtI&XwUH7Ojx(6|ptDTfxBm)aOhqrj({#HIt5a?sy^w!ZYA|t=q|SPp
z6HM*Vv3(tt4QP8I&I#G1gT-$OsURXj5|;k-+#RzGWj*yuT?)N+f1GvB-ekiG);qg;
z7cQ3mtMB6px4LoA6Mbfa_{E`R&kG>x@4mG-V|}fHGXt!W`MC6Rth@V;G@?FNN#d-=
zH$qaTqr%=O+<HnmYqkMBE>J86q%=uclhwM-&dB$jI_*1x14$I^-K{$870v>n#_aL&
z;}ciad{d>gTUgA-;i0vCaV8X+vTMzOgE9C+2jF(djq~;~zIe30*7byCLHXrLF96Gy
z^WkR7eiAHU(CV{a-&gaNZ_k9*ptG@?1N6dG3v3R)Jm42%^3*ga`F1d^WPkcABY#y!
zJ?*<)?=YltAYZ4+ra8dGSAd!!hDY;~vpNvzx`}#%T0ZlgEKXDe?CMFi_?}&@S|5X`
zFyywkof(Tkobqx{-+rb%?eb(njNP;;1*fRIe-#WnHu!m8w%ZM0WR<j;*U}=PQHd-D
zat;~a)2Zd?(zx71w)(S2^herA9`6oa_OH%_xSe_K!*gYZ!G(%l_wuzZpUzk<El#L-
zvRGJ$03+HpzGfBVygRyYGt}zrH@R`;Mm?<uS}#-pR3ste?B9i;vkAYv!Dk3@_h6;&
zq?LJFR3G}xOP7NOF_MV4gNo$JV@>uPHM;#MY9`lmY}NOC&cNBMZ*;}!<~R02i(^Hf
zl+CsGQBH8=tM{N^=2FWoUBWxd{&@Wra!aCKR+~%q5F@$4i?g#PL3IHlPU#Tz2fpb`
zZiTLmCR^S@;Q~CT$@Koc)~4Yc!J2Rirw@+ZCoA4nzF^;>i@WQP?qowp04-967&&vh
zEz3@__VIR@%|(BUXVN3+v+DZMGg;}W15)JgG(0QGDH(*3TsuWl8+aDw`3U&Lf*1~_
z$1SWoDG7#JL!6)l45L}iLW_;Z?_M+OqsI(*$<esu(QD6ldw1>HEu3?lX6v{c^DE3{
z%Nu6$9Al!OqksL)>+&PhI<eJp6R%7IQr0&=0eEL~E>k<UTi@Z?Tv@+<es90Jtj=e8
z8Y-?1_yA`f7|pg*%3d!1V-fH4N}eA??}1I9z67#bj6&*XbW=iK5+%z~2X*F8ky3m(
zB@gllqUSp>RN~^VYAqJ`6VS}A((kb?&jjo6SYE(L{Ng(wLV$1}c8>QoOxGWWq0LJ4
zc(V_e;bh5QQJ+h=Ro_0l7_FV|lZ|eR1N<%tvSz1GQloE00&YNi_3PP9VEH)UuWD}%
zEtJX{ye&`jA5OO87l=!sA<wpwuHCCW`zxmeOX&LxECzw%Dbl#KUzd)jcFHxYXz^se
zZSR{m4!&7at1mP7-*Zb`pYpx~P-?8GiXYnS`UE^%pk~9v!#YrrMa^TL@y}X;0_7qn
zR^LTa5Pz?$`t4e#|JJu;`{4A(En3Z^8Sh-5tE(VM|C|e|I1enHfF7ft5O(an{ud?m
zbOWQu6;xnuiK91iB@W<oE9>TPdnJCOv*5)jv!b+!GNlx75D?)ToHkS{nQmnQ#{Iye
zQU^l&<3<9qdCEPtm8ML!Jo?1CZPhQ|!01N!;fH9_NCt;n#>ay;U+CS<{253&Z{vcv
zMg|bl&tGx|_E<Kz(_5QJdh^drQ!sg@e}=eH$?V9=-@iI<sCkaqj|ZY3Wd)IOVCmb-
zj%D)iwgl-uIX)8OcIBU}v5h6hP8hsQ0C*}vPE)@tzl2BpiHHT~KsSYJJp`>Vcll%J
zH3^|3?yOr=aT^xYuf!V}bbqJ3VpJaIh5~UE`l=<j*aC@Yu}k&CD_}&UpUexV%N{zG
z1arst!6&S)2PD*XojB`FfD)4IM*SO}*XQpbfH!yZ2D2I1IML`|5|v1=qb;4pz+^dz
zsKABVsx@244jPxu;#5&jRkWGd*d`V!F#35Xlfk9$jPT+ilbGZxsg63o#r0w|s5Lf+
z=p6bLe`=^0V`zA~?iVl!VrpgDIspLz%j!@-HD3y15bBj2w1W5H{lXc$jCY~l{aYk}
zi&NTOLX#fbwE?X4MFaHqe6xmiigD+Fg{RaUOK)0xvs=l1?$!=Hk-czUsPjg_yXqMG
zLqfx(nRLDVq*ZrMGLS*j?EH8LbKa#Tvlz{ERiAou(waWAQXI>}yxR8+gEbPb=G`tI
zqBH<z{sW)*-z&HvZ2#2m=;$c?)_Ov(#z0>rTU!R=zT#GhOb5UdP4iR~tD)qoSNu8E
z$O0X<XO~&fJ6+Z1k*nqrM<i^1@%3iX;V}xoRkc@EqcWN_6Ziq=!eI@{8qnj-e~xMY
z08G~FV=hr@A6{<N(qqf9k4TXf>NN>miyd#byEeYA(a7{fY%f2?1!yyOG5}9FRP+K1
zTohorW7rHKR6j5NZa5QY0U9Jmw0AN?T9M;s%Ach~xn5LhAd%K2wJy%?WQTESYlyjT
z;1b{e4<lsx+Au7w`bK?eZe_J*3Kv2Evn>ql8BSvx3~`lN4(J&%XVv*;aR}%iONo;d
zm;I^1kZ+Mxb!p|6%nBcCKLD1c<yu~(F4$>i)%I|=03FZWMu!of6;YvJ`up{M2h~b3
zi5Ds!7XXt0oA9U+I**&G;%>Kp^h8ePsc^NvGLA3o<SGvk^X6qU8zjXzn2XC7Lz4>M
z5TlYwmd*Rf=dJh9>f6UOfl@i;_e3%6=%mM7P9mXJtJz@Afq&bBWj$EM-!;9efx#;Q
z1nzSD&ysEoT1cHvOF{s5G+pT_!I0&A=V>&9mTK7Fdp_<014Nr#bCY?r+{&v=!U}|`
zF4mZOhE11v;~F2i2CW%a>woM?`ohtZ{T0stqMHr?Z9chtP$`xr!+1OU?MIK#?YZQm
zkAh4*r4*lCp1iB|N>kwd#n{JYT6aM2Br8#braOFJ@?2{M(a5A!`)=)wgwas#XIRaa
z(h17l&e|em$(vYD6^oP##iK;NbWX+0C)f1plRda^QQ(ro66|as(yGTzjC{?+13+Q9
zU(=Yld>1J}s?=`k{}n4`d+xB5oJ3tXLh3e+n}!mpM8rUSB}bRR#efTrKH5H7a8^D~
zD|dSAfIKAnm>0)3c^u=0pBm4s$dc)`xtNt+EP1MYz+}>Iqoj$>x%?3P50t}}P$J26
zbub&BFNT`-i8TgSp8Dd-H97~J{n+8MU+;3XEC+x+T#K^WUn2~aVn#Gf#3k21K9`-w
z_kp;4Ljedu)hn=md&o$l^;~sp=c}?l#K<^fFG_mwqnFD5N<~GXeA48t5BN1efEv5y
zuS6y|mAmt+{M2F3{BJud7VVK*AKbpDY8rLrWIARpNX6p#V<TSdDdFP|PwnX`K%!DE
z8;q>Co+Gw^{P4;JrIkEh2Li;RIZweZV@++on7?ub`SAY`-i9-`l0Ev)_)h3l;+M`%
zMy7FSGB@X3PPnxkC!KR~0LS&D=!0XSa!<W7;2IAkv4!%fl(!VhWl&E;52t?~a2#+e
zrB%n$DA;K=nO5uAwETupP3~<c$3@rixLeWqdbzts62q?FTFJdd!{-N3<qyuiugY}G
zI@nMS0#MGgM>UiIl4{U-IFo{?SnZAZQt~9kfLSV*^n>PbT6=0HzdO_NfCIs;@5R+_
ze!`BAj}Kve>Kg`5J6!_-5*Eq$mY|fU`*uZb@Wg7w`B9cN5CPx0KcNoCp=!*D?-CJA
ziKBpUDlPuxk0I8m-8)KcO-W=_Q7+f0U{Dauk^z<n>iww_=V}sf@bQwn^h!$lAOL3{
zmk=M0k<i5a;cjxN=x=H*<$ZB0W1ZRB3Rl52YgaCoCVO^worr{SApIi<C3EbOizU6L
zmHJ4^`R+#?MPFsE^S~r7jthUk78fg~-_4_S+0}i6JYfY)smTX}+w0Q9bd{KK&T^_P
z`10U3ukgK6B@?|yRZ?=*B7dXFMXg(#=SA-%bdxxq$CYlEVko(WmUmcHDJvU)HlETF
z=k{pok^08B>zEijBd|y8X(X9E7>%bZPrkTHu}nP(ga<gnF#QtuLNLmXo`_>WPwgmE
zw!~jqN!jRsZ0c)fki>?kr#y}d<?mz$DW9$HJ+(jM*WXqTb)xCBY`m}-P8HU-oD>>N
z<eX5tqRXTHg3F{X{1Pw_@*8>KL&PomqHVa=wH<<-0q4%M_^82Y`#eeV_<~tbfxS+V
zqxsWr509Mb!g-PtEZKVx8*sVobVdkfWMw^fZ!8Uy`7PE%iPObU>Eh|d#A@g3w=2%~
zV>|8oz>;SXPJ6%BYc~l&4d99LR&;{#AyJ*Kv+NUfSu{M3>~sO!`d75d<BW~I1taa}
zz{+cvr$q~bdlGPsr<B<_B<unp4XFpD5z%M!p{;z^h7)EM?5Z~NxzUOA8jGlJ^hEge
zs+?vP^YbREB;}1=Z}&nU9e&&>DL2bA(p*j*c4&r61Ag=X@*`7J<*HvplFQ-Z!ZG1I
z<SBRf?$F-zb~}aAmnVuR@Tr$Uw?(wg_cEL#>vVQRCvG*wzSq|%*#7!K6Ix)pU+y$5
z8q4AuPTQ4_G#rR@napmf%sV|c>mxOrVa;#qaaw735?<3esdxu{=s)(o^Rjt~w>z9o
zS2W^p@*yE@B<FT;Mn6$5qdDX*<5V*Z8Nj|%;&L$KY!<Sej3s=t3@6mW`~Gqf{x?7F
zRMrjk(80HDRl#q8Xtsj<aSnXc$$XTQzd*lGZ;@o+mrm+=!FP;@)Mz&)?3cqbB>KDy
zd*r%`o=T<nt8q-)w52l8z9eq{r^BY~620MUij4c_U(8Y`IL<3Ajv`KgvE%2rD*~nh
zLajBu=*<Z7yp=7Eo5frGYFl}s=6P<H@Y!JzhIM`qi|1FV*mhGJRx^HD>eaf3+(K+d
zqZeap3C!Z?P1GknERc347Di2*rQ+aAwm7AH(eTWb@r$c8))^5wjOkMMo_f!CdX1Mf
zgJ8dhwvOrC)-=3kal3Tq10%)>TFpl2epw0YQ1d1vaib@)?fH1t+98?X1FIauGlXL`
ziYvB1+b!tSr2ly2x|~Wb9#e<pS6|GFi~#%(px8Km)W#TQ*W`1#DFs<bTsM5I)+i8H
z!{=}+HGL0X;=5|Vy0lvJRC2zVXiy{)+Fa<{&S}R|a5B|$wl-92R4_cP43V_|sR+V8
z^rMvb+3lEqc&F8t{)rHO^YO(>@K@R{<0@^At;n&F2Sz>Z-B+JhH{{Z|?DG(jygu}e
z@Yh-;p|ZL-7z||b-mDrzxH*v{6KM8Dr>x{jD`EFWbF1eUV~`B%yL!1_*9{(L<m&Uc
z!)#QUQl;0Zh>=Z*f`5tjsF127MXsdeBp5(FB$g<&Tb-VB``&#$nzt+;Y)`<ZXsFBa
z<rLD+2=~y}@0udxbv<E9pnf86)(z-^fAAjQJ=R86kYOe1v|ACk{C#c>Y+(7AYEVQr
z2SnZq<qqeTSK9%S0R2uI_A4(dGgahBu(x~CDA5{cUQ$d0$<+Z@Qcq+`JN^e|@jzrH
zY=&f7l|cZI4pnMf3JmpOqUd}>G54&doz^35KarzcBPmZrAg&UCoiZpbYTl>>h~=~h
zDEH_p<Y2rd)shRdFnCLl8kO@q&<9`+wt8KqgLOs~z~YNdmX_4Yz3$mCAPhTs3y#^^
z8c>OgK5^O^WSSe^&EfN0+`NUB28v}Rm#UDtpDdbu9C|z2DSDY}zeap+zBES_H)J}J
z4Za%!%p(ae?J{kRN=<pE?O`Tv**%|~VJ&WBYGkGx`|#GW8;Qm7sU|-F0raey;svZN
z<6X0;k)2UJQi7D#(|E4asq-rhib5d7D_>a#9UTySBnJx;GXVQQB!7saY+tNDD|(dq
zwnCkZq=y-w4Mt9N_2<}~o{_ZufqV*~&*J?C0`}XC-ZARi)A(n2ESs?JR^s}SbSE0t
ziH7I1?uXXJb0>sDPnis&AH_pr-Z1Wt-0rvSwd$5BbAx_eCEnj&v^@CM%|(uMZH(vn
z7A;gT%S;wZ9jzpdn73^l+Bc^75^pRT_n^we*qv&D@Q(NMM&FJ+3lP)5ApT3vN%kMk
z$%h@Zow4|zq0#+EPa|v-8%zt|ylXz8gI43`gLpxm__P42V_o+7)D^vIITZjXx<>|1
z7Ryjv?A$Xg)SJ1^&U`*h=oB$MXiRfDx*1T+GX;q3Me<p@+bSR?O2Fdd+#XD-IJaux
ztoImTWy?Biy6AWy1(eZigG$;ph5JF<{3(FiDmkYA%ycZ<*Y4#trxk;0r6xAOiH)c<
zfDD*un%BVI`H73wrq0S@>p*q{n}3N?G?|;%?{q#OXPTsN%TUwWlQ-Mx@ycA=5YQv_
z)l|cXK><ClXyb>R$JA0V1wAyJcKT16n0e*UmkTYexn1^Z8&0cXCF_edz)IO=j@N8$
zx>sV*uOO(<@Pl{m#rzfcY@;XPWAKGc^wC0PxXn`YX*>$`C0YyKueS878ztmOwqk`i
znG~i0AS5>gAXSy#QbL~>qQ_Ip8*Iae8wIl}Z<WEXm#NEVs+UC7D>W&2lsH%;dn2C7
z-DuSs3eY%Qb9Ln)8G$;p2=`0Jrrc*LwbXijAA$>I(|&k*=An=YKAMKvtTe4`zLJfq
zig-o)>ErjqddI0`MX2gSB`~?A1Mgf{sN<|+ALL<}l_quyq0{>r6p%OMfB2@3a<8nJ
z3C!H~rqy<sH3{huo8}xJv<k#=@nJK&|JXkJPk4+R(2cx$vmwry**20t8wn1nvDO+b
ztqVK*Zhyb?z)}h50oIlwh_i*H8(Y@A{`JWUv;8-31x~x=jd{Q_(U(qPqB?~@qqoL(
zxz(qkeLIF{Nz@o4L5sxkqh<s}^3RAq?6KW;-3Pwd9lg`?*YO?M+O98>k$wyE)~HmR
zJ?5#8x}xdIuRx0VOZE5<H;?c_1i4B2e5=!`M|NMk)-VpR2vkQi`Dp+Yk9BI2NpmXa
zei-px7Wtm_1}+8@>ed(y33UGe@4)hN3J_USG>Se^=4CUg^IwaRwE@j7h+ts#`d(x)
zXts2xle_N>b6cNl++FS$#)e0?x%-d#82qMu@4H!}V$sig>hr6cXf$-i7YnegdigTA
zn4Hnl*jdxhr&QBeoRbN8-9E}^JWNUjmZ=maqT^2vO|?2p7lgQ)#e}P^`m{SIA`1a(
z^<aJen{!p6Ohzxt@5@${HTn3WA@xBjXFE$9<=$@Uk#tVC4BckW3r=7ULk%cvAC|9D
zd$Wqn-!nEghFGE@X3|l(LpXCm+K%Gn8vhB{Trn(gsJ^Df{_AkIphh-}hi%!?M^E7B
z-Kndc#c0wmT0gHSS%6)o)nt<t{&cOW^6cA#OcHC+|HIyUM@5x%?c$1{A}S)%pu`ac
zlq4WIDoG>>2sDx#$;l>X>@g6UBsrr*$vI~w=bVF*Gm<mh>Ur<XeDA#9Z>>+x+;#8z
zt@*FlQqDP5wQJYj&-3hE@vO577CN72pGWcJd+Fj5F5L-qJyxMJ&$I6@aalIaaurz6
zLVn%9t7PZUTH}9<h`Go3pvSP-?z{i4W*Ob=QJd-x;T45mDOw{~LyU5X?V`!bqsFDy
zyooQdwe*emHpUv5*z~170I_)qj`O~TH_&q1gHTrB)_pIZCH=*hwRh1c1>1~mqi<6C
z_j(Ln8#Zs|w&+uSU`uL$Q5{GTv3avgrGHOyOCvB&+*h)Gr$qI@%r&Oaw=fS->hwL<
zQ8sozzG>47^*m#vtHB<ejd4{vkH0`Yn07C|T6=Y&cX8?sQ@IpXiNdB6u6gItuK9OO
zy-T`RXG?mHcAfWQSe^G7xD9?C>ZbX%=bm-4)U)JSB{M?FJ~ozlBw=tRhS=#lG<BE3
zlx_5yBy+o6y3sJpA-YYwQHc2DA+|O2B=U|&;KKkCP3MG9*3QGTL)+w~X;g#OSjJKp
zVeMhgw^(1kwZ?zNufIu23eU3(t9J~{2<bZ<4dpXT%ch&*P?ujVj;nW~=CxfRC~wqb
zL)ij2D%7w*B~s|{ZP=5DmczI+4$OH+7h&pK_NU`0`RqZhm+$w`;p*6<-dkCbY>)bq
z74)ZSJOcXSGpWUWC7jqArG>Gg)`K|B&1kQ6?94mT$Q~>5l#dIW*}Lma(7KyT`=zQS
zJAK|+9<>#+37dC3*rCj$xo`M<+At?jCa!DVv$S>U@y5IDnUW(ffLvEPjTA9YO~2n7
z!Qyq+NK!N#uNV%e`@AO0!S?8ZYekvAfb$Fb_<=0#T)vaX)btMBTX9AnDOyNOE^v}C
zWLE95G6{%`nL{4t`PNMa@4ltaBAUFfe)w%J?j(EN<d?dB_i4PWilh}T%vvWyvyv%<
zSu=b4(O1cGny%1!L!f*t&CO;y*(t+ycHOs6*`(YJQ!907oet{2C%pTV4it(oF_%5-
zX2kAexAu>IAAQi0AB#TEqtdzuu(0!%0tsxh8n3Eg<iCm@gf2Kgx*`*0QyH>rcR-T+
zTt4R|(oz}(=B$g3E^NqIH<~Zq20S^<zeVPWUKGl%pKNqgijC64-jWm>dPfVqtoecJ
z+UyMxmPQVj>t`+vWUFo-PZ=jx8;Jz9OVxD`$oisXn9|07urHDf#i#=GYR_Wo*`kZS
zsyavYP8I6w^nrw6qavZ6{R<2LuwOaV7+{<^%@EMiQ+!r$f5gzTU8(X%Fa~+uNMtTm
z*DR@!dE5IyX0`s7=VG30IllgbwS>aLLU!)L@6C+qMSNxLz6<>b`K;Z+tg|y@Msu*c
zsUaHF`<$HCDbJPiR(TA!8$QIX&u7VXeZ@Y!*}7%M%<>Do$Fg($Fz&)H!b7T@<`U)S
zTVJ|`ohR+vOQ}~B)+;Y8Vd~Qlzc^SgbxYdhSgh#9{1E~aTj;%5MEkSp+svA?0)J11
z@%JJDA98;01@QC5n5cj0vdK2eOF7|d9dDerx)SK)t%tAL(%gI3*&KLZQO#j{SLnXt
z{n@wJACB6VX-r6tdhPc1LJVo#%ZO%%feIrO1bnRf&D!#@b_9iXw_Ci+4j!A}!_Y9s
zJA|}e!DQSy#iAbC#U?{#iY~j~Y1zUo3QUHwdM?>6S;r}48JH`G2>Md+GF2XN2n!sU
zJb#-Vd!%x!#QBGdqy5^uS*d5i9WFdwg684IlOdW(68&bBs&cvwoB|8DXk#TtKeb|u
z@WrZxM7&}Gg2N1L?E_oEJggbj!Y>tl!Y(ZZjP!Rc_1dcu7~CXhntocW<LCmqxb@}p
zD{W07j&+P#my5}NamByMu)wmrpGqKK^z7`cz~_U#?)L6@z@YSrH2B46pHK+8INb!)
zieXm~YIyI{Blx(Ba4U9qqu%-~k)yS*pyhPiFJIqp=O)SlJrCbn-((Y$tl4OZI`A<<
zE0dpOe2y%79^8{J68h{n++A-vUZLRfkdP!P0yosPb-z`ru4N?+M)<3!z79X%=WP@9
z&PtTF`lLte!w!%!`VTQLlt19o*!dyXr{LC#-8*PG)96kR*J@Q~9{;=%(Y7U;MG}0g
z{gk2Wd!e+;uu=wI+U{)!kQ#Bl5;DIBr;5S#wg~mmG`vkdITueIRaT_edfqstGn{?#
zYh>`tRVPrrH63M>E=tR|@RG~1B=pFkA%=&=aBy8wX_tM&cTl_T%J#u}IEg`{>xpH=
zv;L`G&X;3lI0O~_$6g0}$%Ne+=7T++ECDnU*H^?rq3W<yCg0uM<9$^DR+N0l*2h=<
zt^>@85)m&r(lw0|op8jd$a!pnVx%tL3j1h$(5I-^rR*>}z<6k${Lr-TMTSEt)$R-^
zrD=v`J{2IeUI^rnMN>?&8~3Yb2T>&1>B)c3ST+U-J77@qHTvh@mzWHespY(En=%ou
z{xY3r*=fD57bmvWa-&o>D$95wPcU9**6dSa|MFOIU$~XNxoRKTyV`LnzV7Ka_+vpC
zls19bxYq}m-3}BcBLZk;8;9~qb!(e?*OzStpK1wd6|Lg#A<pX@d_PzXw@fa3$*FK-
zvhIrD{qDtQw0X-z`TgNDdjRVJbpZ(9+1_s1S$}(1*$@zB^J)&KSUc`5W)}BNJ(+Dh
zaQg89*IzP_?tZcKjSvBK9$y7oe&@WEuRsj_a&%vsRr|{wl?p^YHqPj<HOq1#Wjv^O
z`BY}bquaY+-Li+|YiUf2E@<qwR7`yy2xHVBI11ylXPrIV$ji`}O=^$)P&s=@?JRJU
zftX1xua8ofhMvP^?{1-`(YwL%!f|^|5LMhRY(4m*${MlZ($nyZeD-5*%NRTX&coK8
zVpwKj!1RpE%@69JfN3hfU*m(3BK?cm$96l~qrPk<l&<X|z6Vze+VX!CFsEpuB?w`?
ziS`>bT}_ASbSAO2c6vtHNz+{k%^0B}{kLO4OimZ<xk?hZW*>_UFXG=~eO%`gWe}yj
zZJ8{e5a>GFns*y{Pz)qp{vPA91X1TnJ9D&-W8~8ev}wyUD-hm!&be>MdW~tXHv`lz
z(5UymN_Qyr3-!##E2M>?8~jUjDselUFW5td@?$~*XQHR)`N}P}Qo@dlh4tDFn>}5&
zctVX=kf64n{H(?)vB=-}eHW!M`Vs1fy0(5MT$9{=mv+46c4K8+y3WwZMyu%!A&ex9
zk3#@_CJ}k(1N$glv`6AYSgFNyidu=2%0pIAWBE2sqr6SZ>OlQrmiv-_!&{4V>9^0S
zMEtp1H~Fs+6VgagA<N1{W^-^ttD092?FV!9W5{@{L};WUooGWJ$SH_Oz93ZFUKy-4
zb?E&J*r&FrQfjYz)cZ^B8tv=P^$dqg-o0!M7maR<YQ7YncH~JYj^#b7sFU=)9uzj|
z*88ZhyWuwbgeE_`Wh^@F&xJ(X<oX!m(Kx}Yc~Bl^Qlz(ho~?X6aYGG`e?GK|UGeFa
zu@$M#;Sy6fFUk|)&}vnXP{oURr^tWSa*>GQ2_m|7{`~oH2@B$BP$8W2m5elsDXCud
zjo_6{D^ImAZ>tH<Z;`2%m?VHE8u|zOJBx+_^a;6F0BT}O8*lN60aQp6eHfDKXbLiJ
zdD}KFY&z>#9rGmTWreNnPJvTLLLnjhf=xe5wio%8g{dk`k@a=L1fw6x?Tc2t-Y-G7
zlji)_#<AT(t}FpWM{RqfJK4R?naZo8_Y_Lr&SAGdtZVJ(OeQKe^s?DoCn|om7K=;I
z9GaY%)bj9)Fso}dLZ#9r4m2LvzVWEMpwxPK36|<}FvB~DNSqxk&?et$5QqWHLh`du
zX&%olB|+s!%h4V0{AG!jnuk%hlIw+cs<$*OCUzxMa?Rd=973UOG%1226<=yjCGW{E
z^npFi3m|G_ot{l*wdjEtBU&ix{2Qf^PNO14x9k>sY6I`d!*`gOEl;`}<KLIow^+4)
z757ouiK^6VXP@2sWs$GbdUHfNjP>1cq7;k5rc%1bA`7dv>e>o324Mwtm#<32HWP|B
zW|}dQ*Q)$8vgVeKOgf2|m82qvm)yoO<-?6%w3qT85WL);Od(?<m?y}k#E7g1b7vb}
zEXxJbHfl_DD87XRGinCO?pxVPZ3%Ric!zBpfB8OF(vzYn9POG>5|#&l))j6nvU<0_
zl^xkBl70c7qF}|N8}!d;m4f#e*V1PAZrMur=M!JqC1%u^u}QPOuDxRxm0tOM+d(0z
z^&!Ec(S|Mige9ohknv|!g%O?~+cOUzE#2`vHtnF|VQp45&(AqtJ4Z<wb5WVn<X6dZ
zF*RySS@W*So2J8gfdI>CR8V2%JxDy8b<8-LZ|r-xH%q2syy9#_CX+QM;XnHm+OR)^
zC={(SMkSWL{3?N+aMxm{jLnn<gmijX%B=JcODv|tBR4kKx(nJ=e(A6wR8T{UkPrs@
z7JA%j3chEEqXO!C37O5Wz$P1NB}1mNaQ7b86*=Mm@)ABy*xOFa8Sv5SR}~sU?7JIV
z`P-5@_q+wHVtbUlzuqP|FScbP*tCj{p{n3hEziLym)=G;0z#r$FLq3V?cFPHB9V8T
zx{GpV{pBtNb!raI2D>4wx=-n!cYk~`sm`yTsZk2ker?G-o=jK^umwYDDajb7^gHaG
zv2_MOUl>G4)6jLsCd9*Y>DjD?0Pp?2-T^xOwxvF7$tzOUIXVbJMRhhA7n&b@aR<nW
zK%yTS9FNRJ*5pNo)kY(A*o~j(Vm-KmV&4rvoXo^$RI)lceyR5bQM;}yBCK2PYJXs-
z`YBaoHlolZfKj!;%~MBxoKl^FR&s@&s43_}QgjnSw6D!&_aH(daaebw&lD5`w7u+}
z%W2I3#XI70@3*8xA_p8^==@lvJ$gA&=}vp8#6{-0V4p-z(EVUbgj_kz<_owf4Uusk
ziH03n@9_RWWqaP*eqo%u#|O*lCNonXu{NF$)~gjqpB`%hS-(ro!0Fm4QN6$gT94GP
z)pdV#pJ5Syt;I4!MqhB_Pb>L}U+$LxW&Qct4Daveh=S7r1pyxZ{nEFmV@O{E;PKqI
zHKpH6gT6_C<|9u2z5)k6r+VO9@aLCJzp(vD#eBF1x|v{KPyJ&K{`{x^!7o`q@PUL@
zS%Zpye4+LwplXtm7Qp+7iThLI>AnY2Z<Z61oD09dy-J4w44Glc>E5XtEL<}M&6nbq
zKWTscV^QW9A1t<OCYXfDPfSjln$CgpzG-ic)uvCv;;}pLbFF`W^H0vOuLvlC{gAc(
z>G!`ES|T<WuSlP24H(8o3-q<E4CRZ{NFR#=rEmRlls^8c(7dzQkAc~~zx^He_ZdGG
zulldaC{hLn>qw;I{5L%7BBp1U=Udv}r}<RN|1U%MrUBM$Rncqflr!{SKY=RnOf`b;
zdi0+rcIsa!M<ObCnKDb?>B7hV`c-F8&w!nOdSZtKVVZtl_!UK9cp9~E%D>@R{}|WL
zOyb{bT<+}Eh*%NayUFJA7&(%iy?tX)YX8*wbhE`)Q?Dbt_TRBhi^NeRqzwBs8$o6E
z7Lu4IOcfqCFdD0yT}gzRgp3XmT5FLpm66<*Vlpw@^vB1<FS`@dXLfRT8on<4?%96Q
zGyc~<yLJ;rLd0McA1bIxK`-AD&W`5O+)%mqoG#{$Oe7poVv|T$^O2%oFqKw@-6w%W
z&C1QczC%xgmV6Zb(-MD!qbd@_d;w?<C8A-zmU4s6PZ@xtR_%^uwyS67k2`7C+bi)z
z4PdK-zMQ8!6#s3w!9re_V6$yuOu9{hm-Cq)J>r}i$~W#i0o~3FX_#oP11c2scOx<y
zbw0p<@>Prx^jQ-Aq%rxocy};RQU*+^(e^Sg9VlbIj%ob_#Az5^A7G?0<$-rC6TL9N
z9w6-X>B2fSy+bt0&o?X&d#PN0_m%L!j^uPIz7aRf_+9srWq}MTQkW9YgVy*OQFKT%
zP|-|v)k=P{86B<{zr~qCyF6}4{q7RcE61ajuv~v$bBSW-#o*zM)Alv|x9{Ddy%zUt
ztr(3^i~rr+!}aD>jB4h|G7@MRUasR$-Z4|7)OU_b3*`_tGrkqKaR>k3ob}JRgx{U=
zHKA`6IEd$<X5G<VYn(;`lfw<O2?l90sh2EmlT|`Dt=CmYxO@cF6Jw)`ccsI7d^*xq
z3-355@_{PGIllUHf5%R7MZqZ<65IV`3d~jRjg5`@_*b6bGzRCok8pgyeaePc|K>aR
ziiFbeVS)>56&U4`v=OMUeVRLC-n2YiI2t`m{CA8&5Ctb^2xd~3Pdwf)$B3@x)bKC)
zhb(Xg=r${RcF^-M@try%_`@*1J;FwqX6<fvb5A#ah<O^unlR#|cVZqLmN5`K?`d}b
zZ!qGjH@G!TS}e}{R$ZCq_!y)*q79UIB+MI|>b9>qo3(HJEejGVl!gaWh=0Nq#Z$ou
zv>E|i$O$eUpo~g55O<#LAJ=ognK{ST{&$#{-76HFhyj!XJsC4ODA`=;6$NET<WZn?
zMdJXHQ1{z6f*MbsOMk;ww6nv?rh!ZOQK23JumAq?0yT27&iXBAL3^LD@<7gEi^AYM
zJ*!G5>igMK<rx3wYVhT#l(5lj6ZHYg;SU3~g%3R6qqnbLyG9j|ba;QX#Q8R-`B+}e
z3@!9GUF3U-BB5jel!WXp_7qyspvw<5x#QvM&%kNOtdtJHRDo|T_D9Xy|Jw(i(y8NX
zQi)waYiMY!=Xel_g9c|3*J&-R9x5FIqexKomA&(Ts>43|kF@RIw)y|q+5K?cUg2#?
zSy&?d!A5lcSre7%d2Eriiz0;Va&g&OX}H-nmy9|@ygO^6%Q_7Z>$fCLK6e^CyoF~Y
z>QPQl_bbs^QfY$tkWZH_D=cYNP5575y!@k;dn5vF+~=@8w5%~ZKE8F0O6Yaf5JAIy
z)r5fH2wMiZol2fTCtqinpsNc{nw_R89NGCeiinWp92WLP%zr*}_UC_O!Eh`%vWhm^
zc<aV94^*w@It0Eqz9lk0+4;ydJA#J*su_vVQ$6|j?}3+Mao>c4&Xo~GGYgW4R7Or&
zs}y48`t-uloBEMk2Mu22r~iB~LnVX_#Z`#m0#hSi`jwJJ84vmUL7r}uH?P;99QJ$;
z*9_{pa_ZRuV?bF``>CR8fBkiLxwz7UO;+%(<ZO_#CVJAv#zHE5Q$=a??P=!ykJ;hG
z;wFNRI4m+wB-2uO)_IfO<pIdLr;e+Q{AJQ@F?qIAF6_Tv(3dVGg99@^JP1Pms1|Ix
zzCU_$$dXYqvr3ShmV<i=d-?slsj{x(SlrLzTA3`26GhM9wu4XzkxIc^Gg7?aAAT0n
zlUHyoXtD;<0Byo`Tuw(v_asomZY^kF^>s{QDZNo<=tq*%T03SvPw=t02|>kKsyN?H
z%QuEtVoe8jvy#06D=n7PGI`K@F-eT(M-fkdM$b8h+kXuA=YK4I5NgAQ?Tk6@6fOEh
z^bhpC{Ni&!{>mWUNQrv6sBY|wHw3d3a=DmRh^qZ0tO*ddLlG?&L6`c9Ur%p{$AWlM
zQd-D%ej9Jc^P?qoMH();@TJ`GYAm#|R1btN)pCY4gjG$<MA-VWwR7ouFZX_y)0xN&
z(IEQpG(Fp~gaCr2z%?<3QdD8)w@UN#>+^@xDW;;z3dJj(BF8<wSqYsZz6Lk>Mmn_x
zWl@<fUSyd0!elT0^M3q~@pn|=V8cjv&)f4uc!(b!78bfVOLFYP=}qe5!&hffwdX4y
zY4}2T$keZ|s}M{}{<e4i7~#+VxS}Scm5nm@>!<$tzx~Hd{=ZNEf6U|$>-gixKi=d&
z?B#DV6I3KVLvUbl&3V#?Xg%o&G3on6Xc&_x5IWbT4dznIUr`%hBshJvgyJK>1d`}r
z##qT&na;#kvChwOaRVP!y62vC3Jm3&5=sU$cmT~)-I7YK&d4rqwn67aD61~$l{+@~
zIVGhjfN|sIA7=3LKR$lPoqDc?oQ<j^9X9Q!w>hcaiL38Z72B906?^ok+Coub-VD7l
z)9zb1?!dW1u_;u>vzb5iZNh?>{`%=heHLr$dP8#6gk}3x9}RxTwDk-6U(jzZ2vQIq
zu1%2eJ1pJTT*ZQLk_c(lVgg(z)4A@>a>v3n<`-plNCtS;gBfK-QSFjpgo=s^(4fHH
zy?dv!$Qt0d;!G#A*Q>%}K31mNcJK5DGB|Qlnf(G#wJBCyYXP!#^#k|<o}jgOZCY6F
z1lq7WF6;AyCe?gT8`I&M!h+?SQ9Md|jW2l^DO|rKBX{`mMdIthJqo8k%(YrCg4JBx
zUu5#_o1SKI`BG!IA2vIgT_5eWu&|(e$5ZlYtZU`h$=UiHUun+KJBx?3lXc>m=F4Qs
zw@|eVB!m!N{tO=#d5OVhd8oJ`ZUXcPRbB|d=g%`&bDq|W%gei?5`)X7WHWT1Rs9yU
z%qyG#V>t^>>%8Wb*U9PWbC^cImpaygU6X4>17Yr7S1sU8Icu%WCsBBsR`$|M&b_82
zhqd#c$cx-hHF^9W{^chQ^|VBxu?w(qvNeR&%E&#mK03Y7SC-Z}Sds0QpLoiDn5B{?
zRpvQ#xx<z_?eT_CU~urA$GQ6L9y00<A}NV9$v6Mw4}Qk5wg?-Bs}Q=nZX|YFch`<q
zR|D@_wU^`9wV#i?p8WiNsu{EysSp~&fpG#qXHuxXI#Ak9v9>|z)98Pb)9f)>@9JB-
zjaJ*71xU*&bcBt;7`|Q|_wo1lAIfCDch5)6`)OQJ5!Zcs`iZ~*U*D_bL;8(U`<uB%
zQ(dVOi4o?$R*to4mVd)*cfVNrigxQs8&_6HsHm6>IK62&WTc~OxSpJm;nS}{N#M)J
zdMAUzE-niZ>;okuhO=RDlfolemILS*7!JkWrKI2>tKSjVkG@&)Wv&R__FiO!;-;~c
z)Tvg_p}~TK&T}M%;{tTij>idh)^m#`3>o{YHAE0LoYp(cr<WbHMZ^`w-|<AFW5Kme
zooR*v2B2ImFo@kpDg6ag;lTv&s+Xr`%<(V@4+G%~wNK~(2=9Ddb^qd&iB`5~GfeKq
zi|e}Hq~f4ecC317L1&`$qJjF@eU4$1?g69b);P(KwtQ4wrh^yBn$4!*O3m)nBvO-+
zln}~vZe42_teWtwD9-v!=h9_+GT@jws#AHi?E?@PUB=42n8Nxn{TN~pU^JyfK-#{k
zw0<F|S{_f(52fh)s&f2S^aT-ZZEbaK`Q+zL=1Br;D~_wQ>`*W~A+0T(b)KwH?R(7T
zM7~!jZbX<C7zTIkx$a7;xzy%=kYU#AmHruz^VelXDH1mvR3Y9^)o79t6Ccf&J>gW7
z@~Mxpqq)kR=W1G58*c!`dtOWnu5uuNFO8L}UUu9{wgN4hYbJJa33VbgctukZ_42=|
zi9m7sPWQ4juwjy<L3M%cb$U3kB<UE62$OwAR4ubBp4eXp`xAhKRz6N2`d{FNvZl*z
z`mEhX+R3>70^TIBQG4qwfBA`L{l@@*Xri`mXW6w4Ce;q=M+N84$_gGiZSv23ev*I<
z%hi&Cu%J~&nBXM)<43KabMMtlZF~+^j+CwD%aE}4dr8scg(D8)@#dk5oY2lhbt-)<
z&{0fDWOa;RXDH8*W#Nd0#d*lf{BTHy)YdDvZC8=ZzUCJd<0P4*+XY8$W-P`tX=x=;
zd@xm(!*Af8?WQ)ecKrCdj^HjGz=SL8HqvboU*1Zv=q~hxvgjzq8yOwb`>lK#$kE*Z
zHwq~sznwj(VL9@3|MKOFND@u?N=|d82i}R5$BL(iCloOAa|{Lqyl{DrI7H1!dp+NB
zro~%7#+60P$F7v4rpVy?mnRABFk)iyot221*ONXz;2@-3WP2k8Uz^w0aF5%My0$Uf
z+Rmd7^^9*j4+}Y-sznngo%2XG==p3luaLh1w6!%^{qO6OlcE%c!;r=38xSC{GpOF{
z0O~`GR~*#m_p8A`pP?5C`09aISu3{scv(yaNRhQc{dJ%iTxs3`4e3SZ7)%l2=DCer
z8LaeaYP#B)uu<2UqS#DFZ%iioPE_t0{2C4p&iqw0`-k~FxMDulOiLJPw|<Me+^Vlf
z<;hVDi_>m{d0!R;#Ps4dI3p?&m!Z#DeYk*BG)ADb9tJ?p_4Rc+Mn;c`i3vKX3$WA>
z1`m*Q)b%hY*2a6p)E&gt*MYtQYPQLh5Zun|su$Nmsygw);*~0dG(qSi1wi?>sx0q8
zb5mzgqLtW?zGDpY9W+*u&OjlpPV@ipp+9pfeJ%t@V>vD~vg;arlN3r=g1x{<l?69{
z%n9is*s!DX5RQj4C<nZY41EzDkccykSwJx?p^yKV#UG3Kk6HY&xBp);3!%0PFv+J+
zL8_G4iK+HUkOzQZEIjmBP=7npVUof5jenOvNUL+{?lXBl5p4<M<%B(Fggb<BL)aDY
zRcs5Utbww<_npZKx_M^m6yCSkpI*2aAttKpW-wl0%8;ybJ-7Q&EojYE51In$bWYT=
zfIDMI*tXyFUWIX(4&5oSU4@aF_V5_RjApam;xv0s>O&@|jc{74&BKI7UPs^JLIq6s
z9d^#GS3@|YsHpuEP_^VX155>@1-481v-q*f?de@-zs$%zdzLj4)ncU@$!YH5MF#HW
zJ7{~fHe^hVXbHs+F5O=A#Dt{kHhUUm$bm<lr8^uS=4XmFKiId;byC(~(&?mV7bdZa
zJ(-dNM9ER?8wm7Ln)q+%<Vsj|XR5NV;#joQ=O5K>6yA7DWn2P>KPH1pD)ieakQ2;4
z-ojUpkvCwlj2?Djw+af^{f&gR!wu$s8!feDG$f+fo(eNl{qF_HM@wy+5t?O1JTN9T
z5<D2g=jDO{u!wZ@^pb9uLzc_zW=D5w4U?isH)h-0OX|A<+M;-Ct@|}7cvpTbC&<<U
zEv!ywtY{~o&OwOR$vO*e)VnTD#!jU{DIlLzt7~=R4~O#8Kd1oN%9<65ODhxl;GV#-
zof^iV_1Yqd6q01nv9Vw1%+)EtO?@7w4kqM8M9aC`jNOK7p*pgj2b5%o`PyH=W++<n
z7p#>Nr+7j7I<54PqM{;3;NW$0<55c}J3Wt*l8C*1^T09huqc4M`xsM?c=^bc_?Fyb
zYG-3)8zE)kC?_HeR4L7=K~9=)NKRNM>qQ&w#6dy9cPFKr92Oz~;8;XeyN}Q0g-vvZ
zI*)$T@ooUJ({Wh+wqih2O22f$xJxO?`W*lKRquD!306CG?~oV>4wGW@knD-dGcz)J
zZ?yCB?vo#NTh-U<N$|7n#%vtlP*!&q-sfglv4(=@`uSpvbg3`h7_{iLP2eS_K-T<%
ztetlC@wa-Nz493VS)MYgb-$+ISSO@a+KwR=mPYk`t!!(VoACwt?(9?A%JYyF?>0{;
zixnPk3~_yX?VQ8I>ayOrJ8)d;=(KEEVNnbvRc)}x;LRC6+oh{zw}ObsbC@Re8K0jy
zbMLH#$fM^+Z9b*-b365Vy{rKR0Bw(;)^N|s$(b72oM%IXjBckdFNEF*xfN-%;DH=l
zZEw27kSL$L`@P~qJ$+^c>;nbwPn+r=N5yL)fqwzXw3MEvh08(tZWp%s`J$b-Ypwhq
zq>?q`QCz*XDRg;vFZn}Ca-+tfYpz*@jdwj|DRWb^Dx>9b_Ajz^-^Gs^jDi_XhIE;p
zK?%yZ@B8hbY6-q-x@V|!whcuyIxbxcpm7OTq-SFC>38ENR4;KV=IFk=ChqL(t{>xQ
zSgd}Xl+*0Sxy<5+`^R=CX)B)AoEa%EuJJpr-iUD(NXVFChH#KHNTSNFGMMG}&a5qU
z`-&JE8s^wzl2f0kLXAWngs7;S-E4YDTvpZt6<){f$hjPec3@{RMw;YHl_&U<!4Vh4
z<m5V)n^h(!Wx3c_D6Cvxe({CEnD}L4*^|Oe#w*k>m+kxSR^!_=4wYV@AR{~S<wk~`
z(Z(cL>b4_+z4z9VlVW_|TovFkGBV0p`4DEc1SjwnV5Q@+PLXQU{o+Sz(!mg>f4*Pc
zRUy)H1*f@Oyzeoj?e`VSo)~U2lxDcOP;7npYL$O7gqAWUpPi7_<(4>wvy&Ieo>Gnc
z6?|D9L!ra@FXOs6u=b<TcPy{Ic{jf$MWfM^v4TeeK9n8IDwW_0p`yi=gNe`7_|isU
zZul;nYeV{d3@RL(p<5PE;BG2#HwH)6Zn~+Xs00sJD7UAiXPlg&;SFLU(R!=;uj7$6
z^3R`JH4Fte1_=5#Gf|TCkN;@5f+Lgj5DwFtCl1<|xmM=Vvc6ZlZTkXbPcLk%bZLFG
z$hIS0F5E?LbZx+ob}~Ld)|X|qk|In<XLPO3y%6EckM9MV_VxrF-u;<W>o5Drp4KlH
zRXZDfldP4)K&kW>>87Sw`;9BH5&<+SsIM)JfG{K3o8evi@zu9>JfqAk?1%QK&zOC^
zbhd2_e^-CM;_ZTQZC^Xrme4daFN}Z3A8}MQDeny?I4QJQpSqXb?&4PCM(KPbM%t-z
zn}1;iv@3|88+4=vu<SM0(<2d7%$O<X(ix(agTr^dBjgnoi7Ew8+JTG;zYch}3Y(+<
zO{>0)%ACv7ZHZz772fgPUiy(PPa_@MG6S?;CR$EVGM7ALsyqz0nyh>7v{@Y?r!mG_
zthc?y-Dw|Sijc^^ipGV4K}|(rC@;2Oz5pq4J!9e6O$?EC*>$pY+D64`XIVKmC+GIy
zw-#$gRa=ke($eya7-igk!$*UmJPCPH9uvEzh?R^YaE0*D(Es-D{u^OeeNBhV?`MU&
zLy+PL30wjMz#8hn+}D4?A4JJ1SFUlGcHL<L%a5EC1A)xOw2h|IV!G|5a#9qzxmUwm
zSZ?7)9KKj0FLl9F&#*HSV#^%TSZGp?@dqnK%XPbBI|Z^O^lg#s^jDAOv)2|n`U9>_
z4V#yf0d|*WrxBa7dDw~wE+umL^hXL6C1%YBaum@9&tHUJr3)4n6)gqDlj?b<rE+;p
z%)X2Ta}*Kgef+>1dBw)Yra6-eIKABD-L46J;DS(c?kW8mE9_<?!PtE>+j`hcLTjx^
z$Ja~pc)$M6#W394W3MI|ku!s{3H?rCE{Cs{+zm!c4(WGP{8zFDq_tQGSpKqgej-3e
zIo<e;^5BSjKrYX>=|@>#Avi+6J!D)6Vnw;Wb*YXYBjXw*pj*z<1?GwecN|R0by?f7
zud5cU$dmpC&L7TZJH{!d1~=|uU^D^89dAGr(dM^&%avFa53nk%FVSg>EY3#uQ(&R3
zsg6&tN)XbxG^MMRZI*QD65d2`M27d#&N%P9S15M~F7?XpC_gnJPa5yaO)JTz>;p59
zPAGdAC}*oUAZxbzPZ+Nbn6GXYpG2pnq<CsZZblTHpsK?nob4YuJTzSpms3-V>;YFf
zF*s}<nlY&4+<`>SqMQgD7ON0?xlO8tPi@7^m^qgF*o{|RT*pL_wTk_;sISe;rF1^?
zt|Hf;wlIv@_d6p3n4%^rK^!V7`mS*cpO1@cpVCp@bf-2xl;WZ3&_fz8N80iNx_gyd
zeWlrp_}he#&2?QMD|9d~K=#%(*Rmh3IVH5mvujBc9WfND!=@~`Gs;Pae8;bjxm8fL
zlFX$vE)E9cpFbPKsK`44b+h5-;Os|?;i});D_zXstv}j1rcaHS^gH1rawA8o^)Mt$
z^g&^_!34sYvCt9b6^3Q|>j5g-HOToY?e;O=yXx0>h6`m!wlgdB)5Ewel`zux!3}T}
zG+618*)0qDf7G#H<uBS#sjT}TPUdgzOKMhjw~cSH>~k^!{4gbm<@CYPR0xKSVgMoi
zy?}Z>99+N`5k!~_@!~R=<w(rhna;7vJ%7HL&wDr_nOSpufg*Y(xaeiE@fg`2!fLEY
zp|4m$hM(8$sGod(HXa&vP8EX<2qwhN$|zzWRTjh*_1+QJ_$!0vvv$X+v>$0dD%;ua
znCtj7YO!PM!1HZj=VKhArlIh5Z~(u_V2-F4IX~air%(MCi5cM6hD}f2gg(%ou*j5v
z-GabqqR5CbOQs)*e0sPt(w$qdFsQHTPPxU;Dxb{U?MAHjW0-4tYBKj%?=Uoo&?Xj8
zoHeWMrF6JldZP^d^W&>OiVkzou^_VK-s)=3taG_Qww+IYGvM9%pKxY>U0kYqj2a#O
z?3o|Y1GSq6GEqErZ+6Bh0Fco3;&^fVkmDG+VLIRDrg<Jlf1kHzQ8>nfM!G4dPbT`%
z-f3~Tw63gpBWJ-nAW=G^MnRU3MAal)MLl_&-*>_GG2eQFtI}RnKm>%d?hJ~I;5W|V
z>N03{$f&cwd6Q-PjW1%xD{TBpBra97{r<iDQT)mhyP>@K{IfOFqdGsn+SbePF8}DA
zW;yi!fZQcGcbia6ZJ+MmJr800J*1lTbgjxLk)UMeXi2?~oVt4X=G_@6GYF6+pt@h3
z`#RxSd33kV>*#@5<<SZVyoP}gCqQR`xEs-zHV6`>z15lc(gy_w71}1n(|T)h=XSi$
z3ND5a-AR+kEL~q%oIKn($r)*LJ6Im3HQSrb$GBV*oBN~h*1DQAe0W#NIDvxU24L3H
z`1?Nzmk!trk0FopL&OuC5u+beT&ETLYe8N;-oV%X=+8{<r!k)O-{{A4=Qq)kOcf6X
zeKA~DcYDP(^Y~IqpPL)n3@vXjDiGA(t<4_P8=WAgB_kywBKO}4dqneO_X}QTjV!((
z$4qNPjCF>YJfM?6Na^Twaxjkm)oM3;r9sVc{K&V)59Ei$-HE;Lsa&&$nUGQ^)F5Wf
zDbdY$9Vcbyak1!-11w&E@%X*Pcqpu9gD@)c3IkI)P$MwPT)1u=D;Fmw8Iuy#9>vQ!
zMzW?9x!K&Ub6DijtgfKEG?Z_7xEQ>MNKG$jxWw2OrCIb!E-*Mygl42@ljWCD)EcM$
zA=B~3Zg<$*sjj5f(?`FrF{iYY*4oE6SG`cmn&DUP1ZQ-KF=(ifuX;NOYPgz;9By^d
zPv*7@XeKY(j#?*iZER}R+6-@LB<uI}^weO)B&uddwuh66!$zgt89i^HqG)WW+NLH?
zuGJlV5R@Iv^<=ZY$TOkvCS~^l_|y=SJD>#ff2jr>sJLS9uc4gg8ZD9B^kTk84>E4r
z372s!c`J@(cs5;KbK7Y1FpIGAU{dGs0S-X~i9{}M$j`5MU<9Bzc(A&+9s!6E+R4eB
z$}3)<zP?{fD{AUuf)JUh5o3G<xmBr+DI&&s+cUjjgzrTmlW$j77hU7qi+Feli7o$7
zHhnXxy$Lk%;qqR$*m<JuXWo@aDj%3<YVc2dj3FZlnm?lh)Ra7V@W89|eKlX+;pr^&
z82*;HH6}%a*xo2V=KEs^M4ewV7B?}xMb~6i2Fk`%6w+eRwC%HnqSdvgqsl6}n$7R|
z(|+O4(0?iw5PlUaX{(T`e4YtuA;}SrH~xAe{lpA4D1$-?r%{!0(VzIEznWX$r`J^z
zJT=>NP!>275V3nDxfN&#)0!p>Mq};1EC=N<(gZ~;8`k>H#1N(x?gmD)cx^cD&n5rq
zut%uk5-7=8Y};poFs-0e4jb10OMy5Pi+3Wr25;$)+ERxwty<(@G#SDszECWF?>;D(
z%H&-vg)psEJU6bv)!YUspjiC+KaS)t+w^a8Btm1DD0xU6oO__nX5UgMyQLB<G(|#R
zq>#pW7%#v?G^3rI9vXJt`EZM8X{%^U(^fQIUZNF(;{!q*w%-8Sks_qpVWq3Pi#TQQ
z-Oc?UAF}H;E{LUwX|dqdL8;MAJBupAW1z6B5?E^ous6_d!hEX`FgGY69Xt-p9#A?U
zSi5Y$8Er6J(8~G*3*GET_tPHgPZL0~)A(_sYC*(O*Q=~f=ImN_Vu8elg*3-LfiS&&
z?m}bOFnr!6TI4c&h$yBKMf>k~C{Sc_jyrV&Qmwo*M;Dzb3bOVWw`d_a6`^t*3xTX6
z?TsswiKLmH{5u1T)$pQM+JLkblaP>*2T%$f1my2^)h%LBi;sBp=n<Lih#a!9*41nC
z0rz>qeY>TsBO8F)-cQD5pt%7hjn(qTo3hf%uIEs#^{ak^QDNh@00MZ@?SO);UGTsF
z5dP6UI55IXP^3~>b-zKFKrXktW6D|M!|Ou(C>an-mE4oI$b)6udN&>MiwrcZkOs1R
zY3ij`Hc0Ya?AO<j)qAsIHx7yEf;{cMeX8y}2_>ZNB1F~ZAACjHLO57|D54@SGq@ZK
zmrs7bu<DtUQ`cDNwEMk2d#B<;ZD4y+UmrG%@D`-G>che4EkH3CvVF8rq&-@dmJ5*Y
zz5%k_Y%AqEpW<n<LZ3mx1@f6N>_5;8axJDQOty5(N@xLL_~nvW6v?YE$prJr(O<IQ
zwBMm{eei?ddJNbnkxw2Un4v)phKSxKxKywm-}O3MV*3-LFcf5emin9S7Tj{fXLquU
zsr15rxiV4=N=aPFF&uPq?-gv=;vGmdk+CKfEf)H2LIUzTWt)fQ;bD=;ouH?+%O?~!
zXph#t+&As!g|(1|1eOpiDr+0t;&xWiY;<WYARBLhJkq1aF-}Z8ru?7|T$<=Vq<jGj
zt=ankO1-(U^2h26ux8bedP`YBG9ZxFlTh27ZJzL;jq!NCKfdmBVfDcFp?QV2#llgi
z&SXu13n6=Qczp0pr|tQvP(J&oO07_ivukj6)Okwy(!u1><V-|{%1kOo=wfBMr(N4J
zk)d8H0vw!$y0x{n7b&N9n6X*$R$I|T%3^on{=VZ~P6z}92<3z6JHDMm*OOU_94_Yw
zGVe_Hi>y_<ofoe>rcK=N1ic2nbn~D71kgIVVekW0dwhiNOV4!D{9-ujU;HrvT+O)3
zOzQN9;Nm->H~0)I#j|F}?XaYbb-m4neCZp+#CQ7@TQfav#l3y3=xf0O@$L0kuFam5
zJB2y)-G)Lr3xSH9D*{<0I5?fzIf!?Z*<}ID<qz(JbB;gYW(P8QWW%TW_zllNRBd~b
zl!quD@!drzC)*iN;9;<fs#QEm9HJK><Gl^Q2iXi4=iP<@oy>F8iUH(sDHs$l2Z}L)
zuC-{$iU~>?KlTDPWG8~HqzV%D{CPDfG10{yT%eDY*p)oJNnu}1D*y?*QFpQ5pAp>8
zC%d09wSf~CbjIAhIgHeIqSl5MsS)i0f}YQ%??Ym?&SDvhQJJ4ZpOj3O81$y-#%``S
z#!aT>wxgdv)na)B$qg7k!93Zxq2BcLdmS`#3AzSyNZdP;kRCz=l+GCg^(qj~3?Z$%
zz%G@s8m~ioNG(7s=(mx<P|N|23$T|Up&V%ELpCr>Pv=M|k`8R8$6%Y?^<#imLc{=^
z27*!_0!aOjnfx~y<^MG^ITYMp4n2S7%o*)a*M2T4!Vc1m<NxT%f_=6cA!Gr`a4JBb
z;R84%v!Me0$Dc4k0NY+y5tD$Co}BEo@%8+EG1AhgeVL+e@r57yF{pE7FS%a3zxKTC
z@24X%^$K}eRGO`ojFnxQt=odbjci@da2h@V=Xw_;Y{dQDs=Ma_dn5_Ah~D#;Jg?rD
zua4QN<lGHpvsZ~+-L@1sP+xWEZ+56y-EJSBZ3H)Q(-I3n`Svp?nu{;7VG$o^<sdn=
zu-8?wlvqE1uKkH_cf15HjfQXt%25jr3W#Mn;S7E$zcrbQGwx5JAy!vbCeGDsHCq?p
z`14Cop@0*(@kCJz=|*00<ARHGrMpzOkNNQhyos_6W)C%{{yc9!X(+>HAOufe%h6Q3
zQSUVCPD82A5#gP(LMqO5vMdbcxewJrJEi&eHc*D1u0gehs(oBo^WFt$IuN7LN7ir?
zy2vdEMyo}Hm5k3Iu(ipSN@v>J-P_x{=KaRkQ;n%`L3HK6@q+*J&rfCaTc|>ODn*2t
zIa9~*sV)D?2q}&Y*8~%|C%p_M27M6)*sD}t3mgb#@TeI~*D@Cc-qTC9&Y+ZNsj>zZ
zeAJ*6i+tPz3`xXzj}L_9|JaKgFOanx#E<X3zrX)EJ>5GzJRF|$((t)5v&TC$tTy%?
z`o$>fekg<h>(KRLJWm$<3_UgxF>{8G{f2-$Hz@D)nrE9_PVS!Y=B%$B$j+?qIkW>p
zxD(2PV`&K9v%?5mo)Uf-AK-9uWRKinEUZ6=FL0wfQQG$=o1Sx*#SWyvSL{++FRFH$
z29KD@b9l9g-mH8%!)`h#`$O||@c23;zw_{oPzn$TMeTj%n&A~^pyv%}#0bm-0|P}=
zR15<{3RSj`BxqL4*cdCUr*=TqkE>_{gUj_GM<}cR2rKy#!&Ndas_jwR%!VmRhPOn+
z`NqUVL`0q0I&Pm+7Os=ur;oD?Y3qy=-<capwwz+~rgu&R(k{oVf)5g<TpSY|X&}vL
z9d7*ntRkMfE^FxF8UaUqG_$MytIH!!LV4!nW(oDjyGf3d1Cug7`z8B9D`Ee0@AKcx
z$}Og>J{(vGA*P9q%l5dSN9J<nP7ae-^DN%@pb19>mt9EcgYW4?N#2lRAYdc;p!KPE
zV*DL5QtsRDopt*`aWmuXl9?gWiTYW!8^vlF24gsoj`vrne6XXw0TCPP@$sf`cBdHW
zjd=h)u@sQzNKWNop+z4sL0A?cYV5xKDn#{EBxMXNDarvs(C)ZePDyHBVhwbWjN!IW
zG)5O6s(n<%h7}GiY^>GH9Z&}}-gyi(BHmjLrT`a)qK!U-s>93k1YLjJnnJg?jYUzl
zdmF@c=bbO$GH@IhPD(&<D}EQjgC|x>SIKOTz6ZxvO-wbK*DDRLgyJ*IT)zwjEEoES
z#4>i)%FfGsC^l+uxl}ORar;xfm>|&wr=uSY)7UVymKua}7$tTQY_NgESm_>ybi-$1
z!tYIpU5j^o=$M&hqv_w?aJ6dkolI0ULpvc@!l2QWw`l#ss}R8Kw<#*br6M?}XWE=O
zF}`BUdMh=pL^^_lMXM?id63>O9wShW?jwpm8L6t4Q|Qk6q0>nN#a_>#M5x$NwVnk;
zERJ=%82XCuuwjzLVu}*cHc|{^e&lGF^6V@zBi@68OcP>IF^Kj)Fe3>$nV6Uxv@DMw
z`0}x!fGMLwPekq2_k_I}&k}mr_aZ3H#{0$-X{~I~mxsl2zbL-t@xZHv9$UnEU^0vL
z7gbQUY0iYlxIJt&Nm4PpvbW-SgxLj)cyCNNNM-qtq{!?#3aynH{E<-hSvZZ~P!&SB
zSp%HrhmK3BYpueSgy1$+)49n$2;t9JtQacHI*Sf_hVrdV8}w(4K8+$2{8XW<PNWYi
z8{5l&AR=Ar>{%T9B4uB!P(bo?7g0UfFt)pQ*CLFW&{sI-2%~tcy};G1V)fQMpzzTi
zGz}AzICl9S(5e?#Q6X@NoCw^=ev?hV%}4Nfer$KNf%mqB_qFwlP(I>EG8UjHGvJLh
z5u4up+XHtC1`t}$t>>=?1ue(L#v%s&hlYmWSz6k_<oS;uEUehA6uV~Zeuki>zDCu7
zg_V4nq2To!Mo4E74d{)_akf3~zc~&6$HzkzMiJzK3*`|)0hmZt$^ep|gxssbAO{5h
z0l228NICzUtcwi$S0K3KvsltFkUg+|`oG*Iq7kgAG)*3qE<K<D^c*LoxqPSsGP=gM
z(9i(LZ98ZHn9UK^0fo4K4FH>Q2pJOC@BfbgHXti~`Ir=vfdgl8?*9+YqUr^Z?SkxU
zxPYj$Aoljt^~vy|q0i~b-U;lI)FG|xH(MZ?OjQ$>v8YzIX=y>WhA%~DayL(Bg>&hE
z)*FG&B->0-O+;upTS1yT+u}XntzYMVS90A|Qbz_{a<en0sq*zQloPFk4rK+38^h*G
zJI`lt^{Li;cXOsbZ@%;HbDBxzQ}<eQs?K^~;p8^&F^RG||LxmJlN0x|N1%j5SFSxV
z)ygg_;}ba9YXzkaZSJ2=@`cYm^}!_1+1+hlsY8h1Cf6csAs7w@$-2xC92~@icklQ(
zcwEfwY7l*pl6v_aBV%J~Rsz$ZJdgF99FU7i_d%5$eN@4gzX>04IjCk?Xj4_XMBf(8
zPdjF>?@-2WXo2ZBpz<VJ+}AoTMKT1FMDsgtyJNaeH1AzS^RAZoUPZUA6GFO4qG5+>
zX`on^N&4Emj_)UYThFW(m4eD_m_pFta`C#>%2NJ}%I`aJstN%ksseD=qpb;d>Z=~)
zg_PGPX{EdZT<w%@L~lT13&NQ&;I5&H;o*8tOkLqd^;aT6LYgunaq^8LyS;>LdKqZF
zCSyKe@Q^p>otdJY4pEqH9(FJWIEfqO+Nj;(T2cTvq+sG(E)fPqo?3MwJy<DK{?K7s
zI8HQvaGXp~tkzkE2O(1w`j$(GiT#D$nn-r)Lcx}bnd|B6s|_g_XQc6Rr4NI4H;I5F
zCL{(IWWYx_EJQwZV34zI-Yebe*-vVrU<$iSI6&)H_I;mzvMO^``Hs~DzKrj<Z&|KE
z8<fXV{TRdpaxc(NHZIQf#Kq&8w6t{Exc<iHR#)bem#kr!BH-gp=R89N3U>DVe`RWn
zJ^+1o3NweY2p_{R!vTF|TXnT-rnlNb%?ih`Q)vS&L0p-1#N24AzSZ&zB2ehmeqwry
zzi*iW5EDLYgkzq{n$FZ?F`UeavN1P%(WxQk-y@(L>;^O_D<H~`BAhMf<-SCIBgD0?
zV&B1}ax!afEZx{7w>22qh4170i{}1gfb=nF`a9|84%+QaXRk$!kKK?xIT{3Qg~Tk{
zp)e2E3`&IVW1&rl3%pg>>WCB%=Hg^)?j=PL){`BjbA5lS<N3u)6i>ORVY-yXr(`j@
zXmhsG$AgeI{Z&0AnT3HT=Cz=)1n=?DI-98VnC0p@(10mvz<%zk=mtAGd$t|Y`bNq9
z0^@#;OWO5BylgO7<&SpaNk3s<4^Vk_gMSfHt3iWE%==Z%%SHKE_K#yPVNyeW$Bd8`
zKyuU<tq~%cz#-SlNn10qurOCBF+PwtUYET$a}E@s-&Rp2QL}D!=h`Wgyd8qiu@5OC
zk|um2s)g+M*j_sx<6;mL#H5n*FxpjH%4zkj0s>SUi7xWksL^H=@8|3`QIyUIqfPxC
zx3;!e4A8%T3*lN`wn1C{-==|_$I9JMK~q)to$JveHFB=7f^^H;I#tbbmEX3eBdWl+
z!6|QQT~mXcSp5*)Fl|98eG5Y2#aXN?FfiuqXT1ljGMN6=L6@9%Mt2ZDLTu68xw9Eo
z=CvM=-f;MK`i@1c=D<Hl$%a3?TX6hE=0o!(1{yjjfz?L>Ou8=PI_r&zX5>98OD2YP
z8*v2DaPOAyp~TVdE=L?P+W;ey+Z=nP1>j8S8E7i7_rE!~{nYl_{ly)%<S*$3qbxM#
z?79hiCl8VRpH&e%qc$E=Gha)=l6G2;N@K%L2!pvHIJb^7m?I#@VZD050{uudL3bmH
zpwwzHVl|`a)-utCtcG=M0&@5Jh1qjxN*Y-1pxSfmRr)M=`~sBS^iU0hu#JzdM+~f{
zensC`E6JnjTP~hAx&Sk;m=7Ottt=0yngCb1#<ssdhXX@DSBJ1=P`}M-(aEu6eJiI%
zz}qW$2{Y?aM2_1O*MLt}PF+um**7*>+e0-Dan^hLRtwuSUw|oR3hS(Ygp|=fyMsZt
z1d>StXv%IVDyn;4+TDLN?kP@TA8W88sE#2H>dIMY?%yA}Q@C2bTFo^vT+fUrKobDP
zU|$Qp!RaD|w}fmrYie8<r?iL5efSLowEFQOW<-~T(uQv@esY3#HY&`@fWb<iZ)?+X
z@;#|I>;*e)c^=A|UNZ>A#8}P%3T;2pu>yy%#`EbyA3lNO{cqHA3JMAjHH#XizItLh
zWAhykID-V`VCoptf$E3fsLt`>USlMr>F(e{J;#CJ-4!?<&_sZjFr?TVAL6V<>BxAw
z`q<wab6h=g`dWj}OQWP{?IGaoP%q7?Ms&1q8p)>sqy$M(NS6_-jr0<Fn)^`Z|Kl1~
zG9JTK(gI^O*U_NP>`5L`#s2>O`XFU>fRvw@OC;4gZ;!Eo8tl(=o7wp~b%*pepzC>q
zuHa=3nCTR>1;`Rwz(T*f#9Ta8#<ei)CRS>*e5_NQpPw%$FMmBDA%T80hHr0~YvS`N
zXf#po54L!hDItU;={2BsK<45lMPo*S6uo?uNgnICW0tCD1L86%;Dcp&C(G>ClPmG)
zGlIiKA-qUy3%lzk{IGHeAhB~?n||lw>Pr^IX4|4-)6%R|^lQH?t1%G+)(r+2;o{W_
zQu8uyfj0h~Bo>#$n%;nHC?%@b;HIeO7hrgb0PCl8BX@X);Z#6jvre9=DnZzxD^O`?
z+co;z9p!UQ%DPrCAFufmE0NYhDe@KisEv_PaHOfFLc(i<f#}8rSJ4rYw15VHI89g8
ziXp7tM~paA^>J@BlxGA1y>CIzIb|jYScL&bn;HBppBBn9bOG3zzEl+iMS1)JNHeqV
zK3|rA5R1J4!Y%|o@2hDj%lnUs{3Rdz$3*^QCw_~$Q2&_7{}~ejS{a*_F7BqLrxDBU
zM#e^yZ}4Y0hg~?J6o#iOQYoTpyJdOrmDr>j7379<m^!H0_qw~QWejfTLAmJDz#Aj(
zX^Y}#X=-kcSdN4-z91{-7~r!QG|62yq=u4!+yZnS4or1&RipLv2Si5;Ryt1>m-*O*
z>`ofhg{*-V!TZCf&pCw_e-mzk`+(iSbpm2h@)CxICViEf0A!llQ`Wdi%Dc?RM+tAa
zYY8P-d@b}9N1h1Yl5~Ys<NFE!TJhPV$$45zhD&@J2g9V3OS#NmYBE~commu6w2t;D
zD;yZ9{mXY5UUA2-ESFfVlALNO&2p?7y9V?t&Fd`NPuL!7WPiw^_zxZUPh?$`moS=^
z5H}NI{1I2>z(A*-PivptDA49k8+4;YM=?;iz3@j`>G%vv*6E%HtEFt`%><~vhx0qi
zTprbp2?Z9;st@Ji7awY9rC((zFzx4P<38x&T05wxc`O;i<jvMrLS<GlUC>adEHwj(
zVFgMejEYN2f@XWzHnV6i(HJN+7zmrD&w1kWZ^Fr(8ansVVzUsFt{l-&R=O6;*i;Ky
z^;%kIlX?eqBX5eIxTla<=L&3f%+*x`>O84yrC(;SSsi0sDWBaYDcXB2Vo?3-JLDz{
zZJjW_Ana2yVgdnWCBlWZ((xDyjK`UnisweS7CwKy9s_iwMQe$wlbdX9Xf>G^EGS52
zPpx;dlyHCqB#i5u@j=}c>I{&&1Y9fMTpt*)?=PoTje!c^%n-s;vCu~cJ7`+5aY~@+
zApBHpIquExMoBVRC;bE>I5a~9H^xFo@!EPGtQ1ohj95Io{aitTa5j3Udw1DAg4&`H
z8V3)YD27GMOJk5Z>f8bT$0hK`ltnSg(QfxzekNr!KK)aAng>uk-bWnlKHw$_hRw+F
zPnKong7KM{PNZT4sBMPq?OMY4ZTAA9A@%Ptf?c(wNuIU2uRArbTREiNF&*&U63U|G
z;#OoJE<iBh6L2Y_V?8B#$l>N;!%Kn34uCyERGz!)+b}H<{t(L9jr~H3suxwuq|Q^H
zdU7oOT&Y0zH71{BzB+ankby5C?%upKp_FrI{b-~`r1gxi=Ua-yMQV(QE3Opr!4nEa
z)scghd<Dal){$mbTwBZ-W+X_-%=8_t%y9*c<>jG%cA1dTIkYq97~Sz!J1s`o_B4RD
zl3dj+Hx673<qicg+BLxjT~+z!FVxq*6XfQdh$};=S#P;>&6c4zKvnPg_DV=MJ~`0=
z#oPqtO4&Ui+AWN=JgnpN1#SJ7J7c+tPao$9y%uW5iw7-__d5>|!={DzuMfTKPS;r(
zu|>~7QFfliVr0gAFJ8O1&+*X#5w7)0iQH7q;NSDH+vDwGF=OSPZ+R3=Nj@|awH8C+
z|FK_aP=VvLzfOP{-1jN<)?)7?;?vjID#T+*$BzITs^>gRll;JUZq)b)8`Ri-dI04!
zV~R1RyEEdfnpSyyi5y_(B!|<Z*6_m?*T=_?AVkd9J`7dGeuWaOVfT>%B!qpIp$tj~
zohRu4fiUuILqiaNqS(bjm1-+Do;j4wCQlC<VhzP@OhDLJTCD`2nAx)J3zWMiQ9Yo&
zSK{_u85abI32q7Svi`{2A2bk#LzNG3s$_m1W+;sU|1p!l<o;Ab|Cq^N03u-M|Cq`D
zF*8X6c#aeeAx3VIv!3%gH5EM+KBPOI%ufz!W6R(6+pj`IaG1u5`>x1oXi$J6t?Vr&
z)fxwW$C@RTT%E3|LY+FVFuC%V5-rjEoC_Pjh*3f~vV=f+Aqch@tQ3|ybw&q_QXe7L
z-p$s$C*AgVY_~QUb9XOm0)66em#JiT7BtY9M2sD52vpRtL-3+h9U_?X{9tGN4%5*f
zPIhw}Z#wJ|sJ~6kEdRv?IT*xp@@6k}%L@uG1+GcQjc3go0L_-{mOw!E^@;<rq6(lB
zF`V061$?dmE-x={Rrv~BLmg6=nXxN9wSE@jMA~D^gR4;fS9{kP)nvM@XTWm=aYUt$
zw6TB)B!Wnh5)0r62m*r%HJB(xPz(Y=DLIUTlt@rPiU?6q=_Q~9LJ2A%C?Fl_Xfg;&
zi2;OQ2;4W`Kj&Q5+@<&Xch~&Q%6i+k-~I0L?EN@)s$Hy_jpuzt#;A)_yTODsP*P)e
zr2!RGON@*rhMi#0y76bexsy}sS@$!i&}bD=1Y);WYnrnj2U?P`R+wZo_FsDx`gYac
zLPm(SAR*o*hb|6G5Z@;r`dDVjFLKNdqn23A)9Yp*8_pL=WN!^xfC>+!HL%80*YxTy
z_q;nX4$xgX{-vUzZZY+Cwai9gS`IYhZqIr6aCf>g|Dzw}g>9H6OtUQQ{`!_V$-QCL
zKm4%wx{w%Yy(;^wUqCVbLs%KFCy9`tO_fheHd*X_gXJs5Sk${?beFi#hLV_;xwcA4
zA3(!6rdLKls-%_|L{#B_r;=?I*GeY=@00^~l1YviNH*i$+?+ghlH%gn9$HtuUM1&K
z#`TRS%hL8j>L~wMT(~_}nmRTqfv@IdmtkfKN*Lduo?NomrLyi9`1O`IU_c8$UBRba
zIqdrZis|i!B{WTJc|U{{me^L_Z&9F`9;Zss)bH0mLfpjf%%5m1rV4&ZfjPVAp&eYd
zs|()pcrUBH&Ci<EI*Dmy;aB(I#(Q_29=SvDk%Qz&HRKBS9NKY&&kUw7I~DcoP(alW
z$#9M*Z~7%4^~8r;e)qsKDgN3&x5OS-sW%v`EdEtdScO(O?8QV?d7gpj+UlKD4F>i1
z)!5Z#^M#?a?Ce((4;bC;CJ4~wDk^R1*+z=<S|m5O#?rDq%k*|IsC(lkNx<9i$XZ)G
z!<+%--1Xd5??f@qya*vqmDcP8crouiQ6M}*at+uaLmjyqQB+|Y^JgT`l{#3Dc+=|<
z+MBQtwZ9N2pp{G*t<GiQ#!PkhX=);za!N{I9uYGM^7ZXUD4wg&?c4*P`17hA`-KW$
z;@m20LaymdjI#915EXr{7ih<<D~rp9lW%un--(=II32BqR0*dl>_h;t2dutZyD&_p
z>qWOcKXl#g52<;;ecj`0F9wH(?`!+&hto`H%(yXxzOBi-{^ql~<h}DvJJ_s_7l{c}
zwUZ?Oh()P4G$`3)P&X?Sfr}$Gj06w{eQ*rFx1b7$zgZexwSX1`y9)>Gg7X&@FTH)o
z{pc59?tWp!YU$*6<O9~bE(vnKx_eR_b4j?i-c+Vp7~xUg$Gdk2<&77g3Tx}wJ&yG%
zbz#MHhY3csgd8Jkj2B|UPn-bN5i+Kb-z<PkdUWm_Zq_K50Z78?^H_u7%trMr9@+5E
zPuOg)4_&<B34P*_B`LN(!XW<kZJW-)qdvIY%%%7^DK(k48YqE)4L`#Hx}9~}HNs4p
zFb!YciaFtc1DA`An0K3=@4ZH(sV%<3qiXqfyRh9S`Nh&M;p{dXrKN=5lx;ywihzbF
zY!V_0Q9zRt!rmt8gnp8XFHkawJSt3{pprTFc-;1@Q^h+ZSH?>w-;{Eg0StVivC*tz
zFy0(S?J|W14|=fy;HIZXa*;P8meYY4pNIyA5oO|&C_7rt!{)u2SwDsth2xA+j{`d;
z+qIOw>a}^`Ok#EkfDl8AW`TYocN<u@#>{p{3JS?GGWuSv)|8f6w4etT$5g=wtt{=C
zkcn0*EKD_T9~GU8V)%DvK`R>miZToxmq~5fHulBKK3WKUt(s0nj*Aj4x;5R;T3KOc
zi^T0upH3NW84v7y<cf}Bm^VVw;vPa2r7@>UXHl^-%>I#jX1Lez9DfLLunZOI)76-o
zQ&3<%7p|W{ESMD`ibD#P`uu+Qya*9t#!ogBJV}bT63ml1#GFLIk+V}37V|3f$uirR
zw0n|TDXFRI)c0+CRsF%U)=IKc+n^Lybc71AsWF=eV5^I7RfzkF0kg$1{D}H!=;iSG
z7EH<H=o}H0Y2%(Rk>cjtjZAk|gzK{ya%jL@J7xg-cC@!gJn4#E=bL@Une+67E3j^{
zVrNp(#KoCGncjs(P<y=wBK|@;la*zO+ix)^d`|>T^&PCgCwXWzkp1+Q#`50cw6+*&
zc+E-y?*jpyRRkaGfmHa=p(<R5gp)h4a@l3aB!PyyoxL*^RvhP7QfGFtPEe9pSnM8B
zYMuHT$F-OM9fdb*xVToO>G@ju8=R%)In#om_SOLM4d{I)%XzJ9CW;xKIdbW($Cadz
zS~Xiew182frK#zPJETDP^lZhDcQc2T?oDpTBW)f-OPm6$8%&yax#NBtdx^TD*5_I(
z%#5ICy8Qg6FpKw$aDt!ciD<!>!Eltl3+^db3rhZ!yz?dvG#Sbg%2ek+5TtiuGuwpO
zwz;|Ta3te7`ejU}+`Mz6KWs;E@aJXvAPVpVdxQzv43}fP8I5sCX3>ooAUVkoghgjC
zcsa84GrJ#~$QxUnHEaGz8x`eEOb=`fId?`}x@-SWqT6*7^b{O9jO5z!$>4j1!3yM(
z$><K{`|5eV(o^U0v~=p@=Gxdp8kXZ}ZWV>e4}+96D#~NkDGrX$#6#rzN9H?>S}&0h
zBgq2Xs?ohSulMtpBkSp$0A6h*pA%M(Ys`=wyUfPCX}+aXB<<BIH`m$Sy`vqmcGN_$
zK*sbI^m6G-g0WF-B!s~4k0J+U^8j&Mf_5zl$_@Qh1B8CJzt(|t?to7L_4L&L9WDYk
zpaD=Uj?axOzeBmKvnhT9V-(8ngR&LXM<6C|Wyt(1KlWP!Dp3VsjNYSAh#|xt0(J=-
z@d^2FneVUua|-Zn6uIO<+DbBrf@{1}gp@2P0An~w$o$nZzXkGe(*ZE<?74?sZxw(0
zFNXoy2Ic$%NI7N)VS3_^%Qv9hxI8e%Y3<*>ec|gTJ8T8gPsx`^kZzn47^5H>61Mwq
z<?$bvOZ8F1kK0hKdIv46tuO0&XIO7$$jdh~4#SZ9h#Jn&F46U!r|7~^HjQR!empEJ
zC}BEYT#6KHkbo#kw%2NEO0Z)*ZnI;|y4U1TsRkiIOJeXX<E76lAc&b~tVpl|%Aezt
zNQqJ0PF`MMV%{qp!1Uym9AS>qf?bC{kJMmaQd61^w3{GlS8$#k6MB#U_X4TBng-UV
zcQ4pzM39Hu<<Hsj`b8JWkH<PkKqZ`sy0Y`U&%(^?Q0@U`NVj;={eB4mp<gJbyv5G5
z9LZlM3)Nc31MT-pXXoc@ln?j=m}29B@wx$IxL*C*wXp1)@ZF1A|M986^O=eQTPti}
zIeXW^FS=Il-e#!?<f8HdoY8bL1Iu4j(g`&8zM(=ufv#ctgM+sX_Ah?^%zT+!3tugZ
zWUuBML272Vd&5USi#RZ#V7C$&d_(yFP4_Sw4af&35*fo+=Gp1qS%nJ~Z39)lFOlpU
z-QMQj6Q8W;ZYIk$!MM46Z%eaOy9I4Xn_mzK2G`=OE`@j30ykdUqM0O1WT3cpVXX3&
z()hi-*92OqOXsv!7MQy-+SDo&GefLQo?fxe_J$H?5_>3@2Z%?JZ<_m`yyN;@yjWu6
zQg6>q!`gv<n#d17oi4h<W9poH^=D(B622(bNF@vX%4mynkd28yq-kqQ4!duVZ8w?_
zQ2aj_Y<~gp!|Lq5p;?=Sf4TzJ6&-HUMuPmf>(5K83kwTP_EKXCpv-7+Xbw_kbH8L1
zO-##!Fw)EAAl)1kD#8m{J0vp{1p>jHQ9l{@%DH1to<7~9T+QpM=3c8oT7J08Fdu`I
z$dIQA_elsETf%&aV<I2(=gH&*4W`Z5MA<u)$TguTR|eL*6}j^ZLpiM#IVfPzG@u|v
zz@nsuV&q1jmD35Ces+f&DacS~|LM5qOBN;4udr?zu6*L&nIFeY^<BXAJoJ6kfcd49
zy3R)Yo&{Woosx@UXlIaP0bQljV^{haN5!>S1->k*)!c-i8;t8Xq6B8lE-ghgDIc;2
zfENrD(diQJvGC*~=_}5PSN_b<lv)kulMDl&>)1EbS7%~#n6<y?7ZXf$(;Wi2=MW5x
zj-|?6O7p}Vd}<#gt*iI-Sg&y0xmiiJMXks!JCyma9WgB_xtev);vf6#U;Og^Cmev#
zNmeRJsna#H2&>UYmY`|+2;tpisUx_zK!zj|Q?OB)=Ns<RH$6EuWxcQjdv%79@2Ji^
zR(RUd(Xo3pgtg>65x)O)Y2@zgG#}UR`Go8A)-h?}%(2@tDL4VUv#-xZp)|aOWs%w%
z=Y&{x4&qFfEVNjJ9S79WLBAED>b16*h1y^^<HSTb&wqFYLA@hF+)jk!?IE~sQ4cnO
z4^1)YnKMppYCYg(u9lSFirS(LTkg}wu?g_Fa5H)?xlNzptYUbe#JzT}i;K&?_SwOw
z#)CsKPJQDnM9G?!8(#1e2ujI7fgbJ;ilT{Yr35&ytR0kWd=Nvj{zJB9SL!w5PzzNn
zB{EUbh~>l|88O9iUh&z#&$pkP)^-az87|mi07^6koF;Jyp4QE+c^M6uWkSSr@ovnA
zHZ&2(ZnC(1Szo8wlNfjtH&mI*YC$hwmEIIxHA^JhZIJawb8l5m)!@O@*K?15=llEb
zzQ=XdQ^+XBoEvtFvJ`cUwp*<}_-Ihbmc*2l6mv0(qJvh9RM^$4Y=#`QY50l+tMmAq
zCPJhyuC;#pd1J*|_-qmCb9e8f2G-U_6DtVI5UaJi55kIJ>Y;DAOor1uED>~LFz1(5
z`n>YWLG8695CGXZi-_x{1|*EP(CJHDR3x)2&1n9KgD0gc-dBAE>pxtUKM2k3&foA+
zzl`_Fw}xhEiT`k#5e{2=RctzSTzS>rCNnVT9Gu+FoIIwMe3TSzWd}vMi9M7u^b{eM
z9*krjQQ|JVM<4g|^BbpllOtfHNPZCL7a0rXIeIAP6WhRwnRrctyYZ`=&la3oTH`%4
zT>ITR2c>m716oYrPQ#C&R>iA=OMEKH095TBKkfs;$=Xoc;rSQ*>||8Yf(!&R`(K9-
zMTwe~8GfEQ&U_&`f~2`quGV4jc)J@2%z0^v=%Dkqko-LHDA7Y@{iB`AnzJsl9HS47
zjUD*m>YeXfGto4+&Y5^|c_=#Mri0Ly2DQWGZ3B~>DZ&WOc+1Dw7FgYWS#;h0?5oun
z|FL>gQfA2c+9xxQ-bBP~T&I%1<Lsg$zS_}4q%7$q^^-Ra`Y9)jL_|<3@ZOs@Z{DqT
z;lhQ4*V|sO$6)C)5{Lr`-SqP=IzWOC66w+g!@Rb=?xkslkgZB!$S0ud%wV)n*C>}K
zN<uI79>cYia~hNEN{B}(r#7jkz#O!qrE={MznJL|JZ#eED*v#0a4MGBXQm8XC4=~X
zoMCJrL5XMg+eOhfYt;w7UtL}8I!Ubd2~d#*HRGkjpjnR`uzz9|a>+^&HF)}Y^tJWT
zgKz((9}y+Gvy8VS7SF&0;g=c%2>cpesswDnajnk#GbF16_yjVj+7NDb+QF$69~FHq
z;Uh=Y@X}2;6&e2*W*H45CuY_eW0|B`-W(x98<2PzZ(}U{Y73!U_eYUZZK3Y(>+3U|
zdE&@kSXw<+%T{v4{)R+8sjQq9ho>;7IV!QEna0?b6hzYu6`mM|99<ji9)iRqbAG3A
z*1I;-d%i=||NY7OdSwo`f$*lE?Z;>cgWTr=XzUJ7Mh27?@;z=KkoNwe2bA9bKih#Z
zxb@X>5QOOO1Nk44@b`iIeIWn4!~6eCLf!^k^)XT(%c`mYG(|t0u&^~RIqLcQe*yVd
B=S=_r

literal 57225
zcmZsC19WB0wr*^7&`CPB-LdU-Y-@LH+a24s)v;~cwyhn#{O6o|@4Mr@wMUK8tgo=D
z=B}Fctx$P6aYVQua3CNch>{W_iXb51gdiYbYA{e=DHeo`g<l@1gQB<)NYy0n$yX%M
zL|xKURu+W%D+~hy35p5={*TDl4+QiF2;{%QARtnpIR7111f~3s3>XMVh#3gPe`GYj
z{C^&aFZWgYKR$R4=>H(*fc=*=IAIR>e}%!+{wY=m@=NT?gSC~=Z~y^;NBhTtf}~|&
zeW7WXDXTlG%gS&W*;vsV7~2?{(7RgM{!<Es$Cc|VXl3GPK<H{^Y3;z}%1it&39hg3
zKgkTlg#Qw8wBRLHmz5_Jwy`%MWTpQ}&q&M%M@UG>V{dHAr6?lypW<IJUgF=5j<#G3
z3@$D%^e!y)HueApCQeRH21aHEW@frC2|5QiYexfDI%@}#e}nuNj);kak-eF%qnV90
z;Xk+rhBi))yu`%+RP^7^zuW0(X8J!hSv&lvTVEYy_$P;fiJp<+zp=lH^8Ay^^~>JO
z<g4a?@cEc{{w4Xp(*9Eq55qr||6h&ycTfM7`qfoFI39-o9yUHWnO+JF5D)<nNfAM1
zSI~1ENMBXaCB8AXHCY#FY<(JPYUeWwXBub2cXDrMPvDAQ&`m0#a}IGX%q*UCpYv1i
zC(lvm-Q|YM7NR-0ss2^RRY&~Pcm^lna6HxbcsWXIfGgZrw3}G}TMdjl1TENi(0@gz
zVPNXb1Akhg{wMywvIV}?fc>$8`G2zn@`>~zW5fbh$&LRv+`o#0_BZ|;{C|Pv%%IeO
zN#qM!q5b{88}M(L3J}A!|6l8V!>EH6%;Yq}YWz=={|i+Wq}J;H>5u-m-#;Pzf6$So
z$Na0a%W@E!kPs5`@;MT|Xg!N`T7~U-_S{BwJ^wWV1Ym-Gm85)pQbNMQ1qB5%fB)VV
z+K+wr(Y@df??xg*(f=j1Mf7H=|20}U-%ysp{PGDIFsbYa*TcGOLqjd-v|fH^e$_Oc
zhaw>l#jbwWUT7a)V6qSQ+Uz770&;_ljGXj$)_!C{<7h&{UJ4V2khriAW40_205$x&
zz^4w;NB~OXYsv4-R`3ssI*dMKfpjq&>YtSs5T2tW%uyg>Dk|>!C>&9w3N#yDc(<IO
ze))b2mbMr+dK__VY_6h43&y)gF{vTR3KT@6AvpyPkH{=rrAP_e?c(xKq4-nPU*i+|
zmfc(F8+tL+_`Sl43PT*j23<NZCz7vs*m_f|mrev`EWjz2`ofI*>&*EVgrSk<SlWX0
ze(g|pl0{XgkOeO#rNm<O79pmdeWXk#vuK>ssuZm0Ma7!KH`_Ug5H?Gz8-J<=B*_(o
zN{bUmIlz=)dHAU22>jG0#YU^sw=%`UqoXmeCw^-9@0AJ9%P^(ej%`knVFI?cIp`RP
zQrbclp1dC<*gUQ|?C)KlSyaNo=M+>{Z3a#Svt>qZv9-wDVZIxIo%t}U*O5^Iza?@4
z1EFBAa+@7g*IPHx{JI6sUwx(jL?<5~Q@)8xpDk9B5fKUI<&oSJVwr<Beqa>v-uJ$Q
zZ0D#-!6V4R+}5Wj!N86Qr-`kaj-r7<)fRGx$l1iI_7E|9J}WT4m5>}9=SRn({o>I@
zjYk!wW+97tZLhF!gdo-ok+j<pYq@@_Gv4n0Nb@!+tQ)e<_IgYzuWnIbv(YXsCymVF
zOy9N+|EIZYsu!1PjFS+mhJ&<LchuRv15%cr^*WtTf+jA{W~N>=JOMl3ErScX75os7
zJ)LonLMzwMz7f{pL+p@{@GcZT`{lr1XsvgGDP^6H<0gc7WR+<v%RsB}SGdphX348*
zH9<*~`&KF{YM)PdDk#KS&U_&51c0b79m8NXG^HG4DTAsZH&JJ@-Zy!LIHwg0+_Rq1
zf^oxxuBADDk7LWy2?L=cJUB#`pg0GYkkvsP!_|n(%8Keja68_aiHmO#Gc?k=n&nv@
z#vuS@VN`rB$S;d@c>2*lyY=|@h)5tY%N2`wcv72g>+?E(|KMQcaKbDuKAwcY>#cS+
zFr~!SCfy7cW?)Fv+%3yzM}baUQ!{P<@No40#79!nq=fm(9I=WFeULr+xb?gfok@nj
z2veu$C*FEW%N?SH&y^xXglNwT{P*r#mC`0}^<Sc*1I#DMBNbGhb!Am;^~8@g!xwPF
z_^LZ}4b4bf8lWoS`jV28Ni{W$HVTGDMh~3RWxK9SwaDN7ctJtuj?hZuFfj^!XxV+{
z8sPf9nV381j14zR;s*!&rDS9xlKhhQ_en#0$uH~~1N;Patv6mbz80r5grC1Zs@Ya<
zafHVe9jE?huKi`#WL$Hz`pEcroXZvtMb{gT0+-`CncIsBjT(1c7NW&BLa;B*bddu|
z<SU!HO*%R@rUH@+hXnW?QDqKK{b!==Yn|7ip)lHux&;|!7K6F`pknOO3fta+7d0tV
z!k=Zk44`JHmR~)3W+{9`H1W~;QW1XbZ>VMgk%voqE)DH>lhF3_u_2?+)!s1!@BoQ5
z=M6IU>ftu#zwf2XG2i{DAu2!=gMz%wVPW)dr)anCth2O)7On8<z`pzG1o-BHZ+b|p
z9oQv#cHB=SSS;lLj2d7#PVIt3O=cUk_+LB*E#Kaw78*(4GqYl$RXE#jP1i;yMRPRZ
z2`w*)Ms0yq_0(};2?hjZD`BTYYT>Q}Q4@tOX*vkqEPxj`%IWXRB3u4|x^I@^@O{s$
zcx7bU1i#oT14sG>c|gKW9Oiy26?Wxgu{pc$Vnn<%SVChQEW2*_7dfs}nQg{eRpjM8
z>Y9&A+@-H;cd}$irrW6`<Y#)YS6sQC8$+!GmwpH{_Xo_UJY_EYIvdM<B&vr$3@G=N
z@el_xjtTL4&O&nyinhDjR4^~7nZ9m({oR#>g1pkxb;cqk1PosO_92rU86J<{XA4Ee
zU(^i?lYVHz;4?S0**fO{o6rOy8jI5nlg6W&%q1c=z+ykU{<}wc;g99tEg&KiC<tg_
zMS7wdGCjrJFuqXd3rz^@=Qsvw3NBNi{1YZ2Xuu>#OgE(HdBFA!8#SS3TE8D7cjs^2
z9jTWCmy|M*-OWfG%$b6pyvFbtO~P*6Un@gniSs<-J~9qciM=9ug$P7T(E$@()8J{l
zIb+&c0N*WqnDIrLtg9Av>`Z7}20FMyeD1PsYP1bm+XF594KY-u!7WNfCY*sXM(#)D
zTI{lTzK)1kpzu+nz+$Bi4Us|ZY>N`{sW>T4`puc)d@2%hA{=1trl5~aRepFP=rZAr
zpT+a+TE4ym#pYQtkl`MdAQG{2P=;Pb1P(6Ko{)nLTAVt*)6lJ~-eOBkb0`QNFoV^!
zMn>N4j?Jjv!G$sQc|k_crU=cW=X1%}z*|>Yw_eK>d#q&g*M5M@b%R=`%{eA#n{Z@w
za_K`!>lwHil9S1DDFAbw&IXV)WqVbixnCfal#Eglq@ifiPoLH2BoTxbnx=oQ@PY~8
zdnFz-!hMyO`FSD;bD9eS$S>GYVgky80p)3d@_!oP8w-IckZ?b8@zVqhg1v0!Oy^|_
zjhv`>h(S%GN&HMGPZ=e`X0pS>r0ccO$z5EA$bWqM28Y(nQ@U2a1d`BI7P%Axy7xP>
zaTsX7yPb-!rQky5o|4{XeHK3EZQ~B{^=9fBQd*69<H*_S@j2zV2Ej8PMKni*-`96m
zKKo{Lm#-46^RsW2?e$tGLXmHw?uR<t?D{lA|41b~UZB=TAMSsrrYl2aEfUrgn`@H;
z7DcKd_wb0+7kz1IDhOF-H1q{8t51ems(9o_v<dh+A#WrXjI!yYGUbX)Sj<ad1MCWm
z7nq+Gpb&fQxG8^nP#as#Eo^Aunxx1PSZoUm$bL$u#mY+kxn<my)}||oJYVR7rsd?^
zI-L9vXJ#4I-g<%YBO|Z<F>`yf{XViHjg&{qOru5{GqL}|YklQ~)IaVR^Y(DWGcu`Z
zp(~wS<>eGJF|oG-r!pSB6maIpa+6DFh_lGx(BXuS7T>z9-wdZ?B`Fn=gosmTY$8^+
zr1uFb+!Giw8quXTGTI)r`7}bcfxA<fRo?-sIUPU*JTWUb-{)ehim$S~M&Iralpw3J
zP-S=o;xON%XmpUvCedY9U*#Ebm-xnIY6WUMpFZ?Esy9uBHf~bh6Vd0^Rf#k|ub$#x
zkL^3$6=AS;4v_Fv7TV@)Z`W8~%$j=}?sA#)%Zj|}Hq4f)H8%K|$}0I-tvP`k>Eya?
zclQZqTE$xrPYat2>ebg1m)U3|SkNG5E{H3snMQ-XhaJEh&p}0sK_TFl(S$hwK1&&T
zHJf@&H`UeUX-b;BxS2Q{LjW@Uf;oANi93~DBG_RQY1&jNoJLT<(;tYa-xlN`!6u2h
z0@^}L4|QtAbgb5E+6RXM`{@;fdy;9;`dJXs(4myvFPD7y@2_n2)8P=xf%1y>YWmuj
zO`iRAPG=|>^h#=UWnyTpju*(5K;kLl@T5xNjm7h&o?H}CEhYJ~*o}=t$gx4-=6<o9
z`mpnbhrVKtHBt1>EUUIg4padGuhgjxsP2s#!t>&@rI$x&b$w|FUJ-)I>g>9$N<Fnq
zReRcKX^ERzBVqViw(1JMoOmQv_G<<vJ~*pl?PZ@xoYqf++o=p?jaK8VPAR#QGJk|2
zJGrE0yt$n+M^hlw2)f=!??oMuW$0d!z^}A5I{4ENpJPTuvyQ95Jj3EQ!cOc3DTHJE
zjr!8xZ@-hkB+$qGs;5v}jP+?+p1NURduTJe2E{hd7Fr;0ulJ=8W<lfH9O~JfH6rcx
z&Es+NWl+&to;IQPultaDEX68F$;l0Ek(W|sP*Zp^khFYPuJU$?mz$?z^vK`I<9)J;
zX;dqZAOthZIFwx^<-#6OOO<|cYkfFPV$XJXxX9A5v58@)<EFS2jEp*2ER7uL$;7y9
zxe1SLR(kNSWMruYv@AqtNpqOWkI3k`Y)oJ!toflNpCQa-a5^0L5OgtI7%&Aq)Olj3
z9vZuy6snm_=YXPOV?)xYQgPuVMBmP2Sc{3ZdcGWpxV;=470R~ZyA#vIhYplB_oVol
zY;c=%Rd(~JXms5gi+0^`Qd0|!nQXRQkveO$4uj5JR@1e-UxooDIpW=TZwgrUeZhmv
zHax0$tTyX4vV81tO`8G=b=EjwuqO#`y912&he?ozs8!nQ&EoTlQ0DXv9TzKn_RGqx
z6WcSKW?Q5QB&WuQP(2e_t(YHEPjC*#>n7tnp70CG;blUK!u5PEz!BVMsCnka+GP2}
zvs`M=8`Svq4=qo1Iz59Tyeu+Edw(FO7H`MMw>&g*li|OB=b$jNk4jg2l4f%CQ|5b4
zbv%uw0y2;c@+$Wa4o9xyKV!xi+OPtgDRc^#TMHGTvjJINx>3A`za@JGjeq6?#~8Xs
z6V-IdZ(uVCd2A1JKUTNP`e(@;=J#4i7~<}xxW!i+EEufT8Wjc(C(_wQ+THFB8o7st
z)8>OX{93XLSOtnx!3-RgQw#-qOtZa^d!Qz03T(FchHaREiuH|Tk0g&XD-MUl6D~Ye
z2gUeKs?L6J3YH!pxRB2g_fGZ$iA#owMd5QHIdV*A*_^j4#RQUTj~h(WjknX`zui7w
zFk?eHde+5u?w^b=a4z}oUyk+;7S#0mLkBjT7J4(u)##hyTD<Wf3sE^=66%ciTL6+n
zQFw&fJ2B!3LFJX&epHl{^K+%}@bK5#grDPCG+RDT@wB?F2<5avQKuSKh{Ku3a^9w0
zk^M5vYDdp9gVAWTj-4n<iHY<-eiCskYv{~k@?j3fhfFkxEyMc<mD1Kno>g^;t|71S
z&+SM}|1~)Wua+2+>+ls;s1(w*bZlm>Ac^9ZMdIBD!B9*^QiK2e@JRA}831s&R_9OV
zI2<O|?G1{GaTWDzK`K9(y$A1-3c*xGbQ1*)OY6`m1c{PK37;87$fiAB5`gYDInk)T
zfq@+a<5<Thu#If4JX0wZ<^Fmjgq5_Kws~j4&*<MvK@0PC8aQy#kN9=HxW>@+M&2ct
z2Ir0i&9CLyKu6*gnPGP*5n|o<46;Ud@@P@r3E7&SN0U<^>=@1ek$~$s4ayONp$U;Q
zQUHE(V#e%r>ezBpbhhxTc(Q{GJf3c05SsBa70V`?$GjQWdAVnmyn(^&&nYGxPdyi>
zPmd7x(}()bK2%W5g_BIksi7U#lA1etNfh@7`t;|{Y_%Ri1(*>A#OHDJdz6W0mjQ`u
zprveFJX26m(Cx=-wmvH_^gVTRPrUM4IsnIdiFle85(Q&*2F9qS;v3F)${6u!49^fO
z6vOG`68)nNK>JF=?+bzR3`nM4XvpaD>Q1560K4jm*plWANs7!Ip%FZnbx8mFILG68
zEoiwW0={@G=ik{m5$7M!2=PPsUh+r~xp0WN)B;Y)F(8NEto1S+-Fsn&Mx2&(={~*h
zB@to>q@VCT3>I0JuFjEQSyWmDt^`uVC8x4@6Br$Q@%X*-;0RMlLdq8G-HtY%O!{kw
zC}S(Kxa69|fI6*?vrE3>kSJyN7#N&oLKbi1QI@@C6~BMz4vCjh%}k`fHf^4@28!!H
zLPQX#*_t<&v<h7=v#Zd7=>oF7TD5IIBp7sQREtK%vpp#kzG>A@TDLg;gesRV{FSY{
zfEK7SBd7oUY0ZX!^RoHd?Y6Md{sg<O0ukvPOa7EQ5lcL5$G{kU8&)&&5@>YqT5nJ|
zk#GASP_pmkSRB(c(bR~2N>0?^FYUKs(nPofrxQndET;Z1?ii;+cx0?rkqF#|DeHEx
zberxvwT6iiueM-;VPv<D+*e~km=X7lndtQgS-fq+>Y?#-zqm!+A5IyhYt!x?*tf=R
zhVb_2D1u@xH`)ZB|AbuIr`dvtl5SpgB3HaNH$PH);yORq-VUd{`c8F@O0>N*zx#nh
z57!ukjIm7dM0X7Zm3v{MY?^DG>~+FbDW_q#eoagfu?P;aUxqG269DG#yfHR#Nfg<R
zaS>jxIxSCGGv<qbQLI+Bq>!NJewQel6sQd^sOiwZp0g~6KYR@(Ea*Ns!eR!IHgR>w
zM^c94?hW-HV9~{;u&6!{m9KnZxVh3GlNa3GS*_s$pgQ+<H2fD)_3N2&$jx47UDo>L
zFiCVwx^=rQAMn`6{^R9{+8Mp-$6PFxLD$AHU?A~@QMFnoOG>)5jfUChgZ8d0%EJQY
zP?9=DTpyKET6K&l1ef+Gr<z%Z>k+Z6)9&_Aqdwbu0}ps?&42$RG%@<&Om&#=6_32S
z{f*#cy(NEe3`pO*<KeRDMqro^LQrB?Y&6L2RY$IH(Hly^74J=kwPF$uP`*=ILT(#X
z#N<MJ9n^TduXn7NyrgK_bSIh2Io&QSHX7=L1~vAFdr+o(I9k?qVC-2ee&Vy|{%xWq
zLt4wXl9Xq+y;U7A@Whn<D>sW;1^XoNSno4V=@;jSH2mRYX7tTRmr$-VXJGVa+Z9pE
zaqnG%T<hFVNB!ZLciX>ju+#!RPZ!B3NghVCmDAGU`S~P-z6GP$#o5I9VmhS?H5)*Z
zI_(3~w)dT(?0=5VloahU>5j#ETP$WMDyRWWxk5X8Nm`dNcaz*|kjPDvUOqR!k?;3w
zvC48-Ovk}&n7+lsZ{(OMTr&LeS`tF}+L-(aIfN%CWb)Xr=dlX3mgi+S4yhV+IdZCN
z{(D#Gs>=6epCB90)7_g$p0WAadcTS6sxQv&Q}%?7S1E)0-V9)s!I~^^^u?zH%rJDE
zo4Wx^#hLWE0LC#XjPzTMDSWWRfahR@6*V=%ENmVD{N_*Hu7C>3v32aE$#pF^(>-<*
z<<lLF*DHRJuJrqpspkXePC%9`dsKkC;LP`yPrs1F7M8l0d$jLApomo$EK`Ag`fvDs
z5%R9C9HZ(O(V<fb+$=0O<2%rCNlBH`^V|+be<jNs+YIu(9)44CPzY^#@A&iAO5LYT
zekkedXKCmLVEWA6xC}*IC^SXq`#}t++jO2U@wFL5@GRt)NgzyVRJP&*a*kzO_nOKk
zv9g>FE&bWHG(tF2X%0duvKK((t~6{sr`jC|xet$b><?6y3<bOtKAuL7s6DT7)^gSe
zAQ$f@yU+tRwPxF<2;)T}xt;Fo>XybH*w@Pty1uQ-ravMI`1y>dKsz>m`n_H$>_kR5
zs;p$7oL9r5^iz5|9`guv0&l(kG5L8LXEIKWSFbV2Ce`Y+vDrWAxNL8#(s%3&$p#>Z
z=}Z>bTvlpw+SyE&CFuENR+JYY*vuC3?=7_hyq_~C=albLlO;+F6`whtr;YYEn)G_$
z<kj9yca1tXZf;1%et$ft-wf?)gKz<DERQO_TTMT*=y&U`HX<MyODV?1vq~4?ZnQeb
zQe?Y-7Yd&`g-&Nk<6ttxVW6XnuO|1Vi1$g4S~+%wfh}B~o0C+FXmfhkGRx~BBF<}A
z=LD*zvbgxY-Oh>V92}g6O2*^(2RuYX(cR95|0=)kse!7t+vAJF%<_?<d^^NM5BRoD
zNReq@ROM*SZ;~}#-3+!sP#*0_Zk;u9O{^L_Hd=-hs)T&lYu{sc007=&-|j$P87{6X
zJlJ<GpFI+7Gwu}OBk(>HMt|%&|E7XKnwLau{ndLlq*A!&>7sh;PvlA4KmHkFf7t@C
z@L={z{&*R378^SH(x#)_HeKYH+N8IAE_$kS)Qm6eG=bz96wT~NUf0?(S?gDg2dVc7
zKmVYSnx!v|0n|%*9}>_y-u>Me>&MvX4%vOn{qURrv{h$Yjf6j}wWE~m?x(4B{$#gw
z$Z|gF@Tfa^(eL!wV(){Vq;@#D55}=cR9Mn3<TMU35@(J;V4pAr9G#*Xam+`!!eC&V
zv*#L#ljRE^kz>70$jLR7n~WWnN)0(o@qs2*EpA3xLG{F;qWIM#cul3Q4NFv<Sh$9`
zg@%PCv|YA?gS-4;R{Ssp{`5UE#L^TVZq7}y-pL?vT3kc<9^Xlk@?^T1?!GV9kx{|3
z;xbIA@5E}ljMm}pMSwt*SBCm|>afDuqE42|knQvF%@pY2&Mv!zX$|mvx`t*wMT`^(
zibm#pR)@wc5*^G0%QeIC1dN*hVO{XCZav|`5GeU8?x!5&<Q~lOU~s8o4;{<aqENj+
ze;97_dON|f_b?cVRpQTn-@T*W(bA7YFs6_D9_P0w)qkL-T~34hHfZ1SeuKAm(W!ot
z3$kmuzQ1-F6)@X7P`)4Q!%x(-;f$u7=>NVuC@+(KQbYIGMu+>9`UTotZm;W&fUVPI
z$xHllnKQh@dBU9YzQ*Wa!$mKiKC?v}`W<{b<xx{vInX<y%B?sog9>~uCp(;>Re(*f
z<MOi28k0FgyHM!+Tk8+6;khAz+^ZDu=}Ijh`BlvDcK<c2i;6N0=>5StzApUCSU(hK
zq;r&GvoE9)<yOF@Y77wx^9-Yr66BI$MwXS`_AK^8!U=wvr+;+y#s0bndOj_WYEIYV
zAqdW3OY=Py*%GI4`I`TwiNKMKi>3|5MZD5t-l=KqnSoC}H!fv{A!wZ<8!JF%FSKk^
zf+*!wtDljG9xh_n)9v-*$;4+oZLZ7ABc9^df{JL>=?xF$58GiGhIl18K1uqvd!hKu
zA1+Gx_?=v*KLCTR!4%n;I<21Ip!;|fi1pluJ*^j_-AwrUj6dbmJOT_&xUV17_kxB3
zC=BDX&}y{F<=(z)!ja6!r`FhsYq0X!I<+aToq#`W6@p1{0OdlX{jga^40>DkcI()^
z-gjObcDgihA2$qP9^G2b4u-P5V|T>ya=+F5nyHO!8{+ahaWL>sQKQgn@H;{q{;+(6
zQMQAb;47zN3Bcu<5UUBN=h4Fkn{0Ow3&aZpM(z#$iXrfRmQ*dOO6)57B=<0gcmDL|
zt(CzEBAb`9he$b-!{ZjBXsJvFy%h}@OD`>7ltiX|;$uDpt-kL0`J9}Y8Q_JlH_EQ(
zLla*-nRqYzvK-B*9ObJy+H#bY51c$-Cxy#k#f2odTC7;PJ)ywzU0a&0AbB*`$epBl
zDwjVPWSqUP@qB@Md1%@);d8uUQ8@It#7AV!-%Qh$-37;htgug6KtNSa>fvCaOyANX
z^1R8u5z0IAF5*WFKxUm|uKhXNQHGU92swrM@fxP~O!#4JI)d==u!QjPa->&N+AM;d
z*oVw7vlcx<b>nf}BfjrFWy$x{gatSqh)jP`UD`<Jy%G-aJfq#}BIp!XQN}W4c`Pp|
zDjM|#eQ%&k1GTF5em7pO>1%(ev)d!r=<@CW=Cl4}nRa{{pIu7gT3aloh?Z{<gd?yd
z>92%PT|S)1jy3_Ns^21qRNXONa7QFt`93RNcVfHGq6;)11*JF2ejHPvpE9je+?=yS
zbM->^{^l3bGvx>FhTkxI_o^`)y!|W@8Weus(4+6TH{?8@7H&6V#4nTbe0ra{eXZsf
z_Gw3(EmaJ+Pad03Otm)9=zPBv$KZRmT%~;?eEWDcPUW`2pJ%u`2tKP;@v=*je19%w
z(X7p__4W9?BD$iEN`k}-#FG0k3iI^C9wC!X9zo`x82A9IP{w10xhK?kvcL;twwscU
zzTB`V<h}fRo(AZ1WpoaCA*468A3V82%49jI<I8N^Z?}7kskQ$d04sbxZpr8sXFWX{
zl@)ZoMC$eyTAVuwtbwZ{pY*C}I{i9_f9=G0CEf4Ok>L$Fg^X~}`K-J4@b3@mekv$2
zl$KiT=Sf!$srtKa@E@r9{8SO^BKL}CciCb!WAQ0M_|fgK!wodx&LKE+W(LET=~%v`
z97IHzy4k60+Ps4!D2j3udZ{;?bE+tG?l+US;=S&EPn0`R57|{}0G5?kC#&hX^|VRJ
zo#{BP_r)b7Y@Z*^vKR18=5{KR9l%wY#b-^eIT;ZYg7m*fuRq!Me+x0=p$(by0nZ^$
zg74J#o6U>FVgJoXoS$ccLSFv3;X)vj<~U=oVv^&xtpZu|YXaRbiO#nM&wbU<!76SZ
zT&KZ47J<M!gL&N&TI_in;S>^6m!98~zh{m|)5yULQ-je4`{U!by}VV2<<xznpAt0y
zQB!4{+{@O%boJ2FZExYoQMekZA}0yAU)3<X$L&aue6ILCFIH5vDWFv_M&|7l{=MyC
z(ZhHrFLf3Zfex>4P+;S%^RrD05(Q2^B19yg4FEM}6op;okG4lBJS=Nu)A3MsiD4IV
zKwIwvFpnb#3eATbbicidqk+Wk@$a<<K<GASV`nF?l-yeTvz~5j4|w6N+Zf<NN0-ih
z1p4_yo6It7r7hjQ`DFE2zCqjfKpvfPFG2!JJnoOHy1W489iTWTxfaQjjA-i$N?IN6
zk&R~~U7vs6;cZT{zQ-dXS)<#YB>A84-krmnY-XI?9z2Jl{FS?gE0|GGI2~%5NCoc0
zO?!Q^udXdFi+!ilC64BQ{3&<irPG%-cF+IW8*z_f)dl79L*#j>1#?84pfe!ymN(FY
z^|)CuZn5YCKG#;y^4S!K(ATw4zBIa!Zyk5l`J(-<s6xTcj$<Bfb4u`Joq@Dr4m9CF
z+D+E}i3&FCqOUKUQ>`8R^ke>NAmM`JJbXurbWgwK_U_I}HS@J{{W8M=S8VBh@_pQs
z!&D#A;|Ed&Ij+L9>q{a#VZU-|z~G=$w-j<<w#}eNzCl|)_gO{kGC<JljB$Z#DLK;B
zK;zh-&~moL%)dvL-<AH}ruRDWX3qn_<L76J<v2@dlz>EI%IkqB(B&bukXzNfi)z!s
z%y&8BabH_pqv?rLfq6*+U$bO9EPt8UqI&W@2w_l1S-IjvwK9cFr}a?@ZLX|ySYlg(
z<OE@E7!WVchjT<9{dqM=vFFHWKi6MY{a8vysJ}{2kt$IhvG<zolSR6u>(fTtlVY|0
zwHgl#b3MgZ1-aIWT^Jq=2cc(M`U|RVH`{EEvth3~KY?q;g*ulmYj@*3q}}G2Cnrk3
zK8w??4Mv~Vu6%}hpLhtBKAu->Q1fd6VIHsR?;F+PuYW~}^(k%Y#(7p5>L&za?4H=I
z?>bnF^_4IkZ313;_nt)#z%9w-&(uAw;Q)^OMti&M2&~-X+}q=+b;{2i*ExMA7^)2F
zn{eajWX1gkD3bHoU`VRUI3p7y@yUAbprU^i#;~pLd@>FSIOpyr+e83@>T-iq{F4Pr
z;#s}opP;W&rlwVCiex#;{GkD>-FZQEg?d}yCVjy{n~5lcGu3)};~9LEM);k2C1SHN
zk;U2#xz|0QiQgM9yCb&Gs=EpTILC$%|JDJfN)mHyO<7QJ?o}%_Y4-S@hwGpVM(-`K
zOh<nCeNYC$GDOuN3{1FBB5-NRI1M?5lBleIr_+S9MP*Xj<YB8;n3%la>)HHMH^nEc
z_i(|E1>7ER4;Cd{eGI~kN-*d{QW+B!>n=#7;wm#p#WwJo`GdI_&^N5Yq>aw!FC4G1
zbe9XzJ1xbb9||#_WM&L-*^|vzdEO2e4gX#aVh9X37&rgkcXD%%_Qqlr>3#)`&!OD$
zv}R$$YK(%9AJ*8RjI{hotI_5h=6F1<yN1AP$8s}G^jZeetAc_w&XaGlFp6m3-P30v
zdhQq*ZepZ$7zWPntN47pMet4u{|*C1AS4V<28$CH9tL+15!*DniXp5Ik(YTG{(j{P
zUP_Oiiw0#3W?q+)AL>Sb$(IltOXd>MDPGAi!w8`=RWi%yvq{?^zlU`68nM5y`eRF6
zgrh8p78$Q{Y~A)fbJnI>@E9JWEPEpI$q{`xK~fB&KbWN=Tc0d}p2_Seb#ER9$96~R
zH`Ta%{Ax78C&q8#vZ_svpOa><eIW!V1DOv4D$rGz%1n=PEgK_DJSWHXrE?FgPV<pQ
z-1~>S^g6HldW(gO8PjuZm_uf0pyoXKNXL`n1nreQy1j?qEDkbn$D3YP;OB1cf+t&p
z6DzCY*jY!^(=(@9gsVZ=JL+A^@f(1vo>oKAu5k*plVALwa4O%^BmnEIV|`^N{25$M
zKk}12Gw@7Kwe*&y!v%ev<is0PnmisF*c&z=>!o7&yg2#L{g8t5_=`utk@<?se3W5X
z_k@?KblQ8cDbnR&2jSA%i@!xsWBMkZ%BON4*{A?2-Mij@WjJay*r(#cxO1U;s2wA8
z96BthV<K_Yvy;<=-)xvI)k8J?-r?Wmt-iO}xC{}fLl@xj`jvx7XprKC+#jB{|GoeF
zmb4S5d*S%nzT<M53OeD49jIa;j6`Gls2xh>EQHgo)Lnz)T#?}eD76}A%Zp-Y{zjst
zorX(}u04#U%Um9$ENyELvZ3ghIL@~zi4+1dBkMoNds&PI#Pd~rOB$_-rRil>y3lxW
z?f#Ahyy`(QPn(|tbU3l{u_(4Eya)SeDj+)%RM@dVHft7K=;60FFp~^QPXw%H0<7+z
z4Llg=`|6v_;Q3dXZbyVt!BZU?*(OX;TjQrNTkqF>Q)L!5ol9=WGQFm&i($2904Lzq
z00Ck^k1^lN{5QVVr(@{ga>d1}G5O%2t<?e!9A9?9hR`A<L~C;>%&pSBHDxfEJHRND
z+bz1zEqh(>x=p`qFFMl5&sa&r*F3p9mo0CifG2$Fy3ZGBc5rTURyl@;DrKfy%?#}E
z5^K>N5=su(B=a~wt=6Ji$hu`O;C;+M_|b6F)(2t6KoN`EM){{MaINI-8u#0Ia7^q`
zMwIM?q^{5X{e}zwafCs3XMpj;>co#OsKKBJYUKHZ$h(6tE5{rLU7x`8?F1wW?v}@s
zlZuJu9}vS)(S<;6v8~F*p+84obgI=RR=R@nS4CTPtDbe)&V=9YKR6fAH|T%RWKd*t
z36Xog)FORk)G|PWcfZYy|6OAWbH;Nwoa+0&QD8NC_*h4iy<+NGg(Azr54;L_BWJ}B
zf`H@?=y`jAUqDUQoATDZUB}Rzw@Z#pLB~v%*0;?=z_F{PO@9Jc#ceagW5k22jgDy1
z``SMIsFw%K0#Lg?fNk0i4+ru@C*@ZCFiUTPuqc{kyXKi!VR&6#{tHw;`1C!;(O%y*
z09k{-5bZ-5Q#F<6>wo47VmD-+igeHO^J4Gh+jI${NWhzHKt&+`#>wCbjSP)jsr&Gy
z+Kez?yp0nWI_5DJ$i@z~>VQzCk2J#BJ7vghLrlL~b0}`HJVy%ji&<+&OE2<yzrQ2R
z{Cx(!Ndg^0SPeSi{DjPs6w9X7^!krQJ;qS3f5-JMXeE)^K$J+8%^Z#pSB@$tW1d%A
z%(03ueEf8llCWJySC4w>Q=UB2R!%|=t=@!W#-UmqTba?dDu@Vb-fqA1PkB`*ESRqm
zeH_;Sf-ntL#=_yY^d}EUR66E~48<W!>cayL3#b_MLh3#@7tkPWucjrH9&J2@e@w%(
z36{kHkNY8E#$`P$HOzsBWk7^cfV~n4*Ac{2?C=a51wH1}o)ni<pP}oPYrM0wz<(+%
z5vMj!SejeKjlB%rv}o;({F|X`Srr+@!-8$UZ?C+!ckZ+$!=4>COPjP{NFC(|ZeL7p
zj-*i5)izE@7h~khW%1YPuWo8rgYI2^YO?ex7^aRMaW5@ARi0}Osu_+jE>DK!Vvs$^
z$V=ha*u&#nQu{Hk&K?MBtR>X9JsWV-tuJc>#&cLejz-A`&1j|<R*^RFZ&bL!EGE4+
zt#Iv*8W>tl9%l5Ng*_1^H)7!Pfl+WwR1uDN6puIn9Xsjd>lUzLtJx;Bmo><;H2|4Y
z;)=X$J%`u3cWHTOMsz~M<@{^sdphF41a@<KKyx2S1+B&ch2#i<*Jx%Jc7~*Ru~IP7
z2)vc9{xV9z`YUI6S}POD-ciuyvUvSrdp(g^Bai$^1EQU4*U9-#gEW43H^uAcptUNv
zajx;6lroQ9B&0zhI-0|X?0D|OV~{zSAno&WH^_vVVJojFvQ%}Dhlzm)+L(Ua1_wbV
zNyh6wWP7lKy}yAi8QN)4kzgmlJC$6GdbQ~ndKv`5-7uQ@z-Y<P%&(>@9pjDG2Xn=Y
zF4^}=%?3^S)_XBnSZOg_6Dbdwj%k8BIYEX(S@!yovYT+0E{CJ>=>=XOOO#`$_|?0y
zH0Pv&U`Ki@)7C_$*>r>(-|5&i^4-Ly7Co3YT~3R&oUiTFH#*%`Y-gpvo*8R<&X*YI
zjgeffe%#AQ{PBy0Rjah%&;$j+;#j#SILf?TyQgcU<c%H1rbpcVf7=|+ZBN<!ll=ct
z`%;XTWWMA+(Pr;g$;k_T2dWzE)Y_<;0d4|V_Y9f$Mj+1hwi)04Hu}myVrepxfT9SP
z69i+KA8~6+>@a^6=yeXsoEvT^i$eVYhuhc*!K0ol{>V$0<_A72HR$f{6Qh$$yi$^=
zZEL1EcB<%%ECXgT_C^4wo6%(q#1@Mc3R(yACgd|^mC+82`EFWVrw2+Z1I-f0dD)(~
zc39}eMoKmzKkD)a39d*Pan(8R*nv@61uj>9TsRXvTw5a|95S1&4QB;LAxMOLq9|-a
z22Q^#fke7dTa`7@x}q|fb6R!xAZ!oYtth{^;3yFl(8>{^)e<6ae_v}hSqH2;-swoN
z$k8#s7zN7&-x}o2T?_{X_lbGBK?Z68#v)!F^7*EoJ&HV8chF!e-yMr^E10kfrK~V7
zBV^J)Fy*d4gxP^{FU5P7-onu0EHN|MU%Ol0;+-~UxtTu5$m?7NyB!%lMSDOAsCUo=
z(4`cl_u7#MJv^$5Q@={5PAZD;5dCHYgx}`_>_vZF{h`fGsch4t?Tyt431}J1j`s*{
z?Owd+AiVLlb0Buv@@liT*X?4G4nn3lR}~LJ<^Q6s<|H+jB=zx$h^0)zl+z}!Jj>C@
zC@T?f?09@Q1v^!LUGpf?w;p?LDDxlgK-+!y3qV9}Ayvwb*V>N!MPkznze8d)!Oz9K
ztYw=+mdT(4csafmKx-~tmw`Bu=1*Qd4VKaUPAmCvJVQ_<tGD0)Z{79)g>jw&)t7pg
z5g|YB{4(7aJ(8wUSLlGLE&v{X5UpXX{zG6pyLyjPbOG1f)Nrvak3$XFlEq1TBKj-@
zgHKz(ep*~Soe(66F8Rz{FeHlC5&7GY#Ute2GE(Fy!4qyvW@>_Mmqi4iOcO9no$=}j
zM$WpbEPZ>FO(A)Dt5KFTJTkQk)NK%W9I_7mX9_PjjSASJb<2wewYjGi!#xM5sVUD<
z4w(x|Lds1#y2{&-aRz+p;X7RPUE#@&59bH)P>CQ4WQMmV6CI3gnTFIL6QK4eKX#ei
z&~6UPYHBtF)W`c1e_R*fEq5jVL~PR7)bwEKxWXV8X{m*vLe!O=z`X<w8=XtfzmUO;
z{*bU*<8wTTBpSEq1VvaA>vXB930TDEsuL9$SR{Uh<(2KuLc?~+m_BEpBQ=Bl${}ap
zwFu~(>Xw?w5{glm+x@uo*sBSBVBmeTbI`2HPL*!dErxU`?7k>r!G{B_E~qcnY-Smg
zEAjwSg*~Pe0gfTAF{ajC<scP)FoIh`$$8D>g!kRgoB^_ZsJ^bZP8&q_X*{QqU-cj?
zr-kdG78hz+iYQkmGaGe~Skrn^yqrx7WVs7YR{1~Q=K9)M7Sp11qGU**Jy}}xJw@Hv
z=9PL4Gi0W+_dE<m{O+?nhPtIwjHp)+vZH^V;ABr@ha^P?61Zsl0ke*x82KHwLr<r3
zLwIh7!ObN@lI&BWMxdVx<(>ZcsOj3JzOnAvq?F<#`<+=qCD$xk<*X)@)E75uxI8rD
z=nan-o9vr^;(85Dm~TD>?nOV$QYmGdHk|O57<KSIVifE6Z@!@MIU6-w&NzdC1%J2w
zT)$&zuV9*02lGkqypS85rZ$4w^0a^xOfXARx#~mW7BOqr;>f;UU{B+ft4Q-qe_MUc
z3i@Y`s6*oNk1;ixa-!`nm_w$iD2`%8tKv%Fbsbvs7)A-~T`y@wW)HS1>BS$JwckDB
z%r;nHwmc-Imt}StV1Z?+PCB4IyUYX~jeYTHm{>T!9SUSmS19t*;6NA0_ORe3(||i#
ztrk)4nL`P8?oq8dng$8@%sY&XOjhmmm9VG$v~cZ)kH6IOc}MIyajDouNI=BlY*W}^
z-^-zfe8?_+?Db;u6hADgsAz53I3;qa)`McGg4np*{<5-j=UIQ9qzD$qF0_*Sqh$6M
z4Y$=dEb>3{RyLA#J-?+VaG#xqyw*s#h$$+mjp5j|2S!eAsJNsa5m|<lfKRfCvLw{Q
ziHSetv_ffKZPKt;N7+J2Lkj~EqdeGfX>{b;jNjJP$GfcTE}ONQoJWV>mB!nov#xQ-
zUZ=;gyQsj^4`=7tvarQDO|?-8Ym|JIfIWf)SEDr{0b7yzAgW;>g9{A~Q(aPguUqO3
zmjhP_fLqDK7Na2~pv!D1#jp-X*FL*UAP?iAhDImCX>y5L7HSrv($oh8Z~W$^=TV@P
zwkI^_O(2WOBEOQc%@RK1Ty|For&AW=24Y#lI*xHr^hS&5dF$WQ$9l&T`<E;DDTy!A
zg)-#YM$>ztHL&hw5SE$?Q<5>;c_s5cq5RoVEWI~@0_P2q4*4&S+smZXA^q5&$mSK2
z?fOa6?1?mNQih$rU-S3#GMh1+d2r~^WLb>ft7b<62dBu4>+7V;QlBX*sK_6+b@nR%
zu(t+6m!e1fA;b44xvx~jau8Uy>lclZjwdWF+K&<p2Zg}|lCzVGpMtd!{1{m<$&rE!
z-9uV|927(Gx+4e+gXqj2^9F^4CTtyw7{z?Mr^bd)t$z_+EYau+)e(P7yjaw`sXoZz
z>X`R;$=Xu5Vr{RoD8nRja{(G%UzJE$Y#!TPAtN+z%~u;!bJ;dsJK-|hkQKYKkvw0K
zI9)RAYNJ3wf8^Odm9L^Q9@qf`eP|ny1v_M4QGiHKXw&{#U2Mt`yfEtob?ygnIw!8M
z6y`ST&60P9w<krs=-sZUPYqw34*0`2KiSzUVOERCEDBW2xgYV6+%R%hkT!=`;l4&v
zQpENeIrr%+50z8bjN;4t-g&FXdMpe@6Pt3PAYPD}vpx(}{6uqe%Uxb4Y7Ns_5D`9C
zO&7AuI6aO0^2hYuqZXd_1PqaE?}4xU$A2V*mtiTi(a;Uo!mWfYp}{7cAqzVH*4LAd
zc%h`{==LSXWP1ZOKPUM=QCTZnx4d6_aIGs`7+Hj1m<VT1ma3z9fX99ISP*f0(cC)z
zsHmg}GGM95bK#Nn^*BwcDR@@RcZ8=Q0YrNRlT%G;H|eg=g;1RL?i5PPC}8`DH8}h+
zb`{`dMO1DVDr(~1-5^F=;yRNEBHWrUlOTu2f9W;57jh$U9E`Jx`goF>%Tfk$aj7K$
zs^6Z^>DX{6R=L+sP8TfZ%hE5ibCBH)^A0C{t%sg$(Me0<8eB&d-zO6JNf1uLHR+3Z
z9-P=sYl&`RztL0DF1#z{=3Xe*G(Q5FzDBSM*J+=TS9*|<JtF!(B+6+ZzKfy#nnxX*
zTj0{iHo}wR(u#MU7P=hNWA>cSE;Ky!>-=asHZzn({K<7BGw|msG~R3}1kbsq{plmb
zzUSrW6z;nU^;x-iWC>{U1;7XgrR7192CRsG@iaFHc~ZpRfzenPSlablW>pU77UjDS
z{@L^X)N7Tec$$`SjY2RYH%xhvwNlsgZ@*mBR$v8gT;q&F%$DwX2G)54Cy6|J({vyw
z;1yo*D%|;JMA-qvUTNJ4F0y6Gy~U4;;tlisLd7sQJvx7KpkTPtJef5(_v_Eh*N<1D
zhw9Jn_k&i2<orH-DAVrRo+;WNf`NE32)%a8B)4ZaTceB_e<oz}4q6gZ9voAGA`pHJ
zK@~Cw7|KMj+^xp!rU}k=Ff9erJgvCsZ@zY=|G55K=&TI&ZB$^HoqucBu^FcYHbNA&
zM%5-Xjsa|3n%faA06R4)${MjmLkRrnNnvF+P+J*EMc48mOs_b%w$@0Q29z%!{8L?|
zQ@m#-f~P|l&HepO%HZILu&Xt3tfWQM{1v~fhmWLirqD*Z-2|4jy@K4EPY%}}l&=KA
zp-)H4skqky!W4ez@On5W1G2nvDb@kQ4E(Yc&aOr()Uq%2H1g%t$SQD6mUj1k1U~nI
z6@jE4C$wIidl4iN(`g&)El<Pozj*S{<dpN*4&F<t%OA}sNVZR))^N*77@>Sat13Jm
z@^YE3R>?P~wdc>KN`hRjzHH>-%9sLhwv0@f!bWeHe^&9#nNU7TR&uEaT>-~&V)_hi
zkYE#vAO>{>*RinR>Zw6*1N`>1mr!SKMSS*HNJN3B4h^YAbXqs~>7qi-2K{K71ZmH`
z8p3Ikw83uT_|F)4ctm$c^l|09<K186!Qzk{J0-WTuSeLM#7c4&Dk!o&#jLyDzl+1{
zP{ZKTZOiL3v7~y67x`Ihu>p&o)hqO$<Kh%IQMzz^ycTHblNc8&f~BIJsID-Jaj@h@
zURQZ)yao(|U5Jnhd9L21?Vx(}-{)s*54J^z(EMI3fiRV|bm}$oU8M-oXx%5S0(w;A
zCL!(-+>A0`tg?G8f^&;qPM$A{vwT_5ha6M^3V``1^pN}EW?)VZVP-A`o;y-f&9lpN
zkN7BAat4DqK9kIZ4Ng(2m2Yzc=-fL9ZKwhW5uNpLi$J8B>0Eav`b6O9qy#~X-?uPj
zjOEWB+|x}D<T7&4X>G2B#pCGb+n1zt8{ZxO)Z15^tsY0lhmCOO6u;F}lU3~I^GiF9
zc#i3xzGXkxy4F-?22L*~pNY^W0zTMmM&r}1aSLfe-&8RspV!|niz3$NP7lS^6{}Y(
z{-XBF5tR8&|A5A-8p5XFb-y4P%4QVm!u}{u6MxMgAo+*ZhYL!4f^`(qgcwuj4*kOW
zCkBxjt5+1CjlLLTVZBsNH`RY6jfeSrO$!oGp{|r&=iRPm7gXp?T1w8hW(M|^h}srp
z!RO)2x*9Sv!LC!BWZ^mqIcAYkycbQ73kJjO@=eBe_WflEfh@tmz+khd)@qFnk(%(%
z&=l7di~(=X=#3}w=_>W}xXmz{FpocN-+uv5nfC6?Ik=={>mqb2Z~!6XPzF9gSf3{3
z8-?>=^vfW3Y7yZ*CYPpRctphXqbU^H`*bh8W!J$0(w+}xMQ!uOYQvfFId`^{s|bz^
zOadhf-Ruw5oR68gA}ZgM4>s3n0mRV-a12sUoE&b$rMlASL&|0)%H44uwf3)%k1CUT
zi{xH(zMQDE?bbW;h#SdgA%*W<kQsCVG9be(%k%MsLucf`SV|c0jN}J-egM(DLUHDy
zog~0H_^vF}ojBiDv?>3l?$Y&|gnf7G)dzXB6#vXCB01$+`O$|TSkH6ay)la)4EL-X
z#G1i$x9$+VCvtZc6E1b3Hwe*UTCo@&5Mt9=`hf|4zIbFT@jC_ZOSjT)8JQarR9O^7
zwe$DrDhy$f?)av(kB|Y`stnxf_}{|2oK9CrTE4836(%dw;{8f&aYNPkIy-OF28xWj
zvW%~r7U)bHAE(Y+-iqu&QR&s9M2_NPyb~~`9S=Bbr~uxR%`bzL?X6VJDGMQy{Nx2r
zDB5_B>uzGY-L4Hj!%Z*0oBhy~K6CTzj*MaJDRQTfrX;bP&{S`e)ylV>Fyjz{l~Po+
zyr1}*{dubi>9(=8L@eEjaFa=*q76wWbEc!5bCdm+_hh%DV+@qSzyD+#EwboNb@(zD
zYL<Kvz-{d4yTx#gmlo2u=rg&;zF5w)b)r}d$n5t=LUvF>?oi`<hI8uCSsUeUBYmNV
zXympiveR>o<zANe1RPh8uVkK2ZKVC&#pUeo&S^&eS#pMK9_h4kFZnE1!|g{lWyz!z
zVq<xt4uRw%uTNLSA6SD+U9d~*SL>7;ojSNk&l!kf*In-VxObLVCqeL-BZE%x1=35M
z?wbgj7_@bcF<azbB+^Or@$YWUxkC?wrz5ZwSwwoj-YR;^#Lw@DYUD8?Y4kFT3DM@z
zJ;;Xz#Cs8#klSbkJ{fw$LVA1$Na%LYc|POT9OHgZ<4+#*-*0;XzZj!FFi)&Cc#OD^
zDs_L&=N}N{8a7fx7Au8q{}{#K9|PWQJPU-*Wp_BSOdAF~*A`#D>kO8`4a9GrD8EC#
z3|^*}MI(9|rW!GZci0brah@K>f8Csmo9X4|A~EOuq<TL#`Zb1A{i(LQXXLlkvFRm-
zAWfs8&BXayF=x^6`!F4&5r@kNq5lPP2CIx#hr1y@Q5s<Mca$kXzjNiaO3=3)OF<!*
z1BXVI;%U9q_F*bJ|2o!p;jc<*`ZcGrb;!!$@01<3_aVKMjf>200&Lb&N_9OPGCf)%
zW%P@Oe-wruCDnsI#qnRB&^Vfo|4>(32bZ2!dYSLQJYR{*YEuda8c<4x*$qNZy=)U?
zPZ0QE?o463fEDT)<~aIwD?ThqwUR?gu1Os81(dLx2nG=1R%*7$f9B=)k;0DaawK7U
z;c?Rk1wP;~lNDP1J+GVkU`BcsX>Ju9LXyIa>iOMo7t+T(VUD4>%VZ?LentQ&^q;yP
z(>QndbYk-{^o@Yp({(^0&tEK(Z8ru~B~swyMXq!fnD@t-Q<s(>N+;7x>hiip*2FT<
zx?{=lZbAr7FfKtwJ6~iZ;!kQifLuFy3Ll0v4-JR`ANFvH4nCYoV{oTJPl|9eSTE|9
z<U?w2P#g@Upu(HwpIr|Y*lip8TgW9?y7Ds`5TumTPiLt#f}(eZGH5Zi85PHRHDs7)
zc<T1YZj?!SQ^`<1LcvobRVy=IQntL)E4Gf4t!Rme<f>W*R~Wv9KlVLi7qMaDf3IN4
z>FKGQcKI#|JWMqI*;~J~+Iw;SM2mL!*K7|?qt=seUXX29zQ%Prh_TE33l^f;EDieo
z;i9R@^r$bIZ$?F)B*I?F>qsv1UQ1Y+I~5v^z$|@nCugY8{*JC`#3-5<RH=a-Bz+(*
zD=D`==A&_i=?_IpF05Fyl*E34NM2oWX`{10EJ2wn89B%O9J|+3XEX(Yj|8&22@Z4J
z7J=t8f5zFpp89ug`7Bq@h<5%<qsZQUKmJLMcXT(`@x506-b8etpUat5W+Xu<*2gm1
zOiVNQ@Y?9!Z_%dcwq}c5WK^nZsWRG^&le7T-}H6<4|#9dmDkd&3j-mzySoH;*8stt
z;2zxF-QC?GSa5fDcXxLS?r`or`|PvG+WQy0?-v;39&>j0?2@jkuDYtBKbbh8NQJbF
z*99H*Ot)C`EYV@ETq?a(HG@)}im57<6Lo&~>G(LLXdtj~-PXf4pN>`;6Mpx<u>f-7
z+?g)jhDJszln|f@*jBC6N~JY_zD8QaYqG<*-EuleDsA~uMX+tyw-uXVrfSk4J?k}m
z?c^ghBkS8~?1DMYnDBgih{%;C#5hVf^&(nAktgV7RwU$*rJq<*4Y(R(+ZgiFc30)X
zGn!@fqcGl}1%~k|W%QBLfl5yqmNl1!_bXaM&}`Q~G7bqGN2p@N5oR`eV+;v4FJW?D
zYQiZ6+3iEu{$$rzLjp*g8D$U|vS?VNxZZz@K+aq-Rg(-NPp~C+Zz#9We``&#?TsNH
z1QeE(A4Pwmr#Wu-48`Q;WW2kD%{;b2*AxwoMIs{QvPdxpT=r+=yso*~C(-iUC6b1r
z>wu9WCbFsU7KZCra@9&rB2Oz*YXiNYi;-abETA5t^&K1uXL#d|f;5~lT+YiIG%3U(
z=U6)F<S+Pgd9g?+CsjhL%8gDQ5S36;-a4Ab61W1FIEn4K!1p_PlpuX#3KnhmCn+JX
z_-Bf{A_V$3XtYrzDEx~}{>F!gMpH?k2~%feqZsR3zkQ;J9jLF88g4FIeNOsk%eTwm
zFvw0fQzFBHdUy&sfhFID#HN;m7NZ6yYv^KPETZb`U1qRU;R3y8`V(X)Tm)zv4{asU
zN~gch=gnc<8}Cx_SR{nI>@q-TXp3#Uy&4?FHdX7cF&cbdA*?_dOt|Z$gE!x0A{P;;
zn*J)n_0|u=wjx9-jW;nkIB5lYBv{s^l4r3@@CodUihE->r7$agD%UFMAj?ZwYU%E9
z?h}X_8EAegGGnSJE_yYsu(fJNv#>|%owQ<<Sw#!NZKEV-t;Ef2LeRO7m{lASI49yy
z5Tc_hrpWK4{q-_i`a6LMS3~65&i5V|_$cxf%~$eAp^E7VMc7sN6%87mOWy!x9$Eci
zBEKvGUOkdVY{=7d1VlATbEQvicdup7ms;xF`zTT4>+pRi<st&emu5)G2ad!Oa%@U#
z@_I2W-cROf`-YaTNst|cfQM_fv-D3VzzFzHg9$Zls`PkQL9zX7ns0c%$5YG}W=nt3
zkv|jnjjbz#@7l`5X&7~0l|Sh&mG1BB`!dn}mgj|Gwq)gT1oW&A`k8GgXbNgz5`2ZB
zD!ZBaK83=Oen>jUPtTF;E}tfuPvYEbQ@814e5I}pna(f6sd6FuuDXR_l3KA63x-w%
z5<aOHTR*~ZuXg8nPzk6mv2C|;Co+LJ5H>DE+bd!w+bdoyuDyb-qvD5>D^Pc{CN1@?
zxdxXuTh8^Y-f`w-c+7_9tCr`(mQgyBZMD-TBrI%#+j*0M7auGYYrEwuXN-b0mx$KG
zgo4U))LmdMA6x-l+YSEFa#>cU|0#AogIC;OfE%2>gp}0WH4Fqz$ak(&2h96(3ESUa
z!HZKQ-ycoGFo)q8m@r5V((Mvck@Df5&i6;JoD78%p$f;%+nA!YY%f1w9UW+o@YNJ2
z=OGSc5Z%9SXwug-cc4QRC!**A$|y&=dg&ds;Kw$7Tv8k86<NK%u2y!j3Hnf;MseS3
zo35vR!pH3?1>DP&cWmJS?q$l!+<$Y8sR51;LD399LAZe-0N6;*CxR6%2(a-Lt2VK+
zYK@?4hGW~+Q4c_seEd!nA6!~f3xBrDw{^DzSOecNU`>aB4a|*2wqLa07V0h3IRJOq
zbzUzw*K}8BY#X`mR`V&NV3PsBesGC^iZO5u_R&u%z*u=Iy9`v4w*}2O<T?U^AY1uD
zTJBpEn2h?`x8qNnl-)T&creY^?1$S7$<|_1Jl5@_lA4#fCfoeN<nUe->G@=1L!0!T
z=K(FZiP-wbwH<p|DIE(~W4Td0MK`yhC6-+z-y#{MHBgzJdC!~fyG%J>dcB{6%A4*S
zN6kt3J;IGJ75V4<1x@latS`SjJ_ga{NuVE=6XT!qg+N|j-NZ!=HfYOC&*jOc@ANXi
zG%>1B?zHF8k-vZnpDIBFlqK|6on<=Ao3N+fIX+I<$vi<9Uz9igh)?&p!@Sy8zu4?-
zaME>cN>k%2Vex*Ir2;Y6PG8L3@dV@SL2x=<{L1@$Dgp3|6>i&_Ry`(OZRZq|{Ho5g
zOUBF((pW75DV5{r^Dh@-&-?nuNycDG4<GEz^|*-#ASh3Jd{jsap7n;mhtmiq+*QNc
zwc>F*BRFSYSZ5zV(4C#Hcm;D`O`h0Ji;@5GfqBY(HyBYq=0zZec#_y?H*12ZH3!c7
zwkZvQ_VW{b%?K0EgVP>r(#WtP6~m_nEWh2XWI~4<QjT8=3BQPEaiqDooH-7&Kh?$;
z2wn})#d*#-0hcF4o~DC{nan6k55&GB(L=Pk-lEKfS(2KnT~CSNC;oxhAaiFy1hpY%
zT?6~E&nnLK0;uNEE8@@y`7}cqLps%Zxj!XJjzTG;Sks$ojjZ{rP+H^`GqKOS@u0=e
zTDq&+V8lT-naL@Vk&u~Uwa$z!$7QGO?igIL1|@~XjJ1tRDbi68*gwq|IhJ!MZo(rx
z|6GpKZ;UhlWT~d*<?Tc$h1G%+u82B%z0K_>&0WtX#*u;T;l(Xm|F(w}$6a#nEzbrE
z`oPx^T2@vi&xbqW(cgtbU^vA|F)>BW^BJ5DLK#k%nVn|-@bxB8=M%37pG$#8lOi+R
zpzrlk9x%u?;gpbD1d}`N*QXd!p7|TEx=3&fSihI!Iwat@?9x9XmV5!QC?s;nIIynn
z)>ifV+w(}a&#Uf!Jr`&KyKo`Q7iFX)NuI+f;l|{fM#T7ukPt}rj&15+pEIDgOlwPf
zPI~|eT~)S?7%&X?KjIIEMTCS<;J)&}81RV)$Rfknv>Hz#J#M}>RH7Gn_9vR6YWT2U
zyo}g?_SwQjKk;?GYR5MWxyR;|e0wuPOWy0XFie!lVNHx)gnZteT(7_<^?1HBWK5M_
zD9_k?w&IHmLGJK*yxPcvnI9V@=_4oUj(^Nygy{e5nqBV9zTAKN=!{?Lfa}+T)<kK0
z6Rfb?k6kgRY8|Ity#4Y#Rj5DZ%NIapjG6L?MXo#zsC)iGl{6MRfairp#S?Yh4x5<d
zHM*dTypa^g-_U%&NpUo%sK7ka_*+K_iVwxt$XBVZr{9sY9}!ZIB<k&%a4zEg>BOos
zH6{1aVvSP(4(Jt|Q=d;NNMJDt-=lbo9hfjvq3AZC%^VrTP{0VQ|4=Uq^ITJrXl+x4
z%W2(R@^Dni;h^2)*}LFw+HuS#eenPQPon9>N1%uI)?wPc%WCj5gd2N#FvJg&>Fq8t
zW9h5icg0R+Z4czQ_zArWQyIlIX4O4YTNUR}?&mDFY*m|7>E2{sAwF^(FY3FY(m=I+
zEKS|B`8F!0-$*QtOL{CO(^gln@Nv5_4EHI<XC7>V*?kZM`Z+lBJw?Dl`2r%w`>5M0
zZV)~!utu!0qd-RA07xb}ga%fxT(~g6;2567UAaKrT}$ka8l3GrnK0v>WQFztsj$j?
zI0JEgMXo|lCudGW*cEMg^~acrHg>W^#N&KwqC_^jyy13*F%hqy05_yrqZvG~CDa}c
zw>_hl81MV%#@4CYEqCLvB^pOt?a6U6yufK(6O*>|7u4`6ApmP)E`>ai0pjVn{b^di
z_App1t`S#io~>1egFP$@!Xa<;CgAGKiEj`!N&DwwGGhtld{N<ds%F0gL8$hpW9(#v
zHZ9Mr7ZDb|_90IEHLJCWIbWsst+<V2o<-gHbf1d52NfrrRkz#I9IrX#-@7oLi?oYI
z7}~C`fiD{#@IxgPtpt|+Q*6{b<2`u6vM`y-8ZKe(mycY-+)Qvx^mk`7>JK6v>92;^
zcK4+HVjYrcu8+Do-$ksIbZ)v1<a6QYwCuB@Z(nW@B-Q*GAB`ZUL7=i;xQ+*jnUS!Z
z2wrn0$1nPujzE<AwLJG6UVC2|6B73N(>7X;+)!S6D#1e{AFVey6pqtrGr?P9Z&vCx
z8bJg`)QHS>>lQZT!7@x3HcGSd@`Qf5YkWc1yN%k@%fNtECBs#F@>_>NZ6*O#NpPly
z=Di#A(+NdtJqv#0d)p{PaC{@?al1{DO0z@AQoviM2>%_P07#wIQdTT)yA!9OyZ-95
z4X7pslr_>d=okdrhwn$j;vEB{mnX-^+d7a4;koRJVR9RLTi36}2NkP?2YFG$=Nfvr
z=*$^6iW?k{<ymYu+*=5G`;rbUd+}X)r@QQ%n5uN@3^(UG`c?$`BJwsaoVGs?46f)6
zjO;}5e5cWsiTiaoz7d60+m%JmcOi*a=kxHWwNOHNwNt8My&-IoHqc^!_EXMAG0JTq
zoXXE(8s!&9xwPgNs|Y|{O2-9WtwLu0&ZPc+6k7R%QF=~AUcTJ{&16WX$eZS~X%?i>
z1r53nC2a#{qEB9ie}dQOuQ$hy$4ok&i}b>MJH@&jYq-{w*o=%a%pIMsuhEeiF&X19
zXoQt%W59v_WA3?p2KoqwL$L-rq2+s2xI!H2hByqv-Ql!z`DD@$lEQ!*cj~@SZ^#ii
ztLY!$2X1j-9hhDx3s%u5<t?iHkseYs4c5`jf2#64tUgm|*c%eCI5lKt+?E=Q(sr6l
zz;hg&G8s%)bePSKa?P;p?N}9OGHg)ib|qzga=&V+xl+>R&NK|Y!Oa3AUmwal_SWT|
zLrmfLI**NKFc&GuVtPpJ$*9y*-nuOhfuw+f{lsSB&7Q(X_AM|xF>2lY!~*qnbtug~
zd4TeOIttln2c~?#!OrO=h5e!2bZ)%&VD%_yBU~FfYayv{of%F>O9ijE>CmG@VWQOR
z&5+ytpw-UcRISzo3ZKXICdq!Hv@UKSRavbxG%Bonvk51V0Bq!b<2^4kJX&`db0#Mh
z*@pfs{Nhk@xo9!%_rxj3QzSU>lO344)e@}S^+A)*MREkqBC?3cR@f-zwf=DDORDYf
z6eW-DociAS&A0yQOFF&|{!I5{RhN^oBnFBpkut-%qy#7kBl|pc!0kih5sY-cPGS;`
zL_#(KR+BZ$kK4IQ2}?`FLoIC{>R1q@2^)q-Rs&thyb5Z*jmwGME=18#haOJ0Q6t0B
zgb6<UsAl{;OdSn-FUb_LB!T3k*`_2Y?1J_iVp?GcU9Iw#bIM16?Rp!xvay$p(0I5_
zRn=WBd%u-jdCsNGz~yjG<|Un#2XkszI+=V$KT)tgIC&Wrr*VGuivdnjpChD2&vM&H
zp>6+sC~{(gY+V0#m!nEVq1FCRVfHT=i`izKjMRDqV~Pv=beyGN#U+3%B$gRudcD;H
z=1MLurT&YfKxyi0|JLonPq#Tkoui>MZvScQ@fpLC!?G2-wFyNVZ?YB>nq|Bd{C5?{
zW~fP2&er063~H(tS@xyt!DR5=45tkdjGzg68w5Hiv)1d394T$R4r=AtqjV?Um=koj
zC0sxa9YLy`iKHEspdV?Jl$v;$%A&&gE7JuGyk$3Y?vHFe3pwPtE?tYx#SE$_zDwpi
zMadabuNlmxF80Rc$nlr!lncoqNg0`>KQ)HD9<D>RMIFa)0jsU4;ObM<WJY^m{3ofc
ztbXZ60BW5TWpvZeYgbKvryNrNlF{<*4{JNz>CY`PhSWO<p?ho3$$pHd(cjyaa-WKe
zkOeULrzdb;1@|OS{A|X^XmNkB7#5|j$tnL0C@(oShv`5?VLg9?pWz)N*z1D^<%Xx?
z!l`u+VZSy>e>9wRk#vRwN;t%c)Y;CHkKEW4BjK!X!|_}syy{Crp2hiTqR>0^!oc^P
zxbeE&tuo{e>F@w<iUjuBc$(rGh8ZLFH_!JJ?l^R?U%xi_{cj#qWKt6l(pxnPMk}rp
zDaqzitl_xr-L>He2RHRzY=o1`VGdj#;2vPi{L!GOsR0DJK>3wOt4UVTc2`hL?0MC3
zU#D%pnhtBY5+@eXv>yNhto(Jk-U=LfAw$16ICl>c=S^%*cz>Xlso>iIpcHUlzX#>U
z&ho7QYcj1ukEL45sm@wC0c&`V0vlYH)31)ACCRJ^s#Z$oyK1=1X?Pnb{K(!SHob1Q
z5Nf};Zf|$(XEwv|)%d>n7)lX^PG@cBOH_KMXD>>3eM8h=9Z!sc*UczOWS+MnFUP6W
zI_!S9uprc$FKl-<eJ6P7Pun;587>8~VunE_PRiPLJTPX|llA(;Vtn=m?(P!_Q7P;@
z!M<$q7vCcSeY+yq)(8iFjyGf@r!=e77}8KXufck4IX8TE*rV5RmK&>*vdw2jaSIpL
zaxSaKbk$j7q%G#MwF(7woWC|&yzs!iPEJXvSOjE}C~}-XFvUAEbi5cI2WE_E;zhEV
zUt6_uD0x16qzVbw31XJqvu)I3-Le&XKUk;#XpbP4+Tvq-rQb+>8aLnHLlq=ACC>5<
z)Noz;l5WeVU1PAEn3La%j)F4iwDJChJj1;nkTY^JUC#6Dfr#N?q@mCC3-sF3xG=|S
z|6BrE^!_k7DM;h+!W2DLG)U4nkn;_e<`N2G4&>o^D+DO(my&p)OWy;3s^s#?vk2d=
z-l62%ZP0<hX`@J;UZGYql8hft8f&4;3iaiW=Yxzry_J0Y^7Gr%BM1WFNt*$)EGK+W
z5CGDUQeCT|JZ<bx#$8IpRG?Qqe(R;jm)(fB#67E+1eM3IPWX30-z@Klhhc=(Rd?#J
zB(88<fJr{o{tTP=34RfOR1SU))sP&f9|o5TCj{c6mY_?u;eNn_ERB_V?wZ$^VMpB8
zcozEwHQ*Cs8Q*0qjM}!zLQaE*bJvnB^Qq~ztY9(ORE!A;6Qj%3_eYHR^8K+#Xr`E<
z%40<G6cv+SBja8KlF&v*sDd)?e0iv6Fn3>iQdv&2>6*W9Z>#UDl@}rY815PUDJPuD
zfhy*kUoo<~s26l%$hR#jf)kb_-F4-0*9V$%Jz?*0(PAR4eZCESLd8`AQB%C8>rz?+
zPIoRbm_#wNU%XeK29B{C!DRUO*?>`}Vtl$y-N*tT2Z*DF`&C9oOV`MnL({_#Qt4_i
zjjb#;PKHC_PyMC2sHGpQZx^RsLP`SZhQ~dz;Zf#%^mqIrfi@!}v|+*^nBGjxadE)}
z2p1WNk$4j?T5r5&z1uw0<0o&z*EVdb>*y$xnFCW^OiXb6eIKUUXL#H%WmVN8Nr{;u
zFSJ5w2SZci;@>Dh#Tm0dJ>6fy38%3Yj?{Lb=_azH__<PiFI(QJNb4^_%;}tBsOsjy
z$K|Y@;UVlLhWEV*O(^N~9*?`+;ZvwUQEIwM{*=?kyVVo2(!}V+ogG&orCg@Zg-oC0
z#BX7eY-xGW4xgG&LqpSLcxXH7YMDskC8=;**I^_n_Z}jqN$-ah+)Py#!+OF@-XIjo
zZeE%Cq*y8!I6HSzX<7|(mR2nE_9aVrZ8NMOuCD*&y*Exe?)7d>+32B(j)We8>FAJ2
zV{Er8VidgWXbd>F@9whaUfX1``TIg^%rkf8npGdgHHYfS?u<;w<STUESB}M5i4kvf
zO?%!uEqf4;1E~GTDd-;w@fdq$CD)Zu?#D&s5+b$m^)BW1mF0sfF(Ekba|?^aj9=~2
z{aL$F_i!MT!Ew0}(t=lf9NB%bQt}K&l!i{1yu{P$*Ybg=Pz>jW3mc!}9<#qyjbSTO
zTsw5W`LRebs^*>aK3$|#3I{@F(%;C{GkHZiPa-WWvq;=r%k@MJ3}0Z<8&4~nI9t=x
zkaFH8G`qsG-g#2(tYepW=KfsC-LS0-@)*@Vjd+(1ps5Wgm5gz@ZlAdhOoo<*i_y)x
z8n|GOZ@?v^aXcfLzl%>l*psbu7(4F6dKqtdgLe~%^qmZ~8?MZXJqvZi0@!HUo=-MJ
zFG63vPqPo)>H<w~CSSq4_XCbV!H88_otvn&o5YB^b(w*0CwNn#)#&v%v}Bvi3eWtx
zzk-E_NM>@v&mWnprA>!B)52s0UFvpp@e~J4jE^UXbxeT4mT+<BPI2!h3=@Li4y;!Q
zm1h6=kr&zDa|iH{8I9G<I~&#6%C<R-QO<Yb+=le@gh%*GttXrDTo9&x#X8==Zij;E
zn0Z{!KdV(LM$v3~mT*~ihz)%9%tP?JqA=2fUsq1{FZIGt6*i_DL-R4D@J67SmdxDn
z@jOd7e{2u@q>T(sW;PI5j#YJjgN_rdr$_YNKyPSUF_^ES%LEjZ%;!jQN|k}9x6+4j
zD7tEgPP-ivgR_9i3?8dI&B(3_GU*dPuDwX^X7bQn%<1SHubglvm@^TC#BC3n2lrWR
z7B#-IM<|qOvcQ!Xv4-n?moSGpci}A+(n`O*qVpbs>cG!XF+Q?#;$(#Dk@t)Zikm(C
zsx|sZ${;cSV*GOQII<PoiJYP_o5a*1BNxMZKe-Ckl#}26DJf3fpGD2xMQ|||SqGW-
z4yI)i!oKplhsn)kAxEWE?eq7m?u0Um@H_qJ<t=)+8;-BO*zJsGQN(QMtFu_p{G2DL
zQ=dCZBXw%47+@%U;*>L8;zajQfl&T^KC!+iE7ju*6o@+x9ONp;DDkBQ>`XI*G5FFF
zeME>tU_+nHw}kl?XJN#hWwe1O@|`709jfnX^WIH-0-q0;?9g?)cVsXmv+2iqn7D$p
zqEqzTHbRGzZch>y(iEZAB-5VRR9G|DViUR?2Ym+4eiFKq=<dY}h`nO`LICNHEBQ9J
zQip6L>a5O_o6ow{lQ()%meY?d9oL0NxafZEWVO%^zU<CEZdW8t{PJiK>V&cys>5Oa
z5F;2rM7l-gn~*QoAsy7IT)+%hk(#fUA^a^Mhejg9qQs~I7=cVjY*GO)wUX|4P6AT&
zmnxfd5__l-My?%-furKK3{WE0_PErpijp~oRwmwPVI_F{px>}Lq^aN;DkPd#1R|)>
z{<i)A=T)j?kuHuOP|h^M?`17{U2Sf;kfSHF7xn8-s>{vc_y@~_&SwNR@s<U<8dQD=
zCR7{&>!Ok!n|x4<jy`rcTW-P>rk+|PLAU4cSzD#VY_+!5JCe8o;Iso*yW2>Id2uOA
zS_7&Y%P0Gty$=o?7};RD`*D+UW4=f9ut+(9oKJgSjmD|TJ+saCf^%V*LY&Q+MYx+T
znURbbD&4>D<?NUug8vpUC!r23f2>cmGD7!uj_K0PpxObBHZCfyZv$>WO8Z?ZQ^u|%
z$@BiyT{Bjd`7^ibDL|El_QdX+w;#UZRB#j~L<-r=R#!w<=iF|b#Z&{V?cF@Rp2J?x
zS(I;)6}M#ErN1t5F6V9oh{Yg8_b5EL(f-icqR8OtRg^_^yf4$}cXYdD-2kZWb9%0;
zQD);qpV#1t??t-2g3(svN~T@`eeC-yCT4@qJdp;_(6G~t>?+sRLesvQGeN<qCkYnO
zH$fdCn985)fAYv~WT0IQ(np_Lqh_PL4z2MXQ^-e56udd_4-TWIe=X3#j)+*qt=dl1
zrn6Hd?gnesd9CD$A)EBCmLn&W((%$+T0Hj{F}%VG<z$#<eyy==a4^iYnSx<3X`83H
z9^-{hr<lBS6U2Q62SD*2j90F!7~#-iuo-Pq;Gp|P&QM~I7p2zZBE-hE6{w*RH~sK?
zTSdZINwj;5$~DL?Q8U&%y?&H+qwc~Z*=W9<=9kH+p?Q>+qz}IW6W<t`v{G-G`MtcJ
zJs;G_%>59G1mPZB{58_1@=T$pbH&gMI)uH+wT&h&g1aRo6`K1Xd?&i*Jrr5C&lGJ<
zr~BF#02_<_yJh0}m>7_bjXq>7c3qIa5{|*e5(59e8k8NQ@;fTt&r=k_F_Bnz7vD(l
zDBXV0_*{i(w486hA*a`}Fads4P1PmFNv|}C;%=1otkm9-8E;$Qho;<?%J%a7Lvc5k
zYdb9LgzLUJ&ii4oj3x}}Ob!dp+uR;jvGzKG*J#vGme@=!@j3_nqbJ)N*2y@x_3dan
zz97z0Qu6)TnFMuO4*0oka&^nbS-277^vjNUjZR`>qzMOe7sL0;HiIG>ukfrz8&b-A
zDWi(Y#F(Q}kezF3C&>zgV)>U`y~pIJ=H<4XiJAG(`m!h!B3|@@fgy~yvtN4cCOAG`
z_Tgy;M35Uxw{^KLWpvyDEAgyr-yia|3onvPRga-paN27uY^YhD>9MEFu>?M0!k0Ct
z)L7Klm15ypj9H`y+Whtq#C^r`)K%|ho~0W=nYj?-Q~&X7VXRu#@q}nR4<h=ywBg}y
zjbKvhlUFruQoLLgHDp}u&XQzL!^>4jhJ)iI8N9*4u~el}ob0Wsj#khUaimk@NZqr7
zxSUh5f>@aXR#aSLnA+u9J@@@AJJa0a`e3b0(}D?z3!yVokPB$t5~<dp)a9H^XXVES
zkoW&WOuw@S00UPSHUO!6{u>FNpP1+mo;&CYnZe(9?y_7UmIkuLrZ%~J8M(aYZ)$Eh
zcM{hko#((NZw~r)#vh;7iQ@0%NR9<lP%Fx3Q#hQQq&F{axZVegO7v_15tXR;n&$P_
zye*I*+-TmG%e6;WQzGvQVJ5Xt{luT<OEuw#NK9JF0?x<~&d~ad=MTJ3(I8d?{`Eb~
z5WvNnfOM1an^~+kKLL5`c9}1dZVMg{x)I)Y-)aOqp$Nvx#mxi%8|VE$!1t$35Wib7
z@Un5DK1sSHLr#3jnT*MdsgZ!ATeFL?Y>rh2&O54Xpiuue*!&$k=&5BUPx-Kg4**5^
zZ*Y65Aa7LuR5-V^Y5=hFe`C}C=NX--KdW%lNLT^+A0wv10bt*maqn0S{@N43d!2ZH
z2E1#eZ1`Lc@$Zku1z<~?aGqKW|7#Hdl<PkOp4uo{LYsdi%AX|}a{>rIZNIn@|34P*
zh65OIX{UG<ZSn851F-1rAwXF)r&p3}`MpJf-j2N9yjPkXsAylJyc*Sw{yj$}1hWjN
znm-T{4$2n>21F#3MRD<w;d}s~J|$(nsLQv2?@E?2m6Hf2bCmo<#62VcM0s0VsJy&d
z4G?Y+@oWF}{o#Kvpz?qa0ReZVYN-s<8r82`SVP0V+}M0Enj)Vx?R8c<RH#>2RCioF
z%W7&m*T_h0VlaV5y<Py}^3mK&?cW5X29W~Pav}47aR&th6SbD55|fcolx@CWRj2K^
z(FT+<C?Cxh#o3?EekD?CxGS{=<riHdGEl)(ZMIJt)vn|R)G!mL@HznC02d`fLr3yj
zTf55xnZ>TFL;lB9#l(}RpwaxL?kFgU;x1w#;h0QnkzAhs_I{g)*w_j@2M#a8!^4S}
zJLH4;Nm|rH6q-53b>9^0jv;>V{V!b(BE0!)kobR5q9P)aVb9aVxm@o{0H7dU2p6jj
zpl6Hf5AonHBo+h>4Dy{4auult8W#YOz%RtYIK-MQw+W-AAW2rwe~IaTF)1@36Ltco
z!bn8C#nA#a3d)?hFjuw<cAqpq9{@5&i_K;ke|y3<SRj>_^FtA?u8jY-C*q(sw66n@
zV57F~Y*$*U)+8E>jNR`06LLB1-<%IXIG;f@c2uey4YVmYo|HQr93M}7yha}eIlV|`
z^YUrE**1Ep*6O%sG@XTIwB6;fo%{-ZOc|WIck9k`>A#b&r~<AU6mg1JCYTes*LwnM
zj{lb&|3@r*gaxygigW^kf(8p<sr1KE>nJ59lYb|0zn+#<+di7peSr+g$Sy`Lr@~86
zAp}(Dr+B(O9Uc6+lbV@BfFc|>4IUJP=OKdUwyv;0UKO#mg>JiC1pl`@0{TAKAQ~%C
z5!8As%F0p#08R~N>)1wmD|i)|1-j+))bHB}RBB^?qyx);S0QS0`DXevNdW9~nE!)u
z)9rkk{$#d~?W~-LF*~t8494LpX^yqt=jeV59afhAF%!0rA*naL9=B{IP7t*GgQ&@j
z)X!XE5-KX~X{KxE2NzfoLO+4eJyTMt%te7f0C3u(jnRGkS6#Y)YXjgg{@g!oh(N?I
zM}*leVxk&gE<GYA`vQso)Mdx;%nJfid^cz3;7`l765>}_@W0A4?w?#~LL5@kJy_v@
z!i=DxpyKx&!Jxwo5J+Wi=d7rR6MItGjq34#%k6&@PH`f1DlI%$I%Ao7et~78B@ft8
z7dZZRn)cCA>c`y~NN05NZ{PCg+L!SEm$mN@O>TciDEB1k6%iA=By)M4I{<X(kcOvb
zrk74(R7|8!C2ezcim$dkkVFKOeEtuuhUU}%E&CfZ!5*qQpzcvfwb8o1^<jI&b~mPn
z`|$IxCq+l;NWhI9`Xwz8_S~7+A)fW=*uTGGQXisL1=t@P%F*|C6-4*IFEgunK=f1c
z>uzXpRWQr>EBs!A*v21>PcfUSwf8CgvQe`Cp?QB3OqRkCnH!f`@8x=|u&cJ4x8ty$
zsyuGjz_%4EGrND2P}y*QZcDd*fjC++^EO|NKSLGAN)5dIU-av#JE&SZkUX$LGldvK
zwdtO~(Yjrw<Qo8vZlxf?X#<=_dn}Vj`EK1Uy4Gq#FjRsn52S>2{(sRZQc?V2@?F~;
zcw&%Kl<vVKgED-P6@>1kY6+A<IG&8r5%Fb<&vKS*nQR_ZH5`9+i}`cBIU^V|fItMm
ztF@>Ba*1l%ji*qK05J1)2~l-s3&X)X(sA9bbJI;`B12<TzMM)PA{fi{e;teeR{^1c
z&<Fr+^<OO}L#WocB3o0$bJ!h-W%0Io_(wU|o(9k8AH^;;A92(0$bfuO7rMkMDYxMK
zH?#PViDWO?9dZw)gTtbsCjph>q;Q<zW3p#=WLit#G#>a-;fvtgF;f2+i^t=69tn(C
zLc*Cn4V&Lhuwwcji!wF`P31|#!@(f|^i_#XXc8uq$s~F{1t2fLLy@8I&X=lEiNNxS
zy=ApM!<CklzO%ncowqGDrC3ap;EE|P3#9n+FJbEs3x7s2prHJc&4+*rst-j(B(Wq2
zY%si@ZN5C+mbO%C7{ztv);@98L}CGDGRn^8f!}trYBvrz7p_G3xF_yi(CD6e1Ea1&
zT`wQGd(H+g2)%(oAPD~J4?iEM20s5)zv1we0rc*W7cZ&Z{^>dufOvIkckB1`s?EDh
zDU1f#6bp&)-6DLJTxtLJ#Xm#PGlHzgJT6td%|#bIV`xX~kz=*qw}bB<=0;X>1@!1D
ztZc=g8rGI*I&#S#7bm5p!XxvJYT(<qJeexj^8*2cBK+4M9g@!)OCUdqwNO)jR~b(k
zT@CQPiM3y!DU`{5L8;!#{rOY=ZtWd=>bKn22aKT(LQm}f_bQN&Cv+pNx3PtYrF3)A
z(SxKk?;i8x+x<i>`i_6p@-ipKo4?giYC_gZDtyLXdSaC4h83&OhpB}=YoPPj9=7J^
zul>|;>D!A<P9~6kn8Y0Ox?b5BYPo2o%x9`^V8PcCZo!)3Bk;ueFf|RLwI<Neuw+8>
z@|^Acnpa$G><_Mmph(C3kr^32;)b_NvXr{9$ZA6iSQ>nF+rlNZe_jSghv<D|8gOda
z<UXZ1EZsAqfRxv2mjs;T`IVIfSp3H)*!uhREoocM*u57riTnh+i8K4$|98Xwv;OQX
zkaDcgR6SWg47s#P(6z6;VzaUqPLS3;?s<yJRY<tbTGN<W>w||VU$yMXZkwL~k>a{~
zod!?*ELg-3yPxd^QVvBhGz589YBZi~Dbg}c=v1dDlqAFVJlpPhv*mW@Ad%%R_Gl>V
zP)5!`=#NsJ?`|IT4-0i>Lo`x)+oz#HX}Y(IB23+5@!Owixt)^&?1pR-5|ZU1h})J5
zEuxzIhT7WUx`j3Uz+0N6(o+;<fo|<KD)kQx<=vSL-3aJj)W{vxaBpJb*Qez+hWWei
z<ck{M!YYqi?V*T-Ofs?lt{fOY4EN(V=xl<tz321&-hnyJTq`(9pk4kvqH6CM?L*D!
ztE8-~Tsx<)BZ4_dR|Eh5I3Mr<=G2?TK-;r!BqU_Z*Eg24NY$4^_xE<Tw$()xAuxLq
zk0M@ki*WzY%%=<8S`p~zG~7Nyt=hS&XhDSp7Z-PX6nJ_=Vj&Qza8P4oU|?Wr=a9ag
zNDET_eM(!rUho62O@7v3fe%ItdY*~Pul})=t^KPvqU!TuS9WA6%R|sX@P7;CpS}G(
z_lGK2Fd$?E`e{p(OfM!#=kr+6?=&=r>$)>2@@?f`A@H?d!Mo5tyaki*T>>&FtMz3-
z_@8Nkd}7dpzZ*uqxLAXIc$T0N6#{|3-ZyQOl;|IYu!#l?60Cj>df@Ycz)A%CKub`T
zj7h=&{OGL?3PE7mgq#lkVMo<{fPnR>8izE9KKy8jNZ{SLCvA=QVRG}&AfVA@n`Cw&
zAAW57<_)x+$kpZYfg}Dux5&+i0J9tCZBkMWIV7akpBHYlYimTBn!qL|XVJ1>R<Ehn
ziT|O7xAzFB1}1;ARI#X(SbTguNk~*!T>Tv!1)cg;zWw8lI0+4nCWudVsg*f04;b`^
zO^0Zd=yU)U@)Pu(pi)d2aTCjMe7euibM}3B^%N78j6b(l@y*FLxrG?2HlW&@Xjns9
zYj4yqs7*zSslTHQiHZs<KY;x>UU(^gI-gx@Nh*{(Z`AA@^Pq0f1-aY!l9c0y9$N~l
zLug*wW=v}AbfJ=nNFg&T%W!c*$=)S-X8cKc+p>8Q&F26PLyr}*wfZM+2&%tCckr_Y
zD*v{mQ^{;RXwesKGAgCg`0Z`6HlXf;IYE3L^tFMV%Nq?+tM=P^9LHUX>E?FvD`>Li
zd4#pd&;Q6KFsQInw$r!!!OSpY;YnJ>W_|sKGc$UO+KML>e0(~siiQQjo*>5++wPF|
z4YLW3t8wg!R2~o{)`4qRH}LpFU>CoCm>USBhjOzV3t<Lx)T9W)!uV*ib82ac)WM;y
z+Is6pQE@S&53zZVs9LIaflQVu-pr{d7O%Y*Eb+?Nx)Pr2AtJ|Ke4PGOysEsy3Ug`Y
z3&zKdGzW|f^kbY3WnDJ*hnA`7$!?vpcHE!t2Y{rPOsNS^0BRoHds({EItQbnWVr>b
zjld`%BbBJ8eoc`#t3k!KUq2PGny8E_jR!&dgQR$OMng3gg9%kIW57tLnf^?-pJuSV
z`1Bs%-#lon;_^u9sIu-4s*NJlVrJ4%N*Z=B3@G5C^lCeRtC147htPs0@@m?l1ysgd
zq$x#PNM@UapO0Yw_X+(+n_zeXFVuNIv|diHPmwmPy8Drk9!QuRIU16bC~@UkiWo^S
zYkWzV4+j-otKNy!PWl6C-|lkCVA~D35pJ0atl#}WR8ky=QT^AV2ca6zwfB~RCHw?+
zr<k#YD2tETsPx5od-e7oe^~|Bnp3OQ4qBExoACtGYFXv=38_mkSDLF>bnHNWBz~YW
zfZcnWUiK3m4=g&gKl#wMSWILiLV%ufo)v$4IAkNm{-EXPNdQM@pc8>I25V7w5i|vL
zxP8NPc1{^VGcz08igI_5!RCk2eGpNDkARR^i46^&6h;q~Vw56#;P`rfaQ0j}Iyw$B
zO}ws@n=v|&P=C;61oYJ)<!8QomAz?LQMI!qT+0bXoAf0+<}^X=1$iXHsdaPH%Ni6i
zJh!D3?D$q@eCbb708f16li|a9>=09aIqx*mHcpcAzX+fVj&LSCw}cvhdn>_8#nfgm
z(sUaIKL`wdYSb_#2I1g%lbEQ~^cKjs=#Y^Ce9Xs6H3;Ys`2Q3NOqRFVr{H>b<A=c^
z@gzYR-j!NMk~A@>o^2+kT(izWTqY&Q4GU#JrfZ_Uk<qul^xv0h8yXZ*yjR{RNu%)&
zEK-J9qEe#vg6sc`N#NaC3Ejx*ZQMX*@yLGITeG{LW)%x)el|4^i#ukz)2CV?ct)#Q
z{k{BUjpb_6?>@C$xhAjJwGA`WX~u(<7cA>9ZE*Nm0~??Xpo3|#xViCg1=tuXf&wEl
z!yIR9g<C19N}{tg?TfhYM|T{N*F@CiRX$ooowy+77FhIE-B2bEqN1Xego5gPte(aX
zli4{@A;<$GGw-gFypK0bkMj-V(Fs&&qMlj>N6n~^bms&I)E@>~bp6a7B8J)FxU+Y{
zj8{ejTQIMe9*)T+JUlY2e|ub4AfZ?{yTG!@zkU5^&J#QXg=BIWob>X-&9NQaL&{}T
z%Kb9g#%S{bYGQd5Tp!<f>B>R=fsplJKI~rm&dRLthdB6RA-qLps(R;w#&K>8cKeZx
ztaQq7e5VLYZdq;m1Gx1Ky1hp~_hv&ioYo?2r@o;t|F~IhHbfR+<v^kOuw;InWKh7y
z-8?xYUgv>k?dlhv)Z*8tDbi!amX~|SmzA-oGYh5AHf|C%?Z#$}Br`Nk(W+tz*t4(i
zMDnR>J>1X4vRPKwHUKo})?a!broy}AQ?MYSNnJ3r=Aqk}ZGIi$6E6*m>h!d{{`xBX
z-lkw=t!8<3HKSWVG@wl6D;yII>5N1}+;Fk$L1pU)q4Vyfhi<F~)3<{wkn0T$ll?;d
zG>H}w7>GtelR<mYex0gs5EaAWcG{j(qNwj*dUIp{xS&8cJWaY6d(L(plKlD?t#uwg
zYj8o$C(0hmwwTSAGdbWf?Z$?AkpTdXSXxAc2c~xby#WUuYmAbe9JX0#$p02jMv&Zn
z?VaV~nB-(*RENA$t+1mKKrqHw*`+m8OZyV|FV!NWGYg7P1`Y}4t5lxj+2-Lu_9Z+j
z4Babmqg?Mt_tx{ycG3q*EUNr@yp5hla)FeGXRiIYm7v*QfRM>l$z|6g`UxJo3;Dxw
zKuoaN4D>VRt6wj_8f7}9l&zheo1CLlP=0&Pc)8s^<WU_k{)fT&byPqB{t9<Nc57Lg
zM0L$H2@`RhHZu5eUO*Fvr)srxdAh^Ai@b)$Dzw$vG9#d|068hS(@#*4G-=aCGd<qF
z#5NidV7D8O3A>5#SKCb+^j&?fHoPUm7Pz{umh@?ws1Id#z@^-7oxn~rAtOJn6+L+U
zjdS_f`ZK3jmG||A>AHSJQa+gim??(vFUuo5+}latv;IPR4B#0lQlSq^-LL*2gH0#%
zYI>D!dc9N6#WvcLj5n`|0E4l>f&>L|#Eae=*<Z2Ha(jhca!gZo%tX-4Vai!pU>j6a
z-Z17h5Vz2bTZ{ZCLI@a`zzd)VxP9WE{Al(1cZcs*#uEA7F5&+)#Ta_N@FIZcyMlMw
z+K?Fvl#kR>OM2Ose>}%59GWdsaP^0`<F8qD+W2&JDPkotw5tjlt!3)|!6W*^Tgd!G
zNq9%BsEhRJ<!HGR$#SOn<muL}DVMEZ6RA}xVNVt$7Q@XGQc@_GjK-sFcCOCOrG1)^
z_3@lHbsvvpCXy%=8e)o%Z$D9*<G-nQ(|r&Gde=V|PkJhxk-%46Ugd=&Vh)ZW?*0_W
z&jS{=Z1#<su=sc~`mtTvMc0#wQ5PN;_9@&h1*Ih>B<|)v`=LH)l0fZFmT!lg20>up
zngHNk^U&c>+qbS3zpT}mZ@6Hwuq1D`YMqVwZMp{lJy-U8p*<~og6iF8=NpnORh!BG
zrdsWP>^rkJmvS0RlcErL)hdlhj(t#$<6p%33l$eXgu90kIyS6?yTxnm{Mn70JtQPb
zO0_o#N|Y)X1kZS>7BrpeUR{@Km*iE~vg?ljlDADHVCByUERX@+v2huOft#AEe!oP=
z*>~ufqD1QTA7-Qw#OTXNzasN4>pzAnUL6wOi!{*CrkF&@ZA=O@l>CCS`XB?=LEa}I
z!PUlb;e0ehV6Zeo6%|(T&C4uls8qBmx-B{;m#%sW>J=RPtS!iY8%Th2iqZS#`{YxE
zKWG#QIqBlLGL~rVzTkoxtf;cGtlA1^ZqLQtYSR6OBa>j07FapLcMd&b-Wn8y@Y?v|
z#BBbr2nq~jqajKu2IJ26zYa2QfQJLzU4{KY*dffD0RGX)*y5*;`UUI@KM*DXPRqwZ
zI}@P+zS(Lx&xh~k*ZKePkPMjo+uPeh_&s$nJ2J2fq?cSDXcQjo?Ih&s0PV@lLMn%Z
z?6H06+>4A)XLD(T1Qj3&gcuTaA8hX=@dbzVq<eY^GdgiTl7{`MAT6~=OkCVIkAysQ
z;UvcST2QxU8j@T0T3u7~>owOI5`_Pmi@7Vx{70q9uMJWTL$GDtu)F_2N-;zphUPiH
z;9}*d2{44K+lv&{q!4TbdJNglFTXWFVq&rP?-~xq_JxhHW$?7G-B?UL6m4HW=hc^+
zgn1gx5Lbcy!w5cQA_U`E9P2M^UiZ{kptXIuj%(s>@<F(s@qom7%jz@M6;a(Sb}<<l
zrZPgUncq_uc*|Fav2$j_fUGax1VEb!Sv;>7xfboA-4uDnHDiH3<$FeGu%6hA1k)%*
zfHXU<n!t0M)hg&OXgVg2j)oszI5;>AE!P=bT~SpG!!Eq9zm3nDtPD4&3QtW6Dbw7)
z;M$P=v&-iwfMA!Hm~?dU@Sg2JhSLZhnKKF+nz(RahqkMQg$1M2Id{|X@yXs%;TvIG
zp*b<CBJB2aECLe!7O|CNAmDnZ^Q|9Q=1t;m&BzLyyZux|xm1M$p8FwM<E=!(K;EVZ
z5Ui4zwEslx@1BCS@sBi^pZ$r1To$wwQ%sqG3__V0tKh=|x0&*?HtVUy<%Bsl*fwjh
zu(6F?Q~)YNoc63NAc~4D>B}(E>ivyNzDYYamul6?!g2q$ew@jABTy)mt{RxxF{KKd
z&t#X-KEZo_-mwMLMu^!A!I-FQn5qk;pSgVd7(Q7CIfo)36CxpV&1*KzKjKxSanT#N
z<6P09H-_r?#EN0OIB6Xn9j((aRhb<Y2&%a;Jxy7d;aR|a`9LhM!Yq}lzI=8+9%q?h
zs;)jSruEgw{iVxHUY36Rykey{&DTlu=KjXXK}=e@z9QyadksKXk5hcx>5zdD<{4ZG
zbq!|Gs*fz#SpafQDZut_>7>RG8y9=JRNv450Cos77>dmYbj5m)aoTu|QpIPj!{tq3
zE>gK$H*@0H9_%pyv~;fR6A<YWmyk%1c)$38&0h;A6m{Z{!c!S(nGm11m9P4C+xyDu
zZY&W72EV4X(E;eJY5NW+nOSwYCS9M+NOyi=u=Rz+iX)Sr6cqA{uJ<lg_3+cMp9+v?
zbV;0@HPvli^Z)CVJ|x^MMniZF>Uit%@bHLeeeY72S5*Z#kG5&8S66mC(yD$Tj$zYE
zA#}pUu6uI}`W+tkA%P%kga{DBE_^Rlt1bf;^0MqKoI(|>iQ%|ANqZx_Nr2>fInTG6
zEa9GzOuzH{AimWfp91hiNP4*4_vK3PC99rAssXK>?v@LiT{BK^>O7=Iq{{S-3d9RB
zi<AC}7`Q?M44}iJ07*?@fW!PfO~BqL<vVvzy%IA^gIH3^Ne?aAm%~;9RaFytIXNn+
zh`nm(OZgdC(@<Ej<>j0*Oh7lVJRGOhs-HdAO5f*JG#wh(K($-TSXApw>m-?Ju$CRD
zki55d&s*Nfj51vUPb+)M<uw)PGH_!owOw46s;#>Y_AxvusGdhr2GMVz2=4*K<L(D5
zg`tt*ii&NSO3{NE+n66T#IMeRgr%tp;r)mOWTRs?P6KnTD#<in_5S^&!KZ$uqF<$K
zCtP_{2%+4P(1LCvN%08_VqJ|IZq*Y!?=NKJWtvs2S}#Xb!!j%XjRi2o>aJlo=D_MM
z)NJ@Ibg`}^DKKhC!EmUUMe&a9Q&%+ZR`Dok#`HAizBSozW|pO%yVH4xP2gvVqwoyC
zbqbUit6g&CN9N?W0$%uxaE7<XKqz#uKRH#xDS6@-sZ`hW4Z59+v*mQ*1RINWiJF$y
zHY8?g^sM)&z?ugM4vyX0tHmR)jzqrp@@8gY*<l&$XU{QbSf=1t&%`2;N6GW%lL|&X
z;UbGyYg1wS7J#euxL>tFe{n3?<(kL7zLfQsqfB47X!-5%G3xy-GdD0PBB{JwG$R<U
zr)1;g^jIP>e&iI_F$yh?>v?u|e%PYnT@fknI={VL)pb7R`E{t;c}j!hced4FNCAS!
zPM-<nl2wPtsj~E76~42;2ekl9wYdy5z44s;m6V32&+_fI;=)v$1;!XUkQQJPRaInQ
zn~F@&jLJ5zIoNL7h=@u{OV<VpvZb=!+o@KWm!qKWFRG!m>;x9h#tS{47jL}wM^^65
zhTp6TZzRQ|tSEBARL-aVwYQz<APfMZJ&CI~l%&NYzdrCF8Nl@lJ#D#IpQ4%pl2=zJ
zSAID+yd>RU;zWA26{L-MvH9${lBsJjwk)bL<sy`h27Bh3z{WZ=>oA%GXco!9`IPY1
zPCJf6c<1LbJT{gvBmJEDU8yu1JJGM3>Vx5e4Z6w#KPcSrP0)MdAc3I?)6tgiOduba
zXnoef-rg};*B*Vaxfqqv?Ro7_=Mn}V5(>_kY`o+AB<&c7gfN5QSqptlsa&3B1sQoY
zPMRk(EG14(&b_w#^@bBQS4p+x*jNIIq(q6!__Mw68JQL9@Iie5{?Bb>hK&Ar`kIB#
z)Q<7gbEA!mBNsjmft=pQ@Iy98IV?fU@2!}pW!Gz!xr4Q3rw+ew<iOl-4_4xij!G3d
z_Iv=J|4(W7nX#HfLFP_aUmgaaoR`qvjW#1A<7z+cB1Lg&+kRoXG8WL2MR1(QiPxmr
z++YO~DkEk7e%&mR`*D{qH^@d!;p%E&$w8W}@(`@`>p!fZLxpZ_0W_sLY*wtCW~m51
z_zhiKXCF+A<^2IZ4Gl4>sO-16ylp6oOzM}TqoX@CQ>nlin&Y<j7iB=OCDMd;s7i{A
z^Jijxx-r3|-r@H3Ego4zNy*4;*mrSx(^!kKNqPoH$v_J3cS+C7krDliw)^U5j*iQF
z0CX~+a`F(8!_;ka6fK}{<y`{M56q8DN<azV(O7ek;FLsJLklKBIF5(xLrAL^;rFQu
zcvzs@TUgtbtc&Oo+BP9^vI*w3THpG+9y8(2>2E=&XRGx36-?X}cCGdGtVhNr(WU8-
zKN$pCJWU9jXb&>&5@G3cWCvjoPh$XRK_gBR50S5yd&4YKN{B7p+_x<E!PmGI|5y(Y
z=3^k`Gy-f@-Rnu`=at4M{+P|fj#bl%a301OlR>o75`N_yhVw9w>nTPffL_XZxov_k
zCTi$N9Es!U>x;9raby>jLlBD6^iwe<wFyG%eDjJGv0kqyCKQyEwH-xUf(<Q4@C}O_
zbA`vp4pZ0GYW(t2X0U&`IDp9OGEg<4mpKG{!Fzm4f}lE0ZN4Br7T8VB7T_N*!1o4R
zT}H+8t-024Uys_!Yd7?dI&0A#VG9J0f1aLFG7ui8WCYH0LNASsge%DfCZS@ILZf++
z^!)8-w>K#Wf1ZEW4NW(k;j~ItV|Zq~pj=T>)v;!m8?VnaTcKLJg8tWX+zB_AX;sDy
zNhqy;v||n(!#-|Bc~U|a820FO`)ph!jfTUd@Ol*Q?nNZ{`hqCf$>|7&1R`i6AtV2R
z$V`yoeUx-u)a5cUkzyd$_h4XhNk0m$yWB3Vkt3&_{$aZnz*kjAB)w2lT@3|r;x3Xc
z)pqiAJ@P8ojE?1)asD<bl>bEV`~}tuesh0SDlbhmka(+Iq8b{>GCXFGj-Qcvua`_?
zoij%-f}A>+U9sX*U-x|0oYJ+mlQ0ywvumNynuyz@8evW8Anrnk{GzJr`RM*OV0+;K
zzqn)aYbp_qXI;~2LoaeeM@<weua0K=$M${U%5rQb`QrMzC10xMU!k4sAa65(8+V@{
zU9=`DBNN~Kvq+xVGu1;fS%oq#)MyZ3q^5%0;^w#IDwelDLCp{`j@2f%n$iL=&bDR)
zPOAniZTnCG9mG+gB~Qdc_4V@xhx75Ru=tUfy@k35rUudpHn{IFMs{Z%TCd05uF|x%
z4F!hk0kQfoF^TXDcAmRwKu9T<tB+&z^P-oo@J8z&e0Ohe#6Pm$k}D?wJ(#A>nKx9c
zb*Sf|S2D|1D|*{}TU}q;?>IIc0yZF%Oa_kI*x`P2NnTGT<mWd-D$%0%EzxoYm1?Se
zZu>4%!qv4{GE-h(`SrM3Th!Dvl!kU;J}NNq)^>_CDdl22Z^#~YCOak>qlhp?myCI~
z8Ik<gA#nOsO)X2{UuH}@g0%zC<2EzfdpQ+CEFk9KXo;|P?9|bsw7k4*Ar(AB#NcrJ
zony08@N7^85;A5J0Rq$wml*&vG+yetBh`@H9CMZ{_<Sr3&-e1H^?tmB(c-C|Ohc$y
zi!@o+)nRA^TTj~!Ecz-m6!zp4TIPdL6I6aB*#8u)6*PV!r@lbVWN1kz!+RMFNFEs0
z%0z~$og=m~&(tgwygUXNP$t?Lg?V`-|M3xK6{M?6YHx);jsEG|3?KvA*<IauZS$ek
z(UZ;>BppVknsmX%+ozmjN?Y@T`&{hbe|bt8I^O{ywxD{$-cjdr2@8u14~I<q#q~?%
z{*@@s*hE@rblU2Q@woAD&$p=Ym@2)2#d-KM*L=b2x3^{NGcrPC(OR-^=oM^Qi4`j3
zJE7tR!|_9o8P~Hvj`@lyOU?##=ow`~{-wXpKyt~v4<lf#ew`eio}M~r*OC4#q0(94
zAXeZgLy=~qd6hrmb)}WzdoAUD=+riFJ#s97%bN?td0jW_7GrOe-al=x$#Ba%;H_h+
zyK3lIBL&>w<&|lY%j$nPOMrky{)7)<(b{1hFaepn<F`x7umolcrBxT|YRjW$f!uGq
zcJj)~RxMH-n)x@1_*mkAE;q!0&{X<vWQKmT6U%bB^7vOKrvKC4TSis&y=|j_pdz3&
z(hbrL(kR^u(yes2bSNN-lF}g3($Wng-6id&ySw9^`}dsj{1*RbydTboGsZb*ynb^J
z_S$RBHRnC=`?{~|n$%p$<er-m0829?zw#N$9dYGivCKwk!CJtBWR$^hC?(V*IwpYz
zw7l!3V$O4kV`hg3a}#<@wE&%9#>$CBt|+IVd_zE>MuFo@;%xOjA3U9SGPpa>OeDhn
z;_~dcaa?W9f+6c@G31@g)ii_Qj883q@xCE0j*RJ7ZY1FoT=?Ir3V#06*%nbz!OlqY
z%6X;E9OZB}5oxr%y-J9AUSrqvLi5w7wz$a<Jg_+xag?TqZQ$wSv*}Y6H6EwsjDZ7`
zOb?mpN$U2yHjeGJMTeZ+_gZ6@CT9#x-gQ|IpAQ=ANE~_!H^Q?N?gE3$eNKQc+rD+G
zaZuAJit@ca;4fuu?oobz!W7aBMPh}K0Vv1qm7k|gX_j(84NmPIHtw9S&f56%8gS)4
zeI|{f1Q07%*atR&7TYvJ6^$`G<({a1kt?xKp>sF>qd!sUu`9^$$7bA`3x|pJJL;&m
zINO{H&d>UN7_COXPWa9B5T+5wM8{5Tl@qIZXqQ~+uUtK0?ue*4KRT}6@jh|B$Sol6
z+wWp3>a452;fcai`g(jU)B7Lukb+`fR-x;(oS32vj|%KRMC(>PJ<DSqfdto@$CIAq
zTsR&vb(ce>Dh7>x&c(SAqcL~)5?wxi)Xyo*<=yDYG}X(zT+9}YCAK>SXA_u$g@HjN
za6Y2T^?92QFfl*Lo5t;e!z*}<wG~QAua+xEJ6mLF_d#-tO*=5aX|=4d=Z4*LNq!>l
z<W#@7xF}anIFVcETHsv92gouF^rfJ-w=o&?wp7?Vv&c?)<CCsBU+-Xw-8_v$D&_0P
z2MHe5tw;{nJ$nY1^p{ux0|)>aw5{c<-~HVUxSJPKrGwA69fzs*W^NkTm^2E%#u|9b
z>-+3!9q4Hu|J|SfN9$dgfJ`Vx@9k9r28oh<P*4~V7s(Do7Omu+o~qvrLzCyNtC|8S
zA4G+<M)UQV$-Q<XHtP;TU6-9;%69@s-GvS|o%TDZec^pdv18cI3n!(EPH<o}Qxtt{
zoNS+BQw={_b~OBe^O%&YO?p$_BdwA`sal&a6m+6r{%sZe$)o6!ioI(xbPjTAFDfqX
z{A2GtG5R4O0C{SD&Wqqdpf$w+W-7IAvUlIvepsWZxwfcj!ixcOZJvfzhb-ajAr&0O
zf=;4NLLKG<5pTV=FWr24WmGH#9_V^ye)XA|tz}g-GE!1OdfBkT!#V4NL$3bL2x$^l
z)ht`;kqshLa`lhU#l?$vI&ZL;=)<>Zl{AWMRw7n3W_8E^E}FOb(~gc^c;CnMx7e0#
z<_7nV)wHO4mQOT)8m5xGz03h+e~3ghDvEIP2irUr++G$^&K$RrKLt9>09Fqy0p~o{
zHj;^l<u%4fMq2yIH-9KqI&t~k&PDuNdhpbuB7}g2Jh%JZzvCh{gH)J<I5@n)>q4x(
zfJI>UpdsXeBBEOYgMjj<ASC+lhjqAm*+ybktRQ~Tp1@AN1OFPno(q$TrSy`TmtLmJ
z`wjT8%FclBwBJ<jC&^=rF*>#pFxM&Z{r&x(9XcuTpwglP9l8b?Ev@Rm=h;(BJzV{m
z7~}%$Y803j{tgu@kT{2k3`+ehw3u%(_@RQ-Mr$ke$09PJ!pp>_!7!?LZi~p%t2NgO
z$CQ3E9s0>h!Hk+3ZG1LuW;A?OIDJ9tE!Uh$u6t<I(U*e6GOuwAUXLLoFQ?Mso({F-
ztnc2@o5d^Fj%^m%U59JKHkHg*dIhLCMRwukCMNq$7vvpFu?Ci5X)Me~7%Z+sO$|sx
zQlhQW5EQ?{5{{17;}AU`8je)(mMUS^tND|^wt9k*@HFR-YqO<hkv~P9Wcg$5;Z&|1
zE6U3u+K?VQpELHF$@Nsd25zsoAY6RN^)OfeLCBr@i0(&5D$G@ij^wXbltxHfvj46?
z5E>$7?8D9Rq-pB8mllP_8;Ac$kUQEb9I<YFhmM{;4y#1PIxh&ch)-Cr>O1T#^yDfr
z$ZA+_Wv+(?zseDf7vxXVqEpSB-lHN!+}PEfefJK%EIddA!Q?w>!kvHdJBptpsBUkT
zJ~f_xxY?!i>)3g?W7pOtJSPN!%g0sx8$NuP97_Kw3@JPBQw%&pM3NB=A4mRo&q74L
zEA5BC`81T|RuXhhDTc6i4;xBP^!qgn7*2QFBhqgn6rzB*bS3s02RdSpNf41bW}iCZ
zLO)#nfPk1mE@KUu)d)!MsR3F~A{~0`!z)Y*zr#Bp6>p*S_TYEkFLb<we)ydnbOn4U
zicz6Yi5?2N0`?^Q51=0&iu)l9J)+@-<_7*vfJ%iPN-cfsLm%*v=l(4as1`6YpMu|M
za#(x<iMRi|!Tcro^aEjay7SwRj7&O!gkyP=6VL<TJhM8pxq-ZzYatf$qQnf}_{Tk@
zAmZk{WKen8;JmOA*|Uj?{V-AD_pK2r#0s83NSmW(;!^7xWsSg5x{SdkAdsiP{K-Oz
zfw8gFCrHLaNfU@UpCHPk1bw^1Z#q->Md%VyhX6_LZ$KDeT1b((pNhb7ZzF2vy}i8>
zTfHyvqNwf?du<gxp-_v%{o|!KBu8goM}A##Uzme($jzyDq_KQXTwE#%-!IOjIRsNs
z3O2(;5b)n|3UdL81MojL)S9ZSfmx{kU#I^1lC6rVar}q$UaME%o2c7v82P>bds_Iv
zWWrPhyea@ICjdTTeA0Qr@X}(GGD$gK5E_*0$Niw?6~dm|d>SkdDBTIb(WT}fJ*@Eg
z+?LqF16dsG+Q_fz`~rHyYZmrPO^$L~_s3^$D2KC^L-3QsViKENAaj>}66H0OpSk~8
z95`#PYF3qhC5gOqP@2?YCuDdZa9yM?yywp$)9o=H5(kzTc2BSdDQPnP<veJQi=_1T
zxRRBm>%)_w%4v^wpLYA&^m)6;kbnE1k6V!nA5jP-o{j%i$jQ~E>=(L7Qb_v2mGq%?
zVQ+j2*rNJIcI7f&d_&;;bfZ$u4H+ED*>!~1&FyjMT2;HM)w91t76-&1ZU<hc0I;L5
zVZAbP?&L(f|K5Lp11xL%Y(OxOk#l_a>eUEwwe#6TplEq%lGPYf@)kfI)P3wn!wM`r
z%7Sk}VSX2Inn>9ZwV<G$fHu?8QtS=wLfg{Gy2nv$<6l}}7RpD})AN4&Mt%VuGJDzK
z%^M<-wk4AZ)O)^1c{5$t7dulMruEn7iH<q(_l&cX8>X#<Z*|;%!Qfv49nli!HMw{W
zCo}$=OQ(YG!$-Nfx!R#Z%g(Y2eX%hyyl*!gU2m<ne+YOwqMV#6y|NV@q`uW!j*gBV
zF7-8A{k{>)M@*SN*fo%zE#IuV@SXiPLx%!T{@~r==czw&KX=EphAej-jm^*iQa0;Q
zdcy)RMvY<e@vQ#ZH?EXBT2Oi5SM@h`7&7k={K??i_4T1KoD8s8-`})fzmsgFtSVhK
z^s=a{n`v?OeIsqWmL$B~)mPRH>z-wShMksoepX1qN>p(%G1k4dRo9H2Jw5ED$<lNr
ze|BsemeddQ$_WXX#03Q33lmGdZi;t;aH$axsb^i@zau?j6a_}n@$_&$8CT6nD4n5m
zBCC2tsps_>!D5Y75y;t+sgE$esAz`2X_Qg?f*kX7`1z32$IV#EH$CX<O@<v_BQ|6X
z6)~Vs)|rnc9R_m}y~T?BHSnN{$}c0Eeqz_*?_PEX1AU5dk>;IX*Lv+bw~r(~r>U+m
z-<u296r!!It@=@`?^qUJ`&WGbT6r&u7aA{ROd4XZ&?JdeyvBn*I(oye;Cq-Dh!za8
z$6Y?B&83Qb`LCu_05(LB!uCw$a+msGy|jSJbt#A*#%C_|n~|Bh%qq#7lamvye~~S<
zjKUcnUfxdH#wvwr_X``sC=K&k$0H%K9moU}Gc-rh#T1ixN4Z6Zhe|BWrlIppPL3{K
z?fi7T)nZUaPVVbg<&13<sWWSYEKZ05!dfJ9N-RRjM@%T$=drf`bSsYdg^o8l>@emN
z*UfM%;aHbNr#+J7jG*n=q!<OJjpU$`_N^W~dmR$>G*a5L?^F06L!9INzROFSWw*2+
z@e#X(jBS)3QMsBOWU$cti}lMspgy8WPS&gFj)C=AH{Xiu%}kgp{UoCEH`pg`^O>oI
zTE~B_=oy|oHmfz}FQ7DNo8yB0P%mVR%_};O-Yh-&HaHnkQzLM8Y#|!%tfP$m@u`4{
zx~ER<<;hi8W_`W<As^3=TMPTwF6w7Dv|#<*harj4QLJ|LXEkTI7AS*92KA@Cbc!k(
zC*rj^I8U6f0oTYotska3jHVcZI+w0Yq7K~wT969wQwR_h28Aba1e%sH71_kEDx=Am
zn*I~Cx89A!4hMY9%+iTf(l%el<sc5|wKB^d^*=1<*?`1PF~c7yx>#a|R6GHo^?$Lt
zBbl9L`{Q6-A#IhNhde@SSeE39$3zek&4N_EH%3p3yFVm>NE8r}E3iR&q3)PotpNGk
zzkpTk(5yF00{O*pIb<nGgu!`7z29^8MH>H6INN^_Q@Dp|mUY+?fQ+_&aJFeBC-=#F
zt6xUD5D>BNLngD1zn_&<6H%~>yj3l13q%d>D71<MtRjJ4_68A<o3d}HQc+vlm<Htg
zUy@xwwiv%(H*~X~;s@?|pr+baW@OXJsV(g*K8#2f97GQPNjm*DicJeb4M#wtrotRX
zq~Y{8sx&su2%brKZ7J3h@ZQvf{qfgzmyN9ptd~pD&;{^a8J<6Q>to#_0sksT;?N7&
z)>czOhh}=`xFE0U{4EC=HO$8kz*xTc;Rqc{%vDv8EzzUhx~Ab1kbsG&c7ZMMU#$MS
zGDs*>nDe1w%Rd#QZ|H%H?YBM@LAg)iUGftfdOtzWLFS2@OM(Oa@c(Z&`D<!Ln;`#l
z$Z*t8<(q>E=eKWf`rBs_pnKbHBb-TNZrIVK5EX!2B=Ngh?7d87OFYf+<Rs;nUefua
zmiUFM9dnXfM7q0laITv_^&oQCNFF}M<|p1#jp?e+p`jrLGMwkPAYemdIL&QHB`Txj
zb^KqKF$0rCo63m7LcmNvY+sKJ=e0L)3FdZo4xyi>h9hpe-bZ+Fj2JX-Pd1)f|C`@|
zjrBbn{AXc>&J*5YFk`8;!)Mj=Kv_1q0KiBrvAdFA-$Uj<J3G98nJtx`Uf-+_S0A~M
zoKvbi8oEIn*{atsa&~r}O#W^3K<vDzJq9u&=nZfnZFq`NL_{SIi=3PsgW^v8B>(|x
z^YAlDA=mf&)qx81O4bUg1&@hHw6(R3uP;&3{Ao%KOL>|%FMy<RLT_@Cs(_LB=0AwB
zZpa|_dm;&{-OY-r!aM4Oi5gU26m96hX2@wM;R>0%v%a|Y-Utqb{R<zH*7I##zlv!L
ze0Ch^$H#Q?TVCb`N&_0Nr*TkfCi`<F4ji#0f0qs7gp7g$s}Qsyi?he6jqE-U#S+LY
zl%7e3sntQr5s1h^QWVQb!Rq!eS~<9V(Mcdxw|^>ra4M@N)~8M8Mq}fE-VaYv?}`si
zPO_3FBcguzjqOT@MQF(r3Xu{aAl<<Zjz^eRc>dJ)y4_pXJXC>^jEO8vdVM`H0QKGl
z#jPEi6%+oLbdQ*snZqlmeKcwW1T#zXRBM`zataE#Hm0M-^gZQc*b>e7589(;R8%7W
zBv4@Yx4dUP#aY0G1l`l;6sAZ3fY0rjcvH#N=ha*rr6e$TH!=_nziY#;j+Vf{IrYjE
zPUoK)cwKA3PiY#Jd^-pNwLlG(bN1)voR#~DF%P$VGK*4QJUO=?rKdTi5oS?zomjGR
z9PDQcFSqJm+&3^V(v}d3U8G5Irx~EN(!9wy<$y#uUif^SKTMEQkojp=;6gh24ooOJ
zE1|>E(mqr=VFUQN-ea)_jKJah)2pv+TyxY<fOtzs$gX3#^ArM;gF+eH7ON&DS3)!#
z5sx`M<X+p{Ea8f4Z*85T0NmxCCz^ynoNXy8NKi;A@%~fAXLC*dS--1AVBsHAf1E(Q
z@PH2F1{?+S5pM)9c0c`h)dW`6e<cDl!gZo&OO082MUmLvDz&ytrhJ!ha&=_nM^5)H
z+zFdXJ(Hmf+4%zx8>SCIm>AUO0~Gs3zQQch<lY$y$u$M93UutAcbPuwhSJn2*unmd
zM&VH}@Y&W?J%O+{_w5*i4Q#+2pz|7sulZO09xSzkvnk<KQsG-|i5etCK)LjxtAx3R
z;C@M=Q|#Ruv~jzw=U|%cLMY)!vVrZo&D%Is<EMbL8`reU-S%{AyXD#HEo=0*h;2|E
zYTncvNwrU!0rIuSnl+q9G-J0-pm}SKiZg%`FoW&B4GW<loj8&|t5&UPPEX=ZwKbPj
zRsqVOUs_mAjR*hX&-BIjC!*mT?txi_Gy`L)njfG8D9$`v^YUlKp~u3)0=zkX>J{;_
z)VASF9Y^Y2#dR~kx~XZ<*BB)}azRB7j~;^(CoSlT#dJbSpEp<_dTzOqU_5y^;W(D;
z8xze$jk2kIFD)eWJCDP>#D#vyh!$j?i-D*LvI~dRvf5}?MMcFv#*19U%pdki-bKxO
z|Dnpb|G5MK``O>8#;XGj(P|^d-G=Pkz#oMXl4IQO_<>3>c|I2qQdV}TU&)J$-t`Uz
zZL5Y=mHajqKurw~!0FnwiD#mh*SLc*A=k_`TI!~`%sK)FeZo8KD!MAx0H8Ovc<G_K
z;89yR)kFI~u8{l58iPCsh$QvO|5_@r!IVHlqG$0v>Cgn;rW3vsjGl!>Rz)>xQ^YLk
znshIYa3FbNfF}TmM>O@_=ClB<N1TXwN=hoh;8yf<P(zSaItHrK=b?hvG@U&iUu(B(
zVAE-vNvQDZ<hM*V2EI~va7<Em293No%mcJF=^c0KA9a9(2_Gj1+lwpK2mvbe@lztH
z=VgAoW{`RED;TxPlIr(m9kbSJQ=Xd*gBv<P3QGX4g|+*ajRxU)g;$9(hP|c{CG85)
z(qxyVByO|UgEmQ81F_6{bi>(-(V*{{MVnbV1FK29H-DRypWv6LEv7IWSpV}o1JT&%
z7k($#%CLhzVI80!T?7ZIayxnDhZl+&(;X~k7{duHCM!i-G}Zk4t_Il~YISQtnaz9p
zUVAr^#Yr(ys}G=j3Lxir0BBK9X;=D?-w{a&k%i&nel88ub3IFF9i&J_Y-Qjai=LcM
zO>r^6Am7>|-S57s)xADje8Xw7&TIO3`mPi6*vQ|hjX9`-ra<zS8bD3nv&zawymQ<M
z(&`pZ?f6Sd#D0inM^*y}bhD`;ck%QNFP6GBI_!KsqX9h|=IVM_Zc;vfz=4>GG7r5P
z7A}xsT3A?A;_ftDkWaWyO>mmXeI$f2@({7|x(@xELw<BsSW%$_44BpU&oXc}vuLBt
zI*D*Zu<w%-5AQ)KRajW|YFHjmaAVN9Zlop8R6>duLTfvXK9Exx%($3!_VpFRegZux
zEhS}Bg%3AhrHrCt!JpBQE^s^nb>rm{k7?uG&Th7fsXshr!Lha))cYS=!ytvoKr9es
z1|R1?K>ls2(u6x@VmZ<^vYbR+K;^N&hbqZwR=F0Llw`ay!o*|+)D$P_W6{fOU+aqF
zRqWnL4+O-^NEfV*LAfRf{#f{M4XOp$6U?;PgiODMNeFg+$IsAsH7alABpKFw87a!D
z!O1z4Sz0PjlsIXv7|eiS1O*Hc2_ArEzqNJd5t+VSUGkEyjvV(J=R~c6@+tL>Iss}k
zn>zAanw($4NQI2gZ#eNW9{Y>QAYl_?ZFE;GLCYQh;vnF>sXAz|SBE4;pXETN{-dry
z7Z(yWwn0k&fBq1T_x#@(9=m*fwIu#MH|4sPcs_?^S#sE%?cmMYjre)PRNd{jJ9fXt
z7@@OAAv&W4IVVSt?dWKWYL4~Jq!Agz@?7-SL*!24h1ixB2@4yW*rP8tyg#a>l5rsO
z!;lFt_`obQ?4v1?%^;A8aTO35felXf&{YxeFRnj3%gV||XSE#-O-wK_Y4F9-h3BsF
zYVqUHK1RoRo<;?otne&;21qPnKfLtA7FSFF6WXa@sFmPG<#@u(jv@IaqgFg2$U`<g
zwjA*u1cJ;{FNV#4(!|7SDLqUy8nj--OB{!26e{y0&X^W7Aa&e0#q2shrp=LzvSJwv
zK{Q_XQlva<bZMW6DxFfCp_RzF6G394j`7W%htZFwZ^YU@vxN5*8v44vxvgkKLL95`
zGw+u6(2o2wQYrI2UGAIb_Kaf(<vr=zmniR_?YRkg-^I$Nm1sOk7{w_dz*^%TSr@11
zpoH9t*muzB!k|DEDRP@%us(GItt{h8Sc5GaBgv?C=u;eKs%(9IeWP^|0qc|8(^EHD
zdHLAlH%{p@R+V`#o>(9AP(N&!D3@>CA%!Xw!Tt_VM*$Dp3Wlc!70wMpH<xIjMYlU3
zDIUa1?sHmvc|{)9UEbI@>2*$}W!<>&&9S4&v$L>vlge|mxb`2F?;j$pQc)HPxpoMG
z1K*W^UBXFD@f%K?)2jJTc?y+z@0mln#-ueg#J1~qe9oFq8qLNCaFt@p{(Ln@K0Ay$
z+h1$9lN7_D>#$=Jl+Vqx>RHi6MSdP}Bm|Wz{|dfeRd`>oR=>R5MMlS}@@uRwGYZOr
z!bz@u+0sJ4Zv!CKoiM}w5L|29+SE}eS=F%`C59(~XxLn;ZC|b+o<1Yhr=Z32fQFj7
z(^i_gBlt3TFC7w3G~xPFK<AOM>6LRojc8As1NuH^_m$)m>(lYJfUuHJ+JaMOZT@Mc
zT!xm<kzDbeF}PZ3xd7=2?Z8j-**8ck^jHg&dEtFZ$s@YP{lX`~UFHZDR#s8nzTTO7
z8e;?2A$@!g$p=Y$h+*`Y=<zSh61LVc2(wn`>ZJdL5)k~2@Pl7DKRO7r-Cijv9nQ4g
zQmNk5XpDI0fKt!vc>=rXU}6)chil=Mmyh*lZmY^(i~r(5l+bzNJg%p=95<MESgLw~
z#mzzp!1lVU!utB*KkvP?rar(vL%X|}_NjhWp9adiU#X;N<mRb&B$S(QHvC{G5@Tdy
zQWTc)|0ny+Iue)el2exFb@HJ}#B!@uba3y$&)H~sPfDs+vD_RunuHAr$U60YR+eIA
zYU#x}dL`{jc)lJUMZ^bZD`;D0$s<C|DO9qus3p#wb^23>m+VIK&VpE!tt-N6ZqQVx
z1FeeA4|I=Y#bK6bgYJ#tK&!6L*&WMPnc`H!1s3yk=}zNS@=n*ZXK%#fqH$+uCyxtd
zFQ^5XyJHH%nTjsIz)W?UjQ29!6hdV3+=L3(Y(_UGPa&}QuTh%W1cbB#q8h+>Zta^(
zh2<yBy&WquuxlLNbvT|7jpXV(4ej|>UtobMTejgT64(se_vVtF3t_8go)JB$J!T^P
zR0(9K{Ds*oS^xPS?G;PKyu21)MPf%W`{RfS2nw1UC2-bm``;sr5uNsk+AQhr<Ml#*
z{|q(p{1J@TSpTThbt!?}s4nTOp3AuDouuPxsx+K&MkC5LY>h)^s_z5wjR5WE2Vj7n
z9yqU}FV~p=7yxCeyvU{7x4OMH9Y^5B`*936!D@V<b>m2`?kqn9|NDlSp7SBIcTXIL
z-ge^+8UN}mwe|f@?kJM~NYhc_U2Tc|AXMyn<($%V)xz3kzLMCS6MJn*ZtHyg`nI6R
zPhE~&2kx<icua~FGe({hPJLuqdC_c>jFC}MEPODxf}Vt<GSW#69htI3{9A2a^hU8A
z->pYCJJP;`ACZ+{9}W@{6RACS>dm;l%<sGJrzm#<%7{RXT|eK<O;h!L?aY;WTijKd
zPOPn{lWERh_Z8tR-o;u@m&u9>vK9-6wQ9EifrSIqK@9T&il<&Njzm&)nDB8G(5>%r
zIt)2;*~z3K_s|4R!sK)$o%O>7cd8T}OG=m4^NM~-Zk{KTz3CTT85b`rcZtJ~bW>$}
zE*$)(iwQEZn`vhgh%mF!V(tcgA)uFl7ibvd!&!DrHa2=HFV)z}T@*n<PsLOIrNmJ!
zx+kgpJ)pva)5)?^js$uZJ6jzm*UaSHCsYK(WQy3J9U4&lQh~XMJ^jL&?EaxG;!Bh*
zxl9-0M<To7l7pimp?!wVans*a3JOS%7t+HnVGRQ5Ru=x}Upu3=1XAJ$!f*Ah;SxT?
z7F045lO@3Dz!v!0Oo)+JQK;^7bCH+v-Tsr!k$sJ|jlwcXc3R1A*WPva&%k7+wwg<O
zwC!RalF0%fMjc!!!$iEhwY#X!!j#*tSYs>T(bWsE`HWeFw6(cV9*1BkD-jf~uM=5V
zT2@#kFMK8yZ1XuDLK=$t4As1$C&HUR6}rYirU?!a8C80+djIKMYGFlR;in#)`Ooo7
z)+1w9f9aT}1Shuyg63cWL3ofjjUEF3x@)bRykZ$az2!)PBC7}kKc~1yM&O%a`?<~8
zKVHUWXFwd=Tj;8-P^Kn9U`8eWA5iyWUPJ<va9i1FOiq#WQ);yD1>{O@aW7sOk69o%
zXiJ`}?4MDgESH+~SBM|1^Y(Gzvuc{ZU0Y8ds4sd`d~505)qn?Dw!EC`UVT^yTLUAg
zSzHg9Rvg>o&c8H=Jyjnq)S_Zwh={>n5nNHLRX-b6-D<z{aJ;`kfQNEpjIRqo71m=Y
zHN2!2-TZf<lx7NcXLzrzpdcBzuQR)E4&F2F9LhY-EiV@rmjFdW(%bDvn>BUC6N$m*
zr*Nj1`+-R0j?WHrys+n#{uDEN0l8h>UP&@)eLB~`hTv^+?k?O^XLX>a=|zYB8E}<*
zZQvQ|;WFTVufwGA{0lgM_kz>n^*3X)O!-_3jLsgJXjz<n<Gr+w#rJTyiY7s8h^K1x
z`uu#CI&5MAko3JR2ny$nRx}`+;J5(F{AK*Y1y{zOpKInE9@FFKS|HU}?OB=XNwByR
zFzT?HUS6(fd$y3W7~5E79_1u(8lDd9?h0e#xy;7HQw!*c#HQU>^uYffF#x%ync__e
zQKaI-E~rKo^D#FZQmrp}#YLoUa>mL3`;Qkm{@0*&=j7x8Wliq~avx^4hQm+hW4WDC
z^2RCkD;;AE$2=fS+QJiIWMs^=pD)a^$dqkcUXhW$2P^s$23bG;5t#NS2&nNMq3<r4
zwQ7vNU7qu4bQQ5)WCEqggRXM5X00S!^*%Gw*BUx<&WY#echAoH*&@K%dE#_<{p?&n
z_!5s2$$yXi=Zob=`qq;1+2B!c>OG%7Za5SP36sXZ15o!Dal+&@G&F&f?w%}1;3^So
z(r@Q0l&k!Z;R3n$9}0CEyfQCWFVPm~K5R#0tB&jI4VwooT~SqyCqrrZAalS2xBU{)
zCdb@jEqrgGy<1iJN_@FbhelE|Ffu-xp;K12B2fH&TU%IH7o+=pr*D_f#TIo4eqZGr
zU`IXkn(nxy@UXr``T>e)4cDf1SuFHG6J7lnW&_@t!f&O3n6yfHPu60MyR)C%O1jpP
zBXEsKXxj5cbieW<<!e?@bk=mbCbpLdkiN-vODn&CHd@)=!HEEt=}uneMjq;>H5MbM
zhw{}xEo1WglmmQE_BmbMt?r$lCmf_cT$EFi3#U1dk=ad%!3Z<2m#GqD23_6H_9L_c
zorVNl$tN@mP@YdA)^5$R!nr%u7M=0xd&uiWM1HO8XO#MS=bJ+tB*3)fBOub4+L6+S
z{tKvyZK7g|{hvRCXH5T343FQKjoCB|#`5u_Nat?0oNf|-?e;SPai{z&&`_}2h&*)@
zX1|?0R08BfW;`G)1G(r=p^gQaxOjwMg{FW2Qb2g>+|m!o>-5Tj|7nTE*$<Ang>dn(
zNL3~NmtOis<{`o8&)-WX@pq^yi!wbDbuRkc%T`ReC~tClt1EX`4}eQFJUp_NJ+#{;
z-AemgcF97k1UfSVhIeEv<**Tr2VD3mAen&y3-JAVts~gOe-8<9ZT&&;*v7{)Kd&Pf
z>k`Q%7K*diE?!=B$akLAJ||YY-IfBz0C-|lYAaM^VH()jUhfOB9t84|L?LsoR*_)-
z+Z6Qofk*Fv=SH4gy^4x(VU|dW#_zeGowPdo$Y}*6T3Ye-_q&)FH_cYwdU$u<;=??4
z{4aM9o_nj9)ryMA*bmhcLuQ6%2U)cEqcT!$qc7Jgrj~%gUx{87_b=es(ZP`IBMkt!
z857+mTnn2G5=UJhNR{#r_mS0ab<M(%otBtR=ul*W?IPo4>l;fcY#bpK{fhs~b55*m
zD!P3k0%!m<8;;A9GmQ5Ya_r1GSeSI|ciAqC8g7wHfa#tioimHnOyq8=1~Ixz_c%v9
zub0s2Kr<*(PgpR>5mmi>fFoY{6MwPb-N7BvN4HG(>``>p?hG9aRb&J{zatMIe&*9l
z9RBk-oW;2Guyyw*?#B}=i^o%T(H6sI@+N9mewK0`q~VVsbB2PQ0v_%rhnQs9Th~#u
zHq<1~IN|2H3h|u$lSh_-@UEgOB<t9w!0lZ#PlM?!^?P#2z{nHQXTdx*0JeiDR`RTJ
zI&zLqm*D<SE*q)ms3(sYDKxIPPmb*Yt$nE6h%B6iUt|h`>H%UQYKt=h>fL6QS8+@s
z_}+BBRcGq_hvDxFK6AN_QiomYZ8vQ6bJjZx=H%F<ZH&xb!R%=uKYf=5vsCYA*%CFq
zpq_e>_7iC`mpY-tSp!-g9v*P>+kf3lV6LT^RmMStN4YM)xN;xKL?=UbZZUWl-3C!s
zZeP~QDzW~Dj%`DO#_5l|qFATCtB+TOrCc(ns|TZ{kY(aOM-beJFkj~LXEZ-1R^LaG
zPASRIOks@jtqbtv5L|-2)d!<(D*r~6CIelRr4eHFhJZwj)}o65+#3KUP8~wf8x2aL
zM3SF3KJ|rbXDbHbKuwIzkX&5<Rbw>XUF`KXwx`}BD2M8?A`*w%owO(%Q`3x&NuH1;
zVref`IH_;=h>=$Nq}a4qdx|I$Pz-u9$k_Dsng*SVs-Sz@Yki8WgnM<<Zc`(2BX)Ij
zC-uLj%`{>!*Y}w=G4`^v<)o!4mhB!AK+8pQ9MDL_=1kXL`qKM#za(>i_03Iqjw<~W
zdm0OAjnH0;=+bl}jDbsGEH7bFY8YuAy-je^mT(NxH4@u=&>}&=3?!4u(WW2%3h#Un
zjY+(*PcPWIpNM*o$B$XJO4GEDIr?LiTqZ!;o|_8aihxzh6m;5Rby?v;xS#$wT^`b}
zoID^0eu0jy(HdG>7>ppZ^X^K*g2bi!0O7cY8O1=uH^ydS725?nxm2W6W-UJOXla$K
z(G&)nwEbQ2lZlr_>%`h|TS=nUkU6ExJbTWnDKIx%lgl{a9-F)v9s3QdafZC$>PgX$
zuW7%L2)SI-0%{j%Fuxx)xB6No5kY==ejPvDb~u}ni@Nu37H{<|{fcDshvD<RO|Je)
zow)clKJjgAkyB5ItKcu7%6~`!wu77;3(P&dPJPcU!ty@|K$^nF2lJ}cilxTD=mpF2
z(CSum;lJqeDyrC-0PE4UzwT5quhF&$2`=@zK10$fo26!8VTlwAAAQsw2$l5yWd_8;
zd5(00HO_QrsXqhpCkqECXqz>KVgtxg|ACMr5};KH__@{V%U2F7365)IqtF;WZx`IT
zY%jF3+HvM!%MSWCZ9qU0hV%E6ULX7^`}1wZdIdQr|4HS>Z%R7S&A?`8U<Tt0ZlTPr
zMRw=GL3q41yTq>jUJ4%cVsOqo28H$p*6MnR+1A7WUUzi>a9=8`C{GNNt$#3_ymQM~
z0P!sxh+q9#(}Yn#vPb--m>3-;vtHav6g%+T>Fu?V0~Aa@q=n0k$2tY{N)BtkaLO7a
zmfk9Jbm_qDVUv^RT-gUrAGry|u!*qhKYzv|vZF^l&#9wy@88`C5t$b|__I^(pd6pq
zAF6}pn1@b`gpQz%8<CV`je7Te8f8XKj#h5&22F1Yoj*bpX3d<B!$U~$J^U}HigFX&
z$tA|7l?Y&eny4%9Ar-L}B#G8R$DR)%-24J$(uWl5S(G%w!dhPX{Xtko^E9};1=PI)
z4{pN^Es=29AAj&<*Wl~g*Zfv)&`zDdCZ4?umPdY?<22+(C<ZD4Mca;G^j2`j1cc}y
zglKW-hv3y9hd1bHhCpAvIACBABE5R}5&EGwa9%lgHM+%$ME3^_?fWnIX&_7H{vius
zoKFRoL+^(j8T<^T*itz3!~YlG<P3pqIRXMHo~*>PSN}%O|IH1zcp-cY2_Z(pzdc~$
zl(VFt-al;RsI8T(`{vf!A%ho2uXN~C>HZ+_Ij|$@QEvNa8ez!J{6(<<5XCWWWmLb^
z;1p$U1z=b<@vGQ!>0J?W(kord_rTA9_hVRg;38AgI3$_zH^K&-57b2UP=_-ufJzF<
z@B7B;vjWqwT7Z?o%DmhZ^FCAr1;CqM%YBJ#fIk@X*LnEJbxO9C%UI7Q%7&kiPTA)c
zOQJ#IAK#U7@945bwQEoV*El!my3MsZZo8Yw%kE{cRVQ_55J?nP%@duq&yeFj@6d28
zMug0SX1ZCpB<tws)g=Dqiw@^nqS#oA=5~YaDjn9ERit4IrYYCv2OpZVtkibS-2p*B
zQb%HczpcyY1DUnuv&qFwf|Q8gzo{&&cFJaKnizgEK(2i=Go36gtu^CGazhv2V@!)W
zfkT1nPvb}Nof&U%eWarD#MP-;J=Id@#4;~?Y}&KGI&EdZbK_n4@ie{-mL#L4aK$Lu
zM$o6UcSv0gG)9Vkn`jesT%A|mzENf}xGlr;i?ZiFLh)wbY?j^io5_9pc22IYFrR`&
zYmGRV5JrL{(xuqleicIgb;`#p#M>H!kb^_po)t8IOltI865hT9A%{)hE+19|>dF^~
zb<{xHSP;S*`*tipCO?T|Il<QRAscit0A<3RM6A0jWFmV7ot+N6US4NR2EdHqszG==
z;6VYZ`&Rjw$@RM(+37e2&KmPv-M3f0`^O1yH{B<Z0N~%>-`DjuWqR*TsVGH`=^-;T
zO~8Dti>ProJiskQt$M9(gNB2nDF`*Ydn9s3h>AehzM)_z_{(<mk7--2<JD%)lTH5p
z@df1o9-iRU{lJORO!G~eiSmPRw>RPi^m9?S=_6S1dfj22KTA;%_S(FXQIFU5@`WvT
zs_}e=MWkqrL|PAKEs;VS?$^$Y;jC`8nPfI_R4j>oZ!lJ;iVElGW?qyzSJ?eq=>hsT
zzm4lKp-~0K@qqzGi}=j>gFx-)B;PQIdB-c848zJQT*o`_mg{E}=O_v&L{zgD)tx8k
z2?G0rmxC%VUKpMP(lM9WxkEa42>#D7fk)4v`lpy>Q$kT*HeLJe08}$qr-Gf;Msqu+
z?2#6LxriE1p8yM(JlKlvO)<_mgg1uZe;?i)I=w<96sA)iE%4U6ync}vG>np$k<n6e
z>ZLC@T>U1aiHef451d`H!d&ZGI4D+PHzQKYrv1);;6;6(OFpzQMgc4^(I|*WfHF=m
zl+32oDjUT(6qSH)+Bwg9qHbD2CXO0$7*D=mSyncDYwB2TEr84T{4nR3h~96LwJ7}U
zjJx=Q2kr8Fh%J-5&=!^<{4Spa;5=0?@Mx|vC&+uj{xRa_dIIJ+QO9I+pMfZfrL%Jn
zn|y_5g{PBRp6u(NKYw<GC_MJi*e+Xrq@2qh_HInd&TI+qL$7L2V80|0P;6SITX0~W
zKf^XM@_~kruie&)eXwzKR9(w$j7rPvroVNeH`1?B>f6P_!G5ou7mJW;O&>}LaPK!B
z?IBbVvW@)nry|bk!$p7R0Yv37Ym2A>I*p_<+Lk5Jp3W0*T(^4eq&3m-^J{INol&_1
z)LG&5e#d&{bj6&w@}C7F5lgF$#fqt&pJNr}F4!XZ$k0WEUg*c9BlcCIR(@$E^lP#p
zU*|$tQTW+GBTmfFwx$wa0l>LrmB}r_EP(Z8+C^c*vi8}*LBE{QphQlA6>n-wv=-B)
z0<=>*Oa2T<x>}n0`xGKzwUr%R+211EWA)}YEA$GIFz0cTHeA)z%Dr|j_&Vf$z4hB-
z6=L429i{2j+zRG~yYO6!8z8Zaq<fal=jHp0UD-?f?y=w4y|}r#gLK5R6yhnTfZtzB
zfTq*+thm!XXlVEz^`^>su;)80i<3)ge0Og^{D$7(dMNPNwmeh3S@tI8kubZXaYDY<
zL7}kOaMnpC&|JpL2ULqP--nJ)l^A#wnzn$?J?O(%mSd(`7TO|!S9KR4iWv7EVNmv^
z;7I&A$S*ZbWYt-6oQu6yW9+Kz_;KmHwoMmMH9JF8`R`8X=O?HmR)!#~Y9*?0>b4wj
zX7X*#H8TW<o7-)3qEutMb_dbI+PdVK1lj;_;iz(G-M_%=UYwfIG8CoeqgQ-qI`sTM
zB9#AQ1KqCQP4$8PGlg^Fcisnu(aMv7#8%Hpd6is**KV5e=5izim}tdze<0ruuXb7)
zAH_1mW!9soqw8{C@qX#Lo%{7<+FQJ&)G4!+>6d-oo$3jQFAYT+QX$iGWu;G1x$kQg
zH(KACtnI|e=q9oK-IDt-4y!ZCQ;7FUkW3J8$wH;r=(!MLVDpv#6w*G4k15=bN{xpX
zoh6weF~qgsiayQckHA8Sbw$t?3z^CT%D>cjC?>nG$ahLB-?lfxfT!SHR6XujBtn|B
z1iEe!6Q81g7vpR_(P&-Z{`_jnR%2-i?^p<^skFsA0gyv`<Z?kvEi5Ve=@!s;R~8Q9
zu<*!s^(K*vHf+&5PA<yEv@me*Y(MO1ylMB9?VZ!(wDpSr^M_a7D@pnxsl`_+94Ti)
zQJ<R48Q))kT*&270E|hvH1?&H!(mG!AobW3(T7&e6#H<zUc?|D@2T1L1orUQm#&;E
z&C+F3_t$4C@lPERUXfd3h7qQX8Kc*Vs0=gHW~%m-vpA0Fh4lQ;fX(fulE+0y(`x8D
z6d&H*P%z({+?l=g3{-6Yv?%dxY)I9=m*sOaW96=_M#mcXv~FANtm1~5&Dwx<<Wg_J
z!!Hg_6sFo3t+(qR*~PX*#p1UaLayyc<)34ly~XsBP%xam>6G5I5<Qcg)alxJG=68z
z^m)^@ysBzc-R?Z&$0JkOjlmZ(YreWO8ySHtEH<tuRz>wjV?>ro_+RrknQH+HxY+7{
z3<D~~@!*9euk(}X>yV&e>a0;}h6yvNN+P$-g_Si|9ZyfUO4WPwCl^~HTNSO4FbNkx
z!XL8f*O&&y^uYLdHWnk5vNAb?==q%5kfyKLzT+^hTM{NV`f<X`LX|BS;1uJkIgCo-
zdAwP9ae2MH%W<n76f;KA#TD}a{Hi{Yt3tin3*6^CBsC6aOR*E)I+fPp?*`)|ML4y}
zzESsGnq-6lF);H)l|zBo0&#3t^-AAXtw`C>XqZ}_ekC#JZr=$lz9mkGz_C|E7?j>#
ze^9PececE~EAdW=RQl!1RO^Wn#RglXwu%B`6Xhk|9AOm(p5>yF*YJ($nQh&f`q`G9
zuZ`KWw+{x6oGR^RD1E)QEeM6PUe%nhD>#eZ+Q=o;f2nb$p2YcRR%_*yO!c7bgRlS&
zOD&~&jGlmW5Z5r6pO#Tts;cjMrKr_tl%B7D_00wa^h~mngv~;MUn@Zm2}S#ZexAD3
zBR<$6wN}ZZ24~iHg@gq0!1V}|<tgYC7J~zjhe2gJYFiO^8JJlC@%c35Gf}jij(C#x
zL$iVvGT}+n<qOQI`P8YJ!xVnK%2*a1Rt<ytUkdte2_zyz#&<q#o83wpI?!59=T-2f
zuC0_o8y@zovy+hF;@CQROOSCfpRFe*!c<eA-pzcB5reR1>%hIYXIZ}%ChE4zA#8WH
zkLNg|hGuNNC&A_9fi}0$vPlBDHU$+@p%vm__CsV38m>11n^UzgDxs6VDT|w>D?rnJ
zF8dP6-*0ogSf0%LkVC8Pl#GFlPu6lnTgiiz{uXC`g$=NG)51vaAIku$&gu^}mvYZc
z>)(VWhS!-{Jn5QUa`Lnc41*OuhsVcpHQ}s){~gtv$OpIuQ;WX7N8h7|Z8dnxds7;z
zW+1U00VzcmY!wna`n50J-v~$A22H?9;ZBjHX9|yarjf&xxMrkPRci~d&J+k7pqz>O
zUfb}hwr|)9bMQ<=iiSR}#GQrvX3=?B`!g9H9t#YHC{^P)s|n%9%yRkz){w4g+t#fo
zn|U&u`|<uwo7pTU1k1sEOa-qa_r)C&AsZz6J;0~4KgDyu3;ENaU{IO{U%vQD2dNsG
zpZOthlK4n|gXk~(DXBoUOC^e12`P7f*~6tT9}FVQASJtDFuZ{7c+_eGsi4_OfSRUx
zPGgY}G9CXvew+O-Jc3tOpU5hF#!*)IEFl@VT~}GDfz(81VYgGV(Et-)E3Sf~P}fHA
z!*UcFFjM-ea~Nc)>V?6PEk{+NN=8QUZm)%h{tnS4C;Qur@o#r--pZ?=VF8C8)VrRv
zf=rURk9cJCddbkr44Zf&6BA8-2Wh1B_$DWlf;IsgAVAb&8osK*#WRstv?*<A8ECeC
zajmwO37G~-VicAV>*m94vkj6uB90}hCMSixR2=EXOP^Xfz0bJ`c`U!Sw6|ka&4q?4
z<>VGd^4K*}qwO>(AFJC&?$JhNb|DiyqBQoyBZgcQJqtL)%d~YE=j8vTL)+1&;nTgj
z)7jO9E{LMo`(Z82q%vKBL&o{AI3_e9LA&~7y47*U`-VExM0N33lgFN0DCr~L`%sr&
zF^YL4j)tnQfmk=AI9{pv;rBc}X!)4b!0CNmMZO2Ye|@G{fGGNju(0s4a&r)V`iId$
zunWnRVZzSj<>VsKSf9?|=7j;9_E>o%qtvppvMDR2-SSNc1o=<B0vxQnrF`^jwp?A{
zylj@rzvg#>w#PgkVvyQwZ2|v<4U?&g0u}w27RR38w2YB&*``Dihjk$Q%IJAV)g6wB
zCMHC9t!=J{Vlo&&z+VI;dTe_&g8Yn(r#T{3I?H-KnL;&(MyeZF<hDlx_cV`yH|EN3
z$^GMXjeA1<Y(9J8z@hyS4Qn5PE$Sd<iSG>}!;>dbho2QVFqp8{Yj|c=cp(c%i~_V)
zEf4_}9-IweVg4gxDNK|#T{?^tR;<wd0TsJOsK&Zl*K3f^<fcK6fgzcBg8wWsKA!2L
zY)(a<nw3>;(%WkS+R<UYpRs3kfBw8;ctXO$l%i`YV)q#kVkZ0NZ{;O-rGN3TP%uzq
zFaEktcH9WFjlI~ZZFj96s(ED7d1`odH{M~Hkke@Xm4&4(F(ysf-HfUy%DmQY{eM0S
zF^?t2fYhpHwRnA9JTgU8OGRaYwhf2c-w*%iZDEt){VG$pAE5g7zD8p^r6(47*Yq8O
z960Pb_6vt>ao99H^>8+13JUrneDSbzycnm)Tx(2DP3_3fBfPFo*L^qkt*p~<(|~c%
z`_!JdkjUfbhi4Bokw^y#HKv~8QP~O=RyOqmk{eIIxqAdAkEN&X{XivfJ@JbbqcEqV
z`&@n@a^BHHJXHCVg>pDcvD8y23#H{ucZFmWGTkXK`4Kgc!_A`@i8gc;2=cgSsJ$2c
zvJGmFy=x0l76mT1_wX_Be0<Hn<{c691}HoHZfij`aa{h)Ut+bQ1PrEsx8FW5Bm#bq
zAB%BNc;yDikq!>;h)XH<Vlg?^#e^-qJgW_L8FWMn#!pvH^r+#lmw)}{;?tk7w;UJH
zDKYEx&oy}T(wzq*iiG-}r~|#)FwUmu$%OjgV2btJ0IR-P-_vFvv84Ws36bE^TVMW)
z1|-o>sZ~iisnt>5`y)Pz50A61ytrFIWS@T{rJ(S{O(BW9_{LT+EO`5|hOYU^MO~^k
zR&CSmROZz$Jj4va@2S+{71k4E579$^kEc;xsIS~{_|%pBrce7G>}cFpmkOv8TwEV%
zwzt!d+gyF_pG>y;b?@h`%*(gZj|otSY-woRO?IvYKtO%G`yyL8`E|u`Mtyp7z-MLG
zqM`Z2x}=B_r*^vPh3p%K)`d@7M@m;84vh2-%;RRZw{4|<JHCMKp_oSCrC}!9vx~Cn
zdDJ{gL`C5XLM<z&V&jvJVZ91`MampIUwnp5uu_irT)Ji7Lm2d{Y<{;(A15T*)jV^S
zV7aP$Bmd(EYy|@avk{fT<KgXx*9Q+Tp(9pP^SpVr;dCrk!Ed!Z3R8e2R?qe0KQL6&
z#g0tx+=D5YoVbLZ;umXJ$+Mx7Hc+S8M7~Vlw>ce{7<O5kfdLWV^rmbj4xv=C;Zp-o
zENF2`v0IHQ@kNHTfEM?CgZcf=p2w8YcseFqlP;W2%jl}%WC<90wW=<0teR|fyJ?_J
z6}5kP;QRCBqV=GGN<*Jtx#7CpH=?IU!LtEBosXASR%hxZj*L{`oz8E<7si(@PBcx#
zxG99F-7~^J$Gry-tDvy|H6k+bwf{4@5)wU0{bgD29f?qt(*D80Z&*%}Iz|E3T8Wdl
zL_ELnYj`qst$?W7v5h`=(X3+|#Z(kWUuxR>;6tR%lxs(ZEDnwDpQmf9oA_pnES?;<
z9uN}?QNy{(@mpDXGh2GQaeOah^>PAnMq1jCYwOT%D$ui0MTTRt0r|!<+epwOSawJd
zFujwiKIp4m(s(3HA={Zc=ehOlAdTfojXB0g*S*(}j1s{gP)$L|H*)u0c**dDISLe4
z`fc%81whO~Yhi0!{H!H@BV9CVdt-e)@?=_vK33Nw^RM?w^0IxxX`REBGEQS-x2@HS
z!EOCp;&@DVMCHZC{o%&JH>NB_1$I0vl$mszr%QPTSD%u2R=l*>Z>BikEXPMie6!UN
zER)R0EFbyoS1y0O3rwUy$xp*b*X-pMsq57lOG{5b<rBe0VrO26Rs3vO;^3p#d9nlU
zt@of0XGD2ZU{EUd+GMpgQ)gzXE++HXB{Zs~oaci*RY6bs1pp=FT-8mhcw0~@E{?Y<
z$KI-XUFU?7KoX1D16%-04&ED`{qCQ3ZvWnR1z%3(brPw%My>MEA#(5D>aG`sK!Dv*
z>Rql+>YvIJggq<tJ_OBuDJiG6E6{&)QvNoe=Jf=|?dlK!2pANh&&}`aH!@J22-aHf
zp1Scd3bXO@a;u)ln<-VU2q0#pm#TI#b!~}Y@Z1_lfbPPjBKgSVkH|feE5bMb7R$2U
z93wF>Gn4GT6s*_@AJeF3eiK5U@Y;F#=CNP%T}al7h5I-XadANefS(yzbQ7>K-FmV4
zg@w(Z^?iRS?FxPJb|Rky&0akvn}S4gi5I`raIlVjZAl|F%BB}+-YnnkO(L6!XK=lH
z)XiG^Jci|B%MU>X98^GyV<xL(l}JN(ZmlPKvoi-}Al;Wx`c=+C0S*KSpXH&}&P))S
zD@R$)>Ur}k4d=n~Qby-o^O5UKn&jKS<`1I*tNSYi*HjohOPq|pG;__LZlRO2s8tmx
z8N=kX*T(|`)m^IGu4!B9OM5NjREK0ZFVYm4K0d6?>s}wR>;7BqbS~AkUVh;H>eY6H
zL+cw_!EBjJm_U?Am~bosB*(`D_C#Y}-tkcJ>pvtLr?na@<cdOF?qDjaW9%2Xpy#4K
zPYGpmzSw%(fx)NC)JkV=?oe}Wu_gWXZ6#pZv2F1<I5-Rqx*t}JmEKaWQ_;iixwp8Z
zBO{+&oNR?}nJ(s*l&CNbPI|l|B3f6}$RnC4eOpvkUM{b%Ul^ZZUk5jQFI%(C<VxQF
zV0^dKcB60c<syA$_i1FOiplc*!A=Y<=(c1Cm>wfYuN~iOJujMkmkRuU!okTv7aA{K
zP=Ijq^WvfraH@%g%C^(<y4mE(e84%CLnXsYVrryw>7w{hw(w&KL=7IaxJ$zg!9Ua>
zz?QfPrGC!P175J=%|X}vEMy)k3JO11jT0?+;ze(Ws*hq4Gc%k&y;2*)5y_{5MyM)r
ziZ+7Sk^$06$4%DBP+mDx(+Y3`U@#xAy6Q(aq2h{Y@mkHb6q~Kxi=`iH-^v{pq)RS8
z;yLa~&VcC03jnQ=tSL2gSYc@DKC}f(a36mBmT*~S^U49p@Tb}P>$(ZzJi_-PzkQ?Y
zlubpwM@&RyveR(KG!CX=Vz)%+xxLCkn{`LyD=@x~-^C&d;=81Tg0cY5CjfZ<ORQus
zc43yz3P)#G*UmZdX!?NtHj_ktk)htbCl=<`JbI<id1&bC{O&-O1qHh~TtE^UWYf$J
zE5h!P2mr9xS`glwT7$JckSHx5-<R?9B)~xzFoa_E_SJrQQcdSo(Kg-e1(Y^`jz@lL
zk3_eDABMqG#!!8WN%J%w0ddjzIms<`gesjF0>8;uFHFc1zn`Swhv3Lb849V4{eCgv
zQ1~Tr%8A^E21zCO*W)qUp&f<UuYlyIL`X}1OW;or|GGl(0`&3iyFj^`{W<ax1R6!~
zkAi=luEhbmww{`RQd?E3^Bx4_^!wF`d`<oUXTI)fsKo{X_$Mo=BvJU>@ZJ9cCPJ4I

diff --git a/linux_basics/images/linux/commands/image31.png b/linux_basics/images/linux/commands/image31.png
index daf7f54bc3f0700b7aed051874171f4bdeb65b05..38510358625f9351a449c519dcc25f686c48aa57 100644
GIT binary patch
literal 82195
zcmb@tbyytFwk`|=2_Z-zf#48=ySoJvTml4l_rYBP1PksE+#$H@KybGp1B2_}gAdM~
z{PsR)pYOZ><=lCm?yjlss_L#@wbr}VdOKWMQ3~?~(F+6w1WXxeNfiVHEE)s^B#-B)
z@ERTER`}tinU#cuvW$cTg|ZXC+{)Gr0YN%ENdrw&bqGI8M@7am;JGw9F#H|&*F+p`
zWW>_Il5g*0l|RToXK-`*+|>|4m;6TWjpI}Ug0Vzz1Iu?zy%A$^Gc!HizL4Sc*sqlx
zXTWn`XUIev=M#Nei#sYpCRT@ha>PDTEG={FKrmVzO+i7ebPU3)$pA_RM17xt5B=d$
zQAo<DcmBf%#0Z}+HT2YUSEHXarU<^jMnZ_?3gi6tLY%Bu0b#8VDXkp=!T9-%juK;R
zY4uy<XZ$a5HnbQr3i}z=_#~p5u;<_RI#Svre3jok-_}B~Y!VYLQ;tRPtS1*gWOyT6
zfUx^kjD!N`JQ#;oOz0get3fbC{1D;D3<nyRnt6(1F(-P>8FGDdUrt#*ZX-5Gi5tw6
zBD(p+H1?F-uDhLsEjVv!>?xVS;IG+}&VLifARpAM^Wzn1{!i{+0QCpgWkj)3V>8J-
zFd6q7y5?%Xujn;pvE;buHT1nkzn6CDqC}`var=YbR^q#~7JN;~No&(Acpe3Euup^x
z^u64W=TFH`(-}#@zW%b%MCXjlPxP2>{0b2J^d*julF*m|;cbI*{A<h_o?g`N8Q0Pc
znC4&J?|i}r4<<SOytbn-k0@C0vi4(QRwctPu1VRZM?LS8?ZwrvN7Z;8hWBpfvdazQ
z`q?S5xGrtH6E2#k<ahMXK`qZeQs(Y2)u_jDeNJF?Q&PtvDNb9Y8i|^n-!%Pf-z*D2
zsR_?x)8`~0S4AKw{y`oS|E8CwWV3g=?#9Gq_H-?n;)R3wb3;UGTS5wQ(`Pa^?!LVD
zg=FZ@d??Vg#E{)fv^n{xJPjpZWS{0dzekUIP8YI+f*tu?jB>`G<oC~P77Ay>dI!T#
zSROAO$-<CZPMVwylU)XNa6OQ@;{oj$hUG2QrTrbVjyW{4`Jb`QYF$v7!*hFajFH(R
zcf-=x5Sz)#P_o6VTh?utEZD#kSKkJ{@pM1ycKv|1KKELt=Dtj`KLBfxyl9ATb0pGH
zaBwdiZSygflw(tV3AuTVY!Vv{`&*W9ZgN?;PLklk>K1=u7XdeD{<AJUo!MLJu#J;T
zc{^IW2}=AgA3Muq1m+@he>#PJ>bRPC$Q%DKFXd+!&fJe>Xi=Ro&wog#j;%S5UXIun
zMyk4=%Y9*Kh>7VHK^#Vlb|&3%Ism#>`=YY0y$RmF73V~KAvukqMjV;WnogNw8jhh!
za{UIU#zUoR@D&rU2CoK!+Un~|n|*5MHJt#q3I93f`Ildxx*i`Nsj^+;q7X>vf)?8!
z>c;(ed`L5p*K7;L=vmbc9A<+MR#62UqzIom8)A|eezO0CaUDQ`^P)fSZ7hPyFH=nm
zcHIdlHq23^b8&RKXN<qJs}XGx7k{yw;LT(2cYSuiy+>mCI<h9vj0sYr^+5IdWiuH{
z@f<yu>SgcS8Zp~f7QL88REW}axWT=Y^wI+H!P2j&IWV-oCQ_EgVh*Yo5Zw^+M`lQl
zQ`!wOZ;AX4zK?2`VowYq$}uk?6?kEmPr`+(AV!<3wX0VDTrZ48f^m|;1zS5bOOiDQ
zG=+6R2#!FM$1pKYPQ~c&Z`OR7{N2ph$relfdy>f)P3F1hPkUvWXme4(o^ZZr7V9hy
zm{M!u%?R1wC%RHLh)?u9NLK<4`k<S_*R)8PhO!Pc*SH?v(7!QtbA3S1&8QA?2y-Ah
zE>i5ac^5bM9*hTEx0k0h$Fsmq!R37g!%Yvf>kaMI#|<}?ccQsTFqZaFK`i}NpH&~~
z66g{<BjY7E_f98vdC+J}tu|3to`n`lLr!ZzDM|_Z>_Xr8+CcW@N9i<iEyV>zs{-9T
z7nR!*FE#I<qTB&L6f%`6a^_T&RH4cS)>c+pRyUSWpm@u%>7SF}VpsKpjyb^}B4gqG
zg@sdz^=9>%^)z5+u$(}qy%cs{@o$XXk=@w~)eG;7Ch*InIIxgi?v?J5?2*6`BY47<
zPM}eMBy&jMqrkQRnhVRG%Yll^kxNUf&oX~&QfsK|qO14iTd({}<BPM4<o%;L!D5(N
zb^)N6{3q*-K}n~=Q{tlpYJau410hmBQomcj)u&>_sb4E!En@AI%})}<%fw@HJ90yf
z;@4ezWP40PNaZ7~2DaFp(?-(n(s)y$p=p?#FYz#SILh7TlZ*h7A;c(z;gPaYS44We
zUVu>!Ebei3eJfpn4+xppk%JJxF=kpfWR-Bdj@t7Of)SE}wJLhgt2#3?#5L|xw8t|Y
zQ3N#KF<&?5sJk>T9&H^<+Y#Sc*s&RnNq5&`V?ttjk8i`IsCnPTVd|*aQvO06qio>!
z3`e($Rm*JcZ0*GG3d7XTdF!fKJ)580ivrVLQLc5aF;T%|eCb*|+&rBNDz*!a#*40v
z7PhPN3yai?%(Z1r-qrxqi8|KWs+!JCG56;#sr$;?4r6h<gKndaOIscb=&oljxPo5<
z^qf9r0yC(`(=!%7;e5J|jEycKnmYdAyx#n}b*6cVe29dQyVk?>VGxpU`>8Nmn}2__
zM5!{XvZZoS4-hj)F6`!Vy4yeH-^Sm9zQnLx*)qM{vjl17ZSFjAxWe(Yy=vYYIw66y
z4Aw22=chEKES1fbjV$&HE_>&@3od>o9nl{aIgmI(ze+oBo`Gamr2qn;eyg4Ly7x}^
zZg;|@CZeCX%<ob|AJrdyo+=(m5zD_`d?iN`Kw^G&6YwPfJFq<Ho48<LmIDd@LWXb#
zq^q*)Y)zsI(A=@KuvCP@^j@fdtAJZgl#AU(Vi(9(R$X5GqdLoB;v{Wd;nlaW!LX!P
zM?#!gUp2-K2oHqauI7`awM~7tLI%-3D}FvJ>37_1uGv(NX~VN4W{#?iL1b@Fon?17
zIWj5kCnHoMAs6g$y5DS`a;)1J@8#Sm?uADCXX0d33$455N#t?V@XOHBGnWeNDL6@=
z{oIO1&!-v9a-i&c|1th|tgNhp>~b7fklkei9G+>FWkqepOS7Q#Lu7BsG-0SEAx2>;
ztvlO^A~QBCqeJlFnP>=H5sa;w*^chMazHsip7<u-&E3rs*J+uwD^ujZ^K-OV>rtz$
zuC+H{!^yGf8{-0nXB=r9korzRQGR?p<8f(g3Fx`ie$n2e;%gOMPrWMS@8y?1s-^z!
zAa!5R^=O97v%n`5>9f2F*Xy^xdhR|J2Av6RKXiZX9`0_MjxQojt>o1cc-VMZOekkA
zME`>E){#a;m95S*dAt0k?s#HnbVUFyErGq*v+{B&*jW$~Jh8}~Eg)*~Sk+hASN7e2
zSz3RxdD3>hJs7(a<EgSpvQ1L|cgG-LD!K34cxYpe`dDs`^+t_>N!VaVTV4OksMK)p
z1}f!maO(S1J8D)j0!#+zi|bPAIhvTQ4eOO%sK2T3YW7;%Z{;rMF0|3F$gI86ZIQZ3
zcAaq@b|roD`3>fQ-CULClTnaI&*kviFpyY*mu2DFJi%c)X-qubrYY5qe(~%PZ3vsU
zDFjeaR$Iof`e{kM`RMej;K;(y^hp!gV=A=}9V1vMDCpLAWL<hyS-E1@>g|cConO8O
zPH2RjDN%}Y&$Q0iFOMwgG-4mB9^Y+3F0uiKF-xmHUww0~a*n#9Lf?kU9>lg1x(Z)z
z+(w5ahBWq=VDs|ca+3*goDGiWCrdHL5R&QmWqA3lpFZM!r1eTSRamC2Qxvhy`t5T!
z^Gy|`-QQH76)og@l~Qe>n7N+8?>P5#IOW^{!OFJCuIgNK%{|V8^htDjJ$jYQmNgv5
z!wN%2L{f+s`|C+NaXq%TW@F1bbvO0e9E5MZ7NdHJc^9X_g7z-}BETf?gFZlT=jC#i
zd#FS4Mdk7GnRgNFr=R=1FCbK7pyrMe#wrr#?{Js9wq7UoU5Z?QK%_{N#ozd};I?#e
zI$zI7FXbuqS_;CsP}gxBFM9d7biK5G)72UH*gDUdTYMgT|M6*6&VZ<M>1KHIi!;C$
z3Iusp-K`{caQn3#klrn)!G@sO7YcV`x5}qerzV@lgG%nV=eKueKK%Y`bYHtd%*~Nb
zV2TL4^ayM$J?A}=mze-DoJ(O>gn*}Sv#@T&Q=}Yxx1XB=P3T{Js~1qj?dQv)_tC`>
zT;0j7i9VaQww1P6p7cw2EUrHNeu;o9G~ts7gTd_fp-<1DCG*S(KZ<@re=tyXw{>Ax
zGPv{^uR5P3l|XY1wys^V)n0jgt-A9^94Pv}YaB!S4(@k+H`A0cS5QD;fR~>mAR`hX
zpukIr@J$4f_`l1a5a|$}{Zo&GfDmehfc)=k6ye7|zgYP8r_H~P&*DQ6(BS`Y;hRSe
z(tllzMU(UFzsg7+@N)>_suD6X@T01UlbM;lvn9Y~_sl^WUV-i)t>uh>fKUBrLzGc@
ze**6xWTmF*qNyM+U;?mXF){@ho3VJ<IsEAdLC8Y@UbHiFF{1FWv$b~?@DP6Y&lLjj
z@}FwfcNG6z;$kEGPE$ddLIU7qM#0U(#lrSZ<OKx<g^-h}xqyn~r++tx{}X;^>Ehxb
zz{=|G?#|-Q$pUb)U}fj$=VxW(VCCRohF`(#>}l^}<iTw3O!co${;MBJGiMVgD+d=V
zfIY>ZevOO)t}epw-u)TqzkmO_Pcsjz|BPhs{O`wtKOpO$Gpy_^Y^?v?H@vCPpIQNB
zD-SbUO-U;|_?*GV5aHzE;1K$!!T)vYKSTbj=@(}+CkcQZyrqlCe`fvPjsNG#|9``O
z#?<=Hm^_^SpCSLpnSZwwV*T^z|6?ltHP8Rl!Y5kfg%In1zci5-gW|8};qQ^eN>WJ;
zeuPWepC6(Sd`I`M<DYWlvqdXO9|Qz31Q|(jH4ntYW!DTfGvfZ!^y6b(t6pTu_sAc`
zVsZD5YsJ)L-+x4Y){B6gg!8IUqS_<rIPv&cTfi53#{^-k6C7b_INpc0ldq;_@?ZL7
zb6Q+sR|1XSD`ag0jKmQTk#WTSm%DcqI6;QS$cdUL{|`DNK@1Gneg2%{D+1F0Ziiz8
z@99;M@yGxD1L9Dm4szqrBOQT(?^~Q9v8n9Fd;@pq6E|l)F$vrIvt@Bk_a|8K6h=sU
z(`{w*CMSfq0Cv;e=UR0;tSxRwKc0xE?u$pYIEH$#w-YpLjQOb+ngE^A&U%SyDPd>k
z<K>$k*NCK2wiXEwcUXh_4gN#3j7A0q;dr$1cgG`4X`E*9otOT_iYP<yDzm%jOx|Ud
zJcx_nf!T1zR9eh@O;wD^6QWj~Tc&P{5B2CWwREgltLp*9Py%(r0Xb`@Yv-eRWVvRI
zcBL-5H@P42iA3TnkF7YgLh%Rf`1dl#kc{z6L00J1jdC=(=qt1FIK01>i-4yhgs$GF
zop!0)5(3s+y;@6;QB1|L^iIwFIRIq}tKRnuXLOfeTSE!MwbcI7d6MYQfXsl7%V?jc
zp7)sL4-wsZ0)z=Pk;#V(#~@GiXcPPSW|<#cz8~RtNH9sc6=60kL{+L<eAc)M^p0WD
zu4i(RaPT_b^nXjq?`#fQvyq3q=Cubijs56kC|1foRpi&GBvDzvsa3fS4;<$oh$7b5
z7>J=gy$~Iv7J&F@K|tLGjmzKPl$rJpLQN-D9?slNkyTttL?a)xpSAN-o6EbC=oEY`
zYjoP*q6d&rX1|w9R@-^xSN&Ze^X7~h0;z<yGn#Y|vl6iAKED=W{iGMLGe$I=4rqVJ
zGtj6zMd3bWY-To*<@*^{z|Z;DqIj+J97q0MN&Z|^bTEoIS@zb&3W%^6U&vVSq40;(
zp7G3cn*Q&ka&ESIM<`!Ed{1II4`c%6fICasYs?}({m%EcV2!+it@_Jt7O@Up?1_dF
zGs%~X#XsC##^-&^a_IJT0$Mm_^V|b9D>@7)*b26n9~ZiHgj?Ouw6|?Z@MSXue2Y*G
zSOr79I|11A`u8#rqWV~k3_izp8}`W?O@u?2Nvj&vp_)~t*mZ-b4oFvrxdO2?%$^iz
zGuc0-A`zZY{OB@05#FHp*kGP(I+`jnsa)WcB*5X{wc!BaTI+AWj(JgUv-k<z<gXP^
zjfq7A=03H2+^DqyW%*yU^YQ(?G7w{nv!PHy&huiM!cnivpw+4~M}MPvcL!dLXNKfE
zZS)RF*L;r*Dv(W5@k`_W>|{DY!)}b)MEwYjY585h!02?}i(V|wR(?KsCuZ*nUA9*|
z&*7GDwTozc%#{c&R9;tc+E-K7OkbS^sTRpn)|p2V*hskOpg!F@XK~q`{v;9h(jCbC
z64p9;Yt=54s}PRA(Kfq1nM-xnB^6{kvkTqc2##oK_53#1<T#po6|^;$FhV?#!GB)p
zInwB~d-4iEVsvD?es4exSRr0)J<y6hT9=BjI>_fa)N68B-DKa#z>$x<b$(4~p;>4C
zh2EeelHlEHn|F5mQ<oTjIjm^6ex~FxkTbeh2A97WsF5yu=g%gMMJDt*Go-8K-QVe1
zT>`jDEQG7XDauqn*I`Y1{qnF7knwFAvX!%bmQV23(t@*Jl@x>=)%Um3{!Ar{<7U5O
zh~w$TN6$(hZY|(#6`KyF$v`-Bg*I2Rc7uMR5BApVT-SW=^LK)&d=6p;r8>o}y%7Wx
z!~^GVY=*xl*=+r2Bx@b15><*1L?J&949A}rEIar7Ad!lHAMuK+s6a7OmZLzajK*<!
ztbO1CjI7n5{cNG#(<W79Ww_~dYcu9n8raHR@5|9qclpr{w?eJ3kx8dRrBc6zJ-XUW
z`1lU6wV*<sK_k8Ds+cW8g+j(kAIiKmh<k+moaR#-eH$(9{m?I1;XcNjz8}_hHIoh8
zSb)XG%`6hA{?Wx|%u0eatNIyI@<22x=uVdu(&1GVJ>>W5?@a4)CR~SlTa0A+BIil4
zodRL4G9x=t5-7(!cHno^*`;)liEJ3*=L_Fk$@Rdq<y|91oC!O@d(%lAPv}F;cJ~cN
zE~<Idcg%fIGSO_Abk-6-wZacB@IJv(?OUhq!Iw1J&o*}BB&hXTx%6!|i?gw29bd*e
zL+&LC?AfNYSuGy#(<8}6KkASwjckvkZ2vBl8)suGNaJ%fwwi7&o!)=LDk*kaoYpBl
zGFLTXh52)3tWY@@iNm@VXDF63lQ()ogq+6LRb)JapEy_Ia(6{WyUF?;IxaF=%2HIL
z?ZOVSA~QlS?!%v%?c{GGun;;NQ7TaBb6SBc5?N(4tA0E@C(TTz3=&OdNMiIrlp~f}
zaQb4l+0Q&>^)`d??^MAr*FV7GMcg|a(!g+5>xAi8R*@?(OgFW3+FbTLxoW5ngJ3x&
z4{8$mmcw@+rcytMr|-QcV)x9a;{)bGgH4QPLJriJIVe-GA;stBO!|)ow(|j<`jT07
zNs<mE%9zxzpUH%i3O2V)^?xpPvRmjdDZcj|^CwASOd`P0JYE5UtfYlpPO5b;t<+ow
z3=d3)GGyTD?&JPk<&HaZhKR2=+1OL!(rj#Yw8`&pQz{#!c`JNZP*J)hgAyv82FxR<
z4QNTVZO>$Tcze4}Ni^0}CgHXMHa%)kcqvykQko#{S9LCN0S7B@g?IM!v#H@S#60@=
zmojKC_0@3WsHA3$8ACGEFpqn#LX&5}#@PvN;b8fZ!*Wu&SZ~6YxmBdmaz)weVwWi#
zkJ>53P`nqv0z6zWG!4H;#@vw0x%4X8JCFgonbY?0o16QHb(Nyg>3CixdpqUGJzHX}
zu3qyoqOb;J8in{?VyS}^@W{7t)$Oywk=*_`Hlq(MUPnK5+e?nZD7#Z~)#nH}%;i}-
z?}cPIEQWU*-v0QK+g-@T)-0@c!agbT?o4}{=F){ElUl2GO)QsmvruCt@f5FUkXjJ*
zoMrEKaT1ENzneCjFYg}6Kj-BP&#1G-1Mz!b(7NZ$8~B{LLTET9A`OjAt(}?v&Q1q}
zy?|@tlGg{zabhlTgB<xr6>gB3hZ1Pdi4Xp$vF>2GEp6n*gL|In52F7VoUDHgPLX)`
z+wruq^d@N{9((42XmZdm{oRD4<pVpb+1hX(wEoMLr4HX>m!mnUWELGts?Ns`F9`gW
zY*ZrQ_dBdcZ#oxw8qcVK#fro4|7dJAQy)db@5J<>O9H^g>&Y=@mCRJG5K`0LK*VKD
z&1vy~&vw6C@w$taCz?>zKepY|*>h8~+OUSp>gqd*kjr&)zY*xzzy@EoD3b6#TED`a
z>Si;>lSlxQbnZeYjy$gbuAJ!jndAIaknyN8GoJmW36T_|&_>2f7-*xZF-Ar!MT*)h
zz>m-a;$PhbG=_h#>YF_QRn!+OkH6jM4L^_Jdin^LLeENF5vf|Uk$q5n3YEqqTab4X
zCtAlMpR?bP_Pvh*kaq&@f7lx=2bpw~5seZSM)k^M8;vRyp%MU_BV>G8QEnrzPtI(!
zh<Ut0z~mNNWozg|9FaT;-<t0qyF-v%@2FO;E0@fyL$6V#kI5Ik=;_#siWl+v6q`o9
zTtx?;N%NgX1N)g`N{r|})#d(N?DgrUU|X%DnqO`-lUD0S<CUoYG1E{AYZZZ0{Z*gT
z89~Z&8*D{o@KkZYm9;UZ0>*5!7b(5C4di<~I^=XaoOkN097yMO*@yjTh|-_tnGl10
zT|}o@kt_3VfwD!-(z%suuIq%f1Wf{Zr@V8xd%+g(1(=ZW@_U#ZqyNfJ`sJ_mXa0-T
zBU#xm{Ee8OX=Em^!uqiej_6>m!Bg5?fcGfpq6|avv`NV5xM3)$6@ACxhR#ffSu;%f
zOaapO#B+f78*m<vL633@^DnmuxxL@ih3ZiRa8on$#}%SobJTh!G7ys;dnD*K{A4~6
zw*W4=f{`{NCNpWtlX+f?55-d_6v(Bh_o$z8A$Wcq&l0AkRmzO-$2<_IYAFV+m%T``
zUOA^I@@@|kQT)O8Nj90TNW3j|oThjpBWcMKW0;?GAd`s)qCf;n_z(jDed^zeXEVA#
zaJJ7aIB>44a1$3VHtXphBl5$@I*%Y=SsF3|+GW$}D)&c{(O9VzpM6L%czGl1b$QGR
znaG6AVccxpoS7ATx+K^dKvy+|gLXLlv_}{4?Z?ph=*CtviHEYa_}M_Vwce`T@g?DH
z)P+}5XU1$xYr0%c?7l?I>p0*Ymd9r2^5z=`HL*`oZ<z==3Sj;0F7wa#D$X6jJ^&NK
zyJZcP+l6A_+Fn|n1+{+wuG95N+~WKqaPfUn$ml+(j2`Z^y&-LP&XGwd8WM4J)sflk
zk7C3mo=GmwW??B+DT?L0ty|6?KY$pW#&4g^YUKBU`Fma@7b;~dGJIizES(=B5V*9l
zuRgr3v5}k@8fP{8zO{0rkS-!u^&m{NhKbdY%m^!=79twy4)qcx752&)U$hF(g`K1<
za-~>gGt<l9(&D#)DzzKbZ!gK|XqB?gl*xTBC`<JYK6+l~`Y5tpMy?o$JlK|uW;RVi
zv);xT8h3v~FBA{bRyixpi&xS4%#7nH)5(Z+C`woN#4AOkkmk4utJ>(xb`g2f;;@MS
z7LF@$*Qk7qP8xxd1R2$%c$zlJ5GAj<OAOAlnf3Xs(%eY&GK0<WCkda!pvCd#U<9jr
za;;fbT>UNZ4XeJ8Yt$a{{=}}u=Hz;hKxGTZ0c5p@GzA662K1BWW5nzD880YjS@XEN
zoje3wLs93egtE6}w@|Bq&!WBWvnr6?MfX~}J-w^<Z~>ZPk>w|gORc!27vrY)#OL=N
zybpYr;kXECGLIt2XmJ$n6c-og@H~6jX|uH0GLi6aOtLHV-a%j3l|gzqxr~9B*Zx#1
zqWG^?Ap+9W$3M%^o$L44L4{;RjOd|e<{JCjPct5j$&W#gS5=)%`1qr4{^~MCT_hNB
z^9SseXfB8H%(f;^S|xqm>a>a(i7n0q!v}zlBNUTv;?H}(l}6+$()o}4;lejvt)d(L
zMm35HZR=1+0`6$Vy2(HL-uZYdx_3L?*0fSk0?`F(o0XO^`@r3zxB{63KFV|tqHbsH
zUoI~-s&rig1!dyjUlE(AVbW+z7^crDWKQM~0v1~JvKX`;i`IeZW5L0E;12LG`hqD)
zOuE)|$YoUkB0zv|>_p%`&b;N)zoQ!@dJbWZ=N0UrB4E{Z(P#roWft$L4p{RQR~ytB
zwLr>7qDk8_4k*h>Y3DrazRq<8g=SW(4qm?FPA%C?<?xJr&8jUa%G;IgjzRyWL{qNO
ze$jDYU3;|#I8&6?zPzm<bBMQ6v(tq;p%#mGo7R&5ae&>i+mcq=JlkJ~2}kV@7As#b
zS;Rzl_q}8GyeZt#-?do0B30RG`RR1Hdnzcf+y-=%#UxV96jFaSYSpd>+r8;Pohjl+
z{D2WZTl$a(k5<U36v^))GcVt5ezCg}DipWC=)2sVoj^a)pYzrlEHob@DA?3F%J7Z{
zS_BLf%YFHcu+$Y>7IMok9(c`hUVIu)Z-NR1K9Xa_vzz$Mc$+(jd7c%ppNXw3jr)#^
zw7p@Njkoi{#Jau~rq^jq#LH;7YXw>uZOSAR%ej+o$^cUcrebwt>@&9l(9Xh^36Auw
z5c!E!|9JDQuEfBdi4(X-<WQyC(!MpGBvHZjt29@zuD1HTFM=Sm2-M<?zh86riOyvQ
ztJ&l9-S66uR2Gqhvt5BZ$FRhxp<`9Zcs6LFTjpkS!t?jtGWOQ)l*#dqk%&1^G$Qie
ztJ-wfrKi!PnCxu2++aH}gqRse8|d|BD2=lXFRu~Gd|pF+-K=pb;_?}vS)Ya#cwe-V
zf`uZKyzHLNUBUV$i}he$6Nf{Q<N<5uS4*3yd-kzM1`cq=o%#A!u}S1J!=yKFP`HxS
z*9IkMCDC_9$iiNtHHCAWi)UL39`5DJ^OLQpD^|g=wyV2{wnGq(EfvtseIGV7h94Nt
zJH0OaS743e79Eb&dif7ltBTt-8{(&zwovWfd0hu%q{s#jb7$rlcr4aWipd-#D{MX9
zL7f9*)++#AX@w)|gEn@8R>Vt>4#Wwz{^7XP@vNaQW2MMErQzU|Ja_XtOX|;J83CWH
zXUqE7?bU9>9VG#y+(k^ZD^D0Ht)<DBK}Wz_gNW)ZR{eHeeUF+-JPJ&k%&_*Ab}fm$
zg}S=;bNtRJJgiMA<o+2>2S#e{XdrSb&eZvGt7m%)`E__ZPD-2G8msZ-eyOk7xb`ZY
z%VMbO*_|hU!7{5Wpcz^o?(-*~6+MpCVS8;I+!kOypCI9?#v_W&eg&s)(~g6c;q$X?
z*^$_;XZ3NMX>|*%o#V;)%!?t5#%_!Q&BO;q3hCNA<7w1;4O+8$0`7bCR8mn%phe*O
zS*}ALgJdTC>lwWP*i^SEKC*4)rcT{el``yO8=BhzxC?^@+=wl5UvRiw25WM_w~5!O
z-E|+zpwDmGX@mOG1)=$Ge+xP4`-tJ6Ak^Z#XCc6+t6Q(BRaydzR%a#_MC^)%xwj37
z7}SJB(??%;cZR;6Y}Cb|3)LOX@s8<Ge7n4Y!I<iCJ@|QVHa{Yf)j*rW`k*KnwMU!D
zp~-rd$ZGDaVa>28WYWHIrc_lA?saZ_!>y=bYwrW2XjJGkX0~0#UlMbvl^R`CCog$A
z4Hul|Q`hmZwT{5wsX#?EKG;9^>>S*hepBQOSX?;WpR>tjP7i?8nS?f~G$~>VEB5O=
z+H1EsMa=-_Wvh~WkLf>w^SMjrN>vq9be~?fq50`QOTHR-x#ZcHJOCX~m^|3pp|ncB
zTL-i36B8-?4Cu~U7UZu84R4s8);q+0^YVTRgYb4cj15XShkUD_ZLc^#4dm6Ia`rsB
zR8+j4v%_z6)TFW;PJHxN%kydB7$=u=c(%Y3?I<cgg9=FxEw&>u@I9{};rE#l)+75%
zPcQE)9MDVu_}1!bBW>`2_F!*02&<mEHe>dj`;o+EgjB;8Ml9w4im+s>>Cvf@N$9_9
zz@!KAShVP%iGm%+Z5WdpezoKxxntV=y1i@?<%*qBVX}0nqyG5)HHXhUh3C)fgz=UY
z+vVz&h@V}(TvjSWO4I%>Kgf@kM9HpOBFTiut)64pFc|^$<$?(D<>fOO3Jr7$Dge%o
zSBF~5&@VEv6ajeOB3*$flgq2i&uNO}lRo&R@qc#O8axgz!M9n|T)t)A+GWQK()=<<
z$`toTzTR>42fMzL6=#O`5zCZ0XPZ8@mgY9rfDy7*t!X?KpdpDCL$p$V;a()D^YKd5
z3g%^j`GM5o$D)18sP>V$JTa|jRnyUe-(lTk^=C%@oQgzuj%c_<4Syq-671qzgjyK9
zbnf<>lO#w=t_}>pIonQxWO=LqE|A>@(RkH4XA65r<24J~gK8&m7rJ_RSQ}EBR(!_L
zgW5pF6MKA0tA{7iLhv}<Yes9>STp6Sn_nZFZkiM8upe;T7X7t6liD@m-h6ImV|B7q
zU<#!~?05*}<3xv!2qBjms^tmOu9|X~JK%o4^^2<2N_l{0o6R7U;x4)xihURT;$h`W
znjj#c-uj`HM4$lV_*PD{tGD|$t*&TD4IH}{BHS|{e10|-7(Pd_Q0EQ#>TCqlvjMjI
z-29wIvQmh(mmU{h5hawbN5~6Coh|}S(O5&0=stfa#+(+G@_s4ct4*9(b<^>Bzhz9T
z<;ASo$c~*KRLf*LMM5;LTj}-1BGkyv-uEG@X`A;!Z><~U>FyH^rYF|pJr(`g7M@~6
zX<LsHDrVfD5D|W|E7V~7QUJPAk#8#PpPw`}hs_l|Er4b70k~kiS*`v%ikNrRmU~6w
z?-EpDrtpwY9I^=974tmlLc2$@M#CnHM|_4ha`vW-i_XaCS7+vA5{eF!kY>>+r;5tr
zq7!78-g##<Mceg<z<OV`VvAwdfaziCdi;2C_~@Ll-~BfizqXWVHuI-ntATH48<NUB
z>puC7slkK)F4{o#a!pe6YlaY>Z(7%TrN!T+m-rm-75f5TmZ?|Fo|Y#EM<nwFw6%LW
z$&6<#^nsT)`hl<d!{KY<t#vjuU`hYlt_t;=Vg}zH3d=nz$vAeMe>%g>x#-5xh<elH
zc#cx2fDsqQkmh;%Sd$=RBAJ1bS`ObGJijwx@cxpheui!G#v%Ik)#5X>izF|i@2*Ej
zsrV<=A)_ZBn2n&9{etj?aeti;EARvU(9ap^|9lhNTI(@Xo6b|e%r{Lu(c1Bl?Dy$6
zU-m}~EiFyH&)whRm3u__xnh%)v+qLS5W|3pRKRtbr+Lg8-;H=Fit5|LVGp*KT+nSp
z`&wC4zIDTGtr+p=s(p)dMf^6mb8D(h;(BoBQw|B}Q$uIfvexy5;yC?eV?bbd1U_>T
z8rk3`L46(DGP(a~!h-*(s|Y#wPmQSwb25NWBfy4(S--a3cA<3)kP$~JuiNC8zcrlJ
zgKnESySA9M?9IKDGRFF=!C@WO^LiaEC|!=5tHX0dU8a;0fKk?J^a*23_|(*Dq0XX8
zf`BfS&um}mY;;=bhTC4-&>?Qc`ANHTs0B5PLBF@He~F*Z=^|BaX5z7EOlOwC1?O-*
z^xO*LSPUMwX+p&|X@z5HPv1LVrZSDE!l<m24Cjg*L;)MNOS^}5kJCIZ+a+!DCqSj{
z?@J_R__JZ)GvQ+tf;*NbGD#sCcJ~>AfLz<f4pjknYt|T%vm9O+F9uEY-6Jvm<*4e4
z@WlA$;8Z?`?L1u?oDau&1%!ejz;Axp!VfNvcHyI&^>U4tvx-+xY^+dJq5+^+h56Xe
zGka)dJc}gTsauT2CR3hW7BP?Qi-w5%7~zfk07ML<w&TWly%dFX;5#>kw$)cP7w#bw
zqIY6H)fk{l<ja{4rx2mNnU-Q_g_{*(n;8#rFPN908r#(Ju{yaONuOL|Lgypcp)9>t
z<S!$w!mlY(J+K{@^>k99YaI%H;&J&>F>+DbQKkoTN4T$Dz<RUZ^`CyKfxnvPzQIsf
z5YTbaYl<7xIlaZxd4i<jZJiFB-vz&9`Zc9b9LtpIaJ&@tRj2jBD)Xum`wn*1P1abp
zYVkzRZNrOR$2}Fuktx{ZPW0$AVRX=Vbmn!(;<WaQ5~8b=A+%R-ttAnk`2;2UEtepW
z)FcB(W?r-&p-Q&n?(o1Iy~=yom5aR2a(SskP@_m@?OZJmvp>5lR)yYFnzL&iO=*RW
z`(OhC<vTzzujd&&*3Mx*lM+v(U=988mdB^S<=`=EwZS1l@7tZaDKZ|0@Mp0O(wjm8
zn)(Ey$630)mHet{E}~<Z5KW`)Gk!&?H16+UNPnQu)h_XPjRF%67#bwb;XGGWt3^EE
z6U0mDMwm;E@rHqdO6p~Dq++_2L*^c6)rWD}g{1h|(zAE<)0WLDIfi+`c@-ZgGlMD?
z-K4W&B8l8Kb5<pXsj2E-b_RDl2NT>LDI*wX3nw~_){F_<<rb75-NO&zt>})3YQL_H
zRCSb&+3OVecV_uTx!^A~^5_z8_R36~p2SvVPVD3aK;`xiV4oHzOi*M8kC(kOa=*Q#
z0Y|uzE5%ZDSTvaKIo+)FC}pnQ>~UITteFJAm>42HGDv<s1X%L7U99SSRQCcdit^do
zvFaKeuACp0<o*-xIH>|Q==WGbUA&c&nRF^ayM(lp7FCPF+Y1(QvgDXkEfD)Eos%l9
zbB(?auz+N-E=de7Z3l3s_nrN<$1ljZdvfsp#2&<9beEOeR<j#}I0SCxeVKGm%ABK`
z@9GRa(^FO_an7CiOD7~&luWFjPh*CG$&vZIuQF^`YgAbbT1hOQ!!EcnE-v>TqMfVS
zh|yZL*rqBqY*OlJENnF02o}x9mx9mYe`p02GtZ%dTfgARY)?PhI4{+@3Sxd?MK}AR
z@N^OoMJ0jy)GrBp+jJ|<cB<Z|N&Z)qhp;~^hq$%-wIENk<802%weQ}17zpZB3)j&-
zipP)pHW-UvV{SdVFuj+Nn6|U3cD{KZl3#`D;?l}6i7GsalTG2X^7a}b<`!p{QV{dl
zp})y!W3|Cg<KC1SN@Wjf>Ns)^46#MUy8kd&vG~?Jf3qJ`jvC0r-#T#9goan~V0Q&j
zy<aS>f2eR<E>iTM-_l*W%;wJF^xfB_*Dk1bUnb>uQp;jA7(-uPs=x<&lgZCG%BKl^
z`cA-{huE!&l@OKh(?_Ie$*Fv<<B_bxTQy@i8x?D-d7vY0d-b$4C`Imn%%!{XIX^de
z3ZBc4S9)_9_)99<GDt5;yVi4hPT8omdVFv7#0xIY(B{XCI<b|5ySV8Nuk{TSAoj8c
z=*O+d-NiH7_JfYwp&Ux0QQ`ve70zQhIGU1#{Q|fjG3S5sXB8)6IG(CVsJC1hwCZ$S
zZ5kjIbcaXHSOsC*@Kn{v@4mY2j=NfqGNCg~_JsyU_#$Y^6Cr#!;=9>Dm^uTsV*0ID
zZxMw(Zq#8*pkVUuHC%N^xHe#(<Us8UtY>9^Lm$Ze6nyb(%U7!l?@R4~0Ux~Z1<1Lb
z!WuF0r=gi^SGpL4b0xEy_)L@4KN<r<bdgZ-d_ifKBha(l5T=UE)8B=}6%i(##4HoZ
zt*?H(WK2zk2kF!J{OY~TuiR|9_%Y-j@i4<yWF$|*eWjA=b!6k;D;_olH}vhCT1jxH
zPjtRz3B@MA)M4Gi#t+Hl^ZbFzp%m;ha<iaqylVUOecI1ztmfGGj-21R{Nms#{59Q4
zNqgB*=$y|Xk2iR!W3Dk@KI<&uG0Sm$dDOdpZik~V+mT2aNN_2$+zJOT98K=n^_xEI
z*Nk?!A{%YmB@j3AR4&hujL94ZjK9<UVl%I<HIVTJYz3%S?K(CH3{R<7oEVC9JMfp3
zckaAQg(u>u((y!ULf*OaJFMj-GU#bt9pnQ}`hB0&$^9QZ<29+$iSO%<1l{+jB|7hE
zMyqowRN=7(LIIDj1h1<><u?w!B~UId&oRG?WF^r(*313blR*2c{w!hdLfKibTD!Y(
zW${k{3EwjV3>xzZzs}KY!4cL}OH9=XVFNw4qopJ6m>Z(yG00dtcVd>Xz+G^j{w&4N
ze9h)F)DU~vJWL>UzTV1ruW(a3{(ZRncRK?p)2c5l-@swWn-fW?(O!R@tK*~Lm*NUL
zXqGRSqEU>PXcZLFPrTj~W(%#HE^rjK5Q(Rj+wa)oO7nxqQv4MBSJIz0XyI00JFI+U
z5ok6B?%di>D$9M1`(B=6B;}qmjl=9@g&5W&xi?wUmLcRx<#VZoj8~D=s0iGtbx!f?
zsCr;#*5OI6)LVJI%HQ<WBRyqhGIrLbW-^s|ZY_;jM;*FCI%T+lEvgugEqXg@wcLPX
zH&{5B5S$UBh!Ng0B4cOG{HVqc={V{zk1^>W-9a8IZ}_eEC%l_&b<I2o*6Y#C^6!ZB
z;i%3om__~QzBk*J?Za<dV4ytX3pIx;W3elENDObj-RWcJgl}>fDjstzpYJ~3&`(M)
z_nH&^Os_H1?VsF;RrKz_k`v3-)j9AkD#Eh!t&6h1r{c4S)6D^Q{aT*oVb&Q}ZH{GE
zBw=mA0&cMo+wcoLP-Tn~+9f>Bh3`%zybL=$=aTgIr_(7)6uO^$hD)pHa6Pj^p5q_(
zD===(oT&B&w9@4G{<mZAcfx773<Ny8mA!E?%jj3~p6c%XQZ@_v1g=;S2*{E&B?)NU
z<o>JR5JG@ABMx(5xT~{45+D0BG>mDQNcsk6>bQJ@4``gatxY?b$=n0>-;kC;RPcao
zi0~D3VGV|TcSH`Z(r%bTFL_DIvk~1bQ>s#&$ju133!W^$Iq3?`PRz$AX&#FIklw%p
z(A@#m^VwcY@6ES_`iDsbp{CEVzQJJMRRvhBoN=eIIa-(C<TrI+(mpj9=8fH4F*80O
zx$;2DK=;(D^=89?f)*25m_sfaeu`-f!S@_C@mqsg3eQ-&5*l0<WN9-@n0*5R-#2-$
zdBa^f$I%S9J8XmTgLp=((KczuZc?b(h*1o~QnLT_u#P(OQ!PBjBfT?9$hDRHnZs0?
z6+d;PSRuv!dcfV_PY&g<8U43vkShK~OA@u&@M{iVFkdnKDCxl2c3CD*>zZM$67^ce
zA>WTmVs$ph)sBbXn(4?XRhktrvM0kIP-Ts(jIyq}yLO7z3DGB(3Il7_0blUUW4NJl
zf;sC*Bw=S*11eahY%b#L(R=v;ObV)4rE56gN?Imza}^C`On#upH+7TPeuYlMqSdOq
z;!$^?pksYRW~u=6bb?%5*#&eW#iU#i5grL039dC6&_tl@E<3{mo$*3CMYVNL>A_$o
z7ps92Or+=szxMX!OFe$K!{(zE06Jr;Wt6AF58(TV6s8o$6p0C6$)Iq@`WDCac7xs@
zc*}j`{=kq=a2gqPPbU$ndFr^HD1!*r-5Fk~T1^J(EiPZNyKGP1L~`jnokrU>#^Q8Z
zC6=3=vWeawe#_p8NAqB-1X`ua&bHpG=<~Znej>7C>hvbdX`3)n{k4kM{r{Csurz$?
z=lfSC!CHdzZ#8c{UKoB?ucYH6el}AExl@rO$kaSZ&8P#w2zt0FVG{D#B%ixGqKNmq
zw(5`hhu(0~gJpB1b%p&@VPrGA-)TBCSX1k^jLKS#JEdCoc@u^3EVzMe<+;J}s=pXK
zF-=98Ui{&h^HXH%+4<<HUsvy{-;;#3l}A4>#n~vQ(oi$BGtR>iz-3*b)uzaxUddeS
z^JDnK@#@1(Cq7&Tm9pR&yhOTv5Zm5pO9))YWK_-Zlf$iXG3BB8Iys0fFJ?~mOO?Gs
z=JZ+!V;kyEwF*WI0v4c^x49$?+O`6GN#l3%ncPabstB}Uwpr~~af5+>7i#XSM29p{
zaWm4*TVvek@*xagvc8D#jujs1Q7Lxg_N=j{hVuu*S0S_AVx)quDd_OD8a1Z<N0*x%
ze}L6|PBMW9Jlk8fAiXoL_x2dVnKuxoc!2VP1`NqFJ8)C91YuqUa~EwBZH=tsZQZSs
zI~T%1>O-Id+$&vbaZXVySCLA84nW2#18QoC+~+hIu$@+5K?j>m{NRk5aqk|TnnP?%
znw94$Aq4V5{*Uc5m5cIlUz)`JZjTjQaOcrAaDOb`m*u56SFu`95#1Hl{DvVhNeQ(b
z3VP?YJ84uCGTRdx;{hSu4fpl;5ws4&J9b^o<^|+(*}%DFLLT$JL*6f6%h$K~SLjI*
ziu!%ej%bP#sWCTbOQC6AdE4x=_X6{UQsOkxTdWoz?t9fz<#m35p7(0BQP-?q8*C8V
zaA0-_!{b6|+fNo5pp3yw6J0$p%tKMhX4X?d^;^=YH64GwGkJ9+m_xY+GF#6pbh`Py
z%?83azzhsG8afg9E1-ZQjFR_}?bN)U5Kk}3b2i_Pt;R4w%B=hPGgvX{-I_yroLv=9
z2&s_AAUcz;uyJIDkR!)hE2Y69oD<=>U5JmX8l-+~yq=XQ=q?!W64p>nR>3@EH(cvl
zuJ^Nddg2ZRn@L%@u0KLCb!1ryM&`RcJ<$=VJb%>rR(>@5>D7(jAt;{3j!4u11ijef
z9M2%<^O!^@jCy;TNz#zajybh-tg;)9bhg~oL#<%_Ag^21SpVR*2foYV;#w&)G|v5i
z!ga!R;U!_=z~s4AQUmUt(-}R=Vzy5HyokqXDotyE{Um?f#u@<<uo_r`lZQeaZTJzn
zFa(2}gdRQo2)T{J;2g-6^q8sq&XlHAPYtHsYlA=V(PI2o0c_28G`XI?uKy%QFyTgY
zx^&>Z(*E&xwTunF+r=jd15-4-BYn8(pzEBNk06r2AEZt7fa`AhFRisaV|LTZYf&~3
z^`P)Sblwo38--uW`hy2n_c2t3rr{g<(hDn9%B9In+U+wKS)Hf-jK8mD=ZJ<C_U-)O
z`TOG8)8Xxt9t-@RE)tWCLCiW$g5tZr-Z1Yw=WOH`G};M9Xm-2HRk=;oBC0Z6?=!e$
zaG`bZ!L=agcyyBwlR?;nCq_ZN9Uz~@rzPiVyNc3_ua8aA&)o94>8v3{mIlW>PZyg&
zIJ@(Dqc4V*S%)hbwAdJ@R;m(0RI7(q)iL+ENb!z-6v3(_>O;F28$0rI(Z8dYOzD0#
zgmc^t%javTpG>ev&>p<^HmUTb>9^Labb$=C^$S)_Jb(&#lDp$Ahi;?&vg361xFx2;
zmzj_fG0Mo;yO_a=(1yO#uF$O481I@#$m@!SOen_}Kk&fGBv%*<%?F`A_pGRRCRRb)
zCNUyRzN-f`!DOsBJNLQ`{2-j4V>kP=Hkp%CMG88=Pj#`$MvvvWt$(tfoEAn^lt-zk
zq}hxH3h-1WS+3^`=T)P2N2S1UfoS@Ke(6)=kL~!ACIgDnH!o(ZLR$mVSGxHM+s<pv
zDYHFq>2Ge!Cf=Kcu{j>_95rw|T3_4Q2t<byePYqdOO2*#u9?+dWP01^xVb||`mI$k
zEC7Z}mpcE4v*j@eaymY2`9*xw-fB8!JCrFH>W<xjI))m>l<G06!&n;>UO3XewuEt1
zcgR8+6z-N4^`kzH3cuq*%bq&bvP;-TNVn6-`P(tJYBBOE_C{~Z)LY#GO~Qp7P&RRN
zeaNgfw?X1JbiC_~*&|WmBGC18A;Yje=IK9v5ggFd=W~_Y1a!64^nQOMcP5;w(b_pJ
zE-Un9#zq&j1(05r0KT&E$1yzmad~zb2I$lN3MfWr+v<Q`O~k#DuXk2V;|OkK^=DEN
z)e}lwgj1;s#zp{xSPwyHO~hI7CD2s$@+$PNJ{q{MLxMAzrVWB*J<qoi;q=mkl!kS-
z)n}gV4hlKb)#lBA^dz+Ni5}<$OJUTgMAlYdB2h25Tu(n{TnjO3w;UMDI%n@R+yKvF
z!0F-gE9^`Z&IXO4)O3LrfTupgyq+@WEI|z{i}A&Jdj@RLMAp%-c@=;P>ozxN(n1|%
z@K0`xVBFxjN%Duzr9WA~S$GyuHgV9q?jao@n49hWrm=;ftG7tuK(2}`lRBKIpk*W-
z0HmUlioq0pxohu0K(^T%MFoW&QDW}TUSRC`lwsPyjU6_x^eo&V*(=>VvCFGF`V>jR
zNWdcLqYv#?&YNL@s~hHwtFb}o)_u$QdX~+g;YJ{eT!CM{`V&0WV_8#MyMlhV{Cq6r
zC5>YCX<a+qoz&EvcW;?B+{nL)5FE?wxO;wZlObxcFAPD1W|_c_23`nl*YCA1Mqck=
z&>K`n_JaD`+iEgq9jvA{%pRiGk9n2ZrsVxdL~j~(u9tl8g!g@Uy&KC_#L~Z~^V+Q~
z`NOF$2Tk9h*ly$ASH}tb&O35X*r-FVFd<Tf)U|=(ryG4qLkS%Tv@hOVd|0mx3WlUN
zc_{3R>aD@r0`B}I$<S#&Nrt=r)dwvByHsLqr{t++aCXY@gI1k%G|57NYgy5s?*`yr
zNCw-)R_{;(oZ#SOHQ%i8D+lau5@J(bP){IILyAdumUK9UDuR)>wC^ODK0qU%x)0iI
zbiN~!iF?=5R0fAJ!@e-l_XMo^7y4}r3C!v0VJPuSW<$T<fJrnsRf5cqYo5Xf;A=;A
zt{ncA4q&Q1?zLxatie3<7Qa>k=(ibTfmNLbH60z@)?)5|5dVw~Lr92|ZB75!kB0QY
z+#V_WwsnS?fDi2sO+n#2(P^Chf<}r>h%QNu(sPy5@>p<o-$ef_W6hPALfNF)xYd`*
z1u}qd@1L}rx?0@e_-wm^;4GXwX6zppdiuznZl(Tt%1i}F7jFF>bh1Zc2f`{vpEQEP
zr;8@y8;=A&TC+L!)rw|%M|)RjQZ!B`Ox!jQ`U#YDs#U4?Rk1r>G;Nxm?^GCttS>*H
zcnSG!e3Q?9bpEwwUx0#Fm8}_wjQ-v^IWnHgo5yOVI+}+L-!X9USeRq$1`Q=MISGt(
z|1*S|nZmDa>?<YAyI538o$WNUlC;1o;TD|XvDvl)TLM|<n@;ak4JR`%+8>a8Vw=)P
zfczB^N9+R5XurlDH`2AE9riN7$GoRbkWCtv!^8|V9gG!OBh>5g(L%+3&~An8GJ+~s
zEVpZuR=umz>!-fv6K~amv>QD2%pdOC{xE*^yjk0~<H;CJofkTU52zhCdRK}d^$UlO
zhcS|LshW9`pKsRhUd2<0`vC5qwArReo5yZ^wKxPRC%(VQnif+w8%m_lC!lcw)k&qF
z8}&%Z#AHE34}|`(;x(FzdS{bGb;|YX;Q1B~INP(u>+<J07<k>;Mk;^5n=j&r8O#%H
z%}q26C&+E@CwcQmSKGqn_q~n!SPI<EdX<p~`stGS=OvP0Px(M9a+LmnR<06*MVs8V
zJcxdso5_tT@j|68){@VD+e7D#Cp@xU;aVrvr08dtge|P1)&nNu!LX<)8X;R2lsVfP
zYUi#1x}2<4wO23a1$WA1E#V7bVj)Tuu(QJr3L&R?tbu>l`!r6Ai+&@cOUSUsw8Nnv
zv>}=lJj}@2bb+zzcKln8M)3y?WFmCcaPMgMHeuv8t>Ngg17F}Z`JZ^-QuzZ{-HHV>
zn{J~#eQ6PF*%oGjIs3x$U{Tm&)Lm47xlf9_fc#DJ;By-FN?m;~Hz*VQOPB0bC~n7Q
z=g&^>(d#{nVs^Ku$Dj_t$6fxe-skK!xPOOQ?U3Q9wMH|f442n@H#UggLY73;OVpE!
z>$P;pc)3aKu5!5;;A0vH&Y0i)hI_s>L|tVqy_FkE_WX^ypyNitmTz@+Bh78-$8vP*
zUjtB?a!ua;>q}mft+A%ol?G*Sv|U-IawvwmQPaz`vk>Cc2y)RZ_-7-5LRa%Wew#N{
zsCas!-ty^lJ3^WB8J#n&X+pQV61hl}bICWFa4Mk+M5Mg%4@<Fa3XWTUsAZj|Lj7W~
zNZY){e^xgFr$JD2w$sxOH`{+$jDHC1jy}9@?Jm1BdWtp)3!*jer{L1X2$5mH<Z2mN
zr;;jkh_m2M_2~8;f}X;2G9x8%67TavBA3k@|8N@|FJe`}-);;H-chB_R~y-RHfd;d
z!m)98VYi*vNGg3$<lV6iJn`D@2b<n~D}Ok9Zf8}5sDJ@#9SM77QXp03XS_;%tOAej
z?ZNz%WRCDUNMSwi_m&DRO5CK}(-(d3ivz<uAn6RQ3`4OZnOozT623&zxdRxM-gdgH
zU$$mSDd-=TFu+7D%(C?~ScF3G442=EO@k0T=r5%AGjG~@&wZomCa8he|8Wn^7{;=C
zwF9^0yAOPs*)b2F0}-Ef#<GUSwC}-Ga#U~b>#z&0XTQfw6MwU-aZF@T)#9<AC$V(Z
z|J&sA2GZ2K)NAkAZ@8*~>7^gM`Xk;*;FAc^c0ya20`eo?VPN$p=Ewy!VYhVp-$Ibl
z@hlUjea|Fw1AliKC}AS^o(mRoOngZyl+zeo^<RBk(ZHnbG0dx519(F8yr|hwJjhzb
zvOf=fGXjym`akS_by$_#)~|tq2&gC^t#o&%1p*6D5u}lBkXnmIP-2k+(kUS-B@I#{
zEgjOKbi<++z3yE5eCK{=pS$<>xP8wb_ugmkzkGD<_kHJ>V~+TZ-x$+Uy(%Sgg+ZzM
zw%z*o8~D~QtCTH5EJoku>JHZSGsHO6vEA~<3Fo&UPTV}z^JIk6J)YSr2e4~fynW=0
zn0ciPo`S9iE6~QHTJ(`5y`byi5FjH&<&4;5ac?%p`e2rG&k#9ML@;`=DqZ7DWjD@G
zJe}P4z_@(Qq8S9Z)5BJLp1z(tKk^=ac#L~}ul;F_KzX}niLCk&#lCMvrTBsnLkKlJ
zz5Lb9>rKoi1OqmMq#suLMph-a=y<%5{1&Q_g!|hY7UFCmg~`?^7HIoe;&b1R;QBny
zXSN3`6?aRY>I+mo!K@z%hVz=hIhQRbu6I7kW|og)Lui~FL#a#c1Jp+pO@l6e;YT39
zz@t*6XP11?qwO4Yq4q9<231@uC_f8(^zpkv&ru>l2ld%!FX~Ga(;BS|XFF?tYy40+
z&Tk@=bbGSc_hHrt#;N^@4b(yHSA!8Qk9J(^zH>@M&9z2%t4`sJuNrqI(Y}zNWT6x-
ziD<&pc*?z7ZOKZ}vy?VQu04&Oz*N#FAMeLz10Fe@?3K}K%PFS4w#@>MBZjpyv0rSf
z^q0WuQd!!=jrah#t{bd+;tFq@BZqb{)tkE$C)HZNedIhRyJwdHhCbLh&NBe8YKEjQ
z;4<&q!@Zj88_jilm5%Jq+Zq)iJjQLI9!vXFQ>sZy$pRg?H4S|R<*iM_aa-2Oguq*{
zuF89aYJVz<R%MUd^?5OR?L5P$D}q!+3kja6J()+Sy#k$g?c*yOa2u;kvK!I-^_T6;
z`m?>ZR)_9gq5sq!u%p^!y%8*sc1A;TdI!t`7`wnAVD(7XWqUc>E0S)U*>Q37PWADu
zrqxX4bQSTCk}n}B>=a+PB4|yq)@4wWoMM%}W=cMDeT^TD<r$@$gm!=mjP|FU@Vx3{
z)p$kDvaF*_YFgSDwYOWnJPz}W9tzRy8pV;!%AOZU(+i|DYO2N4;Vb5f=f4T27)M+i
z^F}6{9cXWxM;>__kCd*xmQyir9j`h#%B>;gHfRo=k~WPgDMKWVpk)9^kk~l^{M1o@
zO$2r7BjA>0Zd<K^en-Uihg5X;cLqt<Jlz_vjlJ)AMdGM_4Mlb}YpWocB6UZM*Bw0%
z$xlt8%?8mNHunK#u<{_l2R4?nlIUAf0e6>=TR0NTP-4wKsy%s7$);8Gn974G`C@Np
zcrnYq2Zw-Zt6m{--dA7z_?w5K(wT~RqEq+7ZtfyP$o-D;eP&vp+;gJ7jMAt4MJ&7d
zw~~w~yAZ=vNqqoC{)muVo{qNR%J4Ri$KlnQw{`3A?bQnHnHhohszz4L8ojiB9>@Lc
z2MSKXWZ%M0Qdi9t&klX6KrcrI440HzpmnVHD`j)u<X8s!+Os@iVLU)nzn)=LUEsF1
z++0XGew1g8Uvs2s@d(?TQ+D}kWmP8zvD~EyItrMujk|cfWm$(KFOXwJUKYJ?b9nS7
zAJ@Qn5Qlo=JD^ic$K$;Z$)$qrIE!6_p4ZpyW(qt{@ELu$y3yK(4Cj@B=RXT$x4>v{
zelzFmlg^^O9B*%uHG-+B02v}cxsTI)o$Xu(_H~!~<%8oC_y+CQbAxD&v(>!F8EtsB
z0<N{TG*Rzd#_QQTYsaGUo_3Rjjo_M4!PCx*`0KOn@gw9-fK8jOn)p_cw5@bzi^1<`
zpyt~3+Im1%p;cz|%(Rbg+)NOgVKf`4E=&;e_~P20R3Adrgp2Oa-A+||`W2Bob}daF
z^w6ECfIIh^WfU%TQwD-?u<FnkmLMknRI0>fn+4Prlfp$*<PgpK;?JbW=F#n6RV=nN
z2)p_hbDWQm9-gn6wI6wVcL=q=CgJq8CaWB%t<UR(d;fD50DNV*xtq4hu;A>2&IAHV
z3IgY^tDP$&HEelR!y1q1lxC~xY#g0r8iOb~O=wBmf-)5HC`F4RGXun#nfs2z&wf}r
z-Ui3r5OhXd=G_We#nhjg*A^*8R4a`k_C0rzZpRHz>>iQZ*&yC)y|3KrqA4!stMGLA
z9&r4|>&XcGbxVXvGw6b+Q(abjbky*bjAHHPLT~0KfsxmJ3l+-)m&^xxPi!(SDX~2t
zSFb}>C%1x{)Z->@tq{LmE#JY{)W1qoOu^C=V_rL2keHKqO%#}Is>TYL#lgB?4S^im
z+Qks>MBCwl4E{yKZM^8|ugVWXD8xVLv18gJ%u@9G0cG|i{=IU&tC|K40pEJwC?h~6
z#3<%XGo5S%Xl_YjSGip<9)0f^-K6Dwhx~_I{H0`%Ph~+Ez4ZF-OQ98NgALxe?V8mL
zO-iPNGM&tRzSAx{^K?oQ>dm<2yGel+iQ>mVr(2_s-~9MeR$#Ow5Sy--!b}!$LBw68
zuW~OA^ttroD({`$YTJDy6L|KV<n5R8=Pu5(ZZGw3-3|g>Mvk|U_Ooo4T&b?N0*>Q9
zk#1}Ytgw+N=n9H&21Kcfj0YxaQ|_~|ndxH|R)zyf;yf-}LhAW;j%7FA@E9dU0eY!L
zGZ%mxZHiuElebE>DlgE0%+{yn(N$B*XZb)Lbic0!rzut$ZyYR_ld<5B!LRr49gpaS
zf>tuI#21mR$FE_rJWdIq?vtSsKQL1|ar{a?+FMfykHkZ3*qkOuE&q!mxwaZQYyJ|f
zEs8zMVXa>_i9@~3?EN-n>(+Hii>_SFm|GL+`;_Y|^PCx`VT^~XC{MGlauD!s%q8q8
zc6HQkIqNIrITo31low>sx$YboE%aRL*-n(GO}?DGy}SSb!VXZe0?9Vh2x2+hjO=^q
z+A!_D`ZoTMpAbF%K}OU=+H<W$J{J}T4Mc55+|ffkDhUr}i?ar9TVGk9gRkg>N0Bvl
zzPeFGvQd$pd~h!?YQb?p5oEEKo>ll)#?YDw#I8><&7n_%j)1xo0M;2;BRO!t>5!F?
z=r{I+b5S^m>d5`w_hfz=kKFdSP|2hTn-0nAe0L>|4&|-fid?nUIm!A@4ZSxIt*ZI9
zqd~qR#^xrn)q0s{J)+ibdC(T!_r<Nq;5cO^L3q1cn}AYc@}(fa5Z<yEc{PS9Vwi3#
z%vC(yim|m@Hr;KqMYq%bQabYda}{V@bh2?z1gtSs^x1piBAAcIpKI^fJ-`&c`U3o%
z(Lk;^na&8uNXgo(U9z^X3BqY&2bQwTkIG(6cVhfWo_(aG?DzbP`FzLc4*y*FosV4K
zr;!tKATb|}PT)#Cb93OR_|{u9A)`89g$@b!&!#uREY;WSztDkh5!>OIZ2kp6ZZ}s}
zWv!W_yB{O<R)K2iC8^tK&gkL>o9(#b4z()`FsAE#4`OA|7H`B5v67x)Vq5Dk!eMos
zs~a|i4A#RRVc1*=2Zzx7`SkabiS|}B_Ootis-X||)s7<s$V^4zB$jO$E_3Rpi9MBO
zeCg;+b6DC2NOs5u*KIH?TX#?HS#Ld)jhL0DogtKjg%3<PiS~V3t+t-azl%)mN%3H>
z+1naZLS_c+7q_W@UwVS?p-#it#j`(R>)}<`gf|n-o#rd7y6U(+wcFBj+@5>oY6_CK
zOQOy-C&|}dVt$~vWpH_{RCn%a^5M=wa)Bv|N4>@)!q<XB=*At3#I^|0=*o>p_Ka#4
zH?q`*i{?3^IkfwC>KOEEl`O7pYO{^<nonP9d8bE%pqOHWg$eS1cbz04Yj+Dp**H^O
zuf1CsCy0m=i{Z?h5bs+p1VldK3PO{wF**fC6}oowVh7`SjUJM>Sj;qy_3=l`<saiR
z4DSs(x=uG=K9Uex)Y2r@?|jYuBE6@i4pgI@YSqxAIeQ=VrUb~Ei)Zg(mio1usPLve
z`*7!tIucqceA!b<-47J=XFFphF}dwEOIu0scHF2L(BE=YAh%<QmhV3(yg$tMKG8M$
z%!p>Ohqk6B;lb*-vq#<wr2X-(ER}~)@@AFEM6^I>{|U?FJ?##6gr8;aL9TnJQS&QB
zP~T%{;0ub?ZAy|FVHj(;4bNz;{vI^u&R*H1Ypmc<P3^vRy(D-{@avOztGl`t?Vros
z84vlU&N){;^{8>}0W1#wT`?JAPIV5?1w`c;nEl+>8)q(vE%KFW5KRgs*37c&M2v}e
zAdn=Sxfl2JpMxHNMw?OlS&mmB`+gS%%tvgR?fLUKB{25`ENIi$<{Gj^;Hx)yx6py0
z7+2wUe%Ev=M#LyvjYg=Xv&s>4`0*Tgt_t-pnQ-RYvybqb)ntw4O%1-$>jiDhEggv!
zr&i-he$iju)WudHVk&CyPTW!N?b_QUNx)>UG#}rp@u8n&^q=DsQupt~7aD^1-yA4w
zktgFwxMqA1ag>Hp%^|bs)g;N=YZ0II!6V^gvZE6!BBu4FQ+(ZwJ5Ja4`Hjshz?23x
zKfuX<ZtyjoTc<FwYL-KQ3eRv*c$Wj1%-8$)nl0(5i2#5yavweMMy@)w*9UQEl`(-%
z9|Re1r<uiD-Z_+2hq8~kWg);DKjie5%#*zA-HU(wBSilmp6iWB<xE9ckOrEw&IwdW
z-0WYU5mnL?UjwZ4$_=~C=l0ekYElh|pq=4{z<z0x)Slk)u9-qkUs(XN^xdj^E<%9U
zBcW3HPDilz<Y#3v>7q-aK25n}8Mb^~QF$KjuGq;hiS}HrX~Ul!C#PkF?e~Lt8R6MZ
zB80@!g<PRNmhMePBbDFs<J~YvcaO4tO+~-i!YCx=<jk8}s*bHFK*Q8)$0b4Y&vUEo
ze!S03k39js*%FZ99hUkZp6-@Cs$br(bXZ8$=|$1!@_%kDLzVEK-s$uG%$?>ZT+5G6
zd<W!b@hw+|-0#fu95cRZor)W$ZQ-k;@YVijmQNUAOC@(d8C=*Sm6v?6&0jxqlo+De
z+>LgxK&amrVVVyj+Ar)3cUN7mpnY>}@<s=N1es<<-lxFegUWH6j^v8(Zt$EOHOYdI
zcpu>iKnF50L5~3-rghMkXxj4mSxH3A4QlLsoDFj|-Y)Ez5uT|`UGFtlFIE4~7T>a-
zgh{Mb(}E710fcZ4nyUhHZXs>V^UBgFw!W~YC&DSxwe3RqK{>Dd>^|Hz-f?9=iqB$L
z>e1W#t5wFg28eTXB0zP#)d*kttOnbb@L}sMGP1Ue32nhyH$akA+_h~d!^<77%qi6<
z{@Rm?c#^5!gC?z=I&T-}V-rOCUdI48(Lmk5Ql~DeK>I}o+b=<?Cr&-QgFOOmb-s@B
zbZI5_W2^c(Do2vLch7q82#rdoPBVwgme0wxf{+~LtyXHMWr5hApHiB6K`4oTjmtmn
zMiRDFV_>AX`+M41moMtZW_7AH$ES^EJ`@+|jp;K!_~Bc1yi!{q**Yg=rN8P__vXTO
zN&8;YX$i!v*!-4RO+xY+IT!R|>ZWU2_sR-lJo1gM2a$0KUEj%@ySLYLY~-_|6!_}x
z(@yew$Dh@*@=r1d1zDh!HJBriVba+V&esym&~8085pm;AjqUA(lZa>JoS+)wJL*IJ
zd<&m<FV`UFEu2zm;Az+yg2csp$=ApPKd@H0z-><{uC|W3R&w5{KGfha-HmC`r2*v&
zW<CdghvpN`vkRGrWaEdO47-d6mFmiquiogkc4$`^)mG}#*}n}M|L~AGW<Ie`A!*PF
z+k#$o;6?)~2;XSl`uNo8hMV8d>jP{H*EP6(b)oh4vC*xTH@YERYoWL7Hm2V{I9E9k
zjFjw5VDc&Q;eT+Sx32}qsdluQLg3Nai-%v#1WJ-=Kefg4%2T<_pRAE8tgym1V1{S3
z7Uyrwz7a<pNri%r&#02T;wa*Fa<kL+1yWf!ZtR9!`F0r_E`+OW#Gm17&cqJxRqiB!
zr1XI(j<Af@o!dA&20LU4o7yPKXI3N$xAz)P3vgE5aNSvU)Fs%BQENgCv*x6OVMK}}
z)}JF!Ro>^~K5>Eb#xISZ!F>E&b2DbpW1Ks-h`r2qg?i_r)9&FOb=YJ>((Acx>MhCr
z<~x@OE*`tH?@}LVwvHCeuolm(#OO+~f3MxTXW`0vc=wiB@7q{ky8u7xuiaCY;{_^>
zN--?Jkv#Jj23;Zq*FG0aWynTo$eHqv`cZG~SZHpDM<1OdFfTKB35yqyFEOhK^C9lf
z(Wb+)_imGeOfsD0Lx1SAr;P|q_m91_P>F1N9knD*T~#XAWxdQdJ*Bbi+1xSTK#6TS
zu(poBx!{W#^Co^%IxH4+Gl4M>pqq(bRlVZrH}mZo5W}6EW6L(UH@#gt;h~Ieur(tI
zY~KHov)Ph)XS%AI+5%72Eq1#XrzMfqk0fNM%(n1xR`>m#m60_q-XANhscUncn0G<D
z`}QrMm{DU~x?UogV`U~lC~5Jzzhfo4B+mCD{oDJoTE?)0TU5>QBPL+Vm2^&{qEr)N
z^^54Z=Zt%WFG&aHUQedd9DX?{L$)F&j^=Sxt4Qjc3ZB*GDe@+gf7qYu+yl0&6@<K~
z2b$AuvD(AMR<xX|Iag=h5fjy?$!;D=zg0-4ui$@4#%N8UUOi3NlCTG=G^Yx&7?n@S
zZ0CXchWM+d_)W&ZsHouhlKtXH)pzR&Zu_#5dG1}eb+MDdC?q|;tcgXlAKkH=ZJr$^
zUvY8f^R&(9%4UZXuJxfDWpll1{n`3eOU<`6u8TOl%s#THvK%UCH&Y2}E?E`X87k_8
zZ5rceSjJ`+U+2z8Ou)g^mLmHS<I(rZCIQ9t!{V6FUU%Mjuaqd1SgIGVY`bCy6O;z3
zTImd^4qm?;=W3J2l{DQN{UqKn`4t#sa=-Res7Sk4b-Rb2<?N^pTeC1AV=z8NJXp*4
z!H@A79S|M9ZTjYx#nUZq0n5Q@KH}BEa@N}u6V)TWZb<^#WJfy8H*Km=0n`2P#=+r7
z6#e>hHo-Z%?ngPW7_NKSVO`!nM4lAv4S|vi=%zE(q#Kb$-leKDuh3<$4oVrM@$PFp
z9s5$Vs_)tN`BWvXbPz7VvkDs=Cs@2{)0??<>4PT;odqL&<WE&hsQR;h42XoFL_$(%
z@D~ezaj4#1TrbnhFt(VTS@t`k-ulfbJnl3cQ#D3Cd>LYv`%!%FN2BQrd$V85l9vN@
zVFi;Fde&ubG73Ed!>fis1JH7R{|!93!70$@Jrf}CaO~?9RybR^<dQoX9gH3f7_vP^
zdCtOO>C`vU70Zk<$EOQi(K<t5;7PBksor(Gt5lM?Ka!rwrA}Hro2hjpY$h6pslZN0
z6PilR^)v()sGMdlH0caeu{aJ-6ot1SBN(gP)rEL<DxJnJd3$>szVNMLbKA4gW=jd@
z(AL0`!FcBgC1Re`DaLxwX`N0Im@`pKj;s@yGq<s?(wcLNmRRi*ChW88&mEKRDeqmn
zg87ueul?;q@8e^1O?fFrI?}(wrw~A?-_Lx!S<v3zpTA^{9UM2D#hzi`w4*514JLVk
zs_AWy<fF{ZL*s+8Z|G&0_6X6;-b==M+;{<R<)b^egNPVQcuQD^4dJtGX2K4;?>snm
zguIfHJ(Jku1#Kb?_G8a4iMXrWiBIGgiUR$2b4A&gbAUhIShDdP-7o=2>ox6x&}*V4
zXN#z}@L-xBSLVYECQF`-TUv(Bmk@`9FUjg!<b&>oco$vVvRL=o0+UV_72S95&|_{L
zM>}n?yky5CtThYUCGZuIDufl{%VU8~ZvDpBhc3bO!LDiaecs-F1k~8MDZ)+Xoe8qG
zlMu(1XP($3c>9zT%$4a*))QDq7eC$WNOa*Guoy$+Un=xDIc7BTm0!o;osZxO@BG<P
zeY1~jcYL?PA7Tn!<x}f%6QlYPT|6{P&xZa0?UXJF;&#X0C64B%>u_QVilQlv=h<6@
z^fPbHQ9t|glKD~kvmJ|C@wtOLb5`wfjxL0vA8O}cC<^uQUvL<8LQM&KDNd}N616!v
zMmCS08#ZYk2%kUd?-==#(C-q<sY@k}ZVSJ~&aP(D{$h>~Oox7#RA@gj#s~-;QIsNr
z@QEsI!T2nJoOroJk#F>ozBYLa#YLcrc%c_ftN!sB(nCf%yO?L%>GpAgRNfI7M;Hxe
zG17HLva>sHOuz2i7rjeyq?IV_+P_Dk{?5I7GGln(X%N@toEZ~p&BA4+(f>xMSVHIC
z)S2po;-w9cwO&3Z;MT>9_O(<jky@-iI;cBj+o$4nqEL6Fh~+<_Dd#EELMcX2#h5JY
zs))H%_fXw@O05V+KqW%w$}eU4=B^1vwdkbqFCqn!3|K-lCZ<DN<k{gaD)HG%pNDKI
zdM9HB$>@qcf4zs#sa5u@8@C+L&so0Q^5RnB_XT;NS;D0RN=|r!key2C6xGynx&0M~
z#VsqJ+u`Qxb*D)C-x<BRG7{|**pVPUMbd@4IeL7@MvaEiESyf?o?17#>6@wm9=STr
zYO1dY=e#GerHC_6b8PZQ)762-d<U`%$Tug6G_!Ns$a**y`H2#v4%TXvUZ@C!e3!}(
zHrQUQ+4|JS^-Wx3xzM<&XsO>jvA>L@mttE|wEAGL(D@@gpO%acj}s^2TjQI}A0=qv
zsjgRXydfj4FUQilF{KC#1=|Jwpg2A={W%YdWYKt&_^HC-AhS(kcH%14m1DhuJnc?m
zsZxur(LFpeAxUxym&*7%-Jvoc9y5dV*WFX?(#i*4-jyUHkN%tHdfW$!$bi7>^ors4
zUnJvF6n<YD9_&DWI8!sWR;x_*y2kPcMzlyi)6?|x?KC(=#ap)LHSPzw&u?ssZWkCU
z;b~}m9t$x+7qAY8o1VOXF!rM!8G$%Hs7p*T#3?~EhVAbQO`ak3JN7z_=l08XS{!s0
zJ+x62qW!f>!N0aLrDkKNJc;rrkp7y&{VNgcp%O>~`r?T?&j0HhevPHW#0pq}Uls8g
zegE|hzm%Uy^$~%wU)!@Ud2jz(fAPNz_oMlW9sO0HT!;L%i1uF>aA_Mm7_UnBN6;^c
z=yx*qF96iGwB^2M`v3ZdUkbX<-~C&?{>oYSTfP38%Kfcgf61c#ht=zD#Z!II@J8S2
z9!sy>c+qZqQAHTcw*u1$m;s)6W$$2(39tP>VBFSiF8OcN)&sCw4)hMof=uduz%(<R
zV!|L8-F6Cz@!VMzg>`)J*j-1I7$PDRIE$XXdn2#%00;k#^zF+hFJDDI@_2NLMP=q*
zzA_HZNwZV9DgieGUSC=`e;=O?2S)R{PvL$6bNpB=0?xV7eCfQXC^B}aoYAw*xg#MW
z)?V^pZO&zJv4B#a0ZgI0A|Dr3f7sX<BWU9xw%KNnYFe`Pzus#C_dS@ph;#lDjnwlK
zCr|zLKcu|F2@rvaVJefG;3HO)7TMJrTZ`XVKRLYD;n1<Sw;$;xVpQ_rl@6|^CubU;
zXAWq+wt3@MUi4p|*Q}KCuCBg`x`I<+%rNaxaqD=oblio}V`tNTvN7I<gb{wfi{Tg6
z@z2$N%$9oShg1?5W;jbYPP6wd7RE3u$l)(sXwp=)z?)W3z_X8DBhShcp!x9OL%5^-
zxf~_MQG>kG`ip&L@|l%HzbZ%U`_G(zeK$tPps{UtL>%3)Qi|axX4kl?prDZNgqpmc
z@#vwlGSOJYKohEo^4cB5p8kl|WEiq+MhVgQP$o2}|6O<BFKyv}Eu9I5mFyh?VVbyj
z&D8A{zcu4zm))I_HED)Ko!R>L0Re+gj~u6pdKClmJdBbPI_E0UI@yKeQPky}CU5W{
z$Xx0>(HWpb*_{%&`OdQTBg$7KQFKFRma;eBJ5B#^O?7p5FA$69sNa848lqlE7A|}m
z%F9v=PTiwqfKT7g(VHZWw}~rs-1YFQze6Za7S<9Azx7W=_?7c8&D^!{rQQ#-hu+=F
z6l~QSbZ(BG+MCm9i?xULTu$tBW%Ft-x$keu(ecE>vWs^Zx(CZ>VtJt`9F7P>*ZVK^
zVT=@%CW+22j~}bjk=ayo)0d3S;)ThYKo@i(1B`;lFtcnKJ=e6Dl@~>8yTNSINS#|L
zaPwgLE+?dI<njt9B$DJeeVX90D4V|`pxGczZWWVe+bK!qk2zRHr@qmHcT_^sOQ0(B
zL=4B%j3#%{`_@*O%frPMz`D_DOe_`J$6HoDglk39u6NaiHlV99bumJy?F46%zivbS
zTjivh&d4#q4m+1RWug}sOCnTNRHPl@TI%Z8-alUbLBgg+TC+Q|XFG93*tm<zoAsCv
zfOO*Trx<>zA1Y*!xp%LDk*cJ;TzK_(q{?>HnWPDivvLc$#12WjhB+Vb=;_zB$qq5n
zsg^7mZjzH5^msBfy)d9g@^<bU8TKr|R|@^1EJ3YWs^ul}U`3S8+}u1hH<#lqffjGS
zmVL0A`}WE18qb<R!>QVb+S*lZvY?5W=!q_`h{t~6#9c$4RyS*JC~pRi2ndgZUpp22
zxAGpTU1+Osk)o#ggs6B(Eg!L_V>|ffT$4l{I%s%!n8HgPzi_H-N-3n~=t#m=KO_i>
zUcRcqF1l4zgC#QH){FiQ30d2mvg6^_RHfu`;Z|Mu?PAhTBh}o9)k>)9=y59XCJYvm
z5HNVq>e^U5a43QGdJD~WDeUG;r)<!pYwwX574DnAVl4kF<Z#Aw$mQa8J&cQsE1RCQ
zpZc7)8vnw!A#$LxB{SiAEUe_w7L>>1h|pner>c)$9Xym=TKn?*$2*q;)@qX6SA9r%
z9Gnb$zSL(hjN|@t0Q6j{`cxthY<Z|qrjmQ10nBo3Y>UnRAw6PLSMN|Q-47`uSi^Jp
z%9Sq@N`;!89_6wfE?UU%ew%!aVZWCVg2>OD2T!#v9rLZv5yWuMA(2x}HDsd8Wtsx8
zwyU3wSRsUGOg3JM*BQpS_5*e|K8k}LyyAf|Qd%W3cAo2c`UKFl-VYm@U5ktivo>p)
z61se_D$2&OH&)(V<?7y1ed7)q=_z@j^^$|Tso@NS6*SAFnAX*6`*|=c3jLUOGCIt%
z9orUcD2vwFtG8dtZ|d6J8<Gsb7u1q8St;zSx>T{|EXBvJlfb(M)trFW+Jx>(CwPu`
z8mx{wqmpGK48FcDojN|(*r==|NlwI2N!%_URg}o55*83FNJY^^?P};Y%RAEOOP)>g
z{xQo#Q*(_g2g`{2V#oD0V(i=xxuKYEN+PCVE>truVW_>QJ>2dC{m>=b#l8jZtT%7i
zRkbS1n0po+`uh9tc2bG!uYbo+wHWwh=)RN!oQQOigT|;s?~2t_0-^S=A1q*<o$+47
zVs?K-6iXvxVRwy;8vG>9E0V<a+IJiBIznrXx06gQwbsKdU{|25bPxBcRZQ6t!AOHb
zT3&#JyUUzos`KVt)4iGsvBn^0rp91$YEYGKv#4o+;@m$s;eq!I7F!Gq+O@VDbfpv<
z>_(&g+XY7GKu$rT{mB8j_~FBSmGo2~LqO4`?lox(Vpbjxh}NZ|Mjsl$f|A$G+v0}S
zQJFiq5Hy^o>xNe<K2dbi+mc*?v$@5_Af(~Ny3c~tRCYO7#-lJrlT_!HaJ3>QTRs5}
zfAqL3=Uc_ZYKJTYlz{E&8N93RF=gJJOEt6*j2F&@OP3gkpPN9kQi3P-^vlO==jb7P
z$eHu!iSRxbMnVW8UdKP@${$@V+k~LLUZ-$gBF}sulKbx{@-KhUR|TmUHEYDEGZZ&?
z^3<35Q|p#cL^{Jj17j-{U9E(0%u-H(y*=qv0!5^DM3)$%Mko<F5cK`QbFjB3#5AFZ
zv>f+5QR_;GC?|x|&Ljo)_C!(+6p@Ys6`O%KB}V^c&H8U(=_(D_+Y_CtP(*4CRLrho
zszV-vuK#U5e&;HI`H&NUEf3_`T%;&7-dY}_WnpDC0Anstt9@qN2K#NNgdiPhoG3<+
z1WpboYq0K2Al3$r<Jr?((fjYRa)PbLKHYPSUVL{yL%%z<A^+)*FENrf9<aDWX)VN&
z0=M<(?o8sC2?V`;E|r9ZdP*Ao&ryBUwXE7E=6?G5IqBB>;xyeF36K>Y<u}1Hd$~P5
z3@UeqJtt9&NdeS}dxiH)(<R|mg#WF(e?5lr+QGZ(7~}NgOie)5&M5!>&I*x=ipq-Q
zw*%G*R~zfmXHz-0``0CdVGI#y4{}Iv((+0rAi|)~BL;qyC9OvdLs@`H3vv*AZr6?k
zwMtXlt+fe3kQOh|PBrukp)_faIUB`xpS={Yy)I7#LAo^5Ug5YznF`5N=<$Q60$grP
z#_i_*_l9Wl-@j+p(9lRNDG_klS-vdew$ufZfw5>|3`qP#jtGU=c+89@d4w1sEL(~S
zyR$kDKk^K+a!UNOa;dK6RqeP`Ztql}Rz;OZyz2>*xm6xsCb#~mlOVJaBeb=2ZpN+h
zX|1=K{fa`Np1z35IFu}b=2bE_8zHwW({ael3&qW=CdMNpDOxi84YZuhKS;~X6;MxZ
zG1Si~7DP6}kEvUvA)%HuGFWsrK{u|cVK+KCfWKdj-J~fFK$wS(3Bu4YCy?axz}#HF
zvOd(EU=K63whsB$PfC%qrUOAao&zLHL_4Oey<fBOG#Vq!!oqST5;5*9C@?l@A10d_
z0S&{Y@$~Ar#_;x$?c7S5eseVZYnag7XyBwtjS%O}h?ZCcG_;lRH&B!|6iJ<Q{NmmF
zg>WW50f9!7k_q~8Fy_#(1A_NCe`!8ODifE;Z>`ECVKctaAediOo{k3qWJ$+$$@Ll0
z+EZpoWWY%X4u8H(D)T&1>G*!H?OsMraInBIm&{~t#Ts%dRFWQa^hQ9;RKWsT{E$mI
zrHWd%dp`MNC7Lqn$ARmM^#fBMZ78l00sL|;{W63F&^&l0CF_SgeReA}EANv~^~WiK
zFu9{rIk%-8gnm6DB#;ra?Qr)k4Rt((*y@BA;rZ8=F@sr8^2#;>0`=!PL;(tV&n_K|
zacI0eAt6BJF>U)$KUE(>hJd3QBqi&M9CLLDW#y>hf{!@ff2^Xya0O8KkT%rLZb8oL
zZ<^D^S-8C*CF-pAQ>MSv@9$gN?irEPC%Im1mqx1K-nmnkAheHB3_76RHA&ah2zQ2L
zf1WnrzJ3fCR5x`{es~7E<F3+<j*h8aU0k9eBD3`+jPxaZfmet~p}gax_Zc}BSmk<Y
zP0$^JJ@dZ4KDvv%#%*m9%qUmX_d!2#W{8Les|*&hrN+!p3(d}7{)e>-zM`4@S_r;O
z8>W~U0Z~LV*!rE*G=d<sS4or^`1}YaHmx!)0?Ek=+X;8VfGb4TAj!w>On?Mz)I5t_
zzi->qzxZ5k<b6Y)SW@R6Gwyv~%`{Lt<FSFFuIICVizSq=y)Qe+)zok5v`J2Tc6=tf
z-g!=&VslP#wyolKvEyGo<Ept>pQ$Ul`y7k(rhWLp^U!Iln-P1aLqWSVz5Q7z9_KSg
z8tWpt(HQ!YF?iNp;0WqJRuKj?QMvL!ER!80u+fI1EBf2JoE!x{1_cjViHakR?!F>0
z?FEuZuumpu$jxswM|~~xyvGtL$9HTuFfm2$M@<ywZkI~(S7rRKG1Ynv34riy=Mp7I
z5Jxk!6k%Zeo}iA)LS#buj!xxPPpj=tXGe=baBAaDoVpAIuO`9vph#~r$(0}&Tn0T`
zS5sOy5Gr|`H)yeTnl^%%0Z!U2{p)ETldD$&E>W`E#=@Y%;K?ub1(=9)5VYLqJOJT@
zrsYK&5)nZh)0V=n)XrO|LD%FwTq66&T7Ny%|KB_0b%+xHQmNidgk|Yi|6Zc8a27e4
zaZ_)n7<rg_$4%<XP&B3W8g?toYli(Goe`GHml$%dz;&UZMRLjjQHVpg=P^LohOE0%
zF=cXt?#%yNe1G(Zm&ReIPn_T{mA!lG@&CMTCItZdn2ih8#6iF)vag)fn`F^LXZ+9a
z`XBc(h40KuWQOy^q4}??Jk3WrfVgD69E*m6V)a}FDAug|W)_4n>GS_%3iCg2+}}#_
z@AC2bTS@-i@BQDTByt?E?7TH%i=1NP?CSmJre?BDqve~ERp{A9avMctv!UE3$L_a(
z-_$>{q<`|8l)E?}rquF0ax}o!gELD9*<7|4FKd6Oxa*GIpYJcWD7n*CKl%2psmAEl
zwf01Ez~KOlCf$H|>uPr6c1xx(&F?0VjMQbOMJ`mPq%ds>7;8w%XSy;!k!J&9f3_!Z
z(3{2$*l?th9{QthOO!)WD7ex?t=t$w2nJ2c0~^Xo?95l?54|OyL!_dgfIC9dg%0NC
z>M0T9?25~;QWX9~SpTjmf8+<As$=1}WEVTwMXJhM8(F-uFg^}7(zW(jB3@$wP{O>o
zwKBqZc596U;DIflGG3sF7#i2ztBHFvJJm#H5+Qi6OH5KJbYJQLLv9jVGS*$I79{4-
zA`K+r?5O4pc+7Im(XqH2Tu&slAvzJ1h}d@<8GRJm{|fbK$tEC-F^M?G04gC1tXzh|
zR?V;g!=RLO#im-Ao<YHdwr63BhcWlvJO6gU2|7h#XTysVuAK>;*x1O0+?p~rbTGQG
z3lbQ&j>K;24k%;B0hX)x89WITO%9&GxZyLgXA{Y3)taS-?iS61WDFf0X9J+YT6)+w
z!KY0_#a(PHOBNc1HU01<nW)^ikj)Zq5DA!4DZM^O!r&uK%kr67VY)lM1fhV^P|3wD
z1C7z3i+ygMk{ieV_EH2kWmI$Rn&q|`ulx@{Sr>>x#WvP=w>dilzJC3B7fV<$2+V;8
z!9)_<u0sf>PoAPAn&;D-B&q&*M{ECJb4uBQuq|vC6)PDU$Z>q<?oJC5>PFI2GZ289
zN08W$nB8TQlHi<@;hQoBZ7&ELx|<TNg7er65lD1^VetlKC1LKxrHbOjf?Nyjt>td<
z#l^)`nH~2Ls}ea0&9CdbL`n_JnMv0<E4i!}UPCIer$}KTdELZySf9f}4}A2);)fDj
zU}w@Fy{GU7Re^>xBsyg1aY2UTqvg%Zu?eBj*cpJY42uzR?Vo=4?%i&E8i#rhMd<`8
z+A_gOz4CBlS4qnT3XVzB<$+xdxv?Tvv*3xAtE1)It24OV0IWeR*>eCD8_RVkhL%;4
zFvW7AKGqQg#BuOH)YK%m$SrpPp4OcEsZ`DUK&cYehy%=y-M;5KuStVZv^M2jlBexm
zhQhWvDCLV2AXfxL&+PX(X0H1BDn=@O1BgIS50f6q)y7s1_R&k^=cvkbm-7$0EX&j)
zXt}J0gLYSKCqfUXN#lcw>?Q1=LEOyPqTEJDq+G^uQe4@w%ToOsr!c1rdNs1}(1)b4
z0RSgK&YQDy5D}jZqWP<O`gYTnDNgIR4w}|DB?NyX5W*OU&QTubl%bE$iSt85_4fWj
zAUq!aG+Z{hfoG8X!*#|~%VkLAw*p)LeP~7*3)kZjX<pwMGf~qzXp*OmboZX@8Nep>
z6|2>{|1tU?Kn)J(is$UU)Gzd!)PGlyh`=Z6-6K<1`kA2P&wf+M*~MH}zdE*L@RfWD
zJlbrC%a&FzRniSYY6`&l%!@>R7l)Wv%d8$N#t7+ssUJMvtT0ZFiD5q9W(?)g9oR}#
z<?N#TB<lfTXL(+lO&NcP`0BZ^mh(jRPa$D5V%Rp7?04Bg4)XF;O~^ruys^mw`OZ)s
zao5@95zxRfiDXO;=%Sx3EBm9c?$0Fr?;dUsi!POIc8G$O3@R!j#%e0T2|L#yYDpAP
zXK^csXwwjgbOk2ddJ~E{t9R{|KOK1Fn|7x{=jj3zF@)4s?Qo}3_io+t5b7&yUgLC&
zO`{~W3ty7waf8!Jv26F~=qS7g1cKz&Wgc#>^@5Z3$p<hum%#Q^N9zR(5N_M9-=LlJ
z;>K(h)n_n4BE_CN1F$eLo`a(L-`IoMZ{NOk+H5b?AKtpo4Tcsk_Y#uGFhn5Z;yAi9
zmDUE$TiesBt0mMYL`==hkh~raa4pAg+udYLE|BcI5AJXLL4%T_^g`v>ciGv8>oQgY
zIhUt=NVLfWCtOV0;zieJ2V&?TAXzvYSfZqD6D7jGdjN9-YeNT+vw{MR*PiH*8#GB=
zQ4-%?12n}~10I185|<NRp;$CGzuMK^&BL#=G3C~21N0ai87v6cwmU22+MgcF{KM5_
zCAhaa+Z3dZj{@yG^<dWilovN)gMDWeDVTJ1u&aFV5=xpe|4ORc7b&mQTdX;tW;5nk
z@KAs4T~<~g@Y3(z-7oe*E;uj%Hn;wdFFxFy<V+o3&ju*Jt*rW+KKMH$@;80(ceYdN
zZ~EZxP=~+igTFUXf71tl@1p*{G9M|uFOhfrJh(w-9DX2ZJGsOSg39UP-`UIGosQqj
z;t&6cNh?M9C9=+Ug*Y?GPXF<fCyY0-j#vnl-b)+NLI<tZETwk}pa(lk6P&AMEBm`!
z#PKut#g5wS^Osf+q#4*@ZC<ue^0Nz<nD)3(;enmOcWOMIVzc+NpnJv-O3&EG+c<Kd
zPkTP)XwrMr^V--aNA0tBV#+QeaiIk4AEjD+k*Ck)UN4;xU=bjztd+TWo=7shf$lFr
z(Eq;6O!rgx>gpe}<W_GWP?1M|GAyFU@1nU-X^-0=#DZR5aO8Mk6t?wmP_4R$HK2}v
zG}wzrBpKCs?hn=H=aPVwx>NKd4AviOT~L{tdBKhY*I!e70)3|r3y&zbx3^moxVYbN
z{oJGeT@3&DzgS@@>0jyr07B|GHiMect6)3<I?@&Q$FHNNsE=qs;1}P9M?`c160Zb^
zh6N^eT$VQ3Mx7k)E}|ce^F6oXn5v25;K=ECf>5T$<4ZkG;~#(F&q*&E2aDyD4(b<{
z?KNf@<P`VcCk5m3E+2T#bdd^LyH!e{)b;dl8vMk;{!?+PhDgc2M1Ir$Fp^sTroxT;
zVY4BR?J|n7X}-I(s2!JxhzydHdT``!!o;@w!fd}1N=t)K`;_fc@@f!~q8K|dABSl?
z5d#As6avfB3|wq~%+bzB!@DJp(37Y48PBg(i}LS`VY*_t^z?ZcVKAnP|H|+9i^BRW
zM+9mu`4$7Ywj((MjdPMU?x(tXdalS&+dnFj;6}aR)SEoV9|R#s`TX^_Y7V1GA{8SA
z!U5Y)o=NRqmxHRJKI9^1*LvMnOz;vZOu+$Z6_>H;R`aXG$wgMq5YVl~c+PXPojD)#
zq~>y-!l4pRsRIp6i{%HDQcAX%SL#I~FwpZd*07a~z_X^O+1c5-Cr6qZ5<RO$V-LPd
z#q8d~H-KO~Kic60@W8~-f+kIf>dkgA-=XDwUbXS#1ebmF?xHg0|I|A;V55L^Kh=pC
zy(I49&?$_vLX2Jmg9F2O(Y4^lc2`5t#7CzL;BNniX*NheNC%sQC5Ve{%uih|?-jOy
zg1ekNMa}-eL2q&Z_%SV)7U$N(;UO^lAG{hlUghGx&I6hV+rZ7HvB&FCnydcGN}?9A
zPq|GBp}0D!@3dzEIACIv{&%K;uiFcggx`Z5?{OlUeoXA=a@pQ{x-a?b3YfBt10H@j
zD@cf((B55&gww88Zm#b3pVym|JH12w>+QZ$nZ!(=xNOH9&o!)9q1(uhf_iJHLCLPA
z8gSzp);O!oV;N~B(1(F2FmT|WVR!}<WAj`}6e}akqcOlvwE+WE*9u6I-0AkW77_si
z^Gg}vL%pC)Y+=7d!pGqs6%}Qe2o=f)=V=79iK*DwMs`Zqc(_L(Gn1V;;A8F+&FS`a
z^@d)MUht~)ITyDL50p*{sl5xJ+X_7{DhwfbY1WjAi4ly&|2ePtyA1fB`A&)(AP~*C
zt|cb?^KX8^@lLbTz}n*5&O)$H4?tf#11v%4M=U8<il-eTVBp092HumK5gpK@XY61Q
z3AfJQ=#<7C3D*ci+=XsO$Hb8Sp-6sC0A9Dxh$zIUF}*y3ApPf`8Sy{}JJfsug6O2a
zyPpIw`xz*YNErjoZg6Gw`#-n%Ki1jvL`V1#Bzp4H3h^a|lK8K;p{ztIX5I$MA}*PN
z!<|3&m>2@j1fWZIJx@c?3#kflELYwZyn=8lLFe*5`JcwGKjV{z!MU~+jP&`Vl^lYB
zV(fQ6h!A|=wQ=Ay@DD4Qbven}>m7V^f(1V!J(Fr#kCk1w^6{m`cqQrk_pW!Z2!E2g
z|LUQ-JYCp5yzSQ?t#@AQKj<?rAwl#T&pBw38d_>~WOJG{c2*`NV)h6RFrFQl?baJV
z8+PiY^8V~k|4_XQf$kZ<<q3l(a1m&`ZVYIp#w<h-f@08*{I?+fVTAtw5QLYO9}<rQ
z-mv%$ksi-%IR2mtX<%T0T0tCLmaVF2{F!6?XTR~vK2=UYRBAJFCDdkB0c~dlIL)b7
z$*D$3W$(qtY(I^G!qQ*Fofd()8DXjiOC05^90mDQ-#^y(7*H^aQ8SxIF#LMt3Jz#7
za8??G6Mwd@KlV<)_e@@9IB^^>w&>Pg%go~(6zUP1=J-@Fa@#owg5CFOJEd@qfkF0)
zXwoocm=5{gVSHoIIZ27W^)<3R>RBjH&bpNXW~a$zTp7^zO#8fUE)=^1!B>|9vi9so
zzS`BF5!Ijkra2P?!O5KsA0TXl6bEo~<!)@m_aM0J4Q3F1&e`X){Gna{{kH$fT4-L$
z1Ix=n9e584=;wBUPbDUXPPP(#>=hFe<NxDF_wK>+5b3@JlLuz1Q^<DG5IY4t`Kv0F
z<!ao;Y69MDL`1|xj_9<<asJ>2riSKuwTl>DicF<sq;9VeDnjWXwFcuy>?~FS1sdL<
z?*i$xgImTUW)BgOOQ%o2=pH}_5qKUc+~pbL9ECJlh3vBFd#?OXsLi>~rqB7wQ_W#(
z1{0eH1_fg3RWndJM$T(_N#)knkB<lEyDvrg-@ako8FwwQp<~{3&A;3}59vJ65h&cC
z?~?UwXoZk4v|e=0<C1H#`;GAWEFw<4nX`YUBR>&dG&8+g;>ypmxRtF{esfIjhH=J8
zeN9)*qIT=RkdBZT-pm;3fR*lEdvMLTeP>^>PPz~e51A-p4H-({L2Q;76V|{7L5ZbO
zlCTSR!K-$#L`|;p=~N1<=6s@uOKcjlsrR@qye6d(qgv{hyqfW7!4rM)=T63-ta|87
zoCGY}y0}m+=v@B<iB0A4BQ`az8WAx^g&skAYY%-Hiv2@*8-?sJln;cEijScSP{;a8
z@O+%M!u+O+pXdhZ=NC#(23F@y<|}AU-A<ps1Hp8hZ-b>2f2r?FsY;`j5L<_j)>vBw
zH@{b|X#kfRk;`U0;$6jqpbj*zv{PolS=F4Vd@nfevN^+)Zu219Lt0weU}%F%Pybpy
zlzBdFQYrLx_4fj;{ij|?_P<0<O=ZmMxMXqJp7pC&f?||au+PnCjjI3LeH_PSYdR0h
zR&$Kz%HN;Xh7g&4zKEm20~;+~T5z&nOY;A6FRZp!cXE}VyoZasTxcE|8~lbB=ER8;
z7|bQAulN3Wo$K-#BIfnCJ<0DTCHb$<M1^<<(6g{e-!u;j@b`JC_To(b-51^Oy6eM9
zErJ?N+44&VZ<dhqN8M!`B!BmuRP&Glj6eR!#`dvqEOCMjxz>3Zx$NH><l5<IyCU3q
zkQBQ)>gOprAX~gPC`zfDrnJ<bGZmXj9kkuA&6t&?X<fw|a=d^HQ}oOkZeQ$%LV<Dn
zcIv$w0Rwzd>-sld6aJR(*%Ju>Mt4-ZdhHth5*Znpex~+LP;`@0&?|YE78J~0O8Lx&
zK#ba>M^^@pP(3l+X)KK)<kV?0l2<n8IMu8@BO@uN1`R^}?|3>%Im~xSELGtWF*byV
zu3g`DbX0dFf@HhQPC1jq*f=>uLnU2Ai8*yB)+%|08LIYOV6hvw+;+Q*Vm4~~oY0AA
z{aSCI?h5oGDlw-tsM=l7UmH$!b!E7?^-7E=LWjbwS!puADcMd_KPm{y;4;%sQsZZd
zG)p-`&8VvrzdclFPk8tKJ#ukzh&$~A3z3G_l|&JhMwg{rN-#^U!==>rQFQqYRC+{b
z5FotKFD@-bJLmq1@%*EF`v0`Xd<rQk-be*AtHz)YyLI$W8iEDK$TltJ1dZM!Ae_S!
zUNh&Xt+?{ji|7~>oCI99=85U)>05`63uf*G5;sjLiBTdB_g1mJ(rG0n@S*6(5Nyc_
zuLK;RQl#%6UpyM`=+3`$pk@%PlRpy`-}DJcZiSU4)p2QqiJe`0_?fo0dt0)k<XaQ#
z`)<qmj8l<MbOHs(-B>|a2Rq}XKuBLPgEwu%g;I9S&0Z#5%I;<SgjgfXY1Nc5Q#X5k
zm4wqB&;f5?b<TdaBX~g9ll86Q(Yi7#J|r<mGC#Nk?$8_hxCUvYs2vHo4tT6X4#MH;
zn#92&(i{!5h=JgWr#Wb1Vk#0Ne@=P-Pjv==lhS~Do}r|Sc7O|lQ*G7;7nLAHSt0C=
zR3OnMn5C^ut{w!TzN!G1udKpVp=5Q$j5INWlObAl5QIvDI0?r7uVh1Em9i^JapgBq
zmis~x>gp+PWci4?EQEMWBLT=XP}B||0zBX~dIpEczO*nLg02?{0htmbrpcf*otNXC
zXPC7%p@*RBrnW$)?5oZEFbG2Z+kpIj2b#50zP~_b7-e)<X_n6S=g7Z~ijoHR9<;@2
z6Y*w!039(Li0e?y%Ly+doC`cLgJ~w{L8DB{RGW$IG^>#k;QjneC*ItY3kXbuAA7&c
zNu=JKZP(mK3^!3X@pe{T;tWkD4byq+39XWYd+N+J7#j;mzzc#=&a+lER+hsyQ}f>}
ziZe>-IPxaw<)iAC+g6YUU{HyN-83ppQJ#ULQw|b;!C$Hthe*`HlA1Bu!R_LZ(X;I0
zelpe`&5e#MFsf_>pNwqbY;8SG0|X^LKTU)6rUF(Y_2qL3m+R06w_Zm^8Wj&Y;Z4d=
zyHgZen5Vvb$0VWx5845@bXHc1IV(Y>L+Q$;(0C)~5?zfcT$=r}ALtv<pjtAM0?!@q
zJb2vxE?{_XlQvTBUIpAL&2gzeU!#+X+pzijd}&K#Hz{n?tU1XVcK8UR!Un~NTz000
z9j?Bjobp}D^B1tvV4PFY)un!-<LEw$`8-c5c^qk);JKsxu$!ZLuiYbmHm(YcQ(PoH
z>WcA)#dP~Yuz{DFwQ0cR<W|Ea$eJ+(n5(Bb(YCnW7;hbH-&rB_R^dP>%lbBy9d#={
z<xKexl3=)G0y&t6h5RBpar|VtV&VpBwPKB)9}0s?D#aORLnLN*OPR3o?U6u7`0gGc
zXW<KuUkU4AiT}g!<YyPtPV=g?w%)OSfyf}4n#jl~1Gg?g*xsP`ctm=;Z86;#TGXG6
zO*=xxXZ?5EV;N0kM;+1bsI<C}meHvBPxWl1P?D@J7&gbMMCX+@rmU1IkoLrKO%jN%
zP!ToOg!e&798Y-7UTYqCI;m+>Nh<ETbDwXvBaz%<XMqIJ5@mDB(uMlx$5>s^I^ry>
zqK(<=g$9d#q52!H%Bj`49L}9TEB8MPlGKE;Ys!v0UIST#!lwkWy`#Y*&)KsLZSBa&
zL>7ZQaYV3!z&O_@_{tUS3Wt!Am0{_X%HbGwaaM_ACzr}2PfW-;DpE@2w=jk3I!K?g
zYj?`|`fsLJT_vJW#C2f?H-D<bweho6X~<>T9i)w?tJKzNu?wKsW~0d%7hq0c#(wBj
zLo`FZHe!MrZE`9g*h`ukLQE?4y%l%bh%3LKzyRhk_bt0)wQ6k*wM*1l@BgDtKajn8
zyWFcj`wS)#OdyTtUW}4#`Zh4ml(6e8W&Vf4{kiIK3NCitV64OTWJ7+aQ871sRQ@;L
z+H2CDKJLV;zn!g)s(t-F|5^7WxG5v4JI%F}iJ4h;+>8R2xc`vCdCL|xt=wt!1*ski
zgOuhmoX4)-6QeMNY@%v5#}2lC2u$PqZ~Yyi@*Gtx<Id=+cOT-e%SZLyn^TOGuR}^=
zhQhjYGzX@~8f)<kbc5bhtdc+nGoCh_+2DyOYb2|hq>f0^wI;z5-X;><Jw_3j7u=b~
ziv6xR8j%fMZ|+PUZh8;_06{K^pO3Ge(3kRRsN`OeCK0sZZC!j`l@}SJA|o5N%rIbB
zzj>@RpuSNczA)SNDwN(c7<}fOOr#{lpeVezo4w}r-G;Ei>l`Ij@Wc;DXeysJ4d)AF
zu+?J)3<3mI9KGFTBu!08uEGAp!+Wh_2M%vE(Yf5Kd)(dcm5m-H30S#Ue(WX=JErz(
zoHl}F?4Mrus>ElgMz2by8Z;5KT7sLLn(B2|D-p5#bJvpG4!s5~3l$<{z+C+xsw^9j
z$ofO#{=CHn2#W3GZl=LX@xa$bhD1e~WJkeZ^>2lRi>>ja&yHsD2a+nJSt2#|<?hVB
ztyk0@AckpC#fbbq68*X3^<Oq=_Y`)C5@P#FgXUT7g(WqHE#dP$?qmKiDcgGzPjqZ=
zElaws(Z!S*%4$2T<mWz}4EXL0B>->>!Fr<3{dQ*CHYLK&VLJfOIINcJTsTLxw%^*G
zKlOcux3(VR*1mOJ1r>}hKmu!f#Q)QLjX$t*tQ=Usihqzx-6?+b;3^4;iDNHfDhFJ4
zMp$Ux8efST9t7s&TX+*^HQx<5Re=dZOqsqQ2Lm2HB%_gmbs#})?0%hM+Yh!z(rx-5
zCOYn{O?d}$bdJWwsOT6M3>hEkx6z`dWo2bImOqh8H{dcRkS%PHuqmoS(W8^6l8Kuq
zp6VM%W83ew;4RK!az>8=Fh?+twWHnft}5PA29GUSv)CFC9ARnH4X?D%GFp%W$ai4O
zuL)cTvhMSy(Wv@?7nC?pjpfxqZG8y9cE16#q#wabVaQVd$nllTBsl!>lg_Un1Qi41
z1E%IAMR^qW8#+^qiujz5vDZ-Dk`%j%<yk`v9l&97<jT*F#N!kal|G(N$<D=IM28;T
zlnVN^-9ak4I`b|sOLO0?m0d7&41Q#Nal%H;VO1+OJ66y}XSt;5nA_tEtF=7rF_Z{K
zs`t!>L`>PZi$#-ypw2aNn<70`1U^2#{2e6ba1PTj*$@a~{RUt1Tx#s7*bUX3a76Ed
zgO&s8nr*-OoXpf9l%s}?wby{<%vmYwO)1+=ow%2$ljUxm8GNImQR(5shy9z4G?U5J
z)#4rEYm>Y4X=du3&>ZDkysLM)xF211U6$bUa9TgkKl*GHH6F5iFQ+3xol@{<p`^^Y
zkCNMY<3M-o(;S4@;Q8kZ=dVh0p=yFJ4yJlq<~w6Z#hjj6mZ;a5j=WU>DIB}|@Pmm<
zfyA64=!xVjof4pxxk^Za%60j@=|!e}NO3xtzzP8LVD{*!$VNfIF}i+rlN{4;AH?M3
z18D7i^!d&bMfZJc2m;n?f61otHM8=QkXJTP3>eN8FK;{s22sJkWZ3`x$8iAQ%pYnw
zqJiKnn6v<Z^+jA%6w1v_?Evu|T%PuTLPETn3lO~@Nr{P25Iti6fm_1uBq1<fa4tLn
zQhnCh(E$bGECi6AfM_{26s*;Ul_o~5%)|uBsY)3F7-xLqC?OQ^`OCFSFt*XcLi;~(
z#Xo!EyOse!*{-;H4vJKNTsY4_ygD=lg$i#92MTY@h<@?2U;YP4ddf2(RXp_aG88U6
zAGRz|7;$h5f>a-r0jc`9!r_V#^3lJ|$iGE}UjG?0f(6Cm3FoO-Sch}?#ugXVQD4(N
z@1{Q)ezJcP!k%}fV&N*M&au+F_wJ2E!f5~$ZLsSfhQ()d`5x=u{dHAfm&1OuN-u^o
zBO`-#MatX)+>dIp73^@QPVPVv%9C+4!lm%=82XL9k>t1xCFz(SF28;wlUL+#f#`K=
z3@aG!p{h|w?XmlCYixSN8_BBBNAl~;JSlmi=B1~TdVZ7?4fh&^6J?#9ofABUkq@;F
zF$1B_%kN1`(6_)ucKdxrC{<=Dc@pp%{d7CYBx*`KsRYbHVSzUiT%o#P+fI$S8f&P(
zs%r_U8dQ5~j}q2~dWuES3_{0Au$AmRU$b6`kVN<p@3<%C1yt}+;k(6knAk#ka+7S$
zu6p_-Ot~F*BA_)qVNAaMMB6@X<VySwrfvj+k)@IUZb1SYwXVpS`Xs4CJXYbTK;}Lj
z)?_dp8VUyV2+Owrx}t;6GX3;<fCXH%FtCVfvfx1Gl#bsFivd8xvgda_ZjZzIHY=p;
z5TrLW-}-Jr1Y=`oN6K?ZaPCk`uswR;_b6b0e_!ZFeea}iymkA_D;ZbpcQJZU=qJrr
zc875Q4!q+pv^`Cfnw`yNwq7!Vxza@GY0jqhk>)+Ld57hAZtUJj(G@<X|JB}ihBcLT
zYtN|Y*g!>!6wwiaN*C$X5mcljMWmVtDAh>s0xBI;KtSq%(u;JECXx`4CcP&bdJUmN
zfShN0zUz9g@jYkGrThK<&41WQ)?Uwg*1GR|t(8~4?K_3fwfddh5JwI1^LA0F+F7fO
zcnzyVZgG6yAy7^MI%0HdmOuE{xOH{TiFT7?=jfymyRus^0vseWSz#sjCThvafW>>u
z1@=%(;%X>!U}>>srh+8BLe-a#&BU@v!<Z({LtI`J)YH0fa!+d?Us}Xz$L_o2*)H{<
z!otos*|;PZNm>fIKvPFV80KpLC5oxvx8)<6-tQ4$fl=a(mc}Q?ud@kW0(&5nU{=;q
z+#1j8Fis5f#EH1PusSL0=o^;-%9yVvE1Xxe))3&JCHj5w@!g&I_a%sKiu{%R^xm7n
zsL?kjyV5~HK_`MJ3*LfWkGjd4Qu(5AjiZ<R#Wyg{x=?d_bwRVE#41_=3A9lCR{cI?
zu-}^-9zSF{e)y!JAiBG?4`W;DCHCS*dKY?dx;C^quUz!^gh+UpQocM?dK%b>oH<=i
zT076fqkJBpv~<O~X#ROdW^4q^_nLnVdU{#d7RrN4sl2BY@7YF!2CFmP^9d<qVMz@|
z_R!F)SP$jdRP9VOcknN-N2uG(Z!^CerxkLX@lT4}{`u=2xKhm@KE4MLv@FFo;Ds9e
z9(9w8O<i`?dah<N0L0~Kn3tD_BlP8^Ny8?%<Nh44xzL{;Sm4I>4C4+W%%fC)$g#is
zW1svR$)>)6>jY=_Bf|?)`bUOH@2o(x>V<4`cns*bZ|pHK-O*te5n9NpJ6nCXyDhsl
zD;8d8On~@!?l5o3USs!M-oUVgz7U72lK+`6yTgG>)ywZW5$GVv&MuYD@M3co9%m2^
zeOZEwjbToWTf2fHT++T3p&?j@=`;3}g=XV@0P#-2ELzr9MMVJ)JorIR0DA0Rx?!<F
zJ?(o6TFN?|FT!~8-}BR}Y|p&d-t+f?@;iU}?vEEapkpB^2%~zCH|+t?MBbM0J2*6o
zh9IarY3#K{;j~}qRzEf+X36c9f^)UdoC6?<;B~W97@6ijCiyp3;2)FxW0LQJ&;Njf
z{o^J7-@Jr|U4@tbLZC?B6a%}IQvj%UK@nj;P4Mj~(}WTJHB9%=FsaPps|}7&>TEmS
zDo+BQLno)V=(=`segGJ)t+<*qpebXo3tAH?Xp*OQxP*xP;W=?@I6Icd%AlKD`KI!#
z{U^#s%x9Sko4;fLeLWV7ZJy%S*J6V38)?ajzzr)z{Kj07fWn(-S5;V4W#bhn55sXd
zJIvKm-`#djDACJk1&K(z92E&B84U>CC31enFla5G_`kjUe+2<H2zzLbs|=&o|3s6q
zlh@2}wE810iAMB2Jw+*R-f%)fqFjS$3mLn3>7~X|q3y>nG@~n&;A!n3=@5s?+(6Ow
zVb8wS0!_lvmuj;!GsMy%(j7N?BuczMD5f8XCg!TTl9{XOKS1-FDgiwy<bi2)nffYZ
zs|u6;w1qxjdhx>!aY@-bsb{35Z|4Gk?e?GxsrrKcDi{xjBjecF3G9U^-JRV7*Kk)3
za2%g@kc24#ysQe*o~hT2SSvlfZ*=wmE>7s7KMB`OC#zzabQ+=wU8d?PQ>&_Uw7e!0
znmW8ce7GU@8v=12&N!ko2YjmN5Nh#@Dmf!Sp;S_UG6^!O5#zno$AKtmr^Rpf@pM$!
zr@xW58N?OTT{8ga=26(Nlsx_bJ;81H?bJZ3d*{HDzzF2$FC(u&#}hw)*gAJDBWPe!
z?cE;b$j6lqdAElK1_r<ZU>d&}R$XRuePbdmj&r1^C6>PO$mW%*%?Y`P!Sn+Vhkc!6
z*9u6{-gwN~ID-M=Nih}o(3@qv2myG&Ofy3x#gtevxhv`QXyZ@)qr=|RDe>tsVW9b=
zE1Jn2Dh^}Kul>D7>K^WmF_5y>uStlX_9jlZ@CCyL<{)R<*|LeR_?4V^UO+&7(CYsE
z0I7v?DgNs1!LbQUp{^PFBl<dy9P15Qo|-DvWp)hbs@v&M9Vv=1U+{k$Jk-X>6-y(8
zq<R)gS|8z-72oP8pI@saK4mfvNjkkVDsDY?1<?5~s>GZZs+eo2;l$WU<A(+?7r#DY
zIv-$4+?vg2(lc_s>yb?ri=KAq%+AMR4(2y3eyvZ@ndrr+%N}Or4Im`i-!=5Ya-2(0
z^VV8}6a9~EoPffl^_(4!y)2v%@A}BP+u2XR+Sy4})o{h1XLKgpE&w!?d48oB!>I)J
z>8e06KXm>G`+NKCtq>EeSg(Oa#Yj(24^}{3@|<nWczc0M2XVY+63&4+^Vz}2_YlIi
zsI_bqOzICVq2!bdLm_xHva2m<Hm_2G<!X>DjB4cZhfnn9V@!!&l$|rQ(x!xswq64u
z5Zg-H18D<i^Eeoyjl5J_l4`$r*UX-UaebY6NBnkw*@u&G57HCAwYy~(4Gs>v>^_Y~
z;_CKBALQxnZ3EJ#jr8)Vm)Xd*oB{n=cyf~AeLy_3kwCI$V2bzFT^V_}lS9jDr&zV|
zG8;7<EP%t;uLZo2lN7vp^JXDlA8d&?bgs`3-|3sgyu>OOCc=X|RKL+K6x#XGUd_G+
zry<*f9(~8v9P!b<+F%2_TArENnG~QqL}S9~0--|)(70x|GNE{viGfKhz=xP#s9DGe
z!_s}cMnDp()G(G)wKB8C;Br>dgQSMSZPH?SH4_av$#+o!<f(IX!AaCP?&c@->FqJc
zuh!PuK}h>ck`S!(@%o!;PSj=)Q_gfcRHSz*p{GZr4}UT}(aY&F{>jFGx}svG`1si9
zXh1z(>mgy$8s{DnF-*RfqxnRq0uY$>w!-1Nb21>6VA-JMvWv@#jJ{_}j3$HMeiGxY
zG>_*x)Ri|D?WfVJI!xHLy=9vY5}>d0yy(pO{0*_o_j=%Aatut6;yjR>jUJ3#{zI4B
znXoL+Cb=}#Xy_iJL!G+^c7}%>pgLLf<_0Ri;tkA`=><>??<-g$17GO3f>{SaV55go
z(Vb1Kk_86XItD@*qZ8g}k-tWYrGQo+{dP$wV`V`hWeglN7Gy_uet{sSYXW8GZC$a+
zcz4bCbxLrpcub7G$m)(*ijiXFy&WJ;OEqY>16k4UaI&K0X-EetJ?4LoNR->=&rUr^
zkH9+n(*}c8PG&uFQqu(QF6QONYE47Kc<HS#esri&)iOqyxEdt86OHLlZ+}hx^u(f2
z@=hT@v)%DnvcGa((AN9+ITlGOP~QOm`^ETv*Yqn%k*{{yL30aqcmAHBX7P7EWXxK(
z@0VYsTK?~KuF(1O`Q}f^tc>%<Y*L7t0{r{`&ieZZ50yhsEh~huuRj7{BCjX@z3Obg
z{raCm55I^OkYwFK5Wm^WXIv$IjcsGpWvl~tZtMg-6C4=svo@sk6%{S)Gp=liiZ)?}
z%8gYWJw1+gIXQkXCGlkFpY;vLkd;pJ$VPs@RB{@&-OIL|+$;W-DV=Zq6}G*`4vuo<
zH;)>5;{)`pcB<R+`so+|rn7*WE@|ir>PA7v`KV33;+AEH2`3CwLk+W>#8P<-=(#XU
z<bj1*t3nh#62$|C#)j{u?dM(_MD<M#Iq$qJJC}DOSUB4Pn?$POz83CvInirkGeG6W
zf1=*9w$29yofBwSvo66-6wEsrT#s%`Nb#fu-S0|U?X;L~=?MsC<O`CppJ-@_Eh6T6
z*RZ!sFaH6l_+wpHqv;Fb?EgJ>W8b0QV>X&>r5x^a7}!?0I?QOFVqln0addUn6+|z9
zCKVAYr|nr262`!;dZ+1<Hw=;0FFsM68XBM-y}KwM)>ZfDBxpxJ-gXHFTJiY=&{-J}
zGiPJ}4QKgZi}HWFBFD}H75}+-GZ-mZG8Yh@m11u73ByRY8Z|*X`gQT<zlZq$2bAq!
zKUH2C*wi{OJ<kG$QJ<#*-C5YfS3fV4`NiiIuxbAZb)$9|Mm=*K2=Umy^1_)7#RqI!
zz?Jwu5r)IdhXF1_;-mhxf7$tmz3om4u&J`NqYNAY0UOkg{-h}6hd=#a9#yOWZ2HP&
z#tlv<sRVHLiQg<v!SMC_fxxDG<nC2i?dbmmkiQ)BM$P0ieu3lT;}C2+b$j6K?+Ib2
zgw3z%^t5E;=eNJ8gA;1yO%?YYLd4uQG-QLcKBB{4SfSo4hlSw_l1_8ao4C?Y<~okr
ztvO+@B}9bK#BB1g{pgdEdSffqa9G{f=b>ipP|?9NP6V6#b5+Z<1$A4q*T9S<xw2NM
z6gBI#f?EC>RK-T1UBny1>nCBH^<R9x6`<u<MnVwE+s)<3sX|m_WMqy;^kF8xpdnkT
zvZ33w2-H)Y`<X=mMuhxzj|neS>EW$bf|Pd`D<LS>OfnYqk}`s|%j4s@Q1=;>Ag`)P
zCbT`FCk26p4I)7J^nA4iP9<;*z)L{F2^H6DqDx<L+RR%rf~2UA?7%SivD@W>K(nE9
z8X89waNHet$13l|sx4^NiuY=eKx1|K6z}=Mgf61#p;}9H$eO_!kG@rGGlZC49C0QD
zD+^R27HTGUziC=-DJm9_@a~wi{%pq#Y${x}?ATN&E^gLqx${V``R$zdaO7|hJ_EHh
zM!v#;hTb5bAy4jUu*wjNo@@64`(V({T9i3c%6wU%fo+ZG#fyVxGLmDTQ;CW0RDgZ)
zGQjGZ{`Sdh^OauG>n-(~krfBY5$y!(?nAbRi^n@OOsGoJ_SD4Xp{~)4bJxvfSV6-Q
z^HMd3!uzucI$}_+<wNbmCtTl@8KLg=ZhhUv-=rYw8^Cw(EQ{|kmKXP5rf8#-{&=c2
z)0f4l<IeZM$|eg_Q?kaD^@*uK;fBH=#|j?=JU=?n7rR+4SMNbgcoN{$7P}dbqr^*)
z+({HXC6-d|E!Q6WllO~{Dt*R_I!uI`B>yubudjm<oUR}7o^-)_5s$w%fELX=*f(Ov
zVZOe;bKNQ>*adeE=C1VGB=)X<OUQmC{TDS#z6J_u7PJi;dgJUs7w?^7@lt%LePphF
z1Un_I!C#mVb}f`8EzQui$7D1mI6olhkPiJVK}i^ii7EX)%X@<8mZ|jAtN!eTxEM*B
zYjb!T>J6=@0|j=LRXe>r1&VRKnHNAOIM|L`%fT>Cunq4<vi~Jo|KQI~)`EU$x_aEP
zx2><u@~7s@xN*iZTOL4;+`Zm_n}`!@&uhO77N?&yD4C7iN8fyF6wYsa{Gp5qdYczW
zHK2#iI#CAeUnCo3BsssD>l?VaxhXU`dI1VgMoAAq7e3;qK{1nxO6Js$yt;p7CExz*
z|GAG)YElp_yHiWzz0D<tg4NOlq~a33zl(I>0M^JE&kO|D)0qs%b4&Y$Uhx^cI^72+
zJKR@OA|HALfp=?O6rcONYeo0s$su)#)sS*ZBBd|PCb{R`T|XC(vFeVu_PC=Sp;M)k
zzmoCpU7{PUXJF($XWpTGSWc<Tb*1YKySMWlH@V;@ZuY5oqvN<A(T~pDW>Gs<g9zcR
zwGzuKtJy$!N{qR}jcvpwg=E}#8Fm_u7nw%T0M{*0Q%Z<g96a2SrkY)H;AY_yXX@x~
z`8o$3c3GgNO4Kms36t}HYr6On&L0cNI{Kq5-6oah3B47QJ7@DK&7oiw&$1Cb$ln|?
zLCbdYRdr^zXcH%|lZ=dcGFMKhd2B`%kpDQLVp!v$X!hY9*exAZhpF*&SG;oNiqnEr
z1R)rVnRq^L!NO!D&AaQ-^RNyR8AJ=?ZEURV5fP1v$pjeoT_#+|b@msB*mO_x9X!u(
zvZ)AW+r8mjT6$R+sH46#kL^Gqw`c7z)9DG3TWi_EUQA#WYqTjcDoPB-7wA{;VPREi
zi3fvy_=xE^4pzSdM?(;*qC-<1y1924=%hDpLz6oS){WgU5*E~p3@U7wH!R3gjot?l
zw%VQhV7SA(yFM(S4Pd)@m9;w@6}F3ZSSYq%>9@!SoWJ5p21Z2>ea-@)7k|a8&w?^O
z#gre$&Os-;ala*g^RA)X_9tfX#p{`-L?2Ju(1ND;8(A0KzB|)DWELM)rVMf&ChMF{
zg<0HG$2rgjqT(B<_*ApZcI0-f_6@^oH%H(YC-SS7?x@5pn)j?QZ}!U}3HQ9#ls*Q`
zJNNTVw8kZ|cm7~t{cBYxs+!!pkG@YvS83$s?UF}2k<roll+41{#Gwe|K)%7^HZOzs
z4iAbSRN8A>-}iEQ1!u<ZnMKt-C89AKs{S*bZ&A|AE2)~dZ^tC8wT-PK^TB?oI?Nk~
z6j;r`8)|zbPN{6qF3NrL>^-M;`;L<<?F9mZ4%J~!hQK*D{ri044<ke^htDHwc9EB@
z205EGbafdi^Hjf>%hL&SF|aK2ZhDUdlM0)p!^3TIQ1CecJHCcWl4_vLx}@O6Pddtm
z*(q=aUyB-@N%sv*kRk!KiJNEfka>2F0@TT~+gwBhGe|=-05J9OKAgLZbVef;bYZiI
z1tH>W7=<mo-gTrp&JS{Vc{V&iKP2qEWpCm(9VJfWzKR^^G|NQ8N)1fAXe=EB$&G*&
zN~Fxw-%3{t&+JOWm80p25fb*dqUg#7vusx8Dx6nHecW!IwH9OJ<7N!9l(}VQkKrcr
z_TkhBk%7BMVFVKSFH(oPr%Z_@eTK)O@THTjtM`l^2S&aod0Z0f&C#bf8z0xy)@B~E
zuGV3D=N*23pinW$wCUwr^Z<h%*5q0E4VqK8A{^j_j}sXTV3?A+c4->#LBuPrI!uc8
zQ%siYVMY%Y@13Dm^r}c7?sbn<*0X9@6(UtDS$98u?Lv#0nVHbcW;C(MTaLbrKwiIH
zfgJBs6@dqsAAmyg9HG_@<g;`r%6w^PZ?1vj$a^kL4UJ<on>10^TeVdUODuIfwx%aR
zyE#3ob0}i8V$wLI0EP2Da7Y=J4MPut*ND7w_wI?C)=W~?wMNCZT^DC`_R}AZc!=~G
zueii;0!-?lQ4%DV^dZ2!^Qy{%<t<o0c$;aD2pFzq65p%^#{rXBz+lqsUwdA`$m`GO
zK>*vTdBV?DK+tuk?FW!Pk>o)*LnFtsz%%mjIrcCB1|Q2~$5e9mYa766>^20A-7P(F
zj{GoQjmA*`_4PcqREF`4=h@&H6>ddsaH4+J6@Ue^XxP9REBZ(WVDx%+y%jJ{nY_qv
zzaez@X7Ry@Lh^YK20PO#$@D`h)?fcPV?O|cE#*t#bdomefM*z1>rcX&Ox$w@X!MU}
zl)@Q?P;n8kIN4&ehA;xaKSAU>w+2BZ!?6zY^5x6>y*Wyk9~A0?d>B_~*33hlXp7^}
z)FjJsWf_#&M!pgaP9c80M*<3ACJa$An3`UDR~W{D*NEF^=^<EPmdyy&-u-T~rJA+I
z)fsxE;CH4)X{sqXU?v(=mN42+w1kfH=wc|O_7El$mgR)KPgGxey3cjV43-RCWD&Jy
zjuR6IB@$CUwTuqCE+fBA1`|^UIB-+ZCZTk4F*<PzgH$*@D!W$DeJwqcaSpkjXM|iI
zaSpW^vSDAH?F+A}syfOcnRy>*I@FS6&n3F9J$2clUgP=|8_mPRZtGIFmFhlM;C_Vp
zvzQzEJCkC&S{qOW=ZIzgp7}}Ks&|fgbz7O--PPUzRsKOsRGYUAt6tqd3C?{x`59-w
z-L=HS)F3r>XS_oeC%3p;OE#L!RgY}p8LiO~2NUmP(c5TT!>-Kw=GNk<B(-U*iG*z}
z8)gt2d1P@yjn`x{oByw2<cI35Mj6OnZ0j>c1v_i=w`O>Bb3)!KM>nJ>2A`9YlVcIJ
zWR4TD)gDk&Rgr8DbrX8V=6us*ck`p8+}o|#ppZTzdqsz-cPLBgu2?zmD@*RpDf&fe
zN?0&G|0$!~&Rh}DYE3p=rISnCcSc9eknS@KbB#sH=l+J^H?HEuyDaB2uMa-?q(SWD
zQXXA?8ho)nAT+`h`QSm3c*gp#QFR}|%bugr;k;6}%wNu%SH18o|L9SWxSc2?td&i9
ze)&~tO0e=WBZ5M3rq&DD3{ncf%(eUYs>`BQo#J44Zg`4WaBH8M${h$Y^tqmNtSha3
zL$~MDtzgIRj^vNnUY_qnMn@ecSU{3HQ|q>zdE2&NL#?b(L&zy6kh{*38Ba1c(9tfi
zrzf}}9VmF)Oj41BHygX8Q+UwQQn!na#fQf=Xi9Eh`bB<zCEsxGtz}1avyC(EW4^Wl
zFYm>Wvwr&<1}t{6E*;S?xjx}JVqzPz+*W(}Q|*Lvjig>24BL0>LT+N+m8QdMP$~_T
zDt6;T*?R5els48>fXPV7(ciPKRK?wXsckg;d3lVUPGNmvL@Vji+4^OHD&9}MIUK$%
zDr`>Jr)c8mvr12~C0vYhoA=b_)~XX<WKK-M5iV3*glani&CV*h9alPEs>C-!dh7)#
zuejq3nP2;DD{W9K!Rpr%BpnMm%v)cxQ`ToV>?d2A!*Yi<Mj4pEtVX|Eb(j{sUzn5x
zm`)X#k#T#{zjs7F368zAplUqKZH?UT*r%2`JGJark7|i2n5Cf?*r|6#e`=Cbr8#0(
zPA=V;ADFzZxcRL9DP^wOV%UDYwWAze-)(nK64ekA>_?%Be~P#m3I}9-9t_p)9+SCx
zsj6|hnU$8cJGMf0`0ei7=mesR{l_T?U2>AXHT`b#*Bum*byiQWMa8oJ-IZbczJRF?
zRK9jhfu&y*kDlUsHC@QGFy2I9pS}nVmOGjI#2-SeEqKbGV5_<i6m+P_`I7gp@BP}V
zeQ)+4U7dKl?h|T^Lfls?8r$2O!`c(11e}H|3?g#}9%Ade)MSMCtG>jaKi}A%r(Z^H
zHc6l_!+Wjw=^7e3*U0|Jf&A_bXQ=Lxpa=7v)7gnzU%kVOoaZB#s6$7~8uTqpj>TFA
zn0W3#GR5jVyjG??UhmK0Dji0d&YXS9EIcdejOSXYU0(ylm8(;n3PZz0t8&qf$|zVy
z9Rz7bKlL5_BMmVP2g0~>QDfFGu=TY_sMii{(2o0Bz*V~G==aZ*BJfJS&(bm7nZjD5
zv26n0t~bGe5<;49V66PtRxv__aX>-28hY4av_vS`n=rQx!aFufk1pK4ebdp2w}^C0
zU554gX-AL9=(jwV&1+oY1UMU}43RoaJ?%UP7nkG3>fqV#K)2PIYY9YRzjUVQ#%MiV
zU}vX!W+iAodGPI;8<V55D|HI4@^w{A%rv7GlYKHZzMl0z&E76U?Q~lXm)ODqk!iFd
z(AGO8vD#Mg@mH*b3!!E(-5YTc_^?FEdT?Q3;hZ5HwB$L@o)SdN#$dT-)LqOG52X_-
zIVQEn-AZ_XL1k9n2DQDk=u(pl(L^2RM<-Ki-1yFN$&YUMI6*GiqOiu26WNzXX$V=T
zM&#&A_1X^Qj@D5~0Zv2K3G5zrpNhp--l2%8;pVtG{fG$aTd%dDxq&1Mf5Q922y?~D
zKX2?a(fce_1<6G;)WGfS?a;w|!-`A0mpl}P-G*eyU;T?}oOY+8ciAiFs&37=XNyWT
zfHbiX<=R9t^6Yslw9#J@#h{mO%q}Ol+EPy1^^f=?gh9x2=81Mm0~jQKZOFzcuu$Y8
z!u+fVjIU_1?-74Y%)!HLvBF}BZZj3ks~?rgpRb<d+52P`-#_NuaBWtXuc#i9NEEwP
zX57H*sDqW>#EIj5&_K=}4Xvl>dq-rZS2$hD(;m&`Dxr|ge1rFD^OYLJ>`D?$k-7?g
z-yPu}NPZqELC|tO7?N@xbm|aOQto#af6J*a+YX;+5wSj&Yfu&h=+V^$vxX2VMv;jw
z*q>v^f^!<vy*}NAxb~nZZJ<Df3p2r2)(qAOl@3dTi4b8^<;wm6RRU?PyBiT39bf&3
z2~8vf#Zzd_>4eHKk*5x$B3L*uF~5(#sF3C7OQYw?kjwT99z4Uy$Ov6+V0Pz&%Ql0T
z4|0p<9pSbu(HWX5P+#x2=~L5;+{aYAr4oBdMooO0iQIruGGPxZ!>e3mw~ftnxILKS
zDH`MQmBs=$4dw!kjeEYh*`lqzy|Wn&8cfb<F)$O7cCRhfUT#`QI4E9vzq<NAV)fdC
zG9bHLBMqEe16Ll<u+yhp@!QIr4yP^?&>ugWV3x+4i$+ru-KCx8J1-2iYfD;dy;n68
zL=!yMgDOdE$3s~}TD-h>pLPf>PSGQ$U%myeVl-mlR*LP&%enrKPlJ(hYY8;;MZd!{
zvcz$focGUF9P5|cDK^{0;)s;w<Yde8!jE@Jet=}juRg6w#x4>_6&JSFBm@nP3kkm;
z@2%AK+NO+%Ve#(sFLp{FcBF`J#n6Lc;0>I!wZmV6ZIE?Ur=p_RYUdgbaI^&RSFQ$t
z5SDe;4n}?UTzHQJgG$Tr&D4fa;;y@0u*`bDjH6QhGb4KM^6gL7?;iG#Gc^Qq(>6V$
z6ON#;dAQ7V<XV}P3*CBJFjFz{o|U+Lm|r#PLfX|p)i}|>2e%NMXB$iGakabGR%SeJ
zL>@-yl3jmZD<@BTaLiCp$X?8E|IrYu{2FNnNsq5jqfsCJ+*|bZV}$owSNUA$vX(ti
zoYa5>em%9gSbr^u;AZuR&26JV$hmEJ?zYb8^Q&9fTrnzF4GWTOb0b3Neq;MfQ>1Ip
zWw@3*1qP!y1-sZ2r?jUQp=z{^y%MlJ0(<-ptj(N)hJ#qPz2s6(1ui<!Y*g{cEPkVi
z$`mfWrBK?5Ttju1@08At`tPMxn-|*NiX#pKLT5?9dop{u1P-KR!_?ShiX3rs939ms
zrS0(po7w`_q#RnI)n&E}5qM_yr%#`nxchrkaeL99+P!y5&el5<PO;|RDN)Jgc(i>1
zFc8!bFuJF^91gM6NaGWK1mOh8l0?_74sAj7*2;RSRaqjyoP$4@8XFsjc#g;Rdr{U{
zt8jF(@eKYuQ~f}J;ikoh-nn34-GPAksFMu2M@9MXREfX$vZKaGSuAWF4uO*lu^j`p
zA&y6z9D^2<%($KQ-fj{%|E!dG^O+oV^YcbMb~0^GNUS0#tI)j?Oh7$VmOkO_SP#0{
z+~V!m^0lluST_}p$Sy>l7vQ1JXxqR$djK(yiB3w=79TEtPOz<X467uu9M3f<Q8DUF
zKFf_u4VQVLEoW%3`>xpaL6xknHgv;?I1d(|Drm3qL~SmOXOgqjBGOcm-9_h6v$=!1
zM-^R{yw_MC-V5<^wVn|xq=%6xJeH^Zt-Ifp*v9S@f<NFXC%bjuDdhBy<+wWv54Ea8
zdEm-)7mtYJ!~u>5V+z|zWkvy|Pzy;Y(Pb7)w#!=j8hN3MIE7LVxo|6;>umiB0H9uq
zFSnRrPStL^TDEp)cA>(n-4q927q0A)fn&<65cw~DuTc}d8WoKNN|w=Si)+}*h;+;l
zsfv|EwJ`VCCdZ!_pj`STCR$IQy+AL2CuQB|fI=+?TjZf5c}l*%773nLLdrM8j_O{5
z+UBL#7G*RI)5YC$8I*Lelm&Nj+uBi*5IM9AIo<g-iXh2(x2Z;HiY%riC`7N3<92De
zeRD(+y>qmTli_rq(j{HhC0N?rGa4wrz^neWVRA<+#g(h92MS$0KgKCB)K3e|)`ug<
zKk2+UxQ~&E3H!>RG?0T<T>PeToY|xW3&@F-$`?5x@5Ka-^Jo#WBwdx>k+XONLeKhz
z-=tv?cCX#&jA52?^6=OinAE(jajbH_x8hRF?R2$-tnnz4MWUzdvqT3s-WciwOG7xc
z_1J6q+=Ga`!?mD#{$z>-dl%j(U8F$a=sJh{@BAE2jx7noc7FC*`wdEL_4O0T$@l|r
zJ_hO#p!^cVDAsLJa;Oq|!p@5Wg;VV}Rcy$Tse%(3`5}KsCdpPqnWCcK{#CIiS8Pxe
zxtl7(Do`sex=_9T=f+A`dri+4zma4E`f6C%Ia)c+nZEq84iOL%$e0LqoXooPG4<`)
z2Y+HhgJS<y#sBvyX2rKR{I*pY6fa4bR|ds_U>Qjekk={JKRe39!^C)UOixz;T7Nm-
ztcL+DU8p)=^-<`Su^Q!WI2XPvjCXgQK@ij@#Qcw(W`^>0huL0{*CIA2KyS{Aq$G}5
z!YAzqhQ;^MRpbc+fNQ)dr}|t+E>+%osX;_gBWZp<jg(K;Jp`FD%Djt{t$gxyB~I6%
zEVPwHEbL>-$Md}BGmaq4vl#geYNTbU9(P;fq~y%K7O$wp2xeMNJA0Mc5%|}JoJsc+
z_c6?NUkLLZTfbC?0bDcg<I}^VJq4pEj}wn`GM?YqZfj)xdD=@p_avl4xsy4Q1nVS1
zghVRS>}@#al7v{zt38P@o^j?n#A>b}*<rDo{(zBm%ovRLd*A%quQ`?ho)Ko8gM!0q
z&Oodtt&aQ8zusSb*dSK3BiNA_#?7I@4zZelTB^f%#`9G03<<Y_Fj%bSRlsUWYR|)B
zHMOD6BZ1z6pD(>1%R54>rhk?UoIo1}v6@p@Nk%xJ8ZBTXXEaK<VLYQz6Fh^h`Zf+0
xt9cf%n(SF?a9B-=e}c$gBhG&)h-^>|&aX)yvdJ_C%f5e6QdCpO`@_`tzW}wi8)X0h

literal 60940
zcmb??b95zL^KNV>6B`rTwr$&Xa$?(=*qLZz+nLz5ZJRgm_kBOyweFv{&+4<QtDmas
z-D~%$z3V(3p&%y?4}%Q@1Ox;xDIuZ+1O!S51O!401@W!vO~(iMZh)PY#D##WCUH-`
z4}wiKB+X=HfvCP^C?IfP6d=%lAm1M#U~C}pf5|{VQouO>Eh_<2{0H;xEX)!J>^~T-
z@AjWf;(PzL{!a^<2mC)C^FaO!4N8~?`d=~#?LTHfM$Hu8-_Q;cn$AE#u&Dp+z(5&U
znBU$sEmbsJG-PGCjO}gd3{C8fOz8l&4*#;^0dRebwx%wIgaBI`J7+EcFY&(+T;K9P
zYI<VAe?eTVd5JY-6$pjxolFT?=~(C(i1}a$2?=?eOw72HM8y7M{(ZztY~kYKz(r5*
z?(R<K&P-?TWKPe>$;nC2z(mi)MEi}Pb@s4xF$B=sIg|X`$$$9~F?BX}vUG5<w6`Pt
z$FHH0y{ii^G4Vfv{(JlPb-GxZ{ZAx2=l^u;yMy%qoS|o=W1#<U-`}P@|7f}7oh(hi
zBmd){kCEqJ$p1_CpEx}9{{;VE7xV9){!9DaRX!LV`v1Odd@wS7<eET00zi@?f+_&u
zb6rRPn(7jt0LrWvQD?$*f>pJ_6%>Jnf}mf!(N*W~T#Crfr`r{U{y=cpKZK&5vSb3D
zLZ0~_S6*gUX6&R$NKnV?<SW_PPDkUd?vuP9E>Li>TU2iKj0VO%gZ?qVIG}70HgL<B
zHUCod==BH;bvhuvq5p5~|AHyNErW#fBL9!Y|2ns9jadU8-x+H4Cieff{<eht|8IG{
zZ0%lW->_w1uvbi5XBw59-Kso<u)8zk>qM2myxgLhaTIy!|B;h}S0oH+cadv*wpclN
zw5xo6Hnodj582aByV;5uSM>Gl!W}SW9@~z$EX=<OQr*gGxY<%`nR7D(#k=!xe>}fi
zpJ9D*)fp5Zo7p^kII);@3e~p166<1l#Z&8p@$dWi?#yTaOZc^3yHP~GcZ*MeLzm6%
zb^7q&3a_M~5_^$?HL2Ssi9^2%QZ+p`CycU7Tu8zp81+C%N}LoYCB-HoYa0}gwX%hs
zZftK)e=<LUa>-`DO7j4px!Qkh2SH+{1<AwhSYLvJ<)RK?2i^=dyG|6e39dQbSOL8o
z66SJk027f$S}q&1vcgGryuUwh5ErzA?SKG+S=-#qNyH?ugqDZ}MN11m`@QQ_TD{ex
zKgoO-{r1Lwq~M|w{`~5BR=~o-A|+_p3e)Cg_<D79T))%&?}5P=7J%SJ)aPR-v-*RO
z=?-Ufv85LYH^V=~w_Ho~F(oAjj+B-jhw9YiteBV`km36*VF5s6Su$CF;z8YX+3Ic<
z72~Do5eK>Mw)_R|rRl+%V=P@RLzf%3bi*hd_@N557bnJGgx2@CfA<R-5e}^569M4(
zq}0<6ol+;4O^9h!0r2blfsGRGQ74Lxjg#zg<R%_QC}ddYY)&6-*;t{gPlb=vHU8j-
zSa7M1x|t`SfAjRD_O4_?OAXqwyrrXY&`}&xP|*OBoz&{S|Nes}-%wC!jPS<3xibzJ
z=JcSb)sB5|wdgJuq>z`+?$1hzpN8?mJ@F0Rdg|II#8p?cG!7dMXw~-!M^d+0UQ<%<
zmW<{4oeKsDPGzjArAFsBt_LD5B5q3hv}hz4+LZ5zimAnq#gZ2X@b}m_b%5PtWNI2q
zsZOcL61us2Py)8}!{lSS00!Pv0tt0@E@(GcAmdUkvz)0_<2l;9cE_uL4``{9HVH>V
zL;I^$hYX@ct`QOrdsN!)6Lfvs1umLQoEf$8O5X89^}*^UJObg@59&LUJFzF{bvlQa
zneH#aI=XHVs`AtRwJ}ii%8kFl96J*w3zNEe;UFDWjLyB)yXcECbc(&RSN=Ij;o-_X
zf&4JkXm%L1nv`dEWBrh7iJh!px(W}~o1~ee>5AITk_db?VIrbp6nvv&?8E1+(yB-$
z4n}cfpNz84rwhh0`435zB!jW{YX`~eCHTP(j<PoE^4l9F@#dh$#s-l8{50SZ9&b4<
z!_qO54UnN=W07>r<<dw>MgZ;+>Re8kIFIu{YcI%dpe2>`6zk!GI@%pYV$6UVmR`=7
zO_nta_775XQ0eLEe{c=QDimxkw<zL!J~Mi}mJX5qWRoo`J5#}FYd2iU{<vus5`H(8
zy@bK?-cGn3CV3K?hE*zlYThy*VO7^BO3+oB-xyj?m2ps24eB2Z?lGDctgB1O6rQ}=
zjt96(I$ti!;#6JZdoCk+Y=5?sLIqN$-|PEkQ!eSd$Mg>t38s~$gtmEip1Ce<kovqm
zCbT?j+&tYmLsdpot`eUu9*rfEjqPtd@g-D5i?%dTZ-=^qETR##ynpBt^#?8?KI>A7
z<GXgOdre)`tb_TFoRH3ye9^FPxpbm-o6t~HIPlyqRwOYR(<MWr4w6(s^&t&fo-NWY
zKPE+vQnh|OdhKU7>n9(lRVnETThG}E)oe^4FivCjSvoQXZ&fxj86U>YcI)eR{$ys>
zp2T+SGO5z@_eiP=tl*{N7BO$n5zrDd<Ktu$+LE4if_b)HL@TSa)JG+a*(E2VM3Ex#
z+nx+$$GBz_;%ut!U8@SR-dZ2*p)=@-1zrI!{6M8QqzRB{1cQ8)1c(Gb2Y8skA|n1J
zk7K3iRdwChGw6vHt8Z(AsCkZzi$m;nY>L5Qml_C#pWJ%;3$aH`$ZgqvGU(`ZK20Q7
z)BSp?y-}R0q>Hx;?{947+iFna8k6#44CDBwdCONlmg`i)0tsgu@rt_p<1;K8n^P!o
zJ9ZYD&f28RU7e%@j|&MV;jFq_D-?lOthv?v_DKKK4LR-ad=iJpdv~?e*XIW*4Gr22
zT1swL&h)wQv*zFZ$T9lltFAXex()}H*iZ=;qu5dQc?olR4T6d_*7h=6e(36S_9b2S
zWH>CR20e*@-GVs2IosXT8{9~pb4DR~U7t=SEHoEgoQ+l(7})G~o1aS&k)3t<E|%7y
zmj~3ybS{)ADM<PR);S5t4G=E$NX4DE^Izkc41=^h^N0;LhV_te$u-vk8XkrV3$-?G
zE!n=aAOsMARQh_0YSif19Te<Sd(HeOB0%=_3Jx2@BkFg$9rk5X@WPcbedh`w3i{$p
zW1Jg4?o){UqLn+G#9dR~non9-WR+4$HF^1LFP(lplBm|>&7)oWqlSQphzORKI(oX0
z4g-=d(q?)w78Bh_0Ak@>r#`%Lq(ecT>-`&b-Eyugwf(9~w~yqPi{f5^LfZAi2^_6A
zdDt~FvETbmC9XF^rJ^h?C8MI>wCx{bNb9VO*vr?H0CslskSxE?0jJprat`h{t5f#d
zZO|u)r%NBxfk@HB49_$e(Ug>F53MMi20hmk6fz7Qha6JUpTmse1kg)uNE(6Oh9{-<
z!RzSN>z{I<^p(=a^ldtF9G@CT;L61^$wT-)Na)cjPy{h;xpUdk*0egC@9zZ%egwDa
zx1_YRs(WG-!_y#2IyyA<pE{xSye4-!_pZ)D*7hxi0w*X(tSW?3Q56O2Y<&gDT$Ln`
zM_rKt;Wa>wY@4o6owFtG_WrFu&<CYF4p-DoZu-ao`~`+1Rq9JakG>F9<c3I0i-(no
zZ<k&Qp7+Ogz1oVDsJWiNLXx2_5fSmHK46=VgQ-4#IH2u;z}i47KPo<qt7jJUbk)X5
zW_<=q>DaiRuGz7!#lTF&pWk3yrxq6Akc#Dfl~*@*6H#6+nok%egRkzQ^Alp&Yy%JR
zF51qj#QYmf4XLQ8QX=H}OWr_1-wSIjf*?edg{KDME{ZelQyrIdC~s~YUo$Ud-b)A<
z!wu}`G7?`ic-tRk0j)rpT|+VLN|g%dwB30MKY17>xi8mS>+c|3G>wcEe8|>QoSd9Z
zg*o>a(qwv+e-{)KSudeoq+)e*5&0e*7sSRl8_cv`2hPlvToJn3&%(Oh{_WA$mp9bh
zKP{(IK0|6=s??^B<6}$64Bt71gD9CD*}mp7yNHBBOw2g_f#jcYn6Bp^*Vji}N;QSn
z?T_g?!Swb$S&9ITqGK%2u#|!wM||_j9RfO$WJpxmuSDj2Dg3n`FN~m+W^H|DayoxS
z<Uby&okF1FZ9P!FmopLHOk$##-n)+}D2OH?BFFoHhQ(3St*54}Or0y20|RV=Z?uP!
zpiuC!voUkGJY)-ZUXHnJ4u)hMVTmQXjrzD!T(c7-67_{%Z&y@77F6KX^yIKeS?ODc
zSZ?n&J74WutwwJ>2Mo&x64CVli2>N0KDga*BuTwoZIk@c)?!<}y<H?i7%+;AX{tv<
zM`{`#7MQRr<agT@4jYWn);o^X-`I-`%RXLvP@(H^b$F2shy4}3AidukhMydSfV<CQ
zdOBZiy2`FE;o00J@uUS@9+t}Ij>Yt;<NDz0G_wr5&^Urkea6J34}o~@=gtOdZ=}OP
zBNJu%{ybzlod-OrE%UM~{c><*UxZUZu&~fL`9W4>nwXG4_Vspb{Bk>H*(Sh^$i;Tq
zvWMRa5r{@hn8_{-72x32cQZ6HBP^GgTjE#1F|4iLru=}1rq@zI_7iARHR|AIh<wx^
z_~Sk{tL+!Le8Nh-Zy-c{?mk8eX9(gM7%T(x_zO5Vf<$K5IG@>q(o$uy@Y_6kNq{JM
zh5E|-rn<jN$dGG0r?)o*zI|!Bqt!{;iuvo|TW_nOZ{{BNU8MoXjTLY)alG-?<b7j-
zGklh}FWV>ETLtgh*M6&w8A5yx*6OzBI9It3pDYS;!7?G*1N?*k%I~|-;zmT5watZ|
zJs5ggd$aDzT3h=1r+=0u(_(Pvs31@gZDB$FY++u^ZX8zfto-v;-4nYCi2RC`KK^i=
z_l8$s7x22EEpdE>+CUxZM{=Vo>EQXa{`Gzr1%}KGt><f_X#LOrG1G+1BvVy|46F{!
zYI(p6c0|A8yk1@%4%P~>&zpLh$)|RRrA*1KWou}4n`Fd>8IA%+eHw6U7**+SW){tI
zazBR~>Yf2!ggx1;)P&cBYI(?l3H{uA5F9z@e&&OfoVX1t40&CD!m-i=O~yl_y=qo(
z52z1zqlR|G&EW@4i2XBGJxfcq=#`7T!6(*6MuThO5Ki^Tu>0{aFhFgMY6?=-^l*n}
zvOj)jDk3Re9#)EmR>?^^baO4OfP)UxcfX^&Bh1jS6`3|*2A6L;PPQ5!Olk6SPr@f9
z&F7>w^R;Qr?e2sS-ihOT2rLSudGEZGWTWSWhdXe7ut)>l1dL$~nVVyW%*Pw(LrGhc
zQ8lGzd0nndj$zPh!37+_+&o-?q;^4UrwPT?#d{){cd!!BRM{VlsyapfWsSA-w~-m|
z89a*~i@RKoBFKvR*%Wro^p@U>di2v#0k*B@WiKjP2riy1`}*-_z8^fa)E0rM+L`uz
zDJ8JLq%AFWnW)-ccu59X`S;YrMyW75HGPNtsh(y#GNZ0qHc?-{Ibo$q?)sGZ&fBn1
zfvqhBVs!fLAooNeL^P!Z;fF|WA$jFa{tGY1Z5DDNvNygTKYgWmzk2~h4Ju?|x9!ER
zliXH>8rNX64c5tkJqfOPpq2=NKC8<K8^uETeqrmHJI_f(zNbT3e^_hqqW~%gAbLxl
z6D)3nXtbs1ZsDnWBDaU2a8c(@{=8bZ%YE`K$XRPXe#g1Rz*a850Q-gd#v3kmfIISf
zwl~+C3l8WP0$f8mkkBk>2Bn~XABLLxG%6W|2yX-oMy=;`BvXZKyIAq#IAJ28WADCD
zViqQN=!8DjaEwFk&Tlz**7_5`v=8)=-LgUm;TjchNn=RAz-ZS9z*$i$8c{d}f1W_#
zTo|;DuU3Cikq}w8y9;wA3^Q-z5v}1oa~05shlNZ*^k-!ooZmeU8?1vwM}c^NpJAC3
z0;2fwl?{$y!yp_r>ZVTVx=P2im3#)?atwX!!A#sC!_jynENP#PA^(liE<GYdhVN#~
zrMm-h$ntNf)VsPd%_`k?OP_$5wXkT={TV7PEc$pt9RG{V?yk`T8oH9#Qzv4LE+r%`
zgGNfF4t4EJuaZg{nIm*(f@E29Y*0XXTd^45he=&DmUCByZhMs^&`JzF#7<?IP15|n
zg(egS-`hECL`;k#;OzADpt5;$;i3!DB{{i#snj1G`;wd*xZOtAp98Oj(jfN7ZwFIB
zMQ|l`p<@tllh8D}=j*?5DehYyvUHs$6}XQ5hR0*07U;<MRUb;2hszGW%|*3a*yBek
z(WZui#U1bO+$gAXqV$!OmB~wbe$vhD#1g*X+hoj3N=qi&%P>27X3$<DRGZ0dT!o%`
zr9&2#j7KN2o%g+7O8y5rWOS1HqocH1eJ@(N8~*N`0&PV@)FKa<<n+@}_+#Q3dnoh#
zmXtmWTb0xCKu|O(ICvrGk7IAZm9%X5#=V1dio-Oat$mJV0%|<Ua7kC{EVEc%9v-J}
zqn`8)*a^V$SJ)&uD!;dR_k#BK(U0qEGCWjeNi1|ZcKzRzCvQB_u?}!=2kVc6nxPcu
zCd*F6Od?@Z@D&X`5!?1W{vO0?J=v^BS(dLQUZzh8=paFlNGe9UFE$Xx<RP8HHw&9>
zk4;d|a<J-e|D7)VX_3*yu|<q*Alo)E_>@E0vVt*`C?v*n><!SU>D$<LAlb)s`k;Wo
zzg2WdfcbNH1wIt9q<nmyvkcys*=$2vk(aC;U_Pli%QP#oS>8|qveIYeYLh{@Ua!rS
zd@ZP<O(4$uXXr)F8Eze?ewOuO$4#Y>b&4Z5Tzb&$N2*#G;jD|<9C~}<^ls2@^^7iv
zqyHW53R-Pb$}ZRAi1YpAVf)FgS`&?iJD5E+##*~A-1`~hbQK6xNF31hu}4uM-MhOj
zDfoJrK@HOW-ca$w*h5xlx2&u*`0VeWy$2+OJ?iLzwKmey7pu~v33e*rscLC7bf*<)
z69%1hx_u^}9h#MH*=h5#Z6!lg#s`p<snh{>C&VaA*fjT)BZ{LgG|$$YAirsIpAL_%
zV0)WLPpz_n9bnOE28b1@6crO-sIUS-7@}-=?8T=h?~+;}e)T!t-QA^#!X7z2A!tiU
z$x{X)^$l2?)5ryvV?ST!;1~1_4JRCt#J>TKK0eb}wedZkeOn;#2+v@*-S&T9xDNQi
zgT;ZvVvOL}chK5*eAeMkUm2KEWZ_*D!>a>0OQvvq5^(+AYbQ7T-YyVjmDkGM{rXkW
zgdK`ZhwElTLSKR;V}X>_Dl*))&MEdiUw00~_B<M=aZ`o!jHzks*N<?=cn7CEpWJ_j
zitY@w&(gy8p$s~WFOTgn8;4nZy+1!JrQePhk|Sv|DJ)jdx-mFR{+)z>G^Vi~Q?G!C
z{sF}YKeIO;ot&C#o*iXQn8o8~&uSDR33a=KA=SmwS<dHca9Ep*{kqwSa&2c5@8SHl
z3{i2Mh9)T)ofLg;YkdF+<TQOXRBs#W^NrWm^2xQBS+2=flZvd<z5MZ$2-9y&s9v>>
zDU~bE10Whmd07Fnn@Dz-_10>5Y^dpx?Q(^_H-5Y5qV$K9_`_1v^jD_-T&->M>w~0_
zY@TbKTJFdPU@GUM5CXlX@obcAnt(1ANlMEqRIGm})T*N|u=~^Igk?kAFmrKs{G1qy
zGF#QbnK#{iTZU+2c*IRU8xK1tT%!;I8vgOueFMkz%SvMQ3X{w^GfZh~`e%AHTjr#I
z_jFkj94_+ZK-8+x6bKn78M=^cvR*;<#SWrYyhQ*}v`f29siqKR$k~JvY{m(+bWD11
zKg^Pjmc5LzS=V_*v4`0OVvl!ky<m%TBf|}*zNXe|2a$I?Tcy@XPRJO}6>5mfY=A6B
zoHa}R0Tv*0j%-hA@NNyHI$-Uy>7Rld9;mE+<J%|iXOsvFh}v^jVx`lQVUCju4?2Vr
z4&=d4d5|eGO_dJCs_YqxUOtAApwC(2KI^ptMQ&w1Mf#IcU6X|}QJ6l<l3X%zTwjVn
z8)H&pCS2GmM3!!N!rLOHSYlsOgQl)@HeFwF1TP2~X0w1ONoRLRl;cq;D7J{5QHDzW
zX06u;evwJeHyRpjN-h7WjOK@zmpZscPJFL(<W7E{HRnaNf^Gz<{Y>UP(yn!JWpA$8
zRyys+RJ|jdBw}?PCvXslzwo2Iq(YgR%7{i=XgW4Ktv(ELV(WjYr9PiO#J7uQDg9Oa
zB~8p|*qB1RyDn}*c+{Zt8Cf}%_P_uent$k>hKV4x_8`~^?JW?`dL5YB)i?u7q>=VN
z2a@a$sy(_R;{2iq%@i`N(|{gpI|oHsIffyflTo$y4>PNSwvEAaQd5$N)OIL0<i~*0
zx!Q6t#g=hU`I(tvooyOBZVuOOd*AHOT6d5mpf)$vP|F~{4k1|!^BqiAJ62$l%vW`b
z`OT<9ab`*O$dB2|8-IBacl7ff(duSKN>jPYy}b#ajROlZZ+RP!1S`}}pre_r58ac$
z)~8v=$>EO<Ct9v4l5~tK88eZ@;6SQVw|Lji7`bhI#GSa|)s^1l+HoS(xOBg4uN&yQ
z#J!=|*(d*y1%Zm%Fg4Qz33rWcwYu^y4}okT?$lP7ln5VK51Iyse@QGV_b-v{dj%5%
zc6z&Tw=B+CUe<t8#4#D!EppoOaTf$2$5f7tQYt;+3r(6=33dA*a6qjZKs`LmT5l<t
zJoY*?35nB;36Qc(omhgZ6v$&TF*zH?&<05BnnQ_X9!!5v0}K>^FzdNA8@X`MgJSDk
zM!Y$%IvAO}`_nNY?F$V)6>~D4IlxlEH0&zS<~G_8<F)NO(eLRMk3J66*U86w!~{)+
zHKFtDoK~2Y*;633<UU`mn=ZSKa^8x}<<V$@>jLdEWR!VNPRJiLtd=$tvz4O_j%>jp
zU{VT^b(Mej<Y_g06#klu-;2W`mK+(8XvYRw)qvgc${tT=mbXT&owM6Oj9*9xUxOmT
z<(~9|iGaj+K?BPm{GrEL@+o4tgjPY+5Uo6tv{}ht*B6u2vdmGLD-6+$RGPa~p-IAQ
z_D;9ueHSDmB3imeay4?a2^E98m!noylXg;TOrOB#<5}=i32rk=p)n9yuMNqr$D4v;
zIQ5I~fe!QOfNFXgMeg~rP(ZerA7qihj}&#M)56jGtVi<DqN6*PU~3Jj&>K;43Rvr^
z!c3FW!sj>H@U*y=Yb^Jt%0rq#w+!9QQebi#y>vjg%MUHx+^7_8nDb2bf<p<rCS2xw
zlSaCe_uhxG)M};P5FrV$iil4b#K7sDl^!!wj0VErW0)sK=D8GEIDt?8Re*_|jXyWu
zXa*7lj<D@3|E!fjAXY_zzNgP=i1t4A&7;5x_)Y+x_ibG?Qc?uIcn&VtzLgmGx>9C6
zZzxjNmZk{r#%mET3k-}4D+?Vjw<y)0zEI)I!ibx+onB9YWTbfu?TN^puczgt<mBRZ
z-Fx^ikC~KeH5aQWWRV^5{fSZfT1#}3;0Je8B|WAG43*{69nL6CQFPcO^c~Mk=(o@s
z<DR8&V2$ylfMR5`%Yv62Sm2O2Mf2P^F1S>}5G!`qJ;o~Fj?kLfji^Q>03s95#Y&4q
zeC-O5JU&yerKRo<To~xNuIxZt`;ZmN#wHLOpAWMWh#hNAE6XhJQHIu|%Qe=@>hA8w
zo(31JT)*{}az^~}{Znf@|Iioq0cYSk71pI1*6tjD`N83R)eV#VCc*7-0cw_}3gA+u
zu=eA%e2UNjpEN4<uq=)fLrD$%2{AfITe_(J5MnAWN<K)GM(A+zMVA;)jqq|yH|Dy`
zKLfoKZe|Y^X*ebWzu4zyK;^~qb;<uppr?Hhx|(zHEJk3$mf60hbev9i`SnRUq5E(u
zk!UC<@&a_c$RL)=<ng@qH4}twsDl;+3Orv!ML(C{uSq8B8Llji{o&=rJeTC!o2x=J
zm>pv={b&BLhjA+WEVe#_WaGk1&190KlT#vok@Vtjh@S;Sg=|&7WZdNnB1{{fgoJ`(
zmzZ74ry%E1mLk_ud3iaJ4li+a=W7SP*LHxogH2(d&9&U{B(_^|G`>$P#6kD{Z2c^#
zn*aGaaWo!NfMJfU6-7Mx&yKKtgrJ9qeC@3eia`$dNjON<p}w3&<}!y<ie<n;viopl
z^ZFm-arfYq)=c{@J#3zWeWd$`_d8TFd`79Pzo_JLeIG+(ck~@J7=$UqP}@Uz+-PcX
zE-~a(^twTBdc=r)0Q#!>b<{Y{LkiC8o?a&Jeaw;Z;iT<phH3u{TO>IQ>ZXCHqme?%
zsSzymtYW%YSvaB}@aCg_pUgUgdfqW66<JqkgBjW}loW+QpLJpbdA;Jqws#*H-b4)3
zMj5*HzMsc;`(JeUQH}u2s~eLaLKe_Bca6b1lRMK$=>6kErj2<sxhGt`AyJMhVfaoI
zG@=b4o+DvjZ<s6FvB5@EzeNr6<a4Wu{AGGuJoerpeiU=E?;3-uraQeHEDirq*C{(G
z$Xt?g3Q2eQ2*s&_<jo)_&vM`aORmbh(OzH@F|>4NpJm?VU?19e{rkq!qdUq{#mPUV
z;h%c|FgH)zSo3zj5AXLpC|`^>(%7!*d?dpP^ynLRRY{u>eVF9FN^ait2Dj|>k|aX$
zjE@C^)95e|4Xh(Jeo%VBm1F_nfqVF&VZ4Ka8-#sVzCi+wkfjgFTPG@1!TMRDvafyl
zUfj=Vg9$ZT;Iquc$vY4Q6$Ds&9;z#)sGTc6Y>l_K0t4KT1>l@wjDUFRSb7M?S_gyh
zcX`7OfdzZfr2dF9U^LFLH+oqKYP_aqIbVj9_3r(yEf^e#U#-TU9u*ZAKRN0811Z>T
z0Riiz_`6&V5sGad4d3<t=5};!iZlHp<(0f3AtxtP^cGoCP6~{%OU$#6%;2I8g{(zK
zo??DF2^aSmG@uU@_C?9#rbwOjpj5LZ^GQ~txzYEU#$_2HCK~Z$i_+i3)O0LA48KBQ
znl@sBo)9hywsEPFovEyJ+KTRPi>}LzX$>y#IYrg-D=Uu>ZW!ToW}udcNLr3ehvQ5r
zh+TV3K(&ic{xvdgP8Hnmnc+&k?9zZ^WMt?Xvt$91bNsuW0jVId0RkD2U6s5LV_Ydi
zA}n-koo25)T@DF=W_H@@a(@zNLrs2wJ2+U4G*Ue>sC!PMLucJCg_a)<mUJPuT*W(2
z)LjS4>O=S85v7T|96)3Xl5RiC-i6-ltx~;+TW2OR@1T&(UOeVmlDGqj&-0N}L+t&C
zhP++|;;M|AK4^eY7W9NxtlkyiK@R~13Hc%jgv=1*!DO)w1fGvF4v%A<WU>9A=Zgqu
zEb-bKd1*t#XGz1GEBh%Fn(fhcY5ysR9iNc_f_)P|8;GIr4I%UdGy&F>4u(O?Lj#xL
zRjxnFba&~jql1&)5}TH4qtaBfTxcmMDA=|FB^Ko%+LvL`dkkyVDp!T&PGaOsr}i^i
zhH@yI5gH9<)9Z^wH48~>PtWpD^y?FH7_T|@?|M6wqhLqwoAl7j2qs2Tu3tKlIG#s~
zUAynKZ^zP37#`J@%!h<nHnZB{RCd0QgdP4SuLd?HO?+@+AM3(&I3z*G6qfY<YVJz$
ztl9N;!0qE&^(bER(C}E^Qeih%P4M%x2D%h%ShTD#WBWA&t<%U^1VK%I-W~by-4rjl
zHT;>h%^DoOH?A6Q-w0z-U@7dbjoR-|1n|5}yF$~2Iu*M$={fwxhMgAIE4vN*v6PAM
z5y5vtn$1~=C}U-L?#*5A{Mqt94BE^u58QcigIWM18mjo;+<coTEGwwAMyTZLltnch
z?t^S0TEf78FbUU96<|7E4k3{c)FqUh5*a>*zZYypD`1tZ0P3_4fq(uTG`&sAHRNrg
zA(Bau?yXaQ0<>68CXnZNYfW-|sBEeoIjX8Qc6@z?y>j!hDgAKStLj8%mGY$O$l^wG
z(8%p)8C>bOyELvzOg(v<Md>IShI)QIyAl!@7pjb>c%WjqpT9TuTl>!JKm!L|fna1@
z2%~@LQM5mP`V)${s1o4_?lvtr;v=@&+#cauHW2p@1RDfs1%HAzK;b|WM8wT-rSxt@
znmK1Im!7~5{T4PlI66WUIw<mIM<#-t2S}KC8)gB8#3{?+K};M*wP9v<wT3Hkr>8cn
zy<M!bigtTs(b1;rc}BF6@P4p-Y(S2jMnAOZlf#R^!CV99i-r;wl7Cza)ASU47CbXX
z;rKBidin5PNX;90abe+YHh1D+=>FQV8XQkIpxXOUc*6hjdke11#-CacRd0jn=N%5}
zgyWmE5OMp6u6zD6!QjAliuqiIl7<Rcj4gOW^k<ud^ZNS-XcnC?H}hCHJAcoC;10^g
z0tSI|pKNOKQa+;@ECO`s8SaMB`Y)*K^piVW_?;jb`aKK|ZHwMj)R=1}>PfFUS?^t7
z^G;+fQaz6c*NrRKpCu-?rLR)#xj2g|hKmen;WU#oce?zZPrM3ZaQwQH1U^-Tg`{Uh
zOcow#OHcgQe?AYn2mP(g@YgoS_c|?SdSHu|V*HNjTB<YxZe50c$4?yYoP+?%tQgW$
z%F`}w4uS^QDK+Xo?(gVNrCOow2>3sre_j5K7ob=#WRY|~KZuhBEXfwIxykBv$-LZB
zbHZ!R>fjtP3<ZL~;v9J(HC4C0I(gg-qzd3H_6Z>YW1B)><1iA)7KE-xTRZ2vXZtS_
zTIXgJm;}E}c-7qCk?I=q+o+%fhlUuBPq|t7d&DB!9nZR;v3v=K;UA#!0r2APc!}<o
z;QRQs9g$flWQ7o)X7C_y9;kZor<)PoE%zuERhG6t9+cCd2;R<DSyg}XK44aih6Nrj
z^vRAO+GV>&R`&-(6(O7O5qNLw6$ONfF-fFXDTIKFO5r5_`jr(;uA6<?`6QRlYaT%J
ze#R~-eMKTeVyh_u4IRSPMxn*gi#UFReFJ?)dqs#9RQv3}Ka{*k+b2adHO&&FpCjxo
zE~?Qtly06~8ORob7(^dSuz`5usivz8-^+<<C*M1|uk3%I)i|+Sx5qmzGd?(+K(aqf
zf?)lCfTlGS;%e^|v)J%*ham)%9@jX9Q;WZm5WffNy5x17|90&?P8_asq(RX2x+^Q|
zU^pOQyT~C4Ltvik9H8Sp6EeBx;GOGn=;3kEm})?YcRs8{(I$p}`bTk>XT>zA@8S4v
z(ru;w;%8->^U?TFTRYMn%|zLcT@A!0-nC8R?_?Sk;3EcP=?XQBAt<~Dt92P->#NLR
zNHR4Y?l&ZFeT4s9sJ2>%ZIePy&R3Wrx)}<V4Ld|WEcczhnx%wY?dsdZ#va(CMH`O_
z8jx@>#Mqdm&VNN&xTqjSwrgf|gyDCnV;I-x#dG?;Brokxa@)B+dX2}Un(qGk5<M*B
zYr96Gvx27dr_oCylbqh4A;|r3kAP8~n36UajlS*$k8yBLc-;vjI4G|!8F?e{L4<HA
z$MuyUkd5F%ZzOMVU}dE%zL*<Ma*L1)nR>W;wa*KWmYRvyd$&Cd;xy|zp_VyAT>Eg>
zhh<L|**Lsg@`rxe4*D7)`x0MQDp{Q80t}4EF6GdR7f7+QcEmUUn~(@!p6)KXh|Zy>
z2Zx6fnp$WGzCZ89x#GX$9e#=r@e@WwY?$c!mL@yR^)9FXdZy`T%gu}#k2ZvJ9kTlb
zYC#$W*~w`_`q591+BTHNW;|$ryN?=o64>39*CBcaX?O-Fn8rxtVXY>p{K9tXaIYTP
zGupEk@rm_@mcNl<ZaBK;b?Jfhz~7~|)YNFOPQk%090ok_GO?GRA8=X*7%5T@2;g1y
zI4{ZdOFqiU4tLLMM?<sozn*CVU_Fk=$Yq&N@i8lY$(FzYRh6x>mocOM+`U@NtPVMw
zCj|YyA1Igu6R<zg%pb3+Ai%?ZLZnd}TK<?uUKH@swKI6;N(1_inteC&(8&l#KV_eu
z!*;=Xlwq%DoPo^n>_eyXcli0&<OgDvSQg^n(Ch&BS!qj*5Yz(rTyFQA>kq=eqg;$O
z3CPI11c_7&6kw(3NL`q*Vy|o;XG;UB&l-`-E!ADGVrIQXS9ze2#8pNt$95P$5}zmM
zD$gd{FMov*w8?uu-~*jW$0!RXq|IWa?3b%PGu*S2kSI4E(sx})w^p`AZFo)Lo!*N5
zWP@0}xk22b{f7i#=1_1OaPy<8G6+`e<dONT1Tm`*^6FuTpq@o|llj+Asb>5j(^o|0
zEcCRWxY}1(s17yRkn2k6LYNd4$%K+aWAyFSKOjQq8+?(##3_vJP`nsq>*<vS*&pmD
zH#@f)Jl{9OsKZafu4n6JSSy=(Zu$!xY|kji;f9^VVPVp)I_~gi!*a>P2pprwvwD{a
z2^wSLQ|@plC+JIj;ZrNMYhw}m-joX)VjSvnyVsT>>nZCj-^0f`KH7cOmew$z$ql!!
zl*2as;pxguf}f`bizeTHIty^i0tF-4_Xl04eeMMTpIqZR5?yh$Wa3=OPtf^@t+b@o
zr;DDh*>?;3AFLS6wn-WrP@yyM>pF}nkmUca!|&_cd#%QB4fp5dldK1y`H1XKvSe7=
zubKwL`d-J7)3xL&oH-99FO8BDbVEW^mY~R*-8@^qHqTaXHB$-Hgo0>mX{oou3;v0V
z^@I8#6LRhnRN5m^dFF6lmY_NP`@jQw_gggTV7z`({O||0f9)@GQm}YA3I=xBuP{V@
z>s(}kKk3yKRjFw$EG^Lj^-(u}D#`-l2UJqBplR7-GuazX9)^AYrX(g7ZixZCJ@3gA
zdFzluBSEm)!YD~22jPvymqvdc-s>LmYnyLbJm-^Jamf_J+g9G>0Dtmj2qhiqxGtC;
zFX_vdn4UvF_t)D7n}$ve+-X}^jT>4Yy>EP=cWh2)^bNts)Cv|0affUTk@FP2rC)?q
zsnYh2`N&jT83{o2`9wG>PGrvPCn9IDp2?e&?fXviRcY&&-Q`>bAuD9)Pi=Li^6T6l
zw+*_j6k(LJ#;=7S{TbqaC1q#TNWE?VtInD3g9MkJWQM3!>LJ2)@!9iMAgT$mete{3
zlE)?ZDbHa0dY`Mi8}eTGtAssm!a48b6Wi59Zgy_?nw*^cjLi}#<W>x@dA=B`o-nt<
z(BN`(x=1T)e>2&BRgiZG-ZrtyzR_NC=5cbO>$=q!616jH0<EI^yTFuG=XBX(2VR&)
z)RoisxZSRkAxrw3Um+)rH*^ZB0hn?w1!jJ!M?6@<s^8vxs?(waz$+IJ>`V`;tEyU~
z1c?<6m}YY92%132C>e(Q^N_*1u;Pg~QPht)A9Iai21Q0vc|cyOAL{1!Or-Uk@cUNY
z5JopzS`{kFI+PS^?Dgz5gz|jc*Vl}19&&URRE*QOXeGDIsRHs<T|Yd}bPw*@o5*tj
z*!N$8x?#s{qdiw#(_Ocb*dscfGMDX7bVnzK$dU@hHhmvYSq8Q=kt>|7TyhU8Z2_SU
zxW{(pyFXtt2l&!`(*gtTJ|Jngy|1EM$ASrqt{DuBv5jE>GSX9pxW<gtEuVO9%S4mb
z;xX6}BJg7iAMr~vZ<mm~VNb*#noTw#SrLGIx*5vjW~sM=x<FcPZgJhB)=eA$B~m6p
zFod1pde=iMsJW#D%+46S!}}7CvhsfLF)Sv)j|gH_6^OAy$DD?)D~Dp*ga=-rUeL=W
zw~E^}ldOG`c=ytHUXVE9cQbmJ#NkV~c!u;41Wf&O-6Nzn5>vNBzWL{?>&t<I_08=2
z`~8DC-5W~bC@HgWDlt<n>GY07^H`pE&8XZ2GqdaTkJE3Wmg3Ida6xFFt5J-TK4}Uh
zfj1at3l@dS6ItYP40z6Q<N+BZ7rKKP-w6s<Fbys`aL37@^-d!4Ia*puwFY#hyne{b
z^xs&eIc91t=h`iW8A;Cv8FgR@`DIAHaC;_ymsAS6(nZF{YmrWb^EJag9w&$VDp=0y
z0@k3IbWNUstG-<(i;0ua5S|-{=BRLq8I@?W^%hKQcCyZz5JVVwINZs}(fBZYUlrD>
z!-i6QA6jL;FO5p*`R()<<Jjh*=04c`CIcUcv?pk&F1%wf<I$v2sQWLW#6&N`awYg}
zS9~jvzc)sh-t7Dlu>9$;blaVt5Ai?J!g9U2G%wrk*!tTF110Z=xM!UvVCGV(JK&NC
zz9}=Dq%y15)Km>PfNV%Nqaf!<V`UAUqN%Z`qzt#a$tw|cuXB}2oPvQ5h|#!T@?5}A
zx8S;%P^n$sQ22$EMW<43D6z=Cdcx8`IIPDFEEjITg;<FklP1%czl3*4Xe&$hF%~T2
z`F9wi&B%;EF8z8??oaAOo+!HNaIO0)8<PM5+RnMr_FWHEu5tI9*su!WzjGtLDb+|{
zDqZilGFZ%J4R^i~(9kF_?&GYj)X2?@Kq;dyO!v#m@ttQ#ouG!r+=zSN6yCVr!wJJ#
zjdF&DQrp7UZ+9bTc7q%a@~}o6AnjpgKz*Dh!H(?lH^M^*h(pWxZC#swUw<=JU$=#0
z6$}lDXqG9V^SQbXS10nWY#_+d=o(t{{MFRe(9B^GVSBwVfbzRAuWT#9{Bs5d$Sntd
z&h`*bx55Kr@hAlv>UH0@mlufdbPN=5gZreXVOOH%!s*Y5TQ#FtMVpk7g4b4BtnCv<
za=YktcReM5*O@k$b8ZA{Q(Q%4X$t8l-8GD0VW~qX!=)pgO~;qZ_uDOV1&8HkU1I|e
zX(ghsm;0Yg`$+cUN8r?S3FBG9BlD=MyYPKrl0u+l!g_`(EP~mAu4Az|A;c}fZ{j)n
z(<>)*sbtc9uLV=4^;K2LQgt1(y?Gx{Bcd;eM291rXgiQlxI?*jY;F0rg}$r8&+5i`
zx?o6&Xl?Qf6t)+H&M+Fdh~p7KO;o87dpdJMK3t>KN8nceTuDi7as4gKfvQJ8SVkN9
zS)^nrK&oo(<y(vs(wutPVToXUY8@F3xnBxV7d#yY4pL9;eHpZoSg+1*d*|s!(Gj2X
z!x+fQ9|ubMl>EaOgCi)lWW7N{;vUXm_b<J^qM{`jnanp~Iwxr`%PFGsK5m9=CV~gL
zmcLgJ58UkLw6lzE>gA(<6blrmCsEk`EEqGkisSprOyMwG8@zlphe$AvjT1xhg&C-{
z8qyje1PYc<2ppHb^+PsFbU|I4>^)!AATOnv=tM6+pWB$Ni^bp)EojKti6E6&;x=ok
z5FfQ1R8OJMGaLm3Y<j|Dcnrm7&NaUj7twH2EAzZ7v26Bc<tC()v2Wb^=g33+ruDI%
zd%<5e>}^+S>wi?asAc^H76Pt5GLX6v!~MGk>u}(4n~aZgy!IMv&3(%UQN4nvV=S}x
z*wdQO&qO8IcMd#I2B<N2qYZr6ws|A^%I-E7`EMSXtg@{;I1@|bPaUQMQ@2H?lMFtE
zNj|T_%{T(-{ELqFI-J^p-`T;b$$JxX9P-w4gK|^#Y!7X3a=Y*O3XIN&SEE2f1MaHS
z(-oT10~n0@p|vH%ftE$G{&n3X3h9>$-dpZo)}eN7`P09jZ^&~`E4hdVoLohltYTaL
z_Hf=cZ<*ej69`})LmC<YmwDLF8sl~^>N|@t`9oc2#qqtWgv9arKnMUT0=7P+Zp37i
zX}`0i?~5x0$mW#OZh)OMB;qCXj!DsO!cmszX+*~1y2bF(ls+MS7lULnxbso9Q`-@P
z^7^W4v^cUxDhA~zG~`f$HdiGXdbZ(@#}tDlXS^13n}uNLy@Q&+aiL9o(m_S0(%^MU
zq8x^%etesJ?@F{>A#XiEqz6F!b~LwbYynMMa2VXNXQ-$&ua{>8G23Tg8aw5tv=u+C
z?~uB|&+_?o`YX_SS1<5Cj)4H)NQj#1$`Nk>gNY^!FhjN&%CH#gI(2a-Fj=g+3g?<f
z&ro9HA1KX)a?w}hC;Ym6>7Qxe1v5hMyMj300CR%s6qrYX$mgt%X#Ix`1AZ?27Kd5p
zsS$d9AL`CGIFYhbRtfNl`8{+VG(I11V0+tSy`2lo3wBrjWkgFu_~4&x)v?j}R?wRa
zA*qbsO%K9~rhdzq7RaC%#QsPqD8WqAnNS)GgHydx?_up*6;58->|;qgz)n(S&GW?4
zDVlqLN<^@Du8!^LlL&HjVlrJR(;91bcC%T75AY^}k}uMd95)zr2$X(V!eBlFUphrt
z2v7}uuMgYwhqoyn)o%(fX|WeBOZyM2Lo!CDXk==>Oi>f03XH|TPQ~t28cpJm7wX2i
zMZVhv;-sJ6d%J%P=EDE5P}1pK%)cVyMcxNG05esoJ0FfGe-CL;8GU`t77oaM_CFEN
zAYt=LwLrg+t+d+Ry)KUW<`xG_O2aaNZ$`z$g6Sw-;EDLsSPx#$hDIn$vPfNwJ$8zg
zT#5EtXBbN*Zm=UA%lk1k9SI`w@on-QWjMu&k>3<`<_WL5F7W}A8o!96$*m#wF_KQ^
z?ea4_o5t`qCvL~*5Cwt47v7Z908hLop({xx>7^9WwqGljva5x5^2mxKPIt2G4cE9k
zPKPx_Wf44hnid+m*;;0?6X84NFs#eQbhz;E_Y32;COQ*deUn+&#A-#D?^}KZokLiF
zN%v#hXYVK#jqASbv4>T3|CODp>~wSPa~t*?gR}_{FcE#`$w=5ch@dtq5`rryphMOQ
zgxFpq!iw5S6fi2nWw^a6ezzlW*sH@b)$$!LKY9oTnGj@WKVRqbQncsWv1&X8jrom*
zz+$h8jacUjdTFS$!o_680<oS-R>7!{Sz2bW6Sc~50NAj&Z~6^+!{&ipaSkA_F?B)(
zujH)U+L#6g=PbU4NVu*3pm(%iO-bo+{Jekbr&$$xB>7-l18D%#lTG(z8s!qvX7FVg
z8edvve9BTN*I*{=Xs+Mnj7uMn`_6CCccphlAS3UU&|4lb&M9GsryZ^;v@90%gM_ec
z1n*cXV7qqLj(RpJCn-cI^6bLGirH2K%M!2WpuL`Rrx{%#RST#<vYeRcF3YScGkDmL
z2Z)nJT#&jD>aMY@rR17bB%e@p<kbF^*#m2n?L1*5g69e?wIN;SqQ@zBGP=p%mg|SS
z={cEI7Bruu8l~F`1V^vp0JKdcG+;4L`-=H%+#06-*1v1OQk0ihKx66@!SaYhcP)R*
z!C6|%Lte(bRwn*=OKps8)eb<2RW>AzjXn)rVgG9oc2fiUt`?=Xmy`>Q?^FR$8u6?_
z$UYq%I4Ex|?RWWzs6}u*D*|y+gpvDe&tMkMcaeeorbLaMl~wdh9F71Y=A4NJgnt-x
z_>a=>%kM&1aS@SQz8dSO35vzXAOChpoT#u`EFpKOItPXVHS6f40TGRW8!>BfSXpl#
zkZB_Sw8%L~&hf!w0y=LS*6G`~H;*=CeO@4%%Ssx`#gE5x@*`<WO>huHuY9V<Ura8;
zGg{RCGU2`2&2}e9!?Uc<u8d&amJZe)_cLJwM$CZ>b~9Sbkuq_;1=RB$kjA9Hi9r&~
zeIwww&u}>(l8VnoDjXfBHrxgN2(s>-axLUFmZ-_>fd3U{=k4Qmng^FtN8!T&HA;sg
z;v?G7y0?7kec#d}(OaeuVO^vl3KI8LoF-9T*3gG)PL8|(8ZAdnNOXreb-Q<kA(Dyl
z_@<F6INZoWA%C#krG~xgX~98aHCPnlPY6(*%s`#<?*#8<ZPy6B`6Xy^au&5)_2{Of
z9Z7!0!|x#st|G&JW>_wu3SIjmRk(;njUAcSS18G<B&=GnMY$ax+I?-)<cFrk$ZUPH
zS0gJcC9E^{qt_hC=3V|46a`#TnJ{Hyzd4Mz7K_*X1dVm@WgJ64>#hk2g%BLGH??54
zZ2f_V=S{{<B7T&g6OK5!5NqJHQf5e&h;UQmD{^X&PvU!A=ep@ppyj>gK|DpYCm98r
z`|CdU#AHQcE=ZAipi^^7sO>LWrTgYf9zGp)^Dd%y{)D;J3E_O}a&Rz)N@Pn@_^?SO
z>VOv`!ZbahmR;KkSIY+8pIXEY{u8Xq&WhT<U$Bz|-#kc~;POiq69F%^c38OBIV}v6
z*a(8IdapXi>~f*35r~$l#6!kC0-PIjY<8@rUNQCU2M2w(vEU>BIVUm}b<M5dE!fKz
z&6SrnHhu0(D%wGh^;%(<^Kg3W3NE6kMGy+^(B3k<B1guKu=Mg`^$-kn4XxQfgoPn#
z6YzR6+nyor)QQUTf7)HOcUYflyKVn@XOm&NFw#OidOFrn>5R&f*iZx>>3o2Fk^KGF
z^7U5hgz|MaJ2pnK78+3@P;UhX2~y$5s<pjUtOJVQoWvhYdq>RM$t}Mx-VDAcJPY$Z
zls3W4CfpNEZfeB>%M`H2vf0tdAF=P}HlfoqqGTvhMqqV44fpnVu<EqGTltm0202cn
zF`t6Aw*@XzkEY2;j9o)Nn=TL58`#j&$N%(gKbs9b&gJSTq{)_{hgA1%^LrnrmyCUr
zMWTEbMp@E^h&R(oa>08CN#gk-1AeK!YU(cpLi9C;0BVDgoRc4HD~l>(*EHSNeb-{-
zY^fWkr+B{-FU?nHQ1;<%<#&Sok@OZ_uEiGgo3yt-hvpM)Ok#6<55YGOf)6UtGy~lr
z^t#Adz2$ox7|PL(JOCPb40J(X4L~C)It&uzeG?4&NA&4n#W8qn=PaG{LEJvQCYpf8
z?IP7l)M$t`_$7T%0BtiGgjYt7Z(G^)k&n0|*XoGxqoLjq0v=ac`>0aCY7OIXnj_U^
zbdr+7hWRn{)IocX*|pWj^i=li@{M=Rr93bNxqHmx2J}@dGJ}qxQ4c*1b=%zO!u&WY
z`-S5Vot9MeaQm(Tf8(717|f-v2Y)`AGzpBrK}_yn3$ZtRop1ddEUV}r2e=5(&?`hA
zWSxY%toQ5!jk}BvTa=D%XH;;ptmCWb@GUu<d)yRkZJg!y&hJpfJ4YX&fxC@_l*T9^
zL3;~AeS130Qi8&Le=Q`hMFvYyS@4*#0H9&Lz{b9qp!etX@|GP7d#E`o7;7D@)X3fh
zd1_A1RROm0-p*YPv9pzRtfCOPF%uqDd)}z>e~;`+9RZT5lt>EKu&{CJ)YfKZDZ2?%
z;vEi`>Gww`x|+w0O{#5Xy*-Y$upM}n=GG(~w7fx`Q-eL-SfI4sD_&S6V1aEARJ@vD
z(KNi^@NB-C(ixvFYfX>m+44*RIyIO)lQNuNPkzP+EvRzhs%O<ZWy)m&4mSoQ$^(9F
z8Q<iEs`1RbUp)8Ifajg6z$TQC{=A#Icd1Izr55Ouf#*LJ6=2L7W$7#$!KICUZRiZz
zia#)|ez^wu*icZX00+ee7f%~Sw#N15v|2AZDmxxWDqq&8VYblwTe4`0TyAaQ48^!2
zav2dBJ?IzP@LV(?|DofNy%{~S=Cg~4fYv(UptnaTTiU7wF3+E~V)BX~x$HY@(NI-m
zlW1<x(Co4y0+}M112N?pWP`s!nm=V;Ac=am+>ty}X!lNpt_<dv)Ut|3XY#sNe1f^?
zAK91ZpYC|B;1`<MoMeNsY|vooA&V*HD>rzcq^z6;gKPB|$oNFFNt=5Jy@J+uQcCo#
zHVoi^5;wtDA<^6jKNr#6Uh4+qyOW28olhThzsjusX+8eq&23I3<JYI*R#y4uALYMh
zn9aJrB2hXg2NNd&*15Ql%yNrQkCRPRq&9jE^+qHG7MqM`e_k41^VgDLDGs;Yx?e6u
zL$&F6)wV7fZa9Kcy$FD!vOp2sBt&H>Q37igggATAW*cN`Y6<uVK$9t>e-$^0c|D|k
z(=n!CC~)3|X?mA+3FoV_34W%;*P0bV(n14g4at}ZT0^EgERh!scIW*OGTKY*udlC0
zUu-|#m1eEUWZC>N)et#dCI@>Z8;-0QE985m?@&9aIN$~?n4qwflTFxk20^szZE3y7
zQ(i6JyJ0{fBXujVMKAh+C7nOS7Y+(TsjfSMIU&$;Q5ie{ced`9(|PgK3}pNEV(UZo
z#`7=6zD81WcCIQo0*xT)pm))UUnvBV_uTI(jP(byqb4ocN8<Gka@Jax=F%Xs>|}fM
zuN&sHmE44lg1B|xF;=Jj1o569q*$8OG=sVQaZ~-+|A(}<jH<g=;)Q`?#oe9aTHL)r
zaSCkQU5dMFp}1>tEAH;@?(VL|HqN_y-h0l&bHCm%d$CymB$H(1H<QT()@9WWzuF&i
zxY5##@*JjtNKKH(H)c_z49`sf4jZ0PN4~pGZ#%ESSg)hp`uqa}KjTwjV(>ZSh^mo!
z^YX2ws`Q19Io_#dxw%kcJi8@)X{IO6GkDu_qnRD{V4X#O-E8fDYXNxUY;3O+P&Hqy
zGI{@LqUM@498H!iGo5(7Vx303?l8URvVW;d5{+|h1Z8WH3iR5eGVh2JZ$F*4X@0;>
zDf?+SZgFkZeCanNCxwudP-0(2h2{h^K4bViI6j_GGhwV(+rhGBG@Kv|;Nz8FvBZbg
z0r2TIGK=!SI44|-XYRE6h>K&{A4GvW;6n+w;EjH)sXJ>0>qc^`C@^U<{lm$gZG0(e
z`efM!G3Oq~t#=IsO8n{5iS4kaS^sdamm9~k$;nLvaV{?XN#F>qjJkqq$8c|WPO{rJ
z+k#&jwZ!nVy)`FC;p<L&ndus0)E*1AW)H!D-~2~;=3~H)YrS(luMD(Y#+f}`Qk>SK
z-I61>eoI<86rQ&HC&aqrx2*c9>;P13|3wH1L-%VzZ(V;~y>G%cBQX|BpMI0P<g*+d
zm)OLA2}>e(CKXwO9IG4axJ@CrX{fCwDF0E1hGEcT#nPiMJ(g4BDRF4O$^yWPk@Txw
zWK*5JbSKUW&u5_rOI-Rr>wWd=VRQ8Mhw4{Bm9pa)=$5N$f11}MX6(c~VGtozwhjhV
zIj4@#$D?YP!Q)bY4m!MWz5I`g2(~SIE4Lq4)=7g#EvTs_X8`mQ;C^4D|K7Vq*HJ(<
zC>6n=^|(1?oGI`sK2P%&NY6$onyMQgovPoMYqB~YrMPSQTT`Ld*UuSKh+6F4{|-YX
zpxC;WEn5yJfl2rhCzACGQ<^$39=1n$`}=dRo6N+b1959Z{@NM>HYzgWv(cA%=H#A(
zi8S&g-fF!Fd>4LCSNVAZtI@{p{!WpCVM4F<CJn2T9^~~HBE3L!9!Akfhk0f_^3Qok
zoM26_bR&T5{Q=swjd|qM(})tNAQDkuH+}{%(#R~Hg;$)gZ_t7-uOFr_)5(DwF7T`E
zhjHIk$esCJd{*}xtH^k2$RBK1S+0Z5g>LXO1#PfGxyGjknzw$W)g`NeF6y!cz`0nj
zHlptA(-;nDfg$eLNZ#J(&x2f}7~X#B=%28nV<EpzjWxojl{pH)dO97JTA}9yKN$a+
z)+$?XqYGO*@8;e}k;6GbF@vjVh#!KnY1=~Br3`og9Rh3tB4RVJqB_U<U?I~9WxQ5M
zNHW}_&e(}KN9iuUKBv+f8%3+_1dJVr1ugK9o*>r^*Ik{?AX{cJM9s7vL~w5GQ%;YF
z4__smu#wd9|0(G_r6Nvr0-Kr9_xe`p=NKuhl*=29xzqXis(V$RcaB29Z)Y~6EPutp
z`?Et@R6{;wPG2}2CQG)b0M_^3Q1T+}7_3IU03&01p*Cy{F|-@S)|jS<?vbl}pY2SS
z#jd>hlG3QnNk|ovvmrOhUrIvR%$2wkDKRR)F&AH+J>vyp#H-d^HUjMF4KSbXj&=~P
z_MgOE2Jmefu^<L{t1WIdAhm*vHB~Lk!&-@J<Wb>;{a}~-ouS|yrqO!bYI9w5{Fc^X
z6i46A*jOjDF7jQ4R%NJZmo-%uI0tVo+9%!RO$d!+v6?OISDP+CC$|ZORQy!om`5I+
zdg`^z_(S;5j@ldJXKRpO6uiQOj-W8e8oo1hwVbKn5&bQJu`CO=Wseowau9EoAQ9;=
zXxU1I^Tkr=9%AN7c&q0Fab`s^>LeaYEG1>|I%!zgRyU-0G}K4V^RBAh9Ptqe=G8(p
z1x~V#EM;6T=*9Ap4X_dkPNQB};Z4_{G9v7nugJLWIa*$GdxNcxp>V`nU@0^~V$l$=
z*c{D<3BuVKJC{Km@C&5D1f}vl%6@Ef_z=Z`c&?vi2-wZiDsiTiCpx77$_HMHQX?E@
z!_p=Gyx37f7>Y9fyo(4FS-lhi)FV>Eq@FiodYANwkS4Y-_1|IWdh4-I(LEev{PpnB
zcEd_lUk4*}b0BmS?eZfvr7V~*Nfs)Y;;9swW8bKLxi+Vs90`8c+DX>m??sQCgUUE3
zz!0#o<dgzh+p!>vj2>Py*_XHqxSV^IRgYL1E^$A!^b%->E!MkkI7bCpjDNhgiMH8C
ze=06p`Ls4;h#Jm~?{>XLm%(~6{vkyDIP#P^g&V5!o*6nfKY#9~^~{Bz*56%-W-^DV
zeaDf7o^k|rM=m)g97wuaS0|a>Y)>?f0N4*z?{f$10QqU;rLF=-hg0KeuaQCzp!?OZ
zBA$Xnql}Y*aJ=vpH8nn4KmHUI#&)sMGLCxN2l4>2C{z+6SX>oUQ&<mNdRg1(1E3K*
zDSqLXjfu_dtUv8P1CpzRjX$g<@@P;x)=6Dcn^PN7c#AIUa*PWKZtyhf|12FE5fv|P
zKQ8at_7{!hh6{q$RdNwVCn>uQ1KQ<xB)5b!>G_FxS4jNeWx4txa1!BsJs>_=b9o7d
zS!q9yVQHmIgoaxAxu2G~Q$CS?<Oi62!)vC;dJy&EgHLBb!soDq{DJ~dPUdrF>t**R
zqarCW{{*SdGCV;dXO8UzVD2XBkMN)LYQx=4sHk1BnYzX0iOPCspNedA8MFd$Z2J2@
z8#rX)y3S@cPMEA61bx|94cqvY`*~2UZnHx04?WWe=(74z9+jhh`(rA8Ou~hR3baPK
z8qu-FNH57n2k=Ma#dN-#B;IB&+dy;L&P>pA(==AMnQ>S3`9#e}s;woWR%@>n!M{as
z6cB2|z`9-VYef~dKYTB74E|(qTZ<eRUeJ&M0n0$lIzKmbIfO7@AA(+CW&t4W#%q6G
zJjzm)4R)Eq!p271^2D$j(PhGuMu8&JQcx}zv*l+q=We24UV<^#vDe@$c)Krqtyx^Y
ztQmJiTa$!LtWoJ43kr%}R4a1&bo`B(onCXJy)EY0rBUYPN(qwgPAD;o48@y?Dkg7J
zm>2-CiSUCCga4q!`Uukvu}!iqomd8;1d{}I^L2Z~<`JT1s_qB8G?c#@4AL>h_5Q1$
z-e`bP_fFJre6%1O;Fnr+t=fQ>-2g5)k=Og%6Tl8Jj~t};G>fuYt?)nujY-XC>(4k1
zuY*(*@#Ua=?wmJW5|7a%$%fHX>RHHv-rhr{h55OnO)N}YSV6l_yAmyr$0O+);sCXb
z`}hQ>A0l+x6|L&nou$9r`yvHlpRm^P3%{+HuM#7CxH#?l%=Rmnz{5Ljie(gqJy{#f
zMlq)Ex0c%%rM_!KOw23YUO?qsHV$@~XClg0t7r*+V1)NBcx7U**b_NX0YF<+EqmST
z_0sFY*YGwLh4^Q8a8APH(51cg^tS;uN)8Jn^*t^gT3Em1pynvdiI*57zle6=&VXR{
z$|$YL=bp!zSF;b$T*wh~KX1C&#?!}<O28+~eTBY`U6BM|+O6GklGjW(xi`<W^~tc!
z4C%abRA6i%2H}R&mIMKh6RB%VC*lvf;+-!Nf4B@(dzXq%HBx1`5i5|Xi^!(4%s{&J
zhi~i#?nEgq4{QVzd*gH%A$~h|?_#Jy!}E#gv*lyDsKW&!^tMv5wtK20jWbGYHGMjH
zVFl$AtSv5n2RmHClW^CgMZm-35Lr^rzagb7lr)4lRFq^#;QB2j6Jj@!3Oct3)n4g>
zLmUvKU{`OT39QFT>vu_WlDHD)Yr1QyM^W>@DHKVa`qbE*vDGg7D+P0zeG9B6xUXOQ
zWXREPuQ{*k^I{K=Tx%%J6!(vy5U=b`(dHSjK77L^YEP|aAJxI8gY+^loaSp#R8({d
zm`F+BisW}+YBFw`{{@7o&tY`D<MXAldeDC4#9K<Ui6%jjH+LbjF%FR`Hg=x`+?NF2
ztF>Wc`iyPufq!5!bUJjl;QVWBH2Q^F+6nuQLXR9RyFSf*UMn9FoVoBP7MT-PRzy7e
zv_{4&WsrQEiLtJjqv#v0GWme=Ny?-6;mIw)d^kQ%o?GcW$lT+l8Nmok9d^cx!9oy{
z)&UzIy|iIsf~o)2LLbV31Ix*fbs3eMB-*a{Lk~Vt40WdWl^?yfiE({)%CFZ;U}sVS
z1E(oJJ+`(o7@S0%86Z4Tj6bmVp1DYzV5m4D43zJ2c7xhXqP#FG9V~}hZNH?2SYSkK
zbhRiK!2Y9*;E34JushEbsD>#p-GUrlQQ&>*Xh#|@XHcqo`t|e}@oo?%Oa*h-boj^=
zp}~L10YKZHT#~ti74++|YD$>asC1xFg`{j-QG&3f(#XiDscV+a8b^AQig^<GnnZ~R
z_l=9KH{jQS_w^au!$z=;rN&^ZlkueTdFy4@xQIx!pdc+IjYvQq{I^NyE$<K$Kc{Xu
zM|Ms&cxz>&N|RsPF4zMdOrGgOzhZ=8VJ{Q9{jJ<iJLGw47Xiq+vM<n>%YxJK<rsNw
zTi(-v*Pk*tWfZ-CLigZRCdpg7y1Y?vcusQ81HPmlaq?%kovzUl^>yqIb#_T~<v9L=
z5ZVerI3t*4*E2MBhfa8WdNNZuLYL<&!;|3;L5BOWA^Rk<CI=Tvo6nkDRNrm+c+cr`
z-NpeSiHV~;qxPv<{vzWs&ViSMQduMh%bAg$7?fQ5^@M7Yr*q#EdpU((EoBvgS=E!h
zjXvSCGMB=A<L!LQZa2I*@75l{1KL-3yb_izZ&rmvar2M2gxRic+SS$7w^}Sk+ARfx
z9v5%O^O?6O<y|Ba!G}*~hc+02JAsV~G<0KMSb~GlLb48aA_Xz$cP)(L)9<H<Tqa;P
z99TAjTo=YWHp!aqn$vF54fW+{@gyg5ax1a6I#4YKn{U79MRJaO9#FejYIcf#B#iLl
zUUSfNbK{bK&brxdIU`0R*Y&zZEG2q~O-l=_ZLg4YTf&Pd+3`4U2PC&N`m|u}(b3MY
z-nc_($F;aLU>N2pZrT1M8~^ZU0>QmY@^gAhmDq=a0L9Uy&1onGq?3j1FAmwtBF_|X
zsnBE&c~yro;;VK848LuC{5|iEg0EH`n2J{@4Rsr_C@Fh;@)P|J#W%rk`A{l)1jg{j
z%w;(R$ki~pwemhPZ=Lz6;c?KS^oV$+UyAE#Bf%b?1}0rZQ4pLQfpR@SMdZeqCmFG#
zO_+bzW3bIefL#(`(n}(C3aToOK<Vc}znQF&Yqk|qP^0ldKVg!2^Kx^4wQk#^G=rE>
zBECTuxJT$ULCspMS3DVaj?6Wv$-e&5*VmjG=H@Nj)H@I){nf6#_3k+BxMJjG)&QA^
zPr+N9$gALocAG_&&df78Pkow}!`yfKt)K(Z7VXnPlwGL(1{kb<14w)(u}LSF0|QoD
zJs&sZFZ<&G^}iuhCYG#Q&KT)UR1LR6r#EiW^6Q6^Q=AHqvrEffj#$CMKf*8M=jRWt
zxvXW+4XNLpmo*3^mdZ$PTE6ljY)X9ms#Z2`OHgfskFCowl3zw%%<)DMGsVBV>L6as
z9yBnY1##bKdC{GiWa4E|&l)zgHATpoA$@`oV0mq?TJPHRYpLV-J~^PazN+qyuar~>
z8?`$v(08szv2hHRL0z4j<*{4S)(LF0%)fGX%Q0qJuHjmkD<wSpH;FX-$9|HtgZn?|
zyHv`!&Nf^3Uu8WQ`pNM9-e82E?rA+6VuD~siBkMA=~VsoU11L(yDS#K!27W^_MqI)
z2V;8D9rfpq5tQ57;SPdCLdw@^T<v1ke8Hzldq`MUi0}veL_QvMqoWfAnYgx}9}HMl
zbo}JLCLSfFQ(;w-uCXP+RTG{0MRoBLQS>zJHe$f{%BbL6yUNpVWokj!M|vE3Ex&$Q
zZBZ>Sq3`Y6HxEg>&-7V`4QTAd(=E6D-wdh%Rvj;QnwPJNS!;03FT~835wOPs8)Y^N
z#2=uED3i1~0Dtc%O)^|QT@*-}Nj4YcP<po1#Bdjol@k2u?xNO`ZYWlC<y?0IesJ4*
z_=*Cn(Y}(pifP}ULOusI@~aD{*eZC13I6n3n9a0SnuD?=Y3yWs$`w+nNN}>K>;Bse
zFfoNBAYi)JFgIV!He=E%pmGMz(hPJ=_FM2K6ZNpi{wc@cbW}fAf$Gp_ti0AclK4%R
znv8Qq+hsj++wY@7|Ggy#E0NdPT;bNY#BkF}xHLxH_HW~SJ8X?AeM8$6xR;bTfe7(H
zQa?##?Xa;`!R?Tq-3ZS0M9|H`NqYC%T{VD_h7GQ%_<6VctMTuXIw&24Rr%Im-j79c
z$WXs(Wj#(i&^PhgP^}vqq}9Y?+o?`htp7UxjfQ%eC_)%{^VA%`fX|kT{#g!IoSPeD
z@Uk1{QMFG#xQNKu7AyxeG(%S;p$IIwD&i&u8r*<VHE;*lHfZSBA}QIkPz3ctNr+m8
zA6)i-Ua^AC7Y}1a#x8g;Cdpzv3Dv(wa&0T%2KbtynK1s6AT0r`FFRfBAkP@b0D9|W
zraylC$dcvb<5UzH8an$*OE3yq$0OeJm0|rSRYq17m6jupg4cOduCl_AZU@mh<5Vhc
zABwR6@mg@>{VO^o%1%blfq@}qJSYX2`fnXIBNJoc0NAj>W0mQUWpo1gZ3YH@?KoKG
ztkrN$@Zxd#7mL(8eTJNQBd`4;m>?PtZo$FuHsEXUq(V6gbkht&H}j+W7Lvds47<<6
z3H&D#E)jv(dnH)8qDdAO=)vMKgQi$VhyZK#l|>4uQS}-V-V~{Ely+i*nTd|%&>VlD
z-_UWc3+Rfyhob-*ljpk2dJvYaL&k@73vIpIUJg&@LP033$4RAJSGMO0WS&DIBS=jO
zR?}DLEteRXr!5y6wHAW5prH`dLQ8G`8F@iOfm40Ct$-rYOpkMlUrI#+OHG!cSuwR*
z=)~@uNT%$D&BCo9^TSnPk+k`}hy1LjP_1SRs`a~bBY}f;bEc6ZQu8&tF-+>qffjCl
zcTiL$4E$o%kM7eYpHN~9Qka{wlIs=6COn8us!VUc<<ASe&P}U5!toD8wX+Cg&ip2N
z(_Z5zja@zxzBNk|NCfHE+CN21gvYC%pCKBvu*@TVa$z{i%FEB(9Gp79n^8mM*JWil
zY`77-_|>~xcoLN5dcsf#exh(m^0;VHf<`3B`bmAiennK9Mc}%rm*0_+f-Cn$&b`69
zQ<hl8N+H^Wwa6QH1`KOHnuxz%^M(@|`7oyT*B|q6%w1lWlQPaOk?0_Z#t{lCDwyRb
zapOB&g$-=OL067>h9y`YN${|482B3Jt8m|yPnIugda3dnbY_Gm_7NkD9ncWSJKiDQ
z(}?}<ZiCUJ5{6OO-$oAf34eYGPsxYv8vl+L9PyDtN}8^BpaFinVO;^7mYZAgfbgj6
zq@oSBYfBkJUd#8X6A_+f*8_M|W;k7AicHPnJ>{K(ls+LhGE-A&MZkN5lRmRLaC`d$
z-+J!aKibxK?a|&T-B5APVFH&zTS-aTb;rHabaOTHZ2_Y1i*BCO#Ar_JP^t^G&Z5!Y
zL(=+}{<hD9^jIaAEMGy#S?&I0QH3KA)DK)tydM_4P%bBMXiV_a1YS&o$RQIp>6iy3
zJGd%NO+fWlh0vkzK7t1ZMq~g!DO)}Jk50u~G%SU+xab<rlUGu+VY5PySKE<Nk#4_{
z!Vu>@NiH`2j%mcbX86eQlY9kRslW`(-31aJD@oZ5K$bcr9g`Z*PTL>ZrohUq*wgLt
zhsf?X1;`5KI;|K8rFi8nh5EJs6fJQhXV+)I+7_@aNu_^#+W0y+>GTthI50{qI-KiG
z8y~*2?fJ^m_N5uomd*U7)Emgyuf6riyYgdGb7z0=H1xIeS@2Xrx<sNCrGbDmV1;3_
z(QcL6))P{H^XZ~}HtPVdu~D&v%d@v>xU^DfJs5AEH%s{TPZ(gtx2fT}fOm28(n-7&
z_846BURo?+C*aqpi*yp24o89OzK=8mIk~2bQjf<SH}>#XDxwRnvVhT4ei&<Zmz+uU
zUypWirprqvY^jutLGvwL0no=jgph^X+i2#UoPQ?#Q)hqG*vX+T)Yi+oZqu0AW<u9|
z7GixA6S^N95^sZ0<^$clF-#{>?0FvS0g?~+Kx}?r^jL<Wf;?-Oy0O-5WVLC2utu!j
zUr4#e;Y7j9AYp2|4}Ui8Wya;X!68I$hfyxS>~PZz?gk}0xqPOt4&El*GRmHmMeX+Q
zjwW`HA4jYiV?`)6$-J|1ZYHEUgBjZsn4yvHN4ie4jYR?mp>)3OkM(~4d`%2h9LCfn
z<?Uz8NcfeMB?gpc;JV{bNu7?YMPLraXLyf!H3Pg5Uh(<eKI1uXXx-yueVys`&26?d
z#l`QUt?Q=~60Qa)BiQB|VXVSt#70z!S_}t8vf?*bWjvUK`CBitqUjVXJfM601P6G1
zMOSfj=6)v`J%=0Opf8RsVc6k`CEq(;`9&-+n|NB7j&ZV6{#l|wPipFMFO+UzugrUD
z?q`t=`ZoD&jy%qJ#|7i+igXYjrP&q_r~3`JI};$aVLxS#;^=c)M<!Feodf%yfrsB!
zeI}Pz+tL+6UBDm{T6&>hnS!gL>d)-Z?DC6@I1WLc$iT72MjTkX2n*7dy?uP6Wnc#x
z`MefvyqA%eep7Sp)LI$NZP;{6U&+cj2x)-BkA4qTDnG*DE27`!uoKn7=W=EGP=ORb
zzVrP6VWK7tlvB(KUB71pB;#--?0IPw`sEoTJOCqn@N9b7^lC`lE!ap#<1;Hz!F-HL
z0tom%6l<)vYGS!1*z@}sd;sPr%7-J+otQPF_Tu7VWe?u{Zun1lVriIjC&!$}tTB^u
zlYc($Y_|;KG84yfsgiIl-V&|WV_^VEONxqO`ofY1gNZfvPX-yMVDHMNmeFUQwe0%x
zQ_&JB^>pN2Q#mbQFPcvTa0`z<BHO{K^F;~!GiRMpltThsPJ4*+9*k-iv6ysdYu<k4
z-U2k-p|^wJvw7QjyT%F$UdNd%m-~&>*#B0Q*fPlETxUiK58p$d=)6wS@lI&jN+T$@
z7JD>Q6$InOu0Lb%K8CZAK4>mbZ#!Qusm=H}ky{Y0Zn#KBE|Le0@G{=6X(WboIRa4C
zEZiu+WWF^Q@g%^yEgzo5+X|qvM;OFe_Z%Ut{ItF^XrcmJ5S$WP>T;H9Sq|2kxPts)
zqUg-X@X-jMxuNcQyZv(7!<-_1Bz)=R>B;sLtU=QtFkx%!^C)tLC0^Z@RWHBgHuD_k
z3Ml_Ij(c#qzaN;De}`S$i=lTg_Mn2vIL~X8e|CFS3+d5qur||-yp|ch9Tc92%d}v+
z#XDf4ZJDlboKmxo`DEK(fgj^2YK|If#)ZMd&^7EOgQpm5gzBizzm<nd>**+QmOqDE
z$=EHi!92y6MB{>6k`S9pl6HKp7bGAf@N(*4Jga@c+VC@TpNlH}^#!PYwX{32l-`e2
z30v65r*tWlD6(K@%NHP!6b4p+ZF3MHg3EwoMG*BR>!B_ZIDX4=C;dFRd^X&P{(6f-
z2D+Zm$jAQ2uFO3CCmu<8H_Q|1n$ad3x>Tj?)48cEO4rFx&KmFCGVPLX2_ceF2!-ae
z-&MN(r={wea9TiR>6_ldjH!0n%+r9Czzs}iIAu%1&-5iMSG$LXa$>9Fu7wF16VH1|
zy5{tfptP&fbaoyaYRM@?4rHLrg|ly|kk+TQ+~lRv(Kar%X2F+x2AOUy^|sWb>9PlD
zSKN-Iu<qZ1KyM?=G`1sd28AWG)^WE`)2zCl&Jj~GLg<kH)b`H8h1SrqOHHqB@ww6#
zTWwON<3A&*S%||8mPR|osgvMCS|&{=^`)nSLO+Vg;=Wu%<Z5r&Fhq;ILS(0oomcUG
z+4JDuzP#9~;6YPYid4Z)X>8<Tw~3=x7fTf*nCtBls%{^kh0ON3nJPp<S)YPCz6oMb
zd2^!UN)byJi>2`*kI|{p1h!jbWbnDcJ+CoE``N<lLDN|TO78wv&(=f=`Vk(E@US(I
zso(DXHTbu*V=)}Zr`B1H&y9>6jEL5%rajtQNVj1HBPjY5p5gc@+}AEm7k&fAXQ{?&
z@sH+x=QbS=ShtwX)Khs)I$_S>*EbI?6t(U%UN@oxh|98(_+B*+g4==z!*&CRel!9q
zW$@YA*_}asgAQH#^F?E7r*NCoRR#}mw-vAU!-bMHs~;S|aQmV;xH(O^;l9XC)64CH
zswlro5C)W+w~;<~QJG`o{gHZRLCS&F7$)}l#W*zd^>}{3ZEqR2#B!%5wcqermePuJ
z6?c(R)_pw%Jh-D!_DN^m1BmD}MjP;Ba?hT~S}AvLe7NI+fk{ZR<acSb--kzO40`Ey
zf%ajrCTFn*R14jOp4*EgUDLq?)m6Wq{A1^Yln5chR-jCIbV?OQcfT~=2jlWLJW$l-
z;gG+PgMj2qCBZq9!(?X%-G=5LBz*AH`8t$Y8xn2(yMj5~k~(QPG;72U9aS-6bNDy<
z3=qK`-(2{|i3@(1>@?avVqgGBJ}B7qLch?!APJx`W=+7a9g2vEIKHaM%<_yTT<q3s
z+RR(>x8}^A9cg~j*z^#!yl8y@bgT=cCs2C5+;XB}VrI`X^xsu}-pNd<W;Gf2#Sh!N
zk~Bt2qje>Sb6szJaOXEHvv;`8g9flPKRRA6(hELc2JG&YDUv2ki0M-@GfOg964_=N
zVe!%;&TlRG+;35-Ic6@r(s-6?r6cnUyOThp@#o2~v+pf6^>s=hQ->8B_g?Db9r9bu
z!b0u?0bf2GF`2Uu_#W(b-G(Ie70SH;+V8gw&*&Ki2pt;$e<bL%spO4FRuAE^%ZVwd
z*l`ck{5j<*&$$j<3RF}VO7fp&8{aP9w!@ettOoRB<9|U)yU}MbN#eRRTg4`VtEnWH
zY9=95j2fg|?mAQ(O<Bn{jD@RbsOf52AXrrR=W~))rH!V%)U-Y>pV-f-B$2O^OUh3S
z4}(q&O&!xP2k8j9rKG)@&dFa}vlZ#ZmUT4_Z30df<pp0tHDnCgUO&^*%WMsphnmt7
zB{FC-=2c7xJP~akmCql{#*0yZNE%#qyFHx1XKN5SZ}Dkehih$b4#1@#8AuZ`b+(St
z5YO;3$#KU7!E};*35;24p>+2vz3@Gw-V_e?xQ|TQRmlZhh?ncGJ5E<1*XOu-75|!y
zk5Ab=#;>8a6yajV{sBpyA=Bs8E8<PB6wlB~%e<CO?({n-Rl)?}KTid4(>CH)1$|OQ
zgEdwa#uYY0L@+9X6(&R?*vDmv8(o7{hS!d9Wu|7px&368I;L4OyjQBny*=oMmp7z=
zkC92+6+SmNC!+T-<wjI8p4bUfj}UGp-8D3OKS?WsDC3At*8{_JcNyweq9AWZM6SZB
z3{5r=pAR}=I6vj(C@*25UTT7xhk*1w%GK4L`7I(#f@5kzW59dY80VB-3_11s`c#qb
zbt6n5C1;%tM_D&_lK#}x6(82iA4H`(7QgcKX%l%I(}eS*Fn}_0iwBXJ(^s5KNu4-6
zjW`)693QKAxLAtWb&kcMUw;2nBQzpp4dBO@dZeX%f95;7z511lUjHS{7r!ENuj?`3
zUX-AB;(egCo=|ZDw}W#fI=&XYIcjcQak0UfoL19|l1;}B<Ctx)x21&zs@gMBHU8N1
z%B8)Z39TG-PMY)bQO_3qnzYxAIcZL%bcCV6w%Pu~n{<KapQ4>vq(N~u*zheL?cIk{
z8K<$&&DY}|Z1q7RENito?t8N8A?_r0AB*&u%i#L=z2A0iEZSZaT>Mg^RyC<UM#+Hn
zwArNrV+^~wd$)5WHBOz?m6I?ED+D%nj#DEvzVMjJW?NZMqcL4@aXSwR<?Y-;N6^IJ
zc4*wtk+FQOiTmv3^yLAsLEs_aCDvI5(1})G*L%j5K!$&L&Rj<e1)wCe{jSKRqcoFs
z(?_hH1gE`^HgOFfGIugqsY){EDm_NUEKIi5oRlWpT-W6Wm!c&@hsg->oHm`zD{s3*
zB2cWLl2$Z}d;0y*7-BlhCCDl8CW$S_Qxuo&_+hf(ZLc*|ikzh#l<K4x!jMjMz^VkC
z_GoCGB{bdYG!+$9nx`<8_`ay;Den4Pa6L=|GJ|uAoR$Z%+~BL!1Vl7y=pW14R@SM`
zQ+3u~{Bh%^CI=;HG5O5o#vAo9&i1cWTxJ5*0+9sl8j-<Q1$bCMRUI#hM8;PoOpEaB
zrKNsuDGCt-k$98p>T=`&x=oT&SpZ>HaWUM3(>~hLV&(Xh7d6D>%iN>tw^M;&R}s?-
zMh)Wpyi)NXg4OP_m{)X{QIzC_rrERPTXGCsng9g?*A<sg!>@inXnIrJq&0&XSsWz=
zKZ@`X9VuhZM;;04N34C@Jmf{Nj(pYV34};r`+GXLi1p!&*7ve5ubmNAB!mgpi8VF5
z8@h}Le=}lwy@L58jwNd}iA2_8Q`RJAT}+uVakau3JTTUg`6HpeI<;bdEcpJXP6l=~
zV+%vqioAR3vF9!;AqMuxZV8ECx&T!G0DP;!9p8ZmTSeA9RQcx=^<sQV9g=VlLM?0A
zhvYtRDaQr9KY834l|O=@g?N7mgOijFDg5xY@Rw=4YY<Q7wl4iWW}x92ZNa>?q(0Jc
zP2E)qO>x5Nu*#)_!N)*4D>1{|qDufKEsc@9qroig!^9ii#X8`-+*Gz}<qZDkmvn9a
z<+p-pXB$#mC<LXF@r|IQ>x3{KrB_C~p^RN`!3Evd=|US9Gh$TfI8`|Cf+5(Ec7M`9
z=CL}>6O_p0bP_)KwT=D?&5oxoWER2F7nBf;{9pJ+{v#a9=3XiL=R*5-r4P$rHw@b+
ze!=&0GBlOLL7o?GqD0`p7VtZddH1#R@sa1NPKar#=3}9cW6le}`pvJfH6JtIaz0VS
zVd0_qy7YzW8uDCe+}O-b>S?EyQNta>P~uuME|x>T<muVyZP&!MU#Wk@FEbe(?|*q7
z12bxFOm*@1etvk^3t`QH8nc-COoNi>AJ2%DEr%XN3<p&<rR6}_@l$^OOn)pNXL7!|
z*?mZ@t@jq=fFnU5yAhd&`$7qdG<2?uTf97?qo<Qg^N)6-rWs9Hq)$L18Zl`n)PSGA
zx-kVki?!5eRaolYK1us;wcBy*Ow<ThuVea79iamZNhJz-kT&h(6oog+Ny>LURUnpb
z|GK<wsDInps-M`Nh-aA|jg*)OIDS@vikSXI;`Gz-87hGQp<n|njB|}k(}VHEjYovr
zKN)3x<Bw-80JE#j*@K<emGLPe3UPoBRn0_0C&>d$N4`_qn0)32eZ79PEiq$l-PCY1
zGxBdb5`sOcM`e~<7$Te0TAc>pA`<V{=c9h14gJTEM`2A921Zw~Z`2$VgTJr+MoCmc
zfSY78KfFy3*-AR5zjc540h#Po<AUaarVTB+;9K-tbPSSZpv+v|Rla*P=iBTrb*E3Y
zRC6+{nsK*$vf-?_A(RDrVHyHAO?NxUgq&ubX5R{#s)>`c68j^<ps@3bLD})l4&Zj*
zPlI=eAjLxu?D+<LRjSl*weUtUY}-s!>$wYzi0XRMQ@G|Qj~UGWWX**F;F_bjxB6;S
zR5(vLT!$cE1U-P@B&OO2KF>8u4GlNz9;DfHB-F52rLG)Srr>+yGlH*uH3X)-51AS6
z_VYE_izq0VDEZV7Wc;N3c`+GQLwD(G=1*^4K5^>KJwIegmfWD%kw?e*j58kiD@-Nt
zdMcJ&DBs|7yadl;Y6fvr;$HkM#zyHUmw|S_br(k$_7STzT0Gr&SKo}!96L4%r8i6+
z<l%0Ko@}N(zkfz=sgSthueq>(O%iR9xZ`rHsz~&bIDO8&&IWG2!Bq<ymNxx<nX=lD
zc#`4GeETxCZf0zEQ0tMX`<&@;ho8D)`ZlmM%xhb9;mdDTb%JxRv$9_?ch_>gBEU=8
zp%z`G3qZ!|eM!N-@<CcTbOJE8wCi9?m6{CtClK1CXCl*xygCMZ)w57(*Wjk<)y%)R
zSbGUxE$C+&8dtwP%+9Ty2u!?aZ+ah%@gh4-zrH1|$vs_kw`QIgELglDsy7b5@yDOw
z@3da;mX~79m;O2{@Bg$n?0%SO+LO?8?$<W3zsnr(e9PJ79ai5M<ti5jnjGF}(`<MC
z8oi60W$gF2>yby+WmwGzk0ZtbAMESw`3;wbsaGVA0*`2>y!4HBL+?DvC;EoPC#&@+
z(T=bOAcE(3(!#4w<jNZfUO_92pur}MYXles3={;aP$~U`AS-ek>%^al22ptznT0cC
z;-{8{*NQxb2f^@bpTk9B$9at7Car*%FFSAH*Hl#<GHa$y3m<r`iH^Q35m(+-+CR=T
zRwH6+UF}V1$G<g_zl7v)jc;%Qu~QlxDTt2Sm)dw&w=Yh*IQPb#8f`AN#+jd;efkev
zm!F*?#N5t8OACfxt8|%PfHSb#q*vli%Wc^m4j;aV7q@;8WIe2adF4#$sOU*}Fx!ZG
ztLcC9+iUl5CO)-0yplQaD)4%^-i_j3b=n24{0Syvwat7f(?5B5i#*e#JCAuLOJy2i
z<zH#K7Ut1KdV4r$J)IaMe<66wta{VO-hJ~bh~hu?dU$KU;s_W%9(Qhha?K--=Nu1K
zc*;PyZR480Ms)i1vZP;!;QSUoEHI;UU~!r88u?te58SQb?hshLc5v%RU^+oKt#~14
zxUk*R7ldFE^Xr6+#wHV32nU0JCGq{wPba)Ai7NK1NQ*@|HaH}T5ZM3ufg=+Fqk-im
z4t@Wrk}ud*ck6`~`~RAQK|rCB_+kX6BY*jCOBA8aAQ~YsH~n>&a=d@K^z(;B5rXR;
z4<`Hn2magdWj6+iZ!7Z!uPSKM|4WgOFeEGql>UJz>i>vAan*-I5z<Kprk9BSGfWl<
z1Z1>-<#qOdTY~y%Wrl(!VH$lJS0Vpr7zGr+PUz@%f7{FVpOV<}L6Hqy?@G9zTh+^_
z$N;u%C1WHdvlV_yNlDEfD21GzD6u5it>lI9{($;t9^jCnN?DuWy)5ERDk&Bgv|gQ(
zg{;*=(+f$rpl4)4pkmF~iqFr9&TOpWDB>hPoo4)|q8YCs%>RdQ*K9b9PrhohKjtjd
zA_jJU=FToHm4T9T2&VYC^p|KXEUc9b4TFbAas^5WrtrC8-;WK)sPIjj*SNO?m8JX#
zIT8HR<)ph_uml%yRrT-&JG~%<wV<TAc{nI8WF_-Y9l;Zj^SBC=?lzbBb&@b`K5xiD
zD?(C?*O^d3R;7q#$*PN#=AVTJ{e{59yba!~A)AoYH@i5Stp-Y8db}!hdNePzIG&{`
zE-F(QWv|1tIFkER>oTFU=60a{xCz5#7p!b?d^5CM)1Z>D_u1Gyk{tto<sVi;fsOAB
zfk8R360j3#<KVB-7?Jm^I&a;<np;>P#2oelzQ~%UI~CB<QZ)ksMMpw~Ipx<p@c-in
z5Lu9#Sy>%*13UA<J4O3SM~)i2F6Yy!?3T6ew|HgREpi^f^Al{D{BN(fDW)0O8>=_G
zPEO~F+TRmO*gpb^d*I*kH41FGkno3)ps4VZgQ>;Eyv)}d)5im3A7v(iYX}DQYBA{~
z#;NVTFvqJRrWwxi*MjBc<!4DXtZ!Cs4{is?-)(%70A=oCN`>Jn@;25Uwna3!?<o!3
z$!E_b{0fZ^;7lL--BKc2=agIP_2k_4FqU-K(DBkl<h83`*HC9Rx@c}4Si%!ThFR{M
zE5@ny=1^DfblmEoTcAe2&s#8{{f3JF1NeC2Q&we2MICc!cS7z);feKrEP}Gm5FmIJ
z#4;ao{+|$}T1UDxYXvqAIabq1RS%COE28M<-vBHC8oxP%CW|z1<4yHtkI83_`=GTK
zaVyO(*C@zof**K%TBDn@<bYMumb(%ZotMeGYlg~2^q%L$#j{AReFJ+a+J}^7WmE9&
zUHo`>(3bCv0=60B7YRro`XD4}QvedCNgK11m4Y3XlQo&O3Ln<F%$Vrji6#jOhMzy^
zB@kNUnzX{T5VeSiGj9=*G-X>`^kM-Ync{{OsJLWc=zug#6GhzD4x$J#?Xs`kZIpos
z5C-q$&(HTGNP2b==^4dVFPi`-F)}9cQpQ?8Z0Q((#y9#JoP=Rb%xCa7rAEcc@l18h
zrRu7ysW*5B=rS=xJngG;)cjwprJ9um-mB)xO1E%fIC@B{q8#6%x79t+6&h~Dl3!;@
zbnV{oy2T-z!B^DrHgLYyavS6GP`iQ+Fjega(%Cfyz9S7B5`tdg5-irSj=-s$Y4DE9
zp$<1#L)&!=-?0yq*a00mW6MSTELhg$K9^W~XMV-8yIQH%yN59$;R}*^x6@&Yn#4ca
z4a`pj9>WNu^!bbCnS}QDpp4ae9aZhyOrE{?IPIE}TFXRC=co{T9hXv*vDBkS-`;B*
zMHd&5jmJ9|r@jHEh1Lh@I#Zjljid_pBf)6we{BSppZ}b%no`N{w64~ioYCB0z^iM=
zt1bbeVA{RlwYBEkuWi?B7Yi@IwR{R``EL#mEzRgODk}Y+=%u0?13d4U5K=lTtF2yo
z^|uO^m=*WpnV}?M2~E|`@v+5CU4>4*y!REWM%%HX@l$mwTQ(p){i~qCe6)=T`M>%Q
z&(dQj!Q!^+?h?ycFf3K8nhpwyP77f^vk=cIH^~#p6`yN47=G3N`#6E)a#7)ZYAm|;
z_aVX7qli>CxBC9562Od~T%TdnR24+7wD3FCBcvBCB>d#7wii4Ws&ka8aJJFnq|l|z
z^7SCILnaKHVHVf4RgKB(XsH}JZya$UO_@G14SRQ?qg~j>ZA8#)e6`Qw`w2iEnKc_(
z+z9a>sqoYLh{5K&OG6(x+Z<DAP!&SFMLRW9^24iT_1y6lCEeqk?l%2GtBl*h1Q?8h
zUjW=8ehVybe>~A>G;6BAFuRPyyX*M*?_Htx6M{rJ*+7l@;#KH4Q}q!lcPeCfMEZq~
zw0>j%LkhP?5mDnCV+1biaztXnm2BPXRZ_>XF%z%E4%KLUns9GK?A*zQ;eo#JdnN+W
zS&QzT(an<rq?|cEJpF@gDK|H{SiqnOG(V~LTCQvP3MyvPTyL$D4=SQa^TzSUXF5(F
zk;bg~q=jC7Rn6t#hcK=Gj>$nYha~gG`8l?O3YTyrSc>&&pC>_roOFZU61XnT<Z|H!
zB>YA9X~9Q;h-uFMq2@(kAL0+f^FOv+h@=t%3YmoC`J5H8%QE0bqjE4f3}i7m?EyI*
zDJp|d3CG8@$X4mg*8@<1U;d>3*zrpUENU~bssh!Y>$R~(;Ued^TmF)Z$P;O|4MnAF
z<==pV6U4F3tc4eg`h@cgo{OHOuM~psnSsO?0_r0PKsrXsR7FX<;0t_##c48LT|Mxg
zBo-M9i;_NCt)_H75wylCI}dVv=1s&u7EB}>^4r?9=~Vg7bxm2CqPJD={odP5KlDMT
zJe(~9V;1X0ZEOK&tBpgVCS+ajZF39D6J-yH2KO>RuagvVuy(``{GTpUIp)hvmK}nZ
zIh^hK3g)2an-1n%*bVm~oE&d%ILGiDQU0wnVf|2%Nl+I|bD35P+dMc<EOnoL6ig%+
zAZt4Z0r>9p1PAlJ)~q2M8cVfkM9$YUmT5mFZ@2*0fM)&SN8a@}lApFM1bJ>sPOLAV
zO4a9ILFJwv)c>_6$q?j3LZx3-=!sOqu9HE=gR%88f#+nDwbo(|Z_WFOu=yoYu!Z@m
z6RfOK;I4}9rXBc_i$$M&VIns%+#Sr&@v?StQ=+R=@+C}uHluB<x}A*vU)n~?4>dD{
z84r<epU4AfHD%-DQKJKFhJSJ@eG9%lT5NJ?;Nj)fdW(vtl=+o46i4|`pn@e}mB!G~
z@c?K$ufw*OFAX}D`lLNm23be^65INol|aPnd@w+GK+*Rz*fb!V07dwo4L9$eEj@I}
zrgA~g&<S6719{oqh6yO#zgc`g1Mm@<K$h}hOuVBIQdzI}gXAz`lVu%Ay%zA~L`6lV
zs4on=sJ(qW%9=f1i6`BeaCYS{*m&85SvWip?C5vlxi~$(C7js#Bl%X@D%zI${auG7
zC<uP2HvYy*>0@_A#nrPeVhy*(Bf5DG<J_VS2jfnnSCN2xcnZaZ3Gx)F;-;oA`13ZC
z8?Sf1Ac+=S+R|u$X8XR<z7P?g@TVq!<w5OV+jak!h5HS*^rw5>Ra6r!`$B^wB`uCV
zQazaf@Hx(%<4}KiDV0CBl1ey2Ac?$J1^#dt^uG5)uu2>`2`6R(?E;*q<!N)PKi2Eo
zNwMfl<t4cY0DM?V@;1{^j>co<w8ObKK<dMVAIR^l(&o}fP$vlV*3-A}RYM=8wRMr;
zKk0KSS4a~J1TLQLul<ZKYu*Q-E-@y_{)_G`SSayU^hX784*H6mCVq2lF0D+52DM@8
zKV3ckU%g2^cPU)|fyhEx_mCNnV*(_`E|>&~yjOy!Q2zpieDaXVJkM_S<V^_guwAII
zFW5H(m!B-}T?{^uf5Ink{VD04)CzqD`68iPjEds#T4zv!+=+vsh+UR<>rD*}4k7t@
zm0~#LADQpG76bV~d`&T0(C@5R9|_1|`q3hW``&HI0F9GD#Th&Dj%TxQK>kgiZ4&i+
z8#sXu4l#JWD{hbbj*l<`gg!|Iot~Ur_tDVMaNk?W-!;qEpG>~Il6e0g_w7Ga2~ELb
z@c9~PS09et(cmGLw9=nvz+eyg4|MTu>*mei)-_Oh;(QF2_GG5P`wsUnk4{VP(&mXg
zME@2K7n`q`R$4_{JKKt*gvy1DcCN-I`CIsO>qFe^RLrDbB4a|L_^O8kJ5^6>%-TCD
zNfh+_Vvm<;$X{1l=FIY@)e{oLF_D62D{U+VduETq9M7dECQFxQv>T~as4)N>af)Oy
zlOK@zazHoEhlqLgx9L?i(dN$E${2flVM$;7|0Umzf4Lpxn_*(w)zwqP%bd=A!ERHj
zaG!(Hs5YvilugYW9+m>hYjc5WQ#*-U`}{oMY_&<c<6+F^c4^`@jkbiUsJ#B$6W+4+
zb(xtDam@1{zIUFXuTUkVIG?YY#MN;z%h~$e@82a`_h%7;^Xg38Gjj&Y0=Y8%bN+!n
zTd#)J?I3M*2hv7Y@!aKiq864HcXc!`FqaVjfC3Qyqhj9fxzzB92)$x~nJVssFFg9f
z#B*l8m0MFH4f0ZEGWb1eJ%H9uPU?-YPk50=EJvui*Qu%}sg~Zw+Ps_(8Ym~d<Np8f
z8W=<u7PSo3O#nkl>5f}_ii)9O9ETMMZADc~FFTz$U9=$=m6i2Hcw$a*GjVI%c&rE>
zK40sWtI<=!liodts%mBJQMIYj5w&eN$><iRx1?hJ40kPnyCW=ce7A>?k{}fr0tKRH
z?;}f!K$&_C01+|bakRrr@nnIY=hIl-LitSH!mFh2%dyYN)rjCWZ{~_$u0+&42!q`U
z_y&rQrs^RU4ZN2pe{zs7`3Zwo@!AimX{w>t$ERi-WLCT*s&-6%kB&hZkW%Qf#%`Ej
zJS`3g99syF&w$*n_zQFvr(+|ZkTGO~I^y}R^moVu9MYfWuX~DfwM8}+7mHYkA2l#L
zllF}^!FjB_**Fe;|KP6D@T}3zfzrKef8XToS0*NZy4;h~zlG%z3Jy)^iXKohwUnUj
zVOr6Be%sl1w`8#Lo#RHCcEQSWyH^Y4rx;oFWtG!O+-u`+P5CB`=t)vh;A8rG7z5@f
z1dGu+P`?)>>1umFII{RDhyjLY%}ibCwzq%oahFOk7li&=mSeP7OMdi=uQ{&}zFyYi
z7jT|D##jDJd~KoNh=juXEx3@hOQG}1+6Kl#1Qeqxw02y44y&bM2=68XkWaRP&z-zP
z<dhAS@Y5$@jw;_ViO?k^C|-tS{O3ggjYgJ0cjqxojpt|{BxAp6;;2R}c&vI$UY_u8
z9+;jBeM;Edq#Ae3y_|l3I(g3l(j>Ovy&_^PDFAKlpftTosWi^Axm(U>@xpZH;zzBS
zl906MNuCl=COl`|cGXjz)kD#8_4kgG!Ev#`u15<+y!Wb<5v36<R?1jKNvZsEt_8?)
z=03h6d;jLtzJb=gLQ}ogACdQVFKfTaXS%<v+WM(Y%M^yR6h1;ciu|q@6xeW~EQk=q
zHcfR<0Wr`sn162H+BGhGHaz$N?K=+_Htk=CUEe%jMh{jpRu3%1MDUv7J@mq9VBcwF
zSON@KnZJ;69%y*F$Wx|s`@8+VujFRSr+pNAhLW(>o7m@Z=FEM~QaAT&+(Dz<!I}4T
zS0%o%Wr)D(s@}h-$r2&~QPZ$8KVO17Ghi8E>Fl(ZkU29T=-q@rN4qMx1A0JoBU`m~
z8zKT<a0Vtyhtn<_nK&;B%)5*l?Hx^`@E~oihF+Yw@64dfAzDJ@qxN=iMYrlntV)d)
zb{mXb^3b^HfBjN=WNZx5dQ=!c1CM~8Z}^Sr-gV-K`4<YSk0Z0WSS(d@TZ@&z+&*%)
zF3ov+N`aE(U$%DYS6+851t{fG%Z7*T&(>#hT<N#FVN{6yUI2>B?<R&s{x_tQPtq}@
z>4ThRX8Wg`rhRFSrZ6Kv&Bv#$KLY>2l&3*}xMAHr4TKC;Qu&O_|9U01E%RT~FYS_B
zhD_dd2EnKh4Q4<%-hysE_DcYO&&gLloNBJoc4aM_DbUujzcb$QTAGyUQeGgNR%k|F
z{Cx%g1y(&U%GW2Cn&{p1CP);bDb<c-GR32cZPDQhJg2N5*6ISf2SkziPkVydTdJD`
z>o2UxJo$QLjj-P}>>~pau-)wayS-dPv!QfGwf%}c-Rn+$eMG!%xxuF+?e<y4n;$F6
zeBm5Ra4Ku;14zxtdtijI?TNj^O5k6_mpdu(3HXbpEEo9B1s~Zf-0FPf3TLd1N<zvX
z{>ZPn$6+xDD5f=>Duv#all`|A!1wPd7w86}=SX#G%vBE6|B~`csK1uxzyTibn|PA$
ztKC>KcMsiCeLAnpQJkvxS}<~&r|tZxUGRnNIg7;45~;6+tjimd+oF<#WvpC)%MQnQ
zl>eEU%^<qJn$UuUUTcxX=2fdNM{xuD({V=TV(nL{Gp9OokEr8FWq`c%!AH83YTTLN
zavJVpbbID^3k6Gn{nxbse3(8+m0d!M>U*gHA>fgmAb6*@7i0w9p)B4Y<j=;&#>;oR
z&f3r8$W0Gocjnu9MaPFSg8~8n*2^HX2i^<&=wU^G0EdNB$~18QXXkmxEcujwF2VTt
z{Ll#<r+;=`AAHwrytC?^)*)g3_Se8a_@dl;3Gb%L@;7ufULD}munEBYZ?2$i$w>bj
zK*Sg4j2mL_vM@7KR#K{QclW^H8OG3mksKZw@fx^|KMAo8bCNXum-o8~hhaqNh+jlY
z1Yc70XULFDNrhE?%XSb3|Ivp4{hQo7CE96+N-YUiMOTGlK(5+n5YvNP$2&@K@D%yU
z-JZ1=*@3I&9k3J1>VzO)hde1dajHpe@v&#9$k49%lWSFXJ1cPw_nve(GKESogF5UY
zWx$ZpL`}ObzU)X2yn_#)rO5hwOd0YQoG+?qAVPa_h~Ic$>%Uti4CT$H2p`SKoa?Q3
z|0Pkd0s&To7Q^^=fqOqPEKoT9&sgr^yDu@)z`*ks&vEwN#pts_K!Nfvp4Zgxqd9$)
zAPig2EAIAgs?-J`1dO`D7aI8wDiNys2*S^2k%~I+L_bswguZ(@qjKKitN&LL$%JV<
zzW$tDFpUyuq5^K~4Xru@E2K`ru-=V}LTv#$*FXuwtuh0}@71!S^O1mD$sj{k3W^a_
zFO?$Gd|{B=dN(6iaCp#KtJPQXL=+Ey3+f@w*B)G~u}oTt#kq2xos(B_QfaCnJvu&D
z8HS3rZ44A*$-}~b*B-V&=&RFNyr*FyDqS{vO|=G+C1B27PvY$$l895)G_y&o&WSy=
zZ(FKRY1o8ixy`iW)ph0KDJt!=p&w6+`|Mo0G8^7qcAgIv(>qV&KVgv~@G3lHO*DSo
zwj<*8f|>~dX;2yPSW5ZSyya!Qgv7*0TLa-f5h+vCq&rSFv$bWX=KWO5+m?;BtfHBH
znv**!G#U{}y$&4=gnxL@uj{Xm96NMpzM72peXSbcaKJD_*zl&KR49k5Rcxwua(Fl!
zRq^ms;EL(3w8<gKOxLjFvAT(oeBzSB`Ca(MR|pJJ+#5$n)iS069GATqu(xL%fD=2E
z$HT)jyS{#&!K=+$8opseIH^<=UtCOkyM_D~*X}r%blZzw!tSsPd3#sjm3b>n^*)^Y
z7c>7=^$(;@3|eBjpQEZR<}AK1x2n^rmQVL1;(KL<^hvW@?jy8qCtx4m%*Z*th>HjW
zisdS{9jsl<zP)a0xIBxda=t-+-<Udlj0pSyBjfjeSvP6^syT}CYd05{C?;XbxcM>8
zjhtIXThAjwfj8wMB)8k93GJf4=K$^pyiCr16vsfhWM-Yr=UxfNBZ><bFL49w`}LTL
zQSQ9t(s!PvZ|DEV+*^iKwRZ2Lq?8h(pdc+Rph!t9KpN?gZlqJXLs|(b1*E${x<QZ>
z$;G0Pjzz<w<4k<d``eTK`+qs-d^sQXb?s|kdrh7>=JSkkk9*u>JkJ3ifYH$#<8&!x
zb;y)7m)YdB+D84>;`j995+a%nOI|A@o64dn+$Uy3CCPP@p9$sE7iLXGc7qUKTBeJ?
zG;L;=u=OZaRXXP7axe20Q}9#CgHA0a{&PQqQsi=Y4V5cEW-+{7r2F;W!7ujIO&}4k
zvXDE${t}{H`o3nIpJIkgfcH`i#|vqq(mdvw@6s2^r)n3Dyv2iUpR4xI!Fe^3-=Dwq
z`Qsm~A>#r5_rk54-*%u#bf9B-j2jAPYuOMvs#O@g;Yxx>ZL3Y=;gDCW<M)^Zr?d`I
zwBE*M0XJooLZrP+?Yex(h0L1H3|C@YzfDTgb-V7s*H?-JFzvqh(}UIXRZsdO;M%fN
zge!lJG5fJ@iyy_Ux0Lkrzk^R$t{EXJuQ`(Q>8-3RRC&IAtFJcQ#lzhlG5En}<V(vw
zCyP#f2h`Dc#^bexr6p{@`-(ZzV#<B`)xw^?UIZK7EuK%`%+LS2)5Z(3Vc7?OaaEBo
zgVvWDYS&s{bkC4m1oh7CyU1KNss%6P-pKQ4$lJ`xpYRls^MSSvW`vNicpHi9>BD9F
zt(gi9+m;g@%`*Mw??BN8DC&_ba*Ld)u;_XFC+&G|rwtVY_kFV_`&_w^2pZ%R-oq-a
zDo!$R#mLwP7eIZn9~9l`ICB%tB!EIy>yW6uc8A|Mj%k>lP&pTesy62srD*}_o%h9}
z<zcA2r#2yde>|V0tZcFk7b0(`1G1~G3v#W#0P4r)_0a2fPo>cAW$wLXPMR~)KPkH+
z<Jt*knVG?YQO(d%e=;A~?q>>@n0XpNAZWGYt9)v73L-*)^pcQ4ABl1Az;~%#Oj$Xm
zzP^4sz@Np!(pHW7GwEBHg~+qmadzv;2Rc_ikPMxM>UE%3d~l2f&f&JeF!xy?#$Lpt
z{1(hfL&pXVg$18dekGIkJxN*Xs^00SdZW%y!<!l-oVK%801(vai%(8Vcxmb?nRMR1
za=Es(1vM2s7Q1XIY|gu35s%33K|;_plYW4_&n^lvgDX;bosbpEkFhZu?vX#pE`0AR
z(kR^Zn)kwOH=1_5BAJ+(r@v81{WN?5yUx_Gb%XOAt~Ok){peNNnjV=J44qHkF(v!Q
zGa{p5v*Aa48S|`;`f2x&(xy2Q0<BMXg~PjQHKSgTa9R{~h9|9A2%1<7XXTf~xK(-Y
zeN3(G!9I8V{fcdGzCF=K<578H4BY3^5;_)s<R$ifTl+TkDdXo4^Ig(-#$#N}+re^V
zoIDWIQ=|<UI<bc)LaZ~kTdqs%Pgk^@<^xOL_g5>~JSfiNvYpL%<v>)I>CS20iNeY4
zGWehmAI#WdrU@bQrQ?m2JszT&kMa?vq2m6bDhgG#S5@nRdZvva_Uw!h^~>>EHi&`K
zh;@J*;awh8c9_x*cDfZdfkLRhk5P>#eiCzsh4=#Nr>x<+bk}2Uj)Kh05$OA+Fq<k$
z;MTa^AI^=O>xQ>rl|D9*!DNltq~H;=2i?QPXmA#tj%qxe#G|QFEH8Rl&*F@W!}`B0
zfsT(uUd8z^k<+NrqM&zlA_1tAO<W-vv>#}um90iZ=)&e3f8ofbLi(Mg+2E<)%4%vP
z<gF%GjtL<Cr?i<WAg{56PJK#Db801=USFWXS8cmX!Po9YE@(gTtg5oQArzAj3QcxA
z@XUJX>?K?z*!^vSP-Xdb7z;6we_mT9j~3Gz!^f;Grdw2vI{WQnh>vjfVixB5Z#g)I
zfd3S&Z7z9_wq`Q=uGVRon8V?PdY9j;mziEv+6}#L>8B&DjQZ@{zE$G-%U?RF*&e~|
zbhe&*+DtWe+#a;hbnsiyqvl1XWtEXB4UPW81+5NKPyn$DK%s%$wS7k7+`bxA<uX8Y
zd39W~1}*iDBX|9Se2FMM-td^aPN=rk5)d7tU;EN>VcWDWOI)Wh*xo!Bj2?S_<=pa{
z_u#H<GS`50UqKU%Fw*1Kk+L8&p^52tSPB(I)*|3#v|HlU-$_0bx15N%4}Fw_dCVTL
zZcWw5lX64mgJuQ(1TBS|9c^l8*4p{e$voPbGpZsdf^2@}Zd&&8)_O*yDzb?D)5zfe
zSUk{%?R$s1@~`M=<&|AMA!6Sw_dNZ6WrXWx&{eE`TB~~;<YIQceJ`;^KY`13CO2%~
z%m?F0WUd_yJu%Tl^gATlzC*}pOUBycF~~h7J#@k)7#={V!@bUr;K70y<#-HyDcS(3
z^2O|9U?lsGE&}BD_@Imio#@dXgpvy-zN)o=A+o`nGU;;JXJrmjxZEc<m?agXqNWB9
znqWEh5>U#I)tu>82UG-u8&J!`(rfoXLGQz_>o)Iye8sJFW?T{P$(T^}YY_ux%Kl?c
z35FX&ORvO{u29h_ZbOz1T4t-|eee<j8<ho4G@@i|$=BA#sf@YjWpi-yKflAI#DC)F
z5A1$CuJ>`_A)E#m3~Dq=8!Ok6c?}H`0s=i(Ue!%G)zUr2(jG@#r&u_Bz0`-tn7>^@
zqCuY3t^)-fhZ6P8_(;rKra1eG<Sw0&f)IEVxl%XngCw@6%i_HNC%LBs>(kc5BjqfN
zWE{ZQ-vh^=3<6A1q#n-fUUVEBV$_4ct%|{U_XvFcuoX)&VGzE3q^aK#JWp2esIK)h
zT-wGVU<sv1Sps+Zdi1R>$RYazS-_{0=Z!z_h=TJ4p+Dn5auAVBYkI5rU;vQb?MUUM
zVDB4|jD);2uJN7@jOHJS`y#R5#lMwp{r~Zil<dE*gf_R~aAmG3m|na>o+vFX?Ij${
zUL*M};A1)>m4|$`Z_8}t&lz@=ArjTzR{(&hyT=H2@SExC1>c-l@J^vb=k<L$q5*})
zTOOCl22U5>4}Z+3GZUJHLsd!5hZd{~G8GClem9a~aiM$6<8TVCO!}H)Slw!qG$3HH
z?=NG={VvM<wrEhmr%4$Aj!J53rA1Oiw~8oedN-8cnX`I-XVLm%r9t~*n5x_eUh}mz
z5Ta!hWX52wp4aDshseeov3u?(L$U?=to@t=*v;IuAg<&OItza75pZD=`v#opj4$E(
zDro0?*T98wZklNhc?RY&h_QrziN3P%&khUw%Qb2$hm)&jBH(HpbAsn?O&80n?n5%2
ziF(WNkY%OdYbkgkKhCW(oi3#Ua))?bL22ReBxj^~TSm-Ze16IIS~}OdqtH$;hcuw(
z8qxM_f0VZrgyn8BE5CJApgPE6wZxnFX6|Z5jnm)<8U=*<v&cuOhQe0wOom6GgFZls
zA3}l;9~qiT8u~iKIa#-erQ-zs;`IBK>A9iSiDb4C>sRB{dG_(Ze^O#3l%JG<_QP<V
zCZV_1n<8%Vu)~7o)jWsJLZa^S7gP+~wGzQOuWkl4)I|MdyrswBbAZBj^UF)fGdaLT
zxfW4)UMCflmO6-Ruka>cFA&4be;P4kAds;dnb1LoNAjaW$0h;bP}|X101?aA94AY)
zwWPU=2swde<GJZx-elY9lK{xYd>@DVVICFE0GOP|XJGy7k|>I;1vDFt6Un_#yqoq_
zOGo(TPMu3llZW{D8V;eQmo<8kof$u~rOp5OdiX;60AxqQC*3RHP8eGXt=d>$-$QTM
zc$4bVUsiC=m!#*@9)5Op?cKHW=7=u%89z987D}r{1L$|{8ay#=!on9u8<lP&nwKYu
zscQj*@n^dRRTPD4r9&Rqdo#S}-=?1ioF)u>{1`tBikiNy={J-S*9NpQ-$-Y59|KY1
z(jsr`J|fnveVU_|dIB3bL0BFA@uV2wScAUY;ybj^02MHi{QR*$xgzz{D!j0f2_Gw(
z-DJB6V}|7PhG7fNr&-q?O{T(c5`zQcXUbYy!GfI@GI!YO?s56Yld|?*CJ7jSoo$n-
z2m*ijHvC6>NcTSmJq#W1s$K^IY#b4b_MqU@Y1l(%r-^r8EPA42Vr6nvw3L_Qe$2Q1
zyc_t#+e1vOE=QK4P>OH^0B9?Tb^<K<Xd($pAcybkOC0hkOJoeHKC1S`vTvoT{&3i5
z7$|=Ml5_4UHwTA`+4JVUi?a=A<k{-)-!|9N9+LEj#_TXguaT9l$qLIDLGiFc?@`z6
zVGRv>m)qDcr8VSEl<Tt$`kF1(BG0g*b=6<@N-YU-C%;j^F3;{1Ywx)LJ=YGgl7}ZI
zszzO7@ZWsZ`9(#JQQD0h+c09bZ<%NHBx0EaTN5K$ze@u6V1Fi~g>8**v4Yr4f3=FD
zlPns7;fe^=$#Sm`kjsRDjgNXK$5)D_MdF#|<x*VSAs3Bnb<`7UYD5Z5Ow2kCMTy>d
zfG*z2$>sEOrIn9{MglMvM&7-PZ?=R{c{M+~>WzU*2|-=imD1j=;#&~mqjC~_9Msc!
zN1BqJxZ<fiwF#>+Xg~*t`EbX4?_^6$Ny*!zN3}A^ygy6DspqwW9W8^!P##NmSc1GN
zps-9klJ;s&X)l?5-R+?9taUtEIy;5;Ub0Zi_dgFoZUXr}@b{w1a7dDqv0T;_XS|LD
z>Y1+Mo_r`J>EUc7Su;#B8p<O{N_1*FU0u&+6KL=`CUcq2pV~R8p!-CzYN}L20*sa&
zJG&$!o58L_+CNP9IG_7{ORUHc)f$41Ul=QyGfcv15`E=<JhN@zMWDBz6-tPK9u-cS
zI_TrIT#(!3^Q$(2HR|bklDohb5*K(E2??W%|78{_qKw(Mg8Gv4!ou2Uw8#pg<V-od
zCPgnVcaHOlJa@~-)~DlNPKRg!kb9dqy$iY+v?2QxlOmY+JDB;4LKElk9S_vPlxiR-
z*PL>2@Vpyn0Q58*=5X2@mgq^$Q4!ufLM)$oJ=JN6?97paj%Inq6nfGhr~mHZ0+|_~
zp%K8>Q5UpY-8|EV{Z)4YLvzXa^*;drtj)G3$83S4qJpd6Di<2mo~dO=2%?WUBf=MZ
z{Gxf=K6<qh^uImP^Aoy*@6&_I^vX)5(C<x8o3Q8Q7_#uYKQ9_V(t;Zb1dYr0u+AdV
zbF<s{<%gwxPD+T!5*~>o+HLKPsGmOq`7tgav$b3;x!f*Ox&(@PBVk?S2lq;gY`Z6`
z;4?>g&YR<fy}jx-D+lv(-QKs}u=X!c*ve(tTRZf<x7X0Z0+<{)j9T`Z<fTnweM1a(
zFsfGQ%e2NuuvbSWynzfTn#x6H92vu|qi-*Vr;_$#NN`CQnOkB^!G8d=NJu|PfBEM#
z<MFJ3EgK@lg<<kA7KPir6p*)OAopv<h~i&Pr!iQrIRGiYfrv#Tgb}t-rxyF*pJ?Ql
zK@1Scmn=&tpa{x94sgJG)6CK!?SRk_4!{9l5xqwSeS!y(0MqQc{g4*SG_Tz-%|1AF
zNT9WcNdROq|8ZC}$g?XP0(^ExOQ1H`xdLlMVodQ6lLEhzJFuLgx!0_qijCjGjShXF
zDI*KKoF-s7YqnIx|7gg3h4yZ=AFH~GO5o+_QYx)6cN?F_Iz>jCYDC%90%&gFXl7tv
z#Elem<T3e~0k$ft8Iqq<AXBcc;#K{g<KsKr<9NUay2qFYVp2(Dc7Y2V4@7U|r50>Q
zo3n@0to;1qPF2g&xi3cp__?KKL8A9odt#va(4+R&(TUz^n9<bya80q-Slf5^3!kS$
z0YnW!z=U;rY&H8`7Dy2aGx)a?-@l9Gdqe?xF(i}$-L$NF=U&BXFZUw~lby;da)eVH
z;B`N0F%Qv1@}~j(W5)KjO<=nL?1AOU!7<|9Lu`%f)B9dK9&@lR$dO`yLW3wk2};bx
zTAoBMVuB2W&m)e4o{x+bSQJmQOb*<htj2ghG_St?OhZS>%`L$v6+QaH%<B}Wn=2vM
zTu*%b{O`8&mBrJ<$ekC;P<TSl-ay9f`UJ>?mwSd%Q(VBFs`UjSgXF#Lw%_F2)YH2S
z7<>Wh2ZewlA<<Z%V0L!)gKSYyvz(>>yDqJ+gNMu%#~4m7$HNyEW~|kqO@#l*?+02G
z73-Y8B=u17%ilb6TU(ESX-~EQGZ&wT=UA(t6osAKPW(v#v`;9XOHw{Z?vQ>*wS*{b
z5%Q@&uuXhv8C^R6NM%yw?dHkYm|Rt*6C(*0nIe$5%C#|p-|<u0O_f^5MP9!2ezFI2
zRApV4-a)qV{S1Ffr=gcr(c`xrP|v%YYWtO_6SqE>A3mlwQV(}#SXU;iXKnd+?N-V9
zgx|{RMLUZGN9{X_$xZ;v)P?ps`t>a<0bmxJ^6f|av}`D``_!2A_N)B*Gb!&`eA0rN
z8t!a57_2=$BuOk;6HmSk%xHv(Qz|r77atj&9j@aJyjL6*V7GWxCUR3GB_vfdKacU?
za5&?EzWq{%3peLh8Z($QsdM>P2@?&Qo$xGAQFXG}x@jcD{PIjSQP3wPiAsRG!R<da
zxzW`z<@`#(Ddq#@0^ER`f2XGT^d1|J^_eFC7p!N8)9UNl-?2~p=~1Ev?=ROxAp;c2
zCLBt6O(e#V4bDijy^KKbZ9GepcLyGKs}2tj&HCc4Z^*L49(mn)+)#@)e=%0zE}Z_#
z-nbskRQ%ic=DUz^qJG>Vcd~RrM&tB($KsyweCB}DZrQ{TP@M2#WnqD4h~WU4|Cv27
zwfS;eAXDc=Js%w>H?OK#f(l-KTZ7{VFbi^P@r2POFY8oR$yqdOY?|=M1q86JtsFc$
z4DEqNhQh|iB8q_@AuMm-yzhL>HoO6KS=;>5EDVPg4{pACQ|aImBfUt#n{)gT3|fFt
z^vRX*8BN*bJyJPtc*>NP3q<zaMF+b3X<e@6<Y7MVX;zHmMt-i@kAS_aS{b^<)jL>q
z$8*Ou=T2h@re?!g6E>o=QInGm>tC-pWWj;|hI2rRx>(k-mQ<^;G=xsUxil=F!)0u|
zUcDFDt0%q$?l+#!<8Gcuu<8eB=N^12WhtjT_{pZ5&0Km>NyMsILe@ZH9tLIW1S1lE
zdWAtG!zcDIE2ahBl;b*|=}P}sRL90%ywAdbds~vpW-P2+l>jZ{@nJfi&O&5QaMbyZ
zPb+s%L4MLgqSa66#6(PzfPf2~H|Wgz3i+a84`X@#K^!0D=&(qZ0<rOGLf6F!QP7T#
zg+qAnp0!N?vw6>Oj3WT2H-LMS5w<l*hJA;RM>tGp*{iBHRW!`MK`3<t!IcHHn>HO|
zo_I5kB2oF?a7XAmUeg{o_vz||T~qd+5{ve8m~91}##qtETd38a5&r}!+UdXpAXc-Z
z>lDk5cBWQ?SGMpdZCqzV2_48r!^g#k{>_J?L3|%26^^gzJ=0e|DbqK6<3c@eBJE@G
zl%){;UxMtLLa(|)i1?4@MOU70%t811_*A^hys0^%4|VNML;LU|0^$k@q-Z^=O#1J%
z4E*R(*ukR{$Of?~e*%GeJ0Sr{c_13;OhLXu5^*XZ%1F{53=dd#KCHbW?@?jZ9(R96
zbd$YWKn7PLy`ao`^Qi}dN1GFcWK*!hr~KkgHvS@-`pfUY)gemPo74&zUWr5Df%yJK
zCoRfS&S{m*XYI>lKARwMnA&R4vXgm6Q|22juF}18+r~Y*{zT4^0o429;+NIHmAxZ^
zY~KXMrd&9m<4LwW1(!E5fs6wq3Sdb92G~MiFq6CGG`#*~;iD5w$7hV<+Ofg=FlMg6
z;F|0B(Osv>byN63>h-7JKBsQp5?o1$OCc_+@jQ924MH2OY&g#F;(1_zcJ03n3*>b#
z?j-e3$H!V)sA_1W!<x1^-G4H(4bopDu&pO6HO`N=RCyN@4G?i=y|F!-)m8}`aJY7B
z_Yutd3D020fcN&tD}Ef}{-Jp5b5)WGtb1VIU5GO8#yW1Fl(_BFSn^e*U%;|%x}vT=
z&k62MM3kGT5$TeUkRSk+RdC5UbfEGu0O;;mWR3eGj!A*qcGK7R-;g7O^j8al;aJ#H
z_HM5EvSh?9QhG+4yqyIQJ|7*lTwe-%?JKKoG<)pq&l`Qfp~$xX(Piho3Cd$BF;Qrt
zRm$Rx&}alIRvqpNMk1m6`OnhP_1xr*L=6_;DnCMiO~_45wBTlXD+=^XZEcZl50z9|
z!hpipY>BPc0qLyuP{#7)W}?o|3@SC|AG;00C+v!MKwdcr2*^m~^G?>=k<~}!h-}h3
zaeMDpo0S|)2JEV+?bY~(3$5k12e*9cv#-C_D=Kq3%OpE*+3fe17x9Hc3vR32{_5^N
z{WM``V-ByETYJ}Ru9`ug50rAU-SHly^pTF4|L9O;jqT88kgER^ZO8c(JxS!niA&sl
zkf*>`xM3|0b{`UN2Xm%})shf+R3{R^&1?v<SI$4Gs{@)D8{?v))S^KX{@Y5B1;QH_
zjvDIuX;(N?o{{+Z{zuNCUbf(%a1q!+*WN8$+(ry&t6n|9qgu3Mw*uKbtrmSvQgQk?
zau`&HQ&71<t@Sz&h(I8E;YNi4$m9?I`^AB8{~!(kqj@&OfnaQ03t;1)Ue^o)|Fbuc
zP{e2f$XhTaW&nn~HUQ+cpA(dh1nnZl8x_Wev!XialZ9yk!219F5`~`TWwS7TK0DhS
zqCZ~Jtqq=9xl#?CN|>{4xGm@AK|>)HdZun%;k6-`_3&emsv?0h!-M_wOtvIMdR8uX
z_EAKZVR_U-d8^KA`)N1nP|&)8nm+>23R^kSM;DYlgZ^44d=L=;orzQEM31zh%e3Pu
zx=$>=u=iE^&EkgH&S;5%>}be?KOfsAKs#aA3Jrx&sAwg#DN_w+Mb5Ff`0Vgx5szXB
z@rnGUjzCYPv^F6N&hy(vC~ZG~j416GX2!VR7Ck>0HLErVN)ahOo-Mjp`v)8josMyF
zarJft?`12#OJ^%hR+yHK6=@U#SQ8e`JzX+nR1oL9GoYDEa2snB{Y~@yFUM@=+x>$P
zi+QERqwy@3h}mP^j7aap_Cx`XYCQ6Rr!@|%tU4DF$7{15+kmW^-mI&HPK@U6CPKz!
zQ{<miCM^mDy%4#4_p{799iPZr_y_@FelamsyRfEtxxYEG>vP)Z=xAPb^&|ywG4w@<
zhQvN3;#PI;2PP0<jM=?_vM&d4Am5gHs|cP?usQDiv^~Hc8|@Wu1{k}cdM8rtm_h*?
zk5qU7`B0^~GN=85C^5gqw7Vog{k8<pQUso&?B#<t@RM+%HWbN8^x#(&bml+9Fr1*O
zdfu8Rt`~c%XBVq2S#uXF^|?9&jp+0ny#t=w6|29F4*bWFrC{7oMd=T7HOi4eCxjB~
zK^C4Qd)!bZqfw=O`=Vz3rsL%v9=ACFbV_L4G{<5$wi|Ya-srhkyJ&tt%*tIswom>A
zu##2p4ko?Z0cWGL>Uf$Mr4ZsC1!z)02pM1KuWZ7vfQfklV)eCaRq&XR0>TayD{&~M
zss+~DB{(4BIK;mO7YnOTPlc@Bzb^cf#}H{gd5BKJSs-3qOg355qB>;O9r)mf1X7FM
z11!+8g>RZ=tn#K4H?Y+{mW%hvd484?K*S28pKTvE@4#03lMA}kAnCls9G)k3TGq8C
zkmIYMPOh!lsfFLl8zv%n=aYCVNRK<Zu|Wsk@4*d$h@~YPD2BCeZR?f^&_g>YqBijd
z2vV+%zUxz3we}Z!@>a8p?ZN#!pY`^2_%nve@W`c-d<U(cdM*Xtis9ooOI#?=0~$hI
z<3{B8`UL?ZY~D`&c*Y}DuSPSXe)2tcuEe;kt<CjHqS}OWp>X-1p^-Pa2l_r$3}m2X
z$rC>sLR$F#0lrG`w*5+6FS;j&{?rtH{@G4s`)cc|<s1P_W7(SfuGSRVB+php#cn@r
zrK%ba5OgC0zBcW9nmqps&^Vs}$ts;n-HH+!FVL`DSI2MB6k%;?Wi}|=a{ZC1fX-qo
zvFqaKxM}CUYyz(s0+BfiN0ENhhdgs!gW)uwx3hb`+OJoTv*PUJLa!6^jE?&5ky`jL
zs3!G?>8UtL`qS9+4#IdAB^{k&xPD5KV_9K?))q$fSu!B<iK}1B;0AIBHzpPqGL?>%
z6;$`bp)N<nwWn6i?E9FN-&z|aW=?s`Lxo@Aq_4%gDOulwh!CKYxf>(u!{sZ$HF<mE
z!F_G|nw!oq4`f>|lXcG%VNaaZXB0CxoUQ=IZ%J8h*rgdr-VfI0Ew-m=o3Y-O!byMF
zHKu&N1yhx7x{q|JHqN}pqbb@7PFs;@?7NbAcN!fIf@^=TNO5v<7S`0L?YU|%c7`L8
zq1GN=I>`|GpVz7xeCgLGkpq@j{)CmLJAPNk`?vT|0IQcF-N#*p@IL6R>ft@#tl%&?
zT=Px`ILCDi!IRHd`!El$Zp=Vx_eE0OVm$4ANdH$zlVGg2^8|*|IhoH;JKjv8`Aed;
zR=<cVg%KZi@G0{ZqC~?c5@MeKl;Ia^K*QE%6*OerOx-kPZy^^MD3@SgE~vG@P<>i-
z7Q4cgnc{{!LJ1vvFs_DxPH-ec8pDZ>z}wE59|-MHR&?BL`hcaHU!IlBG@Q40Ezr_4
z&hviJdR{*7(Wl+=xr@R_9hhmI3Aq^fg0M`v%9!?~ZaA*2C8%H;9f{eP>jGyh_?Qu`
zZ7=f0zYEn(hGrEub+er&;%Qy?+j_&f*)-h0kJ*lAU*0R8oEy&pIwPhVDeAE9UN06D
zR@u&Zi)AYM6d^DYYW_UUjyYcs*cJo#{Rut4L2yf264tYos>Q|Dy0nWHB1LphKTED1
zP3;^`9c@{@6%+e~5oVXy0rjoTQT2Ljc^`TuKnk5mz@c%rb8@PZ)2<$DVT+|$g_Z81
z{^MeRE{CVjGmtw5hUR@@*E&gkvX73OZ9fZ)Q)K1WX%xb2-cK#KyR${yfA_Mws<$N<
z5Nil(ZAk$Y`giXF^=f)>FC|VmZ+ATW<!se?$|fTut%|tKoc)acL`#`MhvV&%3`Md+
znm_axx?gAkGTO@u=r_lPbXU@(_aeI{I%j1Aw@)yTtpX>wuciluUbg7qKC>ERJGFhj
z%!iz_KrZ)LDqPp)t_Er}yll2uSx%s@KO==NxT(A;Q-^!*$k*ecl3sK8mo5EUu}TQY
zf03lJ*_(S}8K)g~yqb@GpoH{?=&Gt_SN!h1*TUzn5)L%5N5<JIJ#>*RwyN8O5}R#~
zzmU##ICt5ZES4F-g@z|?TB=_N-|o$5y?O8pWKzwVB13;bv5i;heR(I+uzh!Of2^kY
zr{K=SR91cr(CVjAFqz06PO6pJp9CZ4U+KSkwZxk{^&aS;JXxJg#HQ70y=?>ioAOcl
zpj}$_n+j9eeQK`Fl0ZCCC76Zq%0N<~;Kh98hS^jx3#;AcY?TzB3x9fl(pc@{xg(sy
zW@Ng~Ay$S?CpD@p#nmtdg2<Pz^`hOr^cwX=JMa+C2RWKulzCV4ep4KSq1D$C)>{lS
z?tQk7SEs~gK*DkPGJPQ7r53U7iDq0th6R5VaOb!KB67#8rWsLedn$!pydH-hpOT{M
zwO(*N`T_4s2PkG8I0P+OiecN!deVVhJSKm|U+|I}>3aTa$L+U=b!<V&cC5+3lhS)|
zH6|rqF;dt}CNNaud=kHq0BDLSiKofFJU>2%0lw%UQ(xnx%xjEo$*1KS6%e!Gnay4h
zj*d>RM980?il#Uqzd{E8EkJM%w4HY>5&+RK1N~sNz+gwb*y+IM86czUjI2rfZ28zE
zdBoD9Kxg%^_e$U392mWTnA!2tqqthdtJ^JCVPQ!wdFe4M|JGGImWT1yqY3@|M}3#x
z*z{*>YTXAkEZ@h9b>_LRPr3w$ZaTaH9TPwi<iDQRezd;6rK)9F__kO#6KD;^I15ke
zw%cx`wJ_g$Pe?*HU9QNjd={d%vcwj6i)-gWxsfR{rv^q<AL+7u<L-g_Te)aiz5fw1
zd%1mV_WPR#FdYLBW(;r7csK#-LQCi(-sDuJ*<L81S6B4NB~>isSV*)Xfbic1OBFH8
zgxXL;CQc@P5i-gqDijV6e}xlAC#Bgj)buE?oX}|ibZ>*35PQjl>bQ$8#fEw{DB9h0
zuK|repE`JRa!0tHl){e{b>`0<?iNAIq71tnosViYBgw^RXdwP}W!q1(K?e`$#stvw
zok@+|vND7IicJbjZRqNm%TkTjquaZEfiMKEy!*6{zewIKHIkxE3An(a{8uap5+S1n
z5vP%j?213Rr7P@`^hJ9AiSpGw@MpTqCWQ2OHiQPW(S`mzx{-?zJk13y56N#H$cx%Z
z?a{!$enJEENWSo2;s9Y%%IA$p$i}WT5ugT3BtN64LP)Q~qrTk%yVW3|uyNP6g8=+%
zyH9{Dr3*891cV=bTX%tsZa$pnRxpkD3}{sz3BL!oIpG7ill_9K>o~-!dgrUB5QEBl
zncwYFx8CmLreF53ZkhlqSVi@*nv_)N*|eYpDb=(3agUelpX%#9B2(|1-YQQS-Lwo)
z6Z5<_Am%?~?=}7ok*t*!VT+dunlR<0O!$QJLL$j9=t>k!d;7N9<KGkz>Ng^XT~%c7
z$=AQ()&9;?Ul`uenGcLrUat&H$n;>7041)zt=*WwB#lw1irH#Jxcl5W8}uE;S(;(_
z*TN>r!lz4T9Teu|_Ea=UJq)^<1%QHgordDHcC5%-)TmQd&DPf4`0(TbDD%YUVY*=)
zYYQ*S-t8~-@a}cIlTiJWj+^q_yV1hJV!8w(Ms0x7tsrRyN_HrL0YZ<1V7zHl(fuZu
zG&RnLf;arEGWBP>)t)6eyDUxyiEI1DTk$a^Q%KlC=$Y$y^qO2=ag&Zc42^k9{5$V(
zy5qUFKO-}<GS8Ev)pE-HRvN8ocock84rPx4936l$0DrlY3vOrlQyZGMKNktY$&^<=
zi0Y-n`M0m!a(=|dcOI_MSOO^%@p{ADWey-L<zENN`8vua%LREUSz+I6-Q68HX^;<d
zBtiSB5fHyBp&G_LFyO|JRC7@R$lv$et%>pzgQ~$FDc+8J9$I@bGUE`8Lurecr&;7p
z*J9~TcDb6c{?hrW;O!gBFFv<5h?prt!YCmx#_z6W1M?}WP3lWed7gyJa*V?*I65Os
zVSo%~{kzW@@s0AhIX^BiG7d;pAF6r&YHFJ0UhJ)1(V^;`7kENH1!fZRfGjTL9U2Z*
za&lAiZ2N}b9oDzRhFw`o8qnHPft2yeshz8n>!!w*9SLAaVe`J8-tiPM>$e=BC%9Iz
z412iLTYtz6L}nqO1QRfv*uuy5_&3Rq_;=@P>d*|QIwSH`3tU>Z>)~vP5HC$1i34~^
zgK*2qseI*4=U`QC4>z3mm(%y#LYNx~&3hiy!ppTa8H*u*bIrv>U9aPY>q0;*|AYbp
z3@`xtzcTPV|1>3XdZZ^NYU;>_hG#g{R+Qh8_4-rdck4~C=vTTNT1*T-c3+x52h#it
z-`UgOF0O1-u+h=1H-aZ@-c6(Z0nMhiNlCH-3qPdrB^gm~`5U<#eUt^n%CYFwfgTXy
z;MGP@5+Y84Zh`%Mc5cbHsj0QQmU=Ck%xV`pee(P|mauIVC)LIljj?&w*nbzWThXH&
zc?<203ZNq+i%wT(FgVA%USn?C5Yhrzc8r$o<%g29VPb$ZjH$9f#1!PSD90B>{_u%m
z0LM@XN}#dwerSNInp(cK77RW$ca@_1ek`GRtUYLYrqb=B?)fAv&-+kiYZ|&{A(k=f
z`J_#D1s`-u{i*TukPII_&XiC!@89S;tgdN!v*Ql?Im@`@{)PTNmX6!<>V><kQ+6Sh
z)G5Jte-x=#V1K6X`nT8HZ>`?iOEBYeh~`v%oZL1HXhp8FYxCr;)9>xyB7oxgoESA-
zU+zGs-QH9=xKu0*J(n#FYH0z72%$7I6h+kNq%Ho%BwdY@lZgQzAT?)CIGk@c;j7tw
zVR6Xe<mlLtcAwf4ZNpO30JI7oc7VshSKCWh;msV%EUa7)h1T!>;NA$gbxmgTdPd~%
zGTUXnPwzBQkAkmS*Lo|Irhz>I#GfPiwPFDR=5E?3nH>4J<!tiRx$8@1;EeZ$yDwK?
z%;VLpe`z_%Ct`yro|9@$Tdfjl+$O&s-3YIW<|H!ci`SLA%-VyxoO)=#n4j*y`&~YO
z9$t2|HCK9lvG3yn115_l>oj3cB;9@h!(ZjrXrUxe*0AfZMIFyQEw9~fdHCM0NaR|%
z#P!PS9`lk#w-~<P{m#0vzaD^OoXBW0KuP)Oq6MdgWp9<G%ZC<Hhn3%Z17nN=ankF}
z=U4GscyYA`uF70^RJY`Q56W*2eqg9Ed*<1h1t+)laet{rf#n%vQWD-;WX;?bY-+0E
zL3rSF)`!amw_CwnjNv9C!Or>Pdh;?Ge^vA+ad-7wrFdAA0+TzcESBdu9adgDIXW|M
z($N^-isK7Jn7?chTvMm5v_J(IdLMQXRuJjO4%TC&xuV~>9uv%f&5PH+pU>FQZzxdb
zhpdfw06h!U0Xp<fq{ttyC_cEVgC3j)81RvhHcb&Sa!1fi6>U=g*{U%UvCwPUU+&w&
z;6$zUKnO5b*1)@P&yhkij*V9b@a(<mjsPO1O^RDI9)q`^WIAh`rmk2fRh5h5DYcb)
zi!h$xMOi5_fO|EoEW+nfBoCPuEyXaY0_)X0SwXI%OZukpF5PygrplX4z=rNn5fL|8
z;W08&Vt&z~!J2k>(u18^9di#9Dkv2kQPA&E<}A~b$(X7rtLAKMV9znmR3nb)puprc
z$qwEE;$&v@Tfl${4SNiYS&xVmy>I1YZCz?5QBz~wj*}+AaSVY6OwdRM^FV)2|LPG#
z#vU*)22IM+zo*e#*4KeK)O+z$G#hDyJ>4aWA13ALu=)t|EsMBbVLxzuG`q^itaeN9
zCISGqASHuax`-#l05-EXSO%*vD4)jy*o@)fEyxPASyK8wA$}_dl9C{y{QvNgAy2+k
zK!RhA>W)n+ys(3%AH0ve`ne@(`rX@U@aPKF_0|CqCI-698SOP_;(7}zIST40v3E>_
zvr0?lX>D@FJ}dBK&CbRqYVn?<hE4T@dQJhZpBg^|$q<=lC}wym6cHx++TCz*qkTUv
zpv!Fjf^iaN*V;l)f^{DCew@4P76?N5PuF&u6Xw{rg5qL{gB7{aAcQ5EjP!^p>(JEP
znL8ljg+jdpJX<B7-mkyj!CSA_(}C};{L<L8e0@I@Am=fuo<7%O#0IUWb^gXLJ@c$2
zmjo`~>d~xm4rG3pU(&Fxne4Xmk<;Xtx>)81W;3AQuj(EA?d6&TY|W?SsvaQCGA{2~
z_tpY^52jgZQX9LSo1nvr<oDr5x<0m9kXfO2up%>f=EUqYHo*ovZg!{w1_=o+_4k-m
zlqkE~43?zK>H=yM!9fYZ{Q=F!rKbXQMlG+mJ#RBbR(^Jkl`9p242Dc`L!&*J08Q@1
zRQxSt%H}j~WgvA`ytVhlL@hx^yuoEh(ZL}my62`H(d$J_Pu9X-t(<zjiuIOG{qjl@
zhwZF3Cs#G|CU1TPI0Fy@CNdn6dhnAgin-;-NWs4dHfREad+g`iEnfYYY_Lte+UgxJ
z-x!SnsI+Ivh-kI7oAv}!<U$zYIHYdqyAlvfpbc{fT(+sv(F{ezL+_K>KT68%pg4Sk
z*2^a&_ZBy*ETA+%hfc*|#)$l}%a25LCnqO(D(iXP4IX$9w&d<)<!)Fpdwq4hK{|Jm
zBgpy$_k0z&I&0%$sb~1n_C&^HV!@T$>)K+lcfkibkI?Xw8fb_<x_>78!lo)K>(ufa
z08d3pHuZA!DUS8xktL%`j1HXU`>y>-Eh?!e9oNu$C;0ifKhRqlP9Zqk0_%VDS}@96
z3{3m|eQuOOt*8d9t35tU8a}nBg0X*e#MLr$=EbqOqoC$eN<zXnO;Bf~si}GCeQrQD
zaX>bb$}4hh1AdOLQ0t8jnEkPumVMb{Re<9KCd6GndujUnu(UWRE2mm!W@c=iKVw@o
zat`9K^6AP5=mo3<3Mef$RZLu#|7(UHC7=xdC0j>=tHotAo%K5c_j-~yolWDry4v+X
z&Ea?^o>|+4d01_o5D{BqKG_ua1{}a`gmj;dlc8Jpv}$aChS<3REJD-#s-_slvPSA#
zIXW;g5=D}OWUM)eNHDnT(x*WSPvD}PG9Axr_rBM1OLGp!m3Jx8@6?49=cwaPNJz|I
zr9_2Qc81_{yF^W^0z3O%8Wqf>SnxAa??qTw1X=b9s!qu(qI>0cgujDM-+xT9Dbk=l
z!c@3dwk&u(r{?rW=;O}7XSv*mp`wnb%M?)H(z>i*inHsj88=Ur<q7UxJ$B0@0V*si
zEaYe;gDz~Q1*O9H0;q*nv5s~_?Vv@m%7#*EO?6eq7BiyUrmDJh#<T6nUf8<W>j8nv
z5fT=aG5vXSzj5?x{q}r-ue#))gvV<;o{)r>4%M$#Nw2yi&zrYBSZprNWL@_|<3b`M
zNg=@H>sJvNK4-p_Uw?_IIthG>NaGKy^J!M_MR|~hgw7y@j1By&1U>#}!eB$a07D`d
zauQcbS8`wc;uXa#^L%@dA9AV&oMv-U)lj^i<dxD`!%lN>AddXc+QZQI-%w>)lI>nu
zE1|x3#Ou%ezn}J>2mAfOM6;%I^wQ3C{Appf(Yhq%rrxv>8S?2<=jN-5`S^t2RZgN3
zb<%Qj{!?2dtj~Sm#n+t~V!3@2ijvZDqFy4wn=a2i(N^d1TH?TK&Ag9k(L$TV^5oJB
zb!~04ZF3@5f8sme?&_rz841LbU8NL}ncCNT^rxueHwPY%$C0DTrgiLK#{36aip;a(
z1O1y9{_ne^Nl}_1i{f-n@ts9+LI}7RndTT~%Dj)Sy(5`RPQIlN65%KBO(!C>x#gnc
zqpK|E;#|z%UwC|d;Xpk(d7hQs@$CmO_<0JH9q9h|g*cucO7%&&YknKG3+Tgd;461W
ze5~F7m?{x4Wv$7<;R+N5rS086Vo^=r&*<|<&oxx*nc_MBc2NHA;LfkFDdE56BG*eE
zE{rt_fFFJ_g@cxT$5^3WMof(Nol2ouY`oRa9iM9qpa_t?@+G|;ZgB!kXd`BA+Qb>J
zHOB#pT@N}sJEiT<e6i>mdwO^*_Y%e%>mKbCpVMPw=X}+?k0J5ntmYa+7U`cq<2Oiz
z*~_5b+(xw|Bl+{lnqmP6DV<)&GuE$zgYbge{j8^|ld!N@>Juu67k;V^(C~Tq=VJ|R
zktpFlAr7AoB^(?aXPx>moM$w{1pBX<|607Y1t0T75B}jkL@C-(<^<_SS`3cG*IieB
zI!_ffnEueh$6qYO{a=HD+l-73I;(izwYlZx<#BXv$g%LJLcB;)+*UMBM`>3l=N%{e
z-8|F(XZPOxmDkFYe~?8#4mg$I>0Av&l0OezKAT;4>>X?nIoXS(5VbrYfBELDdO><~
zTs7Q$WHl|_hL}}-{}l%pR|0;<Ou3^*<=S00vfyYPt*oTCS#?1ZZU6ePOK2$MLX~kD
z%0V;GcfU6$Op1#s>a8X#v6$7ap48O^GL+^?Sbfq88zuuLLs-7<j<6=(JsfG_>I&-X
z)~L_Q&R$5gWaHYgzHj4LtIK-JGD2q9XdJ$4R%E#5mw9tA6An6=Zgxv%4$s{-@dGy@
z@y73OSc07^hEo|5;F&gh9}mZ+JCj{z@wRfZXR00ZX7lnGmR4k*udbJ$JA|J8`q#oM
z(NIW)(y%%>6z-Cs7c$2`6asYaznoKTF?CCAJ1)o#*47b}4xav-J3?Ao4X@--gIVYA
zi#twS4>hjh{MSSLT`#^n3i3V5Nj{4~`eLFNisBh{b<m<JT9Ge->|MdEi!YTw$3D8Z
z)0%d=zC$5&wX~O)&-8QJEw|51{VJZ&8hw3xTiDGl@RdCL&5>TO=gPkxu6gtDvo&(_
z2}!94PV5G0>0g>30$6iXoALYNFOlG|mJbEJyv8~7-F8ikk5WH}0AziV5xLt*S4e2+
zXT^%f6$c|DniNmNIJZ)<&9{Xi6RrQUMAqL=Xc-4ZSRe{o(wdsuM;+FlP&zk|xy*SH
zU!CL<N5v%3#yqfTk64f$Z}K2*c0|B-=R0NZE6KgAqL6#+toEg5_AIw?yM2jK%xq`v
zGYS4kSKsF1|9+Fy5Cu4gW9R--7SBt^Z9;iSIK1RCQE@2Ui8Ekrcx)`F$%DC{SAd4>
z6+2dX-!l8W$T6HjeX52ysZI##S~LK`PLNJi>hOQs<c~d-Fz(YkIIo4MLX}{9tHf{T
zzrSI79H$^9#RwdIri4K|RBUWhgMnH1$KPSUUmq$m?%#HLZ(CR1cg>KFmj*c2VT-7_
zw8%i#gbWR_Q%<1LwKIy{-M^kA$i|*f1UHldy&a85lcd8BEnkq37Ra11Fc!zmyC&bI
z2u5Ax`p0V^V+TYDDQF5Eo;t0~cn=^^zsqPFjdk6euA3;E_C7yW;HknVq+g+Cr~cts
zHGCFz79_qoUXIGvRC#Bo@zP~HIlnt4D(t%e0ti}BB^p;$ZX(_BHLw2$r~e+6C)D_r
zNEyfJRH6+=_oNNFml|c(${HtW;gWsRbvRF>I5JC`MNHnfBv?LKf3lr>%RTtB;g2F^
zM3y>yFf(wMFD1_JdC@H?&*hg@T0;SOnco%lgb<eu(Yxi`BdMmtP-+%sh_HKE$QwL!
z?@Ew*78!gBBHmK2A$Qa(-lOJ4t-nL?WhA0o62nR}y98ORUTyt?Dp^N~d!ekyJ1IeB
zhWCpl*hUI}I`A<QkPPiLSg3=mt;}3lEK{AH{mV;+(*8+xqzTy8XfRsO@LL@GIq9<I
z?45J#b>!|M|DJR)yhw5V@?Y!RxL6)Wv`0d6VR|$a{{Iu<fd5V(goN51y63T=qx4VY
zQ}~mGuaESK(L3A|6THT6k5KMX(s%BJx=4Yn?-%ph7kMe`gma$?9OUf`F`xT>d(=Wd
zOA9uU95(WusF(#<ckn+D<3U<$C{-)c`~T02E(=~zzI$(7CxKWaI6>>~LFq4#f1w%r
z9HDNsC}Alw+@yQBx%Zqkf&+sS*3w@Xo7rJPQt`-3@la7A0WZS8eZ8J^1zZ362u1iF
zWg^WT3|f836G@qnc&<n)6;-ajpq%y#L+Te)d~d3Q)2oX6iV{R{+dE{zw#PK^D;qy~
zR#>VmWUJi%VSw9M^W|_CZJIGGetzeAU#+CAwo=6$y}aiIs+qO<Pi1)lwsXGz7pLei
z6_ux+t)k2iD=qAN=k(;A`x`9(=W|mr;m0Bw21W|6YsLvsq4R}tW63}BzTA}lR&9sO
z{_-V00fB+0_-H>Ikx^ZZyVKl&i+ACQUTvchX+E-&R#}8=<Dx)n|N0QtJC*T24}FjZ
zgq(5h?OG31FUv{8^m(J<4o9oGBdU_djY9RNGq-P5Co)gz=zh%GebpM)#Jen)l9lxI
z<PQtWG3trN8Jd{*z-f6EmamMXpfiG9^O5T5V2g-11$Ym1QsZYKu?H0GF^)H1ig+#;
z!WKUVQ*acMqoSe?XZH%S+j)5K0TV2i6Mo20K8`gcU=fv<4C%@cGnFJR@^W27d{N|R
zQkbo2{fW;WKPNZ<_Jl%0=qR)3Z?quMF@|L|o*3A<{XYxYN`C}kX{_z+e8Hc8Eh6%v
zGU!4~lV?`Q;mu3B<>mPUz1k<K{KrpFGiS;x1G9>(@PL7o%u{zhb2H*poomjQO`(K!
zv1Nix1n55L@pq9H94F_aQxi9oE?{ri7DtG6ks`ZLb4Nm>qm?}8drJ)#F?Kwc7|DGu
zu%_+WolF`c60>zGyw4j}?Gax}I({V_DC(B)(5%{_f~~`V4@5h*6uX8ec_mD3(F2}D
zAAj?-o0*-gZEtrTZ#VV@L}olb$lCSPSMN2!X%FYtjr{iQ$v2nTx*X>C85?d+8nKrU
zzy74T_SlQZN_fL}8<Jxh@Y?t8f&a*B8OlFC#ac0#tfz;8K#b&~(a!Gy<lb~|OV0@R
zaZJ*h)6pNQhUXR8bZiTpXL-cK$^<GGh}Yoon5g*ySzgUCCzyB7X2ryh$B<8Gdf<bP
zUyp)}Lpf};k@gO#rmj>3VX;8;8jf@hCRRyBZA&FKUOiQi%nJ!~Ov@>GIPvP#RaU$i
z$g{b-%vnNMD@;yHM+OI(y6S_1w>kMvZ@c+`SfN&w5J*+Ew|W~D6H~9yT6J|b*TwM^
zJV?+o{mhS6re6DAZzH8m#mz9yB8=k!2#@)&sLb!wz?B^ASDiglSa_{_WVZ|<N2!l2
zdf+c>!eVQ&&5p@hBdD;3!NRlyhf=xV)!aQb<)gr*y~>H*y_97tFSl2BJj-7Zy~Hj2
z2%9hIum&IVG=OeEArd-#Q3a)@n|zlt4&QT0AI9T7mM~QMK4GJayHWbk1O=!kl}^M(
zM;nffc~T7xDSl<A9k3dqBxI!u{ufk8ys={<W2L34qhr?RUH9{TO%V|pnP)k&%#VnM
zF%2|d8qZ9vifLLjKCV7?_@Wm&J^f^21CPbMg!RRX7beB2c)hG9%(uRcke>npraDqv
z_jg>kGob8Zl*UOVmy1fQYu9{Q^fHB>w)1Ozv?L>wylg1v&*gfD_2M~_l!so%YK0+~
zK6yh95;ok#OaEFX`^_?gm+%@7hYNF#L`*qh@Aej60;61J{lCvlDVEnfsp6E)E3_7M
zT4uGHI->%PgVZ<Y$=41=(92#6<k0wePp2V6r)u9v*teWD<<lE$7UjaQ?ri<$;6GcV
z83zg@=H<XK<}RkhyI2c$-8E&7N=aY|uIZ8IV{Kk~-&nuGsqHcYD|(YwRi#?*KxVcT
zGOjncjYnC8{5WWV6dcR~z6!OXN~*~V(ixxP{Px-Xa6ULbj`pSR-3m(R$B*q>HD07U
zr9OnTwAtfL4R>4Iju<^R8s!sTJ5`Nr4P33%tW-czhG#~M)VG{TgMuXbuwR(Z;(~V;
zgRd_JJ{hDYzYbM-|KskkPw@}3xpN3pVL^~7H*8KyT%4CqJ|&>BF*GC`LHred)SpyC
zE$D;I%XcYqs)?M{)Fk2}Vk%Ozg7Jd%<bR(7)DTG1o#28*q6ZKAf0m}Yp?uNyM1R|I
zLOeP)mcSeF`Ss-`dF+>+n`lB)kuvbSA%}?k(Tg|ShsVbWTW_sHPXCR7m(VubYH5-S
zMOs`<%~`@sezkXo!*?g%uy$6iAK0HR6DJViH_YHh21JI1Nf({845YUdq9iQR_t-Ty
ze2(M1N}JkV+pY0k!&HA;*e#5)`!A<<A4M38lGiIZC<?QNtU=oHxtlaWrK9J0^}Ur<
zJN8LUrMW>v=j@!E#HxN15lbynpi#gK0>@P6g<%FS2z;ZgQ3L@L%9ER?osFNb;&V^|
zEE75b0j^9U|4hglrdquoDscI!A2J0%)D9}>MOc<L5NHs7|HYs_xm+N!AqdzA&mkqn
zDA|;2HxP`49$+&1rJ>`$5!QOPd1U9>1Q~_aw9&E9O!BgS=Tp^sgNL1K(lbrj8ZEEK
z&=ruRSi#}@fSCAAg@iz-sjRSz3x$^8GxZY2|Ij9X9Rt2UiZJ7AigkQ~c@ByO5B?m|
zc=Ml83K<UWYZ>!2^xO~m!usCn1OW4NN36Ixsma-{j%s|q4%pidt;JJ$S3v{*b<`43
zgl&=Sc{jU%Nw%e-;TG?$!H=b*cBS>0*8OSsB()$Jnbc)9jgRCZdnk@2QGUn?zZAko
zU3O-}gUQcAAH+U=1DCKh!#*eh`)eUT1HUvh{KBcYpidhG_fPlc<elY^?-Lqjvv$10
z7V?Bpa9K}3<r83cI5Xl|{Z`S>phf~|)GbYjQW*I5%81%|v*2|=U&)uHf9=scA$2Ry
zw?fw@uuzmmBN|%ASZpbFUH5fvJDw+WG8fx5EmxSzvr7rCC+XL%fyBD{*u$K$W(H@8
zoTZBw2LtVg8L#pRE&aOqTF)XQ*X(a?r`K<Ql)i%=L6+ZB&M-&wbMd}VZ{M7RoLqIn
zOk;jNR(LoNx{9KSB9M(uO$~Zu871Z9*e!Uwf{Ai{cIU-^CGlY}=GTRMax~Br;hSa+
zHYdYk(Ve{&AsL=4QU1{>!!01dtB@+M8<>`tk>NO`=jO)9{l@OIB!Jrj+bwtAYT((b
z3^dWQvU+gzmZR5=_2qTfuAip}2p<FaPnM8^c-wxY9qoi^9>v(Rm1}7UOYx13BZHsq
zf^!s*jC2IGDrbL4gvrT?n)9>-=*NBv_c2|GpTXy=`cyvrI)7p53}J0>#KOkLj{2Ms
z8gRn1{`Mh&@ieuj6l!cK#!7uCj<0vg9W1sxUca2SadBx$5EKpGTE6{h030ujLpfP6
zZ#O<TsZFnxLSqsBCY3>Cw=?Z~K@S?<?_+yWc5=`@7V?WC#MDF@(!?htVCL-&udIBE
z^^gnb<;!T9Lya_T{S~zB%$NO96|i$@vGr>SQwnNo<2;>e_kd}^r?dEAuNWZ?uxcIk
zudK1w*Aa<B#Tl8&cG86*Ed0~IR_76CgHR|Q*(+uxe+gIDNA1DrU7X+_%L)0VVc>I)
z3>7<W9JC2va&SChcdQ7)t%xfo@AP8>2V<Vk=qQl8JM(3Z-gr6}PGkn>uq&F0nckgN
zHE<O8b{9qXanP}`@8Zkb*gBI~AL((^;{kA%f`s15(2B$^&XXbz`b5aspLBhZjSo%u
zKiu*rk1~PO>e0L_3HS{dp1TA2&rs6dUGORt^gjWal~KT=IrtUQTG!AY35nZwzPx>0
zUtmA?{X`Iv3wDUUDF4qE+zL5UzH<4EiG$NVI5>Dkp)c7?XLYUC!x|8LF4#k5q<Ki<
zzWwJ<8}T4q^Ssm1AVu`n8$YQMl0?J5hdzr;p)E&BJuMe7^@G3${eCDlD(VLSr*emO
z7}Ss<+Qaz=7x&s&SH;EZ#RC$k4iO$hFm9yab`$^ZZikbUTlV5<MiIuNWX&bB!6G9d
zV6Cii$?%>_Y3Db1N++9QrYXV8>oGVdX!q3!;vJ*hOv6cwD<I&NS3Kc0=x2|m(M^&X
zAXjH2U)og}ZT1oKHoNoZ1SjBUrzzPq{rZVdSC_70gJ4ya3VEf^(KmESDY+<x`^b?n
z)VWrq-Xj$w`H8Xl#qSQ-L$gES$a9od@54nJ-kJOEo(Ad1#K(37FvRXm(5~Vp9sqX?
zKNFRZNE(a1y7F#3J%)*E*R)nv9v-=6RXx3+fssL?Z2$G;u+Xy6MN$2OKBUYdKU1%L
zlzOqG!E;#|*!{alSjmu@nuaEeFSdnF6b3YT<pB^jr$4FO@TauZR6X*mx<E5)czhZa
zRfjWWz}ntqav!5k0g&aCH#m~Acdjm8oyX5}oJM^5WPhLaB2s{dCnP7w#PeicoPTfW
zrR(xC@#h52iGawlBi&jZ=aCI|I*osQR8LXLKP;4*JD;PUFc;td`Sq(>0B32*k1Q!S
zin{X1sloBl06>@2?sYsHe&L^xS77e1^W#(18iI4$IE&s;VvlaR{*cS_xM5D%L_El;
z+W@AcGvj)eptm@tW%GJA%Y1EPLj;)9KAQbJ;0e(uQgEPre#Z~hr!I1Ssr*|8jgCg(
z(&BLR=O}!i!FQFaKY+VAk|kO+wD_FPeI2``rQ|ww=JbO2zOZzaBqzOaGYqQCat+4m
z_PQ_ho-Qk4xBUO=>OAAwYX30qX^m1_NsZvCN~sEpApWKHETxZCn-Zf4wP$IKmRfD?
zikck~ReNu$_DpNm3K4sYivRJhX<nWe=e|EVpL5^W^}T-g@BF4YoG(%gXnxLAf_1fY
zIU<fzPlLeVNON}*M|LRD?9KX2{NkdlaExE`joBV@2_UO*K?xt>P(W2eNmn;*n|*Eu
zZ{EE5#eo3(cqk+}$)gAI`da3BAQvm)w)!7u!%ZG84jx9D#_fIXtpyrmyImYp!QBRC
zX&+H9y{lilZuC?#9QCTD+TzhNZFujr<~eV8fryE`Rp_x%v2~MDt#bfiWiNp&%PH~r
z1>Nc)jF~lQ$LIqF(+M1Bjs$$(ePgQ|d0tv5334plECKNT%PAaDCdO;6^~XhXG(DT`
z**jjrL3q)#9b4lP(q(Alkz^r6h44S`0N`W<a<^}`z1XbC2D`y^y<JWFUd%vT{{F$F
zYXQ!_1!?2#?%q<>6e6D;w2}U-5#dGRDGpeoTEyY#`OFOrUi|)u$Z0AvY`w?gA~@w_
z0RQXt`ayYN=0dK3wexm0W0-kkRp)a$0t;P!VcU{#dIlpn!&S5P0e%Y14ZE_CtOHf{
z+-AJO!I73|TlQ1j$0b~@qN;?+fQ3=m$}c^4H`D#$OQ79oM##jc_tTBM54U4z`F5AZ
z-VBumJ3jyX?UKwmCgk$rRFGnJ0Fid&Yi^e#Lcdvzw}xA02Kg>svR!!hH4i-ez0ZKf
zgFgf#kYkAfhCR0m=h1RW#RCQE7M8oMp%KAZ^9j)BcWzT+^te96a-<&a@6GRxAQpfQ
z@T%L4VH6VbOKNp?`1yVRK8tJM+fpS^kY&AUt(9DKot4{<t$%orhE9dD;5xPcjpgb<
zr1$m?Y;e88xT7Znay?ft1RC`57oBP|?@mrf>u!wOZ8-LdRFyY_zKxUbU)u9(#oa+7
zyK`&=M;-xyw-xtxMsDqfev4Zi9uvMf>>PS+DkGs)P<$_qhWo04CWgDb?kyDNyfny>
z6h-vPcUZLlRGyr+{`Fp}iM6Hu`1Ev$Az|)yjT*ItTVVD__L})!lR2P065_!1eO-Su
zM#p&E-@@-yX7L^4?&q@nGRF31^7(Y}p99sf0aw2p??Noj%CV?yUa{K!qDcYQ<D?;U
zCql40n1_@SUth0<GeC<2*6EQ#orNC$+7cgnRmZyC6i56fj*^yLn>0yKY}zt;lGV?7
zn}1F~P_T0}Xr*(>PxSRTTa}zu?9~25ptXTP(h>0B`U2p@lz!>fzg|gLc#d}qS3nQ!
zIIn3y^656GR!nRx%!dzR^KJIz8S7Ok`eO4#Sc+H^4NyP@LrDvH`}k;mF?E2lL$=k-
zVcy-{-4g#Qt32a10UAMxW@20BxDd)wzMJ2<P*Dto*_MT-Kvp%ik=}s7$NKtA*REab
z^;@~KxU3I5fjj6iyP@%^Cx2<%ILmX+yRiQ+6sG*Lt15Ku!BoJq*Oc$1;m93rbGQ`G
z?_HF~LPFRPxDeE*=5sHv+_bv)I5P6s(M>t7UPM$>8r4<Mky}u~P4(dRy(8JPh*;$D
zGF19x&tVhz1U-p3i#*-OreQ3(G?SB)dr9%}3h737T#if||3qDY9Dy+JQLuv7l|wA4
z6i)FvkJR^G6uwo~X#A=Z9^mc{#r3@tXj|*&fy!cSzPL{ZdHtqBYQ(E(AY_O{pKD5C
z6k2)*(bTbdH9u$X>1ecR$0R5hm1nKwww*z)U#ItL2wYPPi>$4Mv)$d3_kIx{-`TDu
zS&BGxq`jk|2*g3@WQr@NS%Wfy<8D6U?Q=S32hBLOw#I*gm*uPMw&&Fx7jH695cA&K
zE)GvjL>YayZm+-wvnLI4db!gdj8zF3M*XU&wTX;Axjca8NaW>I(*cP>6JEVi-adHc
z|0^72H`hwlHeEB0HW!mDJkx~yTR*OAd=&&j^uLIUYtOHzJ-K+v^)5Xf8SFp;+D=3{
zmDQV;ij?coa8`XJ%LXs!w}>9BXpN5dF4*U(b)pa!{pmJy=sm`mkXyh_EMQj!xjI=f
zhzGixq=q>G>DeVV1<3M1t4X6*g`Ba9c2E#asQ+0)@A6KAkry~2phPT?&$CnlSH|uX
z<+t;ffp7`ur)EAAG96zr0)xR2C#Qe?QM$LBA{oKm-{}N^%tMpVaVjJ%+>weQaUHA)
ztGoMt^3IDG^;@~$V1TTdqE@>2tn#I)C_lXPJ+#Sx@rI^8pG@$nB57Oyd_Q;4Pwr(g
z6r4O&QjeXLeyZAa<f^#n#hPACu4KEeA(4DV_BF#o17lBry?qMkJ&64lWFcNYMF41@
z(Obg;0*MG1IoJV}OKFL31)uopwpEu)?J{tgp7V*f2_y>~-HY~xgpxN&#W*{{c*EDG
zF7MA@-PKf7(t7JLJ>#OA_V_A~u7Kqb!}z3b>VhC_rCUd}lB2x7R-cl6o0V#H+2Zqy
zmT0Nx^y_>xsdH_HOBsJkKYI{hE=t|aR5Wwr#P>;26<@m*Q==<97Kt^>p$G{5s4;Dc
zuI5z{%e;-o6KHYJX2|22JzhFGN4w>IN4)YFLT_X%2Yn;yb}^=6DzN9?2|_Z}>_^ba
zmz~svbj$SgkC3PNg^=!BE1|3mn!E`bFQ-n`2+0qT{28Vui)1soa`n~S!HY4@v`O#%
zAB=eA_q^7X6$)D-tgYyAQi(iVg?WGci0&FQv5s6_<#HCT=^G7j($NG+&c@M(p@q*F
z$N}aZ=5hNoA!P$gk^JV34Q4x{moxeGYqwQpZ{S>^Ra=<C!H3>`iHl$`37*s%p>;cJ
zGknfh`Y9lHGj;{TkmN6TyaBM#sBT)TXzHW-LuWjAHO_t<GB9fCMC(F@HYJA_kgE}r
zUmpJir^$pt`|m8T&DFqh-^CkhAB$mb6I3q7aJ&^W^@pY0su^6vZW$Puy>P`eO$U!#
z*s^CQ4Cu;8=D2Rx@?xi_UopW_juPxINHCIx=fFoEC@U_7EWRR$*G%lZSM+u6L)JZx
zNvgSHXYY`m*m)jG%S1O-6U7|e`o>tq@(@7lq5FXz$IB-lK2HL>&4(eurW}eUi<;Ie
zZwLrC&VYlT%Yzf9F9UWtwC4hzafav|78JZ1c`K)mg--^W@4CxQ<F7uVFkmH<JF<}Q
zL|Xo6g-B9Ei4V`SVOCbWujZYoFrk@@3AkiArt<#EJW^J|if$b3(A95=L$lvk@R_Me
zlY7#M^dwGHY|dxbrS?=FvnseSvn@%Xg#(B8a-DG&r&gA$1nyoqtTR#x6_)vTC~Tv9
z?noxaw9P>zqwp#c-lM`PE=yh&^<$YE$iq*z+BStJ1uUzmbw5W{`kL-WtQ?DqqN~>r
zHZ$#mPKbiv_Ilz7u+ed;@0C)ExW%*(WB;F}_C?1$>`R?by?f@#T{%zY-N6en12RIE
z#Zy3p{rtlvP~ZvmbzS;Zn+J|RXP<qy<{KtNPOeK$N@|QcuTYC#nYFCMuIXrIJOwl(
zXxQ@eMDRF8ZY;Z1b{L7t^lU~^!u8<B{n{YDEC3noC%5{QFW}5Es=(Gia;hD@GDb@`
z8>*p!8_xC5tdZFzx6e7vX;i>so||j&;UlyI(Af^<A~J;>dUsv4v&v1Mw+VDCzq90J
z)AmlAp<Q^Ln9S<IyHkd0_)&~Tmil=Jx_s7o1WmBG-mZ}u0#s#5x-#&Ndved5QOHd1
zG3X{4l)&7e(QVF>k{=QIMQQe8b!%mgZtSI-({-S*qf-wD^9W~y(ugFvn7?+IG|CGK
zbjH=X^dCgQ3?~P_R>iFCT_i(KrX){16j(-zdXV+dB4?k$EpeePW8?L<?62$9hmB{=
zKy;L5kH#2zH0-AwXC?E9wR9-P9&es)-N*_#usb(#oC6g)W0mO1K2Oimp)~oR-1ISv
zsuJrnM&K--x#vVHm19%CWUe&7>v+Ap0!Xh<-RIse=~$%~LdLA0Ua-G%DfZO>os&<6
ziVKv-m-}Gst?mA5)BFPz9OTh>%v4Y6oZa4fNuzimVT=i;$6D+f;a@Jn*jQXBj(<I4
za=8AvMpLUNQU}M3-#pY_LFNSyFxKyU=gI<(hCrS=rGCoJ=KZ~fU|PryO5xiBTa&(5
z_-_?4@k>iP9MyJo$cwv8{3i!xk*iq%{F=M^GJHifl$>Fxi!yI<FgLUz&C_azT9i<<
zS3nj>g?_nZo?t?zwah+uhvDz((I3~T<{20D({BkFv;Qk5HjtH9mg9N^K($u1&ZhVz
zE1R8zdxH9iHVcS=(%izCZ#27>ED4xE_(q=qF1GJ~*AUqOQRRX4Vr-xZ@h6@1!SkaJ
z@-Lf?BF|&2mVvO+VGF-N1E_Y-YHwomT7-ip8R8DN2e8-Wm=W7lVk~lW?9E(3s#QxQ
zC|eAD#VY+oCANj>7W_AcBiEd2k>-G+prFok0qfBMeCLR2q;Q}GGyG6hjX1E02j8_N
z`9J<y|Ib8i>HK@t_s1(Q3OU-jroVGJVrwg<w{zmN_sgPrI}aUN+c+hcZ4a~IKOC&c
z*Pfi_Z5E(52@B6ci%tP$gB-#f*r7s320o(GLlHYFN`k@U<m7hine{8-2ZiZd2C_ad
z?d!p+>ax8nW)s>hbCr3I{21tp`ddA+L+Dbi4yaZRP3Kff3b5b+H}KLYZS{WQhTo>t
zoIsOJVfhECZxVsU`|E#sm#&-VkBos9Mhk*+UZ}F78!CHJWDj`C94Dew9CvDbb+xIg
zs%l!sWpEPE^_{JvqGC`^j`wU#^61y8-(tEz((6n&M@_$P#rSCGM5_cp8%<$RN9MfG
zbko{NPr=OM{~kFyes?nSge0z15D0|re)-LL`B}4@8Vt5}Gyj#B`)Z}$LZv6Yvn*j8
zTSEMat^g?v6jynSooO`mB6;zE5`Fa;FTX--IJ}b&ZHqjJ=Pj37zvG0WevZK?aOPrz
z+Q(_vJK6a_!X0>CDHu<+-orrNauHLbg0OM#(+F{MI>;kIAV;5^;xkuZv|Fb6b1>lK
zDL|?T{n9ZjA567gOsvkm*)V<Q<bqfB)2QN^PvQe5JGdu$F0jsVUzN%;*gptRm%jG4
zX-0s)TT6n~f6B?-{WVK<#?pjB`wa+xh(&Uk>90=Tk80cL80+y<&wJ#I%Q`%Vnwelg
zymN7<>nu_Dx*vQUV&inVJyG`&hK<G7cRy2Qde}{;aO1~pgx$LkZ`XChg6Xfhd0B&-
zgTsssz9v<aU@hed!8me?zttqd%=%CJ?6k11SMwkVb&&~uQqFG)*GdneIf&bMH&&pH
zgYh)>hr1?-j>c^;`b&`kL}u2rb&s*<D<y4;%401}X-OwcGf(zVzp+~hF4A6<w_Hz#
ztY2vSS<L|~O6*4~%!c+2tOMjBwh)pMppgO;o-$-ZAb$h3BJn7}lE0vz5>V%H>F(5D
zf0H6`iv>it2sw__IIkeN!0bnE!n^c=TO66~Xp?hJmh<r_+Na5{ZnFWm2u-PHC7&E+
a_}M?(*>Ot0tByJ-fS;C{o+?J!CgT5Op&h0G

diff --git a/linux_basics/images/linux/commands/image32.png b/linux_basics/images/linux/commands/image32.png
index b6d6c30a04ca33543c94750f98344f69c785a835..e54d43eab2cfd0034c9979542436fc12a0222a12 100644
GIT binary patch
literal 75214
zcmbrlc|26_|2{4fsZiO<mU@-!Df=3dQYZ{#-$Hg{-zQ08td%8evSl##eGOw|o9xSA
z>^p<OV3_$H@Avz&Jbu5wzJ2HM80R?W+~+>$KF@PMuj_hV6aGq5?F!vZItmJkE6<-j
z(WaoF7o?z|bfdihY}s7Bm`_1*+1gG;<<)Z)m0PdeTx{$dttlv;g~#jDfOUSeq#J2J
ze;Z8u>|$g1ZSi+s84b^$%YXm#!#}aFlwZ>FdwIP6RSCPFz-+<{>93@)RB5jij<{md
zZK-5!ZDNf4*p(9d4$-vRh!1pMMt^%m=KEIbeSsp4zUgHGY>hIOS11-0N>hF>JG<;z
z48_$y!91?#Oap?IJHn%)C|_M5Lc7-4DPHgEo9G&2qsjXHtPxC<6tQBT9(|xw;%e8R
zm_bs0YoMU8q#ZKS5{S(&VY8%?zRWmhz@M7aA)qUz5>?GG_D?&6$C={Y%X$2w0ma+u
z$MOZQVyS&AxRo~enbor?R@feM++xIsGV(r_yDcJO7P_poL9uDgh<l%uwnJ?@qIme|
z<KfXsAx~kS!{bh#YoUUPit}W_UUEW%@#1#|*|E2lzE4v5q2RU@>7zLQmmxJq$yYhE
z;NtBrca=S-&OOezw0`nqf=itFeoaZxyNjg-vE0`#mh!b*3{0-vk5ag!bFCwU4Z-43
zm;EmB`?q><Hf_|XtMk`o6!P-iOX<X{Z${mT42Pic>ih23q;HZ^EU&u6l0k7&JU1-)
zDcCAseP+5+D$#x+BK7cD<rN#yKTA&;COYFG@I$9tHn8m3U-m(QLONV5d8LVqd>8OY
z_4aF~6&LiGK3%^(wExTN(jnCjyOJ^QXSZuKzE2`9z7DCSRprTCn=I9f6MOwd#7j$$
zkt6RL=1zCi@YwvD*UmNSF4U#rKOUGqV&&GMV9iVBj`_^oe(&de`(XKzmDTXhOz15-
zS0!5Wb9WtY+~R&i_1wWbQ1T>)>mpUaEgFNz=e>U#K9aiQYyN~TW9K{V$;CL@`yZF6
z86qPd^9(^b2H+XOx7^JuT+N@-`&@=_eL7#eUF~L`;L&Mx&F8%MXP1Uc=7qH-`5jHe
zkni`@vtHBhmU&zd3eRk3v^*~wx$-Gx=3EUo7j=eGN$srTr0s(V^uY(z2Z>gyR!?P`
z*%7Aar6&d8j$ryu?%dx}^WBjU+0NB)nt4(z=fnAzljmz@xc)HEFnmat&rB!?H;R{C
z$1X^J{lzLiI`-O_@4hwL-A{Ad`!Ah%ozOfiAl2r=7@3jCOt@Rv)20LT>5o3;F|{D4
zaG?%*bK8<HW6~S<^%%fo7YonTf8x}c%@p5zYkuX5AB_DIFU{_=rXAGip)N>!)^L7e
z@mT561-d7Lmvq@9Q$$jD65oVh0&^TPGnV>j|LVLdD5)>0Poaxt+ILvH>po)?`~VFd
z5gNPvj{J*6BHhXGjEkb+xF3RPI4$oBk_g~TJwM}^^O#RWcinY3gaUg(##QYGmAm;B
z4)dqZEtd|1Z!yw!yl0E0&~AAHwiPu-yFIwlLy1?qc%Mq3#jxa@<2g)=@b>jFhP7X>
zU9X)`3cu@~k*T>ds>SPb!LP;PPuMNmi<x&Wx3iT#cD!oae#PR>xo7vUg|_qXJ(Kwy
z`t0i6hnEcAedQ^Lz0#?dee>vsbY$w2J|3q|p#_D3(37YJHPNphZ+^G=$tgo;oy8$`
zP2(|drooDC1+B>^VHJTt{2mO3Vd+mqzK{0P@7<VyoqKu7$}%D8Qb$J(_;NyowWXUQ
zy<SAT6$mUeLQ7sP0Mm>_HMWIIQQ6K4yIxV739q5Zh(P~JoMYcM@!_0)Z-&Ip%OCPm
zrkSg|-aEYJ^WowL!B#Qli<zk<A+DcXZ*JvkwmRI7>-=ZpdgH9~OCFo+w$~D`NnRyf
zOZnu~9@cJpE&R<(w|hrlET08vpUeMHkzNtz@!lhJ=(*pEk=sVGQ=JwIx@BLDUkdZ$
z?s4;)@hI{TUVHFWF`21fR(<wO$v|^l(=OZihllp@Pd{CMxT1J)vPPO#(f1K;Egjq|
zGkZHb1G}TQQKO&V_71}TOyqg$tv8LxCM)!YcjV;sf32{tNUOLvAvEzqCe2xm;YZ%U
zrIqfL;XR!_|Gnyo%bRf%a!#2C#+&M!GMfSuXwUmHRWclDzhzWq7G-EWgjYS*wLLaH
zYU=`~r0e4A!aOma{`+ixS^JiIyL$<1n<KJ$1l^2mmppE`$dK93W)1RJlFEgS5*ybW
zlpT~EULAH%^Un3ROuw^@b$Vs9{Y9xjDJHWiGtA=itVf%Ao7G3omyvd;1yT2J-QS4c
zB$IGq->%GGzJA5%VWHPpyoF2TM|SEP;gRZ52RBV5{akt;(u?<rn%Wt=1dN`Sggm_A
z^04<!`ER=~TeBD1PCs7ym`IORJdxBH8u~5P=aIWAF$l|Tv{|y5wRu>+Z<E(k*ZXZr
zX=!}Pp(iHA+u(s9rQkm-4uYEClV1<tK)|(ybb6NxPy<5`Tea<Khs%b`&|TB~{qQmS
z;$ag9xHv{;&@alf+%qOBv{x#{Ktf!id0g9Zyvh>eS!L^p9UI5o#R!!ZRQubzyg`?X
zlogjY&p-C2^+;NKwdmR#x6<j=1DRa#8NcYc>v2sMBxB<CG_5i9ZeL0&<|*UT!^qg^
zpEvurl-*}*nCgaVCb@re+z>DGd2`yioaOj5C)!YYt>>o}A{|kSz?itijBv|)dF-ro
z^h4{VYcEdnPa$dtr`jf$>m+NMw_OhyeH{;KR)24EEZ26HkK?lvs}m;+Mhdzy9kNsY
zS>Cdkcbwg(T?*?e+ZPYMt-B8`rxho<1ml9R%_qhuZYN$uc}^?Er(!n5q%e{mDS%u=
z;yhRQZtop8r3|GI)lo1gnBje4$Ok3a_vx-2(&MS}sms3*zjkL-e!0{%O^#3IG7A19
zmo1hpuB#{}>Y=jI_@JPquq3%8-4(t4ZC2yzhfkfK;;(MXJxYJ4-@ATeUEb?pEa92q
zn}CInoiwjCU+@0xfUMM%&g;e0Uw2{`ibBMk6KzNu7WKB;w94z?x}n9vE!*UFGGEgV
zDWB_We>9iZj*Et-F{YNt&3gS%`SGw+`Z+J3P`=EnhTF4U_(Jr>tb0A_t~|(pR6h^I
zs;g_LPsL5hih9gVgs0i1+ugO3yf?0utgt%y=F9KeFEJYZ-&!-=Zl%Shr#8u+QYn4}
zCW77>Ysa3ItFF}R=g}XOTE$z1<C@>buRPC%F2Q^93`hnA<#p}Bb8e984+7)2eB(Id
z8t)P{G+*}hrIIEWCL4Vh8ul96v;*y;EAC?DpngFqJqCKW*OS&{JvWEAe6s_>C||$S
z7Gq*-X(OuUgzU;Lp0>Vg?P{$a{G7{~gpf3mIi0(lcjJYP93P#)G31_t&VzE_gvG+6
z@-6gI&$JB9w=bf3zKH$FP<PqoP&7t7Lq^e-RE$I*3nI*fo|*os`Qtd-5X#VeiHyj7
zQvbwspsCZPKLL4Y`Fn2U?$(PDkt1DxL3y(!Lp{?2i+uCdBb*x4Y$uRh)?;1N-I(BF
zs$|S#0<p55=`tzU(_=33tMQv$s}nC2&v7s<N-H}su2nlq@Er2&^5kTG&3t9uX`~oT
zwg~ZQ+wYp`YGl`t6dpgc`Qkbl->a13P@Uw&huJ03{AQ4>{^(LvP*%W?eLAUEv$=DS
zy=fcth74|Od!sfU9V43~E9-^aw9h|4Af}z_{C%$&W)-eZe5qRA)#6bUAF3O2p6Z@7
zs$$sC*&@y_?`61b#7trX-UWU?_`dloDvT{meLc4BhNt}g+;Q~BuOF-0tQaIEkHxuU
z9`1JbWhJNy#N6OA3QF}0nB5^=SLO9fd80AKTdt|#m_86d9QvR$YS>X-ksd7<c#v3P
zrkOUIDh(MSZ}hu2Ez@V%W)wHicxG<>SVpQe`;q*94i{8zeJ135>{du*$8=P1Hed5u
zTo{fmXf~cVsdtq>_QOQAvrA$ICuE)JTofAP{nwE$q0ReK>E2<kd3%Vhsa^kE0zAn3
zB+w;HA5}`^A&4k^g1QnjXJ*UQBGkBLSQT;=g`t)^*~j^q!7LLClSFdTq1y7J@$#mv
z&x-q`$-~LnqhHPMNp)k7GV}1EC#q!Z3$vTelSf_iAa@r>T;r&3F>(59lXy`5Iwx`J
z8{s!DV^4$l`1sXM|BlssUZ<A#G5(ln9Uu*zx&Q9hM;jZ;ZGtAn3LnJ-;Wm8Rll?T8
z$Bg^(o)p3455t7kb32sZS-jx$GSwH~1(u9cD>;u9M6X>`qVV+Qw!iuMO<jF{?c41R
z6(0<iJaC!fnjAXdD}g|8TEmfPaX-g|D3WvGxMY5w*7{!z2!0QwCDwgA{wFTeY~j$8
zLHDZ9yJ8~r94a?r#WIHXHo!X~tijK1G&CsqfpuDn^XG0-Py=h{fUm+i_WxdgdhR|2
z)xWk=Qc#51QJnwJF`B^g>=O%o&)WQZN%i?71r6}uHQ?*>o$|kqrWgE9^<V3hZoobY
zB^{OL&w-_mm7BG-v-?{Y57_Wq9bm&n*JlRq6cj9X&%WoLYyYzioPX3#7wiGncqwD$
z;v{VG#>LWF*vHBB>^u~5J~F_nleLG%EgvUGXLlJN`P=_GLIzkr+bnYX*1rz%aFD+Z
z)_8SG#l_9~mbkE(@Ppe5bhmEZl5=}wBcuJ~>3^C7|H<Ee>*3)lBO>DM?Jey6NZ7^A
zRzy@<T3Y16Ly?CMg@7Z3+<l!rEPRBV-S7PSB>#1uC)Vy(Zg#F7b}r7h&dzIL>Eh`j
zfBW`XNB{l#_jOwP*!@pW&hG!YE#L-4&i06i3O^9}?{fo9<<7Rsyt4DLb_74Ma{|T;
z=tJR=#6u~$e>M33?fRcC|J@YiZtbSx;smtxQ23uw|4-xpz4QOu@Lzoz{7;_}4<-J0
zm;Y<ee_G0koZb5W8j639^S`zN1Fb+OC-UD9O@S`<3&S+<969WsXz2n=Aj-}@=cIu@
z_y4^-ThDbB4tm8#LGhU4`4c5wpK}{i-bo<j6wNj_=<(zB_tdIl2OmvJJA}QE)BYl3
zmXbFet{FuNHHFI`IBztvI+hB2ivJ<Dn&!PU*SKNgl?Z~2-_6+h)kv6hU+M|4={v#^
zPi|H^RsUJ|L(6#U@jHrhl;{6yrCIrVT+3YXA9udLJ;PbQuNWD@6<7c20{(N^!Dd3Y
zN)8Jydj3D$%XwN_!3nDKv_tH{;-khw(bC7UZ~K3!TD-jTG%~V{UQu}0Eb1=@D)<<<
zJaF?UYK8Vh>*Ai&!M4=w;hh)3$nY=ske^=^-BkH_`831rfx%xshAXcho0sw+l0~m4
zsZx_%2Sg#pF&yC3q6clizwoLpV?D!pLc)4}JdzOl%MQw;-?hvYmM4&}KawWZ+_Azq
z)vJEFr$L85-55mA$F@boAoCrkT0Ky`jBMb*rq;?7>}(h(o9sr3XNBYV4_BpPQ?vF`
zc}+XlcnJpCy?3p0hL!dPNoqLLz#piKc^%(_LmX&k1^?#q9#dUs1Us5vI%rmy^xtaY
z8!>~Xy&b551Y6FuD3t~zR$BF}h?3XE%G*z<S!~0tPlmtL%pMn5;(H~c$88);R~-I)
z=P5n#OF_OPVaaPv>t!L(Q#`H|$&&H}HlC|{nKP9?6j7~IeYjO0<SBibaQkn9Z0Os&
z7R$8P_5G2IKHI?<%PG&1hz><+maxk=ZoUwzuWOl$Y$>7%q!k<qQT<7yQnR11ZaJtC
z#NC^sby1L>^Vq7ebflxdnf%W0LEQwy>{1FMs#jv_0kufpc^14}9irYKfZ&9k@Sc15
zcVl=B7{kXf>z`LCVdV$HjNsJD(dw%5>)^toulT=uGxuKrF&R`8*8fuNu{lKM@s$(X
zVC03ScaPp4Qo<h5YD@mjj1w%w!U!(3a;+wMQc}X2`-+>)gi63z{h!Vqyd_}CzAfdy
znah&;DX%;%8EZmjzn!S@i}+=A6ZzqJ6kIVg_~fAxY}|4qskC|gEp(k!!0D6qw7<}9
zkWDctpfXRF&_-4_FEzj~i3Uy9tg)>v?%4DuYd|#yCnW6#r0!`ZffqS~o|~7Niz^st
zAj-PUJh!Vi>L-GkGh!~T9wjNcCp%RwiFz4txm@rBZ_e2EFaSf-@ml1shNh0?ZEP@7
z(#!d}IPxmm*ZrB?P@bKM5owONI5QKD;$}9fM_k=pc4RF_PxHIIg1@E{UVPX8fobbz
zVylD7NBSslY@lMg-|<mvGsMb)+s1Lq??B3&+-M2wl?<n5NfmLcDTK^_J$`u_!>!2k
zk#uO)u-)1X*;I6nEN&v@j{M4%JK#cbaS7R^6g?pS&Tnou^EJ7AQ%-7MH1wYg_x4$u
z4hbWttDBf=*wX6c)754O-x~>!m6F2)3~sK8$Q4nK3%q|%qfn+(uifcWF!G*8%99wY
z==+5ZrUR1*;<83Rp*|=aN~bL$(}apEJ+fiHmvs=j|4q(UJCZ|OCOv5B=n$VlW}%|F
z0{1duF|D!Ms6`3)H~5w-ld}dq6HhnS*d(i1GErhb=lwXioDB1p*Yb9zd<LC%7WJ|1
z3(vpMoo?2x)0ZC3HN)=Np(9@?4ZaX=eAp4mbv<f;;Et9Ss&guZRM-#0w=n`D&A`1v
z?ISg<?pGm9^kY;Q#ue)dYXTOwCu7<^qE_?BeCfUi$ckoOCN0>+c@|8C9jCk>$JG?a
z2Bn_ipgyK|jyJ6a%VP<fR16B&B(VW%v;O&m89SL6mX!8$G#kv9JU7^ijH>zf(omAF
zGv5z4@Y6e;Sz7H-68_1oZ=ptYc}`<GAt*&c#}V&m<~<eF@6z(_4RLTH&z)Z8ZN`{a
zinAzA&i!r%OQ<b0AV?vIg9V!txZ6S%(=Jbtmztt*uae*W6k>I{U)Ldr?@2qD+_2Ni
z_I^Gef&09ZkImd65xJ3%&<(NEchSgCad%#z9h{c-jWQnHp@MY_mg_n;4%_sXS$7YV
z@a7VFhDT2X<aLhZLGGW*pMSXrIkce3UUuu_!z~PT&-_xEJ7#x|nr&12dR(~H)+=ek
zp5jzzVK~T#LuIN!BN6M)EZ9IyHGGis&fm<fVm`qaZh$w+wd!xqY6V%pn%wdIauc1;
zpty7kQwx=mr#_Mp`C#EzazBjL{Z%QWUg3jI4v*xotyZ=Cvq`$1JBv(o7>5j%+cYk@
zqtSA6-=!92PU#3|$v?Bz#DL6K{D?1f-fhL<a64{i#Y(H=cU~%I*3+nD)6vo)Z5V1k
zX4;5Wm04@rwz+LCKQCP%lCYq-_o?w<QhFlimQA+@Zti5a)>rcg`#~&B-z@M>9j*fH
z5n_Htv_uNs;EpN~k$+7a!yFZ@xKmMsM-Z))>0nFy(%UVKI$)>t`-NKcpGiy{Jqo^!
zK(e?N#u*gQa5zu^Lije3_H?xFQ)lgZ0&!|+h@M3n=@BJq-e9+m0xFy^RUUl?(1u%x
z=A9AUMTk0c&#0NdOz0tt;70c(Va>sr3A?|^O2GQRD6Cpj4=u5r);X%?Km;!I^UiPI
z(faiIjv6vI<wQZacHv~@0ZuOTmW_goHr@JZl5$y!%ecJ4X@x!?n{;E#+-hD1o2)lh
zICN);AIz*=Z8vn(bY#Gmru?<IVfQJAn@`Mp15q)fWUx4QohRlWO@(~5g&A9V!cweZ
zDK6l5d-xZ+UtOYB9qsPuW+pYRK<&#fELvA9k%?eIt{NOx)V4k!S9pfNNMGK^j7x+C
z5~lq}D-PUQDLp~*+`gv8%{zJ<rOQfuGeoQS>YjP|{jc+uVVl*_zF*v7Oz(saKnI0+
z1?9tEy?=jbeMCN9m!JQx5}jX#<99h^=T40aMn>tB?C*99zqHtv7Krq7YdAPIg3SC<
zLw*nDs{pIiFU;XB>z%3vFUbX+_Ewkndexs{g;7`Q4=t8aazX$6MbO$PoeM^OtNA%f
zUhmR<?K02w;hXmB&E?CB!}{1rq3Utzd%0^c@k(}=8X1WR*G8sRdwC7ovbuG*#|Uqn
zh~>JIw?M&H@bFQ$aJ7dVVNb<67|BuC1-gYl88NDM;Q6UvIH?cfJ{n_pY2q|;ZgkJT
zJ@W%5tWE1K?qq1n_elR%>Lcoy2%bVYGBE9ybTOJC{ZErxt!-01P5IvG?^I)t-NTNS
zqP+c@Ui~ZqH;k5|(ympLh=`iGT^Jom1XI<^d>Ew8$D#$_lhpUb*wjzWhcGA#Q=dfS
zE&Q4PW}B)@C%80!$<t8cV~+aAK?mvYgq<*#>=w(Ef&9D-UsGfM&HWsT)i7K$%Oznc
zs9j`tag7%Tbn<Fxx3DbJ`=2?NpvSRo#SX>wzC3b-7zbgEQQ=p0Rdco8lfEt-nE4@X
zsj9jbOM0d0*n>es2ZSjt)5x26l}59mBTvUFWVGmg{XZ$1vd1ebbD!Gi`E~zs9QY?x
zHE(bie4I@pV91{i55H*Xfd24-?ibWKuI40uQX{*2Pn7FW!Du)GJm@?Wn4$G2tz&Pq
z_N}6sn2PKaYO&SRL6Tk@P2O}C^hIkD`Nc3x00$4li@P}YHjXqsu+~_%&j<P@)v7W=
z9AT{dud0OW_dhn9RhM{2WcG7R1Z-!jT?!s5yDkuTBZ0DRIRgrzYty{)Wohl>a)$TQ
zjZ&hfb!J<GmM|G34jEt6*EiyWpg60;FZIa^L|JbQ++5tpTI4le;#udA>MPR83#9|G
z349E~?_kM6X-q?D)l5OXc%MVX7*r?ILQ($W_Z@0hQ^QTaQI8_*UqQG>IskIJx619c
zLfS!<YYOXz7s!3!_;e%vy-n@z%tkrd^k;&ebd7#W%bX$^7cpkv-Fs<Nzex>Ic3@S9
z+9)z)flq@-^7`h)g+a7c<9<CeTt<)7c-RP_-8eNaj)KAlOM}=_9}N&xfQE%I;V@dW
zeNsL!)<p%YrL$gi)u%^k6fe^G!i1;qK8?94->74Ih#RJ6sn&EDtXyBS=7FzHH7pz9
z+D9-O$&^8h_@C=7b39@Dz?6x+Wx80J;X1ckN)Ga8hP$$a*v6x8JeVPZouaP1I9Cp*
zguM`{_nUOXD_VvwCKl}nbrA^@&`CyH^6HP9qjHKN#EnKHo>yRBv&F|oh=<8-O||bW
zkO@R6p^?Fo$a(Oy^r3}kFjD?t?CuCSaM7?hP$L)_NSM0Qr*1Laz!JY4i@ggF$7ks6
zc3tXnYaR}hBa?@Zs9^OQ4Jz=5{)RoGsG+s=@mhm&o19p){=khf$f^}Tjgd+>`iQ@v
zh&zyYAR=3!kum~7Pf6x^YbU-<=EtyLI^*u>c>cDU|DBgE6q*BTUi`DiS#8GMY*gqz
z4%SpyjDg^Vy#E=EL+V)NrB%TI&>~;-izCPCNCkxNboh*I7O#|x86KUu-*j}0N!G-(
z{|#^dK7El^urK?rFD@<7GES96xSm*z4P>=V^;K%vU0V-@JAKiS%7bKe@O@zFm!Wp9
z!g_U&1>iL-YpoNbfw1TE!pyhW3tU1}O?2(doRT$pa`dbTY*MbT_M}KdKKNd5%en0E
z(07BDFt2F$J_T_-lbja@GkjrXee$^CP`Wp@55b@!c*~rTOC!5LVTrN9nCsq(=nhWz
z_4cZ5dJNh>@HOpsq0&Rk93qHbkjtlK8Zt{QT{2b($B;Ixq;FL`M&-PSKMC@pX`Xuz
zgaWRS5Ja~t^o{?vgvfqs6t~Yz+#&joR=cB6GKz-=$J#AY{n7wzuMEFmYnfO%k7+v9
z_HwXa$wyGZ%%FG^kC)7>?u?@PA?w2hT84P*?)QPX20Rul44M%{%=(j0Z!KjMt7Lw*
z5CtcOBud9hd91`xhXMVfa~h{Ti^RJM-9qa)9{Lle2v)<O`gWTXXWcrjt6~|0o@pBM
z1;tJI4{ud1B^PvPNE#dI$%~lDy3Wi<ttDNbZ)AGLp=hBzd!uLgNK=Z`S+>kqJla>k
z$%>XIXfp|HGUH56j6mk1F~0dZ3HL8uTZZR)PkWjr54!J++cwTk6o^DECYt3g80eVq
z)Y@_je~=dV$WJ_2=U&cH4>^*L3klMhz8gh{#%$#OSW1|Zh;lY^{ERRXHib6YZg{s`
z%@MyJ-6%}js$CX_kZNsTUI(A#5c<$ZW!=R$uz`u`G3r9iF5G_G(cqs}zLjWPGnuDq
z!fSM4x?Z=o!p;x3Kv=$6Q2d!PT1RD&LGJKb>Rwp+4=CM)UI6J}%qmYxq}Qs?OGm&?
zukI9moV;8*r@qc~u!XMs^ZTzT(l^0dB~sT}zQ3mP4aDNg%j_Xk7fu-0$wA$0Vm{kq
z@lCso?BdQ$LPiylEJC(08;ulI#DMsl&Oi2Q<N;U=^ZO{IIapz*nSA=d3%mZE?GKsQ
zx{rjVWIyiXaKf}_^hpbOVT=3?9t+d_t}85azI?-YzY$I+sQHYiID#jGH{Iu+raI{N
z1=5529g&>Zj|h1g0k`zl$}H>j)va>%q)TeZB>#>K5jp>4Mng!CBEco_lHk&e1ybFG
zJKzw);X4%GpNG~LwclG&E-CbcBaYgw2pyLBtwu;sxtZ@-b0i{J$5l{f$kSXj%)lKi
z8b(<?>6dtToZ>P+0w@N<IxPiksRcC*XLJhkJ4e5x^^y>qH`Z5YA;P<M@elR~te8m!
zI?)|Z1v^SLUM*qs>%nF`&m8@tNwNwcx3#ckq=(q#ui4P!ms-H<OdSPd&h@A1Qlt-q
zgHm~VZQaewqD$Y+=*fD8q$B|_S1SM3;!z~GWYZ9co`k5LHr#=d4~=g6rwr_Hv`*S!
zrr=kIAZBo3!vR{3sGRCIk)hp*a9NnKq<_9tVmw-@CnB!~%=h^Eg?R?kn4@LftDA!i
zzpV>&L(9>LX3VV-%psmf*$s(?6^?P!yh3z{`Hq+u^W1uL>+v%15C-WL?_a*Q!_Un{
zn^hzyTu+tRJb*~$?-g!lpC->_jg=Co<Jw@gCSI%5rT9Kf9$keF6&9N<UwRttuUb4E
zm|Hp_)F>$;h3ip{@76{&&xHV5XUkt{oey-V&$HN4lGO!@UeRtahnV=%#wZ-T*=Sl;
z3hjz$_Il>ORqJl-w?oaxC|xOIK`)8u_nhzi)!B6}ckXl|_s`rWnPls+S=TZ2&X|AB
zTMd5Vb$At(NWBm-s>=)(BqfliJ-Rm`2ji^B?@A%v@Jad8A*#|{brbj%!72wyH6G)k
z8i3kOA@g~;S<_^_`J-HVl0+esJ9%pKCc{HdbIhl#ViZlBRJ)Q9r<KhhkVUCw27~+w
zm~JKq?gV%&^0n`FdyX0iY&Fb()EzIjUi}Q@Pk!N=?E$8z>_#$rqru3zD8e|Q#0TIH
zm(GnD=ivXS9EcQrNJ5`wf6Mw!LS)b>4b%JgjS7JR6V(~zW2zp89-%j>U^&+Z!#MmJ
zmbgb*-&=p-)hK!}emfM0AdkkE{_bej;%Ufd-to(^PiJ>7b2>THp+;Gn(Qwsxr=Fs8
zZigwugu+B5$KDnkp5R4tFJ>>gC+94$ZppetdXAWuGyT&O++Cz?j^CHWMuhWyFswZb
zH=n*u?@9LMRO0f=Xf<?!@olO6UW-%catYf>k#I@P$!<4GYZSA5M$mEX7_KEN_nUhu
z?s(5TT6&`6c)ci%KcY`hqVP=Wcp+5l!*`NQIJUD*O?)2@qRE4?E=QzkDV_$<1x535
z@e@-*ic#F&PdGdme(_Dp+!agF>Rk6hr4f*PdFg5JF=q~_46#D@q6cEY{~k?yH5P*Q
z*{n<lHPPVZMvS~SmA^O4U5SxDE>RZmwUm-Z&qtOEfBMCjWUAAR?^GJ;UoC$6H-gvO
zXO!h{%y$r`ZF5yxDAbUY&e7)psTxRRhFDIS*^!7R-U&$S(bfJ6W_0rl^-GUu>)1VD
z#>j$+;88apm&T(>G0;&TX;AeHrfNwterx-xr4VFhpjyvCGVqC8?51=>W)3ld8wgD_
z^M}{b&t_A327B!Mf{|aD_|FTos~*Wr`4cokZ|Rrvo6<ihDjBE~wec7}moq2DtC6m&
zCtB>&AWRxz0tcLg=gqHJX-1Q%nu;Gjn-B{H9)zEWTT;asDG+1QKYuvbwIuh55*DxG
zp~e9*PxU>19@iFvOb|dirSUU1?RKr_l)NoQPitC~)WY(HWJ-J%hsmt0W+w#QP%&Jd
zUB=d8f{_fD?;)bhKCtcM6)mFGrXBwWg}8%5c!39>|Am-Uh})zWMjo_<pEH*{JgtM^
zuZ(^zLXF#+vFV!-i_7-!r<(!UGc$}!NSCYE0=c1EIxJCA^QV<_zSfp2x^~&#tWHi}
zb;>@)WUehn;oBD8wC=4<U?<v_?y6qlt>iGb`78RYl-<Zb`!S02FwYU}k5`;kxtTU7
zNd9eG5HZVVYJ)G^4>&02`+|&h=9cl)ZZh;lpbl5#B=~?FU>z^1b<*|?vfhk~h`ZAz
z;K@Q1Y$%2&snPd4H}qe~VRT7HU0`>Phua+pm>3R+P4r~J*E#-5XX$Y~(^)3pWQO+_
zHf)>zhWr|d`k|I6ZMF9yf4ECsk+e4(Ya8|ijmy)sC^#XyoXYF#ar^=D>??EnpL<%&
zD`&}~W<?}X|3(mev*ws^DrQ)fY8dCT&>2^{=jM<d;n0?gQT>vup}miy$?A^ijt~9h
z23`pvC??+ngG|hK)|nb6U9+6#!h)&tE($Cuy_75g_der(8Nci{{L9i@ltw<$&}-jp
z5!72`Gd8<M2@5<9V4kX);5$BGe`VFO1~bKV7&BAa#mF5$*~s8u0Tnh$0MV1;SQWSz
zus)>?>Xi4wN|TO96;%u9{EKbT-j=Ae1I_rIAVJ@tbbi4;S)5!Bt}?$Qsi2qB?+_xc
zN85`Y_Qy3aamot6ny9aJo5m#=OJ876=Rsvm$l?1qiyKeg^vDy8kt+GOv12P`yLF-b
zvErdqhP~7L3O=~_vi(DEy0XQ`m{0tzjzF$!KCN<b{H7dg7P#*TUjlRK^@PBk%u6B3
zcocU73%++WQ!MdB_{R1r0|YJ4&~B#P@<{QHcyGRkh5WJWy3pvqBpYhF6xOHl1oTY@
zCu1MAzE2ijD-T@cPX2K2)FWjQr|;HcUuQjKo=#(?`bwB2z5){OIG?U@py$L|hX-C`
zv;zR3Nt7@h{%1?R9wy%9hr&h8e>Kk}F;m}s0|?~vOxt`S4f=*D)J7T+wq8jEbs3kI
zH%W&rK9%Gi0O2T2`lEYGXK|wf)CCdOJA=P**!#}+R?kNWkgm#Og9x^vQA?W-v;y`>
z4%QZ(lcOwCb*K*)uSZnp@8Aq<NjyNU?oZj8J1Wi9&=}fQG^p!Xz+WO|H;_H%2;-dZ
zO?T11(a|M|4XQ8tu|DCDUGnE^Xuu9qfBsh(mp~{M&OTFk4czn8D7$2iy||hA$X!E-
z=49!cZMt!L(Vuj`wc0WF3>6!D^PMkRiZBgHtZ1lt-i52)Q=X`ry*Ydqs36~BypbR+
zM*2dTaJ@ro%0DCL$m8$^pvaszCKHUF;zW*h>oX#PL>dplg7rPx);tx$1%<3;xvp>N
zcNeQL&axdysI;V8PNO9e;ewS~8q=|A-@b}e0g*KvT#3!(8=Dioua8fWiKbEV2Xgn_
z_8YnY`eSK|<E+DRiZmUnSE3j6jGS233mf&s926Gi_tykm+Eo}7O|AD)?1*Oms*Nf;
zzDa$Kwx6%FE?N1>HmV@%mdti0*5wCfve!bcd_NrtMxHz<0)#-wdhe)e*j`^DV(}G(
zkVbg!kL#`=*avAAtf`on@-w6ULP`iWF!-)?fyKcvmf9wRO~kX99E|KslSS%iO`7Q~
z7R@zuM6t8B>G;^sd{^3Ozm9ItNi^XMxo`#HqaL48J?U0nv-+_h%Wg0~xJP!YL4;m*
zt|m#!!ZLnTSD|J;8q=<bs4XmvNpY@~kKTmXuUXk|3!3SJ%y-BnUw8O3FU|N__*|nK
zvQ&A$B173{z9YI|=VZ>aT-|&JTRp{z%JA`vyeSQrs<bBu?e?eSzn^Z%aa{+*NRIl=
zCMf)ZWSxhGi9T3P5G32MzC~jh5K3XZ2xw2+MP(Bg26e|zYJ-t&F;YBJ>!eO}``!eU
ztLe^&vHLzi*%??cAK6{5;~I!Te3$)440utqVO)$thA;E|64Bl9Y++Z}(_6C!^<)JP
zbWUWKQ{BH(-}c`p-IkbsQ_mNF8OD3MR}BzdAn3UAG9b?J=TLKty|xZq<%?_Y6?1g)
zlc-$VY`A*(C6P(dt!Bc=%A{|cHbu>t7Ad8;HxnJadb;BX*FCBhKt$n=56G(L8X`_f
z2^mm)i{;ILFMH9GF4(F0o<Xe$>7}=_y&i7Ey_?=+k3vycxCB_HS2doVR#1;}C;l($
z-bssRh<D(cr2VAS8T~!MlM$aPM~sV@o)*ZZ8b=Ay*nYgi&LZ#MbbZ;x=Xt<he;(*U
z;%=o5{0>(F{EmdM=YF0$`C6i}*P__))fc?F$0ZA&VW{qWZIg1FUiIb${-~*{$$Y`@
z3D83Rk{TQ-3`NBt_i(B!IHwQV5oU0=#AoigZFWRFIlZHtKSE2v?+!JK?AL?NOCk-|
z>NgUoU^;Elo}6G~-{Jjvn6c+p9z4`{5+FWWaz~B}jSn7%F7j7pTnG1@iq!Vli<-9(
z?9lofIcsRN!s)9*KnArYLi4TlV}edEd`<rbC1J5ZRlMpx1`8tS)n|o-U5)|)K0Ekh
z2<R+0PWaw^qx$sdySO??UDhK>5>a#V<M8ytx}I#YqqI#=lJWz5nm36ZT6-9w99!;2
z>wDqys=oJY)?lPuXM&K?Q+j4ZGijo~p_M31K6o?H9F}Xo)e;=CJ8Cv`o&|a}1@<>@
z<%Kgk{D@Tq#OjC*>I2ty(?O0`d7maSRoL(8s8+&1#tY;u^1H_5MZna!iD5|(ni?i7
znwGkn$>RT_xzsgQ{;Ag_r#*~{s6NzAfB~G9u6=GNFF0Vjz`L;WAQvc$9+qVSkbBY!
z9Rf&x8HM|&T{5YCiDyq|1CrO?TRr)0q-3%jzN&Q{93V=~;++P(ON;u(vQ0-z7=RlP
zrpT@fuBMCppA{ub#*VyAEIVg-K>aV>HyXW7BQ(=k_~q54w~6(4^@J~7pAH<=;2W#f
zG@$OclR3UY^E8s<hJc5G?1d|-Rh0I?a|oeVklE4-o}SQ+EZl!EQ2(aSYf~HSUMscQ
zZe<xYte+1FnjdhN3pm{Nxd$?qn{9t&x$=kGA+VrMsuV#96Edv&#NlSbA6mhl$LNcc
z@Y_q;OWkA@X+HLg$4x{m>k$mhOJ#1LF8<$pYJv?wK)IZ&&=K)w%qv==wDa~Q6d&(?
zlJ;hSFWz1)K|nZ&<Xb%U2G42b5z6m>^!|FZBEP2mVvVi^;`!=vv*`&z3ilqS6N(Ja
zu@Vmi+vPCN|3=}23Wg5mUKDqD$!<t%v}l@_-uunh?3v^;?UT2BNtC!zq|QqgInRP?
z#AQm&{k*;|R+1D_h3|Rf{o8lwXMgF&u0zKRT`&r2?C<N?Jf+7MD_i+~1xQ0T0B+=4
zlo2;@Wgv`Oo4P5{EU2-|{+lNY_{8q9Mv8b;mD2>1ateym-^a0{|AI9UF;|0MF112E
z#Z3oV61V(S$)wr{YoRW%-qwQTp{af_(xJFk5QN!C;1{a;>BfQ$z?(SM?)U8sk77x;
z*@Kb%2AqFYX0ZUuEPfR=(r?BjK$3tHMRlWUJ-QUzRIi4L=G3XIv7`AWfSU3mPC*v>
zq4zHtoCbw>&TrK_3l<;}1g1D$|GXB3C~s22{5MK<PBzP6UB@*Cb?kFrb<pX#48cgd
z(cIm*I$A+4zfKb5fLkk^MaV{ADrmN^8x>ReGu3<Uq8c)smxHssS7Lu+5G^NyXgoO9
zW^Q4?LWNk2T}j%DtrNQ7!gU~<oG6etpg&CNrPVJ0sPzWBV~wW)^{+uqd4*_&wb(b}
z;@Mt%qP%KcIFWomDN%XY^?TXs-#~9p*JMh-sXp^3!giQk#&!&ZSY(CW6E>*8-?mm-
znyWoB`Mf+mU!!x0*%*ehUBUtvyH$_gf;@#g%8nXuz981^rt;=dEaOEQIA}P0bT7aB
zHI#t?CKW^y{%->Lqwt?wR4{fCF;N=_ZB?23MNd&9QS%F+iP0M2dU=WartA+YDJ`OS
z(b?QaIrafXMrf`VB8_iSeJ8?8yZB9VFAhiEcyy1&z!9ly4e_x1T7;>H7V&S^*W=uo
zB233bNsLQ?)KXu`6z4LWRZSKsjFJ3NG~5$+w(8cKI%jhuiU3uXFy;QjvE-Lbe+^{5
z^}*9fwi_^^Qtika^0{**Ys1TD56q{<6f#|Fn?TKyXzI1Uf^m5q6+g?eI?2ZcUD#Ur
zV=-NJI?PA~8_nqo$AI9eKC9OHNL6T)+|!u!<H(Jn!1|hvflG8~eMr`%J1!(n1qP`7
z_qmdJptgGErE@bzmG(Ev^Spn5ej&&OmD))HI}{CfO*0%#8rwl~KqE0gHZFSTV^G>$
zcNj1jHQLUS;*ttC*UT4_bzArewyxaIGMh#}`Yu$zF#rJ|`IBW;nRo!WW6%og%xQy<
z;tHl&Fo!$y^SjL^*Aq>GJTG&T@CT?Xqh<iz8Ovt6(1!;H_D0QNT$%;Ea3X)B@|!1I
zJ2RAcdpYT_AmBB(HMGTB{r#@Q&>ZV>_YvPdn`e{Fj3^6bmWA_Xq)0g2bng*WD{NX*
zk82ZQE@)lkajx7K-WljFRz;lGdz;TO?`;OvW$Cyn=^P+fK6!JettGgU?oK0NtGnNB
z)_5EO@24{vi3Xe`Udh`=CNwNAhohj<UJ0YGtzT<zPq)GZ%~+nLP`-we%z&gg<&EVN
zu03o}_UxPM8C|J^1RUEHCmHj-F+6E}O&6$eyq#8hyjJj44%RGQ0lZrW3V^^Pik@^=
zJE?HOKPv6AXK!cC@0we9u0z#V8?jpN()j9Up?)eZmPf^E5i}a}D<q7Gp*Oa9p9grk
zo(<+|=unSJly<2LbPVg8Tyy6wpo{T26YqA~zo6R>_nMN%H*xwWcfHn{oK^!9u@(Y_
z6<&Mm7_vS?k!m*!P~@ma@(XxB2ffL=FzO!v8{gL~g{VCq0OxnpSvN15?*-Fva{{u_
z2^!vdRNXBSk>))i461W9VDnB#brm33u>p4ge<Q0l&0px=j~kiJ9;5=XqTnjNLZ1f7
z*{IEEZT~cX<0O2TLqs+|J<x8X!NB;7@>5yIW(_#4g!nU`iB)Js0piH^WwKP|?(8MB
z;xz%mW=DgW?T_qaP8289@MWr0X~(xkI?quPe}nuo0|g*syzcic6^;{-(Q^iX)d@ZW
z9Zq$Cc@!F+%<}QGirtw>;qoDgXg^xNo3wuHZ*rbRa>}EvX6Lxzj{cxPRUkp}HkaQ@
zf6@bsiEU?kf$5-iGV&ukLceMR>A-GizSHFI616{KQcxkXE2nULI5_shh`=VZhnlO%
zJ<;H6q`{HB3#UALweJhzvJ}&Zi8Z@x<dn=|nROlW(oeAkG^BkIXoQLPcxmBnTl)3W
z)2?+owExcJ#7Wv6>c@#@7UPHasFRzIs$Be7hfkvOH8P+l^S>e6O2iJJmdUJ%_T3O4
znRuW;Z16TXtdIx<De%%<tHx9r@jXd`l4YU-!+^X7$i_eLw=c0C0Qu!oLZb?Cf1MlS
zSnnS&O@!I2w8Y~)m%c$isSL=uRZdRs0>-^^yMUA5wv}61ZW&G2|Hg~ER^B3b11xtG
z&jdaRuwN`ZuA-=|GeD=~+MAtg7Hvaa`lOeKq}D!#0HXl0Q?K6)dMpPFp7m@ZNZ&}B
zi-<Of3we%|IGc8C8+&ysYm0NUZ6XwP4>1ozr%Zje;=m`~umoyPlFvct4nQP|9&UgE
zwbv?ITC7iMv%Rb~&7Wj8KhTYcxHzA8WeJot{gMa<-qD-{!`taWyTRHI__YoI>=$_o
zz;mFCYa&6g=}kdJ<!diKWiQf)o9lZi9}m2ugcaGiFpruBK6kA9{n6U}+gG?cpcifJ
z><Sd4+Aj`XSgD$}$Ll`FeO?%@6Wg}{OjdfBjcYjQ_G<%*8V}_~2EM}@9fFf(%RBD5
zGZV$md|uJZLn9g%@@LA1M!)^=6z8T>ThI;pBL-AQzZ$n8-T9?_&VWu)2$qT*4zWUk
z((U50DY=Ah=KS|Fb?b#7+Ahs!N=V~#J0*9bVOk2O4PGBX2ON-29%9F8UOF4#u;EMl
zR}}@Bcp~ps*=9CzFy&2XC0ZeBClaS2wLcaPrU;SxX8z^d^uH~pg(R@|5e;+2{Y|H-
zIYx`G)`9Zn_4-YSc>p;Ou4e@E`lCc_U(HKn+|-Vrw5;FQEf|nPL^fc>{>IVSQh4vI
z)}^<H*TM?xN)Qj~n;`QV)ySgi=^JffF+U;yToSH%EJxmG6Gh9pC-!xpOAeJ0N<;`T
zG>JVQrXdG*dxkRVBkd#4OhRGYK>>2)x$eR9ciqX}lcZv>&FbB(=U?(I&`tU9v1Aj;
zaBczpe4-uG8KJ7tLHXb-ZM$0S#<#|}^4fv-+SvMMnftQpT=w;t=q5W7tEq=U{I9ZW
zYcAWF!j!Puxdqn7=_un(#8^i(Cp&S&A1t>sRG#x^x`W+?artCt=+J~Nr%%ENKbJpv
z;zSF?)}U$c@NR;s{f=1Tc-N9EQ1ouk&r8#Bx-XakB?ne_tQ8b#!^@InS4LePa}3Ti
z?Cd=f(Pe+<loA;uGxz<>9M=z6Ep{f|MLK}c)LndZ0t5=yXLB{lrHQ`3nEbA0v#NeR
zVNdvm*jrclf_~tQ@uTGo5iY;&DzIaJU(U9>0u&iP5_RT$oOtYh!}WM~8P*p*<uxTb
zQDJ97M_!~uaOZU;V4R!PE^|oz+`U^#nl7EE-09I_U<rV+E`Fcm%S+<~im}jm&;wad
z!~4;I%Fia_2sTb`jf$rV?iQ-{m<*V&EPV$54i?=D+|9Q|_3~{Sh|-SBh5Bhp1IV8f
zl93d6z&CsqFXdJ_u<lY*`6>!f3B#Df^fs|_F}&Q(A}nBY(tz}lLS7ogc@nbRIQStP
z|2&Pw^nU1bhH#73Mz1rQ32{rvbA{?}Ai{U9Gb6wU<RKhQ(~mI0bb@98&SgN`6+qnd
z?&k$5_6!dI6ZIFsYlF@L!C3nFLLI8c{b0(><!8k_x(kaI1i<RGsJCHgU1FaZ$`UDQ
z2EAuk<!F#>L4WrOm)t*~G=Cve|03H4d>^sjw_mg0vuOBVmPJawim`0v{f>ayEq^ZE
zpF@(;QI+tsDinv9A7PW#YBp3h!Qiq+a93V>kg%!WQKb)YlbrkRPe5twZg+=_L-CCl
zf=Bhrq2&Y;QOU7!6Cvu=GX~GyP2ntnwODeUVB|AmR9Q{3d#tx(GyCgDS>xK^N7d9i
zuJ(P>n0V?c#34~}ZicA`&URcN0<iRAV`j0iZMPXQvPt$}tKBIpzb-b#0U_N@S#@+G
z(tN@XQlAuW0>s^@UyZ7=-VrG7dda0U@AQE2uL*8JfLsuMhU~nj1ECWyaLmyn)f)q)
z0TWs;1e?HuO@}|I+W-~dF6!yd!WT3Pzkwco=i((O;C7K+HCRcVzIrsyC2g-eYqD!X
zr%YJId+x2Bs`AJsVej^)hzrR*0wAH-$P2U|>ZDMg_8tS<c3@%S*3wQJLuCO+(z4!g
zP&dl`Eo2HX=xn87A<fx~%O|x=e@ugFt-B8F=`Sh}PGCC#jYJyRIW2wjN3=>ic$?fw
zQ2#Y7y`1_;;dtfCm~Zu|<qU%k)t57l9LC*nM{lc4S<FsGJoa=O$`v!OB`1GOAO|IX
zw^?Uu@A-v8I26V4*GULzSnaL!LxxJBpJ=!PJnC?t<zn(O{BG$PThu<p$;B+2`Q(em
z)MBb*IDQ(}uP2B4E_6jpAJ(pO(X_vlllZIOWBhr19uTHlm6@qv%r0pv3blTthdW2u
z!`9}fQ8#neTr>bdH^JJXEMThr;`J=dh%9Qom{9oe>+pT*e0n)^+?hv-E>O2&6yO$?
zfNdv^yhL)(Y2?uBCKQZqHQ<}1>QKKydglbv^?`5<z;0Gy9wO=wb~{0T_^XUxKR`P;
zrt8yLi93uGzWV(TEn4k8edOXeUE~k&p4>U>=A-30I>D_bq9$Y&xf~D5==qXTR(+2}
zS)W;;dlAbOu+lFz--Dk+vT~iV>;;ujy$nj2bYx<Pi!ax8UQK@8Cp`{^zRgR)(B0ML
zQZ>5q1JYc#u4)BPQO{z!hvC`G=@xD*VGK%ri031t(Q{{#F#4IoXM#3<sdu0;B|da?
z*X0cN_W#%u=4;T}t$(Auz$=?l`SMp|7urt&T0O<^$u>Q(bbI=@J6wafkR^F1>}P?!
z|Awcl+)n$WyUp;vZ_}mDfLo-1L>g6=s+g+{wUv`!KRO+jl3(r}oLKM%n`TW;L&<Gp
zL8!*A*2Ga$cZ1B^HtEpPK!Qp0m~)u?9G+>V$hml7h7dx)vZU$MRQ`a_dpTFPrH8s6
zWmoVz*r&LZLX3~9n>!}mt3_mmVxTYSv{;w=rF!pd7Pra`aCKig_(j8wjF#Q}()yLE
z3xN;)3la0ytBf-hvvn=tkmS%0%-_w2ebO!aVLBu>avdpwP0=}^^0eZm5^77<k)4&i
zuN4}rUCFDr)22xFbWimrAw}PA&*=IVMqCe)5d#WM(ypEZ;i&df6o(<L1xT@O*UV<W
z#S(Gb8xK%G0P332Iwqi-PK>5i^o=1-C#P`oi(d_|clv3H6GIQy000-T0D^YoeYa{^
zvrs#E$V9V19Vd#S-Qn`eBq6|u7Js<xsoxIRxlLHq3j&-$Sog7wVgQ_w4yqmQ=ua0+
z2CdV<L>jk&GQ@_qHHcOqCNmc|zM1My<`^~cwz|wM`lG|P(M=K8h}ZU5t9TV}<4{-$
z2}p+P>am_bbChCJ@)+kt)i{&W@ohgm*T)NFa=NSl(UiDZua+7#aZ&V4Qn2dH+}@JK
z8U5^(;R!?_7Go_D&kQEHk@zwUfFw9%J+QKFo?Xd?>8RIg9L7m%m?|BWU*aZTpx42v
z>9N?qQ5}x&KX`G0#lJ!7{ucSi^T0jfNIO75jJh&n#_Kih8>S3~S6QSQTW<lrIoKIB
zSeYWil&Nc0H6DhI$%qW_k&YAHf2<oiyp$Xp0vt9Fpzf@OuAYwKhMqv`&gEi-n!pXm
z1M}9y^xi8?`k989;)?<rE~aPVg!m{}9K<B2=*C<TF^uLnljQ+r1#DJI>Xd9m_>e*q
zt^An#`OU}<&DB~;`3%$k(l!}^_A6_DfFDiOZ`CT^%U<&ybik1b!{GbW#xVCDfAiu%
z`us9LUp{bWX*KZQDs`{q8E)wCWspDZ!He#pEJFFeW<UoXQL|tYKDsGSP)SaD81XR@
zr|bDrtG0(+C;sKW%BAznZ?IiWcB<ZF88!BN4yT=fyKYoraN+aX?;g<H7O2uv+`7Rj
z)049FMI?g*CRk;8ne$<VYnP}R_szUiH{%LN(aLM4NCyFEUp%8((Bi&wO_euJA@toQ
zz?xCIM<?(mNvDyD?MT428&}#pl9E`Y16p2Q-k#S|fB{%rp38qDpH1qmYb1wgS(kbq
zOn5{(-FG**j6c|aGw>O}L3Hk7;9IXTR`@<yt-|^~!~RC1SLsM{foi>%(+gsDuEH)y
zx<6^LX8XsBd7yM2e%0=Td9*Co0oI(BJhIx!)Sd#spLG*C(g+6E(O194N(E)pmD_`n
z`_kV>6cp8I8~gm?whG@v*nQ^b*Bjk+pDtg<K*q5MzKu;t{)D{(Iest5&@vnw-$?8`
zo~Mpe8E*^Ai(T?CL`?b&#nGt6aD^p;czWac(9JWSYnCRU8aoA<8FDcoeFHvWDRK|k
z{x>pDHl}*ok5^bLc<u~pbma0!-ux>pl}Rhs*)kVUbZ>Y?*26f9?GaB-<{G3se#-5g
zQ<ZLD0l+FzT>{?WfV<fEXG0QIloO`ndGIfb{%V(Iz~P1aL0}D>J1Y@#H*vG6gpt^!
zU3D=dKOysPu}vlwc2hD{7_aU#8R|Aonp+ZY*vy41H$N-C;6`oonI8nMLAPgk;sj!c
zbH$w|D*ouxXD}PlyAG>%-lGY3dn}?~Fd10A#rJ2gUOB$uo(4N_mPLQD8JX$OS0Nor
z%3%|AdvlpxBH-hP_6U68Cbr|ZVzHg5Yf>?LDy3g&L_lTdi089Wi6X|Kn_nnj`bN2p
z6~jloqO1COif~QD4K9;9!3+g7JMb%{aI_-sIze&UwSi1h3tdM=zfk%)scP5&;6=tL
z0YS@Yt2=5r5y6U6S-WfiqEK)%FR<*M9XoKZ66kf;ty3WA_@)9?a-Pk`j+_@npz05A
zAC=kcHx5NeeZ8lVoXa1?X_Xl&+wuNVkJ(t8RY&9*?&9PQJbCW-^rIR{K`hjPH@9U%
z#Odh9w>wjkieE4}GuB?+O4!;ZXEWNYz%S{)fP(8og`>T4pVO%S!`^#GMU`yr!w!ll
z1|;Vo3aBIj$x$V!2#6p#NrQkSkt}K22sF?rN)8evOHPs%ng&Udktp5doOAf<%pLEY
z*I5(vyx(uV>#q5aaiGqrI=go5diJxQU5LkC$kcldu}|6JQ)l~6OEah3N8oGJm;*0b
z%q-GTS*I1xjxp3zD(JrXWQ1BSRJ%W!(@LCeJ|=f<?uF>h6M{rbi%WniY?$C&SD#r*
zy0b-cWy^S+*Qq{sh+$Y9D!*!SvQOAKf7ZZrBVS}<IQQo3;^yWD3LO^)6E{Rvw(h<s
z979LlJZ~Rn8q8H{AI{dx+$In;2C{w`8{l?BIS^L$lmxA}asT5$Kq&7M1Sb*WvxF7;
zs8zF(GVOkm#q!#%9GuvweXivIQU2k&QP&31F@`4|kz?7@{EC=T#!(;NB^REuv_*+U
zdjV6X2}!+1dxL&0Mvfn-c{tQ?9U_oKh8b00%IwE8U6)2%@+^XuGbdiM+$I(oxnX?#
zw$hdNS$aOU4c&bC#5L;TH7^M)J5o(gcDIW>qx2Hv8#L1+J~MjGPMYJ8_Ke5m`ZEUk
zkI1+?DK`!HLe;YrZQ|8Jt>vFqO}gBzSa<So-K`s{7;TJ@3#w5fo)VL~b*iD`I2N6z
zPqP9LHF<+jA&WK&9WDv#iH+LWj|}|uG11RT&Ad?OqQTc+lo;J<7x}ETJ3-4}SY&(r
zK_~lbp;NSXdo_bhUSgv!-xK8u!^Z5-buHbH<ma0~mXh3m?IJHR^-j#{IM1lt@XudD
zvk^x+_|0SoUyVf$YQGCdEKzJ*Mviuz*%7u_eCcfBSz~`Mzu>3pj~-nkYab+TQnqee
z2@SipzX@|A{Q)HC7$~&N9!h`poa_hw_*YyJ`G6BtD%*zCRQ^Ch@vGaDsUii{q#~B4
z2|s{VevQ&z4-kW5*xomM=YItL_;r*|_du*q-=sqer#?No5Y(EkI9VL^`}%G_z`47?
z01{D8b2a3zeg7Xnb#*uVss-@x&ocQI6cm@~)9wEuD%Y<W%70AecVFYb!({$3lRw_8
z|ED}l?sX%(@(r=-IFys`>P)XfZlY40ZN(fu!nWMM++(Xl*B#ad&-Imgbc~B<wWKL~
zuiUK$pxTsxOGXM(^hy^ocUlsz;`4<3jd9h7`EGxBOe6W=x;p?3AWT~x+<tsQCDOQ}
zT)&^q@bw_rhul2%={30aCb-mI+`{x&W|G?H#|ZQk0A()S0`D4s`zzU#LavL$P(A%o
z+D%01YEMM=;I2Z#d3<%Miqp$K{)oTZx4(-=*5wF}oy&6ReY@wk0xDmNPhuud19+Jl
z@O!RL=dYc7{^-X7^{-Dpk2pZ5ZnUtVFy{~SLL9@x&<vvIppev)M&vwHG`__9=_J)u
zpJ=#{rC8%T1UA6`(Q#3BCYSk^D=8QYPv@@#{qD{G&hfpzL2yhcYkkJq0}lXD@2xqn
z(+7_;P>{1Ld;5@c)PQPsz?VyGNxhW@NsSn<^*e>jkCg3s{!;Do;a%JIIGnX*na?GJ
zCLf1t3ZT@~;^Em`GKDINjMu%N^RezkynN`}mM8CT46sr;G=c<$2oTGg9s?R7n9?QQ
z=LD#rj{#dhB-QYBX}0;12Pw6zLI}JYBZN^v-J}L2!z~5z1@?LVD$)<)Z`fty2pOpj
z*q@Rxt1bjK!w5uvuH>aKzk$RUieT60ce>&bSi+AyhOhBA`9R7n2T=}Vd;CODas7)I
zYnI6CK{HToj(Tw;qpAD$E*sd8fW{*QZ)82AU=ps3+@|n_`A5#OpkDpjHA9abrSu{|
zws&n!Xys%6_aX5EKOhZx&RY^usa;v<2w_5-25YBYAAi}_6p)s&t64o<XNvVW`9pU7
z>j(A>tK?$TlGrO1z=JXp6u7y)ba;A<nW>(u@Xk?Yp;CtiA{b$z%$Kgi4LL{*DA8x*
zDgA<ODPEaoi>*tE!%1y1Q;|r_Cr|paQNmfD%1r7|w*9E7^xQjr4po8>ELQ*6rhFwp
z1R|9IK^oW#6jjMZt)+J-j13QpU3>|tBP*_tR?K<P^jd?A6WxWP>7pN!5&7!6p$WVp
zK>d;=T%2cYNoo7g0+8YtP1J_&w4k6|ae1aU6XsVisyW=ikHowijpk(XSkKTh_Q8Do
z;Onuqf^IDA<}2TvjG#?Q<bd;?Utc#0KEzcJk*j|)y$EPEDBx@S70I`Uo?Xm#Eo6+>
zoRcCA;s^=Yf@7+O8nloHnYAJj0R;>5mz`_w*Yn&un=W#`pzlt|`gE=VpX-Y(oL|4t
z12}>D2*EKiP`|33>$2VAX8h)r#+f6Wo_jka*&`r7F;-T7LW9fD_Q$Hc|K%DhZCO9P
z2E?fWdwZ*_T`>?D1d%BZdhQ^mteyM^%C^9sKF1ks<o?wG|A=p@h=qa?1CI{277wg-
zyz9~(wrB>8zWY=9an00*#GJwE@P;pwd32O3+G%pZ4g&A$gSiziol*$!^%v?FlG<I*
zy<&lBwS%*%_aO%jUcV=#Dsj@6oGsniGzYw(t7feUS6e*BJaC{Q$ZuO4&PP5lsqy+E
zAr&Y=Ww5Q-(Bmo|XEnXX5#_F-=e6^e&!(>^2M_PGar`A3d&cY}6X`rl+af|pjhe~E
z#sus?4wxB!G};owKg1OK8pzzhLJ?Q@lD`>Z0YlA6suV3Ds$qzzg0ySk9%qicP$0R#
zVveyfT#)mu$0o>ab@oKmRQr%CVquxhfl2UD4^UA9!JyK;0Z!9P&izX=3@)EqNK;zl
zeyHr_>mF&4KprI5>H`uIxPcPevq5xH?y}qSRh2o2{GCM*V1uL0Eg?NV3t`<Dsql3X
zf4~)`lAE7LVj6`9&&(FhY)+0Y<f1E}Kzbv%AF+5EiHY$aBY@#WZ(RN21wu_An}W!-
z5hv!-=s8gi2Vyd0{bWRdn#!zjl5p9xt}qF>Ww3-pWdaq48TKr#Hvx}e1Z!W$4qphZ
zG)4t;8zTuv_gr(+hNfHM6%;DUcPvG!RA7w!vy3$%-F2hv0`mJzUk}M2388PS0W`_c
zb~XUUyBGxn$-Bsr;P%Hq5V?JQd71tr0AMS7Cl2RZYAXYYkYL@L<Ub^e_v<0z$O|yX
zwb9utF!sP5QGl;$+gw%h{*jOJ>!xcj1DINWM9HbIYxDzSg^ob<f_H3!C*f?le~jeY
z0OKDc`PLZ!@g%?Ve*Zg00)_Kdy#-1R1`f~1^KM`PA^Fl#TCoctVM-R`H6YHe5-m~B
z9eVgjk~F`1edOkuPhSX7^*kl&4s+$!>G?HxTRbyXTk`7ma-GNQoEq2mDhG3I>rS(#
zrQc#*)qj=x=CQZ_nOk?y8p?H$DL!gt?a)cnQJhi4=*T|Sd300vxhxmvH0zes=R5rM
zJN@Efni<tE!fNr(p!yrZw6^3L(>xX#IVQU6E;&G`s&|tCBPUn)v$5>u%a_}Q+ZC*p
ztQ*pznE_Aj?)FHg7b-<9X>V_QZcrA6N4|fFC5-@8*tZ=52}8wuY&oeK7%)9~LTI=_
zMn^}7Xo-6QG~d#TCPu|^;S~ckN+~s&eIut~xL%g5I09`-E%%X;q&UNha?VXZr75%K
zXmaXfWn8p+rE2Ecau0>zd^BF_T2PE>nJGc;v6T_z87|98x<t+8tu0`NeVNi0_xd$U
zvC|Agf7fL2bh%cjL6<}*AL7n*(UJk5MeFeB3qu$uf{YQ{Arn(0yUF&6g-U5ApOV>P
z;k$S5#+R3uPw=wx5~GOY<KiTqMtbN>3*K9+t*@^)+8hJ53Gbz)&fUDNKm==9?;prH
zmlaCP!edY>l3L?MW<S=1615-Y5q1eBKI=5mdbUZ_>>k5H+hzU)s?*~9tK(&=r|IYg
zCfQ-cI6uqO6N0B|>FCfMJ9bP}Q*+Hfx(JaZh;I~*Mt>}@ZktkzqU_SQt%ugQ_|6Z6
z&HwQpdCHKfa=W&xHV1e&3iXO0rha;K954}SDWBJ#iTL&?`mR}VQ`Bx$;!w?KKY!tY
z^N-B7m}f~5Sikz@FnGgKL&H`do|82-?ajNv`rMnxa>c(VyvLyt#-2TN!aPbwnTV=c
z((E3fb6tHN6BDDcIUb+deLo_KwI%dQ*U|s1+V{Udvh(n;m62WL&;7Vf%S>;lnI6+a
zJGjSfxVb7O?<-C^4&OiIZ|s^=fn|&UWtrK};VHc=oISx#FIQ-zFYuD-fw^qtdj0!s
zqxT>DiVy$hFTU$TLcjb;44Hn6Yj+}5F)k;^x~;9yLXFfiy+x`=U0v3~!op#0fZG>^
z5-^E&p9Dpv!ve;WFD+;t$>Hq#*DD0t^jh1?L3XO@>fNUUV`7*IpFB|w+}^=u-y4b(
znVLR=n=q5d4A-fZyYxhU8zg+szR)@hJt|Vb(mmm!uc7mW3m2;G;|=^`D=JtGyzq_Q
z)m=09qG3Hi6<WTgXl+VDLc+muS4&Gv#O89?!n8eaH6*I)Q&VG`*USoMxxPdkHnBFc
z+hVq&f5XNGoj4ww%YM<4ZnA6n#d2L4QHVArA>X*TIMV}EJbDz)ByKDRL1F!AG97N7
z{R!W*T3>JZUu{<BOkh3|^WnpX+WKbHcIoyRp0fcs6PfH}k&Te_LW^GZ0O{3ak@YV-
zLCBh%qv3={sMt%mqA5uvL?m9MVEpW1I?Dq&;Ew(Z9T7s!DDLDfDDL1*S~cgd9M##N
zC1v_CuiL3aA2HkK3fCG<3Et6a>3uZbnkn>uwr8hF!6ts5#{(#n9bP~`Qy9-Fy5P$P
zV~3f?$}|yC9YGP}Kh{61A$`XD;-bTpwHI1VdB^cInGekEn}s6~W!Ad>e0npU5x=`-
zgDx#C&HEIZ4b);8iDctcjrjbH;h8{|&H*ZL_8KoH%>e^5Ym8<b)OSV!4V3IB4h1km
zkDmw{3DV?@vh}x|_=fN;KwAWaXbKg_3Q4uBcFDHkT;VkirBfj>$o<aflG&n@r?NzB
z`rNYnkC$-lNBL;XfBpf!%72cCgaaC=O5A0V0b237?J7Uv-9ma>v_O*tFWF%v<|qvu
z$M}f=nNG|_ML_{#*eYVl(b#84eK|83=uF?dq1`Izw<&Z1a*6_XVecyTtfH>Uete|;
zL2M`=9+%nGPhndox@j5XQn7QehV61Q+NQtwPP)fPhp_P%10n@|eSP`<$8fx)d6-Nm
zsK54XAhp{trN-beD9B0jxh}q>k;3`7OuW$qWe3h}Lsg~Q+ubJkW4JD}7%CvBZO5P9
z&2~Al!0GDrc6=Ew%6XtZ8D{K4T^nAB%f{|<@oeFrOmJA6n|r^rAHzH(JQ8uqPf#!)
zL<F+h7FS=s3c={qW%yz+n2D8?iyj^x40gi{e2WW7@qF(FFTx2((ixy5!*gMQye`Xl
zl2`ikZ97*i#3DB%*|3(_`=F>Aaa36BKNk1Z8~^=(LB8S$6a?^TVfTeudM8Ujdmkm1
z+$o*huv_?4kE`Q|0SV<O3dP{|x1T&wKfq1@w>Ly)Ld$7vchzorwnJcZd6t%lxzx+5
z{4;yY8_TgXXL)?$;yxrc`L3+2@YxzTUJn!FPEBR6*0n|ZC_F{`)deNhJlr@^Zcs%G
z=YV`IN1#ovW#w5Mhl?A}s-aUgP^FT4B3Jj?*kE{MgiU2k4#bjApFT}aOGEYauw|Ps
z#DxkM7Q3dwy1jhSC94IhzlFnJa=tt0`i)1H;RN8CF4Bzi-;4SKKg@$x9C5rzSX(q7
z0EKCX_2F1HXnM1J?EB62HxqsfnqgQ8#vXw+2mz}6H$#5^$9dfW@a(tj4zLE1F=`S1
z&1e4pPm`wuxUU_Ld0-84h->rU-}f88pD<DbAnFC-p9tX$@)J^S@cZZg8x#0+7a-vp
z<i)TCVaXb&|2Dw=u371Tjz`^hFHyr9<N%ciXvp-Nxqav7l}Q8DTe?c)aQx-Zz**SB
z+UMr~N1R3NW~DIz3&z`$G?%AaBq!<VjKPI~&uukweeM~v!fCR%2k-yhsK4W1zDyD3
z0R7b6%_+?8)*R(v?*r8Mr`XFBR8;a;L6AT}&9UU;V`82yH919Zynw@~>X)$?xQ^r(
z?LO5t?#ZJy%)Cwb9gq9nNBP7Gg@guP{kO6^G$JtJ;7sc+unzy=Yq-*WtS$hxG{)<F
zRxJstfv4>1zn7MQG9(;jfbm3dThSn-+S_RjdOn%e{Q^{zgxL*YLNL~agWP%DWHN3r
zY`0SLkO`2m%h!zdDfj5QDy<BT<&7g$HPhO;h{?PO)f+cX=odTq<`+Ba+W<LPwL}b0
z$t-yghsssMs^6{5_v{<<G8v77R7pw^q$HC3tWS@*u>hPgE~8v(GPqsNz`%fll2T4C
z!dJw8zK+ibtsik$QNZ72+DBwM2`hJQdK}h<*9d?XbgkFfsJ*=tQ2NM?JEukY>}%3T
z4w9(7$ISMZU;<AjVQ)WUdU;aNYj=D6vl;%%1))3bN-$P>A2Rp|SnBNbQZBkldgHnm
zY=h%IB~CMBnPr>T)eEd63}PnJi<AesjYk`_C&GV%VKBb{NW@$P!>TdND_TJ4LY`K4
zO?*Df1qe5@lF^#Nxe&>`egfTY-EX(ocAEqp6L9g&!v9Pouo>kS4iEFXkBlVYQck9$
zpXt?1d_v|U>o8Mp(9V@{6+Rf~V6>1fpyHF;EXKCDwA6Nu*-JvIp!)&#$_4gT!ToUD
z_G?E1QF^WEL9dXa-5$>P%g+S)AA7nkhS_aJt;wDi=Z1M@I2CA*#LT%TIqR+Wp3I)O
zL$8n-Ey@3qiB^hVS;FF;x@L1T%)8fH^4gwCoN0&w#j97=;nC%BajczM@%jm#_4Oa)
zoadrdZ{B=ya%owh84Hjz${6Lym#V_BD3?0C5PqdngZ2mL7(4Re!|gL%Tz(H9J~Wl3
z;?|)Ui*~k?SXs6QMDc3VCe9x}ltEnbmKvH{q&EJPwDg`OA;<;+Cmpgql)By=VXJVu
z+zCYp=h&|#CWbJ;)rQm&Cw0AnC0+wP$T9kuDU{JXY8K%o^Y^dUO@u}5$-BW~2{rRr
ztUAMe)@N~Xal9i<VR`(sWanh3V6npl1-)(FMc^s9FY|ltJ_KEz-0)qOJ?VWOYoO})
zorSS@NGfP<*;&cw!G?+0z4;#VV%X5m&TcXD%sI~98c@8;^yqk>@W+qW1k6*@#<09z
zj&~%M=Mm4ZbKi*+fM+1=kbz{n_m!58_q?%pnC&~eyHFX`l8t!gHv*Ige1UYR<Y;4B
z6HLqJCa-O*G|rVXs8$x=WdW+D1!vBkyPF}j!?ci##}5sia@20P!3Sq5;0ZI8#;pm-
zMQ3&$M&|HYF$|F>9qPHAF)2wTKC-OOVQwW2J(jWksIxD2cbt9Pp7oQty4D4w_Qd7U
zt{k34ZPCxoDYUGF78GF|(>muMq>-~ny*fdq20|K}!YQYg`}t|LtgKR^JYemfJqWZj
z1_z+=rH*mGN?dzNTm0bDUT`}ygmY<5KY;82RCl9F8@n}q;X4PYuw`4GR%?%T>ne?n
z+0GXqfN`#Bl@UTf<IY+?Rmn`TeN99;$SUKP-;c?%p3DmU2?3|pK!+vp77_#ept-rZ
zRxDOx{q+uB1&F|njF<wTaq#vUjreLm+%uLRnSPjSR@A6aWU4{Ucv^g}=9pKB;DD#w
zbeGhElpBdR=#xh->E_U^wbe7V=kwEk65nDrNBCeqfPy4OL#yz<^*jMjj!;8cB(N{e
zE_CBnYCxM4ol=3>o#f0dF89!o7-o9wZr&yu_xo1a8|;8ohpw&PVlV^YQg-j`7FO5R
zf1}hK4q@O>-Zd6W0u+{ME4OGGO`XVGP+l%|r!ktmV<{Ce6ep*ut48ndBl|KqSXNF>
zZh7)^yhY?dAVb3H_I6Pa{`t_U_}KE>6KXYZj2{3@P#y(iW@B~zw4zU~ij$V!z(R|{
zt%ZoCXEkcge!k%t!FpYIyin-yAVBHb<h%B{t#L#Clk!3P<mAS}GsR5bq-Z+ITeryL
z3JRQ_tm<Be;Uf;Ymq9?X;x$F%D96qKsWP`3B+)c^giW!k!$hCxwQIidSy@>rxyAsm
zRoB$Swp$1oZ?7Nbd$26NFz)SD!x3}c&vhxa;(rTpgpy%uNdYa1N^%s`lpK$IU7v@n
zeKrL58g+BKx);UCDJec6D^@f8**?5*lkI!%EZ<%_%Gr?VN4Pu{kMqEBvWN060aS_7
zr2s~H<tKs|ppmsn2J3$E53cm@<@*O$`nRqBU%{3B0il0&RsSzQ=o7E1F#GngpS~)4
zQT^YW;*Wm#zXC`j(@D4rtb5rXtW8i#cIt3K(BnX<E1%hF-}*d0)mt{MLq^f?b&kGi
z`cBk<s)i1of1Rb~EhX=XHZ!iW>QER^c6u;@HnrAtSEeoKSNU`IgZf5<|8YxM)!VmU
z2EUTGxO$a8Ce(X#a}%Vy&~hj$xs`3gg&s@WYJcJW7M#&-baX#{49mdOYm<8mWI5%u
zwY4dR#}v*HzjIl@CBIGacOG!%wRtx)x6s)eA9S*=V^MtZ(~k!rS>X^8wGb|CNT<v8
z$QLx~^85I)01$tcUu9;Nm!C{cOGDt2f^e(7&oKVNgV~q#sY$l#F4}D`C@3@oWYwd@
z>3K*<Vc!<FR@QkyQzZjU#$@$ehTgPvcNg_J`u_Nv$*^cbbiDPskZ7o!I#X`W_~T0p
zyOvLic%ZzrB_E3!jC7XYUjMQ`-fb=a#YK#*Q$3&v)&N;?sHLy*1)&S>xk?%^C=f`7
z6Tf9&-cdPCmTffjAymLk`FfPlDPm&c@M2!4sU9}sBS+e%!iiFpQ6(#b(uvo@dh~Q=
z=Po{4^_Siqat6AebhKk?YxL5)L7`ElhA~oQ;Z0uIQ^rcx*4r~rdvT>lcmiY*tcVIY
zs9EhTWcpDq<rpb}r)U?6*^;?fD7q;wE>70ZIlcH|kCK`i$evl_+SQc3cS~j>rvpMi
zGl3>j3f0dQqE4jD4=o0Kbb19$?0HLxbF*KYTB0)Qy;&svty?h{`ZLqhFZAT4cyngb
z&`quA3nOOw-YwyPpqNjHf#(dpqkTiS6`UJS&JBnTnbPzOB)#Qs<<t)WWx^Nwlu5jW
zsM`jf2K@KBIRVl1F7&ba4HO+69hWzo*y}v}X;((;zO;GKjztTIoEjIgA59lo4~#c%
z=(fvFaJstG3W!mlT}G$>ZRh^>b~`=~R#6wAv-Tnu6Qh8rTAa&W)<M94`~qhn@^5<b
z8T97n)8w~rcjRX!A2^`BDwa*uu$a+fDNVkEGbM5j*PfmTarX0^GNkRNRGab&o~~W5
zoqujfcVA+2Jf>y@0B##~`w&YIxvu+OkTs%d`duSi1)QB@2JM{g7lrd5mQEpp{Dm93
zi|2Nwea7U=XaKzwdtBU#nncn?6XZz}RKQa6Y?6quP_gazHgxi1u=8@?+tM|2Fune^
zY#djQ%i+w}Xnl<j(N~Fr;T26HWM+w|6hMV?gvmiF=WdH;nw`~d(}9k%DjR=*T3kIy
zA}#GW>q?Cg^xDu(5aZ^V6WL6TsbQ<AU;+1r5K&2h0(QICGs^?=4gVO$A00q{<4P~X
zb9mU@$Zi`8I&cW~ycyI!=TfAB_RKbK!8vdXp2<9e-YZ{|&$Cc_o*^tGBwul?zy}B$
zBv~qwh&j&EG)oCeJXoDBcMz3SCZr@fDsjfZb;aLA7&}75)P_0+=e?+o3<G$2xlP#*
zbkRKp!PA+^sgpt7?rDsG2}{e;XS}3@4@+Xc>ZG|{T86_iqtQ^`Zn}zu%ec3Ndh|dN
z(X1wV*?(7fz5j`qA7{p<<)Wv*p@gY2j62<Zc@{H(JMNk%70vc=#)0b;E$>u&+f&d<
zWg!1Lw(2qoBSqKl$fDo;kYm>%M3R}|AF6351Rc}S00>WuWBnYKy>W$*q068|WhrlB
zZT9vW_Atls0QEw7I2>`{?;?+It<JUyc-qf~J)aC+$IO56#_on4C5dJNbaCBLk7)a*
zFCzG5LxBA3&8@59qurSOWLb0R5w83RB9mbX@wS7GtzBV~ZpsWhOF_8zTXVJJ<4{*e
zOgRz5>KlE!HtO^Lj(vaN2W>70z8oZxlm_}EZL%?w_q)qIN|Mj;qSZt1Ma^X}nwq|$
z%^Z2B%3E_bX;%zTZ%o=FIE3}QZZWuj+69ceT{i}r%+k$G{(hRwqHUbWWNj7yLm%wU
z;8{R@WcF9#@I$?Lfg7!_0b(39gM*%h05F0_n3l=-h0N;S5qgH_oYeznz?xOnQm1%Q
zH^|F`qT&uX;^}-<Vx`?40w@e6qN33*%LD80S9=r3Qr<t9vSn0DQm#+7-r9MK2lb~u
zPBZ7)R>tIaIFE~OcWa&Zx_CWuURhnEKq)4I&t79uOjqu58E6ZIfn%P^5G-zg$G>^}
z-nyx6q7*HKJ1#~A%gkFQHt@jBAx9Uts9C-{nVUUZJlH7mIeW=DJ|lxiUy<-sjOXM~
zw^f_cizpgt&aU?M>HzUM%DJ+=i*5PRE^{m6t#9lfs7!9_NOn<cT}RRUID{_4^EEqg
zh44^C9dI;pq4RY~zi5GHHgD*I%7u{6tAixF<Wb^|*Sn^srs5GHj{Kd+Y41OX^qllj
z)mqm!!?xp&c)DHPo|v49Tkz^)*jcTJbIy#Om`a#rEOFN~;^T%xBz^Y_mH4OqPW~@m
zyg0+liTZ`VJlh|qTbR-E&K}!+?~x}63iBGa!i6)%Y)U+|wnw*7r=HhZ<*&DR4f+Kz
zc3q#l>Zmc@?%3~OWLLJ*=}(FtppOdH5ts!%rZdaD7(fp#<vBO!zO-zO#laT$gxTCX
zWBG(s5f@=_NoACO$xQ%M9eB%l7I0M5UyIMnJAEzary3j%2kB5UxK_tz4|=-EX)pG*
zVxh1lA*k7V2rWfg*KWMo9$_oN3=#MxZNb(#c&sAgIM;En_1W&*&t_P8c{44PQupHr
zwwUO6%eL><I7-n<3-#ouT{lchOcd&z{H*f7vh11ev~@Rbqh~GI#Ce>2+-A!~JN0re
z*DRvbYOu<{CQ|}XjaYKD^od?i+o@5DHrp-1tqX)yXz|(FqH*Ujc5yMPq~<}FHb%SE
zz$0-sSM`g7>8{6Y-mWQDU&A<VS)a`cjWvN0p1oraj6h;W3tw72?e;3v$IUqp(8$R>
zY3xWGjA8QBJIcJ^8iI+iEoML7?KS5>glUfhvg3EdrI*^PS|n+IwvtK&ZL><Ii*2um
zUwHTK<!+Q@?l}-Vw=SWjQhnc66e=c&3Bk#Z%484^I~nn9bb?9<e6!}>$>SRfNZPsi
z#E3cXHli4MAKADR&-WW<*s~Rza`HwC9MY0P$0dg=yDh)WPCU4~(;OgnlF4&8`-)9d
z(Vb=kN#o@RUU^SX&*I%y(8;RO!;`_E0A)cABRgCx31zes4L$>fTDq!TPc<=z(A2V(
z)$VSK5ae_7Z7v6wYSL#=r<WJmqo8WX_n6Q)H8>qoxRtO#$(&Mw(f%fvPEj&gJjsP>
z1U_ysD&i;?yRP`|9Mp#nSA<u&dXS1fLeUcjT~wy&FvQCS*XC+a<zw=g)T}9zaw@&h
zls{`-J8*uh*M{*FbBQ!U2@sA!qVbL4CSc_vuu()c&zL<Tr!zu%l891vQl^GSJeagf
zrx&HMa+i5k206;QVfgn$!-17|Nww0gG-+eh{p${qDMtuNcJ>-YI0R-X@waQO4E3t&
zZM(`WpyoEF4Gm8KmW^UDC!V_5i{H~KPjSF<0#RA{2=^w$Q0X8;NYFjK2eELf1!|3<
zlv2^wth6t*PeF^ESvThDwZg%frTN=AXK@Jh0CTTxVdH(nu?SoLfE|)`i-s@(=XYbm
z{U-4)t6@WcMH46`ZN2FS#j-UYOw8Z~L8j2_xHM-)Akh8JjV@@=d|eYXR}D15S2c?>
zg9cT~c6()orU&TNA|@v%jVmiJf)<>%9u`T}^m|T@N5$?9`ju(!Z4`^_JyeX#&gR1p
zz@e|Rbp2AcH)+uQ=~LFFxi6LbSAC=ncb+9DC)akbRYk4(6%H~*sB&_1`nTAY(*QP6
zQ}W){t1jcrG7<}7o;#82g9&DtObeM~%xEZfNCHP8qOH;EM2vEH<WbSY`h##TMI3}V
zfLiair;h_6wl8RWAZ=5=5kMnwr?0C#5b3sxM)6AVmbWE2*YpVQE@@2j8QtL0&N&?)
z9lkyL@TA>h-Cjt`S-YmlcXsQ|0cdIich|7vC~J@cmvkOv==Jc5@RJ0m#5J{AJGuSA
z_1lkN-BG9xnJ5`8gd&ckIeAJ%MtQYPK>2Q!ATLNvu5@vdeqpwRS=K{epWGQ-kgc*V
zR*0-<R(QWH=#$u7o_IxiS}!Mo=ipHWip+|I(fi`ePP%E9+hh5vpgt*hVG}f?uPOq9
z9XOENMy#fPRvO#nxcst0Vxq`IYr#!bODoV|u)CXvh{-`#Vr%-y^DE|=p-=gKAO!yP
zdm$q!{|B$1TGh~yxy`J>?-y?W#*w(h0wFSgpEKOtK0?6#^bAgr1Mdeh`|mdMDoaQ*
zx!iNPa2i`Lxyb5yzxMTdy<mtOaL_d`t_CGl=cTkEJQqDN7`c{rieuw#C1w;9?o1lj
zt&29prx4?x>JbaLaK9Z`h7F)7C`m{CV)AaNSUC;9mBHEqmK^s1wR-|Bz2Ly5lUMYv
zv~SSYcTr@fo&1Ft2lv{86t|Hvwkp56dw6OPt-EqHNla~riaGXBtAzbf+ogY9Eq`6g
z&R#3pwe6imE&ImfoXh;FLH#E(ix$IOHYZdUKo<fzrAFbY2i+-Z*lvp?=4xi%4QmI$
zz3&>x1;MZ9-ZM`8dy}=A)CF=@GQ$!K9Ici>0f^nt#mR|U>6)YWc(CTXv)V5pG~iM-
z-u@2pk|IR*_U(&m9MurwnGwz0melNh7^L~K5rh6%c_~_E4?RlzJI(q-A;HCC2kFzP
zdu>V_w}(GnY)R8ZpHb-q&{}+K>`7YBbnD`-Q)nqBwB%~D3Cm(tsH9sH@gVjfO#B8E
zCOqXi%k5*MUjo&&p5fuKAwD-cHuh^-g1UKjL4gnzw*kXa8g(^*N+Jpi)(b&RR7<>D
z;T1xfBgDk4ymPs3f<i(<{g!|wsq|h>pHla_6%0WSlXo(mgjBhGz0xr-0GHteP%xle
zu0bLP<Mh=4lE1jr6(?ahs~iOA`l1^;k`#XfoB5*&YvqGM(mH$l;ovLEK;L<E*mC6t
zj8nv@0}PU(W9tk@c1!duOIB!5X2)eX;Pfq^n_YCbtpA5v()^k~`o~DVHEeLB{KrWC
z=PvxmNdEsa5=fdLvuxEHgbjIsJvM;KM%26+gA?TbT=|i_wyqNQ8nloMG>oBoLiofY
zrOUuez|(V@_tf(%36?NNC#`)~X&k~6g<p8Sh6Qn2(8=XZdRt7!&YHh$e5LV0KR7uo
zAO|2ytyMbJRDr3K+)@D4|AS~S<}+AhrVxlyYDr8cSK(g7jwx7JOz>X;GB|-}ejLx+
zhkV5zC;<AKdOX0yqx%3$&dHD`pb~dqn*zr5yYd=ot$(GlfdSB{n^}mDa`vm$Ee90C
zMSXQRqkcS5>r;u#RF;xz0umb()YM)n;J-s!Mc@?4>Tn0HATb~-3-u?=81Koqr-MpS
z07IPN)vH$%pyo9E1B|faP`U#${Ww%=T|KYx6tmjv!Fw#|%4u9}yoz@{Z`m0!Cp`gu
z0LrSt0A;~P<O%FRV(gn~8Iq#!Ujn(X#M@BqiL$8m6+gzE7nR037&voqFM+fz`tH{^
z;s$OPnmi`sPzj^kzsf*?$9j=5@2oZY*^6;`mN36a`|;aA<s^6DD<lT@0!Onk?g7;x
zB@G(H@sU1bwA1sWS&&szGU8K0z~Z$zLTTmWjGGZ6yG8Mk;Lx#O<Pmb4%AqQq@VfvR
zql1BrvCO|cVxn(khh?^5E*x~y&$Aum@fWbeCGi=3xyWaSOK^aua2xIvfQF>HdNuhe
zW^aJ5u^emr^y!4O)bhB?Vx3uAe!Gkj-=iux74+_DP$qc0?N$hY@tDarHa09?g7%nf
zO_FmstsIl90FXVzb?06v9G_!*3*vCP&3=})DVj|+2Wnw-!|~`e<2jGx{#S$8lPnwe
zBQbXl!^s<e>7}mqt;Eq;=Ak*{rA|z}Ews@|0F>C{664-3paWc6{u?3!l%gfgk6Y|M
zq^%|kCjm-$;GW}Ax;$G@0scmC*I~ucZb&Xf9w3Xw1<OF-(c;*jCg%6h9wnL<G{jZ=
zwv}iv*(iLXpLqS#%w!_Mwo*>^L}q0R^OaaqE<#=`kK<ula>wV@HyC_R%-3lzmW@RY
zNo@TUMbnG({N@MT`&|PG$pN|WL`k1TS6bUCN8YL98$+jGoZbi!idZ`{YMK|5w)F}X
zqLpEQSLl<(!MUxSSeG+eeu9yRsh(*Z`9gc^*0CI$KvQjJzeJ0;j46Xv!9HmUJ0~er
z!3;Gm5fQvv6%AwyHC0kud{KFE_vX*~!oC}<0V>LrRL)NvU`$~*zmjO*zI}UpWG_Qy
zzxIxq?sty7)$vYve(XFUjZE<s)dOtj=-dt)qx7dq1qZ5KtX1*(!-8~*WWD}$2;Z~8
z7Zi^g8&f0ZR4=NMW}kXUIH7d#U}B`(o!R>1V{(1h-*+{-3&(6k=Evl(;v@!h_jWuq
zY~J!rjp7yEJ;uguYizyjNA7Mtb?%ou7a%#?UOQINel+c^7d;$%4L(up@firKFV9lC
zO_y87yOm9TR0Psz9*ccgW)=VXjP(xU_tjm7UIH~`n>vq6jg3v=cq=;2`8On7ox<v>
zsx95+xRtJGNbZBZx#JnxGsb(e!&AONKDQK8<1z|(w9Vi==+FfN7IGw}rjT-Bpd?ck
z&D0;HfGxkkv)Z@yg^~bOM*zpG%e<}w7j~t@B^DT$ewM83z!ii&R{1vm{-5`gKX<DC
zZ7*Wve~hbqsk3{$!*a&dqXuZvA!2SnlPl+mX@{qj7EG#z*pIsW)QZ`<H<;tv(ipe5
zrU4`K$;{ADSYcK$88j|8p$Rjb&&Z+=4(a|{SVAN$a$pR?+6!<@GLQ#AH#R1)s>TCZ
z!59Q4;ooD%-$tTWs848J7tVPIYYfmd?fOsrO5cwCJve^?5THn;*M@VMIFxV*jIl3_
z9ga6^1-c7u{^{TI>c8_FH-XfP+RxWv92P$jOaQkxA+PbfvA+kmJPXD+E0YN0*0&Go
z03<maPH}$EW4}d3krZGI3YNBS|NVQmk4!N@p^KkW!WzRDj6ob|@sIoX*UJBQxepUS
zR4rK(%f<)vCON;#!L_MS*Hob;n4YU>o5S*uT5QPcgjCHUJHsNQ;tF!Z8YzXZcyx+Q
zERKG*n5*r&%9TM;2d4tm{IN_T0ZMacyH#Z2F@mmTz>N1TP_VL*B%%Ux`!QuQui*G*
z^OwNr<BPapIYlW&mL((xB>tNxr|d0J)Vu*J2d!owW14UAUxnfHHS}59K%aRj=0O@y
zhjuTa(bTtZ{gYx`dE)HQf}<5#!7wJCcMf@-h-zwbGR_kH(~~c;!?)8OSPK5th3!w=
zi=i0sV!Zt-xFc|qEz_W+?#`U>l0OWmTp0pd7c3~Q1+8EDllT3r|Ha}4PKVE1jqZPX
zLH>(T=HGyJ4%@9er^`=#k2nA3yVgd_B<@FTxJyAD=8|>vC?UBU?OZc#-h==y9-RnU
zr3BIK=70&;{KfnH*~t$k9Cn<m)4r>tL(baTnoGa<LTYMobsPp2pL1W8>&yWf>Gd!1
z>%DIav3Ruft1`nHVK|$HmaNv@XkjUR>arg>M>+FcsW{(k5q_Y^x&0C86E#|W7&G}<
zrk*&x1&J|L7Zel(0^KiNJeQ9w?Bw!z_k1WreY3dV70H;3LcWef)MO9xMXZ|Znm1e7
zd-83mt?PT`lav|bEW3DARaHsf>Djyy13X?|@i{umJ;$EUPaaW4<rUpLLk?qFub&fy
z5py}swu*M@7TR7$t-P;(@uKzV7h_PmlxMBW^ybZ*>=g~&YN@Sh)%8A!o;-_O0xak~
zhwoeB^^LG$qJ7eiBVHng@diK3;0gIDwe()C7O#y{O|4GR(_5Wq;n`jwiTB!b)O4|0
z945h8US9LXJeiM!x6tL4bf5{E{7oS93z!PG`W*0r*-p*T^&gMLY<#Hm9h98#Ti=>l
z6EV%cQgaN(-ZBrbq@&le`cgY$JXq$8rnfB;>M69<JiQF+<gvG_&;grpXA)f*&Zx!J
z4T{@q3~kG$p3W3%K5vH*4JF}0zC}kzIY(ibpQLlW(pa)?sEWh~ltE3_QY!1|IdSW0
z(e7;8p35paTFn7xeV)ps9pZ8V^49}yYp>!eaX8GamXg650#u`ms{|Yg+2F%@00Z6J
z--)v0l~kk9iWIfiINIZ)3-+z;LpV^xr=v&>QmxW2+qt;N+~zaJ53E1XXD?-J0kCBw
zu9zN9c>8*Rz|!3)`|`8ne4`r*#{G_4loQ({Pjzv7k&YLKmk3aD=WSqI1!Tw%fbBK?
zIai?}QZ!A~dUv)^8g09S9Rij05yS6#dU^nl)dLTpb>+LT@{2NUg#3U^#LbB+nO(PR
z2p1HOelYoY9XqoI$T=g|#ODU$b@d#E-r04>63OqJMb#U|D^$=_9T#Dpe1zhGwSpT2
zVTZX2EC+cKRXjLSE$<pnwyS`ym}`iSFG+A!B+>zEK+nf{AWZAfc^==N_HSaN-KMDw
z`>pO-74CGZwv>B3Z{6NFg3GF^Am<J65M?#IF!B_ZOOKPeLx7q&g2Y%n0ZBm3ox`Xj
z)EYGp31ezXFP+FvEEW@c+i`YtWr|#13{U_qs)~xwdo7+FM2pWcQ99;3ayGzIOj07R
zbuh~2<M!gWexT=GM`_okzou~O)-426KAiaO#1+z7(9<d}?}EXD1)mQSJ|6L&rKy^?
zI$qE??me=r@;_xft(Ym>VSF2ND?c{?#tNpVLJRo39ut^pP0uLi;Emkhh3<FiKYP$N
z2gp&hik>@nF0QmRJ$7tzGCVmw-A_d-jB0IQO{R1nSI=kq@fnnTx+Rzm=N(R%C&)N~
zY_nh|VB(GU7OFVR^sx05aNCN20>y-c+j1b`0faCVM&ji7Hg-rLxwm>r3pib=4y7MQ
zUOz~sN%U9}MyR?EnFw$lq5h^II7dL`9wktmJqHU5X@nGKg<|2<)$IcUr*kk22{d7_
z0(Xcz<UKI%Oot%x-Q)i(#V<$xKTGlN=>DIj_^(?Eq##e0mVp5kXanLiQ06ArySNxC
z;B3<nEh(JX97-$L(b0G?7nY`HR$L_=DI_tW!tkK>r|gm72nB2aBi*i;L$db^AvV?g
zgmbA>ygrb+gy~4!y7^?g%lZ%p&ahdE`MDvf>=QW7(7Y77^jlxMhRah^@snKZ;}+_>
zXO!Nbs{n2i8S1f#iR@H7>3$qBo0{8W*@Gx|17o{4TI_J5&r=8Zfv{%JTT4C1kvDt}
zSVo{mY2a@z3Ta1W*LSU<-J<|j_5~JJ#z|TWdS)P!0_^$)EBrjxJ_~&O=&PchE-knK
z1%E(TLVoA4A1Lof@k9YMQEuxo$R)*||F`k}zz^K4fq<#Uym!wLd_|<(ZOrCt+<p=%
zx>E`Rr1qmt{;8>{wIe;UTdOm1)~>zdy_wDotNxFSORNiRL~h&7?UWBa#!$IFfhD}a
z%1^Du;Mx6tVQWyIa;7I=$+H4P^Xn5M72aOEOV3@lW_~G`4bv4$mcDKG>GiQV&CGnn
z`-dus<xuKVi}iOrU@28KlGdt&RmTP_jGuDGveSFLNghk{ve(}(o)<P-jf8nC`htRn
zUvNueV3yvQV^)X|vL=f<Og`WT@MU&TlNby$W6G<+qK3p!%S%(yTVF`NGF~0j<P9Y3
zGUCEvUFN=^C_#v9hgT{mYnIwE0^5rH($Z)nI@3n<0#$=yAl$b$U=cuKn4|6GBfSQ+
z<t_;i-q($E+7u<-a98bz16i=lV~9=Ivt0H(3Ngy!$F4doJ_*DH#=2o6Y|EoyzVx0n
zbUiEIT2;(m?U5vZv#~^7y-9CH>X@H@^)0we96YX9G2bO!>^#SmYt|f4rzYj+GpFnu
z9v*HI1<Tcb%7Gr-6fJsoa=%Y~#@b*EgRV`krR-1whDovn%croXV3pfQ)sn9mGTv(X
z*1W6SgA4SmqvBe>Fxn7C52~;3_|e!Yv`de{=~sI|M+4$&2(hv8Id^W!MWJa0gjNUU
zvbvpPByrW`<>cTZ+V%nXC)SX9%C~71b<~&q_vm%pIc*qS75s`;R-eAc6Ca_3;e_`g
z*$<nrW_6dj6^350(^Gxq+~;cRN57`yzEoRf+@>VV6TVd%0eEOwYp)7{jH1Q6v6$vZ
z{BW8~)13?iOjY&>cQ$$HHFH&6-ZBZE2Wti#n-sgj`YRk~n<53p*(;>ks5EcM?SX=G
z&z()s5^W-f?O2R}S(9&DlL!ZsOIDUyx%o#}X8q{^^7;X)!hr`U7hLw1Z;x)Cxg98l
zSGjwHn#T{tQ_ecT8TncSi0(pyJNccH6lGl#l+=dqo~l{dyRlscZjw&DJC#oz>)7F8
zBS8oF!J*$<=v>NoyWtvrq}WQ3$P|$@&~NnQIS1;mIsx?-^C?!mnmMCF?7`c9fv_}b
z{{`JaDZW{+FV8=mMFnVIH-f_vfnXp|ic7-S6e-1b|6Lz3cP9}ET70Mimr*i@cGvGG
zUaBYNh;p#no?b-xuDUF@a3I!6u@sBG;0he+4&$UiCLRLDr#0B!Ffk|R>iU^jQfg&6
z*REO^?VpOd#o54Z2sp@!r6Qv~<DYZgZbttLvg>U=CdLj+k_C{2A(ytk>y{}GI{Rsw
z59=z#(8SA2=3Uy!B}Pl$SFtLY(Wq;G!KN6e8RLI|ikuV<YwFVlWWxa}!v_l~-S?_~
zlG7hu+R(DyX*34sEozdpWTTBaBLIR^^?16n5_UH-BoBgGq@&m2=<=lh0yB~HdAUs&
z;aBCXx%G7zCA&VKk2@iu_i8G9aF2BtpFDKcD7(0LcjF?c!Fp&0XEUucKr{4Oj?cwU
z=PGmFeFLiNidPtlJ|ZzCv!!fKgVrJ5dy+<ciApg{^dtipjk2$Fz<C~sRsje!MKTUL
z&90lgeEE{X@!dx7WeC(m-Q_HC9ebPIlGfEzx4aZ@=)JQlU3x-GFQ1$)hzJ(ofMkVc
zIaRR&%E9S@kejLM{)+XEIou1yOs>crEp>yTJGFr`P(L_MVhIE1onv-D_()DFW^tal
z<SZ<Vp#BKRr@M^D5>+4b+VvQ||1RMf&@RFbY<c4CRkW?tL|)momz_e42Z*0;?&$2S
z0g^amycLUg?{@RK*201})~`b;C~?P08a!5#zQ5R!`|jv25mSIblZf!0rpR0BnH6Wb
zx&0M+rKHQZ`uD78cy;e#qt-BWN$%3YJo?4y!$GjFC2>$TenryY<{{>2yUjYe86IHC
zP_gv(5L&n<NM)B3(ADWio%<b=L_jf!ad)|!+*p$(TQir|yv1~WbL>K=?%ZjZEdVA6
z!j5odl-LXwP1IN-BHk8qO^U@dV;>*3t$s-&<@-i4SUy7ulx1s4Lm=eKkPtS@sV;qo
zI?9Eqv`o|)KX}>2B|;F*r`x)MPKiF!240To6}t~&&fd_}q<*KDF=V?zxN;jaxV^gh
zv_d=g4zIK+EUDiMmsx_4m`zXT&!*;)?ycE;RuyF$huA%Xv3|6<xXD2SYUe&XTldAf
zyk;GE;>8zKS#qH#5s?g>5$d(N$KX)u$!AjQ1j!f!8oc#>C@rkctxXm*5Wzqqy(lZO
zwta-pX}X>doXPArUH#zLl~x#Z-Ca?71=3`%FYX7DQBqKgPc}Ad;tsvxB}Y{?HF^-7
zqpr@W_|UeQWi-gZ@x~|26J<vCqZ+3N@o<1wnInKvSFkUR8%Dq<V+k0BRx`Fg@4~>5
z|9O#bb5j4T$UiIcSG)2b8~Jay5dcfsje!c!rl_vF*@IS{>7V%?G@wW~sCrxFVL1NR
zw}?Ubw_aQ2tnlnOCHLy(#wY>a<09*|5Z$qWCe{D1Ebos`%6|<lVp-#+s-e+oEUgZJ
z<?)h%FPDt6Gcc=pq;RMl{seEuvWo8AHeH^oNU1cobYEJ55t?wH3rwlRHB6AlgI>#+
zeNvm__--pyECGs}{qCu64eO65{B1C7{uW|6G2O4-g-8$VI~tTToVZCtLx|o~w?rbb
zY|h}=zVN(xEC^=5E*B_{rXL)rh!I)xQ^S3T+0HsM@3I*t?e_~;sv1{8O$UR@_!EIY
zl{qC6pjX9M0O0!q)P!Az+2ews)8N$WP$_Hqn*u+8W&g)$!`VNbBS3{1I^B-Ezi9Wo
zeuVDj;uCVp3g<}@<LcVpsEqEswHmem{Qh^F<m)R&{v=$pCCyBBGXScGilh7oUDuLD
zX7X|oLmxgS-1##$;kTdlcXPd<Z{!a&0BJq}b*P2nZucc6@>sNVG~F{s&+DZdqrF!f
z|8j^wyTO@9L%c37PF_@mO_2~px&oK9gKq%nE;3Zz7Qg!#Q#%&HF$Rz9{!1kfwSkLG
zq!Un&)X)gN;MTt)T&==W%oVK8eHA80XNj=0wi0*p*)(&-CdRbot!|gBd0$Z%ZXBWP
zOCq&?CWZFT7T|Xa{_QVwpUSEsq!MPhaDMjzeud9vUf$=^hmRjcaJ2~h=P`MO;h-FN
zi0&l<OOSK`z4vV1ZESX%%|W24;E9o?jiN6KdyHLrTS>{xCEsn9zp)BrFtt`Z0g5_u
z@6q~h*dQt=r&acDdomHey{#$0b!n6X<}K5durst0$5V3DpMH0{WE@Blv0ea*aw1mi
zEudFg1Y8SsMG69mJB_h?T!2>}15mSbWL4MIr5_YuNvCn`je<G6mL!3ttkFVF%<gGr
z(TyVWwnU}4<wDXu?_AG&7r6}dUct;1besy@sKhz-T2t;7%_KswAXuE9<?g-Lrx3W3
zpcnAGbJpeoerB!Gv02jW-VAZJOMv{WEWQ)DKE++g2JfpHtq_}lQ*djxq<T<cfCk8)
z`LwzLI34uZqz1$<_WzC1UAm$Qt7i=d-&`3lUE=kz%-B+sEl-|?#Z%MrCkQ*n<)o9Q
zR=PCWot$hQGtZ@0biSbHP8X<6yaV$z(WsEQvmXT(#mtXkVXSuKzEA6A5=klr21mUi
z2RSS!`x!Wx`j;aoYORbGLMlqR0;E@a<z&aU=Q-?lm~FWZP@z7;VNC8rc5nrLuEZs8
z*`T7F>26jFIE;B9K0Froy$f?#UTD~gXxH=Q#h<^h#yW1=P@t%}c~alOX-{|HU+auF
z@MJ%DblmWC`y1W8+OZ`$L0A;v%1LTyc~`pR6)HSE$YM8N8;8tJDV)p>g}KLh<sn2!
znB5OFs&(VIMu0l}1kRDL{(%q>4BV}^?Xw4pcgV6p(}eLJ#Lwg~(foPLVH2S&5v%Tj
zme|XfiZ_cJ5Rr9zYry;ON1eYvE!RIlY>4d-kGB<I1W`ZBq=NdQbI)NZ3CM(lF~S2~
z|2U}b6HLz7x9>b1)H~*{ZwM^60H@+rEgUsM85SilhElD>Uq9_P2lh9=9C!}Y=Uy{`
zV^S=E>|hLblV~`f`U;>=UT4es;}`uKf$kMh=yRQ%Uj@z}2|yApkxct<Jni@9`t@HD
zKmk?a;V=$3gWLo)zG^;PUx)lQaQs`_p%v8lwmoiuRpXliDzH*yseb7BU*k#(FowmY
zQ5e|jKBPKerK+<Y`8wp^n*TSyjJyEGxNvgmNB;KfuK9oCO1?hrk2lnRm;1<)C!|uW
zzlNwfb`VNEBWC+t`9P2#DsE;Ij{Fms``7FAI*cHUgll!CS3E#`wHN5DHbYsI<>{7F
z=fu>jadIf*_en?SAEF?^;RxGz+@qA2{NUAAj6mlrxbs>bI_K$87-d}BRe)BG5|h7r
zwT}3bpkO{9Xxu}y^r4%^Zfa)XQx#fnSW_zzj;A;TvQr>Jh}m7n+Rb0AGVb^E&`j9@
z6{~n`1=E=RJv)i5KAKp}t(&=U&f@fN8TS1s1+T5zqV1d`^vbvN${Ro1k5)I(=EkL`
zb9GMibBd{}b4mA~_uSo}##KH-`+{0r%27DN(14kL*n}smX!gMlZlFZIx)M3X!KkU(
zRqfcdCu-obFtWbf_5|p#kwuATcHAStUnH6Z**_j_U9VQ$0!Jj3bDyK(&`XT_O<`DW
zG@K{!T_w(kgNa;I-_=4DD_t=uyf9X=Ehx2N@<7#NK9L@)Z5B;e^^93h-D^Hp0Ux2j
zXjsch%tiIS2u`4?L{Y0}WH($}QSG@k9hN5!-RxWoZ}TBG8xjh(jqv_Nm>~2Z^Gt7{
z;>REkuM>c)Wj{Oxco`J1co|2L4TMzKicP&`!%V~0#oXqAfZIf%a1l=y)Uzk<GS{ye
zr+}Wl`fm4hjgnAr><O)OMVKH9D1@Tca$oYNj#HU)d=Y>}$J_v<&%IX%q3){q__LW1
z2X#11v&J8tIcN78ZmjxA0-7PS*YrU5ohk013~CLHnxCGKQyIFNy5H3G%vx#^ukl#x
zqXVXN7Id2M7FpUFqdab^w~^vkXAEa)Wms;p*dsBJ^m>!T&da!(X!l7&yPB}En&CQT
ziVksy@e_sqr6-*RCM>U(0kX(b#(OS)OacY>&LM6J!875LkO{xONMGHivLkS=r%<J*
zscQs}e8%J-qrWjlBRre`^g)S}HNI8RlLE`UHgo3e*{hvWpw`%KnU4e8`bH5h()-Jr
zPxbD6ZsrLHs&KPX9b1XTm_;)(dTsSuLk*F!XfFq+qteq~#y`cfY72V}JQP`{AN19%
zDVub_$ih-5ykH2W?{}v%sk?S(Q)$GOEjbUBF3q|@EQspzt!Y}&Y`V@Jfczp`k<3_c
zU0bxfR7^WOR?O%T6MjJAS_SRL$TjsmRjtZ8s8Wb?#~S>P@D_8)4>*~r^S)KqxBZL2
zdpD`f4V{z2v$k)y;V8cL=tpY;(2k-pi0Ht{0|zMOKFBWJ41f8;mA_5qw0f4r$Vey=
z@9A(~C)Iewn?!lyaNip`uGBO(tVG!avNsNxgihJ4rel~4X00Nn3zl59(|5LQ=5QOO
z+gtk5e|)ilPTA>jnWlqOZPu%EgTgf(PpC>9Hu{80GE!3mz;rG|yDVDV##o=zhGV29
z9D!{}%=<?~H7Yh`C&irloFj-q?YLe2dQ1%{(`D+oWuw{0{*v&|U-VA{)hv1fQE;DZ
zlB2Hv6l)k@qu}5J@+LE6?(0L7F5^R3eDM?(Q|!oW>zpYE<1sQuU4-}fq1*5$8hcD_
zw{696qpxLG25Ky^(VI7F6I0vVtYZE$#MWB@$kVU4<O|oNzG6Pz35Tz^57|!+<Z8hl
z$6}T68K_4jlP|~JCt64BW*qUxoztQ~!?a$31pVQ|hw5m+wqM_g4?<Me@~LX8hH1ge
zg5*%wf=t#_=UZHh0=pd0RwHA~bn!Cv+Z+G|rR`>M1&QpS4xZ7Fe)HA(ke4AXXfN(l
zHt`AfxR;}5MYxab`876}Q=dL?|6G=c({wV8+lVP>(HSz~<l*Y-S88P?u{@9W*=LNR
zVzZm=s-WxAck7^v#gIsCpI6>#{d9&iBEl67OINDafW?de#pd`^b(cXj)7EsGRLhJ~
zVIPxlzr@MZb7^Et6Bq5S+UbdH_wqS4B+J(Fl?hFBRrr&J1f-Ohv~Z&=NJ#!Viv7b2
zZ8sw_@-P>ZvtC8$_PQ-u8ISI&0fY00Ko{E$-|FqeN3E>|c3Y3__=bmht;87X2X#sJ
z?ABGEr@mEcp#RgI@>c<A2@fO+JZHF4Mq@u>>T{fVyYZCWg0q4`zo3uLMk5j6#QD%R
zONSMi0y3r8wO(d`vWo`8>PB-3T4+GtbdL1w36w>}XBLTh?xGAk2&u^1bdN7C;$jp>
zs}0=pucYVSb$eZDe5v{mm+f!3DH9H8g5tA9XP-v7DaY08+LWEjs2Cb$1cEKf+&g2X
z;DoG;%uG)9Ufp71&k7|~g|VK<X~O$}dApJsMd{q{Y8lriYCndpBv(N#E-qGYk3Nb=
z&oZi9-?gTopfCvz=Gstjm};p2fpPp4t$+drocnC0&;jt|?reNHU*YtekI*kIa3$9;
z=!|!Ktt*|;k4U7lq{h1oRWhp=hwIc3-5Y~G>er0;eu5>mn{%Qz45&YQ8kC+#+;y0^
z?-JLTZ`lR(r6ozdLbpvMq<5Zx?!PI9ycVitRZZd?0nDGI%g>KLuC1@Hk4yt=-qtK3
zyt`Q#!a7VTzyn7oFYv8Q697q$9cOUS+uqb%leM$6iyI6t4#YKtney50>Z$@^4`yYq
zvu6Y1w^joJ7}u^&E0Nel+;i4*-cfokH3lcZKj37@k_05wbg6imC0T0>T(vJ)c3P$N
zCtdcQ=%rX%S}N31d2@52FOQZF*UE_i&RjP=;&0gQA6sG$IpnH~F$HgaX^!iAd+eA$
zlLC_}vvOZpr)Fsd|Lo4^9nh;!0JkE1M?S%6^ra*$>uNeQtOukF)i35g6e+fy8~+@y
z8|l#M(^B4V7Uwvn0cmJIdGh3W`PJ-F_si)9WnvoXTC@UYuP}LIdt_~9r6-u*?wXtF
zO~YH|i!2=bQS@7uEpexdopzeL-R8<Bt9-#R)RO+1<?a*#3Y7Y1@8Vao@67bLtTFHT
zI#cm}c4^>+;h0(G5C78Ol)PYG3{E7$q6jc6t|10E9XJlq0UVH?OC8RalnDkHp7sY(
zc{o1x0$^$iX(fLH%YD}>Be?)Bn)}!u7SGij)Tdiz-GD_b(FQp2ox@`^-}Uz2{PHIj
zmaJ~0SXjkUITR<f8pxXX;27EKi!w&p?=Q*0`L-rdn-{i71S}(a1ad5op7{PT?D^Mk
zSbG!XL=;7^u#D^=*mMVvP=52d{wgN=A5#x}1LhKZF94R29Rr*07}YsA-}WB|@;^^Q
z;6S7RBW$!W0?-CQv2m}^%F+7ZGHNI`2G#1?IU=xJ+_W!rPd*YZh!SWPVJmi?qO<PF
z3($D0Q)9rbBbz$gJlVl)x?8^96@m*hOFF_k`*Dxh4Mt+5l81O0)N-3O&n|%Ik#T49
z|7-6`qnf<Za2Z9Y3{(dRr4Zssfl5&XWHIbz(*Xj=E=CBHP>Db@NXuf3pq3>{pgIsX
zGs3WlvL-+(7;qp)Ap~g}BTEPn2vR_dphO7Jo1Qc0Og(3&$Mf~4|8vg$zMK2q_kEuC
zeV^x5-Zne<uJq?&bbcGimZI;6C$hcF?tRkk!>|LRCrm!U2*PszL78~=D^h=#O@-r~
zP(Qz>0AUEA(5~Ma>?J4aA=F@|W4A1=Asu`>v;2Sz7B@?8kLHpd!V}I<B58zx)L>rF
zNS>OK47J6VKDFmi{#Ny~D@ps*VGBoKQ3sp#`R!l*j-T(a+B6uTj$K7%(*}_SLyIjj
z{o-+|(=H$-nUkB__nFCv!HKppJ7)T$%hF+2JLA_+fQ@p!(+`#jGHLzpWF-$MKyL4g
zN2=3c5c<W0=2XVIk;k$m9gB=;ip0oeL^hi?h$1JKj+Ib~sECUyaD+B`Wx#e)7HzrC
zW7P#AdUp%g1&a|y6lgp*!0|cVQ5X!y-fE^mCZ8p9&fdkix|b2}8=5EoY+3xn0BLX)
zX`xR@Ilgg~RNA19z`J{|b!CmUF!tv{kuP2N&Kb2G){(sQ36HuSJuMKHF{E#Vu4LA?
z2lcgDTU&K&+Scp<dS=8e)b@^)CUWzXw)y4+#+#TYzSEuj_KyL^)68H^_H@C44|#HR
zPoRkwTf_DUcA(^1@o4Z+gD^H~bF8Qm_<+!=T3YHh<(;W&7D-UxhV$O^j51YI$FH}9
z__fon7U+gk8~%Fdj;?}n+DDxD#?Y3OZ|HG+i{_ad=}TnuXyTr^7nNC1;^9-^#;a<|
zl>bP#U7%%si6j7{i^>pchJTSY2Q2tm=|=lgVpm?y0fpoF4Nvv#z(wvo13V-f+g(Rh
zr$O7>mgu}CFoVDLCTp<R&MEJ?Q%cP?5(&oKT~!rtIm=^}SmDGMF5U(He>lx$D6LHw
zx*OEMg80qOkSMCgqNQ*HH`ij@=|wHyX$tHO*|{@nl}$~Dk{p5ll)&xuIu|t2Xh9+J
z^UD<nHbUMXFjUn)S*&4mrZ)Q`@>|lYc|okCEvPJsTNFKo78{tEC6W%nSGP{y2?zJn
zG8AEu4>Hi23UebMLIRsDBVa3N=FyEgIjfs3&kI?-XQLjs%#2GpJTeQD1uvn9Y@dxL
z`f<uTBE^p(!I=Ci#ha2H+9JHq%kTFd$XPN?wc*P9Qk$PGvclsX;K7}1Dn;zeqBW1H
zvFg&nu8Hqc7No}WUyw(SIV7YxL(*G66SUVDxWFtldv?BjNw;m{DdiYddv64Im#lP9
zUj9T=zuD8-sThKm3v33jTB4i`b4jJf+%rhoq?OGBKrdRC3D5dNdV~eK;{AETGQtxb
zJm@I&z+h-@NtUsNEL>xk4x-Vl@gx1h>w7$BxhgF4jdg{SHg-ujk(+DKfhf?aA>kTz
zwZ(}YUO+zuie>%wZ_o<%3or$Z%(dK)&p&Dh?nIF!)aNE9^OEDhtp0ka7hnp0;tjfo
z4UaL-tz<vE-I0M8Ck@x$o?@!#?+G1KohpKGk9@gbL5H0s!jW_`jrsQzSM*Zx=c?(8
z8sQCqj-hTv9S2Nnw3KD0k!v1u#d|w!&|zs*$~LCLLdS0YOZ_*g@!Qw%|Bu>{>k3aZ
z@Ae-%8L59h@<t6mUEtY!?4s|LZLdXUJJm{KGPC)7elvDpgz{QW1<qXBVvt#}e~sQb
z?X2NgYQb>Pc|o^J4eNH}y#gj>$o2P8#Q!E)K&;||j_ubYH(eFo$l*Y-#Dj)aR#c&N
z`)u5Tl7sGmISCqeAm`1pXoTTVZ7=m(nHLyaqN<MLAOBS-?)k`(!`TlBo&dVrx`~n6
z0T>Mbupq5lBO?Pv70*wwLJzIZfa)0m8xPcNnzu60?Mx?{7bLrag)7}Pz)1QYc70_o
zh}aY5;^KlGT^LT9q9_>)lwkqIN1(YwlsjKjH6164(D(;)HJ@He(AnZKHi-#&M?W+*
zf~Ma9`xA8yR3)tIqa^cYZvBPnu_<wNxQf*w;|Kq~OoAT9eF>5Hm1mRE9>htV0>OpD
zxZp6obb0<!{#|sli#rr7-J&fERDq?h&S`bYhvChl^Xu44aX6efGf|z))+bu*Gi;({
zK%$$4yMC?MSl3t3<3~doUk_=7J4z@_b4hOhzKxE#<r*g+5@t3+Z)Rqu6m=UKUQjGG
zr7W_y*`bbf98ZlscKsg%Bpu==PQD!BrD<cRpZ3+PZOp@okL_ibfS+{;Fv*HZ32r#4
z6#-9k>0BGpO^&tTLCU!zZInTIC<W9(q*pPnm34K<al$IXyyHy5ofEHIgbWifEFVpF
z*jX9PCWvcKIaJW;@tGhAY&DnE;im43?7vsFHL`{_=n?iIfNA(;6fQ2V0#x=v>Ql(@
z$BUU-pO2Gu*&Cng%lL_v)pygx^av<ue?s#wvOu8U65}6$*7WsGMH+44<GgR!TLI0K
z_EtWmPEkeiR4Y{P&;&*Hvbe@Wa4^fW2DR=92y<b5uCl+MpPz3&^K^4X#lCSOF$f5Y
zio|@uIPld;b?EDpEbb_%gb)QTbmu8*e3S@nZ~LZ$wNG#Hl!hA6rx(Hk0};U-vxkjK
zv^Jnb7Ze0X5a>n{PB{YPv*Z3-Paqv$UuOkBPj&7(1?dt!oC&xfgMX$Oz9S<2@BR8J
z4sby}i==rdQT+Xbyq$Zz-;wt_@_T9VA9O~xcK9gEtr~7dGJ$pA2glq|ZVg{VX8r<e
C5G5f1

literal 61191
zcmZU51y~$Svo7v|5Znm_cXua9aEIUy!F5^O2|<IqgaE;Vy9bxW!r~5#1Y2ZrF8O{r
z_uM=C%+o!+)zw|oT2*gPw7RPND-2Q$I5@ahiVCutaBzs!aBv9YXeci!<RSBPF9E!V
zro1#<^(6Vh%R{)ezM_qa3LNuG91RW`{tX=BUy_#}96Tu;@;`AnxDW7T|BY+HGya<f
z0S+$89uDc>G#_8Wzn8+x{gV6NAz}gi|8Oio_zyKAbphgk;t1n^vk}Z2$iD>Wt_lVo
zaB!G-e{XoWtQ_JOZU*++`kwkK%EFc|PVDAZE*948K2ENGbHR!F2){&~tUb-CeViPf
zJ%oM4X#SxPeu@80=Afbehs4uCj7DEYom$4l-I|(@otK@HMjV5hnp)J|%0^gIR_@=~
zU!KHh>^wbPg*i9?0029Hhuy{9mV--3NQi@zn}eI1?S+EP1L*8&?!)HnLHjQz|KTHR
z?P2L|@9Jsq;!ORQuepVbm!}vF&EJCld;P1Pp7u8XQ<AgCzr}hHkmK(^99-<29RKD0
zl2!C?s<4{7z4c4UfBB1ZiT*?Rzta9)jwr|9!vC+z{7ce*QeQ+B#}MWC?`spsQ0`+e
zfP<5SQ<Rm`_JRMCi|kJ^a6P29BIX4sQpYI9r!-l4zUil+ME>I7mX3-8gSo=C@WGml
z#V5|wC5p*|OV6i(>&c0UiMR&d5huUB<m`3;z}tJTy}lkYo+E_!HEYefQ=bz-t_O`6
zp4JR0HW>GxhX%NiVZxS3<G%l${6bTJqzqsC<$oyul}$1RmlOH>fckR8e>nV?9rCZk
ze>44W5(1lC4}Kz{j1v*}|64Nt>k7pGuQJ5&T9O~J8jXkl-`Z$NR$~7T*MH@kvOxM~
z_~(Q7+rQ#S62DeZQB2IpurughGYo6&=+OKypQ0oyOKde+_a7n5Sg6e~hIL(&t3JQ5
z5JWh#9@#QDiFy{{smRvWt>U5krS^;eKXUO>g?yg7WH%8oyD;w8<o{d$2IdenESLSy
z^0F!9fbo!-CY2^_9UUcY?eF8cBBmxmk6I(cAJPsFy{fX*+FSnhf{8<_LV}s74f~DP
zFvb)@cmxHLvo{{E{l*wx6A{t2vgnPT;fjncyL2+<3VW+ZgkM=b+^k#QoKY0Z44Kq5
zb&RGYvULkPCcQyv<}&<vUss&&lB|uO^b3tRB#z#UUY{&(QWZ-Nf%iBeCN61sn3T?n
z!dq8cTWTK*Y-HG#l^m>xH~Q|axav2WqDxJDVkWEi@_rK=ZC<)USr?R!O!oD!qT}OJ
z7Km#oYmF*}98H^2gz+Pqc=(%|eAG1zoJMccG^4A?<*2dH=A6y@sAbZSY0m&?>Vls`
zTobc-x>dOqnR2yVIqAM*XH{9re^<x7`ZbV6<6<uc=A)~xQc;miP56PvG|nM6gWQ;$
z;7EI5kKQG$dq1@YjZs5QP3Q~NblgR@7EzkvNp2#hWBK8FJ^LaWA-$Qik0Ei3arG_Q
zPl0x)Y;C4tQ$~sBhZuY!A|+MTYJ38MkzW!Fir(4$ng$x^bl*!Lb+_)8Oi>&mSzl|<
zCW>}h$<eL8Ge`-Vz5}d!RaJg${NV0!@%`sd^)yyv=4avOcLq8w3Q5UZ{ai;Xqgo$7
ze5;hct)}uQ+<_1&n3#0o<Kqv1Az<14!UCGL%=Wm=Lh7X<fv26KL2^X;{+@IB{l_no
zo++h9R<^cE?(TJgKF9p(;z`MGteD2%y-8Mvb1J(x2Xi49zJV8JGgDAeNo{E04Vq3$
z*7BqRAY}#K(K^zTRr@nBF(qYYYOsK-J2Z&l|J6}%+Fy#;IepV`(f=iwr?jlHa?W2z
zM+dl`n)3{gh^VSsnj3=rx6k*Wym38N((!7{Yjw_r@WmZZ2(Nd&Qs%Dw)(+LVAKeP9
z_y2v=!JUonpufsJ7K^*!h@OE^x40%e=A(enH7Nw?rMnT?5o&sQ;qbIS;gJ>+detie
z+(bHMvag=e&M}Df#hYE~*)y!yURvbmTQdxWg%ymk&;Rb%|DHt_py=Vp<gc+EOZ#&q
zaH%MuS670!F43T@5@JIBfzKUucAB2Y#02QD_*$+*gs;~vUvE^v@kYFHd$JFE7WO(f
z53BEI?JCH_&=*g9^F(H@G|@eZ-N#dZ?4W`@`p*KdRaVSSGnZs$chF%82Xl~;B)onx
zaN6`6BBBb+U$vE4>Cg`;>AUN~MA6Hy<GEa4jrwIJzK%MzV~RTXwbV#(NYhYu6#-NB
z6AysJ!5n3dBwb05zD7bq%1fYg%tYQ7J{w*cax|k~Gl*-vx~(QYvdODp@EO)}O(%tq
zbbC^aLaUjK+Z7LEhImLtE$L9eKZ5bXX6m3Sd+w<dq(|a4csNA84}1N6ww>fxUF2ZP
zPMjT0t;5LXg|}2Bn+_yoz^8>1*&*3axtkY5{y)3s0-qKLdHpAPiaLVsjEX2MvsU)J
zGLTgKGn$$lS|)`}vzxefu{!qlx{Qxn&CN+$U9M8~@~e7qNxs)}f!qQPmIME3`*ph4
zX&7h&<FdRNO3>SKsG`(cr7xB~g^j&NJ>1Tbv3P4Dw|#L538~|;_y$enl=5E)`I-8U
zmtZO5-XwJ>(guO%(X!jtYMLtO_%!=$Ul4k}MevXb(n<MVos@l0kdhifQK|mUnVIss
zsP89(whxO&dYbMHvc_ImsH(SaIjgA#H8N1?a6-w^-w*9u?Q5eJZ<)^NrWVAVj8Jzi
z60bgz^a^TunBmcD!X+g&wY0_hv{0!;KlMNM>xB&A`|n1^OpgV~&?5)#d(lf2qum6<
zsnGDP%H4YT97eAIT2EXQCB4f?si9?(HwLJ^o!rzQpFs_Y4#k=^U-DFa+nxbM#dz?2
zhvUJYU?utw>D9(oIvQo&*k>OzNfhf`dq0efv0V<SjO}BgBB5(Gv?;HCxx?W#@82fD
z%v0p{yLQK?S)eFWfK&(Q5OYYIF!DOvZSehgS5itpx^gR|Y1~?u_im=xwnnvF{hX5b
z>f_E9(>Jcby$;F6r4OR8qlbr<1d!?b_YtfH<ilC=2w{-W-@jXXXbYQ`txC(?Yh8QE
z$*=d!Bfdbc2k1N#osH{t6ecGOjafkKlW9*A-fVBhQD7M^+~NWzpF=I<X6i6>6dEmi
zDC{;2^Qp*9o7cRS)XS>o@7H_mz5iJZUlzMQO?XAQ`}S`NJ8i~A)^^LpZWQZzl3M*J
zh$zsjEexQQW@Cd|bfPABeqI*+hz-Nr>HJ%sgbTc`eO^?D&4`KLF~hQRbMEEwGMS04
z=G$Sq4+aLAmHL@1V`*&ZbV_NXTLUpWLsVU9sVp5^8YBjYAq{Ug!~Y0=O3F(Me}DJQ
z`Xr~!7kbj3kWwgul}ahrrZ^OTTujPQHlUOym6%K0t#V^b|8!nIcr<HE#>C97)7xBl
z#L4ZqbVFm@nqyr~q5W0Th5I5YH<gCP1H*cL9Qkt!T@<A^{^+V6iVKgrre@ObS39A|
zF;;!2-D9Ug%Bi7!nmZDzsfkNv&Y9h!@zZtwiz~v&-+Ksg2J!zeNlxZBD}cohW&t9L
zZVTqz7B`$LAZ+gZ2l|J%HQm>tCDZj_NmrvHv8j+gEM#3~stVoIvWkff%o1Dg-}j^)
z5;p>~FKb_7vC<(%y)y-2T1=5KOB$F>Pfk~F?iLBHzn=HN1JthWz3xObmuv()FBY)g
zI$gIMfUap`4P<xTXOcv#i`ytXOZD$uYQ=+nMXe7#TX*;Fi+{LAdmhdZS%1XKnLr8h
z6FpbnOZfmkL9}iTB4=*@Q&->M0M;dBH+p9pbkQ06xWT4UWLqO89Rid|wZPcF*i%g=
z7wvaix=ISTUZSd~-Ols+lmHR@pj$ouwTy8HY#PMDQ}SF0KAiS23&Z%%lEO?yJTVL!
z>t(Noye3Yfqh(Q&cbzGCILiZNA2lM=!o(DOul___+x~2D0i!rqDm8Q#Vje}~F^oM#
zv?isI>bZz*1Qc(PP?^qlVNrFF33K_5UCT5@ko{p*46zkv<^sB&xB1^<eDB7B`PM#g
zn`116jATuJPl^9QHSL@GYL`@hX2O2C5mcDxRYPtt(`1~*O!KO-y935F;`Rh#$biqU
zDKD?8z+=b=d3@POQH!F57b8g5vq-7IhMjA<ziD-7+l7tLx6z-`5n@W&vWa?#au<Hw
zDvWhh#Xv(oi$9*R#>Nj>^<LMLixbxKCT%M6Je<?;>sdG=Ah&x{ODXn|7co;HsEakD
zTXHbrS;e{YivH3SHj}P(CUgQoZfJ==o_+i>6abTev$j<`Sg+wgiu5t9$&NYBR8WV@
z6tyn*zv<O)g{_IWaT>RIJ8;}04|L@nW!;1rYO@lK=d-IxJm$nMScg|eAQ0f;A?8DY
z+=t&-toFv=&y)gCGleXZE)VNFje?F>>tJhs_KTUSW{XT_7d(E~MndP`c?w=XB8OD5
zjXN?=_mh=%&f$Kt>7(pNYgtm6t3<*8uVG)04k?w!lW?L&>%kkrz!x<w-^cwHo0E`!
zJ!rM;q5U4?=te1YHDoev*R`;))Ik%6tc(?8q)Doe2iFN2M4q%{8wLEfTO@<=iiuSb
z%4A)vcy4<^_p)8aUI`enyiEE%Khow7(Gvzn&tC??XfV9k&N{3cL6xFGF9&@82$R@}
zomKnlP5k~X07Ixy`W-YUk+=wB*6%dnbKZTPriKZ2{SW<2VW+kn*N1NEaQbo~Y=RV2
zN*~$lMO(G9;7nrVNs#!xbafk4lNCzH(tgsFFM7El#@y282fVW{9mZ1=r3D*#w0cHb
zNYUB!K9IPBS7BoYwz>2MnVDHtmhrekyE{RneBd=km#*_S;dkP~Ux=7NA@_DPDHw(R
z*Og4%{*ca{86}Ry&g&J569pcJ^NtNu$Y=@^c(j|!N8bc^+db1MAEa}LFpJSR!5?E|
zWTX^I0e2rOs?XlCK~7S8;o1^CS?%>I4+P0|Scs*PkUF`C$#9><)S3yu2AL{`(ISl~
zy0xHs>~vgkBzb^@wB*T|8mf&A*%L&e;T;b%9y8s~-rR^Fs(uQ<3L7egC-q5ygihda
zFY;dIo~9AbR@;$F8YC~kh@gkBxKaMsLS|B067^UbdtceEJE#*DwwjmqQmdRb)AW*i
zZ~Kc|6Zi;+`AUPE@xj&vvw%2+xnyGNjjiTEfmGhCA8okNvW!DmYm5=jch5pZP4;CY
zS%BvdVX_V)f;v(P;mYNmP8*d>&yy8JO5k?TT78sl=un1@RN&h~=mhkLV?87QP{{Pn
zj~*d;&m%J;0^wF!6uO^Wx9r?5y%-FWIExDdu76k5+WC%`5JoeL2+FbT%TCKG02Q&A
zN{2Q_D!!{GBVXxiXc!!mpOuQo{)R^Qk7D!|{blHGA(3|k6_bz33w1mL)B5?Wd)`uf
z_b#Hn8kXf_2%jcQO~4l4wH$xdJY1Y^^j+H0jPTaoo2tukW$g1i#!4q1yMn-%T}Ckm
z+JuUrG8MBnf@Zp^!M^!}QoO{I6$#HCDT$z~WYv!jLS%R&MH=c#b@T%2_GJn0uf}qJ
zSW&6`3vz(hc9|mgI0tK%!8-+D0pVXtUv9tKqxUy0JJW`tT*FLluMRCnCMWxbCopux
zox8W$g<vc7kD)~|!yTNQY+d`e2N<*2*c8js@Ju0!Dk22pn9vx{X(@ooMzaU)!S(du
zL-YB1OTNn8r1P>2@=2sGd3MT_oSZv3V8Pt)0QLPeGPmP0KPJ7rgU+qbnMA^9S!s@b
z1$JwjjCUo+<2~&6{Tj~t5QQJF{&nAD^^D)7r+u}Sab}oC@@Czvs)+QhA|SoL86ZJi
zO1{UNXQ0z#zD|D>ClDnymEB#`;Ih6(6)pYa*H2jc5=TyLAQq+QFqQ3Mopqa-`#R#z
zqAgWwwXyJ#iyoCem3*AAnvJA-z*9G9TfbHG`exRBt=0CEvD>+iW{rv1xzS26GGnPd
zhlmO}8Kz|M=n$eht7=r=0ImX&(NbkHE9U7)vYP0-WtZ+;Bez?-gZa*Ge16WEzKd<@
zVfq_6R7&3)H=U%=nqJ$)5LjFv1K2`vBRHV&_3?KMF@lEb)w?qL%(3LLqWe8j;>ed>
z!Px6qQKU#5i5vYO&0E2n#G>7<duOof=N>_JV|<;~x~CWERE0h5N~aMB@K4Mhv@^!1
zjhy#?itUsQQK^gf+H+G%SnU@d|5h2??%cDzQ56|6bO~a_gs7#?rQ}^T*@xH*fcY<4
zd^GIve)G|-4JWbSbYo)Z+Uu66UddIGj_K)o0~ir>%B|ey;+$BB1VqiAzj~<#Y=nqR
zW8=too~7t#X(6MStdq57N4`gL3E2Whio-(O#BX<a9u*@#IRQzQPCxs~e^}7vnM+YC
zP_LX1&?@Dv^3Pmc{p97oKXMKFt1oTP{@s6*1rlkaMGWJ$Bn(YqgBKx_=nxnF{o`d{
zT3mrO&+ORNCsG1l?Hl>Gz?{A)SQ0iIt~%qOIfzi6Ag4g(B1%1ERJ9bFq})Hp<AkyG
zxl6>$O}wNRC#>CMV;B)8V*WXFiqh{7eSW}Q+QX4)(e4FEJoxpTDI`z!cWqFOVl%n-
zF4j0pM27oiq(@;-=mQ<J`?-^`G|xAQ65^FX1PDl5MLvO?ez-)N5seK&nEJBIVx7?G
z-M>Gwo8h1HUHq_2^gIE4v`||#XuU|h)cbu$@A4fFPPuw`&wz0UZ_ULWnah}Ef;e$q
zvmTyfNYKes<@-Dm1R>2S(<V=G=xrLg-?)aaXkt-?1pBMNWaRB?;0aJ@J621_&P1mH
z<qwk`XS7|F8o9msnJJDK1dCLy`S5m#mzQFC&3n+@-j2lIYi>9C0vlnwWgRBNSi(8#
zVZ3Su)bHBac_(!H9j_o*lupmoBP=J{{fsyl-xVqH-1sh_ASd4)TI=4QQ9)N|*<`{p
zCy@vG=`(Ese15ETUob~KIyK8vPS4NkcsDjcWL$9Dv3EEY@kL0U!GFY_^g-U4{PweC
zQ6upM>lzReAOs!me*kYpvXuIvTv9)A;b4)dcP(gq%}AssGV$p$setq7mPR&72mxUs
zE~AyS6T%4SrUKGU-6-V7*;6YkmD%uWwyTeQIKQ!QAe+D*>=EFfx41NG{edBuf9i`m
zpj)%*Y4`iU6Y-Wh<PtL1Hs?0qKH;9|!%BrN3nY1`>vcye#vI5l;n*zbK`(XZ!{xri
zlL5G#nd`%5BS*Dzj+MmSR?vvVGcdLZQpkOpin<r2F%2E7+1^c>Cc2X&sPJ@_TlQY%
z`rw0=GU-;g-sN``V0rft8;o#w=-_gAZqkWrkD93G(CL@*g<u>4%BH_R0kjyQ(d8bq
zor-|yo}a~@>x_T{#Xfsw9o4BfEp{UYt?HBke-szZ_pd+dHL!l{VvenB(wS_-F?93*
z314Un?Q9?(vQepRh$YAw=L?>5RAL43%NhEW%Ou~esrlmG+rAhlbQP&t30^<vy0TRU
z$*;!I%a-|RvYaSJmQpSmoi+^x-XVN*1*J=vzQJ-lyM6Owy3}fi(OiCZ`)!<M_r0X#
zhmaD@UWEFsS;5r6#{G;FECDY=Xvk{v50m>~CZu;~my*D&94MBvQLWf(bueRn7ad+O
z6Ib+#V(CaJmIEJl@Vh=r^lFaQeQvs92exj9Jw@iBCb~Ii%yZUG?_xq}FkjPsN8I#K
z(}%y|6L%O+`?SG-(I;6?p(po5PXy!s&dH!jgJ{lO2R8A$L1q}l#6HPELUR^*wfy$R
zwX+*CVOlUGh%v2Ba-?F0M~SvKe1CoKvOel}8pIey<^9=&34e$YP583%mn3#a!h`tb
zl+4Z<ZG19p-OqSwn=%bbi6W|yr<l!vf7II5R<?Wt#_yeS19(+lGbUBkuQkVLY1YY|
zbe>942yOF7y&XkP2Rxl%@w``DkYm3A3w@&Ox72ntM(f~*XaYl8u^GR|#JVsX2Eta;
zKQ;BqgotJmVQl0v#WPrOfmT3m3KtFM-H+_2U5}q$fr2j$uIEyG_~LH=)N@#MKgu0y
z<bgV%G9DGXW9gQYlhVj5Me=}*civOBDZ3XwvIoQC`9UgQZSw>1@u2s=vl6LX6<4u#
zdMI)XHTCtwzm8+>q#0HZ*~Qv^Q5fiFqAD&f&U=l1O@82JPaRV!o8`PAkrsC$?hYmz
zwoK?K97Vl2JYfPc-1=v@?wV1mnFPKJGPb39tk}Bghh!>1O(u?B_n`^f+2};`M2DVU
z(d;`RJldZ2Pnn19S=;>{f}_J~TGE~k;J{fw!}rKyp@o41zdra&iwNC!jO|o_)_WOE
zaJmsjdCMA1{8m-mhmHlxm?-577x`VSs=m!QM4h%>(8tC%op)<xbgy%w{<)l04UHz+
zQ%y}da=LW3M%d$zOMIJgF{^JT9B_X*uV(266y>ASDH<?i*R&?cPhFzrS5fTW`fD?@
z#yk7I#?~Hdt|Q!bVP$sudV&MNbUu-1XDB}~ZB|u6{x}3cER5tqd!0f7AZK1}yGreP
zj2zALqk5O{qQ6ztbZN9ZE`fN$56wSFf~=e=Z7!6Elt(FwMx#t{IPkjETOM~?YIZ-<
zCM2)zv+XgWs#M#Zc<vcM#;EX~FEOe8d%49^lcSzInoW{BEl!XtMM!UlI_idwe+5yN
za+RTJY!u9#UxC-Z$=~}fUQyleqfId6`&Ya9Ox%T*{`BE6aptMMSGU8&QvK{PBolyI
zqOrSum>!9M=dkN^O(^l)#}c?3W~~uV%yfIbeA??4d%54)Ne*}zf$pZ8hC~mA!oHB#
z)$^Et0W_qAIy?8%c^=IZ?3u6GVIM8?j*|fqX+>FdD=T$CnzJ)I6$w<cw&6fqvAY+=
zWH*Lm@Ye5f_3?D2HJLDha-FkXp*ifi*7o_J^toa*s)AuhF=Btr&2)sVdF?GxLKk_7
z)ajx4(6ksH{>`M=J(fz^BoPAQ?AWNX?(X(v`^g0h)e7h$bACLteizD8oyJalwHVNB
zYz<ol40tmX0{6I;=WNIWee#nzhYn~iUHfZD_Fkn(+r2U_=@D&l!U#b$e*+v-0hd9g
zia#I+?(8N=Jf--Z^mfDrV9!HNBgtH}=*Dvm*8vEkH*CRp!IlXk$a`8MpLmC&);%B-
z>Dew_#!FtLG+`*O62-iqqaG~5xUT%u@^{zk8h5XVQ3~(mZqND?JfDWL_*{vDA2@Hi
zJlpx6Hm?g{YYwKv%q<gWlUirz>fN`0xLc;hfAgP{{rHYV0q?YIGyDx0gmFvs?IPMM
zJmiWFJC{4%#J!OGJc!{3Vi=Yn{@bF<23bKa14ft5t30d$kuW!s;d~0EBK8i=AekYZ
z_wqq@ISS*`P`S6aSV$1PZR7_`amvGHmVC0u`LP=)USf(9>0fKEnMZAF)chg+vVwCp
z0C=Nn;^MzCc2|@j@l^&#NI`3FiccO(5I4C`Yb48^iIq8d#WW~=J@8R?8*9l%K7-JD
zQ)L!~qhe`~*dM)k6FD`T$5j08Mk{w?f(WGsluj}0f3rEXQ#Zyw-yp~kEY=}f^X=OQ
z6Q3uNNB_G6NZs?({b67_U=kg8)*EHbtBkgf{JGkg41<+cM%N}SCt&{I&ce#X?h}{G
zn*ZhC8WTw3xnZyn2rpyLg!EMo!Ozpn8GcJ6@e?B_4m;JW0goZ01V^#lJ@$_=f$a}~
z5cPm9iG<${$+QtELLPe-mmBcF!x4F}AoouUw;PWFS3KT-7&7`jf=xNi!{doJEzS;Q
zkHlrGjT+nlA$jeQw{n%$9f!iL_tnb}uo@Nbw1%+6Ny*}Kp^Ox_I=+4!i6_?fKFid3
zj=AVxNFXM7dE&DIJ8~Gv7?ACRvTualoG<#^$Jnp(I%hoq!q;q==kxGZ`A?VrNyoNL
zu1mk|Kyhy?^@}kKi=4j$y*|st_4Nk2cQi3Yh5&$&T!p-VmQI;9@%E({gyNuZ6PbLe
z_>;nF?#bik)py;G{E8+4y9T+Kp=0*@>)rWAz~2V$pw;FBtB27o?o&zHXQ6VRYlG5*
zAH=|)h;OOZehAh+-yPM=)El@E?-zdg;y{}~Fas6VmWy2&0fj@7$6_<<t$H>Prx(VP
zEBRlx7RY*2pFy|`ZC_1{>j-HDt=&(>02}@FvU2gFuh+V5lq^0ljBA|{`^tZOlDP8b
zwxq5Y4Amke{Q}u)nQrJ29+{3sXxMf{GzH!YjjxlirW^Zm<+;>s2YZFmdo-_c%dPoA
z@E8jm&d6;K{M)z$R=#{yIbH4b9XUz~TMv5%Di1z$tL{t1tu1Awp%`KEO-qy$HI|J*
z$O^$@``wX07Pww|Z<8E?d0B7^5nK0SM*04R-)&p=uYA!Gcqe-~Wh7Da-|@dpUyE21
z(AU*S(Nu}8^rv%2U6WXFu1s#25H@@bI_-pcnLfkI{A8Ew>iTtHl71`zD)t)~p7UWO
zT=iTCI80gO_8LWM`TYk4@9R?6<6^zaY{l1m%JR-~<psPnQD)xtLMWHdGKJZRPWVXP
z?#<NXBALqO_m7i2FZ$Bs9K~t8>+i9SH$t<8;GF3qWO|B>*!XlJKQuDTyn_^m;B#al
zAXGbJSv`?8DI}~Z3Mg5Y)xb#saii1Dx<rs`?!?#358M+{_El34Q33U1Hep%cN@TE1
zIWe0qb<7`bS={0mF+X^Bb`{Q)#EzmLnfjlnQkDo*x?-v_x_d!j>kJktjzm@-RanG=
zNTZ)JD+lk0jN5S%leXTpKA|X^MX0ML6EQs4ytuP`$$VUx8I$x?U*m-J_zr-+5D2+X
z?^k>+(nniZ-GFzZJX~a+kQh_mO<c#y4-!{RO~{QrW!?^Y#Pwh$v^<^cYBQk~^gVa;
zkU`4g<>th$d43rmmb~Gj$h0WS{YW)f^z5!zacc(*l+Oum!(CRFjB!U$sa{vcl-JDE
zywQaSeGP&V2t4LH%sz}BC0x}x^@Y4AfMF)VJetmX&-9!X9ZkaCwz!Us`U!p+uJuD>
zlKbgtVRMQRdrGE`lNcccZOH}2&13Ma^wYK*ia09oh$Y1aa4fAV5tF0KXbpH|9b1h(
z&mX=P^I<A~<1hnYgZLZ(3-Ry>?FUID=<Qk#U-z4TY$A7B7iJ_dxgQdxv*688ElzrK
z-*@btlob_lyUS4SKeZWRNtWa6@oXbLQeOUD)&#igMM1IWPr4?6ab|7pu$k*5vPg2l
zZIrtyB=K;TJRTl~lodap4`BA1Ub-&y{v_r`o5D(znz+(o!H9*(X}kR<!}Cg}6hB3f
zQYJ6sgr8XPZhsrRvk``^eroVCHB=gf1Eng7syi+HCvn<O*Oqk(M@FhN#C^nEG{E}6
z$E#+m8PnwR_VN<{j0-+A)enNC5QLhsdm-z?Ih3&>AAfOM>Dynq11p3sNu5eVU2%WC
z_3@JW%+%G%^w@at+nb+~b$>bMj|uvfZf!*Bb(;0oPv(z_h5VwZxuS>}z&H=YDjmSc
zU2Pq+6%CinqT@W<%?^3LyArN@N^zQsL(#?A36&#XY8VTbO)BH?Vz6qt+*eIG3eWM{
zWBR1IiKNyg+nUx}JCwuVwB#LT%pXqK5`Gz4YUY}aXVhwg*1rl^<>2TzV?}!Od5&qc
z1)aFx9|Oj`z{bURGeViIOue1dw&NLPO;6gmelQZ&7(&S5*lH#c(7IajD+m8jEZz~1
z**y1V^T<t(79NwC1I}fl7W^g<%hMXT;+D6lA=!W;u;`$~?~E-M_SNu)dThY&cIcO)
zy0~}W?`>*3M_Q${y@NoTQZ!gNyXo`8wg@9>1anWjqr1s;Q&`&wVBJ5O^8UmbP!U)!
zie)KrCmZ;5j#)?}Zh2?aGCeW9X2PtFRsBa>`=kpZ^+!?Gpc7Y;IiJ*DT0qQ$kI;x>
z^D5}>R!`@}Ni5Q1?b^m_l63@Wb#;rs3?4Ji>UBMNl@Fgz#N4>ttHUibAztZKS0{Og
zy`U%-1H3&;VP&4?Ftc!7EMN3p*R5ooy8{6Y+11}hM?2BJ81uqoS8O?q!2@DLtL=cH
zB?giH+*70RS4#7^DgYCi^^@Ce@_I~;Hsv+oJweMT1&z}5rc~9CVfdR5Eqg`u9BaB0
zE`V3fLtLKsw<_sdSS+=X8X|&g8wzDdKhC}!<aUzM3O@X#Epif3{a9`AQxnf_Gl&&)
zd9k5^IF^6qHS`d+axck-98RxO)A_`YuRT9hg6td3JoJEL+K3})FD7g`|Lw^uwV$*6
z9FiYY==|y$K*_l!g?hsA4BY1ul)52;`gHmd?R0u=LQDrMY&+PE?|%TAdK`ZG6Qmx|
ziSfKYX*<#de5i8qo%x2ab;y0Xe9xKOUYd8)sCxZ4EIULDX+|;;(H33)t9Z`;RXh{9
zo#eTI&epBk1sYZ1O}$@ZdwTSU$eN@KxS+e|`)*syJc4FKoxGj=Map?uNZ{rJT;Vrw
z$g7G2>$w0W(!1gyX?$NJ+Mp95+p@UZs^*m+28S!f3D^4WNt}LLxxsr-L&~Y_{p<7W
z&TM4jOtS@eS|Y3v$kWX%$3ik<h^L`JB*Cx@`a-N}L!0*9B?Z><mfp@*3`b&+Ss>cQ
zXpj4pF$*HYCxQ3yo2`Ea#zsbx>nB^)LC3%S3ib*Ii)#S+xn*$MJZHW}KJg(yEjpxX
zmRZf^`?0~tva;7L4Dm3JdAzd(T4oXKWxT#A%?u~LE^IWt3>?6&<$R@3UB9Y)o#&bJ
zEJ5E1b4vT35IlBw&(PI71Vk0^%*Gs?oO0fVQd}27m><gCcxF^94ot!Qle`Y|mYH;_
z=}+PB!H*LH>m$wU{@?K2bJ;}1@VSthiQ)+2yliPwgtA-)7@CqVW3|!72Sx{T$4s2H
z`5#9pO_-@gLA$xhgCv6B(CHRZFR3*Iq5E-%O&Wq+WVEhXFXvx8pw9TO-ETjuB@3Rm
z$Uz@1myCs*2ZUMIk9M5cSr4S!o1CoDbDPsiw1Rp+EBPvjvsd4HgQ&oWt*1{>+PC{r
zSCWKM_OGsOhWJD1<JqT-X2fEg^I^y58w%N&;{yHSey4?Ef3zRcw*ij+A}I`p`Nr(n
zBM(R@7_F*O=qu|Vm&Yl<*={9e<MNuCp~{&LBKUkRbK|M0>zCStoNz@pRz{}Ol+~qp
z<thM3O1j>iNbul_Yqse9xTULXQt`M^fXFKoB>DIi%t^t!_Ss8Hx3wYbbknE+H?!l+
z<u?De&*O+-=YzS{gsj^(!>^wkllE=WF?+dNE{G-gB97nBjt&9vQa|L`_WrdXzW(xe
z?yZ=%v$6ebbWIR>1O_6!&mGsA3YFwMuJj~X!Va7;w;@<r9FgNgIUlU)8H01V6&$YN
z9r!e{VbT`#B%~O1ovYq+%Bx)6d0WEe{tGusYCnjmX|MUF{=@rV4#><*<0094C-DO=
z0zYF11X7)tEAP`;a`GBfc-!-0NB_~@@>-X1w|@ZA%!6~|F=JXD%;^NHJDe-Sv+xX;
z)(9T?dA1h{q<e*IlFxq+5{F6Lp5JqrUDsBz8mHkbyQ<Z0v{n<<;M;I?@OMI|z8BhE
zeVP#2t}K-vT~4^C+W(Sr;Nd15x6NJF?ek_YwcyW~US(g5SnG5Lv>}qX-OBK88J%jU
zPe@dg&s2p~cL)Esrg#PijjJ>*gEnfUT?QE0cUV(01oxxs@>nTDnLn~E5=)xOZ0q}q
zLb!{-G$~>aP@JEMAYgN%d41MsW+mFAnAqrXno8vc;^Y1*YT3D49%PpQ)M?$X!XX?b
zX-;}WfuM&fan|$L5dSl;PP`2$6W^}&E$WnaoTz3{WG+2}6Xag4UoygXmq6<i5@HiY
zzG-O|C8HHu0U|eVgPa(0L0ewsMTLIcwOS()3@SjPSD3_)q2>3dCo#(IaS~X(X-3B@
z<Rr8w+goLEVJoyu5W}EFj@iK*r}NwBWw6@2L>E<QvwRngfnC$T_T>5s{~MS02`EpG
zpR*_QXK%>lYvM04;2&oc{-QU{?Nq(@x7kB2)mV^)fSX=2GXY8Gj?IsA9^-|*DqB$|
zxTqz*qo_d_2DbNspiUeMq;n-sN@}1!Z&Me4o*MZgDpZe-?A|_-lzgTB_azj$)U5lT
zC7<svl3??wft;f+p1Ah2oXj6ThWQ;*Lnd|BlHCG8lr*!h*RB~{L~u{fg@r45Q4gtf
zF&=R@U6WXPHM;w8hKN;7Cv5Kh4P#1uR6Yl8mrta#gsf96NCd`udvZ_3DPUFE5vPI1
z@m;C=Y1NFw7;Cm-YLtY**IgX$cp(>VQ-lQ5n4lNQfh$l>KvAD1GO3T#c?IBpXU}ky
zMW(7>996ijwjgifclG{Q(Ln*;&HDc7K7VJ)q53S`CL<RKQ*AB$+7XDhhio|%7)$il
zZ=cr7YQLu2M&ZLph;DvPx#Y*&_0s%+Xq_r5^|$VH<NKiz*6Cs}<*7(9PFLO$CI+bl
z6|)AyrM+a5LcDy_fGZV8dCN6qJ-<PE?1<6zh65hY69h2dhOA9#a0`^5Z`*&3QGM1V
zZ%?6Z5MfXD_s}e#T&pXSAzsHr`?Siu*SrG;Y}F52Cw)G4%z^7CZJ}De$(aqTWwLwo
z!|%6<TUtI=F1}ecfYst&zx2!y6H=sR4lB}y=s#!OgWEqAxfo376-SO`;y=32alCD%
z?I?SsF3s~UsW#}XKj?La?vNxU&S~gv?TMqP(nI_s^h|GSe07UP5@D4WKLmtjYkWQ5
z^zhjQW^+o3M?t-wI{{pwD3cQA?JX#Mt_A2>B3+GvS|Qec!@@uag@C2%6!k3xedy*?
zK&ajO_wNvab$?V7jMJ;%mLQeW`BBiQ(+il=2M<jNIehr0e9!JZ<7U{9CC!cQfD*y;
zZzH(wfKveFd=C*v0`e(f$Z$J*Pg~6QI&qOFFunb>3x}QAMLj)(HO4RVXK6G7is=eN
zu1_dA@Ym+j{nahRblBrLz@S9Mn!|$Eg!^$$IUIugvL|bI08f6>o3Lbe@@>A|g}8Xp
z{c-nc|HP_ZR!{}?JB`-?e>J)UA;&AfL#pK2yngBPORS(zu@*1RE-l{$AUa0;*vMBB
z14Zc2>Fn8U>%2KLmH#vfL9=cS+ilc#3%RpB)dOgo@e`J>;ZfFJgvEw0$10b*Cx*hK
zT4u~D_j-fZ^PU6f`<Fd6=l7>Q6+EEJ4LN~1tSO355e4~;@yO4vpkI{+^_ztEq6;fB
zwemIfczdDSsL$RI)KiEHMuLNqo&_5!NJQI=eA27HBPtG^-9=df*+ZgZqcPx>7?EfK
z1;uH{y|^!6PjOilvGKU)<YS2SmL2^np!<2vurYpMusN!=7>sy|%_%OAZpRH6B}pFz
z=L4XA_?EfbUL;W=9zNI0fOkeQr*uRnu3ZmET2p}aN69t+3v01SO1~yd2hN1jE)&1F
zmefbf+&@#brM_K9iyj?+MEx_m#c+0%h*n;_LNvl*zDL8ZXPv8~KMmYoCId7N1QoJ&
zmtyI&#(}P0_54@3ydRnF-*Su*4SvWNbL~6pgsq@AXF$eMm}XxKs8e6!qja_0z9~I@
z?hQljb@**ZFtrx+EK`|Y%RpbCnyS5!Sq~GKVhu&W4yzXdAi%-O@&o*518g>gM0HKi
ztngLGFJIB!(r6OL#$Aar)*8hjXBm#0_DrW^<=T-lizl1oxDh&@340$F#ZY+f&lwtL
z3n!<kL!4CZTbw_rsusR0wz^jdC1nX3&f6VyF|ZtQp4oPuh#18GHdDvl;$l(&E*ViU
zdtA%F0`A%WJ`AZUvwvT3(k^`3l`Hh-s0^<_h$9%};_3?G&p$2km)>O=uuVQKUcH(4
zURu=Afe@!kSKTF_2DZrVi;%nhbKZ~4f`{k8LRGEoxtxmx(0vb7s>L3_hVm<Kx5%L{
zqYg#dw{d$+D^%aQ_n{AsK0m=49v;SOxIfL&>9bf1liRXt4xvxt4;x!LJneNRp*0=g
zzTieGJh3TSg-cfUIv*`o1imog!a_}!Szk5;W=MURlKL#vn^-5OJ8|B}O6f#D-aw&a
z&sw`%P0J@K2b?U0oNsQnu>GgcBKirYal%mZ5+r=(!4mo%K7>Y9X=Sb(_!tZit`VCX
z8}tWIQiT`a2%a{x*W~*R^p)<n>_!J)hsn4Mwuz<?W<8c!d7O@wIB|_scz&W__{n8w
znWj&s-KktK#bc-RI@Ps<$#mxF*PiK1<L-KdM|=EQ3VW+~X7_<Da_=C)PTw{}t<M)7
zcyC4tK9uQqw&|<ku%gP-7Hy=ZyiG)JzQy9d!t<$acjD^$-N1KF{}>Y-CAMAwpuO>-
zTCHzJ0a3|28{fb2XWEN%TL#!gX?&k_znqpIRb<F7#FQblbZ=u}>ArOf<pFBxuf5nJ
zp*@JOQLrmBr{@rEozJFnMmpWmyMqk}r>br-z~s?xMiKV(mG1D{L<R^|uE+I3-R$K3
z@E?QZM$6Hqv8u)<{nogiJt=BOm7kvzP8EhLKY3F;bYVSp0ynBhtjX!&XRk^i)^r~S
zV_S74h+;|EhR7d-4rh2)ZDAAjH+9(lKo5kigVKBiL+Dz@ksH#AmphF!@3>aEm$hBq
zHWH0<`vyKryiLpHO6^^j7*9Im^E*SL1O!DAdKsRApxNW<XEKeB=q&ZX!vt%2(zlZH
z<v;H7;^e-$^q9Nk1&jNTxu(U8-fa--S41)}M!sqXsU&nNMzB0vlR4|$bo>;vAm()~
z2-M2h3ygdaZK->|fu=x^W5MY<SMvt1#WKJ_hLc^-I|y248vsiLg-Rg$s)jui|4v7(
ze(vLwZBZ!GdLR`gLd_<vsr3v^s2|ss{^9E8e(!hMRh_>ITc8R(FRL4?ZdXV+S$(Js
zUFL~jI%yqp);Bw~ZoOL~+f7Z+n*~}|!~}SRgmSc`KI}bih1Oj_RFeA>1Sy?=tIgW7
zo{6`4cQ~X^zIan%!>aw>J>>6*?Y1cJR80n&k_>GIcoF0ZqLKP^;mu90NC#~#7Ay(B
zaiR-*Z&MTj(Ic$Z{T8XRA?L(Tee9e{IX^z!+jl9qXtFV2NZbvF-7N+r1ejm=k^d=%
zg|~w!m$XKue{7T$5t$V3lfvQz@~6=Ac#pQ0;7^K^F+)CE!%Wmgv%8KDn7Q#r70XPz
zYgJ9#c&Y~NWR*2Ve!-O6dEY)*c2)RevP5<$vRe@QN0}3#Au_`os7p@!)*M)~aw19S
zg$yAyZ*N;#ovc`MJKmVME@qZTW%)Xr32(Md)U^Pa{z5z)p(Gm@0}%JkZ|}P*w=*>&
zxjsQ<T{OwL+}wo99!kh+mfsER(0u>nd3GR~{ca*oC7gWWdWs1_rRfEBzT561F$CdJ
zfgU;xnrU=~d2;iKs1uXpIVYPFp-qEL0)+4r0h>PGv<U<tz*x6FfsM?v#|6iv${FqX
zqn!g*z)E0Ib@(KJ^oRz?BN+KW*|e?x0#Vf4-APuRirzPRTnYUP)TSo?3)qp~rKNN_
zn$fYFZe&P(<)nTT{~pav{oC|K8ZjP|#+9;kDcPES{>mRd@FsxlhGrzHU6%P>4y=c=
z=EY?wEiry<oo>t&MHNVF!Y-m9N{DE+A>_ZwNgk^+0ulqHh~Dnd&fo^F9?0Z{I1o(j
zd`TV%IAyLBm@>IuagZOUyETI7sQcJ6{<54ofEL&9u3WGWc6?o;H_lN@I`zOgG*ahJ
z(RHA-ye*m<D?g#@Z=`9Up{^kk*A<J^cwI^0pUSY0UP%y9L}k?Cz6)(VTkr_O_@K&J
zPT<D#)C<J*u;EA&yB0<Rl{F9Nv0$$vJpW4V#ua1;y<!zB%6)hkGBQS*X&v7^A0NjO
zdVWDsoDWg{5*AtJZ?Qqz1{3YqemP=mv2E}2Ve8Cy!c%Fo<6kUs0%Ty(^}lziUGaic
z-3e_J&~6xQ3obg;h&75?Jn8F+)=yn=+fBg%pKj$nrM=RtA0Kjg*^J{+YV;uHJ^Ksv
zyqG(UBVQdx#<NA##NJ|)FRW|v`wz8bylZV7$l^RP?zxB$JKE0VarwIJ+$kl}w6E#g
zuflhPubxvzQ)B**es~7>+jL3T5$1|dzQDU4{l#i0EJ9kV1ht=YpNR-b_bt$-YE(<X
z_yuU6cy5!&q?Jb_Bne{pI74^JyD?p~@<Gw*FKwuHkKJiTMN!i?@CaL{eIR%HRqOsT
zqDMdD_Fv7Yq8CzJRkxp1VkmGEjzWzVZTeF8)b#JaDbExHw<PA|#0oJi|3K&)DTs?m
z*+DXvbxb#oJZQrW;b=p~B<z)cT-HbL<nSK>cc1B6f)~CI1$a>}s0Ddy^CIowqeasF
zU|9<_&%SKS23pKn(-v9$j-_AlA2n4YX8Pq(f|+IhwlkCGsgEYKd34S1xRCdy*N#uy
zT`wNxWMzF;oEdnXmyp_&5i?*LVr^CM;vs6UF?Z)%L8!T&j~gCUPSx=!9jV(Lt6lPu
zh#T@)xbJ>JR!PDa_D3)qpK0MZ|B_hW71$czlZdb`E)`=>B#AL8s5a|=uO#t!BlhU}
z?mE-<nN6O`>z%N%W@@RWuwA0<)*zR28m=Or5NF)4UxKlHbY(*16C3-AU+x8T%mUD`
zwDaC<;d!Q4;DrnccxGb+wDXq{YveEk*1Yn`-G||`kT{e)nxRnl)~oAw^T~8tkoe;d
zcJg89c|UfkM$u%Lw5U|q9Tbu8V)t7eSyIgg)XikJgmpa<`t#=He32vYAJr^01nZI8
zvLN`EWgHGO*_t>kpAg%P7#Zj#SDSPFmZ%Qn%LWaU4817?rr&mTMMvS&@V@yrw7?$0
zG_fJGqz<<nP>$aj^>9`^U3Cw)`R>;XBvnR2;^78Q*O5}=C?YE}wRpEcvfsh;B#Exx
zM)en_V_r2&UjSCaw8YH@;_hbDQ&mOe#lSD3j{zYET&_-UP)fE<tX@#!zXQlgHa}u*
zzRuC#7@smS!7KQFb-1X~_1v`Lp<)CgW!_YeoF7J<sOIKLwmLM$)M=R(y*b2+sJKIT
zfdn4UXn>!RUR);FfF_9DBU&ZHRc?FhpHj}Wkm=mTdcxtKxz~{-(;-il^?@4t<j>2e
zYvK>yAX0g0;=x{#Y0CCz8HhR;JMtl}ND<!KZ<ulzW;RGs2<+AA3Xjj3{L465d-w!Z
zA@wMeuPP)0J*dnHHjTn~8EyUd7V?l#_Y!EUD!zOuL`x~xWAmM0mVux_c*iq&a4>(G
zpknixH2p}tBoid>e7^9KZ7K5~7GU9dPskoDU$x68R0!3I{5>SZJge@f=ONc`_<Qnl
zjwnt#XxZE861=XG4-*s<Q%p^ueLBt0knxDj>h|4hUYiI!zG~jxd|oL9FMFkLx=%+y
z?(;-IDOD75?@zj6{4KIilB=clt9mXUUlEN3rNEL{JL`OomN->VPAoeCS1UnDPXBBQ
z`GX}NlLk=U)s+=}Tb)%m>7-=IsY!0UVGn!r=4Mlz^1=$DK(ZqK!M8cO^6FssewA=k
zo@B=HxUa6aB;j#)Z0`r=D#6Xk+*{1+O}D2j;ZOr;PM;3lAzuX`zt{JsC_yy)6N8b5
zt(<Qg<@T2We2f)lutYytT*hq0yx%+J1vRZ*qL%$RZ>1q|&E^JrFeQ$M(8Jq$a+f{l
zyj<MhAXo?8l+U+YqNCd^^ylQ6^#6>>juJVSVs)_68g{bvsqYH8dNeOD4UPTa)0^hT
z4l8@<^w??kSh2o$KdwjT6h{<iieT!w$`twuf^IDi5XTHUm9NHtb<?N&70a2f0K-ny
zkn=-J3jTYt*BeZZjUyl4XZ}#e9}A-FkkO;YsU*TAWKUtp4}{OttZ$s{NsXbvGFUV=
zOS(3V4Xr#oz9wxBe7t*sAg_GJO-0^6P_4Q0Z@WP3w$B^!{zjXp*hH0+Vw7ka?j5%F
z$N!bh20Gi%i6iJ8G7y-RKM-T{p}onzJa+1>+z(0XaFa$|i|UVbOP4R8s!^qyz~EaR
zrBCnG<Z_QzD=M_pAZ8lFC5<bN_1rUfI=5!`*E?EjV;3A9pRbSP43Iz{Tc;HEKV+Qq
z^S5{$Y=q_VR6-m*^w}8-hNKp1PV+be-w5X~bh)Y!q??!p+8yd)2n^B~xF1b`%SQ4X
zzzfsY%Pv8~_WGwq9_ivUWHI>hT{j4~H_4y?#kq{SS0vo}YkonMJC#Oo$Zgdu`#lbA
zP5_GPMQx4ExKHh(GjlP$Rf8v!=npoxZ#3A`5_T{5q>%@II=!eJvBB~M_H2Hbvlf<<
zJuduq<L?OKK2nLD#C$&f?UT7{b||yK0EYQF5y$%fWc@=o4l)c@+&&#n-|kB4dISV7
zj=meO%?QJdw>wy2BIB5{qBu6Iv19cmT#e$GjKy-XIOSi)l8o-0MqBOa?$fF8ob4os
z)+QRZUyE_#2bEPCWfqZ>gm4Thv!Z!Jjs+YZ29(^3F{{T+lmQchM(uuJ?<|2z`fnA)
z?H;Q!Ud;3Cz`GIoVkL0bQpJzxMySNzL=_dM-#q!mt0Nqk2g0NC^G(!A5w-j*HyaPW
zG<ON7WJF93Q{{N3m;uIx(niyqVPRKl%>1A9(!^d$yGV=-0B0hFjO{o;@cKvCI{`qU
z=h2c0#MkpM135X?j<GgqbW@&^qo(T;3%?`2O;=flmOjg@<xvaBOCha=k{5^1M%69y
z%_I24jOh=DF}Ge<NVa~KM4N4}|3bw>A123G<pEw#$*U9rmnVW41#@=fFEzt7&wbI=
z;?NtnAxc`?T#pdtTwx92FoyhqXOCeB6;-^q`hkK<2-CZz=uBe!CBS-EZ2@G~{jBi5
zAfA1WPb9-c33XC!<BEeapv(XHQB4{ru-;Y$mzn0}KxvWk;tairio9Q=lN8YCcI#}#
zx=<`z#5N1-aJ|3V<|_*#*d~+9vg;RJ!<EGBiGINPA3^;NyR;SGWn<`_1Bcnp2I~tP
zKY3@~(7EqhRQG5>@3P_~h8lVqN8I3byGA$(4`l9~yJgiojE=cBf%RkEn^A?xCW=3<
zTTxETD$pMV8X;EqeYcwE=#5}ki^q*l_F+?2D*rPY;XstTBeMJo>#?-42qM$6#U1S`
z8bK~a(EdC5e9y1r8A68n2Bor`Grg!3)XgitL~@xWp|!Sq^Xeq4;X!FGzsr~K7K8*!
zp9^q_k8{|Mmw&TS<!4?KzcLPSuk~lOg|2Jgkd9VR@F2*UUC_U7%l_oSJUa-mX>?_x
zeJCP7UTzFKS}}e(<0P)tyAy^pI6B7hsOC?o(&evlY*9ndy+~^uk`56S+MTO6LvZH|
z1Y@&oE+vO>FcJKE>&ZZGu`fUBd9{535;08JepNj57YcrR(oXdkW0XoV>*2~eDN>DR
z&-_lnw#!k(iU_#7YdgpD%Jh@J5clKE40q-5QwN8**i$%Yht$^hYUo$Adr3|?&>LZU
z&F?gX;1`ut!X~5X+Cg+w^4Vg$@ut9H3ni`i{mY4~YVGIqp;M*hYcU7(w65gl77p;N
zf%*nhy{dkRg>*W|r4ttYAaoA?xEr`NQo5VZKwcBdZ!DrU{o+{C!YiE9R@*Qa-lWnU
z*%=Y%DK8k0@7i%^+_a6k@E_=})M5p{*plEb3Xja`7pdswjNW(dS;_XU{NNrLKcp$m
z_bz7Uc)YvT7znSOnbq3OYj^2qv_oyZ-8%|kaPLYxB7)-gT6fVti=Oj(O?MLQEx2lb
zI&3)b4Hw%};nRT9H7a)H=!s6UEPH`*UygB@yRWzn4WsHaUUlM#r`i*nS5YhsPJKll
z(_sU)UR<4JaOv$cADjs7PKJg`XNvfRUPIF>%cgu@Jr*e*y{U}$oMEyZ`HSnlnnvGp
ztbf6*pwlZhTOi*B=y3h`99|S0M~q$;+_zXLqXs-qeI8{KFs>-V8z;I@b&1IDdVaSQ
z-}yGUUZog1()86yS!hYy|1G)i0vGpTs0XL~sbA}Myy4tAnu=SdoVV_mc;R*LdolNo
zkb5A*hQwHb$r~!a4}p)s994GM-d!za@o;$r&(6}3vvlcHe<12><%FV?B6dMNqV|C8
zE28f_^jEW<HC?uKZ*0Ph6d#Ll*2Coo$h>5eGtEBcPT`)9C&MtsIA(V0O8i;3KaN<-
zhIhh*6smQ;ynKz}U*7_#Zn0=k&Nz#DL6U#U4U=|B_}4Lv5G4K}<aa-L%{z}(URx2e
zY-WCW`+wMb%b>iLCJZnTAi;tK2=4Cg?jGFTg9dkZ2<{r(-5ml1hu{vu-QD+aKe^<7
zzgDWYYHR;c)ce9YGd<ls-91k~gK^Fr&b39#w)Y$!xnI_*hC-u7=qZ&>uI>4lRzg11
z+sEGsb$$BvE6^tc*Uf=R^Xu^e=|d8PHldqp`_oU3he8@uz(4!^Kx`?1DA0V0Jgid$
z38FD<8@l1oM69u1#YcmdFPd3#k{Hlc60#DtSg1=tTFo_je!RMbhVZ5-f#b%ckl}o)
zxVzs5n`k#XKR9b9YuiODkXo=jo6Q~_Aj+ok3FeofqL|py(*%ShQ`ZSLlc41xMJ$!<
z*CJy2bbomm*hqIj7>T#Q_v;}492XJMB)a>YRkc0OSl!W5_gMv}FWj5|QuMv-QTq8O
zserb}Jps&nY_1fFSc){Xi=8nnW8UsFG8_PXv3W;V-xsH>5ymF`nfJoP>B)9;f1$qq
z;cU>!DQhqgzFA?XEg7k&(Nf6K4FYDT9Kg6Zbu!o{`Q9qBtk{q^^n7nq2>571L0&YK
zQ;zFN{Bhp1tLLhHY(MR{GQSDC^U|fVZuF`5*;sEzUw(#%w?4eeS2AjyhPR7FN3GjO
zzn7q|zvBoCaRwq{;;FpbLf5Ek(WbguIZxeMy00}GtkG!ZW8E~qAVSr((=QuJ;lUvg
z;psb=t5)zbN{J5&-U${X+eur|9vt2t2A^See}0T;3XRE_VHxl2yb2_Mf$7yj5DaH;
zbO^s+yrM0MsJu^qH{iGu*0p1e>gjHrnioKx_&8n@<bCeZ@BwK*s#t<R<Y*J}-UR4m
zgSke$4(g?+XV}DzO$ep7A@mksm^5Wz#0vjVN^{!MH@0!Pqc0PGKFXuMfVH)h`?#fk
z`~&$|%Hz7pl1IwUwe#ctQoXh;ON+AB*WeYm*llB-?)#q@Wl=0zI21j_5_WVdBY}K%
zdtk|ul~M-387dEd^SQV?QjsUyHJlI&pWZGP`0P7Lw@XS$C~sOO0PF`H-fzEu%<YdR
zO5Zz}QkCc3>!`yL)}bJ&n4`cgy*PSQp9-K+g_wu8P2mc@i0&HofWM<@IsrxI-`Vw}
zftNnZI~fWNhhg%GeCiJUt$+Ja4R=8l8>7DAsayCtSS$g*(B|kidyL_>$?kYsabg47
zzqi@pFbirR$vCwL6!g5yjLkN+0~L4l76o(%vKObg)xeqd9ExPqmyvaj=`9kgkhop!
z7O)#mCeRIb@=o6$R3{u%_8!5b&)|E+LD|#MRsL2#XSI$E<Yy9~wOX2+e@@O^v-PoD
zs9V|uI+FZAU0SYgIC^|w*zFI#UvpRNEXvevh{wxtp4M<aPIm3wUJMEH_py5Cv$TB!
zV=gGb_&C?h2|m5r6?l8j&qbiZdcFq-E`=Q$yE|drmt-6fo#Ba@&()HugSDrs<A%LI
zXNJ4g$BD<Gw{e<kJMzmo%rqKDnPdea<mU&VQ@6Oh2{Rily-K3<+h`VssSZTzJwmX*
zh^lt$l^3Xvyf03KXLh0S^tX5DO)=;48m?<o{-UK6B{a?YXOChe>ECb5yebB?+^7fo
zT6#0}{X4m|AB@<MNTj2Iu0)lpv8ajwg16|!PoA9bN|S_t@6f-!Zv0)>Uqzr~wr#Tg
zvuVf>KxIw%&PcJWyz|#fyx5zXSjjs}R-m<Pa}LvRzeHvSNp+h|Z(@%7`iY#J(?3J{
z18ay-E}|v>21FS8FUjd*TP@W-zkPoDgGmW47gNwSPdmNn6y=gMsTnQX#*5<_<#5ik
z&s+mnsm^)OD>6LpnsI*ETzAEe^u1iPR7Vv4(TS0ZTEf~6?^4qaN;Y-1FnilR^)w$f
z75~P5(yPf#og6)zT9iphr_e6gZ(zLw4!}C5B|5%c1|oyhc%$D8|4bs-%;YJ9qb{k^
zwlbRi%)mM-=Z0s4gW;I`fz3PN8(Z85YV^dYs7$U<H(iGG&}<sb7N?)z?$xBZHVIo2
zUGxcax}T%1lYW!;1Kp*O{V^U<zHn^fd3@GuOwQceFp?1~A0cKb5)u;&Xv7_<9I-q+
zZ#R`yN}U`fOE%YxnVi4QKs_0u!*s56o-$t^yIKGKGUT}YHMHesZ7`X0aL9(9=D}Kl
zfQ(Gcbx*~J9LHewND6dX{i{y~QVp{`cS^DrEsrKC{8`*Fov9o>C5M2unm0-Hho3#J
z{Ht%_xP2~B8<=6Ir6C(4ymuo}_rceJG&+9axIvw|^#WgNoa*!L*2b^JTq7(H8X9j?
zXJ=?x{EZaQc-!KGqf8DK+UMmumT{Gs?IzP{%=0~;=HrK}aA(t#`i0&*0dU_<EFKRZ
zOuIfv05K<krP&f7$E~q!9Rd}!)N~yK4Q!Q`odu92bgrf@qdaVM*ck%kf)Cay=B*FT
z0~N|71Qi{+>6F(=no8Nq+zQrVD#X387@1j?liUd&WWudk*^SeY%BZ;XX6Z>*KXp0s
zH~H_QgRjC4VLZ<hL%VGIeYNhXTOZVhWnjj063TyqPVgO$n{52}eU``L_PnFT&XUmE
z@3zinoi4LYZQVv|=A!{uKjHj|PJdYyLThG<rVj67tLIGa_BY*38?8j;&V^2pAAgD;
zn~6WT#KzL~azM(3ckSL1)X-}4+5jCoDjdSR)=FPOeebm=SNcpX``x|gvt!}|aPpaq
zqwJYPk{qz)y5dXk`2@2VNVt)&1p0)7Sv%;Zs;qj7*|?XCL3?Z<6m(X4-I^`;XkROR
zdxEWxiwgb1cjK+|0&lghViTZ5aS;E3?;A{~VP0_**!#mhim#l|4KGW^0~R<s-^>ie
zj#Ack7eJv>gJGa(SnU}M1+65}Xkgg$V8C9l;M<lsKJCqjjv}~@pS}5TmsR!ynuql>
zZ5FRIpXq!oB>nrY_42l>0PQz6yHi}{TWW&|<&pQ#k2q<lQIMMi=s%il5is4b{ozQ$
zdhR6?HDsv3-Ldm`7E{X!wLA@_qwJ39c(<t+ZT8dHonsyr^DWz2#}J?-KIVDetdiUw
zMvx_fEnv6$m+E_LE;4Y))AmOBz=D&;SJQ<bZ63R5t8zmuLo2U<Zu<KCU>Z0in~m0X
zm}4T}h(??Ey26>Uz?s3{8(TQB;R8*BFyjA-(}@(WYbfA4nOd!NUp7-K0s)a6?{brD
zIsc(yof2bE1;m@e8rDb6`5M7`TTrC;%Uzi{WCOLYvhZ~Cd&Ql`h_4!KeLasxY7c<E
zihx+2t`VI9o8O*EzmIcu=InJ0=L%?+WO-)C{scG`^16B@?_xXkr*CW|^7fN`g949I
zbmtvc-UM0asFbn5@gF$bZqCH!@Qk(}nXHWcHkOk`uMYt%3}?o@LgCetCo0KF3+z%J
zOL1(?$k~%CPCwW6aybF2kWl(HTW?wB{z>Bcpu@>I&Ch<mKx`TSS|1!vj+{_(xl|uu
z`_s5{*!%W(SHx5(M$%b2o1qt(<ehC**u4!UyP3<~I!mg}PPPjTUC~sny5|u1ZAPlg
z9ovcI<}l8h{VgQ2iq>>B5O=IP=`=lD-Q%EtBOrucy;;i)#7Q9dz|&nHam}fA{`_fg
zv4MuCn{*zxX2I~1ezi}P@*_vU{?EmtJU^g;%}vv8wS6NiwA@SIf48YGQ~1MO?-}wc
zyXNnv8z8ogMv~^#^td@S)=pU;P_Ezny1Cxh3!Iy8&YU7KZqmoj{Od#_k@wrM*h!Sq
zgC;*4I`lga)@F^Z4P|Kdg?+}Rk2{&3eWMicXoGnP({Zipm0+1Pno3HL+NW3*PAeRD
zx+N2*XKNZ^Bbw~`X(3wUc~U4^17qa0pKtWoS`$cJ8$xs?xRmpxlYA1U7*2REFh<q~
zwiRLT>hp^wrBx0l8)=l9sC#o(*EhW0!u4L$RV_IzbozY{Ja$<o1@RY8o{;P!oZ)$X
zkjK6mm8W;z!eJkaFB2kjqP5Bd9o-}p38+k@0N6!9k>B6Y=bA0%N+gJx^Fw^h+iKNy
z3%2<HBc=TU(RpuC-q~Up3xmb3AQj5l8CW->6+tv8v0yX;?R?}}-bcgZPV_YxYtk3a
z6)Z_h0>VZ^^Psfw1Zc6@!F&VtU4egR+}=>SY~ChNj$M;G2|_u?=w>H7f_B%D=*TP=
z%AJUa=tM<OMz^qmC!Os5x)9&)XumqFZMgRt3<~SL;lr`bp<?!w!MD1NkMxPu`(q_Z
z)&A$+M-7iC=|!O9XUO2QA@M+48&-_{f`D^@SFmi@P#O!)J%tVuPPq|N7!Qi`z_2<b
z#~C?toyYAZ%h46tUMfY8*x?xbV(3QgjCKNb+O8pVsQtLW_(f7sa7!1MpLZTR%!<c7
zRm0@_<?}77j%CX3;^>=hJJl8g$gSrVm<Z*$AF}A=gp7q*axqa+g)t#WG2c`9f^yK(
z!x<^H^N`xC8gGTQKtuhmx}Qa{Zi9-p*?tA#J(Uir=Gp_@M(Mum!P~!cfiqXb56aEA
zA1`7>_{Vf2STk-f_h$;5_Zw}u^|^a6Z?VPcwzV2Ndc;FdDIvDK2@qk{J@2KC-@0~^
zdCAc}tiwUIR$?$c^C7|BDEqs1+M!a7bYj*OUohD9E^X#`K4sV)k6|6E%1CM)<%GcP
z!?K;Toec;h<=8Z=XqIf5<9I$KwcPxu7Uj~6g9|5@rM3E^(>&QIq3wJY95@+!nOZG#
zO_40AKc3TXb9kx6waNL8g??u8!goE&nLAd791kbLU4%#f=VD3BDO&_36Zi+}njyQ1
z{cm7jrNI^wM!%bIT@N9N(jx-AbiWHaTt}dx&NfQxm#43yTW(55Guq#1wOIagNVjlu
zKcqhIwGC0A+Y5YXA)3)%k-qX?hvh!!{J9;Eg%E|{RES%lHHoUi9bO>c|8$fhLsz~n
z-?&$_Kbd2Be;ByaM>o33Wq(W(9$VqI-gXBOYR;V_R?l}Ut`KFu3Q^PMGxx$X^do>*
z@QVv-ITKV0<tn&;3*p*QjC@B4Q#2Q&mo*zU%Dx*TIG*c%^eO~1<PnqU8DJY>YWbB3
zp)rot)vKV46!OzQupJGhKM=#A^e^60<hIxq{*3r$_0F48UE3%9R(Kt@<r*~P=ZPzn
z-)R5S{?#tWCoTJEU7RI8S5;eUuH>MG79wKD&#1L_hl2?$%Z9KJP{g~1kSBXWAoUJG
zGJ9T-*_ZeI<yiN}&p$X&%XsBi$8tZ5E4jwt_b2YdTzJhSi(jBq^Om2X-z;sf8ET1k
zRZ16ioOm!PEw^V3{vtbR%ggB=3^BCb7t|SL@DKS3dM=}!(MYi!7?d2&9-rsqVXZc$
zVobt8fhHNh&Uy8PWY9qXLU-gdOIisRs?Vdic3VM-b!^||hz)E|ODed1Swhqlvi&lH
zRaP{wj9I5QcCWaE84XIW9ttw`hmd4)G*z@a7`kJ%5ts3yA)kKSbS9`lg}Q;k#biuA
zvFW@1HZ&KJVn~H6vX3aGKS8~AkWE3Kl4IW1nJ6VgvHY^T<utxh;6lupRAsM~>E$d-
z-^novt;MjZ9JqucO=;9&8})Q>bXo}M4uUwmD6|7#VG%YD0*^2@bPUwnDb?*<@nrcd
zE9wia5k5Pd@~&>b(9b1PiX%2(Dla*@&NPKe7C|;TCF7lKHb19!u>qvURa3_p9{Ez|
z^$M2NLCUC$+80ht$f5Z4a2{}q5}-`UEKA&Fc%!JSm6tDXnyvapz{gF029i^H+Ad{~
zeN+}aU}Lh(+9Dl1H?z8~ICOPK-~Mz@&4QXk_@<@gk}4?Kuc-o2>w|#5blQDEvnC5Z
zI=S?3?z(nWYaA)ZzDxhlqpAfBl-l%*RJImy(vikNL6$%*sz!N}9+}uk0)=L5BzLZQ
z2W=3V5=W$hdFn?5fE))HW^@MeUb^#7<skcc-`Rt5yH)x@eS8ywNAQurX5xN;KX=mQ
zerKBpoTh?2G3g^poQ^C_ICkv1JZ2=>hhh>vJsnUKDhc^&l&d4#KCaj|h}L?2Qc%2N
zCxS8I_U{0MCa)~1Am<ffvsoU93FS0XpHCG$#jU?aY|$<#^f9zW{X$2sfnJs|b+?<`
z>cB9?czQ!5nps|2kyGbKQfQBpU4P@#EH{l{BSp(fev^tQy75{G;)CRMfSpbS-1nPq
zGg&Ba_(fA!4}RkrlRwB-@byyTZ}WjmCoOiRv#oiOmTO7h){NU7*<2khZMObzGg2~A
z<NoVP`h=hqN57E>Wa*L;O;XGF-MRPhtM=epAoj_mycRD>Z>oC}4fRgWVuLt|?$%?!
zlQgvTFKTr0A}ia8ex}n`!>olGYKD?<N>@>WZTLjeKd$Q2Ouf!P#RMzB&9r`#MPYjN
zaiT55eu-?Kl4l=mLbsgr+N!9drs3+H2x&rBiiRp=2A|ajUq{#t25JN|iX8qo-F>pV
zYVWHU*UdR2!I4uX%dj>mNVY$0W?N3^E92Jxls8j@iOysxVw^+`&p{?AcUF<eM;yW4
z`IuG5pAh1Yu|8JW$%YurzSnc($)b%tL8v)MLOWwoNsQ>akAdC_8`e&@py8c1FdJ<M
zUZpf_F;_-UxbEBY?kmnNeL@JqadvS`Sm%8YlkqHFj|Dfe0bdU{DnYdOSG4xZ4#oy*
zs0^CYYRO2J_mHK+DKeYJ0<pA8cv}%>#8m3Cq-J(@({T}7@sQC=#NY%$g+-XQghm4A
ziz-P6FXWEuDBcx{ymgdA-x307Fxuc}P1f5jMb->|CiJpj2+K!KShT2I_>Vh9ONDfr
zxy<-;F}no4E$<u)mvSy8HY`XYxE+N4DNF0f2cjGD7B)UrR?DXDbHW>NimMJ`J{2SP
zoDOMk2Z^;F<Ifp9PXani#`Y#h#<(YQ*XCCQiv4PVE`_7n<(AW}6sxTw8BA~mb##_O
zw#tsl)#i4WgZ|oc0aX*;W;G|bmPZ|HHaXu`S`u376|QPa+_cni;f7Uzs%;9esVXIV
zSGiSunsmryE4MPm0D77?;c3AQ1{)KU5dS(E`Y+ob{1q6p@?dVoJ2Nx@%<~70=yz&>
zw{wralIzcpJKi%Q0be9TmJpf!mvHp2Bh4^gP0&2ANkcu?|FCWT>tinj6Jp>CMkE!9
z>3>jwdN%=lq=kdsSO59T|8SZ9k_5gmC9a4s`R`Ew&G%^!&>hMp1Rv7<bGS+G6G6u%
zb*NPToS_cb9wI<)N{zIj|Igtvys(}ob*NSSbB2>d04<^>ab52}hiilne8J#dYw#E5
z`qjS`NC1?mO_Jsj{~YeHAn=6|s9FDC&A6`w^Em+^5VcR5#s24TlY@aThQX$znf^J$
z|0@fUQVWWRfQQ)W`L7c5t0B))z8AFm&=?jR9DUR9DL5n~ddK7#2@Q>Gf4X!+hVhC)
zK~Y&kNGLZ}SwT!ywP))y<6!omvzsk??^g<nh>V7J3Rwy8$>IC^3su?mAHX)zx!+q*
zG&&2(X|`JWj#T%(dhK5;4A8Jv$nly;DatlVS24uc8~BR%p5<z-%CK$P?T%F^m{$+;
z?#^X56Oxb=-YN=$iSQR?nkWpe^+*^lDr*k{^-g>s)sM?Dw2J}|9c0wh0QrfLg~hZR
zQ^&tZUH{f6Dp6c~rq;nblol=DgrXlNLPjppl&YK(>uHY5{x9f6@tHEsT-R$$M5GBu
z_reP6IJc*s1e=Gi+qh}`yYr<P8_2PuHDq|OXZ5~+PUCwcq+c9pbaFDT1j=x9D0Q2l
zu;vNP?p(ETX%zIxt&U1Ncg;w*Gaihk-rW!X(2ZXN(vkh1PlRdBS22pk)1riu&Hn<3
zzS4?c>|j3zsL7Cx6k+ZUTJtY<Con?%3QUoQi$4|UoOJc?WO9cIZ2Ce$#l=}JH4QWa
z46}$+Vm3A*02^$8?EgMa94y&rVv;|}mH-o|pI?S35HA+|+?(o29IRB!lgc2gHX4a%
zG7HHqDiY7q*E9U}-Mea^nt+gtYuFQe)X=5X<uX=T+k;n{^+`qSu;tsv21=pc1iw(#
z;NJrNmr&q&aZ5f%zR!SEG}kCGsw^r}1A34sR@|=vD!d(ewENWs5Y_V5xz=qR=e5dv
z!{^8AOC0MwmFB}bimM(`v3~T1({GHUDjxiGx__FfT0E}`8Lrt(yxH#dusUvg__LIj
z+p3}S#n|&r@Wl?>=lVjG-*9<K4~^L3LNz5Cs<`hkD>B?pI#t*%e)*aWBlV9A#7odL
zD?GVBFC|7UYbzm_p5~ik{JE9@4KU`5O4^(&OE{z)+1wh=c=Hy@eScTX8WvPSO&!<r
zuok%`512-RWW&+7pdHHXh$e9dY&wm31LI=EAGf%i?XK6<$y(+m!*5L+_Y9T)!Hrz|
zqAQ5Oy5G)1zVr`R63nTZR^`=TW+N*IavJ(&V`qYLsUxGrizbX%7|c%wR~1$KD)(Y#
zC`tSzb6P<2?ep$D_dgv4Gu6w8RT#<NPfhI`3XK%087X{2PKlYKprBw<Q&5nqEb#gj
zIt?6xxRfBCi~p~3u!DUeyqs?I=qoNOHcpF(jB@9YmqRoFh}mq$`|~Aw!?E04Tk&F|
zqY-aUd$lWR_y=f<^!`Gz{fB$`rGzz&2d}j6WlrfcP-Gt+zgLQ9GagJL>gLwc^xJ+*
z2^xhmnx_2|1(z#qWK}IPhASG!UrbA{pU^I*Q?1NfR6HZL9i9aAW8={8{g5!&=xap|
zPPy;I0YLWYN9zXme^tz00M-Aomm2K9$edG36{O*m3(0~3-$Oa)vGe}+BIY{RVu9J?
zSUDAy-u(^+U>@_bJD60Tj#t(_<xhD#?lLu8X8zyj0J>aJi!^I4!pkZ}$W09qGd;7*
z<#y_CtZ-{xT-YqOd;PqiF5+kAub`BCR#~g;MA81*5%TUM&YB~`mzku;CE-h;j79+@
z267Ov=sPLbokCEp{o69!mnA^E8Pa(Eu@0G6iWUn=j(ya^)Sr6@P@UGPR^Tnru`@{^
zV=#Ik0(c+751Nm;zc_4ugj*h|#Bs+*4QJPmi$JD;_BZqYAKLHl_K@ZdQ17M6+3km-
zO(%#40E`Nu2$p?L2JW`sXGpY{imgi@-*}@0PJi#-o_9zvPu0J$NdJ*1ActRTV9XTY
zeo(^3<Txsa4`U)3k@C{qvff{Lcv7$FoX<X@al0i7_SVIHacZsdf2ZCeJqP~hJa}8d
zm@&ZpLXjNy5@E}gJO==%5$<-HV;u_l=i5YPizf5tL!ASe_;4(GgUda7jK_lO>4n#;
z`Z9_$FlK0QKLWHgc7uKxQXBw@7op)cMv8U#UWuC(L6cCn$^Mwq8Jq|axmNXK`Q~wx
z=GdQGbq%6-MZ&M*iUGFaGNX}1LV&lcSi@!4BvV4OX~Et|Sw3G{o<>Chz&G!cH{SLj
zS`3I#D3Ue*Bibm)ctP$faI@>i*^=Yrr+I{HeC^3a#6VhaTo6iP-PRw7Evy=5_C29c
zjf;2ymFM1TUvdCQykAeJhT6MA6EbZ;<lbSI-s(tU&f@xUW64nqV3`_HGjo?rW>gJ;
znL`1S*L9d06XsT{r=I(VX7Fae00>nB*>HAu#i|U(BzGqby~3UiQ|%6B`QqT>g9vau
zrSBx_aH_C84Eb+O%mzfV>*w+R7zJRaBtY^cs!_tyOTc604`Ae^TrT%iC2kYhZ0jzL
zS5PnLbsVNXAdL(k6kQfaZ~hSq0x_R7?!lH<$3mHb0ilG)GXL#bXv97#4m2vY&l#Ph
zgz#q9mK&o-3{}8u!vI=QP(gL`y$p<V`%02xHp`liV}J^^lC(yDs*y54lNcq7sukca
zG~PVQ%zma@=FpW(uFCyN8v#@2T?hLi4iX#|771W2hA+wTQ*&1A>i2(0(6p25^SDVs
zz$|LTQ_(OgH-89o2O{0Sy~8K(VZWEH!=h@!U^C?Q>;_2&XstZ7OM|o7c;DCJe7@OY
zI~tG8^{y`@4qOGAu%xOjY0+{p@6Q>SXo8NFy51%i+g@aslxR2ty*DI}Tl~HX+@Jp9
zmJ5%FNVutuYg*dy6xGwbWG7qrb)M`75^D0=yS&Up{=MHf&>xMMKz<vQ$#FpGes?k5
zB7gfkzp6@Z+4-7liN$@sJ1>^PAhjl}>`68*62UzG&!NzQ4vXWOe~c8x+9mC|!$G4h
zFG?$oj%FG!HB+7g8g_`dxj#@luaXz{>$Xbk&`@d+wM!?GpMIsw^J7d(6Z%JdpAye&
zA?7)e*UDEoHi#_X;?lHoFp#93o1fqB3%A@Z8}fFzK~GQ5;Pwpplj@u_;u<{>=#~~n
zUbp#YS<0$^j_eZtJqCDA`opdzIeuXw8LW`$g-QzZTo4k;)Jc(HnJY$*A;Lcvwi+I2
zN9%4}wqK!S6QO4&KB?K+Asr$poK2iK#C*MuFN?~I=Y1m2OFPdeqYN`bX(k`bLPv+t
zudwbLe3*jIC(-q%&3*EQC5C5)5*0E;rq7_NHX4r4&u~`KqqFiQz_rBggGd;11Qn6a
z%F4<qC=k_KTZ_WhIJ4X^8Th%?IRe0p{?vT}_?K%I*3DCx>G+u9d?=QGDCYixw_*9Z
zr)9Hi-33@%_4iuAe>lOIzgBxu4ssRjw9aDOjR0rz+f!L*Y=W@8eJv10F+qk1{UbsU
z{_gx9h!Ms)g=!T3eA-`jw7iC~8jUd+_)p2JGXmLI-OhrU|35~)Dg<O6Crvo<7=H@0
zLI?@S1w-3fm017$0$vNqxgg8$bsPVYTmAp9_<uuC%o5;)`1t%cm9JddU;eFQO9+=e
zwHgBpi!2!OD<T#ak*usNBHAt)_SDqWXI`-OY{q*aP>m@n`chb?MFRNQI3P50;Y=Mg
za{h;os1tZs$n#E@s?$K8(nY7GK^SI9qEMwa@?GbuUq2NkZXlPSU=YmV+M&$-X<>{U
zFR^EVTerY%-*8eyg!0vd437k`k!eA|9MBxj*GA=Z6Jo)twtKXeXtzr{Ndvb#NZvfc
z0T9Ii&ZpTf7rpXj-yG{H^umIYXi<ilFIOQ3sQ*d+|2<(TyuU2ZT^_$qFxAgbMYYkb
z44^3^v)Mw+7oD-x%r%ZULPSEE$QhjYXf~4Cc=mLUGZ3e&MXYMkq|ZnwH(gd*!A2m3
zZxZzn&vTCWo&r2aKTtA>&ON&2e8kmeBP#G-Lb}I?0Q(Z0g^bHu@2=si_F!L>tAvsR
ziz=Kx<p{$6ECUesy$525^eRC5nRcuponkwe?oNwjqzX!(00w26+nse8A|9*EoLu7h
z9J^e-=YNa>`1fKqTqe?%-Sx`K%IDE#_ugLFw0j)S9E<Uy!FYqYcth3rW+~`IBLPJI
zV{bnc>PFu8RA8butBwMscxi-o{0)BaxRBnzBmgdw-<FH6ipQGsaUR=j#i|mP@6F4N
z#*B3w9gK~QjaJrqF5J`3Q}xwo1P2BO3@7rW0J3}yGO7i9Vhd3pG!O~~1_@%BWYTvy
zoSNg~au)Bu{s^iIz;rzrvst?2iPwHwQ<_LK^O>AtvEl+Rhv$6*0`~78xLcq{P`F&J
zB{fXhgPhAQX7NKV`xcFx@fePf4EkF$8#C>9g|PT{ny@(Yh*`QD0FtE&r2F`K_E1`)
zpBk<&@I9{A8_<9Ms89yeP<)$3praUD8f823NW%ekTs`{G^|TWOgnIA6%nNo(zw6?Y
zk?HISZ!HW1!AEqVe7<0_zA3z^g+&ZS`9mA$&F@D!+Al4WEHxM0VC4v}hZ+D{_65Y$
zbQj>}p*x%D#jXR>m&lvdbujyql9O3!5lFde?He1GLQJ7d8Jn?uN8x-k3MXn~6Ag=p
z{`umv;0NfvX4<bv@c+&okOG8shoaC9`-HQES>VPds>E`I9$9%oLeXBpp&GY~tutq^
zoRSuSkPy;luqWpiHP$^>Pjl^eG4gc_KOz1j!WUr%wR#n+@m_43y*FjT6GWZxEz%Bk
zsD<(;$kw*65ouev4?V=<u;kiph5KVlI>*orMc@Y49+o*iTx4XX&0RG$f_vPO5tJye
zpZ<y0y8#Y&wagMNibs&yQU$O5rl*{Ug@t6Gkcwbxis@|m9w*6yoxsKQf<f!mdU)|3
zfUhxo?Z7wp8%>r(bp`f~r^{B1a9x{I6!dJ5SU1~lkHn~2J*oecNhBZ6>r4BmZ0wnE
zKlo33`tdJCCn3aM*vShXU1ZSXn4|^O8I@?&&PvLCy8W5TW}Ew6$H4A_0+y7Ds`Q0K
zd=6`GKjltSeof=8+3ShSR)dzo;-YiQ$-k{~o`9NbiCKBrEXO1uNwaH7y&Sd@^?0h_
zUKKbWaQD2)=6qh{F_b(dWJp$8mk$47^!h<Tab9L`MU8~3AaN)*@Aj=C^}`>N{RDIu
zd{!@=d$uo=A>YRs0?<R?8W-Ktn!&hfx1H?PR!z(HN6W^eCY;$5S=l)qbtygn0q57&
zpws&@zQRI2*B<Ss0R)@wAvBIQm+Gm)%U{1U%Xyxh!WZ2JM>ld&Gor*|u4C-?DZ2N+
zEyyLLJy~+U)>Le8jr)W~BuaJ;j?&^Xfy~br2p<A1ep{<?+2u!?5|L3+#UON@A3DZU
zrjs}~q8Ygwgu^#Sk-VPaCt8ph2zXeOCPHxhbC(-8?uqEtZ`_>N5r>w!_jdO7bF^y=
zOV!eBn}UtcPp%t}aNM!k5o}`9WvcjH=hZne@L39!uWS>hz>6d@_UnX~R;RS|^3oEK
z)HkN+lmx43sVb8(k}9`ban*WDU(-#}xQe9P#r?~~`EWrDamEU}BsRX9O~HEPFiaqH
zcYARmgA~sme8R|K(LcAC#SS2uIoPODUfZb-4HRLHF-n7thc)b{!a^}QttJ;#9v+FZ
zhBZ*OqlWCw-@f@04i53KxOd<d$YV;;d3nT*2UW!zQ6f)-1R~!O?(R_3huT7Y&k+9O
zSYBMr0nv*<EDC;QI#tvABEk?~f`wY{LODt_P*8r8vM{PCj$~vquVTDE^i1SD>1_tE
z1XtDfUqXYXgH7J6wz_-^!&0Xt5DsUu^|ebrmPe{ec;fo1@=D|mWWVR%R8<#;Uwo&J
zK}hz>l42nvPBk#h?I#J{nk{!bS@qobz58ws1^zH3SF?&SY|-OB&E|4SxqmjAOios{
zy}GL!>$P*a%JMP`{pEO-B9&f|iEqBgRkM{{SvUn#t4^IAN-XAMT!3kF@>NbtOLw1_
z(QW6c3Frbua9En2MxfHF$8h5R+e^RkPK4~%d@~m%nPvK+u%syAbX_<(!fYcq;R$((
zYFrOrPC<dRvj()V&_Yk{N5Kc0S4tgJ+JTDiMVizbL;CI8u+p(F9CwgIs|_m>5|>Sf
zM@&v`;r!9Qx$(FEdT~J5l}I-~z~G7Y_jaum6*bL%h|1##rHL3E%;Hy<YTC8I|KXj2
zT02n5y##Mle?;s+R1)YZDo)K(v3Juzzh1p=t>4hdyogBnJjQ*IlwuMRhuMV!XCq0?
zq7PzSIn@l4+YHNpcrJ4=4P;)sN%FKM4HDc%K7yarLUw{BI<z|1x8vU0RRo&5r>VJ(
zjjDC#YUG7vAnG`4|1$?`#W$x(C$jR2W<Ec}`*Grl(02LMX_qNP4n7O}3MWHSVPRoi
zog>MxayMll@f(eX4<TjQ2AHVm^1YV)EObL2x_aPvX<=E6Z=OudST^(~P6W>vCSg=5
zTA_6hjvsL&I?Ho&hHA7Icn++ZSdZjfRHPmmBJniZgri)~Sz({(IOhj4V-N!P@toI(
z>km#ZnEsFrOqiFM5x<OtRQzy?QsUgevxsHWt*2psbne-#z9&H7apz8x<dtMyAsP(|
zvd~ksRO3{ls%gX>@iF1~ywG?9pvnzCS}_C-g@{zGUXCJ&NF`hUDHB7L%QW;B5qS;#
z)jCunTT4L)G3b8pU8kc$H?=vr@ZG?bA3SZPpowWb-x`#c;i52`DT#~V@hFe@mD7Je
zh-U1jJ;HHqPDX}?@i+ttptv_}E^B9!4h!Y9S0rzOpiV*m)_HG0Sj1keifC%pnb``a
zbWL?yCI!EG0Yon~6H{%K!y&ur7fX73OwDLS$;u2^v}lXXR2MkSeaGTrvyHW54ZQQM
z78?I-5^;Me0uaKh=bx+uuLds*G6NO~CRTyEdFgT}=#7rgXuzt=|F-8>roaJ#%Ow|$
z9gh1>);&?;R_x_IOW$?bop;O0LkxYMQ&nu-Ow#A|qU8JZVq^cmHNE3Eg0<9}uOVGC
zRw^``o5;}#31+^6$LgzKh$QAFzkX4xH%$jpOGyo%0VtpWNRm{e<=W&Ey5JLC!`J4i
z^BY`4-mfeZzh`J&R;fwtLn^oY)4sZK|7swPWs~%`DxqyLF)@zGaXfo<wdCBoIwkI#
z69VU*%=W%^Ef49cD(E2tKQcMRCDFm&51X?=e-9AYz%`I~FY*Js*fRnHBFWDICX6l;
zR4uzG$y8ctdIp9Am~D^tl@F!GrC7OneGi5C+L3cOtxMJIeNGJXanr6f_IBcWGJ~QQ
z0)GSs9bS+P<X#0nb$)~-w?qU4Li6+UxsAC?lF|)N@?P|Wo=)MWd}7gC)65LUq8L3}
z8TdbYU+*S<Ui+Y;R$vw_zvjbrY<NLI+7HEZg|^sDGa-;I=*AGL(NokcLPce;T#f}!
z(EnBt5HJnG-+OP?@JXouh&8Uf-mH%wfe3!^{(J6kKp&BCy)H(BTVHuIULCmi@Vr-V
z@B?4%w{N_kAmMrMw!5`njS;uv9oTzZ*EdlDfB2PW;KN5-J(^dJAAa^NC|D$yS0CQ%
z7k&2xK73-UM17@!?+-vgK>M(HH{f5t=ob$NsOWR*EcEMn0y6?JfWx(U|N2Ec8E-&x
zJf#m_so)z>S6;6-Rqx>0z+S)TLdNUOI1kCyADaLdF7KPUw?UY%EDi+hj)eEkZU&Mo
z-rsS!R|hscuGhi;9dULWz7Z1@g?F#`LwIhGPD?J0OH26N86tA>plhd2=D$TH!~DXn
zNim(R>O$=#>gO7ZC2%yyXD5l%((W47J<(=fO}67VvbE-$G2E!sgM>_h@!ZNvRpt`y
zr=%n4&VsMR4L3POO{)y<5ov#f6F`hi?lpT7wGlIL#<YcSdzzr-;xD;ijFUvG+p@8_
zB})5=kqSRJZ>p=t-Oh0?J|bj5Jc-4zjZ(W(!{fPm;Q+PwqfGQ&0E(#<T=0ZV)ioR2
z+t;E#5XZ&is_u9oI}Rr@QR5yER~~fUeyrDUTJ;p;>l8)fYWn5Sxp$0Qrdq9(?)fBi
z`*d9%8#V+AnaDdaK93iC(Z5H7cmGQK6*Dh;SHQOMU{x;kMqz$N)Pyt_(Oq`eYK41i
z_7B_AXX}u0S5NN!L&uFi0wZxFC2yw|Y;{ybF5K4}H?Iyam<AhEd;pXtJ3ITKTIjFK
zsKmsErLMUnHxcNuTF+?&2IIbVZD+;3FD&9NYE`ggS2~=p#^Lp1<wX$Pvb4Sj^9dg9
zqti~Y@s?4r7%crFIK%N&>dXsXnYx4wW<io^^kN@44&eLy`YN(@cO4eU^}<hTv%{lt
zR;*(d?<P_V6js3si>(}_JO40d2;L4wkevKgppPDdUf{6p>1WDWp7X<=GS3RpaN9i=
z(1L$!mh|;TH|j(e2!DtKyZTgDI42<BvBs4{$7+B5BjFJ4P-MdO<~0B-v2r`tC@i&z
zRMvK0F8UabZ51$mDM9*id|A<GjKqRy49_)2a;XphoSpJ~YdFFEdZ{-6zPi()`HPuZ
z!m<1D7iXY1EJtV3iGx1g<EPJSpHhixtq3hzj8;lcQZD**dZRCl&nGUPC*Jq*`^+>`
zN_=QM)}DeQ3lP(ZRejmSZ`{mpkL|^NjDaNTXZABuF3HL9LX$G{dn}vzm|gwaI669B
zT&f9b;q<h0KZcU|TR~N!!+ewoS58Pd%PR~`M%i?ay<<6T&t_QMR<RggveuQeKZPj@
z2vZQ&{JrUZ1!imD)KXl;5$cDOvGSquF@#&o<Hv=Cd6)K0rq{X)6X`_}xcXRvg3fEF
zWT#m}Y_O1<OGJMc$DnXrmvN5$+9T-^z+Zz1s&fZy!$nD9C=Zl-o~!rw_XiJ{(iRpK
z#j75>nbh6p*5(@$HNE{q4{`HAzhdxm8U-!s(BftbZ}p86ox`X#0i^&{6d85))ah`5
zyBoM;p@n#zL^3u${;=7&M<FHVl_t{mfomwgU0Z~kaMBG}I*cC*`<|1ZFZkBqQbtlV
zmRWwL(&ZA7Y$0ofH1ZZ&D;A+EaN!Y%h%s@2t8;Dcu^bl!rl(kvd>poSO8#&SxL_I>
zy!@HeVp3AkK<pHhbng~8cuJB=PJ-!KlKS=MZgfh@1c}>@pr7NCd&a~5=5`LyMqOBB
zdXS{;9vG<iI=Xn@&D&86LdZbS6A*!6*`ONEabz-qj#x+aNvnKDQhX<l7grSu8k&%b
zYM6c(W}Dq7e%igJrf$HZeu<jpY2&#+aScdy=5Vpk(f*9?N?uacFJG$SlIYH9*)}45
z9g8+5T}*CvnDKzL?U`Uk)6=)*{>qHrdElwaNVD;#<*WK$)x^s1yH}e`cea<=Grgma
zkg;*T{ggfF#}MuxMgexlI2M<`gp8%ii;H6(uTzXxXr2tpHnt5Dj|BsEYB8Mu*gimz
ztS#Pr<rl(*uVCfQkg2(kJ3n#atZR-t%D==$7p^gjpY~h)dT+J49<kj=mY+^$CYgD6
z@<7So=k<uR-u-Gc=Ex^t(e#${chg+uO;QCWUrM45@Yv+k)k&bYXd;Ou68e*w_6;WT
zsEoGGBb_*d0n1?>!_C4I#JO|1IdNk<?OxBFgK51#lNjwQkj>7iEF2E|E<_dNdPJ}M
zx3$vFf+3DGKsPPjWOwDI6HE=A%WBoRBqTVV_9XN}l3-E<V!H$-`B|IPsK?iZm{0&&
zMX1}c>&$>J+!G&^@VA7fI~1hP4$h+7g0BPmRze`p%fiF^7(VniTF)oQbT+8Y+Ae8s
z)L!Yl0un85(~N33vGTr88^@hDPlktf9xAIk$Bd$X-hSUeQZ{M>jwZhDD$<lIlh}af
z(RHojm0S+w02MM&RxVxbc4(w8B?Ov(qT}L-LwQt<+Q#vZ+wR*i9cJ<Js0ryQ%j^7h
za{L^Zog*~tr;zFE3_=tXrjPed+yY*ED_60OTA`ihyViO1ED(YFa3-eu{ySJ?Io77n
za^nGmKzvD_YiQ^o4WExK7{PQNgmx8aVR6XZGRyMEM!+ixzDDn5PLX5l1^716&LGVD
zu~3>Pvjt6q8c5PYG=DkG1@o?c2aXDm*B%3anF6U}LG-i>BXg}v#k1RuZq0{o1WCYV
zAFtC$OQqr*w2e9bsPF`(b)XV^k*X$K4buac;FdBnGSAJ7#C(`i*WjFQIjlMNXI)Sw
zconMf9)Pud2I<zF0KK#jnV)hNAg3rkpk@zc|HFv>l|I_lP-q6g^hej!OmZi)UmP8<
zg#u*qlI$FixbD_YzJCjjH|*cpWBCjLa7UZNa>S_K_iR1zn73CH6L9RL^paLG36x8-
zvy+5|>hTg^LPp3CcZ)7n!$;d*ttM{8J!lyuE;^(ecf_QE;^3APg@KAzo`GRrB5(9f
zp|0RtAz;_7sjE|sLXu{sCSUjaHit7>w@@{liifVG@;aEry#igH&9Lb;zDUfpGb{SC
z@ml~c@+(o#SwbLA4M#XRCJB%rIQUVdfwXqnWmMUECH`8a(=2Og6GY<nsoT<@D(X2K
zAAF8~c+eeF`fwOOH8)3A-hP_Lr6nR_(u>-m^g7C%-3Kj8g4Ar*G#%`nnt6zLxQNf_
zt1=wiIF8`KtAE@|aEFHyiAXR&5=E5M850AaDO1(wwyMA9ynYA;uphl5*N#Sfp6lQ0
zH;T0%tHLs9rI@V>b+IE0;9qYGL8V@1YP>@oiVmlQE`*;X<KKRm)xKKs^lUsBmoRvG
z0MA<0JDj(t-!E0Ze=o)36p-q67Ho5+x)Pa{H8wU{v!k&MG1uZ8s^PH-H*{qV?DqI>
zg8ojg5`cdtKdD79rE~B7f7E@_6cCdgGr4CytdR$<B2t<zU%>^OaUO<J0^vJ(1M{y@
z21Z6|Z28LqGw9sp<m8(^R-Vf7R7nKcP$Z(TFX`luKhnuoFd(%`P2y<LvKkfiUgE07
z)^rf0DBbKE8L5iUnz7RU^4t1H;8Fg$7tk%EMBRFDe>Pt{DlwJ_xOrJC==pl!>YmrT
z5w63Fwxnf>e!ZEuHv`xd<j}Y|J)4i@(CKS7yC5;p8G-5@EashBLO=k7^ZBr<&0ZnN
z!Zov-0wOmhgv=|&gQ@T`3;D&Q0OkuqMx#j;lZQ!)>T$2Zwic8`?_!q;fa;Q>Dx&M5
z3BTmmVoMo?M<ges1J`W9ZA8Fv5?YPADB7F}OUU8kPUS7c&Dizo{ZY^GMg>w{StwW}
zQ=l{_JBO>8IZ!at2n4(Ul3{t$#UK&SQNHK+I)yzd5)yk@PECp0^KoIKN^dT8=V`rH
zCZ=c)g2BM5uP$7W=lAQ<!h4{^SPU8@ZXzKn7p+Y{?rZcE9%*N1C%zj$)hu`hZZq8N
zuS%TgB<1bWoWzi05m-vp%=sP%|CKN3&_V^$gSjhIGYb*gIV*wSaP!ScH`YsBbUAbk
z_1uZD)Skb02jKsXP^_g8?nV+BO&C*@VE>t`Kz~ldTDguW7Wv!x<CX#0-&gzQhSzn!
zHFd8yi2vvQaD8v$*MGPG{-1yP|977VY(j*DghAYTtuWne`i~fFIIn_PSNV=+7PvN!
z-lHRw(|b+;mr02o(J$7NNn-2AE)X4=s8i?al7`RM)YOzyS*gg*-bMWV;%>*bWwIhF
zJ)V*~V<xp}0h<Q%C|b~Vxs;EPPfhKmrcpXmH~N*n?Umwm;35EOw!60%uT!NRV3052
zE|6WKU4Ox_6oNp|D{f>|1Z<MCzfY3d%pImHqLPyd3(5McY<jXh+_?B&j!NPbFUL)N
zM=gmnJW``HU-|hUWe{a>cvzhNe(pk2ZGCKn@#69)Z^<Nf#h(!rQHzV2h%gXR6n=GX
zb_*5XOR?kP6oIBwe$_^s+=n&P`gxjg>SR)>VT<wUX;XEoJ6qo$tCszvgRzRm+?CDR
z)}1{z52wA!=Q8m%lOGq>vS8`b($cO{0S=eUhf6D&fk2!VG61u?HUCyleTGuYqVmr|
z=HXw_)KJFck&2uT2-#AVIQ7ky<3<)VO=J{-2ynMJU;A6Xrw~{S=7CU}HsCrKhhReR
zb0P);6Cct0d~5>q9}%!P6g*M#GS7L7PF<JursIUC_wLQzg{7r2^()RIKx4H*v-au^
zq@3!K==-@`^jF3WqXbAMa`jfgU~c^O?1Eub`1$(`2GWPX!^b%_*UHC38*ba_<CN*(
zt`A&-KxiXjBiAwM?^pLMH;Q863>0q-n>8Mf9P0;#P&G+SO$)E&Ep&q?y$%}86!r9S
zYV~^t6m3p>l=~K{pQz^V<W#5N3pM9<Rd4^cr8nN4B)_ZL_@jO%Qp+EdhC0}f3xy6}
zW_lhRAFTR;k<bF*y3RA;EJ@sU9YuX&6%5I>LrbQ$tJliYF%am8S7df$?HxNmJXmy*
z<SIYnC^IPGyxQ@V)2M1MQE#4{%*>e`bx8|Jc<sksK$NGvSRDmK8peCJ&*!Eiq*9nu
z$`mm+fU8&Hf!~v5nk?Y^N3hA|^QEGa7(OH%98liBYlnb<1#fcOq!1YZ2>;1hmT&aQ
zFuBGijTv{hxI-Pr#`Vr^NAK(0uA@T_jnPRNHCQtZ$FgKLfPUuavopD|GPOW#n;=a0
zAz6C6K6nmxWgoWux^a_)O5=17L7)qh66-L{=p#+JT>yS5i@Wpy#;f1~qR^|jNoNyo
zFn)6o1)%48ke6oP6?DFwn%R75G32m(KBTsi(H&!S-s$An7}Vw-4}gRH0F+|GC{>#z
zU(TTQLrBD=EMn%`YBz+g2PI|VFZUBd9Wu$$)Xm$s{URbE;o!J$NN$fD+pCvuZ3Dg~
zc(z_R&Uv=G*K=%VM?6Zk*)Oxbgu}7QlR~~j4)1hd7i)YafgG9e_qDiTj~d(K{z`0B
z6}j_s>&)RHDLR8}i&i<X;mq?~G4Tt|iy{scsEFlR8l=t1kyIOxMgj2&&pc=rUlwo>
zSa$bRYx9hA6y+nkKK!eV>MHRrmVr@Isa%b+{qgY7W|&D?$k(sB3+MUfyM|4_kkQAI
zw>gD{JvBChdwjqNyTNX>zfpa~OJEQZB7Dtetf(00c4<b^|Km18R9dU7F+fzAe!Jmy
zw)&|AG@V!Or<CRG>AWTxfqu|X(qozVq6!hw`p*=XFg!Ws6?0Ht1JNbs^WK&xzH&2n
zlkcRYeR1>2P;+u>W+5{&2MjiG5DCubTm8VbW_SVt8)9Z=fsc*o(lr#y^7^HVp3gXv
z!@_xx2ndjm=2r)eHfQ}L13(R5%+$0t$-H7Iy}p%zur`k<Hz#KnrbnHejjao~EW0ba
zck)P^jEoG(RPdhN&gkS9xi!=l<_X?yq5Yi<c=J*JF2cVMJP-6NPO2wxoc%Om6G>pW
zSzBkB?O0!EahxzBsU@pQ!hSXhJ<5Xz3k$n&gx}v8dsvs7|86+4y?C>iWs%a~-~Y;X
zm=K-2=H}7++4YyDnYnq?NP3pjHm*l|FIbk*{Z-9`j6L(U>L{y*K(I{F7j#0pPQ@Yj
zvKW?EcGWG{Veg4%_Wf7?+uAsSaq-h#%qH#GNw*!KP-42e^H_RSSGR0+xIY<7*v$QK
zA~59KJ?+8Tv;T705YMt_IV2O(fk8mjkyey|34)8Ibe=h_JpmloMTKNCt8R0ddeb&=
zq_8nS(N1z%iy_5Q$-6Pg`6_35sb-+^a*sa#dNV%7pbS6^Y%buXtxYV0Ym`_)1Vr-H
zDs4hxXcBP&I*ywAeLBX6owJMx?mDw_Ws%hoFpTC-&fI+B{*X=R&BS%-D29=nrs_r+
z*r0S0_>)292=;N0^yH??<Sgw!;w#_JxJPe;ApC&h$iS9VvEcS;Uq4#YC3Es;Sy@#g
zAQ>o|i`Q#%6jBpu;bt(mH1@~z*a4xp={_mFPZ_^rmM=dYVxXC|xP*=Ry>{@O2|!^)
zO^0QyxMU}36XuQ<sE&AyxY)_elm!G3%M0RMPmYZ0y*d-@*hUFjXb<5^7aX%x@XveW
z-oMs}zdUAhHMdd$KM%TE<FM1Gg5!P@52Oo9YHIi(-NsN8_Gmo1K3GLFZM)7zWrb1T
zp(vq*01?%yTVC(r;BcfO1?u3jhiBkH`?H68lNJDek|3RQtg}x;-3TIRGcuEM(~7Vq
zoqo0OFlsMnz@>xl1DlD4?X=P9+=5_6BRGW<FZ&P#gh=2QtDJKwRq011=~<<?lb)l|
zzJ5uBgpE4MwDn?SW=_I$IIdu+FDo0HcG*eEAq23#9Z&bO_QxH-=1x9W<B|078}@wu
zy&^4}&W~PVG?vvjY|rZ3LhbpQ^)LBEK*mGO=u?w#U8DhAf7Sio<?G@&?JT$k8&cD9
z?B{}o2M`=u&0?j#t+d75@{F%9_wkO|%$t&=;5h_d)VK&5iOq<CSpipnI<H?Q<o;EW
zT1MwhMTtb{B3LR<okrx6vaqP-Qtvos(Iuw0ZE|QG7?O-StD4GVeRQxbGhbj|n+)T8
ziXhoMYWARLf9M&myXtDxzyfV(XqauALcw@_J`2(OQh!o1`pj&hfd||xP>kvMP+8|1
zQ^&l6b9wikkVvevFDj3iz~nfS;k@xETVUhqOu4>))UvgI$cuY!NLY&oTPCMNLtUw<
ziNJr;1=D!!cz1k${>zLs>6rb<FBk@ad;Z%MoE1_AW5KP53XY`YC~#=h{_C<9Nl-HI
zDreimFbo#vvnb~)C(bcEk5;?R5P&A=zph2+1j_sodeIO9P{^q44_p`Ux8n&PW_PF9
z`1qPxO|OfA8i_J>`<a?*%Z@&W?`;uNF5-#vP^@p1kgxD;P592*srlor^qWE}lbQ^F
z7vc7^B!uc3iUjHvAYRB4xZ1l_Q&R(AOi!hcC9TfcN!2+cZPR8p;R*5aU+Txe2kB4z
z{#!VBvFrt!K1dX-w5T6n(=chx1Lmg!9m>aR>s)r$9xBTPPV4IH2ZKp4E$Th1Ov1xH
z#S^7vmJ00d83bZsrCr%(j2Z*g4hMjI1XOSPfwmMU4tamGaa+5Bz-X5(?Y#Bmhr|nV
zi5Yx%;t($xK)wpCu+C(}?}0^%LWkN?|Do%`FS@=R@xY5qe^43#emI^3cQ}$`W}*1&
zk@4dW&V$y3+E<|cDM>9%-EjE<+-6#JC3>nDH3k3597zoyPq2MrF>9$LAZTUM`9h0v
zl95R`V0miQJ<uR`pvn+>gCjx1(o8DV{W8^TrZmRN<6N@89}B?mL<N7S6*5@p*~Q;_
zNVnkG=6V&P`-<t9;SeS~?%myqn*9I}gA^&u7IjRx==?sN9~mAjLkdetBNrDj&$&rQ
zHhj_fFEa7;SKRaZGoI|)KYsk!2fW3W44Xq}fP7C<2Z3QmMARo~j=B5dac*f0ZHl0i
zcwBM+-HeC!#iDdta9ziu>*(WEF*<E({HOdB<zs#Jo^7zmW%3r`|3-DdrV0Rdz6~En
zvzUi1+BzD1T1s2`Zk6VlnQFK8m0o{qm7bDj^e7KcaG#GcanWWFHjlJb_Ne)o8cmUv
zFF9GAh>B|N!|K8q!tU}Wrn;{L?WaPn{sHkAXWM6j2+liY;Mm&?YNq~YC~&eKzhHTv
zOU9Z(p1W!9-~rF|vyO_qskAoVUa&my)oG@8CpA!DT$5tVR!s_iD-uRYmx)WJCco+z
zDvBlI!+DnQ?vNmoUQO%yS|7L<J8<5$C|k>PP%s*eYQJgU!{lwyh)o$Dz#9a>!WZ5|
z>u^u3I@$y0S^lXudr3C)h557BTc8Jy6vIP%37*FyM(RxfCMQMdqx__0ljUyoN71VN
zWf`gAC~D0mE&{8|r?8pV4wM;WX4=cd)w|a(@@F11Lzrb6P<C7pF;w(bm|;wg4|6zI
zE#82`p@<<qCdmvpVtY90GMHXCo^{=^>lufq|Dxc%2(*OB$+js~(aTFY7Kt7~`Q!KO
z+<`A?4|X%qPaIwkhvC{xeB-I>dSKTqzwmA6JWB*x#npete@vc__@M5aRZ8Bpu>n(S
zc4)b2*J$%a+ytbO@l~}F#s<*)NSWsUgT1$ms_Om1MFCMtq){*cNhPH_MH&>PO9eKK
zN_QBvbf>g*Z#tCjZb|9xj{EN4xaa>{`+x73d(Svu&N$y34EJ7Zul2t3o%5N`^GsIq
zdp0JPCQ-O?PrKz;$Jq^582I*lVu}srvT#wj-x&9MYrwjq-;FXeTl7!hW!g!Id<={V
zd4xp?jFszw?xu9bZpx@9-ZABn5|NS`s??eg$P@;3?A_v!II9Dl{?uy8yFxG(TZ8u!
z%%(;VjO1-0PLl=7s_S1H<Ehvx7#Tljr{&1pr*fTAV<92y(xD-4DG5n^eS@B$>GNA(
zLf%>T3ZKW>m3U!-WGC$YG+>Br!UF??^Pctdgg6W`#E`ARMW?s=_KC5-f$GQbD1kH|
z+BpIzM;$)u^A9O@qo$^Qx4)eCOHquU;bq<rcgsHn779EvnsJPPB13p9l1U?<V%%eH
zL%>qox8`^n1JK+0m+t{JWdI<{g|S;+aAuhq7p0o4+TTFUBU=pzR1g!tzVjZ&f$3=~
zkfK(_2}Qd8B7*K{^;sN1FnGjIt)enIBx%HIzm?a!9`;QCMNIjG6T#{oE~Bj)V>2Hj
z(Ut%*W&pSsUdCDuwq~p3EMDyQhP^x0f2>pBRAsxWXksE(z5UKxv0SIx>292ws%l3{
zb58T$ZUQ5iZ8ZlHyrt~P`Ud6GR`Ljp*Yo!{=^gL1T&4l?{(iFJxY3w)^td?cJUT^O
zpOX5zQGH{cY+!mdX*nW8;EaKl@He%wt0rF#^ku6@28fr{?{k}ne_y{FH_O2^vG(46
z9_v5n3W}%L)17bFl$trooxvOCgX{!ZiyyagNIiQ2=?Ja8vFp!+O?dD{nVMcGXjn|>
z#P`i^Z0G7ZE^=|)ZQo>f`^}lfp87%3RQPey*`=;V2`nq#VPKX0-EZ{jR}%i#50hMq
z$1HJ<yN0$Ngh6|9UsMonJPD89^$;75S3lr1E|HSnmB5nd+lti=)u6??<o3({zA?(h
zbjB{GH5u4+Aj_^3wZtyJ<b17`{DJdX9gwNiS+8=<?=Hs9AHL8sn%5573X3F<Dc$)>
z6vz?w$TA`4`LT(yad^GpS%qW7<3regF|ybWM=izr8j|;|->9jyXMAU*;i1<lE>Tu^
zx#MDbuYV#aAm9flH|KbgHNX>IxJMF+3j=E7RHR{G*1PnUQdl&h)#<+86|DN5$?V6Y
z;ZZ7%%Gn#&$HC^)g>SH>7Nb?e@~pj9Jkc^{wf(zn`TEiEjXnhyxtwC3t~8c|wkzg+
zhxlG7%Fh;!pt00sB&K9!i{FWRro(d8V_57o{9dEnE{lfVk=9*3(!v7s)@4SYKtEhD
zI^eAyJ^iVHx@E>m*U`WL*Iq|XL1$r2jd66})=U1sr)IEfmJqU`?uj8!;-H6&AL_0`
zYp$;_jyQ1f6g`YBOd{|^F4`=WWcT7eE)*>fugfbQ$^B~69<O-!?c#J!%3z_5KxoF_
zrhcF*q?N+`w;Rv1e*GIku8l}LLmNR0nB}mun-F+Ekzlf)K?2Ic(RSeb!oaAS54^1%
zI%?{&da<NP0!yY62#E;O^YRo%^1pYLBn#AD6sRqX>DQ4?&BXk=7#`J)O0BmG&-*)8
zlis5E=%+w>8hV<|{!_lIuY+BcR}-1{BjBHNwJT*?z6<niXc&pV@J)*)D6o0lh`Y`c
zZINfyspQTws&_0gnb3*FO75`Klfa5l$;L3d`T=T_WN+rO0W^TI;XKEt(x&{uOkTBu
zsVXCbI&L)a=Dgx${yOp-NX_I}FXa%L0oM8pZG+at<pP((d;KhGMv1$&WL(*lXBuNR
z$$Jih#qS#FDtG2{oYr__&%S!Lv~WKm<5AId+BI=J8ed+>Evb7~zird{6daK~m7;FP
z=K>2o0&aJOjtKOGU*uO@5b~X-5v9yYhz#u{r<z_~9ku<`$jf`^+H+S31=>ltmxh*a
zg4z#=5tkK56YGn2>noZ^+*XA8*=Csz4{?j%{e59#VNzu6NJEd2{?oV=w2sGh%o)Gd
zvFl`U-Ubcl_L!LqR>$oGH9%8v5WuOr6+i9&NJM~9awN7tx3qKkU=?FRfBpE-q32XB
zwh{<cvlVh={D?^d*Q^zV5=&-)tvTaN_1>QJy3{w5%N5(p+TKoRSL+sNzJgXq($0vU
zROY~Y&}YYq5IzWUb~P|a>l_MbKPs74>S_91rSRp;xQ1%3`jfjlF5hq|B=zZJ91UxY
zFI(XLq-j#vU4x6iaahB^toN?lSpq#<OEx(J)=>e>aJ=R7$%H|d9l-Vr`WjU9I;|!p
zacAyr(Z6|)=ntv4=k;wEJ{cuORt+jSYMm|L<2F>lez1H~HG==cQ?y#uB&1w89{)#@
zK+wblzvJ(rzyJynMZ|1TG9AuOnR60K@9!`IaFPA}0-HvS16)3yS2xjl>)Xm{g7tdk
zLA;Y&?VV+ps{H)?kfh5CHLGbyBe_qz23bF|%UjDZ<{*I;6+HzlfAw>^`w+$#R1URP
zQ!))+4VLN!m(xA9!0>01lA#aeBY&(~rc=MQsJ4lH*=M};=VyL?r2UMm(pKd$Y7ED@
zP&<V#lP_J(&<NLd;iCTJ-<8|TF{@$%?^RV6ohre0UpyF83NbmC=h*j8lct;va%<Mk
zHsLZUTXq4{XBUI;E@Y+?53|FgQ>-makYUb;2nyoL;wri)XmG#?>q$*aSibA-j`s4Z
zWymK|#%Pe)dF^}5uui-m`16NJOSW?n&;6o$NHuR|e1;Y9CWB=Mu?euhS#-)Ah$iic
zO9ao@Tn|)=tL9xaZ6$<>i1i4q)4VoQX3&TsOYzK1Nf{`OWQvlaaAb38dOx}8M^KPL
zSp(swy~RMw$EI|0B}WTI6DH#P+)o~iyB@VYJ5X-f(e}VZTq1UpG`(?wyR3BE?ov_}
z=EwZCAU8M6>#SQ#X=Hu4?eizN;q%_{u_0K`OnF1?XnqZ}nT<+4TZK}bTAiX(!WnKX
z<ikM#2zYs&D;u}tM6R?f%vuBMss$!(J`*R!_zE@0i}YE$2^GL|OUrDfOR)IQ5+P|T
zf=Pyd7tqs0z9A9r8aB};)oiOT{VIhaI3d1|79hR-ndWDC06B3_0Aa6bM(D2}q%Zb=
z{^S2>5P1Htcsx5TGqfMvo3XI4=64UemFGT2+1T5EsOQl7A6G@Zp0^F?^THm{8&ol5
zVp!k!)2nl|IISEAiPBR!n3(etLZglC-a^g~6jU|LCR>#LTY(ESNuV=g?j6lnDLF9l
z0&|?|&V9(cy@%picNuwW7EO5jNwxf08|YQ+6?5%vl=OB+4zO!fTh`|4RO`yhbuRW)
zZ-sRDm4!yd?K&#`I!3xVJe(#&9O<Z4(}<|JCyc60p%j<B*B$NjNfi$}edbQ>;%2rd
zw>Y?w$yS(%&&aa9)fDJ3G?*i<Jc`Z9)#iNwmt3wINl#53%r9g4inO}_P~qF7(mdFT
z%<X!!imlS2_ozzC%Gx?DC#N&u^CH1RTsev=UbEy|QxC5PDzG6-JwR0ZCjO=qm!OCo
z;LK5qTsIdi0^s}ibklQ=H4-G6LWLe>{*{%I3|3nQ3FBhJ7g(D;OI_a@`>6N%b;zf0
zkV1?X?GuS8Xp$~fO)lgMxHC$48BFG@_2;YhutH%s6tsL2AAb}=Zk+<JMMD4?`Y+^H
zZ$+#Q;+5W9Ry;8_Gb?%5RMw$=50cVjs-uo#;3t^BG~(AQa!KwIoWI9+eX+ms&1{qr
zmy$UzZ?88q@vj}U@hbWNvqIQo<%g<_XPfpT`>E6WGD=G8gNJK?=>BB8_B#2c&m)ZM
ziHhg{c`Tk{tboT$c*kDms?c1c*0ku)b?bGQ$zaArzM9i$=^<b&4DW4zNcwQp{_uc@
z5amA~L`9z$10<Q})w+g8=^a)a3tK#OpYr3c^Q`kS?P>=`0!K!;D_572n!h|7g%F`p
z(1Z|`{v)N&G1_eG{<GhCt_o;qX%APO4u`-v5B(rv19vZYI24id@HoGzO(tsd``0_i
z@nXwO_S1E}YnCuNg^j^O)7|-WaKbIOHTj-b=|wX_W2)y*KyLQ2D<Tg~pzDn60cPB1
z`SEUNCP(iR^3}S#nXNjRL-N)51^-Ln5QO+t?{dV;pM%)C?w3I{_&dko?oR$HwTWEq
zM#}>*2%syw)ZG!#C+`6`gJ0#DrF1Pb%%@9b6J3uS$v83?_<#Kfbm9WN!OETAIB5<W
z2A~Dd-B*2a1CkO@_8<rhrT!|qie5}Q?0PKq^XG_(hmuchhjNydV3l)Tahvd?qu?wo
zf>rM8BIy1Ry}$&gB>IJLR=x?F)vDFyp$I4STgNk-TBnuXpf(&<LC}>@3adJUao|Z`
zP+F%$mM$ee!AD7y{#ONFcNC($suTb*MXAkauJPQaHkRi@owj3hI(%J4!!d8wN%Cx#
zf(^1XcNu0MuK17aB->JSMzRDW*rgBbH~RbK2J+RufB$ZE$Tb>cF%DOuVdQA82}BP@
z$UTNH;X0+T=TQb6?f}I!EeNVkPc9lJuCnj<8<6`3ZMQXvziqf7?T1B>qm~zTiO2hf
zrT#+sJg&N`%G|SZ<l7&|Wg);uai82|j2ztn;)Wq_^J>s98dKO`x-^;$>N-yj<)Zn9
zUwng%8^T>I<hhApq1`GCbzTX!(I{~$5<JQDUaYTot=n{3EHyUv8LKcUIjNZjEW^q7
zAo$9#(MnobTWv^@YnC3SW@NlrTVJ=x@nu%$QPNaPnar<Sk^)2$RvDl*G_mkUkFW^p
zbcSpX{IPws8`Eeho?>?ku*j--butgiX11f=a}aMEX~b^>J*dAhT*nKqH;RCIZxfc(
ztB=+OciuswdLBhKcwpdX#%ovWtiIP`JNRbO+&8Ky+OHs>#c9L)t8v^&YGybx;^^qk
zDz^8g<s~27S`dmoBA8D%9*J@qugu$2Ta8p%Nc|EoKQ<a4w=cUNX|1@QBI5m?0_mP5
z5dVMeeyN8brTh8h-(sspQ!H<Z$uii+M!BiFiMe?wqP+<a!||;p;==mfC9OTMGujJl
z9$>|g;#q9=U217*Eq=j+`L`y~Gc#`r2yjk94jR$7teCeQP*ztk+k=x&_X?ttN`iX#
z?_YX~a(eL2uuc_AUO8Or^h^qy;Zm4np%Tg8^DD=@{Q+{!jCCUJur%k5l##U85~&QE
z#`58c5JQw*$iVSrz6!0_=U+4&?rknIT&W;yJ#lfXHkon73yqyPOAI1P>n#1s$yFvh
z)+I79cy2aXu!sD(LlKYrQiuC%bR@n7?kSW1lUL={0yj5m>(_~+%gf5;bX?`OgEq{v
zMc~v({Y+<_x93lqj?bR(p+dF^Cg_%<wY{y~zp#Wn<XfU1DC{UJ@r00s>(^6J6tZ0V
z#2IL-1_iSs1@qGSdQ0~PEaq2USF!DqO{QpV?+?wS^XD!E|9%`5{phQxHU|Dfp-zp*
ztVB&cHkRCHH6ckO&J;#^Nb7-(4eirIQGl0z*Yv76TQj3`cpfWZbE1<pN^iZ~U7j+`
zg?od#Qv>OZ33z@z==!YtFb019XZXJP*p6dbM)rXA@{zUc!kzon%*+o%qbthNn}$Vv
z{3ZT_=!(wbu;7m}Q%=-omvAsiSXt3h>ljJ!Xmng8y+xCHZ5_wSQ%)pYH+$`I>iBO^
z+NDK&W>>O%7#dtr8h7?S{QJ$|U+?KeQGCg`=%Kt=@Z_&=K~{<=B@8G(qF-4*hCF<r
zr`Y*FUxo7j`&rF?ACD3K>szB6L__1!!n$d2yk!~klA$I{X*}RR?H54lDk4NsbJ$I&
z_-2WMq!7s&?*<I}S?hi@TbS{k!D#~aWEfA--5h~NsBrfL4I7-JHgSc)3kYh!Es4B2
zeIG~T&TmBI@~>YUlsP`>an@O%-?-~|_f*^ceYzvMfwW?s4Ziq;2he5Sq>W$~aBxU+
z=j*XtTTfkgkVNS{_4V~lNp3o7UaPf>wi}8q>UNu$Po64py9Rg%82%LoC<N(s$<2Id
zP{;t^CmF$p>%CtYA0MC0ZnfYe)WK%+6Q1GY;M`Lrh1c^7y5fH5A&NwJS)(@4`?rm_
z8?S$}v>xeMzC1G&5?HlwoMUm8pE__1+|}r5MP{g4BM3*!>|C6HS2dBScBXmPXmev<
zV`L(t)8ur8?~l<b|2cF^G&~~wXo#|UISIOr+1XFW3*UvExJ<j1zc=Rd@d|>&xdAkg
zC1h@<CAHnSk0eic&w$T^3g$CiQ3C*D-m=f3i$Og#J*%?&c6;@vu}1YL^*TT3o4h3b
z=!){m&39(Iob`C}Lls$bcKi6BZCeS6k_3#eJN+Nn?I2m#+aR1Kgc7ecE>;Vn0<sp{
zP<+_F%ul5U-Kw6#Xuht~ySJbr41dfYY}Z<!&SYrx`B5PH2OU4tQd_Dlg;8ZDu1x^4
zndc=bElovj*u`|Js;g*dS9tcF9L(|iMdx={URFOG=o=$v-O{Fq1mrKul$L0K!=GI#
z<~xuu8^s)VcXJ1(5M2>e3b&Jf{W{0S#%uGrm%yKp@BhXmOiDINw0t~DMf)6yJ25~2
zIXqyfDf)Y^u-VkuxRB^}zE1Uvr5-KHpo>K%J7?XidqBkynH~FLmxg`0)#IXbJ`M6+
z8=~M2KzbPlT&ILZsCam!S^}BjlZe))w@8JiuH&NZ=`Xyx59QyPV;&ol*vbozNqvWM
zCT_=j2>AC^SEuJx%T;wtXbHx9!(EJ-ed<OX#p1o|@NRu!w_O8e)I<(&42rNCUsP+)
zj!2Sr%l9JH6uY&Rbk7KqdcMs;EbhUnj=zVo`LFpWR8ovXD*q7^%xcdZ>mE3hzleX!
zZuv*Oa=mA!o#JZ8BbSqk#>iN6d&&`VQlX&Tpqb5PQRfehU}03v4VCm4CP?Zv6PGN<
zqQtUmV#KBK6m76+?g%|Ns7n@a^d^#zAC1zs3UN>v&GToe5p5w>itNa~g*}+ZhSXmO
z5EXZVi5)k@JDr!9j!7%-$rv_IY>I4@ErQB4DkbHWvO2FOtVi%qE)FdpU;9=vGnJyh
z&tQtxV0Ss7Tut>6iLY%g*WPKBgDe_+pAf{4zJlRW{W7RGFfzlDDwz15SQXsT0s~~a
z47^?dF-f@{q~<LCxKVFVE<n{}f;C>8{sz`1s0a^_oa`^+=NEUa>xI&-@O{36vY{>C
z4GuSU=uZ10lMw;THO6%=GvY?}7I8M$&$r!QvQ(|0O_G>R;_rE%Qv}P^pFc$4upQlP
z>QIG0CB8F)ZRRr3JNmMp3|r19tmno6%zpG$5kd-aP>SF&eG83@d}@?*`F$lh-csG0
z!Y+Dh<j)`S%@mR;-@B02Mu|`4Sz(Gg9^o^y%|%6{F_NqM7}(HoaXn7mY*Rmbhzkfl
z-;1}eI1Db&m_uX80O>(a1es=h5BuO@FSi%{^kAmxhwXsC&xaQ{tQPhT52?(OT<K)g
zek!}bqV=Fe1z@6q&<+?gN}2Vt)d6#m(mV>qV@AW_IcIt$@(<r`cuHSNZ&dO@MLS=#
z{%K!v^XtP_`H3fBX^bWP2E<6;3d}PQ-KGb&EjCFp9)-sPBNKEK?t(LxR+_R-?mb9B
zd+Z!dFB&C<+TbRd8>8K<C&omXrFCR}eqqh!v^G}89iBXDem_#AlD|n4(eBw7Pg$jp
z0GcOMj%<}}lwA|HiM0^QkcLk~qjgnNTeh}`0}~Zu%AY-ZZT@WDX+rW2Ir)PK{-Cnu
zEVt`G>^VcpnA@G5p&PkxII4zw{CPOj9BLnt=|t1#s4_=lP+XJ{2R`*7O%|Y9>Mn<A
zqy+>J3rwCZlm7LGzQLW!o7x<Y^1K47VpYj_g!S^Tt`zo;Td$v#OglAS6{b8RYW}-B
z@!JZQIOJur$|B5$v0iUtLeuc7CTJnn>{<%AglsT)ZDlrYkBp48yB-S}!|CND^yLn$
zk%Yve=HM~}$ur9#*&W>}hxdWTB?Ht{ZMhoTZCZ$yx!ZoHl8WQSF8v~?(@E=R?pj=~
ztgRKJF02|Qh7BqSNXoV-L<|&9=)ixvtoe>1=}&~qJ<LGRLl0i-kRAVUowawAt40gr
z=+)1U6>{)!%aHH)x!cbvTo@J&(+B#;O^kSs9bMV2mu~Z|{J25O$~wALkoSoHT8j4p
zcOKoN7!mj6jq(}cP?7h!rRBD=Z4ZKw0HRwj8n|={<C6-kZJ$@E`(_QVuv0yLh5aJ1
zG)MwZXl!fAW!gDK%qXs8WT(h<*px^(BW{~!eA_m*zre}8m5&~2C4qenDEtarY;w|q
zzK>)S6$7uFaH%F@L8u{T0kjBliZe}-QSTDtZg01vE$8jdrYxzLZXIQ|?3d)^nphNf
z2%%qhOS*vzH7%#}cJg|AuqKE0*5{l4^6wn0^Je-)lk><X2<J<6d6Ok()|VAm`i`~W
z;T;8TwsBp&7i==&s$|cKUz(c6Z5(5?MGr!A0ns22GgHw6CmY_W*lfD}?2Z7~p&q;K
z#2Y@~bAb>VSdbtDp^{5Nqn27A`HxK>4)|PV*Uj%Z_w6nip>@q<p|GBwX5cr(RVr;}
zh9S9p=N{5st0T5X^&1n+_8$3=;hd<0<QU%5w|rM))CMOz??S_gW8@37t6r$)Yf}da
zorR8<|Jh246c)F#Voxuw5|dgrM8YKRBJ`EKEd2D+rm~?YF1nMOvddK3<#pQP2`W7-
zt|NSv-$Fw|U`tq7a@N*yrDakt+Sf{mpfw=CK@o_MT^b?g2~G4ykQd>U)D0;qskR}1
z8=t_B{||A&6kCnJUsIku@-rlK)boVoV>g5Pu3TFLgcax^>V6YQ%Ol>4Ko5;E3sA{f
z5?Mh3F#MGQAOo*g-tdOzOV!Lk+-)I#2cm}n3V0HrfLHUogeHq`%fWT371~gtfBaF8
zP^-%pK?(Jk8*rdOFUR78UIz0(4Jga?o*Y3+E)>rxQlJ;-row<UE`X>W8;I%|o86#c
zrEn5lXNqnC1^UN6J<tnqPangB=4Ez3R#80p^#M}-b;bz9>IKA5wX{crB@Vu*U0m=D
zB!KGw!^89_uNSELRR8rWy0gYvd~h`7)YQ~c(V^_25K^SBkfPi|^MUyV9Q>f6KTl6D
zQ{Wf)O}Mod3Wwj>J+GNRbfoD=C#s)el#y{`1llmuBa6HAg%#dOjF4sc_9GU^Q+?5c
z46tt9D1LvMvbm*fx8;zP#lSPU4nLRYF~EHi{*pl+b37RdDMy_1H+<|;_nd@6IXD~9
zgTAQ(eUcuN-sM_I@l4%$2Vk7i;_pnpO{PlEVPtxkkf8iZ_lZBL>tijrIT#C*L|bri
zu0!@du-`-+6X|E&{wLe<G{d3&tuqyBswqgQkmUk2H&&~LGhv;q)zAI>{S}V0MeCb|
zHERB$e<S*mwhH?7^{s)>w^(Qd$Zu!^hQFm=Xcn7~YwNpxDihpYcx|=zgg#~@xQ*7k
zF(fkJd6?qakX<w^m}TFGIL&O`SFM<x<0zM03TZv{($03Er08UQ&S<LvmNyqaO=E<d
z10Q^BxH`hHi}`G=1Ef$o>tU9I-nR&FY0g$^ZS1`M-?Ys)q*KV0)ubx38T6<DVKN_=
zLb0JQI5{XXQZ=UjttU|Qsu`>n8xB~Qij)phe;E4+G*V>jVCoMs35kr8Q*0K2ug&P%
zpfbDYY&_||tJCur6X=_z*iuk?8+GmhGF*t%qcAd#J0-s!Q;BJDRau;<7rl@8vlAAF
zuzIO#bhe+VwIADTedJuM?a+Ud-CRA<b!K|HsPS?f38O9o!V&^7jiVS~x#Eiai}H>a
zAKafYQ_1u@-PzPU{DpBHf;dXn<YS8Khj=*UwpmoGg6<6GP#ZC8RZ(U~hpExz<t1b|
zs~YV6UcrF25fKhR|H#X;|HR)0c>AZ)tyKHbobI^twzd!q@_2GGE#=36jxB&oJTdjO
z8J%FWBmL%PgbJ>}6c2179uxB05ln6tb&Z%TZWnFWZal-8%cHXLmaNl08Fcs4oXIXY
zGlEDoUYf31lUUchRJ)z-6_c^VecrcO>T)nL2j#llpf236pVfB}%J?M?+MCWJ2$q9`
zyxLQX%Rb8FPJ~A*V5qVZ(Qh)Q8*)|OrZ~cZFuf=}Jl4^*2hma**Yedho>F7eb$DX9
zwTtuRQN)Tpa^Co07k8(-(^xhC+`j211d;7yMI9~mFs}8oQEM+}<<%-KDcNim$fGbD
z&5sb+I>|G@dq|tdym@){ZsT8SCqgbp1k7)wWo3(pfeQPE0*;h{m6*5L>E7azp{^y|
zoV$zy7{O&@F=fG;m~=|pwChu;->$CT;$T<Ra;9gdRrQ7%bp4^8^+QRS`*rals;f)B
zdZYs{?*^84<K7hp#khq+#<_~Dtmwd?a+e?#PB&cI)#tKs^tG&MUBJB%YTWP4p!ICo
zC{qyR=nIX_pc?W+ncsIb+&p6+Y&Olk-P>DEtVp@KvI2|{TnEhuscaE3NBjxbcAe7@
z7Vx;2l2KL;jky%m6HiEh{hX3DF|iDF-g0i*%ETboVwdb-T*IRB`vuiLq2N?ddqm6J
znAGf8sL<~T|MN#%Zk{-{91fR}l>8RJ#88?%KQvfJ6{U0bQ0r%6OiYnP9S%!HLtw0J
zYr-*@%`8Oye=9sp6nt%lC+4D{el@_&M5loSwF&D!|9a&N1(}~3PM@u_p-M!qPDzva
zANv`K#m_iBJb8~Y-cB)12$@Yvu8V>u+(NW|9i8_>J0HP|om8u4k|<fRIR_I{Q;wO{
zi6h1uh=LEr^Bz_OjmLAhyxwJ^hk@nC14Cm5Gd;0~fnD*A6|Q-|B)+u3&-rHtPbF+X
zJsr`>dYw-k$Pyl=D5%>Kn836cfos!h^+O$UaO3Nvs-fdA^ElV)POi<>jM}Q$ey=&$
zt2aOCQzdXU-suBfxjbFw;bD~lV{utiSwF-CF<IG`iI4LeIe859i67(tSZ`kf%lW9W
z*x+J6ewm>Td!!P?C(A<sO<L*R&gn%z#kNgntXp3cu;>@6($Ny;HXmcKpRrE5SQ@SO
zv9#CyC+G~wv4&i{bL7tD)u}|7FF7K_xJgP^3SPjY5LgxNlR#lBN_=WmdvyH4>}0u2
zvi1&*cogtL&B~wR0()oI$LI2KFuQfQPPR)1jD{H7f0Ve`J|<s7q;~NIaHBe2s5H8=
zq~q)=287|b#6-Gf_w@(&McLVv6;QH1DK;ZRKs2+lF@1-}UX96{Zt%ef*+wZx$@KV7
zOQ*0T%NVv#dcavBTmkm}x7A>}EIk8LK`yZ7h-2BV-S-o`>?-Nk=X<x*aHF24SwAzD
z?>V>c%<aog$l3(x9|`CzeaaxZZU0TdLTct!cKpr{CWJ5}S6f(#PH{qs+dMa*%VWAz
zZe4sN?)16Uo*&S!6-0c$&vTgdq`$ui6!lFmshTczb<JC~cN*o8QZYHSElf%}-jx(<
zHyfMhRqsqXy;&4-Th9*fFPyErF(AC*m>-p8bPfly3YnwH_uwZ`q`d$G8;OOy>ZIB7
z7{GuxySQE@9G`Eq5H^hGJ?xE>f|Gl?9*MGMyo7=hhDY(V${HHu%NvUL;}s@hQ;8re
zHI;;KXAhst0TWF*XJ==dl1EZfbwE^5I=S+hBz+Dlq<uyN9>VIzZ8@1wb-7w4FG2f!
zBgp=<_ux%4&{VZ^HZyZhvQ!ZWU0cCoh~ti$2r6@H;?q@yWlX_K_@3L@2*M$;(xV{}
z(XCr$&m+?1z)EJx%VTzRiy;!t&d%Pn%d}1HRh+Dmkq_wFCE(=9Sx=d3<WrQ;Pn~KB
zSc&w6hP(Gq5#bIHvxeMP*xkj_EG4v<ZJxcxo3MTH!hi*zUV7}ifa3t!ux<Z42iw($
zq8**oIyK_3HeKY605s!h()y`z7xV?zpbG^c6v?C1^q!u2-TR6iKGp&9GKC*we4%i+
z(lW{4U4<7H!UA3jE9!-Blcz@d>uh^Mgawe%zoS@0iD>8h^qvZXwNX7in2T8|Qc>-^
z9$a(t=1n^-XRT@nL4kVnq?q83o3V>lvj;J--@mht1Qc^*baZN6E_TgJm>Coke5R0o
zF20X%L(g?+Q2T0m;&U?rG*6GI9WV}lvg{T{CZp=7-Fv6)N|s>oMx^XjArpty$jHa}
z2ejsaAyH8l({}B6`IX9_fBo2WTO|I$s#&T|+I8L5^+T72>h(#_f3J51l>Q_g4HeeY
zM*qbQ;KHU52Os<W3BhBmSP0#gw!CuCs4}PvVCmxWY&JUHja3aQ9Wo%}aEf*T`U98C
zF6)Kx*NT3!rat}2&Pfh?Np@OVQqrY6$j&<N8E3OmQpBk5$-~iDYfe&h*10XP`VV*J
z8W+B+B}KlYrfUmr-cL)e(*P_3S<^n&IG(&<NgSh2gf9G#_2{;RnV*{!MHLuGs00RS
z-vJzcjkWIM|F$^5T8+7xZ;IVFayyAftfO<JV<5fL;P=<vl;*$uAH0cPbaZqq0?UdJ
zZ;DfICY_5S6@lgW{lx$d#VGwCp%<auJJpIOeIr4BezJUPX7q6$#V_}~7UcjIy^)TD
z`e6F3qxszO28q1+M8$97PztJRw^I=LI{vVHU8x<URDS)M+Ra_`MZi7FFW#2h4~2n$
z(qc=TWyn89xM$B0`h%uH4ke$h{|Y}u|Ja)NO|1%F%1=yXr<X|p$Ct&hZxnIw_bq`e
zr4BfHXyJ4uc!Weo((&=}+123zyi&q1@z)dG59X%8Xm@XPZ$D}3vA&%A2}8luBBo}N
zo9za~(*Omn8c?=K@t0dy7}OBfpVCvbaN31A?<<5_?4vMz9T4!0%bAQynT))f{i8a1
z-LA||C-tt)*M-4p-tD6qLN<`#3O&C(5E#rT+WdtJF3$Jw7VI5exO?p>L5qOg7m}Zk
z4wxKwlV(0ty^7H!;P_j43(sPAWo09LZH-(5<hU0zU)&=(dIhIkKGX#~Nn~1_*fhOs
z?ajMvfP~XJt2LA{Q}*<ZR0^>VhHW-^0+*D{CEqZ-(1Hh!J`YLcq`FOkgYQ!!;Y8Oh
zE{$5N{3#=YU%VxX!TcQaB+L|nbV$H}YQrJwbH~!9#_eNppoVIkFI<<~FYkVeIDFLV
z-Yy>+vmq0g#;gMdi5?dZp{0LTKSKNb*q`zzlV-tV2eEL*;;d1Ue6)@_R_3<6w_;-G
z`Ql;>H<L^IY*Nz|CQ7^Ox?|5T65GiL39)?>79O0$s~I^j#dGvJCSCMzuaAR6Bt+f7
zh_y2JZHxwm!B;FADiafvD4*39LvpDxXjR=ni<XE<xm}JOeG~JB=k49|OSr9s+N;ql
zC)*t-DXFi0yKZb!hlCj@C`@58&&A#dL(+;_LezS>wf+KAo3D>kg6g<61<#a|Z~vQz
zquOIun9|zV2fxIDo>I~gD5x|l#qoC`{}bH_*xNaUyhMTqvIr?X(qtp|kq{kLP>8b<
zg1Y_Rs+&>;RP1lst#qMRS)m1WxTH8z(>YDn110pSMvp%<C9MU93ANG;kncnBd;{)A
znYPmrsoxR>AdS0N0GasrCWD`XyU8}-V}*25Fb}|OA3RR}_x`}Yl)>G|L@+H&LjLNh
z3vOGNh8XgF9-`UcZn8obYoJ%@lLL5$|5r5V&-<T!i0%c1cZpA2R#Sp{dW6(sIIW)w
z>2Q)yr7lldb1le2uI_Sykb({j4A68x{{|o7mXYHrdWYu~Y-26#{vxC4{cg~8!Xh^0
zL4EwEEqLoI9A5afkxW_Gjny~y$J@QON8_Ah&r_deP1h)3`=b%ggmp7Ir+LMr|GNr2
zgX;e|>M957Ud;u*a9jmuR>f8+&wmpTi5|T~dv;tr7=K;0?#?Q5x=X_Dv|#}9=kt@9
zclr4Leg`VR&;Y{TC0#0;Ca0m1MNCSZ_BE@J?USw^|KIJ`Xk9XpTO9)sCYtnd@}s$z
zW2zb$0oMY|lujGxK|vf>`aJG;Tp+%FqNWIbf9cJ%!6Uez4CTE-waw$}^Wi~DHAPI{
zR)O@|+Qvk!&T;6neEad{)#dfvcJi6&agL3^bn5Gon%WohML(ZECU~~`tIIDU`gW(I
zt=qs7$+E;~P7Ah>xRw%tG63FK@$fvEisn&Jr`PxUn~5RP2d+|kNUR2B=GjD)_nP!J
zR)13F*#RWbc+_TFpnGW-go5Dw=BU*h_9VPBYMP)H`7HyzsafiO{7bn4TlftxzM6za
z#Jr0{S=HltvZ)dg6-CXc>-fs;G{?+vZKxf7*vNOhw^-1&7nKy{8wP6&Oi)mKRsdNW
zlx)&y`8bplIA&@(`yMPJ9D}U3hvZCN?PQrrroGAfLId3a2tJt|wl1@|$?6J${6-*B
zbu8L(Q<&SjzeT=N#zZE0BiB{xk?R2q8JB7J!~MD2qIxwaRE`%#A{}WRF#`j!_k0qq
zblf022o>E4(}f95x=TJ!z|<flSNAYh+isi$;UPiCs(hoZBjQ8HXuVrt0Atc)0XxoE
z(vUi@0(!hTT<CU9lWy1t7_K@A=|bB?b_BcicBR#?o6D0X_WDK9n@+<+Lrm9>{ppcP
zUu3&(+ZiE&K*<C<E-1UFF7x}enw+GpRT5r!6tHUDQx{*k>h*l*g%3(XbP-`jGOqe@
zJ!_pvzE=`7v#Tg6e}!KJG5}+@k+x9UppMe4*XAeE>KW}b*H`f-1gCH;3XXJ`R_)1(
z6W4Qh*aZ{hzOhhyZ{Y(=(!avfnwPAVYimgzzDd{Gdx>kgYQQkvYDBH>37JOvKwqD1
zr<AfcQlm7%gZ_q3;5h?}Y`}T6`xsi~%U0KW5<08ejo$fISAUZ(x=I6bL!YI}rR50;
z+Wfv?hg=tv=B6N-=!IL7O>ANEr0wXX=HC9klYC|MLQqhf0*~$o(#L<K;1(a=j^r$C
zE<vBP1mkQa3LzJV#&-tBQ0DFY2oYvi?F^;3*aycU(N^{m@pfzNAY5b*nHSuxpRtbO
zEp;cj;D=oL3GvR*b<bbepVqcwae=MB7$Oz&fjS@MLtj+uu7+2OT+A)PnaIEUDmEiO
z>MequHz>ddF!XSp8{rnv-h9`6)Gp7e#g$<dXkDn}qF7eB7g?;gs+N_$$3ns}<$MfE
zN+-tBvSHjZcjf-keS@*Wd4o~L+7Q;7ofItEyRwF~ueY)>?n7?Ul6dDiN`Jl@wJgr2
z>GG)dxmFC%hx`?Jb^axZYTeBV6?#2^Wq}qRIr2CS^S<xy#zT-w3zY<XxV@)`b57r1
zK9OCkhkyUJ^Kv{&3Wa6up<R~KIZ4bLjVF0|ROdp_b};3vFoF=P^Re(JTW{NN=Lh$F
z4lo5vJt$udR13j!thG&FgJNJEQ%)IwY-eWfaX}adluu@rfEFw6on&S4(&nh)98Ygl
zBVN)6vn-%(?4KB+6S-RLwb0OVZi}ouVE;)9`Ke&u#%Q^Rfx*efcm7McOwhYu??2o9
zU3}MYH5IRuxMcRNzW#k4Vn}dC*Jc5n+R%tqp24mBNa`SdU0CmQuQGog#oR~rt-57l
zt&yQ2*-^%*>*QBLkmK%6!!T-E1@Fw8qSrk_%Zy+Qh=ozzz^~=1JYY|;Rlm*hghE7e
zLf|(%09w)Ee+1pN8$NIw-go*y52adk-lYZ*v@$~t4GmcHenoXe)<fve0j%O%!SWnO
zsixhq7=8=5eDuqAjO#!{)v!Cz$!M-2XC_b%p{Ajt3qD53VE0Xi$-6q17L_&mYcPyB
z$wNpO2>}f|@aQBE4;n0IbrEuB?=B-%{?W*wEiER}u#Z2fUk!25rJWxmAwa11*cIF!
zyvfvz_!}gmDX)k`%{!&M$WnTcB8V;lpr5q&vaSFZaqQ`)u^@8}8B&5KMtAceBFHnp
zixJ$^y&KnzF;hRzq8{S&<ftEQ&+P$HBKIEg%eP>)<a}Mh_?iByz5P^ELGw^uG-ibY
z;50X_s+0J)hULTyBsVtU`M!AHGLTC$&;4o*;!KBvM!^sqsmI$AaqX?7q!hNa6fB>6
zk7|FJBHnnHO@V3^rkb0P0durj9VFbwrmxkM7T&Qs{Z}my;=32ZWbpaxkY0p@_s(j-
z$PqjHuPik(q}*%P67e_<2P1KlSQV_SZ)B821RnLNhtgFMI?0)h@>5n(L-!@7gLuRC
zlIGgkmtBX<Rjc8xB~xV{$P&Xp@j=Uf`1Oilz1I@ytx=((`FLBBsz6e=hINpO70igO
z1^t^ydU%7(?NOD+8xqK~F93a?8aIqA5y&!o1kyu?71%2k$i-_|L{WCn9;RJEuIwP~
zfij;QC#eESSazyVP@C56gU_H@`2XfNcv9<ty1HrthPTqaze>+cm#Zmx-6VLx^@wL1
zDcx#_KuZMXbadM2Xfeufq8alnHj8b|zDNtgUQTvV8~^svla;kjuVBzam}V7aDRBNQ
zgrZ0u&gcVsIIR^`?V|U2T<SQ<gqie4@}|reVsmvJPv2mn-%x(3&d{x(0EEVL_jzg}
z!V})`y#}4^v|4I$e3|SW2xZGNndGA_j*net#~qk#pWsNI>+3u5=NcLnJLWN5)){Z!
z$m7?~7#);Gq`rP%RPknXsLiaPj!sGFFyPOp*6z>{6*}6+eG4<6-qw#%$(OJHjzX3I
z+qJX384h5w#m6&Y*?vt+cJl|eIFG^DiJPHGN!Q88%*5E8uiek%;y(`X&_2qJ2yy-%
z0vlxR47`8ZmpYEbK2ZLrhc%V|`Pc2N$>GQS(zP`wy~~RYH;&40?K=Dk;MwM!DlR?z
zTdUBSz$_%xKLJ<)TI~8QVi~+TvK`p8#D2WhJ4lo`3Ch_HHyQpVYL3Pazoqg7>o+L4
zU5r;iLu(GOo9ghsHPXHLDu0|4%{;n2(6yo7Q#Y8Y6k(L)I#f6^p09mdmf~|gn;Rs^
zdRn5@<%<4_m=eZ2)v~x`Ak(Fcn|71~V@_E3=B!)CMUzRaHMv!zKRp`NbxzQ>?*6c_
z<-8TPSWrXvOH{O@HAv2`M3!T4e@(u2aq%z0RV~qFUP)P%TbaM>hYdGm58~e=M;*2O
zH4qu(Ao$ew`>Jxuq9NHU)mZb>mnqd-RcdudWhGUmgg5#gR&^FsXkM)kY|E*tX5cad
zz%zNV*}aYiqg&`D-5dF^gzDIYDMv`W077ljk5f$QH*by?yG=bk9q)BFY4iqade!tv
zKazs+9Wb_1e(>@sZ1lWOrVw-+(@N8%^Xt~E$apMs<1fn!#x4{7wgi${h?uQoBL%hF
z2_EY$;G{@4aPU>>N0~PVP%_3jw`s<oDV0&0Iq5gQ=YA&4nVNOqA$#_|#^vutj^X*y
z#DY4$P{VR(FhQzOTTcRRXh^^HPL;K#E@YXBQXV2w`yO*uNy+B+oY9vlH@YQ~?`UNt
zH)1{QQLLJMo2+qDXrf9iHjZd2H-0DOOE1n|N%wATkagfPGz6k6vmzRiUs`R=EFC}O
zdfmcGIDLwbIkA1F`Gzexg6jUvI334vBBP_Dqn!wS+VfNbjgpA~da_qEA<|uLtx&x(
z=IuI!0)<1x^0mGz>vzzm{mk6it$<Eogn`TO?Is_g=?qI|g45@i&FrB&;`Tr^U{PkL
zRzH&z|EiNO5_CZRt?};(qK@9gH!5n#&OXd2dmJ0@q$UHV0W<SlY`t)_Ud&;)G><uD
zQJAN5F^CxnD%2o)4kn_G;pr$TT^&9-?^z8Uz7&{-1YwVcS*!|6a^2bkg7k07DrL%m
zuBZYU!g>O@1#lQIGkJaO)~(8&&-<IDRS5|ubUr=_eCt6$7cz>1b0?2p@8s*%i_t0O
z28Rw<5vhJ<QU7vW-pmRKPknL?wu3vSxRd;Zd1Ur~K1CsDK5&xfTC9L+v+#M_Winv-
z-n%NTg!q~t7!*!pUU-?Jqt`w$!vh7?S1+`}6NtjAs+J6VJ{|o<dO5e08X}k}t2SB-
z=LN?L-O2>_R+OvBt9k;{lYe7T$sPc+xHdf2YUMijc1f$9U;DYSB}r}-+jSTVT^zl^
zh@$Xl;?{3(5+qlGWFkPoeRU^c_36E~;I+JUgYn|Ki$A{Hk@vzgV)BN2m6qEBNBhFh
zQ;lGb<CU1Az$Wpaf?1WuWsS+o*Hc62dy>Yku*9!=U1H41a>l^Sh_D9hz+tU1)?$kX
zAw^=w?4(aEQ;_s~`;`5RQDf`Elaj8_-?kN&*W=@m-#6IXpj`4A9v}?`%}fp-msl(+
zjPXc(dIyH6eO<kT%_S|%umZP3dA?Z>CAn_66NkrTZNyN5s{_(L1_httP3-&!u}RaH
z1*RX{y18_6<kwr46jZEwYmYmPgslr>taun5e+;h8q2s$g6mnt(u00X0kt`v5dsbj_
zR!jWvuMrFHY9NFQ6i+GyW4ZrrNLYf&=;_ZaT~;NL{oI5(*+y@-%s4OH<vDZ$*I|{u
zAi#D4`Ccf--5E2qcH{msNzOieaj%tvfF#IG{*Y^k&?#i+xU|Es@(Nl`au-{2KYDpz
zu*w^dpY0qscI&03q`Yw-^PflDB6RKUxzj;AQ!l;6l}EQeniraqqHQf4D|!O;6n*;>
z!71{?w%*)O15O;d4?VWN;xrEg_xJTNsA+$Sc;NmAt#TohqN69FdV{#OhqwkV*|c%K
z$eP50Cs;Tpzg#UV>vfmyk-^XFi4)iVyk1YG8iW&{2~QS*p(IeR#aY#Ai0%x%t~b^a
zwz<Tk*B;s$d$Jr~{c@}3FKNtWR^?tBwR^C8-2p4#*$TCMc}~rO8_=T^BIt1K-HgG_
z{#y~B^jl?K%T=ch-d!iU_Qv}+J!|O01aruMudLjNYF_xMH*0W74?p#jly~A1K6d3*
z8^xWAuZZ|F6eiWC)hk~;rSA=0zS>peyJ#aaG_$oWrhTp@d%!!@Be4B|Z|j7$ZK8}Z
zosu<LkQJGH^$`IQak4Ee(*6D=IU^)89-F+V7+tXxJJXg|{)b^OW1I0l&uDDXBeG({
zb(XAXUJ2Fu)6fT2E1#5Km*h!d_D6<&zHk9~f*|Al+jTttBeTl;W{{kaayB-ikK;mk
zysYFEogz77XVkS0HV$^^joz}uzl%|N&&-^=LdZCbItAj&k5^u#<B$eE;*!tKo({g*
z>h`P4%{D0JHxK<dS_&#`xrcw;{)kFhtNOK-H5%df=E`&Eh1l8<js;jSv(D$WF1!9o
z9C;L{GPiIkUX@gx=9N#q>s-4Z>--gu`QUueQ0|Z=Mp$3ubpNm1!rZk^sGx46w<W*u
zLOAOq`nkZ(jK!v0*562_%NLf}Sd`GIVJ_32_)GJKk1Zd5wpDAv+brybpE}-5?dA>s
zm?TXuZnt5~Hbc^OebKwU*`=;H$}B|5!68AXlxQ4;i_X5mh*Sf!RUpiXh4oUNp2Dca
zrhsaS%3wV*?{U8=8CS|!sh7*g(X5xePhV#Qgz@NJXPQrxR*pJi`(s<g^e&eaAi+`%
zv)BMcv{6u}4UtZZ5{1DsnEhAZf2pn8)WF~74<RzHa-RhDU?OV`|CK?wAm;Z-)0h_2
zRl%xV6_k{^+|nsBl#-rGJ#fqgKzsyQXUNp@=g;JV*j@H2W~v?UyeSw-NJx$ZCxAHD
z>59v2WU?4<t;Mi@0g4KsE7O7JH83z?$-1|inN;?rr#p7JebwID%4(sWrMAgs=E>&f
zW^q)^u59BAnAgm0(PNo9jY)}WBik1JqX$t}vya<5I~DBa27X6I!cM0Yj%Dn&fXC=&
z;rT8Sf8-0}Y^;exS?3!sGHKmv*VNpZ!dG+wtV;Q&Tfu^-3$Kf3oAzm@i`q$X?+d>u
zE@n@6GD|U(z`4FyrUwLvz~VUxE#Y{QA+E6pZYM6l8ZQ=M+_argvWJu;exaR>B@K?&
zh@$4<nbbX=m&BV;OZYrW=97OD3<Li<WUk4=Gh-DOe|&fyT($K4gm*u;WD(%L^jhVr
zlRL@hc6by3RNV8|)6Hon#FoUQQ2h)o`)}zrZ~+{571VhF42+!mLes#><Rb2Y<HEak
zloU_#MxVO1k$!?u9a~$%pysrS3Uw<h!nx-0R+G~{S9j+rT&ua8%W;x-jN0IvxUlpC
zy!##bQbmx%7<8OT!Q`!e|3Q*|+sHo?o7-*sz4eq}PDj~j?ynSQGaq=M%}iCVc{)`y
z*3<GSx6F9^t#S4&tBfJ@9C{ZUslU+5`U_LvzWeT%i@&ay+HE~v5iGQZi+ig|6g0<w
ztm`?;OUFc$lN%k4@Ada3<GF5!ujhCLF~c^4bMnu8aVf$wyHXZYS<O43xs3tpXqm^#
zp_y8)sHzwG7qY#rrKd3^*Hn86+f3o(=bMb6Z_Ms;^0B(u(VlTLR7I;=0th%4Rx_`a
z5Jdd*GPui|xJW#Tsr)MIU5E_OlZpVLtYLY@E~qzBpcTQC9nY?HCrPANvE)9cL5#1X
zKzgbW4K7f*c6Ph7orBf2w6IB=PJ2_iI<?<s)k;S~Y0n92V&6b7gJ_d|c)=F@?p6#&
zcX%~fafYdXQ>wsujZ~vti>ypLn+ceAGBOhUwVIS?!`cYiXb^qdcT<o+v?|AVG}i-*
zrbiv`QnA%zg|lvR^PRYqJrguPn`K9>?_AqY9$sZzcUbv?3#rl3Yv>zhF}J5UOd&EY
z4<mpzB-Yx#fp|ZlZiB8+jeYOWXOL<>5ztp1jz(U6`p>b33ce6j^V349Es%ifpbDz_
zaV@E4NRGXe2&#GK;{b9<A~~x8;0B`)4@n@5pay3EH~epWgFDVyOQ1bDzn|{!_$-L?
z87txT2Jy4&_q!EMf0uBP>YWPJ1`gCT0|(EvxTYdYi9DMY&D+LWcTEFjsKuVJvOb$@
zq8G5|lF9TUL@Mn*CV1okXHnnz6v4sY1W||U)1?mjEs7zbp;)0|VT`MEA33==r6u(J
z&Hog3xQUn+_yV3amF;0SJfg{V{tc8{s8r~|c*BSLtuar|KqwlKAmOihwfZX6qj7tR
z7(V@~h2>@1s<$x-?~9_r*o1Zj^X3%HC2+obomra@_SC53Xu?ZrCvR~8vJO5biE6sd
z-BUYM8`w$yE9mEMWzcvwY}Ma96ZH+Jo`r~!&V{BHbh9frj|3L|I^7wF=(~d_9)71-
z<+Xz#xhS4PI29}&E3|kNksudFAlra^pfWj;JXJIg`%!sESV?J{&oL@;9fpx%Ht0M4
zNd4eP{HHS$<yX&i?4mzWnM2kqCEEd7{@P~}|7OFXw)YxZWy)LC?nPMmnVMAeZ&xU-
zr^M$9n-oSFr_elq;L`LoSWl_l=vdX`S9uJp2Wd1@R&G4)@Z_4j<Ky_T8^}Xi#1QuU
z03io}cw=jX+7&OEFsC{%^L=21v=_9T7>4o4K|MQrL|TgBac1J)&C_|Aq$uDRK)V~S
z-^2UY#!-JU&T5mZK74QYwV~R>8-roe&}{lGCLmniWCX1!0W<rK_{-yndf`+0CrnI*
z>rTc&PjM-8RP!SD>#d6f&%5-hq5%eBg32K=a_8J}ciwveC^!@e`I)Ki^VCrj(FH_-
zdaMNIBTW-(%qO$ehNNq{$BC+^`eU|3?7VF1;w7SeHBqTyS+#3ld_2t&_E(70C0DCl
zH$ySu@wT}(JqN6ZRHhf0T%ZwR!T_N)wOc=&Z|l||HoIJgLY(O+YQLrW1R)r5NptgC
z<3f-eNO+Gz;YWRzroYsnuO(R4GcmRD^{HGnpFLaf6SHYIojb9|8hj_SN|QnfmTDo=
z&+{vfc;LBKdrXc-gLXhqE=NPo@p`9a^Y<6f18Yy~AVat&j~Ax2^6QHqH1s}nj~5aq
z|2{E7e2z>Ix@QAegTcAEx1Hx&AGoG%I;GG3!op{*Jt(%AisrYa7}p$hrmVE<$NrWI
zyKX|+PY(j#xkHpGlP9~2R^vhW!Jw@bz3OUR=7SV&y+i?hlIC7lag-av8&VAro*mSS
z=2f&vpXJ@H!;5Z~wSHk{Rz0;n4&*alUN4+$66v3j(sbLbPfWTMm<1rAb|9_4eR|!(
zB}g;z1VIDO{Y)fEPENjXB`Mbx9rT{)sir;S(8wb=4jzlnS>e#|@F8!I+n9UL1Fez1
zvEMc||D8F!ZM)&qdz<uwnNq3l$%Sve`kgO<*XmaT*W+bkHeIb-+_=m=Xx|bNe7|8;
zZx_rh1xo~Rb68lA)Qc1)N*`}KLI7bDw5+@L&QRX}7PYWQ4PZ%nBF0e?VF~13xFl74
z9Gc^J6bA-zuL#fUM>F=OD{V${8-<;H`1l|5jr-1={&@W=@ZaJEd=<gHJrqJ74vp1@
z9p>%a@IsAB?ehFT?>>9O--O59#E^hpv~B?((HrAABjzD|7%ngN_PWTaVC#<zN{973
z!hPX_Z(&pKk(!sk?v7nvuVEw$Pn10s5qZX;A|;i=7`b2a>#eAw$lrT|7N%hu$Eilg
zOhy#TT>aUvSaAY{<z?mMHkdT0Zuo3P#l@W@<hK{aOZ*qqMF?&+Wi)1lt6HVhEZ+MT
z`lee%SQxeU1NL6!g+)VmO5c2p`K~lu;Oshn8Na19h1b!6JrQ&!pvb#=C4@Y1qzo+|
zld`Jthb3$6g`ex@qdTDA7r=}YV+q*ZZs*gE1Met6n)gQj9&L_VEgdLE%N{t)ULCD(
zEq^@1Lnj=(Y<UlChn10#t+$2f+61B#lM+Wx6d(d>^rmu+^C#!sOO@KD)vQ}h;DVV;
zz3h<1F?_BO;u;=K9Nl|!uVuY+@hg#1$bRp2q)<@)WxtRI@Aj8p&vB%AAFS?PzJ0eZ
z0NJH312>(xpWF_4;Vku>PNgT<D9KGcvc6dS&Se*s9jaIo>oc9LC`Ey0x2ruey|ogr
ze++kOtb5_>KE~@_k1}sexC+-h)<hM>qYMxXpbRW$F+haGD4xXFX^VFQKP}}e%=NmQ
zWZ9DDOl)cy)+@QnUR{h4K4D}mOP0`LjVBGr1Cz5sKdwvsOSQR%qGe*2(2i&fTk@YP
z4<g~x#Rd4}Ryaq!OBH&T=uwmD$|{%*z-XA{3TtnBMFNB6{ahI%KsrVds2Mu`!_HTx
zRc|cR>t*YTc3di#Mn!nO^p#jR^w|oPHvh(YyuIAtkW2+CfiA7n%k2-LdOFUjxdl$$
za1UNogK?beaHZZj#>Kyx;Jl6FYatn5zl>@$f}~HvaJ211CGvSWc^-~;!{#4?{d_qV
zmg4fGN_sUIw(F{!S;T+Nn1C6J1m9nT0j^gcJ1!l$u-(Sk6OpP5?9-$2`X~E%31;~}
zjT($U$jR@=h0H1CbFnu?b@xINtsP%N#FUuB+wN6wKID{BEhJ-XNAR8Zf^kK<k0;?4
zJTn<!0QK>Cvm=17RR-4YlP~VJCI$Dp&)J-=D&@m@J_6bwcQ^tQocs8`u)3G&<Ig-g
z<RcVRr1!o~Uxsph9g4<h&v)_L$To`%QxcXzJN*l&kBN-?clclW`C-eWv==f{C@3ft
zn;uSD9Z%u4F?J?#WVVO99t()-Iv>);)XoSWl}>$m@srVGY$<$8qyx!M<sLBt&8#)8
z#{xMEP^-pJfw~~ncD=lPSnbl7hte%Z&@mDrVdD)~e+>$rwygp%CQqg`M^$B*Uu!8>
zpg4|bj|7s{Vy1~UM4&z|c-?Bd;<q?KuB;x-JpQXaG~r?4mkxo=3Ou5x{C@}DW$ajR
z=?lPzN8-L=a~KR~E3n(1Wp<rWr8<8s1If=ox>9uUkJ3`Qmd^)co=CmW;D0P|x6~f_
zHl;lqpaavb;p!M^$6Q~j2lK;q>7^cBagCc5ywW+RBfT&-`w(W>d#&K-^}Xa*#`!67
zko`hEn=J->zC+KkDfrVZEfwFV@9UF3uuw_|KI6|Q8C7dwodCKDHKaH^MwV|K1ppd^
zv|dzV-2LG48C~Y21owch1ZPpJyAQ7ke4j7I7$ue&lD|2_W^2Czty)mfo)DdY@j5#F
zF6y7^#QfU6-F1`O+uz&xVJ&5`K9UD}*QnQaf;G4?YnK_1j6!N7ybK=Z5pXaQkN;mg
z=p$)bG~>xrHv27Goem%0v2p39S7*bYK6?Mxq3`Xhx~sKUzZ{qUfBM0yPbecm7nXw?
zi`UnjSpHDi+&Xw${%v3#y^eiSqL_To?7HBE1xL<QiJGmIo||?|dp}Eaq|k{|Q?}px
zHT}$;>UDp<o^(%fiCiiB_@U4K-Bn+sjcR|HNE&aubf!*Jh*t+S^_noPo5iYqzvnS<
zL{c5tlH>)Be6fByBJ6(>w1M0??Z$_VlP1qqjlLH<TW9}^Mcz*)dFxHPbZOEPhGN;@
zf@Y0R!}tI5y<TUvHh+#O$K))OM%o8f;QgURMNDA{_iMjT6!!lyN5|rs#Ls(2?@!(T
z|FPvtv&R<K*51wtv#r1MW^-7d)h`yy4-Geqj!bl)aosYlRv_M}#^UaJ;8BZq!2S2p
zOBN;Vy7De(OLjMpo#B3z{YrhH9qnanFX_tg-85LJy)Zn)X9K@(erE2}`G5CBK3XOn
zY9Jw!zP0%8xtT@bz;VauEiW7`-{0As>U7lP=El{)dyqp>?m^A~IlQFN@h)&hTy8?g
zY|-;`OKnUdo;-VU!#!!e%Zm%OTaG&KzkVIKeXBCzV$#oJ*UwJ{mR~8;IptA8_W>Vc
z_}QkXYtCP^Ey=j9Rcmo~l}W)1XLH@l?@eklZf5_liuL<_X{K3?&zzJ)?y-|)_q^lF
z%0gLY3!WFtOS}-d?$IP&Y4dfHZ{3nz7Bx5R+G;-Q*HeYfYWBH!yK9I{0=A)60*|~*
zJsme?{=e_~Pow{T<c*B}x-G<So~r5X*LRB|uP`I`hj+2Wm;z@l8h-d5Sg}6a?CNUo
zdrNk*%c?y--fz~;E9O;Jw(ae-(C~15Y4hBP%jZ|w?7aWNaO$?Bi&w6^yQQn->vONV
z)2J=wEKssPx<T>Cdf>=M+OE3|kuwa^qD@^E)kaP2pRY7?=1kzCH8t6V9WG}XN*B4$
z4-r9H@@en{G!gY){Nl78U|aOE(V}EWp}Xr#=FgD)EZBQYCB=!on|oh;?|G#9cSrDn
z(9H>7U6%xZ-nPB{_pdG^r0PZB!;FU2X$L>ekiCjDYR=GD2ignDc?`IL0<pf+pa8hH
z^}t&TqzOsjA(EQFm8I$uyOAoBh64wH;|0vyAA2BM^kO-1#pwKmHz+MRW^siEo;!WY
zNc}&D1@nO`LF<|}S|b<1JTbt-kP58(P-^~BM<Sw!S^P(RT>Q>E`=_nWWdH(CS3j3^
HP6<r_(iQ|~

diff --git a/linux_basics/images/linux/commands/image5.png b/linux_basics/images/linux/commands/image5.png
index 1060bce9a87c0e61ffeeaf637970f275750c1d99..b53b7c37a125b11f04eb7db56ef8beb175e13eec 100644
GIT binary patch
literal 35016
zcmeEuWmFu&x-Ae02?PlVA-IJALvRaj2^ySXa6+))HhAy=3GS}Jh8f(Q;0^%>_uzxe
z;PNKtoGa_Sb?;j%_s{$BdadrR>F(;Tud2FgfBV}#-&K@k@Nmd*(9qEE<YeEep>_yV
zy6(|K)b_QsNHrST6H^N*DHS;>DH;_=J2MMwQ#3T$@9`jPE%m+^8M<n6pZy-mK5qU_
z$LkwMsDp`K=nwh&DoRE2!y|wTShcM>lqrE&pV(ov8ts!*XEj?0p8mim2~$&jy{@4C
z)F|JQmgD9VFQ?6sWbS+B<a*bKXzBPZ9}+?l7*UL@Q9Xg!m9KMiD`X?lp8oQqwMRGj
z;wRbtJv<yk<>9qY{|-5tDiWlxp|=!q4;m#2d5(b=#q*8(D~<$Jry|;N7e;au8rr8v
za9w4VsKT<BpB@N2A^fckNXzSH(ReErUQ00js?&ki7R~p=>dCq`+UHtv5tvF8mU|Vo
z#4dnXJ{N84r8or*;YlDNqqr~~JG)`vro=AVo+;she^UApmieUE1$WTJ<xLT7(Xf?x
zFD+5vn?$kI`!_@P2~B$ISp-7UpFg?3O9S|5b)*VhMgu+s)aj-?rObiycG@vWIxnD$
z7k)B*_hXidmzb%p%-i>IIV_5r=y5r7r_tE_7E`z=y*g2Mz{`>s;D%h^#H{2-t=vc9
zQ}(uTn>}4met!^1%t_WANF=xb&eSqF5ebmprG9#97j+MeeoIUG34r#pS|#Q=UO8Xq
z!;rKK*=js9;HwR3g4y192k3<jjag{!N}Hwk8&-9y7X{^s>&y>Ny5u{F45}W2o_~8r
z2S>KK;9fj9BA3u(jBzBwc7GT0ST&&j(R<o##C*ACG>>X5yNj|WAw@y*9Q{D}#Pq6(
zs%@RT9aj1G9~=hUB-H9?Bn2tdkuk)buOX|Q<CT}j#uG=&fiyVw5|2KjGgy<-P@6oE
zvvT#~zsaL|{NM`>wzfE?D@2F;Exr54cQ~0xS&wcWM?Yc;+Q1?R3lXP<`%sKQGuddI
zK33U(l*V^^;z0Ecv;MHw@nZtGSC_~QlQ+h$3HM`BeOY05%Y;MLYxx{i{NoDnL)P!v
zorIq-Im5QTr7ok_QBz@MN|e>FSkIet%#NIW?fJ^r{-E7i5_@Ixxm@`TOsm@uzn40{
z@9pY9n1fL7_IK>nyC_Po)erNSb<0%02(SshW{6}bz`pCo3+*he3B<LL@J>yu>M=8!
zzGV3J`w;oThS6q(_66{LYf+@&WLP%TF<83gY~=RGu;jFix6OCfZv2ntWwFx&yG)t{
zTGNk<&>O!|s;^}8o__v_hvyMW{*4j)ShnS;XX-)&sJ5cBI=g-)!Tk{D-8ilWc~~lY
zDs7_4cU&!s3u3}@H?_9jr*HT{{2(-qrRPX11cTGEt{=yU&m`;g6W{x`ySqF3Oy}ru
zGzzAGxu)C7VQ;=KlxdjD)_LO0>>4}v69H&T4+ZUINFO+T#H08qZTl1V!jFa!r`!K!
z6q?#k6D@O2y%9$ayg`f;iN{P2Sbpl1p<AQR{bW0QHcfzNQ?)0$!C><pSQf0qn^I<U
zd+71g>Q^w$qsQ6wPdZ<gi(5Z6@5D2rN0((H3hbn1mKBT%lzqy;g{$owM+=L>>($I9
zyCf9|OM5p=YtzfRCOQ^)6W%1l85cyBWd@-X#4*jG;2}~JXUx{#(x`f*|BX$G<re@<
zpc9<&jy-E?6#tZTHWd8>uJNaYB;4-qI;|%OA*P=kt?@NO;*Eh?tdo!Kw_#e?li|%B
z-`_qkUtzPylUe>=hn5*K(w6v}{7~PGa?#(g>tI#nf)OMAqrCm=3nI6#kH5ZY=aGDz
zomLiL|IMCkKVPZciY~hM)$Ft8726NAX3xxt5{dYqo)e{hv*`@(G$8tJ^1<=-W$Y)}
zFKXz8U#l{zg2DdaK)9TT!X%w;)IzV(nnp#O-Ul|ugV)rIhO}a|=c-`ln&*b{Pu|NW
zOK2<2C|Ts{{Q#?7K|C}(p<=v#DT?XJ#aWYT%IXIyhL#o<+7_3e!>3|C4~;{A%@#Oo
z?zBt_rHBrF@6O8`jjJ-PO0Rl7%Q~wdm~JaW@S|W1cWYp4;#B?A^R#yM$zJrVuub-v
z-k$uP;2z8Dh%=L5jUYvOpWu7JbwO+}+ctPd4ZH`gZ}_qx&=B7c>^$e}iG1migZy-Q
ze42pRn-nTI*T~GZE1-t5!wn&=iuZAMQV+Y!%<M@qx-q(4x-Fy&&_{nR`kF`CsF)qb
zO28x{vs<!*jbc{79r7K<L6jfDEPB>BostKVuao(c4uX^MR-Zh>)8#61nT|KI3kxF0
zBK;mFAAUxr&+lP3$c4{4%xPeuXZK|aliz`h)Q)S&q_WQ<c7Nqz$88X9P$K@4*bTor
z9Nxz>49?%?8xPHIHrp^;G2^O4niUK-3?*+!Y|Ly}4MwKAYID57c=PIo)f*+Pn>H>J
z2d(-d98FwU&lsGmUCp9?qGF<Aq<;}G3Z1qrozS;}^3Dm4dxSezI!A^F4!up)=HumS
zol&!%srfYLTw`v%G(9uNFvnT}tM#<BGa0F5uP7~VT@`nI1WrPztlJMoZ}qwiI?S)R
z%{+EK1``PZ1@#@J)0@*6hEvn#qzR=j!lEJ|WTX3%PAhfK8{l>G)O{4BycKRHx4oM=
z*3x+qIs%A6h;m6rNqxzjzFp)bwTKJ&XsdhFr%|B(@jPImq<(y%V}7%NzpnMr{*2Jw
z`mAod?~r1%zPEDbBqy;paUM1a8<^`BTJX$q6`J#<95Cn?-H|$ce3rc91m8?AO|<hn
z@Lp=Y(YtZHak&<uG!~QQF}qF*zSF$>a$kH$iC*M;>Pw9wh{5{c(hulI;9nH*RYJ%=
z!=6H5CQT%5v#q4<cv-5=uC8T%W<H<r%`4$to?KoHF&<8^)K)VGtgNUkr7XjK<S=<f
z@#)uZz2D-W?g?{e_=1LZNOweB&ZZM&bxgjj1@&U9Dyberx*fLa%2zcb8=u*bvxb*M
zqH{JSO>nvz?->_#Q;{lDPz$v<-mKP*I#m81?&SVm(0LHylTMgcCcNVEL+S@txquua
zGi#yXwxXl#F?22Ban9?(413zHSMOuSqU7Zj<rku7g*d^#XTPUgWLPj*@V}l>P7&Rn
zH;L`5kBw9uO>WP0q)Cs;NNW+geIOQu8VH7#O|1vFp4wyWV2*s1Xy<Kbi*EfKza^LN
zvjH6}(7w}#RW@|`{dRPy{mL>!;~q^J-OO;UsPtiYIPGqJZNAxkt?9I>L(R(~qKaWj
z*vG>=bx>QAZYK#L<h%!`a?kw|jG_8LjpzBxpB>ll^8${A)^FQ=+xy#V$7Av-lS=sY
z1#f>pDIira6K2L?xpH_ds?JgAp0HkYS-C&5F}Ns*ogB+q;9i294|EdR3>=x`%@h<f
zzbox3>4JqAvdS9#s{3WV(iBM0ihEy@|E}?!!B|VL-DpDB#izdClMMR`lkArofHxwB
z8#<Z>XGVn|w=WN5d<>7g?kfgOiwBw$><lFIX!RY8O_%%iVW*nJ#U6DY^N0rCBHlbJ
zgW~jxGrfA5%LHe*bH6hsu_`g%j?HAL*1b`HTL-d#xxblQk)Lhm!YtN)Jbp+b)v7kh
zhI#Jz4!e(lzc$FO7*+uTEJ@F6*6kgg<?fk#o7`(PcbLe`L_`YZ2?@D$?O7I{m6R;n
zG<dq>>Esk`&&Jkl9xKy|@xmM6whIIEx-|s5>igHLo2Qv}yOHxtUwpl?&a(E}!h>H1
z%kM-rkUEPXe_ure#Rb)L7!&aGU-422avk>$=OoCmM3PeJdZ&4OSvk6U_MXur)kJZD
zu~JFYI%Dk1HT<jklumbTRYruc*I8njp;G!vnt;RP{qCq!%O-xNd1h(rvUB$SkIgQr
zR*yRm$ONo<Kju6yXh1ZPe6G8SvX#hfeQhEN)~dIv-)Jv#<uMoDNzOkvJ}YF4V<*}i
z@43@u7ubqi$Z!p|FE}mPUpV&6KZkm|-gwysgL=xZY0ue3zxmi-XD_c*%7n;J3zCTD
zi?R89I?BB&oEy*4H_}hMPr8uV<esT)*^d!J-pyakuUxjZ`rkE7b7vQv1m3*AUs5n6
zYn{LBUj;hZSsye{xtCrq#<lQzH||hgFC?G$9b}#=UW;F;9E~0suNL$wyI!4KU7LOp
z@L6W^Z3{9p!#F%wLfc|S<6!GJ>3D}sw-YBsia4YB-G7}pZ%04E$a>)dT@|c-?CVuF
zgC$`*4U0fLmOyiMrM4tfHEC!ptp9x2E#)@1bU*e4jYxRpOWgVSxeemr{?P$sniVZ2
zA9|1iplxq#BPaoYyFM*B9mYcrvJKZRoC!3Zy7`t~`=IyahirX{WTZp+9U-P#a%PH(
zXaH3D5gH~s85$NUg^pT9(aHZkEsf5E_TV4KG0@P0EzmIkb&V2g|7VFpt$*_TbN?VF
z2n`$ciwL#4Wnui=)p&@k2mh8vt3#bblTeqElSA#*jU7!*ZJj>bfe##L|D1VjFRSf@
zhW3Kt&x$Um_UaII|0xR%EwGm22SH;y8#W^oyHBQUZZ`IR?t>=mCWuPfn1YRH+-$6E
zodn%P=>BnqAS(UmFgqR1KP~}ViO^{&s?bQ;IhxY&vhlES(23&E(9j4wnwSZyy_5b|
zcGNEsy3b&+y&yZgtE(%UD>s{+qd7aLfPery2NydR7c1%tRws8`u#p?9trPt}Z}M;V
zd1vZm>}X*Rwy?9M`Ey^RPj=2=5jwg*5Bm4zpXD@lv-poE**g8pER=!lf6lOTvT?Bg
z`@K<Fh5sBCRIzX~wbpuPVS}nO)H6i6dHJ}6|B>PUIQ1Wo{AX66lc}SWoee4{SoA+?
z{a=~?^U41`<3FCM{U6Wde9QBnANilo{41w0`ybQ)Q&s%4p8s(aRnek2!tDRvXref}
zMV7x%?MPwqPFVxBNA<FQEPALd6KeglN3ELU-c9{8XlUYSa_=NG+|YLyOx=iO$b*j<
zX=$UD_jN*anRVuy>t3+#+ho7LR?EVv>cV*+GRZXd!j*OQw{4rg|0`OICT?;UCnZO^
zC_<vT0um9=v%&r08yDB(Z66UOxfoM#Ivz|yaWwS**~X0xozdT8WW8JB5sfbz#{X#Z
z5(5+IM)*H3(>H%KiDsr{2d4j7asJqYD$v9KU!ec4VgG*({oi{1|C=@RO~OwpeO5jk
z0qpEz$Z(#}t=*R`6@9RleIR9QSa1%^B#Q@9lfWViHU&s|Ouk--oK~JS4~9oj&dCmu
z0Xrvn-NHPmyso_IL`6lre+jyLIk2DxSwTFgq=LeU45<yRsL9JgStfm-#$e_oa&f&K
zFLP^aYfllk<!<f^;mrYNCVxLx{8S*Mft(Zls$bh-DYI|WV+Pg4b%v5qz)#KzqV(KD
z`U0*Ap1hRt0&_s^M=Oq({mz|Mc|WUw#_|<em6Vja1(Y(+;_%38WIujf=FW7wJE+W+
zyyS8*k`##)z6=>yXgm))5kRc2J1Z}GG&W6aCbJKsa{_)9xPmUXIt(;b4vtoP)UxbJ
z>s^o@VG#kLwEx`;^52_TuJ4;=VBIPeb`VdLB<h^TW34s9wtTkS_Mk7l_AAZ`78cU%
zjz<nL1v8!699w5mYcerC@{Y*L2!;mn?G#YwUd+AE)clEygV3*c1OhY*&9N{uv95ZU
zm*iHZkrS8xu=Q<1qZSN?V#39+?PqHXSJiu0dYUIp!2FbnP3;o7r6iJHw9S#CyUbKn
z62!<1VfP>HNepX<2`f&qmnGl+Z=L(UwyyINy1z&H#Rf+eNcm&$a%8UI5*3k{xBX96
zlSg)I-?GPwt*{$Kug|FCbgENBA|pq*v!Ao6iF>ErG&e=lH`dMSsb{XuR_~}4xiQrH
z+~0AhtGiP196q?rG9++ta;l7&plyoDgY`FiN^D+RUwqtNEDq4myv4?sOK%v0^9D$M
zpKP=4l>bwR<C@NktOl2DnsD+dke{OK>TCm<`8|5a+7*(VQ#1jhSLRgUGM3xds2SMH
zT`(eluN<UG%LRZ?g#MlRA0HFKE19Onm%DIztR_`nhh0k(y?TUSNBP!G%Mxz+Ms!hv
zR+#ej<rlb0qwicuyj8ALPsZ<^YYw#lc>KQTWo~Je#e&{gt{m&|@NjlSsJu$4#rQ+6
zyX(@f1(9s$#Ru4tvc-amML1putxM9P)B+krub=E!I!@?pPZyp$0UuVebxMb!3K7bQ
z(DKT*Q14M#5S*B3i2wO=b8pTyS1ta^@$M#2OJqMPU_4%YXQDW7GI!Zsqj*tVSY#w{
zx8L<|K|zMLZ`LArtOFXx2)jz1J-T-Nmu&r?Hbb-FWBE29;`S3>CB1q__e;}79+c&A
z)aLyK_t%m)H#hCgb+I^W$o&az!73}(?Xf)0;gz+uwZkL`CK87jKr@gyoY?vOnf9hZ
zqis%=&6HwO=0kiIAb{~?<3lwRv>l;dFvPcEG&~`g6t2ZAuEMUlnDCMsUX&~*Tbwdc
z<XfINrO#|wUXvz7QtR)*ov*Co*FmPae7L{hsaEc&FW|Ic9hT}S@ppFnfs|2Z!(5e<
zRo}e$HL<RgK5a~5kjlG5a_RQ#zVpCH<q^9=!iNguIkKa}!!onuzMm^xs|EE$goGdW
zaO+iTteHtqhM4-&1abr?_1kf_l6&4WKngY;ZnkXYQh2_*3nq(ff<{+)q}-A#P2zm`
zN-K7_KleUL7B!BzxW3fwDSzsT^$5|m==m&`o*qIHJFAELceswG1P9e?V6G7kJ&NeS
zh5h;D2QhE7)vRtZ!!LARe@FqK-=VthrrWUN;z^W#b;IkS*}f}e>iTGo%%lS?zbNHd
z`6*&Xdwza?*Bj@_lep-dmgpe79l17)ONI==R$JA_h{EStX#({iwfql8`c|EgQ7(ty
z8Zbm=Mo)6=^(*&d6V1#GR>9s`=hSzR-(Ot+G3(Cr`7`=g5Rzy8dJq2AEL@aXJFZbj
zJpz6?GA{C0;O(LiSDQK4*t`MF0s7R#*%|I@;7`_i-dg{_f!;ve#I?Ry#>ti_@*HXW
z_!9kDg`10`;>-w2G1`R&AEqAVw3xsXbA`SbJ6M*1@aj1e77|X1Pc{8IncK8#W3<JX
zK)V8*hxrgQ_z;Zz2`^OFUS(D*N=riuQ|}8G4O=&XQR5Q(?TgM3bX38JYyBkt5<Pc1
z`n@HED?~4s*I^Q4IrVy8XUAfSx;S2t3(*s*#E<Fe>%F3(fi&o1Hq#?3@gpv;uVtWi
z8bV!b)fuiubG60M!u3nf%{Q~mt3J#i9M`rUyB}YaJNI`4yU2Dw*$yX6!{0RR(-hxd
zXtcZC|J=a`aXntMAicc&Jk#P;JKyB2O9hkvGLSfwsKyW~qpM=KlMo*xW=O>wnUz>>
z9jN1Y@k`a+nmh9L`YyUin@jto_elC_z1MX_&Por$s{}!c|43!Tep;YUi{G0B1OnEp
zH2188Yd0Sp!EbS4YO5!hNdKZ!=Z?n16Nlzrr(gj()3qOy?{aWVc!v6h6idIOJG?HF
zS79G42%!F3pk9Xg+eF0<REdgHJ+bTD7pmwS?@BSzn}q;jDRE492__>MKrTpDf@eGC
z?@~#p^8=BnIoJK(c$TSMNxRfq>sUPUT1XUVOC?Mfga5M3P<b?)Z~?q*)!td?BEh^+
z02&!qD^*gIi>6ENbahg%QR?Px+Fy(fC1LOT@m|4X<wxrthSo~*WT~OLVDr*2glsdq
zS0BsoHz{o*IlnDg{6Ye&E`vg1soF~U^2d~%llA_1bsZi%6RZKSip@<Y^&X&xK`Bk^
z;gc<TAWLGRNnZ@9*X_;C+HU<x#l=V-m+St41Uk74iJRQ@oz6{Y91CbR1(dLhwO%r%
z-#CgHc<D$=`_^zN_*i<scCGCe+r>-LyHKOBiN{h4WOl;?V$*M+bDg-Y#FLeFRk0iO
zuUE^K)F%Ff1O1hF8{Y1Co#6Fogm3Wta77A*S?b&ZldO8(o3;)betgVaTzDl%R2?C#
zFKae@r9He85~wT{bk)2yRgemYYAdSc$<vkqPV<+jsi_UMOBZW7a~ON8ccwa?=$H<t
zsp?c)0v<nm#gV_dy2J8pqOl+{vaC=7xwilm8Idct3_S79U^f>Y(K+}~X@>XeJheW|
zT(*>8wMRJ`o1m#nE^t4{=juDWSY3*U;g|!Xc1}a9^4>SwMPfuPFNA!8WC@_7MFgo|
zR3DlAGYd_Y%rT(@#La4YF_A<J@~^z&f#HaF2GjoM-6zYNo2A0+{Ywg(z4Pv^p>`%4
zHU{vGO6hRGv3Jk;E33&jF<L`1OO4{hg3Zn+HEAkFa8&nzRGU-_YaGa$q!{2fy6n;P
zP3WxTrXfXcw+q}IkB;M)Jxi~^yVKHSO}a9Fu<7H|l&v*uOx}aVX7)rj!vqEeO){%b
z@6Oc?OLeCr)CxZd$i=>{ZeZM(?o#l|gm;D4Z~a_cXmnj)ZlkX->M+x;w2hsgI%v2O
zsj1p}f><9))kVNdY=tv7Zon#FMAZx;z2WIf6O#Madmz4I4!{}V37OjyGT`zYF3p})
zJ-OM~L}A1*SNgW`bG6cFVwS0RZu8+3{fl>hNfRvBW1(KHkxKmvdq!dVIo8Wt6BRe6
z`H1p$8DhSz=@k*;tt}c0V3HIlaD0W4QkJ9Rm7vP8Y~VMrDbL(ZcSL$)o<-#ue#d9`
z<0fVph>c59dP8Hb=D_T$1GvoY*H41==E<Q~+Q+%lS+XE$?f`--k1NBE%k(ofUIje1
zvy*Hz<{2YrCn(Sh7Z8g%-5w{SeM0%m$wP-%>3rPiiGI91_Q)hmT)uXnIs|_rZ~`m~
zF<jc0=4DyfJX)2BIT@-gQW-YS#EW?yz6eC&Md|6@qFpnsLaR%tJ$$lQC{I066wvwH
zyO*_yv+3LIv+l?QO;&R9lQAl7r{_4t?bp|(hIzX}d12<_*c7;}K&2)iAxl#}ESy0j
z8-~5OsF^iT;{(P<c6;4dr^q}*HX-_L{9@=qqbd@~U7;ItmyQQ7M^3`YYjd@ZaHM^I
zx#)2=rwcmE&r})Jzfz`Zig-dHtml1elYIg6)jqeS%tPVW7&d(}q#grDdrZwiS4Xh7
zqfDUL^(iG2IiHQgg#mc$mrl?V1UnVge)s7qw|1E<DgDP6qhA&#IE8A9f#_{<np1x!
z?M#iNUr%yvW||}&H+s!5dr#{J5=xoPM=}yGTSwx?0ADv(R*Z@%1&it(Cj_?_HjO)4
z<l}L;Tn3r?qC}e=4o>H(U`|_QpKl+suK!vw?iS2pr&3k1TmDIq`@T|I`jMh;S15^w
zKIaAH7bYQ>-2|%Us{v;u#T=`_Bx+EF7iqs2rTV2@VXlte-1$B1{O6Ze=K~qQ8Z1+Q
z@(yma-g5h}pA{&;_2W#sgref(optqaetE;${&o2q?FO|QxYu4WM$Fz^jRtx%PYj2V
zq_Jqt`C{7CzR$V*oXf(y*3^g;gGMo`U!WA85<6iTTU!afE4_`&!PQd%XX1WeUvXoR
z`D)Kd@WGK$(k5SIXx|9xeFAD`BM!Q~jfA<|oZRR<7WEswXh5X~xQlxqcXmpH6i^OV
zxcU6er9Vy_zwMYb8>Gy}Ej-J>P4Fh@@B9ctAPOa@5{LahYM`4RYxRkx0DyB?)CJ}+
z=jfae>5X@>v(71G+3``gCnUWrsgvyL63xp9e^y=B80Q`Sfi&&daGIo&24dB@yi(QL
zWYu(*qL$n1^8~5|p+b3}T=++It=qv{Z-DSxA@pUn^@6rAFpq;$^YKg&{x&=H>5dT=
z5}bKTdh&85IdfAn_P1Rt!~XtbDJ(<lksKJ%Jwt>s9tP(IM9kcsRn!c`vC-mbtP7El
zkkl9YiyF72f5z;z?oltbRb)0?p`_0O-%QI9kENJ{wg+qMOlot4AO#PMJg6FG=UIu{
z$*&jQ5vNrU7)+|hF90C!TlG|8-fCt;R}Ay^W+t0N@!k#cv%`BkyZ#;zM5)X)yvc8e
z9swO-`TD$#WhHqqH(pirNv~^sGFpu}?*)zNgYj%?T?vs}-C_Pv=(X2CO=^b?0a9sy
zsS&6)hlvb|ypYfTkZkc)87bj;KWDA6z$0bY6#`O2@4z3cc>k=?Duv{i-?Th}QZ|LB
z@P@-8%w#BLX2rAN<BH+&ii}hdhpCoC^Y!_`Kvm&tp5Dxubks0Ku)E0I2paI{V7?w#
zt-!#k-a|34OtKYGvyf*Vse~{zr(e#0VE2@l@*RBh0A3$SAq;*6Z!QxNb<NPLSQ{}6
zr^%>q^&E)|%UVpblO_YA+pv(PpyuNJ1y}JD-UFH`XRNo_dvoQPFhl~94oMLxeA9Y=
zR_I(FtJmlvvZl;_<M{%qx0MCuE3+Y<5K3dy*V#!P&E7GE#$=cLerYg1(l@mfR*9>M
zfELpS5ybHwRF}b^1py(k-bt^QyzZrvfc)e<5PHKfGBb@--b{hpFT8d$qmQgpCTJ>6
z`b;#qs_<434w_7c(pY`tGegFgA-odAPdbvnW%O)uKKlf8<4RjOe)e~)>rVwD6sHrj
zj5KxbD#}yvPULr5=fTh(;f~vUj6m*<D=q?bdLi>9$yU<O;n&BZ_oVTcF|Xt(5MaS~
zD|>tNSNwA!S`9fRbjYQQTL9)XkA{lk{XP>UQN-Lx`-gwHyW?gB>^bB*c;eLg^(}|K
zDEXyxT!*cZ{;Kv_BV;+ZM06t;f6Vyg><ABN@uo%hi-S7xF?bw^=S7VW?Vj4aGenKk
zbV3CBv}z-~pQ#9>hLH7)r)k(h#Bi8FaYY=nx|;AjkXTq`S++_9acMJs(X7(;BMBdY
zM2Lu^{G#t$mVRcw%xj0(_+)Iwy1cPpE**pG7q{%Eg`k2<;X4xXzbUYgIITcU6a$j3
zBZU*1ilhHNe|z)GRhR(Rr?t<-Aq~_Uv{&hNOC{Ah<mz8jf(;bDz#D&bbkRQea&?1^
zPmzG~#sbOnaabTzxkrs^Q25;M66jXoy1CHSp}&XCY!!!OO2mF3e#`=BLd2O#F*pn<
z_>nw!a>^}PLS&D_v6E0PnX7&e9A3@0c2)c!CIVx!1{={IoVQeHrr}w&kSPn4yV*-5
zRfC#1G+yqs5;t7^?vJ;U4D_xv9RaisrUTqhHfpYQxxmv*e;n3&SN4l~%Ur;II0ff4
z+b*=URH|!4DAJMGvae9x+`6ER@9(+_8iossnBRT-X+Jc!vT}F2ru)%$;1m2Uj{f2F
z`+l)Gm;MI4)bNk;+5VRdnK(>5HpeCUKlil*JOnY-P@DuzK0Twn^g!zJGEqz;uUQfB
z&0fblgJ0jVIl2R<=qm}_QwA&5`x?ne|IHlcDh0&f87nTO5b@BXDkKcAjIG33u8O&%
zMsl?inHf?pLYK1gtmj%3G9cbHL#P?98T#<E=4b9}gnbVbXl0s-gNOrYe*ktti2%K;
zdwZ;1izQ4Ta6ABe;(E}jxj%E166J4eM)-SR6Hq1S)i0{F6)rC)myp$%Y|CrcSXb9|
zx<(Hl)W)|5;!KO^UR|=PR>Y(o37eDXgluOm28JfS3V=S(e_$>6$mJ@oU~MFGiVZW5
z<$gOVHWkMY;c~eA6onb%anAE9+7&$Zn2$9DU@56NS&JL2bGh%ne~M8F930$OU8T30
zvWaO%ki8Fm9)*~IPHQ8)uSANq>Lb!Lj0zYdr3#c3;@lL>?oI<t2BQ{rJWm~JZ5I-}
zsqu*@Lry_PBIb;Y7Nbq&TjeuB0mxg+g__VJ-9|a^w?S2>=WrqW<*0^p0fuax?PNtz
zkRAkzTVl}I2Ei2Yp68dY(*^~>S(~yJQ-Gm)TIF;uBYp8O&^oNNr_ZB0Lri05?-?>P
zBN!jc!_7^$SO=KrQf#RPQIWVjSZW?Cw4!EtV-dmpT2!~jnl3Yv0_yL<{A1lwuorZ?
zha-)IM==hj@K(Oj;ZSzm7&LQjwSxe11aCYp4ms(2iz1y=(HpT&%wd2shP^xQH^75U
z#sJY+g+#WwW*=4^9=?t2j>FN>Q{j-rqBo4n84(fV4)}k|5ow?}B87(X220fus`TA<
z3J)fk2&&jgn}*)>IfLIQ2jlLNl=k7&MagfdB%SBEb+iT_ZHPG@0_)+!*}zlHVgq(+
zf}70w26qK2sMYooe~~`j`;g~V?axrt^zZu4SpB)FU>u#@d1NVgYg)ZTzm?Vx>KHdO
zFEXE})>Xl^Q_u&n-m=_J5b-3C4c7^m1Ww?R!pE_<pgIkJn3+ikjp83lbeNKzzB32*
zi&t|Z4jeDW9c6Nsetz=ha=D|;D9CNlyA;7F(VQi;!-Sf>UD*)sd~+-GJ-K$Re$tQ+
z!M_H@Cmez3+_lh+&*UY0ldBK3>pp*9I3XXGXzl@AZ0zoud|e^q^H5gGJkrRnl~c<H
zKi=`G^*Z-SK~{b_M>&g`qQy|_v)EkOry3H9An^fER<2&N$57TIR8fVTdEZiMsgrW&
z*v!|xe~3>-3o6kA9wc~(O*HDa8Yt2;#q(H<Whp7&i`_?dbzgg&?~63v3Vy8fSf^u#
z0=#B52gX;LY(>O0BubqSx0)-B1(z*fp=A2?6?vv1(A~u2?P=s=0?1F(oNk-;BIqU)
z<Xm>avpFHzW;MSUHL7ho?%!b1Ymj73cA`3sT;TD6mX)%Wgb3x&#nQ>ol#<+Yiq$oI
z8peVSzvIfggP!2*n6pT<V@f+WUs&3V8+A4sxE4pHxMw6?SdTVEe>u7=;3R@Osf}25
zg{+$#=a$Ea>g!l}2tId}4LnV$-TH`mcuHU_9m&(4{2j<3TB)zG0yl$>jOH*(YV%r6
z{z{Uu^!Ip8lKEeA@c%8T#7TpqNgqZ@8T`fr7Tc~~F~q!e_|%wb20a`kG4!_j`T?xf
zrYhv@SUMd<kiiQv_Z${*@`+ucZ;6?!-Jb^1&t`RNR>@{R3h-EHY-OhxBexC&oz^=~
z6cObC2D%hL6q+UDv>B!f8wy9Yp*lv4lrd1X>XuzGx89Pmgq*C5y^B^V5v6>kbW@G_
z3glRJV&<ljdiGC8!0D<rrK2QJ3INJZc-m6#(jrZcVu5UH{^T((v+lAag}}i2O>Y|H
zQ*Asq)71deeEL8~g-?4K91hT<MTB_f%qKyJxk0V^=HhWJlxw2^(C&4$%{bO<CF20f
z=9_c5>6Eh=t4i0avzJSoxOTYsiBDf<euiQ%-0CDmDl_jW_`O3uBnzsS7}T4QBsi+a
zKQ2(FWaqWgD2JhWTvZj|tn=X$=kEM!seVE&suDAUd0k~*O%}fP4M$NFU)4t4P#4?9
z=hD65=^bxJ<CXWerF8>Yp^dE8`4no3VBbp2y1y@9Rwfm&tlGi}j0AojwZ^?mq9<l~
zM*(M1p(%wD@&Acc8B+nsHKNK<KBl8OkTiUcwa}wvAfAQ(@j?KM0l|5`JpnvkAFv4&
zb@u&oVQx4Op32{m9#abaRp;IDqTGw$n&8)Yv0bL^7%FguqLDAs$Iczv{98>9e?_Ym
zs=1RM&Ct*f7D$CRY>R(Bd9i0YFi9!xHg}fhq1&1%*t@-NbiaF!7}Y)%;bNgjxQD&G
z41WqBaL1oJ@Sq~s@EyPQtKGA$dHR<Ug0g3B3;`ZKX$_36R0JHM>@$j5J_29nv@xi}
zSh0x_QzWfY!3vgBP&2HRQ{oW_j#fOhg~b5MrRT=l;O~J;a?47Mqz1S)!I6?C81&@u
zxd!*Vryd*~&phV!8+~YeZjQ_$zOj30P|aedRzSc7^eTPkVPS}#m{KZpLqq&bJ1!zT
zmE%2%V_<SUDD2mx?JkXE*I;Tb(ypF{sF`LcgO2*sOY63Nb?r<)LSQW*Q4q>%(l*YU
z`iVw-Q^|B7XlS#mYvO$b^$csFHNg2+)F=82WHAr>oH}V?%@h-P2JMe)XrD%s^M|?q
z(5=PivhGEbi({(8Nye|@vmDdpv%BoUsh||Clj1V%{}?V(A<;|?6t^3!eYW0>OvNug
z-W;L#xxa*^Pc(a;ukXdgugy;EOd?Oa)qsU%;KJXUzVZh<Vjm%c*Xxn?OH;=HVScOb
zSB*IKIil3`VjnWHB|EaEfGb$Y1Xe>+jfZgbZbn*vzi2#!X@8pPB-EMF>k90FBR#$o
zflshM=gKkfJi2?YCI%!_0wF8)$B}ON%H-_4P>?22ej#jSTL6d>(xr*{aL%tFHWfjS
zo@l@Sbw)z~v~a$vdaRb`h}8&y5CEsavtct(L1WgwH0B)Q-N_z&GA_xDp=<rqleMxy
z&PeKlFO1cen$>q~^Xfig;Fs|6leCWUBq4fkf=c$k9mq;c#nVvU`M`~=UI1?1%tCY6
z_q4SDy1p)cjykd!eQadjPLR;?fpcP1qwz)~4x!##Pg&qid1?N+ZHH!s!?@VWL$Xt}
z9C}DW2XQ<U9-GQf333bhpu(;=3$O4Q(QLHTZ)qV|9}@0r$5$36b~!&J98vcyF8jKO
z64kIDkNO(9OhmWiAd0mcB^tncjI{^z4ll>XH&Fy{28CFIE|B^I!!b{6A&kegKSmko
zN(U(jFVSygL;0IA*XJFN8n={6KjN}LT+em|+-r@j1YGz1JC>8>98P=LfD0_?INVr!
z+Vz&j;Qg_w{dyl#iDp4$O5YjfJ+#a!i?i$nE7`zSsmydS@BQ9P0U+AB3ijD`>!%An
z#5|~y?iqZp&LZ@5i&va2_~~c(gI@>B`{_FjG7;9AhYGC$m$(TrEKrQh8MQnm=2U*R
z#4ysa)W&zgRq}CAy3Jw3N3M!sSJ%XQ7rVG8r2YX8t+y>IqNH#2nws`?Ho5sxR&Rea
z3y>~eUn}I!mh`xq?tO?%n@Br9n0cdJVZz65A*?V}x)jwFn)ncl9N9oF-KDXUrB%ae
zwLt(_)>JH>k&qCv(QWx;v#S3+B0FC$R_9JnSowIP&xWLT+^V`IztZWD`bO+trv$JU
z{^)!L*Xjc*co)^+Y^mkr30^MywB7(<^5H9znvVQCj>T6z_a7YPgm%0NZVrus^m$K3
zi)w$FH{VB{;s)lq(w4L=gM|iO)8V2%>2F<43XLuY(GAGd&`g|yckmx%aL*#Zdtm8|
z?A@)aU6N5QD%#aAWGWvL>qK~*Ff_M*z`*j3+N!3;Mz`11xU~%C>%8)tVS90v9;TK!
z!w)YI+%pXIsey8%0G;hDKrywN#K*@6)`&vr0oaRb6(4~0Zbyz^jS_ua?V|V{H_9X>
zuR7h26CdF`?kdj;3nU7}10b+g1W@f@t{ZH6KT|Va0?nb{m%;{?u^K<zsn=;Ws;shF
zy3KotjL3Y;?2O=3M{im_w5iO;Gu=&6b&+U37edCgCYC(+X<a_wMR`e!i=xuJ)hHHy
zw)k;G(PXJE-FqC8GTj6DxDq->rL-ChhoKZ+9*n@g7=~&khs)#mtdLAs$>6;rB@d}$
z1}8J+Xr4kK&AG++d6{BkiQ~?OjZ-3W8-*7Syh1f8O>cu(iIz*DtpcB`HL&20>+-t9
zOD<6HwHQ+vh30iCpK}@%12l(Iom_B&L=v+TKbdQEZT)cRkZ--zGH2V&ecjbPLP7~2
zFP!?+g#&91R}XV#c@t1+KB6!%nZ7n%{_Lr!XT-3C%1AWM^<PGWekjl=Jw&#ret8%v
zQ&BCqi-))swu8b8^*eAbx9Y!Kj1pd2ObQe0siJp2($NU;7|$PxZj+M!N=}FpCd6LY
z9u-G#sYGUGdVM<#9TAJS)fbw^vIkec(a&b$BCUJQ95X|j_SRj#KLKXyN+~1JtfYU{
z`=d*N?uq(#TdDqS0glh}a#*)Uz8;={<C<1(5vwoABp}P+S2!3&eR$n{+P**Hs4vJ^
z`Znw5bq@)#NG{rRJxSObYfv<AG&XMdVQ?Ty9hwoa=Q*o^g>0#QjM#RqJQbQ)i@|C8
zKBRV1B+)F2;!h7++0}ptRMPJlLP>^V9Zd(m!K~~#8l?BSD|7>6sj)=4BB;6QT2FV6
zTHGM=sb=F=eW;lT_;SE3Ya^0YG?r1>@;o9_bd{Ocia&a1%J%CP^KTSlK4JIiEmIat
z)U5@Uv4;(8BRRZpE+$2${62|Mx`4~3{{(hk3}&+0wOj@*)D5;>z&MrzunEF;{($<|
zAJSfvu<3b}EGN4UliXgm2Y6Uw9O?a*o8x0$Ls5DPA<z4y6y-qL){8#^p625{vZsJN
zaaQ?8iHVf-JtY3i=&%kd%KV<iypwUR#yNg%Ah8GM%N9M@ZKHSe8NL)X?a0fCEQ3b;
zh4s=_kk&+zWQJJ9l1~P|q9qKVjuL1@i@cimuC-l?Zi3FH+W_05B$^ok&trLIXzO=~
zCE|+<K(l8fmVJr*wdu|^X@Tnz4U_+b6wauomyi;TB^4X0^t@~LkUl$D0BBd5)nvem
zbzNm)=YpiPz>_2thZGM`SBxmcaaFd48lc$wV*Oe<@OzO`!h?}YOysGM7Nl3m(Ew|J
zA`m`!nVJdHWQ(Z{B?iXxuO>I<q7+b$XY*J)7tFD(u|ar<AgH)G<zX0k?SY#dX?4Cq
zy(23;8pS_&IUm~J(H$Yf-@3g-e8qR!lFzjm&yBY0@n!?UG^(J7fxA#v=ZoFN+v^Iu
zB?(d#VLNlO<n6vlsMC8Qvw5EM2(f+iS~f}CY&hu^5CD3#USoUvdV9vox1ki2>1m0H
z%t(!R@Rx9rjuz#s5Xp|ttY3^SpduVPJ8^<V(R{b5F7ahW)Rflmcp+02&WzgSj>Y;}
zJ#D6R^VQbdUzpV!-c?~Cse}&`(&|HAwh^EFMj5)zy`kzyW>~3Em)R3}$08WFzP4s^
z>RBZDfwXe%8MR%eeWWMQ2c<Uvn^R&TA3`iWDmQOl6rOWvs2ore!_^PsOSH^uP_07D
zVj!oKDPRm@<}y(^C~Zv)Eom|rQW9B2IqmCxAjuK~JW7A=P21~w&rOd$q_ooL3h%<H
zP*SNlb7R>AyO?sKC6I-Tc*i=@YthCI=}p3-s#>ClPr2pz9KN%7La$x*SuPiVDedvW
zvH>;N#<ydg49HL;6UOr7A(!<*?sfQ^+c^HH5OI7Y_MNirViU31QsR-+hlfbbQmt25
zxEr|0+Aa{#-g-PAW<7hOTt{rwaY73r$-r;@OU2qdAWE&Kft7i5p+FKL`{UjBq8u=B
zL74V&f6h;t$(BPtVdaBF)cB^W@3McTY&m5C@bmMV6m_Ea@oTEExaD$icII@I17jgK
z1~cf8h{-Bk^)Htbu8tdF1%N7KXM=$Wf5}oEGm6UL_ZQyaRK-ICR-GLkMN`y=gp?|;
z`Fn4?HHcUC_mFUn$uh9dQVDJ9&036>5_)Ca{bZ75EoZU$M_2zG*6nLW3VKDdDG)J|
zNb9ycJo5)Mj0&{#Y0G&C@w~fxNVnE>u0|hUDv|RA+*6Q`r26c&T$)yeN#854Yj7-L
z0`NUJIGC6UUjR!?%*PndX7Wc4RL5-;D)_R(@PkieVb)^j<D5Lz4v+rcg_Y;*22F49
z$Z8YR8G%elfxBTsxKnSx(qFPfpHVD0iDFc=$WS#4<1PlXU|kHeRf{YZ(sBX{a57h}
z#$9YK%3AyrlUx*Olx=c5Dk^l{o>jgxXpp25^RV6v-R;iliG0QJQ#9^be3rr4?u^N`
z7>vQFefcmF|7il7t`rs2e(hgA4eFhB-iIrRl8g4T*~hWCa@Kp_N`H-9#J=_D?RjwZ
zt<lq7%i`i&sY!oavL<g|^Sw>N?o6eQU+J`#D!bL>V1*0PFy^%)z-ky38H|PUlJ$r0
z@E3b!ewhbdo$lvj3{p+D5L^?)W8vOa!OARdU$zC6%#skk%#yUt7U~A8j8OPh>M+K>
zQhN1x;hB7Z>yGTTOR+{?8->eG!3-$!zO*%=Pv${TA1kq77#{0u6p6iP#U>SuA5~@H
z56cQlYsBBQnQ72Rfo>R-OBw}y_5>awW-QCX{|*ZhE?_utK|s7G^bVn$G=bS*E(XU0
zzb>_}J1CsOI^)3l_TvlN&Chp7X`2#q32zFWH7WaL<N3_Lq9~xl3)jtueR0fng7Kn#
z12~9k>zQ{b;a@i!&&Aw9Xs-FeT{ed6q)Da&JwT#)hMQ5L*@Jh_pCd;mGO<)9GS(N3
z__sSAIf`0KrFtgOjK8Pb2T|>K6%EZWt7(5f&|mLF(q4?2z^nU0`|8{-MnGMf<ts`K
z5sGpeUx&wchlBHk`D4Yql`m9V?#$AJ-41`wPC-;fE^T*7Ty}o{7E6?CC3qNu62ZX?
z!PZShC?;hZsZ){}%D?nQ>dFVM+ux$D_PZz2ZmtXRPz(COSzy(jPg4WM5Za%dokeq*
z!Ukq4H}|@4n+#Eu13kA-$}78#ehW|@G8dYb$ZPdlh`QNZIgLlLg_{2|IWw|Q%$ps#
zGf{&v??GkC0*~P?5Xp4iq6q%GcJcLPAY=^i@YH=(gIlgusY-s7_U=VS1G|s=EXcfa
z&uJ~9@&XGQ!JfUhQ2E{wBCl1mH`LU%K09#;doYxKl7o_fbg*@1jT}|@d;DR;S7lsv
z{jfz6=4uaQ_rG*?EsYrZggbgJW*OYwxSOmW2ciN?pRArV5UJn!=dGhux8-yfpYYy1
z<VO(!Mm_ITO5IPSkN1*Pq4IikJNSv}epyn%kwMxHV|_E)D1}XBlX`w`U0t14&vtm-
z3-~}RW8xcwx5{G$%I3urSCnsVm7E1!ZgPcH(M>D2&%v8#)iJbE9!`n#^-du9_(A}P
zUW=so0bTu5a(|Bv6{N_d6T41T)Q2<<ov{K1EA4I3J)zU6b(YDO*&-)NiO9=^T0{BJ
z4ZLDN<lP;*+7AuWqf=p$by^15DDf9;N%RZ~O*SMqcRL5`$Co6=>(>V@aYS896`qWL
z=EZ#xu{a=XDs)MzRW{P7$b(V0=5rB1{~^|Ar0}VeOG=hOF5dQEs(=Y={`lqYH3~1z
z!r<&uHA^u|%7r2B5uy8iIUHxfo@1Y{9KJ&nfF;%zjpE&>q)w(kdph2Mrkvm{*JrpE
z6BUK}rhv*N)XP-(xEB>1$aO2P?d%g^I)wzhl@g<5h-JKg6-gz+6?`$DIYJKCZP_JY
z)`!;VLyittjMegH8-MTYT+gq5-@zt=<2D3vK83?{s(%coarUvjnXOkaygVs2{e3_!
z*b7C~zPWM&YBnxB7nXp?u$EvUz3*-EH460%uuAoc>nTKBBoPyKwEVX7RcEB+maN(w
zJ_#B{DwBxPsTlT_E6vx6DQt_2i)Xhvhpc>9$U%$GIqa=BnN^xrO^whR^BOyi^|qtf
z{Qg_d^CA7{s}C_e-=DvUQvRc?B4INKE7P$uQ4$1y_Sv4y%Xy_l@mv^KE7K3sXd9OT
zxRG@)75Aor&XcnwL&C`?)mH>uccO4f*yJl;P_8F=m{ph!Sz}&0nv9s8yPkyLIPlqy
zX+}_qP;GNQp}NWDjLhwq<rj$ziQnn>dk{?Lg}*9(_t)>?13wTKgx@|D2a&EJ(X2Jy
z9eJ%YTVr8F^0uzP|K%l4T-^0J^;fc^q*3}jXBNukNBEr6F0=I~Vukv(g_sY6N@$W=
z#SLbvyp#3ge<TzO^`XSidjOr8j05c&ay|&lcz#4>JMYzWqw4{wU!8ivFof{kE23yX
z?zlYgtzfA?>0HfT1+Idym5MU9h}nnC&zN8Tj9QBCvE?i$E$A9u_sWG@Csuf8P_rmF
z$CwV1DCEkfUHvH=rIw)p7}Q&)gZF1a`-QHZHT6()=LU~RC<tav0<YM62J-jtNKfHd
zAurUggf67yEw%j-w{8s0q4bkKT`ap@_GTy6gTEW^Hk~$1LykNv%$NLn1Bc)`V-O?#
zdgq-Q>!tEJBhx>=DJndzynb^T%4NQI@Vgk=^1cRnu%vr+w*6X;2pfdHH`CbqM(?5)
zheRw4ZlR~KtPFA}(kd@{rAE98*19^5hmAEJFgj{sA$|~L?4Nq;j_#E2od|okKPNre
zdsV;V%&)fU1TP%&95UVdg&xDFXt`te!&@|^dW%N4#x@b9Ku`+SveGDhwc2{G^M^-H
zm%jI!sWfk`vY489#GoVgwQ{t4)sqWs?}G~X22NP{<48qN3aJ7ePAksJ{r+-{{(16<
z5bjA;%|xNzbfGKl%V^NFOp}dIK_TGy0RgpCueDp^9M0gkvrQJZDBAk?-Lriepg_ys
zY~0g|5=&Gjq9P#*%dcSx>~Sc*L5CJsq-7wnRJN9ix*rv)?0ACtS}{RGbZbf<F;&dK
ztezKDZN*R4v-L4(CW8TzDCR>&?2<xb*A%U9E#+~gS7~-j_W;}HOb0YRj*p3~@`scu
zTh7#brR#6Wf~wL)Hu;ZEPH+*=hwsl17A!R`9o5=67HaM)rF06>itr0lSTjOHDa0xi
z)C!bL_tiGf5|#8l$R)H-1WJpb!+7^gG<~txcz?b^xC)y8hAYu5?7kTH9V)0JK}@K$
zoDao#c=S^Ja(xPm%WX@x{sioWE6|Ff1=b^%%==K}&<s{+DHLi!eMU`ZHE9jj`mU16
zC>PT?)_i?EcDNw;$G@rGw~j@LoCKd3G;d`sP7bj!pakTO$XVyhz4Jh>gUw56tTx8T
z4t&-fPIiO0psLJDoV@M)``2+y`tOx8-cr{8tQ6ch83`^_apjiFhjt~8Y@nb<I20V7
zS`*I#s5)<AHO@ap98A*vVQQU2umRsLw(nawHn#WnjQ9BYtE4gw^w<5M-`?8Z#HpOq
z8@32@ofOC&o0X(ZHX+M9L~r%XhVI^jRmQD76sb9~BB4Q31`7vSmTp(IKYz+_neUf!
z9iMPI>SFQGTat3;C$1~pM_JEQXz3#_f(Y*Ay)SM2I_yn129tALM}~i&9A@KW-+jiE
zC=QtU%YcITPifz*3_R%%)(v$Hy)muc@hCq@%LvCyU*7?NnAmYd@op&oJsRgCH!hAj
zCe$X&4w-^f`_YN|7ljUr9WlTwjaCU5svC|Q_a<{US})e=h0k<Q#5{ddUkrUlDdr;S
zo!TmUwkPx%lM{yoK!b&|#_dmPx7JVFr=g`BOy~?T>FVc&a;fp>_{X^ah>{R#zCYcr
zbi5w6$?+dUIrOh&&Wd6ftjvJl0nw@qeNP&aHV;pQSthLb5_b4)5vQT`*YP(+h0r7<
zVuo2mWi-tig+{tM7Np#<_eP0p&JdQSh;h}_w-ya=49j&e9!P?$z;LmW-O%q@88y@8
zHpOe2=)!a6YM?zqukLX-Z)Ytg<DgRj2W06a%Qr!EKe&%O*Q+tXg?Rguf{JqF$jPod
zv1UUaMm;F}m)Z+rld*%3YQ#z7@%`3QZx-(7>rckAMm-UAPJlY{Ga-mb0(&|;Y20^G
zo@W!c5s8UuZyn@cKoE{7&e^;u{u0;=``C8VtrMeA%rN^4^_7ZIv+cs`ZFqGgjxAPT
z2J+?L*^dAZA=jeVdAk;)B0tnuV?R2q6E*B-#!s5k1ihqDGZvdnWcqUwV)&#)jSeEc
zSmlngFBij}jje5E&uYq6HV=wi8|xa__(gv+e>Y;;SeEJT>)i^|u%fvppor-)YT7Yd
zDicL=H+f8aa)*7UZM^n8SQMG5x}*l)+6Ld8FNvZQ*nv2f8_`?<`(#kypgN@0NG38P
zYSKoKd?eKU4)ZZl?++}eJk&>PmWyl~w$+P8(de09EC+>5-fQ0So1GQ)skP{lHu4Tn
zO@RUhg8NahI;1qR)R|3&+=GfGfj#QC9SI(1<TYTqaHIVFkd%mVgX2f^YJ&unIA~~9
z5vj)r^6QB`&VVku9<?*b6qr%}tpG++<$ysLv)*Yl#;2x8BR)q@N?$|;i#ZJ#)6X}b
zBSb0W{RgiwqxAg=8qDfCJvOQnIp9aHIXJ*cfL5q=HOd!n!~wDb*Go|%-yrSnVL^vi
z{An78+1lf-roS&nT~;1@)ltQkRIO1HetbSPb`nm#1jORj+w0D~mgYkRO2`G_kaQ}T
zrK;ds_5(J}GMUU>3!xv9oI|?cC|rQnQ?65^GxvB=F_iEL`essfUIWQ2qbR0Mo8FGI
zy}in)n8B8#kq2lEehNx<0yj@Lu;=@Gu%__Glp9Nvw(08P+LYYacRD>aPxZ~%ue6>4
zkn-K&YBxKUdyJ@S1$X6VWnAJv9Fl4cI0`%GSgXv#_R+)Iovl775mhETfbr5|lY6kb
z*Lt)5@qeU$4%CE}q~!<Lq5in2+qOBO4qDwg;dZaTo3S&E`cSL-my!o7{2oJNYeJ6z
zIUCPmgpm{TsrPQyIv&UD8U_f9wz)pDjozK95ZqnNHdfZom#kHFPqc!ltaKhN$&#f4
zqOU$(We96neZ7NQg&C|mJIjiQiIhqON63%A*jqo&W0{<O4e1X>fwyM_1g=(@_&j_z
ziv|%?0=7j*lLUO^$y}yUfj)!r{Qs-HFOP=0@B43+blH-GED?nw6ir!^CfQ@iHWE?9
zq_NFd(`6^wvM*7Y3?|uWP)PR6zMJffWwMNY`F*DQzUn^DInO!2#{I|h$MxU0)A60p
z@_KKt_wt3EXzhU%S&THs7rqX-vRtvPWJVL(*rtnv8&I0aV5Vy3a}shPC`@2nZ-0vn
z1CN|=qfr@dJIOfj>T@wF>i}qDKsA+Gz=_TFp@g}C!D!~nL+ob0{-StL>nLH-eHLa<
zic64nufQyubLZ;8LR-!9qFLM9MsB{SP`?!|dJ1W&9(Fn-qcc}Zo;7%NVH$CN^Urq+
zUj-jeVp8E2O<B*bPj@21fidHVs)zf%NOEGo^aSHD+bXAfS3<(_`MTQn{26w+O%c}5
zsL9ER%cT@39M+|sPM>0VgU-Ljpj2Gowa&gZ<ToXuy;bVDQ#J#lyxZw?45MEF4rYrg
zdpj3<KCbbsJ*c>l=AFXOapUcjm;U@PqPAU#fUQGM&FpgtgTVc=Kx}FN$e??=xkpe9
zLD`r>kAb5?w~M??@(W&=(~?S^HiqjF_lbE1!;UN28T&Zkhz&x6wMW4#`CMo*U4C#y
z0s}-I5kxv}igqHM1NE_@AeanTdU%b741C~IN;E5MTikKx^jc<fdL+k}plsXFObyER
z*H-<@^KX(u?Y}IVEw|V~bt`bObO+$UDRi%rpp4{|LQrz<<f+<-^dYNgiJfC#=Kmk<
zq|b@1&0s!61Z5V$|M;)}?VmCGaDbA0cD``5S#rJs@}*7_Om{$G@0i76Kidl3KJ9$@
z%i@Gsoj$=$tX@Ae>}nzDguAGzOhyJ1>dsd5Ig?YfSC;aQ6vfJqgI<$@o!l?kXcHxv
zJEHRK`Ha*-$<qoAEWV3Vslvu%4N2;tVKEsbM+Rs~K5YY-7za>W6${y5Gss6Lx(v*R
zgF1JoPmzEVoq9j~GOO=C==pjwH-jpE)2Qn;;`mU>*X{Jyx<hC|%AoUz#|yFYb<ta}
zqI+q055n?hX|3q%w$kRBg}zPYu#CIQ$ycPTK<4u6gMszN)-ol=VrLQ@GbO0s#j#m?
z2)MdPnCy8o41xSSmuRrHS)cR4a`wiE>|>ozT}m5;D%SCJ_xB&7mmZArD^q+`J5Vb1
zl@o%z1FH@^E+UqcG%+I#?Zg`C0QS(_Cu6+XG}9ZY)Nz^A7c$~iqW7|aJ!EaNLMO>h
zAXw}DTzjsS6}!y$XIikmvl@37mCK*?InPKX#j|9@4FZBOxfq=ugblK&k5fMQ8GV9v
z8FZ9b81xy}^|lY?n%8L7eMBvW)Fps`^5Qi#TJ)5WlOsV-)ab6hde+DW-r`+`#bkQM
zJLUW-*SF6s)H%vU?(4chKzH2G^MQ{^NtKo`F7kBC$S7$1SopTRztr{N@(~hJVMh+s
zdUR=-P2o2fZr1B1j@CtChq$=k5tax^_YiDhVmIg`+)zkA&YSHprk%cAO+mHQ7MB9Y
zZ_@COE+6c-jtXh<CTr(6eVn|RZ>bqC4xK~4dwlPJy1ove{oU8TKjRLUF_6F(W*e`P
zC+8(lb$=8)OD~l^aMa~22{+BTryTqkx$TDfOy4k#n&~Mu1?e1N;Ndcvnws|M<WR}V
z{hR%n>aWDnjgFB{Gwx5!RQb|L4+_my5(T3uWQ#7=uohD_iuJw>4dspo$;?Q+E2Doj
zooEbeBc(LXCR(!_HqjatO~bIR=5X_rMcagC8uob4=Htcj*$0PTcPF&=Iy`Zbx~3SQ
zOPgw+whrnGJ!)T`$G+Azd$S?z@?`t7GQ_>NjkaT^e+}2K6IIFGzrrB7`t2;HD-Y#b
zdCq)&2~^RWb)UTIaSNt%#Zs5gb@i|23&>G3`X$zZo0%Exf>PJiTO<|To9Etn;tac6
z3}n+Ew!O`{W@kA49Np~Zrn{#`u}I|gTe(hUe2}FpW*@u|cJ^ZCcWkyqtf0DeOH>so
zfbOOZn6iF&MiX6Us`|3_>6RZ1voz)UF86+h^&L>n;np-RpzE0LIt+aH5Y6(gY~q$w
zUx$tKH6KSuWqB@(Cr%88dzUts9F?9+W|h1QqSK0<t?QUxSe-(r62!NRAz1OL<6=oc
zpo2_%tNyic+#5>I?K|G|^0@kkkS9wq{jiZG*wf5X_{vGWwTn3Bmh=b?Bp}PK;{?dW
zj@x!Vr%U0gx>1TeV~>Hi4ME<(38Y(eW$(0a=_nG?Z35D~l2EdE-?ti3w;K7omzQnD
z%p1arSH@AFH`-bI9GK2M&0vTTKne=oe*I!pYwstuSP6`4vR=4=dS<6EqBvFfHN1%F
zVkqd_ti8|rda(q#QarGPZ{1s<0V-s5g>HZ4XWed_;JUaf3CX?|F)mAwm<d}`KP2S1
zM?9@$CxjD^z2=NMZ5wy-2CuQ70uEj($SJ*Lu3OW#GFH|*F~P&MG?P(tb0y#1bLkSk
zeQ|hXgk|b+>T(AuYW8YsGjiu?;e6q^%4y+49E(~csBf?}H~qBgr+ugnLjA>~rj23`
zxV!F0WYE3CZVr?op^YO?<NV6W48-XcDihI6?^*pL6lMDkf28ZP6aFhq%g35RcN}2d
z+`ljQuWMcm(%pF=rS}zdZOwuX4jY1rkGq}>vO_q&t?Y%mGwW-A9zq93_gFI|Nn26u
zyLJlbNWJA1mz<pJ`RA)(5TbBZ)FxzkJz(Q1Y8g6(7gI>oiB}d(n7<}iufpuFP@y7=
zy>jyn!QKR>rmuBGt7F39GT@PqmaG~buyRw8$EHLD(M?aKL@~@xF{P|A5K)sTWoOmN
zB(46)cn0pPSg%9|4w?+!SJ{JBSps6;N?ODj@fuUE*-BApBZ4cJsN}@=o6U+_Z5^B3
z@_{9ZehhjU@3Wm+n<M3L4E4%2#Y*T&8y8I7`|K~0vzhybG!|BC&G|28?{6zvH+Oke
z`(nb?fWV*NN0;RLM`2ke=;Nj`>(YH5q!*nCJf$sLD<r|%cfyiWe}(pZ7&~{)S@#l7
zKL?aoylIX((?I8jOWljSMrAkLzy9oLw;1>_Us6j3YtZOIl*mH)kZIl85jK7k6)Ylo
zZei;E-WxC><X5Yvgs9;+!kjQ-gFCJj6y54i*-5Zbx50ns#o;EPpGe#d(Tw5_|MT!b
zRsD1}aGIgMTO{PXjH_rv1)O;C-6-I=UhCElQ#kO_mIAvrWl%sSpvf(t)3=l1b_%nS
z(XTR2ElKo)TdKfPj@y?+@<Bp%zlny~!$6v?7+IqVQkVj+%X1O3t_)wRRigz^A70;n
z4-|34)#%ascqnBc!u&{SZ^+VUZQJd#+g$VW%V1H$?qE^E1M1`6R5DlpUX;j>MP=D)
zHGf<hsR>o~Ti)E-61Z?dD<Lrvc0sJHsHDV~ZgR?;Qbwa5@B9Ke(d1_k&@AI@ybY4Y
z(Ijqj=x%`Vjm!*4%gUAY=;U-&vUOB2)8L{pdKOGhz>;d7kn1j?7Dj6q6Zo1=Drt!|
z^$XJk?rOU>KkfkG2?{EzD=Puv^oTFZ@KV$xgWT(vy}i8l7!-Qsy2;NSg4i$Q^_Mtq
zL}kCW@^&C~YTs~^x?^l?9BfiTyt|y>Q`NQds>erjSGZ(S`1S@g=)0;E@@n%jitmio
zMi_z33KS216^fO#iUj?5#gFI1U6LRoXJ8i)q_X|Pvm^Y@q`_$D)2Ct&tHeDGW+N^>
zylwx4uB0HF*JW*?L%%HiZi6aPd3Wpb4+N8>Fq6uaIU2$~<3yrx_I!uDKAU~O1fOQR
zXXrj26)(E6DQon0M)*m3>WWW(L5A0fGJ7F$#YdaU?EJ54?<!^>==P&G#MO4Ue}z3y
zyD7sooCeu$`0NI5l)q(y9st7}!Z@ohP+0`>%ZT1f2lvvAGCjdcErIfPtgLX7B6U!^
zW0lnQIRCsr|3nZ+-<xnZ)BXG9RG*mrbx>z<vRL~MmVZF?zlFH}Li_(!P`SMEMu%{8
zL`Mom7%iRAObiR*EVx6Un%n*fG6mj}gYbY9c<Oa-3FjtVA>$&iDx_0Eu&7BH-~GBy
zCe%VzZw<|ErDD&%79pmIXK3ZX<B<>LpGO1k%O8uyCN_eh2B$T*kAm(y-PK*0+aC%c
zai2Zl5|vQT4!QH5H@X<+Fx46u5utOI%^UsdX7{dqj34iB+-EO}nHZfp2l$1E6+>yz
zOnx!^taj=J6<VT?N+sj2<+SBAQ@S@A%;N|XCj^56=~k8Ds(_PvExC@TFjiRV`y2mW
zSVa(%Kj`TW<M+LZOG>OZfOX{Bf{H2$w<`VC5|~bH{Fy>Bi=u3hH~p^lJll`0fNrD6
zro`SJZA!+w#A!o8BT<f@GJA>7=ZIlB%a5s6zpzN%lZztd+MS21gno>X!Moy&OFc|L
z@zS|?DN%mRiZ}N$4Jrq3{n8cR?(k}WqNz@da0q8dM1Z_n^mG^E>ug_Pb#pTzj{U!L
zW+#q<+mS6iU^hH8Ckl5aaj-63<6v$-BJ`Q+0a}0CxTkFADbQjz11`Z$f5NUUW~vde
zC=NkS<aP~|u3Mmw(Z;bf_S|l@jDiDYDwCad6Sd_CKke&xLon>jHOo#qLYX>D{>nM}
z+X2_9<$T@R-#0<E1%``&H{m*FEkFD%&Og`t3#b2oPc0N@y+j#8b-w8D6;#*=C}@%L
zO9s@AQ@yW$9}F-=+l+hm?CePPYftXk!-uEP)3XDpyr}#5L*EIILkyK>;o9n2ibvaz
z`7yP(Hw=m16xSBAP&rPgk(VHO=+;r)#|QAfjahxEdBJ~>IRsKt4l+!2NGPlNqrTI8
z36q>DWt>ik&Se+2$2k)4D-$L`)r)e?xjacLiz5WmdX(d2yCjS9LPPx3t28H<14eE1
zGVic%F>s#<6N=MRD{J)Hvv=PCS|(nF-+yR5r6q`oetxa!Al0v+J@ytzoLOgM)?uoa
zKv_7iz&_B;EcB-h)o<`pFr%X-vRV%G$5DS8xA}N6(c#yMX#P2jeFtvyX=y3qPbq1H
z1l70;)zvv=JC8E&PqpnUsJ&-vYb&#|nL6Vt7;7U}v{Hts#!blJv18*#A=HDwt3u--
zoiN6ES{f0Y!)Ee=o;WM>PG4I)r_xaA4nn`#WJQLlP@_Z=v_PU>AoR;6HGd!PKcyt@
z0Qf0s$GWPb#|@KjOFc)+Nr}sM)nYC{;@eo-H@?O&P$N!1Uat^9cT86cF??RSYPG&*
zJWIEbV2@BMnHA+CF9;HOsTEb)$Rq{DgXAmDJ^WW3i7{EX4dBB0W?R19?}zXo6ULaR
zelOEm^{3u+#3;)Ew@cIm|Fr?o+>IUf($ufxCLSmfqUxwOmC6j9{tL^!iujBAH3L5{
z`nMl=$v_vq6AL?XlzIfj9Xvp8HRf{Wr$QzFYr#+3kI)j|lwB9SNj=CP9%pJ-MLPC}
z>_Q`o0gbqRw3zoFU?}_pjQ<er+y4OLr(pgc0*1T)QOB8fafZpZtGxxbTx4?Woe!h4
zcZ#2o{Vspf`;YtkO|^Jd>S-z+k)BiP;uYt)$o2=deWa>Q)RBml0rsWdLMvmZ+L+68
z-HI(G>eCNkJ;HVM^?VVskLnK@-2){d^K~M)>SvN=Y(b_j5Wcqe!>6cMi?^B22ByGa
zr5USpN^K+GE9IG4&l{f3-{|`=X1|&4H|OLs=Y8Zx^=iFnAeiK;41@KZ6%kQwvXkrn
zSbU{3%ZR5uZp*^hv+}&QDX0nQiJ@LK2Hr{e_6+UE<#e-O-rf4->iquH4<97bbw%_t
z13eBg_GhIG+D4qIf><T9o0K}$LKc(pk9zZjJjy4lPk1y<KDvXOOSa9w@e@VA{h-XJ
z^<EJVMy7tr?+OlW4n4uWF_Y^Y868d13Ll^+CQ2{#7i|?BZYgu$NRX6_RXb;}(9}7H
z!n=}^>E|5>U)96a)zvq@LnTKtZ0rKn@J(ol7yLJI@ykSN{kiWTTf0a-&4OsDgIe(B
zX3u<1=qwl4Rj2Oz22N)%T{${6ca}C0snF0l$i%koT42#?xX1`-ZIQONnNIxxyPt=(
z=9DaR)I8Z<ZrU`sLhzI?dpsBuBkeh4=eSr8X*jYA8)TT0;*GB1zIs-WfJQFOtmSl@
zhiY7P$nArpoxRc0ZnMOqabi8P364kGx-ADY=Zwxerxv`GTC=LFt52Pf+o;Nf?uejQ
z2E}3#CuC$-VlPk6ET)xZi&_otVp+$cDIQ(fJbBuDbId$VrVoZ&(=jsQEYv8IypiCl
zw{-PA;zQn5MZA33a%s0K2_G&g5v!IUIUFQDA&unMNmdz;XKdm`X{aSj2~5B{Iyzc*
zUZk0CmC!d9a<Kfmo8J^Sg|NdE2bLHaU_TVo0ugW-36UQ8FyHkhd2kgeBV}Xx$K@H8
z+I2sGF^AT}^ItW~d01IlYuP~~h;@RLg^MmCTVuR{M`o+fw0dYiL!;ABy-BQuV{hjk
zv$th(&Yw7`zsO@D3ZH1mgKkKbe((jhoCotkIgff4Fj#C53Tfr}I%O~u>Ur`^(qrT6
zxfKKXrio0FmTvMKSEgrYidTolYN`-!=M4)U6<01SjEM}tPzvoq7jhj}-$m4^O-nhd
zuP<~)W^$YS4_Ud1>17$RVD)fKQw}TI-e}lt#=Y8P(?BU(!!tfv%}$@E+g85cDfdv4
z=yLlj4Z7muw9V3jcP$)mt1TK@NtPX1%(**6;)`EW9jB*S78O!lDB(@lTif^tgfbH_
zpv)uPgeZ4Qi-bvg?hnzF<+y*puXpN_!z}0J)lp2d({x|Y;&)9?rt}22drgP}g7m|M
zMEjcdhheq8%QDn^<63U}4zjjy=x_1}V5Es3k>=}pLXcOb58JG&)LHBreP^6ze5Ku1
z+2<>k-nEpF3mDw!Ka~M>HEO(gMt%(yTsm6!U^07R7v^G^g{j>pb4p#>ghk)P-atbO
z(V%P^0Oej&wvZ@R#Ai6c<~P05Q}uC4wLAX#J))lcP<Kd@+oqK^9G=u5zcGWfUytQ?
z?uioXdGMQ3^q-dHpb#&n>rMee-oZ3M*6ogl7AaCko~_(;^PWWn8dB~4U7i%kJdqT|
z@|DwZyW3^B7LwyOHQkZ{!&>Yl=b9|j(91!HL}EB(|1L~8HwcZs7|O|Q3|(H1Nka<v
ztyJ)vlZlrg$mI3*Z!v2lq#LD=^zm;&Jw~y(^-_2DW@uy15)P;A$1ofJGWAv4V9f>(
zyJJ2mS`FMwwFn2^RM5iZ#E6|s;yko8m8jDzI)H`(K0yLR`piezWB{=>6W?GvXv_uW
zK|a|ei;?UST}MKL?lsH0o}LCOF2}if+Z!F=zl$ZPQkIZ}z^~nQnC=yLXQ!lqvkBeL
zr(>Gj;Eo&)v9GN*eePQUZ$r-NpQ#G=^LR1iIyQDNhg2pT|1wQ(V<TI3ot7xTM?<w_
zoE4?q1zNP0hFl_bgxJyEe!Wn3LvZiMXADF(O_}Y-4#aNpHJ<N8FdOhiTXRVH4v7#^
zERWyb=(fShMy#j_vY3>t9B)^>{s+}cLdzJ$xglgXv-yvgQ<}F`967HHInH%nJxtuP
zY|6a6;J;T}Pp`mHQ>g|Yp}~IKbF~u796M_DHzFbe03f?dtvnU+*Q<Wpclmj8)dCdB
zXg<T^d76fiJ4R<f!(_RSqn%UU!?@pV<WkFr`}G#?>syS~e<IYL_r~>FWShOW>@d<c
zFo<o)0;7fG26xW>S5`ohxp>}}QJ#M)rt1P|@6og*)SGYj_q1dgb-i8y4O;#qnkPAI
zIy2SB<7lS4%2<HKQ^(DB8X;;b6q5r=N=hu6s6T}Rflvx0UrG}kY>iRXZy<{JMQCUc
z_}Ii3mE>(*iR4;~;RI&3D!{UFg>gxHF8AT|KQ4XVJS!%q`8L_)yIX?X%n@xdOmxf%
zs%=?H%z*=B4lKmF-9N^Iz@@^AGh6qBZ<sI1rfB9_!(!Vvb83?O#o62iGO*Z);<ukz
z^^K3R*p-M*1SfAUO^DBhi{vWe*WcQ13sS8qpYk0A`uf~>#Z%}P9nEc-GZy+rMr`K|
zbx)5C7CqGYgTw8~Iims@Ksv@Owx`**YePp9>}w)j&0B4qp>N?@xZ)^r>NS%x<qpDa
zdkX@b38+iLB8864ePv%q%Ac4}yk!1}+DGMiWcQv@9CTxO_DQFP9J%36-s+pL+h=#@
z1^NNnEBDIwlg@_AL#yU-jgL4*;hXmoP@S0WBKx+2TFW&4=O>uxxyZu8pn};5eE#T<
z%L}U%_1x&hu?v<;{4g!?5_a6ahW@$f))ULfsHjWvA((gX0!HLzFTy>yG<%v{AgZ<X
zp&qMQm$!0v!WR34oCnze2P+~$CfCaC#u!l)pd~r;5sV%8F^_k-7Yohp@wZ}=;i+so
z$)2B|4_Q<f+nDPTIWD(IXvsE#wY7KRw;1KF=;7cI4eV5d+)H5|Y}!`8jkDaz(b%0l
z21%Tkvg<!K;c0KYxjbd{fs6dai0C-keTqB&k|YCYKc7Jqa7pdN`iRdUCzRby1`1U8
zcVUCCP?*+4r(Ub!)FV*R2ij*e?h?H)+i7ck9UYd%ak1{P?G2t)4JkKiG0w8Sf;XyN
zP4mS1BWW2Kvjw#?52jl0i*IcsYWU^jS#7$q`%0u7CLh|9VbNAf=tEFtW#td$Wo2@{
zNgj6R-0WHyK9yNSP;Vw_kNHr-6T!hJO2M42iW-Hb<6wYeYBhrmy&2v_)_K6)6R_HI
zT%R2(n@$`h><sRwI8BRfzFvdA^rY%9>Le((?qv>iLiS!W_keS^GeuB|iESg#80EgM
z;n{X^jB=D?R8N!;7d@E^s>*o^WL7j>F9@o|oQze=eTnW-GAy*?iiTeiv@6=qNYFs3
zPe?m7^vP9q<t=~bFZZ{>#WR5{`GdFxX{xma?XjF6r=#)l)E84JDa2TjY~Pw)>u9Od
zB&O>-Blz0IsppXK$s*6*$jR0>i{+crg^zlUN_)EBmRX;i0gOyXc|T(RE`HvR^7AFm
zq-BK9`1U|+ra`GxXSP9M{cKd0usH!PI|4%7=VI>mx-*5IIE;0llwsZjW=BUyZG7<+
zy=+4+#+^rcU}Esqm!exnkNS%qMo$<}9Wm~CI?QqwlQOu&<_Uwr9A<k34DUY!KGPU*
zA&$qY32vmzSzBA1Z~3ka<7apnso!;E63~@X9sO*(h;F$7IltgPb#@o{lLgwV6<aK}
z3ri;h(v@S(ZQ4IQq2GScLIVfxjXu&;je5reb&RRKp8stc)n24R$`WuJZsEquc0r{r
zoCR41s2Y@+Y5*!s0ks|lZ*-^L{L_wVgA7(^%yT~K-IrDnZi?XJHttc6t*>bS;oRa}
z%G6)#n=`x^ee|W3>feUc&z--30))%lyAt@HQS9%%?v^HSr<Sbef~e03^M(S1qpBQ^
l{i87UJpHdIjGaT#n@o|f@oMAX`^$S&lr^qrU%Tu5{{Z-q+9Ch|

literal 34740
zcmZsD1yp3avM4TtySohx?(Xh7xVyVMjSlW^gTvtNFlgiMGPt|@=bUrzeebUKcdy;4
zBvqBFq<1Q*)b0pHc?pCsxL-g(KoF!PMU_E7z==QM1sJH$Z)%nOtIq_~Sy@6Dq-p~H
z=ra>+sv%`2CkI0F3B!Ouf}(<e|Aq4T0RhDYf&3c=0g(p9`wy%P`t@HpU?3o2mLL%S
z!qNIn|GFeU?@#J~rQms>|HCm4?BCen#ChQVhCvqoB6E^=xBpCF9V9iKK|tWp{<=Xy
zGP1BgxoKLeYPe{~$#NUp+tM4F*c+MBd)PYsMFqm^!Tkx^nz|Sgd)V68IdgmPk^YUr
z{R#h7%s@)~H;RijAE}0%BC&|QlPNJ9Ju5vUDgPH@Vq#t=6EkjQQSpC~f9Ci|EnHk2
zxEUDS-QDTkS?KMZ%o&)txVRV?nHiXw={_;&oIUMa3_a-VoXP%S@^3z(rq0GrmJTkK
z_IAX7@ijEEcXi<-CH<?R|6Kpb>0)X2KP}lg|4Xe;1sVRTVPK+XWcUy7Pg35$O1TxB
zEKNUK{)<096Yt-c|5f&{c6b^7YW#l*^N*%~mwu|s|Am*~Ki$UvMfNw9CJ2Zih?J<1
zst4$)F0=uL*kUJ1^ev$zv7oR$W{rDKOlKs*+v&4*?YB}Gn)@n^+DHt%`zm4$kRo?5
z2+3+e;$4A*^UPFV1_BXO11P<wad|EtXY=zlX3*(c%VZ;fSP!WIN)3z#1T7dQXk@_O
zSqmtL6;=^KcDR4#|EoF=Mgyv!9pe91<t-!Ez)RK(*|OCAH@m;d!Hrh`Vg6strffdB
z6)xvB;b{JE0sg^B0j;(D|4GLVK?^=(qqrLNzeN5w*U^9__Wz?#4Gb$DSPG~md#SDX
zf0X<;MPz`fpbg&t<o?qk83>@G0jzj)>}3B}*B)l#CWQa$vws+jhYBjz@0tAF15L1C
z$;qTbLbl{gBwAo#U>%;9KC{K+390&|+D$gSEb-$Q$qCp*6t=6Ok`(&45II=rNyDMh
znLaa&liGcbqbbr6Q8wS0rcwA!&G|+b>;<1>I!zBc3;Qi#;o)xw_d2hy<$i><pI7GF
zHNme!f%+X>)+k0qL|mHnnCWY1ke+ZPd9Ox3<nz`3GaP|tLd3+}?3GrSGqjp3vY(w7
zSS%cnNX<<2)H)!^Ts>$44wlFW3YT~-hk=TLLSwy1TgF6aPf6}3)G_|yX*3A*GsvqB
zX#8munTk`|2-3()e1k%WNqVxdpm+b+KVi^9Qz)0oUI&^u8hx@jm!`FPi4Kc^uyI^B
zmsZ-je2n~wj*3d&x;$z{t1YaIwXD&lxsq48^6%jqj|@l-U}e}~=ZF+cBsEBjU5CC;
zkfFzofyJW0%Q}p#dOz6T1CCaAP&*&cr{13#ncS6!Fk8*(Cd9`F0=bI_evUy=fG6_5
z>rnc?w~|x3DpHzQe;M%sepOVib=(n$?GZp@w^@USg-geCF4-CizeG08n&5f>!(o0z
zUhY^nOyC3-CK;c1JTafYmnhzIQq!$|CEz9>ZB&mH<svQo`BRwX%a<=nY}N}vmPxs|
z(^KB;tc2QH!y(ZCS+j{YS+29&`n?(vXlmn;jJh)){-<y0x6{xGX=|{`wc|XLAWh%@
z{_*8ukQv~_eSdYdnWhE1Bk94=ljd)89gmZtZ!Oij{rS`A>0~mU`6c%#0XY{6N_01h
zMLt!p)9ZU=roJLP)Giq;5>oQ@??HtTn!JtVBy5V&l!?^Fx+1M-g9vi|e1Of0&awq1
zISmayeE9I6Uche0%|uno{U(c9ASe!8F{zYO9bBRB%e~XI*ax7Hte@&Uqw!?7!rnh+
zPv$_%q+Pz;X&<du?-UtE5ezHPEsHGE^l++RZ_Rn)woLu0n9e|OBY8NyDM4Lt`({i}
z0|GZlFq2(F&#}7LfUW?nyoyH)CRlX2F{UuVxZR<?z;`dDEVepEbTp}V-|BOsv7rD<
z&cS${sbi+@iw(Rdd}TsMM;|%<<;n>cLf+G=u65jBVA9k7jhZ?+`CD%`F{>ML(HsEW
zaR~9sfPa5P&zp$0`-5LMg<h8)4vRiTEHd@*Dkk1tTJQYJl0&d1fArH%rMYEUm)VHj
zNN(myX|B@QH)2M~+RK5y_#pJ%gVFAKEEyMBo~6E1kHnBcgSPs9HZYD^2K*NyiR*zT
zYk-)6HS$-6>bUI$1ZCwqrC3wNmo*fT<>%{iFHHLy)INeMvS!8XUl4^M0nN)=5E)>g
z=FA~#Yp=r8y}P`;ylduaRV{@Yevj|=Qu6Xj^Jx2;I<np<SLKD5S;rcq>c9S!*;wxO
z^U|{m2LZrM-#av&X2+XH*%n`k<~kGD=pJ(C=FmF}X;h5?hCi-v;F98<@KRYSPfu;+
zn7@9N{QWzqD6a-R^yq|wo_+xk#)3dcPap4EVJ<V&K*(Ln-h|KoejgUF#WYOL1Gf-L
zvHX5)B(uhiY>@c{5KKqUDh(&9HY=C;EjW@VDe6>`gq>bGC~sf7a|2|q(&kN^dQ+pT
zZ{Atr*=$ut_ZNhT_mgr{7G@wWa%lhrIXk^lvAjOmk+5GQ_JCq9DloyJG{YglWO!m?
zy5I$=(=<7Sv-~Tf%8sAb4VRkEN^@i)#^?cXTdaOBSzRxY>0zyGEUbP-rwkRdc*vTW
z3m!pEpUnGxswK;C;D;JE2mvf&b@Z3uGPG(-K%LDMZt^>043ABJ4^U9VHA!^xEH@h*
zw50M>Be5@gXS6X#s}4aaNLwe4+P;flFNHS9>!iDTH0a5Hq@iqcI8W$B1|=sR%65_j
zevg4>IN|-xYa~g(D@hFQea4Gkk5h!-=R%E|S}TGZO3j(Ij&E@}rSl1;1~qPfXl>sD
z#ex}vv$iC1I_UK&Au+My$SKI4a-S8#++vmz89u;xvDQf~Wy2W158h^}M(+nPTL5gU
zO_>P8fJecP7{pXDxDQBcvg>X*hU8I(c2Ow!CAnGC^t2|G&~n&Z>O^s?T_QT~Oo((Y
z>zE|NWF{Ks1URQ*0F8OFBETVyDra_}X4nZhUKt}%CJ|B*zr1?*_rxJ6M*>d}`6EiX
zgvjN!7a0u=9JZlAPg<(?9zToQE+y`dK}1Xpl$>pazydWlC9eOGn1gp!KApF<;HSB&
z-1@e}tO3!43d)Q;IMr5KTBAjCk{{aN<1q*oT>d?)v|SDI%NMx4NzHHM-0X-n8f>w&
zvIVxQ2CgCPc63q8VcF1wJ4Vaq7kv3a7{8w4o*W9{yp~P;*+sk(7nleuqBegIoI@$J
z(V7R8r=)u^f5ah|(1wy2o3L08Uoldc=qM84{cW!W0VocM@H@J(66L{mZp(AF55LtE
z#Ihax;`uYZGQ2pjS@EVx72!VZbr~eK_bO=(AMqdApV{+G2!xi<qqdZ5t)7rt2#Dn3
zb@7>r03ZiKO@$4UQ(0G|Wvi%!YZ%^YMl`huQ|+Xt`d2_0J{`xVOE$j8A5a5HVK!g+
zSDaxVMuu`x3M#52^4!F?4_ple#B2CHLN)qCN*q)=0lPS$6E7e_y=bhz;AMWkBD+%v
ze{BrSyWwve8ZFu*vIt-4N}n09#8!vB%HLKt8>8K48=F6#PYLl0K~k=C$s0593<k8G
zG#MI60p3ioaL!;HH=G9f>lLHS`&!{-sqvA>E7P%b5+SzPZ(f$6(y!%MyS>pD)J{u=
zB1umMI`3&z=}6^1d@rXr*V{5^yw$CX@N&}80^g0K;-e5mlnmn)z-~cOTAdm<jI-r<
z3;fJT>nGCFzunFBGfkdO|IcbJa9<=(O-8V#7#9?iIsp;e!S2xkJhrtNmI^X@v#E!?
zUY9^y*)<q#tZ8X263UAA;0LoisvZ)D?}w}K5G?IOuEDcx=C|cF{8)Mr>r7;hy|4mq
z)ElI}AN*9eYh!jh;zJf~)HlnRmg&)R-+yV8MTt4o%vM_7b~+WYY;Ax=gfWwR74#DV
z?PyH$D#D^oWD-1ZFO}o&X&N#hN9m8)9AV^jKA1?9Ao7(SjP+M0^!Q^KJ?dtda}r(o
zx<jv$5?016H63ypr3pt)nvl~)(@}2r<REl9k$c9*Fj))7q>;wjG(_fDB&{Q=Q93ik
z+^~#bQUB4%(1eazcyRi$mI)Xm)y-N^!@_+I4a;mf={#$v9+~9tcXB9Dm<ddniCzsx
zyn2b>pJKs3v9cgsb##U*I@7|OaVuy0p0|;Artz!v1aD4VylnsxAcuLSinVM}Ux?>I
z(`zp~ge}h2(A9A2{JAnT7!uB#XC^k`UorY!k16l7kkD63)jtR|*K()HSKYWWl;t2M
zZXg^545?zif%>R8jxzo;3QIyo!X|h5LuTQ`q!5AZ36c^68=Kg%HhzODs>!gAlKQvz
zJ^>=HYWvm*$7I=Y9i?^r1A+5QzA*=UUazvMPH13c#n!&mx<m>OCe$4MrAu8_Yt0JW
z*-D9wsAwVL_Yg6)jo5Or+ck&d1#!M)2Srl@N6x9I?#WkUqu(KTbhUOB>TNf%Nw-n*
z+!~nZ3%S*1bHe^3OmQq@naz?E$aYZV-$t1@5BPDjT*4aUQU+wcOOe>{qoQu#@fm$L
z6$y;=0!zn%>I<jU&!Hyre~r*_oyVx+z*~aRv7hsmh7CvSJ5@K@PEAP}9x-JhZxrD$
z)hLS`7j*sRw^+kC#F$jBeX=E-u+=SF&KgMh-e-@7G5?*apxCBEJ&L~(SgjydAaIT6
zT-P>IGXA5`^*FE#8=}Cc<YQ43FY7r{zA8PXIrmSZ<BX<iM^~?Jnw75!1g9p)W?1l#
zF>tDLN`JzFExxbVRxZUM7-YH8rQqOHW%2R0roipJ1iA@5hF@@OFOurA-2I^&i;`HW
z^yvi`*GQI%f`WLrSD~rvFU<03^x0T7goVwT*4N}5-enxpFG=u>JSYZh9OZb*DunjI
zP&vqCMufPyg=iOhqnJB#n;|i!hpJMtQS<L3Z5(Dn@-_g$Ny$Z79I04fmXp%JnlYC~
zXsKjaQ)+T$DqBUx?0t;o`ZPaSvRj6mrn=hONwXi{;V}(|u4^{|Dez1=5PAs2oTQ-8
zrIX$w-Kov^0{);s&34MMP)W_$PvpLY^t7+{CNvbA6D~i}#SaULDtqwG@j&ink#y=7
zra=pe96p;C@4mjo9VyONIS*4=N?|oeZ@0IXqzSaH>6h@}#4_#WW3@uok<u(+9-q2S
zK0i%|oLtmcKP3HwdbEGn#gt}ka8NdPOhRcIih5XEiSDg`m!2E8cTFMz^(Ui)?Iq5k
z0_PPx4yS{<EZA?gN&nuT6xZ+V_8v1*{ql<_+{@M0AY1)E#?&BS=+>Jv9QJFrX4>76
zWK~I-gy>Ts;V?(>s=G}HWggDo$T_-2)8jK{sNzl6zkC@{Y~I^=7?X0b$;e^;fY~LA
z?sX^O<w|$hxQsMi)O{wsAbonyB-(4%@1B;x(S0EvpYb{|ov}P8Q%55!P&OU8VCez*
zE@#%VeX$;e^v8iA`g6<FQu?Odk{b%UmpMW)R3EP|Ldny+bQqhs$>n@7(!A-%KvvaF
zD5Yj#AASDlro?Q1uYdTtPLsnL0~tZD|IQ<uES1fFgu@wO*fD-w$03MGr}YCUivccN
zrr^d-K}-_8VWY&dB<{aN*y=8|P=1Ui2&xt-6E2il-D4ye*FPiy{0;fxA>(xFSOWBW
zInVdqZl?Ah#!3{JGSA;Sqd;+lV<bVky%`pXT2i=nmbt9hP}oN0=CB|M9D}C7JXxSc
zv2#5l+D7B)(}RX;d!#pEWlnvW%@mA?zQ`MsSUBe8<QPr_N95KCC3O9IU#Lkv$$!&A
zDK(gY#*o6pPcO`@PTTV)&2|4cyBqNK09BAq5zF_Sr=YV?oga8a8MINQoyxFmoqA}^
z=Y2szmF)qG9SAWMPO(wfvl#Dko<Q2_Nnv3hJqnmf>VLE-RKI(JLcl5CjEw|!LFu$v
z{*r!s<et}xsC&BBT4DncN?~w#JUaQJdm}^94fUM*=ZWx_0oaPTl2SxuQy5UHB#WZ`
zVgU)>R9iF5kJ<iQIGy!~V1SI5SuK5IB@H>z9qhQ-LkU9;BO<|hvR!g!hTEVP_C=~k
zQ;h$fRtr+WClZUHk5Ej2#CHggZPs5$;U?6+d}^99_D1j~X=B-)q6SW8ah$VK+s?fF
z?z_UvA>kKWI;?n`{Is7k$;3_=X`RP|VBgDMy$bia(<Gj<!ilp;qV*Oj%39)6jXA@l
z&$K$EJv2rQ5;Cw<YVBw$)L2M1N=CS_-36R6I$UEBVZr*|;{$t-SM$RN=sxXN;c3$e
zeVUKETB^S|N^}A;qJ|Douih=Y${<l}$G`YyLHlC3-(4^Do?6#cZK($(N{Er6L=ftH
zTEVW>w8Kkrd(gQz&SmV;yLip(Bsw7oH20e^+&&NZ9-r}fBAPs>yz)x(;{5!ur1`)P
zQkN=5ftOq3wv)SXJiGW@zgMjUlEysNqGCZ<DJN9Q-X*5Ytqg1XIJ9`Ti;Yf~B5rs)
zcrHUjg0y=wq)i6ZGtZszX46+^1t}jRDpQ>nFX{L$o?wHbFnH<BE*z&Fgjgfxc#vYl
zdI)1NkFB2rPUG_h<TS;V``sp2I+~GEV|(g4bmqCf#kZ%^1R4!uD_iA$4rh((z#n6>
z>6arX*Ha=7Qarx`poHauj?M1mAl6K+Vw|NpS~6OlmT_f8D;)HZUVlVp&zq2e=8t?4
zF;q$>81Q0DU(*Nlo?`sO^7H?qhKf##M%6_n@bMbi@wn}bOU9p%#{L=!g{BfL^<yV+
z<YJz(bvJKBQR{p8w}lCeY61m)Gt)R%N$GR)Tt8+6Wx*Y$(PfPHYE7A1d+7xEn(-Gp
z-@;wM*bo8PMT+mkx^_BG`7U}Otp9y0)>MgKihMTDj&{n|8^_}^bKn4$K5_e56P$(c
zS8}TOHZ6HG7KRIyr|r?|y^#v>3YTC!`u&~uRw~*Rg&rSx>?Q50u4m@YW}O!VoKEOC
zV6aHpZCADd^#bzoaiYI~TC}M;*ZxjpOcG^@;L-}zmR=9*NV{jvlwaSdsn>~XYipU0
z^QULZR5Dca6zcT5?iNHnk*>Z>A+5R|(o`#WsNZjRGsp%kLvsLXJH-culI=gouG}T^
zjlucJhwCzr%yjL|UFzfgEy+w()#m%rDgcR(a+3G%Yaz)xUI&o;h50C+J{Y19h^D{`
zp5e`j-3d_yX){?U;=bXTDVxnKSJiD;NUQhAQCQ$h&Qnq<)X+oQ(t|3K9*ZW=OTc;n
zKj*6O>s`W7gy)wsK->|m&9F}#hsTWX*_e{@BiE{{pAR8Qk}!?XKjYw?l7uABfBC6y
z(hqzuqk=w6lv<dNr4~`(Cqi`l2jLr`8k|6_(}ge6aP1I$a#GU$%BSGN!-+9*o(v5B
z()(lS-wv|eA@6ZUQsSl*i(=1x#{1LHevA#lQsq!m<@)?Q?cU_q!>YQSlK|p_tJQG2
zIc@=L^I`A`-lJ>H>95n7_uQXO>o3Sjs0mFi^w?P4vpwX!`nadZxmIDTTQ5xu(dIFG
zFQeF93{j{pE|kg%4|9uKDJy@97Jw-GGJ|H&TRgTk%IxKMpR1?tpGur6kbA$L>-#-L
z^IkoQ7zB9F13~Ju)+$U)_rY4t$KDKR+~?i$HeqcIuM&!`{na<1qR6i3@Grt`(Cnzq
zBpET&*^8vU&Vg%w4=pFNgK&o!kDYl~?y^P**ZN{<16yb>UjK8U<-S)wOt8XKkk?iZ
z@6C+WVTROMp&OMxi8$}9{w?gMdnxG`viWHutrM(`C|GwIc2{i(u#Lu5J7QLQ1Lis;
z7)@C|G5J109lnw6fygA#2naGEo-b&eQ-;sf**qmcAQgeV-3b%Ph7!<nlV0!r-8v(x
z&ACCx;oXzl@-pJEH4j(P!J$w-VEf8$GDnw5^I3Yn$;wEOGtWg@Mj1E}2u(zS#ODxu
zT02Cj_j{lG#70XZXtX!3yRZ=4gh+NQhUXlc%k1zd{ChC0lsmkRB356If$-Pw#zmwO
z&-eVOt~^4UY?CR5cdq@m4?<wbkZiGBPRQ5(kNMuNsOG8>vO4nbMt@E^{AKl9i2(P0
zFBb(zA$^0yVDK|g@Hz8PL^n=w_{(bqjTIOg)O3(~Qd(ci)o3*ul!g0Nj;yeF#EIvq
zvDu9sj1BlWmovKqDlU5GDY0;YH(?bC5mIH>PX~#&@*I+d!-|-gLUnN}>yR}s>&2WL
zO@fe+Vrf}D5`0kJp<uDBLrN4*s^h=O4m17pk?8&uM-@TBF{WRX*-Gf!Z3*-X(2&YL
zsQl$A<a+!A-bt|yaaoe<H_hK@#HGH!libRA*z@MPeHI;#R`r;OvUQOV`9TFuSktZJ
zxaX>2nDYzGNuqM(=-Y|{jdP)UuAb9&#E@|<$?r_nuo!|QP*`yy2TH0&G!=O*?0bn1
zV(@Lm(do_M00;0fHqGUkYJGdI^QHWRjFk;M+xJ(<PZwO=8xpUM9`;A@?eToy3oRp~
zXq%f{>a=^TGBmip?7I|A^X@QEqsV_Z{$(qn6~JMa$=;g~zae(sb>jvc2ZFDAt0^nD
zd*&{>{>C_Xx-kPT)$Z)BIZvh_5-698ad;Es`@b^9y`R%RtbfGu-tCgjP;_#nof{G1
z?tawK(+I8nk@O!)V&XY2CG)XB+uYiXBY~fRe&62NNn$79yOnI+3SHeDBI*)sKcn!}
zFmRmZ_5B=@MDdyX+gtj_sv*ypFn;mtopUT%Tr#HVT<QYxbuug+2RniWzNPlGnwRr-
zsiBxN6Ue!N1hSQ<DHu%c7eiCX@8_w&it5fXPYH3=M(S}Qe+`LuN&8lP@fObVcvy|E
z(ibyg5VluuNR)w~Pm)Fjv*dVixO5mA@-g78T-I04n4GVpb+F2OP&a3ix%&({lqWLv
z0kzdh3m>}9l?gD6prD}1gt&+_@NI6p@nLFs#`o*yM4ZzabVR<7n5uN%(xCUY*F<4o
zlVyWgV~-=6H{42?uLkAXfr(K9YcT=S3W}CrUIgWi-J?GCuwoKXax%RVm=fe<NJw_p
zLqqxt>FYr6f2P1%V(an9{Q5o`;2{74gC8dMb`|S?xhBFIz4PJW-Lg+S&%_3b8m754
zcgEame*4vOvnv~OUA9e@Pf)+3_m|`)6l^>Ra#pybGSJ}sD8yOfgIS@<$<a0Hn=(H7
z*fCdn?A2s9Io7*<3y1E9OIj{4QNjz~h#UUh(K8lJZ6V&u6ie5oHA<XdwNYlDY`%4W
zy3i6z!+pJ#WJXaE@cw!u!F7A7QUj(MrIzE+=)Bc_-qTjgYoaH+J~BE=K>;-6uWGs0
z!torUJElyzU_!iM@6D<w?B64YkJ|LP>BRRsB>tsgcG%O;t0j}i`s-)VOdk97^NGD-
z-J(QyFTP~VcXN8M*(t(r>6wnP2}ly8*H60)E;sz&GsV|G#&Q@?lz`l|)s=eB+41tq
z?eNJhirY#D$LhAQwtK#~{Y|ja31uoDaj<B5AzrdSo0b{69>rB$vPd`yyYZnoRX02j
zbdP3=68Ur4&lLDjBll_DedpQU#Gu_o%{KR}YQ3(m8%Ey{IW_cr-lZ<c*Sp7=k=)zQ
z!1uR9uyPV+Cpq=sv)(xh6C(7=3W2efNd>tEN3*L6?D@H@tk_zjW^uho*0!p?gQ@R5
z{78xQ(R;&ifd@XRS2%>d!XW8LDpc-#35jU6i(_KUPxVM9sq08_FXx?~_B3N#S=Z{(
z)0`T7n^BYAsEkYPjmb0a$>SyaVRueNzQ4aKI;E24J4SJb#2R<d6%NlneZz+$t-)GJ
z0&KaD7k}c5nyqndts;&#zrsq<eX;^o=MTtKP~0K8)wF7Aq#MS~u!jfHS9L00q=<#P
zYhYo7Fb2M~znqVIXmOKvz_(RI9Poq8fF^HM7NF1Px(b3(yRRXdiQyj7{Yh@cXOKD0
zjoVE>kBJgZVNms3AFu90m1bZ_1jAlw0b=!cf#QSrbY`Bj9!KR~=O$0{KzJs>R1He>
zd@(Spy;emLJl02KN#__qIf)H`x5@q&9Fx?^oYJWHDj5{BTJy%Ef1TU9rJl`Q;0MuM
z#7sw#Op4IT6|E|*$R&bkkz02AZBnLPhdfq%Xs$c^@kJENE9TWzEwkO4#nbVNfNGsw
zJ2iJUW1yoE6J^2^=kZ}8@m>r3S&}7Bf^3ZGrte1qJf0gj_AR_*%;>au&>t<|G98aA
zjHO9Sr0CIG4T&a#6@4ds*K@AB(<u@)z0a!tftCn=*RoaSY<<6M8Z<q^SVuB~vzdI1
zjJ&t{S+c2T9Aw)ko^$t~gk~>pwIe=JEn8--JNMdZu{olE?9@Pjph!@}WQ*E?Jns7i
zizV6+zEmDI|LdVK*Vd!)-5R_BWz5FyD@iZQ1CaGnUoP-!g<`1mxtFeajl|vHTA|NC
zMZ*2f$uLq-4fVWBni>LplSAOV>8;nBVKh$&T1ul`?>HoK(g*B^;SB4Z@j7$rgwlnq
zx~^-HyTiV-ioH9oY@+4mFsDc;KG;JY!*Efm-q+8)@bQmssns_<nXLL}{BYC+Zs2fy
z^D}y&*XFIN*@zZ|?zP()OCHNd+`FvF%8=r*>Slk|k)mrr_dcR3>`#)LSIE)4AeVfF
zdmY1q!q~I8O&dO_w%|ha*7LRs-)#zj=T8Z;zTIbDn=QDT=&|^-I&{=Z@I0s632g=;
zuej}O;<-69O`lo2<>ofCLcnyFQjCDz*Hc>MyUg0kG`o=vtLtk4=E_hgR#*giT!*1w
z99fxq83EpAcZpYz1(ov!v3wNX=Ujp(YTDUecP`{)JLh;5>us)g^5xbv`dYY@A%RES
zLIrf1zFVpKC8g!aJ2+bEt30$Ujz!tC^XmE}-S6zWe!16Fb8p)Xu}|F+Jk4t9-&B9!
zTt_NY;L>#?0rC}iORNYuz={efU}cj4#u)1-!4c<xox$M}{Z~-DVqwVvvXe9aV&BXL
zSwAA*+p<qHsAzUlY43Z_ERXw|)8&%#P}U^E131X>o*wnV&ak{T(<?k`;364RMTiUt
z4n~DSlYO!%DGt<pGBf|lKFWkIkLXmSfylK>-1_(vu5%_LgPB7k%viQyw=6&Kp8sKu
z2lNf>7RNU`XGmI_y<8*&ZbCp}>HJ~cogtTho#5;P;GUC07Rw2b`kQ~`6fZ-rSR0E@
zF`)gt10ymG_)I_A*Cl37(#O#9JxC;RIwrem%!^sk_|GsI;{46ZdzzOU1o-DU#6$(1
zR^tnSGS63VR00fouDyW`X0=EQ`%@Pf8zT5&#Ai*((nLda*|!}$yAF(FC^A>mXh2r_
z>$T)hx$HmGDkXv8v?9<OU_q!5o$IRDau4ciA;ZIxXG?ZJH#L@i$VjW2&oL6whNYu3
zer)<>(#WLH$D_ihm1H^99hYU)EhJ+>Q&)|gc3v2?UKOM8kA+cR==+byAql)nzV}}p
zP&@BUiMV|_FqV+K<+ErAlvR9>2VacyR=rkjIm)!a#HQ~cQTJyj@#$0b{UTDI7+t^7
z&;;e&@TNm2Bd-L(_m`7V(3=sn4XG&bX!2*iQhX=foKKd-4Q)yh#BZ%rU_(Hp!EY~9
z$bkl^0+>c|gJHd3zjw7H;9?y8vT=mWoQYZ>R1|~HaxegC{2l!0#~rxUOdUk%3VW(C
z1_JbQsFUF>t*}>Zl-@E7BOG75(sIsrt;58in-q8`WhOd@W$r%ft~VcL=zcAKbIkR<
zPXQougSaAGHEA!LefnEM(06$~4{Vo=1?eI-;<UJH_!8_~j^|*}*v<0+E>$4s`A7JH
zvca`j2AX7yhQ6m)=K0^7axt^tnn37NEI-5}f{%uL($bP()T%pocVagJ+mr;N^=FB=
zThlIS=DH0^dj1r<ejY8xrL(+)s&s>*h6g6(Y(O&MhX(A;)fGgM*>@|2BJzQK+dLzQ
zs8Gbijt&<v+0Tx6gYtar{hZq_`4-l1hbS~aKP*1|=(Z~^PgkipGbQTg%Xni;z_>wp
z{F-(S!c~u0!u8!s^&ucmNp8^mqlWEj$L5rv_&w;-uqqRgT7xferpTd%3B!2Isjyut
zhHpWMjm4$9iT4nl#Cd>w*|=KBs$$qfJmWWaU8j8Rdx_7}{9>KYvQxuiNJ64IIk?*i
ztlApl$S_5-bu4>Z?n)l{)~Zrnf50Mvc<Ywh+(X7|Yzd)B%IlSzzf2-Sx1(?1QO!6_
zSIuhKuVB@lt;OVg7*MiahjCYqg3T^cU2gZ878`GP34Fg&-nX$E8k|Dh(~L$)RFF3L
z3oBKI;<x!6Z^XHl*S-g7nNbt?Ie3=Tw@PDCKcNUDaEoK{qjd1D2Up+j<B=n1%C48L
zkJhr14_|Lv6vn>-V2G!|BrtCFF{M3ZLv_5zKh%u*CI49PzMa<Zkem~#Tf<VxJ;UFl
zNbo?&QM*?vS^F43_51n0^pHie5N84rsUWL`Di6v(+Sd-&1Hqxcf-4h|7_FdVu<*W4
zX?O@nEP(QYh{m&~TIsJfoY%=P%y7P<;Vq(gRiWK+Y(G0PdrvgaK#L!Twm389#gpM6
zrzCpLeMeN`z%6tpMMeZDsBjcN+%0a7WV>%tsrbK4WPT)nxM#0%eG&J%l<jkod%kk4
zbsDrR`3f#f;F;20G$di4@A%s(0mqre<b6DFuSkeFy=0+Zu=PY~ldC(kdptr@*S-7m
zDJVZcTm`=|T%nz(vTL`6z;=+hHl$qfpG<?~38&g^RM&S<m$U2Mv1>(;CvV~DJVI(9
zDR_hQ#hDh*lhw)rW%51Fs#gdbmrhy;46ViLOM7d#=U3qga-QIy)oxx&!^YwFNxRqG
z&}ng~)o~kOyFOdY9U02?K_ojaXdtQ+P)4Af-qBl;UFv}Klwb0b=i7r|WGM3rTa1#i
z*QySpZiN(oJnw;B2U6wcy+uBZKYY5UIdHsA%dVHHE`-aM)E>qdFC3X$d~ogu0)x$~
zJF|eqn=BXd@7vZ~D+N{k?uT9v?e=EYZx@~J4J*P~!SgPI9GlluB!JzxUXi`9i!Ok)
zE)6F3h@4v^p`70fQ4IrrR=*{$G|n(_rDi>1c~muUoFn$qvs)rI$LhrB`p)yP%^|Ax
zrq;_ZYOx7=V4iul@*z<nI*cXGTE|}0;EsSsIP%?Tou!0eHxOFF<ALrc-jn#HI%Pa1
zPaPq=Dy*@;5u?Vj7@fbBwKJO-RlVsTl7d?XwA!hKKCA8VLk)+Q24MgJscrk%g8^4*
z&fTOy{a$(r(R@pX#Qsjx>IE3MXM>sfGY$i#tcPyS(7Wuq_ifmStzV-UHoXpG1E{g8
zzJcB=8*3V5-eAY<RD*5D8D8M$)+8-P%0nuAZ4t`pp|eQ?KU`uHc8Cex7cjXbHWq(^
zN)a<s>)AOFdxcyyi*S07tFVAU%z}*j`|8^qc+1M9;BO(6%62q~o`UI5FP>(JM+-?Z
ztK|&Z7x2+u;Dq!ky)UpxedHk5H#~WFW4Jxqi|6?!mbzSfC9Yv754;m%CbnH-6K>zk
z-Z$h4=lX6x6D|4aaM>D5S8SIb;nql$>;|HR=*@hANHNn(HOKqj@#2^sEuSMB&%O;I
zG}#!J98yZ&4ZdD({VR&+aoNG{^GVrHw8}?iRKc>IL<QboO-#4AJ9-hOUE*QdYH^am
z+D=I(fi_EqD0vx1(6QyDRO~iZS@5}j&p<765wu5I_{`yT7O%q7_DMaBX#U@ku(_^-
zU&_(SRVh1Bv<`z=19EDyudlE7iZjKJck$45x}J}DWUXS=Ljetn2=xO@9+M+lWLUaR
z$*+%Z2hZo9cCQf4voC8JDD0cF6fX5}u6ySz;{5UE9+Ty`@L_WQt4#WY)5{@Y0y05G
zflrDLnZWN6IU54kOA4<^1aU(j2ifkcBpwA+`EOeNCgo6kw=8J~&q-NA&-b0!Zi{p@
zv{`b*!F?A@Axm9RQFU3?zCz@g>_i1_EW6>4+j3hb1^VzT--R**L4H6I+Vcm3fnXXD
zfN4ejIqZ2dn@4|w|KP7Eq}+}MKGX?hv%rm+8x%lUiQe4h5aSJNn){0Re7GzSIz6`Q
z%}sqWFzJ_~v?zX1kTFv&lB#`}Y>GXGP`O`UxHTJAdH4)}Z(%h@=2PrdPjY&zvf0El
zmNM1p5ac*Gi&HIOQWwr(fCkE{TE+Li6hI6ZBT89NU&*acs=Uas3pl#3_>Lo*hCO|j
z%h`f@j`uzjPR&b|A~?_H3tt-2OaC~BF2kk|2PD*Py0T6ZxY;B6lCMrVT>2P*+9~Vp
zs6>DF$2a=GV+Z>db^6<F>B;cH6vwUKV#hR^ShpI;b77N~$O^FVLqf$subFQ;X8SZA
z3qi+e`#o5%;Pb^KjuLzallrAdM^9r=kpcfa6|gkw?5#$4;S&KWxjl&D?iU?=?a1mB
zygTa|BIxYjZe@P%hmSj?X4=I+wLBlAFxv5}I<tyqW&6;~RSx@*Q@96~aw~r~p8tI&
zov5K2gv=Dj$SS7zGo(QS5p_mIo=@9vh(>m^3!L0pt;tNN3;~d7a2$>MUPFjsK#46M
zs09ihL3P1024+aa|7t@3;{0bO!5hkh@F+lblCRVIf~LCTH7m>gT+?Zo1p3&UmI}58
zg#{W~1lLe+4x8=6aN`#q6-F%oJvq!H%$%(|#k~&3&k<2Kd8Y4C(4{Y%`Dw!lILyN(
zV_B>SeEaB6r?U?=UzQt{5(6@1OfR$`tRw<#b*WgwulF-AN?#TxvJKHtkPqt<q{86g
z1>RmOn2Ar3d{T#!lF)qzfnqZ9#|_9;0>wVLy&g|*4|?j{EZ+C}iq$kh^}$Bf{eAt$
zAHLvlm?r$s51ZhT4E}-#o%p^}j-0)P5y^()$3O3669oo8-0yXcx_MN4*%{(<I^E{w
zVA3&jRqP4AKQlk)K%1(!@Y#ihz;BonH}U0{Od8bev8?!+7~4m}h32Z!`F&r|YTavU
zzY-5_2w`Qnw#_Mrvm(9R(fFb!?8T(jYzH}4&!2o!^(J5%41adKIjQvR8w0~4Y{#P6
zZ>hY6Zdxq=UkvH7{BO0=dP<#LvUyfIWo%r&1`d}Gb^T!{S8~|H@H2KHaO@jO<xnq7
z%-&fJEIHk)7ILNOA5-#CFI&7fw=6WKm*Y8f6{v&rF>lC@2HJVnHz*u2NfGwlr+A$)
z6~l*!X~O``t5xyzBgg7=`NNaco;~(-kUo$bygI%q_QUbTockC+!9|-cL3>L#TY45C
zmRCPWI3cNQr^WUeauRqr(DQ!5yu`kMe!phTIN0WHfSy}=7PgncVIO#kSX|0Pg2L|g
zTE!++j+Yn{-EK_sdE$j^ZiTSJ=Al5-+mHUyNigIChT0H~VL&rgP<4VwK9J|>FcKJJ
zWW*`Kzgg3&%&(_Oy(gKrzRvLD0&d&^1C4;BB7U;Qu;j=J2KEaNhrjio<ilG-tQ~6i
zS6jGhTuA=0p(a|w2)w(RBkCVx5)Xv!!!sDxTSvjAtwGR&EHGRW`l_uQVw67dxh^A&
zQWrCt`s}WsN0S>bL|*5;vp=NWb&hsa)k12*K>Ez%P;sC{?f)n=SLqDEC%*<65fqNU
zWyH`DorqHpp(*eej7eN<v<KFXOdn>Y)vm|EZjlFU9q9Y1Km}i<dkqR9Sbx0TD?=65
zR>WnLz8RxfK!BYxz@t(5eIA{9c`>m4+^m^iOc}ubnPPC4{Owp(%*cEHg!R#su_D`R
z`nUg5u10f_OzLRogFxsTMM6HeMv$_YF$yu#Mr(O>iqp1FU--15`|)<fXeT=RvB{Wf
z7<#w>l(S1!`G;xuzR7W^@ucd0fph9cos(-->O!4QAtVlt<@M;Kz98wRH|LAHH0uv6
z%UHGd=)CyAHpag76ES6zR9$?t-nrxp-<z`s=Do#g*Sb!6yq9o~E{0qt#z~{8j^R@D
zQ_ve+a>7fE-FVp>E{<EC*KoAm3I-}etSgtYB@1zB{z{&jE}d5XgASQb>zS}2@jbum
zUAC-u{HjM)?B!L3!#44r;@vQ}^C79Cx)n5rp0KAtBZ|xt(K!%7_pSU_b)Bt~J_gi-
zaOQ?Zpa3lyAID6*7z`yw=zINyi$JHvH2wvj3a@!J1$|3nJiV^hS7VzTH6Bs|KcsW{
zNk1(WV#>X=nmA8vzpcjWJ`SQ%x;R5|O-kwA&Gg4E=5@Q`0Lw(gH6#pr&2C9$Lp;fL
zq?_@zCnoPE3R~!$-@(GR8Oj}!Hf9#bb|XiOoxO3tiYuDH9#ASU1BiC&@qKdL!rpB=
zS9tCR|2aRoHb|YPq!A=cuT|pL{UKj|8fLGsM;Qzk**whF-jK`$JvjU<hd+le9>U~U
z4nRh*zhPG$z97OH?)c4)8mR>!vaCf8MCjO`NDl;_O*0a^tAa{m!#k$29-(R0x)fIp
z&a(>IR0Og3qef!sdx=r{vZA~|oQ4ua)RXvC8u82GP-~eo(nzl%kGGJqIvN?1*2>fk
zr<?aUpc3lAlk9lQ7$!ZQK5`VnQL2)cx)5ooz}$Eo{XyLH*-VOeTs1b>aD7-e-QWBW
zRNig5t)xbH=#(Pzr&;V{QO@OWH?G@aBsxFfb;pk5e7bMfH#kf^b6p%YN6(&xLj;eg
zK)?*N4GFNkn9Z9IZmftQXg?B^k2NojP48F^!@jQZ=#k>WK@NL%++md{8pMXN?#FyL
z9{Jc)-yB}^FT0<EF8}7h5Xr~K{>X$;Jn0YVO&5<(J3{W+DPOx`*Cw1XNd(~HR#)>!
zsJd-&Uk_h3p|G&U+MR^0`PfZO{3>mRQ(7!0;*m0BfCJTr8H2FQZc7t#ER)v|GBR?k
z2A6;BROxlP?Hx5qq&7~e@czZ!=$4zk*epW=R$fE9#V|ApkbvkO4j_=w()waI9oK4j
zJ2aQt!XFcj`H}Sw@Va)c*kMFUiSM0qaW3=?xPdol5oCiuYdgi)U2?o9-R`ef=EII5
za4vC}%m^d&0~0@gbt65hvCVrUq9AzPsN_OMEa$67_{z!)=Hyjn;vlqD8OlOw6Q~OA
zojT73?CBzMF&=HOh8s(qU{h8>H5s_}pA#A@h>e=%GaBRAYcCNJn}T?FOV#sJJL7K?
zs%yYh{(9ppr}GeRtFxL|!W;Ni;I{A5n9kSwSf^2K-<aii_$|l^38U@OFg<n!WhFiL
zGae_{mzP`7MBFf7Oe0dEuySJ-Wog54#L*SpM)syniDKB0raazcZKwfP6mWt%5w|u&
zl*RoUUIdY^-}=yIq`^+Ni5D!EAy5d2ja+fdHhyF4${KtkaTuwLmHND=gW$qKG}hkF
zV)2TIQ5${<GY`EdIFPK48-{9XHz#2<7(Iv0JTrS|as6lDH)JHa_c(7U4J+;I-D3Cg
zQz$A73$fzuraTVPukt|PFS;}ztlqqj-;wqp^)onnxmKH;vCm65x+=S=xm`UpsOl`)
zLi5ND)jz__d#dR4y*Ei~8e!7dN2N~s(t4O6db$Fi7mEqnX3cy;XA+oY;cL8hz69!t
zFN<*MPHJt>&DpY@a_RZ+=%SNorTg6*xKZ2r{+Sz8x`Xc@PyVLf%jrvcA1F1aX1s#T
zShG@m?p2T@Kxr?Y8J@fY%<ZIFZ+i%%BGJcC|BNBUJDOSZym1xAE%fBkNSFxO_L>zp
zckFLzAP7K!L)bA_G$+{bx-pgeoW)m;Vu6`M_>zEf8xQ<_VrrnKjpZrWa7nIw3N#Tm
z;Q1b)+WEXBOpVxgd*okQk6d1!&}0ti)o5nN!^;pi1Xl^eG3GsQN6U?aO0Av*T3#YA
zmAEVD$}(4MxI8+d+IT`C@r%yB;uAs;`39q+P)(gz!+WL(tw*@|S2ET3#=|lN`c5+H
zy;i;VHi$_-X8x4VYB>;c61rpM&dy^=K_RPJxG-9&1J24}b$z^3H9{Y)RL1@SXw|-?
z`=@)3v&)AL2OCKG_jq~FUyZ$$??4S0qHW{wmgg+9L<;sHTQtJML{6R~$D)QB^tKjH
z5XO4G>M#<U1?oXFc6+HGccA-o);#f9m&uS_^KW1Fm1AsO;INp!X9>89#kFs+OE3mU
zfsZfMPJk$VVFL-7s0N`$bI0kz<3YbUz%!yC3{75xh>`tnW>)2L(HLfjJ>)?i6pBm;
zQcY{USaqlOQmpd!<3j8=8VtBR8$>S#ll!!3sWsz%y9s%Y$F(N)m^Qg;<M3#8_E+aA
zrf=+KrkX5Qua<`+1uq2Nb|@C`U^ewOVYxoft!-1|0h9hKRO#<KxheU!Cj3!|-4T5l
z=1|3p8DM8?es51QHiru$9EM~n`C=|8gwE2F`Yi9y%T(w7Wuq6}3Slzmkz1YA;BEJc
zA?4PfeTgXZzwsN%!=AQmrG3kOq^m<=XsP249%eSoPod&=Rckj_DGlt4JIM1RqS8`f
z8Qv1|f3q~y-Bi07deCok!Qmxe|7M7CW>}$kGZ-;&88zhVbWY&i{LYFtncK8QZBQ!A
zSXNwK<6NI5&tt&K&<eNv8R?$dZU_)8j%1x>B#FYo!y^kLU>8NiajDVq94N9v=X;8*
z-d&Hdw-Any%HC>?Dt8y#XvoGt)hF$_7qK~n*-z0HKNPPY>bc3xhupUqyrOtqFwgRC
zEoZ|t){kFcxvAZpCH)gASYak8dGK}Mms~=GFOZehM8{N%u<fX0F36t=VR5Zh2^m0w
z&#T|)M1fR(-1jn$BKv+*^ZVgWJy$X|M+b$rl*w9J)B=Aa-xvv=e@n|vd^ayKvXlIf
zFBn1z`gTM|>Y{@PYAnsla{8^<u~+lVkbom=UedgAnh!fuXyZdog`=v8|9z=Iu|#@t
zy$50XKGweKM0lf<)NFgTKrF8enei>>W!8ZrF;KQM{c%1gww~L1gX5}v!??oElV-SU
z$d4CI780E5N_-@bL&u*pz6iP~*HC9tFhN6GXVLmD=l%VK2$u?-Ms=Xb<n-9LNc^zH
zYHXa38p9A3%G)dS8tK+*P~RAk@43(CrDx>u<5z2jL?fa3*sBEQSY~me1}?`Ux}-vD
zI@JTrkC-2qQ8F%bs`)PvTn%#%a&1u*;7>g*-UbZFRqgh8P{4?b(!1*{dfRrl@u|(S
zlAK?9SznWJ*pAtOfnT$ZTTZ4YWJpk^ulhJDvfqD%UQII*{4slwO@AM9uY=avYG*R*
zrU|+URVo-9ZcDB&Qc2a*umDI@L9v}@6Y9YU!V&+Wjcybi<grdE&wyb20%gpymF2wC
zAoqJ+38!>WRsT{xAv3%Od!AIj#u^WV6V!m9w7Z@An>yd1NhMH4<Y|1$nFY;T<o2+4
z6uxa=)Az3Yglp8akigJzE3T^F`u4dHm3+?ejQd2|I$2tJoQpc^*ViE6Xg@jo0AYd5
zH!t?mrJW|hfVYq)6<l0qAv4hiZG~Cajhm;{DN!FitDb>{A{ne)_^*!Ho;E>mSZb5l
zxZA$fRsHY?%ndPcRCn<TD(!#r42UwueHIFI20V+7zo#@3XB)z(;NidFd%fwuV`mK2
zB@zyJu3=@iv69=W=+FFW+c4H!BO0E%pV#y(|6+5jrlPmDmN?c|8s9upR+0<8+De3u
zl`_9OKsNg)HqDvi7IewRk$gk5!6PCH@1cfPn_FSQtTH9-kg@b`Zk^JKW+=ul7V4yo
zI-=B!guVJzrQ&2Tm7_Fetx`LbUxiH!uE5Cfqd^`*s}Z8mRrr2WdSJZgd-X_?kVvT4
zTV*D?C2t$*xjoKWTho5)#WZ|m%x&+(@`5gomfB`OhijR7=YUZ7`|DA>^gL!-ZCMO8
zM8TpP(nSRcnGWAfT#_M+i(Rydl>OXgi3^`g1{d<e<(O~em@KSY3`TFvm;>1n;;VSW
ztYJ+8G6(a0#}P_TFhXLZIP|Q2dFSD|#XO<i0740sEnR16#@vFI0Ug>)W4eW{7>Tt{
z(T}4t9{VmEOyib|FfNWgYTCksVzoGp67Mu5s!kd$)euj4J9--z>Es9ySm(n`F6M%^
zAn?ZRI7o&F_~@SkIS(fzM%K9~ky&e~lIqWg`*CZ;*HMNCz^A^+X@d1u{|H#bz5_#X
z2ej81mvPBdJiC_fh`bj5Ek)f@#c%I`LYII(NJe2O^PBexFB5&K@W|lBrgWznVBapf
zO%$-_1&S=k*}1Qxx(%QH+<X-Jq8s!`Rbf4Cp?_KPs{YO{8>YbvDj1@?N%*&MIn-pn
ze6W;%GYLW!i~WO0TXB)2y8o#>ehh{Wln8!lcXsmLA&g3fqWT}{lq>GvatRsitPs;}
z&aB^(LmVol+yid$O~WZVYu9{6CE3cYQ&*thdkJ<ViX}4%IAN|}J6ux37g_Ju6#E~(
zY*lxnK~+RAiB8pPo!&H^fI+m8kl^PuGpmoKR@6vD;_!}hY$JBdq|h#!3=1wBpe&`p
zu>Kmb(}jJvUJ>WkKs4U7#cOfuvUM({bCr1hqe#@oWtuHDB+Cd#TsVNoZXiUl6rp|W
zsAqTxwbT7NW9_sPy(n#^B><cN3^A-3OHbfMDR~?4rkEPzSjdZ2_4gN*@$9c`UivBz
zI6Q6Gmw!v4!=q_AQ*JXNN@}{k&qTXzzIX@hWz|o{^&t|#ueMK=hYs+%(oT(KBfN&6
z@PCHhR(IbA;rq{Meg>&wO$eiQY)oX7XRTUuugP_YQe5;p4V`h6nTxaJWZVxoi9^M*
za~Karfq`EaNh69}(Vw~6)W9^bLs(_5Hve!+U`*{rC6JG>f=3SD;lItP7z7+&;Yx2+
zbhpZ#V=H;^o{~m=2?B;UG6C9J)mNEt2mRr&UdcWe(7#R_7YT94`IhGI^_<sBHk<?v
ze$r~TNk3pHK|!R~$EXJWc)(VMf=-dqs438!POH1B4;@gUAVKVJ^ke%mSSV*SIYsc(
zrfr$E!mVQnV-iW=Q5F@INBgI|pv}@d^5v9FRbFNYm^}sV*NMEOI5@bP@3RpF4{rpg
z{c<Y4@S{R~*q9=|;rR%>NoqFK5A>8cgQ7%U?+!-8$mjvlXd*2iBD&zI2Na7!mU^u0
zdk8<mZd=YFX%?-=-J~0}y#{}FDtj}MGCB0|@2Q`AUuUO$#=}Y&KtGbXcKnENtRaRn
z8zaju%71TpIZrY+G$FuD`I%Fg@q52yS#Svorxrn(&K9^`biEZuG-|hmocOE4GIQUe
zX1CUS^89+)yn1vhU*dOxF%d9-U4d*hQw1YtiT(4%Dg>~~1*qV0!W;w&x(;PT>19&r
zh0Bvv7}6{d-x*|yBpFMoMj|VV^TyCBlT)ZKjPdKI%}$d3Cr3xww=#GfiH*K)cl<$N
zJLm1%MR4a*bzSvp{l!gdxc<3!vM1OKky!7L>Iq!(U^&dSIiKNC%^L+3g9bV`dd7bF
z;Y2XmHqYAjf3nJik_}J@6gWs<F1m9MvS~uTcu^P3Q7|WXja1sBPUT6jNb<0OnXSlh
zRJ_yZ*|tmvLZMY~tDchGYBhMx8+mRGV0GY~r$;E>aWrl67+$_M7(Mym`1KaeKz@6a
zcMwm=%F=ndq8j4N`8IYQaZS^*W=c#MI(@iU9lK!-@Z}fYqAO>*jd7H^X{q<HZjLqZ
zwH%XwiNB}DDbGj-MUs!@zb1CO;a5fEdG+wTo98gOJEpxLUojZi`6C298iJ*p-=c!M
zZUr#sW!c+lF3#@^rNm8IDn{Kd=<ykgS8|VuFNozAPINba`wY{q$h4YWkQMmcH4*x2
zZOX|<-8YG-Y=q(y0MkX_WRvkjnWR^}t<zN43JKZePek+Pr3F!IU^>a$mBk6MX~IgH
zlbs}mt*lN>=%u%C9Zu(jHMPG}lU&9fo@WJT6F|>6YN{-VlU{YmM*!L1<r~xtG*YuG
z#1H0{SxHDqb-eCQi&G69&NODl<y-(uY@MC2FO#{~hsFvc=j|88!2`cY(;G5ezMsoA
zY*A%p;eoH1j;4+ZJ`T8}4ePocRYz0~(a`MJjhk!~E?z3n6C|Ede!de5d;dY-p|ehK
zjX=@y*yk(f_k4sU*G~d;Ex}DDDgyb}e*u{1YC&j`flUN+!n`olTyWhEPmQt1{lE6!
zB0SD#*Bdl5#CA+EGcz;Aj4?Aq%rP@_%*@Qp%*@Qpj4`vPbMN`i-{;<$-7ID?z37FW
ze&4QANve`c($9kas)f{b6#54;DN|fWhW+)j?Fj{$>yAqK&`CJX9wJ+~5&NG<15L9$
znf(N6HPTCIcj<QiX(1#VmNDRU2!;8$lj`3jU3&$!LI_+4j>tN?`Vr~f<|yY}!;6oN
z#irWf$;>+iKYr|1Y`^>1$A&?9<t3(X$A@h66v(Dh97=OxQTe53k>2KEJDp9-6$hX*
zkkrMugcv8%P6%pd{i(jpbmm!{`;wI?!Z@dhMBSzRO~cPgYxz+UvDrkz9_}8FpI%1w
z#I>`-#6q^36L&lTMV3>c!h7{6V~)&+!^Znl;^rP87by{mZ4HKP$cf)fv3{HG54PvV
zGNaLmy~|5^qK}t#QyOhxUvWXkxz0DwYSyTeC#&0G)$D9bl58!v<)&;oO#KhG^LpW|
zY^bFDiogNu2Im6ZZG8UeEy^6BHPJ(E<cFQA7Yh#d-_uO2qmP}G`@_c?d&PY2UTqIO
zoAJKmQx0;L!^1>u&7r{((VGPmSFVl(MS(?m4z^I0LSY`;1xxGncx-FVrJ9b%{T)ba
zD%f}G>`_NdZO<nfNo_)hYLFO(a$2p%L*<R(ecA-D*%A9?1?;jXACe#`aTuT~(Mo*{
z?~NxB0<Wf-D0>XlEe9u5aZM?gJ&lQUIs~%Z?=f}enH3N*4uwDe3IQ32A>m4(p3{E3
zx&5MjVH`p`J!Q^?qqSMLu<u?ThFXhZ#O<boSM%itmsad`NxUbDmm6<P^v^`>&~c@Y
z_)xlLnA8D;YvsYI>dk`Ji*`|HW>BYMS*u0i4EG&ywJP1{Lk>$-%IwBWauY-@)Q1rV
z+cQ3&yYCf$_-!Zpk-iZ&CUl8A{`e!}kR%wA)SX{&Z8HL>Q!lx2M?p5oH>uRBj<#%0
zv){3~KD9=O=nK9xJX#o63*HS6lsR~!9sLquqX)>QPUbQR9Lso1WE@>SRo?ZSbzQt}
z1cnPbtVJlMQ1|?RcfT_x`j~R`gSCfqTJx+WCLuB7B9tjR{EeDyd*7_$TYcmMPdYfV
zdf8TL^AyI{AYQ^7iOD1%qwvyG?@61)RTRpM&z?!}9bNn_9jC8<P@)nSC%>qw%j7Z@
zg4jG)70mq${f&EOYWa4LP>`ai3loGCZIy+{Ak&NQRoXXt<H)EEhNL)suY!pX;2DDK
zXFBi*_HTWU*1IFIz<;x<6KI}CTSptXB){$49dYn0mrwjK;0+>I@l_4#Atewd!Bf#;
z5)?5&;a{Ol@|jGBn1uJdVESNReRd^UgK;`pQ{c^D{sE{d%2`f+t~xu+@Kd7q_w^N|
zCy3^ygnRC~3%bjWc45SbtZL}4ah~p^|EiO9L8mos#<LHkx|+owNQ!hkFyP<Y<zC@_
zwM`uFi6JPfKQX+xH>^V#@2+K(W9<&8y<H^&(U?lu-65>nK31gmor(tatEKz~$raEY
zgzFbSgRE74fN~G|P0dL{(%1gW3#=hrRLEsp-t%+)G+xJIicq|KzBR=UB{3S`Y~GY2
zl*J8?hi*^QMW1)&bC*6gG+Iq+S>C%Gupm+c8}JefTwlo$WU?H^+1Hm#%oO(HAm~Be
z`j4XQ!k;U}=ewn=TS>v}W@`MW?9H+g!7=-z2R^*xJ`be@^)7Zs%UcS{A#RR__TmHI
z?Q<JKgRgY+C*ydVPS0fG9Ci@4?bkDMXpL~FF$dow{IU<nDIeFwmAJ@o5Y4fOORI_;
z-hwsuUhq8qTUSi4yCLz0fgy3jUSPZW0t_~`o>b@Mf3Ai5f|yiNC#1f4kGV-ma7p`L
z{931UxroE$V}%$qbSHjBW!+>BAH;z^oUVEq8doE@?EFAt#&PUUx`<0%L5LgRyV}aF
z(Ldgd`Uz&BQ(<M>{d71Y%lA=GOfNlP(9Af~I>cqoO@y^rIm<8?UaOO^AvqIVb%mjp
z98c8WzjTh--6r}iy5z3RmhaqS+OCJP+DZ{`x5;edF4CmZ$qG!J26U%@gV?dH;@E_D
z6M~-TDG5biNS$I}`a|XSOF0Qf53|?1pmp?;fH?Ef$)9Y<%jlXIYAJiae1jljxIpok
zde`c)l&2sG_zN5^^*0YYc`3qKbuPA$FQbE3fbHpYTC=u-Iqu~-^^)I^Df_Zj6Y@=r
z9`iXAYMw}?oE^wXO1g_Q9JYJtwN#b+<5iN;bjAc31&c-)+^C)rJ%!>u%AU;oi(_A(
z@Av6fK%xKaO@5LpjXJwV_^S-}HoHf7QwsC~pe~eRQOhabUg}i)RHlct66a~CLDHC=
zg(Q1GM^m#-nGedZ+Kc|BvTx81=*FWHv_gTN0JeXxvH^IRkH@Xu0qWO&I+rq2Tp|}7
zlqt0krSh*JT#qIT+Q|Vn3B_aLPIzV$d*P?0UD?=5(oT4#Y1|dIwcEn_8G=IN4lik}
z(C~2iXF-axY$ou4d_bKUT$2Q!2=CLQ^wPe=eS`Qybz7UJw)?SCy|rZjNP<Rv5OZZ-
zoD9p3;p-!Gm7nTv{^S@F60PZF=Ot}fpnU@Pjfr?6LI^!Q!eW1c*bKLG)Q+H}rUkL`
zEXvk(s~p*bAvYi;Chl+F4@_=nK8mqPe`&E%Q#sLY2&>&^YL3$~Cd2NY;_F8g*;45*
z$4vQ%=dlKgzI`FAr$Q+*EqW(nW#hiOogMAByGhnPuq#3IU##`jb#&W?g1@N6)_*7M
z>ezdK5g8?b#3OdQXf8~1-uZL=?p8U9s-j(L6xz#PRqtcOyr0~uo4qTsVUJ5Z!mURD
zeh5Z2?X^Q9*l9ZNWYiuTo5Qd%?ni7>v1e?eWFWZ2hZ*UJ=d{6shJ}cG{&g{+_td%#
zo?^9krd`yl$PWEPpE}`aZy@y|$|!0M1+l<jU{wf#LoUP9l^gBipa>?vSjdt+YFL^d
zQ<?5V^juPkdm+<o_b|h*VB`0o>bJ;-k;{|0dKzYw9{$l?#Z>PZ`4zeN^3AXs<};0y
zwlkYS(X4&)rHDw&au(v<uB)fL;lE|@ZJ=L6AV9+h#dIeiY}mH91Vo3z*))knac!EA
zQ7h_f`bp^MbP|NVwsLVBM6o9^w<*pLPYH@%^sSU@=wR}=ex1XB8106{$=YZ3{{zU~
z$;#za3QV`-AZ7QOR~w0y;S_3j#r|#2=^z2RJq`?E_zPR4tRgW)>7b^$UZmNxPulkV
z=}>%=x4qqF$h|7<=?UC+^9}LXgEpf+5LL{YAoY*`m?*nNY>hHqPvu3}GVL2E4jujL
zn@ar2Z!c_ZGGd2maV;SwIx~shjZz$76Xg9d;~Krt0sa=fqd~P^nZ#zh!%^5tzI_Se
zuP7&pdv&uiflj$U=i$kOhSL){)XwHhgC0B<CCe}7=AvJq7{<~V%GEKMS}p>I-`{L^
zpa+HIzn+$(ZyG(`ui`Ouw_^>=&lS^wJ9dc6jjT6Iay^|dR_?=3{XtsPIqy$2y$xb`
z_HEuA(Mr<n`135;LHD9{ci!2U<}^``L52{&?zk@ez~u@^LuW=ir&t?{+$>$aoe5()
z%Uy3NI7K)T#c^qJ|9Fd34fsI4us^Lxq*#-r>m+qMW0=yUlu>+AYjY0SAR1?AawD4m
z)dNkBUS!qsgut<TtKeY494Z=?k(NfhsOgdK{&Y7Pm1g2g0kdgF7brqv%E<~!O+%y9
z*jVsk501w7ej6QO2YYZhFDHMvaJ7v-3<#xCYWfqSECNbT6z3!q&5&UO<6;JKBRSM)
zoA<nQ<<f*Pce?)kJefPT{Udys8-Ax4&)SlAm_ea6!!>fL&=Ko)>G6eYHu6u2D5Ge?
zrMsAz@nkZUEYDN0y@;n7;?AZs4@tp!&@!kwASuL_T=9!E4rYK|99f3DNN4L|{5M2{
z!H8IZxCmsp9B{atRR;kI*_{ymv<>Xt?8t-wO*Lq)x=l4@cK$5oA`XAhV$i<5Jls@}
zek1G^?|Of^BwAj&jS$gE`-R08VW=Bcalhn-C)XJG4i`+YlEF|5Zl)G*gmf~B+O21z
zL+bVV9{#&{d=ED_^sIJr!_{l0?)Vyz#^zUquBW@6r>#Snle5<aiZCU>MMEPUQX<|A
zmkQ2Vdg93hgaRyzEDg~zrP*c}@^uegu-&rW(9eZH?{bX;o+`Xp5Rt7fuIUes0`Iq&
zj;kH2>*=6NC`f2z%h&?aHk7w)^7PVFBGC<+-YMSnE^#%~cmLFLCd!d%CAKh92Cj!S
zCWd0H62BtrR(lBL76*^#<io$^qY^K3R&qa>PXxG-hQ{TTWKP0h2*^VHAaM39XDvSB
zdU&s|-k#eN=rjmSO>wG&r<6GD#pY*{`w_L<7`GkHnO0#z^|yF#!W6bFkNGVOQ>aRn
zjk>o*p_S87_)WNSGH||v4mceBM76uWJZp{;+=QRD^8ICECfZ;oU(Sh!R<3e4i&fpd
z!GHG1<9yZqjSWa-TB?@o3j1RX#kL<c5pc8P88K`}+5ycf0j_|AJfjQ&hwUBm1XR?X
z?=spmCpjun@AYR*FUWbp*2ie;pv<1VhqY(3O3!5Iym38`>abJx1$3;B@a|C+f{WiZ
z1g0Ct6;MuFo#dDl;gN^b=g&720v<)peRY+J47d|wsl0Zj8f5Uc5AuO^RlGD(54>lW
z{m#hPGBhoUOBl&_kDs>zD1ryhK2f7&m3TesZQNfmuZ;6USlcAy)235vk?N#U>RQqn
zDiZ!KGW`B>4p}_LpB?R?s)}*OxM2FHsKTGH^cnBZo-@aN#t*qgnT0yckUKT#OEYv$
zXO;><dJ$!3^j>nUt);ng4L(a1P>3_qL``>}Mjbou+_{@Tq(wj$<vadpB5gw4oZ-6U
zfbJmoT6S4jOdJ2x(eC8FKT4#ZV($++rX_8gCz6`Q47Z`YNWN&J(S+k9aiQ1ybNRaV
zhtowBQ^;931V;<muvl0p-h1~$;r~*C^XB0#<H$cFZ@akD@gm5-n2t#ZcCKdf?M&X1
z39mW0_{c^yvz<@Jow6z%Dy80cs8IUd4BHlvkFYvmxt(Y<o-5bfHbHF<i&lwwd1X#Z
zV_o9n7e)2K!}%6sAw03gZktO9i4WlVvS_$H!Q|P#H^I8D`;3W*xVAvO$FeVeO`^MD
z+VsKV<9Qw0Wi;C>C+AC!j4|6Urbx%R!=2B?V65VkkS*F`W{sNmi;zvPjGi`z@);LM
z2DF}&sWNk0@~)T^SJam$Yd)QLnTu80>}Yq$F-*D|8iJyKe>t5r6iVso=w^q*GpP1%
zrR}^PF(;Kc7mX_h?zere7O@aJJ6Zlib5p?4Vu0x?=-R7e>EqxaMow0fM+<y?sKd0E
zrw}yyn}o@MBoUUXUi>(CHZc5GdvM5}G}|Txpm-_oY^Jl)xX`H2t_6S7DYN}{P;gcQ
zg`@>SM}f7#=*UxpS|mDwVNUdB>}B<ONW8i`t}glT_CV~pYcq<#kJ*iP_Spv**2lx2
zi(QoqPKX07L)&HFAvie^Bomk3_HajO9azmZnQ?_|4t4CE2>4n0^tajzlP990A`v%u
zeZfY%n?N~5H|C@_B$f;(THX8Q$mlQE;%~M$t+uvSAg5zh%e4Yohw@7EMJaa^eGh;Z
z3@@inCfqv`uectsrpa7xzvt>O2H2aQ`cLA|<;7$e8E2}2_wc3tHbeFgd{_G#GnCjK
zySvZp+f6-^LUfj(f?!P3TZUD1+`+g~i1x2XX%}ph9>*fxqW%nCwqjyY)LOP+^4(Z+
z=uGQUo+Ku=uW=y#+M6n`x-h=liZ-KTdFP&7DiBAw#d({Bq1vNF9#vP>B-P4J`Hu9;
zG#T+gfNTt9B+AC;_{-4(L53No^|XS)c7mgqc^>~PXdB_|R%CqCW7A`TU1}BkX{?ou
z9|Z*(xx`^v_yqAiWDw7ncn_p3iF)z*Dw)EM0`XLwi1&dBnT^-vZ5(JkJeg6&xVKc*
zustwf%+K_Ts9!NhirZKu-$5rDl|tjDO(G*6;D#EdBxZYB2B*n(q6(VxsxQKM;hrh!
zTbRpUd&^FuV2%<CzBMFHbBMZMaq+QN-|z0N^(+f1!eER0YKCJ)*N#*wm=2+UL1{;Z
zH5b18lC(3G4X4*5&`uoC-Cs6aM)Wv?cx;N7nCiVw(mJfnaI?<gLLinS-Oi*Hy!O*r
z;pe|4rLeKr^4W@S&M8rG4$gItu+Rgp6Gr#W>-vA2-FiPf8K@g_j~Sl4TzbXuK;VKN
z7$A@u@d$L9oA9Q=^x`5R$HXB(Uk~2m87^ue#9U@&^zj!2*bl@7xFF%tHhs}4hrCFx
z!DyLuVp6H_?+bj66p$OdmO6RtqDyM%<;Gw}>}3DgpK(`_$Zm!v0v(;GNwH0}9;@s&
zS(}>&l!+i_)}CXejIuthJ)-aXKn{o{-fCCXmu5cccGNj!?FH-MFhgLh-LV{U9~^L)
z{V1RT==7sP*rjY^1InhS60XOsxY&6JXcB|$M!`iH)*z!1FSi3JJae~&$k@YCaKPU}
ze^Iw*<#~+pN9)eF3T`lK73@e`v*<nro+j*=XzwmC4yQ+@laO$uEjGO^8$9}Ux;A#;
z2F!>b9lS-`h`&qW@Xv88+jivZn+=&4X5IM|WIc6O0+UP%;FGM)J0@lLf)~7RCfrK_
zjepLf;JPuudi>0v!1e0ECs%fwFhQeZ@NaT%Tua|Z1%8gN2$GO4YPqp!?yo~Scyk8@
zZzmr&olU(~`^EkmPvVedGyUfAAXXN2R(zLxY3;PNRXZ%S2lwZWS9AqVDw4N9IZ`c|
z;l+`@vjE|izaDMCR*Qh}-S%3vX0Sta#A)*l$hhSDsmaOkb(3GWkC7qvih-1$>PLdc
zrT6cZZh1IF_1oXVlavnN3bG5UdqxolxVu+aQi0ir41*aUsLhaZ;+nM+e;nmip1FFN
zOh}SuLca7zZRRy(cF*aK5naxsW>OWpPi$=>I2yXcR}_3Cqh8QED-c@!4wA7n6U{DJ
z1uHUxH26kML174_^hX@foenOxNSo59{h}q+Q20P%JaXw~ux&hgGvaVGD~9Dc!)<<7
zrt=+?S!)If;$V=yjn#z<8HAeAn>5*${T#o_jAXM+gh}>QtW!#J#cYa5UN@^y%h^n~
z2#l;#(MV5sBaRZxWrx#6;jK41PuV(jLO<}sW7e@4x&G(0zL+JRVth=4UMj)UQO<=S
zsB|*RVamr<D;lb`cTf&4G6Lu^fghp|@gAyLt#LZKieEJs_<|o_f*+rR{^3}9;mlI*
zw!rBr9a;ChHQBn&+9A&*_$C1Y+yR$=AiE4C9BD?8h6g!Kx7Ecoj^R!#-pG3H;Lzo4
zfg9OF!CHaUfkrcv!Q10n^|l`w^_KhJ#(qj4PRS(|`}-=5<u;v{ye4i8FO}}k%jmkV
zUD$+{G7(QqdJ}0b*K3k^lA7H2y4@%5UeMHh`S9tS4>8pS7mA<{ULWbX;*8b`PMO@?
z4hL*DD+|a^+d-KuFgzZ#8k{N<+^6o%xU51G@47Nry6UrqA0&tAZfMu1*(J*L9-@Z8
zewX1VO~&ITUPf!6h^6UhozSz}(c50=X;eg_>$z}<>0onc!8Gk{B=wR(3?J3kQ@xRT
zHnbYECFL0x4Ws=t#htRTrsSPa*yzms`4tT{OD|lwAWDqg%F1l6)iF^(Px_|Kd%AuC
zwD(nZ&7d6i7YcP&9szq+U_`!l7V*{VVBaE*$|>Yz(VW(7O5K@FYt|f3p_Z*XJ?1w2
z?sm;cRaAa*-vciDb@6_S)_JB4Rcak#L_L=xM>WOk>Q8QwcC{7w5YL1B?f8g7+ExN)
z3VXeU|907FhbjEKS^yJTRv`#KID4^dd=a&;K4}gSlTi$T=M|&*v1gm{OJML<gIM-h
zu@)88rV<wG4G<{^v=M;&Lc{d_E*zQ=HHQfVJ_IpW%<5}#!auMxnCTfP*`?aFCheWV
z4|al`XC-#CEn^d3L0u6;mf@*}Ht~W|835D2X1*0rKoAQbI~n25jAh{Yu>OGIot8rB
z7wUP;Ro`#Y&1X01p^d^T<riBIkC9d&lkel2g^<J2zdn6YeIXnb$mo83Y(jse9Wwl*
zxdg2SaWdr&F{4i~y-;&^?mlQ>h`@4nSpG=A^LgcTi3wjIU;J$G>{L}}9@Wm?!5aU7
zqnTvHUn=RU?UivKv3VEJMQmzIsE*E-u$#Xg<HF|#Q2V26YahNLIeC-|QPuYN9)ve#
za;)uu@~nrYMgFv(sPl(dj7=dt__rKaD4Vty$~`K@b6TC{^X+lUf@@?sA_>(tJ!!%1
zpK-QLU&t;+t?K;IX@JTQSoxzvUNj158c${r0m|KeuV5odwxGTr;_0J>px(+$f1Fx(
z2&|9BJ50yB?MWBgC@M0a!R>6@P@+k}-G3E4lb5<r{zzd_yGCC-;(eWBm-Z{|nrkkU
zh|<Hj6X5X@<03x?)Y02<pCQn;UAebSYiBs?$6<p7VFOAmdkav6wxk~l^PU2JE%DPy
zN}|#A_ztmMZ@5{z+WwB+yT?p2OjMx?GKj)OMDGs$in0(wHEjXfDV<z!X=hvF(U4)g
z_>eS{s4Iq(U{Vq9CbC)FDRbO9vY(hna*T;ta<Kw^!W*4cYawb#ERLwkb};E`e7FZV
z947L;zrwy~uH~qem?7nl-=TJ0a_~etNSy+MnmY&j{wB9M@C}3xC7|g9bOn+B(V)6A
z;Lw}&ygARsaUjPiL+aT>wR^{AeCAQ}pzWq-^9y}k=XBx{MkM%dVnjVuxG%XS`+S#v
z#8}KK5l|<b4eSFPfBj^VX^J-;1oPdy?S5s|Rs2}QLq;x%Y*ZNik*?zku1#K8P}<B}
zg7zuQh`>*wV>+7N#?Ej}<cS$JldnxD!V@#BV~m#`<n80_fo}jJsCUkV|KVbNDzS>a
z8yFb6Dk9FX8h+w?riaN6r0TCUf972h-s<#=*j~mZT_k*vzs;dpm|GJdgLVzslVLe$
zZ6Z@x&}jH`3>qs%#(9UjQ(B_a&g}duNkY+c9kGa+sg)qkHWb1Mn3z=b9eyV7?NiUD
z%${pg1k*tFU_3$>9wL5Iw3C<a=}`)qS2G9HyHEO{Cv4KI<{$M<bcqlOnSSRb#U(@l
zHOTn0M4L~gyvC}}zvk#HZ-@)w=F8sHkw+y#2F7nv&vrY5lFhZI0FPB{6$Kgn^xB*z
z$BrD)we@|ezfJ{23vLpRxq#(1jFwuZQk|SElM$}8MV1Q1gnnCBW-+^i04A}Yx3PzC
zrI(!N2bqjwc2!>u3~qx$OW=fdYu(8KD|;?FHRA{u?7e1t_;0uX*dO;^A74mpl8Ei(
zDq#`t&1J%tjoB<UPcxxNSJJ!j=i0o$I;q&2HPYj$P*ZKMtg6mxPA{g=FUv|VCH3T5
zEsASfR<ngv=ta8)RqEGd2?)8rFO;jv)9`J`SsPdR={B<?(b8yZ(P-=2avq^zp!aR_
ze=q6f)sU|np|heVrN?QDC6}>h|1&(;<LiZYup{73=x8Rgp?9^CP+LK8&H{EEHNb8^
zU??N2LLR{wl4fsBqomjp3XXBnDX*#s@=!{}3|o;ksQYjRXdz5NBzRYXEj4yXr%sZ(
zpt3FOpjATk=ViuoaEe<&2Dg-+qEE@8*b=$wpfy}CYwh?Y^Ty5QM~Icm6U~BN6)kNE
zrJaR7`tcMmaI4>-uDhhXIO>DD{@d@+Zr$<Jps&~>-mw}IwM!N6l3QlHgMG6T>?$%`
zci+RJf3%p4?k{eHmL-UriMIUE*~|--=;ML72n3~<-5zLxJ70B*1v{gOPgoGgj7FtW
z21+HQ*JNs+&vg=Glp(=24#tI8EH7`Si%z!AoWTtB!$_T0`G&lty;Hp?M!L4OfVSe3
zOasiMp_5|KnT9f@br;j0ELI^Fo5zWP>B0#p`8mAaA9a}B7GCO_1sllrara;z>uVfL
zhx}XVRuyVP9y|c3j`!r`oWIf%3#PamDwi)UBTznVG2*nt4n~8tshG1t7UVl7KA@_-
zHuQi_21P!kFS8iXm&Yyz&2E_h1)g!f5@UY#mE2n{#G6HhXId_3%D6D(_-S;=?%xyc
zjS#3S7*lOW^k<hv#ZIDnCJA<c7>d%et+5=GjQ18%HuJjKMK~rgR4GdWfq%m63mLNJ
zT^K0Reg}@GQFf`I47IA&ha5U+4U`p5B>M?ivG*GY!=VH|G;@1oT|k5tdzDH0O||WJ
zL`?_j``4TG<cg<p_945jyW`mRO~3QOHM`73u!KX7*@K6CVndUjOv_{$iX8@y@b5bK
z2xWX^=VzC3aLiv3WoS`$a+O*JLy%rr^2s=wZ#R@t9w&GP_95I~D>#~k<)a40slA|p
z#jgMvw*0+<KQfTd*`z{;tLbbGkCTqX(t&O|?sI+hrM{PR5RFdqN^wDoY>`a{!AN56
z%rO%j@Irk<X9$5j_Ty6+abNOEuE<s2!Ad-)v>Ut@fXM~FuVYzAe9N4{X<)m939PZR
zhF^%454p=i`fw1GdR*&{OMZU8Wvp|BKVr&bQi22h5gz@E9eB$VsV@tobT=(;;qFZe
zH-+~n7n}0Few-<&Fo{uA$&`%GF`EZ|8NnkOpqKhcSe)Q*nd21^=Z>C)fX8MMgh#X)
zW&K?uVx&!kOmwRI{^#^RTYTUPnW^x$m(WhZA?Hvc_)?ZmC#e>#o91K9vky66Z&0aj
z3~vVDo!9Ao%a||?F4$0VEhD&kTRSOMISzr=KnGTp)qva?cNAjhLL*OMq+%^;2(e|X
zfFd4FiFT3epiA^v3#6-f0_x$rceIJo1Q-35cVQSh%hiT*QGl$%Fd&arlD_I%8K7UE
zJPUF?)B>dRtSB=8j1h_o`bqexE;T)VB&@>2e(HeOCq_!N5xD_#$~?<C?z=yqqbCHy
zK{^-7>45*H=Yt;{u04GQ*MPhG{j6-~5a2TGZ<h$yd17_0j5%;pn>;7v7BfSw=AEP9
zvvj2&vUld?5?XLj4q-3w*wh5^^d0>Y3gF6qIE0r{fx(sVfHuTHDx5g0h!s|LGlCA7
zJQuni{;_;YD0|W9P<dQ=Oo0nlqxW4QnI#c~)+J2UaDf|4UTou=3HwWErnOdOkxw>v
zX@?W42Sr3kCJ`FktPWYs1mDKKU@DX_qv`79(&oMujAh>0pG<aut-?+^%{K(-4W1&E
zP%v5g)YZLRbM0oj=Jo~I(>tzI;3#Np<yx4iHK=1nox=@6peItoD%P_<?dko^(-NqB
zrfPn>*SPaIv6zAI^)XY{3}H)8`W}vAQ8Do&;CE}zro#iqS(|ItK%tk*_i3M-RqM`0
zx34Z%bUvlg-{cHyMFnCLalmFUflL+lhAW4es-e}v8mz&jbk;JC1{d%rLMmzbj=-F;
z#(YmH;${dVF>FM8S1=n(=mQ*OY9S;R9?e7eMS3y%XSEGP;f<+{-cIa5YIF5<PwzGX
zI0-{uy_M6}klk0w1i-HAYmxeu?GPhKOY5&UlbumNa;=>5(V<aGCPt!uSyt%7!nL9)
z9xL&__bJ$Jf6&UAhE$Z{Bd8Gmq<-F;MIk09ZWc&oZ)U73{I53ApCA)_EF%Eu1`Qm2
zo|wOu;eDRhPqXnxadIELA&Yn*5aM6~A?waJR@6W<yXxkx2S$exCtkWt_mSkQ?e;=!
zhrQ^Y@Lmi+!(_R!QH2Ysw8UDB3^8mvmbf&)8R35bCj6xN3*->c0d~%f-76l1x$QC-
zf%ErbV*y#q^_b+U53HA)o)QlD>WiSPO7#`FzOMvtmjgXb-~->|7cQ(#gw;r1Gk2?G
zM87y5_5Xx|s6+dU_b{f@BSyVoy_5yvJeDyA8U6?3F%3@G);8w-w%{}}WKbhalr$GR
zBYnf|67=s?+dO(pt@*<Q%@aNQ3wAm4(0t5U@xP%R{$d{_2moT2<6&Iu6f<})r<LvC
ziwWoZx3jW7qiejsawYk0m3%1Gjjt^(Vz%jL5bPpbTX}EJoL#O%MEz6QZM?pGi@q3}
zLDV;NG+~t|)yCp>vRW9c!~R#J=zlH56eAQ^U_*Fwtx?T}iyevI7hGI|P0yR+Fs};^
zwPsuR*R?}EYsAOzLBzyRT#GZP<$CO6(Ne-{%dU@;lZlv2#sHv!utYt;jgjeW0Swzq
zHkOX-=8{@6V#^f`)jC{j3i;C983Z-!X@Lp}2}w)rt2tdKLG+L96Q==sA}(vHI+n)I
zP#l2aEP3#&LpY^_4eBzEg$EtDIf07m2{P^tm`_GoY0Xv-D_7O|xT2Mha_G_0(8MR#
z9(bF&%xIXkT;yZA`dFFO*;Sr{5*F2h>-Lu4$*V=5_YbA@^%c0JX{T`A|NKv(m|FWQ
z63s{tqmeT(7iPHr;YCNol%3vOz9!H8*X>g0Q_>Hh*_V&{MVgkrl{V%ZTe{zk0qZfK
zFKQyHH69IRgTCKGSlin|mvKMxPh0E1ASGE(f1yTh^wzV|nux3n4KXYPeM^hwfAE;|
zu&PkftY$gl!b?nv{4X4mIzq5ABv-0u3~Cssuj6#&rbhWS{r`f;_&?w$0I(2vkO>H6
z>DUD6{{Q^j|JJOz5P(jd_z&{_cTe#D(76=kznCE;DXcXA8#5$J1|Y}sWZd`JpXKns
z|8^?wFRv)3>rDS|a8Miw0eBId+tr9P|3I|-OZ|Kbz5}FKI;22)^nVYv2n8^hIp|1_
z|FJNCm6w_1FCdBpv!(ifjQ_tow5R_ajEwV{(ErUOD3Ac0SI9A){a?&g1v~kUUo=rz
z{;J2%?+pgt>{0}@Tw@dpXiI6jPtw?5`&ktKj^Qi~$|4a?%*ZIe4jw+CsED3|h6bhh
z*1gSJVi}|$FGv6IHK}3Ye~!;*A)?E1(Ay%=o```!qNe7W*lk^Y3o9HiA3qSbIPOSw
z1GZ}tP_O+znViK!P^HCyj|u=?Ss?gvFqvA60cdqrIn(aOwp?c#Tck)#EmiQ!suaQZ
zj&U5bp>Yi>ap!3cvX=0_grJIvs7i|--;h>6r<a72QuDpD-OVSWwB&*PU6z!|WjxP?
zOggngNHVp-w-HVKN<1Kd5M-Z%&Lz&b2Ni7|Mu~2#9bGLe=RrG8qF+AGcV510U+_}>
zHySvqgvQE@lTSx1^RQIR@XN&qFUPDDW25})&~e(OS}Bvsg!%o`S=GYpl3QlGUhlW&
zi)WYXdSR#GB!*nbc`c>+U#-%Efk_*xq~36x{_s%v-asJ#`nuwUcINfoJMhmdA}35`
zt*HKv$a|~xw1a*i>FC&i^Q!`M+F`o;(1*XPA#e#E3~{sz_WwKzc!@Uhl_AhH8X`Q3
zQ9gK$(GBNvr|e#gWJTPnRjV2x6kznm{Oc#6yZlg>6CHs98rT<pAmD#}{Q~1g=Vx{|
zGy*3^3zanJrR8`~$c*Q*>KuoNOiQ!SFykrkddy-(`sWG$t-dc;nn2JHwH9n8+r6WE
zZkt-vb_ec)fCdX?1r4r8G0DecZ`E!OxW#2<Rplg(kaVACx@GF~Ui;{hlNJ4|;(My&
z=vwFmi)=0DWFR6uE@<yyXy;S;n#-YJPY{_|xZr0FZTubS+A)`JcUGN~{nFr(nG==e
z-IUkM{duC>#hVkyORU`(zx^c3RvVi`gy6qt$lp~6vhf1G`EXl;%QQj6B!riL%DrDw
zQK9Ymc8U&Y32_;-uq30Qm7ENmsf^Va{_i#M?h2vUYDfFBI1Ltckzuu5cTDs5E?p{_
zQ=_8g1cr&fT|p+p{Wp&UWNz)JfdU>Q+G<9NI`~;SO~q1<(;4pvi7>Jo`7va6AX+k3
zcBqh_%|IzFJ&huo6hrur2zc`gcG&^vm6nSBmbf-rUpYV6)G;)42;Vz65Yy7CJ>y&Y
z37e6QBee!Z^_ic)cA%VTy^o?0$^89E=o(ekS2^>FIjjbJ)7XpRzW$$O{=0nguz(-_
zWMHwdcX|+;lM*@dY@llUkAXweY^@6%kug&Ri2lPqARk2#uqZ`J3!%?60wjEIIA|(#
z;m^eX|A+rl6QBPF_NW!Jc5JS?y19{j9f`^5sWLP)grk%p{~E`0`5Vm7FZ2=@j{-{4
z7$4uY+(%N<Tr(wgm6*xysvZ(|)a0|)vU`H~d3ED;ntuqXoG|zhtolbj`?-yEMi6Nm
zEUuCUz^QU_ah)eD>bMzoW$Z;7?HlCNY=}dN8*ih0G8;maQ9tBVd746W#X7Ht&=G^|
zq)rFWnx9j!45!z1q5<lEe0<D8Loj@3Ix3<}Pfi4=x^(<*z))OS%G9m@>ynX&?B|5b
zc7V=ko6Dl)-BHNQ++2!1FWx8f!moP-#=QuFd~&L+q@+Z_!h#ZUGQpzzy+`lmQj9DD
zlWX7t!Pw>EK2p)*p5Px{_|*gJe1YCH{KfJ3;v&JhZ9NPeIt48%BhEnJmfvYC$Sz^Y
zVExYLvSGf@KOzF5&^*!8Sm3iHdS!SYf&{P5OSH<FK2T}NI}~!F<;c++%Hm;YN9?Dh
zh5n=EKp<W^0L3FlGiS=5hzB$<6UOy?eDR>c_Z#$nebc~l_iu0p8;h-ezhC**%Jj|P
zbx@b2;gj0X+k<3a`BxAK4EoG1o-;Y&;MH)^mD0<0o9$Al3PFqoe6pQl1Y6BOIYxB^
zeG{O_)se$I83rtMt4d}0;V%60uMAbt|LChvHX6XFW1gfQJbzaAt9K~44C>uC3dqgh
zpXb2)1>gHIE2dfalbEy-@&o;mkd{OEM03Xn&;&^ALO;FKS=bwBCq5+$`xEVvA3*by
zI6(U}`m5hSz<pFK0vw+f_{s-BgNz@e`DDqqP=P^$Rm^;CKXGXb6hK3yOxF1R&oXsU
zfq;FfoCDkcw7GOa0%&-OjE%wn%+6Z{3<_Vn7<$C#6AckS<1I3@Li&egz?D#6_}k=B
z;y^#q@BlP-x#2a!PlB%vFka62q~wsFX#ejs5PuZ%!CBLafrv<mk%{T7-d-zD#nmlc
z^5OQ#bu(!9+ENqjpK<!!er3-F4TkX1Ro((zJ8Dj?uM=q<WTK!VTyiGV&%}V(xmIGA
znI|M9$Q&P^&}T9c6H!U_JP}Y(&A(yFZ+;;O#)f4+{AUsJ+Pk1J`Rn=#(lTi{I0%YM
zxeO_X!?D_tp$x^1MGhDsfi0&oSgCacNw+LE?~OO{1e3$cXk&VM^jMGj^ch?Z&mlrs
zEvsGzBe>LBT3qw0i-psaW9mL$wjn-A1Usb<3Sdux6?IvrU#|8DZJw4X#&!D*k5zyY
z2ah{_P*m60C`OL)8YC2aUr<s;9z&D5s5T}X+ChN#wj^pelP50!1v)iqx30zB$w`v=
zTWomhMogmiv)`KA<l^}s6tjYnchGQBe{3bKU-X|A%arb~<?`r((>`Jt)-_ZLu~>Nw
z1nb@1pX~G!8Hm84O4rgV2vV%v+dCLK;d>XK;CZl^UI-QnQvW{5v65d$tgp_)IwXB#
z9ZyHswC*|R292`Xa2X|v>!OJ3dgYlc$JFm1Wh^)}y<^Ay@4w|&hfVuJgTJz0lE<#!
zq6u#K*z^_wUb8j9W%zhCA`q{juB_h(4srmjvjSoh_aroEXR-QR!2SLx-~4(lN%9qD
z`SkAgcIm-Kt8}gVFgZDy(Q{3;`GfB=HU!1oa3g$Ca$LN=#@Y*opl{@l?<Y|YE(8s3
z;M_YrOtO-7VRil)@OCwgH+;9KW!@@aO8yJfr^0-(s6uA;Th8bY2t;@erQT4Z8x3=#
z;YcsSMNPZ-_OKV6Z}jps6AxUn-81wtMi2#?&b<yZv+Gnhhnx6h(rKh__pHPjS@9>|
zKJW5fbRZdU_!Edv-bb^A_Sgfs3RrC8A32sv?00jBOD#5jK3Mz^9e9@DXy`!zW}NF>
z#!>M(1@LH%PV+fixSH2;13;2$97c_gFOCx^V$JtoZ}@0XNW&V-vDG1XL^rLQw$)vn
z9=NW@UoIHdyGcj8pN*MB0t5&|HR!M-|IL6XZGeFV&Eebf>!vm>icC=sb8WsZnH;5I
zn~Vkc;7JPs{4-s)Z1z9nf8tM9T^;guQWj?N&ieaO$eZAXmeOE(Sx-Ol)Cd7DcUnib
zy<9kAGUQO&@bD~t6;Gh^Qm<&*nTbnuJxJCW5=Qr6EoKoJt#O;wPIg&QtMT$m|B4zg
zzV$c}cUb$`(sV-QU8vmhZg`N#k(8I)B(s}_wLPY8ju=F~O@aNMwRoJ0+HRo#`M6YV
zQ0Rhf^}vwWP-dS5jmKp;93vXr6XcmlE6ew0hs8^p&b{7X9EPDrq;#<P2wh*0HoLbI
zN>^tzZ*YeVkN3=*W7gz;vk@>eZ`0*SH2X&V*+#4V-M7**ss1c@*lrXa4yD!d>fsfZ
zMs7H?Y92?rS<b6A+s3ci3?`yP_PvQxF?@v^S~!2n%WE6p<&mt+-5!AF#A3CG8KrGi
zH8V5I@2)GFORi9yR@Kx$*!1xWpIKTW>@6J_<}lHr8b3hlx@fj?ncy&q2ur^Lo`spw
z9Xa8!YD{V)`e)z1l0~{Yqtl1~c7BfIK?8%?pd{e6cDeS{K&@ION81FraxXVsVj$X2
z7Px5Fg519dXp|5Z7AACV64)V=%&gj+HYLTd2z4TEQES%Gl#3#Bd$33p#cP*^fgyCP
z%_#k_Cw2$8qts2i#v#HFVy4v-NfVzH#S6TR4XS;U-O{5Z{zgdK@Zo}|=A`*>+&L;0
zxjsJ@5%)BQhPEZm<$(I7f(CEpMq)6)V!1{d_i@212`%E!47R0oTtDtl?H<y$Bm5`X
z437*=*W><>n{`HW$#Ct$hK7ZU*(ZtH8#m0v9Z$&1PfL*(>;0h4f4kVJ2H4KqcxWp-
zJ48C(&V!8hhLBj@6%p`E2DGG{PPQ;^M76ENSlgPljWb;m!oIPLXwRCq|Dyc>q#Lfr
zixKN^azRG2g!rdl*<SMK)RyB}u`wK46jCKtEH20-%$j&8I$kXOgjnLLEovRSiukvV
zczb95J!j3#tx>9FOQ_YKsMNUJ7`s@_(^+`@r24L{U4d;DCeFNKt9e3BCQ62R78mJZ
zm=KqkNYbKn+`oH%emxpLxq4}8@jH0|vDHkc4m`IeXDH4(o%^awh|%sKtfNAI*k!^J
zdb&c*B!ffa{r38DY_`F-z+7!plO%|4_}jnDBoIi)U;pr!mG7c=JIZ3Udeh!ooho-w
zswQ%u=U0`ux;j^y1OrnJUSvN!RD5qKa-tn%rs%l0Z6SExQo{f-0zK7=ZH?WcC#K4c
zPoICl+k;ce@Rz$EJuOFfbyUki#_m&|3sbY$mbIs!y_YREpS=&GOP|)oKnP1c@?b;B
z{$Dt5)5aOB^UQf9sf<R~S*O+;HS<#JO)@2-@uc8i&c7*ZVpm5lylsDQ8*0eZoyNDm
z+V0!c*zA(NOfO&DqLdbqH?G<j*nf7IUnv16xE*Exz^I0Xh&;THi;ms93&+xLJT06y
z;+EA@Mw=V$_dINDWDGwwo#GSWW2Lb+qbjL2iSa%j2hSLubIK{)#`^rwwXZNuO+!c;
z9_~3k8n1ixTFY~DdwHj+Z2rT$dlc)c1vV@?<p=e{VzsTQMbSBQ90hcmY!PqHyz|yo
zE`S!ExKBOYTzdFUWdh*{F9m?!sa{-eb;|Tuv|Eo-U@wys2~RgRR<AU`Z<*f)|Mz*L
zD-xsw9zU5B)85{Gh0{qWkm<emiRovA$oX%sS=UI@cXBE!W*Q<c!~Wm#jIOujvy3yb
z&dir5^K_$~Z>xlE6AhMJF%_kFwzf4!b3-u4KPzLsUB1$N4oY}_y|M;^HWV{A*X-#>
zA(@3k=4)f8Au2B~cZ_YYIFi>)qO-Pi6{>i9<$jtgoTy&C74DVn%@(qK$Z;DdGtut@
z96PXNkRg-f<;XRDpZA5xgo=N7lzp-`Tj;=>5K-RArf+gWv2!vd31$4(UB4{veugvy
z_nGcPfnk?`!&)U;%o<5*@Yy#wYGt^dm_GGN(v9p<?4BRKK_cWq;R}R(W#8pz{0Uqw
z^GTc@WxG0o`yhT7B~Rumf`pJMaA@V;imO;!+Po}goucjs)EK;o08-8ejjo4dkqty|
zy&X;$M$tRzH+gBBHo(4V<xH#2FtkYHji#o?=9cEHcdC9qH0OF-g9b+&)8iBoo2hd?
z^NFZ@K-C!$acPiI*bi7)c$$}|c}$oXUaY~Mv*J+Y4E9Njxor7d-dfgL-;?n1@iDOW
zt(OQC<j!K+?I3tMJ^cA>33R~RvG`kBU5T-a<7ielqAO_0Fp^9`E!)kThK|k4hbHaR
zX)anHPIH)29`Kys*I+wi0ExsyeIc`X-D6V~>n--sqCI{f!MvVqXm-ZGoCf2U{9HbH
zS6!kY@9_A>aH7O9RMysB>tif4>5BWD8$yR4Q%2({D*N4#okUDyQU?<XHMi3(m^J2$
ztG2`ai{g4e>gQOPSFMzQZ<4gNN&;0#2ZEO14}?L*3=C@Dj_Nv^+?+oJ9=iDc%IFFV
z5)8+Bnd^%&<D%}iV<aU7MU5ButZXugijGIVmJ?`j#)}^wHS1~$Aan)*&qL9z5fX4)
z6DO0dBIs{Vu(Gheq-ScuV>IuDaCoXA`;UVa;$KcNV>ih*oNR*Z1O~RXacjIGdL4Q)
zeTbUM|9o7(^rU;({E+4twr}T@TeRp2yh+Rf9d{@$BX7LCsJ|6rUZFl+d>0pqpk~tQ
za6R+X{=CSke;2v@r^!$dHv2F7AD0(-{v;$uwxj4)iHKg0VI3Zr4H`-w9_`exCv0O4
zQOs<O#H6TmH*4Kz+f_GBT0GP61moi}4^%jKGxPCl`=yt#&Ywas_~+m;WL;t}tI{3a
z9j^qZn``8S8Lq$Ak0GK=XA31hDio7F?3}1I?&Dtf=M(b|@``IrHnYD24G$xvgut+k
zlrixV09<nM#TmqK=?NlNx3Sr(|B%sA?@G{MjpJ6w3wsrm%YNYi!h_6J-)ydhG8dta
z+k6e9v!>X6T`dJd_oEIuF$yjt_48qQHMQ(iWZ9k>2BOnN>#EfqV|vd2unDMF4(MeQ
z6SNwa8Vy#l2?+~%KD*zz*RHb53CqhZuK|tRS8+F&mn}2W_8T(Uy*MwNW0q@8mf<g&
zpR?O}XzAMPR;;WeTO(iV@%}?3RX{or@TXPR;D|FRWvR6Yxn9%-*0!>;d(R{Cy^yFf
zwMa%2>FVt~nORL$IbNM|?7kVN(yF$kIj#hqwOZL#<^vx-9V&~dJz*T5*$PJT1fzfU
znMt=!fpUPm)4yJg!^@x-zh?_QoE`#_B8CntnxrTx2U7~QS(3Yt-e!WH{3x&!Oa{El
z;;|0b3FqgD&NJmcylViUOs(Zj&KR;?*UMhIYqbB~Ect8rpCO|5!lK+4-*{O>HO>q3
zWvLSz8k}>m60msfLApPlFY%TP>}`84fc=JA#}0kPI@Z0$SyWOIqR#qetC-u4&JHJe
zU)t6;=f2inezIWrTPnb^2!e}vAKkkAJx|TzTIp*NBNL7Qd|WV)i-O)uk8Yt}!R@My
z?`%cykbUEM-sR=ztQK{RPU6zi<!!nxV&&Q%p=k~agXbJ?8iH$=6x3l!Q8NU8?q#@w
z#H?iGB&13QR_eXtTQ8nd(mYqBURVGw4XghV3n0B+N$q`39+OY+cXDvmu;<}+O;zBh
zqe|z0MRKpE<reYb9j1vEMADOE4Yp?1*#-w%>b<a<sE+N#mob?9nwfBg27QmN+b{VD
zP0|=N0Go{^)O5{}#j%su-Dr*1rl-qJ2+2W_p7GicdC1`E{<&7F(L*cYq86VHpx#yY
z5PI6qe)>xe=qmch(cryZD>TiUQ26@LXNlxR86qbybM$0z+Z!N?)?9v@Fn-B>$I|JP
ztRv}7-kLmD$nT$bNFV0L&(F^nCs{01VqrUF50^qAjB!k6k{XpzPT+oct=zj=)TYTD
zkct@?K;uHdjLTvI0s@y3|1O}ISJNifV5LPTnaE24z=sgdLH!OI01@<)npBqeDGs2Y
zOlog~ANA-RTREe9G0o^hCKG(J*S2<$>9y`pOtyerz$Ff$`xFi#hzJ~UTAa*J7Dmhq
zc(UFbtTxR`X@5VT(M<8~$09%AsCU#!L_<^}vb3(|q1D8Ufn8?ZaO0-wad!x)oU~yy
zUoZ`^Qv4=JXzY0N#I{auN7o{Ea&jVtUY!-E61RHp%Fwtk)Eg6++4*{B&FUUjR>3gH
zhQb@6NO1O#`MC=JulSnT^!mExfO?(e(Cd_w*BW9OYNKTA%SD=-^LvEP;Hg866s(v@
zArrdj$LYyzmHPN2LbQJK!OByOem`R}YyE<@piqFD1>hiL>Odi`xni1b!)tamRa2(b
zs?E#1+iPqP?Qx=%*o@v77J{Poc?${x$#8>7czUx!f9uXL$RN+>JE<>KD)DNWe4DNu
zG?yHRj##|PmdvV*&-Wsqy0kPkO++G+G(1fhXY^Q6ba_5TZE#C?;d!nQ$Qun~n)c2+
zeS0{**QwAXnJtuM*+gbsq>L?UHvYJ*2H*PU)C2^a3FB-97wp(wQprWkWFnJjH<@k#
z;RBgJ2$;X9H?|~C^5_zNF3nfIx8qoObyf+^XJa9!%F@W?aDO}LsxQm6Zl!C#cE=f=
zE&{IU@VJGqZ+acQTinVz8dH^1k}&bESIo`#k~1r#`XhPuTa3e_$M_Sz=UN`Ta3}tG
zM$dHkWR>2FK{8<RS4y%Xx8@6VL$IGHR0j!_)Oi<pW!PpdZI7K8;3?JAk`Ittk!HWu
zbXZURYQ9?-HR|!NmY0{eXq=yCOA?21N-i{clgc~9X|?R}S2z6`mSUxC-+CfCLiukK
z1q7lDa5KM4?)yhkbM-bk>df%}(p2XktG{yvc)qhNl(fY?K}yGN(?LH`;YS;NimDlm
z)r}qRHq%w<Xfa8Ig^^G=Tk@)hlb7hLV^Kd%;ENcPGov@L#9=n-xdiIOWVKdL&GSIi
zQBq_?gbb4-F>SgQ59yk7QP<bcD}V^&d_kd#%UmNoQ%xW}{^4~BvE5tBBHH|qVzd!=
zL7CFcLl}LM82oW?D11}x?ls&`6VpZp!~u(0$v+zeQ(Ar?@f(<f`+wf|<thdc<dm!z
zQ2Rs^vjYYZOHrY34Eki*68{D&OW;R7Ii>t5uwVFR+I*XNK25!i7!ZY(x0L(rS<Gm9
z1H~Mmj-7vsgKv=lqNa&vel?#WsZj@j>lo%rT`R<YpXPyp>7W6TPerV_Pn_~$M#uNg
za{;$=`{buOivz;C`72qU!w7lJK)}S~R7tD<s5gI?Bp?j?{~;E>;?-h6xRIN~2mk>-
N;=(fDD+G0Y|1WKrs(t_f

diff --git a/linux_basics/images/linux/commands/image6.png b/linux_basics/images/linux/commands/image6.png
index 8f19b15a8e111de8b817c6062fe59725dcb6f790..949779e8b4d1dfd9bad6e04412884c8855c12aa8 100644
GIT binary patch
literal 46293
zcmb^YbyytFwml95!5t#l1PM-%;4T9McMDE}5AH6(A;H}xxO;F25M*#Cz~Jug_UoK;
zzxUqfeg8Y3+t1U}HQim+-6gx$UVBxTl7b`_Ix#vN92}Okl(-5U9JUOQ-a$nMeu*8l
zV&UL0O(0@oO44Ft<Vp^<rVuL=I5?@Wgik1%s?ax?Ix5oUeyCDtZDH>?zsBQgBf=N^
z7X?y9D~ZaXGPpP?ch-NWOMI>O+J3wq&QR=kJ@Yp#y+K2;iHV+WPw+rm^w)~^v$k_@
z$L-M+_GkK(CRb#*4D5Ef#P53u(X>p_eL*O-G<kV7Qc-YtV}2BN@cLeUqP<}e5eQ1i
z_r3%BByh@?pY+spmm{A)jT3x(g#Z`L5y~Ej4krCA54X~TkkSeVXNWqbqxe3$xQfv5
z1urJ<nifNPe(!rV9<hi9oIg~*?I~>FzRIniZ)(ArH;4$9Dn%o?*O7q_7+%Zd!R-)=
zfXH#rgK%j@1m3Z*7zAyD58w_>aF6|yGft7rW`u9pgKush$|%Z4EJgY$@PinWgx8-L
zho2K$bvLtd`2Uz2x{IeX_-b~i@!rNT$OSa&q~g8JE#draOD*cW2rp7>Xd?b&o|N-7
zU1OEcSG4NVXfk}XYWm+_CSW^s5ki!z_`Lyy6>prH^S&l!r?hD1p+?Nw*~D-6^<b{a
z@h0V_=nN*|+^Ekr&^hAs5<jIG;@L(&tH<zA5E(MS5!NfkzQU^J`i=Z8{YI)D%T%3e
zO9E%UKf%7_#+uypd){iNg%2Z>D(RcT>ZDD2<ntbx-}w4<$e&(?zI-=z+3A9D^Wu~Q
ztV<i~fRExX{tZnzpb7OOMa~|qS|f%-IgZ6eQ3DrLn6f}Q7%}~4-B{VCQN|XjI_$>>
zeRcveRXBpeRI;ep*S~3s)_+gd-WnNApRNRvquYT|Kf_a75s{M_zmT?c_2z!aCq;YV
zMUJ8+g6LYL&CWyV{#hJ7>ognn0WAiVE_e$GC;XcT#gs2-q9lu%-0^dr-De4GH%xod
zP{gK_28YjyPW?LgZit+*wyhYS%bKc+d)ue&vuR{<m9fuioRFEqa(?3)BC>|>gr=>)
zH<FPeWr3@jR;^%WALd7|0{a5Fx?XfSi=wQ~yppbdDAnxs!|o?5fby&lhTHS^?}nkQ
zKSjS~TbF|&Hm;D4;h^9IW(wvcmWJsh@b52g@Wyu%aL)cw)}^O2A*2pnJGqpzrnMfW
zc%%NYqb!PVCOoIaAw;76YV`5Pi0B_lAL}rtUhL0iRdIiK59l;-H2<KL!MB9IRb9>D
zyfFWah2`;`B$O8AOsf5~Z}vt_U1e2!eSY%}%#MsMK8c}55}wAAMv-J3hM@_%d5v4`
zrqbDu$H@JO`xBhn@~cbBJ!;1l9lsBwzB5dJFuy)`K0Q5AW;w@1z=7xj7Fr)`M|`-v
z-lik2Smle*v#9OcO$Wd&BlFow61{Nzj0O5EVe<>)#*Z8qz1N>G8cyYxv8EZT?x@2D
ztRaMRFdE&9_rJ8O;H}^nelefC{DZUCsceV;fWZ89aD}fCYgUog4cX(D<yZ(gDq0RD
z=5NAk5i2~i-&kKL;ic&CgML%cOYy}9N#RkmVQ77grznla>et94z9r%fPZuAdu<mEt
z5Sj>jh-j5$jSnWyHZ6L~hi;M!;=q>|q0Q0SQL97M3uP92KgQsMqaBhd&XPSlj(tHi
z{~cZq!^ki(8KbwiQ4=%qn~9-=6}HB=1S54#rWw@d-BL}InTWRTFrF7?tIT#-k}F}2
za9Q6*JCoK(PW0T~F8Leu9Ip%B&?01fma(I`!FLNp3uNr#5Jk&LuL`gWwIe<%Q0TIJ
z7t>EQ|FUh>MvlVtr5Sz_J~!Sqep;yY?~vd6_+iF!4m7uMhEiTC@Wp|3nROvf{!T$t
z(jKxi?{uOU`@d|c)x_({G1DH?kkJ}Y2vb}uJJJ7qWgvt3Q7Q$jr7))e$<zJeq;gl}
zq2^g4%;}dZpP^WuJ)@$idaPt%0fA^iZp|ZRW6g&rOUC94oi+B`XZTZvhQoUE^T*@s
zOzJY~Xy%#bW%)8}ByoNePGIZ|?o3~(UU*(K%wrzL%nMlOT<IRl9P%B$pC5Im<NL`6
z%7F5H<lE#!abn(e+E;NpbZTn$TI6j`Xby2+aQ3_;^vJz5yg0i^+&i4%FT7UE%Cjvb
zD`A;3DC&@Zj(-wE?yWMlBSPp!=ymCZNEE`4|62NL7HzF$dJ+dN1xMwy=Y)KTU3Kb~
z={5>}D;Eyw+hBD}8BDoP;Z8mdNx@pje2JyQR_5|2;frl}FbNV-Sh!5Y6|o+-hwTs>
zHs=VdK1A2nYZj5)o{h+sZP>UL3W+;fMecqK#t2TrUKW1fR-KxHa*Q|?>~c+hFK9E}
zGF>%gtGzTW9BLj;*#d9PZCMUQrMYT-U_@Y~dSl6`p!v|rW^Aw7REDmBQQ9{##nz<)
zX_~H?t{ELzVi+&^V^KM+XIa9zz&Gg;;auw+6%jPdlcvSR$<;BZVm0^EaKZVfnbq>2
zxdrM4rkc_QPYYY)(OQ<8%Ic1F5m!{F<UOTLyWyCfewQJ8*oNC2n)8_xKEFDjo`Xb2
zTRQbfTKa+nuEb4vbYv0n_>rjNYU8WssYVzX6hy>X<7WKWznyC(ksqneyEjy%Sdm%L
zRI#9E8#O~F=;Cy`(>w0l!rO!fV_2+cnq2ILZ8vi_cAVH<;ksL0HSR)BK-*3IwR7jW
zNexM`(wWl1g<k$e&s<mjg|BZ1^#_FZ#ZJ(!QuZCEwlgY|Z2gXXmOCDF9~>TB?gif(
z2}^L8-Y17VX*_v7mp{FQFZ+7&l?;Iof$7DqpSmB8e_22vnBPCs4#Yc`E||XES<!j6
zBGzf!*bbY672q;b3FL9)ajFS(usVtDw0$V8DyvGZ%Cs9jNm-T03k>ZKO~5-8V9)&e
zX?UM#U(n_1Pok8zvDZd$KZ>$~@>x-@{Z3=`x<*vXOKTFQh>9q9*4E@{R#&4#qrzTN
zB1I4xf4jrOdgHi#?b^t1_O-&_$C17nxam~_t1dspey~;ZO4HIa74z-NJ4l_CY(%2v
z(hOzVQS?xKjGc&<k&%~KjG5<Wby}Mb%YbA;s3F`mbBd`#yD;N8Xj5F2{CG-NmIHZ4
zbY^-x|KkhcV89Rzub5a3?cmuV?IVr`g1b1om}5H36LzEve78!53bmfJN^6^c`>i?H
zHw3<)BX^H^8`DO8FRvgsGLrrT+kmyXZ?s;tcB^<pBI~G^1$;ex(uTA&-t8yv@jD+*
zk-F!3g&-))sc^g^{MCK`F+bppfAg{HYu7+m!(?p1+vEyvJ-){^%t9hrQvrJP_jmR*
zLaHBX-4i#<ZflQ5w}zJZP*UPp3*9R&VL^`k+d-oXoLPLrW>1wp6+NZj449<!#~R11
zR$GH`IxwCq3dCE)^(Wf<ZO0RPZVaJoGt@`2Gc31i42*&XTiP1>S6_-h@7^9u`Wl>i
zKi3SIln=Hg+UkRKDfH}(OjZW;N-s2CmwPmN!1kIs%Q*8b^~*DAu5_CuZxfxToCloW
zzE*yXwQoIBsrmdRz^(goU}d0<M4p>@?#49EZZcsQoMzdOY)!v#_Jjh(;cf`FEibJp
zWmuMgX*3?5UgaH{`4~TIwsjjz&P7J?=kxQs^c-3gUsY5rSvPySV`=A>?as&j+&)vJ
z5ayg}p0ZgSgz5amIZ!>iU*EpSvOS1`Eqi_S&c4b%?2HH@43XK7ZYFXTyj;7B42}=}
z*=>Zw&3(s7%ExxrKa!g$`96w>RL3XX!)x{Q>E%aSk2GWXMcP^gA*;*@uluP$)miP{
zhPup10q?7%Dg%X#)pTC_ndgIX$M$XPEVHc2juq#eqaWKnVjUh&9!1lo^+&PS`N4xi
zNhAxsb#FWH-8MI-qf0w<*Y#TL1n)c+B7T!_FHFw!+o0PDwIz7&_t*w?TrOt1hS(Ke
zR2(gyc@|uk__#iJ+lGAVtG=hWW)TYYwY$$*S*?})CP~IeAXFgC>}z<McUQbHnXC6j
zFX=h?Msk~duD1OsR`~J>b^}|z?d<S>YW~BXQ+OWq@bP(B)_}MJb~~`H?r3Xu+&1f8
zdA}6j&gs*#|Mq?{<r;dNbs>K*a;J1UermK{*sth%cYb$o;>GK`Lie>Z*whr^<XQo4
zhaT<&bN6|-_+^Hz2=1kzGo0UZ;PiDD{3$~A8<&!Gz6P|f-c@r*V4FXsk$Y%hIA>Qf
z3u0yC=9c0n^OIgNw}s{B2~0SAfl;sc>+5Ulz2j%p<Dx%IaH$0)$EgeyT`iqB6%0;2
zhRcp82}Q>_1{*idIBIxqUn}o@;rj}{?HESUz61P@Zzh`3rt<P|3_uzc4iTOh4hcxX
z1G^AB$$zIM;OXFA{Oddd99#$l4)MS4Q2>sAw`gGho9Exh7qP)`D8N5_V0X(#_<wg}
z%VfX!e`&ZK;2IoQRZLnMII0>sn3&i&n%g=dq?>R9C(!Jqv>f5!-cbMD;iXlmPJr@f
zA!?dVn(}gdMz+?>UyN-HO_<%R?f#YnC*Z~hB&|)HzL2|FTiH1Bxe31e*ByL7`tNC$
zcjW)N#mQ3eou<4JxtOhk2{|V-2lIz_Lg?h=<N^-HrhF>m691JQ_$T<z+{wv~kA=n6
z)s@+mo!QpGjD?k#mzU)O8w(p76L1HUqq~jM7dIvwN6LQ}^8d;aH*qv_fY>=fY;DN@
zmixuf*4at$-MhaJ`tR-E?`h%&`JX4*IR4jX0UyZn_X-Ou^9PpyE*r=y@b@gA62#5K
zN>dzS4b&O%3?X(dP9A}OW%&QQ^goaMcUE;r69+L{YapkS(Err>e`WsP7yo}V{_B}q
z|MN^XcDDch$p3Zazj6w&{QdO*RTclP=YO3ADq09#faSj%O$c4PIQMV6gCOFHYQPcb
zW&hfofL}Ub|9b>>hgHcUu}wHQ5jbgau$mkE!J@P7>sw;vlTR^9n7A$f+KkHeoG0s@
z5A`eSXNWDg=NAv>7em9~WBr4^x-DOau%|on1b#!k8G3{XcBiNCp5H5go>x}GlBSr~
zJ-ZO$QAOYoaKFMKlEeMeWc$}&0iH=6zx2gih;YDAT+AWx|5efCxb+CAG7{yqSIGbL
zE&uyFML5vO>4+l!+|d2sRlyGpI54#6^7j%soS)*W{zN7W^-_&6#+Ot|o^JP7Oy!#O
zkq^svzH6k_M2O_L2?$(h)^x5FAY&7gVwd}yY79X~$HHva;~!^6RV=7pi6UY6AB#VC
zdKnv8mmhCm?sM0fEHHZ<J?b*CH$)P2G<aV7oSmLdH+&xouaDs5<)JEk_3(Uix*q2>
zQ~Ig0e|R_m0RiD%Ek^DBD;E7gbSRIN)y1_zhr8Iq&qEp(7TfwE7~c|GWE;w5^&W{4
z@_*hBL_h>0N^Fr?pD}R|sy}9{_Hj*hJhON-_AD=F4J1~6Y;R{V9K^Lt#|@oCNMK0F
zJ<{V>iOrLq;u+0s6RF*1eAxM{l`he>(%$^5A1|Otdi~DWGEGYO4I0Z&^XZiI^rI3J
zN=fVjnutB3^7W%t>9_okBCf|vvkmOraSYBf4BC0Po6xwpgTn(l3Y5^po9QKHqMr5a
zysWG&bXgA%_wmxC%AL+`NvDl|dyl=dgIv*`?hvf(0(oMkwckJQzDOz6IHy%O?ax^M
ztrAj!$Pqn{$-@QLi^C5u{__sEqJt}<bf&{INJxoj==UqzuVeh!+lOi&hw1b2a!29N
z9D2;CW0t1f1&=uDZ*RY&MgDOzvHN1X<nXJhV#lf7mduNT6df3ufCQl>VuAcy#d2*f
zPISV%+qQg$Y2vZrv`7mOdx2u!n_&`?a!RHM=lzBi+#jmRM%FWB6zV0Kk>~^rB6Bq+
z1$okOC2ycrTyBGY&$NoVJ3}ewb!Nx#^9{$iZEmM*Wz!Lfinq&}7K<fB)Y7q<2F&Y4
z%B8G&Z60Dw7^IdjNhSOF*dmc5=Es08c=>-*CHBVQoR(_&T_4evTHQ{kLaEYg4L6&k
zEX==AzOr{9M3w1<PTq|Nl&IwUTUg3|P7$%*KiUFY&RYNAhM^Lq6$~T{sE!*3^-oN&
zxq*&I>ueTHJudg0t%!ritKZQ<e*2Lb7KuFj2&*3JFVed^cs`<13uqSVV>mcrVuP{Y
zPDFXwoy;yRDHv=owV_PaT)H}Kj|h6F><+DctS#1GOf@z#GP=_U6gKFv|86>zEX(h5
zl%E9SAR3>#zRud|TUvy6QZ%)fgy;Hn&o~8KQ%|mdy?5?Omx&@SmmX233aq)k%kFxU
z{r+>qira^T8y~(-%fpOiyXxOjq>w@E;W<gU-KSRVAb7UjOCwip09czpzSy~jh?9l#
zdA$+)_O(R`^BHy3)0<!8LPE^c4us~fSe*xWEGF{cQA*0D&4f1XrGC+KHL$#+BeG7y
z5!zu#)ULOXF_OT_;ee>@d&Zo69@L<q=x5gB8^gsWDv(J~G1$IHahzHYS>9QFVfMF%
z1~$)&O@~W7&Z}FWuMTxydtIEKQbR-)hOnZqT%i2}u~}a_eP_YT!<&P%J4wsPB@+F>
zSlt~Q9<H;R3zUce$?Z<&PcOGWuTa$6Oa_TXyH3@NWGtNW_-t1fOw95+UI{#o)#6B>
zynOke&q{u_(m>_d?ppPoRog5y2Q$R8<f2fwwYAZIT8iCxeglST`dCb_QqmC-jI3=(
zeVHBzqB^YB(CCy8AI-W~g0fBbAEw-I9}5s)S9#3|l<2kaY3U%L2$_IP250jM74>pY
z>3&@00xhJicyKs~8qcT|zJc@J7@98q{MB)rS!I?~c%P!5n6qT;qWC49QSZeaUs}UK
zcBh!cx!~Rp7WRyB|5$i<Kc~$BPColHOm{braZ8(T-luE%=rS}l^5W2@ViloWwc@pS
zx-X*M-1vFAt;W>y=^PPaldHm$GVydW7+b^HR&zBw3t7UxVa>kJ-%0(;^xN3v)A%yk
z%m#`oYn>OEIV1a`vUUdlPplX)WPxEB^OC6d18zL#i!BnJ@NDBD!ByZS%rSrx1J6!s
zRix!-WiG7AaR<Zo04Dp0f=LM}N}x9zIjA$87LKQs<nqqYswEh!+jZ=+t~{Kte_^s_
zmtR^+q6Z8!X8l%C7K65T9+k%u!@nD<vM2JtjpHo4=4iu2AeNS;l`GIr8Awu_`=qjg
zsZDQZr{7OoJ^9<S&GF@>dQ0I;GM;c!L3C{JR)0!_Mx~}ylS5Fr^9an>eD7jz<7g|#
zHiYOO%=F9taQ?B&U0RWpM&iI!m)`#&*e~0d@Wb*SLquw$BQ!}RwyjJOkXES3!_DdL
zPE3Ycm57k{s=sgIc%JkmbWxB;fUZ0W<;rFi*U-j013o}vtVDfZjXke@%(%Ccf)@!1
zDJJR|1Ks0#WMgqm_zjbG=+;oCsJp}V)IycXJ>RAF*qkGQ8yPr<`>skHAUA$-F{tEa
zw~q*a*BHwaE_5WxPt#7MQ+_w!VwO9ung80cXTTRaJNs!FoBbc)yLKdaMCy*9T99OK
zXtptkH|7iG3o!J<=l1HJzwQ1q@^2U5=3z7PdvV{ORQ)69(rzs@=B4>*Y{JI+OMKG!
z4<@VrNTF*;whJZl1bj|AgtzziB*zErzS>O=@Y7}b31#Kw7lPi)=iKwn)&y<tj}k!R
znvNbtsFfJAdV_L%<$inwC3-!<Bn=)<Iu9A-h*<PbMCN}UE8OFNXr3FC`LQ2gu>ONt
znmic5fsn1=f3({RZ^(S?mxdND7|2PH+PJS34s>WDJ_2*~r{}0$$>(xJY9@TDY*#-&
z)<-A8w^>0!NNwMX^u8Y#-<+<Maxv#d2tS<AgQdSCJ~a8^HF%`lw}vKqL%l<8=d6tJ
zgz*!<9Fbp;pfSEw%GOn^-be|`Hr{b0R80h6=tncr%pk8U6r|JI_ur0WFEO_YM4#BA
zegt58a*y9?eIfgJb8I!&`VBB+VrVz_Y6Zv57X^AP*Kq*CX<uz`ODh&XedmE%EmM!|
zv^z0P_k2Cph2*Ooa92<Nr7Q5x?E2u5-+HblPQSyaoQ0jc*1p@JM6DX6rLA4k(Bk|Y
z_VXAf>tie0TWxlYjIH`+wof@%<0YT#kzssPH|+EafL8xg_rNci>T7mhN-b-NTB}_^
z?EW$Gm`T)%K|6P?d$_(@k&+LCei>@Md{S`P4Z$(>2{{-_j;)Dkmn=gZ3R@K1>6Mpk
zcDQUFXIYmt{fvJWw*qdigU~ev2vW<ZiX(MU6<r4VRzGhJCSCYHvt$*@7b;{>;wX-y
zzM!mTrK1N=5l@#!C%g^;@qj2NPuB}~n(DN@QR}3l%S|In;)M-t07HsbY5CFbctaO)
zjHzz{z(rsHNT??ZLE{!wcPFTCbbCMDUti;7zd(r+XBO%2qv|sQ;5gYbG|mh<IjAGt
z9!vdQr6iu7p0qIJ1#di^yt*H}AJw6H1j%&n!|i!=L<ANRBI4L$%k}Q^Wg7k0C~#Vh
z*=UJBDG^)2c9kRoc5v(J*M4jVr&c4Ux8gK(5NjiOP7AdhFLwv}_h?bAo0c<!gWs9;
z+GPqAvYt1hA$|z%#R4dn0N7PKPdd=)y*S%^@3FNdF<Y^iS2}AWK9YdKvRyB;iQZhE
zeq_|A7+ZOav8XXqteM03npy2DKJ8ESFUdDvq&<p91jpN>yJwr0PN!=LD^<C{7F+7~
zt-8Fm=k55Vto@JX&@U>ywhp7v{WNadozu9&gJW@STi#RWtC^vt_N5<1m@);M+e$h9
zxBV(d9XN43AYKQ5{Wk3T%!!$ZzH8frflX-QvFzcK_vIdE29JGkWy{H8B1@WNz2zrb
z%l0gjSmef<P0NYN!ixDLqeV+yG?}e|gn$~;;i1v`SH@<e*Zc-#$2ZN<W>8C^4k53o
zfwoFPCo%y$n!W|s@J!2jXdJoz?O8rO+OnfVM8CJs-jvqa*;T<c+0zgIGSvb(>FGPO
zBu2=I_sDFb*Y?2UPWNoEfDZGC_tOl^!@kTtOu*eirO6?m-sIb>hlhF%zh5HQr5$VA
z3280-i;b&NpDLF^Pxzeeq$(oce-S0A-*51Fa$4JfJdL2CooJn3i}idnDgNx|6;CB?
z==`v@zWJD*^__c%L)g^>#0t@_al@W2R~7T-hT2b;F|BsWN-XoHaoZ=?h!Xio(5#%l
zl}ad`$=#o|{doI<%UZW{)E$jK_@SlRr(1(+xgPJ)&(HVG$d9{A3;TYyn}@05S$~Br
zUP<t==o8j!Pyu7*70Y^&MlGJ+>M@qwKe6$gfQ=tcKfTX59Ad=M;y4MUecU(3t08|g
zv^kviotUd=kOJDJ_O%<kSS4SrLyhGNcM26FJw?e^IN#T?Esooyi)*+ElNl{_Zl^N2
zc79E(+FClrN=m0cf{M+@MJ=9PT%c-h;$8mu4{>mzfh_v=0kNwrw~84;I-Ku`f@z1n
zC9E)IXf~CGnmNC#7b%iVhAOY`en6@B=b2Kem-$#S1ZH#}PGL{8NXKVMp*nH9Uh?Mi
zy5V8cZuKAS5yV~!45X}koG#UgySsV}3#jb$EBpEju4K82vu#zxP&|$^t3jUR6LN@`
zP?^A&369qzQ`$^P%qg;3wZ<Bq{jRXDGp!$Kv1vS1kCzsU^cE81)5Ik48RCD1)Serq
z@_Gs}>9k7(eLJ(iIiEG~C^oIEgQ%8%u0R~RI^q}q3voVu;&wiSN=m+pFYEgfQv>3P
zJ;@1Vc}Xop=q2~igfH3xU0t$XaGg|nI_MAAtEKM;H_z9XsGhC`@ownE$DZ=WRh7U<
z9OPxHCcC@iZ1@**7F%$}2GsY%wV`#7$?XN}AI=^+3eTTncWtpi0{&vm_*-6u2qpMc
zu~n-2*go^~G!qM>zg5zys_K28zYue{<)K^c@v|kzd@yKh=A5ejw6RrPro~q54JD*P
zEth9YbOlw!NN~=Y**Gaylv6$z-}BQ1rT<`~)AAE53P8Ec$&-#X$Alq+#M8Ksvu`mH
zkx`;AT}4OhET-ez_oozsy6arCnj2Lr$?jv53X^{JAH4UEHPvcg5`8L(6UHaMmKuMD
zM6X(axe+bUgnlj?t#^duzSX|<D=RQpUFl4WcO8H-=CDBeja|IE^g@NWZ>Dl-Qh&XI
zJ}!$PDn6HkKy-bL617Y*2a_r9OcvYBm23)>b1F6Ztlhrl@9ix5McWTmtLp&6p|>2>
zlp^q;r~f_Rl3Mmv{@Q~t3iiNY8}l+rjWC*~=UF}d^5Xr~+k$D!nbPgtCU0ns$EAhJ
z=y6M|Ac};E$NsURUQ_+p?JDJ^W4%Sf)VWSC#i$3G)1VoYeV}g}X|eq<FO@i{Qq%HP
z)h80)o@cpKo^SIFmc^|-`Cj>aPTf?9^vl-HJVT6NU$m;(lF9fENgK&s<xj;beg*PG
zmHtih9Ss74ZMXc*33nskcDj3`NEF`k*J;cahvzy>-vRjFId}NYBm4JJ$`E?t@LZe6
zM224$b@)F2fRj7HLj4PAsDK^``VEHGSJTnW6)EdkO#h(gK2_HM3$Tk}JI2(FB$R6E
zaH0m+s{~{27D--@sI_^R3?y+kDD%88v&Kw{A`uQMkju#DexEP3`ir7wfFb-#V`d<H
zt=V7+f>n)fm);BH2-NF8Qyw79g&OB1bQ<C#7QQWNamU*(R?2IGd(0mR?`M@uHROwo
z?q}3$j9CTA&5n|(K-GX}LVVUo=yCV^BhDL({ilb?YYwkJaIX``6Z1!txraVy{ETds
z+37jm(wY`2Vj|<S!W>TP5Vuuqaew5HX3u(aMyFK8n6UnJ`46kFU0O;&yY9l$+%4X8
z$$~Bt(KF#h)Qe_kwP+Pj1J6gJKbn`kPoSX~`m*divaD^u)ht#j;7Fxj3I1J0Ly%-v
zx3wH`vAsc5Ld0BlS+|Lguy?2DS)x&1gHB*E*zMtcaf4Q_(~u(OA{#E6xivF7NHM<1
zKNE)-Twkmcl?CaGY@4bvdAawCBGVA0n-~poo4mzHDuSFxmH^&|hxNkG>|;+S4QpGx
z!$GI}S~C`v!I=zbTH5Ll&sZ9Mv^E*dS-ZQ_z9SF_%RN%6%JFwm*v5ONvQ;^Jo`ojQ
zEM<&}I%EZaotZYbFh39PHpdrAaKzJK&r46+oupCndvL!rOAYL%dA6k)PUlqY=!h+~
zkH@jW=HzMDZ)+~z&Z$Eipjs#7+*0%)^{Wpzn$3J9dws=u^M{3xM2CbrAFmo<>p-Cu
z1@o@?ua!MBKO)P`TP)NcgB2UYrk!G42C()Mi&yfmG6mMTtzf<ITd7ky-tQTDM%~cX
zgShqD9U|skcfe7kf@qGM5a9z@ak&L~;<k*qQS{Y>d|Jb#e~|1hMaUoObX&g1KP@Pi
z>&F@pnndX*bJ5)z&Yh>nkUjnq?-mWU@Mk#xI*njX=|;!(g2O#e-Fe1cv0ofzm$^pn
zaWt33&ZVXdH_Y-gk9Rn#V4v>MMBj#~3O)HpiU7dFohTZAc?)VGtT@v;cd!m85>%_7
zAkOqfTZq~+^DEu2MZIPzA1>G7R$ZpVUrF#i7g%vL;&I-eQAQH7wzih;Wi>r8ZjU4-
zsqlCICoW<j;3AqTIO?LyxE%aR^|@*Pj((pU%s_>^+E?y80ix^pU5Vs@DXrTmSpIqS
ztn*Mi*w!m~G*J-a^8V4xqNkIkn>;o}y<69qIKFHcOVNl|H~JSF&*wbrWD0M-+z;8H
z=YWur9RGm%yZO@Pv<9_&ZSU!$e5UUevsM1FVffT*b`V;dXAB#Q@S)S8bj~b^sK>a6
zWn>hLdg~wjfC-T1Pv!Z7xCzZ*S4&psFK~I=T$<SX(>j$TgZ<Fkz0Ktid3sAEKTz11
zjUav~rj*cmf8MXz<xr})32FL*Sc4?>LDJu}6P#b}@n_Qb^<^$1kLUH#2t~nKPFE6s
zXdGN2Vp(0VqBR-5n@*KoibXO;WfL1P=r~55*H4Xyl7*()>qkF$VX@F@Rp`=VBSf-$
zG8<z$luf*&k8n)%5+>r38!+=4&dv)|lf)(ymyV_30x{>WD^=9jV`c5H^f+Y6?$D0O
z^$*&KLCUQEG%_`{coH&iA$Qhrc<&(&Br<)Ex$gP?sYr1-$7yqqbNU3*7!z3k%<UeI
z-VEi;mIr`VP7dhAyEh`;L6=RvTsuYrldK3qYu@9GSODAdF%^rn@8xubWn<=UYk017
z?G;0)<=xWk6E7Ds^-FtI%WIpAqEDk0@ifjB?Z`s9nq+>r^kC@kpJBzSg<SCg3%2sd
z{ElRAm6dAVga~*(jRg%Py?@D2NBGc+u9Ramxt)OMmsEL^L?f48l4>t6yr8R8Bk*jG
zh{h@#t(3}5>G*KQ+bt1Zs18E#0%)M!KJoie{NIUNU(gI?2e$y~b-HxbFK^w<zCdnw
zx<jwE&07tl5ayf3Kj*kpC&cZnQK}tgF<mxLo=6e#liP-;q-uS4a(l{EPCScxJ=)i7
z?!-|lV!gLqiNXTHGLp>tLU@}AnzoQ|%(JLE`V@K<aZT}`I(hJ@zyFOP#~bnE%b*?E
zEMKx1Q`m_jRJv6Ap84gUA6>ucJL+TwGM4d5QFn@?QEJc`Bsy#j75K-kB2jM=+|bH{
zq=!?vFkk1LTzZ4A8!vYvC-s^=pW%6V{;1wL?KY---~_xE5gZ(-UkWlcbvQeuORBb0
zKG#qD3<ZrYUpnc&6cJ?ziF(#y{Y%2YYkKvPSIq%+68i045fu(@N(k1k-zOSX*4^E+
zsX-p!E0-_;j2khh%STrwhyANXwFVa~=X8g^Jxb;70umu=zRzu?d}tl^l6I9f+M-D&
zk+ImKYN{&|zX19vn*&<^F0Ls%4^hnbF`ssh8UtbypS=^I6A8-n9GG=M9!O$QEZRSw
zuTO(@{qciQaa>c36$ou~`{qIHRv$Ww08lKkAY<-0Jdai4F6S?-0ji<bX{KtZ)=;N-
zWlc8f?WIPi*p&$eiF0tLV8~Qx-d3WI<jD~^9KAq5*nPPD?sPt5jlI%Tip+<0V(wRQ
z;vf5+V7LJJa-Z;R8V=dQh~E9~n`6ZzTV5eq>@iJ;+8lXN5{BR9>9-gg>euTj?Ayg+
zg~z+RA(p@#gnNBc-Axafh{he?1_i*j-OrO~+)Y#df|LSf%8;V%=vB{&DZbAusM7}p
zNM!3enq$$O9jcXN%_aNlItE9h%RXds_~xDjgcC!w5q|5vSnSOb_0~e0>XEshR~=Tl
zFnk7lat+fo3F0?GMr|J+qD7n-0z4HMf!NfPx6k#`3y0Q2@l*Fj4#-5&SIgC|TlK+g
z)2nJQ)Onv<b&f4x3c*U-PWkA35GLmy5MWaQssrL1cqp6fyQ5jam*Z=svwFYt<xW!0
zF*|J3Z}TW8raXo<N!s3MS@j&&^?WB-mDpkcykh~QO(9|XHMt^TkI&3>yw<%Sn;e_2
z(MzX0*XRykI9}dG<>B}<LFU8pU<yNC8c6mLET3R;ZT1?>nysM{a3@-Mxj(D%To6Xa
z((ZvQOZO?2J8oe?b(-O|I^og>V~_14!Bj45Z0n`wIQ`zQA9e{0J8k~Ki1PZ^h#Kny
zSR!p36P=$IwhUT7ib$QJbA)`(;<tu%<Y*N$^3MsF9YYzYPQ*awalPgEt@4ROM8)JN
zCH_2h=aVdt5&mG}xvDQOibgBjF0w;@KEQ5e>s$^crmyHCqN38XqBFeNrcsk=<Sn$T
zt=iG&Ap2>^)Gf~YQoahH*Jc5+_-=KzvISX50O4)Expzs0r5YLO%2Q?0$rRGlsD6$U
zYs$~0NvDrRTwn04kj{m^4U8uhZK?dlJtmYlg$il%*Sxs=b}P0F7r8<H01T$%ZLok=
zlkxk+YE;f;r?%WZ%<JIHN-5FnjQrTxUoT}wn#|5)^xE1|pjXWs6ANen*`C+ehgI0~
zCx0Jge?4Y3(I~`eJ2OTnLiME<93VOIgZjM~r`-Un%va4W$BDWkc^opKwSxY9Dhfq3
zHV8PYD+ohrfs3hV(Dg7P6_&`T_c0(OvS1dZ!S;7#l{k*(jJlC&A5tmR0Zuoc;}&QU
zz+3`?0+90p^}Pp6__PlJu~wdkXJ`Y_6jVc0tCP}kg_DsP_dA^dAriA;pj<>6N5_}u
z73p)+ZBJ7@K`!=1Dxx{#g3dc*-)O=~@R-2TXiiv!C#4n}vR0O*IO?Knj!*jHaWwLi
zIwyHZ&QnDc5}knP!gi1QGokfzJ8iuBy$ciMp>cIDbH??7h#ghN2RRd3@Rt#SsP?J$
zV(vy{=Gr{yYK`QWpz#fQv*h@=Ye*-nARJ8Q`Neln&7U6_0qv%tkj_*6w7Byd+&c`Q
zFo3L5x6BC~1l-=-E~j~Ry0UCz0U!McVpb_ZUre!{C^F%k{K1*Aj(x6TrE=Xtw$0J3
z5N(HU$E1<Nhze=6oo7}n5cCfgEzmrz+nu8nw~-Ut1=K4I_UkUqZoBBv>jcEM{n^r<
z(M1V~>q_00^`<6=rw3{SYA<V^ik;+V*F$^;wGSO0nX*!x6e#1v^|-SAPS=@_b>4lX
zK1)ZF&paYdAWESZ|9K4hSHr)F#<v9iv6R6$dCNS%i;x73lkxTMjczotHLMCmY#P3q
z4`d3ye_rzyZ63+tKocQUFd0nDOBf`u6Vq|<t}d&!d3+Nq((4x>d6AvcjxefeSDLXO
zry~K+34D0ngZFGx1}WS4&&p2?G$F^aj@i_1VTgwt=XGC0e`fBMBHkf8m@`MuMjb(Q
zbMsbNb(=i&f@HX?=fErm?Hm^0;y=%R_35xHno?Od{@stp;W;9jt5LOsEn|Vg?%SzC
z%<jT=+kTSITU%I!%+_s`aH*@8r3^UP6EV5ZfaaWDuiY*@PfLZSNuSM(NlIuHk$U<Y
z*;B3U^B3)=Jp*j`BTjVTt&Oo|fcmws;ubbwKfRP6$!w95PphAOVK+}QG1KG()pb}Q
zFXRGPc-3e4ZpdpC4U;9O*p<^@=RrE#CEYtg>hjq7eU5FeW`3{o5Ss)Jf_M&CC1@Ge
z@vOXl>bYLnQSZH=JuQ($?iZx}Mng#jAyzW#fQ`5>=zCJJ7U1-Ft1W-Q%%E4J6K*j3
zxwX|EC?QE_?FK-ksf-sdUO>(hGcJM`Si93US|dP$(l|@06=}i1P$>Rs0|YoVKh2zO
z+U<tMtV1}n?h!!PNuM+7HX-0?5u2!oxbDK*n|9Bhh};5IFt&_zX&zGplt^K^RDCPB
zOHE?^PmMD{n~$}SW~uf2_2_#U(Rx<vZ}Jhb(54=@r{&3Fhx{{%Wp0P4vQ_d9FGWFL
zKo=f&%*86~WXJz{^=sYL<83uqy8E1FwF~K?ES_eGfTdCJy8F}aKmtY)jlsV5dm~LS
zl+8qDqP1y~j{W%*fr*2qvt`_fW<1uUbhjr&Lce=7{@x7wgBS31?H{A?rAm!Ux%74p
z<}j$P<GBEPV{r`KuQsBEOs8Ig@RzJ#oy2J@{q^FSYVyOqOh9k>uk%81(y?4$(r!nc
zo`1?T!jnI<O~4{)C?<abT<Kw-KJhx7R-FG_k^qN*hXGIny>vgaH(;fskjq1Irej<S
z9OlZkN&a=+FGbGn8wijyerLlDbP`AwrB?K~(Q_UEBbB04l#+hx8yn1)>5JD}s&A7+
zL#E!@x@`@)+hl>V{f)M|Xlsu95vi%O<Mp-A^42Ck1N0}?YbF&bobOUQc@`195;?p9
z)0bLk^a9TIoFt*+pYBB20q|!FYy7xQBd3m~y496AG4Fi4W}gc;^P}gzn(B{0;rd-m
zMCyzTGG)Li+!bngBXe%J+%7!+>#1Wehs@cEtfDEUc6)z&=V@`U1fs%!C8vch&OqmW
z({G>ptK8RYRQCf(_~Ea^=s4O4F7(BwCQqfXSoMoX%dFecF0H9XWxZUuJ#?ES5*~A7
zJ56<+@eTF#5X>XX3!*mPJ;{9@H!EgcB7LPZ^pLP##dL{#-Us^G!qr!E*~S&RyynM8
z5yrN*g|<iiSPA&S9{t;rmcOT#!@saQ0Fj8KV8%5R6w&(bG{JL42GxRi(vw&?`&^pC
z#?28~ot}eI9+{U#%CZ&EQ~;tVuU0(Vp6!68v_2A__nx=?sc|<d>4lfH+>b6$h8)Dv
z2tl|xuXR<|SIEoXluZepRT8}{_G+5AbEa80AE1~q8x1FUth=nA1&B|Ntv%B#zS)^u
z?aFF;y16zTT4KJu%JFlFR4@=St4Mvs?1mO(D!-0z9T~lOmQRsxaXBvJu8at1kHM0W
zv1<T4ZHeU<BwRN66k>fv<juR)mcp{^wE~qYgb%C%z@$6=Ex|IPYaM92e0Pt5DJ=%Z
z-E9K=tr;P)RIfhA_hpFw_0mt|Vu#JcQ0Q*OPr8wIQo))yK#YQ0d@6l%%fXF8CUll%
z0ZX*R`v(zzcvSK7zy7vBUwoJ(THU;8-1TAEy6Tm&hEw-`Ih3D5c%<<_@!C70TbSb5
z=e9|sJhcRwp&UzAXngLLRlP(zt2K8e>3lL@QFdE_j1ApJN~&1z{;2Nw*Q(tM?HDwf
zVCp*Sec}?O_VA^%&BH_arnAH;F}E+)*PKZquj4OHPV(9xpR=uD6PJ-B`(3H&WV)Nk
zy~cM7X-)2D_n95zIvvsb$3X8z!Fk(rs5waYHEq~<ZzBJNJRx^FiInw)k@v}1%HE76
z<dsU>zEg}!p554Nn4Hqtn~>)_972ib44$_I>Jxd=I}dZ+@eF|3IjhH~8BQqVY3RM(
z$x7mpHpIp|&c)p24ZU9_#aVHgw%{b5sJG<q#=?_zyY4XZ>|bKu@Olum#fw;b(>+T=
zL3jHL;0f@PcPCv#(Jdi9ckpL&#sRTxiL$V<l!;%escQfz6S=<?g0);L1s(<kXOXCG
zeJa<L0+c$NiOnlC>b$<xgKCrws0hI^f=>nVBon{UDCwL_;_o=g7i3=QF9|e-&!7H{
z<99p?C0FRT;BD0t%xp6oa79_nRw&G9bmqtsNzR>d?(V8$TlY=S&mdCs8g&@$cYqq1
zz-Wy<nrV5R&J$Ve@2vL2zh!SY+6=tqbK<au)h!-)6Q*S6SsUui*L%Nx&6uqCycFlz
z>i%6}&)uB3W~P_Ea>BpGv9BYZ$@0yuvix9T<rd8VbYq0V!5aNNo%{8XH!-UPf^?j%
zX3hlF1Ll02<qPQ(P0vgj^H#%6kH5;VL&~*-{cAzKIF5U5Ev?dD%^X&=iZ+GXag&9z
zl3ZLf&EJDp*3QDWh7IIo6Dz)*@J;>feE*-vMS<?C00)+4S15jo6cc2hlGCmc{2N?X
zpn%TwJ)ea;9n#PjpwJu~$d0-EJ@R(C^eLy=*@E!V|7l3;9C8zSx{BQS&eIBih=kLj
zN;zP@LhrsvY&-Ln`9!2yvmzpOe*BSO1QB=2)19S$5f@ms($keWCXl5La=a8Ub=s0C
z(U}0?j^<_|)f}Daa9Z_zfqLr&e}J*JeHEYn!Ja{W9a**eYLLHyC7Q#;LRB0rJ$IF4
zfHD>wvGA^r&vgseWHeLWmiP5`E0RncqG}z@uYrWY$&%L?^sFe+b<(1x!#r*qgIM{i
z@^4PpC;hy2`bWs=nmk8+_GZ=zJZ{%aisXj@$3L0o`Ise@&l<bU-3a!f@bL4>SA*ho
zi+7kl!RbQYnGGorF01+wF&S#vH|)&>`K(u4!wXIqf6$r_okAk*0#Z19k=rmPgx*PX
z`0QpId)d@HTqcnf*=CW^OUF`u(e8I1xBX=|-{i<*&`r^~@qzn;`wOu2%V_flR@cn*
zI-f(8fq43Wr{btAf&8nt9%Iv`AP;W>7al#X8(4N8Y`fN!MaeoGKb(vE@!|Yht={2d
zjkJ0Bl92Bcn|u~)QeKR58bCXJd}d6R-o1@_X&%Rc=QDdL>ELsrsbhSlp80A2Sx-i*
z)^uiB*y)B)8slh^midm&5%3B4pIE&><=XWlMcyjQ{hv*@Bc0Wn;}KN?o_PYp+bk}F
zop#SSpK{Tv*Her>q(`O7C(}`AX=#_t{4sWs<`o~Mkbd%!8i1d00;!cN<p5N;V=|+b
zO0I7dw4Nti$71uoTetry7aQTd*gw$Veq{zi_X>DTDNa9+cib>S2;auHI_&b8jHE-&
zMN9^!^U@|xep3XGW?+-eD||#J;JE8~o_9{01n`0y>W9`xN;+vL03cZO`Mq_;HvH%$
zlnxqotWrun_E*Ot<&ywnV)rFLT`Wct@z2o-yaC07`oPe@J(1<s(_9(#z1YbNPYJAC
zGLm@RW-CrCQnqh^cmH<DB!6k4!<PN^d+k4T9GVrP*3I^l$~XrX`}Z#|kFPPfy@NOm
zWJJzRR@d>6SvSRqrz*u}W;(I_&T2WZW^Bj4c{K`-H~|c&fcqXJ%6nf8Fg4n%lr$<>
z0)?2zH(NY|w#SWARgayAeyg!+NF4ITcAheWR|#h`<UanfrLl2>zMbXx#2q(8%<EBV
zQcrv~<7ZUm>0LfxNNGGh`H9&*=<2P;|Lkaw^}c7yeMu{y+vLl#W_g_O^CnjxFaCk9
zf=;jL_*mGU@Mj@<5rjX{3@T;gd&!3S&f++w-N#1h4A%6WA$n)SiF-&`fm}Y&A&a&O
z6I;B+Zn6lr?dNp}QLWTpG=~$ejHPXueKY<&iDkC~P&Q2Ohh~LM3^7=@%u_uhn=ck%
z2zuQ}>4<On#{$+(1E}X7Nse-@w$Kvw(md|MfxC#bpM~qs8Q)HDXvOP}|2+7#-kcWM
z<shiFy5a3Dmhy9Zn$GBeO>_%K)7OO&K7@j7m&ZG@4A0%{5B@>0+3>H9ip>3up_tOy
z>SL)yIUuL;i)XM_@E{=c`L1D156q+N=-K^GlcxP*Pp~I~@xW}V@js`}xj?UyU`XC}
zI|t<}FoB^fc^iORr2HPc`NkesIqgS_a*g(-gwyH7>s+{Kh?2@u<=+6X2L!}+UzAO?
zjXJ1a)&t+M5Q83ju+Wn7jes3n=FNNMl%qx8><~_~r%T#;$YOd~86#)=sE6|^c}!q*
zRvILNogf~>XT`{**%-fc=j|ny)AXYL=g)$xLv58P(hPb)ye&bY+<m$1AO>p#6du2!
z>@cofDbL1~3s#g5`QB^=^5b~%@vPfG9DVCqFyL%^^yPrOHi}Nep^Rdt!?`}8-%KbB
zP!US)47PO`0zyOeQsR)*fCb{sxMoKY_k}CLjctOn1I&F?A#OTepRQM_{I;yOsc1?e
zmnmC`QDofde9l(g!-ZkPZI9!FFc_>@q3w-RQWny@G4sC||GVQr#J6IiY4djlm6jUM
z-C*c|1X%hO^ELnukJB~v=)J<z(DI@KHVV!`t~O15M-2t|D$D0cF^$VMYKjaYG>(h#
z)qg(A`O&=rB+!&#BQd3k%`i%8nOCp_+HTMLt8#QU32CL+a}OJ41qt~0?NM(!$qK_5
z^d|~B=?lv&aGhaK2NnEeD9vQ{#&|AmkxANdyM<DXNN3H(4pcQ4E(N0GaGv;fs`mQ$
zV(XG5m%>L*NyVQkrS|nZviA0O>>2!yp@7V$w_L9?M`cb(XXG7>e7oG1`OpjiGdYN8
z{yMM=ZXx^L>mFGKwLAfL&mgbhpYH+742gr)IMX8CpqQ6>Us(b}q8Qw!t@hJOx<s{*
z#snH0#^|P{83&M2d@c`&Z~0wfpY%HBcC^tg({^-8^}y1yva<8_MsHuUqs<Oz=A+f0
zySAxe*p9U*Vk84%(~M6Mr)E%hCiRlWac})53-4x!O^>{;&McDnc(aEN*uV`RzI<b^
zq|L)*Ye%8#x`gv(f&RLy@Ka$DNVig@9A0`dp9|o>H=DGYt*{)NoF+8TuAOOhl9<)~
z%bBJ;YP_4i!8SY}H5wPZWo`fJNaJWC^GxN5RsQPS$C6kKa-Zz{OH0$*G5?7wko;s9
zSdZb8r)PyKBjn*05lbUq5+$ddF;Os@ix79$rI;?A3Cpxu=99!{oA@i%Dbfwnj<Lw9
zsrmVXc7(fed{ky3y*DCDRJCB_Ta~xP!VD)Mcp}2?LJIlS`frVHj780qFk`BjN}=?}
zBo+`mdb1Y>7#cy+pnRNl|It$E?5g~{#9NiW$F^ye<5T7u6<FUo_C#9``=z#aFe3H!
zp|G6ID2y)jg%BCPyRfgqOB%WSSsFj3IYlQV>UtxEm<c}ybw<hC^UWM>&Qj$}0p5rs
zc5A`I%gz^O+8tjohHorMZ}09bzIWVN0y+3yZ6tvu1LP<^1(1mH-~fYK(-+b&ib4u$
zL;SIp!(ambu`!N!_?B<^o4=!PjF$R-LPSJVDrTGB1@z@Hca4-GE=oC~x0i=3fRO8O
z{yLi$AD27D!9H&PFYy9MCGPkEk1U<jkqw|Xqn}T}@4T1s6McvJPU)>9gkW~O-o3gG
zuGeGN*G*vQYGzIHEFYX(M^EdXfy<ql@`XFI&%s4Di^Lr66NCfFtZgIqyA$er6OWQM
z_ukno-I)LR2!==XYW{1nAp|7;v9lGKdErE&K12q=bQE}f3ozVEG(R%29|%Zi6RQFI
z;r^!EBL+VJ2=I}CZmz`SWh%c}iSi^s$OU)xp2tAq4;EYaBS5U7WmsK>L~NV61TYuE
zakZ#4R05{-9<Tz5_jFEo?^x@t?8QuX+N`4Ld>!P1T+W!7I+vercO^QVIh|h=5EEV4
zHv+(Qwk<HA4$>8fH&rexX(Nt>ws%GHAsm~OkGOdM(?Zl01H3faL>msex6xlxn!n(;
zG=8aw{Rn8T$QWv<R$)ai6VnA2_64GU41K~57vkE@PMo*5w?yri(_6WebXtk>1&V1R
zypE<gwce9iI>NMyx8F@iwWKN=!;Xz;5vheW824s`z4zcYx8QQ$eDyx>jRMxXNM9cd
zho6XTq-wU9vYHI0YArumB2kB6A4&>e+(gDwW88M5<Vq<1$Y{9^LeG)p`JfL50mOK?
zXkymO__~IMTyIaV;(MukFK%wvlG$wP292f3H>(LqDg`p&1+L1RR(Ho;(j(H$sVZfX
z=D$+t;D4fO#=UX+tNr@3S?w!{<}ZsO)|R%ExN}^Bos&qyY~Iorr_iKL$oy^QHUQ<P
z%3pPFbcokYR-D<`P1q#Q*y{_ezF1DnH+-IVUzKw=m?UW#460oM!R!zf?G_Kb&GlY>
zreE(+Ue0B2Bo3FV8D-AU?e5?EJ8Uq#p_Wf^02vs5i<E#KcRWY-Mm}}ZJtPU5jiaWW
zfK;doH)Xe#QzodPUGFyhqapzCa*uhR+o8Oo+LbE&G?As>;ZdG7Z?niZ(a7pc$mu1M
zyA~Lxsun6`z>03#4zQBK7jELWP3o0y)$bTMGzwju2U0n|k2fVclL@#<aawS4TBO8n
z8dz#qdkIZfsLR`S$N#bgG|Rhl?ALU>d4Ps?EdDtnmw5X9eij9P;$z{8XBY4)b4)pv
zegP5_kr|%Ccf7S$ySgQ+Ed@RX13Xk!PZ!0qz<LeKgFMe`g$tCBYe1km)tANR9LeWB
z8+Qn6?_CYNO`&~W81$=y-CfIl79meyRAuUtfFi;;_`kqVEoOfrQ7a4?T#*%2zK*w=
zt)Pw|<xN&8kjr_C&h%hL6tVqA2Teet=YkguJ#I`;uR!TuU#Pbvdt9=mGuW<Bws*5P
zCF6SNL&ZK=6g}&sse>-uH=!piHTq@enfibF2f~IdO27{wYP(fu>IQUr)!!81VWh4-
z-OEFXo!=9e(SOiZiu#*<skjMRBILiqxvT!<I)M;$#tLA3)dUMH=)&NAt<d!Rd@3ow
z0XI6K^k+)frPx=vxVT&GOy!J_iNKf(z3r<Ue{Fz&s?fj0L5V8aUypSu8`8q?ar#O>
z6!3sxD=w*2qgwd$qC;5Hk$g~_3>>redbiWt%;Q<eX)>pb3ak!!e}B167Cw^SO0eJ`
z3z;Y=U?TaX!fX>gS?Nyd0?^JoV=?O&%pa73^J&mnj^>&=i*gPDcT(*;iLy6VDsBCx
z@b+aX3N;qC5FjsBuTawuGUTtbHF<>)H*GOvBeBh*Yh3DztmB<AhjebHv@UUZu|GF@
z%=DT;MM$R0Eip0iuY_rDrk-*R(Bq-F0YFr{$>OcFIiq6%CdDjXrTyxf$=>-rZnMW>
zujK86per$_wMv$imH&da38+U#?FX$QZv510$Jmg*4KJf|YpC*0y(l0tJG?8md)5@$
zpBd&!<_T0OROlJ)j}Exk21~mal;69enE-1}gb8U2TlVIzPF5+s=eCEuER@*POXBOC
zPC+*1Og2*=9v^W!CT6T#c-@}19I@YzSnFhq2x&JPGjH~1s*^3`N=Du4y3j~I8NE#Y
zkCom4E4^|KtXbkPa_exk(@9KenEG+L-D(~Y2maP&+(Q8Wka_Es3QaZGl7z(Yd)es}
z!NC9#pZUxI(yNP<^4KU+{X$@++71c}Jahn9-{y>+W5=dw@c*^<)=^b{>)No5poFw^
zgQSFXihwM-8>B-*x)&-c4bsxxCEcKcz#^rkyJ69}h<9@K+3$D0bH?^}&R*w_Z+v6(
z7sGg-XU=)&b>G)Li+eO_UWztf4E$Snr!~&U50Mqe^a^p(I5m_TQ}sLI+MMQ>(pwW%
zLoICE(|46dNIt?=YQw4u2#<+Kf#HbmN#W7MG(mk15aiY0rIBWGv@}n8-uR*%r7gm?
z4o9A$vjM&H!&sAQelt7RMn}W2K0gmxVjQAli+uI9;_fwexo1C-h@by(wu;a4=S2PX
zs}DuF@k%E8#>&92Ob_L$Tvr70p8qT}fgNXYACf;!jA1blheDy_=`S1UWWRhK$WbUr
zY)lbZ!O~tuh$stiXj%@mh7Z-M2sDza!uQijo~nL-%GpQYD@UEU)txp!*K#l7Hi}fG
zx=yX+*%3m#QnJc&Fjx|UJQMz)CCO&IA?Y4EnMCnGA|cF}Pz1{BJlEFvf;`z>OfVEX
zs~}&!<?F5PPbrUaR*Ypb7CZ4C<brN@kAxh}P!gd4d{$k^z^0{bzD_kAI_Y`6Rl4k}
zH+CI$222c(Q&Kc^xQjB&Od)HAt)dvvtAnl^;|-=LfR=G;*s6dIx!mi*99kKjmOSp{
zw0&jsI~SdAx(R0u(K=b{AJlbrh=}vpC;$3pc3anm-))uQ;%wrTgG*@quYxLrhUfo0
z5^<t_Emw}q)MyY4{yFK_NzC2WkHzur<@Y<jld9IdxheFJM(SvF7l%j$idLjw&pxSM
z<S%Kz1j@Ei?2Y|Rv8*~p+M}{9p#u&lEtq<_GutAMD^DIn+iqc$JR}k1_)%3wDSoCr
zBP^oy{to34slb)!MD_OR=1$Js?u#War#rMVfN(WYT|D<n>-ohmS}XyNZW`MOE?eQs
zSM{uu>tkW!1(pMu-28syZKbpfmZqi>fZUWScKd8cGxH`ZZv!)B1^WVBf#Qyi?Jj51
z*)c-mqYDny;w<tQbU{lA)u74|HBsRmErc=Z2aDGUv#m~F_~Dw+Eg}G{(39|tiU)%Z
zR_ZspY{h^1i25F=3D&KPy>M@~yArYZ8R$bz8WnXzgV=T^@|)$^!P+XHUo`ptzJ&JU
zl-gQ}-d_jbgwH2)6zrh-=hj0WV;k)=mMv{ICUCD$r3s2bT>!uW^ug3bzVb+k^Vv27
zcl`@K_j^5yh^65!4U-<ji8Nn?GU$B@CZeZJ<aS*4I-9A`I^YOSO<F?%@S?){%&|En
zf`&%*a<K2ha_SSyV!KUEseK^G(WN6L!>!~iD~IE<0!mFcwpTB2uP9PB@jF}XxORo9
zR#;GC&}gquSa1U2dy+C!ufY>x9`j+ma_z^*u7mxO+iS~mQsstjHbNKCDH<QqmRAr6
zmar?zyC;4XB0koN%HwGX&unr-pXiKqpOLeEUV$Gxc3dlo+kbv{=y1XRHs|ii*zTn_
zmVtOUxh#mjE!VHw@;17jeh_%`>!o(B2WjJu_oLG!LpdaTBi4PDYZ#ZSRG0x~Y&BVv
zY!xc=<yV`<2iNVX90|b9`XSNP@^ItjM)DoWK>Q~!OKMB44&%`!#acf;xTHe0v<&gu
zyNMk|#OFc9qF1MFpz-4-cJAtAEemZmCWiaVgseH2vMmn`3_yuQ@un%haf2i6dKLht
zG~ttmJmn>a3d1RfGLHLYiF}^PG}do`*D0SX#C<}NtKO5p*wbDOc)l1F_TMOpa#rs{
z#vR`-6ZvW2&|{$9<r5IeJ|b<-0hE!|wBLXTp#<72Yl}))ve2n%o^X{?GQ@G)SUn33
zC7n<_bFw`AoJn$(r((WVZz~c}(8Y;S@j<@aq&G2qq)0FQmg9IO!$y(rDO*o60&~it
zfppo~sO9*&HwGX|?^V-ZJgRfsMUzY7_M2`%o!UGCV(sZ-lPZdFc1;VBPvjRj?@i3n
zDAD&rdlwMEO)C=<h2MP@l&@A~fqTC|yOC0_$&1AyjcHn|3t!IS*S8r4ohs(Di}MKI
zPXiD>+w-fJ%OcK<8pXIpx=r7B30-zM(20fhKR&-*`+dX-(u*EGT%evk>P2=$&P&3m
z7{{td6#qjk3xs#X&$c?t%{$1ASI0PAr{vzJL|&2fgnUp79`WuCi4(sh?0VNzWGF0v
z9#&vI7E$3f<^_TEQP@PR4DCF^SzUy2nza;Re=1O~#BQ83>$~O%tvgnDOSQkYMul)&
zYiisbRL+8=m3O#?eb~#9OOYuq{@(W~>WPZtU^cqyYW1sk=Uz?Xel(^iv8;MoE&zg#
zq*pk+u;i?DSeo6=G6nzgp3S3+adWJTdRxxM7{o4T&cnw8{qsI%D(o0$uPFuG^<mDu
zekmFn#riyG!bH%-J3dT+>)O;OgUj~3+Lo^$)C*vPgE9tN#_uDp`5Wp<{FP~iT4jV6
z{kKr<E>9dqpiusgr{_Z=Trs_iy-AVl!v%Tqf?=R#&(_f~+i-Pg^6R3fC{ZQxP>JyY
zDa&_<+U#Oo^wUu8YM~fpCOn8P{#&qs2hv0ATtWbw9xifAu{_L1AMWZ(7%7|*ZJIP%
z+}g?@nw?h?ER#$07Z-Y>x^Mjb{b{b~Wy5*0fV4m3Qwo|^&3q^O@d_y4)qszYP3*cF
z5!0xHPFD4?qpgyREI_3**GXhKtXHr77~qHuGQ6dEm#S`4N9g^jKUC!WGlSCey3Ti^
zs3Ju2p2uXF0F;gdxbtFn$Xgd!gwm%2%O{>k)=^9vF8Ru}x277L6F@l6`9sln4m7n1
z^S_U9NUXL^L><O@B9~y^XRx?GSM)>s<EhtBq0(@!^v<s|W7Se4Eupv6h(JIM<iodQ
z*q>iGc8AMcQ(aN~78ylj-?doF5smVoC3l=*-&nseHo)j2MdfjuC>4Jl{}fuIG?8*A
z&jrwF&HMCI%U4+QU8Kj%`7w+jgeuRUKjzHN*jwsShGI0o%vhTCM#+<@PU)_C2+ARg
zOF`|@&r|F!F4Q`9sr*p&cyBDv%}K!FWLEmO3{iPcm~S?K#68bbxy_a^KYB&96gzsD
zn`62|*7Mk!3RPb^cl?dV=^m|Gu4*jVo7X9|pY!MH40~j1z@!SHs3h?(+A_I?Orz^n
zr1h|HUrp>gF)Iol7@}r<$<Yo=-C}r5(HV$I_^Ei`%n;|xiDp3`&~5utuiojYRX{`M
z&2j@M@r&4!H=<lSNmX?o!1mqgnLUz5{r)&qiRc`P@V=k4fau(bv#8khBR3(D!q^5L
z%3+7|3)6+LtX~+3MjsPu(cQ3?m=bm}DQ+?pkrGCAW+_Z^ewC7G?^9h5tAwBaqrb8L
zEv3fmT2Wb3raeK>zq6&6OCDH#;`8*|52~A{i&*Ji<gjD?2F#V!-YL&@eT5&Ru`U<V
z_rHSvNIr(O^lh1h(*XdNCgQUY4gT);$$cx}qgEiDtbvUdBRS@H-Vos_A0w^uRj?ey
z<**swwU_a#OZB?N?HN*68T#j5TqJ$~igsz*NiofTH{RZ^@vMk$VOtdigSra}+NH9R
zTjE0s*=9}$&>C$fSP$FrOtf?p7cmuO33+sd5PdtxtpM>F+HdLK4Lz&&<8s;a4LkXv
z#M1t(KqHNaq$Xy^aUhejr)<DPz<$69ZxT-c86Fq~)-!<W#oGrz5R-nau8lDxOCs`~
z$i6<tQd4;vP#|Z&X4<_G4fH9UiShM^Mbc{+QnB2b1Htm$2eFvLQ0~_wCRQ_5rnwjQ
z9A;NRQv;*FDdFd+zQ`Nn+ZUe(veB7>e}oQnsumk<z5Gbn9!e_N=;`tdjSbdBF6{LJ
zlUMiPAg=(8=B2UGa(A4YpbO(B6=j*Wb3){mj*phmc=jq9<dV-a3hjMdJYwh6`@0w~
zY9}q^i~nsBO7Z3&H%lL7(B&Tqqo!G@$f7~+y%E(IC-Odxk8t5e6&)KJd;Bq_V!_4P
zd7-L?ufhTrc)zclt0-iN!agU|2KH$Mo!(L^I)=M8#sm_{AC1=dQdENkeLL$5$jIPo
zeCqalM;`LY`udA)l;%7<n9e1?$7nOI$%D(XalzWNG@6H_-R@kLd%<B=&GpU;%+dup
zwRwgMRg(_x{FABqwObEk(MiX{pqo=kDbij&M6%dz(39CmLhff#DJoU#lO5iyl&pMg
z8pXOf**yY;cOPbnslAWbvtDRVj9(-<-Vh0{vYo-p_f|&KaNEQWeo+#CVhTYKdP={&
zHQpF@hE7;Kes>1tqb>7rRqW_@UuaGWbkh)5HhO7*?)Ytr7Pe-2rCe)Tm1@*S@e-h@
z_PR?kwaY95_jvR=@3EVJP)&L+Vq_rzN77-HJyT6NM&_*skpd3Q*ICb*w$;fx$ERvU
zN}k8-l6<@tB~u&beR{L0-fSLc(eEQhM${)~$Nd0JAoUXKZLoL(O*g~4MyaqA2gN<o
zEJ&QPk3Q_sgz!M<2jvuK56YT4MfZaM716c=J&>J!(<bX-WQ4+Yi-a^$7sm}h8Fil=
ztLY{$#uEuFW8zuI*f)72VgMyBtKM~cpA+^mCCzS#@AI}H>PQzk<>#;Yb9|r8;p09$
z{U@j@YJ^uRx0me49vl1q^J6!5@~(9tJctSCKzv1qv&BqAo!2M`CAuH-OiCEurQKhI
zNjREag$3fVSmScBS97A?dbzMLkX5kuEiJ?8e3jL9u`9#w`0Vg?XGGCgG}12<({Hrs
zFmUAJ1Y@k;sAS<Av3rRWp4N~>b;ofMvuFv%?k)9@mOe1A#~>4iTrq3Q142vshK54E
zi*OGs-8EQ^b{yTlu)6qSf0-?9iD^WVFk<K^npTDmk2QKHyrSKElO}EUCrKxXu+gpR
z+(wMb(^%UmLC-UarH)6~%V^Fw!Zj(5mu4w5t|`2@N~?WuTzQI<=DFLQB){uyU1&SU
z=e0=;#z<~mbTpWCd`WJzr^vHSil?D0?U2s~6_LRNVdq;*-Em1RklkV1%pRN0in08n
z13Z-FAMwmZ%y}T2a{N_V-+w_l(N)O}oma(sj`7-4EBPJq16pgXFr5?G+qH8xeyJvI
z{NbK#fRCQ9R%?@B1`w6Pq7s8<2_}t_3@|I?S5?vLT*dF_XXOWrdF7KN2<lp|`wGNx
zYJMWxrG1V)p?*L-0{BYCnfUGOcM>he96W5t3s$xfWFU5~b$qLx(ESW_*hw5P-u(Vk
zMx&pDdp}@-Qo8ghIwbzAqny&eWf1$vGgl};TLEcniVLyr(-CkxCS^aE>%#i{Au>&M
zFM!C@qEVqijs)P+#Bl8|V;p9zkT{OJm9Hn>w|rE~eG!mu@|%os<dIBGKjPF8FdQ?{
z{J$VRUTRn7D;31Z<yl6akvx2f<)K0H$`N|tUu8QXS1?*gkDA^A1=zTRTmttmafUKO
zcmpl$aE!AUf!0VoNDI0mGGbVW3i@I`ec#D;-G0A%>5Ed~ad;0eI3l}nHBtEu@l<6O
z{mbV9<3orXXocC9B!=`0FJ_*S6r~<-?bZ3&?-@f?;;wrORcwQKN*Q%S`v_LmIw#cq
z6<?m6ot^X~f#Ww67D7pLpA?8O(xzMl?Qn5Po?6@i%-iR7Ck<_45X+wfp_B&iIP!&p
z6tbcBdlGoEwK%U9M>=QiA;u#m&FIQDpU)tI3yW@)nR6jLeNmM+q^aX&y?w3%?j2k`
z8+gZIxg3$&+dG8-IiC!P=ooSSsp=MQ;uY^3852Jj7PSp4khsA*8P64yb(>j>`&JLu
z9P^!(;b9L5O1=oi@;RF3TzGOj-Zta7xX<s%G!>de?vr?i@z9Ll#acY;M4thS7clLK
zk1Jtca1r!X3o$c&I51!5*>`jNt38umJ#;_gwm{HjoCG@Y5bDy>=J^+^VaxnrDn~YA
z(l0Pf3BC_g4O-$&eF?cP+*@ayT5=Z*qwgy^i*=gg%+3$1tsVxq_XIP=T*~bwatM~_
zRBdL0-r)$Q6sgktb`Y4&hk?$Cx9wKOqyvJCAs>W1ujD<C$o!vv(W!VzX*FK>&O<+I
zIi_~!*7P{<h~4k!oHc7I<FAYda1)4Vf6BqX<M$BllcQM>EI&I)Oc4R3s2o74+dmb|
zecneOx}D~A&+xKkvh_r~M0j!i$BYu4O4X*8<$fF9<Vd`d&x#bZ&2F+H<oHn103VNY
zz+$3I0taNMWS}YYsjAG^HS>-`mL5<f)z9pjr0_a#R&h#BiMG3#UN3-JD{`C=IcGN_
zF!rH+gRIcd2CrS^83Wy9!0M%uyO`naOyJR|IWEn6N6w=_#_tpyN^%<J0w3=RDN~Ss
z9*q=;NMUuI7c7j`zdD(V^A3C8vF5&s3hBgRVP;l+Tl{A3R#fZ+1+8ZE4@$l<`(ICQ
zHXon$5aY2%{2KQ~>2(4u43Epn*kZl<?}q*l4DSUxtn{WmH^XKOH)BD))j0dBRfRwU
zuN80{xVI);{Tmt@53x+5L7oaoIk+PFZ(0&aX6Cb)U|mcmq+0mXQDD3n-cUqLkuq&i
z0akFut+p_7g^wy;-rj4=EcBoNJD<8Jein9{sxMQ5>HRBJx0KT-+hcFswh-_n*ua4D
zjMqxBw^LBqhLB%9RlLW+sw`+s%62;!xo$jo3Ffe+f4!A*Jra$BB&txcsnDuiCV~bv
zWnz>hW;eAfwqziLIJCm<in38m@m6u82Z)y<wnW~1Dc*C(od29BiyaE-MD)M6+Q(-`
z#S0E^YXVJTs|!&(Q}1p|JtsBqBd=4Yn)qNPh&>-CWS%xnqn&P|#Ar}eLADnqs<pT1
z0@_zgeta4sQGM|6{_Os${D2c9WhM${(%KC_DQ{ZEqkxr>z+;`#=UTRWJw@+Z2X1}&
z@%^2(4bE=qX(Y(79FBKV&HE<Tgb^ap^A9bOv9R!#PhxW)^k^u?lEuGpb8~kpU6z|}
z$k(}U->eRm@PZ$P{D^}^J-LmyxGaEbnI)GH&tcjvit!{OvN4JDdZx!m`U_rM+T%)s
zuomBT%DI8pqqYtOtECDqkzXBBW;|4uAWLez+^gPLBAoC+U0aAwxf%88=|_ycPn^L|
zXCU7x?P`k`-PO|FlpqOocr%#N48qmo5KT?EBOhip$@WgIyC}Uv^4#l%xV`99lQ7#P
z277Fsi_37#@%n9wsRnm}p~}Z2Vz_gn+8_5!YsNTe7@lk-3p*zF?p$45T(pd<8nC`w
z<F9<J$ZbR7RUF*D``%Vym-i%&cJwz)#e9fU6>wZhy_e$TNqR}2Sv{p)@l?*vXqQ*4
zCKHJyo*`y;hO`|U8e@dZyn1GrJPGo9k3(;|zSa#M+q~2r(CP5|s@S8c!`X3p5qjvI
z9Rm90Nr&vdJ<Xt#+-l5(MJO|2u+c4O*o;?tlKX|b`-I<bc|GysNbPyEX=jw8O+R)-
zZz7+shd%A{cJtdCP<{LI3_m}5k&?+F*Hdb!zFvcynm0jwy*g;VqwOHaJqT@&3dY{s
zXZoDt2ogg^U1mzd6{)bbj{Ymv9bt|c<8V?PSp$XM(#dxBy+zflPhjksmM2DuwvJXo
zoAzmMgn7N-mDh=Ybg%DO6R%I)(eCj&deijzslZ*NT6?`7gR*3E@ay2|*MOVO#~dN{
z@fXc~N--D@)NXaSV3b7ALpqH2&hFcZF)CugNUT>b7!OVQk|pkPn}`&X4AeNSG5WDJ
zTMw#&9$Cl@y1RZY);2a^^Z?+(kc@bVxxy!d1{Ae}h4b#Am|L1YCSjCG_>@3pqgIgN
zmlKP2r`C~|Ast`HSI>J`3zd1yu|xWnANJV;49LBEe)xRMr!hKp!qt_(EZ*+U=Y2Kd
zcZuAQNq-TbdLPb*64ubr(9tucGDUpz@}^|M&nR-5)<{-8?WU3~H4B+rRiKlUar23o
zGC4W<-oe50vV?il3||K!luYo4As(302#H~k<VG#xJ3#1vEXxdM%YPp63FY&b5@XAA
z*`H#Yt$+lp7;!rlyEA5XMF>Os-n|!-zpQHdO4#j~7G_@+-03u({_%<gJ2m<W<qaWk
zw)`ottZtUW-9}1{_nq}FTN*6E?1x{5?d^MY;US4*<w}6<ILxV-9Dtqavp4iJS4r*p
z)y4?xa;m$B_si?%wK2yl${Eb9>N8>k$4@C5wV=(h!;K`O>)3$GdF$kj8&E7%Zir)A
z#p6%MdbX?#S_QV8coniSTzMXF2qJBBu%{=aS>fEM$F(DtUue&|Cq)Dkw9#mJi)igO
zzgrAbYF!W+qUd|h9%~-yWhdypo`36?!F=sWR-4}i5)}jgA`r&6jd1!ceERoXfC6%t
zPL4!^biA4hb;U|$aG7+Cu-d$B5v#zZkQ`w}6ct6`4JhfV{s+d#9}kfr?ty`-1^^R=
zmE?u>{fC$HyIK{DUmR@-$g;8)<AR^Oi&z$&z~$aJh!%%=rrYFihREt_9<`FO5Af;w
zt1*_saDIOaeN-`+#l7}+WPrAB1UR4xE2!V7{qKEyFRH(NztDN&ysqjLr9;7{SNHsy
z1JJIJto%!0|DCkX#EYR^B_S{`0yUaRBi`D&@K9X8!tL&LLve#(<Dsd&<vlT2jT1LJ
zJ`%|JOcm%WnK?RbU;X#Zwuj8N?lwlT8Q2b^oo>bvgWm68xRBdRFkB#8s#l?7uqy!!
z3uBNQABy^PJ9@0lEbSh;mCCa0W7v-$&#QM14$`Yg>jqC9V;P=4RWu-rH3NNhGUhnO
zNDN`zu>o|MQ=1f@V6wk4)39>xJoJqi|2Ey^Ed$Q+U@_o<yC>pvbTn<&{AZJV)h7&U
zow!jHVz+G64%g?_q`@e_bTAGgq9m-O-_w2#<qqw_z*ws$5=B<8iR;#@i52n;zrRU#
z>yvkCOa#hcdI>{XNDqC;27C%pVY0@kUFC%?bi7OHaV1?JfJaQp@R&&+2Lt<`XV~4i
zLq+*E)r98rSG2$P6P1dmY7axAnnlR~Ih8OP3_(=Rfk@!v@3sh?fT555jh>jRz?WPH
z?G?tO!XAfvYBdwBA9?CsEEUA>9cO_;#n78uw`Y`U(JEJgZrB^T5#Ij$!~ZU=|C0&D
zUgFogBTi2&{_$_S<Arl;cV6kztM+;nQ53fv5hRihFH1Tp5a9CCN3gA0+C8DulamO)
z90EZ8{#?FK?NH|!CZ8xM4!0!(T6!S&6igTMV^m|5stUl)-@VuLAbn{vb8TtqLN1ux
z_rpJrG~9Ss1NtgVCi!9sQUAVVx?A|D%nToWZ~M`x<SxJP6cF&}yV^hWPP_Gvj7)zK
zU~QmVmQH703JJZt-d3X^pnIiDvU9x18M^;?ME7aIY8bGYkr-U_pXLuxRDn4*k9B%+
zLvfIi+W(iby;B4N@`>vEEhKmFKRonboB7|^%=45+1ZG5C;cec_vHFGC(1lssQmoHW
z!IF39??7;ZT5mjRAE4_Z4+x1G)8x}uiR=9kuaf$VHYAifZXsA3XIUXL>V}dS7Va}n
zN>S(&kxwbEC>YffWMu6uZoY43rXHK=3pked?Rz!Pta$E^H_z;2QHZ|1ar4%l`~TpV
zcNr3*4DJ=@%9jfN_#ge@|Nr}6%~IS<TNI<g|3|O+>nFUu@&CC`@i)j%PnQAHr$a&4
zmPMyYdRi0Zx}(pw&2Pf+9<q7MSk!;8ssF9jK1aJxi}`D7s$SzEDL>6w${R0LHRq6J
zMUEtSDLJ{Y4lch4^bk*D*s@}oy@oNfK@-R2Geqt0CL6>}fjI2HIMzRY!AE>7NY$g{
zr*rd!+!d_r>-XAG+mC}fJ3C)yDcis;IJ-&d#%eq@3N=d^m%F`%&3e6D?4CZxh_m)J
zdHF|S`r}*gpfOQISuY6K!Gj68R-?F?$nC!bQ4=&&FwjkL@GT2n8Tr$Sq$f-uAwr@k
zcRxhf+#q26f_M8~VvP?ifhfE)iKy1m+}nDhNeH4$t2EWf@3D9Zk&!u`8RdvaOg^w5
zThjPB!lHv&XZG$-it^{R-N$;VFUm01=48N7>x~H2Y*-xrBI2Vo#KZN%+uPfErixmb
zHZQjrj=$z)6HLxS=X$mX3x{NByLOnB+jkX38h4VaIOaf>8D+?kQNz^KThC$K4LnmP
zk-3Gr{%YHWp|m9p_zwtJL$kB9xm~@UGP5v+^k?)1lIuIFB|^t{8a6gYn~CYs1zF1C
zWT)#;|7w|klDp3hZxzcz)=Jxt0^8c!e%CqcBn%(<QA>sT`;jH$<LT8^Ob?N$L({Kj
ze}@Z15BMRo-3*1`UA|3hZ1JS@&@!KCRs$kueP;bVs~6mMV;_)t@=Hx{kYc~a%9H);
z>b|?z2S0W->`rM`WQfZ#dX9wnM-X5^Tz(z&@aP9lH+pW((7FbiT-|gobst>5crE!4
z4fKEGKt#pve25@@CFDA}db02BDv={^T2ycS`|Fc?iCoO!SU2Kt{x_cT5BE%w5ZLxd
zbr>XW%IEg$Tf1@JZ|}R*IIaur1`*o@SaZ8pWMU%qd`0kl!@VOxI#L2JQ!lUG2j;CO
zyT<#;(52|n`9P*-@++Mt4!bF&PL&}T$P4Lc5NjO;W1Z8OXQksxuhLj06@RR2sIl+}
zXOqWeZMgjCve4-^&rG0!{F$?$(0<%~Kk4PMFGyK=)cdp(;d*;}lexLMzpr1rms?mE
zyu7W-7=7FdpW1FekRl6v%z61ZOjwwjKsujh|E(-CCh#UOfm^e-V+|Y-2xPpr&Zm|y
zs$m0eX}?{8Vl<rZdSvjF>dzs;pU)DF6<Be<lZ;Oh;R2$2jUmLwBZal>=DiJWt8;6$
z;<QPOV;BXdNEortxz{JvD;)_XTT1H8XlM`|Sc}gsDhePIs*^fiUtgW5c8!XOAv;*?
zjNWc7s-7bAIo+6{){r4{n!5GpZ~ybYe!ey-q<#6edKra<o4$%=RaMWT3W3eO2;CsQ
zwql0j8xEraOIu&9#{$2cOp&+F)0Qk7!5U=fkkZ~Cz-Ck5V0rQ+fKw`wti>;dX!LS*
zJvV<nzPf9WGbMzn$=jKWi)*<k0SQ68c?$;O4T0G>NY=c$NF#S~Gd!Mwg~ev-NkUKC
zZ+n8a^SeQbjAQvm$jHXuOk9PIbG6&acT4-W6_MEL!Kf!b{s}(MXbB)@`y+CHK7v2L
z{M{n3bEum79&4iuy)z1-%Q$q$-pL8aMv1PMJX8sfAaKrIIb<v}h>Peb#;fhN-MrU=
z+|w584!7H2w-vfRM#SBje)Rwep%$HO0pCuZ?eOI_UNl}Qw8v-fIV>cByFEu(NR`3;
zON=f3pV$6J!S<u3h!P|za)Fa_pAWg2EmMPUFI!?V`fV<?{2XR2prA#E#MAHaGg3rt
z=DvcTK8dso4bad}t{yZF6T+K`-)ZbH`xxQ=6dC!a5WAUXLfjn@5z%47VWW;AM3O8Z
zxAzXQ9jf0bob0+!8|zJ<?B-y$2!S;?;~;Yc6nx-KK})G(Ijtv-?XBz2UK{r&x|ez!
zj*By5KIUMsZJ2AfKN_RnhwGI(s0H&nT5nEjrBvG@<Mi*-TnD|o4Msm`ck2aggPv`S
z{M;PdpD(JO4$UfQd<1G+{>~fIAs{+ybj?=ITOC~a&1=3n#%?v#K`3CR%2l$3*c=<g
z9o6#@pLD(Qm5-eCn@{+MuKKS}8TTcKZf*(K&o8kr@$gi0@BqW|95!k^R)$yVGIjR5
z5pmIB#;K&QPv(s{2(@4F;u}~SA3-Fb#L3dZYmYB$*0Obs!HjkHQDnT-jdzQ{O|fL7
ze2PF(-X1Hb2gV^oB}X1be_UYZtD(xd%~^&$!Y-$+ZSpsAVd8a2`qS-TwR~RTSUw~_
zzt}Hpy5_Zp;Ng(S{3!u`>%m%Bdkl#FH{5w}{uJB()y_&?yTwwOW7+nfGw0d|0>ugs
zg`8iK#3G7|i$lxG%7Cp6P-VmeyGTS#Y&=m#T57q!tXXbm(@^n7T5xx9aQDb3mi)A2
zRvH-*pY;b;2IcGU(1E{U%X+#&b5nogvnXa8RN922PZ2r^;xM@cqr>&eQl~Xyl+9NV
zB#h;KTp3XYEoRGY%D>v0KRHKi5ERqNTZtpH=u}PMK#in5kqSaT*SuBauvaEVDzW~F
zjRnD%8TUlW$+ZH_2#6g2jD(V7F~k6|*BqD@N9KTOfJn<G4t@I5`Tf;OMN5G|{){*x
zL*{@f?1AB)&*Y{-M$!UlDWaHTDvptgp#mP<r^TVKr2L~d{)_!mWCp7#&1^)<uD#S1
zWr*X=Lq`gMG6K0t5bc)GUwrT%cU^QIC||3z4Kl#c|L;tRXqq_e3S69eb+uBj+y}@i
z4cBCqttodWwc#<59eT$vIdAWyrSsz6m9QYyFQU3{QHoLNT~Ns@R-~?jD6mO-og{-|
zQ{-F~s9lLsMAb_b82FwF<9=W&73T}A=eHmc$I~xa`9x!=-c>?*Qp)i+;1`MBN3c`t
z%Zp<A9McV(f))v6G#~5t!&~INUdEi8buL{bV01nqa`;3G8mLAEnA_XiSG*pj19Wy$
zH8nL5V<_$0&87c*G#qaV1<gK4h~cYp@P^`+3HyyAqp&H@HkS$K05iD+$-!*7^vq1X
ziq{i#jIZBEEGen0lRdy^4i1cFTJXgb4zy<r4qF0KvdSZ$AfwV>YwzBn-MCNgxp|yn
zmm-vIH#1$@ax@`PZq`FZPoL8p$ls#M33F0(XbX<p?f$Z|keAb*eJheJt4?-A%NQxu
zu~xq+2IFs7NcLg&IGn7MUt+>gnd=~EZ^n+*<)><E7F5#QV=B{<L_!?6)kGD`LT6hw
z+FIoWoJ&*!G;1By060tq;wG}%+S>kf(;$nfeA6D@(x=bdT{dfY=UNAi)&>+t8%^br
zc<+7dd)I5rtrUYTb#={$@XUk;lr-t%MCdA2QN=*(3h7A381bT*pI8$3-Xp^m^4P=%
z7xl)G<`)z!{0J)cZ`N}Z&o3~^@5u~8#+Uvsy!Af9*^RCCWYS`!P|NF}zkPQ+6UGib
zZv{wBVflQJp*|GqwestoecPHyfStEvU+YD!<BCLBGUA1^np!$?2?SRIs3(#R_9j(_
z?(GF?mYG;4SzWZ;yp0iD53gYl3<}~58u;GHI^`j$mCuxg+)5k3N)uKE)+$$w{I=?8
zUHHI-Bkb;b36F*Y%8){ae|@`t@_l}nZtDJe*OFFN-)2XrU~&;LMUFJ2Kvg1rQAGzF
zxfypv^y;MhMl0)->o_O4H7+qX4k<^E&IabRp=RGkA;Z0@+h1m2=;+%lbF;T}nyFP#
z)lf6Fx`%|ddi!np5mwZBeDTalTd)08rB5gTglS!BE<gFSjjib74i66pAcw^N+5!7b
zYzgM!O%QUJC>{vBx#HdPrwquM@z_Y>1=)tt*+CqV@A&F|2N*qjq4kcI^qQL7Wm`if
zB`%wBnn1J%87=Bt3n)_Lk7#MPuoapRaD+W9i`r;tm7Z!?p2NNmDJ1u|AXwXBO%uPp
zwHz;pcReqd5;0O}iJJv=ba22{@H!eZ-`&Y=U+8a74n!gI(tOF0W{gY<&s_o(P^d`;
zA`%P+OL@SHSxU4k884w*a=U#Kmw4npf}UIG)X2oQugV|Xhm44ytNBKNqc45+{fFBg
z%-nc$pRLswGc?et2PtQ64Fy)zBlzmgl7y0`CgI1scl)z#5-bL@oxw#$9NJYDWJ&xs
zr0(wS8$x`J%YOE|wAAw=m?5F6+768fG-SkF^xE%_ER0d%`FHpAg{7ybGd!^*23Ntz
zeWcYH{y+;F@vsrw)e4(q^%}UD@1vYcj;9kIwaA~kH?W@;)tMS2wW*x<LC}Fd1kP;L
zb@s9p+?KUaq2ed8zubdeFUWBgK*)W*qNJo0o{Jo;iq3RxDUyNb*{y%zLo6b)5Y^Gu
z)wQXrr$>4lh4e9weiE)y(i39j%n>tqNkA%#PGv9x-pFz^U0`RF^N9MAC|2(@R#j11
znd2r>GESrjT>Q<aei%Y@moA6V;qa$go<djWGP_gMVFBxmVlZu-W+WsbH4Vf^#G(~4
zu{QHPFgCjP5su5fL3*C>NHmE0vv0)KVn~GvFM$sbXC&5oJy0Rtogl>WC`z}XhO2IS
zQcBT*nuP@!WR;j2Y&^U6Vd2)Gd6?UBo*%Xt>@laXzwiwIQ#?={Sb2g>sYCRY3fLGP
zwWo*Y(Hi==Imr&nMmbVs?t-Dj9uQTH2N1ef$e?VZx3Bf@dpE2{&iQR&zRKy|T(T#e
z%yr6L#c90G*l70`j(mt88I(&|8ukLY@|p!NFfz|#>W_ZY-oscYcU<lcAu#aDT0ZXj
z;(4_BXeGr{{UMnkMd?9?7I}LU0zI&7$rMTd^Xn_{1Fr=Yc;|lCoUv)NZjL!F<e9g%
zRpf2|jB?HXi9!y=-Ct($&+qJHQ(s;jatb4PI{TK;ZAXlKQNWjqUag=}y`(s}yswtQ
zw$3!uHlmUNibOj7%?ukWO82&a*U9c~&ZAh9FTe;G4{X@Ac@CPlZicP2=BuShI6FJz
z;^VhgO}K=%G<#Y^MOAbaDq!a4=g%L7AGeOJ=;Jamsnfy#7h;z-r>WG%x}gG%l44W{
zJ}z#dXMtH02w(&cb~5aj{0ofd-b)bcW+0V&a238yT_o!J?u*jO!lQ=+SWgoSbD&lB
zXQV<{K&*Z|*6}prmDe6DBE)0b2pL;Gy8#?zaVe9f0d_m)g`su5+{$XBRLOP3XVIT7
zvAD7#rLS+hxVZQN<dv$bg~6a#QOa_Sp4}YY;C5IE+nw=~Y_A{8_PJ2mp+P3m+o=RG
z&#2*R;KDW=HD*@p^kPBgqqaz}C<WEmms12lFGnX6<8|_5-2da}ZhxWH?%9T2QMoU2
z`DGS(ZFLlq;1xP61;f}Zk}z6T6gcx3BmuqD@7MkSNoes~3{bd9Wh6mPt{M>C`63Co
z{#FL2NC$!>@OzH{E6Vx}k`S~G1UN$(B*E}svtT{wNW${3WKi!zY@Z-mARy8Ok;!)?
z@kQ$=z&o)Zi*)(|BgBm?=E_0~0*Wjo(O-)<U_JMc#G$|b%c%TUSm=Mxs4T{Q#>XR&
zn5eQzcP>y@Qd7eNKLGQ56eJ@<o!`7T7t)|NnaMj|X+wPX?&&j~*cd3bX;&Aw13?!O
zQHbaQKo)dY3aiKSy*I0L!dAyk6D$DWx^56@F_Y#Um3b>TIxlrG5RWOn&|0E9p_xLx
zSod+c@ENbZhx_~}23M8sAmh;(LZ?)3)Fwls3%}pK00X3rSi^Z(%kS?#FoprocG+-u
zckhFSaqnjB#(8BnGKqmb(5Vr=tBf#V!Ly?^QqQendY8>6aW1=QW(Nm{^+HX7LV4Q9
zOv+-gwe22%`eY&;<2FI^1%u?TN_upNqb<@IKBrd?iH1a6rt>^O98lu@JznWd2mr64
zIVtX}$sQiEf|n<pd03{mtIKq^i;&4@XRk1U+VQV&!E4*oHA?h0RGY@1lIoK1*m~)D
zt@(dBS<fuNjUf@N@p&j<Y4MQo&8tSkZs!?c)6Suq%eIO6P=RfbOBuqPy}SSU6HeU)
zR&|7LKcFNyAW1oibVHv>qbM+NZ%?zTklDe}F~dD*xj)}DDBga`d2LrkL4=qdQ-E6d
z!fC9o8hc;pXcf<=+3dx^WRX;Qa&i=qxuqq%{wjb6j90)sC_4`>3=-X4f{89(Fn)f*
zTuYXUL`M}D<Mnp6>w&@bO%2S`^3HZ%7l%9<);|LoWO`y*FDd|joA2CZVW5nCfgs1K
z-)u0Z>i7a@c89wYw2KrsS59LY+eglytn~PViDU5b?rxTub}fipk>U;J_+WK)bs805
zY-PwLsP8srG!c_3FVu~KiyeNlixA;+ik$2)IhPb73fYke_d4jV7m(xrbBRDQXt`%0
zL#y2QN9*YPM*@S;&f#chbuaeruD-DANIvnhe6HWTZwlvlr8|ze{%D*hzaSs`a2%HA
z_cx%nKfDYm-1%Yr#zI?yZBUksaFHI->D^Oyuiw8;dbC6ooWEEn<mI4fTpg0{B7&q|
zs0nRLGjk(TT-RcxV9;85RXvvN7!@1aPM^Y@r&8p@>$dZ@=AvpNy(X8TJQu{Pb=K87
znJr<&b&_FcuA9{}(*Zg>lWsbRk?SwCYCW9O^#xA5QrLnb<po*$-#Ne=PWz7&E{r7d
z7mxy*xvuLLa)PI$^dUi8_0Dpedt0|LLwKg$1e9bHTz;qNG#vbhRMKtW*5q@ApYwjb
zGAw;{`TlTZ6rZ(u^9S$NP$Z5RY<+#57v3%s&>trJc&!u}?3+vS-#+KiygfKj$a6dS
z_tIy|nXp)W4_c$7^Lbi=6aw?a%g7hAyURL~ZCcH>Pp^;Hb4dPZy58;_kvx&ERuEH}
z)xG_It%<~s6e_ElRi|0^SH<!F>VE$3pNJacg5b7QC1r1<tF(tZ3A=u?#xX^+=8aOi
zIsozP8ZMtZtq-xQD7e1g^x2sM1qmMIv`%N`=sY!$h6M>oPGenQOo}`zE}VKboUc|o
zDtvq17gI!=ElR7tjSU%{FuUF;-YMwCQP?#Ug@%U4QGabm1U4&HJV>dkXQ1_NHuH|*
z2?>!}^%mgPrpXLD)#B+lQXMJD4o14rv5(=gv9a!EQ{UNo1qE!I7vMvP5lrpk`jN!{
zyZZn6FD3~fEg2Q;PjZ2ijb2>z^@Aq9Rt%mQ4vyZl!@GI+!eO)XhT``|o&36CTEtOa
zCv)vas{uL11o^UdH50Zo{wQ$b$D{(b(PKXLmX=W!uVdqKP^u>#q!JGk9;D~zGb-^Q
zqlzJ7AS$O;sI{5kW_MG(;?13@UO>!<Q0*REBNeFh$@tri$53FA6Wy2d?E62OOHHMk
z@XxyK_fU^MP{YT^Z$lr|!;>Q8qbY~}4BV?(9w(l!ZWiWLk=aJHMjFriwI}1MfiXmu
zm<0d)*>bUhqxI-Td~LZW1%T0>sdUvhrP70R;TTU{CiBHfJiGh*o4lpxfh+C{?qWr#
zoUf$yheL$v;92w<2F?<RZ_Y~tJ}*3yA|>bxC9R%5ySkXkm>++ANqG0}-8gUC#>3v4
z)p;i4wu4ceL!OyLY!oss8b&52&e!NjX$pvV3Rg1e8#w6VpV??TR_E3*#PitU|IC{;
znF{^9mXP9o<SuyGI>>(3Prs1tNv_Lwpjm%$aXdwK`|Mao$UrCHclq{BcH?D~JoAx}
zs)=G5LANW?(iV&<j-SUWl-(_1=StnlLiEeM$wWQz&$=cPI9>G*HY-a~O(a{904|9l
zuL}z~jhP269X&loEAa8X&gg>q5}$fuTXJ_-Fc%5j*6A$C7VIhL0Ux1OnyTAp1p#Do
z-csiDan2)xb{H5Efzxq*zCUcg%+?oLf9Y(HuVm^hCk2a$aEUYT>{NddYg;d|WJOBL
z$$&(`>X*fJrH605geXeZk6@+GKygrMuXaU0SSd_UAIC!1bs|rN?nRC~Dd!S^vMeT`
zh+O%L5q;l#hhY;}?s{C7%DOs%eo{jC^vMV1nvEXLa$8%~ZS7SPPQ8-~qXO2A8UH&w
z>3yiC@j^^Y3^)6-(sqzvyV~|Ki%wNAeoul#d#H|tzW%g_Lete{_sNumMk_V&8F>{Z
z^OwQL^itCGRdM4hDL!Od0`M=W5SP_o!f?c~O{r%|a-MC30ds<gkD=E#iul4-^^Ek^
zv4jnTk)c*D3Fv6<SaHkI`-sO{xBq#7%R=_LqLt_p6vF}n-E#&;=D?#Z8PK?3Q(-ef
zr(JD@H&y2x;C*zdez0EoTJB3393M0`ghl!|NH$!kGfrx*j4RT2L=@GTzmHf+aaB(|
zEZ|h8gs~|{tc6Ar81PdSH=WhJ@av4r`(|4IV%EXgdRSTt#*a*A*Drq{63uOfE6dAm
zZ*QWsU2Osy8@Y=Y*Xt3k(k>rzB2p2d!&oJyQVta#_*j2wJDCvYz7u^1H|><w`v^q#
zQSC8Y$BJKlgw<{Lr^Y;rh#(~p*P$3ID7XWKC!WhPBG3D5t!#C~+Z6~e6*9v61$-&b
zT*crNIa}l6IqzW(J&*)_vmB@U4&T1}wHHLvNvZlMH6aYDTPb}}O!y_U3npBqDwmg&
zTqkj7rhQVn8^P_U?O|b8mcicek3;*fxlfD|81%R}_xATkyQzdP-CQ=OJ+DABK=;r?
zWG&fbYozUPotmKAOvg3R!6=96>W!N2u3rJCSi8t2VC)H>pU4t&G`h{sW~3{m2+fzN
z{^pp<Dm$u!pXn?l?n6`7x#J#6gEWrcOg<$M&9qogz;b}N-)Hub5-o#P*GlaF+`0a}
zbVU>n4AyOuqX2qvebZUjQUI1o9r5BLsS5@i7s0I|L;F)x0-BLY;XOF-;%DCsaYRJ7
z0lV{hecnoF(CI#biB+X<3x)uV<g|+(mFj87D!uX)y@K>z+5)TCQ`$dvnf>{jLnN=O
zSD|&UM_G5<HWsicJ3t|`t+??>?k;Wf{ihg$H3sL1=?U!DfZ~|$zP}vT3}T|bdGnkr
zM!4tfoGg83chAslO0_<*6d5~B>2>Zw+bgggk*mF*T(=SO&nIhdMXRncqi?7LJWoPT
z9jE2)5E8JlhQI}mVF1q^%T{5OJ$(+c)=@+og4~VaQ_5bDN4>aw(jLTVy~26^H1bo@
zBTV6wH>w&M^y_rU<k{??7|Q+a$##FeMzFV;Diy<Zskd~62lM5>ZPD`LVrv0TatM5?
zdS;f`JcnPA?68r%y?$Fx!8uabN1C7Fba{~=JvEiW(eZSzY!y)iW%s#!FWZBJ`@7F|
zonGDJ-Rfeir+~VQ@3hKikb84LohEl)<g^={pAVf}NSM>#ieB>rLBhiO2W&w;x~?)t
z-c#s4hgb4p4|=bh=f^<k|EL{ZC~F!c$~lDx8Jfcw!*#l(>geF8LP}AvuG-{PgMion
zoN}GQP7<(7()5~#<+S@=J&s<-sI3w*L11hd544u{mzf5&jyoO0ypPFo@s{ucJhn2O
z6GonqGJ)Az+B$*xLo@Ct;q7hv3vKk%;aabd5c4}k??8|nFFtJ=OS+Kii{bC?xYFK*
zqhEA-QMSL`Z@j{LoM`Y9M7i`aP(e@m&3%#E#;0XV0UjO>qe(nJT`@?%tUly(9`}4U
zMQ`4HPJ!nkE3B-li)(&4Kg7FI-7G7}Y21dg+tY}UT3R25p>!i-%c!rbVUEA)Nqnqz
zy@&DGHx|ZrPZku~1yp82EC;jOrOJgv?>@knP%~X3U~+UwH*UwUpRK;4zlXj~eyxR%
zUKPp~30%FGSs)*ssrxP;hS;iBIA3`ukpA`S)BTx3{$c06;(B;cxa%aTom?Ez5>w}E
z_*NpC9hqRNL81>_t3OlP-ss|EbG=}3?NN3J{B7JAGQrw?lfP{~39!E>gZ?rcQgu{#
z>R#ZkSrtRrvC&B3SgF;pc{m0aJ}&-?(c+1=ekpIB@oF~Mzt{KRo@D+8NzVG9Iwd<<
zkhGZjK4$dtLcxBMU5frz%vxi6s5hlPkqD)*RvFFS-rjtI_i^Exx>n*kqt>wp{FGo}
z(J-eyT_Vf5s|^`D&=1g~V!l0R--wM%1<i}o^<2ou#}8D*VCZ^TSt+g8w4PYqqjtbu
zp8FJIVg&@BboAWj1<BC%M8H>*t@nMx2thQoJs!7h5D5j8LmkC}eNKnbT?z}QT98RA
zEgoJMbLCHeiKDdj@LaOQKYLxLw9@1-oUcmXVSn9gSF=#;nc=icZ?JYM?Cla}NKZ~K
zMFO?pvN>DY25or3IVq2cU8kH41i9APDPbj<){p-AOvt4ETG4ReztX%JYk0Y;rm9p9
zCT&K4*QvBy^fzc-*BfnZZRK3sLAVQ=Ax!}}pDKn~3;Vj<EFC!$jM%=iYuN9tC%*8>
z@?K98dCbk_aqye=>|l&~yuwy*u$1GX>7ZV{M4!~ulnHQwa@ut4<N|!A9DQWtIG*7}
zOs;CUBV$=jvcUKAw}bYtgx{_+jm8K-X>{IDS5j2O0)0Nuz~y)OoeTy_WHK>Oq6Y-b
z!I;8{cqNV8?n$KF(7FYAffrX$lo$MkTB@p=`%O-Yd*yv1VOcUUZ8B^M!2vk>LF-ni
zu#nNiJ4ozsIS3`VQ;O}VkuZo_pr9GIgtEDhjG^KN9@=bw?Tq`MkKZXiF9GS*f_@VY
z`*Wc3N6j_)*OvTeS@_qM{1-~vzqaIGTk@aP<nQ^}|6>OKm!#xtt#8B?ii70NRX?>{
R%?<D)Eg}D+`1z~%{|COE-x~k`

literal 42407
zcmZs?19T<Nwm2M~*tTuko){C`HYYYGnAo;$PHatVPIO}H%kRDW?tTAny*{hEckkM$
zs#Vp!bt07%q!3_nVL?DZ5M-pqRX{+%iND|{Xu#JM{XVGm>jvtgA|(n^GmU@p^$=pF
zDPt}#4?_C|LxVtqqJn_`L-O?l0mTJ@{4W>;<Qpj7zhM<n>VMIIfq;Ztfk6C=M*Hjj
z&msMFesTZn4xR`4ABlNj|3eK<oCp3tFv!zCZ1BBD|MVKhQCiCd1OyK4pA!@$BMbXW
znwFKCrmLpB9IuIk9ix${gRvQ-r=8<JTp;|OykDT5nX3`8r=6|63$LdD>3>o1e!>5s
znMjHMi^SDNfK*dniCE0R*^HQjk)4s5R1lV!n3&($)SOpET=HM+Urz$0maeXjyi80U
z9v+MyY>W=h7ECNWJUmRytW2z|3||xsE?)MoMxG4zE@b~L<bULdo4J@cTRFN~IoK2b
zBiG2-!Oc~Gl=L4(|33b^pRQKs|IuXc@~>fi4Up-d7A6)(W~P73{$l0-2g|GIY-RSP
z`5*a$Ed2jP`TyYlrH7yCALak6Gygr(|H6I^RS=e+>EF{P2rD;0r3C^a3?d^gqUH&D
zt_NkPCV@ssT=YmNDqA*B9|1|fLPu-(JFGj<SWH5>-a}kj?YyivqM$4SvM2%}eoHnW
zBm@MeJOp$6)A!b%>5?%uo)`kmf!O16YrWOX-NW77-MmG?)3k7NFCZ8c3LFuD56_M5
z$h>3N*Z(hsH3+zyO&)wH^#9q44^Iui2OY$L{y#YJ;TN&L8jFUNF3=DDBk+G|APe9&
z`M09~g%1wI{T)CSu!voe9rVA^|LGwFvc><uqyJ5)WP<Go5sxd@tQ!A+4k#96FXlgD
z{-1%ugZpu)|N3vfa16ldQZ<>|>7rAs*K*BfgLkV7upEzMI`n^}E^-69mMPT(Y|xge
z!F4-Mml$dbx0`LS<}=iwW<0uo^qiiyAE_5_a;%a{ft1VG@|p2qbIUOc@5z&P+j*A@
z!=rpWK2}mek!%Xe{TQ?=2@d=W17&4mnKRl8_mZP#*regXi{@@7aAa1hWUg~LX57tX
zlzS?=+BN9Sp`DER6?3-yaKUGa#n=`Wn4H?7xpGRDEu)$&>9Pd@1u1Qq*V|*0Y;`#H
z=yAS5lgVk9%%Ib%L1%E;(0%spkZ66-9lLH#&pr6U&^xV#*N*l1efg4iH{s{F^{s)6
z%a+I2#O&0KfP}^o@VU##I3+CJB7K)JJ&w(OVoZ)GV@3+{Tp^nf2?!1h#s@bwJpEHi
zHZ-JTW^n?DTa%RJO39wZ<r9s7(#|4+Vga-XVqm1w{?<bp0Ob;RdprGhvIKUG6cwM>
z_fqz5Pd(#4wlr0&f;2NquKKhB8YpgBDlQo=8qnYN$Z|C{`uh4Rqb5#$vlZIFDGLny
z<5}w*p(vMdRfh~sremr)#(CcJG`b;$StUlZv_3VoUQ7sySd=eZuX@&@RZw6;d?4&O
z0FW`7bDs*l;Joc{)ro`vgnttbF!%{a^0gQW#j<t&S-a;1fYZS7=jT5OSqL^}r$mXx
zVy`U?cI)nzTBj3jxqb<iwH>0k999&ep_z|0Ajb^<YzJ#}aP|vo+BH%J9nJ*r%XYCn
zW0R!*G5uD3VB5YEGxvRRdVOZ?q9tVZ06x4L3b=9t$*-Otku?%}ytxqsv38z~h)eWB
zTH)6lXQy~(_Z9FoqXuLi4;NH%2tE*<(0<k#5}>A3leK_ePBnec4;rhLGK!FB20{we
zryWG2k74``CY^ozwrftS?Vg{5!{WhnNNNi;1bifu!Y`|7xm1Z%?=%Mf@9liGi{^G_
zn_*zrw?^uR3L(*Tv%+KJx{S;E9%QF?@a|e*${N7)h?;hjo>%>vOJ9a@AocC>OcG45
ze3HTl;h8m873v$f>GiK-=YeYrX<J?N3UHF>@c~@05s1n#WM6JfF_?9vj7Dj>AB}%x
zrbJmNFF2)--9H0<qX>l?XO{n5jbt!Oz_yA{BH!KJ1)5V*Ql4^zqC+7%z|U5ZU{k{6
zYYMkpCSuMOg~PoBGDEItbfe&)RKZ953FB31z$wAdX<4?`mIB1^5h38^Pz!jwr~WOI
zme5d8sM&CO4bHm;t&rGit~|m{_5EX@AQ+AXcstcP3QkBs(aao}_59Ehmca1<p1tZ=
z1%U^X3o_PhD2SW+z#WedZ;0|dCowu-OB_!mND-8OYrDFFhK2$yDRbWD+H&lMCwPf^
zdw*odd0BEyzgy?F+Um-#(#tg{M>h6R0|R@bKy<5)ySYHdN3Rm1F+?dSEEsQI9}q)<
zDD+GVOt$XGc)6;wlTSWPav3!d4n?xnJ34kqc<X|%eOOBTyCP}GjZZQN$I|>!YX50X
z=N_2m(z%8zeHwU`x&33|ncJ2{c$W-${T*+qb}*L;S9IW)TmK<<g`My&ADORJyY<K*
zXYxgJ+S1$u0f5??t=Ei=y@wIhbOO`b--<Hmcs7goYZn`ifLI}sIGFVKWp0A8-kfpS
z#zWqIq?k{we?$DM;wO@yl$0c`i7i)NSJ}s|(_)|Ob&GY{dDngwR#v72O<Y;*u)ThG
zGx5Wd-<+_7{}ucQ4;{V8f3wqoUavEU)&bsE6(De(w)C~SMDxdznDRcMNvJHy&^w1v
z34ZFqCy9|n`cG(7Egl!wG;<5}D*3Y^B$Ml=avdF=cF)clrukv~b(8nyt{BZ2xHD2$
zP*U=>6)Ty5JoZTVUa2l?ZeCKQl}J;mQ7YT(4NT;ho4;a~<rSJ#a*^h0jgd={=wrn#
zY_JGths_$k00o~*$hSs&-;=E!I5)~JDlL`e?D>4!XNnB;nt7O4DZg}f-4auW8Zyby
zt?LMV?mWo#FR{sFWn~q<Z8!+U(*GVtPRfrB-!G!P*<BT4c4^-#TdNAH+LQ{(UCV>L
za*55{Sy{vd(HPu!wpT#vCles#D=fZLqeqqbeRL`Jr5-QF+fSdc=FDihwku<>%B{a&
zB%=qtX%b{&Pa))y=n^k5U|SjaipbYBfd6T>@K=j*{@~E8LxYdj<nmg5WFlnr{LZ$~
zpKWL&AB(9B4(+ZN!#&y&3fnYxAIsCxA8Kl`<_$!GSp@O#0cupTa*FWgqMDXv>~?E|
z;1o_y^)Kt<s@I->-~Rc0@5B#-6xJZ`?e9^Lko0dZ5is||!XPHlTVjfdS|hb8l;HQ2
z1n|xm$(Y1(Qjlw3G>V!w$oJsDaG_?w{qtsfzyrkOsz|=zZYFS*$k02kbG`(F<k3V#
z$ffw3)2GO<e3y=hYXt7Qu(^YrsMVC{B+Hro9$k2J;v*F~Iyf-oG7hEJ>Joovda_nB
ztYZgs|8=#MiVSps4h#YfMb3!2@9d28d3nYjo1RW)re^lJXq&Zd774bL(cy&iqg&|)
zsU2#N7Yq$uiUs&;K-)An+-J_n6GTTv-REFn$T8WR|3(qEhW`_;A!2S14AEnzuw|P&
zAu^P6nuOr)V%~3B>hIhA30gQww`pVrC4(eQ^cQ)&jHMY-_#D1_y=60sRgCvIjbN!G
z$CcJ6!lVzHc*Bdsb%fpP)_lS$OJOBprMS59htoBsudQdY5A!qJQLzlWJB80hK$>gT
zXQ<&hm3$U?Z)`5H0}`Hf6wTvi*Wn!N-96U9hRe*7g}GFbNHDqA%h-qWt^BgAv$M{a
z#Hfu!Uftg1Wo;{0vZfn{)!zjb731cyCO$sz>KDsjoXXH7rq#_Ms2PLH?A&0|@+NQ0
zG_`X6R_S|b{raT}dXIfVa!R}G3;&p9MA*#ifpCl>R>5(u%_o>-hsbj4x<WRpXjvV+
z*xaTpb?e1D)T_D$f@RRShdGt-6~cKSDz!O7xSbvny4YizZ73Q%S8yWaQsQB^VO>73
zpn*4YQe+1SQn?93aHTfCDCKo3+f(1`glUbRyd~Cfc`mzLkn^p7WjX!Octivk@IN0g
zz6d6_712oc&1Kdg70#}9m{q>Fyo8vVvDmsttUsDAlo;P1vVuW-2+Yr`pLpM?R$7%M
zgF&ZOjzjbD6=9yv(O!5n+72J31jpOmabVL;4SKb0vj~&syU*hXuPL^bN%VEx=B_qW
zmz`!H+BMs1(0%*f{c0ZLqKo%a{@%Hao8tuXb(lG<6Xjzz6;Qc{|FMqt*e1-m^wxZI
zwRL3OTx@&I&K}s|IS+vP$1p4-z-Dez^L@UqXR^%YQ_M5;pH($T<1kxN^XfUREA{5P
zyAlbU(L%(pVSsX(SJ~q?kx%KF&IU0d1YUrvC>f@+vz#shH_eRP<=cI@csZ4OK7lse
zX@k<yDHmpRh}e@%)GRXmJzDmKVNNS{G$|H2zFM)8i}amjJca7Y0V`3P@Ce}N!EG)G
zl-Qu({C5gL6z<qQ-}Uy;RMg7$e1Q?RBaGF(6EmThv{qJh_ZS&{OYDo^KtrV0V6*TT
zI<*|0Gncu;Kv?*yY<&J`=egpCRtxi*+OKvXJcO@1=1nrL$n2}h%Yg_Xw3~-EGxRrh
z8wo}<c2HB%Cn;lt>B8gITgt2_#q*SJ)aPG=Q6Zd(in>sPXO4hJc}A57wGcpkSgucK
zPrJHy#6`g`*li9BpbnWph&lr$UDLXJWY3fyB%kT516ONd>7hKgW3IBl53xl0GjEk%
z^?h#n4)Owa9E*hU8wPFa%5e!7SA3nThK555?R1)ZO~?lFcWL?^kOfm4Y0gBU1cp_%
z558fc5#$>s^L)s4+*DUSA)cY45QaEbi8MfZVGi`9>@&lo@MxwE6inIY=kMv#`VG{D
z%tgozV6wfjDP|t}z{0@I^9(YVZ`E(mO;7y@qLqa{9j)(wK}%!0aH9E(y)z)Gdkvv$
zAKvKm0QVYcXPS$JZaeRh?ylG;F{gmkRyW6(_I+npOBa1r|ESY!f|F)AQ2kX!ctiCa
z@xbLF*t-TbSsb>9#?l_Z81YyE@=C%zYG6frYuK73N;a<4frzh-ZMf~+<9MMuViJo7
zX>+lkAyv(6#nK-GIWMm79ULn%JNLE5ka%@f_R7<byy2I}BV_O$GV|MyWLAn~MX<e#
z5KI9sw^5aHpXsGHaHEMI;HK=dx=noS<j5wx$a1#j=!SL`;~53FAQ#M?i9X>MoRf?b
zWXyW-h=*i^(ZZEurOa*cV$<s3En4jtpNbDwa<(QR?b(I!KYmR}MIUKe(J@G7-EKk?
z<8jUJcEPuhz+!&czfHa8<!-reDn6nWwAV}f^l{?>Hk7aA<sxF~{7zX1{r%Zs5ukg$
zzvrYT-n^m%j~#QPMCi`DN3EZl9R;|~9E}n%u4(Z<$SAm1;^Whs5tk`69lY4VNYx6e
zB^ZzIGt@?{cAvgBx-=+6v+xs(wkc>f&>F#C^@@5}f;kfIqoU=!jg=d^hkMQ|%A8zb
zZX-UCiEg1P-ofm9B^9LCA;q7zCv<LmK*!#6Y6q0js&|ftZahvp1#w<a)ztJt#P=K;
z+Rx%$Ry%mj!*ZK#RaC5;kIY;H6-2K5-7!yfMJm4Z<cJ7ltsdJR+d43tHoVN=n~K7&
zawbC@&BS5cnu=A5)|{hRm<Pq{4#6^#((|-CX<qhgO$e73o?S%vYr<FnMqKi;cAj)k
zeavLB(_vCd&v;f{a%0<IP&)pKTy|*%Ws-nLubc@0^5RC;cS@WB9IaFY+!hd$&8qwA
z@uK~w=$OH$;6(k55$swf$g)DSWLn&?c!-P`&Pc!S!jKd(HnEpY7+MW;>IO=Xrpi&A
zNry?l)+C$Nh77@c?iIDZokfwLESuF{br6s!vn0@#=|nrHNxEovTi0uJ+z6TMWt_Hi
z<3nxb-GM~&g|1Fk{lpcR=0lLAbyUxx3^B@j0Y_SI^@f!^+^*g9h#+Hi@WNY`>1o54
zv6GJq2GljVrcP@RQMVKq5g${n+H}9Fle2djB@c&5nNP<Bqk<P*%qf$6Q}q0+3j}Ph
zokY>rmiBsQ2gwTtpFvs~_FxepMO&7cmEVA#Nnm5&HDRO^x-RbN!b_PX<KqKf5VomV
z!wzYJlf&$GaYcs2_4N~~#21TLcXT?3rbW4iN$Py4kZhDC^7UkTN5w5HylSZKPe%%Y
zfsB-`HMH(6qC1-DEoD{Gv&%vJjl+w{i{?_qH!3J=4zkW5OgJ1-zP&6SELknpN?lcm
zGj%M8Yo>cLs?e*eXXpl!$dysQIj^ORYJV7#jE4N-xOCRb;qnGRWRO=;<?I*I|8&cp
zgYf99oqh_zHj0eBDlX2v{~H|HI~CdoI`R_Y>6`7x1POV^0OQuWdZ2^0-TVy%CVV!b
z-Ko`QflMhj3Mt->Uw@0UuKWNN1Vx&TKDlw&ZdlneUgg>+oFl~=Ecde<9%#>efSdhu
z-WfB(Ksu`H?#9q+{Rmq6qW%XM1Ju_W&)Eg#(MuHtd)YXh``Y9A?{5#IbW70C1co$_
z9&Fr_osDnbB7PlCFodyj<`-{xTryCXHY4gQ5Gx2<Lvm}fu`LHh*s76^Tf{(I-!dgC
zxks|L$W6TN&eFORsC3$ku4-jK=uqYRu%(NM2Kk^;x?^!XXT@aZ4Y|#Msdo<th-VK-
zg+ELk45E2kWv@zFBl*2}6)>_RpcdXOE+U+9jd>j#kS^=H6ifCQEi$pb+aQOzTo(+@
zm(Kh)jAadp0fylZ-i4)1g5YfZ`gJj1;6=uBm^AUd&WPuH`O8&={FrdG-KzJ;+bz^;
z1UTQw2#`1~F83G`{mf;Cw4(-7Jwyu9q1ICr5*tB18}503&BcM{Xd|3-%`ktSlgb^f
z=cY)`xPyel8ndbGrcw1LLb{N1xj5#)k)@z{hW5Ho&UZdYAebHDmT<c^&VqlX%)0PH
zg(c}Q*<0OwI6ZBCeCj-_@jh%?PzbF{jQI_RMskHdR*_tJaGdL(Z1j68zAnNPW=NA}
zK$Cgy&$!uXM?cRX0TM<MXVtGlz8vz_?KQkM#XvFx)?rKRwD$|{asiEo238i2lDwGZ
z`->79sZjuZN^-WKtPd8ZU8=sueOL)CZZr$dCoik_gKql641T0y%-m+gce-kc=abUh
zL`12U@D?`hUwG`ZJ;zH=fWa&SxbQv}li~3+2Ps)y9}^7G^9$17q8Ah#MY;!g92dk$
z8+=M+3_~MSdl0A6&~aH}ZgtVBRk+;+1EMk6r0HxPJ^Y_HRHPD>^;hiQ`$uy;<n<Cc
zmGTGNk-1xggR5<p*1@k5*S4S99DShL9nTU(x2f#%O8($qjg)D7wL?0??j0wpqdJ^Z
z9rfa5?8FIu$Qe6IW2N&uAk>Uyo3KLQ8cc`kYitJe{9L?A59c_hD&&t5q9$CSYzfyk
znCG?5`U)JL+)~58G$U7WHg*pR<7hTbuhloXSMlej7Q5Db&;ceji^8@hXB0*}l5+$Y
z#jo-t?bjw)L^Hi>8gZZr4Ah!rmdiWb&c<Hu@ea=B(E6^Rgz@y2G>T+5s_hmiC3tf^
zdHxpXMk6|;5DhEzt*l1f^NG%DSnQr>lJcCUG0s0uXA0}!Nt2THv#^rCBi!8FC=dV8
zswb5X>k`y;cGQPlRx#L5ISe<#cRtsO8V|cU-63%nKU?~CMp{Vf`bdeT{pPm1dNb2>
za&yk6NQ>*WB=PWaLuKdErTP>R1D`7Et)G|Sy!Z3zX@AD5!S)&VP#MfIHm-kH7P@q^
z#SYJE13QZIJPS=~B84gSaqAVE%ICA{j4;{3^t`+D&HrNIv}dNp5fLqBfv2`zY)Vii
zn}0q&47s79q3MEMi?n*iRU&~j_5s6@i{9I=27moTtqRSolW20gVxMz%_C=FuoK7Qc
zc(FN;Sn+ilnpoYt>iD1-`-2}TD0LNQw-c{^pVfOwrHX=IsK}Q8R!d&E8dW%^E&>0D
zDw5=$7G3yTU9~t7>6NB+?02+?w_39#QC5c}e6op@X)*P=o5NItv2=@^-FgCxam&TB
z{Px95S*8mbrk<;&NrO6R{U26!Z#TEx(vv?YWOmauDi|U`gC%zhm;ZDhw&>V{v8@tj
z{A7L{yc@+AlI9+*LmlPU(GCE;xt6*NBC!jE{86c(z*@FtxJt1G^<WQ;L6Kp5U9h?}
zHu286R_KiMaEo9);}t6tNBB4@Ja|9}dQ{MWqF~vM_c}_X`WbdrFOBu<ILAvadq@<;
zc?EGQlPhtdBZo9q*Eyl<dRXUXFM39lY*Bql71{~G9M*25y{$q+=w$m-U$2Qe&q=3g
zTi|ixIM=r-MxgbtFDRC3kH2zj=0SQXlo88X@w;^Ou<xS~d2Xzy0WPJ-Y$G)AWLcxb
zjnCj)e}D^p*Uh-i&58+l(XEWd*p-KY#?e&LT!DlO&*>=HVTO%E3J%+`?8(x-vr((;
z;XMhHthKdjqFe@tYyu(y@90$PL&9~hPwjrcrT#`_7h{_Vy92P-dHuroYu+4E9xm2t
z?d2OJ+bqK&e=3VGw(ao0-T&Gfuszs>pS;I3W0co^<vLah9+du>4J1mTHIejVDh2yY
zKtXvh{jmuT7AZ~D{<py1`J!24EKyN_O6c=0TM0UUc$$$sBb7!D>gl&F?33SV`ADdj
z<8A@We&?kh2&gG*NE`$+j_g4*iP+(<=uVhWWd}>+&hND~L=f@H6&Rc5(ar-y#PFpd
z7PZBCH=H;EFFHIIcQuASq}`3T&z(|nz?;zksQ$N@-zyzpyM#LBv*&ErejQeGc=)cN
zs@<GNNggZgh&ggndF2!5>AgBa6<0U}3lK-jooao<H2BzTc8Bd2P)1bT;wKpCG}FZ{
zGkiKVU3)4qe>e^QR>dbioJXF8JV6t1IlvQ8wr=<o#<I+J6Q|X@JueHf?j=4_u+U(z
z|5=mQ&TQVu34LAjM%g}PUDfQejOCM;!1@S`q>gJjWDHSDnr%0*gOAsusxB^M#5w*z
z5)5K-N{^oo-OFp|#W)yso3R`O2Lns0|9GjKVHvIi_LE1>Kxb8M^b3A&=p00ffV)Z6
zFk)~1Z1>`Rg^em3f)l~Ql<j;NnQ)mAV5D+8sX7)=Q>vnc_Zz`wJ6cab%~_NSwe!}d
z)iy5t?RaIzYwwVNB>1Gs*mlJqV<OvVr)V>mS9mx8H<Maf)1ea9#fd)9&zu{+F$eEy
zryi#3^gMJkA3Z~iZ^wN^kwl*+%f$Z~1&@12ZRyrV*v8{|bvEBULV>)6yB>{pLp4I^
z9h2q1)qXP;F%xp8;Qae2is|xs_u3fYoq1t``7eFSExXASpqvQ#Vz*NZg0197-YaZh
ze-sAY{V%?oPmCl%;|t4pbnwuXZy}rAQ)CBBx4GAsatvW$qrlA`FAx*n?@Gd|4)att
z?5b%LSA^F<sKcV?YOJR^&-S0#(J;&yk1+*i^XD^{+7toUhjWPMK8{?lHgVzNQ-~A>
zBd^jbHUZI=3&T#cDKiOzzOR8!p3wE#iA^86F_U?$zxaq&E}?>$0iwS>c$-F5OXNa9
zZn~{eFV+JF5jaBUm<zQ6?bc?5K1He9ur0`s#+=WiiJ(|NM`Qj}T7>>E=@1TyWme(z
z&??J@K}1Z!tLfF?XmB+=8c+lTYg@39JTY<vNfE9p0M8eY<Wk)Rs4v$8-3)bj0ww)#
z6InkeXY{$eU*4VUPAA>9FIwN&EZ1=XuVVv2^zEmoXZ3hjLF66h(vd=Z*l+brxjr{6
zFd^!XGV}_j&Rj=Y+8nA1AU9@PfHKgBT8G_@B9@u+ZAR_FcgsuJqr-Q>*Pri0p-DSL
zhKCLzNNXbv^wx2aXGuwvtcHE>^9XP{uZ6r5v-!2B#=j-f-}{@+Ux$C<efxxZDF;E7
zP9#E8+|*ar@1&L84UXBeYu!2^l$uO@UR@vG%(|Ts(lDRSpigz}1%%U@iK$`-I(_%^
z&V+L=h>qlc&5Ay#Zq-jbno?;7R28BcHpcJNoX}a<D{}90n=um+tSD{aeWb8kjepRn
z^IHN01tVma{@kVaTfLleuo{6Cq-V{2-zFuTdOJi|kX(v1$@08|G!-w$u$gUZe|vgA
zMh2|guzLHs|L6;!T$n^Tk_}9|jq7U?7djD^4+N41?FyZI#mx6$vNwiQbh4l>oK;iF
zhku}miUu8CQ{{w-7Gi_(x?@zW=j2)n6Lj@jUaR1|zB{aJMh38*aNcRz;DiYZeLR^Q
z@<JyKhh;JuxLYA<z3)}tT!}r(-eO*u60rB;??W(du^1kB?krcg-X~|;pI7^S<9~Tw
zRvwwgx@HVK90#h<Y;~#D^zLF#zIvLWyG^3j=h+1!YqD2YDx<5&EUaRk6FC_2oYSqH
zyJ+yRxpc#lK!Fz?=`F9lWDY?2*0VZslWWT32>BIED~j2;Dy$wMu3H_^Br7~!h7nJC
z2jMgx1&&4EkwZ5vPuk2wt*zG@wBk;FBHV1;Dt=2GR;y2{ZavboX`O7KB%aFCBI)N4
zxXU22MM{pqIguq7EN^~eK2qfYwwc_ww?JNM-)?dY>)Gvhb4oP<2#8{y=dq)j!@omo
z#U-{(`7pcfc1Z1JQW^q4MQXAqswVA#5%Tm&-<V*H0T$XQKH`#+f3+}WA|st4(Lv-@
zwI?JsF+5vGifYRpUPe$#KCY?gG51^rblV(RhDUtP#ksy04|8U1ihOxfxauJOK_YQV
z#XD76YUJW3Tm^5qMNFQ)@$?~K5P9&h$VHaA`&HtD3{G4gK=}6e*v`W}*^U$Nd6;O*
zB;mR@@yqW=!NV?+mY9MjN2KZ8Rt-fZc?e2rAA<LazROR<Uon+jPVg=fU)Rc9xse*|
zz;_Q~%UC;WD*@{vC_bf6C7sLu$?YFAul*uxtZU?)!_!cqaUzO>WZ;CrTDf$sDsE&R
zCFrJB(*pqGj?u0W@YQFyzgod%*8VF8vip)ZEP(%zi7q%C^Q_Mp=AL56G?JO`)Lmh)
zbU?DDmk_5LO_RPQFQMhU)xIoB#}6$CX>__`N{O?ueoK+xc@s53@^-hQCcbsJ3O}vN
zij21?N2xRX{#2a-sulb2pndUaljHM^Sv=59r<qq3*w&ca^)}yVZ%21#<4{_Tb3N=a
zmbc}%&cF&Rg<&;WW0#S(&6^$px=M?I<?Z7V#VG6wqUG~PP1*n*7KBQ2-rRdH2Uspq
z(o))HrdFxRBz=IK6RdKXf*x*$Q0EHBVF<ojp-7A|=KQSLT9&H)mVXcwk_QIlXR)8n
zD|j%W_lMuBjG(;a`+sX62*{w^9ubX<ut*WnTp|&X9%s2wLTqSGTx;jDK($D@ij<h&
zzTnwQ^zt*+*Uy@^uTAjo^#avr)gt9WoCeqqXCd~|Edc$t_SJ9vi2GB`jU#WqflhK9
zPg{}h$VbzefW~h3GPF?8iH+Hvi35`nJbBNqK$pQ@K_^XOGND)HP^3zR6i3UOeIQ)x
z-*hOXtHP5kF2~kr!`=DUlaJS_o)Q-(50u*OlGF{?g?mTnN7KG39~P5{pf|KQp}o`A
zC`<4+fjUo>QM}i8OL`y-u6RHoM48!z@8+Lhzvj`8BC-WuK9_VHl1|vn$G8mqYX+id
zK>{qSeHPf3WL-t^yr98gF=+7jtMI1i_3>^>-mc!4MQ>$zSDjfLmgpst#Tm5O7ecqD
zxidJ^>!(?~hjH|ZNq4aGgMz`Ntxm{RBJrcd#<a^+oh2^0A1h-)W4(bsrsnji@nvf1
zZ)d3$*%pZIFNQBu8q;Btj#(KVT?^@6a=6p%_-KsIR1+xX&5GOJMj!0b@=23VH{U5o
zz()|b4>|f3NIaRqF7liEPb{*SF1v04lOCBTZ|1A`vPDP-kl6K+E}`bi8A$r(I&GK&
zE1!N^t@goP<pa_-)DYO*p=MgeIQauzBfNG{-6&S%(W!FrOV!#P<4x!^YMd*9_olwm
z6O6rGRH9Qo<Z*&G#7A2w5zyanGu*v5rRj`~N<L8OQJ*Y`VS6&n!xQ0!JT(2EAz?QS
z{Fr4zI+IY4KSo<GU?PHF^7eat#?LRETi?RYYQejklF-8l{cbNjI_MOOVX{{d<m-DU
zY+hRHw`E%$k_k7N9y}-AaknKi`iH1W#y7clW)UM-j3zcC+&T#X!U(~~6$ZaUiGV{+
zL6nr@<0@%-o8Auof28B7wIE`|p&!!X?JcHq$P!EC{>j-*obyBz`-F_MNVO!BuS|HH
zuPDa`s0YKNH#3EmC8S{+@;F`ZRvhBJ?khU?KOfUx@3=&-1hxezYqdLbV4nEz)*24|
zMude;Q72}<SZf9q!#eYmqDig<QAJEAvbHTVstq2?vyy`x_tkM<IJEDykC$%HN4JMp
z{XTb4Nge0wz8xlYBomgtwlPBFJxb}LxnTKx!=7gI7J9LWFe^<!MHL9c`rgl}Z1Q8f
z+qY;rIkEpQgeNqya2i~-df-#&yl$xXpZtcF_Uj^o{pW&rtk6U<LneO`cP?o1AC(Ji
zt{zmBl*60L8<AcfPg1k=I=HqiRAeSUtzB`dgD*&D+5a{~E2J<<`4z<EZQZ?42c8h%
z@DB4+UFk8VnD$^YX@NENv0JTzl^A^Gn<4&;uUFiklzJpfK_SjdY<Q#W*G#N6<5BR|
z|Aa+B7i=4Clpln$%NzOmD)aHS&oo&a${cJ%|5ZLf{FMX`HwbH980Eo=<6*x__@E6C
zo?IGAbQ!^-{&C&6lPL((`^G8~iuBu%S)S9jwp9KV%f*9&-G(pkXRlgYqv=swXPjMV
zJk9jDE+Se-c(Kdz{yoeDiy1>e`JpGieKRS8d<wmcYRPWI5<>`zo~55FIz&qfgHG8@
zWUo!@M3)Vnd9ML3{s|-Li*akavdGxE!_vYej=|WZCtIfnr7SCi(w-5q)C2<876Y0e
z0fYQk!NSKr(a7=b48pJL-l>2{Jy3T8F;^-E><{GzI>jD>`)+H*Ri-dd?Dr|`u3Pd+
z*E$<81}Eb4Eu51W<*CsX6wT#v$B7s9CBmcr$8-bVS-y9>qwWu9!4EiqG~VAz?A*m~
z!=L=HM+It#@hGj9gtsNVo4+U~T(dWWZb?>%P_UWo)|=+M!~t6|ol&R8mX#cY4BFF8
zx=ad!<!DO};cCdtuvpevsq}iVjZ-JgXH$Wqv@lKir9j@c2}d*Qn<HOsmRX~Wt8u!S
z%By}BSzb}fq#pm?4_<vr`3%y}>8$Y4umtCU$m}BTM_DyX!}YYBt^tAfm(lf0U%1==
z)U=d6VkM?tKqZ5AlAkRk)6MH*LPlJ^6aG4TV-A;pprj)&<{R`0-ZqDsli;S$EduLX
z@Tbgh1;>>If(C_()-;E=M84(OlFD~$)-}>nJP#Dk0f@1tbT<ojdSIQT6bncwh0nZD
zYXL`pCkFcXjdS$j4P6<!l`#!xJkoK8zi{4*G9jeF_;3vYODv0+_t#eyl&@Vwws4q1
zPvPxBc}ENNZ1Q@tC$AvHSJseS!Q1s4ZT?B&YMrv|z0AJ1k3#<-(m?oS@^oXB@B3Li
zhA=I##`oty_Y4!ZLLA+~e6dMs;$eam;XJ4*HktxRj?(ia+sqiBL$4JbIsEd_&3dhw
z3XksP;WJiFLgNfC+GN(Dff2bY;$(>D+7MGbmcFM%C{iNM1TnpSm$<&4Sp;uGrp3eM
zSNu+faCjP?D#EMuygeC;>Z|X{s-X=Khc)BJyXk}c7JlZUKT67;4N4T)(Y)XXq|}lQ
zi@pIeGK!D{-=ra>y{7<3eqzA(V@56#bHZWz2=w0vR{o_WHChkF0!&Vq5HZg{s1rnk
z<U|D?DZeLs@|GC}gW#(x$M%<siDb(Ld-9mCf(LSeANmxzKKvW+g7Uxi_Dz~!w%}8(
zEJ_s!c9&f<IwQM2m$yIrC|}H;ozA&{uZn`tRU4mu0<#KiG4;jG`@l)a<J?j(Xfj{N
zdXDvvjlB}pXA2_V8n93!()7;)3E6|N%$LzSe@gA=<;WC&3%LYkGNI&=Twhglxpz?b
zl423lAd|QYYTwHaqKtkG3Y?G(K`L*srRxg)R4Y>y{l<4!&5zScha!(l8-D%E`Qm6s
zNx5S<O^XZzlxe{;S1$P-{vE!_#3Oh!!>L}G-k)@xhaDZCf#HkW;X)@nx*`dOTk9HJ
za=n=Zc(<JeZ;y9bm+9<VN1?)*KwNgaU&K}u7RFr9Jb!@BrO}@IM4{^}h2dvL1~AuB
z!fb?93ENwK#{v)mfA?xIC(?LaIME?f%bDfZEstumqDWE3QI_o&a{eZk*Ye%MGD@Gd
zHOkkGR}kmBbbh7Mh>nS|hp31UT;PZ%1LUZU20|ilp7M?lE`|ITwzr53e6Evqy^4K%
zyh_X7xI7mBl1W37q`Oatx>ElL>v=|;^vLz--KbifV|MHAQw4DnV(8qlM<hE#Ao?Jg
zj`^FnpP{%)C~158xl?$B_cnVE<{=n$;C;R`SM|#D#G387cg-8lP4pGYN!HMBQv?p-
zN;K|7`G9bTX+5snw}Vn<BQ(j)bF*G-3rk=AInz%{Jfu}U(5XU6)%D5$;B<{1&jx*e
z9lvPZj?tU&99!=h%l;77MK&<)xlqSgilDAUSeF-!3N)#J%bEcFV9%cj{yq_`RH5bj
z9Yw&<|7tZX3;%ihvu9B-|EmA0Jy}AeaXH#+)^!EZJnNQF1OMX)5&08diTS!4Hy!=;
zvQr(FSnV6?D(&Ms^N6f(*d;o3;wgB&+Zky#9YQbn=u<WvT91mZClW7z1xj6$bHq}k
zJq11$(Fmegj5Q@U^mA%#+BB6%xA0O`4wKy)VfB&5dcN;E;_D-?+kXDfM%$+qTx(Cu
z4vrn8rV%E6Y|40W_|>wdSdvfe))R8B4ae-3DQKQImfcnv=cV-0v-gzhwX+bmU{3V4
zK%U0ZO06Kut80;;h+=I{k0H1_$n;O->bBq$`H~M1mNU=meR~wLMl-qPatyC?c%E?(
zu`Kl(ze@-+r=iqLjBANJAf85A>SLpgqPGf<-5N}<U7Je}BS=56pO1T9fdCU1RQK{&
zcP8`%WZhqxt|0lVdCx1iHDfjpP`-}PZ03_{yM=b0g$Hrl{-D!r!pvmN(;I=Tol2@D
zZ}|gKnVeGNT!o)dfe$o)`dE<m2A=X(Ix^zug}Jya<1PJ89!Hsa)hXkIv|COC>RZwF
zDU@<N_mpk@N2Ip}TTj|pOp3g2)lN1J<(|)GXlAiFQyBPKD`BQ+=|?>_eS5RKhOK~a
zt38ud&CXM9t>q>z>+U0Ek`XPP_wUArN2q}-r=O%?OODXnGgjne4>apPzRaI8kO2aL
z*tHw7MZFmPI{FNx`kXHFB)S(?c;Ef+;t$qgoRB7S2%<$*Cn@sH$7h7SR~<Qe{h7O*
z3osugqI(^gL;yn7KM;w>McCC8WaUbH-xiQE6dm<@UdE$+<dF*2;C~W%P}#snz~!il
z60<q5Fn+7YkYYzLF=aIo6zx*>=ChdA#n_@%F=jSkby_I>tn^Y%jMRb6^5EwSq=Z9{
z<#Xr%20Zl+AHgoj-B`cuV)6(;A>CL#CgfP(<9N-5N5g=9C&C}q3FwG2S&B<A_4JcN
zl*6L>;MDTXZL1uzsKPoHrh=|JcVNR*uT@Arq?^A>PtHB2TBx67u;lXqf%)Fd^f)>8
zY&HTiB5n#Xuvx;O_WJS_catT$6&!(i&2agw=>+z@GYc@sKCYw|?W%!I=5j5_FPwX6
z+-La83c-G`IK;-aM<{qKDib6~l&6eATc6l0iE&$>(01-^;M`;nj6gyIL@AK_V~BvH
zLU&jDv_4G^+sYms+@GgG8WF?KDAAbH^T9yD*E`?uIbSYwhD?UhlJ6yM9sE-E^kEmL
zOEP<`DEd1kDe2k?xA|f_@XE|^Cu|zoJ#DK?Y{V7pB<T;7cR|$_N4Z2VOU&O&F=8Mz
z;8+;Ov8?qj`00QMvZGegw{QT8D4tPiPO@hPUsUg5Dc|XPB?R(<RUo$&GxEAl(z>wh
zM&AcwA6o`ljqZru_&0zj^`54fG>?)fG?IZ%hbf_`pnf>RT4EEzLm>CTeSXT-+>xbL
zc749CrBbIVDilp2UBa~mwJ<E#AjT&t%8#G8c^dkDu(+q(kK~40u4M&RB9xK1ZB^$!
z9<G$?5on=(k*X;1Rxx0WPa}&b&bw+8StB_u6Jr*80ol1pRy)4d)k4n)E<e}I6g95h
zVsdKxB+}gku>+onopxH@>$5w@j)D&7EAA71<V2Mlql(_4ss}vhff%0>1`>o8@-@ZR
z3r&Kft-b|tjL^fzNOPWFJT?)QWV)c7Oa#bCv6UPnLx%R{!9cLe16Bkjee3(AgmzQL
zqOD@C=Bm8#(guhDeA5NH1%qrt8T(s$z7F9Ab6OR}Y?mx5>sES-VIZs`ko*8G=zbtn
zzEoWF_dE{Y-%by!76xTk{XJUQJ)nad6<FCTR#+2CNn&ALMYswXY4!M`F6R;C<gG(X
z9yz?^3+LvFhT~>x3E@!ul$SkhYSee8g?bd3a0#uUY-sg^lMIjKjTnaWhFT4qkaoc)
zmf<ZwO^1aNi|p=LtVx9_gS}Qy0((L<@VKn1T~aO3)CP4u(d**;l{&HUmeG|x^yh^x
z&$oTf^ipA9aPYIL8|=GXPn-)p8esj|98!#qFws;-jnNy`#Jf6PYxs(_tl1z~xpi)t
z_y4|})h0aOVpS}>h#_s&Mu9B&n}Pv)9{>a2;#4!fU6l3{jG%|+`aq1dJ*?>qo=LDt
zc7oh2%<Lad^Vwggx4caer}?le-y(Zwj+eRs&tbq#oln?gKyPB#9h50DPQJ=~uSasr
zujXprS)i>9LK5q5H{azpR6R+sGxCHgo{e5+lR6FiMgN3|HG|+TXiu2lRZV3!^!xlE
z<gL8xmmr775<7(7jhgT-8<>x=*fMGARFvupcWjfIsJOcawp?k+n8(5%?)%{*r~<cW
ziLV6njedtYPkRX*q~;Dwi>kl^J?HV|4_=rr3<t{s;}Cu=1A0TC!wCAhY}JS$Dff-M
zAS4e9yp$as<MF~H9VLa1R#Z)wdR-_ONro+$QGB0~pP6BEK{TO|V~F=Q`S+5A7s>^d
zI-J5^&uV)U_<(KS!Gh6}!%fiT#KOC_Yo~f`l0h1>-ywF59{}72K`^uuWpux<(iQTM
zQQ=2&4QhnD{P95sMEYPRt;~8n42^p^Z7Suom{8$9%sSI|DHCy@%)7k73g561B1ts;
z-|x9F&r^*G{gX@sJk{J8L2q{kq}Rpw1|%9ib<&#-C)8y+5l1RHMIH8n4-a;cbH3JB
zP3u?X`&q$Mb(=M~{w}8(yRAIg0G{SA-YXgJqheW1;yo$ncKUW<w9&llJDc199~x=p
zJmU`lm*B$Ejy$R_ED;WlP0{+0M&*@A=fq@{?jQBEiZo{5=RUUn#oQ9Sn0kd3I-j%5
zSD?x1q7X+GYq}E}MQ}cC_pXPy#_N6Rr7KAzru#(CYS99X+K|`XriY2!aj=}R$S&re
zH|)J{B)E;*jb^65%%@Z^JO=s5#vQRjgpH>(?<P`<$DF9LVpkrk?|Pm!e_kbB`h!5d
zx=Zb=6Ig99FY!0@D2r1MlekTzqtXPV2^Qq}0k!nhq6ty9L@z!B3?AOhh9S;Amg+pd
zKXLCx6p|A}fwxRpXa1q2g@YcpTA=?H7VGq(Lidf?h*XOyMT9N(5t;EB=!Z0Zndra7
zPQ#p?x09M{0FTh!9Df3SAZ8S6=vXOaeHDDa)#3|<jdu>#Upw?SSkwsfx3uNCVvrTz
z0@3C*I)v2dFdM!n;4qBKF(RSFAyllYdBSG*Pfl!GLBLm*3YjFUHr#*Cv{{D>PM{Eg
zi2oFScj280G`9R~r)BwZhmF8!#N(F&LqzFcg3t$a@zJ%ZL{cVsATiFC5lLv?N^5%K
z><qsUKJ(0p?hh0|2<LmvRse3yvF^{3{k$#I#@<<#(n_B=nC80-BnmGrumE;FLr2Z(
zU=V0s5$wOT_Z~&WGE`x)$DO*%IM|8pQz9ToR?F?|$^&(AwfnZ&c{n-)@ORP6u+1^>
z;ewp;hseL7wP9jlVvd#O#)b@lc2YlWQm;lYkuZGuJE)pO=UbZy7tMc_AViaLHx9X>
ziMK7eZLHUQ1FfJu)N_BlKw=1v<`z}!m%c^fG!A8Q?#o3=vc9at+{^}RMS0)SBT{x;
ztTzXN-0-;v?IT%%hIB>ekEl{A&bes1pKpNXz|S#?`2Q6e`wb#<EZ2)R@>a+(d4Zf^
zg(%l}=%!<`7~{u=zmHIT_eZMvTK_90&1vNOGq#MZ^)00OeRI*?Gf=4H^dXz|ZNsqr
zWK?N2<^sVXCnK>PJ=kQCl^%eT_BSmRN)#l&<mYVpLjB7Wl7d=TUG~kZTDMeK9dAfN
zbQ(d>_t8~|pE4e{o!YowV(^woyo7$_rb$ZyUNs6l53HV3GW}yI7SZ-b$=#~%h9dU>
z1=aydWV+wvUZpI(>34?du2o#uBRzNkNtdApe>c4BHSgb=89(sMsfeI{D;L@|k@#`v
zQGy^^LM&h%WoNvY^R<CsU^)Ey^kw-LT}%Uq#RE1%++Va0#`Wc7-4jOUMTY~J4moz%
zLobnnJBwvgcXgBO9mQ>{c2y%~`3P6Ghap1yu^2o4g85EA!rU9JN$#ZO;gFi_cywOb
zQXDP$PCNF41}E;qG3(Sm-X+vi$|k1$fFOGkRZ$7rx&<ze-{1-vq1slz2G?8B*(_`E
z@yg9qWM20XpthvXRsPMI62pQq4T82Uwff9zzdiUWdzpL4>>yap7w~bF9J|azArpKj
zYB?8Legq3bb=s1RftB^nP<;_a@U7e0$Ywdx)UL7-%@l0b2(@Zl#^|%+U$oOV_qVT!
zR1HRRnfaKy@!XQz8ZN%+1CJ9;^T9Irn2Rz<kq!6#xX$o5-LPD8!+6Wamam+={GC(j
zHgy+@4y?*A8Mw0N1~^PMzs!CB7EnjiFpQ}x8hCyeB{z@d)Vk>L0I11P6@=c^%x+eY
zioCMI@6L#?Os&{1?}i0GW}QOo73cz&x3MWJ7tB-Oylve1a2j$-GST@*yXNudsEN}k
zk)!Bf)ws5N!kOE^`Z<~wLsB~Nz6Tb|rohcu8Mj&P1#w40k;xHPSE>er7~c@`Jy0P`
z_GPF1!8uGWRKsMg;y_X;Mjd5*Q?3_<vJHxcNV7$1cX)Vrzbc3+ayzT$dbTux0Q=LF
zNQUBAj5lrZmA_E{a>Trg@(L$%WJsw(m#b2VVi3N%biI@v`1Sr{!OeST$Wcg%RQ@%A
zkQ#Wi7If#Z>=52HVS|qG;O!aCMw>)?1Z&u?KmQKm!5+2Ks?0_GU6HF*XnJZa*}}jR
zDSr$1G|0?fJ=+G+P|}73n@>^9v2AlgsSBbyyfvvrvEtJRy5L>j=DB&Brqld~!DUi0
zH+L<zO=dW(wJUxW%}%ro2OOLj7H~L-l<}76A=-&kzz}>kbm_}{7`4dt%L`vr&cufa
zo5Gs42%oF=Oe5f!aDAykOdHAtL&7o!%MQNHYknMaYzN5O+t<V*y{grYph;p>l`(bM
zUaY+{!wEXgjM^1S{u~I>xbC;7&%B;TOT?unGk!^kc2+B*sJoP5=Ca$59D5YH!nQ^u
z9fJNd{tEDv4_jg)Mma8q54bvnMTvPm!LgxWE((++WjXPxk+Aha6PN3RGq<!T^kq;M
zqN~7KU|!@v!r(irVq1KSM!EU&>OsNeuaH$yhS!f*j9t;Z1@3l1U+VHrkT~ifz>I58
zFOz0|`RW8bxL90{)EoSstSbxyHQPp|a__n#oazN$D)u5hL7gA9<q_#T`%DpB=q(IA
z)yUP=_1+q+ncg_{(2an+=P#Kbe_J?`l7(7-=D|m+R4<;0X8IYB(#~S3l@4Qd$OGI|
zjb%yU@q2TycHU?(^VT|Rz7-Kk55JhsXcVsLDd9>|#kAW5+}2CTs-Lpah6j;WH)laL
zsn{qmH_@Ps|4Jb1UG%uvU(>gVHJgvGtBY_pNiL~|fEDZs@N$l=lGcIQPQ=^sPYo(_
zWL|c!wtDc8)83+6Z5sQKb`k-d2>M2uI-=A32<4>UVx}#9#qPZqwtHWVJVv49DL1m6
z%k6EQHb~i&R4ds-rRU^WldpWROdS$~eci4bezn(xJ$mmHZ+$U@%n4$xbI4=cj<#p>
z1o*QL(LjmfWerQT)y1*BFMt>e4!O8jGo!GaSZwuS8V+VTDcf2kE9_}qj4S-g*HcqI
zH68M-E@y1><jH;|-C+L?5GTrr^q!;s{g_fY0ym9BK}ZfCI&0|vG*=phGV##`cF<<o
zZYHTBxzbL|LNpMF8(amxixg5!v3QvORp`6u{btC^_>H}{!B1y0^P_Ayd@O?x*8#~}
zZ>o(p+6I`;vCWuSHJln`CC7)Vhs%FUc>Eqoh0he>XJ~(Mof!@O2`!GKC{=?fm&PoE
z$?yaP@4)vnV^6f64~~~SEbQqwiZ2RKtCP@2v(=AZlnAP0;z(cuXWLku5cle<lGb{0
zmeuT_VDLx7g{gY1<fz`qeGgFEZHMr2VaER01(wuQpL!PCJoK4}v5(VXltzW*;Ccj5
zhO=ary8A|=ag5Ec!tA#@q`?6KUI;puu&LwZ*0yu5WJ$HWT+MTK7@}~zmvlmI_bYv!
zy){YiggH1gZrRWLNcxzkWy|YPtorNEVT6}X62E?5x7n>DJ}E1R@<s!$LuVbs{F^Ov
zwb-!FgQ8H`+|y%4VLmIs0Yp9{Y2xcvm9<?xudxYST%r*&6?eL@SUAniMf6<Xhm+s=
z4{D{YvD3#ToM-iUvx0#pT-2OB`M?}Wsj#tup_7#hL5%Q(*i@HkLDg&HzvxqU`@hzx
zr`sDx^h(4a=@rUSn!{9+^mg7Y03ZEZ_|}%tQ<<f0%{V2~c$^1+%?ybt%w1Yvwinrx
z`r0oB73}g?TYM1Z7-NK+J$K>LkSI(t>$)P7WR87ONBS67oN#a3D{RAm*hsc#C7~4F
zJTEU2FbY%VbotITrYeGsZZ_QGasIVq?ezv<LWNzRb%SljwiVN*n}{nl@-AgFhZ(HY
znrtT%u4Af5K0G_anW+C{nQRCgf0<Z}i%o}ElkPl_z3uQrgW{{d#YMxa7DR#JMy4gH
z$9XG3R-PIWXQJJT!oI3Lcx5R(NK$2r&-MHGF3&m|fo&f0ZUlk4hMw#9Lj%9+K5NZO
z=>6_CBCQdkWrR){fV8~c*|RXdyodClXEcX-&dV_vXzA;yFW1sCEU1pn>ILi?`eES9
zZ0+QoUGbH;RmPXZXLlL$sntP3g8@0t@`YE6;S%enRZw0<n-7+!*sy}Bc13jNA`v8!
zumU>~{VKR0K@84k+p_U8Gt+p8dB({~i$9A(BAVhb(@6Hi`(bs%b-!bOYd*;#`p3~>
ztLlB5{CX+ZjS(eT?x5SV&g#bzzzTwBNLsTy%Ugj9-!;o#=dsSb&(&4<bG^98lfkmx
zfi83{Dqp)5Ttx@vLfK)NyjC_-wid?0hjOy$(X$p;C??p&))t)|KPR}wwewI&3{07a
zq>eoAQ#;jKtrL^{uqNY=)t2vZ=Z!wWIp3Ur&zbyrWlDZ|=JUh*($=A#Ak)5@)<@(q
z0oztVLE$EnXB;JjSH!Ty3Z!{Y%>+bWr(XtRZ{Eh(I&kvAvH#68in;&k_xUcyqw(~Q
zmw2i>w^*!<2T!R#H=(}M281zxkVQu`IBX7m@V8cO=k=W@7`Uv<G+^-oijvSqBvpJ!
zNCezhMm%sCO|L*AV*hs*5nOiLe1&!Mb6~kZ__zyeMvP^X@$)zF?N@k`7>1v1bK<`~
zSpN2%)e6J~_YV(PRI5!<$a(IIK_Z2#^2Jywk%@cK-tyFmUgAP-=QNF)>uoI5^yOTQ
z^H`^E*fX>)t#4CI8LIUP1aeiI2;7RCQUA3Boh*y$^JtH@wydC~G4#_!Q495J?3Pp>
za>;_G4}ZjQVxbx-*#2HziSg%9sY5YC&P7XdntpU<5qTT_mv9~=m`A^7JV`%w?fnSJ
zmGT(`vO+EL`TF7r|8>s)N8MYt#noit!Z^X*U4m=lPH@){f<th(;O-Cz5D3<|LvW{Y
z0!iZ@+}+*v?aVxLhI!8~IA8XMzIIpDUcOeXy2}Qd?Ly+RSaicRj{DJM`NC7JPNbhB
z#~9BTP@|SPOiev7RNeeb!T39YJ=kzM5hqJLnhNymKUe?}x;W<Di>8O(!Bn;PJqID5
zhcJa~*hm?A0&gm1<`VsUw)THAncGlnYB4&y;T&xdvS=&e;mgLVZ=kN65i-xC5OBx-
zvQNbkUI-DV>WQ)a-PHsuiEz`hPnS`ch-8#VDW!Qn{hW@V<J#Lc=x=_<;`mlVCp?^<
z2Jo%0hRd4inb+$>MqZ2RF0+i~jupR~j5OWAZdK=)7`eXppz@3fc!OJB*?#{w>`vX?
zMxNWFGkCy~W;un~XNhvMSXtv}AAdH3VsUkj{-v-|zs=P2CzUTty#LK57`?9$m}wGu
zxFSsDGvr}<1;r!NHJ{!CepWQd^td5I7!pj$$S6=*D$4FRPSl|%q?^+&RdQ5G<b{c;
z`mEIsejFf-`_ZwLHZl+rq*vbOzHQAI+;%zyWS4zm8rH;a3+`}Y0}b%9&vwY4$Z30_
z%R5;Cd_OgUdVmWFNd_N+{1e?FX`$RF7ZPj8;mEnxW+o=4ggMug4VKIT1&<J6LqR3~
zctbs3D(WOw1DMHMjW;C8D{s^>!%v^!mUnJ>H{Ll;ug5_e<(!z*Pd{o$qF9NyQzc?R
ze+Jx0(%=2bO+z^Ocmv<raN!xzG+^1?`#{!wm7F^Do=%0ZjE?OZ#tZm45tk*9gtsN5
z@1`;#{LPGP0hwc9P1H?=OJ}Jxph%|v-Dl$$<F2vKHq~<Pl{(K_nVzI}cwu-p;e5!w
zO(}d2m)<P41`Du%P3~ZskJbvwTmQs=G%WG^-9Cl6#9XCE8Y>XHUzh`CVgRqsnSnk;
z;JsF4wTtmxF29q*%`vQF?tpVw7$ZqHIx%gNT9D0l%pAZqd@IHEX6c4XV>WERye}Sz
z;4Yacf5ggTIl4}}T{i-x^?##k=+U}0V>&_hV<kiTvO=fb=IsbMzt;UtC&4ARIFV}p
zM^4w_)zzOUBT1Ioe)8mgm+!8&a<da^y7{bsytG^D>OBc(@-g)U?rCR99HSMTw4bD}
zkn-i`LciIqR#Oo<5*9eVRoNbge&V$N9vGt!+Dg*QWif=hu`_<8O0#X0?D`=*0ra40
zHVo~NsuQ*9=`gnO^0akuZp?7|-G5x7V)3+kJbB-MGKClqM&MtKf;OeoQ&TJ09>5hx
zJv}vrnRNQP$uEMN^8tzSJNtP~S8F4yiq`LU!8X%&`6sx7E+$`=C{gKf`4`K7GJG71
zp^_lxqe72F{Tb!J%~D@OPnbs(BKdT`=o}&(30q4{d&W`Uo?a53%CVURy=*EVoF8I5
zz&$$5C%Mn791Gqnt=rmA6;0x`k5yYYn^;hDFl4+j;1wIFOpQzg^DkfAJ0VW0PT9>y
zAv@dW0q!JlGJzztGK00|7m#+<Q8{h?YAhv+KOfq{;SksLW5ZmA8~8$yl&-8MsWVW{
zZ;U#1#+z4ZOv2XiIMVjW_wuM|wx%>&`cfTbBw)$IKpza>tl;>U=y3bh71#5eWtbY{
z9EK5r=tZ$&52%#8A`cVzmI=!Pz+?eT=#Fj5BhphWzrQtg5esArWmC3Sb>ih(MU-Lo
z`2K)>cG@o_LK-x+>h}vHIPvXM;&fS2k;(a?0`FH)=wyRbqG!H)z^(vLsv1%uP7Dy*
zM(mxA!&wjSYH^Z18WC~~6YGN^y4rdZQ#Z}=b@qLsfcc-9`Jf3@1Bz`Wf(MZu@0U+q
zF=f~@4naDW&D+E{ZM9ZPS#E2Urjg-Q1YR~{`NwL*h``EY4GUSP+6N{^X+p;=_MWpL
z_s_rAGOIe6_~{vtO=qigh0(zFjE`8T7Y9*a_n)YjB_&v7?$)E(L$Mi1-MZU;w$Y_-
zz{}}@g!TgI5n^gX-a)r{EF&Axb(8kEi*|EG%-@tj1S6NDW`KE))q@<5`e*~jObDHr
zyEm+4C%!U{HLhH_&}Dqqw|`DUHuyC5#sX>bOovdPrqNT+k|X~Kl~nwhjmmibl4v6T
z;n%TrX6P~GsIWS;nbG_Fq4DMzfv?eDC(FI)ppgj4@=)V3-_lE$osK`;>p6u-nl~C}
zU8LXAn3R&1??6sg*u6L1a5)tjlWIS|pBd5&NmqWO(+B_S4Owp@C+9igW(j^++{e@{
zmWb1DQ`PN@?gzsI)oEc(7B(Fxife5-J)iMwJC5fKIVeIyc%3Blok*X!>|5}EbULrV
zsiofU7`gPI%}@&}mIysLXR-`$sh|<7xtRn<Lzy0*bP3an9$lKRG|hU%lH#m6sT8+Y
zc`z7^5Xm&IQv@jiX!4b^dG#tY-IKWGMHD(7EZ`oA=3DpUuEj61Ax&SUjE~xu+QsOf
z?jwFO0uXtbZ*c<T<?X}!MD?!96WX&o@$HRQ=7X-3lwy8W_+|{MZ@-wTY9`sn(qu`C
zPnM}-{;Y*`sfZXp+^p#2fC%JmE=<kNdru10^UVesiLRnzV&dPa3d2Be`dB5RynRD2
z;5a8yhZx5q>~Ceu-K~P53zk}An?%x3vM^~_+;H0gi~bJm<{X_}(_hcv{Tv$15Crsg
zTy2(@i~RmJdS`&Ss)LO_^K%~E8o$_B{U5++R07fly<%tU%tqjf%<=w3ud{@SiE~3J
z61oogtlZ<Fn&FRxcgJkQH}KA~TUe}oKwcpY8bQvt`G$YqJ$rHZkvt85Tr9<qy$o4G
zo$??l^G?|aYv!@_(OTh>aCQknP^ddPIa_21&ZdCJ<obEUXtU$y_8}j3MS@_NvuGTY
zY@9pu_*IMvX_haYGp)$6oF*-OUqRQIOlSY9iL~?ErkL&AGm1n^JB8%J874JA3t_&=
zk+}+;Ja3^(Ii2={;41$th>Qdw5zD3*Hm72<i?7(JvVUkAHdbl*QAOSwndELcq22v$
zY8&8)!+ECJgp_dM&Sm*-2}^xPM+xqri(07e9i70`)~rJn-vuv}dFfBO*_}E+xE?2`
zZhEyhWmbS1HsKU%!GSO2wKoOo(SlZDyMy8%J4F#Unv^hU4MPn08=Ery(!XQA-76#5
zsE`3TKhAhtkvrR-&<xk(`&Az^Dr1|C=LwvT^~7~|uDy?&w=_5JkD!Rded&T*LRyu)
z=i;_qmgykBN|W)g?R0`{`4yZP+(1rwMLSQcgd*Et?_Arir);^FhnbRB3>s41abQu_
zjW~Zy?0QB+zfNgL8?33TBXp&dJNR|K79g;i8zQVFz$Pj)@4^3JLVKj!`tSrqW8v)Y
z%)+CnJnm89>ua`|#Fb7)tU+<B2WLUA0y(;b?)rTLHyb1n#&r3f+oQdf>1L8;NY4wv
zALvGXDjZCEcnsN<s1$1xy^ZN0i@~)z2gqAxVUw65QFz?=h_khp7mET=8FuDipC}R|
z`^-{zhZE?ty;Y9(<t2468uub;bo;9|WEGv&d7UszP=Wm`JABJE^=)1bx|U9oh#oL$
z(O<%`4QE^!xQR4LvbXs8%0i*@hmC54D>9;72S2cK$Jtj4S63MvQpix}ou1v|s48X)
zIZp0a4FAyRe&EC+n@Z<#q`cU9qN%eO9#0r*%cYnt3o)9x62`I(xyd-yVx0iZ?mCUN
zaL=VC7UC0G4Baaj&53jnV3R^=R%0?U=`%Z`dXYa<d=;6#7I@PwdUO(HC8^l7UQ#P;
zd%%?dh!tB;xtP0D*P1sCU9aT#O*Xc|@7!VkSaQ?YOfA13C%Kv*b5J4um2<H8j#rDX
zlgbI@Zr@2vO1zs~wSLA3*FU{}dkOe#VI@bd#J!$~VK#S;rz=cfO9jKX@;P6B=D{M3
z&m$ZepO%Gm%*5#jPe}UB`lp^G^#R>FRHa${{<&%e0*fq$MO4I@M{b80*<JZ<icn3p
zsuRDj$wX+>y}q|8m=tW$1f$=$M)&DXI{B3Hds5|%!K!{42G~dQzc?1ku6NqDX;IM}
zDFdGC<Xl|&yoFV)=idjo)@p1h=irAYCe1J2Hp|sBD*+}_7;t3PY!KfLNn)1&!fthU
zs^ncbJfuOk%oHRmV~zd#b;>_3E;^7=o}0V%!nyMsi~emHxyDXe9J<VVqEDo;6|&bt
zU;vmKZ1~=+dMN#-YSG2kNJKfKRZL&5pZ3&eN_$0azE+2rvG>sTv?Gdv2hw>lZ&pPA
z9GnX}Uf6MOm-Xeb$E_Ow%D+AIk%oo@K9@#R6g$|{kIWX*iN5ut%rSmLbr*`NKz!$e
z@;U(SCpg@V8LNGt%Ii5Sh02QUkM|!iRT*vpKVPs3^-o^HqBQ$$FHyQ+@-)T}Tg@Bn
z6oldX_8kze0u=)@8saTlN`U1f+lnt2GUAV~i4^{Xh=`ML{Y&x1u75U-G97V(BI(Dt
z$^i#9_lJbqt3l0#8IRG=Yh05?r0k^3ZmWY$0Q=naC}iB8`uqhqr3zh;Laaz-negSR
z-`HvLo!{7^Ti=1>!1w-*)me(%#$AdwF(uKbLzIdRGE2)$ua-96O=XesH10+~QS6qU
z(EP$$+el^}Aoqv*Mz{uj0emPC98T9qn$+v~wH(T%Hx&=_<y%aL@Df42?)=p^gd9Tm
z5Hy<5+B_*PfZsxk7PHrV8bM7XONcR991lA-_gmuDEdQ1RF{jl;LcW_a1fb~zTfw2<
z*X!YQi<t|{&`pa~w8p6V?6HRy+s)7s%Yjb}P8vYEz-OJEH)%D$9VhfhD8ipd;5y^O
z1wPMh&GZpjX0m#LYz-{dDC6;<^4+l|Btw!AsVF3XQ<RJd!AfkN5g?AaXQf?5X^z`L
zc82c+M&x-nR?qzp5lkFYg32F2v1(pDZejez)FH;dbFIZVyDu5lxY<M2Z~BX~z#x?m
zr+A5Uh!L7%0=t}1idM+7{-c4+bjtQml}Rv>)UE4Yc@K+vV|9yLCA%l$9)v_xrqNI5
zgCRV`$yDwcIl>FZr)BKHA4S;}Q$`ZaZ#M!V?Vv@yAv0~VTp^1Ye<q4gM5=9{RoFVu
zi8&B4CA#`9s!4uMm=9j2hpZ?Ca*Ya0E+e>dLe9DY<C111Nc*m8eR=jZX9wt*oJ})#
zg=Li6y;4xohYjA~Su<H{0~aYjWNy^fRm?uz!-&o|ib#mwTZOV105I%zN)sn3#<`l`
zY?iBPBlwulQ+sWG16Sic1IzVVC4R1{c{2q65|-|op~o141UL3?F859k_%99}AjcuO
zk36n<oMpB@D{qUP4qG1`(~x`qx>2Gai)qfwMhOc34U8$Ar{jwCviLQ|x02i)Vl-Cc
z$XY%v!Gl(${Y23$n?S<LPLTA4zV70g2KIiie9o08U_B_HBIhWB%Oi_){FontK|`5Q
zrIiR9%X5r-j=TQ(5a0x6_pv9=>ldbW{pL@IuDH48&taoxVZ>Dt1gRp$4?br^kM&@P
z1l|vUg*{1KeM3gvkTn-`P2wZ(pRdNU?lIvWKOd`ki8teK+x}hydL4Hy8Z_86h|<uY
zO}$5+GQ*~DT%EcXa_E%yQ)s@Th$Z`i!Y-^T`n1W~X7mQ9#(O|X8<-Xs5o3W*_?=Sh
z@itxNw+S}aHaj@>7ii~dj8g-#3}-=BlRJRFKjHeD%GQ=e-vK6VWyiMnT(y7UHRHu<
ztd<|za2vddn~|DNKr9UxJ>k}V*iN=acSuCYI2JE_1kbV;m=&<r)ITKAJ+-x+UYU~a
z(4l!&*^1MZ$)1DVJ!{9V*P@?Tt+YMatS)(X98HyzyQk2(M>u+2J^B$5S%WlyZ^b17
z)&I!t(v|mIq8iF(oOG5Mb*v@FBp?5LaMX0nLk48|mGg7-qW^+&HB|Gv?UA(HW+UWZ
zOY`M;fc42y^Ho!fvh$xYL0>DYSA4X-`8{Iag+UN%22VX!zV{~v%q$M`Z|Gnd`Q6p%
zPdq6cCJasSBnp+rC`cm^<f~h=?Ti9r%n2PmeyIK~&h}^6$@JkppFjS9@Zr5Z&=U)P
zD7#cR5}A{^nQl1gTDEao^3vPLqhW+^eRQbx8;xv#l~_Q;Qe5MzE4sl2Gcr;77r@pJ
zLlI0C^CID!M@0qMC|4#z2}u}kTK+IYCbAN>0!AK>?>iFXiziu#1xB4hxt?p?UFP-M
z5j7jQC%LC+rAk<NQ8sh373a{U=FLl{ZqZ*V4B}N~eHqAv$YB>oM34Iiq2=-br{fV@
z35smV0(F)ldqYxI<17YU36zw*;9m+ZE`Y;!p)P1ve3WVm72T}jt%<Zrxxt=@061#b
zSiQ0yIQ><J)+38llKSLdiufVp$jPR$0y6Urw)rPqOgI-b8-UvezO7#b*)qg32(@oe
zl<Sm4z1Oa~KmQ&&tm=GGw^Ws6x$`4?qvh+{)^;~7)S_r=D7G<#Quy$ez{(q7Qn&L_
z>1|Kx`R17<T3;J?&~KZyN9%+}m!xZf1-Zw!tDz@Y*{CU;EB<j~zJpyXJl$){U`6^+
z?X8i-z5JLMr91D-CYP0V575JoaW9TCirC8vK`qwLX$TbEpLL#~@Mdd;zbB_u9Jr|R
z|Ky*hw>z{8Un~yJlghZC$5N<1o{6s2fU}Zc{GM|K#el-GhhyXxHY<bdov{&OT?BwV
zzUWjgKaHNo^RA~Rlu4(iQmj<zSY_8)s>vyq??-{eb<*JxZ<mh|>{HRW!tt0t^i7Es
z_m_O5Y5RdsceA))R0+CQD13VzF~{$FvSUQI{^2{a!L{Y`%x9OOe#ZEM-(=h^_}Mt%
z_uQDphd6=`My^N7=X1pravCAqf3i~Et2kj9c9^xq+Qz!VfQ9p+{2$MRc4bL_+zxPX
zXeeG1i8+88;xeEoA&yIRs)P7)v+h2|{csB1l`m-MF%s)V5(wzTxZW$*aa|jo#<^0~
z0=sm`*_$Ih3Izw_V7@(+X%m8u=qa)h(n%Q`!+aC)wAD&cEGP3@kQAMu6csn^qvI?B
z*!bs^*mDANW%K(LbMjD!rID1C;%7#Pj6h}hmE7DqZ>nb|=?JX#;%w6LV^>LVggqP|
z6~`c}R*6leqIvY(T)>}MJnsBfO)YU<U>KOCN1ZqwS&-bURb>CLMf~Ki!oTLpL-Og*
zkmrlZp{jSnomM-W>!j9X@dF4+w9aylSf*8_esO$<Dh(C>y^Vq<S(PuO1<1@KCu*g#
zU895Wjt4g?d+t0c$>+pJE%wN>{<Cmn{)BGj37i_4UdtDD_V!C`>p5yIk2}Bwmsa;2
zOG8w>)wo1#gcsc%UT`<o&eG-Hi$qr^Uc`^a&@M+YthRL*n*$ss3#2uZH9}YLu2Get
zc9)oAOAN^k$_SPBisfYN-mEkNYBPn9>`ss@%KJwh(`GiMgp@v3zLmg|(ozZ61xYk?
z1Ly)9*Zsh2`Y@>Q8MDPZpZhDVPZJdj@B?tpH9Jz<!7J!O2#*`yGF&ihfiZ_0?U;a;
z(5N53JgoVE$Xw;w0mQJAQ8hLg!w<BmaQ@le`~CNpnB6-p>Aj5X>_+6|9BR+^me7q*
z6jzwyhg4$2t;;JJ9R2)I6)&(i0|J)Wg)z7u8nblInE}rN6AcIbHX*}xGLKk*RGhKH
zN)E9NUunz6d8DM7^iTwmJmrVyhZ-0C;@B@F*RU@M*f?A0m`>NsXQqLkW)ygM_6dj-
z#BWS~Nr?g&ueUt5>}NIQNiD6A?aC9ooeWC*=T=B9pZVVmp1KwdD~)#Yr0KZ4JYftr
z*W~}16U0EgxSK%b0=&1WYXlsF$Ip*jGq;v~PJTb;uz%-?@N7g^#`V5#hKt$fO|`cN
zU);Y@)H7<hCyj>F6b*P-^Mm=J9@6Em_lqdJe+Z(IF-~t?8W%k`uFglQsjOrfLwy_J
zh2Wl{_fLnU$ClBzuhHOUL3J<hj~FxOnPGt<_G~)zmf1^q77FUXsnx~RD7sWSV7$pC
z)8OO-5!ko%z%JRu5sg4_9PkPKA-Ze#{f$Jbg)wv%$7oGYiI}ij5@In{B!TNS+R6qx
zd{|uT!xduYL9VrDw%bS$(r%zE!d`nzBzFChd546)<6NzBKH~UdBFwO!V~2(GiSw`+
zz%yUA1BKWN+kN;`pyP^3j3Olm_b&%zqORkV&p0yB)Ya_#$*Q8Ibt6ZRXhI4%|0uO}
z5rjNe%S|OZgkEx$1v>COK|`=wA8OcvY#&0xzzn)fRbfLg0T}inv>UpG<~Ev)-*8qt
z!>1n9`6hUyM15s8k@VCS_<=8|O8<V}E7JEWT=?R0gM;Sl=Se|bm1={Xzz=O`#NBH5
zSK>JQmW*oYnS#8%4Ar+WU5(lZU~#HGF_=B{Nxh<oX+4W)V!^W;vB|(29I93NV1iO_
zN=)Xa`I~-c=^S?Yq>tQgj>txY&jz0%?Fi1<NqE-GHLwi`?}Quoyj2p#nM8J9WH|UY
z36)fhXi^NkXpScel99m!AtqJ`4Tn9tUbZ@gbEAiLY}%WOO97QDqzElIMkMoL0;3hT
zW_CneSucw0XwzYliKzjk@%nam5g!gD>^SpUmu@O7aTOlFk5$hVyzN!@7gd?H8&kqq
zyN8_@*p~m<?R%GTGCx@T#z{m69kJuUdnMG0BU{npUSF!R+74qF&N?hgau#m8idqa4
zKpZnG)qHf_`c}v%)22x2ZYa8Dey=1gV^Q40nZfsagSN5mdTpk#I2{tHEnH)mab%3)
zL8eGRNqkVu=b@I4qm#P0zBb{9A<Db06eJ*(bHQE^&3csIh$9;@9Khc;cdp~)8F6dy
zTeh+7j3DgK%Tb4dD}?;LPsEz^%wNmCRT3zXq>bqN?EG5UPAf9iZKC^nXA%RV#`<{Y
zM5=eS<H!~|pw#j^C)OlJhf6etMTe=~XXS@(+xID6L0MFqLj!{KFNk2yB}t4W_BeFX
zf*^t+Qh=#2H~0I7Y<YS4+gPoPGlLLK!wYtHF{A0Kg`8ih#^}rDz_YGK%pv|W747yF
zQkrR!g<N6E>TDhQWXT10f7cNyY3V(5Y7cvCssfFVIj6avy*_qAK^C$%mk0SnAK&Hj
zL|natr}*F_!Pz)%YT2XUct7`Spl_FEn(BjRroCnl94RayhekNj^fKM$z$;S9oI}_q
zAwtrGuV-b9I+6@T<2Wp;iX`Y!8eg=#`XN10DQU?dbib#<KFKM@WWMZsL3VeQ!pT&C
z|1%tT%WZshL#GAf_dFMI&gRbev9Vj=%z1#(U^CN0Osx|dSezyb@H$ODsa786{90|g
zq-;Ssfq%hqSFKzgK>FJNRtiKl%q5Xxjk92qQy#uO^6vCVo^EV6Bu54BebAFdg^1hx
zcXil8ccd7H^v`>)3-jO=-;wA0tC^Jo$%jdv9Vor*Q-n#K)j3HErH^-d+zVXo2MsT`
zzwWn!jjVt!p{PCwJcpr+Axj`0U61LN`sit7)V)y<4h2E61o93FnD{_02PQh^TsI}E
zo+tuO>znCpn`#(T7=|W!c8%{dmjAQ4aA+J(L8VcQluTG|hUCoUz-qLgWRCdGaK5vH
zX4DjXD_GmmD~+kw+rSG1yw|v`KDGM#Zr!Or!Q4f<>cD*bu`}1#mP$H@wenEeIilAC
z(l@7sI5xtEdEF7@G=y6FwC6~Q4>M^My8P?-9qTSNx()z8U9nNIY?|zQP@c$Xy)~C{
zo<<%HFuKA-N-2?lcG%BflOz?rF8R=H4j5{I4hK-1;-#Z4>g%WXz!I#+;_p)?Z{zhE
zPYL9WfM6D<P=NhWxPnxG9fVXqNEQpcJPoDXHWM<__6$Eil+$xghgQaYN=@T@zq=Bk
z{QZJ`x758j!;U2}prgx%nForfdN`{@zNEBVo`HrgnQqapN>`~)EAfk-!3RwnHU>g~
z*t2s)#1T#EjX))e(?`RQO^Y#?Z1|!xL<3sXSk$ar<wwo3s~w{N#nHjaZy3t~dKZAU
z!2a|t4x?b}Xn}xV`?jsgD+*Q<B)?;~to;sjuXym-6fKYXKJLLR9@Xwgf4r(BBS{AP
zOzl@cPhZrw=v+bPe+|$_6?^cdRf3KCE{_8)ReQJg^YG0_$E246r=MJ|&FQ!2ilaZi
za^?SW+Ufgl^vsIFhp*C923jkwhV8uHKhQdrms9#hdP(YmkP@zAwhYH5it6B-)KKiR
ziPD@-bG5z|f+6<JW7$hJ-^W=6+mfXxR><hCMzowpdB!l{iS^HK@GriwJ%rIT&ivk)
z^l1^nIzH=pHC2`36SN?6ml5KREq0(bkw?9#FAipDp{a;}Zt1dITv%nk=<YvMPd4~U
z1E-hjyS3d9nFUuzQaLp(Ml!zAKF@=dgw{8j{-B1<D9PTgMNn*&(j!U?&VKL{9fEea
zAG_+V>EV<iaTBb3xlEL%IojBUWNWgY8-q?aKE@butvp+y#^zX#OnvQk05hKd(Ozlx
zdl=%cNg1>)GkU7;q*H!2ph&bJ`SsP~9`>HZ&w@g7x*@ucbnMF=n=ei(FYx(Mzzt^m
z^6M#9dj3W<|4#Ov(M7w%lebj7kM@Ybj*>O-)6w&{@kUr8dn4mr7%<r${RMrze~aak
zsDzdXLB&SpNs5s#b;@P4!Y<BFFO&JLve-88ea%X3PTM{DK-58HtGuE28j+U9Hi6pO
zYNb7hC6d0waee@<NLVz#x|39t?^3VO2x&On%0`|%hk8pLBw=%ghVw{?Q*<r>0$Iru
z#r?LxIw{Ckl6@Cz+CM~(66Y3F_UZ0=;e;ETB0qe5Cjy54;ZY4PT45$3Imzi5apoJ=
z#aaxW;XW52fr21$Sgsjm9{rLia}2|MHMGdyXL?@PI;ijC%flni(}BCXYVLO>5+@se
zP_uL1g&nL-qBXtB5%}@$V$Dv-XqiM5Rk?zu=8RErFO8kR8~6#nn=uph*o&X@A<Ks%
zp1G=7Nkdcfd!SnSpeuvLqYw@q3q@b=ihsgvGhItqGu`9_TqgwLNEgEawiaDjGL(+;
zGq$+_6AU0$p!&&fsu}O`<8xAFaTc}T!*yb%LF@kB@M2Lty6Vr(-p~S>aDR$`mnXiT
zP-0bcbhJFMAu8*-u8GynvlGuMX#l(;itaD2jp;+H>%SBWvjSjF9gk#gZ5}MHw2_iZ
zHDBVXB$vnRou;$&X1I7_J`tuS0=AQTt(b>|tn!zi5~4RpAVr7$vPyB<I*TukY^b;Z
z5EqBbruKO^;t6Gw8i(=`W~CQ2T$}aSWk(@aP%{JzK2j8xy2c^>hP{&%o-66CRkZYN
zkx~sIIiQ_3RKFT2zmxnc>vIw?_UDM$tb(OZx`F#%GL1>R@A(;hi{H>=^X((75rtGp
z(|PFueb0)I5%DL>Xt<P(YBspEY9|?&FOz3OT=?$6m=|qfF)^q*?cPZc{2c7_*@7Wf
z8XYa^+b$GjQVMSCg1NQbs+Zybz9rw*%fmT?SgR%E4FS0{Sh{V}b?W#u5dJnkiWwdE
zG~@~e6Z25jSb_Pq1tc->-LyR|Lrp4uj~k!#LbwaPYSxbv4U}i2K=t;#{9s5s^F4Q2
z09(hVi@??<&UmH8#1C_nKNc=5*x3p~`cELY1ALA%W~_SS<hHYE*;<P$m^UvK^<;+>
zLK|x8WW)S#kmbKCvUO<DsS?3o<gzKy-=g!lstTW>zOh9}E!(a|GWB${eESgXzP5<u
z<+^M9*j)fYv2uQvAV8z+x*qop9bfbO@c=<kGu9N9{QXY+*5XobiVkiqA`vURSq)g!
zm>8AlA7cC*F@d!nQE%2ac4GpQK<nkhA!52<1<)0veCKU2DNF9NsZtnVMkq(oABk^l
z86&QL53`=)Z)4VCwe4}YB?37+T=@-UL`>FxQ@*D(zWUxSVq!E5#krYodnSh-!6x|(
zsWgZ4gBgdBIcc*`@?IK~v3^puJEH!EjU!^Wza1ucMkdwX<>+qbq<`WpH6Kgo7;n#g
z&1+1CzWE`D&f9GD;o1wPK?mclj9zNLj^B_0zmVNBDm--H<q+Fwirsb_MttXU7DD$6
zS|+<06W<y~Z+$&C5^_{X&Y{nuRrsIB)s_~2$sj;Uoh93pD<50Stp?~CShiV`KTkuf
zp9)N^MK5p_#)zRRAqbovhV49EM;Qev7Elm8soy{ddb&W%uUVD!n?EF!&Ti^_QYvAH
zckc!!wW3|%bL4h<Fd2}#ocTS}pUsvdhbic0%A=i@GtMCn?Mg$m>^gD<A<%{jdGJq$
z2iTXTE}p{XW=vaS(doIpS?eb?|LpTJ<j{hEf;jGIk@vZOZ`jc7%G2AWPbZ0t%1-ax
zVUm>zE|t9xiD&yDnA|+e*+wQg3RwTf$L;7=UjFgE>c;+Q*j@+l4VS--UW5q6M$MXe
z*h&E*fut#=Jmzk@*uTl{&pTdfi6M8E`d;oZg7BNG@c3%8;Yqo(<<X<gIkw-(mJ7)X
z1D3#EGbwOjc%#(@;DK49jyC*oDB{$_5>5pBsF<RhJ&f7tsOS_6pBRcRxrn%fSv<pO
zhlZUG2dRx9iz6!bD*~(rzD^7%RrE_N>L1J~x}CsNi`ohX3^7)O$Q#CziHy*1>cMNF
zgK}258p2e>F}{T8hl{25CZD+>aMucmhOsGM7DyxS>6kX8x1+Ai%#yz97Kz9P6ximV
z*!vx-ZSR=RQheAG6s3YU6@wdEr5lde(ju5emm&GI3Ud!Xn+v~<p^S+C$##LH*$Oaa
zhUBCmGod|aCD=H7ps@V=^T~|XDPJ?oO*JuJ<O<XjC#eb7+#`1e>Iq5$apPnkk0O5I
zT8(9iEi$Hj6sJwg@5djoA6}*rS-Xiu^`?6$@;k$QijcM_Lqlk}<-&EkL?`S3*!rjv
zQyN`{og=O>MUDJ2AJ}$OA}mSxpRHRIieh7MU=8h-GAi8a0z#!}%f@u@pod~?nIz6H
zrf2J%jWoqq-`Ol*{>g+Q7>aPswm&a&yMoc66~$NoT{~dKu~N7mgu3)wc*S4k`qB0t
zX#duKV?Doc^k}B6lw}9O0~JB|5h(R*OnA!1LwTkm?|c?9Lz0vPH$fibv05`5^!tm(
z?;B#{BRyNa2Wo1PpLUEAc)T%veR58y&+l?q4(9_zyiqe|T2W@`jtQ$tgNcMlT;(o=
z@m!$aMH!1$IF0`)wgCEtQDg`eynN$8({G$goPKL;psWxHsWZwQ2+!n%pT;3c^@`}?
z<Cb>W;$a~}Y*L<{W2>T}*PXx>*lb~TB~DaOF3ab*ANk-X;`?VOg8~jmC(S*Sh*`;F
z{cx)JKP`3>HMP!88(*6wofLoHNn)*rluxcR4sBBp%ww2>%i^-$!QWLaE=q{JpO_&w
zn;=8}3$;r1bFT1PwfCDqwOtUc&Qdp$;TNg9c+u-CvnGX-G*xVT>|xA9%<mE*-Tgz-
zlo-(tsOa<SyzFT>HurL7{kMe5?&dsFykphj%>+k}kDu_|tu!Q{!(s@+2p?b+!`T4T
zgv8xY6^QikJe^*iDR)|ksaft*`Z=HwiJw_U)$&hrKYJuEr{0H`7FcvW;O_2!uVbGe
z4j0CT38MO0POva+=>yXtDI<b>;>ztJTx&G9JU~btLKBWxh}p*l7g=ST!9B?8)G<g#
zbuAXO<y2!XaM@%0^6_?|0EU!@O&^!xF^uv(<s=UBH+E&$Lkq@%ww_*E?oh1J@-{yt
z*r5<aX%~~Lq}aDo`Pu!4dRsNM$#Fd|3#}MXpdT(l8!N{uONO;?)9nTvyd@&PM^ZBw
zNYN^==SEZK<(*FzW2n7TlfuH2#>C~|Mu`jzi=_^YkB>Lx_2XMOuuHQ)@wIfJ=b|D>
zu1*{}e8f;{eR@7VH0u!95t0oUo_^Z>Eb^g!&*x*DPFyMY5n5=c2n?!{j#FG|@<y9d
zx+x90-t+$w?NVO){IvUE_|kZZ(qLNG<hSqc7V6YaHv(#CgqJW<irDD#SO6g$dmjyt
z*rl}S>isbF-#y!RK3GY7mZ%E%X1h1E<>B!ZRJFe;-1XX9$@Qn2YqNIq#F_uDi35sg
z)d>T(ER}A1hdobUUPy~k)Ncflx}y2f1xSb`PU+jCU)8alFJ6LT>vDHa+Nv(SI~P`T
zZ+qQEons-^YVdf}OKkU=XGJ++E9TK|(eJ5mrls;ZzF?zqcco@}(@L#)c=6IvD*(-H
zS@J$iIlyiXJctKcFbSxn^B%ePpBL#H9Hg*ZP7Ha$<T^y;3PlUAGy&e7Stc5IpKpd7
zK8U{@Uq!bV5|E84+k&p1in7(cSug8kZ5ys+1<7`=5(X=|L-v<!5}Puiq+GdqMwJ2%
zCvPmw#*g-Qs*ij8m(#^WmWmMuMjjYk?$&%AR&2Ks2|9@gWCLa=Mn67PVsf0!Nlf~r
z^G5s`MfB_3TS<O?$la;;nbU(hmvlW|;ocEF$dNpH_;^zqKybf2W^~}@1jeshGGpJ*
z3%IZ;oiT#_IuBI#G3n>x(RsUF$9%bwf-v;$h3>@sS7>&UnsW8~1>cl}4;Axc3x)$7
zPj#&+XvaG`_XtzhJKyZbt}sLve2s15u*r%Z`urI0F)}7`V*Nd>a7vDItna59$~-cb
zUV{G2+?&ffo;2+~Us324@7fmY8g)*k1{|yx?Rt5n8+~l};bZjWeqRh>KE~=M?*f6j
zmBjiu{J9o8O^OuM;-J{MI+c2?>A~KTaVK2=B4=eE#dRH1w|GqP*?Xk5^W^i~Qk=Gt
zEn3Vnb#z@uR_29hbcWdXoo_o3fNVrPnI;@B-+Mvu<I`?U`$}i-Qm5}O=b?kZtaJO!
z-hF-`<WGk5WM--_{ydc9+n-tk`kgDKH@zkODi3VP(+qn6lQDyqFr;YfQ+1=<tz%CZ
zmgBbhMqO@p=*7FDwY3w<)jX7}OFsVD0)zXY1A=yuq?`3sQrXNqco)^J_Kc=u?SLU?
zAn*QleOy52C{N$j{3JQXBR7w_5gBdc=S$QJX?buGhX??8BPr}&VPng1U_0yyD4t^v
ze7WCA+_vH}ADD7^i0-@~DhUvR=3)zbJ_=o?DT+3nOsc!fau}2*$Rfb=wW^!uv7K4)
zx^JrX8MiO#&k{ZHFmi7;TDX~a$Ud2u8gcY*-sKV7g$udg7<gDHn?|)kf)iZ9@@?;g
z^q)0c=~{X8Hx8P)+7K_s5()i+3&_<s+~JZ6pd9A}*8esLU~pC_e<pKoq)?4RA_(lo
zS$-D9_v^X7>AVPWG>VgaQFl)GbK^#G;vw>+Hf3bS5Q4JG)jaHzmVeS9;^*wiz7UyW
zE}0GguyZ04@W<}kE|hTq|KX_XBE?Sr17W##!&Ae{O&!J4jRb6LUtYI-8(xK*joofM
zm&!}b?krw_&%SlygL5mHt$ZAh$mC_Sl}yvjyxwsCc%B#b{V!b~&B;73cUcOz0>9%$
ztq%_0eF7es(@KV`l!~d&3_o3+gm+*tND_<z=@vkJW7_h-w@Bg%+ZwKUZzuzyVBXM1
z1iHuO8jxiNEDM}RC5o{{E73EL3SVG=F8Jc4c$j0RZXc7h2hCFq><|uxdR5$khSr)u
zcog!QN$;Tx5gwyjE|4Tt5ETk$AZpqdcr0-!XgEx9N-Vf~_uojkpQ}4?RQOe5MXpWH
zGf#XK|K9o{<bKG(Ly=oFq+@ZpPsCNU0L{z8t`v>qyX$%cd`{NuU{^T@spL}zc0J%w
zLU{%Fmw$z<^Y3Dv>2lD*>Yv*2(dg>;;t>eu$<DE4hZ-htJ{R-Qw`A2FuPB}7<}cXt
zT?_v7*5G~z@Eq|9Cs#g+a8Akv6*GhDrEq4`9FnXehR>+~e*51s$6*=?WVOFR5NBZS
z>WHQ)Dl3-}a8!oF*(#KOaG&&mtjE@H4ODQVn(P-GS~8!$Wq9v10vhdV_ox&R;};q-
z>K^61QLp|G?i)<*k;=ewRwz%5Al8?l!3V8j<{+5y<IW-cd!jd_PS8hDOnhKR8S$4U
zGI+n=<vqhtewOp^oZK+mGcxprI5J8pq69x29e03Ab$*nUZO!c%##i}Wy$n5m;F>*9
zS~y5VprCmgY?_n@Cs*V`$2RN%r^&6m8l5*R4*u996c<u*kisDGq4zmua4-Cu5l}(j
z7;}chKR;#%x3MIi)GTEbpl=d0U9h()Stw<H0*}aZb{-$p>cZCMx5(fN-`Br)L_@<)
zOEIGJ@|sgOkQ7=VERD0tHQnRp+0AKcZRvF%@p!)mw+Aqoq}SB083A4JKf=IK_BamU
z|HJxKD3o0So6bE4ZA4>buI_O3<R-Vl`FC+lT(<S!zvIptJ-X>LJv9Ur%y=Khn)D5&
z;t4WXh1<6jRW<z4iYDqTn?#k7Kdoscth&((gfcVQ`iSvYq99_0EhBzG1ej=dSCh6B
z=NIvOO0WmRaKic{46{Gt!eK_XLqW?Oew~B;hu;4Z??c?kk)Ofv|BUdjVK5_eAupmj
z&vCzgQ3@i!Qa-21uiyN{AP$8ssn7c#`TIv;;3&t*+a&%a=l^~L5h7y-_F|?e)BH!O
zAa9D-LuRQ*torwy|ENVcgjSrr=9B*#>7NHCD`b|VZsvb~<bReJ$Q-^9J6EKssY%Pq
zs`V%uck65D+&Uqpp<!m6W2B*}q?ANGF*CzXMrJTEhxdIsOLUKdFmmp!+T`^(gh271
zaFnogfv3#|8fx*Z?d|OvAd^;so@A<wLfHXky1BrD+!_OJ&)k1e>z_wg5SCp32y67i
z4`?*eMY>z7@+vL`Xl5S2-&8K={qzInI+KMZPTxzB&g2zreq7#M%>m=58{NI0uB0JY
z(^Y*WC`L60N?9)PQ&YU@ca1+cyCUnfUo9))BPA6KX2o4eRoS;VGS_;2{uk0TUVGqB
zDyIRU4)Asujw~dp<Jo_2|M2@3^M`>R3^BT<m&*@~Bz)5IuuDbwg+_Yz>aPiFEQU-g
z1*M^pL2o<5lK5~Epte0KCN`AMLo>oE%(*VF3+zXm)8VGy91VDm&TyM1qI;9Z#9Bc%
z!b1L!*#3)?#$rgQhJMxA=*A4K&NfVo4owEagsAgiTrQeFQ-M}FHO1*T8JFomOl4iM
zi=oM_AVh+`X;#|;r}wdFhT*jV$?slE#Tu4eJniLfqXv1LY)eav*+S#d-(!GY7sJ0M
zu&nApWc~q=eO58USkZksM)qvN4->{xu*qDbw=u#ui(BWd569m)P3aZ&e6&4@vR?B?
z+zuX_8fu&vl~wm*d}4x0RpcoKvgft3)r}ZnS&ZTCF=OEI*J6LNmF0#SKk{rh1l{JL
z*h3{`9oOAa3dRNhWBdLkfHeeik))U@L_7I4{t=|EhqC7V3rQ3DO(O$VRUe+7V2h%c
zIv5yJ2H&!2|0p+Xn1W+O*?fdx(eX7+=*AZn(FvUOYMPJd@fB7>cB4IRWGY5cUa=Z8
z@~gN69Hp*gu80ZGlw;!IA~qx2K;p=VgSGv^V*VGl?Bg2+iz02_awA49tv>+o&ruc7
z;~C$wvd9H4$}hH}z!Zt=<9HT&xfux}4lz-$6^FwP1}Pyli@H0@kVxyj1sHZteUjVi
zG#8*dm`jt>s-IhMwY|N~z+vx{l$K^)TnIF0eEs+8061)FL@7q@k~avF%7vGAt$4}@
zPWTJ$QOOo%e0)6f%2qgR$gge0Aw^JV3G^HRavXT`D|ch6R<!w4iMo2al_N%9EHRnZ
z68jTuF5FECyl2pB3Ugu+euIvjj*nqxPKLyrE+>9s2?+`7PS`C>Y<ky?ZJ=GPG~vRZ
zQ$M8WtHDxfU;mG9f~+<WPcD`2<F^^bbY*kP2m3s)5)=b2%G|~#z{^cK)@TS_zi<Eg
z4CJD@s_zhFxXH>NgVr!Dyx{wu;D{q`Wl@X@3XogY|Cpt6IP5%v^1j5G)t(bqMT4W?
zef=k%&j&^;tOWW_m1bsUvpJHo3Nz;^;1{OsyGv^gbxuv21HB$E>XTV0oc~d}S$OP9
zgx(XrZrNcO&DJxoG#=aV%j@fTAX*ccwURqUDN9%fUC^os7Y|Q|h0J#hNi@rQpNPcw
zdupWzN%{hkX!z4nFTyJYoNX2V`6mz;Z@cf_ZE%<}IC^VLQjBAFPC&Vgo1&n_JA%b?
z*W~Vgrt%vSPSG5juaEZwk~qR2)Bm{Gze-YrCD%;*nZ6nm$t}B#hY~o0<u$2`!P?kr
zSU3AKELv$9Z0bJ0U2#>UlRV0zdZLXVD)dTTuk*!!!c&eAQW|ED0zmp~3%v^IIs$yk
zyfb-s)b}ga#eN!wK3CFrV6o@7TU(~)2gy7Z+*hQNzR{Gu63!9-WqX%Dw%o<Ni^Hty
z199V0eG`wu-0a!J*et_fN>w}>36uHYwEe`y;wKp~jJN4N!dYr)k#l9!K&u=Lb#*q&
ztUGI+2Jeuzno~SRRx)NXvZb}H@FS=>%>NNbb;>mt@%j%mB1<$4LQFTF5`t$m6at12
z)2A2vygLrC-^XpuK%nxToc{&{>ZaZ7)onGrbTGUvOtixU?EX&uA1Upji+6&K%mN`$
z!QZ8=Uw9A6ZRd7L6z|<qkOetd+gWidHs}-}zMRHq_>AcAo^nJ3-5%^TD`pIR3`8$;
zY0N&|p;`k(KJDE@T=74#2gH{~R)|aRc25Y$S5}f+V|<nucPt{(vea(6OjRG|fs|l|
zxM_0ZQi9c`U2YtYzenLPn~h|I*jH(*_{+)5N7>D3u(EgDV)T!)1G*I*?F#1vUlTy?
z=i6Ki_hGxEaL^<$h8#!f{R}sd^c!!Qzy+*J|679oTJyo9A1azG!$<;8mtO9=7U2Qa
z!vM0^K0aLCxEGGn2Y>`5{uVppAavl&1=FI*{bpQ4S8!gmsHkvO_W0HJh*LJg&<H|t
zvNja7wt|r>4eNAULb^-Ht9(1uhGk`Ci~CWC#&K)>2x{D3ks+LcW4+VOHlZbXdz*K1
zLCX?1df}+Hs-Zubt3z%IrtQD<5{C*h!6Q6_mizG`BsC#D{q5fK*lJj;v5!xe=<tw|
zrP*i1Fxgile`1K|fY=r_&&Aw#2rJPMK0AUN;5dS+8IlGYRn@VM>Cn&g?6fw}hOhlc
zSM^_Snb$4LF>C9>?_E&9ui8dF6Ax6fJ}ApLR6^l(TrNJ$M<7;lEt7U+tC?(RkqGLm
z9;oGfH8G}Vgg67zI$7d|t%Ry-Hc=UkX5$Q8f&DPR)rmY!&<%(tr@J6%e<U3c(CLMX
zqrW>mm7GdxKC~;LQ@iPQckSU24~n3`7iG*`Szczt5V<VLoE{&?%L3!Po+L6;d~qi5
z){lJ8YK2Xf?2byO^Bm7>a~!-m*0Vi8j1y@$->g7<kpAmPA!+@mJ|kJCqpjS;lVRzS
zI^>qWDt*@q-vhmw`J7%NSSf**yHU$6u@`>`>S&fZ0w?O#cRV4B#+d)=EEEhA<_!;}
z%1yIq_GpZis38**-GDrOmK6fNub!drp1Ef9nXFEOOU=}@l+jqCsQ(XrzpEq&qB|JE
z&c+5>;=o<GT@pTf-Vn@@l$df2Ya53+!*ANJoem~fP&0;jy-recP!J@(*-yUw+_|}F
zHmEL3#z?{0RAqSacCN*()o!U#Ie2L)0hmmO^E)o_{5)!{z|}shP&y=Tf1k|d7?hH#
zeUy-{$y8xaww8g}is|uxPr_X+8GZeJ>mtm%X8+)zZjw8vudgrOda`IXJ(JM6c+k2d
zg00wmspZOL&)g_}#>nR#ol*vy+f@asIN{na%~x#r#EN+X9f^+3u%6Ozz}I(wl>{&!
zpvB>q@&K19mu2Y2_67FnRF;<NKnk2*0+7I{Vkb0;tDv#+7aWgsHVn?e!RYmCD_;e}
zI0rHpA`v*6c|!NHB-Xd0_O@3p)S;K`xErqOlcx|H=dBwU8L8o+B##46eLkEw^Wb1m
z{;E7NJIhej-l67y7QND!@T+QIcLJHDjhh#-H%aESMlr_n6%`=P8baysxt#%BF`te(
z<NP#?ngm!}51otqHsx`K7<Pyw3l@q#WM*d4)wD^IKTV1i`h)i~2ffYr>q|8(ZA84i
zC5LN&lB^-UHaUlUL7{KN-%BQri)3;451q~#Rt(|lbUNJSsOiiVYUt`Rh=_<_@9rj}
zyH0NF{EsQ*cY;B}2|QFO=nh@k;q8tby!1_CvMwdoFPPPj@96O7YLr!LY4ynmS{!wt
z8NT+}UC(%t544xv{M>v6`CJTnP4AHL$V0j~i2iHHf?#RI>8_!JEt_7EfHohJf&dKN
zM*e><Lb(L4&auAwtbRzMlMthw=_>Qz_;nQu2{VwC($hWqzX~D_fFwG!8(KRVuh_{i
z4oPYd-()Slid*7iAiwo{{t>WzB}VA+P|$t<FD|hw5?NeBLnGmg*adR6(ErKtXk!AI
zO=7v%#V02;ejT_)&urkwfk67X{5ClO;u@O6t~e2p+(=Q|L#-u5Wa7^s8ozCx|H(wr
z%l~F)Pq47-T<>H}-o?TR3YrgY^GGI>@cI8h($Lq?USWElfSUI8KV_A_+#z)TD}ndQ
z!{G=NR}Cb?tY#dJ%S0}{5wU-DTVbsPMw4c}p@G8B&(9(V+S=AOg^!@~ZS;yh3&h9<
z8dy(k>Oj<pPNdzB4l@@tUEP^JOZiF^PN?G(GWB>**#=2Z=ZJl$rr!@(UyLLSvbC!X
zFb|j~Knfyf4uwrk+S64ll#rXSwC|>yo@J4v=~7Q=r6J<`Mq(K)?(P+pQ0x9C0QrjN
zX2bjD=MnH2gI+sXWOTbH7+Y>q(-x?yMY_6|oUE*@ZRMhOGj*f=e?d!r<qy7{U846B
znu*hmBzQF%CB%S+?!ymSbN`u~G=0atrthc%mG>@!YZyuNGZ3dF!|Boa9CCC^LD{Vk
z7uReK0>e>jNBAE-c|NKyhk~LJlb3q;{;$tnri#ZDplsA*cHM1^V7}OOZ!H9Yq?wqR
z&98tB=h-ih+Vi^UNB!nzX7axZ<Xs-mz<n7Zma_2l#3dOn1O4ZP>;YQGw{xlmc8l+=
zt&cnrk^d(^rsRb|!U_z<9+aM6STOg|N_yN=jT@wRxh3%0+OoX)asEUSKsn?8RK}~_
zTZ-hIW}yQ?#7IUH7bZ_Zve8gNlV2?EKD-i6i+ZJjd2eW?&?6C$hQE>lcH;Zbr`KP?
z?Tb~jX&_mU&~ij9be^<O)48WeLeg4_`5=COrpNMINH<kj8kaFpfA0}j^I)7QoBxj6
z>*`NRLA7U|vRo6h>#MjG3WgI;E)q%#7Lm-Zx-|C>cRCYy2!?lo$QWa0X7@YiMTZpJ
zP0N9K9>>AyiUqU7Sx#O8sdQ&+^!~Y>p_I<YJ1j;b11d6~xse<p<JWQdn>Nd!P^;j=
z2I6*$!`NU6vQQ3&VOFxW#n|qVX7E%DKZvHH=(nVqlBYVF)uVr>-w|zfgylKhe|Yzo
zU!UmWF(EN(I|8zZh+v=bF37JoMW|So#Xu@s7T<4aYSxNgK*UUXWJlnYM8D~kq0DVr
z^J9ne@04w{FH1t&s)KAh^V?`uV9nJw3@8m!L5nDazm~Gz55~Rll)OkwmkvBd^=k7A
zKQ?8X^y%|u@TC3(vlyNymw)V#D^en}Oq?}U9GZS*48^;!{w8cA&<FYM>FFuyRC{|J
zPR6++=GKs6MsmdhNnyve+ue$z5&gxs-++n-&<sB09q49xWx?A1D6`R$<stZWI)WJq
z`kRjs`xX@Ym_c%lko6(a+mQ2smAj-2_xV!yF$pr+ULvBW+z5&!Sqd+RidrZb_>~<s
zdW@lQ!oDV5xEAFaOneM#)zo{(c-yL{qM<a`>OHbDaBO^KetxSy8xfy>uu{69H016+
z*6(y_LfzmH3{hGFBkq;hz~wQyQ_k`eTHf&gN@5o#95x$N|G=f<SAm*~5g{-FWk_cJ
z<V8~KLyf;=AyNG4%=u*YB9mtENb(OL9TLwhv7LR<YquuO0vQ2m35ms9xsK^?X(~^-
z{Bm2^qh-3m)HjvflMhnN4i8srYPFqaNmRennV4LlKv8Xcr43LpK9Fn=s+Wj=%vMHn
zCU3a1J}PNBV@LNOchH&=VEin!7P_%{)7dI(7~q$iae1bi7HC!&LzF3tS)0O#Q1>dZ
zj|>wB&ZM|Xvhb3Y*<YvSP>(Isrs;rcy)N)|nw`F}7}aP%ir4H74ObRTu#I%IG&D;H
zR4SBtai+gxzG<q8NZT9$A=h?gCp(*O6jZbiZpM#MGJlwfK6>R9F&Y2bR(ug9&&@@C
z-^zC5yC;XzvbpAzd=loBmuG^_-b9tZQL#nJWRaeVgtww%nf~YTt@B=-xc<}{O(o0;
zP>MY#%Kxxc5yDnX5ob$M%&M7oSJF5&)WXSz`X&!KgCn|!M@zAXFyCX>Y`m%&Q!uJ?
zaC}oTTOvlPVg2u~**3QC?*G5$zO$=|?R^^o3j%_mbOoh%goGjpQBY}#U69V97<vn#
zgA^%(v<QLF47~-Ucd(%J8hWn*q)LYX{>SrM>lmI-@Z{xQYqDnc%<SvF%G~>~nX1TW
z?8bkP#zn8}8(`&^!8DSXTT}Cp{MvZ$WryVzns*cJ3;-b-=(7z&5q*B^3JM5BbBFJL
z)PJ<4Tnf;8j05BzwCLi+cf2esWq804_<N4NLsUF^42O>eN~P24u`kMP^H9SjbSSHW
zgXoT{J<er<u@fNrgAXm|d!nPJOCm^5<_#cpJuoGkiM06G)64crJjHcJjhJ1=e_LPU
zNsj<ATW!%?@)V%{BO;MXL0`7KL<Po;Jg&M6sBUSpUiAp#ZTiK?(j;g}D$~?i(xrhW
z?{hF6<j`dRS&G3#b`}%})RvZZFO5<nav`bKq%schus-l4i>{XX)ZEn;6^8KnV9Z5t
znG7gPwhx|WG3N_#kWwsq3f}-K2<Q<Yu{69UkKixuOm9Ionml;qvZ;hn)*r|6y}JF*
zeQtZNmht5&@^^#kf6UCoqoQwR=mr3rJos&$`9ABFRT1a9{PxGVrmO`oq1tS|RI7t^
zAH#}>q@<pz8_1id2!O;2d4cidjD+1|leZ8q0mdK9@xK%@Tb2v!O!p+*TJM$*KY#cT
zy^SF}tE=;p{77*bb5*b4`7_;_s3&KuHV1U6=gUWJ(f)MF*AyjbA((^&K<T_LiT6Z`
zL~UrEmLl6JXB5eLAgLJ^d7k!bEso1LrN}?u293K+@<%8h21&eYdnUrjf90KU2k$Y(
z@zWRM0<_KvrlT*T671?<6x1J5BVXB=XUNb(l07#CUmXrCOImD-<lwBR>_YiZ0l&QO
zhn2D7?vE@*qfNw-V(E(9k$RX|{r*Kp*D(uAnO<v`YO6sU>i5w?!{$muatuIS(V_`j
zfqSUrJ1{ZX1(ajYedgvMrK212<3O=M_7ynImi$*z>86M(#Cf7Bgs$xu3EKD$U2OEC
zZSFKc*mT^NU;&*8HuO|1Y*&QG*6IHm*2u`U3|h$^HvVz6Sj3$eAt)MCWYRQ*xir7L
zzFyG<-q&uxJ~iho;QpBK?2#H6TH#*W&vfcp-Svlzo#%qtM-m)ECf7@N*d8xJDK4&l
z$<4P8tGn-R@&2KqVT%3(G``sN7lYjNoKt#(Q`(332}18X&Pb8n=y{mV-bDgD!5NUT
zJ-@3oKUE2C#Vf1x#ilL2_EXc6XF?dY1tJ+gz^AbHw-i9KJx#f}LRG+quXEkXbWuM>
zM6pw8IZ0FB)K7_5Cyc>F4tiPvPlJlSe%n%^EntV+l!JB!K&BQrI5-=flw_7*y2Qe%
z<L>Sb4Od0?^$lR0E$3sjPPixce+;hHQZZ&FxZSm&MlgD6UnUh$h8oBnINu07Y*;eT
zI)7su12G*PC^N<uQ=M-~^ykwkV4YWx;vOFeMj#OC&zwRPPS8zX+vewD)Seg@EUo4a
z&qW9DZ;{-lGnBjk7MS5`Iy!LA2pYUpY@5R5ry?Cc{j$!L?55sZC>|Mp4RZ6uNXW-$
zes{c{Y`LA%y@-ZfSn^2K>rmL9s~#V{niQB*aN3hT!PAzZucpRhbt)igd4uEcdUl2q
zDBFRl2D3y+XY_KV>4MafP6_HET=aW&M!e)Vn}YwMB^kLgBNrJfhEaoLv3>Jd;sRis
zQrt{9wFY1T;ziRDl0kw_5F-}K3y{DwQP98i129Ot{|piupOU^O5;Oqy`u3)o@6_RN
zU{KlVA3+j2M$dBY40)t6#FX*W;UHiTD_3;o)H3N0FgFRVVyaVzV}QZ#MD0_SS>Rp3
zvtywjraW~x6c~iVMBb9l$2TqrnIuiHH96_j2J!)eApY1>?wT<@FmvZrq)**8Wk!}K
zXH?bITe~~m<6=j;YS=T=%%w=KghTespzr8T{i>T0q;Xaa6^1CR)Du(FfX4LoUAcwI
zXefNt+uN(6X)0mFw6eO2Qk25o>E``nlmeSrNc{qRnfa*Jzy;1(&07+2WxQgzYAvru
zUchEmpIA%xQspnc8KqP6Xp;3#Dse4&M*xgN!^9-idbrlSc`);ntKSvod7vH(-L~qM
zm;*x}o5Xf?ZYFqnm>pNouU8X3<eXQt(#<MOfT&P#pLQA;{uprhR{u&dHqZTks{|Is
z&b-2tcN_|@!!<F_Z=_w^)a(ct?6Xf-_wh;5&&1*MW5smEgtZDja8A01CP^F5fT$3Z
z86{G(=~EvI?H~`(bMc>NZE8-AsKsNRDY?DVjK8gRq}VY00Pf=p$@){^oE#4F&qqYu
zF-40O#tF(>VxXcO!ItypUGGV2(%lz;dl!kok6AwKcaK;4{j_T4U7P7xrKF%RyA^pj
zwqL?}v|Rt>WY4GdwUS3p<=A&g%jcOEvHf*}Ts&7i=SFlQ@LjT6^;@fU&F%40jjKpH
z%klnxQH=?Aje24oXR}iBLEazt&^piZip<^SkLK-vUk_EWKkOH{mNrbk#ypVck16R=
z#2eh`__YYEyLSTyJXK=#x9;JSAZF9-cFpG(I%Dz^i})fMdGFl8jzl**@3<KnHhc*0
zL_1qe#*TVB)_AVHYvbkS{w9_w$6I{|cWmFfhR0wM=6|r;MWu}GDzgVz%iO&Hz7ft8
z@%QO!5&5*Ni%<}T$5sd)-Z#{+vn!+}2gs;@gpq`RzP^5@#fvON!a}tx+#owph2ko$
zI^nu^r2=t`x_6)$>gXi7;)wLW>@qT@k)Us};ee;}7BH+Mv`O!G+blvW^1cM|B`zyE
zPj-S{$JdVORW1EspL0qfrjEnZ9132^tm#(Y7udM+_r>uY0$3qK^)r8Loq<J96Ce>5
zTlNdRDsn7SAQmoU)Yo@zd-DQnvR#6Dl4GkHupc-l6MFZZnT7z1+}cn?OGSfI5*2+t
zKO-Lu{UdWXX-k<-ZrFQt#d0F6D>kpeH6tn8_w9B62{tyi`4;})d~`~i{1!Ggu`@Fa
zRrV)tj=gI9>h9H(=WbWmb}dMiamh5dzQ~)8K^sQS^e|elslmm^NDBYRL~^Pg$~^n$
z<<{B__tt8+#N-HZ5v~3{uG+TsJGM*f6W1O3L7%&IeOyPF3l5`?HewTaq@?iY&goF6
zmNDDaS7~38UwIs_t*DQ|P)v_dt(FNXi9ZvP$^XEs5!;$5S7L(;V)V2guhtif^9cdA
zCTwU|1hMoU?+hL5yALnSmvc`3L;f)_+pBJWrfoM4%$e@~5M?82t~GUuWKMam{A=I@
z?`^HEEXIPgGHa_`Lyo30*)`vP4b2R^0d)CJ<{2J7JF{yZKN6&ee=amg$$s!uB6o<A
zd46-w@V7N#VH878d$V-W1c@v^TIhdUyp4N{JT^dWVR`xGm8EU;cmcGmnD?XZEW>ZZ
z27xI>g^JbdC41~z#CvT__sUGgZiiX7v<gKEqOzK$9w`}z3+jg}9%kEn2N!7R>51r;
zzigxK`mKC1R9zE=o7h0Qkw6io7$_z$1)D#r92d*M*+jille(V(TdL$3&0|Zi$M(<t
zvmG}UVc@a+b1jMx`^I`ij~k!a6>A54F~mq_T{QT@3R3D?cU@3Kq_iuk==M|SrzvpA
zl1`$Ei;epHhlZnhssp0bqvm}7OEEh!FQg;8jZ#a5;nkxypF-=3;2|Bf4g)<q$KEM=
z?k)F`(M^fU0yK`XQ<q7mc#h$M*DUOfQ#r-uOpkW1fYnqm6Q9A5Rgd^@*bzNEqI0WT
zwsH2?&`w$Gy-?&%O(zX#f2k``6rTw#!vj>WvoNm^t?P}bNw1=Yelm71RUf@tu~aT8
z<%v8<u&w=aj-z_L*`T<TI5GAFwF(JlQ?(G+B^70(pBN3wEXgW)yl31F^+-8z{B8Rs
zDEZw0GW{*Z+eNq;5VgRtDVH(9M1z_b*(PV>Ov20W1{9>+#Im8xG$v#Fg@I-YS2LbK
zvk@P*doqKBY4z4BXVKEH8(XA$Oziy<{QSrd4#8+Ok7eX2F}4#(HT{QyfJO@F!L@^-
zX=My~0M)JHJjxEce&@F3PG+Y0t2!h~^``)1cYq&Fq0E&x9L{}F$XD!dhN3#p&!uFd
zMMZtX#fXbzW*8k*nUxmC%d>qhEO9|I+?}RBFui$Y`26q^+Z9^gH}6I+h?7(TEH}ux
z#mIWZ_t`wJT%C{C=({<nzXxq;!#l_#!5%vMKW+{`uNvct2(knru3b}B(SRYty%1}+
zZ<80pdu|dXS!i}#GsHoVmRlwvaqg@Kzi={vd((aHvP36?N4eRbM&UNJsy}Th_(xbt
znOr0#ITeaxMvvM?v){^6^rEIq6)P*&K?ae`7i9(5Br&<G%k9uPex*8PMTbo_Wc7rF
z!2_;t<C?AhK~cU}`k|8xQKAWhtqQ2$Q7I{QS#mB3GIlWwDa4vEF`R_j8rGK{ye}Zs
z4o)i(M=clpu9q$2gH1GXM;!Ga>vW$#hXYISy^GY;jq}$;ajWCzKG+ea*PIF@+&of*
z90>QpH=-<}dn&9A?ks|DABQ>3wRRca__LF=&00El_A-24$J=9leU8(|=P4ky#HDXY
z%TJb+?B!WJ6Vk*zK=vV5$%4$)VX(~SFJwmC6!CgMld?M2i|Oqv3nfTQNkojWR*T$1
zqTpzG`~`tj*IENPLRwHu!^uIq>FZcj@O9&Fe|;C<xj)(lk9-?{|L9;FRA&5U&~;?+
zcAWVWovn{*b8My`Vq?|a4pi_qcG<Cat%MQoc6KSagZ)i(A;apAih_D@BF`EKwRv!~
z+q!%k=72G`h|tyn{i^-QrTf!TrWFt^xOsWMm%E|Y((>|jy*)=)kyW|5mOv!0PjOJb
zut~VY99nTE_<A0aS(7B#!ZrM_@S{rS>_%*P<b5-7s4gp%KzW%>PXt`2t?%<~@88r$
ze95J#Rw#G|StoV;eVN)uw_<^k7iWVN^DH|rHcrSs5&@cB=6Fu$0)`KN5=+@~R<gU!
zTFsseawHss$#xUd!YrK;{$N;~=TeY;pOlJ!4rX>;sMwHIGUNZWxJ1>@1!N8|1Wm6e
z70s0Pxb_Q_<b2xkW?k0bH@`pCi59+7R}<Zv^sG~LFnx2eclfe8Y_Py%oG;j(p{HTD
zOnlhZ+j&xlqQtF@Np3dG$t;>x;E9HnhE-o+X&{fhd>f3LEF^XMuWA5c0Q3y9nLf?*
zs(UdqVq4jUYut8h^ox#Ih$%$zXqtP@W3mqR5~m}IHrSN|TE@Kn5JL#^k4!pPjxLje
zbT6;3WQ|jb>mW9ip$dhP9Suwh+rb|mC9>GMXLJ;=9q!yQ&#`T3)~sl&cu3>DNC}OP
z$C5R%dX0-UUn421)p#Q9p`S1=yLvlYDU%jXcMdge9|9P>9UNn^bqg>qF_=JWL1Ez%
z@D+E_B%O=brjI%ePujOtUkE7G&Oe9;xy3$Thf8V%Y|4XzS@YA0Ud4{z|M@p_gWpoT
zS~jF1UN0gudE^y;+ors<%sGG{_XOG)4SPJhBK{B4BNFDRdeJw48Uk|j0CIs<dlfFL
zJLLM#{pfjMXN8#AaQPnt;c(G_fnZmt-E$ee-!>=}1OB}U4>XW`>L4H&e~jpi-Ym}v
zSrp7{8+&XJ+;r_Ctbo|?`)W!&VcY$M;Uw4OKEc`iRSHPvJWvFb)^@El3Bsl>FJ3sy
z4`aObT9KqGyTB6)`3nBh`%AIfukPt>^J2|7*>7W+qoa+RtWS+M#WP{@L$%3#4IuC}
z{$$r$J)h&f^twAn3C}a)oOjw9&d~#5hWB+pFv>Ha5KFoMhEC@|LOA@_0ni0Y*RJkH
z!(qRj=A)NV)}Lp>4vMC*LG$n5inq-PqIkQ9uNjE9^?g-gg8pMS8s7~gV-Wo2^dDLB
zHDyq(WTUT>WeX@hU#*F(s#?Xu?LUIq-P~R|&c2^4Q=1ty{C$nMC{oZ-RKL4p*KDJ7
zg4Im<1?)0uwE$l{yl15eGU|EKSC(i$!#@vnz%1_qzv(9EXiVq`8J_eq+f0?DWxnct
znpDde<zQyATHKj55La3nV5tpaAx-xEfgCLg$q%9FXZ#57th4iD{TDdICW#X}o9jLe
zYzF;m7nKfXv9<^=a~_1~7b6!})&(_pcY&OvO!mSG|0}nlg$R`$K)C4_8|d#h@r!wk
z3n^Ls`t?aC---#Kk+iJGU>EMxJ=r3CT_MF6!kWn%t6WD)b8`gyuC1XSDVp(H;Q|?X
z=H};zE!dvJhpWrfZ)*ba(y(Wno161BlSE$*?|oxrwA6axqZ8<Lk8L_h=bzRVwzTs|
z_+E8&y((5MjP9&hClXZYHk~opxGH?hpP%84tQg6X&V&9Od<nAsba#zoUAbv#2%PJ-
zc$4S?SSKAed|B!D)*62AnFnkiX1jd;Ac)eG%F9~;;a>F+^kZV!=N0fA8iP4FyCUF<
zee*RN)NCh33>$VGTRLdL<BsmNmbSK0nSt-kSqoR#Uf;3QB8_kuHByJ|lc_W<cBeu!
zt84t9F!$vwbhAZ{aX{JDV<3(D*Q!79<uAm!=~w|7jKZbey@iHKylvC$uaUvsw^dv2
z_XNTCOc+ze=+)~%DhqZ)^p@T+2`J-CMn75e|K|efAc@xtE^az?Xy3s4k|k;6bEjLi
zfc(!RS7~4qo=zc21W;KoGn=PuM|rZ($=RyoETwX2;ZJs*ZyjZz&Ymfiwy`Rw)wBtV
zueGuLd4od_Y5z&I8Kydg-70@vtVOg3V9hrVfy;k9E{G~v*a~E5f88EuY{h%C;Yc1@
z4EUo^a`%YwIUrhWL>@9>Z#2E~kRnJ&3fXL?<vCoMD-@X-iv+C6K5Q_nc%vx0OhJrE
z_?_WPkt{l0?J{SAr5kiMHd5NtX%aZrtx=>ImuTppxG0)R5res%?oM<E0)#QOV`151
z&U=U+(Ef&NuO?&eV=_tcf3_WgWO(g%ukbF=uCk3M!X=@=Bdc|Nt>&S$?TB@j{H!zF
zCK#FIvF_D?wn@-ZzyBS+v^dtEm^auiEYg=4p;&eJvnv52cqjMZg_&7K?e5PlN$-2{
zR0vf_MJ36c@Bm`ld9K6xh8#hz5_4E2zDq%C0OzGEZKosZCb#tTd7O!(j3m$a`mK<u
zobrKt2?__$?pwKB8V{Hk+FGw_%vCfTCoNWTX5M<Se{-<EzioU^0dBA`I+fN$d09+L
zAZT_eE4ip`sXmDfMIe}09WU&~FPR(iaXHrXuABgyu9@6>6$N-uLw(+!dNA3Op^a*`
z#qIdUorj#nlB6G`IME{Z$8#uO)^+2s1WY8e|8aK5gW)b)aLX9G=@-9;b6HBX@4rlQ
zIJzAm96ZL#3C80iJLZn?$gef)Ra#;VD-1PpjGAyGY#PRAnmPrghI*}LqaT`7=zG6<
zQgpNehlXY{nI7#sAU&#UCnmHjRSDi3_BHw8<pm*x(Fz&WhaX2Y+dxg_?a~ds$AHQi
znE{l}a!%$NZr^F}-(Dt^H>Z-;#iis9N(|MgM%<UX=H`JM$RVs_^9{~O@%RD<X3U$Z
z{@?XNb`5pv$v$Gwt*}~~%@G{JO`LnT0QAP24dk=#&OA7GwmSJ7=g3@cfg%VNESBDp
zKeqN5g{xVsZVF5F_NTp>=uDU55jQ;OST!4N*gEd=TU{$k5PvCZtBaWWhptE>SK{p7
zhXDUkx*VPo<lYXnpDw(hD8fo2v#W{x2@A0<DdrUD@H6Wp-j2B~teU@3YN*oFu_(zC
z!eX&c0K)vWW%lj;x0zHgee3es6yOyVY@gu{mOP$IywNc+w$%h$-jvaJLII%A{0J9}
z1m~e!kLix?5)AE=lQKrT$?jR*D;+h!-RSA**xKAmPp=#jo23+jh5ygk)!%W`Z7WX8
zloPTTALcv-g{VKtDcQ1fIY9WE2;Qe>e+>7l?8J)`&z?QlWpbNF)SsiYu&^L7U3_Wa
zI?XG$I}{PprZ3>;7T-HCuoM0fg2qksz!`pIwY=TxLVHT-90~$WEYSE>iw*2(ezpMJ
zdgn0udguhA>il(W`b&zImQ;#gwH5vrimH~rphEG5Kv$-2@vSe{BUrPzxujmh&@(eP
z@ij3`-aUijL>=y;tW>;n{eWJ+Zp8$_Q_u64XG<rm$pb+kR7#Zhr+Y1Lj!wO!J5P8Y
zJvp}H^vf0BQU7{qgn68>_I((w`0~YzwvLJ;)%ugNLe=l-@#P_dMopDOq$^2e|FbG{
zFp*E2?G60VGg@abK?i|33ZK=i|9)1|;^|we2kM#<QNrGM&9;S|5hIm^`_2eNYx(LZ
z6ps^fJ2^nlm5+ME3)A=#Wxy2)=2~^-4@~Tswf6GB*G3WsfS4+8|1&<9qivu0V7g8)
zQB)c%P$f<O^XE_LIs{nFdFPVb!MxU-&&h(-v{!#$`H&8#ZZ*j5uab0u2e?t^x!i9h
za`6b`#S^4|2G1N%TY;Pi#!n@Lw2C$T+~2XXe8N+5I@5L(uiys1wS|c${Ns_IE5(hL
zS6iKqU*A;O(~nHyWz$5Q%U$`inRHue&g_aSCl0q-Y&v|-!Y03TYxCiInWh<Z;EzS$
zi<4$D?Ib}TE<qp%P3BM#aE{K_1v3{{q*O{h78uBsgR=mYD334RZVNGO2?#N<?o`#)
zg^W<>mkSOQ9IPM5x5ZeVgS1P6*(iz~oRYTBT76^xl@SqJT$HBC;F)r5NzVgM`d+{J
zEPs|kh-~<HL*HEDGw9he7R(7temkH|6IUBCG2tzLVQOu;c5*Ps+)xY;67J{810*n?
zW4@`yTSWW<DQl-^(c@b4_`-J74Na}gaabH5CBGGyrMCLTyJT>2!o%bfzch(S{JELY
z^)(vCz0M)W{a;B2h!DYyfYL2nMbAN+QfL8G>1Z0QcqbBxmkS2S>@#!s>{&=}8z70R
zO6r+)lIj_<m$}G7P}E<HNtd%fdVGt0j2tPX&8WN~<AI4$29apm5J|uc;Q97~z(G=6
e|9^OrM@r>gwlc&8;DZ9-r*<EvQgF}6@BaW*f}7_6

diff --git a/linux_basics/intro/index.html b/linux_basics/intro/index.html
index 25e04c4..0b36ee6 100644
--- a/linux_basics/intro/index.html
+++ b/linux_basics/intro/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -57,7 +59,7 @@
     <div data-md-component="skip">
       
         
-        <a href="#introduction" class="md-skip">
+        <a href="#linux-basics" class="md-skip">
           Skip to content
         </a>
       
@@ -237,10 +239,23 @@
     <ul class="md-nav__list" data-md-scrollfix>
       
         <li class="md-nav__item">
+  <a href="#introduction" class="md-nav__link">
+    Introduction
+  </a>
+  
+    <nav class="md-nav" aria-label="Introduction">
+      <ul class="md-nav__list">
+        
+          <li class="md-nav__item">
   <a href="#prerequisites" class="md-nav__link">
     Prerequisites
   </a>
   
+</li>
+        
+      </ul>
+    </nav>
+  
 </li>
       
         <li class="md-nav__item">
@@ -655,13 +670,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -746,7 +761,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
@@ -991,10 +1006,23 @@
     <ul class="md-nav__list" data-md-scrollfix>
       
         <li class="md-nav__item">
+  <a href="#introduction" class="md-nav__link">
+    Introduction
+  </a>
+  
+    <nav class="md-nav" aria-label="Introduction">
+      <ul class="md-nav__list">
+        
+          <li class="md-nav__item">
   <a href="#prerequisites" class="md-nav__link">
     Prerequisites
   </a>
   
+</li>
+        
+      </ul>
+    </nav>
+  
 </li>
       
         <li class="md-nav__item">
@@ -1073,27 +1101,28 @@
               
                 
                 
-                <h1 id="introduction">Introduction</h1>
-<h2 id="prerequisites">Prerequisites</h2>
+                <h1 id="linux-basics">Linux Basics</h1>
+<h2 id="introduction">Introduction</h2>
+<h3 id="prerequisites">Prerequisites</h3>
 <ul>
-<li>Experience of working on any operating systems like Windows, Linux or Mac</li>
-<li>Basics of operating system</li>
+<li>Comfortable using any operating systems like Windows, Linux or Mac</li>
+<li>Fundamental knowledge of operating systems</li>
 </ul>
 <h2 id="what-to-expect-from-this-course">What to expect from this course</h2>
-<p>This course is divided into three parts. In the first part, we will cover the
-fundamentals of linux operating systems. We will talk about linux architecture,
-linux distributions and uses of linux operating systems. We will also talk about
+<p>This course is divided into three parts. In the first part, we cover the
+fundamentals of Linux operating systems. We will talk about Linux architecture,
+Linux distributions and uses of Linux operating systems. We will also talk about the
 difference between GUI and CLI.</p>
-<p>In the second part, we will study about some of the basic commands that are used
-in linux. We will focus on commands used for navigating file system, commands used
-for manipulating files, commands used for viewing files, I/O redirection etc.</p>
-<p>In the third part, we will study about linux system administration. In this part, we
-will focus on day to day tasks performed by linux admins like managing users/groups,
-managing file permissions, monitoring system performance, log files etc.</p>
+<p>In the second part, we cover some basic commands used in Linux. 
+We will focus on commands used for navigating the file system, viewing and manipulating files,
+I/O redirection etc.</p>
+<p>In the third part, we cover Linux system administration. This includes day to day tasks 
+performed by Linux admins, like managing users/groups, managing file permissions, 
+monitoring system performance, log files etc.</p>
 <p>In the second and third part, we will be taking examples to understand the concepts.</p>
 <h2 id="what-is-not-covered-under-this-course">What is not covered under this course</h2>
-<p>We are not covering advanced linux commands and bash scripting in this
-course. We will also not be covering linux internals. </p>
+<p>We are not covering advanced Linux commands and bash scripting in this
+course. We will also not be covering Linux internals. </p>
 <h2 id="course-contents">Course Contents</h2>
 <p>The following topics has been covered in this course:</p>
 <ul>
@@ -1137,24 +1166,25 @@ course. We will also not be covering linux internals. </p>
 </li>
 </ul>
 <h2 id="what-are-linux-operating-systems">What are Linux operating systems</h2>
-<p>Most of us will be familiar with the windows operating system which is
-used in more than 75% of the personal computers. The windows operating systems
-are based on windows NT kernel. A kernel is the most important part of
-an operating system which performs important functions like process
+<p>Most of us are familiar with the Windows operating system used in more than
+ 75% of the personal computers. The Windows operating systems
+are based on Windows NT kernel. </p>
+<p>A kernel is the most important part of
+an operating system - it performs important functions like process
 management, memory management, filesystem management etc.</p>
-<p>Linux operating systems are based on the Linux kernel. A linux based
-operating system will consist of linux kernel, GUI/CLI, system libraries
+<p>Linux operating systems are based on the Linux kernel. A Linux based
+operating system will consist of Linux kernel, GUI/CLI, system libraries
 and system utilities. The Linux kernel was independently developed and
-released by Linus Torvalds. The linux kernel is free and open-source -
+released by Linus Torvalds. The Linux kernel is free and open-source -
 <a href="https://github.com/torvalds/linux">https://github.com/torvalds/linux</a></p>
 <p>History of Linux -
 <a href="https://en.wikipedia.org/wiki/History_of_Linux">https://en.wikipedia.org/wiki/History_of_Linux</a></p>
 <h2 id="what-are-popular-linux-distributions">What are popular Linux distributions</h2>
-<p>A linux distribution(distro) is an operating system that is based on
-the linux kernel and a package management system. A package management
-system consists of tools that helps in installing, upgrading,
+<p>A Linux distribution(distro) is an operating system based on
+the Linux kernel and a package management system. A package management
+system consists of tools that help in installing, upgrading,
 configuring and removing softwares on the operating system.</p>
-<p>Softwares are usually adopted to a distribution and are packaged in a
+<p>Software are usually adopted to a distribution and are packaged in a
 distro specific format. These packages are available through a distro
 specific repository. Packages are installed and managed in the operating
 system by a package manager.</p>
@@ -1210,7 +1240,7 @@ system by a package manager.</p>
 <p>The Linux kernel is monolithic in nature.</p>
 </li>
 <li>
-<p>System calls are used to interact with the linux kernel space.</p>
+<p>System calls are used to interact with the Linux kernel space.</p>
 </li>
 <li>
 <p>Kernel code can only be executed in the kernel mode. Non-kernel code is executed in the user mode.</p>
@@ -1220,7 +1250,7 @@ system by a package manager.</p>
 </li>
 </ul>
 <h2 id="uses-of-linux-operating-systems">Uses of Linux Operating Systems</h2>
-<p>Operating system based on linux kernel are widely used in:</p>
+<p>Operating system based on Linux kernel are widely used in:</p>
 <ul>
 <li>
 <p>Personal computers</p>
@@ -1229,7 +1259,7 @@ system by a package manager.</p>
 <p>Servers</p>
 </li>
 <li>
-<p>Mobile phones - Android is based on linux operating system</p>
+<p>Mobile phones - Android is based on Linux operating system</p>
 </li>
 <li>
 <p>Embedded devices - watches, televisions, traffic lights etc</p>
@@ -1254,10 +1284,10 @@ executing these commands. A new user with experience on GUI may find it
 difficult to interact with CLI as he/she needs to be aware of the commands
 to perform a particular operation.</p>
 <h2 id="shell-vs-terminal">Shell vs Terminal</h2>
-<p>Shell is a program that takes command or a group of commands from the
+<p>Shell is a program that takes commands from the
 users and gives them to the operating system for processing. Shell is an
-example of command line interface. Bash is one of the most popular shell
-programs available on linux servers. Other popular shell programs are
+example of a CLI(command line interface). Bash is one of the most popular shell
+programs available on Linux servers. Other popular shell programs are
 zsh, ksh and tcsh.</p>
 <p>Terminal is a program that opens a window and lets you interact with the
 shell. Some popular examples of terminals are gnome-terminal, xterm,
diff --git a/linux_basics/linux_server_administration/index.html b/linux_basics/linux_server_administration/index.html
index 6314097..a519faa 100644
--- a/linux_basics/linux_server_administration/index.html
+++ b/linux_basics/linux_server_administration/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -871,13 +873,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -962,7 +964,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
@@ -1509,7 +1511,7 @@
 <p>In this course will try to cover some of the common tasks that a linux
 server administrator performs. We will first try to understand what a
 particular command does and then try to understand the commands using
-examples. Do keep in mind that it's very important to practice the linux
+examples. Do keep in mind that it's very important to practice the Linux
 commands on your own.</p>
 <h2 id="lab-environment-setup">Lab Environment Setup</h2>
 <ul>
@@ -1522,16 +1524,16 @@ commands on your own.</p>
 </ul>
 <p><img alt="" src="../images/linux/admin/image19.png" /></p>
 <ul>
-<li>We will run most of the commands used in this module in the above docker container.</li>
+<li>We will run most of the commands used in this module in the above Docker container.</li>
 </ul>
 <h2 id="multi-user-operating-systems">Multi-User Operating Systems</h2>
-<p>An operating system is considered as multi-user if it allows multiple people/users to use a computer and not affect each other files and preferences. Linux based operating systems are multi-user in nature as it allows multiple users to access the system at the same time. A typical computer will only have one keyboard and monitor but multiple users can log in via ssh if the computer is connected to the network. We will cover more about ssh later.</p>
-<p>As a server administrator, we are mostly concerned with the linux servers which are physically present at a very large distance from us. We can connect to these servers with the help of remote login methods like ssh.</p>
-<p>Since linux supports multiple users, we need to have a method which can protect the users from each other. One user should not be able to access and modify files of other users</p>
+<p>An operating system is considered as multi-user if it allows multiple people/users to use a computer and not affect each other's files and preferences. Linux based operating systems are multi-user in nature as it allows multiple users to access the system at the same time. A typical computer will only have one keyboard and monitor but multiple users can log in via SSH if the computer is connected to the network. We will cover more about SSH later.</p>
+<p>As a server administrator, we are mostly concerned with the Linux servers which are physically present at a very large distance from us. We can connect to these servers with the help of remote login methods like SSH.</p>
+<p>Since Linux supports multiple users, we need to have a method which can protect the users from each other. One user should not be able to access and modify files of other users</p>
 <h2 id="usergroup-management">User/Group Management</h2>
 <ul>
 <li>
-<p>Each user in linux has an associated user ID called UID attached to him</p>
+<p>Each user in Linux has an associated user ID called UID attached to him</p>
 </li>
 <li>
 <p>Each user also has a home directory and a login shell associated with him/her</p>
@@ -1544,11 +1546,11 @@ commands on your own.</p>
 </li>
 </ul>
 <h3 id="id-command">id command</h3>
-<p>id command can be used to find the uid and gid associated with an user.
+<p><code>id</code> command can be used to find the uid and gid associated with an user.
 It also lists down the groups to which the user belongs to.</p>
 <p>The uid and gid associated with the root user is 0.
 <img alt="" src="../images/linux/admin/image30.png" /></p>
-<p>A good way to find out the current user in linux is to use the whoami
+<p>A good way to find out the current user in Linux is to use the whoami
 command.</p>
 <p><img alt="" src="../images/linux/admin/image35.png" /></p>
 <p><strong>"root" user or superuser is the most privileged user with</strong>
@@ -1587,23 +1589,23 @@ through below links:</p>
 </ul>
 <h2 id="important-commands-for-managing-users">Important commands for managing users</h2>
 <p>Some of the commands which are used frequently to manage users/groups
-on linux are following:</p>
+on Linux are following:</p>
 <ul>
 <li>
-<p>useradd - Creates a new user</p>
+<p><code>useradd</code> - Creates a new user</p>
 </li>
 <li>
-<p>passwd - Adds or modifies passwords for a user</p>
+<p><code>passwd</code> - Adds or modifies passwords for a user</p>
 </li>
 <li>
-<p>usermod - Modifies attributes of an user</p>
+<p><code>usermod</code> - Modifies attributes of an user</p>
 </li>
 <li>
-<p>userdel - Deletes an user</p>
+<p><code>userdel</code> - Deletes an user</p>
 </li>
 </ul>
 <h3 id="useradd">useradd</h3>
-<p>The useradd command adds a new user in linux.</p>
+<p>The useradd command adds a new user in Linux.</p>
 <p>We will create a new user 'shivam'. We will also verify that the user
 has been created by tailing the /etc/passwd file. The uid and gid are
 1000 for the newly created user. The home directory assigned to the user
@@ -1637,7 +1639,7 @@ home directory or the shell.</p>
 <p>In a similar way, you can also modify many other attributes for a user.
 Try 'usermod -h' for a list of attributes you can modify.</p>
 <h3 id="userdel">userdel</h3>
-<p>The userdel command is used to remove a user on linux. Once we remove a
+<p>The userdel command is used to remove a user on Linux. Once we remove a
 user, all the information related to that user will be removed.</p>
 <p>Let's try to delete the user "amit". After deleting the user, you will
 not find the entry for that user in "/etc/passwd" or "/etc/shadow" file.</p>
@@ -1673,13 +1675,13 @@ not find the entry for that user in "/etc/passwd" or "/etc/shadow" file.</p>
 <p><strong>Before running the below commands, do make sure that you have set up a
 password for user "shivam" and user "root" using the passwd command
 described in the above section.</strong></p>
-<p>The su command can be used to switch users in linux. Let's now try to
+<p>The su command can be used to switch users in Linux. Let's now try to
 switch to user "shivam".</p>
 <p><img alt="" src="../images/linux/admin/image37.png" /></p>
 <p>Let's now try to open the "/etc/shadow" file.</p>
 <p><img alt="" src="../images/linux/admin/image29.png" /></p>
 <p>The operating system didn't allow the user "shivam" to read the content
-of the "/etc/shadow" file. This is an important file in linux which
+of the "/etc/shadow" file. This is an important file in Linux which
 stores the passwords of users. This file can only be accessed by root or
 users who have the superuser privileges.</p>
 <p><strong>The sudo command allows a</strong> <strong>user to run commands with the security
@@ -1709,7 +1711,7 @@ commands from anywhere.</p>
 <p><img alt="" src="../images/linux/admin/image8.png" /></p>
 <p>One easy way of providing root access to users is to add them to a group
 which has permissions to run all the commands. "wheel" is a group in
-redhat linux with such privileges.</p>
+redhat Linux with such privileges.</p>
 <p><img alt="" src="../images/linux/admin/image25.png" /></p>
 <p>Let's add the user "shivam" to this group so that it also has sudo
 privileges.</p>
@@ -1721,7 +1723,7 @@ privileges.</p>
 accessed with the sudo privileges. We have already given sudo privileges
 to user “shivam” by adding him to the group “wheel”.</p>
 <h2 id="file-permissions">File Permissions</h2>
-<p>On a linux operating system, each file and directory is assigned access
+<p>On a Linux operating system, each file and directory is assigned access
 permissions for the owner of the file, the members of a group of related
 users and everybody else. This is to make sure that one user is not
 allowed to access the files and resources of another user.</p>
@@ -1734,7 +1736,7 @@ related to file permissions.</p>
 <p><img alt="" src="../images/linux/admin/image57.png" /></p>
 <h3 id="chmod-command">Chmod command</h3>
 <p>The chmod command is used to modify files and directories permissions in
-linux.</p>
+Linux.</p>
 <p>The chmod command accepts permissions in as a numerical argument. We can
 think of permission as a series of bits with 1 representing True or
 allowed and 0 representing False or not allowed.</p>
@@ -1808,7 +1810,7 @@ command.</p>
 in the similar way.</p>
 <h3 id="chown-command">Chown command</h3>
 <p>The chown command is used to change the owner of files or
-directories in linux.</p>
+directories in Linux.</p>
 <p>Command syntax: chown \&lt;new_owner> \&lt;file_name></p>
 <p><img alt="" src="../images/linux/admin/image6.png" /></p>
 <p><strong>In case, we do not have sudo privileges, we need to use sudo
@@ -1820,7 +1822,7 @@ command.</p>
 similar way.</p>
 <h3 id="chgrp-command">Chgrp command</h3>
 <p>The chgrp command can be used to change the group ownership of files or
-directories in linux. The syntax is very similar to that of chown
+directories in Linux. The syntax is very similar to that of chown
 command.</p>
 <p><img alt="" src="../images/linux/admin/image27.png" /></p>
 <p>Chgrp command can also be used to change the owner of a directory in the
@@ -1881,7 +1883,7 @@ host.</p>
 <p><img alt="" src="../images/linux/admin/image32.png" /></p>
 <h2 id="package-management">Package Management</h2>
 <p>Package management is the process of installing and managing software on
-the system. We can install the packages which we require from the linux
+the system. We can install the packages which we require from the Linux
 package distributor. Different distributors use different packaging
 systems.</p>
 <table>
@@ -1932,7 +1934,7 @@ systems.</p>
 <p><a href="https://docs.fedoraproject.org/en-US/quick-docs/dnf/">DNF</a> is
 the successor to YUM which is now used in Fedora for installing and
 managing packages. DNF may replace YUM in the future on all RPM based
-linux distributions.</p>
+Linux distributions.</p>
 <p><img alt="" src="../images/linux/admin/image20.png" /></p>
 <p>We did find an exact match for the keyword httpd when we searched using
 yum search command. Let's now install the httpd package.</p>
@@ -1942,7 +1944,7 @@ httpd package.</p>
 <p><img alt="" src="../images/linux/admin/image43.png" /></p>
 <h2 id="process-management">Process Management</h2>
 <p>In this section, we will study about some useful commands that can be
-used to monitor the processes on linux systems.</p>
+used to monitor the processes on Linux systems.</p>
 <h3 id="ps-process-status">ps (process status)</h3>
 <p>The ps command is used to know the information of a process or list of
 processes.</p>
@@ -1961,7 +1963,7 @@ information about the process with a specific process ID.</p>
 processes.</p>
 <p><img alt="" src="../images/linux/admin/image1.png" /></p>
 <h3 id="top">top</h3>
-<p>The top command is used to show information about linux processes
+<p>The top command is used to show information about Linux processes
 running on the system in real time. It also shows a summary of the
 system information.</p>
 <p><img alt="" src="../images/linux/admin/image53.png" /></p>
@@ -1986,7 +1988,7 @@ additional information about io and cpu usage.</p>
 <p><img alt="" src="../images/linux/admin/image38.png" /></p>
 <h2 id="checking-disk-space">Checking Disk Space</h2>
 <p>In this section, we will study about some useful commands that can be
-used to view disk space on linux.</p>
+used to view disk space on Linux.</p>
 <h3 id="df-disk-free">df (disk free)</h3>
 <p>The df command is used to display the free and available space for each
 mounted file system.</p>
@@ -2049,7 +2051,7 @@ used to start/stop/restart the services managed by systemd.</p>
 <h2 id="logs">Logs</h2>
 <p>In this section, we will talk about some important files and directories
 which can be very useful for viewing system logs and applications logs
-in linux. These logs can be very useful when you are troubleshooting on
+in Linux. These logs can be very useful when you are troubleshooting on
 the system.</p>
 <p><img alt="" src="../images/linux/admin/image58.png" /></p>
                 
diff --git a/linux_networking/conclusion/index.html b/linux_networking/conclusion/index.html
index 353a410..7c46399 100644
--- a/linux_networking/conclusion/index.html
+++ b/linux_networking/conclusion/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -563,13 +565,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -654,7 +656,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
diff --git a/linux_networking/dns/index.html b/linux_networking/dns/index.html
index 3ae982d..f8fcbb6 100644
--- a/linux_networking/dns/index.html
+++ b/linux_networking/dns/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -592,13 +594,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -683,7 +685,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
diff --git a/linux_networking/http/index.html b/linux_networking/http/index.html
index 1854b98..81d2d9f 100644
--- a/linux_networking/http/index.html
+++ b/linux_networking/http/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -563,13 +565,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -654,7 +656,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
diff --git a/linux_networking/intro/index.html b/linux_networking/intro/index.html
index 775f77c..6559153 100644
--- a/linux_networking/intro/index.html
+++ b/linux_networking/intro/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -620,13 +622,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -711,7 +713,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
diff --git a/linux_networking/ipr/index.html b/linux_networking/ipr/index.html
index b011438..9b23f87 100644
--- a/linux_networking/ipr/index.html
+++ b/linux_networking/ipr/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -592,13 +594,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -683,7 +685,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
diff --git a/linux_networking/tcp/index.html b/linux_networking/tcp/index.html
index 8f3f207..a859372 100644
--- a/linux_networking/tcp/index.html
+++ b/linux_networking/tcp/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -592,13 +594,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -683,7 +685,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
diff --git a/linux_networking/udp/index.html b/linux_networking/udp/index.html
index 9754139..98c9584 100644
--- a/linux_networking/udp/index.html
+++ b/linux_networking/udp/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -592,13 +594,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -683,7 +685,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
diff --git a/python_web/intro/index.html b/python_web/intro/index.html
index e00c000..d04b417 100644
--- a/python_web/intro/index.html
+++ b/python_web/intro/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -645,13 +647,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -736,7 +738,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
diff --git a/python_web/python-concepts/index.html b/python_web/python-concepts/index.html
index 5d896c1..827f577 100644
--- a/python_web/python-concepts/index.html
+++ b/python_web/python-concepts/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -624,13 +626,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -715,7 +717,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
diff --git a/python_web/python-web-flask/index.html b/python_web/python-web-flask/index.html
index b81d42a..21ad0fd 100644
--- a/python_web/python-web-flask/index.html
+++ b/python_web/python-web-flask/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -597,13 +599,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -688,7 +690,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
diff --git a/python_web/sre-conclusion/index.html b/python_web/sre-conclusion/index.html
index 1f36a87..a7477e7 100644
--- a/python_web/sre-conclusion/index.html
+++ b/python_web/sre-conclusion/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -618,13 +620,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -709,7 +711,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
diff --git a/python_web/url-shorten-app/index.html b/python_web/url-shorten-app/index.html
index af61437..c90210a 100644
--- a/python_web/url-shorten-app/index.html
+++ b/python_web/url-shorten-app/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -631,13 +633,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -722,7 +724,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
diff --git a/search/search_index.json b/search/search_index.json
index 2001f8d..63a8ec2 100644
--- a/search/search_index.json
+++ b/search/search_index.json
@@ -1 +1 @@
-{"config":{"lang":["en"],"min_search_length":3,"prebuild_index":false,"separator":"[\\s\\-]+"},"docs":[{"location":"","text":"School of SRE Early 2019, we started visiting campuses to recruit the brightest minds to ensure LinkedIn and all the services that it is composed of is always available for everyone. This function at Linkedin falls in the purview of the Site Reliability Engineering team and Site Reliability Engineers ( SRE ) who are Software Engineers who specialize in reliability. SREs apply the principles of computer science and engineering to the design and development of computer systems: generally, large distributed ones. As we continued on this journey we started getting a lot of questions from these campuses on what exactly site engineering roll entails? and, how could someone learn the skills and the disciplines involved to become a successful site engineer? Fast forward a few months, and a few of these campus students had joined LinkedIn either as Interns or as full time engineers to become a part of the Site Engineering team, we also had a few lateral hires who joined our organization who were not from a traditional SRE background. That's when a few of us got together and started to think about how we can on board new new graduate engineers to the site engineering team. There is a vast amount of resources scattered throughout the web on what are the roles and responsibilities of an SREs, how to monitor site health, handling incidents, maintain SLO/SLI etc. But there are very few resources out there guiding someone on what all basic skill sets one has to acquire as a beginner. Because of the lack of these resources we felt that individuals are having a tough time getting into open positions in the industry. We created School Of SRE as a starting point for anyone wanting to build their career in the role of SRE. In this course we are focusing on building strong foundational skills. The course is structured in a way to provide more real life examples and how learning each of the topics can play a bigger role in your day to day SRE life. Currently we are covering the following topics under the School Of SRE: Fundamentals Series Linux Basics Git Linux Networking Python and Web Data Relational databases (MySQL) NoSQL concepts Big Data Systems Design Security We believe continuous learning will help in acquiring deeper knowledge and competencies in order to expand your skill sets, every module has added reference which could be a guide for further learning. Our hope is that by going through these modules we should be able build the essential skills required for a Site Reliability Engineer. At Linkedin we are using this curriculum for onboarding our non-traditional hires and new college grads to the SRE role. We had multiple rounds of successful onboarding experience with the new members and helped them to be productive in a very short period of time. This motivated us to opensource these contents for helping other organisations onboarding new engineers to the role and individuals to get into the role. We realise that the initial content we created is just a starting point and our hope is that the community can help in the journey refining and extending the contents.","title":"Home"},{"location":"#school-of-sre","text":"Early 2019, we started visiting campuses to recruit the brightest minds to ensure LinkedIn and all the services that it is composed of is always available for everyone. This function at Linkedin falls in the purview of the Site Reliability Engineering team and Site Reliability Engineers ( SRE ) who are Software Engineers who specialize in reliability. SREs apply the principles of computer science and engineering to the design and development of computer systems: generally, large distributed ones. As we continued on this journey we started getting a lot of questions from these campuses on what exactly site engineering roll entails? and, how could someone learn the skills and the disciplines involved to become a successful site engineer? Fast forward a few months, and a few of these campus students had joined LinkedIn either as Interns or as full time engineers to become a part of the Site Engineering team, we also had a few lateral hires who joined our organization who were not from a traditional SRE background. That's when a few of us got together and started to think about how we can on board new new graduate engineers to the site engineering team. There is a vast amount of resources scattered throughout the web on what are the roles and responsibilities of an SREs, how to monitor site health, handling incidents, maintain SLO/SLI etc. But there are very few resources out there guiding someone on what all basic skill sets one has to acquire as a beginner. Because of the lack of these resources we felt that individuals are having a tough time getting into open positions in the industry. We created School Of SRE as a starting point for anyone wanting to build their career in the role of SRE. In this course we are focusing on building strong foundational skills. The course is structured in a way to provide more real life examples and how learning each of the topics can play a bigger role in your day to day SRE life. Currently we are covering the following topics under the School Of SRE: Fundamentals Series Linux Basics Git Linux Networking Python and Web Data Relational databases (MySQL) NoSQL concepts Big Data Systems Design Security We believe continuous learning will help in acquiring deeper knowledge and competencies in order to expand your skill sets, every module has added reference which could be a guide for further learning. Our hope is that by going through these modules we should be able build the essential skills required for a Site Reliability Engineer. At Linkedin we are using this curriculum for onboarding our non-traditional hires and new college grads to the SRE role. We had multiple rounds of successful onboarding experience with the new members and helped them to be productive in a very short period of time. This motivated us to opensource these contents for helping other organisations onboarding new engineers to the role and individuals to get into the role. We realise that the initial content we created is just a starting point and our hope is that the community can help in the journey refining and extending the contents.","title":"School of SRE"},{"location":"CONTRIBUTING/","text":"We realise that the initial content we created is just a starting point and our hope is that the community can help in the journey refining and extending the contents. As a contributor, you represent that the content you submit is not plagiarised. By submitting the content, you (and, if applicable, your employer) are licensing the submitted content to LinkedIn and the open source community subject to the BSD 2-Clause license. We suggest to open an issue first and seek advice for your changes before submitting a pull request.","title":"Contribute"},{"location":"big_data/evolution/","text":"Evolution of Hadoop Architecture of Hadoop HDFS The Hadoop Distributed File System (HDFS) is a distributed file system designed to run on commodity hardware. It has many similarities with existing distributed file systems. However, the differences from other distributed file systems are significant. HDFS is highly fault-tolerant and is designed to be deployed on low-cost hardware. HDFS provides high throughput access to application data and is suitable for applications that have large data sets. HDFS is part of the Apache Hadoop Core project . NameNode: is the arbitrator and central repository of file namespace in the cluster. The NameNode executes the operations such as opening, closing, and renaming files and directories. DataNode: manages the storage attached to the node on which it runs. It is responsible for serving all the read and write requests. It performs operations on instructions on NameNode such as creation, deletion, and replications of blocks. Client: Responsible for getting the required metadata from the namenode and then communicating with the datanodes for reads and writes. YARN YARN stands for \u201cYet Another Resource Negotiator\u201c. It was introduced in Hadoop 2.0 to remove the bottleneck on Job Tracker which was present in Hadoop 1.0. YARN was described as a \u201cRedesigned Resource Manager\u201d at the time of its launching, but it has now evolved to be known as a large-scale distributed operating system used for Big Data processing. The main components of YARN architecture include: Client: It submits map-reduce(MR) jobs to the resource manager. Resource Manager: It is the master daemon of YARN and is responsible for resource assignment and management among all the applications. Whenever it receives a processing request, it forwards it to the corresponding node manager and allocates resources for the completion of the request accordingly. It has two major components: Scheduler: It performs scheduling based on the allocated application and available resources. It is a pure scheduler, which means that it does not perform other tasks such as monitoring or tracking and does not guarantee a restart if a task fails. The YARN scheduler supports plugins such as Capacity Scheduler and Fair Scheduler to partition the cluster resources. Application manager: It is responsible for accepting the application and negotiating the first container from the resource manager. It also restarts the Application Manager container if a task fails. Node Manager: It takes care of individual nodes on the Hadoop cluster and manages application and workflow and that particular node. Its primary job is to keep-up with the Node Manager. It monitors resource usage, performs log management and also kills a container based on directions from the resource manager. It is also responsible for creating the container process and starting it on the request of the Application master. Application Master: An application is a single job submitted to a framework. The application manager is responsible for negotiating resources with the resource manager, tracking the status and monitoring progress of a single application. The application master requests the container from the node manager by sending a Container Launch Context(CLC) which includes everything an application needs to run. Once the application is started, it sends the health report to the resource manager from time-to-time. Container: It is a collection of physical resources such as RAM, CPU cores and disk on a single node. The containers are invoked by Container Launch Context(CLC) which is a record that contains information such as environment variables, security tokens, dependencies etc. MapReduce framework The term MapReduce represents two separate and distinct tasks Hadoop programs perform-Map Job and Reduce Job. Map jobs take data sets as input and process them to produce key value pairs. Reduce job takes the output of the Map job i.e. the key value pairs and aggregates them to produce desired results. Hadoop MapReduce (Hadoop Map/Reduce) is a software framework for distributed processing of large data sets on computing clusters. Mapreduce helps to split the input data set into a number of parts and run a program on all data parts parallel at once. Please find the below Word count example demonstrating the usage of MapReduce framework: Other tooling around hadoop Hive Uses a language called HQL which is very SQL like. Gives non-programmers the ability to query and analyze data in Hadoop. Is basically an abstraction layer on top of map-reduce. Ex. HQL query: SELECT pet.name, comment FROM pet JOIN event ON (pet.name = event.name); In mysql: SELECT pet.name, comment FROM pet, event WHERE pet.name = event.name; Pig Uses a scripting language called Pig Latin, which is more workflow driven. Don't need to be an expert Java programmer but need a few coding skills. Is also an abstraction layer on top of map-reduce. Here is a quick question for you: What is the output of running the pig queries in the right column against the data present in the left column in the below image? Output: mysql 7,Komal,Nayak,24,9848022334,trivendram 8,Bharathi,Nambiayar,24,9848022333,Chennai 5,Trupthi,Mohanthy,23,9848022336,Bhuwaneshwar 6,Archana,Mishra,23,9848022335,Chennai 3. Spark 1. Spark provides primitives for in-memory cluster computing that allows user programs to load data into a cluster\u2019s memory and query it repeatedly, making it well suited to machine learning algorithms. 4. Presto 1. Presto is a high performance, distributed SQL query engine for Big Data. 2. Its architecture allows users to query a variety of data sources such as Hadoop, AWS S3, Alluxio, MySQL, Cassandra, Kafka, and MongoDB. 3. Example presto query: mysql use studentDB; show tables; SELECT roll_no, name FROM studentDB.studentDetails where section=\u2019A\u2019 limit 5; Data Serialisation and storage In order to transport the data over the network or to store on some persistent storage, we use the process of translating data structures or objects state into binary or textual form. We call this process serialization.. Avro data is stored in a container file (a .avro file) and its schema (the .avsc file) is stored with the data file. Apache Hive provides support to store a table as Avro and can also query data in this serialisation format.","title":"Evolution and Architecure of Hadoop"},{"location":"big_data/evolution/#evolution-of-hadoop","text":"","title":"Evolution of Hadoop"},{"location":"big_data/evolution/#architecture-of-hadoop","text":"HDFS The Hadoop Distributed File System (HDFS) is a distributed file system designed to run on commodity hardware. It has many similarities with existing distributed file systems. However, the differences from other distributed file systems are significant. HDFS is highly fault-tolerant and is designed to be deployed on low-cost hardware. HDFS provides high throughput access to application data and is suitable for applications that have large data sets. HDFS is part of the Apache Hadoop Core project . NameNode: is the arbitrator and central repository of file namespace in the cluster. The NameNode executes the operations such as opening, closing, and renaming files and directories. DataNode: manages the storage attached to the node on which it runs. It is responsible for serving all the read and write requests. It performs operations on instructions on NameNode such as creation, deletion, and replications of blocks. Client: Responsible for getting the required metadata from the namenode and then communicating with the datanodes for reads and writes. YARN YARN stands for \u201cYet Another Resource Negotiator\u201c. It was introduced in Hadoop 2.0 to remove the bottleneck on Job Tracker which was present in Hadoop 1.0. YARN was described as a \u201cRedesigned Resource Manager\u201d at the time of its launching, but it has now evolved to be known as a large-scale distributed operating system used for Big Data processing. The main components of YARN architecture include: Client: It submits map-reduce(MR) jobs to the resource manager. Resource Manager: It is the master daemon of YARN and is responsible for resource assignment and management among all the applications. Whenever it receives a processing request, it forwards it to the corresponding node manager and allocates resources for the completion of the request accordingly. It has two major components: Scheduler: It performs scheduling based on the allocated application and available resources. It is a pure scheduler, which means that it does not perform other tasks such as monitoring or tracking and does not guarantee a restart if a task fails. The YARN scheduler supports plugins such as Capacity Scheduler and Fair Scheduler to partition the cluster resources. Application manager: It is responsible for accepting the application and negotiating the first container from the resource manager. It also restarts the Application Manager container if a task fails. Node Manager: It takes care of individual nodes on the Hadoop cluster and manages application and workflow and that particular node. Its primary job is to keep-up with the Node Manager. It monitors resource usage, performs log management and also kills a container based on directions from the resource manager. It is also responsible for creating the container process and starting it on the request of the Application master. Application Master: An application is a single job submitted to a framework. The application manager is responsible for negotiating resources with the resource manager, tracking the status and monitoring progress of a single application. The application master requests the container from the node manager by sending a Container Launch Context(CLC) which includes everything an application needs to run. Once the application is started, it sends the health report to the resource manager from time-to-time. Container: It is a collection of physical resources such as RAM, CPU cores and disk on a single node. The containers are invoked by Container Launch Context(CLC) which is a record that contains information such as environment variables, security tokens, dependencies etc.","title":"Architecture of Hadoop"},{"location":"big_data/evolution/#mapreduce-framework","text":"The term MapReduce represents two separate and distinct tasks Hadoop programs perform-Map Job and Reduce Job. Map jobs take data sets as input and process them to produce key value pairs. Reduce job takes the output of the Map job i.e. the key value pairs and aggregates them to produce desired results. Hadoop MapReduce (Hadoop Map/Reduce) is a software framework for distributed processing of large data sets on computing clusters. Mapreduce helps to split the input data set into a number of parts and run a program on all data parts parallel at once. Please find the below Word count example demonstrating the usage of MapReduce framework:","title":"MapReduce framework"},{"location":"big_data/evolution/#other-tooling-around-hadoop","text":"Hive Uses a language called HQL which is very SQL like. Gives non-programmers the ability to query and analyze data in Hadoop. Is basically an abstraction layer on top of map-reduce. Ex. HQL query: SELECT pet.name, comment FROM pet JOIN event ON (pet.name = event.name); In mysql: SELECT pet.name, comment FROM pet, event WHERE pet.name = event.name; Pig Uses a scripting language called Pig Latin, which is more workflow driven. Don't need to be an expert Java programmer but need a few coding skills. Is also an abstraction layer on top of map-reduce. Here is a quick question for you: What is the output of running the pig queries in the right column against the data present in the left column in the below image? Output: mysql 7,Komal,Nayak,24,9848022334,trivendram 8,Bharathi,Nambiayar,24,9848022333,Chennai 5,Trupthi,Mohanthy,23,9848022336,Bhuwaneshwar 6,Archana,Mishra,23,9848022335,Chennai 3. Spark 1. Spark provides primitives for in-memory cluster computing that allows user programs to load data into a cluster\u2019s memory and query it repeatedly, making it well suited to machine learning algorithms. 4. Presto 1. Presto is a high performance, distributed SQL query engine for Big Data. 2. Its architecture allows users to query a variety of data sources such as Hadoop, AWS S3, Alluxio, MySQL, Cassandra, Kafka, and MongoDB. 3. Example presto query: mysql use studentDB; show tables; SELECT roll_no, name FROM studentDB.studentDetails where section=\u2019A\u2019 limit 5;","title":"Other tooling around hadoop"},{"location":"big_data/evolution/#data-serialisation-and-storage","text":"In order to transport the data over the network or to store on some persistent storage, we use the process of translating data structures or objects state into binary or textual form. We call this process serialization.. Avro data is stored in a container file (a .avro file) and its schema (the .avsc file) is stored with the data file. Apache Hive provides support to store a table as Avro and can also query data in this serialisation format.","title":"Data Serialisation and storage"},{"location":"big_data/intro/","text":"Big Data Prerequisites Basics of Linux File systems. Basic understanding of System Design. What to expect from this course This course covers the basics of Big Data and how it has evolved to become what it is today. We will take a look at a few realistic scenarios where Big Data would be a perfect fit. An interesting assignment on designing a Big Data system is followed by understanding the architecture of Hadoop and the tooling around it. What is not covered under this course Writing programs to draw analytics from data. Course Contents Overview of Big Data Usage of Big Data techniques Evolution of Hadoop Architecture of hadoop HDFS Yarn MapReduce framework Other tooling around hadoop Hive Pig Spark Presto Data Serialisation and storage Overview of Big Data Big Data is a collection of large datasets that cannot be processed using traditional computing techniques. It is not a single technique or a tool, rather it has become a complete subject, which involves various tools, techniques and frameworks. Big Data could consist of Structured data Unstructured data Semi-structured data Characteristics of Big Data: Volume Variety Velocity Variability Examples of Big Data generation include stock exchanges, social media sites, jet engines, etc. Usage of Big Data Techniques Take the example of the traffic lights problem. There are more than 300,000 traffic lights in the US as of 2018. Let us assume that we placed a device on each of them to collect metrics and send it to a central metrics collection system. If each of the IOT devices sends 10 events per minute, we have 300000x10x60x24 = 432x10^7 events per day. How would you go about processing that and telling me how many of the signals were \u201cgreen\u201d at 10:45 am on a particular day? Consider the next example on Unified Payments Interface (UPI) transactions: We had about 1.15 billion UPI transactions in the month of October, 2019 in India. If we try to extrapolate this data to about a year and try to find out some common payments that were happening through a particular UPI ID, how do you suggest we go about that?","title":"Introduction"},{"location":"big_data/intro/#big-data","text":"","title":"Big Data"},{"location":"big_data/intro/#prerequisites","text":"Basics of Linux File systems. Basic understanding of System Design.","title":"Prerequisites"},{"location":"big_data/intro/#what-to-expect-from-this-course","text":"This course covers the basics of Big Data and how it has evolved to become what it is today. We will take a look at a few realistic scenarios where Big Data would be a perfect fit. An interesting assignment on designing a Big Data system is followed by understanding the architecture of Hadoop and the tooling around it.","title":"What to expect from this course"},{"location":"big_data/intro/#what-is-not-covered-under-this-course","text":"Writing programs to draw analytics from data.","title":"What is not covered under this course"},{"location":"big_data/intro/#course-contents","text":"Overview of Big Data Usage of Big Data techniques Evolution of Hadoop Architecture of hadoop HDFS Yarn MapReduce framework Other tooling around hadoop Hive Pig Spark Presto Data Serialisation and storage","title":"Course Contents"},{"location":"big_data/intro/#overview-of-big-data","text":"Big Data is a collection of large datasets that cannot be processed using traditional computing techniques. It is not a single technique or a tool, rather it has become a complete subject, which involves various tools, techniques and frameworks. Big Data could consist of Structured data Unstructured data Semi-structured data Characteristics of Big Data: Volume Variety Velocity Variability Examples of Big Data generation include stock exchanges, social media sites, jet engines, etc.","title":"Overview of Big Data"},{"location":"big_data/intro/#usage-of-big-data-techniques","text":"Take the example of the traffic lights problem. There are more than 300,000 traffic lights in the US as of 2018. Let us assume that we placed a device on each of them to collect metrics and send it to a central metrics collection system. If each of the IOT devices sends 10 events per minute, we have 300000x10x60x24 = 432x10^7 events per day. How would you go about processing that and telling me how many of the signals were \u201cgreen\u201d at 10:45 am on a particular day? Consider the next example on Unified Payments Interface (UPI) transactions: We had about 1.15 billion UPI transactions in the month of October, 2019 in India. If we try to extrapolate this data to about a year and try to find out some common payments that were happening through a particular UPI ID, how do you suggest we go about that?","title":"Usage of Big Data Techniques"},{"location":"big_data/tasks/","text":"Tasks and conclusion Post training tasks: Try setting up your own 3 node hadoop cluster. A VM based solution can be found here Write a simple spark/MR job of your choice and understand how to generate analytics from data. Sample dataset can be found here References: Hadoop documentation HDFS Architecture YARN Architecture Google GFS paper","title":"Conclusion"},{"location":"big_data/tasks/#tasks-and-conclusion","text":"","title":"Tasks and conclusion"},{"location":"big_data/tasks/#post-training-tasks","text":"Try setting up your own 3 node hadoop cluster. A VM based solution can be found here Write a simple spark/MR job of your choice and understand how to generate analytics from data. Sample dataset can be found here","title":"Post training tasks:"},{"location":"big_data/tasks/#references","text":"Hadoop documentation HDFS Architecture YARN Architecture Google GFS paper","title":"References:"},{"location":"databases_nosql/further_reading/","text":"Further reading: NoSQL: https://hostingdata.co.uk/nosql-database/ https://www.mongodb.com/nosql-explained https://www.mongodb.com/nosql-explained/nosql-vs-sql Cap Theorem http://www.julianbrowne.com/article/brewers-cap-theorem Scalability http://www.slideshare.net/jboner/scalability-availability-stability-patterns Eventual Consistency https://www.allthingsdistributed.com/2008/12/eventually_consistent.html https://www.toptal.com/big-data/consistent-hashing https://web.stanford.edu/class/cs244/papers/chord_TON_2003.pdf","title":"Conclusion"},{"location":"databases_nosql/further_reading/#further-reading","text":"NoSQL: https://hostingdata.co.uk/nosql-database/ https://www.mongodb.com/nosql-explained https://www.mongodb.com/nosql-explained/nosql-vs-sql Cap Theorem http://www.julianbrowne.com/article/brewers-cap-theorem Scalability http://www.slideshare.net/jboner/scalability-availability-stability-patterns Eventual Consistency https://www.allthingsdistributed.com/2008/12/eventually_consistent.html https://www.toptal.com/big-data/consistent-hashing https://web.stanford.edu/class/cs244/papers/chord_TON_2003.pdf","title":"Further reading:"},{"location":"databases_nosql/intro/","text":"NoSQL Concepts What to expect from this course At the end of training, you will have an understanding of what a NoSQL database is, what kind of advantages or disadvantages it has over traditional RDBMS, learn about different types of NoSQL databases and understand some of the underlying concepts & trade offs w.r.t to NoSQL. What is not covered under this course We will not be deep diving into any specific NoSQL Database. Course Contents Introduction to NoSQL CAP Theorem Data versioning Partitioning Hashing Quorum Introduction When people use the term \u201cNoSQL database\u201d, they typically use it to refer to any non-relational database. Some say the term \u201cNoSQL\u201d stands for \u201cnon SQL\u201d while others say it stands for \u201cnot only SQL.\u201d Either way, most agree that NoSQL databases are databases that store data in a format other than relational tables. A common misconception is that NoSQL databases or non-relational databases don\u2019t store relationship data well. NoSQL databases can store relationship data\u2014they just store it differently than relational databases do. In fact, when compared with SQL databases, many find modeling relationship data in NoSQL databases to be easier , because related data doesn\u2019t have to be split between tables. Such databases have existed since the late 1960s, but the name \"NoSQL\" was only coined in the early 21st century. NASA used a NoSQL database to track inventory for the Apollo mission. NoSQL databases emerged in the late 2000s as the cost of storage dramatically decreased. Gone were the days of needing to create a complex, difficult-to-manage data model simply for the purposes of reducing data duplication. Developers (rather than storage) were becoming the primary cost of software development, so NoSQL databases optimized for developer productivity. With the rise of Agile development methodology, NoSQL databases were developed with a focus on scaling, fast performance and at the same time allowed for frequent application changes and made programming easier. Types of NoSQL databases: Over time due to the way these NoSQL databases were developed to suit requirements at different companies, we ended up with quite a few types of them. However, they can be broadly classified into 4 types. Some of the databases can overlap between different types. They are Document databases: They store data in documents similar to JSON (JavaScript Object Notation) objects. Each document contains pairs of fields and values. The values can typically be a variety of types including things like strings, numbers, booleans, arrays, or objects, and their structures typically align with objects developers are working with in code. The advantages include intuitive data model & flexible schemas. Because of their variety of field value types and powerful query languages, document databases are great for a wide variety of use cases and can be used as a general purpose database. They can horizontally scale-out to accomodate large data volumes. Ex: MongoDB, Couchbase Key-Value databases: These are a simpler type of databases where each item contains keys and values. A value can typically only be retrieved by referencing its value, so learning how to query for a specific key-value pair is typically simple. Key-value databases are great for use cases where you need to store large amounts of data but you don\u2019t need to perform complex queries to retrieve it. Common use cases include storing user preferences or caching. Ex: Redis , DynamoDB , Voldemort / Venice (Linkedin), Wide-Column stores: They store data in tables, rows, and dynamic columns. Wide-column stores provide a lot of flexibility over relational databases because each row is not required to have the same columns. Many consider wide-column stores to be two-dimensional key-value databases. Wide-column stores are great for when you need to store large amounts of data and you can predict what your query patterns will be. Wide-column stores are commonly used for storing Internet of Things data and user profile data. Cassandra and HBase are two of the most popular wide-column stores. Graph Databases: These databases store data in nodes and edges. Nodes typically store information about people, places, and things while edges store information about the relationships between the nodes. The underlying storage mechanism of graph databases can vary. Some depend on a relational engine and \u201cstore\u201d the graph data in a table (although a table is a logical element, therefore this approach imposes another level of abstraction between the graph database, the graph database management system and the physical devices where the data is actually stored). Others use a key-value store or document-oriented database for storage, making them inherently NoSQL structures. Graph databases excel in use cases where you need to traverse relationships to look for patterns such as social networks, fraud detection, and recommendation engines. Ex: Neo4j Comparison Performance Scalability Flexibility Complexity Functionality Key Value high high high none Variable Document stores high Variable (high) high low Variable (low) Column DB high high moderate low minimal Graph Variable Variable high high Graph theory Differences between SQL and NoSQL The table below summarizes the main differences between SQL and NoSQL databases. SQL Databases NoSQL Databases Data Storage Model Tables with fixed rows and columns Document: JSON documents, Key-value: key-value pairs, Wide-column: tables with rows and dynamic columns, Graph: nodes and edges Primary Purpose General purpose Document: general purpose, Key-value: large amounts of data with simple lookup queries, Wide-column: large amounts of data with predictable query patterns, Graph: analyzing and traversing relationships between connected data Schemas Rigid Flexible Scaling Vertical (scale-up with a larger server) Horizontal (scale-out across commodity servers) Multi-Record ACID Transactions Supported Most do not support multi-record ACID transactions. However, some\u2014like MongoDB\u2014do. Joins Typically required Typically not required Data to Object Mapping Requires ORM (object-relational mapping) Many do not require ORMs. Document DB documents map directly to data structures in most popular programming languages. Advantages Flexible Data Models Most NoSQL systems feature flexible schemas. A flexible schema means you can easily modify your database schema to add or remove fields to support for evolving application requirements. This facilitates with continuous application development of new features without database operation overhead. Horizontal Scaling Most NoSQL systems allow you to scale horizontally, which means you can add in cheaper & commodity hardware, whenever you want to scale a system. On the other hand SQL systems generally scale Vertically (a more powerful server). NoSQL systems can also host huge data sets when compared to traditional SQL systems. Fast Queries NoSQL can generally be a lot faster than traditional SQL systems due to data denormalization and horizontal scaling. Most NoSQL systems also tend to store similar data together facilitating faster query responses. Developer productivity NoSQL systems tend to map data based on the programming data structures. As a result developers need to perform fewer data transformations leading to increased productivity & fewer bugs.","title":"Introduction"},{"location":"databases_nosql/intro/#nosql-concepts","text":"","title":"NoSQL Concepts"},{"location":"databases_nosql/intro/#what-to-expect-from-this-course","text":"At the end of training, you will have an understanding of what a NoSQL database is, what kind of advantages or disadvantages it has over traditional RDBMS, learn about different types of NoSQL databases and understand some of the underlying concepts & trade offs w.r.t to NoSQL.","title":"What to expect from this course"},{"location":"databases_nosql/intro/#what-is-not-covered-under-this-course","text":"We will not be deep diving into any specific NoSQL Database.","title":"What is not covered under this course"},{"location":"databases_nosql/intro/#course-contents","text":"Introduction to NoSQL CAP Theorem Data versioning Partitioning Hashing Quorum","title":"Course Contents"},{"location":"databases_nosql/intro/#introduction","text":"When people use the term \u201cNoSQL database\u201d, they typically use it to refer to any non-relational database. Some say the term \u201cNoSQL\u201d stands for \u201cnon SQL\u201d while others say it stands for \u201cnot only SQL.\u201d Either way, most agree that NoSQL databases are databases that store data in a format other than relational tables. A common misconception is that NoSQL databases or non-relational databases don\u2019t store relationship data well. NoSQL databases can store relationship data\u2014they just store it differently than relational databases do. In fact, when compared with SQL databases, many find modeling relationship data in NoSQL databases to be easier , because related data doesn\u2019t have to be split between tables. Such databases have existed since the late 1960s, but the name \"NoSQL\" was only coined in the early 21st century. NASA used a NoSQL database to track inventory for the Apollo mission. NoSQL databases emerged in the late 2000s as the cost of storage dramatically decreased. Gone were the days of needing to create a complex, difficult-to-manage data model simply for the purposes of reducing data duplication. Developers (rather than storage) were becoming the primary cost of software development, so NoSQL databases optimized for developer productivity. With the rise of Agile development methodology, NoSQL databases were developed with a focus on scaling, fast performance and at the same time allowed for frequent application changes and made programming easier.","title":"Introduction"},{"location":"databases_nosql/intro/#types-of-nosql-databases","text":"Over time due to the way these NoSQL databases were developed to suit requirements at different companies, we ended up with quite a few types of them. However, they can be broadly classified into 4 types. Some of the databases can overlap between different types. They are Document databases: They store data in documents similar to JSON (JavaScript Object Notation) objects. Each document contains pairs of fields and values. The values can typically be a variety of types including things like strings, numbers, booleans, arrays, or objects, and their structures typically align with objects developers are working with in code. The advantages include intuitive data model & flexible schemas. Because of their variety of field value types and powerful query languages, document databases are great for a wide variety of use cases and can be used as a general purpose database. They can horizontally scale-out to accomodate large data volumes. Ex: MongoDB, Couchbase Key-Value databases: These are a simpler type of databases where each item contains keys and values. A value can typically only be retrieved by referencing its value, so learning how to query for a specific key-value pair is typically simple. Key-value databases are great for use cases where you need to store large amounts of data but you don\u2019t need to perform complex queries to retrieve it. Common use cases include storing user preferences or caching. Ex: Redis , DynamoDB , Voldemort / Venice (Linkedin), Wide-Column stores: They store data in tables, rows, and dynamic columns. Wide-column stores provide a lot of flexibility over relational databases because each row is not required to have the same columns. Many consider wide-column stores to be two-dimensional key-value databases. Wide-column stores are great for when you need to store large amounts of data and you can predict what your query patterns will be. Wide-column stores are commonly used for storing Internet of Things data and user profile data. Cassandra and HBase are two of the most popular wide-column stores. Graph Databases: These databases store data in nodes and edges. Nodes typically store information about people, places, and things while edges store information about the relationships between the nodes. The underlying storage mechanism of graph databases can vary. Some depend on a relational engine and \u201cstore\u201d the graph data in a table (although a table is a logical element, therefore this approach imposes another level of abstraction between the graph database, the graph database management system and the physical devices where the data is actually stored). Others use a key-value store or document-oriented database for storage, making them inherently NoSQL structures. Graph databases excel in use cases where you need to traverse relationships to look for patterns such as social networks, fraud detection, and recommendation engines. Ex: Neo4j","title":"Types of NoSQL databases:"},{"location":"databases_nosql/intro/#comparison","text":"Performance Scalability Flexibility Complexity Functionality Key Value high high high none Variable Document stores high Variable (high) high low Variable (low) Column DB high high moderate low minimal Graph Variable Variable high high Graph theory","title":"Comparison"},{"location":"databases_nosql/intro/#differences-between-sql-and-nosql","text":"The table below summarizes the main differences between SQL and NoSQL databases. SQL Databases NoSQL Databases Data Storage Model Tables with fixed rows and columns Document: JSON documents, Key-value: key-value pairs, Wide-column: tables with rows and dynamic columns, Graph: nodes and edges Primary Purpose General purpose Document: general purpose, Key-value: large amounts of data with simple lookup queries, Wide-column: large amounts of data with predictable query patterns, Graph: analyzing and traversing relationships between connected data Schemas Rigid Flexible Scaling Vertical (scale-up with a larger server) Horizontal (scale-out across commodity servers) Multi-Record ACID Transactions Supported Most do not support multi-record ACID transactions. However, some\u2014like MongoDB\u2014do. Joins Typically required Typically not required Data to Object Mapping Requires ORM (object-relational mapping) Many do not require ORMs. Document DB documents map directly to data structures in most popular programming languages.","title":"Differences between SQL and NoSQL"},{"location":"databases_nosql/intro/#advantages","text":"Flexible Data Models Most NoSQL systems feature flexible schemas. A flexible schema means you can easily modify your database schema to add or remove fields to support for evolving application requirements. This facilitates with continuous application development of new features without database operation overhead. Horizontal Scaling Most NoSQL systems allow you to scale horizontally, which means you can add in cheaper & commodity hardware, whenever you want to scale a system. On the other hand SQL systems generally scale Vertically (a more powerful server). NoSQL systems can also host huge data sets when compared to traditional SQL systems. Fast Queries NoSQL can generally be a lot faster than traditional SQL systems due to data denormalization and horizontal scaling. Most NoSQL systems also tend to store similar data together facilitating faster query responses. Developer productivity NoSQL systems tend to map data based on the programming data structures. As a result developers need to perform fewer data transformations leading to increased productivity & fewer bugs.","title":"Advantages"},{"location":"databases_nosql/key_concepts/","text":"Key Concepts Lets looks at some of the key concepts when we talk about NoSQL or distributed systems CAP Theorem In a keynote titled \u201c Towards Robust Distributed Systems \u201d at ACM\u2019s PODC symposium in 2000 Eric Brewer came up with the so-called CAP-theorem which is widely adopted today by large web companies as well as in the NoSQL community. The CAP acronym stands for C onsistency, A vailability & P artition Tolerance. Consistency It refers to how consistent a system is after an execution. A distributed system is called consistent when a write made by a source is available for all readers of that shared data. Different NoSQL systems support different levels of consistency. Availability It refers to how a system responds to loss of functionality of different systems due to hardware and software failures. A high availability implies that a system is still available to handle operations (reads and writes) when a certain part of the system is down due to a failure or upgrade. Partition Tolerance It is the ability of the system to continue operations in the event of a network partition. A network partition occurs when a failure causes two or more islands of networks where the systems can\u2019t talk to each other across the islands temporarily or permanently. Brewer alleges that one can at most choose two of these three characteristics in a shared-data system. The CAP-theorem states that a choice can only be made for two options out of consistency, availability and partition tolerance. A growing number of use cases in large scale applications tend to value reliability implying that availability & redundancy are more valuable than consistency. As a result these systems struggle to meet ACID properties. They attain this by loosening on the consistency requirement i.e Eventual Consistency. Eventual Consistency means that all readers will see writes, as time goes on: \u201cIn a steady state, the system will eventually return the last written value\u201d. Clients therefore may face an inconsistent state of data as updates are in progress. For instance, in a replicated database updates may go to one node which replicates the latest version to all other nodes that contain a replica of the modified dataset so that the replica nodes eventually will have the latest version. NoSQL systems support different levels of eventual consistency models. For example: Read Your Own Writes Consistency A client will see his updates immediately after they are written. The reads can hit nodes other than the one where it was written. However he might not see updates by other clients immediately. Session Consistency: A client will see the updates to his data within a session scope. This generally indicates that reads & writes occur on the same server. Other clients using the same nodes will receive the same updates. Casual Consistency A system provides causal consistency if the following condition holds: write operations that are related by potential causality are seen by each process of the system in order. Different processes may observe concurrent writes in different orders Eventual consistency is useful if concurrent updates of the same partitions of data are unlikely and if clients do not immediately depend on reading updates issued by themselves or by other clients. Depending on what consistency model was chosen for the system (or parts of it), determines where the requests are routed, ex: replicas. CAP alternatives illustration Choice Traits Examples Consistency + Availability (Forfeit Partitions) 2-phase commits Cache invalidation protocols Single-site databases Cluster databases LDAP xFS file system Consistency + Partition tolerance (Forfeit Availability) Pessimistic locking Make minority partitions unavailable Distributed databases Distributed locking Majority protocols Availability + Partition tolerance (Forfeit Consistency) expirations/leases conflict resolution optimistic DNS Web caching Versioning of Data in distributed systems When data is distributed across nodes, it can be modified on different nodes at the same time (assuming strict consistency is enforced). Questions arise on conflict resolution for concurrent updates. Some of the popular conflict resolution mechanism are Timestamps This is the most obvious solution. You sort updates based on chronological order and choose the latest update. However this relies on clock synchronization across different parts of the infrastructure. This gets even more complicated when parts of systems are spread across different geographic locations. Optimistic Locking You associate a unique value like a clock or counter with every data update. When a client wants to update data, it has to specify which version of data needs to be updated. This would mean you need to keep track of history of the data versions. Vector Clocks A vector clock is defined as a tuple of clock values from each node. In a distributed environment, each node maintains a tuple of such clock values which represent the state of the nodes itself and its peers/replicas. A clock value may be real timestamps derived from local clock or version no. Vector clocks illustration Vector clocks have the following advantages over other conflict resolution mechanism No dependency on synchronized clocks No total ordering of revision nos required for casual reasoning No need to store and maintain multiple versions of the data on different nodes. Partitioning When the amount of data crosses the capacity of a single node, we need to think of splitting data, creating replicas for load balancing & disaster recovery. Depending on how dynamic the infrastructure is, we have a few approaches that we can take. Memory cached These are partitioned in-memory databases that are primarily used for transient data. These databases are generally used as a front for traditional RDBMS. Most frequently used data is replicated from a rdbms into a memory database to facilitate fast queries and to take the load off from backend DB\u2019s. A very common example is memcached or couchbase. Clustering Traditional cluster mechanisms abstract away the cluster topology from clients. A client need not know where the actual data is residing and which node it is talking to. Clustering is very commonly used in traditional RDBMS where it can help scaling the persistent layer to a certain extent. Separating reads from writes In this method, you will have multiple replicas hosting the same data. The incoming writes are typically sent to a single node (Leader) or multiple nodes (multi-Leader), while the rest of the replicas (Follower) handle reads requests. The leader replicates writes asynchronously to all followers. However the write lag can\u2019t be completely avoided. Sometimes a leader can crash before it replicates all the data to a follower. When this happens, a follower with the most consistent data can be turned into a leader. As you can realize now, it is hard to enforce full consistency in this model. You also need to consider the ratio of read vs write traffic. This model won\u2019t make sense when writes are higher than reads. The replication methods can also vary widely. Some systems do a complete transfer of state periodically, while others use a delta state transfer approach. You could also transfer the state by transferring the operations in order. The followers can then apply the same operations as the leader to catch up. Sharding Sharing refers to dividing data in such a way that data is distributed evenly (both in terms of storage & processing power) across a cluster of nodes. It can also imply data locality, which means similar & related data is stored together to facilitate faster access. A shard in turn can be further replicated to meet load balancing or disaster recovery requirements. A single shard replica might take in all writes (single leader) or multiple replicas can take writes (multi-leader). Reads can be distributed across multiple replicas. Since data is now distributed across multiple nodes, clients should be able to consistently figure out where data is hosted. We will look at some of the common techniques below. The downside of sharding is that joins between shards is not possible. So an upstream/downstream application has to aggregate the results from multiple shards. Sharding example Hashing A hash function is a function that maps one piece of data\u2014typically describing some kind of object, often of arbitrary size\u2014to another piece of data, typically an integer, known as hash code , or simply hash . In a partitioned database, it is important to consistently map a key to a server/replica. For ex: you can use a very simple hash as a modulo function. _p = k mod n_ Where p -> partition, k -> primary key n -> no of nodes The downside of this simple hash is that, whenever the cluster topology changes, the data distribution also changes. When you are dealing with memory caches, it will be easy to distribute partitions around. Whenever a node joins/leaves a topology, partitions can reorder themselves, a cache miss can be re-populated from backend DB. However when you look at persistent data, it is not possible as the new node doesn\u2019t have the data needed to serve it. This brings us to consistent hashing. Consistent Hashing Consistent hashing is a distributed hashing scheme that operates independently of the number of servers or objects in a distributed hash table by assigning them a position on an abstract circle, or hash ring . This allows servers and objects to scale without affecting the overall system. Say that our hash function h() generates a 32-bit integer. Then, to determine to which server we will send a key k, we find the server s whose hash h(s) is the smallest integer that is larger than h(k). To make the process simpler, we assume the table is circular, which means that if we cannot find a server with a hash larger than h(k), we wrap around and start looking from the beginning of the array. Consistent hashing illustration In consistent hashing when a server is removed or added then only the keys from that server are relocated. For example, if server S3 is removed then, all keys from server S3 will be moved to server S4 but keys stored on server S4 and S2 are not relocated. But there is one problem, when server S3 is removed then keys from S3 are not equally distributed among remaining servers S4 and S2. They are only assigned to server S4 which increases the load on server S4. To evenly distribute the load among servers when a server is added or removed, it creates a fixed number of replicas ( known as virtual nodes) of each server and distributes it along the circle. So instead of server labels S1, S2 and S3, we will have S10 S11\u2026S19, S20 S21\u2026S29 and S30 S31\u2026S39. The factor for a number of replicas is also known as weight , depending on the situation. All keys which are mapped to replicas Sij are stored on server Si. To find a key we do the same thing, find the position of the key on the circle and then move forward until you find a server replica. If the server replica is Sij then the key is stored in server Si. Suppose server S3 is removed, then all S3 replicas with labels S30 S31 \u2026 S39 must be removed. Now the objects keys adjacent to S3X labels will be automatically re-assigned to S1X, S2X and S4X. All keys originally assigned to S1, S2 & S4 will not be moved. Similar things happen if we add a server. Suppose we want to add a server S5 as a replacement of S3 then we need to add labels S50 S51 \u2026 S59. In the ideal case, one-fourth of keys from S1, S2 and S4 will be reassigned to S5. When applied to persistent storages, further issues arise: if a node has left the scene, data stored on this node becomes unavailable, unless it has been replicated to other nodes before; in the opposite case of a new node joining the others, adjacent nodes are no longer responsible for some pieces of data which they still store but not get asked for anymore as the corresponding objects are no longer hashed to them by requesting clients. In order to address this issue, a replication factor (r) can be introduced. Introducing replicas in a partitioning scheme\u2014besides reliability benefits\u2014also makes it possible to spread workload for read requests that can go to any physical node responsible for a requested piece of data. Scalability doesn\u2019t work if the clients have to decide between multiple versions of the dataset, because they need to read from a quorum of servers which in turn reduces the efficiency of load balancing. Quorum Quorum is the minimum number of nodes in a cluster that must be online and be able to communicate with each other. If any additional node failure occurs beyond this threshold, the cluster will stop running. To attain a quorum, you need a majority of the nodes. Commonly it is (N/2 + 1), where N is the total no of nodes in the system. For ex, In a 3 node cluster, you need 2 nodes for a majority, In a 5 node cluster, you need 3 nodes for a majority, In a 6 node cluster, you need 4 nodes for a majority. Quorum example Network problems can cause communication failures among cluster nodes. One set of nodes might be able to communicate together across a functioning part of a network but not be able to communicate with a different set of nodes in another part of the network. This is known as split brain in cluster or cluster partitioning. Now the partition which has quorum is allowed to continue running the application. The other partitions are removed from the cluster. Eg: In a 5 node cluster, consider what happens if nodes 1, 2, and 3 can communicate with each other but not with nodes 4 and 5. Nodes 1, 2, and 3 constitute a majority, and they continue running as a cluster. Nodes 4 and 5, being a minority, stop running as a cluster. If node 3 loses communication with other nodes, all nodes stop running as a cluster. However, all functioning nodes will continue to listen for communication, so that when the network begins working again, the cluster can form and begin to run. Below diagram demonstrates Quorum selection on a cluster partitioned into two sets. Cluster Quorum example","title":"Key Concepts"},{"location":"databases_nosql/key_concepts/#key-concepts","text":"Lets looks at some of the key concepts when we talk about NoSQL or distributed systems","title":"Key Concepts"},{"location":"databases_nosql/key_concepts/#cap-theorem","text":"In a keynote titled \u201c Towards Robust Distributed Systems \u201d at ACM\u2019s PODC symposium in 2000 Eric Brewer came up with the so-called CAP-theorem which is widely adopted today by large web companies as well as in the NoSQL community. The CAP acronym stands for C onsistency, A vailability & P artition Tolerance. Consistency It refers to how consistent a system is after an execution. A distributed system is called consistent when a write made by a source is available for all readers of that shared data. Different NoSQL systems support different levels of consistency. Availability It refers to how a system responds to loss of functionality of different systems due to hardware and software failures. A high availability implies that a system is still available to handle operations (reads and writes) when a certain part of the system is down due to a failure or upgrade. Partition Tolerance It is the ability of the system to continue operations in the event of a network partition. A network partition occurs when a failure causes two or more islands of networks where the systems can\u2019t talk to each other across the islands temporarily or permanently. Brewer alleges that one can at most choose two of these three characteristics in a shared-data system. The CAP-theorem states that a choice can only be made for two options out of consistency, availability and partition tolerance. A growing number of use cases in large scale applications tend to value reliability implying that availability & redundancy are more valuable than consistency. As a result these systems struggle to meet ACID properties. They attain this by loosening on the consistency requirement i.e Eventual Consistency. Eventual Consistency means that all readers will see writes, as time goes on: \u201cIn a steady state, the system will eventually return the last written value\u201d. Clients therefore may face an inconsistent state of data as updates are in progress. For instance, in a replicated database updates may go to one node which replicates the latest version to all other nodes that contain a replica of the modified dataset so that the replica nodes eventually will have the latest version. NoSQL systems support different levels of eventual consistency models. For example: Read Your Own Writes Consistency A client will see his updates immediately after they are written. The reads can hit nodes other than the one where it was written. However he might not see updates by other clients immediately. Session Consistency: A client will see the updates to his data within a session scope. This generally indicates that reads & writes occur on the same server. Other clients using the same nodes will receive the same updates. Casual Consistency A system provides causal consistency if the following condition holds: write operations that are related by potential causality are seen by each process of the system in order. Different processes may observe concurrent writes in different orders Eventual consistency is useful if concurrent updates of the same partitions of data are unlikely and if clients do not immediately depend on reading updates issued by themselves or by other clients. Depending on what consistency model was chosen for the system (or parts of it), determines where the requests are routed, ex: replicas. CAP alternatives illustration Choice Traits Examples Consistency + Availability (Forfeit Partitions) 2-phase commits Cache invalidation protocols Single-site databases Cluster databases LDAP xFS file system Consistency + Partition tolerance (Forfeit Availability) Pessimistic locking Make minority partitions unavailable Distributed databases Distributed locking Majority protocols Availability + Partition tolerance (Forfeit Consistency) expirations/leases conflict resolution optimistic DNS Web caching","title":"CAP Theorem"},{"location":"databases_nosql/key_concepts/#versioning-of-data-in-distributed-systems","text":"When data is distributed across nodes, it can be modified on different nodes at the same time (assuming strict consistency is enforced). Questions arise on conflict resolution for concurrent updates. Some of the popular conflict resolution mechanism are Timestamps This is the most obvious solution. You sort updates based on chronological order and choose the latest update. However this relies on clock synchronization across different parts of the infrastructure. This gets even more complicated when parts of systems are spread across different geographic locations. Optimistic Locking You associate a unique value like a clock or counter with every data update. When a client wants to update data, it has to specify which version of data needs to be updated. This would mean you need to keep track of history of the data versions. Vector Clocks A vector clock is defined as a tuple of clock values from each node. In a distributed environment, each node maintains a tuple of such clock values which represent the state of the nodes itself and its peers/replicas. A clock value may be real timestamps derived from local clock or version no. Vector clocks illustration Vector clocks have the following advantages over other conflict resolution mechanism No dependency on synchronized clocks No total ordering of revision nos required for casual reasoning No need to store and maintain multiple versions of the data on different nodes.","title":"Versioning of Data in distributed systems"},{"location":"databases_nosql/key_concepts/#partitioning","text":"When the amount of data crosses the capacity of a single node, we need to think of splitting data, creating replicas for load balancing & disaster recovery. Depending on how dynamic the infrastructure is, we have a few approaches that we can take. Memory cached These are partitioned in-memory databases that are primarily used for transient data. These databases are generally used as a front for traditional RDBMS. Most frequently used data is replicated from a rdbms into a memory database to facilitate fast queries and to take the load off from backend DB\u2019s. A very common example is memcached or couchbase. Clustering Traditional cluster mechanisms abstract away the cluster topology from clients. A client need not know where the actual data is residing and which node it is talking to. Clustering is very commonly used in traditional RDBMS where it can help scaling the persistent layer to a certain extent. Separating reads from writes In this method, you will have multiple replicas hosting the same data. The incoming writes are typically sent to a single node (Leader) or multiple nodes (multi-Leader), while the rest of the replicas (Follower) handle reads requests. The leader replicates writes asynchronously to all followers. However the write lag can\u2019t be completely avoided. Sometimes a leader can crash before it replicates all the data to a follower. When this happens, a follower with the most consistent data can be turned into a leader. As you can realize now, it is hard to enforce full consistency in this model. You also need to consider the ratio of read vs write traffic. This model won\u2019t make sense when writes are higher than reads. The replication methods can also vary widely. Some systems do a complete transfer of state periodically, while others use a delta state transfer approach. You could also transfer the state by transferring the operations in order. The followers can then apply the same operations as the leader to catch up. Sharding Sharing refers to dividing data in such a way that data is distributed evenly (both in terms of storage & processing power) across a cluster of nodes. It can also imply data locality, which means similar & related data is stored together to facilitate faster access. A shard in turn can be further replicated to meet load balancing or disaster recovery requirements. A single shard replica might take in all writes (single leader) or multiple replicas can take writes (multi-leader). Reads can be distributed across multiple replicas. Since data is now distributed across multiple nodes, clients should be able to consistently figure out where data is hosted. We will look at some of the common techniques below. The downside of sharding is that joins between shards is not possible. So an upstream/downstream application has to aggregate the results from multiple shards. Sharding example","title":"Partitioning"},{"location":"databases_nosql/key_concepts/#hashing","text":"A hash function is a function that maps one piece of data\u2014typically describing some kind of object, often of arbitrary size\u2014to another piece of data, typically an integer, known as hash code , or simply hash . In a partitioned database, it is important to consistently map a key to a server/replica. For ex: you can use a very simple hash as a modulo function. _p = k mod n_ Where p -> partition, k -> primary key n -> no of nodes The downside of this simple hash is that, whenever the cluster topology changes, the data distribution also changes. When you are dealing with memory caches, it will be easy to distribute partitions around. Whenever a node joins/leaves a topology, partitions can reorder themselves, a cache miss can be re-populated from backend DB. However when you look at persistent data, it is not possible as the new node doesn\u2019t have the data needed to serve it. This brings us to consistent hashing.","title":"Hashing"},{"location":"databases_nosql/key_concepts/#consistent-hashing","text":"Consistent hashing is a distributed hashing scheme that operates independently of the number of servers or objects in a distributed hash table by assigning them a position on an abstract circle, or hash ring . This allows servers and objects to scale without affecting the overall system. Say that our hash function h() generates a 32-bit integer. Then, to determine to which server we will send a key k, we find the server s whose hash h(s) is the smallest integer that is larger than h(k). To make the process simpler, we assume the table is circular, which means that if we cannot find a server with a hash larger than h(k), we wrap around and start looking from the beginning of the array. Consistent hashing illustration In consistent hashing when a server is removed or added then only the keys from that server are relocated. For example, if server S3 is removed then, all keys from server S3 will be moved to server S4 but keys stored on server S4 and S2 are not relocated. But there is one problem, when server S3 is removed then keys from S3 are not equally distributed among remaining servers S4 and S2. They are only assigned to server S4 which increases the load on server S4. To evenly distribute the load among servers when a server is added or removed, it creates a fixed number of replicas ( known as virtual nodes) of each server and distributes it along the circle. So instead of server labels S1, S2 and S3, we will have S10 S11\u2026S19, S20 S21\u2026S29 and S30 S31\u2026S39. The factor for a number of replicas is also known as weight , depending on the situation. All keys which are mapped to replicas Sij are stored on server Si. To find a key we do the same thing, find the position of the key on the circle and then move forward until you find a server replica. If the server replica is Sij then the key is stored in server Si. Suppose server S3 is removed, then all S3 replicas with labels S30 S31 \u2026 S39 must be removed. Now the objects keys adjacent to S3X labels will be automatically re-assigned to S1X, S2X and S4X. All keys originally assigned to S1, S2 & S4 will not be moved. Similar things happen if we add a server. Suppose we want to add a server S5 as a replacement of S3 then we need to add labels S50 S51 \u2026 S59. In the ideal case, one-fourth of keys from S1, S2 and S4 will be reassigned to S5. When applied to persistent storages, further issues arise: if a node has left the scene, data stored on this node becomes unavailable, unless it has been replicated to other nodes before; in the opposite case of a new node joining the others, adjacent nodes are no longer responsible for some pieces of data which they still store but not get asked for anymore as the corresponding objects are no longer hashed to them by requesting clients. In order to address this issue, a replication factor (r) can be introduced. Introducing replicas in a partitioning scheme\u2014besides reliability benefits\u2014also makes it possible to spread workload for read requests that can go to any physical node responsible for a requested piece of data. Scalability doesn\u2019t work if the clients have to decide between multiple versions of the dataset, because they need to read from a quorum of servers which in turn reduces the efficiency of load balancing.","title":"Consistent Hashing"},{"location":"databases_nosql/key_concepts/#quorum","text":"Quorum is the minimum number of nodes in a cluster that must be online and be able to communicate with each other. If any additional node failure occurs beyond this threshold, the cluster will stop running. To attain a quorum, you need a majority of the nodes. Commonly it is (N/2 + 1), where N is the total no of nodes in the system. For ex, In a 3 node cluster, you need 2 nodes for a majority, In a 5 node cluster, you need 3 nodes for a majority, In a 6 node cluster, you need 4 nodes for a majority. Quorum example Network problems can cause communication failures among cluster nodes. One set of nodes might be able to communicate together across a functioning part of a network but not be able to communicate with a different set of nodes in another part of the network. This is known as split brain in cluster or cluster partitioning. Now the partition which has quorum is allowed to continue running the application. The other partitions are removed from the cluster. Eg: In a 5 node cluster, consider what happens if nodes 1, 2, and 3 can communicate with each other but not with nodes 4 and 5. Nodes 1, 2, and 3 constitute a majority, and they continue running as a cluster. Nodes 4 and 5, being a minority, stop running as a cluster. If node 3 loses communication with other nodes, all nodes stop running as a cluster. However, all functioning nodes will continue to listen for communication, so that when the network begins working again, the cluster can form and begin to run. Below diagram demonstrates Quorum selection on a cluster partitioned into two sets. Cluster Quorum example","title":"Quorum"},{"location":"git/branches/","text":"Working With Branches Coming back to our local repo which has two commits. So far, what we have is a single line of history. Commits are chained in a single line. But sometimes you may have a need to work on two different features in parallel in the same repo. Now one option here could be making a new folder/repo with the same code and use that for another feature development. But there's a better way. Use branches. Since git follows tree like structure for commits, we can use branches to work on different sets of features. From a commit, two or more branches can be created and branches can also be merged. Using branches, there can exist multiple lines of histories and we can checkout to any of them and work on it. Checking out, as we discussed earlier, would simply mean replacing contents of the directory (repo) with contents snapshot at the checked out version. Let's create a branch and see how it looks like: spatel1-mn1:school-of-sre spatel1$ git branch b1 spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 7f3b00e (HEAD -> master, b1) adding file 2 * df2fb7a adding file 1 We create a branch called b1 . Git log tells us that b1 also points to the last commit (7f3b00e) but the HEAD is still pointing to master. If you remember, HEAD points to the commit/reference wherever you are checkout to. So if we checkout to b1 , HEAD should point to that. Let's confirm: spatel1-mn1:school-of-sre spatel1$ git checkout b1 Switched to branch 'b1' spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 7f3b00e (HEAD -> b1, master) adding file 2 * df2fb7a adding file 1 b1 still points to the same commit but HEAD now points to b1 . Since we create a branch at commit 7f3b00e , there will be two lines of histories starting this commit. Depending on which branch you are checked out on, the line of history will progress. At this moment, we are checked out on branch b1 , so making a new commit will advance branch reference b1 to that commit and current b1 commit will become its parent. Let's do that. # Creating a file and making a commit spatel1-mn1:school-of-sre spatel1$ echo \"I am a file in b1 branch\" > b1.txt spatel1-mn1:school-of-sre spatel1$ git add b1.txt spatel1-mn1:school-of-sre spatel1$ git commit -m \"adding b1 file\" [b1 872a38f] adding b1 file 1 file changed, 1 insertion(+) create mode 100644 b1.txt # The new line of history spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 872a38f (HEAD -> b1) adding b1 file * 7f3b00e (master) adding file 2 * df2fb7a adding file 1 spatel1-mn1:school-of-sre spatel1$ Do note that master is still pointing to the old commit it was pointing to. We can now checkout to master branch and make commits there. This will result in another line of history starting from commit 7f3b00e. # checkout to master branch spatel1-mn1:school-of-sre spatel1$ git checkout master Switched to branch 'master' # Creating a new commit on master branch spatel1-mn1:school-of-sre spatel1$ echo \"new file in master branch\" > master.txt spatel1-mn1:school-of-sre spatel1$ git add master.txt spatel1-mn1:school-of-sre spatel1$ git commit -m \"adding master.txt file\" [master 60dc441] adding master.txt file 1 file changed, 1 insertion(+) create mode 100644 master.txt # The history line spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 60dc441 (HEAD -> master) adding master.txt file * 7f3b00e adding file 2 * df2fb7a adding file 1 Notice how branch b1 is not visible here since we are checkout on master. Let's try to visualize both to get the whole picture: spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph --all * 60dc441 (HEAD -> master) adding master.txt file | * 872a38f (b1) adding b1 file |/ * 7f3b00e adding file 2 * df2fb7a adding file 1 Above tree structure should make things clear. Notice a clear branch/fork on commit 7f3b00e. This is how we create branches. Now they both are two separate lines of history on which feature development can be done independently. To reiterate, internally, git is just a tree of commits. Branch names (human readable) are pointers to those commits in the tree. We use various git commands to work with the tree structure and references. Git accordingly modifies contents of our repo. Merges Now say the feature you were working on branch b1 is complete and you need to merge it on master branch, where all the final version of code goes. So first you will checkout to branch master and then you pull the latest code from upstream (eg: GitHub). Then you need to merge your code from b1 into master. There could be two ways this can be done. Here is the current history: spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph --all * 60dc441 (HEAD -> master) adding master.txt file | * 872a38f (b1) adding b1 file |/ * 7f3b00e adding file 2 * df2fb7a adding file 1 Option 1: Directly merge the branch. Merging the branch b1 into master will result in a new merge commit. This will merge changes from two different lines of history and create a new commit of the result. spatel1-mn1:school-of-sre spatel1$ git merge b1 Merge made by the 'recursive' strategy. b1.txt | 1 + 1 file changed, 1 insertion(+) create mode 100644 b1.txt spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph --all * 8fc28f9 (HEAD -> master) Merge branch 'b1' |\\ | * 872a38f (b1) adding b1 file * | 60dc441 adding master.txt file |/ * 7f3b00e adding file 2 * df2fb7a adding file 1 You can see a new merge commit created (8fc28f9). You will be prompted for the commit message. If there are a lot of branches in the repo, this result will end-up with a lot of merge commits. Which looks ugly compared to a single line of history of development. So let's look at an alternative approach First let's reset our last merge and go to the previous state. spatel1-mn1:school-of-sre spatel1$ git reset --hard 60dc441 HEAD is now at 60dc441 adding master.txt file spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph --all * 60dc441 (HEAD -> master) adding master.txt file | * 872a38f (b1) adding b1 file |/ * 7f3b00e adding file 2 * df2fb7a adding file 1 Option 2: Rebase. Now, instead of merging two branches which has a similar base (commit: 7f3b00e), let us rebase branch b1 on to current master. What this means is take branch b1 (from commit 7f3b00e to commit 872a38f) and rebase (put them on top of) master (60dc441). # Switch to b1 spatel1-mn1:school-of-sre spatel1$ git checkout b1 Switched to branch 'b1' # Rebase (b1 which is current branch) on master spatel1-mn1:school-of-sre spatel1$ git rebase master First, rewinding head to replay your work on top of it... Applying: adding b1 file # The result spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph --all * 5372c8f (HEAD -> b1) adding b1 file * 60dc441 (master) adding master.txt file * 7f3b00e adding file 2 * df2fb7a adding file 1 You can see b1 which had 1 commit. That commit's parent was 7f3b00e . But since we rebase it on master ( 60dc441 ). That becomes the parent now. As a side effect, you also see it has become a single line of history. Now if we were to merge b1 into master , it would simply mean change master to point to 5372c8f which is b1 . Let's try it: # checkout to master since we want to merge code into master spatel1-mn1:school-of-sre spatel1$ git checkout master Switched to branch 'master' # the current history, where b1 is based on master spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph --all * 5372c8f (b1) adding b1 file * 60dc441 (HEAD -> master) adding master.txt file * 7f3b00e adding file 2 * df2fb7a adding file 1 # Performing the merge, notice the \"fast-forward\" message spatel1-mn1:school-of-sre spatel1$ git merge b1 Updating 60dc441..5372c8f Fast-forward b1.txt | 1 + 1 file changed, 1 insertion(+) create mode 100644 b1.txt # The Result spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph --all * 5372c8f (HEAD -> master, b1) adding b1 file * 60dc441 adding master.txt file * 7f3b00e adding file 2 * df2fb7a adding file 1 Now you see both b1 and master are pointing to the same commit. Your code has been merged to the master branch and it can be pushed. Also we have clean line of history! :D","title":"Working With Branches"},{"location":"git/branches/#working-with-branches","text":"Coming back to our local repo which has two commits. So far, what we have is a single line of history. Commits are chained in a single line. But sometimes you may have a need to work on two different features in parallel in the same repo. Now one option here could be making a new folder/repo with the same code and use that for another feature development. But there's a better way. Use branches. Since git follows tree like structure for commits, we can use branches to work on different sets of features. From a commit, two or more branches can be created and branches can also be merged. Using branches, there can exist multiple lines of histories and we can checkout to any of them and work on it. Checking out, as we discussed earlier, would simply mean replacing contents of the directory (repo) with contents snapshot at the checked out version. Let's create a branch and see how it looks like: spatel1-mn1:school-of-sre spatel1$ git branch b1 spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 7f3b00e (HEAD -> master, b1) adding file 2 * df2fb7a adding file 1 We create a branch called b1 . Git log tells us that b1 also points to the last commit (7f3b00e) but the HEAD is still pointing to master. If you remember, HEAD points to the commit/reference wherever you are checkout to. So if we checkout to b1 , HEAD should point to that. Let's confirm: spatel1-mn1:school-of-sre spatel1$ git checkout b1 Switched to branch 'b1' spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 7f3b00e (HEAD -> b1, master) adding file 2 * df2fb7a adding file 1 b1 still points to the same commit but HEAD now points to b1 . Since we create a branch at commit 7f3b00e , there will be two lines of histories starting this commit. Depending on which branch you are checked out on, the line of history will progress. At this moment, we are checked out on branch b1 , so making a new commit will advance branch reference b1 to that commit and current b1 commit will become its parent. Let's do that. # Creating a file and making a commit spatel1-mn1:school-of-sre spatel1$ echo \"I am a file in b1 branch\" > b1.txt spatel1-mn1:school-of-sre spatel1$ git add b1.txt spatel1-mn1:school-of-sre spatel1$ git commit -m \"adding b1 file\" [b1 872a38f] adding b1 file 1 file changed, 1 insertion(+) create mode 100644 b1.txt # The new line of history spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 872a38f (HEAD -> b1) adding b1 file * 7f3b00e (master) adding file 2 * df2fb7a adding file 1 spatel1-mn1:school-of-sre spatel1$ Do note that master is still pointing to the old commit it was pointing to. We can now checkout to master branch and make commits there. This will result in another line of history starting from commit 7f3b00e. # checkout to master branch spatel1-mn1:school-of-sre spatel1$ git checkout master Switched to branch 'master' # Creating a new commit on master branch spatel1-mn1:school-of-sre spatel1$ echo \"new file in master branch\" > master.txt spatel1-mn1:school-of-sre spatel1$ git add master.txt spatel1-mn1:school-of-sre spatel1$ git commit -m \"adding master.txt file\" [master 60dc441] adding master.txt file 1 file changed, 1 insertion(+) create mode 100644 master.txt # The history line spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 60dc441 (HEAD -> master) adding master.txt file * 7f3b00e adding file 2 * df2fb7a adding file 1 Notice how branch b1 is not visible here since we are checkout on master. Let's try to visualize both to get the whole picture: spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph --all * 60dc441 (HEAD -> master) adding master.txt file | * 872a38f (b1) adding b1 file |/ * 7f3b00e adding file 2 * df2fb7a adding file 1 Above tree structure should make things clear. Notice a clear branch/fork on commit 7f3b00e. This is how we create branches. Now they both are two separate lines of history on which feature development can be done independently. To reiterate, internally, git is just a tree of commits. Branch names (human readable) are pointers to those commits in the tree. We use various git commands to work with the tree structure and references. Git accordingly modifies contents of our repo.","title":"Working With Branches"},{"location":"git/branches/#merges","text":"Now say the feature you were working on branch b1 is complete and you need to merge it on master branch, where all the final version of code goes. So first you will checkout to branch master and then you pull the latest code from upstream (eg: GitHub). Then you need to merge your code from b1 into master. There could be two ways this can be done. Here is the current history: spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph --all * 60dc441 (HEAD -> master) adding master.txt file | * 872a38f (b1) adding b1 file |/ * 7f3b00e adding file 2 * df2fb7a adding file 1 Option 1: Directly merge the branch. Merging the branch b1 into master will result in a new merge commit. This will merge changes from two different lines of history and create a new commit of the result. spatel1-mn1:school-of-sre spatel1$ git merge b1 Merge made by the 'recursive' strategy. b1.txt | 1 + 1 file changed, 1 insertion(+) create mode 100644 b1.txt spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph --all * 8fc28f9 (HEAD -> master) Merge branch 'b1' |\\ | * 872a38f (b1) adding b1 file * | 60dc441 adding master.txt file |/ * 7f3b00e adding file 2 * df2fb7a adding file 1 You can see a new merge commit created (8fc28f9). You will be prompted for the commit message. If there are a lot of branches in the repo, this result will end-up with a lot of merge commits. Which looks ugly compared to a single line of history of development. So let's look at an alternative approach First let's reset our last merge and go to the previous state. spatel1-mn1:school-of-sre spatel1$ git reset --hard 60dc441 HEAD is now at 60dc441 adding master.txt file spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph --all * 60dc441 (HEAD -> master) adding master.txt file | * 872a38f (b1) adding b1 file |/ * 7f3b00e adding file 2 * df2fb7a adding file 1 Option 2: Rebase. Now, instead of merging two branches which has a similar base (commit: 7f3b00e), let us rebase branch b1 on to current master. What this means is take branch b1 (from commit 7f3b00e to commit 872a38f) and rebase (put them on top of) master (60dc441). # Switch to b1 spatel1-mn1:school-of-sre spatel1$ git checkout b1 Switched to branch 'b1' # Rebase (b1 which is current branch) on master spatel1-mn1:school-of-sre spatel1$ git rebase master First, rewinding head to replay your work on top of it... Applying: adding b1 file # The result spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph --all * 5372c8f (HEAD -> b1) adding b1 file * 60dc441 (master) adding master.txt file * 7f3b00e adding file 2 * df2fb7a adding file 1 You can see b1 which had 1 commit. That commit's parent was 7f3b00e . But since we rebase it on master ( 60dc441 ). That becomes the parent now. As a side effect, you also see it has become a single line of history. Now if we were to merge b1 into master , it would simply mean change master to point to 5372c8f which is b1 . Let's try it: # checkout to master since we want to merge code into master spatel1-mn1:school-of-sre spatel1$ git checkout master Switched to branch 'master' # the current history, where b1 is based on master spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph --all * 5372c8f (b1) adding b1 file * 60dc441 (HEAD -> master) adding master.txt file * 7f3b00e adding file 2 * df2fb7a adding file 1 # Performing the merge, notice the \"fast-forward\" message spatel1-mn1:school-of-sre spatel1$ git merge b1 Updating 60dc441..5372c8f Fast-forward b1.txt | 1 + 1 file changed, 1 insertion(+) create mode 100644 b1.txt # The Result spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph --all * 5372c8f (HEAD -> master, b1) adding b1 file * 60dc441 adding master.txt file * 7f3b00e adding file 2 * df2fb7a adding file 1 Now you see both b1 and master are pointing to the same commit. Your code has been merged to the master branch and it can be pushed. Also we have clean line of history! :D","title":"Merges"},{"location":"git/conclusion/","text":"What next from here? There are a lot of git commands and features which we have not explored here. But with the base built-up, be sure to explore concepts like Cherrypick Squash Amend Stash Reset","title":"Conclusion"},{"location":"git/conclusion/#what-next-from-here","text":"There are a lot of git commands and features which we have not explored here. But with the base built-up, be sure to explore concepts like Cherrypick Squash Amend Stash Reset","title":"What next from here?"},{"location":"git/git-basics/","text":"Git Prerequisites Have Git installed https://git-scm.com/downloads Have taken any git high level tutorial or following LinkedIn learning courses https://www.linkedin.com/learning/git-essential-training-the-basics/ https://www.linkedin.com/learning/git-branches-merges-and-remotes/ The Official Git Docs What to expect from this course As an engineer in the field of computer science, having knowledge of version control tools becomes almost a requirement. While there are a lot of version control tools that exist today like SVN, Mercurial, etc, Git perhaps is the most used one and this course we will be working with Git. While this course does not start with Git 101 and expects basic knowledge of git as a prerequisite, it will reintroduce the git concepts known by you with details covering what is happening under the hood as you execute various git commands. So that next time you run a git command, you will be able to press enter more confidently! What is not covered under this course Advanced usage and specifics of internal implementation details of Git. Course Contents Git Basics Working with Branches Git with Github Hooks Git Basics Though you might be aware already, let's revisit why we need a version control system. As the project grows and multiple developers start working on it, an efficient method for collaboration is warranted. Git helps the team collaborate easily and also maintains the history of the changes happening with the codebase. Creating a Git Repo Any folder can be converted into a git repository. After executing the following command, we will see a .git folder within the folder, which makes our folder a git repository. All the magic that git does, .git folder is the enabler for the same. # creating an empty folder and changing current dir to it spatel1-mn1:~ spatel1$ cd /tmp spatel1-mn1:tmp spatel1$ mkdir school-of-sre spatel1-mn1:tmp spatel1$ cd school-of-sre/ # initialize a git repo spatel1-mn1:school-of-sre spatel1$ git init Initialized empty Git repository in /private/tmp/school-of-sre/.git/ As the output says, an empty git repo has been initialized in our folder. Let's take a look at what is there. spatel1-mn1:school-of-sre spatel1$ ls .git/ HEAD config description hooks info objects refs There are a bunch of folders and files in the .git folder. As I said, all these enables git to do its magic. We will look into some of these folders and files. But for now, what we have is an empty git repository. Tracking a File Now as you might already know, let us create a new file in our repo (we will refer to the folder as repo now.) And see git status spatel1-mn1:school-of-sre spatel1$ echo \"I am file 1\" > file1.txt spatel1-mn1:school-of-sre spatel1$ git status On branch master No commits yet Untracked files: (use \"git add <file>...\" to include in what will be committed) file1.txt nothing added to commit but untracked files present (use \"git add\" to track) The current git status says No commits yet and there is one untracked file. Since we just created the file, git is not tracking that file. We explicitly need to ask git to track files and folders. (also checkout gitignore ) And how we do that is via git add command as suggested in the above output. Then we go ahead and create a commit. spatel1-mn1:school-of-sre spatel1$ git add file1.txt spatel1-mn1:school-of-sre spatel1$ git status On branch master No commits yet Changes to be committed: (use \"git rm --cached <file>...\" to unstage) new file: file1.txt spatel1-mn1:school-of-sre spatel1$ git commit -m \"adding file 1\" [master (root-commit) df2fb7a] adding file 1 1 file changed, 1 insertion(+) create mode 100644 file1.txt Notice how after adding the file, git status says Changes to be committed: . What it means is whatever is listed there, will be included in the next commit. Then we go ahead and create a commit, with an attached messaged via -m . More About a Commit Commit is a snapshot of the repo. Whenever a commit is made, a snapshot of the current state of repo (the folder) is taken and saved. Each commit has a unique ID. ( df2fb7a for the commit we made in the previous step). As we keep adding/changing more and more contents and keep making commits, all those snapshots are stored by git. Again, all this magic happens inside the .git folder. This is where all this snapshot or versions are stored. In an efficient manner. Adding More Changes Let us create one more file and commit the change. It would look the same as the previous commit we made. spatel1-mn1:school-of-sre spatel1$ echo \"I am file 2\" > file2.txt spatel1-mn1:school-of-sre spatel1$ git add file2.txt spatel1-mn1:school-of-sre spatel1$ git commit -m \"adding file 2\" [master 7f3b00e] adding file 2 1 file changed, 1 insertion(+) create mode 100644 file2.txt A new commit with ID 7f3b00e has been created. You can issue git status at any time to see the state of the repository. **IMPORTANT: Note that commit IDs are long string (SHA) but we can refer to a commit by its initial few (8 or more) characters too. We will interchangeably using shorter and longer commit IDs.** Now that we have two commits, let's visualize them: spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 7f3b00e (HEAD -> master) adding file 2 * df2fb7a adding file 1 git log , as the name suggests, prints the log of all the git commits. Here you see two additional arguments, --oneline prints the shorter version of the log, ie: the commit message only and not the person who made the commit and when. --graph prints it in graph format. Now at this moment the commits might look like just one in each line but all commits are stored as a tree like data structure internally by git. That means there can be two or more children commits of a given commit. And not just a single line of commits. We will look more into this part when we get to the Branches section. For now this is our commit history: df2fb7a ===> 7f3b00e Are commits really linked? As I just said, the two commits we just made are linked via tree like data structure and we saw how they are linked. But let's actually verify it. Everything in git is an object. Newly created files are stored as an object. Changes to file are stored as an objects and even commits are objects. To view contents of an object we can use the following command with the object's ID. We will take a look at content of the contents of the second commit spatel1-mn1:school-of-sre spatel1$ git cat-file -p 7f3b00e tree ebf3af44d253e5328340026e45a9fa9ae3ea1982 parent df2fb7a61f5d40c1191e0fdeb0fc5d6e7969685a author Sanket Patel <spatel1@linkedin.com> 1603273316 -0700 committer Sanket Patel <spatel1@linkedin.com> 1603273316 -0700 adding file 2 Take a note of parent attribute in the above output. It points to the commit id of the first commit we made. So this proves that they are linked! Additionally you can see the second commit's message in this object. As I said all this magic is enabled by .git folder and the object to which we are looking at also is in that folder. spatel1-mn1:school-of-sre spatel1$ ls .git/objects/7f/3b00eaa957815884198e2fdfec29361108d6a9 .git/objects/7f/3b00eaa957815884198e2fdfec29361108d6a9 It is stored in .git/objects/ folder. All the files and changes to them as well are stored in this folder. The Version Control part of Git We already can see two commits (versions) in our git log. One thing a version control tool gives you is ability to browse back and forth in history. For example: some of your users are running an old version of code and they are reporting an issue. In order to debug the issue, you need access to the old code. The one in your current repo is the latest code. In this example, you are working on the second commit (7f3b00e) and someone reported an issue with the code snapshot at commit (df2fb7a). This is how you would get access to the code at any older commit # Current contents, two files present patel1-mn1:school-of-sre spatel1$ ls file1.txt file2.txt # checking out to (an older) commit spatel1-mn1:school-of-sre spatel1$ git checkout df2fb7a Note: checking out 'df2fb7a'. You are in 'detached HEAD' state. You can look around, make experimental changes and commit them, and you can discard any commits you make in this state without impacting any branches by performing another checkout. If you want to create a new branch to retain commits you create, you may do so (now or later) by using -b with the checkout command again. Example: git checkout -b <new-branch-name> HEAD is now at df2fb7a adding file 1 # checking contents, can verify it has old contents spatel1-mn1:school-of-sre spatel1$ ls file1.txt So this is how we would get access to old versions/snapshots. All we need is a reference to that snapshot. Upon executing git checkout ... , what git does for you is use the .git folder, see what was the state of things (files and folders) at that version/reference and replace the contents of current directory with those contents. The then-existing content will no longer be present in the local dir (repo) but we can and will still get access to them because they are tracked via git commit and .git folder has them stored/tracked. Reference I mention in the previous section that we need a reference to the version. By default, git repo is made of tree of commits. And each commit has a unique IDs. But the unique ID is not the only thing we can reference commits via. There are multiple ways to reference commits. For example: HEAD is a reference to current commit. Whatever commit your repo is checked out at, HEAD will point to that. HEAD~1 is reference to previous commit. So while checking out previous version in section above, we could have done git checkout HEAD~1 . Similarly, master is also a reference (to a branch). Since git uses tree like structure to store commits, there of course will be branches. And the default branch is called master . Master (or any branch reference) will point to the latest commit in the branch. Even though we have checked out to the previous commit in out repo, master still points to the latest commit. And we can get back to the latest version by checkout at master reference spatel1-mn1:school-of-sre spatel1$ git checkout master Previous HEAD position was df2fb7a adding file 1 Switched to branch 'master' # now we will see latest code, with two files spatel1-mn1:school-of-sre spatel1$ ls file1.txt file2.txt Note, instead of master in above command, we could have used commit's ID as well. References and The Magic Let's look at the state of things. Two commits, master and HEAD references are pointing to the latest commit spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 7f3b00e (HEAD -> master) adding file 2 * df2fb7a adding file 1 The magic? Let's examine these files: spatel1-mn1:school-of-sre spatel1$ cat .git/refs/heads/master 7f3b00eaa957815884198e2fdfec29361108d6a9 Viola! Where master is pointing to is stored in a file. Whenever git needs to know where master reference is pointing to, or if git needs to update where master points, it just needs to update the file above. So when you create a new commit, a new commit is created on top of the current commit and the master file is updated with the new commit's ID. Similary, for HEAD reference: spatel1-mn1:school-of-sre spatel1$ cat .git/HEAD ref: refs/heads/master We can see HEAD is pointing to a reference called refs/heads/master . So HEAD will point where ever the master points. Little Adventure We discussed how git will update the files as we execute commands. But let's try to do it ourselves, by hand, and see what happens. spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 7f3b00e (HEAD -> master) adding file 2 * df2fb7a adding file 1 Now let's change master to point to the previous/first commit. spatel1-mn1:school-of-sre spatel1$ echo df2fb7a61f5d40c1191e0fdeb0fc5d6e7969685a > .git/refs/heads/master spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * df2fb7a (HEAD -> master) adding file 1 # RESETTING TO ORIGINAL spatel1-mn1:school-of-sre spatel1$ echo 7f3b00eaa957815884198e2fdfec29361108d6a9 > .git/refs/heads/master spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 7f3b00e (HEAD -> master) adding file 2 * df2fb7a adding file 1 We just edited the master reference file and now we can see only the first commit in git log. Undoing the change to the file brings the state back to original. Not so much of magic, isn't it?","title":"Git Basics"},{"location":"git/git-basics/#git","text":"","title":"Git"},{"location":"git/git-basics/#prerequisites","text":"Have Git installed https://git-scm.com/downloads Have taken any git high level tutorial or following LinkedIn learning courses https://www.linkedin.com/learning/git-essential-training-the-basics/ https://www.linkedin.com/learning/git-branches-merges-and-remotes/ The Official Git Docs","title":"Prerequisites"},{"location":"git/git-basics/#what-to-expect-from-this-course","text":"As an engineer in the field of computer science, having knowledge of version control tools becomes almost a requirement. While there are a lot of version control tools that exist today like SVN, Mercurial, etc, Git perhaps is the most used one and this course we will be working with Git. While this course does not start with Git 101 and expects basic knowledge of git as a prerequisite, it will reintroduce the git concepts known by you with details covering what is happening under the hood as you execute various git commands. So that next time you run a git command, you will be able to press enter more confidently!","title":"What to expect from this course"},{"location":"git/git-basics/#what-is-not-covered-under-this-course","text":"Advanced usage and specifics of internal implementation details of Git.","title":"What is not covered under this course"},{"location":"git/git-basics/#course-contents","text":"Git Basics Working with Branches Git with Github Hooks","title":"Course Contents"},{"location":"git/git-basics/#git-basics","text":"Though you might be aware already, let's revisit why we need a version control system. As the project grows and multiple developers start working on it, an efficient method for collaboration is warranted. Git helps the team collaborate easily and also maintains the history of the changes happening with the codebase.","title":"Git Basics"},{"location":"git/git-basics/#creating-a-git-repo","text":"Any folder can be converted into a git repository. After executing the following command, we will see a .git folder within the folder, which makes our folder a git repository. All the magic that git does, .git folder is the enabler for the same. # creating an empty folder and changing current dir to it spatel1-mn1:~ spatel1$ cd /tmp spatel1-mn1:tmp spatel1$ mkdir school-of-sre spatel1-mn1:tmp spatel1$ cd school-of-sre/ # initialize a git repo spatel1-mn1:school-of-sre spatel1$ git init Initialized empty Git repository in /private/tmp/school-of-sre/.git/ As the output says, an empty git repo has been initialized in our folder. Let's take a look at what is there. spatel1-mn1:school-of-sre spatel1$ ls .git/ HEAD config description hooks info objects refs There are a bunch of folders and files in the .git folder. As I said, all these enables git to do its magic. We will look into some of these folders and files. But for now, what we have is an empty git repository.","title":"Creating a Git Repo"},{"location":"git/git-basics/#tracking-a-file","text":"Now as you might already know, let us create a new file in our repo (we will refer to the folder as repo now.) And see git status spatel1-mn1:school-of-sre spatel1$ echo \"I am file 1\" > file1.txt spatel1-mn1:school-of-sre spatel1$ git status On branch master No commits yet Untracked files: (use \"git add <file>...\" to include in what will be committed) file1.txt nothing added to commit but untracked files present (use \"git add\" to track) The current git status says No commits yet and there is one untracked file. Since we just created the file, git is not tracking that file. We explicitly need to ask git to track files and folders. (also checkout gitignore ) And how we do that is via git add command as suggested in the above output. Then we go ahead and create a commit. spatel1-mn1:school-of-sre spatel1$ git add file1.txt spatel1-mn1:school-of-sre spatel1$ git status On branch master No commits yet Changes to be committed: (use \"git rm --cached <file>...\" to unstage) new file: file1.txt spatel1-mn1:school-of-sre spatel1$ git commit -m \"adding file 1\" [master (root-commit) df2fb7a] adding file 1 1 file changed, 1 insertion(+) create mode 100644 file1.txt Notice how after adding the file, git status says Changes to be committed: . What it means is whatever is listed there, will be included in the next commit. Then we go ahead and create a commit, with an attached messaged via -m .","title":"Tracking a File"},{"location":"git/git-basics/#more-about-a-commit","text":"Commit is a snapshot of the repo. Whenever a commit is made, a snapshot of the current state of repo (the folder) is taken and saved. Each commit has a unique ID. ( df2fb7a for the commit we made in the previous step). As we keep adding/changing more and more contents and keep making commits, all those snapshots are stored by git. Again, all this magic happens inside the .git folder. This is where all this snapshot or versions are stored. In an efficient manner.","title":"More About a Commit"},{"location":"git/git-basics/#adding-more-changes","text":"Let us create one more file and commit the change. It would look the same as the previous commit we made. spatel1-mn1:school-of-sre spatel1$ echo \"I am file 2\" > file2.txt spatel1-mn1:school-of-sre spatel1$ git add file2.txt spatel1-mn1:school-of-sre spatel1$ git commit -m \"adding file 2\" [master 7f3b00e] adding file 2 1 file changed, 1 insertion(+) create mode 100644 file2.txt A new commit with ID 7f3b00e has been created. You can issue git status at any time to see the state of the repository. **IMPORTANT: Note that commit IDs are long string (SHA) but we can refer to a commit by its initial few (8 or more) characters too. We will interchangeably using shorter and longer commit IDs.** Now that we have two commits, let's visualize them: spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 7f3b00e (HEAD -> master) adding file 2 * df2fb7a adding file 1 git log , as the name suggests, prints the log of all the git commits. Here you see two additional arguments, --oneline prints the shorter version of the log, ie: the commit message only and not the person who made the commit and when. --graph prints it in graph format. Now at this moment the commits might look like just one in each line but all commits are stored as a tree like data structure internally by git. That means there can be two or more children commits of a given commit. And not just a single line of commits. We will look more into this part when we get to the Branches section. For now this is our commit history: df2fb7a ===> 7f3b00e","title":"Adding More Changes"},{"location":"git/git-basics/#are-commits-really-linked","text":"As I just said, the two commits we just made are linked via tree like data structure and we saw how they are linked. But let's actually verify it. Everything in git is an object. Newly created files are stored as an object. Changes to file are stored as an objects and even commits are objects. To view contents of an object we can use the following command with the object's ID. We will take a look at content of the contents of the second commit spatel1-mn1:school-of-sre spatel1$ git cat-file -p 7f3b00e tree ebf3af44d253e5328340026e45a9fa9ae3ea1982 parent df2fb7a61f5d40c1191e0fdeb0fc5d6e7969685a author Sanket Patel <spatel1@linkedin.com> 1603273316 -0700 committer Sanket Patel <spatel1@linkedin.com> 1603273316 -0700 adding file 2 Take a note of parent attribute in the above output. It points to the commit id of the first commit we made. So this proves that they are linked! Additionally you can see the second commit's message in this object. As I said all this magic is enabled by .git folder and the object to which we are looking at also is in that folder. spatel1-mn1:school-of-sre spatel1$ ls .git/objects/7f/3b00eaa957815884198e2fdfec29361108d6a9 .git/objects/7f/3b00eaa957815884198e2fdfec29361108d6a9 It is stored in .git/objects/ folder. All the files and changes to them as well are stored in this folder.","title":"Are commits really linked?"},{"location":"git/git-basics/#the-version-control-part-of-git","text":"We already can see two commits (versions) in our git log. One thing a version control tool gives you is ability to browse back and forth in history. For example: some of your users are running an old version of code and they are reporting an issue. In order to debug the issue, you need access to the old code. The one in your current repo is the latest code. In this example, you are working on the second commit (7f3b00e) and someone reported an issue with the code snapshot at commit (df2fb7a). This is how you would get access to the code at any older commit # Current contents, two files present patel1-mn1:school-of-sre spatel1$ ls file1.txt file2.txt # checking out to (an older) commit spatel1-mn1:school-of-sre spatel1$ git checkout df2fb7a Note: checking out 'df2fb7a'. You are in 'detached HEAD' state. You can look around, make experimental changes and commit them, and you can discard any commits you make in this state without impacting any branches by performing another checkout. If you want to create a new branch to retain commits you create, you may do so (now or later) by using -b with the checkout command again. Example: git checkout -b <new-branch-name> HEAD is now at df2fb7a adding file 1 # checking contents, can verify it has old contents spatel1-mn1:school-of-sre spatel1$ ls file1.txt So this is how we would get access to old versions/snapshots. All we need is a reference to that snapshot. Upon executing git checkout ... , what git does for you is use the .git folder, see what was the state of things (files and folders) at that version/reference and replace the contents of current directory with those contents. The then-existing content will no longer be present in the local dir (repo) but we can and will still get access to them because they are tracked via git commit and .git folder has them stored/tracked.","title":"The Version Control part of Git"},{"location":"git/git-basics/#reference","text":"I mention in the previous section that we need a reference to the version. By default, git repo is made of tree of commits. And each commit has a unique IDs. But the unique ID is not the only thing we can reference commits via. There are multiple ways to reference commits. For example: HEAD is a reference to current commit. Whatever commit your repo is checked out at, HEAD will point to that. HEAD~1 is reference to previous commit. So while checking out previous version in section above, we could have done git checkout HEAD~1 . Similarly, master is also a reference (to a branch). Since git uses tree like structure to store commits, there of course will be branches. And the default branch is called master . Master (or any branch reference) will point to the latest commit in the branch. Even though we have checked out to the previous commit in out repo, master still points to the latest commit. And we can get back to the latest version by checkout at master reference spatel1-mn1:school-of-sre spatel1$ git checkout master Previous HEAD position was df2fb7a adding file 1 Switched to branch 'master' # now we will see latest code, with two files spatel1-mn1:school-of-sre spatel1$ ls file1.txt file2.txt Note, instead of master in above command, we could have used commit's ID as well.","title":"Reference"},{"location":"git/git-basics/#references-and-the-magic","text":"Let's look at the state of things. Two commits, master and HEAD references are pointing to the latest commit spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 7f3b00e (HEAD -> master) adding file 2 * df2fb7a adding file 1 The magic? Let's examine these files: spatel1-mn1:school-of-sre spatel1$ cat .git/refs/heads/master 7f3b00eaa957815884198e2fdfec29361108d6a9 Viola! Where master is pointing to is stored in a file. Whenever git needs to know where master reference is pointing to, or if git needs to update where master points, it just needs to update the file above. So when you create a new commit, a new commit is created on top of the current commit and the master file is updated with the new commit's ID. Similary, for HEAD reference: spatel1-mn1:school-of-sre spatel1$ cat .git/HEAD ref: refs/heads/master We can see HEAD is pointing to a reference called refs/heads/master . So HEAD will point where ever the master points.","title":"References and The Magic"},{"location":"git/git-basics/#little-adventure","text":"We discussed how git will update the files as we execute commands. But let's try to do it ourselves, by hand, and see what happens. spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 7f3b00e (HEAD -> master) adding file 2 * df2fb7a adding file 1 Now let's change master to point to the previous/first commit. spatel1-mn1:school-of-sre spatel1$ echo df2fb7a61f5d40c1191e0fdeb0fc5d6e7969685a > .git/refs/heads/master spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * df2fb7a (HEAD -> master) adding file 1 # RESETTING TO ORIGINAL spatel1-mn1:school-of-sre spatel1$ echo 7f3b00eaa957815884198e2fdfec29361108d6a9 > .git/refs/heads/master spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 7f3b00e (HEAD -> master) adding file 2 * df2fb7a adding file 1 We just edited the master reference file and now we can see only the first commit in git log. Undoing the change to the file brings the state back to original. Not so much of magic, isn't it?","title":"Little Adventure"},{"location":"git/github-hooks/","text":"Git with Github Till now all the operations we did were in our local repo while git also helps us in a collaborative environment. GitHub is one place on the internet where you can centrally host your git repos and collaborate with other developers. Most of the workflow will remain the same as we discussed, with addition of couple of things: Pull: to pull latest changes from github (the central) repo Push: to push your changes to github repo so that it's available to all people GitHub has written nice guides and tutorials about this and you can refer them here: GitHub Hello World Git Handbook Hooks Git has another nice feature called hooks. Hooks are basically scripts which will be called when a certain event happens. Here is where hooks are located: spatel1-mn1:school-of-sre spatel1$ ls .git/hooks/ applypatch-msg.sample fsmonitor-watchman.sample pre-applypatch.sample pre-push.sample pre-receive.sample update.sample commit-msg.sample post-update.sample pre-commit.sample pre-rebase.sample prepare-commit-msg.sample Names are self explanatory. These hooks are useful when you want to do certain things when a certain event happens. Ie: if you want to run tests before pushing code, you would want to setup pre-push hooks. Let's try to create a pre commit hook. spatel1-mn1:school-of-sre spatel1$ echo \"echo this is from pre commit hook\" > .git/hooks/pre-commit spatel1-mn1:school-of-sre spatel1$ chmod +x .git/hooks/pre-commit We basically create a file called pre-commit in hooks folder and make it executable. Now if we make a commit, we should see the message getting printed. spatel1-mn1:school-of-sre spatel1$ echo \"sample file\" > sample.txt spatel1-mn1:school-of-sre spatel1$ git add sample.txt spatel1-mn1:school-of-sre spatel1$ git commit -m \"adding sample file\" this is from pre commit hook # <===== THE MESSAGE FROM HOOK EXECUTION [master 9894e05] adding sample file 1 file changed, 1 insertion(+) create mode 100644 sample.txt","title":"Github and Hooks"},{"location":"git/github-hooks/#git-with-github","text":"Till now all the operations we did were in our local repo while git also helps us in a collaborative environment. GitHub is one place on the internet where you can centrally host your git repos and collaborate with other developers. Most of the workflow will remain the same as we discussed, with addition of couple of things: Pull: to pull latest changes from github (the central) repo Push: to push your changes to github repo so that it's available to all people GitHub has written nice guides and tutorials about this and you can refer them here: GitHub Hello World Git Handbook","title":"Git with Github"},{"location":"git/github-hooks/#hooks","text":"Git has another nice feature called hooks. Hooks are basically scripts which will be called when a certain event happens. Here is where hooks are located: spatel1-mn1:school-of-sre spatel1$ ls .git/hooks/ applypatch-msg.sample fsmonitor-watchman.sample pre-applypatch.sample pre-push.sample pre-receive.sample update.sample commit-msg.sample post-update.sample pre-commit.sample pre-rebase.sample prepare-commit-msg.sample Names are self explanatory. These hooks are useful when you want to do certain things when a certain event happens. Ie: if you want to run tests before pushing code, you would want to setup pre-push hooks. Let's try to create a pre commit hook. spatel1-mn1:school-of-sre spatel1$ echo \"echo this is from pre commit hook\" > .git/hooks/pre-commit spatel1-mn1:school-of-sre spatel1$ chmod +x .git/hooks/pre-commit We basically create a file called pre-commit in hooks folder and make it executable. Now if we make a commit, we should see the message getting printed. spatel1-mn1:school-of-sre spatel1$ echo \"sample file\" > sample.txt spatel1-mn1:school-of-sre spatel1$ git add sample.txt spatel1-mn1:school-of-sre spatel1$ git commit -m \"adding sample file\" this is from pre commit hook # <===== THE MESSAGE FROM HOOK EXECUTION [master 9894e05] adding sample file 1 file changed, 1 insertion(+) create mode 100644 sample.txt","title":"Hooks"},{"location":"linux_basics/command_line_basics/","text":"Command Line Basics Lab Environment Setup One can use an online bash interpreter to run all the commands that are provided as examples in this course. This will also help you in getting a hands-on experience of various linux commands. REPL is one of the popular online bash interpreters for running linux commands. We will be using it for running all the commands mentioned in this course. What is a Command A command is a program that tells the operating system to perform specific work. Programs are stored as files in linux. Therefore, a command is also a file which is stored somewhere on the disk. Commands may also take additional arguments as input from the user. These arguments are called command line arguments. Knowing how to use the commands is important and there are many ways to get help in Linux, especially for commands. Almost every command will have some form of documentation, most commands will have a command-line argument -h or --help that will display a reasonable amount of documentation. But the most popular documentation system in Linux is called man pages - short for manual pages. Using --help to show the documentation for ls command. File System Organization The linux file system has a hierarchical (or tree-like) structure with its highest level directory called root ( denoted by / ). Directories present inside the root directory stores file related to the system. These directories in turn can either store system files or application files or user related files. bin | The executable program of most commonly used commands reside in bin directory sbin | This directory contains programs used for system administration. home | This directory contains user related files and directories. lib | This directory contains all the library files etc | This directory contains all the system configuration files proc | This directory contains files related to the running processes on the system dev | This directory contains files related to devices on the system mnt | This directory contains files related to mounted devices on the system tmp | This directory is used to store temporary files on the system usr | This directory is used to store application programs on the system Commands for Navigating the File System There are three basic commands which are used frequently to navigate the file system: ls pwd cd We will now try to understand what each command does and how to use these commands. You should also practice the given examples on the online bash shell. pwd (print working directory) At any given moment of time, we will be standing in a certain directory. To get the name of the directory in which we are standing, we can use the pwd command in linux. We will now use the cd command to move to a different directory and then print the working directory. cd (change directory) The cd command can be used to change the working directory. Using the command, you can move from one directory to another. In the below example, we are initially in the root directory. we have then used the cd command to change the directory. ls (list files and directories)** The ls command is used to list the contents of a directory. It will list down all the files and folders present in the given directory. If we just type ls in the shell, it will list all the files and directories present in the current directory. We can also provide the directory name as argument to ls command. It will then list all the files and directories inside the given directory. Commands for Manipulating Files There are four basic commands which are used frequently to manipulate files: touch mkdir cp mv rm We will now try to understand what each command does and how to use these commands. You should also practice the given examples on the online bash shell. touch (create new file) The touch command can be used to create an empty new file. This command is very useful for many other purposes but we will discuss the simplest use case of creating a new file. General syntax of using touch command touch <file_name> mkdir (create new directories) The mkdir command is used to create directories.You can use ls command to verify that the new directory is created. General syntax of using mkdir command mkdir <directory_name> rm (delete files and directories) The rm command can be used to delete files and directories. It is very important to note that this command permanently deletes the files and directories. It's almost impossible to recover these files and directories once you have executed rm command on them successfully. Do run this command with care. General syntax of using rm command: rm <file_name> Let's try to understand the rm command with an example. We will try to delete the file and directory we created using touch and mkdir command respectively. cp (copy files and directories) The cp command is used to copy files and directories from one location to another. Do note that the cp command doesn't do any change to the original files or directories. The original files or directories and their copy both co-exist after running cp command successfully. General syntax of using cp command: cp <source_path> <destination_path> We are currently in the '/home/runner' directory. We will use the mkdir command to create a new directory named \"test_directory\". We will now try to copy the \"_test_runner.py\" file to the directory we created just now. Do note that nothing happened to the original \"_test_runner.py\" file. It's still there in the current directory. A new copy of it got created inside the \"test_directory\". We can also use the cp command to copy the whole directory from one location to another. Let's try to understand this with an example. We again used the mkdir command to create a new directory called \"another_directory\". We then used the cp command along with an additional argument '-r' to copy the \"test_directory\". mv (move files and directories) The mv command can either be used to move files or directories from one location to another or it can be used to rename files or directories. Do note that moving files and copying them are very different. When you move the files or directories, the original copy is lost. General syntax of using mv command: mv <source_path> <destination_path> In this example, we will use the mv command to move the \"_test_runner.py\" file to \"test_directory\". In this case, this file already exists in \"test_directory\". The mv command will just replace it. Do note that the original file doesn't exist in the current directory after mv command ran successfully. We can also use the mv command to move a directory from one location to another. In this case, we do not need to use the '-r' flag that we did while using the cp command. Do note that the original directory will not exist if we use mv command. One of the important uses of the mv command is to rename files and directories. Let's see how we can use this command for renaming. We have first changed our location to \"test_directory\". We then use the mv command to rename the \"\"_test_runner.py\" file to \"test.py\". Commands for Viewing Files There are three basic commands which are used frequently to view the files: cat head tail We will now try to understand what each command does and how to use these commands. You should also practice the given examples on the online bash shell. We will create a new file called \"numbers.txt\" and insert numbers from 1 to 100 in this file. Each number will be in a separate line. Do not worry about the above command now. It's an advanced command which is used to generate numbers. We have then used a redirection operator to push these numbers to the file. We will be discussing I/O redirection in the later sections. cat The most simplest use of cat command is to print the contents of the file on your output screen. This command is very useful and can be used for many other purposes. We will study about other use cases later. You can try to run the above command and you will see numbers being printed from 1 to 100 on your screen. You will need to scroll up to view all the numbers. head The head command displays the first 10 lines of the file by default. We can include additional arguments to display as many lines as we want from the top. In this example, we are only able to see the first 10 lines from the file when we use the head command. By default, head command will only display the first 10 lines. If we want to specify the number of lines we want to see from start, use the '-n' argument to provide the input. tail The tail command displays the last 10 lines of the file by default. We can include additional arguments to display as many lines as we want from the end of the file. By default, the tail command will only display the last 10 lines. If we want to specify the number of lines we want to see from the end, use '-n' argument to provide the input. In this example, we are only able to see the last 5 lines from the file when we use the tail command with explicit -n option. Echo Command in Linux The echo command is one of the simplest commands that is used in the shell. This command is equivalent to what we have in other programming languages. The echo command prints the given input string on the screen. Text Processing Commands In the previous section, we learned how to view the content of a file. In many cases, we will be interested in performing the below operations: Print only the lines which contain a particular word(s) Replace a particular word with another word in a file Sort the lines in a particular order There are three basic commands which are used frequently to process texts: grep sed sort We will now try to understand what each command does and how to use these commands. You should also practice the given examples on the online bash shell. We will create a new file called \"numbers.txt\" and insert numbers from 1 to 10 in this file. Each number will be in a separate line. grep The grep command in its simplest form can be used to search particular words in a text file. It will display all the lines in a file that contains a particular input. The word we want to search is provided as an input to the grep command. General syntax of using grep command: grep <word_to_search> <file_name> In this example, we are trying to search for a string \"1\" in this file. The grep command outputs the lines where it found this string. sed The sed command in its simplest form can be used to replace a text in a file. General syntax of using the sed command for replacement: sed 's/<text_to_replace>/<replacement_text>/' <file_name> Let's try to replace each occurrence of \"1\" in the file with \"3\" using sed command. The content of the file will not change in the above example. To do so, we have to use an extra argument '-i' so that the changes are reflected back in the file. sort The sort command can be used to sort the input provided to it as an argument. By default, it will sort in increasing order. Let's first see the content of the file before trying to sort it. Now, we will try to sort the file using the sort command. The sort command sorts the content in lexicographical order. The content of the file will not change in the above example. I/O Redirection Each open file gets assigned a file descriptor. A file descriptor is an unique identifier for open files in the system. There are always three default files open, stdin (the keyboard), stdout (the screen), and stderr (error messages output to the screen). These files can be redirected. Everything is a file in linux - https://unix.stackexchange.com/questions/225537/everything-is-a-file Till now, we have displayed all the output on the screen which is the standard output. We can use some special operators to redirect the output of the command to files or even to the input of other commands. I/O redirection is a very powerful feature. In the below example, we have used the '>' operator to redirect the output of ls command to output.txt file. In the below example, we have redirected the output from echo command to a file. We can also redirect the output of a command as an input to another command. This is possible with the help of pipes. In the below example, we have passed the output of cat command as an input to grep command using pipe(|) operator. In the below example, we have passed the output of sort command as an input to uniq command using pipe(|) operator. The uniq command only prints the unique numbers from the input. I/O redirection - https://tldp.org/LDP/abs/html/io-redirection.html","title":"Command Line Basics"},{"location":"linux_basics/command_line_basics/#command-line-basics","text":"","title":"Command Line Basics"},{"location":"linux_basics/command_line_basics/#lab-environment-setup","text":"One can use an online bash interpreter to run all the commands that are provided as examples in this course. This will also help you in getting a hands-on experience of various linux commands. REPL is one of the popular online bash interpreters for running linux commands. We will be using it for running all the commands mentioned in this course.","title":"Lab Environment Setup"},{"location":"linux_basics/command_line_basics/#what-is-a-command","text":"A command is a program that tells the operating system to perform specific work. Programs are stored as files in linux. Therefore, a command is also a file which is stored somewhere on the disk. Commands may also take additional arguments as input from the user. These arguments are called command line arguments. Knowing how to use the commands is important and there are many ways to get help in Linux, especially for commands. Almost every command will have some form of documentation, most commands will have a command-line argument -h or --help that will display a reasonable amount of documentation. But the most popular documentation system in Linux is called man pages - short for manual pages. Using --help to show the documentation for ls command.","title":"What is a Command"},{"location":"linux_basics/command_line_basics/#file-system-organization","text":"The linux file system has a hierarchical (or tree-like) structure with its highest level directory called root ( denoted by / ). Directories present inside the root directory stores file related to the system. These directories in turn can either store system files or application files or user related files. bin | The executable program of most commonly used commands reside in bin directory sbin | This directory contains programs used for system administration. home | This directory contains user related files and directories. lib | This directory contains all the library files etc | This directory contains all the system configuration files proc | This directory contains files related to the running processes on the system dev | This directory contains files related to devices on the system mnt | This directory contains files related to mounted devices on the system tmp | This directory is used to store temporary files on the system usr | This directory is used to store application programs on the system","title":"File System Organization"},{"location":"linux_basics/command_line_basics/#commands-for-navigating-the-file-system","text":"There are three basic commands which are used frequently to navigate the file system: ls pwd cd We will now try to understand what each command does and how to use these commands. You should also practice the given examples on the online bash shell.","title":"Commands for Navigating the File System"},{"location":"linux_basics/command_line_basics/#pwd-print-working-directory","text":"At any given moment of time, we will be standing in a certain directory. To get the name of the directory in which we are standing, we can use the pwd command in linux. We will now use the cd command to move to a different directory and then print the working directory.","title":"pwd (print working directory)"},{"location":"linux_basics/command_line_basics/#cd-change-directory","text":"The cd command can be used to change the working directory. Using the command, you can move from one directory to another. In the below example, we are initially in the root directory. we have then used the cd command to change the directory.","title":"cd (change directory)"},{"location":"linux_basics/command_line_basics/#ls-list-files-and-directories","text":"The ls command is used to list the contents of a directory. It will list down all the files and folders present in the given directory. If we just type ls in the shell, it will list all the files and directories present in the current directory. We can also provide the directory name as argument to ls command. It will then list all the files and directories inside the given directory.","title":"ls (list files and directories)**"},{"location":"linux_basics/command_line_basics/#commands-for-manipulating-files","text":"There are four basic commands which are used frequently to manipulate files: touch mkdir cp mv rm We will now try to understand what each command does and how to use these commands. You should also practice the given examples on the online bash shell.","title":"Commands for Manipulating Files"},{"location":"linux_basics/command_line_basics/#touch-create-new-file","text":"The touch command can be used to create an empty new file. This command is very useful for many other purposes but we will discuss the simplest use case of creating a new file. General syntax of using touch command touch <file_name>","title":"touch (create new file)"},{"location":"linux_basics/command_line_basics/#mkdir-create-new-directories","text":"The mkdir command is used to create directories.You can use ls command to verify that the new directory is created. General syntax of using mkdir command mkdir <directory_name>","title":"mkdir (create new directories)"},{"location":"linux_basics/command_line_basics/#rm-delete-files-and-directories","text":"The rm command can be used to delete files and directories. It is very important to note that this command permanently deletes the files and directories. It's almost impossible to recover these files and directories once you have executed rm command on them successfully. Do run this command with care. General syntax of using rm command: rm <file_name> Let's try to understand the rm command with an example. We will try to delete the file and directory we created using touch and mkdir command respectively.","title":"rm (delete files and directories)"},{"location":"linux_basics/command_line_basics/#cp-copy-files-and-directories","text":"The cp command is used to copy files and directories from one location to another. Do note that the cp command doesn't do any change to the original files or directories. The original files or directories and their copy both co-exist after running cp command successfully. General syntax of using cp command: cp <source_path> <destination_path> We are currently in the '/home/runner' directory. We will use the mkdir command to create a new directory named \"test_directory\". We will now try to copy the \"_test_runner.py\" file to the directory we created just now. Do note that nothing happened to the original \"_test_runner.py\" file. It's still there in the current directory. A new copy of it got created inside the \"test_directory\". We can also use the cp command to copy the whole directory from one location to another. Let's try to understand this with an example. We again used the mkdir command to create a new directory called \"another_directory\". We then used the cp command along with an additional argument '-r' to copy the \"test_directory\". mv (move files and directories) The mv command can either be used to move files or directories from one location to another or it can be used to rename files or directories. Do note that moving files and copying them are very different. When you move the files or directories, the original copy is lost. General syntax of using mv command: mv <source_path> <destination_path> In this example, we will use the mv command to move the \"_test_runner.py\" file to \"test_directory\". In this case, this file already exists in \"test_directory\". The mv command will just replace it. Do note that the original file doesn't exist in the current directory after mv command ran successfully. We can also use the mv command to move a directory from one location to another. In this case, we do not need to use the '-r' flag that we did while using the cp command. Do note that the original directory will not exist if we use mv command. One of the important uses of the mv command is to rename files and directories. Let's see how we can use this command for renaming. We have first changed our location to \"test_directory\". We then use the mv command to rename the \"\"_test_runner.py\" file to \"test.py\".","title":"cp (copy files and directories)"},{"location":"linux_basics/command_line_basics/#commands-for-viewing-files","text":"There are three basic commands which are used frequently to view the files: cat head tail We will now try to understand what each command does and how to use these commands. You should also practice the given examples on the online bash shell. We will create a new file called \"numbers.txt\" and insert numbers from 1 to 100 in this file. Each number will be in a separate line. Do not worry about the above command now. It's an advanced command which is used to generate numbers. We have then used a redirection operator to push these numbers to the file. We will be discussing I/O redirection in the later sections.","title":"Commands for Viewing Files"},{"location":"linux_basics/command_line_basics/#cat","text":"The most simplest use of cat command is to print the contents of the file on your output screen. This command is very useful and can be used for many other purposes. We will study about other use cases later. You can try to run the above command and you will see numbers being printed from 1 to 100 on your screen. You will need to scroll up to view all the numbers.","title":"cat"},{"location":"linux_basics/command_line_basics/#head","text":"The head command displays the first 10 lines of the file by default. We can include additional arguments to display as many lines as we want from the top. In this example, we are only able to see the first 10 lines from the file when we use the head command. By default, head command will only display the first 10 lines. If we want to specify the number of lines we want to see from start, use the '-n' argument to provide the input.","title":"head"},{"location":"linux_basics/command_line_basics/#tail","text":"The tail command displays the last 10 lines of the file by default. We can include additional arguments to display as many lines as we want from the end of the file. By default, the tail command will only display the last 10 lines. If we want to specify the number of lines we want to see from the end, use '-n' argument to provide the input. In this example, we are only able to see the last 5 lines from the file when we use the tail command with explicit -n option.","title":"tail"},{"location":"linux_basics/command_line_basics/#echo-command-in-linux","text":"The echo command is one of the simplest commands that is used in the shell. This command is equivalent to what we have in other programming languages. The echo command prints the given input string on the screen.","title":"Echo Command in Linux"},{"location":"linux_basics/command_line_basics/#text-processing-commands","text":"In the previous section, we learned how to view the content of a file. In many cases, we will be interested in performing the below operations: Print only the lines which contain a particular word(s) Replace a particular word with another word in a file Sort the lines in a particular order There are three basic commands which are used frequently to process texts: grep sed sort We will now try to understand what each command does and how to use these commands. You should also practice the given examples on the online bash shell. We will create a new file called \"numbers.txt\" and insert numbers from 1 to 10 in this file. Each number will be in a separate line.","title":"Text Processing Commands"},{"location":"linux_basics/command_line_basics/#grep","text":"The grep command in its simplest form can be used to search particular words in a text file. It will display all the lines in a file that contains a particular input. The word we want to search is provided as an input to the grep command. General syntax of using grep command: grep <word_to_search> <file_name> In this example, we are trying to search for a string \"1\" in this file. The grep command outputs the lines where it found this string.","title":"grep"},{"location":"linux_basics/command_line_basics/#sed","text":"The sed command in its simplest form can be used to replace a text in a file. General syntax of using the sed command for replacement: sed 's/<text_to_replace>/<replacement_text>/' <file_name> Let's try to replace each occurrence of \"1\" in the file with \"3\" using sed command. The content of the file will not change in the above example. To do so, we have to use an extra argument '-i' so that the changes are reflected back in the file.","title":"sed"},{"location":"linux_basics/command_line_basics/#sort","text":"The sort command can be used to sort the input provided to it as an argument. By default, it will sort in increasing order. Let's first see the content of the file before trying to sort it. Now, we will try to sort the file using the sort command. The sort command sorts the content in lexicographical order. The content of the file will not change in the above example.","title":"sort"},{"location":"linux_basics/command_line_basics/#io-redirection","text":"Each open file gets assigned a file descriptor. A file descriptor is an unique identifier for open files in the system. There are always three default files open, stdin (the keyboard), stdout (the screen), and stderr (error messages output to the screen). These files can be redirected. Everything is a file in linux - https://unix.stackexchange.com/questions/225537/everything-is-a-file Till now, we have displayed all the output on the screen which is the standard output. We can use some special operators to redirect the output of the command to files or even to the input of other commands. I/O redirection is a very powerful feature. In the below example, we have used the '>' operator to redirect the output of ls command to output.txt file. In the below example, we have redirected the output from echo command to a file. We can also redirect the output of a command as an input to another command. This is possible with the help of pipes. In the below example, we have passed the output of cat command as an input to grep command using pipe(|) operator. In the below example, we have passed the output of sort command as an input to uniq command using pipe(|) operator. The uniq command only prints the unique numbers from the input. I/O redirection - https://tldp.org/LDP/abs/html/io-redirection.html","title":"I/O Redirection"},{"location":"linux_basics/conclusion/","text":"Conclusion With this we have covered the basics of linux operating systems along with basic commands which are used in linux. We have also covered the linux server administration commands. We hope that this course will make it easier for you to operate on the command line. Applications in SRE Role As a SRE, you will be required to perform some general tasks on these linux servers. You will also be using the command line when you are troubleshooting issues. Moving from one location to another in the filesystem will require the help of ls, pwd and cd commands You may need to search some specific information in the log files. Grep command would be very useful here. I/O redirection will become handy if you want to store the output in a file or pass it as an input to another command. Tail command is very useful to view the latest data in the log file. Different users will have different permissions depending on their roles. We will also not want everyone in the company to access our servers for security reasons. Users permissions can be restricted with chown, chmod and chgrp commands. SSH is one of the most frequently used commands for a SRE. Logging into servers and troubleshooting along with performing basic administration tasks will only be possible if we are able to login into the server. What if we want to run an apache server or nginx on a server ? We will first install it using the package manager. Package management commands become important here. Managing services on servers is another critical responsibility of a SRE. Systemd related commands can help in troubleshooting issues. If a service goes down, we can start it using systemctl start command. We can also stop a service in case it is not needed. Monitoring is another core responsibility of a SRE. Memory and CPU are two important system level metrics which should be monitored. Commands like top and free are quite helpful here. If a service is throwing an error, how do we find out the root cause of the error ? We will certainly need to check logs to find out the whole stack trace of the error. The log file will also tell us the number of times the error has occurred along with time when it started. Useful Courses and tutorials Edx basic linux commands course Edx Red Hat Enterprise Linux Course https://linuxcommand.org/lc3_learning_the_shell.php","title":"Conclusion"},{"location":"linux_basics/conclusion/#conclusion","text":"With this we have covered the basics of linux operating systems along with basic commands which are used in linux. We have also covered the linux server administration commands. We hope that this course will make it easier for you to operate on the command line.","title":"Conclusion"},{"location":"linux_basics/conclusion/#applications-in-sre-role","text":"As a SRE, you will be required to perform some general tasks on these linux servers. You will also be using the command line when you are troubleshooting issues. Moving from one location to another in the filesystem will require the help of ls, pwd and cd commands You may need to search some specific information in the log files. Grep command would be very useful here. I/O redirection will become handy if you want to store the output in a file or pass it as an input to another command. Tail command is very useful to view the latest data in the log file. Different users will have different permissions depending on their roles. We will also not want everyone in the company to access our servers for security reasons. Users permissions can be restricted with chown, chmod and chgrp commands. SSH is one of the most frequently used commands for a SRE. Logging into servers and troubleshooting along with performing basic administration tasks will only be possible if we are able to login into the server. What if we want to run an apache server or nginx on a server ? We will first install it using the package manager. Package management commands become important here. Managing services on servers is another critical responsibility of a SRE. Systemd related commands can help in troubleshooting issues. If a service goes down, we can start it using systemctl start command. We can also stop a service in case it is not needed. Monitoring is another core responsibility of a SRE. Memory and CPU are two important system level metrics which should be monitored. Commands like top and free are quite helpful here. If a service is throwing an error, how do we find out the root cause of the error ? We will certainly need to check logs to find out the whole stack trace of the error. The log file will also tell us the number of times the error has occurred along with time when it started.","title":"Applications in SRE Role"},{"location":"linux_basics/conclusion/#useful-courses-and-tutorials","text":"Edx basic linux commands course Edx Red Hat Enterprise Linux Course https://linuxcommand.org/lc3_learning_the_shell.php","title":"Useful Courses and tutorials"},{"location":"linux_basics/intro/","text":"Introduction Prerequisites Experience of working on any operating systems like Windows, Linux or Mac Basics of operating system What to expect from this course This course is divided into three parts. In the first part, we will cover the fundamentals of linux operating systems. We will talk about linux architecture, linux distributions and uses of linux operating systems. We will also talk about difference between GUI and CLI. In the second part, we will study about some of the basic commands that are used in linux. We will focus on commands used for navigating file system, commands used for manipulating files, commands used for viewing files, I/O redirection etc. In the third part, we will study about linux system administration. In this part, we will focus on day to day tasks performed by linux admins like managing users/groups, managing file permissions, monitoring system performance, log files etc. In the second and third part, we will be taking examples to understand the concepts. What is not covered under this course We are not covering advanced linux commands and bash scripting in this course. We will also not be covering linux internals. Course Contents The following topics has been covered in this course: Introduction to Linux What are Linux Operating Systems What are popular Linux distributions Uses of Linux Operating Systems Linux Architecture Graphical user interface (GUI) vs Command line interface (CLI) Command Line Basics Lab Environment Setup What is a Command File System Organization Navigating File System Manipulating Files Viewing Files Echo Command Text Processing Commands I/O Redirection Linux system administration Lab Environment Setup User/Groups management Becoming a Superuser File Permissions SSH Command Package Management Process Management Memory Management Daemons and Systemd Logs Conclusion Applications in SRE Role Useful Courses and tutorials What are Linux operating systems Most of us will be familiar with the windows operating system which is used in more than 75% of the personal computers. The windows operating systems are based on windows NT kernel. A kernel is the most important part of an operating system which performs important functions like process management, memory management, filesystem management etc. Linux operating systems are based on the Linux kernel. A linux based operating system will consist of linux kernel, GUI/CLI, system libraries and system utilities. The Linux kernel was independently developed and released by Linus Torvalds. The linux kernel is free and open-source - https://github.com/torvalds/linux History of Linux - https://en.wikipedia.org/wiki/History_of_Linux What are popular Linux distributions A linux distribution(distro) is an operating system that is based on the linux kernel and a package management system. A package management system consists of tools that helps in installing, upgrading, configuring and removing softwares on the operating system. Softwares are usually adopted to a distribution and are packaged in a distro specific format. These packages are available through a distro specific repository. Packages are installed and managed in the operating system by a package manager. List of popular Linux distributions: Fedora Ubuntu Debian Centos Red Hat Enterprise Linux Suse Arch Linux Packaging systems Distributions Package manager Debian style (.deb) Debian, Ubuntu APT Red Hat style (.rpm) Fedora, CentOS, Red Hat Enterprise Linux YUM Linux Architecture The Linux kernel is monolithic in nature. System calls are used to interact with the linux kernel space. Kernel code can only be executed in the kernel mode. Non-kernel code is executed in the user mode. Device drivers are used to communicate with the hardware devices. Uses of Linux Operating Systems Operating system based on linux kernel are widely used in: Personal computers Servers Mobile phones - Android is based on linux operating system Embedded devices - watches, televisions, traffic lights etc Satelites Network devices - routers, switches etc. Graphical user interface (GUI) vs Command line interface (CLI) A user interacts with a computer with the help of user interfaces. The user interface can be either GUI or CLI. Graphical user interface allows a user to interact with the computer using graphics such as icons and images. When a user clicks on an icon to open an application on a computer, he or she is actually using the GUI. It's easy to perform tasks using GUI. Command line interface allows a user to interact with the computer using commands. A user types the command in a terminal and the system helps in executing these commands. A new user with experience on GUI may find it difficult to interact with CLI as he/she needs to be aware of the commands to perform a particular operation. Shell vs Terminal Shell is a program that takes command or a group of commands from the users and gives them to the operating system for processing. Shell is an example of command line interface. Bash is one of the most popular shell programs available on linux servers. Other popular shell programs are zsh, ksh and tcsh. Terminal is a program that opens a window and lets you interact with the shell. Some popular examples of terminals are gnome-terminal, xterm, konsole etc. Linux users do use the terms shell, terminal, prompt, console etc. interchangeably. In simple terms, these all refer to a way of taking commands from the user.","title":"Introduction"},{"location":"linux_basics/intro/#introduction","text":"","title":"Introduction"},{"location":"linux_basics/intro/#prerequisites","text":"Experience of working on any operating systems like Windows, Linux or Mac Basics of operating system","title":"Prerequisites"},{"location":"linux_basics/intro/#what-to-expect-from-this-course","text":"This course is divided into three parts. In the first part, we will cover the fundamentals of linux operating systems. We will talk about linux architecture, linux distributions and uses of linux operating systems. We will also talk about difference between GUI and CLI. In the second part, we will study about some of the basic commands that are used in linux. We will focus on commands used for navigating file system, commands used for manipulating files, commands used for viewing files, I/O redirection etc. In the third part, we will study about linux system administration. In this part, we will focus on day to day tasks performed by linux admins like managing users/groups, managing file permissions, monitoring system performance, log files etc. In the second and third part, we will be taking examples to understand the concepts.","title":"What to expect from this course"},{"location":"linux_basics/intro/#what-is-not-covered-under-this-course","text":"We are not covering advanced linux commands and bash scripting in this course. We will also not be covering linux internals.","title":"What is not covered under this course"},{"location":"linux_basics/intro/#course-contents","text":"The following topics has been covered in this course: Introduction to Linux What are Linux Operating Systems What are popular Linux distributions Uses of Linux Operating Systems Linux Architecture Graphical user interface (GUI) vs Command line interface (CLI) Command Line Basics Lab Environment Setup What is a Command File System Organization Navigating File System Manipulating Files Viewing Files Echo Command Text Processing Commands I/O Redirection Linux system administration Lab Environment Setup User/Groups management Becoming a Superuser File Permissions SSH Command Package Management Process Management Memory Management Daemons and Systemd Logs Conclusion Applications in SRE Role Useful Courses and tutorials","title":"Course Contents"},{"location":"linux_basics/intro/#what-are-linux-operating-systems","text":"Most of us will be familiar with the windows operating system which is used in more than 75% of the personal computers. The windows operating systems are based on windows NT kernel. A kernel is the most important part of an operating system which performs important functions like process management, memory management, filesystem management etc. Linux operating systems are based on the Linux kernel. A linux based operating system will consist of linux kernel, GUI/CLI, system libraries and system utilities. The Linux kernel was independently developed and released by Linus Torvalds. The linux kernel is free and open-source - https://github.com/torvalds/linux History of Linux - https://en.wikipedia.org/wiki/History_of_Linux","title":"What are Linux operating systems"},{"location":"linux_basics/intro/#what-are-popular-linux-distributions","text":"A linux distribution(distro) is an operating system that is based on the linux kernel and a package management system. A package management system consists of tools that helps in installing, upgrading, configuring and removing softwares on the operating system. Softwares are usually adopted to a distribution and are packaged in a distro specific format. These packages are available through a distro specific repository. Packages are installed and managed in the operating system by a package manager. List of popular Linux distributions: Fedora Ubuntu Debian Centos Red Hat Enterprise Linux Suse Arch Linux Packaging systems Distributions Package manager Debian style (.deb) Debian, Ubuntu APT Red Hat style (.rpm) Fedora, CentOS, Red Hat Enterprise Linux YUM","title":"What are popular Linux distributions"},{"location":"linux_basics/intro/#linux-architecture","text":"The Linux kernel is monolithic in nature. System calls are used to interact with the linux kernel space. Kernel code can only be executed in the kernel mode. Non-kernel code is executed in the user mode. Device drivers are used to communicate with the hardware devices.","title":"Linux Architecture"},{"location":"linux_basics/intro/#uses-of-linux-operating-systems","text":"Operating system based on linux kernel are widely used in: Personal computers Servers Mobile phones - Android is based on linux operating system Embedded devices - watches, televisions, traffic lights etc Satelites Network devices - routers, switches etc.","title":"Uses of Linux Operating Systems"},{"location":"linux_basics/intro/#graphical-user-interface-gui-vs-command-line-interface-cli","text":"A user interacts with a computer with the help of user interfaces. The user interface can be either GUI or CLI. Graphical user interface allows a user to interact with the computer using graphics such as icons and images. When a user clicks on an icon to open an application on a computer, he or she is actually using the GUI. It's easy to perform tasks using GUI. Command line interface allows a user to interact with the computer using commands. A user types the command in a terminal and the system helps in executing these commands. A new user with experience on GUI may find it difficult to interact with CLI as he/she needs to be aware of the commands to perform a particular operation.","title":"Graphical user interface (GUI) vs Command line interface (CLI)"},{"location":"linux_basics/intro/#shell-vs-terminal","text":"Shell is a program that takes command or a group of commands from the users and gives them to the operating system for processing. Shell is an example of command line interface. Bash is one of the most popular shell programs available on linux servers. Other popular shell programs are zsh, ksh and tcsh. Terminal is a program that opens a window and lets you interact with the shell. Some popular examples of terminals are gnome-terminal, xterm, konsole etc. Linux users do use the terms shell, terminal, prompt, console etc. interchangeably. In simple terms, these all refer to a way of taking commands from the user.","title":"Shell vs Terminal"},{"location":"linux_basics/linux_server_administration/","text":"Linux Server Administration In this course will try to cover some of the common tasks that a linux server administrator performs. We will first try to understand what a particular command does and then try to understand the commands using examples. Do keep in mind that it's very important to practice the linux commands on your own. Lab Environment Setup Install docker on your system - https://docs.docker.com/engine/install/ We will be running all the commands on Red Hat Enterprise Linux (RHEL) 8 system. We will run most of the commands used in this module in the above docker container. Multi-User Operating Systems An operating system is considered as multi-user if it allows multiple people/users to use a computer and not affect each other files and preferences. Linux based operating systems are multi-user in nature as it allows multiple users to access the system at the same time. A typical computer will only have one keyboard and monitor but multiple users can log in via ssh if the computer is connected to the network. We will cover more about ssh later. As a server administrator, we are mostly concerned with the linux servers which are physically present at a very large distance from us. We can connect to these servers with the help of remote login methods like ssh. Since linux supports multiple users, we need to have a method which can protect the users from each other. One user should not be able to access and modify files of other users User/Group Management Each user in linux has an associated user ID called UID attached to him Each user also has a home directory and a login shell associated with him/her A group is a collection of one or more users. A group makes it easier to share permissions among a group of users. Each group has a group ID called GID associated with it. id command id command can be used to find the uid and gid associated with an user. It also lists down the groups to which the user belongs to. The uid and gid associated with the root user is 0. A good way to find out the current user in linux is to use the whoami command. \"root\" user or superuser is the most privileged user with unrestricted access to all the resources on the system. It has UID 0 Important files associated with users/groups /etc/passwd Stores the user name, the uid, the gid, the home directory, the login shell etc /etc/shadow Stores the password associated with the users /etc/group Stores information about different groups on the system If you want to understand each filed discussed in the above outputs, you can go through below links: https://tldp.org/LDP/lame/LAME/linux-admin-made-easy/shadow-file-formats.html https://tldp.org/HOWTO/User-Authentication-HOWTO/x71.html Important commands for managing users Some of the commands which are used frequently to manage users/groups on linux are following: useradd - Creates a new user passwd - Adds or modifies passwords for a user usermod - Modifies attributes of an user userdel - Deletes an user useradd The useradd command adds a new user in linux. We will create a new user 'shivam'. We will also verify that the user has been created by tailing the /etc/passwd file. The uid and gid are 1000 for the newly created user. The home directory assigned to the user is /home/shivam and the login shell assigned is /bin/bash. Do note that the user home directory and login shell can be modified later on. If we do not specify any value for attributes like home directory or login shell, default values will be assigned to the user. We can also override these default values when creating a new user. passwd The passwd command is used to create or modify passwords for a user. In the above examples, we have not assigned any password for users 'shivam' or 'amit' while creating them. \\\"!!\\\" in an account entry in shadow means the account of an user has been created, but not yet given a password. Let's now try to create a password for user \"shivam\". Do remember the password as we will be later using examples where it will be useful. Also, let's change the password for the root user now. When we switch from a normal user to root user, it will request you for a password. Also, when you login using root user, the password will be asked. usermod The usermod command is used to modify the attributes of an user like the home directory or the shell. Let's try to modify the login shell of user \"amit\" to \"/bin/bash\". In a similar way, you can also modify many other attributes for a user. Try 'usermod -h' for a list of attributes you can modify. userdel The userdel command is used to remove a user on linux. Once we remove a user, all the information related to that user will be removed. Let's try to delete the user \"amit\". After deleting the user, you will not find the entry for that user in \"/etc/passwd\" or \"/etc/shadow\" file. Important commands for managing groups Commands for managing groups are quite similar to the commands used for managing users. Each command is not explained in detail here as they are quite similar. You can try running these commands on your system. groupadd \\<group_name> Creates a new group groupmod \\<group_name> Modifies attributes of a group groupdel \\<group_name> Deletes a group gpasswd \\<group_name> Modifies password for group We will now try to add user \"shivam\" to the group we have created above. Becoming a Superuser Before running the below commands, do make sure that you have set up a password for user \"shivam\" and user \"root\" using the passwd command described in the above section. The su command can be used to switch users in linux. Let's now try to switch to user \"shivam\". Let's now try to open the \"/etc/shadow\" file. The operating system didn't allow the user \"shivam\" to read the content of the \"/etc/shadow\" file. This is an important file in linux which stores the passwords of users. This file can only be accessed by root or users who have the superuser privileges. The sudo command allows a user to run commands with the security privileges of the root user. Do remember that the root user has all the privileges on a system. We can also use su command to switch to the root user and open the above file but doing that will require the password of the root user. An alternative way which is preferred on most modern operating systems is to use sudo command for becoming a superuser. Using this way, a user has to enter his/her password and they need to be a part of the sudo group. How to provide superpriveleges to other users ? Let's first switch to the root user using su command. Do note that using the below command will need you to enter the password for the root user. In case, you forgot to set a password for the root user, type \"exit\" and you will be back as the root user. Now, set up a password using the passwd command. The file /etc/sudoers holds the names of users permitted to invoke sudo . In redhat operating systems, this file is not present by default. We will need to install sudo. We will discuss the yum command in detail in later sections. Try to open the \"/etc/sudoers\" file on the system. The file has a lot of information. This file stores the rules that users must follow when running the sudo command. For example, root is allowed to run any commands from anywhere. One easy way of providing root access to users is to add them to a group which has permissions to run all the commands. \"wheel\" is a group in redhat linux with such privileges. Let's add the user \"shivam\" to this group so that it also has sudo privileges. Let's now switch back to user \"shivam\" and try to access the \"/etc/shadow\" file. We need to use sudo before running the command since it can only be accessed with the sudo privileges. We have already given sudo privileges to user \u201cshivam\u201d by adding him to the group \u201cwheel\u201d. File Permissions On a linux operating system, each file and directory is assigned access permissions for the owner of the file, the members of a group of related users and everybody else. This is to make sure that one user is not allowed to access the files and resources of another user. To see the permissions of a file, we can use the ls command. Let's look at the permissions of /etc/passwd file. Let's go over some of the important fields in the output that are related to file permissions. Chmod command The chmod command is used to modify files and directories permissions in linux. The chmod command accepts permissions in as a numerical argument. We can think of permission as a series of bits with 1 representing True or allowed and 0 representing False or not allowed. Permission rwx Binary Decimal Read, write and execute rwx 111 7 Read and write rw- 110 6 Read and execute r-x 101 5 Read only r-- 100 4 Write and execute -wx 011 3 Write only -w- 010 2 Execute only --x 001 1 None --- 000 0 We will now create a new file and check the permission of the file. The group owner doesn't have the permission to write to this file. Let's give the group owner or root the permission to write to it using chmod command. Chmod command can be also used to change the permissions of a directory in the similar way. Chown command The chown command is used to change the owner of files or directories in linux. Command syntax: chown \\<new_owner> \\<file_name> In case, we do not have sudo privileges, we need to use sudo command . Let's switch to user 'shivam' and try changing the owner. We have also changed the owner of the file to root before running the below command. Chown command can also be used to change the owner of a directory in the similar way. Chgrp command The chgrp command can be used to change the group ownership of files or directories in linux. The syntax is very similar to that of chown command. Chgrp command can also be used to change the owner of a directory in the similar way. SSH Command The ssh command is used for logging into the remote systems, transfer files between systems and for executing commands on a remote machine. SSH stands for secure shell and is used to provide an encrypted secured connection between two hosts over an insecure network like the internet. Reference: https://www.ssh.com/ssh/command/ We will now discuss passwordless authentication which is secure and most commonly used for ssh authentication. Passwordless Authentication Using SSH Using this method, we can ssh into hosts without entering the password. This method is also useful when we want some scripts to perform ssh-related tasks. Passwordless authentication requires the use of a public and private key pair. As the name implies, the public key can be shared with anyone but the private key should be kept private. Lets not get into the details of how this authentication works. You can read more about it here Steps for setting up a passwordless authentication with a remote host: Generating public-private key pair If we already have a key pair stored in \\~/.ssh directory, we will not need to generate keys again. Install openssh package which contains all the commands related to ssh. Generate a key pair using the ssh-keygen command. One can choose the default values for all prompts. After running the ssh-keygen command successfully, we should see two keys present in the \\~/.ssh directory. Id_rsa is the private key and id_rsa.pub is the public key. Do note that the private key can only be read and modified by you. Transferring the public key to the remote host There are multiple ways to transfer the public key to the remote server. We will look at one of the most common ways of doing it using the ssh-id-copy command. Install the openssh-clients package to use ssh-id-copy command. Use the ssh-id-copy command to copy your public key to the remote host. Now, ssh into the remote host using the password authentication. Our public key should be there in \\~/.ssh/authorized_keys now. \\~/.ssh/authorized_key contains a list of public keys. The users associated with these public keys have the ssh access into the remote host. How to run commands on a remote host ? General syntax: ssh \\<user>@\\<hostname/hostip> \\<command> How to transfer files from one host to another host ? General syntax: scp \\<source> \\<destination> Package Management Package management is the process of installing and managing software on the system. We can install the packages which we require from the linux package distributor. Different distributors use different packaging systems. Packaging systems Distributions Debian style (.deb) Debian, Ubuntu Red Hat style (.rpm) Fedora, CentOS, Red Hat Enterprise Linux Popular Packaging Systems in Linux Command Description yum install \\<package_name> Installs a package on your system yum update \\<package_name> Updates a package to it's latest available version yum remove \\<package_name> Removes a package from your system yum search \\<keyword> Searches for a particular keyword DNF is the successor to YUM which is now used in Fedora for installing and managing packages. DNF may replace YUM in the future on all RPM based linux distributions. We did find an exact match for the keyword httpd when we searched using yum search command. Let's now install the httpd package. After httpd is installed, we will use the yum remove command to remove httpd package. Process Management In this section, we will study about some useful commands that can be used to monitor the processes on linux systems. ps (process status) The ps command is used to know the information of a process or list of processes. If you get an error \"ps command not found\" while running ps command, do install procps package. ps without any arguments is not very useful. Let's try to list all the processes on the system by using the below command. Reference: https://unix.stackexchange.com/questions/106847/what-does-aux-mean-in-ps-aux We can use an additional argument with ps command to list the information about the process with a specific process ID. We can use grep in combination with ps command to list only specific processes. top The top command is used to show information about linux processes running on the system in real time. It also shows a summary of the system information. For each process, top lists down the process ID, owner, priority, state, cpu utilization, memory utilization and much more information. It also lists down the memory utilization and cpu utilization of the system as a whole along with system uptime and cpu load average. Memory Management In this section, we will study about some useful commands that can be used to view information about the system memory. free The free command is used to display the memory usage of the system. The command displays the total free and used space available in the RAM along with space occupied by the caches/buffers. free command by default shows the memory usage in kilobytes. We can use an additional argument to get the data in human-readable format. vmstat The vmstat command can be used to display the memory usage along with additional information about io and cpu usage. Checking Disk Space In this section, we will study about some useful commands that can be used to view disk space on linux. df (disk free) The df command is used to display the free and available space for each mounted file system. du (disk usage) The du command is used to display disk usage of files and directories on the system. The below command can be used to display the top 5 largest directories in the root directory. Daemons A computer program that runs as a background process is called a daemon. Traditionally, the name of daemon processes ended with d - sshd, httpd etc. We cannot interact with a daemon process as they run in the background. Services and daemons are used interchangeably most of the time. Systemd Systemd is a system and service manager for Linux operating systems. Systemd units are the building blocks of systemd. These units are represented by unit configuration files. The below examples shows the unit configuration files available at /usr/lib/systemd/system which are distributed by installed RPM packages. We are more interested in the configuration file that ends with service as these are service units. Managing System Services Service units end with .service file extension. Systemctl command can be used to start/stop/restart the services managed by systemd. Command Description systemctl start name.service Starts a service systemctl stop name.service Stops a service systemctl restart name.service Restarts a service systemctl status name.service Check the status of a service systemctl reload name.service Reload the configuration of a service Logs In this section, we will talk about some important files and directories which can be very useful for viewing system logs and applications logs in linux. These logs can be very useful when you are troubleshooting on the system.","title":"Server Administration"},{"location":"linux_basics/linux_server_administration/#linux-server-administration","text":"In this course will try to cover some of the common tasks that a linux server administrator performs. We will first try to understand what a particular command does and then try to understand the commands using examples. Do keep in mind that it's very important to practice the linux commands on your own.","title":"Linux Server Administration"},{"location":"linux_basics/linux_server_administration/#lab-environment-setup","text":"Install docker on your system - https://docs.docker.com/engine/install/ We will be running all the commands on Red Hat Enterprise Linux (RHEL) 8 system. We will run most of the commands used in this module in the above docker container.","title":"Lab Environment Setup"},{"location":"linux_basics/linux_server_administration/#multi-user-operating-systems","text":"An operating system is considered as multi-user if it allows multiple people/users to use a computer and not affect each other files and preferences. Linux based operating systems are multi-user in nature as it allows multiple users to access the system at the same time. A typical computer will only have one keyboard and monitor but multiple users can log in via ssh if the computer is connected to the network. We will cover more about ssh later. As a server administrator, we are mostly concerned with the linux servers which are physically present at a very large distance from us. We can connect to these servers with the help of remote login methods like ssh. Since linux supports multiple users, we need to have a method which can protect the users from each other. One user should not be able to access and modify files of other users","title":"Multi-User Operating Systems"},{"location":"linux_basics/linux_server_administration/#usergroup-management","text":"Each user in linux has an associated user ID called UID attached to him Each user also has a home directory and a login shell associated with him/her A group is a collection of one or more users. A group makes it easier to share permissions among a group of users. Each group has a group ID called GID associated with it.","title":"User/Group Management"},{"location":"linux_basics/linux_server_administration/#id-command","text":"id command can be used to find the uid and gid associated with an user. It also lists down the groups to which the user belongs to. The uid and gid associated with the root user is 0. A good way to find out the current user in linux is to use the whoami command. \"root\" user or superuser is the most privileged user with unrestricted access to all the resources on the system. It has UID 0","title":"id command"},{"location":"linux_basics/linux_server_administration/#important-files-associated-with-usersgroups","text":"/etc/passwd Stores the user name, the uid, the gid, the home directory, the login shell etc /etc/shadow Stores the password associated with the users /etc/group Stores information about different groups on the system If you want to understand each filed discussed in the above outputs, you can go through below links: https://tldp.org/LDP/lame/LAME/linux-admin-made-easy/shadow-file-formats.html https://tldp.org/HOWTO/User-Authentication-HOWTO/x71.html","title":"Important files associated with users/groups"},{"location":"linux_basics/linux_server_administration/#important-commands-for-managing-users","text":"Some of the commands which are used frequently to manage users/groups on linux are following: useradd - Creates a new user passwd - Adds or modifies passwords for a user usermod - Modifies attributes of an user userdel - Deletes an user","title":"Important commands for managing users"},{"location":"linux_basics/linux_server_administration/#useradd","text":"The useradd command adds a new user in linux. We will create a new user 'shivam'. We will also verify that the user has been created by tailing the /etc/passwd file. The uid and gid are 1000 for the newly created user. The home directory assigned to the user is /home/shivam and the login shell assigned is /bin/bash. Do note that the user home directory and login shell can be modified later on. If we do not specify any value for attributes like home directory or login shell, default values will be assigned to the user. We can also override these default values when creating a new user.","title":"useradd"},{"location":"linux_basics/linux_server_administration/#passwd","text":"The passwd command is used to create or modify passwords for a user. In the above examples, we have not assigned any password for users 'shivam' or 'amit' while creating them. \\\"!!\\\" in an account entry in shadow means the account of an user has been created, but not yet given a password. Let's now try to create a password for user \"shivam\". Do remember the password as we will be later using examples where it will be useful. Also, let's change the password for the root user now. When we switch from a normal user to root user, it will request you for a password. Also, when you login using root user, the password will be asked.","title":"passwd"},{"location":"linux_basics/linux_server_administration/#usermod","text":"The usermod command is used to modify the attributes of an user like the home directory or the shell. Let's try to modify the login shell of user \"amit\" to \"/bin/bash\". In a similar way, you can also modify many other attributes for a user. Try 'usermod -h' for a list of attributes you can modify.","title":"usermod"},{"location":"linux_basics/linux_server_administration/#userdel","text":"The userdel command is used to remove a user on linux. Once we remove a user, all the information related to that user will be removed. Let's try to delete the user \"amit\". After deleting the user, you will not find the entry for that user in \"/etc/passwd\" or \"/etc/shadow\" file.","title":"userdel"},{"location":"linux_basics/linux_server_administration/#important-commands-for-managing-groups","text":"Commands for managing groups are quite similar to the commands used for managing users. Each command is not explained in detail here as they are quite similar. You can try running these commands on your system. groupadd \\<group_name> Creates a new group groupmod \\<group_name> Modifies attributes of a group groupdel \\<group_name> Deletes a group gpasswd \\<group_name> Modifies password for group We will now try to add user \"shivam\" to the group we have created above.","title":"Important commands for managing groups"},{"location":"linux_basics/linux_server_administration/#becoming-a-superuser","text":"Before running the below commands, do make sure that you have set up a password for user \"shivam\" and user \"root\" using the passwd command described in the above section. The su command can be used to switch users in linux. Let's now try to switch to user \"shivam\". Let's now try to open the \"/etc/shadow\" file. The operating system didn't allow the user \"shivam\" to read the content of the \"/etc/shadow\" file. This is an important file in linux which stores the passwords of users. This file can only be accessed by root or users who have the superuser privileges. The sudo command allows a user to run commands with the security privileges of the root user. Do remember that the root user has all the privileges on a system. We can also use su command to switch to the root user and open the above file but doing that will require the password of the root user. An alternative way which is preferred on most modern operating systems is to use sudo command for becoming a superuser. Using this way, a user has to enter his/her password and they need to be a part of the sudo group. How to provide superpriveleges to other users ? Let's first switch to the root user using su command. Do note that using the below command will need you to enter the password for the root user. In case, you forgot to set a password for the root user, type \"exit\" and you will be back as the root user. Now, set up a password using the passwd command. The file /etc/sudoers holds the names of users permitted to invoke sudo . In redhat operating systems, this file is not present by default. We will need to install sudo. We will discuss the yum command in detail in later sections. Try to open the \"/etc/sudoers\" file on the system. The file has a lot of information. This file stores the rules that users must follow when running the sudo command. For example, root is allowed to run any commands from anywhere. One easy way of providing root access to users is to add them to a group which has permissions to run all the commands. \"wheel\" is a group in redhat linux with such privileges. Let's add the user \"shivam\" to this group so that it also has sudo privileges. Let's now switch back to user \"shivam\" and try to access the \"/etc/shadow\" file. We need to use sudo before running the command since it can only be accessed with the sudo privileges. We have already given sudo privileges to user \u201cshivam\u201d by adding him to the group \u201cwheel\u201d.","title":"Becoming a Superuser"},{"location":"linux_basics/linux_server_administration/#file-permissions","text":"On a linux operating system, each file and directory is assigned access permissions for the owner of the file, the members of a group of related users and everybody else. This is to make sure that one user is not allowed to access the files and resources of another user. To see the permissions of a file, we can use the ls command. Let's look at the permissions of /etc/passwd file. Let's go over some of the important fields in the output that are related to file permissions.","title":"File Permissions"},{"location":"linux_basics/linux_server_administration/#chmod-command","text":"The chmod command is used to modify files and directories permissions in linux. The chmod command accepts permissions in as a numerical argument. We can think of permission as a series of bits with 1 representing True or allowed and 0 representing False or not allowed. Permission rwx Binary Decimal Read, write and execute rwx 111 7 Read and write rw- 110 6 Read and execute r-x 101 5 Read only r-- 100 4 Write and execute -wx 011 3 Write only -w- 010 2 Execute only --x 001 1 None --- 000 0 We will now create a new file and check the permission of the file. The group owner doesn't have the permission to write to this file. Let's give the group owner or root the permission to write to it using chmod command. Chmod command can be also used to change the permissions of a directory in the similar way.","title":"Chmod command"},{"location":"linux_basics/linux_server_administration/#chown-command","text":"The chown command is used to change the owner of files or directories in linux. Command syntax: chown \\<new_owner> \\<file_name> In case, we do not have sudo privileges, we need to use sudo command . Let's switch to user 'shivam' and try changing the owner. We have also changed the owner of the file to root before running the below command. Chown command can also be used to change the owner of a directory in the similar way.","title":"Chown command"},{"location":"linux_basics/linux_server_administration/#chgrp-command","text":"The chgrp command can be used to change the group ownership of files or directories in linux. The syntax is very similar to that of chown command. Chgrp command can also be used to change the owner of a directory in the similar way.","title":"Chgrp command"},{"location":"linux_basics/linux_server_administration/#ssh-command","text":"The ssh command is used for logging into the remote systems, transfer files between systems and for executing commands on a remote machine. SSH stands for secure shell and is used to provide an encrypted secured connection between two hosts over an insecure network like the internet. Reference: https://www.ssh.com/ssh/command/ We will now discuss passwordless authentication which is secure and most commonly used for ssh authentication.","title":"SSH Command"},{"location":"linux_basics/linux_server_administration/#passwordless-authentication-using-ssh","text":"Using this method, we can ssh into hosts without entering the password. This method is also useful when we want some scripts to perform ssh-related tasks. Passwordless authentication requires the use of a public and private key pair. As the name implies, the public key can be shared with anyone but the private key should be kept private. Lets not get into the details of how this authentication works. You can read more about it here Steps for setting up a passwordless authentication with a remote host: Generating public-private key pair If we already have a key pair stored in \\~/.ssh directory, we will not need to generate keys again. Install openssh package which contains all the commands related to ssh. Generate a key pair using the ssh-keygen command. One can choose the default values for all prompts. After running the ssh-keygen command successfully, we should see two keys present in the \\~/.ssh directory. Id_rsa is the private key and id_rsa.pub is the public key. Do note that the private key can only be read and modified by you. Transferring the public key to the remote host There are multiple ways to transfer the public key to the remote server. We will look at one of the most common ways of doing it using the ssh-id-copy command. Install the openssh-clients package to use ssh-id-copy command. Use the ssh-id-copy command to copy your public key to the remote host. Now, ssh into the remote host using the password authentication. Our public key should be there in \\~/.ssh/authorized_keys now. \\~/.ssh/authorized_key contains a list of public keys. The users associated with these public keys have the ssh access into the remote host.","title":"Passwordless Authentication Using SSH"},{"location":"linux_basics/linux_server_administration/#how-to-run-commands-on-a-remote-host","text":"General syntax: ssh \\<user>@\\<hostname/hostip> \\<command>","title":"How to run commands on a remote host ?"},{"location":"linux_basics/linux_server_administration/#how-to-transfer-files-from-one-host-to-another-host","text":"General syntax: scp \\<source> \\<destination>","title":"How to transfer files from one host to another host ?"},{"location":"linux_basics/linux_server_administration/#package-management","text":"Package management is the process of installing and managing software on the system. We can install the packages which we require from the linux package distributor. Different distributors use different packaging systems. Packaging systems Distributions Debian style (.deb) Debian, Ubuntu Red Hat style (.rpm) Fedora, CentOS, Red Hat Enterprise Linux Popular Packaging Systems in Linux Command Description yum install \\<package_name> Installs a package on your system yum update \\<package_name> Updates a package to it's latest available version yum remove \\<package_name> Removes a package from your system yum search \\<keyword> Searches for a particular keyword DNF is the successor to YUM which is now used in Fedora for installing and managing packages. DNF may replace YUM in the future on all RPM based linux distributions. We did find an exact match for the keyword httpd when we searched using yum search command. Let's now install the httpd package. After httpd is installed, we will use the yum remove command to remove httpd package.","title":"Package Management"},{"location":"linux_basics/linux_server_administration/#process-management","text":"In this section, we will study about some useful commands that can be used to monitor the processes on linux systems.","title":"Process Management"},{"location":"linux_basics/linux_server_administration/#ps-process-status","text":"The ps command is used to know the information of a process or list of processes. If you get an error \"ps command not found\" while running ps command, do install procps package. ps without any arguments is not very useful. Let's try to list all the processes on the system by using the below command. Reference: https://unix.stackexchange.com/questions/106847/what-does-aux-mean-in-ps-aux We can use an additional argument with ps command to list the information about the process with a specific process ID. We can use grep in combination with ps command to list only specific processes.","title":"ps (process status)"},{"location":"linux_basics/linux_server_administration/#top","text":"The top command is used to show information about linux processes running on the system in real time. It also shows a summary of the system information. For each process, top lists down the process ID, owner, priority, state, cpu utilization, memory utilization and much more information. It also lists down the memory utilization and cpu utilization of the system as a whole along with system uptime and cpu load average.","title":"top"},{"location":"linux_basics/linux_server_administration/#memory-management","text":"In this section, we will study about some useful commands that can be used to view information about the system memory.","title":"Memory Management"},{"location":"linux_basics/linux_server_administration/#free","text":"The free command is used to display the memory usage of the system. The command displays the total free and used space available in the RAM along with space occupied by the caches/buffers. free command by default shows the memory usage in kilobytes. We can use an additional argument to get the data in human-readable format.","title":"free"},{"location":"linux_basics/linux_server_administration/#vmstat","text":"The vmstat command can be used to display the memory usage along with additional information about io and cpu usage.","title":"vmstat"},{"location":"linux_basics/linux_server_administration/#checking-disk-space","text":"In this section, we will study about some useful commands that can be used to view disk space on linux.","title":"Checking Disk Space"},{"location":"linux_basics/linux_server_administration/#df-disk-free","text":"The df command is used to display the free and available space for each mounted file system.","title":"df (disk free)"},{"location":"linux_basics/linux_server_administration/#du-disk-usage","text":"The du command is used to display disk usage of files and directories on the system. The below command can be used to display the top 5 largest directories in the root directory.","title":"du (disk usage)"},{"location":"linux_basics/linux_server_administration/#daemons","text":"A computer program that runs as a background process is called a daemon. Traditionally, the name of daemon processes ended with d - sshd, httpd etc. We cannot interact with a daemon process as they run in the background. Services and daemons are used interchangeably most of the time.","title":"Daemons"},{"location":"linux_basics/linux_server_administration/#systemd","text":"Systemd is a system and service manager for Linux operating systems. Systemd units are the building blocks of systemd. These units are represented by unit configuration files. The below examples shows the unit configuration files available at /usr/lib/systemd/system which are distributed by installed RPM packages. We are more interested in the configuration file that ends with service as these are service units.","title":"Systemd"},{"location":"linux_basics/linux_server_administration/#managing-system-services","text":"Service units end with .service file extension. Systemctl command can be used to start/stop/restart the services managed by systemd. Command Description systemctl start name.service Starts a service systemctl stop name.service Stops a service systemctl restart name.service Restarts a service systemctl status name.service Check the status of a service systemctl reload name.service Reload the configuration of a service","title":"Managing System Services"},{"location":"linux_basics/linux_server_administration/#logs","text":"In this section, we will talk about some important files and directories which can be very useful for viewing system logs and applications logs in linux. These logs can be very useful when you are troubleshooting on the system.","title":"Logs"},{"location":"linux_networking/conclusion/","text":"Conclusion With this we have traversed through the TCP/IP stack completely. We hope there will be a different perspective when one opens any website in the browser post the course. During the course we have also dissected what are common tasks in this pipeline which falls under the ambit of SRE. Post Training Exercises Setup own DNS resolver in the dev environment which acts as an authoritative DNS server for example.com and forwarder for other domains. Update resolv.conf to use the new DNS resolver running in localhost Set up a site dummy.example.com in localhost and run a webserver with a self signed certificate. Update the trusted CAs or pass self signed CA\u2019s public key as a parameter so that curl https://dummy.example.com -v works properly without self signed cert warning Update the routing table to use another host(container/VM) in the same network as a gateway for 8.8.8.8/32 and run ping 8.8.8.8. Do the packet capture on the new gateway to see L3 hop is working as expected(might need to disable icmp_redirect)","title":"Conclusion"},{"location":"linux_networking/conclusion/#conclusion","text":"With this we have traversed through the TCP/IP stack completely. We hope there will be a different perspective when one opens any website in the browser post the course. During the course we have also dissected what are common tasks in this pipeline which falls under the ambit of SRE.","title":"Conclusion"},{"location":"linux_networking/conclusion/#post-training-exercises","text":"Setup own DNS resolver in the dev environment which acts as an authoritative DNS server for example.com and forwarder for other domains. Update resolv.conf to use the new DNS resolver running in localhost Set up a site dummy.example.com in localhost and run a webserver with a self signed certificate. Update the trusted CAs or pass self signed CA\u2019s public key as a parameter so that curl https://dummy.example.com -v works properly without self signed cert warning Update the routing table to use another host(container/VM) in the same network as a gateway for 8.8.8.8/32 and run ping 8.8.8.8. Do the packet capture on the new gateway to see L3 hop is working as expected(might need to disable icmp_redirect)","title":"Post Training Exercises"},{"location":"linux_networking/dns/","text":"DNS Domain Names are the simple human-readable names for websites. The Internet understands only IP addresses, but since memorizing incoherent numbers is not practical, domain names are used instead. These domain names are translated into IP addresses by the DNS infrastructure. When somebody tries to open www.linkedin.com in the browser, the browser tries to convert www.linkedin.com to an IP Address. This process is called DNS resolution. A simple pseudocode depicting this process looks this ip, err = getIPAddress(domainName) if err: print(\u201cunknown Host Exception while trying to resolve:%s\u201d.format(domainName)) Now let\u2019s try to understand what happens inside the getIPAddress function. The browser would have a DNS cache of its own where it checks if there is a mapping for the domainName to an IP Address already available, in which case the browser uses that IP address. If no such mapping exists, the browser calls gethostbyname syscall to ask the operating system to find the IP address for the given domainName def getIPAddress(domainName): resp, fail = lookupCache(domainName) If not fail: return resp else: resp, err = gethostbyname(domainName) if err: return null, err else: return resp Now lets understand what operating system kernel does when the gethostbyname function is called. The Linux operating system looks at the file /etc/nsswitch.conf file which usually has a line hosts: files dns This line means the OS has to look up first in file (/etc/hosts) and then use DNS protocol to do the resolution if there is no match in /etc/hosts. The file /etc/hosts is of format IPAddress FQDN [FQDN].* 127.0.0.1 localhost.localdomain localhost ::1 localhost.localdomain localhost If a match exists for a domain in this file then that IP address is returned by the OS. Lets add a line to this file 127.0.0.1 test.linkedin.com And then do ping test.linkedin.com ping test.linkedin.com -n PING test.linkedin.com (127.0.0.1) 56(84) bytes of data. 64 bytes from 127.0.0.1: icmp_seq=1 ttl=64 time=0.047 ms 64 bytes from 127.0.0.1: icmp_seq=2 ttl=64 time=0.036 ms 64 bytes from 127.0.0.1: icmp_seq=3 ttl=64 time=0.037 ms As mentioned earlier, if no match exists in /etc/hosts, the OS tries to do a DNS resolution using the DNS protocol. The linux system makes a DNS request to the first IP in /etc/resolv.conf. If there is no response, requests are sent to subsequent servers in resolv.conf. These servers in resolv.conf are called DNS resolvers. The DNS resolvers are populated by DHCP or statically configured by an administrator. Dig is a userspace DNS system which creates and sends requests to DNS resolvers and prints the response it receives to the console. #run this command in one shell to capture all DNS requests sudo tcpdump -s 0 -A -i any port 53 #make a dig request from another shell dig linkedin.com 13:19:54.432507 IP 172.19.209.122.56497 > 172.23.195.101.53: 527+ [1au] A? linkedin.com. (41) ....E..E....@.n....z...e...5.1.:... .........linkedin.com.......)........ 13:19:54.485131 IP 172.23.195.101.53 > 172.19.209.122.56497: 527 1/0/1 A 108.174.10.10 (57) ....E..U..@.|. ....e...z.5...A...............linkedin.com..............3..l. ..)........ The packet capture shows a request is made to 172.23.195.101:53 (this is the resolver in /etc/resolv.conf) for linkedin.com and a response is received from 172.23.195.101 with the IP address of linkedin.com 108.174.10.10 Now let's try to understand how DNS resolver tries to find the IP address of linkedin.com. DNS resolver first looks at its cache. Since many devices in the network can query for the domain name linkedin.com, the name resolution result may already exist in the cache. If there is a cache miss, it starts the DNS resolution process. The DNS server breaks \u201clinkedin.com\u201d to \u201c.\u201d, \u201ccom.\u201d and \u201clinkedin.com.\u201d and starts DNS resolution from \u201c.\u201d. The \u201c.\u201d is called root domain and those IPs are known to the DNS resolver software. DNS resolver queries the root domain Nameservers to find the right nameservers which could respond regarding details for \"com.\". The address of the authoritative nameserver of \u201ccom.\u201d is returned. Now the DNS resolution service contacts the authoritative nameserver for \u201ccom.\u201d to fetch the authoritative nameserver for \u201clinkedin.com\u201d. Once an authoritative nameserver of \u201clinkedin.com\u201d is known, the resolver contacts Linkedin\u2019s nameserver to provide the IP address of \u201clinkedin.com\u201d. This whole process can be visualized by running dig +trace linkedin.com linkedin.com. 3600 IN A 108.174.10.10 This DNS response has 5 fields where the first field is the request and the last field is the response. The second field is the Time to Live which says how long the DNS response is valid in seconds. In this case this mapping of linkedin.com is valid for 1 hour. This is how the resolvers and application(browser) maintain their cache. Any request for linkedin.com beyond 1 hour will be treated as a cache miss as the mapping has expired its TTL and the whole process has to be redone. The 4th field says the type of DNS response/request. Some of the various DNS query types are A, AAAA, NS, TXT, PTR, MX and CNAME. - A record returns IPV4 address of the domain name - AAAA record returns the IPV6 address of the domain Name - NS record returns the authoritative nameserver for the domain name - CNAME records are aliases to the domain names. Some domains point to other domain names and resolving the latter domain name gives an IP which is used as an IP for the former domain name as well. Example www.linkedin.com\u2019s IP address is the same as 2-01-2c3e-005a.cdx.cedexis.net. - For the brevity we are not discussing other DNS record types, the RFC of each of these records are available here . dig A linkedin.com +short 108.174.10.10 dig AAAA linkedin.com +short 2620:109:c002::6cae:a0a dig NS linkedin.com +short dns3.p09.nsone.net. dns4.p09.nsone.net. dns2.p09.nsone.net. ns4.p43.dynect.net. ns1.p43.dynect.net. ns2.p43.dynect.net. ns3.p43.dynect.net. dns1.p09.nsone.net. dig www.linkedin.com CNAME +short 2-01-2c3e-005a.cdx.cedexis.net. Armed with these fundamentals of DNS lets see usecases where DNS is used by SREs. Applications in SRE role This section covers some of the common solutions SRE can derive from DNS 1. Every company has to have its internal DNS infrastructure for intranet sites and internal services like databases and other internal applications like wiki. So there has to be a DNS infrastructure maintained for those domain names by the infrastructure team. This DNS infrastructure has to be optimized and scaled so that it doesn\u2019t become a single point of failure. Failure of the internal DNS infrastructure can cause API calls of microservices to fail and other cascading effects. 2. DNS can also be used for discovering services. For example the hostname serviceb.internal.example.com could list instances which run service b internally in example.com company. Cloud providers provide options to enable DNS discovery( example ) 3. DNS is used by cloud provides and CDN providers to scale their services. In Azure/AWS, Load Balancers are given a CNAME instead of IPAddress. They update the IPAddress of the Loadbalancers as they scale by changing the IP Address of alias domain names. This is one of the reasons why A records of such alias domains are short lived like 1 minute. 4. DNS can also be used to make clients get IP addresses closer to their location so that their HTTP calls can be responded faster if the company has a presence geographically distributed. 5. SRE also has to understand since there is no verification in DNS infrastructure, these responses can be spoofed. This is safeguarded by other protocols like HTTPS(dealt later). DNSSEC protects from forged or manipulated DNS responses. 6. Stale DNS cache can be a problem. Some apps might still be using expired DNS records for their api calls. This is something SRE has to be wary of when doing maintenance. 7. DNS Loadbalancing and service discovery also has to understand TTL and the servers can be removed from the pool only after waiting till TTL post the changes are made to DNS records. If this is not done, a certain portion of the traffic will fail as the server is removed before the TTL.","title":"DNS"},{"location":"linux_networking/dns/#dns","text":"Domain Names are the simple human-readable names for websites. The Internet understands only IP addresses, but since memorizing incoherent numbers is not practical, domain names are used instead. These domain names are translated into IP addresses by the DNS infrastructure. When somebody tries to open www.linkedin.com in the browser, the browser tries to convert www.linkedin.com to an IP Address. This process is called DNS resolution. A simple pseudocode depicting this process looks this ip, err = getIPAddress(domainName) if err: print(\u201cunknown Host Exception while trying to resolve:%s\u201d.format(domainName)) Now let\u2019s try to understand what happens inside the getIPAddress function. The browser would have a DNS cache of its own where it checks if there is a mapping for the domainName to an IP Address already available, in which case the browser uses that IP address. If no such mapping exists, the browser calls gethostbyname syscall to ask the operating system to find the IP address for the given domainName def getIPAddress(domainName): resp, fail = lookupCache(domainName) If not fail: return resp else: resp, err = gethostbyname(domainName) if err: return null, err else: return resp Now lets understand what operating system kernel does when the gethostbyname function is called. The Linux operating system looks at the file /etc/nsswitch.conf file which usually has a line hosts: files dns This line means the OS has to look up first in file (/etc/hosts) and then use DNS protocol to do the resolution if there is no match in /etc/hosts. The file /etc/hosts is of format IPAddress FQDN [FQDN].* 127.0.0.1 localhost.localdomain localhost ::1 localhost.localdomain localhost If a match exists for a domain in this file then that IP address is returned by the OS. Lets add a line to this file 127.0.0.1 test.linkedin.com And then do ping test.linkedin.com ping test.linkedin.com -n PING test.linkedin.com (127.0.0.1) 56(84) bytes of data. 64 bytes from 127.0.0.1: icmp_seq=1 ttl=64 time=0.047 ms 64 bytes from 127.0.0.1: icmp_seq=2 ttl=64 time=0.036 ms 64 bytes from 127.0.0.1: icmp_seq=3 ttl=64 time=0.037 ms As mentioned earlier, if no match exists in /etc/hosts, the OS tries to do a DNS resolution using the DNS protocol. The linux system makes a DNS request to the first IP in /etc/resolv.conf. If there is no response, requests are sent to subsequent servers in resolv.conf. These servers in resolv.conf are called DNS resolvers. The DNS resolvers are populated by DHCP or statically configured by an administrator. Dig is a userspace DNS system which creates and sends requests to DNS resolvers and prints the response it receives to the console. #run this command in one shell to capture all DNS requests sudo tcpdump -s 0 -A -i any port 53 #make a dig request from another shell dig linkedin.com 13:19:54.432507 IP 172.19.209.122.56497 > 172.23.195.101.53: 527+ [1au] A? linkedin.com. (41) ....E..E....@.n....z...e...5.1.:... .........linkedin.com.......)........ 13:19:54.485131 IP 172.23.195.101.53 > 172.19.209.122.56497: 527 1/0/1 A 108.174.10.10 (57) ....E..U..@.|. ....e...z.5...A...............linkedin.com..............3..l. ..)........ The packet capture shows a request is made to 172.23.195.101:53 (this is the resolver in /etc/resolv.conf) for linkedin.com and a response is received from 172.23.195.101 with the IP address of linkedin.com 108.174.10.10 Now let's try to understand how DNS resolver tries to find the IP address of linkedin.com. DNS resolver first looks at its cache. Since many devices in the network can query for the domain name linkedin.com, the name resolution result may already exist in the cache. If there is a cache miss, it starts the DNS resolution process. The DNS server breaks \u201clinkedin.com\u201d to \u201c.\u201d, \u201ccom.\u201d and \u201clinkedin.com.\u201d and starts DNS resolution from \u201c.\u201d. The \u201c.\u201d is called root domain and those IPs are known to the DNS resolver software. DNS resolver queries the root domain Nameservers to find the right nameservers which could respond regarding details for \"com.\". The address of the authoritative nameserver of \u201ccom.\u201d is returned. Now the DNS resolution service contacts the authoritative nameserver for \u201ccom.\u201d to fetch the authoritative nameserver for \u201clinkedin.com\u201d. Once an authoritative nameserver of \u201clinkedin.com\u201d is known, the resolver contacts Linkedin\u2019s nameserver to provide the IP address of \u201clinkedin.com\u201d. This whole process can be visualized by running dig +trace linkedin.com linkedin.com. 3600 IN A 108.174.10.10 This DNS response has 5 fields where the first field is the request and the last field is the response. The second field is the Time to Live which says how long the DNS response is valid in seconds. In this case this mapping of linkedin.com is valid for 1 hour. This is how the resolvers and application(browser) maintain their cache. Any request for linkedin.com beyond 1 hour will be treated as a cache miss as the mapping has expired its TTL and the whole process has to be redone. The 4th field says the type of DNS response/request. Some of the various DNS query types are A, AAAA, NS, TXT, PTR, MX and CNAME. - A record returns IPV4 address of the domain name - AAAA record returns the IPV6 address of the domain Name - NS record returns the authoritative nameserver for the domain name - CNAME records are aliases to the domain names. Some domains point to other domain names and resolving the latter domain name gives an IP which is used as an IP for the former domain name as well. Example www.linkedin.com\u2019s IP address is the same as 2-01-2c3e-005a.cdx.cedexis.net. - For the brevity we are not discussing other DNS record types, the RFC of each of these records are available here . dig A linkedin.com +short 108.174.10.10 dig AAAA linkedin.com +short 2620:109:c002::6cae:a0a dig NS linkedin.com +short dns3.p09.nsone.net. dns4.p09.nsone.net. dns2.p09.nsone.net. ns4.p43.dynect.net. ns1.p43.dynect.net. ns2.p43.dynect.net. ns3.p43.dynect.net. dns1.p09.nsone.net. dig www.linkedin.com CNAME +short 2-01-2c3e-005a.cdx.cedexis.net. Armed with these fundamentals of DNS lets see usecases where DNS is used by SREs.","title":"DNS"},{"location":"linux_networking/dns/#applications-in-sre-role","text":"This section covers some of the common solutions SRE can derive from DNS 1. Every company has to have its internal DNS infrastructure for intranet sites and internal services like databases and other internal applications like wiki. So there has to be a DNS infrastructure maintained for those domain names by the infrastructure team. This DNS infrastructure has to be optimized and scaled so that it doesn\u2019t become a single point of failure. Failure of the internal DNS infrastructure can cause API calls of microservices to fail and other cascading effects. 2. DNS can also be used for discovering services. For example the hostname serviceb.internal.example.com could list instances which run service b internally in example.com company. Cloud providers provide options to enable DNS discovery( example ) 3. DNS is used by cloud provides and CDN providers to scale their services. In Azure/AWS, Load Balancers are given a CNAME instead of IPAddress. They update the IPAddress of the Loadbalancers as they scale by changing the IP Address of alias domain names. This is one of the reasons why A records of such alias domains are short lived like 1 minute. 4. DNS can also be used to make clients get IP addresses closer to their location so that their HTTP calls can be responded faster if the company has a presence geographically distributed. 5. SRE also has to understand since there is no verification in DNS infrastructure, these responses can be spoofed. This is safeguarded by other protocols like HTTPS(dealt later). DNSSEC protects from forged or manipulated DNS responses. 6. Stale DNS cache can be a problem. Some apps might still be using expired DNS records for their api calls. This is something SRE has to be wary of when doing maintenance. 7. DNS Loadbalancing and service discovery also has to understand TTL and the servers can be removed from the pool only after waiting till TTL post the changes are made to DNS records. If this is not done, a certain portion of the traffic will fail as the server is removed before the TTL.","title":"Applications in SRE role"},{"location":"linux_networking/http/","text":"HTTP Till this point we have only got the IP address of linkedin.com. The HTML page of linkedin.com is served by HTTP protocol which the browser renders. Browser sends a HTTP request to the IP of the server determined above. Request has a verb GET, PUT, POST followed by a path and query parameters and lines of key value pair which gives information about the client and capabilities of the client like contents it can accept and a body (usually in POST or PUT) # Eg run the following in your container and have a look at the headers curl linkedin.com -v * Connected to linkedin.com (108.174.10.10) port 80 (#0) > GET / HTTP/1.1 > Host: linkedin.com > User-Agent: curl/7.64.1 > Accept: */* > < HTTP/1.1 301 Moved Permanently < Date: Mon, 09 Nov 2020 10:39:43 GMT < X-Li-Pop: prod-esv5 < X-LI-Proto: http/1.1 < Location: https://www.linkedin.com/ < Content-Length: 0 < * Connection #0 to host linkedin.com left intact * Closing connection 0 Here, in the first line GET is the verb, / is the path and 1.1 is the HTTP protocol version. Then there are key value pairs which give client capabilities and some details to the server. The server responds back with HTTP version, Status Code and Status message. Status codes 2xx means success, 3xx denotes redirection, 4xx denotes client side errors and 5xx server side errors. We will now jump in to see the difference between HTTP/1.0 and HTTP/1.1. #On the terminal type telnet www.linkedin.com 80 #Copy and paste the following with an empty new line at last in the telnet STDIN GET / HTTP/1.1 HOST:linkedin.com USER-AGENT: curl This would get server response and waits for next input as the underlying connection to www.linkedin.com can be reused for further queries. While going through TCP, we can understand the benefits of this. But in HTTP/1.0 this connection will be immediately closed after the response meaning new connection has to be opened for each query. HTTP/1.1 can have only one inflight request in an open connection but connection can be reused for multiple requests one after another. One of the benefits of HTTP/2.0 over HTTP/1.1 is we can have multiple inflight requests on the same connection. We are restricting our scope to generic HTTP and not jumping to the intricacies of each protocol version but they should be straight forward to understand post the course. HTTP is called stateless protocol . This section we will try to understand what stateless means. Say we logged in to linkedin.com, each request to linkedin.com from the client will have no context of the user and it makes no sense to prompt user to login for each page/resource. This problem of HTTP is solved by COOKIE . A user is created a session when a user logs in. This session identifier is sent to the browser via SET-COOKIE header. The browser stores the COOKIE till the expiry set by the server and sends the cookie for each request from hereon for linkedin.com. More details on cookies are available here . Cookies are a critical piece of information like password and since HTTP is a plain text protocol, any man in the middle can capture either password or cookies and can breach the privacy of the user. Similarly as discussed during DNS a spoofed IP of linkedin.com can cause a phishing attack on users where an user can give linkedin\u2019s password to login on the malicious site. To solve both problems HTTPs came in place and HTTPs has to be mandated. HTTPS has to provide server identification and encryption of data between client and server. The server administrator has to generate a private public key pair and certificate request. This certificate request has to be signed by a certificate authority which converts the certificate request to a certificate. The server administrator has to update the certificate and private key to the webserver. The certificate has details about the server (like domain name for which it serves, expiry date), public key of the server. The private key is a secret to the server and losing the private key loses the trust the server provides. When clients connect, the client sends a HELLO. The server sends its certificate to the client. The client checks the validity of the cert by seeing if it is within its expiry time, if it is signed by a trusted authority and the hostname in the cert is the same as the server. This validation makes sure the server is the right server and there is no phishing. Once that is validated, the client negotiates a symmetrical key and cipher with the server by encrypting the negotiation with the public key of the server. Nobody else other than the server who has the private key can understand this data. Once negotiation is complete, that symmetric key and algorithm is used for further encryption which can be decrypted only by client and server from thereon as they only know the symmetric key and algorithm. The switch to symmetric algorithm from asymmetric encryption algorithm is to not strain the resources of client devices as symmetric encryption is generally less resource intensive than asymmetric. #Try the following on your terminal to see the cert details like Subject Name(domain name), Issuer details, Expiry date curl https://www.linkedin.com -v * Connected to www.linkedin.com (13.107.42.14) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem CApath: none * TLSv1.2 (OUT), TLS handshake, Client hello (1): } [230 bytes data] * TLSv1.2 (IN), TLS handshake, Server hello (2): { [90 bytes data] * TLSv1.2 (IN), TLS handshake, Certificate (11): { [3171 bytes data] * TLSv1.2 (IN), TLS handshake, Server key exchange (12): { [365 bytes data] * TLSv1.2 (IN), TLS handshake, Server finished (14): { [4 bytes data] * TLSv1.2 (OUT), TLS handshake, Client key exchange (16): } [102 bytes data] * TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1): } [1 bytes data] * TLSv1.2 (OUT), TLS handshake, Finished (20): } [16 bytes data] * TLSv1.2 (IN), TLS change cipher, Change cipher spec (1): { [1 bytes data] * TLSv1.2 (IN), TLS handshake, Finished (20): { [16 bytes data] * SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384 * ALPN, server accepted to use h2 * Server certificate: * subject: C=US; ST=California; L=Sunnyvale; O=LinkedIn Corporation; CN=www.linkedin.com * start date: Oct 2 00:00:00 2020 GMT * expire date: Apr 2 12:00:00 2021 GMT * subjectAltName: host \"www.linkedin.com\" matched cert's \"www.linkedin.com\" * issuer: C=US; O=DigiCert Inc; CN=DigiCert SHA2 Secure Server CA * SSL certificate verify ok. * Using HTTP2, server supports multi-use * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 * Using Stream ID: 1 (easy handle 0x7fb055808200) * Connection state changed (MAX_CONCURRENT_STREAMS == 100)! 0 82117 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 * Connection #0 to host www.linkedin.com left intact HTTP/2 200 cache-control: no-cache, no-store pragma: no-cache content-length: 82117 content-type: text/html; charset=utf-8 expires: Thu, 01 Jan 1970 00:00:00 GMT set-cookie: JSESSIONID=ajax:2747059799136291014; SameSite=None; Path=/; Domain=.www.linkedin.com; Secure set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=linkedin.com; Secure set-cookie: bcookie=\"v=2&70bd59e3-5a51-406c-8e0d-dd70befa8890\"; domain=.linkedin.com; Path=/; Secure; Expires=Wed, 09-Nov-2022 22:27:42 GMT; SameSite=None set-cookie: bscookie=\"v=1&202011091050107ae9b7ac-fe97-40fc-830d-d7a9ccf80659AQGib5iXwarbY8CCBP94Q39THkgUlx6J\"; domain=.www.linkedin.com; Path=/; Secure; Expires=Wed, 09-Nov-2022 22:27:42 GMT; HttpOnly; SameSite=None set-cookie: lissc=1; domain=.linkedin.com; Path=/; Secure; Expires=Tue, 09-Nov-2021 10:50:10 GMT; SameSite=None set-cookie: lidc=\"b=VGST04:s=V:r=V:g=2201:u=1:i=1604919010:t=1605005410:v=1:sig=AQHe-KzU8i_5Iy6MwnFEsgRct3c9Lh5R\"; Expires=Tue, 10 Nov 2020 10:50:10 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure x-fs-txn-id: 2b8d5409ba70 x-fs-uuid: 61bbf94956d14516302567fc882b0000 expect-ct: max-age=86400, report-uri=\"https://www.linkedin.com/platform-telemetry/ct\" x-xss-protection: 1; mode=block content-security-policy-report-only: default-src 'none'; connect-src 'self' www.linkedin.com www.google-analytics.com https://dpm.demdex.net/id lnkd.demdex.net blob: https://linkedin.sc.omtrdc.net/b/ss/ static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; script-src 'sha256-THuVhwbXPeTR0HszASqMOnIyxqEgvGyBwSPBKBF/iMc=' 'sha256-PyCXNcEkzRWqbiNr087fizmiBBrq9O6GGD8eV3P09Ik=' 'sha256-2SQ55Erm3CPCb+k03EpNxU9bdV3XL9TnVTriDs7INZ4=' 'sha256-S/KSPe186K/1B0JEjbIXcCdpB97krdzX05S+dHnQjUs=' platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'self' 'unsafe-inline' static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; media-src dms.licdn.com; child-src blob: *; frame-src 'self' lnkd.demdex.net linkedin.cdn.qualaroo.com; manifest-src 'self'; report-uri https://www.linkedin.com/platform-telemetry/csp?f=g content-security-policy: default-src *; connect-src 'self' https://media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com s.c.exp1.licdn.com s.c.exp2.licdn.com m.c.exp1.licdn.com m.c.exp2.licdn.com wss://*.linkedin.com dms.licdn.com https://dpm.demdex.net/id lnkd.demdex.net blob: https://accounts.google.com/gsi/status https://linkedin.sc.omtrdc.net/b/ss/ www.google-analytics.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com www.google-analytics.com ssl.google-analytics.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com slideshare.www.linkedin.com https://snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self'; report-uri https://www.linkedin.com/platform-telemetry/csp?f=l x-frame-options: sameorigin x-content-type-options: nosniff strict-transport-security: max-age=2592000 x-li-fabric: prod-lva1 x-li-pop: afd-prod-lva1 x-li-proto: http/2 x-li-uuid: Ybv5SVbRRRYwJWf8iCsAAA== x-msedge-ref: Ref A: CFB9AC1D2B0645DDB161CEE4A4909AEF Ref B: BOM02EDGE0712 Ref C: 2020-11-09T10:50:10Z date: Mon, 09 Nov 2020 10:50:10 GMT * Closing connection 0 Here my system has a list of certificate authorities it trusts in this file /etc/ssl/cert.pem. Curl validates the certificate is for www.linkedin.com by seeing the CN section of the subject part of the certificate. It also makes sure the certificate is not expired by seeing the expire date. It also validates the signature on the certificate by using the public key of issuer Digicert in /etc/ssl/cert.pem. Once this is done, using the public key of www.linkedin.com it negotiates cipher TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 with a symmetric key. Subsequent data transfer including first HTTP request uses the same cipher and symmetric key.","title":"HTTP"},{"location":"linux_networking/http/#http","text":"Till this point we have only got the IP address of linkedin.com. The HTML page of linkedin.com is served by HTTP protocol which the browser renders. Browser sends a HTTP request to the IP of the server determined above. Request has a verb GET, PUT, POST followed by a path and query parameters and lines of key value pair which gives information about the client and capabilities of the client like contents it can accept and a body (usually in POST or PUT) # Eg run the following in your container and have a look at the headers curl linkedin.com -v * Connected to linkedin.com (108.174.10.10) port 80 (#0) > GET / HTTP/1.1 > Host: linkedin.com > User-Agent: curl/7.64.1 > Accept: */* > < HTTP/1.1 301 Moved Permanently < Date: Mon, 09 Nov 2020 10:39:43 GMT < X-Li-Pop: prod-esv5 < X-LI-Proto: http/1.1 < Location: https://www.linkedin.com/ < Content-Length: 0 < * Connection #0 to host linkedin.com left intact * Closing connection 0 Here, in the first line GET is the verb, / is the path and 1.1 is the HTTP protocol version. Then there are key value pairs which give client capabilities and some details to the server. The server responds back with HTTP version, Status Code and Status message. Status codes 2xx means success, 3xx denotes redirection, 4xx denotes client side errors and 5xx server side errors. We will now jump in to see the difference between HTTP/1.0 and HTTP/1.1. #On the terminal type telnet www.linkedin.com 80 #Copy and paste the following with an empty new line at last in the telnet STDIN GET / HTTP/1.1 HOST:linkedin.com USER-AGENT: curl This would get server response and waits for next input as the underlying connection to www.linkedin.com can be reused for further queries. While going through TCP, we can understand the benefits of this. But in HTTP/1.0 this connection will be immediately closed after the response meaning new connection has to be opened for each query. HTTP/1.1 can have only one inflight request in an open connection but connection can be reused for multiple requests one after another. One of the benefits of HTTP/2.0 over HTTP/1.1 is we can have multiple inflight requests on the same connection. We are restricting our scope to generic HTTP and not jumping to the intricacies of each protocol version but they should be straight forward to understand post the course. HTTP is called stateless protocol . This section we will try to understand what stateless means. Say we logged in to linkedin.com, each request to linkedin.com from the client will have no context of the user and it makes no sense to prompt user to login for each page/resource. This problem of HTTP is solved by COOKIE . A user is created a session when a user logs in. This session identifier is sent to the browser via SET-COOKIE header. The browser stores the COOKIE till the expiry set by the server and sends the cookie for each request from hereon for linkedin.com. More details on cookies are available here . Cookies are a critical piece of information like password and since HTTP is a plain text protocol, any man in the middle can capture either password or cookies and can breach the privacy of the user. Similarly as discussed during DNS a spoofed IP of linkedin.com can cause a phishing attack on users where an user can give linkedin\u2019s password to login on the malicious site. To solve both problems HTTPs came in place and HTTPs has to be mandated. HTTPS has to provide server identification and encryption of data between client and server. The server administrator has to generate a private public key pair and certificate request. This certificate request has to be signed by a certificate authority which converts the certificate request to a certificate. The server administrator has to update the certificate and private key to the webserver. The certificate has details about the server (like domain name for which it serves, expiry date), public key of the server. The private key is a secret to the server and losing the private key loses the trust the server provides. When clients connect, the client sends a HELLO. The server sends its certificate to the client. The client checks the validity of the cert by seeing if it is within its expiry time, if it is signed by a trusted authority and the hostname in the cert is the same as the server. This validation makes sure the server is the right server and there is no phishing. Once that is validated, the client negotiates a symmetrical key and cipher with the server by encrypting the negotiation with the public key of the server. Nobody else other than the server who has the private key can understand this data. Once negotiation is complete, that symmetric key and algorithm is used for further encryption which can be decrypted only by client and server from thereon as they only know the symmetric key and algorithm. The switch to symmetric algorithm from asymmetric encryption algorithm is to not strain the resources of client devices as symmetric encryption is generally less resource intensive than asymmetric. #Try the following on your terminal to see the cert details like Subject Name(domain name), Issuer details, Expiry date curl https://www.linkedin.com -v * Connected to www.linkedin.com (13.107.42.14) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem CApath: none * TLSv1.2 (OUT), TLS handshake, Client hello (1): } [230 bytes data] * TLSv1.2 (IN), TLS handshake, Server hello (2): { [90 bytes data] * TLSv1.2 (IN), TLS handshake, Certificate (11): { [3171 bytes data] * TLSv1.2 (IN), TLS handshake, Server key exchange (12): { [365 bytes data] * TLSv1.2 (IN), TLS handshake, Server finished (14): { [4 bytes data] * TLSv1.2 (OUT), TLS handshake, Client key exchange (16): } [102 bytes data] * TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1): } [1 bytes data] * TLSv1.2 (OUT), TLS handshake, Finished (20): } [16 bytes data] * TLSv1.2 (IN), TLS change cipher, Change cipher spec (1): { [1 bytes data] * TLSv1.2 (IN), TLS handshake, Finished (20): { [16 bytes data] * SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384 * ALPN, server accepted to use h2 * Server certificate: * subject: C=US; ST=California; L=Sunnyvale; O=LinkedIn Corporation; CN=www.linkedin.com * start date: Oct 2 00:00:00 2020 GMT * expire date: Apr 2 12:00:00 2021 GMT * subjectAltName: host \"www.linkedin.com\" matched cert's \"www.linkedin.com\" * issuer: C=US; O=DigiCert Inc; CN=DigiCert SHA2 Secure Server CA * SSL certificate verify ok. * Using HTTP2, server supports multi-use * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 * Using Stream ID: 1 (easy handle 0x7fb055808200) * Connection state changed (MAX_CONCURRENT_STREAMS == 100)! 0 82117 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 * Connection #0 to host www.linkedin.com left intact HTTP/2 200 cache-control: no-cache, no-store pragma: no-cache content-length: 82117 content-type: text/html; charset=utf-8 expires: Thu, 01 Jan 1970 00:00:00 GMT set-cookie: JSESSIONID=ajax:2747059799136291014; SameSite=None; Path=/; Domain=.www.linkedin.com; Secure set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=linkedin.com; Secure set-cookie: bcookie=\"v=2&70bd59e3-5a51-406c-8e0d-dd70befa8890\"; domain=.linkedin.com; Path=/; Secure; Expires=Wed, 09-Nov-2022 22:27:42 GMT; SameSite=None set-cookie: bscookie=\"v=1&202011091050107ae9b7ac-fe97-40fc-830d-d7a9ccf80659AQGib5iXwarbY8CCBP94Q39THkgUlx6J\"; domain=.www.linkedin.com; Path=/; Secure; Expires=Wed, 09-Nov-2022 22:27:42 GMT; HttpOnly; SameSite=None set-cookie: lissc=1; domain=.linkedin.com; Path=/; Secure; Expires=Tue, 09-Nov-2021 10:50:10 GMT; SameSite=None set-cookie: lidc=\"b=VGST04:s=V:r=V:g=2201:u=1:i=1604919010:t=1605005410:v=1:sig=AQHe-KzU8i_5Iy6MwnFEsgRct3c9Lh5R\"; Expires=Tue, 10 Nov 2020 10:50:10 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure x-fs-txn-id: 2b8d5409ba70 x-fs-uuid: 61bbf94956d14516302567fc882b0000 expect-ct: max-age=86400, report-uri=\"https://www.linkedin.com/platform-telemetry/ct\" x-xss-protection: 1; mode=block content-security-policy-report-only: default-src 'none'; connect-src 'self' www.linkedin.com www.google-analytics.com https://dpm.demdex.net/id lnkd.demdex.net blob: https://linkedin.sc.omtrdc.net/b/ss/ static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; script-src 'sha256-THuVhwbXPeTR0HszASqMOnIyxqEgvGyBwSPBKBF/iMc=' 'sha256-PyCXNcEkzRWqbiNr087fizmiBBrq9O6GGD8eV3P09Ik=' 'sha256-2SQ55Erm3CPCb+k03EpNxU9bdV3XL9TnVTriDs7INZ4=' 'sha256-S/KSPe186K/1B0JEjbIXcCdpB97krdzX05S+dHnQjUs=' platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'self' 'unsafe-inline' static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; media-src dms.licdn.com; child-src blob: *; frame-src 'self' lnkd.demdex.net linkedin.cdn.qualaroo.com; manifest-src 'self'; report-uri https://www.linkedin.com/platform-telemetry/csp?f=g content-security-policy: default-src *; connect-src 'self' https://media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com s.c.exp1.licdn.com s.c.exp2.licdn.com m.c.exp1.licdn.com m.c.exp2.licdn.com wss://*.linkedin.com dms.licdn.com https://dpm.demdex.net/id lnkd.demdex.net blob: https://accounts.google.com/gsi/status https://linkedin.sc.omtrdc.net/b/ss/ www.google-analytics.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com www.google-analytics.com ssl.google-analytics.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com slideshare.www.linkedin.com https://snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self'; report-uri https://www.linkedin.com/platform-telemetry/csp?f=l x-frame-options: sameorigin x-content-type-options: nosniff strict-transport-security: max-age=2592000 x-li-fabric: prod-lva1 x-li-pop: afd-prod-lva1 x-li-proto: http/2 x-li-uuid: Ybv5SVbRRRYwJWf8iCsAAA== x-msedge-ref: Ref A: CFB9AC1D2B0645DDB161CEE4A4909AEF Ref B: BOM02EDGE0712 Ref C: 2020-11-09T10:50:10Z date: Mon, 09 Nov 2020 10:50:10 GMT * Closing connection 0 Here my system has a list of certificate authorities it trusts in this file /etc/ssl/cert.pem. Curl validates the certificate is for www.linkedin.com by seeing the CN section of the subject part of the certificate. It also makes sure the certificate is not expired by seeing the expire date. It also validates the signature on the certificate by using the public key of issuer Digicert in /etc/ssl/cert.pem. Once this is done, using the public key of www.linkedin.com it negotiates cipher TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 with a symmetric key. Subsequent data transfer including first HTTP request uses the same cipher and symmetric key.","title":"HTTP"},{"location":"linux_networking/intro/","text":"Linux Networking Fundamentals Prerequisites This course requires high-level knowledge of commonly used jargon in TCP/IP stack like DNS, TCP, UDP and HTTP. Basic familiarity with Linux jargon is sufficient to start this course. This course also expects basic exposure to Linux command-line tools. The course will require you to install certain utilities and run them as a part of the course exercises. What to expect from this course Throughout the course, we cover how an SRE can optimize the system to improve their web stack performance and troubleshoot if there is an issue in any of the layers of the networking stack. This course tries to dig through each layer of traditional TCP/IP stack and expects an SRE to have a picture beyond the bird\u2019s eye view of the functioning of the Internet. What is not covered under this course This course spends time on the fundamentals. We are not covering concepts like HTTP/2.0, QUIC, TCP congestion control protocols, Anycast, BGP, CDN, Tunnels and Multicast. We expect that this course will provide the relevant basics to understand such concepts Birds eye view of the course The course covers the question \u201cWhat happens when you open linkedin.com in your browser?\u201d The course follows the flow of TCP/IP stack.More specifically, the course covers topics of Application layer protocols DNS and HTTP, transport layer protocols UDP and TCP, networking layer protocol IP and Data Link Layer protocol Course Contents DNS UDP HTTP TCP IP Routing","title":"Introduction"},{"location":"linux_networking/intro/#linux-networking-fundamentals","text":"","title":"Linux Networking Fundamentals"},{"location":"linux_networking/intro/#prerequisites","text":"This course requires high-level knowledge of commonly used jargon in TCP/IP stack like DNS, TCP, UDP and HTTP. Basic familiarity with Linux jargon is sufficient to start this course. This course also expects basic exposure to Linux command-line tools. The course will require you to install certain utilities and run them as a part of the course exercises.","title":"Prerequisites"},{"location":"linux_networking/intro/#what-to-expect-from-this-course","text":"Throughout the course, we cover how an SRE can optimize the system to improve their web stack performance and troubleshoot if there is an issue in any of the layers of the networking stack. This course tries to dig through each layer of traditional TCP/IP stack and expects an SRE to have a picture beyond the bird\u2019s eye view of the functioning of the Internet.","title":"What to expect from this course"},{"location":"linux_networking/intro/#what-is-not-covered-under-this-course","text":"This course spends time on the fundamentals. We are not covering concepts like HTTP/2.0, QUIC, TCP congestion control protocols, Anycast, BGP, CDN, Tunnels and Multicast. We expect that this course will provide the relevant basics to understand such concepts","title":"What is not covered under this course"},{"location":"linux_networking/intro/#birds-eye-view-of-the-course","text":"The course covers the question \u201cWhat happens when you open linkedin.com in your browser?\u201d The course follows the flow of TCP/IP stack.More specifically, the course covers topics of Application layer protocols DNS and HTTP, transport layer protocols UDP and TCP, networking layer protocol IP and Data Link Layer protocol","title":"Birds eye view of the course"},{"location":"linux_networking/intro/#course-contents","text":"DNS UDP HTTP TCP IP Routing","title":"Course Contents"},{"location":"linux_networking/ipr/","text":"IP Routing and Data Link Layer We will dig how packets that leave the client reach the server and vice versa. When the packet reaches the IP layer, the transport layer populates source port, destination port. IP/Network layer populates destination IP(discovered from DNS) and then looks up the route to the destination IP on the routing table. #Linux route -n command gives the default routing table route -n Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 172.17.0.1 0.0.0.0 UG 0 0 0 eth0 172.17.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0 Here the destination IP is bitwise AND\u2019d with the Genmask and if the answer is the destination part of the table then that gateway and interface is picked for routing. Here linkedin.com\u2019s IP 108.174.10.10 is AND\u2019d with 255.255.255.0 and the answer we get is 108.174.10.0 which doesn\u2019t match with any destination in the routing table. Then Linux does an AND of destination IP with 0.0.0.0 and we get 0.0.0.0. This answer matches the default row Routing table is processed in the order of more octets of 1 set in genmask and genmask 0.0.0.0 is the default route if nothing matches. At the end of this operation Linux figured out that the packet has to be sent to next hop 172.17.0.1 via eth0. The source IP of the packet will be set as the IP of interface eth0. Now to send the packet to 172.17.0.1 linux has to figure out the MAC address of 172.17.0.1. MAC address is figured by looking at the internal arp cache which stores translation between IP address and MAC address. If there is a cache miss, Linux broadcasts ARP request within the internal network asking who has 172.17.0.1. The owner of the IP sends an ARP response which is cached by the kernel and the kernel sends the packet to the gateway by setting Source mac address as mac address of eth0 and destination mac address of 172.17.0.1 which we got just now. Similar routing lookup process is followed in each hop till the packet reaches the actual server. Transport layer and layers above it come to play only at end servers. During intermediate hops only till the IP/Network layer is involved. One weird gateway we saw in the routing table is 0.0.0.0. This gateway means no Layer3(Network layer) hop is needed to send the packet. Both source and destination are in the same network. Kernel has to figure out the mac of the destination and populate source and destination mac appropriately and send the packet out so that it reaches the destination without any Layer3 hop in the middle As we followed in other modules, lets complete this session with SRE usecases Applications in SRE role Generally the routing table is populated by DHCP and playing around is not a good practice. There can be reasons where one has to play around the routing table but take that path only when it's absolutely necessary Understanding error messages better like, \u201cNo route to host\u201d error can mean mac address of the destination host is not found and it can mean the destination host is down On rare cases looking at the ARP table can help us understand if there is a IP conflict where same IP is assigned to two hosts by mistake and this is causing unexpected behavior","title":"Routing"},{"location":"linux_networking/ipr/#ip-routing-and-data-link-layer","text":"We will dig how packets that leave the client reach the server and vice versa. When the packet reaches the IP layer, the transport layer populates source port, destination port. IP/Network layer populates destination IP(discovered from DNS) and then looks up the route to the destination IP on the routing table. #Linux route -n command gives the default routing table route -n Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 172.17.0.1 0.0.0.0 UG 0 0 0 eth0 172.17.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0 Here the destination IP is bitwise AND\u2019d with the Genmask and if the answer is the destination part of the table then that gateway and interface is picked for routing. Here linkedin.com\u2019s IP 108.174.10.10 is AND\u2019d with 255.255.255.0 and the answer we get is 108.174.10.0 which doesn\u2019t match with any destination in the routing table. Then Linux does an AND of destination IP with 0.0.0.0 and we get 0.0.0.0. This answer matches the default row Routing table is processed in the order of more octets of 1 set in genmask and genmask 0.0.0.0 is the default route if nothing matches. At the end of this operation Linux figured out that the packet has to be sent to next hop 172.17.0.1 via eth0. The source IP of the packet will be set as the IP of interface eth0. Now to send the packet to 172.17.0.1 linux has to figure out the MAC address of 172.17.0.1. MAC address is figured by looking at the internal arp cache which stores translation between IP address and MAC address. If there is a cache miss, Linux broadcasts ARP request within the internal network asking who has 172.17.0.1. The owner of the IP sends an ARP response which is cached by the kernel and the kernel sends the packet to the gateway by setting Source mac address as mac address of eth0 and destination mac address of 172.17.0.1 which we got just now. Similar routing lookup process is followed in each hop till the packet reaches the actual server. Transport layer and layers above it come to play only at end servers. During intermediate hops only till the IP/Network layer is involved. One weird gateway we saw in the routing table is 0.0.0.0. This gateway means no Layer3(Network layer) hop is needed to send the packet. Both source and destination are in the same network. Kernel has to figure out the mac of the destination and populate source and destination mac appropriately and send the packet out so that it reaches the destination without any Layer3 hop in the middle As we followed in other modules, lets complete this session with SRE usecases","title":"IP Routing and Data Link Layer"},{"location":"linux_networking/ipr/#applications-in-sre-role","text":"Generally the routing table is populated by DHCP and playing around is not a good practice. There can be reasons where one has to play around the routing table but take that path only when it's absolutely necessary Understanding error messages better like, \u201cNo route to host\u201d error can mean mac address of the destination host is not found and it can mean the destination host is down On rare cases looking at the ARP table can help us understand if there is a IP conflict where same IP is assigned to two hosts by mistake and this is causing unexpected behavior","title":"Applications in SRE role"},{"location":"linux_networking/tcp/","text":"TCP TCP is a transport layer protocol like UDP but it guarantees reliability, flow control and congestion control. TCP guarantees reliable delivery by using sequence numbers. A TCP connection is established by a three way handshake. In our case, the client sends a SYN packet along with the starting sequence number it plans to use, the server acknowledges the SYN packet and sends a SYN with its sequence number. Once the client acknowledges the syn packet, the connection is established. Each data transferred from here on is considered delivered reliably once acknowledgement for that sequence is received by the concerned party #To understand handshake run packet capture on one bash session tcpdump -S -i any port 80 #Run curl on one bash session curl www.linkedin.com Here client sends a syn flag shown by [S] flag with a sequence number 1522264672. The server acknowledges receipt of SYN with an ack [.] flag and a Syn flag for its sequence number[S]. The server uses the sequence number 1063230400 and acknowledges the client it\u2019s expecting sequence number 1522264673 (client sequence+1). Client sends a zero length acknowledgement packet to the server(server sequence+1) and connection stands established. This is called three way handshake. The client sends a 76 bytes length packet after this and increments its sequence number by 76. Server sends a 170 byte response and closes the connection. This was the difference we were talking about between HTTP/1.1 and HTTP/1.0. In HTTP/1.1 this same connection can be reused which reduces overhead of 3 way handshake for each HTTP request. If a packet is missed between client and server, server won\u2019t send an ack to the client and client would retry sending the packet till the ACK is received. This guarantees reliability. The flow control is established by the win size field in each segment. The win size says available TCP buffer length in the kernel which can be used to buffer received segments. A size 0 means the receiver has a lot of lag to catch from its socket buffer and the sender has to pause sending packets so that receiver can cope up. This flow control protects from slow receiver and fast sender problem TCP also does congestion control which determines how many segments can be in transit without an ack. Linux provides us the ability to configure algorithms for congestion control which we are not covering here. While closing a connection, client/server calls a close syscall. Let's assume client do that. Client\u2019s kernel will send a FIN packet to the server. Server\u2019s kernel can\u2019t close the connection till the close syscall is called by the server application. Once server app calls close, server also sends a FIN packet and client enters into time wait state for 2*MSS(120s) so that this socket can\u2019t be reused for that time period to prevent any TCP state corruptions due to stray stale packets. Armed with our TCP and HTTP knowledge lets see how this is used by SREs in their role Applications in SRE role Scaling HTTP performance using load balancers need consistent knowledge about both TCP and HTTP. There are different kinds of load balancing like L4, L7 load balancing, Direct Server Return etc. HTTPs offloading can be done on Load balancer or directly on servers based on the performance and compliance needs. Tweaking sysctl variables for rmem and wmem like we did for UDP can improve throughput of sender and receiver. Sysctl variable tcp_max_syn_backlog and socket variable somax_conn determines how many connections for which the kernel can complete 3 way handshake before app calling accept syscall. This is much useful in single threaded applications. Once the backlog is full, new connections stay in SYN_RCVD state (when you run netstat) till the application calls accept syscall Apps can run out of file descriptors if there are too many short lived connections. Digging through tcp_reuse and tcp_recycle can help reduce time spent in the time wait state(it has its own risk). Making apps reuse a pool of connections instead of creating ad hoc connection can also help Understanding performance bottlenecks by seeing metrics and classifying whether its a problem in App or network side. Example too many sockets in Close_wait state is a problem on application whereas retransmissions can be a problem more on network or on OS stack than the application itself. Understanding the fundamentals can help us narrow down where the bottleneck is","title":"TCP"},{"location":"linux_networking/tcp/#tcp","text":"TCP is a transport layer protocol like UDP but it guarantees reliability, flow control and congestion control. TCP guarantees reliable delivery by using sequence numbers. A TCP connection is established by a three way handshake. In our case, the client sends a SYN packet along with the starting sequence number it plans to use, the server acknowledges the SYN packet and sends a SYN with its sequence number. Once the client acknowledges the syn packet, the connection is established. Each data transferred from here on is considered delivered reliably once acknowledgement for that sequence is received by the concerned party #To understand handshake run packet capture on one bash session tcpdump -S -i any port 80 #Run curl on one bash session curl www.linkedin.com Here client sends a syn flag shown by [S] flag with a sequence number 1522264672. The server acknowledges receipt of SYN with an ack [.] flag and a Syn flag for its sequence number[S]. The server uses the sequence number 1063230400 and acknowledges the client it\u2019s expecting sequence number 1522264673 (client sequence+1). Client sends a zero length acknowledgement packet to the server(server sequence+1) and connection stands established. This is called three way handshake. The client sends a 76 bytes length packet after this and increments its sequence number by 76. Server sends a 170 byte response and closes the connection. This was the difference we were talking about between HTTP/1.1 and HTTP/1.0. In HTTP/1.1 this same connection can be reused which reduces overhead of 3 way handshake for each HTTP request. If a packet is missed between client and server, server won\u2019t send an ack to the client and client would retry sending the packet till the ACK is received. This guarantees reliability. The flow control is established by the win size field in each segment. The win size says available TCP buffer length in the kernel which can be used to buffer received segments. A size 0 means the receiver has a lot of lag to catch from its socket buffer and the sender has to pause sending packets so that receiver can cope up. This flow control protects from slow receiver and fast sender problem TCP also does congestion control which determines how many segments can be in transit without an ack. Linux provides us the ability to configure algorithms for congestion control which we are not covering here. While closing a connection, client/server calls a close syscall. Let's assume client do that. Client\u2019s kernel will send a FIN packet to the server. Server\u2019s kernel can\u2019t close the connection till the close syscall is called by the server application. Once server app calls close, server also sends a FIN packet and client enters into time wait state for 2*MSS(120s) so that this socket can\u2019t be reused for that time period to prevent any TCP state corruptions due to stray stale packets. Armed with our TCP and HTTP knowledge lets see how this is used by SREs in their role","title":"TCP"},{"location":"linux_networking/tcp/#applications-in-sre-role","text":"Scaling HTTP performance using load balancers need consistent knowledge about both TCP and HTTP. There are different kinds of load balancing like L4, L7 load balancing, Direct Server Return etc. HTTPs offloading can be done on Load balancer or directly on servers based on the performance and compliance needs. Tweaking sysctl variables for rmem and wmem like we did for UDP can improve throughput of sender and receiver. Sysctl variable tcp_max_syn_backlog and socket variable somax_conn determines how many connections for which the kernel can complete 3 way handshake before app calling accept syscall. This is much useful in single threaded applications. Once the backlog is full, new connections stay in SYN_RCVD state (when you run netstat) till the application calls accept syscall Apps can run out of file descriptors if there are too many short lived connections. Digging through tcp_reuse and tcp_recycle can help reduce time spent in the time wait state(it has its own risk). Making apps reuse a pool of connections instead of creating ad hoc connection can also help Understanding performance bottlenecks by seeing metrics and classifying whether its a problem in App or network side. Example too many sockets in Close_wait state is a problem on application whereas retransmissions can be a problem more on network or on OS stack than the application itself. Understanding the fundamentals can help us narrow down where the bottleneck is","title":"Applications in SRE role"},{"location":"linux_networking/udp/","text":"UDP UDP is a transport layer protocol. DNS is an application layer protocol that runs on top of UDP(most of the times). Before jumping into UDP, let's try to understand what an application and transport layer is. DNS protocol is used by a DNS client(eg dig) and DNS server(eg named). The transport layer makes sure the DNS request reaches the DNS server process and similarly the response reaches the DNS client process. Multiple processes can run on a system and they can listen on any ports . DNS servers usually listen on port number 53. When a client makes a DNS request, after filling the necessary application payload, it passes the payload to the kernel via sendto system call. The kernel picks a random port number( >1024 ) as source port number and puts 53 as destination port number and sends the packet to lower layers. When the kernel on server side receives the packet, it checks the port number and queues the packet to the application buffer of the DNS server process which makes a recvfrom system call and reads the packet. This process by the kernel is called multiplexing(combining packets from multiple applications to same lower layers) and demultiplexing(segregating packets from single lower layer to multiple applications). Multiplexing and Demultiplexing is done by the Transport layer. UDP is one of the simplest transport layer protocol and it does only multiplexing and demultiplexing. Another common transport layer protocol TCP does a bunch of other things like reliable communication, flow control and congestion control. UDP is designed to be lightweight and handle communications with little overhead. So it doesn\u2019t do anything beyond multiplexing and demultiplexing. If applications running on top of UDP need any of the features of TCP, they have to implement that in their application This example from python wiki covers a sample UDP client and server where \u201cHello World\u201d is an application payload sent to server listening on port number 5005. The server receives the packet and prints the \u201cHello World\u201d string from the client Applications in SRE role If the underlying network is slow and the UDP layer is unable to queue packets down to the networking layer, sendto syscall from the application will hang till the kernel finds some of its buffer is freed. This can affect the throughput of the system. Increasing write memory buffer values using sysctl variables net.core.wmem_max and net.core.wmem_default provides some cushion to the application from the slow network Similarly if the receiver process is slow in consuming from its buffer, the kernel has to drop packets which it can\u2019t queue due to the buffer being full. Since UDP doesn\u2019t guarantee reliability these dropped packets can cause data loss unless tracked by the application layer. Increasing sysctl variables rmem_default and rmem_max can provide some cushion to slow applications from fast senders.","title":"UDP"},{"location":"linux_networking/udp/#udp","text":"UDP is a transport layer protocol. DNS is an application layer protocol that runs on top of UDP(most of the times). Before jumping into UDP, let's try to understand what an application and transport layer is. DNS protocol is used by a DNS client(eg dig) and DNS server(eg named). The transport layer makes sure the DNS request reaches the DNS server process and similarly the response reaches the DNS client process. Multiple processes can run on a system and they can listen on any ports . DNS servers usually listen on port number 53. When a client makes a DNS request, after filling the necessary application payload, it passes the payload to the kernel via sendto system call. The kernel picks a random port number( >1024 ) as source port number and puts 53 as destination port number and sends the packet to lower layers. When the kernel on server side receives the packet, it checks the port number and queues the packet to the application buffer of the DNS server process which makes a recvfrom system call and reads the packet. This process by the kernel is called multiplexing(combining packets from multiple applications to same lower layers) and demultiplexing(segregating packets from single lower layer to multiple applications). Multiplexing and Demultiplexing is done by the Transport layer. UDP is one of the simplest transport layer protocol and it does only multiplexing and demultiplexing. Another common transport layer protocol TCP does a bunch of other things like reliable communication, flow control and congestion control. UDP is designed to be lightweight and handle communications with little overhead. So it doesn\u2019t do anything beyond multiplexing and demultiplexing. If applications running on top of UDP need any of the features of TCP, they have to implement that in their application This example from python wiki covers a sample UDP client and server where \u201cHello World\u201d is an application payload sent to server listening on port number 5005. The server receives the packet and prints the \u201cHello World\u201d string from the client","title":"UDP"},{"location":"linux_networking/udp/#applications-in-sre-role","text":"If the underlying network is slow and the UDP layer is unable to queue packets down to the networking layer, sendto syscall from the application will hang till the kernel finds some of its buffer is freed. This can affect the throughput of the system. Increasing write memory buffer values using sysctl variables net.core.wmem_max and net.core.wmem_default provides some cushion to the application from the slow network Similarly if the receiver process is slow in consuming from its buffer, the kernel has to drop packets which it can\u2019t queue due to the buffer being full. Since UDP doesn\u2019t guarantee reliability these dropped packets can cause data loss unless tracked by the application layer. Increasing sysctl variables rmem_default and rmem_max can provide some cushion to slow applications from fast senders.","title":"Applications in SRE role"},{"location":"python_web/intro/","text":"Python and The Web Prerequisites Basic understanding of python language. Basic familiarity with flask framework. What to expect from this course This course is divided into two high level parts. In the first part, assuming familiarity with python language\u2019s basic operations and syntax usage, we will dive a little deeper into understanding python as a language. We will compare python with other programming languages that you might already know like Java and C. We will also explore concepts of Python objects and with help of that, explore python features like decorators. In the second part which will revolve around the web, and also assume familiarity with the Flask framework, we will start from the socket module and work with HTTP requests. This will demystify how frameworks like flask work internally. And to introduce SRE flavour to the course, we will design, develop and deploy (in theory) a URL shortening application. We will emphasize parts of the whole process that are more important as an SRE of the said app/service. What is not covered under this course Extensive knowledge of python internals and advanced python. Lab Environment Setup Have latest version of python installed Course Contents The Python Language Some Python Concepts Python Gotchas Python and Web Sockets Flask The URL Shortening App Design Scaling The App Monitoring The App The Python Language Assuming you know a little bit of C/C++ and Java, let's try to discuss the following questions in context of those two languages and python. You might have heard that C/C++ is a compiled language while python is an interpreted language. Generally, with compiled language we first compile the program and then run the executable while in case of python we run the source code directly like python hello_world.py . While Java, being an interpreted language, still has a separate compilation step and then its run. So what's really the difference? Compiled vs. Interpreted This might sound a little weird to you: python, in a way is a compiled language! Python has a compiler built-in! It is obvious in the case of java since we compile it using a separate command ie: javac helloWorld.java and it will produce a .class file which we know as a bytecode . Well, python is very similar to that. One difference here is that there is no separate compile command/binary needed to run a python program. What is the difference then, between java and python? Well, Java's compiler is more strict and sophisticated. As you might know Java is a statically typed language. So the compiler is written in a way that it can verify types related errors during compile time. While python being a dynamic language, types are not known until a program is run. So in a way, python compiler is dumb (or, less strict). But there indeed is a compile step involved when a python program is run. You might have seen python bytecode files with .pyc extension. Here is how you can see bytecode for a given python program. # Create a Hello World spatel1-mn1:tmp spatel1$ echo \"print('hello world')\" > hello_world.py # Making sure it runs spatel1-mn1:tmp spatel1$ python3 hello_world.py hello world # The bytecode of the given program spatel1-mn1:tmp spatel1$ python -m dis hello_world.py 1 0 LOAD_NAME 0 (print) 2 LOAD_CONST 0 ('hello world') 4 CALL_FUNCTION 1 6 POP_TOP 8 LOAD_CONST 1 (None) 10 RETURN_VALUE Read more about dis module here Now coming to C/C++, there of course is a compiler. But the output is different than what java/python compiler would produce. Compiling a C program would produce what we also know as machine code . As opposed to bytecode. Running The Programs We know compilation is involved in all 3 languages we are discussing. Just that the compilers are different in nature and they output different types of content. In case of C/C++, the output is machine code which can be directly read by your operating system. When you execute that program, your OS will know how exactly to run it. But this is not the case with bytecode. Those bytecodes are language specific. Python has its own set of bytecode defined (more in dis module) and so does java. So naturally, your operating system will not know how to run it. To run this bytecode, we have something called Virtual Machines. Ie: The JVM or the Python VM (CPython, Jython). These so called Virtual Machines are the programs which can read the bytecode and run it on a given operating system. Python has multiple VMs available. Cpython is a python VM implemented in C language, similarly Jython is a Java implementation of python VM. At the end of the day, what they should be capable of is to understand python language syntax, be able to compile it to bytecode and be able to run that bytecode. You can implement a python VM in any language! (And people do so, just because it can be done) The Operating System +------------------------------------+ | | | | | | hello_world.py Python bytecode | Python VM Process | | | +----------------+ +----------------+ | +----------------+ | |print(... | COMPILE |LOAD_CONST... | | |Reads bytecode | | | +--------------->+ +------------------->+line by line | | | | | | | |and executes. | | | | | | | | | | +----------------+ +----------------+ | +----------------+ | | | | | | | hello_world.c OS Specific machinecode | A New Process | | | +----------------+ +----------------+ | +----------------+ | |void main() { | COMPILE | binary contents| | | binary contents| | | +--------------->+ +------------------->+ | | | | | | | | | | | | | | | | | | +----------------+ +----------------+ | +----------------+ | | (binary contents | | runs as is) | | | | | +------------------------------------+ Two things to note for above diagram: Generally, when we run a python program, a python VM process is started which reads the python source code, compiles it to byte code and run it in a single step. Compiling is not a separate step. Shown only for illustration purpose. Binaries generated for C like languages are not exactly run as is. Since there are multiple types of binaries (eg: ELF), there are more complicated steps involved in order to run a binary but we will not go into that since all that is done at OS level.","title":"Introduction"},{"location":"python_web/intro/#python-and-the-web","text":"","title":"Python and The Web"},{"location":"python_web/intro/#prerequisites","text":"Basic understanding of python language. Basic familiarity with flask framework.","title":"Prerequisites"},{"location":"python_web/intro/#what-to-expect-from-this-course","text":"This course is divided into two high level parts. In the first part, assuming familiarity with python language\u2019s basic operations and syntax usage, we will dive a little deeper into understanding python as a language. We will compare python with other programming languages that you might already know like Java and C. We will also explore concepts of Python objects and with help of that, explore python features like decorators. In the second part which will revolve around the web, and also assume familiarity with the Flask framework, we will start from the socket module and work with HTTP requests. This will demystify how frameworks like flask work internally. And to introduce SRE flavour to the course, we will design, develop and deploy (in theory) a URL shortening application. We will emphasize parts of the whole process that are more important as an SRE of the said app/service.","title":"What to expect from this course"},{"location":"python_web/intro/#what-is-not-covered-under-this-course","text":"Extensive knowledge of python internals and advanced python.","title":"What is not covered under this course"},{"location":"python_web/intro/#lab-environment-setup","text":"Have latest version of python installed","title":"Lab Environment Setup"},{"location":"python_web/intro/#course-contents","text":"The Python Language Some Python Concepts Python Gotchas Python and Web Sockets Flask The URL Shortening App Design Scaling The App Monitoring The App","title":"Course Contents"},{"location":"python_web/intro/#the-python-language","text":"Assuming you know a little bit of C/C++ and Java, let's try to discuss the following questions in context of those two languages and python. You might have heard that C/C++ is a compiled language while python is an interpreted language. Generally, with compiled language we first compile the program and then run the executable while in case of python we run the source code directly like python hello_world.py . While Java, being an interpreted language, still has a separate compilation step and then its run. So what's really the difference?","title":"The Python Language"},{"location":"python_web/intro/#compiled-vs-interpreted","text":"This might sound a little weird to you: python, in a way is a compiled language! Python has a compiler built-in! It is obvious in the case of java since we compile it using a separate command ie: javac helloWorld.java and it will produce a .class file which we know as a bytecode . Well, python is very similar to that. One difference here is that there is no separate compile command/binary needed to run a python program. What is the difference then, between java and python? Well, Java's compiler is more strict and sophisticated. As you might know Java is a statically typed language. So the compiler is written in a way that it can verify types related errors during compile time. While python being a dynamic language, types are not known until a program is run. So in a way, python compiler is dumb (or, less strict). But there indeed is a compile step involved when a python program is run. You might have seen python bytecode files with .pyc extension. Here is how you can see bytecode for a given python program. # Create a Hello World spatel1-mn1:tmp spatel1$ echo \"print('hello world')\" > hello_world.py # Making sure it runs spatel1-mn1:tmp spatel1$ python3 hello_world.py hello world # The bytecode of the given program spatel1-mn1:tmp spatel1$ python -m dis hello_world.py 1 0 LOAD_NAME 0 (print) 2 LOAD_CONST 0 ('hello world') 4 CALL_FUNCTION 1 6 POP_TOP 8 LOAD_CONST 1 (None) 10 RETURN_VALUE Read more about dis module here Now coming to C/C++, there of course is a compiler. But the output is different than what java/python compiler would produce. Compiling a C program would produce what we also know as machine code . As opposed to bytecode.","title":"Compiled vs. Interpreted"},{"location":"python_web/intro/#running-the-programs","text":"We know compilation is involved in all 3 languages we are discussing. Just that the compilers are different in nature and they output different types of content. In case of C/C++, the output is machine code which can be directly read by your operating system. When you execute that program, your OS will know how exactly to run it. But this is not the case with bytecode. Those bytecodes are language specific. Python has its own set of bytecode defined (more in dis module) and so does java. So naturally, your operating system will not know how to run it. To run this bytecode, we have something called Virtual Machines. Ie: The JVM or the Python VM (CPython, Jython). These so called Virtual Machines are the programs which can read the bytecode and run it on a given operating system. Python has multiple VMs available. Cpython is a python VM implemented in C language, similarly Jython is a Java implementation of python VM. At the end of the day, what they should be capable of is to understand python language syntax, be able to compile it to bytecode and be able to run that bytecode. You can implement a python VM in any language! (And people do so, just because it can be done) The Operating System +------------------------------------+ | | | | | | hello_world.py Python bytecode | Python VM Process | | | +----------------+ +----------------+ | +----------------+ | |print(... | COMPILE |LOAD_CONST... | | |Reads bytecode | | | +--------------->+ +------------------->+line by line | | | | | | | |and executes. | | | | | | | | | | +----------------+ +----------------+ | +----------------+ | | | | | | | hello_world.c OS Specific machinecode | A New Process | | | +----------------+ +----------------+ | +----------------+ | |void main() { | COMPILE | binary contents| | | binary contents| | | +--------------->+ +------------------->+ | | | | | | | | | | | | | | | | | | +----------------+ +----------------+ | +----------------+ | | (binary contents | | runs as is) | | | | | +------------------------------------+ Two things to note for above diagram: Generally, when we run a python program, a python VM process is started which reads the python source code, compiles it to byte code and run it in a single step. Compiling is not a separate step. Shown only for illustration purpose. Binaries generated for C like languages are not exactly run as is. Since there are multiple types of binaries (eg: ELF), there are more complicated steps involved in order to run a binary but we will not go into that since all that is done at OS level.","title":"Running The Programs"},{"location":"python_web/python-concepts/","text":"Some Python Concepts Though you are expected to know python and its syntax at basic level, let us discuss some fundamental concepts that will help you understand the python language better. Everything in Python is an object. That includes the functions, lists, dicts, classes, modules, a running function (instance of function definition), everything. In the CPython, it would mean there is an underlying struct variable for each object. In python's current execution context, all the variables are stored in a dict. It'd be a string to object mapping. If you have a function and a float variable defined in the current context, here is how it is handled internally. >>> float_number=42.0 >>> def foo_func(): ... pass ... # NOTICE HOW VARIABLE NAMES ARE STRINGS, stored in a dict >>> locals() {'__name__': '__main__', '__doc__': None, '__package__': None, '__loader__': <class '_frozen_importlib.BuiltinImporter'>, '__spec__': None, '__annotations__': {}, '__builtins__': <module 'builtins' (built-in)>, 'float_number': 42.0, 'foo_func': <function foo_func at 0x1055847a0>} Python Functions Since functions too are objects, we can see what all attributes a function contains as following >>> def hello(name): ... print(f\"Hello, {name}!\") ... >>> dir(hello) ['__annotations__', '__call__', '__class__', '__closure__', '__code__', '__defaults__', '__delattr__', '__dict__', '__dir__', '__doc__', '__eq__', '__format__', '__ge__', '__get__', '__getattribute__', '__globals__', '__gt__', '__hash__', '__init__', '__init_subclass__', '__kwdefaults__', '__le__', '__lt__', '__module__', '__name__', '__ne__', '__new__', '__qualname__', '__reduce__', '__reduce_ex__', '__repr__', '__setattr__', '__sizeof__', '__str__', '__subclasshook__'] While there are a lot of them, let's look at some interesting ones globals This attribute, as the name suggests, has references of global variables. If you ever need to know what all global variables are in the scope of this function, this will tell you. See how the function start seeing the new variable in globals >>> hello.__globals__ {'__name__': '__main__', '__doc__': None, '__package__': None, '__loader__': <class '_frozen_importlib.BuiltinImporter'>, '__spec__': None, '__annotations__': {}, '__builtins__': <module 'builtins' (built-in)>, 'hello': <function hello at 0x7fe4e82554c0>} # adding new global variable >>> GLOBAL=\"g_val\" >>> hello.__globals__ {'__name__': '__main__', '__doc__': None, '__package__': None, '__loader__': <class '_frozen_importlib.BuiltinImporter'>, '__spec__': None, '__annotations__': {}, '__builtins__': <module 'builtins' (built-in)>, 'hello': <function hello at 0x7fe4e82554c0>, 'GLOBAL': 'g_val'} code This is an interesting one! As everything in python is an object, this includes the bytecode too. The compiled python bytecode is a python code object. Which is accessible via __code__ attribute here. A function has an associated code object which carries some interesting information. # the file in which function is defined # stdin here since this is run in an interpreter >>> hello.__code__.co_filename '<stdin>' # number of arguments the function takes >>> hello.__code__.co_argcount 1 # local variable names >>> hello.__code__.co_varnames ('name',) # the function code's compiled bytecode >>> hello.__code__.co_code b't\\x00d\\x01|\\x00\\x9b\\x00d\\x02\\x9d\\x03\\x83\\x01\\x01\\x00d\\x00S\\x00' There are more code attributes which you can enlist by >>> dir(hello.__code__) Decorators Related to functions, python has another feature called decorators. Let's see how that works, keeping everything is an object in mind. Here is a sample decorator: >>> def deco(func): ... def inner(): ... print(\"before\") ... func() ... print(\"after\") ... return inner ... >>> @deco ... def hello_world(): ... print(\"hello world\") ... >>> >>> hello_world() before hello world after Here @deco syntax is used to decorate the hello_world function. It is essentially same as doing >>> def hello_world(): ... print(\"hello world\") ... >>> hello_world = deco(hello_world) What goes inside the deco function might seem complex. Let's try to uncover it. Function hello_world is created It is passed to deco function deco create a new function This new function is calls hello_world function And does a couple other things deco returns the newly created function hello_world is replaced with above function Let's visualize it for better understanding BEFORE function_object (ID: 100) \"hello_world\" +--------------------+ + |print(\"hello_world\")| | | | +--------------> | | | | +--------------------+ WHAT DECORATOR DOES creates a new function (ID: 101) +---------------------------------+ |input arg: function with id: 100 | | | |print(\"before\") | |call function object with id 100 | |print(\"after\") | | | +---------------------------^-----+ | | AFTER | | | \"hello_world\" +-------------+ Note how the hello_world name points to a new function object but that new function object knows the reference (ID) of the original function. Some Gotchas While it is very quick to build prototypes in python and there are tons of libraries available, as the codebase complexity increases, type errors become more common and will get hard to deal with. (There are solutions to that problem like type annotations in python. Checkout mypy .) Because python is dynamically typed language, that means all types are determined at runtime. And that makes python run very slow compared to other statically typed languages. Python has something called GIL (global interpreter lock) which is a limiting factor for utilizing multiple CPI cores for parallel computation. Some weird things that python does: https://github.com/satwikkansal/wtfpython","title":"Some Python Concepts"},{"location":"python_web/python-concepts/#some-python-concepts","text":"Though you are expected to know python and its syntax at basic level, let us discuss some fundamental concepts that will help you understand the python language better. Everything in Python is an object. That includes the functions, lists, dicts, classes, modules, a running function (instance of function definition), everything. In the CPython, it would mean there is an underlying struct variable for each object. In python's current execution context, all the variables are stored in a dict. It'd be a string to object mapping. If you have a function and a float variable defined in the current context, here is how it is handled internally. >>> float_number=42.0 >>> def foo_func(): ... pass ... # NOTICE HOW VARIABLE NAMES ARE STRINGS, stored in a dict >>> locals() {'__name__': '__main__', '__doc__': None, '__package__': None, '__loader__': <class '_frozen_importlib.BuiltinImporter'>, '__spec__': None, '__annotations__': {}, '__builtins__': <module 'builtins' (built-in)>, 'float_number': 42.0, 'foo_func': <function foo_func at 0x1055847a0>}","title":"Some Python Concepts"},{"location":"python_web/python-concepts/#python-functions","text":"Since functions too are objects, we can see what all attributes a function contains as following >>> def hello(name): ... print(f\"Hello, {name}!\") ... >>> dir(hello) ['__annotations__', '__call__', '__class__', '__closure__', '__code__', '__defaults__', '__delattr__', '__dict__', '__dir__', '__doc__', '__eq__', '__format__', '__ge__', '__get__', '__getattribute__', '__globals__', '__gt__', '__hash__', '__init__', '__init_subclass__', '__kwdefaults__', '__le__', '__lt__', '__module__', '__name__', '__ne__', '__new__', '__qualname__', '__reduce__', '__reduce_ex__', '__repr__', '__setattr__', '__sizeof__', '__str__', '__subclasshook__'] While there are a lot of them, let's look at some interesting ones","title":"Python Functions"},{"location":"python_web/python-concepts/#globals","text":"This attribute, as the name suggests, has references of global variables. If you ever need to know what all global variables are in the scope of this function, this will tell you. See how the function start seeing the new variable in globals >>> hello.__globals__ {'__name__': '__main__', '__doc__': None, '__package__': None, '__loader__': <class '_frozen_importlib.BuiltinImporter'>, '__spec__': None, '__annotations__': {}, '__builtins__': <module 'builtins' (built-in)>, 'hello': <function hello at 0x7fe4e82554c0>} # adding new global variable >>> GLOBAL=\"g_val\" >>> hello.__globals__ {'__name__': '__main__', '__doc__': None, '__package__': None, '__loader__': <class '_frozen_importlib.BuiltinImporter'>, '__spec__': None, '__annotations__': {}, '__builtins__': <module 'builtins' (built-in)>, 'hello': <function hello at 0x7fe4e82554c0>, 'GLOBAL': 'g_val'}","title":"globals"},{"location":"python_web/python-concepts/#code","text":"This is an interesting one! As everything in python is an object, this includes the bytecode too. The compiled python bytecode is a python code object. Which is accessible via __code__ attribute here. A function has an associated code object which carries some interesting information. # the file in which function is defined # stdin here since this is run in an interpreter >>> hello.__code__.co_filename '<stdin>' # number of arguments the function takes >>> hello.__code__.co_argcount 1 # local variable names >>> hello.__code__.co_varnames ('name',) # the function code's compiled bytecode >>> hello.__code__.co_code b't\\x00d\\x01|\\x00\\x9b\\x00d\\x02\\x9d\\x03\\x83\\x01\\x01\\x00d\\x00S\\x00' There are more code attributes which you can enlist by >>> dir(hello.__code__)","title":"code"},{"location":"python_web/python-concepts/#decorators","text":"Related to functions, python has another feature called decorators. Let's see how that works, keeping everything is an object in mind. Here is a sample decorator: >>> def deco(func): ... def inner(): ... print(\"before\") ... func() ... print(\"after\") ... return inner ... >>> @deco ... def hello_world(): ... print(\"hello world\") ... >>> >>> hello_world() before hello world after Here @deco syntax is used to decorate the hello_world function. It is essentially same as doing >>> def hello_world(): ... print(\"hello world\") ... >>> hello_world = deco(hello_world) What goes inside the deco function might seem complex. Let's try to uncover it. Function hello_world is created It is passed to deco function deco create a new function This new function is calls hello_world function And does a couple other things deco returns the newly created function hello_world is replaced with above function Let's visualize it for better understanding BEFORE function_object (ID: 100) \"hello_world\" +--------------------+ + |print(\"hello_world\")| | | | +--------------> | | | | +--------------------+ WHAT DECORATOR DOES creates a new function (ID: 101) +---------------------------------+ |input arg: function with id: 100 | | | |print(\"before\") | |call function object with id 100 | |print(\"after\") | | | +---------------------------^-----+ | | AFTER | | | \"hello_world\" +-------------+ Note how the hello_world name points to a new function object but that new function object knows the reference (ID) of the original function.","title":"Decorators"},{"location":"python_web/python-concepts/#some-gotchas","text":"While it is very quick to build prototypes in python and there are tons of libraries available, as the codebase complexity increases, type errors become more common and will get hard to deal with. (There are solutions to that problem like type annotations in python. Checkout mypy .) Because python is dynamically typed language, that means all types are determined at runtime. And that makes python run very slow compared to other statically typed languages. Python has something called GIL (global interpreter lock) which is a limiting factor for utilizing multiple CPI cores for parallel computation. Some weird things that python does: https://github.com/satwikkansal/wtfpython","title":"Some Gotchas"},{"location":"python_web/python-web-flask/","text":"Python, Web and Flask Back in the old days, websites were simple. They were simple static html contents. A webserver would be listening on a defined port and according to the HTTP request received, it would read files from disk and return them in response. But since then, complexity has evolved and websites are now dynamic. Depending on the request, multiple operations need to be performed like reading from database or calling other API and finally returning some response (HTML data, JSON content etc.) Since serving web requests is no longer a simple task like reading files from disk and return contents, we need to process each http request, perform some operations programmatically and construct a response. Sockets Though we have frameworks like flask, HTTP is still a protocol that works over TCP protocol. So let us setup a TCP server and send an HTTP request and inspect the request's payload. Note that this is not a tutorial on socket programming but what we are doing here is inspecting HTTP protocol at its ground level and look at what its contents look like. (Ref: Socket Programming in Python (Guide) on RealPython ) import socket HOST = '127.0.0.1' # Standard loopback interface address (localhost) PORT = 65432 # Port to listen on (non-privileged ports are > 1023) with socket.socket(socket.AF_INET, socket.SOCK_STREAM) as s: s.bind((HOST, PORT)) s.listen() conn, addr = s.accept() with conn: print('Connected by', addr) while True: data = conn.recv(1024) if not data: break print(data) Then we open localhost:65432 in our web browser and following would be the output: Connected by ('127.0.0.1', 54719) b'GET / HTTP/1.1\\r\\nHost: localhost:65432\\r\\nConnection: keep-alive\\r\\nDNT: 1\\r\\nUpgrade-Insecure-Requests: 1\\r\\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.83 Safari/537.36 Edg/85.0.564.44\\r\\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\\r\\nSec-Fetch-Site: none\\r\\nSec-Fetch-Mode: navigate\\r\\nSec-Fetch-User: ?1\\r\\nSec-Fetch-Dest: document\\r\\nAccept-Encoding: gzip, deflate, br\\r\\nAccept-Language: en-US,en;q=0.9\\r\\n\\r\\n' Examine closely and the content will look like the HTTP protocol's format. ie: HTTP_METHOD URI_PATH HTTP_VERSION HEADERS_SEPARATED_BY_SEPARATOR So though it's a blob of bytes, knowing http protocol specification , you can parse that string (ie: split by \\r\\n ) and get meaningful information out of it. Flask Flask, and other such frameworks does pretty much what we just discussed in the last section (with added more sophistication). They listen on a port on a TCP socket, receive an HTTP request, parse the data according to protocol format and make it available to you in a convenient manner. ie: you can access headers in flask by request.headers which is made available to you by splitting above payload by /r/n , as defined in http protocol. Another example: we register routes in flask by @app.route(\"/hello\") . What flask will do is maintain a registry internally which will map /hello with the function you decorated with. Now whenever a request comes with the /hello route (second component in the first line, split by space), flask calls the registered function and returns whatever the function returned. Same with all other web frameworks in other languages too. They all work on similar principles. What they basically do is understand the HTTP protocol, parses the HTTP request data and gives us programmers a nice interface to work with HTTP requests. Not so much of magic, innit?","title":"Python, Web and Flask"},{"location":"python_web/python-web-flask/#python-web-and-flask","text":"Back in the old days, websites were simple. They were simple static html contents. A webserver would be listening on a defined port and according to the HTTP request received, it would read files from disk and return them in response. But since then, complexity has evolved and websites are now dynamic. Depending on the request, multiple operations need to be performed like reading from database or calling other API and finally returning some response (HTML data, JSON content etc.) Since serving web requests is no longer a simple task like reading files from disk and return contents, we need to process each http request, perform some operations programmatically and construct a response.","title":"Python, Web and Flask"},{"location":"python_web/python-web-flask/#sockets","text":"Though we have frameworks like flask, HTTP is still a protocol that works over TCP protocol. So let us setup a TCP server and send an HTTP request and inspect the request's payload. Note that this is not a tutorial on socket programming but what we are doing here is inspecting HTTP protocol at its ground level and look at what its contents look like. (Ref: Socket Programming in Python (Guide) on RealPython ) import socket HOST = '127.0.0.1' # Standard loopback interface address (localhost) PORT = 65432 # Port to listen on (non-privileged ports are > 1023) with socket.socket(socket.AF_INET, socket.SOCK_STREAM) as s: s.bind((HOST, PORT)) s.listen() conn, addr = s.accept() with conn: print('Connected by', addr) while True: data = conn.recv(1024) if not data: break print(data) Then we open localhost:65432 in our web browser and following would be the output: Connected by ('127.0.0.1', 54719) b'GET / HTTP/1.1\\r\\nHost: localhost:65432\\r\\nConnection: keep-alive\\r\\nDNT: 1\\r\\nUpgrade-Insecure-Requests: 1\\r\\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.83 Safari/537.36 Edg/85.0.564.44\\r\\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\\r\\nSec-Fetch-Site: none\\r\\nSec-Fetch-Mode: navigate\\r\\nSec-Fetch-User: ?1\\r\\nSec-Fetch-Dest: document\\r\\nAccept-Encoding: gzip, deflate, br\\r\\nAccept-Language: en-US,en;q=0.9\\r\\n\\r\\n' Examine closely and the content will look like the HTTP protocol's format. ie: HTTP_METHOD URI_PATH HTTP_VERSION HEADERS_SEPARATED_BY_SEPARATOR So though it's a blob of bytes, knowing http protocol specification , you can parse that string (ie: split by \\r\\n ) and get meaningful information out of it.","title":"Sockets"},{"location":"python_web/python-web-flask/#flask","text":"Flask, and other such frameworks does pretty much what we just discussed in the last section (with added more sophistication). They listen on a port on a TCP socket, receive an HTTP request, parse the data according to protocol format and make it available to you in a convenient manner. ie: you can access headers in flask by request.headers which is made available to you by splitting above payload by /r/n , as defined in http protocol. Another example: we register routes in flask by @app.route(\"/hello\") . What flask will do is maintain a registry internally which will map /hello with the function you decorated with. Now whenever a request comes with the /hello route (second component in the first line, split by space), flask calls the registered function and returns whatever the function returned. Same with all other web frameworks in other languages too. They all work on similar principles. What they basically do is understand the HTTP protocol, parses the HTTP request data and gives us programmers a nice interface to work with HTTP requests. Not so much of magic, innit?","title":"Flask"},{"location":"python_web/sre-conclusion/","text":"Conclusion Scaling The App The design and development is just a part of the journey. We will need to setup continuous integration and continuous delivery pipelines sooner or later. And we have to deploy this app somewhere. Initially we can start with deploying this app on one virtual machine on any cloud provider. But this is a Single point of failure which is something we never allow as an SRE (or even as an engineer). So an improvement here can be having multiple instances of applications deployed behind a load balancer. This certainly prevents problems of one machine going down. Scaling here would mean adding more instances behind the load balancer. But this is scalable upto only a certain point. After that, other bottlenecks in the system will start appearing. ie: DB will become the bottleneck, or perhaps the load balancer itself. How do you know what is the bottleneck? You need to have observability into each aspects of the application architecture. Only after you have metrics, you will be able to know what is going wrong where. What gets measured, gets fixed! Get deeper insights into scaling from School Of SRE's Scalability module and post going through it, apply your learnings and takeaways to this app. Think how will we make this app geographically distributed and highly available and scalable. Monitoring Strategy Once we have our application deployed. It will be working ok. But not forever. Reliability is in the title of our job and we make systems reliable by making the design in a certain way. But things still will go down. Machines will fail. Disks will behave weirdly. Buggy code will get pushed to production. And all these possible scenarios will make the system less reliable. So what do we do? We monitor! We keep an eye on the system's health and if anything is not going as expected, we want ourselves to get alerted. Now let's think in terms of the given url shortening app. We need to monitor it. And we would want to get notified in case something goes wrong. But we first need to decide what is that something that we want to keep an eye on. Since it's a web app serving HTTP requests, we want to keep an eye on HTTP Status codes and latencies Request volume again is a good candidate, if the app is receiving an unusual amount of traffic, something might be off. We also want to keep an eye on the database so depending on the database solution chosen. Query times, volumes, disk usage etc. Finally, there also needs to be some external monitoring which runs periodic tests from devices outside of your data centers. This emulates customers and ensures that from customer point of view, the system is working as expected. Applications in SRE role In the world of SRE, python is a widely used language. For small scripts and tooling developed for various purposes. Since tooling developed by SRE works with critical pieces of infrastructure and has great power (to bring things down), it is important to know what you are doing while using a programming language and its features. Also it is equally important to know the language and its characteristics while debugging the issues. As an SRE having a deeper understanding of python language, it has helped me a lot to debug very sneaky bugs and be generally more aware and informed while making certain design decisions. While developing tools may or may not be part of SRE job, supporting tools or services is more likely to be a daily duty. Building an application or tool is just a small part of productionization. While there is certainly that goes in the design of the application itself to make it more robust, as an SRE you are responsible for its reliability and stability once it is deployed and running. And to ensure that, you\u2019d need to understand the application first and then come up with a strategy to monitor it properly and be prepared for various failure scenarios. Optional Exercises Make a decorator that will cache function return values depending on input parameters. Host the URL shortening app on any cloud provider. Setup monitoring using many of the tools available like catchpoint, datadog etc. Create a minimal flask-like framework on top of TCP sockets. Conclusion This module, in the first part, aims to make you more aware of the things that will happen when you choose python as your programming language and what happens when you run a python program. With the knowledge of how python handles things internally as objects, lot of seemingly magic things in python will start to make more sense. The second part will first explain how a framework like flask works using the existing knowledge of protocols like TCP and HTTP. It then touches the whole lifecycle of an application development lifecycle including the SRE parts of it. While the design and areas in architecture considered will not be exhaustive, it will give a good overview of things that are also important being an SRE and why they are important.","title":"Conclusion"},{"location":"python_web/sre-conclusion/#conclusion","text":"","title":"Conclusion"},{"location":"python_web/sre-conclusion/#scaling-the-app","text":"The design and development is just a part of the journey. We will need to setup continuous integration and continuous delivery pipelines sooner or later. And we have to deploy this app somewhere. Initially we can start with deploying this app on one virtual machine on any cloud provider. But this is a Single point of failure which is something we never allow as an SRE (or even as an engineer). So an improvement here can be having multiple instances of applications deployed behind a load balancer. This certainly prevents problems of one machine going down. Scaling here would mean adding more instances behind the load balancer. But this is scalable upto only a certain point. After that, other bottlenecks in the system will start appearing. ie: DB will become the bottleneck, or perhaps the load balancer itself. How do you know what is the bottleneck? You need to have observability into each aspects of the application architecture. Only after you have metrics, you will be able to know what is going wrong where. What gets measured, gets fixed! Get deeper insights into scaling from School Of SRE's Scalability module and post going through it, apply your learnings and takeaways to this app. Think how will we make this app geographically distributed and highly available and scalable.","title":"Scaling The App"},{"location":"python_web/sre-conclusion/#monitoring-strategy","text":"Once we have our application deployed. It will be working ok. But not forever. Reliability is in the title of our job and we make systems reliable by making the design in a certain way. But things still will go down. Machines will fail. Disks will behave weirdly. Buggy code will get pushed to production. And all these possible scenarios will make the system less reliable. So what do we do? We monitor! We keep an eye on the system's health and if anything is not going as expected, we want ourselves to get alerted. Now let's think in terms of the given url shortening app. We need to monitor it. And we would want to get notified in case something goes wrong. But we first need to decide what is that something that we want to keep an eye on. Since it's a web app serving HTTP requests, we want to keep an eye on HTTP Status codes and latencies Request volume again is a good candidate, if the app is receiving an unusual amount of traffic, something might be off. We also want to keep an eye on the database so depending on the database solution chosen. Query times, volumes, disk usage etc. Finally, there also needs to be some external monitoring which runs periodic tests from devices outside of your data centers. This emulates customers and ensures that from customer point of view, the system is working as expected.","title":"Monitoring Strategy"},{"location":"python_web/sre-conclusion/#applications-in-sre-role","text":"In the world of SRE, python is a widely used language. For small scripts and tooling developed for various purposes. Since tooling developed by SRE works with critical pieces of infrastructure and has great power (to bring things down), it is important to know what you are doing while using a programming language and its features. Also it is equally important to know the language and its characteristics while debugging the issues. As an SRE having a deeper understanding of python language, it has helped me a lot to debug very sneaky bugs and be generally more aware and informed while making certain design decisions. While developing tools may or may not be part of SRE job, supporting tools or services is more likely to be a daily duty. Building an application or tool is just a small part of productionization. While there is certainly that goes in the design of the application itself to make it more robust, as an SRE you are responsible for its reliability and stability once it is deployed and running. And to ensure that, you\u2019d need to understand the application first and then come up with a strategy to monitor it properly and be prepared for various failure scenarios.","title":"Applications in SRE role"},{"location":"python_web/sre-conclusion/#optional-exercises","text":"Make a decorator that will cache function return values depending on input parameters. Host the URL shortening app on any cloud provider. Setup monitoring using many of the tools available like catchpoint, datadog etc. Create a minimal flask-like framework on top of TCP sockets.","title":"Optional Exercises"},{"location":"python_web/sre-conclusion/#conclusion_1","text":"This module, in the first part, aims to make you more aware of the things that will happen when you choose python as your programming language and what happens when you run a python program. With the knowledge of how python handles things internally as objects, lot of seemingly magic things in python will start to make more sense. The second part will first explain how a framework like flask works using the existing knowledge of protocols like TCP and HTTP. It then touches the whole lifecycle of an application development lifecycle including the SRE parts of it. While the design and areas in architecture considered will not be exhaustive, it will give a good overview of things that are also important being an SRE and why they are important.","title":"Conclusion"},{"location":"python_web/url-shorten-app/","text":"The URL Shortening App Let's build a very simple URL shortening app using flask and try to incorporate all aspects of the development process including the reliability aspects. We will not be building the UI and we will come up with a minimal set of API that will be enough for the app to function well. Design We don't jump directly to coding. First thing we do is gather requirements. Come up with an approach. Have the approach/design reviewed by peers. Evolve, iterate, document the decisions and tradeoffs. And then finally implement. While we will not do the full blown design document here, we will raise certain questions here that are important to the design. 1. High Level Operations and API Endpoints Since it's a URL shortening app, we will need an API for generating the shorten link given an original link. And an API/Endpoint which will accept the shorten link and redirect to original URL. We are not including the user aspect of the app to keep things minimal. These two API should make app functional and usable by anyone. 2. How to shorten? Given a url, we will need to generate a shortened version of it. One approach could be using random characters for each link. Another thing that can be done is to use some sort of hashing algorithm. The benefit here is we will reuse the same hash for the same link. ie: if lot of people are shortening https://www.linkedin.com they all will have the same value, compared to multiple entries in DB if chosen random characters. What about hash collisions? Even in random characters approach, though there is a less probability, hash collisions can happen. And we need to be mindful of them. In that case we might want to prepend/append the string with some random value to avoid conflict. Also, choice of hash algorithm matters. We will need to analyze algorithms. Their CPU requirements and their characteristics. Choose one that suits the most. 3. Is URL Valid? Given a URL to shorten, how do we verify if the URL is valid? Do we even verify or validate? One basic check that can be done is see if the URL matches a regex of a URL. To go even further we can try opening/visiting the URL. But there are certain gotchas here. We need to define success criteria. ie: HTTP 200 means it is valid. What is the URL is in private network? What if URL is temporarily down? 4. Storage Finally, storage. Where will we store the data that we will generate over time? There are multiple database solutions available and we will need to choose the one that suits this app the most. Relational database like MySQL would be a fair choice but be sure to checkout School of SRE's database section for deeper insights into making a more informed decision. 5. Other We are not accounting for users into our app and other possible features like rate limiting, customized links etc but it will eventually come up with time. Depending on the requirements, they too might need to get incorporated. The minimal working code is given below for reference but I'd encourage you to come up with your own. from flask import Flask, redirect, request from hashlib import md5 app = Flask(\"url_shortener\") mapping = {} @app.route(\"/shorten\", methods=[\"POST\"]) def shorten(): global mapping payload = request.json if \"url\" not in payload: return \"Missing URL Parameter\", 400 # TODO: check if URL is valid hash_ = md5() hash_.update(payload[\"url\"].encode()) digest = hash_.hexdigest()[:5] # limiting to 5 chars. Less the limit more the chances of collission if digest not in mapping: mapping[digest] = payload[\"url\"] return f\"Shortened: r/{digest}\\n\" else: # TODO: check for hash collission return f\"Already exists: r/{digest}\\n\" @app.route(\"/r/<hash_>\") def redirect_(hash_): if hash_ not in mapping: return \"URL Not Found\", 404 return redirect(mapping[hash_]) if __name__ == \"__main__\": app.run(debug=True) \"\"\" OUTPUT: ===> SHORTENING spatel1-mn1:tmp spatel1$ curl localhost:5000/shorten -H \"content-type: application/json\" --data '{\"url\":\"https://linkedin.com\"}' Shortened: r/a62a4 ===> REDIRECTING, notice the response code 302 and the location header spatel1-mn1:tmp spatel1$ curl localhost:5000/r/a62a4 -v * Uses proxy env variable NO_PROXY == '127.0.0.1' * Trying ::1... * TCP_NODELAY set * Connection failed * connect to ::1 port 5000 failed: Connection refused * Trying 127.0.0.1... * TCP_NODELAY set * Connected to localhost (127.0.0.1) port 5000 (#0) > GET /r/a62a4 HTTP/1.1 > Host: localhost:5000 > User-Agent: curl/7.64.1 > Accept: */* > * HTTP 1.0, assume close after body < HTTP/1.0 302 FOUND < Content-Type: text/html; charset=utf-8 < Content-Length: 247 < Location: https://linkedin.com < Server: Werkzeug/0.15.4 Python/3.7.7 < Date: Tue, 27 Oct 2020 09:37:12 GMT < <!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 3.2 Final//EN\"> <title>Redirecting...</title> <h1>Redirecting...</h1> * Closing connection 0 <p>You should be redirected automatically to target URL: <a href=\"https://linkedin.com\">https://linkedin.com</a>. If not click the link. \"\"\"","title":"The URL Shortening App"},{"location":"python_web/url-shorten-app/#the-url-shortening-app","text":"Let's build a very simple URL shortening app using flask and try to incorporate all aspects of the development process including the reliability aspects. We will not be building the UI and we will come up with a minimal set of API that will be enough for the app to function well.","title":"The URL Shortening App"},{"location":"python_web/url-shorten-app/#design","text":"We don't jump directly to coding. First thing we do is gather requirements. Come up with an approach. Have the approach/design reviewed by peers. Evolve, iterate, document the decisions and tradeoffs. And then finally implement. While we will not do the full blown design document here, we will raise certain questions here that are important to the design.","title":"Design"},{"location":"python_web/url-shorten-app/#1-high-level-operations-and-api-endpoints","text":"Since it's a URL shortening app, we will need an API for generating the shorten link given an original link. And an API/Endpoint which will accept the shorten link and redirect to original URL. We are not including the user aspect of the app to keep things minimal. These two API should make app functional and usable by anyone.","title":"1. High Level Operations and API Endpoints"},{"location":"python_web/url-shorten-app/#2-how-to-shorten","text":"Given a url, we will need to generate a shortened version of it. One approach could be using random characters for each link. Another thing that can be done is to use some sort of hashing algorithm. The benefit here is we will reuse the same hash for the same link. ie: if lot of people are shortening https://www.linkedin.com they all will have the same value, compared to multiple entries in DB if chosen random characters. What about hash collisions? Even in random characters approach, though there is a less probability, hash collisions can happen. And we need to be mindful of them. In that case we might want to prepend/append the string with some random value to avoid conflict. Also, choice of hash algorithm matters. We will need to analyze algorithms. Their CPU requirements and their characteristics. Choose one that suits the most.","title":"2. How to shorten?"},{"location":"python_web/url-shorten-app/#3-is-url-valid","text":"Given a URL to shorten, how do we verify if the URL is valid? Do we even verify or validate? One basic check that can be done is see if the URL matches a regex of a URL. To go even further we can try opening/visiting the URL. But there are certain gotchas here. We need to define success criteria. ie: HTTP 200 means it is valid. What is the URL is in private network? What if URL is temporarily down?","title":"3. Is URL Valid?"},{"location":"python_web/url-shorten-app/#4-storage","text":"Finally, storage. Where will we store the data that we will generate over time? There are multiple database solutions available and we will need to choose the one that suits this app the most. Relational database like MySQL would be a fair choice but be sure to checkout School of SRE's database section for deeper insights into making a more informed decision.","title":"4. Storage"},{"location":"python_web/url-shorten-app/#5-other","text":"We are not accounting for users into our app and other possible features like rate limiting, customized links etc but it will eventually come up with time. Depending on the requirements, they too might need to get incorporated. The minimal working code is given below for reference but I'd encourage you to come up with your own. from flask import Flask, redirect, request from hashlib import md5 app = Flask(\"url_shortener\") mapping = {} @app.route(\"/shorten\", methods=[\"POST\"]) def shorten(): global mapping payload = request.json if \"url\" not in payload: return \"Missing URL Parameter\", 400 # TODO: check if URL is valid hash_ = md5() hash_.update(payload[\"url\"].encode()) digest = hash_.hexdigest()[:5] # limiting to 5 chars. Less the limit more the chances of collission if digest not in mapping: mapping[digest] = payload[\"url\"] return f\"Shortened: r/{digest}\\n\" else: # TODO: check for hash collission return f\"Already exists: r/{digest}\\n\" @app.route(\"/r/<hash_>\") def redirect_(hash_): if hash_ not in mapping: return \"URL Not Found\", 404 return redirect(mapping[hash_]) if __name__ == \"__main__\": app.run(debug=True) \"\"\" OUTPUT: ===> SHORTENING spatel1-mn1:tmp spatel1$ curl localhost:5000/shorten -H \"content-type: application/json\" --data '{\"url\":\"https://linkedin.com\"}' Shortened: r/a62a4 ===> REDIRECTING, notice the response code 302 and the location header spatel1-mn1:tmp spatel1$ curl localhost:5000/r/a62a4 -v * Uses proxy env variable NO_PROXY == '127.0.0.1' * Trying ::1... * TCP_NODELAY set * Connection failed * connect to ::1 port 5000 failed: Connection refused * Trying 127.0.0.1... * TCP_NODELAY set * Connected to localhost (127.0.0.1) port 5000 (#0) > GET /r/a62a4 HTTP/1.1 > Host: localhost:5000 > User-Agent: curl/7.64.1 > Accept: */* > * HTTP 1.0, assume close after body < HTTP/1.0 302 FOUND < Content-Type: text/html; charset=utf-8 < Content-Length: 247 < Location: https://linkedin.com < Server: Werkzeug/0.15.4 Python/3.7.7 < Date: Tue, 27 Oct 2020 09:37:12 GMT < <!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 3.2 Final//EN\"> <title>Redirecting...</title> <h1>Redirecting...</h1> * Closing connection 0 <p>You should be redirected automatically to target URL: <a href=\"https://linkedin.com\">https://linkedin.com</a>. If not click the link. \"\"\"","title":"5. Other"},{"location":"security/conclusion/","text":"Conclusion Now that you have completed this course on Security you are now aware of the possible security threats to computer systems & networks. Not only that, but you are now better able to protect your systems as well as recommend security measures to others. This course provides fundamental everyday knowledge on security domain which will also help you keep security at the top of your priority. Other Resources Some books that would be a great resource Holistic Info-Sec for Web Developers https://holisticinfosecforwebdevelopers.com/ - Free and downloadable book series with very broad and deep coverage of what Web Developers and DevOps Engineers need to know in order to create robust, reliable, maintainable and secure software, networks and other, that are delivered continuously, on time, with no nasty surprises Docker Security - Quick Reference: For DevOps Engineers https://holisticinfosecforwebdevelopers.com/ - A book on understanding the Docker security defaults, how to improve them (theory and practical), along with many tools and techniques. How to Hack Like a Legend https://amzn.to/2uWh1Up - A hacker\u2019s tale breaking into a secretive offshore company, Sparc Flow, 2018 How to Investigate Like a Rockstar https://books2read.com/u/4jDWoZ - Live a real crisis to master the secrets of forensic analysis, Sparc Flow, 2017 Real World Cryptography https://www.manning.com/books/real-world-cryptography - This early-access book teaches you applied cryptographic techniques to understand and apply security at every level of your systems and applications. AWS Security https://www.manning.com/books/aws-security?utm_source=github&utm_medium=organic&utm_campaign=book_shields_aws_1_31_20 - This early-access book covers commong AWS security issues and best practices for access policies, data protection, auditing, continuous monitoring, and incident response. Post Training asks/ Further Reading CTF Events like : https://github.com/apsdehal/awesome-ctf Penetration Testing : https://github.com/enaqx/awesome-pentest Threat Intelligence : https://github.com/hslatman/awesome-threat-intelligence Threat Detection & Hunting : https://github.com/0x4D31/awesome-threat-detection Web Security: https://github.com/qazbnm456/awesome-web-security Building Secure and Reliable Systems : https://landing.google.com/sre/resources/foundationsandprinciples/srs-book/","title":"Conclusion"},{"location":"security/conclusion/#conclusion","text":"Now that you have completed this course on Security you are now aware of the possible security threats to computer systems & networks. Not only that, but you are now better able to protect your systems as well as recommend security measures to others. This course provides fundamental everyday knowledge on security domain which will also help you keep security at the top of your priority.","title":"Conclusion"},{"location":"security/conclusion/#other-resources","text":"Some books that would be a great resource Holistic Info-Sec for Web Developers https://holisticinfosecforwebdevelopers.com/ - Free and downloadable book series with very broad and deep coverage of what Web Developers and DevOps Engineers need to know in order to create robust, reliable, maintainable and secure software, networks and other, that are delivered continuously, on time, with no nasty surprises Docker Security - Quick Reference: For DevOps Engineers https://holisticinfosecforwebdevelopers.com/ - A book on understanding the Docker security defaults, how to improve them (theory and practical), along with many tools and techniques. How to Hack Like a Legend https://amzn.to/2uWh1Up - A hacker\u2019s tale breaking into a secretive offshore company, Sparc Flow, 2018 How to Investigate Like a Rockstar https://books2read.com/u/4jDWoZ - Live a real crisis to master the secrets of forensic analysis, Sparc Flow, 2017 Real World Cryptography https://www.manning.com/books/real-world-cryptography - This early-access book teaches you applied cryptographic techniques to understand and apply security at every level of your systems and applications. AWS Security https://www.manning.com/books/aws-security?utm_source=github&utm_medium=organic&utm_campaign=book_shields_aws_1_31_20 - This early-access book covers commong AWS security issues and best practices for access policies, data protection, auditing, continuous monitoring, and incident response.","title":"Other Resources"},{"location":"security/conclusion/#post-training-asks-further-reading","text":"CTF Events like : https://github.com/apsdehal/awesome-ctf Penetration Testing : https://github.com/enaqx/awesome-pentest Threat Intelligence : https://github.com/hslatman/awesome-threat-intelligence Threat Detection & Hunting : https://github.com/0x4D31/awesome-threat-detection Web Security: https://github.com/qazbnm456/awesome-web-security Building Secure and Reliable Systems : https://landing.google.com/sre/resources/foundationsandprinciples/srs-book/","title":"Post Training asks/ Further Reading"},{"location":"security/fundamentals/","text":"Part I: Fundamentals Introduction to Security Overview for SRE If you look closely, both Site Reliability Engineering and Security Engineering are concerned with keeping a system usable. Issues like broken releases, capacity shortages, and misconfigurations can make a system unusable (at least temporarily). Security or privacy incidents that break the trust of users also undermine the usefulness of a system. Consequently, system security should be top of mind for SREs. SREs should be involved in both significant design discussions and actual system changes. They have quite a big role in System design & hence are quite sometimes the first line of defense. SRE\u2019s help in preventing bad design & implementations which can affect the overall security of the infrastructure. Successfully designing, implementing, and maintaining systems requires a commitment to the full system lifecycle . This commitment is possible only when security and reliability are central elements in the architecture of systems. Core Pillars of Information Security : Confidentiality \u2013 only allow access to data for which the user is permitted Integrity \u2013 ensure data is not tampered or altered by unauthorized users Availability \u2013 ensure systems and data are available to authorized users when they need it Thinking like a Security Engineer When starting a new application or re-factoring an existing application, you should consider each functional feature, and consider: Is the process surrounding this feature as safe as possible? In other words, is this a flawed process? If I were evil, how would I abuse this feature? Or more specifically failing to address how a feature can be abused can cause design flaws. Is the feature required to be on by default? If so, are there limits or options that could help reduce the risk from this feature? Security Principles By OWASP (Open Web Application Security Project) Minimize attack surface area : Every feature that is added to an application adds a certain amount of risk to the overall application. The aim for secure development is to reduce the overall risk by reducing the attack surface area. For example, a web application implements online help with a search function. The search function may be vulnerable to SQL injection attacks. If the help feature was limited to authorized users, the attack likelihood is reduced. If the help feature\u2019s search function was gated through centralized data validation routines, the ability to perform SQL injection is dramatically reduced. However, if the help feature was re-written to eliminate the search function (through better user interface, for example), this almost eliminates the attack surface area, even if the help feature was available to the Internet at large. Establish secure defaults: There are many ways to deliver an \u201cout of the box\u201d experience for users. However, by default, the experience should be secure, and it should be up to the user to reduce their security \u2013 if they are allowed. For example, by default, password aging and complexity should be enabled. Users might be allowed to turn these two features off to simplify their use of the application and increase their risk. Default Passwords of routers, IOT devices should be changed Principle of Least privilege The principle of least privilege recommends that accounts have the least amount of privilege required to perform their business processes. This encompasses user rights, resource permissions such as CPU limits, memory, network, and file system permissions. For example, if a middleware server only requires access to the network, read access to a database table, and the ability to write to a log, this describes all the permissions that should be granted. Under no circumstances should the middleware be granted administrative privileges. Principle of Defense in depth The principle of defense in depth suggests that where one control would be reasonable, more controls that approach risks in different fashions are better. Controls, when used in-depth, can make severe vulnerabilities extraordinarily difficult to exploit and thus unlikely to occur. With secure coding, this may take the form of tier-based validation, centralized auditing controls, and requiring users to be logged on all pages. For example, a flawed administrative interface is unlikely to be vulnerable to an anonymous attack if it correctly gates access to production management networks, checks for administrative user authorization, and logs all access. Fail securely Applications regularly fail to process transactions for many reasons. How they fail can determine if an application is secure or not. ``` is_admin = true; try { code_which_may_faile(); is_admin = is_user_assigned_role(\"Adminstrator\"); } catch (Exception err) { log.error(err.toString()); } ``` - If either codeWhichMayFail() or isUserInRole fails or throws an exception, the user is an admin by default. This is obviously a security risk. Don\u2019t trust services Many organizations utilize the processing capabilities of third-party partners, who more than likely have different security policies and posture than you. It is unlikely that you can influence or control any external third party, whether they are home users or major suppliers or partners. Therefore, the implicit trust of externally run systems is not warranted. All external systems should be treated in a similar fashion. For example, a loyalty program provider provides data that is used by Internet Banking, providing the number of reward points and a small list of potential redemption items. However, the data should be checked to ensure that it is safe to display to end-users, and that the reward points are a positive number, and not improbably large. Separation of duties The key to fraud control is the separation of duties. For example, someone who requests a computer cannot also sign for it, nor should they directly receive the computer. This prevents the user from requesting many computers and claiming they never arrived. Certain roles have different levels of trust than normal users. In particular, administrators are different from normal users. In general, administrators should not be users of the application. For example, an administrator should be able to turn the system on or off, set password policy but shouldn\u2019t be able to log on to the storefront as a super privileged user, such as being able to \u201cbuy\u201d goods on behalf of other users. Avoid security by obscurity Security through obscurity is a weak security control, and nearly always fails when it is the only control. This is not to say that keeping secrets is a bad idea, it simply means that the security of systems should not be reliant upon keeping details hidden. For example, the security of an application should not rely upon knowledge of the source code being kept secret. The security should rely upon many other factors, including reasonable password policies, defense in depth, business transaction limits, solid network architecture, and fraud, and audit controls. A practical example is Linux. Linux\u2019s source code is widely available, and yet when properly secured, Linux is a secure and robust operating system. Keep security simple Attack surface area and simplicity go hand in hand. Certain software engineering practices prefer overly complex approaches to what would otherwise be a relatively straightforward and simple design. Developers should avoid the use of double negatives and complex architectures when a simpler approach would be faster and simpler. For example, although it might be fashionable to have a slew of singleton entity beans running on a separate middleware server, it is more secure and faster to simply use global variables with an appropriate mutex mechanism to protect against race conditions. Fix security issues correctly Once a security issue has been identified, it is important to develop a test for it and to understand the root cause of the issue. When design patterns are used, it is likely that the security issue is widespread amongst all codebases, so developing the right fix without introducing regressions is essential. For example, a user has found that they can see another user\u2019s balance by adjusting their cookie. The fix seems to be relatively straightforward, but as the cookie handling code is shared among all applications, a change to just one application will trickle through to all other applications. The fix must, therefore, be tested on all affected applications. Reliability & Security Reliability and security are both crucial components of a truly trustworthy system,but building systems that are both reliable and secure is difficult. While the requirements for reliability and security share many common properties, they also require different design considerations. It is easy to miss the subtle interplay between reliability and security that can cause unexpected outcomes Ex: A password management application failure was triggered by a reliability problem i.e poor load-balancing and load-shedding strategies and its recovery was later complicated by multiple measures (HSM mechanism which needs to be plugged into server racks , which works as an authentication & the HSM token supposedly locked inside a case.. & the problem can be further elongated ) designed to increase the security of the system. Authentication vs Authorization Authentication is the act of validating that users are who they claim to be. Passwords are the most common authentication factor\u2014if a user enters the correct password, the system assumes the identity is valid and grants access. Other technologies such as One-Time Pins, authentication apps, and even biometrics can also be used to authenticate identity. In some instances, systems require the successful verification of more than one factor before granting access. This multi-factor authentication (MFA) requirement is often deployed to increase security beyond what passwords alone can provide. Authorization in system security is the process of giving the user permission to access a specific resource or function. This term is often used interchangeably with access control or client privilege. Giving someone permission to download a particular file on a server or providing individual users with administrative access to an application are good examples. In secure environments, authorization must always follow authentication, users should first prove that their identities are genuine before an organization\u2019s administrators grant them access to the requested resources. Common authentication flow (local authentication) The user registers using an identifier like username/email/mobile The application stores user credentials in the database The application sends a verification email/message to validate the registration Post successful registration, the user enters credentials for logging in On successful authentication, the user is allowed access to specific resources OpenID/OAuth OpenID is an authentication protocol that allows us to authenticate users without using a local auth system. In such a scenario, a user has to be registered with an OpenID Provider and the same provider should be integrated with the authentication flow of your application. To verify the details, we have to forward the authentication requests to the provider. On successful authentication, we receive a success message and/or profile details with which we can execute the necessary flow. OAuth is an authorization mechanism that allows your application user access to a provider(Gmail/Facebook/Instagram/etc). On successful response, we (your application) receive a token with which the application can access certain APIs on behalf of a user. OAuth is convenient in case your business use case requires some certain user-facing APIs like access to Google Drive or sending tweets on your behalf. Most OAuth 2.0 providers can be used for pseudo authentication. Having said that, it can get pretty complicated if you are using multiple OAuth providers to authenticate users on top of the local authentication system. Cryptography It is the science and study of hiding any text in such a way that only the intended recipients or authorized persons can read it and that any text can even use things such as invisible ink or the mechanical cryptography machines of the past. Cryptography is necessary for securing critical or proprietary information and is used to encode private data messages by converting some plain text into ciphertext. At its core, there are two ways of doing this, more advanced methods are all built upon. Ciphers Ciphers are the cornerstone of cryptography. A cipher is a set of algorithms that performs encryption or decryption on a message. An encryption algorithm (E) takes a secret key (k) and a message (m), and produces a ciphertext (c). Similarly, a Decryption algorithm (D) takes a secret key (K) and the previous resulting Ciphertext (C). They are represented as follows: E(k,m) = c D(k,c) = m This also means that in order for it to be a cipher, it must satisfy the consistency equation as follows, making it possible to decrypt. D(k,E(k,m)) = m Stream Ciphers: The message is broken into characters or bits and enciphered with a key or keystream(should be random and generated independently of the message stream) that is as long as the plaintext bitstream. sIf the keystream is random, this scheme would be unbreakable unless the keystream was acquired, making it unconditionally secure. The keystream must be provided to both parties in a secure way to prevent its release. Block Ciphers: Block ciphers \u2014 process messages in blocks, each of which is then encrypted or decrypted. A block cipher is a symmetric cipher in which blocks of plaintext are treated as a whole and used to produce ciphertext blocks. The block cipher takes blocks that are b bits long and encrypts them to blocks that are also b bits long. Block sizes are typically 64 or 128 bits long. Encryption Secret Key (Symmetric Key) : the same key is used for encryption and decryption Public Key (Asymmetric Key) in an asymmetric, the encryption and decryption keys are different but related. The encryption key is known as the public key and the decryption key is known as the private key. The public and private keys are known as a key pair. Symmetric Key Encryption DES The Data Encryption Standard (DES) has been the worldwide encryption standard for a long time. IBM developed DES in 1975, and it has held up remarkably well against years of cryptanalysis. DES is a symmetric encryption algorithm with a fixed key length of 56 bits. The algorithm is still good, but because of the short key length, it is susceptible to brute-force attacks that have sufficient resources. DES usually operates in block mode, whereby it encrypts data in 64-bit blocks. The same algorithm and key are used for both encryption and decryption. Because DES is based on simple mathematical functions, it can be easily implemented and accelerated in hardware. Triple DES With advances in computer processing power, the original 56-bit DES key became too short to withstand an attacker with even a limited budget. One way of increasing the effective key length of DES without changing the well-analyzed algorithm itself is to use the same algorithm with different keys several times in a row. The technique of applying DES three times in a row to a plain text block is called Triple DES (3DES). The 3DES technique is shown in Figure. Brute-force attacks on 3DES are considered unfeasible today. Because the basic algorithm has been tested in the field for more than 25 years, it is considered to be more trustworthy than its predecessor. AES On October 2, 2000, The U.S. National Institute of Standards and Technology (NIST) announced the selection of the Rijndael cipher as the AES algorithm. This cipher, developed by Joan Daemen and Vincent Rijmen, has a variable block length and key length. The algorithm currently specifies how to use keys with a length of 128, 192, or 256 bits to encrypt blocks with a length of 128, 192, or 256 bits (all nine combinations of key length and block length are possible). Both block and key lengths can be extended easily to multiples of 32 bits. AES was chosen to replace DES and 3DES because they are either too weak (DES, in terms of key length) or too slow (3DES) to run on modern, efficient hardware. AES is more efficient and much faster, usually by a factor of 5 compared to DES on the same hardware. AES is also more suitable for high throughput, especially if pure software encryption is used. However, AES is a relatively young algorithm, and as the golden rule of cryptography states, \u201cA more mature algorithm is always more trusted.\u201d Asymmetric Key Algorithm In a symmetric key system, Alice first puts the secret message in a box and then padlocks the box using a lock to which she has a key. She then sends the box to Bob through regular mail. When Bob receives the box, he uses an identical copy of Alice's key (which he has obtained previously) to open the box and read the message. In an asymmetric key system, instead of opening the box when he receives it, Bob simply adds his own personal lock to the box and returns the box through public mail to Alice. Alice uses her key to remove her lock and returns the box to Bob, with Bob's lock still in place. Finally, Bob uses his key to remove his lock and reads the message from Alice. The critical advantage in an asymmetric system is that Alice never needs to send a copy of her key to Bob. This reduces the possibility that a third party (for example, an unscrupulous postmaster) can copy the key while it is in transit to Bob, allowing that third party to spy on all future messages sent by Alice. In addition, if Bob is careless and allows someone else to copy his key, Alice's messages to Bob are compromised, but Alice's messages to other people remain secret NOTE : In terms of TLS key exchange, this is the common approach. Diffie-Hellman The protocol has two system parameters, p and g. They are both public and may be used by everybody. Parameter p is a prime number, and parameter g (usually called a generator) is an integer that is smaller than p, but with the following property: For every number n between 1 and p \u2013 1 inclusive, there is a power k of g such that n = gk mod p. Diffie Hellman algorithm is an asymmetric algorithm used to establish a shared secret for a symmetric key algorithm. Nowadays most of the people use hybrid cryptosystem i.e, combination of symmetric and asymmetric encryption. Asymmetric Encryption is used as a technique in key exchange mechanism to share secret key and after the key is shared between sender and receiver, the communication will take place using symmetric encryption. The shared secret key will be used to encrypt the communication. Refer: https://medium.com/@akhigbemmanuel/what-is-the-diffie-hellman-key-exchange-algorithm-84d60025a30d RSA The RSA algorithm is very flexible and has a variable key length where, if necessary, speed can be traded for the level of security of the algorithm. The RSA keys are usually 512 to 2048 bits long. RSA has withstood years of extensive cryptanalysis. Although those years neither proved nor disproved RSA's security, they attest to a confidence level in the algorithm. RSA security is based on the difficulty of factoring very large numbers. If an easy method of factoring these large numbers were discovered, the effectiveness of RSA would be destroyed. Refer : https://medium.com/curiositypapers/a-complete-explanation-of-rsa-asymmetric-encryption-742c5971e0f NOTE : RSA Keys can be used for key exchange just like Deffie Hellman Hashing Algorithms Hashing is one of the mechanisms used for data integrity assurance. Hashing is based on a one-way mathematical function, which is relatively easy to compute but significantly harder to reverse. A hash function, which is a one-way function to input data to produce a fixed-length digest (fingerprint) of output data. The digest is cryptographically strong; that is, it is impossible to recover input data from its digest. If the input data changes just a little, the digest (fingerprint) changes substantially in what is called an avalanche effect. More: https://medium.com/@rauljordan/the-state-of-hashing-algorithms-the-why-the-how-and-the-future-b21d5c0440de https://medium.com/@StevieCEllis/the-beautiful-hash-algorithm-f18d9d2b84fb MD5 MD5 is a one-way function with which it is easy to compute the hash from the given input data, but it is unfeasible to compute input data given only a hash. SHA-1 MD5 is considered less secure than SHA-1 because MD5 has some weaknesses. HA-1 also uses a stronger, 160-bit digest, which makes MD5 the second choice as hash methods are concerned. The algorithm takes a message of less than 264 bits in length and produces a 160-bit message digest. This algorithm is slightly slower than MD5. NOTE : SHA-1 is also recently demonstrated to be broken, Minimum current recommendation is SHA-256 Digital Certificates Digital signatures, provide a means to digitally authenticate devices and individual users. In public-key cryptography, such as the RSA encryption system, each user has a key-pair containing both a public key and a private key. The keys act as complements, and anything encrypted with one of the keys can be decrypted with the other. In simple terms, a signature is formed when data is encrypted with a user's private key. The receiver verifies the signature by decrypting the message with the sender's public key. Key management is often considered the most difficult task in designing and implementing cryptographic systems. Businesses can simplify some of the deployment and management issues that are encountered with secured data communications by employing a Public Key Infrastructure (PKI). Because corporations often move security-sensitive communications across the Internet, an effective mechanism must be implemented to protect sensitive information from the threats presented on the Internet. PKI provides a hierarchical framework for managing digital security attributes. Each PKI participant holds a digital certificate that has been issued by a CA (either public or private). The certificate contains a number of attributes that are used when parties negotiate a secure connection. These attributes must include the certificate validity period, end-host identity information, encryption keys that will be used for secure communications, and the signature of the issuing CA. Optional attributes may be included, depending on the requirements and capability of the PKI. A CA can be a trusted third party, such as VeriSign or Entrust, or a private (in-house) CA that you establish within your organization. The fact that the message could be decrypted using the sender's public key means that the holder of the private key created the message. This process relies on the receiver having a copy of the sender's public key and knowing with a high degree of certainty that it really does belong to the sender and not to someone pretending to be the sender. To validate the CA's signature, the receiver must know the CA's public key. Normally, this is handled out-of-band or through an operation performed during installation of the certificate. For instance, most web browsers are configured with the root certificates of several CAs by default. CA Enrollment process The end host generates a private-public key pair. The end host generates a certificate request, which it forwards to the CA. Manual human intervention is required to approve the enrollment request, which is received by the CA. After the CA operator approves the request, the CA signs the certificate request with its private key and returns the completed certificate to the end host. The end host writes the certificate into a nonvolatile storage area (PC hard disk or NVRAM on Cisco routers). Refer : https://www.ssh.com/manuals/server-zos-product/55/ch06s03s01.html Login Security SSH SSH, the Secure Shell, is a popular, powerful, software-based approach to network security. Whenever data is sent by a computer to the network, SSH automatically encrypts (scrambles) it. Then, when the data reaches its intended recipient, SSH automatically decrypts (unscrambles) it. The result is transparent encryption: users can work normally, unaware that their communications are safely encrypted on the network. In addition, SSH can use modern, secure encryption algorithms based on how it's being configured and is effective enough to be found within mission-critical applications at major corporations. SSH has a client/server architecture An SSH server program, typically installed and run by a system administrator, accepts or rejects incoming connections to its host computer. Users then run SSH client programs, typically on other computers, to make requests of the SSH server, such as \u201cPlease log me in,\u201d \u201cPlease send me a file,\u201d or \u201cPlease execute this command.\u201d All communications between clients and servers are securely encrypted and protected from modification. What SSH is not: Although SSH stands for Secure Shell, it is not a true shell in the sense of the Unix Bourne shell and C shell. It is not a command interpreter, nor does it provide wildcard expansion, command history, and so forth. Rather, SSH creates a channel for running a shell on a remote computer, with end-to-end encryption between the two systems. The major features and guarantees of the SSH protocol are: Privacy of your data, via strong encryption Integrity of communications, guaranteeing they haven\u2019t been altered Authentication, i.e., proof of identity of senders and receivers Authorization, i.e., access control to accounts Forwarding or tunneling to encrypt other TCP/IP-based sessions Kerberos According to Greek mythology Kerberos (Cerberus) was the gigantic, three-headed dog that guards the gates of the underworld to prevent the dead from leaving. So when it comes to Computer Science, Kerberos is a network authentication protocol, and is currently the default authentication technology used by Microsoft Active Directory to authenticate users to services within a local area network. Kerberos uses symmetric key cryptography and requires trusted third-party authentication service to verify user identities. So they used the name of Kerberos for their computer network authentication protocol as the three heads of the Kerberos represent: a client : A user/ a service a server : Kerberos protected hosts reside - a Key Distribution Center (KDC), which acts as the trusted third-party authentication service. The KDC includes following two servers: Authentication Server (AS) that performs the initial authentication and issues ticket-granting tickets (TGT) for users. Ticket-Granting Server (TGS) that issues service tickets that are based on the initial ticket-granting tickets (TGT). Certificate Chain The first part of the output of the OpenSSL command shows three certificates numbered 0, 1, and 2(not 2 anymore). Each certificate has a subject, s, and an issuer, i. The first certificate, number 0, is called the end-entity certificate. The subject line tells us it\u2019s valid for any subdomain of google.com because its subject is set to *.google.com. $ openssl s_client -connect www.google.com:443 -CApath /etc/ssl/certs CONNECTED(00000005) depth=2 OU = GlobalSign Root CA - R2, O = GlobalSign, CN = GlobalSign verify return:1 depth=1 C = US, O = Google Trust Services, CN = GTS CA 1O1 verify return:1 depth=0 C = US, ST = California, L = Mountain View, O = Google LLC, CN = www.google.com verify return:1 --- Certificate chain 0 s:/C=US/ST=California/L=Mountain View/O=Google LLC/CN=www.google.com i:/C=US/O=Google Trust Services/CN=GTS CA 1O1 1 s:/C=US/O=Google Trust Services/CN=GTS CA 1O1 i:/OU=GlobalSign Root CA - R2/O=GlobalSign/CN=GlobalSign --- Server certificate The issuer line indicates it\u2019s issued by Google Internet Authority G2, which also happens to be the subject of the second certificate, number 1 What the OpenSSL command line doesn\u2019t show here is the trust store that contains the list of CA certificates trusted by the system OpenSSL runs on. The public certificate of GlobalSign Authority must be present in the system\u2019s trust store to close the verification chain. This is called a chain of trust, and figure below summarizes its behavior at a high level. High-level view of the concept of chain of trust applied to verifying the authenticity of a website. The Root CA in the Firefox trust store provides the initial trust to verify the entire chain and trust the end-entity certificate. TLS Handshake The client sends a HELLO message to the server with a list of protocols and algorithms it supports. The server says HELLO back and sends its chain of certificates. Based on the capabilities of the client, the server picks a cipher suite. If the cipher suite supports ephemeral key exchange, like ECDHE does(ECDHE is an algorithm known as the Elliptic Curve Diffie-Hellman Exchange), the server and the client negotiate a pre master key with the Diffie-Hellman algorithm. The pre master key is never sent over the wire. The client and server create a session key that will be used to encrypt the data transiting through the connection. At the end of the handshake, both parties possess a secret session key used to encrypt data for the rest of the connection. This is what OpenSSL refers to as Master-Key NOTE There are 3 versions of TLS , TLS 1.0, 1.1 & 1.2 TLS 1.0 was released in 1999, making it a nearly two-decade-old protocol. It has been known to be vulnerable to attacks\u2014such as BEAST and POODLE\u2014for years, in addition to supporting weak cryptography, which doesn\u2019t keep modern-day connections sufficiently secure. TLS 1.1 is the forgotten \u201cmiddle child.\u201d It also has bad cryptography like its younger sibling. In most software it was leapfrogged by TLS 1.2 and it\u2019s rare to see TLS 1.1 used. \u201cPerfect\u201d Forward Secrecy The term \u201cephemeral\u201d in the key exchange provides an important security feature mis-named perfect forward secrecy (PFS) or just \u201cForward Secrecy\u201d. In a non-ephemeral key exchange, the client sends the pre-master key to the server by encrypting it with the server\u2019s public key. The server then decrypts the pre-master key with its private key. If, at a later point in time, the private key of the server is compromised, an attacker can go back to this handshake, decrypt the pre-master key, obtain the session key, and decrypt the entire traffic. Non-ephemeral key exchanges are vulnerable to attacks that may happen in the future on recorded traffic. And because people seldom change their password, decrypting data from the past may still be valuable for an attacker. An ephemeral key exchange like DHE, or its variant on elliptic curve, ECDHE, solves this problem by not transmitting the pre-master key over the wire. Instead, the pre-master key is computed by both the client and the server in isolation, using nonsensitive information exchanged publicly. Because the pre-master key can\u2019t be decrypted later by an attacker, the session key is safe from future attacks: hence, the term perfect forward secrecy. Keys are changed every X blocks along the stream. That prevents an attacker from simply sniffing the stream and applying brute force to crack the whole thing. \"Forward secrecy\" means that just because I can decrypt block M, does not mean that I can decrypt block Q Downside: The downside to PFS is that all those extra computational steps induce latency on the handshake and slow the user down. To avoid repeating this expensive work at every connection, both sides cache the session key for future use via a technique called session resumption. This is what the session-ID and TLS ticket are for: they allow a client and server that share a session ID to skip over the negotiation of a session key, because they already agreed on one previously, and go directly to exchanging data securely.","title":"Fundamentals of Security"},{"location":"security/fundamentals/#part-i-fundamentals","text":"","title":"Part I: Fundamentals"},{"location":"security/fundamentals/#introduction-to-security-overview-for-sre","text":"If you look closely, both Site Reliability Engineering and Security Engineering are concerned with keeping a system usable. Issues like broken releases, capacity shortages, and misconfigurations can make a system unusable (at least temporarily). Security or privacy incidents that break the trust of users also undermine the usefulness of a system. Consequently, system security should be top of mind for SREs. SREs should be involved in both significant design discussions and actual system changes. They have quite a big role in System design & hence are quite sometimes the first line of defense. SRE\u2019s help in preventing bad design & implementations which can affect the overall security of the infrastructure. Successfully designing, implementing, and maintaining systems requires a commitment to the full system lifecycle . This commitment is possible only when security and reliability are central elements in the architecture of systems. Core Pillars of Information Security : Confidentiality \u2013 only allow access to data for which the user is permitted Integrity \u2013 ensure data is not tampered or altered by unauthorized users Availability \u2013 ensure systems and data are available to authorized users when they need it Thinking like a Security Engineer When starting a new application or re-factoring an existing application, you should consider each functional feature, and consider: Is the process surrounding this feature as safe as possible? In other words, is this a flawed process? If I were evil, how would I abuse this feature? Or more specifically failing to address how a feature can be abused can cause design flaws. Is the feature required to be on by default? If so, are there limits or options that could help reduce the risk from this feature? Security Principles By OWASP (Open Web Application Security Project) Minimize attack surface area : Every feature that is added to an application adds a certain amount of risk to the overall application. The aim for secure development is to reduce the overall risk by reducing the attack surface area. For example, a web application implements online help with a search function. The search function may be vulnerable to SQL injection attacks. If the help feature was limited to authorized users, the attack likelihood is reduced. If the help feature\u2019s search function was gated through centralized data validation routines, the ability to perform SQL injection is dramatically reduced. However, if the help feature was re-written to eliminate the search function (through better user interface, for example), this almost eliminates the attack surface area, even if the help feature was available to the Internet at large. Establish secure defaults: There are many ways to deliver an \u201cout of the box\u201d experience for users. However, by default, the experience should be secure, and it should be up to the user to reduce their security \u2013 if they are allowed. For example, by default, password aging and complexity should be enabled. Users might be allowed to turn these two features off to simplify their use of the application and increase their risk. Default Passwords of routers, IOT devices should be changed Principle of Least privilege The principle of least privilege recommends that accounts have the least amount of privilege required to perform their business processes. This encompasses user rights, resource permissions such as CPU limits, memory, network, and file system permissions. For example, if a middleware server only requires access to the network, read access to a database table, and the ability to write to a log, this describes all the permissions that should be granted. Under no circumstances should the middleware be granted administrative privileges. Principle of Defense in depth The principle of defense in depth suggests that where one control would be reasonable, more controls that approach risks in different fashions are better. Controls, when used in-depth, can make severe vulnerabilities extraordinarily difficult to exploit and thus unlikely to occur. With secure coding, this may take the form of tier-based validation, centralized auditing controls, and requiring users to be logged on all pages. For example, a flawed administrative interface is unlikely to be vulnerable to an anonymous attack if it correctly gates access to production management networks, checks for administrative user authorization, and logs all access. Fail securely Applications regularly fail to process transactions for many reasons. How they fail can determine if an application is secure or not. ``` is_admin = true; try { code_which_may_faile(); is_admin = is_user_assigned_role(\"Adminstrator\"); } catch (Exception err) { log.error(err.toString()); } ``` - If either codeWhichMayFail() or isUserInRole fails or throws an exception, the user is an admin by default. This is obviously a security risk. Don\u2019t trust services Many organizations utilize the processing capabilities of third-party partners, who more than likely have different security policies and posture than you. It is unlikely that you can influence or control any external third party, whether they are home users or major suppliers or partners. Therefore, the implicit trust of externally run systems is not warranted. All external systems should be treated in a similar fashion. For example, a loyalty program provider provides data that is used by Internet Banking, providing the number of reward points and a small list of potential redemption items. However, the data should be checked to ensure that it is safe to display to end-users, and that the reward points are a positive number, and not improbably large. Separation of duties The key to fraud control is the separation of duties. For example, someone who requests a computer cannot also sign for it, nor should they directly receive the computer. This prevents the user from requesting many computers and claiming they never arrived. Certain roles have different levels of trust than normal users. In particular, administrators are different from normal users. In general, administrators should not be users of the application. For example, an administrator should be able to turn the system on or off, set password policy but shouldn\u2019t be able to log on to the storefront as a super privileged user, such as being able to \u201cbuy\u201d goods on behalf of other users. Avoid security by obscurity Security through obscurity is a weak security control, and nearly always fails when it is the only control. This is not to say that keeping secrets is a bad idea, it simply means that the security of systems should not be reliant upon keeping details hidden. For example, the security of an application should not rely upon knowledge of the source code being kept secret. The security should rely upon many other factors, including reasonable password policies, defense in depth, business transaction limits, solid network architecture, and fraud, and audit controls. A practical example is Linux. Linux\u2019s source code is widely available, and yet when properly secured, Linux is a secure and robust operating system. Keep security simple Attack surface area and simplicity go hand in hand. Certain software engineering practices prefer overly complex approaches to what would otherwise be a relatively straightforward and simple design. Developers should avoid the use of double negatives and complex architectures when a simpler approach would be faster and simpler. For example, although it might be fashionable to have a slew of singleton entity beans running on a separate middleware server, it is more secure and faster to simply use global variables with an appropriate mutex mechanism to protect against race conditions. Fix security issues correctly Once a security issue has been identified, it is important to develop a test for it and to understand the root cause of the issue. When design patterns are used, it is likely that the security issue is widespread amongst all codebases, so developing the right fix without introducing regressions is essential. For example, a user has found that they can see another user\u2019s balance by adjusting their cookie. The fix seems to be relatively straightforward, but as the cookie handling code is shared among all applications, a change to just one application will trickle through to all other applications. The fix must, therefore, be tested on all affected applications. Reliability & Security Reliability and security are both crucial components of a truly trustworthy system,but building systems that are both reliable and secure is difficult. While the requirements for reliability and security share many common properties, they also require different design considerations. It is easy to miss the subtle interplay between reliability and security that can cause unexpected outcomes Ex: A password management application failure was triggered by a reliability problem i.e poor load-balancing and load-shedding strategies and its recovery was later complicated by multiple measures (HSM mechanism which needs to be plugged into server racks , which works as an authentication & the HSM token supposedly locked inside a case.. & the problem can be further elongated ) designed to increase the security of the system.","title":"Introduction to Security Overview for SRE"},{"location":"security/fundamentals/#authentication-vs-authorization","text":"Authentication is the act of validating that users are who they claim to be. Passwords are the most common authentication factor\u2014if a user enters the correct password, the system assumes the identity is valid and grants access. Other technologies such as One-Time Pins, authentication apps, and even biometrics can also be used to authenticate identity. In some instances, systems require the successful verification of more than one factor before granting access. This multi-factor authentication (MFA) requirement is often deployed to increase security beyond what passwords alone can provide. Authorization in system security is the process of giving the user permission to access a specific resource or function. This term is often used interchangeably with access control or client privilege. Giving someone permission to download a particular file on a server or providing individual users with administrative access to an application are good examples. In secure environments, authorization must always follow authentication, users should first prove that their identities are genuine before an organization\u2019s administrators grant them access to the requested resources.","title":"Authentication vs Authorization"},{"location":"security/fundamentals/#common-authentication-flow-local-authentication","text":"The user registers using an identifier like username/email/mobile The application stores user credentials in the database The application sends a verification email/message to validate the registration Post successful registration, the user enters credentials for logging in On successful authentication, the user is allowed access to specific resources","title":"Common authentication flow (local authentication)"},{"location":"security/fundamentals/#openidoauth","text":"OpenID is an authentication protocol that allows us to authenticate users without using a local auth system. In such a scenario, a user has to be registered with an OpenID Provider and the same provider should be integrated with the authentication flow of your application. To verify the details, we have to forward the authentication requests to the provider. On successful authentication, we receive a success message and/or profile details with which we can execute the necessary flow. OAuth is an authorization mechanism that allows your application user access to a provider(Gmail/Facebook/Instagram/etc). On successful response, we (your application) receive a token with which the application can access certain APIs on behalf of a user. OAuth is convenient in case your business use case requires some certain user-facing APIs like access to Google Drive or sending tweets on your behalf. Most OAuth 2.0 providers can be used for pseudo authentication. Having said that, it can get pretty complicated if you are using multiple OAuth providers to authenticate users on top of the local authentication system.","title":"OpenID/OAuth"},{"location":"security/fundamentals/#cryptography","text":"It is the science and study of hiding any text in such a way that only the intended recipients or authorized persons can read it and that any text can even use things such as invisible ink or the mechanical cryptography machines of the past. Cryptography is necessary for securing critical or proprietary information and is used to encode private data messages by converting some plain text into ciphertext. At its core, there are two ways of doing this, more advanced methods are all built upon.","title":"Cryptography"},{"location":"security/fundamentals/#ciphers","text":"Ciphers are the cornerstone of cryptography. A cipher is a set of algorithms that performs encryption or decryption on a message. An encryption algorithm (E) takes a secret key (k) and a message (m), and produces a ciphertext (c). Similarly, a Decryption algorithm (D) takes a secret key (K) and the previous resulting Ciphertext (C). They are represented as follows: E(k,m) = c D(k,c) = m This also means that in order for it to be a cipher, it must satisfy the consistency equation as follows, making it possible to decrypt. D(k,E(k,m)) = m Stream Ciphers: The message is broken into characters or bits and enciphered with a key or keystream(should be random and generated independently of the message stream) that is as long as the plaintext bitstream. sIf the keystream is random, this scheme would be unbreakable unless the keystream was acquired, making it unconditionally secure. The keystream must be provided to both parties in a secure way to prevent its release. Block Ciphers: Block ciphers \u2014 process messages in blocks, each of which is then encrypted or decrypted. A block cipher is a symmetric cipher in which blocks of plaintext are treated as a whole and used to produce ciphertext blocks. The block cipher takes blocks that are b bits long and encrypts them to blocks that are also b bits long. Block sizes are typically 64 or 128 bits long. Encryption Secret Key (Symmetric Key) : the same key is used for encryption and decryption Public Key (Asymmetric Key) in an asymmetric, the encryption and decryption keys are different but related. The encryption key is known as the public key and the decryption key is known as the private key. The public and private keys are known as a key pair. Symmetric Key Encryption DES The Data Encryption Standard (DES) has been the worldwide encryption standard for a long time. IBM developed DES in 1975, and it has held up remarkably well against years of cryptanalysis. DES is a symmetric encryption algorithm with a fixed key length of 56 bits. The algorithm is still good, but because of the short key length, it is susceptible to brute-force attacks that have sufficient resources. DES usually operates in block mode, whereby it encrypts data in 64-bit blocks. The same algorithm and key are used for both encryption and decryption. Because DES is based on simple mathematical functions, it can be easily implemented and accelerated in hardware. Triple DES With advances in computer processing power, the original 56-bit DES key became too short to withstand an attacker with even a limited budget. One way of increasing the effective key length of DES without changing the well-analyzed algorithm itself is to use the same algorithm with different keys several times in a row. The technique of applying DES three times in a row to a plain text block is called Triple DES (3DES). The 3DES technique is shown in Figure. Brute-force attacks on 3DES are considered unfeasible today. Because the basic algorithm has been tested in the field for more than 25 years, it is considered to be more trustworthy than its predecessor. AES On October 2, 2000, The U.S. National Institute of Standards and Technology (NIST) announced the selection of the Rijndael cipher as the AES algorithm. This cipher, developed by Joan Daemen and Vincent Rijmen, has a variable block length and key length. The algorithm currently specifies how to use keys with a length of 128, 192, or 256 bits to encrypt blocks with a length of 128, 192, or 256 bits (all nine combinations of key length and block length are possible). Both block and key lengths can be extended easily to multiples of 32 bits. AES was chosen to replace DES and 3DES because they are either too weak (DES, in terms of key length) or too slow (3DES) to run on modern, efficient hardware. AES is more efficient and much faster, usually by a factor of 5 compared to DES on the same hardware. AES is also more suitable for high throughput, especially if pure software encryption is used. However, AES is a relatively young algorithm, and as the golden rule of cryptography states, \u201cA more mature algorithm is always more trusted.\u201d Asymmetric Key Algorithm In a symmetric key system, Alice first puts the secret message in a box and then padlocks the box using a lock to which she has a key. She then sends the box to Bob through regular mail. When Bob receives the box, he uses an identical copy of Alice's key (which he has obtained previously) to open the box and read the message. In an asymmetric key system, instead of opening the box when he receives it, Bob simply adds his own personal lock to the box and returns the box through public mail to Alice. Alice uses her key to remove her lock and returns the box to Bob, with Bob's lock still in place. Finally, Bob uses his key to remove his lock and reads the message from Alice. The critical advantage in an asymmetric system is that Alice never needs to send a copy of her key to Bob. This reduces the possibility that a third party (for example, an unscrupulous postmaster) can copy the key while it is in transit to Bob, allowing that third party to spy on all future messages sent by Alice. In addition, if Bob is careless and allows someone else to copy his key, Alice's messages to Bob are compromised, but Alice's messages to other people remain secret NOTE : In terms of TLS key exchange, this is the common approach. Diffie-Hellman The protocol has two system parameters, p and g. They are both public and may be used by everybody. Parameter p is a prime number, and parameter g (usually called a generator) is an integer that is smaller than p, but with the following property: For every number n between 1 and p \u2013 1 inclusive, there is a power k of g such that n = gk mod p. Diffie Hellman algorithm is an asymmetric algorithm used to establish a shared secret for a symmetric key algorithm. Nowadays most of the people use hybrid cryptosystem i.e, combination of symmetric and asymmetric encryption. Asymmetric Encryption is used as a technique in key exchange mechanism to share secret key and after the key is shared between sender and receiver, the communication will take place using symmetric encryption. The shared secret key will be used to encrypt the communication. Refer: https://medium.com/@akhigbemmanuel/what-is-the-diffie-hellman-key-exchange-algorithm-84d60025a30d RSA The RSA algorithm is very flexible and has a variable key length where, if necessary, speed can be traded for the level of security of the algorithm. The RSA keys are usually 512 to 2048 bits long. RSA has withstood years of extensive cryptanalysis. Although those years neither proved nor disproved RSA's security, they attest to a confidence level in the algorithm. RSA security is based on the difficulty of factoring very large numbers. If an easy method of factoring these large numbers were discovered, the effectiveness of RSA would be destroyed. Refer : https://medium.com/curiositypapers/a-complete-explanation-of-rsa-asymmetric-encryption-742c5971e0f NOTE : RSA Keys can be used for key exchange just like Deffie Hellman Hashing Algorithms Hashing is one of the mechanisms used for data integrity assurance. Hashing is based on a one-way mathematical function, which is relatively easy to compute but significantly harder to reverse. A hash function, which is a one-way function to input data to produce a fixed-length digest (fingerprint) of output data. The digest is cryptographically strong; that is, it is impossible to recover input data from its digest. If the input data changes just a little, the digest (fingerprint) changes substantially in what is called an avalanche effect. More: https://medium.com/@rauljordan/the-state-of-hashing-algorithms-the-why-the-how-and-the-future-b21d5c0440de https://medium.com/@StevieCEllis/the-beautiful-hash-algorithm-f18d9d2b84fb MD5 MD5 is a one-way function with which it is easy to compute the hash from the given input data, but it is unfeasible to compute input data given only a hash. SHA-1 MD5 is considered less secure than SHA-1 because MD5 has some weaknesses. HA-1 also uses a stronger, 160-bit digest, which makes MD5 the second choice as hash methods are concerned. The algorithm takes a message of less than 264 bits in length and produces a 160-bit message digest. This algorithm is slightly slower than MD5. NOTE : SHA-1 is also recently demonstrated to be broken, Minimum current recommendation is SHA-256 Digital Certificates Digital signatures, provide a means to digitally authenticate devices and individual users. In public-key cryptography, such as the RSA encryption system, each user has a key-pair containing both a public key and a private key. The keys act as complements, and anything encrypted with one of the keys can be decrypted with the other. In simple terms, a signature is formed when data is encrypted with a user's private key. The receiver verifies the signature by decrypting the message with the sender's public key. Key management is often considered the most difficult task in designing and implementing cryptographic systems. Businesses can simplify some of the deployment and management issues that are encountered with secured data communications by employing a Public Key Infrastructure (PKI). Because corporations often move security-sensitive communications across the Internet, an effective mechanism must be implemented to protect sensitive information from the threats presented on the Internet. PKI provides a hierarchical framework for managing digital security attributes. Each PKI participant holds a digital certificate that has been issued by a CA (either public or private). The certificate contains a number of attributes that are used when parties negotiate a secure connection. These attributes must include the certificate validity period, end-host identity information, encryption keys that will be used for secure communications, and the signature of the issuing CA. Optional attributes may be included, depending on the requirements and capability of the PKI. A CA can be a trusted third party, such as VeriSign or Entrust, or a private (in-house) CA that you establish within your organization. The fact that the message could be decrypted using the sender's public key means that the holder of the private key created the message. This process relies on the receiver having a copy of the sender's public key and knowing with a high degree of certainty that it really does belong to the sender and not to someone pretending to be the sender. To validate the CA's signature, the receiver must know the CA's public key. Normally, this is handled out-of-band or through an operation performed during installation of the certificate. For instance, most web browsers are configured with the root certificates of several CAs by default. CA Enrollment process The end host generates a private-public key pair. The end host generates a certificate request, which it forwards to the CA. Manual human intervention is required to approve the enrollment request, which is received by the CA. After the CA operator approves the request, the CA signs the certificate request with its private key and returns the completed certificate to the end host. The end host writes the certificate into a nonvolatile storage area (PC hard disk or NVRAM on Cisco routers). Refer : https://www.ssh.com/manuals/server-zos-product/55/ch06s03s01.html","title":"Ciphers"},{"location":"security/fundamentals/#login-security","text":"","title":"Login Security"},{"location":"security/fundamentals/#ssh","text":"SSH, the Secure Shell, is a popular, powerful, software-based approach to network security. Whenever data is sent by a computer to the network, SSH automatically encrypts (scrambles) it. Then, when the data reaches its intended recipient, SSH automatically decrypts (unscrambles) it. The result is transparent encryption: users can work normally, unaware that their communications are safely encrypted on the network. In addition, SSH can use modern, secure encryption algorithms based on how it's being configured and is effective enough to be found within mission-critical applications at major corporations. SSH has a client/server architecture An SSH server program, typically installed and run by a system administrator, accepts or rejects incoming connections to its host computer. Users then run SSH client programs, typically on other computers, to make requests of the SSH server, such as \u201cPlease log me in,\u201d \u201cPlease send me a file,\u201d or \u201cPlease execute this command.\u201d All communications between clients and servers are securely encrypted and protected from modification. What SSH is not: Although SSH stands for Secure Shell, it is not a true shell in the sense of the Unix Bourne shell and C shell. It is not a command interpreter, nor does it provide wildcard expansion, command history, and so forth. Rather, SSH creates a channel for running a shell on a remote computer, with end-to-end encryption between the two systems. The major features and guarantees of the SSH protocol are: Privacy of your data, via strong encryption Integrity of communications, guaranteeing they haven\u2019t been altered Authentication, i.e., proof of identity of senders and receivers Authorization, i.e., access control to accounts Forwarding or tunneling to encrypt other TCP/IP-based sessions","title":"SSH"},{"location":"security/fundamentals/#kerberos","text":"According to Greek mythology Kerberos (Cerberus) was the gigantic, three-headed dog that guards the gates of the underworld to prevent the dead from leaving. So when it comes to Computer Science, Kerberos is a network authentication protocol, and is currently the default authentication technology used by Microsoft Active Directory to authenticate users to services within a local area network. Kerberos uses symmetric key cryptography and requires trusted third-party authentication service to verify user identities. So they used the name of Kerberos for their computer network authentication protocol as the three heads of the Kerberos represent: a client : A user/ a service a server : Kerberos protected hosts reside - a Key Distribution Center (KDC), which acts as the trusted third-party authentication service. The KDC includes following two servers: Authentication Server (AS) that performs the initial authentication and issues ticket-granting tickets (TGT) for users. Ticket-Granting Server (TGS) that issues service tickets that are based on the initial ticket-granting tickets (TGT).","title":"Kerberos"},{"location":"security/fundamentals/#certificate-chain","text":"The first part of the output of the OpenSSL command shows three certificates numbered 0, 1, and 2(not 2 anymore). Each certificate has a subject, s, and an issuer, i. The first certificate, number 0, is called the end-entity certificate. The subject line tells us it\u2019s valid for any subdomain of google.com because its subject is set to *.google.com. $ openssl s_client -connect www.google.com:443 -CApath /etc/ssl/certs CONNECTED(00000005) depth=2 OU = GlobalSign Root CA - R2, O = GlobalSign, CN = GlobalSign verify return:1 depth=1 C = US, O = Google Trust Services, CN = GTS CA 1O1 verify return:1 depth=0 C = US, ST = California, L = Mountain View, O = Google LLC, CN = www.google.com verify return:1 --- Certificate chain 0 s:/C=US/ST=California/L=Mountain View/O=Google LLC/CN=www.google.com i:/C=US/O=Google Trust Services/CN=GTS CA 1O1 1 s:/C=US/O=Google Trust Services/CN=GTS CA 1O1 i:/OU=GlobalSign Root CA - R2/O=GlobalSign/CN=GlobalSign --- Server certificate The issuer line indicates it\u2019s issued by Google Internet Authority G2, which also happens to be the subject of the second certificate, number 1 What the OpenSSL command line doesn\u2019t show here is the trust store that contains the list of CA certificates trusted by the system OpenSSL runs on. The public certificate of GlobalSign Authority must be present in the system\u2019s trust store to close the verification chain. This is called a chain of trust, and figure below summarizes its behavior at a high level. High-level view of the concept of chain of trust applied to verifying the authenticity of a website. The Root CA in the Firefox trust store provides the initial trust to verify the entire chain and trust the end-entity certificate.","title":"Certificate Chain"},{"location":"security/fundamentals/#tls-handshake","text":"The client sends a HELLO message to the server with a list of protocols and algorithms it supports. The server says HELLO back and sends its chain of certificates. Based on the capabilities of the client, the server picks a cipher suite. If the cipher suite supports ephemeral key exchange, like ECDHE does(ECDHE is an algorithm known as the Elliptic Curve Diffie-Hellman Exchange), the server and the client negotiate a pre master key with the Diffie-Hellman algorithm. The pre master key is never sent over the wire. The client and server create a session key that will be used to encrypt the data transiting through the connection. At the end of the handshake, both parties possess a secret session key used to encrypt data for the rest of the connection. This is what OpenSSL refers to as Master-Key NOTE There are 3 versions of TLS , TLS 1.0, 1.1 & 1.2 TLS 1.0 was released in 1999, making it a nearly two-decade-old protocol. It has been known to be vulnerable to attacks\u2014such as BEAST and POODLE\u2014for years, in addition to supporting weak cryptography, which doesn\u2019t keep modern-day connections sufficiently secure. TLS 1.1 is the forgotten \u201cmiddle child.\u201d It also has bad cryptography like its younger sibling. In most software it was leapfrogged by TLS 1.2 and it\u2019s rare to see TLS 1.1 used.","title":"TLS Handshake"},{"location":"security/fundamentals/#perfect-forward-secrecy","text":"The term \u201cephemeral\u201d in the key exchange provides an important security feature mis-named perfect forward secrecy (PFS) or just \u201cForward Secrecy\u201d. In a non-ephemeral key exchange, the client sends the pre-master key to the server by encrypting it with the server\u2019s public key. The server then decrypts the pre-master key with its private key. If, at a later point in time, the private key of the server is compromised, an attacker can go back to this handshake, decrypt the pre-master key, obtain the session key, and decrypt the entire traffic. Non-ephemeral key exchanges are vulnerable to attacks that may happen in the future on recorded traffic. And because people seldom change their password, decrypting data from the past may still be valuable for an attacker. An ephemeral key exchange like DHE, or its variant on elliptic curve, ECDHE, solves this problem by not transmitting the pre-master key over the wire. Instead, the pre-master key is computed by both the client and the server in isolation, using nonsensitive information exchanged publicly. Because the pre-master key can\u2019t be decrypted later by an attacker, the session key is safe from future attacks: hence, the term perfect forward secrecy. Keys are changed every X blocks along the stream. That prevents an attacker from simply sniffing the stream and applying brute force to crack the whole thing. \"Forward secrecy\" means that just because I can decrypt block M, does not mean that I can decrypt block Q Downside: The downside to PFS is that all those extra computational steps induce latency on the handshake and slow the user down. To avoid repeating this expensive work at every connection, both sides cache the session key for future use via a technique called session resumption. This is what the session-ID and TLS ticket are for: they allow a client and server that share a session ID to skip over the negotiation of a session key, because they already agreed on one previously, and go directly to exchanging data securely.","title":"\u201cPerfect\u201d Forward Secrecy"},{"location":"security/intro/","text":"Security Prerequisites Linux Basics Linux Networking What to expect from this course The course covers fundamentals of information security along with touching on subjects of system security, network & web security. The aim of this course is to get familiar with the basics of information security in day to day operations & then as an SRE develop the mindset of ensuring that security takes a front-seat while developing solutions. The course also serves as an introduction to common risks and best practices along with practical ways to find out vulnerable systems and loopholes which might become compromised if not secured. What is not covered under this course The courseware is not an ethical hacking workshop or a very deep dive into the fundamentals of the problems. The course does not deal with hacking or breaking into systems but rather an approach on how to ensure you don\u2019t get into those situations and also to make you aware of different ways a system can be compromised. Course Contents Fundamentals Network Security Threats, Attacks & Defence Writing Secure Code & More Conclusion","title":"Introduction"},{"location":"security/intro/#security","text":"","title":"Security"},{"location":"security/intro/#prerequisites","text":"Linux Basics Linux Networking","title":"Prerequisites"},{"location":"security/intro/#what-to-expect-from-this-course","text":"The course covers fundamentals of information security along with touching on subjects of system security, network & web security. The aim of this course is to get familiar with the basics of information security in day to day operations & then as an SRE develop the mindset of ensuring that security takes a front-seat while developing solutions. The course also serves as an introduction to common risks and best practices along with practical ways to find out vulnerable systems and loopholes which might become compromised if not secured.","title":"What to expect from this course"},{"location":"security/intro/#what-is-not-covered-under-this-course","text":"The courseware is not an ethical hacking workshop or a very deep dive into the fundamentals of the problems. The course does not deal with hacking or breaking into systems but rather an approach on how to ensure you don\u2019t get into those situations and also to make you aware of different ways a system can be compromised.","title":"What is not covered under this course"},{"location":"security/intro/#course-contents","text":"Fundamentals Network Security Threats, Attacks & Defence Writing Secure Code & More Conclusion","title":"Course Contents"},{"location":"security/network_security/","text":"Part II : Network Security Introduction TCP/IP is the dominant networking technology today. It is a five-layer architecture. These layers are, from top to bottom, the application layer, the transport layer (TCP), the network layer (IP), the data-link layer, and the physical layer. In addition to TCP/IP, there also are other networking technologies. For convenience, we use the OSI network model to represent non-TCP/IP network technologies. Different networks are interconnected using gateways. A gateway can be placed at any layer. The OSI model is a seven-layer architecture. The OSI architecture is similar to the TCP/IP architecture, except that the OSI model specifies two additional layers between the application layer and the transport layer in the TCP/IP architecture. These two layers are the presentation layer and the session layer. Figure 5.1 shows the relation between the TCP/IP layers and the OSI layers. The application layer in TCP/IP corresponds to the application layer and the presentation layer in OSI. The transport layer in TCP/IP corresponds to the session layer and the transport layer in OSI. The remaining three layers in the TCP/IP architecture are one-to-one correspondent to the remaining three layers in the OSI model. Correspondence between layers of the TCP/IP architecture and the OSI model. Also shown are placements of cryptographic algorithms in network layers, where the dotted arrows indicate actual communications of cryptographic algorithms The functionalities of OSI layers are briefly described as follows: The application layer serves as an interface between applications and network programs. It supports application programs and end-user processing. Common application-layer programs include remote logins, file transfer, email, and Web browsing. The presentation layer is responsible for dealing with data that is formed differently. This protocol layer allows application-layer programs residing on different sides of a communication channel with different platforms to understand each other's data formats regardless of how they are presented. The session layer is responsible for creating, managing, and closing a communication connection. The transport layer is responsible for providing reliable connections, such as packet sequencing, traffic control, and congestion control. The network layer is responsible for routing device-independent data packets from the current hop to the next hop. The data-link layer is responsible for encapsulating device-independent data packets into device-dependent data frames. It has two sublayers: logical link control and media access control. The physical layer is responsible for transmitting device-dependent frames through some physical media. Starting from the application layer, data generated from an application program is passed down layer-by-layer to the physical layer. Data from the previous layer is enclosed in a new envelope at the current layer, where the data from the previous layer is also just an envelope containing the data from the layer before it. This is similar to enclosing a smaller envelope in a larger one. The envelope added at each layer contains sufficient information for handling the packet. Application-layer data are divided into blocks small enough to be encapsulated in an envelope at the next layer. Application data blocks are \u201cdressed up\u201d in the TCP/IP architecture according to the following basic steps. At the sending side, an application data block is encapsulated in a TCP packet when it is passed down to the TCP layer. In other words, a TCP packet consists of a header and a payload, where the header corresponds to the TCP envelope and the payload is the application data block. Likewise, the TCP packet will be encapsulated in an IP packet when it is passed down to the IP layer. An IP packet consists of a header and a payload, which is the TCP packet passed down from the TCP layer. The IP packet will be encapsulated in a device-dependent frame (e.g., an Ethernet frame) when it is passed down to the data-link layer. A frame has a header, and it may also have a trailer. For example, in addition to having a header, an Ethernet frame also has a 32-bit cyclic redundancy check (CRC) trailer. When it is passed down to the physical layer, a frame will be transformed to a sequence of media signals for transmission Flow Diagram of a Packet Generation At the destination side, the medium signals are converted by the physical layer into a frame, which is passed up to the data-link layer. The data-link layer passes the frame payload (i.e., the IP packet encapsulated in the frame) up to the IP layer. The IP layer passes the IP payload, namely, the TCP packet encapsulated in the IP packet, up to the TCP layer. The TCP layer passes the TCP payload, namely, the application data block, up to the application layer. When a packet arrives at a router, it only goes up to the IP layer, where certain fields in the IP header are modified (e.g., the value of TTL is decreased by 1). This modified packet is then passed back down layer-by-layer to the physical layer for further transmission. Public Key Infrastructure To deploy cryptographic algorithms in network applications, we need a way to distribute secret keys using open networks. Public-key cryptography is the best way to distribute these secret keys. In order to use public-key cryptography, we need to build a public-key infrastructure (PKI) to support and manage public-key certificates and certificate authority (CA) networks. In particular, PKIs are set up to perform the following functions: Determine the legitimacy of users before issuing public-key certificates to them. Issue public-key certificates upon user requests. Extend public-key certificates valid time upon user requests. Revoke public-key certificates upon users' requests or when the corresponding private keys are compromised. Store and manage public-key certificates. Prevent digital signature signers from denying their signatures. Support CA networks to allow different CAs to authenticate public-key certificates issued by other CAs. X.509: https://certificatedecoder.dev/?gclid=EAIaIQobChMI0M731O6G6gIVVSQrCh04bQaAEAAYASAAEgKRkPD_BwE IPsec: A Security Protocol at the Network Layer IPsec is a major security protocol at the network layer IPsec provides a potent platform for constructing virtual private networks (VPN). VPNs are private networks overlayed on public networks. The purpose of deploying cryptographic algorithms at the network layer is to encrypt or authenticate IP packets (either just the payloads or the whole packets). IPsec also specifies how to exchange keys. Thus, IPsec consists of authentication protocols, encryption protocols, and key exchange protocols. They are referred to, respectively, as authentication header (AH), encapsulating security payload (ESP), and Internet key exchange (IKE). PGP & S/MIME : Email Security There are a number of security protocols at the application layer. The most used of these protocols are email security protocols namely PGP and S/MIME. SMTP (\u201cSimple Mail Transfer Protocol\u201d) is used for sending and delivering from a client to a server via port 25: it\u2019s the outgoing server. On the contrary, POP (\u201cPost Office Protocol\u201d) allows the user to pick up the message and download it into his own inbox: it\u2019s the incoming server. The latest version of the Post Office Protocol is named POP3, and it\u2019s been used since 1996; it uses port 110 PGP PGP implements all major cryptographic algorithms, the ZIP compression algorithm, and the Base64 encoding algorithm. It can be used to authenticate a message, encrypt a message, or both. PGP follows the following general process: authentication, ZIP compression, encryption, and Base64 encoding. The Base64 encoding procedure makes the message ready for SMTP transmission GPG (GnuPG) GnuPG is another free encryption standard that companies may use that is based on OpenPGP. GnuPG serves as a replacement for Symantec\u2019s PGP. The main difference is the supported algorithms. However, GnuPG plays nice with PGP by design. Because GnuPG is open, some businesses would prefer the technical support and the user interface that comes with Symantec\u2019s PGP. It is important to note that there are some nuances between compatibility of GnuPG and PGP, such as the compatibility between certain algorithms, but in most applications such as email, there are workarounds. One such algorithm is the IDEA Module which isn\u2019t included in GnuPG out of the box due to patent issues. S/MIME SMTP can only handle 7-bit ASCII text (You can use UTF-8 extensions to alleviate this limitations, ) messages. While POP can handle other content types besides 7-bit ASCII, POP may, under a common default setting, download all the messages stored in the mail server to the user's local computer. After that, if POP removes these messages from the mail server. This makes it difficult for the user to read his messages from multiple computers. The Multipurpose Internet Mail Extension protocol (MIME) was designed to support sending and receiving email messages in various formats, including nontext files generated by word processors, graphics files, sound files, and video clips. Moreover, MIME allows a single message to include mixed types of data in any combination of these formats. The Internet Mail Access Protocol (IMAP), operated on TCP port 143(only for non-encrypted), stores (Configurable on both server & client just like PoP) incoming email messages in the mail server until the user deletes them deliberately. This allows the user to access his mailbox from multiple machines and download messages to a local machine without deleting it from the mailbox in the mail server. SSL/TLS SSL uses a PKI to decide if a server\u2019s public key is trustworthy by requiring servers to use a security certificate signed by a trusted CA. When Netscape Navigator 1.0 was released, it trusted a single CA operated by the RSA Data Security corporation. The server\u2019s public RSA keys were used to be stored in the security certificate, which can then be used by the browser to establish a secure communication channel. The security certificates we use today still rely on the same standard (named X.509) that Netscape Navigator 1.0 used back then. Netscape\u2019s intent was to train users(though this didn\u2019t work out later) to differentiate secure communications from insecure ones, so they put a lock icon next to the address bar. When the lock is open, the communication is insecure. A closed lock means communication has been secured with SSL, which required the server to provide a signed certificate. You\u2019re obviously familiar with this icon as it\u2019s been in every browser ever since. The engineers at Netscape truly created a standard for secure internet communications. A year after releasing SSL 2.0, Netscape fixed several security issues and released SSL 3.0, a protocol that, albeit being officially deprecated since June 2015, remains in use in certain parts of the world more than 20 years after its introduction. In an effort to standardize SSL, the Internet Engineering Task Force (IETF) created a slightly modified SSL 3.0 and, in 1999, unveiled it as Transport Layer Security (TLS) 1.0. The name change between SSL and TLS continues to confuse people today. Officially, TLS is the new SSL, but in practice, people use SSL and TLS interchangeably to talk about any version of the protocol. Must See: https://tls.ulfheim.net/ https://davidwong.fr/tls13/ Network Perimeter Security Let us see how we keep a check on the perimeter i.e the edges, the first layer of protection General Firewall Framework Firewalls are needed because encryption algorithms cannot effectively stop malicious packets from getting into an edge network. This is because IP packets, regardless of whether they are encrypted, can always be forwarded into an edge network. Firewalls that were developed in the 1990s are important instruments to help restrict network access. A firewall may be a hardware device, a software package, or a combination of both. Packets flowing into the internal network from the outside should be evaluated before they are allowed to enter. One of the critical elements of a firewall is its ability to examine packets without imposing a negative impact on communication speed while providing security protections for the internal network. The packet inspection that is carried out by firewalls can be done using several different methods. On the basis of the particular method used by the firewall, it can be characterized as either a packet filter, circuit gateway, application gateway, or dynamic packet filter. Packet Filters It inspects ingress packets coming to an internal network from outside and inspects egress packets going outside from an internal network Packing filtering only inspects IP headers and TCP headers, not the payloads generated at the application layer A packet filtering firewall uses a set of rules to determine whether a packet should be allowed or denied to pass through. 2 types: Stateless It treats each packet as an independent object, and it does not keep track of any previously processed packets. In other words, stateless filtering inspects a packet when it arrives and makes a decision without leaving any record of the packet being inspected. Stateful Stateful filtering, also referred to as connection-state filtering, keeps track of connections between an internal host and an external host. A connection state (or state, for short) indicates whether it is a TCP connection or a UDP connection and whether the connection is established. Circuit Gateways Circuit gateways, also referred to as circuit-level gateways, are typically operated at the transportation layer They evaluate the information of the IP addresses and the port numbers contained in TCP (or UDP) headers and use it to determine whether to allow or to disallow an internal host and an external host to establish a connection. It is common practice to combine packet filters and circuit gateways to form a dynamic packet filter (DPF). Application Gateways(ALG) Aka PROXY Servers An Application Level Gateway (ALG) acts like a proxy for internal hosts, processing service requests from external clients. An ALG performs deep inspections on each IP packet (ingress or egress). In particular, an ALG inspects application program formats contained in the packet (e.g., MIME format or SQL format) and examines whether its payload is permitted. Thus, an ALG may be able to detect a computer virus contained in the payload. Because an ALG inspects packet payloads, it may be able to detect malicious code and quarantine suspicious packets, in addition to blocking packets with suspicious IP addresses and TCP ports. On the other hand, an ALG also incurs substantial computation and space overheads. Trusted Systems & Bastion Hosts A Trusted Operating System (TOS) is an operating system that meets a particular set of security requirements. Whether an operating system can be trusted or not depends on a number of elements. For example, for an operating system on a particular computer to be certified trusted, one needs to validate that, among other things, the following four requirements are satisfied: Its system design contains no defects; Its system software contains no loopholes; Its system is configured properly; and Its system management is appropriate. Bastion Hosts Bastion hosts are computers with strong defense mechanisms. They often serve as host computers for implementing application gateways, circuit gateways, and other types of firewalls. A bastion host is operated on a trusted operating system that must not contain unnecessary functionalities or programs. This measure helps to reduce error probabilities and makes it easier to conduct security checks. Only those network application programs that are absolutely necessary, for example, SSH, DNS, SMTP, and authentication programs, are installed on a bastion host. Bastion hosts are also primarily used as controlled ingress points so that the security monitoring can focus more narrowly on actions happening at a single point closely. Common Techniques & Scannings, Packet Capturing Scanning Ports with Nmap Nmap (\"Network Mapper\") is a free and open source (license) utility for network discovery and security auditing. Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime. The best thing about Nmap is it\u2019s free and open source and is very flexible and versatile Nmap is often used to determine alive hosts in a network, open ports on those hosts, services running on those open ports, and version identification of that service on that port. More at http://scanme.nmap.org/ nmap [scan type] [options] [target specification] Nmap uses 6 different port states: Open \u2014 An open port is one that is actively accepting TCP, UDP or SCTP connections. Open ports are what interests us the most because they are the ones that are vulnerable to attacks. Open ports also show the available services on a network. Closed \u2014 A port that receives and responds to Nmap probe packets but there is no application listening on that port. Useful for identifying that the host exists and for OS detection. Filtered \u2014 Nmap can\u2019t determine whether the port is open because packet filtering prevents its probes from reaching the port. Filtering could come from firewalls or router rules. Often little information is given from filtered ports during scans as the filters can drop the probes without responding or respond with useless error messages e.g. destination unreachable. Unfiltered \u2014 Port is accessible but Nmap doesn\u2019t know if its open or closed. Only used in ACK scan which is used to map firewall rulesets. Other scan types can be used to identify whether the port is open. Open/filtered \u2014 Nmap is unable to determine between open and filtered. This happens when an open port gives no response. No response could mean that the probe was dropped by a packet filter or any response is blocked. Closed/filtered \u2014 Nmap is unable to determine whether a port is closed or filtered. Only used in the IP ID idle scan. Types of Nmap Scan: TCP Connect TCP Connect scan completes the 3-way handshake. If a port is open, the operating system completes the TCP three-way handshake and the port scanner immediately closes the connection to avoid DOS. This is \u201cnoisy\u201d because the services can log the sender IP address and might trigger Intrusion Detection Systems. UDP Scan This scan checks to see if there are any UDP ports listening. Since UDP does not respond with a positive acknowledgment like TCP and only responds to an incoming UDP packet when the port is closed, SYN Scan SYN scan is another form of TCP scanning. This scan type is also known as \u201chalf-open scanning\u201d because it never actually opens a full TCP connection. The port scanner generates a SYN packet. If the target port is open, it will respond with an SYN-ACK packet. The scanner host responds with an RST packet, closing the connection before the handshake is completed. If the port is closed but unfiltered, the target will instantly respond with an RST packet. SYN scan has the advantage that the individual services never actually receive a connection. FIN Scan This is a stealthy scan, like the SYN scan, but sends a TCP FIN packet instead. ACK Scan Ack scanning determines whether the port is filtered or not. Null Scan Another very stealthy scan that sets all the TCP header flags to off or null. This is not normally a valid packet and some hosts will not know what to do with this. XMAS Scan Similar to the NULL scan except for all the flags in the TCP header is set to on RPC Scan This special type of scan looks for machine answering to RPC (Remote Procedure Call) services IDLE Scan It is a super stealthy method whereby the scan packets are bounced off an external host. You don\u2019t need to have control over the other host but it does have to set up and meet certain requirements. You must input the IP address of our \u201czombie\u201d host and what port number to use. It is one of the more controversial options in Nmap since it really only has a use for malicious attacks. Scan Techniques A couple of scan techniques which can be used to gain more information about a system and its ports. You can read more at https://medium.com/infosec-adventures/nmap-cheatsheet-a423fcdda0ca OpenVAS OpenVAS is a full-featured vulnerability scanner. OpenVAS is a framework of services and tools that provides a comprehensive and powerful vulnerability scanning and management package OpenVAS, which is an open-source program, began as a fork of the once-more-popular scanning program, Nessus. OpenVAS is made up of three main parts. These are: a regularly updated feed of Network Vulnerability Tests (NVTs); a scanner, which runs the NVTs; and a SQLite 3 database for storing both your test configurations and the NVTs\u2019 results and configurations. https://www.greenbone.net/en/install_use_gce/ WireShark Wireshark is a protocol analyzer. This means Wireshark is designed to decode not only packet bits and bytes but also the relations between packets and protocols. Wireshark understands protocol sequences. A simple demo of wireshark Capture only udp packets: Capture filter = \u201cudp\u201d Capture only tcp packets Capture filter = \u201ctcp\u201d TCP/IP 3 way Handshake Filter by IP address: displays all traffic from IP, be it source or destination ip.addr == 192.168.1.1 Filter by source address: display traffic only from IP source ip.src == 192.168.0.1 Filter by destination: display traffic only form IP destination ip.dst == 192.168.0.1 Filter by IP subnet: display traffic from subnet, be it source or destination ip.addr = 192.168.0.1/24 Filter by protocol: filter traffic by protocol name dns http ftp arp ssh telnet icmp Exclude IP address: remove traffic from and to IP address !ip.addr ==192.168.0.1 Display traffic between two specific subnet ip.addr == 192.168.0.1/24 and ip.addr == 192.168.1.1/24 Display traffic between two specific workstations ip.addr == 192.168.0.1 and ip.addr == 192.168.0.2 Filter by MAC eth.addr = 00:50:7f:c5:b6:78 Filter TCP port tcp.port == 80 Filter TCP port source tcp.srcport == 80 Filter TCP port destination tcp.dstport == 80 Find user agents http.user_agent contains Firefox !http.user_agent contains || !http.user_agent contains Chrome Filter broadcast traffic !(arp or icmp or dns) Filter IP address and port tcp.port == 80 && ip.addr == 192.168.0.1 Filter all http get requests http.request Filter all http get requests and responses http.request or http.response Filter three way handshake tcp.flags.syn==1 or (tcp.seq==1 and tcp.ack==1 and tcp.len==0 and tcp.analysis.initial_rtt) Find files by type frame contains \u201c(attachment|tar|exe|zip|pdf)\u201d Find traffic based on keyword tcp contains facebook frame contains facebook Detecting SYN Floods tcp.flags.syn == 1 and tcp.flags.ack == 0 Wireshark Promiscuous Mode - By default, Wireshark only captures packets going to and from the computer where it runs. By checking the box to run Wireshark in Promiscuous Mode in the Capture Settings, you can capture most of the traffic on the LAN. DumpCap Dumpcap is a network traffic dump tool. It captures packet data from a live network and writes the packets to a file. Dumpcap\u2019s native capture file format is pcapng, which is also the format used by Wireshark. By default, Dumpcap uses the pcap library to capture traffic from the first available network interface and writes the received raw packet data, along with the packets\u2019 time stamps into a pcapng file. The capture filter syntax follows the rules of the pcap library. The Wireshark command line utility called 'dumpcap.exe' can be used to capture LAN traffic over an extended period of time. Wireshark itself can also be used, but dumpcap does not significantly utilize the computer's memory while capturing for long periods of time. DaemonLogger Daemonlogger is a packet logging application designed specifically for use in Network and Systems Management (NSM) environments. The biggest benefit Daemonlogger provides is that, like Dumpcap, it is simple to use for capturing packets. In order to begin capturing, you need only to invoke the command and specify an interface. daemonlogger \u2013i eth1 This option, by default, will begin capturing packets and logging them to the current working directory. Packets will be collected until the capture file size reaches 2 GB, and then a new file will be created. This will continue indefinitely until the process is halted. NetSniff-NG Netsniff-NG is a high-performance packet capture utility While the utilities we\u2019ve discussed to this point rely on Libpcap for capture, Netsniff-NG utilizes zero-copy mechanisms to capture packets. This is done with the intent to support full packet capture over high throughput links. In order to begin capturing packets with Netsniff-NG, we have to specify an input and output. In most cases, the input will be a network interface, and the output will be a file or folder on disk. netsniff-ng \u2013i eth1 \u2013o data.pcap Netflow NetFlow is a feature that was introduced on Cisco routers around 1996 that provides the ability to collect IP network traffic as it enters or exits an interface. By analyzing the data provided by NetFlow, a network administrator can determine things such as the source and destination of traffic, class of service, and the causes of congestion. A typical flow monitoring setup (using NetFlow) consists of three main components:[1] Flow exporter: aggregates packets into flows and exports flow records towards one or more flow collectors. Flow collector: responsible for reception, storage and pre-processing of flow data received from a flow exporter. Analysis application: analyzes received flow data in the context of intrusion detection or traffic profiling, for example. Routers and switches that support NetFlow can collect IP traffic statistics on all interfaces where NetFlow is enabled, and later export those statistics as NetFlow records toward at least one NetFlow collector\u2014typically a server that does the actual traffic analysis. IDS A security solution that detects security-related events in your environment but does not block them. IDS sensors can be software and hardware based used to collect and analyze the network traffic. These sensors are available in two varieties, network IDS and host IDS. A host IDS is a server-specific agent running on a server with a minimum of overhead to monitor the operating system. A network IDS can be embedded in a networking device, a standalone appliance, or a module monitoring the network traffic. Signature Based IDS The signature-based IDS monitors the network traffic or observes the system and sends an alarm if a known malicious event is happening. It does so by comparing the data flow against a database of known attack patterns These signatures explicitly define what traffic or activity should be considered as malicious. Signature-based detection has been the bread and butter of network-based defensive security for over a decade, partially because it is very similar to how malicious activity is detected at the host level with antivirus utilities The formula is fairly simple: an analyst observes a malicious activity, derives indicators from the activity and develops them into signatures, and then those signatures will alert whenever the activity occurs again. ex: SNORT & SURICATA Policy Based IDS The policy-based IDSs (mainly host IDSs) trigger an alarm whenever a violation occurs against the configured policy. This configured policy is or should be a representation of the security policies. This type of IDS is flexible and can be customized to a company's network requirements because it knows exactly what is permitted and what is not. On the other hand, the signature-based systems rely on vendor specifics and default settings. Anomaly Based IDS The anomaly-based IDS looks for traffic that deviates from the normal, but the definition of what is a normal network traffic pattern is the tricky part Two types of anomaly-based IDS exist: statistical and nonstatistical anomaly detection Statistical anomaly detection learns the traffic patterns interactively over a period of time. In the nonstatistical approach, the IDS has a predefined configuration of the supposedly acceptable and valid traffic patterns. Host Based IDS & Network Based IDS A host IDS can be described as a distributed agent residing on each server of the network that needs protection. These distributed agents are tied very closely to the underlying operating system. Network IDSs, on the other hand, can be described as intelligent sniffing devices. Data (raw packets) is captured from the network by a network IDS, whereas host IDSs capture the data from the host on which they are installed. Honeypots The use of decoy machines to direct intruders' attention away from the machines under protection is a major technique to preclude intrusion attacks. Any device, system, directory, or file used as a decoy to lure attackers away from important assets and to collect intrusion or abusive behaviors is referred to as a honeypot. A honeypot may be implemented as a physical device or as an emulation system. The idea is to set up decoy machines in a LAN, or decoy directories/files in a file system and make them appear important, but with several exploitable loopholes, to lure attackers to attack these machines or directories/files, so that other machines, directories, and files can evade intruders' attentions. A decoy machine may be a host computer or a server computer. Likewise, we may also set up decoy routers or even decoy LANs. Chinks In The Armour (TCP/IP Security Issues) IP Spoofing In this type of attack, the attacker replaces the IP address of the sender, or in some rare cases the destination, with a different address. IP spoofing is normally used to exploit a target host. In other cases, it is used to start a denial-of-service (DoS) attack. In a DoS attack, an attacker modifies the IP packet to mislead the target host into accepting the original packet as a packet sourced at a trusted host. The attacker must know the IP address of the trusted host to modify the packet headers (source IP address) so that it appears that the packets are coming from that host. IP Spoofing Detection Techniques Direct TTL Probes In this technique we send a packet to a host of suspect spoofed IP that triggers reply and compare TTL with suspect packet; if the TTL in the reply is not the same as the packet being checked; it is a spoofed packet. This Technique is successful when the attacker is in a different subnet from the victim. IP Identification Number. Send a probe to the host of suspect spoofed traffic that triggers a reply and compare IP ID with suspect traffic. If IP IDs are not in the near value of packet being checked, suspect traffic is spoofed TCP Flow Control Method Attackers sending spoofed TCP packets will not receive the target\u2019s SYN-ACK packets. Attackers cannot therefore be responsive to change in the congestion window size When the receiver still receives traffic even after a windows size is exhausted, most probably the packets are spoofed. Covert Channel A covert or clandestine channel can be best described as a pipe or communication channel between two entities that can be exploited by a process or application transferring information in a manner that violates the system's security specifications. More specifically for TCP/IP, in some instances, covert channels are established, and data can be secretly passed between two end systems. Ex: ICMP resides at the Internet layer of the TCP/IP protocol suite and is implemented in all TCP/IP hosts. Based on the specifications of the ICMP Protocol, an ICMP Echo Request message should have an 8-byte header and a 56-byte payload. The ICMP Echo Request packet should not carry any data in the payload. However, these packets are often used to carry secret information. The ICMP packets are altered slightly to carry secret data in the payload. This makes the size of the packet larger, but no control exists in the protocol stack to defeat this behavior. The alteration of ICMP packets gives intruders the opportunity to program specialized client-server pairs. These small pieces of code export confidential information without alerting the network administrator. ICMP can be leveraged for more than data exfiltration. For eg. some C&C tools such as Loki used ICMP channel to establish encrypted interactive session back in 1996. Deep packet inspection has since come a long way. A lot of IDS/IPS detect ICMP tunneling. Check for echo responses that do not contain the same payload as request Check for volume of ICMP traffic specially for volumes beyond an acceptable threshold IP Fragmentation Attack The TCP/IP protocol suite, or more specifically IP, allows the fragmentation of packets.(this is a feature & not a bug) IP fragmentation offset is used to keep track of the different parts of a datagram. The information or content in this field is used at the destination to reassemble the datagrams All such fragments have the same Identification field value, and the fragmentation offset indicates the position of the current fragment in the context of the original packet. Many access routers and firewalls do not perform packet reassembly. In normal operation, IP fragments do not overlap, but attackers can create artificially fragmented packets to mislead the routers or firewalls. Usually, these packets are small and almost impractical for end systems because of data and computational overhead. A good example of an IP fragmentation attack is the Ping of Death attack. The Ping of Death attack sends fragments that, when reassembled at the end station, create a larger packet than the maximum permissible length. TCP Flags Data exchange using TCP does not happen until a three-way handshake has been successfully completed. This handshake uses different flags to influence the way TCP segments are processed. There are 6 bits in the TCP header that are often called flags. Namely: 6 different flags are part of the TCP header: Urgent pointer field (URG), Acknowledgment field (ACK), Push function (PSH), Reset the connection (RST), Synchronize sequence numbers (SYN), and sender is finished with this connection (FIN). Abuse of the normal operation or settings of these flags can be used by attackers to launch DoS attacks. This causes network servers or web servers to crash or hang. | SYN | FIN | PSH | RST | Validity| |------|------|-------|------|---------| | 1 |1 |0 |0 |Illegal Combination | 1 |1 |1 |0 |Illegal Combination | 1 |1 |0 |1 |Illegal Combination | 1 |1 |1 |1 |Illegal Combination The attacker's ultimate goal is to write special programs or pieces of code that are able to construct these illegal combinations resulting in an efficient DoS attack. SYN FLOOD The timers (or lack of certain timers) in 3 way handshake are often used and exploited by attackers to disable services or even to enter systems. After step 2 of the three-way handshake, no limit is set on the time to wait after receiving a SYN. The attacker initiates many connection requests to the web server of Company XYZ (almost certainly with a spoofed IP address). The SYN+ACK packets (Step 2) sent by the web server back to the originating source IP address are not replied to. This leaves a TCP session half-open on the web server. Multiple packets cause multiple TCP sessions to stay open. Based on the hardware limitations of the server, a limited number of TCP sessions can stay open, and as a result, the web server refuses further connection establishments attempts from any host as soon as a certain limit is reached. These half-open connections need to be completed or timed out before new connections can be established. FIN Attack In normal operation, the sender sets the TCP FIN flag indicating that no more data will be transmitted and the connection can be closed down. This is a four-way handshake mechanism, with both sender and receiver expected to send an acknowledgement on a received FIN packet. During an attack that is trying to kill connections, a spoofed FIN packet is constructed. This packet also has the correct sequence number, so the packets are seen as valid by the targeted host. These sequence numbers are easy to predict. This process is referred to as TCP sequence number prediction, whereby the attacker either sniffs the current Sequence and Acknowledgment (SEQ/ACK) numbers of the connection or can algorithmically predict these numbers. Connection Hijacking An authorized user (Employee X) sends HTTP requests over a TCP session with the web server. The web server accepts the packets from Employee X only when the packet has the correct SEQ/ACK numbers. As seen previously, these numbers are important for the web server to distinguish between different sessions and to make sure it is still talking to Employee X. Imagine that the cracker starts sending packets to the web server spoofing the IP address of Employee X, using the correct SEQ/ACK combination. The web server accepts the packet and increments the ACK number. In the meantime, Employee X continues to send packets but with incorrect SEQ/ACK numbers. As a result of sending unsynchronized packets, all data from Employee X is discarded when received by the web server. The attacker pretends to be Employee X using the correct numbers. This finally results in the cracker hijacking the connection, whereby Employee X is completely confused and the web server replies assuming the cracker is sending correct synchronized data. STEPS: The attacker examines the traffic flows with a network monitor and notices traffic from Employee X to a web server. The web server returns or echoes data back to the origination station (Employee X). Employee X acknowledges the packet. The cracker launches a spoofed packet to the server. The web server responds to the cracker. The cracker starts verifying SEQ/ACK numbers to double-check success. At this time, the cracker takes over the session from Employee X, which results in a session hanging for Employee X. The cracker can start sending traffic to the web server. The web server returns the requested data to confirm delivery with the correct ACK number. The cracker can continue to send data (keeping track of the correct SEQ/ACK numbers) until eventually setting the FIN flag to terminate the session. Buffer Overflow A buffer is a temporary data storage area used to store program code and data. When a program or process tries to store more data in a buffer than it was originally anticipated to hold, a buffer overflow occurs. Buffers are temporary storage locations in memory (memory or buffer sizes are often measured in bytes) that are able to store a fixed amount of data in bytes. When more data is retrieved than can be stored in a buffer location, the additional information must go into an adjacent buffer, resulting in overwriting the valid data held in them. Mechanism: Buffer overflow vulnerabilities exist in different types. But the overall goal for all buffer overflow attacks is to take over the control of a privileged program and, if possible, the host. The attacker has two tasks to achieve this goal. First, the dirty code needs to be available in the program's code address space. Second, the privileged program should jump to that particular part of the code, which ensures that the proper parameters are loaded into memory. The first task can be achieved in two ways: by injecting the code in the right address space or by using the existing code and modifying certain parameters slightly. The second task is a little more complex because the program's control flow needs to be modified to make the program jump to the dirty code. CounterMeasure: The most important approach is to have a concerted focus on writing correct code. A second method is to make the data buffers (memory locations) address space of the program code non executable. This type of address space makes it impossible to execute code, which might be infiltrated in the program's buffers during an attack. More Spoofing Address Resolution Protocol Spoofing The Address Resolution Protocol (ARP) provides a mechanism to resolve, or map, a known IP address to a MAC sublayer address. Using ARP spoofing, the cracker can exploit this hardware address authentication mechanism by spoofing the hardware address of Host B. Basically, the attacker can convince any host or network device on the local network that the cracker's workstation is the host to be trusted. This is a common method used in a switched environment. ARP spoofing can be prevented with the implementation of static ARP tables in all the hosts and routers of your network. Alternatively, you can implement an ARP server that responds to ARP requests on behalf of the target host. DNS Spoofing DNS spoofing is the method whereby the hacker convinces the target machine that the system it wants to connect to is the machine of the cracker. The cracker modifies some records so that name entries of hosts correspond to the attacker's IP address. There have been instances in which the complete DNS server was compromised by an attack. To counter DNS spoofing, the reverse lookup detects these attacks. The reverse lookup is a mechanism to verify the IP address against a name. The IP address and name files are usually kept on different servers to make compromise much more difficult","title":"Network Security"},{"location":"security/network_security/#part-ii-network-security","text":"","title":"Part II : Network Security"},{"location":"security/network_security/#introduction","text":"TCP/IP is the dominant networking technology today. It is a five-layer architecture. These layers are, from top to bottom, the application layer, the transport layer (TCP), the network layer (IP), the data-link layer, and the physical layer. In addition to TCP/IP, there also are other networking technologies. For convenience, we use the OSI network model to represent non-TCP/IP network technologies. Different networks are interconnected using gateways. A gateway can be placed at any layer. The OSI model is a seven-layer architecture. The OSI architecture is similar to the TCP/IP architecture, except that the OSI model specifies two additional layers between the application layer and the transport layer in the TCP/IP architecture. These two layers are the presentation layer and the session layer. Figure 5.1 shows the relation between the TCP/IP layers and the OSI layers. The application layer in TCP/IP corresponds to the application layer and the presentation layer in OSI. The transport layer in TCP/IP corresponds to the session layer and the transport layer in OSI. The remaining three layers in the TCP/IP architecture are one-to-one correspondent to the remaining three layers in the OSI model. Correspondence between layers of the TCP/IP architecture and the OSI model. Also shown are placements of cryptographic algorithms in network layers, where the dotted arrows indicate actual communications of cryptographic algorithms The functionalities of OSI layers are briefly described as follows: The application layer serves as an interface between applications and network programs. It supports application programs and end-user processing. Common application-layer programs include remote logins, file transfer, email, and Web browsing. The presentation layer is responsible for dealing with data that is formed differently. This protocol layer allows application-layer programs residing on different sides of a communication channel with different platforms to understand each other's data formats regardless of how they are presented. The session layer is responsible for creating, managing, and closing a communication connection. The transport layer is responsible for providing reliable connections, such as packet sequencing, traffic control, and congestion control. The network layer is responsible for routing device-independent data packets from the current hop to the next hop. The data-link layer is responsible for encapsulating device-independent data packets into device-dependent data frames. It has two sublayers: logical link control and media access control. The physical layer is responsible for transmitting device-dependent frames through some physical media. Starting from the application layer, data generated from an application program is passed down layer-by-layer to the physical layer. Data from the previous layer is enclosed in a new envelope at the current layer, where the data from the previous layer is also just an envelope containing the data from the layer before it. This is similar to enclosing a smaller envelope in a larger one. The envelope added at each layer contains sufficient information for handling the packet. Application-layer data are divided into blocks small enough to be encapsulated in an envelope at the next layer. Application data blocks are \u201cdressed up\u201d in the TCP/IP architecture according to the following basic steps. At the sending side, an application data block is encapsulated in a TCP packet when it is passed down to the TCP layer. In other words, a TCP packet consists of a header and a payload, where the header corresponds to the TCP envelope and the payload is the application data block. Likewise, the TCP packet will be encapsulated in an IP packet when it is passed down to the IP layer. An IP packet consists of a header and a payload, which is the TCP packet passed down from the TCP layer. The IP packet will be encapsulated in a device-dependent frame (e.g., an Ethernet frame) when it is passed down to the data-link layer. A frame has a header, and it may also have a trailer. For example, in addition to having a header, an Ethernet frame also has a 32-bit cyclic redundancy check (CRC) trailer. When it is passed down to the physical layer, a frame will be transformed to a sequence of media signals for transmission Flow Diagram of a Packet Generation At the destination side, the medium signals are converted by the physical layer into a frame, which is passed up to the data-link layer. The data-link layer passes the frame payload (i.e., the IP packet encapsulated in the frame) up to the IP layer. The IP layer passes the IP payload, namely, the TCP packet encapsulated in the IP packet, up to the TCP layer. The TCP layer passes the TCP payload, namely, the application data block, up to the application layer. When a packet arrives at a router, it only goes up to the IP layer, where certain fields in the IP header are modified (e.g., the value of TTL is decreased by 1). This modified packet is then passed back down layer-by-layer to the physical layer for further transmission.","title":"Introduction"},{"location":"security/network_security/#public-key-infrastructure","text":"To deploy cryptographic algorithms in network applications, we need a way to distribute secret keys using open networks. Public-key cryptography is the best way to distribute these secret keys. In order to use public-key cryptography, we need to build a public-key infrastructure (PKI) to support and manage public-key certificates and certificate authority (CA) networks. In particular, PKIs are set up to perform the following functions: Determine the legitimacy of users before issuing public-key certificates to them. Issue public-key certificates upon user requests. Extend public-key certificates valid time upon user requests. Revoke public-key certificates upon users' requests or when the corresponding private keys are compromised. Store and manage public-key certificates. Prevent digital signature signers from denying their signatures. Support CA networks to allow different CAs to authenticate public-key certificates issued by other CAs. X.509: https://certificatedecoder.dev/?gclid=EAIaIQobChMI0M731O6G6gIVVSQrCh04bQaAEAAYASAAEgKRkPD_BwE","title":"Public Key Infrastructure"},{"location":"security/network_security/#ipsec-a-security-protocol-at-the-network-layer","text":"IPsec is a major security protocol at the network layer IPsec provides a potent platform for constructing virtual private networks (VPN). VPNs are private networks overlayed on public networks. The purpose of deploying cryptographic algorithms at the network layer is to encrypt or authenticate IP packets (either just the payloads or the whole packets). IPsec also specifies how to exchange keys. Thus, IPsec consists of authentication protocols, encryption protocols, and key exchange protocols. They are referred to, respectively, as authentication header (AH), encapsulating security payload (ESP), and Internet key exchange (IKE).","title":"IPsec: A Security Protocol at the Network Layer"},{"location":"security/network_security/#pgp-smime-email-security","text":"There are a number of security protocols at the application layer. The most used of these protocols are email security protocols namely PGP and S/MIME. SMTP (\u201cSimple Mail Transfer Protocol\u201d) is used for sending and delivering from a client to a server via port 25: it\u2019s the outgoing server. On the contrary, POP (\u201cPost Office Protocol\u201d) allows the user to pick up the message and download it into his own inbox: it\u2019s the incoming server. The latest version of the Post Office Protocol is named POP3, and it\u2019s been used since 1996; it uses port 110 PGP PGP implements all major cryptographic algorithms, the ZIP compression algorithm, and the Base64 encoding algorithm. It can be used to authenticate a message, encrypt a message, or both. PGP follows the following general process: authentication, ZIP compression, encryption, and Base64 encoding. The Base64 encoding procedure makes the message ready for SMTP transmission GPG (GnuPG) GnuPG is another free encryption standard that companies may use that is based on OpenPGP. GnuPG serves as a replacement for Symantec\u2019s PGP. The main difference is the supported algorithms. However, GnuPG plays nice with PGP by design. Because GnuPG is open, some businesses would prefer the technical support and the user interface that comes with Symantec\u2019s PGP. It is important to note that there are some nuances between compatibility of GnuPG and PGP, such as the compatibility between certain algorithms, but in most applications such as email, there are workarounds. One such algorithm is the IDEA Module which isn\u2019t included in GnuPG out of the box due to patent issues. S/MIME SMTP can only handle 7-bit ASCII text (You can use UTF-8 extensions to alleviate this limitations, ) messages. While POP can handle other content types besides 7-bit ASCII, POP may, under a common default setting, download all the messages stored in the mail server to the user's local computer. After that, if POP removes these messages from the mail server. This makes it difficult for the user to read his messages from multiple computers. The Multipurpose Internet Mail Extension protocol (MIME) was designed to support sending and receiving email messages in various formats, including nontext files generated by word processors, graphics files, sound files, and video clips. Moreover, MIME allows a single message to include mixed types of data in any combination of these formats. The Internet Mail Access Protocol (IMAP), operated on TCP port 143(only for non-encrypted), stores (Configurable on both server & client just like PoP) incoming email messages in the mail server until the user deletes them deliberately. This allows the user to access his mailbox from multiple machines and download messages to a local machine without deleting it from the mailbox in the mail server. SSL/TLS SSL uses a PKI to decide if a server\u2019s public key is trustworthy by requiring servers to use a security certificate signed by a trusted CA. When Netscape Navigator 1.0 was released, it trusted a single CA operated by the RSA Data Security corporation. The server\u2019s public RSA keys were used to be stored in the security certificate, which can then be used by the browser to establish a secure communication channel. The security certificates we use today still rely on the same standard (named X.509) that Netscape Navigator 1.0 used back then. Netscape\u2019s intent was to train users(though this didn\u2019t work out later) to differentiate secure communications from insecure ones, so they put a lock icon next to the address bar. When the lock is open, the communication is insecure. A closed lock means communication has been secured with SSL, which required the server to provide a signed certificate. You\u2019re obviously familiar with this icon as it\u2019s been in every browser ever since. The engineers at Netscape truly created a standard for secure internet communications. A year after releasing SSL 2.0, Netscape fixed several security issues and released SSL 3.0, a protocol that, albeit being officially deprecated since June 2015, remains in use in certain parts of the world more than 20 years after its introduction. In an effort to standardize SSL, the Internet Engineering Task Force (IETF) created a slightly modified SSL 3.0 and, in 1999, unveiled it as Transport Layer Security (TLS) 1.0. The name change between SSL and TLS continues to confuse people today. Officially, TLS is the new SSL, but in practice, people use SSL and TLS interchangeably to talk about any version of the protocol. Must See: https://tls.ulfheim.net/ https://davidwong.fr/tls13/","title":"PGP &amp; S/MIME : Email Security"},{"location":"security/network_security/#network-perimeter-security","text":"Let us see how we keep a check on the perimeter i.e the edges, the first layer of protection","title":"Network  Perimeter Security"},{"location":"security/network_security/#general-firewall-framework","text":"Firewalls are needed because encryption algorithms cannot effectively stop malicious packets from getting into an edge network. This is because IP packets, regardless of whether they are encrypted, can always be forwarded into an edge network. Firewalls that were developed in the 1990s are important instruments to help restrict network access. A firewall may be a hardware device, a software package, or a combination of both. Packets flowing into the internal network from the outside should be evaluated before they are allowed to enter. One of the critical elements of a firewall is its ability to examine packets without imposing a negative impact on communication speed while providing security protections for the internal network. The packet inspection that is carried out by firewalls can be done using several different methods. On the basis of the particular method used by the firewall, it can be characterized as either a packet filter, circuit gateway, application gateway, or dynamic packet filter.","title":"General Firewall Framework"},{"location":"security/network_security/#packet-filters","text":"It inspects ingress packets coming to an internal network from outside and inspects egress packets going outside from an internal network Packing filtering only inspects IP headers and TCP headers, not the payloads generated at the application layer A packet filtering firewall uses a set of rules to determine whether a packet should be allowed or denied to pass through. 2 types: Stateless It treats each packet as an independent object, and it does not keep track of any previously processed packets. In other words, stateless filtering inspects a packet when it arrives and makes a decision without leaving any record of the packet being inspected. Stateful Stateful filtering, also referred to as connection-state filtering, keeps track of connections between an internal host and an external host. A connection state (or state, for short) indicates whether it is a TCP connection or a UDP connection and whether the connection is established.","title":"Packet Filters"},{"location":"security/network_security/#circuit-gateways","text":"Circuit gateways, also referred to as circuit-level gateways, are typically operated at the transportation layer They evaluate the information of the IP addresses and the port numbers contained in TCP (or UDP) headers and use it to determine whether to allow or to disallow an internal host and an external host to establish a connection. It is common practice to combine packet filters and circuit gateways to form a dynamic packet filter (DPF).","title":"Circuit Gateways"},{"location":"security/network_security/#application-gatewaysalg","text":"Aka PROXY Servers An Application Level Gateway (ALG) acts like a proxy for internal hosts, processing service requests from external clients. An ALG performs deep inspections on each IP packet (ingress or egress). In particular, an ALG inspects application program formats contained in the packet (e.g., MIME format or SQL format) and examines whether its payload is permitted. Thus, an ALG may be able to detect a computer virus contained in the payload. Because an ALG inspects packet payloads, it may be able to detect malicious code and quarantine suspicious packets, in addition to blocking packets with suspicious IP addresses and TCP ports. On the other hand, an ALG also incurs substantial computation and space overheads.","title":"Application Gateways(ALG)"},{"location":"security/network_security/#trusted-systems-bastion-hosts","text":"A Trusted Operating System (TOS) is an operating system that meets a particular set of security requirements. Whether an operating system can be trusted or not depends on a number of elements. For example, for an operating system on a particular computer to be certified trusted, one needs to validate that, among other things, the following four requirements are satisfied: Its system design contains no defects; Its system software contains no loopholes; Its system is configured properly; and Its system management is appropriate. Bastion Hosts Bastion hosts are computers with strong defense mechanisms. They often serve as host computers for implementing application gateways, circuit gateways, and other types of firewalls. A bastion host is operated on a trusted operating system that must not contain unnecessary functionalities or programs. This measure helps to reduce error probabilities and makes it easier to conduct security checks. Only those network application programs that are absolutely necessary, for example, SSH, DNS, SMTP, and authentication programs, are installed on a bastion host. Bastion hosts are also primarily used as controlled ingress points so that the security monitoring can focus more narrowly on actions happening at a single point closely.","title":"Trusted Systems &amp; Bastion Hosts"},{"location":"security/network_security/#common-techniques-scannings-packet-capturing","text":"","title":"Common Techniques &amp; Scannings, Packet Capturing"},{"location":"security/network_security/#scanning-ports-with-nmap","text":"Nmap (\"Network Mapper\") is a free and open source (license) utility for network discovery and security auditing. Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime. The best thing about Nmap is it\u2019s free and open source and is very flexible and versatile Nmap is often used to determine alive hosts in a network, open ports on those hosts, services running on those open ports, and version identification of that service on that port. More at http://scanme.nmap.org/ nmap [scan type] [options] [target specification] Nmap uses 6 different port states: Open \u2014 An open port is one that is actively accepting TCP, UDP or SCTP connections. Open ports are what interests us the most because they are the ones that are vulnerable to attacks. Open ports also show the available services on a network. Closed \u2014 A port that receives and responds to Nmap probe packets but there is no application listening on that port. Useful for identifying that the host exists and for OS detection. Filtered \u2014 Nmap can\u2019t determine whether the port is open because packet filtering prevents its probes from reaching the port. Filtering could come from firewalls or router rules. Often little information is given from filtered ports during scans as the filters can drop the probes without responding or respond with useless error messages e.g. destination unreachable. Unfiltered \u2014 Port is accessible but Nmap doesn\u2019t know if its open or closed. Only used in ACK scan which is used to map firewall rulesets. Other scan types can be used to identify whether the port is open. Open/filtered \u2014 Nmap is unable to determine between open and filtered. This happens when an open port gives no response. No response could mean that the probe was dropped by a packet filter or any response is blocked. Closed/filtered \u2014 Nmap is unable to determine whether a port is closed or filtered. Only used in the IP ID idle scan.","title":"Scanning Ports with Nmap"},{"location":"security/network_security/#types-of-nmap-scan","text":"TCP Connect TCP Connect scan completes the 3-way handshake. If a port is open, the operating system completes the TCP three-way handshake and the port scanner immediately closes the connection to avoid DOS. This is \u201cnoisy\u201d because the services can log the sender IP address and might trigger Intrusion Detection Systems. UDP Scan This scan checks to see if there are any UDP ports listening. Since UDP does not respond with a positive acknowledgment like TCP and only responds to an incoming UDP packet when the port is closed, SYN Scan SYN scan is another form of TCP scanning. This scan type is also known as \u201chalf-open scanning\u201d because it never actually opens a full TCP connection. The port scanner generates a SYN packet. If the target port is open, it will respond with an SYN-ACK packet. The scanner host responds with an RST packet, closing the connection before the handshake is completed. If the port is closed but unfiltered, the target will instantly respond with an RST packet. SYN scan has the advantage that the individual services never actually receive a connection. FIN Scan This is a stealthy scan, like the SYN scan, but sends a TCP FIN packet instead. ACK Scan Ack scanning determines whether the port is filtered or not. Null Scan Another very stealthy scan that sets all the TCP header flags to off or null. This is not normally a valid packet and some hosts will not know what to do with this. XMAS Scan Similar to the NULL scan except for all the flags in the TCP header is set to on RPC Scan This special type of scan looks for machine answering to RPC (Remote Procedure Call) services IDLE Scan It is a super stealthy method whereby the scan packets are bounced off an external host. You don\u2019t need to have control over the other host but it does have to set up and meet certain requirements. You must input the IP address of our \u201czombie\u201d host and what port number to use. It is one of the more controversial options in Nmap since it really only has a use for malicious attacks. Scan Techniques A couple of scan techniques which can be used to gain more information about a system and its ports. You can read more at https://medium.com/infosec-adventures/nmap-cheatsheet-a423fcdda0ca","title":"Types of Nmap Scan:"},{"location":"security/network_security/#openvas","text":"OpenVAS is a full-featured vulnerability scanner. OpenVAS is a framework of services and tools that provides a comprehensive and powerful vulnerability scanning and management package OpenVAS, which is an open-source program, began as a fork of the once-more-popular scanning program, Nessus. OpenVAS is made up of three main parts. These are: a regularly updated feed of Network Vulnerability Tests (NVTs); a scanner, which runs the NVTs; and a SQLite 3 database for storing both your test configurations and the NVTs\u2019 results and configurations. https://www.greenbone.net/en/install_use_gce/","title":"OpenVAS"},{"location":"security/network_security/#wireshark","text":"Wireshark is a protocol analyzer. This means Wireshark is designed to decode not only packet bits and bytes but also the relations between packets and protocols. Wireshark understands protocol sequences. A simple demo of wireshark Capture only udp packets: Capture filter = \u201cudp\u201d Capture only tcp packets Capture filter = \u201ctcp\u201d TCP/IP 3 way Handshake Filter by IP address: displays all traffic from IP, be it source or destination ip.addr == 192.168.1.1 Filter by source address: display traffic only from IP source ip.src == 192.168.0.1 Filter by destination: display traffic only form IP destination ip.dst == 192.168.0.1 Filter by IP subnet: display traffic from subnet, be it source or destination ip.addr = 192.168.0.1/24 Filter by protocol: filter traffic by protocol name dns http ftp arp ssh telnet icmp Exclude IP address: remove traffic from and to IP address !ip.addr ==192.168.0.1 Display traffic between two specific subnet ip.addr == 192.168.0.1/24 and ip.addr == 192.168.1.1/24 Display traffic between two specific workstations ip.addr == 192.168.0.1 and ip.addr == 192.168.0.2 Filter by MAC eth.addr = 00:50:7f:c5:b6:78 Filter TCP port tcp.port == 80 Filter TCP port source tcp.srcport == 80 Filter TCP port destination tcp.dstport == 80 Find user agents http.user_agent contains Firefox !http.user_agent contains || !http.user_agent contains Chrome Filter broadcast traffic !(arp or icmp or dns) Filter IP address and port tcp.port == 80 && ip.addr == 192.168.0.1 Filter all http get requests http.request Filter all http get requests and responses http.request or http.response Filter three way handshake tcp.flags.syn==1 or (tcp.seq==1 and tcp.ack==1 and tcp.len==0 and tcp.analysis.initial_rtt) Find files by type frame contains \u201c(attachment|tar|exe|zip|pdf)\u201d Find traffic based on keyword tcp contains facebook frame contains facebook Detecting SYN Floods tcp.flags.syn == 1 and tcp.flags.ack == 0 Wireshark Promiscuous Mode - By default, Wireshark only captures packets going to and from the computer where it runs. By checking the box to run Wireshark in Promiscuous Mode in the Capture Settings, you can capture most of the traffic on the LAN.","title":"WireShark"},{"location":"security/network_security/#dumpcap","text":"Dumpcap is a network traffic dump tool. It captures packet data from a live network and writes the packets to a file. Dumpcap\u2019s native capture file format is pcapng, which is also the format used by Wireshark. By default, Dumpcap uses the pcap library to capture traffic from the first available network interface and writes the received raw packet data, along with the packets\u2019 time stamps into a pcapng file. The capture filter syntax follows the rules of the pcap library. The Wireshark command line utility called 'dumpcap.exe' can be used to capture LAN traffic over an extended period of time. Wireshark itself can also be used, but dumpcap does not significantly utilize the computer's memory while capturing for long periods of time.","title":"DumpCap"},{"location":"security/network_security/#daemonlogger","text":"Daemonlogger is a packet logging application designed specifically for use in Network and Systems Management (NSM) environments. The biggest benefit Daemonlogger provides is that, like Dumpcap, it is simple to use for capturing packets. In order to begin capturing, you need only to invoke the command and specify an interface. daemonlogger \u2013i eth1 This option, by default, will begin capturing packets and logging them to the current working directory. Packets will be collected until the capture file size reaches 2 GB, and then a new file will be created. This will continue indefinitely until the process is halted.","title":"DaemonLogger"},{"location":"security/network_security/#netsniff-ng","text":"Netsniff-NG is a high-performance packet capture utility While the utilities we\u2019ve discussed to this point rely on Libpcap for capture, Netsniff-NG utilizes zero-copy mechanisms to capture packets. This is done with the intent to support full packet capture over high throughput links. In order to begin capturing packets with Netsniff-NG, we have to specify an input and output. In most cases, the input will be a network interface, and the output will be a file or folder on disk. netsniff-ng \u2013i eth1 \u2013o data.pcap","title":"NetSniff-NG"},{"location":"security/network_security/#netflow","text":"NetFlow is a feature that was introduced on Cisco routers around 1996 that provides the ability to collect IP network traffic as it enters or exits an interface. By analyzing the data provided by NetFlow, a network administrator can determine things such as the source and destination of traffic, class of service, and the causes of congestion. A typical flow monitoring setup (using NetFlow) consists of three main components:[1] Flow exporter: aggregates packets into flows and exports flow records towards one or more flow collectors. Flow collector: responsible for reception, storage and pre-processing of flow data received from a flow exporter. Analysis application: analyzes received flow data in the context of intrusion detection or traffic profiling, for example. Routers and switches that support NetFlow can collect IP traffic statistics on all interfaces where NetFlow is enabled, and later export those statistics as NetFlow records toward at least one NetFlow collector\u2014typically a server that does the actual traffic analysis.","title":"Netflow"},{"location":"security/network_security/#ids","text":"A security solution that detects security-related events in your environment but does not block them. IDS sensors can be software and hardware based used to collect and analyze the network traffic. These sensors are available in two varieties, network IDS and host IDS. A host IDS is a server-specific agent running on a server with a minimum of overhead to monitor the operating system. A network IDS can be embedded in a networking device, a standalone appliance, or a module monitoring the network traffic. Signature Based IDS The signature-based IDS monitors the network traffic or observes the system and sends an alarm if a known malicious event is happening. It does so by comparing the data flow against a database of known attack patterns These signatures explicitly define what traffic or activity should be considered as malicious. Signature-based detection has been the bread and butter of network-based defensive security for over a decade, partially because it is very similar to how malicious activity is detected at the host level with antivirus utilities The formula is fairly simple: an analyst observes a malicious activity, derives indicators from the activity and develops them into signatures, and then those signatures will alert whenever the activity occurs again. ex: SNORT & SURICATA Policy Based IDS The policy-based IDSs (mainly host IDSs) trigger an alarm whenever a violation occurs against the configured policy. This configured policy is or should be a representation of the security policies. This type of IDS is flexible and can be customized to a company's network requirements because it knows exactly what is permitted and what is not. On the other hand, the signature-based systems rely on vendor specifics and default settings. Anomaly Based IDS The anomaly-based IDS looks for traffic that deviates from the normal, but the definition of what is a normal network traffic pattern is the tricky part Two types of anomaly-based IDS exist: statistical and nonstatistical anomaly detection Statistical anomaly detection learns the traffic patterns interactively over a period of time. In the nonstatistical approach, the IDS has a predefined configuration of the supposedly acceptable and valid traffic patterns. Host Based IDS & Network Based IDS A host IDS can be described as a distributed agent residing on each server of the network that needs protection. These distributed agents are tied very closely to the underlying operating system. Network IDSs, on the other hand, can be described as intelligent sniffing devices. Data (raw packets) is captured from the network by a network IDS, whereas host IDSs capture the data from the host on which they are installed. Honeypots The use of decoy machines to direct intruders' attention away from the machines under protection is a major technique to preclude intrusion attacks. Any device, system, directory, or file used as a decoy to lure attackers away from important assets and to collect intrusion or abusive behaviors is referred to as a honeypot. A honeypot may be implemented as a physical device or as an emulation system. The idea is to set up decoy machines in a LAN, or decoy directories/files in a file system and make them appear important, but with several exploitable loopholes, to lure attackers to attack these machines or directories/files, so that other machines, directories, and files can evade intruders' attentions. A decoy machine may be a host computer or a server computer. Likewise, we may also set up decoy routers or even decoy LANs.","title":"IDS"},{"location":"security/network_security/#chinks-in-the-armour-tcpip-security-issues","text":"","title":"Chinks In The Armour (TCP/IP Security Issues)"},{"location":"security/network_security/#ip-spoofing","text":"In this type of attack, the attacker replaces the IP address of the sender, or in some rare cases the destination, with a different address. IP spoofing is normally used to exploit a target host. In other cases, it is used to start a denial-of-service (DoS) attack. In a DoS attack, an attacker modifies the IP packet to mislead the target host into accepting the original packet as a packet sourced at a trusted host. The attacker must know the IP address of the trusted host to modify the packet headers (source IP address) so that it appears that the packets are coming from that host. IP Spoofing Detection Techniques Direct TTL Probes In this technique we send a packet to a host of suspect spoofed IP that triggers reply and compare TTL with suspect packet; if the TTL in the reply is not the same as the packet being checked; it is a spoofed packet. This Technique is successful when the attacker is in a different subnet from the victim. IP Identification Number. Send a probe to the host of suspect spoofed traffic that triggers a reply and compare IP ID with suspect traffic. If IP IDs are not in the near value of packet being checked, suspect traffic is spoofed TCP Flow Control Method Attackers sending spoofed TCP packets will not receive the target\u2019s SYN-ACK packets. Attackers cannot therefore be responsive to change in the congestion window size When the receiver still receives traffic even after a windows size is exhausted, most probably the packets are spoofed.","title":"IP Spoofing"},{"location":"security/network_security/#covert-channel","text":"A covert or clandestine channel can be best described as a pipe or communication channel between two entities that can be exploited by a process or application transferring information in a manner that violates the system's security specifications. More specifically for TCP/IP, in some instances, covert channels are established, and data can be secretly passed between two end systems. Ex: ICMP resides at the Internet layer of the TCP/IP protocol suite and is implemented in all TCP/IP hosts. Based on the specifications of the ICMP Protocol, an ICMP Echo Request message should have an 8-byte header and a 56-byte payload. The ICMP Echo Request packet should not carry any data in the payload. However, these packets are often used to carry secret information. The ICMP packets are altered slightly to carry secret data in the payload. This makes the size of the packet larger, but no control exists in the protocol stack to defeat this behavior. The alteration of ICMP packets gives intruders the opportunity to program specialized client-server pairs. These small pieces of code export confidential information without alerting the network administrator. ICMP can be leveraged for more than data exfiltration. For eg. some C&C tools such as Loki used ICMP channel to establish encrypted interactive session back in 1996. Deep packet inspection has since come a long way. A lot of IDS/IPS detect ICMP tunneling. Check for echo responses that do not contain the same payload as request Check for volume of ICMP traffic specially for volumes beyond an acceptable threshold","title":"Covert Channel"},{"location":"security/network_security/#ip-fragmentation-attack","text":"The TCP/IP protocol suite, or more specifically IP, allows the fragmentation of packets.(this is a feature & not a bug) IP fragmentation offset is used to keep track of the different parts of a datagram. The information or content in this field is used at the destination to reassemble the datagrams All such fragments have the same Identification field value, and the fragmentation offset indicates the position of the current fragment in the context of the original packet. Many access routers and firewalls do not perform packet reassembly. In normal operation, IP fragments do not overlap, but attackers can create artificially fragmented packets to mislead the routers or firewalls. Usually, these packets are small and almost impractical for end systems because of data and computational overhead. A good example of an IP fragmentation attack is the Ping of Death attack. The Ping of Death attack sends fragments that, when reassembled at the end station, create a larger packet than the maximum permissible length. TCP Flags Data exchange using TCP does not happen until a three-way handshake has been successfully completed. This handshake uses different flags to influence the way TCP segments are processed. There are 6 bits in the TCP header that are often called flags. Namely: 6 different flags are part of the TCP header: Urgent pointer field (URG), Acknowledgment field (ACK), Push function (PSH), Reset the connection (RST), Synchronize sequence numbers (SYN), and sender is finished with this connection (FIN). Abuse of the normal operation or settings of these flags can be used by attackers to launch DoS attacks. This causes network servers or web servers to crash or hang. | SYN | FIN | PSH | RST | Validity| |------|------|-------|------|---------| | 1 |1 |0 |0 |Illegal Combination | 1 |1 |1 |0 |Illegal Combination | 1 |1 |0 |1 |Illegal Combination | 1 |1 |1 |1 |Illegal Combination The attacker's ultimate goal is to write special programs or pieces of code that are able to construct these illegal combinations resulting in an efficient DoS attack. SYN FLOOD The timers (or lack of certain timers) in 3 way handshake are often used and exploited by attackers to disable services or even to enter systems. After step 2 of the three-way handshake, no limit is set on the time to wait after receiving a SYN. The attacker initiates many connection requests to the web server of Company XYZ (almost certainly with a spoofed IP address). The SYN+ACK packets (Step 2) sent by the web server back to the originating source IP address are not replied to. This leaves a TCP session half-open on the web server. Multiple packets cause multiple TCP sessions to stay open. Based on the hardware limitations of the server, a limited number of TCP sessions can stay open, and as a result, the web server refuses further connection establishments attempts from any host as soon as a certain limit is reached. These half-open connections need to be completed or timed out before new connections can be established. FIN Attack In normal operation, the sender sets the TCP FIN flag indicating that no more data will be transmitted and the connection can be closed down. This is a four-way handshake mechanism, with both sender and receiver expected to send an acknowledgement on a received FIN packet. During an attack that is trying to kill connections, a spoofed FIN packet is constructed. This packet also has the correct sequence number, so the packets are seen as valid by the targeted host. These sequence numbers are easy to predict. This process is referred to as TCP sequence number prediction, whereby the attacker either sniffs the current Sequence and Acknowledgment (SEQ/ACK) numbers of the connection or can algorithmically predict these numbers.","title":"IP Fragmentation Attack"},{"location":"security/network_security/#connection-hijacking","text":"An authorized user (Employee X) sends HTTP requests over a TCP session with the web server. The web server accepts the packets from Employee X only when the packet has the correct SEQ/ACK numbers. As seen previously, these numbers are important for the web server to distinguish between different sessions and to make sure it is still talking to Employee X. Imagine that the cracker starts sending packets to the web server spoofing the IP address of Employee X, using the correct SEQ/ACK combination. The web server accepts the packet and increments the ACK number. In the meantime, Employee X continues to send packets but with incorrect SEQ/ACK numbers. As a result of sending unsynchronized packets, all data from Employee X is discarded when received by the web server. The attacker pretends to be Employee X using the correct numbers. This finally results in the cracker hijacking the connection, whereby Employee X is completely confused and the web server replies assuming the cracker is sending correct synchronized data. STEPS: The attacker examines the traffic flows with a network monitor and notices traffic from Employee X to a web server. The web server returns or echoes data back to the origination station (Employee X). Employee X acknowledges the packet. The cracker launches a spoofed packet to the server. The web server responds to the cracker. The cracker starts verifying SEQ/ACK numbers to double-check success. At this time, the cracker takes over the session from Employee X, which results in a session hanging for Employee X. The cracker can start sending traffic to the web server. The web server returns the requested data to confirm delivery with the correct ACK number. The cracker can continue to send data (keeping track of the correct SEQ/ACK numbers) until eventually setting the FIN flag to terminate the session.","title":"Connection Hijacking"},{"location":"security/network_security/#buffer-overflow","text":"A buffer is a temporary data storage area used to store program code and data. When a program or process tries to store more data in a buffer than it was originally anticipated to hold, a buffer overflow occurs. Buffers are temporary storage locations in memory (memory or buffer sizes are often measured in bytes) that are able to store a fixed amount of data in bytes. When more data is retrieved than can be stored in a buffer location, the additional information must go into an adjacent buffer, resulting in overwriting the valid data held in them. Mechanism: Buffer overflow vulnerabilities exist in different types. But the overall goal for all buffer overflow attacks is to take over the control of a privileged program and, if possible, the host. The attacker has two tasks to achieve this goal. First, the dirty code needs to be available in the program's code address space. Second, the privileged program should jump to that particular part of the code, which ensures that the proper parameters are loaded into memory. The first task can be achieved in two ways: by injecting the code in the right address space or by using the existing code and modifying certain parameters slightly. The second task is a little more complex because the program's control flow needs to be modified to make the program jump to the dirty code. CounterMeasure: The most important approach is to have a concerted focus on writing correct code. A second method is to make the data buffers (memory locations) address space of the program code non executable. This type of address space makes it impossible to execute code, which might be infiltrated in the program's buffers during an attack.","title":"Buffer Overflow"},{"location":"security/network_security/#more-spoofing","text":"Address Resolution Protocol Spoofing The Address Resolution Protocol (ARP) provides a mechanism to resolve, or map, a known IP address to a MAC sublayer address. Using ARP spoofing, the cracker can exploit this hardware address authentication mechanism by spoofing the hardware address of Host B. Basically, the attacker can convince any host or network device on the local network that the cracker's workstation is the host to be trusted. This is a common method used in a switched environment. ARP spoofing can be prevented with the implementation of static ARP tables in all the hosts and routers of your network. Alternatively, you can implement an ARP server that responds to ARP requests on behalf of the target host. DNS Spoofing DNS spoofing is the method whereby the hacker convinces the target machine that the system it wants to connect to is the machine of the cracker. The cracker modifies some records so that name entries of hosts correspond to the attacker's IP address. There have been instances in which the complete DNS server was compromised by an attack. To counter DNS spoofing, the reverse lookup detects these attacks. The reverse lookup is a mechanism to verify the IP address against a name. The IP address and name files are usually kept on different servers to make compromise much more difficult","title":"More Spoofing"},{"location":"security/threats_attacks_defences/","text":"Part III: Threats, Attacks & Defense DNS Protection Cache Poisoning Attack Since DNS responses are cached, a quick response can be provided for repeated translations. DNS negative queries are also cached, e.g., misspelled words, and all cached data periodically times out. Cache poisoning is an issue in what is known as pharming. This term is used to describe a hacker\u2019s attack in which a website\u2019s traffic is redirected to a bogus website by forging the DNS mapping. In this case, an attacker attempts to insert a fake address record for an Internet domain into the DNS. If the server accepts the fake record, the cache is poisoned and subsequent requests for the address of the domain are answered with the address of a server controlled by the attacker. As long as the fake entry is cached by the server, browsers or e-mail servers will automatically go to the address provided by the compromised DNS server. the typical time to live (TTL) for cached entries is a couple of hours, thereby permitting ample time for numerous users to be affected by the attack. DNSSEC (Security Extension) The long-term solution to these DNS problems is authentication. If a resolver cannot distinguish between valid and invalid data in a response, then add source authentication to verify that the data received in a response is equal to the data entered by the zone administrator DNS Security Extensions (DNSSEC) protects against data spoofing and corruption, and provides mechanisms to authenticate servers and requests, as well as mechanisms to establish authenticity and integrity. When authenticating DNS responses, each DNS zone signs its data using a private key. It is recommended that this signing be done offline and in advance. The query for a particular record returns the requested resource record set (RRset) and signature (RRSIG) of the requested resource record set. The resolver then authenticates the response using a public key, which is pre-configured or learned via a sequence of key records in the DNS hierarchy. The goals of DNSSEC are to provide authentication and integrity for DNS responses without confidentiality or DDoS protection. BGP BGP stands for border gateway protocol. It is a routing protocol that exchanges routing information among multiple Autonomous Systems (AS) An Autonomous system is a collection of routers or networks with the same network policy usually under a single administrative control. BGP tells routers which hop to use in order to reach the destination network. BGP is used for both communicating information among routers in an AS (interior) and between multiple ASes (exterior). How BGP Works BGP is responsible for finding a path to a destination router & the path it chooses should be the shortest and most reliable one. This decision is done through a protocol known as Link state. With the link state protocol each router broadcasts to all other routers in the network the state of its links and IP subnets. Each router then receives information from the other routers and constructs a complete topology view of the entire network. The next hop routing table is based on this topology view. The link state protocol uses a famous algorithm in the field of computer science, Dijkstra\u2019s shortest path algorithm: We start from our router considering the path cost to all our direct neighbors. The shortest path is then taken We then re-look at all our neighbors that we can reach and update our link state table with the cost information. We then continue taking the shortest path until every router has been visited. BGP Vulnerabilities By corrupting the BGP routing table we are able to influence the direction traffic flows on the internet! This action is known as BGP hijacking. Injecting bogus route advertising information into the BGP-distributed routing database by malicious sources, accidentally or routers can disrupt Internet backbone operations. Blackholing traffic: Blackhole route is a network route, i.e., routing table entry, that goes nowhere and packets matching the route prefix are dropped or ignored. Blackhole routes can only be detected by monitoring the lost traffic. Blackhole routes are best defence against many common viral attacks where the traffic is dropped from infected machines to/from command & control masters. Infamous BGP Injection attack on Youtube EX: In 2008, Pakistan decided to block YouTube by creating a BGP route that led into a black hole. Instead this routing information got transmitted to a hong kong ISP and from there accidentally got propagated to the rest of the world meaning millions were routed through to this black hole and therefore unable to access YouTube. Potentially, the greatest risk to BGP occurs in a denial of service attack in which a router is flooded with more packets than it can handle. Network overload and router resource exhaustion happen when the network begins carrying an excessive number of BGP messages, overloading the router control processors, memory, routing table and reducing the bandwidth available for data traffic. Refer : https://medium.com/bugbountywriteup/bgp-the-weak-link-in-the-internet-what-is-bgp-and-how-do-hackers-exploit-it-d899a68ba5bb Router flapping is another type of attack. Route flapping refers to repetitive changes to the BGP routing table, often several times a minute. Withdrawing and re-advertising at a high-rate can cause a serious problem for routers, since they propagate the announcements of routes. If these route flaps happen fast enough, e.g., 30 to 50 times per second, the router becomes overloaded, which eventually prevents convergence on valid routes. The potential impact for Internet users is a slowdown in message delivery, and in some cases packets may not be delivered at all. BGP Security Border Gateway Protocol Security recommends the use of BGP peer authentication, since it is one of the strongest mechanisms for preventing malicious activity. The authentication mechanisms are Internet Protocol Security (IPsec) or BGP MD5. Another method, known as prefix limits, can be used to avoid filling router tables. In this approach, routers should be configured to disable or terminate a BGP peering session, and issue warning messages to administrators, when a neighbor sends in excess of a preset number of prefixes. IETF is currently working on improving this space Web Based Attacks HTTP Response Splitting Attacks HTTP response splitting attack may happen where the server script embeds user data in HTTP response headers without appropriate sanitation. This typically happens when the script embeds user data in the redirection URL of a redirection response (HTTP status code 3xx), or when the script embeds user data in a cookie value or name when the response sets a cookie. HTTP response splitting attacks can be used to perform web cache poisoning and cross-site scripting attacks. HTTP response splitting is the attacker\u2019s ability to send a single HTTP request that forces the web server to form an output stream, which is then interpreted by the target as two HTTP responses instead of one response. Cross-Site Request Forgery (CSRF or XSRF) A Cross-Site Request Forgery attack tricks the victim\u2019s browser into issuing a command to a vulnerable web application. Vulnerability is caused by browsers automatically including user authentication data, session ID, IP address, Windows domain credentials, etc with each request. Attackers typically use CSRF to initiate transactions such as transfer funds, login/logout user, close account, access sensitive data, and change account details. The vulnerability is caused by web browsers that automatically include credentials with each request, even for requests caused by a form, script, or image on another site. CSRF can also be dynamically constructed as part of a payload for a cross-site scripting attack All sites relying on automatic credentials are vulnerable. Popular browsers cannot prevent cross-site request forgery. Logging out of high-value sites as soon as possible can mitigate CSRF risk. It is recommended that a high-value website must require a client to manually provide authentication data in the same HTTP request used to perform any operation with security implications. Limiting the lifetime of session cookies can also reduce the chance of being used by other malicious sites. OWASP recommends website developers include a required security token in HTTP requests associated with sensitive business functions in order to mitigate CSRF attacks Cross-Site Scripting (XSS) Attacks Cross-Site Scripting occurs when dynamically generated web pages display user input, such as login information, that is not properly validated, allowing an attacker to embed malicious scripts into the generated page and then execute the script on the machine of any user that views the site. If successful, Cross-Site Scripting vulnerabilities can be exploited to manipulate or steal cookies, create requests that can be mistaken for those of a valid user, compromise confidential information, or execute malicious code on end user systems. Cross-Site Scripting (XSS or CSS) attacks involve the execution of malicious scripts on the victim\u2019s browser. The victim is simply a user\u2019s host and not the server. XSS results from a failure to validate user input by a web-based application. Document Object Model (DOM) XSS Attacks The Document Object Model (DOM) based XSS does not require the web server to receive the XSS payload for a successful attack. The attacker abuses the runtime by embedding their data on the client side. An attacker can force the client (browser) to render the page with parts of the DOM controlled by the attacker. When the page is rendered and the data is processed by the page, typically by a client side HTML-embedded script such as JavaScript, the page\u2019s code may insecurely embed the data in the page itself, thus delivering the cross-site scripting payload. There are several DOM objects which can serve as an attack vehicle for delivering malicious script to victims browser. Clickjacking The technique works by hiding malicious link/scripts under the cover of the content of a legitimate site. Buttons on a website actually contain invisible links, placed there by the attacker. So, an individual who clicks on an object they can visually see, is actually being duped into visiting a malicious page or executing a malicious script. When mouseover is used together with clickjacking, the outcome is devastating. Facebook users have been hit by a clickjacking attack, which tricks people into \u201cliking\u201d a particular Facebook page, thus enabling the attack to spread since Memorial Day 2010. There is not yet effective defense against clickjacking, and disabling JavaScript is the only viable method DataBase Attacks & Defenses SQL injection Attacks It exploits improper input validation in database queries. A successful exploit will allow attackers to access, modify, or delete information in the database. It permits attackers to steal sensitive information stored within the backend databases of affected websites, which may include such things as user credentials, email addresses, personal information, and credit card numbers SELECT USERNAME,PASSWORD from USERS where USERNAME='<username>' AND PASSWORD='<password>'; Here the username & password is the input provided by the user. Suppose an attacker gives the input as \" OR '1'='1'\" in both fields. Therefore the SQL query will look like: SELECT USERNAME,PASSWORD from USERS where USERNAME='' OR '1'='1' AND PASSOWRD='' OR '1'='1'; This query results in a true statement & user gets logged in. This example depicst the bost basic type of SQL injection SQL Injection Attack Defenses SQL injection can be protected by filtering the query to eliminate malicious syntax, which involves the employment of some tools in order to (a) scan the source code. In addition, the input fields should be restricted to the absolute minimum, typically anywhere from 7-12 characters, and validate any data, e.g., if a user inputs an age make sure the input is an integer with a maximum of 3 digits. VPN A virtual private network (VPN) is a service that offers a secure, reliable connection over a shared public infrastructure such as the Internet. Cisco defines a VPN as an encrypted connection between private networks over a public network. To date, there are three types of VPNs: Remote access Site-to-site Firewall-based Security Breach In spite of the most aggressive steps to protect computers from attacks, attackers sometimes get through. Any event that results in a violation of any of the confidentiality, integrity, or availability (CIA) security tenets is a security breach. Denial of Service Attacks Denial of service (DoS) attacks result in downtime or inability of a user to access a system. DoS attacks impact the availability tenet of information systems security. A DoS attack is a coordinated attempt to deny service by occupying a computer to perform large amounts of unnecessary tasks. This excessive activity makes the system unavailable to perform legitimate operations Two common types of DoS attacks are as follows: Logic attacks\u2014Logic attacks use software flaws to crash or seriously hinder the performance of remote servers. You can prevent many of these attacks by installing the latest patches to keep your software up to date. Flooding attacks\u2014Flooding attacks overwhelm the victim computer\u2019s CPU, memory, or network resources by sending large numbers of useless requests to the machine. Most DoS attacks target weaknesses in the overall system architecture rather than a software bug or security flaw One popular technique for launching a packet flood is a SYN flood. One of the best defenses against DoS attacks is to use intrusion prevention system (IPS) software or devices to detect and stop the attack. Distributed Denial of Service Attacks DDoS attacks differ from regular DoS attacks in their scope. In a DDoS attack, attackers hijack hundreds or even thousands of Internet computers, planting automated attack agents on those systems. The attacker then instructs the agents to bombard the target site with forged messages. This overloads the site and blocks legitimate traffic. The key here is strength in numbers. The attacker does more damage by distributing the attack across multiple computers. Wiretapping Although the term wiretapping is generally associated with voice telephone communications, attackers can also use wiretapping to intercept data communications. Attackers can tap telephone lines and data communication lines. Wiretapping can be active, where the attacker makes modifications to the line. It can also be passive, where an unauthorized user simply listens to the transmission without changing the contents. Passive intrusion can include the copying of data for a subsequent active attack. Two methods of active wiretapping are as follows: Between-the-lines wiretapping\u2014This type of wiretapping does not alter the messages sent by the legitimate user but inserts additional messages into the communication line when the legitimate user pauses. Piggyback-entry wiretapping\u2014This type of wiretapping intercepts and modifies the original message by breaking the communications line and routing the message to another computer that acts as a host. Backdoors Software developers sometimes include hidden access methods, called backdoors, in their programs. Backdoors give developers or support personnel easy access to a system without having to struggle with security controls. The problem is that backdoors don\u2019t always stay hidden. When an attacker discovers a backdoor, he or she can use it to bypass existing security controls such as passwords, encryption, and so on. Where legitimate users log on through front doors using a user ID and password, attackers use backdoors to bypass these normal access controls. Malicious Attacks Birthday Attack Once an attacker compromises a hashed password file, a birthday attack is performed. A birthday attack is a type of cryptographic attack that is used to make brute-force attack of one-way hashes easier. It is a mathematical exploit that is based on the birthday problem in probability theory. Further Reading: https://www.sciencedirect.com/topics/computer-science/birthday-attack https://www.internetsecurity.tips/birthday-attack/ Brute-Force Password Attacks In a brute-force password attack, the attacker tries different passwords on a system until one of them is successful. Usually the attacker employs a software program to try all possible combinations of a likely password, user ID, or security code until it locates a match. This occurs rapidly and in sequence. This type of attack is called a brute-force password attack because the attacker simply hammers away at the code. There is no skill or stealth involved\u2014just brute force that eventually breaks the code. Further Reading: https://owasp.org/www-community/attacks/Brute_force_attack https://owasp.org/www-community/controls/Blocking_Brute_Force_Attacks Dictionary Password Attacks A dictionary password attack is a simple attack that relies on users making poor password choices. In a dictionary password attack, a simple password-cracker program takes all the words from a dictionary file and attempts to log on by entering each dictionary entry as a password. Further Reading: https://capec.mitre.org/data/definitions/16.html Replay Attacks Replay attacks involve capturing data packets from a network and retransmitting them to produce an unauthorized effect. The receipt of duplicate, authenticated IP packets may disrupt service or have some other undesired consequence. Systems can be broken through replay attacks when attackers reuse old messages or parts of old messages to deceive system users. This helps intruders to gain information that allows unauthorized access into a system. Further reading: https://study.com/academy/lesson/replay-attack-definition-examples-prevention.html Man-in-the-Middle Attacks A man-in-the-middle attack takes advantage of the multihop process used by many types of networks. In this type of attack, an attacker intercepts messages between two parties before transferring them on to their intended destination. Web spoofing is a type of man-in-the-middle attack in which the user believes a secure session exists with a particular web server. In reality, the secure connection exists only with the attacker, not the web server. The attacker then establishes a secure connection with the web server, acting as an invisible go-between. The attacker passes traffic between the user and the web server. In this way, the attacker can trick the user into supplying passwords, credit card information, and other private data. Further Reading: https://owasp.org/www-community/attacks/Man-in-the-middle_attack Masquerading In a masquerade attack, one user or computer pretends to be another user or computer. Masquerade attacks usually include one of the other forms of active attacks, such as IP address spoofing or replaying. Attackers can capture authentication sequences and then replay them later to log on again to an application or operating system. For example, an attacker might monitor usernames and passwords sent to a weak web application. The attacker could then use the intercepted credentials to log on to the web application and impersonate the user. Further Reading: https://dl.acm.org/doi/book/10.5555/2521792 https://ieeexplore.ieee.org/document/1653228 Eavesdropping Eavesdropping, or sniffing, occurs when a host sets its network interface on promiscuous mode and copies packets that pass by for later analysis. Promiscuous mode enables a network device to intercept and read each network packet(ofcourse given some conditions) given sec, even if the packet\u2019s address doesn\u2019t match the network device. It is possible to attach hardware and software to monitor and analyze all packets on that segment of the transmission media without alerting any other users. Candidates for eavesdropping include satellite, wireless, mobile, and other transmission methods. Social Engineering Attackers often use a deception technique called social engineering to gain access to resources in an IT infrastructure. In nearly all cases, social engineering involves tricking authorized users into carrying out actions for unauthorized users. The success of social engineering attacks depends on the basic tendency of people to want to be helpful. Phreaking Phone phreaking, or simply phreaking, is a slang term that describes the activity of a subculture of people who study, experiment with, or explore telephone systems, telephone company equipment, and systems connected to public telephone networks. Phreaking is the art of exploiting bugs and glitches that exist in the telephone system. Phishing Phishing is a type of fraud in which an attacker attempts to trick the victim into providing private information such as credit card numbers, passwords, dates of birth, bank account numbers, automated teller machine (ATM) PINs, and Social Security numbers. Pharming Pharming is another type of attack that seeks to obtain personal or private financial information through domain spoofing. A pharming attack doesn\u2019t use messages to trick victims into visiting spoofed websites that appear legitimate, however. Instead, pharming \u201cpoisons\u201d a domain name on the domain name server (DNS), a process known as DNS poisoning. The result is that when a user enters the poisoned server\u2019s web address into his or her address bar, that user navigates to the attacker\u2019s site. The user\u2019s browser still shows the correct website, which makes pharming difficult to detect\u2014and therefore more serious. Where phishing attempts to scam people one at a time with an email or instant message, pharming enables scammers to target large groups of people at one time through domain spoofing.","title":"Threat, Attacks & Defences"},{"location":"security/threats_attacks_defences/#part-iii-threats-attacks-defense","text":"","title":"Part III: Threats, Attacks &amp; Defense"},{"location":"security/threats_attacks_defences/#dns-protection","text":"","title":"DNS Protection"},{"location":"security/threats_attacks_defences/#cache-poisoning-attack","text":"Since DNS responses are cached, a quick response can be provided for repeated translations. DNS negative queries are also cached, e.g., misspelled words, and all cached data periodically times out. Cache poisoning is an issue in what is known as pharming. This term is used to describe a hacker\u2019s attack in which a website\u2019s traffic is redirected to a bogus website by forging the DNS mapping. In this case, an attacker attempts to insert a fake address record for an Internet domain into the DNS. If the server accepts the fake record, the cache is poisoned and subsequent requests for the address of the domain are answered with the address of a server controlled by the attacker. As long as the fake entry is cached by the server, browsers or e-mail servers will automatically go to the address provided by the compromised DNS server. the typical time to live (TTL) for cached entries is a couple of hours, thereby permitting ample time for numerous users to be affected by the attack.","title":"Cache Poisoning Attack"},{"location":"security/threats_attacks_defences/#dnssec-security-extension","text":"The long-term solution to these DNS problems is authentication. If a resolver cannot distinguish between valid and invalid data in a response, then add source authentication to verify that the data received in a response is equal to the data entered by the zone administrator DNS Security Extensions (DNSSEC) protects against data spoofing and corruption, and provides mechanisms to authenticate servers and requests, as well as mechanisms to establish authenticity and integrity. When authenticating DNS responses, each DNS zone signs its data using a private key. It is recommended that this signing be done offline and in advance. The query for a particular record returns the requested resource record set (RRset) and signature (RRSIG) of the requested resource record set. The resolver then authenticates the response using a public key, which is pre-configured or learned via a sequence of key records in the DNS hierarchy. The goals of DNSSEC are to provide authentication and integrity for DNS responses without confidentiality or DDoS protection.","title":"DNSSEC (Security Extension)"},{"location":"security/threats_attacks_defences/#bgp","text":"BGP stands for border gateway protocol. It is a routing protocol that exchanges routing information among multiple Autonomous Systems (AS) An Autonomous system is a collection of routers or networks with the same network policy usually under a single administrative control. BGP tells routers which hop to use in order to reach the destination network. BGP is used for both communicating information among routers in an AS (interior) and between multiple ASes (exterior).","title":"BGP"},{"location":"security/threats_attacks_defences/#how-bgp-works","text":"BGP is responsible for finding a path to a destination router & the path it chooses should be the shortest and most reliable one. This decision is done through a protocol known as Link state. With the link state protocol each router broadcasts to all other routers in the network the state of its links and IP subnets. Each router then receives information from the other routers and constructs a complete topology view of the entire network. The next hop routing table is based on this topology view. The link state protocol uses a famous algorithm in the field of computer science, Dijkstra\u2019s shortest path algorithm: We start from our router considering the path cost to all our direct neighbors. The shortest path is then taken We then re-look at all our neighbors that we can reach and update our link state table with the cost information. We then continue taking the shortest path until every router has been visited.","title":"How BGP Works"},{"location":"security/threats_attacks_defences/#bgp-vulnerabilities","text":"By corrupting the BGP routing table we are able to influence the direction traffic flows on the internet! This action is known as BGP hijacking. Injecting bogus route advertising information into the BGP-distributed routing database by malicious sources, accidentally or routers can disrupt Internet backbone operations. Blackholing traffic: Blackhole route is a network route, i.e., routing table entry, that goes nowhere and packets matching the route prefix are dropped or ignored. Blackhole routes can only be detected by monitoring the lost traffic. Blackhole routes are best defence against many common viral attacks where the traffic is dropped from infected machines to/from command & control masters. Infamous BGP Injection attack on Youtube EX: In 2008, Pakistan decided to block YouTube by creating a BGP route that led into a black hole. Instead this routing information got transmitted to a hong kong ISP and from there accidentally got propagated to the rest of the world meaning millions were routed through to this black hole and therefore unable to access YouTube. Potentially, the greatest risk to BGP occurs in a denial of service attack in which a router is flooded with more packets than it can handle. Network overload and router resource exhaustion happen when the network begins carrying an excessive number of BGP messages, overloading the router control processors, memory, routing table and reducing the bandwidth available for data traffic. Refer : https://medium.com/bugbountywriteup/bgp-the-weak-link-in-the-internet-what-is-bgp-and-how-do-hackers-exploit-it-d899a68ba5bb Router flapping is another type of attack. Route flapping refers to repetitive changes to the BGP routing table, often several times a minute. Withdrawing and re-advertising at a high-rate can cause a serious problem for routers, since they propagate the announcements of routes. If these route flaps happen fast enough, e.g., 30 to 50 times per second, the router becomes overloaded, which eventually prevents convergence on valid routes. The potential impact for Internet users is a slowdown in message delivery, and in some cases packets may not be delivered at all. BGP Security Border Gateway Protocol Security recommends the use of BGP peer authentication, since it is one of the strongest mechanisms for preventing malicious activity. The authentication mechanisms are Internet Protocol Security (IPsec) or BGP MD5. Another method, known as prefix limits, can be used to avoid filling router tables. In this approach, routers should be configured to disable or terminate a BGP peering session, and issue warning messages to administrators, when a neighbor sends in excess of a preset number of prefixes. IETF is currently working on improving this space","title":"BGP Vulnerabilities"},{"location":"security/threats_attacks_defences/#web-based-attacks","text":"","title":"Web Based Attacks"},{"location":"security/threats_attacks_defences/#http-response-splitting-attacks","text":"HTTP response splitting attack may happen where the server script embeds user data in HTTP response headers without appropriate sanitation. This typically happens when the script embeds user data in the redirection URL of a redirection response (HTTP status code 3xx), or when the script embeds user data in a cookie value or name when the response sets a cookie. HTTP response splitting attacks can be used to perform web cache poisoning and cross-site scripting attacks. HTTP response splitting is the attacker\u2019s ability to send a single HTTP request that forces the web server to form an output stream, which is then interpreted by the target as two HTTP responses instead of one response.","title":"HTTP Response Splitting Attacks"},{"location":"security/threats_attacks_defences/#cross-site-request-forgery-csrf-or-xsrf","text":"A Cross-Site Request Forgery attack tricks the victim\u2019s browser into issuing a command to a vulnerable web application. Vulnerability is caused by browsers automatically including user authentication data, session ID, IP address, Windows domain credentials, etc with each request. Attackers typically use CSRF to initiate transactions such as transfer funds, login/logout user, close account, access sensitive data, and change account details. The vulnerability is caused by web browsers that automatically include credentials with each request, even for requests caused by a form, script, or image on another site. CSRF can also be dynamically constructed as part of a payload for a cross-site scripting attack All sites relying on automatic credentials are vulnerable. Popular browsers cannot prevent cross-site request forgery. Logging out of high-value sites as soon as possible can mitigate CSRF risk. It is recommended that a high-value website must require a client to manually provide authentication data in the same HTTP request used to perform any operation with security implications. Limiting the lifetime of session cookies can also reduce the chance of being used by other malicious sites. OWASP recommends website developers include a required security token in HTTP requests associated with sensitive business functions in order to mitigate CSRF attacks","title":"Cross-Site Request Forgery (CSRF or XSRF)"},{"location":"security/threats_attacks_defences/#cross-site-scripting-xss-attacks","text":"Cross-Site Scripting occurs when dynamically generated web pages display user input, such as login information, that is not properly validated, allowing an attacker to embed malicious scripts into the generated page and then execute the script on the machine of any user that views the site. If successful, Cross-Site Scripting vulnerabilities can be exploited to manipulate or steal cookies, create requests that can be mistaken for those of a valid user, compromise confidential information, or execute malicious code on end user systems. Cross-Site Scripting (XSS or CSS) attacks involve the execution of malicious scripts on the victim\u2019s browser. The victim is simply a user\u2019s host and not the server. XSS results from a failure to validate user input by a web-based application.","title":"Cross-Site Scripting (XSS) Attacks"},{"location":"security/threats_attacks_defences/#document-object-model-dom-xss-attacks","text":"The Document Object Model (DOM) based XSS does not require the web server to receive the XSS payload for a successful attack. The attacker abuses the runtime by embedding their data on the client side. An attacker can force the client (browser) to render the page with parts of the DOM controlled by the attacker. When the page is rendered and the data is processed by the page, typically by a client side HTML-embedded script such as JavaScript, the page\u2019s code may insecurely embed the data in the page itself, thus delivering the cross-site scripting payload. There are several DOM objects which can serve as an attack vehicle for delivering malicious script to victims browser.","title":"Document Object Model (DOM) XSS Attacks"},{"location":"security/threats_attacks_defences/#clickjacking","text":"The technique works by hiding malicious link/scripts under the cover of the content of a legitimate site. Buttons on a website actually contain invisible links, placed there by the attacker. So, an individual who clicks on an object they can visually see, is actually being duped into visiting a malicious page or executing a malicious script. When mouseover is used together with clickjacking, the outcome is devastating. Facebook users have been hit by a clickjacking attack, which tricks people into \u201cliking\u201d a particular Facebook page, thus enabling the attack to spread since Memorial Day 2010. There is not yet effective defense against clickjacking, and disabling JavaScript is the only viable method","title":"Clickjacking"},{"location":"security/threats_attacks_defences/#database-attacks-defenses","text":"","title":"DataBase Attacks &amp; Defenses"},{"location":"security/threats_attacks_defences/#sql-injection-attacks","text":"It exploits improper input validation in database queries. A successful exploit will allow attackers to access, modify, or delete information in the database. It permits attackers to steal sensitive information stored within the backend databases of affected websites, which may include such things as user credentials, email addresses, personal information, and credit card numbers SELECT USERNAME,PASSWORD from USERS where USERNAME='<username>' AND PASSWORD='<password>'; Here the username & password is the input provided by the user. Suppose an attacker gives the input as \" OR '1'='1'\" in both fields. Therefore the SQL query will look like: SELECT USERNAME,PASSWORD from USERS where USERNAME='' OR '1'='1' AND PASSOWRD='' OR '1'='1'; This query results in a true statement & user gets logged in. This example depicst the bost basic type of SQL injection","title":"SQL injection Attacks"},{"location":"security/threats_attacks_defences/#sql-injection-attack-defenses","text":"SQL injection can be protected by filtering the query to eliminate malicious syntax, which involves the employment of some tools in order to (a) scan the source code. In addition, the input fields should be restricted to the absolute minimum, typically anywhere from 7-12 characters, and validate any data, e.g., if a user inputs an age make sure the input is an integer with a maximum of 3 digits.","title":"SQL Injection Attack Defenses"},{"location":"security/threats_attacks_defences/#vpn","text":"A virtual private network (VPN) is a service that offers a secure, reliable connection over a shared public infrastructure such as the Internet. Cisco defines a VPN as an encrypted connection between private networks over a public network. To date, there are three types of VPNs: Remote access Site-to-site Firewall-based","title":"VPN"},{"location":"security/threats_attacks_defences/#security-breach","text":"In spite of the most aggressive steps to protect computers from attacks, attackers sometimes get through. Any event that results in a violation of any of the confidentiality, integrity, or availability (CIA) security tenets is a security breach.","title":"Security Breach"},{"location":"security/threats_attacks_defences/#denial-of-service-attacks","text":"Denial of service (DoS) attacks result in downtime or inability of a user to access a system. DoS attacks impact the availability tenet of information systems security. A DoS attack is a coordinated attempt to deny service by occupying a computer to perform large amounts of unnecessary tasks. This excessive activity makes the system unavailable to perform legitimate operations Two common types of DoS attacks are as follows: Logic attacks\u2014Logic attacks use software flaws to crash or seriously hinder the performance of remote servers. You can prevent many of these attacks by installing the latest patches to keep your software up to date. Flooding attacks\u2014Flooding attacks overwhelm the victim computer\u2019s CPU, memory, or network resources by sending large numbers of useless requests to the machine. Most DoS attacks target weaknesses in the overall system architecture rather than a software bug or security flaw One popular technique for launching a packet flood is a SYN flood. One of the best defenses against DoS attacks is to use intrusion prevention system (IPS) software or devices to detect and stop the attack.","title":"Denial of Service Attacks"},{"location":"security/threats_attacks_defences/#distributed-denial-of-service-attacks","text":"DDoS attacks differ from regular DoS attacks in their scope. In a DDoS attack, attackers hijack hundreds or even thousands of Internet computers, planting automated attack agents on those systems. The attacker then instructs the agents to bombard the target site with forged messages. This overloads the site and blocks legitimate traffic. The key here is strength in numbers. The attacker does more damage by distributing the attack across multiple computers.","title":"Distributed Denial of Service Attacks"},{"location":"security/threats_attacks_defences/#wiretapping","text":"Although the term wiretapping is generally associated with voice telephone communications, attackers can also use wiretapping to intercept data communications. Attackers can tap telephone lines and data communication lines. Wiretapping can be active, where the attacker makes modifications to the line. It can also be passive, where an unauthorized user simply listens to the transmission without changing the contents. Passive intrusion can include the copying of data for a subsequent active attack. Two methods of active wiretapping are as follows: Between-the-lines wiretapping\u2014This type of wiretapping does not alter the messages sent by the legitimate user but inserts additional messages into the communication line when the legitimate user pauses. Piggyback-entry wiretapping\u2014This type of wiretapping intercepts and modifies the original message by breaking the communications line and routing the message to another computer that acts as a host.","title":"Wiretapping"},{"location":"security/threats_attacks_defences/#backdoors","text":"Software developers sometimes include hidden access methods, called backdoors, in their programs. Backdoors give developers or support personnel easy access to a system without having to struggle with security controls. The problem is that backdoors don\u2019t always stay hidden. When an attacker discovers a backdoor, he or she can use it to bypass existing security controls such as passwords, encryption, and so on. Where legitimate users log on through front doors using a user ID and password, attackers use backdoors to bypass these normal access controls.","title":"Backdoors"},{"location":"security/threats_attacks_defences/#malicious-attacks","text":"","title":"Malicious Attacks"},{"location":"security/threats_attacks_defences/#birthday-attack","text":"Once an attacker compromises a hashed password file, a birthday attack is performed. A birthday attack is a type of cryptographic attack that is used to make brute-force attack of one-way hashes easier. It is a mathematical exploit that is based on the birthday problem in probability theory. Further Reading: https://www.sciencedirect.com/topics/computer-science/birthday-attack https://www.internetsecurity.tips/birthday-attack/","title":"Birthday Attack"},{"location":"security/threats_attacks_defences/#brute-force-password-attacks","text":"In a brute-force password attack, the attacker tries different passwords on a system until one of them is successful. Usually the attacker employs a software program to try all possible combinations of a likely password, user ID, or security code until it locates a match. This occurs rapidly and in sequence. This type of attack is called a brute-force password attack because the attacker simply hammers away at the code. There is no skill or stealth involved\u2014just brute force that eventually breaks the code. Further Reading: https://owasp.org/www-community/attacks/Brute_force_attack https://owasp.org/www-community/controls/Blocking_Brute_Force_Attacks","title":"Brute-Force Password Attacks"},{"location":"security/threats_attacks_defences/#dictionary-password-attacks","text":"A dictionary password attack is a simple attack that relies on users making poor password choices. In a dictionary password attack, a simple password-cracker program takes all the words from a dictionary file and attempts to log on by entering each dictionary entry as a password. Further Reading: https://capec.mitre.org/data/definitions/16.html","title":"Dictionary Password Attacks"},{"location":"security/threats_attacks_defences/#replay-attacks","text":"Replay attacks involve capturing data packets from a network and retransmitting them to produce an unauthorized effect. The receipt of duplicate, authenticated IP packets may disrupt service or have some other undesired consequence. Systems can be broken through replay attacks when attackers reuse old messages or parts of old messages to deceive system users. This helps intruders to gain information that allows unauthorized access into a system. Further reading: https://study.com/academy/lesson/replay-attack-definition-examples-prevention.html","title":"Replay Attacks"},{"location":"security/threats_attacks_defences/#man-in-the-middle-attacks","text":"A man-in-the-middle attack takes advantage of the multihop process used by many types of networks. In this type of attack, an attacker intercepts messages between two parties before transferring them on to their intended destination. Web spoofing is a type of man-in-the-middle attack in which the user believes a secure session exists with a particular web server. In reality, the secure connection exists only with the attacker, not the web server. The attacker then establishes a secure connection with the web server, acting as an invisible go-between. The attacker passes traffic between the user and the web server. In this way, the attacker can trick the user into supplying passwords, credit card information, and other private data. Further Reading: https://owasp.org/www-community/attacks/Man-in-the-middle_attack","title":"Man-in-the-Middle Attacks"},{"location":"security/threats_attacks_defences/#masquerading","text":"In a masquerade attack, one user or computer pretends to be another user or computer. Masquerade attacks usually include one of the other forms of active attacks, such as IP address spoofing or replaying. Attackers can capture authentication sequences and then replay them later to log on again to an application or operating system. For example, an attacker might monitor usernames and passwords sent to a weak web application. The attacker could then use the intercepted credentials to log on to the web application and impersonate the user. Further Reading: https://dl.acm.org/doi/book/10.5555/2521792 https://ieeexplore.ieee.org/document/1653228","title":"Masquerading"},{"location":"security/threats_attacks_defences/#eavesdropping","text":"Eavesdropping, or sniffing, occurs when a host sets its network interface on promiscuous mode and copies packets that pass by for later analysis. Promiscuous mode enables a network device to intercept and read each network packet(ofcourse given some conditions) given sec, even if the packet\u2019s address doesn\u2019t match the network device. It is possible to attach hardware and software to monitor and analyze all packets on that segment of the transmission media without alerting any other users. Candidates for eavesdropping include satellite, wireless, mobile, and other transmission methods.","title":"Eavesdropping"},{"location":"security/threats_attacks_defences/#social-engineering","text":"Attackers often use a deception technique called social engineering to gain access to resources in an IT infrastructure. In nearly all cases, social engineering involves tricking authorized users into carrying out actions for unauthorized users. The success of social engineering attacks depends on the basic tendency of people to want to be helpful.","title":"Social Engineering"},{"location":"security/threats_attacks_defences/#phreaking","text":"Phone phreaking, or simply phreaking, is a slang term that describes the activity of a subculture of people who study, experiment with, or explore telephone systems, telephone company equipment, and systems connected to public telephone networks. Phreaking is the art of exploiting bugs and glitches that exist in the telephone system.","title":"Phreaking"},{"location":"security/threats_attacks_defences/#phishing","text":"Phishing is a type of fraud in which an attacker attempts to trick the victim into providing private information such as credit card numbers, passwords, dates of birth, bank account numbers, automated teller machine (ATM) PINs, and Social Security numbers.","title":"Phishing"},{"location":"security/threats_attacks_defences/#pharming","text":"Pharming is another type of attack that seeks to obtain personal or private financial information through domain spoofing. A pharming attack doesn\u2019t use messages to trick victims into visiting spoofed websites that appear legitimate, however. Instead, pharming \u201cpoisons\u201d a domain name on the domain name server (DNS), a process known as DNS poisoning. The result is that when a user enters the poisoned server\u2019s web address into his or her address bar, that user navigates to the attacker\u2019s site. The user\u2019s browser still shows the correct website, which makes pharming difficult to detect\u2014and therefore more serious. Where phishing attempts to scam people one at a time with an email or instant message, pharming enables scammers to target large groups of people at one time through domain spoofing.","title":"Pharming"},{"location":"security/writing_secure_code/","text":"PART IV: Writing Secure Code & More The first and most important step in reducing security and reliability issues is to educate developers. However, even the best-trained engineers make mistakes, security experts can write insecure code and SREs can miss reliability issues. It\u2019s difficult to keep the many considerations and tradeoffs involved in building secure and reliable systems in mind simultaneously, especially if you\u2019re also responsible for producing software. Use frameworks to enforce security and reliability while writing code A better approach is to handle security and reliability in common frameworks, languages, and libraries. Ideally, libraries only expose an interface that makes writing code with common classes of security vulnerabilities impossible. Multiple applications can use each library or framework. When domain experts fix an issue, they remove it from all the applications the framework supports, allowing this engineering approach to scale better. Common Security Vulnerabilities In large codebases, a handful of classes account for the majority of security vulnerabilities, despite ongoing efforts to educate developers and introduce code review. OWASP and SANS publish lists of common vulnerability classes Write Simple Code Try to keep your code clean and simple. Avoid Multi Level Nesting Multilevel nesting is a common anti-pattern that can lead to simple mistakes. If the error is in the most common code path, it will likely be captured by the unit tests. However, unit tests don\u2019t always check error handling paths in multilevel nested code. The error might result in decreased reliability (for example, if the service crashes when it mishandles an error) or a security vulnerability (like a mishandled authorization check error). Eliminate YAGNI Smells Sometimes developers overengineer solutions by adding functionality that may be useful in the future, \u201cjust in case.\u201d This goes against the YAGNI (You Aren\u2019t Gonna Need It) principle, which recommends implementing only the code that you need. YAGNI code adds unnecessary complexity because it needs to be documented, tested, and maintained. To summarize, avoiding YAGNI code leads to improved reliability, and simpler code leads to fewer security bugs, fewer opportunities to make mistakes, and less developer time spent maintaining unused code. Repay Technical Debt It is a common practice for developers to mark places that require further attention with TODO or FIXME annotations. In the short term, this habit can accelerate the delivery velocity for the most critical functionality, and allow a team to meet early deadlines\u2014but it also incurs technical debt. Still, it\u2019s not necessarily a bad practice, as long as you have a clear process (and allocate time) for repaying such debt. Refactoring Refactoring is the most effective way to keep a codebase clean and simple. Even a healthy codebase occasionally needs to be Regardless of the reasons behind refactoring, you should always follow one golden rule: never mix refactoring and functional changes in a single commit to the code repository. Refactoring changes are typically significant and can be difficult to understand. If a commit also includes functional changes, there\u2019s a higher risk that an author or reviewer might overlook bugs. Unit Testing Unit testing can increase system security and reliability by pinpointing a wide range of bugs in individual software components before a release. This technique involves breaking software components into smaller, self-contained \u201cunits\u201d that have no external dependencies, and then testing each unit. Fuzz Testing Fuzz testing is a technique that complements the previously mentioned testing techniques. Fuzzing involves using a fuzz engine to generate a large number of candidate inputs that are then passed through a fuzz driver to the fuzz target. The fuzzer then analyzes how the system handles the input. Complex inputs handled by all kinds of software are popular targets for fuzzing - for example file parsers, compression algo, network protocol implementation and audio codec. Integration Testing Integration testing moves beyond individual units and abstractions, replacing fake or stubbed-out implementations of abstractions like databases or network services with real implementations. As a result, integration tests exercise more complete code paths. Because you must initialize and configure these other dependencies, integration testing may be slower and flakier than unit testing\u2014to execute the test, this approach incorporates real-world variables like network latency as services communicate end-to-end. As you move from testing individual low-level units of code to testing how they interact when composed together, the net result is a higher degree of confidence that the system is behaving as expected. Last But not the least Code Reviews Rely on Automation Don\u2019t check in Secrets Verifiable Builds","title":"Writing Secure code"},{"location":"security/writing_secure_code/#part-iv-writing-secure-code-more","text":"The first and most important step in reducing security and reliability issues is to educate developers. However, even the best-trained engineers make mistakes, security experts can write insecure code and SREs can miss reliability issues. It\u2019s difficult to keep the many considerations and tradeoffs involved in building secure and reliable systems in mind simultaneously, especially if you\u2019re also responsible for producing software.","title":"PART IV: Writing Secure Code &amp; More"},{"location":"security/writing_secure_code/#use-frameworks-to-enforce-security-and-reliability-while-writing-code","text":"A better approach is to handle security and reliability in common frameworks, languages, and libraries. Ideally, libraries only expose an interface that makes writing code with common classes of security vulnerabilities impossible. Multiple applications can use each library or framework. When domain experts fix an issue, they remove it from all the applications the framework supports, allowing this engineering approach to scale better.","title":"Use frameworks to enforce security and reliability while writing code"},{"location":"security/writing_secure_code/#common-security-vulnerabilities","text":"In large codebases, a handful of classes account for the majority of security vulnerabilities, despite ongoing efforts to educate developers and introduce code review. OWASP and SANS publish lists of common vulnerability classes","title":"Common Security Vulnerabilities"},{"location":"security/writing_secure_code/#write-simple-code","text":"Try to keep your code clean and simple.","title":"Write Simple Code"},{"location":"security/writing_secure_code/#avoid-multi-level-nesting","text":"Multilevel nesting is a common anti-pattern that can lead to simple mistakes. If the error is in the most common code path, it will likely be captured by the unit tests. However, unit tests don\u2019t always check error handling paths in multilevel nested code. The error might result in decreased reliability (for example, if the service crashes when it mishandles an error) or a security vulnerability (like a mishandled authorization check error).","title":"Avoid Multi Level Nesting"},{"location":"security/writing_secure_code/#eliminate-yagni-smells","text":"Sometimes developers overengineer solutions by adding functionality that may be useful in the future, \u201cjust in case.\u201d This goes against the YAGNI (You Aren\u2019t Gonna Need It) principle, which recommends implementing only the code that you need. YAGNI code adds unnecessary complexity because it needs to be documented, tested, and maintained. To summarize, avoiding YAGNI code leads to improved reliability, and simpler code leads to fewer security bugs, fewer opportunities to make mistakes, and less developer time spent maintaining unused code.","title":"Eliminate YAGNI Smells"},{"location":"security/writing_secure_code/#repay-technical-debt","text":"It is a common practice for developers to mark places that require further attention with TODO or FIXME annotations. In the short term, this habit can accelerate the delivery velocity for the most critical functionality, and allow a team to meet early deadlines\u2014but it also incurs technical debt. Still, it\u2019s not necessarily a bad practice, as long as you have a clear process (and allocate time) for repaying such debt.","title":"Repay Technical Debt"},{"location":"security/writing_secure_code/#refactoring","text":"Refactoring is the most effective way to keep a codebase clean and simple. Even a healthy codebase occasionally needs to be Regardless of the reasons behind refactoring, you should always follow one golden rule: never mix refactoring and functional changes in a single commit to the code repository. Refactoring changes are typically significant and can be difficult to understand. If a commit also includes functional changes, there\u2019s a higher risk that an author or reviewer might overlook bugs.","title":"Refactoring"},{"location":"security/writing_secure_code/#unit-testing","text":"Unit testing can increase system security and reliability by pinpointing a wide range of bugs in individual software components before a release. This technique involves breaking software components into smaller, self-contained \u201cunits\u201d that have no external dependencies, and then testing each unit.","title":"Unit Testing"},{"location":"security/writing_secure_code/#fuzz-testing","text":"Fuzz testing is a technique that complements the previously mentioned testing techniques. Fuzzing involves using a fuzz engine to generate a large number of candidate inputs that are then passed through a fuzz driver to the fuzz target. The fuzzer then analyzes how the system handles the input. Complex inputs handled by all kinds of software are popular targets for fuzzing - for example file parsers, compression algo, network protocol implementation and audio codec.","title":"Fuzz Testing"},{"location":"security/writing_secure_code/#integration-testing","text":"Integration testing moves beyond individual units and abstractions, replacing fake or stubbed-out implementations of abstractions like databases or network services with real implementations. As a result, integration tests exercise more complete code paths. Because you must initialize and configure these other dependencies, integration testing may be slower and flakier than unit testing\u2014to execute the test, this approach incorporates real-world variables like network latency as services communicate end-to-end. As you move from testing individual low-level units of code to testing how they interact when composed together, the net result is a higher degree of confidence that the system is behaving as expected.","title":"Integration Testing"},{"location":"security/writing_secure_code/#last-but-not-the-least","text":"Code Reviews Rely on Automation Don\u2019t check in Secrets Verifiable Builds","title":"Last But not the least"},{"location":"systems_design/availability/","text":"HA - Availability - Common \u201cNines\u201d Availability is generally expressed as \u201cNines\u201d, common \u2018Nines\u2019 are listed below. Availability % Downtime per year Downtime per month Downtime per week Downtime per day 99%(Two Nines) 3.65 days 7.31 hours 1.68 hours 14.40 minutes 99.5%(Two and a half Nines) 1.83 days 3.65 hours 50.40 minutes 7.20 minutes 99.9%(Three Nines) 8.77 hours 43.83 minutes 10.08 minutes 1.44 minutes 99.95%(Three and a half Nines) 4.38 hours 21.92 minutes 5.04 minutes 43.20 seconds 99.99%(Four Nines) 52.60 minutes 4.38 minutes 1.01 minutes 8.64 seconds 99.995%(Four and a half Nines) 26.30 minutes 2.19 minutes 30.24 seconds 4.32 seconds 99.999%(Five Nines) 5.26 minutes 26.30 seconds 6.05 seconds 864.0 ms Refer https://en.wikipedia.org/wiki/High_availability#Percentage_calculation HA - Availability Serial Components A System with components is operating in the series If failure of a part leads to the combination becoming inoperable. For example if LB in our architecture fails, all access to app tiers will fail. LB and app tiers are connected serially. The combined availability of the system is the product of individual components availability A = Ax x Ay x \u2026.. Refer http://www.eventhelix.com/RealtimeMantra/FaultHandling/system_reliability_availability.htm HA - Availability Parallel Components A System with components is operating in parallel If failure of a part leads to the other part taking over the operations of the failed part. If we have more than one LB and if rest of the LBs can take over the traffic during one LB failure then LBs are operating in parallel The combined availability of the system is A = 1 - ( (1-Ax) x (1-Ax) x \u2026.. ) Refer http://www.eventhelix.com/RealtimeMantra/FaultHandling/system_reliability_availability.htm HA - Core Principles Elimination of single points of failure (SPOF) This means adding redundancy to the system so that the failure of a component does not mean failure of the entire system. Reliable crossover In redundant systems, the crossover point itself tends to become a single point of failure. Reliable systems must provide for reliable crossover. Detection of failures as they occur If the two principles above are observed, then a user may never see a failure Refer https://en.wikipedia.org/wiki/High_availability#Principles HA - SPOF WHAT: Never implement and always eliminate single points of failure. WHEN TO USE: During architecture reviews and new designs. HOW TO USE: Identify single instances on architectural diagrams. Strive for active/active configurations. At the very least we should have a standby to take control when active instances fail. WHY: Maximize availability through multiple instances. KEY TAKEAWAYS: Strive for active/active rather than active/passive solutions. Use load balancers to balance traffic across instances of a service. Use control services with active/passive instances for patterns that require singletons. HA - Reliable Crossover WHAT: Ensure when system components failover they do so reliably. WHEN TO USE: During architecture reviews, failure modeling, and designs. HOW TO USE: Identify how available a system is during the crossover and ensure it is within acceptable limits. WHY: Maximize availability and ensure data handling semantics are preserved. KEY TAKEAWAYS: Strive for active/active rather than active/passive solutions, they have a lesser risk of cross over being unreliable. Use LB and right load balancing methods to ensure reliable failover. Model and build your data systems to ensure data is correctly handled when crossover happens. Generally DB systems follow active/passive semantics for writes. Masters accept writes and when master goes down, follower is promoted to master(active from being passive) to accept writes. We have to be careful here that the cutover never introduces more than one masters. This problem is called a split brain. Applications in SRE role SRE works on deciding an acceptable SLA and make sure system is available to achieve the SLA SRE is involved in architecture design right from building the data center to make sure site is not affected by network switch, hardware, power or software failures SRE also run mock drills of failures to see how the system behaves in uncharted territory and comes up with a plan to improve availability if there are misses. https://engineering.linkedin.com/blog/2017/11/resilience-engineering-at-linkedin-with-project-waterbear Post our understanding about HA, our architecture diagram looks something like this below","title":"Availability"},{"location":"systems_design/availability/#ha-availability-common-nines","text":"Availability is generally expressed as \u201cNines\u201d, common \u2018Nines\u2019 are listed below. Availability % Downtime per year Downtime per month Downtime per week Downtime per day 99%(Two Nines) 3.65 days 7.31 hours 1.68 hours 14.40 minutes 99.5%(Two and a half Nines) 1.83 days 3.65 hours 50.40 minutes 7.20 minutes 99.9%(Three Nines) 8.77 hours 43.83 minutes 10.08 minutes 1.44 minutes 99.95%(Three and a half Nines) 4.38 hours 21.92 minutes 5.04 minutes 43.20 seconds 99.99%(Four Nines) 52.60 minutes 4.38 minutes 1.01 minutes 8.64 seconds 99.995%(Four and a half Nines) 26.30 minutes 2.19 minutes 30.24 seconds 4.32 seconds 99.999%(Five Nines) 5.26 minutes 26.30 seconds 6.05 seconds 864.0 ms","title":"HA - Availability - Common \u201cNines\u201d"},{"location":"systems_design/availability/#refer","text":"https://en.wikipedia.org/wiki/High_availability#Percentage_calculation","title":"Refer"},{"location":"systems_design/availability/#ha-availability-serial-components","text":"A System with components is operating in the series If failure of a part leads to the combination becoming inoperable. For example if LB in our architecture fails, all access to app tiers will fail. LB and app tiers are connected serially. The combined availability of the system is the product of individual components availability A = Ax x Ay x \u2026..","title":"HA - Availability Serial Components"},{"location":"systems_design/availability/#refer_1","text":"http://www.eventhelix.com/RealtimeMantra/FaultHandling/system_reliability_availability.htm","title":"Refer"},{"location":"systems_design/availability/#ha-availability-parallel-components","text":"A System with components is operating in parallel If failure of a part leads to the other part taking over the operations of the failed part. If we have more than one LB and if rest of the LBs can take over the traffic during one LB failure then LBs are operating in parallel The combined availability of the system is A = 1 - ( (1-Ax) x (1-Ax) x \u2026.. )","title":"HA - Availability Parallel Components"},{"location":"systems_design/availability/#refer_2","text":"http://www.eventhelix.com/RealtimeMantra/FaultHandling/system_reliability_availability.htm","title":"Refer"},{"location":"systems_design/availability/#ha-core-principles","text":"Elimination of single points of failure (SPOF) This means adding redundancy to the system so that the failure of a component does not mean failure of the entire system. Reliable crossover In redundant systems, the crossover point itself tends to become a single point of failure. Reliable systems must provide for reliable crossover. Detection of failures as they occur If the two principles above are observed, then a user may never see a failure","title":"HA - Core Principles"},{"location":"systems_design/availability/#refer_3","text":"https://en.wikipedia.org/wiki/High_availability#Principles","title":"Refer"},{"location":"systems_design/availability/#ha-spof","text":"WHAT: Never implement and always eliminate single points of failure. WHEN TO USE: During architecture reviews and new designs. HOW TO USE: Identify single instances on architectural diagrams. Strive for active/active configurations. At the very least we should have a standby to take control when active instances fail. WHY: Maximize availability through multiple instances. KEY TAKEAWAYS: Strive for active/active rather than active/passive solutions. Use load balancers to balance traffic across instances of a service. Use control services with active/passive instances for patterns that require singletons.","title":"HA - SPOF"},{"location":"systems_design/availability/#ha-reliable-crossover","text":"WHAT: Ensure when system components failover they do so reliably. WHEN TO USE: During architecture reviews, failure modeling, and designs. HOW TO USE: Identify how available a system is during the crossover and ensure it is within acceptable limits. WHY: Maximize availability and ensure data handling semantics are preserved. KEY TAKEAWAYS: Strive for active/active rather than active/passive solutions, they have a lesser risk of cross over being unreliable. Use LB and right load balancing methods to ensure reliable failover. Model and build your data systems to ensure data is correctly handled when crossover happens. Generally DB systems follow active/passive semantics for writes. Masters accept writes and when master goes down, follower is promoted to master(active from being passive) to accept writes. We have to be careful here that the cutover never introduces more than one masters. This problem is called a split brain.","title":"HA - Reliable Crossover"},{"location":"systems_design/availability/#applications-in-sre-role","text":"SRE works on deciding an acceptable SLA and make sure system is available to achieve the SLA SRE is involved in architecture design right from building the data center to make sure site is not affected by network switch, hardware, power or software failures SRE also run mock drills of failures to see how the system behaves in uncharted territory and comes up with a plan to improve availability if there are misses. https://engineering.linkedin.com/blog/2017/11/resilience-engineering-at-linkedin-with-project-waterbear Post our understanding about HA, our architecture diagram looks something like this below","title":"Applications in SRE role"},{"location":"systems_design/conclusion/","text":"Conclusion Armed with these principles, we hope the course will give a fresh perspective to design software systems. It might be over engineering to get all this on day zero. But some are really important from day 0 like eliminating single points of failure, making scalable services by just increasing replicas. As a bottleneck is reached, we can split code by services, shard data to scale. As the organisation matures, bringing in chaos engineering to measure how systems react to failure will help in designing robust software systems.","title":"Conclusion"},{"location":"systems_design/conclusion/#conclusion","text":"Armed with these principles, we hope the course will give a fresh perspective to design software systems. It might be over engineering to get all this on day zero. But some are really important from day 0 like eliminating single points of failure, making scalable services by just increasing replicas. As a bottleneck is reached, we can split code by services, shard data to scale. As the organisation matures, bringing in chaos engineering to measure how systems react to failure will help in designing robust software systems.","title":"Conclusion"},{"location":"systems_design/fault-tolerance/","text":"Fault Tolerance Failures are not avoidable in any system and will happen all the time, hence we need to build systems that can tolerate failures or recover from them. In systems, failure is the norm rather than the exception. \"Anything that can go wrong will go wrong\u201d -- Murphy\u2019s Law \u201cComplex systems contain changing mixtures of failures latent within them\u201d -- How Complex Systems Fail. Fault Tolerance - Failure Metrics Common failure metrics that get measured and tracked for any system. Mean time to repair (MTTR): The average time to repair and restore a failed system. Mean time between failures (MTBF): The average operational time between one device failure or system breakdown and the next. Mean time to failure (MTTF): The average time a device or system is expected to function before it fails. Mean time to detect (MTTD): The average time between the onset of a problem and when the organization detects it. Mean time to investigate (MTTI): The average time between the detection of an incident and when the organization begins to investigate its cause and solution. Mean time to restore service (MTRS): The average elapsed time from the detection of an incident until the affected system or component is again available to users. Mean time between system incidents (MTBSI): The average elapsed time between the detection of two consecutive incidents. MTBSI can be calculated by adding MTBF and MTRS (MTBSI = MTBF + MTRS). Failure rate: Another reliability metric, which measures the frequency with which a component or system fails. It is expressed as a number of failures over a unit of time. Refer https://www.splunk.com/en_us/data-insider/what-is-mean-time-to-repair.html Fault Tolerance - Fault Isolation Terms Systems should have a short circuit. Say in our content sharing system, if \u201cNotifications\u201d is not working, the site should gracefully handle that failure by removing the functionality instead of taking the whole site down. Swimlane is one of the commonly used fault isolation methodology. Swimlane adds a barrier to the service from other services so that failure on either of them won\u2019t affect the other. Say we roll out a new feature \u2018Advertisement\u2019 in our content sharing app. We can have two architectures If Ads are generated on the fly synchronously during each Newsfeed request, the faults in Ads feature gets propagated to Newsfeed feature. Instead if we swimlane \u201cGeneration of Ads\u201d service and use a shared storage to populate Newsfeed App, Ads failures won\u2019t cascade to Newsfeed and worst case if Ads don\u2019t meet SLA , we can have Newsfeed without Ads. Let's take another example, we come up with a new model for our Content sharing App. Here we roll out enterprise content sharing App where enterprises pay for the service and the content should never be shared outside the enterprise. Swimlane Principles Principle 1: Nothing is shared (also known as \u201cshare as little as possible\u201d). The less that is shared within a swim lane, the more fault isolative the swim lane becomes. (as shown in Enterprise usecase) Principle 2: Nothing crosses a swim lane boundary. Synchronous (defined by expecting a request\u2014not the transfer protocol) communication never crosses a swim lane boundary; if it does, the boundary is drawn incorrectly. (as shown in Ads feature) Swimlane Approaches Approach 1: Swim lane the money-maker. Never allow your cash register to be compromised by other systems. (Tier 1 vs Tier 2 in enterprise use case) Approach 2: Swim lane the biggest sources of incidents. Identify the recurring causes of pain and isolate them.(if Ads feature is in code yellow, swim laning it is the best option) Approach 3: Swim lane natural barriers. Customer boundaries make good swim lanes.(Public vs Enterprise customers) Refer https://learning.oreilly.com/library/view/the-art-of/9780134031408/ch21.html#ch21 Applications in SRE role Work with the DC tech or cloud team to distribute infrastructure such that its immune to switch or power failures by creating fault zones within a Data Center https://docs.microsoft.com/en-us/azure/virtual-machines/manage-availability#use-availability-zones-to-protect-from-datacenter-level-failures Work with the partners and design interaction between services such that one service breakdown is not amplified in a cascading fashion to all upstreams","title":"Fault Tolerance"},{"location":"systems_design/fault-tolerance/#fault-tolerance","text":"Failures are not avoidable in any system and will happen all the time, hence we need to build systems that can tolerate failures or recover from them. In systems, failure is the norm rather than the exception. \"Anything that can go wrong will go wrong\u201d -- Murphy\u2019s Law \u201cComplex systems contain changing mixtures of failures latent within them\u201d -- How Complex Systems Fail.","title":"Fault Tolerance"},{"location":"systems_design/fault-tolerance/#fault-tolerance-failure-metrics","text":"Common failure metrics that get measured and tracked for any system. Mean time to repair (MTTR): The average time to repair and restore a failed system. Mean time between failures (MTBF): The average operational time between one device failure or system breakdown and the next. Mean time to failure (MTTF): The average time a device or system is expected to function before it fails. Mean time to detect (MTTD): The average time between the onset of a problem and when the organization detects it. Mean time to investigate (MTTI): The average time between the detection of an incident and when the organization begins to investigate its cause and solution. Mean time to restore service (MTRS): The average elapsed time from the detection of an incident until the affected system or component is again available to users. Mean time between system incidents (MTBSI): The average elapsed time between the detection of two consecutive incidents. MTBSI can be calculated by adding MTBF and MTRS (MTBSI = MTBF + MTRS). Failure rate: Another reliability metric, which measures the frequency with which a component or system fails. It is expressed as a number of failures over a unit of time.","title":"Fault Tolerance - Failure Metrics"},{"location":"systems_design/fault-tolerance/#refer","text":"https://www.splunk.com/en_us/data-insider/what-is-mean-time-to-repair.html","title":"Refer"},{"location":"systems_design/fault-tolerance/#fault-tolerance-fault-isolation-terms","text":"Systems should have a short circuit. Say in our content sharing system, if \u201cNotifications\u201d is not working, the site should gracefully handle that failure by removing the functionality instead of taking the whole site down. Swimlane is one of the commonly used fault isolation methodology. Swimlane adds a barrier to the service from other services so that failure on either of them won\u2019t affect the other. Say we roll out a new feature \u2018Advertisement\u2019 in our content sharing app. We can have two architectures If Ads are generated on the fly synchronously during each Newsfeed request, the faults in Ads feature gets propagated to Newsfeed feature. Instead if we swimlane \u201cGeneration of Ads\u201d service and use a shared storage to populate Newsfeed App, Ads failures won\u2019t cascade to Newsfeed and worst case if Ads don\u2019t meet SLA , we can have Newsfeed without Ads. Let's take another example, we come up with a new model for our Content sharing App. Here we roll out enterprise content sharing App where enterprises pay for the service and the content should never be shared outside the enterprise.","title":"Fault Tolerance - Fault Isolation Terms"},{"location":"systems_design/fault-tolerance/#swimlane-principles","text":"Principle 1: Nothing is shared (also known as \u201cshare as little as possible\u201d). The less that is shared within a swim lane, the more fault isolative the swim lane becomes. (as shown in Enterprise usecase) Principle 2: Nothing crosses a swim lane boundary. Synchronous (defined by expecting a request\u2014not the transfer protocol) communication never crosses a swim lane boundary; if it does, the boundary is drawn incorrectly. (as shown in Ads feature)","title":"Swimlane Principles"},{"location":"systems_design/fault-tolerance/#swimlane-approaches","text":"Approach 1: Swim lane the money-maker. Never allow your cash register to be compromised by other systems. (Tier 1 vs Tier 2 in enterprise use case) Approach 2: Swim lane the biggest sources of incidents. Identify the recurring causes of pain and isolate them.(if Ads feature is in code yellow, swim laning it is the best option) Approach 3: Swim lane natural barriers. Customer boundaries make good swim lanes.(Public vs Enterprise customers)","title":"Swimlane Approaches"},{"location":"systems_design/fault-tolerance/#refer_1","text":"https://learning.oreilly.com/library/view/the-art-of/9780134031408/ch21.html#ch21","title":"Refer"},{"location":"systems_design/fault-tolerance/#applications-in-sre-role","text":"Work with the DC tech or cloud team to distribute infrastructure such that its immune to switch or power failures by creating fault zones within a Data Center https://docs.microsoft.com/en-us/azure/virtual-machines/manage-availability#use-availability-zones-to-protect-from-datacenter-level-failures Work with the partners and design interaction between services such that one service breakdown is not amplified in a cascading fashion to all upstreams","title":"Applications in SRE role"},{"location":"systems_design/intro/","text":"Systems Design Prerequisites Fundamentals of common software system components: Linux Basics Linux Networking Databases RDBMS NoSQL Concepts What to expect from this course Thinking about and designing for scalability, availability, and reliability of large scale software systems. What is not covered under this course Individual software components\u2019 scalability and reliability concerns like e.g. Databases, while the same scalability principles and thinking can be applied, these individual components have their own specific nuances when scaling them and thinking about their reliability. More light will be shed on concepts rather than on setting up and configuring components like Loadbalancers to achieve scalability, availability and reliability of systems Course Contents Introduction Scalability High Availability Fault Tolerance Introduction So, how do you go about learning to design a system? \u201d Like most great questions, it showed a level of naivety that was breathtaking. The only short answer I could give was, essentially, that you learned how to design a system by designing systems and finding out what works and what doesn\u2019t work.\u201d Jim Waldo, Sun Microsystems, On System Design As software and hardware systems have multiple moving parts, we need to think about how those parts will grow, their failure modes, their inter-dependencies, how it will impact the users and the business. There is no one-shot method or way to learn or do system design, we only learn to design systems by designing and iterating on them. This course will be a starter to make one think about scalability, availability, and fault tolerance during systems design. Backstory Let\u2019s design a simple content sharing application where users can share photos, media in our application which can be liked by their friends. Let\u2019s start with a simple design of the application and evolve it as we learn system design concepts","title":"Introduction"},{"location":"systems_design/intro/#systems-design","text":"","title":"Systems Design"},{"location":"systems_design/intro/#prerequisites","text":"Fundamentals of common software system components: Linux Basics Linux Networking Databases RDBMS NoSQL Concepts","title":"Prerequisites"},{"location":"systems_design/intro/#what-to-expect-from-this-course","text":"Thinking about and designing for scalability, availability, and reliability of large scale software systems.","title":"What to expect from this course"},{"location":"systems_design/intro/#what-is-not-covered-under-this-course","text":"Individual software components\u2019 scalability and reliability concerns like e.g. Databases, while the same scalability principles and thinking can be applied, these individual components have their own specific nuances when scaling them and thinking about their reliability. More light will be shed on concepts rather than on setting up and configuring components like Loadbalancers to achieve scalability, availability and reliability of systems","title":"What is not covered under this course"},{"location":"systems_design/intro/#course-contents","text":"Introduction Scalability High Availability Fault Tolerance","title":"Course Contents"},{"location":"systems_design/intro/#introduction","text":"So, how do you go about learning to design a system? \u201d Like most great questions, it showed a level of naivety that was breathtaking. The only short answer I could give was, essentially, that you learned how to design a system by designing systems and finding out what works and what doesn\u2019t work.\u201d Jim Waldo, Sun Microsystems, On System Design As software and hardware systems have multiple moving parts, we need to think about how those parts will grow, their failure modes, their inter-dependencies, how it will impact the users and the business. There is no one-shot method or way to learn or do system design, we only learn to design systems by designing and iterating on them. This course will be a starter to make one think about scalability, availability, and fault tolerance during systems design.","title":"Introduction"},{"location":"systems_design/intro/#backstory","text":"Let\u2019s design a simple content sharing application where users can share photos, media in our application which can be liked by their friends. Let\u2019s start with a simple design of the application and evolve it as we learn system design concepts","title":"Backstory"},{"location":"systems_design/scalability/","text":"Scalability What does scalability mean for a system/service? A system is composed of services/components, each service/component scalability needs to be tackled separately, and the scalability of the system as a whole. A service is said to be scalable if, as resources are added to the system, it results in increased performance in a manner proportional to resources added An always-on service is said to be scalable if adding resources to facilitate redundancy does not result in a loss of performance Refer https://www.allthingsdistributed.com/2006/03/a_word_on_scalability.html Scalability - AKF Scale Cube The Scale Cube is a model for segmenting services, defining microservices, and scaling products. It also creates a common language for teams to discuss scale related options in designing solutions. Following section talks about certain scaling patterns based on our inferences from AKF cube Scalability - Horizontal scaling Horizontal scaling stands for cloning of an application or service such that work can easily be distributed across instances with absolutely no bias. Lets see how our monolithic application improves with this principle Here DB is scaled separately from the application. This is to let you know each component\u2019s scaling capabilities can be different. Usually web applications can be scaled by adding resources unless there is no state stored inside the application. But DBs can be scaled only for Reads by adding more followers but Writes have to go to only one master to make sure data is consistent. There are some DBs which support multi master writes but we are keeping them out of scope at this point. Apps should be able to differentiate between Read and Writes to choose appropriate DB servers. Load balancers can split traffic between identical servers transparently. WHAT: Duplication of services or databases to spread transaction load. WHEN TO USE: Databases with a very high read-to-write ratio (5:1 or greater\u2014the higher the better). Because only read replicas of DBs can be scaled, not the Master. HOW TO USE: Simply clone services and implement a load balancer. For databases, ensure that the accessing code understands the difference between a read and a write. WHY: Allows for fast scale of transactions at the cost of duplicated data and functionality. KEY TAKEAWAYS: This is fast to implement, is low cost from a developer effort perspective, and can scale transaction volumes nicely. However, they tend to be high cost from the perspective of the operational cost of data. Cost here means if we have 3 followers and 1 Master DB, the same database will be stored as 4 copies in the 4 servers. Hence added storage cost Refer https://learning.oreilly.com/library/view/the-art-of/9780134031408/ch23.html Scalability Pattern - Load Balancing Improves the distribution of workloads across multiple computing resources, such as computers, a computer cluster, network links, central processing units, or disk drives. Commonly used technique is load balancing traffic across identical server clusters. Similar philosophy is used to load balance traffic across network links by ECMP , disk drives by RAID etc Aims to optimize resource use, maximize throughput, minimize response time, and avoid overload of any single resource. Using multiple components with load balancing instead of a single component may increase reliability and availability through redundancy. In our updated architecture diagram we have 4 servers to handle app traffic instead of a single server The device or system that performs load balancing is called a load balancer, abbreviated as LB. Refer https://en.wikipedia.org/wiki/Load_balancing_(computing) https://blog.envoyproxy.io/introduction-to-modern-network-load-balancing-and-proxying-a57f6ff80236 https://learning.oreilly.com/library/view/load-balancing-in/9781492038009/ https://learning.oreilly.com/library/view/practical-load-balancing/9781430236801/ http://shop.oreilly.com/product/9780596000509.do Scalability Pattern - LB Tasks What does an LB do? Service discovery: What backends are available in the system? In our architecture, 4 servers are available to serve App traffic. LB acts as a single endpoint that clients can use transparently to reach one of the 4 servers. Health checking: What backends are currently healthy and available to accept requests? If one out of the 4 App servers turns bad, LB should automatically short circuit the path so that clients don\u2019t sense any application downtime Load balancing: What algorithm should be used to balance individual requests across the healthy backends? There are many algorithms to distribute traffic across one of the four servers. Based on observations/experience, SRE can pick the algorithm that suits their pattern Scalability Pattern - LB Methods Common Load Balancing Methods Least Connection Method directs traffic to the server with the fewest active connections. Most useful when there are a large number of persistent connections in the traffic unevenly distributed between the servers. Works if clients maintain long lived connections Least Response Time Method directs traffic to the server with the fewest active connections and the lowest average response time. Here response time is used to provide feedback of server\u2019s health Round Robin Method rotates servers by directing traffic to the first available server and then moves that server to the bottom of the queue. Most useful when servers are of equal specification and there are not many persistent connections. IP Hash the IP address of the client determines which server receives the request. This can sometimes cause skewness in distribution but is useful if apps store some state locally and need some stickiness More advanced client/server-side example techniques - https://docs.nginx.com/nginx/admin-guide/load-balancer/ - http://cbonte.github.io/haproxy-dconv/2.2/intro.html#3.3.5 - https://twitter.github.io/finagle/guide/Clients.html#load-balancing Scalability Pattern - Caching - Content Delivery Networks (CDN) CDNs are added closer to the client\u2019s location. If the app has static data like images, Javascript, CSS which don\u2019t change very often, they can be cached. Since our example is a content sharing site, static content can be cached in CDNs with a suitable expiry. WHAT: Use CDNs (content delivery networks) to offload traffic from your site. WHEN TO USE: When speed improvements and scale warrant the additional cost. HOW TO USE: Most CDNs leverage DNS to serve content on your site\u2019s behalf. Thus you may need to make minor DNS changes or additions and move content to be served from new subdomains. Eg media-exp1.licdn.com is a domain used by Linkedin to serve static content Here a CNAME points the domain to the DNS of CDN provider dig media-exp1.licdn.com +short 2-01-2c3e-005c.cdx.cedexis.net. WHY: CDNs help offload traffic spikes and are often economical ways to scale parts of a site\u2019s traffic. They also often substantially improve page download times. KEY TAKEAWAYS: CDNs are a fast and simple way to offset the spikiness of traffic as well as traffic growth in general. Make sure you perform a cost-benefit analysis and monitor the CDN usage. If CDNs have a lot of cache misses, then we don\u2019t gain much from CDN and are still serving requests using our compute resources. Scalability - Microservices This pattern represents the separation of work by service or function within the application. Microservices are meant to address the issues associated with growth and complexity in the code base and data sets. The intent is to create fault isolation as well as to reduce response times. Microservices can scale transactions, data sizes, and codebase sizes. They are most effective in scaling the size and complexity of your codebase. They tend to cost a bit more than horizontal scaling because the engineering team needs to rewrite services or, at the very least, disaggregate them from the original monolithic application. WHAT: Sometimes referred to as scale through services or resources, this rule focuses on scaling by splitting data sets, transactions, and engineering teams along verb (services) or noun (resources) boundaries. WHEN TO USE: Very large data sets where relations between data are not necessary. Large, complex systems where scaling engineering resources requires specialization. HOW TO USE: Split up actions by using verbs, or resources by using nouns, or use a mix. Split both the services and the data along the lines defined by the verb/noun approach. WHY: Allows for efficient scaling of not only transactions but also very large data sets associated with those transactions. It also allows for the efficient scaling of teams. KEY TAKEAWAYS: Microservices allow for efficient scaling of transactions, large data sets, and can help with fault isolation. It helps reduce the communication overhead of teams. The codebase becomes less complex as disjoint features are decoupled and spun as new services thereby letting each service scale independently specific to its requirement. Refer https://learning.oreilly.com/library/view/the-art-of/9780134031408/ch23.html Scalability - Sharding This pattern represents the separation of work based on attributes that are looked up or determined at the time of the transaction. Most often, these are implemented as splits by requestor, customer, or client. Very often, a lookup service or deterministic algorithm will need to be written for these types of splits. Sharding aids in scaling transaction growth, scaling instruction sets, and decreasing processing time (the last by limiting the data necessary to perform any transaction). This is more effective at scaling growth in customers or clients. It can aid with disaster recovery efforts, and limit the impact of incidents to only a specific segment of customers. Here the auth data is sharded based on user names so that DBs can respond faster as the amount of data DBs have to work on has drastically reduced during queries. There can be other ways to split Here the whole data centre is split and replicated and clients are directed to a data centre based on their geography. This helps in improving performance as clients are directed to the closest Data centre and performance increases as we add more data centres. There are some replication and consistency overhead with this approach one needs to be aware of. This also gives fault tolerance by rolling out test features to one site and rollback if there is an impact to that geography WHAT: This is very often a split by some unique aspect of the customer such as customer ID, name, geography, and so on. WHEN TO USE: Very large, similar data sets such as large and rapidly growing customer bases or when the response time for a geographically distributed customer base is important. HOW TO USE: Identify something you know about the customer, such as customer ID, last name, geography, or device, and split or partition both data and services based on that attribute. WHY: Rapid customer growth exceeds other forms of data growth, or you have the need to perform fault isolation between certain customer groups as you scale. KEY TAKEAWAYS: Shards are effective at helping you to scale customer bases but can also be applied to other very large data sets that can\u2019t be pulled apart using the microservices methodology. Refer https://learning.oreilly.com/library/view/the-art-of/9780134031408/ch23.html Applications in SRE role SREs in coordination with the network team work on how to map users traffic to a particular site. https://engineering.linkedin.com/blog/2017/05/trafficshift--load-testing-at-scale SREs work closely with the Dev team to split monoliths to multiple microservices that are easy to run and manage SREs work on improving Load Balancers' reliability, service discovery and performance SREs work closely to split Data into shards and manage data integrity and consistency. https://engineering.linkedin.com/espresso/introducing-espresso-linkedins-hot-new-distributed-document-store SREs work to set up, configure and improve CDN cache hit rate.","title":"Scalability"},{"location":"systems_design/scalability/#scalability","text":"What does scalability mean for a system/service? A system is composed of services/components, each service/component scalability needs to be tackled separately, and the scalability of the system as a whole. A service is said to be scalable if, as resources are added to the system, it results in increased performance in a manner proportional to resources added An always-on service is said to be scalable if adding resources to facilitate redundancy does not result in a loss of performance","title":"Scalability"},{"location":"systems_design/scalability/#refer","text":"https://www.allthingsdistributed.com/2006/03/a_word_on_scalability.html","title":"Refer"},{"location":"systems_design/scalability/#scalability-akf-scale-cube","text":"The Scale Cube is a model for segmenting services, defining microservices, and scaling products. It also creates a common language for teams to discuss scale related options in designing solutions. Following section talks about certain scaling patterns based on our inferences from AKF cube","title":"Scalability - AKF Scale Cube"},{"location":"systems_design/scalability/#scalability-horizontal-scaling","text":"Horizontal scaling stands for cloning of an application or service such that work can easily be distributed across instances with absolutely no bias. Lets see how our monolithic application improves with this principle Here DB is scaled separately from the application. This is to let you know each component\u2019s scaling capabilities can be different. Usually web applications can be scaled by adding resources unless there is no state stored inside the application. But DBs can be scaled only for Reads by adding more followers but Writes have to go to only one master to make sure data is consistent. There are some DBs which support multi master writes but we are keeping them out of scope at this point. Apps should be able to differentiate between Read and Writes to choose appropriate DB servers. Load balancers can split traffic between identical servers transparently. WHAT: Duplication of services or databases to spread transaction load. WHEN TO USE: Databases with a very high read-to-write ratio (5:1 or greater\u2014the higher the better). Because only read replicas of DBs can be scaled, not the Master. HOW TO USE: Simply clone services and implement a load balancer. For databases, ensure that the accessing code understands the difference between a read and a write. WHY: Allows for fast scale of transactions at the cost of duplicated data and functionality. KEY TAKEAWAYS: This is fast to implement, is low cost from a developer effort perspective, and can scale transaction volumes nicely. However, they tend to be high cost from the perspective of the operational cost of data. Cost here means if we have 3 followers and 1 Master DB, the same database will be stored as 4 copies in the 4 servers. Hence added storage cost","title":"Scalability - Horizontal scaling"},{"location":"systems_design/scalability/#refer_1","text":"https://learning.oreilly.com/library/view/the-art-of/9780134031408/ch23.html","title":"Refer"},{"location":"systems_design/scalability/#scalability-pattern-load-balancing","text":"Improves the distribution of workloads across multiple computing resources, such as computers, a computer cluster, network links, central processing units, or disk drives. Commonly used technique is load balancing traffic across identical server clusters. Similar philosophy is used to load balance traffic across network links by ECMP , disk drives by RAID etc Aims to optimize resource use, maximize throughput, minimize response time, and avoid overload of any single resource. Using multiple components with load balancing instead of a single component may increase reliability and availability through redundancy. In our updated architecture diagram we have 4 servers to handle app traffic instead of a single server The device or system that performs load balancing is called a load balancer, abbreviated as LB.","title":"Scalability Pattern - Load Balancing"},{"location":"systems_design/scalability/#refer_2","text":"https://en.wikipedia.org/wiki/Load_balancing_(computing) https://blog.envoyproxy.io/introduction-to-modern-network-load-balancing-and-proxying-a57f6ff80236 https://learning.oreilly.com/library/view/load-balancing-in/9781492038009/ https://learning.oreilly.com/library/view/practical-load-balancing/9781430236801/ http://shop.oreilly.com/product/9780596000509.do","title":"Refer"},{"location":"systems_design/scalability/#scalability-pattern-lb-tasks","text":"What does an LB do?","title":"Scalability Pattern - LB Tasks"},{"location":"systems_design/scalability/#service-discovery","text":"What backends are available in the system? In our architecture, 4 servers are available to serve App traffic. LB acts as a single endpoint that clients can use transparently to reach one of the 4 servers.","title":"Service discovery:"},{"location":"systems_design/scalability/#health-checking","text":"What backends are currently healthy and available to accept requests? If one out of the 4 App servers turns bad, LB should automatically short circuit the path so that clients don\u2019t sense any application downtime","title":"Health checking:"},{"location":"systems_design/scalability/#load-balancing","text":"What algorithm should be used to balance individual requests across the healthy backends? There are many algorithms to distribute traffic across one of the four servers. Based on observations/experience, SRE can pick the algorithm that suits their pattern","title":"Load balancing:"},{"location":"systems_design/scalability/#scalability-pattern-lb-methods","text":"Common Load Balancing Methods","title":"Scalability Pattern - LB Methods"},{"location":"systems_design/scalability/#least-connection-method","text":"directs traffic to the server with the fewest active connections. Most useful when there are a large number of persistent connections in the traffic unevenly distributed between the servers. Works if clients maintain long lived connections","title":"Least Connection Method"},{"location":"systems_design/scalability/#least-response-time-method","text":"directs traffic to the server with the fewest active connections and the lowest average response time. Here response time is used to provide feedback of server\u2019s health","title":"Least Response Time Method"},{"location":"systems_design/scalability/#round-robin-method","text":"rotates servers by directing traffic to the first available server and then moves that server to the bottom of the queue. Most useful when servers are of equal specification and there are not many persistent connections.","title":"Round Robin Method"},{"location":"systems_design/scalability/#ip-hash","text":"the IP address of the client determines which server receives the request. This can sometimes cause skewness in distribution but is useful if apps store some state locally and need some stickiness More advanced client/server-side example techniques - https://docs.nginx.com/nginx/admin-guide/load-balancer/ - http://cbonte.github.io/haproxy-dconv/2.2/intro.html#3.3.5 - https://twitter.github.io/finagle/guide/Clients.html#load-balancing","title":"IP Hash"},{"location":"systems_design/scalability/#scalability-pattern-caching-content-delivery-networks-cdn","text":"CDNs are added closer to the client\u2019s location. If the app has static data like images, Javascript, CSS which don\u2019t change very often, they can be cached. Since our example is a content sharing site, static content can be cached in CDNs with a suitable expiry. WHAT: Use CDNs (content delivery networks) to offload traffic from your site. WHEN TO USE: When speed improvements and scale warrant the additional cost. HOW TO USE: Most CDNs leverage DNS to serve content on your site\u2019s behalf. Thus you may need to make minor DNS changes or additions and move content to be served from new subdomains. Eg media-exp1.licdn.com is a domain used by Linkedin to serve static content Here a CNAME points the domain to the DNS of CDN provider dig media-exp1.licdn.com +short 2-01-2c3e-005c.cdx.cedexis.net. WHY: CDNs help offload traffic spikes and are often economical ways to scale parts of a site\u2019s traffic. They also often substantially improve page download times. KEY TAKEAWAYS: CDNs are a fast and simple way to offset the spikiness of traffic as well as traffic growth in general. Make sure you perform a cost-benefit analysis and monitor the CDN usage. If CDNs have a lot of cache misses, then we don\u2019t gain much from CDN and are still serving requests using our compute resources.","title":"Scalability Pattern - Caching - Content Delivery Networks (CDN)"},{"location":"systems_design/scalability/#scalability-microservices","text":"This pattern represents the separation of work by service or function within the application. Microservices are meant to address the issues associated with growth and complexity in the code base and data sets. The intent is to create fault isolation as well as to reduce response times. Microservices can scale transactions, data sizes, and codebase sizes. They are most effective in scaling the size and complexity of your codebase. They tend to cost a bit more than horizontal scaling because the engineering team needs to rewrite services or, at the very least, disaggregate them from the original monolithic application. WHAT: Sometimes referred to as scale through services or resources, this rule focuses on scaling by splitting data sets, transactions, and engineering teams along verb (services) or noun (resources) boundaries. WHEN TO USE: Very large data sets where relations between data are not necessary. Large, complex systems where scaling engineering resources requires specialization. HOW TO USE: Split up actions by using verbs, or resources by using nouns, or use a mix. Split both the services and the data along the lines defined by the verb/noun approach. WHY: Allows for efficient scaling of not only transactions but also very large data sets associated with those transactions. It also allows for the efficient scaling of teams. KEY TAKEAWAYS: Microservices allow for efficient scaling of transactions, large data sets, and can help with fault isolation. It helps reduce the communication overhead of teams. The codebase becomes less complex as disjoint features are decoupled and spun as new services thereby letting each service scale independently specific to its requirement.","title":"Scalability - Microservices"},{"location":"systems_design/scalability/#refer_3","text":"https://learning.oreilly.com/library/view/the-art-of/9780134031408/ch23.html","title":"Refer"},{"location":"systems_design/scalability/#scalability-sharding","text":"This pattern represents the separation of work based on attributes that are looked up or determined at the time of the transaction. Most often, these are implemented as splits by requestor, customer, or client. Very often, a lookup service or deterministic algorithm will need to be written for these types of splits. Sharding aids in scaling transaction growth, scaling instruction sets, and decreasing processing time (the last by limiting the data necessary to perform any transaction). This is more effective at scaling growth in customers or clients. It can aid with disaster recovery efforts, and limit the impact of incidents to only a specific segment of customers. Here the auth data is sharded based on user names so that DBs can respond faster as the amount of data DBs have to work on has drastically reduced during queries. There can be other ways to split Here the whole data centre is split and replicated and clients are directed to a data centre based on their geography. This helps in improving performance as clients are directed to the closest Data centre and performance increases as we add more data centres. There are some replication and consistency overhead with this approach one needs to be aware of. This also gives fault tolerance by rolling out test features to one site and rollback if there is an impact to that geography WHAT: This is very often a split by some unique aspect of the customer such as customer ID, name, geography, and so on. WHEN TO USE: Very large, similar data sets such as large and rapidly growing customer bases or when the response time for a geographically distributed customer base is important. HOW TO USE: Identify something you know about the customer, such as customer ID, last name, geography, or device, and split or partition both data and services based on that attribute. WHY: Rapid customer growth exceeds other forms of data growth, or you have the need to perform fault isolation between certain customer groups as you scale. KEY TAKEAWAYS: Shards are effective at helping you to scale customer bases but can also be applied to other very large data sets that can\u2019t be pulled apart using the microservices methodology.","title":"Scalability - Sharding"},{"location":"systems_design/scalability/#refer_4","text":"https://learning.oreilly.com/library/view/the-art-of/9780134031408/ch23.html","title":"Refer"},{"location":"systems_design/scalability/#applications-in-sre-role","text":"SREs in coordination with the network team work on how to map users traffic to a particular site. https://engineering.linkedin.com/blog/2017/05/trafficshift--load-testing-at-scale SREs work closely with the Dev team to split monoliths to multiple microservices that are easy to run and manage SREs work on improving Load Balancers' reliability, service discovery and performance SREs work closely to split Data into shards and manage data integrity and consistency. https://engineering.linkedin.com/espresso/introducing-espresso-linkedins-hot-new-distributed-document-store SREs work to set up, configure and improve CDN cache hit rate.","title":"Applications in SRE role"}]}
\ No newline at end of file
+{"config":{"lang":["en"],"min_search_length":3,"prebuild_index":false,"separator":"[\\s\\-]+"},"docs":[{"location":"","text":"School of SRE Early 2019, we started visiting campuses to recruit the brightest minds to ensure LinkedIn and all the services that it is composed of is always available for everyone. This function at Linkedin falls in the purview of the Site Reliability Engineering team and Site Reliability Engineers ( SRE ) who are Software Engineers who specialize in reliability. SREs apply the principles of computer science and engineering to the design and development of computer systems: generally, large distributed ones. As we continued on this journey we started getting a lot of questions from these campuses on what exactly site engineering role entails? and, how could someone learn the skills and the disciplines involved to become a successful site engineer? Fast forward a few months, and a few of these campus students had joined LinkedIn either as Interns or as full-time engineers to become a part of the Site Engineering team, we also had a few lateral hires who joined our organization who were not from a traditional SRE background. That's when a few of us got together and started to think about how we can onboard new graduate engineers to the site engineering team. There is a vast amount of resources scattered throughout the web on what are the roles and responsibilities of SREs are, how to monitor site health, handling incidents, maintain SLO/SLI, etc. But there are very few resources out there guiding someone on all basic skill sets one has to acquire as a beginner. Because of the lack of these resources, we felt that individuals are having a tough time getting into open positions in the industry. We created the School Of SRE as a starting point for anyone wanting to build their career in the role of SRE. In this course we are focusing on building strong foundational skills. The course is structured in a way to provide more real life examples and how learning each of the topics can play a bigger role in your day to day SRE life. Currently we are covering the following topics under the School Of SRE: Fundamentals Series Linux Basics Git Linux Networking Python and Web Data Relational databases (MySQL) NoSQL concepts Big Data Systems Design Security We believe continuous learning will help in acquiring deeper knowledge and competencies in order to expand your skill sets, every module has added reference which could be a guide for further learning. Our hope is that by going through these modules we should be able to build the essential skills required for a Site Reliability Engineer. At Linkedin, we are using this curriculum for onboarding our non-traditional hires and new college grads to the SRE role. We had multiple rounds of successful onboarding experience with the new members and helped them to be productive in a very short period of time. This motivated us to opensource these contents for helping other organizations onboarding new engineers to the role and individuals to get into the role. We realize that the initial content we created is just a starting point and we hope that the community can help in the journey of refining and extending the contents.","title":"Home"},{"location":"#school-of-sre","text":"Early 2019, we started visiting campuses to recruit the brightest minds to ensure LinkedIn and all the services that it is composed of is always available for everyone. This function at Linkedin falls in the purview of the Site Reliability Engineering team and Site Reliability Engineers ( SRE ) who are Software Engineers who specialize in reliability. SREs apply the principles of computer science and engineering to the design and development of computer systems: generally, large distributed ones. As we continued on this journey we started getting a lot of questions from these campuses on what exactly site engineering role entails? and, how could someone learn the skills and the disciplines involved to become a successful site engineer? Fast forward a few months, and a few of these campus students had joined LinkedIn either as Interns or as full-time engineers to become a part of the Site Engineering team, we also had a few lateral hires who joined our organization who were not from a traditional SRE background. That's when a few of us got together and started to think about how we can onboard new graduate engineers to the site engineering team. There is a vast amount of resources scattered throughout the web on what are the roles and responsibilities of SREs are, how to monitor site health, handling incidents, maintain SLO/SLI, etc. But there are very few resources out there guiding someone on all basic skill sets one has to acquire as a beginner. Because of the lack of these resources, we felt that individuals are having a tough time getting into open positions in the industry. We created the School Of SRE as a starting point for anyone wanting to build their career in the role of SRE. In this course we are focusing on building strong foundational skills. The course is structured in a way to provide more real life examples and how learning each of the topics can play a bigger role in your day to day SRE life. Currently we are covering the following topics under the School Of SRE: Fundamentals Series Linux Basics Git Linux Networking Python and Web Data Relational databases (MySQL) NoSQL concepts Big Data Systems Design Security We believe continuous learning will help in acquiring deeper knowledge and competencies in order to expand your skill sets, every module has added reference which could be a guide for further learning. Our hope is that by going through these modules we should be able to build the essential skills required for a Site Reliability Engineer. At Linkedin, we are using this curriculum for onboarding our non-traditional hires and new college grads to the SRE role. We had multiple rounds of successful onboarding experience with the new members and helped them to be productive in a very short period of time. This motivated us to opensource these contents for helping other organizations onboarding new engineers to the role and individuals to get into the role. We realize that the initial content we created is just a starting point and we hope that the community can help in the journey of refining and extending the contents.","title":"School of SRE"},{"location":"CONTRIBUTING/","text":"We realise that the initial content we created is just a starting point and our hope is that the community can help in the journey refining and extending the contents. As a contributor, you represent that the content you submit is not plagiarised. By submitting the content, you (and, if applicable, your employer) are licensing the submitted content to LinkedIn and the open source community subject to the BSD 2-Clause license. We suggest to open an issue first and seek advice for your changes before submitting a pull request. Building and testing locally Run the following commands to build and view the site locally before opening a PR. pip install -r requirements.txt mkdocs build mkdocs serve","title":"Contribute"},{"location":"CONTRIBUTING/#building-and-testing-locally","text":"Run the following commands to build and view the site locally before opening a PR. pip install -r requirements.txt mkdocs build mkdocs serve","title":"Building and testing locally"},{"location":"big_data/evolution/","text":"Evolution of Hadoop Architecture of Hadoop HDFS The Hadoop Distributed File System (HDFS) is a distributed file system designed to run on commodity hardware. It has many similarities with existing distributed file systems. However, the differences from other distributed file systems are significant. HDFS is highly fault-tolerant and is designed to be deployed on low-cost hardware. HDFS provides high throughput access to application data and is suitable for applications that have large data sets. HDFS is part of the Apache Hadoop Core project . NameNode: is the arbitrator and central repository of file namespace in the cluster. The NameNode executes the operations such as opening, closing, and renaming files and directories. DataNode: manages the storage attached to the node on which it runs. It is responsible for serving all the read and writes requests. It performs operations on instructions on NameNode such as creation, deletion, and replications of blocks. Client: Responsible for getting the required metadata from the namenode and then communicating with the datanodes for reads and writes. YARN YARN stands for \u201cYet Another Resource Negotiator\u201c. It was introduced in Hadoop 2.0 to remove the bottleneck on Job Tracker which was present in Hadoop 1.0. YARN was described as a \u201cRedesigned Resource Manager\u201d at the time of its launching, but it has now evolved to be known as a large-scale distributed operating system used for Big Data processing. The main components of YARN architecture include: Client: It submits map-reduce(MR) jobs to the resource manager. Resource Manager: It is the master daemon of YARN and is responsible for resource assignment and management among all the applications. Whenever it receives a processing request, it forwards it to the corresponding node manager and allocates resources for the completion of the request accordingly. It has two major components: Scheduler: It performs scheduling based on the allocated application and available resources. It is a pure scheduler, which means that it does not perform other tasks such as monitoring or tracking and does not guarantee a restart if a task fails. The YARN scheduler supports plugins such as Capacity Scheduler and Fair Scheduler to partition the cluster resources. Application manager: It is responsible for accepting the application and negotiating the first container from the resource manager. It also restarts the Application Manager container if a task fails. Node Manager: It takes care of individual nodes on the Hadoop cluster and manages application and workflow and that particular node. Its primary job is to keep up with the Node Manager. It monitors resource usage, performs log management, and also kills a container based on directions from the resource manager. It is also responsible for creating the container process and starting it at the request of the Application master. Application Master: An application is a single job submitted to a framework. The application manager is responsible for negotiating resources with the resource manager, tracking the status, and monitoring the progress of a single application. The application master requests the container from the node manager by sending a Container Launch Context(CLC) which includes everything an application needs to run. Once the application is started, it sends the health report to the resource manager from time-to-time. Container: It is a collection of physical resources such as RAM, CPU cores, and disk on a single node. The containers are invoked by Container Launch Context(CLC) which is a record that contains information such as environment variables, security tokens, dependencies, etc. MapReduce framework The term MapReduce represents two separate and distinct tasks Hadoop programs perform-Map Job and Reduce Job. Map jobs take data sets as input and process them to produce key-value pairs. Reduce job takes the output of the Map job i.e. the key-value pairs and aggregates them to produce desired results. Hadoop MapReduce (Hadoop Map/Reduce) is a software framework for distributed processing of large data sets on computing clusters. Mapreduce helps to split the input data set into a number of parts and run a program on all data parts parallel at once. Please find the below Word count example demonstrating the usage of the MapReduce framework: Other tooling around Hadoop Hive Uses a language called HQL which is very SQL like. Gives non-programmers the ability to query and analyze data in Hadoop. Is basically an abstraction layer on top of map-reduce. Ex. HQL query: SELECT pet.name, comment FROM pet JOIN event ON (pet.name = event.name); In mysql: SELECT pet.name, comment FROM pet, event WHERE pet.name = event.name; Pig Uses a scripting language called Pig Latin, which is more workflow driven. Don't need to be an expert Java programmer but need a few coding skills. Is also an abstraction layer on top of map-reduce. Here is a quick question for you: What is the output of running the pig queries in the right column against the data present in the left column in the below image? Output: mysql 7,Komal,Nayak,24,9848022334,trivendram 8,Bharathi,Nambiayar,24,9848022333,Chennai 5,Trupthi,Mohanthy,23,9848022336,Bhuwaneshwar 6,Archana,Mishra,23,9848022335,Chennai 3. Spark 1. Spark provides primitives for in-memory cluster computing that allows user programs to load data into a cluster\u2019s memory and query it repeatedly, making it well suited to machine learning algorithms. 4. Presto 1. Presto is a high performance, distributed SQL query engine for Big Data. 2. Its architecture allows users to query a variety of data sources such as Hadoop, AWS S3, Alluxio, MySQL, Cassandra, Kafka, and MongoDB. 3. Example presto query: mysql use studentDB; show tables; SELECT roll_no, name FROM studentDB.studentDetails where section=\u2019A\u2019 limit 5; Data Serialisation and storage In order to transport the data over the network or to store on some persistent storage, we use the process of translating data structures or objects state into binary or textual form. We call this process serialization.. Avro data is stored in a container file (a .avro file) and its schema (the .avsc file) is stored with the data file. Apache Hive provides support to store a table as Avro and can also query data in this serialisation format.","title":"Evolution and Architecture of Hadoop"},{"location":"big_data/evolution/#evolution-of-hadoop","text":"","title":"Evolution of Hadoop"},{"location":"big_data/evolution/#architecture-of-hadoop","text":"HDFS The Hadoop Distributed File System (HDFS) is a distributed file system designed to run on commodity hardware. It has many similarities with existing distributed file systems. However, the differences from other distributed file systems are significant. HDFS is highly fault-tolerant and is designed to be deployed on low-cost hardware. HDFS provides high throughput access to application data and is suitable for applications that have large data sets. HDFS is part of the Apache Hadoop Core project . NameNode: is the arbitrator and central repository of file namespace in the cluster. The NameNode executes the operations such as opening, closing, and renaming files and directories. DataNode: manages the storage attached to the node on which it runs. It is responsible for serving all the read and writes requests. It performs operations on instructions on NameNode such as creation, deletion, and replications of blocks. Client: Responsible for getting the required metadata from the namenode and then communicating with the datanodes for reads and writes. YARN YARN stands for \u201cYet Another Resource Negotiator\u201c. It was introduced in Hadoop 2.0 to remove the bottleneck on Job Tracker which was present in Hadoop 1.0. YARN was described as a \u201cRedesigned Resource Manager\u201d at the time of its launching, but it has now evolved to be known as a large-scale distributed operating system used for Big Data processing. The main components of YARN architecture include: Client: It submits map-reduce(MR) jobs to the resource manager. Resource Manager: It is the master daemon of YARN and is responsible for resource assignment and management among all the applications. Whenever it receives a processing request, it forwards it to the corresponding node manager and allocates resources for the completion of the request accordingly. It has two major components: Scheduler: It performs scheduling based on the allocated application and available resources. It is a pure scheduler, which means that it does not perform other tasks such as monitoring or tracking and does not guarantee a restart if a task fails. The YARN scheduler supports plugins such as Capacity Scheduler and Fair Scheduler to partition the cluster resources. Application manager: It is responsible for accepting the application and negotiating the first container from the resource manager. It also restarts the Application Manager container if a task fails. Node Manager: It takes care of individual nodes on the Hadoop cluster and manages application and workflow and that particular node. Its primary job is to keep up with the Node Manager. It monitors resource usage, performs log management, and also kills a container based on directions from the resource manager. It is also responsible for creating the container process and starting it at the request of the Application master. Application Master: An application is a single job submitted to a framework. The application manager is responsible for negotiating resources with the resource manager, tracking the status, and monitoring the progress of a single application. The application master requests the container from the node manager by sending a Container Launch Context(CLC) which includes everything an application needs to run. Once the application is started, it sends the health report to the resource manager from time-to-time. Container: It is a collection of physical resources such as RAM, CPU cores, and disk on a single node. The containers are invoked by Container Launch Context(CLC) which is a record that contains information such as environment variables, security tokens, dependencies, etc.","title":"Architecture of Hadoop"},{"location":"big_data/evolution/#mapreduce-framework","text":"The term MapReduce represents two separate and distinct tasks Hadoop programs perform-Map Job and Reduce Job. Map jobs take data sets as input and process them to produce key-value pairs. Reduce job takes the output of the Map job i.e. the key-value pairs and aggregates them to produce desired results. Hadoop MapReduce (Hadoop Map/Reduce) is a software framework for distributed processing of large data sets on computing clusters. Mapreduce helps to split the input data set into a number of parts and run a program on all data parts parallel at once. Please find the below Word count example demonstrating the usage of the MapReduce framework:","title":"MapReduce framework"},{"location":"big_data/evolution/#other-tooling-around-hadoop","text":"Hive Uses a language called HQL which is very SQL like. Gives non-programmers the ability to query and analyze data in Hadoop. Is basically an abstraction layer on top of map-reduce. Ex. HQL query: SELECT pet.name, comment FROM pet JOIN event ON (pet.name = event.name); In mysql: SELECT pet.name, comment FROM pet, event WHERE pet.name = event.name; Pig Uses a scripting language called Pig Latin, which is more workflow driven. Don't need to be an expert Java programmer but need a few coding skills. Is also an abstraction layer on top of map-reduce. Here is a quick question for you: What is the output of running the pig queries in the right column against the data present in the left column in the below image? Output: mysql 7,Komal,Nayak,24,9848022334,trivendram 8,Bharathi,Nambiayar,24,9848022333,Chennai 5,Trupthi,Mohanthy,23,9848022336,Bhuwaneshwar 6,Archana,Mishra,23,9848022335,Chennai 3. Spark 1. Spark provides primitives for in-memory cluster computing that allows user programs to load data into a cluster\u2019s memory and query it repeatedly, making it well suited to machine learning algorithms. 4. Presto 1. Presto is a high performance, distributed SQL query engine for Big Data. 2. Its architecture allows users to query a variety of data sources such as Hadoop, AWS S3, Alluxio, MySQL, Cassandra, Kafka, and MongoDB. 3. Example presto query: mysql use studentDB; show tables; SELECT roll_no, name FROM studentDB.studentDetails where section=\u2019A\u2019 limit 5;","title":"Other tooling around Hadoop"},{"location":"big_data/evolution/#data-serialisation-and-storage","text":"In order to transport the data over the network or to store on some persistent storage, we use the process of translating data structures or objects state into binary or textual form. We call this process serialization.. Avro data is stored in a container file (a .avro file) and its schema (the .avsc file) is stored with the data file. Apache Hive provides support to store a table as Avro and can also query data in this serialisation format.","title":"Data Serialisation and storage"},{"location":"big_data/intro/","text":"Big Data Prerequisites Basics of Linux File systems. Basic understanding of System Design. What to expect from this course This course covers the basics of Big Data and how it has evolved to become what it is today. We will take a look at a few realistic scenarios where Big Data would be a perfect fit. An interesting assignment on designing a Big Data system is followed by understanding the architecture of Hadoop and the tooling around it. What is not covered under this course Writing programs to draw analytics from data. Course Contents Overview of Big Data Usage of Big Data techniques Evolution of Hadoop Architecture of hadoop HDFS Yarn MapReduce framework Other tooling around hadoop Hive Pig Spark Presto Data Serialisation and storage Overview of Big Data Big Data is a collection of large datasets that cannot be processed using traditional computing techniques. It is not a single technique or a tool, rather it has become a complete subject, which involves various tools, techniques, and frameworks. Big Data could consist of Structured data Unstructured data Semi-structured data Characteristics of Big Data: Volume Variety Velocity Variability Examples of Big Data generation include stock exchanges, social media sites, jet engines, etc. Usage of Big Data Techniques Take the example of the traffic lights problem. There are more than 300,000 traffic lights in the US as of 2018. Let us assume that we placed a device on each of them to collect metrics and send it to a central metrics collection system. If each of the IoT devices sends 10 events per minute, we have 300000x10x60x24 = 432x10^7 events per day. How would you go about processing that and telling me how many of the signals were \u201cgreen\u201d at 10:45 am on a particular day? Consider the next example on Unified Payments Interface (UPI) transactions: We had about 1.15 billion UPI transactions in the month of October 2019 in India. If we try to extrapolate this data to about a year and try to find out some common payments that were happening through a particular UPI ID, how do you suggest we go about that?","title":"Introduction"},{"location":"big_data/intro/#big-data","text":"","title":"Big Data"},{"location":"big_data/intro/#prerequisites","text":"Basics of Linux File systems. Basic understanding of System Design.","title":"Prerequisites"},{"location":"big_data/intro/#what-to-expect-from-this-course","text":"This course covers the basics of Big Data and how it has evolved to become what it is today. We will take a look at a few realistic scenarios where Big Data would be a perfect fit. An interesting assignment on designing a Big Data system is followed by understanding the architecture of Hadoop and the tooling around it.","title":"What to expect from this course"},{"location":"big_data/intro/#what-is-not-covered-under-this-course","text":"Writing programs to draw analytics from data.","title":"What is not covered under this course"},{"location":"big_data/intro/#course-contents","text":"Overview of Big Data Usage of Big Data techniques Evolution of Hadoop Architecture of hadoop HDFS Yarn MapReduce framework Other tooling around hadoop Hive Pig Spark Presto Data Serialisation and storage","title":"Course Contents"},{"location":"big_data/intro/#overview-of-big-data","text":"Big Data is a collection of large datasets that cannot be processed using traditional computing techniques. It is not a single technique or a tool, rather it has become a complete subject, which involves various tools, techniques, and frameworks. Big Data could consist of Structured data Unstructured data Semi-structured data Characteristics of Big Data: Volume Variety Velocity Variability Examples of Big Data generation include stock exchanges, social media sites, jet engines, etc.","title":"Overview of Big Data"},{"location":"big_data/intro/#usage-of-big-data-techniques","text":"Take the example of the traffic lights problem. There are more than 300,000 traffic lights in the US as of 2018. Let us assume that we placed a device on each of them to collect metrics and send it to a central metrics collection system. If each of the IoT devices sends 10 events per minute, we have 300000x10x60x24 = 432x10^7 events per day. How would you go about processing that and telling me how many of the signals were \u201cgreen\u201d at 10:45 am on a particular day? Consider the next example on Unified Payments Interface (UPI) transactions: We had about 1.15 billion UPI transactions in the month of October 2019 in India. If we try to extrapolate this data to about a year and try to find out some common payments that were happening through a particular UPI ID, how do you suggest we go about that?","title":"Usage of Big Data Techniques"},{"location":"big_data/tasks/","text":"Tasks and conclusion Post-training tasks: Try setting up your own 3 node Hadoop cluster. A VM based solution can be found here Write a simple spark/MR job of your choice and understand how to generate analytics from data. Sample dataset can be found here References: Hadoop documentation HDFS Architecture YARN Architecture Google GFS paper","title":"Conclusion"},{"location":"big_data/tasks/#tasks-and-conclusion","text":"","title":"Tasks and conclusion"},{"location":"big_data/tasks/#post-training-tasks","text":"Try setting up your own 3 node Hadoop cluster. A VM based solution can be found here Write a simple spark/MR job of your choice and understand how to generate analytics from data. Sample dataset can be found here","title":"Post-training tasks:"},{"location":"big_data/tasks/#references","text":"Hadoop documentation HDFS Architecture YARN Architecture Google GFS paper","title":"References:"},{"location":"databases_nosql/further_reading/","text":"Further reading: NoSQL: https://hostingdata.co.uk/nosql-database/ https://www.mongodb.com/nosql-explained https://www.mongodb.com/nosql-explained/nosql-vs-sql Cap Theorem http://www.julianbrowne.com/article/brewers-cap-theorem Scalability http://www.slideshare.net/jboner/scalability-availability-stability-patterns Eventual Consistency https://www.allthingsdistributed.com/2008/12/eventually_consistent.html https://www.toptal.com/big-data/consistent-hashing https://web.stanford.edu/class/cs244/papers/chord_TON_2003.pdf","title":"Conclusion"},{"location":"databases_nosql/further_reading/#further-reading","text":"NoSQL: https://hostingdata.co.uk/nosql-database/ https://www.mongodb.com/nosql-explained https://www.mongodb.com/nosql-explained/nosql-vs-sql Cap Theorem http://www.julianbrowne.com/article/brewers-cap-theorem Scalability http://www.slideshare.net/jboner/scalability-availability-stability-patterns Eventual Consistency https://www.allthingsdistributed.com/2008/12/eventually_consistent.html https://www.toptal.com/big-data/consistent-hashing https://web.stanford.edu/class/cs244/papers/chord_TON_2003.pdf","title":"Further reading:"},{"location":"databases_nosql/intro/","text":"NoSQL Concepts What to expect from this course At the end of training, you will have an understanding of what a NoSQL database is, what kind of advantages or disadvantages it has over traditional RDBMS, learn about different types of NoSQL databases and understand some of the underlying concepts & trade offs w.r.t to NoSQL. What is not covered under this course We will not be deep diving into any specific NoSQL Database. Course Contents Introduction to NoSQL CAP Theorem Data versioning Partitioning Hashing Quorum Introduction When people use the term \u201cNoSQL database\u201d, they typically use it to refer to any non-relational database. Some say the term \u201cNoSQL\u201d stands for \u201cnon SQL\u201d while others say it stands for \u201cnot only SQL.\u201d Either way, most agree that NoSQL databases are databases that store data in a format other than relational tables. A common misconception is that NoSQL databases or non-relational databases don\u2019t store relationship data well. NoSQL databases can store relationship data\u2014they just store it differently than relational databases do. In fact, when compared with SQL databases, many find modeling relationship data in NoSQL databases to be easier , because related data doesn\u2019t have to be split between tables. Such databases have existed since the late 1960s, but the name \"NoSQL\" was only coined in the early 21st century. NASA used a NoSQL database to track inventory for the Apollo mission. NoSQL databases emerged in the late 2000s as the cost of storage dramatically decreased. Gone were the days of needing to create a complex, difficult-to-manage data model simply for the purposes of reducing data duplication. Developers (rather than storage) were becoming the primary cost of software development, so NoSQL databases optimized for developer productivity. With the rise of Agile development methodology, NoSQL databases were developed with a focus on scaling, fast performance and at the same time allowed for frequent application changes and made programming easier. Types of NoSQL databases: Over time due to the way these NoSQL databases were developed to suit requirements at different companies, we ended up with quite a few types of them. However, they can be broadly classified into 4 types. Some of the databases can overlap between different types. They are Document databases: They store data in documents similar to JSON (JavaScript Object Notation) objects. Each document contains pairs of fields and values. The values can typically be a variety of types including things like strings, numbers, booleans, arrays, or objects, and their structures typically align with objects developers are working with in code. The advantages include intuitive data model & flexible schemas. Because of their variety of field value types and powerful query languages, document databases are great for a wide variety of use cases and can be used as a general purpose database. They can horizontally scale-out to accomodate large data volumes. Ex: MongoDB, Couchbase Key-Value databases: These are a simpler type of databases where each item contains keys and values. A value can typically only be retrieved by referencing its value, so learning how to query for a specific key-value pair is typically simple. Key-value databases are great for use cases where you need to store large amounts of data but you don\u2019t need to perform complex queries to retrieve it. Common use cases include storing user preferences or caching. Ex: Redis , DynamoDB , Voldemort / Venice (Linkedin), Wide-Column stores: They store data in tables, rows, and dynamic columns. Wide-column stores provide a lot of flexibility over relational databases because each row is not required to have the same columns. Many consider wide-column stores to be two-dimensional key-value databases. Wide-column stores are great for when you need to store large amounts of data and you can predict what your query patterns will be. Wide-column stores are commonly used for storing Internet of Things data and user profile data. Cassandra and HBase are two of the most popular wide-column stores. Graph Databases: These databases store data in nodes and edges. Nodes typically store information about people, places, and things while edges store information about the relationships between the nodes. The underlying storage mechanism of graph databases can vary. Some depend on a relational engine and \u201cstore\u201d the graph data in a table (although a table is a logical element, therefore this approach imposes another level of abstraction between the graph database, the graph database management system and the physical devices where the data is actually stored). Others use a key-value store or document-oriented database for storage, making them inherently NoSQL structures. Graph databases excel in use cases where you need to traverse relationships to look for patterns such as social networks, fraud detection, and recommendation engines. Ex: Neo4j Comparison Performance Scalability Flexibility Complexity Functionality Key Value high high high none Variable Document stores high Variable (high) high low Variable (low) Column DB high high moderate low minimal Graph Variable Variable high high Graph theory Differences between SQL and NoSQL The table below summarizes the main differences between SQL and NoSQL databases. SQL Databases NoSQL Databases Data Storage Model Tables with fixed rows and columns Document: JSON documents, Key-value: key-value pairs, Wide-column: tables with rows and dynamic columns, Graph: nodes and edges Primary Purpose General purpose Document: general purpose, Key-value: large amounts of data with simple lookup queries, Wide-column: large amounts of data with predictable query patterns, Graph: analyzing and traversing relationships between connected data Schemas Rigid Flexible Scaling Vertical (scale-up with a larger server) Horizontal (scale-out across commodity servers) Multi-Record ACID Transactions Supported Most do not support multi-record ACID transactions. However, some\u2014like MongoDB\u2014do. Joins Typically required Typically not required Data to Object Mapping Requires ORM (object-relational mapping) Many do not require ORMs. Document DB documents map directly to data structures in most popular programming languages. Advantages Flexible Data Models Most NoSQL systems feature flexible schemas. A flexible schema means you can easily modify your database schema to add or remove fields to support for evolving application requirements. This facilitates with continuous application development of new features without database operation overhead. Horizontal Scaling Most NoSQL systems allow you to scale horizontally, which means you can add in cheaper & commodity hardware, whenever you want to scale a system. On the other hand SQL systems generally scale Vertically (a more powerful server). NoSQL systems can also host huge data sets when compared to traditional SQL systems. Fast Queries NoSQL can generally be a lot faster than traditional SQL systems due to data denormalization and horizontal scaling. Most NoSQL systems also tend to store similar data together facilitating faster query responses. Developer productivity NoSQL systems tend to map data based on the programming data structures. As a result developers need to perform fewer data transformations leading to increased productivity & fewer bugs.","title":"Introduction"},{"location":"databases_nosql/intro/#nosql-concepts","text":"","title":"NoSQL Concepts"},{"location":"databases_nosql/intro/#what-to-expect-from-this-course","text":"At the end of training, you will have an understanding of what a NoSQL database is, what kind of advantages or disadvantages it has over traditional RDBMS, learn about different types of NoSQL databases and understand some of the underlying concepts & trade offs w.r.t to NoSQL.","title":"What to expect from this course"},{"location":"databases_nosql/intro/#what-is-not-covered-under-this-course","text":"We will not be deep diving into any specific NoSQL Database.","title":"What is not covered under this course"},{"location":"databases_nosql/intro/#course-contents","text":"Introduction to NoSQL CAP Theorem Data versioning Partitioning Hashing Quorum","title":"Course Contents"},{"location":"databases_nosql/intro/#introduction","text":"When people use the term \u201cNoSQL database\u201d, they typically use it to refer to any non-relational database. Some say the term \u201cNoSQL\u201d stands for \u201cnon SQL\u201d while others say it stands for \u201cnot only SQL.\u201d Either way, most agree that NoSQL databases are databases that store data in a format other than relational tables. A common misconception is that NoSQL databases or non-relational databases don\u2019t store relationship data well. NoSQL databases can store relationship data\u2014they just store it differently than relational databases do. In fact, when compared with SQL databases, many find modeling relationship data in NoSQL databases to be easier , because related data doesn\u2019t have to be split between tables. Such databases have existed since the late 1960s, but the name \"NoSQL\" was only coined in the early 21st century. NASA used a NoSQL database to track inventory for the Apollo mission. NoSQL databases emerged in the late 2000s as the cost of storage dramatically decreased. Gone were the days of needing to create a complex, difficult-to-manage data model simply for the purposes of reducing data duplication. Developers (rather than storage) were becoming the primary cost of software development, so NoSQL databases optimized for developer productivity. With the rise of Agile development methodology, NoSQL databases were developed with a focus on scaling, fast performance and at the same time allowed for frequent application changes and made programming easier.","title":"Introduction"},{"location":"databases_nosql/intro/#types-of-nosql-databases","text":"Over time due to the way these NoSQL databases were developed to suit requirements at different companies, we ended up with quite a few types of them. However, they can be broadly classified into 4 types. Some of the databases can overlap between different types. They are Document databases: They store data in documents similar to JSON (JavaScript Object Notation) objects. Each document contains pairs of fields and values. The values can typically be a variety of types including things like strings, numbers, booleans, arrays, or objects, and their structures typically align with objects developers are working with in code. The advantages include intuitive data model & flexible schemas. Because of their variety of field value types and powerful query languages, document databases are great for a wide variety of use cases and can be used as a general purpose database. They can horizontally scale-out to accomodate large data volumes. Ex: MongoDB, Couchbase Key-Value databases: These are a simpler type of databases where each item contains keys and values. A value can typically only be retrieved by referencing its value, so learning how to query for a specific key-value pair is typically simple. Key-value databases are great for use cases where you need to store large amounts of data but you don\u2019t need to perform complex queries to retrieve it. Common use cases include storing user preferences or caching. Ex: Redis , DynamoDB , Voldemort / Venice (Linkedin), Wide-Column stores: They store data in tables, rows, and dynamic columns. Wide-column stores provide a lot of flexibility over relational databases because each row is not required to have the same columns. Many consider wide-column stores to be two-dimensional key-value databases. Wide-column stores are great for when you need to store large amounts of data and you can predict what your query patterns will be. Wide-column stores are commonly used for storing Internet of Things data and user profile data. Cassandra and HBase are two of the most popular wide-column stores. Graph Databases: These databases store data in nodes and edges. Nodes typically store information about people, places, and things while edges store information about the relationships between the nodes. The underlying storage mechanism of graph databases can vary. Some depend on a relational engine and \u201cstore\u201d the graph data in a table (although a table is a logical element, therefore this approach imposes another level of abstraction between the graph database, the graph database management system and the physical devices where the data is actually stored). Others use a key-value store or document-oriented database for storage, making them inherently NoSQL structures. Graph databases excel in use cases where you need to traverse relationships to look for patterns such as social networks, fraud detection, and recommendation engines. Ex: Neo4j","title":"Types of NoSQL databases:"},{"location":"databases_nosql/intro/#comparison","text":"Performance Scalability Flexibility Complexity Functionality Key Value high high high none Variable Document stores high Variable (high) high low Variable (low) Column DB high high moderate low minimal Graph Variable Variable high high Graph theory","title":"Comparison"},{"location":"databases_nosql/intro/#differences-between-sql-and-nosql","text":"The table below summarizes the main differences between SQL and NoSQL databases. SQL Databases NoSQL Databases Data Storage Model Tables with fixed rows and columns Document: JSON documents, Key-value: key-value pairs, Wide-column: tables with rows and dynamic columns, Graph: nodes and edges Primary Purpose General purpose Document: general purpose, Key-value: large amounts of data with simple lookup queries, Wide-column: large amounts of data with predictable query patterns, Graph: analyzing and traversing relationships between connected data Schemas Rigid Flexible Scaling Vertical (scale-up with a larger server) Horizontal (scale-out across commodity servers) Multi-Record ACID Transactions Supported Most do not support multi-record ACID transactions. However, some\u2014like MongoDB\u2014do. Joins Typically required Typically not required Data to Object Mapping Requires ORM (object-relational mapping) Many do not require ORMs. Document DB documents map directly to data structures in most popular programming languages.","title":"Differences between SQL and NoSQL"},{"location":"databases_nosql/intro/#advantages","text":"Flexible Data Models Most NoSQL systems feature flexible schemas. A flexible schema means you can easily modify your database schema to add or remove fields to support for evolving application requirements. This facilitates with continuous application development of new features without database operation overhead. Horizontal Scaling Most NoSQL systems allow you to scale horizontally, which means you can add in cheaper & commodity hardware, whenever you want to scale a system. On the other hand SQL systems generally scale Vertically (a more powerful server). NoSQL systems can also host huge data sets when compared to traditional SQL systems. Fast Queries NoSQL can generally be a lot faster than traditional SQL systems due to data denormalization and horizontal scaling. Most NoSQL systems also tend to store similar data together facilitating faster query responses. Developer productivity NoSQL systems tend to map data based on the programming data structures. As a result developers need to perform fewer data transformations leading to increased productivity & fewer bugs.","title":"Advantages"},{"location":"databases_nosql/key_concepts/","text":"Key Concepts Lets looks at some of the key concepts when we talk about NoSQL or distributed systems CAP Theorem In a keynote titled \u201c Towards Robust Distributed Systems \u201d at ACM\u2019s PODC symposium in 2000 Eric Brewer came up with the so-called CAP-theorem which is widely adopted today by large web companies as well as in the NoSQL community. The CAP acronym stands for C onsistency, A vailability & P artition Tolerance. Consistency It refers to how consistent a system is after an execution. A distributed system is called consistent when a write made by a source is available for all readers of that shared data. Different NoSQL systems support different levels of consistency. Availability It refers to how a system responds to loss of functionality of different systems due to hardware and software failures. A high availability implies that a system is still available to handle operations (reads and writes) when a certain part of the system is down due to a failure or upgrade. Partition Tolerance It is the ability of the system to continue operations in the event of a network partition. A network partition occurs when a failure causes two or more islands of networks where the systems can\u2019t talk to each other across the islands temporarily or permanently. Brewer alleges that one can at most choose two of these three characteristics in a shared-data system. The CAP-theorem states that a choice can only be made for two options out of consistency, availability and partition tolerance. A growing number of use cases in large scale applications tend to value reliability implying that availability & redundancy are more valuable than consistency. As a result these systems struggle to meet ACID properties. They attain this by loosening on the consistency requirement i.e Eventual Consistency. Eventual Consistency means that all readers will see writes, as time goes on: \u201cIn a steady state, the system will eventually return the last written value\u201d. Clients therefore may face an inconsistent state of data as updates are in progress. For instance, in a replicated database updates may go to one node which replicates the latest version to all other nodes that contain a replica of the modified dataset so that the replica nodes eventually will have the latest version. NoSQL systems support different levels of eventual consistency models. For example: Read Your Own Writes Consistency A client will see his updates immediately after they are written. The reads can hit nodes other than the one where it was written. However he might not see updates by other clients immediately. Session Consistency A client will see the updates to his data within a session scope. This generally indicates that reads & writes occur on the same server. Other clients using the same nodes will receive the same updates. Casual Consistency A system provides causal consistency if the following condition holds: write operations that are related by potential causality are seen by each process of the system in order. Different processes may observe concurrent writes in different orders Eventual consistency is useful if concurrent updates of the same partitions of data are unlikely and if clients do not immediately depend on reading updates issued by themselves or by other clients. Depending on what consistency model was chosen for the system (or parts of it), determines where the requests are routed, ex: replicas. CAP alternatives illustration Choice Traits Examples Consistency + Availability (Forfeit Partitions) 2-phase commits Cache invalidation protocols Single-site databases Cluster databases LDAP xFS file system Consistency + Partition tolerance (Forfeit Availability) Pessimistic locking Make minority partitions unavailable Distributed databases Distributed locking Majority protocols Availability + Partition tolerance (Forfeit Consistency) expirations/leases conflict resolution optimistic DNS Web caching Versioning of Data in distributed systems When data is distributed across nodes, it can be modified on different nodes at the same time (assuming strict consistency is enforced). Questions arise on conflict resolution for concurrent updates. Some of the popular conflict resolution mechanism are Timestamps This is the most obvious solution. You sort updates based on chronological order and choose the latest update. However this relies on clock synchronization across different parts of the infrastructure. This gets even more complicated when parts of systems are spread across different geographic locations. Optimistic Locking You associate a unique value like a clock or counter with every data update. When a client wants to update data, it has to specify which version of data needs to be updated. This would mean you need to keep track of history of the data versions. Vector Clocks A vector clock is defined as a tuple of clock values from each node. In a distributed environment, each node maintains a tuple of such clock values which represent the state of the nodes itself and its peers/replicas. A clock value may be real timestamps derived from local clock or version no. Vector clocks illustration Vector clocks have the following advantages over other conflict resolution mechanism No dependency on synchronized clocks No total ordering of revision nos required for casual reasoning No need to store and maintain multiple versions of the data on different nodes. Partitioning When the amount of data crosses the capacity of a single node, we need to think of splitting data, creating replicas for load balancing & disaster recovery. Depending on how dynamic the infrastructure is, we have a few approaches that we can take. Memory cached These are partitioned in-memory databases that are primarily used for transient data. These databases are generally used as a front for traditional RDBMS. Most frequently used data is replicated from a rdbms into a memory database to facilitate fast queries and to take the load off from backend DB\u2019s. A very common example is memcached or couchbase. Clustering Traditional cluster mechanisms abstract away the cluster topology from clients. A client need not know where the actual data is residing and which node it is talking to. Clustering is very commonly used in traditional RDBMS where it can help scaling the persistent layer to a certain extent. Separating reads from writes In this method, you will have multiple replicas hosting the same data. The incoming writes are typically sent to a single node (Leader) or multiple nodes (multi-Leader), while the rest of the replicas (Follower) handle reads requests. The leader replicates writes asynchronously to all followers. However the write lag can\u2019t be completely avoided. Sometimes a leader can crash before it replicates all the data to a follower. When this happens, a follower with the most consistent data can be turned into a leader. As you can realize now, it is hard to enforce full consistency in this model. You also need to consider the ratio of read vs write traffic. This model won\u2019t make sense when writes are higher than reads. The replication methods can also vary widely. Some systems do a complete transfer of state periodically, while others use a delta state transfer approach. You could also transfer the state by transferring the operations in order. The followers can then apply the same operations as the leader to catch up. Sharding Sharing refers to dividing data in such a way that data is distributed evenly (both in terms of storage & processing power) across a cluster of nodes. It can also imply data locality, which means similar & related data is stored together to facilitate faster access. A shard in turn can be further replicated to meet load balancing or disaster recovery requirements. A single shard replica might take in all writes (single leader) or multiple replicas can take writes (multi-leader). Reads can be distributed across multiple replicas. Since data is now distributed across multiple nodes, clients should be able to consistently figure out where data is hosted. We will look at some of the common techniques below. The downside of sharding is that joins between shards is not possible. So an upstream/downstream application has to aggregate the results from multiple shards. Sharding example Hashing A hash function is a function that maps one piece of data\u2014typically describing some kind of object, often of arbitrary size\u2014to another piece of data, typically an integer, known as hash code , or simply hash . In a partitioned database, it is important to consistently map a key to a server/replica. For ex: you can use a very simple hash as a modulo function. _p = k mod n_ Where p -> partition, k -> primary key n -> no of nodes The downside of this simple hash is that, whenever the cluster topology changes, the data distribution also changes. When you are dealing with memory caches, it will be easy to distribute partitions around. Whenever a node joins/leaves a topology, partitions can reorder themselves, a cache miss can be re-populated from backend DB. However when you look at persistent data, it is not possible as the new node doesn\u2019t have the data needed to serve it. This brings us to consistent hashing. Consistent Hashing Consistent hashing is a distributed hashing scheme that operates independently of the number of servers or objects in a distributed hash table by assigning them a position on an abstract circle, or hash ring . This allows servers and objects to scale without affecting the overall system. Say that our hash function h() generates a 32-bit integer. Then, to determine to which server we will send a key k, we find the server s whose hash h(s) is the smallest integer that is larger than h(k). To make the process simpler, we assume the table is circular, which means that if we cannot find a server with a hash larger than h(k), we wrap around and start looking from the beginning of the array. Consistent hashing illustration In consistent hashing when a server is removed or added then only the keys from that server are relocated. For example, if server S3 is removed then, all keys from server S3 will be moved to server S4 but keys stored on server S4 and S2 are not relocated. But there is one problem, when server S3 is removed then keys from S3 are not equally distributed among remaining servers S4 and S2. They are only assigned to server S4 which increases the load on server S4. To evenly distribute the load among servers when a server is added or removed, it creates a fixed number of replicas ( known as virtual nodes) of each server and distributes it along the circle. So instead of server labels S1, S2 and S3, we will have S10 S11\u2026S19, S20 S21\u2026S29 and S30 S31\u2026S39. The factor for a number of replicas is also known as weight , depending on the situation. All keys which are mapped to replicas Sij are stored on server Si. To find a key we do the same thing, find the position of the key on the circle and then move forward until you find a server replica. If the server replica is Sij then the key is stored in server Si. Suppose server S3 is removed, then all S3 replicas with labels S30 S31 \u2026 S39 must be removed. Now the objects keys adjacent to S3X labels will be automatically re-assigned to S1X, S2X and S4X. All keys originally assigned to S1, S2 & S4 will not be moved. Similar things happen if we add a server. Suppose we want to add a server S5 as a replacement of S3 then we need to add labels S50 S51 \u2026 S59. In the ideal case, one-fourth of keys from S1, S2 and S4 will be reassigned to S5. When applied to persistent storages, further issues arise: if a node has left the scene, data stored on this node becomes unavailable, unless it has been replicated to other nodes before; in the opposite case of a new node joining the others, adjacent nodes are no longer responsible for some pieces of data which they still store but not get asked for anymore as the corresponding objects are no longer hashed to them by requesting clients. In order to address this issue, a replication factor (r) can be introduced. Introducing replicas in a partitioning scheme\u2014besides reliability benefits\u2014also makes it possible to spread workload for read requests that can go to any physical node responsible for a requested piece of data. Scalability doesn\u2019t work if the clients have to decide between multiple versions of the dataset, because they need to read from a quorum of servers which in turn reduces the efficiency of load balancing. Quorum Quorum is the minimum number of nodes in a cluster that must be online and be able to communicate with each other. If any additional node failure occurs beyond this threshold, the cluster will stop running. To attain a quorum, you need a majority of the nodes. Commonly it is (N/2 + 1), where N is the total no of nodes in the system. For ex, In a 3 node cluster, you need 2 nodes for a majority, In a 5 node cluster, you need 3 nodes for a majority, In a 6 node cluster, you need 4 nodes for a majority. Quorum example Network problems can cause communication failures among cluster nodes. One set of nodes might be able to communicate together across a functioning part of a network but not be able to communicate with a different set of nodes in another part of the network. This is known as split brain in cluster or cluster partitioning. Now the partition which has quorum is allowed to continue running the application. The other partitions are removed from the cluster. Eg: In a 5 node cluster, consider what happens if nodes 1, 2, and 3 can communicate with each other but not with nodes 4 and 5. Nodes 1, 2, and 3 constitute a majority, and they continue running as a cluster. Nodes 4 and 5, being a minority, stop running as a cluster. If node 3 loses communication with other nodes, all nodes stop running as a cluster. However, all functioning nodes will continue to listen for communication, so that when the network begins working again, the cluster can form and begin to run. Below diagram demonstrates Quorum selection on a cluster partitioned into two sets. Cluster Quorum example","title":"Key Concepts"},{"location":"databases_nosql/key_concepts/#key-concepts","text":"Lets looks at some of the key concepts when we talk about NoSQL or distributed systems","title":"Key Concepts"},{"location":"databases_nosql/key_concepts/#cap-theorem","text":"In a keynote titled \u201c Towards Robust Distributed Systems \u201d at ACM\u2019s PODC symposium in 2000 Eric Brewer came up with the so-called CAP-theorem which is widely adopted today by large web companies as well as in the NoSQL community. The CAP acronym stands for C onsistency, A vailability & P artition Tolerance. Consistency It refers to how consistent a system is after an execution. A distributed system is called consistent when a write made by a source is available for all readers of that shared data. Different NoSQL systems support different levels of consistency. Availability It refers to how a system responds to loss of functionality of different systems due to hardware and software failures. A high availability implies that a system is still available to handle operations (reads and writes) when a certain part of the system is down due to a failure or upgrade. Partition Tolerance It is the ability of the system to continue operations in the event of a network partition. A network partition occurs when a failure causes two or more islands of networks where the systems can\u2019t talk to each other across the islands temporarily or permanently. Brewer alleges that one can at most choose two of these three characteristics in a shared-data system. The CAP-theorem states that a choice can only be made for two options out of consistency, availability and partition tolerance. A growing number of use cases in large scale applications tend to value reliability implying that availability & redundancy are more valuable than consistency. As a result these systems struggle to meet ACID properties. They attain this by loosening on the consistency requirement i.e Eventual Consistency. Eventual Consistency means that all readers will see writes, as time goes on: \u201cIn a steady state, the system will eventually return the last written value\u201d. Clients therefore may face an inconsistent state of data as updates are in progress. For instance, in a replicated database updates may go to one node which replicates the latest version to all other nodes that contain a replica of the modified dataset so that the replica nodes eventually will have the latest version. NoSQL systems support different levels of eventual consistency models. For example: Read Your Own Writes Consistency A client will see his updates immediately after they are written. The reads can hit nodes other than the one where it was written. However he might not see updates by other clients immediately. Session Consistency A client will see the updates to his data within a session scope. This generally indicates that reads & writes occur on the same server. Other clients using the same nodes will receive the same updates. Casual Consistency A system provides causal consistency if the following condition holds: write operations that are related by potential causality are seen by each process of the system in order. Different processes may observe concurrent writes in different orders Eventual consistency is useful if concurrent updates of the same partitions of data are unlikely and if clients do not immediately depend on reading updates issued by themselves or by other clients. Depending on what consistency model was chosen for the system (or parts of it), determines where the requests are routed, ex: replicas. CAP alternatives illustration Choice Traits Examples Consistency + Availability (Forfeit Partitions) 2-phase commits Cache invalidation protocols Single-site databases Cluster databases LDAP xFS file system Consistency + Partition tolerance (Forfeit Availability) Pessimistic locking Make minority partitions unavailable Distributed databases Distributed locking Majority protocols Availability + Partition tolerance (Forfeit Consistency) expirations/leases conflict resolution optimistic DNS Web caching","title":"CAP Theorem"},{"location":"databases_nosql/key_concepts/#versioning-of-data-in-distributed-systems","text":"When data is distributed across nodes, it can be modified on different nodes at the same time (assuming strict consistency is enforced). Questions arise on conflict resolution for concurrent updates. Some of the popular conflict resolution mechanism are Timestamps This is the most obvious solution. You sort updates based on chronological order and choose the latest update. However this relies on clock synchronization across different parts of the infrastructure. This gets even more complicated when parts of systems are spread across different geographic locations. Optimistic Locking You associate a unique value like a clock or counter with every data update. When a client wants to update data, it has to specify which version of data needs to be updated. This would mean you need to keep track of history of the data versions. Vector Clocks A vector clock is defined as a tuple of clock values from each node. In a distributed environment, each node maintains a tuple of such clock values which represent the state of the nodes itself and its peers/replicas. A clock value may be real timestamps derived from local clock or version no. Vector clocks illustration Vector clocks have the following advantages over other conflict resolution mechanism No dependency on synchronized clocks No total ordering of revision nos required for casual reasoning No need to store and maintain multiple versions of the data on different nodes.","title":"Versioning of Data in distributed systems"},{"location":"databases_nosql/key_concepts/#partitioning","text":"When the amount of data crosses the capacity of a single node, we need to think of splitting data, creating replicas for load balancing & disaster recovery. Depending on how dynamic the infrastructure is, we have a few approaches that we can take. Memory cached These are partitioned in-memory databases that are primarily used for transient data. These databases are generally used as a front for traditional RDBMS. Most frequently used data is replicated from a rdbms into a memory database to facilitate fast queries and to take the load off from backend DB\u2019s. A very common example is memcached or couchbase. Clustering Traditional cluster mechanisms abstract away the cluster topology from clients. A client need not know where the actual data is residing and which node it is talking to. Clustering is very commonly used in traditional RDBMS where it can help scaling the persistent layer to a certain extent. Separating reads from writes In this method, you will have multiple replicas hosting the same data. The incoming writes are typically sent to a single node (Leader) or multiple nodes (multi-Leader), while the rest of the replicas (Follower) handle reads requests. The leader replicates writes asynchronously to all followers. However the write lag can\u2019t be completely avoided. Sometimes a leader can crash before it replicates all the data to a follower. When this happens, a follower with the most consistent data can be turned into a leader. As you can realize now, it is hard to enforce full consistency in this model. You also need to consider the ratio of read vs write traffic. This model won\u2019t make sense when writes are higher than reads. The replication methods can also vary widely. Some systems do a complete transfer of state periodically, while others use a delta state transfer approach. You could also transfer the state by transferring the operations in order. The followers can then apply the same operations as the leader to catch up. Sharding Sharing refers to dividing data in such a way that data is distributed evenly (both in terms of storage & processing power) across a cluster of nodes. It can also imply data locality, which means similar & related data is stored together to facilitate faster access. A shard in turn can be further replicated to meet load balancing or disaster recovery requirements. A single shard replica might take in all writes (single leader) or multiple replicas can take writes (multi-leader). Reads can be distributed across multiple replicas. Since data is now distributed across multiple nodes, clients should be able to consistently figure out where data is hosted. We will look at some of the common techniques below. The downside of sharding is that joins between shards is not possible. So an upstream/downstream application has to aggregate the results from multiple shards. Sharding example","title":"Partitioning"},{"location":"databases_nosql/key_concepts/#hashing","text":"A hash function is a function that maps one piece of data\u2014typically describing some kind of object, often of arbitrary size\u2014to another piece of data, typically an integer, known as hash code , or simply hash . In a partitioned database, it is important to consistently map a key to a server/replica. For ex: you can use a very simple hash as a modulo function. _p = k mod n_ Where p -> partition, k -> primary key n -> no of nodes The downside of this simple hash is that, whenever the cluster topology changes, the data distribution also changes. When you are dealing with memory caches, it will be easy to distribute partitions around. Whenever a node joins/leaves a topology, partitions can reorder themselves, a cache miss can be re-populated from backend DB. However when you look at persistent data, it is not possible as the new node doesn\u2019t have the data needed to serve it. This brings us to consistent hashing.","title":"Hashing"},{"location":"databases_nosql/key_concepts/#consistent-hashing","text":"Consistent hashing is a distributed hashing scheme that operates independently of the number of servers or objects in a distributed hash table by assigning them a position on an abstract circle, or hash ring . This allows servers and objects to scale without affecting the overall system. Say that our hash function h() generates a 32-bit integer. Then, to determine to which server we will send a key k, we find the server s whose hash h(s) is the smallest integer that is larger than h(k). To make the process simpler, we assume the table is circular, which means that if we cannot find a server with a hash larger than h(k), we wrap around and start looking from the beginning of the array. Consistent hashing illustration In consistent hashing when a server is removed or added then only the keys from that server are relocated. For example, if server S3 is removed then, all keys from server S3 will be moved to server S4 but keys stored on server S4 and S2 are not relocated. But there is one problem, when server S3 is removed then keys from S3 are not equally distributed among remaining servers S4 and S2. They are only assigned to server S4 which increases the load on server S4. To evenly distribute the load among servers when a server is added or removed, it creates a fixed number of replicas ( known as virtual nodes) of each server and distributes it along the circle. So instead of server labels S1, S2 and S3, we will have S10 S11\u2026S19, S20 S21\u2026S29 and S30 S31\u2026S39. The factor for a number of replicas is also known as weight , depending on the situation. All keys which are mapped to replicas Sij are stored on server Si. To find a key we do the same thing, find the position of the key on the circle and then move forward until you find a server replica. If the server replica is Sij then the key is stored in server Si. Suppose server S3 is removed, then all S3 replicas with labels S30 S31 \u2026 S39 must be removed. Now the objects keys adjacent to S3X labels will be automatically re-assigned to S1X, S2X and S4X. All keys originally assigned to S1, S2 & S4 will not be moved. Similar things happen if we add a server. Suppose we want to add a server S5 as a replacement of S3 then we need to add labels S50 S51 \u2026 S59. In the ideal case, one-fourth of keys from S1, S2 and S4 will be reassigned to S5. When applied to persistent storages, further issues arise: if a node has left the scene, data stored on this node becomes unavailable, unless it has been replicated to other nodes before; in the opposite case of a new node joining the others, adjacent nodes are no longer responsible for some pieces of data which they still store but not get asked for anymore as the corresponding objects are no longer hashed to them by requesting clients. In order to address this issue, a replication factor (r) can be introduced. Introducing replicas in a partitioning scheme\u2014besides reliability benefits\u2014also makes it possible to spread workload for read requests that can go to any physical node responsible for a requested piece of data. Scalability doesn\u2019t work if the clients have to decide between multiple versions of the dataset, because they need to read from a quorum of servers which in turn reduces the efficiency of load balancing.","title":"Consistent Hashing"},{"location":"databases_nosql/key_concepts/#quorum","text":"Quorum is the minimum number of nodes in a cluster that must be online and be able to communicate with each other. If any additional node failure occurs beyond this threshold, the cluster will stop running. To attain a quorum, you need a majority of the nodes. Commonly it is (N/2 + 1), where N is the total no of nodes in the system. For ex, In a 3 node cluster, you need 2 nodes for a majority, In a 5 node cluster, you need 3 nodes for a majority, In a 6 node cluster, you need 4 nodes for a majority. Quorum example Network problems can cause communication failures among cluster nodes. One set of nodes might be able to communicate together across a functioning part of a network but not be able to communicate with a different set of nodes in another part of the network. This is known as split brain in cluster or cluster partitioning. Now the partition which has quorum is allowed to continue running the application. The other partitions are removed from the cluster. Eg: In a 5 node cluster, consider what happens if nodes 1, 2, and 3 can communicate with each other but not with nodes 4 and 5. Nodes 1, 2, and 3 constitute a majority, and they continue running as a cluster. Nodes 4 and 5, being a minority, stop running as a cluster. If node 3 loses communication with other nodes, all nodes stop running as a cluster. However, all functioning nodes will continue to listen for communication, so that when the network begins working again, the cluster can form and begin to run. Below diagram demonstrates Quorum selection on a cluster partitioned into two sets. Cluster Quorum example","title":"Quorum"},{"location":"git/branches/","text":"Working With Branches Coming back to our local repo which has two commits. So far, what we have is a single line of history. Commits are chained in a single line. But sometimes you may have a need to work on two different features in parallel in the same repo. Now one option here could be making a new folder/repo with the same code and use that for another feature development. But there's a better way. Use branches. Since git follows tree like structure for commits, we can use branches to work on different sets of features. From a commit, two or more branches can be created and branches can also be merged. Using branches, there can exist multiple lines of histories and we can checkout to any of them and work on it. Checking out, as we discussed earlier, would simply mean replacing contents of the directory (repo) with contents snapshot at the checked out version. Let's create a branch and see how it looks like: spatel1-mn1:school-of-sre spatel1$ git branch b1 spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 7f3b00e (HEAD -> master, b1) adding file 2 * df2fb7a adding file 1 We create a branch called b1 . Git log tells us that b1 also points to the last commit (7f3b00e) but the HEAD is still pointing to master. If you remember, HEAD points to the commit/reference wherever you are checkout to. So if we checkout to b1 , HEAD should point to that. Let's confirm: spatel1-mn1:school-of-sre spatel1$ git checkout b1 Switched to branch 'b1' spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 7f3b00e (HEAD -> b1, master) adding file 2 * df2fb7a adding file 1 b1 still points to the same commit but HEAD now points to b1 . Since we create a branch at commit 7f3b00e , there will be two lines of histories starting this commit. Depending on which branch you are checked out on, the line of history will progress. At this moment, we are checked out on branch b1 , so making a new commit will advance branch reference b1 to that commit and current b1 commit will become its parent. Let's do that. # Creating a file and making a commit spatel1-mn1:school-of-sre spatel1$ echo \"I am a file in b1 branch\" > b1.txt spatel1-mn1:school-of-sre spatel1$ git add b1.txt spatel1-mn1:school-of-sre spatel1$ git commit -m \"adding b1 file\" [b1 872a38f] adding b1 file 1 file changed, 1 insertion(+) create mode 100644 b1.txt # The new line of history spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 872a38f (HEAD -> b1) adding b1 file * 7f3b00e (master) adding file 2 * df2fb7a adding file 1 spatel1-mn1:school-of-sre spatel1$ Do note that master is still pointing to the old commit it was pointing to. We can now checkout to master branch and make commits there. This will result in another line of history starting from commit 7f3b00e. # checkout to master branch spatel1-mn1:school-of-sre spatel1$ git checkout master Switched to branch 'master' # Creating a new commit on master branch spatel1-mn1:school-of-sre spatel1$ echo \"new file in master branch\" > master.txt spatel1-mn1:school-of-sre spatel1$ git add master.txt spatel1-mn1:school-of-sre spatel1$ git commit -m \"adding master.txt file\" [master 60dc441] adding master.txt file 1 file changed, 1 insertion(+) create mode 100644 master.txt # The history line spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 60dc441 (HEAD -> master) adding master.txt file * 7f3b00e adding file 2 * df2fb7a adding file 1 Notice how branch b1 is not visible here since we are checkout on master. Let's try to visualize both to get the whole picture: spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph --all * 60dc441 (HEAD -> master) adding master.txt file | * 872a38f (b1) adding b1 file |/ * 7f3b00e adding file 2 * df2fb7a adding file 1 Above tree structure should make things clear. Notice a clear branch/fork on commit 7f3b00e. This is how we create branches. Now they both are two separate lines of history on which feature development can be done independently. To reiterate, internally, git is just a tree of commits. Branch names (human readable) are pointers to those commits in the tree. We use various git commands to work with the tree structure and references. Git accordingly modifies contents of our repo. Merges Now say the feature you were working on branch b1 is complete and you need to merge it on master branch, where all the final version of code goes. So first you will checkout to branch master and then you pull the latest code from upstream (eg: GitHub). Then you need to merge your code from b1 into master. There could be two ways this can be done. Here is the current history: spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph --all * 60dc441 (HEAD -> master) adding master.txt file | * 872a38f (b1) adding b1 file |/ * 7f3b00e adding file 2 * df2fb7a adding file 1 Option 1: Directly merge the branch. Merging the branch b1 into master will result in a new merge commit. This will merge changes from two different lines of history and create a new commit of the result. spatel1-mn1:school-of-sre spatel1$ git merge b1 Merge made by the 'recursive' strategy. b1.txt | 1 + 1 file changed, 1 insertion(+) create mode 100644 b1.txt spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph --all * 8fc28f9 (HEAD -> master) Merge branch 'b1' |\\ | * 872a38f (b1) adding b1 file * | 60dc441 adding master.txt file |/ * 7f3b00e adding file 2 * df2fb7a adding file 1 You can see a new merge commit created (8fc28f9). You will be prompted for the commit message. If there are a lot of branches in the repo, this result will end-up with a lot of merge commits. Which looks ugly compared to a single line of history of development. So let's look at an alternative approach First let's reset our last merge and go to the previous state. spatel1-mn1:school-of-sre spatel1$ git reset --hard 60dc441 HEAD is now at 60dc441 adding master.txt file spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph --all * 60dc441 (HEAD -> master) adding master.txt file | * 872a38f (b1) adding b1 file |/ * 7f3b00e adding file 2 * df2fb7a adding file 1 Option 2: Rebase. Now, instead of merging two branches which has a similar base (commit: 7f3b00e), let us rebase branch b1 on to current master. What this means is take branch b1 (from commit 7f3b00e to commit 872a38f) and rebase (put them on top of) master (60dc441). # Switch to b1 spatel1-mn1:school-of-sre spatel1$ git checkout b1 Switched to branch 'b1' # Rebase (b1 which is current branch) on master spatel1-mn1:school-of-sre spatel1$ git rebase master First, rewinding head to replay your work on top of it... Applying: adding b1 file # The result spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph --all * 5372c8f (HEAD -> b1) adding b1 file * 60dc441 (master) adding master.txt file * 7f3b00e adding file 2 * df2fb7a adding file 1 You can see b1 which had 1 commit. That commit's parent was 7f3b00e . But since we rebase it on master ( 60dc441 ). That becomes the parent now. As a side effect, you also see it has become a single line of history. Now if we were to merge b1 into master , it would simply mean change master to point to 5372c8f which is b1 . Let's try it: # checkout to master since we want to merge code into master spatel1-mn1:school-of-sre spatel1$ git checkout master Switched to branch 'master' # the current history, where b1 is based on master spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph --all * 5372c8f (b1) adding b1 file * 60dc441 (HEAD -> master) adding master.txt file * 7f3b00e adding file 2 * df2fb7a adding file 1 # Performing the merge, notice the \"fast-forward\" message spatel1-mn1:school-of-sre spatel1$ git merge b1 Updating 60dc441..5372c8f Fast-forward b1.txt | 1 + 1 file changed, 1 insertion(+) create mode 100644 b1.txt # The Result spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph --all * 5372c8f (HEAD -> master, b1) adding b1 file * 60dc441 adding master.txt file * 7f3b00e adding file 2 * df2fb7a adding file 1 Now you see both b1 and master are pointing to the same commit. Your code has been merged to the master branch and it can be pushed. Also we have clean line of history! :D","title":"Working With Branches"},{"location":"git/branches/#working-with-branches","text":"Coming back to our local repo which has two commits. So far, what we have is a single line of history. Commits are chained in a single line. But sometimes you may have a need to work on two different features in parallel in the same repo. Now one option here could be making a new folder/repo with the same code and use that for another feature development. But there's a better way. Use branches. Since git follows tree like structure for commits, we can use branches to work on different sets of features. From a commit, two or more branches can be created and branches can also be merged. Using branches, there can exist multiple lines of histories and we can checkout to any of them and work on it. Checking out, as we discussed earlier, would simply mean replacing contents of the directory (repo) with contents snapshot at the checked out version. Let's create a branch and see how it looks like: spatel1-mn1:school-of-sre spatel1$ git branch b1 spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 7f3b00e (HEAD -> master, b1) adding file 2 * df2fb7a adding file 1 We create a branch called b1 . Git log tells us that b1 also points to the last commit (7f3b00e) but the HEAD is still pointing to master. If you remember, HEAD points to the commit/reference wherever you are checkout to. So if we checkout to b1 , HEAD should point to that. Let's confirm: spatel1-mn1:school-of-sre spatel1$ git checkout b1 Switched to branch 'b1' spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 7f3b00e (HEAD -> b1, master) adding file 2 * df2fb7a adding file 1 b1 still points to the same commit but HEAD now points to b1 . Since we create a branch at commit 7f3b00e , there will be two lines of histories starting this commit. Depending on which branch you are checked out on, the line of history will progress. At this moment, we are checked out on branch b1 , so making a new commit will advance branch reference b1 to that commit and current b1 commit will become its parent. Let's do that. # Creating a file and making a commit spatel1-mn1:school-of-sre spatel1$ echo \"I am a file in b1 branch\" > b1.txt spatel1-mn1:school-of-sre spatel1$ git add b1.txt spatel1-mn1:school-of-sre spatel1$ git commit -m \"adding b1 file\" [b1 872a38f] adding b1 file 1 file changed, 1 insertion(+) create mode 100644 b1.txt # The new line of history spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 872a38f (HEAD -> b1) adding b1 file * 7f3b00e (master) adding file 2 * df2fb7a adding file 1 spatel1-mn1:school-of-sre spatel1$ Do note that master is still pointing to the old commit it was pointing to. We can now checkout to master branch and make commits there. This will result in another line of history starting from commit 7f3b00e. # checkout to master branch spatel1-mn1:school-of-sre spatel1$ git checkout master Switched to branch 'master' # Creating a new commit on master branch spatel1-mn1:school-of-sre spatel1$ echo \"new file in master branch\" > master.txt spatel1-mn1:school-of-sre spatel1$ git add master.txt spatel1-mn1:school-of-sre spatel1$ git commit -m \"adding master.txt file\" [master 60dc441] adding master.txt file 1 file changed, 1 insertion(+) create mode 100644 master.txt # The history line spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 60dc441 (HEAD -> master) adding master.txt file * 7f3b00e adding file 2 * df2fb7a adding file 1 Notice how branch b1 is not visible here since we are checkout on master. Let's try to visualize both to get the whole picture: spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph --all * 60dc441 (HEAD -> master) adding master.txt file | * 872a38f (b1) adding b1 file |/ * 7f3b00e adding file 2 * df2fb7a adding file 1 Above tree structure should make things clear. Notice a clear branch/fork on commit 7f3b00e. This is how we create branches. Now they both are two separate lines of history on which feature development can be done independently. To reiterate, internally, git is just a tree of commits. Branch names (human readable) are pointers to those commits in the tree. We use various git commands to work with the tree structure and references. Git accordingly modifies contents of our repo.","title":"Working With Branches"},{"location":"git/branches/#merges","text":"Now say the feature you were working on branch b1 is complete and you need to merge it on master branch, where all the final version of code goes. So first you will checkout to branch master and then you pull the latest code from upstream (eg: GitHub). Then you need to merge your code from b1 into master. There could be two ways this can be done. Here is the current history: spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph --all * 60dc441 (HEAD -> master) adding master.txt file | * 872a38f (b1) adding b1 file |/ * 7f3b00e adding file 2 * df2fb7a adding file 1 Option 1: Directly merge the branch. Merging the branch b1 into master will result in a new merge commit. This will merge changes from two different lines of history and create a new commit of the result. spatel1-mn1:school-of-sre spatel1$ git merge b1 Merge made by the 'recursive' strategy. b1.txt | 1 + 1 file changed, 1 insertion(+) create mode 100644 b1.txt spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph --all * 8fc28f9 (HEAD -> master) Merge branch 'b1' |\\ | * 872a38f (b1) adding b1 file * | 60dc441 adding master.txt file |/ * 7f3b00e adding file 2 * df2fb7a adding file 1 You can see a new merge commit created (8fc28f9). You will be prompted for the commit message. If there are a lot of branches in the repo, this result will end-up with a lot of merge commits. Which looks ugly compared to a single line of history of development. So let's look at an alternative approach First let's reset our last merge and go to the previous state. spatel1-mn1:school-of-sre spatel1$ git reset --hard 60dc441 HEAD is now at 60dc441 adding master.txt file spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph --all * 60dc441 (HEAD -> master) adding master.txt file | * 872a38f (b1) adding b1 file |/ * 7f3b00e adding file 2 * df2fb7a adding file 1 Option 2: Rebase. Now, instead of merging two branches which has a similar base (commit: 7f3b00e), let us rebase branch b1 on to current master. What this means is take branch b1 (from commit 7f3b00e to commit 872a38f) and rebase (put them on top of) master (60dc441). # Switch to b1 spatel1-mn1:school-of-sre spatel1$ git checkout b1 Switched to branch 'b1' # Rebase (b1 which is current branch) on master spatel1-mn1:school-of-sre spatel1$ git rebase master First, rewinding head to replay your work on top of it... Applying: adding b1 file # The result spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph --all * 5372c8f (HEAD -> b1) adding b1 file * 60dc441 (master) adding master.txt file * 7f3b00e adding file 2 * df2fb7a adding file 1 You can see b1 which had 1 commit. That commit's parent was 7f3b00e . But since we rebase it on master ( 60dc441 ). That becomes the parent now. As a side effect, you also see it has become a single line of history. Now if we were to merge b1 into master , it would simply mean change master to point to 5372c8f which is b1 . Let's try it: # checkout to master since we want to merge code into master spatel1-mn1:school-of-sre spatel1$ git checkout master Switched to branch 'master' # the current history, where b1 is based on master spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph --all * 5372c8f (b1) adding b1 file * 60dc441 (HEAD -> master) adding master.txt file * 7f3b00e adding file 2 * df2fb7a adding file 1 # Performing the merge, notice the \"fast-forward\" message spatel1-mn1:school-of-sre spatel1$ git merge b1 Updating 60dc441..5372c8f Fast-forward b1.txt | 1 + 1 file changed, 1 insertion(+) create mode 100644 b1.txt # The Result spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph --all * 5372c8f (HEAD -> master, b1) adding b1 file * 60dc441 adding master.txt file * 7f3b00e adding file 2 * df2fb7a adding file 1 Now you see both b1 and master are pointing to the same commit. Your code has been merged to the master branch and it can be pushed. Also we have clean line of history! :D","title":"Merges"},{"location":"git/conclusion/","text":"What next from here? There are a lot of git commands and features which we have not explored here. But with the base built-up, be sure to explore concepts like Cherrypick Squash Amend Stash Reset","title":"Conclusion"},{"location":"git/conclusion/#what-next-from-here","text":"There are a lot of git commands and features which we have not explored here. But with the base built-up, be sure to explore concepts like Cherrypick Squash Amend Stash Reset","title":"What next from here?"},{"location":"git/git-basics/","text":"Git Prerequisites Have Git installed https://git-scm.com/downloads Have taken any git high level tutorial or following LinkedIn learning courses https://www.linkedin.com/learning/git-essential-training-the-basics/ https://www.linkedin.com/learning/git-branches-merges-and-remotes/ The Official Git Docs What to expect from this course As an engineer in the field of computer science, having knowledge of version control tools becomes almost a requirement. While there are a lot of version control tools that exist today like SVN, Mercurial, etc, Git perhaps is the most used one and this course we will be working with Git. While this course does not start with Git 101 and expects basic knowledge of git as a prerequisite, it will reintroduce the git concepts known by you with details covering what is happening under the hood as you execute various git commands. So that next time you run a git command, you will be able to press enter more confidently! What is not covered under this course Advanced usage and specifics of internal implementation details of Git. Course Contents Git Basics Working with Branches Git with Github Hooks Git Basics Though you might be aware already, let's revisit why we need a version control system. As the project grows and multiple developers start working on it, an efficient method for collaboration is warranted. Git helps the team collaborate easily and also maintains the history of the changes happening with the codebase. Creating a Git Repo Any folder can be converted into a git repository. After executing the following command, we will see a .git folder within the folder, which makes our folder a git repository. All the magic that git does, .git folder is the enabler for the same. # creating an empty folder and changing current dir to it spatel1-mn1:~ spatel1$ cd /tmp spatel1-mn1:tmp spatel1$ mkdir school-of-sre spatel1-mn1:tmp spatel1$ cd school-of-sre/ # initialize a git repo spatel1-mn1:school-of-sre spatel1$ git init Initialized empty Git repository in /private/tmp/school-of-sre/.git/ As the output says, an empty git repo has been initialized in our folder. Let's take a look at what is there. spatel1-mn1:school-of-sre spatel1$ ls .git/ HEAD config description hooks info objects refs There are a bunch of folders and files in the .git folder. As I said, all these enables git to do its magic. We will look into some of these folders and files. But for now, what we have is an empty git repository. Tracking a File Now as you might already know, let us create a new file in our repo (we will refer to the folder as repo now.) And see git status spatel1-mn1:school-of-sre spatel1$ echo \"I am file 1\" > file1.txt spatel1-mn1:school-of-sre spatel1$ git status On branch master No commits yet Untracked files: (use \"git add <file>...\" to include in what will be committed) file1.txt nothing added to commit but untracked files present (use \"git add\" to track) The current git status says No commits yet and there is one untracked file. Since we just created the file, git is not tracking that file. We explicitly need to ask git to track files and folders. (also checkout gitignore ) And how we do that is via git add command as suggested in the above output. Then we go ahead and create a commit. spatel1-mn1:school-of-sre spatel1$ git add file1.txt spatel1-mn1:school-of-sre spatel1$ git status On branch master No commits yet Changes to be committed: (use \"git rm --cached <file>...\" to unstage) new file: file1.txt spatel1-mn1:school-of-sre spatel1$ git commit -m \"adding file 1\" [master (root-commit) df2fb7a] adding file 1 1 file changed, 1 insertion(+) create mode 100644 file1.txt Notice how after adding the file, git status says Changes to be committed: . What it means is whatever is listed there, will be included in the next commit. Then we go ahead and create a commit, with an attached messaged via -m . More About a Commit Commit is a snapshot of the repo. Whenever a commit is made, a snapshot of the current state of repo (the folder) is taken and saved. Each commit has a unique ID. ( df2fb7a for the commit we made in the previous step). As we keep adding/changing more and more contents and keep making commits, all those snapshots are stored by git. Again, all this magic happens inside the .git folder. This is where all this snapshot or versions are stored. In an efficient manner. Adding More Changes Let us create one more file and commit the change. It would look the same as the previous commit we made. spatel1-mn1:school-of-sre spatel1$ echo \"I am file 2\" > file2.txt spatel1-mn1:school-of-sre spatel1$ git add file2.txt spatel1-mn1:school-of-sre spatel1$ git commit -m \"adding file 2\" [master 7f3b00e] adding file 2 1 file changed, 1 insertion(+) create mode 100644 file2.txt A new commit with ID 7f3b00e has been created. You can issue git status at any time to see the state of the repository. **IMPORTANT: Note that commit IDs are long string (SHA) but we can refer to a commit by its initial few (8 or more) characters too. We will interchangeably using shorter and longer commit IDs.** Now that we have two commits, let's visualize them: spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 7f3b00e (HEAD -> master) adding file 2 * df2fb7a adding file 1 git log , as the name suggests, prints the log of all the git commits. Here you see two additional arguments, --oneline prints the shorter version of the log, ie: the commit message only and not the person who made the commit and when. --graph prints it in graph format. Now at this moment the commits might look like just one in each line but all commits are stored as a tree like data structure internally by git. That means there can be two or more children commits of a given commit. And not just a single line of commits. We will look more into this part when we get to the Branches section. For now this is our commit history: df2fb7a ===> 7f3b00e Are commits really linked? As I just said, the two commits we just made are linked via tree like data structure and we saw how they are linked. But let's actually verify it. Everything in git is an object. Newly created files are stored as an object. Changes to file are stored as an objects and even commits are objects. To view contents of an object we can use the following command with the object's ID. We will take a look at content of the contents of the second commit spatel1-mn1:school-of-sre spatel1$ git cat-file -p 7f3b00e tree ebf3af44d253e5328340026e45a9fa9ae3ea1982 parent df2fb7a61f5d40c1191e0fdeb0fc5d6e7969685a author Sanket Patel <spatel1@linkedin.com> 1603273316 -0700 committer Sanket Patel <spatel1@linkedin.com> 1603273316 -0700 adding file 2 Take a note of parent attribute in the above output. It points to the commit id of the first commit we made. So this proves that they are linked! Additionally you can see the second commit's message in this object. As I said all this magic is enabled by .git folder and the object to which we are looking at also is in that folder. spatel1-mn1:school-of-sre spatel1$ ls .git/objects/7f/3b00eaa957815884198e2fdfec29361108d6a9 .git/objects/7f/3b00eaa957815884198e2fdfec29361108d6a9 It is stored in .git/objects/ folder. All the files and changes to them as well are stored in this folder. The Version Control part of Git We already can see two commits (versions) in our git log. One thing a version control tool gives you is ability to browse back and forth in history. For example: some of your users are running an old version of code and they are reporting an issue. In order to debug the issue, you need access to the old code. The one in your current repo is the latest code. In this example, you are working on the second commit (7f3b00e) and someone reported an issue with the code snapshot at commit (df2fb7a). This is how you would get access to the code at any older commit # Current contents, two files present patel1-mn1:school-of-sre spatel1$ ls file1.txt file2.txt # checking out to (an older) commit spatel1-mn1:school-of-sre spatel1$ git checkout df2fb7a Note: checking out 'df2fb7a'. You are in 'detached HEAD' state. You can look around, make experimental changes and commit them, and you can discard any commits you make in this state without impacting any branches by performing another checkout. If you want to create a new branch to retain commits you create, you may do so (now or later) by using -b with the checkout command again. Example: git checkout -b <new-branch-name> HEAD is now at df2fb7a adding file 1 # checking contents, can verify it has old contents spatel1-mn1:school-of-sre spatel1$ ls file1.txt So this is how we would get access to old versions/snapshots. All we need is a reference to that snapshot. Upon executing git checkout ... , what git does for you is use the .git folder, see what was the state of things (files and folders) at that version/reference and replace the contents of current directory with those contents. The then-existing content will no longer be present in the local dir (repo) but we can and will still get access to them because they are tracked via git commit and .git folder has them stored/tracked. Reference I mention in the previous section that we need a reference to the version. By default, git repo is made of tree of commits. And each commit has a unique IDs. But the unique ID is not the only thing we can reference commits via. There are multiple ways to reference commits. For example: HEAD is a reference to current commit. Whatever commit your repo is checked out at, HEAD will point to that. HEAD~1 is reference to previous commit. So while checking out previous version in section above, we could have done git checkout HEAD~1 . Similarly, master is also a reference (to a branch). Since git uses tree like structure to store commits, there of course will be branches. And the default branch is called master . Master (or any branch reference) will point to the latest commit in the branch. Even though we have checked out to the previous commit in out repo, master still points to the latest commit. And we can get back to the latest version by checkout at master reference spatel1-mn1:school-of-sre spatel1$ git checkout master Previous HEAD position was df2fb7a adding file 1 Switched to branch 'master' # now we will see latest code, with two files spatel1-mn1:school-of-sre spatel1$ ls file1.txt file2.txt Note, instead of master in above command, we could have used commit's ID as well. References and The Magic Let's look at the state of things. Two commits, master and HEAD references are pointing to the latest commit spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 7f3b00e (HEAD -> master) adding file 2 * df2fb7a adding file 1 The magic? Let's examine these files: spatel1-mn1:school-of-sre spatel1$ cat .git/refs/heads/master 7f3b00eaa957815884198e2fdfec29361108d6a9 Viola! Where master is pointing to is stored in a file. Whenever git needs to know where master reference is pointing to, or if git needs to update where master points, it just needs to update the file above. So when you create a new commit, a new commit is created on top of the current commit and the master file is updated with the new commit's ID. Similary, for HEAD reference: spatel1-mn1:school-of-sre spatel1$ cat .git/HEAD ref: refs/heads/master We can see HEAD is pointing to a reference called refs/heads/master . So HEAD will point where ever the master points. Little Adventure We discussed how git will update the files as we execute commands. But let's try to do it ourselves, by hand, and see what happens. spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 7f3b00e (HEAD -> master) adding file 2 * df2fb7a adding file 1 Now let's change master to point to the previous/first commit. spatel1-mn1:school-of-sre spatel1$ echo df2fb7a61f5d40c1191e0fdeb0fc5d6e7969685a > .git/refs/heads/master spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * df2fb7a (HEAD -> master) adding file 1 # RESETTING TO ORIGINAL spatel1-mn1:school-of-sre spatel1$ echo 7f3b00eaa957815884198e2fdfec29361108d6a9 > .git/refs/heads/master spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 7f3b00e (HEAD -> master) adding file 2 * df2fb7a adding file 1 We just edited the master reference file and now we can see only the first commit in git log. Undoing the change to the file brings the state back to original. Not so much of magic, isn't it?","title":"Git Basics"},{"location":"git/git-basics/#git","text":"","title":"Git"},{"location":"git/git-basics/#prerequisites","text":"Have Git installed https://git-scm.com/downloads Have taken any git high level tutorial or following LinkedIn learning courses https://www.linkedin.com/learning/git-essential-training-the-basics/ https://www.linkedin.com/learning/git-branches-merges-and-remotes/ The Official Git Docs","title":"Prerequisites"},{"location":"git/git-basics/#what-to-expect-from-this-course","text":"As an engineer in the field of computer science, having knowledge of version control tools becomes almost a requirement. While there are a lot of version control tools that exist today like SVN, Mercurial, etc, Git perhaps is the most used one and this course we will be working with Git. While this course does not start with Git 101 and expects basic knowledge of git as a prerequisite, it will reintroduce the git concepts known by you with details covering what is happening under the hood as you execute various git commands. So that next time you run a git command, you will be able to press enter more confidently!","title":"What to expect from this course"},{"location":"git/git-basics/#what-is-not-covered-under-this-course","text":"Advanced usage and specifics of internal implementation details of Git.","title":"What is not covered under this course"},{"location":"git/git-basics/#course-contents","text":"Git Basics Working with Branches Git with Github Hooks","title":"Course Contents"},{"location":"git/git-basics/#git-basics","text":"Though you might be aware already, let's revisit why we need a version control system. As the project grows and multiple developers start working on it, an efficient method for collaboration is warranted. Git helps the team collaborate easily and also maintains the history of the changes happening with the codebase.","title":"Git Basics"},{"location":"git/git-basics/#creating-a-git-repo","text":"Any folder can be converted into a git repository. After executing the following command, we will see a .git folder within the folder, which makes our folder a git repository. All the magic that git does, .git folder is the enabler for the same. # creating an empty folder and changing current dir to it spatel1-mn1:~ spatel1$ cd /tmp spatel1-mn1:tmp spatel1$ mkdir school-of-sre spatel1-mn1:tmp spatel1$ cd school-of-sre/ # initialize a git repo spatel1-mn1:school-of-sre spatel1$ git init Initialized empty Git repository in /private/tmp/school-of-sre/.git/ As the output says, an empty git repo has been initialized in our folder. Let's take a look at what is there. spatel1-mn1:school-of-sre spatel1$ ls .git/ HEAD config description hooks info objects refs There are a bunch of folders and files in the .git folder. As I said, all these enables git to do its magic. We will look into some of these folders and files. But for now, what we have is an empty git repository.","title":"Creating a Git Repo"},{"location":"git/git-basics/#tracking-a-file","text":"Now as you might already know, let us create a new file in our repo (we will refer to the folder as repo now.) And see git status spatel1-mn1:school-of-sre spatel1$ echo \"I am file 1\" > file1.txt spatel1-mn1:school-of-sre spatel1$ git status On branch master No commits yet Untracked files: (use \"git add <file>...\" to include in what will be committed) file1.txt nothing added to commit but untracked files present (use \"git add\" to track) The current git status says No commits yet and there is one untracked file. Since we just created the file, git is not tracking that file. We explicitly need to ask git to track files and folders. (also checkout gitignore ) And how we do that is via git add command as suggested in the above output. Then we go ahead and create a commit. spatel1-mn1:school-of-sre spatel1$ git add file1.txt spatel1-mn1:school-of-sre spatel1$ git status On branch master No commits yet Changes to be committed: (use \"git rm --cached <file>...\" to unstage) new file: file1.txt spatel1-mn1:school-of-sre spatel1$ git commit -m \"adding file 1\" [master (root-commit) df2fb7a] adding file 1 1 file changed, 1 insertion(+) create mode 100644 file1.txt Notice how after adding the file, git status says Changes to be committed: . What it means is whatever is listed there, will be included in the next commit. Then we go ahead and create a commit, with an attached messaged via -m .","title":"Tracking a File"},{"location":"git/git-basics/#more-about-a-commit","text":"Commit is a snapshot of the repo. Whenever a commit is made, a snapshot of the current state of repo (the folder) is taken and saved. Each commit has a unique ID. ( df2fb7a for the commit we made in the previous step). As we keep adding/changing more and more contents and keep making commits, all those snapshots are stored by git. Again, all this magic happens inside the .git folder. This is where all this snapshot or versions are stored. In an efficient manner.","title":"More About a Commit"},{"location":"git/git-basics/#adding-more-changes","text":"Let us create one more file and commit the change. It would look the same as the previous commit we made. spatel1-mn1:school-of-sre spatel1$ echo \"I am file 2\" > file2.txt spatel1-mn1:school-of-sre spatel1$ git add file2.txt spatel1-mn1:school-of-sre spatel1$ git commit -m \"adding file 2\" [master 7f3b00e] adding file 2 1 file changed, 1 insertion(+) create mode 100644 file2.txt A new commit with ID 7f3b00e has been created. You can issue git status at any time to see the state of the repository. **IMPORTANT: Note that commit IDs are long string (SHA) but we can refer to a commit by its initial few (8 or more) characters too. We will interchangeably using shorter and longer commit IDs.** Now that we have two commits, let's visualize them: spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 7f3b00e (HEAD -> master) adding file 2 * df2fb7a adding file 1 git log , as the name suggests, prints the log of all the git commits. Here you see two additional arguments, --oneline prints the shorter version of the log, ie: the commit message only and not the person who made the commit and when. --graph prints it in graph format. Now at this moment the commits might look like just one in each line but all commits are stored as a tree like data structure internally by git. That means there can be two or more children commits of a given commit. And not just a single line of commits. We will look more into this part when we get to the Branches section. For now this is our commit history: df2fb7a ===> 7f3b00e","title":"Adding More Changes"},{"location":"git/git-basics/#are-commits-really-linked","text":"As I just said, the two commits we just made are linked via tree like data structure and we saw how they are linked. But let's actually verify it. Everything in git is an object. Newly created files are stored as an object. Changes to file are stored as an objects and even commits are objects. To view contents of an object we can use the following command with the object's ID. We will take a look at content of the contents of the second commit spatel1-mn1:school-of-sre spatel1$ git cat-file -p 7f3b00e tree ebf3af44d253e5328340026e45a9fa9ae3ea1982 parent df2fb7a61f5d40c1191e0fdeb0fc5d6e7969685a author Sanket Patel <spatel1@linkedin.com> 1603273316 -0700 committer Sanket Patel <spatel1@linkedin.com> 1603273316 -0700 adding file 2 Take a note of parent attribute in the above output. It points to the commit id of the first commit we made. So this proves that they are linked! Additionally you can see the second commit's message in this object. As I said all this magic is enabled by .git folder and the object to which we are looking at also is in that folder. spatel1-mn1:school-of-sre spatel1$ ls .git/objects/7f/3b00eaa957815884198e2fdfec29361108d6a9 .git/objects/7f/3b00eaa957815884198e2fdfec29361108d6a9 It is stored in .git/objects/ folder. All the files and changes to them as well are stored in this folder.","title":"Are commits really linked?"},{"location":"git/git-basics/#the-version-control-part-of-git","text":"We already can see two commits (versions) in our git log. One thing a version control tool gives you is ability to browse back and forth in history. For example: some of your users are running an old version of code and they are reporting an issue. In order to debug the issue, you need access to the old code. The one in your current repo is the latest code. In this example, you are working on the second commit (7f3b00e) and someone reported an issue with the code snapshot at commit (df2fb7a). This is how you would get access to the code at any older commit # Current contents, two files present patel1-mn1:school-of-sre spatel1$ ls file1.txt file2.txt # checking out to (an older) commit spatel1-mn1:school-of-sre spatel1$ git checkout df2fb7a Note: checking out 'df2fb7a'. You are in 'detached HEAD' state. You can look around, make experimental changes and commit them, and you can discard any commits you make in this state without impacting any branches by performing another checkout. If you want to create a new branch to retain commits you create, you may do so (now or later) by using -b with the checkout command again. Example: git checkout -b <new-branch-name> HEAD is now at df2fb7a adding file 1 # checking contents, can verify it has old contents spatel1-mn1:school-of-sre spatel1$ ls file1.txt So this is how we would get access to old versions/snapshots. All we need is a reference to that snapshot. Upon executing git checkout ... , what git does for you is use the .git folder, see what was the state of things (files and folders) at that version/reference and replace the contents of current directory with those contents. The then-existing content will no longer be present in the local dir (repo) but we can and will still get access to them because they are tracked via git commit and .git folder has them stored/tracked.","title":"The Version Control part of Git"},{"location":"git/git-basics/#reference","text":"I mention in the previous section that we need a reference to the version. By default, git repo is made of tree of commits. And each commit has a unique IDs. But the unique ID is not the only thing we can reference commits via. There are multiple ways to reference commits. For example: HEAD is a reference to current commit. Whatever commit your repo is checked out at, HEAD will point to that. HEAD~1 is reference to previous commit. So while checking out previous version in section above, we could have done git checkout HEAD~1 . Similarly, master is also a reference (to a branch). Since git uses tree like structure to store commits, there of course will be branches. And the default branch is called master . Master (or any branch reference) will point to the latest commit in the branch. Even though we have checked out to the previous commit in out repo, master still points to the latest commit. And we can get back to the latest version by checkout at master reference spatel1-mn1:school-of-sre spatel1$ git checkout master Previous HEAD position was df2fb7a adding file 1 Switched to branch 'master' # now we will see latest code, with two files spatel1-mn1:school-of-sre spatel1$ ls file1.txt file2.txt Note, instead of master in above command, we could have used commit's ID as well.","title":"Reference"},{"location":"git/git-basics/#references-and-the-magic","text":"Let's look at the state of things. Two commits, master and HEAD references are pointing to the latest commit spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 7f3b00e (HEAD -> master) adding file 2 * df2fb7a adding file 1 The magic? Let's examine these files: spatel1-mn1:school-of-sre spatel1$ cat .git/refs/heads/master 7f3b00eaa957815884198e2fdfec29361108d6a9 Viola! Where master is pointing to is stored in a file. Whenever git needs to know where master reference is pointing to, or if git needs to update where master points, it just needs to update the file above. So when you create a new commit, a new commit is created on top of the current commit and the master file is updated with the new commit's ID. Similary, for HEAD reference: spatel1-mn1:school-of-sre spatel1$ cat .git/HEAD ref: refs/heads/master We can see HEAD is pointing to a reference called refs/heads/master . So HEAD will point where ever the master points.","title":"References and The Magic"},{"location":"git/git-basics/#little-adventure","text":"We discussed how git will update the files as we execute commands. But let's try to do it ourselves, by hand, and see what happens. spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 7f3b00e (HEAD -> master) adding file 2 * df2fb7a adding file 1 Now let's change master to point to the previous/first commit. spatel1-mn1:school-of-sre spatel1$ echo df2fb7a61f5d40c1191e0fdeb0fc5d6e7969685a > .git/refs/heads/master spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * df2fb7a (HEAD -> master) adding file 1 # RESETTING TO ORIGINAL spatel1-mn1:school-of-sre spatel1$ echo 7f3b00eaa957815884198e2fdfec29361108d6a9 > .git/refs/heads/master spatel1-mn1:school-of-sre spatel1$ git log --oneline --graph * 7f3b00e (HEAD -> master) adding file 2 * df2fb7a adding file 1 We just edited the master reference file and now we can see only the first commit in git log. Undoing the change to the file brings the state back to original. Not so much of magic, isn't it?","title":"Little Adventure"},{"location":"git/github-hooks/","text":"Git with Github Till now all the operations we did were in our local repo while git also helps us in a collaborative environment. GitHub is one place on the internet where you can centrally host your git repos and collaborate with other developers. Most of the workflow will remain the same as we discussed, with addition of couple of things: Pull: to pull latest changes from github (the central) repo Push: to push your changes to github repo so that it's available to all people GitHub has written nice guides and tutorials about this and you can refer them here: GitHub Hello World Git Handbook Hooks Git has another nice feature called hooks. Hooks are basically scripts which will be called when a certain event happens. Here is where hooks are located: spatel1-mn1:school-of-sre spatel1$ ls .git/hooks/ applypatch-msg.sample fsmonitor-watchman.sample pre-applypatch.sample pre-push.sample pre-receive.sample update.sample commit-msg.sample post-update.sample pre-commit.sample pre-rebase.sample prepare-commit-msg.sample Names are self explanatory. These hooks are useful when you want to do certain things when a certain event happens. Ie: if you want to run tests before pushing code, you would want to setup pre-push hooks. Let's try to create a pre commit hook. spatel1-mn1:school-of-sre spatel1$ echo \"echo this is from pre commit hook\" > .git/hooks/pre-commit spatel1-mn1:school-of-sre spatel1$ chmod +x .git/hooks/pre-commit We basically create a file called pre-commit in hooks folder and make it executable. Now if we make a commit, we should see the message getting printed. spatel1-mn1:school-of-sre spatel1$ echo \"sample file\" > sample.txt spatel1-mn1:school-of-sre spatel1$ git add sample.txt spatel1-mn1:school-of-sre spatel1$ git commit -m \"adding sample file\" this is from pre commit hook # <===== THE MESSAGE FROM HOOK EXECUTION [master 9894e05] adding sample file 1 file changed, 1 insertion(+) create mode 100644 sample.txt","title":"Github and Hooks"},{"location":"git/github-hooks/#git-with-github","text":"Till now all the operations we did were in our local repo while git also helps us in a collaborative environment. GitHub is one place on the internet where you can centrally host your git repos and collaborate with other developers. Most of the workflow will remain the same as we discussed, with addition of couple of things: Pull: to pull latest changes from github (the central) repo Push: to push your changes to github repo so that it's available to all people GitHub has written nice guides and tutorials about this and you can refer them here: GitHub Hello World Git Handbook","title":"Git with Github"},{"location":"git/github-hooks/#hooks","text":"Git has another nice feature called hooks. Hooks are basically scripts which will be called when a certain event happens. Here is where hooks are located: spatel1-mn1:school-of-sre spatel1$ ls .git/hooks/ applypatch-msg.sample fsmonitor-watchman.sample pre-applypatch.sample pre-push.sample pre-receive.sample update.sample commit-msg.sample post-update.sample pre-commit.sample pre-rebase.sample prepare-commit-msg.sample Names are self explanatory. These hooks are useful when you want to do certain things when a certain event happens. Ie: if you want to run tests before pushing code, you would want to setup pre-push hooks. Let's try to create a pre commit hook. spatel1-mn1:school-of-sre spatel1$ echo \"echo this is from pre commit hook\" > .git/hooks/pre-commit spatel1-mn1:school-of-sre spatel1$ chmod +x .git/hooks/pre-commit We basically create a file called pre-commit in hooks folder and make it executable. Now if we make a commit, we should see the message getting printed. spatel1-mn1:school-of-sre spatel1$ echo \"sample file\" > sample.txt spatel1-mn1:school-of-sre spatel1$ git add sample.txt spatel1-mn1:school-of-sre spatel1$ git commit -m \"adding sample file\" this is from pre commit hook # <===== THE MESSAGE FROM HOOK EXECUTION [master 9894e05] adding sample file 1 file changed, 1 insertion(+) create mode 100644 sample.txt","title":"Hooks"},{"location":"linux_basics/command_line_basics/","text":"Command Line Basics Lab Environment Setup One can use an online bash interpreter to run all the commands that are provided as examples in this course. This will also help you in getting a hands-on experience of various linux commands. REPL is one of the popular online bash interpreters for running linux commands. We will be using it for running all the commands mentioned in this course. What is a Command A command is a program that tells the operating system to perform specific work. Programs are stored as files in linux. Therefore, a command is also a file which is stored somewhere on the disk. Commands may also take additional arguments as input from the user. These arguments are called command line arguments. Knowing how to use the commands is important and there are many ways to get help in Linux, especially for commands. Almost every command will have some form of documentation, most commands will have a command-line argument -h or --help that will display a reasonable amount of documentation. But the most popular documentation system in Linux is called man pages - short for manual pages. Using --help to show the documentation for ls command. File System Organization The linux file system has a hierarchical (or tree-like) structure with its highest level directory called root ( denoted by / ). Directories present inside the root directory stores file related to the system. These directories in turn can either store system files or application files or user related files. bin | The executable program of most commonly used commands reside in bin directory sbin | This directory contains programs used for system administration. home | This directory contains user related files and directories. lib | This directory contains all the library files etc | This directory contains all the system configuration files proc | This directory contains files related to the running processes on the system dev | This directory contains files related to devices on the system mnt | This directory contains files related to mounted devices on the system tmp | This directory is used to store temporary files on the system usr | This directory is used to store application programs on the system Commands for Navigating the File System There are three basic commands which are used frequently to navigate the file system: ls pwd cd We will now try to understand what each command does and how to use these commands. You should also practice the given examples on the online bash shell. pwd (print working directory) At any given moment of time, we will be standing in a certain directory. To get the name of the directory in which we are standing, we can use the pwd command in linux. We will now use the cd command to move to a different directory and then print the working directory. cd (change directory) The cd command can be used to change the working directory. Using the command, you can move from one directory to another. In the below example, we are initially in the root directory. we have then used the cd command to change the directory. ls (list files and directories)** The ls command is used to list the contents of a directory. It will list down all the files and folders present in the given directory. If we just type ls in the shell, it will list all the files and directories present in the current directory. We can also provide the directory name as argument to ls command. It will then list all the files and directories inside the given directory. Commands for Manipulating Files There are four basic commands which are used frequently to manipulate files: touch mkdir cp mv rm We will now try to understand what each command does and how to use these commands. You should also practice the given examples on the online bash shell. touch (create new file) The touch command can be used to create an empty new file. This command is very useful for many other purposes but we will discuss the simplest use case of creating a new file. General syntax of using touch command touch <file_name> mkdir (create new directories) The mkdir command is used to create directories.You can use ls command to verify that the new directory is created. General syntax of using mkdir command mkdir <directory_name> rm (delete files and directories) The rm command can be used to delete files and directories. It is very important to note that this command permanently deletes the files and directories. It's almost impossible to recover these files and directories once you have executed rm command on them successfully. Do run this command with care. General syntax of using rm command: rm <file_name> Let's try to understand the rm command with an example. We will try to delete the file and directory we created using touch and mkdir command respectively. cp (copy files and directories) The cp command is used to copy files and directories from one location to another. Do note that the cp command doesn't do any change to the original files or directories. The original files or directories and their copy both co-exist after running cp command successfully. General syntax of using cp command: cp <source_path> <destination_path> We are currently in the '/home/runner' directory. We will use the mkdir command to create a new directory named \"test_directory\". We will now try to copy the \"_test_runner.py\" file to the directory we created just now. Do note that nothing happened to the original \"_test_runner.py\" file. It's still there in the current directory. A new copy of it got created inside the \"test_directory\". We can also use the cp command to copy the whole directory from one location to another. Let's try to understand this with an example. We again used the mkdir command to create a new directory called \"another_directory\". We then used the cp command along with an additional argument '-r' to copy the \"test_directory\". mv (move files and directories) The mv command can either be used to move files or directories from one location to another or it can be used to rename files or directories. Do note that moving files and copying them are very different. When you move the files or directories, the original copy is lost. General syntax of using mv command: mv <source_path> <destination_path> In this example, we will use the mv command to move the \"_test_runner.py\" file to \"test_directory\". In this case, this file already exists in \"test_directory\". The mv command will just replace it. Do note that the original file doesn't exist in the current directory after mv command ran successfully. We can also use the mv command to move a directory from one location to another. In this case, we do not need to use the '-r' flag that we did while using the cp command. Do note that the original directory will not exist if we use mv command. One of the important uses of the mv command is to rename files and directories. Let's see how we can use this command for renaming. We have first changed our location to \"test_directory\". We then use the mv command to rename the \"\"_test_runner.py\" file to \"test.py\". Commands for Viewing Files There are three basic commands which are used frequently to view the files: cat head tail We will now try to understand what each command does and how to use these commands. You should also practice the given examples on the online bash shell. We will create a new file called \"numbers.txt\" and insert numbers from 1 to 100 in this file. Each number will be in a separate line. Do not worry about the above command now. It's an advanced command which is used to generate numbers. We have then used a redirection operator to push these numbers to the file. We will be discussing I/O redirection in the later sections. cat The most simplest use of cat command is to print the contents of the file on your output screen. This command is very useful and can be used for many other purposes. We will study about other use cases later. You can try to run the above command and you will see numbers being printed from 1 to 100 on your screen. You will need to scroll up to view all the numbers. head The head command displays the first 10 lines of the file by default. We can include additional arguments to display as many lines as we want from the top. In this example, we are only able to see the first 10 lines from the file when we use the head command. By default, head command will only display the first 10 lines. If we want to specify the number of lines we want to see from start, use the '-n' argument to provide the input. tail The tail command displays the last 10 lines of the file by default. We can include additional arguments to display as many lines as we want from the end of the file. By default, the tail command will only display the last 10 lines. If we want to specify the number of lines we want to see from the end, use '-n' argument to provide the input. In this example, we are only able to see the last 5 lines from the file when we use the tail command with explicit -n option. Echo Command in Linux The echo command is one of the simplest commands that is used in the shell. This command is equivalent to what we have in other programming languages. The echo command prints the given input string on the screen. Text Processing Commands In the previous section, we learned how to view the content of a file. In many cases, we will be interested in performing the below operations: Print only the lines which contain a particular word(s) Replace a particular word with another word in a file Sort the lines in a particular order There are three basic commands which are used frequently to process texts: grep sed sort We will now try to understand what each command does and how to use these commands. You should also practice the given examples on the online bash shell. We will create a new file called \"numbers.txt\" and insert numbers from 1 to 10 in this file. Each number will be in a separate line. grep The grep command in its simplest form can be used to search particular words in a text file. It will display all the lines in a file that contains a particular input. The word we want to search is provided as an input to the grep command. General syntax of using grep command: grep <word_to_search> <file_name> In this example, we are trying to search for a string \"1\" in this file. The grep command outputs the lines where it found this string. sed The sed command in its simplest form can be used to replace a text in a file. General syntax of using the sed command for replacement: sed 's/<text_to_replace>/<replacement_text>/' <file_name> Let's try to replace each occurrence of \"1\" in the file with \"3\" using sed command. The content of the file will not change in the above example. To do so, we have to use an extra argument '-i' so that the changes are reflected back in the file. sort The sort command can be used to sort the input provided to it as an argument. By default, it will sort in increasing order. Let's first see the content of the file before trying to sort it. Now, we will try to sort the file using the sort command. The sort command sorts the content in lexicographical order. The content of the file will not change in the above example. I/O Redirection Each open file gets assigned a file descriptor. A file descriptor is an unique identifier for open files in the system. There are always three default files open, stdin (the keyboard), stdout (the screen), and stderr (error messages output to the screen). These files can be redirected. Everything is a file in linux - https://unix.stackexchange.com/questions/225537/everything-is-a-file Till now, we have displayed all the output on the screen which is the standard output. We can use some special operators to redirect the output of the command to files or even to the input of other commands. I/O redirection is a very powerful feature. In the below example, we have used the '>' operator to redirect the output of ls command to output.txt file. In the below example, we have redirected the output from echo command to a file. We can also redirect the output of a command as an input to another command. This is possible with the help of pipes. In the below example, we have passed the output of cat command as an input to grep command using pipe(|) operator. In the below example, we have passed the output of sort command as an input to uniq command using pipe(|) operator. The uniq command only prints the unique numbers from the input. I/O redirection - https://tldp.org/LDP/abs/html/io-redirection.html","title":"Command Line Basics"},{"location":"linux_basics/command_line_basics/#command-line-basics","text":"","title":"Command Line Basics"},{"location":"linux_basics/command_line_basics/#lab-environment-setup","text":"One can use an online bash interpreter to run all the commands that are provided as examples in this course. This will also help you in getting a hands-on experience of various linux commands. REPL is one of the popular online bash interpreters for running linux commands. We will be using it for running all the commands mentioned in this course.","title":"Lab Environment Setup"},{"location":"linux_basics/command_line_basics/#what-is-a-command","text":"A command is a program that tells the operating system to perform specific work. Programs are stored as files in linux. Therefore, a command is also a file which is stored somewhere on the disk. Commands may also take additional arguments as input from the user. These arguments are called command line arguments. Knowing how to use the commands is important and there are many ways to get help in Linux, especially for commands. Almost every command will have some form of documentation, most commands will have a command-line argument -h or --help that will display a reasonable amount of documentation. But the most popular documentation system in Linux is called man pages - short for manual pages. Using --help to show the documentation for ls command.","title":"What is a Command"},{"location":"linux_basics/command_line_basics/#file-system-organization","text":"The linux file system has a hierarchical (or tree-like) structure with its highest level directory called root ( denoted by / ). Directories present inside the root directory stores file related to the system. These directories in turn can either store system files or application files or user related files. bin | The executable program of most commonly used commands reside in bin directory sbin | This directory contains programs used for system administration. home | This directory contains user related files and directories. lib | This directory contains all the library files etc | This directory contains all the system configuration files proc | This directory contains files related to the running processes on the system dev | This directory contains files related to devices on the system mnt | This directory contains files related to mounted devices on the system tmp | This directory is used to store temporary files on the system usr | This directory is used to store application programs on the system","title":"File System Organization"},{"location":"linux_basics/command_line_basics/#commands-for-navigating-the-file-system","text":"There are three basic commands which are used frequently to navigate the file system: ls pwd cd We will now try to understand what each command does and how to use these commands. You should also practice the given examples on the online bash shell.","title":"Commands for Navigating the File System"},{"location":"linux_basics/command_line_basics/#pwd-print-working-directory","text":"At any given moment of time, we will be standing in a certain directory. To get the name of the directory in which we are standing, we can use the pwd command in linux. We will now use the cd command to move to a different directory and then print the working directory.","title":"pwd (print working directory)"},{"location":"linux_basics/command_line_basics/#cd-change-directory","text":"The cd command can be used to change the working directory. Using the command, you can move from one directory to another. In the below example, we are initially in the root directory. we have then used the cd command to change the directory.","title":"cd (change directory)"},{"location":"linux_basics/command_line_basics/#ls-list-files-and-directories","text":"The ls command is used to list the contents of a directory. It will list down all the files and folders present in the given directory. If we just type ls in the shell, it will list all the files and directories present in the current directory. We can also provide the directory name as argument to ls command. It will then list all the files and directories inside the given directory.","title":"ls (list files and directories)**"},{"location":"linux_basics/command_line_basics/#commands-for-manipulating-files","text":"There are four basic commands which are used frequently to manipulate files: touch mkdir cp mv rm We will now try to understand what each command does and how to use these commands. You should also practice the given examples on the online bash shell.","title":"Commands for Manipulating Files"},{"location":"linux_basics/command_line_basics/#touch-create-new-file","text":"The touch command can be used to create an empty new file. This command is very useful for many other purposes but we will discuss the simplest use case of creating a new file. General syntax of using touch command touch <file_name>","title":"touch (create new file)"},{"location":"linux_basics/command_line_basics/#mkdir-create-new-directories","text":"The mkdir command is used to create directories.You can use ls command to verify that the new directory is created. General syntax of using mkdir command mkdir <directory_name>","title":"mkdir (create new directories)"},{"location":"linux_basics/command_line_basics/#rm-delete-files-and-directories","text":"The rm command can be used to delete files and directories. It is very important to note that this command permanently deletes the files and directories. It's almost impossible to recover these files and directories once you have executed rm command on them successfully. Do run this command with care. General syntax of using rm command: rm <file_name> Let's try to understand the rm command with an example. We will try to delete the file and directory we created using touch and mkdir command respectively.","title":"rm (delete files and directories)"},{"location":"linux_basics/command_line_basics/#cp-copy-files-and-directories","text":"The cp command is used to copy files and directories from one location to another. Do note that the cp command doesn't do any change to the original files or directories. The original files or directories and their copy both co-exist after running cp command successfully. General syntax of using cp command: cp <source_path> <destination_path> We are currently in the '/home/runner' directory. We will use the mkdir command to create a new directory named \"test_directory\". We will now try to copy the \"_test_runner.py\" file to the directory we created just now. Do note that nothing happened to the original \"_test_runner.py\" file. It's still there in the current directory. A new copy of it got created inside the \"test_directory\". We can also use the cp command to copy the whole directory from one location to another. Let's try to understand this with an example. We again used the mkdir command to create a new directory called \"another_directory\". We then used the cp command along with an additional argument '-r' to copy the \"test_directory\". mv (move files and directories) The mv command can either be used to move files or directories from one location to another or it can be used to rename files or directories. Do note that moving files and copying them are very different. When you move the files or directories, the original copy is lost. General syntax of using mv command: mv <source_path> <destination_path> In this example, we will use the mv command to move the \"_test_runner.py\" file to \"test_directory\". In this case, this file already exists in \"test_directory\". The mv command will just replace it. Do note that the original file doesn't exist in the current directory after mv command ran successfully. We can also use the mv command to move a directory from one location to another. In this case, we do not need to use the '-r' flag that we did while using the cp command. Do note that the original directory will not exist if we use mv command. One of the important uses of the mv command is to rename files and directories. Let's see how we can use this command for renaming. We have first changed our location to \"test_directory\". We then use the mv command to rename the \"\"_test_runner.py\" file to \"test.py\".","title":"cp (copy files and directories)"},{"location":"linux_basics/command_line_basics/#commands-for-viewing-files","text":"There are three basic commands which are used frequently to view the files: cat head tail We will now try to understand what each command does and how to use these commands. You should also practice the given examples on the online bash shell. We will create a new file called \"numbers.txt\" and insert numbers from 1 to 100 in this file. Each number will be in a separate line. Do not worry about the above command now. It's an advanced command which is used to generate numbers. We have then used a redirection operator to push these numbers to the file. We will be discussing I/O redirection in the later sections.","title":"Commands for Viewing Files"},{"location":"linux_basics/command_line_basics/#cat","text":"The most simplest use of cat command is to print the contents of the file on your output screen. This command is very useful and can be used for many other purposes. We will study about other use cases later. You can try to run the above command and you will see numbers being printed from 1 to 100 on your screen. You will need to scroll up to view all the numbers.","title":"cat"},{"location":"linux_basics/command_line_basics/#head","text":"The head command displays the first 10 lines of the file by default. We can include additional arguments to display as many lines as we want from the top. In this example, we are only able to see the first 10 lines from the file when we use the head command. By default, head command will only display the first 10 lines. If we want to specify the number of lines we want to see from start, use the '-n' argument to provide the input.","title":"head"},{"location":"linux_basics/command_line_basics/#tail","text":"The tail command displays the last 10 lines of the file by default. We can include additional arguments to display as many lines as we want from the end of the file. By default, the tail command will only display the last 10 lines. If we want to specify the number of lines we want to see from the end, use '-n' argument to provide the input. In this example, we are only able to see the last 5 lines from the file when we use the tail command with explicit -n option.","title":"tail"},{"location":"linux_basics/command_line_basics/#echo-command-in-linux","text":"The echo command is one of the simplest commands that is used in the shell. This command is equivalent to what we have in other programming languages. The echo command prints the given input string on the screen.","title":"Echo Command in Linux"},{"location":"linux_basics/command_line_basics/#text-processing-commands","text":"In the previous section, we learned how to view the content of a file. In many cases, we will be interested in performing the below operations: Print only the lines which contain a particular word(s) Replace a particular word with another word in a file Sort the lines in a particular order There are three basic commands which are used frequently to process texts: grep sed sort We will now try to understand what each command does and how to use these commands. You should also practice the given examples on the online bash shell. We will create a new file called \"numbers.txt\" and insert numbers from 1 to 10 in this file. Each number will be in a separate line.","title":"Text Processing Commands"},{"location":"linux_basics/command_line_basics/#grep","text":"The grep command in its simplest form can be used to search particular words in a text file. It will display all the lines in a file that contains a particular input. The word we want to search is provided as an input to the grep command. General syntax of using grep command: grep <word_to_search> <file_name> In this example, we are trying to search for a string \"1\" in this file. The grep command outputs the lines where it found this string.","title":"grep"},{"location":"linux_basics/command_line_basics/#sed","text":"The sed command in its simplest form can be used to replace a text in a file. General syntax of using the sed command for replacement: sed 's/<text_to_replace>/<replacement_text>/' <file_name> Let's try to replace each occurrence of \"1\" in the file with \"3\" using sed command. The content of the file will not change in the above example. To do so, we have to use an extra argument '-i' so that the changes are reflected back in the file.","title":"sed"},{"location":"linux_basics/command_line_basics/#sort","text":"The sort command can be used to sort the input provided to it as an argument. By default, it will sort in increasing order. Let's first see the content of the file before trying to sort it. Now, we will try to sort the file using the sort command. The sort command sorts the content in lexicographical order. The content of the file will not change in the above example.","title":"sort"},{"location":"linux_basics/command_line_basics/#io-redirection","text":"Each open file gets assigned a file descriptor. A file descriptor is an unique identifier for open files in the system. There are always three default files open, stdin (the keyboard), stdout (the screen), and stderr (error messages output to the screen). These files can be redirected. Everything is a file in linux - https://unix.stackexchange.com/questions/225537/everything-is-a-file Till now, we have displayed all the output on the screen which is the standard output. We can use some special operators to redirect the output of the command to files or even to the input of other commands. I/O redirection is a very powerful feature. In the below example, we have used the '>' operator to redirect the output of ls command to output.txt file. In the below example, we have redirected the output from echo command to a file. We can also redirect the output of a command as an input to another command. This is possible with the help of pipes. In the below example, we have passed the output of cat command as an input to grep command using pipe(|) operator. In the below example, we have passed the output of sort command as an input to uniq command using pipe(|) operator. The uniq command only prints the unique numbers from the input. I/O redirection - https://tldp.org/LDP/abs/html/io-redirection.html","title":"I/O Redirection"},{"location":"linux_basics/conclusion/","text":"Conclusion We have covered the basics of Linux operating systems and basic commands used in linux. We have also covered the Linux server administration commands. We hope that this course will make it easier for you to operate on the command line. Applications in SRE Role As a SRE, you will be required to perform some general tasks on these linux servers. You will also be using the command line when you are troubleshooting issues. Moving from one location to another in the filesystem will require the help of ls, pwd and cd commands You may need to search some specific information in the log files. Grep command would be very useful here. I/O redirection will become handy if you want to store the output in a file or pass it as an input to another command. Tail command is very useful to view the latest data in the log file. Different users will have different permissions depending on their roles. We will also not want everyone in the company to access our servers for security reasons. Users permissions can be restricted with chown, chmod and chgrp commands. SSH is one of the most frequently used commands for a SRE. Logging into servers and troubleshooting along with performing basic administration tasks will only be possible if we are able to login into the server. What if we want to run an apache server or nginx on a server ? We will first install it using the package manager. Package management commands become important here. Managing services on servers is another critical responsibility of a SRE. Systemd related commands can help in troubleshooting issues. If a service goes down, we can start it using systemctl start command. We can also stop a service in case it is not needed. Monitoring is another core responsibility of a SRE. Memory and CPU are two important system level metrics which should be monitored. Commands like top and free are quite helpful here. If a service is throwing an error, how do we find out the root cause of the error ? We will certainly need to check logs to find out the whole stack trace of the error. The log file will also tell us the number of times the error has occurred along with time when it started. Useful Courses and tutorials Edx basic linux commands course Edx Red Hat Enterprise Linux Course https://linuxcommand.org/lc3_learning_the_shell.php","title":"Conclusion"},{"location":"linux_basics/conclusion/#conclusion","text":"We have covered the basics of Linux operating systems and basic commands used in linux. We have also covered the Linux server administration commands. We hope that this course will make it easier for you to operate on the command line.","title":"Conclusion"},{"location":"linux_basics/conclusion/#applications-in-sre-role","text":"As a SRE, you will be required to perform some general tasks on these linux servers. You will also be using the command line when you are troubleshooting issues. Moving from one location to another in the filesystem will require the help of ls, pwd and cd commands You may need to search some specific information in the log files. Grep command would be very useful here. I/O redirection will become handy if you want to store the output in a file or pass it as an input to another command. Tail command is very useful to view the latest data in the log file. Different users will have different permissions depending on their roles. We will also not want everyone in the company to access our servers for security reasons. Users permissions can be restricted with chown, chmod and chgrp commands. SSH is one of the most frequently used commands for a SRE. Logging into servers and troubleshooting along with performing basic administration tasks will only be possible if we are able to login into the server. What if we want to run an apache server or nginx on a server ? We will first install it using the package manager. Package management commands become important here. Managing services on servers is another critical responsibility of a SRE. Systemd related commands can help in troubleshooting issues. If a service goes down, we can start it using systemctl start command. We can also stop a service in case it is not needed. Monitoring is another core responsibility of a SRE. Memory and CPU are two important system level metrics which should be monitored. Commands like top and free are quite helpful here. If a service is throwing an error, how do we find out the root cause of the error ? We will certainly need to check logs to find out the whole stack trace of the error. The log file will also tell us the number of times the error has occurred along with time when it started.","title":"Applications in SRE Role"},{"location":"linux_basics/conclusion/#useful-courses-and-tutorials","text":"Edx basic linux commands course Edx Red Hat Enterprise Linux Course https://linuxcommand.org/lc3_learning_the_shell.php","title":"Useful Courses and tutorials"},{"location":"linux_basics/intro/","text":"Linux Basics Introduction Prerequisites Comfortable using any operating systems like Windows, Linux or Mac Fundamental knowledge of operating systems What to expect from this course This course is divided into three parts. In the first part, we cover the fundamentals of Linux operating systems. We will talk about Linux architecture, Linux distributions and uses of Linux operating systems. We will also talk about the difference between GUI and CLI. In the second part, we cover some basic commands used in Linux. We will focus on commands used for navigating the file system, viewing and manipulating files, I/O redirection etc. In the third part, we cover Linux system administration. This includes day to day tasks performed by Linux admins, like managing users/groups, managing file permissions, monitoring system performance, log files etc. In the second and third part, we will be taking examples to understand the concepts. What is not covered under this course We are not covering advanced Linux commands and bash scripting in this course. We will also not be covering Linux internals. Course Contents The following topics has been covered in this course: Introduction to Linux What are Linux Operating Systems What are popular Linux distributions Uses of Linux Operating Systems Linux Architecture Graphical user interface (GUI) vs Command line interface (CLI) Command Line Basics Lab Environment Setup What is a Command File System Organization Navigating File System Manipulating Files Viewing Files Echo Command Text Processing Commands I/O Redirection Linux system administration Lab Environment Setup User/Groups management Becoming a Superuser File Permissions SSH Command Package Management Process Management Memory Management Daemons and Systemd Logs Conclusion Applications in SRE Role Useful Courses and tutorials What are Linux operating systems Most of us are familiar with the Windows operating system used in more than 75% of the personal computers. The Windows operating systems are based on Windows NT kernel. A kernel is the most important part of an operating system - it performs important functions like process management, memory management, filesystem management etc. Linux operating systems are based on the Linux kernel. A Linux based operating system will consist of Linux kernel, GUI/CLI, system libraries and system utilities. The Linux kernel was independently developed and released by Linus Torvalds. The Linux kernel is free and open-source - https://github.com/torvalds/linux History of Linux - https://en.wikipedia.org/wiki/History_of_Linux What are popular Linux distributions A Linux distribution(distro) is an operating system based on the Linux kernel and a package management system. A package management system consists of tools that help in installing, upgrading, configuring and removing softwares on the operating system. Software are usually adopted to a distribution and are packaged in a distro specific format. These packages are available through a distro specific repository. Packages are installed and managed in the operating system by a package manager. List of popular Linux distributions: Fedora Ubuntu Debian Centos Red Hat Enterprise Linux Suse Arch Linux Packaging systems Distributions Package manager Debian style (.deb) Debian, Ubuntu APT Red Hat style (.rpm) Fedora, CentOS, Red Hat Enterprise Linux YUM Linux Architecture The Linux kernel is monolithic in nature. System calls are used to interact with the Linux kernel space. Kernel code can only be executed in the kernel mode. Non-kernel code is executed in the user mode. Device drivers are used to communicate with the hardware devices. Uses of Linux Operating Systems Operating system based on Linux kernel are widely used in: Personal computers Servers Mobile phones - Android is based on Linux operating system Embedded devices - watches, televisions, traffic lights etc Satelites Network devices - routers, switches etc. Graphical user interface (GUI) vs Command line interface (CLI) A user interacts with a computer with the help of user interfaces. The user interface can be either GUI or CLI. Graphical user interface allows a user to interact with the computer using graphics such as icons and images. When a user clicks on an icon to open an application on a computer, he or she is actually using the GUI. It's easy to perform tasks using GUI. Command line interface allows a user to interact with the computer using commands. A user types the command in a terminal and the system helps in executing these commands. A new user with experience on GUI may find it difficult to interact with CLI as he/she needs to be aware of the commands to perform a particular operation. Shell vs Terminal Shell is a program that takes commands from the users and gives them to the operating system for processing. Shell is an example of a CLI(command line interface). Bash is one of the most popular shell programs available on Linux servers. Other popular shell programs are zsh, ksh and tcsh. Terminal is a program that opens a window and lets you interact with the shell. Some popular examples of terminals are gnome-terminal, xterm, konsole etc. Linux users do use the terms shell, terminal, prompt, console etc. interchangeably. In simple terms, these all refer to a way of taking commands from the user.","title":"Introduction"},{"location":"linux_basics/intro/#linux-basics","text":"","title":"Linux Basics"},{"location":"linux_basics/intro/#introduction","text":"","title":"Introduction"},{"location":"linux_basics/intro/#prerequisites","text":"Comfortable using any operating systems like Windows, Linux or Mac Fundamental knowledge of operating systems","title":"Prerequisites"},{"location":"linux_basics/intro/#what-to-expect-from-this-course","text":"This course is divided into three parts. In the first part, we cover the fundamentals of Linux operating systems. We will talk about Linux architecture, Linux distributions and uses of Linux operating systems. We will also talk about the difference between GUI and CLI. In the second part, we cover some basic commands used in Linux. We will focus on commands used for navigating the file system, viewing and manipulating files, I/O redirection etc. In the third part, we cover Linux system administration. This includes day to day tasks performed by Linux admins, like managing users/groups, managing file permissions, monitoring system performance, log files etc. In the second and third part, we will be taking examples to understand the concepts.","title":"What to expect from this course"},{"location":"linux_basics/intro/#what-is-not-covered-under-this-course","text":"We are not covering advanced Linux commands and bash scripting in this course. We will also not be covering Linux internals.","title":"What is not covered under this course"},{"location":"linux_basics/intro/#course-contents","text":"The following topics has been covered in this course: Introduction to Linux What are Linux Operating Systems What are popular Linux distributions Uses of Linux Operating Systems Linux Architecture Graphical user interface (GUI) vs Command line interface (CLI) Command Line Basics Lab Environment Setup What is a Command File System Organization Navigating File System Manipulating Files Viewing Files Echo Command Text Processing Commands I/O Redirection Linux system administration Lab Environment Setup User/Groups management Becoming a Superuser File Permissions SSH Command Package Management Process Management Memory Management Daemons and Systemd Logs Conclusion Applications in SRE Role Useful Courses and tutorials","title":"Course Contents"},{"location":"linux_basics/intro/#what-are-linux-operating-systems","text":"Most of us are familiar with the Windows operating system used in more than 75% of the personal computers. The Windows operating systems are based on Windows NT kernel. A kernel is the most important part of an operating system - it performs important functions like process management, memory management, filesystem management etc. Linux operating systems are based on the Linux kernel. A Linux based operating system will consist of Linux kernel, GUI/CLI, system libraries and system utilities. The Linux kernel was independently developed and released by Linus Torvalds. The Linux kernel is free and open-source - https://github.com/torvalds/linux History of Linux - https://en.wikipedia.org/wiki/History_of_Linux","title":"What are Linux operating systems"},{"location":"linux_basics/intro/#what-are-popular-linux-distributions","text":"A Linux distribution(distro) is an operating system based on the Linux kernel and a package management system. A package management system consists of tools that help in installing, upgrading, configuring and removing softwares on the operating system. Software are usually adopted to a distribution and are packaged in a distro specific format. These packages are available through a distro specific repository. Packages are installed and managed in the operating system by a package manager. List of popular Linux distributions: Fedora Ubuntu Debian Centos Red Hat Enterprise Linux Suse Arch Linux Packaging systems Distributions Package manager Debian style (.deb) Debian, Ubuntu APT Red Hat style (.rpm) Fedora, CentOS, Red Hat Enterprise Linux YUM","title":"What are popular Linux distributions"},{"location":"linux_basics/intro/#linux-architecture","text":"The Linux kernel is monolithic in nature. System calls are used to interact with the Linux kernel space. Kernel code can only be executed in the kernel mode. Non-kernel code is executed in the user mode. Device drivers are used to communicate with the hardware devices.","title":"Linux Architecture"},{"location":"linux_basics/intro/#uses-of-linux-operating-systems","text":"Operating system based on Linux kernel are widely used in: Personal computers Servers Mobile phones - Android is based on Linux operating system Embedded devices - watches, televisions, traffic lights etc Satelites Network devices - routers, switches etc.","title":"Uses of Linux Operating Systems"},{"location":"linux_basics/intro/#graphical-user-interface-gui-vs-command-line-interface-cli","text":"A user interacts with a computer with the help of user interfaces. The user interface can be either GUI or CLI. Graphical user interface allows a user to interact with the computer using graphics such as icons and images. When a user clicks on an icon to open an application on a computer, he or she is actually using the GUI. It's easy to perform tasks using GUI. Command line interface allows a user to interact with the computer using commands. A user types the command in a terminal and the system helps in executing these commands. A new user with experience on GUI may find it difficult to interact with CLI as he/she needs to be aware of the commands to perform a particular operation.","title":"Graphical user interface (GUI) vs Command line interface (CLI)"},{"location":"linux_basics/intro/#shell-vs-terminal","text":"Shell is a program that takes commands from the users and gives them to the operating system for processing. Shell is an example of a CLI(command line interface). Bash is one of the most popular shell programs available on Linux servers. Other popular shell programs are zsh, ksh and tcsh. Terminal is a program that opens a window and lets you interact with the shell. Some popular examples of terminals are gnome-terminal, xterm, konsole etc. Linux users do use the terms shell, terminal, prompt, console etc. interchangeably. In simple terms, these all refer to a way of taking commands from the user.","title":"Shell vs Terminal"},{"location":"linux_basics/linux_server_administration/","text":"Linux Server Administration In this course will try to cover some of the common tasks that a linux server administrator performs. We will first try to understand what a particular command does and then try to understand the commands using examples. Do keep in mind that it's very important to practice the Linux commands on your own. Lab Environment Setup Install docker on your system - https://docs.docker.com/engine/install/ We will be running all the commands on Red Hat Enterprise Linux (RHEL) 8 system. We will run most of the commands used in this module in the above Docker container. Multi-User Operating Systems An operating system is considered as multi-user if it allows multiple people/users to use a computer and not affect each other's files and preferences. Linux based operating systems are multi-user in nature as it allows multiple users to access the system at the same time. A typical computer will only have one keyboard and monitor but multiple users can log in via SSH if the computer is connected to the network. We will cover more about SSH later. As a server administrator, we are mostly concerned with the Linux servers which are physically present at a very large distance from us. We can connect to these servers with the help of remote login methods like SSH. Since Linux supports multiple users, we need to have a method which can protect the users from each other. One user should not be able to access and modify files of other users User/Group Management Each user in Linux has an associated user ID called UID attached to him Each user also has a home directory and a login shell associated with him/her A group is a collection of one or more users. A group makes it easier to share permissions among a group of users. Each group has a group ID called GID associated with it. id command id command can be used to find the uid and gid associated with an user. It also lists down the groups to which the user belongs to. The uid and gid associated with the root user is 0. A good way to find out the current user in Linux is to use the whoami command. \"root\" user or superuser is the most privileged user with unrestricted access to all the resources on the system. It has UID 0 Important files associated with users/groups /etc/passwd Stores the user name, the uid, the gid, the home directory, the login shell etc /etc/shadow Stores the password associated with the users /etc/group Stores information about different groups on the system If you want to understand each filed discussed in the above outputs, you can go through below links: https://tldp.org/LDP/lame/LAME/linux-admin-made-easy/shadow-file-formats.html https://tldp.org/HOWTO/User-Authentication-HOWTO/x71.html Important commands for managing users Some of the commands which are used frequently to manage users/groups on Linux are following: useradd - Creates a new user passwd - Adds or modifies passwords for a user usermod - Modifies attributes of an user userdel - Deletes an user useradd The useradd command adds a new user in Linux. We will create a new user 'shivam'. We will also verify that the user has been created by tailing the /etc/passwd file. The uid and gid are 1000 for the newly created user. The home directory assigned to the user is /home/shivam and the login shell assigned is /bin/bash. Do note that the user home directory and login shell can be modified later on. If we do not specify any value for attributes like home directory or login shell, default values will be assigned to the user. We can also override these default values when creating a new user. passwd The passwd command is used to create or modify passwords for a user. In the above examples, we have not assigned any password for users 'shivam' or 'amit' while creating them. \\\"!!\\\" in an account entry in shadow means the account of an user has been created, but not yet given a password. Let's now try to create a password for user \"shivam\". Do remember the password as we will be later using examples where it will be useful. Also, let's change the password for the root user now. When we switch from a normal user to root user, it will request you for a password. Also, when you login using root user, the password will be asked. usermod The usermod command is used to modify the attributes of an user like the home directory or the shell. Let's try to modify the login shell of user \"amit\" to \"/bin/bash\". In a similar way, you can also modify many other attributes for a user. Try 'usermod -h' for a list of attributes you can modify. userdel The userdel command is used to remove a user on Linux. Once we remove a user, all the information related to that user will be removed. Let's try to delete the user \"amit\". After deleting the user, you will not find the entry for that user in \"/etc/passwd\" or \"/etc/shadow\" file. Important commands for managing groups Commands for managing groups are quite similar to the commands used for managing users. Each command is not explained in detail here as they are quite similar. You can try running these commands on your system. groupadd \\<group_name> Creates a new group groupmod \\<group_name> Modifies attributes of a group groupdel \\<group_name> Deletes a group gpasswd \\<group_name> Modifies password for group We will now try to add user \"shivam\" to the group we have created above. Becoming a Superuser Before running the below commands, do make sure that you have set up a password for user \"shivam\" and user \"root\" using the passwd command described in the above section. The su command can be used to switch users in Linux. Let's now try to switch to user \"shivam\". Let's now try to open the \"/etc/shadow\" file. The operating system didn't allow the user \"shivam\" to read the content of the \"/etc/shadow\" file. This is an important file in Linux which stores the passwords of users. This file can only be accessed by root or users who have the superuser privileges. The sudo command allows a user to run commands with the security privileges of the root user. Do remember that the root user has all the privileges on a system. We can also use su command to switch to the root user and open the above file but doing that will require the password of the root user. An alternative way which is preferred on most modern operating systems is to use sudo command for becoming a superuser. Using this way, a user has to enter his/her password and they need to be a part of the sudo group. How to provide superpriveleges to other users ? Let's first switch to the root user using su command. Do note that using the below command will need you to enter the password for the root user. In case, you forgot to set a password for the root user, type \"exit\" and you will be back as the root user. Now, set up a password using the passwd command. The file /etc/sudoers holds the names of users permitted to invoke sudo . In redhat operating systems, this file is not present by default. We will need to install sudo. We will discuss the yum command in detail in later sections. Try to open the \"/etc/sudoers\" file on the system. The file has a lot of information. This file stores the rules that users must follow when running the sudo command. For example, root is allowed to run any commands from anywhere. One easy way of providing root access to users is to add them to a group which has permissions to run all the commands. \"wheel\" is a group in redhat Linux with such privileges. Let's add the user \"shivam\" to this group so that it also has sudo privileges. Let's now switch back to user \"shivam\" and try to access the \"/etc/shadow\" file. We need to use sudo before running the command since it can only be accessed with the sudo privileges. We have already given sudo privileges to user \u201cshivam\u201d by adding him to the group \u201cwheel\u201d. File Permissions On a Linux operating system, each file and directory is assigned access permissions for the owner of the file, the members of a group of related users and everybody else. This is to make sure that one user is not allowed to access the files and resources of another user. To see the permissions of a file, we can use the ls command. Let's look at the permissions of /etc/passwd file. Let's go over some of the important fields in the output that are related to file permissions. Chmod command The chmod command is used to modify files and directories permissions in Linux. The chmod command accepts permissions in as a numerical argument. We can think of permission as a series of bits with 1 representing True or allowed and 0 representing False or not allowed. Permission rwx Binary Decimal Read, write and execute rwx 111 7 Read and write rw- 110 6 Read and execute r-x 101 5 Read only r-- 100 4 Write and execute -wx 011 3 Write only -w- 010 2 Execute only --x 001 1 None --- 000 0 We will now create a new file and check the permission of the file. The group owner doesn't have the permission to write to this file. Let's give the group owner or root the permission to write to it using chmod command. Chmod command can be also used to change the permissions of a directory in the similar way. Chown command The chown command is used to change the owner of files or directories in Linux. Command syntax: chown \\<new_owner> \\<file_name> In case, we do not have sudo privileges, we need to use sudo command . Let's switch to user 'shivam' and try changing the owner. We have also changed the owner of the file to root before running the below command. Chown command can also be used to change the owner of a directory in the similar way. Chgrp command The chgrp command can be used to change the group ownership of files or directories in Linux. The syntax is very similar to that of chown command. Chgrp command can also be used to change the owner of a directory in the similar way. SSH Command The ssh command is used for logging into the remote systems, transfer files between systems and for executing commands on a remote machine. SSH stands for secure shell and is used to provide an encrypted secured connection between two hosts over an insecure network like the internet. Reference: https://www.ssh.com/ssh/command/ We will now discuss passwordless authentication which is secure and most commonly used for ssh authentication. Passwordless Authentication Using SSH Using this method, we can ssh into hosts without entering the password. This method is also useful when we want some scripts to perform ssh-related tasks. Passwordless authentication requires the use of a public and private key pair. As the name implies, the public key can be shared with anyone but the private key should be kept private. Lets not get into the details of how this authentication works. You can read more about it here Steps for setting up a passwordless authentication with a remote host: Generating public-private key pair If we already have a key pair stored in \\~/.ssh directory, we will not need to generate keys again. Install openssh package which contains all the commands related to ssh. Generate a key pair using the ssh-keygen command. One can choose the default values for all prompts. After running the ssh-keygen command successfully, we should see two keys present in the \\~/.ssh directory. Id_rsa is the private key and id_rsa.pub is the public key. Do note that the private key can only be read and modified by you. Transferring the public key to the remote host There are multiple ways to transfer the public key to the remote server. We will look at one of the most common ways of doing it using the ssh-id-copy command. Install the openssh-clients package to use ssh-id-copy command. Use the ssh-id-copy command to copy your public key to the remote host. Now, ssh into the remote host using the password authentication. Our public key should be there in \\~/.ssh/authorized_keys now. \\~/.ssh/authorized_key contains a list of public keys. The users associated with these public keys have the ssh access into the remote host. How to run commands on a remote host ? General syntax: ssh \\<user>@\\<hostname/hostip> \\<command> How to transfer files from one host to another host ? General syntax: scp \\<source> \\<destination> Package Management Package management is the process of installing and managing software on the system. We can install the packages which we require from the Linux package distributor. Different distributors use different packaging systems. Packaging systems Distributions Debian style (.deb) Debian, Ubuntu Red Hat style (.rpm) Fedora, CentOS, Red Hat Enterprise Linux Popular Packaging Systems in Linux Command Description yum install \\<package_name> Installs a package on your system yum update \\<package_name> Updates a package to it's latest available version yum remove \\<package_name> Removes a package from your system yum search \\<keyword> Searches for a particular keyword DNF is the successor to YUM which is now used in Fedora for installing and managing packages. DNF may replace YUM in the future on all RPM based Linux distributions. We did find an exact match for the keyword httpd when we searched using yum search command. Let's now install the httpd package. After httpd is installed, we will use the yum remove command to remove httpd package. Process Management In this section, we will study about some useful commands that can be used to monitor the processes on Linux systems. ps (process status) The ps command is used to know the information of a process or list of processes. If you get an error \"ps command not found\" while running ps command, do install procps package. ps without any arguments is not very useful. Let's try to list all the processes on the system by using the below command. Reference: https://unix.stackexchange.com/questions/106847/what-does-aux-mean-in-ps-aux We can use an additional argument with ps command to list the information about the process with a specific process ID. We can use grep in combination with ps command to list only specific processes. top The top command is used to show information about Linux processes running on the system in real time. It also shows a summary of the system information. For each process, top lists down the process ID, owner, priority, state, cpu utilization, memory utilization and much more information. It also lists down the memory utilization and cpu utilization of the system as a whole along with system uptime and cpu load average. Memory Management In this section, we will study about some useful commands that can be used to view information about the system memory. free The free command is used to display the memory usage of the system. The command displays the total free and used space available in the RAM along with space occupied by the caches/buffers. free command by default shows the memory usage in kilobytes. We can use an additional argument to get the data in human-readable format. vmstat The vmstat command can be used to display the memory usage along with additional information about io and cpu usage. Checking Disk Space In this section, we will study about some useful commands that can be used to view disk space on Linux. df (disk free) The df command is used to display the free and available space for each mounted file system. du (disk usage) The du command is used to display disk usage of files and directories on the system. The below command can be used to display the top 5 largest directories in the root directory. Daemons A computer program that runs as a background process is called a daemon. Traditionally, the name of daemon processes ended with d - sshd, httpd etc. We cannot interact with a daemon process as they run in the background. Services and daemons are used interchangeably most of the time. Systemd Systemd is a system and service manager for Linux operating systems. Systemd units are the building blocks of systemd. These units are represented by unit configuration files. The below examples shows the unit configuration files available at /usr/lib/systemd/system which are distributed by installed RPM packages. We are more interested in the configuration file that ends with service as these are service units. Managing System Services Service units end with .service file extension. Systemctl command can be used to start/stop/restart the services managed by systemd. Command Description systemctl start name.service Starts a service systemctl stop name.service Stops a service systemctl restart name.service Restarts a service systemctl status name.service Check the status of a service systemctl reload name.service Reload the configuration of a service Logs In this section, we will talk about some important files and directories which can be very useful for viewing system logs and applications logs in Linux. These logs can be very useful when you are troubleshooting on the system.","title":"Server Administration"},{"location":"linux_basics/linux_server_administration/#linux-server-administration","text":"In this course will try to cover some of the common tasks that a linux server administrator performs. We will first try to understand what a particular command does and then try to understand the commands using examples. Do keep in mind that it's very important to practice the Linux commands on your own.","title":"Linux Server Administration"},{"location":"linux_basics/linux_server_administration/#lab-environment-setup","text":"Install docker on your system - https://docs.docker.com/engine/install/ We will be running all the commands on Red Hat Enterprise Linux (RHEL) 8 system. We will run most of the commands used in this module in the above Docker container.","title":"Lab Environment Setup"},{"location":"linux_basics/linux_server_administration/#multi-user-operating-systems","text":"An operating system is considered as multi-user if it allows multiple people/users to use a computer and not affect each other's files and preferences. Linux based operating systems are multi-user in nature as it allows multiple users to access the system at the same time. A typical computer will only have one keyboard and monitor but multiple users can log in via SSH if the computer is connected to the network. We will cover more about SSH later. As a server administrator, we are mostly concerned with the Linux servers which are physically present at a very large distance from us. We can connect to these servers with the help of remote login methods like SSH. Since Linux supports multiple users, we need to have a method which can protect the users from each other. One user should not be able to access and modify files of other users","title":"Multi-User Operating Systems"},{"location":"linux_basics/linux_server_administration/#usergroup-management","text":"Each user in Linux has an associated user ID called UID attached to him Each user also has a home directory and a login shell associated with him/her A group is a collection of one or more users. A group makes it easier to share permissions among a group of users. Each group has a group ID called GID associated with it.","title":"User/Group Management"},{"location":"linux_basics/linux_server_administration/#id-command","text":"id command can be used to find the uid and gid associated with an user. It also lists down the groups to which the user belongs to. The uid and gid associated with the root user is 0. A good way to find out the current user in Linux is to use the whoami command. \"root\" user or superuser is the most privileged user with unrestricted access to all the resources on the system. It has UID 0","title":"id command"},{"location":"linux_basics/linux_server_administration/#important-files-associated-with-usersgroups","text":"/etc/passwd Stores the user name, the uid, the gid, the home directory, the login shell etc /etc/shadow Stores the password associated with the users /etc/group Stores information about different groups on the system If you want to understand each filed discussed in the above outputs, you can go through below links: https://tldp.org/LDP/lame/LAME/linux-admin-made-easy/shadow-file-formats.html https://tldp.org/HOWTO/User-Authentication-HOWTO/x71.html","title":"Important files associated with users/groups"},{"location":"linux_basics/linux_server_administration/#important-commands-for-managing-users","text":"Some of the commands which are used frequently to manage users/groups on Linux are following: useradd - Creates a new user passwd - Adds or modifies passwords for a user usermod - Modifies attributes of an user userdel - Deletes an user","title":"Important commands for managing users"},{"location":"linux_basics/linux_server_administration/#useradd","text":"The useradd command adds a new user in Linux. We will create a new user 'shivam'. We will also verify that the user has been created by tailing the /etc/passwd file. The uid and gid are 1000 for the newly created user. The home directory assigned to the user is /home/shivam and the login shell assigned is /bin/bash. Do note that the user home directory and login shell can be modified later on. If we do not specify any value for attributes like home directory or login shell, default values will be assigned to the user. We can also override these default values when creating a new user.","title":"useradd"},{"location":"linux_basics/linux_server_administration/#passwd","text":"The passwd command is used to create or modify passwords for a user. In the above examples, we have not assigned any password for users 'shivam' or 'amit' while creating them. \\\"!!\\\" in an account entry in shadow means the account of an user has been created, but not yet given a password. Let's now try to create a password for user \"shivam\". Do remember the password as we will be later using examples where it will be useful. Also, let's change the password for the root user now. When we switch from a normal user to root user, it will request you for a password. Also, when you login using root user, the password will be asked.","title":"passwd"},{"location":"linux_basics/linux_server_administration/#usermod","text":"The usermod command is used to modify the attributes of an user like the home directory or the shell. Let's try to modify the login shell of user \"amit\" to \"/bin/bash\". In a similar way, you can also modify many other attributes for a user. Try 'usermod -h' for a list of attributes you can modify.","title":"usermod"},{"location":"linux_basics/linux_server_administration/#userdel","text":"The userdel command is used to remove a user on Linux. Once we remove a user, all the information related to that user will be removed. Let's try to delete the user \"amit\". After deleting the user, you will not find the entry for that user in \"/etc/passwd\" or \"/etc/shadow\" file.","title":"userdel"},{"location":"linux_basics/linux_server_administration/#important-commands-for-managing-groups","text":"Commands for managing groups are quite similar to the commands used for managing users. Each command is not explained in detail here as they are quite similar. You can try running these commands on your system. groupadd \\<group_name> Creates a new group groupmod \\<group_name> Modifies attributes of a group groupdel \\<group_name> Deletes a group gpasswd \\<group_name> Modifies password for group We will now try to add user \"shivam\" to the group we have created above.","title":"Important commands for managing groups"},{"location":"linux_basics/linux_server_administration/#becoming-a-superuser","text":"Before running the below commands, do make sure that you have set up a password for user \"shivam\" and user \"root\" using the passwd command described in the above section. The su command can be used to switch users in Linux. Let's now try to switch to user \"shivam\". Let's now try to open the \"/etc/shadow\" file. The operating system didn't allow the user \"shivam\" to read the content of the \"/etc/shadow\" file. This is an important file in Linux which stores the passwords of users. This file can only be accessed by root or users who have the superuser privileges. The sudo command allows a user to run commands with the security privileges of the root user. Do remember that the root user has all the privileges on a system. We can also use su command to switch to the root user and open the above file but doing that will require the password of the root user. An alternative way which is preferred on most modern operating systems is to use sudo command for becoming a superuser. Using this way, a user has to enter his/her password and they need to be a part of the sudo group. How to provide superpriveleges to other users ? Let's first switch to the root user using su command. Do note that using the below command will need you to enter the password for the root user. In case, you forgot to set a password for the root user, type \"exit\" and you will be back as the root user. Now, set up a password using the passwd command. The file /etc/sudoers holds the names of users permitted to invoke sudo . In redhat operating systems, this file is not present by default. We will need to install sudo. We will discuss the yum command in detail in later sections. Try to open the \"/etc/sudoers\" file on the system. The file has a lot of information. This file stores the rules that users must follow when running the sudo command. For example, root is allowed to run any commands from anywhere. One easy way of providing root access to users is to add them to a group which has permissions to run all the commands. \"wheel\" is a group in redhat Linux with such privileges. Let's add the user \"shivam\" to this group so that it also has sudo privileges. Let's now switch back to user \"shivam\" and try to access the \"/etc/shadow\" file. We need to use sudo before running the command since it can only be accessed with the sudo privileges. We have already given sudo privileges to user \u201cshivam\u201d by adding him to the group \u201cwheel\u201d.","title":"Becoming a Superuser"},{"location":"linux_basics/linux_server_administration/#file-permissions","text":"On a Linux operating system, each file and directory is assigned access permissions for the owner of the file, the members of a group of related users and everybody else. This is to make sure that one user is not allowed to access the files and resources of another user. To see the permissions of a file, we can use the ls command. Let's look at the permissions of /etc/passwd file. Let's go over some of the important fields in the output that are related to file permissions.","title":"File Permissions"},{"location":"linux_basics/linux_server_administration/#chmod-command","text":"The chmod command is used to modify files and directories permissions in Linux. The chmod command accepts permissions in as a numerical argument. We can think of permission as a series of bits with 1 representing True or allowed and 0 representing False or not allowed. Permission rwx Binary Decimal Read, write and execute rwx 111 7 Read and write rw- 110 6 Read and execute r-x 101 5 Read only r-- 100 4 Write and execute -wx 011 3 Write only -w- 010 2 Execute only --x 001 1 None --- 000 0 We will now create a new file and check the permission of the file. The group owner doesn't have the permission to write to this file. Let's give the group owner or root the permission to write to it using chmod command. Chmod command can be also used to change the permissions of a directory in the similar way.","title":"Chmod command"},{"location":"linux_basics/linux_server_administration/#chown-command","text":"The chown command is used to change the owner of files or directories in Linux. Command syntax: chown \\<new_owner> \\<file_name> In case, we do not have sudo privileges, we need to use sudo command . Let's switch to user 'shivam' and try changing the owner. We have also changed the owner of the file to root before running the below command. Chown command can also be used to change the owner of a directory in the similar way.","title":"Chown command"},{"location":"linux_basics/linux_server_administration/#chgrp-command","text":"The chgrp command can be used to change the group ownership of files or directories in Linux. The syntax is very similar to that of chown command. Chgrp command can also be used to change the owner of a directory in the similar way.","title":"Chgrp command"},{"location":"linux_basics/linux_server_administration/#ssh-command","text":"The ssh command is used for logging into the remote systems, transfer files between systems and for executing commands on a remote machine. SSH stands for secure shell and is used to provide an encrypted secured connection between two hosts over an insecure network like the internet. Reference: https://www.ssh.com/ssh/command/ We will now discuss passwordless authentication which is secure and most commonly used for ssh authentication.","title":"SSH Command"},{"location":"linux_basics/linux_server_administration/#passwordless-authentication-using-ssh","text":"Using this method, we can ssh into hosts without entering the password. This method is also useful when we want some scripts to perform ssh-related tasks. Passwordless authentication requires the use of a public and private key pair. As the name implies, the public key can be shared with anyone but the private key should be kept private. Lets not get into the details of how this authentication works. You can read more about it here Steps for setting up a passwordless authentication with a remote host: Generating public-private key pair If we already have a key pair stored in \\~/.ssh directory, we will not need to generate keys again. Install openssh package which contains all the commands related to ssh. Generate a key pair using the ssh-keygen command. One can choose the default values for all prompts. After running the ssh-keygen command successfully, we should see two keys present in the \\~/.ssh directory. Id_rsa is the private key and id_rsa.pub is the public key. Do note that the private key can only be read and modified by you. Transferring the public key to the remote host There are multiple ways to transfer the public key to the remote server. We will look at one of the most common ways of doing it using the ssh-id-copy command. Install the openssh-clients package to use ssh-id-copy command. Use the ssh-id-copy command to copy your public key to the remote host. Now, ssh into the remote host using the password authentication. Our public key should be there in \\~/.ssh/authorized_keys now. \\~/.ssh/authorized_key contains a list of public keys. The users associated with these public keys have the ssh access into the remote host.","title":"Passwordless Authentication Using SSH"},{"location":"linux_basics/linux_server_administration/#how-to-run-commands-on-a-remote-host","text":"General syntax: ssh \\<user>@\\<hostname/hostip> \\<command>","title":"How to run commands on a remote host ?"},{"location":"linux_basics/linux_server_administration/#how-to-transfer-files-from-one-host-to-another-host","text":"General syntax: scp \\<source> \\<destination>","title":"How to transfer files from one host to another host ?"},{"location":"linux_basics/linux_server_administration/#package-management","text":"Package management is the process of installing and managing software on the system. We can install the packages which we require from the Linux package distributor. Different distributors use different packaging systems. Packaging systems Distributions Debian style (.deb) Debian, Ubuntu Red Hat style (.rpm) Fedora, CentOS, Red Hat Enterprise Linux Popular Packaging Systems in Linux Command Description yum install \\<package_name> Installs a package on your system yum update \\<package_name> Updates a package to it's latest available version yum remove \\<package_name> Removes a package from your system yum search \\<keyword> Searches for a particular keyword DNF is the successor to YUM which is now used in Fedora for installing and managing packages. DNF may replace YUM in the future on all RPM based Linux distributions. We did find an exact match for the keyword httpd when we searched using yum search command. Let's now install the httpd package. After httpd is installed, we will use the yum remove command to remove httpd package.","title":"Package Management"},{"location":"linux_basics/linux_server_administration/#process-management","text":"In this section, we will study about some useful commands that can be used to monitor the processes on Linux systems.","title":"Process Management"},{"location":"linux_basics/linux_server_administration/#ps-process-status","text":"The ps command is used to know the information of a process or list of processes. If you get an error \"ps command not found\" while running ps command, do install procps package. ps without any arguments is not very useful. Let's try to list all the processes on the system by using the below command. Reference: https://unix.stackexchange.com/questions/106847/what-does-aux-mean-in-ps-aux We can use an additional argument with ps command to list the information about the process with a specific process ID. We can use grep in combination with ps command to list only specific processes.","title":"ps (process status)"},{"location":"linux_basics/linux_server_administration/#top","text":"The top command is used to show information about Linux processes running on the system in real time. It also shows a summary of the system information. For each process, top lists down the process ID, owner, priority, state, cpu utilization, memory utilization and much more information. It also lists down the memory utilization and cpu utilization of the system as a whole along with system uptime and cpu load average.","title":"top"},{"location":"linux_basics/linux_server_administration/#memory-management","text":"In this section, we will study about some useful commands that can be used to view information about the system memory.","title":"Memory Management"},{"location":"linux_basics/linux_server_administration/#free","text":"The free command is used to display the memory usage of the system. The command displays the total free and used space available in the RAM along with space occupied by the caches/buffers. free command by default shows the memory usage in kilobytes. We can use an additional argument to get the data in human-readable format.","title":"free"},{"location":"linux_basics/linux_server_administration/#vmstat","text":"The vmstat command can be used to display the memory usage along with additional information about io and cpu usage.","title":"vmstat"},{"location":"linux_basics/linux_server_administration/#checking-disk-space","text":"In this section, we will study about some useful commands that can be used to view disk space on Linux.","title":"Checking Disk Space"},{"location":"linux_basics/linux_server_administration/#df-disk-free","text":"The df command is used to display the free and available space for each mounted file system.","title":"df (disk free)"},{"location":"linux_basics/linux_server_administration/#du-disk-usage","text":"The du command is used to display disk usage of files and directories on the system. The below command can be used to display the top 5 largest directories in the root directory.","title":"du (disk usage)"},{"location":"linux_basics/linux_server_administration/#daemons","text":"A computer program that runs as a background process is called a daemon. Traditionally, the name of daemon processes ended with d - sshd, httpd etc. We cannot interact with a daemon process as they run in the background. Services and daemons are used interchangeably most of the time.","title":"Daemons"},{"location":"linux_basics/linux_server_administration/#systemd","text":"Systemd is a system and service manager for Linux operating systems. Systemd units are the building blocks of systemd. These units are represented by unit configuration files. The below examples shows the unit configuration files available at /usr/lib/systemd/system which are distributed by installed RPM packages. We are more interested in the configuration file that ends with service as these are service units.","title":"Systemd"},{"location":"linux_basics/linux_server_administration/#managing-system-services","text":"Service units end with .service file extension. Systemctl command can be used to start/stop/restart the services managed by systemd. Command Description systemctl start name.service Starts a service systemctl stop name.service Stops a service systemctl restart name.service Restarts a service systemctl status name.service Check the status of a service systemctl reload name.service Reload the configuration of a service","title":"Managing System Services"},{"location":"linux_basics/linux_server_administration/#logs","text":"In this section, we will talk about some important files and directories which can be very useful for viewing system logs and applications logs in Linux. These logs can be very useful when you are troubleshooting on the system.","title":"Logs"},{"location":"linux_networking/conclusion/","text":"Conclusion With this we have traversed through the TCP/IP stack completely. We hope there will be a different perspective when one opens any website in the browser post the course. During the course we have also dissected what are common tasks in this pipeline which falls under the ambit of SRE. Post Training Exercises Setup own DNS resolver in the dev environment which acts as an authoritative DNS server for example.com and forwarder for other domains. Update resolv.conf to use the new DNS resolver running in localhost Set up a site dummy.example.com in localhost and run a webserver with a self signed certificate. Update the trusted CAs or pass self signed CA\u2019s public key as a parameter so that curl https://dummy.example.com -v works properly without self signed cert warning Update the routing table to use another host(container/VM) in the same network as a gateway for 8.8.8.8/32 and run ping 8.8.8.8. Do the packet capture on the new gateway to see L3 hop is working as expected(might need to disable icmp_redirect)","title":"Conclusion"},{"location":"linux_networking/conclusion/#conclusion","text":"With this we have traversed through the TCP/IP stack completely. We hope there will be a different perspective when one opens any website in the browser post the course. During the course we have also dissected what are common tasks in this pipeline which falls under the ambit of SRE.","title":"Conclusion"},{"location":"linux_networking/conclusion/#post-training-exercises","text":"Setup own DNS resolver in the dev environment which acts as an authoritative DNS server for example.com and forwarder for other domains. Update resolv.conf to use the new DNS resolver running in localhost Set up a site dummy.example.com in localhost and run a webserver with a self signed certificate. Update the trusted CAs or pass self signed CA\u2019s public key as a parameter so that curl https://dummy.example.com -v works properly without self signed cert warning Update the routing table to use another host(container/VM) in the same network as a gateway for 8.8.8.8/32 and run ping 8.8.8.8. Do the packet capture on the new gateway to see L3 hop is working as expected(might need to disable icmp_redirect)","title":"Post Training Exercises"},{"location":"linux_networking/dns/","text":"DNS Domain Names are the simple human-readable names for websites. The Internet understands only IP addresses, but since memorizing incoherent numbers is not practical, domain names are used instead. These domain names are translated into IP addresses by the DNS infrastructure. When somebody tries to open www.linkedin.com in the browser, the browser tries to convert www.linkedin.com to an IP Address. This process is called DNS resolution. A simple pseudocode depicting this process looks this ip, err = getIPAddress(domainName) if err: print(\u201cunknown Host Exception while trying to resolve:%s\u201d.format(domainName)) Now let\u2019s try to understand what happens inside the getIPAddress function. The browser would have a DNS cache of its own where it checks if there is a mapping for the domainName to an IP Address already available, in which case the browser uses that IP address. If no such mapping exists, the browser calls gethostbyname syscall to ask the operating system to find the IP address for the given domainName def getIPAddress(domainName): resp, fail = lookupCache(domainName) If not fail: return resp else: resp, err = gethostbyname(domainName) if err: return null, err else: return resp Now lets understand what operating system kernel does when the gethostbyname function is called. The Linux operating system looks at the file /etc/nsswitch.conf file which usually has a line hosts: files dns This line means the OS has to look up first in file (/etc/hosts) and then use DNS protocol to do the resolution if there is no match in /etc/hosts. The file /etc/hosts is of format IPAddress FQDN [FQDN].* 127.0.0.1 localhost.localdomain localhost ::1 localhost.localdomain localhost If a match exists for a domain in this file then that IP address is returned by the OS. Lets add a line to this file 127.0.0.1 test.linkedin.com And then do ping test.linkedin.com ping test.linkedin.com -n PING test.linkedin.com (127.0.0.1) 56(84) bytes of data. 64 bytes from 127.0.0.1: icmp_seq=1 ttl=64 time=0.047 ms 64 bytes from 127.0.0.1: icmp_seq=2 ttl=64 time=0.036 ms 64 bytes from 127.0.0.1: icmp_seq=3 ttl=64 time=0.037 ms As mentioned earlier, if no match exists in /etc/hosts, the OS tries to do a DNS resolution using the DNS protocol. The linux system makes a DNS request to the first IP in /etc/resolv.conf. If there is no response, requests are sent to subsequent servers in resolv.conf. These servers in resolv.conf are called DNS resolvers. The DNS resolvers are populated by DHCP or statically configured by an administrator. Dig is a userspace DNS system which creates and sends requests to DNS resolvers and prints the response it receives to the console. #run this command in one shell to capture all DNS requests sudo tcpdump -s 0 -A -i any port 53 #make a dig request from another shell dig linkedin.com 13:19:54.432507 IP 172.19.209.122.56497 > 172.23.195.101.53: 527+ [1au] A? linkedin.com. (41) ....E..E....@.n....z...e...5.1.:... .........linkedin.com.......)........ 13:19:54.485131 IP 172.23.195.101.53 > 172.19.209.122.56497: 527 1/0/1 A 108.174.10.10 (57) ....E..U..@.|. ....e...z.5...A...............linkedin.com..............3..l. ..)........ The packet capture shows a request is made to 172.23.195.101:53 (this is the resolver in /etc/resolv.conf) for linkedin.com and a response is received from 172.23.195.101 with the IP address of linkedin.com 108.174.10.10 Now let's try to understand how DNS resolver tries to find the IP address of linkedin.com. DNS resolver first looks at its cache. Since many devices in the network can query for the domain name linkedin.com, the name resolution result may already exist in the cache. If there is a cache miss, it starts the DNS resolution process. The DNS server breaks \u201clinkedin.com\u201d to \u201c.\u201d, \u201ccom.\u201d and \u201clinkedin.com.\u201d and starts DNS resolution from \u201c.\u201d. The \u201c.\u201d is called root domain and those IPs are known to the DNS resolver software. DNS resolver queries the root domain Nameservers to find the right nameservers which could respond regarding details for \"com.\". The address of the authoritative nameserver of \u201ccom.\u201d is returned. Now the DNS resolution service contacts the authoritative nameserver for \u201ccom.\u201d to fetch the authoritative nameserver for \u201clinkedin.com\u201d. Once an authoritative nameserver of \u201clinkedin.com\u201d is known, the resolver contacts Linkedin\u2019s nameserver to provide the IP address of \u201clinkedin.com\u201d. This whole process can be visualized by running dig +trace linkedin.com linkedin.com. 3600 IN A 108.174.10.10 This DNS response has 5 fields where the first field is the request and the last field is the response. The second field is the Time to Live which says how long the DNS response is valid in seconds. In this case this mapping of linkedin.com is valid for 1 hour. This is how the resolvers and application(browser) maintain their cache. Any request for linkedin.com beyond 1 hour will be treated as a cache miss as the mapping has expired its TTL and the whole process has to be redone. The 4th field says the type of DNS response/request. Some of the various DNS query types are A, AAAA, NS, TXT, PTR, MX and CNAME. - A record returns IPV4 address of the domain name - AAAA record returns the IPV6 address of the domain Name - NS record returns the authoritative nameserver for the domain name - CNAME records are aliases to the domain names. Some domains point to other domain names and resolving the latter domain name gives an IP which is used as an IP for the former domain name as well. Example www.linkedin.com\u2019s IP address is the same as 2-01-2c3e-005a.cdx.cedexis.net. - For the brevity we are not discussing other DNS record types, the RFC of each of these records are available here . dig A linkedin.com +short 108.174.10.10 dig AAAA linkedin.com +short 2620:109:c002::6cae:a0a dig NS linkedin.com +short dns3.p09.nsone.net. dns4.p09.nsone.net. dns2.p09.nsone.net. ns4.p43.dynect.net. ns1.p43.dynect.net. ns2.p43.dynect.net. ns3.p43.dynect.net. dns1.p09.nsone.net. dig www.linkedin.com CNAME +short 2-01-2c3e-005a.cdx.cedexis.net. Armed with these fundamentals of DNS lets see usecases where DNS is used by SREs. Applications in SRE role This section covers some of the common solutions SRE can derive from DNS 1. Every company has to have its internal DNS infrastructure for intranet sites and internal services like databases and other internal applications like wiki. So there has to be a DNS infrastructure maintained for those domain names by the infrastructure team. This DNS infrastructure has to be optimized and scaled so that it doesn\u2019t become a single point of failure. Failure of the internal DNS infrastructure can cause API calls of microservices to fail and other cascading effects. 2. DNS can also be used for discovering services. For example the hostname serviceb.internal.example.com could list instances which run service b internally in example.com company. Cloud providers provide options to enable DNS discovery( example ) 3. DNS is used by cloud provides and CDN providers to scale their services. In Azure/AWS, Load Balancers are given a CNAME instead of IPAddress. They update the IPAddress of the Loadbalancers as they scale by changing the IP Address of alias domain names. This is one of the reasons why A records of such alias domains are short lived like 1 minute. 4. DNS can also be used to make clients get IP addresses closer to their location so that their HTTP calls can be responded faster if the company has a presence geographically distributed. 5. SRE also has to understand since there is no verification in DNS infrastructure, these responses can be spoofed. This is safeguarded by other protocols like HTTPS(dealt later). DNSSEC protects from forged or manipulated DNS responses. 6. Stale DNS cache can be a problem. Some apps might still be using expired DNS records for their api calls. This is something SRE has to be wary of when doing maintenance. 7. DNS Loadbalancing and service discovery also has to understand TTL and the servers can be removed from the pool only after waiting till TTL post the changes are made to DNS records. If this is not done, a certain portion of the traffic will fail as the server is removed before the TTL.","title":"DNS"},{"location":"linux_networking/dns/#dns","text":"Domain Names are the simple human-readable names for websites. The Internet understands only IP addresses, but since memorizing incoherent numbers is not practical, domain names are used instead. These domain names are translated into IP addresses by the DNS infrastructure. When somebody tries to open www.linkedin.com in the browser, the browser tries to convert www.linkedin.com to an IP Address. This process is called DNS resolution. A simple pseudocode depicting this process looks this ip, err = getIPAddress(domainName) if err: print(\u201cunknown Host Exception while trying to resolve:%s\u201d.format(domainName)) Now let\u2019s try to understand what happens inside the getIPAddress function. The browser would have a DNS cache of its own where it checks if there is a mapping for the domainName to an IP Address already available, in which case the browser uses that IP address. If no such mapping exists, the browser calls gethostbyname syscall to ask the operating system to find the IP address for the given domainName def getIPAddress(domainName): resp, fail = lookupCache(domainName) If not fail: return resp else: resp, err = gethostbyname(domainName) if err: return null, err else: return resp Now lets understand what operating system kernel does when the gethostbyname function is called. The Linux operating system looks at the file /etc/nsswitch.conf file which usually has a line hosts: files dns This line means the OS has to look up first in file (/etc/hosts) and then use DNS protocol to do the resolution if there is no match in /etc/hosts. The file /etc/hosts is of format IPAddress FQDN [FQDN].* 127.0.0.1 localhost.localdomain localhost ::1 localhost.localdomain localhost If a match exists for a domain in this file then that IP address is returned by the OS. Lets add a line to this file 127.0.0.1 test.linkedin.com And then do ping test.linkedin.com ping test.linkedin.com -n PING test.linkedin.com (127.0.0.1) 56(84) bytes of data. 64 bytes from 127.0.0.1: icmp_seq=1 ttl=64 time=0.047 ms 64 bytes from 127.0.0.1: icmp_seq=2 ttl=64 time=0.036 ms 64 bytes from 127.0.0.1: icmp_seq=3 ttl=64 time=0.037 ms As mentioned earlier, if no match exists in /etc/hosts, the OS tries to do a DNS resolution using the DNS protocol. The linux system makes a DNS request to the first IP in /etc/resolv.conf. If there is no response, requests are sent to subsequent servers in resolv.conf. These servers in resolv.conf are called DNS resolvers. The DNS resolvers are populated by DHCP or statically configured by an administrator. Dig is a userspace DNS system which creates and sends requests to DNS resolvers and prints the response it receives to the console. #run this command in one shell to capture all DNS requests sudo tcpdump -s 0 -A -i any port 53 #make a dig request from another shell dig linkedin.com 13:19:54.432507 IP 172.19.209.122.56497 > 172.23.195.101.53: 527+ [1au] A? linkedin.com. (41) ....E..E....@.n....z...e...5.1.:... .........linkedin.com.......)........ 13:19:54.485131 IP 172.23.195.101.53 > 172.19.209.122.56497: 527 1/0/1 A 108.174.10.10 (57) ....E..U..@.|. ....e...z.5...A...............linkedin.com..............3..l. ..)........ The packet capture shows a request is made to 172.23.195.101:53 (this is the resolver in /etc/resolv.conf) for linkedin.com and a response is received from 172.23.195.101 with the IP address of linkedin.com 108.174.10.10 Now let's try to understand how DNS resolver tries to find the IP address of linkedin.com. DNS resolver first looks at its cache. Since many devices in the network can query for the domain name linkedin.com, the name resolution result may already exist in the cache. If there is a cache miss, it starts the DNS resolution process. The DNS server breaks \u201clinkedin.com\u201d to \u201c.\u201d, \u201ccom.\u201d and \u201clinkedin.com.\u201d and starts DNS resolution from \u201c.\u201d. The \u201c.\u201d is called root domain and those IPs are known to the DNS resolver software. DNS resolver queries the root domain Nameservers to find the right nameservers which could respond regarding details for \"com.\". The address of the authoritative nameserver of \u201ccom.\u201d is returned. Now the DNS resolution service contacts the authoritative nameserver for \u201ccom.\u201d to fetch the authoritative nameserver for \u201clinkedin.com\u201d. Once an authoritative nameserver of \u201clinkedin.com\u201d is known, the resolver contacts Linkedin\u2019s nameserver to provide the IP address of \u201clinkedin.com\u201d. This whole process can be visualized by running dig +trace linkedin.com linkedin.com. 3600 IN A 108.174.10.10 This DNS response has 5 fields where the first field is the request and the last field is the response. The second field is the Time to Live which says how long the DNS response is valid in seconds. In this case this mapping of linkedin.com is valid for 1 hour. This is how the resolvers and application(browser) maintain their cache. Any request for linkedin.com beyond 1 hour will be treated as a cache miss as the mapping has expired its TTL and the whole process has to be redone. The 4th field says the type of DNS response/request. Some of the various DNS query types are A, AAAA, NS, TXT, PTR, MX and CNAME. - A record returns IPV4 address of the domain name - AAAA record returns the IPV6 address of the domain Name - NS record returns the authoritative nameserver for the domain name - CNAME records are aliases to the domain names. Some domains point to other domain names and resolving the latter domain name gives an IP which is used as an IP for the former domain name as well. Example www.linkedin.com\u2019s IP address is the same as 2-01-2c3e-005a.cdx.cedexis.net. - For the brevity we are not discussing other DNS record types, the RFC of each of these records are available here . dig A linkedin.com +short 108.174.10.10 dig AAAA linkedin.com +short 2620:109:c002::6cae:a0a dig NS linkedin.com +short dns3.p09.nsone.net. dns4.p09.nsone.net. dns2.p09.nsone.net. ns4.p43.dynect.net. ns1.p43.dynect.net. ns2.p43.dynect.net. ns3.p43.dynect.net. dns1.p09.nsone.net. dig www.linkedin.com CNAME +short 2-01-2c3e-005a.cdx.cedexis.net. Armed with these fundamentals of DNS lets see usecases where DNS is used by SREs.","title":"DNS"},{"location":"linux_networking/dns/#applications-in-sre-role","text":"This section covers some of the common solutions SRE can derive from DNS 1. Every company has to have its internal DNS infrastructure for intranet sites and internal services like databases and other internal applications like wiki. So there has to be a DNS infrastructure maintained for those domain names by the infrastructure team. This DNS infrastructure has to be optimized and scaled so that it doesn\u2019t become a single point of failure. Failure of the internal DNS infrastructure can cause API calls of microservices to fail and other cascading effects. 2. DNS can also be used for discovering services. For example the hostname serviceb.internal.example.com could list instances which run service b internally in example.com company. Cloud providers provide options to enable DNS discovery( example ) 3. DNS is used by cloud provides and CDN providers to scale their services. In Azure/AWS, Load Balancers are given a CNAME instead of IPAddress. They update the IPAddress of the Loadbalancers as they scale by changing the IP Address of alias domain names. This is one of the reasons why A records of such alias domains are short lived like 1 minute. 4. DNS can also be used to make clients get IP addresses closer to their location so that their HTTP calls can be responded faster if the company has a presence geographically distributed. 5. SRE also has to understand since there is no verification in DNS infrastructure, these responses can be spoofed. This is safeguarded by other protocols like HTTPS(dealt later). DNSSEC protects from forged or manipulated DNS responses. 6. Stale DNS cache can be a problem. Some apps might still be using expired DNS records for their api calls. This is something SRE has to be wary of when doing maintenance. 7. DNS Loadbalancing and service discovery also has to understand TTL and the servers can be removed from the pool only after waiting till TTL post the changes are made to DNS records. If this is not done, a certain portion of the traffic will fail as the server is removed before the TTL.","title":"Applications in SRE role"},{"location":"linux_networking/http/","text":"HTTP Till this point we have only got the IP address of linkedin.com. The HTML page of linkedin.com is served by HTTP protocol which the browser renders. Browser sends a HTTP request to the IP of the server determined above. Request has a verb GET, PUT, POST followed by a path and query parameters and lines of key value pair which gives information about the client and capabilities of the client like contents it can accept and a body (usually in POST or PUT) # Eg run the following in your container and have a look at the headers curl linkedin.com -v * Connected to linkedin.com (108.174.10.10) port 80 (#0) > GET / HTTP/1.1 > Host: linkedin.com > User-Agent: curl/7.64.1 > Accept: */* > < HTTP/1.1 301 Moved Permanently < Date: Mon, 09 Nov 2020 10:39:43 GMT < X-Li-Pop: prod-esv5 < X-LI-Proto: http/1.1 < Location: https://www.linkedin.com/ < Content-Length: 0 < * Connection #0 to host linkedin.com left intact * Closing connection 0 Here, in the first line GET is the verb, / is the path and 1.1 is the HTTP protocol version. Then there are key value pairs which give client capabilities and some details to the server. The server responds back with HTTP version, Status Code and Status message. Status codes 2xx means success, 3xx denotes redirection, 4xx denotes client side errors and 5xx server side errors. We will now jump in to see the difference between HTTP/1.0 and HTTP/1.1. #On the terminal type telnet www.linkedin.com 80 #Copy and paste the following with an empty new line at last in the telnet STDIN GET / HTTP/1.1 HOST:linkedin.com USER-AGENT: curl This would get server response and waits for next input as the underlying connection to www.linkedin.com can be reused for further queries. While going through TCP, we can understand the benefits of this. But in HTTP/1.0 this connection will be immediately closed after the response meaning new connection has to be opened for each query. HTTP/1.1 can have only one inflight request in an open connection but connection can be reused for multiple requests one after another. One of the benefits of HTTP/2.0 over HTTP/1.1 is we can have multiple inflight requests on the same connection. We are restricting our scope to generic HTTP and not jumping to the intricacies of each protocol version but they should be straight forward to understand post the course. HTTP is called stateless protocol . This section we will try to understand what stateless means. Say we logged in to linkedin.com, each request to linkedin.com from the client will have no context of the user and it makes no sense to prompt user to login for each page/resource. This problem of HTTP is solved by COOKIE . A user is created a session when a user logs in. This session identifier is sent to the browser via SET-COOKIE header. The browser stores the COOKIE till the expiry set by the server and sends the cookie for each request from hereon for linkedin.com. More details on cookies are available here . Cookies are a critical piece of information like password and since HTTP is a plain text protocol, any man in the middle can capture either password or cookies and can breach the privacy of the user. Similarly as discussed during DNS a spoofed IP of linkedin.com can cause a phishing attack on users where an user can give linkedin\u2019s password to login on the malicious site. To solve both problems HTTPs came in place and HTTPs has to be mandated. HTTPS has to provide server identification and encryption of data between client and server. The server administrator has to generate a private public key pair and certificate request. This certificate request has to be signed by a certificate authority which converts the certificate request to a certificate. The server administrator has to update the certificate and private key to the webserver. The certificate has details about the server (like domain name for which it serves, expiry date), public key of the server. The private key is a secret to the server and losing the private key loses the trust the server provides. When clients connect, the client sends a HELLO. The server sends its certificate to the client. The client checks the validity of the cert by seeing if it is within its expiry time, if it is signed by a trusted authority and the hostname in the cert is the same as the server. This validation makes sure the server is the right server and there is no phishing. Once that is validated, the client negotiates a symmetrical key and cipher with the server by encrypting the negotiation with the public key of the server. Nobody else other than the server who has the private key can understand this data. Once negotiation is complete, that symmetric key and algorithm is used for further encryption which can be decrypted only by client and server from thereon as they only know the symmetric key and algorithm. The switch to symmetric algorithm from asymmetric encryption algorithm is to not strain the resources of client devices as symmetric encryption is generally less resource intensive than asymmetric. #Try the following on your terminal to see the cert details like Subject Name(domain name), Issuer details, Expiry date curl https://www.linkedin.com -v * Connected to www.linkedin.com (13.107.42.14) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem CApath: none * TLSv1.2 (OUT), TLS handshake, Client hello (1): } [230 bytes data] * TLSv1.2 (IN), TLS handshake, Server hello (2): { [90 bytes data] * TLSv1.2 (IN), TLS handshake, Certificate (11): { [3171 bytes data] * TLSv1.2 (IN), TLS handshake, Server key exchange (12): { [365 bytes data] * TLSv1.2 (IN), TLS handshake, Server finished (14): { [4 bytes data] * TLSv1.2 (OUT), TLS handshake, Client key exchange (16): } [102 bytes data] * TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1): } [1 bytes data] * TLSv1.2 (OUT), TLS handshake, Finished (20): } [16 bytes data] * TLSv1.2 (IN), TLS change cipher, Change cipher spec (1): { [1 bytes data] * TLSv1.2 (IN), TLS handshake, Finished (20): { [16 bytes data] * SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384 * ALPN, server accepted to use h2 * Server certificate: * subject: C=US; ST=California; L=Sunnyvale; O=LinkedIn Corporation; CN=www.linkedin.com * start date: Oct 2 00:00:00 2020 GMT * expire date: Apr 2 12:00:00 2021 GMT * subjectAltName: host \"www.linkedin.com\" matched cert's \"www.linkedin.com\" * issuer: C=US; O=DigiCert Inc; CN=DigiCert SHA2 Secure Server CA * SSL certificate verify ok. * Using HTTP2, server supports multi-use * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 * Using Stream ID: 1 (easy handle 0x7fb055808200) * Connection state changed (MAX_CONCURRENT_STREAMS == 100)! 0 82117 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 * Connection #0 to host www.linkedin.com left intact HTTP/2 200 cache-control: no-cache, no-store pragma: no-cache content-length: 82117 content-type: text/html; charset=utf-8 expires: Thu, 01 Jan 1970 00:00:00 GMT set-cookie: JSESSIONID=ajax:2747059799136291014; SameSite=None; Path=/; Domain=.www.linkedin.com; Secure set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=linkedin.com; Secure set-cookie: bcookie=\"v=2&70bd59e3-5a51-406c-8e0d-dd70befa8890\"; domain=.linkedin.com; Path=/; Secure; Expires=Wed, 09-Nov-2022 22:27:42 GMT; SameSite=None set-cookie: bscookie=\"v=1&202011091050107ae9b7ac-fe97-40fc-830d-d7a9ccf80659AQGib5iXwarbY8CCBP94Q39THkgUlx6J\"; domain=.www.linkedin.com; Path=/; Secure; Expires=Wed, 09-Nov-2022 22:27:42 GMT; HttpOnly; SameSite=None set-cookie: lissc=1; domain=.linkedin.com; Path=/; Secure; Expires=Tue, 09-Nov-2021 10:50:10 GMT; SameSite=None set-cookie: lidc=\"b=VGST04:s=V:r=V:g=2201:u=1:i=1604919010:t=1605005410:v=1:sig=AQHe-KzU8i_5Iy6MwnFEsgRct3c9Lh5R\"; Expires=Tue, 10 Nov 2020 10:50:10 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure x-fs-txn-id: 2b8d5409ba70 x-fs-uuid: 61bbf94956d14516302567fc882b0000 expect-ct: max-age=86400, report-uri=\"https://www.linkedin.com/platform-telemetry/ct\" x-xss-protection: 1; mode=block content-security-policy-report-only: default-src 'none'; connect-src 'self' www.linkedin.com www.google-analytics.com https://dpm.demdex.net/id lnkd.demdex.net blob: https://linkedin.sc.omtrdc.net/b/ss/ static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; script-src 'sha256-THuVhwbXPeTR0HszASqMOnIyxqEgvGyBwSPBKBF/iMc=' 'sha256-PyCXNcEkzRWqbiNr087fizmiBBrq9O6GGD8eV3P09Ik=' 'sha256-2SQ55Erm3CPCb+k03EpNxU9bdV3XL9TnVTriDs7INZ4=' 'sha256-S/KSPe186K/1B0JEjbIXcCdpB97krdzX05S+dHnQjUs=' platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'self' 'unsafe-inline' static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; media-src dms.licdn.com; child-src blob: *; frame-src 'self' lnkd.demdex.net linkedin.cdn.qualaroo.com; manifest-src 'self'; report-uri https://www.linkedin.com/platform-telemetry/csp?f=g content-security-policy: default-src *; connect-src 'self' https://media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com s.c.exp1.licdn.com s.c.exp2.licdn.com m.c.exp1.licdn.com m.c.exp2.licdn.com wss://*.linkedin.com dms.licdn.com https://dpm.demdex.net/id lnkd.demdex.net blob: https://accounts.google.com/gsi/status https://linkedin.sc.omtrdc.net/b/ss/ www.google-analytics.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com www.google-analytics.com ssl.google-analytics.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com slideshare.www.linkedin.com https://snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self'; report-uri https://www.linkedin.com/platform-telemetry/csp?f=l x-frame-options: sameorigin x-content-type-options: nosniff strict-transport-security: max-age=2592000 x-li-fabric: prod-lva1 x-li-pop: afd-prod-lva1 x-li-proto: http/2 x-li-uuid: Ybv5SVbRRRYwJWf8iCsAAA== x-msedge-ref: Ref A: CFB9AC1D2B0645DDB161CEE4A4909AEF Ref B: BOM02EDGE0712 Ref C: 2020-11-09T10:50:10Z date: Mon, 09 Nov 2020 10:50:10 GMT * Closing connection 0 Here my system has a list of certificate authorities it trusts in this file /etc/ssl/cert.pem. Curl validates the certificate is for www.linkedin.com by seeing the CN section of the subject part of the certificate. It also makes sure the certificate is not expired by seeing the expire date. It also validates the signature on the certificate by using the public key of issuer Digicert in /etc/ssl/cert.pem. Once this is done, using the public key of www.linkedin.com it negotiates cipher TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 with a symmetric key. Subsequent data transfer including first HTTP request uses the same cipher and symmetric key.","title":"HTTP"},{"location":"linux_networking/http/#http","text":"Till this point we have only got the IP address of linkedin.com. The HTML page of linkedin.com is served by HTTP protocol which the browser renders. Browser sends a HTTP request to the IP of the server determined above. Request has a verb GET, PUT, POST followed by a path and query parameters and lines of key value pair which gives information about the client and capabilities of the client like contents it can accept and a body (usually in POST or PUT) # Eg run the following in your container and have a look at the headers curl linkedin.com -v * Connected to linkedin.com (108.174.10.10) port 80 (#0) > GET / HTTP/1.1 > Host: linkedin.com > User-Agent: curl/7.64.1 > Accept: */* > < HTTP/1.1 301 Moved Permanently < Date: Mon, 09 Nov 2020 10:39:43 GMT < X-Li-Pop: prod-esv5 < X-LI-Proto: http/1.1 < Location: https://www.linkedin.com/ < Content-Length: 0 < * Connection #0 to host linkedin.com left intact * Closing connection 0 Here, in the first line GET is the verb, / is the path and 1.1 is the HTTP protocol version. Then there are key value pairs which give client capabilities and some details to the server. The server responds back with HTTP version, Status Code and Status message. Status codes 2xx means success, 3xx denotes redirection, 4xx denotes client side errors and 5xx server side errors. We will now jump in to see the difference between HTTP/1.0 and HTTP/1.1. #On the terminal type telnet www.linkedin.com 80 #Copy and paste the following with an empty new line at last in the telnet STDIN GET / HTTP/1.1 HOST:linkedin.com USER-AGENT: curl This would get server response and waits for next input as the underlying connection to www.linkedin.com can be reused for further queries. While going through TCP, we can understand the benefits of this. But in HTTP/1.0 this connection will be immediately closed after the response meaning new connection has to be opened for each query. HTTP/1.1 can have only one inflight request in an open connection but connection can be reused for multiple requests one after another. One of the benefits of HTTP/2.0 over HTTP/1.1 is we can have multiple inflight requests on the same connection. We are restricting our scope to generic HTTP and not jumping to the intricacies of each protocol version but they should be straight forward to understand post the course. HTTP is called stateless protocol . This section we will try to understand what stateless means. Say we logged in to linkedin.com, each request to linkedin.com from the client will have no context of the user and it makes no sense to prompt user to login for each page/resource. This problem of HTTP is solved by COOKIE . A user is created a session when a user logs in. This session identifier is sent to the browser via SET-COOKIE header. The browser stores the COOKIE till the expiry set by the server and sends the cookie for each request from hereon for linkedin.com. More details on cookies are available here . Cookies are a critical piece of information like password and since HTTP is a plain text protocol, any man in the middle can capture either password or cookies and can breach the privacy of the user. Similarly as discussed during DNS a spoofed IP of linkedin.com can cause a phishing attack on users where an user can give linkedin\u2019s password to login on the malicious site. To solve both problems HTTPs came in place and HTTPs has to be mandated. HTTPS has to provide server identification and encryption of data between client and server. The server administrator has to generate a private public key pair and certificate request. This certificate request has to be signed by a certificate authority which converts the certificate request to a certificate. The server administrator has to update the certificate and private key to the webserver. The certificate has details about the server (like domain name for which it serves, expiry date), public key of the server. The private key is a secret to the server and losing the private key loses the trust the server provides. When clients connect, the client sends a HELLO. The server sends its certificate to the client. The client checks the validity of the cert by seeing if it is within its expiry time, if it is signed by a trusted authority and the hostname in the cert is the same as the server. This validation makes sure the server is the right server and there is no phishing. Once that is validated, the client negotiates a symmetrical key and cipher with the server by encrypting the negotiation with the public key of the server. Nobody else other than the server who has the private key can understand this data. Once negotiation is complete, that symmetric key and algorithm is used for further encryption which can be decrypted only by client and server from thereon as they only know the symmetric key and algorithm. The switch to symmetric algorithm from asymmetric encryption algorithm is to not strain the resources of client devices as symmetric encryption is generally less resource intensive than asymmetric. #Try the following on your terminal to see the cert details like Subject Name(domain name), Issuer details, Expiry date curl https://www.linkedin.com -v * Connected to www.linkedin.com (13.107.42.14) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem CApath: none * TLSv1.2 (OUT), TLS handshake, Client hello (1): } [230 bytes data] * TLSv1.2 (IN), TLS handshake, Server hello (2): { [90 bytes data] * TLSv1.2 (IN), TLS handshake, Certificate (11): { [3171 bytes data] * TLSv1.2 (IN), TLS handshake, Server key exchange (12): { [365 bytes data] * TLSv1.2 (IN), TLS handshake, Server finished (14): { [4 bytes data] * TLSv1.2 (OUT), TLS handshake, Client key exchange (16): } [102 bytes data] * TLSv1.2 (OUT), TLS change cipher, Change cipher spec (1): } [1 bytes data] * TLSv1.2 (OUT), TLS handshake, Finished (20): } [16 bytes data] * TLSv1.2 (IN), TLS change cipher, Change cipher spec (1): { [1 bytes data] * TLSv1.2 (IN), TLS handshake, Finished (20): { [16 bytes data] * SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384 * ALPN, server accepted to use h2 * Server certificate: * subject: C=US; ST=California; L=Sunnyvale; O=LinkedIn Corporation; CN=www.linkedin.com * start date: Oct 2 00:00:00 2020 GMT * expire date: Apr 2 12:00:00 2021 GMT * subjectAltName: host \"www.linkedin.com\" matched cert's \"www.linkedin.com\" * issuer: C=US; O=DigiCert Inc; CN=DigiCert SHA2 Secure Server CA * SSL certificate verify ok. * Using HTTP2, server supports multi-use * Connection state changed (HTTP/2 confirmed) * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0 * Using Stream ID: 1 (easy handle 0x7fb055808200) * Connection state changed (MAX_CONCURRENT_STREAMS == 100)! 0 82117 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 * Connection #0 to host www.linkedin.com left intact HTTP/2 200 cache-control: no-cache, no-store pragma: no-cache content-length: 82117 content-type: text/html; charset=utf-8 expires: Thu, 01 Jan 1970 00:00:00 GMT set-cookie: JSESSIONID=ajax:2747059799136291014; SameSite=None; Path=/; Domain=.www.linkedin.com; Secure set-cookie: lang=v=2&lang=en-us; SameSite=None; Path=/; Domain=linkedin.com; Secure set-cookie: bcookie=\"v=2&70bd59e3-5a51-406c-8e0d-dd70befa8890\"; domain=.linkedin.com; Path=/; Secure; Expires=Wed, 09-Nov-2022 22:27:42 GMT; SameSite=None set-cookie: bscookie=\"v=1&202011091050107ae9b7ac-fe97-40fc-830d-d7a9ccf80659AQGib5iXwarbY8CCBP94Q39THkgUlx6J\"; domain=.www.linkedin.com; Path=/; Secure; Expires=Wed, 09-Nov-2022 22:27:42 GMT; HttpOnly; SameSite=None set-cookie: lissc=1; domain=.linkedin.com; Path=/; Secure; Expires=Tue, 09-Nov-2021 10:50:10 GMT; SameSite=None set-cookie: lidc=\"b=VGST04:s=V:r=V:g=2201:u=1:i=1604919010:t=1605005410:v=1:sig=AQHe-KzU8i_5Iy6MwnFEsgRct3c9Lh5R\"; Expires=Tue, 10 Nov 2020 10:50:10 GMT; domain=.linkedin.com; Path=/; SameSite=None; Secure x-fs-txn-id: 2b8d5409ba70 x-fs-uuid: 61bbf94956d14516302567fc882b0000 expect-ct: max-age=86400, report-uri=\"https://www.linkedin.com/platform-telemetry/ct\" x-xss-protection: 1; mode=block content-security-policy-report-only: default-src 'none'; connect-src 'self' www.linkedin.com www.google-analytics.com https://dpm.demdex.net/id lnkd.demdex.net blob: https://linkedin.sc.omtrdc.net/b/ss/ static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; script-src 'sha256-THuVhwbXPeTR0HszASqMOnIyxqEgvGyBwSPBKBF/iMc=' 'sha256-PyCXNcEkzRWqbiNr087fizmiBBrq9O6GGD8eV3P09Ik=' 'sha256-2SQ55Erm3CPCb+k03EpNxU9bdV3XL9TnVTriDs7INZ4=' 'sha256-S/KSPe186K/1B0JEjbIXcCdpB97krdzX05S+dHnQjUs=' platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'self' 'unsafe-inline' static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com; media-src dms.licdn.com; child-src blob: *; frame-src 'self' lnkd.demdex.net linkedin.cdn.qualaroo.com; manifest-src 'self'; report-uri https://www.linkedin.com/platform-telemetry/csp?f=g content-security-policy: default-src *; connect-src 'self' https://media-src.linkedin.com/media/ www.linkedin.com s.c.lnkd.licdn.com m.c.lnkd.licdn.com s.c.exp1.licdn.com s.c.exp2.licdn.com m.c.exp1.licdn.com m.c.exp2.licdn.com wss://*.linkedin.com dms.licdn.com https://dpm.demdex.net/id lnkd.demdex.net blob: https://accounts.google.com/gsi/status https://linkedin.sc.omtrdc.net/b/ss/ www.google-analytics.com static.licdn.com static-exp1.licdn.com static-exp2.licdn.com static-exp3.licdn.com media.licdn.com media-exp1.licdn.com media-exp2.licdn.com media-exp3.licdn.com; img-src data: blob: *; font-src data: *; style-src 'unsafe-inline' 'self' static-src.linkedin.com *.licdn.com; script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' spdy.linkedin.com static-src.linkedin.com *.ads.linkedin.com *.licdn.com static.chartbeat.com www.google-analytics.com ssl.google-analytics.com bcvipva02.rightnowtech.com www.bizographics.com sjs.bizographics.com js.bizographics.com d.la4-c1-was.salesforceliveagent.com slideshare.www.linkedin.com https://snap.licdn.com/li.lms-analytics/ platform.linkedin.com platform-akam.linkedin.com platform-ecst.linkedin.com platform-azur.linkedin.com; object-src 'none'; media-src blob: *; child-src blob: lnkd-communities: voyager: *; frame-ancestors 'self'; report-uri https://www.linkedin.com/platform-telemetry/csp?f=l x-frame-options: sameorigin x-content-type-options: nosniff strict-transport-security: max-age=2592000 x-li-fabric: prod-lva1 x-li-pop: afd-prod-lva1 x-li-proto: http/2 x-li-uuid: Ybv5SVbRRRYwJWf8iCsAAA== x-msedge-ref: Ref A: CFB9AC1D2B0645DDB161CEE4A4909AEF Ref B: BOM02EDGE0712 Ref C: 2020-11-09T10:50:10Z date: Mon, 09 Nov 2020 10:50:10 GMT * Closing connection 0 Here my system has a list of certificate authorities it trusts in this file /etc/ssl/cert.pem. Curl validates the certificate is for www.linkedin.com by seeing the CN section of the subject part of the certificate. It also makes sure the certificate is not expired by seeing the expire date. It also validates the signature on the certificate by using the public key of issuer Digicert in /etc/ssl/cert.pem. Once this is done, using the public key of www.linkedin.com it negotiates cipher TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 with a symmetric key. Subsequent data transfer including first HTTP request uses the same cipher and symmetric key.","title":"HTTP"},{"location":"linux_networking/intro/","text":"Linux Networking Fundamentals Prerequisites This course requires high-level knowledge of commonly used jargon in TCP/IP stack like DNS, TCP, UDP and HTTP. Basic familiarity with Linux jargon is sufficient to start this course. This course also expects basic exposure to Linux command-line tools. The course will require you to install certain utilities and run them as a part of the course exercises. What to expect from this course Throughout the course, we cover how an SRE can optimize the system to improve their web stack performance and troubleshoot if there is an issue in any of the layers of the networking stack. This course tries to dig through each layer of traditional TCP/IP stack and expects an SRE to have a picture beyond the bird\u2019s eye view of the functioning of the Internet. What is not covered under this course This course spends time on the fundamentals. We are not covering concepts like HTTP/2.0, QUIC, TCP congestion control protocols, Anycast, BGP, CDN, Tunnels and Multicast. We expect that this course will provide the relevant basics to understand such concepts Birds eye view of the course The course covers the question \u201cWhat happens when you open linkedin.com in your browser?\u201d The course follows the flow of TCP/IP stack.More specifically, the course covers topics of Application layer protocols DNS and HTTP, transport layer protocols UDP and TCP, networking layer protocol IP and Data Link Layer protocol Course Contents DNS UDP HTTP TCP IP Routing","title":"Introduction"},{"location":"linux_networking/intro/#linux-networking-fundamentals","text":"","title":"Linux Networking Fundamentals"},{"location":"linux_networking/intro/#prerequisites","text":"This course requires high-level knowledge of commonly used jargon in TCP/IP stack like DNS, TCP, UDP and HTTP. Basic familiarity with Linux jargon is sufficient to start this course. This course also expects basic exposure to Linux command-line tools. The course will require you to install certain utilities and run them as a part of the course exercises.","title":"Prerequisites"},{"location":"linux_networking/intro/#what-to-expect-from-this-course","text":"Throughout the course, we cover how an SRE can optimize the system to improve their web stack performance and troubleshoot if there is an issue in any of the layers of the networking stack. This course tries to dig through each layer of traditional TCP/IP stack and expects an SRE to have a picture beyond the bird\u2019s eye view of the functioning of the Internet.","title":"What to expect from this course"},{"location":"linux_networking/intro/#what-is-not-covered-under-this-course","text":"This course spends time on the fundamentals. We are not covering concepts like HTTP/2.0, QUIC, TCP congestion control protocols, Anycast, BGP, CDN, Tunnels and Multicast. We expect that this course will provide the relevant basics to understand such concepts","title":"What is not covered under this course"},{"location":"linux_networking/intro/#birds-eye-view-of-the-course","text":"The course covers the question \u201cWhat happens when you open linkedin.com in your browser?\u201d The course follows the flow of TCP/IP stack.More specifically, the course covers topics of Application layer protocols DNS and HTTP, transport layer protocols UDP and TCP, networking layer protocol IP and Data Link Layer protocol","title":"Birds eye view of the course"},{"location":"linux_networking/intro/#course-contents","text":"DNS UDP HTTP TCP IP Routing","title":"Course Contents"},{"location":"linux_networking/ipr/","text":"IP Routing and Data Link Layer We will dig how packets that leave the client reach the server and vice versa. When the packet reaches the IP layer, the transport layer populates source port, destination port. IP/Network layer populates destination IP(discovered from DNS) and then looks up the route to the destination IP on the routing table. #Linux route -n command gives the default routing table route -n Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 172.17.0.1 0.0.0.0 UG 0 0 0 eth0 172.17.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0 Here the destination IP is bitwise AND\u2019d with the Genmask and if the answer is the destination part of the table then that gateway and interface is picked for routing. Here linkedin.com\u2019s IP 108.174.10.10 is AND\u2019d with 255.255.255.0 and the answer we get is 108.174.10.0 which doesn\u2019t match with any destination in the routing table. Then Linux does an AND of destination IP with 0.0.0.0 and we get 0.0.0.0. This answer matches the default row Routing table is processed in the order of more octets of 1 set in genmask and genmask 0.0.0.0 is the default route if nothing matches. At the end of this operation Linux figured out that the packet has to be sent to next hop 172.17.0.1 via eth0. The source IP of the packet will be set as the IP of interface eth0. Now to send the packet to 172.17.0.1 linux has to figure out the MAC address of 172.17.0.1. MAC address is figured by looking at the internal arp cache which stores translation between IP address and MAC address. If there is a cache miss, Linux broadcasts ARP request within the internal network asking who has 172.17.0.1. The owner of the IP sends an ARP response which is cached by the kernel and the kernel sends the packet to the gateway by setting Source mac address as mac address of eth0 and destination mac address of 172.17.0.1 which we got just now. Similar routing lookup process is followed in each hop till the packet reaches the actual server. Transport layer and layers above it come to play only at end servers. During intermediate hops only till the IP/Network layer is involved. One weird gateway we saw in the routing table is 0.0.0.0. This gateway means no Layer3(Network layer) hop is needed to send the packet. Both source and destination are in the same network. Kernel has to figure out the mac of the destination and populate source and destination mac appropriately and send the packet out so that it reaches the destination without any Layer3 hop in the middle As we followed in other modules, lets complete this session with SRE usecases Applications in SRE role Generally the routing table is populated by DHCP and playing around is not a good practice. There can be reasons where one has to play around the routing table but take that path only when it's absolutely necessary Understanding error messages better like, \u201cNo route to host\u201d error can mean mac address of the destination host is not found and it can mean the destination host is down On rare cases looking at the ARP table can help us understand if there is a IP conflict where same IP is assigned to two hosts by mistake and this is causing unexpected behavior","title":"Routing"},{"location":"linux_networking/ipr/#ip-routing-and-data-link-layer","text":"We will dig how packets that leave the client reach the server and vice versa. When the packet reaches the IP layer, the transport layer populates source port, destination port. IP/Network layer populates destination IP(discovered from DNS) and then looks up the route to the destination IP on the routing table. #Linux route -n command gives the default routing table route -n Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 172.17.0.1 0.0.0.0 UG 0 0 0 eth0 172.17.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0 Here the destination IP is bitwise AND\u2019d with the Genmask and if the answer is the destination part of the table then that gateway and interface is picked for routing. Here linkedin.com\u2019s IP 108.174.10.10 is AND\u2019d with 255.255.255.0 and the answer we get is 108.174.10.0 which doesn\u2019t match with any destination in the routing table. Then Linux does an AND of destination IP with 0.0.0.0 and we get 0.0.0.0. This answer matches the default row Routing table is processed in the order of more octets of 1 set in genmask and genmask 0.0.0.0 is the default route if nothing matches. At the end of this operation Linux figured out that the packet has to be sent to next hop 172.17.0.1 via eth0. The source IP of the packet will be set as the IP of interface eth0. Now to send the packet to 172.17.0.1 linux has to figure out the MAC address of 172.17.0.1. MAC address is figured by looking at the internal arp cache which stores translation between IP address and MAC address. If there is a cache miss, Linux broadcasts ARP request within the internal network asking who has 172.17.0.1. The owner of the IP sends an ARP response which is cached by the kernel and the kernel sends the packet to the gateway by setting Source mac address as mac address of eth0 and destination mac address of 172.17.0.1 which we got just now. Similar routing lookup process is followed in each hop till the packet reaches the actual server. Transport layer and layers above it come to play only at end servers. During intermediate hops only till the IP/Network layer is involved. One weird gateway we saw in the routing table is 0.0.0.0. This gateway means no Layer3(Network layer) hop is needed to send the packet. Both source and destination are in the same network. Kernel has to figure out the mac of the destination and populate source and destination mac appropriately and send the packet out so that it reaches the destination without any Layer3 hop in the middle As we followed in other modules, lets complete this session with SRE usecases","title":"IP Routing and Data Link Layer"},{"location":"linux_networking/ipr/#applications-in-sre-role","text":"Generally the routing table is populated by DHCP and playing around is not a good practice. There can be reasons where one has to play around the routing table but take that path only when it's absolutely necessary Understanding error messages better like, \u201cNo route to host\u201d error can mean mac address of the destination host is not found and it can mean the destination host is down On rare cases looking at the ARP table can help us understand if there is a IP conflict where same IP is assigned to two hosts by mistake and this is causing unexpected behavior","title":"Applications in SRE role"},{"location":"linux_networking/tcp/","text":"TCP TCP is a transport layer protocol like UDP but it guarantees reliability, flow control and congestion control. TCP guarantees reliable delivery by using sequence numbers. A TCP connection is established by a three way handshake. In our case, the client sends a SYN packet along with the starting sequence number it plans to use, the server acknowledges the SYN packet and sends a SYN with its sequence number. Once the client acknowledges the syn packet, the connection is established. Each data transferred from here on is considered delivered reliably once acknowledgement for that sequence is received by the concerned party #To understand handshake run packet capture on one bash session tcpdump -S -i any port 80 #Run curl on one bash session curl www.linkedin.com Here client sends a syn flag shown by [S] flag with a sequence number 1522264672. The server acknowledges receipt of SYN with an ack [.] flag and a Syn flag for its sequence number[S]. The server uses the sequence number 1063230400 and acknowledges the client it\u2019s expecting sequence number 1522264673 (client sequence+1). Client sends a zero length acknowledgement packet to the server(server sequence+1) and connection stands established. This is called three way handshake. The client sends a 76 bytes length packet after this and increments its sequence number by 76. Server sends a 170 byte response and closes the connection. This was the difference we were talking about between HTTP/1.1 and HTTP/1.0. In HTTP/1.1 this same connection can be reused which reduces overhead of 3 way handshake for each HTTP request. If a packet is missed between client and server, server won\u2019t send an ack to the client and client would retry sending the packet till the ACK is received. This guarantees reliability. The flow control is established by the win size field in each segment. The win size says available TCP buffer length in the kernel which can be used to buffer received segments. A size 0 means the receiver has a lot of lag to catch from its socket buffer and the sender has to pause sending packets so that receiver can cope up. This flow control protects from slow receiver and fast sender problem TCP also does congestion control which determines how many segments can be in transit without an ack. Linux provides us the ability to configure algorithms for congestion control which we are not covering here. While closing a connection, client/server calls a close syscall. Let's assume client do that. Client\u2019s kernel will send a FIN packet to the server. Server\u2019s kernel can\u2019t close the connection till the close syscall is called by the server application. Once server app calls close, server also sends a FIN packet and client enters into time wait state for 2*MSS(120s) so that this socket can\u2019t be reused for that time period to prevent any TCP state corruptions due to stray stale packets. Armed with our TCP and HTTP knowledge lets see how this is used by SREs in their role Applications in SRE role Scaling HTTP performance using load balancers need consistent knowledge about both TCP and HTTP. There are different kinds of load balancing like L4, L7 load balancing, Direct Server Return etc. HTTPs offloading can be done on Load balancer or directly on servers based on the performance and compliance needs. Tweaking sysctl variables for rmem and wmem like we did for UDP can improve throughput of sender and receiver. Sysctl variable tcp_max_syn_backlog and socket variable somax_conn determines how many connections for which the kernel can complete 3 way handshake before app calling accept syscall. This is much useful in single threaded applications. Once the backlog is full, new connections stay in SYN_RCVD state (when you run netstat) till the application calls accept syscall Apps can run out of file descriptors if there are too many short lived connections. Digging through tcp_reuse and tcp_recycle can help reduce time spent in the time wait state(it has its own risk). Making apps reuse a pool of connections instead of creating ad hoc connection can also help Understanding performance bottlenecks by seeing metrics and classifying whether its a problem in App or network side. Example too many sockets in Close_wait state is a problem on application whereas retransmissions can be a problem more on network or on OS stack than the application itself. Understanding the fundamentals can help us narrow down where the bottleneck is","title":"TCP"},{"location":"linux_networking/tcp/#tcp","text":"TCP is a transport layer protocol like UDP but it guarantees reliability, flow control and congestion control. TCP guarantees reliable delivery by using sequence numbers. A TCP connection is established by a three way handshake. In our case, the client sends a SYN packet along with the starting sequence number it plans to use, the server acknowledges the SYN packet and sends a SYN with its sequence number. Once the client acknowledges the syn packet, the connection is established. Each data transferred from here on is considered delivered reliably once acknowledgement for that sequence is received by the concerned party #To understand handshake run packet capture on one bash session tcpdump -S -i any port 80 #Run curl on one bash session curl www.linkedin.com Here client sends a syn flag shown by [S] flag with a sequence number 1522264672. The server acknowledges receipt of SYN with an ack [.] flag and a Syn flag for its sequence number[S]. The server uses the sequence number 1063230400 and acknowledges the client it\u2019s expecting sequence number 1522264673 (client sequence+1). Client sends a zero length acknowledgement packet to the server(server sequence+1) and connection stands established. This is called three way handshake. The client sends a 76 bytes length packet after this and increments its sequence number by 76. Server sends a 170 byte response and closes the connection. This was the difference we were talking about between HTTP/1.1 and HTTP/1.0. In HTTP/1.1 this same connection can be reused which reduces overhead of 3 way handshake for each HTTP request. If a packet is missed between client and server, server won\u2019t send an ack to the client and client would retry sending the packet till the ACK is received. This guarantees reliability. The flow control is established by the win size field in each segment. The win size says available TCP buffer length in the kernel which can be used to buffer received segments. A size 0 means the receiver has a lot of lag to catch from its socket buffer and the sender has to pause sending packets so that receiver can cope up. This flow control protects from slow receiver and fast sender problem TCP also does congestion control which determines how many segments can be in transit without an ack. Linux provides us the ability to configure algorithms for congestion control which we are not covering here. While closing a connection, client/server calls a close syscall. Let's assume client do that. Client\u2019s kernel will send a FIN packet to the server. Server\u2019s kernel can\u2019t close the connection till the close syscall is called by the server application. Once server app calls close, server also sends a FIN packet and client enters into time wait state for 2*MSS(120s) so that this socket can\u2019t be reused for that time period to prevent any TCP state corruptions due to stray stale packets. Armed with our TCP and HTTP knowledge lets see how this is used by SREs in their role","title":"TCP"},{"location":"linux_networking/tcp/#applications-in-sre-role","text":"Scaling HTTP performance using load balancers need consistent knowledge about both TCP and HTTP. There are different kinds of load balancing like L4, L7 load balancing, Direct Server Return etc. HTTPs offloading can be done on Load balancer or directly on servers based on the performance and compliance needs. Tweaking sysctl variables for rmem and wmem like we did for UDP can improve throughput of sender and receiver. Sysctl variable tcp_max_syn_backlog and socket variable somax_conn determines how many connections for which the kernel can complete 3 way handshake before app calling accept syscall. This is much useful in single threaded applications. Once the backlog is full, new connections stay in SYN_RCVD state (when you run netstat) till the application calls accept syscall Apps can run out of file descriptors if there are too many short lived connections. Digging through tcp_reuse and tcp_recycle can help reduce time spent in the time wait state(it has its own risk). Making apps reuse a pool of connections instead of creating ad hoc connection can also help Understanding performance bottlenecks by seeing metrics and classifying whether its a problem in App or network side. Example too many sockets in Close_wait state is a problem on application whereas retransmissions can be a problem more on network or on OS stack than the application itself. Understanding the fundamentals can help us narrow down where the bottleneck is","title":"Applications in SRE role"},{"location":"linux_networking/udp/","text":"UDP UDP is a transport layer protocol. DNS is an application layer protocol that runs on top of UDP(most of the times). Before jumping into UDP, let's try to understand what an application and transport layer is. DNS protocol is used by a DNS client(eg dig) and DNS server(eg named). The transport layer makes sure the DNS request reaches the DNS server process and similarly the response reaches the DNS client process. Multiple processes can run on a system and they can listen on any ports . DNS servers usually listen on port number 53. When a client makes a DNS request, after filling the necessary application payload, it passes the payload to the kernel via sendto system call. The kernel picks a random port number( >1024 ) as source port number and puts 53 as destination port number and sends the packet to lower layers. When the kernel on server side receives the packet, it checks the port number and queues the packet to the application buffer of the DNS server process which makes a recvfrom system call and reads the packet. This process by the kernel is called multiplexing(combining packets from multiple applications to same lower layers) and demultiplexing(segregating packets from single lower layer to multiple applications). Multiplexing and Demultiplexing is done by the Transport layer. UDP is one of the simplest transport layer protocol and it does only multiplexing and demultiplexing. Another common transport layer protocol TCP does a bunch of other things like reliable communication, flow control and congestion control. UDP is designed to be lightweight and handle communications with little overhead. So it doesn\u2019t do anything beyond multiplexing and demultiplexing. If applications running on top of UDP need any of the features of TCP, they have to implement that in their application This example from python wiki covers a sample UDP client and server where \u201cHello World\u201d is an application payload sent to server listening on port number 5005. The server receives the packet and prints the \u201cHello World\u201d string from the client Applications in SRE role If the underlying network is slow and the UDP layer is unable to queue packets down to the networking layer, sendto syscall from the application will hang till the kernel finds some of its buffer is freed. This can affect the throughput of the system. Increasing write memory buffer values using sysctl variables net.core.wmem_max and net.core.wmem_default provides some cushion to the application from the slow network Similarly if the receiver process is slow in consuming from its buffer, the kernel has to drop packets which it can\u2019t queue due to the buffer being full. Since UDP doesn\u2019t guarantee reliability these dropped packets can cause data loss unless tracked by the application layer. Increasing sysctl variables rmem_default and rmem_max can provide some cushion to slow applications from fast senders.","title":"UDP"},{"location":"linux_networking/udp/#udp","text":"UDP is a transport layer protocol. DNS is an application layer protocol that runs on top of UDP(most of the times). Before jumping into UDP, let's try to understand what an application and transport layer is. DNS protocol is used by a DNS client(eg dig) and DNS server(eg named). The transport layer makes sure the DNS request reaches the DNS server process and similarly the response reaches the DNS client process. Multiple processes can run on a system and they can listen on any ports . DNS servers usually listen on port number 53. When a client makes a DNS request, after filling the necessary application payload, it passes the payload to the kernel via sendto system call. The kernel picks a random port number( >1024 ) as source port number and puts 53 as destination port number and sends the packet to lower layers. When the kernel on server side receives the packet, it checks the port number and queues the packet to the application buffer of the DNS server process which makes a recvfrom system call and reads the packet. This process by the kernel is called multiplexing(combining packets from multiple applications to same lower layers) and demultiplexing(segregating packets from single lower layer to multiple applications). Multiplexing and Demultiplexing is done by the Transport layer. UDP is one of the simplest transport layer protocol and it does only multiplexing and demultiplexing. Another common transport layer protocol TCP does a bunch of other things like reliable communication, flow control and congestion control. UDP is designed to be lightweight and handle communications with little overhead. So it doesn\u2019t do anything beyond multiplexing and demultiplexing. If applications running on top of UDP need any of the features of TCP, they have to implement that in their application This example from python wiki covers a sample UDP client and server where \u201cHello World\u201d is an application payload sent to server listening on port number 5005. The server receives the packet and prints the \u201cHello World\u201d string from the client","title":"UDP"},{"location":"linux_networking/udp/#applications-in-sre-role","text":"If the underlying network is slow and the UDP layer is unable to queue packets down to the networking layer, sendto syscall from the application will hang till the kernel finds some of its buffer is freed. This can affect the throughput of the system. Increasing write memory buffer values using sysctl variables net.core.wmem_max and net.core.wmem_default provides some cushion to the application from the slow network Similarly if the receiver process is slow in consuming from its buffer, the kernel has to drop packets which it can\u2019t queue due to the buffer being full. Since UDP doesn\u2019t guarantee reliability these dropped packets can cause data loss unless tracked by the application layer. Increasing sysctl variables rmem_default and rmem_max can provide some cushion to slow applications from fast senders.","title":"Applications in SRE role"},{"location":"python_web/intro/","text":"Python and The Web Prerequisites Basic understanding of python language. Basic familiarity with flask framework. What to expect from this course This course is divided into two high level parts. In the first part, assuming familiarity with python language\u2019s basic operations and syntax usage, we will dive a little deeper into understanding python as a language. We will compare python with other programming languages that you might already know like Java and C. We will also explore concepts of Python objects and with help of that, explore python features like decorators. In the second part which will revolve around the web, and also assume familiarity with the Flask framework, we will start from the socket module and work with HTTP requests. This will demystify how frameworks like flask work internally. And to introduce SRE flavour to the course, we will design, develop and deploy (in theory) a URL shortening application. We will emphasize parts of the whole process that are more important as an SRE of the said app/service. What is not covered under this course Extensive knowledge of python internals and advanced python. Lab Environment Setup Have latest version of python installed Course Contents The Python Language Some Python Concepts Python Gotchas Python and Web Sockets Flask The URL Shortening App Design Scaling The App Monitoring The App The Python Language Assuming you know a little bit of C/C++ and Java, let's try to discuss the following questions in context of those two languages and python. You might have heard that C/C++ is a compiled language while python is an interpreted language. Generally, with compiled language we first compile the program and then run the executable while in case of python we run the source code directly like python hello_world.py . While Java, being an interpreted language, still has a separate compilation step and then its run. So what's really the difference? Compiled vs. Interpreted This might sound a little weird to you: python, in a way is a compiled language! Python has a compiler built-in! It is obvious in the case of java since we compile it using a separate command ie: javac helloWorld.java and it will produce a .class file which we know as a bytecode . Well, python is very similar to that. One difference here is that there is no separate compile command/binary needed to run a python program. What is the difference then, between java and python? Well, Java's compiler is more strict and sophisticated. As you might know Java is a statically typed language. So the compiler is written in a way that it can verify types related errors during compile time. While python being a dynamic language, types are not known until a program is run. So in a way, python compiler is dumb (or, less strict). But there indeed is a compile step involved when a python program is run. You might have seen python bytecode files with .pyc extension. Here is how you can see bytecode for a given python program. # Create a Hello World spatel1-mn1:tmp spatel1$ echo \"print('hello world')\" > hello_world.py # Making sure it runs spatel1-mn1:tmp spatel1$ python3 hello_world.py hello world # The bytecode of the given program spatel1-mn1:tmp spatel1$ python -m dis hello_world.py 1 0 LOAD_NAME 0 (print) 2 LOAD_CONST 0 ('hello world') 4 CALL_FUNCTION 1 6 POP_TOP 8 LOAD_CONST 1 (None) 10 RETURN_VALUE Read more about dis module here Now coming to C/C++, there of course is a compiler. But the output is different than what java/python compiler would produce. Compiling a C program would produce what we also know as machine code . As opposed to bytecode. Running The Programs We know compilation is involved in all 3 languages we are discussing. Just that the compilers are different in nature and they output different types of content. In case of C/C++, the output is machine code which can be directly read by your operating system. When you execute that program, your OS will know how exactly to run it. But this is not the case with bytecode. Those bytecodes are language specific. Python has its own set of bytecode defined (more in dis module) and so does java. So naturally, your operating system will not know how to run it. To run this bytecode, we have something called Virtual Machines. Ie: The JVM or the Python VM (CPython, Jython). These so called Virtual Machines are the programs which can read the bytecode and run it on a given operating system. Python has multiple VMs available. Cpython is a python VM implemented in C language, similarly Jython is a Java implementation of python VM. At the end of the day, what they should be capable of is to understand python language syntax, be able to compile it to bytecode and be able to run that bytecode. You can implement a python VM in any language! (And people do so, just because it can be done) The Operating System +------------------------------------+ | | | | | | hello_world.py Python bytecode | Python VM Process | | | +----------------+ +----------------+ | +----------------+ | |print(... | COMPILE |LOAD_CONST... | | |Reads bytecode | | | +--------------->+ +------------------->+line by line | | | | | | | |and executes. | | | | | | | | | | +----------------+ +----------------+ | +----------------+ | | | | | | | hello_world.c OS Specific machinecode | A New Process | | | +----------------+ +----------------+ | +----------------+ | |void main() { | COMPILE | binary contents| | | binary contents| | | +--------------->+ +------------------->+ | | | | | | | | | | | | | | | | | | +----------------+ +----------------+ | +----------------+ | | (binary contents | | runs as is) | | | | | +------------------------------------+ Two things to note for above diagram: Generally, when we run a python program, a python VM process is started which reads the python source code, compiles it to byte code and run it in a single step. Compiling is not a separate step. Shown only for illustration purpose. Binaries generated for C like languages are not exactly run as is. Since there are multiple types of binaries (eg: ELF), there are more complicated steps involved in order to run a binary but we will not go into that since all that is done at OS level.","title":"Introduction"},{"location":"python_web/intro/#python-and-the-web","text":"","title":"Python and The Web"},{"location":"python_web/intro/#prerequisites","text":"Basic understanding of python language. Basic familiarity with flask framework.","title":"Prerequisites"},{"location":"python_web/intro/#what-to-expect-from-this-course","text":"This course is divided into two high level parts. In the first part, assuming familiarity with python language\u2019s basic operations and syntax usage, we will dive a little deeper into understanding python as a language. We will compare python with other programming languages that you might already know like Java and C. We will also explore concepts of Python objects and with help of that, explore python features like decorators. In the second part which will revolve around the web, and also assume familiarity with the Flask framework, we will start from the socket module and work with HTTP requests. This will demystify how frameworks like flask work internally. And to introduce SRE flavour to the course, we will design, develop and deploy (in theory) a URL shortening application. We will emphasize parts of the whole process that are more important as an SRE of the said app/service.","title":"What to expect from this course"},{"location":"python_web/intro/#what-is-not-covered-under-this-course","text":"Extensive knowledge of python internals and advanced python.","title":"What is not covered under this course"},{"location":"python_web/intro/#lab-environment-setup","text":"Have latest version of python installed","title":"Lab Environment Setup"},{"location":"python_web/intro/#course-contents","text":"The Python Language Some Python Concepts Python Gotchas Python and Web Sockets Flask The URL Shortening App Design Scaling The App Monitoring The App","title":"Course Contents"},{"location":"python_web/intro/#the-python-language","text":"Assuming you know a little bit of C/C++ and Java, let's try to discuss the following questions in context of those two languages and python. You might have heard that C/C++ is a compiled language while python is an interpreted language. Generally, with compiled language we first compile the program and then run the executable while in case of python we run the source code directly like python hello_world.py . While Java, being an interpreted language, still has a separate compilation step and then its run. So what's really the difference?","title":"The Python Language"},{"location":"python_web/intro/#compiled-vs-interpreted","text":"This might sound a little weird to you: python, in a way is a compiled language! Python has a compiler built-in! It is obvious in the case of java since we compile it using a separate command ie: javac helloWorld.java and it will produce a .class file which we know as a bytecode . Well, python is very similar to that. One difference here is that there is no separate compile command/binary needed to run a python program. What is the difference then, between java and python? Well, Java's compiler is more strict and sophisticated. As you might know Java is a statically typed language. So the compiler is written in a way that it can verify types related errors during compile time. While python being a dynamic language, types are not known until a program is run. So in a way, python compiler is dumb (or, less strict). But there indeed is a compile step involved when a python program is run. You might have seen python bytecode files with .pyc extension. Here is how you can see bytecode for a given python program. # Create a Hello World spatel1-mn1:tmp spatel1$ echo \"print('hello world')\" > hello_world.py # Making sure it runs spatel1-mn1:tmp spatel1$ python3 hello_world.py hello world # The bytecode of the given program spatel1-mn1:tmp spatel1$ python -m dis hello_world.py 1 0 LOAD_NAME 0 (print) 2 LOAD_CONST 0 ('hello world') 4 CALL_FUNCTION 1 6 POP_TOP 8 LOAD_CONST 1 (None) 10 RETURN_VALUE Read more about dis module here Now coming to C/C++, there of course is a compiler. But the output is different than what java/python compiler would produce. Compiling a C program would produce what we also know as machine code . As opposed to bytecode.","title":"Compiled vs. Interpreted"},{"location":"python_web/intro/#running-the-programs","text":"We know compilation is involved in all 3 languages we are discussing. Just that the compilers are different in nature and they output different types of content. In case of C/C++, the output is machine code which can be directly read by your operating system. When you execute that program, your OS will know how exactly to run it. But this is not the case with bytecode. Those bytecodes are language specific. Python has its own set of bytecode defined (more in dis module) and so does java. So naturally, your operating system will not know how to run it. To run this bytecode, we have something called Virtual Machines. Ie: The JVM or the Python VM (CPython, Jython). These so called Virtual Machines are the programs which can read the bytecode and run it on a given operating system. Python has multiple VMs available. Cpython is a python VM implemented in C language, similarly Jython is a Java implementation of python VM. At the end of the day, what they should be capable of is to understand python language syntax, be able to compile it to bytecode and be able to run that bytecode. You can implement a python VM in any language! (And people do so, just because it can be done) The Operating System +------------------------------------+ | | | | | | hello_world.py Python bytecode | Python VM Process | | | +----------------+ +----------------+ | +----------------+ | |print(... | COMPILE |LOAD_CONST... | | |Reads bytecode | | | +--------------->+ +------------------->+line by line | | | | | | | |and executes. | | | | | | | | | | +----------------+ +----------------+ | +----------------+ | | | | | | | hello_world.c OS Specific machinecode | A New Process | | | +----------------+ +----------------+ | +----------------+ | |void main() { | COMPILE | binary contents| | | binary contents| | | +--------------->+ +------------------->+ | | | | | | | | | | | | | | | | | | +----------------+ +----------------+ | +----------------+ | | (binary contents | | runs as is) | | | | | +------------------------------------+ Two things to note for above diagram: Generally, when we run a python program, a python VM process is started which reads the python source code, compiles it to byte code and run it in a single step. Compiling is not a separate step. Shown only for illustration purpose. Binaries generated for C like languages are not exactly run as is. Since there are multiple types of binaries (eg: ELF), there are more complicated steps involved in order to run a binary but we will not go into that since all that is done at OS level.","title":"Running The Programs"},{"location":"python_web/python-concepts/","text":"Some Python Concepts Though you are expected to know python and its syntax at basic level, let us discuss some fundamental concepts that will help you understand the python language better. Everything in Python is an object. That includes the functions, lists, dicts, classes, modules, a running function (instance of function definition), everything. In the CPython, it would mean there is an underlying struct variable for each object. In python's current execution context, all the variables are stored in a dict. It'd be a string to object mapping. If you have a function and a float variable defined in the current context, here is how it is handled internally. >>> float_number=42.0 >>> def foo_func(): ... pass ... # NOTICE HOW VARIABLE NAMES ARE STRINGS, stored in a dict >>> locals() {'__name__': '__main__', '__doc__': None, '__package__': None, '__loader__': <class '_frozen_importlib.BuiltinImporter'>, '__spec__': None, '__annotations__': {}, '__builtins__': <module 'builtins' (built-in)>, 'float_number': 42.0, 'foo_func': <function foo_func at 0x1055847a0>} Python Functions Since functions too are objects, we can see what all attributes a function contains as following >>> def hello(name): ... print(f\"Hello, {name}!\") ... >>> dir(hello) ['__annotations__', '__call__', '__class__', '__closure__', '__code__', '__defaults__', '__delattr__', '__dict__', '__dir__', '__doc__', '__eq__', '__format__', '__ge__', '__get__', '__getattribute__', '__globals__', '__gt__', '__hash__', '__init__', '__init_subclass__', '__kwdefaults__', '__le__', '__lt__', '__module__', '__name__', '__ne__', '__new__', '__qualname__', '__reduce__', '__reduce_ex__', '__repr__', '__setattr__', '__sizeof__', '__str__', '__subclasshook__'] While there are a lot of them, let's look at some interesting ones globals This attribute, as the name suggests, has references of global variables. If you ever need to know what all global variables are in the scope of this function, this will tell you. See how the function start seeing the new variable in globals >>> hello.__globals__ {'__name__': '__main__', '__doc__': None, '__package__': None, '__loader__': <class '_frozen_importlib.BuiltinImporter'>, '__spec__': None, '__annotations__': {}, '__builtins__': <module 'builtins' (built-in)>, 'hello': <function hello at 0x7fe4e82554c0>} # adding new global variable >>> GLOBAL=\"g_val\" >>> hello.__globals__ {'__name__': '__main__', '__doc__': None, '__package__': None, '__loader__': <class '_frozen_importlib.BuiltinImporter'>, '__spec__': None, '__annotations__': {}, '__builtins__': <module 'builtins' (built-in)>, 'hello': <function hello at 0x7fe4e82554c0>, 'GLOBAL': 'g_val'} code This is an interesting one! As everything in python is an object, this includes the bytecode too. The compiled python bytecode is a python code object. Which is accessible via __code__ attribute here. A function has an associated code object which carries some interesting information. # the file in which function is defined # stdin here since this is run in an interpreter >>> hello.__code__.co_filename '<stdin>' # number of arguments the function takes >>> hello.__code__.co_argcount 1 # local variable names >>> hello.__code__.co_varnames ('name',) # the function code's compiled bytecode >>> hello.__code__.co_code b't\\x00d\\x01|\\x00\\x9b\\x00d\\x02\\x9d\\x03\\x83\\x01\\x01\\x00d\\x00S\\x00' There are more code attributes which you can enlist by >>> dir(hello.__code__) Decorators Related to functions, python has another feature called decorators. Let's see how that works, keeping everything is an object in mind. Here is a sample decorator: >>> def deco(func): ... def inner(): ... print(\"before\") ... func() ... print(\"after\") ... return inner ... >>> @deco ... def hello_world(): ... print(\"hello world\") ... >>> >>> hello_world() before hello world after Here @deco syntax is used to decorate the hello_world function. It is essentially same as doing >>> def hello_world(): ... print(\"hello world\") ... >>> hello_world = deco(hello_world) What goes inside the deco function might seem complex. Let's try to uncover it. Function hello_world is created It is passed to deco function deco create a new function This new function is calls hello_world function And does a couple other things deco returns the newly created function hello_world is replaced with above function Let's visualize it for better understanding BEFORE function_object (ID: 100) \"hello_world\" +--------------------+ + |print(\"hello_world\")| | | | +--------------> | | | | +--------------------+ WHAT DECORATOR DOES creates a new function (ID: 101) +---------------------------------+ |input arg: function with id: 100 | | | |print(\"before\") | |call function object with id 100 | |print(\"after\") | | | +---------------------------^-----+ | | AFTER | | | \"hello_world\" +-------------+ Note how the hello_world name points to a new function object but that new function object knows the reference (ID) of the original function. Some Gotchas While it is very quick to build prototypes in python and there are tons of libraries available, as the codebase complexity increases, type errors become more common and will get hard to deal with. (There are solutions to that problem like type annotations in python. Checkout mypy .) Because python is dynamically typed language, that means all types are determined at runtime. And that makes python run very slow compared to other statically typed languages. Python has something called GIL (global interpreter lock) which is a limiting factor for utilizing multiple CPI cores for parallel computation. Some weird things that python does: https://github.com/satwikkansal/wtfpython","title":"Some Python Concepts"},{"location":"python_web/python-concepts/#some-python-concepts","text":"Though you are expected to know python and its syntax at basic level, let us discuss some fundamental concepts that will help you understand the python language better. Everything in Python is an object. That includes the functions, lists, dicts, classes, modules, a running function (instance of function definition), everything. In the CPython, it would mean there is an underlying struct variable for each object. In python's current execution context, all the variables are stored in a dict. It'd be a string to object mapping. If you have a function and a float variable defined in the current context, here is how it is handled internally. >>> float_number=42.0 >>> def foo_func(): ... pass ... # NOTICE HOW VARIABLE NAMES ARE STRINGS, stored in a dict >>> locals() {'__name__': '__main__', '__doc__': None, '__package__': None, '__loader__': <class '_frozen_importlib.BuiltinImporter'>, '__spec__': None, '__annotations__': {}, '__builtins__': <module 'builtins' (built-in)>, 'float_number': 42.0, 'foo_func': <function foo_func at 0x1055847a0>}","title":"Some Python Concepts"},{"location":"python_web/python-concepts/#python-functions","text":"Since functions too are objects, we can see what all attributes a function contains as following >>> def hello(name): ... print(f\"Hello, {name}!\") ... >>> dir(hello) ['__annotations__', '__call__', '__class__', '__closure__', '__code__', '__defaults__', '__delattr__', '__dict__', '__dir__', '__doc__', '__eq__', '__format__', '__ge__', '__get__', '__getattribute__', '__globals__', '__gt__', '__hash__', '__init__', '__init_subclass__', '__kwdefaults__', '__le__', '__lt__', '__module__', '__name__', '__ne__', '__new__', '__qualname__', '__reduce__', '__reduce_ex__', '__repr__', '__setattr__', '__sizeof__', '__str__', '__subclasshook__'] While there are a lot of them, let's look at some interesting ones","title":"Python Functions"},{"location":"python_web/python-concepts/#globals","text":"This attribute, as the name suggests, has references of global variables. If you ever need to know what all global variables are in the scope of this function, this will tell you. See how the function start seeing the new variable in globals >>> hello.__globals__ {'__name__': '__main__', '__doc__': None, '__package__': None, '__loader__': <class '_frozen_importlib.BuiltinImporter'>, '__spec__': None, '__annotations__': {}, '__builtins__': <module 'builtins' (built-in)>, 'hello': <function hello at 0x7fe4e82554c0>} # adding new global variable >>> GLOBAL=\"g_val\" >>> hello.__globals__ {'__name__': '__main__', '__doc__': None, '__package__': None, '__loader__': <class '_frozen_importlib.BuiltinImporter'>, '__spec__': None, '__annotations__': {}, '__builtins__': <module 'builtins' (built-in)>, 'hello': <function hello at 0x7fe4e82554c0>, 'GLOBAL': 'g_val'}","title":"globals"},{"location":"python_web/python-concepts/#code","text":"This is an interesting one! As everything in python is an object, this includes the bytecode too. The compiled python bytecode is a python code object. Which is accessible via __code__ attribute here. A function has an associated code object which carries some interesting information. # the file in which function is defined # stdin here since this is run in an interpreter >>> hello.__code__.co_filename '<stdin>' # number of arguments the function takes >>> hello.__code__.co_argcount 1 # local variable names >>> hello.__code__.co_varnames ('name',) # the function code's compiled bytecode >>> hello.__code__.co_code b't\\x00d\\x01|\\x00\\x9b\\x00d\\x02\\x9d\\x03\\x83\\x01\\x01\\x00d\\x00S\\x00' There are more code attributes which you can enlist by >>> dir(hello.__code__)","title":"code"},{"location":"python_web/python-concepts/#decorators","text":"Related to functions, python has another feature called decorators. Let's see how that works, keeping everything is an object in mind. Here is a sample decorator: >>> def deco(func): ... def inner(): ... print(\"before\") ... func() ... print(\"after\") ... return inner ... >>> @deco ... def hello_world(): ... print(\"hello world\") ... >>> >>> hello_world() before hello world after Here @deco syntax is used to decorate the hello_world function. It is essentially same as doing >>> def hello_world(): ... print(\"hello world\") ... >>> hello_world = deco(hello_world) What goes inside the deco function might seem complex. Let's try to uncover it. Function hello_world is created It is passed to deco function deco create a new function This new function is calls hello_world function And does a couple other things deco returns the newly created function hello_world is replaced with above function Let's visualize it for better understanding BEFORE function_object (ID: 100) \"hello_world\" +--------------------+ + |print(\"hello_world\")| | | | +--------------> | | | | +--------------------+ WHAT DECORATOR DOES creates a new function (ID: 101) +---------------------------------+ |input arg: function with id: 100 | | | |print(\"before\") | |call function object with id 100 | |print(\"after\") | | | +---------------------------^-----+ | | AFTER | | | \"hello_world\" +-------------+ Note how the hello_world name points to a new function object but that new function object knows the reference (ID) of the original function.","title":"Decorators"},{"location":"python_web/python-concepts/#some-gotchas","text":"While it is very quick to build prototypes in python and there are tons of libraries available, as the codebase complexity increases, type errors become more common and will get hard to deal with. (There are solutions to that problem like type annotations in python. Checkout mypy .) Because python is dynamically typed language, that means all types are determined at runtime. And that makes python run very slow compared to other statically typed languages. Python has something called GIL (global interpreter lock) which is a limiting factor for utilizing multiple CPI cores for parallel computation. Some weird things that python does: https://github.com/satwikkansal/wtfpython","title":"Some Gotchas"},{"location":"python_web/python-web-flask/","text":"Python, Web and Flask Back in the old days, websites were simple. They were simple static html contents. A webserver would be listening on a defined port and according to the HTTP request received, it would read files from disk and return them in response. But since then, complexity has evolved and websites are now dynamic. Depending on the request, multiple operations need to be performed like reading from database or calling other API and finally returning some response (HTML data, JSON content etc.) Since serving web requests is no longer a simple task like reading files from disk and return contents, we need to process each http request, perform some operations programmatically and construct a response. Sockets Though we have frameworks like flask, HTTP is still a protocol that works over TCP protocol. So let us setup a TCP server and send an HTTP request and inspect the request's payload. Note that this is not a tutorial on socket programming but what we are doing here is inspecting HTTP protocol at its ground level and look at what its contents look like. (Ref: Socket Programming in Python (Guide) on RealPython ) import socket HOST = '127.0.0.1' # Standard loopback interface address (localhost) PORT = 65432 # Port to listen on (non-privileged ports are > 1023) with socket.socket(socket.AF_INET, socket.SOCK_STREAM) as s: s.bind((HOST, PORT)) s.listen() conn, addr = s.accept() with conn: print('Connected by', addr) while True: data = conn.recv(1024) if not data: break print(data) Then we open localhost:65432 in our web browser and following would be the output: Connected by ('127.0.0.1', 54719) b'GET / HTTP/1.1\\r\\nHost: localhost:65432\\r\\nConnection: keep-alive\\r\\nDNT: 1\\r\\nUpgrade-Insecure-Requests: 1\\r\\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.83 Safari/537.36 Edg/85.0.564.44\\r\\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\\r\\nSec-Fetch-Site: none\\r\\nSec-Fetch-Mode: navigate\\r\\nSec-Fetch-User: ?1\\r\\nSec-Fetch-Dest: document\\r\\nAccept-Encoding: gzip, deflate, br\\r\\nAccept-Language: en-US,en;q=0.9\\r\\n\\r\\n' Examine closely and the content will look like the HTTP protocol's format. ie: HTTP_METHOD URI_PATH HTTP_VERSION HEADERS_SEPARATED_BY_SEPARATOR So though it's a blob of bytes, knowing http protocol specification , you can parse that string (ie: split by \\r\\n ) and get meaningful information out of it. Flask Flask, and other such frameworks does pretty much what we just discussed in the last section (with added more sophistication). They listen on a port on a TCP socket, receive an HTTP request, parse the data according to protocol format and make it available to you in a convenient manner. ie: you can access headers in flask by request.headers which is made available to you by splitting above payload by /r/n , as defined in http protocol. Another example: we register routes in flask by @app.route(\"/hello\") . What flask will do is maintain a registry internally which will map /hello with the function you decorated with. Now whenever a request comes with the /hello route (second component in the first line, split by space), flask calls the registered function and returns whatever the function returned. Same with all other web frameworks in other languages too. They all work on similar principles. What they basically do is understand the HTTP protocol, parses the HTTP request data and gives us programmers a nice interface to work with HTTP requests. Not so much of magic, innit?","title":"Python, Web and Flask"},{"location":"python_web/python-web-flask/#python-web-and-flask","text":"Back in the old days, websites were simple. They were simple static html contents. A webserver would be listening on a defined port and according to the HTTP request received, it would read files from disk and return them in response. But since then, complexity has evolved and websites are now dynamic. Depending on the request, multiple operations need to be performed like reading from database or calling other API and finally returning some response (HTML data, JSON content etc.) Since serving web requests is no longer a simple task like reading files from disk and return contents, we need to process each http request, perform some operations programmatically and construct a response.","title":"Python, Web and Flask"},{"location":"python_web/python-web-flask/#sockets","text":"Though we have frameworks like flask, HTTP is still a protocol that works over TCP protocol. So let us setup a TCP server and send an HTTP request and inspect the request's payload. Note that this is not a tutorial on socket programming but what we are doing here is inspecting HTTP protocol at its ground level and look at what its contents look like. (Ref: Socket Programming in Python (Guide) on RealPython ) import socket HOST = '127.0.0.1' # Standard loopback interface address (localhost) PORT = 65432 # Port to listen on (non-privileged ports are > 1023) with socket.socket(socket.AF_INET, socket.SOCK_STREAM) as s: s.bind((HOST, PORT)) s.listen() conn, addr = s.accept() with conn: print('Connected by', addr) while True: data = conn.recv(1024) if not data: break print(data) Then we open localhost:65432 in our web browser and following would be the output: Connected by ('127.0.0.1', 54719) b'GET / HTTP/1.1\\r\\nHost: localhost:65432\\r\\nConnection: keep-alive\\r\\nDNT: 1\\r\\nUpgrade-Insecure-Requests: 1\\r\\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.83 Safari/537.36 Edg/85.0.564.44\\r\\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\\r\\nSec-Fetch-Site: none\\r\\nSec-Fetch-Mode: navigate\\r\\nSec-Fetch-User: ?1\\r\\nSec-Fetch-Dest: document\\r\\nAccept-Encoding: gzip, deflate, br\\r\\nAccept-Language: en-US,en;q=0.9\\r\\n\\r\\n' Examine closely and the content will look like the HTTP protocol's format. ie: HTTP_METHOD URI_PATH HTTP_VERSION HEADERS_SEPARATED_BY_SEPARATOR So though it's a blob of bytes, knowing http protocol specification , you can parse that string (ie: split by \\r\\n ) and get meaningful information out of it.","title":"Sockets"},{"location":"python_web/python-web-flask/#flask","text":"Flask, and other such frameworks does pretty much what we just discussed in the last section (with added more sophistication). They listen on a port on a TCP socket, receive an HTTP request, parse the data according to protocol format and make it available to you in a convenient manner. ie: you can access headers in flask by request.headers which is made available to you by splitting above payload by /r/n , as defined in http protocol. Another example: we register routes in flask by @app.route(\"/hello\") . What flask will do is maintain a registry internally which will map /hello with the function you decorated with. Now whenever a request comes with the /hello route (second component in the first line, split by space), flask calls the registered function and returns whatever the function returned. Same with all other web frameworks in other languages too. They all work on similar principles. What they basically do is understand the HTTP protocol, parses the HTTP request data and gives us programmers a nice interface to work with HTTP requests. Not so much of magic, innit?","title":"Flask"},{"location":"python_web/sre-conclusion/","text":"Conclusion Scaling The App The design and development is just a part of the journey. We will need to setup continuous integration and continuous delivery pipelines sooner or later. And we have to deploy this app somewhere. Initially we can start with deploying this app on one virtual machine on any cloud provider. But this is a Single point of failure which is something we never allow as an SRE (or even as an engineer). So an improvement here can be having multiple instances of applications deployed behind a load balancer. This certainly prevents problems of one machine going down. Scaling here would mean adding more instances behind the load balancer. But this is scalable upto only a certain point. After that, other bottlenecks in the system will start appearing. ie: DB will become the bottleneck, or perhaps the load balancer itself. How do you know what is the bottleneck? You need to have observability into each aspects of the application architecture. Only after you have metrics, you will be able to know what is going wrong where. What gets measured, gets fixed! Get deeper insights into scaling from School Of SRE's Scalability module and post going through it, apply your learnings and takeaways to this app. Think how will we make this app geographically distributed and highly available and scalable. Monitoring Strategy Once we have our application deployed. It will be working ok. But not forever. Reliability is in the title of our job and we make systems reliable by making the design in a certain way. But things still will go down. Machines will fail. Disks will behave weirdly. Buggy code will get pushed to production. And all these possible scenarios will make the system less reliable. So what do we do? We monitor! We keep an eye on the system's health and if anything is not going as expected, we want ourselves to get alerted. Now let's think in terms of the given url shortening app. We need to monitor it. And we would want to get notified in case something goes wrong. But we first need to decide what is that something that we want to keep an eye on. Since it's a web app serving HTTP requests, we want to keep an eye on HTTP Status codes and latencies Request volume again is a good candidate, if the app is receiving an unusual amount of traffic, something might be off. We also want to keep an eye on the database so depending on the database solution chosen. Query times, volumes, disk usage etc. Finally, there also needs to be some external monitoring which runs periodic tests from devices outside of your data centers. This emulates customers and ensures that from customer point of view, the system is working as expected. Applications in SRE role In the world of SRE, python is a widely used language. For small scripts and tooling developed for various purposes. Since tooling developed by SRE works with critical pieces of infrastructure and has great power (to bring things down), it is important to know what you are doing while using a programming language and its features. Also it is equally important to know the language and its characteristics while debugging the issues. As an SRE having a deeper understanding of python language, it has helped me a lot to debug very sneaky bugs and be generally more aware and informed while making certain design decisions. While developing tools may or may not be part of SRE job, supporting tools or services is more likely to be a daily duty. Building an application or tool is just a small part of productionization. While there is certainly that goes in the design of the application itself to make it more robust, as an SRE you are responsible for its reliability and stability once it is deployed and running. And to ensure that, you\u2019d need to understand the application first and then come up with a strategy to monitor it properly and be prepared for various failure scenarios. Optional Exercises Make a decorator that will cache function return values depending on input parameters. Host the URL shortening app on any cloud provider. Setup monitoring using many of the tools available like catchpoint, datadog etc. Create a minimal flask-like framework on top of TCP sockets. Conclusion This module, in the first part, aims to make you more aware of the things that will happen when you choose python as your programming language and what happens when you run a python program. With the knowledge of how python handles things internally as objects, lot of seemingly magic things in python will start to make more sense. The second part will first explain how a framework like flask works using the existing knowledge of protocols like TCP and HTTP. It then touches the whole lifecycle of an application development lifecycle including the SRE parts of it. While the design and areas in architecture considered will not be exhaustive, it will give a good overview of things that are also important being an SRE and why they are important.","title":"Conclusion"},{"location":"python_web/sre-conclusion/#conclusion","text":"","title":"Conclusion"},{"location":"python_web/sre-conclusion/#scaling-the-app","text":"The design and development is just a part of the journey. We will need to setup continuous integration and continuous delivery pipelines sooner or later. And we have to deploy this app somewhere. Initially we can start with deploying this app on one virtual machine on any cloud provider. But this is a Single point of failure which is something we never allow as an SRE (or even as an engineer). So an improvement here can be having multiple instances of applications deployed behind a load balancer. This certainly prevents problems of one machine going down. Scaling here would mean adding more instances behind the load balancer. But this is scalable upto only a certain point. After that, other bottlenecks in the system will start appearing. ie: DB will become the bottleneck, or perhaps the load balancer itself. How do you know what is the bottleneck? You need to have observability into each aspects of the application architecture. Only after you have metrics, you will be able to know what is going wrong where. What gets measured, gets fixed! Get deeper insights into scaling from School Of SRE's Scalability module and post going through it, apply your learnings and takeaways to this app. Think how will we make this app geographically distributed and highly available and scalable.","title":"Scaling The App"},{"location":"python_web/sre-conclusion/#monitoring-strategy","text":"Once we have our application deployed. It will be working ok. But not forever. Reliability is in the title of our job and we make systems reliable by making the design in a certain way. But things still will go down. Machines will fail. Disks will behave weirdly. Buggy code will get pushed to production. And all these possible scenarios will make the system less reliable. So what do we do? We monitor! We keep an eye on the system's health and if anything is not going as expected, we want ourselves to get alerted. Now let's think in terms of the given url shortening app. We need to monitor it. And we would want to get notified in case something goes wrong. But we first need to decide what is that something that we want to keep an eye on. Since it's a web app serving HTTP requests, we want to keep an eye on HTTP Status codes and latencies Request volume again is a good candidate, if the app is receiving an unusual amount of traffic, something might be off. We also want to keep an eye on the database so depending on the database solution chosen. Query times, volumes, disk usage etc. Finally, there also needs to be some external monitoring which runs periodic tests from devices outside of your data centers. This emulates customers and ensures that from customer point of view, the system is working as expected.","title":"Monitoring Strategy"},{"location":"python_web/sre-conclusion/#applications-in-sre-role","text":"In the world of SRE, python is a widely used language. For small scripts and tooling developed for various purposes. Since tooling developed by SRE works with critical pieces of infrastructure and has great power (to bring things down), it is important to know what you are doing while using a programming language and its features. Also it is equally important to know the language and its characteristics while debugging the issues. As an SRE having a deeper understanding of python language, it has helped me a lot to debug very sneaky bugs and be generally more aware and informed while making certain design decisions. While developing tools may or may not be part of SRE job, supporting tools or services is more likely to be a daily duty. Building an application or tool is just a small part of productionization. While there is certainly that goes in the design of the application itself to make it more robust, as an SRE you are responsible for its reliability and stability once it is deployed and running. And to ensure that, you\u2019d need to understand the application first and then come up with a strategy to monitor it properly and be prepared for various failure scenarios.","title":"Applications in SRE role"},{"location":"python_web/sre-conclusion/#optional-exercises","text":"Make a decorator that will cache function return values depending on input parameters. Host the URL shortening app on any cloud provider. Setup monitoring using many of the tools available like catchpoint, datadog etc. Create a minimal flask-like framework on top of TCP sockets.","title":"Optional Exercises"},{"location":"python_web/sre-conclusion/#conclusion_1","text":"This module, in the first part, aims to make you more aware of the things that will happen when you choose python as your programming language and what happens when you run a python program. With the knowledge of how python handles things internally as objects, lot of seemingly magic things in python will start to make more sense. The second part will first explain how a framework like flask works using the existing knowledge of protocols like TCP and HTTP. It then touches the whole lifecycle of an application development lifecycle including the SRE parts of it. While the design and areas in architecture considered will not be exhaustive, it will give a good overview of things that are also important being an SRE and why they are important.","title":"Conclusion"},{"location":"python_web/url-shorten-app/","text":"The URL Shortening App Let's build a very simple URL shortening app using flask and try to incorporate all aspects of the development process including the reliability aspects. We will not be building the UI and we will come up with a minimal set of API that will be enough for the app to function well. Design We don't jump directly to coding. First thing we do is gather requirements. Come up with an approach. Have the approach/design reviewed by peers. Evolve, iterate, document the decisions and tradeoffs. And then finally implement. While we will not do the full blown design document here, we will raise certain questions here that are important to the design. 1. High Level Operations and API Endpoints Since it's a URL shortening app, we will need an API for generating the shorten link given an original link. And an API/Endpoint which will accept the shorten link and redirect to original URL. We are not including the user aspect of the app to keep things minimal. These two API should make app functional and usable by anyone. 2. How to shorten? Given a url, we will need to generate a shortened version of it. One approach could be using random characters for each link. Another thing that can be done is to use some sort of hashing algorithm. The benefit here is we will reuse the same hash for the same link. ie: if lot of people are shortening https://www.linkedin.com they all will have the same value, compared to multiple entries in DB if chosen random characters. What about hash collisions? Even in random characters approach, though there is a less probability, hash collisions can happen. And we need to be mindful of them. In that case we might want to prepend/append the string with some random value to avoid conflict. Also, choice of hash algorithm matters. We will need to analyze algorithms. Their CPU requirements and their characteristics. Choose one that suits the most. 3. Is URL Valid? Given a URL to shorten, how do we verify if the URL is valid? Do we even verify or validate? One basic check that can be done is see if the URL matches a regex of a URL. To go even further we can try opening/visiting the URL. But there are certain gotchas here. We need to define success criteria. ie: HTTP 200 means it is valid. What is the URL is in private network? What if URL is temporarily down? 4. Storage Finally, storage. Where will we store the data that we will generate over time? There are multiple database solutions available and we will need to choose the one that suits this app the most. Relational database like MySQL would be a fair choice but be sure to checkout School of SRE's database section for deeper insights into making a more informed decision. 5. Other We are not accounting for users into our app and other possible features like rate limiting, customized links etc but it will eventually come up with time. Depending on the requirements, they too might need to get incorporated. The minimal working code is given below for reference but I'd encourage you to come up with your own. from flask import Flask, redirect, request from hashlib import md5 app = Flask(\"url_shortener\") mapping = {} @app.route(\"/shorten\", methods=[\"POST\"]) def shorten(): global mapping payload = request.json if \"url\" not in payload: return \"Missing URL Parameter\", 400 # TODO: check if URL is valid hash_ = md5() hash_.update(payload[\"url\"].encode()) digest = hash_.hexdigest()[:5] # limiting to 5 chars. Less the limit more the chances of collission if digest not in mapping: mapping[digest] = payload[\"url\"] return f\"Shortened: r/{digest}\\n\" else: # TODO: check for hash collission return f\"Already exists: r/{digest}\\n\" @app.route(\"/r/<hash_>\") def redirect_(hash_): if hash_ not in mapping: return \"URL Not Found\", 404 return redirect(mapping[hash_]) if __name__ == \"__main__\": app.run(debug=True) \"\"\" OUTPUT: ===> SHORTENING spatel1-mn1:tmp spatel1$ curl localhost:5000/shorten -H \"content-type: application/json\" --data '{\"url\":\"https://linkedin.com\"}' Shortened: r/a62a4 ===> REDIRECTING, notice the response code 302 and the location header spatel1-mn1:tmp spatel1$ curl localhost:5000/r/a62a4 -v * Uses proxy env variable NO_PROXY == '127.0.0.1' * Trying ::1... * TCP_NODELAY set * Connection failed * connect to ::1 port 5000 failed: Connection refused * Trying 127.0.0.1... * TCP_NODELAY set * Connected to localhost (127.0.0.1) port 5000 (#0) > GET /r/a62a4 HTTP/1.1 > Host: localhost:5000 > User-Agent: curl/7.64.1 > Accept: */* > * HTTP 1.0, assume close after body < HTTP/1.0 302 FOUND < Content-Type: text/html; charset=utf-8 < Content-Length: 247 < Location: https://linkedin.com < Server: Werkzeug/0.15.4 Python/3.7.7 < Date: Tue, 27 Oct 2020 09:37:12 GMT < <!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 3.2 Final//EN\"> <title>Redirecting...</title> <h1>Redirecting...</h1> * Closing connection 0 <p>You should be redirected automatically to target URL: <a href=\"https://linkedin.com\">https://linkedin.com</a>. If not click the link. \"\"\"","title":"The URL Shortening App"},{"location":"python_web/url-shorten-app/#the-url-shortening-app","text":"Let's build a very simple URL shortening app using flask and try to incorporate all aspects of the development process including the reliability aspects. We will not be building the UI and we will come up with a minimal set of API that will be enough for the app to function well.","title":"The URL Shortening App"},{"location":"python_web/url-shorten-app/#design","text":"We don't jump directly to coding. First thing we do is gather requirements. Come up with an approach. Have the approach/design reviewed by peers. Evolve, iterate, document the decisions and tradeoffs. And then finally implement. While we will not do the full blown design document here, we will raise certain questions here that are important to the design.","title":"Design"},{"location":"python_web/url-shorten-app/#1-high-level-operations-and-api-endpoints","text":"Since it's a URL shortening app, we will need an API for generating the shorten link given an original link. And an API/Endpoint which will accept the shorten link and redirect to original URL. We are not including the user aspect of the app to keep things minimal. These two API should make app functional and usable by anyone.","title":"1. High Level Operations and API Endpoints"},{"location":"python_web/url-shorten-app/#2-how-to-shorten","text":"Given a url, we will need to generate a shortened version of it. One approach could be using random characters for each link. Another thing that can be done is to use some sort of hashing algorithm. The benefit here is we will reuse the same hash for the same link. ie: if lot of people are shortening https://www.linkedin.com they all will have the same value, compared to multiple entries in DB if chosen random characters. What about hash collisions? Even in random characters approach, though there is a less probability, hash collisions can happen. And we need to be mindful of them. In that case we might want to prepend/append the string with some random value to avoid conflict. Also, choice of hash algorithm matters. We will need to analyze algorithms. Their CPU requirements and their characteristics. Choose one that suits the most.","title":"2. How to shorten?"},{"location":"python_web/url-shorten-app/#3-is-url-valid","text":"Given a URL to shorten, how do we verify if the URL is valid? Do we even verify or validate? One basic check that can be done is see if the URL matches a regex of a URL. To go even further we can try opening/visiting the URL. But there are certain gotchas here. We need to define success criteria. ie: HTTP 200 means it is valid. What is the URL is in private network? What if URL is temporarily down?","title":"3. Is URL Valid?"},{"location":"python_web/url-shorten-app/#4-storage","text":"Finally, storage. Where will we store the data that we will generate over time? There are multiple database solutions available and we will need to choose the one that suits this app the most. Relational database like MySQL would be a fair choice but be sure to checkout School of SRE's database section for deeper insights into making a more informed decision.","title":"4. Storage"},{"location":"python_web/url-shorten-app/#5-other","text":"We are not accounting for users into our app and other possible features like rate limiting, customized links etc but it will eventually come up with time. Depending on the requirements, they too might need to get incorporated. The minimal working code is given below for reference but I'd encourage you to come up with your own. from flask import Flask, redirect, request from hashlib import md5 app = Flask(\"url_shortener\") mapping = {} @app.route(\"/shorten\", methods=[\"POST\"]) def shorten(): global mapping payload = request.json if \"url\" not in payload: return \"Missing URL Parameter\", 400 # TODO: check if URL is valid hash_ = md5() hash_.update(payload[\"url\"].encode()) digest = hash_.hexdigest()[:5] # limiting to 5 chars. Less the limit more the chances of collission if digest not in mapping: mapping[digest] = payload[\"url\"] return f\"Shortened: r/{digest}\\n\" else: # TODO: check for hash collission return f\"Already exists: r/{digest}\\n\" @app.route(\"/r/<hash_>\") def redirect_(hash_): if hash_ not in mapping: return \"URL Not Found\", 404 return redirect(mapping[hash_]) if __name__ == \"__main__\": app.run(debug=True) \"\"\" OUTPUT: ===> SHORTENING spatel1-mn1:tmp spatel1$ curl localhost:5000/shorten -H \"content-type: application/json\" --data '{\"url\":\"https://linkedin.com\"}' Shortened: r/a62a4 ===> REDIRECTING, notice the response code 302 and the location header spatel1-mn1:tmp spatel1$ curl localhost:5000/r/a62a4 -v * Uses proxy env variable NO_PROXY == '127.0.0.1' * Trying ::1... * TCP_NODELAY set * Connection failed * connect to ::1 port 5000 failed: Connection refused * Trying 127.0.0.1... * TCP_NODELAY set * Connected to localhost (127.0.0.1) port 5000 (#0) > GET /r/a62a4 HTTP/1.1 > Host: localhost:5000 > User-Agent: curl/7.64.1 > Accept: */* > * HTTP 1.0, assume close after body < HTTP/1.0 302 FOUND < Content-Type: text/html; charset=utf-8 < Content-Length: 247 < Location: https://linkedin.com < Server: Werkzeug/0.15.4 Python/3.7.7 < Date: Tue, 27 Oct 2020 09:37:12 GMT < <!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 3.2 Final//EN\"> <title>Redirecting...</title> <h1>Redirecting...</h1> * Closing connection 0 <p>You should be redirected automatically to target URL: <a href=\"https://linkedin.com\">https://linkedin.com</a>. If not click the link. \"\"\"","title":"5. Other"},{"location":"security/conclusion/","text":"Conclusion Now that you have completed this course on Security you are now aware of the possible security threats to computer systems & networks. Not only that, but you are now better able to protect your systems as well as recommend security measures to others. This course provides fundamental everyday knowledge on security domain which will also help you keep security at the top of your priority. Other Resources Some books that would be a great resource Holistic Info-Sec for Web Developers https://holisticinfosecforwebdevelopers.com/ - Free and downloadable book series with very broad and deep coverage of what Web Developers and DevOps Engineers need to know in order to create robust, reliable, maintainable and secure software, networks and other, that are delivered continuously, on time, with no nasty surprises Docker Security - Quick Reference: For DevOps Engineers https://holisticinfosecforwebdevelopers.com/ - A book on understanding the Docker security defaults, how to improve them (theory and practical), along with many tools and techniques. How to Hack Like a Legend https://amzn.to/2uWh1Up - A hacker\u2019s tale breaking into a secretive offshore company, Sparc Flow, 2018 How to Investigate Like a Rockstar https://books2read.com/u/4jDWoZ - Live a real crisis to master the secrets of forensic analysis, Sparc Flow, 2017 Real World Cryptography https://www.manning.com/books/real-world-cryptography - This early-access book teaches you applied cryptographic techniques to understand and apply security at every level of your systems and applications. AWS Security https://www.manning.com/books/aws-security?utm_source=github&utm_medium=organic&utm_campaign=book_shields_aws_1_31_20 - This early-access book covers commong AWS security issues and best practices for access policies, data protection, auditing, continuous monitoring, and incident response. Post Training asks/ Further Reading CTF Events like : https://github.com/apsdehal/awesome-ctf Penetration Testing : https://github.com/enaqx/awesome-pentest Threat Intelligence : https://github.com/hslatman/awesome-threat-intelligence Threat Detection & Hunting : https://github.com/0x4D31/awesome-threat-detection Web Security: https://github.com/qazbnm456/awesome-web-security Building Secure and Reliable Systems : https://landing.google.com/sre/resources/foundationsandprinciples/srs-book/","title":"Conclusion"},{"location":"security/conclusion/#conclusion","text":"Now that you have completed this course on Security you are now aware of the possible security threats to computer systems & networks. Not only that, but you are now better able to protect your systems as well as recommend security measures to others. This course provides fundamental everyday knowledge on security domain which will also help you keep security at the top of your priority.","title":"Conclusion"},{"location":"security/conclusion/#other-resources","text":"Some books that would be a great resource Holistic Info-Sec for Web Developers https://holisticinfosecforwebdevelopers.com/ - Free and downloadable book series with very broad and deep coverage of what Web Developers and DevOps Engineers need to know in order to create robust, reliable, maintainable and secure software, networks and other, that are delivered continuously, on time, with no nasty surprises Docker Security - Quick Reference: For DevOps Engineers https://holisticinfosecforwebdevelopers.com/ - A book on understanding the Docker security defaults, how to improve them (theory and practical), along with many tools and techniques. How to Hack Like a Legend https://amzn.to/2uWh1Up - A hacker\u2019s tale breaking into a secretive offshore company, Sparc Flow, 2018 How to Investigate Like a Rockstar https://books2read.com/u/4jDWoZ - Live a real crisis to master the secrets of forensic analysis, Sparc Flow, 2017 Real World Cryptography https://www.manning.com/books/real-world-cryptography - This early-access book teaches you applied cryptographic techniques to understand and apply security at every level of your systems and applications. AWS Security https://www.manning.com/books/aws-security?utm_source=github&utm_medium=organic&utm_campaign=book_shields_aws_1_31_20 - This early-access book covers commong AWS security issues and best practices for access policies, data protection, auditing, continuous monitoring, and incident response.","title":"Other Resources"},{"location":"security/conclusion/#post-training-asks-further-reading","text":"CTF Events like : https://github.com/apsdehal/awesome-ctf Penetration Testing : https://github.com/enaqx/awesome-pentest Threat Intelligence : https://github.com/hslatman/awesome-threat-intelligence Threat Detection & Hunting : https://github.com/0x4D31/awesome-threat-detection Web Security: https://github.com/qazbnm456/awesome-web-security Building Secure and Reliable Systems : https://landing.google.com/sre/resources/foundationsandprinciples/srs-book/","title":"Post Training asks/ Further Reading"},{"location":"security/fundamentals/","text":"Part I: Fundamentals Introduction to Security Overview for SRE If you look closely, both Site Reliability Engineering and Security Engineering are concerned with keeping a system usable. Issues like broken releases, capacity shortages, and misconfigurations can make a system unusable (at least temporarily). Security or privacy incidents that break the trust of users also undermine the usefulness of a system. Consequently, system security should be top of mind for SREs. SREs should be involved in both significant design discussions and actual system changes. They have quite a big role in System design & hence are quite sometimes the first line of defence. SRE\u2019s help in preventing bad design & implementations which can affect the overall security of the infrastructure. Successfully designing, implementing, and maintaining systems requires a commitment to the full system lifecycle . This commitment is possible only when security and reliability are central elements in the architecture of systems. Core Pillars of Information Security : Confidentiality \u2013 only allow access to data for which the user is permitted Integrity \u2013 ensure data is not tampered or altered by unauthorized users Availability \u2013 ensure systems and data are available to authorized users when they need it Thinking like a Security Engineer When starting a new application or re-factoring an existing application, you should consider each functional feature, and consider: Is the process surrounding this feature as safe as possible? In other words, is this a flawed process? If I were evil, how would I abuse this feature? Or more specifically failing to address how a feature can be abused can cause design flaws. Is the feature required to be on by default? If so, are there limits or options that could help reduce the risk from this feature? Security Principles By OWASP (Open Web Application Security Project) Minimize attack surface area : Every feature that is added to an application adds a certain amount of risk to the overall application. The aim of secure development is to reduce the overall risk by reducing the attack surface area. For example, a web application implements online help with a search function. The search function may be vulnerable to SQL injection attacks. If the help feature was limited to authorized users, the attack likelihood is reduced. If the help feature\u2019s search function was gated through centralized data validation routines, the ability to perform SQL injection is dramatically reduced. However, if the help feature was re-written to eliminate the search function (through a better user interface, for example), this almost eliminates the attack surface area, even if the help feature was available to the Internet at large. Establish secure defaults: There are many ways to deliver an \u201cout of the box\u201d experience for users. However, by default, the experience should be secure, and it should be up to the user to reduce their security \u2013 if they are allowed. For example, by default, password ageing and complexity should be enabled. Users might be allowed to turn these two features off to simplify their use of the application and increase their risk. Default Passwords of routers, IoT devices should be changed Principle of Least privilege The principle of least privilege recommends that accounts have the least amount of privilege required to perform their business processes. This encompasses user rights, resource permissions such as CPU limits, memory, network, and file system permissions. For example, if a middleware server only requires access to the network, read access to a database table, and the ability to write to a log, this describes all the permissions that should be granted. Under no circumstances should the middleware be granted administrative privileges. Principle of Defense in depth The principle of defence in depth suggests that where one control would be reasonable, more controls that approach risks in different fashions are better. Controls, when used in depth, can make severe vulnerabilities extraordinarily difficult to exploit and thus unlikely to occur. With secure coding, this may take the form of tier-based validation, centralized auditing controls, and requiring users to be logged on all pages. For example, a flawed administrative interface is unlikely to be vulnerable to an anonymous attack if it correctly gates access to production management networks, checks for administrative user authorization, and logs all access. Fail securely Applications regularly fail to process transactions for many reasons. How they fail can determine if an application is secure or not. ``` is_admin = true; try { code_which_may_faile(); is_admin = is_user_assigned_role(\"Adminstrator\"); } catch (Exception err) { log.error(err.toString()); } ``` - If either codeWhichMayFail() or isUserInRole fails or throws an exception, the user is an admin by default. This is obviously a security risk. Don\u2019t trust services Many organizations utilize the processing capabilities of third-party partners, who more than likely have different security policies and posture than you. It is unlikely that you can influence or control any external third party, whether they are home users or major suppliers or partners. Therefore, the implicit trust of externally run systems is not warranted. All external systems should be treated similarly. For example, a loyalty program provider provides data that is used by Internet Banking, providing the number of reward points and a small list of potential redemption items. However, the data should be checked to ensure that it is safe to display to end-users and that the reward points are a positive number, and not improbably large. Separation of duties The key to fraud control is the separation of duties. For example, someone who requests a computer cannot also sign for it, nor should they directly receive the computer. This prevents the user from requesting many computers and claiming they never arrived. Certain roles have different levels of trust than normal users. In particular, administrators are different from normal users. In general, administrators should not be users of the application. For example, an administrator should be able to turn the system on or off, set password policy but shouldn\u2019t be able to log on to the storefront as a super privileged user, such as being able to \u201cbuy\u201d goods on behalf of other users. Avoid security by obscurity Security through obscurity is a weak security control, and nearly always fails when it is the only control. This is not to say that keeping secrets is a bad idea, it simply means that the security of systems should not be reliant upon keeping details hidden. For example, the security of an application should not rely upon knowledge of the source code being kept secret. The security should rely upon many other factors, including reasonable password policies, defence in depth, business transaction limits, solid network architecture, and fraud, and audit controls. A practical example is Linux. Linux\u2019s source code is widely available, and yet when properly secured, Linux is a secure and robust operating system. Keep security simple Attack surface area and simplicity go hand in hand. Certain software engineering practices prefer overly complex approaches to what would otherwise be a relatively straightforward and simple design. Developers should avoid the use of double negatives and complex architectures when a simpler approach would be faster and simpler. For example, although it might be fashionable to have a slew of singleton entity beans running on a separate middleware server, it is more secure and faster to simply use global variables with an appropriate mutex mechanism to protect against race conditions. Fix security issues correctly Once a security issue has been identified, it is important to develop a test for it and to understand the root cause of the issue. When design patterns are used, the security issue is likely widespread amongst all codebases, so developing the right fix without introducing regressions is essential. For example, a user has found that they can see another user\u2019s balance by adjusting their cookie. The fix seems to be relatively straightforward, but as the cookie handling code is shared among all applications, a change to just one application will trickle through to all other applications. The fix must, therefore, be tested on all affected applications. Reliability & Security Reliability and security are both crucial components of a truly trustworthy system, but building systems that are both reliable and secure is difficult. While the requirements for reliability and security share many common properties, they also require different design considerations. It is easy to miss the subtle interplay between reliability and security that can cause unexpected outcomes Ex: A password management application failure was triggered by a reliability problem i.e poor load-balancing and load-shedding strategies and its recovery were later complicated by multiple measures (HSM mechanism which needs to be plugged into server racks, which works as an authentication & the HSM token supposedly locked inside a case.. & the problem can be further elongated ) designed to increase the security of the system. Authentication vs Authorization Authentication is the act of validating that users are who they claim to be. Passwords are the most common authentication factor\u2014if a user enters the correct password, the system assumes the identity is valid and grants access. Other technologies such as One-Time Pins, authentication apps, and even biometrics can also be used to authenticate identity. In some instances, systems require the successful verification of more than one factor before granting access. This multi-factor authentication (MFA) requirement is often deployed to increase security beyond what passwords alone can provide. Authorization in system security is the process of giving the user permission to access a specific resource or function. This term is often used interchangeably with access control or client privilege. Giving someone permission to download a particular file on a server or providing individual users with administrative access to an application are good examples. In secure environments, authorization must always follow authentication, users should first prove that their identities are genuine before an organization\u2019s administrators grant them access to the requested resources. Common authentication flow (local authentication) The user registers using an identifier like username/email/mobile The application stores user credentials in the database The application sends a verification email/message to validate the registration Post successful registration, the user enters credentials for logging in On successful authentication, the user is allowed access to specific resources OpenID/OAuth OpenID is an authentication protocol that allows us to authenticate users without using a local auth system. In such a scenario, a user has to be registered with an OpenID Provider and the same provider should be integrated with the authentication flow of your application. To verify the details, we have to forward the authentication requests to the provider. On successful authentication, we receive a success message and/or profile details with which we can execute the necessary flow. OAuth is an authorization mechanism that allows your application user access to a provider(Gmail/Facebook/Instagram/etc). On successful response, we (your application) receive a token with which the application can access certain APIs on behalf of a user. OAuth is convenient in case your business use case requires some certain user-facing APIs like access to Google Drive or sending tweets on your behalf. Most OAuth 2.0 providers can be used for pseudo authentication. Having said that, it can get pretty complicated if you are using multiple OAuth providers to authenticate users on top of the local authentication system. Cryptography It is the science and study of hiding any text in such a way that only the intended recipients or authorized persons can read it and that any text can even use things such as invisible ink or the mechanical cryptography machines of the past. Cryptography is necessary for securing critical or proprietary information and is used to encode private data messages by converting some plain text into ciphertext. At its core, there are two ways of doing this, more advanced methods are all built upon. Ciphers Ciphers are the cornerstone of cryptography. A cipher is a set of algorithms that performs encryption or decryption on a message. An encryption algorithm (E) takes a secret key (k) and a message (m) and produces a ciphertext (c). Similarly, a Decryption algorithm (D) takes a secret key (K) and the previous resulting Ciphertext (C). They are represented as follows: E(k,m) = c D(k,c) = m This also means that for it to be a cipher, it must satisfy the consistency equation as follows, making it possible to decrypt. D(k,E(k,m)) = m Stream Ciphers: The message is broken into characters or bits and enciphered with a key or keystream(should be random and generated independently of the message stream) that is as long as the plaintext bitstream. If the keystream is random, this scheme would be unbreakable unless the keystream was acquired, making it unconditionally secure. The keystream must be provided to both parties in a secure way to prevent its release. Block Ciphers: Block ciphers \u2014 process messages in blocks, each of which is then encrypted or decrypted. A block cipher is a symmetric cipher in which blocks of plaintext are treated as a whole and used to produce ciphertext blocks. The block cipher takes blocks that are b bits long and encrypts them to blocks that are also b bits long. Block sizes are typically 64 or 128 bits long. Encryption Secret Key (Symmetric Key) : the same key is used for encryption and decryption Public Key (Asymmetric Key) in an asymmetric, the encryption and decryption keys are different but related. The encryption key is known as the public key and the decryption key is known as the private key. The public and private keys are known as a key pair. Symmetric Key Encryption DES The Data Encryption Standard (DES) has been the worldwide encryption standard for a long time. IBM developed DES in 1975, and it has held up remarkably well against years of cryptanalysis. DES is a symmetric encryption algorithm with a fixed key length of 56 bits. The algorithm is still good, but because of the short key length, it is susceptible to brute-force attacks that have sufficient resources. DES usually operates in block mode, whereby it encrypts data in 64-bit blocks. The same algorithm and key are used for both encryption and decryption. Because DES is based on simple mathematical functions, it can be easily implemented and accelerated in hardware. Triple DES With advances in computer processing power, the original 56-bit DES key became too short to withstand an attacker with even a limited budget. One way of increasing the effective key length of DES without changing the well-analyzed algorithm itself is to use the same algorithm with different keys several times in a row. The technique of applying DES three times in a row to a plain text block is called Triple DES (3DES). The 3DES technique is shown in Figure. Brute-force attacks on 3DES are considered unfeasible today. Because the basic algorithm has been tested in the field for more than 25 years, it is considered to be more trustworthy than its predecessor. AES On October 2, 2000, The U.S. National Institute of Standards and Technology (NIST) announced the selection of the Rijndael cipher as the AES algorithm. This cipher, developed by Joan Daemen and Vincent Rijmen, has a variable block length and key length. The algorithm currently specifies how to use keys with a length of 128, 192, or 256 bits to encrypt blocks with a length of 128, 192, or 256 bits (all nine combinations of key length and block length are possible). Both block and key lengths can be extended easily to multiples of 32 bits. AES was chosen to replace DES and 3DES because they are either too weak (DES, in terms of key length) or too slow (3DES) to run on modern, efficient hardware. AES is more efficient and much faster, usually by a factor of 5 compared to DES on the same hardware. AES is also more suitable for high throughput, especially if pure software encryption is used. However, AES is a relatively young algorithm, and as the golden rule of cryptography states, \u201cA more mature algorithm is always more trusted.\u201d Asymmetric Key Algorithm In a symmetric key system, Alice first puts the secret message in a box and then padlocks the box using a lock to which she has a key. She then sends the box to Bob through regular mail. When Bob receives the box, he uses an identical copy of Alice's key (which he has obtained previously) to open the box and read the message. In an asymmetric key system, instead of opening the box when he receives it, Bob simply adds his own personal lock to the box and returns the box through public mail to Alice. Alice uses her key to remove her lock and returns the box to Bob, with Bob's lock still in place. Finally, Bob uses his key to remove his lock and reads the message from Alice. The critical advantage in an asymmetric system is that Alice never needs to send a copy of her key to Bob. This reduces the possibility that a third party (for example, an unscrupulous postmaster) can copy the key while it is in transit to Bob, allowing that third party to spy on all future messages sent by Alice. In addition, if Bob is careless and allows someone else to copy his key, Alice's messages to Bob are compromised, but Alice's messages to other people remain secret NOTE : In terms of TLS key exchange, this is the common approach. Diffie-Hellman The protocol has two system parameters, p and g. They are both public and may be used by everybody. Parameter p is a prime number, and parameter g (usually called a generator) is an integer that is smaller than p, but with the following property: For every number n between 1 and p \u2013 1 inclusive, there is a power k of g such that n = gk mod p. Diffie Hellman algorithm is an asymmetric algorithm used to establish a shared secret for a symmetric key algorithm. Nowadays most of the people use hybrid cryptosystem i.e, a combination of symmetric and asymmetric encryption. Asymmetric Encryption is used as a technique in key exchange mechanism to share a secret key and after the key is shared between sender and receiver, the communication will take place using symmetric encryption. The shared secret key will be used to encrypt the communication. Refer: https://medium.com/@akhigbemmanuel/what-is-the-diffie-hellman-key-exchange-algorithm-84d60025a30d RSA The RSA algorithm is very flexible and has a variable key length where, if necessary, speed can be traded for the level of security of the algorithm. The RSA keys are usually 512 to 2048 bits long. RSA has withstood years of extensive cryptanalysis. Although those years neither proved nor disproved RSA's security, they attest to a confidence level in the algorithm. RSA security is based on the difficulty of factoring very large numbers. If an easy method of factoring these large numbers were discovered, the effectiveness of RSA would be destroyed. Refer: https://medium.com/curiositypapers/a-complete-explanation-of-rsa-asymmetric-encryption-742c5971e0f NOTE : RSA Keys can be used for key exchange just like Diffie Hellman Hashing Algorithms Hashing is one of the mechanisms used for data integrity assurance. Hashing is based on a one-way mathematical function, which is relatively easy to compute but significantly harder to reverse. A hash function, which is a one-way function to input data to produce a fixed-length digest (fingerprint) of output data. The digest is cryptographically strong; that is, it is impossible to recover input data from its digest. If the input data changes just a little, the digest (fingerprint) changes substantially in what is called an avalanche effect. More: https://medium.com/@rauljordan/the-state-of-hashing-algorithms-the-why-the-how-and-the-future-b21d5c0440de https://medium.com/@StevieCEllis/the-beautiful-hash-algorithm-f18d9d2b84fb MD5 MD5 is a one-way function with which it is easy to compute the hash from the given input data, but it is unfeasible to compute input data given only a hash. SHA-1 MD5 is considered less secure than SHA-1 because MD5 has some weaknesses. HA-1 also uses a stronger, 160-bit digest, which makes MD5 the second choice as hash methods are concerned. The algorithm takes a message of less than 264 bits in length and produces a 160-bit message digest. This algorithm is slightly slower than MD5. NOTE : SHA-1 is also recently demonstrated to be broken, Minimum current recommendation is SHA-256 Digital Certificates Digital signatures, provide a means to digitally authenticate devices and individual users. In public-key cryptography, such as the RSA encryption system, each user has a key-pair containing both a public key and a private key. The keys act as complements, and anything encrypted with one of the keys can be decrypted with the other. In simple terms, a signature is formed when data is encrypted with a user's private key. The receiver verifies the signature by decrypting the message with the sender's public key. Key management is often considered the most difficult task in designing and implementing cryptographic systems. Businesses can simplify some of the deployment and management issues that are encountered with secured data communications by employing a Public Key Infrastructure (PKI). Because corporations often move security-sensitive communications across the Internet, an effective mechanism must be implemented to protect sensitive information from the threats presented on the Internet. PKI provides a hierarchical framework for managing digital security attributes. Each PKI participant holds a digital certificate that has been issued by a CA (either public or private). The certificate contains several attributes that are used when parties negotiate a secure connection. These attributes must include the certificate validity period, end-host identity information, encryption keys that will be used for secure communications, and the signature of the issuing CA. Optional attributes may be included, depending on the requirements and capability of the PKI. A CA can be a trusted third party, such as VeriSign or Entrust, or a private (in-house) CA that you establish within your organization. The fact that the message could be decrypted using the sender's public key means that the holder of the private key created the message. This process relies on the receiver having a copy of the sender's public key and knowing with a high degree of certainty that it really does belong to the sender and not to someone pretending to be the sender. To validate the CA's signature, the receiver must know the CA's public key. Normally, this is handled out-of-band or through an operation performed during the installation of the certificate. For instance, most web browsers are configured with the root certificates of several CAs by default. CA Enrollment process The end host generates a private-public key pair. The end host generates a certificate request, which it forwards to the CA. Manual human intervention is required to approve the enrollment request, which is received by the CA. After the CA operator approves the request, the CA signs the certificate request with its private key and returns the completed certificate to the end host. The end host writes the certificate into a nonvolatile storage area (PC hard disk or NVRAM on Cisco routers). Refer : https://www.ssh.com/manuals/server-zos-product/55/ch06s03s01.html Login Security SSH SSH, the Secure Shell, is a popular, powerful, software-based approach to network security. Whenever data is sent by a computer to the network, SSH automatically encrypts (scrambles) it. Then, when the data reaches its intended recipient, SSH automatically decrypts (unscrambles) it. The result is transparent encryption: users can work normally, unaware that their communications are safely encrypted on the network. In addition, SSH can use modern, secure encryption algorithms based on how it's being configured and is effective enough to be found within mission-critical applications at major corporations. SSH has a client/server architecture An SSH server program, typically installed and run by a system administrator, accepts or rejects incoming connections to its host computer. Users then run SSH client programs, typically on other computers, to make requests of the SSH server, such as \u201cPlease log me in,\u201d \u201cPlease send me a file,\u201d or \u201cPlease execute this command.\u201d All communications between clients and servers are securely encrypted and protected from modification. What SSH is not: Although SSH stands for Secure Shell, it is not a true shell in the sense of the Unix Bourne shell and C shell. It is not a command interpreter, nor does it provide wildcard expansion, command history, and so forth. Rather, SSH creates a channel for running a shell on a remote computer, with end-to-end encryption between the two systems. The major features and guarantees of the SSH protocol are: Privacy of your data, via strong encryption Integrity of communications, guaranteeing they haven\u2019t been altered Authentication, i.e., proof of identity of senders and receivers Authorization, i.e., access control to accounts Forwarding or tunnelling to encrypt other TCP/IP-based sessions Kerberos According to Greek mythology Kerberos (Cerberus) was the gigantic, three-headed dog that guards the gates of the underworld to prevent the dead from leaving. So when it comes to Computer Science, Kerberos is a network authentication protocol and is currently the default authentication technology used by Microsoft Active Directory to authenticate users to services within a local area network. Kerberos uses symmetric-key cryptography and requires a trusted third-party authentication service to verify user identities. So they used the name of Kerberos for their computer network authentication protocol as the three heads of the Kerberos represent: a client: A user/ a service a server: Kerberos protected hosts reside - a Key Distribution Center (KDC), which acts as the trusted third-party authentication service. The KDC includes the following two servers: Authentication Server (AS) that performs the initial authentication and issues ticket-granting tickets (TGT) for users. Ticket-Granting Server (TGS) that issues service tickets that are based on the initial ticket-granting tickets (TGT). Certificate Chain The first part of the output of the OpenSSL command shows three certificates numbered 0, 1, and 2(not 2 anymore). Each certificate has a subject, s, and an issuer, i. The first certificate, number 0, is called the end-entity certificate. The subject line tells us it\u2019s valid for any subdomain of google.com because its subject is set to *.google.com. $ openssl s_client -connect www.google.com:443 -CApath /etc/ssl/certs CONNECTED(00000005) depth=2 OU = GlobalSign Root CA - R2, O = GlobalSign, CN = GlobalSign verify return:1 depth=1 C = US, O = Google Trust Services, CN = GTS CA 1O1 verify return:1 depth=0 C = US, ST = California, L = Mountain View, O = Google LLC, CN = www.google.com verify return:1 --- Certificate chain 0 s:/C=US/ST=California/L=Mountain View/O=Google LLC/CN=www.google.com i:/C=US/O=Google Trust Services/CN=GTS CA 1O1 1 s:/C=US/O=Google Trust Services/CN=GTS CA 1O1 i:/OU=GlobalSign Root CA - R2/O=GlobalSign/CN=GlobalSign --- Server certificate The issuer line indicates it\u2019s issued by Google Internet Authority G2, which also happens to be the subject of the second certificate, number 1 What the OpenSSL command line doesn\u2019t show here is the trust store that contains the list of CA certificates trusted by the system OpenSSL runs on. The public certificate of GlobalSign Authority must be present in the system\u2019s trust store to close the verification chain. This is called a chain of trust, and the figure below summarizes its behaviour at a high level. High-level view of the concept of chain of trust applied to verifying the authenticity of a website. The Root CA in the Firefox trust store provides the initial trust to verify the entire chain and trust the end-entity certificate. TLS Handshake The client sends a HELLO message to the server with a list of protocols and algorithms it supports. The server says HELLO back and sends its chain of certificates. Based on the capabilities of the client, the server picks a cipher suite. If the cipher suite supports ephemeral key exchange, like ECDHE does(ECDHE is an algorithm known as the Elliptic Curve Diffie-Hellman Exchange), the server and the client negotiate a pre-master key with the Diffie-Hellman algorithm. The pre-master key is never sent over the wire. The client and server create a session key that will be used to encrypt the data transiting through the connection. At the end of the handshake, both parties possess a secret session key used to encrypt data for the rest of the connection. This is what OpenSSL refers to as Master-Key NOTE There are 3 versions of TLS , TLS 1.0, 1.1 & 1.2 TLS 1.0 was released in 1999, making it a nearly two-decade-old protocol. It has been known to be vulnerable to attacks\u2014such as BEAST and POODLE\u2014for years, in addition to supporting weak cryptography, which doesn\u2019t keep modern-day connections sufficiently secure. TLS 1.1 is the forgotten \u201cmiddle child.\u201d It also has bad cryptography like its younger sibling. In most software, it was leapfrogged by TLS 1.2 and it\u2019s rare to see TLS 1.1 used. \u201cPerfect\u201d Forward Secrecy The term \u201cephemeral\u201d in the key exchange provides an important security feature mis-named perfect forward secrecy (PFS) or just \u201cForward Secrecy\u201d. In a non-ephemeral key exchange, the client sends the pre-master key to the server by encrypting it with the server\u2019s public key. The server then decrypts the pre-master key with its private key. If at a later point in time, the private key of the server is compromised, an attacker can go back to this handshake, decrypt the pre-master key, obtain the session key, and decrypt the entire traffic. Non-ephemeral key exchanges are vulnerable to attacks that may happen in the future on recorded traffic. And because people seldom change their password, decrypting data from the past may still be valuable for an attacker. An ephemeral key exchange like DHE, or its variant on elliptic curve, ECDHE, solves this problem by not transmitting the pre-master key over the wire. Instead, the pre-master key is computed by both the client and the server in isolation, using nonsensitive information exchanged publicly. Because the pre-master key can\u2019t be decrypted later by an attacker, the session key is safe from future attacks: hence, the term perfect forward secrecy. Keys are changed every X blocks along the stream. That prevents an attacker from simply sniffing the stream and applying brute force to crack the whole thing. \"Forward secrecy\" means that just because I can decrypt block M, does not mean that I can decrypt block Q Downside: The downside to PFS is that all those extra computational steps induce latency on the handshake and slow the user down. To avoid repeating this expensive work at every connection, both sides cache the session key for future use via a technique called session resumption. This is what the session-ID and TLS ticket are for: they allow a client and server that share a session ID to skip over the negotiation of a session key, because they already agreed on one previously, and go directly to exchanging data securely.","title":"Fundamentals of Security"},{"location":"security/fundamentals/#part-i-fundamentals","text":"","title":"Part I: Fundamentals"},{"location":"security/fundamentals/#introduction-to-security-overview-for-sre","text":"If you look closely, both Site Reliability Engineering and Security Engineering are concerned with keeping a system usable. Issues like broken releases, capacity shortages, and misconfigurations can make a system unusable (at least temporarily). Security or privacy incidents that break the trust of users also undermine the usefulness of a system. Consequently, system security should be top of mind for SREs. SREs should be involved in both significant design discussions and actual system changes. They have quite a big role in System design & hence are quite sometimes the first line of defence. SRE\u2019s help in preventing bad design & implementations which can affect the overall security of the infrastructure. Successfully designing, implementing, and maintaining systems requires a commitment to the full system lifecycle . This commitment is possible only when security and reliability are central elements in the architecture of systems. Core Pillars of Information Security : Confidentiality \u2013 only allow access to data for which the user is permitted Integrity \u2013 ensure data is not tampered or altered by unauthorized users Availability \u2013 ensure systems and data are available to authorized users when they need it Thinking like a Security Engineer When starting a new application or re-factoring an existing application, you should consider each functional feature, and consider: Is the process surrounding this feature as safe as possible? In other words, is this a flawed process? If I were evil, how would I abuse this feature? Or more specifically failing to address how a feature can be abused can cause design flaws. Is the feature required to be on by default? If so, are there limits or options that could help reduce the risk from this feature? Security Principles By OWASP (Open Web Application Security Project) Minimize attack surface area : Every feature that is added to an application adds a certain amount of risk to the overall application. The aim of secure development is to reduce the overall risk by reducing the attack surface area. For example, a web application implements online help with a search function. The search function may be vulnerable to SQL injection attacks. If the help feature was limited to authorized users, the attack likelihood is reduced. If the help feature\u2019s search function was gated through centralized data validation routines, the ability to perform SQL injection is dramatically reduced. However, if the help feature was re-written to eliminate the search function (through a better user interface, for example), this almost eliminates the attack surface area, even if the help feature was available to the Internet at large. Establish secure defaults: There are many ways to deliver an \u201cout of the box\u201d experience for users. However, by default, the experience should be secure, and it should be up to the user to reduce their security \u2013 if they are allowed. For example, by default, password ageing and complexity should be enabled. Users might be allowed to turn these two features off to simplify their use of the application and increase their risk. Default Passwords of routers, IoT devices should be changed Principle of Least privilege The principle of least privilege recommends that accounts have the least amount of privilege required to perform their business processes. This encompasses user rights, resource permissions such as CPU limits, memory, network, and file system permissions. For example, if a middleware server only requires access to the network, read access to a database table, and the ability to write to a log, this describes all the permissions that should be granted. Under no circumstances should the middleware be granted administrative privileges. Principle of Defense in depth The principle of defence in depth suggests that where one control would be reasonable, more controls that approach risks in different fashions are better. Controls, when used in depth, can make severe vulnerabilities extraordinarily difficult to exploit and thus unlikely to occur. With secure coding, this may take the form of tier-based validation, centralized auditing controls, and requiring users to be logged on all pages. For example, a flawed administrative interface is unlikely to be vulnerable to an anonymous attack if it correctly gates access to production management networks, checks for administrative user authorization, and logs all access. Fail securely Applications regularly fail to process transactions for many reasons. How they fail can determine if an application is secure or not. ``` is_admin = true; try { code_which_may_faile(); is_admin = is_user_assigned_role(\"Adminstrator\"); } catch (Exception err) { log.error(err.toString()); } ``` - If either codeWhichMayFail() or isUserInRole fails or throws an exception, the user is an admin by default. This is obviously a security risk. Don\u2019t trust services Many organizations utilize the processing capabilities of third-party partners, who more than likely have different security policies and posture than you. It is unlikely that you can influence or control any external third party, whether they are home users or major suppliers or partners. Therefore, the implicit trust of externally run systems is not warranted. All external systems should be treated similarly. For example, a loyalty program provider provides data that is used by Internet Banking, providing the number of reward points and a small list of potential redemption items. However, the data should be checked to ensure that it is safe to display to end-users and that the reward points are a positive number, and not improbably large. Separation of duties The key to fraud control is the separation of duties. For example, someone who requests a computer cannot also sign for it, nor should they directly receive the computer. This prevents the user from requesting many computers and claiming they never arrived. Certain roles have different levels of trust than normal users. In particular, administrators are different from normal users. In general, administrators should not be users of the application. For example, an administrator should be able to turn the system on or off, set password policy but shouldn\u2019t be able to log on to the storefront as a super privileged user, such as being able to \u201cbuy\u201d goods on behalf of other users. Avoid security by obscurity Security through obscurity is a weak security control, and nearly always fails when it is the only control. This is not to say that keeping secrets is a bad idea, it simply means that the security of systems should not be reliant upon keeping details hidden. For example, the security of an application should not rely upon knowledge of the source code being kept secret. The security should rely upon many other factors, including reasonable password policies, defence in depth, business transaction limits, solid network architecture, and fraud, and audit controls. A practical example is Linux. Linux\u2019s source code is widely available, and yet when properly secured, Linux is a secure and robust operating system. Keep security simple Attack surface area and simplicity go hand in hand. Certain software engineering practices prefer overly complex approaches to what would otherwise be a relatively straightforward and simple design. Developers should avoid the use of double negatives and complex architectures when a simpler approach would be faster and simpler. For example, although it might be fashionable to have a slew of singleton entity beans running on a separate middleware server, it is more secure and faster to simply use global variables with an appropriate mutex mechanism to protect against race conditions. Fix security issues correctly Once a security issue has been identified, it is important to develop a test for it and to understand the root cause of the issue. When design patterns are used, the security issue is likely widespread amongst all codebases, so developing the right fix without introducing regressions is essential. For example, a user has found that they can see another user\u2019s balance by adjusting their cookie. The fix seems to be relatively straightforward, but as the cookie handling code is shared among all applications, a change to just one application will trickle through to all other applications. The fix must, therefore, be tested on all affected applications. Reliability & Security Reliability and security are both crucial components of a truly trustworthy system, but building systems that are both reliable and secure is difficult. While the requirements for reliability and security share many common properties, they also require different design considerations. It is easy to miss the subtle interplay between reliability and security that can cause unexpected outcomes Ex: A password management application failure was triggered by a reliability problem i.e poor load-balancing and load-shedding strategies and its recovery were later complicated by multiple measures (HSM mechanism which needs to be plugged into server racks, which works as an authentication & the HSM token supposedly locked inside a case.. & the problem can be further elongated ) designed to increase the security of the system.","title":"Introduction to Security Overview for SRE"},{"location":"security/fundamentals/#authentication-vs-authorization","text":"Authentication is the act of validating that users are who they claim to be. Passwords are the most common authentication factor\u2014if a user enters the correct password, the system assumes the identity is valid and grants access. Other technologies such as One-Time Pins, authentication apps, and even biometrics can also be used to authenticate identity. In some instances, systems require the successful verification of more than one factor before granting access. This multi-factor authentication (MFA) requirement is often deployed to increase security beyond what passwords alone can provide. Authorization in system security is the process of giving the user permission to access a specific resource or function. This term is often used interchangeably with access control or client privilege. Giving someone permission to download a particular file on a server or providing individual users with administrative access to an application are good examples. In secure environments, authorization must always follow authentication, users should first prove that their identities are genuine before an organization\u2019s administrators grant them access to the requested resources.","title":"Authentication vs Authorization"},{"location":"security/fundamentals/#common-authentication-flow-local-authentication","text":"The user registers using an identifier like username/email/mobile The application stores user credentials in the database The application sends a verification email/message to validate the registration Post successful registration, the user enters credentials for logging in On successful authentication, the user is allowed access to specific resources","title":"Common authentication flow (local authentication)"},{"location":"security/fundamentals/#openidoauth","text":"OpenID is an authentication protocol that allows us to authenticate users without using a local auth system. In such a scenario, a user has to be registered with an OpenID Provider and the same provider should be integrated with the authentication flow of your application. To verify the details, we have to forward the authentication requests to the provider. On successful authentication, we receive a success message and/or profile details with which we can execute the necessary flow. OAuth is an authorization mechanism that allows your application user access to a provider(Gmail/Facebook/Instagram/etc). On successful response, we (your application) receive a token with which the application can access certain APIs on behalf of a user. OAuth is convenient in case your business use case requires some certain user-facing APIs like access to Google Drive or sending tweets on your behalf. Most OAuth 2.0 providers can be used for pseudo authentication. Having said that, it can get pretty complicated if you are using multiple OAuth providers to authenticate users on top of the local authentication system.","title":"OpenID/OAuth"},{"location":"security/fundamentals/#cryptography","text":"It is the science and study of hiding any text in such a way that only the intended recipients or authorized persons can read it and that any text can even use things such as invisible ink or the mechanical cryptography machines of the past. Cryptography is necessary for securing critical or proprietary information and is used to encode private data messages by converting some plain text into ciphertext. At its core, there are two ways of doing this, more advanced methods are all built upon.","title":"Cryptography"},{"location":"security/fundamentals/#ciphers","text":"Ciphers are the cornerstone of cryptography. A cipher is a set of algorithms that performs encryption or decryption on a message. An encryption algorithm (E) takes a secret key (k) and a message (m) and produces a ciphertext (c). Similarly, a Decryption algorithm (D) takes a secret key (K) and the previous resulting Ciphertext (C). They are represented as follows: E(k,m) = c D(k,c) = m This also means that for it to be a cipher, it must satisfy the consistency equation as follows, making it possible to decrypt. D(k,E(k,m)) = m Stream Ciphers: The message is broken into characters or bits and enciphered with a key or keystream(should be random and generated independently of the message stream) that is as long as the plaintext bitstream. If the keystream is random, this scheme would be unbreakable unless the keystream was acquired, making it unconditionally secure. The keystream must be provided to both parties in a secure way to prevent its release. Block Ciphers: Block ciphers \u2014 process messages in blocks, each of which is then encrypted or decrypted. A block cipher is a symmetric cipher in which blocks of plaintext are treated as a whole and used to produce ciphertext blocks. The block cipher takes blocks that are b bits long and encrypts them to blocks that are also b bits long. Block sizes are typically 64 or 128 bits long. Encryption Secret Key (Symmetric Key) : the same key is used for encryption and decryption Public Key (Asymmetric Key) in an asymmetric, the encryption and decryption keys are different but related. The encryption key is known as the public key and the decryption key is known as the private key. The public and private keys are known as a key pair. Symmetric Key Encryption DES The Data Encryption Standard (DES) has been the worldwide encryption standard for a long time. IBM developed DES in 1975, and it has held up remarkably well against years of cryptanalysis. DES is a symmetric encryption algorithm with a fixed key length of 56 bits. The algorithm is still good, but because of the short key length, it is susceptible to brute-force attacks that have sufficient resources. DES usually operates in block mode, whereby it encrypts data in 64-bit blocks. The same algorithm and key are used for both encryption and decryption. Because DES is based on simple mathematical functions, it can be easily implemented and accelerated in hardware. Triple DES With advances in computer processing power, the original 56-bit DES key became too short to withstand an attacker with even a limited budget. One way of increasing the effective key length of DES without changing the well-analyzed algorithm itself is to use the same algorithm with different keys several times in a row. The technique of applying DES three times in a row to a plain text block is called Triple DES (3DES). The 3DES technique is shown in Figure. Brute-force attacks on 3DES are considered unfeasible today. Because the basic algorithm has been tested in the field for more than 25 years, it is considered to be more trustworthy than its predecessor. AES On October 2, 2000, The U.S. National Institute of Standards and Technology (NIST) announced the selection of the Rijndael cipher as the AES algorithm. This cipher, developed by Joan Daemen and Vincent Rijmen, has a variable block length and key length. The algorithm currently specifies how to use keys with a length of 128, 192, or 256 bits to encrypt blocks with a length of 128, 192, or 256 bits (all nine combinations of key length and block length are possible). Both block and key lengths can be extended easily to multiples of 32 bits. AES was chosen to replace DES and 3DES because they are either too weak (DES, in terms of key length) or too slow (3DES) to run on modern, efficient hardware. AES is more efficient and much faster, usually by a factor of 5 compared to DES on the same hardware. AES is also more suitable for high throughput, especially if pure software encryption is used. However, AES is a relatively young algorithm, and as the golden rule of cryptography states, \u201cA more mature algorithm is always more trusted.\u201d Asymmetric Key Algorithm In a symmetric key system, Alice first puts the secret message in a box and then padlocks the box using a lock to which she has a key. She then sends the box to Bob through regular mail. When Bob receives the box, he uses an identical copy of Alice's key (which he has obtained previously) to open the box and read the message. In an asymmetric key system, instead of opening the box when he receives it, Bob simply adds his own personal lock to the box and returns the box through public mail to Alice. Alice uses her key to remove her lock and returns the box to Bob, with Bob's lock still in place. Finally, Bob uses his key to remove his lock and reads the message from Alice. The critical advantage in an asymmetric system is that Alice never needs to send a copy of her key to Bob. This reduces the possibility that a third party (for example, an unscrupulous postmaster) can copy the key while it is in transit to Bob, allowing that third party to spy on all future messages sent by Alice. In addition, if Bob is careless and allows someone else to copy his key, Alice's messages to Bob are compromised, but Alice's messages to other people remain secret NOTE : In terms of TLS key exchange, this is the common approach. Diffie-Hellman The protocol has two system parameters, p and g. They are both public and may be used by everybody. Parameter p is a prime number, and parameter g (usually called a generator) is an integer that is smaller than p, but with the following property: For every number n between 1 and p \u2013 1 inclusive, there is a power k of g such that n = gk mod p. Diffie Hellman algorithm is an asymmetric algorithm used to establish a shared secret for a symmetric key algorithm. Nowadays most of the people use hybrid cryptosystem i.e, a combination of symmetric and asymmetric encryption. Asymmetric Encryption is used as a technique in key exchange mechanism to share a secret key and after the key is shared between sender and receiver, the communication will take place using symmetric encryption. The shared secret key will be used to encrypt the communication. Refer: https://medium.com/@akhigbemmanuel/what-is-the-diffie-hellman-key-exchange-algorithm-84d60025a30d RSA The RSA algorithm is very flexible and has a variable key length where, if necessary, speed can be traded for the level of security of the algorithm. The RSA keys are usually 512 to 2048 bits long. RSA has withstood years of extensive cryptanalysis. Although those years neither proved nor disproved RSA's security, they attest to a confidence level in the algorithm. RSA security is based on the difficulty of factoring very large numbers. If an easy method of factoring these large numbers were discovered, the effectiveness of RSA would be destroyed. Refer: https://medium.com/curiositypapers/a-complete-explanation-of-rsa-asymmetric-encryption-742c5971e0f NOTE : RSA Keys can be used for key exchange just like Diffie Hellman Hashing Algorithms Hashing is one of the mechanisms used for data integrity assurance. Hashing is based on a one-way mathematical function, which is relatively easy to compute but significantly harder to reverse. A hash function, which is a one-way function to input data to produce a fixed-length digest (fingerprint) of output data. The digest is cryptographically strong; that is, it is impossible to recover input data from its digest. If the input data changes just a little, the digest (fingerprint) changes substantially in what is called an avalanche effect. More: https://medium.com/@rauljordan/the-state-of-hashing-algorithms-the-why-the-how-and-the-future-b21d5c0440de https://medium.com/@StevieCEllis/the-beautiful-hash-algorithm-f18d9d2b84fb MD5 MD5 is a one-way function with which it is easy to compute the hash from the given input data, but it is unfeasible to compute input data given only a hash. SHA-1 MD5 is considered less secure than SHA-1 because MD5 has some weaknesses. HA-1 also uses a stronger, 160-bit digest, which makes MD5 the second choice as hash methods are concerned. The algorithm takes a message of less than 264 bits in length and produces a 160-bit message digest. This algorithm is slightly slower than MD5. NOTE : SHA-1 is also recently demonstrated to be broken, Minimum current recommendation is SHA-256 Digital Certificates Digital signatures, provide a means to digitally authenticate devices and individual users. In public-key cryptography, such as the RSA encryption system, each user has a key-pair containing both a public key and a private key. The keys act as complements, and anything encrypted with one of the keys can be decrypted with the other. In simple terms, a signature is formed when data is encrypted with a user's private key. The receiver verifies the signature by decrypting the message with the sender's public key. Key management is often considered the most difficult task in designing and implementing cryptographic systems. Businesses can simplify some of the deployment and management issues that are encountered with secured data communications by employing a Public Key Infrastructure (PKI). Because corporations often move security-sensitive communications across the Internet, an effective mechanism must be implemented to protect sensitive information from the threats presented on the Internet. PKI provides a hierarchical framework for managing digital security attributes. Each PKI participant holds a digital certificate that has been issued by a CA (either public or private). The certificate contains several attributes that are used when parties negotiate a secure connection. These attributes must include the certificate validity period, end-host identity information, encryption keys that will be used for secure communications, and the signature of the issuing CA. Optional attributes may be included, depending on the requirements and capability of the PKI. A CA can be a trusted third party, such as VeriSign or Entrust, or a private (in-house) CA that you establish within your organization. The fact that the message could be decrypted using the sender's public key means that the holder of the private key created the message. This process relies on the receiver having a copy of the sender's public key and knowing with a high degree of certainty that it really does belong to the sender and not to someone pretending to be the sender. To validate the CA's signature, the receiver must know the CA's public key. Normally, this is handled out-of-band or through an operation performed during the installation of the certificate. For instance, most web browsers are configured with the root certificates of several CAs by default. CA Enrollment process The end host generates a private-public key pair. The end host generates a certificate request, which it forwards to the CA. Manual human intervention is required to approve the enrollment request, which is received by the CA. After the CA operator approves the request, the CA signs the certificate request with its private key and returns the completed certificate to the end host. The end host writes the certificate into a nonvolatile storage area (PC hard disk or NVRAM on Cisco routers). Refer : https://www.ssh.com/manuals/server-zos-product/55/ch06s03s01.html","title":"Ciphers"},{"location":"security/fundamentals/#login-security","text":"","title":"Login Security"},{"location":"security/fundamentals/#ssh","text":"SSH, the Secure Shell, is a popular, powerful, software-based approach to network security. Whenever data is sent by a computer to the network, SSH automatically encrypts (scrambles) it. Then, when the data reaches its intended recipient, SSH automatically decrypts (unscrambles) it. The result is transparent encryption: users can work normally, unaware that their communications are safely encrypted on the network. In addition, SSH can use modern, secure encryption algorithms based on how it's being configured and is effective enough to be found within mission-critical applications at major corporations. SSH has a client/server architecture An SSH server program, typically installed and run by a system administrator, accepts or rejects incoming connections to its host computer. Users then run SSH client programs, typically on other computers, to make requests of the SSH server, such as \u201cPlease log me in,\u201d \u201cPlease send me a file,\u201d or \u201cPlease execute this command.\u201d All communications between clients and servers are securely encrypted and protected from modification. What SSH is not: Although SSH stands for Secure Shell, it is not a true shell in the sense of the Unix Bourne shell and C shell. It is not a command interpreter, nor does it provide wildcard expansion, command history, and so forth. Rather, SSH creates a channel for running a shell on a remote computer, with end-to-end encryption between the two systems. The major features and guarantees of the SSH protocol are: Privacy of your data, via strong encryption Integrity of communications, guaranteeing they haven\u2019t been altered Authentication, i.e., proof of identity of senders and receivers Authorization, i.e., access control to accounts Forwarding or tunnelling to encrypt other TCP/IP-based sessions","title":"SSH"},{"location":"security/fundamentals/#kerberos","text":"According to Greek mythology Kerberos (Cerberus) was the gigantic, three-headed dog that guards the gates of the underworld to prevent the dead from leaving. So when it comes to Computer Science, Kerberos is a network authentication protocol and is currently the default authentication technology used by Microsoft Active Directory to authenticate users to services within a local area network. Kerberos uses symmetric-key cryptography and requires a trusted third-party authentication service to verify user identities. So they used the name of Kerberos for their computer network authentication protocol as the three heads of the Kerberos represent: a client: A user/ a service a server: Kerberos protected hosts reside - a Key Distribution Center (KDC), which acts as the trusted third-party authentication service. The KDC includes the following two servers: Authentication Server (AS) that performs the initial authentication and issues ticket-granting tickets (TGT) for users. Ticket-Granting Server (TGS) that issues service tickets that are based on the initial ticket-granting tickets (TGT).","title":"Kerberos"},{"location":"security/fundamentals/#certificate-chain","text":"The first part of the output of the OpenSSL command shows three certificates numbered 0, 1, and 2(not 2 anymore). Each certificate has a subject, s, and an issuer, i. The first certificate, number 0, is called the end-entity certificate. The subject line tells us it\u2019s valid for any subdomain of google.com because its subject is set to *.google.com. $ openssl s_client -connect www.google.com:443 -CApath /etc/ssl/certs CONNECTED(00000005) depth=2 OU = GlobalSign Root CA - R2, O = GlobalSign, CN = GlobalSign verify return:1 depth=1 C = US, O = Google Trust Services, CN = GTS CA 1O1 verify return:1 depth=0 C = US, ST = California, L = Mountain View, O = Google LLC, CN = www.google.com verify return:1 --- Certificate chain 0 s:/C=US/ST=California/L=Mountain View/O=Google LLC/CN=www.google.com i:/C=US/O=Google Trust Services/CN=GTS CA 1O1 1 s:/C=US/O=Google Trust Services/CN=GTS CA 1O1 i:/OU=GlobalSign Root CA - R2/O=GlobalSign/CN=GlobalSign --- Server certificate The issuer line indicates it\u2019s issued by Google Internet Authority G2, which also happens to be the subject of the second certificate, number 1 What the OpenSSL command line doesn\u2019t show here is the trust store that contains the list of CA certificates trusted by the system OpenSSL runs on. The public certificate of GlobalSign Authority must be present in the system\u2019s trust store to close the verification chain. This is called a chain of trust, and the figure below summarizes its behaviour at a high level. High-level view of the concept of chain of trust applied to verifying the authenticity of a website. The Root CA in the Firefox trust store provides the initial trust to verify the entire chain and trust the end-entity certificate.","title":"Certificate Chain"},{"location":"security/fundamentals/#tls-handshake","text":"The client sends a HELLO message to the server with a list of protocols and algorithms it supports. The server says HELLO back and sends its chain of certificates. Based on the capabilities of the client, the server picks a cipher suite. If the cipher suite supports ephemeral key exchange, like ECDHE does(ECDHE is an algorithm known as the Elliptic Curve Diffie-Hellman Exchange), the server and the client negotiate a pre-master key with the Diffie-Hellman algorithm. The pre-master key is never sent over the wire. The client and server create a session key that will be used to encrypt the data transiting through the connection. At the end of the handshake, both parties possess a secret session key used to encrypt data for the rest of the connection. This is what OpenSSL refers to as Master-Key NOTE There are 3 versions of TLS , TLS 1.0, 1.1 & 1.2 TLS 1.0 was released in 1999, making it a nearly two-decade-old protocol. It has been known to be vulnerable to attacks\u2014such as BEAST and POODLE\u2014for years, in addition to supporting weak cryptography, which doesn\u2019t keep modern-day connections sufficiently secure. TLS 1.1 is the forgotten \u201cmiddle child.\u201d It also has bad cryptography like its younger sibling. In most software, it was leapfrogged by TLS 1.2 and it\u2019s rare to see TLS 1.1 used.","title":"TLS Handshake"},{"location":"security/fundamentals/#perfect-forward-secrecy","text":"The term \u201cephemeral\u201d in the key exchange provides an important security feature mis-named perfect forward secrecy (PFS) or just \u201cForward Secrecy\u201d. In a non-ephemeral key exchange, the client sends the pre-master key to the server by encrypting it with the server\u2019s public key. The server then decrypts the pre-master key with its private key. If at a later point in time, the private key of the server is compromised, an attacker can go back to this handshake, decrypt the pre-master key, obtain the session key, and decrypt the entire traffic. Non-ephemeral key exchanges are vulnerable to attacks that may happen in the future on recorded traffic. And because people seldom change their password, decrypting data from the past may still be valuable for an attacker. An ephemeral key exchange like DHE, or its variant on elliptic curve, ECDHE, solves this problem by not transmitting the pre-master key over the wire. Instead, the pre-master key is computed by both the client and the server in isolation, using nonsensitive information exchanged publicly. Because the pre-master key can\u2019t be decrypted later by an attacker, the session key is safe from future attacks: hence, the term perfect forward secrecy. Keys are changed every X blocks along the stream. That prevents an attacker from simply sniffing the stream and applying brute force to crack the whole thing. \"Forward secrecy\" means that just because I can decrypt block M, does not mean that I can decrypt block Q Downside: The downside to PFS is that all those extra computational steps induce latency on the handshake and slow the user down. To avoid repeating this expensive work at every connection, both sides cache the session key for future use via a technique called session resumption. This is what the session-ID and TLS ticket are for: they allow a client and server that share a session ID to skip over the negotiation of a session key, because they already agreed on one previously, and go directly to exchanging data securely.","title":"\u201cPerfect\u201d Forward Secrecy"},{"location":"security/intro/","text":"Security Prerequisites Linux Basics Linux Networking What to expect from this course The course covers fundamentals of information security along with touching on subjects of system security, network & web security. This course aims to get you familiar with the basics of information security in day to day operations & then as an SRE develop the mindset of ensuring that security takes a front-seat while developing solutions. The course also serves as an introduction to common risks and best practices along with practical ways to find out vulnerable systems and loopholes which might become compromised if not secured. What is not covered under this course The courseware is not an ethical hacking workshop or a very deep dive into the fundamentals of the problems. The course does not deal with hacking or breaking into systems but rather an approach on how to ensure you don\u2019t get into those situations and also to make you aware of different ways a system can be compromised. Course Contents Fundamentals Network Security Threats, Attacks & Defence Writing Secure Code & More Conclusion","title":"Introduction"},{"location":"security/intro/#security","text":"","title":"Security"},{"location":"security/intro/#prerequisites","text":"Linux Basics Linux Networking","title":"Prerequisites"},{"location":"security/intro/#what-to-expect-from-this-course","text":"The course covers fundamentals of information security along with touching on subjects of system security, network & web security. This course aims to get you familiar with the basics of information security in day to day operations & then as an SRE develop the mindset of ensuring that security takes a front-seat while developing solutions. The course also serves as an introduction to common risks and best practices along with practical ways to find out vulnerable systems and loopholes which might become compromised if not secured.","title":"What to expect from this course"},{"location":"security/intro/#what-is-not-covered-under-this-course","text":"The courseware is not an ethical hacking workshop or a very deep dive into the fundamentals of the problems. The course does not deal with hacking or breaking into systems but rather an approach on how to ensure you don\u2019t get into those situations and also to make you aware of different ways a system can be compromised.","title":"What is not covered under this course"},{"location":"security/intro/#course-contents","text":"Fundamentals Network Security Threats, Attacks & Defence Writing Secure Code & More Conclusion","title":"Course Contents"},{"location":"security/network_security/","text":"Part II: Network Security Introduction TCP/IP is the dominant networking technology today. It is a five-layer architecture. These layers are, from top to bottom, the application layer, the transport layer (TCP), the network layer (IP), the data-link layer, and the physical layer. In addition to TCP/IP, there also are other networking technologies. For convenience, we use the OSI network model to represent non-TCP/IP network technologies. Different networks are interconnected using gateways. A gateway can be placed at any layer. The OSI model is a seven-layer architecture. The OSI architecture is similar to the TCP/IP architecture, except that the OSI model specifies two additional layers between the application layer and the transport layer in the TCP/IP architecture. These two layers are the presentation layer and the session layer. Figure 5.1 shows the relationship between the TCP/IP layers and the OSI layers. The application layer in TCP/IP corresponds to the application layer and the presentation layer in OSI. The transport layer in TCP/IP corresponds to the session layer and the transport layer in OSI. The remaining three layers in the TCP/IP architecture are one-to-one correspondent to the remaining three layers in the OSI model. Correspondence between layers of the TCP/IP architecture and the OSI model. Also shown are placements of cryptographic algorithms in network layers, where the dotted arrows indicate actual communications of cryptographic algorithms The functionalities of OSI layers are briefly described as follows: The application layer serves as an interface between applications and network programs. It supports application programs and end-user processing. Common application-layer programs include remote logins, file transfer, email, and Web browsing. The presentation layer is responsible for dealing with data that is formed differently. This protocol layer allows application-layer programs residing on different sides of a communication channel with different platforms to understand each other's data formats regardless of how they are presented. The session layer is responsible for creating, managing, and closing a communication connection. The transport layer is responsible for providing reliable connections, such as packet sequencing, traffic control, and congestion control. The network layer is responsible for routing device-independent data packets from the current hop to the next hop. The data-link layer is responsible for encapsulating device-independent data packets into device-dependent data frames. It has two sublayers: logical link control and media access control. The physical layer is responsible for transmitting device-dependent frames through some physical media. Starting from the application layer, data generated from an application program is passed down layer-by-layer to the physical layer. Data from the previous layer is enclosed in a new envelope at the current layer, where the data from the previous layer is also just an envelope containing the data from the layer before it. This is similar to enclosing a smaller envelope in a larger one. The envelope added at each layer contains sufficient information for handling the packet. Application-layer data are divided into blocks small enough to be encapsulated in an envelope at the next layer. Application data blocks are \u201cdressed up\u201d in the TCP/IP architecture according to the following basic steps. At the sending side, an application data block is encapsulated in a TCP packet when it is passed down to the TCP layer. In other words, a TCP packet consists of a header and a payload, where the header corresponds to the TCP envelope and the payload is the application data block. Likewise, the TCP packet will be encapsulated in an IP packet when it is passed down to the IP layer. An IP packet consists of a header and a payload, which is the TCP packet passed down from the TCP layer. The IP packet will be encapsulated in a device-dependent frame (e.g., an Ethernet frame) when it is passed down to the data-link layer. A frame has a header, and it may also have a trailer. For example, in addition to having a header, an Ethernet frame also has a 32-bit cyclic redundancy check (CRC) trailer. When it is passed down to the physical layer, a frame will be transformed into a sequence of media signals for transmission Flow Diagram of a Packet Generation At the destination side, the medium signals are converted by the physical layer into a frame, which is passed up to the data-link layer. The data-link layer passes the frame payload (i.e., the IP packet encapsulated in the frame) up to the IP layer. The IP layer passes the IP payload, namely, the TCP packet encapsulated in the IP packet, up to the TCP layer. The TCP layer passes the TCP payload, namely, the application data block, up to the application layer. When a packet arrives at a router, it only goes up to the IP layer, where certain fields in the IP header are modified (e.g., the value of TTL is decreased by 1). This modified packet is then passed back down layer-by-layer to the physical layer for further transmission. Public Key Infrastructure To deploy cryptographic algorithms in network applications, we need a way to distribute secret keys using open networks. Public-key cryptography is the best way to distribute these secret keys. To use public-key cryptography, we need to build a public-key infrastructure (PKI) to support and manage public-key certificates and certificate authority (CA) networks. In particular, PKIs are set up to perform the following functions: Determine the legitimacy of users before issuing public-key certificates to them. Issue public-key certificates upon user requests. Extend public-key certificates valid time upon user requests. Revoke public-key certificates upon users' requests or when the corresponding private keys are compromised. Store and manage public-key certificates. Prevent digital signature signers from denying their signatures. Support CA networks to allow different CAs to authenticate public-key certificates issued by other CAs. X.509: https://certificatedecoder.dev/?gclid=EAIaIQobChMI0M731O6G6gIVVSQrCh04bQaAEAAYASAAEgKRkPD_BwE IPsec: A Security Protocol at the Network Layer IPsec is a major security protocol at the network layer IPsec provides a potent platform for constructing virtual private networks (VPN). VPNs are private networks overlayed on public networks. The purpose of deploying cryptographic algorithms at the network layer is to encrypt or authenticate IP packets (either just the payloads or the whole packets). IPsec also specifies how to exchange keys. Thus, IPsec consists of authentication protocols, encryption protocols, and key exchange protocols. They are referred to, respectively, as authentication header (AH), encapsulating security payload (ESP), and Internet key exchange (IKE). PGP & S/MIME : Email Security There are several security protocols at the application layer. The most used of these protocols are email security protocols namely PGP and S/MIME. SMTP (\u201cSimple Mail Transfer Protocol\u201d) is used for sending and delivering from a client to a server via port 25: it\u2019s the outgoing server. On the contrary, POP (\u201cPost Office Protocol\u201d) allows the user to pick up the message and download it into his inbox: it\u2019s the incoming server. The latest version of the Post Office Protocol is named POP3, and it\u2019s been used since 1996; it uses port 110 PGP PGP implements all major cryptographic algorithms, the ZIP compression algorithm, and the Base64 encoding algorithm. It can be used to authenticate a message, encrypt a message, or both. PGP follows the following general process: authentication, ZIP compression, encryption, and Base64 encoding. The Base64 encoding procedure makes the message ready for SMTP transmission GPG (GnuPG) GnuPG is another free encryption standard that companies may use that is based on OpenPGP. GnuPG serves as a replacement for Symantec\u2019s PGP. The main difference is the supported algorithms. However, GnuPG plays nice with PGP by design. Because GnuPG is open, some businesses would prefer the technical support and the user interface that comes with Symantec\u2019s PGP. It is important to note that there are some nuances between the compatibility of GnuPG and PGP, such as the compatibility between certain algorithms, but in most applications such as email, there are workarounds. One such algorithm is the IDEA Module which isn\u2019t included in GnuPG out of the box due to patent issues. S/MIME SMTP can only handle 7-bit ASCII text (You can use UTF-8 extensions to alleviate these limitations, ) messages. While POP can handle other content types besides 7-bit ASCII, POP may, under a common default setting, download all the messages stored in the mail server to the user's local computer. After that, if POP removes these messages from the mail server. This makes it difficult for the user to read his messages from multiple computers. The Multipurpose Internet Mail Extension protocol (MIME) was designed to support sending and receiving email messages in various formats, including nontext files generated by word processors, graphics files, sound files, and video clips. Moreover, MIME allows a single message to include mixed types of data in any combination of these formats. The Internet Mail Access Protocol (IMAP), operated on TCP port 143(only for non-encrypted), stores (Configurable on both server & client just like PoP) incoming email messages in the mail server until the user deletes them deliberately. This allows the user to access his mailbox from multiple machines and download messages to a local machine without deleting it from the mailbox in the mail server. SSL/TLS SSL uses a PKI to decide if a server\u2019s public key is trustworthy by requiring servers to use a security certificate signed by a trusted CA. When Netscape Navigator 1.0 was released, it trusted a single CA operated by the RSA Data Security corporation. The server\u2019s public RSA keys were used to be stored in the security certificate, which can then be used by the browser to establish a secure communication channel. The security certificates we use today still rely on the same standard (named X.509) that Netscape Navigator 1.0 used back then. Netscape intended to train users(though this didn\u2019t work out later) to differentiate secure communications from insecure ones, so they put a lock icon next to the address bar. When the lock is open, the communication is insecure. A closed lock means communication has been secured with SSL, which required the server to provide a signed certificate. You\u2019re obviously familiar with this icon as it\u2019s been in every browser ever since. The engineers at Netscape truly created a standard for secure internet communications. A year after releasing SSL 2.0, Netscape fixed several security issues and released SSL 3.0, a protocol that, albeit being officially deprecated since June 2015, remains in use in certain parts of the world more than 20 years after its introduction. To standardize SSL, the Internet Engineering Task Force (IETF) created a slightly modified SSL 3.0 and, in 1999, unveiled it as Transport Layer Security (TLS) 1.0. The name change between SSL and TLS continues to confuse people today. Officially, TLS is the new SSL, but in practice, people use SSL and TLS interchangeably to talk about any version of the protocol. Must See: https://tls.ulfheim.net/ https://davidwong.fr/tls13/ Network Perimeter Security Let us see how we keep a check on the perimeter i.e the edges, the first layer of protection General Firewall Framework Firewalls are needed because encryption algorithms cannot effectively stop malicious packets from getting into an edge network. This is because IP packets, regardless of whether they are encrypted, can always be forwarded into an edge network. Firewalls that were developed in the 1990s are important instruments to help restrict network access. A firewall may be a hardware device, a software package, or a combination of both. Packets flowing into the internal network from the outside should be evaluated before they are allowed to enter. One of the critical elements of a firewall is its ability to examine packets without imposing a negative impact on communication speed while providing security protections for the internal network. The packet inspection that is carried out by firewalls can be done using several different methods. Based on the particular method used by the firewall, it can be characterized as either a packet filter, circuit gateway, application gateway, or dynamic packet filter. Packet Filters It inspects ingress packets coming to an internal network from outside and inspects egress packets going outside from an internal network Packing filtering only inspects IP headers and TCP headers, not the payloads generated at the application layer A packet-filtering firewall uses a set of rules to determine whether a packet should be allowed or denied to pass through. 2 types: Stateless It treats each packet as an independent object, and it does not keep track of any previously processed packets. In other words, stateless filtering inspects a packet when it arrives and makes a decision without leaving any record of the packet being inspected. Stateful Stateful filtering, also referred to as connection-state filtering, keeps track of connections between an internal host and an external host. A connection state (or state, for short) indicates whether it is a TCP connection or a UDP connection and whether the connection is established. Circuit Gateways Circuit gateways, also referred to as circuit-level gateways, are typically operated at the transportation layer They evaluate the information of the IP addresses and the port numbers contained in TCP (or UDP) headers and use it to determine whether to allow or to disallow an internal host and an external host to establish a connection. It is common practice to combine packet filters and circuit gateways to form a dynamic packet filter (DPF). Application Gateways(ALG) Aka PROXY Servers An Application Level Gateway (ALG) acts as a proxy for internal hosts, processing service requests from external clients. An ALG performs deep inspections on each IP packet (ingress or egress). In particular, an ALG inspects application program formats contained in the packet (e.g., MIME format or SQL format) and examines whether its payload is permitted. Thus, an ALG may be able to detect a computer virus contained in the payload. Because an ALG inspects packet payloads, it may be able to detect malicious code and quarantine suspicious packets, in addition to blocking packets with suspicious IP addresses and TCP ports. On the other hand, an ALG also incurs substantial computation and space overheads. Trusted Systems & Bastion Hosts A Trusted Operating System (TOS) is an operating system that meets a particular set of security requirements. Whether an operating system can be trusted or not depends on several elements. For example, for an operating system on a particular computer to be certified trusted, one needs to validate that, among other things, the following four requirements are satisfied: Its system design contains no defects; Its system software contains no loopholes; Its system is configured properly; and Its system management is appropriate. Bastion Hosts Bastion hosts are computers with strong defence mechanisms. They often serve as host computers for implementing application gateways, circuit gateways, and other types of firewalls. A bastion host is operated on a trusted operating system that must not contain unnecessary functionalities or programs. This measure helps to reduce error probabilities and makes it easier to conduct security checks. Only those network application programs that are necessary, for example, SSH, DNS, SMTP, and authentication programs, are installed on a bastion host. Bastion hosts are also primarily used as controlled ingress points so that the security monitoring can focus more narrowly on actions happening at a single point closely. Common Techniques & Scannings, Packet Capturing Scanning Ports with Nmap Nmap (\"Network Mapper\") is a free and open-source (license) utility for network discovery and security auditing. Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime. The best thing about Nmap is it\u2019s free and open-source and is very flexible and versatile Nmap is often used to determine alive hosts in a network, open ports on those hosts, services running on those open ports, and version identification of that service on that port. More at http://scanme.nmap.org/ nmap [scan type] [options] [target specification] Nmap uses 6 different port states: Open \u2014 An open port is one that is actively accepting TCP, UDP or SCTP connections. Open ports are what interests us the most because they are the ones that are vulnerable to attacks. Open ports also show the available services on a network. Closed \u2014 A port that receives and responds to Nmap probe packets but there is no application listening on that port. Useful for identifying that the host exists and for OS detection. Filtered \u2014 Nmap can\u2019t determine whether the port is open because packet filtering prevents its probes from reaching the port. Filtering could come from firewalls or router rules. Often little information is given from filtered ports during scans as the filters can drop the probes without responding or respond with useless error messages e.g. destination unreachable. Unfiltered \u2014 Port is accessible but Nmap doesn\u2019t know if it is open or closed. Only used in ACK scan which is used to map firewall rulesets. Other scan types can be used to identify whether the port is open. Open/filtered \u2014 Nmap is unable to determine between open and filtered. This happens when an open port gives no response. No response could mean that the probe was dropped by a packet filter or any response is blocked. Closed/filtered \u2014 Nmap is unable to determine whether a port is closed or filtered. Only used in the IP ID idle scan. Types of Nmap Scan: TCP Connect TCP Connect scan completes the 3-way handshake. If a port is open, the operating system completes the TCP three-way handshake and the port scanner immediately closes the connection to avoid DOS. This is \u201cnoisy\u201d because the services can log the sender IP address and might trigger Intrusion Detection Systems. UDP Scan This scan checks to see if any UDP ports are listening. Since UDP does not respond with a positive acknowledgement like TCP and only responds to an incoming UDP packet when the port is closed, SYN Scan SYN scan is another form of TCP scanning. This scan type is also known as \u201chalf-open scanning\u201d because it never actually opens a full TCP connection. The port scanner generates a SYN packet. If the target port is open, it will respond with an SYN-ACK packet. The scanner host responds with an RST packet, closing the connection before the handshake is completed. If the port is closed but unfiltered, the target will instantly respond with an RST packet. SYN scan has the advantage that the individual services never actually receive a connection. FIN Scan This is a stealthy scan, like the SYN scan, but sends a TCP FIN packet instead. ACK Scan Ack scanning determines whether the port is filtered or not. Null Scan Another very stealthy scan that sets all the TCP header flags to off or null. This is not normally a valid packet and some hosts will not know what to do with this. XMAS Scan Similar to the NULL scan except for all the flags in the TCP header is set to on RPC Scan This special type of scan looks for machine answering to RPC (Remote Procedure Call) services IDLE Scan It is a super stealthy method whereby the scan packets are bounced off an external host. You don\u2019t need to have control over the other host but it does have to set up and meet certain requirements. You must input the IP address of our \u201czombie\u201d host and what port number to use. It is one of the more controversial options in Nmap since it only has a use for malicious attacks. Scan Techniques A couple of scan techniques which can be used to gain more information about a system and its ports. You can read more at https://medium.com/infosec-adventures/nmap-cheatsheet-a423fcdda0ca OpenVAS OpenVAS is a full-featured vulnerability scanner. OpenVAS is a framework of services and tools that provides a comprehensive and powerful vulnerability scanning and management package OpenVAS, which is an open-source program, began as a fork of the once-more-popular scanning program, Nessus. OpenVAS is made up of three main parts. These are: a regularly updated feed of Network Vulnerability Tests (NVTs); a scanner, which runs the NVTs; and an SQLite 3 database for storing both your test configurations and the NVTs\u2019 results and configurations. https://www.greenbone.net/en/install_use_gce/ WireShark Wireshark is a protocol analyzer. This means Wireshark is designed to decode not only packet bits and bytes but also the relations between packets and protocols. Wireshark understands protocol sequences. A simple demo of Wireshark Capture only udp packets: Capture filter = \u201cudp\u201d Capture only tcp packets Capture filter = \u201ctcp\u201d TCP/IP 3 way Handshake Filter by IP address: displays all traffic from IP, be it source or destination ip.addr == 192.168.1.1 Filter by source address: display traffic only from IP source ip.src == 192.168.0.1 Filter by destination: display traffic only form IP destination ip.dst == 192.168.0.1 Filter by IP subnet: display traffic from subnet, be it source or destination ip.addr = 192.168.0.1/24 Filter by protocol: filter traffic by protocol name dns http ftp arp ssh telnet icmp Exclude IP address: remove traffic from and to IP address !ip.addr ==192.168.0.1 Display traffic between two specific subnet ip.addr == 192.168.0.1/24 and ip.addr == 192.168.1.1/24 Display traffic between two specific workstations ip.addr == 192.168.0.1 and ip.addr == 192.168.0.2 Filter by MAC eth.addr = 00:50:7f:c5:b6:78 Filter TCP port tcp.port == 80 Filter TCP port source tcp.srcport == 80 Filter TCP port destination tcp.dstport == 80 Find user agents http.user_agent contains Firefox !http.user_agent contains || !http.user_agent contains Chrome Filter broadcast traffic !(arp or icmp or dns) Filter IP address and port tcp.port == 80 && ip.addr == 192.168.0.1 Filter all http get requests http.request Filter all http get requests and responses http.request or http.response Filter three way handshake tcp.flags.syn==1 or (tcp.seq==1 and tcp.ack==1 and tcp.len==0 and tcp.analysis.initial_rtt) Find files by type frame contains \u201c(attachment|tar|exe|zip|pdf)\u201d Find traffic based on keyword tcp contains facebook frame contains facebook Detecting SYN Floods tcp.flags.syn == 1 and tcp.flags.ack == 0 Wireshark Promiscuous Mode - By default, Wireshark only captures packets going to and from the computer where it runs. By checking the box to run Wireshark in Promiscuous Mode in the Capture Settings, you can capture most of the traffic on the LAN. DumpCap Dumpcap is a network traffic dump tool. It captures packet data from a live network and writes the packets to a file. Dumpcap\u2019s native capture file format is pcapng, which is also the format used by Wireshark. By default, Dumpcap uses the pcap library to capture traffic from the first available network interface and writes the received raw packet data, along with the packets\u2019 time stamps into a pcapng file. The capture filter syntax follows the rules of the pcap library. The Wireshark command-line utility called 'dumpcap.exe' can be used to capture LAN traffic over an extended period of time. Wireshark itself can also be used, but dumpcap does not significantly utilize the computer's memory while capturing for long periods. DaemonLogger Daemonlogger is a packet logging application designed specifically for use in Network and Systems Management (NSM) environments. The biggest benefit Daemonlogger provides is that, like Dumpcap, it is simple to use for capturing packets. In order to begin capturing, you need only to invoke the command and specify an interface. daemonlogger \u2013i eth1 This option, by default, will begin capturing packets and logging them to the current working directory. Packets will be collected until the capture file size reaches 2 GB, and then a new file will be created. This will continue indefinitely until the process is halted. NetSniff-NG Netsniff-NG is a high-performance packet capture utility While the utilities we\u2019ve discussed to this point rely on Libpcap for capture, Netsniff-NG utilizes zero-copy mechanisms to capture packets. This is done with the intent to support full packet capture over high throughput links. To begin capturing packets with Netsniff-NG, we have to specify an input and output. In most cases, the input will be a network interface, and the output will be a file or folder on disk. netsniff-ng \u2013i eth1 \u2013o data.pcap Netflow NetFlow is a feature that was introduced on Cisco routers around 1996 that provides the ability to collect IP network traffic as it enters or exits an interface. By analyzing the data provided by NetFlow, a network administrator can determine things such as the source and destination of traffic, class of service, and the causes of congestion. A typical flow monitoring setup (using NetFlow) consists of three main components:[1] Flow exporter: aggregates packets into flows and exports flow records towards one or more flow collectors. Flow collector: responsible for reception, storage and pre-processing of flow data received from a flow exporter. Analysis application: analyzes received flow data in the context of intrusion detection or traffic profiling, for example. Routers and switches that support NetFlow can collect IP traffic statistics on all interfaces where NetFlow is enabled, and later export those statistics as NetFlow records toward at least one NetFlow collector\u2014typically a server that does the actual traffic analysis. IDS A security solution that detects security-related events in your environment but does not block them. IDS sensors can be software and hardware-based used to collect and analyze the network traffic. These sensors are available in two varieties, network IDS and host IDS. A host IDS is a server-specific agent running on a server with a minimum of overhead to monitor the operating system. A network IDS can be embedded in a networking device, a standalone appliance, or a module monitoring the network traffic. Signature Based IDS The signature-based IDS monitors the network traffic or observes the system and sends an alarm if a known malicious event is happening. It does so by comparing the data flow against a database of known attack patterns These signatures explicitly define what traffic or activity should be considered as malicious. Signature-based detection has been the bread and butter of network-based defensive security for over a decade, partially because it is very similar to how malicious activity is detected at the host level with antivirus utilities The formula is fairly simple: an analyst observes a malicious activity, derives indicators from the activity and develops them into signatures, and then those signatures will alert whenever the activity occurs again. ex: SNORT & SURICATA Policy-Based IDS The policy-based IDSs (mainly host IDSs) trigger an alarm whenever a violation occurs against the configured policy. This configured policy is or should be a representation of the security policies. This type of IDS is flexible and can be customized to a company's network requirements because it knows exactly what is permitted and what is not. On the other hand, the signature-based systems rely on vendor specifics and default settings. Anomaly Based IDS The anomaly-based IDS looks for traffic that deviates from the normal, but the definition of what is a normal network traffic pattern is the tricky part Two types of anomaly-based IDS exist: statistical and nonstatistical anomaly detection Statistical anomaly detection learns the traffic patterns interactively over a period of time. In the nonstatistical approach, the IDS has a predefined configuration of the supposedly acceptable and valid traffic patterns. Host-Based IDS & Network-Based IDS A host IDS can be described as a distributed agent residing on each server of the network that needs protection. These distributed agents are tied very closely to the underlying operating system. Network IDSs, on the other hand, can be described as intelligent sniffing devices. Data (raw packets) is captured from the network by a network IDS, whereas host IDSs capture the data from the host on which they are installed. Honeypots The use of decoy machines to direct intruders' attention away from the machines under protection is a major technique to preclude intrusion attacks. Any device, system, directory, or file used as a decoy to lure attackers away from important assets and to collect intrusion or abusive behaviours is referred to as a honeypot. A honeypot may be implemented as a physical device or as an emulation system. The idea is to set up decoy machines in a LAN, or decoy directories/files in a file system and make them appear important, but with several exploitable loopholes, to lure attackers to attack these machines or directories/files, so that other machines, directories, and files can evade intruders' attentions. A decoy machine may be a host computer or a server computer. Likewise, we may also set up decoy routers or even decoy LANs. Chinks In The Armour (TCP/IP Security Issues) IP Spoofing In this type of attack, the attacker replaces the IP address of the sender, or in some rare cases the destination, with a different address. IP spoofing is normally used to exploit a target host. In other cases, it is used to start a denial-of-service (DoS) attack. In a DoS attack, an attacker modifies the IP packet to mislead the target host into accepting the original packet as a packet sourced at a trusted host. The attacker must know the IP address of the trusted host to modify the packet headers (source IP address) so that it appears that the packets are coming from that host. IP Spoofing Detection Techniques Direct TTL Probes In this technique we send a packet to a host of suspect spoofed IP that triggers reply and compares TTL with suspect packet; if the TTL in the reply is not the same as the packet being checked; it is a spoofed packet. This Technique is successful when the attacker is in a different subnet from the victim. IP Identification Number. Send a probe to the host of suspect spoofed traffic that triggers a reply and compares IP ID with suspect traffic. If IP IDs are not in the near value of packet being checked, suspect traffic is spoofed TCP Flow Control Method Attackers sending spoofed TCP packets will not receive the target\u2019s SYN-ACK packets. Attackers cannot, therefore, be responsive to change in the congestion window size When the receiver still receives traffic even after a windows size is exhausted, most probably the packets are spoofed. Covert Channel A covert or clandestine channel can be best described as a pipe or communication channel between two entities that can be exploited by a process or application transferring information in a manner that violates the system's security specifications. More specifically for TCP/IP, in some instances, covert channels are established, and data can be secretly passed between two end systems. Ex: ICMP resides at the Internet layer of the TCP/IP protocol suite and is implemented in all TCP/IP hosts. Based on the specifications of the ICMP Protocol, an ICMP Echo Request message should have an 8-byte header and a 56-byte payload. The ICMP Echo Request packet should not carry any data in the payload. However, these packets are often used to carry secret information. The ICMP packets are altered slightly to carry secret data in the payload. This makes the size of the packet larger, but no control exists in the protocol stack to defeat this behaviour. The alteration of ICMP packets allows intruders to program specialized client-server pairs. These small pieces of code export confidential information without alerting the network administrator. ICMP can be leveraged for more than data exfiltration. For eg. some C&C tools such as Loki used ICMP channel to establish encrypted interactive session back in 1996. Deep packet inspection has since come a long way. A lot of IDS/IPS detect ICMP tunnelling. Check for echo responses that do not contain the same payload as request Check for the volume of ICMP traffic especially for volumes beyond an acceptable threshold IP Fragmentation Attack The TCP/IP protocol suite, or more specifically IP, allows the fragmentation of packets.(this is a feature & not a bug) IP fragmentation offset is used to keep track of the different parts of a datagram. The information or content in this field is used at the destination to reassemble the datagrams All such fragments have the same Identification field value, and the fragmentation offset indicates the position of the current fragment in the context of the original packet. Many access routers and firewalls do not perform packet reassembly. In normal operation, IP fragments do not overlap, but attackers can create artificially fragmented packets to mislead the routers or firewalls. Usually, these packets are small and almost impractical for end systems because of data and computational overhead. A good example of an IP fragmentation attack is the Ping of Death attack. The Ping of Death attack sends fragments that, when reassembled at the end station, create a larger packet than the maximum permissible length. TCP Flags Data exchange using TCP does not happen until a three-way handshake has been completed. This handshake uses different flags to influence the way TCP segments are processed. There are 6 bits in the TCP header that are often called flags. Namely: 6 different flags are part of the TCP header: Urgent pointer field (URG), Acknowledgment field (ACK), Push function (PSH), Reset the connection (RST), Synchronize sequence numbers (SYN), and the sender is finished with this connection (FIN). Abuse of the normal operation or settings of these flags can be used by attackers to launch DoS attacks. This causes network servers or web servers to crash or hang. | SYN | FIN | PSH | RST | Validity| |------|------|-------|------|---------| | 1 |1 |0 |0 |Illegal Combination | 1 |1 |1 |0 |Illegal Combination | 1 |1 |0 |1 |Illegal Combination | 1 |1 |1 |1 |Illegal Combination The attacker's ultimate goal is to write special programs or pieces of code that can construct these illegal combinations resulting in an efficient DoS attack. SYN FLOOD The timers (or lack of certain timers) in 3 way handshake are often used and exploited by attackers to disable services or even to enter systems. After step 2 of the three-way handshake, no limit is set on the time to wait after receiving a SYN. The attacker initiates many connection requests to the webserver of Company XYZ (almost certainly with a spoofed IP address). The SYN+ACK packets (Step 2) sent by the web server back to the originating source IP address are not replied to. This leaves a TCP session half-open on the webserver. Multiple packets cause multiple TCP sessions to stay open. Based on the hardware limitations of the server, a limited number of TCP sessions can stay open, and as a result, the webserver refuses further connection establishments attempts from any host as soon as a certain limit is reached. These half-open connections need to be completed or timed out before new connections can be established. FIN Attack In normal operation, the sender sets the TCP FIN flag indicating that no more data will be transmitted and the connection can be closed down. This is a four-way handshake mechanism, with both sender and receiver expected to send an acknowledgement on a received FIN packet. During an attack that is trying to kill connections, a spoofed FIN packet is constructed. This packet also has the correct sequence number, so the packets are seen as valid by the targeted host. These sequence numbers are easy to predict. This process is referred to as TCP sequence number prediction, whereby the attacker either sniffs the current Sequence and Acknowledgment (SEQ/ACK) numbers of the connection or can algorithmically predict these numbers. Connection Hijacking An authorized user (Employee X) sends HTTP requests over a TCP session with the webserver. The web server accepts the packets from Employee X only when the packet has the correct SEQ/ACK numbers. As seen previously, these numbers are important for the webserver to distinguish between different sessions and to make sure it is still talking to Employee X. Imagine that the cracker starts sending packets to the web server spoofing the IP address of Employee X, using the correct SEQ/ACK combination. The web server accepts the packet and increments the ACK number. In the meantime, Employee X continues to send packets but with incorrect SEQ/ACK numbers. As a result of sending unsynchronized packets, all data from Employee X is discarded when received by the webserver. The attacker pretends to be Employee X using the correct numbers. This finally results in the cracker hijacking the connection, whereby Employee X is completely confused and the webserver replies assuming the cracker is sending correct synchronized data. STEPS: The attacker examines the traffic flows with a network monitor and notices traffic from Employee X to a web server. The web server returns or echoes data back to the origination station (Employee X). Employee X acknowledges the packet. The cracker launches a spoofed packet to the server. The web server responds to the cracker. The cracker starts verifying SEQ/ACK numbers to double-check success. At this time, the cracker takes over the session from Employee X, which results in a session hanging for Employee X. The cracker can start sending traffic to the webserver. The web server returns the requested data to confirm delivery with the correct ACK number. The cracker can continue to send data (keeping track of the correct SEQ/ACK numbers) until eventually setting the FIN flag to terminate the session. Buffer Overflow A buffer is a temporary data storage area used to store program code and data. When a program or process tries to store more data in a buffer than it was originally anticipated to hold, a buffer overflow occurs. Buffers are temporary storage locations in memory (memory or buffer sizes are often measured in bytes) that can store a fixed amount of data in bytes. When more data is retrieved than can be stored in a buffer location, the additional information must go into an adjacent buffer, resulting in overwriting the valid data held in them. Mechanism: Buffer overflow vulnerabilities exist in different types. But the overall goal for all buffer overflow attacks is to take over the control of a privileged program and, if possible, the host. The attacker has two tasks to achieve this goal. First, the dirty code needs to be available in the program's code address space. Second, the privileged program should jump to that particular part of the code, which ensures that the proper parameters are loaded into memory. The first task can be achieved in two ways: by injecting the code in the right address space or by using the existing code and modifying certain parameters slightly. The second task is a little more complex because the program's control flow needs to be modified to make the program jump to the dirty code. CounterMeasure: The most important approach is to have a concerted focus on writing correct code. A second method is to make the data buffers (memory locations) address space of the program code non-executable. This type of address space makes it impossible to execute code, which might be infiltrated in the program's buffers during an attack. More Spoofing Address Resolution Protocol Spoofing The Address Resolution Protocol (ARP) provides a mechanism to resolve, or map, a known IP address to a MAC sublayer address. Using ARP spoofing, the cracker can exploit this hardware address authentication mechanism by spoofing the hardware address of Host B. Basically, the attacker can convince any host or network device on the local network that the cracker's workstation is the host to be trusted. This is a common method used in a switched environment. ARP spoofing can be prevented with the implementation of static ARP tables in all the hosts and routers of your network. Alternatively, you can implement an ARP server that responds to ARP requests on behalf of the target host. DNS Spoofing DNS spoofing is the method whereby the hacker convinces the target machine that the system it wants to connect to is the machine of the cracker. The cracker modifies some records so that name entries of hosts correspond to the attacker's IP address. There have been instances in which the complete DNS server was compromised by an attack. To counter DNS spoofing, the reverse lookup detects these attacks. The reverse lookup is a mechanism to verify the IP address against a name. The IP address and name files are usually kept on different servers to make compromise much more difficult","title":"Network Security"},{"location":"security/network_security/#part-ii-network-security","text":"","title":"Part II: Network Security"},{"location":"security/network_security/#introduction","text":"TCP/IP is the dominant networking technology today. It is a five-layer architecture. These layers are, from top to bottom, the application layer, the transport layer (TCP), the network layer (IP), the data-link layer, and the physical layer. In addition to TCP/IP, there also are other networking technologies. For convenience, we use the OSI network model to represent non-TCP/IP network technologies. Different networks are interconnected using gateways. A gateway can be placed at any layer. The OSI model is a seven-layer architecture. The OSI architecture is similar to the TCP/IP architecture, except that the OSI model specifies two additional layers between the application layer and the transport layer in the TCP/IP architecture. These two layers are the presentation layer and the session layer. Figure 5.1 shows the relationship between the TCP/IP layers and the OSI layers. The application layer in TCP/IP corresponds to the application layer and the presentation layer in OSI. The transport layer in TCP/IP corresponds to the session layer and the transport layer in OSI. The remaining three layers in the TCP/IP architecture are one-to-one correspondent to the remaining three layers in the OSI model. Correspondence between layers of the TCP/IP architecture and the OSI model. Also shown are placements of cryptographic algorithms in network layers, where the dotted arrows indicate actual communications of cryptographic algorithms The functionalities of OSI layers are briefly described as follows: The application layer serves as an interface between applications and network programs. It supports application programs and end-user processing. Common application-layer programs include remote logins, file transfer, email, and Web browsing. The presentation layer is responsible for dealing with data that is formed differently. This protocol layer allows application-layer programs residing on different sides of a communication channel with different platforms to understand each other's data formats regardless of how they are presented. The session layer is responsible for creating, managing, and closing a communication connection. The transport layer is responsible for providing reliable connections, such as packet sequencing, traffic control, and congestion control. The network layer is responsible for routing device-independent data packets from the current hop to the next hop. The data-link layer is responsible for encapsulating device-independent data packets into device-dependent data frames. It has two sublayers: logical link control and media access control. The physical layer is responsible for transmitting device-dependent frames through some physical media. Starting from the application layer, data generated from an application program is passed down layer-by-layer to the physical layer. Data from the previous layer is enclosed in a new envelope at the current layer, where the data from the previous layer is also just an envelope containing the data from the layer before it. This is similar to enclosing a smaller envelope in a larger one. The envelope added at each layer contains sufficient information for handling the packet. Application-layer data are divided into blocks small enough to be encapsulated in an envelope at the next layer. Application data blocks are \u201cdressed up\u201d in the TCP/IP architecture according to the following basic steps. At the sending side, an application data block is encapsulated in a TCP packet when it is passed down to the TCP layer. In other words, a TCP packet consists of a header and a payload, where the header corresponds to the TCP envelope and the payload is the application data block. Likewise, the TCP packet will be encapsulated in an IP packet when it is passed down to the IP layer. An IP packet consists of a header and a payload, which is the TCP packet passed down from the TCP layer. The IP packet will be encapsulated in a device-dependent frame (e.g., an Ethernet frame) when it is passed down to the data-link layer. A frame has a header, and it may also have a trailer. For example, in addition to having a header, an Ethernet frame also has a 32-bit cyclic redundancy check (CRC) trailer. When it is passed down to the physical layer, a frame will be transformed into a sequence of media signals for transmission Flow Diagram of a Packet Generation At the destination side, the medium signals are converted by the physical layer into a frame, which is passed up to the data-link layer. The data-link layer passes the frame payload (i.e., the IP packet encapsulated in the frame) up to the IP layer. The IP layer passes the IP payload, namely, the TCP packet encapsulated in the IP packet, up to the TCP layer. The TCP layer passes the TCP payload, namely, the application data block, up to the application layer. When a packet arrives at a router, it only goes up to the IP layer, where certain fields in the IP header are modified (e.g., the value of TTL is decreased by 1). This modified packet is then passed back down layer-by-layer to the physical layer for further transmission.","title":"Introduction"},{"location":"security/network_security/#public-key-infrastructure","text":"To deploy cryptographic algorithms in network applications, we need a way to distribute secret keys using open networks. Public-key cryptography is the best way to distribute these secret keys. To use public-key cryptography, we need to build a public-key infrastructure (PKI) to support and manage public-key certificates and certificate authority (CA) networks. In particular, PKIs are set up to perform the following functions: Determine the legitimacy of users before issuing public-key certificates to them. Issue public-key certificates upon user requests. Extend public-key certificates valid time upon user requests. Revoke public-key certificates upon users' requests or when the corresponding private keys are compromised. Store and manage public-key certificates. Prevent digital signature signers from denying their signatures. Support CA networks to allow different CAs to authenticate public-key certificates issued by other CAs. X.509: https://certificatedecoder.dev/?gclid=EAIaIQobChMI0M731O6G6gIVVSQrCh04bQaAEAAYASAAEgKRkPD_BwE","title":"Public Key Infrastructure"},{"location":"security/network_security/#ipsec-a-security-protocol-at-the-network-layer","text":"IPsec is a major security protocol at the network layer IPsec provides a potent platform for constructing virtual private networks (VPN). VPNs are private networks overlayed on public networks. The purpose of deploying cryptographic algorithms at the network layer is to encrypt or authenticate IP packets (either just the payloads or the whole packets). IPsec also specifies how to exchange keys. Thus, IPsec consists of authentication protocols, encryption protocols, and key exchange protocols. They are referred to, respectively, as authentication header (AH), encapsulating security payload (ESP), and Internet key exchange (IKE).","title":"IPsec: A Security Protocol at the Network Layer"},{"location":"security/network_security/#pgp-smime-email-security","text":"There are several security protocols at the application layer. The most used of these protocols are email security protocols namely PGP and S/MIME. SMTP (\u201cSimple Mail Transfer Protocol\u201d) is used for sending and delivering from a client to a server via port 25: it\u2019s the outgoing server. On the contrary, POP (\u201cPost Office Protocol\u201d) allows the user to pick up the message and download it into his inbox: it\u2019s the incoming server. The latest version of the Post Office Protocol is named POP3, and it\u2019s been used since 1996; it uses port 110 PGP PGP implements all major cryptographic algorithms, the ZIP compression algorithm, and the Base64 encoding algorithm. It can be used to authenticate a message, encrypt a message, or both. PGP follows the following general process: authentication, ZIP compression, encryption, and Base64 encoding. The Base64 encoding procedure makes the message ready for SMTP transmission GPG (GnuPG) GnuPG is another free encryption standard that companies may use that is based on OpenPGP. GnuPG serves as a replacement for Symantec\u2019s PGP. The main difference is the supported algorithms. However, GnuPG plays nice with PGP by design. Because GnuPG is open, some businesses would prefer the technical support and the user interface that comes with Symantec\u2019s PGP. It is important to note that there are some nuances between the compatibility of GnuPG and PGP, such as the compatibility between certain algorithms, but in most applications such as email, there are workarounds. One such algorithm is the IDEA Module which isn\u2019t included in GnuPG out of the box due to patent issues. S/MIME SMTP can only handle 7-bit ASCII text (You can use UTF-8 extensions to alleviate these limitations, ) messages. While POP can handle other content types besides 7-bit ASCII, POP may, under a common default setting, download all the messages stored in the mail server to the user's local computer. After that, if POP removes these messages from the mail server. This makes it difficult for the user to read his messages from multiple computers. The Multipurpose Internet Mail Extension protocol (MIME) was designed to support sending and receiving email messages in various formats, including nontext files generated by word processors, graphics files, sound files, and video clips. Moreover, MIME allows a single message to include mixed types of data in any combination of these formats. The Internet Mail Access Protocol (IMAP), operated on TCP port 143(only for non-encrypted), stores (Configurable on both server & client just like PoP) incoming email messages in the mail server until the user deletes them deliberately. This allows the user to access his mailbox from multiple machines and download messages to a local machine without deleting it from the mailbox in the mail server. SSL/TLS SSL uses a PKI to decide if a server\u2019s public key is trustworthy by requiring servers to use a security certificate signed by a trusted CA. When Netscape Navigator 1.0 was released, it trusted a single CA operated by the RSA Data Security corporation. The server\u2019s public RSA keys were used to be stored in the security certificate, which can then be used by the browser to establish a secure communication channel. The security certificates we use today still rely on the same standard (named X.509) that Netscape Navigator 1.0 used back then. Netscape intended to train users(though this didn\u2019t work out later) to differentiate secure communications from insecure ones, so they put a lock icon next to the address bar. When the lock is open, the communication is insecure. A closed lock means communication has been secured with SSL, which required the server to provide a signed certificate. You\u2019re obviously familiar with this icon as it\u2019s been in every browser ever since. The engineers at Netscape truly created a standard for secure internet communications. A year after releasing SSL 2.0, Netscape fixed several security issues and released SSL 3.0, a protocol that, albeit being officially deprecated since June 2015, remains in use in certain parts of the world more than 20 years after its introduction. To standardize SSL, the Internet Engineering Task Force (IETF) created a slightly modified SSL 3.0 and, in 1999, unveiled it as Transport Layer Security (TLS) 1.0. The name change between SSL and TLS continues to confuse people today. Officially, TLS is the new SSL, but in practice, people use SSL and TLS interchangeably to talk about any version of the protocol. Must See: https://tls.ulfheim.net/ https://davidwong.fr/tls13/","title":"PGP &amp; S/MIME : Email Security"},{"location":"security/network_security/#network-perimeter-security","text":"Let us see how we keep a check on the perimeter i.e the edges, the first layer of protection","title":"Network  Perimeter Security"},{"location":"security/network_security/#general-firewall-framework","text":"Firewalls are needed because encryption algorithms cannot effectively stop malicious packets from getting into an edge network. This is because IP packets, regardless of whether they are encrypted, can always be forwarded into an edge network. Firewalls that were developed in the 1990s are important instruments to help restrict network access. A firewall may be a hardware device, a software package, or a combination of both. Packets flowing into the internal network from the outside should be evaluated before they are allowed to enter. One of the critical elements of a firewall is its ability to examine packets without imposing a negative impact on communication speed while providing security protections for the internal network. The packet inspection that is carried out by firewalls can be done using several different methods. Based on the particular method used by the firewall, it can be characterized as either a packet filter, circuit gateway, application gateway, or dynamic packet filter.","title":"General Firewall Framework"},{"location":"security/network_security/#packet-filters","text":"It inspects ingress packets coming to an internal network from outside and inspects egress packets going outside from an internal network Packing filtering only inspects IP headers and TCP headers, not the payloads generated at the application layer A packet-filtering firewall uses a set of rules to determine whether a packet should be allowed or denied to pass through. 2 types: Stateless It treats each packet as an independent object, and it does not keep track of any previously processed packets. In other words, stateless filtering inspects a packet when it arrives and makes a decision without leaving any record of the packet being inspected. Stateful Stateful filtering, also referred to as connection-state filtering, keeps track of connections between an internal host and an external host. A connection state (or state, for short) indicates whether it is a TCP connection or a UDP connection and whether the connection is established.","title":"Packet Filters"},{"location":"security/network_security/#circuit-gateways","text":"Circuit gateways, also referred to as circuit-level gateways, are typically operated at the transportation layer They evaluate the information of the IP addresses and the port numbers contained in TCP (or UDP) headers and use it to determine whether to allow or to disallow an internal host and an external host to establish a connection. It is common practice to combine packet filters and circuit gateways to form a dynamic packet filter (DPF).","title":"Circuit Gateways"},{"location":"security/network_security/#application-gatewaysalg","text":"Aka PROXY Servers An Application Level Gateway (ALG) acts as a proxy for internal hosts, processing service requests from external clients. An ALG performs deep inspections on each IP packet (ingress or egress). In particular, an ALG inspects application program formats contained in the packet (e.g., MIME format or SQL format) and examines whether its payload is permitted. Thus, an ALG may be able to detect a computer virus contained in the payload. Because an ALG inspects packet payloads, it may be able to detect malicious code and quarantine suspicious packets, in addition to blocking packets with suspicious IP addresses and TCP ports. On the other hand, an ALG also incurs substantial computation and space overheads.","title":"Application Gateways(ALG)"},{"location":"security/network_security/#trusted-systems-bastion-hosts","text":"A Trusted Operating System (TOS) is an operating system that meets a particular set of security requirements. Whether an operating system can be trusted or not depends on several elements. For example, for an operating system on a particular computer to be certified trusted, one needs to validate that, among other things, the following four requirements are satisfied: Its system design contains no defects; Its system software contains no loopholes; Its system is configured properly; and Its system management is appropriate. Bastion Hosts Bastion hosts are computers with strong defence mechanisms. They often serve as host computers for implementing application gateways, circuit gateways, and other types of firewalls. A bastion host is operated on a trusted operating system that must not contain unnecessary functionalities or programs. This measure helps to reduce error probabilities and makes it easier to conduct security checks. Only those network application programs that are necessary, for example, SSH, DNS, SMTP, and authentication programs, are installed on a bastion host. Bastion hosts are also primarily used as controlled ingress points so that the security monitoring can focus more narrowly on actions happening at a single point closely.","title":"Trusted Systems &amp; Bastion Hosts"},{"location":"security/network_security/#common-techniques-scannings-packet-capturing","text":"","title":"Common Techniques &amp; Scannings, Packet Capturing"},{"location":"security/network_security/#scanning-ports-with-nmap","text":"Nmap (\"Network Mapper\") is a free and open-source (license) utility for network discovery and security auditing. Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime. The best thing about Nmap is it\u2019s free and open-source and is very flexible and versatile Nmap is often used to determine alive hosts in a network, open ports on those hosts, services running on those open ports, and version identification of that service on that port. More at http://scanme.nmap.org/ nmap [scan type] [options] [target specification] Nmap uses 6 different port states: Open \u2014 An open port is one that is actively accepting TCP, UDP or SCTP connections. Open ports are what interests us the most because they are the ones that are vulnerable to attacks. Open ports also show the available services on a network. Closed \u2014 A port that receives and responds to Nmap probe packets but there is no application listening on that port. Useful for identifying that the host exists and for OS detection. Filtered \u2014 Nmap can\u2019t determine whether the port is open because packet filtering prevents its probes from reaching the port. Filtering could come from firewalls or router rules. Often little information is given from filtered ports during scans as the filters can drop the probes without responding or respond with useless error messages e.g. destination unreachable. Unfiltered \u2014 Port is accessible but Nmap doesn\u2019t know if it is open or closed. Only used in ACK scan which is used to map firewall rulesets. Other scan types can be used to identify whether the port is open. Open/filtered \u2014 Nmap is unable to determine between open and filtered. This happens when an open port gives no response. No response could mean that the probe was dropped by a packet filter or any response is blocked. Closed/filtered \u2014 Nmap is unable to determine whether a port is closed or filtered. Only used in the IP ID idle scan.","title":"Scanning Ports with Nmap"},{"location":"security/network_security/#types-of-nmap-scan","text":"TCP Connect TCP Connect scan completes the 3-way handshake. If a port is open, the operating system completes the TCP three-way handshake and the port scanner immediately closes the connection to avoid DOS. This is \u201cnoisy\u201d because the services can log the sender IP address and might trigger Intrusion Detection Systems. UDP Scan This scan checks to see if any UDP ports are listening. Since UDP does not respond with a positive acknowledgement like TCP and only responds to an incoming UDP packet when the port is closed, SYN Scan SYN scan is another form of TCP scanning. This scan type is also known as \u201chalf-open scanning\u201d because it never actually opens a full TCP connection. The port scanner generates a SYN packet. If the target port is open, it will respond with an SYN-ACK packet. The scanner host responds with an RST packet, closing the connection before the handshake is completed. If the port is closed but unfiltered, the target will instantly respond with an RST packet. SYN scan has the advantage that the individual services never actually receive a connection. FIN Scan This is a stealthy scan, like the SYN scan, but sends a TCP FIN packet instead. ACK Scan Ack scanning determines whether the port is filtered or not. Null Scan Another very stealthy scan that sets all the TCP header flags to off or null. This is not normally a valid packet and some hosts will not know what to do with this. XMAS Scan Similar to the NULL scan except for all the flags in the TCP header is set to on RPC Scan This special type of scan looks for machine answering to RPC (Remote Procedure Call) services IDLE Scan It is a super stealthy method whereby the scan packets are bounced off an external host. You don\u2019t need to have control over the other host but it does have to set up and meet certain requirements. You must input the IP address of our \u201czombie\u201d host and what port number to use. It is one of the more controversial options in Nmap since it only has a use for malicious attacks. Scan Techniques A couple of scan techniques which can be used to gain more information about a system and its ports. You can read more at https://medium.com/infosec-adventures/nmap-cheatsheet-a423fcdda0ca","title":"Types of Nmap Scan:"},{"location":"security/network_security/#openvas","text":"OpenVAS is a full-featured vulnerability scanner. OpenVAS is a framework of services and tools that provides a comprehensive and powerful vulnerability scanning and management package OpenVAS, which is an open-source program, began as a fork of the once-more-popular scanning program, Nessus. OpenVAS is made up of three main parts. These are: a regularly updated feed of Network Vulnerability Tests (NVTs); a scanner, which runs the NVTs; and an SQLite 3 database for storing both your test configurations and the NVTs\u2019 results and configurations. https://www.greenbone.net/en/install_use_gce/","title":"OpenVAS"},{"location":"security/network_security/#wireshark","text":"Wireshark is a protocol analyzer. This means Wireshark is designed to decode not only packet bits and bytes but also the relations between packets and protocols. Wireshark understands protocol sequences. A simple demo of Wireshark Capture only udp packets: Capture filter = \u201cudp\u201d Capture only tcp packets Capture filter = \u201ctcp\u201d TCP/IP 3 way Handshake Filter by IP address: displays all traffic from IP, be it source or destination ip.addr == 192.168.1.1 Filter by source address: display traffic only from IP source ip.src == 192.168.0.1 Filter by destination: display traffic only form IP destination ip.dst == 192.168.0.1 Filter by IP subnet: display traffic from subnet, be it source or destination ip.addr = 192.168.0.1/24 Filter by protocol: filter traffic by protocol name dns http ftp arp ssh telnet icmp Exclude IP address: remove traffic from and to IP address !ip.addr ==192.168.0.1 Display traffic between two specific subnet ip.addr == 192.168.0.1/24 and ip.addr == 192.168.1.1/24 Display traffic between two specific workstations ip.addr == 192.168.0.1 and ip.addr == 192.168.0.2 Filter by MAC eth.addr = 00:50:7f:c5:b6:78 Filter TCP port tcp.port == 80 Filter TCP port source tcp.srcport == 80 Filter TCP port destination tcp.dstport == 80 Find user agents http.user_agent contains Firefox !http.user_agent contains || !http.user_agent contains Chrome Filter broadcast traffic !(arp or icmp or dns) Filter IP address and port tcp.port == 80 && ip.addr == 192.168.0.1 Filter all http get requests http.request Filter all http get requests and responses http.request or http.response Filter three way handshake tcp.flags.syn==1 or (tcp.seq==1 and tcp.ack==1 and tcp.len==0 and tcp.analysis.initial_rtt) Find files by type frame contains \u201c(attachment|tar|exe|zip|pdf)\u201d Find traffic based on keyword tcp contains facebook frame contains facebook Detecting SYN Floods tcp.flags.syn == 1 and tcp.flags.ack == 0 Wireshark Promiscuous Mode - By default, Wireshark only captures packets going to and from the computer where it runs. By checking the box to run Wireshark in Promiscuous Mode in the Capture Settings, you can capture most of the traffic on the LAN.","title":"WireShark"},{"location":"security/network_security/#dumpcap","text":"Dumpcap is a network traffic dump tool. It captures packet data from a live network and writes the packets to a file. Dumpcap\u2019s native capture file format is pcapng, which is also the format used by Wireshark. By default, Dumpcap uses the pcap library to capture traffic from the first available network interface and writes the received raw packet data, along with the packets\u2019 time stamps into a pcapng file. The capture filter syntax follows the rules of the pcap library. The Wireshark command-line utility called 'dumpcap.exe' can be used to capture LAN traffic over an extended period of time. Wireshark itself can also be used, but dumpcap does not significantly utilize the computer's memory while capturing for long periods.","title":"DumpCap"},{"location":"security/network_security/#daemonlogger","text":"Daemonlogger is a packet logging application designed specifically for use in Network and Systems Management (NSM) environments. The biggest benefit Daemonlogger provides is that, like Dumpcap, it is simple to use for capturing packets. In order to begin capturing, you need only to invoke the command and specify an interface. daemonlogger \u2013i eth1 This option, by default, will begin capturing packets and logging them to the current working directory. Packets will be collected until the capture file size reaches 2 GB, and then a new file will be created. This will continue indefinitely until the process is halted.","title":"DaemonLogger"},{"location":"security/network_security/#netsniff-ng","text":"Netsniff-NG is a high-performance packet capture utility While the utilities we\u2019ve discussed to this point rely on Libpcap for capture, Netsniff-NG utilizes zero-copy mechanisms to capture packets. This is done with the intent to support full packet capture over high throughput links. To begin capturing packets with Netsniff-NG, we have to specify an input and output. In most cases, the input will be a network interface, and the output will be a file or folder on disk. netsniff-ng \u2013i eth1 \u2013o data.pcap","title":"NetSniff-NG"},{"location":"security/network_security/#netflow","text":"NetFlow is a feature that was introduced on Cisco routers around 1996 that provides the ability to collect IP network traffic as it enters or exits an interface. By analyzing the data provided by NetFlow, a network administrator can determine things such as the source and destination of traffic, class of service, and the causes of congestion. A typical flow monitoring setup (using NetFlow) consists of three main components:[1] Flow exporter: aggregates packets into flows and exports flow records towards one or more flow collectors. Flow collector: responsible for reception, storage and pre-processing of flow data received from a flow exporter. Analysis application: analyzes received flow data in the context of intrusion detection or traffic profiling, for example. Routers and switches that support NetFlow can collect IP traffic statistics on all interfaces where NetFlow is enabled, and later export those statistics as NetFlow records toward at least one NetFlow collector\u2014typically a server that does the actual traffic analysis.","title":"Netflow"},{"location":"security/network_security/#ids","text":"A security solution that detects security-related events in your environment but does not block them. IDS sensors can be software and hardware-based used to collect and analyze the network traffic. These sensors are available in two varieties, network IDS and host IDS. A host IDS is a server-specific agent running on a server with a minimum of overhead to monitor the operating system. A network IDS can be embedded in a networking device, a standalone appliance, or a module monitoring the network traffic. Signature Based IDS The signature-based IDS monitors the network traffic or observes the system and sends an alarm if a known malicious event is happening. It does so by comparing the data flow against a database of known attack patterns These signatures explicitly define what traffic or activity should be considered as malicious. Signature-based detection has been the bread and butter of network-based defensive security for over a decade, partially because it is very similar to how malicious activity is detected at the host level with antivirus utilities The formula is fairly simple: an analyst observes a malicious activity, derives indicators from the activity and develops them into signatures, and then those signatures will alert whenever the activity occurs again. ex: SNORT & SURICATA Policy-Based IDS The policy-based IDSs (mainly host IDSs) trigger an alarm whenever a violation occurs against the configured policy. This configured policy is or should be a representation of the security policies. This type of IDS is flexible and can be customized to a company's network requirements because it knows exactly what is permitted and what is not. On the other hand, the signature-based systems rely on vendor specifics and default settings. Anomaly Based IDS The anomaly-based IDS looks for traffic that deviates from the normal, but the definition of what is a normal network traffic pattern is the tricky part Two types of anomaly-based IDS exist: statistical and nonstatistical anomaly detection Statistical anomaly detection learns the traffic patterns interactively over a period of time. In the nonstatistical approach, the IDS has a predefined configuration of the supposedly acceptable and valid traffic patterns. Host-Based IDS & Network-Based IDS A host IDS can be described as a distributed agent residing on each server of the network that needs protection. These distributed agents are tied very closely to the underlying operating system. Network IDSs, on the other hand, can be described as intelligent sniffing devices. Data (raw packets) is captured from the network by a network IDS, whereas host IDSs capture the data from the host on which they are installed. Honeypots The use of decoy machines to direct intruders' attention away from the machines under protection is a major technique to preclude intrusion attacks. Any device, system, directory, or file used as a decoy to lure attackers away from important assets and to collect intrusion or abusive behaviours is referred to as a honeypot. A honeypot may be implemented as a physical device or as an emulation system. The idea is to set up decoy machines in a LAN, or decoy directories/files in a file system and make them appear important, but with several exploitable loopholes, to lure attackers to attack these machines or directories/files, so that other machines, directories, and files can evade intruders' attentions. A decoy machine may be a host computer or a server computer. Likewise, we may also set up decoy routers or even decoy LANs.","title":"IDS"},{"location":"security/network_security/#chinks-in-the-armour-tcpip-security-issues","text":"","title":"Chinks In The Armour (TCP/IP Security Issues)"},{"location":"security/network_security/#ip-spoofing","text":"In this type of attack, the attacker replaces the IP address of the sender, or in some rare cases the destination, with a different address. IP spoofing is normally used to exploit a target host. In other cases, it is used to start a denial-of-service (DoS) attack. In a DoS attack, an attacker modifies the IP packet to mislead the target host into accepting the original packet as a packet sourced at a trusted host. The attacker must know the IP address of the trusted host to modify the packet headers (source IP address) so that it appears that the packets are coming from that host. IP Spoofing Detection Techniques Direct TTL Probes In this technique we send a packet to a host of suspect spoofed IP that triggers reply and compares TTL with suspect packet; if the TTL in the reply is not the same as the packet being checked; it is a spoofed packet. This Technique is successful when the attacker is in a different subnet from the victim. IP Identification Number. Send a probe to the host of suspect spoofed traffic that triggers a reply and compares IP ID with suspect traffic. If IP IDs are not in the near value of packet being checked, suspect traffic is spoofed TCP Flow Control Method Attackers sending spoofed TCP packets will not receive the target\u2019s SYN-ACK packets. Attackers cannot, therefore, be responsive to change in the congestion window size When the receiver still receives traffic even after a windows size is exhausted, most probably the packets are spoofed.","title":"IP Spoofing"},{"location":"security/network_security/#covert-channel","text":"A covert or clandestine channel can be best described as a pipe or communication channel between two entities that can be exploited by a process or application transferring information in a manner that violates the system's security specifications. More specifically for TCP/IP, in some instances, covert channels are established, and data can be secretly passed between two end systems. Ex: ICMP resides at the Internet layer of the TCP/IP protocol suite and is implemented in all TCP/IP hosts. Based on the specifications of the ICMP Protocol, an ICMP Echo Request message should have an 8-byte header and a 56-byte payload. The ICMP Echo Request packet should not carry any data in the payload. However, these packets are often used to carry secret information. The ICMP packets are altered slightly to carry secret data in the payload. This makes the size of the packet larger, but no control exists in the protocol stack to defeat this behaviour. The alteration of ICMP packets allows intruders to program specialized client-server pairs. These small pieces of code export confidential information without alerting the network administrator. ICMP can be leveraged for more than data exfiltration. For eg. some C&C tools such as Loki used ICMP channel to establish encrypted interactive session back in 1996. Deep packet inspection has since come a long way. A lot of IDS/IPS detect ICMP tunnelling. Check for echo responses that do not contain the same payload as request Check for the volume of ICMP traffic especially for volumes beyond an acceptable threshold","title":"Covert Channel"},{"location":"security/network_security/#ip-fragmentation-attack","text":"The TCP/IP protocol suite, or more specifically IP, allows the fragmentation of packets.(this is a feature & not a bug) IP fragmentation offset is used to keep track of the different parts of a datagram. The information or content in this field is used at the destination to reassemble the datagrams All such fragments have the same Identification field value, and the fragmentation offset indicates the position of the current fragment in the context of the original packet. Many access routers and firewalls do not perform packet reassembly. In normal operation, IP fragments do not overlap, but attackers can create artificially fragmented packets to mislead the routers or firewalls. Usually, these packets are small and almost impractical for end systems because of data and computational overhead. A good example of an IP fragmentation attack is the Ping of Death attack. The Ping of Death attack sends fragments that, when reassembled at the end station, create a larger packet than the maximum permissible length. TCP Flags Data exchange using TCP does not happen until a three-way handshake has been completed. This handshake uses different flags to influence the way TCP segments are processed. There are 6 bits in the TCP header that are often called flags. Namely: 6 different flags are part of the TCP header: Urgent pointer field (URG), Acknowledgment field (ACK), Push function (PSH), Reset the connection (RST), Synchronize sequence numbers (SYN), and the sender is finished with this connection (FIN). Abuse of the normal operation or settings of these flags can be used by attackers to launch DoS attacks. This causes network servers or web servers to crash or hang. | SYN | FIN | PSH | RST | Validity| |------|------|-------|------|---------| | 1 |1 |0 |0 |Illegal Combination | 1 |1 |1 |0 |Illegal Combination | 1 |1 |0 |1 |Illegal Combination | 1 |1 |1 |1 |Illegal Combination The attacker's ultimate goal is to write special programs or pieces of code that can construct these illegal combinations resulting in an efficient DoS attack. SYN FLOOD The timers (or lack of certain timers) in 3 way handshake are often used and exploited by attackers to disable services or even to enter systems. After step 2 of the three-way handshake, no limit is set on the time to wait after receiving a SYN. The attacker initiates many connection requests to the webserver of Company XYZ (almost certainly with a spoofed IP address). The SYN+ACK packets (Step 2) sent by the web server back to the originating source IP address are not replied to. This leaves a TCP session half-open on the webserver. Multiple packets cause multiple TCP sessions to stay open. Based on the hardware limitations of the server, a limited number of TCP sessions can stay open, and as a result, the webserver refuses further connection establishments attempts from any host as soon as a certain limit is reached. These half-open connections need to be completed or timed out before new connections can be established. FIN Attack In normal operation, the sender sets the TCP FIN flag indicating that no more data will be transmitted and the connection can be closed down. This is a four-way handshake mechanism, with both sender and receiver expected to send an acknowledgement on a received FIN packet. During an attack that is trying to kill connections, a spoofed FIN packet is constructed. This packet also has the correct sequence number, so the packets are seen as valid by the targeted host. These sequence numbers are easy to predict. This process is referred to as TCP sequence number prediction, whereby the attacker either sniffs the current Sequence and Acknowledgment (SEQ/ACK) numbers of the connection or can algorithmically predict these numbers.","title":"IP Fragmentation Attack"},{"location":"security/network_security/#connection-hijacking","text":"An authorized user (Employee X) sends HTTP requests over a TCP session with the webserver. The web server accepts the packets from Employee X only when the packet has the correct SEQ/ACK numbers. As seen previously, these numbers are important for the webserver to distinguish between different sessions and to make sure it is still talking to Employee X. Imagine that the cracker starts sending packets to the web server spoofing the IP address of Employee X, using the correct SEQ/ACK combination. The web server accepts the packet and increments the ACK number. In the meantime, Employee X continues to send packets but with incorrect SEQ/ACK numbers. As a result of sending unsynchronized packets, all data from Employee X is discarded when received by the webserver. The attacker pretends to be Employee X using the correct numbers. This finally results in the cracker hijacking the connection, whereby Employee X is completely confused and the webserver replies assuming the cracker is sending correct synchronized data. STEPS: The attacker examines the traffic flows with a network monitor and notices traffic from Employee X to a web server. The web server returns or echoes data back to the origination station (Employee X). Employee X acknowledges the packet. The cracker launches a spoofed packet to the server. The web server responds to the cracker. The cracker starts verifying SEQ/ACK numbers to double-check success. At this time, the cracker takes over the session from Employee X, which results in a session hanging for Employee X. The cracker can start sending traffic to the webserver. The web server returns the requested data to confirm delivery with the correct ACK number. The cracker can continue to send data (keeping track of the correct SEQ/ACK numbers) until eventually setting the FIN flag to terminate the session.","title":"Connection Hijacking"},{"location":"security/network_security/#buffer-overflow","text":"A buffer is a temporary data storage area used to store program code and data. When a program or process tries to store more data in a buffer than it was originally anticipated to hold, a buffer overflow occurs. Buffers are temporary storage locations in memory (memory or buffer sizes are often measured in bytes) that can store a fixed amount of data in bytes. When more data is retrieved than can be stored in a buffer location, the additional information must go into an adjacent buffer, resulting in overwriting the valid data held in them. Mechanism: Buffer overflow vulnerabilities exist in different types. But the overall goal for all buffer overflow attacks is to take over the control of a privileged program and, if possible, the host. The attacker has two tasks to achieve this goal. First, the dirty code needs to be available in the program's code address space. Second, the privileged program should jump to that particular part of the code, which ensures that the proper parameters are loaded into memory. The first task can be achieved in two ways: by injecting the code in the right address space or by using the existing code and modifying certain parameters slightly. The second task is a little more complex because the program's control flow needs to be modified to make the program jump to the dirty code. CounterMeasure: The most important approach is to have a concerted focus on writing correct code. A second method is to make the data buffers (memory locations) address space of the program code non-executable. This type of address space makes it impossible to execute code, which might be infiltrated in the program's buffers during an attack.","title":"Buffer Overflow"},{"location":"security/network_security/#more-spoofing","text":"Address Resolution Protocol Spoofing The Address Resolution Protocol (ARP) provides a mechanism to resolve, or map, a known IP address to a MAC sublayer address. Using ARP spoofing, the cracker can exploit this hardware address authentication mechanism by spoofing the hardware address of Host B. Basically, the attacker can convince any host or network device on the local network that the cracker's workstation is the host to be trusted. This is a common method used in a switched environment. ARP spoofing can be prevented with the implementation of static ARP tables in all the hosts and routers of your network. Alternatively, you can implement an ARP server that responds to ARP requests on behalf of the target host. DNS Spoofing DNS spoofing is the method whereby the hacker convinces the target machine that the system it wants to connect to is the machine of the cracker. The cracker modifies some records so that name entries of hosts correspond to the attacker's IP address. There have been instances in which the complete DNS server was compromised by an attack. To counter DNS spoofing, the reverse lookup detects these attacks. The reverse lookup is a mechanism to verify the IP address against a name. The IP address and name files are usually kept on different servers to make compromise much more difficult","title":"More Spoofing"},{"location":"security/threats_attacks_defences/","text":"Part III: Threats, Attacks & Defense DNS Protection Cache Poisoning Attack Since DNS responses are cached, a quick response can be provided for repeated translations. DNS negative queries are also cached, e.g., misspelt words, and all cached data periodically times out. Cache poisoning is an issue in what is known as pharming. This term is used to describe a hacker\u2019s attack in which a website\u2019s traffic is redirected to a bogus website by forging the DNS mapping. In this case, an attacker attempts to insert a fake address record for an Internet domain into the DNS. If the server accepts the fake record, the cache is poisoned and subsequent requests for the address of the domain are answered with the address of a server controlled by the attacker. As long as the fake entry is cached by the server, browsers or e-mail servers will automatically go to the address provided by the compromised DNS server. the typical time to live (TTL) for cached entries is a couple of hours, thereby permitting ample time for numerous users to be affected by the attack. DNSSEC (Security Extension) The long-term solution to these DNS problems is authentication. If a resolver cannot distinguish between valid and invalid data in a response, then add source authentication to verify that the data received in response is equal to the data entered by the zone administrator DNS Security Extensions (DNSSEC) protects against data spoofing and corruption and provides mechanisms to authenticate servers and requests, as well as mechanisms to establish authenticity and integrity. When authenticating DNS responses, each DNS zone signs its data using a private key. It is recommended that this signing be done offline and in advance. The query for a particular record returns the requested resource record set (RRset) and signature (RRSIG) of the requested resource record set. The resolver then authenticates the response using a public key, which is pre-configured or learned via a sequence of key records in the DNS hierarchy. The goals of DNSSEC are to provide authentication and integrity for DNS responses without confidentiality or DDoS protection. BGP BGP stands for border gateway protocol. It is a routing protocol that exchanges routing information among multiple Autonomous Systems (AS) An Autonomous System is a collection of routers or networks with the same network policy usually under single administrative control. BGP tells routers which hop to use in order to reach the destination network. BGP is used for both communicating information among routers in an AS (interior) and between multiple ASes (exterior). How BGP Works BGP is responsible for finding a path to a destination router & the path it chooses should be the shortest and most reliable one. This decision is done through a protocol known as Link state. With the link-state protocol, each router broadcasts to all other routers in the network the state of its links and IP subnets. Each router then receives information from the other routers and constructs a complete topology view of the entire network. The next-hop routing table is based on this topology view. The link-state protocol uses a famous algorithm in the field of computer science, Dijkstra\u2019s shortest path algorithm: We start from our router considering the path cost to all our direct neighbours. The shortest path is then taken We then re-look at all our neighbours that we can reach and update our link state table with the cost information. We then continue taking the shortest path until every router has been visited. BGP Vulnerabilities By corrupting the BGP routing table we are able to influence the direction traffic flows on the internet! This action is known as BGP hijacking. Injecting bogus route advertising information into the BGP-distributed routing database by malicious sources, accidentally or routers can disrupt Internet backbone operations. Blackholing traffic: Blackhole route is a network route, i.e., routing table entry, that goes nowhere and packets matching the route prefix are dropped or ignored. Blackhole routes can only be detected by monitoring the lost traffic. Blackhole routes are the best defence against many common viral attacks where the traffic is dropped from infected machines to/from command & control masters. Infamous BGP Injection attack on Youtube EX: In 2008, Pakistan decided to block YouTube by creating a BGP route that led into a black hole. Instead, this routing information got transmitted to a hong kong ISP and from there accidentally got propagated to the rest of the world meaning millions were routed through to this black hole and therefore unable to access YouTube. Potentially, the greatest risk to BGP occurs in a denial of service attack in which a router is flooded with more packets than it can handle. Network overload and router resource exhaustion happen when the network begins carrying an excessive number of BGP messages, overloading the router control processors, memory, routing table and reducing the bandwidth available for data traffic. Refer: https://medium.com/bugbountywriteup/bgp-the-weak-link-in-the-internet-what-is-bgp-and-how-do-hackers-exploit-it-d899a68ba5bb Router flapping is another type of attack. Route flapping refers to repetitive changes to the BGP routing table, often several times a minute. Withdrawing and re-advertising at a high-rate can cause a serious problem for routers since they propagate the announcements of routes. If these route flaps happen fast enough, e.g., 30 to 50 times per second, the router becomes overloaded, which eventually prevents convergence on valid routes. The potential impact for Internet users is a slowdown in message delivery, and in some cases, packets may not be delivered at all. BGP Security Border Gateway Protocol Security recommends the use of BGP peer authentication since it is one of the strongest mechanisms for preventing malicious activity. The authentication mechanisms are Internet Protocol Security (IPsec) or BGP MD5. Another method, known as prefix limits, can be used to avoid filling router tables. In this approach, routers should be configured to disable or terminate a BGP peering session, and issue warning messages to administrators when a neighbour sends in excess of a preset number of prefixes. IETF is currently working on improving this space Web-Based Attacks HTTP Response Splitting Attacks HTTP response splitting attack may happen where the server script embeds user data in HTTP response headers without appropriate sanitation. This typically happens when the script embeds user data in the redirection URL of a redirection response (HTTP status code 3xx), or when the script embeds user data in a cookie value or name when the response sets a cookie. HTTP response splitting attacks can be used to perform web cache poisoning and cross-site scripting attacks. HTTP response splitting is the attacker\u2019s ability to send a single HTTP request that forces the webserver to form an output stream, which is then interpreted by the target as two HTTP responses instead of one response. Cross-Site Request Forgery (CSRF or XSRF) A Cross-Site Request Forgery attack tricks the victim\u2019s browser into issuing a command to a vulnerable web application. Vulnerability is caused by browsers automatically including user authentication data, session ID, IP address, Windows domain credentials, etc. with each request. Attackers typically use CSRF to initiate transactions such as transfer funds, login/logout user, close account, access sensitive data, and change account details. The vulnerability is caused by web browsers that automatically include credentials with each request, even for requests caused by a form, script, or image on another site. CSRF can also be dynamically constructed as part of a payload for a cross-site scripting attack All sites relying on automatic credentials are vulnerable. Popular browsers cannot prevent cross-site request forgery. Logging out of high-value sites as soon as possible can mitigate CSRF risk. It is recommended that a high-value website must require a client to manually provide authentication data in the same HTTP request used to perform any operation with security implications. Limiting the lifetime of session cookies can also reduce the chance of being used by other malicious sites. OWASP recommends website developers include a required security token in HTTP requests associated with sensitive business functions in order to mitigate CSRF attacks Cross-Site Scripting (XSS) Attacks Cross-Site Scripting occurs when dynamically generated web pages display user input, such as login information, that is not properly validated, allowing an attacker to embed malicious scripts into the generated page and then execute the script on the machine of any user that views the site. If successful, Cross-Site Scripting vulnerabilities can be exploited to manipulate or steal cookies, create requests that can be mistaken for those of a valid user, compromise confidential information, or execute malicious code on end-user systems. Cross-Site Scripting (XSS or CSS) attacks involve the execution of malicious scripts on the victim\u2019s browser. The victim is simply a user\u2019s host and not the server. XSS results from a failure to validate user input by a web-based application. Document Object Model (DOM) XSS Attacks The Document Object Model (DOM) based XSS does not require the webserver to receive the XSS payload for a successful attack. The attacker abuses the runtime by embedding their data on the client-side. An attacker can force the client (browser) to render the page with parts of the DOM controlled by the attacker. When the page is rendered and the data is processed by the page, typically by a client-side HTML-embedded script such as JavaScript, the page\u2019s code may insecurely embed the data in the page itself, thus delivering the cross-site scripting payload. There are several DOM objects which can serve as an attack vehicle for delivering malicious script to victims browser. Clickjacking The technique works by hiding malicious link/scripts under the cover of the content of a legitimate site. Buttons on a website actually contain invisible links, placed there by the attacker. So, an individual who clicks on an object they can visually see is actually being duped into visiting a malicious page or executing a malicious script. When mouseover is used together with clickjacking, the outcome is devastating. Facebook users have been hit by a clickjacking attack, which tricks people into \u201cliking\u201d a particular Facebook page, thus enabling the attack to spread since Memorial Day 2010. There is not yet effective defence against clickjacking, and disabling JavaScript is the only viable method DataBase Attacks & Defenses SQL injection Attacks It exploits improper input validation in database queries. A successful exploit will allow attackers to access, modify, or delete information in the database. It permits attackers to steal sensitive information stored within the backend databases of affected websites, which may include such things as user credentials, email addresses, personal information, and credit card numbers SELECT USERNAME,PASSWORD from USERS where USERNAME='<username>' AND PASSWORD='<password>'; Here the username & password is the input provided by the user. Suppose an attacker gives the input as \" OR '1'='1'\" in both fields. Therefore the SQL query will look like: SELECT USERNAME,PASSWORD from USERS where USERNAME='' OR '1'='1' AND PASSOWRD='' OR '1'='1'; This query results in a true statement & the user gets logged in. This example depicts the bost basic type of SQL injection SQL Injection Attack Defenses SQL injection can be protected by filtering the query to eliminate malicious syntax, which involves the employment of some tools in order to (a) scan the source code. In addition, the input fields should be restricted to the absolute minimum, typically anywhere from 7-12 characters, and validate any data, e.g., if a user inputs an age make sure the input is an integer with a maximum of 3 digits. VPN A virtual private network (VPN) is a service that offers a secure, reliable connection over a shared public infrastructure such as the Internet. Cisco defines a VPN as an encrypted connection between private networks over a public network. To date, there are three types of VPNs: Remote access Site-to-site Firewall-based Security Breach In spite of the most aggressive steps to protect computers from attacks, attackers sometimes get through. Any event that results in a violation of any of the confidentiality, integrity, or availability (CIA) security tenets is a security breach. Denial of Service Attacks Denial of service (DoS) attacks result in downtime or inability of a user to access a system. DoS attacks impact the availability of tenet of information systems security. A DoS attack is a coordinated attempt to deny service by occupying a computer to perform large amounts of unnecessary tasks. This excessive activity makes the system unavailable to perform legitimate operations Two common types of DoS attacks are as follows: Logic attacks\u2014Logic attacks use software flaws to crash or seriously hinder the performance of remote servers. You can prevent many of these attacks by installing the latest patches to keep your software up to date. Flooding attacks\u2014Flooding attacks overwhelm the victim computer\u2019s CPU, memory, or network resources by sending large numbers of useless requests to the machine. Most DoS attacks target weaknesses in the overall system architecture rather than a software bug or security flaw One popular technique for launching a packet flood is a SYN flood. One of the best defences against DoS attacks is to use intrusion prevention system (IPS) software or devices to detect and stop the attack. Distributed Denial of Service Attacks DDoS attacks differ from regular DoS attacks in their scope. In a DDoS attack, attackers hijack hundreds or even thousands of Internet computers, planting automated attack agents on those systems. The attacker then instructs the agents to bombard the target site with forged messages. This overloads the site and blocks legitimate traffic. The key here is strength in numbers. The attacker does more damage by distributing the attack across multiple computers. Wiretapping Although the term wiretapping is generally associated with voice telephone communications, attackers can also use wiretapping to intercept data communications. Attackers can tap telephone lines and data communication lines. Wiretapping can be active, where the attacker makes modifications to the line. It can also be passive, where an unauthorized user simply listens to the transmission without changing the contents. Passive intrusion can include the copying of data for a subsequent active attack. Two methods of active wiretapping are as follows: Between-the-lines wiretapping\u2014This type of wiretapping does not alter the messages sent by the legitimate user but inserts additional messages into the communication line when the legitimate user pauses. Piggyback-entry wiretapping\u2014This type of wiretapping intercepts and modifies the original message by breaking the communications line and routing the message to another computer that acts as a host. Backdoors Software developers sometimes include hidden access methods, called backdoors, in their programs. Backdoors give developers or support personnel easy access to a system without having to struggle with security controls. The problem is that backdoors don\u2019t always stay hidden. When an attacker discovers a backdoor, he or she can use it to bypass existing security controls such as passwords, encryption, and so on. Where legitimate users log on through front doors using a user ID and password, attackers use backdoors to bypass these normal access controls. Malicious Attacks Birthday Attack Once an attacker compromises a hashed password file, a birthday attack is performed. A birthday attack is a type of cryptographic attack that is used to make a brute-force attack of one-way hashes easier. It is a mathematical exploit that is based on the birthday problem in probability theory. Further Reading: https://www.sciencedirect.com/topics/computer-science/birthday-attack https://www.internetsecurity.tips/birthday-attack/ Brute-Force Password Attacks In a brute-force password attack, the attacker tries different passwords on a system until one of them is successful. Usually, the attacker employs a software program to try all possible combinations of a likely password, user ID, or security code until it locates a match. This occurs rapidly and in sequence. This type of attack is called a brute-force password attack because the attacker simply hammers away at the code. There is no skill or stealth involved\u2014just brute force that eventually breaks the code. Further Reading: https://owasp.org/www-community/attacks/Brute_force_attack https://owasp.org/www-community/controls/Blocking_Brute_Force_Attacks Dictionary Password Attacks A dictionary password attack is a simple attack that relies on users making poor password choices. In a dictionary password attack, a simple password-cracker program takes all the words from a dictionary file and attempts to log on by entering each dictionary entry as a password. Further Reading: https://capec.mitre.org/data/definitions/16.html Replay Attacks Replay attacks involve capturing data packets from a network and retransmitting them to produce an unauthorized effect. The receipt of duplicate, authenticated IP packets may disrupt service or have some other undesired consequence. Systems can be broken through replay attacks when attackers reuse old messages or parts of old messages to deceive system users. This helps intruders to gain information that allows unauthorized access into a system. Further reading: https://study.com/academy/lesson/replay-attack-definition-examples-prevention.html Man-in-the-Middle Attacks A man-in-the-middle attack takes advantage of the multihop process used by many types of networks. In this type of attack, an attacker intercepts messages between two parties before transferring them on to their intended destination. Web spoofing is a type of man-in-the-middle attack in which the user believes a secure session exists with a particular web server. In reality, the secure connection exists only with the attacker, not the webserver. The attacker then establishes a secure connection with the webserver, acting as an invisible go-between. The attacker passes traffic between the user and the webserver. In this way, the attacker can trick the user into supplying passwords, credit card information, and other private data. Further Reading: https://owasp.org/www-community/attacks/Man-in-the-middle_attack Masquerading In a masquerade attack, one user or computer pretends to be another user or computer. Masquerade attacks usually include one of the other forms of active attacks, such as IP address spoofing or replaying. Attackers can capture authentication sequences and then replay them later to log on again to an application or operating system. For example, an attacker might monitor usernames and passwords sent to a weak web application. The attacker could then use the intercepted credentials to log on to the web application and impersonate the user. Further Reading: https://dl.acm.org/doi/book/10.5555/2521792 https://ieeexplore.ieee.org/document/1653228 Eavesdropping Eavesdropping, or sniffing, occurs when a host sets its network interface on promiscuous mode and copies packets that pass by for later analysis. Promiscuous mode enables a network device to intercept and read each network packet(of course given some conditions) given sec, even if the packet\u2019s address doesn\u2019t match the network device. It is possible to attach hardware and software to monitor and analyze all packets on that segment of the transmission media without alerting any other users. Candidates for eavesdropping include satellite, wireless, mobile, and other transmission methods. Social Engineering Attackers often use a deception technique called social engineering to gain access to resources in an IT infrastructure. In nearly all cases, social engineering involves tricking authorized users into carrying out actions for unauthorized users. The success of social engineering attacks depends on the basic tendency of people to want to be helpful. Phreaking Phone phreaking, or simply phreaking, is a slang term that describes the activity of a subculture of people who study, experiment with, or explore telephone systems, telephone company equipment, and systems connected to public telephone networks. Phreaking is the art of exploiting bugs and glitches that exist in the telephone system. Phishing Phishing is a type of fraud in which an attacker attempts to trick the victim into providing private information such as credit card numbers, passwords, dates of birth, bank account numbers, automated teller machine (ATM) PINs, and Social Security numbers. Pharming Pharming is another type of attack that seeks to obtain personal or private financial information through domain spoofing. A pharming attack doesn\u2019t use messages to trick victims into visiting spoofed websites that appear legitimate, however. Instead, pharming \u201cpoisons\u201d a domain name on the domain name server (DNS), a process known as DNS poisoning. The result is that when a user enters the poisoned server\u2019s web address into his or her address bar, that user navigates to the attacker\u2019s site. The user\u2019s browser still shows the correct website, which makes pharming difficult to detect\u2014and therefore more serious. Where phishing attempts to scam people one at a time with an email or instant message, pharming enables scammers to target large groups of people at one time through domain spoofing.","title":"Threat, Attacks & Defences"},{"location":"security/threats_attacks_defences/#part-iii-threats-attacks-defense","text":"","title":"Part III: Threats, Attacks &amp; Defense"},{"location":"security/threats_attacks_defences/#dns-protection","text":"","title":"DNS Protection"},{"location":"security/threats_attacks_defences/#cache-poisoning-attack","text":"Since DNS responses are cached, a quick response can be provided for repeated translations. DNS negative queries are also cached, e.g., misspelt words, and all cached data periodically times out. Cache poisoning is an issue in what is known as pharming. This term is used to describe a hacker\u2019s attack in which a website\u2019s traffic is redirected to a bogus website by forging the DNS mapping. In this case, an attacker attempts to insert a fake address record for an Internet domain into the DNS. If the server accepts the fake record, the cache is poisoned and subsequent requests for the address of the domain are answered with the address of a server controlled by the attacker. As long as the fake entry is cached by the server, browsers or e-mail servers will automatically go to the address provided by the compromised DNS server. the typical time to live (TTL) for cached entries is a couple of hours, thereby permitting ample time for numerous users to be affected by the attack.","title":"Cache Poisoning Attack"},{"location":"security/threats_attacks_defences/#dnssec-security-extension","text":"The long-term solution to these DNS problems is authentication. If a resolver cannot distinguish between valid and invalid data in a response, then add source authentication to verify that the data received in response is equal to the data entered by the zone administrator DNS Security Extensions (DNSSEC) protects against data spoofing and corruption and provides mechanisms to authenticate servers and requests, as well as mechanisms to establish authenticity and integrity. When authenticating DNS responses, each DNS zone signs its data using a private key. It is recommended that this signing be done offline and in advance. The query for a particular record returns the requested resource record set (RRset) and signature (RRSIG) of the requested resource record set. The resolver then authenticates the response using a public key, which is pre-configured or learned via a sequence of key records in the DNS hierarchy. The goals of DNSSEC are to provide authentication and integrity for DNS responses without confidentiality or DDoS protection.","title":"DNSSEC (Security Extension)"},{"location":"security/threats_attacks_defences/#bgp","text":"BGP stands for border gateway protocol. It is a routing protocol that exchanges routing information among multiple Autonomous Systems (AS) An Autonomous System is a collection of routers or networks with the same network policy usually under single administrative control. BGP tells routers which hop to use in order to reach the destination network. BGP is used for both communicating information among routers in an AS (interior) and between multiple ASes (exterior).","title":"BGP"},{"location":"security/threats_attacks_defences/#how-bgp-works","text":"BGP is responsible for finding a path to a destination router & the path it chooses should be the shortest and most reliable one. This decision is done through a protocol known as Link state. With the link-state protocol, each router broadcasts to all other routers in the network the state of its links and IP subnets. Each router then receives information from the other routers and constructs a complete topology view of the entire network. The next-hop routing table is based on this topology view. The link-state protocol uses a famous algorithm in the field of computer science, Dijkstra\u2019s shortest path algorithm: We start from our router considering the path cost to all our direct neighbours. The shortest path is then taken We then re-look at all our neighbours that we can reach and update our link state table with the cost information. We then continue taking the shortest path until every router has been visited.","title":"How BGP Works"},{"location":"security/threats_attacks_defences/#bgp-vulnerabilities","text":"By corrupting the BGP routing table we are able to influence the direction traffic flows on the internet! This action is known as BGP hijacking. Injecting bogus route advertising information into the BGP-distributed routing database by malicious sources, accidentally or routers can disrupt Internet backbone operations. Blackholing traffic: Blackhole route is a network route, i.e., routing table entry, that goes nowhere and packets matching the route prefix are dropped or ignored. Blackhole routes can only be detected by monitoring the lost traffic. Blackhole routes are the best defence against many common viral attacks where the traffic is dropped from infected machines to/from command & control masters. Infamous BGP Injection attack on Youtube EX: In 2008, Pakistan decided to block YouTube by creating a BGP route that led into a black hole. Instead, this routing information got transmitted to a hong kong ISP and from there accidentally got propagated to the rest of the world meaning millions were routed through to this black hole and therefore unable to access YouTube. Potentially, the greatest risk to BGP occurs in a denial of service attack in which a router is flooded with more packets than it can handle. Network overload and router resource exhaustion happen when the network begins carrying an excessive number of BGP messages, overloading the router control processors, memory, routing table and reducing the bandwidth available for data traffic. Refer: https://medium.com/bugbountywriteup/bgp-the-weak-link-in-the-internet-what-is-bgp-and-how-do-hackers-exploit-it-d899a68ba5bb Router flapping is another type of attack. Route flapping refers to repetitive changes to the BGP routing table, often several times a minute. Withdrawing and re-advertising at a high-rate can cause a serious problem for routers since they propagate the announcements of routes. If these route flaps happen fast enough, e.g., 30 to 50 times per second, the router becomes overloaded, which eventually prevents convergence on valid routes. The potential impact for Internet users is a slowdown in message delivery, and in some cases, packets may not be delivered at all. BGP Security Border Gateway Protocol Security recommends the use of BGP peer authentication since it is one of the strongest mechanisms for preventing malicious activity. The authentication mechanisms are Internet Protocol Security (IPsec) or BGP MD5. Another method, known as prefix limits, can be used to avoid filling router tables. In this approach, routers should be configured to disable or terminate a BGP peering session, and issue warning messages to administrators when a neighbour sends in excess of a preset number of prefixes. IETF is currently working on improving this space","title":"BGP Vulnerabilities"},{"location":"security/threats_attacks_defences/#web-based-attacks","text":"","title":"Web-Based Attacks"},{"location":"security/threats_attacks_defences/#http-response-splitting-attacks","text":"HTTP response splitting attack may happen where the server script embeds user data in HTTP response headers without appropriate sanitation. This typically happens when the script embeds user data in the redirection URL of a redirection response (HTTP status code 3xx), or when the script embeds user data in a cookie value or name when the response sets a cookie. HTTP response splitting attacks can be used to perform web cache poisoning and cross-site scripting attacks. HTTP response splitting is the attacker\u2019s ability to send a single HTTP request that forces the webserver to form an output stream, which is then interpreted by the target as two HTTP responses instead of one response.","title":"HTTP Response Splitting Attacks"},{"location":"security/threats_attacks_defences/#cross-site-request-forgery-csrf-or-xsrf","text":"A Cross-Site Request Forgery attack tricks the victim\u2019s browser into issuing a command to a vulnerable web application. Vulnerability is caused by browsers automatically including user authentication data, session ID, IP address, Windows domain credentials, etc. with each request. Attackers typically use CSRF to initiate transactions such as transfer funds, login/logout user, close account, access sensitive data, and change account details. The vulnerability is caused by web browsers that automatically include credentials with each request, even for requests caused by a form, script, or image on another site. CSRF can also be dynamically constructed as part of a payload for a cross-site scripting attack All sites relying on automatic credentials are vulnerable. Popular browsers cannot prevent cross-site request forgery. Logging out of high-value sites as soon as possible can mitigate CSRF risk. It is recommended that a high-value website must require a client to manually provide authentication data in the same HTTP request used to perform any operation with security implications. Limiting the lifetime of session cookies can also reduce the chance of being used by other malicious sites. OWASP recommends website developers include a required security token in HTTP requests associated with sensitive business functions in order to mitigate CSRF attacks","title":"Cross-Site Request Forgery (CSRF or XSRF)"},{"location":"security/threats_attacks_defences/#cross-site-scripting-xss-attacks","text":"Cross-Site Scripting occurs when dynamically generated web pages display user input, such as login information, that is not properly validated, allowing an attacker to embed malicious scripts into the generated page and then execute the script on the machine of any user that views the site. If successful, Cross-Site Scripting vulnerabilities can be exploited to manipulate or steal cookies, create requests that can be mistaken for those of a valid user, compromise confidential information, or execute malicious code on end-user systems. Cross-Site Scripting (XSS or CSS) attacks involve the execution of malicious scripts on the victim\u2019s browser. The victim is simply a user\u2019s host and not the server. XSS results from a failure to validate user input by a web-based application.","title":"Cross-Site Scripting (XSS) Attacks"},{"location":"security/threats_attacks_defences/#document-object-model-dom-xss-attacks","text":"The Document Object Model (DOM) based XSS does not require the webserver to receive the XSS payload for a successful attack. The attacker abuses the runtime by embedding their data on the client-side. An attacker can force the client (browser) to render the page with parts of the DOM controlled by the attacker. When the page is rendered and the data is processed by the page, typically by a client-side HTML-embedded script such as JavaScript, the page\u2019s code may insecurely embed the data in the page itself, thus delivering the cross-site scripting payload. There are several DOM objects which can serve as an attack vehicle for delivering malicious script to victims browser.","title":"Document Object Model (DOM) XSS Attacks"},{"location":"security/threats_attacks_defences/#clickjacking","text":"The technique works by hiding malicious link/scripts under the cover of the content of a legitimate site. Buttons on a website actually contain invisible links, placed there by the attacker. So, an individual who clicks on an object they can visually see is actually being duped into visiting a malicious page or executing a malicious script. When mouseover is used together with clickjacking, the outcome is devastating. Facebook users have been hit by a clickjacking attack, which tricks people into \u201cliking\u201d a particular Facebook page, thus enabling the attack to spread since Memorial Day 2010. There is not yet effective defence against clickjacking, and disabling JavaScript is the only viable method","title":"Clickjacking"},{"location":"security/threats_attacks_defences/#database-attacks-defenses","text":"","title":"DataBase Attacks &amp; Defenses"},{"location":"security/threats_attacks_defences/#sql-injection-attacks","text":"It exploits improper input validation in database queries. A successful exploit will allow attackers to access, modify, or delete information in the database. It permits attackers to steal sensitive information stored within the backend databases of affected websites, which may include such things as user credentials, email addresses, personal information, and credit card numbers SELECT USERNAME,PASSWORD from USERS where USERNAME='<username>' AND PASSWORD='<password>'; Here the username & password is the input provided by the user. Suppose an attacker gives the input as \" OR '1'='1'\" in both fields. Therefore the SQL query will look like: SELECT USERNAME,PASSWORD from USERS where USERNAME='' OR '1'='1' AND PASSOWRD='' OR '1'='1'; This query results in a true statement & the user gets logged in. This example depicts the bost basic type of SQL injection","title":"SQL injection Attacks"},{"location":"security/threats_attacks_defences/#sql-injection-attack-defenses","text":"SQL injection can be protected by filtering the query to eliminate malicious syntax, which involves the employment of some tools in order to (a) scan the source code. In addition, the input fields should be restricted to the absolute minimum, typically anywhere from 7-12 characters, and validate any data, e.g., if a user inputs an age make sure the input is an integer with a maximum of 3 digits.","title":"SQL Injection Attack Defenses"},{"location":"security/threats_attacks_defences/#vpn","text":"A virtual private network (VPN) is a service that offers a secure, reliable connection over a shared public infrastructure such as the Internet. Cisco defines a VPN as an encrypted connection between private networks over a public network. To date, there are three types of VPNs: Remote access Site-to-site Firewall-based","title":"VPN"},{"location":"security/threats_attacks_defences/#security-breach","text":"In spite of the most aggressive steps to protect computers from attacks, attackers sometimes get through. Any event that results in a violation of any of the confidentiality, integrity, or availability (CIA) security tenets is a security breach.","title":"Security Breach"},{"location":"security/threats_attacks_defences/#denial-of-service-attacks","text":"Denial of service (DoS) attacks result in downtime or inability of a user to access a system. DoS attacks impact the availability of tenet of information systems security. A DoS attack is a coordinated attempt to deny service by occupying a computer to perform large amounts of unnecessary tasks. This excessive activity makes the system unavailable to perform legitimate operations Two common types of DoS attacks are as follows: Logic attacks\u2014Logic attacks use software flaws to crash or seriously hinder the performance of remote servers. You can prevent many of these attacks by installing the latest patches to keep your software up to date. Flooding attacks\u2014Flooding attacks overwhelm the victim computer\u2019s CPU, memory, or network resources by sending large numbers of useless requests to the machine. Most DoS attacks target weaknesses in the overall system architecture rather than a software bug or security flaw One popular technique for launching a packet flood is a SYN flood. One of the best defences against DoS attacks is to use intrusion prevention system (IPS) software or devices to detect and stop the attack.","title":"Denial of Service Attacks"},{"location":"security/threats_attacks_defences/#distributed-denial-of-service-attacks","text":"DDoS attacks differ from regular DoS attacks in their scope. In a DDoS attack, attackers hijack hundreds or even thousands of Internet computers, planting automated attack agents on those systems. The attacker then instructs the agents to bombard the target site with forged messages. This overloads the site and blocks legitimate traffic. The key here is strength in numbers. The attacker does more damage by distributing the attack across multiple computers.","title":"Distributed Denial of Service Attacks"},{"location":"security/threats_attacks_defences/#wiretapping","text":"Although the term wiretapping is generally associated with voice telephone communications, attackers can also use wiretapping to intercept data communications. Attackers can tap telephone lines and data communication lines. Wiretapping can be active, where the attacker makes modifications to the line. It can also be passive, where an unauthorized user simply listens to the transmission without changing the contents. Passive intrusion can include the copying of data for a subsequent active attack. Two methods of active wiretapping are as follows: Between-the-lines wiretapping\u2014This type of wiretapping does not alter the messages sent by the legitimate user but inserts additional messages into the communication line when the legitimate user pauses. Piggyback-entry wiretapping\u2014This type of wiretapping intercepts and modifies the original message by breaking the communications line and routing the message to another computer that acts as a host.","title":"Wiretapping"},{"location":"security/threats_attacks_defences/#backdoors","text":"Software developers sometimes include hidden access methods, called backdoors, in their programs. Backdoors give developers or support personnel easy access to a system without having to struggle with security controls. The problem is that backdoors don\u2019t always stay hidden. When an attacker discovers a backdoor, he or she can use it to bypass existing security controls such as passwords, encryption, and so on. Where legitimate users log on through front doors using a user ID and password, attackers use backdoors to bypass these normal access controls.","title":"Backdoors"},{"location":"security/threats_attacks_defences/#malicious-attacks","text":"","title":"Malicious Attacks"},{"location":"security/threats_attacks_defences/#birthday-attack","text":"Once an attacker compromises a hashed password file, a birthday attack is performed. A birthday attack is a type of cryptographic attack that is used to make a brute-force attack of one-way hashes easier. It is a mathematical exploit that is based on the birthday problem in probability theory. Further Reading: https://www.sciencedirect.com/topics/computer-science/birthday-attack https://www.internetsecurity.tips/birthday-attack/","title":"Birthday Attack"},{"location":"security/threats_attacks_defences/#brute-force-password-attacks","text":"In a brute-force password attack, the attacker tries different passwords on a system until one of them is successful. Usually, the attacker employs a software program to try all possible combinations of a likely password, user ID, or security code until it locates a match. This occurs rapidly and in sequence. This type of attack is called a brute-force password attack because the attacker simply hammers away at the code. There is no skill or stealth involved\u2014just brute force that eventually breaks the code. Further Reading: https://owasp.org/www-community/attacks/Brute_force_attack https://owasp.org/www-community/controls/Blocking_Brute_Force_Attacks","title":"Brute-Force Password Attacks"},{"location":"security/threats_attacks_defences/#dictionary-password-attacks","text":"A dictionary password attack is a simple attack that relies on users making poor password choices. In a dictionary password attack, a simple password-cracker program takes all the words from a dictionary file and attempts to log on by entering each dictionary entry as a password. Further Reading: https://capec.mitre.org/data/definitions/16.html","title":"Dictionary Password Attacks"},{"location":"security/threats_attacks_defences/#replay-attacks","text":"Replay attacks involve capturing data packets from a network and retransmitting them to produce an unauthorized effect. The receipt of duplicate, authenticated IP packets may disrupt service or have some other undesired consequence. Systems can be broken through replay attacks when attackers reuse old messages or parts of old messages to deceive system users. This helps intruders to gain information that allows unauthorized access into a system. Further reading: https://study.com/academy/lesson/replay-attack-definition-examples-prevention.html","title":"Replay Attacks"},{"location":"security/threats_attacks_defences/#man-in-the-middle-attacks","text":"A man-in-the-middle attack takes advantage of the multihop process used by many types of networks. In this type of attack, an attacker intercepts messages between two parties before transferring them on to their intended destination. Web spoofing is a type of man-in-the-middle attack in which the user believes a secure session exists with a particular web server. In reality, the secure connection exists only with the attacker, not the webserver. The attacker then establishes a secure connection with the webserver, acting as an invisible go-between. The attacker passes traffic between the user and the webserver. In this way, the attacker can trick the user into supplying passwords, credit card information, and other private data. Further Reading: https://owasp.org/www-community/attacks/Man-in-the-middle_attack","title":"Man-in-the-Middle Attacks"},{"location":"security/threats_attacks_defences/#masquerading","text":"In a masquerade attack, one user or computer pretends to be another user or computer. Masquerade attacks usually include one of the other forms of active attacks, such as IP address spoofing or replaying. Attackers can capture authentication sequences and then replay them later to log on again to an application or operating system. For example, an attacker might monitor usernames and passwords sent to a weak web application. The attacker could then use the intercepted credentials to log on to the web application and impersonate the user. Further Reading: https://dl.acm.org/doi/book/10.5555/2521792 https://ieeexplore.ieee.org/document/1653228","title":"Masquerading"},{"location":"security/threats_attacks_defences/#eavesdropping","text":"Eavesdropping, or sniffing, occurs when a host sets its network interface on promiscuous mode and copies packets that pass by for later analysis. Promiscuous mode enables a network device to intercept and read each network packet(of course given some conditions) given sec, even if the packet\u2019s address doesn\u2019t match the network device. It is possible to attach hardware and software to monitor and analyze all packets on that segment of the transmission media without alerting any other users. Candidates for eavesdropping include satellite, wireless, mobile, and other transmission methods.","title":"Eavesdropping"},{"location":"security/threats_attacks_defences/#social-engineering","text":"Attackers often use a deception technique called social engineering to gain access to resources in an IT infrastructure. In nearly all cases, social engineering involves tricking authorized users into carrying out actions for unauthorized users. The success of social engineering attacks depends on the basic tendency of people to want to be helpful.","title":"Social Engineering"},{"location":"security/threats_attacks_defences/#phreaking","text":"Phone phreaking, or simply phreaking, is a slang term that describes the activity of a subculture of people who study, experiment with, or explore telephone systems, telephone company equipment, and systems connected to public telephone networks. Phreaking is the art of exploiting bugs and glitches that exist in the telephone system.","title":"Phreaking"},{"location":"security/threats_attacks_defences/#phishing","text":"Phishing is a type of fraud in which an attacker attempts to trick the victim into providing private information such as credit card numbers, passwords, dates of birth, bank account numbers, automated teller machine (ATM) PINs, and Social Security numbers.","title":"Phishing"},{"location":"security/threats_attacks_defences/#pharming","text":"Pharming is another type of attack that seeks to obtain personal or private financial information through domain spoofing. A pharming attack doesn\u2019t use messages to trick victims into visiting spoofed websites that appear legitimate, however. Instead, pharming \u201cpoisons\u201d a domain name on the domain name server (DNS), a process known as DNS poisoning. The result is that when a user enters the poisoned server\u2019s web address into his or her address bar, that user navigates to the attacker\u2019s site. The user\u2019s browser still shows the correct website, which makes pharming difficult to detect\u2014and therefore more serious. Where phishing attempts to scam people one at a time with an email or instant message, pharming enables scammers to target large groups of people at one time through domain spoofing.","title":"Pharming"},{"location":"security/writing_secure_code/","text":"PART IV: Writing Secure Code & More The first and most important step in reducing security and reliability issues is to educate developers. However, even the best-trained engineers make mistakes, security experts can write insecure code and SREs can miss reliability issues. It\u2019s difficult to keep the many considerations and tradeoffs involved in building secure and reliable systems in mind simultaneously, especially if you\u2019re also responsible for producing software. Use frameworks to enforce security and reliability while writing code A better approach is to handle security and reliability in common frameworks, languages, and libraries. Ideally, libraries only expose an interface that makes writing code with common classes of security vulnerabilities impossible. Multiple applications can use each library or framework. When domain experts fix an issue, they remove it from all the applications the framework supports, allowing this engineering approach to scale better. Common Security Vulnerabilities In large codebases, a handful of classes account for the majority of security vulnerabilities, despite ongoing efforts to educate developers and introduce code review. OWASP and SANS publish lists of common vulnerability classes Write Simple Code Try to keep your code clean and simple. Avoid Multi-Level Nesting Multilevel nesting is a common anti-pattern that can lead to simple mistakes. If the error is in the most common code path, it will likely be captured by the unit tests. However, unit tests don\u2019t always check error handling paths in multilevel nested code. The error might result in decreased reliability (for example, if the service crashes when it mishandles an error) or a security vulnerability (like a mishandled authorization check error). Eliminate YAGNI Smells Sometimes developers overengineer solutions by adding functionality that may be useful in the future, \u201cjust in case.\u201d This goes against the YAGNI (You Aren\u2019t Gonna Need It) principle, which recommends implementing only the code that you need. YAGNI code adds unnecessary complexity because it needs to be documented, tested, and maintained. To summarize, avoiding YAGNI code leads to improved reliability, and simpler code leads to fewer security bugs, fewer opportunities to make mistakes, and less developer time spent maintaining unused code. Repay Technical Debt It is a common practice for developers to mark places that require further attention with TODO or FIXME annotations. In the short term, this habit can accelerate the delivery velocity for the most critical functionality, and allow a team to meet early deadlines\u2014but it also incurs technical debt. Still, it\u2019s not necessarily a bad practice, as long as you have a clear process (and allocate time) for repaying such debt. Refactoring Refactoring is the most effective way to keep a codebase clean and simple. Even a healthy codebase occasionally needs to be Regardless of the reasons behind refactoring, you should always follow one golden rule: never mix refactoring and functional changes in a single commit to the code repository. Refactoring changes are typically significant and can be difficult to understand. If a commit also includes functional changes, there\u2019s a higher risk that an author or reviewer might overlook bugs. Unit Testing Unit testing can increase system security and reliability by pinpointing a wide range of bugs in individual software components before a release. This technique involves breaking software components into smaller, self-contained \u201cunits\u201d that have no external dependencies, and then testing each unit. Fuzz Testing Fuzz testing is a technique that complements the previously mentioned testing techniques. Fuzzing involves using a fuzzing engine to generate a large number of candidate inputs that are then passed through a fuzz driver to the fuzz target. The fuzzer then analyzes how the system handles the input. Complex inputs handled by all kinds of software are popular targets for fuzzing - for example, file parsers, compression algorithms, network protocol implementation and audio codec. Integration Testing Integration testing moves beyond individual units and abstractions, replacing fake or stubbed-out implementations of abstractions like databases or network services with real implementations. As a result, integration tests exercise more complete code paths. Because you must initialize and configure these other dependencies, integration testing may be slower and flakier than unit testing\u2014to execute the test, this approach incorporates real-world variables like network latency as services communicate end-to-end. As you move from testing individual low-level units of code to testing how they interact when composed together, the net result is a higher degree of confidence that the system is behaving as expected. Last But not the least Code Reviews Rely on Automation Don\u2019t check in Secrets Verifiable Builds","title":"Writing Secure code"},{"location":"security/writing_secure_code/#part-iv-writing-secure-code-more","text":"The first and most important step in reducing security and reliability issues is to educate developers. However, even the best-trained engineers make mistakes, security experts can write insecure code and SREs can miss reliability issues. It\u2019s difficult to keep the many considerations and tradeoffs involved in building secure and reliable systems in mind simultaneously, especially if you\u2019re also responsible for producing software.","title":"PART IV: Writing Secure Code &amp; More"},{"location":"security/writing_secure_code/#use-frameworks-to-enforce-security-and-reliability-while-writing-code","text":"A better approach is to handle security and reliability in common frameworks, languages, and libraries. Ideally, libraries only expose an interface that makes writing code with common classes of security vulnerabilities impossible. Multiple applications can use each library or framework. When domain experts fix an issue, they remove it from all the applications the framework supports, allowing this engineering approach to scale better.","title":"Use frameworks to enforce security and reliability while writing code"},{"location":"security/writing_secure_code/#common-security-vulnerabilities","text":"In large codebases, a handful of classes account for the majority of security vulnerabilities, despite ongoing efforts to educate developers and introduce code review. OWASP and SANS publish lists of common vulnerability classes","title":"Common Security Vulnerabilities"},{"location":"security/writing_secure_code/#write-simple-code","text":"Try to keep your code clean and simple.","title":"Write Simple Code"},{"location":"security/writing_secure_code/#avoid-multi-level-nesting","text":"Multilevel nesting is a common anti-pattern that can lead to simple mistakes. If the error is in the most common code path, it will likely be captured by the unit tests. However, unit tests don\u2019t always check error handling paths in multilevel nested code. The error might result in decreased reliability (for example, if the service crashes when it mishandles an error) or a security vulnerability (like a mishandled authorization check error).","title":"Avoid Multi-Level Nesting"},{"location":"security/writing_secure_code/#eliminate-yagni-smells","text":"Sometimes developers overengineer solutions by adding functionality that may be useful in the future, \u201cjust in case.\u201d This goes against the YAGNI (You Aren\u2019t Gonna Need It) principle, which recommends implementing only the code that you need. YAGNI code adds unnecessary complexity because it needs to be documented, tested, and maintained. To summarize, avoiding YAGNI code leads to improved reliability, and simpler code leads to fewer security bugs, fewer opportunities to make mistakes, and less developer time spent maintaining unused code.","title":"Eliminate YAGNI Smells"},{"location":"security/writing_secure_code/#repay-technical-debt","text":"It is a common practice for developers to mark places that require further attention with TODO or FIXME annotations. In the short term, this habit can accelerate the delivery velocity for the most critical functionality, and allow a team to meet early deadlines\u2014but it also incurs technical debt. Still, it\u2019s not necessarily a bad practice, as long as you have a clear process (and allocate time) for repaying such debt.","title":"Repay Technical Debt"},{"location":"security/writing_secure_code/#refactoring","text":"Refactoring is the most effective way to keep a codebase clean and simple. Even a healthy codebase occasionally needs to be Regardless of the reasons behind refactoring, you should always follow one golden rule: never mix refactoring and functional changes in a single commit to the code repository. Refactoring changes are typically significant and can be difficult to understand. If a commit also includes functional changes, there\u2019s a higher risk that an author or reviewer might overlook bugs.","title":"Refactoring"},{"location":"security/writing_secure_code/#unit-testing","text":"Unit testing can increase system security and reliability by pinpointing a wide range of bugs in individual software components before a release. This technique involves breaking software components into smaller, self-contained \u201cunits\u201d that have no external dependencies, and then testing each unit.","title":"Unit Testing"},{"location":"security/writing_secure_code/#fuzz-testing","text":"Fuzz testing is a technique that complements the previously mentioned testing techniques. Fuzzing involves using a fuzzing engine to generate a large number of candidate inputs that are then passed through a fuzz driver to the fuzz target. The fuzzer then analyzes how the system handles the input. Complex inputs handled by all kinds of software are popular targets for fuzzing - for example, file parsers, compression algorithms, network protocol implementation and audio codec.","title":"Fuzz Testing"},{"location":"security/writing_secure_code/#integration-testing","text":"Integration testing moves beyond individual units and abstractions, replacing fake or stubbed-out implementations of abstractions like databases or network services with real implementations. As a result, integration tests exercise more complete code paths. Because you must initialize and configure these other dependencies, integration testing may be slower and flakier than unit testing\u2014to execute the test, this approach incorporates real-world variables like network latency as services communicate end-to-end. As you move from testing individual low-level units of code to testing how they interact when composed together, the net result is a higher degree of confidence that the system is behaving as expected.","title":"Integration Testing"},{"location":"security/writing_secure_code/#last-but-not-the-least","text":"Code Reviews Rely on Automation Don\u2019t check in Secrets Verifiable Builds","title":"Last But not the least"},{"location":"systems_design/availability/","text":"HA - Availability - Common \u201cNines\u201d Availability is generally expressed as \u201cNines\u201d, common \u2018Nines\u2019 are listed below. Availability % Downtime per year Downtime per month Downtime per week Downtime per day 99%(Two Nines) 3.65 days 7.31 hours 1.68 hours 14.40 minutes 99.5%(Two and a half Nines) 1.83 days 3.65 hours 50.40 minutes 7.20 minutes 99.9%(Three Nines) 8.77 hours 43.83 minutes 10.08 minutes 1.44 minutes 99.95%(Three and a half Nines) 4.38 hours 21.92 minutes 5.04 minutes 43.20 seconds 99.99%(Four Nines) 52.60 minutes 4.38 minutes 1.01 minutes 8.64 seconds 99.995%(Four and a half Nines) 26.30 minutes 2.19 minutes 30.24 seconds 4.32 seconds 99.999%(Five Nines) 5.26 minutes 26.30 seconds 6.05 seconds 864.0 ms Refer https://en.wikipedia.org/wiki/High_availability#Percentage_calculation HA - Availability Serial Components A System with components is operating in the series If failure of a part leads to the combination becoming inoperable. For example if LB in our architecture fails, all access to app tiers will fail. LB and app tiers are connected serially. The combined availability of the system is the product of individual components availability A = Ax x Ay x \u2026.. Refer http://www.eventhelix.com/RealtimeMantra/FaultHandling/system_reliability_availability.htm HA - Availability Parallel Components A System with components is operating in parallel If failure of a part leads to the other part taking over the operations of the failed part. If we have more than one LB and if rest of the LBs can take over the traffic during one LB failure then LBs are operating in parallel The combined availability of the system is A = 1 - ( (1-Ax) x (1-Ax) x \u2026.. ) Refer http://www.eventhelix.com/RealtimeMantra/FaultHandling/system_reliability_availability.htm HA - Core Principles Elimination of single points of failure (SPOF) This means adding redundancy to the system so that the failure of a component does not mean failure of the entire system. Reliable crossover In redundant systems, the crossover point itself tends to become a single point of failure. Reliable systems must provide for reliable crossover. Detection of failures as they occur If the two principles above are observed, then a user may never see a failure Refer https://en.wikipedia.org/wiki/High_availability#Principles HA - SPOF WHAT: Never implement and always eliminate single points of failure. WHEN TO USE: During architecture reviews and new designs. HOW TO USE: Identify single instances on architectural diagrams. Strive for active/active configurations. At the very least we should have a standby to take control when active instances fail. WHY: Maximize availability through multiple instances. KEY TAKEAWAYS: Strive for active/active rather than active/passive solutions. Use load balancers to balance traffic across instances of a service. Use control services with active/passive instances for patterns that require singletons. HA - Reliable Crossover WHAT: Ensure when system components failover they do so reliably. WHEN TO USE: During architecture reviews, failure modeling, and designs. HOW TO USE: Identify how available a system is during the crossover and ensure it is within acceptable limits. WHY: Maximize availability and ensure data handling semantics are preserved. KEY TAKEAWAYS: Strive for active/active rather than active/passive solutions, they have a lesser risk of cross over being unreliable. Use LB and right load balancing methods to ensure reliable failover. Model and build your data systems to ensure data is correctly handled when crossover happens. Generally DB systems follow active/passive semantics for writes. Masters accept writes and when master goes down, follower is promoted to master(active from being passive) to accept writes. We have to be careful here that the cutover never introduces more than one masters. This problem is called a split brain. Applications in SRE role SRE works on deciding an acceptable SLA and make sure system is available to achieve the SLA SRE is involved in architecture design right from building the data center to make sure site is not affected by network switch, hardware, power or software failures SRE also run mock drills of failures to see how the system behaves in uncharted territory and comes up with a plan to improve availability if there are misses. https://engineering.linkedin.com/blog/2017/11/resilience-engineering-at-linkedin-with-project-waterbear Post our understanding about HA, our architecture diagram looks something like this below","title":"Availability"},{"location":"systems_design/availability/#ha-availability-common-nines","text":"Availability is generally expressed as \u201cNines\u201d, common \u2018Nines\u2019 are listed below. Availability % Downtime per year Downtime per month Downtime per week Downtime per day 99%(Two Nines) 3.65 days 7.31 hours 1.68 hours 14.40 minutes 99.5%(Two and a half Nines) 1.83 days 3.65 hours 50.40 minutes 7.20 minutes 99.9%(Three Nines) 8.77 hours 43.83 minutes 10.08 minutes 1.44 minutes 99.95%(Three and a half Nines) 4.38 hours 21.92 minutes 5.04 minutes 43.20 seconds 99.99%(Four Nines) 52.60 minutes 4.38 minutes 1.01 minutes 8.64 seconds 99.995%(Four and a half Nines) 26.30 minutes 2.19 minutes 30.24 seconds 4.32 seconds 99.999%(Five Nines) 5.26 minutes 26.30 seconds 6.05 seconds 864.0 ms","title":"HA - Availability - Common \u201cNines\u201d"},{"location":"systems_design/availability/#refer","text":"https://en.wikipedia.org/wiki/High_availability#Percentage_calculation","title":"Refer"},{"location":"systems_design/availability/#ha-availability-serial-components","text":"A System with components is operating in the series If failure of a part leads to the combination becoming inoperable. For example if LB in our architecture fails, all access to app tiers will fail. LB and app tiers are connected serially. The combined availability of the system is the product of individual components availability A = Ax x Ay x \u2026..","title":"HA - Availability Serial Components"},{"location":"systems_design/availability/#refer_1","text":"http://www.eventhelix.com/RealtimeMantra/FaultHandling/system_reliability_availability.htm","title":"Refer"},{"location":"systems_design/availability/#ha-availability-parallel-components","text":"A System with components is operating in parallel If failure of a part leads to the other part taking over the operations of the failed part. If we have more than one LB and if rest of the LBs can take over the traffic during one LB failure then LBs are operating in parallel The combined availability of the system is A = 1 - ( (1-Ax) x (1-Ax) x \u2026.. )","title":"HA - Availability Parallel Components"},{"location":"systems_design/availability/#refer_2","text":"http://www.eventhelix.com/RealtimeMantra/FaultHandling/system_reliability_availability.htm","title":"Refer"},{"location":"systems_design/availability/#ha-core-principles","text":"Elimination of single points of failure (SPOF) This means adding redundancy to the system so that the failure of a component does not mean failure of the entire system. Reliable crossover In redundant systems, the crossover point itself tends to become a single point of failure. Reliable systems must provide for reliable crossover. Detection of failures as they occur If the two principles above are observed, then a user may never see a failure","title":"HA - Core Principles"},{"location":"systems_design/availability/#refer_3","text":"https://en.wikipedia.org/wiki/High_availability#Principles","title":"Refer"},{"location":"systems_design/availability/#ha-spof","text":"WHAT: Never implement and always eliminate single points of failure. WHEN TO USE: During architecture reviews and new designs. HOW TO USE: Identify single instances on architectural diagrams. Strive for active/active configurations. At the very least we should have a standby to take control when active instances fail. WHY: Maximize availability through multiple instances. KEY TAKEAWAYS: Strive for active/active rather than active/passive solutions. Use load balancers to balance traffic across instances of a service. Use control services with active/passive instances for patterns that require singletons.","title":"HA - SPOF"},{"location":"systems_design/availability/#ha-reliable-crossover","text":"WHAT: Ensure when system components failover they do so reliably. WHEN TO USE: During architecture reviews, failure modeling, and designs. HOW TO USE: Identify how available a system is during the crossover and ensure it is within acceptable limits. WHY: Maximize availability and ensure data handling semantics are preserved. KEY TAKEAWAYS: Strive for active/active rather than active/passive solutions, they have a lesser risk of cross over being unreliable. Use LB and right load balancing methods to ensure reliable failover. Model and build your data systems to ensure data is correctly handled when crossover happens. Generally DB systems follow active/passive semantics for writes. Masters accept writes and when master goes down, follower is promoted to master(active from being passive) to accept writes. We have to be careful here that the cutover never introduces more than one masters. This problem is called a split brain.","title":"HA - Reliable Crossover"},{"location":"systems_design/availability/#applications-in-sre-role","text":"SRE works on deciding an acceptable SLA and make sure system is available to achieve the SLA SRE is involved in architecture design right from building the data center to make sure site is not affected by network switch, hardware, power or software failures SRE also run mock drills of failures to see how the system behaves in uncharted territory and comes up with a plan to improve availability if there are misses. https://engineering.linkedin.com/blog/2017/11/resilience-engineering-at-linkedin-with-project-waterbear Post our understanding about HA, our architecture diagram looks something like this below","title":"Applications in SRE role"},{"location":"systems_design/conclusion/","text":"Conclusion Armed with these principles, we hope the course will give a fresh perspective to design software systems. It might be over engineering to get all this on day zero. But some are really important from day 0 like eliminating single points of failure, making scalable services by just increasing replicas. As a bottleneck is reached, we can split code by services, shard data to scale. As the organisation matures, bringing in chaos engineering to measure how systems react to failure will help in designing robust software systems.","title":"Conclusion"},{"location":"systems_design/conclusion/#conclusion","text":"Armed with these principles, we hope the course will give a fresh perspective to design software systems. It might be over engineering to get all this on day zero. But some are really important from day 0 like eliminating single points of failure, making scalable services by just increasing replicas. As a bottleneck is reached, we can split code by services, shard data to scale. As the organisation matures, bringing in chaos engineering to measure how systems react to failure will help in designing robust software systems.","title":"Conclusion"},{"location":"systems_design/fault-tolerance/","text":"Fault Tolerance Failures are not avoidable in any system and will happen all the time, hence we need to build systems that can tolerate failures or recover from them. In systems, failure is the norm rather than the exception. \"Anything that can go wrong will go wrong\u201d -- Murphy\u2019s Law \u201cComplex systems contain changing mixtures of failures latent within them\u201d -- How Complex Systems Fail. Fault Tolerance - Failure Metrics Common failure metrics that get measured and tracked for any system. Mean time to repair (MTTR): The average time to repair and restore a failed system. Mean time between failures (MTBF): The average operational time between one device failure or system breakdown and the next. Mean time to failure (MTTF): The average time a device or system is expected to function before it fails. Mean time to detect (MTTD): The average time between the onset of a problem and when the organization detects it. Mean time to investigate (MTTI): The average time between the detection of an incident and when the organization begins to investigate its cause and solution. Mean time to restore service (MTRS): The average elapsed time from the detection of an incident until the affected system or component is again available to users. Mean time between system incidents (MTBSI): The average elapsed time between the detection of two consecutive incidents. MTBSI can be calculated by adding MTBF and MTRS (MTBSI = MTBF + MTRS). Failure rate: Another reliability metric, which measures the frequency with which a component or system fails. It is expressed as a number of failures over a unit of time. Refer https://www.splunk.com/en_us/data-insider/what-is-mean-time-to-repair.html Fault Tolerance - Fault Isolation Terms Systems should have a short circuit. Say in our content sharing system, if \u201cNotifications\u201d is not working, the site should gracefully handle that failure by removing the functionality instead of taking the whole site down. Swimlane is one of the commonly used fault isolation methodology. Swimlane adds a barrier to the service from other services so that failure on either of them won\u2019t affect the other. Say we roll out a new feature \u2018Advertisement\u2019 in our content sharing app. We can have two architectures If Ads are generated on the fly synchronously during each Newsfeed request, the faults in Ads feature gets propagated to Newsfeed feature. Instead if we swimlane \u201cGeneration of Ads\u201d service and use a shared storage to populate Newsfeed App, Ads failures won\u2019t cascade to Newsfeed and worst case if Ads don\u2019t meet SLA , we can have Newsfeed without Ads. Let's take another example, we come up with a new model for our Content sharing App. Here we roll out enterprise content sharing App where enterprises pay for the service and the content should never be shared outside the enterprise. Swimlane Principles Principle 1: Nothing is shared (also known as \u201cshare as little as possible\u201d). The less that is shared within a swim lane, the more fault isolative the swim lane becomes. (as shown in Enterprise usecase) Principle 2: Nothing crosses a swim lane boundary. Synchronous (defined by expecting a request\u2014not the transfer protocol) communication never crosses a swim lane boundary; if it does, the boundary is drawn incorrectly. (as shown in Ads feature) Swimlane Approaches Approach 1: Swim lane the money-maker. Never allow your cash register to be compromised by other systems. (Tier 1 vs Tier 2 in enterprise use case) Approach 2: Swim lane the biggest sources of incidents. Identify the recurring causes of pain and isolate them.(if Ads feature is in code yellow, swim laning it is the best option) Approach 3: Swim lane natural barriers. Customer boundaries make good swim lanes.(Public vs Enterprise customers) Refer https://learning.oreilly.com/library/view/the-art-of/9780134031408/ch21.html#ch21 Applications in SRE role Work with the DC tech or cloud team to distribute infrastructure such that its immune to switch or power failures by creating fault zones within a Data Center https://docs.microsoft.com/en-us/azure/virtual-machines/manage-availability#use-availability-zones-to-protect-from-datacenter-level-failures Work with the partners and design interaction between services such that one service breakdown is not amplified in a cascading fashion to all upstreams","title":"Fault Tolerance"},{"location":"systems_design/fault-tolerance/#fault-tolerance","text":"Failures are not avoidable in any system and will happen all the time, hence we need to build systems that can tolerate failures or recover from them. In systems, failure is the norm rather than the exception. \"Anything that can go wrong will go wrong\u201d -- Murphy\u2019s Law \u201cComplex systems contain changing mixtures of failures latent within them\u201d -- How Complex Systems Fail.","title":"Fault Tolerance"},{"location":"systems_design/fault-tolerance/#fault-tolerance-failure-metrics","text":"Common failure metrics that get measured and tracked for any system. Mean time to repair (MTTR): The average time to repair and restore a failed system. Mean time between failures (MTBF): The average operational time between one device failure or system breakdown and the next. Mean time to failure (MTTF): The average time a device or system is expected to function before it fails. Mean time to detect (MTTD): The average time between the onset of a problem and when the organization detects it. Mean time to investigate (MTTI): The average time between the detection of an incident and when the organization begins to investigate its cause and solution. Mean time to restore service (MTRS): The average elapsed time from the detection of an incident until the affected system or component is again available to users. Mean time between system incidents (MTBSI): The average elapsed time between the detection of two consecutive incidents. MTBSI can be calculated by adding MTBF and MTRS (MTBSI = MTBF + MTRS). Failure rate: Another reliability metric, which measures the frequency with which a component or system fails. It is expressed as a number of failures over a unit of time.","title":"Fault Tolerance - Failure Metrics"},{"location":"systems_design/fault-tolerance/#refer","text":"https://www.splunk.com/en_us/data-insider/what-is-mean-time-to-repair.html","title":"Refer"},{"location":"systems_design/fault-tolerance/#fault-tolerance-fault-isolation-terms","text":"Systems should have a short circuit. Say in our content sharing system, if \u201cNotifications\u201d is not working, the site should gracefully handle that failure by removing the functionality instead of taking the whole site down. Swimlane is one of the commonly used fault isolation methodology. Swimlane adds a barrier to the service from other services so that failure on either of them won\u2019t affect the other. Say we roll out a new feature \u2018Advertisement\u2019 in our content sharing app. We can have two architectures If Ads are generated on the fly synchronously during each Newsfeed request, the faults in Ads feature gets propagated to Newsfeed feature. Instead if we swimlane \u201cGeneration of Ads\u201d service and use a shared storage to populate Newsfeed App, Ads failures won\u2019t cascade to Newsfeed and worst case if Ads don\u2019t meet SLA , we can have Newsfeed without Ads. Let's take another example, we come up with a new model for our Content sharing App. Here we roll out enterprise content sharing App where enterprises pay for the service and the content should never be shared outside the enterprise.","title":"Fault Tolerance - Fault Isolation Terms"},{"location":"systems_design/fault-tolerance/#swimlane-principles","text":"Principle 1: Nothing is shared (also known as \u201cshare as little as possible\u201d). The less that is shared within a swim lane, the more fault isolative the swim lane becomes. (as shown in Enterprise usecase) Principle 2: Nothing crosses a swim lane boundary. Synchronous (defined by expecting a request\u2014not the transfer protocol) communication never crosses a swim lane boundary; if it does, the boundary is drawn incorrectly. (as shown in Ads feature)","title":"Swimlane Principles"},{"location":"systems_design/fault-tolerance/#swimlane-approaches","text":"Approach 1: Swim lane the money-maker. Never allow your cash register to be compromised by other systems. (Tier 1 vs Tier 2 in enterprise use case) Approach 2: Swim lane the biggest sources of incidents. Identify the recurring causes of pain and isolate them.(if Ads feature is in code yellow, swim laning it is the best option) Approach 3: Swim lane natural barriers. Customer boundaries make good swim lanes.(Public vs Enterprise customers)","title":"Swimlane Approaches"},{"location":"systems_design/fault-tolerance/#refer_1","text":"https://learning.oreilly.com/library/view/the-art-of/9780134031408/ch21.html#ch21","title":"Refer"},{"location":"systems_design/fault-tolerance/#applications-in-sre-role","text":"Work with the DC tech or cloud team to distribute infrastructure such that its immune to switch or power failures by creating fault zones within a Data Center https://docs.microsoft.com/en-us/azure/virtual-machines/manage-availability#use-availability-zones-to-protect-from-datacenter-level-failures Work with the partners and design interaction between services such that one service breakdown is not amplified in a cascading fashion to all upstreams","title":"Applications in SRE role"},{"location":"systems_design/intro/","text":"Systems Design Prerequisites Fundamentals of common software system components: Linux Basics Linux Networking Databases RDBMS NoSQL Concepts What to expect from this course Thinking about and designing for scalability, availability, and reliability of large scale software systems. What is not covered under this course Individual software components\u2019 scalability and reliability concerns like e.g. Databases, while the same scalability principles and thinking can be applied, these individual components have their own specific nuances when scaling them and thinking about their reliability. More light will be shed on concepts rather than on setting up and configuring components like Loadbalancers to achieve scalability, availability and reliability of systems Course Contents Introduction Scalability High Availability Fault Tolerance Introduction So, how do you go about learning to design a system? \u201d Like most great questions, it showed a level of naivety that was breathtaking. The only short answer I could give was, essentially, that you learned how to design a system by designing systems and finding out what works and what doesn\u2019t work.\u201d Jim Waldo, Sun Microsystems, On System Design As software and hardware systems have multiple moving parts, we need to think about how those parts will grow, their failure modes, their inter-dependencies, how it will impact the users and the business. There is no one-shot method or way to learn or do system design, we only learn to design systems by designing and iterating on them. This course will be a starter to make one think about scalability, availability, and fault tolerance during systems design. Backstory Let\u2019s design a simple content sharing application where users can share photos, media in our application which can be liked by their friends. Let\u2019s start with a simple design of the application and evolve it as we learn system design concepts","title":"Introduction"},{"location":"systems_design/intro/#systems-design","text":"","title":"Systems Design"},{"location":"systems_design/intro/#prerequisites","text":"Fundamentals of common software system components: Linux Basics Linux Networking Databases RDBMS NoSQL Concepts","title":"Prerequisites"},{"location":"systems_design/intro/#what-to-expect-from-this-course","text":"Thinking about and designing for scalability, availability, and reliability of large scale software systems.","title":"What to expect from this course"},{"location":"systems_design/intro/#what-is-not-covered-under-this-course","text":"Individual software components\u2019 scalability and reliability concerns like e.g. Databases, while the same scalability principles and thinking can be applied, these individual components have their own specific nuances when scaling them and thinking about their reliability. More light will be shed on concepts rather than on setting up and configuring components like Loadbalancers to achieve scalability, availability and reliability of systems","title":"What is not covered under this course"},{"location":"systems_design/intro/#course-contents","text":"Introduction Scalability High Availability Fault Tolerance","title":"Course Contents"},{"location":"systems_design/intro/#introduction","text":"So, how do you go about learning to design a system? \u201d Like most great questions, it showed a level of naivety that was breathtaking. The only short answer I could give was, essentially, that you learned how to design a system by designing systems and finding out what works and what doesn\u2019t work.\u201d Jim Waldo, Sun Microsystems, On System Design As software and hardware systems have multiple moving parts, we need to think about how those parts will grow, their failure modes, their inter-dependencies, how it will impact the users and the business. There is no one-shot method or way to learn or do system design, we only learn to design systems by designing and iterating on them. This course will be a starter to make one think about scalability, availability, and fault tolerance during systems design.","title":"Introduction"},{"location":"systems_design/intro/#backstory","text":"Let\u2019s design a simple content sharing application where users can share photos, media in our application which can be liked by their friends. Let\u2019s start with a simple design of the application and evolve it as we learn system design concepts","title":"Backstory"},{"location":"systems_design/scalability/","text":"Scalability What does scalability mean for a system/service? A system is composed of services/components, each service/component scalability needs to be tackled separately, and the scalability of the system as a whole. A service is said to be scalable if, as resources are added to the system, it results in increased performance in a manner proportional to resources added An always-on service is said to be scalable if adding resources to facilitate redundancy does not result in a loss of performance Refer https://www.allthingsdistributed.com/2006/03/a_word_on_scalability.html Scalability - AKF Scale Cube The Scale Cube is a model for segmenting services, defining microservices, and scaling products. It also creates a common language for teams to discuss scale related options in designing solutions. Following section talks about certain scaling patterns based on our inferences from AKF cube Scalability - Horizontal scaling Horizontal scaling stands for cloning of an application or service such that work can easily be distributed across instances with absolutely no bias. Lets see how our monolithic application improves with this principle Here DB is scaled separately from the application. This is to let you know each component\u2019s scaling capabilities can be different. Usually web applications can be scaled by adding resources unless there is no state stored inside the application. But DBs can be scaled only for Reads by adding more followers but Writes have to go to only one master to make sure data is consistent. There are some DBs which support multi master writes but we are keeping them out of scope at this point. Apps should be able to differentiate between Read and Writes to choose appropriate DB servers. Load balancers can split traffic between identical servers transparently. WHAT: Duplication of services or databases to spread transaction load. WHEN TO USE: Databases with a very high read-to-write ratio (5:1 or greater\u2014the higher the better). Because only read replicas of DBs can be scaled, not the Master. HOW TO USE: Simply clone services and implement a load balancer. For databases, ensure that the accessing code understands the difference between a read and a write. WHY: Allows for fast scale of transactions at the cost of duplicated data and functionality. KEY TAKEAWAYS: This is fast to implement, is low cost from a developer effort perspective, and can scale transaction volumes nicely. However, they tend to be high cost from the perspective of the operational cost of data. Cost here means if we have 3 followers and 1 Master DB, the same database will be stored as 4 copies in the 4 servers. Hence added storage cost Refer https://learning.oreilly.com/library/view/the-art-of/9780134031408/ch23.html Scalability Pattern - Load Balancing Improves the distribution of workloads across multiple computing resources, such as computers, a computer cluster, network links, central processing units, or disk drives. Commonly used technique is load balancing traffic across identical server clusters. Similar philosophy is used to load balance traffic across network links by ECMP , disk drives by RAID etc Aims to optimize resource use, maximize throughput, minimize response time, and avoid overload of any single resource. Using multiple components with load balancing instead of a single component may increase reliability and availability through redundancy. In our updated architecture diagram we have 4 servers to handle app traffic instead of a single server The device or system that performs load balancing is called a load balancer, abbreviated as LB. Refer https://en.wikipedia.org/wiki/Load_balancing_(computing) https://blog.envoyproxy.io/introduction-to-modern-network-load-balancing-and-proxying-a57f6ff80236 https://learning.oreilly.com/library/view/load-balancing-in/9781492038009/ https://learning.oreilly.com/library/view/practical-load-balancing/9781430236801/ http://shop.oreilly.com/product/9780596000509.do Scalability Pattern - LB Tasks What does an LB do? Service discovery: What backends are available in the system? In our architecture, 4 servers are available to serve App traffic. LB acts as a single endpoint that clients can use transparently to reach one of the 4 servers. Health checking: What backends are currently healthy and available to accept requests? If one out of the 4 App servers turns bad, LB should automatically short circuit the path so that clients don\u2019t sense any application downtime Load balancing: What algorithm should be used to balance individual requests across the healthy backends? There are many algorithms to distribute traffic across one of the four servers. Based on observations/experience, SRE can pick the algorithm that suits their pattern Scalability Pattern - LB Methods Common Load Balancing Methods Least Connection Method directs traffic to the server with the fewest active connections. Most useful when there are a large number of persistent connections in the traffic unevenly distributed between the servers. Works if clients maintain long lived connections Least Response Time Method directs traffic to the server with the fewest active connections and the lowest average response time. Here response time is used to provide feedback of server\u2019s health Round Robin Method rotates servers by directing traffic to the first available server and then moves that server to the bottom of the queue. Most useful when servers are of equal specification and there are not many persistent connections. IP Hash the IP address of the client determines which server receives the request. This can sometimes cause skewness in distribution but is useful if apps store some state locally and need some stickiness More advanced client/server-side example techniques - https://docs.nginx.com/nginx/admin-guide/load-balancer/ - http://cbonte.github.io/haproxy-dconv/2.2/intro.html#3.3.5 - https://twitter.github.io/finagle/guide/Clients.html#load-balancing Scalability Pattern - Caching - Content Delivery Networks (CDN) CDNs are added closer to the client\u2019s location. If the app has static data like images, Javascript, CSS which don\u2019t change very often, they can be cached. Since our example is a content sharing site, static content can be cached in CDNs with a suitable expiry. WHAT: Use CDNs (content delivery networks) to offload traffic from your site. WHEN TO USE: When speed improvements and scale warrant the additional cost. HOW TO USE: Most CDNs leverage DNS to serve content on your site\u2019s behalf. Thus you may need to make minor DNS changes or additions and move content to be served from new subdomains. Eg media-exp1.licdn.com is a domain used by Linkedin to serve static content Here a CNAME points the domain to the DNS of CDN provider dig media-exp1.licdn.com +short 2-01-2c3e-005c.cdx.cedexis.net. WHY: CDNs help offload traffic spikes and are often economical ways to scale parts of a site\u2019s traffic. They also often substantially improve page download times. KEY TAKEAWAYS: CDNs are a fast and simple way to offset the spikiness of traffic as well as traffic growth in general. Make sure you perform a cost-benefit analysis and monitor the CDN usage. If CDNs have a lot of cache misses, then we don\u2019t gain much from CDN and are still serving requests using our compute resources. Scalability - Microservices This pattern represents the separation of work by service or function within the application. Microservices are meant to address the issues associated with growth and complexity in the code base and data sets. The intent is to create fault isolation as well as to reduce response times. Microservices can scale transactions, data sizes, and codebase sizes. They are most effective in scaling the size and complexity of your codebase. They tend to cost a bit more than horizontal scaling because the engineering team needs to rewrite services or, at the very least, disaggregate them from the original monolithic application. WHAT: Sometimes referred to as scale through services or resources, this rule focuses on scaling by splitting data sets, transactions, and engineering teams along verb (services) or noun (resources) boundaries. WHEN TO USE: Very large data sets where relations between data are not necessary. Large, complex systems where scaling engineering resources requires specialization. HOW TO USE: Split up actions by using verbs, or resources by using nouns, or use a mix. Split both the services and the data along the lines defined by the verb/noun approach. WHY: Allows for efficient scaling of not only transactions but also very large data sets associated with those transactions. It also allows for the efficient scaling of teams. KEY TAKEAWAYS: Microservices allow for efficient scaling of transactions, large data sets, and can help with fault isolation. It helps reduce the communication overhead of teams. The codebase becomes less complex as disjoint features are decoupled and spun as new services thereby letting each service scale independently specific to its requirement. Refer https://learning.oreilly.com/library/view/the-art-of/9780134031408/ch23.html Scalability - Sharding This pattern represents the separation of work based on attributes that are looked up or determined at the time of the transaction. Most often, these are implemented as splits by requestor, customer, or client. Very often, a lookup service or deterministic algorithm will need to be written for these types of splits. Sharding aids in scaling transaction growth, scaling instruction sets, and decreasing processing time (the last by limiting the data necessary to perform any transaction). This is more effective at scaling growth in customers or clients. It can aid with disaster recovery efforts, and limit the impact of incidents to only a specific segment of customers. Here the auth data is sharded based on user names so that DBs can respond faster as the amount of data DBs have to work on has drastically reduced during queries. There can be other ways to split Here the whole data centre is split and replicated and clients are directed to a data centre based on their geography. This helps in improving performance as clients are directed to the closest Data centre and performance increases as we add more data centres. There are some replication and consistency overhead with this approach one needs to be aware of. This also gives fault tolerance by rolling out test features to one site and rollback if there is an impact to that geography WHAT: This is very often a split by some unique aspect of the customer such as customer ID, name, geography, and so on. WHEN TO USE: Very large, similar data sets such as large and rapidly growing customer bases or when the response time for a geographically distributed customer base is important. HOW TO USE: Identify something you know about the customer, such as customer ID, last name, geography, or device, and split or partition both data and services based on that attribute. WHY: Rapid customer growth exceeds other forms of data growth, or you have the need to perform fault isolation between certain customer groups as you scale. KEY TAKEAWAYS: Shards are effective at helping you to scale customer bases but can also be applied to other very large data sets that can\u2019t be pulled apart using the microservices methodology. Refer https://learning.oreilly.com/library/view/the-art-of/9780134031408/ch23.html Applications in SRE role SREs in coordination with the network team work on how to map users traffic to a particular site. https://engineering.linkedin.com/blog/2017/05/trafficshift--load-testing-at-scale SREs work closely with the Dev team to split monoliths to multiple microservices that are easy to run and manage SREs work on improving Load Balancers' reliability, service discovery and performance SREs work closely to split Data into shards and manage data integrity and consistency. https://engineering.linkedin.com/espresso/introducing-espresso-linkedins-hot-new-distributed-document-store SREs work to set up, configure and improve CDN cache hit rate.","title":"Scalability"},{"location":"systems_design/scalability/#scalability","text":"What does scalability mean for a system/service? A system is composed of services/components, each service/component scalability needs to be tackled separately, and the scalability of the system as a whole. A service is said to be scalable if, as resources are added to the system, it results in increased performance in a manner proportional to resources added An always-on service is said to be scalable if adding resources to facilitate redundancy does not result in a loss of performance","title":"Scalability"},{"location":"systems_design/scalability/#refer","text":"https://www.allthingsdistributed.com/2006/03/a_word_on_scalability.html","title":"Refer"},{"location":"systems_design/scalability/#scalability-akf-scale-cube","text":"The Scale Cube is a model for segmenting services, defining microservices, and scaling products. It also creates a common language for teams to discuss scale related options in designing solutions. Following section talks about certain scaling patterns based on our inferences from AKF cube","title":"Scalability - AKF Scale Cube"},{"location":"systems_design/scalability/#scalability-horizontal-scaling","text":"Horizontal scaling stands for cloning of an application or service such that work can easily be distributed across instances with absolutely no bias. Lets see how our monolithic application improves with this principle Here DB is scaled separately from the application. This is to let you know each component\u2019s scaling capabilities can be different. Usually web applications can be scaled by adding resources unless there is no state stored inside the application. But DBs can be scaled only for Reads by adding more followers but Writes have to go to only one master to make sure data is consistent. There are some DBs which support multi master writes but we are keeping them out of scope at this point. Apps should be able to differentiate between Read and Writes to choose appropriate DB servers. Load balancers can split traffic between identical servers transparently. WHAT: Duplication of services or databases to spread transaction load. WHEN TO USE: Databases with a very high read-to-write ratio (5:1 or greater\u2014the higher the better). Because only read replicas of DBs can be scaled, not the Master. HOW TO USE: Simply clone services and implement a load balancer. For databases, ensure that the accessing code understands the difference between a read and a write. WHY: Allows for fast scale of transactions at the cost of duplicated data and functionality. KEY TAKEAWAYS: This is fast to implement, is low cost from a developer effort perspective, and can scale transaction volumes nicely. However, they tend to be high cost from the perspective of the operational cost of data. Cost here means if we have 3 followers and 1 Master DB, the same database will be stored as 4 copies in the 4 servers. Hence added storage cost","title":"Scalability - Horizontal scaling"},{"location":"systems_design/scalability/#refer_1","text":"https://learning.oreilly.com/library/view/the-art-of/9780134031408/ch23.html","title":"Refer"},{"location":"systems_design/scalability/#scalability-pattern-load-balancing","text":"Improves the distribution of workloads across multiple computing resources, such as computers, a computer cluster, network links, central processing units, or disk drives. Commonly used technique is load balancing traffic across identical server clusters. Similar philosophy is used to load balance traffic across network links by ECMP , disk drives by RAID etc Aims to optimize resource use, maximize throughput, minimize response time, and avoid overload of any single resource. Using multiple components with load balancing instead of a single component may increase reliability and availability through redundancy. In our updated architecture diagram we have 4 servers to handle app traffic instead of a single server The device or system that performs load balancing is called a load balancer, abbreviated as LB.","title":"Scalability Pattern - Load Balancing"},{"location":"systems_design/scalability/#refer_2","text":"https://en.wikipedia.org/wiki/Load_balancing_(computing) https://blog.envoyproxy.io/introduction-to-modern-network-load-balancing-and-proxying-a57f6ff80236 https://learning.oreilly.com/library/view/load-balancing-in/9781492038009/ https://learning.oreilly.com/library/view/practical-load-balancing/9781430236801/ http://shop.oreilly.com/product/9780596000509.do","title":"Refer"},{"location":"systems_design/scalability/#scalability-pattern-lb-tasks","text":"What does an LB do?","title":"Scalability Pattern - LB Tasks"},{"location":"systems_design/scalability/#service-discovery","text":"What backends are available in the system? In our architecture, 4 servers are available to serve App traffic. LB acts as a single endpoint that clients can use transparently to reach one of the 4 servers.","title":"Service discovery:"},{"location":"systems_design/scalability/#health-checking","text":"What backends are currently healthy and available to accept requests? If one out of the 4 App servers turns bad, LB should automatically short circuit the path so that clients don\u2019t sense any application downtime","title":"Health checking:"},{"location":"systems_design/scalability/#load-balancing","text":"What algorithm should be used to balance individual requests across the healthy backends? There are many algorithms to distribute traffic across one of the four servers. Based on observations/experience, SRE can pick the algorithm that suits their pattern","title":"Load balancing:"},{"location":"systems_design/scalability/#scalability-pattern-lb-methods","text":"Common Load Balancing Methods","title":"Scalability Pattern - LB Methods"},{"location":"systems_design/scalability/#least-connection-method","text":"directs traffic to the server with the fewest active connections. Most useful when there are a large number of persistent connections in the traffic unevenly distributed between the servers. Works if clients maintain long lived connections","title":"Least Connection Method"},{"location":"systems_design/scalability/#least-response-time-method","text":"directs traffic to the server with the fewest active connections and the lowest average response time. Here response time is used to provide feedback of server\u2019s health","title":"Least Response Time Method"},{"location":"systems_design/scalability/#round-robin-method","text":"rotates servers by directing traffic to the first available server and then moves that server to the bottom of the queue. Most useful when servers are of equal specification and there are not many persistent connections.","title":"Round Robin Method"},{"location":"systems_design/scalability/#ip-hash","text":"the IP address of the client determines which server receives the request. This can sometimes cause skewness in distribution but is useful if apps store some state locally and need some stickiness More advanced client/server-side example techniques - https://docs.nginx.com/nginx/admin-guide/load-balancer/ - http://cbonte.github.io/haproxy-dconv/2.2/intro.html#3.3.5 - https://twitter.github.io/finagle/guide/Clients.html#load-balancing","title":"IP Hash"},{"location":"systems_design/scalability/#scalability-pattern-caching-content-delivery-networks-cdn","text":"CDNs are added closer to the client\u2019s location. If the app has static data like images, Javascript, CSS which don\u2019t change very often, they can be cached. Since our example is a content sharing site, static content can be cached in CDNs with a suitable expiry. WHAT: Use CDNs (content delivery networks) to offload traffic from your site. WHEN TO USE: When speed improvements and scale warrant the additional cost. HOW TO USE: Most CDNs leverage DNS to serve content on your site\u2019s behalf. Thus you may need to make minor DNS changes or additions and move content to be served from new subdomains. Eg media-exp1.licdn.com is a domain used by Linkedin to serve static content Here a CNAME points the domain to the DNS of CDN provider dig media-exp1.licdn.com +short 2-01-2c3e-005c.cdx.cedexis.net. WHY: CDNs help offload traffic spikes and are often economical ways to scale parts of a site\u2019s traffic. They also often substantially improve page download times. KEY TAKEAWAYS: CDNs are a fast and simple way to offset the spikiness of traffic as well as traffic growth in general. Make sure you perform a cost-benefit analysis and monitor the CDN usage. If CDNs have a lot of cache misses, then we don\u2019t gain much from CDN and are still serving requests using our compute resources.","title":"Scalability Pattern - Caching - Content Delivery Networks (CDN)"},{"location":"systems_design/scalability/#scalability-microservices","text":"This pattern represents the separation of work by service or function within the application. Microservices are meant to address the issues associated with growth and complexity in the code base and data sets. The intent is to create fault isolation as well as to reduce response times. Microservices can scale transactions, data sizes, and codebase sizes. They are most effective in scaling the size and complexity of your codebase. They tend to cost a bit more than horizontal scaling because the engineering team needs to rewrite services or, at the very least, disaggregate them from the original monolithic application. WHAT: Sometimes referred to as scale through services or resources, this rule focuses on scaling by splitting data sets, transactions, and engineering teams along verb (services) or noun (resources) boundaries. WHEN TO USE: Very large data sets where relations between data are not necessary. Large, complex systems where scaling engineering resources requires specialization. HOW TO USE: Split up actions by using verbs, or resources by using nouns, or use a mix. Split both the services and the data along the lines defined by the verb/noun approach. WHY: Allows for efficient scaling of not only transactions but also very large data sets associated with those transactions. It also allows for the efficient scaling of teams. KEY TAKEAWAYS: Microservices allow for efficient scaling of transactions, large data sets, and can help with fault isolation. It helps reduce the communication overhead of teams. The codebase becomes less complex as disjoint features are decoupled and spun as new services thereby letting each service scale independently specific to its requirement.","title":"Scalability - Microservices"},{"location":"systems_design/scalability/#refer_3","text":"https://learning.oreilly.com/library/view/the-art-of/9780134031408/ch23.html","title":"Refer"},{"location":"systems_design/scalability/#scalability-sharding","text":"This pattern represents the separation of work based on attributes that are looked up or determined at the time of the transaction. Most often, these are implemented as splits by requestor, customer, or client. Very often, a lookup service or deterministic algorithm will need to be written for these types of splits. Sharding aids in scaling transaction growth, scaling instruction sets, and decreasing processing time (the last by limiting the data necessary to perform any transaction). This is more effective at scaling growth in customers or clients. It can aid with disaster recovery efforts, and limit the impact of incidents to only a specific segment of customers. Here the auth data is sharded based on user names so that DBs can respond faster as the amount of data DBs have to work on has drastically reduced during queries. There can be other ways to split Here the whole data centre is split and replicated and clients are directed to a data centre based on their geography. This helps in improving performance as clients are directed to the closest Data centre and performance increases as we add more data centres. There are some replication and consistency overhead with this approach one needs to be aware of. This also gives fault tolerance by rolling out test features to one site and rollback if there is an impact to that geography WHAT: This is very often a split by some unique aspect of the customer such as customer ID, name, geography, and so on. WHEN TO USE: Very large, similar data sets such as large and rapidly growing customer bases or when the response time for a geographically distributed customer base is important. HOW TO USE: Identify something you know about the customer, such as customer ID, last name, geography, or device, and split or partition both data and services based on that attribute. WHY: Rapid customer growth exceeds other forms of data growth, or you have the need to perform fault isolation between certain customer groups as you scale. KEY TAKEAWAYS: Shards are effective at helping you to scale customer bases but can also be applied to other very large data sets that can\u2019t be pulled apart using the microservices methodology.","title":"Scalability - Sharding"},{"location":"systems_design/scalability/#refer_4","text":"https://learning.oreilly.com/library/view/the-art-of/9780134031408/ch23.html","title":"Refer"},{"location":"systems_design/scalability/#applications-in-sre-role","text":"SREs in coordination with the network team work on how to map users traffic to a particular site. https://engineering.linkedin.com/blog/2017/05/trafficshift--load-testing-at-scale SREs work closely with the Dev team to split monoliths to multiple microservices that are easy to run and manage SREs work on improving Load Balancers' reliability, service discovery and performance SREs work closely to split Data into shards and manage data integrity and consistency. https://engineering.linkedin.com/espresso/introducing-espresso-linkedins-hot-new-distributed-document-store SREs work to set up, configure and improve CDN cache hit rate.","title":"Applications in SRE role"}]}
\ No newline at end of file
diff --git a/security/conclusion/index.html b/security/conclusion/index.html
index 90d5fe0..6de15a2 100644
--- a/security/conclusion/index.html
+++ b/security/conclusion/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -550,13 +552,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -641,7 +643,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
diff --git a/security/fundamentals/index.html b/security/fundamentals/index.html
index 6ba0868..6d26e0b 100644
--- a/security/fundamentals/index.html
+++ b/security/fundamentals/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -550,13 +552,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -641,7 +643,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
@@ -1146,7 +1148,7 @@
 <p><img alt="The Wide Area of security" src="../images/image1.png" /></p>
 <ul>
 <li>SREs should be involved in both significant design discussions and actual system changes.</li>
-<li>They have quite a big role in System design &amp; hence are quite sometimes the first line of defense.</li>
+<li>They have quite a big role in System design &amp; hence are quite sometimes the first line of defence.</li>
 <li>SRE’s help in preventing bad design &amp; implementations which can affect the overall security of the infrastructure.  </li>
 <li>Successfully designing, implementing, and maintaining systems requires a commitment to <strong>the full system lifecycle</strong>. This commitment is possible only when security and reliability are central elements in the architecture of systems.</li>
 <li>Core Pillars of Information Security :</li>
@@ -1170,14 +1172,14 @@
 <p>Security Principles By OWASP (Open Web Application Security Project)</p>
 </li>
 <li>Minimize attack surface area :<ul>
-<li>Every feature that is added to an application adds a certain amount of risk to the overall application. The aim for secure development is to reduce the overall risk by reducing the attack surface area.</li>
-<li>For example, a web application implements online help with a search function. The search function may be vulnerable to SQL injection attacks. If the help feature was limited to authorized users, the attack likelihood is reduced. If the help feature’s search function was gated through centralized data validation routines, the ability to perform SQL injection is dramatically reduced. However, if the help feature was re-written to eliminate the search function (through better user interface, for example), this almost eliminates the attack surface area, even if the help feature was available to the Internet at large.</li>
+<li>Every feature that is added to an application adds a certain amount of risk to the overall application. The aim of secure development is to reduce the overall risk by reducing the attack surface area.</li>
+<li>For example, a web application implements online help with a search function. The search function may be vulnerable to SQL injection attacks. If the help feature was limited to authorized users, the attack likelihood is reduced. If the help feature’s search function was gated through centralized data validation routines, the ability to perform SQL injection is dramatically reduced. However, if the help feature was re-written to eliminate the search function (through a better user interface, for example), this almost eliminates the attack surface area, even if the help feature was available to the Internet at large.</li>
 </ul>
 </li>
 <li>Establish secure defaults:<ul>
 <li>There are many ways to deliver an “out of the box” experience for users. However, by default, the experience should be secure, and it should be up to the user to reduce their security – if they are allowed.</li>
-<li>For example, by default, password aging and complexity should be enabled. Users might be allowed to turn these two features off to simplify their use of the application and increase their risk.</li>
-<li>Default Passwords of routers, IOT devices should be changed</li>
+<li>For example, by default, password ageing and complexity should be enabled. Users might be allowed to turn these two features off to simplify their use of the application and increase their risk.</li>
+<li>Default Passwords of routers, IoT devices should be changed</li>
 </ul>
 </li>
 <li>Principle of Least privilege<ul>
@@ -1186,7 +1188,7 @@
 </ul>
 </li>
 <li>Principle of Defense in depth<ul>
-<li>The principle of defense in depth suggests that where one control would be reasonable, more controls that approach risks in different fashions are better. Controls, when used in-depth, can make severe vulnerabilities extraordinarily difficult to exploit and thus unlikely to occur.</li>
+<li>The principle of defence in depth suggests that where one control would be reasonable, more controls that approach risks in different fashions are better. Controls, when used in depth, can make severe vulnerabilities extraordinarily difficult to exploit and thus unlikely to occur.</li>
 <li>With secure coding, this may take the form of tier-based validation, centralized auditing controls, and requiring users to be logged on all pages.</li>
 <li>For example, a flawed administrative interface is unlikely to be vulnerable to an anonymous attack if it correctly gates access to production management networks, checks for administrative user authorization, and logs all access.</li>
 </ul>
@@ -1212,8 +1214,8 @@ log.error(err.toString());
 <p>Don’t trust services</p>
 <ul>
 <li>Many organizations utilize the processing capabilities of third-party partners, who more than likely have different security policies and posture than you. It is unlikely that you can influence or control any external third party, whether they are home users or major suppliers or partners.</li>
-<li>Therefore, the implicit trust of externally run systems is not warranted. All external systems should be treated in a similar fashion.</li>
-<li>For example, a loyalty program provider provides data that is used by Internet Banking, providing the number of reward points and a small list of potential redemption items. However, the data should be checked to ensure that it is safe to display to end-users, and that the reward points are a positive number, and not improbably large.</li>
+<li>Therefore, the implicit trust of externally run systems is not warranted. All external systems should be treated similarly.</li>
+<li>For example, a loyalty program provider provides data that is used by Internet Banking, providing the number of reward points and a small list of potential redemption items. However, the data should be checked to ensure that it is safe to display to end-users and that the reward points are a positive number, and not improbably large.</li>
 </ul>
 </li>
 <li>Separation of duties<ul>
@@ -1224,7 +1226,7 @@ log.error(err.toString());
 </li>
 <li>Avoid security by obscurity<ul>
 <li>Security through obscurity is a weak security control, and nearly always fails when it is the only control. This is not to say that keeping secrets is a bad idea, it simply means that the security of systems should not be reliant upon keeping details hidden.</li>
-<li>For example, the security of an application should not rely upon knowledge of the source code being kept secret. The security should rely upon many other factors, including reasonable password policies, defense in depth, business transaction limits, solid network architecture, and fraud, and audit controls.</li>
+<li>For example, the security of an application should not rely upon knowledge of the source code being kept secret. The security should rely upon many other factors, including reasonable password policies, defence in depth, business transaction limits, solid network architecture, and fraud, and audit controls.</li>
 <li>A practical example is Linux. Linux’s source code is widely available, and yet when properly secured, Linux is a secure and robust operating system.</li>
 </ul>
 </li>
@@ -1235,13 +1237,13 @@ log.error(err.toString());
 </ul>
 </li>
 <li>Fix security issues correctly<ul>
-<li>Once a security issue has been identified, it is important to develop a test for it and to understand the root cause of the issue. When design patterns are used, it is likely that the security issue is widespread amongst all codebases, so developing the right fix without introducing regressions is essential.</li>
+<li>Once a security issue has been identified, it is important to develop a test for it and to understand the root cause of the issue. When design patterns are used, the security issue is likely widespread amongst all codebases, so developing the right fix without introducing regressions is essential.</li>
 <li>For example, a user has found that they can see another user’s balance by adjusting their cookie. The fix seems to be relatively straightforward, but as the cookie handling code is shared among all applications, a change to just one application will trickle through to all other applications. The fix must, therefore, be tested on all affected applications.</li>
 </ul>
 </li>
 <li>Reliability &amp; Security<ul>
-<li>Reliability and security are both crucial components of a truly trustworthy system,but building systems that are both reliable and secure is difficult. While the requirements for reliability and security share many common properties, they also require different design considerations. It is easy to miss the subtle interplay between reliability and security that can cause unexpected outcomes</li>
-<li>Ex: A password management application failure was triggered by a reliability problem i.e poor load-balancing and load-shedding strategies and its recovery was later complicated by multiple measures (HSM mechanism which needs to be plugged into server racks , which works as an authentication &amp; the HSM token supposedly locked inside a case.. &amp; the problem can be further elongated ) designed to increase the security of the system.</li>
+<li>Reliability and security are both crucial components of a truly trustworthy system, but building systems that are both reliable and secure is difficult. While the requirements for reliability and security share many common properties, they also require different design considerations. It is easy to miss the subtle interplay between reliability and security that can cause unexpected outcomes</li>
+<li>Ex: A password management application failure was triggered by a reliability problem i.e poor load-balancing and load-shedding strategies and its recovery were later complicated by multiple measures (HSM mechanism which needs to be plugged into server racks, which works as an authentication &amp; the HSM token supposedly locked inside a case.. &amp; the problem can be further elongated ) designed to increase the security of the system.</li>
 </ul>
 </li>
 </ul>
@@ -1275,7 +1277,7 @@ log.error(err.toString());
 </ul>
 <h3 id="ciphers">Ciphers</h3>
 <ul>
-<li>Ciphers are the cornerstone of cryptography. A cipher is a set of algorithms that performs encryption or decryption on a message. An encryption algorithm (E) takes a secret key (k) and a message (m), and produces a ciphertext (c). Similarly, a Decryption algorithm (D) takes a secret key (K) and the previous resulting Ciphertext (C). They are represented as follows:</li>
+<li>Ciphers are the cornerstone of cryptography. A cipher is a set of algorithms that performs encryption or decryption on a message. An encryption algorithm (E) takes a secret key (k) and a message (m) and produces a ciphertext (c). Similarly, a Decryption algorithm (D) takes a secret key (K) and the previous resulting Ciphertext (C). They are represented as follows:</li>
 </ul>
 <pre><code>
 E(k,m) = c
@@ -1283,7 +1285,7 @@ D(k,c) = m
 
 </code></pre>
 <ul>
-<li>This also means that in order for it to be a cipher, it must satisfy the consistency equation as follows, making it possible to decrypt.</li>
+<li>This also means that for it to be a cipher, it must satisfy the consistency equation as follows, making it possible to decrypt.</li>
 </ul>
 <pre><code>
 D(k,E(k,m)) = m
@@ -1291,7 +1293,7 @@ D(k,E(k,m)) = m
 <p>Stream Ciphers:</p>
 <ul>
 <li>The message is broken into characters or bits and enciphered with a key or keystream(should be random and generated independently of the message stream) that is as long as the plaintext bitstream.</li>
-<li>sIf the keystream is random, this scheme would be unbreakable unless the keystream was acquired, making it unconditionally secure. The keystream must be provided to both parties in a secure way to prevent its release.</li>
+<li>If the keystream is random, this scheme would be unbreakable unless the keystream was acquired, making it unconditionally secure. The keystream must be provided to both parties in a secure way to prevent its release.</li>
 </ul>
 <p>Block Ciphers:</p>
 <ul>
@@ -1354,15 +1356,15 @@ D(k,E(k,m)) = m
 <p>Diffie-Hellman</p>
 <ul>
 <li>The protocol has two system parameters, p and g. They are both public and may be used by everybody. Parameter p is a prime number, and parameter g (usually called a generator) is an integer that is smaller than p, but with the following property: For every number n between 1 and p – 1 inclusive, there is a power k of g such that n = gk mod p.</li>
-<li>Diffie Hellman algorithm is an asymmetric algorithm used to establish a shared secret for a symmetric key algorithm. Nowadays most of the people use hybrid cryptosystem i.e, combination of symmetric and asymmetric encryption. Asymmetric Encryption is used as a technique in key exchange mechanism to share secret key and after the key is shared between sender and receiver, the communication will take place using symmetric encryption. The shared secret key will be used to encrypt the communication.</li>
+<li>Diffie Hellman algorithm is an asymmetric algorithm used to establish a shared secret for a symmetric key algorithm. Nowadays most of the people use hybrid cryptosystem i.e, a combination of symmetric and asymmetric encryption. Asymmetric Encryption is used as a technique in key exchange mechanism to share a secret key and after the key is shared between sender and receiver, the communication will take place using symmetric encryption. The shared secret key will be used to encrypt the communication.</li>
 <li>Refer: <a href="https://medium.com/@akhigbemmanuel/what-is-the-diffie-hellman-key-exchange-algorithm-84d60025a30d">https://medium.com/@akhigbemmanuel/what-is-the-diffie-hellman-key-exchange-algorithm-84d60025a30d</a></li>
 </ul>
 <p>RSA</p>
 <ul>
 <li>The RSA algorithm is very flexible and has a variable key length where, if necessary, speed can be traded for the level of security of the algorithm. The RSA keys are usually 512 to 2048 bits long. RSA has withstood years of extensive cryptanalysis. Although those years neither proved nor disproved RSA's security, they attest to a confidence level in the algorithm. RSA security is based on the difficulty of factoring very large numbers. If an easy method of factoring these large numbers were discovered, the effectiveness of RSA would be destroyed.</li>
 <li>
-<p>Refer : <a href="https://medium.com/curiositypapers/a-complete-explanation-of-rsa-asymmetric-encryption-742c5971e0f">https://medium.com/curiositypapers/a-complete-explanation-of-rsa-asymmetric-encryption-742c5971e0f</a></p>
-<p><strong>NOTE</strong> : RSA Keys can be used for key exchange just like Deffie Hellman</p>
+<p>Refer: <a href="https://medium.com/curiositypapers/a-complete-explanation-of-rsa-asymmetric-encryption-742c5971e0f">https://medium.com/curiositypapers/a-complete-explanation-of-rsa-asymmetric-encryption-742c5971e0f</a></p>
+<p><strong>NOTE</strong>: RSA Keys can be used for key exchange just like Diffie Hellman</p>
 </li>
 </ul>
 <p>Hashing Algorithms</p>
@@ -1399,11 +1401,11 @@ D(k,E(k,m)) = m
 <p>Key management is often considered the most difficult task in designing and implementing cryptographic systems. Businesses can simplify some of the deployment and management issues that are encountered with secured data communications by employing a Public Key Infrastructure (PKI). Because corporations often move security-sensitive communications across the Internet, an effective mechanism must be implemented to protect sensitive information from the threats presented on the Internet.</p>
 </li>
 <li>
-<p>PKI provides a hierarchical framework for managing digital security attributes. Each PKI participant holds a digital certificate that has been issued by a CA (either public or private). The certificate contains a number of attributes that are used when parties negotiate a secure connection. These attributes must include the certificate validity period, end-host identity information, encryption keys that will be used for secure communications, and the signature of the issuing CA. Optional attributes may be included, depending on the requirements and capability of the PKI.</p>
+<p>PKI provides a hierarchical framework for managing digital security attributes. Each PKI participant holds a digital certificate that has been issued by a CA (either public or private). The certificate contains several attributes that are used when parties negotiate a secure connection. These attributes must include the certificate validity period, end-host identity information, encryption keys that will be used for secure communications, and the signature of the issuing CA. Optional attributes may be included, depending on the requirements and capability of the PKI.</p>
 </li>
 <li>A CA can be a trusted third party, such as VeriSign or Entrust, or a private (in-house) CA that you establish within your organization.</li>
 <li>The fact that the message could be decrypted using the sender's public key means that the holder of the private key created the message. This process relies on the receiver having a copy of the sender's public key and knowing with a high degree of certainty that it really does belong to the sender and not to someone pretending to be the sender.</li>
-<li>To validate the CA's signature, the receiver must know the CA's public key. Normally, this is handled out-of-band or through an operation performed during installation of the certificate. For instance, most web browsers are configured with the root certificates of several CAs by default.</li>
+<li>To validate the CA's signature, the receiver must know the CA's public key. Normally, this is handled out-of-band or through an operation performed during the installation of the certificate. For instance, most web browsers are configured with the root certificates of several CAs by default.</li>
 </ul>
 <p>CA Enrollment process</p>
 <ol>
@@ -1434,25 +1436,25 @@ D(k,E(k,m)) = m
 <li>Integrity of communications, guaranteeing they haven’t been altered</li>
 <li>Authentication, i.e., proof of identity of senders and receivers</li>
 <li>Authorization, i.e., access control to accounts</li>
-<li>Forwarding or tunneling to encrypt other TCP/IP-based sessions</li>
+<li>Forwarding or tunnelling to encrypt other TCP/IP-based sessions</li>
 </ul>
 <h3 id="kerberos">Kerberos</h3>
 <ul>
 <li>According to Greek mythology Kerberos (Cerberus) was the gigantic, three-headed dog that guards the gates of the underworld to prevent the dead from leaving.</li>
 <li>
-<p>So when it comes to Computer Science, Kerberos is a network authentication protocol, and is currently the default authentication technology used by Microsoft Active Directory to authenticate users to services within a local area network.</p>
+<p>So when it comes to Computer Science, Kerberos is a network authentication protocol and is currently the default authentication technology used by Microsoft Active Directory to authenticate users to services within a local area network.</p>
 </li>
 <li>
-<p>Kerberos uses symmetric key cryptography and requires trusted third-party authentication service to verify user identities. So they used the name of Kerberos for their computer network authentication protocol as the three heads of the Kerberos represent:</p>
+<p>Kerberos uses symmetric-key cryptography and requires a trusted third-party authentication service to verify user identities. So they used the name of Kerberos for their computer network authentication protocol as the three heads of the Kerberos represent:</p>
 </li>
-<li>a client : A user/ a service</li>
+<li>a client: A user/ a service</li>
 <li>
-<p>a server : Kerberos protected hosts reside</p>
+<p>a server: Kerberos protected hosts reside</p>
 <p><img alt="image10" src="../images/image10.png" />
   - a Key Distribution Center (KDC), which acts as the trusted third-party authentication service.</p>
 </li>
 </ul>
-<p>The KDC includes following two servers:</p>
+<p>The KDC includes the following two servers:</p>
 <ul>
 <li>Authentication Server (AS) that performs the initial authentication and issues ticket-granting tickets (TGT) for users.</li>
 <li>
@@ -1482,7 +1484,7 @@ Certificate chain
 <li>The issuer line indicates it’s issued by Google Internet Authority G2, which also happens to be the subject of the second certificate, number 1</li>
 <li>What the OpenSSL command line doesn’t show here is the trust store that contains the list of CA certificates trusted by the system OpenSSL runs on.</li>
 <li>
-<p>The public certificate of GlobalSign Authority must be present in the system’s trust store to close the verification chain. This is called a chain of trust, and figure below summarizes its behavior at a high level.</p>
+<p>The public certificate of GlobalSign Authority must be present in the system’s trust store to close the verification chain. This is called a chain of trust, and the figure below summarizes its behaviour at a high level.</p>
 <p><img alt="image122" src="../images/image122.png" /></p>
 </li>
 <li>
@@ -1493,7 +1495,7 @@ Certificate chain
 <ol>
 <li>The client sends a HELLO message to the server with a list of protocols and algorithms it supports.</li>
 <li>The server says HELLO back and sends its chain of certificates. Based on the capabilities of the client, the server picks a cipher suite.</li>
-<li>If the cipher suite supports ephemeral key exchange, like ECDHE does(ECDHE is an algorithm known as the Elliptic Curve Diffie-Hellman Exchange), the server and the client negotiate a pre master key with the Diffie-Hellman algorithm. The pre master key is never sent over the wire.</li>
+<li>If the cipher suite supports ephemeral key exchange, like ECDHE does(ECDHE is an algorithm known as the Elliptic Curve Diffie-Hellman Exchange), the server and the client negotiate a pre-master key with the Diffie-Hellman algorithm. The pre-master key is never sent over the wire.</li>
 <li>The client and server create a session key that will be used to encrypt the data transiting through the connection.</li>
 </ol>
 <p>At the end of the handshake, both parties possess a secret session key used to encrypt data for the rest of the connection. This is what OpenSSL refers to as Master-Key</p>
@@ -1501,12 +1503,12 @@ Certificate chain
 <ul>
 <li>There are 3 versions of TLS , TLS 1.0, 1.1 &amp; 1.2</li>
 <li>TLS 1.0 was released in 1999, making it a nearly two-decade-old protocol. It has been known to be vulnerable to attacks—such as BEAST and POODLE—for years, in addition to supporting weak cryptography, which doesn’t keep modern-day connections sufficiently secure.</li>
-<li>TLS 1.1 is the forgotten “middle child.” It also has bad cryptography like its younger sibling. In most software it was leapfrogged by TLS 1.2 and it’s rare to see TLS 1.1 used.</li>
+<li>TLS 1.1 is the forgotten “middle child.” It also has bad cryptography like its younger sibling. In most software, it was leapfrogged by TLS 1.2 and it’s rare to see TLS 1.1 used.</li>
 </ul>
 <h3 id="perfect-forward-secrecy">“Perfect” Forward Secrecy</h3>
 <ul>
 <li>The term “ephemeral” in the key exchange provides an important security feature mis-named perfect forward secrecy (PFS) or just “Forward Secrecy”.</li>
-<li>In a non-ephemeral key exchange, the client sends the pre-master key to the server by encrypting it with the server’s public key. The server then decrypts the pre-master key with its private key. If, at a later point in time, the private key of the server is compromised, an attacker can go back to this handshake, decrypt the pre-master key, obtain the session key, and decrypt the entire traffic. Non-ephemeral key exchanges are vulnerable to attacks that may happen in the future on recorded traffic. And because people seldom change their password, decrypting data from the past may still be valuable for an attacker.</li>
+<li>In a non-ephemeral key exchange, the client sends the pre-master key to the server by encrypting it with the server’s public key. The server then decrypts the pre-master key with its private key. If at a later point in time, the private key of the server is compromised, an attacker can go back to this handshake, decrypt the pre-master key, obtain the session key, and decrypt the entire traffic. Non-ephemeral key exchanges are vulnerable to attacks that may happen in the future on recorded traffic. And because people seldom change their password, decrypting data from the past may still be valuable for an attacker.</li>
 <li>An ephemeral key exchange like DHE, or its variant on elliptic curve, ECDHE, solves this problem by not transmitting the pre-master key over the wire. Instead, the pre-master key is computed by both the client and the server in isolation, using nonsensitive information exchanged publicly. Because the pre-master key can’t be decrypted later by an attacker, the session key is safe from future attacks: hence, the term perfect forward secrecy.</li>
 <li>Keys are changed every X blocks along the stream. That prevents an attacker from simply sniffing the stream and applying brute force to crack the whole thing. "Forward secrecy" means that just because I can decrypt block M, does not mean that I can decrypt block Q</li>
 <li>Downside:</li>
diff --git a/security/images/image26.png b/security/images/image26.png
index 1171a7232241ab5d4176f3b24150bfc4aee9e349..ccc98f66694566c4582e6e7d72bdd9928d1dc658 100644
GIT binary patch
literal 241797
zcmeFaby!qg7dU!mhVGK?M(GZb?hchwVi>|1LWWS05HS#t5RnD}K@?CzLWHpa=}tvZ
zDFIOi)S>Q~LD2Vm_4|F#z0dvUUN_D;Yp=cb+O_uDwa#{Xczcr5T<?^(2LPCv0s8>}
zAOlDt3;+y-AmASWVF!o_FaWqgIQHNZ5YZnrP>@Cj0H1&$_zQr@5@03}PQBy}5dDZ-
z3ciN{ij7DB5TV<BYq|TmA$Tpl`~v;ZUVi?(Iy$_v(lRQ%qGqmeZ(lr843L$Ul~$FJ
zQI(bFm625iVL2s`6#&bF{LEt>bT=JncphvQhB@E~K}Q0C{h%fJwLB2vpXGr_{#qU=
zWS0j-5xU2lgKmc%U<kg!n%Q}84{t95RD_Z^>zDzM?InPQ-~-$v@pRi`Kr}!_Mn*<X
zMnz6eMNdgVNxzSlii&n0D<k7RMn+b8DuVm*+VTA76GBZ%NlimdM?*u$L_<Tvgn!U5
z?L?vfUl?pZ2I$FvJRk%H;Rm4f5EwmV`!!fdvhC*(4KSC)5P}0UjCU{q0wp3QAtfWH
zpag~BpMekn3fm2&10X~Y7?cP~OiDsV45N|*1L<Kzd<-(gT2`)%{3p-Jk}xIRtk4z^
z+-Lp7O-?=_sz--ZDA{It@-rN*z?@%sURd{<t-IdSf<Q%<-osOfFICac`hwoA=!>Kj
zUZ}qQy#GD+)`J%VA6Ace1Yb-os(Cp$y{2Sv)HCGLjpEwop_#Ar02B)5mWYriQW9bX
zLKgUB7>K|eoaARDmOYomgwMef>z-vfLAS|(sAL_ReQ>n=XCV@N21tb!p7w&7C}45d
zJFFOpnA*$2pK~DcGYi|J02PdoCOx15bk5r~`n-0$t?~_Hm-FmK=-pt}`_|JOr9t6W
zr|l+;`f;J$T_3lSY?ZSk2FlJeepD*BA6v%%di_J@vBMm}C?tnxA7)~H8#s@}7=0AK
z{qQq900mE*W`WnNUG%<%3X+7^gxzf5Tnj&QzCzr0YUyUEor4qUJv(Y7rPI37!|bh&
zG1OO-kwtQxMrp6sOWZ35iQplUaq=Q@Y-58(al{Juy_M_Rfb!LGnhJp+XNSuq<oga9
zQscnL$G+!m1Lm0JR4JDiVJSyO&2k#z>Qu)Zj%y9A9PoV5fC<`{u4un8#=0po=AwEw
zBRQ9DURlGTQIR{{U{J%_?MZT5-esIAHar2dvX7@CA}(S*VKAco)z$|rY00&%3z(U0
zV4D0)y2h;IR>YP|a&GR{i!GULU`fM%8<0D&e!VI8(&|g6H@D(fBQL2WZUj$A_%#d!
zw>jbrHfb#;oM-L@t;$Ap*KTYB8&7N+2OD^+F$;rgenpOOL^JYhwd_k~`>MGxqLlA+
zk3R}M99X@rdJ0?0FaN0?^C|>~yCVMdW8pBW8P`qnc}}79ejAy`HemH!$>(~*AWnQ!
zY8I1zydJ^k7r8K|#k~z6=e^^(4!v?*T-ypT^VK;(rBWP3+)=UqapT=Qs=h|{b<;JA
z*=^wI8Rt$vBa5W5b3-O5rlYGj%ONkXA&w*(!uovTJ$uGK-P#69Gz{d<4N}VA`)I=*
z%6|N<f<|^z<5t(aluQ2jm2>4|Y>D5;DYIVI$<MxAEX$0jj$exn@fq%zXqYDlBO6&<
z45H#GXSAP733H2@=#9(xl=$hJk_|R<)8kIA+cv<u4SeM(-3HRHZ?;X)I6kYPKfb8m
zbUWKaerzLUv9)5Fb#&Y?kvMWzJ~ux(mm60SyE>4%>Rda}Kh|(-T8U%GS2MFsL;IDw
z#jT{pP3Ep%!N%}5DaBqcJGv=@hwclNq&-GL8r$7ikHDtP#3#P`LP~bClA#}wS;3*m
z@foER#dW4GgE^tN(n+hz`r!$q#1WjMW9`ay3mcV7K6W>pEjcogQgE$Ybo$&VZoFBc
z8LlCt+)(0kQkf0%r10F@l@<}S-JtITwo&N}#=vu0u&8ymku&Phvjm#)V>n?X=6mbf
zHW0mmbqdctcje25(}~-m(JBKKrGnuL_lb2Dxpa><zScMp_|Q)3b|L`J_%stX_O&r*
z0;}=)cwxG4Xx3l@sZd^H89IJd(_4b3YRo%i_G=jJd%@zvf;?5U*wly|>vidEz{vCa
z2O(j*u(07pfkjd#`J~##l!w!%zH2CSm{MriMAL(&c8y;9t<$z&h_T}<35Q2?FZv>V
zkcQBRK9#typ%@h*Wvxw>vib*Vw^ZUv#<qdOp^fEZX6+S=5f5|wDvP&)W9BR89DNyk
zM}lS4UVCsn)1euU2y6(!Hp?`X1)m9)uu19<GmC#x-_7b2-gC6N{$>|46SKjw4H#?#
zWEt&`UMiHchG0%5a)ddY&~b$4!jYRIRi2GPDvGar9pU9KtBR_9p|uT6H%KGSKPdN@
zu<1cK21g93`*{|Y!?B;!JxA|5_Qj(r5}1{^79(yyZmyqxIp&DT+7yad8-2K5HRhPR
zruJT@oLXs6L0BA~J@4aJfc+}GuJ2bUzRs*)9(kzeXwTRq`-XwBrHEO~y={Q>laZl@
ztHUctGv!8!>#2h%mlu3Z1sW=)$gT5XTM0NJWKrOl^pceFH(OGL#n6fq3iaL7n_1hy
z(Y}fKA)G~cS1(`FQhr~x%lHg)n_)|-{6qFIDfH;(Snbj#Pxrm8n$m8aJ0&B+?T%%M
zqLqU;3^%&x$EP*EHpYlmgsh}QyyU^fGU!w$j)|$gK|DV(b-KL6+Q?$NXO+r%nr&s{
z_ML1t;s**j*J2izJRZ(<<YrwNzf@=99eRm@+B06GSFmu7H|*Avu`rgUnD~MAQ=o3l
z9lE~_L{@$B+)6PrO4eE}+Xm{^!WOoH-k39k+rW6}p|yxP-IR2fP1j&KROuV(t3xbu
zi|;Q+4YH{9NYHGG;4I!tBsfg0CwRW;+7yj$D_z&C(pjbIwco&e(@j|!XejQ-`H~hs
zh{lzMI(+#K&zx7S3111bu-KA)wGB*NL(M5P@L#OGCI1jvmU(=-PG({CZi|LNsL$Q+
zm~R^26ne9+shLUUl9vZ<1Lb081|!BpHdnU+Fi$H)Sd3YG<7?go-3G4vOXT$_3vwHM
zWvfb!xyyHGTOY&I!xH8gO&lJtJVFH_%8{&#!HT(BxziC(%JYVuCL7pZJhKw6=lRAD
zPiEuobri8uh_~28uO!=a9xBh#8*ryd^!27j2S0?JuNfcuh*NxUwQ8&3Qw95_zT}xn
zm#wx?@zC7k%CrX~q9wS8)Vh&}&WC4A1l{B3y84CI4T-NoN+%*Eu4Q?EeLZ4`!Nz96
z*O!>}$Wg<sfSWe#dTJ(;NVd7UrIER9KxN6uu5ygJx<d+eFi9w5U3_i*IKE+fKaE}J
zDX)BVcOG7urp5fMmQ;GtuO3rhAvNNBH1@?M?#k(Q22Qt7t+lT<e&&^P_30z>XD(do
zD{CKC)Cr5PX$Zz;YM89go-aC13}3rw6y*B2E@N{n_83lUc3};*$qhE~Kw%+I<<>o%
zTY(NGI~g@!v-ZsRQpBW0#l)EY)8;u=l4jS6>P&e5C|7y!)SHNR+}Vw?Yxf_#))9LD
z1et{-zRxX>Eh%gIWV5oFTTo_vHQPr?@mXe)zqjC!t1I$WgZkJ3&(%%LB!hLtgLhlo
zz}tv=sa=3gFy+!BD2AACJWKXrR&nk3E8_CkYA9b!zdXl}9GR_N8lMiu^sF=YzMA*=
z>?$9ZuRo$3o-_IK^<wLq3I>-XB+t?JxZ*}F3$)=jwvqHa`trVW_8g6>n8yPq2SPS|
zyR4|N8Ba=UX^A&fyFW^1FY=_r?*>n+vTe+4DtMrs#)KNJt`<U@X{$`$+L)xhj8I$`
z4>E7S#%%-S5yc49h{H((8x_f0gR3Mx4KCFf&KlYW_xy@=?rjW342*20$C!m+Uym@`
zo%H8wTs!FaaC$fd(+_{WuK|uZG^p4WmOI=3I%>9L;pLOn609P_$7<}DB1zrR25d+T
zrV6vkvU0nj3YH$+S)?=UG=HvH`t7p>W`!3`nHYn$i)Z|>&S7uzFMC?9hB12DibKP^
zUI5|oHCsy`c^aD%R-8L=xu0XiN>xoz)f~&Xh$5${#e0wH6qd%fkZ@E*`%$kDt7jz-
zT&u{hUt~bO_UFEvwa!zG3l5Lzj9B`l71U_7sEC?>aE*iYP>ag~btVTElLbx_iZ^C9
zI5q`MFL~hBQn_!l9$#B5t9y|LyOp9k5mK<Q3C<UKLwjvP7Zn>*J}Jbd*3XR9Rp~oc
z;4U_dzrGsEU=@peeCx%C)csEpn7(yQ$?_STYr(3Y{k2NWvXNl%cHgeDx+}1l+6!v?
zzIHS)E^(*kP~D+f?hbHLXRU4^DCghYC3sN2s;@|sx1oP?NN#MsRcy!zu5rg{@Jz1f
zJaHbWGVU-GLbS>7dTFe7g)yhtKaeUs@2zf>*lijU_&CRUiP*5wQABWKe8fFu2oPL%
zge<3%JNd><zs;7aB~Y6i2^O~TlqwcG3=WH)6g=b8(m4D!k@Dun8qC0!^OA&=_QZOU
z=WFM!WLr7SJ4323CvI@K96fe~c|~$`eiQRO$~eIOh+IkaQD-xWL=<&LC9fJ*N|I`m
zc1}F_6E=n_JZsvgH1Ny(GiR9WvuDRQ%DVjO8$u!s!4hwLKx&TIXvQ6^yZ@jZ#+@y6
z{XO+oSN?=e-!|}UpIw263CyD8e1?|y_@OS7>b|iBWNjENj$G`HzTCV7Ts5?$q+D%l
z%mw=uN89G{*)jW=d42h&02fwWs(UN-xm--2)7Y5LDecj<sAt(I`5QQU?z`jcxSDMs
zYV7Eo&o-ccZzSoM`P!t%!Hln@a@;wb6OKIt@uS-SoON1bLpHls-qFYJMcXN_(~1;g
z=;MQW1t>Xmqazn?|5onp<gE3H7?8;c^s>6Y-c@wfVuH7CN2%A?=DxH~s~Wu;-|t~l
zK~`^A*J?>QIry$>oWLA8_;5TS<Q8VGCimN?Z~OZm&JPPLuw4v`raD8D!(-svkM0*o
z#;S{dLpm%z&3HFHh;dm96ZXX}Y&I7bzAJWpH*j1+T%u@<`?!*Fvh%U{h&j%8o}2P1
zVUEsbDuV7XsVm&0FDeHe)XTg^8pk5^a295QDcity|E{dvw!^f`&3w1AwoWz@Oest@
z5)y+4r72dU$~)W@+iy%Q_hFrFaZQU2n4Yrh@q@%3Yl=@_Uh-0Ur?%hJcl71ZM%RWw
zF1FVu_qd|m$I6EzI=SfB6EFO%s;eLBE?}Q2t{)4l2^Ftkc*r(4I{2>F$M@wK`0Y_o
zbnQwlR#9;tiKS~Axcn+T{V=ws$Ojo<V1AbLNOzc72m09D0w!2)esdpcRl{gwN``3w
z{rd30k!E{p<Qa4;GL0+AWYc&n=asnM+}0(WhMACb=t&85fTCr9dQ@}HEqHK!!`+)5
zLC$k`?|wywO-$PES0EX*PlyvQM%rn3Yq$=79UTi+3ZHJ8QQrn`ZA#>HIey3VG${<1
z77fLE%WKk<Wy`*LZ^v^)0fkIxEQ^@l2F7w?8Qn)NH;*>IPOxnD9cp~7*bJGgJ__Ho
z@QE<#$BuR^V3Vz<A1Rj&^j%%|rI9{!{X!Ws%if+5I}%nFrcvOxl6&*W@;!v)$=mS5
z$o&W($&RqMvc+mc@G+N7jyt!mM%?|r4NPJ(G+DaGYiia{@ZVKp-v&JGi~2BFmX7#M
zk+P<{8YVcC6nkF<bEQ~sV2NrQ5FX{G4!>4O*%qvZtXO=2>8Qe{YfP$3=?SSmQ&^ii
ze2pnHZRW<2w(}ope8A4WkR3nvz2WuTR=l9WK<qL32PqFyR5~R~N&&hPRsIT)?;ZGw
z{=lw)+$ld~CUGmTt|jTof<>~(=<MdZEhMI1NZ5#UF);k|HlQ#ue&ZilaM*ej(Gl`h
zXzfwN8;$9P^<-<rwE^$en&D<P8VLzW*1^hjZk9uzg1g4CjURRJ!yJKLJg3aEy_)?*
zbE`r?dlDReDyHbw=wia!*34#2a#~#w%bBYRK@`sxRvnex;)`f!!|nyQdxS}Ko$-Ww
zjL(l7Sl=q!*Z=NgHv}1fwU%!YIk8kS(Fso2ND<+eaEbsn<F2>z@F~7&JG;*)_SepZ
z^BwU>jA~oN6HM5C^SSsS6tml;N_(j^Z6ApV3Vmm70mmI*Yqt%oS0<;c#%)GtJS+(w
zp=M*93JjTTKlY$}>*yBQWn9%uy~)y!&<swb=jaKfQ<v|7;M(ugD($PX$Tt%+m@Lfq
zYRWU{oKcJ6WmK5N=;N=>)g+Be#V**~MQocAxOR+qF<882k~KKEfnt$ki)W3-^$yui
zV>mKi&-HdiRGl$)Z$I0>&do8v?!axr6(%7&B$E^Kbs>07rK@~U&2x5PQ)9)%<d#*K
zeErv^@6|2ELW>mx=N1yIOZ?_EvT;bh*OHjtYBv|Vr$adFv9yqe@d=x;kiO8eRnGp7
zxlW(>+68rG^>R)QU0~8<t<DDfmG-rfh1TAz`Y?^Y&h0{#fv}2(_KTR_@dLHUng(p9
zMp8XNlMH^ks{S=J{aTPn1G1)$p4zW+v}~-gX&b;zIeXOHy<7jiw#|gyZvF1?3Wvi`
z6*#U@Zv(KoyVP@Ga$<1}A`F>jGyP#c=vz&L>shbg43=Dt?{yfecJ1YGfj*h59VeOf
z$p{?-SO0=3J<3WIrKB2y3h|$U0yG7@(VG$z;5^M}i(c)%-+hXOjut5|-c+Yo?dn}<
zCB>RB#hNZ7a5y{fR;|jS3nd|u?pOO>6ehe$8phLMeJ>w-CTHxx)0_8@=QAc9-Ieu+
zmd3D|4}^q~UvxATe9v*jKF^h-wwQO{25$1;cP&I)1q%-qS>WiwjSIID_saDpbeO?Z
z9cpyG)J0OH+VNO?@WlMqnLfL))87^=N*_%nSUz)1w<&WSRl@i_Ra7b4+y-WH=L8F%
zF@N>-ZfiMPbKjuMPGY2Dthv~Pt3jl1Q)$DeDdz<w29AW(k5G?%LU*jzrDkVn^p`AR
zw*f6IW>U(2Sbj2y^Wv5Hx%7j+t}nxa6*HRipWyt0aa?mlv+9_eN4m6HcylWQE2nfG
zGzY?N2CjoOgtf1l1@}bKT;DX`SJMz&kD&_cU(XlEV$vom$~K$N<YahGzE>zeInO4J
zG?F}7lk0`Ek}MdTTLQOPaPtWZPB+a=SzpVi9(+{Q?e8MuGT~geScTMBnZU{4olPCG
z6MsHeRy*Fz-0eWE*YpzIF!~N>fyFF)i%AVvHY)bZRfgT_KsOqjT%F=(pE<*0jPV1P
z!6dO)#_o^KIEH><pH%xIQ4aXcDD~Yb+6rkrym`TOxT^{~T~T)WjZ9(9M^4U<C(1fU
zYJF_|wgE$2Z-joQA~*vmuJ5`goJmxd?DUaiz9D$ARjenh=HV+N7eKvR=Sjb8mmj&P
z2F;z%x1X2aNqg$l=V(W4J-;}C<NKZv+BgSJxrRQ)j|4s2-~4cmI%FuwXJ(?duVNwM
zlT2>E(RX_v_;Hy4%H!;_N=Jssk<Jem9xQAMFRm_ZX)DhiQ<8`p&pNRPZb5W<$pQ-T
z69b+Pq;Z%YNYVw<$2_|JJr6KgYilXz68a(%(?r9}IZpDg;nye33>|ZP%5vc?KEBk7
zb|3GoE&0yKE8GjsnV-O^X)J449eeiV*^}D?mrT4$vtPu~3ByD-1{Ju3RA2%ni@r;_
z*B+g#qnwi<N(iYRlzB5TFTqn4@pNP>K-Nf%b_6qt0#{5nkK7NVx4Mqi3q8q<ye}Uq
z62CPOh}n2icpvw5#AI~*+9g`PQeSUghDjRMPks&k*sa`8>kQVeN&Pg-(g8Z>jeI}O
z0d-;Qw^AEB(A&W6n``4!o98Kox*|>V^*9QSHG9{E+O6Syx12Z8eQgSX#Wf?I#!^0-
z!>%tfbxL1vA)Gx|dA=vCZt6OPz{hbVC7b)(^PWnlHP=5@W{EhTJ*L<o2kx28cJ&CU
zdMvCx?Dqe{d0^r}N7L=I%CdQ{Kixwv++9uRMS&7uo<73XF^0S97y~r;JP0*He;g|-
z2zd}+i%Z=<h~+5uQO?%rMdl#knH~+#*gw*A!8tz}m5o$^139i_aW=%EnPtjF6>N5L
zX0NwvmuYaOWoe}wT@iOd;Y-du)D-^o-GyYD<;N2a=@Js?M(3H}#n+W(xt(V~t)YiI
zOn)uQaO_gzBFVR=Y);3<)f&{-L&aP1>zfL;Va^p#Ut&m$;@c%$sZMW9KdNaRTdcT;
z0Sl&p)0jDQUJ|>NihLF9aa{3$ED<gke#!TS?`rI8_b_3cx0q>_&_K<Y%%}2c^~t(V
z6<5(1-LIhJm1Aoo&VSYT{u<oI!|7iCh{-D00(YeP?UIcnw!1%dj2u?-IaRMjrpDtq
zPbC<?9=4|V3e+k2TR!UcZ1=>G%atF|=R@j7jNnFUJWHz~m_A(iC?@l$Xj75xV14%_
zZxn5e?)qUK%r~Z#Y0ia&!w;y$zsvwSMfW=ew~_`G%5WN!ih^i4r@^LD&gKVCtCqr0
zfd?JuL&Z;heTO^z$#X+ZQ9|Q^6{u0pnJn6dgG*Lxn=DzhNx_0j(oLcf1JY*fgpuP5
zQW35jxz(1(MS80*Ha=`_Y<lna&q&r2p4-5Ms*O);`$HZsgyx(m-zcFTKM)i!Of$Bz
zeg_xPdNh2%;L{c{BIrc;;ODs>ee>55cA+1sQ<HEkLyntE;67M#`sQ8nOKNN3E}^VW
z-Ny{-$1*02YZZsWG-kLkeQPr2?O8Q;^IOfS%e`TXL26DM*qqji@@*h?qH<^(D6q#=
zarSt5uvkC`QGp|Y%B*V!w-#{wwvyD&D9UB@1WO7OLg0F}iAs*R=Hf<-!2+hREcdGj
z*1046x{xZ*i53M8$CwOFB<JALZIu`6!Znp`cGFF{HrS@(;*Eirj_)pw#Vn$!_Ztfj
z<qy$`^dTF~-V|U`JFZ+B7DvDKNvqSJNfeJLi>Oa1>vxZcT2u49b<EjfL#Z2FUz1>~
z9Qhxa=S)~tpkYfeG|xvkDxw&xq>#{njp!6Cnw@7!ez(S*$KiP1$<Td%G5KYzl0#SL
z>myj3Yl-4Dm`acOfkbwlJELniGA>*n{^&4KfIC_N&T_#n_2kaCumiWQTyA|?beGcE
z9(&A{q;^yBh8lcxEO)EvMX}EE=Q#vZ;;TDeNRE<7W$yPWLo^QtY(hUaCcJiGT|%2+
zeV!yecypr!?pU8&xPiSMD_OQ?Q{CCjq6+CIu~Xt%Nd~uPMz$9P?S7u<$w^8B%GyR|
zL_&mvrQH)Wf(QQ~gsBp|AHXL*9DlL~0F?d#;0d5bP@sQMAn3&(K?0WOKpQtdKNNw&
z$Ttvy@D1|82jF4+TL%?@_tO&M+IXMBQ)qh!;^W|hcX%QK%w2sDwt9B9AZjPEod}iz
zetsS{h`=C!3%3(+Fpvtc1Ofm*@XrI_1#AEW5C{YT{&-dZh5sHk=p(SvMg{u*$PtxW
zkT)vO+n2x+3@0a0>zLV_?37py&jKm|K7N*%;g=Fy_y>CX`J%ya7Cfbnf1vMfA;3bq
z1?+jOJ<(=+9-RPRou3}xz@HvdHxzm=#N0D5c+aEfgVNpefc5y3wKg2-`J*CsY6-A5
z(AEKSgFhMutlfEe-Ti{xH2vP<y#!|v;QKF}HtOGW+5zsihkXO}1*}o{w%v2uD0kl9
z;jPiAKmy+K6iU;2kDMYH0T1*G&~*)T#g~APNlQ;l^sZFkVLUPT#%CKaMR@G6`Hy66
z!IS6TC2Ipm?cgl~;F|V$4g^OB5AgFp>V*Is7nD$MU(em@qrnGQgL%^S3k>x0LHYT5
z{)j@g8-mZmFL>%*ytTKd*RKJTy8&R{_UQ3_1-7`8haYFq(A_to9|;q}XnrILzBD3#
z^e}1y4u2N!K%ivX^K%opt`Pj>geUlb5Tq15r^h>rADsjgSOV=T0c!|Id3b;!DDVlM
zs)G*l19LMyV-F)sz~j&1cWD#|7`){Fzz}$T1N{KLXKnx1!DjKnzYW^{e-cKh3p{JE
zYyb(thqq$@fM4nm?<Ist;~~&C;>Srj0f#RKz9e|rBPC$S2$&ze8mb9027f;|aN{9@
zWx)<dcDxs61U`1^0`CRzRtwN@5TF1K1HPcf@dke=Q1`e45`YYd|Ir!ow0rIs96s)z
z<-_j?_HaKkiTC>kq3{|KUw9HXzaU?C^ndhxcpyG$yZ{0C?y@J7p#MK)8qnU8{he%B
z?};{{SR`naHynXJf-=Q-PRKvfAtr=@Xa?{{O7Ixz{*o4{XMkUj|36S9egWQ|-g|mi
z&j!!kf`9{gP`d^N`WYa65dp4&2zL+x*q-*^9X2R-i18SFh>?#cFZlX@yZo@A0MtJQ
zA428-6Jv(<{O15g;))8ib@luQ6%8DLLfIlt1sb6ZZOu$~RUp|e`X9vPUVZ^*v{2rj
zyER3-Q+UH&G+1&{cZ7#)5J4rA2O|Oke?xv`7yVCiN;gj(Ka^j<FO^Hb!(ZEAF93`J
znEUzS>zX{!&mSDx(THDl9t8?ij{m|^xe=7<zwne`6MOw9IiUxN;u8YLZcv;xmI?4q
zZ^K(8?TGMBPsLLJ9OB>u-+My9Umgg00l*{(g0?=apzY3I+n&F+J%4R`{@V8Zwe9(9
z+w<49=dW$gU)!F)wmpAsd;Z$?{I%`*YuoeJw&$;H&tKb~zqUPpZF~OO_WZT&`D@$r
z*S6=cZO>oZp1-y|{~xyPA)K%AfyZM2a18uG@CRqKfEIW(?FYDlN7THa!HgFO2ZBE|
z0rCeaSpE+bynqh)#|y{;(%=EN3ZC)KiQUerI4M8|CItT5o}`)g3JmmDm6GyBOS<Ck
z4v>WV`AD5|^_P;7l$HVxYMk<Sg(DGxylx2aOjw=&Qv-&d*V|p4|EPkQw3)vS!pqz6
zOaQ{>jJYlR3=*#5&aZKZ_uwhjQ$GGah(K4~Q$8qPwCX8!egbn<5XPgW_<0E=fk<_J
z!k7KLc4n5mI(`8NUIj@-3Al{B0<V&aq>Q4Ryo!oA{sseODQRUX8950VMOAreRasfy
zAC4bPEx_GF)mm5oM_Qmyo&QInLPA0$L*yj=0z9Q;R8&-?q-CXKWhFog3G`{-K-W_e
zzG#764!Q_5Jiwb^CB%#82wK1d1*-FdIo&COkN+Oq-`3SHgl1;{oz%w%UjYQR=s>+-
zFqQw-2x$Bnu#`0d?H3dPN9YA3d;<k`qx<h(^zeHYd%=X(+>PW8-=p>ikIo6z;|`ZX
zpb$PFZ!}0NL&%@Ms!jmH6|@Jk1#N+L8|tSa+HbCwz^Cvd76LRPLa6iO@0yU1k&%#<
zx81#K;()Y*s+{x=sTn8??x3~N|3>WR?(K2<e<3w9Q#JBM2fF&g5k|V|{9vXey}jL4
z<q<M)6(zW|1j5}7E+Oykfsk-jmWE5n%DKub$V<D+d%)!h`2yqX`oV+n)q#({BfIW?
zaFEAdm8!y(-KF752x$prIKmAqqrAI>va&K*R0R)dR}W=3Ik>dzF1H=?30KswT=BVb
z2RTa1D#&{%dMHcCxT;7?$a|<LO1L3hJtX82Zi=$9a_(?NJfENG5|01P{M^CXmHQQM
zq@x2G$9Z_8zyLI8SjKClr=uvNqNpe#D=EXz>ke1-@C)#91*Of~$JG-db;2Lvi5Gq_
zA7FV6z0qJxpZ?LEY!D}ZKqzlsf{d!V!tn-l>ilrLOd#C(f1tg8Q_uffiFVkAfM#F+
zRZMos(0(3)A+7-kEl;pb{x?~a`cnzeuEGC3|Nonu{J)+59~BJua`p8@fErhdA73IV
zyl&cQ9;yFqxt}tEH)1h$J&g!J|EL6QSI?i-@so}~gE!t(=eG?ALWAvUV`a)~6A0Sj
zdHyO}1Ufv^-_iY2(ZA)4x7-Bf<v+r9xb1}P6>KM)Qa?%mQ4m7ef6>#s)d4DhJh(UN
z9NHZn{=Wa#z~379TLXV<;BO85t%3g^)xghnE5a9?I)#9%((NfKJ8+8ZY-w$wZ)B=R
zSZY%lntJ>CK|!-^AMiU3{G8d&-hr326Exc<2QA1!18rA0+TYAZAOB$s0M4g*@e^x2
z{KJ9E^|iqr`|&;rLrY%X-GKk`O%L}E06*A(Sc3F&?%)a(grh+i6%y!=$K$PSncR?g
z7>YL)X9@r_2*Rv**mDQQ+uJg^?ZBFN*xkn$G|YzL^X%{L<Bo@)gYf0xAiTjg%oKz#
z274nw`&?K*2n(Wue7r#z|HS~455g5RA}7LI@(Knb;Gpd;ku(TX1=w1HUwjZ91TQnB
z^85vM`vndJ=Z7FIpyTI%nqW)JD+(9m1sC4RyoQJn6e2KC!V=s}a1C$=m-;^buD+)M
zV5iLZSOCMn7A*wy&f~uZ{zCWPKz!Togs)f;+6=<n{uB2z=1-hoKKPvh_;m&>@h8qL
z9RO-C008UgPn=*LxN8#)05x5|l!qBFFTZR=cq8DF_zK-~|3`v7%0C0Yq$i0_Z*RfJ
ztGi=*&Wo37IA}^96u^rH_i_-t68|a0|F<LllC59zA#RQEKm;JbwKwk(P|CoS1lZiZ
z?%w$2Bd@pbKbEDxaQMF&?H3Msa7V5|fU$53U~-lO=(?By*kU_C#7GIioN~Yr$X>gd
zk{<!L*8t!s&&-b8gD@CQc>d!7O#r=6v^U{%20+K!mKPor5WGV|gnto(-<Hq<OaL3e
z4F~|D;CCgmfD)hvXaahGF<=4M0`|ah01j^8`GDWQg#c%PbHGI)7DxoH0~tUrPzaO&
z<v=A+3p@gz055?ypc@zf#(=lL2jC;H46Fg`;72l~5NZe`gbl(25rQ0m$U>AMhah?o
zQ;0Rh9^wM=g!n>&AZH=xA+eBTNCxC4qy$m{sfRp)v_g6yBalhR9OMfG2ZceYpiEFM
zs4!FtstnbFnm}!#$Dp3jlh8BJXy{dF8Z;kT3ax=Yfwn;hpl_icp{w9!pOi3W7#~am
zrVP`8S->1%9<TsdIP3~66_yVxhdqQf!}?%vVGFSDL?lFvM7%^2L~2BaM2CssL??;D
ziQ<Sdh;9?r5IraABbp>yCfXvVCgvnQK&(n^L~KXwNgP6akvNsOi1-2V3*rId55#LE
zBqYovA|y&Ah9veRCrCm`;z+Vd?vXqu=^=SXvPw!y%0_yCRGrj<)Ri=l^df0GX(=g&
zw3qY)={GV;G9EHnGJP@!GGDSNvQ)A=WKCqfWHV&z<aFdh<f`Nr<nH9B$rH#6$sdw;
zk$)gxr=X`0p-`u=r8q%xjv|esoZ<z=IK>JjB_%(l3Z)gLH)SMc8s&Y;7RpJ=?^Fy_
z`>AxOoT!4Ru2L0KJ*FC=TA`+<7N*vucAyTVzDiv}{fznz^*0(u8c7->8h4rqnoOD+
znqHbET5?(;S}oe+v}b5jX{%_vXcy?n>4fQY=v?W-=`!i+>4xZ5=^5!|=q>1d=;P?`
z(6`dhGLSL|Gw3n6Gek2KFg#;;#|UE-VANrRGoEKGWPHK+fr*4kgvp5M1XC<i8B-_I
z@;-)r^81eLJGC!!U*o>F%rItQW+P@4a{_ZE^B^;hg^NXt1;G--QqI!L@|Bf?Rg)FL
zdWH2K>i{c`jh9W24at_oR?GI9orrxuyA^u~dk*^x_5}_m4mA!q#}$rBj!{l1=YCFW
z&QQ(*&UVgKE^aOZE`P3cu4h~e+|1mX+$XqGxSP1=co=yO@p$v3@L+i6dH3;Z@uGOs
zc%Snw^KtSS@&)nT<m=>H=NI8W%pb*nkN>p*g@Cevhd_$JQ-Nhc9zip~vx0X8M}^3R
zl!d&6ZU{9CeH9iFJ}P`kxK?;pgjK{y<c!E&k#SLKQ4P_PqWPlzVkBb9Vo0%UvF`oQ
z{R;cN_Gj+zIsiSOc)<HW_JJO8VsRC5U-5kLAqgr8Es0=>yAqR<%#x;(QIfTiOHzVT
z4pK={%~D&^3eqU)Lg_IX1{q_SD4B;cUu5^o!eujM`{k(R^yMPt>f}DlACO1L=g1E$
zFe;cSTvB+du&Jn|7@%0LIHx42<f4?NG^EU=Y^fZl+@eCPqOB64@<`>os-kM3YNhHY
zH3>DO+8wpogCYkJ2MZ6rQ|DKARllkJ_7LwOmqU4n-fHk^xN78UOlb;ex@#6`&S;5g
zozN=PTGE!*4$yv}{Z&U*CrszDE=<=z_lj<(9)sRty$roK`uzHy`gir04HOJQ4IUd3
z8=4p<84ek7fgi1x7%dws8HX7^H=#1IG08BQGTm<)VEWJuYG!P9&1~FU$lTYw)&j6F
zvbbjP+ET>wq-BE@iIt^Qrq#5yjP+UTW*bHuXPY}VYqr|93ASU0MGprZetLxVh|`gh
zBVUi|9!);_)=tVU%&yIz-QL^2&Vkh7h(nRXs-vFcb;l1*3QiZD29JpxJ9Vt}IQwzb
z@kVD_XIJMc7h;#AE_YluTrFJlU02<V+_K!3;X3de@Q?1A?kVnb2z5j<V#Y(=BiUot
zQ{D5L=bV>@SE|>7w~lv)_vaIaCvs1GMOq+>k=v-FsCzzSJ}y4>z6`!d-{*eZey99;
z{15nF^nZI&_2l)F%K;_<MQ8~67`iTy37kx|2Z;t<2$~E&6r36SE#yc@)hYT@zNgwx
z?>`-LdghG&nOmVmq43bBXZg;aJ3ASs6?QWm67ClMG(sREI^sj5LFDao6z7oVI-;bb
zlB2NakDh-R%@rLP{qBOng}WDNE(Tm2x}<g~_cGCC@5`Mraxv*KTUXq#yo!~MO^w}%
zgU7v!mx)h{-@fW`wKG96At#X}(Km50Nh9fYGJW!y<agK1uGOUQrd&zEUU$CUnkt`~
zdxPRe(2cigrfGHQg6WCr8yQ|11DV>H_p&&%VzRzwyJz?2Xy%mXa^=S6;_|%nhHo0&
ztjQP7Pc0xR2rif|JW|+vOZiqw5qnW=(Ppu4@!Q+hx1X0Nm6Y7!ypwPjdN=6qT&YuO
zcbRTkUAaX0&3nxEV($a@gYM5)xKs>Qnp8fmQm!hm7OKvA!1&-w4W#CD&2p_*?b|y0
zx}JLD`lk=o9zJN0Y$$%j_b9V*Ut>ZOMN@RsHs%aw^|Alsg(sd*-aU1GI`+)&S^smZ
z=bbN1UbMW_fBCFgs~OXx-twqbwYC10@~hf5#kQJuh4u#>3LOtR6+3IXl)CD=Rk|Pc
z9PDZ8)#!cFr`z|k->AQBz<i)*@bKX9kkioHVfW$L5!A@%(csbbvB+`a@hh+CUZ=j{
ze3L&RHgWH*;@iea-O2VTo2jvP@OK~Iqu+0Qh@PgNPMzVIDVdd>eKe;(*FEnz|KX$m
z$MuDai}Z_GOQK8FpEN(UFWW7D_#E(g`%Byk+e$H39{Y6Fa`nxc&)WLeE8p0@-Ttop
zy%~2DH?tnHLAsH)DYp4=%VcYO+XwuHb_w7koMHj)n&4ajyc(Mh28Hb$wc#fRpd(ya
z{o^~=|K$b!>0o>Amx%ZanxT6E|0}Tl6uhz;<^T<cLBKnncdo2{4!i(oJWz0i2ifmr
z7W{6JjF^NRMnnOHQ2s>j2GZfLhlat3z$`+Dz=$9<2{|zUBG^<QEUfHwmb{wM6pRc^
z`<T1wT||}X!5gi?>#re1#FS8CFyAaB;KkCU5GWZrK+nJkQr%D)q2pr#wdbj{y5V$w
zR$faP0SakNK`kLGSvEO&;ma-c3NEfEZ|cAUqiZ~iMGYDDGWsJ=-8)xCL%^G|=|R-T
zkrn7}Zh!YC4N0izdrS3AMu^c^9nEP>vZVd~_Tl?J`u)h}<tMpSRFInFR-!cg;tQNe
zo}Qzd1z^4kjJ^tVJ}>i8!s6ISLI?ohHZ}SdzQL3o?9bP|I4mDUteSR~Ece8P5al8#
z>s3y5wX@nEQq?P~ubmUWvGC#hlk@Ss_?VDYeovY!*HhMF9{0!dR*H0zW1UVA$=bmf
z45meUI!|!PiMPhf6d#QBHPSOaWPy)z2xEa=KLm8eJhf1`7A!y2oDzMmGdi1D<)A*I
zN~PK<;KOyntXJa>D?`%L2NSOB2p?npq|^wEeMFr7rWjok3qz0lm1z5wr&<O@A>Y1#
zRj?lCuBb|zy2~s*M1zb36A25?om)Gb#B-1r^!#*WXVZRq@DNwTp$Q7Wd8dAMgNOks
z{0j1?gGRD!<Plq`WH?oh@jNZ0|6H3X#*$gmpFAJAO9YK%dR{>?YEB#=dr7>tC7IGK
zRL@hSkH#>%({7gr<ojKd`hLu-ax<Z~y!o-Im$x!16d6Zc_qaebsac;ejo(M8O3=R*
zkaHAXDKTJb^R>~w&Z9%TmnTc;HjtGkyvugyP0TB~M?k<p0o4sW<sNeaRumHPm;n5E
zkTmJuI;N^@3CoG5J62i5_<355;_Oy7u?medn%O|N+KgCV&SN2nu7Y<b0uwMZ>C|S4
zXm#)H>hYu&&nK}P?T9Ql(7wX&OBCr?6{gbS<I!mct;s2&XBNFH{LQ`Hs+Ow*c%E}p
z=V}ZSFmPqbm^eZfaZV^-@_>~XyQ>KM<Ryh`<1#`i;^$D2JBf%wFig=e_C=<~CVF{3
zJbKMXIEr2b3YF9K@Fgt|th=q}Cmf(AL-a_GXx`o?!@b(of?kHp6WD2{?HwL_PfMt=
zK$Wm-3o4V!m4iX+KF8b<>a=94(~R`r!_5zKS&6!yxRPRTV=u+08}q*GrDjTNT2$-;
zxDEmvi*jp^4FSj_IXEL`9eXjtIM2!YD)abo{6=pJSuD-)KHlP)=(MY8S!w+IXXNwI
zQuSQ{;u=K5N36eQbsl;Iem+dR4g6=_gR3meTYxNOGr8WJ@+v@VB9V81&*L$e5`Ukc
zqVylKKrE%qiD=_JEc=YhU)eXrcIsrZYLkCjnwfI_Ok!Tqyvh5gVFt<mg#3b{{RNa=
z0=)ZxfTcRsLX>-ML&Nj^CJY-+I|)QR;W_^;JfZdd4iUcWub?iwF?Qb8&`**7!0^KE
zy#Pey_$^$nb{xzG1fEIy{3KukYCN&YPm0(lAFx{MD==bxB4IX)k534X14IE4MoiF$
zsiOGBCRoW7H33Ym*Vy9a<=zPK&vFLK>HE)q?y!EI#8%3ZSE{QRmbt?g8o4hn|AUQc
z5qi9X-c=z7c1Gf4$GZ`E=q!DO8#UQ2;dbLo$7$#|Mp&|gRhG4grnHOb){XIZC4iN{
z{AjS<sy^fNCkA@<bhx2hQMs|_<-!+L8l-V=%nshy+$mWeaif9&32M63qr)zV+UYCR
zh^~pa4{739hs$RUF^<eu(d*UM4Zmd?#<g&dT++AzZl3(UiYb<CdX4y|m?h?BZxp_7
z72`g4#+Y5}MXA*HqZBWZB5@y$^y2CrY3^Td=`-w(q+Y((w&h^+{`u_5hFmR|Kgi1K
zD}@ej4Xjf~q;K62O`7AlshY;Gs2HH94waCH+6eYmq!QgT&@>JXy*PigDpW`Z2y~gb
znZ&<RqWK4giLX*4Xk9iky|cv92P*Gnob#iw^@$b@y%nP&k}`1lY{sh=3qf;K(YRee
zF>_!-m)+y!(>!VXep0QV2>njA5OIbnMQtR`k+6Jwo;rS0KO=}~hQ2(5-rKYX(TSx0
z>`x(RciurDz*g44f`ZHrdOel5OuyetXi3;@GX=nW__y9=WaFieNmD9dpq5UhcIv+}
zeoSXX9sbI-%YB*q$y)(_W4_*(tmm0L<5A<UZkv#dqjcl&-R#xBRk~<TJA;sLFE+)g
zN=Qdd_@v$Jxuevx@m-Lx&i$ElaKp!OCbzApyi}b6&OW$QWMUv=G(2Xe`SIjP9=^l;
zuCzZCsotg86fG8p%K)Gs9d36Y+<E+MNq*A{{|nO{aU}4X5hdS||6Lr!kg{nP-g!sT
zV3>f0i}z8akHX3BXC;tN15XpR+|AB%?9zd%F^=sq@?t5fxCXp<21aqpERtIQikyC_
z^&$y)#`8?xjj99(UWWq?7%4!>3|k8w&O}|OC17~aL>oCB8FX-J#O-q38m&_<Z6R1j
zyn|>`;B1p2s+#EPvcktfg<olcGh_skWctxrMAhiajnPd<o)zk;9yoU=yI+OO+(6Cf
z_NXa6w%v3l@kgKJjOo%%FgbL%*O0&WRa$Q&i^~kXznSeO`^b#cV?r9B;v{;nE6kMI
z(SHd-oikFE$ri8fHb@^c&mMC(#|CHDOD>#zfs1|r6Tw9LG}$87iVK$yM*b)Us9b+_
z6o9vomqOG!({OK_x#hF7s%rsWJ@Mo7Y|oy~reNnG&h0Ybn)&FJwd2<^h|j4ftEpC6
z%eHdHNqOTGR&HG=`n_Dqqx<>b&VpYgq|%+^MXL(kZTL?rUTe`U%JbDbFOc7yc=Jwf
zWp&PHb#~WyRj<Qt9a%3Vj7+F+&)c5>RmVyS(c@q92mpn|6aPeLk~&}cw>bZHh9V))
z-%anW!5-6J6+?Vi;T<RHR+5-jEo-HiAXGywa)&QOlh!br-1hqA$dOm2W`f$L2JhFX
zMK5+nXBA0}Fftonp@OKVVAIV?Gsv=fI_$FIBO_@o@4FvFdA^-fA#?>Uu{pOZhuqsv
z*lU+^mlUuY&9MOOiDF3_1`ECB6Ui<+>4-w2_CGPXnw%0j_nkAVPgNUjn9?qDKb7tg
zv4Lm|ylvy;aGVL1opv@ukH=-v?lz*Ma%H5<h8va7gZ(ZUcSikQA#m6$bH^l$&Yh-p
zU$t<bY30hSpJ)Dd{qk^P0{wlqXH3Ws=8~;89WD1hOdS*?GS|1`u79gh`26=;n(W{^
z$a}>CGied@RZgzEVoAqhmkckC`(u|%UIhrKqwjgLm_CV9yXb!^nU+uddf+^{lVSIm
z@ojT`Q{2?=CkWs$5A>VWfm0orm5i`yb21r`H8T1OgzNk_!#n^GNY?-3G^LjFi-Oxh
z^_7#V#wVk5T68Om6EDYi$I=$++=xy^yCfQ~xyRd$cRu27?FfJhov$(=CLb>=?(TW{
zg;%NIqgOuSw=;~YmxU%oCqg~E#>w(N=X}Sh3qZ|ug-t~g<2x+JOkHPlMr!FN?=jHF
zs3*G#*!T)0oAXzR`#i7P(FFhMLM~Sx+PoW3k8<UM8jF2@qkWl0@LkXTY#$Zf@HR4=
zWF5h0s=>?O-wOqBNY*=0WF3Q93g%B|bt}PUPyJzf2J@D7H}{&JHGG+&PvX*Wi&B;I
z$P~RQU<vD%^YGeWJPl*cDj~jlK*f{FDuy4bD=$08`Ca^Ux90ELl$`3G2=;M0T-uR8
zEiH;%M3zC-=?MSBYu+-Mtp>4)0sRfp!$-9B_kTv1@+Hcj$B+EK@7TNnsm$_sJZv|z
zeMEc8)8!88yhu3^v#BIop1rKHX6Htyawj-4?^c9JrLwy96ztwKIOPI4by_m+$p7vW
zn#gjN0Fy3nMeZOW09QCj`gq6p<4Kqd{)!=#kG`ThSqvvDM64=lBS&HO5(`hTEGEts
z|4zbP0%KPG%rd(ZC6DB#!AqRqdpA!r)^X!hJ4QG8^JwV{jR))<Ot^JlG%NQ8W}R=d
z)4Ax9N-<?1xaQD%FCAtk@}=@d|7$`*>?+Tr?8IgECDU_e>nWET>%a1SX?o#Gjm53&
zVm&Fs`6tx&8$BkZB?@6pDZSlnLBSn#@ZE@8eAWiL7<YzBl<K&Z&S80NEwx7{-=1$D
z@oZ_i)MlxPKnku@&j2x|S!BamG-)@o_9i3rJ^YaX5wm&ZP6@#AgmMdFLCNm>cwb_b
z%f76&SSD@vJDPfF`|Z6<(++4M9`m2)cWd?fF>U<U+?<$R<%&=ASv{g|-xq8ma!<`K
z)>#Mzs>Pjsn`w22xxbLKPwNZrxPWwE-uF!rxUn#d-_X5C-*YhXPb2oi)AYBNPg{~F
zKeEbs9=voJylTE~=Is{jsX=sVxCLMA!Qz?-+L7<l!hu^kI#hbP<A0hdFk}U)Kebj$
z){{8b!oV+?#K~o@Qe=z1b0KLzJt=n#S8}U7>(g|`xfoR^D;*|l=qg*~(`!~o$+|Jc
z7O#Fgg(r79Z`wL77@#LV)x<zPtv(fUp#Hj;>riD}TK==^kBW&~g&3`*^^z6cA~`-+
zr}00g>+v*_zImZpP?oTk1+~;aoF&ZYz-dAH*4gxc{Oot?0@q2ff&Tf0Sx1uZaCxXW
z9Zwcg<lisMXrxhCbXayMiSNWKQFD?EGosr^<@D6v{y|rG6G`g3Pa!V^D5CR=@@<|S
zQ$1rD)t1se9P94oS&D2<8N5>CBp0sE$n1k~ldLzlm`hiW+Ta`$k^>hOzgv9~CF<)(
zyR=nnlIDj#@3)zfmY^@<c!E37>K<n#nZZ^~|9R<pT@z8jVe4krzMCS-m-}-~oHU6W
z{<Qka_lQE6+1|f!N-==?P$G@cb<t~WgNO4Al22liRXnMI_;{DdF1Dpq|8umqSu|r=
ztb96#YF<{bS<OG_GU&%NSzUfv1A$&DNlX5yqX3=12%S~$=Y3hDMvtIHsV!HG48H&X
zAA|4jM-Ni*PRAR9GoP;=I%jU161mW06#E73a-Cwz&6IDD|7zMwtwG1gw76Bx4c1~J
zUd<Upv+A3~cZH{F=s!;gl)v5UTEDg}s8<Y9Vqc9Od)E?fD1VhQz?G`?y|l2`7jEg(
zw2%)P!c1|O<LYMOhT1>J$~G^9qP!gb`1dMt|L4vxhN|NypMSJ!$+r>deVS#WSQW0o
zfR@&;hIgICkScd{M|O^ImdkqB#>7xP&eXbesNhfCi{UhFa-GV2P|HpC)Ds^jL?^5E
z`9IJLR8=+*bTAg~J?s|2n>>?b#KbUCoDn0zb3V4XH}Q{Sr!1e_4HnzxeH$2k-g`xF
zb%{H9`EgmV1hsY4qaNH4%@ghqY<~;s6<|1?e>;`)&htZI6n|19By=n6Hw}$a-jJQm
zY_UrvYneUSS&&C8Ab#4wNWSexf7F#0JI3Q;F?wA^=v-1Q^H4T))mwt{`rUk9jvn&i
zz)A6BF+0=GYMDvgj3>3?`|l%S_NULNpC6W}f6=QYLGDWN*hl1!KFR25GrOdC_ph<v
z{-jBaTNa|omakEBrgYxs%v7E7x6JM$m*=?Y(rLyMwVJ4c<+icOy`Z7mWN96)&}XI2
z7(py4X%yO-_NOVa;qyY%nLH%v!iV~y%EHv)3*@Ds@X(!9jw;Nt_E$v9?|6Q%G@v(f
zHFP_Jvp&!d%f(%=Pz^Y0bLWDlJZwN^DNH#_TA*^DYLS%=Ns#+Jp@aig@5Sn|foJbB
zv#zyeSX#Ra={yoKH2$r212-sMd6?@yg1iH@?w1?^+-X|2_Xj-_Kj&ySrILL<-x6-o
zGo|4UL>OVWU^s%b{(0El?F&1Du15!Nl?yljIcCkQ%bd?rHLtcmxhQC<LmZ-{Gb#bD
z;Xnu0y+?$RIG}%#td!)b6O7D|_o@*qR7FmI7{Zl)9tE%`)kN;@=-3)ByLAR7*N?tS
z@GRB4gfzEhm}91oIhf|Qku@f1WJNg~lJ)g5o-Nn{6)8@4JZ(Eqrx(oDeb1M-$urRE
zq{~VFln6o4YOcjjp&xBrgIpAtdU#D`VkO=~x9@WFg!y!~<`1!N<A=+;(oVvSAERc<
z4fPY<F2|)&#W1jw2a)+tQ0r#L4HMF#037?Qr9C>mU(S0ZxLl%&(MXzPOt!kkL7uJ9
z*B(mp&`6I*;(K8Z^l?f{QvBsjj*~T+miRI7e_d%l@&KngeEdGZDlJ<XN1nop3n5+n
zYW0yzCyX`pQWh&*+WX=x6(pDB&gu9>RvUS$)0^rm&rfSA=pgwEd}J=J?MV2e6qi`D
z=;T-`>%M9c3JaNJMSe40sH|#$HQGspvF}iJB!TtbQq!_mSg6WC&a>PjR?*h2iRJAw
zN4lwrs2=HUL`>WY-N<Y<mr9QJ4E(AYb77Pz8_JNXsrVQ{$e07Kk|lnnVk^Jqt(>(g
zZdCv-$@bkIHT?D^x#CXpP1H^iAe!VYmrcbak|5vI-@P;uq%ze7JgBjc8C{e1&z-pP
z)J~gAeaeVP+RnP1VNxvVbY6yQRcd>w-aR4hKXj4moDoI_nXbyAWb%_8%C`#zo%2P+
zDp0MFcZFxoKDY_n+$W`oEku_#U6j8oRH35l5Oq-aOCTSA7Z=a(#|WZ)H0!l4!xyPk
z@9Kx$YExOe4bP6X+|FvV*1AO@9<#*LS7;#Ik+;FcBIZhVV;Ez=M=d`@o^r+fYHA(W
z$RGZ_$wKdaRaQ?~Rng1SETQ{HQ{rEL7}l+N(>Qu^1fCvMD>uvgN&Y95_3vr!|0-uG
z?cPfa^zRk&@3EK;#I>fX%e7N<+w<%2eYwcRejsLA<h;v468W^pU>=A8#V>_i(gzLh
zobE#1Dbl<@EjUCy-pTn{YSJP0ioQs`g|5SCTGKJ(EIY;^`Dbf-&(l0!**ZfNrHL<!
z_JI3Enj#t$EvC2R4_!0koSLjkI$e{=m!GNfD5IjUAifA2)PMV>d>IMT^BZq*gnM0?
zfG7&>6M{sc&*=ik2VQYHe2KiVTwZKptZk&naOeVUR=@(6gEF@XafEn1H;2~1`MAQj
zfwohw5!6&q=uWO5dP-r3-<7<-!rjWxB;Dj57-2ZuV{-9lb>i0t0^mwaKiZHtflPC>
zjRsPZ>B^OxtS?iPXDH}o%nP$rT(OpZe+ArArNG)*<K>Tt4DIrT-JAH@X~VWULm_^V
z{4O4opFH!3Jyh~_1@C)b<V`Zh*};oF^8?c6AbCuMSw_Rte6F2EOewc#B0F;6y)rXt
zPm)!7(bq0E1$|q*{9^_c+`&0WT{=KDmzORVs&M`>CD|Tx3gDQIEq|r0LY0+}wY(zC
zRpFhtwD6jCVZJT@2l|te?2x%kZ`)Yr)22_#*xu;~!I|`R9~tHSX(E+NZ=c2ot27Wa
zq0;_fCH0*rl`hHLg6o}%%V9=e;es^>Yf4q8le~#>RtXYM3a=l$ZlwIkK=<*VW_r2C
z`Yy3hix~}*wZj1l2VW%ae*&i+NtBlp*CH7`gLokJxv${H<21vKUh`-s>9vl_4eq0$
zQ2lNaO46cxDJ9u>`LNBs3l_4`Y2F^m$G?D!k{|B(Gbi3_*%u0Ao);Mi-!~<O%SNB|
z17{9+6RsWiN9Fr-%}5|5Z1nwWP5$rWEAW^puHOQcPMcL#1C~#h$ey8VU*2HLqiYua
zwWJ3uRC2_{E+6P|Zz)YonCngic~gLwHRro@2xgsImlpK$d0AuMTgW&Gr)Y6A8orb;
z=h(*Y+0}Ddq2Q^$?l*gAZBER4#VUQ-ODT^K_)4O-E4W}MPG6YLFD2(b?UY}Ua{tcz
zWaoETBHeS%1qH-(2X)`-2`gutDbKL2Wq`?n2VG#4v;5lTGR1bC2(D0NEb7wRv@5cK
zwo$FT_dR7gAEngYyHz9%y_8~@N^>E_y-~Q+D%o9Ji<{o64_^GUX&@K)b>vOlnauM*
zwox&7Gf=!t0Y@0R!0na-CU{Kr+BtGYZ?o8BaIxuqD@q{BRlQ(<ZwmRx$z(QXhQJqH
z{%4_TRQ?;wY1SU{QS`zE^)p>;-my~w*k(qERo7je>He?a|J8!fIh077RdBbt7fk;T
z3e$P{R2ScO4Pn6!?g|(qUxo$=YiDlNvKv(ePI{WCiw)iahQB>H6Su`}xjV1;m)5-3
ztkC`>MMhZj8LJ#k;A{!0&Q%>QCzYBLmpr<%qSoooouYWD`QjX(_S@_s!T*cBw+yOl
z+1iD1cX#)NyE_CAt_xeZJ3$lN-3jixkcAV1yGw9)Pw+rOl8@|t&Uf<O`|Fdcvwz%K
z)kXDOMb9}~Mvw7~XY??8>4m?n`u`1eM&>+DF5s{uOfUR+0HZK`_YN6YCO65_M}xbo
zG#0QJ-99(Un;tc}96PJ{@<D%F#xH;WxR9U<djF_GL6JPoUHy+6|7!*I#ixw~4fB#K
z8tNrCgsa3~)fYedpVi-)q+fou1k~7_-kN$js4j0BE_i*_ZQcxA1PlD18~?BR<J(JS
zhlZvi$GV7~Ef00B=c@|#)T$|7x*`fRBCD0nWMb1~iX4nlSjFr>6??r&vizQHB3T6m
zEZ%}LxIw37l!15Hm8@Gf1JN*3O^>3it}=AaGLf=4jJk-hxoO9A8mn;9QcrokjG$HP
zy_n@o8(*T_dd$clP~+pHjUVOdH-n6C3dXUa@^N|AGBA&m*b7D~fBK%neo~?Z6ew})
zZzPb?{xH3(y2+{kn!9K+#bCw~qmnm_p{$(;%NYYVRu}V`)pf4PyoulVQRKbr7enzc
zBB&{1?nLE2b=-mi@17X!E`jI$6)Wae*+JS<Ef{qqYMvogO9Qb)AJbEgf?R-Kg@t4r
z@MR#;)UkAdV`h5ax+C6)+zsiU@9Zp^@IjK<)$Uc7d7a4HBtvM<KHlOl;SWj->_-tl
z@j${%kd2k!J)OL_!=P9yL=1^<fe+KHsy-|{l}sY3VUbQ_>95UEpS=5YD3i~B=xLvX
z(EkHJQQu$H-5am|3O{mF7y_;E+P_#Edy-*!N^DuGLAzu5P#5Q>dXyQ^s&t>DeW*-m
zS*U~1k_flKlC8su;R@*nFdK}s*-39n|AI1)Qpis(M|IswtD&|FkElxM3?3}|S<W&}
z1!P#lnH9`dK0m7&)+Yp&+rJ{=>Oi@ZM^t+C_>ya~V%+&<w3TAxCQ1&D9>#LpO3+l_
zuJ2Q*57^8w--h5eFrvF*HxZgzUiN0cw~qhJ{6Sw?_nn1ffA-Jbi_z!1?QV3Qb$V=w
ze3Gm_v~vbZedwK6gC1AL7!JqHGD<r)e!P&CO1t+NYZ88HPWR<C1)6?W4G&-9%EVC9
zaF_8+=Lg=g8NG@xBJX3@aHpsnzg9e75m;_;A|e^!Dv<CKbWI4G?5gMRdk^25l|=|C
zrvW#eGoboZ#`xpD5$@#ZX<2<oeTOk>Oaa|hxzRAZ(+rv*k8&%O3Lr>8jB=7dKgJ8P
z`>-x3b`|s0#>(1GvTk&fD*wTHh|Cwkxvl<LwgJiawbTgQ*O5E|6DE3m<Byq$JhVn&
z$eb=azCV8;TxwW7%N*e(wC`7EwJv#-Q^&^Kh!*~nADyrqFKO$_UZ-uogB+R`IHi5R
zt9p?>EKUNZN;#^_^W_U(|Fjzh_4jxX73{C4T6Ue^wAY-w)A@7i%T&wH|7kZWanecr
z0-86myUKrN#UBdX4Z1LQ()y~lsV9eRGmenC7B4yt>4Yy9L{@iATX6Mw802;%i!d0}
ztmB;k47S<Sv(PSg-?Qw@z@4+4*rt8W%Vv-de@M7$!9BaSrB@S<{!uKDwjMqsbl&-W
zX;dmnngd}udD>CHYtB^IDrntQUsV|u-h78u_*MeKUjP%b$BLYV&j{}x7_|JL3TKY&
zh;SL#G7q<b-eGQW->AH2xJNscKEygl94qVVt@QpPl7JzMbszCvt^7^S%afMI$SGT%
z+S7H}a$suH@i5#G3zQ0eK`oE6p-jL!A!x?zBTm3l8}4O7xVnb4Q4V0^-<M-wU5ljM
z5hm{F*)JRGtU{Vwq_oXu9-_9ioIYAvl7(GHK?_C5CnwgvvUh94mdYkFS|usJts^5|
zG>H?`U!hU1Edy$m@ImQO$-F*m`2;zbW5QX%cPIXWHDW2~PLjy45H2Nme?cZ3W9+|j
zcG{PRhH2Z--z@lyh7<n-B#^erPuEdcHzsb$W%!gd<ZvW|U!RSp+x_3I+6OG>zqv^L
zXS~e6`=nT2n%Q~5^JS>Nz4Y7myp7=VTa%wG?@%WuE%V4pb>IA+YeD?SW*AEKwzpRy
zyZOxs{>2tV9V-R&vkvUvI9oGN-iR^w-`>h|-Pv-eV{$D8^!2kIV~ZLOcr#jX*Bj8U
zz5*4E9&S1%(ORv)a(qeR?Ui72-31dLPiju9K2=4Mi(p{i%x$^Ch1+4Lj9H+u$`l&$
zlBr20{*Zqg^Fzoou?8eSk{y@mW0B`OLZ)`^QG2x?678;!$91dRZqn5*ZgWev&*#En
z;r`s2tIzODDJ}*%{Qg2q_obweV6Wk?h!rV@bFSesM{91Da&ZlJVrG+QN1W=NT58V{
zk=7gO$3!X}%*8W7hUAcB)ubb#_B!ej37`Dj+&Rs0;boey>>D1lw$)~LDa5!7nBFig
zsc7Dvl}v?^QB7Sr)`~hS5wHbvu0{p4{jl>62b7~+zTa87k@A?tzM@=j1rMK2G8)<(
z1BQ=YjwQJ}>h#6M;Gm7P6@HNio|>s+PZ7J?Dy?!eW)3S~Y0cg51hG$ganHyqSh#G?
z0i?;4&10{)vK5sV)!L6LimJl|(74Zk7*2+irF;}}Qf&)QkEM!KiMluEpS*6rmzF2D
zVq8Q}NqfC?7Lp5Chgpjf0zAt0HxwyyG2`gH#bfMQczG;qwfKqPBsw2v0{2gJ8Jn>I
z_P{r7ha=;!U!ygaBu0Xn1ORxMOQ)*N)Pnd;jOOc5V6i-%tl6a^`l75bP$L&n@OX}T
zlT{8kOYJWx$I#ICmfOSo0xTbsXkiNPa#;5#c$ydUI5DHsQS7Z7O^JU&{aCj-Z`jZm
zCpq<u(lY$PB0@RvzUO3GFLpt__`xP)nk(&w--`5ewbI^5<_fy$QHd}7Chrbx%~yC8
z>&nEUy-I}xvmWkri=4;yk3u%(u6$cPYe>rPo)xyV{ylG(bWXKDp|$JIB@u8&2}1@g
zA?_oq@9hLLmWMu6*FB!F*^K63sKOc!1@e>%9yS25B+dPnYChrSQm&?uXq*_49|m?D
zz21(_HI6r6wGGhN#i(s0X3fpleXwu$N+2z7)?A3b6rhrYjFCpQ$eNX(4^pCeOlZZm
z33Oq^X6Oxr&A*Lf54lD%G;d*uk03tehNMR3p1-RzfkU7%CVm~B<sS#OL#hQnF-6o`
zXgH!mw%_j=qO5VnSk*R?4nSor6$QBLh?0uSLS9Mi{VjI47hd*{tRPu~_-uH<X?z%)
zBDrA;Z9YvLwts|jsSdsaEfjnsbEBGtLT3q@?WMz6{VOKx)>j&OS{$$dz0*474|>#y
zvLJuk6n>w$8J3pnbtX1Ldc8}|dbfL%_*CYn*Kj{t%F%|Hxr^@XMhqQoxXC0KoNA}S
z5nzy$a%ik|m)Em-`Ib<vpm>^e%!X5G6Ik*e_4R7jQX7GKmn^zg4tY-dTJr5UZ5DWh
z<pjEeH5rKg5j7{V%&-n^{l|1e5yfO(DL{l|I$clc>~}aXLiyht;u9hUEYC%NniEOR
z<F`q1)O>)@b09Fef~x9~m>;z8>eb^!?`#P?cGSS0%;U_>%bcAf9d|i>**#3}CxJ_A
zK$%}qK1ofo*?#LI$D}#Q&BWeWcgbbwbZ4^S*hcsSLqW7|t<&)8I7g?UZ+SXWr-Ra-
zufaX>(}W7)WEO6Zr|3hOyBlNvWt?ihap&aBz|PnOm0;AcWhSjf!cZZlir^>Ze6ZIy
z$&l*Lsye5PMNs-sn7PC}s4M30?vVa7>o(sFwEThsP_$yM5t)`REth|(TUxIB@=Qv3
zdw1vQdGB{|aqm!4QsGjuP*So`zx<NG`=gVSljBQ%?4g%`WXf|4LR6yhf<TcoJ1jW3
zEO?YSI5;d<l$4Y#m)JNs)O?eDQ5+oQQ>DvN0t7%USDP`*1Kt2r^cC=bx%%lzUG&0$
z@t^TB|LzmnP)iN^@{{;OzBFfoPv00ic^wv9V4ks+X^YrLlzE}HW`4@S2hWYZ%gmQ{
z#i_qc?kXRhv>=KWi2)Jcs!)aqVGz(zU?#wX)JEuuhV}VH$Tjw5qSwa##Eg1xb(~a-
zR`clhnp(W6euUy3;^Fi!sJOdULBfMW_@YVnH%|xrv6(npKVkl!=BsshUR1Ui)8E+v
z#FMd!NTV!6?yGX0o&X0lLBUR=_+$+3>#wJKnW*Pf`Rks%&U7{0+Ku<Xdgk{G$c<`B
zqt>6iqeISIF7IZCEY?7%F~6X~aHipED0GDZ7v^L0w0l{E260H#8JICt`5IM5;`_%A
zhxvgq1_h@tYwY8^?P%v5klPugd!S~5;N`7zHm^2pMq(uQ-U>bGCONur+T4R%9Du<?
zIkk!q9ZZ;qQA*+S0U9>lQ28f$FBaGz=R^>`_d+a3f^F`Q>iNo5@E*^WeaGMfSGpR3
z-o1I6jno6KbE>xp+zg}^E+0YDQ{_;*f^2?oE$G%rKLYe=xGU|i_y4pSs|pVrRpx*6
z)+sNR8zC|^t(Sx=RLAUMu~DS`R%0JE6UD++kVjZ$NuSv?=Xvz6we{Wv34w^oQNzU0
zEcj6~tRjARepXUEum?(GQA(Q@skSz`7%sq8Fj@h2+`YN$SQP-e7~L;thB1+ey}?V@
z%S;TVVMZEOw}FAxKXKFvfRS<!Q!3O@LSt4{)Jah1PKl|?HCwp*p#r#&fi9Ao;btnU
z!Q%dM_aa`DXt)%I384-2pcUF}3#y8eXH~sSmnz4?#Wb_*Sd+~SkGMWJR|#z(nf30R
z3_Dv_)P!k#r8YBsGJ?mljT-9`ts^U^cG8(oZ;_0N#p9DC1)x^3bna%Q!ANVl3#w}C
z6M*+Y@4?(%T`N%73<Z7IpPG%~`N0lN9Ha@u`;BOD#5fA_+;Kicq|u2MDWASz=uP(S
z+z3%a%W21AGsQGFCO*xFS9#{h7O_Z|^A7BM3fJYd`)T>NdGUjbblj;}qP!HMZ_)`m
zE}iwV=0Npeqci3q?T3|!Uwsc^9qlZmFN&4`_A$Wrfe~#Z_GGt4pcgGNj>HdD&6Y@T
z4g>((s>VH~0vuw9fG=h*a<NskTv0^Y8R~9?f;ht}bJf8k(JIW3*B*VBM6DE9V)CVV
ze(jvUVX!qj+u9&7qp`WE{1LT?K3Cw9*q>>+3!S&+*p}E0y3838dJ6TCtx5ia1TTRh
zd8muq(z4u+j-39)GRK(G4FCY)&}XymSUr|B83IU__XA*oL;VH!lWuwZ&9;<mYhwrM
zH$VRny-Q9aC+3G)YxYnWkI)Ayoajt<pDs|?#W%|F5fkY5b)zh3gr^qWzt8CC@+G1)
zy^7K9LSmS-(XJ!Ny-2rb<$X=VtYFEkKzF&cBjDJGT}iJ=9HCbuj@K};24~1Rk`lx>
z`vKf!wNxz^>zU=HLRAz^_eu}CS2wUguDI5hBT>anuz*>&&J_}$N3Mm$1X832U%3~x
zzR?bTlAxp2j(udLp8(IgaKi?d^_tMQg;&j?nWc}_&0(tRD*}^?*m;cbt5NosZ&i(<
z3C_7)tGN_E+dclV(HSh`@HSifE(_M*_d}M&Yn{wX_1M9Ck=Y{Ix>pM@Kk8un7a;J(
z^#ivkZElZ0oy|+_BT#r@>*mA!8_CaO4IYM-WZZ?^3dzrO>f(Ehyp67DBc#{qT{TwE
z)`x%i<J7z|-A5o9^;G!0Q>$lF6p9?6=sZCj7f;dJ_W?gIVQoiPQcv5Fvs!WqVY^SX
z>I1wRDOUJ8s;#TkSH?VdrDsV{LpSWOYbt9C&{bzx|ANe99B;)z4YeLorKPEMlcA5T
zr*4?F$GDJbU7gyit=`fxDPgBC;<Kt5pU1H|&dYx8{IcHOsl4bq7STBr6NJ=?slDNZ
zrQ<nuV4<28i`?M|A+T}hYI07d>gRLDoLv?Ib^;D}faPXqL63t}&}|e*b3(+DKb0g6
zwCs!G+&rBbU1VLXIK(T@tZmI<MRl)oiP^{Fw<$Efn5C3yUZ|<_u5N_>9dS%GftJ&r
z5;Ie7tBU+$t6g|4=eX+|@0eMoPkzuqjqrD?7siaS3#g>2Nmwj>BLZGo=VFV_Z(M7%
z&q*y4;Vn2FpTO=08;TZ{>V0BDHFiK2e;@qJ`fnkeY^A}63^v|EHSv;Uptnh$yk%qu
zx<qhim8E`v46L=|Fb&B%2Ih_jff3Cqo9O6{YAFGc9LQpp^C^ao2jJtZAz`h1EpA@m
zB2^s+r=YllKZv#D<w!H^F&$G97E!J1Oen;XYH>y7Fxg8Mk^(`4`-ucljExL({{=;v
z#e*93z{PDr*f^=HIbNr3TYgK>?KZZqQheMk!`DFr?JaIH3ErP)N`EqplcV+xP;rTw
z#Ow{eIC7i<ml%+p9N-b!+)mL<5M(RG7W=TvezmlFB({xdQlDHhg&VEA34UzvrxTQy
z2>xRL9RT|@p60msqa|}Rgora8w=ikhdBLdg61#Ewt=?-0uOP_)bIyBCYo*{SM^>fv
z`bp-PD1jxRF;Pur1<sP&21mYlJqDdI6S|eEI5?~<_f-3GeTD!8g!%TcdOc#x-s`2e
z&J57~h7;ou^!#k@(tC*81h#8omIbeCb&8F^(m4>fsSN0`)<SBdxfYLU#TjYi_KL%1
zbwHCiBU7&IiY<7~)l{FWT%5_|Fqzaa$tu|QfrDTsR0*EDbWwex3863_u}r|R=g*J&
zfwrS=LC>ieGQb@D`U-%G783CK$O2m`QHHfMrPI2Pa_5gh{c9e-7|MU??0;cCstI`C
z^B}LCodira)|@|fG;jKQ*mXV}EqGl{m7lM_Kx}O<=+%GW=d(a)h*}QaKj2ON*Ip>r
z7|xfl`wf&Gs?Y$5c`GMhNInx4>cP)%NSWfTxo@I@CYV7{JQErya&;247MYDtiDR^o
zNf()vBIg^v{EQ*c2Cx~z7Igo!@x@%=S0x=j=0CUwuQKlAaz!0C`6DD91K2Wi254`P
zHuCwn`+q@+2c(F^On52Nd?c<P{z7YEQ^U*^waYVKe3FkkGc`dom;d^&#wECk$^2*|
zlE!G~$oQLX(9pDy=a%O_%ss!zu-_)AkI&;U86qDU(rS!81gGmqW7Q|EG5Tkxd*_9<
z$?k$HtD@NPBcZHEROfSPTIEzzYc=FKU*}q_JeY8USeqn?`H^2x{df=<QALLzd9IFX
z<b;Bj$}qYLdNY71?p}ak<E@&nh0n%MK-CZF7eMao&)mSSHr#;=njuJQ=PV-r*^Y$J
zjm75Pq)j2e_h=A^^_}))S@0Wn`IrFxmFU2N-o~y8TzerwDVami1=EY>dMYM0!cS@K
zEv}lWs{uW1W`#*!+YxgCLEFq&%UDIiZ^p?>B5nOCz#}_7U<jH!rqVTg|4@A;2$Rnu
z1{9POfy<rOE|<5rV>W~HO<BHg;xEIS6VB@)a7BmDSU*PR%xiTzH)7Fs%x&L_DnvA5
zXj~;unNS5!Sm!J6%Nj)CI#j&aI*%_J_=~#EuK)=>VkMjYh<o~kVE{x{*{*HULYk|c
zHP(Y3NuP(-QZyUZBC3;x;3ph>5+>~8$EyGc@+*cbW-y(sNvPxB6J^3n?H%qR5|p5<
zhnmqV%(w89Vb|nIuo4Q_R7svO?4F&H^yU`o#HGbe^?Z7nU)I`Xm;GUV4vO>?k)V6q
zc=-qiY0dV^O^cR78Wv{6^D2HAn?bMHEa=_hGjFL7$Z~f#=NIN0TAh<+UTaFQXDRZ;
z#1hNvJdyjwPPQd?%rN*J!HbUoz2lMOapBr%&O*PF*GtjB8?Xk1PS;qEX|PK<uBO=q
zioXC{1j=^YHyqQVmS6@1h4Ox8lgDpE=p_xNVUSeCt7(p)5fPwKiY2Go`9%ND?Hb#@
zSZ2?)|D!Rj`~oVQmIA<+%QmwPl>y>->FMbB3+fM}n(s426vz8j!Y0L&KP+QcJ_ZRH
zm2U^#08n=q34WDV{(Cr1e_1})6wLQ*J=UjGa#x;*nP_9d;?yPApvLIh_O#)fl1yX~
zS6pbeaW@{j(cOk#{51&fvmJ0-@<-3N6wV9qWbRFMTHud~>+6jPpGp71yiIMXeEyDv
zQa44bS(|d*ldD>SVf3V|2ZB$6HB`%(Ao|IaZmV|4t{RMbW6B(5Hct1hY;EO=!8(b2
zbZ1#!u(d0rs|Tc>YYC84i2i=j9K7YT!O&itBWxID^w~dYo_(2Cg1eW%+dpXPu=x*E
z<iq`Gx(!-z=jI_Q62!iY@j@!n3r^K=Z*)rQOF7QfkbsR;(@3^v4xjqwx4~afd6pTA
zt0Lt%ImM5jKWL+LmsRu~7GB-j1uUS2p(kyj(^aHupJG|szvUeJqICMr-3-QQJ`AE2
z&9WG4`06O$0f&_MTp0kB)u5K;naJ*DHg`5ZU2{=ltak+S{54XSXC)sO6!G9KYto!%
zvwtan7Gs(`iNO3p5G`M^YG<scYnHWu&V9Ce;w}<g%ToVktkO$e<=f%dYnCIFteIXs
zD=tI@k|Di7ozl{1=l#m+h~GkGC70Tal<u>B=XnR{yzVfz?n4H9=YP3cbsq}dp{uyj
z=(X%Vv}`;<X#9rN*z3Ps)nL%~95npDmC4^A_HUeN?K@c9ka*F4>tU}(w0}3W;j_t5
zXPiat*ymL!)QgoNk65S(t7Yz3Cz<NbLH!8*Uh0;zh8ZqOAWaG1fEl}#$uFpZi?!KT
zC=3RqWIP-_v}{6kxK^`Y(zS~)4kxRhql!qjdu~3gd<X0L&f$XVE{}r$0$0Vk!ghbe
zkUJ{R0lix<(WrwlYwEEMi!yon6KHhl`BgT?(^)>7ULs;5ZIc^ef$W&$O+dRmV^&U$
zE(g+Agm763J5PWBrG^r5<LO!rqy){at7`(e8k@u3QWjFTgAME(C)>VSpr?TC&p74T
z-WAD?K#Q=9i^i<c#`APNE4To!==xR8W~B{;E2R9(53C>Pp;hxD;vxvZQ^d?~Ljb}?
zXb`j?ZR`O~7gIBUb)PQul)4*gkGOBB^Beind%CQ^Pn+)5SL|AJ4M}9$(iUy_g{+Fn
z29J6uZ|W=5<2EOLZ+9=6&hn6jOO#WFcom6VgxOZ<$AP1!L`luYpXNao8CWs>9_K{q
zu^0m5*^{Tnr6^W}u`vKY9<$KdOjW;?-H#$jpPCTkPT;gBR3xHxUSg@$=;7dlH=z0a
zTYi{d=XQS4ua(7)PhFPL2paQXdA=W!v01D=f@CLuzD|9^_Jii-@p&fVc#1irGEvqi
zJ9FpA?7$i@UT&QgDppnbbuT?1O18oey==Our#4Ystq(epJn$MYl`A<DrCPaqAP*(D
zuB%pRdAQG<=<#62)ytE2XL@#D?2lkzCt!jY?Lt*ySUk05aw5o!btcy;aBIJ{Fem8?
z>nOr4cAK(j<!P^DHyS>W_77L4L!6;=sXar~!cvPDEvI+3jg;!Dl#|7`s$m&~khnBU
zLt!a3YN%4WNYkzcCAU3C7V9i^oqh4#<#q@i1J%3;_*A3nP?55BRCx=vX9^6f^DSf1
zSuDHqGE)iurCR)+&<pF6l!jS${&?Mq5vvit_K8xrtV}3^Y`BJ4SN*n;oMzH=gU;Sa
z#6se=M3|-Zp(3FNw@-Xw4ZhxQGF>U3t^zcd_LH8PxhE2gQuq&-;OHL3jnJS+($*Ou
zETto~lOfmaB+|rIqdDYhBr-{Fd6B}QS!5sOq1lzgd0tG3LF3}a;G5O=<TH)8*8v25
zy>iymps!WfX54xffo!at?*8yujTYW$NS2AQrdYm>rL5czg@hS0!eO!|DYuoffh;Kn
zy;uDLd@-hOW%;ByJ(eiHphEtG2lG`LJtEZT?INS~76tm2rC#is5Ok|SL0Wu4Vz&^T
zj56#-+!zG|+6i(S7x2Qg!rL01NupGtyxOW*-5dF(1tDW+TV{Jq2JQAGv!M*`Ok}LX
zBUrldHMeZ^bu*5PfjFZbVnJPF)T%f|T_R^)!w|n)H7Uo+anXVDI-u<@C<#^lMuZV~
zHqriI3{KV^<FeK$Om=tFP^&kbIwQPxMeb%CO{H|pthr-a`!cYoa@R=)Q%#1BcvB+w
zeMuOu4#Ag^SgKr>sWRojH9MrN;TZ-rZao71$ekD8?+b$4Q~siIJRjIx1;{RF-mL7w
zb3XSoUb&l~z11hj`+8f-#A>a;#FD5cV><14Ko^fk$nQwDme515IeJ2kKuPe5-uQ&r
z(N%5y<#2;EAZcW~>EIvj`qHN`pMREMxNp8l0ZQ7}zO}?pnNgt+axvJ>6){E)ljZ?F
z%8koUkVNo)N&9INEt-eOVIRhwXH`TxVgW3iS|kn{z0eWh!6zqg?h0Def1U_fxyU2@
zM4cGQ#o`qw$ItLUhq!OOynX*Ep=lCj83!wKwCJ>#IK^5{9izM|1PMtorOHg4%3qX1
zp02Z$HN#C1wVZB>3N|}OS{mzOI1z(DiGJSSTygw|Rz3uQ?x@?~c%>}c@PKt1ON`^a
zr5db1Dvx5Q+%15iw}5_L&o_m>H=H|CC^XI7Ek6q=^dB?xy@LsqN~v~!9y7wqF`B*5
zh!RA}zA1ZnO6RaNi6Rk73Y*nN7!h$?r46se!gIN`gvDR}q`Dc>SH2+UYey&jq-0n>
z6+ewbH<*LGi;gIGssT-@Jbo3Ro~9F$ehe@DB%1r_!;lh7OhXzt22NY4jHOpdeTYjP
z##f(2Fas3?OluTAA}CWfJQt2tNU^G6XZ6%v0klM~y~g{P6bVhPbgiCH3Kls>j31V9
z-C+3*DoTGr!owaOzEM<id(W0Bz54)zI;N0HVb;T2$UM)PYw!+Ms@?DpGt#i!DRO{E
z^p(k|$JAa&fLux1KGX7tOV&o)Zcq)PSkUVJZu(Hw@DZj55oHIDCAblBb%3nA2*cM0
zoLN;k;cpqH3d%Y4_fQ{izM1r>HL-sjg>%&0n?KqRKC68rw1!n5EYikildT{6%IrcZ
z=)Ez4DW#zxX`z(`XVnzA^^71aC33`XdwhXi{R9Ztv5?!|K-!E5Bh*A9ArbLLbIdWr
zzM2fdJO7%8IMkpcyupqNG)s>50HtU9f?!~^cx&!fa8=KH+BlnafjzAIO2p!uG8Y!&
zpZ@$r%NUl)Dc!SEC;*(gm^#vOhx%ETlnjhQNCg}<^9)QYbk-Hnq`KcNx^g%xbbu^>
zQ!;)ZCYL)4KcTWaZ5LtWYG*>w)xM>&Wn4(TG)veSC81~^ehGojB-76hCfK(G#R?0<
zV?V|lE>ZC5y{|?o(Pwh?KJNWcaz75nRiv2ek|ORcHj8cQ670@!3bzU};a^aQ7p@_A
zJ0ytj*V3#>rl$vW_DImNUM<!kk&X_eT|uEw-FW#R9kFEFM<O5YIj}4T8BqJi=%609
zesypq@5Ffi+l={(=25#JO=8FcbZ{`@=|>BPaOB2$cJ3{)no1#T=&p1-+t}@_R299q
z8X8y6<Z(uQ1`#KB@EM^1gg1si)1WeR=vb38T3#;4pVYO3AM?miFOB>LqDU#6Y8>cj
zRv^?nO^%e7RJc_pcx%0w(QPFAp|cA9tUFh)bPh4v_nhILc-rKe@P~x>^xp=$GwL1@
ziS0^16ymd`Cg=f>rkV6>4D{VXRlkQC(afUpb+U;7=~D)+<67e01^ppW8V9Emtzu)@
zbVaHHP|cN_%o{(oy=HT^+*n;G>h~gcI1}pP#=AhbqHB^$sgAZ`sM2<BTs;*Mi>hPD
zSJBARMUDt)%5yM3@o25b4Hh3~3Mc7yC&4gKYR>b9c;$j0rr~s&^|eH35UmMS@Vta|
z&P!)8PD0BU0-Tgywq9jumRC%h;ds|y=bs-iz{U92po5Jh!^~{8&=EG$7IzpK(Gqt7
zWdCEW?EV0Z29ilSp~FV*@75nK(=4i$mr4Et!yWb2ah5IfR;nkA|A9s8oDbY>mGTBu
z!}kBFnAKqZ{NAXO@!|jHQmh)&F#Er2)GH;^^12oMdStnLSbZ06wA2U@OPrYmkM!rT
zYEZc}i*wOK?GzPW2J861k8!CE%z=%hueY@<Kk~~W5sg^2n#4*E(>usY_0NI8ReC2D
zRi&+8egwu%85Ua;hoG&8&yIX-vx}0TaTRI_gKAY!V*@c9?n5uVjeu~se4E3{$PNGT
zV(l*Qyrv@-)%yC4o6OzZTR!>aj53izNV}*!#uWCDwa+goA?!PIHaf#<EV8-r5l#F~
z(*^gltHoRn!+U?|=!$c0IsExoEQ7CLn|O7n=8&U+F7_wTHX657)7n}G1~{ri;`LuS
zE7PH$jo9UdVq5QX5f2gCo7gGx>ZMU1P*uJj=>ij^!pU;H^qXp7xxdsXZqv9q>TC!T
zA37l;_2qswhL1EejcTIb@x(T{-1W?6N&(2oSb(l~vo!Vb;2g(@K<=oUiKX%4AaaMr
zbMg30qq0HFq~rA;?)y8mDZFSOVgH4UJ1P<NDYfzNi7$`qndo@)9z<DSBfZTs(Nl6i
zCr4p>Z@+3C4d<%sQ{kCG)sduMMfFg-rQ*|@9|jRsL4qT-uAv(ypn0oftyXjHdX=4>
z!E)<5($`h5m<$)n(r=T7Bwm~5RA53k0kX3si=d%5ny!*nMKR1LfKfqK%u=9Z<>8=u
zE%ys*_C<8RlW~;jX<8Jjbm^EEet^(c&j0~ZAojsk_gK*JQ&UPOQDQohtx{eUEF-LL
z?x29MhIBSE%8jzDfdR{&fkFODaA&9<+vF?X26%4Vl(g5VqdrP_ZN!X<cw;F+SMn5-
zDT|isqBvJ!5@rdsZ}cbgN~W|oYRI|uYOp1o5a{$FZ$Qve?!p<O4u}lXWtJ=OS<Ltk
zvofS06!BY2y;Cti3U2R81Wgm(c_&J6#W*wk=+gBX3axT@?GZ`Wo>z%ET_c%y3kkzp
zUVn6bhw9?i^Oi_4U|S0lsJ(vEq0Tp4iuvE}h%{MA2FmfCY(-N;HExOX7s3A1fKlJI
z83!RXKE(FRjgaF|IR@sDp)wp^Jkay>)gD5tx3|xCp;olOAW$iUl~-D@lvhKKjJ|}n
z8460xHTx}IDEebTYM&2(>J0{ey#BSqXyP#AE`$*~pXu=5&f?#IG5`FnBs*=<<W!-7
zR)}od;fD0y0YfNm(|!la=@@pA8q}0};xZNq%tW4UzhsQ#A|tt=0+X-71Z&S%<|qsd
zgaOULLO*d&$DHDhkL;#V`d%7k#F2=kIxHsHM~iC2n<`{sibnIInk^LQdQCMLupX{l
zmkSU817ifWXP3bHgkm`u1q{PdM{3~O-l(AkK?hoPO_lVwu@u~Jf4`{x`a?H16j<61
z@hQ=r2c&Mz+vW|$zCK&*t1E<JJlhb%VH2xbBd<RhIh&hc@aH)8w_KbfKZz|FQASi>
zaV1sK@QoZex<3eY)tV57Q@)ov*yxVW19yLPx^Q&z+V{BjWq+!&$Io0Pce-@C^mDqn
zbaJS-aqy_g>FC?PjznmfOSE`lN4WgvNm!HsFER)b8)L@zZdZC#^Xl@p^5XO3xAGGb
z;+-#@TrMxiK>=N#w}z)@>W-F{zU;}-CdzWU4x78uj=rP&kIU4-8)$jN-j8JK<UUK`
zRn<Lj=dHTdq6l+B@0{C4mLRc_BfRL7KXK~-<{Tk!BNbpL<Sw&HjB;|{PAg4BYx5o~
zc7=daHG&wGR`g<UAwvef5wxe`Z;vatX*6efP+G)z<C?aC=dlSV`r*Fr1*gg#NEo|n
zWp@r~<{p&yEKW9w`<C7K2BCm1ih^FX<D;zFkBu`j#u0cTtqk8?NBNOO!{)2X${Rej
zcp}YBbNP8y4v4V^<Fg$cae4&kS)KAYv{*hks+JD0ZTm!q`w^vK#feqElY}TGrSi+A
z&HSd2ye#71&S3}P40d)*(qt_p!b)iw-ILlNp@LexRAB}*n(_Cy?+NRm)n@}N-`7dY
z`5|j6*gh!EfSXe}P;vC6eei;N&*%7w6)S?SeYw3A>$D%ieRz6jF*t_}UPeJwGG*69
zjW7&6)d!+lSW()Y*yuqS3-`0<*^UmM0`zd{J!de&9EVwi;9~amNglLT_xKl$X}f^X
z(q&jOh!nzQ?2Ty8PJXCEdR?0`H8NK)db(%DZj?le^Q^S7nAPS;Br-@<)sseJ3DrM1
z2}e+=pqVF$dxH9JuBgtyvdfB+QCiS&D1Rb^AD3Q*sEuyE$-?PnA5^9@+l7fL8&OQq
z4<A2;Fy?}`owY0~pxryhMDcaiNw_}LLcVZ6{>T)5<txgezxwU4b*QOfz!=I*Th4m%
z)_Q3Q+=Miq&Yo?uLc+@8PzN$#Qe8Yw3eht+LJW^KzL3lTvALGx<8&fREt7O?%pgt8
z<8-S?<#1qh@#Py@4FQt_LdogZ$!3SftNc;7e8Rke$DPHu)#sKGXkFdRuJp)N*qDyx
z9m3gL5P2isZIsWXJjt7SUzCt~aRAky+`W<0txZy{z!lLObaB6+28j%c(#t&l1;qU2
za{6$8{sM@my!Y!T3STAh6LK$CSk(E#K>Qiq$U{C>)p}`yxxIU&3P*u)7$IaN{6T-J
zoMDfLuS0F{v9m0?B;VGdp1;7n$+kF8Q)}on)~hCl>X^a;Pmm`OoXQf;Oh_0W$ijh1
z^pFA(BR0SdHsbasZ;-W5^<^IKvj+)KqLtk%OXwV?6x>gfjQ1nj&+s0{Nssr3g$v-G
z4G))E5qh^UOa-f^fb&tQ^Guk>Eg87kM!&K;nYgl~@ZXMx8ivrgdw(LyDgYA?l~)|~
zN4y-%)c9_rOXgb?54*86N!39eMD+#KdvO;0tz~~$sbX9$Ca>1(ZE%QbF3Sx>$usJl
zh|l5zt3xYADYHrUm_xIZH|iyFyFoP{;N^;9wo(&lGxxPMce%5@H)8c*Gy^$k*Y77V
zS|0*lrxRluh6gs_p750xg%$6`I$&p#mg3q}8ga`1%^2iyAnZdYA)H{BUn|C?duB#q
zEljq@e`Ji@xp+cJp)@jz*YC&0)I)Z>qddOwrHdn51n4BT6S<)mQ5_eL5-b5u^QccP
zyvi9Z)qP!Atl4~oS7Vr(r=y0jXQMpZ#Lj9QX#X@KTIu-#=$Fyb_41bX1GPxM33YqX
z69H7&M$#cZyd=xQpG9SnB87KBXf+-&72O2*=Ug#2zSNzk@<fGUp~%`8boZ)aY%U&$
zlOs%}KVgyhq=^Mnwg^>N>)DNh^*$uB?m!dR#3hd!YeevRwya2xy9gG9p6=G+XT7O7
zoQof(T|66u!{oF~KHaNNf#>hr3(01g0Ffb?0VTf#^GF}44ve`<q3|rT2eVfWkO&(N
zx}QF8;fIp0-1I}+0kTW6cU4+?ulH5hlE_1LmYf1vr)qV_{uH?`!q})|6Ro2gPW{t~
z!=p+o7=6})?yS@+pTv#&&vKf@oVa_U?3x`U=zl?>$smbMHMU!0`R7?kz}Fy|gfvZI
zA{VBjBDtAGPHYq2Htb>CIDJlt=!0yKt!<uct^HI^g_5w7-u?q&;(y@W&zEvs)5}c$
zbj%f)#3;L9Z3VMQFOmm5MHO;#b@m*NTHPutp2;Lp7Us%*Z#Yq%I|1kB%E<*l*Z(jf
zpc=Dg3h;P|{DIdZ>%TR@NkiLTpv==-m7HOm>dwVC%-~Z03^4UdO^%z3qgCy&tYe!!
zXw;ue+vh?U3a`*Ne?{yyHW7h^2B4S)Wrr-v94`EH%35)?VT0!xwo2ksaF+`soRm!+
zp_VreBrK#DTg|Nf%zk9=A)k^w$lTST=qj##wsb=G&fKGcnu$b)Xtw9sxcC<o+<#=d
z^TY56V~M<ZoWc&bak4@XQQLA$OUH6ucS7ED1{NYYC}Mog4OtKJ?#}bwa>k52D2Lo%
z#3;|O-)0}@WBe2t{6+OQGttxU(#gx&!NEU%a_#iw<yu=?TUnp50bQFg-{BIQ%h~T4
zq3IudTVGpSJsB9=BQ{A?lb~E!lA=$Lz1|ctGA8%;CnXg#{;Tbc_4UoW|1q&sygY_1
z<5~*ZYLkgIsCX`>5|t9e;#3Pc*h8OBW@?5)xZCU)jR%{_%_h&~%#<A4lJ0WfUAIuv
zJH|3+yS8rffvE6v4WKK;2H#xJuyW|2qeU26(m{0JV^5$rwQ6sq;k|k2`(|dV6K+8K
z-lT#5K_(YZ{gb;BIk;UXi{AkD>aed-wNlFScS`_P4oJzyG<;)|+n{#DH}MTDE~}14
z6*AkLB&N)@ZkdB0e)TsV=Z!)}hid3CX6DwB-UC9C+XsL6p&(;4M{5TRElLrp``;B(
zYWmW76#A#Ptq#+InyjYx3Lh`u;?gQ40Cgr!0q~UibW&@Hl0oy0SmiKC_*N_o-8>9&
zV#c)kxG9M$=T|XqBDJzv(a5e201|aoZ^EQ)tR^%C{JA?HHa({PJM~1`@e6IAj_Tff
z5opRvl<#rM?UiR814M`RzZ(jXlr%9;vYN+#CxSD*Sj<Q-Vx3|YBQ2V@3<{ASe5jZC
z@pW54=chseYa$@KFZe72c@kIX-|p+*81u4I=WvaqsPw1TsT4Za;+Mm4R#<HtU#Uy=
zoj$wnSZjX=y4?WSNv17Ubvm&v%3(f@H(vOBGYp*spXr^>Fl=89TJX2=<3|~$^;`9;
z?tFBPg>Wh3U!HIF4e#JOgr~un4V){?*dW&asJ_kwc359G?IFhwZYy&wk~iN=BqJ)R
zy1}eOVpBSnflH}+2fLmtHa@s!&w4=Vbr=MYCfpHt!(~}vtU}PQuSdL(&!h9jTyZqj
z2$}8Bm@8-gMI8Jqgkf2!=LhN2mKXdls41*PmW>kwx<V4JtkB#2v)HUFGPvn_>$A@;
z^98Ew1{zMTWCKk;@rsQhaY~Ci21#`FBB~u*%<-qX-0UQuWGX$vW+=YU&9=#zomZvs
zuDrF8ra!Pyu}<PyA!_9>L*Yg{r`Ece=i#=~wxGYuek&g}pgEdRV6|(0>8EFXrom08
zOW97x8jdsZ3+h%y^V8yZxvKlv$;>{d4n5yddpLgVY|4tCb~M&Io&@a;2yFPDR6Ylm
zJ#aMvx2dfyE15@DQ>h*r5zhu_T=3}H(biFkEyS^r$QrprInKcPQZ;Hty9FqK?zoG|
zNxDq9sOW5!9jhW)auo2vuWiT7bv;d=Q{@f%_iT?9AGsKM+0Y8ke!d+dhE|_AN$PNa
z0a@ue8uX0feY9DcQB7~lM1lMFe$oR@VvX29%lQLcdCc@t$bnH*ABDbTXTRX*64N|r
z^YnQ7ax~!X0>xEU`{u|}T9<K;{o<EF^ouoj=yu%54SeU<9;r1f@)0(g_+Y)!(rT~-
zXGD1V{}2c6Wt_JWPm1+gK546|>KB5hX)tB{aBXggi<LW5QB_WMyx#+rA*W_pPZr+Y
zc(GIM@Z7#aH1ENt$LBB-;{+|}cy`J9wLGQXz14|vndC{*YZw6j$SC6-JmU6<CJUP_
z_Mi?|Ih&Yp1E#z3u;pkmGqL6Qh%0Eroyo3XF~Sh2LtCqi;n}6v1d07;_mEzjI%*}p
zrhP$pPfnq#-T9s@?svShVLa{ZtWu;-!DDbQM@b{a0~b*(O3~)xQ9zcvG^%<nBB@L0
zs8;2t^Tiwj(OdOne<0RV9VK4wYMm5js#vrJChyb$1iZP9xUVejwvY_P1~y67m+?Ps
zPLN<QcJ5j3lxS8wHcV1|6&`*|&#rJJxJkZg26KL%O>4nL)4t?VtW5sX?PV9_G?Vy4
z>^lWR!CES7^iKreq$j~kpkNO-pJz>2oqS}}4Z}!Kb;%wdEjYjBKxzm<Icf9Ay3xpG
zu<juChXFGaJsVrJ#-3-63TkU`Q<#&y`US;M?$@z@XzJURr+S>d_X~=*Wx}1)6BK*%
zDS+&NNrM4CgLU#JIY$3DK+#}lg^m-FgpHO;wtm^GcWR1{vDdN$ou(xQ{C0%s(RtB*
zPz<Q$8WOFCO{-@=Q!t~IW}Cw0N(z(V6OWK1jF?wP8LX?VuYSr2=MJjg(a+nc-FA0m
zFpi-LfjaOm0mom*v=N`IvZ?>uGXG5!tosNCPnQdE?^7OAVX4nqqW*lhxAqGv(^!O5
zjI?uYWo6~=e06Q(Y}w?++^cJSXl?BwH8L_H^&4VKLX!~#zg!6kAM?P|V81(0FE59B
z3mXrQ`jQHdvUH<DHo=Z;qgR(^dM*wQHWeN(Ti`;y!;9tV;o$OS;pXM(<%4#-EdMml
z`|EVr>7jpGaDW289L`_(;cGNbAyaZNhUVbz-aC=+-^q-FepKuE-qm1OLuvig&C2k7
zr#W)2<=5P<5%?;Ww#op<Lo_U|_-b$EAei-8I?FX1!<4@%jMtNKr$^CQ(bm8uoOxvP
zXEf=!W85%TRBC%UbpdbRGnzbfFO&rUB#l+)`~$rFn&{K;sy##Lbn&fz*cQd#uC+ng
zR>6FgUr>TDJ6oDc12fdz#IKHo4ak*|w6YKAtO$P+k6keE(Efsg{(JqJIzBT6+C2EI
zakSeuf3l(P7Y8!f9fG9LWprJsK|E7JoH1NsD(=c=)qte5?3|b<n{80O^@>}6z(!@|
zVS_nEc}Z$M!ObR4$C%6E$NcR0YrDetLq`~JC3bhvbk)AYMsD4mtQbx~PMF+_T?hTQ
z(ZLqN->QkD+yLxDR&Kr*roRJCOio!Xjcx0Q1$Y4Nj2y6nA6ORc7%e!_>06r+*rM&~
z)F+Adp9b`&dGoZKVOcr_A;hJQuqL=$arIggx@Amu8O`TC6lxj-^yDRGojE(AWsxI=
zx0+9OjyayVCajjwT@r0}%RFgAf<^84`h$BV=aQ~ArQul93fx^qlD@s_Ll}w+p<ydq
zb~`PHV!71LCdSmz2IcU><Czz_*0%e)cXFXtGypf*&vSgUShXLJM!ArA49v>j+BOBP
z&kW(a019qtDF5ZIETwM0Xu}Sxh*4kBb=TJ&euD>8OG|ygs?B3Y3`l(SN`70Gm|8_1
zK47o5VXPfnj!i!}Q*qDDt`m<-cgeMK4XS_{6qOSZ5tCzEt0Svz);GG=43Y5x3wuS2
zBslzl?x!PTqG|xKpQh49=T7Q{8)u&EgsJ5+?bwD{^N@v)NEFK7yw|{vQR8e!nQTW1
zACUc_ik8stQ2n!ISRp#*tqILFVId)m2rov|7*_O2p`p&{Xeo07aMndl+uH_^IIzb>
z6sONb8`|HOj2C9Xcw7%fR`~`YlhG}>RLaO8a@If+i%?)sMn@;in+B<-Mrm$vh7C2X
z`VF$0wp-;g3nh+?JDF0e4g^fM>25NX%k)hxM|L-x*Nbh+rfl{x?I(}80&SyJEJA9{
z%DoF%R{IULJ|DGC9En?@t2ZS+VTd#}Y0vMz{6Eyv|Hlm4|4>Uu75DXXXKoX?&*S=)
zpN?-I1?w;XfY=$(&0z8tV)o<c1Wo%}z5AE7=L@mj5)f)*jCUTBAnw{C;fvV2Y2Vm-
z8Q~Wk(KS%aSS(N!BKd_f<=I7<W+R|yUrabm&R1VCPFi{5+2bI2L)Yj!X=1ODl&Gtm
zM<{M-_~!_t!!1U>)M$I2B}O0GYZ7C@aLj8<?xaz<kbkK~d?yFa*Q`^V&W^9s3DMR>
zs?j&KFYJe|fu}q&=F*1uUM8tK_F5dytkbyJU|fGRA3Z|2F>1PBQ1wT`eU4F06I?4p
z>0UBKs4PCQ7lUpEfriKjPuF%oVm9rL;PU04pSEaL5v-?-x{()EQ&Xil&6K;J{T)l%
z`I)CE-zmIAPJR3ZRT1pMHhJ|OsnHQ!*9<-6*N!>unfuj-et0nv?ezuCfQS1-b$|Z#
zD({@NHzUtWmL{V{p|Dl_1VI|IxKBl?@gl`H6Pe<HddjHY){~IhK|IYeL!yPALSJe9
zg%w6%$m+pHyO9ypQM*tCy_5e2LuEvlerVN*#UPtZIDRlq2DFu>9lgB>1{^r?O);IC
zP9c-c(Iqcd-51mkf|gZ?E?h_z^lKw|tP9L|0T<hFNlO}yh1~MV3&CYXI^hJOXJaGr
z)R2G`Xvf+mdDlMvYK|E!)83cw{O+V-iHIM8V*9tRv#9|oDN8AqZUT>;h^9u{j6}xN
z0h>;*0_H4V5_Y3;Q)D@-r*bEl#Zgq70u2XTLPk%q#EzRWvg{YPtU7+L5=ktqhVLB5
zg_8>^>^67jUdxa=T7R@3QJ}pRWRs+UMedQ4SRPSn<uSI06Ac2?@T#zaUQD<HZQtMg
zr6nsRlMN;ng60&B6K@XPs7YJvW_sn6_@yZwcZQwGi5Bgs+;T>ej|xN`*J|Ko3n4#~
zR93B(s@76<c^1_%X&ns9C=NASmfK09PlhN|d8p?G>=<LgEx;Id_m`lUHd(H6E4H_0
zrEufH^(hxQ6jdC8lMQ>Nvva^{{`YKdtorPA8tGj@J-Y5@^~oyHnp=SY%Xu9S0dh<o
zLs1k4b|oKjHLQecjGm!XVmV*NCj4kmz2LJrVMdcPGO|9ZYHb)J+M|UO^rUzKdy}37
zO|)+hWT`6Q>9*0~aZ-|5L*AtS>gK=5FTSg~Q39Y`W$o<A41N4%>nS(e`_|)8b*tS?
zyC|!xmi%lUtdqq7s~I9Q+<{QB<+{sAvxi4&qd*>_c9y_8!6*DobQ`XV>J9kT4pfT1
zx;Am!2<BOl>>+YQFQxz<F6ln<oMg9^Zu;RVh86m~1zH<O+Rw3-ei5qpb$+QG*25bk
zeMhBx@2=2U&QJ^3K49?2#-n2a<Cy&e4VFfi@UZ06i;caTEAbA18BYp=jx?S5x6WK5
z<4-9zw7T|-hJm}QI0v`0PPut;I8D|Vs$-Vzn>w``)c7FNKS3s+hF?&hr&T&Ln*4uO
ziz!(y!HEA*RoNq^DwCX$f0Etn_=s24)hETX6mjXnJU{29icswo5~EDT*VKX%Rqo|4
zpx5*^?VI!3xMj7P1Fwr<bG}UCNC&=|Y@&P;+ygKxj-Yzr&IA?i?7%+k;-`2C@<3n~
zz7kFZ7c^K&jni3rBthafLt%>ckS<(bOg8i2M#%UzuiVgww3=T~8y}p)^~NwS<F>L;
zQt;JJ!a%V)C4KwvR$V*rRa1wna9C35RbSzDdNWVD5m#>ro5xb5-HYGtF)L#Zby5Dw
zWb!8+2J%ibJ*fVI>Na<LI|pBRg|E?38%*>ut~rd90qbxh-pS%oj66^zPh$HI=7&?d
zW-eI{EB>4IcB)e;gSRAN$4YJMxGn%TW5;A4FB=r)P!0?E6wRL(CEpMJ18n^j_UpM)
zFUg=eCZe{O@!=m>Di+g?0z~L8MRX1Si6xqOyuatKzzQZlL8(}au3hPC@I`bl{=tAz
z?b>>iL<;vr9KYupZ)n&C39WyE0quovDD*@$(EDEX@YX$Ud^0roaK@|)swruhBS7Ib
zb{O>S;D$FA;$#ph>qlN>^mbOm@2M;|Wpiq1`95Q4wA43KLmV_+M1yxYyzWRYqd}4r
zP{u2BDnd)+>^UH!u`DsZ)q6pBKZ_)O`nSw4#J15F)ofEJ%j-=xT}!rtkBNwAsPZPv
zFcg}{ZX(g)!G{sTh9I7|aGG97dDkhgY8(jM^&Qy)t+;a>{jNVUhqYAiveQG^BOXe7
zlBXCe&QVL%^7_ORv0YjdD^b-_p_O3s7=Rq<bX>JgWHYc)9MU1$rmQ<v`b2NHOmRO%
zQ#Jywtz~e`dQ(rInbVAsc`&en#wmjcj(k4(HJaAuuHk#5gV%+AjKfxX>}D^axMS?A
z)GW=rlBCQ82H8ee^Z|{t^g*;ywHHMFW)EW}P8)BqOQ6SmVp4$u4nf!*blw(}e=h{5
z=shIqhpsdBv>xB~_PIPNxMSNR8#_^Fnk?uQj3pTQl)WDmZ`Cfw`gBdKjAj?Dn@fOH
z0pCz5O%hk|yW)|@BejsB6_d>uQjZYr3F546=31rflhER@lc7}{%$5z%EcRujHeDKn
zCmrZu0Q*$5a#~P`Eniz}1PPcONVAs2)^d&)pQ3!@Q^E{_q3B(}!vV-*Ityw+jy=y|
zF3k0{wh(&PZQ2qE(AZQ;p=`h@da&tnLWW96kBpH)K(x2l>*`B`h^LJar;o6?bW_u!
z@EOSiJSd_Ga7lQ&p~36P_EFiLZ)kQZw<2@p_^(uQ-E)>&k8L6<yzKKZP&LaYpRET(
z4YHxtDx!-Rm@>O>%E=08*TTX}Yc`ej)JM|ZATUw^hn20tJ6WJ_8;##c+Yq>@Ct&!3
zKS4zJkEZG{<K#ECbW+`O*W=`L%Rv!pS>`_k**&cJEGlraR(?U@LvzFS-EIIUf$<&l
zLc#=9SORpGNfzuVhE(c44Z~=EW4D_Fw)K|F{oHZfayQhLp7d)=_ZB5xq0TXKMZIb)
zI;;sHSdRX-9f#JyQ$I%szIU!K8p91EYeGV3*I&WlE-p^j4|4Dtr=$NDdv6&OXSD5k
zH|`eP-6goYTjMUl-95MjcXtVHjW*g4+}&M*I|Kp*2q7=$&aFA8-kSL^RWmiWYR-qJ
ztE-<~Pwig4s`uV&{nmduJmKIW$Wi|0y=OdYlW=yz%Yr6-zAuyvv@zIZNo-f5m0bHy
zi@jolm6&V}JJ5m2ZuqrI&$0_eEc|;YJfYmf$HD=*SF?UwSK|W*D6uaSKi^ApazRMb
zoPz)9FXgTfsOD$|LF3qcBGnuV2U+fPE&@vE>&0H_PP(nvPCNq@_%zucsBexuH4AQ*
zJzo7z%NFCq64Kf*Qbj~5OZsJ9q1Jx^@2Sz;dsCzeA$;XAG;T7y?lzksf4VfQ?Dh%+
zM9PyBcp11N3y#Fxk1Hd+oO<udJ$&DkLbqNv#%*(L2+nFMC4s~-M$G5aR`5<GX+^W)
zm(RITIobH>l0)g+SGnJ(fvUWm+g6?BD1ig|LX$lpy~G(7wl*zFqiA#NXr--Yl5W2-
zQlHQc6(N6qy!0vADicA)nF5RE7&G;h17ae0g)XhqXN|5wOu}#MF^(ptRUUj{Tazth
z-|4B}a2%UaP<qih24V8+q2AzW&4T;>a|cJ@DISHL9RfweK_j7{jj-nQm4VBgV^Ble
z(GASs(co@2f<>ZOs%|UjToNDIttKw^rHHIX@kf?0jRvk7x)EDh%|(#KZ)q3C?k5sr
zX3mk&{xwG}eH;afp9E?YWIV@r8CFqw!{jAr?1d8WaN!ZJIn9c>AEIC%WQ=)-OKX1+
zQH~4LATLUs!N9@{f0;AyYhxiuERNo+mlBZwaOVRfh=HPrWc9LQtQQ62DoMXHC80_4
zY63SH58t%DN@?&83V_^GYt5#&*xC8WqwQ+*Q5S4JPYjF?Aq~DWtv=|<A%MHf09K%m
z9L##nWpApt$Oq}gvO)tiMAgPmtv`@DF>*@mu*f`OkrCKs#J>MaVxnjLu{6eZ-OyIp
zr8ZWiFL@$QLkVok$)Aqfkj$@WzUm%1;Nkt-W+RcdRMHW(&@6S5)v3->4aDqZfn7p$
zYdcf=Lqi+1<G!r0&Rf?yE>J3^;5_SyCpoFezJksG_NgmRn?|`r%gmzU9WYeW$gJ2R
z6hA=YZK`A(C5qT&<4lpVR3ZsnQqf?Nb(oAhtzTV}wdU@C%*G&Eaep%}ssb#V>7P(p
zl7maexpEv~nwvV;;x`F#S!LFRJnUf+RJ7yTudb)1t=xSln%-#sxfyV5b^4;5<Lo7e
z#Icn_%FL9y6cgTHHePQ}Vk8%;#vhw66Xt95A7gAEblEswBZ&&2Uw4EfODWf#O`(vX
ztHFK)K+6I1O#zd4&D<WCdbnYm%obaaQw9TLhU+)FoF-DcFe%|FC&~){gY|OtA)00n
z9&u=7l5TrT%ngMD&nL3e;eOL>^`{#+6|+K?FhiBl?xcG2dTn&ya8gw!jY|yR;&?DH
zCT-=E!*nsSoM!hg064AX$()hKzI3XbmTAy84`=89uiwc*{6SoY6X$w4l%v;ZyPlOK
z9*{VMPo20Txf_y7$X;_$&Ocs()`_l!dZdIwRu3P)T#aBMnNsj2Dn|c#yNt~>pX{io
zKEKNR#Urk1Klt)rXw<f#L@eU1HrWgV#LHwaV_>rteI_-Y2SGml!-T!bbM3i-g)A30
z0CHD65E<E-0QY=vUO_kmok$NF{Q-xSwTL3eA9`FvPzULtLdi?7fbMPnM;vrG0*cjJ
zVLKMo`d{%91siN0>(hHPHLw2vue!$Nq=w4!_t%R5-OS|w%Jcpwd}Yx_48W}&#$Y-C
z9L`ZtP6>~CpE7E=pECUNruRrrnbtxJkOPc;lcenNkF&GIr(pN%JmPk55_Os})>e&=
zbW^<JAYRwt*1=D5GVeipvZHOO{@Hhiyi$9pp>1}>0j*^t&G>dNE~lYmC){Kl#|B<c
zg`VMf)Ta4hAigq#`4g(!$-ec)gekVpkCjpku?`Jh7>|;-v7TeWbr`g|h^i20FdP7U
z=T8pa*Cw&n4}b$__}1KK8^q84PLdTySlazn>qC#hR;O!Qz8qj24Mg(#N`&GI{Sxm=
zlf~u?&2K+1F!A>5_B%X2D|{=6E|bc405#bRW99j%nNbe3rk7Ic*_xhGn+;RcibxTL
zu@n6Ro1o%EJHIa5Z+`q7Z6@)sa_U+{5ytGMB&8ZXu)dE^DK-iMGG~%aqtR)p?S0HN
zis$~>&(pA)GuO!4hWspmW5Ij*bwDb@fl*enaW17>Z8R?W>gMb4Hk|%G-nerEo^5<<
znYZz?CJsqI+x%Q89e0w|Y1LOZBj7CMx!Qm7L@RRuL%MDNEHF6)#2kzMBuhUr=k=DB
zgD?2xVrtG_^Ypu%tS-T%vz(>H8lsm2iWyhT)elcxk)f}!@5tNX+Iog6$heIWdf@)h
z%w;*3c^khS%Q+=UGO3FF`(s}6>JNuEWK$LGk(|mKJ<&l&E3^zDN65<;vF6J;sDGrp
zQY6WShf>vI8TL@VN!T;5vy+EmRR}_tAYa^O#g}~7U&rtveB*o%DNOxyo=7jU52$GK
z+zL0*-y0QBw&40{ki0^Q*=wo+1z*OJ|Kqv2oe1gp+|5q<K$ALqafhS$6Zd7ST@Jdo
z8juV@>s(@Ozn<ShnwET=plUIIXzDgq0Hv9IBypvSi@3dczd1cakIF5xT5bH2sVz2n
zg^n(@KUJ<Ywuhd|CmbOPOp`ygm-QT5nmD`nw4mXE#%iJv(d;j#9bJnD`GEVG8N-0n
zo}1%@5(%zc_X2Q^|LGy4ArPTf;(O!x)^Z2}8Pb<P9mG=3u4LQ?kz;ATvo&;Q1Bcc3
zwfY}0+g|`lA|GkCX;jVr6b)%)A0T3ZquLw-R#g<+4`;6BpGy0OL3a0$oFY63UG9jY
zVf*v-LEpJPnO4Zud75{;l3}0_4!nwILp_rWm((71M*E0GHB?qMd>#H|0IiY8A0Ytz
z(YS7n=a0$B>QIV1y65^?Z-%UMiws>ejMQLNX1DS`YnT56M{4MRwVg9iw8Y<wgdOkE
z6PlQy>HEy!=8v;?pm({?oTm2+2?x-DJd{zd5A9xR>rDR_@R3B{nzL0m;mjQE4VXuR
zM&)W$^@S4h4Y&}N-a+=U$)T50hEge7HHnA<l|cPf!Hh=3XIM<Od}=aWkXFStA8nAc
zd!V|+zmp-!RDiko5Gz%)R<Ip<e}$oGmO|``sfge{Y`-so=@S+D&ka#~w=1P=mof9R
z&+6Hv*H~4#Zcx9np8sW`=uIrBt1p=L^7Qn2xp%yBdKfE9S&PIsBsCJL@2FW5i{jMl
zezhn_{Ra(lx_RK%*5>g%)}kBN)!P28{p{>7V5ME~@$vD%ckQwWY8l+R-1QeAC-=vn
zQ~riZqWc}y<s?9&@zziH2Tt;^vNN+XTLJ0lcCIh@4>hdIOGmdCv7CP<PV=mkW4r;{
zusv-QtEOf*q!FYEO}{jTW}0I(mrd7rI(n|xSm^LJ*i}H?UY6dD+hKQ=6_lCs+4j3)
z?;`G-+)G?ABgW|T96Nsj`lNY$@6{;Ne*v%NQi0^om^io2XdV2?F$GADFB4@Dbc`x4
zEGOl!h=DBLPA(L>;)-c$2{Gv>oeVJdrT8S}0v6x-RaIf}mn~Pw2}uhJ+92Sv;#UQH
zXu7`u!hg;<ca(-XO`no};lnr;4Y6Hu5Diuo1Eh?4ZDu+5oy9;n>xOCeO{GzS?LoDx
zvVS%6IP}|ARsw4mGa98kcQVN~DxJ);f1N-DaxaMlv3I_MjXJ)eC-&3WsRfm%oYCre
z3DO6BPZgS)RgU%4B2qZew$;h?IJeD({dgg!eF;?ZD@d02!5UQreRXsV4|GO&G0Vur
zXq$G6oG_022~vZ%cqdO|?`6f4aT~$uZwCg>-$vdQDH7};zlavSu6Zghw%#?UJ67@<
z-0Ju~{a?7flt^pW3}5trc^3a83lJx4BV82#1?>MfA#Z4CcrgINf7AGe`Iq-lQ171~
zs6NiY%$|^6Q~wzX^!g)+qF1&n^A;l}QKTzc8z|oD@G<pycfsK=pzyi3;He0%ci>6%
zya@jRp^x0E0Qb+b-yew|2<tX7!Cs$w)dHX%_2*5tbsLt*0fCvGy1%q9{yp&D=J|ic
zDZrhJB^P9-C`c&BFiQ1o8tEvlQONnY=mtww%mmK}qq^Ejm{l)LctS_G3cQR0>l5-$
zH7{p1F|`-N?`JOW*}niku`0#4CM33|B&7VRF-ICyXUp!6(0yQ*U#+}E)1w9#=ZvQH
zx{NmvR%;iDzHNQ9tKK7YLU=OQ<(9c@&{N|>71CK39{e1m`i$0~=O}<yjtCEU-J`y{
zHE11s;^HGZ>jD-9`KBlqPS8hH5?JeOXOO`%<R;YY|2SJD8P~fhHP3HFFpC0Z${i?N
zFN?({zW4`T@s2=Es(~D7hglZv0Fbo;%w`z`5H>*;*3^-7|8Yyg26tmF$5xkgKD%jc
zlzi10sm~%YV+C(^y`!rICJLh0i`#pTo<T0j3RjIdn%FbhDU_LJGd_YpT1J&URrQgv
zPBpnF1dmQhjz}WUQ-5IO(b7AYll#$nfqKgzLgMK>mR~x_oFf*lAlj|V>E<{y-gCwt
z4OORah1Z=kG_&zfdG)XoW>ngRIXv{o7pVY6Dl{BXJG*L50kx6jODc``KQ9j(rn(Zr
z$~Vx}<?CA(VhIzm<OR0_=4t3yggijk5{ECu{3wln(V-7PdTOE+bNVpNGQ*=;Plm^c
zzJAlf>0!hYWSEu&$t-Uu)=rW%J)b(cuteph^|iU$FG)$IXZ#QwZVpP%YsuqV*1n&Z
ztS#~L_t_+vJ!DD7Kx1Myh2?H4p4=-w^Ib7Bn?9o2Bf-NHh_gP!nlGcPB;?xuJ)PoE
zTNzDT@S~*qqNzL|No6Clwbl7OAf<$;_>GkY0otY1QFz-!a?CcWk!tL8kzZFx)b+i2
zqUf*o?bo-Ml={A@SsfH~iY8PI6#RTfHI*K08G2fJ=?#gdz!pT;cU^Q1N#M!{%UR&V
zx|QdMTaomOZeN9*VR+>1T7_Q}DlqMm+61{Q_6R}xWq>0v8!+EuMBnwy7mSo9qP5D*
zT){iqMqp}Aq!*u_Xdnpt*$-aeu>0`-uxrR-->kUAV&3&l!$AFa_?+`L>@R(<_EjLy
zrc+b=OblMXa$E+=)OcbVYKp8#I0Y$1xL>#96wW1gDq5L2ojHvm!}g*sQbm{7;wJE6
z)yX41NI#jFo1qONNMejPL}_E;K}DO)X4K+BvE4nk2gC3j-MYo@o%&)65p;quo%L`O
zc#n8gLAr<M#y{McHCEk|YGgKZ7woKN;4kg4HLXyaf#jXc#^J7Fynl44p3#>4j5453
z7rXY8mDsZUqJvIDQ=%5ImzGZ0z>J>mcXu1zsV$<eA<0PSo!2R6++0EgQ4%^ZVyt{m
zGB;8!7Ixm<^zdP<(7SIl=6=1KTQk(Z95+WXXO*O&=RyLlm=&5;7`?IxOltR#fBVt?
z%k29LbbLouX9*sPVxQEOc1oQUqX6Fah<-<ER1!~kxDQ=F!siJ?P-0$XP4+L3e5dE$
zgT7YR55}h0SNH;aRo}(8#*H55N-=NbV`y)&pvPY$%}1jSNO}Se_Fn1YH>;YvY;*mc
zk|Z|^V6)&(U8%86;hgpOI0dRhNbY70`-xGU*vAVIVXd<gJW3VliU{)xHmk#zHU*vH
zgMd!L;aTQQTU~yC0ZPQw9{ezCxBQl4=}1exhdm9KM%gcr-VHu<Q4iF|foIjd6XGC=
zA0g^t*qV~-(YJf*SPc49oMCp)HjK@&U&uqE9Pf0j&4K$HRNG+7bbTwI5r{(pINmQ9
zgT4P!t3`8Fy*b4lsB1w@Of~F9^v(27TG@j8^aUTIV{SELeGOej=c=Ox|BTq<>d6l%
zyT1T+quOU-<G+Ak?}|acN?(3rFXneK3v;Xvc#uSBDH?><WhFJ+p_{kND7ZUH7!z_T
zorSite4t!9s4!;Nrso(N<?=15TTy_#n2?69MvP`nog`vVii$baqqaFyaYA>&9aVB!
z+fgr)Jn=cF_oUG#V+1Rq%E*r=zD|I0E3W8~Dcks@7!8be{3*%5`Tqr^n55K4BW<Np
z_S_g^y3y86a49Tvz}yh-;Yc5rLN+@HI83iddzj|u&z)}GoF3(dlX#70nVSTA`%jXp
z{{kqC*<KFWVjCm}{e2o#S6U<)yLhM5UFS^UE^%XjkZFia{>d0fX{^^Au(u$(Dni}S
zvBP`|xRVLW;wP(stRQ5wG4%|9KyRZ5Fa6_6`(vBtBKK;-Jmsc8x5$tv4jwIcPv!cn
z{sPu?h4>U)=$)VP#@cmF2H6}=$->W^G44`nMfL48A0AZQ<gmx|w}yS<$;P!LIK#?5
zpb}n+PFLWjM+`V^oiOv-CbF<aKwcLgT3CSm10X8eTV~ybZDd76nc8|Fv>m<)CtG3T
z!Lyz0isC|DED2MKIbwSteNSG84Q0iGygt4Ud+r)Z0h^DYeT#=6`UqRSNeoO@x@8K}
zf^a(P(-gRgAvn`AG2!vamh}$NrCDzi$WeDmyP}h&yqzC75rk@gLvfOCj4=OLMeDP$
z0;g%XoLXm^#DT&{kx$H+dY68D6rJ0wqYoZo6nw01<9l4(k=k}sm}8}LJ6If_{$Vrd
z8p!IFW_vt!duz4$;})*v3e55-IGbT+(TA_Vk?cfuwdJW5dzGw!+pZvo{CWSTP__8z
zS&|q`<i+p1Dj?VfWHWQS`(y@=g3c>k9o6|XSvWDA4`!HMU=TF)o=@DM+a~vSiEZ97
z?4%+pESDIS;HMdw=V=`tGN%2!BYX3L$(r1}Qhf2OyDQA0kBHY9Ll$Ma9LMWde>71<
zI9a!}`WJvN>T@*U!9QdB?V>5Qwu}IHS)%>0Z{>eKz7}j!?u^=~d5Xee4{2XDR-2k|
zX%>vkR`00`%$^15!~AYH%#?xn?Ug3&lQ1(<i3yDJLiqyKbn>U{6-C|kMxZ-07o1Az
z$vJ9s2->=wu6B)mhIgk|x;<85chtKpHAT4?{}fGKAUdla;Mi}~t2X5E2b7svnm7v0
zm3T9J4Y*@XH}A629;kLHiJ>q0q^`JMJ34JG?CV=}`%Tk5t~-aQzQFN=!;xA=9>tfS
zFJW+o#5Hf-nC6qZTo45zCGTfr9v%}foGt5-b9C~Yvy0N6*Mn!`<LUv`UyNRwKO{^C
z|A6MWE>bO)4=-fFR+3J@&3)Ef-$dJYQfB=w?yA<Y)XRXBY2-^A^>KHeR}!6$au-TR
zU7}D({ppNV2b%pz4C3qp6m}x3XdF}DMygV4&T_tDJm;qMDc_TdkI%A8;oV+?{|2Y1
zLBgw_`#M{@NUv6EWVBv)p60f;@=}PJ)EK{z^;p$3a(e8PMP#zmM3ImQQ-|%YPF3-t
zpn2ujvl_{_{bZv2ArCXrzW~8=vL<rhw9sPee&^Nls6s3c9u*Dw?ZqoEdk)SUG)v9R
zqrl_o_K8AA#=vLkT+oFI|GwPzWTg{F4~yOGLjDn-%3K*6)4qy-js#PSmR7d-LpnA>
z)9*ma2&$l9rkc{NlFa<uVy_>KI=jz|3n^WAf@jPR+h>^#0c_kfhE9Gm!-?gu>5+-6
zlb)YW6>5)fpO#CMY<Gd!?|wwirg-+|;e^Aw$g7)HgQ<8C-{I^TTYcd*oIB7+)_Aa|
zk4=qi_0i3fW-YxtOq#$K3n^2GB8(tWdw_7ihI0zm3++&FR`Ie2;&d>e{|pPThXV;9
zm*!toA&zJiso~kmuXGpE_+7Ao`E#!|fO6!F%}DQisfH8SmfvMJGqSkx{s+to#J{rF
zCwd{0?SbAqSeMDz4v3}*G&Qss`IXqzKaLFjn;ML492x65GylxHdInCf_ZTyLqQ6~d
z4qip_Dlc+dh#K3NU&XZac)6o8N8V|&Hj|*w9;cXJ+}7ST_DXYab_}wrwGlYF75W%!
ze-3x!7P9_J+)-rkuy88zit>BuGRr>1UMi(C9qu+jq(Nb|*aDbrZD?7EMI}`h5FWQe
zbh;^f6Ts*3ussG>sq2z%U|46xf}R|9M(jwYla*dJ#+DC945b4y8C$iq;+!5)Gv7m!
z-IQ#VWo`Z~2hq04cI#WU;+nM*HdaXYJTcYCIuc8a6l<|@RuA$omA$Dsw--Kru(QKV
zg~po!6R0fUqHz!TU2n@>uj^FZ<eC|L_sAJUgXqnc@y8Rvr1>{|g*=8M_t5%+dhU-4
zLo!+}qmjEaT61YEk-oNkrA{g{EuUkEPhQ8lt58!(Jx!Zf`Sb}U^7Fte{oVGbS-lnU
zjY!hs2I`-6SF`smsJ}TsUxiy$p!kJ}wB=#c%*Q2AiUPILJ+l1$$bR(QWU?B0#;;=S
z?|U4P8#Yg^2qY{Q`UTGW;}?rpHG57Lx+r)P5<RVt&~P3ECr^GexyTVS!kXy*3z$6B
z`ZWwbFg}ra*F~_H^B%fq`rH-ZZR|%99u%!$Ni#qJuT9}krg7{`PsDFsQJ>xJm?m5q
zUZY}kGSQ~qksX0xyvBc#vsj(FDssHC6_&(c6O1s(MUztt&4j1A5D3rP=f;{bL(sJY
z{Cy&NTo*w8`SJ8kk%9*zs5Ah_mEt@Yb}EEJWFHoTQza;T-Q!FR>_2OD^`a*;GnuTv
zb;l_vsZX80{h_5$cq({+{OQ+8YzOD=g^FZaM|u-$5=FWB_KBdpq48Q9MFx0USXZUq
zMomSH<F*9C9~t1%qIALm+^(aU^-=%bn)>5xq?{zggLO{iW(@SQ@%>D_C$81}sJP^O
z1@9q;7nV@1D=ir+JF|zn>X}0~?ttSt)b<ZT%Gvo(V8&+5^G52i!W-bLQ?Q^6`(ri@
z?x{~u7o|qa?Vg3fkfzxqYs;$sn0{#pR@H5T2SbMyIYZ>^f=e6jq_8^&k1*@>z}o6~
z2H}+VAGwL`#koLR4ClGb`wft;nMIDCx#<Y^_6aJ;nj_Pd6KHTn3_fbz^t#(TyhsZ&
zI-2~LJRyKF-OJ@xj1@g<U}9N;|4r6jMN909ob+dEl7h0UkCg+SX%gQpvcK&=7+NM9
zda<X4cbg-4BA{h^W;7jPw+qP?ypy7zx=#VsHN%Y`lLvYn0gd_?(yBdXri2b3Y;ekA
zQ=LD^EVvS?dv0~7xL%l$wnWLhOZ)}clRZ;jCsv=3vL3w<O;@y@eE0j<jD66LJ0xu%
zz(LYXU#2rsw)mo0lNx_})2g~P@2TZP*<b!Ov8>arA=op5tiY$(Ee_wLl<9P3DHexh
zZ9&wldc?<qgl(F2=MQz%#h&nG$)-!srghEv=`KE<y%d%&P;)pIck%7u6m~xr{yjVn
z$`sKtq}$a(G}uU%s^?3v|A=|cU}N(kaSJjSPcsd_s-3Yg|N6^bHuahAEYYgg{AIVJ
z9$knKRAumCj20<A0kx=NP=UtjQ*40?F?e}%#&LtyTCi;!Hf6$D%hw6fsO7=#vo840
zEu)fpyNQGM_$*;k#zKq)l(0(MaqL_C=j;8`nIuFCULBf<!{|f#gK@g)<fH-rqw8p|
zIxNfOjH3pJ#Ap5{f$JRXi=diQbOBR^soNAOB4i|YuY6p*o$Aw`YVoQ{7W|OhbQvoj
zV9``LSz6m<&kuJbMumbHOs}leo#CUMS{&hK@@bM8XpJ68rkMbI0Bt4|%^EsRhXI5#
z5SN+-_YTdHj1fG9r%B*k-%>y<GFDcerRwGDaCJlaz&f#8a*b8yTL=MMAjT5FFF2FN
z<fO#OS5(BlhiK!C1{C=6C!D?0Tzl3R1@AqL4Y71rPDmn_UT^e-{{n19vOFKfl-65Q
zk`yt1*0n;-af`(1wtcAhcwbURs?;}#a`d7So1%da)KO^Yd3|~MJ`-GRfW9cgBn&U-
z{BzXWAZw^E&{=IR+?#^0L*Sr<3&YC8>nD|ce?=8%v~?F=;+x%<t+EQ@Bh^1bKc4_C
ze*snX+OLIde*wSSf`8BdVRdt#Zs5`+|3;XDlAUZuz^j0)OePWeoQ=bd!V^J@#6{xQ
z#f`t74)Pe;fH=p#2UEt%dqTnjNu4NUOtfdpcUEz2wSx^7A51OAr@=W0x7tUt6qroi
zkeI7xgE3*pV<~AZP34c*H5GhE`n5zC`9*2_?DlsZN0p2cQT;(Nu;*EBE+L!4C4vGU
zcD&6Ar-)f@SU;A9gRk@{YulO6WBo3c=U0aJQp<!Q{c>r}BfRQru%1!em5PW*cq`P?
zG6?_?>Ez*n1=60W1Io<AgmtaEk}8IZ&8y}mD{3E=Rj-O)u37R;(Gg*28kXL7NJ$PD
zP?nLzV+lQi@RTb^g(<ThXf(rw@>AE-=gve`C5BlVeA<5jM30bW6X{7q4sq^jLRI;#
z4|5tSv{d8<G+wOEIMSAR^vJaNT%H#k6VA(US}tATKiZUE_(~Ic<yTq5vzuj(O>~B&
zgR+!axczzwSI>XY0Qzb%N~LA=xF1{16Lp@*aZLi9mNbJUx4*#5-QAKRlWIw*yU|@j
zJHR*1GC?(kOYJl7C&Nm5*3BSbhS^8fQ1f6>W}zE?y>d$T4pTbw@KjY;hqsbbe-rT&
z%J@9NSy^)iwJ}?GWyq$+UD85frOcHGS6$M-Hz7^TD0rdg8>4^+%K3WMlFGWEz+R$~
z-JHg`&`hAm)`Ufh4iBo0-O?V4ZB8^BaIhb86emOYXzWrs-K7w<fRX07DW_CdYyG71
z1Gy$av?l&O(6UazV<gZRC;#Qhh(!Wj<Lk`~R==_s*{@1dqK`jQ6q|yRBCgGXqk3MP
zh-bMo9v)=d2{Z;Yy0)jCG;s<wHw}R#oZwzb?`l`>s~pwud-V2Izs@gPyuCb|>r<ZC
zbo8x6JmRO<gL8?d?)b$s0%yRYhXjY;tN@t%JZlGI>l_Tx_zTBQ+XKzo{WQ5r@?|)d
zyEZOa>#*RGFA)VaLLjM4B2b5o8rcciCtRbNjS37Y$BFAv=48?e3rl%LO67|+T_%Pj
z<2k?hpai3`T408R;*96x!Hc&}!5NBfy+f2q=|=s>^ApMKHWHpX8$EtW0y2S?_7#i0
z$E3HIz|tyS6O`}V)?WgD$vM<$A-~0G28HxQ`{j-$@RTzsk+?ahFl1_Y8(d=Gh=Sxt
z96VZSf6WKtk=YUK0`uBe5q~Eb+NUpjJNRPHpkqD+?7B^|m14D7)jsHB9#9G>g%TqR
zqUHQ1O!#h*tN;%@T!^tPF#v6sC>`wkwO_z&PSN(cNXCoc^=9{Zd}N6lGiLZU9~UsY
zHbm9ZEr5Dk3(o;GY<yR>JhH%gZ;A887;V|a%26=v_H>0t()$iGrERdkMycomhMB?D
z?2gmCf5fKM%7DOvn@E5%V#$fHYm0kR*MX)jwz#d@E>7T=Qh-Ok=M;vyxyL=9_<QaB
zZz2vk`sp9u^z&8A3PU!i)t;>pFVshGVY=%-?K!s}-7l6I$G#Og8zZ^my18b2%9Hab
zx08^+|K?>n4yK`ZdFOfXaHL^RgAOx2DwHOui&1ps+tq!LC`vYLW841%J^|(A#bxxZ
z&~o2tJhtYeJ}U!q%sxp7sauKjPNNH3atpH$=PrF45r3}x?SS9Gfz9UomU)h32i57G
z^y5;T*5poqk<O6i+c##}bVVZVu0ZqbkYr}UmwF}cquFNC`yjGc)yNz45AQLwu5kM=
z%CQ)pPI`A4ouxm783i6Dz`-JjDwht&;}jL-7y<hID-N%R8X!xaC(&d40srcXWqBZQ
z&f?%~es9{r;OmTTQD?`_5>l<cyaUrhZEPC`6Q=`){WijjLtEp8e9i3li`sY51+QgP
z_oHYucTPf<{jo_-{Om&6Wt_H@Wi6S0DqUtX*+vo#h?;F^`sSjqa9RGK0;xrdTll&e
z#J0G^bIptV^Nh|9Zn$H)1s*Eu!9B*YSR+}ec!%Zz<CASvND*Z$9bD1^?JG%b<sAAN
zLo-wJrX0$iBI<E}*TJTu2U^v}&(eJWlj0{3GAabKD4f+`(FneyL1thQc!>O6BiZ<J
zlaRGd--gH`!LU=G^rfP?S&+!J3cHOZl-Z*qiVSfTEmxlxk@>b0OJON95zYDsDMJ+0
zyx{qen_l#TTD*N&v~w&HeQl7oR5=-?Hg`3LIImxVn+B~TUkQ(#?2BgA&IYuDN4d%A
zrZQ!u!OQ`_T|CdPH%$U5C=rr{lXd38&SIjUn08sGk2SleegYX5jKDU;m+r5;`^{p=
z9XTGP_i1g+lUEs{7HrKI#`r6tCzGFs)OKo)#@=O#$jB^Bxy&&UVf3ZxY$Eg4oT7-=
z7T<LcgqJ_2#;0cn3^3woO2o3xt4iNa6`=BY{vmd~oyNzS4)|{JB2ZoMmS`uBwb(EJ
zwf8GI6a=5`SssPgt#^S7R8HIed=u<r$PgE}P&>rb6G=om%wssXh`avf+Vhz6f)_cP
zWY95TiFkdaWe;ns&IwTK64;_SdeJ`O{mW<M>@+jxZn>J!YequPNC)|&{!d1=EsBt-
z3`=-YQCTH;&Z6bpwUwjymUasG3a3BMu4r-6EFW}Ky<KNrLeDGW1y3L6o0hERQRcNZ
z4Q8^78K<ImFhOGmK`9%;HB3L&@xj<k_>=r;&SzE!Wk&LKkgN6)&sD{M?#ZuI#7gQu
z0Vc}2(_a{_gBqeVPqQ<#EqBh@J|Nbb%3L}?NpseB2~yh76;^i`(=5*8rmLFE;U>(c
zM8v%q5jV=W5Bq9O1yas?wRBIN8b@6x!zi9Fp4w?3#2!<k(!!pg_$LxFS3n#ZK4ML7
zi3xCx@XjxvO}mK6J=l|%`fE%;Ht!XxRVUjJWvZhVb&0i(MP-8(^p1CKCMdS)1STC<
ztBrM%f@BQ81Y)_}1Lug<pxpjc%6pCjv+bW&w-YkEb2tPKmgGgV+)x!4+8ozQpB@TD
zobK*Ewryh<QF`8k6(gT$Pl;8FM@&YCF^HPrnOi0l6=?K1;{`+V$cpSpax5aNk6!&C
zjFsSk%7j0K{WYA>6VJ$vVpSWD(WmW8-|<c4Ji92X`W{zw7hPnGu!NqZ8mIIApm(*J
za{YLt(>pS5-*qT-75los-P!AW#+KEjN3_6=7Rg^JHNlove(ico9SaFC=nw)<TH?(2
z{pKHX1M9pkfg{JvIHTuxVr8Ao{o_}Q)hU{5h(xzPB6YI_lz)j61bu9&HNO)CWrwnA
zuLeeKjq*8lm9ILcvT1KSZpdO~t);hI^}6t$N|vMej^-$plr|h&eA#Dp{%Tf&9QZWt
zV_w0}J`G7SBWzlp8GrR!)Se0At4?`2sA%8RcW`|B<-#AVslj_@JKXLlFO=Q_42xs+
z+gb<^mF-VX@$N2Bzs9tO+!(Wlx9D$X;KJKkZ7tm8fNqG3%KFIrlHfvBkak4iU9c?;
zc}Y0Xg1A2lujobZqm{*3HlDCjW=a{!Qq8J5=PcnZpYiEMx!WRGrjD)RmWwG7kn3eQ
zO!d?yI9g120&teDJqZU`apR}bej)Ps5KSLf2mJKh+LtWqb+&!)b}vPcN7NUESaHS_
zINV?+LG`ChpuCkwebtQ1TX@NX9#WCnTu;)n>Rq=LK%Oi2z7>1;IQt!X@vWp&_wMuA
ziHhg@scSmy?ClA1M9bFsQ=(rNx->E$9r;C6<Ogf8#bk{*=v(5jbgFtRu+1^`w_{J&
zd9M9iFF(wcYDsUaiAlo@;J4;!!<Fvp#m^AYr5EPk+7B<U-!WQ6W8anogZ@46|Co7}
z?Pe0McPP|0mMU*hKz{12X#v+vQ#zsCCto!Qp0g%?8gO2X(UiYvAjuCUo9{JG=ZdX+
zZC<B&ZvXpN`7hwKE4$Z5zl&zXw&Va_^h*tM`oLJ=y~$}>Nr%)0`ASj4gSOS3iO>ts
z>`sjFXD{~mj;CIPZPopkgW&Hl<2Dbt`#x`~BYy#X2&uE@%tJS?MG5cX)fluzOS&<;
z<NtD_9_WmS*r1`cJoTr>Zk_~{V<G!E54#k;C^0E9v|vz`L5&p8RYVrM%Xo1w#+Q!$
zr^961yw$h+G=)!LCyBb8SA~iUV4>BB=Z?3~v+^u2x2Ny*zu87mYEYEVG#99qjKL7d
za%6mADr%OQ2s1gF;H{N@K*iWAx9=c`e_v;*?h^4+`w_DFB37W+W~R|cZ5<IP_wf0X
zFmKoC5@%x^3u`-Mv->3pL5Q8`h~!7$n}a7uGvS?fjITbUvh?$(i_f;*@;#ovu^KN+
zYp!yJ<z5$RUh^G{Gj|y&iXf@JyQ0?}k0*0!rwaNEHeHXSNr-=TWJEp4F1$Z{8<v!v
z;8-7&(J-`jSD(pnhUm|BG&4C>Jk5035MFN11(hAGk~9nkwh~Vs|M1Z8F8rAHSz_sd
zl|=j#HpTRvIH0-MtzF2fb@1^g(hS@9gh45J!iViq-Kdp}@?a!KgB|@cfeP4xzMS49
zhfE~NAG>14qxd;b@{>QoR_)=~tMZuxAy;3`3p?i#4EIWE6hw@4qA{z^Vnm0U{Go2x
zSG=`A#`iGe@ZZ&qUSt**w~2}P{WuW3%(AZnNSP5YrF4;NAL{C{7F?|D17-^8zkqP<
z1cS_7+93R>578{k2|~J_3=EYN#>Zi!2I8ZnvdaAl<1w7?%^A#<<sspGru~m3BG$_y
z+a4e3T$kl$9<HLbbsyeod3_mUScRZ9T&qB%)j#d#^VCx2^VNi78}K%G<10xfETs#U
z)RBaIx<{M*QilhNCw}xrb~Dy>&Qg%s)&fu1gjGJ9+|VW7;18Z5V*Etch)Y;zgn7!`
z9aUL7iS~O#FfF+~3Ih!sU9<+mAeY6tHFlWi@i<%LejNOaKwf5&U|C~4(hsg3pt4dO
z_r!?u*jgJGiy%7@qtoF51LlHvoh0yI0OX&JzPz{6((AI3zG?R5O#uL^?lTxoiw#Nr
z(&~qtQhpisC5N~&m*s*;e)z@PvU$F$k-`pVltr%=g7W*?@R&3G!uhD>MfjwcRHWe8
zRD+4z@n;2%Ug($USp!UU+$<#bAJ#`-Sn?7WDMqB+Kwa7k=W_NXwf37bN3&XuPW<Zq
z^>OHj2PBzyQATj8Atr4o5;kV0EAqa9_=skP?Nt3koUF$-dUAb7TctYd{!u7&nWLeo
zW9W2a4wYqUi++h3?RKcB<Kmz96x3ZsKHFe?5=LqTVKF3+lPHO!j!i1d2r0=XZc?3j
zV(E091F0JNQ{qJQg`>hQCIcmH>{CZZzzKQo%4i1R3yU^7Rqx7R_Z~T%{ru~Frw?0~
zn|AM~=D=?<M2qc1I>YU)f;xe-bW-U~-{ya$s5_S2rQ&U8!)T9CvS4UL&2&j1jW@6E
zH)5eTfqfa_^D63dpTav(T{zx6aW7u{0PRiPA;}*5-lx+H%KL@btXPp7--w53gJAC-
zxbywyLHAuEBi~yRG?9x7GUSxk+UVLbsDI5XoG32@^!AaWDFX*lSNU?X<gvn6OXYW=
zTW=M%OqCy4O|g5o61tg}z|1JP2`Lg^BD5wvf#Y-A)Y@K^!g{|7I3zt04}(QU=Pc99
zGG49Vv=Iz(2}zLFozt{`45up)<+mVFxpQ`n2x(i=y4UzoUbJ&JTUuE1ly--Diix}@
zmgJ<lVkU_eAeQhQLmqztX{#n>hk1;mC;LLW8_jE*CjMe)qg8ocRlbMG&?{<<83*>d
z66fo%B(uO7o*XrBv6w9A;Mj6HH;UhMIcrcNJXhUef|lVnJlr3_F<;@~@CMj>2Qwob
zaX)M!yUsoAh3D?iuI8vb(Vb@JTszGJk&wq>@)Zta!$~9!8;P?I=lU#S-L62$HJAB#
zt1^@U2&vvaoK}P>-E2KE)5Q9aR@Et*neC=tjxxPDiV8RWk$vl|?|1Q$+H!Y^;}$54
z>E{y4Ojn>Mo+q3=&}x3?JM5X$#T+Gc2bC{_)<>0j&qJK4pBeKcLGcdqZoF~Ij)Q>&
zyq;}c{!808_;xe7fO~97xur$Hk-YA!IR1w!6_P)}8gvPuT8+t0l9f%cHfNww5@pB2
zxO0955o5hq-}0YXOW253%1onc8Us1K4Q<sGZ(!S^(X_aPVX<j=^PqFv?%Ikvy#J{1
zOxG)1`Y*m;!H-)muK-_`w~}s^Hx<4&fN*B8`X~B8Z9L=^?RAMyI0i?Z)h;_eoUs^S
zI4X<{X|OP+XN+3^7*e!AVd;F=n2d_VIPbdcJ+2aBZ3W-M0#EBYkHdrKu5k%Xl$7Bg
zR1;DTdtyqXc3s7C5KTdVkTL2Ckns$GX)M<MBQAOw4Ww&~x_8zoO8{{8%(ikB2Ypoy
zJRf9Q(70l(U}e`UsF7B%fXmI&jnybk$@E42yw}nNF9W{##uqo3o@K|GmieUX-*^4>
zj`UD4#4Om@`qyopmnQyQeF!SZ5P@Tj#!qmi@9@i=w<EqRWwRgEzV?pSJjpvG<#^R*
zVV_5)2f^`XTQ0kLypb##9GP}jlG>D5rTBuIuhN&&w1F<4Pg&|q)3~XN!mjRwsSnw-
zg#=p3j-?w!$9Rj0cb}mMN~C{JwN#V)Sfrh_5(n$uA(Xw=57ezXaI5)%MoW62y>-Cm
zQLr!}B4YW#P~J4E^DXNzQnTGRRuSA%ONbtMQc&zWkbUx*u#+kU?P|k#Yd&0$<uNrG
z`BEKzpGcdP<iLjimmzm({;6nVM)&?r+qMwQS_4bJm!Pouxg*LqvzR6?4ig7ujEIi9
z{LWB4kt%m{rjc&9gi`lC<9xrWPoq1=OcRGSf|-Vmr1y!6wRR}E^X(H3zV@ysc#6%-
z$`PI&z7ar<j`I}u!MW*D^Eu~qmvJ)^8}3NP_nd2W=gvYgRf9T~(n~38O-gI!1zTJj
zt#ckzjga(4K35$wbg=vfh2H3qgX%G<PV;T+>&AvD=i@}d8q#&NvQs~%n-YrLl*~4I
z@#!oX!|(X5omP5xsdI6-A2!N)ZK2(f<>{&B6S-)9siw|!@ebN<2)1Xk=3&PQc3#5Y
z!Qbp1Mz`m5U&q1UvpRx12(UV~OR3`=qozw+mMdyXNm7wOr4g;_1HHfN|LM6ZKcjf$
z7KE_#^tJ4?Zqbfx$aLAMU0VwFj6PNU!AwSDc9+Ld#8z0T8gdNVkS-fX*z6v-xQ+y^
z-i8KChI-&Ae`Fw9TcH<6pYXJ*?JjZuC4%WCj*Fq$VBl_F$AUOVkcTw1<^Nm<t4--X
z%!|SkJwGx#cVp_OHk(N$<u}{${IM-;wvN%kUOHPvCo%8X#~Qa^#()l=9Oq6<M&Oo^
ze_bcyy&IXXwoj~a*(ak5?%@V;Ku)w~D`gYuSDPhuo}*uZGm-aY#irvSeUp47>K4eU
zi}$yKzVtBR8c|>5?8H7lvTl-=;H*gaqILU9tUs6}eQM|YK2bP*TyPqcXsaPLo7pPs
ze%+v7P&RZ~5z<nAzIiOLEkC_a4nVd_!*g%gdvn^!8Op8Q5Kg5Z?hn!V3m_{V&zu$O
zwAEK%<>qA11kT#R6M2+)Y3ouV+M!@@1p;Y>`REZTn=~WO#x9sK_ZGujZ(pGlcZ{}t
zZ11!gg~Yc#Q||Dh#n|rUkx%<aLX}$>ViFpY23QrFVS#y`);?hY18(|+A{mKE5}w4o
zmj`jeiBU&0;b(a!84a<~CMjQ!CTy==AWs8s9)6K){?%jCeyxo`LC!rzCZu-I0{0+h
zEkf#^+RCWs>eb$(j*{Rs2ZxIs)^|DHa!0N)3u1eXSk}+RsS+1NgC~z->eAbJG{Uk^
zbn2IPH(I3XU(9vnJ7*@n?zD^p4@M?y1+kmzg9@>;+Wh3oY7d^WCxIN1)1!z{FwbOt
zq>gVq9W!}1U^`vA6EAQ*?<UcKQ>`7DBTF3xUBqPqB8yp`0h#gXbgjNUAQ=6)Lp(YV
z0ld65S=t$mWPON6)VrQZ#W$~`ng;^&{B{qJcgPZ0**&jajcu^~<XFvuf@hd+s`UB#
zfw;3gwvvUksuAhl2|aa6<qBDz>cablGSaQ<dIIQu(do7GO<DtM92WBr<?PlEY@H#A
z-CsCL4=jb|N$u)HR%X)jcS~Jr-<3p;=59_7Ey~8p6G}0Y29k2tAD^uDKYQCs#UK_3
z_-F(o=o60*KagH-XiR2y?5Poi2QU-d!~|);3qrG-^K62;JR$YE$?jo(^rbZUVteP2
zcOCqd=`YYt;O-dxVp5J?t1)$`Itf4TJ=ravPbi*AN>2}+HKfR6mMp&f>tB%+H@xh;
zq2?_eE2#2|@9aW!lfAyS+B0i*X4J#FLb;@ww9dbxGDY{S%))j~+57Q_jYV>#WxAK<
z7!Q{cc4h&Or#R1rj>tOy0yf=xe?T3AUt({Cp84~`@eAwG)3bbs$mGrPq2CLvaImzL
zJ>pJ=(~jb3NbimJBw(vVho{_GmVuzb9HY*l$Z;<9o_bxEUn;-;0yg;KJ`RCbw}svr
zXWJc?-Vd`To;SgNN<TNhDv1OxzLS-Y3Hy_`ED!%4{a?Z+Mqecx;_G*9KH?9NNfc*?
zb&B40HmQ?%Ui~~^yf3!oYAci|fc+|pcj%TUz<o$ZpjdMp7&(8r+pYrqd;{_6eVgyr
z527vXIeRZ<`Yn5F^_1!NyYd~OydoaX+Sk9hF1UFw?svg6iLq(;_vrr$HaU7vP`wt+
zk@P+UhX_ai!G7_iJ_^HVAXmKCjZ-apse9WHG%OL-JfEGfdi}L%BK4|TM*Lbd{ky)$
zaFzHk06?ZBR@H#rdl&TI7ysbH(yIcBxXelA+6coAC7EPhB5@Vw3LFKXw`zcWMebFS
zGuP!iAOFYg!d1%w>G6;?Yh3{66KWjY4kN@@$;z@wP{qpfA%2;sWmhKcDYqd4dq51^
z3VSt3P=S>PNb}in!km%5qGO&rRjDRGk1kc=te&GjrlPQ8)!6NF1ad$ydi<LI-#64R
zw_Umu#s!@ki+JTe+u%%P8^riE*|tt!Qpee>_IlhDJP@<La?>SXzv4p|Lr;pYOdFX~
zhW4WI&#Mb?`^7z<L(KA@U$X8uJi6@%$xK<0)$miqbI(s~OlNpmc+f@`GIa;~%F!%l
z_z0|AFeMIx+BBjc)&#1V--|xe9<7#VxYx9Y*F)6;#q{O+7B=+-xYD6&F1QppEEjrM
zOT=9>PVTL0u{tU)jd_4}q@*8f$l^A2Zf0(#{ZZ1o-Eu#_9)?>}!=6k|UXwiJ0Ndox
z^uOf~=p;jZ-M{^)O1FKz*J6MrUy_-)!!ix74+HI;LDjOdabuz|T?ilq%BU?_&dp4S
z8*XTry)J)RACpY>?6<88x<x`jyl5P>VXDuAzo@2f(|1^*@#MqL^hCoLZsn1CZ+o~E
zv4UmTm|S{Q=pTAU=i&9)mj>o}QFBc2QQ@E+)0r>MAro}J%W1&x{Y81w6AEWvP1^{~
z^kpxfHhqMs7!!(ssk$tEE3)h6(m4-miO<-`#^wG%`7L<*Ox(GsOJ5)98SZ3NRMIyd
zsBk+@`+OAF#b3}FMNJhhxc+(2{ydJm&I;4|R#^CXN~Naa{Jlt|`~dPATXCfJ7jPc2
zb?e#J_yw#Z$ZD)OxvaZfxbVr|Mg1zJz$SrVSnoQQHP0!btVMTc25VDB*d=9VrQy>5
z!`{^mQ!7etnfW0K0YN)l4H8*IJW70{0*48DUj+Qmysx`y3Xe_A%^Fj(X~{qYjNQFV
zhjA+OKt0`R)t7<O1CpQpf6k0Tpb!lMo(62gR_R&KG^`U~b2ME`IGl>Wd6J|<>1|eP
z6bp>n_%oh0lr=q?Ip7zPzkqtxj>g0+j9z;?w@_j=wz%w5yy1ELvf!BzGEEQM3*H5x
zX|81?_;@Xkq*Cn^n-=r#o}K&?o#hNL?om!Vyw|d#j7PM*OgT4~>hxw+WaRo9=op&{
z8XQr+_f9%G5u(w})2*3;fk95A{V`S5L}7>LD)Ak^5ypNbtFeN;!_kN1LflnlRl*J6
z%QCMse&PX^`T{y>aQNdtuxpkPaU|Q$GRZS6AKYlGbK78iK+ek@F-W@9ORW5MajjR)
zsOu%6NX0Cky7P1Hgk6S9N2#1Q1!IWB;uy@%=t9+enY_B1AnC`{tw@|9n3VC`uOEzH
z$@0U7OZk$_AHqyz+N==2L}11wJ!Ln(^-TrKHYc4Ll^FZz_=P%q<ViR6d<J;ToCdDf
zzb38`Tv+h(zW1_4l_fRMW2=x8-+ZsITy^`>Ch}l8g*X`ihKFf%iw!6=5_BV32l5Ro
zG7kl)`OkqL+sTH#$);zV`fA_`f?+ed%rs<|)h{~NG-=m22JuJ(_8Gyvi1OUY!4bDz
zkqJcCzwDW-`bsKH!(IHQbS5G~sRor*#lI>L#SMQwy6g8*#z~IyX->%4hU1d~F3fD$
z2%eDt{+EOK=jD1-2sY?67JUWnI>u1*Pf_1Sgbt%VoD0m1vxBfGS%rg=-qocv_I@>K
zyEZ{xUi<vYZ<Z22o6U<cT`Tjqi^RHHO_|kJ_Xnq<#o}@C&7a@2o?hE}n$C#S&!TY!
zt@W@$Ez$A3Mj1TL`DR>4#AY)aWe<*?VIq{;{krh?7@XfO<o9BUOYNN@kzfaS8P|u4
z&}b>a8|tQmEMj7udUV_&*b+pZ?V&}lb$Jn+2&2k5aZ<j1+VrL?(u0AkJMQ7|z(;H=
z<ieF!EX3@cj7{j<TRK6>b!VFBOj$b!XvF~$tkouA$J;;*nGOMTEEl04PL9Y~J;wQ?
zS2R+<II2bW1d`R}ehY)kra<9{j&0nv-j|sYUaY{#krPfBxnTFIcsmvpC*0*A5jzRO
zt_-PD0i8cjT1pY%VsRYFicpC)PCJ!BTdnjjwvBhh1dT@$*{9WQKt`VDPx@Un=4{eW
zhh=ycv=t)yXFot~ivaHpt2<l?ZaeRimGYgz>Wub+8`g9h;WZp_fm|QXz`E7+%vp}h
zPNCUEe*r~uES}|3NGkH6$<mTg0m(3IYY|#pqBW7>HaBRKvbtP_`>=XKX-dLyZ0mVB
z^c@~0!K=dHNccMW5et_Y*0f84XS)SNn~8){7<V}haO>iT>uIMA(^U>}d8VvBcsA30
z8`Vau>6Rnkb*Ws)umpG3m~`mdPv;zop61cFrct~FUN{F64wmP5opWUY4{b{7+Dz1(
zF%B1@Ci7l$q-xa2i>G<)OJ{!`l&A|bO+_sj5aQL`Vzq<HP?_(MkozQkOYIoJP+9GY
zP6&JYy58?;%cE^k>nzBhGKacH=OWR;agBM?Wd!4?w1l65VYB6o{vW2jMDQ3?JV_>g
zpP13xlg!I+NSb5lMCl$!vo9a3*)T^RZPC|%?r6;Vf?`h;H3lnS>BFPPm30*Wq@}b&
z(L8P^=5RozLiE=Mgjk#sU7JYk<K&Nbn`mihze+pfttz`&4Q{EThgr%;bvNt7E>b+c
zW272#+V1mGgaTB|me5QkA^y~~#)AP<{9U%AQ|$8$877eR>jff;)%!2zpN~%2kzXeZ
zfr7j#K_q$@9=Lf!sM6@F7+P(Z9li68jFbB_QM3wfr#2d?ZYn|0ryUuNS8#cDYpt+y
zqB_e_8oGtTH}#VhZ3q_={w4Yt9JK`fL$i&YCEq2n{}336&njbPTEJd~A7YVF6>zI)
zn)n3l)eSGJ;mcM~6|(q_JTg{?fKvR)dU*NTAQZ8=^?F~BD~%%*gnC$i(z~(hr0D>=
zm8=(lYp;blw&0_Nr|W@zjTgn^O5ZG%ZuC0X`sB%M@52f`eJX9UQuSJ1SZ8R?5AzL*
ziBxmxq27a*>Ca0UmJgf2<_par{nJm{Imaj(RH^u<->o+d&GBgjA{1q9*Z>#$oo)o#
z-V%@O#md&vic+*KU=eQj+`6*-%6zB7>9RXGiqak769b#ChbM1EPPLj9eAvv-n-Y<z
zqVel`_^u{jy&lvjVg=`e%hG15&wh9hqyvTxr&46;`1r6rPF!kD3cYX*<@I2pNfA)E
zc(C+5#Lo`tu+HL)fRrbKirf-&7qC9s^+kLUMtiJ+v!5Yp#V%Cof~BFIRiCnxn=hU^
zDiB2U<zp2P*lVe1Blie&mAUx1cQv$*D=kw$Y3pKmdM~$ixWrAlA028!u{Bl+;ui>f
zb;<2_GTkH--EZ<+;H5H;(jqzx`~c5C^#8H<7C~`!eZMG4NCE^4?(XjH!QI{68h1@_
zcWvCgkwzO!aBZY<4ek)!^BmqQ-}?;i;118=OnR_;S6A1nU2CuZPyN*CuZKCOs4bT5
zMZyHn+UAG*U`U=O97aNIoD-R!sZg&cE=#xp;wK(llO$1gj`9g3I#SagO8B$z5~6Ec
zpclko^9yg#f_)9mF~=rD9;?-y6v~)GF9mx5jWRKwZ0Hf)rJX$VO)fg6+@Z$48MOkA
zKA<<m>6Mf8RLZYpT9#?=^XI=6R*juYw&I~`(_HSVldCf`F1#@^u~4{v<u%b4Cb!Jg
zmrh2baFD;trx2ACR!RW~(=#b%j<wk2-K|P?d5>u}VWu<0-ffz@f7Y6JiR{ZjpWRQp
z_^_!B`?}xCMp&`6;3GQghn(7{C{qb^IDz1+Q4vvfdK_&OIn!;=AAJ-Gl3dL}2dZ$J
z|H<!{u3QTrrMj65qq?Tfr@0l*zbKx_keiJTU~U<zwsCZ=(=}0CyyG?36=K%7jUR#z
zoK$<~|3v@DB%}6={^3OEMVkOQe-l#BCz9?&*GFE12LMByOZ8j&SQhqZ*Y*^?E!F$g
z1NZza<w>p&$EMPCk`qE1eNcF1wB4lD_NH;}<@+<f$?|w`4X#R~%sS@e?QuJ9VY@Hv
z@^%NZd>MFo-JvajoGaQrBILx%5}5WVKc`Y@{Wg?^o?AP*jV9%OqDM)|{HhikUwjMB
zYtAr1%wvXe6EU;R;-;U1IzJoN9?9EOW7ES|PLsH~8{l!)=E?BavPRtvUfT19dq+0Z
z|ADNuX6tyx9@Puac~1!tT(Oa(A>5p`)j94Td~O>!rH{})V30zThw`J?5SF4;Xbrtd
zHZu~IX_>OO-BnVOljMx%RIY~jEK01j6O)!V)I7GdtC)+En~-@HcS`5ap8y~ei-6!&
zDChaJC~w>9kq+=zqWzf%x?^XZb>3Fr<jVP;cHO+m2T^QELWWB~>LNcB;s|;iV$W;6
zyM!qBpyFzT3Keu|Xkx8fYD`2bKU4*WHET&4oR?$FL%Hw4<vnXVtEa=e|K-ybX>T_9
zZqapkmJQn}XT@dh1EF7TR4;2;Whj-37%wSSjk$m&=fhl;&0_{z-o5OZ%XeF>p{JUE
zr#l5k9aPHd{#N}CiUgnWt?-a^fAApPxtok_IDRrjEsAcW#zK$JR5-E*(QKkCi_Z9(
zWNYyXv?;YNzJZq`>v6D5DuJG=_tk#p@W3z!zY^{i<DY2(7;}}Re9big`)6Y!u9h_k
z5D71Nv`>m+rdH&jRbreS(ifX?cm;`T(ywYS=~lL1Fj)atc{zPeJYBc0!F@Teg7~5M
zeMirTDFf&u;2(B0D{qe0MKydh3x)EndcXXt54k5|E0c-p{8Zb&SG8RQH9xgR*X*(6
zYvi!C@NO2+Dh&NzIq5PSlWD9qEKIHA)`I4ox20BJk^DBMpdBg0eJ3--=K-Hq0+bf=
zPF%TipdY-I?4xJo2CRT*-MyZEdz<*LOd(m24D)@9_G%+}ho~YBYdNbl!lP-9`!z3w
z!bh<^U0)0&GyB}`cTeZDQ;A*LaP)VEX%A;plGqv4)8Y1epG{sN;oR8dP~1O;rmynx
z@ICidJI?3mAIyGyW$&mR4r&lr=8r;`Zi)7`bEF04Kl_pO_AP((S>kbS*Tr)u{cxlB
zx;ce)EHr~B;&?}3>9va&iPFkE062n=r4ln`zTGJ*E0NjaS_UGWk&Rww(zA?3v!@@)
zhB90L{UX~1kV@W5B&#~czuQ;?*vet(SVeA@Rh5J5B~a?TFMtze2(SZuiX5e7%2u}n
z9hp9z!ZqS!&JEmQXHDvgIU=bV-JjIczfT=%kP^Vv^s(<*6}UuHjVj)<7FQ<FWQ)jR
zbpW?A)~htVOv~l#A5l$%#c#1YVc}Vrg@ebymq!0@IZXNP@imNM;%<94RboF&5}Q-3
zYeQ!rZDLyVc$L%E7l?RUqU<-aBHp)*y%hX>eB%&C4+qi0#A3(~(M1A`tC>CnoFYXU
z$#y>t?h*rNHcSHpaZ?nG40iT7O1|fq<oiKb+Kw1@ik^E`h=f^+xEfCApW3?5=Rq|X
zF%8G1fJXePh2m@W>0s$3>D2zN{-uESN6Q&6u#o%fa<4(W!F`!5ns-<#o>wLp`|<R_
zxpS;tUZ+5yf_4+{$6&&#p~8e^8X?vQG^*{Luq0=kP8ogjaNeyvae<k}4}Zl>+Qa3`
zCJv>Q^VXX$TsFVz%-F&*rg3uNZ9m3Q3c^i-&1qyI37&~@<z}j|K*EZtlz{Nn>3OL(
zeb;oWfy}S22OQij-<`he$0&x_cQtN1Fs+-TImAk`XpUKUF*=J1;(={?na)b$HHIGH
z*y>NOIDRy+Fre-Rn#Pf<d1)*0BKqoOjsoTsJvOYUNYR%*E`;8a$Q+@+X%?a5W()to
zVQ$$$UkYvyZZe<XYYS`Y>o>K7%3mFxFtt3NERNe2-uD*v*lY*iiO#ABPuctfXY?i$
zw)?ltMC3%YzW2>)(*g%7L3{dfYj7l5zj>}sP!aVcbE31r_YYk4rusi{(xjNbUkRyi
z5~uuoo=rl}blO&iR<F}rKJ32lM)vldvDl^;1rRQ@xauA;yDnijV)m7qeTYk)lcwje
z4M>DI>h81Gv^ja`3IC;)(&=`dF024<G-F`FEAzW&ggm0V^~zPfms&Bb>~H37qeTQ&
ze4PGsh3C-)_W9%!BiHFu$GvWa-5BDpQCKd3QQs@X>B&kayM8OfTO|&+07W~mrr^er
zE4=#I_M3F0yrFt5seRezY?WW0UYKyGbSD3CZDva0@jXeC^?sM@O>cr3io_#%ygeHY
z=QMJSSF{o97C10{JY}hNzWz_`iI7}VR3^;Ywm}|ukEo7%7fWPRIElCZB}C^o-riOe
zNB9T6YVx#*KEXb}76n321G>4o=8vSmFy_p0>8v;xP~|fy2zO|sjkN_L(b`&6MKJ5s
zSX;z!F7x4lz8FBgBL1z&!ej`2zhagLkc`8QUhBsoS;~ykI<+pK7IDH1!l-}R?rJ?I
zr!-@b8bl~X6L&k6(TYP7Yv&L0Zpo99oYK49^_26a+y7>bYMm|tNQ?7B!SEUEbA+h`
zy(t9&!c$n(*4N#L9&R1<ui+C)j#)J<3C;D68y`S3NUuEcH1w`IDyywdxyLCO$s8ay
z$jLXVkbmGP3gF{)h_wr*F6)Hn0<O%(T;&7pj4vzwva;AJi<nw$91<@~blEWAzHYLz
z*F<}bpLNF1S;Wy7+dVYa(VoR4k#zwUVc2U6F*?sfwA1XEUAn%*ZhC5133-e<hg;du
z>ui{o&D|aO72hVl#sOyOVE)a6S%K&^k9AUoWZ@%6N4+yg6kzZG{(B^Zu_!xzN}!pN
z5#h*E$EF$Y!9QE(l#rRM`pK?|@S(aYSSk1|>+F^zYCB4#;FTzl@Coq52|U~IeN-v#
z=@ES;d<mYdfRSSE+q`ZjJ(_rnlJ2Y3pL7-!o1azlG{jwfGmQH#tse6ZLr%?D@^8F$
zP%jhz>@uw#os1z<ZId08H^Q#AQ)k2uOcTSitn+bgeI{S(^uuuxiFPx;L{)q>L&3CS
ztm`upyoWx`%%N~`o%)F2-<i+2gtPn^8m63x5EV<@M--y&hbUpPMgfx8c*5ZRK=wXD
z&6l<T%G`cEsUIFfrj*!@x_qs?MxhMhnIyZcNMlZCu%#+2j`>a;SA54UUqo@^lw(5z
zEP0nn;bA|bIZf!z&LM}g=MnuzbO~$n0)|&NFcyRCQTTI`H%9q!b8;Y3XK!2xT2G>b
zKgR8%L*EK-OZG&32SY1Qy>A&qc|#?`Jx`?)#9i=-LjR06nX`#$w)&XVj-EK$LZ91l
zl4p{jG=uk{;DYp|{vWuj-e;RvqF2K=c)jgO{psYk^XLsyPk!P(?EMEW@Y>|>`24!-
z^}TW9foy*5{%@$|5qp(AlECl0G~9X;{mv)?Sa>2+gI9XdGoF8flc=ZV_UMlHyr!X9
zIrcZajr_e&uS!}_*sokGdAF~HXU{_=yfE2Oh5$q{VTeo?EWItl*u8E+i8L*3)pH$t
z80<DA42`bb%J6nO%wQ~}<%xZZTlp&pq2P{Y6WJZeGW*Fb2GE}13;Xr0{T7ktEaKNw
zkGCk8=UE!G<7kz-Y17-L<Ox?=_uI%!_kI(}NUPZJL>C39|FYmbR+oWj;V|$43$u2(
zIMOqg+^Yith@3Stg2wWgD#Ygwkw4j0s24zTTVakqeE2K+p<eM^**$F+v9JE_FQv<F
z<AVu%x}vgfx|R+}cf(+qb!h@tW?G6J&2?a#lIH#7!R$UyK#6JWedH;N8f(c{?6FJP
z<>6@z?ABMI5wQADw&E;BQtFx-4S`g7t3i3n(@4diKM6iQiWq-Gf?+Sx3f_b=Hy_s}
z!H}O9A^GJgsbojD=Rgtrv6x_%*#){JWu>MloFi(u$5<(JuU7PX-aU$9Xt<@e>r^-X
zbRLoQU({G!(6=e-i?{8=_ox9o2!Td3mLUwOEv%7%6)z`~nuA3xdW<Eny0dPhOy9+_
z>LgXSLD|M`a#mY`eexr55}PcxsdqTDR9YUbGRk<y$!SkKPqKftfj{@y>JG`B@8O@|
zy2{bmr?NeA5&DJ+04jDE*xp|~t%laBKz-mc?PmUIL!zVeq_Qd#fstn^{YG))#5s~(
zpyW@od}T?$fPGso0!B$Lj7Kce*bM<qLwguJwY#PaIb@HyW7|(jsCDKl-_5Jc$x!Hs
z7!RD5u_jrlVm`756C=n`L-#j07=sDCWzA$2e4lkEyfWpdwW~YAn9md}ihrPz?K8`$
z5I4H8^WvQ_<&**eu=~d2ky?S(67jku4Hi3*eZD0iW*Q^ZAfU_j+SZE&ltbZ~ZB#+$
z>m$(=0h7H)(F`X5K+bVih^4fKjur!*VR`*%vmEI%9Lq!yEDYgEKve`ku@Glv99E-j
z`AtWyl$B!@^>MdHo*qrSMQISHW3vNcguVU!Uy}dw7PSB0d`2LAf`@SP1bp#$I9EOh
zJ_$#Fi>(1qM;`guK1ntSu0svqu;GgO)R39vSM|l!l&9fg!sM!e7P@{@;?eIfOk<NV
zp7h3r96uP7udz!c=LK`|NO|=?!bLM8nDRrKG(I4X>?RNw%RAks2GI6G3iuYgvB=~A
z-P!Dfq!AKaElJBAQr<O_Q-h2K462^-RyG;%)C7BSK8;7wyqBZAS~3U~#r|hiw;CEI
z?`&`$(u``NT$}OJ+K4z9E4Iq1(WJzu@_sdbXe{p&iPW)Mpqy=DHBVLntQ}^w-*>y0
zV4bN}8Yj1PtXc2U)Zh)}O2xI2SyO&wc8}Hh9Nxh6;Z&<?o1c0~xj8B$H7RVl2{>Y#
zaKv~%G>7&2CZN#wkPwm8##k3yrE|2OB0z&}r$J#Adq0xIaG4B0I6t3fV5eox;4F=;
z+8|m8K7FjA17%{0ayFCg9h~sgeV#J=eX6~av_#Gr4bMr18S#ac?MwL3xs561E|Ic$
zc}lOyOplrlfm-A%d%(QfzV@w)xa|QKUf#3KkHb$~vM)jQV>4XUlT-Z+K9Nedj=NDH
z77TXY=(>ubdyl&(F(>HJ?@GH!>?Q905}&A44NK38(_r9Ji8IR!o?(h`o$5V`Fi1{I
zM^<)S+c`5KXA9<7<HYy*2y$%B5?{Xu=p>5wq$!frol9~MaA0<f$D5LridjlGpsmet
z?jYM4wKd6Bv2;0L*jc+V!WLid#7=q#CQWC?BtvXu#MHH=*eva-N@KvZkA}}^N2h-x
zUYr3VG^w+{S?n+V;A*T-f#OPUmD5neO3$5%xaaV#a>&iwrhgUKW(fUYAO%z^zEg)R
zJ<R9VhQhQub-gjp)n?UJwL8?t0A?)su406`C*V%n40`!FD-3f9102x|R>JpS%|-;g
zh167Li<Q{OA{rT%CctmAHqZJAJ||$*^XPTF?~DX|>*{jq*Tx6y%d*;`_|cPYW4a)E
z{bhBFS_ej<24cJe28F>yMY-O1xu(u`DPfFFfGrX*wr1-*q5Q-^LcXd<3~Ai(hfXao
zE>c0`X^#9Xy9I&*E2iQ6&yv`lfH+70BRgD%R_l2p$DWfSWw%VPg)|FVVPQ<u8Ypfr
zM@nALJ2Ih~PsXH#usc5D9K0WV<i_dOxatkF%%x=|)=BZ6AeYG@w$0B00e{;gq7KSN
zosbx!4ynqhH2rOEy*WN;E{ICbjmt3PldpmaiNTfzL$xv4dJ|FX@A-$^U;(r<IC{kO
zU$9U{_Y!|Vh@uBvQ70MSSI(${ZDug(DN$>N$6B!)wv10pu+~fd6dc7l=e1}U35-#H
ztxO)t7e05A+dH8e8wQyDjH%LE4@=9X?spT&Nkhf?L8#xLKanAoLt2nLe{D;(cL_;u
zLI8wDcHLXG@#!~F*fN@niQ;p;=R(L$j+eJ4Z<PH{%a8-Yh95D&Xb9p;lA}knF|S_<
z%7QMPve+CeaABnSPqkU;8GRUoBnSo#{sE+Z)4);qHvSzXfNDxp^206Is_TaZqtG1=
z`NC<7f>fJpxN8{0_)bySPn1SXIB|hr6M7!IT0uOTueQHZ{9S4dy<Ft8ama!;J(lG%
zL?TQN1P<tHT17=`L^FBGD;b@f_Rf7my8M)Xw?u+yFj>;+E$n-gqR1nX8k&D+Ra&|T
zx!;2|)KOO_E6BjIby^<t!QpNz5=Ph`+k-_ub2Wmf5e6K;o2$kgOMxSkc`&CrlV<um
z(CJ(2G}Xdjc#CR@H!yxDNc#<=HDES5aR6F@{JXC$1a$shg5&0-nZhUsJMKfGPLmDh
zeAX)BK1*&UcY>yYw)0olXyigr4B(6R2ciVLxiGU)U346Tff&vbPVrc2YcmRj4upx0
znQP*mma(h{pVi>WyueL={KdJl#Se4+nB2LpKAr(1F>C@eepT5=H<D>f4N`jV*YG72
z!a8mO-l*7E0tTqn3H8o;;SraP?G{&6hdty9o82y`fM{OJTy0YJYf28-foxmj`F&4T
zL@+YclxRXsNJQ%TVR@I5ge)i6+ww0(v|YCx+~CP7_GO#%uq$=!t&8<|`bH_YoneI?
zkeO=2xQE&>#2((*9F0!8ZOk{Ybb+X_sfx|Nyg>fu>`WPDD$OKNPeUsin@efh@pPR9
z&}Ota`|FaDQAdCf(}<$hXsB53>lc#Op4n%CCvv?{bODRiZ~a!p9%TL1_6yWOnEFuh
zJ_3wXqFl*(z6Dz>^9Ex4wC26H{~9-PM2Qr~GVA*M#%7``Y+alN+PP~Li#jb{mSLEw
z#7KLj&T@AcGSXEc`Y``ZPfT#lyaep$m<_eV_@s=kGM4+Qs>&O?c83d#3|Ba{CA+zi
z^Fy?G7?)#X-g(E<*vsbBn4a0$2}*On_?>Byi2aa@H!3a(&U{z_l#6ct7Yw`luXN}i
zINJYSUqtheH1*?1SE8O=@4+&+tZmp9jLuu*T&o8@#@g~WRbt69$$k1H^A_M`y#<zB
zJu6998xP|)805CB(~i<(6?nusdWQayz-w*qkGZR9F6s(pBjIy;Vym*f;@-pV9AuC9
ziqxC@4eh3H5;jv(pSg8z*-@n&0YDsR3yM6s!RiGdDY)s^p6ufYaKC0lu@D-+J)6~q
zIfn%5cZX2_2#<}BP*&K6_=Aq@>)HSC+n{NwT6D!>1RE#c>P6?Nx{+J_{HCcb%k1GW
z+W%o#=}h47Rx9m+#XXsq2^#9`C+1ynaFBvGJ$)iPML)J~E_dFbrcwf}KZP34J2qxr
z5^SIGRy!QU7=s~<cI6@b^uwyd4D~8hXO^5gukmhhM%C$w3Qk7%l)~+&Dz_Z}jn8G#
z=lR)tpIZ#YnKOsA0~Ls_(|mh#$H-5%p2*X~>E?5Izeo&ZaK?K4LY8(~#{Z1)7IXgh
z1Ft5}57zB(85((lSZht4uE5cp9@fL-fghW*U#(b56z}})NTr%h)b`5K^mGb1a~;>Y
zGgV^s2d*yUISvJSlg91rz6eG?ok!NNe7DHNsj|x@)(ZGynDH&hqPrsnK)+jXusNN)
zs~D5;x{&qoR9%oPd;tfi!5CZI#q5qoD=`%=yYNR`TT~%>E-?6=D?GCJzL;;J?bO0E
zox2jzh>TcbyV6Du&x0+m9!)dZi;RE{&ChovXb{2}`IAtKtYoBZi4~^QUG8sm(V4$3
z<p?FjR0ii$>t@KmOL?K^aLxxBmV@+<TRJ#x<2=^A$Es()ONen_IB#&FDSN;Z5271O
z{0UFD@PNUFt?T)F(DlabIP4uI@3aO=;&XYN=F$8KZ@ME0^#a+5O}$vd{8gnbPRasF
zZ`yIm*JW{TBrj&J!sD#)th-4TSwysE5ri`C0{8}uYyKum38xVuOPFxO^4!-wO_b)r
zJj@1+Oemwcy=tT@0Y|fj_o6(;P%6as_fr@J49E`TH$`8}ZS1Rvn_-{M8vBHHJk@lb
z8iY6lo0^D?O9LAiIY&6Y-hv%4;k0pu+#ia*omh3u{0)ON1;3a3fcVy=r>?Nw`F}l(
z<hK=E5=gllh6YyoU*FEN6)==&h`j@-E4haG>5l8R4^1~Tn-=dZ?3D06e!;XfmqN)X
zfQqOR;>oHw>S|br!T-zb{%lIh{WaTlx{Q}q<94fz##cqV4_fNrKnKjLvRB=wu3ucy
zSFQ1Gazk4=18W2H>56aO#f#3YV>)@)GwX_Vx6;ew>UrEKeezvW|A;yzAZbVYSRZbM
z_suZ46w{W<NH*;y0jOBk**)i2(2>Zx)~n!3G?}|Ol9x^xtkw3uZCEHO>?1qX!MP{s
zl%e)7QO1b5^~MZIdYMsk%yQ`G5;upDHZ3{pcy%LyAe=d29u?AYY{h6>tP>2Y^|s-t
zwGX4k6RC|b(s<i#TjOBH=5*}6d6nIfV@a3tS(!!3439j^r6urU7xg6<Q<<T>yGrB>
z0cZ@CMdW(hJd_2iT3)VX{Yc92JB4{<*Z23fo;$^4wTiltFhOMxA#+&3iu!E<Qi)Z>
zqm&Qo+mloh3yL5{{uC8F)M6uoM_@#8U4gLrHN-RQ+K!(Oeygy8hI9n%Uq8|+Cyi=y
zkN&$wX=Ytc=dMmcE(RraE-&c|6gz|Zdq<Q75LxV*jIFtvY(*1CJS%@zX%Bv9jHC{e
zra5@5e8-4)vxDL3(8uJEVgvh9Tx+IjXdi_tq%IaW%=t^un}X=ejlR**4teoXAh}t-
z{6v#dXQ|Cqea``%(2U4%53y@*0T)*9rHs4Fq_|?fp$DQc*v9}DB?H@9R?tt+P!GOE
zc3%5acW?yTn38gn*W+n_WDeO3vIQY*JyTI9kk)Y#!Ig&ZPYh(|Jf*G!v{`!~a~7GA
zG^(%8(=q9RrKN*c!5mf93Mk`BvfQTN-l*i0B5s+s$jST2i6Xer)^6MjvN-Kvl*{_n
zG9(>nHi}qgn^uI{AzvGfswHKI0&^U<A^EF1&(p4e_eaI%v-?Kt9(c#RJO;hDLz>`c
zt<3mtfj&{jY)a!u%{LAUKA^t+NVU>cO`eFgCl1FYwA9o3d50-M3;&8fK~-P7FYPMO
z^!67k8oVLaMyqKVk?XJ77v=eLlo905hjukJzRW311*X#lKKF?H4=B4hE*VRs=`V7_
zO)Sjt0e=R4QKI*M2{uKfauw_!1eD^-lSh?Qbs~6G$^Rry_UK7byV%F0?re`NpaDn3
zu=`x312B(^x?IxL=Ks3Y$vy6kpHyi{NBEQ6nJYmD;_-&CM-=#shd!xoJW2r>g`(w@
zrc;%GIWI!jd6$AlA-Ky-LgBu(bXAXr5qA|1oc;+pr~Yz`=-TVWV-w?g^P;6}W2bhX
z8RM14zsXzrM93)hX!U!}tb&<R%-GS}yed-9S4AX{;eSL&DHzHT_Dheo5%Wb!A#gUA
zAQqE0`f`(k@Z?6h+#n<a_ltP@cV5(-LCHxo`I>e;1wt87haiob2O}gnR?vI{X7I$z
zo=!@1HdaP!%_cc5OI|Ww*iaLqJWK2&zYL0o$^VZDICzJKzB-DR`a3%K49Uw)#<t2Q
z5WT@JH5;-r94^(hig)jnLc&87FpQe2Vx4fc$;hK-{ag;Z`!F^VYR=;s4)T}7>v-Z&
zXQw-1XiS|&J`E&N;IynclQ|H+`%lv9N^SL9Dl(SJ`lhqmhqI9bnqBHn;`+}QH(~?z
z<AWaNw<kH=KX+rUqNPrniEPJ>dd!vDCR+Myx0rc0`Bnw~f$O(}g>HKtW!Evgsd?n3
ztkHC&(OI(dPm`nb;6;1nWR+#Er`w7!$u7Gg4#MPWML1iv?oL2nFD*o6N~9K~VQV0k
z*3bnH6c?>0eiBbf>~=&(XH$%k2D3teUHA#37Lu7OyEA?;_Z=X<Sw%4TnC@MmCU)Qo
z0=Sv98W-?AMt3`>7ZCqv`L2KHD<?a@-zpN|&-{ZZrixSG8(nye#e}TuLd9nn!v3w;
zoGm%jg6(VkYr8Y?mk-GEX@(l`?77cTg(-F?XD>^`F9H9fT>O_6D0uhfe=a{=PAYG(
zr-plqJ{w)Z`SY8A+1as(S@SX2xA%*4aL7o7;kr)5v-$slD_y48lEQGNn+NB4_ElE2
zmR=~IKaD}IoYD4B<#II{l3&&3)}j{bAO_mx?>>mJ*|6VQ)+1wIN5lg`7q-DO&tEfR
zWCb=^ljj3}fW37;CFPqhUPtPPEpMO4GiC5luCS|+yT~mxu!c8sgi+=T4D+3{?Aj@|
ztXcSWHLZi(UIQ+A-7ZI&OP@&Vc3<|8zy5?N<4`D%OJuWNDM1(61|!0(>#iR2n0eKE
zVA9v^&;|ykOTIPMYX$pNC*VeZ_c5e*RFXC|Q;80Kzr-&fv3<v`+xZ8;)~uSN2U94b
z?hD`Vg?PD7?t~5)mE~qeBapmJJ1maYCMx<V?N?GayhnPJP-g>q9OE0@H2Hj@1$}r2
zpFg%)qoD$uWnI2up}oc?d$<Ys#Hv~~d3haL3o*5c4x00Zx>0q>29ICQWEovBZ~-|f
zh<!HYbr;j>@Qq&>!5Qq%)tY)2pISZply|sb9`_oC{u{M^KAW~ri|M}u4m@U!RfZ&K
zzDTzb7LWcGfDaAvI=q!C)l*7zN6d@M5w++*nI%e+(M)y&9qnw{^cq~J{X#xS#0iw(
z$wU!ON@dMQ9C)9mWxM?-5nI6F@j8%>wQ{Fz#HT3DQu-dX#V-fhp`3TPMl@?_P$DM(
z4Q}5B>vVR)g&yqp*V1z7nXu|v%_q>{Mx?}3nZ7gKyQDxdYStq*CcAu+tGn=jSRAq8
zye<u0fyL1GG8?{&Z8uxn1D%5_eD2nF^dn}wi_6mAQ`lL2avvC6Wk>zpQh7b(*G!t6
za_?G<#9Cm~7!$Exd1|b_1kI7Iz}?TPaUG^#)D|GuaAM(Ed+@hU$8Dnzp%njf3{%^2
z>H+;y<~5@7m>D~V!A94^5z7>GZi59@DeY&$IJa#9y2OuRHDY5x-?GdRtcLeu63wKH
z=A7Qj*P<occ-|)OtzParRs(?*2fmC*Lp-b96nl1=`J53EO0{!JsU4*c`cdxs-Md9I
zh?c7gdYB8(QEB7ssOvV>VyELef0y>|hW^@R-9#Vd1k<4>b?w(9M8)Fi#VIb|JYSHm
z-PK~OB`^`vt(S(!vj^7>Vw7$HtFPJctx8@3iF#HpJS(j)wRs3PS&ctt>u!GITduJh
zF?Q=F%PwIG$QY%n)u=M82aWoR;2Z@x+jKs5e}t|!b(3lAN7vil*y9?xYGj~~dRTa|
zmoH}gnf4;1&z&W&^%39*(I@s1DxYUxU#&rJ))~lg2Vq}I+P=Rp2(PH`e18n`vt`0L
zIb?}E?jS#*&1TKc&{9cJXy`v?!?-Ickv(<H^7si&F;N-fH%4*fj5ZOx>URD47#(@^
zM_~MoD<U6_d7y@Rl7*bU!`X?iro%KFPGB$5h&mh?yd+6I<6dN%vo9B}qQ5x%ne(vD
z*MLx$t!!|l6Qr9e3+boJ-=MB%{AxvSykn`uNE0<I({@r?k~0vn5KqhPo_RJiJcDST
z-}|s?bX%@SQRmcK_9gPkV@0`Nh$gc$(mKGIWV12!;E|dt6Tpq|#Ugx&kHDeHN75H;
zq~9>#8Q7{oo~guSg>9ylL8JovVV&gT9hHKY2y_`oTMD?gPH2iS;?hvG@wkDygMxX%
z%LT8A|H5Na|7FO36#e%XJ1<m!MKH(s4AvI6UzpC~uQCVj{QrSN6Wm!ne-6ywoH}&G
z>GP5y#9?)w$<*|pp-pyeI>B~7Yo>LFm+AJVN8yR-PekfprKO0dvTd43Gmz94H)=6Z
ztPe}=d#0^6V2<a0=%g-Ry(rexSiaa3=GAcAF>watufA=td$-|NDZVC}cM4kI@?Koc
zwpFEj1tfpr7uueqliZWDI~#!=(U<&&gWqM>d<t}C!~L+GEtIyt9Ln&(0!&0JCD&HZ
zyJz9{yQfWn$D&ahlt%;LIrN{8MMXf5YogQg5O4<%8vMu}=chwRmA_<S;_7Il<bK(5
z?_L3^ZzH|uzUMr>vsq2F*}nw=9Y8=k5Eo2|J>C;$<QnGydeg!WK~CcQ+2ev7Ef&Ts
zl-SB276~unUE}YE^6xw1TZe=@EmZv9iUD4QJ8n;>4u*nxTnql1$Q8%f702k?1Ldg8
ztIC0X76gYtKf5@Ga-c(^HG7-|-f(^5pVWu9Ro)74b~lOr(|r-V6`*3%`{xZ5p8CI+
z{iO8lS7caXj6ljHcFQRiZT?_)bR;!;1>>;*H{8(aR!RP#WIJkI7Tp%FGAVQCo}qI!
zgt{lHV%F<-f1k`Cv7B|xDh?9nl=+5ae@c`_`WZ378gnO~?Lng&%ZD0k20kTN<hawL
z4&gB<+PRqiY1xss9Oo??ciqqqgtg9fw`mDm4YuiS1v-M3hd2wYIa>n@Zl}sPfOZw>
zX=Bv~O58ApnmkV!1AU%r+<CbN%+TNcYzmAw{03aqU6%vx(s`lJ2S%<S?@hj;j?G|e
z_6z4c&mrNCm%kH!Iv%r1!i$?ob*(^$@^SijE(IjU*7l*dUWN)#&)T#5`AJ+b4DTPf
z<;#CtseEvYoKPJyZQiU@)`rCDNzGVCn$7P1Z&oVouw4QVBhsL-a*@Z07*=exT0uKQ
ze$$95A*CLus_T8D_uFqx#j^IREN=X#F2Y8HsTW1m#2+{KHTR+Eh3hr&^er#_&V76Q
z5A62;-2K1Bniv)e)u$S7`m)l$S*gl(^Z4Igc2ueEdSJg<sp1NAIi>SO^us_Rw!85;
zquf;Fn`5Q>?;;v6@Oagg5J|gZd;dZM-b$x~dhY%ch{^wErLuc^Uh4b@?(|?VbF1Ry
z!u*Z*1sC9$L=@EjpS%BeSd;%)sa`FniN$Y2{~s$A(cX`@P}6_lq&)s#GZlYD-e2bv
z-dWlIn5h&4L`zm*3da1QJvRR`Q}q;~K-4#|s>$RL&@nLvjuZ2t*;wu3I<oQMh+<6{
zOzipVO@dWd$#Hq@eSQayM{z;H3d>!qfJlQa#fs8!tFo|N9zECX$^gpd%0^Ab0lg_C
zOqudMYMjIr`}u7<CSbM-0e$&ukl2AXyT&`|yN^-C8lM@-at68c8yyi@i$6%|zvS5P
z&%C@8yry|+tjWB+Zf~AX5~mIk%+i~2nYnFNw5h2+EuiYi?M4A0DOf*4rs@fM!slQ7
z%?s&P{yKBi88XDgWyZR#t9bSqP$!P@+iMQ04c#8uv*w~=N!g#sK3ZB>kxGcH_tYCS
zd&cpk#~Yz^-`r01<Ok-j`Ew@2={5a2EK&F%K`lP8Io{|ft^Yk1XI4r%ax2|H4^i8~
z(YQ_RjgN;YvF#Btwsz<-IsXIK`Cqho-bOJ6Z%|Snm&)h|w{Ap7e|?#vd39?^eJ$-w
zFd`)0C8|b!<ZSIl3v;S*BY&S~stqrv5STes?~<VNEn{to1laXtF3`?GMT1VrWD?NY
zk5*DP`k{1%I$nFM_bV{}E^Bce8ce=dZ<*AD0XjjS^+&j=RzT%Rz(+<7^OIH;`v*?D
zvcoe&bvn7G{jK1nIDgys-g8xC!g5!=n<s{zqR!)!>M@I`%t|}q>=;TygLu=kjS^u=
z+XCCD^(=y!a2oWhfl2WC>MH0H7bg=5j_O<!6*52lkr%rIHlcF)rH?E7oKbBGn2H0%
zA{Ue+{h$`m=GfG8(J!ael1E-EzcWEDt)g=LxQwt)VjE|7t8c)BXc|`^SqH4j+#dYn
zw8RI6oMsMxb9N7GxdRkP+zu4^tOb4tpejp{VVqlqe6;M}Vh|@Y6GVh7en?9R$8piX
zOA9ScS^i`{$~|LryWYpQCWd3%;72$6b2{48mG|n@;A=+PSMwFws_7So8V7QQ2|((?
zv8W!_y<9m_Nx0V{BlX(}?)OH+T!X(qK0DVG&c|7!ggro?c9y1ZqeT`m&P1x&L24z#
z<Y#-@>MtGQny^(siUvWDoP2kc&uR_{vNqPf<JYe7kK<<jh}71<BazBXF-+|E4&Ngt
zXVcUg)#gWax)Pm8wr*OVSg1TW@L61q%tQ;O3^-_LGi@GUSSd2;6qiMuNl}XEf#bQ8
zbyabU?l@Z26@E8rtoC-FpR}0iVP#17<r`ioP*z`7_;_CLtNf5Q%*JVrS*AH|?Q5_=
zp7#S`tFhYCAFSVl6K!5l`wUlhqSD!W$sRq|XpY9VR(Kzo?N_!!YQ64cteB=owVhyD
zDvp4RO~zK?>YZSxf+wN>nd1L7+y}ZyQ$SjbnNE|_o}?X;&nbbY>SKjpQZfnZhgp#f
zUu-9$lo=Eo2DEk^vOJc@29?X_Q}^)rRtY*}f(}0aNIXyr0xq_`xX%fTudhi+0iT*h
zK>}}s;aq&ht_`!%8J%(9p{l?Oi;!l7ytwaB|0tG}Tv==OV?f#J+$pQFu4$cgy(qRz
zi^uG`wcwI4^JMBe@gnw~zpZ$Zq4K-z6E;HA@4a@ED4#TLR^z{F{f&K*J+LiFBs0v`
zxDT(L@NMzjp;)S&5SS{o!JrJI>-Cf0t7Vb@u28A{iIcG`^)O1HBTiDN_%vTS1}g8+
z9F#m#6IX^Q>*%|vwO*n17<hTFx~es~7Z`C9mSp4*M8(VS)PR0GO|M7qFjgZHF6T?F
zMytiaHzE3{Q%PB_3L{#SUCcuXl<wc?v3?nxZDS+`HH}uCk$w2l6#~K3>PswL3`SBc
zeP~uwhu+;2iBQ?+R%b6m-O5$M2V)iX{BZl7Kiyd#Skso!>oBv5z`o257j`Ionnw9+
za?&vR(^Eppr3xRkN=x3HMi9Njx2e?a>Ic@j#7@+{<z-yPQ5q6-x<~ic9$Ds?E-{6F
zZ-n^m`xot<8r39MDexEZi2)9u2@5Y+UGhxkEOM)kkFiFR-^SjKACXRI8N?AUCabxq
z3SU8bLt-ZvStLl(pZV>aD7U2SjTrGG<EgdWD<<$ZTWU|g%Q8akc6$m~^UPbVKvTiD
zQ|gDFW*^cM;=?5wB~Mz&Mgx6lg{V6wa7;#+^HQ^w6Ml*wmOH>t)7pguvn)5+KVY3G
z#~m{A7%m7jUG01(vp{s3><tl?0XpMd#yrY#h3iEO8@LUTZPS(U6tmai^4X6H=kmOX
zN`chdlCNd+^Gz*_zDb5FSQoH$cP*g6k-+$C_X>|s<HH5=d<@ZIz$m(iZXdRXp*U1Z
zc3@9>`bvrDd@DF~XEB}OXeU{|tr&PS^D(>|Fg^2<=4_p<*{^jCysQ3k*rw|4X6B<-
zW!bfw)t=jwRWQqGgzj0alv`fM>a30X{5R|jj^x+LhX28aR~QehY{@GgjvZO^%ADjl
z&`4b8&!>e=B55h7*T-E>965*&W7dH@(|+)B0oF}OkcOYsqLA^1$dmF7Eo6ul7n?j-
zPv2!|&I9%t4dEI@UE}RyVo<R=9U7(2z6Nhe(O_^EA=ho+Ms*!5>-D;+p~`mvJ!^nt
zeaatAJgE8HQSQ6hV&Z<QY9j~`>mRHIs|5uoTIxOtd>!z2v*GBK7j)VdR4hy2)}}0u
zca9oKe~FOzO;df+4njOK9;|tMF3r-MOEiRErH>h2XpJd`V<%bu5t*{1dhJxcI@a+R
zv3eF(Z62DCCF1!l)yJ-uRU6GuM2rEFL%~xIQ9pRs@#by#HGH_3Lm<;XC|SZwj|fSw
zX<07`^M30w2DHT?q;5ctbw^NMB)}(~G#KDk5`-iZoys<`4~fWU78vxzw6u&LSg{2j
zyE-j19J<Q0#j)?#QM^?|1pKn{Z}SW*s-C1RF^fVRmB%rtE2jpja+W(9=*Kc6mvjgw
zXLwA6&pw6T`8OunQOzTKmYwPh%9-?f%ZRf2msYtR4QD<|3K`d!0oGgD9Xndk8cyh7
zWsuG-t6_{Pt0G&u!N7lMA@66_3BO>Vv>^nO#27kujt}(J2K#1~om2;zS6pTfq)}x`
z_R>C(X$AJE&2=L?RdSt$zWZdm1_!i;u-a~NbXcCb1|BTSGi(ab*0;4EN2x<As_F|J
zXunf_N$C>EuR2NYajk$r7WAvATB=AEJxP=Va^+y}?pKexqcKto4_MHX0YpGSr<6b$
z$)${d(K2~KwHYtdy*Ek8F0Gvr*Ya{{)s1CJ{aIAu)={}<cNg#b1!W2v&)wMaL<^GY
z;ol7|K;7%LvF$U#ocvtZTbv}6chD^!Nd#gSf4vo=Xn6Cq^^nh$SeJsG!mRe$Q}9->
z`uHsCNla(#4E4G@?~|(P6<C>8y$g51L*={r@1xEkBwn(A#I9rBE2BORl^)WWY1kN^
z+qtLNu%hQWjVmpBgw(k-F?7!x`IJgewfbvfRR9By;%2;<wEAb?572OP&VrnI8Z3U{
z-wZOz-{D+DV9I;()4i{<c~0kAFk5rzZh7cA?kba1x$Tu(On(hu5%K?YhFzUQ|KM8`
z2$(dY#QZ3)qd1xBbnYR7_Z3*lWqM34?dE8HqgNxt{AVZda?DT-aC>(8RaO4+-PPjc
z&|8MlaN@_FGdvPHu#NO%eq??RW`Z3jmYx}!h~MK)squvDeiHIJR$h7aIDKyd{yuTH
zyT_@nk;<Mv7_YfPenf&GZFDw}baKLA{w*c@hAe#Ll=sBpSH~>fLMJ!Rv_8ML3Gsjv
z_Haxar}p4417}`!@1Fy1^JhIuhTIc#x_iX5$Z-Zf(Kt%!`MDG0@y68U9HlkZC@=#p
zF6+z=dvzx#e|Y8NOZ=USUaHR0T_<(zPxj--YVUHK3;2%RoTN}@*T*%ck4I8=VM=YA
zn?a?7b?!}mCy=gq%j<gcHQ{GVkHwgT;p3X7`lf`hEki^GSiJ&p`dZA*aMUEDpEa47
z23HxAM5`y<meXR~mQ<|A#$<%NDwy<gJWne319b-0v2E8rd2gD=+>+h=dZXld1RG5u
z`WgGK3_aYpDA;mqUxtoE_z7x!G|7xE@b-XLqvcJZH?(3)MmVybj+aCCKCs99pNQum
z-5!g66u6=h0p)TLm!Ez|g#{_hW-U@|2h*y3$6TIy`gV}h6gA`f69UWgerMkWW3=gJ
zhF`Rw!L0At#6+Ep`)058=M&bL_}=2*#3-w@XJWZsesw_%Mi}xt+jRmTj+4s$AxGy(
znN>c0w-DA=9pQdVZ&PLS=HycEYCm-RXP-GztxKMXx>#1Ut}h>f@$|*?d$oS{tq(xx
zh>ng_4ZX&^koC$KeX(y&<1jyI(Gg-WXd!qu&nwC*9uZgPc0_%8y3QPin@=sl9-H-9
z;3Wo1auohtG4h$$FcYUWStg|CeeZF$h0T?$?TFu;=plJZte-{!du>ww^BkG&DIg1L
zCr`3J>5QTW<E_a0p_^L&$|lJ;?1<eh@hdUqJk=nM)ZxMjZ)u(U9H=s~!ddJKc@BU|
zobudKg(i97WAW%O=Vt4gVJ^oM{KZ8o7q(5A+p`iQ(rcybxsNov!fl@?d2Uw&qzUHx
z>ZK{3-i=U3x_(a=qUuk<N&hpe=Exr18)%sxXHlZ`zV<u<{Hf0ESG-dOqait1ZNcJO
zA;U&LUpO*NkQj~#BYcqM90y{JTw6meA!jDgde0i-P`$E4LZz~@E^NeT<emI+vPeEp
zbdg)H1e8`AygFZI6HA)#XHdIn(sLpi{i7qfj?@6rnr57`CIF3M26~SBAcEh?;@$9+
zf6?5DTd`YNli%FLw7YktzA{~$eB%C<eF?beQ~u|}UWi*-7mg~mim0-PJ2-Ds&?N;z
zk@<tAvcW%Mw?p7dS*Pz&-8@ukfr|3D9p`8KKD5};YpAyjGgj`Fv7QHW#1XrMN1kUq
zjE1urO42i56BZz*qj<VXQ)<WWc!!ZXc>9j#8<TS(B|lw{vNXKoC{Dtz6ff1I624&2
z@NYSaUsiwB`fc!)JcjsI^q)^_Y|mI3USr4S^*zg~Oy<4IwiMLJIC;|8w7QqPzOwm0
zJ@NFCl8Jj?yE5|g&^_Vf)M?ynd8Zu)nPr`Hp3((o=AaJk%7xk=l;W*<r9uO0_};4&
z8E9(c(Y0&3EjWy%db3ip$<_v0mt5uNfCD3Ib7akVBNP0d3#Dwa0+!dhbVTQxw9REb
zgro?+^p_B8DXVh`f8-c7=Sju+2-VMO4I85mu_A}fRIA*0l-KM{Aarl&%rsa8KZ<F6
zP-KRs$d+KfXF~NEdP4CDp?HXJJwvj3XT-J^s7DMNujq(<fTn3dPZ)b~Z;Jwdit(Fo
zzRvzF=yXsZ1c#GoV34EMm27ctn89snIs_;!@^rHsC(`Xx$bGIm(D6kojq6`jJAa)N
z-TCjF`Y*NA(WGa<TzcN3NvGF}_=r>!0;@S9E7=s%F;rZ9_OQbzuK?Wl{DR$sHmI;M
z)zSKf*3wRy8Q#hws)8MNclM9O$0~6MDsrrN@~f0uf%TNXbD|X}xy!TqC-`hDCjCXv
zpZ_*0Ev}7D{lX?eGEH#TiP1>kMG5X`=s;Gp9Ze~^46TctXCh|&VL>ybVEyPbE1rU?
z{w7sZ2~=LogK5dt<j6{(c7qLZ7DK2UmI^7+_V=WJKr^x;eTrPZpB6EtX1wLhx{Q`Y
ze`cV{&jEqFNb49`><Ukw{-_=^%;0@SsTBJRKYV&fOV<_NME;vXW@SjGU_i(TI9Z;e
zphtxbGrBP#w7|cmc0|3d!~bBXNCW}zIY#+qA#q(vj|FjxVEyg$F@(OuzyEX*8nb7f
zk-j`+!bnVW)_S~$%V^iJWm*@6!J%b0COx@4P_mt*I)KA9$3@5<<?BA0wSZEputyP5
zvO3)AN>&oCY93;1_f{YQ%3`J~e1t@nMyu#(jdpxgQ2V~9VKvTlpi|={M@RV%{mBNY
zXL0AOCVp;_@qpn?&EVcDV=h1vQGVf5gr6rHPU*xj!ZL2oDGaJQ%Fg;!t_r4;lsgCN
zA3-K>m6Tw^9j)&5`?toS`B$PGz>k{s#3Nci_PCTxgqRJwll;5lLX*TF*}d5*>_=p)
z($}m)=mI>!7Z(?R$5)+8RNvz7`V19d;&pCE^RzSH=0ImxS#$_Xu*18ir_QTB9>J@&
z8o7F&e(fs-*_zJ0g*S<H!0tx-4#?m==V*-st@`xJ`zit&`990OAo}bv%!ci_J;IFU
zc&2o5daU{R6+3yMMJ@J7g)OC%o{;k6)sfG>pPH7xw24X8nmH=4_hnfy<RW@#cA2Zk
zHMIT%_i?Do%(DCRxzl2`KpgW2R=5N)w_c>eqG#97I(s}}dJ`Sk6>?d{4+$y?a=lJ0
z)SUEq$D=h1l+`A;Er>l`#_AEsRevS?ra%M=OFyFxSYWt@KM>Ns)^faTxp14ql^h(Y
zby!#?ur!^BXz<J=d_@9x&}zg&)VA#%dO+~@<0ZgK1$%J)eWEIAcauHA%Mul>Pu7d1
zw56nOT#z)n1G3rWm7Q4%!j5$I*xN+al6#bl)OWBSgS1q4a>_A>@P4S0@mlO>*bb04
z(LCz=DEdnn+X_kvuzXc>nIfTpx%}&0fauLr&B_W<|5OH}zRaHJHzj5I>eH$gl^PU_
z8_RT;4HwTVayrfd1(mQ|CqmnNeeyTzpg7-?FuC6DsTo6z57WL`{Et--4a*<xrVXR!
zzqiw?m9i0xze1daCUHBW9GcV~y)t40SffFmrm2PR`9Wc*-ErPNMOIK&)$d~ZVbvo?
z5H|&7(m}KqhBSR8ZqAyz1<xL+=bf42S)9f4KX6U|-8|;XTs;;%U%QPb_lPD!^tMVW
zie{Gqy@P<}q)|<eTE_L9n!lx2#ez0Uy&^pmPidu$1fMeM>9Yr@fY7;LT0XLa&H`cM
z!j$_OIf!pOJTH561igK1SBE3Wh&Il?zBf@C8%1g&;8j<Phh(a?fl-yfs~h8kz=~1=
z#V&_6HN4OeLdAi3OTU(g@5k3W$Z<mO*-5<1A!}acQ$i$qAXzDR%g?I=z0Q<Wp7E?N
zMaBGEG5Jzw@LRHKFTN6w#`?>~rZsz_+9#b0*6Ya)L(z9k^q*9mVAzw%q8O|~>nC!J
zm5&x*M>8j7_HyJpX2zL$`>k4B%6VZTe>Ya)W!v(PFw7jR+WQq0-TbOPW`s5w!1px}
zei6H3zQH(+O+_P#w(ny^yK%j7=NT#9+$zrp9!GLkjR|ek^S7od1Ca3brCYRf<pK1_
z<44?e_Js?-HWgo)TaBzXM_-1ZUSl1bf(L@uSXuVj)t{q=4w#zEW)TEVC1{-BQV!FV
z{kF-%)6G!VUkvve`7-L|@(PO`pq-0fMAkjo<GV36hhH|o0q4sjF*AGv-89s`Lqk)S
z!(gB>*;BhqJ-W|qDZ{XVi^UXQ4hZ2Wf0BVW5_8k)S&!X5i2poUuU=@(+$qGNTk}iC
zT-*?ZDxaExOC;n$Yy8DFB>3L!&s6a9Ta?Th%*0eOJzIN0`zwm3?$BUmMXmgc;n|s<
zwZvKV&H^6Gt|Kvs!|44jR)*7SNS!e)ME^j_1InK3ZRKFU!Sn{0U6B*omQ52ABC5+Q
z&Irg7sK?vFX&22CYDf?bM$Ti;eZ$I@;ivT3dtNu{&^wP2Uflx6lvT-_!VQTjDh7==
zp2Wmaw9>VfNt><6)GE5%m~-RPS6p4pXk7ujysiO;9U1{ukeu`K{b7%Kj_X%RfR)w0
zBgYdouU=d(ft})lg99-`ISx%)E{Wo=f*`+%jC@To)O#6lna;E7n3;6F$vxd{_!`or
zkf*GPjgI2XVqT1DDCB$#lofeTyt@L}5Yn@}afbkDs>hr`?5)oS<hWn+gmp4jJ#+1-
zxZQ0rzQ;h9#8mgyoXN(ELlt+o^S&YvrAdsm+mVIR(v@B|9aDiik9t;i%Z3H6^Kieh
zxLnfiJHR~Ih^-q9hMqwsHt_ZlV*Sn>B}QvCX+0JUW=vJRou~J$cd@b_D!ene{eQd}
z1X285=L)qAimc{0rL@-qf2ARhHS!s0-mELBLV;C1z_V7)JWuFnW;X%-ih|}3{re8T
z1PScBzNQJ_zoQTz*ZULoez@@qbO2$JI{>0wl4Qi=P!55d=X+`d0L<ra>nX0uKH53A
zspT~qN6cWmOiSesY8vt^hlkLkGR-24iJ}-)XH?1-ZV_W>0Js+kZ1`?*2xmNm`2!Kf
z$Ef)c*xj_vGA!YR#^}zM`E@H(>FhGtXZdW)5BDrJW)w?$Mi2O5fR+id%3OH5_VyQd
zU7xRwORa1T=*diK^PP0<Q9g5oGSb7G&gEQk@ES8zH$&Wuh884Kdb}XMlZ>B=SN1ET
zbIm;8tEHpW8?t4Rq&WE{yzta=bKLfm%Th+DDS(hpC3+p;aXH&j0KI<Hpa!<2X&Ia3
zk8mM&QX>RTlIkz|LrMKSbaiG1-zo@@BsYj4dd1Ggv-Stlvre-^4>Myc=T8sOdn8Wr
zox3q90>LhgB_}+sp<oYPMJXD~j^hskSm!#mW>}%YrEVt&9HDzRWBJEp7N$EC=)dH)
zpN=M0#~whIUKFZH*jrp2JEczj6(*d<s%E2b&t<wIYAKbDXTTf^ke7<%TYo&^x9rL<
z=y(mcdzI=W0OiH94^&<O3041#y|)N%BW&9>oy0N4%*@Qp>=<Kal9_FpWQI6#EHg7R
zTb7w*h?$w0nVCZ4si`{u_gBr-oYkqbI2$dxdZSlTtNVHH`?~CDEGK&=FhpZgMdMY_
z_)N?_=Hrc2+@NQ`Xn!%O(RZL6Oe|VXjim1tSj3@S!~vp?O}^E#bpa%;=7*}(O8gb~
z^QPQrk1Ct;ZsA)Iw?5C}kXjsK>~v-X81j=q>xXbhxQy>n>I(`p&w=Akb_~~1gT$#e
zv`S1Zvzm%R{vkBP3}CUv;XMVa*P{&IdjxpnL+oi{@TbzM1fPOmoOVLO*Iol5aUrBu
zi>#OM@5m@ul&MM+(aazEco!GCIP)r?@g#?tNI?Y(*GKRK#cUF$18a8%0ZXW+6--v#
z6p}r+v#6d6h$Q8Az$JMV94!(1($@c(EL!322YnsS92Ij(gF7z{eGfE)Y5oBsBP?($
z(woVLO(yqxR<6b0nx7`YD?<b4u~wtnT<?tld0~7Y#yILw^acgp<ww>d{N_23XOA!V
z6Bd+5Tg<Ad`3_4dH!bI2C-A70NJRmDv{N6ZhRhQeyV24co8Wn~RyK;a#Xh4AW(5RY
zx49VVubgSKEwz<?VOh&0PNs*d6QI7ve|A_jZZ;*BgSn-X-4N%_8l820CH3pj0kym<
zYAcq=XZj+!xYT(yZ4%MiHq3rmHMLij_xQICNEofUKukYn^hK$jgVVFv$Y-%tO?S%J
z4w~Ce`5LWT0f8D&;QST4Jc+8Tg8_|1fj%rjg?<RAA;QJ1C_>mZ`(cG?ajwN&(Z;ME
z#rpxNuRk}maV$3Sw6KyEJ&mK)35=fCOGGqBNz+^A?91ci?!p;Uo#PX<SP1j&-Xqkv
zObi*dn$1))L73WyT)aIQQ;i|I*YGG%7ep)HkGwljy*f30L#<tQ%C^U5e~!7%4;I}E
zG2tqz@(95EU30f*^ToO`1r~zJvrfh4HK7OZ!8NKqH$)FUNI1eGo)ec7@?4s0@^Lg)
zd`X&-6u|PDAL%k<7BK#~UuL4Xj)V)ht3p9U_Vd#~mi^KPZB9MB$QR}#sFm#HC#O_^
z=1V8p{@2WMC7`y+z@Fg^S6`HqtdA8K*EwlDa`;fzmm;EcCNim;D`^iq@))t^j2+07
zFSB9XJf(1qX0fu(r=(i}o-l;|{gywvszl^MQ*K}!G;vU`$fYaAB!JAfH3m*ITV4N2
z14p#KFP980eMS1c+g@$2Ppw3fW+LKUKR1}fVcSnBtw=0vhRXUwF=CExf6=)#;^!m(
znegV+fWEZ+IR8iB2NEYOxE3}8lht1SCXe}B1PAV>F8)9>)Xp#?dF3=MZfuQNK{a{S
zZ08LXujNCyP()Ct($8D^Y)DAXB=K^B4+L{4Yz72TMjMF2>*-T116!E1^o#EK3ZlBO
zHf$xnO5sD}P544A6;VuwFmRUzhAi?7P!e0)*%X(Lypd5Qr$mrD;-gKBCGDA44LVL5
zp(b*$bQyi0#W9znu!)y=goT<@CiSkLaLgP(lp^1sEZ4KE(}h6in+hba_M&|F*&7=O
zv0}JA@iPc_<B!c!Xjcn+`t*>+CQJu@hw#YTj8YY$y_$^I!^nEZrp;i(>c^_h<izA?
z(44-6<Sc!<;;6GCuvL0(s3l=Ln9m1#+^E@llv18+U#^9|D~UdHZt&p_Ckk)-v!S<a
zg8oX=0qbSECkeJGn-CmEMuP2a9_^a}OM{5E>n)+amZlI}<rm>cQk|!gzsz6p>Eyt9
zQZMu?zH*>G!MZL{I*qXK5;1igximM>2W^KJoSf>I+CJLy^fUy{O%%c}sQUWlRQ!^>
z)*&JDylcqhnHVqgfE=1p6#`wz{pHxVP72T3*gu$HKO{h!8RawupyO<r<i7#svwoAc
zo){wM^s5}oE_k5qL^BiseVEr~?C*!+$a__=6yh|ylos&?r)7;Ng&&t`0YN#}FQhG1
z&p+cs?S8L(<~9HMWyMQRrd7}ng}@+^40*9{Po^hjuGL+-$PxannD5~V$wI&!w<K^a
zt-;&CkAwqHH0(?Q+glEGpM;uJoN(5}RIIWLScfC17^+rda}Uy3&zt$;#?b8AX-4=b
zX94!ws}>BlsN^SS34`UMWjSzXpG=1s_+AK(-~0PHjM8L(z;B$27>KKkTxiv;ofwIj
z4G&!z$4!o8U3Kj6dm9kOZt=#({ARsR=&nXHb~n{{a=rMW9iu1v$o(`t+_=T~5HMg&
z;{|zIGa=vJrm`-j=Z#VoYF(c<^71=j0(ZH!;DWZ;L+5B20DdkWh(e4VWW>c(M)C`M
z@Flfv?l;>|lJSH+IdxT%T@G1do3|+e-5sQ9&6^mM^1)>Zk5x8QZINtiWU2V#>wcRQ
z15W_hu-Y6gcOEiKyOb6RmasWUounznO>mvk!BzWo1a#|?I*sJ6&Ck=vmroY2+O|_9
zA(#A<AAe0DK2QJXr<*<agJWY%8N1esaK}4A!Mey-4SZ`~LsGvb{Db8Eb<vCA`y!}l
za^G`L>%#}ChOJ!vA<$Ak8cLY_T*PRnE)sfuEGu{P9Cgx5dbU@T_azVI+D^0c;qRXj
zKaLx|QefSEoV%9_#`(NxnVav*0(!xrEnPF{ac|og0FjF5lIlZ>NRV1BV7G2FW6asf
zUg9W10lHL1+WP?qB+J~Qy(MCpSaTpT116K6^{g3q01bgfUx?U|F;57+)1j}~0|?wm
zY}c%vrTF-hEqA{wSZFP8gmKg2jKwlRx)5<2hA`SrhY$5*RjtoDzJqf(VUkb6lXWvv
z9T}aJ#NhLgrM!IySaV(|igPrgEDjz#II}h*p)ngoTyLib;UEi8)b`^}p6K(IK&saC
z^3ECUy)T#B$+LYP0+XDwk{6!vp8cf3rr(`a2E)R68N*_o%-o6E73cTz`j4ON;i%1h
z1q^q^RRYCP#u!6EZ+q7MuV>9{CIdBQDsFRg9@Z5|uS0IGYl;1D3B}iub!`umbZWsg
za4e|(9nxZ^h-_&rjta%!ygy3*e`S5&o{%fafkJ+Cdk#T$-yRA-UBwp&)zwtf>Wp+U
zdy7Ye9~38VpO48Y2{4l;5O4gF55hu#q|JHE22FmhTOX5Ms(Wmr0qE?J@sRm19+2r{
znPce9(k)tJ%%3$)aW-Y+B{L^S$0GX{XRlWsf7CD-qtjCZ1pQ~l{{Jh|+4T)#?i_u*
zY1UA+a|bslZ~Q24N?Ae3wO6oITqtLr`p40EF{E1D15lKH6eazK0s9Q_<ZvLS1K_h;
zzmr{>7fl2xXpDiJoB8m4klVmz$|7uOwd9}Hgbg3S`OH#G6*sJndrYYs3H3Lc?vpK6
zJMhW9!VCP}yq!rM2NI*uHdF_}?4KX&Zd3N|cCzRt%bN}T*iP!`GN@JA6JzNJ(w<pP
z4+gb?_3fvn$=iH13xVJ%Y}{>?JpC4-s_|2ThNFefHnWcUkpU;EEc!%=O6$}p`mdGo
ziRVLvD*bPd8}wH|JX0M=q_Vr*Hs-s!=giz4I(>``so&Qr=JJFqW!p#Z-S6IG-zu)@
zb2OQD`qEHBqAkHj{EzY{F}l5fB1{a1p2!ySJQuqcT4ZpSZx<flnn~|9G(2#)Z!UVO
zTwA5~gfxzmOS0Q$B4cKA|H17NQ?8JC0LysXmsd*GOqho5ew5xLO2ZRL%HK<ZOV9{q
z2*m7%aTO4i;PFxnM$#wBbvKng$7xsR&|5S@+ny!hXCigMLta@1rDMxpIt_lQL%2C<
z$t)j{ctbrL_{GT)2nFzv#8=u0xt8^PY<!ji=YZf;fGnz&#xZ#l)Inx45%28Q*#>$}
ze363vRE)?<l_f4WsKi=W!XjiB(c`m7KGDk{26=zA$^NIEf0p9iD&nq@$Cd^1Oj#iI
z73BWNY|ig1do{taA`1|_Mem7yD;=9we?+~mKMtad-+y^C|Hz}`>LC5WmyL|R7!&F|
znN2xCOPhIcv54kF%B%1SDHeuSRPR+Xj=?I-OjYq&8c)PP*wNba_Qb`U93%(Ir6Xuh
zgRl20J$Rt4CqUZ5rv>*VF2K1GyyUG%WeIsU7MLZ{3ByPag0QLdNvSCoL^?v7Z`crO
zk?n{;xG-pZ=C)nAG$P))dNwRac<3r~%rPg@rMDD6PxNB^!9wQVyc$?a;V^dCmC}Fo
z=Y06!jpXw2EMsSn_ClWc&YHy)q<Uq=Ad>?6dIvsC4o>|@FcY)(oi9SPhE!Ed)gY3U
zxKAu9*|BiKxC9J1K5U?Jnf>GD`DyyQ*20va4gnyUg2Qk|O6%N`$~%HQ=3{j?!_<~k
z)Bw#V99kDz4H`TQsJc_Ve>rSS*E{@S<Le#TgYKscJ=Ycv!KrVb@l|#Bah8!SQCdf-
z=c+GUx!nlvdS~im#4RW|3J(nEce0W}^{dsW_5ib;fPVM#Eow%7lh5PL2!21mH(*?h
zVE2|`Pgf=<8k8PBTD4c42)H{4B#dQWq{3Ko<~OU>K?Q#Et64`Y)J)=_Ll*owvXmkw
zz;FQrLX$b>A`-mwP#u*lVt5V@xs|h=`YN(mlSXN#pbB5(QDM*Kk26n4bj6mVOL5CX
zCP(!4g#3yO&2XHA6E~{kg;V3@+wEa4F;9q*frSC0t6g!H-I0pH<w1Ka7j0E_)xGnV
z$SM-)6oM_BhxYmE*VHveLP4gFuo+L?%Vday+&edSGy;n5y?!10829E^U~?Pfit4QS
z_aVzEgn%2m<80!d2N%woUFpOy%{_=`A1zyEw7PAz%W(uQDj^Q&7dMq1tyk$2U_7#J
zGU#e7xmx)B@KNk@_+8G*J8k{^7t_Kj*Oj7Pe0J8ms`s^`jpk0s_Wq*Z4XE9aXMB(R
zzqD?lH=6FSrr3RkGj&W+(8;#fy&nF{D)g<5f69LK+i>l?oF)(}pGs6%c&rZ*jZ8$I
zZJBih*DchL4UDgq8zt|DQM~{WqTkGGeThpiaT30j3of-*+*Xw@=^rZ6s{mP!{h;iB
zSgeb&j<6!@DNY0y<?!3Kr(Oy{-&({hHs)hmy2%$oB&e@ct?Pa5&P~ZxirCyXujq2B
zQVmou*7%m8YBW!Zhp<cN7+v&RJk52ip{T;&MxYvsKKcp9LTxxEQ~Qbj8FjU*QC5CA
zbN*10J0*e8FRNjd-vQrXF@0_8rQ-_PHo(U(X1-MdN^a3J>C7M!GAH?zG@iL3Mxv29
z&mXmhq6Mc+q0&1#lsBSGn*>~jsR9AsV==3ax4v{x9p<JRB(1ly=;vZGdqJ8AZRb{_
zYum!is0LHYHD1+f^<|xQ9U|x8#Ffa6&rOL70mny*L_*}@XZ5cZ-qn%*A!*5x=gd1(
z;t3uGXpq;#7^<YWi1GqRUPU1TOM_QGfLeQKy#{+`JW6l!>Fdt@3{um}Lht=|w103v
zHOAex|77#wO<Z0+$wlbjHoO+jfB2G6?(ru$cTSV)INgr&;kJE8e<KTc`xgo`B<}6#
zCjp3wgO*O03&OZ)bYp;CB&!$BfRZX{!kN#7>AmQL4Rg90w>Ni;f^m}<v|j`9be8;M
zHPVzHn9#PSn^Q#W0XbZ>D%#S<i0w14=!2n4RlLY$;L3885jRG(?Y!D(BD<S)<EZh2
zL$a!>#y=7_-5EM{nZnZOe(x-D%0BZr9FK>N2RU?VFpa<8me*s#Qn-vX7$;wK7$ZJu
zZfA<F&dPKjVQAbTH!=3p=pTT=t3(X8#8yV3eeE2ciaim<R4V%N4ms|Zod~GC^};Bq
z%uD1gW(=BX*!}e;A|lk(?YXeGU0*LicZYBKXh*6;@`IU&`46>HcjzL5IsGmy!q7ob
zp*S$4J@hA*Rp*28LC}Bd6aNF7`QLntmDg;{p!`>qnZ_03F$A4}6O*9~T-di7;yyt(
zs;n$lhWFKdg_iTwW*caww&^U?CyNz4Dub_VAusyL{4FQH1l#NBu5O4mli*9QJ4a84
z4qo;{uZZWnjpNfDXeqPNRftgAK{V9S*gy+%p;Z~QCRv@AUuM(j>5b>kDZIxH(Dnky
zS8r?R@vo$meT%&srO<9n78+bjK*slj*GWJH>mLZW6QQ7Y`yZo#k9x&12ynvAvv2*W
zPo>eQZ+1IXX^X#69ll2=9CK*WE=FI*yI~kSNV8b4HR8a*x{)TUA_%MxkZ7Q2w<3w2
zZmki%9#48=<Eh!W+76;q3Bpv94&5!Ujhm&^bmlgB-$P|5z{9#ob==SU+G_KtfhU$b
zhlK3_s@OkW9o@hxyvWTXFDGt2^6MSrOT++2gi+I^vV{s|MB5Ac;tt$5!rhO{AjZ~4
zUcULiZYnNxS|y}1B(=)AJ$0@Ezs+lY?s$uMt$4}LKOh7<(NxnKj<B$AMEvGyi`k)}
zH;8FWkTvj3KWjPULOM~p{iP!oka+Kc*?n(zKviVoj86}ow|?Ld(50hCqgzv96A~3m
zr$=Wn=#%&%t+H4#qR<4Yk2rz%v})#|^l=K{)7Isiuwr~ZoM~pm-romE>OCxnd_At>
zmp*02mX<ONZ}5uVqsi%TuV-7UEUn|9W{hp2Y@-9#D@lCSjVzf~%P%-LyQbH5qhWgF
z9;oxwmhA9hEmDLZ!DH#3o8KrZlE1{;S|9jgMrHT_pTX8Mz34*UHxobK5aGY<Sahl&
zT~S1wKTa+l*e94_qZkg&wZi;*iH4@5GM6^7?9kr-N#$FZldF*5<_t&ig&%AS|FigH
z6`QL^p$R5@dLL&hWysk6E)q>K2`nZdA=aOQa>MHqcShNkps^}*s45G7IyJ*qVpM-C
zKZ2mgOHUzc<D3y;{Y<efA}b-Yk*$6%B9ytm(QJrSC&mpnN!Gj)ov93!K11m|UX2|t
z9IJ5EGO@0A7_0-Jo@W(}kRYm~^&?WF*h-C41A9|a%<)*e!FD0*_1;B8D((wGVJe9_
zzf<Pwj%dZ!q;E@lG!0X5NyWm+Fw9}!^HRE>+8t|aP;6r1ZLpnr*ifZ}KBkSb6s2ft
zkToq8pPe>SlvbU@+BXL?e=;g*Jk*b3kE=QN*89lKd0MkEf00f^sI2QDVauzC%5UV<
zUzgY)yxd!!KQjU}OlOcuj?%+_4ijGu#HCPIR0YLY`jATCMg&)XVkNVRPt-JMtmrT@
z@V=>Y=d_Fk94EIQq6C#KjC)(pe}3St4w~PfQ|;x>qKNut@mmf8Lznz$U|)sP*OW_w
zCKXLN+z^;5Rf_cB87h1}wS9!<DEXRIiiecZa)E-XSF%1|Q8j7J{~&k{<L*YcGs6DD
zY#~yt-A&p+OINl{wOtHo997<|X+H6P(9gdPlakg2y!VpV0|jZN&0kUpg%z-Bq=K<O
zMd*5wH>lBzJA4(SH}F9OX<*KTta9pMvFBdBC4Z4KHCalT<3FGe;U4_~g8tfs$5&nj
z!zZ+x#hkcWtoXB&t#j8}J%F-Dlk2Q$lill{9X1Gz*t;eing0w3&F^*-0EVTe8lRL2
z=PtrtZiiaU@HreG_z}!UY!<&rlx@5lEyH4<<?JOkVgohUM%w3iO`u$k&@=LJ@c<82
z)%>_2#Xt7x*p9_HFXS3?d>~Bo3D1#K;DR1>eNH(R)NBD3Z|0&j4t=K~LeCk#mrjDk
z1ug<s&4jd)@rY^#36b*U7v3VDe9m(k&1HV4;O3IV!bqsN5Da;ExZbHM$D@~UM&(zj
zt3U=!xc1aUXMbce7q0}ST1y(b-b(hgNOdFPs3Kk6rk_z+?9__}7$vb6B9-g;At3B9
zg<e-^(8Zbyrfd9+$P(+g`w8o-SCEuE&?+X+V+1&h%7s9}3g_o7<nmS?+-2P>8dQ&S
z%BCNm*3*miNHE>^WA1Kqyi7aV71xa`3%^uS+9_)ehgo!A{YZbkY^?t%kAO6W=%k*J
z80N^Y<M!gqz?x>U(-4B=TM0~Qs7S7a1{YMnLe%jGG9a(QEkHoZ#KNM{ZF;;vqdC$n
zclpb^hzi#>eh1oy(Al~v;>(RY{wm9z*Q?jL!uN_SvBrDkj)%XJ1jKuRo0J_BC46r3
z6NNA1=8fY!=&7G>mi5himY?CbL^I-2WrJ+AEpHUdZBuNe@4&Z00NHgrEix%Xfok;8
ziV@#VxhzAf;Q?%d9@VINS{=d@+K0g6V%8raSqhDIu*|Y7jGT=*GCf!Q6gEk=pcR<<
zeV3C0Wu{%miWXa}4c*`RzLT!_s&Jv_8Ma1~z(@W;OF{*6f*>|MO-dPol<CX)!js7Y
zYa8tp*k_MvQ~r$xFei;(Op4h^yks59JFq)P{q3mGmm?BxudI+PXe7py4els<$!Smd
zCkW;9Q;M3}3BkJ_F@GErq!EhY!D)9*E5QW){19@g{(e#eEh*au4ZF*WN(X@@YpyZf
z;6csuZ=N|+R`=;r(l@~A7{tPg)0~{2b}OlyV~TdQ>c_0SjR97no-?b*Qwq)2*LPjN
zfQ1R5CR=q)7S-uR3>7VwE!@q8JMq{OhvV>yyWmWNMTG;cAeIj(QlvL_$XEGD_m-4D
zI@8Td*EsT%C`SdV3zA!pY5s;Dys)5TSmAwIpw?;a5He>~VcylBVNi|GjG(q?*JhZd
z0MakaI%fz1a$j4g1nxKTQ7(UqH=Vi72K(d{Bzz}HNJ);er`!+jGOsX5`mN_)DKa@j
z^3y+qZ1pVejbkd-wPpPOmazYC_4%W@%q6AWoidg>5oN#r1Cgv^zfTzsw@H=)-<5*b
z>+b?yG0fW<bM<a&6YE|GXrndh<YrIVH$DR_H>bi@xhpJ3=%2(K91n$it;8Tr8HS)b
z6)l(4B?jfs>B^0eDby4D;Z~f+zi~F3yfIY_Tz*_DXM>T<M@z9nr>8QxKoeLiRE=E>
z<lT)wt`8@A{HS_Cew5n4Cn@w>#m~!+jTjYwktv&Y@B0GTcn5ezZ$e|?S2n}w(m|rP
zCXW7(PT*!v)LePAlXkynLW}wQZA$I53d*9gtv86qvr)IsP3dQ*Cf0rwe^l3oXd9^A
z<!!s=eRn2^KO18PV5c_2lX?%Sj;PW2sOzOCIdl&$k{Q%t)Vr*b_Vu;+V=6O{1~neA
z;f$+?THZduNNg)fTo}evJDQ57tFM?jie51agn>IH@_;yfX~g`FeyT|>Pd6PJEjjc?
z0&Ra#xV)Mbez;#zN+Cd@3byKT{gd6mc%5%5$9B%i&r9w^(8GvsrsIhoKw<pZq`OCl
z1l9p9XvLzpd0!tqo1|5{+QY;RC94m}!XIg6JNkp-5U4yXS}k~)dYh5S-aXkQ+@)01
zPN4Cm=8AR?Wp&blG*F~w)^7@&Y<Xhjy{P>aAU&|SYkcs<3%pg6lk(89M|5SDn=G$Q
zQEjhh=0UmNwNm2tN!F-<qpPB8AbN`|ISwibIF%X-$}^WV8F~YkJ;Y)M5w`1<(FEDC
z|G{;(tz|9LAfHjfopx&+Da|!@v9EcVR0xq}Gk6DU<Q3TJG8nvJVC2NY8Zu2%M?tJ+
zf2j6<Lj8rVH>7CH>&Yy&?}Hfhbp)r8Xy0L?pfppyYhWd9e8wmiknP@gcNbA`q3pUD
zdGf_7E>F%P&%e0cOns*SxPJ?Z!8P0yi0H&nN8_Y?50U-uV8ut9IGR7^i{N9^4!l0I
z_I?}3wyl0H&DUKr->=-hMbj?f-QSeXVd;MYEE61ynY+RwgDLo8V;P~*kHM5~m>a9L
zS1DtmB0m@EO)07p{iS@iYSe1hr>7GFZo<dJ{}iCGz<gTV>&?bi59;3yL4=-;E@^WQ
z@l^>GOSjo?e>5wO2rkItQrjRh$RJ|Ic$?BcEb-qoJ}G&m^h|i9{}kuINE+RxC}4FM
zR9XrB!!G=CB4#jzWbyvpDlm%&n9Ofr{B*%RADSC0bY@EVL(G-@>16j$DE0e7NUkAQ
z5UM3pNgxDfqaRkZzebs*i(%*ji*8yO^>c<!Tq!N(Kw{m955>QoOOv<wdnF37r=Das
zf!nR5R{)<>y0y9A3KOE94_&fCHZ&nM!}>M|!lvTCEy3wcE2<gLYO=~U$@g8b6OzYR
z#t(EXiEJroC!dP{p2mY4<rsRy3gJgSP-L7Cr&^TIXDQI9j@f#>3|3sc^ONH|B<4qM
zk<VRyLR7c|#&|FCAL(fv_>)~uf;(UE;rMZ~Y@&;CXv{)R&MH<E@g8Hxf5;7Yd3E6&
zV#=T_g&mx3DmK4O$4-{pNRsnPE^cnrs?i;6Fir|J$}1yN>UL?1i=J}mqN#HiR+Z-$
zlK9)apqe);iZHs0uKHW~AWTnS;v=_N&FSxL+L0P<oIk|aJL<Yq`!VxMchRH6686Mn
z>{xGu+(F>~?NO)8SxGd0+lIOma0t2AiCVJF`81bmD($h%>T9nyS3BN~#=MmBldClb
znQg&i2*FfAN@+~G!6x&1oV)O)^exA2VzPNwbhgELV?LG}zcTjS(aihE9QmH?BL{u5
zjxnS${#vq_8kRzLouI=6&~h5nyGY(x_4a0H@E=VMECBVl*E+G!LWHLZr-Tu%k54Qy
z+s@!JCjzb#>@%nsjlO9TD_9#S5LFlV=CAX*Agu}4yIi+>*)PY@g2JDSpF3N8f;qWs
zVZtc?;3$cj6%O;n&>PO%-FGU%(QKtW<0E7zoEHEC(NGuMfhyfufA)i0FL0xk!Gvd+
zq{zD)2MtwDBHH?D;x3wk4mUtrPH7R%LTQ!ZZs3HL<pBBTx|uaz{6w3Euu7*901*`=
zOk<Pm1KU{2ljQnB3xPUcioIU?D!q;*pUgPGr>_Ey9+gc~sa6?Myx5l%NS%Zqj?`jH
zRAp1{d;rt~^x~VE*Raxc+F1AF2Jy-E6#uofEJm;Ta#X-Zv|@Xc)qN};pH%nDMhHKu
zjJ|4sobpJPxHvb0xyAY?GJknUWmm%yy6BH+UdjX}Un?Ckie7=HAO2c#67r1jT^J%2
zF$!OZXvAQ1H@9qAe5RjC*iv}c7ITKyh>j@T<5dA!2brb$hwf|WW5gR72k|7<tM~;m
zVCyBm&xeUx+)d*$jQaRDsw9I$zXKP2+EYN6z9`XqjDPLj9vVV?d<akFixixslKXS9
zlf1r|{la88#S8F%*ii4(NFM(-H&Kv~y0WJHhjtAK2u3@53e!lsSN;bViEeo_*y~w%
z>%`{Wz=!iUR=Qs#2(?(Ls8++OPJo1f3)Y<KRq3MTnix)-h{XJp>1zt}CQ%g8UN{q@
z-Pmq*YCBp@Zb(ve&F11aFf`bSs%Kl=K4la6H4fP`JcWH#akjF-u87~?T2?d;-e7T^
zBvT^a{?kyJk2|9dB&y!oxKKF$aH#W2Va0|!L4ylrn8{lo)o_5v>SQi(K!$1>5Wti(
zBU`yBE79F#Pv<hKSAtGqK1-{Y6Ko4y@v63q0Z>@02sQkmB)O~A-5c%L)c3>C9Ae)P
z8RUFoTP@7&qT!;I0R*JM-+f=;b8{r3mxVRlS&Q~#C^q=&(YHovm+X)v#<0V(Ms0`y
z`cAp8MfGhfXpB(vV~QEA`oDo#QRVqamG3QjrTREA!w=PWZLn7f!SIS`DU*#do)mAr
zn#bs;!B)k)IDhe@|MDdNxBZa+P$&j!kY;b|%APNrshU2a+DCG;B}P$LN?~foW5?GN
z3CP&Gki}Pcv}k<P(gI*DM5b>68oJtgJkaF5w7s$qzW&m0ST@`pMiWd$O4<_HQ`kM;
z$;goZ;nFf{WQo){gU54ubobTiwS8+*Adt(0aN6@F;pM>Iz$l+Cbh`ROf$5hv3n>%{
zJ}ySiq9%i#=1MVOX+>pe>m*O!M5b_`yAm_9gb!#~Pf1qybEqYZs80`U;VO%beQBBO
zF>!W`r94@>a9;_0u*h8f2Ui6YJGY!KzQ6;`KPl6a#!laX@c1GrEM;ZJ&Thnx+Z5qm
zB2p7>g@3bkma}z5?rluH2Jr`e`mwh0QQ?iab;j?6Pi1AeZ8q@nlAOKDCT3u0<f!nV
zY|-NYZB9)tysG)vNi%FuXwdBh>r5^Gjp`rR4-v)j;rV5Z%5U!5i~r*N4mH{y_a3xh
zZA-kj+u#DtFc=LwRRh$${K3aF@Dc-I8sHc$^JB^y%2<XYX0N`$;bgM7i@w8<pbbg>
zogK*;NmFXb?|J<+)gpXEd_-Qw5{SSoDQBQl3rLK1`cbT_i}gLc-(J|sq;pQ&sIu76
zmz2J+br1&3;c0%ub_ns+!0=;*(IA}v;2aqn`B&aE5Y_NSI-jhU4)IJUT@}9JzGos&
zTgM)Ze&fz;0so}WIqhBw$`qVvD&&HK6La6-h^r6h=P4e^Af5FyQj3KGc2^b-`a%iz
znU2&8e%GTwoTWcTmJ3>o1Q~P$Bj2AI7SFUbQV}(@lU8VhQzL&Q1q11&suIct9R+rk
zoo4k__{bHcJ7pNzOGl4{?LSah0z4@{+(LR!+51<A(D8f}>u6)ChCIImMYwzHqo>A>
z&<xDGDg)-Sf75ne{DYf2PA$Q2b(sC4&Be-UZqThy4Z=q%6k&oHRw@yZvG2zsvsR|A
z?%Ap&4s}A^{=pgB&V=g#Jm*stQ@pNNS>I8TPzv^^<2~X%6Iofl7vZ5{=Dhk8RJ7Bn
zi1z1d;{5T|$sk~TL4}s};gZH6aV?b+>?D3E0~Dtx<j>$v4~+#}YQ5E~v1gR8&VT=%
zQZF6a_@MA36dMg{C2VZ&_#O>aEu0SoKQW@s`g{J4u|lf(a?}!A;})fSNtV{|Ea#>n
zq^?781MIIQ`5ot)10_E?8gl*pyFo$tRpHlonh2__Y)dSf_d_R#5=6T!&Kn##GMifz
zL=rv$*KgnE;=Z0J>V<4P9;PNK`2pktqxR4^6XSqLL*L@h<Axl=MbjI7*2!OV@&x8Y
zEUl9UXK=HkR<ooJ^P*K95Q+?^-poc>VFu8egw*i&n;^}KH(TWuxCwxtRZ?#-_`J3;
z)iQ??LGqexxSRqK9%Zjpn*XTTm*~Sr+sMQt_s&ptKVdInB=nT`YbLOHBP;n)(b&GL
zZ3&+1eVO(~l6!Yoh)bq`Gq~g|$$CYww!b@afBo_+0CSQGGbWOAXVy7zK+iSP32Sf)
zz%MHW`}Ql}9@F1$L@okJXW+4wa3NB=>Q6%vZfLJfSqAnb<5Pe?_Cl4ldub4V*A~EE
z8+}>&romX<mYm3aM2#r8DFO(~e_xhVg4*Js`mjb>`w-dnJtaO#Ndk4aaNoeClzVAw
z1E<n(8hWuEhQ7|}Y^j%pMiB{pDa9FUR)~*O9Q(|C0mWO|WvE=)Qu8NYw_J;p=KKDz
zr1@dR3t{9K(S%Tcr;mYt4YKDIeoRfr$2}U5WDQ`bH{8kcY^cvXGX5H1OP&#?zkw+K
zjX(jD6DJOzzZq^oVGB=bpf)Rt*cMSlyjNueKAE*j54d8NI;rb$K<6>XR8hKujoZME
z(hOr1_ic2gTv_-=Pb2O~1r?Ya|6DLkx3{mb=@|0(SUkbkGSr?o@zQX@e4JN!oG|v$
zH=vsuS?rCfi||Fwq4q4W0GlwL%7wqUt17MkBz0Ma#nM+U{V5QtF?jZwWaVMoqrvA`
z5xhGZBR5p69!|&Lj4Q<0z~oEstQDKb?UgJ;cL&Axq=&|6u310!`qG^~2>|S^wJmLS
z@t}82z%0WQ&Hx`9M-<dy`;JTS#1LP6h(Ax-?eO{4q5kJOpEJg*&|mgh3+KO6{1`Om
zoX#Q!3BE)@D>E_KF>4*mqdsU6$xZjiTCpG@-IqMb*7xgML;9Q?DTkQrbm*F+n&n(z
z#*tN7Nw4_$<H3#JOU_<=^W3b(BcgcXa$JR|7_QeUTDlb{Pk-^QiC-N~H6YA4l^Cz>
zWW@X81fRC9Tm81=u3MQiKpIzz7#Wkbk%}EX11CKH#A3aO^Cx`V`=1~S1|rLY%5Ng!
z@4hnsuA6`VX#7R7Ji(kLcvU88c|j)e@e40bI6OVKH~c@i;}im~jY-#mv1G1hVwUC<
zl^8wHla^@xOVp6Ox(+-aUe$oP@dv%}!~`8n%-!s8Tc<e0(Byk1Fn%(P5K=`?Spyaq
zq1~<#Ht`!zWkWCSV94&%3!!8e_LVU0UnH$TtR>=kT#dRK=Hh+g;4m)*F$w22v`0pC
zPvY;SZSbvqBgKR?<Zle*z}dB;wx}}StD@JOe{dc?9neUGD=N5y9_Ja{Z!aB6tr9n-
zx_VrAv{bUHi>kWgDW+t+v%<t~^C3lgufoZ)o5m(<!%H7aa7#Nb)G<Ckh%I$v=ZeDc
zR`Lsc{dGy#ok+sJnSVL~JM&OBTvcCN+$a+Xdfy5|t~Q?<Z_7-2Ky1l_e%r<1ALS*C
z|KP~`1DREpW6XVDy3Uc5{c&eL2nT-;gP_yq$(R9ua3xxa%O6oK`U+5wsQhkRPW{P}
zK!j`1#V+)|sf>ZOQWJP0x<gD_;}htMSdGU-^y-2L!5{$3IScb_q&RX$`#Ec=jH)~g
zxuHH_#JvH=AP{KJP0NUR_IFW{@zN*l{5E|CVtGBV@w1sJCWi#mxUA>X7x_-%jrp$Y
zQRY)~`D$-N*<icvxojpM#p5n8)3ziWVRu-TGouC#_h=KQv%OxMs-w?Vf$iw_vO?VX
zkBhA1th6BHL64=aM{n~#92#CqiG<f%^P(%?-G7o>21pSbni+C#`EBKHS88PbR_Z$z
z5heSLz1puRD?chVNd3@<ua*k<JM5QlG}}=ezbx<%PQ$XrE-9zmJ}@Je-3SuLs64OZ
zRus-PVVRxLm0>G-i_Y|SO#$W+^^jEti)dXVjkEDQdJjl@;FsSqP4MlfG{Z<3^`lo!
z_z9*y+<)cHuPuMZJXtv%?mCmqB_aSN&WvXYyJ15-viiTG^A5!gZUCmBrsL{g>Di>d
zhc&wv@(-)LvrT!p-bvBZwe#d6Vr8$cR-JPu?rj`Jzfb6Q0#zq0AzgI2Y21V(#*xH-
z81Yn5e(<5XvLg9GIJ?V-AxRF(8OLLquLbCp@Ad^6?-f8^($D!UdMz}(k;g2QO!u`T
z=G07twp@%JIvsR|JU+%Ed)D*rn6WEB-U%dB(wv?6+120Avzl1et|aMSYEpx}Bq*gv
z`dV|4Ooe2vA9{Z;urFriDAmLrtu>R7@qg$I>ymalHiD}i>;V4V8gR4|JL)dKcj9Wz
zD_$qYiW#Z%y|<|wZL<i)dx?XuBg-26gYC`mW$CYzXL<zyggQ~;sO_)tun>^qXem<Q
z82=J@BxeAhGQ?|jEKRk~Lk|Mx$@|xpn_G2AV0#=<7=cpMex=;$OyhB|cWZ*Y@gl}?
zfvqNlvQrZWzUv5-qrju%UDSc7rtM|<Rxi57R4Dfb0hZBe8Y=esx{DavIEzPKrb&1e
z<C<>itFnBSL;J%Ys@IQ%jqhm-t@@b_#@>01AX|K-)p9E4$>1X@jD^xX^#-~Pid-M;
z2<>aG-#Rh`X^AC~$V`b=uOcdW`b<=5-QS6iOTUwZT?&U4WS*fVSeLFSQx|)gt<}BQ
zqaH0KIXjg;!?v<7L@X!CqRh2B0eG^Boz>Eskk{GH%+-^iMMKFzjjE=jo9&ZM9ehoD
zNOtg~_$S>c2g$CL+vh;MF{{~543`%}1bTRSx%A}3<_UX3qnhx2oWz>qIU?;|_abX@
zE&)2&%qSZU)M&VE&Bem;qAcZ_^AgZvc7Eq5M_8Hm>F6iffVb#BIHjni0#EMU4NSew
z!3(wb+jRQWf+ta!1*GVBeJ)5zjHS@rju-In{EvFZ2cDwNM*A2;Lyi-I_=g!hNFx8>
z;;T-JQVTENxl%y(%5|4?LOJY06;y_GU5qOjcu%ncy)3%UEVs_b{tELH?DjwvD)A8&
z9cz+9eL_*jxoh^&?wFm3CRsyzR4j{k3L}Vn$FL{+YSn+B5!)@XXK~F0yy&7fJ3vcn
zQ_rQ<g`7PTi(8#LkB9v=+s(gx4@W@g^|VhPA6KI#oYjS=&3t8)<>nrw8|2M0uOF?B
zc~hwk`=p;`9<lvO?Aa5Bbrm>KD<!P7RX6LI`s~ET*`zRVm(Qhv_g_s>8+$Wjc4X)2
zoi{{J?i8p>b0YU@MZGr31{f9tz@t(f{mXtonCpw^cHRlCl&2(&95(+BfIrMm6FmI8
zsh@M+^M0DuQ`N<Qjg<M4N0{L-{_Adj=7Io*>^;MRpVu)xQ4p<_04~?ydPj+_i`KeT
z-we2vS|{)^x++vF8gGFh2`l!l1$HERKUXCh@5#o-DsSZ(c(=z6wwIB+px~fkQgTlN
z%;2>F?Z|QfK=d7!ytfPR3qLb$Y4v`(@*q=vhMIP5Uc%Ri!(6KNs;@37MFGySpS9qP
zp&IJ?Pfc^<fPl-Drm1g2xdA2!{qafFFBf~}R%AA4cnsWIUK(rdvKSN7-s=)fCW{PA
zEmv2#WQu0$lZ<_Jw^e;9XSocqAq?M0icrA2HgA$nli75N#GIPHGTyK*A~)QFQu2b-
z-0EKrox5kQG!eodMmWOl=^N{=BvO}zmse*#Gpw9C$8sGeQu(xvZdT=m(2_-Dq~wBQ
z6=ERN&@D?wb3TFFI$OEBoaWgqZr<$|N^=-{3|)?MfRe0XzxI*ULwP(z#%|X`md<zx
zYVpW};)ppAc|~z#Oj){h{hx@ut!KDfgFmu9Z~v@G|8@KyTwM)ETb;+2k&Xf|#`GJ3
zjjr2A#D2E2?pa-2@%Rg?Y4U{mhzm#Lt}zk2oj#X@L6Y*+%4#t47$n|+NJKm(s*b7(
zJE!<Ci<OPYiJL68*06+dQn7<Iw^+G<?|#j;I{R|#pe~s^)oV-St4u1NPd#<DQ<lQ(
z3IAJ`q(W5HpgCkVgu$8_C_qQoPFHrQvl5uaKgt?E891+@rgr~!b3!oBuVwI*KcoTs
zoX~_XAOK}pvd9{&d6?zgY^BB#AU8TRD9f&<pk4qr4vri-m36(IBag?P4)f3RS)Jzj
zd^GG8%_jLlWb%U(N4(-|tiG2nyViDi+J}M81v*matclEDu@3+`-5Iq%=>NaMqW|3O
z_z%p`e;)n^H}d>H*7|q0>Rb*h>}wUjTDWL@TQU{w`0mTI&Neh{D(dY%LO$&MJqO>|
zV7y?OLF9>Ih44i^TNX5Q9B-r7nfUJu>ASzYuPiqf55M+Z5ufLdYX+j0t`fQ__S6c0
z;&YgG$-@Q3h)4d`@BI3IPW@lF0*t)g3%@1X>VHe^6Aj;da-k3y)6lQeZJCNLjy5lq
zNx5~nHSq}c0_<boB-*JC@kanj|9o6lxT4<ZH~l{!-~XN~;Qj`JOluSRyY|urcT4lY
za!)Y9&mr>1^qCBAckYa0G4BmOI8R|Lp7J~{E`K2Y<5l7yJHRyOCHb$`f8qrTrE`;G
zdAM_96ViTQdkPS)XFAZ+Sb3x-M|?L}Oswac$!b$WCy-^Em0@;_d0g5YY6SE6n>3-T
zD<+dB7+T9q@2y1-C3WZu+P|RJ-$p-ztz;-ekGXWF`es&FfrSQJPPXLP1i6HfArXxm
ziO!Lq!YvSnjF@Oo@HIwSGc$Zf`N+09-7^_2t=&>|v;cgM7tLIWj7Y(ZOa?QE8s|||
zG}h_jX#~D(gsaX>1-OoSC>>x=2Gkn@;2fyX2(kdcn<JV7dW~lo6wtzbYh)&dWzaFE
z$5MQY0M=I&R7D6y*rL&-Q`Mi@mkQ{p@J;@*B;Rs&I~9~fEGVA~UI~EpE3|?e-z&*7
zrLwLoboP7Dvi@2TXtO1s(OGy_1YXa434DBXgo5G}gdJe)hHbI}XxS}Vvhl9Ls}6-M
z`St!zndOza%WHt9NzXOoJ;AAlzi2kHWd(}nkN!*~kn-O}MClvFln3O}Dx3@V?w5uK
z=c4oeq0Wg<e;zO6HR!l1Gl5WEyEGk;d+fZC?nu+@EyUZcJ?5#`kg8BP*;*xaMfq3j
z65&%r%i*Jc5OrL{NZ1e&^(j_l4MVAAA#w3@rVb<3po3t%`vw~srYc7fKhu%m##-lt
zEUQzgTTN+t4jlz}{5!mU7U~z}A$jW)<wLAhT>G*~A^AfEx(C->!-ly{_dOKH>-)9M
zp_Vr}>3{H?%DE!2k@(?@kH54Lll!ywKz2Tv-><TX?xNFqBmYd5#v+0j@NM^)Uudo>
zOW}bEEUg~%Q4{igTJEi<^<&I#KpP>79TD><Arn8v&?8EALHR4kH|7CwPQ}#mI<<$c
ztf|z+4J+{>XbN%5;qUTQM8hkuTSYHtRix@Cg*$!0otT}<&sG{dIwY|>;cW(B{K~Wh
z21%3)A}mhW?0Tes%T{*A`%q_H60RieEz84IF1UZ-<;yBbU6lNgWD^=GWL}@S6Nodp
z{1}BiMSv=eo6W=;u0G%KTigC!a4j27e71ri(O#pK0&b{Tb5#36p`&%Zh^4341}OT~
zMvhVjL0gO_O)xH(B-LC9<riyCYn*SWdqON37brDuwKBMCH!FZI=?w{&<(O^xSC9}{
z@mYUmw!})E5FErjko`8xMfFZjl|$g`J?Ti-W#?kc7F_6xw1(#!&H4qi6nentYh(Od
ztQEsR(JKk$A%o2Ky$e&;PZW!a9LpAuw-bF;spm*m6uY;p3Tf06b}DV1+Lw_{m1Wyt
zyS-@CQNda1eU{ZDl11}cBhqoA4E^;B_68faZw|~Iw-pZs+eFG!qoDDpP769~x^sox
z*j%IDC*;gKkgXLLGkAgHv~)IhDjg2~#~TLWy4Ws#uXifg3pbI+BaVrauz$xP8s4b9
zm+F42yiSEdueu|+c<H@_1bLH-8l5zcUc~UgjYlU31nwA*$^=i)A6gb>C&oh;=H|`J
zFuxvrw4v9v8nJG2*h1l`SGelpd-7NloGAq8OpJ<X0FCIEzKqsw3|<OsA=`z9pK7G=
z8(H&Q?ipKdPHttbybYJX-(VTvb9Vo>u&<&MmSG&kCl;d9RjgMMPfi3h(7%aBfjCRd
zE>NDX*Ebw#w&mO|b=$GV_vZ<0O(l;|jc8V0KS%Z?ZSOz^+IAZiUY*fb2B`Lyu~X^)
zbNa1PV)8^k8oCrGh>2fHf_9V`o0u!pi1kuVS69|%oMxF%-uSX`jH%GiG5W}9kGxTb
z?OubAcgbUZ&dH_p)g>DE_5uY#SAo#L)=3Hex9K*;8ygjl{EI|+4bIR1EVO7(z|c=s
zMY<}-?)gkfh|tXzm7kYN#~#;x9UPBauxk~^=bF3mZ<QgmWF696<@M~e*|xj#{P$mX
z#}g@OPh)FuWry&FlGA8k89q89c~r$t7M_vdNBRsDJ)MEyYf9Cu^?s8VFhaw^ePM!k
zyUBxA){45BO??rm5Af5}+xZC+aX#{SO5#t$&wHZ;n*=y1XR<iK5^~;Kv;LhnuW32h
z<inqnIGqc!t$CY~^y?A)gL@VeI{F8<bOzI0X!rJK(d}iZ((@f8Zd>!GqyZSUO={^8
zIyZwZul~mToXh^}^tKZ)Z`}EP&wnt8RhIV$i>mP5!5Pzs_HuGR1$Q}WuIX%KL`>})
zk>7__0#c(<Uv@<KwF0%B55!vJgQ!SLO=nW{t-{{lwtPV`NR3gVr=t^E3%#Oe`-UY_
z3+GzvrHb&g%2D5NrQhI-58e6!3(;MwaGPQlZlc?s%Qq%R;-|q2Q3cIEp>AHY+3m8M
zUT-(yi!VN-yVaGe-*U&mi_>^9_9U2vJhLM_-eL@e2?{%7^6YwnEkyGT{B}PnTa)+J
zcnX9a_?dH{PHiCfSBYBUX*Q|>k6b#2SZD$J_JbSe3vZrsE7?*|qO7vW9J^a@j<=mh
zt9gm<T;QwDFx~p%Y}f}viioOBBfSS@8Z(~y-N*HpiE08WJ^5jdOUU9!o7fg$`fuh~
zfZ(1H{`(i<_O`1EkqlM46qPWF=!I;h+fF_=r(^7=?3$`~T&jspvGN8X&06-wycu{o
zV~TiM3k`uJ2R3;FLkVvYY@{^J*Il8(uN=Pt20D%9#r|akF)4P?#iwji?OT@<5OVFs
zb8=f^sgru|T8nL)#j4;2eACLV;FgfuSeUk6CqE&V&hyOipv=OP7%X4%Xw9gXCOJ&l
z$cxarz-qYWp)Oez5}1F2B(E+!@MUP2v2Ze10vJL>bx7UsY5jSnZ_Rrs^xN`j^K|LS
z9c6fO^@mM%7b4-Aj_DsurUoornt02SqLcsN@ZRzp<9iay0xE~XDEg735ikSNH$_E-
z^1_I;A@79*_ppqj0dq?6POaZF=F70m66Wp9gysIsmb|)AA9aV<MVi6n>Eed`hYxn+
zv&|Gvs<Yf3&wE*wQkPx?N4jFT@>6H3efQ_!<k{o+WA*1{(=yZ3gVO8S#N%qrRifrL
zm7&UEoSF+uheL$Rt}ECu<9pk*x9SmBbLeiJ{kX<VN5ty9(+p`liyF05H7z|2<muUy
zA+<g_ORnC#ki_w=n*Lvem8CGIu*$+kp=-n>xKL+3z0XY^I$}E0vI(3qH(hQirefqZ
zrDXP{UF!$*%x@C+q@@I{OGRaV&0p|0TyLAw6@-dWJfRk@21^^tI}lazHnr#oAz>fl
zm$8E36WjA;#qoe7TNH<=n1<Y9%gz|5ya%L#h9N%BAk&AR1k%$RTrxBZj||7vJx#$F
z0A-}REy;*8HX_<>wqr<?LW?__>!jlA2xH=?skVeli4*a+n8k&hGL5yC2^!72>aqI_
z(jB{j?*M$g<d^8{;^%e$aDHr=yJI<-E0}XGms^-4Z(nwZp}6?rdHCOD!J|*_d0GZ5
zsPunCgm01T3HlbNsbfYeVxbS&2dIa#<0+MT6lTPydz@-YsE{=|HUI-yr+kijae_N?
zMglk1vqSc!fp?Hq&3W1uWRo!(0oF9weOFNawt9AKj)}ai@$e{CD_}EAX!7}CFQ^$V
zoLo(vuk%kC(_Q<$z~qksjLF}w_YAroWMHDMHwkjRrho3YPrrd;nSAl6@$$wO&DxVf
zNpFg~nyXWX!-u`H%(nUqvV6D2#h6<Pt7XlHZE%7RKAWC~R`agWcWGivA7xTOb$~9!
z+dXMf(fN#}&E|%dJ9P3T`A5;Z+}6X8|NRh?c%ARhq&uJcAk`&aYej&e^7zTCjDqy4
zDvT0y^(;8Lj$Q$KxSyt!<TNy*@`YC8fLYn$$x#*Hg_yKCvr|QWB78KOXxKAhJLyr~
zX3w3+P;QP?#%vzdE0ph`l3jrRpwEBDR(F#n1O%_LVA9P!wRL+6{4_$iyEaHt{Q_}{
zC4-%1gmLPuEBhi!Y2NX8BZ@q{%<PA{??gD?yt~11JR?tHK;vBj+Pr>7z@A7c%WtoZ
zdb^shHFs=iHXWsjJ`>F--K{8Rw`i!W)al_$$Tr7X9fR3!myX#=c$H`rbQ+E1g--lu
zpN?BK9Xvo4{xVso?12=e!LqYt6osz=^<Ai9v<=JU1@>5mn9@@gsrDgjL+oSwOB<qH
zDq~@R1agRN#2jtq<b6TYT7-W5+_7gqQJ6>cf4-P2H%G|{xMb!;B$_iBHl{oix9iHH
z;b|;J1;`8ENrm57dvy}|dC4b4f)dW@J!LJ-)G@U0;%HPB$Bg(QRyfxiD>V_x@KKHE
z(im$}>-$!mdIA`GWJ!*CFem&M>&<NF0;Kj^zdykK=0Q-EzMZAK{d|^OYq3_sC*E7p
z^K;s*1X@QBs#aGC#Nll4dG}dk9<p<p&%EPhYid+WP`nI2HCGa3OthH-_Wc3ZFoa5J
zFO-Bne(k`>5m8mCL*_rLPg=k=sw(zlz1Je48JzcQl*VGb*{C>Z$f=ROo^Gb;Bj{m3
zpwN|kC}|`iy?FUF?bWZ$U@9C$+AFKu{&OtG^N})9p=8gh%i$$}FCQaQjpbe)MgynQ
zP`+?BirsSFllc$skUx>kw_)TXGiS?(Pq4`q4V$|!KcBkd7287&Anyw;%p7m)>fYus
z>b=cjl92~4Yf$UDPf|!aGANh1gPOVqw6SLN=H6?l`v`dozc+`QRpc3ck!u5z%23L*
z@)B1)pHgRjML_gH%!FTIF<I->g}4jY)cA$j6GmE4^&Es8bM_l1<xY@9)t~)Tw`3~N
zTFB#yb&TX4EVe_|W%~U&0^J2VJPUme-d0UE6=c0@Urf`3dfX3bV6OS50ZYc8>n#FQ
zJRf{|L%JtHNX`zaT-DYTo68#fzu0?=ptz#O+ZPfbxO?O7?i$=laBbY(-GT;pcX!ur
zEJ$z~cMIA$L4yQx`A^>Wy}_&drnl<OcGamf*{AAkS!?~)M4OJiKO}*{n?Ks^>3!A7
zdS7+o40auJ+cuj$Hl0Fs*G_eJgz4F>)m>R>98&>Su_YlpW9We{X3YG)`h)i)%9>c)
zF2HJ~-4UGFMpBX^RngoNWj>j~XKHZ4_C{Pv3U?-B!${ZhN{%yG4OA#HPsBmW!;>K&
zV59wDDWR6Dgn}PdOvI2nrg!9E0{r`_QU3ybxmt0%Vn54IZ>jS@Q&dTHGb%IBfBg@J
zV;2dN8xnc^qLD|-%mDsU01(LPS_$SsUHbYx5YWi7r}vCnMh2GK1C3^G+jOH|ek}f>
zN)6pksfzI%Ev#X)?4;T%+&=u4n#>J*kJB|)xAf=-vt)A*-P?^Oz9_9HwW%R=x(EX8
zHe?=iiq*ul{Pmai9J@ZSRHaqL)haInI?60og!rL_gIorUD%sS3O8nXw7tPGI?J>w`
zFcRNb-zR-ApKk8Z{^;XeN~WguO8Id*UBZ*d`9vRK#WDkXi*$~jPkuVtV0sljj)Wfh
z*p*@R`mr(DW0x^-Nr$Xw4L8<<BOX@Tjbq$fsO!jg-9xiPe=RcUNC>>x6#K<tP0#A+
zqXmK>$U7Qw`6El|hEU9sPPF1Fl(FpGtgKbNqAt6LutQ=wWfu!yk`hNzu6YgVC#-d$
ztW@f8WX?r{ewRy%|I7B~Mch7F%90jG3%IhPhB=<208fK>A5a~Bo!?Zzzd<z99S2>z
zcnJRaUkAzm3VSWtFa9)nPTKbPB~k9LMKGC+FP7LC<)DLgM$$lszUS}vj9XWYSaH6c
zM2%N>GZ+0g!6+cZON!63O698^sC`0b2I`gjm^vw7#BdDFh%JUNxU0iTxXYW;NBq**
zKX0xp9NRsQMW`O_*IGaeGFUOKQIHw#cHME5So0jJu*^VZp7bquhAkS?M>mql7y+ZJ
z64L|wIUcUXxehJ!*{^|YEfaeA2oCVhEgcQ~W{KzX`YVmy#A#+Gk0dlfAUuCMYUP~}
zN`2w)DEKC$GFS;po;*@J8p5^U7-!M(hhJg)c7#Pt#J!a0$$Vn=^c)Q0S-mA|Vq&oj
zrsj1|w3G%;b&-~D$!-<dTb7F(p4_cCpH~YqtYnBGuCes$TYq+B9A>3s5R~l{lqECn
z77ysIJYzDA4-L;Z*a(FlopLT?%hdG50-`ZXsSv0^ZuKH%Cy}!<^w)kviw|*B9NL6f
zk>``x>YHSoDt(ECWyWm}I(aMDPc!rVf30gI>m2oTe<z9TqRX=?Va47-)nW`_ew1H&
zy2$8rcaL1^b|)y-2bU;NRxO;Ye2q8gl;FEiUjmb(_c2%1*f2dC)s%D`<-Dj>4x^gN
z+KNt;OsAt*aYn~S>P&`qSzV>4083g<>*HVl7}(WxZ5LG)pNXe7G8kl%!fPZ3x;GgH
zYIe4Ba)=Lj&qHEX^70<=3nqo1km%W|#UJ}4Zgya4G?XbIWLXRnuR3;8KrJ}p*N<~o
zpBep$F&hz1loxnoCtdwct4x^`((%&cLShqRvK?CL3OihWs%%&*PUI6l7hn~8CVAJ<
zFG$mn4R*T?Gj^~r8kfb;Rvg~mhx}bu`3Li3GBLyURvfm)rbC5BBMt|t0ZhW9jYpa*
zg^Kj_@dlqy7=6Pt-L=&wOTekpl7M)FxxVio3>t3R!uE#XgTH$rP)0p<=_#$T`*Y6c
zq4FX={$_ov3F>q>_<HhjN46iJx?hoy5B9pUdW!H<`a*}9BP+@RdY)RMJ?Ljh+4cx?
z&dT(rUFHs(rDh`-puG{ec3U^b_1{JVk&Qb9Aw=3q-EG<H+$SpgIakCjrz0S*Irm9#
zyFp_*ZQ!l?J!}wo{SUDjJNvT?U)4%Ro~KvxTl()OZk{Z@WhI-(k*Y7dHR6hNx4X8N
zSF>}PEf-&c6;&H$e+QSH`TAM$-2}Fr_JNB*YXhfkxU6j#ljVj^l8d%P#(8==x(4Xl
zdXB3*14|-9AG5g44LD?x?z=s{EVN%_S_JZ^ZeX`U_fU}4W9lKuH%io*>PcaBr2E#F
z9bY^iJfKYfU@ipy9~t2u6Lt=7!+ngh#0y~$Lq7>0j_5;<Os5Y-r02tMBQ)a6kMW$A
zB$r5XX@wT|jI*kYjYH9g6@FeEEP3u+nB)2!)_{6bV%_EB*S;IUFo9Luk7rI}>`d*}
z2XX)oIZhNt?yL8XvKo#_$LsiB;63+*lk70w3BreD9ru@xHBe*N!f_J3maE}U@wNsf
z#J!2w_<CdZ?twPy!|ckB)O}aFyPt9|`$n9rG1rc73<xATpivL-xwczgz5y=!*p8CB
z^cN^avwz<{yKt6Gww0KBCqE%xkkm#VSEg%1Rsz>C(enbE=War8GC9x7o)q+uB0rdN
z2?3C5Th_*>(4vrss~VDLIfa@ctV%OcXjWwM*h<m|NEK8nNNx&~jzP!`f}o2+24*AM
zWo|R+%yR}8>65x53z+1dV-feVVgQFK8J6bql!lc!-_`zYd7#=nXEE$%wuLU=mAJ$R
zfv!@~N7HpRJ{qKPbe$A7zq>|m%;mN-i*=Q1nx8Rj3rjT&rlsPUnB29WoqmsFa%W_4
z)Ug=bKfK-lwKd@C$vp+9n{UT@>WvTf(C>J&Q;`m{W4<6)rDoKW)I?tlmqj^Yu2(=m
z`d3Zeurd8;wMSu``qnN*12CG>I$F}0yK%jtl=37VV>n@~O2?KU`762%aZ6az(g3K<
zL=31~SRLVIt5|v(-8&A8XxKRSEoURIZ24ND0T*tyGyC(fg;FVedZ4Y!J!_7sN{%oE
zi)jttPL~P3?a0GcL`2vtag&1UP9wJPOaL7T1%l}&yJi#f5|cV{Itsc!X-L_bZ&ow(
zbT*(R2d8?T=kSgU{&VNV+K03ASs6WYZyG+#1>X7Dt18EWXX><5{@x5<L;yx|a?^9Z
z*FlcBnR9<6kCHbu)|AvDuILf+Qypnl<hSP%lhP8qciac%{JuI}JfvK-1y)mq`76Cr
z#&u6TdFIupU@2yqpXR}8rCV>@PH}Qc3En=?PIwDjuF;6|D6n$eH@<&J>&758JRGx`
z{Q&%`q8;h^*~E$|CVAhpAN{%3Ak4I_g8@}gHq^{bM#<Vfv-G=a2`!ilC$_rJ;`b1a
z5Jknsop-HchmuH}Fi?wCX4j{Mqk=qpm4`{lE!|;wRZJSS5#UUvdTlPJ5qfi}1{^?`
zhj6vLfJPoY3*(Q!&S%%r$<l{pcK?B0mt6<N6%P>JS;RZDJ14@&0aj_uKMcanx3l1+
zQLeU1vQfSp6B8sVt_lywy7IQfIkB@ui#;~K(H3Q*?dY#dbbOK}R3_VYqgsIvHjmf;
z%F*Ggd=`b>R9}G;ZeU1}P|qV%t2tLzEn3a{5f(J)=97_NRMv7aq5Irb$Zp9>=E)B4
zusHfHqhem0S^?Tc100?>O=3Ec**V`0*frEjr|4xn7r;;LvwSwIF(I<s98}*W5X3GM
zPEM1;Pt;ZWxh{uAp+~cJ$9B~j<}rR6pJv@cH0V>_$c)HMtNlf|i!G_5>|h+l>)WRs
z!N^&k@7Y<zIAb9Snbq*|>)ctv_^0Zu;IrfLcY_Rj1P04wLXKup#R_V}*@hz@J`hYy
z>x{5?G<{BdgS^=Yn;2PprqDDF0J>z{Ub`_f5`mLrF3ap{+P1@5&na*%&Q*;$gFK~)
zhGx<uv2<G9sV`*^i8xb{@=4uU$kYX(EQh0IZoh+oaPv$1v~S2_2R2zUp0m3pO;wlc
zgeG6c$dd*JR=qarYU4L#B!)bN8M=;M*g9VR@~AI-@ppLNC_w@V<}$NLXfrhmWcj0+
z(5RQ@>nw7){2=O_6He<OduAd|6i$-0TO@=8%%Fi63&T!5+IbZfhnk=5N<vcbu47B;
zUTODX?%Q6#0?%GT!yiZa356gQ6o!;_H(>)DIl3NY?N)tR-UUmwC5+JBLA%wTIx32b
zzd~24YimC5sf?SROU|6-BtWP@XAF;Nql#vL=%lc9nJ-rRm3urUpSK>y9cy<yTOHNA
zsAw5mN@aww+Y+l9)tRY_z>*Vuogrq(21L@*tDoewcVT^Tx@;?=kAFVTxKoS>E6efg
zF<iY7EKMNJ=jP={^hXU3)e}IyfwyMaQ?TEZ==snLhjd51T+u>t3_p#R*EG*^xVg@;
zc09aP1=l(|yh1J1C#L~9y%?!2rPSwVKKhMaw6*7)i^OJUW#Kc$jNKWAS_~c4t!`i7
znL4U@oC-D^ORb*EY}^CqW@4=B#t@6URf-O~y_fbLTCr9S&7^nqB|No~u&K?k;YMr2
ze;pnXiKIt9GB`{R3iCO(@a^#0XfPYe>3bf;dnKnKw+8EeBp%~e$f2Qbph6t6xTpH2
zBEn8qaTSC>MpFPu@z~kx(4)cm(?`sBoKf(w;oR9((6wOfA9$PpXJhUCQW`2a^ACpo
z@BcoBSZ0%4B%#E1(_74fBk^cJ_6PPTr%AiFj!SGctL$jIiFk@P(UX!#b5M+oO^8YD
zE;fI8Lx>{GQ+t%M`KV8kxyy;Hx!_Fkg}3yqqz#L_qVA0^jX0)*st(19U8?9L2`w!f
zIP6MzNykaGpl#4@(RX#PfbQp9DfBrKxT5lNX_4}?oWwo6qm)LwW&6l7s-v~-%8U@7
zu1A*3kFl--Jr;O5j_*rmxY#ZwAk%QK5no6wZHWq#JM&dy-F8zjv57o8HND|cW6Md*
zyn1)~XEoa~E&}XCC)|S8OjG(+ne5h))i2_ljYCICY<_!G{uZ|-CE(RUn@aB@0XR|z
zz-X^QCx<RPJdK5vqUnp?sJ=ZlVHjNvSZ$-D4tGI%QD35|hC%apJSgs}D)ZnQN~=+7
zCD|tWIokQ?T^nr}_c&Uf)kIjy1S=mo#e}o<nNr1oMcLL+yLpG!N=PZFP7$+IX$Z`G
z8Va%Ja7HD_E+)9Y$kP2zmRSBxMJwJ)`|b;yp(6JZf$}w8t+83OJada&Vk4PXlf$K#
z#-z2Jt6#6`+aB`pFZIe^u#U3YcS#K=^TnL}a{EyljxhFv#mvMcvl77RGUpA$U&q6!
zY}9G;ECVr_7wi1+qvwTc`w7)d%;e(lp4!TR!VuZ!bqYc!duv9H#*b++S=qklTJSXZ
z6Ube|UnKDtE%A76Lq6aLPQ+FC=({-~t<JkWxe_OvSj0V+-AO~J#H`rVa%!j^co)2h
zR9HLLNJX5s_%L|3^F|Fl@e<U8<%Up=?*|$>Ik@s<0=Li$x9}F>0~wi)_4+<?9JrCz
zm09Fg<5AJ9Xpzv}kc(Q{YVj-}Px-Q8pQ3=PK&RUUweRPjxF7fpDd~jh#}kiw;Y8v>
z+d_>LsSnA5;~y<Z<hmrRs~a+K)`w3{PYW22x4jRDbFyrM?#g`6J)F?bN6wk=pEVTo
z%s;lyXNVY!geD8o(B`T6EUU8<*8=b|CrqsofrhKdd_4!ODC+7_P_Gw-ib+%(>i{QX
zE>f+Za%H0dW7F;Rk;JKDo~8Y+Z2@;iV)!msGMoqC*AtsFPN(1lEy0#>sG=@P+30@l
zE%jw|G_hpQ^G|~*MEDps6-RjzTXqU%MTv|emQru$3R3!p$*aX74BvWRNZgU%X;1sw
zg2>^l7J+i?=I4yEyRPp&UA$9VT}=nXLzYPx0Q@4!5o*`v@4IhY*9j+$ooTQ&gUxj{
zeVqsBW|7?#6HG>>wa-CaQK(J%*%%ZS$sV3g^Mdh>dUaI0XFtZPNL~7W+O{|?Ivn!e
zZg4Ks(iK&&ptzS?`mRb{^9fU}wsel(!+*2uLMNwLR762M0_Z<!i_6!{IFg)0wVFbG
zRu~VD7sVM>`zz1HL`(cLE1k!glf+=`LW>(XHZUh7AcKu2c=XLE!=<&EHRYs$lK1j=
zhZDmtn;O=Q9_V^fM_x#Eju(uA=?ur@507?XU;K$83cU8bJFeHd+9gj4=p^Z(O<1%C
zAzRx)5Z9a+vpg+Tfxe|Wb|gQ@kk@|SxkV_)sHZVnE**v`s<h6?+vy*SPWr}N+_d8Q
z`msUe?^FQ_Qvw3Qqc3ufB$gg|Jd7#X72k%UsO7>H!&#A)Dr$`y${>Vz^#WnZkq?A4
zCbh>X9Q;0x+`Ona^oYf!Z5<Bx%YAR2S9YDLzDYOx$p=oJS$X{pySZPPdXvhg&Y8@-
zexlmyBFymm3ObXAeFVp`r&w&+<g3MdggO%V($uivbvgpbm9!V>@yh?oODR=a11Tla
zNK9vpKB&l21XBRHa3k~H0Bzeb;vzIzzG7kN9`@Z<W6p6Ut+}JGc?t@oLD^<@0<J$A
zqN?M4|3+e)i3tJ4!cCXrc&u24@~Cxt^ggw^VJaU1CV00BsBqP^H`wJ>H1N0|IwMpL
z=VK0(+|r?!QH@S^mv_!)v-pCWh+UadKYyYkjq7l?s9ytSgj3?;zPb(z_lQXWv#T5I
znM#!5I#Y!7lWy_{JusBCnmbTs5(Ff4cAib90v{uC;jv(5FB{rFzANMZU^oeIU%Qvl
zb3isR-}i-)sp8cTHnK5<qJ!ix!S^RZt`~!s1M5@4N|L%bB1vnbCrs#Z3~j3cVT`?n
z^=!HD^QqqGO9^W_cyn@s?n`k5Q`p<epwf)}7h=9GIJ>|7YUl@_${M!F)K4gzH63ZZ
zxnU#;=MAjS<i))^xY`V?RB?O@Xsz1Hi-~d#Kui<aXv~t2oO~^@Gb`S3N6lV#8j_Yw
z_*!SjoE=vsgjcvvlf&zbrFU&I(#ue(6gDcZ2H*E;Gn2+-*haa`ubf05bQrEx@^DCA
zFT?>K)-93Ck~*qW;++M0QoT>Q|8Tb%Pcnq1_vlAOXU-%dZscRlQRBzK32*XPIq`80
zZZVrl3@e|t*d2HKlu8Jk(7kO2Z+K0M{(}+Yg>X-}ifpJDy~gl5Jld8DY2a<G%q{)$
ze-!k*VrC<Z8E$QWukCW>s_lZ%>t<QW%O#9-W&%YQHIA2A4MB3*wPIfnaL&y5o{#LV
z>d@j)S!Th>y-0ePTO)U@iKvcf?BrrML1VQll6mxPJnFGW#=k@cQRpMV=lg|K%=Vc?
z8ed7pt#TIcy>3Z4b+J5}PAGb?=6FPUx5m}5kZ_j<DlmW4IE39nt?&|DUUPjBF0@@M
zKu19#;=6lb;q>Q<KaC8?M@JMrgUA&C>@~oeBnMoXXB*;#`o{q`ozEgRt)CK&JJjBl
z%<oVzZACZ3j#1)Q6VU?!TAVq$fFlu)Q_Jp$We^$=TWEfsGBnQVCwU1)*u|%t!7Run
z$>qu4kL|%1C;2>o^ZvIGgc3ia%GR^zmOmvw&+WEQH`8$Clos%54Q#scG7E78Yj<*&
zQ%)u%lOs8kA~Rwr5?!VZyHtQAWqrI~-g_PVcjwmlS)0xdkynhWaZnxYlkRJiyxD=0
zQsD}NaZ4YTawruzzDGNgvx1xbic%mqU?#Ae4L$H~$?8Vz$7#aCv3br=i7yvUv2V>F
z*}0ON<iaA^K>49#v(5soCO8F|C!Eew98fz=B0N;J6MBY7Ig)!LZrWUb;iOdw{t%JJ
z-S%{m-h*Mj97t~$50rKN>KU%psCS`jf<1(1-Q{l8s*XxUnNv!*OYr^V+6($&RFr_#
zRS^0NXsf12r?0j8h?9Z+8oV0%YEeBrm8X{$ZlPSI9_Ab2vep(frd$WLJ~`r7aT($;
z9{}Pb45h+>DZ+|>p5FP2d=e#zRA51xR5_&NUgkpJa-uomgVLbmD)598r|vN$j+&Wk
zCa=j<dz_vH5hu1k{V8R>Os+>qI-_-hCBgkTn2o}Upl946T4$^(F&$qZPu)2Q;Q+$l
zq=2sq-G$C&ApXF&tA#h|<*UL5{pJ4G=<Du*OoyYYAAeTf&0lX<6M=fq-q5yxFeiP<
z&%(C>kq%fB3*|rF6A)(&6(=bZZx4sZ{`<M-oC$>m>#oyk4(jvTMcwmIt(M0HA2T|Q
zYvjKH_365YpOE?QNk@LabF?Yqfc;S;4Bxph$gBn3Gl+<1D3EkUl>1{pG(=jVX*<FQ
zY)gzJ&#5Fix3(`1CTL!30Ikmb`a~=fn#rgBy70};6Yvqcwug-a<T+NPth<-kgJ1lg
zhci|+qZlq1P+z+PzT_$QJU~xtj(c{U6iy0Ma5|VTC5Wrox)GSm?0fCY9mpn|K3!D9
zfdfMO5=V^Wnw@?~#LREJTTYzA!K;tjhb>$OV?#L!AjA&|r>fi)PY|z>^&63fpT(yP
zfcff%vo&a|S;YaKU(M&V!BJ^tT2b7!m@}4?xonp%T=?Ep_(lW0hmQEV_Jlpri$ubN
zQYp`AJ_L_veoH+j4Q=<OAR0m18sYQA`Q(PQ6~T#a$4;l7!mhHBLqG7(gUOiw%y%wu
zy1SG<Nr(u`4+LK;8h7<1{5GD=-zE0rBO;dgDRT*VoFi{<&ms$@%*;a-XQLG>ZGq%?
zxO-^_CN<`TgVYR@oDpT)d`{u>gX~!yR1HX7!^HXAc^qqXZK_!oKLv)b^DfqG^j;aY
z+FVzAL<$LoaiI+o5k)nM`eLX_zrM57w7}WAW%YRyVE=l$X>m=NcP3Np)A3YKHCg$^
z;T+f>b5+d2A6Pm0Lu7aD(iFrgh&Q>lQsPCy48Z=jF8lVNc9UBCz@7Eyf<~;<K3;v!
ztESU6yi=~!w9Wv{o~i#N0p$oCT@b^GIvIWe1NvKOy`PTBS+v>|eWTG@$_T|j&Sgzx
z@O<=E$p5;xYJscrl@+*-_l_@yf#{^eECr6kc<Alg^Utd7y&IP4?Ya0w(mGV6hKOs%
z;fu4rw+7tL->@4rycadZvW1ZM#WJ=a_HiC>tAu(Wii}IaX6OF8NfU|bl2fuMUyQeB
zH0rCkn-hrQxZF_q`=?!NUWGKpXzvV#YNjIg!oaBpv(mEUsWa2em#(AWJ0@c$(<|ND
zZnKwTd3&<&3^-*Dyf7hb7RzwZr&6nev*FmfQkJ)~T7ApVn1oyu)Of~et54fLM9cJB
zADmKEavoz*s-)hgUoVtaOUf6LrZs81Xvk}}HWa8Y?3B~jz<P$>YDlv;UgyKt7nS3#
zAf1j-+=%lD3qk&;-u=PSw{B+r#y+ZO0$Ce>oumXpz8P?MO6+NF8nkGkt11%TmB1nT
z4{nwNKgsZji|`QUX`r2zSXbb%?Pd+X9|0|TL#jFkALp{xxEbQ4spf-{_IC7yiGP`i
z;;+1mKEKN<vt3nD@(>vGCI+!!+7i9xCM_1=<~%>{`IJMrRW;|f9M^Pl>59dk%*zTW
z)9GOg{OnquxbP`(bn-RXX?6c@{u>4MtVlLd(V^DNeZEn9h3ZW=dMwf4x|P=E-R)sH
zxkwOL$zdOn7EuUi?z6HW$CnaBArhkosnj3tbJI79!GgBEWpqL#pC=T2nbbhzA0x2m
zC=tpYV+J`_vzBPQ)J&gq`Y&<6JvPa8h5I+z7i_zyxpGe82=t|xE|l|PcPjGz+PAFE
zHo#KQX;x|CE^AYQPA}@+KAd;hTxFDtbq6ZHyAMUR;TM8Gp6)EOH}tE2s7rb$4T|HO
zJhImoD!e7VS)Z_bzF*-#iAUYk1Q-X3eTMcgSkH@JD7D<3#SsL>ziFIZfm}BpW{%(G
zK5}DVpw7cvdSBwR0n{S+<>UT)iS<92&_t3=a-+AJcYjB>>|#q_W1#M{JN<i}7vj?K
z^m1&d^lBRQTzyA>^5rBr`$>;I`w1icQ6a!NTP}a>$zTj7-^pIy=c&FYSfy9|K-3YI
zyZJY_IZp8Wt*Zx^L2wq-svv2>7iHZOo{FIBu*>h8q;koz$dUA6mZ5+EeYYure;GHD
zdz-5ugAB~7)YEa5+mx$%a;?bnVZ-zpqFaia5TEZqSpjwQUc!AsqI(tpQf+)4_(JLx
z$&I>~+ywBt^Q<}yr+$x+S6^0iD)+P(+6V%g3yM~w!#x1TxoX~xdj}bMq<W<TQl$je
zI%{J(RSURqy#S?YQK}hv&OmWH_rr=W03sSw6veP_2BC8pg}4yKlTWC%7G5q_Dl0Og
zRoi~gDqKhtca#-ThhW-pZ;_7Z{2tCO2Oa%=6~4(A^m)q69M}Bj{F~O-)(-bVC-<}X
ze=s2!w1ta0(L3YANAzDi;m)NqF?}hCo#xY^wSUTyQ<HrI9$V66rb5_-v@?p^<lo|p
zGnVwM)sBBsKs^98`*P^HG@Yl={&xe~Roc$^&dUEC|DQV#41{GLH=c(jTt6k5R!);V
zPTa^&Rr_L3LPs>q46;mg0*byh6TWB<IP<1vBqn;|As<?y9gy(4G7_fFEX@S}gNfc@
z>|g6|{J-P>W9Om4_&G#y_TxVojmM8;iSs*^s;Z|!#!vlq|C3KR5UULa`8kz6U;h>h
zH-Pp<JWCzV1olG$Fmmm$dtLi~!ydFg$6UWB66ybA!TWzvV*krfumZnuE^Jl$Ya-zv
z4Dz`ofbX<3g!%S+1pSHC=4H7H&yYQ~j}sN;RLz5Q10N)zxjWIS>kl6!2Wphj>!<zG
zdYPx5aTO+DK+)5hNgaEx+T$(5f>l5Ela%He)qF&SmBa-A&DFZ`6A8$itsBEn6dYsU
zms<(b$>A-57s9V5W7N51NInxEjp3`^RG7gOLy~ih&!WnWfx#u4rCj>>i1laKf^9Fy
z;hs;J4^m@wt7`FLz+6Z#xH2034~95magaD|BXc@>#SJLd@tZf~HaMAzFNGFRN4aC#
zn%80fVW4!hG2Lp3UWwK!0<yHlZE`jPyGI}B1XNj6Sd$3&&S%A+DgY%&8>Zx+a;7A~
zORS{PMe1Y>7{n18V@arcSPE>Euv%*TvhjO!m>H-?iex>{b84Ng@<nZ(H;uQ8-th~O
zMFlOA$>AXFAFmpY6NTxDuuo2$<gL<NP{%sFO7kRSWqWg4g-l~a=@Qm5Bdb68dK0S)
zh@<p4aa|jMy;(~l{_f{@HbjeRLoS#=#xIoHh9AN|KMb`XU!TynI0HvNWYmLmk0ngt
zqdMW}lD#hmC(3*)KngqtmH827auHWP$Q@HjO;jgNg?u&J=<X_;r_B-6w5&$pX00@r
zKO9*A?BrkqW=;SWuH;g~%P=VL5=y9f9QWRtQC=Ob7&P90CVX>Q0fns*Zpf)F-bYeS
zv}X(iP9)Whs@YmtmJ+GR3{K3*ShMXDcT27HIUsfWe5?R{D>4?$@+?EoCsG)P6YTVT
z{3Jg;g<fMpSw3+iK_z-0$`1WRcEnR((Nd4A&&iYi=e~z^BO&{=!9A`-BBai@xwa%<
z;u}^|M2%!qpxtw00HU@ZswI_~X^EQc$O%_mp8u%4J=Io5jCrs&3)^C+)K@uP^WBV}
z_kW~yl!vT6Ev&KkEQ~x{LNwD(JNP2fY^DSG)rozd<47o5Ff<$*JQkeFi$F$q@CRV$
zxH5b2=IMsN@{n-`u-kvtGwI^TZyz&?t`tNP{NB1@WmAK3hHeEx1zQ3qEGaJ`>e58b
z*)N`<3i_{^wt5eaUo^A>>}axm>D6SGUlfvPUBg3E@#IFde&;S7^JddKi+x@fah%Al
z?4EJeUcb;#jQ?=g+#cb)sSOnzy8TtocE9w-INRnkPlwOTX%3^HB14C10LQkkKugl?
z|D9)_Z|S*l!MvlvYZr+usH8y>u`l9Mi98t$!_x<fj%#N$6N+qaw?=0c)aB2xU@@ev
znQc=@-O^I99rOHITD~M>2%f}<cG8W}dbJn?)i`*!`QudL(v)@qa*F|5$X}<P-o7c4
zy;nM~v{`-ON~l*enZYV#>UgQUrzILIo4VfOptp1X2cxi%FaE<b9VB-*ZHX&vfvh8{
zvv@CKexE2GsZjxIVNM^C+FHL?QEYke)#<gQ3v$vWwfPTb{Xc)3v(Zfc`2JYQ#^Z?%
z5YqV(x*2hIdN8vz`qviT%WL;{7}>QNBDbf>xFsYy$Xa(x#QCXhw4nshP2XufsY#xg
z;Bh=9lZbdC;B-0P@oaQc!A*`{D(ab*<D=JA^jFg%=#*|nZt~^jvY>{cqB9WWp%ust
z5uR1|+@$ohcGqaYY>BRDAaK~LVX(_j_Y^eyZm@tah;vtx#Y>u<?6R&D9P&<U_Wk=-
zcM2jtx-M>*2o(_cew1`Pi*SD*GfOo*yj;|QOV@OJI0(NBmxxf7ef&TL{4+i#*D!Y(
zpLg=R)j=XjZOhmu{&sBax>8<0ZA)Y}qp>)A?AKO0wSdiMStGK)$qcUe*%@h0G-Ju<
zhC$CvCveT3t)!I8ZB_fVh*iY#w8Hg^=9u$NXmMf1nHZ7iF?$Er2wHA%LM_MgiZ(H8
z-WduP;d2@RFMTDThQA@_2L44g&kbaIrvTR-4mhOf1&Yxmx@CrD)(%JsOBM!N{BsY>
zB^z&?td$k{75UX)+CLMMrmN8rc*|)dv2VUj&nZntPgT2N#K5~lEfPT{e{KVNd@se<
zvd0bV$99r|R0=_^jKq`;ul2LMix@DRQl5WTNNVw!<3*n~ne}u{XVNJJ;)CmrMOnIV
zHZ=mroSLK>wvDLY@xW}YjGll~H!qOpqTo_+Hl_;hxFCl66q8z5v90v@w9xh?JKk4s
zax`x3rx)h6=A+H4%S1nCnk3Q<*G;{VK;DKGi<-|NFV6gMa~7nq4Z98m*Vr~zs1hm~
z64+}ABq3kst8y10igKu205SQ~fxSOS^IWv*sNFadmR~tX*<Kto?d7mC$JQ%9R<qr0
zR-4KId2q_gqG3Non8gyyiUrfH&k6I3DiWjm=3wM2D2$3ri1r?>{b^K38Eigfvtfj;
zyAhNq*`Zt(I8oat&AMA*71?fh{za8AW#P1$QqUZ-;;Nrdo;M>}U*`)L?@s5Dvx$xk
zG1`F|+4~NA!S_IFd+gBQpJ^b6aVI%@MfD{EA!an+r@mKQ2+U9CB%t#@jExI=Bo5n!
zt~)nmjsnp%Wn%%_dB0rUB{XT1IVRIbR0rY3s1m-5M~3n#3i6pJXw13c>Z)As;-lr8
zw!{c5iSpSZS-EF^0U#+q&Kwza=@(a44V2h3V1Cb;Jm&Oo8D{g_eBwO*6;UKnL^>pW
zCUm2BruAA!B<P+gU-~6kLvu&nv!c^j6#ZVe$C`H$5mPLt7=_og>tw*7o3NsZJR*=Y
zs(ZKTjhsn!->QLERX8vO!VOt$=hg?L-~5qu(dg?S0Jo!Cl4LX<PW>cI6v_8waT_s1
zRHvhy%(9*i`lc->>3xw3aa#ed%r_j;^BPNSbgHxvJS&BfmDb`WWJ_pILCiyt>OR_L
z!hKcSGc!%)y5LXsI16;GVM`e#bm@C8&8hnuAXQX!#`aBwrWVv)9ee7zD;WDfsOj?m
zpr&m?1(@{y8#Qh8Kd5O{0EY1$_*drZ<4cZ>Si*Mx7MTaAK1*+&a*rXz{B^A9AB<0x
z^*b&5gqo6gAZ-xqGVQy%lr}^R&-i@<{SdMYHK6`k0%qYG)oZ(yBV|&Wuytl7FWdXx
zhPA$c=U!MaXQ?%8HQqHr_OPa;uW3=jT=BfUeay@a+G8dJlV_Fa;VBHc>8MO;MRB-E
zaC#ZmNi#FG;49QxRBS1f7jrXc75=4bVb7JmY_gJkCikn)e~V%ozaQiUls`$*mk=;~
z{-h6)om8~;Eej$|JLHT&bVX~5kp`Sj`Z{VtM7isvm{fBNnVf#L9%G568<nX9c`$b|
zu0+gP@7Bdqj$6jbwZ~?|Wms%$`+cB7mf27)n?8ME$n4jaOhwguD6jT=hm@-GsF2aE
zE^oF~B1Dm8;hzg*(DQH!0zMEklhr=?+D7Y+W!;I+#6f|}axx6X0(@RsAejrxZ60&e
z4MeQZYZI+SzQ1L-_fLtBqEk|zKQql3(#vtpv8Jk=G1?p{3OJp4q}jKAe-wJ?J<eSp
zqyzbpWjES^wObPy1zR!>xe&gsOy@D)Rofhw3ONvNt;}W@W~WEXO6n*Vjq?+2u~b8t
zLbUU>JTvb<GS8S0=TsCQR<JhDqg%1#BlSyMV5$qc+A^(<)aB4>V5^kfqzIewj>IqP
zd794!>a0x}=;|{&cupmvCoV(esBzk;{TPBKx$04+5l3+-wZiRP0&CZ*pRDyo_4tOc
zCdSSpct&`qnYb*0+sku*q>>0@G?p60bO>9~r^Y2BxvWJoApmX{`L;D!4@1$(Oq7yw
z{HYZ+&*XQb3D?)F&weUQb?OJCP-fw(yDEO;oEr2{np|>B)zTIW%=fkdIw!cl#Yvls
zwenG=m=-7jsZX+}`vO19iTI5@2J(FsHl+T(+Iyfmt6r)}h3%9<B6MXn77${vWXCMZ
z8L8!$zW__g>ToSm+p>C+Bu>XVHOd>tWuYLnL*{!Ymo^Otp#i;g79RRD*WPqO^R_*k
z$wY^@#n=sWO}&;v6cp=Se~ppu4cJr(Af`S%q+E*PRd}BFQ1W+WzF=2d2}8g)L?vaY
zLZrJvm57iIfa3Gf2RhfJNu3-=mR8Z`J}~jTE1sN^E+?;JxuLq({gwXWan{_uOr_mV
zcnBg=*2E}IP?FXcpIUSx@0&Sux36kKVk_)M#h1*#Um_8o^VsW%+?|bx=R#66N`L>J
z3x^#t+r1=ibvgNVoeGlbdZKqSR=oPH+cKBd7F2)Tw?nS^U#FC(|MEQ!1J%ZxNLuXv
zWQRN-6V3vvSnS2RqO+AsHfC9W(ZV0p>Z?Pw7P440uUgJ@Y`90nOi}66MGv{s$365~
zd)m;P?moHs%pMOuyCu1sQO@k*^&_kgSq?Xt%0oYwj60w}773iL=~LK7i`M$|!Zoxs
zok9hTRqOj7{p2#_O}jHns=hhu_GM7Fz|q?JGo=IAVDZ{v?i$XN;Ct%?8IW}<8Y5{*
zKKr-4Gr;2_tA*Wvuj(#dlptZu_Oy=Xv8q459Wz=^nSYOPX49Qs>+LD;qsPO4W39)T
zKS!t9r7zVJDRggR&U`lQi{Z6@SJS+twMa;9z?T%KVAUblzyjk2+(Z97r*{cjHLbx!
z>a63MRPL){8=1s;fGPfuMn2#8JJ*hQoh{s+?nMbWJSD{KgTo&U0Z>DRUoq$c5?>2G
znT|J4=p|o=VlzggSLhGv$X6oWJ&X-Ox0l2d6Ei0J*lJb6U?=PJPpgYAq)r5FAL@3i
zGwqRMJ<O9tSEHweGr00=Fmn^hWp1@uas8g~NLjW-`9~XsdLF45dzH*@1DghM``D)X
zgm|h1MiU`JbhXU$`5_j{?|tH=d7EZ3;Z;Xii4qy9Us>Aqq<L0kW@~-O20H}L{bOtu
z-+q+qv@+$7A3igeRU;`5Z@1P-#(#q_OG`3j?~2NoT0*Txqv^J$`XW^5vJ#w5ARwL5
zLb=Vqa|Z5NiIgO6lia67Am5+Sb6jIELpnT;xt8#&ysH6$r1)?X<O<`>yD56*^j4jd
zK$@J9%6yVc72?GLf$EPweQKS@CZL>kvbB@0NwJC6JqnX8(zV&lswQc9EmmeU^j5th
z#G{4WiPINBZR1UwP=g0Jn$Lg8-0S_lze=XNSmP$@@{a<qCE!bu-F_!Q);JokK8I*)
z5njYGUdFu|V0>4jL(OxfDuGyF${7REcpL`X%Bs&;%MD1?U3&q++pho>jTTdetb@w|
z0_MKq5Q`7_dY6c6l=minSaG=K46+;Mo=X~=j&nf%ff-QCAn94v^S0GVv0q5VNL{IH
z1GtAWUJuDxn@<G@T$|yGqirbK&A~()8!|^X96G(Ii}lpe6MfQX;5*ijE%PskZUGP1
z9aC+j2{(Xp?CQ_yBpjlv^xxAJVvwfOxf~g$v0$n%c~bIMG&L9<Nit|O+_iqxH5Ust
zMt0NgYogJsqKt6J&7mL6zdU24?>=R8)mOD2!R5+l|NQnNayXEdT_o!TgqH3D)eO8y
zwLe83u01>^y8V^N+0mcWJmBum3}+)9n$^MRkDd`k%lGAz4)$c?+8nBbmPMNk;y7VD
zu64NEt$@xRy`lQPT-sl2)!UUMf4~?#GbeMi<}|aII<(cvDFXgu3z;3mj|nk~gr+vH
zZ@K=YgolePDY;$dQS0q;mRAiSeU*YmRR3VQ>cjzRW=ruFK+AM3t@=-cueNye;bRK=
zsrNqBY8R#Ewaok(&w-k8307bheao2vHE&zJ=k>Y!TtXfPdRq<Tl~#DJlzCp+PjcR7
z&oiG>&`I-HBT}XhQ?<&}6Zc(7a%Fg3)6?{5`XBz|M0-BiE<U6pPLGmuBLY_SP<Wm-
z8#-#)YiA~5n><(sNg5(y%9@~1g6G~tnJMv9hZ-_>ihgX<7M(NQo8J9WV*4Fi)Qdd4
z!qfNdY?}_?KZi|rZuzu)V!B+bnN7ok<L6NPabPA-+|WqaT#gjaq!wYx;ZSgJP+9fP
z*j&Iihm-RJUlf-c3~+y*RAM4MJ$9<Hg%3%(?(U+6*B~<r@s13V`(rF2YKSX=JkI1j
zyy~~FVnFM>wQR{h?xB4BNCEG_Z{!XOUv677NTRKo;ge#schwpBSpk`sCMVOO%n+dV
zfNFv*;c)0Z*{uc?R->B{T;7B^iFp%H4d*$Y+$lHj*jtWg!lz6P`(@aGjV&RUJBg{w
zx|uYZSxb+{iT<Eu&D@zX<!{wc58(<+gN^JuPxu@t&6AmtP5DYJM=q~DhE#Js^}<O{
z3;0gW+puAGCjYMfH?{_}t^^#i_=*ZP)(_;Qb+$aUgjXHg3+UO7j^gn~d|l|6r9&HA
ztNw%=tKIZ7s-ArKNJwHKKUKl;J$5bgyRe7SaXP{c?`s`7$$cVgjxgczW%==>`Z{|r
z^R@i9v+t+7J$By*6%gx{Wm-EB(&kj6vc^O_;^J~HTYh5TRdC&=*UWBm??2BUGK=Pk
zWD_S^IpC-{$$g8;tlt1(m@G>(mbB5#jJi_PNo`?y%xqfsX&P()Ew^aFKiE!cVGLnw
zDL<bug0^0+&sP+}_kpK|%FjwC9+n$x_B05EVNiVka-^F)0)0;Ct_<mNo}HFjCV#_Z
zxjMoc%q%Rg2?2BQ3=#-GE@xP?8WPm|&g*#cYYkLwc33IOI=rRgC&~<<RJ_|a=7w9L
z%q89RIm`!c6%5^>8`wL1vu=4}T14brYNQgkm11{ua#rqWy8cLlC}<^MjO`4TeT5^n
zjb6LGkJ?=l5U)A9Y4&dM3L0PR)((1~H6xKSrqiUoRk50TCu4stZ<+S@ix0I3J`$tQ
zVdO=%x!*}FQ8Wglty{o6AwAEIHO`kyml9N3yUt{!AA;*skttNF+r>f``N#0ink!9l
z8a7A!iKfFG6eaAuMoQ>pRJ&G!&Nr7CItB<K{RcGz+i_q)qrvj?LE`o&k$cIBu_k85
zSq1fC+GyE`i3e<bb)6Hqb-~2BNzKklXWxLzh^0ahm>L(3k&+<6$z`9Px^4F`)Dw4c
z`&)~jk%VM8tqN1j$q`)4x4LVn(Nt+`N6TuGZCbiSt@Vu0X>*?YG$|RZ;%`>o3HK#<
z(5$Ecywu`Kl9&}B-$Q;2Xz<<}c5f)*0T@AThO<~T-PVYdp($)p*oZ6MpHTbTDMB1K
z+e7F&EJ|ETZBH!b*dnjb!RP62K7Wy?rE6i`Rx_l)l^vU_>3{rJXiXMU5I|yTC8~Y#
zSYa<JU~-mGC}a1m$BY6`M_^-_*!rMy7rIVFsS-7^sG{|jI=4-3N@CiuZq9Tv^;uS{
z5>sg@FWvs!PkbRcMTb#b$?)S|p}yhbIk|>Kn5z~kqxrCcg4~sm5}}M}lr6W0w(|Pn
zI!I}Fg$BD1>IUIG`Uk_%woe>61IQNgoQr~W18-y4!`4!Dr_^WZ{7A6xQs+l4w<?LY
z$jIL+<#kClWVxqhggC_09Ps#RN8S{P?<8dirvk$4=YQ5MUl46KW>?cOx1IJ5gvKG{
z0mhHFwXhkj+?nK>9a}iph1{+iS@a?!ctz@HiFYQ|EiPn_VhbjFb$VU|giDz4K4GOJ
zL|N^h9<!iiSY*3&i?pU`NM{F9>^SC~N@F|=?NP@t88;sJDGHadAPLuamz&wU`41RC
zjPhNj0^!oRIRepGo@}x-$`yH4QZ15#d#Dl?=2)ek*<hpC=8|WDB9<Qdy|fT*(k+Aa
zR|DlQLj1l&QpN$_5QxyG-47ez3KArJE)LGi!tzEAUu4I6efn_r&u+Q_6%Ip}GL&5@
zub=KH72XR~opd_Ks%B4mG`fjf06d%@cmP3ISd56TguZk&ENj{gDUaxUJCf_Cbvv0h
zY^&zW$$`_7Q%kO+(X;8aM*uESV!$U6Em0Io%Qe?q+ym@Ac$$P=;@;fEOz${ZnjNI}
z`~79vB$8q<f^od>ua$h3n#wA)3*srob7zYlByJW^DXU+T{9~T%s;fhsc(#9Q@)Lfl
z{uiMoU@k*JF5~F(aDneUx>$Z)_hCc}z0xpIEC!{S=Thy=(ZKPt8jUjD0TLy=ER&Af
zZR$cwo#kQSA%B<cdzAr8tZGe<Z8uW&6@`1+W^Yaps-aZA^e2(hEv-9tfgM(g?<Dr6
zNWSZks7kK3Gp}doo`Cx#C~|ELXhQ$D%qtQF#paiEMIknit?>P7&FBM-&Z_8%I&YJV
zdWtf0V2?FB>y_A3XY#5_!p0$M#*X+W`yYC}w!;~scs`y_pH$xpFF^J=I>q+CH?Wry
zJ6QDn^^ua+)0QGc1`WKYA||$RM)yQps=7RhcPBO9=)J?W8$p}hagC4_^mAYJLA}zB
zEhczcw|k(V$=cmtJhzF?%m$?rGJQXW2bT0XYJ%pb84~_U(L8>ueWQJ-kV|RG#%-ag
z=UAf=we>3e!=fXEq}6tUrf5EU+D%+DDWW?eFTcXQRNc4^P_r#21LTWabB?SL4gbpo
z-m_P)I)CZ+A3yAzTktlobuKI<{1N%tK*Dv=Ch05({6-R-tW}6^^)<=-fFMnc04(gZ
z#7d&D?lJ7lwxr(Zz$6s#5%kT0xh3XY$g8y;u)?Br8m2#3iSmkf|Dw=U%t-iXIW?Bm
zYEQ&iYVC-(EZU%X`Ij^(hSt{LPt}o-Sq3#O1FO4LS#JzFrkDr7Dq<2&CiX`KHydif
z^_LQ;r90KyQIHTCztU>u{}153`eNWH2RATbV+sD%SpanYall3BH?dG;VVT_aaIyk!
zSAuzIN~VsvVY`8~{Bee!bHnNelkIr|DA8HpfvPaeX?jzp&e$3*UVFZt22gboR<&Q9
z-646E+h>z;S_)R}Skk<QtV0Dx+)t4qg~xV$=<ST;sjNgz6|6~wKinvFwMuiRa3t_W
z3ndW@gJ^vta|Hdi2IG^q<^^^F-5Rpi()Xl%7Jl=TrD`{pHX!A)u(8z#jbBdKjqfwV
z-pzk-%IRJs{hg8{ydlHg5V#3lE7WS2W%)#LQC_&P<vA?{P5$}YUCN2z;Q69G?(Q`u
zdAd{atJ^@FdyVTeMTeJ^;9xF8MfROFaOF>+q^F6Fa9w^lDyby`PS&@}Ek}dK;;bo}
zg_GjIIoA%J9gHL?p{qRmLaSi@>LX9IaV`Bu_#|=<)#c8nVO7HfKGxXbU$xN(2(*WI
z-#_ONIEW-}jo>Vu8UEFD2M3?t*Q2%Xe6{y=8a)xUja!q*YJZ4-GVFVn(!b(1Hn<r*
zXrI_2ICvu;9PPjO6D(eN|9NXtGihDT;mCsKOjj6HR`*RX<b3~I=%<;XEM);I8wg^0
zP4f(%S_hanpx~G>Uu#9ky!NR-uj_MIQRjhzegWLwBq@Q07Ne@lM%s_|g-?XMAAFYZ
z@YH%ZW#jp^hT04cC-fi_wiVl3z8!;AAfX9?E+Lfqx(0fGh>RDWy8-^v$~5mMXT`Ps
zLn}x@a)_9PNG~^44qJ}M7C|*z=zC20#UY{d)qJCk2#QtUe#I?(ZX2&S^_lH+sgrAD
zp$nC!8-npyCDpE!OiXqKLg;U&((H*t>+_o}dScLmKyl?e5gM=snE87#4<80o<jsgx
zuIXinpkUIu<+tGUy_DH^kek@VWz9K!flC;irU?6zmXx>5?%0}dCyBCH!(t|O)MM{Q
zqvgv*Nx3|2?I1Wzl}?}KV;~N**5qOi&mYWj!kVd8>&RIcRTxY(>`3@_UAYEqW#MGR
zQ0;F0u%YkPoXbDdYhiAGSaHW1FvQ9?*ri98TlxF;%0IBMa7j$l5~C-LwsCH8MU<Jg
zZPNqJ$87}`ISGkGRXlBhRV;*H(AVu&`7*;Tq1zhS{`{WVBgR-0Bq|Kox_p~4c3*<Q
zt1rb)T!JKD%H$0YI?xxiLI!=&YS&xNR<h(BSsn2jZL{d>>^~8PQ(o*e!JH3?)x@mx
zXgkyWld=JiI{jltJidT+nMrUcZ=_vIC(9``CP3U>r8TUwB4gT$0@7&uiP=h+K?Fa<
z5%@Fpbl(+3U4B@uPeb)1N;~E-W}e6?w}-ZW5b|~zm;`PA_9HL>RWkC@1PvzIR2dEm
zplgX=bVZjHd5|Sjf!n0+%XNy`IE%lBfMz<0MvKM;&Sb&Cq~_E8#EmpW05l;BA31`$
zjvMpcgxOTJ57Av0Cghf0ab7?Vm+|0W!vH+dwN`)hhl-HFkysK~tjz4S-4A>FP?pz1
zJ_3GmL4gq_hUUiJ#Ap(5b<e`aTiNv~ZLBLlejd#gt{1t(AYNqppffxNU@VE(7Vi7G
z#uj$ayo^6ue%TIZ3u0}zrl)hqi>ZqD$|{P@-~L%n*&kA$c9^Ly(E1`0X~@iEZmtUb
zu^bCab4CAX>8w>09>0UF$cjO3B^(GHNhweR?SC-I9cRKEEC(d+ehI5}OreUGjuM$S
zIb4h?uLWW49HsGGYjia>HGUTzpnE?L4;={&Z9H>GsWcpZ_>#N5j%9rjnFN>DE*AX_
zR`|rQOctg*-?EsH=zipxaIzi`&*<<D;oZboGjq;hXrna~^281)>nQN+!x^o<e$<f(
zrlj-~98Kxb$MGyhR6d&%IhBWKb<dlm^MdZ6fm2%?RZVXd72ClGdGL3x%mxROTc2h|
zD`KYF;}%=k>}b9uE|vuem2`>a6NZBKhKu$Q&O&LKcC?+Z`Xwdk+f6KV_2)%H$=BX<
z)l5CHRE){d)$+%34p>eVXLN_sok~DH$m;tm7E!zla0A-I0p8+{0icdE0Pg4C<T48#
zH19=C@LIUuOffWbZgE_PGw<1kf|>x)g_Yo$<kc6*Yq@RI;U&kcLVB}p=!)tD>7gUQ
zwCc<pY1Ol0({eDUG9F;pu>H2W@}98cJT|a5+pjr8Q?=lYMp_?g3YTm$W$we=kRNbJ
zQ5rD`l?nvX=20!|Gv+ZizVAS_MN43!R!FrmolTv?e@H2vQ(~2rMsTOQ#>0K8C|^@b
zxymc<6OBtY7Te-`=e=6b_KKN$X_|Sh4eGNIXs4{fHfeMEA=h_XEE6E6W!tHUr6l02
ziF(;AIamj}H;9Xg7G%%5@z)Cs-X&Y*#RalFK#=Sm`VzG|$jYAb-Fmho(X*>&1a!1K
ztUI!mUUg@>pI$|avy9Tt&L(&pXXF=9&u1(7x)F?-Gj{|Yz_QM65A{JxL<V~dGe9x?
zcXPaR_tSgq?EiyC_9XtF2Yo&6d3ox_WzXQ^qsza3zsn-~zxH*1Xi=hlVj?700C`_?
zeZ-WppsvO|!%Qv5_Bf$y<adnk0~(%;nVh+;1$t{}1qL4;E|NCQd}Bk0h(RUX`Wgh)
zqX=q10itN_q(uGp^Kwj*fIa|av@P)xT&`Uxwhz#mR9OfowLX5(maOR3FrXE1RZtpf
z3d`GpYL8t*QI==oq1Q`81&UMnILcu=a8h*HGQCBQcD@$rDH+o07$nhw@wkvLlJA?R
zZuA`ws(!}#8o=+fd4O_5ApgxhkD;xasMmxSal|oBI^-`;C=0dnHQfx66p@a8zT%g3
zCnwpk+>1uONM0HuOGRq~u9A;e38op5&=2$S7e(tFwVx`-XtK|6R{&H$bEm!HEIT%M
z2Ys#w1sOH(%RTL{%T3KNfR6u*y|)O8By86<afim;-QC^Yp>TH!cW=Sn-Q6j?aB1A#
z3vFB*Z=~sOIGZ_VB4%R#-Na1HCKs8z%!thQee%Aqi=k7m|D=1YJH<yqL;v*q@{VM5
zJj+clX~!2^E*hLCpl+6-!dZJ!s#Z&`WB*@&o<97!1h8$_eXF0}@T9)ddZzIuygW8e
zYxEWy`S1uHyArXi1|3){bDf>2`rL&Jlml_L`xgJ_0P+diuhqPqx)GKeaJiiK6as-U
zHM+NU(cUH-ZE7&HsnLk;bH4!|zrO`Zhxo0ZC0O%8gcQskJ5bKTp+G9ulN{dZ9nC10
z^<OsZ_@u=8b4xf5Q0%OTv6NPilHFO&#)DhlN5uYc9#edCY3&c5#Z@uhS)G`>qBaA>
zon9tJ_cZ3xLRE~|<E{=bRiev}D#|;>t!6upSfzLxnhNyrZxWz!9@OscwB3nK|9)*O
z>6|%D`<q$_^BBM&EN!%?rKOG-uwJd3eJNb}AVkjmRY}_$%g~FUHfyRob*dH4m3mjq
z@IO!=qawK&<-(n=7{lka$QkD70Z$oQhEA!C1ZMaQK>fB~+-XKf{ussCO`GrcDJfcN
z+1=BtxZbI6m!MC7J37JPUhRl5?!s2D+k(W6Swhn#DB$E`Pk)BY<S6m?&Qd(6VX|`~
zSjd@iMq67+siTJ;bY7XuQgWH|WvO!Z<_yTwFGRdAfm?qO1F3&)FygT({_(ht?#h57
zZKSzI&n^QvA|B`Q?4Qxm39bUiTwm6A{s+pHq@TVwW`|s5?@^9x<7@#A0?mV-fAKTU
zweoyN1l403MbD)gNQ7>wi{ryP<kE82BSk%oBmr5c*3Vl_U5Co-S9mGTUBI%UeA%Kf
zYI9vymfW?tAS(|})4l9GYw&tp`kgl7>Fl?M;X7pPayfuk?SITPrTz2Doak9))9v}E
ztr_49SFwUwHlb!25XG~mKFW8lojWne>)2KfX9P-?d&pPpcR07pqwdHiIxu>Ej%p(|
zB30WKWwG2At>~b4bl%PX1yzGfv#6ZQ$SY2(VNIjlV2NCvrL^D0^;%9k2aL;+_1i1z
zsr*@SlT8h|oJ>D;^Xa2NmTv3+bPH!Gm-Cjq{NnzWi&|3H-A*e6?xXnP#V=AXv#GdQ
z!|*$|`K5uU+tk-PpKO~GC+IOVQ!w3SSvJOVs{FTB-S^087mGO{Q3PpfwZfH9bb{wW
z@0GL7QCoRXjsP3>a38-;sfV$)A8xzaufj*pdzGJ8!%=bnLeFtPr2~xQ+09HSAA)u&
z)INeJqHMl!Cs?T(0GG7RYp@IWU0^tgfS{m-$m1HJU4Q+#QM<QRh^)#5Pg`sN0!B*s
zYa?kn=N9n=nS#q0r}dyFMegT75PUh%B~uIG=A$+-5m9r8zj&r9f#Pqd0eobZjx&`K
zw5_mcOHxrKP>rQFl<mb<g#p-Y%|uINUIK1OFsN%qCpj1vK%x$k)*Wh@2bE&*!s59Y
z_WJINdv}dUM#on1K2*7x$aa!tHX+i`Ms~bLkQ{f<KSX#{a&@$V$oy~b{(ST7`6T)x
z5pW1PD7#IK=7)W;*^2SD=TE+#^|+oI9kMXR?Wj7iRVdqY>!-2BG99*a&F73Yloeii
z8>s5;8pi)e*UeH$9%uMf6t*+oAb-dgD?P$kMt)_{0>*Cry2xY>-B!`iVGY~e{l&Xg
z{>!T8JL9j1M(WqZrE~(mJJSR9YHw~4&1~EF0|SkKBK$olmrYqoYX!Ok7#xx5bcKre
zfmo}{Q}VM^prz_756C|<Di!KSXRnTj#flL?l0^9hW}T%@MEp4i%+$#Q=F+0X1_$qP
zw-5en2C_X6%c(ZYx#&0?u(fWiQ3&XLm~)m#;V-uvDw36ql#mO-xox=j7uB<c-Z;e9
zG*KC580xVAg?pGW)I;RszHnQZm5V6MaUO<Xfj<jB2R(He4qY1LfOdUa7n}Q<b><NR
z{Edb~2I?zE%$DK<IK4a=L_ac;C<skNQHOoH@l`9*$+UfAgu%nlI>9)ec&JMh&!K96
z1mor_jD~DK3Rl7Wno5q=J~W}z6a*(}$FaBLwkuwB+OOHW`i^uRa=6BeV+D(YAw;Y0
zYgOSlh$pcv&{?cxrm`7*!>0Ocyl%P=wz(2bz0DF5xZ7~>VN+rSl#b{~mx|j5SFr(!
zb2!%?X2o|>?%sw2I=a1}z4XgP=rEO&fjDTG<J!uB^@QUdCFmS6p=BWO39BGAP))oX
zhQ0sWC5>wL*UHJaduzZpUJ(GR$frXAc_W>7mS_w*>xyaAqc2DYZB<3e?_fWu^6$3H
zEcYRY@$W9Qg{_5+q&0OuysVUUxp)uFMFN*ff4|*eh&Q(O2lVjPPVb>@Pt+(KrpiWo
zQHmzl{%Sy=dOtR?2VFgt7At5`RujVG@+F<3ICr@DabCn!Zl<a?Kg%?eOkjyrK1R;T
z;OAx)UDDORgHv+`$ptDc&bvf8q#~tJ1f1zKRkxl7N^v>x`SoWaoZ-J08vh3#>i=AU
z4BVowV@Di%JVUn$2_bz~>B>aHOZyUD0~Zs2MG6yl$v}s~x?jn~gs4Q<g0`CKRNCXz
z6YeokTMsqZ!VfogLtBJdYhebw<Um)F8&a$fc=0btcC8CBm4`!CQmnb_P%$Z9{^lnH
z*#v!K4u9J8-yHnKa~xW$fuh<}7`2j)R%t=HhI&poy4^NYT@wB9(go+yuM7OhonT7P
z)o}5!;A@;Jo7@Iu(ynS)l#dF;Tya<>jtx!Eq71x(XPbM&gB?lmIyO0?6TQ6}d-}bu
z$KYiYQKKxU=ZsT((D0KpZMLIpvTcF_v`@osdm3Vx?5w$dV`{xkFm$_c9*{DDy9`-f
zzqqfAa-BR?r1Ifgpqb;<HP9#_*yTCgGh0SB=C%2K9+*IH!Ln_iO0d&0iG52|OmZn1
z!xo<(J_|G2N`NgP?RuCzQc`XK!2N_1_8O+I1DFp{r1ntlak`KHk5?r>gcxFS?^%#!
zT*vzcpAsZ>-$@wb*L-atW;g>Ak*vv_{F8M_3!X%oYjMPBR^Yj~yYOarewxA7XjJP!
za$$a~^l0Lk*SCz`69FFcr!|}IVw}AzSkIz7B8|3h<sm8d&^&0fvBR07qfz-#S-*}|
zX)5=px`e*b6`M6WXJmQ-Zpv`w^+$`=;t^WL9@Agh*0Ka1(CgoS)7+RyExfr#c}@DY
z^(U-+KD9sBa4e-{B1S93ZM%t2q_}vZvvyZnN)6@izs`RA4kG?sZ6hmgMlAlgQopiL
zj+dKhocYT%O+7~mWQL($X3OiGqn$!3EM4pvxS`8PUnlv*17H6KD(-*Q6aEL4>~GQk
zxL^`6er!tQ;CT#dt+~VFH=U~MD-viicGCfruH|)*&UFFOW`^H!VN$Kh9*Deb=sTM!
z9fS%Qs^xYVvK<6`w(zDpBu5_-#D<D0-lB@@cxZ(P*K5?a9({i6Zv3GN0N<vt)hoIN
z{;0P&Tv@El#-TLbU7l|DA)}7<-}hiyZ+MgMz!$x91n%n5%=vKn&8KD6MB5t<>Ehw7
zQeR-u5e*j1T@vvs74SySn2&irAzU1?@&a-TsoscB`mX~}KVgtH9mg1S(kIWN)y6W1
z<X=0^ep+raVO85}Ent@;cqD#xPryxno?|2YsZad-9{r&zd|xDMLf=LqB0#F*lw&ui
z^MpfyMoxpZ*cAwxzaR%z)>mTQ2^H_p{~MU>PaRRdu2Oa<%eOq4-xl@kK!L?K2^S-W
zo$a@O{|{6lqsZT%5Tep|=3?}_7|&#W)#@d#JfutZz+OR)e0+DsP@`Wu4(9JUJ3}fp
z1F#R0f7BlJ#dNDg?;x2W<--N_YL`|x=fe3_X-4bU6v<Tt%*UacI*2NQQwi-#K3i7@
zsd-nkhi&-u=PPd9oIOzHQ?%m(`*4spY58h?D0eZbcIN4nN`D{aT|H0D+qDL#3>pUS
zpys&E^=RcP+B{LlNTO^LQ`Bz;ZPyJ)#q-%x4Z9u}cUHBYs5-5lQ)_*PEaTrXEMbux
zOHpQ**PM&UkSfH4qMD6WM81{TiXHa`dhR%GkO8z2_Q<6~r+z;2<nF!|xY)Wus~GOE
z2~+c7O0lQF4hk{7{y^$-RA8jtc^}8-{_>=+pz+7pPPEWxO~6G%(NNqfur+`3W}=4x
zHq%)7U)HaE7U_~xs-RRu_?@-9tu>6q{F@sAJI~+ZS`c{*lFp#tfp?%cif%Xc#Ml~?
z;A+6|Gg|Ye<X0T(+Wf`x#WoLUQ~<TY?{hB1hem`Gdx*opTBZB>_{7!mw(`5v#1jYL
z&$#qMw2eSiVZg<icK5}@QmS}Ai06J98)2_=jxFlCBbhJ0!fN=yR}bDNJ$f}Dq(E7~
zd&fn495%+R&ut0N*>xHxqIcg+?o|>u7o6XxDib(|QCtnGA<*<-oDIM6Gngz@Jua8G
zYH7`?7SJcMERA2ed*JJk+IU`Bc2z%{y!6el>cM9Se~TR|sN>*okN=|oGkYp&T+c7f
z{l{HH?o8CI#?MhZWkUhbvQJr(mzkbuRLjJiBI}J?<L6w&=t>5T1A7DhSD9rwD^2$c
z*O<Z~Egg~vxCMhsXX2j?-W-uzx_|=FSI!gXY7b-%gk2f%t_^LfrffmcggI#$T_p{Y
zWtIyaMHDm75X)b&r<d7uEw+K>{*6aoC6j^;mpJ%dc^4oOp<0gWe0miAY2vLtYG?g+
z>_u;A3`XuMM+uR@T*9xs4mtd{vs@#mM9o&A;TBi&=ax6?QAFD(+f`#jc}L@6iHcbB
z{O>NzxxX5R$~I{46CzW4=$;V<)6l@S%=wkoSF1{je-i)P#mi^~&~^wL8TSPg6(_#^
z=o@j~x`8EBRY<eD$(}1~taF%{^_V|g9o?D@hbe20;g9<|r=nP}Rl`^~$1jfD5_q!L
z$e!0R#`ec^)znC5&1z@zr>~HyAD)?z-zKa&0hU|fy_GvKm-ZZMM<y?-f{3zT-0*T@
z#ACpC*~?eKM6ctB%x`d=^PPHk2>W`gZ(rzhC!@cL<<leYgQjj^Oq25b=naWp|2dMf
zaQ$eNIX&7w?6NlB$S?Lo%Xf6Z>`_A`Kq^l;;RM=xZ3}=nhI9M(EMAf57%JY*+!VWy
z{={+cjk%$<!tk6lb5W$teNBP+3Eo^A8*5$DRP6NlSj8nf8iJ`SBtCpCYUic&h-V=7
zRbw!vxrVNR`ao}nH_I8KM5p6gChyb%Si@Vdb?Q&(-k+AcD6ERAt*JWgBWGIh^%n^f
ze!=#c7un28ci1oqi47J8O7-8KcdgzrET*w;_PZZU3C@Fv!tl;@)HTDp{-%005II6D
zyy_#XG;5tDFC%IUmUNa}C`P5K73=7$`BJ@Oqh%F?+af)#o#GGMx;ULa(<?{yqrKlf
z%y}Njl94=-G!~BN2_l%swmUjM=8YgY!!l)9!_x^YJ!z9Q0<xIs(c&?S!!<4>j)}id
zv<eF;5x=SbNy3K>`|&Aa5Y)HD!hob-<zysG$n46MIi*q?Jzm`wA_9mM8S^u5IW+xX
z^0P*DSb!X=dh6e0QH=SjQgwudcTNivuNIkGo?8w#A9~(>IvBLg6we*<h<OVJ=gON$
znp>6{v$1D+l6){<-$On(K+)v_nFBKk=XII?Dp4%olzqFn!3wjNJWRaXdf51*Iy9V!
zo@0?0PrWkOC!p;H_E5r|t(<_ec<XTu9h}|eI@~7-#hK7YPPLd#E7?`D?@YA2vs;6e
z7iJXJCQf{^o56qDX#B4J*nE_y=~9x>h+jV^K0(Y$3u>h{KV(BJ&COI%gg_G@bk>3s
zhXD3()V*&;)p1BJ06VT;W*b-!$&@b;Y>q5A!r;_y+g+opH1FUbAGra@x@?u)mYHw0
z(dRcbxyo6Pb@^u^aQ7vjBC$Nu0j|uw;v0`*Ojy&mrv$dA?A&FM2I^x-0KHPjonKo>
z>{~ZdtLP8zIyQI@u^)H$2Q3(y7mk+ur4?(YJq(NYYm|SvXN?*<njPt9`(|ua9g|Eg
z*ra`cHn8r6R{Z617ZYEbGENM8S_Tk50kKBOIbLLlD~HyRE*IR@B6Wt^bcd;WEZlQe
zHaWo$J_7o3!G2x<JFhkL$a)a?cPz;#rGPx8_8cQ->E{V!<Z}BdbNdbPW=gfqG#)vw
z=&RL)fMYTt59TYIS>>yK_R|<?nZ<KPFFBgr4!NXb*Cj>an>^vvEoG@AhDSmR+(i#V
zNyPX4{mJXt-Ce0G-1Ns_PmTU~#~bHMY-3?#F3z|9wDdK4u5h~+FAaf|?37`I8ouFk
zM|iH<r1G5uj_7WPH3>5a;!-qU^xr|B{|oEWn=|?%Z-P=Vd`pI#@PzUqDBQUj?B#+3
zz+XnEQZ1#o&Qqogy<n()W2o&^Q+xW;w*wxNlDSbgJ&iL_ZhVm_(~2X{2B|63U2Dqq
z*rXyy(vYSk;>)1tlxON#<q|um2A=2Jt6Gzn&Xo<q7?2FXT^kK$x8j8Y0azx#sfVoH
zky>yG9oYvN9Q`Xnt+=UMoYR?;EVq4+j}W|k-VVM6Pxr^RnV)zf*l$IR1@Zu%BNotE
zD6rF_>G>MQmcdj=OFwSxY*SzPcfraW<m)%h-Y1KP9cnjebooRXbnOTq1KtmH0c_G)
z!aJmct!H)giF_O?ezs+KHvR;xH8I+!)qb3@&N1drEoJR;qR7(iiQe*3h0E_}4qHA)
zBWMftJ>AXm-aK~g4>?kyN`&jovKPxf8xo#-!B?pl=S|mf^n^?_7SYn!=*R{AWYNAh
z?1DDGpf`h|&P5`DYD3a^J$P|?N@cc7QuiqhzUHR)JEZ6Tj`2>W@YJJUlxW`kv`e6N
z4_+Mj)lvyRXs;yFNN>Vuy=Bz;y>?g8-3xgVxNhDcmDne-=;Cn@wa2a3rQ*h?&el63
zH)7CdSGhpp*79yOUdIl?^iYIjxA|f?_o+hGs9H177tt!^=gq0%OQQ_t(fRQ+SF~x?
zGJ}*`#9fOBX3Iqf`wV`?mWd(bpQlu5UU_${WB=CCO-EC}MY2F+1NIXu3oB_$Ej%T5
zlQTSD+`8AW)VTqJmh4H_8hX}$phU!!>|b7a#bW;hwW+aF9cKCffICtsnxu}e{sE|Y
zdzG3p=tiC+mre&@=6$i_?xl<gh-ckAl2#+71abA}9Xbbv=sh(gOp4A0nCe6eIB9*)
z)&l$>G&PwmWrGM<o1sp}^@O8Yr0Lbrh0`QEXKHJh@-+6uTdx?d_(Q3{`g0c4DeB-$
zH>oL?vJ@Oyp9nz3QAtIn-W`ZckF@(_muD_Unt+weBYsy^ZlKrK|5G>#!sq~%+Z@;3
z!WuC*(W4@!<_FftUoK(={D?{pOJpz?)Y6CWNRjsLsNHuA{Jy@95e=`eJM+p$`C!gP
znq%bj6b0eexzR5<qAbzIlmof%+TVDv&P0}o@Y)hrr;zKyLq7N*g#5G(gVCzDXi5ea
z-R`1+21R%^aT_(%7Y{hU5A&7x32Wt%<6;<#;_km>*+pK`^-nSsxPa7fM#PkHtR5Cm
zMG}DYY^2E_cFd;6Q)^8dL@4oQFm!_M6ESfAl-auD^DGgzs46GUujcB1)d1DApt(|T
zaL8L(1AmnwHB7P9NM%Q+Tw>>o5hlnhJ3jV20)i_W$$BCB?7Dl*u9fdKT{){nv$}M=
zPS%XwVCWD-P5q}=F7S=niPHR9&7#yxjnFme<f*+f@EG8;v-Zvg=B|Xe<RSc*Ki<36
zt|2ptrU4mvk^zD_a#q~L!#9#<UESZ`_6l|Am?N#Noh@{3L8)!YyRP)p2?29LH3Sgk
zNJ=>~byCYL48GAfk>T+b;paLlvT^E3V6(3=M#>t6q<*o+^G)p;7nb59ITl-97EJ8l
z@k|mB>@7vIK`mqFb9h@0l8bQ$VUMKfSnou7YNoJkQ#Fo!i!vAJXnm-8eYluH<SStc
z-S5fHk`W13%xpx;Cuv91iK7Tt>>dkG4f7&))=cNj*HNRTP4j$^UrfLm%3f>{Txu>?
zsBNn4FRQ*$PJBdb1b#1e*D@H+RUZs*9m2E4!sohAPH?voob`i@0Y@)S-WXREh@6j?
zRJ?B6Gn*dvf#&71ZbO>Vw~Rr!%A3(7u&vM(YqYmGzl}#65u}&KcjVShk>T#@%p+O>
zoFL!jul5Sr0k7=d`Y!2u(dq?_ZPmEueg+{u?JNZfO*B2%dxt07{YJLVpA+Stf_{d#
zK72h7lc*UkpT)EN?0^YU7gRmYFFd#~9^6-i4%IHjwOnwRQf^4)_|Xp6c*zNXhXlw)
z;WSf0+KEe-PX5DObf2~wF#~RcS8N24tx5f>VY*W<hJ_ka1x2UU*gT(Ol%Yre)L)Gl
zu<s1Ii<bTYpRF(Jx~~i+V4<E+(c*!R0I-x`F@~@)HZ&@rHT7Ntj;5;YVd{t26G4RL
z6yKm|a?d2+H-_zF@lAd`p?`x0V%O1Bo=>s~S;&29XHGX#<Kw9-So7<j<9oJLy^gou
zpd=zw2ROrCF0&d8QpeXV;(vYu@#$?RZhfiX!lgZ|<qfDPzkVWY<drDjPt66*fBgld
zL+lBz#u>b9`pzy49Da;WGRd!L<EM^5w_@2)%aRm{5E@kRl<_R6k~alCm~$^KBTQBF
z_jD+@(6OMd)q!q+yDoa_bb}3?&CC1e3|t_cAj0$gO;zu5>6=5dice(qCTVr(mQ#0-
z6PPPsLt9;lAs4rD%EsbEi8)`(C)Q{CYGH7N(PCt!3206HMIwh7lO!=N(YGulpDQWJ
zc?bPb39fBPAh+uEb0XZeMZ)G6SxS4p^>i(PQHKbe;4-7`a2G8Ow$9{6y*a?sw9Ad*
z=$~=~3(WaG8H`0}`w#~E(C7c+U4{<a=7-KuOc8a;_SCJTZ`Pc}gjJ2Cx|lV$V$sX?
z-85a+-&=NRpZ{M-%xH<)PQtczuangPj0=z)EgoSi=bffba;hesI2E#!Fd7SnQc3c1
z@*!FYL{yJ$I{d5<5zm%5ms&+8z<p~hO{U|Y!@s#$t2?%Wp3dK_1PH_DWi}rV{M#AN
zpcU7S+|*>HwP*;vIP*lu9V3jUs4`Z@5?)gW^Xe}VgAZ51#tU{n?O$P+T>}O3;3{(o
zy6dkmeJ66!Acf9cIZ?3nMk%dfdOWa@*$zPKruU*b@r&U(PYIB?<EX#%X7LiCmKZdB
z<@5VTiebOz#cOV-`nBP2aIe_ULFs8#RY&}MFORNl@XXVa4r(yOEU>B62{`4J`{q^(
zSsdn*3<+6w75-WU$0VKyasov)JLh2TJ)cRk(NX_QuR)_h&tVimrHSB6OLpJ!eOneo
za?<f^6$iBbO;+`P-VXNEUe|lo5^`-6IJ(W7>@825fg0wG5f5`nFCM$L(F>jj?3FMt
z+u|guq_12Me9}Ci2MRIvs$ixFv3A4m0pP)uoxkyUV@iVUrcI3ap<DgCXo|j$LP(63
z5s<1LIU7Rmz$9)x*`;8sAQSH@NwSBdCPX2juKKjX;DQ*uc9pPW)WC||rQi-n6%i*B
zhc%NxI;0u|5E)w!9|h&)QjGsWxJ{p!`FiBv7$J*kA3sxsN5c<MOE<2TXp4icXV>W}
z-w^=12n}XtDhmOzuo=(3h#dXQ4r^|=bvZ}3b2cOMde9J<te;(v(&pt>&{aQBPjX3G
zud^kTETNO;O)P81nNxAx21{$L{zx2SGHAk?XxijRY@$MMPssg0P<*?6IQF|DJM|Ht
zBgTKMJ3y;ykVRCq4bpx^McAbPM)dUYF+HXW?Z8KNMf=>=IolSmj4m?{#5ghj+ENdm
zo$dq&q)Hs7*2q7MT{Z__Nt;2G7w4Pq9ZO_YT1y*NUtY-5B6y5+k)2hb+K@^C8{A+^
zif?)Y>S)g^$T!889ul@tC!MsKtn(a<44kar{Im=}iVxDp2iOnQAWh>0XgV^y8GJV0
z`p5}?*s^uLqCE1A8pDm_WcN16pWi|M^Cw%`wel|CHVF%<DhJq%k<;_YfgL`k({qo>
zQ}RLfHK~V2sk@Se13AhbWs9D-3iA6lC?hNqX#A2#W=0N%hKvlZ8{FO(L=eD=93Adl
z?u!rZ1!pX~@As>2Oze^xWl7{KhV?;1e+3Rjqo+y0GQ0aB)hUwcAYa)Zx37uvY*IA}
zG1RRwwC!5E0d4FPIftkim1j9YgYJa{8JWG#j{PqAH9!&ZU%>D^E#~wj9&gwzt@hGp
zjSb04@jC`!?Rg=2JFufgr5u9^6#V_Tu>3F%e1NpnBEq@!aOwdA6xSOpwW&YHZqH6I
z;;z#Cq9qOBio^n<tFUHvTgid&eG>|nHGg7`v>_&%F`a5+N2e)K8+=U|2u!&q08DWO
z?g}gHeh_Q&G)|XoDd0@Wt199#wszq&0%uDDLe^LeEFRg)WwdYQ?lztp!j$zsw4rsR
z$QN%Jr<5L62Y3H`|B;@Zobd)g<kDHtcJW}H5|`OaO4O0{=u#4J)%klzO(}CYcX@LG
z`cj}+AEFFjc`j5NNNn_@*`5{u#tJQ8z0PkW7-nOPGn%p%gLjKgjWZYG1^304YMx7R
z`sMnvWiiuaPR_obskiixISHLGr!AtDD`*)fWA3stK7b`8McT2q^xctyBz;B6nEI#9
z7_r(JBUV6|;1YMIJJ&g)jLbcb+QvL7=5;xeGf#VtrGR#$S7geWOKZfybyY_d;MKd4
ze5aY-M1S!^7(-(Qb_Z!fxJTmDA2XoFsO9To^NwhvFf)w#WmQki?Kl^Z|JB5H8W+cZ
z_A}qLas})tpgaT39L6QphErGPpfX(-sk*2x4izBX+Wkxu@_TarV|8)kG2ZoPOxRdT
zM`8<_>Q~wEZ47hLFB$8)LdZG~040J$!yUqm>1Es4en=!;hHqFkbZ@5xQ>mE#(rjU)
zy%Rv&<rgaNfzP{`RO5A|JS^;rEmN<iXaY4ksc%uYH)5fJ#zB|eZ%tpRh2v;hfG|Qq
zaD(;R^@|9ze>NXgovrQSSi7g0y3zj}Drd%*y}osIy4`_}mbPhnv3v9NEL!qCEOn$7
zpIr<@%1s@u4OTM-i0mq;ut+}JK9SYR{G0ld$FXmsca&Qv;iV&z<UZd5!+gj%!}79Y
z`?%Zu4cyA%6%}a;k_f|8lA&0qnvJ}T_~p72X%z8YT4(n<+`82T&1<jUbP9h7Hct5L
z!mF;qNT#i!f^y4pcV{Q{PUBz}^RfX(W5Y>YJ}9&Ge{FaOGopO6<aF~V9pVzaE1h@F
z`xR`Nw)zwSlO};wy~jg~9yJ%8Ma7?m{|<dw<+|230PG5E!Lj-9U_wQ2UR7caZP_)p
zdu;;aR_0AZz>IN4AVI16MeO~7V|%a5EJjWDR=M&T!x;g9E+{nb136x3@8Uud(ywNs
z<nj=t9vnG95~MD@h#W~EQ2|n#%G4~T{5nTc%Z}uGI4oDjKMKHc|AJwlC8LvK^I~-&
zE+@dEFeBe9qpzO2O7|xcO<5&QwXUG2lO%DfI(PMH+4&LEp(4s{aQRm6=hM5{FY|on
z<w%t|I?fjupHTMXp<LN(w)#Sk%K1P9*YacD08Z;ExYH!VpU*t_<L58QhVyoUM-He{
z7^Z;L#&Pn5`AN>5Gf1Six#~e{6_er^u$B$yZ}0yt;<47HGcWPsWO^$riH{Va=k-@G
zJ>|Nj3Iokl;ks-Jz5{%jX*PUHKUQqe{gS&Yz?O<MEHk#a5_c-Terob5_QC@r$bPOx
zEk34fiYRT!>a?YCi3F+UvJ-BS!9^yIeIqA;hq^v$vTHTOM=e)qUBtySL~}qGWENFE
zhjgV(lY(4dVo&;86Dt)=@6_r~pS*fSR;x$LRbxH7PpLFjWm$r!V+!G4XQH|dIBW7N
ze%mn`PIWndPs)CcH5zWDbzrvBErmPsHBk%{3e4jd?c_%LV(NsyW{@ehP0U2UCA6#;
z)aAS{whwq+Rn+9m=#vOs`D;@VOF5m(;zXG!8|$$gEw2ff;p^ijz*pCOGvhRJ=vH+M
z|1>j^$O{drwMn;}t|&JogfSP+TkpWO0Oz8e)$g|~*Kqn`qpy~CpuJ<gOkM0S>xb>4
zx!oAD$-EW5-2NsJ+Y&9puXyDb6oL3k1j4Ph+Tcy+zEJOW!u^(tlLR8luX@SAv(PXU
zAd9fJ1$Fsx7%R~(9~Ty{@<9ZTKiw~g*6HiPDmEh<y=AI6`OEKm0F0CrxZw+=;Ceg~
z1br(haZ)xvqNob(WgD)$%^|HN)n~x3#G1FloQs?3;tkzL=K=mcnubKCKdtx~LIM)Z
ziYGAR6wQo>wX@m?*j|m?LxF@}i5+v*byf6<RNTClzf%18ksNor7W{93r;S|R6p|Cp
z+(D_LcgZyg7ilKp!(F}fe&|<s3`q9?1NQ#QcM>L!buE6`c-8zyFOb8kQcV4`f~wy5
zIfjUu@l%g=-PTcT3VmYMXk~Iw4V4{;0aeqc_p%s3z;bvZCgmx~*gxE+IV;ydfk3~d
zEVUfTcT<LfbRyzd!|=tnaDoN%bCQ8~7@_Cc@_tpDcT)+mryS$VV*BvGUC*y489Q9o
zS3P!OJpJ6wSm7H`s_yM0G&J%B%5&7%S*C_`{0GWB#s-2~SvSLa?P?xVB1}>zv^#dJ
zOtsD#vj=blNcGi!lN|VL{jIvV@C%pEGA~t+pkR&EA)=32@5)WS>pRpM?3m(4oRk>i
z=zm`*Uiv<ukwu`CYmkOC*O9ywoS(c<<S2yvfINw;&ru-i6~VW&1+hmyknj=JQmf)%
zuRLoaH?CK#y>YJTM!Fd&gswbHkkW5Rh@sSks$&U7zCXXMLA<LL%1cg@MiEyURt%@v
z`U|Id%y4fiwc+cYgsIX4$+~bt8p<#NfkJ7WsJ9a3o6{(8N=C^y%3OcOd5#-$E2LJi
zLYk%MQ)icqRFsgkvIw$t4fyyR&>i*jca#h=DNUYyro%G#S+8xR8WehfOT0^V(lC9r
z0Z5`<`9JLzxSX7KDtTAszS8Q#b+4tB2#AUx9^P+!QLRP){##b7#Qn~LFMMZii&rVH
zBlAhV4iO_#X`g`N8*y7&+rSO)CjG>&&(8dsSlQxc&ujW=^1qI4u$t>_WOD^8;W(BJ
zdR_JR++g}X-H$C`dF`mIrVY+qx^t>i7XZxf)|5WmwA}_KHBaXt=kvxmvEnPvagkaO
zStSzH%|fHxO1&_PO#kcJJb!3YrelA%{rlEWpKZl$K#pd0Cnae6P;}D9v(M!IvF(zM
z8v5c;399BLJ6c~#mzM?%C!<r$y5g#Qha6x}B4lc)s(h6uMk0In$AD1Dv~fl#l>7Tx
z*yCPbTvi)hB@6#PI3P_)cG-!Bh+2obb$mi_ESEjB&S{{P<nro~#@bNKe$y|<0{x4p
z7o|=dZ+D_Jp=(lin3eRYY&Pn8IuhaDQnOmIp@e*pZ;ysVGB9f?iK0~w!O<gM=Nz`?
z>?>6jYW37Exu>G-w#OjXC=a|`GJ`W^bei+Lq7dqLjbImoHf{>R+8*b`iR)V8`@W&^
z@*b4In1ko2!@n8In|fk?5}HfJdVB^-nzQ<g352@I<Hwp>p|nV4gg4%y>W;CRi?dH5
znK4~bJ5rwVkgRWl<|{fn21XYTr<42DW%4CpVRwI##uzHr1rq5FJ``F{9@0y@)CKhw
zhr3v(HbDQYKC{<#34)U^ZtlYbhceuV`o`&5f$|0@u=k>?xuMKS-PIM|3VG-$=91r7
zK7{;+nVGBfl20jV+F_BtO^H{Ct%~}0kuYl0o1|F&)kM(5W}4ZS(Ynz_IJ@%-UTiAW
zLQbd6(+}rWd36Xd%vsd?ecSkOSz8rEo+DK8nmLvSe)URc#knI&3_7htvHT&cBeZYF
zm9b4%BABeJRbFOUDO-V4Z-EsIA}*`?sISoTtT)`*Wt@xYpl^&7|Bc5%9No_x=WBB@
zEVMmgkV07yh7TAxS9T?_)5iQ_Z7wOUm3MN}R2u7se_%XZ3GpuHdmGSDc)pa;#C`K1
zDS5IP%1qCCtzf}(oUhSd#Rbx+!~iL(#}|d)Yns)@I1k}qKRN9kZmA?Bvm4K3b^iEm
z9L*SN3=2ti&&pB;22vJxote#dYI&TI6j4!O39gB}z*&x<;G5_cQ?ZR(-uN$?Tvx)E
z1!Hqe8{L)QKFnU7GlmB(RJ%AYt86r-BE~;%#j&RoR)!4p2YL<y!SP;W*pC>adi}7K
zJ#y+7K6IbPC}bV*>Lve2O4FrZ4*ZN>`yA`ZR@1OrjvK=xhG*3L-@WD=iT|ZUZ{1*9
z&0N?SiTtvS6Dtwmp(2RfM*9S&*9qgOEz;AuDIcW+BPK~RCd`{Zr_iE4uF9x<R)FLT
zj8n|I^+;3FK!cG@10G@ScZ09VG%hp6et5-Aj(8a?rc88q52lLX)F*lLfU9qtR<ye*
z;9X^i1KxqA0Ze*NQJOnzY_)t=#7^?7yxzSLv&K;?3PEf90c1n;hK!VR-41jXlx^}2
zyM3>(RcBZ6A^~I{+s>jDmZndL%9h6nc+02fUaJJ$R?i7#S7P*jm@Hk?r$^zo3ic;_
zL>Y6X@tSE|>xv!BE;!-KWAF0vYl8(}mKWZ=uH9Dc5KLzEN^CIn{{C^Zh%ov!#pL>!
z?ErEt(ZNz8P#i;-OIEL3t(;;W74xd<b<r4JB@?sftWjh-5E<I5V``6Mp3=;G4#Q#s
zecE*%-%;6i%~8olCI-A<_;{!A>IR%cXZ@5yus_p<RdB{%+6%GJL&;GHvjoINC7NQ&
zU|HVo2T;GeUf5Kxth6}RAw4TPUhe?<j``KtaCH<s;WIdN;!TmarEzH$Xq1+T%&Syf
za0Y!?n-wkY7_AI7t&o@~@ssEPl(I<|M?ns!+5R8h3F#W>^-2qc=@D!yHJ`4eyn<bA
z&*?{h4TY?TY4UI=Og)blw|^lxB^!@;ky(*JET}Z~akkigEfk!sfhT&YCy7zo(=JCS
z;fIBhW%aQmcHG;wY0Z!Lyxzl{Z^kLV*rV%Xk4jQYv7IX`N=#fI_KZWs=4Y3=Xe|m@
z$O$IO(=tAGyw6p|lB*8bI{%cUl%=;pv)U|A%81yFf3uV>gGR?AzqV(d=vWK}@7O#+
znhI7a_074T{s;py5_-4tFD^1!HD^a{Z8n>Kz&_`riAdvcE_24{yVxA!@091x{i0o*
zc0{<^35q#3-aWJP{Yyuad(-zSydm^@7nI5(I>bn7iquS)aK|UqvfRq(*n+0x`K0P{
zQye;Vs{4Efo2O{?R)+dosoogXQjMx!?Y~z{kkVJ=h$SNc3xk}&?`UIpQ8afK_AWIc
zzG_H+V=OccFzQ^T(F0Jb4bPbhebxt)?wnB4FO(}eO`a<FR(BlrmoM^$xa>u(Fb!A@
z*jU8Kch$*F?^C!NeAU((Oc_dpOrvv?jm6-+3h$d=h11I~fLLKcRwjem_1LWxt5A1X
zWA|A0$&$a673U^M=f#LD;>a?FcZeNU`AA`wJTNmi(9?sd0#e4&jVVP!#p0+=h8KnZ
zUDTZ{1~DIdJ6m)pXkq8L?kRB1@7rJ}+dK^izi+TyDkmD`2X^{Hd!~hv%tR|pPV|I>
zNQs78TNOrdi{x??+wMd2)FkP9)&gfo>Q_y{Ze{uQnv3JB<0jruanNI;f7X3-)JSHV
zUu`R-T;ZnXm|T;kFRen15zK>Q`vcFkdh6rI1_+K1ma>QKMata#09Y6elQ@V|%O7-_
zZE^8{LmEauzW&qVhb1i66SyOO%o(rBCGBp9^VSb)9FJSR%{d$uyW~uJ!N<F%{Q3BQ
zwwDpL#DVcd^esP-V(RC@@OzxKPpc`)#Yi#hF?nG-9SZEtRK$P-?O_b;p69qua<!Zo
zX&2*}8iEK<dkekesuL7*&|V>toBC4trg0=ftmJJd5lXFo(RWAU?(H{Mq!;1ZIV$3y
zo8=R$7f=84&b76(EzxzZDUqnuUFKY>CMkMysp$^qLnh!|UPysLpB!Bp#B{+_Okh2P
zOCw<udVQ7K&GrGNj~vF<YZ-L;_FfM4Jwnd*8iEiVLP5uWV#nxr$z#Y-M$sCbV?^}e
zcWqEVs=IB2(pps29aQv972wz~FIVsg&?hkcv4gkjg9j(=#83NLl7oeGS#l66@0mz5
zRi<F$lVpr?fOhy0c+R5y9e&_4wL!3>s#`zt1{ECVFQ93D?I_$gnMXr>9-#lbU?6f&
z;fgMYi!SMhj}UUfZmZO=sB=eM<p@I|TPDnL@zw{)uNxu^ZL8|pecPw6bmV@Gbkqeb
zOm=1v9IR%m6Qn?KDZ)u1{6)}qM~c2)VYlSeX+yVp{-lsu8)lCSao}A|9-1-Bl0vwf
z?C5oqf3$R|M_TcEIF|-d*PF1ZBT`2LF7V@1@2&>V5ruyyApaophEPCuCX~`2R#k|Y
zNv?xHn=}-T!Ge{|6gufihpe9C1h<7grHb61<GGW&Si=hHeiJyASX4WZ35B~eSe<9k
zd-RcC0=IHIEBPwNN#~78*mEn+IZ%G*>c>)%Uqbm?9;dHnM!P1}nmPIH?7#VY|AV9R
zY0$p=-zlJ%Me0s!EOC+fppk1X$d`1GYswkBP2H4Q{4RVgx|gcD*O^%4$zp)H{E)K3
zhdynbHl6&^1^bS!srBwWZO(G4iN9s=eOFO%oM_$doYAVEsKMWdt*mghiPh@(zoxFi
z=1OGio>EQSJPB`vr9ATfp2L1OT(@RGl1-~j31)8!#XK!|(d&hudczM>dSyhYYi~{L
z7eaxoiEXusipNIUZ1qvrZpoC<@`_`8EgJbsyg?w|M}-A#p~L=-_HM-7b7Amb)(avL
zqgZ?M-L}6>y7=tE#o|8@XnycED3+l-DGll-EntK+U5BI*?m*hpYKG1&*g1+qj6Gex
zNdgEiOY3?Px?xl54-m>H#oL(D$ldTbX`7klie|v6i6DCV((Lg*`);DZR{gowGVa@$
ze~xQggMDbCR7V*(eXDaH1FDTCsBlS}*l?k^#c6};-OiTGf^T}%yq&Ssd|69IP2Q>3
zn;piKSB}yp&`wja12yagRiuWB({+Ye6j~>2N=ER80mQ)Di0_Uw;`3HJ5{b^oS7tYD
zpOc^!w_1^9G6!A1$=e;488Q5Vy7}#)C5scUJgV9jX0)Z)j=KBA@TCHxPMa$hAra{9
zEu9Ob-UJFGp*)1<TF2I`3z^6334N*7erE{=(NCdumZnPxbKrd&Vs+PPma<Sebz{TS
zskDK{Cd2GuA$N)o69WeO;;$Q0rv$ClZXu5~zXSn3DW&WUap~S~&wb=nHiQN;G%XAH
zDe_A`T7z<x(gKF~ig437ia%7?uz%5|U`xRI=5@XpGqy1Pk+TlF=%wH6?+tJH9gABL
zD@%7!79pv#{p@EX1;P4_7*SpX4%AX|BjL^?GYw|UQmWmt)mz_pT-8UEQMqq$4BR4(
zhaUHiu-C~ql5dx6YGeCA4c^4Z`{9JM0zEc=s(wmI2)4vuu=H(4D@$EJtZl6VzEy9m
zs$jIYlD@*+ZDa&Lj^@2Wognl)<0)15+&_Cb)=?h;@=qq1XiABXO>=>jyyJcOfdk#1
zCwwPwjV;mf{uYgSKQ6mi@E1>OkI7*>kZx`r>I7G!nOlT}cK7)NvZZaOE!PGlId>YT
z>8M(mEBi{8`rz57+n+AX9>zm_(G39dnJEztMDiZvF2hf=F?13@Y=9N*=$c&O^++n0
zsyCiB1zD?I!fFUOk-$5AKx=Vi1@~#2;K-}Id#=6VD%A-ArK#x*ly&+Yh&$FR&PxG0
zowy8AX1N%%J*1^6i7rbqtyRmIs_yk@Assd(^N#StI<DQhgq0Iw{F+7djSbp(*>8q+
zK*$^#dVYl%jh(-)>oVWP-uB@Hj?F;WOAKvuY7#8-NiE4a+H%R)>^xH7pYpo4m{O9<
zlaZ3+tIyZ}ajw)zK6;qG!Rc1_EgOJ8&2r-e-m2=~JD**yu@p0;%Oe>hK=x3@AAW#$
zy<b{5A%+wWJ0ovul!sci?DprTwU_BednS#ixQAkJAIF(Ks>p@?4Ngl#0k;tPpHm!K
z;Sl0g97~hrwVy<$r#JKR#2`f*o>S>orD-jPtXnK@&2oYKTvKzV0_RP3u->2|X{hgJ
z=Sc020`o<i)JwPW7Wg$(CKxrtn=3R-df&=*(e0CjpKZws+B1ir1C(@$!NGqDlq^GE
z8Y@)xUvTmQP>!+tt_r_H<3P0r{NhaHCqAk~tBXA`a(@vvZ3a$EqRk8^3I;?U;VZq{
z66naH334(^gRPu6#`F}#WL1X0h=YK<tgutn@oI+A2hk0v71Eb`AUKjvwNk-!-!T!v
zWeQ$U(dFsW8_LSb1-Egu|I+*EoOO#(p!eUa`j*$88h>SBiE?x*=fIYM`1;a1E(0<O
zg;)h4Dz%mA)eghogAU84uic{^Q33JTFx_Q=L4|K<8#EQdVWoke{34kW#w@<+o|+)?
zkGew&S!FP%O<HBiX23mH!ijnJNKb_(aM<bwt*L=s0;e9%pa1s}W{c6Y^k7ET`F$#i
z3Q#>pq`OSnu|e;oIr(hc%Id4A*sD{=1M_=yWAyWXpjiKuy+lR|*TM*{onn@_2Cj9p
zCW{p*|G19jo$92fiY6jaM%|@3E{yvi6G*04GJMw2e3+vUu~>8|*PZ@473-(z9>uq{
zeku~~^${qdnzOU!j2|;%#I?q?$(9qav09Ebu=-11Q<X1<BmvK`&3tf2ZoAts<d6CW
z4@L8EU1w<`2TV1~<Y~<83^tlKpU8SipRGQgIvN%3F122(t2{Jmd?Ii9@UhQS&BeO#
zDN10Ei1LN~$gM(>zrt6C5+KUST=z5-CRqLo8N!UzGA}?`COu^oN{XZ6ke^6nAR2;-
zAIj9>`ZPags&zfH6y|E#MyfvQfF}6$$`RW%TVUowX71RiCEW)hzY;JkM_L+}06A2x
zsmwbSKKv&x@DEBf^P83#!#4(;0&mj;jRh+1ZK<Phb=I-VmZ6JgL+Yya`8cLX8m%J+
z9Zjt-NaV6o;@)YrYnxLEIUrECy{s<8ytnncM1G>rM_J(ev>@#3#Hsm~K;!>^^8cY5
z0@4(AJR*rEgG>A`em*x2{*Ji}I}4nyWAMvVHU@DHmEyZYbPLSHccyi%_$*@u4v6#s
z09{})FCp#!Est+(??Zcl;@>k@fk(&t_^E~~7ue^s4*pGXciY<eGRf^fPzsw#<^lFl
z--Jjn-{qhFWV$0hq|6Ppx&43T<Y%$>x~!t>KTxIOWw(ea6rh3Pp44vezp4+rvqt<P
zeet#rNgB$xfv2#G&wfS9>p<AUH|oQKpgnjEzxDr7th)dD-*14UzyD`Hf<ipi2(%P5
zlh-&*2{ywPJ`Hnv1<CsP*GBxcqtr2b<H?f=3LLCj)`c$oaZ;8mX7Ws|t$xPAOMwD=
z;*HDyfughGW8fTpI8Y_Q<FH7Zv=VpgkwPm)EQd|3?V^s3PP1!CvY+rFaTh$Un?$c#
zUPMstdj-GDc6^h3Wc2pYm#PV8KOe4?eF`2`KGtKiDcjnxShGP&Ig9IBb4%IfB3O*B
zVYzEtEv&l+cTPYCRi>!rta`p%g~j~HBoN2umfzt=&ufO2Vfdj6PpLXemI;$6mYLwe
z{4<YX2J2;_p+C>Dpdp7P^bbCarQF8%cDBy|kZ939qQSERoLDgo?UTH_dV3I~E{gQ%
zgGTym_@CGEg}Dt6FxHcp-KaPQ7`R!Oad08uV}s4L$OZNvY}Dn4OJ?EehPOLcTZ^P5
zC!+o)EQCm!I>$gP0Q?CcQ5IeWv(+^?`BI^*#kP<yKd(GwYmd#txFGPrVhX{f5t%`A
zw@=#8saY;rY_{V4Ngb(E+X{9er2{|CLiBY!vhohUW>VC}51aLVol~nYS<35WuOrRY
zI5Oj2-E_um=RWjx-~gZ1{dQ~Y>i>7rb$834gpgp;_^$U{OKnHHH;}4MNs~S6ESy<i
z&_(QqU5mo}?)7QCi<hrEJ>IUPuIf;`Eqq;A@+)naT8#^TD||Wa-bF|z=ws7<J!abU
zLstBvsK3yj9}&S}4KGcV5w{W=mqHS&Be=-~j|l<zR<a|z#$l$wo`utqEq#HdQE`?=
z<;wnZ!V<`eYMz)z)^CM1&>;=qN>VFx;RH?<;e(hq#}-fgE+4*^@Q0~!1b|?uRj=(w
zeVn{Wgn}GskOA>Ib8>6V4n4~p_IvzJnA76V1nz}8d&Cjt9!tMSI-4&%E_eIw(2+cx
zB?Ky_NN2$@ZQ+L(CDsb%P`OvacM7R4I)Hj7o2H)G1v%N3y-bI%TGVAo<BjAYq8Go6
zr<Mo?rk&81t%Vx1aAYxza&VKAe9ul8`wmyDNPG2ILy$gr{S)WNd0pGl9xA%Ut1u<N
zXGXssl4bEC^7XJtiCqvTosHNj&air~eH3OiZhHK!VD*O2I>)+8K{|d33#+YxOAFB~
zhNlv%1*)6;TIFml?a;oIsuv9{-f!|`nc^{=lENA`B&Yv@N>VxIf0>}mKmV<TS0^6x
zBUS7?IX8EzEW%2*KEN@o`~E&PGoo%z(}j@uH>Z`X7iVp&wzLLou7a>u3rB}@*;sD<
zP!%YUnzno@knxud1KN*kT6i{jzBcc+t~DlOtXmP~``=%=uwb4bnW5Zi>QBH`xu!y$
zb&<dmFRhBY+6lW~X;){<P<a#taBRt$`ExS3OZa*%Df#sX(9x86$TPedtU<IFV!gie
z%XZWD>UrX7z58k$i=ksS$)U0eXDuUGgAZ1>R0KkH>Rx)&8F5m>CQ`}j?Jusja-^zF
zD#3>&EZ1{lWq2-#i>1#*B@^j6oh1C$r|t{SP=8_V)MLSo(=icLGIN!o+Q}+7cUl~~
z%7dTb#1vPE_sY8YN78@4xcWQe(hno{k0QJCzksG=l+C)n=I;*|dW2RUTNwTXOQ{(M
zO2!y-jWzO{n}Rj;CjUy<`9j1S-{en&u}n16Ile6K02SQlB~n~p^WLd1yMZ0I+(=F>
zv-pXw5q8t8*v_G;UuY?g;huCps}TZps|4RLB-isF>h1odz0)JD6;alD7uuwMpF5@W
z9h@+{{TGRzwS1=9NCcwqfFL)&M)2Ic@p;VSr{Pq!_vWk0g>$}mk09NW9iV-^9}dD_
z*AqO8*?)kEZtL*Ez25dzqg_yvBmV3~{VuR^Qki>Az~CfLB+llu8DXF1kE^Fr1^ZOj
zUk_<Q5o)ukNoib60*L#VgD_TgeO_{FZXXg_gM8kbudn1Y_<ShMgjonr4EZBlfhCop
z3zwK*z7Q}$BlFQ7qZ4HA<j!mg?6K5=Yc30#&=Tqvw4|^RzjN}(Ic#bMDR9H!EwYSS
zTWYY4p-XM|mcbm^8rQEf$*55hIUnHRycE6#9U5q=l$A=$#8ieII-9gD!cgnMX7o;1
zsan?8!T8H#2Y+pDINogm;D^JxmL6<3RC=p@rt95I6XyG*>_V57yhazb*MELS%|H1(
z3jHW;4k(_BNlh-lq79f9wz6IBW)t7A#m#)Sd3oxaUIIC~-&o>_bijM6u?QQ0X3Wmn
z0<<gde^MC+k6TD4@zUzc^buI8cnxsK)bWQcb6<U~f=QxKogoSVo}uS-6-q&m2FcJ{
zTrv+wTp+7>2CKToUmabEgtQ$h@MEWNOeHOd*?)*8G6o`TP9gD?pp7}6!r$R%)VU{R
z#hquy8A@6mm3F4o`D=ZIg8Ec-LZr3|ii#3?Uy0I?<Wr)nZ`6jbF_rkTcEo(!x>0z_
zhD$HD<n_oA_S5*|*+Iy4O25=LXjx#Kj16SM@C_ahLhlpOBJ5761bCPmD&yPCLz)|F
z#GnJ2@#VJRe<-ceacP(Mx~HG1r7VWaQR^0K{e|{dMcY6|z9V#cPB5P7u<mBQh?)r|
z6}8W}0&03Ur}q_U{e;Fgq)s57bln%HURX)dq_ZvewXNq*oHUM}V2v{+z4@(+IaJF~
z3an_!IngKR{ofdSi?Fud@LiWeX@LU8-QC@_KyjDg!94_bEfjZmcLD?t5TsDtCAbzS
zZiNB`TKH}DWS{@w?CYHAx-walmG}GJ=ech_;rAz~Y{|I!@zg)~1O5FrRq3^uU7mHH
zaoE9-NoRZQV0%x=O#X;I-Mu5S0LfmC+?9+?oLRk%e?uJ743sXK*{kU^%+X)N$iKcT
zHyEX)AX$A=qJd_bG%%#Bgng2^*83k)&v@`N>r(8kNSQzYb2k7ZRXT<@fk|V1Sy?1u
zF>t9xP92;GE*N8n<|WvDJh^Cw2@k5B6bG&_ebS5a-nD%n5bqPQRSZ(^&A|)SQMnPo
za%Go%tB$9Y^1H-QB$`R%mc~JLK7Xv243vqlx&aHeuaz0Ah+}2!KjIh*Uw%`q4E>D%
zcHm!L1ijT|lr|qtVrFvE){s>~c|kDOhF6w#G%Huqggb9=Ex|%@-4i0|;_tzkYn{QH
zgUC0Y%Oe>Hb{S(xzn=YK<>A9PXJjtgLlq)7<D!npbwBy*1U8)u1-&P{-o8Bup1a29
zzXj#}biUbOZ7+?=rTYi{Ow|b)#;lJ$92gVTG^#Jf@0gopE#nSB-T+nk@s-pv-@?9%
zcX}K#e1Hwn*0UO-1v_;aY8`5UU<t?}Yduqyk#zTL_R7MkPB9HQ(3Y{%Y_uaSB1%$c
z-bN-)({x5dYzF~n8zZZ}kE@=tBo>x5xMgWNElkoT*7wVT@qnGq`Jl@<Hm9^Tjq*+m
zcmgTe{o~xxt+e0=A_wF1#{+9YOi63mfh2TH4g5<LbbhgLyla&f4Ha=Qku@)YrSjfX
z&<x%)9W6CjjE4$J5bKF;m(vEwGhS+K4yaF>eQJH;Bx;Y*@yn_oVW`T}6alE~%vVhu
zZQg2o)PcV{0#P?FyH<-lc_Y3F<NCF>uW3&L&Jy?V8QF*r7t>sE^7YnSTOf^PaC^JI
zmd>%pKyg1rifi(vOI)1{xh`%8>60D#{PJBmF4LG7ugY%|GpnGt&hirZov(p)1`dd(
zkosP8r}MR?Msx2u&KKT5=~6NMf-0QG9C9NagSV1`{>I+NUegXZ_}I3VMPunJB`lf}
z3v{A;;9GZi(KOB<&(o65jAQqkPbODZ(~fs_VSyMctYX7KCqzP0*Mdt{G(ancL|eLD
zp^Cqqaf&h>CZ`Em#&rdbsoe{mP4cQId)ER<iq3wqK9JaPGzh|Xt!UW@xZtuDZ#VAR
zn$VDO56<|rWa<dZ-$&)mG?2ws>iXDFaTyCxRh)5J{j=CZ*PxZ#6;av1YtdPL8cu6)
z@$0w>-I0XoKP0{+UtcJp<~9d)IsC05#DRrbRm?-kiUr>5RcTmWxOU?Fk=Z6G=Gmk6
z#Z@yhEhe-m?0dc=6u2*bl9(Jn9AKmI*`*!N(IQ=iODq&8KJMgNLd(R2Mv%3X<d2ZN
zORe+1(oQ`}p30!*-cx0^$j(Lrwfsg_0gvhvJl%J`ditmJ(dJL5bPL&^+Pi<3=;^2#
z>P<Y}#R;u3_yD$r5aL19p3i2H&eL!m-iO@9-2xJgUxHixDhlS6J_)+5R?S~5Pw%z%
z0$Rx}C591chs_i5PSbnXytEmF^Xd^`jLx2*C%Dv?L{>}zf(#I!n3_1xhGJ^VHJ)<@
zpcUq_QJdJlVfxp-*o8j<oUl*Tx$}T@WArTVSNK2d!%uaBct0WWWAC{|ox!LJn_(6p
zEgr$5kiXhT?chehq**bofwEGVXmS>a{v$gxVQa-J=A`Ta*wNh~>#8*OmLk@`akWQx
zsbF&78#|L&D~eiTTb@rQ6v}Ixh)ag}ckehisVNZn2A@>m{vDAUFuhupf3p48PMK?s
z*t;Fvj>3&1N#{AS{AT#E)P4tC&ok;O!qs1FZ-xb<xT!V|N(WX<!?p5Tw$rsGHvcf`
zN|m&#PId;N4+_OJ(3N;x3o7-;`n@svE*88>?1yTK8(@%iI+C?|Q7!$+rQ}StQPD!~
zG6r|!hobaj^>kLcd>zQ=tj!;&(yeMgC7k%u6A!g(fLp+Ae7+pU1r(q#va+QRh^0`i
z)&Q2=BP%QoyF$v6-O9APRfLv=RsRHkGg;8&NYMP#7%Np>{k1IlbpCOpgg&XQq{2nS
zebjcO$*s%=ljv=_GeTAo=cE^aX^WMi{`t?QRW4Rm_)6iW(o5(Kc-{MTPv^<-3h^Ap
zVm?*rw`s2VJ8s#z2<1P@tcM&Qys{8fL~G1n<)o_iP8a*rG;>j-bQ!NTOq{cjE2n!?
zC&2<vu8q8av<|v_pQ$)AP932QoHcC@g5;$6^Kf|IL|(@lLAEwCj{YYdR0h+vr5B0E
z{M7k{;WwVYUxXggVSC(JEAg3B1XZg+_0Ucl=LHYa^`{hxX}?LmTrlhcPcNbJiVt{T
zqb8B@_^vk`+aDiNclxn~9b>dK4kr|7L@>`vn8U4+5xa^>zwo(DWcbOc2BF{0NdY@%
z*>F)hQ`IeG2zVKeKXl1D{2*KXu1VAn`=-{4LnAM?`vk=?_k{E*zF<~``YSfimzGVe
zJ`kieMmWVjRsi2)S4rxd<G@|w1-HN3FH{sOZPQ}Q#Y_PMUSq)XxSR1jid>zU-GFrj
z!L_G&n9xw#uS<QuQVQ7{$DxDPig}H^P%uVxPvnQ|FM_g~q-bigy|`byRJzH2ADbW-
zphbn!*1|u9HNgn1MgFKXEeQH>kXJ%BAX&PIXjHXRi6I=_ZG3ULlyiM?L&At8MKQb;
zwj)uDo8HIHR)h0{W{G}mgCLbA?L~4mfj_1_inh4l3*B%I>&h;5;-!a#2@Ia!zja(#
z9CjBT^=u1eHS}6+WiN49@FZUgI{pk#^WdEg1JHP#f<+ai*<ndqzSZo;i+`x6y(qwc
zeq@jCFm)<_u!7Vsmo=U$34PBVJ!#>Zr=_NIHB#n*w@r4v$zo_#%Z~Pnp8vpB4%SDf
zYpp}$sokB$_=h#-Y=?&aMvZPS0Hdhj*k4?uFVl`hSCsAr(|<tgbe0M>GLIKqn`k8N
z4rkltCW4{vDtRp=`>U++r=FDMvsa4JR!hrp*v=TBf?`8t4qm*Ozv3iU(T$IrFs0`z
z8MZofjykWE47|jtL6@@*5l$Y)@s0q1l$$8T?lja|&!#+S)n~?}>u9n-g@SG{LtM`x
zkq>YO_?mO*`8pzIFYWuB)U4U|`1Bh~n2=8Jm<b+t4_SE)47aM03~ezV{L2=f_--Mw
zLTQ|bJBz)DPf{=!`8)mHV0_tHJP|1<bHTvt)$+9&mtB`Hr}V3dU{PAHBvuRgFQ5fs
zCRz{Ik@+@~#OxOKZ9&-Puh0h<(H^)H8<YwRGj{AQl*8myNz;#Ms@@Cnswyqu#+J%L
zNqwwFd&c<py)Qi%v&bB4LEW^0>cmU(e-l&0K^-rn|C2u=x*oKo%X^G>sZ{t)0sFY&
zBkGyX@29U7>|@$#_JRYJXRDBBdKu&&GLH;vYJG_ynrY(KW-A7`%I5|PVPH>+m8b;l
zd37j$`|Lhk8uE!>oa<wG1O4Bzl%DOaGUaNN(+?P4Bcn4Y841NH+hiJ8<)cuOv%Yoa
zWu!X!TW2kk5BxEl+m<zdUCTsoR~oR6y80G<txdnQY$?lq6H^hu^C4^lAu(6k;J2z(
z=enG%*Bi69W;P}j!yL^bs;Tl3cbo#^-vD=?8kKfX&*jiHRjb^kmK#|_>%s?yD#vef
zF17PhvQwVqZ=gC>MYwXI^n!B$?Lf*fuV9@i@f@>x;wwJSP*K~oHgZ}z??7tbmc1=G
z2Sc^lmd7>_s=E{;?}wfsP{PRQGYy2;o+moaDe>Ck8h?EThsey&5$bNouHT-dCVC>~
z$%T^Q+4Ui)dGcK8iZqh{I>eqObn9*vh&P)lwhAF0D@6a)v`_`<_DCo*)LteuQI)Dx
za@2s$z&vx(P9a8EeR-}zADW$}+tM>#qu4~<vIveLH%a?4T>WS#FXlg=px^RnI@o*J
zjP(W!M181pvuojEWP2>cZJPem%PG``cz#lIQC5n|MhZ!!WhWC(wMS!&nF{Q5zU$>Y
z+7yRVPFiSgK65_e``f8i^eNQ#d^T|J`nP}?PM#6YTK2K$oZ~EtAT`*Qu!{dVmbIR6
zs?<fP1KNzYQ*E$Ue!lV)ce095j>DF}y{#h;{!s7;H{Sqf3~~I5JpS5Y*CQa^tvbUP
z+OVHfR7iOfY>qC7)mgM5h}K`oXZSZ=-ruX9xoT7svm}`r^a-FKT$HdW8H?9~X$BqC
z%kSI)-k5U(BNa@!y5<JISJr9|;8Vx;3!ZuZ^GC|UFr|47-7C+6?ikAC_-cEj0`#^b
zbXreZb%Sqq<g*pN-<Y`Revv49jF$831uNWC%a~>A={3quc(k`VrMObN8ZB)eM60YY
z!#-~<M+67A=GGEjR4T4o>Dt9MCV*c5cFvPOVIW;^Sm(VTox6QQQQ2x#^b!S)Q^PMk
z$Jm^iYhyP$i9?vUKwpbA^ikUU-1qTu>x>leiLU$I728_^au%+{8yc4mlePJVS6bNn
zh%tqC16@C9Tdqvn0;A{(E^+u1O5rTKr0+F;C-N5F&)8r*LesixbF8I);=|9=b3&4<
zlK*)bw*{7Ul1@sEN*!zjMI@a;pVotn%11<vzfs33k8>R>9h&G#-sM{$X@qr_ovr^J
zU-2}5$7FhB<sQhD*jZy%BHU9Csfo^2yGlDKgP50A&RUm$%u{Be(>N5h)sFXrh<KLe
z9HV19^GNX4{2SUV97LI^mXtGIg9T51+WyBSK5eWa1dqq`!3_*vs%W_~XX%fUB@#49
zotaMx?v^Ys=qxMV$w;uLHb|}v+>8lJlr=K``GXcj)pQiL?VfR_zkfKi2gGyJ2{!4@
zpp6e3$~m;QqPHsUGGg%YI7aU<0{qgul5Zmp!gs(%pGm+&8pp$SIk&fdx?Zgqf^*cJ
zp?5PJ?pd21)VJvh!}<NTn9*Dl9(FRnb&V)gC-0k+ZM`2k^h{f36tbJXEA6cupNz<e
zDtjBCF4Q!fMroefWe1-o7qy9($4yZ$OCopJPadK_{jhTD^A`BC-9(8z5zHk5ebSdw
z_;oSZt(kwbcLG=0&z139W0aSyt957!R~o<fAa8oS^?l@Mmm5)jbHtaXDOnysKK_uo
zg@rXo2#yy(1^Nsh5ZMCFKddrG|Kcb5;YGn=H&fMG5FF$W$u&{}7rS;lKLkqGKJLj?
ztDso)#Ef$rCZ-#NGp~hZ)Hz%`mZ=<iEVH7$QG%eCzVC&9JjmHS*S|8Us2&AydQS9;
zyXXyC#g5++XH!+Sq0p**k1_hq(CBEFl3aZ@P1TyM$z;bjXsHvAJDx;KOI-i=g!4tH
zp@62W*Jz)JJ*(UvNldp#O^l7cH?#e;YH9UC&cWO3y{0As>6dO!*=K`_*ZR_8c$D&&
z-(&4R^Ax{5$?1==6;~n7e^~PGM?hBI-YEGOXbjN(k$l!!<}>{d2??XdZo%Bp{39;i
zrtI{BqJjy}=L|`;dKgp>1ohvkDSh-YDY1LA<!@BOLFJ1NV@3NwgeD9P3RAkhWArxo
zJz70@r+Ry+5Ls@b$!8jy(T#TE)tvRW)8zsZgddzfw;WH79nsZOA>P&Xx`yzmsk^ww
z#oj(a&)1?@PH3yb9ARr=@$>VG0{<-8QUBiS{gE!KZ;xvoGE4AS;mhoG2I4*Vv$|sR
z_KL&z*A#P*=f6Lnal+sUDbH-{)wDrJ-a{LXZ-moYqKm{+!ok831U3<6(!#JG?b0T#
zjpJgxOCalH((jTEJUM}jN=KM4Wgk|H%f@Q7PDCR<RqW-Eh*LQv1U`bPp_4o6dW+j9
z2dO-PM;SFbv(z2YQe(@#wg`f60KI+US`;LGL6UETMs&Zke6_#+j+dmd$(yP&drqVN
z1h+}!=?Yi@<21iN&(ke^?9Y{^>;;T}y{Fdo$;p;)PHG8YA+f-+bh05UWfHKimV#v9
zxmHx70b=qtFpY#k_|P5FU}p@*9TdHS5hdIaPe26bL9W%JVigSa;H|c%Mx4RFU%r5R
z4FRMhJOx6;bR{)mTTDvO9|y1dMEi1P_NS{l!Vm_!GLwxL1~h-{tcGN6Y){%I6<0#=
zNqY8q)y`Mr^nPm`Pj%)t6-Gp^YxV>Ofze+5l3PBI^>VU`9hwdUWr(Cx_{am@uauTI
zS6r7p%kKv#)odDA$xTnY(Anz}@Uw>W5JES3N__6PWLJ6=G)e0x%Gy7z)cTc1b4l^>
zkeizAz_73(AMY5TLrM~}&1_3jDz845!?@RSVAL^8dqnsVEC`P99{s=6j;~i0KY0iH
z5x9aU6*Y~k=q#<jRtlMJic^=<*?k<Nqc@r)Q63((XAw4&vBxM&@~q0YHa((#LXHwP
zkeFY7bR(;UV(U8S{jeXBnPh-WR@C&&o4#$!cy}V=4$nJ))CNLa3!7i+|Azjd_&>|6
z|Bwdc5a~48>b0O-t5GO>6PZG<-leOIQ=``NdFz7rO8VDG%8wrwpXjjxMmy7;TbHqI
zE(dDhs*)^z?Q{#+Xc<Zr=MYD;BMk@#h^!Qqj{dPQa>}8gGc`ymnP*!?a2eidbs>nW
zOR}T3|AOHhUY*oj|0%F7Yln!kIjSx#Q$~SWrv<es68k*1V~WHX1)t|L!IKc~RJij0
z#>MY4M0c<=7k*<6#acyn{upCA_jRS#O}oiPSso;6kiN>0d28bTnb|88pXWa$tCCT1
zmSLa#lQLtb#@>P>lJEZxSF#?LI;7y~mO`iTvKb9&)rD%q<D=?|s_+JUvPIsha?+Tn
zq%`+#&dm8qn~agwElJOa{0?OS92rSmnYUg`4BGOX?q!Y)ML8><5t{1miQXf;3D#6o
z0ge74a{l$kMBeK5TgXrJq>+k$KGejq^Wr@hPyQR}a%8XQZN<GA3*u~on{amYHV)o{
zrHmE+Dh=%VDeJJFFyb5O?eCV7G%~Y1e$KCgoI1?MgBNGuj<Cm(zA0<bd+WK`Pe@-j
zK6zg+sN2>(U*Zy3>Q>9({c3(ocdvBL?l?Y5`kpsBPuXvH>!7Z^ZN>R=OCqrEPx&v9
zMYsbnpgU7DkmvX-ibp#AoEOku>dQ&Oj8C|VhKGuW;6?&#g{K00ms=A5ujam&X?|Qu
z^1f5W*SLPRMOp26Tz*TMQ~GjuP1eK6iEGOTP{CR8EHqRolv_kkLAL&Ydy?qev8R|s
zt=n;}y=<9xmJ`WYVJnKF@dX=o7oHE#sgtl{0f;R>XxDXWM=i9U+y^m4PN?tm;l0kl
zP;Np-^w6fRqvE_ss)`V}AgERU(p0gw#n3IB?LgYs`J}O9?bOGy#ybJO0{!FxIThw$
zTEj6_9`^t<lo{6}uo=k{$wFp-^?3ZkJ9+gK&>6_=kxsBX7R3Dix`2h~)L=tw6u6lf
z)_Uvunl9T4{xAx9LO3?Bqh?K^bF%24v>VMNZT=hiTak5A0$cz86_HFR`xlW~!oJ@;
zEx6#pWk!ylfi{Qt98aaJ?5Hbmri;^pE63)%Uhd)W6HtoxkmSx<mpG^C8$(~nw)!6u
z?dPqx;`^CYxJ#PUDn9cKQNmQ8d`ah40?C!4PmYn9Zhre_vE7Gpu_sp%Z|-PCT5k#~
zi<-hWq$JLy=~DHFi{hz2E_Y4!I(ny*4`^iUVh<6JmSb=?KXk1oPBhS-@`PniADSFy
z$ht2y^1q5*D$<_(T$(wKf#-n?pi$q<EHw^(g9Y7@c=jn`LOe-%WhER*@9q=yfEyvl
z!}<bt*o3vciha;UVe|Qs?~8^qSmBF_pUm|$>we)+(}wMM|M=but&poSyV`M#dA;@V
zdpTMCQgelqNJ6${P8(lP;{@BjxDG?GxWhP#!uGd^mtS@nA?O~OOo!)f{bK<p?=9}+
zgc=x3R}FOXR;|td4HB1^5kHN$PJowIg89!z-`*WgjZ9f9KVZB<qWqDgq0Tl7?*p47
z$8EULZKWd;=wlODg(5*jbqe_tK@+61^530KU~xw)iR3Ko0TO&eaIw{iZznt>#Hbem
zzEbU5<ECB|UXivx%_itRVSK~Q%ohRX3t2446%(Hbr1$?V5Qz7V?D1dzr`vQ+{V8I*
z$n`BY(#Ymz{wh@&Nm&4|*qqDs7oQ_F!D4HYAzd$=U?|*q5Q}hSqiX%CnEcEwwKr3A
zePQwL`~IYf?+8&dXIRN!4drH^u0mgDBekhP_ilah`t?BpvUU5<)U?cr`NLN?WM_?y
z|9rS68bD0g+vik1&F{tZ?j`=M*6$sE&A-mKHcy$0P|i-B9M$~sZUQsGi)I?kvlyx$
z+h$$o)9sSw@Kn{EQxhQTuu;%(z6L~>%`*3%{e;~`Xo#n-7-INnJW<f3u<N=fE6Gny
zC{c^-v95k7)9NF}y8&*WUrEOo2{YENj?-R>B&W(HdJDK&CX*EQ5_jmX#dTBy|7;l3
z&PoGCwXA`+4}$tU$&wbZOd!cgGwV4qozsmP#rt2ADRt?H#5`IQE*s@U(>6W~17qEX
z*~%_S3l40u2-#A73q-fpbXa>0#4C!%HwcKC)bj~%QMrd~WB|KCvNwELVVQ}j<{Yu4
zLu|*#^{r<jaFY{seSbO49398y;`cz`nVjK7<{vkHu#h#|AO9i2ZA|yNd0RD(te}h<
zUFv@40t0&We-8_N3WO-23SWbqwDxpy{*F1e_U0W4WpGkE{eI3?CwLWm2E$vbj;es4
zjcJVK@o}g*4T!xX4yG+K<52Ft473^)W5MAag4uSLnn!|L>7Rc$CP71_8@r|`R9$gQ
zcbt<{?gg{GULvN?H)6lqM>^g#^6EJZjGOgFm42qfuE=)L>Cb%2P_{8Fv|>-*_$?kZ
z+saK`DkJ0?rF`1lp6fI{BN{L8txhAdk)P9)lkMs#n+Bdv<^Zcv07q6+pRd{I%mc17
z?s=SaSS0|0g8v~UQTyidk}%oQ+%|W`6x&bdMjxLF0y8tlm6`?c8Fl2IovN;@V)spt
zOhM_YiaB&+=W#Z!aafg~tVH#uWm-;ZR)2{`rGwehA4cA~evR2bKm;b*8VmS6kuG3x
z#bJoZeQrh6KW-jn?4z9jhxGPE_CTGk(`vl8{&XZ{3mWM(E>nFE+_9QyBI*iIV{md`
zfEG4~$FhZ6(q=M-UQ7tCXsCtmU$bKqSHr8n&!(dPX01|WI%GCDcsA0NNHEf*PIUr^
ziiOFKW4c;SxS~DVv_Mq9%@^g)7r|+(lSWOE<!A+2j>6%0D++>c?l#%t@y!OF6MuzO
zX6*d=S?j5lAb*X3>P^tZF@t%Q9u;d=M#{_iK?Aj*@h^<l`*ZLE3Z$o1b7Y2g828dr
zH%)q1XKL<)oeiF4B7^yEoF>9+OOVRe+;c}$Z9nx;voRpUV8X0$MI_l2?YpAayn)B;
z2mV$K8y7Ly1Gee2Q;BQ(7NYhvWpgmcE25;FAA64(Y?E=%u7jwRt_zq;yI?pMd-=&r
z%Gw8^`h!WFP2O~fiMXkrwm~ox9z>DN$mDB382#a+KNe0)Nzf;ahL;71{Q5KPfvaXe
zaQ5PRW7naHC{sA3o90~vR3;9mUMgI!hRKSE%43GF<9=3k_%7!P@>N!pTG0&D1KcS$
zU3rW)ZHrMnV*bwgKAR%I!bDxVb*m?A+iN+6Lit9T<T1jU24?Xfvgn<F$QU(MsV-Ax
zhM(}PP*hvQanF~?WC<skv)&odZ4&LdGCjHY{gf+VPXM?)PAkWHt6<vDo{27WvBf5Q
zhtEpmY8L?zYp|kGuZveItm*lI$dRm^M)bbt**cp2$H?Tb^cIGH?77#|>{0|n?eZGL
z8DI=|jDDZ4l*YaEozjEAb)aqLNo~{46-j};C;$JDP|K7|Y@$|@KT_atD&6*Es{N3%
zVq!9Hpl8s+S>V?1(rT`EYG@e+;u(;$&J1sVDzE>ldQ~i;=yw34r#bhC$G}z!IPwhj
zo*2AWkD!emt2nqc4Aa)<r0y(qIk|-Nq{++(O;#J%{)hDO{|PnxUoqExEqUWr5dWF3
z38xcCp1l}2@pi_0gLFl7CD^?n^p-!_wSGKl`cuYmM`l{$R0Kyt&}IO>bsDsciNtn;
zuuxb-|DA`V9aQH}Q>%f4OVPuUy3h)Bn#FFmhWCzSFJB`GfXJC!(ztw3_TKQVXNw|u
zugXH>i?dxg|Jq{nDLHQJGmvHSHRpUn;SeXHQG8fJ86jIX0LnrU*aGH`bQOV3m$c?&
z#hitS*`5a&rYtgakMA4Jt@qEffR(>7{+{iNmz+S3yPOUPHibO4)QM!ie{h7vK*Pr`
zTAa!tf!1K3*H;01ChSYi>geKe8Gat+ciGdi(mtJD<#U>kHxFJ+NME{FeoNkJv$0+_
zagnI2EbZc%=>2cT2qOyvM@ogluX11J@i^ArF*%3k!jeyzbH7l;M9Cv-9&|<V+u8E{
zc!w^_RUiJwDkQd|D2^M}-Po50f}Xin<yAu`E}*<E`A)CnFX?QD$O_5mGw&l2fI&xH
zQT((#5?@nY7^sdvPpM}T?4FppqnEy7YVYde4()vXU9xWKHNF-DwtQ9FS4LZMMryXs
zT|CTvJ4AGW^OEgiOrC<2a`}|7I|OtZ9|8Ciymh-Fv179?baFY%`p7B=$<Ff;#EYrL
z<hWMAyU5*KC?!vF@^Jwh4CmEl`7c=W%tP3g*6Tekh-L)tV0fCJulxSi_2DCcye)Cy
z!VFz!P(t8FEiAa(Ub^@d#oAaYg{NG7t+!?yLX~%NO}IlcGEsZEPxbVAhzj(XJ(_J@
zFsVs%at<#hr0hTd@8wNT;6~aU7YPS~d};Zhi_uo8%eB#G{$iD$RP8d%RmbkTLdi9P
z4L)^9Af$ZQz+9|iLtz{Q+h8p?OB5XOEZC<i>Z)mgPb`AT(%6+cp&#Wna4h0u(PN@c
zd-d$}wS{WA*(9E!`L2cTtx;U~qa9v)D?nXMbzOv-HBbOy3aWzdzvQd{-4j3wp^v>m
z0y^ph*Ra3)pWBusB@cwx<c0otjR^k9&<(nPg}x5p1xLS+Zp6JAUbtvmFn=<ciw2!k
z1fVq~stelM7S_XKs`7=<uBv8;cSPnnJrk~8`CI{s1z*#Wb0c$;?b$!_5?uErnAV%d
zdu=O@D~$1L+a;Ip2$;xg8*%<o*ZVWFek688dIx_{mf)z$V<=lin6kqiZPn8>y?K*E
z!T7J9EhvAn9X~9%_-?k+V4k4OD2O?7c}Y?b;LMoVltrjZGIDCk0WJVt%mi=ROU;@D
z=7FkvVZIw%D`bB+UP<Bz*N#?_`-@lh09WW)u?a(qV|~`cA76E#ptj`eY&f@}eqHD@
z`X5p?Rc<1kg4oZ@DWZesU+9w~4Prk)ib}&ZYBTHx<kI>d6dQG2v*FBH4*;O<%**}i
z2w;MxB1_-Ec6q|_xCmep1cJV{8uqDif$a#AnYH^@Tb-oiwT`-GL=~j^T3{tK3R<-3
z1TDJfzhs39&9*v+1O<jNl#1Hi@^mheGgjD*DOHku9~d0%SlMxV(J@x`nWA5#Z9Lin
zWFXYt|3fm}NAQxp<}vWUcM)u{Q}K|3kO^@5l;Z)#QrZO^6u(cHm0NAL<TGbt!4V4x
z@clg~;fOl>f2=FU|F0bNi|?D)z9Sw-Cn!bS&;nujN*yX^S?*ywZm&2nX|V+7{pmTu
zxId{lP&s!6)E4v`m$y@<ae`(4aAAL&sP+ksE?4;5RWjcSU~O^lRe)SqJIz9M!V?=J
zI(v7Qa$Z0heoqRlZEJ~}s1(h~VKQ72SlJ2ATBz8Id0gwr#>XzZA(b}?R-Y{R56Nsz
zaoNHZ`xWGxguA#HTn6Y><1(|T9GmWfQg8~)`6vZHajbzMtB)$W+#}%BmeP=%lc)SL
zHUEX=BYLwjp;|Wm>v)~4AKbJ?S-eep0qJ9D!Wxs2k*jeo7&2A53AR;9h$Sw{3Wt|n
zJp80KfAYrj?x$arKm8u~JF?yjdD$u|mr{OIHzx^g7j%%F$g8DLr{tM1W>!QS3#y}Z
zs}Ia-mCSa{P#pBZGM@@j@h@zLzoii*Cq2jNQae?ByG)}1PB`V&<XG(TU|mlLan$GS
zmU53e*$>v%7Q=oO<0(>(>6=L-J5Q~{7BO&2t>&*YOz^II)oIUIq8baMR<4WL27*Qf
zb?jumQis0$J@DD_z);z1ZDe<;IQb8Wl(NIwO8<F(;y<J`!{OD8JAd=KTq*B}*lnWY
zK>ewv779zB<+nP?3-bypLMfhoz^c{nE{R^OsLq=~g#RHWe&j_dDw3^H_^3B=tM^A~
z31Vz37dtUv6(B+-73>?!uf1<W90(!f>=>BHyI8p0ot2Tj{YlKeRA9dSx#I&|r59P)
zARANc6SVRyz<A&bigS(zW9jKHN8LBMIW=RkLKo}jaXX^t5Ba7U1ei^J=d&93SUBSQ
zJejy-q74WBsM)G!iyhjAGvx*H4pW8w2d<-)ha41QTQ9YIoRKErrnKpljnO;QiH^^V
z?_`!K@vQ;XM4yMvxShMcpyM3I$L$9_cv-aT(Rt`BIsFEfXPO7EJN(`~K=^{2>HzRn
zjj%s<aS{Kj`Dz;ZXPinOL(SSmAkjU(o@*z9g(iqB{sFPWi%#>^*_<=BwyX+%-ZHY?
zZlTGJByiNWWI!hsPke`~il6V~fvd<00qHmK3}iKfUl{=l9);S9(%`i9d#ChwF6jt6
z9L$cX@(4i<O1NLh&h8Chd_I^@eBqyapgZ7LThK4z3rdtMj@PutyAIu`lyDcCS<}}=
zSl0_ni--#$;OEksWz93+!BBi<W{|;ZAucX9cnQ$KkhU}W=9?UylrW{;IMz4e#D?Ng
zY=>E|sI%yn3yUHVRcCRx8BRqE&X!Xb7&wq>_`JyWG#@D`qrP}qPN5$;ql<)a)aF)D
zQT8<&Ina-1s5P4059==9QRZYg7+M5nCC-@vW?K9vU2@6~o-DW_8oJk4{A*slFkK}B
z?^1xZrNJ|ymX0mbAr0U@_C2nieXQ}iNQBQW!66CDz@$7-YKO$XI^$BJ>uI-r5{q-U
z@8~Rs9fK>jzE1R7REhAMhukbXHaY^#NOn`#G?Jp+Eu2Q)#~Q6Zv9_Qsf2%xN#}!`A
zuOiq~dE$!J^9pVTUUf}WV6938!U8^4p7}ESBzSA0n4S92YYuQins{E7s;?y-eS-~1
zOB#9S%?B;gJHyKRZz4z!{Q?kYVXs6BYy*<fx<G7|8kmvMTzGw7tx_5X(X<{J+gd@O
z!hAlTN50;+t*`3+r}tvHkwelDzn#&_e1kT2tSE-qsE#MaG0P)~{63b6*m6!rbZ%n>
zg^ov#P6U?wg~tXf_qU;2((xwXmYZ?5);DR5O@*7yf&G^n$!;{JIF1&-r&FJm&)0dT
zg$nc2H1D#a?b37o7WkN_sk$DQ9qA+a2MbFq?G%PmUlkAg7wg2YcC(50#;P+s^y6|3
zI~Oo=n~@F2Z4_#~tnamlt8vY)bH_3kks~-N$*iKMA@q}1ruuN%rtQA(7tVvyvd8Uu
z_Q;M4mxLox5D*+o%e0gf1@X^e<IpD2cMo^or8?gKD1{l$!l&F=hjUYM9A+j%f_CjX
zQV7lQ#K0k14S6~59TCF|e%Nk>(IpYdW@nj|k4~3noz8HKE9CQ}CGBAQdToryy}{vw
z1#TlXiWMU1UDGzjG2df}@VO*_3I+TtV7qe>Hl1rT@Xn=~`RP9+giC7sL6T@~0TuKO
zl)x7O@xfZ;_?)@B3+KzQ-bb=#4AG=?DrcgLA<;rKyY`rTeatZvrHSK9Nsd~!Bl!$P
z7u9$0fK{$7x$za0+unvc$Wt~HmC9qQ960CwJV+#?)|aFL=*?7S$9CSsofwW$>Rq>W
zSaIxDCte?=og`v;Y43%aqQ9PYr@<ZupJ9YnC?5q_MS!lq3H{C9ryA1D%Z)%;@|tVU
zeEH_TsnEvi|9S|xP_Gai><xI=D192H(LhshZM61Ws&ACU60q0GTn>dA#bYDTpltY%
zGI_n+^uLsS^Q`Iu-Yi>FW+u?*7YOUOhHyqPro7|*m+0%T1t37TpJGYy?t{5*ue9of
z*7eu#O{fXuWp|-!X;=PE(fxc`ey^RF<`b6s1*~O*&zDl6C*&?y8EwN(6ECw0nP*%o
zxQ9t!a1@kc5=@8cO^b50LxQ^<MA6%f_+wMU-Ch&~Z&XSi*Z;Csx&JhI(1iVm^itq{
z`f#SoJ-m|iq+BfMzBTKQn&&B>liLo}FgMdrQp$T<Kdm8CQIIH;hb@q%AS>UtpP4!f
zkDlZ%`&*NZGz09FF}|Jqle(^O!4yIwt`WYH=)X6H@$-hNmYBB89#!9y-xlFamdqke
z8{Ye~nDsX&gSUV6=p&Y+M%I~GL@az#EF`CrYZW(jJxHjQqNZH^?BRy+U0F6Ma4|Pv
zVcIrNEaXyN^H$ku{{YWv{&Sx2-T#<5e(s0<KpD5cBi!?S(fl9JOB!6=a$|Gjw*C!8
zhB$w;HfmeSA#P@WyQlI>NEBF$A&mZr1|*0BSC-GG&nKiQGe@JdW~9wzx=IXbCk@s)
ziTt=3t%Nl;)U|wTf>@JFd3eS3r$aAkHpqxJ@f{49RDOS?Uz=ehD+k_!ZvI1Ji({$Q
z)6ScJAjBw}u*Y_M3^*KVKVvuU6=7R@Ib`~}Qu1c*U@_NdA}vX{IK?>FUiWVuY(czh
z_UO(Kfu`qChMX}V>ey}~X>4L3Y3>}Av-)AIt7*deO6BQ01)OqrwQf>$GZN8t#IA7;
zeKmyHla6!^8_KCK)`#2G#=*v`>c-ziGV6d8kT&&^+UpzzbBC@aAa)VeFcF)e#Zt`e
z76z^g0VCj!y}ibZ_&P?{d+>X0WhLW<v^Oq?Xyas({=SqXYeGptrHm<cb&l2gsTbh(
zvGWm&(9)q6xQsJhp5S@}`HRL+(c)8HLF-;~OA13F1mjuSVGA#UCMkxKt{iVg*8H<d
z{XiWm_4&G#^rq9wXDwxcTRU4^eJTx-Q3J)>TO)Av0#MX3ZCH=UaCC7mu87ZNtTWDr
zM1MWmdUxb|MOE{!8PC=cbfMtBOP{8*E(jT(7u!-r4VSMtbuqJKp*^?G&Casq;|n@$
z;lS1OllsyuMp1WCane@l$Jqm7r#`@>KBU}dMW$V@R>>@t!~;KA-6%`4+S4#=%p`2w
zlHlt!C&+DeeL9mco~$TnMoOG-y){vJ@6jnwyuNC~qbo&{8vUL2(4Dp<>lD5rtx&4J
z{&JO8>R?2ZIxLGRv{ZH6&~Qs@UBlBz6wK4zknUM^1w8NNw9QWl76Q+r{)}$BT|s>2
z{igTfLtV>yNu0s)YOEdZ>s_}J62(N*173`zbM|zQSNi;fQhni<#g@iQ1%-*e4R3-+
zzszdaH-@}G<e3)gs*QCTArj@EZz|0t8*I2{sJ)`8<(q+3kX=23HAF*JZAD!`vXWz*
zI;j1a;XJlC2_W4wt5}QH{!`6c$k<$z)tT6c9h+}k*0k2BR@xuamJ#u%<4@NsU7YMD
z?d|o2_ASqm>RLG?BT-m;F1ff_@q{rCAtwoo#%hY1ey0>$mUaTvQ)HkX2@&0#%Il}R
zVC1BM<|c`4OynTV$7ISTN40K@lwlJkI;3{~cGF~W*`5)fo9IIS630M29Y83w;%rYk
zBWYCPMqs}zqZ-gPE#yiJUeiA~$*i3w0!*qTfbZt~{OPa^M|upn$Yf+1D9P5g;Uems
z1_*h<j=HFfscQzxO9nx6V}2pY-O%+cUMwGC){3!UpP7voPP}|2Q#3neP9pn{_&g($
zg5D3W#$urjaDCYa{q83Ox9e~BP`cHm7g)jfV9TTQ(b=DIXIEcD)N$6CPYhZ>SGTQ{
z<QlYBe{uba;AaWuxZYTvs+^A7f>+{;hly~khNwUtLx7?X*<|_~1DhuIO0jR4-UR*M
zeGOZhZ_{XFv;CGe!9|=@OOoQ=qXvt&_DdS8Z)$4yUVQ5t%)azRX(QG0yndr~bo<i3
z2@>@<|J8!I{S^l>w<=}6H<TF`wt)T>nh)j>Leq_Wi`_7mS4A|(B>63XYeY;cx%_-2
z>sh;$_hhR{)|#eC`P|bUi*WKn?~!S2<O+6O%Y@J;8tz9@r}O)w>onqG!?g!@(sO2O
zFPO^3cY<w3*VfbIsD`&`csTACmnd(j%3ox=;IC0s9DH}0v$}5k*TX@~hqSgN&o_d+
z*JIHls=paPUm0(rCK20WtV9_;b3P9{8J?|UnvwQNyqOmI59tlJ2i(bCMU5fSS~dQ6
z23M&s;LeyuRVGqMzNB3e)CG0kwKuR0#Ym&Rf4v<kP+f0L4&3;y(bS%##B4BxIkq9N
zWIt<<HTqMD_J<ilU>{`+GKE2)F9q!EcUDTU%@^8&{i@&JJdf}7(gxnSte_=(6xar%
zT@}4!T@49IfQ)-QOnE!GpmDbQ^kevXzE5wl<t0aLTacVtNTL!6Nbb$XVDI~T(V>Uz
zi5eQl9&q=wJ3bq^p4?--8!CA=PmV<9@$T(gV~-Wyw(2^vu&@uyF0Tf6hP9%nHr1eZ
z6Q5&HO+rZ_C|YQcO@%7In1!|#d}c<61Rg|-X0{YK2g1yh$+eeJ8QmX)+E@@IEPtr>
zM6{uBnsB8bG#bf6UqV>Yi!2wdzPE68JH0mxY*x08S8<}W;*=X?d6qTEi2>athEV^9
zBqS)OUw<#t(UaxkrbK4vV@LHLQdOns!c2NI*V+AwNJ`1Ue$lXaRTM|J&>UwoDDMcf
z_$p#=l#wpK3KrYBLgE&ua`J)Qb_wTjvR?}p%B$E$lgSwTp_kCpg4%@ZTL$H}E6VTs
zIKhTp_wJ7Ag0YT4X=`7!UE3GVegR?gVkJ<(a-PmTt<30WFYi=aPA#D)ljDhg*;Q#6
zI>-7H6|rLn8=r+BCr-M7_`mNVqhhB}%*U2RLamnUrY~Fi3bd!G1jFnCcu&HH*>0x<
zGU~%Qg4%x1yj8%C6y>Xq=TP#U8K2vx?$r?;6sQ%!7hf!fs5IW$QhocJBi!T-slkXH
zK95o73JAzL7=Uoz4|U-$*2H9k82$5Fmc^)}ZEVn=M%c;&mb&`Z&y7(Olh=f3ov{e$
zB`^2oSEFH(iY%Zqk`WwbhPDPrwyO814VGGOV)X&5vkU3`#Rg#m7KWH{--G!S>A7S$
zZ%rwz(1Iq9T+FyH1JBsX^1*$<|KDtx)3mZE8B~t$iMy{&>WaJ0ft&C1oSKbqn#TU>
zSe54o^n>`8zSg3bRpI`+cAwWtt}wlXZ8(HuEtwD$n;YJVmI(9YP;U`L%dK;w(bNM)
zg`TPl(&RcmirbpdXybXI*k+-@qba$m(tRmzWM%2q7c}u=ZN;=MLdZVRBrVs)aM3wj
zrk@7v=hun(f$JxU_5hCu-*spu25<lAi!)_}?<LYL%M!DSD4(YVlwbeZ=M<Gr{NRe>
zGJEjXx^m=QwMz*G3>%(Uh57YO!VgW%9eDzNqr9O=cvDhZEQm4N)yFY0uVU%@6{)9S
zqUZ=wr0{1Sn!Ax?sa0kl7UM&FSnvnKRU*e<mW2jr!#`6*+7`Wa6id30)3EPzRfGYX
zJW2B#k_JE5{u(6C_*d0k_3Jod>$lll%mv~Ob@fo{3c3gpGz~@5?NhD979c06s>CW;
zE@m+r^R9f<iu3DBxb7#^EzRM|IAcc{ot9Z9mSNmq6tw3~{^?K$P_Q;w7;Vc}5)|#I
z=W`%6ZHaVVB06D095R@Xb{H}GREbqpELir2`k?Z1M<mg?EY)IS{N+02^Rftg_mRQ6
zt&or|*_Z71foT`0HLLr8FjG~Gwau5(M*VQ1MPg8J;fd19h(fWN`h!zH0D^vjdLzx7
z9WPome+d0`v^f%cAW?ZSBYZbDf%JPW|Lb;J9n{3x!tUxc?r%YaPi$5Fa%MuLAF53r
zn##yJajf{Cyxt^Iml<iG;l8bDk4q6xl{_1b3s}Wxe^lVj9qNGT4yB;H$K*QX-N-rs
zH!n`gZCx)7d7`fnPM(f%s2N31E-klNG6ORd()JBdX6k$@AT_vWWQ$y;qr`s~U&m*e
zw$GMgL7210z36b*KR6^DHz-hexuq-_LKS~r<ZVC~l<e~RS1^~a?SlNDFUW5sbq#N2
z1TZbge`MJr^&;WmqoUF)8G_qI6nz?AtbBN1riv=QJ}){!;df}3m1?Tuobop`zWRWR
zANF`gSMqE|Hfada+RxUy;U1SH3qmVuX4F!L4EHA1EEji*<Y0(OzbWoguBb)Z6`9AV
z)@g>eTMuaY{d27?*ub+|LRp%Ah^Igl_w6Dser;_nx`LVoy#=9L3!4M9=n6cVfX=G!
zEzQ-jpAURTaWF?XswHFCj@7*c_{Cqpl$Gg~AjXAJksgyrlKUkyJ}zL*zQ&fK%i)4q
zsvcYI1lub2!0anQ^$?uF)czL2?DKw=Ak|%Oj0@5HJ{;Fg-Fhk<bGI*%KGLXaoezkx
zHR?@q=u7fkU-3>6c9`{OOnQ+h<uoL-gC38Be^s2hqU-)4IxsK|uJnX*ScMBJHmyr>
zDVSi65>m-*=W~@`y--knItqIa(rwX33|d9~F?ZIz1CpC#CTNVvCw!c`l`BQxT{DR|
zm6G$VO>B-gYIEY$U)wB-*_Z!wIONYAm*C3JmAvn9IcXs-?1Qv4_haC0I%T0=jD(KU
z7h7*Z!;$~}#hPp#$=0673`KQIUJEF)uzXesD}7S2=VH3hUen}$3&p)~wUps=I+lZ$
zV0|}j>a!k2LjG%Ht7JaSW6*UWD{I|KN>HAnBMG2?%x=&Qn&zEPfJb$<s*Ajc;X_zW
zh{mOu(d*Elv}7YMb#DZ7=nm7m)i`Xwr$Su2RGBoMmo+nG?$-r(iqAOuHHI;^LnQP4
zkvyHm(qv@vE{Q%V^^GLdpx+KTfq#V@cGO{3bs+2=Skkq#MIVFP{w#h@iAuRXur?Mc
z>sm-ZF8UU2cKHsquu{9%se)T3&!abyk#xyq<RYSat0ONfZiT+y=-&e7OQ3ySS=7Cx
z|7g&mk=57GrU^vz&wxx53;ot)$SE|n0jzwwnuw#kY9EE4#h_C1;FG{_dQymx-v)Rr
z+0~TXKod~n(qNyRs60v)p2!;*RaYG`6<6>8IOvkGIx(MKuZ9fIzi888Q4wmm^aNRx
z62tjiv!Og^SV8ds!a=XkwG;8*hsziGeK2wVNjSOz+9R%*u89`)xW2?`_7p0WU=`ru
zPN?nH2VlNrXo|ZW=&#2k3JFJqBK3{Uhi#sNmBqtbkX<}BniOi6J7dJ(=i-rrF-jyK
zdLpy2Tm1;kG!!}qH_vXNb&eS=*0VaBqvk6H<L?<afs9I6N%w@Wd*t?Dz$m6GvzeC-
zPK^Du=i?qWrb$hBV1+u~Uk<a1_;z1sDE#*yM<2PWCXXqRe(6#!IlBe-^bOqjK}7RC
zE@jho%EM}b9z|)y2k$D=fj0XHt88;SM;2)9Y1Jl~qQ7Tv^hi)o;HP_g`EiM?4&?Ki
ze5w}Yinp^?0v+#>*GhU_?F_Uh_pFcQ2{XXI82E2)K6JS}w`%x_o+L?%9=L$cdG_{`
zY<rZz79hfZ1%^wilEK5n+k!P;-&UM>SO?hXE4Z-MIU;*`-mEzs_+0+Z@Gcp}V7bri
zr#8jT!S&QeJ5tc~wJoRb><#60R`{@eE9rA#1?L!A@1*v7;)GJBz?M#pM|wP#o@z^T
zL`kqizK}uGzu3+yaL{n&)NzY`QN&HQz*T5DIo$*%pi4`c@;Tf0iD|8^hP4E?cx~C&
za%Bmu@+UoBr7^&bw*`;V`jTBP4i=bI-(W|h8sd20BCN`+c)$BLn2BdICaZ{J8Y;0J
zOx8O=)Hj&Ahq}(~6FYw_{ORG6atvOo&h&5ZBvg={_b#xF71U(K16ohXWskg8e0};W
z76mX(n9R{%=u9QN4!%kXnV6INm4Y78LV(9FuIGCjK|KFb{EP<(Vg64)Yfc6q(qg!4
zBk)4iJ-c*k(H4zIUoQjz&B!ys7hVYtWiS7){kQ*+#vlGqFYfO1ZLg;N${qMhK7MuS
zJ82gSOHy_fhcRs4hn-uB!P8J$xPb{jJ(3>Nk`{}TK!$2Jt;;PBE~*^llu0=&$r_>p
zlvw^C>}up&D6!BS1|jjPL|BPrjWMi|PyC3ZVxTK8-M|sqv=9>G1oov_<2;_%RqhKu
z{JV1;zqfUCGifuBk~+w`r`C4Qko<RaYd12S&4<=HP*T-ssN`k_O`r%^$Bft!8*AoX
z`s%A$>iyjiRHTxvTViVLaFfh_yTdV3b>Fh6uXc#{a{P37AI6iLu`ocdAm&9x)+LL3
zqbvkqJ#x`Y)#S~y#(n8jX-VwdBvE>}U4CJ=Xcg;K;JPA)`HFc73M{{=*HLVNgmqf<
zZq!{6EE#PTf+?dO)Frwe#{9-O&t0N(im84=-SOxvx&q{iLqA8|K6hLGo>@wN_<Ii1
zx(U!2OfMZ$KOCi@U-&{`l;yKz^fAvTy0^$AuRK7d-V!vwX$!o@%99JY{&n}qcw_0#
znx3AI)bbNxA?sI9qJd-l6wU<8{Dh4zCWWAXRC2zUI;Zd`I|BJVHkK%~^QcaN>WrP8
z7%7=myc?gkKC>}4-A(L;@+Zmycg5sSDut0xCumtY2w)*YRYR(A=NXmF$+47I+ej@+
zlB=-Vay&RFfoO?o<hu`sD~)AG%Nb=Phb3JY&>$(zt*yuBNo0$e_pJH?5#n_a@E;Nc
zgu=7#1Z{HCE!F7SpWiO31TVjfcEz%EJ`!Z#@I#*~T>fwyexa4E;=hm1Kx|;Z!F!>|
zdGd%2Jkh3&?cY{`h`h}BA|&9nOYYU*+a@9cSC&(pO-nC4D$PL&4Au-wFt<I6K!;bj
zqH~)ST;RT5anQ-A`l2lMaVWW%!9_uQ@bg+AL=W?ytlgxh%)_xZ%(jtQne$a1K_-|y
zSa_4>P!-*(<_Wx44%X73d(5inV8smxEcDAm$wjIjYG6rWN}4<ZB*L9Zy&HTz?xsLp
zMufs<j0mr$wE~-fT;P5YTQ8F{>nHo5bca(rSz*%mJ$2+$xV4p*uJTKaE^TyQ7liQm
zZpx9z5kR|}+J8#w8@n)`Gw-&ubu7?k;q8j-U4^0+V%e<U9UJJWicx<_H*g5Cqmjso
zsR$WpWX<()&4;dySd&e+<cAa`mUox{1Wt@w=Fco*#Mw)%A78Lvl|=p|e984EIS{g+
zRGr>A*tJ^C6Guw*A29TSIc*v3Ce7MhAXq{U14I`cPKU#1FLlSqRH?^wa6i>T6sj*e
zr*njbVCA@siNe14*f*XI8&?Nd=k#5gmCRMd*-MglcH{YWH8cp*+D*jkQExNyKcrqN
z?}LdC2hs}vAsN166Lv136CE7V4aL-F=fo@2(Beu7{>P6V?8jFr58rss_WuchE;}1J
z;W0|93aRe0>?m`l-MCBE$SGXd=7ksb+S>ff!T#hrW+q)JYhQCKweoD~2HwR=SnUcq
zR`-%Un?<;T7!}<w2FA2I0}X%ZD5c?zofMe=V#en)Hngc_7URX-LKB`wxJKA+omQj;
z^31DSr(X{%k!*B{;{I3<->jOz9}et%6>^>X>>Pd%@hI3~tqNqTw2!*B#TW~c1Qf1m
z`X2l$3)xAIqpamtdt=zP!ht;=r;98rk!iLlG#;c-PL3MEy|5CGg1oZa)9%Av=;hQ#
zA>z~GAr^F-l;ksmyRcUYyloC-f=PQxoP;4el=y15+(ipappgMu3S<ad**Uv&KfM=t
zhP#MY^ilB12q?X9S>8XIGJR89Eht<~^mo>T^~<~wi=b19uy&JJ+wwQtEBV^obsK9U
z_03j&m0d4JDBQh!wZ*WvWw?CHXxC@^v=<-CWYyIQw2>Sk8XplhRDt@EnO6VSKZfby
zEfsGX^EkiSDxU7Ou$VY>g=5c0-JuXRnc4DteZ5t<0vshbpnL;V|6h!qMO>Rvx36hS
zk>c*|?(P)VV!_?r-6`(w?ixHe6qn)_f);moDD-kC_d92Be)mi=c!$}0=UrKQJ<osI
zpG9R<qqg|V3;IYgbi{WXU{2(acX~mwuauw<*O}ggmy|!=ktY%Xusoh3(YvSDgJ3Rk
z3GVW{)7REtZLGN)v~~FxGJ4}Zc{B!EWD<(!K9}Svg|OHrGo^U#*3_YQu7Sx*GWY6B
zC*-Q^n%1-opDtid@^O6==hoTj_1l!1OCd})C~0<zS0npkcNNW@Y&neqIp=%MmmSi8
zSDT&qme~4L65|Qxh#tNX<dTC68sY=dtOnm&Bl>SYrj4y$%Lmc`8_wikh;Ni66~U2i
z(K;YY9O80KuLG3PdNIh4Hz*`DF*%p6;-b}Koha=S5+g49c3wJ_`*_AU;nvpr<{HZ;
zYr#31_@0`hB}B{Zm%}XN((^lh=F9`)z+S$9-fC^v0S&ife>LBwIStOm;SLkF4mnk(
zR{U?GjdrDjGFr>=7-IJGCQFv_m^1u<4fB=iyDhfsF|l?Wes#pk_SMQJalz^wnnN$T
zi^vw0CdGeH@{*$JQKhK@uxzNsbnOAXX6qH5kSE@<BH7MJ!JVuFXZTqgE1$l7(r<uc
zif|{&N>YW0?}kYuUvB``L{`i|*8W9IRu4)ljG@r*c+Y9n`Nq?lf@0emx6PE=Gn*C#
zVDEl#^|#Z`;#xo=+HX`3{caIcEUMYiFN|ay-5zn<u(-#J+txyfPbbEle_nY``#SD;
z=rC__j<!y=dTvFu?f;x=p7w!JD(;^|sP2{bgyUXV0%LATNDf+_0%3hV7_csJWMHpt
zC+%)lt*bmjPN3X<UfU1!%?j|5PtM}lCe)<_BY*D1SjsBB_Q$2)M)9#5QOgF_b+xd_
zI306Xz|tYnue+79+J{*n!3u^x8`26lE7!R16kkdtCyZQ^Ku+uDhvfKx81HnIBN^H?
z#tcQuKAQi{NLr8-Kl!TFXHA>YbXfp7(l82AEF-5_9s(Dm4JwTx0#*{{r1;*nkOnTh
zUDtVbbx9l=1ZG-YD!Xm+B?zm>b9Qbx*)0hg;q$H@Br;g0Uy`5|D*~Q?EI*K)_-|B`
z%g2xjL(PNmX<WLrqITB=Qlt;ysbbW8@=~e1mR=^i8vUFlz-1xNK7-VS94*Ar)(l0)
zq2KCot}=OGNJ>!tI4<uLtLs7W<`A5)@&dBG>o@RB>o8kR1c}yC#hz!1WA*r&Ov-iy
z!s8kImN6<r5EYADj3vxB-Ws$zU;o+TW{-cm9>H_OfER>FM@Jz#hwU?jj-8&9(Q9-4
zs`7&r%1c#kuu0OiB$w|Q*9#16wcF4DEx=dwuGGCSCX|P)sez6KpSWDKMrfzqU0km{
zTv=#pK*h5Z>=sOnR&Nm-pcVf~9}Iypsv8|{$mVfTqq%E*KC+n(6dr}Kmcl{d^dAb_
zhLr}m97*d_#AGK`UNfZT2H8@>rg{Bcu2Qy=P@SXZ52{0Iza_Mj9>M9|56Rk8PYx{-
z0yPwjwHRZGLT*P>X!)rm!i7}LUZ=7IKAjC%LULU0vf=K0RD64=3-e)z`?=D~Ra7%Z
zq4h~qb;r4LjMpdp_Ir}cZ81UdHZ1LL$u_SM$>?_d=xNS1#b%lDy9BAF#E0RyNzQ*z
z3RAxpLLSq?xyTG4iOCM?AcmtwTcR^hP9O9^RbLAm1FDe3>*K<f3FlW{d4k2<x*xcz
zFDlhHyAFLFolqC(e^T&Lsw-C7X|R{8MDWAnD@;h&0dp5J>zRsE%tF;#^CAl7|DcBC
z<)v&|j>)3R)%WGO0*ET8d5mDkc}ie&1Uy+>V#TxJ5)@Y4btSSKV^NXY(xNmJQxv%#
zHq=`;QTr2q^pF3-M$3l#$rlCHR+b0(0BN+$w)G@6Q3wqAvsyOTLK{qoi|*aK^Xpdy
zpQhM5t(ltK?=2PXu9(90txFGoaPOYU148q1OnA=*BnYSx;(3sxTZ)HG!HFK^_pc@%
zwX-T3TGr(`mS`<rJYte)Br|<Hk!a7NIeetHFdl7k_O6W+1FK%>s}(KZz9ta_Hn;a5
zckn^qTLA-*{U=`z$NPyy8N70&-p*FNQt8LU_hTBUb~+k23WAP1)9%u=_(@n8xEaxh
zBC}eW&Io=rdz}bKf>TXu{4UkzHpmHmoLaOcj!v<YEKskO8BygvT&KnY%D8B8gW(%L
zetz2(5xkNUw{F&VUo+<c>w8RpvYB8h8%CKthvV~pnW_=HUGZYT`ZQ*Tnl|(qFB$&(
z*Nn`tfn7_E2DBSw8qx(>!vd=<+L|~z)B*I9S}V#u*b?Q~wRC#_*7OtfIBXPZPZsUb
zxR^<J;YfT-!KS@H`Cg+#sn^ya7o{bLJ-Q`eRtTEU1pjwr--pkB8fpifc2AsW5GG}z
zwO>WFg)}dD)_SiPZer)_U38Ky-POiP{L>mPBFvF|a3<Ms9JIKs;a6^SVQyC5NDNQR
z$t+_upT9q<-J&K@7U0_5ASLd3<f9sSXZiRbrzUmh>k7qCN~-xm3=4J2hDGb(2PWtK
zh=J?9%Rz0ZI1HHyTK2}DOnW)og#1Qp$a>7#R%|{cfe+*G^J4WtrUbJSkE@pvoMP(t
z^)Oj?i)!2&?XguZ&YljG^a<)S?b@A%^Na;L+64{g3m?KVn;gz>6GxhPwo~0>-wiv=
z>{}4s%9_12xt7v}NQ_1X$v;up0}2n~sn?N8m|L2e@c&B3-hJ2L2xAglZFqu`d;SMy
zCx`BjFMZQ#h}+S6*bUa@c_BEwri;n26Y~oUyAk0ih`N3^e1ELS-Qb!fuLI)FdnL-U
z4UzvgGu}DVetNhmx%VsDvpSu4;9e#(I_9Dn&PY=Te(Z@Qol@-M0ov2SNx*a%JKR^O
z-&UdO=WZUw@#IDp?RI{X;XCI(AJ%~3<F!)|P?JhlY|d2W=SODpmigNSFb}W8UQVjw
zSErpA@lMf~D#;$jkw#gG20#q&LgJ)+x%qHEx$wfzRj*ByGtjYhVJ4|aHkL<Sf(l#B
zvE~ON4m?6JyWcF93a{@tiK5qC2u|VkWXQ5eQ(3jWBlVbhTm?RnknXr3ai%>##N8yf
zFD#WU-HMg4nv+uc*TD=KFijRWpe*dKl^@lNfIXU9ACnebtX}$?D^?c#jJa~FLVL1z
z4K1l4`U2KSi`<^#E+iuEDus5aJ?U0F>hbzUNzlAxf>hX;w6WDS`ZCJ_1Hx9VdulWy
zr1g#dAX&YWk@hZrURK7cMO=tNwjrsyEHo;$*|`+C<U>(p;@y?IFsZ^ZQ>!t(`a7}E
zR`Y7|n(f(4@o$gmkI1uHF{!PL3?j4%?s)tlyg1v8dTPT7re1>bDejfW)@hF1s@zjx
z<_C>3qWIk^M##lf?uH%Nt%Wx8^Hg>0Zg^C>&$?S{LtYCm;&*mD-W@)Be1%541E!G|
z-%b{gYpmtXe{}W#qsD%Cdr4$!fk;k*Zz@0vkX9Fl$nYa&<hzTio;UR0hHrp%df3md
zBIq|7P0aY+nF$atPvroZ6PD0f&Cq%TomRr=)o*LJU*|KR?%*r4Flji^ACp$_{M9r>
z`5|YnJEJNkow6f+zED$pHYly0|Db&L0S=viYph5#kV=MZ;(@nmHp(-MhWZngoE$6Q
z=FbiulvX30Re!tE&WzlNE>pD&YsOO3Ab6Y*y1u~~ew|pp6ZP9W<pc0Ii@ee&#FdtH
zyMIux7N;X`1}J*ENz74<xGMg;yISkc7$}8J_w1C~4#k0F5waKI-LQ)-iRXi6MPp$^
z2qZ>}>yK{HKQd}p+P-W43|`G&g00vK{^g4fp83j}QVGG+`a9k~DI(VSQU~Hxi)6x!
zX3XU3Ql{F_gz)@%OPbyFY>kEgV(jc*CIN=Uc8-ZU8^q8amb4p5O^riPb>XMGU8gHP
zEsbe=@16!Ul7D8k)K}TisF(Z!PoOL&fZp-T+K8BzDiV`Z%LSluwNe*uE0q+(>&Td*
z$&}(&Qbu52Ty@cAy2ac+t(N`GOi*S0FUJoxnhc`PiuMNB!^7rb+R4aUSj!J$OsZTO
zAuNX5vFs^olX<<qtlI}ioZoRDCqiH;RF-z5r=0-b$a>Fpc$OxLr;EvVf2f$Nm_Y~`
zKv5qP*GK8uuN--eK%w5Blo$9#m4|c0$bSQzbHMUx;81$5UOF(*=hks8)01O~`D(78
z<95Uo<HvD@W-h=2`s<l~&265;9Wt+zhT@NvC85s<T}M?Uij*BdaVJgczQzo*5p5Uy
zBv?I|=}=;3I3>-U7zxQqW8KiyJx%3K6rkI2_a-~X*m>-Gb`vD`I4${B&Qfz)TOAZ+
zocLjPpa@a1k`v?_gPGt+Wk?Kiy>(H%O{Xo*NlUp}GzzmOUMGp;i}<LS`Bv4$R!ac5
z*>j6nUN{&yc(t2`Q^xN*YR;?eVUo8NV`U%>70z^dbKY1o{Ag;#o1$B`St7T9QOc#&
zxRK+Z3=yEx!CFs;;uzLxSIzr3AY1vIGmub;a_RxUa*1iJLlK2wq0O9Vwr0i!tliS&
zLm3-U!pDw~T=ZwZ<}?;<G6Me=3txtFiv9sl?ckEfLmn2>mVhX?$tpB^dhZ>JOd@k3
zB~5f#U{2U-O~IhO(MC2>TW+^osxw3?txfz-I3o|}vo#fs$0(~a@d;n<AkF!riaLg4
z{pe`4oX*y6<g^*)wIlMI=~|;eKrs_;XT{HFJ8)(w3}3BJ9|L6rZV1Ey0gWPaWkS&0
zf)U?p#vjKUxN`sD{d_{)P+f)Vi$c~`aywIVS-tjKR@ij*lm<{DzbD4fx#C+kugSbH
z6~81fF?F7FKj-dR9M^XG9oPaw-z;&V_xmXC$Mq_fRdAJy6)sOany{+K-etmlsKp+a
z$F~n7{RYj_Z3h3mUSc`qzc{vqv~B?G$so>_3@cdr|Dc*(NW(;=C@Bf^G{K0YDoaV<
zCeqph{HSXbmqT6@D|*4w-{?YJvLQRoI<{Ffoh{KcL0!_aK1ZUP^<TIniIX}z#JRqs
z!P|zmqv9>bz=Q2@yX?AaG@8-KuhpHJB2PlPVa->A$j{b-!1<bI2;L1vM(gc)uvVVZ
zifW$jzRGar+h=~)<f!7EGm<Pc7{uKMgrl8n<|(pk$_bKQeVO~=&hGbQTO~ah3|kXx
zOLDE(lB_5zF8+@AI+QT8otlL?Zc$w{I<aG%iNucBn_`ynw=~UMD$`4sUlXo7J+!EN
z_x(5;9?$%lb(nco9SipUhS-A9oAD!(a|U!XdnI?G^@rsfH*o+A5+nS-VJ`vtIXoDG
zHbNuHaANr0X+O`0`2%$~qvL?(&)I=vb}V|em9u(D&AR6DR&v~mfcYyI)W%7tX|j_^
z%7RV+*UwkoRFkKHrdB9M7IJPD%@GfzLSs#gdFw?SO$EByu;gKP?2$yxrXFc6DaDR(
z{G}HD2H(k1=?M!B>Z1!Vn07%5GwZ99$aMbqza_-z>rpGM(6xd~4B-1dpUxTw(M&4@
zyg3ktXhew-xn{Imf9a{_^M?KE(G-<l#ZF*Soq=R*k(8i*PE3}T5bN?`)x>8OL^Zuf
zt2yJwMbcSk=(wuhHoK$+>n4`EtB|S&F|38H-S!FV5B)636<%ji3tAvLVN>q$O8I`;
zTI~PZhSy}c>Ia-NmY}S^x{~+A2HKK~p10ayi(|%4Yh_3pXBo9-2Yjkdq1xB}LzJYj
zAeNk;*fcM{5U3ahOVk=O4^rY*w;gkgLc`<oj#5g~m6baF@FzsxcaquL(lj1CS5!l`
z?%K;3Iq|^QUn4A~>U`ibFr^Gw7nTtBtIwMsoW3`&Dp8LrG&`4LZJ9BkZc111BU_Br
z`}y8(Q7-!nO!Tm+09Yx@F?q9$LP@1PZu^w6Eoxdjo|6;ildQ?`1*ODF;AN#q5F~r$
z{kz<U&Uswjnvq{CtznXH1tH+V_5PV!JLg^_oWmNE_T%WgmRK*yFz@!$ZpPK+hvk}h
z&qvy7y;*W3+rANp|Hf1WuVzvyqnaTIMye74TVkRW+6Mtwb(70CE%ldav$Roz3ol_3
zt;2~>2h3#N7)_^aO>EBHd8>-MXe+<@AlhQBcZIQAD~6Z;g!X`Dv#VsuSlBTGR4Q>7
z5lt|S(+*ZpmwR!_D${Kg(u$zpM*csj{}np%{qRQo^9^i>(;me@`Ai{sUIvmV4h!5K
z5YaEmBU)kbdrAjhoT_BAd5Yx4^*Kma|0YCxX<s(z6+_zYw0(`hbpH#LTU9Q1GF2Mh
ztWaJAs85`)5w8ZL8O+*wo*^Rz{F&Dny1cM<vUMcSV6D%vDh1+fjpqqT7^+<k3Hp9H
zUhx<eJ8|Bdn7GW&rB|FVw6NoN2HqTPTRR~P5uiU1cA*zGj@Mk+W=eOlNAm$QP@S)B
z*IeO%H^FNK7J)o9fPYXRDm}4fx3Nze>7I<!LhH@T;{CJJht$}nSj5RQrCWX}ObtKX
z+#w%iNvCasgTL0#FYX&)wOoxKtyS>9z8;|wBO4=NIJ7Y(Lb>d)bH-*N@#Kah>p!4x
z*aIY+!=Kd@dDQGV|7H+LQHo`$O~5}1D%OAeXO^mpnOG@CQV!j1CcV$`KnIdUjB)vc
zv@5qM-CXi>F00!&ghc)b?3e3K1*D#K`hdD+QUDzA34idHnVSYAc}&@E3CtHk3uzJ{
z!nP-!znBg2?+;rTkg7+f#!Xx9G{+yy8P4RkQpRk5zpQ;t*D}gKvk*45>r7j<sZ1YC
z{|AL&7?O_mk(j#U%k?*X*u|!?JT!H1Q^3fwR%@E1amiu7?a=xg3!B3&c{oXV<Jf7Q
zdGp0_=0W?Cqe=c_*E5Tk*qoG7J+nkgP)R(p#TSzw1!1NxfF(z<H#H=#ElrI0FNc3D
zVGU$KvQp<7DMsm-vWlyv<@Dfm>|44b$Bp|0;YbT?j$<KEgMCNd9|_JB@BzVoEcXq*
zFJZ?=Q0gzR@M8x^<WKs}cHygD=NL-;@R_f~q#GC334b`|ePd1b1^*y-ARA!~`Ik4_
zXC{-?21|;(2YC_#Gw0kxLxB0Sv+@N4K%FdQ^srQR__q=RDl7M}HlAkWplD-qcB(%2
z(cyNR&4&5X7B5)QHTPABvdMeeO+yH4fp4^#Z%)y<w_}>)`TAp*?85d|PaUX#ZqSwQ
zB3=pSK)uD2Lk-t6ew-fJ9<1fwLQjm@)$>#A*?ZgQd-gB*UmYC1JRuuhza2^*ctbaA
za{B3KTbo#?^Kyypd(~bdzHXcOG5-_f0`xeOip57&6^_?B!gocjgB2Hua=;2hY;0F$
z>we$$+ks`n7ua;|sJML0?LK!clWWRXEi<M+F>qy+MHB?Wak&9YrOjhYI+eSMSktSf
z-N#!*N$EX4J7d>GI94-}8s-t^6)7XTLSpS)!Omf2d;<JpY;!=Xs__<GIZ}{CS!tqm
zZdF&eRk>ft;L|E~K}zxRKd4cRF^T?lH--B~I(0hxGLyN<E&0N*>~sHrP)Y*7Dnl$z
zY-44%N2b_l&XP93Z6GrKfW4{{_V#R&96hg-G!WMDn?rEXSH54ib_7pH5v7VlJCn>F
z{%|dzo5>YWfarlSCBE=uQQI7ezQVw>&En1g?sgT$XKy|k{URRK9n@O1G&h4><d~{E
z%oJ0YlP<-!zFz#Qf{5JnxImHQE4G&nDfQc^0)*C-C)zHn=7Op}Y@bW*sP<(#v6tZS
zIk=Dyw1(e0xL)|m0sffVQZ_(H^GC4f9y72W30n0}<aGQsmibnrun4G6cdntk)J-`+
z!o9;D`PD>w@FQk9z^0clz7alHSc+>%SJtjHJg3bwO|WVBYW=LXjdmFD&IhQ0G-a@*
zR_^4>4%`<XXcgWwyKHkW#oTbFZT*AFzKx7K;PMYIc;H;Xe_lzbN=*CQr;Nb+dAV_+
zVkysbF2z6u&f_4RXw*!@o>b4~$HP}H&m1KOaT3K`cDLd!6ti51bbkYdZWDBWk=;H*
zb1mWKYXgkbELT^930FJRH^a@&OtQ4B7;C%kQg>~&A@U{VT}vzXQs?e?%{8K33~+i6
znI`<uk5q;&BBlC@4aTwlROO>-6<vwGFjK3PBI>;!&fkUWz|fx_R)P$!)j#6Uz!u*s
zlk-(%UcV`vEO&YD4!0qqf5VWUCe~ztcH{QOKO<xB`NJ@lETtmGgIUzB;5(D0f>khB
z4fd#FsFvfKvnO@5aC@-#n!)NWH`mGWz^eB_!-0UzqcpNI>gjeXGO8A#_3;fDWA7B%
zT`WS^&}~_|b^W+xqj6ONyqddfb!<A!3_oCp%eY-$RSJsTOx!^RkoMb0^T|+nM9;#4
z4V^gC;?+}0BIlxdh=jAWCUU5$%kvwRkAmWuu5+Gt!8Ze<#~zDTiEY~v_6p~f4bij>
zW{Fgoqg6hh?*$(Y>jICQ(jWO9i7H$e$zX!h*&D&%ZnxVNOft7UKRP5mNA2ppFARV7
zfVt>&2sbHDHhDRS6S`!61z1<bG9r(4sBk+cP;(Bx_3R5=Q4YWq5Q0tu^kI|>%sUO1
zI^lpEC9wB=!GF%cu}U`8EvPmt#gv`ON5?y7sC<6G3?%PP)}`M?UYE~fNWVAQ1>b*k
z!lSH9ZhE#(X*xJ|;vpP49%9|;(G0cWx5y-RyXM!REgX8^&GlFR-VP4mD2QMnddFD<
zjQ%buAGI<9_H>x5-fC40lg(rl{jv#t%*Tlx^N>q_I%@r`K%KMED<<tVll1iovCqSg
z_;6ALxv^&oK;0f`JNC{zL%po4!)*RrVl1h3VP9|cd>hiC10%~FcWTZagLD@$;I%v`
zraOsQFq-|Y=4VnAt{0H^Mly9zE<1tReu6`IXp519iq=Pvj_8Yilp-1hy(?*!-SwNu
zEwC%K^(=-bZv1fRT2j&*<_c^RnH4&Xk^Un%`A^#&;*8&nYD$z)j{XumE91KU9AIv(
zT5wgFUE~V{n7~$_{$<m-nGpdYRd@PHEU3>;2Yw@%yflH_-o*_;c#yI5z;*~kK^A29
zIp^s4I9MosYj2nGZpm*yc?)Gs&k<T_OwMIJkmZ^o7~t$O+T;%Htrz8~cxF&WQdN?H
zhz{em-Kp)_LeoU!B1FYj{|^eSB-V6BsO@)u@)sOipOWFTV3jwg$yRxM{K8g7c{YRY
z+~Akga}E~kuX60i+I8D5sl621)g?spZrK8-d#vERGn<{&J-S}U1LH3I#_NZ`1&uy#
zc%8!@%wMLy7N(^L=0KeL&|aJ4idQ}RL5ihJ1vx&RWFIQBzRBHbEJ>BBNf`CTj2I(_
zAY8be3_uYJbCo9`;*s8*8_Pk|SBL?}YUT5I1!@+a=z`VLK2iBknmA|5@y(NGLwu}O
zSZRjM@ax9u1!7^zAxd+ShF%Ja=fk3!;bQN+62z`?zizQ!trovj3lEKO4OvfZS?EU%
z0iT6sX1j;S14ooz)>;R}*fe%V2|e55N&1Ug0MxaLI!!jbVtN%f7V#WUQykG*4v*5@
z!#0f)ms-5}DRVes!U@iz`%Jy}w^`>6b>CHqrimY==e6ZMBlEMunJ|bQKkGlj1F(I$
z`%^|Kug9gu0&jh)%j!P*K*^laV)TlmVKcQ3ar-4Pe`tGRwm-{t@Sgw8cCpW6_2I@?
z4xa~Zl+SyMOTxAIO;~4)lTT?l<zlh<i_Rv^Ui<k)iK>v;K_1yt$F=F=iq+6Ek(CbU
zy$k<_?Jg%?N@khQ*G=G}gUlZ2TGZ_9dQUG$Q1v4l>kfpF{xk*qvQz3C=T{(6S+kxH
zEO&ZXm=fVj5@o$|VwGZqGj5IhdCn<gYTI*^^l)m3;6V%P+p%lvrHk#*ipwSPHrDF$
z+L8M<8l6=|zKVI9H1e%f!CxdxWtxz-^8*R%_<%>_?NKxH0+xY#idVvoek60-()}-6
zc`n*leR9$TD5p|xBb?(n9cRy5mdzv_m#_c3wB%llP*r^ve=cGC@graX8WyKE(c9ED
zsP{#l2KaLL-gyq>NSH|&b5_6`PZ}1}CSUk6kMddmKupOL(ymCEnuE$f=<_Qmzy)po
zh<W2wgA39XOOyK{!uB-LeM&z)Qp)VMJO!zrxfjia1-mW;b0LuHe+2(Xi>Y9>`f9>T
z3{4~*LH0`aO$n#u+l|1U^_oxcyXvVMl#eP%pbetO1^qT@`#XrxgS_3Y01asTGS4;F
zm*e9ja6u%+{^L&IZcFdDH)of?wztcacTNAJk@;cb#(S{D`wJPZ1!G8YyW2OjvvGV%
znJ}8$2s8>$gP!8ZC(aDYcG&o9b6j|ykM2rBIU!ChRvgXavE-({rm#jGsg-`d?P72<
z;L`T>*e5Y=M(bc4N|crpMx@zD<=ag!E;?e2$0gcaVxmeNy8dg~<DBF=efbu~I(Wyo
z_i*UZ`SLY?%Xj^;=cBN_3<$J*6Y4Di<z<K9+q3ZC3!$~N#QL$Ln}xDCEt4Y)uwdKe
zKsv^;8geYgeSdct26`%f#C*)iIuy%RbrS5Wdu%CsK(N^JkIf}OYj_jB`&8WEwFC?Q
zjpl?GOOYgPv5rb~z+7_k4~DS;nbFB25<Xbc9o%R<O*?Ft9BnOcDY+J(EdiTmPk4vq
z&ePrwF#buCYz;7)8kni3=s8kd){7~t?+oIIQ<qhA26dU<p62>GfAsfh1|=!ylnESr
zIpsfO2b*gCscMd%3Z{nMl04IEmhT;FeA9u#{#Kyzil!>t-l&>9u8F9V`i^V&1;5?R
z1r1^1-Uqe<3;%WBz~hAR-m&VRr2!P_)#gkK`Yf>!cO5~;UbpF0KdB3q4Jyu=!v%j2
zu$?LIw2)1Dwsp17aU7SjzB4fU7$~&i239b|-&L?puweTKrEFO`C&@V{$;72dnY^IB
zpeV!^=QbzAIl{G|=swzv`+v1>ix$nzs1$Z(<~!kJt?7vg5w;XU{HFlapL3aB&2IVf
zlY(mMIxX^>+5=st5_fBMuR?Mf(9j@K4A^Ay1!rokPo-(@MsUhuXhUg;lQHN+rjDsP
z!X{WKk&prAk}a;MIQ=&Lrs|TOX7d_reg7|>n_BRemInTx<>>eW`FV6Wax4v?M@BS_
z?$d0Daf$AWH9TsKrFXBI$9b6b?Y7<7%Z2{0C4%zp{PFR_gTeWjwq=g_;a9)~Z>lKX
zf*}8(fF9GX1v3SzOc7&Jdnv?u>cZOHf-R;~q~qGfOB%zas%F~?Qc5ij*GO$9Ku)Lp
z=;PeuSo```#BFHj^wskkyKN@6^p|rW=bAc4T;RDaDD%M*|5d2{?`9*jng|>hM#i;@
zRw`+lDH2hZEQC9;!MWX+yvqU-$ie;w6NmQLOA#SYo$R&de-EawDwaJeezk2{J1y_L
z0IhzkjU8}hgj>yC4UE6b_wf4heZS|YZ&0erdw%mXe^eCWgt$AGNBL=hz_=69ew_E<
z&9$`xPd(H3%+b;|70N}(S7CYq$MUYT=#B-qref`nJ#AzD-}ZD0eszAdE%3MsSZxb@
zT9Rm6l1Lrl9&wIaP}8#q2A;+>#_ryJ7!m&q^Y}lpkk$Aoc?IhYEx)gPt*Wmn_g<9J
zPl$7gNJCQUOHOIJZr>W2vgW^0DN>aOH1wi}WswdpLR#f5ybUF>3agaN+mOo0J+J>k
z>AUkCio4(t!|P(C4_CTd5NpUbI4j<DB;K@gNpW!j`d+NV`!Ex{Ep0|@9ylzrf%UPk
z?^l%0N?KvWw4ET6^-?J#+vCLAWH`4&mM;a;{fg)JO*WhsGX<-RVI)7<&+l|pnDEL^
z`RV^bA=4q7+B1*Shn|M}C|%_IR3#VihD}$r^|^(TX-Tm@pPg*>m<&6Eq%K)xw>yA-
zTa~{Yy0uL6=2yU<exm0q+tu_IYGVA2O`lYwBzsWOq4q(Ci>jaUFSAya52)PggpIK(
ziD^J&dAzY>_TP0iyNaKy!$$WgoWQAU^$M=*!<EqdTcX7rI_SGiRv;cNquPb2u?=$B
z^)L#a$YBkyaU3~%Fadpd=CqUy#ZEY-!!+qm{A%Cd>~L!oqC3~M!SsTRTOoIil2nM@
z8LrFW(T`#^eSOxYu9h%KZdpR#c#o0pS0smfN&h9rSLs**n4MTT>XiCZOTk-b*Pc&E
z-oKJHs$rQgxrx5e)o#tkt5MIZ%HmNKFHfew2t&$yDIXlHM6!^3x4Yh7L8=N~?urvJ
zr_+knbz1Cj5=}FXMJ6Rmik{l)+Q!@y)cc&CV7k}rmok3MIv;H6Gsfc=gVZh~DQWAg
zlTw%BIG+05F?IZCJ!?-@^HX`Q46EbU4lI#5s+xpU*^jgatF6&CixnbP=sY@SZ{Yrq
zb|oQ8Wu)&ky2t?kYZ}84_6X2>;_^6o7deN{#h-q7K{`|*mRAZjqbo^R-tvazmoHY6
z^B^2MrFqr$r`?=tu}u%`LjV!F?9A!(;N4kV`to7o(T}GU<qE@-{qn0Dm!mq=RXk9K
z;%H4p`<TxU=!vTGzx8;|rpyw?G9jRqk!Zti+?!^iEeKjonQ?3Hs42qQn1ln^tvEd@
zMxJH2fY+mD%C;BhP(FkqTeI)gcUp4EXiFZv!)@Hm<^$U~R;&fq;4KSJ4f+;Fg@Ik3
zKxrsDI&K`Q=deb(=AX9ac6@V@(NGh0qLh2Xwv^A(d9qA^6p4Y&lN*sBX`plbU}d#q
ztg}A@K05eSj%sfPh>}V7wxbGtSETfJz7qX-uZ!QJ{(~}ig|&RR^~C?d)e~f|uQI2(
zA@p_ZGsV>JH7b;lMH_h=cnCq2N7E`F<SZJ$toq69xgw6Z==irwSJSX>QJ+*qzH6(s
zvUntNFq4$)(xX#IKKO8giNaVuJMTRR^fEFcDM{9_<GU@{VwOV`;27#~3ZEBgE$@-K
zIi{m=cFCijra_?iZH3g_;=YQ6+rSwR8dqb|gOC!D5SM8tGp#>#3d_7%m<l*&FQ~`%
z7jSlWO7c2PthuqxiaF**_5ps~X7JjfPbiBy&9RbzAo4RNHyM{!j>MPch-|2|ZOL3f
z;6_#{!T@!id@UAruxi-#N^(*?xx^U6>h970G`7RS5svq&)C{tmlr+1<lMdULqwXb9
zTxd%Q+>)KL*L5+U{Bk$e9~bkc`Z(pv2NOnYdZ|1Ovg_@R&>wRzYd*0VB)7&(XG4S3
ztV=mFG4p=QVyP}Q`=d^Dzphva@#3ohR^GMu+Qp@_5(`EDZ0F5W2`w2p|K)Q_%N_Th
zadm(ZinFJj`c0)J&KGZ8Vwp6pU)d6pFVw~T>o}3}SUzUTlm2V}^(nuf4IclxNAqPA
zDU=lJ19%>{Nd~x*yWG{zDz5xZf}y$|-E25q%h=KnL&p^>Q%Dv4?jMxx@Q(`WQjI&V
zlv)j|%e)u--xTgJLcIGqOmZuHb=jTKhVB7|(nnM^rTQF@LCK5XK4Yh(45Tb^f@KSS
zD3quPyg`U^Zc}O&o9k!D-%VF3uPzo|5^RPL-F|vp8>-`r^%tMOy627d4EDJ*=iZp`
z_-i_Ig1H~b0{JDcY$rnb*1hlLweJ;Jn36bYJM@I!82a7Hg1UywBa)4J6XQ19O-Z^<
zHwgcZ^oslZ@+=!PuI|OZK^zG|I9Q@};-g(NDHTn~&%teOVtmxSa3o+V)fl;^<@$4r
z+hxAns&Z0)=Nv~cON+eXbT<GM_>6srWwF7(Tu@okq@1}$Ocj<C0n5Nl(e;yJ&lrEQ
zpM`;}^J23hXXLc9_<F9IJMG4A{^`qVTKwhA!*T>vKo~U7+y-@mebLY<X={I!;rxU?
z_3=OlldM0X#TSX5kv{Rt^Z;fbnsOk)Kz$Q^@CQv#p_id@tBu0Ca2v8~()yTjQk;m_
zJSI1`dq@Sx*uM>6M=}Kr0>-8J#F@4G1~bjO4v7RH0&ZglX*68V=4<hz9bx#0Xj(Ps
zp=syUzq2-(-K`nx!7Hzyk@;sKG7(NE(jZ0N(1(E7Xkh9FgJ%!JW)ARFu0>!R!-11<
z51eYnMt!2bo7coO+H97*EV$c>g1<RbfA1ktj5jiybQRCzkQ;Dn6B`|P{r^V`kMMmC
za9GwmTSb$CxPrCxaIlcf;s>(c(5f<j3t-0z0^`&%nCCyTHcXcMN?>)lWEGR2s%Uys
z+gDqBgTnP*pl&Lv&FErO_lqWs=(8l}-1)S|KVVK&Jnx`S2#ZYz;`G*cKY8l0G$uOj
z_BF89GGqVH4-Fi8{gE^2JM^#F{jz#PN!(Xp!atygEb2yC4()ZubWyAlV~;JqtdTL*
zC_92N@HCMHjA9{e(q^A1fj$qKf?~??N#O|#=XJ!LUDtHwSHI|`NkwF{MFh+8dd7bU
z9&V1$JNZ6p@=+FQ#&7dIyYE(q4wdzTr}WDwNA$o+B+v`>TkQoGJi~4FUb|l}A)kjm
zB1DFBHmeB^l&d7vMO5;UdkVrVuS^W?eCPp=vI;|Cp(dY2Y_E}pfyJm&N2kVkRqmo+
z+x@QXbA`P2&Gnc%YpQx*JzD1$$rcGNf^N_(3N>fRId3q`F?YWm>2xMki`iH#NEZ*7
zVPgi&(#gwDbti?#&;6Z~NbhVN5WYB(NmF<G9e%6ytBgLfwHASUqhs~U;;n7*fk|~u
zG4T7~SamfhO~2FI6^=L7%;kkL*@mh~rli<3e5sX5a43~hYZC73HP!yC^pU2<Mv(B4
zUU@sPc&3isDpBryk6{Tz3Y`unDK_;H;1DfOot+J6NmKiB4``@_8mgf`vpkl~nyLBq
zr-2bh(pWf)A}ND3{e>Bs4O-azwv7enQRqHRMG>^crn$CC^<Gi(7|No6)R54AX=O8H
zS!DFvRLQL){Fv63EsW=@u|mpF@s5F5?Kin8Q}czuTX;e5lDHRa`ZWEj3ws*P5-*l{
z_wF7J0&n3BcSC)rzh{5$b&&B_J@)5;JY+VUvGvo8HML9;42;zgkM;)`NX8o<72y1a
z5$6g0e5W}*U>;lO#@AG}yt&11@{WrA{kl#p3Rn76xN@Ni7p!nM$oJLFZpq)|6O9d@
z*25P~$+p=6=>GJjIYaGj9Ha|XQA@|nFS>soaNkOae%_!*Ovp%$Omau6e08@E?`)OD
zRKvLLpTe4g*L5KZF-I(rrnhGdq%jixGy(}(?!Kl{-$IiBGTL_k3CB7dEubegJ5Nn%
z*?)9-p3wg8#L%B958$>p{DC<eq&8_zlf_O@Ie8c)8#$;Q!<8l>38<&Gg`-k)Y5r=^
zG8c~S&?HOWX>*HP7-v{3^ACzp83V&LG+@L7F}`&X5~;G}A@#^iB~K#2I+W<1!9BCB
zOh+4SC~&R1AUP){QN*;GoV;#TD6G}#0gCW6*EQ!#<KqmNR}$P*jVqT=ps}HsJyx*$
zT@HN23XPmTC#2mXJ`p&}_b#sru4VlNn{XzD-N*mSXnxQ&`s|(6W&qVxD2gX6o?4zY
z=)6jBYoCTtwrTC~oqB9vo!}zsSJ^ifR%{j{NI2l^YHjcoar$f2@K4&(ZQsO|pH0OU
zSZ9cnr(p&52%mH9*p=36n-twPG`Lqt=ZQ0E#l>q|$$;4*NCCk|kA;{$ad4VH-O8=A
zhxb7}?&=L`R1isXQ&N)^$w`ntz;TV&1bE(rr^H<=Oyp>Ar{>UzLiloOe0e7=%F$EC
zuix=Fe}a83_#rgkXlAzPjdnY>()+8N@>{S04Cov-bgayH$xqls&12;r5Z>)6szJ*S
z{mB%^H-A7-T2#A?xri0Pu8bZN<&E7y$G{brOZ^Y(0Nv|R8uM5&ob5iuC!|?Kfs5g?
zJklhfYGq3$&epKjkO7tnf8t}JrKJYlJYzz({5s*oOLpChGAjF3wdGTpElD<ZM<=Cj
zEn{ULFddylo8_vwdUDb1l|>huf&%T%noE%P@TeStD@^z3GW?@t)t|Q&IjX7_IXI(>
z!N=b#h*%y2=`55!l3q^Oe|1c|UEl!S(Fv7cHbVpCyr0&hM6zXh2$-5f7c}KJt1@ff
zonXtEEOFd7KHX3M`hHrMe?0cRb^JZm1`s>8)w|OkwzgMH*pM(f{>mE8+Vli4Axy7N
zo8#*({0HSdT_$xdAH-NxAb-XjDgNO1$;<l=Po}voc-(@`>u5BNY}u@7{9=Ju-_SoG
zb_z4!js}p=Vu`w@mEOBJ4+df{Z5?+7c&r?9VlTg&xespD765uPUgSR-^-uqx_;Tw{
zJmPg4NA9heUfO<4A-uUZxIeGW4ZnaZHF#fa#iwL)d>>0FD}-YuSDl_71LTp|NOD`I
zQWPdMo?LZx+b;6NjN|^y4}OQ{$@YXBey$pwKaWAnkD6vGT!A>2Xm#476r?}fwLEiS
zId-rG^Li5fg37%Ag(I(Y2d6D99k0)T1bE0Si-N<ipyAdq(DwIHM1~_LV{&w)&s{s>
zacEOzF~?C6`Ukc1A1}|%f8LQF4VC{qUvg!k3~LpRY=eJBKi2pajuJ6)GDuB0M>JDf
zpGk-$^L1+KckV?JHGb>_cdFSm9!;_#=hVAiQF?I+#$OgL#gscwGF^S$k!l>n!jz{b
z@@lW_RrN@zRTFLoitHc#wUTWJlrjDulr|;i9<t_%?!|F;JM`Q(5gi|lRY?~^HmvV*
ze@ks|2Zojxdog)Nt++hGinZ`3<Q07QuHt3oqM9darQR<QHf@8syF1;ZB0m6NX7=(z
zpMXiOs+02rev^9gW8(oaFN|U@Z`-cqVsZ?+nxC;`!JZJ<<LOBT!UM4!Z<up{b9o1c
zrNT`MV&$z@*L7iO3~_ah1!E${ggae}bf_;(f}K#&3{!gxWie~0!~3yK?V?LK32DSI
z7#ve%eIb*0;!t;fVb#DKJ0-E1R%aym<dbi!&_mUXv_}#&h#c<VN@Qo(Y-P2~a5SI-
zGq>{4=H9&Q7AR@2q5v{?d;D#HDype^z|cvY=MJ&ZbFYhR0U9Mq$<fFbAysgYRKwNX
z)NJ>SJZ1YSmYG-e;x?TH=*ztc9yq_pL^p*BC+9Vs7AHqfmR|c<hbnYP(C`ne?Vw2K
zr`JAuo(B+{c|=S)bajAZ8Qv@Ea?Wk<OD_{;D{awnUp|`%HPkccI-e2HPz%5tMm8G(
zpLk!or<zDU!mAcHtE+Q*CuB4~sV5L&Y%JgRK>Wu?(yl&h()#-oo~1-o#NnppCuOH3
z&|&jaD)D}ypo?RTsjzb{kGq@OnXo<YNK31b1{8OA>{^PtEhX+&9Ix1_3s1#pS+FlV
zYuu`rqltVhuvTKu5u_?SzJyrNmH3rSWgeePjW?*VBc7XC;zGBQ?{j;KC#f`|NR4QX
za%l~#IPO8rG%S9DuIXJx3XaA|+`KFDvb(m$$-W1CX}!FbX}6TKiOUQMewp?I(d#GI
zPwZ*1f<(Az3|$0jt&FL1u3)X6uY^YNq3H6$_!<M}xySfR7b;s2j>WHbrAUSB4?V=6
z@rjZ{!u^f$)+A<)?}rfBKSSVDoZFA1lBrL+Q&U_vQq4SKIyL#0SX>=Koh+v+6%5p&
zGw220(0&lHDBqC|Hy|u~wlF~v32CjDWQ)f8+u`yAY}YnCf5F94bxCn_o}SDv|F|)p
zbYCQNlU3363#FR^U}Qf9TzqL9h(GPEZ!E8_o}JPS=2el&e#hk<vXO>mn2_2pJoClM
z=QdCww9PwJQv-U2M#@c}0t5Dw*gHRh$9hAHmGIoYAuUC<o^%zmBXfMWV#8sun+Ndi
zF;Yws(VQvU&u>Y39M6r#yR){*J}+PF_%O2?>HTp)Hd&%SkBeB1DCO&*z)oy%h}efq
zv~6<SJlfdFdIULvl^s@B+*Md;VOrZe@_`7=UBulv=h>8WQ)X3v6(Ert_TR_xM}D0y
zq}#NnszS>*J47zJdd$aWpS>QgTdfIwTF-TPgXgR028hkISnB~ziylADPR*6)C)0Cu
z1%74hcP&mGX^bdw5z|g~hpba#(73UE>TIo<YbK53KIEx!Un!iW6yMD%GR#*ujkk^8
zhxIN5cgK!S1HtZ9GysMQ7o_-SwbeJXZo%U^Jo2a-<Z1jpW@|qPS<vC>=>+Ws=+OU#
zq>hZ@W#<`G)9C3krv$s?sF{X1PMf|==Gw%k1t>|Py;#cV?bqK*$HG!K#oGMY+=vJp
zQ~mo0p}aE22FA{TGptHO+BKw+crjU+PkOB}N%D?SExaD>gA%Nv>Wx0EmODhLqhD<+
z|C{&Jut)zyD^P^ttv<Y*p%FaVEdAvs4b$9%uSns39nDNeeq330T)-JFwz`4#V_eC2
z^UwWK)^8^9YPI)z?7gI>fz9k{=}vwZzdtX+t!V8q&z}}O_7__8Akg9UElJD%bQ{vn
zcljp5*#46wtNnsfp5`}LzRPI2rd0E^>qaKiTe>;=6o3E9$&;v#Nr;d;E5_@(oc^*E
zD%sfVOL45|k9)>)d1lsg>&`2}`T4%LU!BEtGXM1BktL%+*%>j_cp}9lEGlW~@^Pj^
z0C^37Vul~MCU&d;7VVQ*C;mLm$3I?H;-TI&;^a@JiM^2q|CNc;7^=2U$z{N<2*nyL
z=JO98H=}eZ(XfNHF*e99z^Z*>{N_?nop6q0p8HaZtw-;RG*7csbrP9kWu>S%AA|s|
zA)45eb!U2eGId(N$(;P2hbdVMn>p1Th*8FH;+P;e<;%a)_|n@<c93-%$;l~Kkg{X@
zMQ*TgJfVK*kE{tMd^CGvoHg7DKm6|TFlEYs-TZ{@wg|yhsy`cr-kZ}!eDU7&O6eKJ
z6-Xi^-BQ?f>6e6})?PL*?=oYM0TC}~ban_;S^GqEm76PnMU0QD*YI7K=N(EgJy6Af
zCh)%^S~mgz@3}u4*Hm-%BjQtYC+|NfwoK@L%i&RL(Z$4qQbD2dMDXC0ZFJkt8^)E#
zi{;_lR<7xl(0+Tv<6Yy;${w=H5zu5(c~Lp;<@@jpfoSBL=io;>UDjXqrQ!wYIiVx~
zv0&zn?&{sT@3-#-U+7QYynbNr?yjBgDDXTx#DVx|RHaFj9I5VMUY2mCntJ=-Gkbbs
z_R&8mi&y@E%;YUP-)a|pIJY;^GXD{rJ@*ydNtWmcD5kZk=@Jjr(4h!5{n(2tYhV6Z
z7amg~$wo{+KLW!X70>!z%5-fayajzBm%B)+`gpG#kojqoOn@GK?aRnOLJPElSZ0{p
zjQYUJe9XF0;m`8vUX2(PE22_E9*g6hoR6SU{vB%!=JY7g%GIdwohF+mVu>|UO~ufX
z{wT{#!ly^Nl;H-mwNranB1yZA(~+|~abItH^$+qgbsBgY{Z`<@W;(7ulQ_mgrjbXR
z!8yucVyBv+AagfICFSdG?^M2?`AN0Oy2pf&13&shs(z}mK}Q;clH!r+1nZFe%~=3B
zlkr3=z#FT^1G`NJjc^qMY^=fhSXNlOtUKXax>2n{MtXtb%w%35&HF+(Sv}bVin)C~
z32gr?UF#s%>9d!SKaS8L;`+(V`yW)J`8s-@s>hQr^Usgp#cwd*Jndc>LDYJt_Kk$m
z3?rAtG3R}p+30RVVNLSlcYSVdjg0Gc%D7AvHc1b!Uoa0>gqATOUco%%=m!jfklz3Y
z)Z|BD;y7Ge5J%ZHi~8LUEbo~Op4kf@hZUHNeJEXmB2wjvL()iQxNo}UvPf$71|fRv
zPHWZIHGhr|onFU;SGfkh@h?g3sT*xX$BAlm^iWxZXvIVv1>(~?if?e;uj6;OOAU!@
zQ3rdA81Pu#mp9p|Zxo;SakXsWAA%JY8~i6Cc^Ds6Y`B$87H7Lp=8o6TgY+mVsb<$)
z_Zyj<1RQ05-eIT+Vf$jyeKzSPpWfKdnF6`yrT9-xj}tFFM-|i}+YCnX(wdkv_<l=g
z4&te+U?-O@PW+n4NHvOPPl0~9E+@rgzP7E-qb9i^64Bmi)8^-9Z+Z>!{aS@AgH>EL
zTl6k}^lLNJ8RM&_BxI;eHSCe&8gpezNiIWJHr@#$#db`-W)bfbef#NH_QYzY@cA{1
zP7LgXwZ}(&fBWvxa>2lH+_4A;mm1nEe)jONe5LkNNlV(cTb$W#?s3>7JNDwn>LR+v
z)*!Lvg(c0$PbQ{-kDWgM0DpdZ&)VBNah&qmogpYqb@V|kM4L%*?;}s^#aBbuw+r;F
z7(mrwyx|`{G1}_z-urQzvV4$|sP~dc>nCu5&V-U1UmN_>y<KKQJep7xx;ajAp@R>$
zQQofR5HC$be_`r=?(gdda?V7vYz*~T2%g0H#wk#Kild+w8eBhE2lS_+5ka(9)mDT8
ziL;H)vkjxhFPe<6HojJZx9hB(ndPVpq0iziSP$}$K-MI*-;q$&bVTarnKVN1ze~y~
zj27OacuMQ*@Hq8mfpO&(`{p&gbUlyGtBeV*H7Ld?qv02r>7TH$%ak3PmI2@4z#erW
zU3xQ;8?<aX6b$yEnvomRz=x#+0!~q*FO4+AlRJKa&K0QfE3BA%{JNZhV;)R}fjP)-
z3PE?-sHMzXj%Jteyts$_r?pb?YV*48`qVWBxvertCsnVoRfo3TuAdw{4iEHNXT%}3
z#*sUja&QX@X9QyUD2jw>-CjzfC+3zM4Afw~()hZ@YnH)D{pZLx-p7AX@SegZeNtO8
z{vU+BIjY|=(hJk`R{dl^_8Zkf@Kc}SU+jYK{!ABte_p0N=1#KWp76(NAsK82UjR}%
zowe>pmGW?h?ou5kPId2K<psM?Gh0Q;^+5o3Dgf(l3X+->2Sb<JG@sTn0!kEZI8io@
zQtmT7(h;^BohSMCu{pF7eh*y#H=A{Pzc6X#_jv8w$&*?Or0rigjxUl{QZ+K`uTyFp
z#Vw2;icM%Qs3)B$<yRn>E7|)3PG^sA4H&7nLSOEf;ol0r9J6?DjR$`8nd$pJk~U9L
zj$=Gaq3l*R9oiWMJjzIIf13vTN3jQYlRfPTeRp?1Gf#XT&Qkm-u7v=SV?)EuKtE<P
zj+o|w0AD-ykqcigGxctvDr92)rC-|a;*r^A6VqCR4c^ROyyK;sD6((A`H3VZeq46v
zKKdVgjIeI1Qr{msG$qu&XlYh-O<xjmF&14L12C{0{d7CmB3iH#G|3#`CNWx3v!Wt4
zS)&ExvA{D@e$(1V*{`kOT=@Q%4EGoD;tK)K&bpZLU*)T*zc#sXB%rk1^_PY7OyNyo
zt@VEK)z_kwd~FrCQ2t_XqD=)#Xk8HAdiswU<-a6`|2JdG9U0YZx+|%<9iBBDE86n+
z{X<JjcBhZ?B(FqDpa=fGUoi~-OY)U)tagOU&2)B4lF%W&>oj-XV`xi0RN%`oZgNL7
zvYukF@#}A2QOh5-2s==)Vz9FCvIr4oG;3|{FdO-|bnOGj=Ji81hw8QjuK__}*>x9D
zF2OG)PIC;HcV~Yi3D~pqkP+2CecI!`OG4$oioeS-F2$MtUKzeBs7Tb4IrB|x7r?8c
z%;?^qc7?%a&mAq4OddjB{fVleKQc~pc9t1=OUsqp%%db877)H^E1k2Cq;s-Md<jGh
zJ7g#Ib;vxuQOY97ZOCrVHl-(^m}yn-=&DR8qC|^H3Zk-+MlE&gwp;ipcV0Q-<`oqJ
z{1)yUC1DGQ+v6y+2@}lmwJ{J(#9;;Jg3b2Dt;7XTF<krO_|@=xeP}4ymw-ZDbiJLs
ze52&9B<zqNPl=^_e~5<hX?d+8q%|51XmtwwmBm&4E&sbD^s4g}h{<d$K;@1C61j{Z
zGQmKb6PG;V)tqsH`zMU)y{DPx4;Njl81wG8D@;ro+QNKs6)E+<==BxwG8RPy!>x`{
z)Gv}pyVf`_$Arm14Ea3UfJ7u35Xlry9P&_GJd+8#o3f$RzFMQr^h6qwv9=D?r$}~f
zZJ9Yp6wf4@q$IYyBIlMJ3G{8)D4s2<#tT)-6sgqI>R>|qrp6t4qb<f1;&7~Bo-qS{
z6AQ(fp!O|O>xdp@KF@-H?Cl*`Hfm&b7Ms&uLIwH+?oh_)H@kx*TyR54Nqu$4CzyQZ
zRM%?M$lnv}FV=>>06ynDj|bglx1I{*A@tDZ)N=cIDvC%C8w`sQdMdcW)Sqrei+;x!
zO%cv?et;_8|HIx}MYZ|9>z|ZTthl?o7I!G_PH=Y%?%Gn^U4pf^2Dbz$?oeD(ptwWP
zV&yy8zxmI9?^(0=nmL<&uupRIX1yy<o;P{!`@XL011#uS5Z2uod0eUOf|j3sS23JO
zIq7t!zy|Ej6e_4h6Y1SHSxUE6*=}NK;nh9uTN`@)#?@fjvnEmI#?8!kEjeyTG;N(M
zbJFUp=@_%49`%@K#v`Kh7Gzl}AA7SwP4g+9?l)4Rf2U+2GdyYxPbA^fI+KJig_!yX
z-kbx)I`$7bBm+cw#!pF#YkZ8$SUwMEiFJAVA<R}H5i*^8jnbv?eD}PFxa?p~f&_q&
z&jzQ@jE9tTH@j_Ax2|ax%x0ThFl{Qb&<9J2ibh{6VcO^%zf?&__Q<b>8Jc7Ygq{n|
zNwltnwl>T<T-t+U&PCXbKfI$wc&|UmL_1Anf8X7?uZ`T$A2+?0ps$d2qByPAm8`%R
zv3UUS2FF*n-zkr8Da6@2Un1+w)lwo2<*qj*IPZ~v2zdGdMA642omE^;Q!o3mcJ+2-
zdVBTxbrcJK25Li)dgY*ie9kjZPgl_@Ml1MEpK7_vsxChuZQ%D(?e<Reb;&FxRMpPb
zcMD@(NY?<1KpC^Kvg{;C<{?U0C^eRWmdNSr_|Yw4swl->rl%35q_aLN625nGa(9}n
zLCVmcy|K^$<Q$R<*TI*(EI%b&T3ecj(-@Oqa^#vH<i`2mndscn=<0j&gjPx-GYHy&
zXMQj2*iqPN`cpN`=z!i|ZBzE~CVR7<Cu<Um%{w2-QP0&HqqjKXBy=`7+csi2D^sw?
zJTa}<nYPbB&%uC^)TPjJ+sG9OI_Y^z>RDXCVu<$r&J4OUIb;?Y3Cnym^|N_TQoCj?
zPUjAPG{rO{?=dMSq4R>@$+yCc{S`_QvaBEV5lOOjREC7M1}0I1YLf06?9L|=pu+c`
z2gq&6&@V-*kxve{tttTU!E-gc+jHaBT9sEW89GYkwJE5X;>{5ETs$>7byU0yt)!N=
z6hm(;Phyhu`SY;%MM?7G{qBNWWblHt$DPdb$gNn{081%P^|$91>0{m=HeDK#t5_Hk
z)v%WoUTOC48y;7Su7RXGWzIi7FhB(3cXyUN0#~vASplpMd4y6Jv??#Iq^wpu6>Nk8
z_*6`91Oo6ec9cs+4$`1K?%*!>E3cA(&6cnIuIrztE^<Ql#R8KEcP8aVxSY7mc#c_k
z*xFW)T&wt}V?Pbq+WxFnc4FcrO{_T#Pr6Mu=JNpfB>5T^3|rFjm?cSaIx^eu7i^n>
zGe>^Ww%y1h;%Bx_S7uYD0duu88TZK~ll_(^eN5ZU7)BZn3neioYT4Tv9UZGz=0-5e
zQ@gEVm{qA4Y~OH2r;FjXULlF@%PH=clB$Xt*dNhFBvbJ#`-S54si4X0C10R~Jk&j6
zkd7@52^>wJD`h!{l;M2R=lzb=tQVD_ZEIC-y(Z;(Wpb2mQgseaKuLV>%TjvH$0xkL
z--`cDm5a<&?#VUBa{Je$m!vD3$P$@`7NBA7iX%zjlPAZeuzE!Tu)s#t+i6q|^*aoL
z7mqYCSWjYnW~sM#&Xf>|NM$rP*uZvjdp3-Q{5&i(qc%FB<hae5Dy_y^;YU}_ft5{2
z-Yhd4Q%irO_%`NZ_tYEl79|JQ$$@Yrwg;!4?!6zYb);VF&BH?+alG3aG>d``qI~~H
z_<ORNw3=s6%Ui=*wpWsUsCUK8=_i>IL^aVOREp10>kMN}d+Y(X7D^nC1<qba)lf8K
zn9ctecXK-A354FuIVW0F-gER!*L{HX3HdPW6Qu?`IzmOUPUR(gn)U5Fmgvb(^1G;X
zW*Q@18}C3|TUe5KAm-iliQ@8h?3g;`kWv^ie@M?ZzMrPvL7_LZx!9YbxuM<8YTYlT
zBcAEW4nHv)y|Jk|u1<{Euk%Z`hk~1Gl8-(0#4l&r|KP&=@C-)cA%sir0}!!q%`Q{A
z{rBY;y41+Hn)ztZkS<d_QiLmO^h@d+CkM<dw;as1`2urAHym%xRCmUnw^sVGKIOdL
zmi78~!f^|1XRR7bt#xzy?b`RrXQn45H>Zj!O5G_wwdaNx`zT>0K=1Vv$z+QP(aH&8
zX(Q`Y`|q~gUHrkd57}??YM5-@zs3_KHM+(H{u;8c%)wt*kHDL++1=SEX!olmToh`f
zoXcu>=B~q(VRRRJ+y2FMoi$GLIgH_Ol}<yr0wInG!zWHSp2=h1??Brcf<07wy{f!B
z?O78>RP~-bjug=#>;o#(aQ#KTjkmV<=X>}RisC251*(fioIL0?dxb<In497us(Xk+
ztwq^jT3}F!<?9v9f?^rfls)ScD_>Y`up0?)0d-=~JAB7$^?ZF4wbrEc+?0X>uivXl
zr9l1!>7D5g-S?a|N=^{SL&q;Dd4}bQWeV9}Ap_GG%1@h1H4ZKbj+%u#XA06_mQSA}
zI{wHRonM@N>s!_v|4IuQ`QXiwJSnm<PySR_4ONrCk$sRYif5#wP_PUO|8;KbQx3Hq
zQmW?S<`h9cH|oD$PVtW1V1-cg{MK6%z~A5$U;aHUF%df(<?EjzyL~L#A8NDIXzA0!
zAQxDSlA-t+pE2ozb(icKA+$R;yR<P~y;vEl3INz$Cva4zg?+3EM7sltE%l7CF99x9
zc1}wbU9x>`b~M~L1hI<=SS6!c@7i}M7Sj{SXk&r26x-_>E%ac#3Dv;F{nQycHy!#t
z*w;2sBVYcuLAhpx2A5{8pb|D~n^RMP@z?efpi39RBPnh)?uT?QFTC-tf$3HHYp{7L
z>4$~_^|v-t?leAUPA-GScS7D2e{}*jNe>rHcov=a*QXc`B$pEO#RAH4mVq;?lVxOV
zv%;Q5+S^~;_`w?y*X7MtbSCS|(ph>z*p>#4uUX|$=b{)m0ZZg%x|Oa*Hpo@#!ZZ=d
zR%kI9Y}-TGVDh5|K|dhjG()I9lhkAn_2fMQDq)7!ioy=>a(UKlyNAfu5F`l!nMt<!
z{;M}7Yjny|x=jpgr+R6U0L;SFy!w#C!tqw#f^iR*cOe<!%($ZbI9|n~1kTqxL`#Xt
zZFPOa<=fM>IYAjTd|PKkl|n5q;yf&G-L}PxnRbW;YM17kTppvnx<;8auoXhPEoYw?
zxht<WgZT->3Z$#0Yv|oMWtpqLwH9;{?c98r3M8<}nWiUp+?Vj#d+cH>3sFP=dSz#M
z)BPnnTOm7y<Xyk*?St<$qwc73y3**X!iOeLOao1$#1UGmT0as+d96S5vit-ggzP>y
z7To&3a|q1->aT}#YWiF<G!0diju6&TQyeL$lHJ+K5;M89pv<nS+gju1KHKHFPWlJi
z>>!gEXED^{T4@fw9IML;n^S~xpwQoF;64#PMujr-l8X0|mw~#BCFYNU2}gSG{Z`z~
zWuA~S4UX26ugf}F6zVyjJb;JG5oBgqU*{)Np58?cmN;tGni!_8J~VTHXl@Rr9?VuA
zRA0DUYY3{z+S?Gi7YF^&G6kcSMoi`Bjsn$$dp6fBG#TLRm_v*6c`N97DF|xp?N@Uk
zw$FP*-rDcLov#!6&T7RA?#L0C_gsO6!3c1653@}FXz!Np&Q=~dmSC8R`X~tv%QO7?
zK{>@y@Dk)kkUv)hyX@m4_;JOkApcUk()LG5X_-bp6Tog`DAU+4C=e_;P}_=XI+}=T
ztcA%TRZg3o<u@TQGEL}Qn<*(-b82ip+jX);kim5QZ9J6HO2)@Q<L%}j5dWy~ja`%J
zsL6d@Yhb}NkjjWe%Z!p@1W7|bOqylv9=#e8Pv2YLJ(Bu9ZX|_zof2)V&}R3xT`p4B
zo-e0^(d&<J9qxyHCO+6$RHJ{W9#{0fP>zOx-7bZQg__%v-pba<aEYfG-|)^q2+dEI
zonoi<(KIu+U{|Wry_pQOM3SMRNJBTj32>?iHkhRPO>0d+a<tpFlx>g+S8*ikw)4BJ
z1pk2LU_|8rFPmVp_Rl$-PscO&0z#IZZw1qtmh*F4T}o_TG!#Sjc9lk-nGRW%PQc?Q
zotpNBrmyq0DofYX#=e2Rco*Y!@eV8y!ThUP=j&hF$2Uia23CATPUT-uc%F~unD<l!
z1`lfX0g`Xq$a4y;%N$=26=y01{f1ojCu{3y+Hg%hSPIpoom}vm^wX8PBOu?J7Yv7S
z<^%0g2ZxNRRyI6~xk_aLZ;2JmRQJL`mk@2FiCRA{Y&OuOIc8cmr;hTRs{R)!mZo0R
zg^t~a7BuyryxMx?mo4ou;Y+umwDKUX)9PS{wj_uo`Xcdpny7!ejf+e75Pv3^`zxEo
zdlU0o!%WbJ34z2#S3jffXUC(+44+Xw18r=HrPN`q#HF0|jyzg_K}9wzQ$AnEM4KED
zR}438qiVYLG(>WGtCgEEhPb!6m8fhm2dV=&*>U2LEzC}PlD`5XxLDaxlYZlDV$n-d
zI7R&7N2V30Hx1QlWw0Oygd)8))j#UzpcBq^%pgoLoH$fxcK_c;z5nG1m<maW5@@8)
zEsKwjt>5-nknmd^ef!5oWqd;>-Qd0)st77{q|aUnam2|*mAxMzK{V+n=SdQJg~a-o
zAIiObKP9cbVZ%}Qi!IbSr{|2<B&IU_;%`Co%t_&Lh4+yEoFC@y7S51aF-_gKEbwLY
znJ3<{^idJg;#Qj2nq-~wcctOywv;D<FPzs9??ASDbNGWXanW{_v+38T?F7&F9QsOR
zL&P7`Y0Cy=53RgKnYkD&u;HMCv?O0Jm;|aWr#B+BAbcBWpJ{i1?DBQsOEbr)&|nva
zH0ppPP0l1yK1(vC_>-iBW@M570{P|HXb07ndrkJVc$t_nsPv-Jw^R%KrA;If!jz`W
zp0tRM4$*5o^WB!!`n+pI7rQ*QSDxWG_+C;KK&ZJn<9UMKBZSv6QuaQ`7CTdhxxyvR
z@cRvnZlH1xoE!MbTJfaa+Q?iHYfvINEzj;M)j@K6C~SS-2mbq2QcEiu8$l*>IzQeK
zH;Zucv#su)op=m`e=n&s9Cf@^_Py|N-6^NFCu4IuUy{|vzQmt-sc>&Nw&Xc`^-|zT
zr~ZU&=A1#@af(UmQ-URU5(9rDv2O~PqXSh3;H`RXZM*!|84wGGg=pIMr3%HDegO_9
zL}oWxdE+TXezDi+s&;-Hzrm&TI@LOm(P836>$1`!s0#^J2pSu!ftp@IeSXZ;9Gp5>
zrK#En7eD&sG`Xhb;;tzx2b?h2ZSy<tsS#}urKan6d090ltt(dC9CT<Gt?BA5tV#UI
zZeN$q$sANLn60xPlrBwCo>eL(O=eR|B&kYt7)hh$&T%dxZ%T5%<TyV8(G_<9uTBt>
zgvYD&#%Qf87Gf9^JW=KG%W4UzPf4ZFFG+lH`3C{7_!Tw(ApCUe&1dd7T#<Sr`Uio3
z@KPY3Hx;3>uGD8kAq16E!JYZu)lu+@ch$3R9=pR=M|FGMNL?ytr0NjXF$DK${0BAu
zf3^Kr66iCGj{-8A1zRudNN1JWjSQwUYX{hEYHmV>=79Wvh7y^~#&~CZXLLPwLtaCG
z1wmISYFk?T3_ju(F()hqEGg|A&v`1gb(te>`pon%`BQq&+JFA!7|V7O+1#jfuvn_B
zWvph;sW&x0H}oZ0Q*$y4Qfx7cUwx#-Ra48+_{oNf<BvfI(c$(glb13VAG+BrCaxcO
zM;60KSFs@M-<>=sc?+%y&Qx10s4lCkg>b$2m32L@aBCL2Kgo79Z_K$IzUSDtc8>z*
z`S<$6ggujb^6qV@s&gf?5}8|~hr+L>uEGqEIGMr%DTFusIdm)Mbbgpqp{8>tMr9!u
zQ1!`9cg-1*WDy%F)RfiayPq@(iO}Y9@v>Yg%o}EwMa%!}e?u@?WM;x$;lQ|61ATOg
zW4y{Tg_y|`d-OiDRKVQZ{bm!z;2En=hhIf=hKB%fXGme%M54<C5~J}zo1thuZLMar
zE@1x0eNy>HZN+*z0xqg>n(nDY{16Fq=}__>b$3SnBa?MY^75le4oQdNNmp3*RZB2f
zg$9SHgf*%|c%ZEQ4h6IHk#P?{2YZ2D;bSu9MVy+F#;%AiX9f@KSbpDnJ$z4KU^Qap
zup?j?^{|)HSlLFYIMfXGbs81}?Hs}Tqq`yRw{>&qddUAlDG$?q!A~MKbm_M~Wjc{j
z$ik*HyM2&6W#+8Zb;k7G{2^Rk$c-k2H-d*0H5K{RZ$8C(Dcb6yswkON+fQNn7d{;|
zk-4Rom%5_jgyy;p)~jl=VGDo#FrCFnA4AjNe1_3adiz>Nn%bYv8324EGrv0rU4X6z
zu;nY^{)ZbG$@uLAtTUCE)a*}<CjI?Mw}%qO>F=6+QJjg|nZs$W{D!=|nmy+<y&eVs
zLBQnCxc13O-^JH%VKElX_TGsCMJ?lWS6KO%<!H6LB-qGQ*t|B~4ixHdPbzC>D#JJa
zpavtx>8<g^Nu_4^oy@knI=4#BKuS`2#OKFBUG2;-5L0mbsX;qq_Ag7d2%NzBML}Ea
z3ZrS~EpA$KyOlAP=!EK|<A~nZuIe$`Qf{mwF;^-zj*}g(T&MH|97ue))I9Ug&T=w0
znq}`sKs$rY^&gh)?Uv}1!LmV8SMa)<>2K7M5wUZ_K5BASEZ3jrmgWa+%`iQdmo*p5
zrB~N%tnEx$fO#e5*}6I&=I?CC%M4FLi49W^%FH}PU@=vWNiy853a=nH^nSTEp0FYw
zBU&vn5>0>7#d^E)J3X0^yvZ%PzD_xb!Iq~T%CywJet)`o8gqttk?T2}#VaoJLD%ur
z$awOhp_rEdEh(rc0u$-u1J~b%gINBoqpmU=hWEKcj{QEmy4#gt@$R^rrWGFf<)|>?
z_x1W$1q3$0*_-^yh`x4e%rt`J)zL_{mR8OyRC>eqJzFi@E8}lv`N)^8PqMoXOH0ZJ
zOe6m4Emus`p{jscu#44dp1($^8;r(tL&F+$pfZVfOCj8NU&YTDaPAN*Y^De~JnUH!
zy?&I+g1LD*wphG`hzA<Vu#*&0W2X?C-|*&4&eIDg$=mI$P5L5E-864MpMq~-;JS#W
zfQRGrLiet?Kg+EKh7JQAF-Z+w(bGxokR9h0iIhb&^X82Dm@xgRA9HP}W!Za=Hq8u9
zF1OJ~Zux)tx6EVG4ooVGF-4pe3s0gZ*n7nsf@i&67%#f2Rel^?G3#IT=e~rlE4;l?
zSNmq^CqEI_k`TyKL4AJ7x_8XYSiw|kueAu|I2^`jd|yW!X!h-2o6r3}Y(8jqdNET*
z+&>7>1*##Zx7HI!Ux%CK0XGt2w0)6q;ip4~vMCJHgiP?Ll#VOE-Ysrz+W0Jk;r#)<
z+>iLo0p*hzI4S(15-hMndbh{lz0UE$Z?7x->iI~aHF9bv{{u~9otAJ|zKdfc%ErJt
zEx(qK!qH?P)0mCje55A8Z(+N#@Gd+05U3hKx>fw}`bf_L?RiEx3BIkgU9jq2ZDjoJ
za2FY^dz|3LO+)~ZGSs^t->*IYG0>^FRzc$?Gl)L1+g#cu8*xzk>IA_MeOvVW)}V2z
zv1X1u0MyIQs#BF=O^(zj=B$hm+uT5b&r*ZE<-8=9wq=CZc#VepWir2DAc<VbWY34v
zk4VzQKIt#J)PnwWh_JIE?TnU)A{vD~D;Or3sOzU9?6x#;p?kxHNNW4J-&-8BcAIGe
z+r6LrqBGtjOmO7XfS!0eg>_;kb4oL_Cr^&HR;Xori;<9Ca*$Qfy|gTAqR3!R+>4sD
z<Eo$X<HL^E(ZDB8kpis9(~iH5b7I<~f*E}oVY9axJyeZ5`)C7@KYwV9z}KSt*Au`F
zzmE^l#tHJ@{FkB+CsEB9$F+F<sdY5)aJsR5caqF3Qx{JDzk6n9JMr0O)1T_R%Qjtm
zf1j!Z&#Q2ER8YX5NFZKiw_p4fzt1cYI=P|XB7me)X6EN|_aAi?`HZjnb!A&xLXkln
zjZdmQ=ALz4x$F3H%PS&xLv6&VonJFuk<G<!*-1ICJ?%D0>}|hKJT#ZE1vrQ2vMo0<
z5I2M>=p#lz@rB2AdH0rs`bloRTCz;5cdm6O)$`c<Sj4Z4kg`-1Jq+~;2winyJIk%V
zrhBIjyy&bYx-Vs;maGRMvEO*Nogxbkj0}ff(^W(7&bm$+bj#vUTr9A~30~6_E2hT3
zy3Z9%e>hj%)(-_O>ZR2J+~=x(z#&N)>11GO?3NDm>sZl1`jP?!^l%3T)kPwUqzmig
zoiP!AJZua!g)w;Nm!f$lEeOI!bIyEE@TcFS;(~YAUqj;Tw7@|uOyhs+NB%2aNjTlV
zz~Rx4fPVvrx67+l{x5L2#P$CT94>ngAEB!HTJRSPMk^WMWl-$fVtiN3do!-aEZU7G
z9F_jo@ym{KSv0{~;){=MptxUcZK)GO#+GPMy(79Gnlxmhk{}TaJJyr#)#`-Dv-*(K
zo0W$JS}l^7C#1r1d^(Em2CZ~q0Y5tcZ;Brzr3N&2U!<b0dZxp;2mbW@gAjEk0Z&UB
zgwJ%Ppy&6&;Zl2mP+V2{oPnUa_UhxBS}O`*WMfV4h>$LtO~`Za&%=%TL%3(uVyps3
zp24H0h6@abtp6@KIot%;Nle*n0o3~>VGi)B{O&gUgaMTQtyfPr^mYZ9rYq`}t)~iX
zDyZz$(FKNf-aBl-;EJ0H???QJYNiTpUG#Ez;Cx6KSOBKRR^&GlI?Pk?Y_ka`tWO<M
zzw~8<N2WWy00aS=F%^&ydH;JGJO4kPDWU4{gg+?!eru2X@<<Ev40j{dW!a#LBGB$D
z=(r+x1ag}48qM>F4H-v?Ojr{XU<GL1cxr48*O4sB6brY`4%=E=-$iQ}HSykLpA~_B
zvi!9rkS1DHM)FseC%pSTr_8TA0=rDYThP1xlld>_?85)UIs1Q^r{#qHWuE4%_|MJL
z8S3{7rWeIM7jU?HVe6l!GuTg<@crqf4R!IqRy2NsF8ico=26;gVZjb(0%Rw^oBV7e
z#+=1J3+;gZn@zgq^#9F+Ua>?OdkbPQE6-A1cLb9?@p73U@eA}~`$qFU#wj_C1VjfI
zSv1Q?a|jL8Dqb`@u|+@~n{D+35|5G@SaKtvjHzBk_kwi3B4jhOxb0s*%>B%igCYI!
z(IQ$g$c2x&IaYjqS8Nwy0H2vSCXlg%FTqUpF&MNjpScFmn}O_-%$(Hr`oW~`V6KNE
zFOPR%LS+HZlDOImf(5gyl4@Ymyn!h&aTkEUW$Iwo^mqmTRL7i|>H>n&YBkBQV=#;k
zth>QcmF+j;1<F%4YrEfFEB1HYea)MNLq>vF!O#jYq`CsS3&7n1=;)HbNJoT})p^>x
z;Ib>I4e99N=nIAW3ql~rYe~1ps|GXGyCah?p#8NglyuS@6umOeccK7Jip|F>+hHpa
z<U(S_t#7O;z20;Q!+I`Q>jqecv^ARe?k$-Vp=W0QAl!TJO#WWD`_lv$%&*NRa1Uy(
zY!1Uia2zB#`Y@#|f{DZb7Cbb+@c;dvtN(kf2@5v+-b%-&>Vzjss#7+z#>WshXFU<h
zcOefGHZ05-bCoIC-`G<?BJ}px>dL78*VQ7Qtm=YCFc&jq6fdnW;mMB0L>AG-4Lu2c
zuQMS=VPs*w_gwG{R*@^a2dAg!Rp>tmXNSW%+m)yPbM=3RHR%dJg+o4WQM5uWe__)}
z$-Ne$h**Z7NX?lM?kpU>)`qtyI~|7SKTY4JOG&_ivDDZ{_i$&#b<s^j-hX5pSKiOc
ztbf+~>rL@0%IGy%-JY5jKQ&pOeTCz>#nU%6IWy4!_H`XDaS?-S7ap9>FAi7DxTlvN
z_6y6yc^3ojX%hlF@qRevAx}soS=!>55F*%ewARY$0V*s$$Qme@_l_NgIQ6w$*B#G~
z3%af`5_@d>!vC&t6xFJlCpjv7;o%aRrswT22a*+%`@@@{=yKNAmKrRMh#c=JMA}kY
z+x3w(Z24P{YJ8POhz{o`V8sC`a!t*y^ctE(hO)%sjKs8eJ8dqS$(!bRIX_^Nda}H|
zuHmB>yJ&onI;987N4fE%2?b{zs2?SBU6FBFjryHK@8gzeFcf%dqFToJ89kCPaJ9+s
zxMcL1rtHdeYjjGuYDkvfY=)3Pxnj-^CppRW_@tVq22@^%rwepQ6sg(9Z>No{>>&K0
zf~k0>ggBldt7w7^iq&k6<-`U}hF<lOD>pf}ukVVCblp3wos3k+#Fy@K7^lUGXC<;l
zxC^8b*w{AbrJ;D!LZ;IlOKe?ZimGDzwM}<1??+xQLUX6m+F}jGacFV7y?AZQdCx4j
zjXHBP?NBh5oY3B-0%J1p)7A6%6v^!jG$|M&j4x_HPHhz!WCqldM#`Ck?~GFuZ~be(
zHkaUhgA$Pu={jJhxkEd)k#W;SLnxOPP{lQ21;Fza>hxm-+@_ea>8^P<F2vtNW(GX?
zzWI-HiwTwnEGZx$1yo7rO;lKzq^hYq#UmJ66>;KR^tfCBO%zq5W9#hA0%@dXD(9)y
zZG4YCnV=V7G<rLTJw{p3-?*X<SeN1DnWW6;+6V<qaG6w<UW_^{=v{aB6KADmK>T=;
z<ah;@(ey0!sKbs!7yPDL_-1r$>SSV1SxT2OWc42b>inz2#e(LD`mRgCxdnxBttyTl
zdlG23ImT}uS#T4zjtltpuGKTw5=Jrjoo~=Cf9q{+z~Co|rhjh-FFB~ClMKrl6Em27
z7BGw!d2A?Gv#x0`ZKz|O3rB+_dBoQ0jBWgU0pQOzZ5AB}&UTRGe+A`?G<YN%$Y%fi
zMFkRnvKH;+qG!S-=dcKAAH*&#AAei6&X@#`IFFy!3|4bFn+gBL*9E+`l{qE5rj)_A
zKJ>i4Rzv<uUKg*)wD;pnN=B*zlMtY>wnJEvr4<N1t#5X$C;`o<mFa6u24bZ!II_w$
zrTEm{OzK$uT3F!p!vZ2ig612~k!+ST{h7f$WD`=FxgHQ@Ab4%7n8J5jA*rG;s$QW?
z|GJqhiP`n+^ymfPY($#$myFpil<^;gfrGca57~o#&!p~G;d94iliwg($X$(s6d#8l
zG725Wm_`N*z_t1#$Wue#9R9q;^V+6t)zEO+BdKohod(QSu_JL5A#@Uyy!mW6{%NR%
z^{Rw6PoH&sc(z|%p5sE&m`*_iNGv_*OQ3AqKC<p0Ji~WHwOt)=Gkq$?;LP!zq?g&i
zcmxk)x_xd>4@zm?;dqH@-mYtQ`w(~B*CJI+^3q-(L}NrQ>ZF8=6}P^7cIO}SjY0m~
z+xCxpdhG_T384j(Z;2F@nSc8mSbVzF3>MznT%pb$u8f&1W#m}Tra+1q#d5z9&ccss
z)nzvBOG|&KUjSwgvqr1fwd-iB{e$pZ#m3d8z-HYVAJI^P-@@D-A?|2V4@!I^os4e%
zT0risO|fKW+TUI9Wv0P|?oe;Z2o%=<?oyV!hh4AUeLObxsgKhZL=Ut@?^xPokOQsG
zHG6HpS30ZpS-<>7;L2C7^}xn{wnW*~2Q9YeV*pwcVI!f+xl?53v8q8yg!NUYRCvF{
zIJZVdj0rC74gJipSI7O+Tw9rpC(Y>(P#1u`B7D8Z>tEHGq?55{>m$p^v7Ygnm-7hw
zSoitsl+LN+lbxY-X9u>~3#QPZ-}s@g#7_sRt-o0RY0cH!t!`w7cuz-MOrqfT@uTPG
zFdrMUXg{>7dgUIjF1@p2c!oggeiWb^x7!hPaWAbVxwg)^^ccg+RGHQxZmUzqoC<14
zWOHJFTfxRb^GXLH4G&?))H6_w@kmdh^=(>6Ps>ZULq7-2-hJ7afdQi@LO4Ia1Q}Dw
zi79j(e!n1PKG{AMRV-V23%!K>h`*)55nYXVexhRcx1u;B#-(KV$r(*PTv|=0D(>3t
z5+XFqwZ<EYZ)=iBBjR0-iW>2_RYwybR5tbQ6sxMO1~NKks%K>RBB4GvIMhbMAbNpR
zen@B88wlL<nDZ$or~S0~wH_i>T89-vdX+J=!AK{h;<Fz-8tNkNs*Y<-n0mL7GL5YD
zdlB1c*zm&~X5-hB$Qqdsfyj3WsCRxoYk)I}I&<DG2H~odZ1gj<u%ge+Yz3gA<pqA;
zij+I*L!Pyv3q#!<Kh2dSAaN=GPr*!hq-=1}f%h)DNQ$y&O2!4!tb!LMaBKkS*A-!k
z=K^*`v4TE<Q>dk^A=#8c_S&cvMyh)gyMxS^h4+K}aJB55u3|9jE@ZaN%>|^D%0B)N
zLjJ@r&JqLK58bAT^1N2z=Q{d9{0hn~D0PI<xQ=4cq$8^#l0|c{W2ozSWdo&zie}IZ
zm+s<UMqacZ+k(_~Xn2b;JL&3YKUWDhR0pTnlkBVVxr^?<xcx0UD{f79j(l5IxzVeB
z(6#cV6iqb3CQ<ZVhax_X7mB>fn;1jAR*3~_4GP)u6=LDPkxw)VGLj4RV+V$VZBvQj
zwO#za^Mcaw#8A+ys{FWp7h?k;>3zViJMfWV=V6?Pr^)m=z$ak>ZE^UI3FWk*r$Ex>
zOjg1`2}?O~9w^=&n{HiQ4#ytmLrAh8W_z8r$dsNfWEQZ3FZT3te?QArn{ZT-YMl<b
zd3S^ViO87r>Cg9}_c?Pr*VJN-H&vOoq#Z!A<7UHiQDK)3QKl}GO5hgCQo*}xcgG9k
za6=^X>?XsdLrWDx;>PsY%(Nnk1*}S<G+U@Lrjg5yV@;9ZiloLPlT>ZP<SZ!g+GXhP
zgp@78X8OJZK%&_FPR#JVei1FySXjZQ6M&QU;B7y54c>6$zdPa5-5|KLs}ZCYG5G8G
z1L0eKV9~auaikb&<9&fx%HbDmVi`Zy->taHVmgA*PAR&zsflZquls7VVo$nMH}$?-
zD~eZPJ)eV8e%OQ=2ejln1l9a#=4XOBYS<sm@S+_JDsghR2x4!^o~e3rEs7GPd;4pA
z%V1kDGktLtgjulh^J|(KOSr4uR3EY@F6w4yr6o8U_w+{z37UtYB;cC{t5Xf+iUC^k
zh|xtdMkg7jpQAQ;0cv@WUC8>6X4v)qJ3`z8by4wsoY9UgY7I&hLyk^oTB6_S?pRM;
zYKY>oX%Gx^S)~zFs4rm-v`TKRLOj@rLJDS8@FhfQHyF=7B`)Fk_asXCCD@Fqs1{eS
zR2QF~u7O%^^|N~vO5rh;5Fe^M8hL3V$Hsz>sgOHdMx=$W^OEDC-)rH7obaaulSl3}
zQyH3-OX%&Z`<K}AJIqBj5%Xl$9v6}McbWS>Jt&=Sqog_4Yyh2>Pwy^}828q<y91q|
zNXDO<Pj&*}P_jtr?-sqk0bB&sb=~C(vLk5dc-1{Dwvg_XUYCV{oLWc!-d&N4pfC*B
z6WM(cF$|2YOxm;Fx85_UxRz8Alm;d6hxFgbw*m;$w``X*U4dY4uxIh#lz+!k^>&M!
z=+hE>FbgO(|66j;%@npy0Ibh)(_5ld4-kI!lUKOXzDyunSioFmYKFL-AAo4Gg>*w)
zPAA&(rwX~vbZ-cy5@#5`*+OWqB=Hby&##lqk8FIU9b8dS`4sLR#g}|c=X&kD#@BbA
zHJdX5y>Pv;yXO*4d7-AR#m9Tal!t*u@M~oaWY4|8>7u?ZyJoyTNVRQ4F=OT!&*yvS
z{gb=3T-lMx#F0{avN~mlvSevVovNhcd>Lgm3-p6mPpjxPek&N{dbX_f#H(!d-kL=?
z$f?lXE$Mq(Mr>R`Fx_$K>S#^V0|o_Cws>xV4zYz{a_=_V>ieS|67#x-F5<!}cHr=b
ziAAaiph2ULruDs(dO@|TGi)>?#ZiK3djiMvLQ7Yk>i8hIwDsJ)yw1#1kwv@XQfQ@h
zKdp+>S;YBtx6Ywt`~Y2%Ob(*<pw~SdFUlpxRPvjwV*g}|6)v*yNY6P`n~LvWQuaQ5
zkA9NLV!vS}p<pLXHbDaCLjZ_bm76l;ucup6mIyn7v)WuiDsB}JSM(H9eWD&mp7}+m
zie5sxhPM^Nr`{dh2SdEg2@mZGJU=;9?nad$i0R}s8z{5(WyJ5TXWrt8?uFXtuiqEL
z?O81Miiz-3<MkNt)hI0MTA)D_F>S(!pu7Yq9}WAg0K#z!9@*qJ6(fr0$4Jkc*Tf`0
zIkpIFKK^5tHE7nP>RqhZ{iP)R%v|kqB3>9&+1y4}YUNjXw(S+*!qn6Dx%TgAV7Kgq
zSiC0>T5GM)7Ga4yz6sk8ho!p@0<+&{`mq%)Pg0%i4r{9j5N47QeyS`jB&RxePir~e
zIvMplm@rq4Ql~rg@|?{`1mHkRgBnWX-aQ$*SvNwf7x1PNs)kNBgd4uPBQSl;d=`$r
z+Fk%~wCNI;8vMuw3W-%DI58X_7{Exc=tAa?Pu7etyDKlu(DjZlx@x8=eadZKH_zF{
zO<#heorkepdTnE=Ijm42T$TqrW!7G$j)6qULLPnnSGBINzkgTISofe6wW9fzT*s5X
zwF<4}9*gd!W9+|9Bo?ala<yA>-e_5-CeG<Y>lq&9{kIfR$0XF<&6@OY98}hpW9ugm
z64C?Hr;feEy4CDg=esPvAeNafQ(uJ1S?d#^etY}1>SVtw;XuRg6<;c{rSQP)1#W-W
z@H41!)ryr9Z~jdz`33aR=f|b`ZJU7c))XCoPu0Tnt|c-LvQE=#Xq@NYN|^eTqClZ*
zV*HGtV@gM5m*BUf;Jux$+0=0I#hYO3bqI{pYrZwbNbenE`xJw_#%kj`mA8UiP5t!0
zXvYp<J&OjX_AuJ^{IclvTXhn%`Te$G&g9*zCHZla<e*5CT8K#!yGCBI-^4=<_fgl!
z*rSKciusRDwAC_{O!o37BwXhc&yE?CZ8w<a$hYbV^Qqqm|0LzAqt^$&Rki#rGO*KQ
zAld^IvahaOKwhJGvUy)}qV3>SMe|1?*_5L+<otAovrX=2dq7XN)q=Tzi%4~KehiTI
z#5t#Au<HW-dmF9IOn!P4qA2OS)%RO8-PN3WIk;qyq4hz%P1S-<pfg6T2#t=HcK4_m
z?4iC=T3Gty=a#ius0XV_+61dpJ4&qo6K@xS(BKFTQZi%vK%%V&Om3IT3ftVs<uf;3
z=w_}I$?tc8Yy94<`5i_Pf@T;2<n!0)lf?O*l#7i6%{J^aoCTJYlRa`bc{y<>gK}-a
z5{U;Bmq22u2%t~mVRJXRyz*16s%Mfb={x&1ALYl-8|7?le-kp#zQsnQ<wm<;bZ#v2
z6_&TesQvNVju^l5?XsQTAovGC##i0{7lUZn`@-B$7{(1?^DnhyKQk5w%CoN!e!L^d
zi-aEjo<Z9$I{G>&-=W=3khTQQ4@}-qh=z5SoW2@#c1y2*D`n_uVV%F1P^S04#hL<2
z<0r@3jxagxsp`v2+5eV&Qn2eBijEVNz7SFur`@Z!G|y{t&fb(V1AOkjP?gw_CfIN{
zM;X@2YWkft{-X`8Jk0S=y;Va=v%q3jW}zo-o?x)+1iOAi>r!Y!+`vWSj4@<vyUHH6
zdNa)X(OQddgb3h5Wr{FA{ZniB&bTLYUi~OjS>{TE;BzR~#)U_EoR!|Qx2H_<1mTe;
z88J5d-CfSi@|IGpZ>wvilr@t~&_?CwphWH6`GkqSE~nIzN594q*0$oPf@LxHY`ZA(
z7s4m6^rOezn(&&Cs3`;S$&d64az8)89}y8nP&JgRTLCZfD4?G=WU+E3Yn55b#<9W^
zugh@Cg(zH!wgN<7jAdu{hucySo?)4==TJOBclo}~K~^{ztGI4bIe&4F2$NUlqNNWs
z>;{s}qnBRjc=wxyWnR`!@3Ed|c*D`c0|(1+<IM*5@pE%))3dPl5)U2T$(kg-!~p^o
zp+d*9b5|Q2V-fDpgQq0!E(#q3FxXRdrTAYs?F#OO?n$*+V+1>lX)1UvjScWlCwY-A
z6e2SOv)SY5^bzEcgyRte422ii<bAc>keD#8XE~PJdamZ1>$A{v&{w`|p3N15{61XY
z+gzmgaIo#EqeW)NzY;FxQyi~kvtSWOAPiV6D|T)DQUSzSo1bjBBHDVT`p?Uq^6#9M
zG*Etw&lEyMXpK={r;+Sor|m*ZXr9dqyjt^0r@cG{&dp+{iMz0~J1O~<?*3UT{%V`z
zLiVcR>Y5AmHrC)PQ0L>kR_xsJuJ@&+RXq8N0We#4OJ4jr6ykFBIpUZqtla%U+ey6=
z+1f3>lW8`YDtAMirmldV&k!CMqgfy{IslLpSg_Nc(cKbrDmYC|%U{TOJlQ9&*HK14
z3!AT~ZCU-OP$lR(E@+J_Pv4xVNV1*5uRVc@FHf1Ks?G=YT`{#JvOeE`4eHo;K{62p
zGt`|pL&ZXn=Zc=#=28<%Jl6zbas|vJ2-K0glqm@{)$dlwkHMZbPN(3wV=%<20<>$!
zzhG)(=DT9%ne=ZjXCpk1O({CW!@zOVC5w$_*my0yTa<QNZcp}=Q#X6v&MEl-Ml=0n
z+!SX!HS3M=#$m_nJ$#7tV^5n{WKOrq>VEh6MMKoM3^CQ3FIZ((nNVc|2b1z6Tckt-
zn<nqI{M`Fc-E5D?^~tJTJAf`Q_6dO=boB9bb<iQ6$aLopGyIJ+UM)TNNtsj3QXadF
zEz?|6p0Bok*}wO~_ufkFJke&2+r;#)3bV^B)j7K5yS`(<)i2xSdV{%1Q<X%5QI!Fu
zke19gZK?R^*B#I<Ff?z3@5DL3^6@0S)>+2PwvDOI<)jgAS<S&$Ya$nDBFV%cM`hh-
zqQ4u!y7!BKi6~O-<iRYaPiU|j53qv411K{)oFupiAbSWgX;cf!#@R#IVBD7|3OjNN
zPsE#$su3fC+pyX2nRrN;ySgRya76TkszvuVZ)027(x4r$0Snv|3G*N_#k8<?ZOK(c
z8oc4rPO*et(m`+Oj3>C8f%@<vm0n8WKo{r}-d8nG)`$}&=c0yhY}O4Gce2U_=>}<~
z(~*^eS#!;Xo;m7-6RWCf?&l+rXPVX6n{on<G0RknF<{lX!W;BWgn_1p)y1VITQ=>%
z^VUSBhMKXFL9LV@Bgs24uu7^WIe18~a1-(=TB9?^{el3Ba7&VYNv*1_^R*!!nYeap
zjPi<|+HNZJQ`rEWu?*MRVm_(h)s!*Qh;;EpX`!1@Ry?B0naNRspwB`OD3jz6T}^|i
z3oYd>B0^==oJe{!jr5l$P6N;OWX639iPW(Dff>J<r{iyKSy^5vW{x2)61IiTs5FxF
z)%EeZEurJH3BJ_HDgC6?ROfh;j|Ro0H&f*m0E2LUsu3S62gVz1N=`CaE(=l}wYj#;
zC?J8E6fG^Mun_^?o|W|2KwO-WzgxlB*EOMpF0UGBbr!*v>*Z|eqMgJ$nOcGiOk)+Q
zmiI|jOHrv7{@go+^=ktq6m>R-Y_26^uCuIc6>Bh{cfp}#QtgvsPT<M6cP-?icD5+`
ztxExTe3nfi!+R#}%s5}ZG|dgy<;16&RgCqi4}`OT$DaG%i!A(j@bGw{$&D>w&>E|%
zn$ktZ?N1vcLY41NN$DT{y39+4N5)g54&rxBcNCJA(A6~aSs@vH9ZdQM;S)Av@uET8
zmQL32g3-$TU9iw^Z(cNq=;WdpRl8oelBaiGmXT+^vBA%+@+o5?_PkK=<>{I4L?^Y*
zk<7Te!T~28D5m=k&`(d;x`WTLkdmk2N=Jm7`m>kGu)K!rdcV2Lr>JwuBAhCbjVvMe
z@u{)KRiYSZssELKKZpU@zcn92UdeV!1vM}cS950ArB*&H@ZH~g$Vqbe`Dv2J5qDwL
zQ*sPWC{0<*c935ePQ4|y3j6s$x~BEp653U0csn$>k5pYycjIMq%U+@=t)o5}aL6vY
z?2h!?jGS$t?9_&@2YG8mG%E1zU0tHHg12J~PQy>WwO)e>3zmJ`(5>hi&{+u0NOI*`
z-1<P;SHD=O$`8)Y^K@(soFoS<l2G(SuCxleG{B(GC`?hQY#)RJavqhtb4g^3Zp(_(
zH(+jq5{?u!H6$S-tH_XczE8E{pxCY|*t0nzI*pr<7w{(SO}c79!A#f2IEDl{Ad0RN
zHoi-%4|9KG|He6pLe#2CK9v=6lCX*>Oq-nceXVmnS#K?}g*)PJ(F8CPups8J4lCUc
zWCxW!p%sAefo^|pf%X?`GQME`rMheV_n))STML~ka+ioZeQ%VV&R67lz}|`9HGSN<
zZl?bTvm}#aOq;e2``S-pw+<E-?Pv0*<?c<69iWSCv0X%%93?*=ioxs3Vl_*;lHF38
zQu=&3g@Mr~*9kgF#(W@YYl02g8be-dvh%crjylrq5-0u&*(q3Hgy*D|JhGCl({r75
zf}52D6>_U0NmLN<)7g>}3IVg0$#A%=u%O_K$sLu+xZW@G+(dWI;25b3j`w(uhO{F(
zWauwzlz(e|r^Bz36*(RGqRW?k)3}qk2g`0v;>eO_C0JTocTy2w0r14AZp(}8Xe3ur
z|6m((mMo{bZo~A{I)7LCQ`rd<v}OqW5|*H$Na9%=p8jCmkjR?k*>`wrqndP`BKTeR
zp3aliP{3Az(n!I;A?~}}@OSB7KX`Hn=*vZ-zeL(jgDr$CIM-X{Ir+eGPT&&2CuVW&
z?Y2&|M1fc=L>@gv>FAhMS#WwdLI|$_Inp{6#wOtt8P~E=GwT>lZ>O$&Q?JCOzV}-d
z^GYrozmY*%)2Z>(Z)gYYdmnc(cVbG;maiKx(j}5VC+gZyrDhGbu77LSRV6zvcBoDc
ze{-n9!4*fRpxj0Hfm`=YKfqRLngPUTtocdddplwNlO2Q4(x#b!0ap`PlDp^Zj%Bdm
z@g(h=u|`u=Vxdfa&F5MPW}A_X)G=(n{HMHkn5}~WLi_WRtxGe2LEnAK>PjdytEJ1g
zL{nO4FI)Ss>p{L)BXiBKxG%ECal7sAn}G7NYaBPG*wYU8QdnIb`*3!$wj4gp*1J$(
zhOruSlN0!h>RS;gfuXQg?l@>KtUI6X3&>ItP2vMNk?>-Wjy*vHYwdwsj$6sOS)06G
z`-)F1%mm%otsZR82>d>Fva_6#g-V*5+EP0fiDo?Xc~#SFgk$dqFHcj!0B~oo-D?<W
zzsRM;czga~bNkpur=--)ESXjWLRW>-SY`YWRVjWs6R|&V)xaK@cYhO*H1+JI@O+Yw
ztQ|D^mn0fuXL?dJZp5=JK&VmF)Mc0?51Ynt`OvJ#$?|KcpoC&%NW-4+pdv{wJpkMk
zq#QES^k5L4GZ1zkS`HZNVDi@b@n%)c&e;S1je`D%oeIED`p0oYOPx;CE59pS8C>3S
zJhyy>Ze@E%ku)E0+(~Ja-)22)?w*@{7Gr62%onE!G&Z)zU;$lJ)V8_U)Ot^*Ju`#P
zHWBssOTx=MunyNjb<aqC&9xNW&x#Sd75!ybV5>N}gm3g{$V%2!PMJmW8Xu?Hg9$mw
z&c&Z=Xto*gbS<XayGBbdJbx8BNg~Y;0Tu!yRQf=l_P?$x;_^+A7G#JX;Auc8`~vAj
zD|D>j6KwzLX0Ld1@X`s|e*0Y|Y5M%qdFf1>7LG)KfC<d{t)KAq9N{gwA?-11Kyz*v
z>KdNhoXgc>>KcW}#(E8BQe(yAY)y0fR$kyg2+kKt9C701(tH{##kw{0vBX$r10>6`
z76!f1NUU)_cXs4s@+C{_CUq6-)rptw-U9P)Ll&e{ZdsY9{#y3XI-|dGZRM|>n(~B|
zl_!sdBL10F;#tw7a4VheFr(yGS38Fv?hrm`6HIFpq5()$4FMtIKtGxhwhqanAJwdb
zpGfY19P?v;$Wy!UHt_OX7Yf=n%30M`Z#*9zVm0O9*OT^+sD9f5h#D=SA^aeeZAVVY
z0`Kzc3g)L0Dk~21Ne?A-*PYuMmsXrO=(UdY{r-;}*}_UuBcH$euEjWkwB9VTzH<jT
zzia!=xQmIDC8JZY-W{2{<RsB}a<vf7XXyCCY)ypBFmu_Vkv|3gUJJi{ak@3w89x0p
z_6z%}a?T=wxM7R_lhjDDd>Ds$Uq~{-KL})@gbz(Y|8wpC59<Kda=fg4`0Q=>@MVlI
zZHH)6(mlJR$-3UXm{gf$P%VaiZ)val80ic;#<<Jyqc9nWw=VMZzA<f69va*CKi}hj
z_x-&855gaAFYmt{Hz9BK6i*C}xIwPw{!e|sMcIcdm!;~ZES^TIBs)XduX00DCPGne
z!zYCw`owNnUn;@>yU-5(h^2zlKa!g5&iu6%BeDhAn*ln&`=sKagxZ0HAIjG)2N#0j
zoMN`>a{l-S!Tj~24?bO##%bdER2HvhDr%JA$unt)=bGg|eO&=2EqzBSexhxl<eI&@
zA)zz#bZGkQnPMOQE0~$-uFTcdMG<??)}m8Bp9sUK6dL1h4)ufp*IS)8Bs#R!?^o3M
zSH$3cb<)|YwJ{Nv$6TY_d#}bDTut(^;fdj~4)wi|OxG_0M2=4q|Eulqv!ogFf42Q~
z<`!c5J?3%9(T+t&3@fli_P7q4Yo*^hajfm`86>aH10jh!9_<i&`Q?0utsPdd@918P
z4TqW((QULh-EWLNdz(Db0>)*Lvys8Z^PgSHMk3SJ^rnzWIUZ=Dpj%1rVOIsr<{t#7
zk$(`rqomKCun%2U@x<Yw3L=#qsY1x8f;sx@w%=RbuGNe0U@`im^<~T8k|IBgZ$O-#
zVSt5+JUFE6+=na;gDmRI$_P(_K*K0{FLBhis3$48*cYWXaY866oStkS!quUQ$_Dl2
zUvWLJSRLKVrlZeE{6zgJF;qZIOz>}=9zTb;3BY`OQdLC~fUG^2HkG<zw_*~CC(kLk
z71{*mD^}m+^Z3&4_Ct9=5eQKCo5|-Ys`<JNIR-*hX_`%T;c7~e6`*(GuH@__n}(4X
z#s>kU@j%vQJW_=ZjUHFiZ8H}Z6O+nZYmvcBPc|?}Eo(`T&CQ|k9ry_dUI&5&;ctfX
zf6SWBSAc$_9i%J5vj?-49<%T`CAAN<l(?aIXBC*O8NAK+RlWEme!~vyqHZ!;;{z^=
zyjyA_LD^3i$@!=4e8uA!l3g5#_(K*Nzrt{xa`*NR!)nj6Be!G~E)EUSiw*oO)FdCs
z+^_StOxZ8sI#7?Hf+0Q6i@`lcP)iYQY>aPXRdQk$JJVnwO48EU!+@9ieOmC@qrGvb
zCcAru(8~IgxJQ*+=!*%7h=`z8Mp`;}w^VtpmQH}?v4vQ*ZY~ZZNDMp-5Lgm&JZ?XB
z2=y#@H6%e(elT2{FSpeqi3(>ME@&c~!|>0{RzMaQIPT8X=i=ck5MJtyw?h(`$bW{|
zh`fL)CY47=1f8f}&0ujT^?5YQZ0vHGnHe6nSvu+@4~r`c4)1{lOvyqkV&{ntRHYT$
z42Ej5Y9Aa}ak+`Ex+87NY`^$yG^Qno&B=p$Egx&v+2Y6Do1H7$1y@8yJd4L`rn8j?
z#2iALYtS8QOzb4?HA9?B0%2;0^87Ph@Lqeq@Qf5(4~Dp~bd~#U5#Pzlkr-ckNE_*j
zMdN#~KCd646NzF<UODG`hUoK+c323<TBxA9x-X1$bT8yyf3K$0XvFCEVq!+udkpz}
z$LFs}dmI6Ga*zIa$7S=gMPaHGUs&Gp)zy|4x6d&MuK6@I^TkB%Y=1~**tNpR<)Vor
zPcXN)TTZmv(N4|t8!t)sYS3FEn!ej&1A|u=;FKld(J~dzU;?~GGH;d%+%CdsQ%Pc^
z?!|1qAs-pup>*6j!p!i@_5sX0UAEeb!;KZmssEBXvl2tB1WeKg^6fFgSHu)}Q4>Qm
zURAVtu?o+2F>4z=nC&3F+ukh=dSCVNJhhnqL@m;2F~gaFsDr#g&?NhU{Gd<jy%d#q
zS5Y~ryBc4q*oe@qAG)mUURqizAkPuR%5i=}{@w(W%j`6`Cq*dx`T>bseB*$hQ&S>9
zdide?%oxw(d&sSFqor-~W$8@$UR>b_Fb2Y~CF&9-a`CJC8!#9II^wcv2cJr^Knto*
zD3D88aSy8{Bhld}$b)S`5zfzWPKNW~nLsA0k*aD{#(jpA@P<_UBsR2hv?K6)uiwSh
zT!`-n0K*O#8O_^#y{>Di{2v5^#{HgjPd+h!RQ<U)h+H{hn;nIu9k?09Hpl5_b6g<r
zWq~*@AkG(vaCW!eMMj;iOAN%voxM1*?%v-O$X>?HD2*#%rA~wglLfEV1ix^GZqgp+
z^+rklAMCwVP@K`buSxJgLU4C?_u%gC7Tn$4-Q6uXG~T!eclV|txVvi(d!}md|HYZA
zxtqB-x2vk_tLpX1yViPt&r@H$*;zQ_!#UK*(-~ihTD;z-g6y6i8+o{H+{H_23dhRy
z&B27<hgL;2suEnxZW$goza~y#gD<%_@b!njF{XH(2AZIhKRKI8#mUu)0ffSk{}%)U
z@8Nb*W;F4Xte|(Z%~LeC4EZ~d+T9#K5`%1GPN`%p-08=CgYI3%BJ+`MbTcR15o2`f
z_a;~d_v^{nomi++!`12`(>;zghjjVcC*|)ClHRc4Uo$&T>ENM;4zXO*CS_G_O3mir
zM)HVex7m>Pl$u5^(1coqIryLhRbEEfL&b4cR2&G%q9g?AGkP^PDXjBcFbrp+Ke@=`
zIR_UmpOH}5wqv+Ddb^ss$58Ciw&J4CT#N*{2LIc)L{a_L7Y5DKw(QR^i%q%4%A2RC
z;Sl5v1J2}O5Sm&5iv}0iZMM7{N@BMVcV=Us6C92&t2_H6VlPu%>|Jltclecp{N9Rh
zyR3%m6q3e=nm4?}Yd7dQr|_GX-xQCg?l^%qKh^kh(AvA4s!7r%Rr%2ydakmdaU34+
z<TTc}*RQ?n4q6QqzFp7E(4<8|#&*rZGMXNN?dY4?5Hx<S(vtY58OhxBYvYYm@%aVj
z;?WXrawfX3e6gYywN2`<>kYD85nAI>8W)o<Q0cwb`VC_e2w&iAk+muf!cXxq))<Y3
z6*3bg$%t8h4}|?C=UVW%nrF!Fv2Ap~BX4QQeV*d45(`kAmz1v-I83AX{rqY@UHCoy
z7dga+FRD5;(%@*(D}RJzyg}Q#ECPJYX%yTmfcQSd%<E(twwoR=Ijrq16UM3O?la?n
z7aQb+CeuIDYgRG3vGh)2aYQz&QPTv|fopr>j>sm$3XCNpPZ2A=TN>txGak@7-ADT+
z=r0aUaONeys5l1ejK4AlJ*F&gMm{SK?CXRbrb2vfHZ^IrJ`S<sYOq}tVHvM!xsC#-
zD~f1ns4MRklvtnGCd3=j3T>}?YsnUoCY1CMEu^36cC8J=-Hj}nVlqhuNn<)ISIE%D
zSaxTb*u5#<>mM(Wq#IiJ-`Q+B3mj%<BO_DW3P74yACoD`qMP?eXi~*!$>%9Eq-DwX
zKL@*1XGd}*SY2^w|9a2(&n^QVIevA_h8ZEgOlUU8jt&YyQRPW(FkMub!{vEw)&0@E
zAM>d^%lWjbaaq7KzZZtUUg&_CL%kvzz8WiTRA?fQ+nfp}FJN&RcW{?dbwES`DIZqA
z`N)}9{go5d1;-TJpIy}Bl3!xd9cNo`4?omAf?*f%%dHnnWERXKO1AVsbX4=FI~YZO
z@~g|1@YhoYEb={uqv{auR_E{a)6y?v)XC$&)CA>AZE*wRmY4F%l|ijjWGc5c6L(qo
zYnFfBU3Cpq57_!scAYMWSEYZ<{Komw5!K;2G)z#vaKLt`<lcLXT!opqJr2E@nNdQ1
zJeOkSbHRNZYs~0Fo%(mjTRBQeV86H}dLVF>2wWw<x9gVZ6Gfi3E=a)rWt<x*zRiuA
zen_48g*o4%%3f#vw1Mi`mGdrhM0NFnKNekIO_NQF!U17On15HV-WaSM_KRnl(+B`?
z4K3?CAk+^pZ%-bHDyVC(YCH3WKyaL7{dV$*et9fpHD*vyev4Gn7;9uEfiom*gHpsQ
z)9utz0LQ;;cnc+qG7E?9io4isB_Hb&CTArKrU%SM{~bMl6uI;2PG&P+X>?~Ti#dh8
zvZG!-f{)AW)Ti-VQYGx#)EeJt?o=?@5n>qbf0jDUsyx*oo$@ktOp|qz9tQ1M*qYB}
z;iLVmpYvY+iE>K%4?>-Y-4B@F*)&&Rr^PqqS0E>G&CabCo~AE2WFpyh4Ml~e6-Af_
z`#>e9_ZrzWMqXRe=Fugu&%3PWjWX%qNqQr$Kf6_Jv0Dg9;a=a>`lNvFyShkic-_Tk
zwZ*gm&!3JxTShC*0+jN@eB3G5GWsgjirxQN8Ys>jRnt~q;QX{mc>Zp@)M-B|SmO0$
z-Z7OQt6}<=M*+YA4;z#3Z~hg(r!gIRxmMkteuhEI;hF-!Iz<86{<e@oRweaf2QLxQ
zw$>&hl;<#;RMSd${Sn48V0f^Fk=WaGogdJ*tjp<Yge?js2y@vsUW4hlqVAbJPo5HX
zG&M}a#Gi+~qWbx{H}*lP`<Y~~u?mmS7lLlBMuF<Bi1~iEQ=@0y6+h40>XfF#Vj3(U
zSaxyoyN1`&W%QlS4OQ?PVYx7%W#ife);a2jS}gJ$TW}0-7LcapyJRX+;va(>#nk8Y
zWZv$D-M9E2Jo@~IW5d@9x^WIQwf22kJW;6S1`PBw4`P&iZWK3vEzW)CW9jnAe#}@3
z5$%PF)_7A+C){Zo@+P|@?6FYCvw>|UBm=9ltU)ZKflLG$-k`8O9ErIhNHMuRxN*r}
z^ebxlBLeoFTvIJzj1(~c!-{}dt$@Sv$wKCR#hZ&Ks7q>Cf1YE`b12eyBK!R2_n%~U
zAQCobRmB6nL@91(->c>0)AM4h`E`eK6{m~komzp2CVuBw(+@Z&L5p<t&?U<?diupW
zxtqDEaX07y`<~&0?R$RHBYheSgCXFi(Kv$L1znNVS@_!qrGtZ>#+1WSE?{xl*u{eh
z2g-RUfXG;R$uKVsT75j0(CUkS^3uge!MKg35BjZ{3AkRLD~GltvUDe<j<<2X&fDFl
zlsZ2AL}L5;ZAmp`LiL)=fKQ&W1d<jl^Jr}$vVEW+aE@k-T(4FACYsl#h-R2E*PBn%
zdhIxyXh}aqUjb9=s)g$3qASK%$sV#&^IF_-pWO4g2?76^hQMNqVx4}OBDqa-@jcZg
zN_OppiL(_BeXb46(nJ;uFnar1`eIna1jnkIiiSN^VG`8Z=C_j%|6JM{d)z=<d-?S`
zY_!So)H>Wwo^ST?S*mgy&<yq}@K@=C$h?i}V8hJ9pPAa9Uy-^b(Ti<#Vh`9#Rd&K8
zUNf%FPy)(RBr+AdxDR=8<*lKYRtpsk*xY{*vmfkdXzju-(S`n9aQo$5pt0tu>93r9
zPh6T2LqZLO>s`irJ64l1rHeKh)u?t=tJa|G%HYnAYdXjaB%KpdObv#D!TWOduVLEi
zVTOd}{3bW#U)iKibH}@_+BJLAAK3Au8FAVYbPv?PZc2&~<=<@?qH(Dvgec|BqO^p*
zGk-(fpoz^PaRc`aH_Z)V$B=t0uqv_}2&*}z;ZxT>Jsbv^mR^8ZFN!)1{P)l)lF4?I
zryV|*@E>M{H8Hgv^t(5=ZsEMSEd-ihzTJsm%lV%1?ZKY#F1g!dS%vw!t`GCWpUk)U
zmS<`>U1e21OH}x=O%W$9g0pOLPE}!h$N~df?0k5U&8hTRRW2<nTDPPb=lLa`?FbX3
zm%H5{rI{!cK=Ppwwsed@$ckz@oiet%5k#_EJJmvpGLoGUQRl`+7DY~rJD0B&duu&1
z{I#{53(UZ!KrmD}_0L<lg}20u^w`=7le0f<uXUp=`wV)R%g|SFSL%0iFwRmUQy7pv
zl{L4CvA00&^yqVdX*>NM&|lA^y)`YTbwvJ^kY65z%!~RBdaWfA*)C79j$&>fr@A~@
zq{y`?*LAt<`{pHMx{`K2_GR&PkwAPE4a=!y%0Gx3<X!)Oy7W5#baq<~B&vnC)e&bY
z(G<_f<R8^x%CMI?z3$_jh~ipI;W-?SZtCLah!|a5JpUkCdX#P^CVbBb@WmjM#OE3w
zVVE}5IHb+>W;I-cY(3o!(+6EbAtQx>*uF1HD#DtenZlH2(zL6OVgSsoA$N{$rF6aq
z?Xp`~*jF}wy&JQ7r>@?yg6|5xi;H`B97f2)&(ld;EVtG5p~05zio;ay+WcR&wbdn)
z{gVL4MG8Ejl~5x_$I6V6(E=$D0SdYe4xGT)AIAk%74!y42+4AL#mcGbm~%d?!=UaH
zg@Pj~lOtK7{0+?7W8n@@VqC(;$jZ7--i8=5S10(Y!LkzbddTl!e)(ZM7OTeWqYyu?
zrO%}1f9ys42M=V4-ytW;*nX&Rv3|Ky3dk)@ki@}YcrTRDGAJiE0M9d1KDfMA-Y5;6
z<al_~_>87I80WX^bmLYx;1dnbGnjeB6PchruGSDW*2tc~PVC=BskW2JQRx%PN?M3u
zl%{|VJ_OeH$EB)s@EE&F!JJuvG29{0_%uxnuSnIE+qT0tl3Gq`-7H2#=xV9EP~0Q3
zz(hH7OeXbAZtd~|>#E4J`GK<IXZU1p;r_%v)0i6F_(kkWkvK4`w*i(k)Oz}tLVap-
zi7sc}&UlQ3NNb>Lid~+7I(gD;yJ1g&b+u8LpUGl0T=uF)caC0!I_AgNx#cnjhlOb#
zCWI=+^##ft4|fpvsyU->Ns3>}v#YW+tJ`oTtHlk)+pCFl=-&2-&|O%nSRKc@JaH!a
zyz-s~L7O7S*I&)1ydWuaTTO?14?8d&29TqmS9yw^#%#rfXC)tZI}FzV&Jv_f0nm`V
zgu-Wh;pW|`iWg;&8eJQO505JW?U<NSuv^DZ-|4!hfRwAO6W}6iPlf4a&S9Cp1D8Ja
z#dniIIM9G+97)9k%EQRW(mW}tQ31#O+sA2j$8B{CRll1FhldLh$uERTS5q~1hIbyS
z+IMB4$<Py7ok=PY4YmE*M#C6%&Lt6jDsb*E9b0zyia67LKeRPDY&b9a@sPZ93+)Va
z9>0?-b7@Hl=*Yk8*l@@YY0k`?QaOMbYiH4XM#XJ9({77!_xrby<sq}BH=qr}#CT?E
zMox4!_KSwbs9C-fl`%<c1>ZFX!+fz&SE3njpR2|}w4%OCcJ9zA57pG?Ae*GG(w<J9
z0(e$g8#TLGZlJdv-}6INbqK3t_N8(A!!y`xB3CkX$dg2Ak2Bk^iQ^sR<5f4x=sPDa
zb;3vR|M&&1uCc@70zG&A>Cdw#7J^1*B0!k7!Zuun>ZkaTS=@w+0<g_qU6X$Vlef$x
zT6Gw^VIO(BcOD)qCxLoCkiRurWhZ0w?OPaZk_5ZQQg^>XVtgJ;O*V5_@s(B7)^=X@
zpl{*4Bw)x?MGiwgeRK_4Klpv3LwsScgi}I3WJ3l+!-7u~;TO&9TOG68bayAq&m0&!
zAJ$Le$*XbqSf61Fa#|=HaF&hp{%p(&10PDR5zJKgOE3mKBwOpKGz)TM)rnd>Fo9H+
zCVv^@j{?^3;Z3rY;v`AA#1zF=ifOm}Fq*B@^ye^fIXm3N`BnYXS+vzkoF$JhKE#Dr
zGr<(h`wJf4)k~lfOoJ&Rz<w46%>tT!_<}lvZrITvlVl2__Lm_{rB$-sL*iZgXrr1P
z{!+5l5fU`g2U#XP4&|Ni86upwwbYk|QxRVgC;u4huVId1Xli6>;r7mMv=kOg#~;vm
z$7cTKk>vg9%k>3&*AAbdHs`o%!o=UI%8>R=GSKNgvVY}J>Km?>y_0^y@b^`bZx#)d
zR}F(>=EwxiR5@=YyHT9FzW*S48+p`WUq5|%jsFv{S`>m4)3lo*4v$*Ji{!T!(n2;x
zu)+lIa^GAbqW0!v2trX>j|=x>`=L;dP3zVc={lr7g7h{P<@kxGZJ~-<ENkwXL#<5K
zB_CefmcNr3mHepbB<?C(DoDh${X<lQsbaAeuFPjYz|cC(dGE0}L(`6jtXYB`Ev`Rv
z0Wv=9QB*7f+^ak34GA{Y%EIqV#KhJ7V(R?UM7Ez*4n@{8qqPl}bI~*GP>H;Dbfb&G
z(sCH_0Fz?{cK7mi)Iqfq*`_*2ES!D&5OU-wnP@69@kn}xKgS1zAC;%6O%GA6oHG&2
zN%*4=cQrm@wOn+RQ7)r|O9-P>fDD~W8iFFKM@V|50bO`&!*vDybfJ&Njd-N#uCpgY
zrN6rK+#%`IGm5zEz=lvQQ?}n$%!U6xRs_OCv(os+Be8@2HrpGIJLn@n6c<?kw9TKP
zx6#N?O3uy;LB{$SirIW2v)s`VcKY6s7!=b|S!4T!cKR3}OOl9jE=o=gX!l7?xbm?A
z%I$xf)?X$dudYmrDO`DA7t_zOk6LoyOLGH2_wCz9^NBqmWVMw-Cq`SRP(jbKMjypU
z9G|zWb2?P%YoTjv8>^YL>QSDS?=qViG7n{Us3)fJe)14_ur;Qhes$_WiA(yxrA4iL
zauS{sET*U%Pjo_C?pZ~o()O0JJ+Rf>PG^IfIdYgV>H8Rw7w2=}nqg1cLFA6^G}%s}
z6QbvW_}ej(cHpw>98LIf%%1=aS4j@rS*+Y@U=Hkz{=%tl26SOiMdN-CP1)FfpHSNZ
zC5Usl&5W*55LX<_=CeME{cPqo2%0M*k4H3yay`G;&#g|+4PgBntZ$4^m{ELS!}<Wt
z#<=W6J+4D>ile`xd5H20p)#(D4xjWlvly@dK7*_fKj}_T247s+%adP#ftX3@8=meU
z6vmPh9jwegT+y5y2#J3<j<u75jfg0{8lmq5&UTMvyaT--meYN@RUR77^aZG;xbXUA
z7EN>>!jj}ChS9?*6YMe%wYfc)zJ{GH_3`w0Cu^0J$Mr&hii{0QZkjHacp8Sr3M|N~
z-4KIN&`c|=o?R*S!F3qWfNX~lue2h@63Zn`-n5q)w7z?Ebb%SYiIxU>ci{7QVTe`9
z%P#b=yDmWI(c9Xrgf|d--Sd&H{0HH4(0!S=Ac<S1>Hy(qpD&Zr<u%9k4?-udkbm8w
z1otaT2UL%iVKPR(e|s}b^uqDC^1Et}@mH;On>5Vv1lf2R6)sgYA-5?t-4cxZIpM4H
z@0zLuWDuXFiU}m<Aof!17c6Wrzh+d9<#THK%bR3n+m_wK`bCC?MxS+^L|~YDtC;bG
z>`yGtT0jFSgwWMeh=Eis#aAeFLbVS;Q!;I~r3DYd(}b8jwCTVW;%*JsyY;$YM&z2v
zcwW)6v(`RCDu@O31{iaynkdIq&QL%qQoeqtQ3={IN=zQIH@H!8y~R0$K}2ZTvN?LE
z@3D|?cIc0AQ#QtEY@F^3rr)<(3TcBg$CT`e&z){AwHVgZL%scgfCHDbZb@x*0@^MT
zh+Q`9@ef-6>DFr8kAkTBW-wcYHz%NeM#hF$gt(!jlgoQmg^~ax>-?tY0(V!<3ByWN
z-E@yctKt~m&oPRj+jUJuZ8pexZW=+{vg%`^ej<qG%MJ`_&dG5_wX2K_m!!nUB<F&d
z8)By&gjbXgGeR5C8lIJ#j&v4!X<y%QxE#kYD1G1yPHbQPx5=Ym1r$5ZWl^caW6JY_
ziH-$zCyB_Z#W|qy+qMRlirUrN<a21X)RKmmCa~-qlo|FYa+|#qo}f0f42|F6CsRDN
zp)pex@v@^+{Sh0+)TKE~x`jBZB1XZRs-#A;c{GVRv=Befm3n!m6>(>mc1rvJL%gl0
z!u(5d=&WaqJYkFdHoa1+mdkZ?5YN|<YN5lp1Y1u_^FiLS)WA=}&M|#%_v(|1{6fFH
zVHR!ZPjX;O4Tvi4@v$o953c8ciVUvP85pU7O3byPNu4k?a}7SVqEv{}%wgvH3PxAg
zm!BnsF@sIkytlaQYwj|3pN~$n1Hp{yah=fIQRt~$ToZRA=>%>0eJ6)WP-Gv&=m2c`
zQ$ym0PgtUeRmqJrh<Mv{(W%3RuJ)Gr&d|DlP8`M=t}J<hf)ew~pXWUw_Gr7P59&w*
z)%eUzOu?`S(6%JDD`iC6b_w072UVJ%L*)vyawVE=Y>mHm{)aB^vWLQeZds;VrP(OQ
z^yM^x5@ah0QUcietb^UG5_i4JB`*IJzb=ei8nJzcxz&p9-JtxXO3lkUc^O3?`u5oG
zzz)UR+xGZg3139z!fB$tOKgDE?sL)Ur$0)*KQ2x8TPUQ^=hPBP_Tgvcr$l=rZ+UI9
zS8T9d_|2}r31FWrp-q;qVw=q;zav}TQkTi<a`qf9k1nx5+;n6Cqt#^=7<s|M|CtXU
ztZPC9&<J}OE);k8`cFnzNuP1jMzGlLg>A3`ot?Irhfd4C<#*ZdL<pqAnI*@YxGLO4
zd*G39!4UnTHZd4i7yBxi@MmlUX{^!x3+oOK<@|SoR;#in<(??|Y-<}FuN8EUS@VI=
zumi(6#<LjHXaGPi;p!iRsPjp19Oci<(i2wW(0%-)^Q#SLlei}5mJWw9Kus9&39X~W
ziJvF;TbTm7&v7#3k7RFaeO`CD*7;Iapo_ggGA*U=DOi2_h3xtRRZE@#O;J(rKR_e@
zeS{pa_x9hzFMq3M^5~*Ym*`ybI`c)`Q{JhC7uEOLG5pxZ>!8mNiRbN!Gb}v|+m4Uj
z<uT0A=pUJ=*kvW!=hQJJa=L67B{J2<hxvPHU-1==yFcY|B?q_pHXMvKww{2D-?_tC
zf7m7TuK3+e1jPrWf96OABmm7jN_N%SDVo2Gq+m{sEe&<Y=r+K_9nmh8T0=Sv4MJVD
z;8*8e3{$#VHWn7xF&3`|TWb8k^xgXIxXIy0Xj7$@3!^<oL7^Yxqz6_OZ{J@7cv7n%
zwbSe*xBm7cS2FQFptSxf^Orq>#V$)qQj|Y{w&@go-l+DKF0{(*oF*o@UMQi<xBrWl
zTI!rD+1eb63{!3f1q{GZ^lSBM7Z7)_vI@{Q3Y@68cYm^<eX6Le<=j0H%;CXZKc!<F
zx{jOf9^Px&KBnEE)D?2cBaC9ev02kyk;g#;qoF2NR2E&6#c3%>bvu?F4YGggSjzC7
z0ti;~XyyDyh4LEAzjg!rtT|3-i$>B5h>(yJ48v&JLMAH8Jc+})O!3^XM*t-f8ZMMm
zSnv+@t%=wjA8MYSbp`O34{lANp9^e;Vq!xocn*ALkxd@XUwqf_4iRa0c8yl{<*nc?
z+<y>&a3bTnbdUk~P?xK4J7r9i-{lueO~r4-KSojfJ>ej<i_)z0QvyIqJxEMlly;y0
z9)xR>URvtO9AANZDI+p2xa-Vn5b`BoZ+WPWy4~g&LY5QWQTb*`Yiv~w>alnbTf@rY
z8_2{8zHJ4;df~sMl$)PYO8?sbky1AQmz1*Lzoe9nQ~xEUj1RkT`VT23=G^+LZpYdw
zuV7J2MVW46htGZ;JQwC-d-O%bp}xCO27!%n4P7R=N^<19si@WD$Vo7wS=E!nb@#gf
z<A^$p{^aZ+*_R9ku;}Pm<MBzi?jrVdmZuARmf7vZ_&_UPdF3l~Dv^2pZAW*GPb#@K
zuM=)GT|jx7;D)?0yxEGrzU2d=_gIjF)Us={%0q1-gEOaCxrSLMHxxXFHVd+Wc3`g9
zPi*Ni?XD*Ac^$hj0^b^PP%h7~@#;xTHt48ITfxQPu%<BVbjMz1{ip6zb@}h#%=TYd
z)Z_nVx=DFez@{L~6e?o@-Mudw$9^wSYL>8!dS!mTq}(XH*Mars#_$%_+z@L=lqmN;
zR(}qeB+H0Hb1ypN2qmk5ST!w61AY(E`fR89G}%nKwFcGAFDe5!u6x?xkvWdP%c6MK
zGrt6Dq?+n&Z8aJyB-GdB$~8iGhx;aE2Zw>NvD#lLTAirMvHDeW#ax~IA4q<gENhiZ
z)gmWGS}V+K??MM(M82{vIKb+EZ9_$+H(fOQi8}_$@aD2iW*O%VD0a2v)gB@>(_LG(
z3b0#h=}Qu(M|^COZyj(}AGA6O8F8c*h^Qx-Om55^6`quAw+9c(jPi{8FWn^Tk+RGz
z*>GncwT>xzTn~X!ewzMZaWiDuGZaX`1-t6~tSQ?R8R+uSqjlcWu*c&CFXCC6X{=FI
zwa=kAez+#Y0LaVElg@I4T>T7uY!}%uY;&IO$arURv>Su@4x`8>hbtq~*E>jc#nbF_
zz&gHu9)l(QM|`fKaxQBWIg%X8cOjvfE$Z`;%%<_Iz>yfsbT?@RmP?u*r&>V)KV2{l
z(Ig73>ZcWh9?UO{$fJADq3Dn_K&6OaIKW;f106p&f_!T>uZfXYzsVssro*A#nX2hl
zb@ayYoY!zw{Dge^n#il#5c&NvM|?o10xe7A=(gx+jk{^*!!T~*Nw;8A-c`*mv?p41
z{j)O1)1z8^=+KLBcSZ`sXR*JtVB5NG5ef^vvSCJsVhwK4cvWiAITZyhT*Fw64-Q?N
zI7OeY@k)9e_X<mBDW<<*r9?f)50D=;@s^c4k=caloKIO-+@g5D4Rg<s(vyKSm+Pfz
z1{oWbrdIOfpPYFwHr0Kt3T$Ig1Z?mGFtMr@n<vg=faL%M*-ABG8f|k~jiouKI}(-U
z?`_MBDAI5!TQqp6bDd?}2Fe@+K9w$V;v_Tl@dq8Ev2^wu*f{OpGL;9$!H%6jkI%#w
zQf<9bM7TRwii{fB53RT{6N+|mN`UgWG<kZv8)vfX)fp@m3}5oiNcoV{q{T=TY;O1l
zfr)lSphm}c04lb)<~ZFpg@&Sd6A1URr}t#$2ZHDOMg0AFr~*R<3xAk_LH~Yv6Sf6M
zrAEFCvbGCngCc)0uqGj_8h(}iw=O%ew3Yg%Z&A(SlIfk6$Yl6mvQm?}(;L+c?oB)_
zuwB+gR7c3fxe<WQN`qFEEZe>mBEHPRbR$J}zrPlbeY#Te&<*d+gV=3^?^4|DonTLN
z<dOd_OitJy7B!B$=EZ)oj$EWb!+kn!azi@KZH`RE=36CG6FvRk>2ax=PBAd^9EUf;
zw$X68*@pb6hv*4nIj=Y660(S|*cGP+wDVzZO-0x?Cryj>3tyQJ$}NyaT7p+w!+|T_
z@KFMAUfRPW;bivPZ?@~$<?F16*$%ENWe_eWJ4orP$h*~xAbklU!(6mK(um<v)(7FB
zLz%K`sx_(%hpxT>xc3}lTaoY@EL~2~bymX=h%akxm6OHjtTQVTxK<0lF&kHB)*QHL
zqg_{ad$zWm*!erbhd=OPh%uYl9c?e5-Flnj0PH)Th;i=cKJ_CEe)zLp<F81ZNb4L>
ztygeBR?h@fF!8_NlKfEokMUZUQ-|75{iuH+jel}QfaE_2jUJCvi`UTn-v=M{?=~-f
z<+Fln0V2N;_XXm7?jq*>ABXL3K2Gi$kj);I<?-h=S3EcBS^UVx;$D!VeG^<ZnQApb
zZDr|Q!uSnMm9{(zoX`!`FSOjU76ll|(){D_O78frvNhJ7#pjG~z{R;Gj&I+dmM%Rf
zR`wRAh^jd43s+zILi?FC6+NFqvw9s!v%dn3!t-B)UX9~UC^0VOR{T=H`m)+<<W2ra
zHj5%Y8!vkEi-!}0H4;nMshoJ0$w{~*tfTSYx8@z?e;tAGeWv&|ha}(aFF-uFM}+4`
zF02`;KqtF+1fT3OC%r@owiqkR33imIx_tvW;vx3NbBeWX>UT7oDlM06_KCZpl(z*!
z&gYep7L#7dEp<ofX!vyB2+YH&cMtMOPFXgdEC0YJ`wz)&pDn4j$8NACF{4kt4}a6*
z59pOHpy}NY?yC^{D#W8WIun3^5Vm&BF9-)d^$Cwv&T?nQ?bt|yu^`*=05wzRU3Y<l
zuBj2tJK3OOSl=8BRS?-3d2xO(ZZadP_h{o68q0lhqYW7$V>k0oMzAD<^EUoj{z>^6
z$X+F_qqB$>jJi`B(Ds}kgG6wk(VTw)m{2JRuEa~x2CjBYYA^u{jRuQ2m0!)T8>Uq(
zTcVh)fkPWF*W8rdBUz!ozrwqJXm2(@n7DT<`wb6wB^FO9|C!iW#xoK9QGS)rMe@lV
z3rKqGUAfJ6Vo%DD71Oo#v?%bV%d`nsZt`DRxUsI?$v7Mdd`%tOS!K1mZ)uM&YO%lH
zb@wLW?`lC`g8v8cf0;R-|8Fzr$bXwTB|puaN*Qvau4@!xUTzMbX3o_AjhXWs&_m&l
zzj9vaF!=3tj+`GwZ9Jgm%P7*Qth8UOdqiQJ4?$RT@y@gt_8)V+9io#I&6}j8vn+nk
zvbe^o#h9Sl3c#LizG}-$x=rpu^@T`W!)fmAmL~Q`qP(T<3DD17(#~>92+KO9A_d#Z
z2&=|<iQYGTb<LMyTGGuzLlWUZkXsvTDg@C>-lY$C;@d)3n$;BDd?KB1kHAqo7g@y_
zMnLEQy%Z(m?1T`{;#j-_FtP<$MHFn-zEGcRADxDjOjc(YGMw7wrf$qT-KJcBhsnmo
zVK+g;p<UBsnWNGn2j?Gi%`v!%;yFw|_%ohmd<3E0NEFNl6gw0OH2;IR7vW9RE#<!~
z`RJARgLxtCTbb>d$?*F01`a>ZeAqn-XgUxy;J15p5T!%6`u5z>V7&57H!focQMBr5
zL%Mfy@Y@GVtc!YjVbD)b%iwZcAdnIWB!$gOchK0!YoChgs96}b5}x4>U!H(Ar@GF0
zVbZdG8I<x@tdk)2e{wT}o9QgJ>rpx*<E<$-nE^llG!R&isS}oVbROokV4p#o+sFG~
z`bVB0YWx|39#-KUnNekFC$5F~I*T$PCtt!2ctWg|-7ClLm4{78lD9MdAoPcADp1$W
zBZaf!KA1;T3I<X}?Ej7iRohZ73;p)gGyEn02`Eb-FC9mKgS0%{Hvu8`nM>cg+Z)ie
zj4}YKrn#yp*)<DGf?6aNGVx-GemJg%%X+N!e|E3H$A(2%n3(916pal{Ot9ELGkoZu
zHZ>HTNNa(a=D%<jck{&j_EKikDbIlMy7&jtCc;Zk((EgwxWa|c5NbUC4}uAeU{2lG
zF%|yK+eNmLrqj2&ynh~`+xW_gS88*T5&MD_W^B`dWNju%E~)5BY-SIwqM#%aH(<=G
zGn-0On>4SyV1B;6u}f`~>*_vQTfFdL(Cr&PowK6roR=|nw=1lJ$gu#6JkmhATmR52
z{X<N@j^ssP{tFh?T&Ve|H3@S5C1LkmwgTA1mCk?U<?+Hlp&fT=KVWWVDZvNzA4Cbr
zKC!8%``!L!pl<Fn`|TgzBYD(YwDMd~(!(`Xdh@BrbgnIi?xanOvY`z|I}E;@zobQS
z4SF|VrQ!6TOWu^_qiGZ`qBe0RSHzr`w3vlaX54Hvy?3Xx2mP%SxzS~;EuT2`9!Lr1
zk(+e*{gmnc0+G1!J>{vwKBN@#z<v}5SK#60(-Td5ES=2V%#~o;gKG`cv;8d?cSNU@
z=!~kHVaO9rxWf|jPM*OLgZDlBTLK4l%!{Ka%pT+VfaU&0oBsfkUS-cJn9l-xfYbjU
z#Ne|;&8JhqW8<md3j^xo`;1S3%jTnB&y2la!8?)OghY^Q%q#$uz>7aqdSnnSQEkD1
zg70YQ<g6h319#z4!7<AaeUxL3mWO(b6%$FnJWju8zo>1ApDCG4pw)<LJ!3`o=9jX}
z9c2?|9IeoeJuM9kNfBL;famg>iac%O_X_8uPTRk8+Hf;vguTkk7@9OMN7gtQ*0vmj
zei1I?zq&cZB$X=aEM&7+RUN}Jp7Qv8d0V*@098z?@XZDMG0tp)BtJ?*263cJGzDHX
zt5TU9kY~FF7P%Y`MZoG1HL5L-eDa~-3VOHX;qYTE0H4{u7>S$2O0{aXef{L_0bX08
z3Im9P@D!-|cAG!wR6vmM0<>=iWe5r@fpnyiX?#l;5mb3yRnj42Ig8Y~Qzly`TM)-!
zwe8Y*(q~#3UA#s8JYH^JtWGXsjxV!bn(r-6R*qi=68T<|uKWu~UMx-uX5Px@4Q_uG
zJPI(4w?4e_{l9<+`#BXb-^y`um<N;xzf>%{j+B+p{1u1Qammr)nV^136LQr*je?W|
z(VeycsPfzf<Ugq|AJul=!fr+A=axRgZc8@9b@4|7DmlLjYH}n_f&u$g!yN6ZbJ$S_
zXpLx?gRanns&`y3NEY%<j+YxC9>tRJFtFGv*E#xhQtXt<1Lmk37Pjg<FeQ<FV4+<p
zaEFV<7>ye(+Y=DV-@c_)leI0j*<qgDtpF;X{`9gRBC*5Pp#p1Sm-FOxWQbNRjNO7@
zZ;h+%jgF+QzPOt%yC_Hgk>(rEMwRlVvQ?STq_*i!nDcQBtj3U3$bg5`T{v*05>i!{
zR(>1&hHPq<3T;m-Xas33O{_4ouO~CaZe8rwW3uDh6HQmxRh=Qr8XHAJWU8CxCDU^j
z7YUD<LQe`CL*8!oOJi#HNDIfffriqKActB2ygZo(W_VO2{BYZnZ{Cu>AAWHtb86{4
zZDGlCU$M2|{%qkcuxCq{$_*Ih-g<(#(S8^A%=>>bqu%cx{2fW)-Xd%A!-ZQ9S?(64
z6`xeDA^BPh`?i>;Bbq6YUmrMJt~RIhVqvFdb}P&FL<s)CRF~axovRTXy~_QIm_K_B
zTE_3*C1gFXHbo86O+0s!#VRZiNr|5kJX|jvC{c}cxS72M5(%~X!DnCOmI0U2?)SZ?
ziTAv8j7Bu#o~ptRqZh08ir|sVjJ=%i_-I-kJ+C;2b6}ClLn1Q<%W4`Jk8{$IK%`5c
zjF(PJ(5RIZL`itvXjif$ljU5<9A;aoAI~g=@6fc~I-cRz*jx%ak{1egr9x6Wc(_n0
zNz&9aS+1Y2vFLM$wW)lXIZPxjx@8yF!GG!t)ZOBoyba1Zu;|_X%J*6zuR0hiQXL0g
z|8<hQ1^p4PCr!&rvxva0$hJ?n9^is09z{2M|6!|>>gJB7duPGzIz&sRl86&!3I=>3
zBJmwrFpXJRHq(RO@sW(BkQjn5&lBPIBB=Z0RBWf74cS1uA=(e8*{s|4T1%cPuLM#%
zaptwdBZW|d$xS{Ku7NN$%D%idTQ6L@K^;9=aB~Jvqy2-}`p;0;f6wPXh?M^s|HOd)
z&ne!G6E~Ci+}-;d8rmSClq~5$ZO1I*B1RmoiSJWmgt06kpBv&&<jJ61vD1S}et81D
zvbCLKn;v#;dH2_*C#Ywx!(VGNb)AZVf+_xP@3}AkXYl{4KV%<5BVWKXs6v_u*$bAQ
z1j%k3ofQ&TD(o>6Tj98)owOI|7MV(n7RjGygMIJn;ryp*;VyAYo{)P<@&8QU|DSH%
z+F$=5?C=+6-Y)NV1NkD~-QHmq+?J&82To?hJ)2(I@5@gh{(j2ce*iuSz(j8eQ*REb
z&xb^a;HPn)&9?u3=I_V#imqfdG+e4ey`?&k+nZt}u0<H0`$-$pGc0KEtA2JSY30ar
ze8;m*f3XhNxy*aN^wBe3*eB)ghDoXPlIc8!v@r~fr=;en$a+t)UGWj?oqMQhjvPH$
zV#~PLYI6bDa=Fy<XTRp0pX!$9$D9ac<GfR7sE;ROtO%*fg`&9nm_~e=Xx|*oq@TrO
z?N{E<N?FGHA&{O0{!X?#r~TSeQTbhsVb;}KBMHA`1N+{(rXDuy?QC{2CeoQZ(hyvJ
zB~C;0g>g=!PPY)`ro$uanzo{UKiy_f$JBewqRRq=f0pD}qp11{>$=IRy$k=;jxlI@
zm_1X{FZ~8k!>a-MQZ`PjEXW<2u@B2I+3@^U+mIvMZuniF2u~4hE6X|jlQ<r!miFYz
z4g+~|t~uC(b()c%0>d68zF{OuR|w|NP-rcBNeE%sRGYsGqY04FnpooqJNr&6frD20
zi4C-tSwuxWx0=9ms-}JTDH+`plrf+V0;XxN2QW1dFjILfLO;Sg<8?4r!BrQI0jSkK
zJ7qBNlY)n*c&I~!Ia-E0?T@Q;c5PqT3LGj&m%D|hFH9w%QX0N$adn)k=O<{M?8+ze
z=2~YlP7FrSRCOF`bK#avaDxbk0tEPl)?M^rq(qk~lvUV@G1*IN;Rs<R;gHg?(zAk?
zJoqBt2Gw-%OgtFz+LY1RXIlN5M{1aOPRq(dOBNGEw10*h4F8A&aK$*cPH-mA|M6mu
zOrN{J4*<>C{(SPe{K&Q7dE1PjAMxmBUv6Wup?;F+bFv5}MO7I`qLuNs`@5}^lKn@4
zBO)Z+^L{=~kFMA~4pUq1BwP2q?)W@zTZymeL)7cnf~+h(%aHt?LHtL;rtDp8?DF<M
z2$Ih(l2;tvLjgj}PnmG*=I3?J-7~_3PHO12-FI44edrk+A<fns(o>uxpQBZEktVA*
zIlsJyaoFz59feRVPO}uzTIiUA6T7W}GVAv}LOf6SXPArCl)<f3oCS8@$@rdnT`-Hc
z)P-~yfNMjbHb)@l%jqS>N0$ZCQ6^|PC#iFlZ7}A<E-n}KV#$msJu7kG&~4Xi2r-9k
z;+t7OOeeqV6ZhkL&*kAgGU{EfS5_9ZTGttTN@d0J-mPQEghWe0W@M21baJDzl0Bt%
z*>yjSeT*HrxGKjc&2@M_eKo7u%#g#K$7oc8UK_MjKZ((zt{<D8GzJx;C00ToG@H1f
zREfUXp?`oYS~9kf(McL2iC4Zdg%K|nzq(5(Qr)pW0x&$Q8kheAZ5D&z#C_5OpC3$`
zzwR3NHPISjs(UG(OvzptwL_*V1<d*9CqnWTpn6ToVroaxm<|LjwJwKgH5`4BOA<qp
z<;6v&vi5{vvcGu}+&=CTQ2x&IpqI+g(n-4^6T9o^Kgr*PFj~ATVk{EJpsP|nh?s6o
z5>Y8F!3WTAxn?eV_Q<Gc6=z6)FfsSoAE&4z)`Vjd1I$~wdW}|~EX8T{i3yNdS;&V^
z(P4Ev#~zjFW|jQT?=Vo$rTxk4o1^cP=Tt82;6LA?RK@YUcX56$q;HLZW41ZTd@D=G
z*7j|!_Lo(vKPBO70T#{z=+fUoXd24Sd$GB@0E>r5hmqBli7ze!o+Vw2A`@1FR(Uh5
z!DKDjAz~Wate-)EHvr3y|J|>_oTv5V41O9}{%b$_K_6P*-XEodPz2;S@o972qcKQ$
z^ubbh?=cJy=M|Lro7(K{j?KL*0wZtLbe_>B8=PdvzMtIGUDeK{ifUYOY54?%IZ2t3
zafx&D+QJ_2Wyx)-dZ#UZXFdV<|5F^_D?uPFm3PC<5ui$laEQ6Qo3~9W)AamdK0?tF
zSA~gSBMbcNcJ2Xr-We4YB{@bOK7&V`Y}4kLtm|g_sNhsnAO`BHF$mSI1Bm~CriaLJ
zuH|Q3rKE2u?+nX&*G$#G4{JOxEhfj2l#!$hb?Lw(-xYV%sZn%M#|#!il@TSV)L#vT
z?SPRj2E;8#Gi+EJD=N2>H(A%Z3m^W`)T8Qgse5rbBS|W`SdZRGKuz2vuDRDX4PT`n
zHd7scQeh4oO`YsOZv47m)wYK9ld?>JaC0M|TwnmpjsIG1?cAn0!@-cJjsYS><8LjV
z<-R60b~P6dd1n9Af@urr<dNF0tkNNO7kkCQ^jMzBQw{T~ud{SD1!d_$%jgaMvq-E4
zl({tSq^QhYBju2T<x}PRqb|!j>^^@o?3cWt<~O3gQ9p}X^+#bsofA1O3I~xh+@t?$
zerAy30C#x2IQ8KXRMQh<b8!f&JGl3nb5u82NO6^q88Tv9V8bl+Fc^{@dca>eI*0$g
zLD(B?{vgs~gbU2=Yjr%ZOwzNQrh&<)P5#UvkvsfaS%GHQo=@EnCziGht+7exJeWw`
z%**2sgk2WS5}m6&EIjR%HO&G5)X;~cY4Vyt4q^~vzu5cB`jrO7%!J3*iC<G=6W}Iz
z0~zv(iI!bhXJ`9wt2NC?kH={Wht_`<wXD;Wt^bYvXg}tKe?u0q3mmhmkRLL@_=<=!
zKE@RuLqtX%Od9axD;EXhIb{XAbE9nazCP-L-en8NL__wnH?W>I)T)F*BO{aHPzAeB
z&^POtS?q6zF;wUcCA{PhQwOsR6zXu|#$7Y)lO6+3$Mmp>`<iE2EulaesUm0VA66ll
zUts{q!P92R^yGngiQxn)3_v$@C%{nBI4)HS=(X)LK6;Sq)~c=dXROzNMr6G3PGb;P
zLB1ub;^3#(+*j?$?q98QcAQ{*z%~2u>a<gWJ-_QLI$c@0WbSWQXEP>?n30?i7N0Dn
z3LtIvib|yU(d4A8Et|?1s2Y`2dzaJ8ffnrf58@6`+j%AtpuLF!6A6odqMYPZ&ybF(
zM@oD1onbl0QbPI*2g!HX69V)H@VtGxtozGpZe^TPg64{$=%$++SnYQ3TT@i+omr{o
zD$@o^y|`jApl!ugE{Q<uEm>4wyFT9ixeCy}g==#AlF(QfGqivDEc}j;nKO(mCKbtx
z2hRWX&bOMCGxQr@<YYz<km1dgDnQ8A+Iz7JI$GWA_?(_6#-=rSdgCiVd?zgy1eie`
ztpC0IZ{*ex!dZSKO<w)G8e6PY%cqV~?qw+A=c4a1!k31UIETu~W{{2~+_|x6`v8w2
zJsKaS1QunI{cUKj_*+1}u-t2BY3)|da>}ucBn@<ld*ksG<$cRFt=I+VhimG*q`LEr
z<$2cO&bF_^Rb$3W_oc_}OA1QWrHu0geP~!Tc@}ov+20gW?4Y%SDT6;V(*5!BW75oF
zS?13$I-j~0WXI%n+kB8sPy3j@(pQf~*p@^}jIkkW3Nu)gg79sO1=|*x0i%O_6r^n`
z+LQb(?lmHh&+vDEfK!63X7kd!3=t7mkh#iVeA-1A8fGD5N%_<SGA(l?x3_sEriGQC
zq_?KbU_BF_72n-iVQ9Bx$PdWLbQ##TTvKD-6Vkq1{m`x|=0B)XQWc}M+LjHE7jE_g
z9*DN!lrWaMw&<)yIDp;2`e{br86+LLF`Lc!A{=78f=U<g+o^?o3KeA%ez^C6{HS#T
zsyN@9Jc_QqOYEWEAsJdYKa^Bdf6mZ|0?Z_uPG2I6*=*xY{gpBs6e?=Ul#b%ixP0OW
z(0;q@q@=TaYJR~kRh!>Ek-wFm*}4gnjK)}NewZN;9xZnK)hE(eC^lP!l^|VX>(=TT
zb7gbpVC46NQQkiY=}y2mt|U2`2|MfHx?ic4KTz0(849<PRY6GdmspToq|eiMJet((
zhWmE!i?f<`YP}|x<J#}&(TKb{CuUY5yp<}};F&STeOZF9;DHojxPph)Ehd)QPibd4
z&+t~xirmohF>4~hp=={*uF%D|GW0f;sd?+f3i|^IW0gc6?Rdkqm{w%7@&>c3qUuLg
z{oAsaT@-e{OJNn}*4Pi#K@2tqo1hV$TWxjdJc`Kd^Sv928y@w>7n-_17QNkNFXx|o
zG8T*CJU^Y(9b1l}{cq|y^qNB{2u!AiN-vD0sRKQdk5a}Y%hTK*)5U9#cQ;2`1q%ox
z5RYMo<e)H5@mw+#4@)n`#gv6$?-A+zG#}QL>lE_ooypC+Wq}P(PjM?biTJ594h$;B
zYY$U_WvKPSi&4!Q@phWyl-f{TZizd_U$^CCAQasK(uWaczKygc*_F6YbLs~pa4+Cd
zl!11@GEHsPK8Cf4VfkqdK{lPt^wrhUi->Rz>X8f)ff=dEX#O2>tnnQF!MZj*0RrvQ
z{P|TjlhzW*ep4}G^N;Nuu1AfqhE)|Ioq)^<Y6IqLPQ<bjnVf#XE$Vj17*hkvHSwfj
z)nS)Nl|ML7D!+}ThE+{Uik+)1;0`|(g=H7K2AJk79?J7c$=}tN)bNRmqG<D1LHfW?
zsKNg%gZ^VH>*acFBSdWp=%uN*M6$RPx5*?9*V}lm9B7bP6S6wEy1V3yiB88KkIh?E
zlq1~~A-<7JZ>r{)Vs@3jzB`toD05R_G~#mIis{@-ryhh9<W|z*f9R*YnI0gbg~@NC
zu#wm~WrvP^@+W4Qm%fOgQ9@?8D`BbVd}UbeG%|Dili!D(ev*Jp9-K$~I+8Sk=qi7A
z(0Gn8Z9SjR*uE=esfQza8)gGPw*YMWqul0@rvJe|HEUR_{dm2|MU}*TT>OJ)Hlv<}
zO-Doje2EhZajz=a3&Rpx%969PxZ{B})q#aLw!|MKP65>wGf5ME!mG)(FKKh_mua!6
zN@yNb+oIpUUK&YPu?JI4L~{RNQ?y!}Ej%!slrnpF_lnS<^ebmJ8fAIB`Q@k7Ack|E
zp_N2LrTN<1?`8a@HK=<8)+rJLJ$kQ;AyXx7odJQA1y4Ujcu|eS$sf}`HTU`A>1$wy
z`#F6&8H>zk#1cTDUsm?m-Tm!K*Sn?5?7JxD2B#UsZ{C{r1t~t=<))>`VgikIJZ(?v
zr_@xJj#JAHywe@QELd)dyV6&O81F0dnKOkv>SB1v;8_&(P+;br*MLBaAMB!TF^)R|
z(2`Ark=9;&F<2$j`JKEaazQU(_Zr`0aDtN*`Y7k_u`GrDcLAvgaTgeCfzk<0b9lZO
zSE^q^pv_p!U)Go?e9H^nIH&X+w4XAA+|<n@GtX5v;5+5z*9d8)JdRx3muROo4NH`{
z;_hc9DS;?GiLWUNz2KcXVhqVMuEXU3JbK4m>+p6Ey0?oN#*$ls67e!Pt1XDzIZ$)m
z9?Fti!jj|{*Fb03r5a^HW;2^y@7rPt9U4bui<)dJlEhA)Ai%WmsdSk;8^OvCb@IzP
z;JiQ1J_rOJ!zH0$$Qz;U#`dYuZUbp);LUWE<}mBj5zWmRsl!rbLrXVVRbAQL?-@K=
z$OoxG?ua>64g%>!V$&;Wz3i>6d2MB~Pw7QbIK8y_mSjXOP`;YK--!e%-xoZ&$Lt#D
ziyx<um3QIriq#k&B6|}mKqk{1UuH}GXmZj0P=T5!`SUjD25INtvmZpFwKZEKX6ZW4
zfb*;7T3MmA3`KeOq0(5IDPcVV1wYPAVGg3lw9Ck~i#bkpngZ@CntJ`)%Cr*ryRquh
zXkcmxfFjhZ$f22f)v0)2z$s-)@3e7hc|n<Tv4Ce21|_sdPKJr?M6=A(;ke_Wny4vG
zrlfire7HsNXSc9gVvUhp>P3bfze*|DVW)l8haR^gef?7EfeKfBsO2Aovdb5@baGl)
zI4Dvv4F#AbHxzXg-XZuWSFDst?6^8+1S{&6wx{pd@D=;EN7+2uj2k<9G^e~C8NTk<
zicZpwl?p|rF6Wo85u=){v7DQX^{zlF04}zg>bafp<F{f?{TJ)JR#DfKr_ueD<U|Sl
zI&Z~Q0;a#c@uJ7ifj#c^<Lgt}ccYr(eY$R{I}Hsuumca5!|VjI$|EskEHq`6*2xHO
z-%NCvgOd&)?(N98hA3*3Q<F89YQ=5%5&Am>Gr?-aVyccxXJL0N(LcNunts9|?1);P
z|GG%eAx&<dpK`L{IZC9>{xNh;_Cr$#W8-&XnjWZ}gg2xtGNin8&xGBO&SVu`qA_Vu
z4vvUV8}nt1a(h9)NxviW+5iTu=WcK@xfg%k4$Ipjp^`>Lau9M)_rY_-w+L2()TF1m
zM^gCRq`=Di!mrM`pv5}ED@IpkpJH>pXSYzx*IaEtT*SBTW;ZG-9;`$@a`dj<-i8~3
zRnZaNe0by}jrDNu^~;q$OJbVf+lZ7O0Tb<qGy}SROm%sH7w%p>e@AGU^*;!TQUa!7
zU)xPUK7K1zg$*DFrXBO%eWsw86hB>avicQ0>piw&A~W6j`$C}nZFt35t;fCPb?m*1
zNv3lzs*9wkYu%?aSWYHNwc`a?=XudmQWhFPSczU@MdPR**S*cSor9&Y(V}+1wqd^|
zzkZqk!Dh&}K%p(A$>(MtdgprgUExVXO2f7_oi>VVHe;h0n-YmM3cltj0?{@J^SDzl
zLXvROY<a>&@Fn+u`c}6;o*~O^1%hgiwi#0k9bOI!!?l*Ta3GJ|m(;HANAxtQ4>d=$
z5SYu6P55!p@(%Te<*Wf>_-|!L4toN?s<!e%*k_mbHUxx~l;t5ND-AHitY-C64MMw|
zx~8y#WOIXS<se-dZ$))UEE!iq$%YTEO~>~Pkik6Uj)AutC*j)FF^X#8XS!OUzP5T^
z=duDNV?I)<jFyoPBQ8)|N+37TG`Y(1R;yi}xy*5npHtz3{JL~lGXl3?(lh3$)|`GQ
zY(^DdYiG9wX_R)2_E)ZC$n<s}LF$;M3CTV^t4uO&f><S2u~^CdoL$SHX$G?=_(Z|G
z1i*xm7dDkAf)t0<i@D1A@{md(HJ-n((|w;z%Qrm7QClJ=Wk$9?XU0klKB*)Jbl(T$
zaoy<4DXE8rd*EA*;y*Fd&8B<6wqK7da-vo3JSsT%?NnZKT^AB_y=4AgPh=J=qBf_b
z(@e=8vhA$V1o<I(3z_;<g!kh)L+n#Zz5Lw{yd(@1BkwJ->_;IUq&X<OKh8_^k`?*U
zYgI`#+7=X@kgdXzvVx=PhjI$3JZ`^Cj8As)>n%W5vV5Da|5!`=f3f#gL2<WTlrIq6
z-QC^Y-QC^Y-66r<z0u$_?$B6pclY3p2bUzghnZ9LeeYDw)zqmvH*@=3{`-;Ld$09d
zi;A{?BrSi^MP*r__Yg?DS5lF2D?XvDxIk}{;oN{7Qi4_&XDy0E---D^%wGjy`}n`C
zj0iVa@*<0A#RtGF%`I2?Tqt<>TDn_eJVNXgU_0wBGpJ01pG1zzcDb|ddj^=Fq0!(a
z40qxD0~pUYv&xtaiA%bcew+>MbwlcDRl9@f%%4rp4bk+dw(w*SWR$<-TlA{d&^_>b
zft&)cBt_FMm>fI7Mb39E6ofh~M>`oQ=GQqsYN-=;&u!`<6v%MUR%E1T25HV`hj``R
z6&J4e`c!mcwmChjKK<WnvXd|<nXg6V-z0N&#OonyTPERIpLyGFF6c#7B8^poB7T#W
zXzG9#-n3*2orEfHxQAT(X?Ii1$CgE&ZH!farSh<vGhmHmxh0oUS;8~@Bpt!TZ(yKQ
z{He0K@A^<DE_9M^@<;ev&qU{C60iFU+KY_nSSm+j`N^e1wl=JE;LzX!CmG4Q%c~v|
zasa+8m9@q)^XSpcbLCIbSm&@r{fQl?r{f(S37lWsE{1P96<NpI_6GwRk14SU{=tb(
zg{q2|NUTZFUHm`sN=tXPz6^0vTudkTgk@%shk3u~y+&GJm}v7_uTDn>S9hNkktH-U
z1?8j$TaS0ar<5VlT?iqkvQ@mpVlEY1nCQ-n52(RDx(MELx@>4`x1gQm@tBW>@W~v?
zcRf%ZtLA}wL`i?&iQ=+p;bp)61Ce?pZxs3yn8d2HhF8bHA`ug>P90&bIf_q>n4!I<
zC7>ZI)E%=VU~HJ)`wzslr|;1+AXo)*&!U|%h?vm^TsNuS0|j0Jkbv4(Ge6|nc?=M~
z)_|C>ucGAtTCtY~_P+E5i04692_`R)bpK&VUlpf$f8Ap}!bhV03E!D*qzD3)=0eC7
zGjZXHI_`tHr}+G(c%#iOadI@$y7f$bTf%@;<_+{QKZi*D&|^;B$c{+rQ4Gx3>arhT
zYcd~3WZd1sYEDByn=eQa(3HGG-6SJg>kQ<Ve<g4@j7^F}C<Wwq+%^%6x8f*lB9d^Y
zH)JKrrSD1-x-m%A$&JIxwd8#fT_dSrW95#VPddDck)(P9CVBTcw|dX#vk4l-pCm+3
z1l09fsQlo_3lKV1JP(2(@!%G^z|*~8_f=>L5|vYqPbPNZ*IGLl_99{CC7k&$rpC*w
z#AJ4z)Hh7Ori;vUDOKbsz(m?#O7J<sXKBtbf()WfopDsuOADsv31^zyXGJz5MA!Yo
z{ObjGqw6p>LFy(sJWDy9S~H8*-+6|#1A+Sto7Nm5LKI&J`Mi$G<P=Lsw-aQiCIxL8
zJTp4Ll%g@MLn-(Q_iUz#8@-=*zKx*$LRAs7J)=1(I&Hy~;vPJJa4!h0gytKC1)D`v
zYEt&M02<Owz{DkaD;+9;{OH>OngDRTp#&CK^q8F9v;F$e_B-$aTcG(jYp5<^bVQ}E
z8#$9CXUF9=5xS$RG7AkE?P4hk=Xt)$%jSGy*GJ2-*R@r^a=LKsNW=1XaJ0)I<2HZB
zB)k(Kl;<Wto=$fVXI?`K6E%iA@`b8!&|+wz|Bt7^wkcy8Zk0C&JP{bvQwj6NVJh3q
zGvk5Ra0PbJ;&gDQ(LjNQ+FIO>hokGl>!yruEB^ECv<tB4m~sT+$cwB`cgB&}Rei|%
zqAAs*_<If`UXaWpa2+*;OVggy)Jj7gT{H>an1VM&e3f)3Iufb8>b#4)`En3koHuU;
zp#QwYJBo4JKSqT~LM~#Sq>YPLiE=s_9x{Eu6m;Z-G2Uf=5>uP``-w@F=sNcUsBn0m
zP<Q%}4h-L`T8d3)>(S`&!F^RWSQ+)O)$&>~dMjZFbvon!Ob}K_0Ne8%QYK9w(vShS
zQI>Q?-scE}6nakQj4DEg$2~`<NUY@E<RJSASGD<)r7Uy94d?nV3HLNQ^>SV|y}q<N
z2Y3N`y)Ydl*4@6J9{Fj3`%1lIY#0)KMn!`B_d7sA)vjM@J^m7C?6Nq9zXo=M=J`3T
zXB7Ok2i@Rf)O0bXp$armV%URyX7Uw^bHDAD;Xf_q&P_c;Y3HyTQ=!$U{rMIoyV`nU
z;&s<c<9#2~1=SlrtG(u}uqUH|%myS$(r4%B%5Xime;xO%JIdLF*(nJxB%4HznysDs
zJtoKNyQ^^|dPZZ#1jS`#D6%4G*2s+?p3^6%f8OptP;|m!+M8wv>X94B@hHtx(Oy{&
z6;g=O*&rV;$Qj4`>*6wq`O967QLj`Js|~TeXNo`k+!>uuY!i@caI0PvX6$l@CFfT9
zSR8mjv*Q#)$`pB_frXAFHJOtXYWnMT$!ZB+1Wv4S_EYPHC7)2~Y-+)O2%r8D{GE7r
zV&XU0fqHN)4eVCcn_Ude*#R44FN|dxmmCrEgI!HKcQ65AxHXI{#x}catfoCF&ODys
zGBJpwGI#vHw8wuZclQIl0H<m8Ch0g4+eM;%W^&at6Kfbz%tIAOM_C$`&5cKg@z#J=
zzfz`~17PyPRLyzmxl1<;9H|BV^G_@YqBeyv0QfF|AA$>E^RC$v!49E)izA*IOR|N&
zO-AO)yMutSvgSm@YoKKG%ChS~x=sjPu@XsBPS40u!m>zMQ&?Q1c&gLmW@4^S$$D|B
z=+N|8Y_)$N<L@AwY^UzvY;oUSx$oI?k)zJd-{XG3)}`0{CxB8+yrF?v<p`}wy=3hH
zG_bD6?-TVjl>3-AT5UjxOW&+cFRA4T0&P~F_*&GVc*7wia=D(n<<s!erzA^>o^?m<
zI^1426zw+C*%*#$9EdN>kCh%zoN)V=(R#wdpbuKHXfGz%xpwH9mq%q#_pLmn#2=Xj
z@vm=pP&$Dx^#c|QPS(8UJgCkqSRNW(FV^})91GSR?Ch_NE_nq^WgD40eD`(V9J514
z`L;J38?+hUcQ7oBX2@?7q%!H`5GrX5<xxjQC0G1v?8^qL-jHeHt%%H<6Wz;pKx)Pl
zv}MLYpHxqte<1ce27W;vx4y^U3H<{BQQxYWC6~WWJA<8x!xX=`<*}@BF6=q%r{W#F
zS=LKaJLY))(e^m!RT+}|9K;1S?aE{$N@+s*J~<%`WirzwUY8q8Bae-2XZ{o0%s_!&
z!w!bSL0(XSCDpbr!vtsFWQQtg)x@Q_l%5VWbz5M^zsUVG_xrlQDe;Vd-NdVSHpQ(Z
zD7um%g|F@^t*aHn^0l7Cfl!`@dt1&!3z;W)x2%^ZcstmwYD7t;^|K4f@g~Qjm<#0J
z>tm652pfv6H*p|iPIN8<%WZeAUiv0CM=v$ke(&rr>V8?CZ{1F@^)iw6ZlC?4Gi?-@
zb894{Fp90BfCq+1y+3u7Zo&;K^aEMNW{ta^xjZhL@c31RbdUF4Wr&^%we*8V&CiID
z(I=qh`7+$u<yS>;je~(?ZV}vUe6>E@Mkv%o9cJFxizYr(L6;q0S)ZaSBDOas<0}1|
zSktfkm|QX2hRS9Wh<|`Ptn<-?3ng^zg)~IeO{Neli?*H9bC;K=SU9WyURUDmxU~GD
zA{2Vp>GNS#Vk9HfE-hxc7nAFyiS%7o{?y*yp>J<j@;ti~qSk9p{A{K{l#pyI$XwjJ
z=4EV|C3h;3H+GzCZU1o2+$a?l7<d<%Prg+9>f-Z!oub*qdEInR>&o*eUG^D{%kM)%
zy{hYGWMg|ldBDuN>C*m^v2XJ9{M%=a>uMf&m<{~Nja>&6w=mr5!&8+sG~ifB&E=)C
z`~^^)7t1P0Ut-1O!DjCnXC+}u5;@V{55E3vo@iz+v`FYg1>yD5ySHF^X~7ST(Lb$3
z&uV2*rsn|s8cap>z6K0ub$))=PgnjJ$3GCTidT|%O&)d1C@GfSK$}Qx-D6m34NE9=
z29Y!q5RwWGt}16@l2fIx$zw#D(I;BEwlY63!q;72kaDA-%^KdtlEIgQP%WQe>N`9w
z9m+#3RURiLgPkDxB0%(WEL-p!bcR3YZhqgvoW$Y`X$jD-WRkU5;|^=Sta1676uB3?
z?E5y8dIbt1@7H=+dbun9Y;eDQPLaE+2mLn@SR6R;MJy#GXPPpyV95a_@oaJ7%+|9$
zIo|+jSVb1J8G450{dc$dU1I|X-ktmRs6M?5MtS*H?3j|>$gDZ+{29?GM7g{B%TBTD
zZVGtyuu60W{TdmEu<Bqn;l%A@oq!&--(ng6%7B>sw}pZ4UW%;04(o_%v^wj7qVPV!
z$Nvb36I<!V*DB=H0l3D{#q7fo)zN9qH0Z$gtlU&n$<)GzOZS;Qspb7p>z!J@qNXLD
z{cCFbJ1mMZ=sxY};%DAgZRsd^4@1|A22dG$Ut70;@6Y?6rS6x8*zC3VH5EIJx92+p
z(=`;rv`R@v)C5!iihcdVp-tz5Y5ZM`jslfh>Tn^e-JIR|kujW?yUX0)Nw@Ys5(<-@
zfbrf!I$bOS|Mc&Crx{<Vv(;!Pby<NsQe_yN7wkGL)Ma$Xe7;h+ci2Sjfti5}t!u!G
zZlmfF(-HQ2V<mASJzO-~DE6{@*x^c~i#S!8=mXj(&;vTJHjNTo)^}UXfbdSu2?zFP
z8DGSkY(b}LXVj%zgVyPkDU_!n>^?o6jUNb7KVmPBDFgc&ffv(88b6bq)UfAAV?-im
zQ}`Hb2PY7Gj9Q1{J7Qg9a*7<<ZjE63;7<D!f8|<Y@HzQttJ#p<kBqLarE1~|Xa2pC
zgKUVuq3QF%6N@F_)0!#i9D5I5imeARydj(gVzsbc&ehd9n&Ee1`(#)dZ5yuHV0rGF
zj1?ML>(sN17?sM!3VD`9xNzmlHRwu2_$4@yX6QOyrBt@-uYU7JB?}4odCy_Ir6Qqd
zBSV^j`29$@sfDHVUIUe=M`i}n|4(pl;Fe1i!DN%`f$)KJ`+Ng=z-+cjY5?Q-$XQN9
zgl-2tcX4Y>!M?ZCp8Z;<^{dG8)88bfm~^)_N8#-10~i`I`*eq!hp#S@irWpQTxj3{
z(p?(24V#=Z8^mWP8f55;u$HNpCP&6Z-iG+Es?mCO=|S9-q$viFRUY@TJgQ<2xB(gx
z?^q?wqzTjl9sWl_y$*lo&7oiPn9Vp2D$UuCN$9l5_|1j97u+Uso3=`Gy}<MqK7@jE
z_1wF@3iOR1m;c(-#so79eMDauwXf4=clZ3<q!w_gwnm}{J&aWDgUzXYlnw!P;=EvA
z?YH4_YDzsTx>5s^h6eUebcybr)UxkahsVMly~W+u#oh$ZII{FHk($^V!Zx^03#XIx
z+UT)T%d}SVJuhqQ?H1ej5c9k&lha0HkZVJ%)8X6$VGpR%6LdqGBZQU#04F!ppHP5!
z0mTihLtSs?^JG3f!{3s>5+D}EMyeFl2I$wkCbioRsq|Fr*R;Aq*Itv(T$2Cr{09Oz
zyYI!GNzGVu^=>rFanPrY#hq3{$eh#hsv_9}E_NsAEyZ)vF3))tjtDp{lh1PSP#Y*#
z!V-fEah7aG=ZcV&kE6ov=)o|v&VqxuWGdN4=0||+E^R7sM}{%VCx?jDh(COE*<rvp
zSHw`{<m$s5<+q>ZCXYctwfr~6(8%lMN9+p&foTaI`z?)*6XDvQ>P^aO{wMSW@32b3
zk{1qEL*|C~x?+62wPIHvFnjQPWT-1RB3R20J1f{YU;$Q7r;@IsMA36Lzci|xU}QXK
zZkx|@w|A<#eMw4>CI3(V2j_)m0_OUH=lC5P&Z>>Ij+#!A`)1$K!o=pK9t<>R_IsF?
z0kv!uN`w{fqb48nmWa1nP7BLUlglp=&%bmVeWwnxNV5L-O(1^Phm-s+-HycbAPBvh
zIzU+vuH&AvEF;97plcF3YH?Pa?PS-;OpVfdaxN%tkz2&wnCk&-5H97oHJFXJC!tGK
zj!PvU#6Ng^$4#G+wUoX|otEi(enC%LN%iYmL}#x5xqlz+{zMu*f<sWFNQ>y2UV?du
zP)KK;=xByAdfwWY*Ci@@uKUGjZtr<-em2Ea6I49D37)2<=ojf)sy@HGXiJF{L4oX7
z5n}n7p~Py09y=kKz190NaVm{9|Lpg$k(B868A?i>&RAahCr<b2X?(r+-ewT>UHQ^z
zY)h?V%8|&G^#m3cqByFfAC^Q4b>E_VS<Q!F*CfwEpSUkUri|G+IXLA@`;}-zS?!+F
z&jy>0T66&7nrUaOohOOgI;)mgmPw*fje*K1)lr7|$rO*(J3N0q*it9|ihLcO0Ov_A
zm8mSLS;;@|?tE3p$<THo_PcpP(mP!d0t?eXb<)NyQf*K;wCilVvJc0&Q9pjNLeV?(
zFlsS%RfF9{5P0cFL?7!{*n&crOeoqQeqLxra}`TN_fbZkny0`-vW0kd11PfZ%Wkdq
zc`@4}tK92aF3(Z`XVG6hZ;Em8cd7H=4I)<b6tyiYa5M2_^h@XJ^k8eLI@~9q#df`D
zu%dVzH~}oYX$mV|a44Bx-cvg^Dk`S0ey7`zgLA)F@CS#xn}VZ@y(a0rLzAotuGnx@
zl3i53oZ*|~OqN8bcxxc@s?opqF;0=SU5Ebs?2zB_c_uILwa3;MfxSEYCPp1Mq^JKb
z(V_S97of>Zj@Yk%QTk(hM?ZY3NRw~B`z*y5$0oCJR!)-jWg+H=h?N?S&>lTke#!_L
zaK*H-jOldVWJFRU#p#TrRZ3d0`d)lVR7pYZ_A`e{-OkPX@4>O{ap`pv86!+@fzYh_
zQUGI(6(pRXhM;4?8G@-kX_5!CrrKirUYZwD9s{tIg)e_*na+ihs4hF;wy(gCXPIS7
zcR%B`-%;R@L5P;ek)x^L%x+GdCb*tpW@@-iTGbU;w(TMkUO<_~dxP&ndm%9_v%J1e
zvA6gk^&47yyrOr~TMs{PluI-r6Z+fn^LnEh)BprLd=8lxBzou=X{K8*LhVR-tlU~a
zp<!e6bsnE1$COsc=7NulCCS+yRl>^vZT(l5x!?II!NKQ&ZPiFDhq@`GD!r*KsI3?n
zLR3)|d2Ve%1^k;2+=YQWNBl*zo%x<jX6!g<Bwzb;o{61LW|%Yx?^^H<LSSR0<mLJd
zx`jxiSDS>q5O9d+xfPX;R|0xwDqC!Yc{KdYr03NS`i=afzhQwN>u_On>f~w8C-_9l
z7XOS>_|8ZvURvEC@WBzDM79AvTR+2W79@tVibfqW-<LChweNSl@L2cDL&m*R7wxRJ
z`aO)M9v7in^=w?P(C_wt{L4I$r?)UC<A-rmDJXviP`YRj{R4r6`}=$`6Dzc&>4z1?
z?|&dhW#sfT<(|ZE^&ihfJI^n>lr^s#k{dcpT#n)`%}^9&W`4+GeHZ>q>p5LU)f%1O
zp(b)WaY`bwLg$?Xvs47%sCX4U-#2AjM{XCwx9+(*+m1)&#N5Maz;3Gq!A%uqM|q+<
z97$Mtoicq;Yl0!rJ`>3Iy`I$@?nc$8431gU^|IOFbxPa2Q&AjIEKl(3_;oWj_twzP
zg?A%cg)?Lh^~o)jJWsYok4x%U*8$3;+7;sssnFyA;ka1gmsYz=l)N^^CNB88{LL-}
z_}iTH1Rd$;!~hTgICz-5OVY08Hor?UZRA5Im58$z>Zdp&>j?j4*Xr%Vva3}%PHQCu
zz#O7?iC@m}Cu~F|js9FAPPjYWqCd$yMdwp2br;xKUBgscyU}{4`WN!73rq8+=u7F_
zuTXo#tr{mIydp{eXh<tg(zGN4y!-rK3buq8Kk`qF%ZA_*PkMmftkE%A9YNfSh=*2P
zQ<zScupIUhd24b&$*sa#DQDxlM7E*AJPQ{7gLHFrlQLk8s)LAIK}785zcv2<`4b6F
zMf`z7Bmm15k%`Za%n^}Di^W7(VB6-sa7TW%tk?9=<au|4EwL;o58NFRx-JE{G;EG}
zm!voZmM<kLqQcuC+E?~r7S$4=BH2%J_|ukPda%kEjwCq{Zez?YI{}qLP1wR3iqX`p
z?ZJ3lUcZ!~In*_Fq{$0;Oi)M0h;^HjD4fdpU%_ExE(F<-QtT4t%%8ZCdzKc4@=fWs
zWfKo%%p?x2QhWi+3U@U43KO_WjxR2hz86cfi_u|AWEdL0jJi&%u}}FD)W=VSMt-kG
zr!Skv{pY&GtCF1HJnm;j*;fa3z3Usgt(!&uC(cj(!&fOhL?+VYq?diWynWwuaM9)*
zz^MVrVTqBpps)t5N<k6T@y&6DRkDwhj+4sQ(o|8C@B&BU(^ZlFayd28=e?_^X1%t%
zw0+aR&5#G-aU*f^%HHk25F6k@4?qN_5M{^JP3;xwVYD<Q$zUd>SweVGpE}~uWbDg#
z`yuwaL>4fB^71R4iVQyk%)e#E3->11p;y#~ZGpcvP-;@T5@$QJQoB?iw>=8~_!E@v
zy6#+ht!KXN-LY(qIhUA#zpSIgnY)dgyqiqpWD4I|Y~hR_-wngsx~W`-R-RylTuyPg
zu*9WMQ<nj*@Uw5(?%cM%@7B?q!xnK=KeZjCbeD(GfPkN`6?6WpIa<ZjI|A_=fq2S5
zA0q5M<ZIj=EeHJY>3!p5=c_F>wjTF__sCOBPtv?C5Ewqtc%s629W3Zmqx`Mpk5cza
zfzbHazMN2P<+L569l^fy87;K%)2ufOo|t)E`k7Z2jPw_y>D=mw95kYz0C`a;lH)Cx
zB4GpTM=ub7wq?q#fukk=Ozii68&M&s`YjgW>ALXV4D=gu+jko=(UQZJPCr2GVZ?Oq
zvkG1Onw^r(jtV@^AbC+uo`&hmexr&)h?4K;fJ#QpTK1f#i&y`xD~UuM*HDS?hF;_3
z8rK#}_M{fPdB>*>$48H@PjjtmO{Mu3+bOXhBgjW{CfH(`T(QmNDC6{uK<xJ2Fo@O{
zcG*h|IYhpkNoTHZJ13sB*L~hyKc|{fz)ee!vk;Z>vW`6Tw{KcoD=M!#{*;W5rl9m9
zaiBP~&kD8>%mGw!CXb?medRXwsNVU-k#$Q$*FKIBUhtU=zl|)qLe^5^Y7IoEgL=lS
zpw6F39LsHXGH6s+llR{Z=PRc5y6*j(8Y&(8e@)YwYrFn|$f-@wMBF9eqk%2CXx4<S
zZ2WE~TZG$|7lC6%xso(-AYBl8tEHt!#F^$D?f0sRyY4U7ULmBbmjYY6;h5^N!4pVL
zeH>atoEE??Vj#%|i9uSY69mIXd9ci{%~{~2$5ajc3`+g&l8Wd#eBAFKP<@fKu-8zV
zU_Uhy-CKXZOWYx+PTs8%BNdKtvF=<}NVUzkZtc4%d?e^n=!uTz=@o+E6t(7x-_ro?
z9GD2bVGTKArF&(yiWE-$Ej<BmvkW$lZ~0hL3g5M;=Ic{$P=BpoxObK`>wSI#XJj==
z^4efivSYOqjxXxxHs1B$(4C5qDeR7SET8u8ZCBLtope6a@hr;w(ci~5tBodgfst1q
z{?vOub+i2=T7d&6oH^m=t9t}GLD2{jS>c;n)Posy%;-x$V(4XjdUGWZa9HEJCsPI-
zLG8srZ!~Vtb-DMPEr3ZG9!II$(<uI1CFr~@*iiiLH@5ZRrsYn&Ip0<#Hkct_#VUuU
zr1Kpo*!fQ>A$^7eLZyUyYSIZwn}kb-oX^v~wdQ<xRZrD>2tkgUX~dPDRgy&1hV^fR
zA6Jt8#9ZObC~<kSHqqAcura^PSniq07<+V!6@^|69Uhp1o|JXcCjQKX;7Lo4CTVI!
zYpa+lk*K3cbfnlJ@)>aC;`y&&`%=_Nac?yxF1AYZ*hh1#nT6-{nC(KhlUPf+uUyd`
z0=IRY(M>hS>yHr2NF+1Hp@>8ij58JDkcCdR`eh=r&q2;DaWzS8`_4A572x=fiv9zP
zGj&H!sKT!EZ#~rhw*I86Vl7*S>PwaS`Ob4bOK{UNC(vb>`=3a_g6@5pPC2w#-P+4`
zyW`8TRqV{eFe#%Mc^%~4fzYL<5V|&7)1F4c{w(hncc5FFYkap}h{o8ITfv0RYA54E
zEQ|xQF25gxY4nm#^@4I*lLvNyyGPKSy+@_H8$u+arJ?+&s0K>GSf73PY^Q>>*0z?A
zcxW$dcq_B-7YtvLI8-`FeD45!%-sj^i6hQ64X|1!JB9=O3H^u}zX>lwm!39z(I?AO
zuDtM}kNE8Sc9S9t(&nfpV*5~{C%pY)5BF6Tc?ZX8k8j)o_S5jZrTu5JvYBoFPGH)(
zf01L!;X9`ZPexXM*#+X?tZ}N^Y{F5&&8O_05H32!p7>?mTDP8=n_3edrQj10pLM9=
zD+a*#M0k-n1~(W<u7(jJX}E2!^z!9a-EVD<?C)G;&7XZNT2sM%hf+>el4%hGnGTJm
z-);&$RLH=iQ3z1sxW>+pbngWZ^IMg9p))470ut%1nWF1YEhhD`@u3i-(o_e)%vWkw
z|AZ|nveRvVhv&>u0M$n$J}rJ>QU?N{l^_RvIi~@z7+NA-I8Lz8e43PR8)hDEKd*<L
zV#nf(M+B2^53A(ZFuFNq7P?`U?dr_%^}(T=bs5yCLnV|y^JNkVE0-J&{j;sp+5V0@
z9UcD0(c0^vR6JKq1+czv@i|R#hj*doS$JI|3Sm;9wKpuu5=;kS*{AX2a=3W0)y{k(
z(<7|^u4t&KSU4(vLig;|0Zr~pP!r$kM;+1O(e<71bsgC=EeDgZ6Ukg)XTbjHI0Xp|
zkqc`wwa?XEDlWQeDtERWP2jEIbEN8EWz|FZ{&p1VwRJowALdtV&xv<Sf>V{BL&a*M
zh7@(hGvD!BS6^I!MvRrdC_OyKbIxl=4W;Df5G*S87xPBQwCI`)_!RozrC4O$#YIO<
z5l{?dD_4gMo9t4)#SAM6taG-9oa?Upu{a5~dBp)gR*;CBpiT;;CU~=BJ*ZjrNSF|x
zMvTk2jXQRwc{kw@>?`xuKZAZ$*YlTfP=CVE!EcuT_`UW$A1=*+CBafHe}k(`AZmuW
zd)TWQm&;IzUqbF(iBsYfXE;(zOLJRr_^97Vq<Ow%olroSyTma);|s-^JniZZg$6OW
z?9CFs(*;9?Ce;^M156Ke=;vwx96@&$(5M+n?aD@^S&ZRc>GRKo0Cef#T3rsJ<>$6!
zKS{liIIYy724y*lB`JeyJL_a<YIc8!|07HJQ2pOi*6!w5rdTi5#$<wfj=2nS_#(<W
zv(z7zCE$pJ<@=o}2ht({B7l?-kjD&x6Ajj{{%nJ<1<TqmGNHagIYtTHprfXnkEXNf
zz|c$1Ce+KtOSnwuVL-YBA#ECbAWfjzr2(|0LcdHtoQt~vamPmBiI1q69dUu$SLihe
zACm)1KQaz7gNT`{@AejZxyN~)Q0(hhr7qN^ic(BHm3eiE)=SY;=5f&6ZHmqX^;v#X
zMxOLD@IDAi`h_-f+kXK+8o&tP9%6d5Z1nc+STAHG;C+%4ZK#}^aTr$fQY%|#2pX(V
z=8l!L=`9H59^-4CZlhzX-JBY1Qkd>qK%FD>Q*#`Iapp!sYcBiw3xw>xxDyZ5p-KXr
zk+gj0TjsJJVvqo95o^}rH08i0m6C0D+P9M`y{IU*Ihvn5g(-H!ZABM8>FK9NPj>Z}
z*QM43611XsaEid|O42sR&en1MPWqnOd;*;Nv(#N%;yu(9QXQ!~4rpT6JIc4F_zy)?
z`)6B`=ksxPo4QQ3p?3qD4=)w1U7T0XDTY&xbk*Dx^ap$bW*DPQTv00BF8|zU%*HGX
zV1}V7wsth-OEH!d@)~1wj^CHs%w_wI_~7XnQF(otZQ>FvKiwjcYo&U9#x=gm?pt7Y
z<`^zUh%-7AK=3>@ylqc8F>yfe;<^~|lotm|dyApX70enlvYqjkX_Q)Z?P`Clh<XYB
zO?WxGNQmq07E}`S&R7EsTg)4`{$i$>vW8|dou#ZWQ$9F#UR7>YZ2LAU0yo|+#toqd
zv%@qOl3}g%s2o)#s?NsdW{{I*s-l6&)3}2=p4v#pqQ!X1>u^f7xQYMdW6<G6o_)6i
zXNIIZtloh$sb<zO?v5s=YcN!>c2-bjq%QkS9aKSE^q!&m)OzyW(u*QTkPQ-&@n{nS
zpy{`KwTl~h``Z^TG860L)9Uzm<E%jVK`oy>L0-!wxTCDwkQPCc#>PX93@|wc-m(v&
z@+9ND*-Zm8OnOZ=;SPNkY+UIid`;@)=0`Ynjo&3g2qt&!6ueGK)ks(w-8o6U1faY~
zT1qrMJ(zfGkk4=DxHP5<MNKP@9?i{hkea$a-oV{ZK3-Je(bP{o<MTcv(pb!n5Bhb3
z3Zpx0#sV+fS4T)~aywckqO?6;I41Kv;|xjpW;*k!P7vi&J6jv+C=I3j%k3H`2Q~c7
z;^)s^c8CBuQLEO8>k~`%jP;%#mFMdAH#}3ki7SaMb=xKez%4^9C@S#dI1ewk&p-Fw
zuu!-tIUQdRRy@<AV>tO30xQ?L;n$L?=gCKk#|>>x;!szp6*LvF$1fZBKAbr`#$3iz
z6&X}LKs9r5VY<W#s^c7rGo(Mn43G=T>kfW4B(mpon7BI8OU&GP$r?29+%}TRdppf*
zWplX1Mgzu;-U!8SMbZ?xscCp<w-IC}=?iXAo1L<&>fTtG#WC*oH!B6hv2uh^j6GHe
zn4xG3vuT_1ZQQEQ>!;!&WfbL9p)yn3J6=Pq&FJezuKoxn8}U{b-@WAHLdCEx@N{rI
zd2sc<vg&&4!BGqvqZ2T^zY|ide>_;kGWCM;UlKU~vQn-mu_!=Pp6*52;>s(BbaND<
zJ=eW%3F$fw6fjio82Z^Te7W~E^=wnf3JjS~l~Oyn4ZRoJRW?`9<*$U<Yf<Mrt3<Io
z{O9I+r|eNH_y(|rvi;YbM>Za33*(EgI6MtD_)r3p@z(;gKLB6--T%$IEx-BuG4)Pc
z@Pz<wGvfjEi;_vmb#tSP){9~AqUr{xamE_-iE&dc({tKYkpneKV`V{-bR(Is+&J2k
zG*yQ}&-7u5ZR%axbjMJQ;{h>4i}~YMJV>vCn_j1*o~XL%nc?cwYn?MzC(gUG%qxtG
z(zXo@TL%PSuKQf_al)xiz8WTHb?1obtBN0f%Qaz7kp+BREfqlc>mwV?@;#GsBbSTd
zRZERw`3%ICMBR!L0|BAz3}&Vm`LmdR<r|q!>4k-u>$KZ6n<KUrl>peRxtDw9!UKbX
zH;+T4VkK?)r6$Yyuj~@a;XN~fBJLN~>(crU3q5NhaL3+-fs(3KX~FvHHtP?r>yLz!
zn;aOsbeBjc#IrPSYUVCijIlYIk78Bf{?1egPoA7PVxHCAB)lwM-<<9kQfhGIajgJr
zVACyAhwn%|YQDjyqq~f*SADkUxTjmST`7vKMaiMT)ddRh-KES@dmH5Sz=E|~S|r8_
zEl|xLpK$TMQj}NmBce_UXEy40@~14}FO?A<i7BsybjF43z6I)2YbjlFK_7nTyp2h9
znH;=*Tna1Nm}jub<ZSPm(v}Gvtuw~z$w5c^qPr9p25&jNZRQR_aJ{zx7BW}TM`u<e
zby-w-s+zp<MMe}iIo=^a7XYV^6b0_D8Gr+=Sx%4&I!mpn<2wD^^G9^VAf1<h`abdA
zV0Z3W<89Vv`(W$fgxLUOY!MZrwJkTBQC9Tu;~U7x%Je^!RFwG*Dlo89Gwb&)ohuUZ
z?0DOi!QOUx*%p}l44?mC{qIvu_uurVf&0+^tcPgsYS1z2Mn%c!^7*J!p$<MuO0-aQ
zuCyz0n*T}`8NsUQ^wMak>FTr6cA}hx)-qYclNs|<vSw-t%qao+#<T-3sT%7bh0;6o
zE6S77taf;pa#(InC!`J9LZS>Oqq>-egC(!pU>`8(o23K?bd0++Ml%Mj<wEe-v<>_|
z5%)48f@v+}#d}|}5dwz2%2;BUbAHSjGfs>iF4bADXF7d)h1jDNNQ#1V6{HywOb6N<
z=9Ig^=8}ksup6fVj`#QxkE}Xf7Y~_l<kwY3+c=Z_r1wxBjd_$e7;+q*$QdT3;4_<c
zU8cf=LIV6qt_Z5A{G3*0T2(bvKF$CZYAar6JH~;fWv|F3uH-fM4$kDbPt4aYw}#3m
z_SzB!RMk?4kBUyAE0yWQ6=7(HGiyqF*u@AeSa<y%0S;rJdZqcI7^=abN!JqPtdZiH
zFJL>#LQ@{avWl5rVXv>PW96p<#ePL5RZc`H6r!Zv3X3Lxv?C#y@5e)UnxC-7BfG@B
zAj7k3;caZ^-676$BY*v7d%)HACb-5a-V~B=;PNM#pusJ0d`grAHN4n)Ay8%xj95$j
z6tOY3Hv@8i3vusf&Sag7y0|G)-%qbcCBseYRdK@e!hsXmVX*=fp+ZitucCy0ID>5X
z<!}8{TRjbWLx@wF$3&@mK^RP=R}K61^_AG#d_0EhD&8R~KZ+ks_&GRbILTn#+PtJE
zA?;<c!n<M9psm;=%2fyiH--DOoE`e}H@vkav{@+yR8x+_0Nb9hY!Riv5AWi(_-`D9
zho*d<S&1j*^>NS@)a9opmABg4x0&fisJLdJ-<s>?xMxOIT{qQ-@>87BzYHg`s~z3D
z)|J|mvx~nJ(l+8}ZR;@vq+MO=!`*CJEMf}Qf#%Y*cF@6LO3UB7jY?#g0zd|<qqEdL
zR}30iEMok5LZBZ@qDytx9t8IELy2xonCJW}G#1BM8omt~ukqk2L7WwY0<`m);5QGi
zT>Q%+*;e<~h@9CR<LzgM?(J@SKO1RZ2b?Hl8tS&}7ME?{p{|rqJ`-r-YOkV~!YwrN
zG@-N@uc>yziLWrW_BHP99kl98L+NLnCAaxhU&%%RL&J=M`&JuiwLLjDU<<e|r0d{H
zT-5SW(3xhf645r{Qw(o!N+efo3#M8vBo<q)x|yc_MMfwst^n=JyPGMryLaB-EW}Xz
z*P8V9q3evU3`Tb*ymwe^i&|W8elAu})!^29qjk-uD=m~NjItwiCD1$S6HsrLP1I)B
z0O;L(&)qbMWUQt6+vgvqTVTB(%c!w!ULf+DFuB`6*EOCw@JNF2kI==_yZZ+!NdVMN
zuwGI}xOstZBD#upc8VC`73wC?1p!EmSKv0S*w%ER9}!y9;1s>g0!{7uqS=<X!xSV)
z(o7AI$BpH{E|y`S`IS+~75$rnyh&trrC?)ZyC}R{^H<z==fMt?cg)y^va>_UC>94K
zZrHg({b)q$2A%Bkg}Fn794q>3oc-D;?oEylNV-HoQ@{ltVC+rj0qRZqm!_It;yTA_
zgiRIQ=q9rLM)SrWM<)gf{5>Ihv40@?*Ja;Ug&iz-Is?TT1vT9}vspqp;W>M+1n<q0
z6H9J#X(QH<S+r9_l(D&M5`W`YUv*K_CQ|`Ca>uq9kGw-Um0;I2jQUbZ5RgcrlQeB)
z=d8^nlLlMK?0SLqgw6In>&ymDS<ed4TDvM8b0CKXj|P}xVsA5JV@Vx;oLy6|LLbKs
zo&#by!C`M0KLM?x0T>!5t<lY~jC!XbxkU_ARJ&>JWZQvOgz8EFQyuD)pPbJ+f45ei
zW2khOnTFj{)9<~M3I~pL%l2s{AIZSTK3uskzc5>n7pbw7EiGu%UDZ`wu--z9evyo$
zz^dcFjQ!GZ@%nrSmYub}1Y;_gjp?NxJ!>&c7%WMyt!~q2TFb2{YGgz&ef*9=6dcO0
zY7dxyGRo(L#_hPqX9dUTafKtQDi|IvU!TZ~o{^NpN8s_~9%EbEKk(A?x=<%VEAhU5
z&C=Qo`TaQ`>z2M1$Jkc?)}|tlL>o*UBE-&%M*uan1V(U%R7rzF6zcmZiIU?<Q5d7S
zLq%P55Yco$L&<;OxssvRo#@FzxLN|;i{d;=Sxm+u8P-r&!>4lDzN5-2%4BeqMy=b_
z;(1Kb{+52x^3fcdxHVntFiKE;uXA*@Y!<L>X>e8e*&T+iQR{0dt2o~pLx8w`Ft=eU
z%Q3e->Z%ZRU*~Nc$RJxj?Lz{*KrUBm5dyR{7cPAJv+8eHlC7gWHFTla(V^&3O_`Hf
z-bcbk(4NUgs6sjWJ+_r1Jc&ruNJw<kEwV*jOPo(k^+7m1_?>4;mkWqE6_y;}_b~Bw
zDUSf6?YOQffmdaxoNf6&u#-N{ka|Fc#?<Ou%@K4}NHd%DCyn|C3ySU+ZA;8bHp=7A
zSlY|GiMv?4@|5os<KOpG1uTdvZ?qi;0YvqMt)&c?1r8~%{{JDH{L9k!55(l_f7YK2
zmIq4nPyckgczllWY^%?{RYN^MJH>Zzlm{FfcPJ%(ivbKtOytY*ErQ(EvO|07XlL`2
z+V=@pF>tO`R!Pt-w;ruXb7TQ!_L~X`p8ciA)L!sAAFC+**$~E5sPINTiB703K=jFp
zaUs_sk)>+4Mj(`JCUNh3hf+BZP6Wmj_CZJgbz?A!i13+_(RNNGi83A8`U@JC5KFnO
zzCyR8$IcMbIG5$gJ!0qDqMxxacTRFmKts;O5Chzhs=1G!p6Rc(whcp!=2lmIH9k(;
zC_c`_I^_iU7mS7{1st*UmR!}!dM3i<nq+0RP>u2)=s<s{RC`ka?S(?jI41Q3)!oqJ
zDMn(8Z<(3611cOEKEw_&gs%H~EK9+y9P-P7bLSwiM<crSORD9~H^ee&skke;3JhrL
z6T0HE@>_&#ORAO#C`R%Lhv+3Vg7llaY!d;;d^tt!Onc|Z!8n!ac`cJqxt{=O#KJ4k
zP}G_d3b`EMp*Q=I^!}I8JKi0>JR<3sef0Ssi04PA{>@AJTK1u#CWEyMVGT0~^`F`!
ztV*r+KD=YUzC)SQPLY&k<#Rcz41-Gnvy?o<T(u~DXHMn)7gUJ;3bIeBPsvJ)iErF?
zxpXya>VKh>Lc|b4Y&bDU?I<m`%JU<A%tk?3%6ZM6rTOKX+8lH_0OxIN2-lzMS)Kt4
zReJ4q5C~3d$&gb}a{&tucQz@A{)<<o*BCCbz5<$@iX;KKdB*fb*SoIS8(J&**%3J+
zk$xYSSFWtE6;6hKG4nmQ`y6wtBI!6*uVCpmC68sHEjd>5yU%Or?X#8hU3w}~x4pf!
zNySZ@&#i<CZtet5PlL12^hSogXJF<HpqT87WAG6R3E{#~emZu(1<aS@QH>Z!T1Uv_
z3i!n^{Fbdhz_>(~rH=}DJ%iHy!F}RpnV=evp%|BrmKB3ulJL5T-wl>Sa0CXJWUTls
zF7xbg8{n+`1F`d8jMp3ge>VRAg7>-r<lvPDaFxo{f?HqDeiUN6IC|avvQW?p!;!5w
zqykpEYhAjw<c2Sy3~}BuZ*@xAz!0(2W)io^?Vl0(ha2Vh9PSbwaj0taV_eqq{%s&K
zk0l-A5ryrj%@>ByoaSSb_Gynig;J!C%kax+Zg$>tA>aJC{JnGM<N*o}H+K{o=lBy7
zyt;<jp#rHwmwRcy^c>k%y<5Amoo<NJi<9AqN&CxJqNqn%n%}KpveS2;Ky#a;;rc_r
z2So@jx+dA|Ji+r~uuqNgi^~dVug1k=HOoiI5CgFwW|Fht8q1mYUfN~|QI7j{iOE6^
z(I&r)GZ3i8(kuEIb&yhb#l@-rWNd7_PT<caMy2MU9&7xONQ>8E)e+}+JyKRc-fuk4
zGZ$xJYTVI)8ET(;CWtls<S-iYLsHV+1Mi8XlRYJuRACFJOaZaSp9rc8kecbeW~NC;
zS=$_`WY@K*<1<Zi;~JMrogs+8%i%TiN8U(q%q20tpXZHxZ;arC4#hCd4%5DgOC1#G
z(lg*8V*7n(^wU&gnoo7}a$Zg>Mz=*pB43R7(=+>=Uy?HZ@g6VtW8mBt+EB3#9uT14
z#US4fDubaqSDPG~<W@N~v|<Rxao)0SQcJH}#9}QY?vCUqeC=rbNIV6C@*->Vzf5TJ
z<Y*d-t2H_<OzDr(AmPuBBpmXGT-;C@a_p8>6xiiDyK@1A@Apm{>cQL2X!$Pv-@p-!
zhTUhXk>yX7i)ZTnmAnmTjRMz~c1icLW17Z#46OGO%Pi^=E%G-dHVHNg_Z7oSIG-+>
zo7$`E3x`9cSfzYs;O}~=WjwZ;a+HHFCYvSH;@wkB;>t7_yhYn1WibwJwd-W8vH1;d
zcirZySUw0SPuBN4ploo3bm{|emGKt_<9_|p7l!`v#;tvf*`2>Z(uP6~m9=an*&4G?
z5-RkJ)(bc7?f4ySH%mf=gFf|s23VidMay3+z@jRFkCCPlGoqa&$L^S4zX&q;bV-I5
z;2T;3!KEsBUvIkpb1eQ8sQN7WMTv<=PJ6(mWAL{UHB2J`N3G+F%|w|i@ss3I3soef
zg~<ajpx>61GmPvQd2K<U^Fj<Qm(cq;h!0PJ_2;C^Tjrl=XH<n>?f3fs@8bVYAEaCS
zyeid|+#6G1gj6DOLfObC1i7mYL!;v1h|!$i(K?Fix|DJPi4vm9M3&RUg?PXP@vk=b
zzN{;++W*PV*P8goboUQLfgQn^N72NY@e%+0=^R($#@@^k|I^iYdOyS%$6IrvubkkA
z+dmK!|94~je{xcC{(;z*Q~E@(NQcP%M57cl`6}T@<KyyI?R|F9ltr{5#Nqv$ti;pT
zOSsjSe;}wHzQUb;$cztt4u6Yo|0^l@cMQ${QXT%QYJ5LX4X_k|q2yR?F=3qPO_y*$
zp@q(0Y^%*zr16I~tgYoEQtEfhzG*s=5n187R@>}6dqmM)3}K}Wwy_&jO4UsQq!bNH
z=qHUG^fzTohZADPNx|Ud!VFpYaW!$=qtcNtD;N*h?=vtZ!OJoA$9*df7RC&+p}mt(
z!bNwV>#x;PF+yG{XCp_A$LfKVS~61E7eNc+4;Q>`@ak;kp9fY04JXw66ULgEyDr$i
zN6pHgFf$&L<1$Xsk`slI5@!?y^!h7r%WbtzhnRJ(hG@y);67I++eao6p8zh*N}Tc&
z%Hgru>w`3vEsHChqG~hAnYtyre(*A@F<W9I?F*-JCaADa_+DwLG4PvAyWo8%dvudp
zl{|aChCmALcZ3+5W<|3`mKPwSpmM%xu~5X)Tj9K)W-Iq#$mfUcp{nHeXi@diVG%qG
zy#?7@eA<jp=}%E&DNa?2aHTB|>&FxisF-o*qtQuo83X_{Zci%Tg7Qu(@CBVJw=Uky
zvPTBQyU#V?39DTv6RQ$zrw>%ZX~V7wDs#Ug!-v9}v%#4|q$_dm%NX(IC0K#Zfkj(E
z8#-cvS`~~6FP+lfXbKv=3!2oqHoe5g=tgeE(LW{xc@c7IbDCjZh#L_|Fvs~)qwVwf
zrpN~)61zgzUCKe8y(F>RJ~d~oC{ofm6#}S(J9HA>A$-ar8G*|tR(ALUv81ipp%Ff9
zGAbsWDm;&4pJ*}sotJ=Lvt~N$cLo3sLH2Z6S|~&@R&?9sn?jai$7Iq0?*!ZWrByl9
zU1k9NISA-bxy~|1vnX->Enqi6L231TCcs2bOjA~2jDZ7=HWbMo4UQy94qLVi)N~0-
zQepVy4G}mWIopxepWnFx&?E)Jpk(JkAKilmYbh5$<y_b7@Wq|btP$g8#LM_g`S%2H
z7FK7{k;q%M*JOr>Y8I&fj4${g_vJ{1{UE~~-uvR$9xP-wn3ly(9GTs2zF6nm24{Kp
zVI?$v0Pj;Mq+olqtmLcY*gv9O7`8N2<|}XT>&ZF@{-@^;KQg0Syb|H22qpdoZkeA^
z4yZ=mO4yVYRmI~Y3c^~xvxSTYI7`ae9bnWf^hRVTxg!PDT>dCta&t%m;lY_)5HBQp
zZtt%R=FKwR{Od1x%-014&zsBg&o_P=BEI}>W3aSWQKOgPR(C&}tv_K27Yh+=@};tH
z7+wvzTh3L!lWlgu-0^mw$FYs^vnPA8LV{|VFC(>c{!Kqw`h#*ri|R0Fd&d+Nkph|k
znm@uK+z%hlI+`&+85iT*4S+eG=?)E4zSYVPA;;5IXN-D*RoQ1|F>!sg;sFO9d8kBE
zFB=Oqi!nZlBVW`5eB4JP9$HV3(@g?2XKCOOzE+5T!gvXbAFL5v$Y_?bSqF2%qzI|@
z`;1<vMiLehbOcUDilOfhy+Y(q5=<{c=7yYOCFnehd)vEvt@9jWDahi_qW{8`lK;{g
z6&>}{M{<@BZrxS4#u!dgsXAc<&T3{7Np42)AT_pzb=$H^$B%XvWAEH<k#I*jQEbM^
zuHA1Fp7xIh1boyu!%9%vGD#ut%83rhCqA$*nQLD3G+91QnGX${M@5cI%EWE0KnPID
zr4w&vN>9Z_myCVSWR@%@3u?2A8v6ColCc}zccil$tIcG^A2->rI(2nM6&~^{eazTa
zRzmOBVO^)qC(R4Eq)(0GvyoY{LEHj_ke;mQ`7)VV%DS3Xz6_M5305jt`!4pmAJPNo
zJ**J-FIcs+)^Xoi!6LR+C=3Y=GvSftr>XUxw0d@~&lMgIE@piWc=&US7Cq}MC;8-q
z=0HIHxrJ7Q6BQPM9+-<nEQy#qhd9<pRGykWfS(E%jysqSanepxs{Z(;&^%t~>Y&vB
z6D3C{hVZx$eBGcO#HJ7XgCjy<kNOwbBY-yw9p}7b2n0n|M}1G?O^X|y5xhkcY@acT
zp`qQr{||)Pzg-MW^U8AM<+6euN)-k<>GJgy<v%h4d9%D6WY{1gbl7L-mTtHI^wjY$
zfAvBBt@Z2%Caf!cH&%X~nh(z@t|#Iq6^RaSCQ2ImYsvIEwWh|5Mr310id_Hioo-hA
zKksyAl1r!A?|+(D9IOrR7Mmf~YHfAD`DpK}%v7Fp@_iGOFm-QAHZIAi`tF2Yx_@-p
zzqk8UtU=)-sBKr!QK{BR-U?$X57J2e^_JR2x@4jrUj5e{@IZ<9k6?oj7f>xePy7-l
zJE-J^sd9IT$W49AD+EGJm?Sh=8D9%YXV@;s04JTAKLbY*5eBkmP^vYL;y`$^Q`O|A
zxyuC;v_*aEtux2{q_WS|hfjLi2-ZHvEw_!LLQ1J*UZF5z{gw42SDgHSU?;(SY*uG4
zKv~vGo|tA}Nx-F$cZ}%Kh#Q7Gyr3JTj4din^Sef()LijvNgc2NdrshYyWZ~nx&--}
zXS_@0rW|9>_CXNVi$|QIwO9oVyfgj@Gi;sJk=(pq1a~%2Uo5i)7FhNb7#O}I3(0Y(
zs+$&#ot~HFQc84Y`}*Q_u{L05DK5(t;>rY#TZBQ3)%kPIBFgDEG?)qP8VZS#71_JN
zyMaF-5@4pgMZ3mys%!bc9~?eWW{)}gL?6`r?r}`462?<<5>;;O!9YQk2G8!V2aKuQ
zSsG2HbLe4#J>X3%8v3~D;T|8T>JvBUZBb<KOfl$NmGfwi-P4KtmM3CGXES$6tV5~^
zuYk|)i)NK1+hc!Cp9fw`u)$Mc00}5)zid^2<mwOJ2=9M46D~g<pi(K^MJQ=pEwZ0}
z14|sDK`%adWQ3)ICrhvMLrQ(({mbUR<=b>Fg;SiX##SHICwwi2dWXCCi_H;iKo$98
z6j7DK%VPD{*U~G)r6(r>jySX=3M#}||FKw$0BQhjX^@LL*@g%%{(|an^u3X4>uCK<
zeJ5f)mJR8tiA{`Vo*hW-X~$DkPM@+kh8LBE*hHBSKi>nAknSI&CrYG}`aA?>0ty&f
zV3VD5NC6TQHX0Zz%F&SsUquGe$O56vU;W-gijKu2%Ptw)CJ%jTa^A5X=R=D&SY>sF
zGP%-H`l%93f0`q&Ma^aTP>H;UkeL$yJPa}*RL-`qyJYU0_-ymT)YA9oV2g3Jk)NDh
z^3KAgSp2NhhNI|j${K+LU?TjFDk$oIRzVp5Zx!@EP7Hl*5)2L7G#V6Q(bVJ+B#Kl#
z(Z(9&P93%4^0Koelj4Z|)G(VNCQkoc(O(kWGZge^*9Pygtuvlt84x(F%132Ffty5c
zVi1iaBZmkNxt2A~ypBenmx0N#K_0&xX-B1b3r|mdpSjW$9L+NqLb8{tkKu_uTp4Iv
zQ7<31-<v@ySbP3Eu^JZCOe7Kr>|t%*NaRwG;miT;@A>=#;biP^H4glN|2&NP<-8XA
z9o(?B#*z9A3!TGMTc-qz5o@fI#VXbwd^(ZYFk(2*DDb$qtS_-Yve-B@mp8XFjItz=
za--IG-_D4EFpdkRpm3F-1^qwmomEhrU%Tar;E>?%?gW=0!QG{Cf=eU8oe1vk-arH0
z(0HSPgdo8hm!^^6G#V@fhz#?csrmkAYR>J<&AEMRU+vnf>UsBG>$kE32vk~{wgTuD
z+Mnk_I1cQp4(A#c=eW7%OoUED{U)MHFjxis#6$`jd}U@b#J`-@Z*~@N&q~7uM%M8)
z5%#n6@o|BhKj$=JYN$EZwCk7j{NxZy`#KdPa$tYikVQ2PEI+~GmT<-zX@z+s;sU!q
zfGV#U+S&sk6$x$hBG!Qw%t_w|P1WR-JfC?Sr|SA#n{rsynQ73xqSp0SY_rjDPWXBL
z^uaZpl908JBtYQBsf}14a-<L5`Rh+~9bRRPQnE)6=B*aZA#pMF9Mus!(|g}amfMwO
zxRs%d^uRMZM%-+Jonz6c17kYTaqAMhMRaB7B&)vvvRySe@}ND(<?-Uv-}O!f={}0B
z!gbxNbw9J1Egy77z@ZnEm9AGd$kt=kK3-O|#wJnzHPi^iBYEV!vHz*>{awFuvMq)B
z<_m7c)?};YoNx;F|Bwsw|3xlk4|1V-kjwM`C6{GjF@W$t%Z23skPBUy-}{%aREfA2
zo=WhA;FHO3a=;f=d|O~gwe{X)gCpl8*o>5G9<FO+SM<U_<Xs3-wjISRvu>LHW>-&e
zNS1t&175&3{Cx~N@<W3(8M|W@!$<#j_mAk(ECs6=d;Ct1Q9^f~XNRT6S8rmJX6^j6
z048%q@pZyxTPstJ-0(0+R!=4^Meu?5;#fpWLYM?k!tDW}AG~zw?G5Qo!My0hRSQm-
zvwG~L+4=i?vZi5<YTkU#s0li=40URpXK0QmYzK9@%|_}TRgQ}iMy}Uu?rXz_F|_@j
zo-t$bSk;7;QL(S;$E}w1T{W<pjW{#y+KKFtGDLLRS(8M5;<uH-Rb)5K-9HgU_wCtr
zd8)~$F>`>HZg-A~${M)GWPzzXLXNuj#cx**YZ;wq3v|C+LR^t1RPZII)x%8blRoYw
z$MMQ1ZBGy4DV_X_^V>qKV^|$<RYsa~%LEuG8{-o3=81`uvlK!`Rm`deaM^|0K1?<z
z-}C+{w~@3LBHh;d@r?7;D5dZh5~Tn=rIq>b&2-vH?WQKP><+K_*=|s@$ED;Ua8iWP
zaQ}Z5yltcn!gy86aRkA<apLzR+6#7<I0OauOY}c_gkWI@Q|anO$XLJ|WHTB{of<o~
zI)6UUOIEMHvGnBCZC4QdtQzX=*HPxuv+4IVhrb=NW&|L*efPMUUAMDsEpne)s%boz
z%r-zw32!5F(e>RvWIs*hy)VwB?Nblk`wn5SXSucA-f7H^d=~lXa<zIRnR;ME=vdji
zzz9xyR*nIOC;Ag376RjZWFhc=(!p(DT8a~w^v%1F!adOG6A&*XL2UkXsBHi4qMnwk
z{xxqAL1|Fvu*!8L9NowfC6$)Ml?zqt(15_mHZy#?vxr67&Z5>oZr{`AEv<~+EFhBF
zoTW;p`GYQnz~0p3zr|zT3U<sMlLb6Q?fgz<sLs(JXn{p{#<JFzT*alFlI|lVYXT>!
z<R2-n|LRhwSlGFadnF+)6@Ryj*zv{cQHL^7Hj6aI7q>{iuoWn%Z9k3_$EGWuR&x#h
za)f~a5%@|~Nwq#h*YGu??c)Hkiq>e(S6<bx$@$tc{^Zx~&N@YXQFbLu$maojqP+~4
zIb-b7-aCNd0I&|`T#5dpFk3@WTYBQDDIMe@aM|GlUU`TC0IQKW{vBO$NkI_JB!Au#
z?=DAth`1cotr2$Wsf8LW+0{xFmTHJ|ghfj(4nigcB)OIxReU@!)mH`{L532e!-m8|
z`{EBWQLKM4{0zSx>gE;;^g5>mA0q5jyF}`-5=1`QF0_$P2Qz(}PG1p#D832S7tpg_
zybE%E1^|{=!1|2Uw!Bz2Mm*zQ6&g^cy|{kO^$|VYTP;I8Gb?i)@nm_<m}XWqWyD>Q
zBJ#Bu-kGzv3pG6Y%Z}y2<`~UMPUg`A3j3oz@t5yH*Gs8|i!Ifm7AN(&PQFu@*uLyD
zUPK2^EJD2yP-w={>-y3cWIl(PvzqM&*4AG^3w>g9-b@tj8P-POU7UKpHHjqT?@r`m
zp%b4pMuCFN&Za+Q4Q3=Tm3J098lBHH@?|Sne&1x$2qpUAGTnbWfJ_#J*wNGO1zT)=
zV>yo*4sfK`pbaw=H(qz{K;Kub$iCzm#^m!cAf%p99(jQ0F!mmf?YPwgV}dkX%w6Nk
zc$RIdz4;w~3>|AbO!}C=fSETsC%fczy&-Z}aw}kgXFS>vw8PMoP$9t<(j_v0Te;{M
zSYzf~-fCej%}@Seo`vHr3bFScf!sGU$A~h=_g2WrOK6>Ec6r1)IQdM?h}@U~AmIU@
z<h#p>Hj_cGJN{yG<2V_OM$7;NpuJW6#a)5=B7(4DX!Ju3Uw6<|0!gd+gTpv1`Z0-_
zo(NZM>3P4_Zul8k6tUbOkO)XU*5x^`QsU)gboibdI#8jJ&wrq2sF{=*AVSkpSRh!B
zQztsjkeGN^-6fp~B<26$&yr=Ne63el$u<=E_MtQrd6q?kcObFo=+pX6YQ2zZFIc*6
zn~L+25O;THF&vZU8k)c8HJj>3`S9N8okP28!+h|k6<3kB&gCW7>FCi-<s#QplzSlb
z>G{bUA8YX|3r(3iWfxE)j*+uPu|H3XF9Ca+P3@8LMb>2cx%cN>3625d&vIgSUa+ob
z(!W1KjS))}U&~}vmXo8b3?8v!W>PBKotz$2^e-BZzGf~Qe&NR#J1&KsrM)}vG3c+e
z7+!9}&c>D%1im`3v~K9kabup96%AqwsTx;&2-&Z_By2U4G$;nvWcF|}w=fEx`&+a9
z3T`j1+Rt%+X&U0VcR#DHJ6zjWR9+BRrWKDgp&vd{%O&%35CYpPYIX<D`%EOGRPq$$
zv&S}wMSmIive$iW_UD>P`eIOtj}4|-y_S+x*}S9KhiWDgrj`#!)$BCrT=zJpqI5DM
zyraoyKHxNh|6<T1jP&FlL+Yd(aFiJMI-!-ir3_xyHVxGtLvi$1YrZCeZP6iG@qP~k
z6HRerph*Cu4^PWs|3mWXbWLngZ{Q=-Ma$Qe_hS*^i&F==Z}!L$Q|{As(nf7q>J!Lu
zwH(1`W;cE>BcFSs6gsoQyU+fJ8=#b}YV-cc(Zwz{R5?Krk;gbczX=r8N>jjE?d~M)
ztM(#uV}l$`1A@n^8{W-yxq1i+1YLvW7=u~(3xww$d|RhPe=+9%9g15@>3PRwL~63|
z_`W3%9`7e3L7Sm`66qa@@dVD|1g1jh?)f)ISp3Df1iBOelYapiF&Xbmd!GV)7i9dY
zYsm5|1m}ckvjL4LQ_r$<fV#;gqPQ!O&q8vS@<;W1vYA;WgcF%h>qO@dr*5D?Nhlt>
z)@t$8WMxjCa_l;JO8e|Xg`Um@8L;K>&?B_oZM&VDdpi<Vv+1b2HqxJACzg?K>M#j#
zY9*&XNv_+bKo{-7YJjrieKJAkYyO6GON&-FhU?#-J|YnVR`g6zq1Sq7jcMj{4Zl4j
z%1E%vl=cD1t9BWHHy$}=?cy*U+T5nq5y3)zEl>@?8{m+IGL?jlj*eH%9xAVpAFXHI
zKNL*Nq*YYe$};_C)M&C6A%y!>N@3LrBZ?UV)GvxBPv5GT+NepvclPZp|5W74#m1xi
zHc-{>KuBxrN!I5#SzzH80~1ubP!S0-tymHZo>smtojFfBlaDly=v6IuJM^3xbTP4W
z2q_0+)Yc;;e9aYm@QLHqW#R+q;y*(r2z*kCx)fv%ilS*HXOu}Fq!josDKY$KDNX-}
zl;{i|J;C&SkkanyaYe_!rIb1@_3+Dl_qa|#A+7EQ0ejKBvhW+KLI$QUu3?mr(;hal
zJ$999@FvCJCv*R>jo6}+9Pdj;%m_nkF~hm2&#J&o)teytp!TfASpR^q08G<dp@XiN
z{&`^6dQ&$sQ;6*|OWeeDLL7VY^lXpummE-R-c~^PFOEE6QTA>!fPKiTZ%N+~*yY{t
zc)ovJsO*X*l*EOaE;FTy<<{GeI#k-6es22N+k5nTa|;QCA9ap=)~bPi_RWaWmDq|J
z*K34Oy&rXSDoD6K%dj|P-~)B%7!cIqOs=VC2b60rd~o+@^QD;MUs#}jGsV#53cjo>
z#I3XlcHFm7;>|RM^>EtY9TE2&vuZu=STe9r*cU9Uz-FaDn`0F=;+%Q7fpiy4_}i8e
z*RtkwJfYJDk&H@G1E@V;FA#{wk|NQ`a6Jy|j33Uf#;&;-d-a~6YgWiv7kg)i4HWnx
z^-U4r?lhAM<n{od#mMcFiajMyDx`G3&6Y&Hj80sbb}ZL`qr@Zg?}*uT99ddnE8eX#
zmGGX(aL=P5c7E^kL2qHa;EuS+=9A@;e*IhmYopJ<+JF-Z+cJx?wmF$)&6q946f9~&
z&Dp_Y6K0|_rFW7cu;uHAN8O(U3;HWh`xBm-O<o;q`L3KqKsmgA_EZ8%u=CTCxc#VH
zT935v_#diT1o=RRGPlJ?t^SMFa>jfWN?w)ju3|YWvqvdAEr0Bwcm0Yiu^67bPnAy?
zO0uX@=xTR<*zsjpu=-86CUMt?cCCH!m(bG<L&yE9Qt}};29#wTkd_9y%`6BFwVXmv
zdF|UfKM6qg_S#cppHAU1u>spE60$k--m~T@tejrN1`YfBIF0zH7|?1U;d%~%vftZ1
zpII^a5J^e|`{TA}^Q>@1a~K+uPk1ro7!J_5@UL;?iY)}5%ny$Ow|%Q43|dlJLT<)L
zev7ycZ~(0NY9oN`v)00%0-?#<hB2Fa402D}s3B1G4&B{sMGaM?_u1hlJy#>;C0!Fj
zpuZ~Ydl0BP?A9`{*7PGcSmB;Tuc1;)`BNdKmOs8%hNS(GK>=3glgTaASHAOg#~;oR
zxoed{zhCB->42+!D@*a-DUan?a*Y5p6TN&??%E8#-J)2P#sFp0jnz2+Yl#?h4M~dc
z-!IJ5v+fkOJ&VNrv{V6wufy3#s6tfsD}k0F@y?@*>}!^~^EuZ>JZ*Scd|ECUe!SRB
z@Y_W9eZn@Uvb1hSa{7)fecrizs_*L9X$)5A*QC%Xpj?$)8XtR;<RCP&0(r?tsQKE^
zn$+;cYn9BKM6wpf5NL3&&`KL}*4?WtdfkB)iY_#!sn~tC`ZxhC{lLqs7c?VDy!57m
z>(Isg)<|1=ZbOf$FD;!F6WF)gz|7uP{Fa(N7E-(6!t)nnds1su-@iP+U&{Em5RsUN
zu`Isv+Lzn|Wy&-qnpEi-F!MXxmqJhW2dFW>ecv^rXvz$o92-{Kg%rV&W4&!gA@h?@
zryFF1{Ti8bM)?5NS)Cuc2fgl}B0e=-&6|ND#`jXb?XaxzGR>K6GPuyV7FC;Qd5Udy
zL|?O8y89E@#!dIVf!~%F)z&6v4uJ}c^C~{~jQb>*&lu)Zd}LC1;hSup^&YK(%T@Ai
zyO?9)Pft~>jKif>id{{=x8HMRn=)&a>aEHzQQx8(C5M=)gb2d=sv!h)s;l*M1M2R%
z)UFHsMyT*pQ1Il3fo4xe433a3V7ru0O4bVvQd(^C5Q`2qemc|lgT$V;Qj(w0{yKL2
z_0d_9HTB3=6&(|VsR`Cm4zlEt@~7b8#*nz-GG`+aaBj?$DdlHMv!L{Atr%hr3%U<q
z7x8m}wJQ;0Q%>Nf0b6CZ^KKzpJNDnjA4S6^7ye?%Z^6&Qrn@~U$RmyOE|EBy<7EXz
z38gC*g>S{MUg~T1q!_*OtXdV#&DD`oF-~=gj#!)KsORmux-6~fDx~S5pUZ?H{PrB4
zo=#5bRB^6cvk%$J(;bL%iEj%N>)Jmw2Q_YVr3G9)OnAytp{?Q2&&ok5>hY0n*a<9s
z>QZ^jh;EJv%%OfQKy^H!nmeDl<ejQaI+uKiu_Fz*lAd;3nT{u_cNZp!`1xTc?l(3M
z?$-#$QHng-rxsUS?HK?K>g%MW!#Y_)E;%_y$nFPRyJ=m~0;uBiGUwdpq=SWFb69Nl
zuIx<v4yJ*xBHa~|J0g@<PFh#sMM=>@UO>6%gqN$SqAvLa-j=F1r3*OGy*2RgASpWi
zO<^tPKhZn?<VpRhYU=VJ;8vfwB;V%5R^M8l{H#6PJ;&XZmK&d?Fdv>oiMzjMz@D`x
zdw$!Rd{<KY(D_oyt65wPILcbYAm_pf2vuzZg;sO4eK)&$`etXKg&UXxKz?x&hII~$
z|JY_IetLPrYdB*E+bP!WCaD3Y-%Ys9f9VB6>i{nl-h6Kcj!G@*yaC;_=L8K4ouK3<
zA{CN89hKC!YE?0-9>!V@<uKurm$N`+s&f;Q%e0^O^1L?z8_aEbEUZ{^o^G!pWXtZH
z0Q^3PE2p>K^lTuG#d00Z$Gi^tEG>n6E$mp|^$BomX3ZV1HzKU10kqyQkuoozlfM}A
z{~pW!(8P8|Fgh%m=6n+gDtu(}Bgf11nOA3=9ChmB<tjg)S%X_=S^BExVxIH-z)ki&
z*6N}j*TULx>xcH-M6YM%(4#R3SvKU&K`KipJ{?YSnK-8p6r_X;W)*5qal+$VMZ?Z)
z8zHI1Coo~~eVEYk><Bzwf`-Hx0dKVY%1$mQ3XP%-{Xzu+el^Y?5K0eA`Km`yng1&y
zYoXOj@+ZPrrQ01^ey{tX91WbQEl!)=nuPJRF-*L22drzot@=hH8dW$;|0hsMd)N7=
zj`n^2kNr!BImzWkPlxTwl@9yQQ50xV$Du6cHU+4-r~Zs6t(eD$(1XHIAgs_0CY0<z
z^{ZonMyhvFH)LqRb#`Ro%8O>uwV{bRs#(5#=f$Sg7`lz(?a$&}(LTJ5gTEMn-*4Hw
z=i^g-HFXo(x<Ey3TXDmV>n|x~j}%`E6?%y{*>X}daz*DZT8S({TdfB?%%yL#r-tVI
z1O8$}Ng`xB|EIIz_Pp5TPbWf_lFmrxTy;J+?iQh&1m(%cAt;_&f$*MOLxL?H^B70b
z3T&u|#JNM0>%iiFG0@E?*Zx;;*4S0_`OUD&mV<K2EayJ3u=#=>H9x}}-P5Xi6_d`z
zrz<W_85G6}r-#7~wl{0KOHYNle8szAaXMJv#+m3~Yo<w^F|0{IA+qjCD<J43$2@89
z2U7Mt<q8o|Ff5X$bRvxxRo$ox@|DaZ_w+F-|6%{cuoKDuC+nU1>@%Rc%Po>n7Ai5|
z?y~yOfKfCjd9e4e*V`-QLs1kuGp>_K9CfZy&K@XckgK@+L!^2}^lHgkbk53wYFH@k
z>xHmRkvSET0!H;!t<Nh7E|}k=7I=#6b=_7W@?V(6^8_WFJ<Kv-<gm{J5b;W{Mt<73
zfx4otwADFuZsE0<OPvRzND`%C?}7PQaVu0yrvzF82sk%c+VVU`{WgEFLVo!NF>dD{
z2VL(U-y7-4){x|Eb_VLcH5tP8D^vD{X0K6?CWI)dh7?B_71JhE#9w?!c%#;HMb$rW
zBAV_Ml@@nypywGbbrtYN!EVyO1iDdTJyC6H9p$zRo*iy`o#VapLbatDuSwsCZ9uW@
zaY|K;5Gj4PnK#X;;B(7OPE9V@I&T%%C9kU5#6+IuE0K#3QZ_vYb!+J*+(C28AAZmJ
z2@0}JNob1WgDQ0t#e;`9_?-fySFl%g059*plP-RS(y-22KU$Hj6G(Em8I&zyYj#%}
zV{PYTFi}QpXUHao**@!nl{XWTUfi`NtO$u&aunXzLrMh&Ts*Pb4nPR^%Lp?+sm%wl
zM(+)P@CQD%uIZDsoScA42`4x8^mJ$94`U7jMCR)W+Y$Z<(R1w@yh0@D@0u5Mfi<~%
znV3K7q)xFd{isLKB_qKq<l5Te^zE$OlWihG^^>kiJB}asX2QZ_yU|CvFoocPoRiYr
zeGB!&lO~O%@$s*Sy~1a5{x2^PcrIY#*AGo?3F=?3s5y{qEGW2Vif@*qm|p$eVejWq
zQ>nAO)8yLj0aUPeu)3qf$PQ&@B?Ua#Fk=C2>FYxyz^g!^hv!eBD|`1suf}*_h3({r
z$tmC$${#oHyM3NSnx}WC9G2${k3m3=#K++!8)V`BOQPgY5bGll9<}pwQ~r~eGto~>
zc_472z}D5fOIhyi^0C)F`8<a%gDUx%V$8&w3$9dyPnzm!vCHWV4p^CA!X8z8j#(eo
z>0nsm3&_>9mZ>?v_G@fpTNF&gPxTrjqCX%1#NrsJL-&0wlJk&7b~{Al>eol00B(zL
zbdQ38V;YT~9Jx<#rKn|}``Uo8$HzgLoC-vQoo&*E6gJ&lPZ@N({yEsQo2CPP)3GYE
zGNLdOP|0?FUZ7)99323cqi3cU>MZ2$%UF{V46wdems9N69e~J}NjDDBj{!n`B5FL%
zO67}%3ee3M_W=jwZyh3-R-&7Sxpr-(TI@HST~>}LC6QllETAwb-{DtSBKl7eAM=TT
z@jAFRTeA1yEgObdvoSyYW4b(M9YQ_YC0Y4T2amX$dGi}Uudy9p_vL$XU7KW@=(zq=
zI=~ra;$?*%e%nGGF&y!ihos9%J-P(JXMg)fJ`>hgZXmeO_QcX<z9{0lEf^7Mu=%La
zcfY9>S2Q>ko3UTB?%NCe6#Mz2_j=O8=;3|4lcHDqPNZ}#lSa0w9DOffQoO}AuB;&u
zUjhiqd~?^~y8ATqI5L>%)%wTtw&xqAV))&Cy_h^r=E)|%raUjv<Ir4{)>>*O+yMxQ
z*4J<z^&{d_%Z>^0i!kVEdCSl1-5MLVoQWl2PS=YMCRND>WS>m}L2mkZVD0siqN2AP
zyF&m5yZWf$9aLklrBkLg)v6m^k&f8K^ig>--|}A!A!2%VuDB$hpNc)QF$)cEYUy1{
z1+`KYN1QLIg{(4YD%r1>Tyx#ULO84XINMOhSwBL&A>#(LSm^ulN*SKKQ4qTr8?&?C
z{C-{|-g9fXZ0McTC3o%@w++O?f}88)+=_IV|HniY_)6HiZLJrEM+5+X=z6%${icp-
zi9lv`;>C!g?|(k8Kj!&?MdNnv@w6i1DGsPw7hA$xf(e<4m<6Dp&RE*~QOcGUsPLKC
zz3xv_S9E=b7dCxo@JPZ(KGK9($K&<5#n&c0GeX<T_N<%9B+v+j$0c`bQkWo&(esRZ
zuAMRUTOE;76T<gEN+6h;G^2=(%?UV(n@6lDO&e*+rXa{;_6?!5J>rTExEfyt<qAbN
z!}6g=JcakQ?8*Xt6#c-`Gt9k7X|UtBBCK~?tS|Otvz5Hevc3nnST6lY+6{^i-0fkN
zc-fhwroH(A*NI`adAMJTPugfm4XgC$u~QSsPkVgo-qY}hb{NS`BXRTqiJ=PQ(#edK
zhvrm-Dg+XH8t8N?xyHx7lbn}&HbxOzvh)Q2P`6?(4ob}{u9w#^BS0>g*r8kikI+^`
zZ%v2ARh=lciO22HTsH`MEw^F`4=|^@rvIykOF8Iwp&cg35lx0f6Qa~M&suaTujY_f
zf47U9Z)JB$R6%3>7rX?pkz@2+&UR~;z%{ow$<0&(n~T`!`?_ch%MlGDX!LXi3}R(}
zC)WBGL+j}u`8($lj>u1>Jt(AQUrb5zs<TxB=Jr<R(r)I4X9jnVvwLb>YOujr+phw4
z{ej7%M+Zc?i(%4#=yG5DSxcoa<s}cX6yko<HF&9BBYXndu39Ze2{eQAFU*Y$0oEEO
zvy0vd0JYhjNCDzruTT))0Dcbzxop!HI=zBn4S&r1hlu<TYX~!0xsB&@wj>p}uI0<R
z)HVpj=hT@MGp4bY6+5p60~Lr2BF@Pg>uuSVpmNhkCL&byf3szaD6`{JD^BU2@qFI#
zZQ(ua@sIe6@$=sqkAJxM{<FIe!Vl3ngml+HAV=U%10BPgJ_?9;av18ctiPitd0%eI
zE28ZBSD{OU7>fJk3|-PbjGPO1@bu{`U3FPQt)V1;Y+pV!v1-;9Y8-&>f!+6LaQ7+v
z&J7ZJ3|rZz<%ZXxQ+$f={Zf3A-_9|VWl~HHB&80qgD$dm4D0Qf9SjT{QQ+2F4R(}}
zbM8?CI3KAZHXMYa`ilYcNgHj&LW$`G#+QR9(#I^kkUc56Gw^$HJ!H0lrSqYK_P!Mm
zZiGUf-1r^0-=)$cIr#8nYryCh*MN1E9ijLJ1_fY7ywtlyZ-RA$?75C5GH~O(`DHYP
z2F0=lS>TLLZV_!v;rkE)mMT9(Nt`aK8xkeFu_j$Z=C)NMm5u<ss%(oDDNhi(I;ZF)
zMs(O8A#$_{%5<$c^X~7=Ev%{OgWdDM)=%??Wp~LpUV4_@?R)G?{kpxr7?n^Eza7XQ
z_n*~M_KOKbIr)5VU!n;kLxt~qPu^Y@-@iRVQ_mK>KZgegQ9oUGj#QMUhcRYoHpj)q
zs;a6uqr+E^QQ%2SiKVv@bJZkzI)O%>Vq@|3rHLR|5eGyQ4N0giz1z2*GtxOP37U)W
z`<LgoIP{0Zr2}IT)yP9vdBZ%wQ&dYwd`)K_MN{)&*?Q>>zxOPDn3s>zydI#`$)Rz~
z#04?Tl=-PZCV5E-reTZ6rtAaKwL`};#r6o+GBtr%pX_X<h)k58a{$5zEe6++&DAmy
z)v#_`;;8}k?U^iyiKM;NF&+!OUmo^JzVCdP+U6MgIJ+7LZz84=PPaF1WczNq&cbBR
zg4TcinYs&$kRwryB=@cDtVN@RvYpHz3iQ}74pox1#}7OyS5&HuE0^P3;cq~ppza3K
z2h-QXI18<%#Kt(!Ovd^4bo~pT&f_tK3?C5gXi|!F>e`_fEpe`R5HyzHW)7ft1;Aqk
z|3pzEI52BAHSC4&OhrhVNRpi${Ma!$E=auOpI7GjE(uobIjoBM=Y2e<?N(6E9)`HV
zJB_%j3Pa4bA#ndWYhg&&l8!K>V2KKG=%Rc*^0CY-qHvq>S6P+^OQxGc0GVYtC%D@o
zzy$RY0$X098Xn{B^DBW*?IZk7rgqe<i<sdJ3j-(DNU}=^J}~7R@^xGKo&-Q;<n6q2
zFY>4Uq4e=BM|^pqYgK9Ig6KoB=iEaD*WANkO|@k0^A}@!ST<bzpz1^9U1GSX(G0&F
z%a{iQ64vct9dT{)uOoH>_bdJr{ukrm--z@7D$;UPa=;^f)yyk=^vdF!L^09cDL@Yr
znhql4W!9h08aUtEzHFn{F-g<Q`6Y#(<M;ov1gk{8Sd+cj4-amrs}wws3~%c8KN_QV
zn=uVr(S>9;+ca$+;R=09cn#Uob^Ou5*i{XxfNQ!z0Y*yv^FeIaSf@p8uBlQEDNNnY
zt&rrZ(Ec$O-t{#$A)P0>>MQ9oa<fhB7)|bY-`5n0ntMz&xf+8Le*SLd#-(LT9{Y>I
zwQY(cK360q!wZ6T56?%euPb+UqYs6~_+*AfzsaWoZ}AB<X9%E4><sv6j9N@<RRnWn
zYcCVinC{e;6BEQ|`bwVfq@<}WK~3pCuPDpRrE;ZLD;PKd7u#+1UimirfqG0h3z7CE
z{I2r8-`+)3S)f0OgrbwZ92ly$@zJ}yt<2Jf-M>kG?i_cmWNT&98@);;>I4dji#AKW
z9$l-3^xKx}#&7X!56AJ7Ulg%3#TNBx8Ufr6HzukZc>@<S={AP*p0&w_jXU>#HZXhR
z!lOCAI^rP6??znQRAlIsUbWB&Y4#9eObN8yi}V4Q-O31`plV7QSuceIIGR<;t>zb8
z=m;|}cKjsG64$O1Yy+N~tac|%^t6{s^ZB%#@KUGb(5lS)1<>?G<l%;1S_Yb$hBu$P
z#Tf>p_s719M>b=Z(P5Mw9F8S0ypz=x7h!Hy$rMvhpzZt`oadKu-l`YqQB_z313}Ls
z^nZ)zG`T;Purv)UQS;gmP0>Ph2+k_|IaOjmv>b)#<xk=1rHph&*|EvXMLWtJa-g><
zsRCQIC8wO8`1wyNnU<2=(wtjP_$-R1uu&*6H^r$NDClUr)LSFL(kkxb_-_0;%$J<J
zaRe)^s<Pb&506@^FKco_Ikte)sUgXIaT$$X5@O#1?Cs<jL+88cVA75fHX;c)1_vQ@
zz(E=r$5Gg+86+35<P?BF{%e<bpH65c)El@`nuwVXZ#(vO&>=`zI>YP%Yf1}w;-D;n
z6F{mKokx%6u!EE8OaR@QYNO5WKxCYJ$`s9Cj6Xy+?$>jr+Nx)eQ;x#D^&P=|vp&Kg
z1MHWna&^3Nbuqgw95Iw4ab?xP0@+P~;I`=tZOU0<Y#7zZ8P$!Nyb#o#)a}y+Eon~J
z;Ue1!TH*`q%-QAEI@Zv>3ybQ>HtjI`gTpH^t4p!i*?`{MYg4}~<=R}Q%~p-VTbW)<
zD4h@v6G+Y9r|>zS(aucSJ&%$)Jj{CAvpkG;4hkc16g-M;wBp+I%w(P6HyPt*hxJKI
z78UGzg)WCb8PpTG$`IOpG-+b1jl^^o=le{BQ+|9fG-mZeSV})tqA}N0Wx}gxVyyS=
zMV(CYPia^K;Y<mfN16>kGWfDbdu1WYqr78Xq%TC=)W$WlgP<fnt2BU@c0nwwnk|;O
zSWCT;rgruK+>JDenB&>~u@`9edvbKuWgKpeP*C*cmk3rye$<#|iQQ+*fZM=vOCkqJ
zO9qT77avOr#U69AnJ64p?`9zBE%!ck@_ic)Sjckx`R=^M;q_zHQHg>iQt{%hmv(4v
zGUXmMU&3AH%6&3xaW64z4?Yx)=h;c|zFZG?@Yh#$6S*O=-}|24E4}gYi)Llj3IUg;
zhKUO&Xgh)&u$ndY@rDpW10)$<LgyCsxqmSZudrvo(-V<sO_8qKoH2O&jd(#6_~|s3
zem~jiTdc#yL0Y=0dpgzyeKx~N!>LTyQU2D!=$>U#8DxYfw^19KI&kvs(|ebQ-O%qF
zlJhe%5!EmQlGT^+Y93<l*FJYM$wOHoSINtg6N6+=Ng7au5U|<TQFK{W#+%EpIR^9&
zg(u#AYjaz<B=6co=Zd(;_NJ!2`$924TA4ft&b2@7VXE0~)~=vCp@Lfw5*;IyJn9Sa
zIo1{z*PLc<gy|i)LI#E5LF6<V3k%osB94I=Iz5T0n$dx>HY4yT>(SNrdlRR))@|?O
zSp#d*IX!zhD3@h;L&ZWX2?ish3ys>~$R{=OWq$1KX<_D+4+&n2;xyt`Nou?u?unt`
zHTvs0hK(Rp*>Ac3P1yKnf60F$Z#>FheZtXieI$7i{Az9tj_%=N{kj<yQE?+e=<lg)
zX40iStzo)-43Btrjf&sR_9!e+!*hfE+;YX6CeE=PEB?reRBaLaDmEIqxL^4rNV~gX
ze>0(uR9|uV;uDsTijpu?+KyHppKh|~FGjZOQea{|ijMRt3q7^%B{rk-wPoIiN2b+F
z=9b-N65S@y^Kl#jWFro!z5~mglOi`*P4rg<u7*xk$9Rlw_;`uPR0=fo!wVe&i}V&S
z_w!11?UwT1lMzB*Ot*|lfrFHRMQWjK?xjQx4U!Xq+wmnH8Ki9yiudmAjFEBB<gyWk
zjM$jM^M(wMwi=C7gVnYbyba!cu#4w`VVEknGgp1~<#`9mThUA}aZ49mFswvu`Xdt~
zwF`}<EL47u$softXEw*P3564S>0Uw`nmrxuRoJ8p&D^Zx#<_MX-zQC5Td^$Pe|ZEW
zMr$r7HV?)FY|6H#5Av-Fmic|`N?zOd5)SS;nv=tGNdID-c-6i0yl4Uri~Pm-CdWDO
z6WX-~4E0^D+SfqZX5vk)zV;N9iz2P{c%owG5ZB(akA8>J4~3X60Z9qQRfjabfL|?`
z>a4PyOW?4<^2|^2bWdF*W^!EH<%61vn)%fpExyR--9!_)ncw}zF!KN0>J;5WmbOAQ
zNwt%-)wE=7F<PB`mXf?-sL*<h>tT(BDlJ<U52y)1?w)^k)o90$E^9rFQo6i-^l33m
zU^XFTU2TW8&A0KBiVOrC$kF;0Dp;kfEdUV#;q1$GE%VD|bauh;MBTGr+=(SPxW<+l
zZramUUWF3QCT0ALy#Im7MtQ>Fr$TmRpyQ;aLrS!M8aflZ-{P$*>#557zZkb5Rg+Z$
z&gpbPGNlK8USaEPS=ffpx$&^X&_^k+S--*K#!*a{Qzr4eGKGYB@kgMh=E`oQ-~1=f
zT3HibV0(P5Q>A^?<{Xndl;e~*xG0(gpniu~p*H&@z&G3^??mz~9?TzskFMNIlItwA
zamVu#2-*6wuh881L&rsv>E8KPV?C)HRQF(f1MStG6*YnRT!HBySS=ZlZhEAvQC%)=
z<b5Vn+K8g*!5_(n6U64+``cb@f85wsJ>UpZ9cyWhk(bq*H7R!k(OUW4Pvb%^C2w-c
z8KN{|aWNaKG+41JA&0X*o+7+N#o>!@ioAinyG7dN_-cz^_*Hnir*Q(Cv5D;W6av#R
z2Hx;vy=F>}U^?IFX`oUR(qPPgv+1I_ZyTW!Wc1Rzkcr>jKiXNM5K8aH6YAXA+j!S@
z6`4QgF%w{<V}3me5_Du(^0g4s69B2RJJCo2)&UX1a1?jp<22EVFKmap7V?k=JPh1Y
zXC~|;kx(76^adw8%V%TCr|5coHD0Dx>>{buERXKmK7}#OI`BjTeoJ#vwyZL@#js;G
z4XVp+WF*ITs${edu##WHM<mLhxQ)g>C0``U(ojE<a~m$Kj$ZAW0W5xuuu+Mp?FU2t
zgc}^wBEfGOxFI&$V>XRX<Dbpy9XgV|jyig5$;C4!+fz*v0MX(BsY}eT6iI$)9(@0~
zdQJ7pM|55Lm|{c2YIWu1Gj1(vd!Yh{;6QWyckf)|W=>Gm<gDNOSoa<dR>Y4FT}p1;
zrZHc{-^Xk}q89P98CvMIUJsIxe5K(hR*Qc;dRU`n;Ig9|0F=%57*%Z_AS{4H1*RA&
z7nOk_)#A`GSW9Vo7%g3dvl7XmEtYt4!<-N>X4wZz+e7o$D6OLBL~mF=x7iuU#Ax$@
zn;8+HW=Sa|I)90z{Sa1$&ks^8`ch7)?QwBx)&hVZ_+DPJ;_JRCZ>lFc8MXqlT(3;A
znY(8D?b54)l5`}Oheu*6;k!2C%_Qja4*V{z{QjhFO*+?JZ6<G50L$e2!Nc^W)(Op<
z3{|J&s_dPY6u0(kY;wRba(%8Yv&j>nXy&HmM1|XXXEu+=d(8wj)vTfdWhK)V+;hPk
z%bF~l1a>PYU=-5=e-6O&;jiPLcLBSzzoxOLe#9O0m)#8~iQ#<|?4d0CixG@ZnKCtk
zrxO23Di7ROct`oWrQh{72~J%0N5l)FOZL;9^XNw6+w%+a8QbWy#?_5?@}n*)k)(b7
zevudt)ukomKXvbZPyT%JE7u>e`SQQl{{PsAy1s`%DDW4?+?B@EZ+?~Enh$eQ{FUKf
z3^Vyvm88*!s{xD1=D!%%{KR*>hi~s~Z}l>6vE|hxq|PJlI!41K-gfn4yv;-;{^E>?
z-23(DkCrs=_mb=TqVL$Zd<TsKK})CJpBQ&qLH)QJw*S5K|KSdp_}i*1Sbf%iI#2g`
zo~+8sntPt2LotVf+@HT;gj3s*jjF_FN_Y@IEosn?cW1#wVm8%UDqG1~Ur%}7NdAxd
JUyQ%V{{cx}cm@Cf

literal 153623
zcmbrGWmp`|)~>O@;1Gfb*WeDpoe<nz26qYWHn<0O4elP?f)fZ9BoN%)f^(X8@BMw*
z=lnce*Dym**Q)O7lC|#j6yb{UQm9A-NKjBvsL~(Am7$<ue4(IVwL$Q}5!`f<ODHI4
z2}?0CMQJfHQpHd9W|lUlP*Ak-#)gKkr5R|4z+gkep>g_mNT1x4!@{DJ4gGq%$Gb;J
z#|(Q7lTvkcSMe}bVO4vf3Y2=9tx=*#@9LO_7;@_BrCBY1I^zonj5Jg48+=oZg=tY%
zj!X!+Bq5cTVWOo2tja>yC5_4;2_K@7>J)-@X-U1%!m`l7_E5D6q=yuSoMa;3g|AUb
zbx7Y+U|PU$Ad~9QAWHKSg`+m&!ny0}`gp&AiIPQO6aew0I4geER)WdTx<ICjWSeIH
z_~vauUSip5T1rK6fuV_^Nq09Cl2h3J1a~)hn06olL&jsI+b|RP&5UrEDIyEY;nP4j
zX$v-4(G$jQ<yRCG1Q?{(k+0X#3?BxRGtF$^z)tq&hK5<!&(Av!@bIp3@F874pP!#Q
z9-p7PM)B}c?V+!HVWECk8|XWeVxIx+s&1+&Z6+rNMF)HaK|zOFLcsx_pn(?w@B*6u
za|jdy@ctTjiRZ%n=UW)xT-g77hSh#KQA9;dS{is)G5%y~YUgBO?~I(8F$tKOvsBe|
z)|8XwHMX~90-M+ynKHTCI=mEt;&<l-KH8c(gGt?OZS0(Q-37@1IfEDY{BoF?ob;bl
zoUH}OHRTjZ#q2+sl5#R}FtLyeB9W4k@_#Zh<5d=y{C9ESF9C83XJ-dqW@a}xHzqfB
zCi_q3%&hO<zh`D)V`gJx1kPY|^00FTyEEE3QT)ruf9!~xIvIbmba1w`w<CSA3pTQM
zaTXvaf2rtye*SfxrtX&iTa%sBzi$h;LFSilm|2-vnE%H%P?Z1WD6gWWyQz()xTP)7
zJU|_ST<kpj|D6B-eDl9G{;Q;#lj$chdt0EOv*7=>@4pNG{pJ5%@SiHR{<lgV&i|_N
zuW$ZclArnI&i`tOe>L+zM}c-0MB-=upJyhBG|Cih1qCGxB`q$Z>JELF^{V}?#Q7i}
z1{s{R!!rV!n;UWuTFQoln~*LH9P07$Tc)06;O8g~?hoZfwLKN*<@b!`G@pf(L$A_1
zZ&&l84!>zVy=66l<#(7!@-hAts~{ejf4>nC2h{R<qjm)T_u&YCWZxBxx6o4Em=19N
zyy1yq>}FP)7t3eW$v++buK}Rk<R&PwcI5)Qi`p+-pZ|Z0IKUAE19qZCr=}hMW#k`Q
zxx<(aJ=MboakvxzF%BFLkR)3TG$@F>bpE?mi%)R6r`G4Vo8O%Nwx9%RS^Y^%DM0jh
zW$ACBaUaqjUU{7TmxVVlOgEfJ(h7rrS4J(>{R+5Tk^i5|owVvXNi~i^wC}i5zq#GX
z=|dp##`rGq=NHRPrc=?@qW8u4tj|`GhWv8N`>Pq1*~e~J^a_XH;83C&pMY05AC~_t
z*$cTG{H!+E$N4QQa5b~G;&p;*;CpL&vsawcOK9JYi6-=L%JTt_$04^!1pl_<{<v)|
zNkbp8ILlQ#)qOpjzIU<Dws~0{b8vm}YCFTeDHpX%o^6;?d*EtLr&?ms@U9<A0it2x
z(<mXZ(fw1;P0xKN%dOXaBN~^l_z(AryRrM(H{9tREAAA1Ps^6)r~7h`*w=r|vpuLY
zKaIRoyYSpEE$&?~&#8QJ^k|+pLiP!5z$}R7S{$-_+y`xvpFUhnXdK;V*wjheWyWmJ
zx4GGWGn|&=W>jlLW@;hjKOds_(i<b2>vjB<M%Q)0lp;Z#pm~M22=j3Oa~A{}3h2b9
zboprYNS$gJxLH3TIL$+TNyXfLDtdm@{CodmGEXc)0!K@HgSoc<^}g#-<4^TM8kqFf
z1j$VFJ>iWQKD+&=Ww+m@gtz_RuPM+1w-*yavpEjrlT@4N0;k=umNyeZ&$`Q<x7!(z
z-?<_|pM{=o#FpXFiFM<1w#Z~<`(8ga|Ms1(N$i<&e>fYQzGRfAs4~1CrpdAJy+5p1
zkRX;K_9$#sA?|xF%CIW~8JqGvUQTl!iXafp^!kmwD^~4FG4TBwob#>uV9CBKYZGk$
zRIon6=X?Bhr!4vE&u>44$BlDhpUWTG6ZqztN*hzuzPDQ`WqVN(t?tB)9y08!VqQV9
zng+4eZAVQ@ct3o%v%Tz&_+a5tXw?kT!l*C%ntc6EZ({}TO2}@<1n&>ErL<@*K6u*d
zxhZtrdPvo`Q`pYG@*_JiP<7Wrou*~GDBEQjWvG{BvzceXE-T9M^}GrSCm+&GN9mo6
z6?!Vs(2D=~h+)xrvmSZ*RUt=^KvI3@lCGSylw^;{?U&<zC(s2nTKukNHTDH>HxtVF
z0!ae1lL8JjjiZx>M$$s=C;XmN)^I~Ni2X_`(>lkhl02-;&T)}_>)1+z;w#pv^je*N
zoR54=ftQFIP1aIJz0%uc9j^b*E3;AA^>oL$ZaN+Qs<h&Fi6_(RhxJc0bk!B`ZL2g#
z?*~Rtbk;?@Mi01+U#lAju5wd%C{$aI`mV&Yvf}5@H8QC&m;F%F(BphK@q0$r;_U82
z7kaBW?s~MydDwY>9B8em=1^fJmW7;_?&hSVC(1s?B8F$4=}0#d@p%77ql<G+6LyW`
zt@mlqosFN09B0x>grT{-=d$A<5hu|__37I)QWz^?0cggCNl^;jgSH_Xo`=&ubP;ug
zKv3P<82f}QR$NkxKhozM6iR~Q&oWHXj~90GynBT#CPQ)lNJRPHCCOD0FxC4IX)-aM
z?hcq;1lPkTE?bvfm$Ygw>F8_L8h`2|KmYN2#x;6Ctm%O#gc$fea_TybbFO{oJ5g<P
zBT%w4+2YJq9{vpK7Eu?1xz+BFC_%5a(uW-RTdA8pYujV?2aZ)t7n%sG&9+sLmxV)>
z{Y+BVmY)6Czt-VT<?#)2m(kv>t!_DeErB<4Qqoi}PMC-t=>Ku2th@@TevC~fZq~#_
zOb?PHt2kwmnALzTa5*_MZvQrb0j9xx@jJGLZk}zXAnQ2CG+dfLe44Y>b79s<nYX4@
z=@*VWpb07*SMeb|&l|BqXl$5hZohrp;=)Ut1P<=S^Scrds2LzM*|KvS0zY_4v?2wE
zNZM1`l;8_!a=h92ujh^LKBTeQ2jHIdp@>7;W|(zI?nGr}n7$TX`%LBPdd!rn&{QHn
zrrsHTo~qR0MjgTS6%(8ZX6rU*$m#gAqH_?6i28sk^nn9cgo9&01WBK|W8cm%5&3O6
z1v0|OpYir@EVy#vF&djPPfK=fm68Zv*={Qy<~|{@y3Ri&c+KLoEf9LY;TqUz?O|V#
zy3;?|cix&|Fp6T>ic8>m`G<l7oq-8}UZLQ7JJuqScRYt6@boXUURQ_t;hcSx#iS*1
zd4;|bkj9REc4u`0B{;%ID(CKG<J#x-h4H-eteAN-S}G*mAOjRop-L+uwm$S&`E@&;
z-~pH)C$6N_5c8U-P*q=Hln3zFlT&0d;(Hy|y1bIXOK6RZD_%?1v3u{64FBcnr0cm;
zFoBpds6{Ygt{0iPqFlQrvJy;A!~nh()VXfQ7Mg12*hp%$(apY4e-MYFSb}S81Ysl6
z8Sn0wSI<2t`3O&aO&DeF;*UqGnlOr-%lA&Eq0g)k4}_*9VnwCz4Qn0e{_R~#Sne4I
zN-WLz@+}ElISgCSiTkRpa&Ega?#vgGW|cW_0H-1stEQ(;7#zRLPG3=|un-<8R9<T2
zl~x6{G{WRAyc&!Y?M90trosD7kooIc2%$1(d!-3d-waPlCM%(#DPA46jJi{0$G5F7
z0>Z%PFAu>6tNk8)zmr)oaiizH7W|Hjyk(=%l&$?CeFA}(jj4fKR->Qm>pIQ#=%PA{
zDeLF(C@YRRZEHrC&xp0x+_Dn82$u*o`M(K%xDk7wiuh2X&?(n`Rl|Do*6V8jizADi
zKMOdZ8Usxmm|w9l^Dli{_ll-#fDRrfSYIaRI}mCrnkdV&25Fs=gGx)Jf>0UU<%0;U
z(hK6ZCibzaZy1~AjR=x`r3^;A{tTSZQkWKu#m#G2yJH$&rTIqSM}Xw+ynp-rDeX!t
zQe?vHex2q{J#ev#wQAfR#HI|7dDuYQ&iqiy2ZugnWQX?|-Xm8e{NRK82Ky=XDOWaA
zBvyL1tUIUANKiPcH$ty7EqX$#!OEvm#&^`43Iv-X9v0U9%<DO)liKaCvEEIEO!SPd
zcEv^4vf4MC53~!O5Y5j^@eH7hpf2#39i3LS9Z&JgCE&(RC#M)l5i!rEsGbgvD8HKZ
z6q&>SvuIuYYd~I?S13BxOXX;)M0UOnSSV-E8>z-14lH840b7jpf!aj^*Yje_T)!N|
ze2Vh4@Tx%4C85TmcnNC59GMF@KD52KLTSO42xMqm9J7|0cHZ{ULh4t_gDve48UtS9
zD-KDEUc{%(S5D#6-`ggz9x#aWq-nAm$OY|KhTEMTU=55J_(%6)lwK3EM5Kxw+D9=o
z-S^1H@g_8_L7>dH;_*wi2k!?_$GX3>6j!mFYeq9?_;JK^h_O(hLtLif@aymT#yprP
zZZMh3_qTi&x}$_p_y>@<pQAnSQlWCA8SWCs6&HzRPy67$Ee?`}zRgdd%BWbC_p0v%
z2O7K`gjb@Th8UP8sc~>qdz*z?i=sV&oC-rHDe1!r<_@P*--rw(tY%=WjdAg0L$NIc
zuNHe;vF3rGLph`k8rUp-Dpy=Nea*2{Ab5~B87&kyCP&Ua3)HF9&MbLN9D6yAe*NAc
zHd$E~E<q9g5oEFof^DvM{lCY8)D3*DbbHW!5ud3U0tMktw(#!_39H>DK_L-vLgiS2
z`2BnwPYBfzjPA%AbIj^YV2a{ogjklto@BCS08cv8+}9&8CkfYYfMLbh#%*GAU=jZa
z-_Pr0_4{VlwXw&I%glwME$Efs?ZNeV)A_ELR(go%^<mmhr5(dyJqHRfQ+l<UbRO1?
zhPcdWNzKBQERbSCsdbD_akm9%@p7{zIsESQfwfYZNr)S(pjSm@Xe^kLz;4;e_A0YV
z`r_-lRn@W{k({Zoba57>7*rR<jG~_MYqoZiWb}-|F+oxma6~MGm%(KUd#h!04J;)-
zJ=Eo%oX^@CV4nTu0;yOIyfViRW<{ks*YJm$`?y89EyHE`$9R&qi`o%x90_PHAtszk
z)u}MK+v{$JwS#3#!2DRP@f1c8C6?pi$94(_#w$z4AQL=nJ*e6@KZ!tCB-)1yb2e3+
z{8NQi`C#14eU#dctLxCi@<SY})T%OR*rNdr0`*{BKh9NtbJQ>`kIg9_ZPuRxHwXB-
zoZk$a`OnNVY?~VFHF?HJqga#zq%{3r2S|3Tn#wSDG^{AFetTnS@LEK9xhTtZ5vn>*
zs2g3$vKQB6mdg3~m)8B-0HJ-wHV&j<LJaUFLiBI>PTDUneXG81e_UR_ODzC>NvD2%
zqh`U_EBmeUjc`XNu=11kmPz*L?f{Orsy<rI;0&z(5Hocj%o7qx>?j<1m`4^!pCGAP
z8n3IiH6rAl9FAIHJeamTcU#qQiztk=z;598JA^BLk~}-E^+=r4JaVJVAeL%OFn1VB
z=DE-f5nL?OdX7Z<`Ii)Z<uQErwQBNROFsVnk^+v{I=^c)ad(B^Bt_66wG|(%GYsFp
z=}{iU#;j699s9|xXlwj>b><hyxvJRR8-5e;VGud0D#nTSSp269*U@Bx`ic17V2TEn
z9B{~_qF=*;JXn~l9h@yv38VUX*)T1}=Fxlo!AA1~hGISDe1;9c%3k+mvi;Vs>+!l~
zl&P(-$;z3Bz=|U5lgNU6>?5qWKE_&9_^C}GvP(&dA<pD;_;@xdMx9l$-N4u-*@cvp
zxJB}EM+9yZj!ti?tOI*913Q;n+X%xCJNkX@r<;xPHpF`z5d0gzeX^KX;k(272|9}S
zg$|@=mb6sI1o^k2<~0zqSd=SVLghs?JXS>!Gw%0nd!E0pW1#}W<rK?j;a7|)%Q;89
zETllrr(GV~X;QbT!D|t=&awkCM%>48EP2b*BvCER(wx^u^DVYO9~#lH94(CPrlV(~
zd;5CAJ?>i{DjA&q+Z~dhp)45uXr0vbCL-#YGex#73Zs6b#a|Q@1>1X(=xOaCeyn@1
z8Ra8$bA0bgTgh%jWCx6lY*@)rT*A&+yXNK8E62X(ca|DE8)F>~N!#1@j<-dZs%J62
zg;9|;v=_gPj<_+$*AE{*2ZF;QtiUw0bm?0`S3k2+-H@M4d^L^{XAA?=$M`h;Hj=n*
z*Felu19<S|k3v{}18=qDn#yh)5ixJtXp(5(%K8sX&`G;W$R(#tV>4+HE2y*qozf*Z
zN=?Yjc1{aJa~H0um*QHTU=aSd-{XM+9mdq&O%E_Q6v?8Tz@O$yW|f`{85A4kE3zrh
z5MYCQmPWFvg5y3)Nlpgu@~E3-@8N-}o2(*qw2U@T-q@EcSd~}KFlGmriCqpd5b?7h
z4TPo1+tm96_S{qkU7)Z>Yb-j@%W#RAnI?z?{+`pZuiOKtW=rLhtK`LELn|2{d<;bu
zuF%J;y&Vi&U@a$~ooaB9&`>A#z-^Ej8Tkm;Tbw|l$P8m+Rlv;p)kHKT_YLy9t0Hsy
zAdv4|N`I5WMGe=8B-|Y+0~_OJ7yTw&F1@NyOUQivRT@sP7rYt7U%NfXLAGX?q;sIK
z%R>1>CPR-3#@(*{ulixD`=jQc4RwKG-%K;XHW=9X?@L{&=Qvo=Fmq5DLof-ihbZWC
zzl1lO!)N#3oBm=KRl!af{H5c?_%Z-L57*7d?3dArl9VT&Hm`Je(RWp({EU>2iNTFJ
zXb|X2o#h{JSR~M9rzRePk?sGf?`2ylNXU?tP8d+T&q&;6xR+RhBc4;;=00CJFeON@
z%y6}C-Y?}sX2#KUXzR;DOhC&%8Y>C1VUZ)qs)W+kOrG1D+zhZv#TMihWXDj){AMTN
zwx8Zgw&G)A$+16TMFBH4tsq1+pEknwV3Hu0jO3Gy&clL5!w(~~VyA_yb1-s9+z2I0
z6cD@YQ_=+fP+>Pm?wbGOomPOMc}k@nCc+^ezkBQ$3RrM9)v=QQRIE~F(b=;`sxdbG
zl^RpIr^n^pL3KGhEG8eiQrg0I37soasQp*2+xhbKJ#;J3X(_IA(IO3Ae~zKyKYGT^
z<9ta#UQ9@!m?VJP&A6mk<nKjlAC=|RreI+8pp={WmTG;9=`C0o14Y#opxsYj-L8C3
z*oy!w*w3U7M*{D$wD(<{py$XR77cW2sotXWV=d%VQ~VU<4)RVH)MT#ZMHe!!3-Rxc
zmB#U=&UQAN#%>eds<l8~m8%^|t|{s@krio!{VhWHDyM$fjcYvK!|WBZ+?$Oz^m>gP
zjFrR1|M>MIL1xjxIPSEfc*d_IQ9+iKYgY{di_FG!wmOH;sxk=An^|l{3Ao;G*5Yb0
ztdJjcf=UNV1N>QlFfg}5=;uSNmpXx1D^>(tp<^kTqrR>d)il42d1i3D8m)^t!fU&!
zuuFVcC1flE+i8S>-j+zkq+`wLuydOFZxQ1}bu(3jQ0vb7U(Hnz#I+c+LCWDE<NfbB
zApX{RRo?KBo_Q@Z3Co33Trwp$J1v6QDmJHS=MB9M$T$DwR(!BYq=<c^^H>&}^v+L<
z1-%KIa~29GnA2?W7WwEZ;~>K&s!=;$nT%!UIDz^$ObQDM%v~(kzO=3io_$GTuVj&r
zZf9EVEXIHEOiogH4&TCyQQ+51ahMtoFVE5k=D|0gYwPqWLCmAkxi+PV>qHZZEVnMK
zZ3QPW&+-_DR`nZ!Uu8#hPdu$9x{W6#p%1nAfpQv?+jaDboyfI6dRY>BY6F>naFZ?Z
ze;eS@qEg|0qQ%XqXAsm_QtcVQ$lhuoL1j)Th;XpU{v5z77bzG)=y<+wY#Kg_+!Zj-
z@;W8JE9ya7$Q8Fo?Vi!j+nV!xj%SY!DJCt}(&V>+N*>f&CE0s{vmQ=gZtudZCu?zh
z+j=SD?HPQdX|1LhR+3sa40T9OgKU%xBnVdt&4E$@nZ)4YhRSgReP>B(+qT)6@kuL0
zBjWbstM7&bsUN>axcjW|kt%4-K*3Y(k9*b2g&g8ND{{#W^h?Us3Qc^Y92h)VifJA=
zDOeO>??Nj36Fk|o+kQ1*ZQ@Rl%OG)3j7*Sbr=-o{;QB4C+k6c?GyuZ<ZsJk{zF{FX
z!7toeTBPUOwmMoY=hjP&Lew=~A3>>83^Oez(CmvEDNMr+as9Y37V8Sj-UgsM74C}*
z>m}Brm<UFn531IvwlbHftn`*2(ofOu?sj`~Y6I_P5`_4Z-5b}tjZGzL%~G|`MsLpW
zX>TR<(h<Bt;7o<^q;La;RPBd)l<L9`)r}pXZ_jYrXV&v7QB%WF^kpzIcE#}juEf|a
z<Bw`s-C-`<ii~(AG+0a}SU`w{_vUy0Yr+plI9H(3g0{nKzl%m1KN_OvteW0IN~JN)
z*R?6KU4*pPS*W-V?E)?j*E7i{EfEzOYlne33_;v?RAB-UzEBN6_B=hKJv2&O$nf6(
zrg7FK3@YE)<#C<i>Tcfak6}_{EZD|glG-7%W$^_La+K|>k*%qD>_Xb!(0-XC_*0B{
z6HPIRhGE!;95P|#HjVc2K*AXS#bzSHsu_%etg{TJ7oT`w@Z*_qF>oI~fgPp(rooH2
zFs5)_twK9fousEzy#L|d|6p!B014y2_I3FiDF;yi_!+^kM_=G?D<}X`MnUZQyZB_!
z3%(BOGOW)28>EK-q&oy+K=c<f-(3Yce=j#kJL>j0`!)W8p99P!{ZA5k{j9gSH%$Se
z9WY0(c+EG~x&BidBJf}4j$UeBTtL29|F62WUvN0%C*uDi=dLex9~}mJIR0I`1tV~m
zjX3XPcm9I)!hB)?_;$VSZEyJ-_&4AHwP{CY4*nNq&w3&9d|qIE-M^beI})g^QsVo@
z`@h<B@;e65C|MmW%vFCkN~HwppP{Dw{^PFaCl-g*?$aq5=3s!Y@{a)=0t~Qdv;<i;
zX^EMW&U>a`E<g3wdJsrZsypwjG>yWkL~{gvde29hNm^YFl0yWxQ;mCb{GRa9-fzau
zRL+fulKA4?{W&3VU9xSiSq(&<Ln`xC5V%t10qA?LmU$NT0Dv@mPbHxBy^b1LF2>kH
ztMuAJ0Omy5{&>B#wp$R(6tVsElD_B%z4d!I8!0Zsc3kn;K?P{FIp+zNQz&<@@pig(
zmHHN|^X_ELR<cfrZPNlZL&xP*`T)TCbNSBz>i^T+{l+ZA76(AL#}WJ?DEP0B0U&ug
zL=n4df4yLiKFZjvtLd?o)CWWanIRp36=zwV=Z6b=cP|2AyAV{uqKD6C{&!;>)3RUy
z#-jru*=P6H?MWW(cD18-n_IT^hnrbU3nCbo>Kig)vX*6sK2&hBmKmbZ<E0AE<)oO}
zjTkAr=&laH*ZU+1ZQlTV`z?;X`<esLydksdI*c{|41o?Yx&+b>B{>4Pdcd=|cUUk@
z2?pqRJ8j9G-{lXfwXWw!`<ur<zh#1}v3G$RP=S8{uEerNL*Iky7eGlH^ILL&C))rE
z=lgWKbNa&PPqtDF)QK+upYDrY5IiaYW266XeaCOumESY!!`D)PP${P9Y(0`09-`@f
z3&D~vf%)aJlZCsTW}b~C7?s-uAaA+}U*OMPqew;^3_R`y6RfQr0E@b47yUHw)4LEJ
zs*ohKYXQ%D9#q2eV?kp<+o$NcB9>RweY`oS?&8o+?%Mvc#m|k7?dAlxFD#rY`bv5x
zV&^cZ!kH?Psnvp9mh9>?b|b`{9I9-I#P1<~XkVXg!6bodN_yJim#+8OHv(56mGW^}
zLlgW;j@^Z}#bYfPmm@mEuC<iZWTT_Hb)Rlr2Qo20bNmh%g~A!+iv7PCoYJDKg#32%
zLdPr{^vqMiAtpcoWbN`qu4<`g!YMyJ5A@?JEx2Y5xwLK?0G4*1+d5GyoVH#sT8~Rt
zlfNmy2cq7b2cTo`a~XC+xzz7OfX+_=I9c)>fIzIdMpa(1&!kQ1;`XEs9V^5G<3gsG
z+%?;{PD2F(azkIfWAM4`Q+l8j1DO%Zmn;o<PRm>k!7LHr`|dn@g$ddvGyu(ttm#AJ
zD_Km!ccs|fOi)03yt_g!iP{13Rj09j4-}y3j~X|Ma(|ANxIrpYheH6({Ug_x4-;-)
z4RCsEo>hNXXZZGR7-UF63@=?x;4RR5OCr+5)%9FvPl2HmqM{(6HcP9HZdPzmQ6E#*
zohCx!IuEvdujt6qCczju@{02o@D~j{x2Dcd%Ylv)MGPko065a#NGrxw_KLzEq0Ftj
z`3=Gr>@1dFf$^xqjY--UL0?tk<2y{1g7Q<>Np2tEL<E@)i0bK1M7QpMEL7<;FxHF9
zZP>u-Y78+F50MYCJnNt>gVS862?6f$$P8fSpbLxB0AI7MxNii%fY6HC0fMmymsiL0
z#<8>5T`y@da=~&J^4wQx{`3kJrxoY^a|r1c`Qdb;x!V%P5JY)mzwti4?XRZp`!DV^
z7my?SMjVYrpVdyXzqbjBiU*l|lZGZcP(8D$7dG?i#rtfY<HH4(#GeLoc2)H)R^>(&
zGx4$W(H0HydS}L0ahICWCh+e9zX&2vPhQ&MyelKnD}96A@ZC<LMJ9&-{6hx~6MfQ*
zDUfpcc>_#T8lM&|i%YvoC|@fv7F*`{TrY%|2)zFF?O5W%<Il1i=L#@S6l~1{QP-sw
zUhy5fQ&HwvMUN7knhy?{^5f&ny0C~7K>lR*RYT_tOGNgb;bHyv^OGC788PA`k-m`$
zy$!iTX~LIRzk7~yo*#;f$V3b7s@slR)8T!|6HAKVDv`wRPLbDt0ZGE(he#f_(%DNO
zGc+iESag-`xfJmm$Tt?*S(vPf0kFxw^^=tMPy^j&j?{1Oi|8WgXGnzl!z9K_7KOlk
zob#uwcw=Tav+>AAwTJs4e{)!IZ$VG&A1Y)xL}OIV)5u13$M+8_m=@Kb#4UTq!uI?y
zXB-IG4EkKat|l<OyOXoaeY3t8=l=O!9hJW}<44O2g@LzBT%{?Gw@e;LbqsqYWZcU_
zOaal@{{&=Oi%?F0*@*K*{18?RPdplInWjj{p7+8!r!jQ~IgWwVrNXX6DoVPiJ6f^L
zKPTa3MiYRMco_d^=uKX}&nW^&_O0Z@sSc3xP)$vcBfyckMLZ*Q#}3RYl}^K;fLny{
zs$Xe;EjwdYZJLRf{)%a(`U}92dR#Uo9;nCHSYC(X>f0RYX`3c;E(~&2pcw1wjwW7g
zL|?dkn}HJs1(vW|FfeJY5ncQu&$dFw29-(H8I`)=c!@imms3oVVdNSl<#jbHOGmLm
zA~blbpMZ?8fSOx=h@n)~yd#_zA~Mh^JM8Y_up536>6ggm9Wt%5-D)6Hpis&JEUT2;
z3UA3jo_7RQa%d8mhHy=a%Kwm$?PD7okDx3Za~~^poYLnH5_>V!98|iUtXL|lww34s
zV<nmeNYRwHRU{WZ0qNT;qa<Fy^;!jSaKezELQ0F$%T)1$5$R(o(e@=NTpRPhOV~!X
zsx%<yNyQS2sQ0NZw*m<*)kEh-cZmn&PK4Up@3h;d+aZf-BpF&PT3><us|)NeV2l>G
zBXz>1Ma-=)V7su<?WgXf8#L1In`m(;Vv%x9<UVc7Ad~Z#?WgkYDB-u4pQ)zJAZQ6x
z;#t3B0+tOwr=+yKhcSkMaY6K*Kd#jyA&W&5+K6J`M{g6*+EQ6UJY=5lLB`CMN9duo
z8SV5DHEdciQ|Xd?kYnkA!yeYu$BsESbPe|Igp#y|EF+C=0Lz^Qjo_>@GbRn;gdmBr
zD2Zh{;h$Q*i5HE;<S!7*@YrWLV#nAnV#7AwwG^lC@68FukI#0nSo7ggjbN}$UdaTr
z93HGDfMi&)&zMIum`U)?-s2UJ_}+-v?qf7zfYQ93CeW9}T+cpNBPt(m>zSpQa`1{W
zTtUoP<AZBTnZ$r~&Zm3sxMd?|+7W8W(l<XwozLMAxg62g!`=L%VnF3~AA(qmQ@l8D
z_yqW?yu2_jw#OJrg;l#}L|;-hUqJ#^h2}JkUvYUkOu!=<^V(dlE-B#g*E_;U4(`vF
zP-kFL+>mvj8^20GB@*zuR^6}~>EF+ZFCm{fT|}vJjK%K=-e^;`u?jaI_RfY9t#SSY
zIHfV6PzeIlMv8nH{GVdu$jWrH93mE^Mx1Wm;K00jvVjugb6gLn2~iNd6{nf>_IxGs
zPDbKkwDXFFZjFO3gE}geG*UVe$xwE{m<@G|XCtbhJx)!m0o&pe=?LtEnQ=skPSRk#
zr+NrR_l>-fF3!5k$%<aE&Uw_k*sg&m)00~pRQmLyVX|yL-*N^|;;I62#h(!*^xpK9
z4WE(hN<6-r7k#VJa-EBa&R}D6wOa-{*4;8q=VJrl*B~Sx++xrQg;71bZwD`u(kre{
za2F6rm*~GkZu7^~)N<ihbxk7s)iXxR$1dB+O%*Z<E$J~Sf?%oV(5z=UHfD<TLE?wv
zf+E7g4CXa3_(%sv1Jd~F&GESSe6s*qNv<(jcNy;Q9^+XQ-w(fI!_mk4bX<W<=wle0
zmA-njY)7QoCg9`Faufkev%lx-x@yYPJd?2x7={ry8rAw8Fl`P>dE^d8u6;}<6z;^g
z5l1>0OIEWpxlP-!_n=%^MLBoKU@g*z_nM{kN!&VVSZ$pwfObS@%F}d<sr<@c;T#+8
zhKb~ihD7~7)#k!S?S|Y=k@2YvdjA2|tw9x3Tft<s(ueSv^)`T&AfSRQ*FWB+%-w8<
zJ_D~1t5~w<m&~AC-9R1QyZVBpapXc7o?Dv$0(K|n(dTs6_UQ<Rvug4SO!QAiVIlDo
z`6ZFg$Ij-J!R9-7ZBAtDcxD>Rke)h_v8CW)E*2r~)kbVIo*9&^7UTyNTcn2H?Hke7
zT8UIJxvXBFwh7qV(kFa0Mz6L&$-b6;hTmAs*fkyVJD~l6TO<ys^N~B8XfRkzL8vhC
zW`$b8OaRHfQy}$GS}tmHMjWI@y`k`ZSPf;Xl@+%w9|rt3@?x;+P5qCtuxcz#-6^_t
zgF<>y3jzdU*#~#0!B@Dtib`e=Yfg2aEEo2H>k^WmH^jW~x+y!e;i?w-^hqf_Cuz3o
z)H-b3t-tXM%8#pQ2n@A9Ves#{n2lepfoU(ssFQh=8t2^g6C5uAjOmgK4INW}ijich
z<HyH3?h=mLckkGoCBJn4dA^ayrW}(oZyqzTy-t;Di=Xf|j>P6a)W1>gz??`NSADx}
zr-735UK_2^MYe=2EYb>Z)-|~s{R&jCp^E>{<nk6YvuQt79m@X@hSPAtCUf8d1PtWl
zkj06<en0%9i;b=)$=#L4NWp~eI4Kfjk;9u)5;o@#H=9KneKWndt;24cf!;_iEnV|M
zk<W$;m)8lKLN3+WeH+Nk>V9iVUCb@QcrvPedIs*8@C3ZfZL&A|hgZIS58*7sEz4UT
zTG9%=Lf0)f&!rPW!vpcZDWAi|qZhwUfc#h`5dFfQ!*=X9Ka8IsprWx?JfE;MS!jlQ
z@XW`Rd)(MjFl8Sp{Dh>uBSiJQbqC>-@VbE5d_L&<F>qILD|BXp(cyBnLz9CtJkbTI
zHqYR^#JK-<w&KkWG4Msrx@W?Lq=k^Z_DfB?-?`mE7I;+*RtRs^>Fi3s!+I{x5lh*+
zM?=r?AimpF0jHKEjX!s?e@8JGov;6a8ESo#SGU;wxF!W@Gw|Z{rn7PxIot#}zk#zl
zZ!Y=lQtDaY?rA-GuJz}TolXbq?(|^lOJw#@2I^0oi9_Xt6LrfeEoii!N*pyT5azYj
zEYWE_U7YsqKVeOjFWgi6#`n`@XmV1}74IDeHd5!3Ukg&*&mRb*7n*td7ydzgl*W<I
zzM;Ve;mi}@{`w-f8Iin%(;i}}OpJNgAJ+XBtB+_&#o{@GCsUjcF1xkh$*>*ybAI>V
zPkoQEi8srwAtLt=kH5sSpLtHh*4AP%rm-<k;ZG>Gs5|+Mx&M^UNKNytcTbkyw}4Mq
zl$owbp7>=)_yYLRvB_*S(a(NcL!Q^xNrXsTfjFlZW#u4u?QF}#!z26oD|c`14jM|w
z=GO$-IE0f0=BsLVLFea5%U;Bg`$$rOy|5h-NXm}>9e>_Uq;~qw(|vGWZ_dV!eEtA&
z`ye#MgC7!OHqGnj=crSm&A~~__3&Q$!R$BJcMpB1wIB}}#?}w+7TsrSz05+02vu!%
zHwQhTqPUobFLMlPK)m*uHM$|VV6cp^$yLXuR>F(6F6GC|C<g^-v#&FoC#n@Cz*~I(
zO<_0$SG5y<&hYc(PojBV@`Tjh$Il_S0TLUd{VYDzogjY#zto#%_v9OLj3?4ts=g4k
zKe0Iqco@7cdlhF1WPOi1{G&(|x5J^TR8LBI2{v5AKFLX<=TiQv&o^58DMKH#2XF(<
z?gg$V_&1)VcBMU9H*!3vpH9{lo{V-%&giqxp7quvyFiHqLiY^x!P=c?o+z=;*5BFB
z21!or0UPRQG>Lc7oB=nHP_!hHC;~Bj<Zu1%$Jas*;6s3n6sIh6F;(TyV*B~WEjKY5
zEsxCegteSMQz-|2F~WROxj252<y^}2zK){fo)bO${+RZZmUDHUUx8)A@RDruATyzl
zXOy}8)h^|}iWUfYqrz~a?x10gotlXJ=F6H>PH6b^DRz<kK8cXbo!FL##6`9Dv9!Aq
zeuiJ9Ip$no$>%{WCDkHPf%*yZir}t(zb}|i5)&KF<tPfC<g`U+^%I3ObeoRqIM@~2
zexJ6rrpiy5-H#<7gr4LTa{N+uwnB?@E}{$<9&;!jCIsJ6cA@$S8U?wCc2zc`c6mRG
zrMg$DaXyit3*dx=cO_7;P?JxtX*>+{r|i490#1Q9+{pK^3*)wzV2%f7JW^QeiA()L
zy+>yIFT4b}O&?we6=iyM@;~SO8#2j70nAA5;ZwWC-_(iYH9(yR!i$Qx{xTtq^#bCs
zy52IU|7{^!ob-<q(;<o@;Gh7@Fa`PQLnTG0TJ?(ypD019aZ2xHqO%~&pZTxL^A}#2
zAmR|y>OlFY!kHl91?kFi&jXR!zW?HBF_=SoXV!yPXZd`8(<~;;8z6e^JNbkpr?oD7
zJWQQYVdH?h6KJ64;9>YT3|oYUhIH-~WmGw@=Xjq>@73T;s&)Lo7!Xja_88P?{7vnk
z0T3r7)?58|gE%|D{Tlec(PD!TTsENfEDP2LfJONow#Q9`0jB8j$zN^OO)Ht3?w~Q=
zVRNQ?N*|dR`ZvZid_x|GeO@<F`7Q$Bb|T{&|D*i{s%AmLU;$55QDm6v1(Ha81^AX3
zcGnB#$^@jJYi%c;gr#--fao#(7{CiW%6kpe=Pz-thu>)rLS;Dd3tBtf$?>!L^}^LI
zPkwi)?IlKw>jQy!89aj9$}k}6)Zy|RcL2gextq&rg(b?Pbo{nrib*)oVf)2*><8OO
z#wHNoQG*H(!1rK$j8&Bi?p+E-h%Q2lvpwnjCjcC=ShDFf?Ez3Hl|O*TE~E=+eD*Ge
ze)W4NIuoQ_4<*tw+p(uGGMyO53g9&T`ZRhvNa6=4C_Xmdf1??_?xw>itM#YFHaQwA
z)C-6u8`}YuhT7pTjz7__?@APx1Am*Q=-~jWqMjG174rOe;z#H3up{)02q2`A)<zsE
z2<lW(Pt?b|7g4TV+fk864j|lcG4}zGNid-DqJOwvvM0cWwpr~Ca4A+%fB;xbP#54}
z1h2MV*|kT;Q?2X?J)Oli6mYQ}#WQ9My1_}lg1P(xTqXaw)$U~8+Hu<n8p2x#|MM2f
z%X*G80`BqoKXnh#*^fZr-Yoa3s}Eg>-==xl^__C_il?>v-j|fAo%pZex3qg4fW>zj
z`oGMWbaYn$bp~zCjmZ5YZ~@LXFA4K?(mkK+<s#zBmf@yxb;>*}zPslkCZk5`6D6Wz
zwKmWAT@Oo1kPv-Ejc5x1CVSO&Y)!u(t$RLR{j`4XHV+PU0NB!=mEND@Wto&Lc<!=2
zKw+y;pXq%*3`<`dO$yO~0~bgZ*;?KKgwhpG9k^=;fO%@XNl+`2<6c(v&}9fyg|k`}
zW54cT@Ut*<DW|@Afrd97Ku#Kag5m<>LTSp<WRXIps=Z}gx2gR+*>SXUiOsPr7@x?t
zUR!H1$V-pjcb2XJAW<bh0YPoG23*ez)68_9k_H2$<OS9iw|1S6(1WvF<`7vLfiyqO
zTYyBVO%%2rRJHxXkOB8F*Adh1JD@+S0mzu8_mm$%T4!U0k`n<4MV>|UnZ~sBv=>?B
z*^0Zc3+O?X{E+My2uQvQ%mUSW=^JrmVhy^0R@lq1ys^|p<KGa>ilz50Anpanyx#`B
z=qq^u%`vQ<BoO|A=K)HKP3XV_h(MLqSj$TRW*LFT@*+B!OJc)IFq#yh@&T^FItu}n
zpm3|UeK<&@-2QiGt0%%W1DNoikjAb%?9VBncGa0KIQ}K(b<*L+13+vsE?YB4noNg4
zBN^QlkqRR~E?iT03pBqv90okuLFg|b00~38-Sq<c4tzkULXfGFZ$IgF7JAZS-6Cq>
zeHMJZq&a&9(8qE@ddr2*=Cc7p1X*PO7=s@%tHWrDUg0~!qURg*X}rTKzdsEHh`W~9
zTR^V}2IS+FVIj}{(6G*;saxncry+!Pik&D5B0MoPeT5wW!lz@V6p{^6gcgMqFaUht
z2~Z7lHpucX(J-tU7d`@lMhhMlzZ}N_{A3ryiagz9?g>fzuE(bH4>zZ9ShBe%peH2L
zTUxu*Y98AGn2nxxgXubq>wm*b6)dQ!VmlyXZ!mj?(uu4PGhqmDc$w*I;q=0Z`^Iay
zSnh~Xb!vOrVhi@dS2<>fa7%~eJvHDy=l1YMy#|%uDM>Q*4*Ue0_`;H9oiuB`ixpcX
zucGD2PWPXysMHnI+tGTPdgVuJv8&QvG>j|tji?WjG>+FygEdKyn4Na7Yv@0`E^&_`
zDTJ<RNCe%4mx#Uou|rcgl2Xxmw?BNd5t|bxoZnO3e*O_Pln@-tyI-;i=rq)tEsN5q
z-ve?MEG_(*9e_V7Z0NczyWBA_b7Rg%tN=RH?O_0Ue|aLOEX$Zrr0i|~43JK}oZlWh
zL{~ZB5d2Fm2+!5dN3AcgC4MV8AaMdo-c-+o?bk94N|=e~5$QB81^k7;DA=K915wr~
zmrP8>H9i@k7fuvX$x`OELxcc;%7I!drdUB+?YzqI^diA{0^|slAqae6%J6xdy?Rjc
zzTY5`o5h3Q(?!m3H1|sChaFYFW3n15A#g~z^QsA8UA=;~8MLxLc>kH|XfsX>?MFkh
zo~zckv~vu%Sb^&g*}#;5V|h|H%4E4XV-7I=Idkw>x|{V%faIl+l;ImP;rl9yOTN2&
zl*zk<9tw|x%I43&K7tQRt@CqMmk7k}!Z~|<r!aREmebX_z&JO!$9Yts&JDK^pUJr-
zbEjGZvI+7&+b3(GB<kE+%a%X>tcpQGtK(Bpw52f>WU+`HVPnZr@3{H3AtXM@;l&}j
zE69uuiV__A%>bI(JV)42D@4rUy;%+7?BM*Vt1^v|M@}Z_5)w-6u^I1){u?8Kcq^xW
z%iKH5^R@mA1ku~H^h@$b2P`t_<uI9Bva~}hT~_vw--VtZOn_|&bLL9iR(GEqI?e?#
ztv;*Bzo**LFp|nP0cPZHmO9HHbT~vJ__j<A1EMCd5VEZ|{AHtNh3=)=NCiCz1KJu9
zlnly+PF4ZUuKXbCfG91Kj?zj4;}jJd|MDX7?S*_@!*T0@db`_zaIe10tQtXLt-tw-
zlu}#lLE6s&#*=n8otf-+G`0ax)PXj=_gjxFO{RlY`At&KMcJ$3ZQ^seF%NObi}XrQ
zY%}Dlm0{F3_`+u{zyp>I=D>Q`<(G6;?;W*DdH*F!)T}ie(KlcDhXV^$TAr0AFR~-J
zQ?i{$pJ0s?f|kl)3Nei8&kIncNW}!3d{GYSe(PSuFUiqh6-WZ!ed|at2ka*zBOpah
z40)xs5%QIAc%-BVx{ocyIPfjlMEx@xD7%zil<W<%@3k+mERX<!d26>fm;qSIGT6>i
zZ@X)vZii6BMxj+8>kXJgrNxLPH_w3TeqS;aqJ4qJk^lT2rT_%J=)joIj6r?hw@hu{
zFGZSXFiPj1{uYbw=9M#$g|Q+SKyc`rxYJ(A)ug;(O{)l{`D`u=qIzNJhlM^kJ!oZA
zH)}at=mX_Of)nB-x};dIG1{X{uvHzwQBZ^qTp}?nMkJMXb!5T?-8tJie!h|VWKd*=
z>*l>Ez3U(8D-&5lY9_ng&j5h=#W7lg@Fe<{Ho#~Nsp3da8wP~mE_73I<}rXzvCh8s
zy+D(c?OF4bouLOsH1+*iKbG43`ums18-=<$LLP)^Oku|*n9ipGu|j4pFY}zJkFIPm
zt%2IfcP07BUL8GnJ8;r8hKCL>>*+o*NfFDRFG{Lux@4xbRR4_%qD^s74{VM2Nk=Gz
zc^=4uVM$1aLd>tJmdRg$WRf;Nq}t72za+)0vb)^Y>~V0;YV{r1;X~nk%->E6?9d6n
zD|n3u%;Q&2fJ}6nUb3Ueu14I*rP_InWlpoN@u!L`YcPCi(}pZTWLe-Bk>WDlWM8s0
zfii6g674go^p`yo1BWxE31uR(9pI4RsiCRFal^N>ka!l3HdFu_>jfX_?Z<zOk11ke
zm?o4CRY<8(qQ4OPBCJ0j{R>#Va2mE}9VEZlLhi)zY=cKSvfT{#UJ{$sa2C_2JTsqc
z^yAdts~v?K7Jf?%5cS9g@s!Ee*G(5I3gj7yj?=@cjUa&P0T68IiPO14?^CXyjkg0G
zo1BDG8ChXu)fH^sjU^dklEe~?Hj&a}kh8`dC%dmANYNYAT08BOW}5uto=319t8V<$
zo#K`PylvyV&_U6cEkxboLm$*bocrMEKJHsv8M^y1u0OI;*IKetYbl`|n&1SeWxXqp
zX6MOeV^BHfk!wpC_8=7)i?QI|4A$xfws@I~&{Z{_7ajdjr%p5Z%z<W$u2RmQ-yv4w
z(B^Vb^d}$n<DkUM5!bPivTFIV^``nm68^@ECy~VGdAW-zzN>KomDW&LCzffew3GoP
zqBwZUTqv&J^>5UDb?dh-hZ7=r6a97_Fp}F-6odL&vcvPLZfUa7TI2Bx+9xro;HWf5
z=6d|2_PWbz*@zH}EMUDcLjq7WO;2J=Gj13xYCZ$lDS#z}g}{&4Uotui!IhD%ZF)0G
z>#W;QQ5+;b3n~(AUGS{wL!l-ww;-6UStA=L)^2SXt&r}hyfEuC>Vq=Qi(w%+OmLTC
zTN;D6J+pyn1RFt@lp`Ls%wC`|paSZMaY#4d+*iXQn|_|P!JbbI8$pU+6dW!K$4Plg
zKN@sjMV}zBZ$IP6e3W~?mFSwG&&c>T!d-?xE@dm+Qt}h5LLU=qkEpuc%=ht|=-|lF
zAVNO&NZP96GsN}o15!vzDl-dyG)+_GnoA+_bCua|h|eN<Btw2+OU3IwJc-VHM=~q9
zI$o38mf7hW$2p<xpjo!CvqrZM^MEX!!*C-!ZVXNTkny$_B(gNBT-jdhVO&dEq-|=<
zkI`suC<~_mp@WEUIk1_LvW!?YH(5_r%pPy>AAIFzu!=sL&mgxp^cqeLwxz}U=319*
z4vfZEc#F-^mJ(PnGHn#PI#f4XYMIeQP!?I_gdw;iT=wc9In8=}Jff*inb7`d5srG1
zTGW{V^KuA_ycs!0y&ae0<>3N*hFYmPM0G^QJd!WCL@cPpCU9O0^0J*Tc-GykdH#5_
zhy*$GE3_m}-9nHWm#d_4A<_?rG_}SiCW_B!Ay_V=-9efGhB#=j;0t7S33ckIg+<x#
zQ>*D3xH1`a6osM{r@bXMN$NyEQgBxo)J-^PM9NUx+C74qK$VTJ+h4^vAAyy@r}<TQ
z2rN1b_t`#@wM6X9>J1inh}!yBq~~XucXdyi$uxDfuz9h(VIwLR-O)YHK!7-HK4OxN
z`1Z88lWX{=@OjE0$ry8|Hb0!udGP8NlsSsggAb986vUVBaABh4?AClL80v0ejKrYd
zARFw*-3D=!qp;%i2j-`C@1}wmGi4jnV}V^`N`5QNvjQv5q5j{@gZft(YU*Ce1A7Q_
zW70eV4JyaBv)uHtBW^g-8DSK!wfpzUPhPDhbBV0P&AV7<^(1vF&Kz5BDUDW_2&mw8
zei`1DR|+_w7UL=mYvrkl5B?-F#}&DlU0E2>%9DyCGt<`?F`xGkav*U~@p>Ny!sF{d
zfu?5mu3}0J>%n3SBgaeRXf%e3fPh`dOIjVpbw1Zh1eJk{po|H;J^r1NbzRl0-v&;S
zYYl>>-7ux0T5cp(%)X+zO95@h+q6H(E*r$#+h9ov3Sv#e7)60-nPD#M*nJ4S?1ouG
z4k%*~O9R4rPW|?T6z_M)mRBk0AA+#=wRl<k*|>Q6P|}VR)m`-{T0~gHbn?DbHK|r*
zpK}9QE_k!=EDEmhQwvdKXLgxDk|qL*{%r{=X2eY#Q-8CNQo@Vuq?KG$NVEmq9a79f
zDst)MTH1TC{uIG7)SsYtUV^UGVHn3Ka~k34PHrly_<7uc_ssYlf!WAqXbg<UzlQD|
zN75;?aK>Hsjf6qg+mwd3{f%I>;@Al0{->In070}IH*^It(rtRACOVU~Ni^2u(^)v`
zHikF;RLBSwi=u|#5j+qFt8|8@N(ZD6jjbHlNp;y)6yY~KAf=(JIT-B=Ge=P(l2OL1
zy}j@!@GguA@GDv!;(Ym)`Lp017Cvy#7aXz&j8LxeeB=Zu9AQO|QTQ=uN5EhIIYM!O
z+oiLpUU?k_HR>Ls>+t;e=OBfy8<Y-gbkK>?ldz4|TdY`}cGcYLe+XxFiXvmTX((6y
zWv8Pn!SexC2+>>!jMoY+%9}XAN};{P0Y(Hn(~mJl56Y`8OjWNKh2|Zb#eLKT6YRyP
z_J%7a418nJP{mDl4n8Y?uPn$VZ-Pi+`%oxm-f_9W<x@kEs^`6F>Vhru5mj$N3l335
z`Z1R8xCN3`jR!y2Z^yoGMOp5p%`Jmf;DFgMqXQp@^wyz)NCt<5!ZwmVO8dn0R;Qy!
znpbh3IZG%$Cf|3el-|{SxbEw53pL}?qpX(uK$tq*W<&$4$w2PndGc(ZIGj7Zy50$C
z^d@&qH?6pTlTPHS0$$b*rcdCF_c&D0r=^l$!ZYy_X%lRg=#N6&zJqFqRhJ7elRu69
zZtyL8kn4QViA@Mw8GJDn8UTf2F42lO@xy9yVwxA%X!vCMvHU>va_;GCObbTD$3R$L
z!}!7So6pcslHSt(sCX@Bu&|h)W|z3!@J@Q;$MGNuB6@v>-S&>G{pJ<5<D~7dow9~c
zH?^?1y|K~M+k=`g6Wa@}D+At%r;dw<yf|b+(Gy<e21~jLgF9={rxR9`IgQfO8$NZ2
zvCh%%&xz9`vf5n41E%x|%@)(n#Y~p9UbC)Wbo4zmM#Mc#W@S5$^cL@XYk_W1|CQq2
zE^?9G;52Ub*Bg?N5o)pm_ru;w^`*WXxwlaPA<bY8YMbL-I4I?_L`5BwOyw@gUvXUJ
zav$!mylEHC&6+}5-GMF5T*XSCzKo51JRcc5XDhQyJ{=b<l+F8)z*FSPh&9-oYerse
z<yfn?IvB+#vpVS2gzr6<qlTRPASV!iWghH*m#mjJHt@$>%Fvl?(&8zEH_;bGXk^;8
zn{Xb*|09lCk}MkiOj||6h5@55e&+sGc%wW1?T_cR>C;_)x^;99$5mWI?4@_x!J|%M
z<5EO&66vU7trm_f#>21AXze-m)%v9(SM0gE@^|vxBvOw@P5$%00KDRv4J^D$2bLnw
zg-wU8$mnw<>%=s;-z_+1Zm%p_7dQ-iHA~>J`eITmzz<nx0HY#F9+TW@@Oo~Yy>&fl
z%f3MOlu*y#z4IUFm}nYh8}Q~@N2{lr@%)Tq&<3tXT0$;%AFux1*r)ltC;=<)^|{n&
z<-rOct*5z~aUvot$?Bwk_-eF>zglp6R!6k-vWg>I2!(&8K>5&oCAff=PPfsNPnAoa
z_dN{hD!uOt+6(=T63IP`a*u-Ur(ev&>}Du#q}xD4l|`u3)q2_nM3=Tu`iuZnwFnp1
z8klD*YWoLJ0{M496jFJYDdVKEEc3U9(VrqN6u`+IB`q0$6JjC^fF|><%3RR_!bIT<
zif$<v*8XO6+GdIH+f`?8N>iOpC2Bc&wDq6|j5b;BB^&m~3e=q6t1E&7I@FbHU>>)Q
zE^h{p##wb_?}`*Go*P47&UK2;#2}|M9WiggZ-Pn6Cth0@l$+xSRZ<~5(PaRy(KZ;F
z)(^+ZJER2mM35X|XGkV3z3P%A+uQr+9uyH^Ku9k{aY^-bqaTScr6DGtlb^Pi*fiiK
zCf9qHduY)A%G>C8A$XB?omMesU^9`XQ-TK&Kke0eWqweyHK!l+Q$~Y)^OP3kuP7#W
z<bSJr;w5oPa{|!VmX(U>)3=p_rR3hY)xchEwXU92NsD#D7&ucYHV6iY%e(kTsUzrS
zN0%V<OY!ClE*4fHixcpy#Ydu{!T%BpSHt%6!@6-tCg147DJcDV%`7H8F@fEAE0*Hs
z@Poklw)a*jvFC@_u?=t27>f<>i@N?n$VS1@2q1dqiCGNV-2ALgbTKzn7iFV;Mrn9H
zOrx+gGE{VM_AJ@0@$fXzd-C$^Q6&A72-RgaL9A;3hq}Ltt1|4`zEQy`OzDtDS{mt2
zX{4n=TDqk}q&ua%8w4gHO1Dfv8fobgq!AGCJE!;keDCwF-`ZR|YYR6f(~BABHO4rO
z<3Dh@cAc@VK@cCAMY5Wv;AK+L+^b}PwIFUWL6O|!aza539{Lchbr)?uE34r|wfaw`
za<?{RIoe}dCFHW@R0{awlRK=A-!ww2+p^DE2T1M8#kY3sO=vYEpxihNPn;cDY}5&F
zl}x<AaJpCDu7&^wi@dy2@^)(%4!TP5-IpIy*gld~aiO!f)on)$rJQ{q#*rl4l8#M#
zrc$$-J!9y(tc7~Zbv0lUz$-~yX@P$;lIO`dm=+2I<(2Gn+e&9K$B|Ejf?1;UD@aGG
zaZQRjf)9z1lG?l&#(`I$W+&Z%YC)mtx2@@V6}duL%W<xtJFO8?b?C#x6z-w|FkUtq
zGuff=6kApDX`?id>5bP?Um)0NI&(Z!@?04O?zi-TwU{kiO*Tx;Sre%aFz$;-TMRQ~
zV;u^|m$m-U_-ujUU3|0I&g%`22^k_A0eEacT$FHWRc(h*b=xUipZ$2X{nW8iy+%x%
zO{LW{4Mpq4tAZ%2_y56e6j7-~cMiRj@^NI?S&!0J%M-*;=5`e1&N{PGkeYTyi_H1X
z((E$??3o$4p~IgG6QCrdxvnl-(xHd}&@4x`w-1<olwJ?HI7Vhy=Z|Gyqq)p7db^-h
zl((M0)`$08FRHyZ8qPawcuYIUYny%*qw{UKKabl^Mt8>5R8W`*2E$3?wpWO6^WJ`K
zv@g4aNU!%s-{{^6{?tKP;1StD+QD5DAR>Tq`^(@cOCMJ4AzWxfa+L3iy#sLl)o?pV
z8E+n1eFFjSw?0wZR#vO06wprKF0y;_ZKGtx%rlK1>9XYx%;GAt=2)2d`aU&GM-F@U
zggtXPU9rpj8bPLxX?GJ+cKdccEH(1&yf1iX9F$eI$9cRwT}Zq-vyJVomQE?CzqLFQ
zUtzZ*rF5TGk0ie+b!=o`h{#b^zB^-Nj|EOiovHkq@ykyOwk+?A0Q`d|QePKuHBR`K
z{35vnjU(liYc9uDsn~S?zJ=AO>qn0JWWx}B(f1ivHx3j87xirdqX)8v!)noL7PP4f
zOTGU&?UbO?>rV9YhlmMUqQf!1xvRVHMl8RZ$!FlR)54(=#q#9;kb?QN<;@mNqN^A0
z0iZ#cuM7c?V|5T&P|{=Q>saCtW#`YpRQmywZ!TYQ6^EdtRMm@x9XUL)dd?=-%&AnR
zesxgvg40xzPk8qMC3=B2VSUY{8xF?iYi(sk?Vf36?az}iT2_f-guRCza5#d*tp0-N
zDvC|WqYx>*t%+Tze$(;jb~m?VQT6_ocSTlpkWHqx<NQd$7?|00-b82W<XNQfC>P1=
z0(yih50)gl=DE>Sh}=^8s#Oo}H|Y4Zp}hq9BFS0}1<VXyr1HFrn?6Khh2d~AgwOX!
z2*P*QczE(FHr?&b6lZ4}kCJoqTbx;Xp2j;G*2nSAgMH|5{9CWVX(T)ir2fcA3?5*l
zwj&!yy*5WiikpFS7K&N!HKwt+vq?E_Fvtu3bEum@`z{UVqD;?tfib+2KkE?{?#pSu
z7+*fs^e^#N(3J9uH|km>L-_=1Rg$n*MLM`1=Wt5z;nni7s*hhPE8%Jr?ZBUk<SU9R
zFjeP)KbZDHKc`-J7|*u0{c?fje0PHOYh__&xJ(^Jj__Ym41}|tv_>)Q`3p!tBBd8z
zKS*J)OrPsz)*iJ={6>p0A+5T_THxSP?MUy|enn=i)OJ%zua|gHxSX`Z+otf|+*O8m
zz5PX4Qbn2fAWb@lZRKBZ2oib#wWABw#X#}IH}Z#F)47@pS;2=euN`}pK=}GG&}C3F
z@^`P>NL~6Uk0PE9a+%8K)YND=O;>R3K><p}WnZ<mmpp)H5d3>uw4<KK8O(wPgR0}g
zL3XX|MLCi17bXo_dB_}M8dNh~_dR5es&{}e!z&~hONepQa#Ddo>%xCO;WN|XAlJmg
z-Np~mj%A&GmVYRruCKJ?RXVj%(ug#&*kDk=V;yKXJuzN_ZwL`S7s9?jFxDE0s!28u
z4G)Mg={JeV4?QHXNYcuTdb3XZSxLSM%CU~LhGq&`WS{KfQ=5)rp3}c-`Pedqmgubo
zeSuL9eOcH%qx__}7kg32BW+d@Dm1rg8Xc-81UjQI8o#sCu2jrLX|Y5z<TvD4!b1Df
zH-4uOavbD(bnbO~gOIlnYWvNYHz`AoQ?L>&LH?N)I~6r|uI@}!h!bEo7?D?FB20pr
zVRw4o>wIPo%llzeDGtMZ{O=W6I`m0f+z%JD-q&|Fsh+0Hm|sLqHQe;O*e-Ls4AFW#
zkfO)XC+?lh-LRV%BOKg={_gl(MB64)3j!t3n70snEptGM!3ZaR8*wjPQ^H~mRojja
zc+<E4SoY}C(%Wc3t@d1?wK6Byts&9+hR_%!R+3gkp;l4*4adFE)`Y#7PWr<12q|2(
zW?B&=9ZYdw;}AIFxM!g0LzU8Azg1{gu<_a-h|>(=sz=v&(R*AK=42#m7F_-f`d+Wv
z3)}wQ!~zd#h41<Cp_umV!C)mZorj|jZ+ADuo4kR{&6$kPo;XcA>0N6a<RFKmqMQg7
z!bXqYmX<C}P;+I;-;NWeWvuO`H(!Kl;A<&`k8Hqe%A%6z3;zR7Svy}2alSx_YLB%3
z$@N*+l0&M#!5?;ST=B@XE7fWL=r)ODPAos_wDe;!0=y+$Yaa-)ghg)%nwlSXoKr=8
zaGi0dziH27hG_x@&91wxMdyQCnL9gX<$6KpYD!@{+$ZWMCx^lwCa@lqeir)B#|jU$
zpAI3E3JkNc(xB*fJl;T_WJ>}FkNrV3N@V1HiAl3ZvEA)WJVSIzyHV6E4$wfEtL?4e
z%4>i?naufYmRDMp2&FmL%mE6n)}d8vHZC%gQ(KQrX0>HhyCDu4-<>~sRWQyGt`^M^
z=t;`S-Z!rUAFXGFE#F1?nJiz>uA>2jK=TyJ_4np`r+(<e6Q-&;c!h*wD<V^3_i^A?
z^P;0|ZWorR$M)nb$0L*9?)F$}Rr=}p640aacj_fmDt(tKo*#%z6<%wLMcN5_yRayh
zd+YVf7{(4kDwp)9zlv$I<dvQ!>8U?bKw`<g17RbCBQr>X?cOr$+1vvYy5NFe7>zqX
zVSgFhKkot^V$gD9px-;~<#^W>fJFHEZeH2$z7VEtPaAmX*z~ki+Ds!bMcp1UW!Tpe
znW^n*{C4d5K-;O<?<H4KV+bdkRNLp^<-BI}4?NO!YP9c>w^Kq}PW1?s!^N*fB1;{F
z9V-~f)a9co$&l8+6yt8uuPnJB<YBKKc)0h4*g&?M{1H&)+57mv(RQSDizmJ?o}y-3
zLC^A#j+ij9m+Zbv)=-HoD*4^47i0)a@OxNC!^U?Ike8T}G0N?&J8(3!J~zYXS*H-e
zb&{0AvYcaQ8nuw&fRd=%W&K2NO?h)Vl}8i~A3$F$r|qe~8S=ztLtoA}Zw+U9=;GxB
zLrV{fbUK~vG8T(3a;bUVh6;Dm40)Dr@H*pax4kL8MbyA2#KJWJ_bAypnNn%~xckpg
zQK48WQCY@vS0RQwO#(zE^4W2W#{Lffzn-Yk3bGK@Ss>Z}(H``P-$KJNac|YSXB3MS
zKRZ}dtX$0>7t489rSOt<%yRE5YfhA#kET{>U(MbStQoKwc2LT_JDbj$S=V%BXMV_H
zJ~xpe)Sxfaw8X^z<73sOV-!3=nJi04J6eIg`EWQaI?n)~A#O~R3vz8{HQ(<0yZTde
zr~cie6z=Azi)JS6Yu$cx4LoVXgFjjGN8AIUwr-TsQxqw`Ev~cB{fka(yo?YI4t-q4
zVPZKuYEf6jcZ>kJ+)J=NR9SZJ&xwoU2<saeO@6s1<_V7{6|C>i4BHQPOMKM-PfU!8
z5=k8&)q~r-mXZFktwF>ngYbIJ{r{@p^Mh&CJY<);O^^2lk)Ki^O|N^~ZpXbof!&Ti
z>Wo`LYjXtGpcV)^H(lHzN>K2FYd}SGZuf#|9>-km5&vG+e>D#9lOrPxKY@j1YyZo<
zA|Wh+h@>5VX#3A&HKhWu8NLhUr507MYfx8~Xbk6Qu*F<4I{WoyeC9t(!L}Oy{jez_
z`+3h0MQkB4*|kURFFFU!h1@vWaY6(aj<DP(^WXm(gACd1ZMj*7A>>Y5M^G#I0lo!G
z<qeUy^L{VLlBA)K2{@a00l9K==hC^C=?Q(l3-hDFG~OWC+%Xfbiau}~Ws)HM%~s^@
ze9HcxZj%?sWM^Gf{7#cr8v3?JPWdm*7<=a}j8VSzbZ56!R-G^lc)Huw6?}z2V2B#D
zzz!%i3<zG{;bSDhIJWb>DLL^g`1ij$dKM{N)JNGgRD(*Pg4^j*I^V%;mF!M7eJ0im
z7-Euc*nq%YiSq2JM(0P6$yqCmehypp$$W61orC5AN21Iyw6E{)0c92iux;>)>U^g;
z7KH)V1&<Q=?aV=tNh`IwqB(XU<Y)vXWH|Sj$W&pmj`sehF0&|iiWkn_kh*;);YG6f
zXG!gVdWgW7cAV{$t1%OInTA9)PtZe)!X-aOe)?}&TZ=Z+R{s;qIapr52T8XHpCk&G
za-yxUuhGD}z+x)knvO38zp~5UJ(|`~#WZmIY_Wd|dZN83dR;_oa&uxV+#cl`(H-kK
z_Is^-I2c>3+~ur}x;p2P5|yAW>o`3|xYt&So3%N(Cn}PLHFLp&eDpaxT_BazRG4i+
zbg%mxKo$zTt>fxA<^4YdcAmWV&pu)5k)x6O@GQG__;a2aQ7Sn?%pKFq&kkp1aU23K
zSf$l0LYW@I5<W;MrLGc3Bis3i_k9<biY7S#_2i?_{B=3Pvq;lpzy*kJRpM4ZC9^LS
zNkfQ`)X!*CC#hB8!-Cbo=w2Ka|5v)CVrvUS?;BBRTejg#@^4v(KRP>ak~*LtTr}Hv
zlom@;^<SQK0#gFMpohv>`!g}Cx?C`x+#hQwf5rRlA+|{VUND&jz0>WMKn>yE234ib
z#g2$p5Bb}#)cW-6QXcf2Huk^{kjb$1h~Zlz+bKir)l+9nb{A?~uNmyW_^KkDqCZm4
zJiI%zWt4OUe<_Y#Y_)5|fm|EsP%pihV(MAY<Kb3h24RK_PmBz42gL*WB=a~y+1}u)
ze=&S(CyR2Kav1I~-7nMsd{5~iwkQ06-h&aN6k)o`?*lYi_ka%IrAhj8)M<P~(ii(C
zMR^$x^@rjlKYlSK|IJRTJKT*b<Z%c?$n)JqISTbawC<xMRk4XHsMm~j7>T7?H}ZR|
zR)$VpXe;>4%_wVEzD<%ym(k^+5e=a}4PWv3$rg+7-u&baqCrlwXP&US$JxjEc)AO2
zn~HpMCJzZpNAg5)BdG8XW&ttbOy!{cD}9pWdm1p9R}ntsVG~BqPt3ka_=@Iq3S3kB
zzTTiS9brk-pyFw3Uu5O0UqzLj7ovr{sx6QTFAbtZ{+w9dS9-z64>T$ZT=2PB=UEz1
zO?dmyMA(I+3s6*teCeZvSr4TpUU}+0nr0zmR+5Pl8nX^1(1tc)g?w^;t<EiJ59Mg8
z5&HTgn!Tg^6C$8F2XZ}<@f4yxARbBr@)xmGL9cd~KKoxfWN|ST;qEJz&!XU>+v!ZV
zrv7DZ7%BXA@I1BqnaIs<(F;gt*XIh^awYLU2i#g&@j#;8uGZ08LqjzCjuO=5>14Am
z64QmUG!lD<;KU-A9-sbWdta_vl~}zH8cL|ohzR=F;AnOul0#OVFj`&6k~4x$l?H7m
zr28G^-Gu;00wc#?&8z5RQbcWu=Kc{nW0Q`sDUMrmV;=CwNwDCS=eag=(Z>ICZ%X(|
zm=s3Rzl<JwfQ2B0F?(eU0=c_pCjch(WPi3M3l!nF+txiaW3WQ2Z-JvE<4WA4PqwpN
zzfI@(vY_VCyb$O%Qqm^u1;0!l2l7^KX||*leX)=2poy|T+<6Q`OF?_PZS*s$-GE}~
zWvURZyv5Jp@asXBdUt%@a<u5e6|KcCqjnz~!wu&!R7dT2YN@c|7g4uU0TY;f(T1%a
zv9Iqt?m(8b2O;|*S5>#{3$M0E+uk2ZX#E0%pq6VtLI!*vkZd~O*#=>ntd+rE6-7S;
zkTGSu_&s@u)l|QMI!Xu&nfO);>Tl*-D$XZ+3%p$gR%5v@G=29Gu7jT`;_6bRzn7?V
z=SrcuKi>a+_xvTeC(r%_1x!XM!thvSB6VYCRT_kXTsW8iNd0hM7N`C%I=B~{A4_kF
z6S8UyW@iDDppoImDQv%AHW8#<`59#2sX*VD1a&EiVsL9e!nHLEoO)#$s;pV~MK4&H
z%3jlSi$l?#m=n*vb!DK+Lgt>3zvGp5h$nv63GI8nM5;FpFNa<-=DmNhYMz9W%+OUi
z7$F`as4XfJ`&8IY2s#gRd9Bb^a5NSn%(Sx47IM=--_ghdQKRGv`2F*{s%I$;T^)KV
z0e=YJbTX6;SZ(ruO>XrL%r7?`KxHm`L3R76eheL8^Bkg(kOS;j)J#?QY|Diboq7|0
zAX2+5k>!5#{mhpkYvA3*pg$iG`dJ;A!Wq%1%$7qhwr&Y#1z5lWlwN7_9mKQ@m(A0-
zSRxSgJ)A5)cd5A{TJ6cc73H5q=<?pCF0`T^n+TzbS+js%jyLw$j>X;Ob%-5=b$YoP
zcJi5EU7|jqKRgY=0A1FK-p~3y`N`=APX*0i9uv1-N1G6%>B(}FYguY!K3mUvi|K^&
zkMo~L`ERbgc;5(2_k?lLXyS)EK~Ih5hejQDVSOL%=QTC>T7VxGPK`r$>%w0DKk!<K
za0y`8P8zFa{5$NJZ1TP0FyxsS%1xo8@<{>#_3}XgrFebbRF%Vn1P$)VoVu&%eeKwL
z2c25KkJ6qv27Y|17{nY@%6ZG}&9uoJ_E;w7k+@_G&Q=fQDRP{99`CCX^S!Cl3yeig
zrF4(x=Xf(^!W|iEvE$qp*xj?PDu&}dr(&_hR0|#c^6-1lpbjpc#t4+%_HeVjC~i{3
zLW_I3&9ntCj4S$G9=&;%c;z)d<H}O^Hm3S~sf-CKyG0`mCY6cFH!TI}ZTv-Jy<bY&
zqi1Mm+WXN&aELZmm7<t!-)1z+PeIY1b_zE4+`+Xg50g$MPJ#qt&2CYSA4uo?GDpZA
zZfL3c@L$jmR3}dY6W5%;r@q}k*y)1;{ZNf4nW%0FJ~cBqzqr02Gaze|rp~Zx?|$(-
z%Kg&MUrmEaAtHdF*4DfF#8aA{-s&m$`eXREi%4EXE$i8<@>!2lxi@I_ws~!b!86*_
z#nYZ09F=o#v6;8Z-g$}7pX!oUt9@*oe0k#_qw)DwD$QT6Eem40r<0=}U%qlWt|`rB
z>nSxNhbMmr6Ebf^McMJ07F!e~y}`|kDp(?MJUGXQt&(0qmmJa~Qt<6|V-$Vc@_TjN
zn_nJH%8xEb2nd|@%+6l61(qm@Ko~tLQcLtN8h8c(h_$Phl;Bz?dN4o_(|1LY*EHum
zs;+`4+}6U)Q!XE%g=7B@h8PEe1E~{dX@GA95YTqLeCDN%FA{wl?Rtz8*OeX`P~|gN
z{rj-V9Wr1IfmccnSSPfdB5IW9peFy}*I#ScVZ`3}zeS1*gt`4L-5Uec$^WLZh#w2j
z5Tu6T@7tlkX#fB6Bl7)$lfH_QJO2MFmRqF}#q#w++xY)3tf%9FAaY^8&G~<R9n|4z
z&`tlY47P4W;s~H9q#@az?tP#3-4Pi-7<3cOKSN^)Ub?mRpK8Ds0{7pktYBFS{m)B`
z8VF0$*SXjZ*!j=z|F?z*PxJctXN1$t&wrA_e__%RSm00C3RwUDlZV#e-6D__b-(}=
z)=y}_THQ3OzXlTX=s*1bIH;UDY`B4XH{>Cf0G0A>mQ%-L1lCIoobywrfD(odFv8~h
zKT`Ptrxyw!3r2ga_aM@L4E%hlSVu^pxiXoit~>iC91f^x)iPnAc&|E50cAsbsIh?n
z##159GvCcbIi73KH~(|9m%yUDN5EXUY)=Ffp(X2tkD|OCjOGN6ME*|f&CXh|^jNyh
zw%f1Fd!)q<&MkJn|6A>vC59M$FNAg8?6ZtojfwuoKtxHiw&y4CYYmQt5ey6jI>WJL
zEet^f4gr4w6S>cBfhnjk(SbvGjj{VD0woQy-QnAzUDpUGKpQ|5+}r{Z0prF!;48=~
z==}m-v14#=O#6m@fM5eou8HO&##%xUoEt<afsmv}_1GMTl%UUhZ}T?**;;%2k462Z
z#nUt5kf)Q^z{IY@>{uhAXOu<6_f2^0z1x>2i+Q*Sx6n@`z9akA;Q@1GPQV61{7tlK
zQ(+l>68}im!0^AwGZvTYwd2F$1;nLr86rc?jH0K|5oR(+z^mS4%)mt0z-{W^|2gC*
z5F0fG>I4?gie(9cYoQmty@mLk)61-0d^ct{gryHE0i-eJMmV?*o&5j4wy72@!K1s?
ztviR%KInAQdbk9_pB@&;kSmZrE@u|a3X>PuO4jJ9Zupj2I=cS@Se}Uys6dV}k+Trm
zH~|`tKOyN)FZQMwmVgz^G?sT3%E6Gkk-=AGh7g%<*gkK5SOaB?%9I#LarOezYX$NT
z1Zu<m2e8ET0;z?B!e^ISIeH#x-#Rta{0nGGrt>V!_j}RkneE_p3$|6EM8<xcSS#!I
z2#PPu$CkobP<vjYb>5yT$`DU7Jl$8$Og;kb)Hny=pyaG*5KT{vgU?#cZ`Tn{Il$F^
zjO_jn)GjmZN444+dft#h-De>QOW>}0jNn{<LBKRjKKlb6Idsz-JPtKI6}PGa!E{K?
z`5i|37tHnfoeXQLFO6n_P1za9P9>({7$k*ToELKl)-jgIaaSFvEccn&8d~%(6!1^U
z<no7b5b>F&r&D7S0^@n0(rsu=2G&{EIq)HGieKv-<y(ZTYtr7JiF^<nJVI2O(3dxe
zZ2y-TxbUz!V2KpJJD!lEoM|bRqI^bf5sv*DRO$rYz)<}T{^_`^_B6(lVc3p^W=M+9
z>5A4*s1$@nUJjpuAQy|JRgSxMfKwOC-;3J!On>8gd&ky3UG<XHf~dxHD<PImJ}&<}
zY)$DFq4xctJhBE><k=H8vhTThz(rjLx}UN(T%)kZ61?`dC$BgxvIE3}8)7w@29#Ok
z{MbmvqgFiCTcgilzUv6@|3dS`O(5|6Hw{P(@D1dHzV{h|4-@t5NSqL!$a&C?Q#$J<
zpWCz$kup?E0(rAqLv`}e>zmjCumG}_Jp*I=_iw=*o*s6d6+v1|lg>Iy55z`)u3ijo
zI+$eo0XUOL<%CkhlG3WjiW|UDMMqQjY)Xkcb^!MUGj573={<t{%MpS=!}H!hZ$0>c
zz=UVA?`?bn#V{S{T;I?Pciph&2qmhN{HEC~*)jmg>81mL2(_YnZInqmHuc)#wGA@$
zPvw8b|6Z%s5LwXQ0*Xv=cX83rGw|HG5o$^QI@B@{lhMAD5v>{P>jasBByb4QX4u1q
z8lRgnq(>ZQkBFR&WQNT#4(OHrZi0*0&(*z|(bAc@>e0oo$DZ`X{l#++5ZF~?$r)~p
zl)o>HR^I(Kd{=4&QZRlnkm%Su1CW=pljs%nlfFwXHkQMna|;{|e$$Q{rKc7+3SC9o
z?<PZT2XL)%kQ)c}AwPnQE%rc{`n_4PGXMem+|p}w$Plp=C#(s-nZVvVE0%dL0Pyn{
zxgM%{W3;$<yzerqOYc6wa^K%ylV-OZ3zTcG=uyy?vS&WOMG0a^`UP;jWqxTaV}(uX
z?{RT1GQK2yvQ|641_z)<uAJ^h6Djr0@HVC@t>1_$@Gl#%JtWrCO9hxBY5LyB-grjZ
z{Jb;&Z0y~5*=t!>y#@vP0@eY$>;`-p2m1mNJ_w#XjfdS$+^Q+fR~gRmAMnD^8}_E@
zSCLB97dd#p^MkSAPs5|U_Q0WB;a(6M;haMb<VS^xmJBw{jFVoDkCz?M3x<4S;Pg=#
z9@S;SPjs^vLwNhGCy1@haV}(25eX_D(E&DjLK3`%hxg}Mpk9A{*R4Oo%A+Lm?MV}E
zEC<S6pazL8ZY3kl)6_J3%&6lwps0w8;8qx)HFhrvam3MwfDg4CFoh3%Jtk^Jde?1M
zm8QF~S|SO>VE_`=DF|`wHazwh`T8<-pvYXRe$`4z)iPy2oI~E*Tefa}C4>)oe777O
z`6Weny0*Se$+X?^YBzz+5*W4(p^(|<+Za%x;7;-&^OK4|T&dn?C}euluta5A#^iXX
zGI6`piwg-o4N-X$^m)w(<gE-oRIEO$B7l!~Z-UEIy2B-P@dW^V^dE{#)C&2TtAl^S
z;nQ*tZ}MozsUX(FO%WX$vd2<5QaGlCXq-cm0tKUsCLycleUOYclH-Pu{6I>48`^n^
zGDn1`uq~4EjCdokew81L!Wqo^YW0Tpqqc*O(dPSz#jw@Iy(oHAQoq{<j2LHsI*}Vd
ziD+E+!6R&o6(3@*xS_q3gz729;C_io*X*^*ry*yJGu(hJyG<!)raev!!S!`;m&zad
z5UU4c&N7pGP53aMl`qC&x`~vXw;MaxUX#aBU!XOWM7-R!>9=9&vYwF#Z}*s&z+s4I
zNB{~!Y#<+so-bWo^{*0hx@h6m0h+kP18TKTBHgv+vAU$@aDoH4+A^PixtCtp7DGc<
z02<OvNj1eIQ?50T`cjEam_IjtGtkefJO(09`)%Wr=oy{~->QF?KeY%e8>4B1>@6X+
zicZJdQ&of`Km}AWN)FiSe->1zGzpWR_LwYa5~q6Pen~5_pMFx#66<rZPoNDDNxm3d
zcIv#Cwzm6`hFG90nTX;3R?hqs;}g@Ofm3^lEkO@Dw>@r+Qbq-LrO`g7C`i2&xbDEe
z$0Ro3+L~k>?yGEoLy7gP()06Q%ZqL9dK3iHU|3PWY`!w}wT;LW&$P0lbn<+7nt?3>
z^zKCu0)H*HmeDi0c$C6Pfm}J`4e~$O<y^k!y9MtslL#`-ZH$Y4ND&tp{7pl8wQP@{
zDHd~8<n-cLlveZg4ETc2toQxm3d964q$Rjj6jP}hyJl(vM#~HB8x4(I0JY*rFvs?-
zj8(?N@!lT~D)Y@tD=WUSVC~wWQVNKXPEfqY*X>bNuYj+Xn4{mC0X@EX6|SRRQS_3M
zggn=Kn?#v=`$zeQf;LacSWu@qsVe~G?4@@L6RjC<y!jjDRS_yT<M<}avobadf&RC8
zaiQ;VTYlN`)4?-U&^+M8c@s&gL@i6oVo+j&SpTgl0Cg!Io*zaNrQ?&F#F;6Lv@4O3
z0N*rgi!m*P`B~6c+9Se1dCPp}&2A2BuUly?Qt5RaU%`W;-DIvL#YZBOl5<k49J0Y=
zO8sAnna7e;glrNB=q<82&@&$YjBl$?sR%bQgT8>0%r#SOnifTvpa9sv5*u6);FO!b
z208pnDEDK&HABKQfP~Pb6DW}{K1t6TdCR;$_b`a-GLeIe7#dVJ@@@L#x1K(ohJF@i
zZaxNCH+dm#B?QLpW)8U0+pSDCR&v<_+G$r*Gk%*rBtJ1<lu#Ul_~j1I4z43|f_9Ky
zgTfT+L`-3H>Ys{pZzhZ_w&eftU&4=>Jji<fQqfmJxn<7}y}GzPe==}7ar#;Vf~MV;
zp=Eyb@RPD((Oa`@mw_RnPd6DZfsu@44=h4izwQ?-H0lL$viD%#(=v~k+@_xN5TYG_
z^1YQqLCwM#)OFjNlo@0@qwP$8lk)O#vR*H&%$zLJM6n&F*{A40(|u*4>9N#!Y%v($
z5=WS3*M9hI-7MND79JPK_c1|5<Z>~cs;c+q`EmT9Zf-2R5f}aE_m_|`)j!P3m15K*
z^@W4m0qF@hdtF!DNsVJ|CUe6tsl+Xj-F9<DeFxNCk8DInDmj`{N;asNgQ*l}*-m3=
z2a)9t;y9mg;TZ&VX}fXrHEXeHf31!g+1@?(wm1MIH!cTtrm`Vg6H!2(l!dlK`Cx6e
zvS2NRsrIW_U0jJ>^Du=ku<6=?k0GCApANEVSjLp<ElYP<By>BcsyxxSy(UpttRO<!
z!tkla3HpR9`xPfxd%`zxem>QAy$z63URS=#xY3L~poo(oqw0#{_Y1<b=F}4p#O@y4
zt-^R^7F0-9Hb*y5ri0@=$M}Hyip1%KR8OTog;R#z$Im=%TisG^6Uw4;w**^H!yQIN
z??mo3QT$Q}a{TXZN`|yHnrs4g!$vKYLMG6tIqKzcl4|JJ!>A<FL3i=`nqz??g!&4$
z_H`~O|3Tiz3#@gK(_dv^TZwy|cR@Pd9()R9gBNMg+G4bZ5p0j2l7CD#&?ReXQt^iB
znAS_!xNyRK21k7c<Lz@V8e8p`Y{xF*0_WY7s;qw0_KE)@a`9S_sNs91yc#=2Y<|>m
zV}e8jh+Q%5sHSr`0UZ=M9rN7jqZG|vA=K4w)sSFQd(1as)tBU!?14F<iSu2~1Or7U
zoH2wKWsdteYiyj0@pA)X2Tz=P#W<Qz8X89fw20MgRf8x8x|8w$NFAWQ5!B1G7)+F@
zX)z;{_cE3IQt_zhb?&H&nq~eCYfsVwr&(HrxOm2zjlN01@>9MSu$TG%G)fGGXsTb+
zK;BIA5rOxjR1H^B_`JwhN3o`1TDIQN0~U^vcF;u5IHD@mX$93)QHgknwQ=iFYyH9G
zJ2eT{I5(>6q!zO|Td80fJK4sXjH=Lnx9;qJgizTQ%-LY0n2l4wK`-GQ?^kTN$ax#%
z|6oFH)rO06auj+jH94TI9YS!(f7Kv}`A2t=j(UG`>0n+$=0}<qT@!9&N0QZs4vQ0B
zyth(rY~G0t3v??CRdVj;1mnnpo9NP8L?fKFw(07G_uJx9Z0!du4}aO!U@|hg)jxBQ
zC-!aF2Ew`ZNYM^4GW{PFo~)T%&+$IbQc@#u@}j=9oQp8;9R<s*#(*5<TXrlkz^_ig
z@@*OkZl=+vI68nWEMHXUGSxHRG;;Og+P3|u(8J1mo`6i8BRcZ8iMjm0a)(SWX5>E4
zicekLG9$qHM{jd7XOu?*xaMhD)_Be>G!=x_Q5eCsF&*}XJ@|OZJe|2p(<b*caOXS}
zHw??1jPMj9&L@C_h4P@=enTX}Db@m1byH!c85vzKHt-Dul?Qw920TcInq8v{buyav
ze!V)~k_)E&q2FhTivMl*0S7+*?Pdd8<Q%QFesMTuYg5Z7Lsv7}^qb+Rz+bzt+X{9`
zys?nsB7KWyEQk~b*FY?XWe!$0t7=_Q1IffhwSP!r%0h@ptZh3{{g@gCn?rg)bpTK-
zWY2&dSNk2SDo`w9B?FrEq|YfADw@o1o+XKdJfiiegayKT#;w+4$&RxHFhinRjP->)
zWa>E95_m`wK5swvm+>AHL3xqvX8&O{EJ8o%K@c0hK^4)OgDbg3tanX{XvcteR)W3o
z>xL}L)lbLr8~n#;e4j{g^IZDjk^&I>x}YfMI=6#NHZpT8k)_F<cl~6Ctht7In-RUP
z@pYET{iTHLP0D_pN6&KfH%hn6b&l)%QTG%0{h$2zjp8+O<K$mp+kj~Dpe*z#iHI$x
z39^bpL>5BZi3W6jodJ^;pP5Y@la4d9R1TCbP(#uo>py@Uh+Zzg)L6Cn*c^5KN`(83
z_uA=_E}xu3lu$FH7_;nwLETh&8elV}Rg~p^(bPQPt_!WucA7*Uob#tu(G|+7?5k1P
zRK2b$AsTG@<1?%zqWQ2qpk%7z3nWD$w;kmu?{`=Y?Z7WRW*_#xl3(5~4L0+xcKhZo
zV3k#}Og_cEY*uolLa4GnALWhETIC7W!R0EEo<Xy{&}GbZ1cv3p?~$5?CPdeu!4_-#
zD>(zxyI%QYDBF6|e4C8G<k2ITAXb(ot>!vR|H&r4;LV)~$L8IeNLZJ~ar|L7>uWZ0
z))>PEi{2ckr)GtkvBn0kTj4#Sr_CY;$E<uZZPSw@Mn6gTZQftRQO@7)+j!2mc#p}L
zn;2zRlbKgT|C9_Q7V>>iZY>f^+j63PcIB>lEM(hm)?IrbF|A&I>=T;-1%_^OdZE}F
zUSzyWz0+$(<vEW@{pa*ok)=J^xBEbXrUg3vz4rHyD~XKpat_E4-9UVIi5sSHdd3e#
z2&0J*BXaee^IJ$&*ri@pOQrQ&`fTT(xuGM(Nb3p0&Rz82%~%h3VCKU>829=%qr)He
zN5V#<#U*#&2kd~p&yW1in=pDu(e8$rgGxZ)TmvYUdkX)YcpNWrz*uzuChi9#(`T#o
z|K$My52Z&)_w;o>h5vi5$wLXoio8FBPw>DKbP<O=$lEZX4e=Y~sqyv;8o2*+R9hxp
zoa^A#Tk#_KnV4t+qp%8PrTfV1nyYNP;mDWSFF*8~YR<N5lMLTj)DNe=f8)$-5T?Hd
z+o~e)(7ZaCCtAq#`~6n)jZQkMT<fb`eerAUf?S$e<8Ljsve~Orq=-ph6IIa+a4}7w
zbz1#GT(X2(K_s{FwFd<qr4crmxfr5hTBQyvknXt}tQ;Q-!h3MtEF#RG3f@N_4K;-c
zkX_>mqCDwNG>&<=vvK;g>rzthVEs2AOn?_T*#4R{ar<j=_crAUzg#Te!xK#9j%6Eh
z_<;A)<w(k7H2lWEhp5_YTt7_dp6~I}UhlllJgM=@0P|Xt7)gZTy7tQX9;_hKQ-3db
zQNI2;gMt`?Oh%8KH09UsO9p?Z*ghM#nX;lC;YIs~M}i&fHQRtqRzryyzx-;9l>cp}
zg3SAmxNePJ*HJ&L1DCl04>{0MdKLJPp<sIDEb&0^?a;GcaL3LjOq#(H9Oh#MVA1`~
z{~1bMq!pD(cKYA-a1N5=gWfZ)3pEO{(oS?aLL&Qlz(3*h1YvVH2Jld8Kb831sWR1s
zhM?f=<)@pw&kgr_MyK=MKDUtw4av$j%-S9v4I{f3_uWDAkkdLpky4-vz@cKqd4a>h
z$Xg(Vm+(OiIfNdGCPcm*jWNG48Tuj<7a6jr?1TDPSrY#tjf}JpJ7FIoPPN~kQKzrf
zJHJ{zJ&)e~eD@<`=d-7$s`%e2%bk(=dA0}zF85xc&^ZRx;kq%gKjkF_nb3)cTSA~&
z=_R$RE)eG=Be_Ny&GQLBPxUWf1bz)(jIB>>?3{}wTMVMNObh}+!RbyI$yG6C<S^4j
zM%c49u;i-(-~zz<rh5+C>GH;Qz+K3+Z_Ko6K20coRm%2hi7P^(%`I>R5K7L?r>2uA
z4Gt}IQ%wgwC=XM^HI%!zMV_P_g%TN!A4(mUJ>AU%pikpWC8O(Mc$#dktHx|NnB#0x
zH7D5>PBfdrHI^C2=IYJ0NM*0P^bW+r=Nqh0Z`QbmS@HWuUXQj=7tZmi{22yog7j&T
zSnYz_e28K<GJ8I4Ala*moJc>#j<Ml<TxFh3x0lA};r%P>G(pwk!%%e?o!RLBSS$>1
z7&CvoVIeq6vBkbb#MJ4P((}gvwjfRW$HBn*^B85@PXt-@I4B2^@$WP_rBY3@QmyR!
zBrVm92%{mwAITgV6K|q(HE0Z^eAo@LZ2!9VMc~@*+yHa4qS)2yLuGuj)}GsPfY~=8
zGi6Wpt9!<>{Uiy|e)WD0%2LYUk~w0+_n1ACPnV8;--U!aJ-5dz+-<h4K9#T111-D!
zO6j#42x<MPt!k<}qs^iNm-4PRW{pV|LwC(cdq-nnw$FZ}#w&m`XFvMN$v(!sR);mf
zTF8t*dPCjVK06EZ?c^|RVj*+s93)rB-InIYla%sLJ<hLWGP03knXF_}y|A1VaqKdC
zl4!WxqG>eIpDx6h|1FqEu<#`lEuF$u0gi7twV)c?oP|XA3uoX&i_6CJ&_VZ<%DFF@
zlt?hs21+(yW7e$w0FH<LY@hM5kosw#S2{QEQtq=I_~&1J=V7v25r`W$@)#2+_SfUe
zw#FW4nmGdv^?1HzlCGFpZt^J0eB<I7Mx0i;a(N|g)&ICQb`_vcMxC0iyVWF!1HxYf
z)SJ0HdycXZ+o$rGi-v<QfenSVMV9rJ)fxxom)^JuGS!5`)FW~fTFcwx;0#jW_Wbm6
zK;qaLk(}>H#ufsAl5@TD4LtKO6Ra3%N`+x8{M2Xl6P5npS-7pfY4Q_`pQiKJeBkoi
zc8ca5A#?*nJsYoj#p*HEtMI2D=_`vrti=D!Ckt}$x2AIXn@~?m*U&nc_7!5}PA^)6
z<56p%CwGG-n#+Os(-?xkI)b}qLZ$mv=0nj0ypFXuPI}#Ac)d77`n}ASFCg1A9s&D+
zxebP*YID*Io54NvmLh%@;ww<a<sb7bq8Z7RSiCo-Ba&>Zp`#J#D<e!VJ{%W@{ssGR
z^ecdU$B-v(N{M+TnbV&y)l_XS8ejm@O3AtXpX%kp%z_OF-aZw70Y^Xx$&tJpbk59Z
zP9DQdP|w{wK<mx{FyC%=Q4a}wzRm;?IQ@pxJV|~1c4#`U=DF}W)hpcPOEM8JXB->j
zIsZS0ylhHokGVe#FtwUiDbb19qNc&%$RuyN|B;qUHNp%Xxs&LlKhO_FPO^%E>EFKe
za_qPrS0;iT^fRMz4r{wB+(Grb#%rQd)lU`ke11UhAP`oOgrzKD)VE{Rrzjanz*_d2
zVXV!8HDa{QQV3~kxzNzMAaq2pmK+b)MoamRQWjqg{Ro(~*9sX5q?#%$N?z1yjG^4a
z;e&)C;W9w|LFrHFrBPeLa=9K}Xf~RNx^Zq7(DSroxS=z*>BZz%axnx{Dc%<O^GWM+
zQDRO$s^d=@^%i%6A3Y}onni@x(Nqx78v6e5Bz2^2CDYU|l_K+g(YZM%ERutF;6{``
zMpf5`r&#`rJQ@R?^+xG-{2{(V!g}50OO{Z?zQ+ELKL~;Co$POBdSV7zLLOp<$(>><
zAFo^8V{^-ip6{(ubQ}nT$_qL#(vW@>OB^myA;J|z*SCB{D{=y(d!^`(XJfeEKcr84
zo<3fISZ9VD%@Unu?_GAS*K!rrLG&et^@@g5Jx9o`E%RBru-hMN^!YF79OHhe5adtx
zzN?P+OJoHs^PTVC`;N3@k@7IQv-iR<T6qeh_+_^6Bb{|Yh$Fcog-yf4#71L*rnKdD
zG_|%IJ4uIdF+H#WhCwbc?s&nB*LhAt&!jkjv5wUM?OsZ23PefnY*~@nAQtV7D`Zu<
zm^`dJogNk+yL;d8Dz_G(Y7rHX9F7F1VRJ^%Zht6n2&-cAR)f^Q8s7DEg#C9$H2EFC
z4kB*1GL`%+-1>DU_$QdJPOHAihkQE%MiT9?1E3g9-0t@eyY2)8**~@Ok*`;~3RgmV
zw1FB7=~nCF*-A+otCN7$RD{#D@JCYo_A|yT#jYSrmq;cHVv2b@MB~WuZj;R*aX*#}
z^??BAJO=f|Lo4Dp`|Swq&jQi_-oPrLd1DPIIkyBq#N(W@^Tx~dp$UA-VG<yOPzik^
z9{y%cF||qm-upZ&S2PPUn|r9QDOTJo&y~2K-$9NX1dB;8(V1-~{FulR<H|Zy=#aQi
zsvTQQ5MH7>#Mdt567YEa+3=11%)L@uq03TY45hbLL9R9h{GiOIsxdnpECvoVitj?$
zdNA-}o*IPtRsBS8bGBpHauB0#5~{_XO#@#J!M-X<zlH-aCVv$s@76qtO}E1-Esy({
z+k7C#txDiqZ*x{+Kz}refu;OcMj|Dgn5<n3n|AQ>eHM7!ZVZ+{2Jh;G0veexVj<)g
z>z-uNd2K>nD))6E|68w%Qn3UD5z{zRv;=ADd5DxhK7$HI;TQpHo2>0I_5hY_xZ5U9
z)BxdKTNmLeV&B|_^ar%w$3<j{`fM!4g?-_Pen8MY->lem-uGzbj3Z37BT2QG>$h>C
z+<>I&F*E1w%G)}tyz2!0Jagi9G4Gp7$PLaNuYL!k?Xp3-2C-W6SD7Ci5%*<g`uvhI
z*eX2@?xQxknvW82et}6yi9<q~--G~tTTXT<w%enWlrk3hIDLFIO+MtS&~?K<e?dEP
zAnaPXnMq3_%lTG-m1-n!*07_u6qR=*{vmn@|N1dX_(L;1h1k+SG6s!Mn@Kk|Oue>?
z2cdo~ddn8*x<%15F+ACR`-R&H0VVO0B74rv0`#Vr=Oz(b)CP@_@&p@HyuWF96{Yhy
zN5>|cG}_5$C0v##vqZdMrDK8U^2CV{)?;xXm1+u7lCz408wfn<;zl)tJ)!*db)70E
zEElU;pvTQlh;hXAxKBkti4PU}HT-6p))b33J9KBWJ|$9UoPsk2+<6UO-?OT?h<O;-
z`b}#Q_dd~B2=3*b?p2B1N$ITiORY5=zNzDw+1s-@T>)zY@Vu#CV*gU}Uvd~pcuxG4
z!GtwhT1>0hbn_Xt=u&q9)B4Fq9m>0v@@mY}eQ;|~$np~)*N`pDD=TYjSUYt#!<bLU
z5mg%Pb!KE%<vY9-(WqtSAwt+=+O9!*SRD9I5ocTqZaG(HJpp35;-1GkGCJ#c=@)rj
z4&Hw1Sj&hj@@-wPd%^XYMk+laGSqI-aNFo2YK6kUrT$(+{dKV^`4f&IO>#n|gmWsS
zk)+Z!RsUr7U!TQS<RvRZr-z!gHqM1kbA>(-9dZIyIhlU+M%Jr?GhHXG4FYbEJ<nCx
zvCHQ2{uG{0P$pPs((#dfT5+8@or%tKFT+UYuC0C3tNl)vA@N9HmQ2UOAz`%4p4_U}
z^U_r(xeR_QE1Gli^I-P!9JFxxgH&qnW(S;)E`$DgIn;0iE6=iiUTHz5gZ~{?|6L0{
z4qC;H@B3`KTb}>hjzWX{4LlV7|D%WIV<G!_m;>K}k^|=V$Fo1Pfsgg1N9f(3#UEIp
zqwzK+KHH>S0S9xcsK-rHA`I-Rm9qU7r}|gd;4JYlF27|(cPgJU<8UcXUOWp$TfxjV
zQ19=`6}kCR%7yDdEz87Z8+hlsaCapkSHH6Ss07=9UBWQk?zd&A41rQB0d8~p`->`L
zf=BA&*VdmhX@i;em@D=9;Ah}wTBY!UnBKp!$q&-HEHgTrbwu%j?}zsRMvpBj{q}C{
zyHFUhr$zg+wv$fbq4$4ZIX7lxKl0WXAPQu_sP?gGdj{iMKUAi&8PJQ#FRKp_!7d1^
zo;*$UXkHTOg<SB$&A@efMjHS386@ImA1uP`ZE9d}W>c_(0;@M1Tjx)cw)JhD9Rg!l
zxrKTVX=XfKK4Ls#_sD+DERCS|QeHh_dbI<A#K{DQpn6tIDt#(bscIfY$5lUjrT9t5
zNvsoubI{_&t3O3o4xhJDUyRhuuuda(q)-{AKeQiDbwD*E@&t~SDXtIS5qNg*l$1xo
z=f&@VBp#MXD`)F(a<Ta1o{!DWFL+sR-yHz-td06|M17m}RptSxqzBP+Al$FcV0rF$
z`-h0-AEwLh-)GKkihxyCH>qUF43AX=V30DOFXnltPpKfZdHpAJDs$rW;tOF`#9|GR
zephSZc4Wo4g;_op)X*4W_eGOn%*N`*Zs04<7<kTNK(b;Z`8Ie4y{<2poiFqA*q=ZJ
z^)KERrSVCGF4Xp1(Ik8h+&AQx`Q~9{e)V@Tn*>UGi$q3V1p}k^qnW%c2zK2*EB#pG
ztw_XmPb2ok!0PMx>K}%nwap~j_zmuUD$gQD&$;a-r+%A%0WvxP>LiPufxVA8H<@r>
zGHP~RZA|C~k(doXp*tfqW2q0O|96`tt@_eo(#+}-oYRUb;&*OM+%L%|99}_3=nsL8
zo(yeBG(jbLpE#*`nii_oYu@>UtQmp-30hX2T)hVMzWmvfZJDVjma=#CEWTie0exy1
zhtxhh`o{(S{((KP7#V*8cj|afnIKH@NMj}?^M6<X3V&CFu~q!9dMRyn4;IY+^2VzG
zGhU+zSdaMvcC%kqg=yB4mhy<~%cjiDTziU)YTjs=4PPe$3B^Wvso(wJPiY^jo&6cY
z2Sth^+?HTJQ91@z#k+Hv_CVfsfDauW2N|bX$n42~ySCsbwZvz0VIMhOlIAt{iPg`u
z0T5>z@B96Sm-TnLRdVWjQ1j*xrXr4`DB8VtkbKMxX|iaCrL3{BW9fU`l-UpN-+_2S
zvdLL`%cU@2r%cCpuze`)@hHw2rH9Qd+8>)4r(N}iVNRXL0dC?ZVq?c;;orwnMHes^
z7_gYwwts%*G(iApzwu(W4ocpD<2loJgX=)Uu5Zhpc4d+-N0`fD;y=PUXzf31mAPjX
zLonGp0K;wmR3WT6+l+9&4wN~NXlTosUb-Jxa5jr9xR$j2e{HYW+s|JipPhh9D3KXR
z5Oy&ecy5^~y<d7y^K@K*)l25SdAwon1#5A!6Z#WJnv++bK&cWr7!tY;{2Eife`xbu
zHU{=+M`&!i9*}l#zB|kMp+q8{u1K5MX6?0~RRTzz@^`x9vC{hKCe;-5W!0?B4|@HG
zBj3n#*6&=|qQ8ADW}t@Y+OtT*D&)YV;e6Eo+x8U)Ge_G1V?)=%x>5k^c1wRu9^1B=
zA_2PvA?P%7zOKbfyU`M06Q7H~Znje%S;lx2sFFlB%GCp?yxu(g_~YP}p8sppX_GMV
z>mgP8Rm_x<tQyaet4KPPpE4`5;&*$hGs?x~`_g|mLj&(26a3wh#d$Z`cMUG|mtHgI
zC<L-x^yv}<sU;+T^n|m)F;~%WL0ivRb3y-C_9laKk|Q@ERx7uvv4+$Cq=g41?;J+F
zF>6#9r}fqS7Q)2v&+qsT5DFaoD9JyafHCbDxaNMQQhtTHCL%Y2;BuJv&YjmjSnv9%
zm(ai-H$<=cfF0dg*JrPUx6R>CeZNH?VFL%nUTQwayD#oTv$z&Caq=>5=*a^1b|1l(
zX;a|YYor6@ovCw*5<lzqi`glb_du*FT`AI$$uXxfjBpU8)$5u%bZj;psx{JMjpH!#
zAOje~`B$QX%?_~#<NcdMNux}nbzRzR90f1ZgQ#8=Q=!{P{Iy494yD4elzXk5%tjjg
zX@<}d72=#=D50)NAY#$d{=0dbl|q>A;w#EUu371=v0Ja_%m#Xk20j-bdq(#8SQk6N
zn_k}h$aFF3`JTkNFKx3~!4*ynhpj0n1!n0RI<5iQP(S&LjwW#~So(tK&u2plawxqw
zaka=y{s_eL0fg=}iPob;*)X7#2|;Nqe#M?Qs29mT@@9h42x8g);bM?zERhes=%{ws
zE7SI*sauYAH1?btY|!yc>pA;(FVD}y4NwSrf%o_YVuMU_M$jJa&<o`uV7SseTLQkq
zt{t8j_^lpBjJ@d-g)qTAg6*;NVZb2$Q^^8JqWwTNlO>7$4cg8ESCe+R8Ccy6B~l0z
z8Uu*|@0EgTR>H^IL)PF9Sikt?JEG~kFkdTc10ibL{Q=Qvq3B(}ti&DHd%~2=wFj2R
zzFiGB+5l#yq=88AqMCdDn$XDt=A4FaDY?;bvylOS-kUCc?(!}gu1#>{6Dl*NJpC})
zW^JphTy#&rbF*Zy9K=T#EVsjb51iI2UppvqpqS}{?)bdET)f|WYyff-Bg^^A;x0y@
z4X5k2d$*tgI`s)0OQ=Q?`LO2ES?U2f{M}M<@udmnF5hNEuhxJQkQlHhWlL?~3qN)t
zM*eVE(pX22*@Gl=NWyIyg2}&B2YXMd<_Nk9!FS0uu<49misVOokZ3}*by!VRbnNcZ
zqX{An8J}W791LpsZ9QFJFI4{U%_4*HCwOcM>Hr+7)b*m-NpaZBWx@3+*PDo!P!N+j
zqWYqLBSnMeD(bu{ks_80b~-T+eF5Kx9^?DdG%ADW8@(jU)6mcHoqte2k`Fxar0reE
zJ%kqo`B-qWrs>;OG*WPwvEEM?#Z)%FQzzx<;qXevjx1NF-P@i)*k!&KQ+TZ+DZVP{
zBG=`xdAmQcig|r98So^zIX04W2t80?*j&6dewc3YXg?-dC?0-8;v&E(lS@9nD)HnU
zo~_fOEsg8_DM#F$@Wu*B=QoL&Da01ORH-gPp5}gmromM9vg7>p3cP+lQO>WIA9s@~
z{$8DIT)>Sp5HHr8t;`q3mxn&K$=F+&(=Xj_lNACusg;W{ZWAQyzAiMAl&N_m2BU5)
z2cY!AE<7upjHKB!dX3d8M-!wO%*Lfs1bb$~K&A&7hMVm*?!3IqS4g4{1^d@HjuXw`
z5Z95y&aX7l<ssOmI3l_U*Er8Dg3E(<*_ov%K4tlA-$p)9ZRRbjG4<M_3R(YZvx#t#
zns*)Syt6DRXH8DwgUBtC?vMp@B=@n<68Bl2<O;f$z6_gxyYnbW<MX9dr9rBrdi!A9
z)2fk#-Gu$2MF4uDjZmrh($9=+aS?r|jK}cB2WhC)L5BO@1l}D>#7aiyvUHUz_QJpg
zS@&Gh-F{|~@cB=x;^^rF2O|}_-k1gLx4w(1jnNzfof=G4P{s_4oZETCKq}BEP-5bC
zfEvlPQ1fw)GuH$|;aS-jW3Lor&2VZ4a|XU_^B&%lsaW`J11fez_$fashWyy%W?vm{
znU=Z-|9jJ*a}MYjIbncW2hmVS*c#kM>GnXA9qn3{e3Hs><*{N<#4qEXZoFaD^Eo_I
zIvyWAJx0_MfegDhWkiR99Z^_0VPh1z392wg;0&CoQo^3YF{aaVxMfo{C7gn};_+j<
zCLeS|3zrX{FkY`&q1|02@&D?{2Q@(y967ZyZ6^5sg;x;_-0`1M{#vDDzaF3MX({v8
zU-5Xf2y<gHe(f~jG<A+)jwR9m?n5unNkKWWaTUw8t2{%zfFL?w2<~Hxp2xnzIdNGR
zHi_EXGOF0O<FeYSaHnvY%tNa;^pkGN8b%nlr_b#Sus#H+E5*3NEuNU$J05<1_4|Li
zHfqcNkFJgSnWWQmC&kBG_HO>0XBc0Wg}jbe&($8ZBwrJmhC@^dE0_Et!|5PQ-2iO-
zHpz5_9%B*qv_O$APxA3?g4>&lYSwvxhf2a;EUf>QU(!!F5A3&ub1z448rYPCwdY?o
zozEfn@5|(VdwPfTl-q6ow7i@(q>R;GVahnO;9E~C>oUye>`=n(RLN&XX_*y^c=E3e
z_taUDG9zsZ!QN#7X`m+Y5c}Gd#l=t7yf!;^@nLkJCVz4m=7>9EZms3&Obny^#V9p-
zhv?u`sUMhY#ee3a($zgB4yn8+eBRO1_J$;VPCOnr_AcW*%Yt>??SNwI)(7pz!lIsM
z!Iuq=y8S>_I9?$8)ltApBd;Zs)Spc@B<32Lgp;M>O=S*I&Qy1n6^N^J9WN+?VmJ(c
zpDb1uAXtH>qzJOtaFL&`ryKY#HfNmbuZ$WQ4%X^zisXWk!?_?N;W@#cRm$~m!LGKR
zI0+)E2WO#g7U)6^6D$<1)(qO&mi>&p5P4uoV5I?dZ1J8c_!B@!_86*}^W*jUcYOWf
z;s3Ur|9*gHSdB3z3OLaFZ`9!5k8yk)=Yd*=#-Ox+QTYGHBLbgGbdhvEe=y&G_~PWo
zKPYXz1U_O?-=agNi)U%C@xW@eua|THfK<Ql43;{&>r>3}r#jVF{6FmdRa}*8+x87h
zNJ~n0NF&|dAfa?g3_1oSp&;EUA~mF>yBnmt8w4q(QyKvQ-($>qJ<ok#%iqHHF1(AA
zAK+x1W1Q!)@7sUdHbN{3o}*b;w15KudYcGKOSoxTzioPB&Vh@2Ah@v0Z~v4t`kPVZ
z`1R#{@})Nz?xbYVPR2xTXev@29hl8CI`t`<K#KFhwPy!!GM71l9;Go|%#wvH@d3jE
ziRZo$auq8*^?F5OmXEEz<ojTj?sggdg--8q4f=Nm>8n1M$JdwJ^Or6EE(g`nTEQO9
zzW)Hoa+ecOkjAk2Ij%J2F*Qklo~bEawZ4|tio!`r<bnz{c)e7}=S$&D2}iPzR7e&K
zR=}JzOV$tLwwU!S&yUgx+?y#xJxnm?2#!Oy_;v-J+Fu_RH=FNfRKZUkE%fo7A6Q+(
zaj2<!RgKiHuLCRpSTrV{=ribBCF$@vV+M2RLpwjA`Xz>*m^X|Cfn)$;g;+AeD&r^)
zZH9FD5S<txbE)-M>;j=I4hNbotrTAbx-FOSfpt@~9BHD~dQ9{0Py!Pw_uE1&xcit0
zm<LQ^*$R%kK@?NcdSr$%{asbcNCVfF;w=Vb0LF*4259&3oT7V!eM=G(fF&23u8x7-
zAEm7#7Y+72l?lk{e`4=pj+xYgiy~V7!z_d~0Op3daQf^4I1S3Ixcm>FeE|p2@9K4g
znx<TAC2tK<y_#@$0IXjFm2LCxI?+(v1?Gj9e^fP=3L+H*FYKV_hHKr{&r9$W5_f<-
zSo2Tk4+V0IHGu+vek+ayNji@5_9h8*H9Ysrd;G94`XRC*3n#gL1{l^#9f#l1aWF@x
z!0IvS6+fu{QDdhp<4InBQ@`1!>cr2GROEGq`p+TP8xv9fJdNv-eS%iZxPwQ>@3!N;
z^AL0be8`FBQXXgfb<QoOY|g`iPa9y(2@G5=42YO6;~YH<4Rf>#{j52Evzgw!cmw(X
znKq>ttFluS7vA@o6vLuaETvU|{)+j8)2N>84wQM$+CcO0QOK+Em{fyrM|4vpEJmI#
zH7}6#`vd)OVnp5X=o9so7P|AEhRGoGQ9{^H+0<UVFrH?R)c$EISMi`0dcz3MD@UXX
zDSQs6@4xqM-2m&uB;OOseJPT|-<rhHZe5Rw89=^NO9RrCN9bp5NhrF7*5YBEd51vU
z=r-$>270is$*_tKbHxnkg2=z}E+)9r4LzOWvVQ5A8!IsFsqcS(S&v1hq3Pe_0aAkJ
z0J+p$wrXX!{S$wwo1=tSXv)t_NwUwA`^q!=yDl64eIyHiUxZLjZ7N&_+|WXS?#t++
z?vLsJe35C5V+a%SMX3bTyyPMzobuuZSUbK|%j!=L=n8D0iY_jbqvw|VBxSQYlIx)5
zxa|SsW}b5IJ7XXM*%?#~L9OzaUoGlSONn3LP?Ww(d!<9K`+ozN65yJrc|RDnR%iNX
ztz+c83otP-xskP=eX32}uYUA_Tu^-_<`h1-@^LJlsrGzdM><EWmU@{X!fzEc9pHAy
zsFs=+6V{wI<wZg@NW@0+gx(_Sopo0z9xwjaYR7#Wzt^!E{9!19@q@M$L=Hwi5XKl_
z?DxJTHs<jNQVzfik`u}E>la!Vcz*@;SOS?p?^H=`ro$v|cj+%B;X2*t4!F(XGcJkE
z6uCBvG=qJyq-w_2XOZz{c<fW1qpcA=i6IPma35LA+;a387OLDI{LHH$GqgP|y4YzO
zi>LBrWfMC4#>oZTeqosC12L)wZL6S|gM%Im4-Cj4T#Fa$F#j=U{H%Ry>xtAXLP5Gf
z@NW1II(#=@qCfLPAWa`1rWBEabepTBr_~?F4RN2<P_*-LC<W$pjW3aU^%-*Ojze=l
z9@Bq0qL0D(o^+NHo6k2z^-hbgqp#27|4MIxB!O^hfm$Q0v7G1JAAk&($w!*;x{n*e
z0H5!*f?~b&(NQB8G;8WMnsGDndmie$VbfV@eyyT&M5~EFg$Q(mxGj<}Y|7NIYVyOR
znw234Rzr*2I?SmU1IfILuMIo`czmrLp58xi$b-*ND^7eb4}+s-C#jZRAN_b_)S%!G
zHYXQXKy*ig$2_f8f&p?n<9qY733gIzfJ><D_a)b}KkzT@{IK-Ya>Pt_l%$6|4^kq)
z)8Eyl`MGGqp96)L7dSO?g0f3s;XW&HT$rb)@HRC|%`b0U74g6ilR6IlIeTPG71FHz
zwSC!QgoJ|n{UJA1QbaI^O_6=u$aIYBR7h?|$z=_*mE)h!6F&Vx`*Rl?K)G*u$_e=~
z%PGMn(>7+AdI{k7yH`DtdEBb$LfmEsh~12rAi<{icM**g6o)*PT2dmyk{eBnd{dq^
zB9RL%q2l!6su7g;)_B&`t+N@;#|+8hi1T^QpAL}V6=<%6a%1VDQb5_~<m`W<+T0m7
zown}6=O1A-lJgoM+~uoc3wNEsXuTxDgG?x6$P0Dlc?jg9<_e^^96%Ub-Trb{r?d)t
zwOqhwGw!Wk+CtNt>dtIQLV_4_Z}*zVl=`oygr642?ko5GG|Mv&f`rILW$PJnT}nTg
z7fdZ54kNPQe-!Z8sk3aQsR<w_t+kjqog+b<j)~+k5_Yxe;>Wj(TO9{O<#wV;xq4zB
z?3LKj>fH?58>Akz+$RK&H)5S=u&R_&*UjwytlL`UK8XSIt7W4%h-2{o$T2a?aaCz}
zEQF12H522i%$w?_Rc}I6X}{F}vw0^US>YQR<LkV4SNa<%;BzBQ?E+-i36XDNGeioq
zVOZ!j85Q1{T*j@)S;Qm>v9il&-&wF7e$P`aR-1F8&xhAOB)8|!?CXJ{@jv_VKx{=b
zuv(qrgAZafEoQgDUKR)>LM~Y^rp#_XD$t1I-`CQ#I7v4&1u4raNi`$|L5+$pf`aJ^
zCdbWvK{6Eb;;nXZ7_<##@j0f?A5N8=o_tm6)A;l(WM|Dj80}C$C?8}ZvR&NgWfFIH
z1-Z9{6N}_TCfF#4;7(<CAJ5+P<JDh<p_7<rPzvvW(=A*%Dgz1<OZq%7iju77T+3YC
zb<y>BTh^x^NS{WFI)3M~Vi#WMq{YP+r4b(0jESa{h$N**(8i1F;pMd+MT7S(3y}IY
zh$PN^jpwT+)hSQ898p*z>c<Q^<xTIns;_*U=cV%pQI!tWIEERMlPf0MyLaJ-m7=?$
z2NYMLpvE(*=esy3E7yY(zD17Ysiyh#_ClrLs_4cya-)Aeqen6UkEPrvF0?Bhx2S;s
zu;mp;%^=<IqZ(NC5yr+qTsb@J+0tqhCXKiKFmeq?r1nR?k0;e1@rhA_;|@PrCqudE
zMvwh|i#{3AB}q)t6Ofot!dpz10N8+s(HY!FgPGi-L9FDC*#m5GByfM-%2`-o^;upZ
z+wuvAq(;Lx4hMCa=xKk}MdTeZnVcR0QLC^$tEEKH3b9lQ2Ft1!LGY6CM{ZaI==9_0
zyJF~1u&`q2jWT|qA*oR?C*yYexX}@Aryu!{JXR+ppW5b1gC5u1qZz!{C;6&d{+8a(
z@Vh5RX^Qf++4IE)$2!MF&BsVEJ`(GyFqYiEWEKuq#cv7Qgp;6d_T&mC7bZIQ0W(vV
zXmh9$4T`BwOT9$xMHxh<KCVZ#iwRx5{De=`+j?SnDj=)1pFBsHj$e3Pt6Pm|mYoc=
zX)_#bPW%JRU0@(bZ8u)Kpe7|vDD3WOuAj&T8aKSvq7Vv<&S|=F!%ynL6m!FsBO%av
z*NApTN_;8nMM1}5@M`9oLiI<l6_x8p25h#Lw<YYHnnF*UP?gu4m}e6T;=!@1Q~idy
zad&4<d`=}D*fpvdUryKbP!*VQe(9^)B!Gm}J!gK9W!@clalw42#n^)>8NY3-{~%=B
zg%AL<MZ)&ir&!EUvmQ?`mKHLDpc0-a3RB<7V~{Y#ug<i4lBJ%^u3@jb+|KSl4bK+q
zF3Pi;M2%21$&;p(Q!MY7l+X@PGyu2C(Vk}#%Nn|z!%|BcCh9FR@{XklJpSnvD45ef
zm{?IGeTJEy5T*=JpbrGnL^OO#N#~RJDXf7RNDYxEl>V|IseZN2v=*Y8QCdf^5&G_K
zQ1m%9Q+(ei#r>B?Z<Lhtc2X6Ss^wbhR9?~#>x6E@bD_{HL^cv{Z{R(+LWt!tQoQHn
zw|>w*Y+!qD+*gYGSOQM~_|`EP&%xP1wW#^wa_ejzmnf1Dzfmkw7fx*&_3Rq))79tt
zLHCl9IMaYNA}?{5TtE}0U3d^@NGrLBz$(vIRgsOH(XW7G50w#}S5hSyB=zkg53w%|
zbJH3VZ1WG=Si2j25v%=FB;?~`TDf|p%&XpE(#DSU>6QE9?d5@udXy2pqsrI7x4KN+
zYE_$IO%(X7(*`jKV0XicP@O81<Vp8r_R-{C={INcBSF_@?|t97n=zcX7qdhcZ{Xui
zoYbSR3aS}J1agR34WT*2{AZ<12-t~Ql_Hmuql8sYoe7Y&J8ip(=|>!J^k1&$)TR_R
zD!$vFMSFgl9pHWAikrR5g@|RXv)y;bT>6$5y!T&^>?c{dN6y$T>CWxZABp9Zm;4BG
zqAo%Ap%Jsbt+6AjPoP{F?62NY_!HZA@I=q%&RdqvoAMvM4!Ge%AI0$F_qA&ECUbo<
zxZoB2Btk#-f!*|NUf-VQ&2`QGMm9N_RuZ_+{P8tH_9<=TVEhGVN!y;n$IQ06TM#Ck
z^$b_4Jdk6RuGm3EJ1-j3z{3xSg3;vtwZPjR_)9ixzjwj+*+u$41F0=GTnF_Z&lmO)
z|F70Mj_?3pKaOvfCjV9WmMRM-&uy1;{eM1p{~1;5D1bUz|2n}d@Sk7#A8WrYHiFGv
zYR{O(e?-E62iiAqdG(Fj_T&F@`wJtdpE_U*#{E|p-Uuz2h)4K86EFNjEd4WIPy}wn
zCt~4cvH$OX_Wzexmdn{BatGx1h}ry`DUr2>cXCs{l{U!+|G*zf(WIQJe9EI#_SXJ)
ztYbvv@|Ebg9Bnw&gnw@S;1=C#9vHP9^(<QaS9c%}{POasZ9N7!?f-;1_`<&`aVOUB
z&+X(tZyk<c_#13S+vL^1SN7j;{|<lK9raB7|Ml1M^<ImEwj>BVSpXcx+|phjH}6ng
zz6WRZ9zcZU{SLVwF@2b3JOn`j6%TN2?G_>vSp|3Qr&V22_+8{u=X>D_KB&RCXyFp?
zWzKvPps6?bCyeh;CS`F#!RbZx?!ff#@Yt<`=^sP2m342w<M(SLu?aiZV0R%3Zynsf
z{MPZHGjq4a>Hire*0pK#lS(&;o%#&FD^Kd-3hibEcZ1-94S_i;3CQ6Xj5{~h^gZRn
zNw_5Pb{UvSs?{_>!B)YoF;EKk6@`XRLCJ0%`X7H_#`_t7g#GI88aOBK`-5!LP(YPc
zs4cYbf6Q1q+m@fN8qZt1+ZGJ;sg?WVyFtD-DKJ`L`uAqSzZ>8`_yF31O)B~C6<yLB
z&0k4?R<*ut+j|iZM%x1{=xgo*;8jci5DZYi!aY834>?GSy%MX@IfbN>jT(roq{RAn
z@ZNtG^ZG3Er4QXASeJYPTN-9B@JjJx{d^8A<b3HXgO+&@y@3(33%PL;--8lO2I8nI
zT^j&?&2S8t4U!6IDLF|6p!#-A<5)D&G4r`5UR}EhU+yfOC_`N<Uf1E#D=@6x&NuS4
zs#2uxfT5&h!hoXv;j)qmO!VGcbs)=Ok`+#q&IX<~083b7@i=%v1SxsJm}yVm@xet1
z_|N(7!4;NJQ#V0L0MoYVz~3(q7fc?7cXuHOsy&Ni6aEiwmp!I1Ob<AY!}kPp=3C`r
zGe;(IsDbXCT-B5v*ZoDI<eb><ORwH^)j#Mxx*NW|c#1`$j#xTJoRsx`vrh|<s7Ng2
z9Y*!q&j`2pQ^)oLQK??Fh9E!%B9mhj*NSD%Uvv)7R+@IW0C_wN9va;Yw|+~a%@Bdd
zR0@|_XF%uD?6TW83_OsGVEBaG<_-9AU!2;S|Lx2dY`EG!a|$%9H9^WoHu?{gq5|n)
z-E%ZN&G3lftoWsGN&hQfqHt>PwmBLep$DI3DGM~Pe0YYYl{M`Tx$6GW6|A%W!7|P`
z5TNj_j9uV}Oj~up4X$?KuWr7A-+l>kQl3uHJAHQ~ln1O>K9C>~rd0moZX7t`X%L^>
zqw|t%hSI}J6Cr@OoV|{{Nco^IiGg{P$q_Eak)oS@4PqV4rBvCRsRE_lK^g!`1J>sV
zxF(m-4MNT;jOb52k3oDN0bCfALOq6>pZJ_cn__i<E6HE__u+R(i(?JY>%+hTFdQ7v
zxZ%VFS=iA_G;7b<B8_2+C)5&Rufcw8e|!zc?<Dvn<JgDE=Vrtd8x%hVIiUmX+V1Dq
zwR<Ns6|f4_)p#3U77A~IBa0Ioihk4Sf`{Y!075)|^Q~O1E`tOH2*5+IRdK-<Y}ThJ
zSIr(U6VC6zzN&s@f$<jPj+JfQEKc|pL@N@7+szd0AzE(1bHm})nMBD3)}O23!R=_P
z4Xj1fm()N5+g1^_9!s^-05+V97swCS1Csk<oiH<1-ilR#+16FW96S4+r|qS~X?^7N
zS$dKtFtD@2EsT)qJY^AQo(`T$Xx)?o{}fCQUC?cNbT-5FT_2%d-Fp)&i9cWtE|=Wz
z^LYanS+kp3d|$H9z?ef~Ox_vRTp_MstuwIf1-KUG@lnoNn+f%io-1Z2IPATz;1zie
zUKI5eTy@+qe%8#Tn)94zCm`I=juKWGNnG0din!rrSJ)S&0-3w@(bo4M8N)y`&@-F8
z2#t%g#zdw@lnCa39^tX=_T^7{g-)4q&DVUaA3)^IL~+jR$crayVmauzc)O1tR(B51
zs(;>k(#?lDuQlHVJjsIW;J-w$cLlkt6>2hr=uf@k0q;w}(8g&Pj3!5}|8>&FfFK%;
zmhcGwcYe-E+c+m1Q6h$Q#+xr47x|pU%t<FXX_^H64c=B+cCdF}Qyk?Rq8B}($GV(G
zS=~+bH|PnuTX-mnjmit-gp`q+f7brCC+~p0!?aMujl4Z90-5Iq&?TQhMv30N;G$)M
z90Rna?Zy4VhtRx)(hjWQklW}wZphapuBPfIA!unfq^%&OqE@1|k7jzB@5z+utG}#9
zZK8)&vS}ik$KWlaH-lSTvW<}W!`^5Q+9sPwAlcCC4BXCgjB-yV#P=*+ulMyjQhk16
znoc%tN-t0NUDZaiW7yr}_Q?WdD7iqMy6Nt0guo#0!T{!b`CC#ki;1>#ft~KwJE?pX
zj*0GIZ=*wAxMxC)i14i$AlS4VQ%P!aBDudu@t|u&Q=n3@d?Wk~kBLTbB>Haxbs_1-
zq4gt^w69PJJI~T@+q~QI`&O*{0;tJjHlwbI@hu~mHOckj`fyB^g{u2xzm<HWOMI`k
zfMk(^A*N1b(YyCG@r2`|*HnWy%U^)Cr=x9@JE|J%!;4=1i|lb9pluigg_p=|kY0Yy
zUv_Tv>v)-dGPey90lDQ`L;@h<ZT-|DgCLCeO8t1`7SoE;NOHP&ds%z0qYO3C5iCm8
zLb7MrCOQDg#YZ@=cxJ8kR9Yiw7~uihB@>3^kp^rFHGn5Bl{`Ry>U^18F5NA)-y-W5
zQxE83l^MDYZ=<%&o_BTp+Pp`P{b!po>d|%h*DL)lOP?+u(m5lkt=ej?@L|Y?=kz@C
zR^;+a<Udv{<mJi0V5IFHUMlml+lltLGYi;_*ySOMwA4hEoan#i4v2;3Bno1?O=DYG
z1t7>#(=&3B2s)*UEXo<@ZKUXdkarlZ#huw^%p@L!h9sT|Cd<7sz#GifPn$^rnH^GL
zs7KZ@m+5`7qTU_!8QdiQDH7Iy2aJy5j}dMi@wlx^xcu13xU5^bWZs;p5x*t!w&<3_
zNV0yWNl(ekr67-Np+w5OL-}@jijnyj_|~G3VA4QlUd%hdq7}F<ja+xVBjM)c@t3kX
z|IF<-s;qF-HB2J8{n@)WTC}MuB05j`*vq;-jPYe=nVZnTOR>hE#1ql|*L_}*PgQ0T
zkfPCB{PP@CxlSE@xx?}!PU*!)neAq0PU&Ofxn;TO?fg7B4mjsi26_L~UiM7aI3zt_
zI_>T*Mx!54?<Fu=Naf8BpBSXVk;U7dN3#9bk?wOr%;)2Vh<!1pi)0}*;jKSKV{F})
z_qqLuDjJQ8-3aZK243Rp$oP!y3GQjPY<1e@dV9a`{(=0n)8oAcO0|>lFf!q|&<2)D
z#a^lVCz^~pH6OVV1rSK(g==SIhA9h6YhhYOW+!Y**apdmkf|PE+sZN$YT%Fl3lyb{
zTQ~Y(adr?vR7{@Z@cHAV0Zd{=o$)W|YnE^^S6#huAK{CA^(GiQzty+_9Ym3+%r$99
z=E8GcmijZ(+AxAEHLPgzm0e1(5XrymF^bPAo2$HFETvI(9!%zlg~v$ZC_FN@(z1w%
z9!f_Y1CJ>06|fUUw0IA{*-CT(!Dvq(22Mdp`|P-;EK<%m_yw|+>AUQ72Ak8aBdx4h
zu<iKR9tu`Xrj=iWc2Q2}{YEj1C$VC@1KHD%kP1?xH)n53JPK5;&Pk2l!mnmS^CC}~
zVy<GGF6XTKcAB$9+s;Ml&p=j8w`uTz)8ULH`whf7PG7j1bV;?+3bvKn$6ZTk9yCQ|
z#vDF#2ViYV>eReNWNaaPG<F5gRQk^7o%EpTabMM2dS&Xap;ovyFR4z?i?Yy=f9%Hd
z8$9w==lnxh>Y#}CP|yvd@@4VCI)l5O?VQ;t_|SpSl{!0CX@rG3uz*BT0w>@DwTKm6
z%M-d19ZKYj&Kk=WA2@B5sDV4>Lf+3pUbye}_u*dWZ5Degx8ttOAh|bK6`G|n?*>Y_
z|9BU$*ml#iX~kmAcbdCFK6F*H-#KLD{87+mF49)J(hNLd%C#pR6X|!>s1X;<W)G29
z1$PNjD22Tzv9J2nC_%Zv{>En;wT;n_9UH((jy!rG-P0Whk>WK$u}9jdd}^Lk>nrKq
zilM8VD=+M-YNcGC37dFmd-mTR5;AVx^%P#WMmT#<3F9<lp3+)>7Ud)N!d!ZqjWcC)
zA`qL%)cwJ1(#-F>%4l3eRszvEdoP8)hlIsA&puii;I+6_D#i#=5K-{%CVi0vVbb#~
z?roC^4sw&7J~mHzqXjAl9ESrHyVIyoV}^EC-P@WgU+gk=7frX*NzX|H|M~$Kkb-b#
zj*OD~{QX<Vp6*cxH#SiU8>ezBT4b+CCxug07s~A(k^6>)`F+G`d5Xy*nI)F6!`FJ_
zQL}!p+xr1DKA$F}E#szli|g9*=D*~rRo9eWb&ld^U~k6_X}EW4Yw(j7@P7IH@rH3y
zLy<E7ljzjS;Mj*iOg9Clgo)wZ-=E$&Y)&FN-&~4VIhngrkUpaDkzx&V$I7>u8qtuS
zefNg>Mef)8BFSisH8Nxzzt+z~M8Q0h%ok_Y;c@{8wy1WUD?@m;{K&A8SKAYr?R6QC
z7uToT<MJLCOK`UNIJ|6Vx_GSQo~~_>;oWn+2$Mdguv1!9VS*SO!s9Z1<JWr`F$<yL
zd)bc}biG2JMj&C1ma><OjcR!9(Pc{;tVW!wwHauWXH3ADM9A3K^n6x8hDp-RHtyr;
zOpvW))MmA$JL34MM@T*QH;9gHRghkQ^kP0g&s9c&e6om4^0^ufnty#T_P31mP$-^J
zl{%b7xT!l(344Wvf5w#EX)!4UqbUA?yl{x@(aZqs<B^{Dt_8kjLOMaF%LNYo`sBcR
z3d-H^JPiTYNd|<Tyz=Vsn<4T8Q)-FFgs(Y|SwI(!Yb%AhLr7fonZU?q!tee_hL6e^
z>yBkq+z~>K1O!ZB0zg_>U};l)ll;UvQ;EonJXiJVO3@H1+Szo1(r3g#on~D_Bc@7A
z@Yskwy}Pztb+vOtP-G<c@C8LeL_870t*}T@E%h$@i|9Cw`O?ClhEIX`f!bw5E2P|S
ziLXTzzTmvx8`+XHqAUv&Wk7(gBv28ETs{&+VM{1~(hi1|b5|Y^kx++>n6A4iA1@r7
zVziBw_wK@Xc_G#Ob#6_dH)b@C{S(hKH!y4HZez1NRmI1D(%%ihz~J2<`*)un2lajQ
zit5X(L|b4ogjvMzpVSNr=z2B=Hk0rZkswbUjWDK3)Xv0bNERU#${*mBh~*HJmGI@r
z5~>StJuQEm3vOkVM_naU!HFD#ZX)M=9xI^ZM(0IjXJ7{7c9r+}TQN?uo&>d}%o}zL
zH%d`5rNkm~O?eohdW4M6VxUBqu9zs-sq*VPwKtJ8A!k-|VIPZX!lI}kA}{HMvZ$1R
zBL7Ck3QE4mX>|~;?9M{ntGumndpuD6@Y~tLT=kXWRL1OOBJQFGj@Vw0QUzqb$Uk{_
zK1-g+K+aT^B)9BFX$K+_9kKFa-q&QA2=H_{S#2|%08^?T70I7CW6Z}$sFo@4%9(um
zT77P?vG5|Zhw`KEowi8e<8QJ=JZ2Z9k2Th}??W_HH+ls<zq4~<J249<Q2#zt$lUH>
zVL00gK*CrgqV9W@s2TcMc?B)}Q?U{PzXV3{DJ>dB?QnOKhIJ`hRAKtZdLN++=~OW{
zvSRUYQKjHu{+h9py*{Qyu+Q$md$FjCa&s86x)lDRR%p<y?53$eiQ?i>cweED=K|8!
z8Pv!n0+~GnkRf4GVvPGqYI(phqSie^SHz?(EM&%@S$)Ak4}q}>EtoM($E5NJovO5W
z^+vv%#to~DZB&|?i}S*yqX-v`k^7YImAi@Ks+q(^M>}nkR_i+Qz$djG*JD4M;`QNV
zR)vI89Hux~bHjdoBJ;kgMiybVG)Blp$}7}hHjAPu3zQ`OGYucnM2<x>n1_=b)s;XS
z=SO#bgrvpqrtJmd^%yoZ&&;fa#81rRJ#?!Y@wL^M;J-B4c3Ac@%iQ^acG)wD@U!HC
zxZB9!tYR_vbF!<!->pt;(~^kD3*l?jK(_nAvqWO*BdzYNQb`Av1G>U$4lGoB1A=TI
z22991;66~SN6a9~PM5!J>Y4Y7A-!PC8P~CWj;Q=2@ty3LP`+Q=DT)TKk-#Ytmh+E@
z>6?fW7PrR6UwPr$Sm<_d@s<{p4$Y0F*i@*nw{7(HAE|qtcHu^HiM+a8t>B;phqskb
zDf)AA-&79MJikjNBJ~VO7~7eWiMP%U%b(bp)++I?C(6|LOi%AfkAY?w@<OA=%E4OV
zpje-9EPBy<iFZxL>iL+HN~%AegcA22v4Qc6=%s{;qrHyV1ZN{U1a?D$sQDyzA}dJz
zHAbyb%Xm#cuQdy`X7{R$&Q7Dm#Pww|%5QJ5S(Oq-)M4sBOZ2vhfSn#>@Lw1TBhn6H
z=eI9pbx)=h?cdFR{9x*gIC$`%;DJ}sk2IP8@F|wZNeUyjp(427MCW~MD=fI-ca1ca
zc>W6>n9znBSmNB<R<&>P3~cCjx8URw*+aSt=fGI$|E{Eys+0#yVUwjg6Yl@L$+O1;
zi&`Qa|9|7g|6So`eWL?A-AYHpN*J7?l1HxMhhC{v({(8p-$c9-@1{eZmlO%AdM)F(
zaLJMTVKgNU*}@o&yeoa-5Uu;cDRX7}gOVs`tU}cYZ~$#s4Em^&ts|`}Qh8YlC}~aj
zbf)6OexsKN_#j_t9f_kp6TX=i-mF|#xMtQH;Mct~0);LNd;|M=BN&l~dw-=o`FQjZ
z_(MNPQ6Vl&wS#tq*=T1x^T&v_Z!XbFanG{Xy;q+!pJ(u&m722=sxaz1?4t#d1~hls
zD?;^J7wfpyqLPSC4p{Axzp`3&&t`s3=@Cl>zL^(w(_AogK5G_EE-ZH65`*qD6klcm
zU*f{K%!epSr(1L^amlmzI3b5KtIMd7$^GA;E<)E?nzQ4d^(Y>qQU@8W#Qd^GNO8?C
zu16;z$}}84<{fo=${E)*q>9pw)$oZBh*lSAB>RqBzt#4?pDmP_<M6F#dUS-}kvWNB
zf&#x_cxYyQfgIG(3iGdoX)F3jT;`bjfcwD!D~n3Q3p0mP;J4&ErrG{Fo5>oD5w=%N
zZGWX){WW^Um0Kk#Y+#jB;4N*QD%@SO{n&xl{Flm#DPTzg+T50v5*+KijXowG%;}jv
z0TG?mPAPVXXH3=t{Eow+9P|3-vKhUtpHcEF76PAf?#EHjKRIKrY}LQ-bShVN_$X#>
z1M>kaR>jt^3g!@*kqbP#^ZOshCx=l3?!fTA=|mg!8HPT0(kpAOJ^vvQ$EY{a5%_}U
zuQDZkTdV~g=F42bqG(@SAb@26<ako_=IOttaHOu~NDF@)*ku9MK6dxf4N7T!;~3Aj
z&-ggMV}I?V_Bjdk3I!_}mUbbtdPLD_Ab3x`nW8SL)xZ-VLSa)|_*!VZH<Q>#m2_!3
zjc9bcG#F3c<NJF>kCVkC?oTO<ajpd(xVi_+H{RgZ<>W4_wESbB(FTOqI2X{NVgDt2
z&8+7uRw<OC-$_h@ncSBUEBes!TdC~KFBmjh89$2pe)V6_H5h=dVX@!fj{l?VD2c@H
zlmqiDp2}lH&#%msk(Qdfne(o^tG8H3Vf~cc=5ll*Ze(Ao6e&Ft*O``Hkm+5lX^L6V
zP6`Q`9i*IWvW%vD-|Tx3nAnWIcZ8<nqZk!<g{T>IJA>nTBs8Cq?tbQ^w@aO)L3?bw
zbaCdxQAN}&dp!qR*sr-&R?o0=a9ykgUy}^Zj&oSG0q0BtIsv1tLDg?egZAzVJ1-W&
zhDer_Ma2f6P_N0Ryo7uJfa>-Hf90CCH)<=Rtp2R-2j7>{slG86h_!Oi=H^ZJ2ixyw
z-Aawslq#fy7RybphUsGLa2$>Ubi|AQeqBy~BqceR3qHgBDMv5IqCE@0O!jYDdHP$V
zomuygkWXD`9f}joA6^kbWZMN$s$x|P;S5%PisO3@U8qfC*<bUtZ-;6x!IBb=qw;YK
zYfX$-T$1zjH1I)Ob2-XastD5+Pe~HXJz__M0*CjlU_4h{2C&{daB<Rs!u{$zF=e3c
zT^)i4u1Cyl`6Bsrv5cdPPOSbjSDcN1ZU--AvTXfoLk*v<&(K9%sxny-c}DaFhW-Mp
z=xG~9|LG8A9!5;-@jC-s{lx5dQyQo@BVhKoj2VTsLY+S+@HlU>+`cF_@{uK#-_KUp
zWhC;WkAG$V+0=XQnMV|{<}ZU;Im0|Zc5N<>eg;Fb*RhL{BjmiCO<L+Mp-L9}v&E6z
zXq$a99Gd)A-J=;*TqC{wjHHaAHf+QY^B{C?>!vbFmVrFwgv6h<eDGEYwJ$9)bmB8M
z)jFjU+`PHipq2W%ProywyYo!O4DKyq)v}&At;aiDf4AI|4w@T8Ji;Q8D#iNa+NGLz
z$#L(MuzMM}WOS;s{k!;#zC5Bo3#tw`FB`t)<V5K8g>U7b`zJ8H)NNECk?haLyT=G)
zk6Y)44O|n>VKV;0G`*Ig!`D)4!O&e4lFKXK6;)_;?{&2KHTJrz2BZ1I7n-eq!?O3V
zhY%@V#e{S5;kb6sC^7!x`n^o;Fa-1BZE)jOn3(?oLT@Rn5Llz*oQyH(tu)w-7bOI0
zWQl7?QngBA9>CoyWWr~gxA^_k7>G+v@rH-mddE>M!K))%+-gBYz@EU*Ak60^4Pfcb
z(V<k2F=o`a6-$uN$1&JVEGL6+$&I~RRb4I)k`DM_T%+DNPSt+^tRJit;QlB2PMC#N
z)f_ll9#1!2It_o1cXW&2v?H&*yaEx%1x6V)ux~02pT0t9qbr^8FoOvfe(~mvEr{5>
zcg_wa;@J`S#=2m@(BQPVPsEZU911{tJ~Y{Qi2=bML-P+{i5{%9RF|<=s=`s9h*BE#
z<j9tBg2=!UPc0mY!GQIk!}B)1T#J5~^7mV}%D4G(i$V-oM*U+{!z`u57XH9hGL-|i
ziu!%75fQg&a2uQKjClnlt(|Si<E{nYabg7AS-ja1+52&^(3oUzBHcM7X6c|{X0&UD
zMD61-=|CuiZE2>djkV?RH3?ql1@5`6BKGAt%6*o@h))jZakWq3>5I+?t$h3J3H_+Z
z9Q_4`{BYr|!!B3k1!DxC8flWZ>-t$g1Z2LV&vAq_8`<S2X}`oqxd1P>Qg9bZb^<?m
zPS7kh6^q{5a6O~T*6@|PAes^{ld(EN%Vqe~_(*nKS#KCU)9Ps>ImCieB-%k=U;q2y
zExsO1>Ws%fI;BmwYkXbbkj{&jscqiEyo=EKH|Sq@Wvt<Dm;xLp_nR+up#P`>#NMBJ
z$21N8);~~N7*sAV)*XFrwcrWk^DOl?)va9UFernO(`=*8+{iW7vkj4URLCuz!?Uod
zq91)iMC(5WQ9V=CFLsp9K|iX#;V(TCuV;fqR{G${c8QCG&krMPk5?qSzrCE{TX$YQ
z9jl=WLhuIQkq-CTaEN=%@kbpNEsgI6lG7n95bk6SgL`BwRdQ9tFT1vhucj5x(9a{*
zTcDCCi;S}qcKU`~GBvTK(=6BpS+AYtT7i2)wwl3Y)W-<c>R=#B_nFRkpV27B8x|(Z
z`zqOsJJK2KM;x$kaDUzGe3=+ASuvCN_@?`s2BD!LS3I7Cuubfv6yYKJIWY5bVv!4!
zZM$(?eD+3tE))}z7#XaXqeZH!`4(WwyS{|b^<$ao#z-WKwEUU}2Tc<bff&ouRj03a
zhV>>-%i{f>>V<$ER3|1~jH!;YXS%}s<BU@W&LFBa_#5dlV!D$YVqc^pqa~v!3`gCa
z4v&RCPt=EA6<ed|A|#=X3zdrls`0&nl}X{okCF*L9+zmUH<Dn^$bDKHe*o2XG1=m$
zwS#aR;CN1@nhuK>TC1wbv5+yT3vF!1(@D)<99<j_vsF@{mb*_7(JXXbRP`wvrZ>q)
zkrCi4HH@0+4lWI<i}qx7Jtb0R<-q<{<H@(ojI%brF+9(MOn}4zNMLVyR#_65P=l>7
z<;alZ_uw-ky!%JWTkw1W-^kERM_u)xWaa!4bDNu552Y_T&Km8Y%5kvu`|D!*2PkJ$
zX5keZqA$>SUjEU>69@?v&K)D6H$xbb#%$~Nx4KVBSdGDfy;5&;!$`mS^}NK8b678*
zdae}p>m#$#$`XdJCWdOwHiQVz;>!{w{}I3^*>IWD)+}jN<h*l+w?gFcj2LL`Rx~K!
zRe6~bZn8q^BQkUVg>qTG&c>pmHvH&V&*x}x@(JXq%Mflwris4_Aa@5Dt0g?``9lbS
z*Hr@p*$=-bA{8*%yyd+8&&LD{5#)|vtO!M7^?Bg$nRsh{=6mJY7|daZ=;j1iYU-}J
zI^i+&p&j+_i7R*OKIkKM+GjC1N`pB?PP4fYwoDN085;0mRG@I-N|!5CUCIb%{HPzR
z^wKM8mIu$8Lp(`^;^~<%0!K`G*hCNFmVbO!fmc9&tI}?<MQq}Y1M*i@ZQrLuISs^H
zxofUJ`mo=+<fO?ee^hcOfVj`R!OQHCN+f3O3G>5LpB*^a==_N1!Qh-*^Dsh--ECx;
z`1ucOxaj)KaPpVk0>+qlu_&CkgW+lX)a2w=m)&dFY6jnRs)qY%E0kjD|Hd<#66`V~
zHvS)5i;mTQ*;+(8vN`)aP0D6wl-jm>ElIe{q*#TcHfoZF8<>VKV{tz*HAI$BxR^!9
zBQfiAZzlzwX^bn3z*2~o@_j~Pdyrz2Z4MWzOTy>N<|1=E^Ij{Req7#E{&B)20b7Dl
z<$09FG2)GuI?u=Y$t?xuQ(_H<75`pl_T21iBvB*N;WS>hGi{hp0g#ZuC1+3AwN5wg
zcv0D3O(%B^Qo$AF*!j|_liAo~teUR@e0KoAKd#!>%~(r6J>VJ?r-dKO_rM%Q^4?qA
z`~A%%sl@?)hBB;O;ibZFPoGx5^2kRq!r`!m`RyP0B{*a4ueWJmdH9`AG;e0_IQ@s4
zSOGzB&eDJJFrSWJco^}%>!*x)gm3D8`w^NW`8{6MlwRH=(v;rTOCS7Wwsy!R?Rbsu
z&)!S_T$JcxUje4mHB9>r9T((>@JIJ#bAe))L4QN-e^u<?ZO53pU3;^`e@Ys;L_LN>
zpP#b^KBa*gvT=B$oy4j}>+Sz=Ka+3aB+hYN{kPeFhdX$i$E^@Rfi6$6f6V<)d_rJ5
zob>Q5EN?6LUq3wn9}nZ+KB{d0A1LI468TNX#=sEnzm8dNdPKmS^y^-NKJ^b$I>>KG
zB?T9C2_<mg(`R{z)Z7GRon}UB*+0KEKx!_<aBctc;eSW#Nl{CK(Nto3(nJmXUH<`-
zTmWozF7aRHoBtPm8=3hX*H!~Chs@uBO0q9pj^FD}00>fVZ2PcI+%f46?@sW{pHbZe
zii6g<ACR8YB3CWe@7Dg_n>GQEqr0)={)o%x`lJeo0pVIN#rffCF{NQYP$C6e!PnFZ
zZw4eEG)^DJoc(6p$*89AcCnDLMRv1JHmLtLsZE3Ao9wGa;Q6dOJ$N1tL=`S5=;jld
zCrxO}cn<Uw7m)U%Td@s_9F9*eW?nkHn`fG@0G8I8H+QW8pql+%rdwmP$4<+lW74ls
z(zhNR_OMe6%~oK%=mzveA>dQ)Xz$KaI<P>$x-HxxF;~7Q5ExH$<bQu)I>tDqEe6X0
z?5h5`#Bu9+>Wf?^xgeImKp`y|T?OJWu`Y1FKSEk~@$>&=0TA4SKZG|1kPV$rJ&~t=
z0bO6l7H8%P2$RgKK#}oOd^$7(;vKONwzCXst?QMKLDqlV)gpL_D`HLG3W))hAuz>h
zdxX>PG#XOfM|AMP+}$pd{R6zrV@nM1Kj$t$QMbJYtPS;dKfu&jZ(T12z{_ail@7Jz
zE4O!Wt^7d#ue-e(a!al$fA2ME8MsVun}AB$0~ZzGMPw&4Umo~cfd}`=lNTzbUn>Qd
zU4n@q;AnvZP=8OeAY1uVF|Rk*Q*nMz%}h+awg}5d0Jxr)&<$WA@^R20fn7{=?Oumm
zEsL=oDTL^YhVb6beEgs2KEPVcgxi~zmw-#}T>7|-WdC=^U*Eou#>7w%Q-;=h0gN~6
z#wo=+v)O3wiXHY*rz7*;<@NKLh43HnZUZkxH?UH5;{abk)hN$Mh_lZI`Thd{ltd1}
zd+Mjwms@R+biv>KyZv|D30Nfarlm`)frhVJM!4Fw%bW2B)S;o1L#qP&neO$WaU_4i
zqG4K)=PXYZ8k&f=2ba6aaKg5MYUM=mI4p{TkimHNncsmwJVfES9|$VS=h06jyaif(
z1%9KBu7Ui<S=hKhA)a$CU^^=2!^;;zrp7`m-*QUFomF34UGW#SE4!>+6eu|B|KYNm
z&Ku+p5x-iX_c<_H!vOl1-o84e;s=V)+YZis$U>kgp!;pdpA{DXJ3VF-JhfvwxtUIB
z&)cH_DNm5wi@j|6?;;#95WCJ1^k}2W)+agk9?HKMWtq-R{SS<AMPlj&n6S-{va=2y
z_g6E(?j(6FeLeoRJ=e;-UFwZNGNVNXu>#2esBYU$A9~$+*MB!GHZ0^1Xo_ibc(n`!
zB<yNQZo914<lllxX4mH);8=N(MS(T&rk(+CtP;~d;~`sW_}P8}Bi~M#aMT4A=p!gg
z86PV8#Z}1jmW;M2%c)GdsJqI-N;`zup)*!+l>`*gppPX~84R<zEw;#$feefK3eF$*
zp#DRg2H_UqF_lB~uOUZ~--bY5oa#3X#AW}#_jX>kOeba>SvapcKz?GQ1Ld@g<-?#G
zSe)$Lx{mRGvqifVv&uj23u(dgMPVf)_S&)`#+24lz2M%z=_hyY9rs=%b#wtVTzIAL
zkpsV17pgw_PYvhS`gz_CzDa&ocJ8}6BGylo*ZC(-dw>jyte7wul5%&qBl%J;Coy7I
zd=XS4B)s%lCjc$xPyB$|U@x?c_8zn$Gw>|T9f1#uI~^tMXCc=diDMAJL8jQibZNji
zy9tLh{=kdJ@$edMF%ycM2pCnBEM-*NPeMU6gA&=?-`X$tWfGVKg%7V;N_VA-{8zuI
zx{xU_qFyqN#R_~cVq~^@MhSU`55Xr`l$mQ~Npaanzx*lau|F&4e!$1>5nn!M38EM^
zUdwSl`^;k%wd()N?Td=#d&Zl&O22$a$5~P(1J4P;zP!XNC8#9N;9CL7F@o`dfNx6p
zqG~DHRsg-CL6X|QuZXFD(^x8obR0@pOkAO$DMsqDFn!jTA^Vmc>BW)^5vFf4Ix8G`
zOR)Z)>L+6?PhDNs^y?VSof+}sE1mgx&V-G!iGBS94`Wu&se!;%t=;+Poy=<9gijra
z7qIoi0lzWr$Ea71N$x|8N`E#~dY^YAxz19tfKQG5VAKwdj*R>Mupn7jX2MENmcBrn
zi)&8y>fA=z=GvBB=l&+0W1X`_E3UDj(Ws>^EZ>9M0Hqo(jpITP`TYr2j#|@`ZD;eh
zNOEftge81Rb82D1+cPz!(l}C<W6nNjgFs_h?2#bXp8#iPO95%c*U%fX{=9^uJMMij
z4|JHEE&L&48Dl6VIiMs8I8_sGgA3!imJ9_mH#}zM5x78U<4XPg$gTOJh^5ze9nZKr
zu`<UpwI3>ei3CB!S(2pH^MTbx6iF44UR$UH(~TaP?($99LK=<iTbF594G8z|Gd$*t
zhoWwc$O&UH=?EdO^G)Y0U!OhFg=d=NMD$<dG5!(#5r8y}U^)6IcnM7*P^g<UP3sM4
z_$W<l4b7*#276UKL9!F@Agc_kR}LA6GB`_p&qhP#HrsVc#0z4f@1V1eP>$kK-Jb-s
zMrLxjP3bY7B1Km&zE%E|-6-$4kZeyv3SI(6#xjbM828Xpei$ls+BNtEH=SbBcr=VI
zC`oEuI1<-c*nDYue3R*tjKcd6Rg1%vw(#aqjaYQXk6p^Xj@%IkmeJ_0a*7I|bhYSn
zgJ=KC?DGyMsQ_0^xtL(q7}Ke1cJe=qcce4y)?7XcTq=o4ef)9n?7G*swTw>8T(Vg0
zzUwy%(J4>yK>}i6Zbw!NM3Xj|Uj3~}fjJbQ?X{(SbScN#4c~7R4|ngR8z*T@cJUT>
zfJ71*JrABbx&AsuA2^&!9{R82!{QIo>_pI>mHd$JAQ6DV<elBdlADKH9y4A%qqp#j
zDYgwejXuzyCmxxnWlJ%J_~FS!Bz{XzT&(4n&&!D_KKxbu_od%i!bNi#yYBC%JAXjh
z@wF>S^NY{RemBW;v3odGv#FCN-Ov+wKFsy}K+pAl_*Yi}#uys{IV0q(8yFi4PV*q$
z0D|K6RoHYks(tsJi0k)m+K?Fzm~1KHUPR<9vc3Z+qn_4tzt@SU8v~`(OF0FN-JYxr
zqq;3~Mc8M=&cEMuTEaud+DzUIJ>y3!JUvrFX>oe25<bUa-i=n9D?Jsyk;iHD7}wm2
z{`10x3+6;OGl~}hS~9Uyx=YyR6T?c1Iw@5APl8X|-f#sWac_<Z)MDKQRG=*V0Bpe=
z7xZVqDcF1z88v~`weiOxnm%Quu^S7pVHk4!pz`pTTU0;ct?Fj%_42w_MUy&|JaJD#
zV0s>)gC^;1YodtaD1it_D7*7k4N_<LCF%l9gt0FnF?`Ur>Mv?(&2b#m+vwY}7x_m4
z=;zuxpB@XtTb0OK?NePT($cm<dB@&NW=a379-x}B**1+hg3x1MOG7Vt6tkUr#6$oC
zSOu?`!hYk*i9bs7Rj%Y#(}OB%#QKKYKRYUjI((ii|J^SG@QmaaL7j(((qKCW*LXxr
zJZ7YL&SwaqQV;Q}9qWoBOp>I_z8a6g>7T4vp%s^AaTxJ<j&Wr8N5iSlIbTY{GT;SW
zdkvLbBi^PBj2HxE%KcmLtU)9(1g4fak^Lf?n7pv+atk(DpV&WYdUeu^O}Nq;KMko<
z+Dd<=ncu;%%ur}5xFofyGDH$%V{Q3zAMXF4`f+nqbt2x{Ca~a~5s^(E6HGPjYmI_K
z7|Trc|B2O93;J`-N3N==Bl8wfoD!xH&r>k9%jf>;>Ub+wZG}aaDtjlsJR#HqSBmS6
zYqJ>zDH>dRql$sJX7T1KcH$He6cAG)y2#^%Ni!HB?oSLgfNI&nnyCY@lPJ^s<1QUr
zD3&F9u_O6cIP34DY}uy?`8G!%F9i$4J|wg`7nIl9UDwi2uAp%ZL|l}paUZ&|u#dj_
z_fy&nd1RJ){gi;Sa+f>$sr2P#4J10#3&LBH%IM~mtlt!SD4%MxA8P7}y?w#X8TAjS
zKrr-S+-`KMl`BUj;umr6+(m5dxvD2s)Io0i&RrM9h*SKy1J`KmtJi{TsHdgtI>~yk
zt=}6|G&*%DNw-3KpB6%X)sR~>?s>yRES=W*tIIf(%Vk}sby2>HETN)>OFBkmHXphd
z2L#q*X2=$mv6Cr1te<T#vYNIiobQocpu)3yMGA-{-p8IE6bV$d7@4$Ak|f1OD{wXN
ziT?Rc8!pPsfGSF&-7jW|slKywgo2)phl)f4qorSEv>K6prbRccXY-!G*uFR)o`#((
zi6VhD)ES7xVK1u((;kkl;T%o8Ka@hlXiVmW#JsDO=7vpR&=hZUMtMB%&cccfdDTG5
zhY|B738?1`9}_>nT#p!6!R3C_1UA=CiPul8dzi>z*UEYg{zzYF%uZ;~v(9bMDTEff
zkjYb$T$JR7!ubY?`;+g?KRJ^2b>}^<Hf?*KV6uIq=XlWC^b1fxOo**$IVW*XnHgcE
z5!{9X5=Z$>s|#^6TbaVh1##TZZ@s<sgM$fhv6OjdN$uV|3PCbqURp{I)5Z~l8Npt9
zS$_*}#!yCeqvc%4*(m!;){1=Iy>=)j_lM?&R{W%fKaVtKT___krJVY5z8qA5?2(yk
zvJWH4LVROwx}_LHen?2X9(2P4AEz7-=CtPrSPoP%*awxD2)B<9+R=rCRAtlXT>|9d
zOe?Ldrlf@ZFKBNueGt~B<e0USL~@?s{(41C-_L-W6f@i}Pfuc$n&CJ03soh|pzy+=
z$z;VerK|jwc{eXBI7kBVG^Bc}s^E9uLn|J}U<e+{v-t9#at+AZdXF;DFWAhV>8xk*
zD!sc{r%5dKQea7uCGDo!=M7h(xe%VDj~VJ7a9Ymo2>Sxfw{FvZD=lJBl4Xz4ab{h7
z`<6nX%ao)^juBH0weR)5jmMA45G?E`ip@f;flf3(2Z`?~A$*rq;<9^kC102b3g^>g
z0tsBL%vC0fr6&TKy5BXh@M1H=hSNT5N8<C}KHa7Ip&+(cG4*a&;UtEN&Z*#w*+TYj
z`UD3xD(1tpV9WJy*SnCxWRH@KZ%Rfs9(N&lI+RTDFXlH7a6U*W(o3yz(rq(#b8))D
zFxw2`A4=1d$lNRF{QmQ(bd)fU$&F?#)b@DDrr69-^b+w)Tr7H#x>)^usljjpF#W5a
zreqlkg2NuTtq@VMGXe<Ro<<#y{=|jhg*C@qBEHSMab@l<f>O!ou~p!l!rY)v>ywXu
zkM<ShI@&EIy#WQ=esz1-L)cMX2R`b}u&<>*o)s3<n~ds>{{8nTZWT@}L^3EXhs~$S
zICE<8VcP&kY0Rtt_Z^Dq;5-FH6@Ml^*GIw1w;D=W<9;|yOLJyZZllI~Uw>%$VyW+v
z#?QduY}oncyZ6h~-J7}Gaa$zO$wAUb*LdIQDvTDJn0uPaOy^1+GDWvafOthH&(|Nv
zbs86mfTF;low@_Uhw~p65r(>+h?Mn(1||wR#L}<LXuTyNiD<&IM-faw{b|<C{+vKv
zj71a0!h{duhMpbinTjWKFv<|U=tY+lgDH7y9+Pu*<ZfBs6v;bXri#SCU?$v{>?e=b
z-$Vpyy;ey4B4U_fR#EnlZeBysc%9I|qHJ_`NT?8_PFgs$Ie-qOXH*sSh3;uudqq#t
zoNn5?>TkxJ_Qbwle{-GpxnZ2guK{ggPjcj2<v$m+gM+@`R?La?rB8;Gw&-+`)kZD!
zun>K$`KP;+n3KUSGm@Jn)nW>cK6|#<<I@_xT8lQS4VzJ-o2*vql!Rs)iNmgF7Lozf
z)5B2W?Ot%@hD&i!cMea`_Bv@2h_Rql8vdXaNDGhGFDEn4Z}j{XsR`G|WU5i~<g?+|
z4Nlz0fFZ56YcU%eY2o(U>{4mj8fh7T$j&1%n+P6BeWYxid32^XPaHi@tI|_Z*2l=6
zrJ5K_OayCz;rjjfBJQHEo$S5EWc-H}jf7akrVe3aRh?6dNqxD8px04b;CU4MtRsIp
zcB|3;pS9+$ILKJ-_|Qb_*e)<G;iub}{o)qtUt=r=B6?W6MA@<E-udzD)ho~J_Y%2e
zN>D8QhzLKwuv_3s0zSK=M>AeAyjc~q%~Q9-G@8ck0AXTKf8JIoR)@4Vzm)kBX=gcW
zEkYvPQGOG7%5OHaVO(Wqg(C2ZW^(YZzbPT~>#HwCP#+>N=8D5GUp<rFqI0Gi3adO@
zCbj#-xsiIb(kfi~qM2Rw{SK{4;i?V^zW9k=eY(}V>T<P?tY5LOz^vJF!M|<MATX7i
zkh0GgU2|>M8I+dOuHS%dmEh?7l`!d98u0|3&P-1Zg-i_2?q+EDj&2ylfV^tEdfvtZ
zcjGRqUmmZ2?5b4A`B&+<v+?+~73TiGc3yWvILuPP8n?57W{EdwaaRMm9p*JnmD-7~
zgi3i)AN;~%H>`gGwvuWY`$t$=;{SKKmsLsM$ug<%EUJx=7hA_gKO~{$%Al^I$idke
zDdpNjp7Tr$*wV5TX<l8%HYq-x$As4l-#&{eF}n1ntN=zxu%~P*e0NV7C;`@sk<~cT
z>pJja2$LYGxtsEy_Kj~UF6Z|DI2r%5Kb&-c?=im#l<STD&wi02&=C2~MUjK*0j_-d
zK1GoD<}yedj(k&LWzYMSE$gGR&t75X=0>f34c?zdeT7|R_ep8g;yG+Kf`aAAuiYV(
z^Wm?;!mDsYtYTqRyPZ2Fn@ctjU{8r`3-U32S)OdR63_(u(u>Vga1f=`-eqWk+0G1|
z$2m~)k-<DrYKs&?3*2J9`Sm4LyQhri%DJlz145PP$@Tu+%2mi!#b~7Qh7YIAz$^np
zD>p;>RA?{e;*VzP^V0*B@*@xU-`j$AlEDcL><(~$=4z<H4zW#!S;nZn^RN<*IzuE@
zbs~d&)s`41-?aEWoYz$*<MSo93ie_1tNUFQ?Q?1tU26t`YDVgGoYL|JLtHksTSqaN
z#0^dLch+{WisWx=?Erhq=ba3KDzHt01BNk$<LcAvarT9C4ke`+%p#WQlE($&y<~cG
zKcuk`kYT%E&mm-1kkDFAt*xFH7;q|NN0W*=Cf)hWPdKY7;otSK6bE9iLM(=POHIE<
z8TaFA`<#Xm3u`O|XRxPJ?KzY7%Jb!Ngu~-fhIPPkR?L7a`DapW&!P~<SFJpvxL(V!
zJqPO1m!F`u0<#6{9>IZr>U$e9zumC?%YAm^^>3wV-`L=L=UBRcI{Q%=H-d^7=>7AM
zlCkXd<m%snd;jWVka&50Z{5%5oj*iUzDZKzfVYQJdI5H&;9=P;9)S_VzuL8gD9|2J
z4hO3I3xo%e5ryr-BZc5bCjMU0<JMeVD&WXTuj<BNvo)}p$fWFhxK8GfYWRWH6IZ?n
z^ZE`*;R~eZ*+}Z8BArNYaKe?BGyXT&C>7=Z;p{ELqFmed?*$?uIUq2Ew1glGDbh7`
zNS6XbHzFY*Aq_HgjUXW)B`7T-9Ycc>($XNQbmM!D>wf<K`+2wb)BDM7E!l7wuDPyr
zKaPF>?O%YkXZ*LM5p*=N8%+8cF;O~97xTJmyaiF0M4HL71=cS$cs@~|g}X9D@^_X*
z`njpoI5a^shK(X9wk7X0D>X4>;R&qa+DK+VRl2;QBnyO<DSxsQ0}Z~lSx;GsX37tV
zmv#Y5++;$uaW3fO%e;Pck)*Ec{!K>Kg3`L9dF5%UmLHTG`(Rd6>UG<rco78WJ`$LW
zowP!^X)Qk*_j9uo9rX!zemdzxW9d9OCxwnaz*L50T+-2SDBuY8!OdAUHrdu>M}@kY
zt5l0=l$^?I4MYKXrsj{)Kj%~~PCJ7!k=hWdL+a_oK!xT38USCaDwf^89|^_|I#)fJ
z&5FhisbOj#nYq*l|5vF;n6HXUo+UMv`23_s7Xz1wD)V;u0S{pS%Z#Ptr(_|U_Xby$
z@A?G2>%x7NcU&?hji%80LC!&zmsy7dZgnn|FJ1+>;D4E0foFtuk#HdhZoIxSj?tQ`
zVw;&LnL{`?zGBlHWt#`3!RDc+G@OE~<b|+IB%0ZLJK=x=mkpA|d;h^%zxM|;q|mrO
zig*eYR`TficB(wfoiU+hnEq~;r=fslCw|ushB<5fLa=QOW|Mn8iRg9}9}XL2b-q}N
ze=-Y5EowWN2kMWNq5m9pM?5_K#>IWz?)hH&INB<+&C*qED@5Z7fB(DVS%(MC&A=oB
zzv84=tWvlxxKC8(_f1M7Q^TZU&6vk9r7){DSo4ccgao-F`+aJMP_DB_uEk})FuWkg
z>eoIs9o!!q^Y*~xmOa*7grt);GGZRg#*#1tui9{KqFOW`9S5N1bl}2Pi(HhKF?;of
z1gXwbVY-9;s&_6LPd3EKmS3M9zQy#g&7@z;HVW{R5wF5oAOt=veyJI0C=d0OcMAPj
zny23wdz3s`h3Dh0S$FP@vFnXT>64$p{;qWn*#O$%fz_omf9@<x`DipP>mCnwGP{OO
z#PFtd#Hw*46O{xC`&;m+9g1`RcF7y5j#DIqq{*){EB99E_`T!~yv>sV!Qp~Mgdzbc
zs}0ip@eiSeH+0&Q6Tj<nmv|a<HqjwB+n6ePqF3Z{4z7*ZdLLYL%t6_gXqJ^EF`3gN
zY|<DGzu=5Z007d#eZbek@&LuMB+oK9RufBu)+or{WRIlvaR!l>Z$HQeGA1pwz_gby
zfNBGQ?LkJdBj!3Q>O~%%Ur1VwMU&iK%`XH-!rAA096A!jq!h33TA^H<jtq`MHt@Ko
zaWVjYQHtUN&kiu!KuM>EP(k}4h&JMTTQ9=imPLG-EFOP`2J;}%mk?|ZC@U*e@cr{C
z(MnP8CZLpR0zfKO(nDu$YO_P_pZXC4MHXWNTQZ{G%UwNDfkdO6<eNG?(4euda|){i
zu(#1_?OeNUM(eC;!Gm6{kPu%|l`KuzIwjEgx5XZcT?siAo_MUA^{}7<I3r8r=v3F7
zKUX!`n2NREHu03)ZY?pi2hiCuZc}k*f=WqrUBNdn^ryv8x?Yrhp04`|Y~#Amb+d!O
z?e7qWhrxOHJ8QKI?Rr}sZ5ROi@zfwNwAAj|_pq{t`&>Glb8$`Ju@Iun;<Y787kpkt
zOjzEqS&I0wQ%Bf78-a1JZ{nuG@kE6lg|~opla9O#fOk9m1P~+9M+OIKl6iCpSUaZT
ziP!(oJCs;N`IFUDAhn|G7FtDr1ks=1A{JFHf#3{LZaRGWif2U@s@+6wYtr$wA|w!-
zz^Y^d>gJUojo=K0%{6GK&`fShZWJURF5sAc#AIm6a8*0pNypVPMaopi99DV~g~d{w
zlb^{^gWpZg*?^sDb)JOpvJ8}Bj)lsWE7#USA!p6v7G4-F4M%6ul|v2)xw0h0HS)Xz
zH~Vv3g{;`gxV6X+ES*$eASjP^nyS(HBlO!wGMwoEP#Ns^$`5qCPPo`=R>`NtmY-wB
zvvV|rEXIZ{yXOGq@Fn5I9|J^GVrk8D#nH9ESw<HScXZ^T<p%RwWy4UX{wfUa<W!c3
z7%p2{tLKNGISG-;kQ4eiSOobA7#<Ha&OBbvI$7qD;?)HeRzgn>SVwYYL#I0j#dtuq
zdN7=LiGtaxJ5K*f7?tkxt<$`Y$BE?m0@Wy}04PUN5P6BXQMr1OpOtA&VLKq<v$iWY
z4yY&ihGs6SU5^Ls<iAcO?MyKxag9$Py*SpvLzgLOo=K<aZ|#oc*Xl5PLHnOy-!h}=
z6|vV~@zyT@IMtGjAi0h(XK1l=8^f(p2%*BXE`7^T5$BVh6~!XD!Kgb+`u?~{H1JsJ
zL(sO}@=K{VJ2PQ|cfOY{hl#=*@=D1p*xMj;vSy_gL(EPsV3f4wamk@07f|rzpqPko
zIxSrW`b;W1G>}8ujNvC<%_4^0XFGs;yDGbGSg`1FsBo~q%ku!Rjf{Kz8o;gR>w7X8
zTI|tomOo&LkEbb^aT~v|0tsA8AbcS2Gi6)KeI{p2{|A%gj~Yt4PGE@oV1&st8GCP%
zR^v{sTh`mjvOGz)UHZ=1rq@>1`jmMOwqZ8zX;i=r!WlCBZJx~cV@Lx!ulKGn?c4F}
zPnNOJ!SH%z^3ud-*Y-;LMVheOF$g-Q1IGTDl{SfmWbo-%ylD_nJM3%wC+g<>G!Z)$
zfqj#Rd`MIQVF^TClH)bPM@#C=I#q}zIy6JYly&Wrd0erS>JwegI{#)=vz>#@$HO})
zN9a8^L<EH|i`N>wFwtG^-2Vj`7jGm?l&$@QXgLrxcjy>G1xP}mg7!MHBl(h|#muI^
z{p|DY>Dzn0{SmDR4x1||guSSOf1DRvfh&22933b&az3MN7AN%)T~^{2|I7P$6!OxA
zxatnaxp>3<?o4q#FY@&;4kR@>zvcz=T!|7ONbB(xs3`~iB^2GWOsuRLi*edjUbPrX
zkYS2_>7E+Oy_uFeV*IAmkWD0SrkIF~yi_qtH&wStbNpt)eGARa_A>X3bhk6+n=?;4
zh&__S_{p-=QgbVsaFaWu)isx%=};oymNN3j2?lfV6ObSorKf|#rCqI{fhY>90F**<
zLwhH)SBP&IRxkmXq^QjjQYH3anSm#&<NK$qq_uO<C4EoOipWpU!S0~S&Ps2?6vqAL
zX<W<bBqU&XzwgTk-jvjO=!S*D%nTup%hw)J<^ZTTO1Q3=CbKamkv%Ldk(wAPKP`8-
zbqJ4&*J7<z+Efm*Qs39<77;C~XVzoutH?En#XSsHZ?P_uD;9<+o_=ROy88sBHinmw
zbbxi}nh!coZvSt_(F5JiHJLC--&|*<?q|;HewK3AdaY~;V^Z2EHqHE}e#xV`{E#?#
z8by}XM|b^ZAL<1s`TtlXY4=EA8X~>vBfgEmQ&R}BS6Md;ZyWRPiO+%Y5V$JRKPKx<
zm0U9m_f^-*u)Tr5{BGlxRYniXhm$GYrYTVgk77Ag%b`L^YJ75W6>1Hx{lM5r_Y%He
zT9jZzDCV{N@};ujCR&Mxan@=Y4DiXF<VkWD+*TJ0I3l4wYboV_6UeUK7G1M#{~+%-
z7vE%Kx#Isd`~Hq7#8&I7e4gNj4n;HPjv~qP1Wp$mgOudsoAMtN;Q{fmu^5WsgrC`t
zVj|w)w21d^`=97lQZ&oWvBOhtS`LTYhY!Y{plWV=pi}%mz;j%-pIOMG&V`V$3_se}
zYznJPi?D>+*Ur>iZM6MG_=K869tpim&uk>Lm7+p9+=G_P%&vJhNSczKQ)a}-kc-~+
zG!f7&$pLF%%;&!k-?Q@)oyItFv%poEBZIl__SC(yd!OZBwHY8@6yRVW0s2!6b4A&T
zKi_CevH93Us&k6Z%o&+Pf6_{9%%wJ<92FpHr7y!Jf<B@Wn#ig8I%IqYJ=;nw=50NF
zXhXs>*3razZq~FJOu8}QbfVZD{U(VNxtAvuXU647t=wL%AiWZaBNG3rB3C+({3T6C
zqpz$PPc7eTPf@<B;|6_<smO_M<gaDV1UI;p!m3}dhY%Coh-;<CSav=vuRlTmw<whg
z!T4|r-Zo|YJzD*bj9p$2_%Ck^eenOEFZ+6h-w4EqY;((mr|fBzV4B3~8x=#ycaj05
zfmybHu0eBC`uaFJ)-yZs+`+5c5r+zP%H*w;3lxuTe@Ax)vpQ-I;V8AADcnCXxBBj}
zQP9f@e8jQ!LEreD0QQgc<xA+up|c84H+H~F^4Rj5!^rq<rq+{=3K&^ttYghn%%aN#
zo71wBR->BpQu1V$!obu;_{!F->8X)f)Zo`~!boxU-VgOlw}|EL1Oh7u-r1>}b_(x7
z$0qhFe<7xxPdA1RJg4)fw|A;S^m_2OD2z&8Rx}2$Ci{(z2Naq;H0jFPBM_X+EcyH~
z{@7Nb@n1)lCpNbK!gzs7R)T*K8$q>+BC5Mo)xYyQzG<=Klu;|D<DKyg2r;#zjtPU^
z?5C7l_a)y#%_6AaK)~Lgero27afSKdR9v^#-K{gKe0$F}M@Rlxxwz9hv!SB~Nh4Tj
zo4H>zs;Ns?&XMJ*gF)8nHE<MWhM>-LB1m84lHsmYa>oe83R%2?QMnz<PC3#(d{#gk
z%_!yXbB~$({SJ7ODJoiGnzY$sCcQy}i8q;`k>mS`zOXxbWf4$>pbyxrja?Q$K(DnS
zzLyz0wxm3@9OAj$wv!$`UmpI>;mgFFDdLjhDsAe=*K+xcOxJ8vs{sV5n+1I85jm6&
zw@e$2Hgg*b2y5}om#kK?=ssh@6%CJqHop=@b4k_86XiDp%^eObF`qO9#$*TT!k;{!
z(?94Kf*pHX-E-`(+Gn8w|Ho@IkWB4u&jn!Eg7Z}TH{Ke8D=IJyMQv7HC$O8W7nc1P
zi@DaA5zyqM2*~tjK4-X!l!|BEKuC5L7yqC_e;7-=9`bICRdHUTrHoY}3=Obzl1For
zkNAbHl58G<qgRnEcpoxLo~ESEI}7NVp&y83#iGosmisTo4)3*&C$O0vY?J=0JE$<a
z!`aD_FdYUwG)B+RG<L;1I?i9@9`AK{a|cecu1;;cW;E%~Vk%{7U1Fq<15`|@n2F=>
zn>!Df`L3p(BLnn|@yF|af^_P8*GbtfsxoN$gq^W+Em6Du#sPRUiiY=cl#9pWB`UAf
z9#%%i%xUkp;_jw!=^kba^rhLd45UfLL-|=CS^P&F&Cm+1iYFK=ms3W&GTWqlmk9TD
zCr7|GPIsMKmv!oNP!}$bw-20Jqr)7$leB5iEM`s$GhJ1!A^Ot0Z;uz${1IV7O@Hiu
zsW0plzq$+}Q|=L9Ccu(sAyX81iIY?Tk0MZ>)FX;vVbW&mU}1@ogUTqAVTZv6{z1?%
z<ua*xl3DkL!M(8|iSP(z92`%ytP(Ude|f+Adg4=V-1_m>%-qTS-WPoOIm1nJ0mld8
zMHhO8S({?O#8txw9`|ET?#pn`yZnWR8pjA*uobtc>t=YtDU!DzEA?bl?zg+T-zKC`
zJz(OQOLNM5bX8f?+I#9hwS-hWJtUHckIMTmu|r$V!s__jiv&@b^Ok*)BM)_j8Aq;#
z#XoL7@VH5D&*(9`Hh_U$z?Ue}&)k8l#J0VrgwJtJTyNY>BjxgSi}~+G2L7CSOe$SS
ze@ap%1lVPSe~=!m4aNlKzb=BOoJ6W;L^1{%UG&!*)|#6!3Ee+oyLuo!frMBay*o))
z9J{=6A~wdZKZo?Xbt3flLh<Cl>C1M5J?-qjE}68}KHw6xSEnSbOjI5fk|d<Djv*R|
zPn2x^e2t;PY#`E@Kv0AXX;g1?Th~(Cn%NJiL0YOkA>#G#idK3A)!}O(mA|B;g5;{X
zGe+v6lw+L2#b^l;AaVt^vsmi+3R*itiZi4RdKgu7I}|fU6F*x?7JjIHgJk<{${qz*
z!uL^#zXRSte60rCgDDV0C^)hYrwsb;4VA`Md?-!j067eI4=#yR$a@zcdj2#2sKJq^
zf7(f%bs0|^Pd%&2`Zj+ci|<Gc1}owH>gGDvvY{}evN>G;Y7HJqU6j(}u@H>sNahl`
z2+67U!<d*jDHIsrpJ%1@_LF*~r_-}0`fs9OT5n5VBvI3&AF+Kg2ou=fvAHar9wwyn
zNTKFsH4|~krkpcR`!H0weU`R%A{iKx^6wO{*qLdpOtJXw=^XfU(1!Jm+Ji;6Y=IoJ
z{{7w?5=4wrvq{DGVwwVM!W>EDDC;~oMxFxCkPzEE@ZohN-Bk;L2@x+2@;)M^oic+Z
z)`x>9l2#~uGha!hk`YW;OVN_cNWu2m&mK2QKa}Ve;TogLqePVGC&8yIPeT-|9fgAs
zqlL*(K88milzvm9<;HUW=!b|UoRH;g<hrco`dokfleihx4#4>Q;?2K-ON0;Psi};Y
znH_i&xyj$QJ|>TLBU9vp;T_MowZH-|PuuGR*rAKiVAf4Xo+91S3{r>bssr0A_IOx;
z80n*G;LD5g3(8%xqr>`(6Q=!biA1?sV8xXmX5PO^rpP-mlj1A|G4R$(in|C{Xbt8U
zpW%ZUIg+N<nnU^KzPB3P@&Dacd1}+2R#G~nw`g->I55^mF~2+^`;X)ojC+>^XOa}}
z2+)x<B7dATKW9v3A+V1MJ*y7S!T+GEx;*mx(7z{v+0VgirN0910PLh%)xwgDVxIQM
z>MooJ1ekQ5&j1I|;Q`}zOo+lbtpySM8I6MF+nCDYA)yaH<HKuc+U##HPVh8^o6d`e
z@C{@apL&|JU)+TEK><U3ycJ~{kmW@WNL}*Uhj-pvY-vpyrPYF4)C6&3R7H@>;m>c5
zPb3iSVX&a<%ZT&sko4Gb1Jgm?8|wOy@z<pAvwg(ixkdvRI~ktPjCd!qYz1ne3|Wsa
zqEoa^t||>R3mVU>WM)h@J~cfGjvsW1+kU%hGsr28yCKP?qcrE_=<x8>3V#!iM3K4T
z_D7+6PA#j5vXSF<oc)IkF??TI%Ch4aKusKHNcMlS56(i7Bg5sbw<`$(fJJgdG&#c^
z%LA(;MRih0yDLX!cE9)h<QJpQObc)((&nA&-6GN!<T90Cnhif9K)bCCygnBPp}=t;
zE1={TQw_}s@^)`wm{_z=EV}y9FPb5d!I9e4BBqUZj29BqCiB!q3HdYU6MckOp+d#1
zrx<!iM$X`#|59gx2pBzlNt>e#^1m3y$F*2&4@ZD;Hjx+R?pW3R=xzlJK7cn>1XXxa
znzLVdKEfJMJN%Wb+5Q_#mf*1t!r}c|=)3n~B3qwm%9z^ZlWykssf86^-|&bMX<va!
zD|p?pz6cfg1lxuh*NnJj3MzZLxUznZsI+pOU`9C<Y?N5*9czmWI`RqU*~U4X5+!IG
zUpP>o;1Tie)QDIiJJp^D+RpXu4&)04W<?jKW8jUFR9It<jV{%b`&mL$HRbA%B>u8r
zkAf`kM|ZKr-2PrkmQ*EX9RrIgEScRuQ`d+PhK(d(Mw+h)-gD<PZ_@S~pj679R5FCg
z<_3WiMxe!_!g(tm%7!sp6`dgPHaoQUr7!;mbCL`X?R)$}h?-FWl&2V^{$qH57cV6!
zmxJ#WOnNKx?#I;bPy1r8_>h~Jer{`XOACI*QXH4&vo*g?zlPn&LSgw>X($zy``8yt
z>$eXJH8KmkODlPteqlx&RyZF2+~`vJaCZ7&WZJe9D&TF|ns3kp4=B$dO$h+Mfnu@m
z1)=aG;jIS)#4c>v-Upc=m^wsoKJ&@VJj<?%Q~+bLTm&v__ZsB9bM>GcH@JI7y&&z)
zD@pxqj@nAmjXa(Y3exZfFu0%nAyC}#t{CbEgRd0g(_v+9ujd=}ddvn<&81gJh@+bn
z*<e#o46C{T((Ya~@}~E=O2cBjM+pbx%EZ4Xm0LKa*>27W>EUWQp#`at&uV^lTD0-7
zM^mtCmp>#%jrFv(D-W-^unzV1uN^lo;y6^)2&);5^s?lCPXw+pmXX+VgTgzj9^@u<
zH1S6DJg}+nrfzpG!YZS9jHt4r6}U{~bvP6WY!#StqIxG$TJ_sldfeuHsszi#Fu|lQ
z5GAS0(KsQa`$MqKk@Nd&zW=_$ve>JS%83Gq2FtUtVCHBVbBlLs<{62gip$Pch=A@7
z&9be6F;p9-I0iRCj}<%eyr1U2rz?yDYeb3L`miMB<GwdTBkPPz5;tuld;^E{2Jxy>
zQc0am4Qatt3cZgyHZrZaPD>|lD%5Ddt?1-6@{%z^QPJkAPRRQ<K`n@kJ*kPkRP@^I
z{pG(dF6RB6YS(yr47q=hdEOJF&!_i2a4m1q=_oiBHkCn5xN~{+4kG-Avznw_kwt|*
z`cu{8N5}(;zli}q0c@`vw_=Gz%^vKpg<q6;JNs&%lp5Yz-pLMl0s6IUGpp|ZlS)G_
zLPWW_yHnjb7+3T9*}+9Mk0hEEq{w1)qzIMZN@inrb<YQvGVU15+e^>i>sJ#<VACcc
z?_$~HY%Ydq-v?dA5iXm&r5~FR#TxvY30f!i0Z9FZ;i0~A+WxBJkS70UY`H_u5$WR{
zkO7(^F^9}SylFM_Q&4J5Uq0go_=uSg^%aUgZisuWmW&7LlB`k!>h6~*;j5eLVkdML
zd-dkUA2|c`FW#>yRErpdPXshSTs90Z=*9s5KFa3qhE`5^PKuA%;6rbWy;@J=byDY`
z;>l^%#wF+e#j;s`#k=XGMfm>0A4E|OYZ8x+#V`_i0l&->CxK*qPOWZ)Zbt6LWOZ8l
zNa55Ar<PHv<71EX)1za^@iiv9p^&>v=RUB&@$UsohO;R(KU?}KlBoE>=zj~;I1C*?
z337P(_v`+nPY=mJUSo^-#_AwwUi!aG(R>V3R2xU~-_X1;WI>RuKDjEMaALq914(+(
z_ux{9IOo+{f2mW`$fr4X=lS0!*J#j6q+{&<F72iS3#{Xc{xyDWAve9J7Fii5yPR-x
zA~$X=bxgn+Rd!!Ba3;s!5v<#H>H1KbSM~U8Eicf&UH~CZvB0a*Y(;ZwFUEM|`6eyq
zrO`fa`j?VA4fN>FN@&C8RIY}#IQHoerkn}b0}q&03LoQqxjt?74V|_328Ac&I}KYO
z7J-r4`L3G0Nh1%v?@A&+5g%i{$rjIFS|BFp@bukxN*q_8&qmrfp~I7fyIlr)a|Wab
z+rX6H@WlIk5A;PD#^3dM_FBk6rzri`&E}YwK|@`3A%EAQl3?ZhI3`AjRSMOZC)GNP
z=PWMgZ#~ruQHJ<j9ZekNZ@{*_q^YvkP7eI=>pMR(XlD0;UxWb`&LhISW;$_i=Se{2
zYzK=-in~0gIav?f%rLdzN0FU)?1biTiwi9pFk6lzxZ|U}@N2LQH0{qH0Q;hmyrsRj
zkqo!K{A&KP*3AKv@``<W9v7s~rUvrE--Yn#pT6`Xe!19z#|xtL93`X(_Xku`=ilNL
z&FhsTAH5w}lMTfU2k}0+QRB0XJ;Rps)Y1u&NsAk)EO`c<nX(Y(l8$xG5ylbO6>397
z1~nI(RB$H$^HYgtkZTF8j~G49xJ^jF9vJO#1N8$;1&PPg5#tH4&oXxjk8242d@k9f
zHm|B-eB6q6**073EM-J1KJ;2p>B3S+O~REPoDip}H|-dh62pITEQfuZ07t~l`e#=_
zH=4S?%3AE5EZTV$t*TjyX82QgTKjJ9kkKE-T@rRXXKdiXnurH6mm|$$>gr0eR@^Fo
z+5lm3=`gV27XDxy*y7SHEN(&kZs+4Y$(u9Z5W!v26yFib`c%Uh&DnXGN7Oz!^fCjy
zqQ^WMemt41`T?r_8wTt93yw?<k2`A3{~bt~l5xIhUQ`<O-?$Z;fT{4@tfmOcA!|13
zZ2{i?;*U@K`!nV>rqnQ{em38fxUQ9%jd6tIMc)l$_~Yv-?%;6eba{hRA{PNB0v_z@
zZ`0Hoc`RuE?6?J)F7MrWHE(QOaCA<Qa~gJ@o7!diu?4Va?X<vhnBBGN@EmNbM=wuR
z?tZMN)NN@8=iW@TGzhrSYUPA|8~1Sc`4~`er+uI_$LR8$3Ud9Di#n%c>~2!`Pf{N=
zl4h#RxLPQC--g*u7pM6pJhkX3+K=yI?pGjn0QTr7V1s<T+$INg9yAZvZzewoSEsSS
zQ+zY3g>T*fOtaZ>Q^3%a8r}Vhh_SxF7wkqT=c~>V&Vy@xWge1Ad9~rqS0W)&MqJb_
zWeLh^M;Wk8aSJ#@MQhOxNTnY69dA!fVaT<kgcSKUdRO|fSJW-1@cYS9g3@KNr@9eg
zvLolw>D1Yx3^kQeof^hy3HI!V@GlQJq>T)ZjG;3`L47L-%|?*2q=AM)0u}>n_V~?5
z_OZz?WN6p!22@HMtPdMXkDQXMU4NiW_irg(Q`XPfU-dc?zWN~VqBA~dRP<EqU$Ve+
zx!mnDw58l7hQ*f2bC1IY*BEJxGL}(zRkR1gEBFJ3E_9>S7S&HHnc9Anfl9#j?o+^f
zHSa*~g`NeUk@YI7->8;-lE5E`?t!rDFqMZM<XmmrnJ^GCqzDA^cq-AmhY9%8as^r9
z<ZU2!nKt>+@o-ATxMn%amw5x6tG6NQ#6*;Anb)<Ct&9l3=k!8o8!XLMtB6<cjOb?H
z|H>A)*F`PdqD(35Mrn}2c_xS^jhIy~kT(GVsg^gGIhL3=7<r_??b6o4?yaYEEfgq5
z%I^ZNxfRj)I&q2h-lLu@!ZGS(1I3Bk?qfbvO6i!Cgdd5Z8yh)4@%xU`ahexamp;M#
zmL#n*vY^kgVW>LA{ekV+NRg7&K<wFF%>s|<HIO(csTwY@<DH(RR(ZQ7Z2S6jwLjen
z#s3R^+V)b`QsUiSqdyeP`8@g(K#^kg9=v?2-iSfmU=U(;nGu_xTAdeXGyJKBxVc*^
z;n`mZjSLn3O|04sh@*_I4LLh`#m|%{C_D{zLRG!bCe7fZ%FgqoL5~l9%d)NXLoJ~%
z*?Uz3Xv<65Dg1Hrdj?~+ioowtn-zg+LPVIGBYUzIya`hQfw$E5HkY;D-CI@(YIoW(
zY_-y_z}+1NHbbWR2>=dlQF6h{-8q)YqFuwJpZN?C!NH%mf^+oYGvSQqsD|)eMPjcC
zTCh1n^cH`Mee@>_@OfoXeN0Jk{rk7_Kc)?a1pqYkXu*Q6ofHgRtVYuTNVwgl1Oo*4
zNAD78W?{`BdjD+!tbm8|LSYhqL(Ll1X^L<+oH_?zDl^YA@#C?FAP#7RQ>wigiRzdo
z<oe)j^EYNTTEx+=zHt{<e&C^U!An1Dl5H?$^!rgZO#Av$Te?$}=4~8xiA9I^tqMla
zh0Bh(zzUn5wFjo2SB}pRJ;I`0{CCnps-~xE1HwvCXD5`&npW?c!*kUqCAR#jN~v`V
zWI%&mgI_9B)Z7U;KXjPRMs!4UiJCG2$MGHNXDr5JktBC$PgJkg9<)UJI>%FE`A^@p
zTohJ(=_LNirya<wVOfkK{WLnldO<iPT?d4XjS-^M=rkjMJ+$c&kA;7gJX>tTAN7J%
z$D>T%Yj`ScHSVZ=&02=jreZ)$_3tWH!WR%4DzA#Zb#oAiu}r8XRn#fS2Wpd`&pM_+
z_ktwZVn8<QOr~vnP8`ezJcH<wA~>VGN%Nv<Vf-JA<cg36)$X;Q?~WMWkGzBrh%LhP
zo^K!c6j{ONHUgzLxtv0qiot403OclcHG0_f&NxRUGl}N;ODolyhb~3@0|gMSM)n<`
z3o`CzPu!vIe<ZBL^JGrS_&hbhb2%<m659-Oe(@y4N${2_2~*W8Yk1hw(}Ms>tPF;t
zqpBdSAlN@Vs-bwKB$$jGI_8#o{N=mM6BUk9VH@%uI~%5rkk4w=!$va66v@D;scdU;
z4wHhUBFOafX&)xwqM7ba^%oG45_N-*DpVo7>@0!2s;%Xf$PXVY4VD*pRyx|LrPj{?
zq=mn%iQ`UNADi}=3%Mkkw)ggOpHEEb<BNDKES!8}JE<r~u_#rco<NbV{ysY*ejN-Q
zd#Rq~Gq&BDB4wL|?8XVhsIOjXOKPQ?0hK!cyqr)6-AMGU2IKuGYL`!+k?yx}1-#DR
z@J;UWB{Pr@$51S%smhJ|r*#+9cJiZ<+_*aBacblADqFiM>mWf~@NK^ioH1q6nVA&n
zN?ki>DaT3FiDJZ(s`N@Nh-I4CUc`E~b<2_KGtU>wAAJIckw_4|3%fd*myUWXR}cPM
ze=h8%r793>Z%n!wK)rgYoYh;|rasF|RpAkdjfY+`U}p4OnTEby{VJT2Er~F0v`~Y!
zw5=-DiH)uJdnf+g9w~*|5TUJJ5T-z~x!|i{oL7aLj$?0>Z7Y5%SmJl6%;T$#yE-r{
z!)-|Qjq0Bw^!N(*&JK<(!`Udtxv1JLnaCc!26MZ$Hq<zV#VP%20A)3PtL>jp0*uyL
z#xDsJY~l-^g7l$D+;*kj8u1(JUvElfTpkO_CQFya*bL{JlmSae(|MBu^fbl7`q6M^
z!Ts23u}x$^2A`zeuG}G({x!&8Qd9Any<v9{?LMamU{1z<Pn6c~-2yZ^LD;&uUS{wW
z8x>dS_UITjSy>qKE=ZPX23JF=Hv)R!*j_TDo5tNsGFag*KOu;X2<f4B-_Dp?{x&n@
z8Ul}`zZGkJapB=ZWfMgESVO{45t;}$!hcBiK}T{Lqk}c+Yq(t%ryZEGx$$UG=}JCW
zCehC7B3@siR#dq!-HS)STD(!IC?ud}_C=&$mq^gMC8@A`61!bamulIlW!nWb2=Lf3
zBkc3t@zQ#XcudXh2{ZRIAvUHa=fR0MXc{W^O-W*>G{$9!S`6ey#LW$M-+hRiL7~3U
z>K4B|ahYv7!?|6=KPeoJzo2-U(53>fv_U+Cg4YM5rgnM<GbB6H*<+0x$H-(FN|g4?
zSc;9d_=a%fWr2<;dA(ni0Z<6U4SmN}rX5ACJwBP~u9{(Z>|M&A93E{*oy9uV@6VKN
zB}i_|XYxE5@BPy=>sa=Wqjp59sANTG_9G6PJ=P&)fO7H!G8W_u@@3Ng(0BZb`ieHo
zmJZuS!b+Qmy?rJSrSr#;2CRu}aW$B%jN&x(e<Tn&MgpBmQR~2rR~(P%3BG}63wTP?
z8>1L%b9h)9PCjyCl^Pa2Tlx4UlJ7nq0rSQ0NyBuGvDV@*3E1O_EF+}nqh)*!XUdtA
zF{!)mOQs=VuZ09Oa-@}xRGyR<W6y+Ap1zcCm>-^&yXwqL8E7B1dVjz?*k3==aywtB
zdGpP$1%A?tqpgXA+w@RYbe;XI%IxOk1HFXDkMK-sH-|KiYe$+rwVZVx_ZJn%a8)}a
z_rt4{5*c-RSR8F0Zw@5pi5Ykr&8-8&EVrL^qZH7}Mh^I60k97>xPD!6G8#B5Uqa8T
zV9$4FGagD9yD8=F9t_g7{E(t(3<Bbg3{reyfuy<Yg#0YTXVQMp+O|_Tcw*~?g%R7X
zv)^tmyh!{X4Jc#CvY>8mm^bsK-y8k$dHlzdq5sy5QDCPDxh3uX-`emwE6|a@7|efV
z{Z&K%`A!hfN5XPD@P7z+c)=Lzy;qX32J1Y(o}rxvg(p+UaL$7HltcxHKhNW1z*cyw
zJVVppp6$sYq<qib5V?r_sp%4~qw4FfIZJqEm{2<*wLeD*MyH+K`<Npt>G75~rpHrU
z=78t#zgkv`zmT;8rsUg?PTX%q79l?{HP0P`z`AaWo6?z2LhD^qJ6)yzF1KI6<XSwq
zB<@~AW9XX&-`}%2`aWX3`fhchBmKA!4>`KPE7|R3x=CK4#=W%~{_$J?#rhoRbHNDW
zp9(mgnQ|Oy-;dyn`Sskz`Kuq43ro1qf7u*A#sS@#9^FHxyI?q%g>0>|>DODW10J9-
zptNrK7fOMe3*y=ZanHUKuFVt%>D(nbZgdbhZ|Iu81#xa!vga1TPWhNM2}T|T*H>C~
zmzGj^<v>Ol-wZE5%J%CLPKDoeU#A2Gq*}48d{RMswqKEEfoC?UeF48i8382UU{Hmk
z^eeb|8q8=(T<huDlBBXWhbL}+`|eUV#g0Mqn@|Q&ryDMUkfi}*WASCDFsd%{T8ANt
z=^QTVyD<#974=QeaekZzz*AKN(Mw3dA^YF!rsI*f(?KX))N6Q>>wj1P^xl&Q{$d&t
zj%*)Gc`*SV<0^%VGoX~aFTIn}oLtaByTFuII}CKFjBYe^65t4=$N6#HSluB-M!_`D
zf>OQ4g52htq)*Xq_eE16%c|m>@eeORV@KDDKOPxl{izOnw!rJ*F{?2m?wC)k9+}4i
zA5nIfzwaY+oap}O#m2fh`JV$x$pP}=y~^aVovUV(An58vA|RstEK7_4izXL0$&&8F
zRXgSq4*n4$Gj*Ub8(HF}e>vD^mZvVkTKvaozY$;qZh>6=<6J43E{MNK(6#^3xT>GO
zA813&r;QBK@!!jc|1n|q;(o^juaxHAY7EeRNSzO`CngwYF5O3J9;1ZUK~vx$$w9%c
zdZ3vh#Pww{g02dLy`4-hGk`qP*mLOn1#;*E7%;0w{Jgm~m!f$oC<o{Pbp-Ehk_~42
z9NcRX>lP;rprJoo49BWp!~AJ>n85JBJg3+44FN^|#$GKUZ=S*6?;C0~kIjJ`g(&UI
zAJR$Jzz;Ek@*s&Zs7BCkXw0djw3M{{k;6GWhRR{DL~B~W8S1gwX;=9TglXSev40rm
z;ba(nRz8TVgu!0JgiO-T6yje05XWL2Su#HZs#Et*+t?r}V=Ie>9#W-a77SvBp54Eo
z^dfmmvNkZoQss`b4oX>s&U5Sd$=J=dI-~`pUc1nP!UX60ABec!pBMT%h#zF0y^ME4
zC<uQ%gV-_%Mh-+)BVwej&Q&iy7i|Z^S_Z0!WtQ6_FT(d#;#(|>*6?3y-*HSXbw!JX
zzo7j)2yCFh267_Z%uj`yD)B=Xd(4<D^&4t4ALbWeg?C6F(W}fR)WFnHzo;GvB<pv0
zh7T$a5DDa83!CC|bw_n&9alW1UH%QKOYMbXB-QC+Y95Bz$rchPD31$Jb+d$g%X>`a
z%8DXLq_Ua6+I=n@cd1zQT(!f3gb9jE<^DeA8K)MTDD5zdhIA|vk()&pBfSx;&FXx%
zze;-ydOTkBn;_>KeGi202SwzZBFnesLB=*B_LTFxNFRe@dHP;HBW9lNtmLQDdD@0g
z6Md*gBm8BEv5kfuQpI1W&YD=|cr~E5cGD&JA?P5?jcBW(gsjpnD>t4tj32_R$kfx6
zM-FEJB>?RIHf?AO(5Ez^w>-F{GK3lVRBD86Mii2YTo4~*(5LS_#?0uW)>ornboZdy
z?~g8Bo*Lq`Hj$h$NXz#1{=M)4`;hH1*pWMWwxUk~K$5@IF&v^hPS5$4R*)Q*t289X
zXDJ#6G{egow&I{a*NdPE<of~mSZKv#Mk)+vF90g(kp8Gj*&{?*I7E3Wgy*GfL3pqP
zXwaJwVtJ_J#Sv%>e??WOnMJEWo9BKeji3tU=|r6VUgW=3%NFKGJPr1nhdqprHa%q)
z57WaRH2w<swTn~rtWU2W6VrwATjCh!+uU;zk#pfC^hIK%1e#Q_m<ujeVo(8Gb_KW(
zwr<?(w$+Ou_Qh-u?%5_5DlSuu9eAlgmr$Od>x75}9y{Ts34DxX$+4h6br{1p!Sh9Y
z^+=q?Mba}RVsG-_c|fdujgntmv;rj|Bp6ei6?Ias)J@W{4+CC$mBl$zs{f=S?h<7d
z$_f)@fn_HG7$^PW{Gdtc%vtaK_I{X`?%FiZ%(Bqx3o7y!=W170>$lp2eIBvL_x7tv
zDKMUNVsy>^i-)7ZX6eG`X=KsYDZI5tfYvO~nAT0S{#ofZ-yAM!*D?-zIP{_2&0LAi
zVf<F;PM;x!tI_3mV9RK|=B4s3djjt(kUn0kOjl!5Sp?fnQbKB8B4AyYd=BH<F6yVa
z*aauqWYX_WR@lJtM7BKf*h9l5vkQ`l?hd=l!Ly`@hK<apSX_^YjnwBIV1yu81#aeu
zxL9d3TCS}W5YZ*wdDg=$JGO!K-l`(p*e1v7NyyX#6VP6?Q*+GUHDJcn<9xB}15v&h
zyi|WZ=nv<L=;X&mBlmr8o8kC;BRgu^-MHQB%#(MEo4j4Q{dW!+G0L+22u|lfJ+KE`
zMwhiO{E?lbX(`UGQ3b}KaJkotcxKIS#PF~l?Ea*uZ@P_nk}l%6dbS-h%Pt-;!u*}p
zBaM(?hxu+DX0KSlL7aJR95(uEhB*=8As({@%oU}Cyo$J0b{av-oz_7HPzj$3RpP|8
zXg{G@Fu|48GnE~4y%*pIj0o7|#o&4~h{a0y2ce7=s>2p;#k{V|TKCVW0hKLV>i5XQ
zYN)ce1+IF#b%4{aZ=0~*+p8AaSk2InWAAEW^EStvmGd#0O;T%l>-a4ZopvIZqB3BR
z2KQ3c+Rv?dJBSq^$dEaMj6__}pfxQ))w|9GsR8kQ$Tk^4K6p7@f@puB{tkDNL^7KJ
z0-iPS9y4(>r%&)MI_U+EN5+{~?j*=3#-`<@jYe$)g*gj|z`_WwwD0jdn7+5;#kJ2E
zzg0T31yMNEA<X=GKmDF>#|T+Sw46zB24yNMRSZvQ;ilXU=S7+jDb*)f<oX+rxYDwU
zQfuw7P9r8zN6z{;uU=&lmw?KRkniix8<Il`7eT`~1)~*y(^)RwyEv@T>{ArRvqGt&
zYOv2jxvbwxfWt}cH4wgcdje(4Nht+%?v}~hwB!h2r>Gf~w%1j?id$g17)s$+eXXVz
zGlnNDMAd2(%OWZ7NYKk5t!ChhL#VfEBz~}QyHDY~4m=QQzL45XG9lzuyG5rXL$pB=
zC1znLMv8LN4?CxgxNRF7FVHc0kktByU-3&Z5!4nPd^jK(b=?-Wm&byp5}QYP3}~;#
zHmU0&Y>t@q6$CV-EwEn?BLz>QN)peGSzYY1Cz#g=2P95tsdl>QJ=8OutIT0h!P=Qm
zNsEJJ0$Fpdd-2X{{~k)4u!F1C>2N8lCO6QYBfWB&z1h-DB2My&bv95=vSCuSe$3df
zlDP%O&9BME{+cHY^5Bf<Rhok@#=c@(QW;tNW4hCdm?-)-%tSGXkz2(WYBhC6k@#W5
z)^FsNZaU&~FYXKcWy<O*HU|0FvD|R)WU0F&m5GexXyIe+W8qRbyG=o7VF2<;PdDj%
z^~Ag`HfW#)*&_wppCRy~RXlDa1+wov;lXZe1sp}+pOK1?XF+lmQ?sTCsP?~8-=FkJ
zBz4kj&wzOJopa>GeDgrMAqPh2oE()=pX?Jgq==XluH1TO==sN5OHq5D{9sW2c1wvY
zJR=K1-h$fCBShR&In#wrNQf_7F3UaVQTDi+DQaG^1c40aH|Ok7E(ojKsYyOdqJ93z
zdmL(P{JswYNF0uANu7y4TfH~CME^bW=W?(<T0e`p9do5&TlQ$oyqOD4%B7zDC?8Ru
zxcfqFv?84>)iAM!M3`<~L0-e)_OMbA&^^=-Mv7L~hJE97sY~r=q*Dta-0H#$7R&zc
z!(P$8Db;(f96$M9Kf<Qj6(OQ07TrlfK;Lp12<spHA(es%Er|YwXK9f@Yig90<!cS1
zqbxD#24l&EUi$uD^G<2m54+NE(7E;uFeTKDf%h!;I!ZYMXwmeDnRWmb9$lDTKTK|_
zE+5F54nJuR^U8MfoB{l7(bFFo&NinaW*aB^De?n8jt=@Gug56OPDqKO@V%VGZ%YGy
z^@4rJ0`$R@!7@O6nI3(J`u1DwKU*<J=9eo3Dy7DF6MbU@(Fr_@@Ea;Fj;Ij=_zOs!
z%qKZuH=J`6ZR7{S<ZCL>YOK3`B0f`d)L43><;73FxM?-oyl24(u%XlPSJfRC+xTU9
ze<fYsZ=X+?ya68Tqm#3>9FL8*&~1(X%Xb5RLy39N+`O-~g>j!^7K7jq8B#@X?_iMd
z`QiEZ0QH|&X@ViL8GPNZ`Jb=DeEFdTW|7twy8i$EwzpcABW<Gobq6&;u!5S8(Aq~*
zn3duaoLe-~&!-HirL-`yJV}D!h8*#qDgl4zMlV_a!S*tDd@{au(DmP9Q6C3rK!e2K
zW7q#IF#mnI$eiK-vslDfVGSVQ<(R^8r@w6c*AE1QrWD?Peu}?;7{LJn&yAAC{#W6D
z>&&6kGy4C7ngd^GL5ca1^{sQ8GXMK$7F}NV_+P%;|L+&~l^6Z%`r;QUm>_vh0(W&g
z7<N-MgDT>1bHJA5rW^$6kh`;B*;PsW=la(l28^cZ+A`1trn#@bL1&*75J3eRb(mew
z^z)@Z2hx9Zmk+!?_10kDz{KugHhn3-6XX5a1~MP;y#bgq?uz53(m>D;j*i+5(|1nE
z5yk$+{B(f7I}FoA=JNaW>Q~Um;jnN*>bhuCW2`&A=yxvHIe*R=cV+;QE*bav<{6-Z
z-x&fgQ}cdx^{tCv;AQ;=&1j9fubhs~(!LM+bxe0WcH*mClLV{SoxvX)XU%{mw>66i
zy%6?eI;6_>FfW&IS+c^3%>MP>MS9R#dIhHB4NOUdodHX15kT%-L=Of8I{?481K^>j
zh0DvdH!({U&=Y5@an|%JfX^9JQ!irP6UP<j%oVV59gX}0{5VtWNtqNxM)csPnYZ^h
zd7eqc4O;+BH$=er=W_}ecu>qnG6KV@Tb#e%nK!T?oHp<R&4uBt@e%@xp44TQp<r;K
zOt#P*c)8b|obX)h4<K7@Ne;`6-zm-?uCF1L;Mh39)OZQi>kcFSsXzHb$6Rr`fF}*L
z$P*6*Rd96}aNfkdd*%-YIGnVUpwi#hFx|oiSKKV$0ELb)%XC&6j<ei9yS&=r(8XM#
z_+I}C{Ng-L0X(maRLKK>Ktp2^C^1GL*2WzZvy!gCcsFX*GwpCseEv+c9^|#!F|}&_
z&8umqOP{j}yi6ziM6bJpE+Y+I0OVR^IVe)J5qhhU_2<a^&p6rlCl!wNDPYYgNfbQf
zhd!!seeUOh@Pn9@5pBL|&>*Z8IM>x%Z@$>2tK#8)wO^4MC8I_zjhhhe4<Jkg=)-Tv
zfEpea!`r}#K?PQFEC0dp1Oa}SE(|j;KuPO2?Hh#BCe>pUKOn_DOx%(NXr^}HjHT;8
z5Bl@#PYF){7|);6_&-pv7_IsJc{o6G{=1Kr%#j}e6y1||99ZX&+Ka}hr!cVc(OtF-
ze)eo!->@V@j96`0`eJH$^9ELJ9b{+0WfOEj7TnzUwz;;1*&o-%1Rk)fyy3U*1j(lU
zdswV--fyuh>2CP{r1NP6mmMjHI~tz0kp{|$-0j1rX0uPx64U$g^)D?B{C2m_z(R-e
zdL!qW>oF+0T&(CI8HIr+AmCqJFcL{pV+$P{&ZJo{F**Lco;?ctp#bTk&|;XzT*MMQ
z=FJj3rgiEU_5Yc-l)O3vP{J`WL`EXf0j|24E*HP1V$F;FmELLgvC)m0d#jIzLBSVf
z6!xHDrepAYsaqc}xb)%@Q`y;p0o~X0)te`DCKu7TyIpojU&{a8$xE@!V_K_F^wHMm
z$QJ-_B|HbXfw#Q@Vatav0Pye}d*V}m3+9|5rNn)_pJkDsh!4|eOU^z&-VW|vxo*NR
z3dc%xg|oNx1Wb;$Rks!|m88$LCjmOKhUfb~b%a-oq(M==ecAe$sY-`Oth&9W{U~5)
zF!Wa>+gjc1z+?ET!jW}*uNm}mQsQM-TFBDYa46b1rN3Lmx9UEi9{AyZFes!tk(Sq>
z(kYniqBk}y`c6G?>LAT4*gFu2q6xca^5MUpR75aA7apq4OI>Yf;jP6&wr-e)p&~Dh
zNc+%f?%2=QG*!#4%4||J8dVM#7~>?5jhZ-oc4tfwzQ!>|RzF+HgEy$cz|2l{LSqT_
z;5XJFTS3```PHVOzMzWVnx~lE)@*(m!Z~Y+;kwVTnOuDdvs`tOE}Nr|mIhly;iwle
zFQUCr?rbF3@l`MMD9WRxu^NI4h9b5u!zJEW%vXaBQL*G9yZxs<3dorR_0CUI^OuA3
z)<GAaf-<ASU>EJw&AGnU;C^E^nrMdNAWqH{{Q^o`g|5<@5AVkQX~mODAkc;Ovq^fr
z+SKo`4%s@IznYu3d3Io(H#8vn2Ou%u5a^O^CCm1&DE5R!_X8JJlRA6IT6%!rv<Ptd
zZ7FLNt3ki17udeu{v4&<uHe|zZojELc7xW=%L5En0`BEs)#$TVeCHl{q`{GFwj9;+
zyPZ&QiZpNaa;xR~J$f`~vrx-I?(<{9<$}G1-Xq>G+ey87xk?{a*ZKjoE61AS&C?Kc
zKXJMw=+LBD4frX~IMTS#ih9IuRRtW34kr7dczbX7Olp)z4^BWT&IzTwA>f;fK3q_t
zgTE`g$|pe-2qLbnGHtXX>t29<%4xeqTsy#B{Iw*ieT}(g->2|jLEOHOpC9p=9&F4M
zw2LdGjxbxk8iv?YVy*em@K5-dt*X>{{ha->5JD(ax-GRHI1P3jM}f-^MP3|l`}}er
zz708{@X~GOnccfyVHnW;CODL>G1gzbZpC<ks!O+{WE(&<POR7nQm7!!TEHUcd;o_!
z5bS{-v&W?VsIG~$<2y2z7?$7F%0_g0Xvymj^JZTGj8|4+0JzoENc82lj23B4Y=Kph
z`SSa0eF-Of(qV~w45v9~!y>21)(SrFL#0FIgg2~?P(I2yBG|^*E3R-1iye2WYGqJT
zcW%J^02}c@W8~Ss*UUk}@$WLsZn5S*CjYSZ(eFnUi4LO`-@SDaFLDc~9$-=M%HG?4
zCzZWNX4Nk2M6_CAn;Lunsz4LrEF>LNW|-m*-~u*fE^i1AvIwklwD~qZbC5h-A&X@-
zgWenD<NJr!_5fKM?t?agJ{s)LV7WM}C0f#yzB)8|?#F_SJNV*<@4AEECi@k*p58f`
zjZ5~;vPqt-U7j7JGUiGS1ba%EW~DsGjCEEu9?TW^ZoG&6>eJGj%Qw(eimUlVQmdk$
znn*`j*vU?|vGHbm^%XLeI9r3Aw!I^)M#A3NvL`!!QgLb~cYukMoZb8mIvy`6aqj73
zz)c-Ap(b_unf+q-o6}<5k>B1@m)~HlnL-T(IzG6_P2Dx>W-uN*MTQU@$+)u+QHi$%
zp0IhOmh6P}iSe1eQF!IbxQA$_A(Yh;Jg;!W_o=J}iQxH=_^+SBs|k3x6d?}F=isa{
zzLl~k7;&d?HmVBXti5QY`-GOTNGLen5LCA-KULxhnvo+%+?Uub%XF7yan@>j8NxQ?
z)qhY4OARisV-Aw2UpAeyz?YCZw|@LGQkH+|=IaJyvi;6#EcDHYVdaADj2~v+_h;kI
z?C4{d`9AT)DZ==?gW4pXGSXUg9yr8H9)G?04f^Hq2bD(1_hCubJ(!YW)hc}17q_Z-
z^i!3cVZ$RGl8v2*@Ym>-s1;@N{V2ENGRsBwY+<}SzQ?RloOxB1Ndd7L)P)2~Q$tIG
zG4CM<!M<4f<xj@oerB4zR(v}K27Ut*F2myBpC(3f>#h6t)3#MN(?GPopga<kn`-{B
z;~<)UKNewD$*P1eB&0pGLK8LF@)ja<$~!h1xR0?+q>+p$!MHLmMOaKqY(@9lTPQ)7
zFxi^KDk~48(wg8TP0l~Rf}hIOm>Po%<XqnLXAH!HVolSTz)>)8!^i+!4O-x8_)JpU
z*iA~wmuC`Kd|z9z=LUCAW@0HJBsL@QrXr)FTjO3tHcP2uIX?5IupG|dN8a9-5r7am
zrpoKa7ks$?l^8tTlTH5g5$E39tiqnmVY<Qi=;T$H`glUgtp-j$M*}?w##O&xq0iqU
zq1;aERQC3smhTpEM<i*yv39pyF*VcJsA93^>LR_4_9vL)BJf5S%Db%!QFxg?q}QHF
zcs^Ny;D^RI>+zP8Ed}Lc28})K1(|hIq|xrtCGjh5mc6&)qo&e%pU|$n{YFN*R_wB3
z8@pI#(RBcf9Z%ow^hU@2PBx2?X$ic#)q?wS8Xq%(Ix_Ok=~s&{Ooa1cN`U=%iP9Nj
zkoZ0#zh~L*r+s9Zi@H}*dJ!eJD*JI5k?mf*iS+qiH5m3ngKCB;skR<o^glDqf@2BW
z{<v@T?#qX_g;`JNJFEMZp*WK8EQjHuQoHok08nfb0;9$l0H_KaMbC!>-)<TUTlXaV
z<v_=}`LjmVaL~r)n(=^Zrmv`ow3uw_8FnD@T`aSM#yjIW@3*C4oP_z^23%dQcO=?p
z?ICx3e-ye{yeIb{vCOh`kq>w56hj;|4o&98*}hMQ=?2$Q-AMgQJ_g*^8kQsb@8}I$
zxjDP$ZjM$hnct)=HlrRF`FF}rEbj3UAa-XzXW$Aq;G6ImcO-g&X5GK>h@H_R)Uyfm
zpsQBDo5Ej|T!<d&(p9=$%T5K3-Qo{?l=Z?B1Q*J0&%Ld=&mZ`5I9muMfg)jNk%si+
zLS{-`85AS%VxMkcq6U@jZ>-!Eq(+lZHbyzn>ss5gDn1P-9V1hr-5>hn)Svkh60(?(
zvd9^tN#}wZv?@8J{Q}tk!My`B-6lXJy)AN6{JG!T@k4m=*vp*g0&9}HO)AnhK*W}0
zRwv}FIy2>|>)0`w%O|}0RjvM7nD1!isN5{ZgR*Q4GvYCN+!`L};Zb2;^s21okne8h
z<?#Y@9K4T{_!CT83_B~l_2;+zP-Wcd+mT1i)+djq0)`GqEx&2~GTe<lysJpj%cy>r
z5T(3*w2Hjan3d-#_UhR+&MrT*<2{SE%Q1B<Fwk>7-{$fY5&1&8W2Ska8+Z+1i~B?a
z(s<?0yT8PS?|r9}n(tx|gtD3?OsVNB*jS}%4Y#|7U?=YW4CH}oWUrE4WW4pi5dPgH
z4Sjliyf<rJVIlhx%OQN5Mwy`_?I2FVt=BE3`I17>{FFRQo7U|pJ@&pw#^+dzo0cCa
z2cMXcGbMh#7u4!|ZfUhQ8+zvJyhUO#x-D$eB5l>q@Z1a=`4DUZP?BbO7Q06AQy%?V
z1r>ey2_L2;9dmLvW<GtSoLI9z$%23VD8c`nNzK$de(k_})k_V1he*n;u+iaNr+i4S
zoCHOe)Is}7q{<3j(a;Jln2NflumznT_rH9$+^ztFxCnA?fPfq&$$i~EiC3pajGT?k
z`xc80B#CjKZZHU_uN}%}4{QDLu@DTlA<YS72>v9^&Pd9seWN&RkX`g_N^iilOOei{
zpzEDmx^t<`NTHkZnb?-u0dBmfNK@OWR?}qY0K3HME62ArKGSF){<swQ{FDOWl!BYV
zKcs#P33(<C%5o0}@*75GBL)H&@jc0~*tC`3j1V8)juyHhr~Ak&=b#<GvUu`<l$apN
zH#^8zZj)rRyBfQfo~}JnOqShYV7<~Q+r6=M&pCKef!5M%pFSdS>2+888(P;yQru+f
zg}5Y@-A$=4Mw2#QG{{n2%BF>G)>LmA!`ZW6OGtkeX~SXi=gcdutdgiRV5*lXW^(-b
z(w%77u0U8(q;Bv#?+CM3YJkl>m5v3ux)r1Uhpo4ci?V&UzEPwEqy&aeK}v@1k}d)1
z5Ezhd5v04jrIGG#q*IWPPDL1`1SF*EImh4L``z#JzW?8!+wq$5yv}1CYkk*QZ~p8X
zNZKRU4fl+v1kXBxXfz&lfjNOg8Gqt;4BM^L)Q}rBQa3-73d3#Ez6!_40n5XR7xeFV
zL(?Wk9S+DYkmmj%)aT!8lxE82b}yzpdY*DJav;Tfr>K2Kfm^~C_9z>hQiDF8)y~y+
z!fd~IU<BIqdq)hGlgzftX8hVuIBXZyVID@~F{oz`;@(>n_Z`bdU#^FFirZ2>vRcd>
z9W*&3`V#c517&a6nB9M6Bh4>Wgx>Sdg0^vn=h$JOh|LBgmCKS3@!#7$ZTavHLana-
zXU2arcFyH(GK8$ONz{lvZ$8bG_;<b}m#5?FGAwqf{}|Fa5~##C8bDxWHq{^9w@2_c
zCvfEpX($Z2|A#otgOj%~qD`GIIAQ**MXl--yo#uf_Hu$o&Ms=j{2TUiO~ne^pY8C#
zdJ9T(QC$LA>=OA3AQL_!eLc`mqOJbi*fQLCBlEQdSR+qep2%~y?lh=uBxcn2v;>L>
z6qv=*T|WwTnz8v!cM^H=zB+cFaJKhXY=_$4p<%p|K%|q>s8RHQYd`Go!ixQ`Rkmm*
zu$Rd+U2`yzi##J+jHK5Soxnv^ozL_9_^qdlyVhZQFT~G+Zm0Bf*zpAa@|ST+o!xp*
zG`K*R1<kM859uNbd$I8JhM8f3^Y(a=K6j$01IyXcF{-omk)226q0bYqx^dghuA|mb
zHh=1$R!qIzP|*m|dtz2w#GPMPi%;X1(&Gco-hwcxQeJoO@X5FtoFops`OT#Nd8$!d
z<70a4RpfJ{=4jok_ImHNjp~zj6w^6@vlL=H=Y&pU+@6K-4UOu3cjZ+#%3=+krh>)}
zza+cg+-psPcoW&4yB79bz8v3hH{bjQ2A{Kfb<_#>UfZZOg1ycFF=L;1Ip2&%SZVuW
zyc;2*3nINDR%XfH^UWOxu4KFq85=&jjAA)2aG}Q>ujlTY`#zV-`Wtv#BBSM7?>RH&
zvLTn{QleZ|7IlnTI2wu#*%7dq4DpBJC;sIxDS*}3_K8`wwC=CT2>W5kRxg^d`#oV;
zyJ;awi{s5*5Y`{O7%rAI@ma()R-Qt``c=!(7A0pIMYYosZ)~|O)GuQ^^~L9D$14X{
zhSZYB+}Ye4ruYyiI*4;W9z!U01uiBM4#x3O{sj25oo)(Gb*Oiuj_L=H7_fUCA4NqQ
z%S4A4so3T{>r(5qYx>Dy-?W(7Np=*M!dJCmxcR_TDouw-QrNF$a|l^%AK5M4jO!=_
z4M*n-CFxG!H+z0%YTpf0QGS7kF1W^>8hDtj6U0-;riNS-(wKPlTHm*HLW|4}d!<{)
z!mgir7uEfYH{yO4tP6e}2hyHSd1EVzP<>WM+#_1)aPM`|2I6tr!6%z>?=DQl)r8rt
z`^n(iU{WU$Tk6Ymn2;FB&7tj~Q78om3~dy}7k!s|?dW6-Qe#KxJH;-y?vsSZ?wU_O
z>Ka+RJLBiFwV^K3Npo-hwsV>Lx4UFFkJ2rT#Qt>;n9NlP5wTHfqr}hQds0fOUyeK&
z=Amvb+h9g&KH-=updTn_V*`B0qYof2ek1S88~NZ;Q`6UhJ>f`%9JdYj!zahz`1%TW
zDGS*K!xFSL?$h?p=gZuPphguGqa;(L@Q-|*v;?Oq-}9xtEqS8OW^#E;cg+hNFL~od
zpN=rE=c=9Y4hG4wl}y!r!Tj)@G618{n~Cf3hw&hG8x_x8<`K#7a+eWuQrDyw1kjw2
zv&r*udInYpK_(hD_@D|#5$51zYBhJ&qJXK!oFQcS{p9FJ<R_JLY3zN~6#jzf4aZ)l
zhNkYiGG^xjm#ODX+sVn2<P*#Xf#wszUUzvG2D2SfUhy*=My{UK`tGia&d~d)>gx*p
z*~S;`ma@C5i#k0O1w@kt$|R|I$6x2F^8SwX9=q@<TC8bK=+lRf&GAE+g0O{G)6k+M
z-dLO2mXB-<JQF*xqFhg}%qgIY;V6?#3RW#$^wxBVJwBH5j0~$SUw-n{$R$><?Tq}l
z=&E4<MPo6Hg$~D|*z5D-A{>nAGP%Dw^8Ox#!(>X(c`uosVLTm8Twt6s&^+9ZxvlWf
zs@*<$qe?G(letT09A$J%o?XXC10?#n1kLKFOLX!OirX8kIX&AaZwSN3CTNqVC!U72
z=<}7<?`Uc$l+%*`ut2Oli_kSh$`>>yio2xrCl5=L?U%CbXIZfr=Ya3VewM*uG(y&x
zr)9B0kM+H?gw^|45n?BYJ_`vCTUo)}wHRqezisKia*sTIpH#{|k%^Y!^VH(OtX3;v
zbb92$hS(;QW5MTbWS4|Cft22e@O@Rh`Na4y%JV6M8u4kTKHRj)ueOu?zr^u}`{F<}
zclF!U{ojiFb~qySLm)f0yob>I@gKBr?SYKsZnSJ?ezDBs(&o(M$<mp8G{dwFx(Swi
zlHFIB4kT}+k1P2H^hL+i${%0u$;4HQmxK}sOTABW{172#LU&276sJ<QVD^#f*NNED
z{fx7Wwsyoh)5)a1#z!v&>1F!WK-LI*f{>x7Bky-1px(v>OKjplwV`&89N!Gn@|lf1
z9Se+AgG41uulLaXwEv2J?$n}eKoVp#+J+_WxrCOF@&iidA}30cf9HB6D+cN+1a%dr
ze>MR$-=7)o7P3A&o!zTSZf8a*lLq<wUx9O3s(Kx?uHRj>Zxf{IXP{0E^1@;~iuip_
zzng)gTc$Vz*=F2-X`FnKsrWhWNa^2`dr$jNCvTmRT&xOg9-~rj2H1US32ZDoo*#{T
zi<56h;xVWmAwK4?J0*+3(ewKDfnlvWtM%J*xJp<uUZ=xvAL&Qti>1!E+bfGJ0(Qr*
z|Fhv>LhsJZ-6j98Ku|!-?+AR_0)lmX#Xj8{psiG+VkEb0Jw~W(eVGEzGx8$%6rE{I
z*)}shH^8z{<&963w`*YNl@uE5^Ebct#^`39SYm~>jNTH_OCpyUCaWn!4%AaEgHWr~
zQcQ%Z3U&A)tVsvN$Fp>z9U{A*9v}j~RD~$7Sf&w`3v8LgT0drPf`d}NCkQS>KP3ir
znbj30!}>dgYsmmm?+En*a1ZU`)Bi~v`LNGCZaEqxYqUT1-JqkwSPz)WdmIbROOo&?
z$TNO4`Q$3LOt=tqJGM!9rw^*7Tu5sQTT$&R%L{Xsc(_NhHGShotOkCP`Qxtg5uPWG
zWKPBaTfg{FDM`vkd@S6?JCiK@^Cb0)p}p6!P_OkAr3n?modRR{WSrcK6gK@LYt^Np
z1%IO@v`(|<J~5gmpMfyG-QEsd>LwiPS(3G|m5a$7P80hRJMEdJ(Kqx?xTf7JjT}m|
zM?a-Kb{TQ(5^!v7MCpguAF2#xI%@1i<z7V3HH>B<%09+gIN5tLkGpXQZ{e|GlnD3M
zFIpZ8%B0y!3}@eh=1cL#bs6YFq>9>d3cFD@OD^%7$Iaixry4_Sy8bPxJ~dOTo_X~p
zCtSWl$bMXz?eP6AMWd?(*BrXbqh|`_KDw>EM!B>d(>A^AEk7Tg(kKewshi;qJD!a<
zvWAg#j*jt_v&!vOllgYe@Bxhu>qA7ruV%L+lT(_nmwD2W>#D+tn2>|$H>WN+Qm<gR
ztOgN}9gEo%C9ExvO7D2eUJX{ZEF%p2nGh+ue*cuys3l494g}V1E-&5&ABrh@C$VFx
zF<@02X86KR&LeXSSESSFJiQ`_@eH3m$8jLPDB&?WXh^K($Qe%2PDNGD`5-MXY)?Bj
zB<My793|-~$48iv<(yvCQ?9VTgwEq6LSA8*fyw&-pihd!+j3*Fk^z&?a`){IQVYFw
zXmq<W5%qG)31KW0o<zO+s$<|XtGR16yqVF;&(jWZfKlehy4|oyA{vj*bW`D|Vq<PH
zOthQNE>v;62iQMD+eu}_4*Trytb&<lXb)As-cY}S2-<O-KxoC>;<pffwhuu`6F5{I
zGc@en9?HV~!gSd!mnU1l$&ru^NY)e6_z&p3m_N=|20!z?*ymYY{BKvDUH*PcOa6`5
za>Aa-W|HWC-k%lfEye%5ub+fy!1ox~Lv45l1MakRl{5)`h)#R7@uu9w!$%}=v_7-9
zk<aH@7YdrCxy)`HMO9Y73<1;Sig&dH9kwD`8Aqn^++xd62s94VOk7wLQW9B*4J4sV
zJ~z8DR*=ICGz*H9?Uh=BkcjCw$kX8yzEKt68^qmwkS79caIm*YJkZO)cz-o&ioY4F
zH!{BiU_t%A6Aa1Vbj;2jFOC&4o#lnpixdjnNKxSySlCL*@q6qu7a-;%A83pY!}=ts
zLuy(~^5dGt<R+{aje9>(fSEScK9z1In)Ex664Qqu-iHAKyuN=&g+_uN1g5Q#6KBa>
zh%;0~94X#botPjYGf&yG$oxU;3%<lQwJ@a)p%ZMj#j>JfM~V9`c}6R(GjcJBvxH`9
z-Y<+SX-HdfkBI2mvjoDyvgZxk@_|S%II={s;m`6*><V_Q9{IR@(d_siG{q~LnE;uR
zk{}XHP^OfJnrqJa@|NLs?je9n>cq9-kpb9FyG&ufPZe`QuyW!TTH?f!0Md!y*<lUO
zDmt%r)4ig3=Fm&VEOF)vN;X`VtQeycgInw5VElp51ccnf!L}=4xieMBp#&Ln>jZAi
z!48|h(vTp(@=>75YJ4}#t0EWk@lwhWlc-esOk)rkKJ#j}-9ROSH(C;xA#Ik;_!&!-
zO|C3MJ-zgRT?5eT7p-tN<tKtKwHnLiQZ=MijN^NxWox4d=Y@MdJ(^_=fs`2a3`99j
z)ta{3-RF)8HL)yQ6r3<+&5r>b6T$%(BokO$I=3i;By*!Gkv}f2=`*7yixU4b6cKL%
zAtXlhK2oV(lA)TC?DtAjZZo~OyT)`dTg{H>GC`HfnOl&Av_5<P1WKIyzCEK+ncyr>
z4A7e<jXku%%jMH8`a(7+biQg}>L=2Um*eU0xgp7a`DmW0(8<c}&VZhQG%2MEoROP}
zD5Ar#{vSQU*krt{sI^0i8uJfO@f86<;*IwC_P`@T#-C82kcDX6UZ2m~n7(MOfsRi*
z?gplrtIPw%#sz032!kM?<WNpe&gxnoDf=%npuXX~{X;U>1${gwT5mGiw5D*E1Pie8
zH-0%3MUpR;iggC9>*7>#sZ|;Z<(#@YF-v(<U+fG@7;$J%G25RSkB#^=3->q@#*bmg
z#|&%>=1BOf@zr&9tCGr)!yfj8yDjx^!T9U$H43sNG)_mJ>Iq!JzvW7vNO;)g@a%#(
z5X?)oCb?~2ROx8_Zr!Jzf5c&~$?Lnw?Gg!SiwyYTgSePIeH1q?QTj-HCbiA!KPU<{
zoSk?vqSy2?Sv1d#k;Rhc#<p0ZqDUGC;vEZE%z`8yO+g^+YVH68r2NigR72M%m1ofi
z0xE(lQ%9E`C2B}RXh*Yzw9_6GyicMl>*{WPn4!ijBK=PK8pa!C%!*EM+L)r*Ul2c6
z5V6De8~P1eSIh8yG>z+YXwY|;90)njB8LQZIAtKX5dT{F2sT#Vq>hkF>JD>58ckEt
z?uI@~n85=Q$s%IqJL9Lh4HFQ#hL=#OyjPkGuQYD(7$J@juXQV8rKXa@z>;d0Dw@KL
zX`adi`4r{jS3b~Bt8(9?yOqwwn>5ZrHo9Wb%%PkxUq%_S6h+4OBBYX;5%^M=>Gp5I
z-O>N`BUO3YBfr+4o;Ixbb=6AG#7lzXGIIq79w!E4v#83QT_mUIGvaGfTJ!G4iO81y
zAjl6&CEOvI!eC|p$f}EP5AGM#o`oh}li{U%aWOO!>z2E(A>`;7XjmJ)!I;Y>1!{#7
zCNp@d*S)r|)(Go)2&3}14IE9j9ax1b&TFyNDHc;wm_|25M)8c%dU%J?p&KJ0P5Lz4
zVT#tI-I!A?@n3X@P2d=kTZigUQB(W6P;@Zsj1<|#N?@)Bp8-P#<*VglM)7`V?Q`11
zf*-&ouC||9#3h5G$wE{-D$5!{lW1PFbF!7hF2nC18)SNkN$`ZI5?^amP76`8H-H}U
zRP)8$y4-~EOl?KVZJ@RHSBPYWT~iw6ysiaBmQWGrTsMR7sI<ngiCZpQagpJdl(fwh
z|Dq5nVjVluHf^mc>3kp7qZoJVb9F2ZvP_y^t+EZhvscldXN~<Yms;5tS;lZM$E5OV
z!2m5m<g2hT1iR`(lqqNdmn0oBvWCF?3x-}p@K5tLdEgH&jcW}txeAVSm`(6lBIE51
z_~4J1f3inb4Nkt8`eN~t+qZ3Tm3PX<|2R~dBjaSa?~f9PV|QvFtHWZHgA?TC7n73P
z<{KczOI9Sl-$?vZYQ?=zGrFYmNw-|jXDM|Khser9aR^Tm>33J7yr@b7!=$s?AL|a=
zFYI(t{57~ub<mWbnT~R)9hN)t{BtF}szbCK46vx^vYMyn&-FT9XG2-6FA|$~8;?f=
z3{t%@BV?oKDsqxgLLeKCuY{<h$WrN;@YoaHV4HOAgLrK1y^blt>Szm{!?q+%gJgk6
zE!Jih^o!ufaN-@q28JTrbvqvd6@84Y(0JUTnNQN9D-|$^k@zTER3R%)2nD22ycg*=
zIn68j;ba$^qK(*VbT}hR#&!1r8<&T|a?0C%j^e+S|HYl)EBU{<6JD$-9Wr%sjXN)<
zIL}_CJuOiVaDDU-P|gFpp8*{!jgLD0LxT>0kph#<t|2}ocN3o90z`S+1r=?rXJs7p
zY7KnfC*HcNX3$78zjjIpIYkPm!T$(KN_3l+WOqMGiy^2+*w+s-2vuhd3;0SF)%@pZ
zW~!r1>zlYzO3Y5KF(XH+tjXNtLj2R@OCm;Up;Mecq^||!`&#0P=$x@j>8{CsHw-N$
ziv{2~e_Cvpj8@SPpCGtqTBOT3Kp86@Hmc`KpnAQS)SYu=Qnl2%T-P?;?i$k&*UsS5
zc=*Gy;@S%kZTX^_&U=9I${LKXJv!wzuax=?p}Z$w&o?!s(ep!?AG<ueKFJIy+uBGJ
zD)R~5kz_kSkoA3~L9A&1&F9Om%@eNwn9TeMqmVrFYP8I#D6XgDRKu6l&n+u|7QJ8I
zz3{>u<UMw>v$$&8f9~Gr@$ex4-ecr%*dfl7SAc;*=2WaPH~v!9H18_E@|CYN5)aiv
zYVfI%=?wzyFa9sVB$mSthOL?rFu3-#j3BL3{A&jYM40h>#|!7NT0ivvZ@<|);3H!h
z8Zrg$x&N_xZSx>zSeuY3Aw&`>E85TNgzabb$Jp&E+k`)JJ45E`e~?>-t=VC${y0Wq
zINVeq)3S?~+wrTBkBX`f6+XivUtb4e8%flwM7BiVD|;_3IjAxR>oKWbS1k`!?LEpC
zUtq*ollV2GuChO}D`?>Q!H(Tf6*7@$<SCl;9rj6&6-?Gd4^B1^f0JEmzhaCEyUUcN
z5r)phGZ1yz`7mnvRo5b`@CVD%@(aid;g{lGEVwe=sR3sxi`iaYR8OMRjoQXWddfbk
zwEcb5%S;Bce?>}@n{)f7+NanbJX_wGQcAe7lwPy-S6Qp;wtjEzXel-oKC<rR6Pq^L
zZK|&DW#JkZ+p6Q7Ja7B=WJ<!3L|>nSTd46tdw-(bSmt-3G`El2F0YU;zVK1KLKK1i
zYZgL|Ys=Orp?m0@fZv(%nd>y@Y&=IytgZO>xX$MCCVrPNtq)=_FK2xSRR?gnimSXV
zVfVT#e&rr<S_b=)UfyNf{Big>AXg;s>W~Wa{v>b(Gi2D&1v$@4QtGOfUQ{yMPcEOB
z*G<Q8?=+5RA|*X`2L)~)ppk#d77QEu9NI#S3BuNDzD=MTv|OR<kVlU`o*wJIs)Q5`
zoAfCHeSONMq^l_<gpGD{ygoDsQNCGT&zVIpC9>;gtiogN2c>a+FW`7gPf~l{`#tE?
zi8m?o?l#4+E4ufZj&mR*!b@P8nMN>foA!aBXm^WW*%R2DP=vjo0`AK`n8Pb#wg8o5
z+K*23jUBlq+CC@#{QKRl5965v5iAh@Q$(bV`o$gMCR-)X-nxNL@yClQ{@t;^{V|7j
zRo9)zz)#REKJOJJB<dP{nE62FLL=nxkQ2<@0~i&mmmfg^wY=BQmvXdfl5lm%O;j9G
zUOMUrD4w?664iS7W>IoH<=0Kzoz&}+?j05vpR4JdxmIxl*=5XWbi<1Vb01aF`6L^S
z581j`XXIZuRVO>XWeYAP%Tj7!(+6`KTnGQh`iugs&l#*si-^wf)$P5-dak29e<8)&
zG+*tTBYcMO4KCf8StI88JRgm)(dr#Q6iNTbwBUO#s!Veew|-C9Ro+WohNI=x|8m{S
z@ay0zljw)w(r-35^PAyU49e*RW*F0P;hyDQ_;z$=ZybA2cGV%PwGEnQ=+=5(RqJ1g
z@Eel{hebatLCUuKTmhdV4T=?ku}{RL<qAw7)_O2*ZuX<3$ZBnL@>Zfjsp@I5n-+Z8
z&xg`1qgv*ozQJl=5H`c;Vmkz$usi-Q@DIfjnci7h(TUnKZ2_y+48PaW`m|OmeMicl
zyHW>j*z0MAZ2?isG3_cZT)m-$I*8Gi!GK!4P5P^RGbNh%A6B0&aW1AlEQLEP0nCAg
zwt-WyAr;`lq(Qf_y&qAH6pC&xBJxsJ!(CvsW}~VIW}0=rvt&OSB@1(_`mkt5Jn%ql
zYE*uNmDIuMgm_tQ`4BVfD#hnNo|b3#e|M%&N$)%3)+8=9ofH3RI)`yzm>1!!IQOow
zFc`o++w%9HiJ2YMd&YN8`Wz&exyxLSY=gSixw>D^l)c4HylSXSQAo_k5Z|e)mPHo-
zm44__L0LxatF`QZkXiqOAP{E5-VAVaiYLnO+Dx;shTynB2-aZ=Q92tKfw_TJ>*T2Y
zVba+HsHjK*YJM;dnf-WK%E^JufnK7=i$ms%T=8vIcaXTuZrh)hong;$LIO}`zmQLo
zoqUS|WW(SyWb<#^z=SvrO%;u|+!2VRd~_n$rK^*RFv?fUe`M6(+b&ldxgbFW-I#td
z)3J!|V$QjrvR$x{o>_=J{_;imd*zc}smZGM!aOhUzQ|_oIW>IR1I|!&^SIi}Z=s@3
zuT3$cbP0Ti<BtN@IP>hFMsZ^(eb9Y4h`|)Pkogo44;P1o$76rg`#=bnC5s-e<oYpK
z5mv2VNoRJ`2|TMdx9jS<@C$<Q$`Ayaf^A}~OhD=q>Jvp{7usK3J!cW+A-iM~MRm*B
z286r@FAhlftrhPCt4e)-W3)iheK<|3d3m~|^!dyBtKE?46v2%$!~Y6RJy5UD739Ka
zO3Ol3U(93XdKo;@DYULS@RC*;y%%X4r}4#GcTl_c{8T{5xEo1RBBJ0Kx!X^FSTxUF
z+jqTGfw8{T5HkA`&jAzhF@h0-;a3n*uNJ+7shBL+C3)wsFZJ~z<i2r>?hBQ@LT6FD
zLHn9lRQ5*0y2L}xJ+E$1?opsWaE&TVTNMR}Y5bCI0NN!Qj5<)R?x82CirDRY&GQ(*
zL12(gju|1~u_b*)8GnJItIESR*VW(xa0?vOS?FB(#YwQBT|6Ek%9klG-jtQeM#8@s
zN}cUvsOR=H5O_taF6a4F(Qcwi8AUI_Kj=UvYp!<7ZSW{a93FR<WpGgNSSO_nQ7u2A
zu7Q>b@s)4JB{ROB=Ra>{Om+T;B;ga8vt!q%i-NF+ag=dQuo^9@8EQQAR`vxvT8!TQ
zxpc{-?|X*N%bW9^fQ<W8V&V^YTXZ~ppx*$Hq1TC=@*w#7IaV?Lb-&vy<2xNUwtK|<
zNJZ&+bdd$pL~S|Y4SQAuOgW&4>e*|)@6AImVKZI6zCzKMo>(RBz1dJAO~_+N?Z3g)
zc6Qia={aUC-iwXx=7FAtI^S@WuekQ8Sbwp<>Yv#p<3*a{O}<LyOcioOAgPj_ObI&h
zMk%g$jPIl<Y<re?<55xL2e*CrAY$<iL~We}@|ByvfirE?fsuDS%0>Yh?a7RyY18ph
zh;n-I_R6NVU~D&^3iOi<tw7VX8-lke{O60CIy(QxQ2%D`>Bsj(gYKl`E(#&ii{!N4
zOK4SALsa({vab|N^Y<&cCKSjH4e7O}pdWW)Yb%68pEJaIW_bvu50Z4n&~9HM-2d9t
z##3~u#B^#Xi&jY?VM|;guss@U;qPx9rV@Y`S!^^@K;0L@UxWUHQdozWn|HL2I^v4+
zP#zsZzIac3(V$>~Pj*VordRMQvP?aiX`u$EhdwD@7rS^B^XY7f!so$gvSQtMRGKw{
zS%(Gi2$7ZWlo+B&b6UFn@<oF1dH}XFnT9CY(hcPEG^~e;&7+{U-FiejxKUXoS-9-h
zu6B$GFAJOvi1DTb&@qbeuvkzTXE2=QZ<%_;`zoRVNEh4wlAMn0d1XfQ9aGOj0jdxr
zDoKq6p2eA@#Q=uV!NxyC=5{YVmYHYMB$M3Fzke9YgW1D2Kdd+nK?dcu8=A*~8Bi*c
z82aUnK&YPWtBj5Di$?!`WT0jkYf2%xFqBD%c1Hv=YxzRWWkB>NoRhCa)hw}#(+23r
zEizvz#mvz86VS>hK;luYt1*;t4=CsqS7-a>%tovxW>f}o-hq>}ZlKnp-rAZ9;Y(2^
ztk+3znB*jL4j?7Me2rjKOj}myenn@|fn+ACi0T%4K;v{i;fI)kOk+gwK6q0`5LM{Z
z<q=60nq!&hiby;Cd~|{iZ?|3KwBuWSJ<3IOL2pKGeDE66bf(XQ_0wEl$xqlu1bQQM
zUuu1%84LCfMpRq#%m7Pt#)Nd3HbJ*D4Sk&VhqT!ocHcXqJ>w);W}1V^#$+7DCT`?g
zU{sNM+hr~Z_Gja6Tt?J0iKF333js*sYN2J`W)3AW$YpO#6Q=)aZn<pYnjKE{eZ|{-
zQ_vVUHeF@wFe_}jjLJ@^n8G^A+qhNDvZd;|G#$s-g{Mk;BJuAY2heolpLQ=p@Ipyg
z;)o=%V}c}YH&?;%2@kP{;ge!Le>;(3f5?a<##@sEvd(xy6`r;I4Q{X^PF{COb0q4h
zS4!+y1x3*hhQpzcYBOn(QCXFOd%~>7pGp!&NsKDAq&cB!etAjGmSDwliLN-zsvo>K
zZCsz!ubNA;Smee9rT+e*^Mt}K|CFqK%GK1{#tEWYKz4?mGovFV8kqM>O`8PPK#gVA
zFMFm}w)WUv>U(PV$2iCkzgjhkdO--D7TQTb(@XObW7CX3bXtw(pG>?TTJ-6hWyq9k
z_x2>UnuiFCvQ*fpmytR|J^3Q*POCW<ls12-Pm)KfZHl>mIVrlyHM6@yuQE%X$F^c)
ztmyrhouWRbVLnO-%E^%@GDF8ML8`$!(UK#V(KIx&W_hxZjcJvcr9DQ&Lf1je>fjj*
z4151!8uFF?e`d=-EDUXg%k6XIj1uL7@~n^CPgRl_a)COim{Wljkx^<Xb=<9LQXq3{
zm}+8ff;8>h>#B$;9!yW5gSm7~Mf?br`aICf{fSrQJekMFf^__RCyurQv1mCq`4qsN
zax_k0?NneIrM{Tm<keYcQy?$rrKY>wDN*oMt_>QqXqg{v;<}4^ZGHk}@cL6=-5zf7
zgVV^CN>2~fM$CoQu3X<Dy=%LDk^E)C^U-&46GJ6!lu@l>>btvVu5Yso_gRJhL<r1O
zbhb_KS=^-4Y_G-m<vXI$|2GSO?%Qv~vUJad!U#n$NP+0L6_zEG7e;0LfxZdJ7GPN<
zItfad4Is`MJG2il_l68Kzd*VU4kQW~qh-N3_vh%heEzN-nC}p?+jA+TqHsWx*QqnA
z{)~SuaCE}FsyU-F`_24}+|{D1^^O0tDTA{mfl4<3TxeeBI41>1rtvc{&PKaE<C!Sm
zr+!%SQ(qJNL(Rw&vmxfp3129C7P)^6Eh13`n1}Ia2<G88(|@0sgW@>kUq0!O60tz7
z+C63ZM-Th2U{yCWg5zKQMck9`f6tYUgA-f-`7cCpABYMB`Yz5OOX2JdDp+w+72nM@
zch0{4jtJ$Zf?jjdw})ywKVG>h3V>cOn-7V%5u1NVtLa9SPt@Lgjx%_<$@^>W*(Gm|
z&qbU4)j>*(d+?-+b|RP0o9LR4h<9d;I5D-~gm#7GC3%>-4f+?f<ox+0L4nIhn1(_Z
z_Ow3~N6V$M+C_M<bB0<0q}rN~YTnx`7I%F)VN`hqzv-hRNhrI)NSR`by3!l$xv_bQ
zsUs12QKx!Z!;QJ^ClqJA|H);6Kj}N+1Jf!%oj>M1fVbIXXutp5uP;-qg+bTAjED8&
z1-ka5)_w=+PkSzi4;3peZeUj$tLIgCd={OAmdqSP|G+A?r76OD4PIYzA7^_Q?BjKj
zun8heU7K5`y-65r5K5{d1V6S6lZi@m>G;>zM#`HJAJF<9xyv!-3pR;3B`b%~iW!G;
zlS&T*=231Q!5vbrzzA8bqh;$jj3N3C*nby7o;FaOl1SYj3Pp(-j1=1;6gnlNkT*(6
znV+8Y6CZ%QG!-f~X~8XW7wtnXN0||fqeY@BtNQpB!f9TA$*iWZ>kh~62WXZ?&oR6D
zr0MOudXI*vs?{zU%ti-9(ytcG+99$9`kL_Advm7@Vi2yf9f;$Qei<@hJ{WN%2AYZj
zT9_lpx;=*_&?pL=KzGk<dx_`~|AV`W6P|Q2-_CK7lfG-PZMGyW$iTf#1yk`Ean}q(
z7TuE_QoBzM4S`M*(_n$ya0Av_oK%HAb_3XNx`)`A4e6XBi+?S7^;k5hEnaX{Ble5(
z11<(`AZNm+->0^cU0Q9q6y;!$L6x$Nh>djfah?XQ&Vzs&$SU3R<jo2x;dQ1UMWyC!
zpmANzM?s7Za2)Hl&`yLZs}~{Nhu)i9Ig@#5$Ya2W;nGb0f=?b<{sHzpu;n4XPzMQs
z%VUVNLTt**|ER*gAP^S61v)j3KFbT=DKf#q#baVry9#Rhc!E&dAlK>Q{eWyazx%w6
z?luplZ{5ZKACr$J4v50J-PXo>vnGaiT(Nuy+b+_nL|LK=TR>}0r=<FfduJG~-(VSU
zm>6O+Qdoflk`EryzCQ(%t_~Xi{`AMu-v)@h+2ejXnGmD-a015N#+Dp)+mV|3<Eebs
z_YuJ@d#`<m5JbcjMl9EKrHP~Rj5AFLVaMQVIUWRz;+>64CZaY+go<6G7JsHy#OwwJ
z=q?a(emyF92$eRO{wC^eTr9hVCfuPjx-?P{TWqtBxbrX=i+npD`b3ZKE<8NH@`9cL
z`-t~0=W3>SX1<bVW`yg$Zqp$}baCYxJnGEw8P2On^K9`^?U5o;n0Y-&SurZ!;w`V>
z%S@Nq@K5<3bD{#IyS{nnJ0^mh?q1d16^5~#`x}cfecro`=DPqEXAzYTKirF((gb_Z
zjJjq*eeJdjKN?Qi^!B)dXun4XqI<xLuyfOsv>gCOaR1DMcdqQo*1fG)8o`XkzQwq>
znJE&(U;nd{8{@qt$&Kp&Klb4nh;VHO^1WGc+<rw#BqLYA)YctdjPk}($JUMp{(${;
zXvjgGB^mrJj!#USoPC2Wkz_oP6~sk7M-FNIB?k~HqTv%n#%dzGP#<6tXxgloj%}c|
z`qtE2Fq6wXh$Ca%aXL3Gopsz_ZR<KIP0YmLQlq$xWWHYel0+2qqw@YzD1uWOu#Q)h
zfwFQa@+(Q5n@y)DNdF!bh+I{?(uaIZ!oa(4)T2~##_KUqp9kT>vPpm(`~=aA?&3gA
zu^3KxrpJI4hX)_Z46v;*a$7@*)IyDL^%L>_MUE;{VBs;|7~L#KOvqIOe};7PIsoGl
zay*vI;KU{a@RtQ*6s&+C<BPE$o8(H;y@hLo7iuB#kReL}=v$XTD%2DYk__6s+p`2I
zVRq_*W=|y42pcl4slx;r2s^&!#nSDFSAgXSNc*J{c97#bz*!RBzDV91@QW<tz^(Le
z!e(gekXqf1`*TE4kooV$6^EiFA#V1C!AXutS!5~1W<@D?cc4|c!R=@r0kIdAQR5lT
z!&SXB#`2S<+hx~KVv42`Gh{znpvIJ3a2lfM+byrIg8i<jkD*jgCd}B3R+S&eCxpx;
zmKa1MFh3%MOwt-8x(2drES2Oi<3PDGM8-J~${67fWqY8cl%*4rl?<T8QVIF|`BzU%
z^)$%7KFna4brw}(Nl2%DO{rPG{$md`emtf{!KQVOuId6Lp$W@M{aGRnKVH|CC;2KR
zsJ|1SJ+S^TJP!A)BbAdVQXYkqh<@f24%>yAL!ff*@R(v?AQ#Kt{cwY0ix@T8>f#p3
zPN=D!?=Ndl^uWPcJ$nMOFPd8qovpxzRiYq;)ZUkt0=w4>6*k2x*Zi~}Q-FqQS8-{K
zH(1LGF|2+?81yqcJi#SiUJ*`(>Hg<Yqo5tJxsVJt2`7En48NfmV7yDDRvPmY_<Lkt
z%5;?-5@NXGn(KbwamooGb{;%f)lqx*@@lOwbO^WUK@Cq}C7R0+wfR9WfyGT5t^xZJ
zkcmB>JZvJ4MZ5NUfNaty%|qM-Hg#@U_TA?9|0Z>(y<pS$xACdmRtX25CijNfs5q1>
zxb&|-x?u+<GNwMr2g}oKCQKuRraumVZ-Ma7b3~kIv8pZ-r@S8V>xJ}u>QSxL4p+%L
z3|y>?%t}_iE=KTB5{RVU<zM4VKg{<eXH&lWLdl(KP2>gPKGUx~kL-y1+558NpzZgZ
zy<!B5OYH=dV%h8V(uU|VX*bHZ^VM-N{J!)2)@4~F75^iZis2*U7si8-L~tqRt7x3l
z8wu;f>ctJjfFSs^JtGCaOxWc7s_grPftabq!adJxo0D#>p}#9tmzv+(H(T6Hd)Q@1
za6_@5>?k5T_Z|={zCF0vb|&l`eRlSobJcy#Sd6I){0r1O-_T3j;fSs6(3v4Y{;jTO
zsGTJQpV$22(Tcb><>UU`Cl5H1Y(uGikQLg&VUwqY1@h7j3a{hpVC3BoBl}T`V!dqn
zLv>ab=({dAGk&{x-b0z=Zw=Dl%)IiDib&=3WtbJe3YkH}PgaS$b*tSc)j1xbwF+US
z&-bGL7=pQ43wLHH&T>t^iv#tCtAK^vmX;-Kwt(mG$Q<eo$v1{RSmgUT<)iBnV_Ov(
z-wn(MkUgMPNt~&dY79iFR&;3E$v?}5M1G@GBPi0G6D=Og61kImA1{oM_pKczOfUK$
zCkSW6%6&@BfjW&gA`IKhtjt;i=)huu%y3lo`QSAi_4m`)>W)f<DMS{s^yUb1>J|Rx
z7h$Dm-%_e(O<CX$ug@Ev9Pk+qZX-uAJ(|9YlM}PUa>wX}Drj^c{X(N73Uk*FW*@EJ
z+rq4y*WP+Q@$j%vDXLSC1~Oj8QS;}V@U%I(ZMWd|_iyQ}ng5dY3?q=NsVT=<e|oKa
z9FRZj*y(+2IzT3%l?mwP>ceRGj2f-Lpz>`XdEikv#G2oyF3o_LE;S+sH)`ekht*20
zRGl|@r2P>b&xjm|%pgqaJam`2>?IsD6|!dc+Ukl%^vPaL8^Fz_<&wYGV-x2$8EYCN
zAVZ?RSX{`gH4<D~*&FkoiKN~?nNh2Rycm#n<kQzsOd}$)1}L!NmW(B^>qqib$Ue2%
z`G?B{4De5D%bi*6)Xs{fmXA~VZsJHSt6Jo@Ni{y<vb=yDDcq-pA`(anEusLTQKpAC
z+ajN-gdIKeWHY|C)^V+O2@A`aoZ;|iAdVKxUs|t)B5|?|-JeD76}M(^hXm_In__4B
zu?c}u;wkec(NB~X_C;^mpZ=8l++qYvfI-{^N_szDhx}dfU72V|#$n|e-_I@MfLgJf
zx7i6<sfaWlZ}2@-DDsLk0^D`*yJf*G@#w@Lh#T(xlu;r774==brPXS!68&fuMiPof
z-@;97BNbVTd|#~cHAKlVCO5bw>Tl-Qg-oxl*)ay;=TWKje5<z{v4a#kY<g*RB|~Ee
zI)eDGzQ^rlO$oBGW$a5oCi=>okG2>~+&4vl^=PWCrf%TfOq9A*Rwjls(eg_X+f9pU
zA&rnXda+riSTs?ttSV=9OlLZ;_~@1$9Z>ma*j}?VjwqjKG@{s+gtmte52B5Q)jp#L
zp~of47)?wn8(fWg#u~dfKh60|orkDku5XlvZc{P>51vEn85h&}4JV49y1w((7L(Ra
zsRY&zhYzlN;U*JjK{u&(DtYvliYPp9e;_P345HG9pUMA`?Ey!r?y%4O_3C_0+0n;|
zCCk<479ev}oB8*VDK?p;W1qrul#pELY3qRc6Vq{T6OCZ@a}~<_zjuxA_&0|>LfzGd
zAzUTaSaOnjOT*p^l(Y^MdeKq|{P-Rh|M&R2NAc2IyMeL1>|U<M%~O_h0nfw%51+CC
zORo9i*Eud>@`R7rj6MXmfiX*ceY~JOAEjzli<;X1EGOpp5|z@EOgS&9$O=VhMo*3;
z9tq&~Q<k$&%9`Fw-)8aLS@|*%oL23tDZ=#xEMBP-IR{?OEcSN_oYl|TSrFd!bA|l<
zem4ATSt%#ZBmF4{)r3LO#ORj!`CF3C1_{={*|1Xku46m7>heLqYn)k;L8Hpo|5%Ha
zw7+){THFwr8+#Tg1XDSE_F>{D-r@s8p<#cz?(Zy7(pBJyUWjkbz-sH|43Ehc8vOAN
zOt9Mn=+s%p6EH4$+446->W{ABZ7=KQto4OEz)q$@7%{dU*PN####R)-`G|Hy;rm+t
z4>0(t4^TilTQwa*bI%_ByHxxa-C~;rvB~5b9M=Eem<;hyL?e11uEzuLG5)J19S}aS
z5QGmB_(mmS-D)3(lw)`Ss0r0nA1arHZ|?4PRD8=ayb22w|5RG7{s8Bzo?Z7Aiy;G)
zwsku%()yP!Uij<wqc*>-*ecpft?a9J2W7`X`39mJW0}c+He6(!Xa<^R1*Rua5AhB_
z{9QxrGJ)L&!2JcOPS$)V0sy)L^WR6eWPAv9T)o-k3-pR=*1~9sS_18xvjaMnSS%cP
ztGxLRrT5cyo85oAb=D+kPucZTip$~0Zty~6KBG6%7w?mC2tQ~ZWxal}8vNG4-D>Cg
zuOmB`@%IgP+J^4W3_z>Rq?ofFCA{0~y)}ZzU&zKl`Hwd#&i3dB==g5_+v9mes#?Bs
z5N8SU`F5oa7cU0w$nAf%Vg5Qg*lluYEw4OyxaYb51-`tSxnura*DM{5-=%3@(vc6I
zrfLXMB&5@5U@VdHC=?O(|E+z^M%AgXHI_l#1X^lubFFD(FBzqST>(z4OvT_h|Lm!@
zar!NoCAGWq41Su<9_uW+Zs>c0k;K!l^yZ7KXr50X+Y^kh!0TN&O8Cq77mE>wG^~L5
zgDwnU32HL|mSQr(DxHxbj$lb*H4ck}cO8gmS%R8h>0?AC8mz!&c!{w$o_S4KVr8<_
zNW&|C{TvcYCF9O|+0A`HQ%J*hi;UL$rv?6GzyvsH(TNQl{jZdZ$d^LybqA5F8TyR?
zt6onU@5cp=4250LBU}dtV-eTAg~P^bZ?-T`k?5-3da!e}>S|G%ruJfhv$%sz=h6%4
zr%ElK^w<+%_f@^cn)cnq_Qw18R!uO<n#lHONJ;mC-mufF^@`Mf4s8U*nG9_c`4mEv
zo38}r^*CtV;@;a5yKhA)Re=L8zh%d$z|4U3MUivJsG0L8k&8jpMtIQWgmCTk<JArs
zw{xU<3fBb*c-q8-@JW<(v%tD{pgXE-(vX`UX11coBl%D=InwWr`^5i#?SF|7ZD4h>
z%C~P5Hsd6p48H)<#U3)%h2Pa`GFscqZl0shdv%dl)7<y@U>eI9g!9d=o58-lH-P6P
z9UmQyoPsene$9qYWmDw?01J*+0qp#?khX?%`d<JXo4UE6x?R~4{g?&DJ6*NZ%Z7n@
z=<TPD8O4lGdBUXeH)#&A8`R>3FWJm&Xsnh)e|*k`PFbQ<rsWeE%s@iZ`wXn~WO9c7
z+fr&Ze6qZHr)4v2%7mrxcZ@k9UkSoEkR$k<%&7B1vXCm0n0=1(FjT1>8kokqL2?%y
z?t8Hoih1<vwzLzF;L}rF<9z>THeA&7e)TD$_`+}y?M0A^{?bdxujK`Jep8t3=odOH
zOJ3(qrLov9i!V2;__1PoSBA4_UQ#NV{AwKOBA!j-HpeFfo61|%TbqB<Ji23`Cm2f0
ztwo){7+ZdCc(Xo5`8#oJ>;3r8<;5FA;xT_vXm|a(*MiHAfPn{l&iO`;0BzCxaZ24e
zyXg~xP+v3j_SU9WJJDuez%{V+x{JL_$gbTq6a*l$Q$)4vIOCh#`MK3Hg=I%~7cMQr
zy`z6$-+Mm9*VlyG^BzJ%H)!&phrZ_d7qTwH$bKoR3nqA|={1;;W#KUM67>QM4{soZ
z{%*XWn*Du46-A&Fvqur7#&2J2_yxk7`Y1mSx@76jN})upgm1?(V!E@J`eHpKnuDhR
zU}^Ll*y~!2>TSVKAdQ2G)^3L1R7c(soCsE_a{b)il!^~wnO2|oSZ25f-`9L2okUBe
zog#PY#~V4+CC5T?>*JPmZ&x3T?Tpj9sj=3(lj<#k(Vj+(+Uw?+4xYb?fQW7S;T=I$
zrQb&7$R(LJaL}($@N@e7?I|h4f%5)63TMo&VI2`C&<Z^=t%@TW97DHt<M2-#foF`T
zl?kX?ywc4YivdCUzLaYclLG^{HK2>Dh-HNzC7j`zFQJE|xuZ&IOF{qq!>m4aJ_j?s
zExP_Bag-*-JI!k9UkGnbj315P<1x9^XCl(KW>Pw7fu8GQV@ro?eLTy5eD6KK{`mVG
zXRqW=8k-p_;10OtiQcX`sM6&=9!(6+wbyHVZ*>7cM&ILtZnbIcFzbE}I({WUW_}ga
z8p#yoH0>O}*AEqP2b6_V4SGkSf-=1qH4k~1dlLjlD>GS((%%DOLL(~-&`PygUQMA(
zLb`S6*(B&cS?j#)6+~qMlAR7N0~Z)1nN#dcaeQQ4u5EXw=^%^b)a1#=c!pNl4b>&u
zxd50c${_K^N@Eu7>&H#`q5cso*QccoGPzUS3B+WY#QCJ``EAah=q{GLb>2S98GiuN
zKsKdG_*1h}lo0|R*qbdlz!M>Rs?$VC>}8w2kQkfk=>3ZVdy2e!lOH3fp!vo46qH1%
zow%Hf0S4g#-Nrt6;rbIsbOW!bsrR5?P4SQ=$g{iZxsgMS#bIumpX9W;F``~t6WVMM
zspJ9Tc>~jUZ`97)3H|@<1NB*3YlN-Z>P|ra_0V=hCgkEr_*#ldEwIs|#^*^D#S}>E
z6kX`I&bd}q+71TYhU67tLF4u&Ok%UymQtD*YgKYY{f!jB&enlQrj1*8Y<^Ez40Z0z
zd<R2?qxP)ugngj63}^6dgrH$<@l6uVI;p~zRvX%+=&$K!ht&@RO@|JkBnz3M=R<xp
z?-bDyrztzeoD}Q6bZ^;5AbZ&V{H08v@Zjt3lL;{+UqpO?^PZkm#N&O&^^1X}kza1$
zaNfOB9wBA|EJw30GZh-pA(Rw<><ZNI?#B{-*t;@ffYtL?<BVBXwU``%Ole>W4NeGt
z6i$(GC7o3&M*kE_zVmR2!5P2%CG+mOBlsOW%asr_eF*0<=?@DztZG?sgGV>&EV2_t
z5;vwRkPk(Z5%&qc3xJ_2QDq!UCzqnKGXyJ;JllQVn-Oey_BaGMeOP#rB}vdr=SK3L
zaz%ww|JLqQ*7O$7LlFU|2}gOdydOu(;7>e;YgB>fY24h&Zgk#*pB@B~<<oj;_meNY
zO;m2c*bz}g8f7tU1+%A(Fe;n#*0^Rq%>gE;K*y6L{Y{tf_VZTDeG3&D4rRsVwAdz*
zj8NVjwjA7S)ikcd-&#sNNHV?obLQv%>d#R@&3!;SXhV6(iptu+iiH?TIn|2Z{kB9_
z4xsjo3E2B?(-#D+{Z0~Rj=>-kB1-OavDQ{o)BQ=06GI`3H;xkXwNFVk(F=nTu|)zc
zM$gb`a3G5McV>DW4>QAFn!E?BtJ0aB`}z-*j;@*mRALZ0^zb0&AUPzO5PXFa+KyBt
z8Nn&qXOHD%(L3m;Xry)&wx4&P#o;Sh=Au8O?Fg%dNjzX-zCX|T^M!okGgzsg?{|Lp
z{w#EI+5X|{PM7n6fb-VqihMJ+(Cavk8t9gB_zc=8^|Ic?dREF15rsFK3<YexKYZkn
z8Y5uXLXjwP=72gCC)JB1PR-mEoVnVVTR;YGE`6m&7Du_vFS8!e$P-nEmjE?Hm9k*#
zE`bS*UT{4W8;pf)1^FYRg#cZGB@<ZgNk>y^b&HnWn%<LVaG*k(brMWT?7Y)b{D1Kg
z9UF&e5bTh7tB~!84N`Nz{eqi(NP|t>S4kbh6fv++YkEqu!6j9&Hh|fV5DKC0#~aL>
zb0fb5HU`A8#Qt7xbV77@6r-bsBA4riKykMQx98XDf9siTLiCx8Ri(uhR>|;4P1=z?
znYu8o8Y1q5eR@qS*?5YCU^+b)J@VuDKSMi(tQC{*G{JQBj8aXIFW6@)*EpspNSDwe
zc}G6=gUb78=3@!7%8XxuG=6d{4HfO&wfH%iD~NQ2VQR4Dw(&mw2!OEVul2fFJzli0
zd>z6_E{Q#|g_g3yHDWS+%j%;QIwKw+JofY9GtVek1(t3_BRLGUA(iz<FM5e)*{p=<
z_k4)H$JDTe4EMsIWCyRlsH@WN9MS}x3(%&l*`vc4JBlO$iCqAxMw&R1sxN3I<q7jP
z$aoy<xFT(-j51gaAFpvyNusz8oRaL6MEJ@L4{-;d7Y)_G{Q)MbLD#FY3&N$^!J&$3
z1nX~H5iWnjCVuC}I~YqvwJa`F^A>d?$x>TTt9x!&o-DX0+U~6_eisppJ2A#?>NxW?
zZwSqI=_I3&P3i=x7;X@Ai{muB4*zdYna2s)DmNLgZK}`x6L};-AzLe+jD;r&0|w3U
zN>uFnsLS$NIWngsQ|;-=D(M#aTXI#F7Wr2}W?vtuG*QJPZOThW9-4O`+t4e>HMT{5
z6O(KU(TEY<`Z$YMq1nu7C;l+xJ$rTZ_5}@x+08tugWSwTu1wr(yw3jpJq~daV?X-X
zt3r>!AQCn0+I21D+;;wLsXA<|CuU(zeJ$gC4N6z$L#2FOg=PZqk9lib;J)##9Iu3r
zgEapcel~SNnqhPxU)3qD97)$qcmApME|0b5quntFtE}%Wbkcnjh_P>i)=%THm4qiN
z<eJs;$6*nT-%Qw%w&LTJh5+Gw(O5slo2wgKM<jCp&Oq@+zV*()u;v+r&WQQYY>N*Z
zr74u>uK%-HL(CI?V3CM|<X-dt%xS<6g8~?d9*Qa+LjQZ#dya@>KJ*h_0RKPo2e@&6
z)=@6a_0+q6PLqPghko+vk_;E(N{CFAVhF~dQ^~H2@_p7`;<8Kc{R&RO1ooVtNGk2_
z8){sK<6q|w*0?@Qh@5K}RYs=_6l;`t?!M_e9uoqB@~_?W7wi@F2Wy+rN3r_tbuW%0
zb^|6hg{eME?|8iCulf#P%X9BEK@-5Qwtg1GMWZqdNmSHn;|JEdr{%x5!?pAN@E^bh
z(qt#(4;~^2@v_zSj%#A9=CtDd{(jmK6v})IUt)7QOhwA}8e)qTjQC)fz0-lX*md}I
zf8o|6TFuEna0_@YiLf=bfXmv5l$~B?c~zT&h|y14>^~5SXDg+Z0J7KPh4F#AOG{Y{
zctYdae%d5^w0&*T+QFy}1<$jA`yo`j@}*Y|qzzEGX1$YInSWPY9XS~lcSa&%@lg48
zf<CE?<5rTRq{$CGw*D#La7PjBDMw7qmHtStD|zM()J0rtf=8Ot@s^zsb=!tM=bu+K
zW%n;|-@t+iXPQ}joSdFG`~?blFz}~oo{;j{XI?#&77PtyR9xxPey(rjhDmb=x|cpi
z7tMPalNxp6cIpjKWM&up0&`2wra!y-aUWejXsV^i=YHLcC@h)|KmonaO^1KlKw-te
z)jC%*<yfWw7bqc@fd{hPsYZ|d)SY2C_E-;R)Oe_nfw0D;<9Ev(G8hSeG5|hH4hOGG
zN{{VaiIrfy72J5@<>QOM%@1G?(<pC*!$Qk7en_V*vK<Iu+n!Da{shcOJ33M(&7iwz
z@ZE)ufRC;GL@HfoZCZ0y?1bL##mBB2=@ak69<;^^5BTYX?_K>>_@-{}HTnelg+#si
z*z47<Ot=NHZ`XyKC}0D&5@L8QG6%=u9xFlTNT!1%+}0Kl@Gwf9fO0#kz!MPoBLf{9
zrKa|XP-h(vY}}|rkRYqpchT%4N;cXq(m{!S0euy&OB6v&mu*28oBT17M!ZJd?h^aI
ze+t`dh?D#+8F7q~w>{!lo{RvzS08=FDD=@eUv?0~hW`NV-OLDi;goc>HV&%0E0p92
zvt};6H*z8?TuX8R&)o);C@QAaiOYz6s=F;-+o3uKFt0eBY^ac)#ZB$YysaYG1#L20
ze*}NceA`b`Lgumz8HKw;>_{AKuP=x!4`~3E-fnE{6!>DbYuBzA#V+L&j(v-JSuMSG
zsg;5@rM-612-m>ZbYg1b(mPb{g{A9Tcj1ceu*(>gJV!;<16%;nSM)`!FmCiYSI676
zP^u;-MLK$4M0eO`Bd7$kUX6=c1xU<_+K8IETA6ErQP=CaXW#i%C^a2eIy(?inEjU~
zh+X%F+1VT1!L>mWm_1r0eTd3;C7~aVkYDhKLr9Gv{Uc!QLU=1bPg)&?dAzk4M;yX`
zXSS?<E2>Y{oqQCQqfgeQ1vNDTcbF+fXtB=*lVC_P;F(I_?!AjPdXvrZHL;!gkb2Cj
zI7_Q1hvUw(mB?Ead*W`koXd$R^e+%6YDM$OTT?zhA5+kf_?x~JbmetcpEGOYMfZVF
zEr)Z4L2EI{jPsoT-*DG}|L}B^FSCtcycaY4<>wa_gQFW9K3%u_4yGsQ7Ds+kSH<pW
z1a1eF4O0ppDoK~+smQ4)Bg(|+L>5Fm@h{>UuzR2hGW3+BDK9b+i_#aV8#euUaz3hR
z-$8BP+etbK`aw*+CbpUtg04Xi2XHLH>#)NOQ#oO@(cv&?5o-*fCo~?iS|@V&2<_EK
zj#7nCM7{N_>vQY-7Ws&Aa||ODVw%9I59Lg<QSwfgD=;TTHMRbWSeS~K-bB=Jq9O{{
zYFLx30`P*S+H``Fj*u01`Mj^*V^)PdQvMSjuh9N6o80^FWNmfCAj<^yC_PqA{3(u-
z7<~c<n~Im#Zx=zI(~z5A96rMNGG}%4%n;XdT6~Ey?e{NO+B5yaOPDPA&k^9(2st5B
zFCiv%i~qyiTfas1?rp<g8l-zbLQ*7$4(U#jPJsadX;DBJO1eQh1*H*??vxl(k#3Nb
z5NUxC@VUml?|tv*J)S?{{mDZZ*37I~v##s>oQ2G`&-hMlT@hTMDt%51Ue7!(cJk3#
zOJnsH30(`C7xe#==#OUdEEvixx3U=mb%y~L()dBmc!A3IV1*@6K`s<t<6<|w=j=Ny
zPokSw4z3B$kJG!^Zk=U5R$|PtHlqp2ri&d0i2~Hlc{K<9jpt5P9mU~{9GQ28bwxFj
z87d#8*z|eja>HBBQ^Qo7PM?y_RJv&>EPpkqKbU}fQ#A~oJbgH($|?zucC~YS^Od1}
zzA>5lb$6OjxUkhdg4}iItyJ+&5dTRVS7TRyi`-v)Q111hqMK|3m*ohik#;c5EPzo|
zPsCg_Y(O(OQjXgNB=&kuxil}GJFM$_e({ESK39o6Fko@QIS_$^ukd+F4Vz}m2Ri~_
zNQ6=yb$vb+_SktG!;oORKPu?Ld;Vj7pgPiJ3uq~Hry02?f#O~!vT&8xY;PylQo}RC
z2ql<q#Sa3XrdT8e+Y&$|j!ZEtq%w(prC2VF7SM+eYP=!uiG}?xpSMlf(B@)8>cjwi
zfjUl=Li(=I@wrK=Msf#das;ZNINU#XrfYDc>J{sr6}tM^F7(_d>-%7JH0Z>V#}#DE
zQFpM>88+KnSE{v%!PERL_>WZL9}xSiF$OEvbtGQd$$HO+z(><$g<CLhY1Z+0y24*E
z??xYM-H*E)u0(1Wx{*7ADq;7cO-Q2_t@xaiy<)Nu7*4sS^wejXwhAf-(%EfEqDnfi
z-zjiRwDgR17oHap8IILU$J&5+!e<Izny?@uY38?j#mV1kI*jM7XBi3ne%XF>etY`7
zSlaNS-m+y?M>$<mBIH(7&r|tlZpq)hh!iGT2L3z)LH<RdGP$a@p{2j)jiyS0VO@De
zt$H(vEIn^?1wnC-F%^w?siWA^&2<l1qDcHDr6Np7mkXgFdvL3`?A0mAn$;O%(@pT%
z&QvKVPU=(MOEZd}rj8<t;l@1eL4ODe+C|i?uwfa-r9iTCIaqDA6m(WPW1VHEKgAvs
z;~wnHw9kgkO+uiqZuqCxJ3H|oGS-v}rk^mY>ZKPWMJCj_*(pRAc#s!^g|M9T{^&!>
zlLw4<&7dYwIjAzCZz#=~PNu5;<jy=7>>1iIy_8KBG?zm|=~72@FXR{pq4I_%?zNeE
z{^5so;9Vv5`|~x@Th%Zzf0j8`1QOyWLuzwpXWl+<T6_6u$;ul|8S?3<fCw5QnQnrp
zN|g9M9T8v*%;^|oV!Dqaskvi4o|cR9sWq*<EMIXATg6AU?-|Njfi?)vwUDb|2Wt&|
zk28;&XZ7*<mWB8<WTM>cS35jraz6EQ)-hP)ag$*ajby00&s3;RiE>nb5|4gkPxVS4
z8Cfxbyui5Xa)mRigI^&8U$b)yF>^1i(AcrZipECs;R!CjZliLIvRz`4G*lNl>!aJ_
z%%J2_dueRa+gJUqRtjIR9(-hG)eLw0vyqu+k?x<|0L$K5UH5qw_ftj`Lw-Ow4!(|s
zh?Tl7XAI@BRlK)OP$Gqt<md3)AmHYpXe#OFP&qt~@Z_7YLXvQK4&P6x)emJ{12Op<
z2?ZS_5DWGp<vUt*76gzw=p~rbYLd{)^*33(-NA@#_PfqH9>OOYz32I^0u}0+c`mx*
z%@T0$VS)*t-gmesQ>^_z4$RGy*u$<SNund1NzsN+{@19If2GxUrq7h)eGQd`Vi20-
za2k8cbHt+*X$I9+Pt^QaV6ytVxqj6gibIRTW3>MazWO``?Hg7~%xRrs7BqizSniOb
zFP_`3$7Nl?RujzXRwr9w)YLA(?^@mZ9yh_d%_R8+BTJlqrc5@DgC<ShWzU;3wh~n|
zVMo$jB^QAWwBEVB(0;)wg7#gvURel1rOYg3y%3vnzP28Hh|z`WW;}x$`@yCSf?mlO
zwj}pt$EZBP?~c+wtUqH5x)xj1ODrQvdqEN*5pD5qrOsW;9A?ZN^I-!>JE-Fx;&OnM
znHt7xbE8OH#Z1P}lYEAXYt2vnk!hc6l1Tmf*{+rpqziH<^H_5R5-NG`>W!y?xMZN+
z4<@q-N|=}p{U9|4+tKHOe2Ke{Kt62WyFOLch3E$tl?kTf%{D}w+^MmlE3(^$1piy7
zZM!Ynn0F}+F$-!mSa_BVxN@FNvlq%cVKrFnn$gRSFBJptT-b0FzDgO4_*D$o*_>Z#
ztucrRu#Cpjr98{hwAR(PZ#;T)^tBVX7%7$9$SumX92C!XP=;Gwh)A@kC(al^{l!X+
z`#F`eFnPy4_q0#Z$m+_>Ur`3dhKq9+)Ed^p^)$fFtUN%1Tb5(o8P1kw+*8XTIl~ze
zDygD+47uy0`=p2F;neDxa^gR|ff<U`)#!PO96fRt`ug8Rsu&z-lsq48%t(~1&NcG>
z)|?tHk-8Web=%yJwe<aZE`-8%ETkL{`Mv7h)6HK*xyr%lf~VOR-=7>vO}pFNZF*Ri
zx<B)_`7E_|p24o|C0J5s`R}|$G}fqMpJUAVV@0gYeW^VK<!T)@7adyQaBpH{=cD*V
z-7!Rc_R|jx41`ol;*==gicoZEwT{brX~iuJdpbEPNY!NlF=pH}7vY5E*}W?|f}ekC
zC)ToPyk#|*AA1D=rzKn47}pkn7;l5X0c$dC>*%wZC}&3n7P5`FW-B{fPCT|qyJ_!o
zS>@uF<R-|@UxC)P+|}6?bd(4-3iUTny%;{DKwwZB5a(TkIsk`E-qYy+hLvAiP`qHv
zCH&{#eb>K#RZjr2a~d>_yp_Oa`dtajYthgtEF*0<knNP<%Pl>%M6g~5L5b+#na`91
zmJ@MSSX+~_q5=i?{QD`5`Vusf8S}(HT&NY~3tVmD+XNFUJZvBaP<0_9yX0@Z>$^K>
zlFA@N#4Y>WHux$vL0l9I{kmazAo1Myxz<p1jNsa&lwVg3S6SwzXu*ncLw1||)lpq5
ztRVh?&7uNA4mQ57zI8jNyGurHd5q{pDE3ka1C2`fzREqN*Tgs%o;|kjNcoifnp;`w
z2bp7<lcVDQ;c$4eJ}dW+R10|U83X2#RW)kXN|g=_3{C1U!c@@c#;Q7gEznB4E;Szk
zWs}2(J&;gJOSF8;es)>^c>?&psYT|WCcn1FW4XRue@NNmwohf|Ogcwv=F%|TbBC+q
z9i!hzHn~1(9-=+H9>yb(d`Qukn(ZncbC>gT%&*6*9=@>&8ZqTnLOx<=Ull@{qbGe;
zp=!N79hd7dPR0hC+Ps%y!VKyh7?x$;fvR|X9H9KUZo3Ac&;2F>mxpwAnaGnT;_)eU
z;QfF2o+3p2@cxrZ5hfGn1nys(0~h3<UID`ek?68V@-Lp-z+<=HAj7;g&tMo)QhWZu
zcD+(@DbK-@gfXzfS>|rdR^-@|LU>`xDsRV`E+HblrkO(TPvuk$&oK9~meMsnIZ;50
z9OGl&r#9ArH$pN!Uw?gG1&Wa}3`lSJ^K&38&N!1zn<}f{b~iy6Ek1BEPw}gF#O=Wz
z(OqjW`u?avlNpLNS-AIcd|hnd5AOy=c)~H779f!pKZ|<{5UCAlFA-zgWb`*=gQRj5
z$QaJXgM;sIf7x5BSUziH_^+rKv1LxX(Q}iep^9kC$PfP&g5wt83j)EXtL_K5Rki(W
z9cJ+T@qYHQKWucC`@*)y&@yN90#xM~J!Sg%O(E6E<Y=1Ok*aPguRIJ-fy}=&x)-jc
z&5+{RgLl6VX?%Sq=CU9}SmMXxZd@h(xc@u_NzTr9Jq)6dTPXeFUhu?k3d8qSXD8g6
z*TTnT_5ju|I6f}tB1lC3Zt(U>Q4&M?N&(j^C#s7|Q-SW9E}0>)rstkwEXQ4R(Y-!x
zNj3dVmYzLwDwz^+6(KwNOWZ0&)<P)%R8LJuB1!XZh5X8h157FdTTpKQ2JK^UNv|Kq
zT14UB<eH(8lrRQsGa2L#OPoU6U?8Z{nmMCuLEIM*3&HWZ6JnX@;#6)ZDPS0xK>X~8
z3R|~|hWatUrlWUW7Oh>*heaRFst#F3i(aiMq@OsjWK61Te>dqoE`6{MdlU-RdF@jx
zKdnpwwqN`Zh3$yUTc$uKzJQdiB4z)}7sP=*$?RGat*<ko(Ug8V<Ot%trdV6|vEo^j
zqjuY}ia7EfpDL}T#Xo16`IVdZV?P!jY6aGp6Es8_h`=&OrQ-i?4=Y1uJFY%cnH<}_
zGq8J~CE@vj_ZwrtCCuEfLW;R%QYpHh_QRIy%6dA8u6Y+5J5SMM>cz#-?^ZdZb~bp%
z5Q}v{u4bWB$N_gHpdwYQExG`)JP+e6(~dFHO+CO&;{i7JgfdF>xU#XZ_Xmi7O{ygt
zN^+TLVq;f<iI}|iQ{MB8hLmHjN%lPjQzX8%`*&LBioi-K=Aj8F1TFE7gP%>YL&9{3
zuQD_Lv=G#RL~}r$t5W~!awFl~l+}QimyEMx+tvzrd#6v^WinVG$ti<+?d>}}<#qhx
zOBB1teNDK3ge<?r9f!~e2Jd1Ope#df9RS0?rNFdFcViGDv*3zJj+=~4voUZ5EVROI
z<5wHC%t<O8+w;(T^SzhgVpc)$Rk|^37?l$%4u9||f}nJ3aBbE_!>3i^!DcikmH+V;
zCjP`s6v9kg*hzcC{h^gj41Tur+QwJ4Fu3(ee;Vat@Z(nDQc;P^CctbV=;mm{pX$V4
z{J^|0MfI&!!ZLsK0>a_Fob$5D+c__hEP#$fRO_rWmiZ)Vl?-Dza4h>kg>k&joV*Y^
zpDL>csVL0)Yz2k#RBq>b1d*uZ{1U$Qqu}KUn@o`)91p;J*P@4`+8uFE4YtI?ZbOfZ
znF!QLl*P{WXSEMeKnC7ds+eIQ)dl<}Hp}y0LUlJV_ncfWsh)V~5Du`Y(^$7zu$r_!
zX$7@UrCCAHHaXU4gP|~=*jZGRH2j6q<$z*la=o@nEQC~1mloCXRYPTLg(h|9lx{$M
zTx`9irZG9gW!{wYPS(}^Krjld&y7mqUs3KySLav0$!D0}!|-(l&SCQ8I<2MIp}2=g
zB<|5Kl&*`p8Vvk!G6<>Q85|zpE<Z^Qiew;QiS<}XcXJly%ShF)qdYhe!)A2UrqA9(
zR)B#}N=5rY!c$-U^Np{kJrkq|q9=kj9~83;QVF)*zKH)3Jt*;HVkXc|+q-gO3;0l{
zYMPjW;Qne*Kx8s%<*KL5)c<ua-KCD-=zJlRC|#9~5+AT795!DobpctD_jZr}GoR-Z
zJGd7#Is}_A+Cj0ELRXoaFeXtw_nmfB03AW8Gk*EUdlC^Q>Q8QIlGSsVuj{VnJR7z3
zG<6AvtsdpZmZww@Px|_Nr{e1;3D1!R84yJqEPQ!F{<N+e;`B}r0vwh)J${mPbxtj=
z7=n!g@bgEXaRiJ|m8!=+<q{rj%vPUDGk>9`CF-&B^<L{M<ip#`4NrG<YAxm{*9^qx
z+nRTBs=BeLP~eAg1HddNmOJ8AkZVJcsG`dEX6EQB1>BIiB3H7M>yX2ZCYs?%(wdcO
z+E$!;3RsXzR68kx?`7?bsS_4~x^6GlcvP$!tncxjO3UhV1$d|;SHBAo`t!%pyek}~
z46<ENltdl^RlcF-j!dlkf&vt174xR)SuhKI9F`Z8MIE~D7Hc<prs{No_J;aDQ0G$N
z@LF5SwY<319Z!?dyPszlnx=F$940(QV_Xa4GYt$)ipHH6|4LcT84yOwfL_jc`)j^H
zFu=cYzXRBkSl%#$gd)Hw)d0dU1Z~ZxPSqPM^8CwWeXS&1$`IDhaYT=n#9$#=embQh
z@q^E%W9cS#G*Z#%ZKm*~1Q*}p#0P)C+JR>bvC-j@Fy`#n*q9Taz#p%<lOIvs)VTCQ
zLrRxwx0<`(ks|6IRT+s{Hi<6#I6Z;!6KPPABS)aHPL;3Baop5P^za$?M6FAN?G7p}
zPVZ3$lqp;W(3n9==`JrIx=`U(&>b^HOSPSSpq*i|xZNlQPM3LIQgKyvqZXTSno%ap
z;@DJ(bSIdiU>Np7Q&ofFm^g<c_`%oEjYBUt^(XVVwR4nve7q=v&ifNb`Z6bPPgiMx
z(wZ$l-|#?>*2LhY9Tz>9Q=zZ%BO3>T-hi)iIJ+Ho&O;O0v7+2<C<C)U)lRRpwuzD~
z8tZ>?XcV8_IQ&MetA<zmZa{xWep;E3g>=~aJNrxDBgg_i+~dv5{puSUwF#x>Gx=t{
zQaF&LLnR&O6n$On?6w7zalc!9=CxqlLfQm)y7Kb@s22Mz*n<a2pCDNM7xml~;{4ap
z-e6`M$`O?9-EhQUPs5C3azT;qN=Wst=I6QISi;ey6iI0K8=hC6rG<ZfQ`X5AO1y^6
zYgibE(MHwl9l{)(LrKvQWXe;i9*`v2o*zo(dOu@$O|UlpVVST=%qBYyh0U7v{7}BG
zvHna3DzGP$!Wpqidop&!5ehz@A|u9N^b{B~Fn)w6?NNpBG+Z`1A^1J{Lz0+B^)?7c
zLioGuFcM`D)XGcu0}%|YeDns8uYZ<8`g$V}!Zsv7ha$4ia~s~55<hKg3RdD96P6hl
zoj&_Ew}@*#@|8|8X)w|I;qX#4>|YJYvf9e;Mz0YfDSqrM)s@+Mh9+%^OVxyu&U4T<
z%7j8nWvwQ3Eg4SifET)4Qj689_umLG4{fARza8H07dEru*st3fp0P}O!=O{5-;;)b
zWv7X+vZgs0vwT-2{#21hM5+6@QB_Z~1t(tB_p7#ISDf1jrH)Sa8`hcz7Y3H-6RtZr
zGL3e6HzWB%R9_lJ{4LykA#`uTfn5A+lCU3lPuCiOAYL?dOtH#$D5Lk@;1pxzXcMN7
zohGNTXh>3!Rl<~6hL*4x6U}O~BH7@pYmk;Xn<Rc7`wZYq)Ad-(u^sKIBGe8ZEvS~<
zhCJF)EC#ICy;hND?C&r*@&d<eN9AkRg4_7zhA*R1N_&N2<s{0WI3Pp1vF$CA7rp(f
z)m%*<nZ}Mvjt{?0Im4f!Ql}|6&0bk#>f2TGfvS>U)w7Eza*Yxlyuk<MY!607sCo(7
zseqFL=S{9^eX0mC1p4m5^Z@$ZVqz&ddt?^6L&6tKW!1)Q3}se8x^%?jA?OgS9dWx(
zg$1Cd8P}9y7Ii=&blcTPUv-xG0F9<czUmzh%X3vd=GNbWz2n1j+_9zzW~)3Lbs6$W
zg>2or1;FgtUpvb0pwyOM7fAr<{MG2?>x;rz7c2ntomQ@_$WXP1{Wlcj07&dg_TMVb
zzyG{TK-E?=?mlxvRhdnxyw=vV;)dn2><!$yp<F;87-<n*9C<JYk;D?ek&5|w!>x!g
z8zViV`ttI{sb@Y9utk22GP;ZK;k!L`F7}ZGMa4*%Q+s0$c+q=mZ2QDwajS_hr4e8_
zt@4UBhN!52fDfMgr~xGv6%qNXk@Uw!qr$&l9>%fOXvi9q`$iaoMZt$be?w%^2<$2K
z0lwUxhIw(5<4)}f-<I>a%D5J$Qx6=pO-u+bzcAXk{rWNAGA}G4QkVISow%6PjpI@`
zTzsE<8<+V0XJmkNBfZk>#cE)nv3oz|d0Ui{`|lT*f7(4SY$@6gP-pHt>9^ibaenQ&
z#M|;9&hUNfilfMDC`R+)p60q9^oiD!@sA%}^$NCxqvZ;01S^TtR%2O~b`QXf1-Z5^
z)IR^cndS#?@Ov*#Wl*!%5Ah*DNp3N4zlr}dM89ZFve=pa#4A(1kIK@|{XG8D3~y*j
zR0y%O@z}+@J>z+qFRES)=-$~Q+n}jaOrKyeKS5_Wfpg7Tm`xa^;p4#fS&wfosThxk
z0zsh1i~x+or1W_GFYuX+<l?DhlztW!!)M}m!`x4LVL_WN)46MZ>)2wqX20(O>PKfp
za$XESFy)h^jf@ev`Nn@x{PE$>=7Ppd50bp@dq04;U}C>rgbey}dlYIn3OR56)F|5N
za>`Nlq)$Oz@h$9m>37iHbMQgL_7u5q`RBv!lTYN_Z`y;|`qs7IUIpCkj2TMaH>tDh
zcRtc;pSR2IKiLs|9(>td)$AVQE-wBTmVO7YG!^CX_kYwyitR~(aYAC`nI-C39O&XC
z`cPzlI?pc_uv<I_)F0>9Z7Xc?7(c~&RzHoM2)xu3u_i!?QzX0qdq>kp{~j@Ls>HDN
z+Xqm{Q}-s;_cJ_Zit8C`clV`U_9>|kLHhIvuf~bPNw3y%?#lN#jMc0hbva^g5;jG%
z*8ksRUSCWo@<@oW=yHPX7OY_AEuePjZ17x9Tgt!(sK>Y>=w3vIkI3tPA})8%+!O9p
zIBtm!)QP{Wd<$H($RXjp`V%yhFpAaY%dZ_kr_9;&wTw^a`qQwNdB0!nI)2*q@k5QP
zYoKwZ{%n?^(Qyk}lWeF_SrX$$yjK}+`d6jyN>qV_y<H!?n@cMI1~To0#!&iY=~BbU
zY%B^(B=>N(8g$wtp5=gclE)jFe=PUXirT$0t6;;}C7^We*<U6}q{U*S3CWp)^>NA|
zgG>tN)x1~2?X$8A6omCxS?Mc@>yg|MccI=^nj|-pzOK01;Ccn(C`&oBPevn-QQ-5O
zMaB;upXJFe2llo?I{e!rm1UQqJyc`BPUmJaItITz8hUAJi6pY@+s#1ZyPjR=^IoWT
zNCmnfvzuSK#CP>#?|wXf<qOa+hnIN_CO;2nZb_%_n9LtPEe-Q(3;Va8XQt*1h|68I
z4*PiTO|5xJqgY#HjuS!vvR;+tv=E#3y;Hfq<NpQoc%GP-3C56o*#ZN48yEC1duqfX
z*ipXF4yvwBxQiw!K1pA22Pi{-&|4z9IhOO~E=zw8Rsp60I!c~3ESYF{)*%!KQ3ZgB
zN~XYrw8{6u#z3&@Ta+dl|0Ak|dYC|$9e?XX`A6E`VS#`dWwIXGPm<klAfKF*j2LVe
zv1~Nx2~{TO0<Vt&cCvD*g|g!-_p264(=ry1W^kMcgFeD+A@egf8!<7H)!+h{e%f&x
z$nWI-O=M%``RKP{;fSd{WW&SRbjkEQAr-laiB04eN2)zQ;B!jGMAnyqN`aWZ<O2f}
zrNVAF(WyOal77d1vd3)(o|-f=Uuf=%Sbzp6dRtxxZH8&zZN>cZtqB=rXk&dGHOJr{
zZ)YlxdY(kE(tp9ZAW2L`B-NABwNvt1o=@$U&5VLZkG*lN9;SNKs_u&{qGGOwLTe^j
z7W*#K>4ly>o&&Tp=*O00)p(!#3av42gv>1BE0}gLCRe`|0X5uSzSpXY95I?py1i>s
zi<8%L(oaXSc;=bmsJa@}oSq~NUYdg1&v+<+dYt<fS0TS-dokk#lu&teq|^39PJKzj
zgvp=NElVIHz)Y667Yrpz7W<stMfTR?4wOr2AkUOfn!pBr-oe;5)!<CBylJKanS3QM
z!cD%(#u|xfHcc_-nobSjN#{obv(TRS;-#{4b~+nE!0f0uoN$uoDJ;!1hnQZX-j1pv
zSG>-<_>g-@6Z?O%0AhEVKoKD}e%<eYiiFp9Urh}RD4+y2#4P_P%;3_5$kCo<f8`IU
zvEerZeSik9c&6**WeBjb-pWxaolT5J`BlC+t%y*1L0Qnd1c_2q)c$>O=+<;6p;<~$
z-4o})VnLaUdfN+C+QXJ>=1njt{@!&SnR&MrOsE^wV56HLMkW>3h|Bzzkh!CNgcBi>
zP28Gj759_5xu8uv;M%*Pf-S_kLrH@6v>_R=g_hbpt}4)KN!#CZk1#ACjygIwPDLXt
z)I-?<+0b2RXROk5#R0NfuSE^wi(2CsRa8SW9|cmOz+Z~0DGOwdB095Vn1*kUMtDY(
z?!s>OIykmc$7c^)`l_lD{&DL9OT5P&bO?9%87!7b0`5rgdJP>@Z_wV#*a|iU$o>y`
zC--<KsK;4iJ=JMyyib#p|5AoeAM#;$fVtr@T`vwtYUn2+tCVi*JT?e4Rx%b!RI0+=
zT>GRlNs9GZK1Q)j$`y>nk!O9=;eeLkTG1PHDTeI$_vb_3y|$9Ced-eIUVQ>Z$dbii
zRz*Hb-Z>2ef*mPyp#O0sKo^X!LHBtbL=*jn+P}ZV*HK3hTAKQ5<t88by{OESI6T(9
z`|=w(cdSY*`#s14s{C+FFNA=#-WD$$4iGt~mLGDrWI8gU9=aTtq!v0fhHFE-@Fq2Q
zajw=opaRuO>nM3W{C9?3e9y|P)0m#wWGzx3FZdG#YW3PxCu+hE1SjF36J(ok)PBoS
z+(kjJ#*WNNh?(bC)*3s-Xl86C$6cr6J}B@5DDiPd5}A<{klDiDNHe!6zz2T`B=JEW
zb3asi#rwE;=PvfRPJM+VLqCKmlDWfFy!S^fNnJk<M&|vfp~jd4SJhYvbWN;Lh^}_w
zE5v3|SRLW0m*7mkF|i)|0ZSY|j>Gj2@d>U@8<mcE=BE$o5RcAA^wn`$@C8FXIcMsu
z9-o=KjkkVNY16TvkDS%WCNy&_D>|d1sy2=jRIZkffDnHhGL*16D=moE-G5Qds}cKB
znu(?LmBbf_-dEs#F%pS^B-F&~lbz%7H%_FpRJ1USA5Rvj^(L;LjEYao-YduD7_V)*
zMj2M=f-Hi-;7tpJTt=_gvK6`XA2AD)d}H6OX%79_abeMc*g+qrRew$#W0|t3HsA&<
zB#xR)aCOXbPpDxpReTW#_8q_y#-K&gglE)5^d}zFWiV`A0*cC<hmVI2120y;f}lcA
z$+7SgBzexCJ3^^MBhK_kuCr2kVmM8~W&^1LMIuGN-?I=X4&{7O182Q>@c}bQjP`^{
z%Qu!*7ng~7Lf9_~m6!xJA!VF5G&06AFNim=)~zwomw^z-amaDE#<8CSyXPHRI}d?|
zb1Y6b;jrMn9S&?C&j2tlYalXCv>&kRKsvD{%OHaq=bF{y9+rxx4b2!LIQ>5h+feu5
z;>K9?T=IwG4eUuKRIA&y%k@YaZra}8)|P;APai$ta~T(m2$}|JNy^jY^mNXR2QZ6`
z%ha(io0Q|_he2*MSs|)q;$(2FOf&vbZLmuR+r%MUkAZ7MBRLr>>uVn}=+V<`ay)$X
zBNO=-BHl;etQK46pMO--VDQ=Hkyb`mrKyw9brw&SUS?M^4Swnhs<qPEj|S5?c1sm#
zq^h0Uj6rwxRIzi5bw`<54L(o(W7y3JGj4B@ZDt`yoWf11o`o?jpVT1-wu6Q3m;LE3
zO?ZsLpGk{k-9>){Hkk-)s^HAP!b6{Ia7GMU$~N-)%J>qf_MN0LY)@*$RLORKJNx5(
z_hE@Wc7_L~eQaVJ`QrBF^88ogx4+``NEA=SenkHF-nua|b3&%U{hrZ1yi8z&rE%aC
zQYB4b)Fj#gh$D%B<rM>q{{&;cJ12Ra*iC}*r2C+0)xz_~oBa1&dzzN}=SK6i;J(GJ
z%P@ulN0NWRk)J{bTD)vBsny-PABsMH-CUP!^STGXPIeu=k1rWGr~k$_I|{gBy|ca&
zi%oD}ZA-Yu-}C+N-<8Gy@uTP3vF!go92}n*K%?{A&a*VYTFJ(+bPq&*rZ==O0GZ#`
z=lj{zhT9B`K?rI-#*NP`*HtG>7Si8xTH{Az77Z?P!49<=q)twq1;tVmE<9aPDV511
z+dZiNp6lz_=HR<RTm@B{YoJy3E_}~ZR+4F0ZsWUm3PLiN249IRCfA!y0Md-7+V?#Q
zj!=_!yG-*mE$P<na>sgWKjW+UX9x#gzVxxk=Lw+vk>W({_fXqKhsRBCyFfU`+AvoY
zflokC8O5!&Lvl+72IEz;d((7N`JH0Et6$7r5e#ru{?~YozL(tL^Zz{TbebiPJQSKp
zZ-0G8l`nGywc%rzdjG_AX`CEBw7&!R!FXA6l5ZPre%&;7?@I!f8q<EavUgAFnnb>e
zH_jv1meg53`E*vyc!H3!(9Q?7zQwcRk>56^lz4AUD-!^ib(C5^2f6e?t_uG=h;EkE
z%WG)w-@vDM5JS4C51^3A9AImE!Ai~mz9|i_S>P<~jNkStN{+#MsoD;)98Y=UO#gC}
zpOfvLR4%Ebj|LJ{Su=R8_}KF}p#Y7G72V|BHNrI@j+$zp0mi0O0u$q393LBln>Qwu
z9Fw&~@IaY_)jdA<&qW8uPZO1TfTKUZ%W8sL`N=#LHgTb_NskP4vFbWfL5jC!GYJw$
ze5*T<(no171`=^5&Gux{MUn<U-L|1#v=U<usEXx30OEnF+o!w4dqbWKz}oB|<W-WS
z#QF{-t-Hhq09C2eYEVDO5-bOfx;N6u+l#KM#m#Wa&Vaa+>Ymv{yKEP#NbSY$TEW7X
zs)_TRq6BZ`X(;0yV(bU<y=Hu|-x#~qk1Ox}nL7cqeeAqUL3>BBF}yw8J}f;X9pfmY
z-%*gXn@Dj>f}0gWT(M2Hw+Rd6)@bynqJWo!Sl|?~<!B*B0>2F+)IQH&L^DtN$#06l
zDUi&H#~66+uBp%wX@3(>{EVfraw_gD)@A)i^F};c)dQ&Cr9e3QqnuLdP@X3mj77=i
zs+?w?|7&Lh66E#NceP+c`(bPjRg&=nDE{`vZx#AIQ{`XtnV)obeS~_zH)#Vuyx~UA
zQl_FhXNt}<>e&iuqK&UI`*`dl;kh@p^GY8=LpU&SfNFI7UOQdlqr)Dc!^7i#4`u~)
zv32o?_aA{Nv29!HHh;gweL}{hn-i5{bJ=rL+O>i~Bqlrg_z(ylo8-;Z+yb1!K21CQ
zB)`9ZKjRvuyNnB2)i>!Ya5IFFHC)zf88SZqg6u3ZziwV<%zSyhA&&|Qv50w;ZBcS-
z&gg%pL)dFnwWDIFm|r+s>tEqMDYK{0nQuwumIr`YG>+(~DDOEc0)aFCRq65Z5J9Gl
z_0P$R%L}$HV4-``TW5?{@Xlu>trf{!oDdlZ=pu(}<=YBp*i?DaGALrtx_^}$fZR<5
z6IP3=V|)Bmnn?qi;jmPL^0()?Xo&$1*~iDuea86#m()~vMY$s*`dEy!OW&J7$H~qm
z^9=wZA1;o>r5q+$KPLd4nc-QlCT%$*?9vBO0)2XJ!+o@5+<ZmT$o~hBNltz~XcH%p
z<jV&lGM_~P2yKR~{DK9yHneFi2U0!>Z%_r!E~`xy{J(J3XR6l@lg0g<e=Y}PX4IDH
zmg-8sy|yUCqQxmW-o)$eWv&LG%0N7hnx31`UM?us$9FA^`YcNZB1Of<VVmTPmR6}n
zxN!&y$K$tgY%mn$=Xb4Hbfr4d2QCvC!qdV?tdH3`_>-2%qheMBi$^kO5?x7hG!U0G
zb*iix^wq%=BD;iFBR1Do#j%P4#pm8AGo3&HR1A6tDn=3`Gg=7=G&Vdo?z@~v9}|1M
zqn+_`0jmzz5XzwpU4dd)VcOQ93r=*KFL=Kvs(s>Qk|MoeT-txB^NJ-AjyTr0(=?Na
zw_Pwfq`8-%KqRi{jwXYPO_WpW%dmmNV&?%0e;?Q(Jlq4pei5FK&eBW4KC*){SUw-G
znKYXsE?ye`&K4U$GStd8j?4i`J@C)QTUQ!2l&gKm;x+E>fR{y_F(*z*HuL-ba{erH
zSj54;lTW^25^g@A{pQ7AJwms~z}M`ger2>zq7PCyU1K~R><z39P+0$tCtj*`(J(dn
z5uzHrPL;wfPn#fP^0X(K>m#H}=>^GLxb1H)HbJX<qdVX>Gd&4D2A+06=EJ`<)+VY#
zg!$S&zN&Xo9~QOtHHDN|!Inxom43EF_8Jx^s%m+d)sgONH7>-?CE0R80;_8y7Y{^K
zVDMhhfq>3{{|+eO?gJTul*@W*3)AQ`l47w)A<;;E{&xuoks|<8SQyTtTn<cf8>-O-
zt0^Ctivj*Xn0_(YYSK9=JtBi`52HtH*K?lVB`R!uW)j@F;Ml68UcZ4#t?~n=Rg`pD
zJDvV6yQvS|<Z;X~d7qew^$7hsO`-O?`i?W2(2s9P*M5C+fMK5h0w>$?6Kv<}`!#T1
zjnKHmEIh;C2|Qwm=ec~bQFH8~Nz?=nQN6E+?r{H_lNVs58y%hp_%+!)rEYc~Dx_Qp
zwi2CU5A}qa4B)ahG1CpXfB4yjgpt1GN}Q^{a=tT~&(B#{mCATds-^}JcGTw%e@O*B
zsa7H@H(Hl_5JE#fEylk=q~SDfb?ZF7nafi_mHR5kt@DamP}BR*?Tv8OuFm}Ugzk54
z6y1272J7iDPx#t}nrQATIgqE#u-Q^kf#Q>Ct&rn^Nc3gJ06*)2j4{x5TfdutMP+<1
zEwNv{Q1L^87cik=CDN5i?*KO-iwzaI*U{6XZ=d*a_KjRq=qJ<WjyN1k&J&6>5+u1K
z1)14q7tcsXt$5Ur>)g|~6Zk<=W6vNC_G+nRR{)S<I^=o@_79%a)^wky_<vEgU(2CR
zRm;hh2iumE+!Hu(%E^{6zh)N4+_;alhsRUI_cJ1jBT-4soRbl?NTBX57}w&o4|vp~
zCOJ++07R5u#h}sL&cKq_WwE#l!g~zhgBMGWbt4|@swCziA8YS`lwO@7vhTGG1Mew#
zz+y>Dj8~+l@U)Gq`?5PnNM2P`r&}cnJ@I}L)dD8@;JO<omFfwBTU&z1aN$F{cZqQ}
z?gzLbXza?W&y)^zio8m4UPLd?6qxifht=P1wnYG9YUGy>$rH%~86;{QHBvy!5Q+RX
zMD;$mHzgPNw)puvGOt0blbPHUb`J<uxr_3;3s-zH#&w`m7J0yu$m+CLwr1p|xtQ^+
z@U0JJn#<umvu24eiJh>=I^k)ijt}D4C2HI?M-1E4XAMnkQw2<fC~&Yzc6kW|l1zM=
zdYdtJ?T24e**dpjC>@(JEmgwJ-cz>|p*CU%xK=F#X<I1kK*lBPtD=k+sJ|iEH<)Nt
zP~w9gbqK^GWNmrGi6wUK*#=k%Sj{M2eAJq8hRNrPmX4y5#)=oipav;e$(S$0ia4ms
zjSG7`(%3q;1{zrwCyg0w67g)%qv9>+ovqtZ;>6R}G{He+{>p?lFx$l+K)#A++%l2d
zK4xjPi(fE0klFuLvFUdj5Zz`3uHczPs($a5J!8ihWndIW><MVpQ)dY|=)TVErlpC>
z8Gpm1P+tZ6F}GLn=Q539l+8N??=p!9k*Zw*HB?PkQBADoEvlL)Dh?<t7>nHvk?W~#
zt}7kqU(WT~o?dS3?N?=wFKhRn_XT?GhE7bF2_G^5$&3}y4uN$n(kR|q%Tf@5Etdbb
z&+%G6F=CZ9<b1e+T120~*{Q?gIt_P(6J5RNzk%cUHT$SVJtr&gO#aDk<lL{R{3%y5
z;sShCX_NQS>r3Ez^~qwSdQF0$=g5trQ0$Eg$rlSpe>_7XU+8Oa_1=RwCI+!Z%n~oe
z7fU=?m*$Q`Ra8q)Gij3(927d8UOmFsB^j<~8GC<^6hYquRattP_;Ij@o{;w`T3lLE
zN=T6)g2klVqC%*W!B{I>PED%Zg5pwVqRHcI3<$A}>sqHq*6(0Y5fXC;?NBy;y1VbF
zD$SOkR^k9(zq<tsW8=DUaS+pvvuf6EWhP_SJB5Z|#qeoHuQW*j{U+{-FemLK)mXgJ
z0XH0*I}a5Zuzy@4b2H>>;0m%PjV%TJhG~@sN8~8&Vr72H*)0W;Mv}tnsTH_6%w)Kd
zYg`p&GJ<e3vW^KrTC@+5(w)-rQ>ciB#Yn>Uq<Uk_SNDr<EUFk@l5ixlFzt>0Uo75_
z>+p3^vm_MM>-}syf`dmrkqjrpC=7NM&pIoykW+G>S6AW`c>b*$K0igEz^s;C_Oc+f
zFyZhW)4{vko#FXL$1G|xikURY8?G1?x+9JA8}5pg#Lk{0wsM>FbZjXRm~u}wtoJ0i
z!LKuK(97Opm7-{DL?1$RkPUYk)0iFgjf>y?RbQ8R?tj>Eq3<@u>iBu|As-)tWFy@@
zu|zZ@oxNjVPALKE_M_xj;<O!rzgSEAU%}r|Vf{Q|C{bY%=kj{08mJ|x`d~Chx-*TN
z@|R>YBF1pb0n;j=SB&{bSL19R6>9d*{@ypTuH12L3k?9>o}r@<VfNz``+r3SrvDW>
zMp>qN#ZaRv2mgonlD%L84A%whknL~w&cB06z80aRibc<TVgK_ul<Loe5uiX%#$Oh-
z;6L>cbU!Z)ZJNu6TN}fFy>59cc82N1?8$*Fx6YF%S33f`lZ=d*2#g>f0=11<iSL3G
zo1buEn4}B2SEb7-JGO6}rG;7Gvc0%REeuGGbDHJn>{xh5CNXZ-e&5&oSv9;pYus)9
z-y$D;LCEZt7M$5E&Hwg4&Ps?LdBr(h@`|f|m8Q#Z2dgRs^=dHDxedL|=Bz>p(N`p%
zSM`ftNrYV5L9RsCEk!E_DopAYF8yp_;jsQi%#TaMB={2N-yV9C<l^g!KC?Z!_ednK
zc30AZAN^9~=V*;8;U>$*@U>g*5c{~2m8swoa*ZB){chltJz&!uQa-$t{D8`)Hn>3U
zh51!TpoZl<y_YRjE1eQ#9m}ZOBR1Og%k?Y`Nq0=?^~KEk&mxN+mo`_;e}-GHdsMi8
z4n6O01WEyF5m=%U)$VgCjzW_w3d1=TA$m0FZ*g~}mJW`eASC5!S8&fE7q)RiAJY3g
zqb&J$Ro%i-9|J*<`v#&c&#1Be2tWE&M9SO>D!{>$%NfkW4F*n~n~Fo-CctxQva$dE
zQI~*x`Bu!`nwBkh;~@COpwZIP-InGEd~mZY63_`{ns!P_vw-j3<1Iti#b)uln&<=$
zC-YN8I_Iq#lO*e7s)H|NX0evP7iNX%uWFZ#HPEv@<8-xKp(!+jnP<7oa>dwsy`*1V
zPbnFrOdtCbW+JnM%eQZ({o%18GAk)GK{~5o#?<gJ<<*4R{W1yx9u_I;baS-4YOacE
z`FAdt4~jd!f=O3J#y8Qq$aJ(qm}<)r=-mmqd(I|hwz-L?V|o2$#bZ)yfeK`QUIUTk
zGx0Nw<^{vDbD6Eg`)j{{wz+*yCzgEoP1GBtyUd*InvIO?WlPQUq*I3h)c4H8k5#XV
z`@MX(H|eVY32bh<KfNi0*k=i4_#|J9NiW=K8xq|WgW($u1coU*AAe8T3wkaBJ=k<x
ztfBHPiamc0&gyR6=!^)NE9=bq3!Q06RfV>RUnxGfAXzBjyu{^Z#8Z7eSm*a>kAp_j
z8-jP7N$UFlC6$MtE&`J3U4ZE<STUki$EWV|9-}n1E}c+~y@8j*DG&C>sPgJU@sr=J
zU7l^x2EM)g*>BG=+c&~;ipCjZeI}>w=Qndl@4d9=@m<bEKc6A4%dP$<-hhBBJUs(&
zZeLAVLa!qGv?tffQ=P7(hJWQC8`)M-#8|KGh)J(o$GKq#yEaVsj4rR$+|pxQi4rD6
z!FWymT_-DnJ3pGz_>Q1n;(<L6hUF(8%wJQ9?Z*u<RTdvVq18U$;~9OmbvCIz`}{O0
zw#u~Us4Iri;CeNQA+Owr)pf1@rtp2`RKiQ-4}gGmWqLQY7`iU|`8aD`K7P-aDVq=C
zfnEA`0Oc=d4`jCinoXNKL;dITc0`5%gmI?pUqH6o5q`1+<i3;`&j(7lrEThNqdzxQ
z#8Iv%{z9dgI=S}o5nIBPJuBYidVOP*(72pzXcc@kfn@ObDkrg0#^*ko_k2&VDbZbD
z$YQegv^xK1EXG3J7m59yI`y^|5t-SkR3`+@O%UTM3N9ZW=ip<|<yoFqnx9>d#3UD&
zQ~)_$Gc%cg$987@v214S69nn^%OO|xM0*-X@^a@MflObzzoRfyyrBFm7r+ljj>@;r
z)n<UJ&7w8Z*mrbDQj;`P&}Y1|?%N##`Yqv}%ghaL0aAy=V(PHl40|~GhRUsv3>E);
z>*NlQ0NSH`eIFu8)ijB0`j`oe2=2~uM<Xt4yz8K}r+65OzAo<fJHbc8^93poMie#5
zLAw+kd@&ZDq3-XOQjBHGSax03gtk+>LD{C2a|pkDV>LO^DWM2=y9pe4LWP|H1Ie#i
z_z+I4Oq4H`Li|#8*^0Sh8Tt~{3#vJSH;OH$U}y=%T~JRZnMA5Rso`ygo2TBNxFII=
zO3~*1m*WYA1%KkKu7~a-coL$I8YFiMOcj4ywKA3SZH)ene1)Uptl?a?*R(V$N*mL|
zAHyia^o)+GZ-afX1rzffmv^+GHJ#P=!u~q1nb-+6oie{Ovd4?RPQMdrkB!Ks&imng
z&z!X!$=vT#7l}+`n*C2MXK6$?*xi*$yhMfP@hB!%^tl+DPz0++1*>8QtJYhKfbxpx
zBz8;|>EfgaLFMFrwK1K-Dy6)uQTt#hiCjj(5va?-O7z+_q&M^O>t~dA$g9+Dd}Ime
ztJgm%4>%N@jqpRrLFO>UQ`n@-Gngy7_f$bYm6_&9f6pc8ESx&vYpf27a!!st7*Dqh
z5T^r8nFg>OS!==v`2OvD_)e0HpdMnc$h|ifmt8xTuJ^NXm<S&b#2icCFAfZ6ih(iV
zHzN2)=HDwsd@$fV2xkEN=$tF`eb=YofXbP6F>I9oBwhqefcsnKFF#X;Ug4q2Ull;$
z_}NM@K5wZCfoSX;uP_<HNPGT~?ZXLNDg8*1I@>(m6)!g$Klip-22-cX2J2d&u2UMD
z?^GNRDpE%1%paTLbLszcFY)=nt@ZUVzOn30H?ChLAA#twi2Pdxi0Hv${`Wi~l#3|?
z3X}Ky33^C!p97u1Gp|@d4*$-p7yn=jEX$qet^6!aO#d5OCL6=_`Vn<(jPq}7Dguvk
z#bJu`_g{&FYo&q4`z{j|K8sn(4~auD?;|VQLEH^JI%x1t(x;~o^61V?)k-1F##aV;
zPJlZgW)2%1soi6MJ8>KCM36Glqq=?+Jo7o)7@|BLZL9)AK$an^JnZ`N*oCT1+kda?
z!!~#Q1C!eaL=8tlEu?tbD2zH9{E}Oz&R-sLT>)wb#Zop_C>dqLCRW}l`{XQNk_&ef
z1G%G=_VZtecDmnpr5AB4DAC8o@;5of<8xQbwhL`%)ubnN;KoAu^R;{@&(exX{dlzI
zZFGFO^ZuT_tVUtt@-QmX!RT2VfN{^UKD!pLh3hOZtn;%Ewe4Kp=iRUYAuQYV?DHAy
z!Ko&KFYaSEyQ|y}-Zw!(??YMHv-p%<h4;Clz7#iFt-bl(VDrs;6M851A8fiOYN(#v
z*DVSYcHvClb6&>J5N<^5S9M8SIWsTHg-y#x<GsW$;P>3q7j}Giqx$d)8z$9b^$+4D
z3iO5iQz#1|v}%7NeDpdq1eVIv`GH%hO4D5lZmbAw0Q$R(t5%Y0q2y-~XW=4GGx<(>
z=Fo$W>n>|OD?IBi^A}67sZ^(}uoGFC-WGJhkZ=5$wc3GxGk9kKYn&XPU3hAA@i;x6
zT98|nMyGaDP=SO@t^DB)VTiToEN<SlFvhA-m-5(MdKKFNCsIRpmx9h(N(OH<x%DiS
z@G`Z)sNNB}B#FXGr7@Xf9|u*LkUryYScx?gj+?QT<>!&J1AuWbB|@{2HjY)g(5Sq5
zV<Cqa?B2OY*=zlVC&y#4w4657Lz7~pK`i4Q)sqZ5ZufcG!k^H}#`8WZcOF_4?f4S*
z1PR93p{OJ|Q*mAp6V{Nl>tE>XN328fN0_*gYo3g9x%`d#0XO-gM89KJ|7jn&_EZ?H
z#-czU)m>J2#;{-A0bwsf-qk;SyH|v1ls!gZ6pG)r^QugUoc$kjD}5Xyx>B?2^cZ0-
zvli$K)R_AO+6@i3=3v}?7Z+Avq5S0&!4QWoAM|~^F<FVC@8u?mX0wZM2(=51z*ALP
z;oMggmIBsJwC1N3T{d#!_v7LVYBw5ixsW*F83#|s9j3G91+y#J%_d8kj__D38hmPM
zYH(&m!uO>9{61*1{I(bd5<4`l+Vg-G>B9#rv$1)Bx>?C|)%~{6+UVE1&wi!-Cl-?<
zYZb}?#k!hm4nY)r<-@Px^h-|INiGv;f_jr?qf{rAXiDg%!xzkzI!+4^CUMe3NES6!
zS#dS5*$4h`Ze!Z`aXE$|=3@09KCoK)atB)tT|$ge^h~%-H*-u<_z1cY=@T)jrdl08
z(G4OK$$~H*2ZwYTnWrP4w?mRTO|p~HUe>)CEvCe7U}hYffg6iMS|dHQ3hoqqfLYmw
zp7XlLRV!=##^KtYn(JMkC*9XUMo3<cUl`jd*g>pkm&mu(H(*;RG-TL77^6*qF^HoO
z(~h+M_F68Q^qfsP9Bbx}gN%+S?4A(Zi#r;#K|a&)RV>ZUzNvm_m9xK-MFTR;kLHgd
zL)w>|#SA8M3+^)pn>+a(b`?{DV)>O1h`@a?l+rc?XBSd6mCWxCmT0m<#b%lhb5h*C
z{9mg@KwfkJKCj;`|39R7&YIf4YaU0OAVU21ls8P#Ai<BT;z>OD6kd|3F{{WQ-h0Uv
ze)X>u6)Bpa_%CkGtM{Z7(5>J~;W)a|g_MnN`_k^2y-{_BcJH{Zw}sX--gGKQ)jMAi
z-4&@AFLcZa+T@-d`jCp3!IWB<qu*3zc-{WH(0)WvyEcRR514Aq9xUpA=i;+iks3zV
zUYI4V6)Dh&l0$Pu_tW?oxkHXDcJA_^u=HRV*W!wCX}pb#EigsxQY9lGTZ1L(9{3D?
zCmx)2=Nq(TJT^UrehxYCv95j$8-kd}H#?4;54&32Rg5lT)4v0>Cq;!uC8c*XCW8K!
zxe-3+Xgi^j7k41nm|z+-47F(3n@_B_%_JKR&-@tXR@rKM_?>5N9?UayEzD^x4%^3T
z_qJ?d5L^lxJY#dnmydm-!jGyYgkCs5rAv)63#H^EjuWtgHZ(vM!7EtnhPc*iYAhP4
zfJEmz4t%Iv09+Woma^FJ^-cq9Ekd``nNO(-x1;rVrJ0E7AB7-kM&$EH=cF7Vl;M00
zXY~8uS48Fg%bVQJ>Y66NA7cj9nlaI1#qc!8yZ-U4C(2y`KSWZYvRmx0ku%LlGZN_j
zv?w)e9`?{(R1Jd^SrBjuf|yAauPURz1pUA1)F9w6M^w3wO8%>G?cdl|iVT(P^0djP
z=x;F5zj@GSbl|771EYHXi<JSeV?iB2#Vh;&d)UF7c*ZoQM}Loari|$qupig4=K|*4
zLAAJ>0s%j3E4lst#nh6a+seH9n!K>-`L{#kAI#y-DWqXl0`-6Mtw>xH-<lZz%kFRC
z#lKPcx7fUd{}96{GWY*S5BtiCIQ(;a_@@WV=IP@l_DZV(QxwkAILE9BJWrqkEYLw*
z5oNS_-bbnuswFb77)XBq5rNFjuC|TT9}syOvFx?Ta}7wB_zO@XH}AcYn@lWo4Miz5
zVJN2^u*G=I0eTT-sTt3$u+HN8*vyPdbvSO_*|hwFH1a;~rxrG~xEnJeN)~{MxDT)D
zL^@_a1rad;m&n;Jh5=<0=V)Z5mRvwDYCHn!(E>qgTEJKKlCD2DhZ2ZGz*369D!oFk
zu0Y@8v`+-Q<P2o;J*4wH`UF<kN0Ch<(oU!jwe6uC#L}+=x4?(j#|eS4S5LJ8@&?<3
zS~;x_;NVDTaAN=!b;a9@s&=R_%XL#OEeXci=*i3rz?ZK-2RJyDH@|J)tSX=WN#6d}
zvVBh<pBtrGZ~4bMYJoES(8My5!<Tu#b8@Qyj`_RSHrfR1)^6i|-u34FRP8|IBytfD
zr<@=zBP3Vvg7IcY#k2~X8>4-YeeThbHdIl&_o2M8?F)(?U6-f1>)H&n1@?<lKUA%R
zz+hX)S*4qQdF_NcSL&lqATKqDmpoC8%X6{W)l^r$?&k}5-yFOMqQWWk@aoDBP-cm9
z3lrzzGc)c!ZMq<A60i_u@O55&c556uM%~G3xcQo0dQ6Y8Pib7FK;%sMhgTpFbN>cJ
zpO_z}`_FV<bR0TJY}bN|qoc=M`!?_9hdo!1m|-f6y6g75N;n>><W;U0-!tkc-m~PP
zerqd0S*-rO+thvXs@X8-OFJLmYO3&zG0-V4KUp=UJlH{+bFHqt=z11V=he7&5=}Oo
zoiF_q)Iilqo^iMh!9i5=pMdF`pY2u?1yZO_*G5>8vy7Ny)RBRI_f_a|8_*`!j{>f}
ziSsvK;ME8`@1!l*YB=tAKl%j7ekEM;RD(d71-LGw1rHk2gKFpMOIBO+<1CcNRNg%c
z*yo95l(Oa9`IY1gmhgQ+ID*E$FP{5%h5zkoUX|Y(zGdmry4xA5=sO_!zILM->SlP0
zqhd5R@Q3TF%RWvZ0K5<9n}gN@;1`%QOHew^ZfIMpw1EBSK}lp#!7&du0_y?qgAEhv
zp?f*{UUW=izvB5Q|3GM!|A7+>$erUC???6l=Jlo;m~MAOjsd)&7bL~j+CW`oS>Zf$
zmN$Dw{5j1|A6x7+eXq9C2ddkXS8sm4l4C!Cf-r!-Z=XVNB2dkkuo0f7&|N~XEL+Th
z_MsjC=4m%8ML?7TkK9V|IfEHx-}}$bZjZl%u~Qh_jJolhAB?{S1jJD_IR;Z-3`<D2
zYOn~Uoj-$ARxa9<h-DBILJkTGv<U-u-bZ-&zCBn4(jT6R>Yh7m;QK+0;#P(H!1EC~
zuf8UR6uYpZU!Zn&vXa&82^xGI`jZQJ&=)Y!_%(TiDpb$$UXKcLIWesVr8(G%uBZ@6
zsp_p-Ac}|pmUc&a>GQHbM0K@uDZ5Rk=SRQeWsUAV7Bad47Fq*J@?5RlLpQ&TyFo$?
zkuBj@$yY95pfhcc1ZXRAd_=O2|K$GtQI?+S-Ir1D5kN)t0-uY;IbFKXOa?~a@5R+{
zENXM;mqUsgpu-FUd#s1t;FZqjmw!ZcT)Y*{l+nRgpLPUE!NPA7x}&@bB>JxH`dVLr
zCwahY)hn_ZczeqDRs(Ebx4MZ9l2f9$e}MSewl#oLr(1@RI6wXX2?xU2?n@30$~HHf
zg+d15?k6C=3Ts<(;cU7pK)4;eQ-if#B`<0Aif4XbS4R&^hoCBY)C;^x=KYcI0*ihT
zQN`@X9qR+$HgO$bdoRR&2u4glC#9L(oG_fQr*e^YBi;b>dEDG{L*iQe(}2<V#>D6`
znz|aM+6U?G4%2<V6{O}h+#ieg#5#Y&c5^VXbtX~9iN{I&!2ZdG_>LYcu^Oe?M)}7{
z{Khj}K9=d^PX+EidMP*xO@_d%i`_Ahy#eR~NE80k;7MzgZFE`U4UWl(m03{pSHPiF
zIrzMkYwe@r^c+&35jwdah)N1VFfkTd0-#@d4eq5H1^NM}*{jcTP`pY{BM!4`Bj3l?
zJ<hn8XPGZJ65y!BVE7FX-x_V%P}kXy8LCk`go=MerNmIu=u^=pIMa~gIB%j&yO^KY
zEix0gp~gKU>=?a?XH#Q^)m9kC;R&1a>{oXV)E8C7++G&iwuOt#H^yn&VH#-)$RZE@
zzCWZyzPYqSPNWL~?M!Q`h9B&o^8B>^V$CiC+aJ{NvTB%+^z+h+zN!`TFnt1H;uErt
zrD4!&TJc>{rHoV2lz1C$U65}OKU>;q>Kw#J%{)^YbIvk?f5}mnzRtjzTqa&m^`FU*
z846h@VGZwT-!)H7OO+ChV%#MHJlR`~3^RxOr*y`T?{EJf=Ki{^%BWrAg(W1UK|+vD
zrMtVOJEc1WB&1t91ty&$Dbn37-6cqODBZEg^jYg&&-)4X{>#I8z?_r&9`}gzI<Ma;
z=oS|o9_1X}LT2mMLo4X~@+_Vu2X|s&)=P%N{tso0{RQ600+@QT3krohh~8lDeO8%e
z1CzaIYXOE%BwezjTP@k*2w5x3w<Zfr#pY8we$wPuq_ZnUbjW9Uw%9j8_}H4WaDz3B
zUbZ;yl|m>9h8jES>$J=;gqKO>-ja*(A)5+bxtG)2_Vp~E(nxKKk#t<{)#kwCr}*`#
zYKZ9<y7B4-p@0?hgN{Sym|k||?VzKm!n>4_h~jS(2DiUwjj^=z6?Q9kR`o-E^^_#X
z!HBvGS`5A5-2NQ85{8%&kcu5eoY~<<hJlTd%4*4iF5oVY-FG-Xfq4b>*$(Tb8D3^I
zsUlp|k;452>s^A>2%BUvUFtw6M-TUxda*L*qf$wSmJ_MZh_izmGQ>c@rdANsYYc6R
zj&H#|2<q<`>t>2QF`Z<s8c?Ll_l!ggA0Qm8i)SH$Uko&71DW&V?2U!D!3=o8_^iH(
zu3+)DS<=0wlAMo2RG)Tuir#vP5ivz#i8+X8L|Wj{A#V3{PGXcQ=0lCbHaB!0;avFc
z%Ctd^6*9I9U~J#|EFXg+vUKE<KP3_qj-b$R#10DBGK>l=P6xRi!_hAw7tO<FjVuEG
zFcam1&Uno*+<l6kB%fJl64=#fcH93jYc={^!KR#)d+5@v8>I+Zu?<ss7gJ!i1u1WF
zwuu6b13Ci(SOaCNYEckE>I!Z6Sza!cO73~<TX<uxz{6}>qrPZ@NF^dpA?TzV#Y9;l
z-iW-}K&)<`QsjT538)LqWqw~TYQ1@M+rM5}*`ms`^Q~ZRL<_x?%{1t4`S<`%%rAeO
z?cK_+=e4ovM`5sDz#rJ28lldrK2WsKV(~z7d8tjT#TZ^7hkcv;*^L8j(ge@t-Bz+8
zI%oxv(a<%H3v>zD9)PR^Zx|jl(ra<Ru7B_u8sKqT#?{A@VHm`53;%8-`wgZBBB@vs
zVoZ8NP&Q#*0USXlna~4HijTf_>{XfclMK;vg!^i-pg&&$4bMWp_r`k3bFp=Zp*rfr
zE6QI5_7v7pi!Zd>E<wX{wMpcH3_)25W6Vqb$OOR;pyS{KPp=Pj(yPiX8+V8F-qk7w
zW1-bOZ-%n+Irixt)|zG*6ZGVv=s`pemUY)MoWAFJbZh~;Zs>~xI5hG_5eC6%>+VHG
zE2!Ni!w+3pyC9&Bwt_f`x(=V5=+njaTVq|0A2N3r3p-*2w5?aw*$?uud!%PXi`v6D
z+6IFk#8NnIAyV=9O9ZvE>_n8C8BkLR-_D6Vv|ula*9c`*m86(wajLsZkShBPM-G4M
zDk^cUXwkNLC}mS%n#bnSg*yEcZ&EIiOiK*~8UPv>&UpiDvdY&M+=%{gSyqz}RF+w*
zyNy~fR(izN*v00(rHm}7i@r&=x1g-cSK&7yHvLm5KOGV^&m|8ip;u=y=KY~90tdgO
zNxH(UHTN=vq3y=ZRFz2k!*wO`NGdLooEpp&^5;J|N%XR6B5zqPZB!O+bv<Xj2Spxa
zQ14uh%oq!WFl~8Ulag~PIuVG9_HmC)GsZD$XFY~iV$5$N8uoOXz_MfWu@nU#6kOv@
zF$u?|9|=wF<&(RGaK7{+2_l~lm=S3O?TS#EvW;)Z43LnJ*qtvC9PYwI1S`=pcvP$X
zMo7VMkxY@l;dpU%V_YEQeSJ*kpu(z0Vzl6fN`Z~R5+;!E!nAWgPAMvlm5FR>VY<HA
z<FYLkMWDi|!{)?P(E%$v{FKSosH)}SInHPncP4HrzPuXPVqg47_67l!;J7_FwfbeV
zymCvvf)oHt&8g|-9Qu|~4!e>p<RvRc^rVBW(rI45S7M|ADV0NJQ^!xe0=B5W;iS%x
zk3;7~w?c|BBGp){I%89Fx80<VIg+e%B49|Qz=b7Gp7U;ODdz7HLLN^JD_Bm$8B)m4
z!zBaDZ%3_LILgm`%bW?=;_Y@b1}WqgcE6oWq6F!=#cVEEX5sFAVUufVIl;L|Cc|qh
zfs0138WCN%?QkJXMdz8Dj_oB0iTIq-NE&73^=?nV($oD-x2ZFp_2B5jf-BNC5jJuX
zNouGn!onzWGI8-+9}(>Qs1gh1o$|x$pL(WttyEs6)wrAh{MDQ6@khr`JDq`qFR{<N
zQ>6R)Yr<$+y0rO0dI2sj<@@%Vd#sy0@tBx5+3)g}DH_#UC0x2D8l{ao=8Nh_s|yOu
zj!NdVdX)NOzbW<SpU~jV;>Tp$<j1=Zgb>rocLjgz(ZgJ7-F51PNe=0T@AT-t&Zk=J
ze@iarl!BOrs8#34NgDOm{Z29-()sR@1!t37ul5!%7?uGpxgPs2cX}{r#7sJkf!z$w
z7)-{BrIXuB%joXaCX*ZedZ;|daa&jp$_y{)Yzrms$Odb?)lgIKm4hWc>KVcxm7;8-
z9B%vY;fQ$F0{r*n+rxWd17Ph1u?1;-)V5(PRaWh>#k!1eoL||cO*mZa?-|F42*SJb
zc3*d(#xwj7G?bx<i<nC<jnfrj@#S(LV-(NJ;&vc=6S!yEmT>fg%(GVIV?t*0cOgmX
zN%G1sM>3g+9yBUB(k3A=&(tq<Ocg~a2K3XhQ8=C7tR3kHc!0c4@fU-9&kBYE;u!a>
zJu=Dx6xDO+HV7pl=HmxvTS{lHy{ME$^F=Lcui=YXzm^t?4F8)D9dlaR%nkFqNkClU
z;uCtoeoqB!`_0a<e;1IK%5}uWQ(U&)Cp1tA%8Zu$&%fhw>aIW`+!dxZAPu@yJq3_*
zln4Z}V8UDjDrE&?^u;e`J)-08llDrfnz9R!%&vl{8N5pOb(g(0=0sB(B3LwVJ)X^U
zh#-9VGnL+k;AyiP@h#W@;pS_GoPfvpMViC3=x*Lmk+QG`!;7_XIkGl+blmvSJzmeZ
zRn$42uxx8ZVph6Ro*%Xb^rH92a`gORnfJzx#T}?ipJ-;K31ditQ72!#TbhQUM685Y
z?bZEp)a(Z?#@8qX9`_viw;0)wXmsQ&$+R3<`Bb7zv~#xWKC%>53lcXEKHpvcpMkkA
zYVwonx3!5~4#)LGl-L%fSh$8618U=KT^<@Bp(@e(KSK|6`Fzju*Uq)x?Jha4xS$Q0
zs1>ZxArdR;^h{DbEMXNzKHI1y8Ne%u(b;B-`jNukLt*$gnwVen;zY*K;RiNyxX_S*
zB|%<pJ3T*I8e)@|4jZvv7O6`-aH?8oW*5<$i-Rp3mr}ak2w7*BN5KHTkA2Z$wbY`l
zH1R~eg|8X<nt>ZrWtA1m+TN%8l!Jy)q2yQbtca&&D%<MY7F__%!#Wb;k$6EteMdrn
z8~9y#*frm{Eg)js?z}C9Urj7Dmb9lu!Pk2~r0r{~ek9?SkZLz41zv)lh3lL@wRD-W
zLs7AIenXlKkkozZNrWg1vMF=ZjNE<;SCi<FUGDv7;YMO-V)ZdXCM4ek?>9e-ZgA)t
zDx42w*J23lIrOpLOcW&Ay*IXdg<E#EaM4&)UgcxIQnNK>B9-S`aQWQrcS7vBF|^Pr
zFXka$ddtFUy{lc#lDGODo93!w-6WSrNSNd$4H}W1_Fx23(^~<J5DS*>Rc%iMyeKO{
zlT(Wh9l{v8y1~UXn(6?f1e~ZZz2+ak)Z=R0)_QH4CpeXT^f=b$VL+2cXq2Hc#XhY?
zj&Mv-OH9laICSqY)+A34Gdll{S|I}S8wp{q%P51lo~tX^g4VXn_(Sw?7x=3xa|F3q
zbzjHS1PQ?;t1qOo5ZJ0Qa3A!r&BxUht%P+4$7jkn{M|&F7V~#9kYJ(OI~%&j3zy7b
zmoenfGUiR)Cf92i+?{@#zQdWhNE5k5vv-3|qrRP5+Y;@u)i{DJWzV7}FelKgoN5`}
zn9fUCM!Cb1LXkOy_jS%ADqF|Ci^Vtx@duYuJZT?;e)?y|vHDgXU2+z@J{cT*skpDK
zzLL&vx7hX`Y)T9FQms)=G=>#{PI>y21gto2n2Me;&|5grZsl!u*NnGedB%f^e!Y<L
zm5F6|xKnxX`lQp|VBMNXc=p2y$G4qJ^H8aSbbD@Q1eO9#gdLWEH{s|FA*SOAs;#a<
z%|iGW8g=FNtz&Gy3-|#wLV|m*TmFY%fVpD%p|_$1$0KNlF$km|Y(C#vHYI|6K##(d
zx8{!i$;G7C<{|ZhPL?uHDlywPn^_?nv@2w-fF6{1J&UxEve$!3_2vx)1|F{OrV4g;
zzg8rX;{<;=DKK`6X+skBusYIQi)X}k`83WCE9|S2iOUur{;uALuru6c*O+YiX&t})
z=eG|@)iVJw$cvIAIc)RFij)ttQJx+otwaG*+uT_m#uWSeFkp@q!G6!N&9BB>9LnTO
zboPAk#Lm=}6C8@H*vHCW{c)|yT9sdj-tNcCWw__OC|hK=EVO^4TNoziSBbY(W@>Ga
zu`|*i4IT;KJ<cBpD*d9r!)tNhH&V3P-Nx^bH{;sfaD8p-x-S*7&T6C38?`G$VV|{N
zEUzEkDH}7t9sD(u9&5f+j}8EGuX;4?^#-q#bd(A05t~E_#&gEerXoHd+)D3O<|yrL
zBAu(l4=P3p*7_LyZ3`C}ysqVgCD1Uz@n;ga=-VAD=7n0ZnjUMbc#jUI8ja#ZgDV7I
z%$WP*u(rR$H22bJMf-Uvis{tC?ql9@_8-u$3oGoQqIrAIc&`TC`_~Ba1pLN28NOWK
zT@XkryOA1tKseOpAJloKfC-n6@Sbr0I(o$QTG3)eN-6wZ9lpMmDf<P{EYbQ0pVQpu
zERTemf!@NJ)AlKr1zY}sy1GPYq5VF#yZpYH%1UEU`TYNSdvYQ%fp{J1e`)f6uYoqJ
z56}dvKP1Pe|E+%SQb1p&$Y~|`Z&|vD2x#I>&4?}D|9`I{1uXr&Hh#6f`R^MzNObJf
zFVB}Q(|{kMixgqnm<t=Kt9tGs@b8zJhytpz`FH<#dfxm~%Q+%M7Ls*W_U&Kl#Qw`r
z{-1O#5e!Mtkx25($-w@<Ka3Fisub4Q_5X<X|54nPq2D%_cxT4#zyDqp@T%=g*8f-E
zHpjT{Z}ZB-2cGQ|Q$ohV{yt&AFYEfye1zw>a^1(>1x&=Rpe<4#9Hv0T5mt=Q?XK#D
zJLn(o0^OCb!2iA;gH$G+#j_34rv~+3c`|<2-K1SWvy_XTJ#2{_ymXY#NkuvYz=btL
z;cL-!1`wy!e!%VwO?p8-h$4bINFY~$n&2XJ`PoAV2zI)Upd77Dkc<SHpRAzA3(gOe
zXR4{g*+6L{I0F5UFNE*cFg9G-m7s}pw&{KV9c^7_tpn^39@m%k?Z1cDKc3lexh;sP
zGQ6>!%$HrDLwjH7>?e+#PH+=O8G{5gNuOqCc~+&lffiJ7%EKk5gwiul1G}M0Y)69*
zFk^H>qmY+)${ee~^#M`|dOh$i(@(d`?TdKnAUy(oaQ|=PP8Q0_-SSn9DF8vPFcpiJ
zi9!9^AyB!yHn8*$w81L?<`Ho6<os&(z>kzgOl6@s>Ui#b3sQh=u6%D<R3lZ|KyrbH
z>H7n90Gf3MD-z)NX<<H2zWEExMSmmKe<hxzuiQ%w75+Bg1)u}eK6MT@X51|w0CEoj
z;CFthW}ta=0RfA&Jl*3I&>j>P?@J9I-c>6Md4g`*ZqSQ1`R{trxGlg|X`in9O(}4j
ze@$u|9ewzQ!^KO%{F)fcBtNC_z|4Tt*u{eh%W-o;L+d^6D9=Vz#W34YFz|0PGryBt
zO0TB2nOIMProS2X8j*9R1E0n<xR<0*3}OY~$9<ARX*<jOTT{9uiKjzVQNa=P2&xak
z?Vz^8T57RP%zl9b9+X{G_&R`^a2vxq%1k~byaqW|b^Di4P1W^xD*k&NNbT3ud7Uh`
zVH4}CMX%w}hoh0g<|$5`GpG$^Z7TcG1#0W-E)<%n&@UUx*;O7{z2^R9MVa*M0|;me
zkjy?fkG=us5oAEKP7Nsof^U<;a9#Msa4LIu3acrHH*n0^Q&vGUpe~{@im`9>y-#}i
z$WNr+>0Cl&eW5h7<!bwW0Osec&}atMu>IHu06H{;%Ui?M)E1@Iu=`E1?hp))YnZEt
zd#fO}gPn$P@D9Z7&U*Ue*qh&xee=}LaGlkOAYM1ESS{NCcA<$Qy`c>tccN_cMWaCN
zT<bUgR8w%#fG!AR=B)Me-LJ6-%WfU4e=Qw2YfnF~eMPkbSt@Hl1V*x6UXq5D`K_gA
z&sm0ZA-6I*FV%inHB=K@%zXmoHGbjag=LI<=8P~#VG7xace49J@%B9jz8TRaC=k$Q
zfaa(G-Y+Wv=&g?X8K2XDV?oU1ah2EPs<Ws_NEoQQ-5_B6`vtY%;QB)FeBC<0rv0h{
zmLvGOnnp|K4xj)P*qbdw(dn*_AR-|2`*n#aA2V=D8#g+moUy4h8@g%6RXuFd3WvMG
z?0}&t4EY55bUuRtEc}CXxKe65whpwl3HB{ObBV#zU>m7=mBM%czFgsGr%{gpz{Wr4
zbMP%tO2z4n7osHATaQB9eZ2cS=c^#0S^vK*fZ!9O*H{n}=?u>YDffvqvDb7Ma(~qN
zfr6wk*BwtOZFARPX<WOX&3$E?H*DDYI70LZDmZqJp-Xm6Pu8zSv4qr4huwW=m8yvq
zVy%s4*v5;cydeP{<G(&dRqL8&HGoRU><*q?Q8$$E((t$yO?0~N@+Ck|Qq^e2_0j~O
zr%D*0BCj3^S&!81B4`qL%O>;oKcyl}4GBAg_;ATF$xR)s)~J7~t5YohA07qfj@^q8
zq7T~f;XkUtWOh)?!b!-KW9z%g3;OFK4l`{V?C8~lb0^L~A05A@N}c&dR!i}o;G{}>
zH21Rh8J<O@n9j74%SMe*Mx;bJg=$NRl4ljDMOwRij*V`WX`kWyWDGt%tUS$(=+)73
z{Fws<t3lve(t=^$cLQU~#!XWDr(0-W;g2pm4YSDlk07tUrwtQ9vAg{=sa(C|FQ^=j
zyG<H|c_q^F@#8wK-p}eel>Kybkfiwxywf0OJ4y(`-Sn>2+nlI~f-jr!NpIy=a|>jV
z6%D3;ET%M9+4+}fu&GPq97vyix3t5NA!KszNTu%*#j*7CI>3UWW4=Us7!ew;uqfdH
zoCU7>im7ap-6{AfhAH*I#wF0IUoo^QHC~a|n4_@$QQSa^(@%wT!ZO+OGy(s8G}EoQ
zr~Mhj80}gW?)SBeeab~OKK$eFCoPjglWh2+6yL^e|3GEm+wW}s9~n`<jYikRvVqW9
zO<v$H-f$lFh7EY`{5Ek^4r*`A(Ce@UF3E9kDB!irJC#zK|EHcojjMw3qv?-;51?2u
zg0ckWfi9j;EV21(=f%6`T2LZJ^b;r&>vUK9EpSpZ4za)?&Qi>Z9%Ip{R}Z9Tr)q_Z
z`;-IRLPRfCf!>s3tm8f{GZyal^2_EtUwU1&$;&O{Mo?b1zB#8qs^ARwAS}^(YH1W^
zjCG!!_S~RxSgPGwsN@W;l;qdcwWhXDE@R!B&o`JRUh;6ueR<}R`BJLA3YbQ%o;sSL
z0mW%CHF>AG)>Fd9FX;dIRHOcpI2|9VS>t~kSZ76NsntVs6jZtd`o>5kUcAhNc`ohJ
z_O_3JZQMA9%pdnRvfxgxg;56?VQ0g*3MO3KZO1c0VyI_T)`C>E>x@7cq1N#_Z7GGG
zhM6*6$oiE)u!nl=2~H-m0t%%@V!eWDPY{8(JQ){HWJLuGY=P9Czj@$qkob^TS?x$e
zPlHQGJpN|G(uucgS4YsDE;rBHaxANipd(DodYOUnJe!dvc!(%-8BQxK6oNR@hv=g~
zh=)uoowI-hh;inxglTLH)IB;s_aKSmV`m-YHIgmT#AEKJ;Q!7c_)oL~fp7}_KAM_E
zPoBj4RQw#z3)X@OgRpRBRhkhsmo$oves7aRHeaB@hd>ycx$*P^oW3eTESnk%&Q#^e
zXosouEAgM$ZrDQ0n)XXr(-U8reyFeQqUeARL^%r|X>3^~3_qtC4R;%h`FFbsgcmfb
zb_aW^d__IZs%4ztQk+Dc@EW(7W`#tZe9e-2<0koFaa3Acp#5*@ipnl~!}7ic5draS
ziJ#k_If(&7l_$cD<d|luY~lzwwc89!jH+Y~0v$TybbUZO#RM)FEGvR=b)~-`=Amb8
ztG~}I^@7=9Nn7WLS9OJL`X#aOTFtkXr!O43O7l;adLqj|fZd$5TrbZKrHYyXho%<A
zj&o21#cqI*oX}zj-l>5_GN1(?P&H9BRe12jI)>up;d4PN8sUr!m$F0_t7*t`Lgx=@
zc15~`!rn^zI50IazufZqNgfJcffcS9hfJL#UJU|XLVy)Cxhs&Z)26Z)uX?>SW_1`3
zJ<pFNUud?kB#e`(LzIBy2<K&LC<f^dR{k&L_LA|TSc?*;n(DO*lBB6Z!56M2=tkBL
zyGSlvuyBazQF=MnI&}}`&I6#O4QIaZHNe=!B^zhXnTcXR#rQS-xb2}E&=mB&UV^V2
za7H!R#C|{TD(Y0HXBf_^1h?4~sV*;SxFWLA1mwTWEEe@_VnyuR37Q`IQ#^po@sh>F
zo+L>QX4!PFqJ;`Ug@+NoI?9_WA%CJXn|H&d-cF(^sqT6N{qCbJeVY1SVK<)uraDSC
zb*^K2HsJ7n_}U0<Lyo{m$`IMP_{?QkLUEpJ^lP54Y0I>(+Ue;~v$Ut48rUnNYfy{W
zKYOe9)Z*Q!Rp&S5q*W6$`!=#R(Gr6Y*zPc8GfP-!A`G`5!FpdbF?s8=CucY*#GJ64
zHIjG1%>Q9<^Y;Xgg7H1n=&Fs8PH+?gbYOI{yS>wpyjwlMXN|qJXE^^V6<xJ^qQ5+U
z9<aaC?uR<WPo9OvN1y`;q@ULrr^@^nOuD$R!_{PH5t|KNB>dtPO)KdJp&h@P#1bir
zG|CKq*SXbn4m7&zf(&6s^0iW<_u(lzsqgl?gZ-B`@6X1{Q!Mkg4Z1Rhh>8>s-%zf^
zdq<}x)K`|U89yG9Q<EJ<mW27PA%UYIrBoD>_N6(pt<X<{u<`zNUeW$2k7#D%V}W!M
zR;Qs+b}onT{6MpJ1%Ca{nI|w^henftx79xccP7-5CEX2dJIg$a>smOvH<j|Qjmv6h
zC-FZT{IceDE?{+(onBIlKP>t|%<R6)x!5uu@6Cv@{Us3r#OfvQ@u@rbyqm(yWEbv!
z{mOi&?C{=uzql|2EWetD=jODM7bz3QL)d37B$Wlz2lbw|FPaX_=^_o&3hW-HIQBdi
z9u@lEPw=H}XJ-{22wYif4X&p9hq8Dr^OQ?pE*T%$+iEZ16Q9<y+E|x;KfFyQ=Ef^$
zj|F$eMnn0sA;_*2LC7m`i{2p`Rc66$+L_AGg+o46P}w^+lv|(VZI|SEDGuo{ZZH;1
z0=<XG-lqbIn(tRO54rj%tmJ2I=qGi3!O_z{u$ll(LY<FmFX1m4?iLyxb>0S96Kp`e
z^Wb}*i<t`?dLz|fNtNHq%I42b5FBvcYw{`6W27jNd_>i7cYarF*R~gAz6X%>vVxMQ
zKPliUb2{(4?)iCP%R>C^ND(GFXOy_VMIxVJQZ2r_Wt5-5SKA9KvMoBnKFhHC_Potc
z3+x6L?Nq4-S3je@L)$#$CFFCl!u<Un&9Wc<oA)+j8=G>u5Z%!k>M5~O6cX9CGAixh
zu$MsjVOIrx7ZZAL<+H>#_k-wR(zDn0>(5DO7Pe{fT&WCC*QmAXVoM2>g&catY*oL@
zyYjh&lfTwBT|x}^ZG<HCH;|Ku?3rf9+dD;%2@;%xTAE^c<RkDnSt-03Y&USHyckQr
z8)z1MSlq2PwP)EQoIAvu;Lan=?Tivk82kv=mXF#=E8;CTmG8!dktpjhW>5daFB9le
zAwBgQ*O#~sp{O(x%ko(Q4SD7GW`4p@C)6NjSIuz_nTZrd@Jt4s+JPnuq(NRtz9#Qy
zDTW{hk0z@eV{M{tLA;h=S6AdfAR@L@0-_@z-oO-_wbrzRPoamw1oIFMsr?G*#ZXV=
zUUw#tUxt+kr8vfmdKqA^RD^^Qt-ceBh)@i-2#3mp$4nwnw7kjCBymd<(Ss9zIov}S
zQGc7~Z9f@=Rj_n^gr*{l4U30NMa|Nr9WI);Q7HZ746lm}!@%o-wchxWn9e-W=*zX0
z;FZy2O1idH#bM}L5IMV?Yn_5|0b#18dkENPBWBLI!<Y%l34g)B={^gbVO$eXYawI*
zWL)`zQng&j+w+CoJlM;~oz?PMbw0<R_INcQFPJBUS;EWGT@-kX<@Gb4!ZZHHbb0M_
zwgcAb<QQKEhRGkM1m-hj=JP{>T$%*z1Ne*8emN$m>+n$z!m{F>;i=8BtG`CD?#82(
zeMo1t_LlF1dfdgoDVxt|N8Co2+f3`JRb7;Xnsa?fy|vu&^?Fm$GI(CzTWdPOXLC{|
zeH-W+!f3z};O<Ml-|HMf_{<xz>nmGNGPm}I2i{JaEz|pQ4}>9AxpF@MjI~z3)STgj
zd}qtK$a>}QGhII_2$sdehyx~fJQADf>e}f80ver88Z5mr+p8iFp$KE@+tsq`gVG-d
z-)lifM1zqFA&*K8kt;0bOg8X74NZDG*riFD81UKn-B<O@q2SjWx`e6T^aQCtK_+88
z9SGDy5gW!3$786^p<t+rXw1(=pT(!6iF_0t)~hp}eiy}ON}f*m$!K86=T?CV!WvyW
z7DIuhe6Z(vql)oMlu##b`rZ5~4XP<xwf{z&3^je#Z}B*6?SekhB`T7^oqtt0BRgEI
zGf_V2<6#rmH_Se)Z)R&O0u-}`-xmjHPv~Q^-);u;#x^FkTrac)IU!O-w&*VE@&L&(
zTt&sl9a8NaJCbmEL(e#cTJuxQ<>s8^496MgsJ?0dF;eCS>ob4%A0s7m+tjFr3<{S&
z`IKo4qbwL0-(Bu`2h0@t>;>?g!#IZ{5!5Jt$5^W8g`{8N!bZp4(6jx?867UwBt@09
zV;oG+W<{5o6EaqG^`R8p8x}z@g{SNu{c&(X<g{P*1`<kKt!<(%`k-op8sQ@6fIE{d
zv$vGJ-R+_Bv>nYq$$5Kt%%E&}yK*Z9&u;dOs>$=@04q3hTBD!dl;9oER%E+a)@ANq
z!_l9v`jQwo^i&(E*Feuya*J7@74Uyd%-E1dTxg7I72{&<)7Wxq$0Fx@KW|$qszjM@
zff35Z<Cv_U`!G%3VyPu15~}6~t5UrU=^^;0i}p=Jtte%Oz$T1WqpaAbKnC%hbtL+)
zk5329W|>cIJDFaijaR>~PD5&ivakN|dM&rNUi~`wF8E!W(rhmmd9&0R_|25iO;SkP
z6A}IX?5@dC(X_plZPr}kvAd7Li}l{v%9wBG9P_aLinn9*LO0NTq5G7+tE+3~7PNwW
z(nz;9G_CELIWS0MN>jd^J2p?0^xg`T(_`o~+uHdMBZ3Eeam-z#W2Ir|!9g$B_k3+t
zSSPU`rK+o%S(av4UP#vclwwTx1~&;&C_;)Y^2#iU){WAk&!f8EQKgBY9J^q)%Ei{h
zLcgDF?7~FG{kqa#>urKGpS(eqr1QHBO)Q9$winY|KdisZHikpA4|*1d-VBpNIOTpH
zJFMnk2)bw-A3a@QWbaox611(;I!`2=J<_vDAPt>+>n*N*uE(Ffn$LEbjp=gUc0Ll#
z?(uuK-u`f@XS})pP=n_2lzm-ZuX?GU`~&gt5$99VmctRvwRynWhksgT4K1wsD^oAX
zz!}s%+=uDD`|T-Y>cc}1S&z!%1u}{(8|O;>5v5+4Sc;IB@AdSZna5wOo3plxmTW#@
zfxm)VfpKadZm1p)yCHVp$L$G98T?8$vulk51g!sCM@{?Oal-w`F2C?6At<|l<ycAQ
z=*8`5c`GU7WA>M;Vr<CP$Qx7LwkymhYwqxN_zqH-V|Wi~9GTlCr2aeUvlV>E)u=qv
zwd?lmS=IlqbNKhmfCM*PhA90l9M*zQ%<;3qhdvWoGk;sRh&w-QuHLLc|NVONH@Msr
z-_>y0%Q9ps*^}S-z+(YQ9b|$ZWcoavRD}3X#La;tQ--wrP+))ZhxNkxZ^haX{udq$
z{{1gJL#5yUC2$9z2l=D;5*NH_Ap;k(f(&a__XU$<Oxd#<X^%}Nu2v&ROM}2|euCnp
zT_voThslA&kxG{5=_<BoV{BO#oonb8?9r@plmlPp^8i*nWs?N&JvP_iPlv>&?`jUs
zr$(60GCwUB`(!_kk(zhH5<v1FfmBz|*L-OQ_r2C=qlq#ee0niw3j_4iJ1|$<Smi}W
z)49vv5BbX$0<*E<nFMAhguCa#Ix*DifsewepB&<oBC!~u2)eRr8K%?DO}(e~YPkD=
zk+)vgFSp#)Oe`gv*LfQj=e}ZAY^Ct^IXf#~js*e+{~=3lSl92?XjQLz7`z(YyOT+)
z_qM%fYOS?#PM`kWWjr$2loXrDq4RVN>R^1Pj1O|yLx}dNEomn<N>NxQ8H1Gmdn%~h
z1ja%5)gMyiIh$v;wJzrt$>8U%la3fkM!|IjQOZh!7wQD;7Ey{k@@y8N$%ECeqwKX0
zb)o%kHi*-QN*iNU(?Ivi*L}<2`yF_d`DE8DsS28)9@cMoq7~fq1tY_y`}oZZKrGZT
zF>0f;XV8WcYtwe1SW)PqpK)x=_p-Xg<>+~OfrahTk~YM|`eoDAvX|?ZUXo*)bh|wF
zLtq)Qd4n8)ao2!Zr_||B%`+G&sKyas6iR#!4o`@zDh0+jq0t-Q?(lj5{b&eRiN^i#
zYlN)yMfYV%3ImGCI(sJ!dGtB=lA|~y#!;d{8gnFbY7YS=rn0YHRxGFnPwn{pS!$Hk
zv4*qj4T9V1#bdQ5SW~<snxM%KKr^1i!U4rsn!f2vR<5N=StUal_Q`%4ADxoV#3yHi
zCVO8W@`wkrKOU3dTnE+O>>w-5Qx)9L_nF&`L(a)5S$7D5AWPJ14-(65;OdvZnX!_V
z41_m|KHw$<q@kN53fBZPeBBtG{~EnZ$rV!l%Rjis+j_G94R=G|`RNezK?)7Veg_2g
z&L{`%mGt$=RkVXQWz7YmoPJ$M*0*B~s&MtzJ7^_{2loB*0D(t~x_;!K2gO54(@!`=
zIrGGyE9wXDURh@3autrm)H2MJ2)l`g#}XT2g<yNN%@2i`z0!K9w2l6)JxMFTB|@Ic
zG0jCcW?`#IgJ*!_^|f{qk6d-?ORF;OL<m)#T%l6-kCUmV^_F1=K=n)ln)`c0sLNg<
z_BNtIkN2o%>YTW_Xw}%wp)xj-_&1ab^-v~cM2%C~G$157lt<x3P;18{aI=}PucRZ<
ztQOy@e;bpjZPx^JguaM)q)1%5r!@OdT><3_UA>yDpz8-A;<1;Y|Hxra?=FGc?1=y4
zri{IxU8|a5wU@kmwT`^IV;5<2MSiTk=CWjw2LCSb=0?t9_+eSiWU*O8K%F@(TMO?V
zs#G$f+!*8hvXg8F?rL0HufccCq#&o25U=?_C-}FS9nTaAv{PUUjAPa2!Jfh+NrEY^
zLcuNZd<s&!G?F^|>Rli;tN0xb_M06^dgMT{B;Cf{sgEJ8)^?Z)%zuHARc27sZ_oy=
zl%6L{IXg<{7C*T4eZ}Tq&{rydD6WP#;YsV(N~@5jo(hs#W)mt-o$^nnj&fq`&tpB4
zbMbNqr5F+#LIEBQOoo)?as4ZH>z3;*UGw}-W@GV+>%gBjj=XX|GT!paTbe~1xDe@0
z#Px$fib}RDvB}2;0IR)7^)u1adKh})3vQf3enHT&B~==|D-K!~uf_ue_g=y_xd&%N
zilSz~Kt>^Z0FSMcxvyO2xLWqpXa;W@LLhbmeFDczqDpE1XL8*y{3fVuJTRZ-P<V4H
zpO3*K2iw~E!Rvg5dKLj>Cu(2fu8$NJ+G21^X(zrXD};A{jBlSGg3n*mQli`??T-wB
zc1yen@1f75IE)w!#H<IGUaM!e+(PozZaR_$gsWXDPeW~Oba}(D5AldXx3y<sKSJ4V
zp5lCQKF5Kq$TA+;H_-{2h)f=HJN~%J?8VNRhU}Y<F%c7->p=AI@Yhd^JJ{~$pt-$&
z#k*gu6R|%-t0)A%(3mcSVRR29&}vDj75Ps0%3LOv5V`tK9vQ9uT2KB6AvfH|&4)5G
zI<Q#afq~38_TPco64C(3MQa_W8~!kG=bMZ}a_JwMif@M`GJE1>#q9!pyL6FJD)W1*
zNDHa$8(&;~gXos*6W0rrBwYeWdf9}w7?(+S<twT#(J#Xt0dOc+7nP_65Q%OAGZWOj
zUQ`C9NCX*BcEccDra*=)l1;emo#tD)xOiZ5L%h-hn61lzpXZ)Vg^NxosuI*LYz;en
zfG9L|Y5J-fi*MB*4)$(V#<HLI6Y6Ul%xK#$z6NO*M#)JrR@SaVFv*W%07#4sMzl0=
zmJ5DaWyNF2tooiR2~CEKi_IoW(|Ye|{>Ctv4Q+5<8`N@OhZggSQGD($(V#wJCdA0`
z^d$ZDz6N8j&q&`ygD1&;^^*|}RDePVjj_a3(cXs9(Br0gPZhh<$k@^iZl|CC(0-fD
zNSmwMAxEeb%KMsdjun;iJc{_$8tW6%q%&40DHg>9Hbde{X`=LxjjMAnjs;4f6>CBG
zO*!G>M1=?*GHsSUcAant{rTS&;h&SH*s~-lJ=HQbi2Dp_A#eX`TYW$M>0X?~g+uvL
zNm0=A{HILruYp0cACQ>Vvq%vmb(#@C64p81<Q}EP%j<{}Ogda70{L}{1xU;I`i`R5
zb0iETYa!^wY4?@=ajoVMY1?D!^1NG6)S1+zdN`UX)r$Kz+M~c>HQ?M*&*~IKGOzYV
zx2=PjR#;N)TOcj0ELKt{Q#k{YQzTQ9)dwyhHMy@lkg|u1pLgu-LOUA5W|f|wfyNZ^
zgO|@I9<uU`(egY{@?=r-Mo_BqNf5117}9E30155kt5QWf*Y9?D9@?rTR+8=p%KMWw
z2n|ZCpS-5SEq@@beTF2&LV(HZ^6=HqmHVo7Mk{Xodps8u_eZds7=MF#J>uZ|_1CN5
zmo?N?h%6Pd#A0*|dC)pwj-a>|hgc~lDLTuQr(Y=Qt2~wUAS4XIbL9_g@)nf{p?pwO
zNuyJhfaw~=(HIp{?<Xvwt0iYy7Op2}q~`&l$Oe$MAcn#aIi^M`WK+NpN1K$c5zN@#
z#6ZKwVbIO5>zNzuVAf@&gy%>9;0;tZRazEFWfo6>n>?)C#~;STyKxlBN!qe+l?rS7
zJR4=}6H$cJoLBX;E}+C#iVg>nH->jRCGWf5HRZSy-E&6#hjh;cYkl~Sjw0zGzUE+m
zjhJKCYM9qu{Vz-`UaB<utaL+He^@t3B6C@IK^xMI73!WBs|sQ;H%C&H9}COnQFoA|
zw_T1({rw>y%{@<4Pea`d>=GX#7-18-JwqE{Atc6zp@9j*3AEz5PI{2u*K|8I36BgH
z1rbURL|VXfJkh(01y*JyrpAZSPi<cd?XU_?!;qr~(#+`xDemx5lASirwF^QpgAWtU
z569T${4p=SEq^4F;1u4cdx9qR%$$<<IK6!--}sU+7hbHn`;@i|_a>K7jE90aSpCn9
zxH36$QQ7fK&(4!Li})%$`$ACBk68?!iMOFdFL5|Lj0h8~OUK<?K>@qzUMBrFDDc1p
z%qwP7{G<%4*7pSQSG}@SW0Lc@Nn1HV=#%`Eh4QI+x^vJ7=z0oA!Uh9f>u*UM5w8g*
zrhYF;hP$DQ8HwRUvoL#Y)QnnrSPKW=Yj>Am>7K+shDc>GzRKW`_AgKpIVYz30N2M#
zd$5<Dh+jtU6Y*$qf~kzPsSRsc8gh82E}D7L_k{&E@9=6Wp_5@zO?oM<c18^4_o3fj
zwEq|1Ujr-u93s2eNSi0zi~ge__LTg*)`cIp(vW_yD)QYcq;n~7|8$<jU3W3|=6S~5
z<s>#Ah7-=lTEtH@Wd5Z5(I`M+uSNXhVtWXdsLV>_q=mCkC@RnU0a9~H2gMZ&EJQIL
zZ6nvUU^b%FBlU7(?}~fbZpBkw&#LpX6WM<Brm(u6mWyPCV+dj>CC`J*Lo|=Km<J=O
zwQkmHH<nL|=#d37+_&jOd*3k1H`i=EemO)rY2HOT7T!dP6sY`+y{x=6-4F_W9%WW;
z{_!-KZ4mp%hd=e*!XLL3)|t~rUlhjkezU(I{|yC)e#}Vh%?yICrNaP2+0j3EY6Zgm
z5UEzCthu-t5c$0-4lh)gf$>)Y-`QwNfJ7-IqpL5ojTu%;^P?_$SH99k0bGBm-*Bur
z!Rr^5RpU}1rmWIKYtsJN=xJqQa3LB&H-$T`Q%Co&rF&j&_zCHv$gTc>S4&Ypg@yL)
z|Ja|%y&4=Bga6WjTv<rHm3VyvMH~Ux)2jfBV{S;;cw#P$oeL?(uh$SAg~)kbc^xi^
zp-vKsKiEN=iS{BmKR@cW7z=0O%OxCpPX*^cL@tMqWzp%)j=YGS4K-f^u6>~)e*ZnF
zn4f+*MM$<U<qdI;j+nINYJ)J(S8*%+IGbqxRixB{G2N9bD<;0s{K>)joo_My9cFRt
z5i1<geqtYD8SXDLEJ(ujUZ}t!QaadUb-oxPI5FT|A|l@x@%wo&_d4ZSvecd4!p8t2
z9?K-^QnU`3?^Z$ITfawP-RpFX5?)z3S}RQjCo@{IcY`x9(={iKtI`lSc<_Owmsh5t
zKP05qQWCWl^`Oxt*p@V0io{hey<c=^H<RO|_;JaM0!i=q7t`j2f6D4IsciRDCr~N}
zi|9OVd)-IGx%mA%2J!L0vUoEnR?NMy#XfWvyXz=$#=lLQbAQcH`4BuJ$H`BvxKxEd
z`nk={d#Tn5UVmeb$BkqP`W;@unzx7X>(rJ+41K{(tbMJ4J8lTwm&uWXQ)z9>e1Tl&
zYSMqUYF^~4u!dJQ4&`N(%FM8B(|XJ%B+wq^|2?w?C`N#TX=cq@%RHFO|F@SHX*$xM
z`C>LQB@`M+%oP5N))X9j{+2WuKRi2AOMx%lNkjPYy+aj-`_UPOp^&}NCB@c=$9^%F
z`BRx#$G`7VO1>J(-=rJq=>z>{G_W4&*^RKD@0uINP>o~7u|F=9zHrcPbO)W7;=dGa
z%c6!~C+Wiz)q&!+|AePvkjWZMB%#Gbo~HLF@D;#27{H%i>t#Std|3$}525D?!T^Cj
zt3cB229`xL7of`^R@z`OfyynQBe*+{KJ;$C!S6I#4v#crU1x$|q*>%KaywtSK=H=m
zA|!s1Feifl`&Ka`FJK_n<lmo(Kug2~f}Sp`f$zUUZ7H>$EwQiIrR+UT>Rp1+xMU!%
zmcuEzLv6vG?|K287#j778G=THr^vUL@6YOi#7HUEIiJ7PWyBGp{k(&Q@l%sA@3Z<w
z=N%jOCuplX@OC3zleBw|pH@JZ&Mhn`7D~OyWQ??+25KKFnQ%p|5>L@hXSY<uyvq-e
zbIbKO+kVawgn0+wTUYwRn&F6o4C=cw1}7Y7W;?QpgXZVf$A`PpfNKzeLmoDw&ROXO
zbYOV-L~sD|xxK0__fbgB0D;znWNtd$=X+Bc+C2h`02x{9eQ_u_4SOpL2IKB5Qp4(8
zS^5e+)a7Ok5AApCFq8)npPU!^m3n16z!IZj-&n=$2rBp(P_z^@x3n9Wl3rty=t%V)
z0jC(U$<q4-@<ZU4BGI<6Xhh(<UJdGoGDgRsT{xKCSDruN<z5rn*QhiAKu>8+4B_|_
zFBJ8r><>oZ^Jk6q(ES%PJmzT(&pJ{W2ca;;&cpHzUbMdL9_VA6rYcZKhfrOB2FQK(
zU+ut2x(kAB%CoPby@XBDaXvv-w?HlrJ%+k#jKqcqpo2WX6VtJ?oTNtJJM_Ih;CUK{
zmifX~ptdHm?@kRHpaDi<{|RgesmGo`7xtH(yikCk7D<i?1^Y7iEssdXIwU~blv%pH
zI7k+tJcQ=6uBF-jP*GUf97urk0|Dgj1VY~K*rTNX9w<7o4vbGP$v6LPjE=BYjrsvj
z(7N@{H&FkM=m#ym$*ZT}GpWZUF<y@w6@wdeHPh;I_!sb~k6auKSK55ozf!s^0|$pO
zKyNh}#@)f>f^GgA_7?tsz4po|KwGjQ-++enjx%D3M7j-7C-1I+_=)mD2M6GRs(?l(
zu3CONR><Vj;QXLJ?A?vVo!B?{BRCaUwx9_KUE&ym`9pO`Zig#F6yRk*UjrQg^j%=M
z=bs?e|FS8yJ_cQm8do?~97q2#O)|lL{8$!2<v7#a{*N~>u7UY;!=cJWuT%Je7LoZa
z=*4!CggE06n5A+e*8_)^76<@W$BH&uXP#?N-!uws8=CwPlF4bSx$Xx7dbBnxq`vfB
zE;<+ju&w3v(^dOZYtxF`qCF5sAvj&K?t|{rD$*L8W|bjWwq*O#`n1pyngtg2dIGHW
z4xN9f-he+K3>ignD5tYch{Nu6gH__=d7<!g$fvvWJ+-&Ur`{kTwF{hcy1P*B@Qze-
zJjkST(xIXq*oi6d1#3a)(LjSF3d1(^|L_*xqX$$4X8%1o_^9v~_dhJ)|4fr)MBtiN
zIXP+lo3#ID-fVge3-rZCnu{0zhVcK)n{m-#Brh~Hl>XmD3MMLa@cT{r37((-=Xd}8
z^HZwhdAptd(#(I)#Y~~#_uv1JZ58|Px!8<yHPDcY>CZlN0{LG9YO*-l+5RUc7~sYQ
z@0UYQv3g%dUso~*9rlA1ac{0~MlQ|Q&K#iwB^8s-tJ=r1Bq8}fpN2_yr*a_Ix(uDC
z{|~!Q1DygC2!ECSBP{*zT7crajQIc29~1c<xY84j(+$EzW?>saCv&zjaP_<Z=Tuvi
z_L^=eb^+}U_#xjO%}iebwMP&Na6pIBAm;(`yBka!ME^k{Oz7Z%l;ZwhE#OHS{nP~&
z{iw269xv<HfI}{}Z3-P6CY5ql63K^=Cfk1ipATMVJ75MBuVnB#>s~hoL048Nue|}B
zi{TzVeU0XN0Ul_3V4`I20@`Xel`D8kgNxM)Y5o#FtU+f4p1u5pniQxz(zT@ptgLHb
zuAbR}nxyOvK640LS%e%X6=wVDCe++O%~n<#c&zO<8e*9|AD0~XY&e1YmiMR|`WG+e
zhXGK!+cgjy%B}TQY(frC0Un}Q{uE5Zb+V0T*kyXh;=AempFTu#K)C}YA~KXOv4Rp^
zpb^7)IcRt6R&&~>(T-qZ2!T2sjeo|GuL0DA8q6`cKDIo+e_)<~224~ak0M<Q)Nnr_
zD+%4?Z$snHZN0|vFyX90Os6Zd@A)g!KWSn2{D6hol`osnr7FjW3j$irM;{N6ID(&%
z5+IU#SG@4@Hv0~)9}J8&D7qR$)dHl?m{Ct4Ov#=u_Bj@^aqI~afNuDyKBA0mcSkz)
zN`KT-8^%b>oP*|TgD&fj3V0;qncE}jbB<irzB7(unF1!zOQL}}Y~>JKWie&=c$$0+
zn%0HLlte}n--FKg+7870H{xmUFI&#>M$hc%+sz?5G#y5Z5l|y9)Zr2eO`~}pMV+j#
zTFnPFKm%@S7t~4T@81OG`+5y5J{PD4DAk<!7Z^5VPmP~(reoeh6=K}S0;Oz&Um~v6
zLu-4k#PDE=!du0GN_9|@nJO#C+%Xyl8RBb4k@e+Qq@c^PFc^5DG5oCR-}c<+ETndw
zrOVoPmZ#|mDV6$Qu2NFWp4ZnNP72k&$o&v)xDW^hC=b$UX&XOJO3^7`rvYcOzrg^W
z$shn0*R<EZz~d8dlZ(_2%wfR*KF2b!@Aq_P$O9zI86R*^n;FRBIbk!w)+YG_y7WaJ
zwe+1NS#mL+pmxw&dBdAQEo^(rNiMn1o3dYHz&@van^Evo^zBn0cN-SnA{6$ZP16d@
zL9VZMBMtBKnBbsMfP`DX%N@XkRr$R$xeJKk*h~$puyTriI+_cB_sA&>KY^pjLw*ki
zn`S#$@w95u@|E-ldsJPA=Y_6U;buhQxIGSmqgvN+hzdiArWT465CCM7UkKjR4`2~S
zU$m=MP|bRyR$ykc4ivBF(KyV>)#pk#QCWVE9%yGE*}3@k0V;Q*RWe4}1Bi)iGfrq#
z1u90J{CD$LKahR$y}*U07BhTxZ?hK56>1Jz?I?f6v_(MR^D>cxE>r4+fQN^}&lUwp
zbJo_^4m+a$W#j-?BAzrZy>~Tlit*5)4Lmkq20N0kS96Zm<f4d{qHHeM&qAe%0dkKo
z<W>K1%Jo-Nv{|qLDc|@)y#vIT`MiB*di-NbclbxG_pTaAer5RU6NRQ|1I)fBD6Z_j
zIJVD<@1WZu^IU;r;q}Qm4?~l1>X$)K!?-L&$7xmW818G!>COl#-iohI>-F!yzJ=Fu
zp%Wn1?%RC^AFIX2R%6R)b)H6~q0X-w_KWAzlZ6lH!uQ9|974tk*pj`$<E^zELYk;$
ziH7;WZqRq%eJ>#lA_F&Eo(~1$UXUO20A(dfT1|0VXwV4$uf-qEJcH@tSqS5{=Kk|`
zn$~jPi_!?e6Wf`E$-0#mj@744s9pRs$l$UeY3VPGiozn|9*$p4l=iT<KcVAyt@H@{
z1TVCdLm4Zey2uZCe~o0e9F=VIhG>ggNWHE#7Hs0)U(U#!J+Y2`(G<WlebN+++y>i-
z%95+|AutK<4RW{NjMO-9Ir!ZXy={p&{H)Uc-fiLAY2%pBkJE(g`+SPwn$v|b-?}Pj
zS8uj_9^obM(vDvxX&LCOaD%SV2-JcX?fKL;78m%+=kFo*^nmE%{h4i*Szha5>M0n@
zDy7D2wwd9;N_Vm&=@q+$dfV}5=G|r_DZ-^e8p8qH)ZJReO(h=*e&xz*fb*#c5#G%S
z;t+BzTn4=O!nVk_x(||M@9sNo0RQh6%DFFj0vwaFznkPywG?8}ZIK=Mj}#f|X0mDr
zpTL8mB|$c8Imk$?+^wBjeVlJV<j_(%y8(vlj2k8Ml0@9>c?SRi#?I8N`&DryZbmjU
z1XwR1G0W8xs&hCJhEyc(0YAK(WU%HDdoWICHHCbW$wf~z-wW}n8nemhYWXb5RaL)1
z>Y)#}-e8|g{dj4#H``T?<ac`n#C6L74G^?g>@gr6+%y1R{CCyLUO~`WuJ8FpJVrQG
zo3IN5yj8X?6{_Z9tdpL^>?Jr~drAhUMjUF*G#q0V6=jFh<W>O%-1hZCi87X`ct4uA
zI88=`UA(d|76Ls0gqVMM9P@j0Rxkt=G2xbHBzI6l>`L^QRn9Kyo_0Hg+769gEGR~g
zWetM_I(W4_i0+R_pRPj-L{g7Kv*TjrKM+D#rP@JzSQS`DY*N6I(r)p30}-C?t>5x}
z?kkBWunFesjj3WS>~Q$5xN<vN|CYj=+MB2iUS&>qYiwOh#qAb}loI255%f#E9p-Hr
z5_)&hAN}bx4&&G0o5BoL?Hw1Az9AXuL^!^y6L~!`NuMwlF8q#uE81<NNz5bq<p`9s
zFs$oUrR>0UUrJK8{d%xqYwcQc;ZGsve&;KdJ};+>Za5-P`w4e0?3gb+C|!GMww!u*
zx$Nb@h+_`XXrU{7@*B3b6$^)bH}#ANYy0i+MgA4E4wf;-euVlr)*SyPZrqU~pC*;{
z5t(^t?DG*?NU%8xpuP#UgQY}Pw`x7-s6WFHB2$i9i=^=qt78bs7xg1T9&0Q(Yl-mV
z5Yr>XicRvGGb?-^AP%flMklC{Ik=5FwuB$Q&i33d-d4Xr5$B}Q+KTrKIEjxzqiTV+
z)RYoMA?De!d@?0q;ag`pj_wE+eYOy66iE32Nh2R_A|UJuv?%QJKgsXLGfzv9vE>r@
z-84<aj8(JB^F_qFiXf0AhSEOPkP?V;jT>o)2otMbZWQ_5k_NuDf8Oa>jN%93Mh#(6
z9^S>uK<Y<?HIt7vq$HriQN&AKMVy7u?hWC)X*kN&<M~QnQ=%pa!Oh*0{AF=NGA5Pk
zF{-I6XeU&mA&6G%m+-IqE;*a6&`^Sl4t5WH7!rOtf7!4^K@R{pNlyFXq1b%-?V8*~
zE~6`K(IS4F4H_(}O}w9HiTPHU<UZb;iWN9ms0ajDBKuyh$?ET8C{`hAB~U21=U4@u
zXI8PiA(tUIS(AQ^Lon%tgnt&4cZyRtdvEN~*M2M@lt{i|?VU(8@Zt*uBcMh8X6k-$
zveHoK&pI#ir@;z9YPQA12{d`sRJW8{^ew{(tDDJCe+F-<BUt+Kf}BEy#=T&~@K|pB
zt3-fRVO8MD;X-w-FVb5n;3dW|pIPWya8Mzfb&DdUT#zd@hxoY3u1FxU2hyq)GIW;9
z>wUE|65@bCNi_$sFipv@L!6nKH8f>iH)H)C)6m9=<;Y+Bc=wxeN!yfne>q79MKZ53
zOGCrdLiP>zkA63Q+P09;TL(cOp_{}mq^PtT|8mG*GQu(a%t1n7&S))D&ObUXR`OBJ
zfPq7>BD52z8@Xq&Cdhpp{t68`PxPEt^r^hJ>Z$t7;mIPrBpD_@$OtDJRFyg()*4JP
zK5vT|^4$x0M3f+<q<evCRF-6q!FW7Jbh~T_vjtj72~T(F+4KOZWdlNRi?rQ+&R8tx
zvELMba^;-rqbS{*=t4_27naDm4l8X<cBlx6yphW7)xn?N-GQCzM8j!s;aJh0<XN$t
zxsFryQparA7Al146zQT_o~db?$xwO?>{&-p4N%%C?ybF$a9iyqF>{4}c4&Qq6m<TE
z+y^@$9F)Tw4TSoTD`sNAKs?A&z2D(x)mh$)oFmpTXg@LTTgD3A7WLsMq&}X;Zs~?O
z4X04}OjPZ$RarI7_<<}m$IE<&s(c%7|1tu*!pbcvh3}if5V7dZ4F%HZxno#i)@5`I
z%ORwPtb{JRiFrWu=8TcAxlNBr;29K8J*|$d%DSOcT*;FDzjB<r`obw~JUfYY8laE2
z6)XzU(aS9}aQ6@SN(2>(n(u#yVSns(M)R5@-|hwYFWCV^Q8qtT(y5*KWi@72rLc8z
zjEOL#f<;sb-h^QVNY>24^2SP)b<Y{>#<RfkG=XQ!QYQp#+;@yqvv$rRZ7f;KpuX)0
zw#>Vi=yHX#%!{ZgkvfVNOKjX9y<}RCM%E;Bh^Ot%duoHUL8nn^l56Qw^|y))DntyD
z*F4c*XcT8fkltW=5n2h{faCF2p6w+?>;5AqTHLL4=rBdR_Y7~Ael(2v=YD(8BsC-O
zY7+<oE*dN;ly`8u4T4^m>cTfB#V>+ZaZrjLZZAqtcc_I3utR$>U<QM=m%T3bdt?7#
zY%DC#s60+g<TMy;L)^FvM&U6{`}VrE=ffX3PBQ%Rh^H=%4H4~oAK&riddJs<^-92p
z(}?jGS_!#`RIQApe0it~%UHwQATWhssRJ(jfKkw<ty=j3dHeaZ;?IUyk4Q)I-iPAG
zN_2Ovm<YVcBL>(Abwy{KevcDcChx93&yQvEbHQfZhuVFVO@;{CAD$SGy-fUY$K$Oc
zT<wb;t9Fgmg47PwGQ`Uw)?yaq4*nZc!+5X^YaaIiCNj;!uWGA)ocbyZD6;uWP9J`%
z|Nq0>TfapaweQ}PFi3-Rx5$vvT|)@c-8FP0-QA6ZqzF=?w1^<xAV^6mB}hsm&0gd4
z?7hG5@xFh+`;!MAFbwy7&syucuJinyiIx(>3KF!T5F1D&q-{@29x0J6ndr08<?(Ql
zU`VeRqpIL7)rnW$G^SSb&GzY<kAd^#ZF@;BcFDX(AyYNX9Y4rMCT4ir0M+Iu!M*WQ
zga}wpl%FK0P}=vRRN1vc?f%?ZU(nvr(hS95b`zdieT^O3q53@UInU>C<a%8p&slq(
zBq;!;MLY<B@49v==`#)LHxz%XWg3}B&@Ctij5vf98m%z#dvcv52PFz<Hn#~C4WEo2
z%Nq5u7(`a(;G@y;S-yBehMdGSLgfFhkPDTMPrHhS*M`dV&o4)j6cr)qmV{hV_qjwa
z<tP4IJ&i7Hl<sq=Hk2V6IcD=_J8|-(v8P>8$YCpqx{22fiB61<yNw85YlP$9OvoL@
z&?R_33TrS$jNDKb&?4amt>3((!aUtrc9X@?Db1Xz{EG{@k@#w{X>eEEEV&CuCpY49
zRTe&s28?Q7T%qZGX@g73=Wdl9{$9b!OCX3O?=?rIf1w#N6`MIcf$BwpmZL~;dKoLd
z6(2{8q?+mpi+%p3F68QyUH*s0$!8R>^Im2RIJsUEt6g~x-H=+AT?90Rt)uvZ83W}l
z8!HM1ZJ6Co5}sRUWXeF>QMPrKe{7V=`nPHNgo_L5t%&kB9IHsEG1GJ`3k*-5NZyUT
zlB^%rRJ&}rAojARv6xgyL*kMni}`IERgMkw`s&!wk}@ZT^%E8}xRZQ792;SK*u(|Y
z{X24I@<#C9K=p)R;DD_nF>GermS(^eEB*c5(0#1E$)5W_y54IvU7K0%INks8)a>Zz
zqxR-TdfKOrbs9C^8=+X9g?l|X_0JUt*qwhU20Tq+5aPv~l0U6%E@^!rsft;*6wMcJ
z0~v#`E(-mKqxAXBQ9sDgsy$5Y55@5CiZ7_(m45FO1wsRc={Qt}J<=cA<S10UA`l`l
z#eb+@D4Vk`M^w(El#)E2&aM0kYLv=}okCQfx_2}(QZj)jrikZcJ)Y=L9&4>9Jt!e$
za$c5pnXX`DD`R511|6CZ-pb5hdt()WVV^^nM@lQnmlIep@k!`x)S4l$xM?isP$+kV
zi73RY&wldTK}MN+B;CTI_BB*zJsb9xe`8nuT*>-D<zf<7h^mWhzG^~;r6aR0dI*{k
znn9L}es{QVy|K)#^}YOYnF%|d&p{i6JFcNIQXm2k3yr(6-L8eM-;?~wj_nfW;KgdN
zlr9Xvlq{l!2br6bd<x<PAw5*n)!AE5tvyw17U@J?afL9btf`2c5iY_mkl@A*iAusN
z*#_1li<xnCqg?E0>azoux)gpJ3J{rz_qKOZR&g?&&9>GX_Ac<@qJa;c+1@KX+0CnX
z!C%{QfJ;l{cN2LK(rS{{PsseJfn9j~Rq9N($8lKaF=sVXY7;4I)Th4CQ-Zf^?1|7X
zx4e>dFGD{Y*!v92bVR81z%3kan+0&1Ww{02!)fMGRW6V!Veo}lI_!-*r9(HY81B;(
zsGjj`6rHR;uke2l+>B7+2}HBsoiz*6I%oE|yyPw<`aRQVn>JUiNci4=+<(<A3i71&
zGWC!lc58@Ppodb)R$28op*)$A2a*)0%WR92YSh~E4w53F{QmH{tw9^@<5ky%o3Z@-
z`WhI+>s=c=0sZu>+qyIzbX&rtq)Vqid?6NB#033>_b=w<+@@=LpISzgJIlkT1mS#v
z6@umJY$*igw(cLrU=tOw=sN9ix=PU)ti%ddi=@bJtlR6HBOEU;tTkFkdl~arhomV-
z@}Ac_wUps*_BS{)d=y(Z6Cfedjoj%qK$Gwy3S)Cm7@_}IwJUG6=6)<#UFhU6Aej(Z
zSFx-ue4E39`xZZC?1us1WR3JJPm*kwI9u=Az!ThUPK5OP<jgEH+QAXBSoc0&d4$E|
za$(k8#rMv7@mZhhA0mP3eR9-9II!xl5V_B^MA)v_^se&z#=Q&+h6jc{-_1Yele~yi
zk>bD=H88x;z!>x;v!8#B-Ctk!054H+{3*%aN@Ur<YIKX!q4luq*?2q=;`9h=aoy;P
z>|_1Q{TIz+T#*f0lgB*ozr_z1ZR)w3ig_ZjZ044zsNb-mvZ^)U#ypx4E{F+aax9RW
zP~MTJtwr^S<l2#KMBR5e!EsiePn4U=JA@B&D)0HP^x$sy-pWhxrB5wJGMlKfpJ2Z?
z@M;d+`}i0~bcx_2wHFiKW#@#oP_OjQmLuCB!Cf~Dg7}43-UO>6N-4ol7KPsp4v!DT
zcq@)@qOFAzUo2eI$HMlhY5&v;QAsdx;g0di^m52@$h=HaT!X0R`wubB6TM+gJ?{Q>
z$rGE?B5df)6o5@kMdnDp#zZtKrG3gD!Du|WZKw<hX2DK14cy^Wr3^zsenKK+b<aBv
zSr8z|#H5Wu{;sb+ka9d>>I{RpmX05UzqMKEDBfMU{GK8uev>r4>Utz+<O+~m<g`Kg
zJ0lGJ58LqWGGQv5ur>~M)2uwFvC0HJErH{=*h!iim%F)=E$HPWss<bEVBv+`Jftz>
z!sDuHcsYY6=__^{LCNZ%Q6mw#5~CUZ36Fjm5LCCPweYwrXUwLyXZ>B}DImY$bzBaP
z!%Cm$nyj}yw3ZD${Y0Fu+MNQ3)Uxt*n$tvYCWkWpxki>r82B;s@$<~JRO6PzeT$(^
zD5hX;>xGy5!q^1G;&~ynlGX-iY(0Eqh>&Z9xoNuFz<p^9G}0F^!jk)!7s_V~m2Krh
z;o8m2aVy`~QZ47NY8!{Y=w!hQL^x3xe0NP@oX=wRdcE73IY*Xvey;1eN*huZ#@Bu;
zOnSE`Y!QN5E;)a=@GVkeXBau*0?os5_u%NiK#Nvd6ypMxk!>A8x#<KHy`;X`>Yb#6
z)kO^C^Gwg+a8wy8LVL%ZLy8VEBvGEMj|2j^2jl;S0KJgRTZZKIi-v!*2Ir(usL^*Z
zbpwHe`kNXp%wRbC!Rmho4Kl@0tI_z~{|LBWSfdRef5h#WUQCldum7L33os=Bqq3(>
zS^pgp{AV%{rc0-8c)0$8gVe#YiX}nFIibTuB8RwtiCZ)>Y2X3OgU?7%)8ojVW3Arq
z6Q_Lp`mqPw(>(6F&sY}QJudCPkF{@FCZ_*0i_1yLl#U?E_b8LgE%rC?G&-TY2qG_Z
zd9b<WFx*R<g^@$lf@JhQsE!V6PjGW4=~0Q3(UsT)q;<x9ha6*uM-oiq+|3;bMks1t
z&t{eL`+bBhO@`At4nTbL6H`Tf4Kt&RranoFHeb#$Oax*?vObkDW>+z4ZHOZ@^7R{y
zJ$9EBew3X}ITFY2b5cQz-uOwJD!gumHCt@wGqB}Qh5bpA8dZo-?ZjsJ?rOf*j@^XO
z(Y0jl#QUzo7!s$?Q_OiN{Z3k?K!hKg5KHBp-Xv4r=yIT~HBD@|nc3!B4n|8!Ph~LL
z4mHL$)x`vNz@G~f(0s-*OOd&m&5Gd@p_qX$+9C#iA36Z?n4ZVkhIkE9zhp`c$f{PV
z1y>(u#RGGg5)OnDF$BG@Ejv_kLP-&mdc!0s4vF-a+|6S=*E(4uPdd6@Pze|$t)%62
z_Mi*B<=xP<IC1#CoTDe0?k?^;uXsiCn+WkP?3Y>y%W|g|j`<p(W6!D^`%|z%`SQBI
zYwGW)Ih5*id&ODZR6^2cARl|o#`wL~JcMwu*1lEG$-*+^986hp^PK9HLURcuX-dhW
zXarsI7g&3R_(ysJ_hmc+KE6$APWu3#OsD)hlT0h~SO7;UBZ0flnVbl{pDlZX+!4v3
z3je8zyIatvhs|2?*WcCQe0{xnoX*9VedBvD1~g4hY>5nvjV|;u0-wK~*ldh&R<*rb
zVemvsT{CuOi?5R|eoEBohX%&DCnf!qZ9QiF-z)$CsNhee5jS)WG1^{1g)-N4++A73
zF=s*MB>Mh*)EHIhMM-;~V@{gwmgu)uLNButp&+e5<7b_Yey-?vRL9pr&vn5Wh*=np
z<9y+va>y0Qy%YUIYcFUZavuZ~rHq-@MG^!Ep0)w8HmiWi`f+H(QQ)v8JF7u%W-jYo
zYXj)PJO0RF?JX^^RQ9(wEqIA>5m(7s5YibFVAVD9*hP7%)>$Plj5sj=FVynR(p2PE
zs;t8k^jcE2<r1~ndA=rBSNn|_EaTew1YIobI4&C{FWlZgZ7;_*sdv}y%(izgp1Nwu
zGj8hgc)q<I*sSrr)^xl!Fg3DCLj8rIOF<rzi2?onwZO5j=IX%!qIn)W^v$}E1?fyc
zEGNZk|LOKqo34n{8k|(e`eCh?7PdhItEKU!G&%>{qzwU2sF{xl@n=S30|_cA&ynil
z93zJaC&%jVZEfspy<)@_E#fI=og{`AS{J%{PO<&0dXgJ!=^+-pu|9XT^Q@?K;T%Rk
z>l`0H@oDN&xB?E<Ng<n}bnZw}t1Sl~!o>`mW7cMN@<nz&quROBc3>fHbecOP;;@5d
zh4Gse(l?aF{ZQN1k8@VoQ<ni617%B64Kz6pRBxXG#1zvR-+c5t!{wZcFJ{}IQ+SUk
zcMs%#9*~~-6LaIkLsmin%3AvuD)&+LhQ=7nCS#5#Q^*p;wGG>-<WO<FCTFf&*M)#q
z`GnG!X&Z!sZVtO%Y*33<O@KMwDYXQIOMtTWP*E|9cZSwy7=@NqBCrWcV467f5t2Lv
zb>kJC?f<*#GY4y`?`CZn?9Py%6|)dfWqUf8Oe<+Rg6RJ`cp&a~%&H(l=&d{~ALL}3
zu&62VXC{Ta9;3~&d6<Wl;v?2Uru`WI_jkSCqw6<pT$dBshye+Xa>yICM>FjGQNg{&
zvW6>iKv#JQ(ywM;!IuWW1kkmQCgixMku8$ifqguY{ApvyvCH`)PPzQGf$`=G#LaKW
z;G{Jpw#HeAIkwJCdXxCCy=?GETcpUyFO6->@q&o<#4Z(*aP_q%4~*Jj5`?GJl!pcz
z-xR4&Y0sX3(*QAykFgJ;EYB@V(G#1j{b9wno6vqRJI&j;@VRe&S4>_`(YI&|_1qN&
zTmDz#0p74I$|oL3J^7hKykvAlH;HU3(cheRBs@1&Oq&{}2#O8EX@g%p5#f4-=X=c3
zo?~xGo6S2>M@NPkF%|iI9`6ly?$=F(f?!O6E~R6>l<b6%D4E*^PaJfVMBc*>@>CxJ
z)wnu+*E5H<J_!#ii!L-tgZTQDVbq*M`aKjaiO5G4u_=8w(T9f&XxNd^*g(aUlxMM+
zDJe$Zwzfp?@q1Uk<I5ysLfW3zz4ase<0p3k?Me}X<gXyp+v$JVp}QZXy|dd8^a*~h
zU%{`|Sv@4Gt4IYz$UEnNUv00+^C5W(^pJ*@FSx?-?c?QDB6^+KY$l!n3AwlBH3<!_
zH-u%Db5v{E9o(jBd(?u~^Z_v1d`Ct+jHO#YV7$M#IWyw6N?PKKsU|L$QRY&Ap!q{C
zpzM6>NI{*y9uGwr>2){T-CKQnY=LlhSq<c-<|2b!$0oQx6*tZH$3(SQzk7tBKYxb)
zECuh$LVxV>E4rk-9RHcC!`JBa+zH-BMf<ewsr1D!{GcidH)RFG>Lvj<Od2{-@tvj0
z5P&SfMR{h9>gIo$U3-?wr%f1$XwjLHikj1#Eys0G7y1G(csGa?oh~RNVNBaYtqRV<
zh4lQy9?oIW?w4n1*<rNEleW}1$#{L!Jy)I1*CfiiqOWS;RM$6MxHea3g?eqZ#H&PX
ze76Q^WJiIfQQ**s3AxF*fdt^4=?`X-w;S4$>zQTDzF3QDav4QX>9|94CGFdII(7JD
z8l3qYAFg2_K{7zR%Eog9f6FL5%90W0BHe{HM-#A@CKo1I-~I~>e~j>Z4qJO|3xPLR
zJ2k~W!1;{J$mr_t0j<6a5wZvs5cTNT*N42~9Yp(}oT^iJV&*VLM8%moWP+EbFLoii
zFJsDppXd4K1Ed@CK8j209t{4!bF9@qS8R+AlTA@Ck_hSsu?(-rn+Fn^jbi-`J2Yap
ziku}abHByb*Hb+to~c$yp`maAUBauy23xfs$$h5JP8v|NkLrWO{(iHiBM?G$#{Kp;
zaju(A#(74dO#YhO*;TumV{AD%muTL*FAI6o-U;t%xn=TuXkDA*$rI&%d{!^|P4ld1
z*a)@U<7xj%&Ov;WmpddkNa46#X5A0*1Jvoxb$fd;%^A;Y9}%Dq42nPxUOc+=S0dwb
z;kHn<Be&||pwY*s(2%VzkiGPn6lZ^7cR5LCCnG@TX5J~qJ!q54<H>@X$ETQW%g&xC
z{RQ1ijR4-mQfH^>Rbl|3MtK_8YCYiaup`&WBAF0<>&%$9<!9@PPwR+aS(!6fdsvu}
zU$;9DWZ0<)koUQq8)u~$_y!Z`)+_QU?_iIsoG^+xjq{-ZY5>}tkV>xY`7`=Z9v^c@
z>StCKVqBZ|+l`K6MD6}(4{!RcElwsAdQRF-CzbVt(>4(RuZ?~znZ1$(&V_DqZz;vD
zLa_h=0$oIk?;Lof4Y|+zZ8hfo`+_oG<UCDUlW=qqz&LUVO1*P(CK_PHc80I|x;7RW
zNHXC#(iWa9K&UP&(w%ih^h(^;@GQpAOeY85yf91X@qiNqKwxhu<=Ed}gJ`3PmzD2(
zsL|16NX?R+O5~<kmC1Cd!@dr`wS5D|SA8_QcQBC{d$*Dc0Qvte`9+>Aar>)FoM%ZQ
zm!rVDdcWMTZ03pi+koEnVG@XR4SDa`1AH@PT^9rYi7wesY?2vhC~IK)U-?Q4H+-V2
z2Kp-W-=PsV4k_;s!4=s@yHIO;u5X0gaRSfIzk#dyawtYAFD?ns{v!2=>4H6jGaQM6
z%)mx9J>uXeDYc8D7=`bO8#a@X*^6%5yVSD1s?0&kFjR|5({NWX)a?lqHB8#8g&8>0
z9;rAEJbj3T%Tyw+Ol05h)A!8=atFbe9~Gq{d94a*tDCU0a4M8qw24H|l0~QTb<%Bz
zI$tL(&fvOC-02qjMkS`8M85ac8JkqPCpl{{M6nW~{^?BRMi+Yw(obL?;1)~LkDnPT
zCu%KV*Dx%&&RdaN7g<X=I$j#lZ2Nc~BzE9n2J>-t|3tv#&D<ey9(T*6>wGe~rFEuj
zbIXI)LUL|=`&5!D*Xgzwk%rje8${@MBk$^$WypD{N#ikS%XiIju~DYmvDH;QW@PPf
z*fI)!HML|uKbPAoHGg9LhqNREkx=b_mCJ0Vs*TW_`^S%<7ju{y83OSL5X|EtuS+Hx
zU0`=0#<C=t8#Dexd`XAToAWa_tl%eU?LPikU9V$kD00MB<5YYDOM9k-&tgg7RZE`-
zjyHiq$cSldd#=P;d`Z?9A(wN;IMi2VW(4sn!k-?_AHUj5(M5jvGd2}QPC?&1CN)ZW
zXf@waR?P}|x&oP5o7oY*r=|S~>7O<`kFTt5vZqSEObNKfm&adF72bGc@^(``K4*f?
z5-Ic&nV$POWNFma{3`~UXE+Bz!>I9F(`~+ywkZjSw%tp6EHw88^ctpWKPQWoQub#M
zN1}xf*u-ZIC47_Xp>=X*zj{AWd20xV@&V;V(`adDrrRm2k>3dR<K)wTNZ$qOt`x~D
zd|GjV=&6m$m%8O1YOZLR-Q@+m%W%9rm()iSh8GP4ug20!`-)yz|M=xVS=fN9?B@S{
zQ1#>dXFC!v&+@W?Xlv0ui@Zu_Sw45`APHd;1u6mHpqQ?A>mFNkJM5mcCgNn>PFzcB
zbNBlIqDGReHsDqjW%S)|B}Vukyh@~^|DIvEiN{i++YEg&IiEh|6iLvfrAEw*eA5M1
zn^*Bj>+eYBS8*vjBG-#i+By~Ar%dv=P)?EG^V+kBnS=1h);eQdX1-^m3Uj4jSx$0<
zn9NyC+<)itdQ_Cgrp!x=vb*MIZ%7+b@rDXDn#XJ;E_W`<VcB)DQ^khjt*RNU791h-
zFU^aYB|te>p?CyePB+mEHWW*apjq66OR)pUINv&%EY>gxH2L2hncPgCpkc7D-Poi0
z)@qDa?<2)r9$|&N{gQ?584jUTN+mN}OPJ+jlMK!$i<;aI&uglF7kp$0%S?+PiYCVp
zl_O7$9IDnM;mnLeO_v`nDjln|++C*{Y`n3f#myvhe;gZZf44#x-srdMTN{zGsW?}E
z3#}gAZsuzv!(eFBk-JbGmNliS7<G^x?x9y=7xnaCa&h<D#>2-D-QFcpKyw#g>K4V|
zecd9qGa-GivB}$rAI9V+vxlK5%p80saY&rlxb)fQ!2gX+G^==)(t0~`F7j{DlJjy2
zmO9%gSiyLZz7v&mroM!Qt6Yu8(Tuc#!$ugbg~O$wA!iCgZ#)Cx%jhr|h9cK>hoa--
z$T(u+P+k9UT6QOw&{Zphx^^kA3K|4dAKK#O+4Joxeg0VsgI5ZQZ*uNL&$2rH99o~T
zL!VDz{a(GLNqb?vpOP>lcPZ>NI9oDH7{hfTd!6;R#J{ZPyZ=Y;-?%Vbr`qf!_y$yF
zy{~Xw{#x2`Q9v9whtVK><Iwh-kQF=es-rW;NEO%IuOasBW9zcI;vb+FAwYaX!Urkr
z_}9kZL5S<A28upops-xj=`~bqLNDlliFk1!x)#yr7hW6{Z36$*K>nac#$BtsZ)GQ9
z*Rp%$SitaS*z0fWtt86(qw5gp4Wj4JDufWqe-^?v6$kB%t#C-@hU@#I-SDIXo&Sfz
z6QQcDS9cfuziLSEvvdfBXP5lhlmFQzNsR&uO@oS-JcOQD6s_ewLULGDue6XW^;j$T
zlPK3<yIWaR6o=NQlSb{i^M}1<J;r=(-{dKon|1SY1--+06hqr>RQ$ft?pfa2Y|0uM
zS9Ze}u;N?vDUABZ-p-bS-o%5e$GYm=LHcSTH6Lk!zc9b~!_t_6>$EEE&j%f<%aNuC
z)utUf%F?wLfFM;~_S%$w|7oAeCOOMeYo{&eQCVx)*7;CD;Wf~qnbs(}DInsQvgX8G
zZ7%WoY8~o8yinCAzAMzfr%eySYK#+?NR+al5mi&2#@J{%PWC;)KHsUM3;(fHf7_HM
za%drYecUzuqvGsilDA-Q+n0Y=|Ai(R_XE9Xd<Gt)nY38tdU}<j8LN<wg(9)AC;S|?
zK9~F>Inv_rt*;g!0?3QMKm^nb{PCf2QstYBD-<1@Ry%A!&n(3%kF;1lm)%#=1#Hwt
zP17;nNZ0jb?-0T$6z`!r`-gSCO+f92#-}N-Pa!25_1tX>2yk!^Bt=9(Gns%>4rkLX
zK#<n0a0J&;4|_0PrqU|s&*_Z;B~`{O2>N;Rt?p}=2L*if*zyMdJ^n>4EfzJ1zf!t|
zaJ}v1gRb^1<r!+yQH{W-i2@of!t!z|rr=sPNkA7$fHQzr1cQdSfS~Poaj$mJ4&c{s
zgT~()5{<6$0X?0n33@+81_4DW@OB%RbtQTH0Fp{2nz>oHA8E-L8?CojCDyso<;E?7
zX87ATH=nn5Pt5hFSd!Uvvt9RKO7Md(;MsZAUwy`f=eh>;r!=d34db(46hi{R7luqx
zV-{CTev`|!98LmuQ(<+>*t#UTqt_2=dwFqM3PSEKl`^q7TcnOwWb6PxQeu+Za*_{I
zwu8lW*L71`1PH(0w6k<r{^5=_(Ay7L5wZPBwV%<8kx<jT@NEB~5t`G|l*HVxsQ5!$
zsNsEC3ULzSNV)ReFzIt*CFbg%w|(H_LlyQu99SiuioT8PlK-Hx=U_#(SYt!_NVKpm
z!GNpD%t1g6#$7RJ%H8zW4@kwB-NtfwWPjB1jL^E*VJ0|hI{i#1J@;sU1T@bf_a|4V
zWW5A7eC7RQ!ry>i>PS$ga%uIsY%Zn`mt9~QW<J#>FlUZhQ$4TR$HIQD3PY_Bh#d+5
z2-lZDIqP5&%N1@3LldsSx|=(H00>2*0z*kGDmlexq!!)z>B~URWZ0vHzW37w)cseS
z;Z1Mdfk<jwR6y72^G;SMbg?odF=@|Y%7d_fvK*)O%pXVu?R^`n6D55|2(4gf{SUpp
z*d)Dk*|=7H%ir7Jku3JBYb?gAmuw(~5X|!7O_o3nv?B%GI}7<bG4q<|=8}}q0IK@R
z{NOK0(waRSpb2<~p5Q#u0Zzd?3a?K0kJblvuR&Z_mBlvu9FG8nut(`t9*5OJMEyUp
zV-W{52w9~sFi-x0!qt5k292E(a|c7LPH$p<*8E}0_3n0g(R;r^h0q1+=4MMLlGT(k
zlVR+iE483k;Aog>aDK%M-`c~QE=TBy1T1rV#S{OnpwyTMn|*kOT~#{6hy_XkT@G2U
zIli&AneG}_4DB@SDyEEL!%(`9LAuIMSVV~h{1Y)3bENVx(*iAUQ4M9pX*CMOQ4(>i
zuJesHRNO=+uxb_(ko8KuV+rGy6|X3_tK%yI;^ybKIZi{QtHWF1FVqzLHpmoimRK-H
zrh8AMCZ_Qw70-T<hEus@hjb5L%u)toT~Csvxd9aa-!C8<2HLuZvZ+rAaZ=y99zdWh
zu?YgoCk=;fS|n&3!*O&Lv}iErgj$$!q%|Xv+@AOyM|WOrCh{nVKUqI<x<y_ky`key
z5AwXC!U~35G(Jz{kl}DCk=B*Yu|<P^^RE^?sDD&#AJ?op5@AkSetlAOZ`|_}7%eFN
zAVQD+Lc0o(5Pk(6+SqIMGb(<E%!lcxMu*ln(y$97;k7`vr(Rph;YD0$&qe@Z3oLf#
zh+y7snjVmBTsBVS-N}6eRIa1|0b8ux2+i<-AQ2)<h0JHX04<-bXm^2whQNL{jX_+U
z+R{Ev+7Jfq3R>k>d&>w>WizO7z1#qA{=Q%R&7`~U2c5eY`dKQloQJ?<lEc{^S4{4`
z9OP4DD}u-?uTm{pRcX_Yk6J^eg9=kv90r4pV7iBpSCAD0Q-4Qw3dpJP5mAJPAQGu;
z*b$_5PnJm%SXM0=ogid<tluzjsr3E17+HSk@4zwBnU8>RkXfI&X&>C6*CQhcw{W_k
z@<>w!^d|#Z42`(IHA@4?RD1AE6P;j11{hJ!%&`|A$k{m%+<~L@Lk78M=?HY@VCaEN
zV}jk<sR5dh$<^itA}{UOqWBL`*SDYBLKS+MWa?kVqOwD7<kt0O6xI*@#-}qP1fkcH
zuCQ1fh8u@WhMOXgUVuaTcf5t`_r@aet?}V*e9ev*f+rJAfd5>EP_S@NZXLfFl&J+m
zxrc~8z#IlKQ8*FPNV{~Sr^xm^T7;YIf@}=#^SkCbORVRp7QD~*iVU5bX2R`mwe5_p
zlK8v9tuDl!U2E69oI+MoZVY_Ia@`}RMI^UQ{MhytzCV4W+?zu20EeJayuZMto%``_
zINcB-S|puY?w3nK>MHE!vydf`;f@<ZD>LkVPBmLN?`qRa|B~-)dy3V)iq(Xn55p8+
zDlvXRx3ORqYyfpDS9z>$ly70aT)@ArWB=CdqIN}AF3TYT3J1~VbM#<om)JIct@ptc
zSz4T>2Q$&yfIl{xw>CwSul*ISa~#sBsj!4we=;?t!gt#pdLxP#&{|27u9TE)U*o3O
z%ys;O<;M1xXk6XPSIGP3nK2zv+f^OlfHISH=8tHaYY~`x$WC=4qZ{x}qM|$H#Na=q
z7wCUe)(Y%6s2EuIZ=DFuyk>NC+@w%rn<FLpc&X5(88cW|oLF@E93ZbCxutl0-Ooi#
zbA67P#94ZQ@=goyu{u{{0>oav{zZ8Tdrf2doyTC8;<=}NkP5rQpChik0|E+bKV!jF
zTTJRmg+aO{pov@GGIT{VXw-v6(mfoa>0o;7)5M=3l*$k=rQHxUn;JpEqWGwZ!%!bL
zxmPb{@Yrgsgg@RVzj#jryS|rd*2Kr8kG6*2&>`}}DRK%(0K_ne#;F%8VzR(U-$Uc4
zu$8bAQt2AN-j<<Sd!2-j-4KgMie@w1&2^B3A5O8MU^Up19@G-o{0VZu+7siL6}UzA
z`qTdVU*Tpx&VC;d{<7()P)u6mtptH&vn<}%z6@|pOHBp4ry<>g(SE_<dqmpLDMuWk
ze@mq68u>eKLIf^7t1`73mhAiEEC>0>P9kP+8xVnpuo(z%ezKfYeL_5NwWr&K0GV}i
zCoy+^x3x!+m|wlASR&GBZvthv35Sdk;HqLUv&u9y%8>j;AjlyZ(*!uBdpO$kRsg)z
zK=-Kwnk4ISC^wac`eaDc-=&wZ5V8QFZV&i7yAh0Lz?bVW0ka})s@c1qc54(LX_+cl
z)03{&olRP!E{`F}Ez?+tE3;7z@FZmj&#*s%ijCaipB0;FO8%LW?cB%|=v8=VsJb&o
zg3%ah*J<$ZZSZ;6o3J+_5I7{txJOHQo$|ql%f~UijVUF<2x~&c*^2d3!%l{q`7EjS
zdET(u^r^MLtrtd<1!><Tks16?6#ku(TX9kRZpH+98tQ&3p5tz#yL}6<Bw~Fg{9IAw
zW++%(e1AAjjZyTuJuBr{f!REk4zU@_*U<=yNMalXSY#3t*YU>TgG<e1zL#tvZ3cx?
z&E6hae6ZN+LDP3k2E);!l-u;Uxo$Z~f_HL{6>$sa=t)Jf)0r6Xye%`eM*Vu(Y(7Z|
zD-|8PZFS;u&7lXW&df3psAOF5e%r;go(z+Vs0yZ1=dPa`Isa-wC|XNLD(L8Y6+zt{
zr{?5o_kc<cGP?zHX4fm&>UyxI&SKy_V>Tjsn-?Q!QAt~#aiYjqq2nxn?S4#>j+a@L
z(OQBzeXM^ySq@Xye<|jt>5c0yMYTsCn5Zmb(rxnM8;s(sD)M?3j4C`1??OKWev_8s
zq^4Nn{*X+NU~{?#5`yc_%~BIgmB02$l;)2<q_^}Kv+lgm<Jrx>qM0h}YogTC3(Aoq
zyOW8@nMsdF7Lom_8$TL1nb~O;#Iqm`jo}8XyIxj)DPmb>!IvZ&L)k&z&56&D&a3KJ
zx!PIZ!G2xh+8uF+^=sM&9+v9*W{q{l98Z77Na3r*@*1vEs}alFHl1!hrN)iVtTAf$
zwVjFT;jv?%3gDiy$h~HhT!kz{Wn>5FiQW}wZlBZ)eT0NGW-+u0GzHhNxjtRb`v3Gl
zv$9cjqhD9FSd-OfR27t7n2xg0b*77tj8ZYZ5^^u$bQh#IP%A-4fnP4NDl|DTt$qD(
z-IgrH2q`w`qJZeR)TVr^yr%D@fBX*aR)ZBInlFM5s<&OT{gpDr>C;=Pc#qUw^ii3S
zb=T|cX48dT5-IPsXa2Ny9sTSh%f^R}9Rf!PQi?e;qk0w(=ZdBO`M+N>orJJjfB!U%
zQ={;It<GS;<jDZ6bibVhxtjhRmj3&WybuPvAE|z5|DNmx8f2)Qn@~4YWAHY#%PDy_
zPn7hM1~^~N<WCO4PfR=@0E2QYfhs*ji76t9vZN6G5~YDH-oy-w%O{hQ*Rz+G@$cn>
z3ljeR$6+Tzhcb7Q#5MKXv`t<Ks>Vk#vyND_No70vgH7H^w~HWNR|v&!dKM9x3ds9t
zdjXaW(-3;>>q0Oretm^-A#;`UhXnIDrQH5N!04Snzj__87m*Amq5JWM7eKAaXMRD`
zO~NJMszke30nTVO3zdC1yX2PgD$b>vG+7~iZCTL+<68i5J|Whtk}b^Kp|6SvEk2_j
zAw#6RcSb)sWBLHh$}ARr+WK>#Xq<LMaG{o`od~QtUIxrtu6g_fb`*Yh|Fapr9^ij|
zgt}IQAk4!ZDjpv&5riOant&`YHVQ<{5&=+J*w;uT`8{Ae8LtH}{b*pphy;sz^^s4c
z00eon6BQ3zHX0jKt6UWaB1Be4YSg%s;(iTM3wUFH7@pk^NZ!3Zur$(5TD0ox&T@|9
z2E`NcBR>++rd8lgn>y_?efKJ}`;^QDqHK51{WNO(X(TN8h)A?vPLD94(t!=tg8exc
zu#8y>%kJG)6-U#>vZRVfGAbl%BWE1D&vS;;1Vie;VyXt^RM$JF>5qh?F9tkrHbK3#
zDqBY^)QGfA1ZbHSk${<$p6!$WRubUkq!#H{l-r$SYRVBl^a4m204QiEe+Csmg@ALm
zi8rR>yE^$TK<xDeW@()qqMko-B<hLZs+a$Qq~TDh9<Fe@g{Oa}7@#r~C>90?n=}!T
z?RV1vXTtpvv%C7uDD_s5>rf?%!eA&n^=m9&_^A^ZKvmf*GuVhBcqywO*zcVKZry!?
z4H5G3^8MY%g->PgLCf%^!+!11XJF>7GFeS5H54iU{nB`1Z$CY=Ag{CgZqhHsET3y<
zUS<0v^e!RVbqi>q@3DZUt2T{zkSS5XI9Kz;(yk3(ccPxY1&3Bb%wRI;c!*U8i{v{_
z5^1Dg6)0+|Ck8}G*uj2>OXFp)OZ)JyZqzsn9PK+gX({@^IkLi_5rkita9{oTd_eOR
zl;E|Xa;|>s3Qj>2A{=1mOW^}7m{<^d;BRbg1%NXFI^Qh%!!Tf-d)sjnfQV+e1YxZZ
zm>+A}zx8ne8`*5f`Kg__1^9SwsX&V7tv-PT5PDKy<lGxefJjMDe@^Dr6$GYIL(9O3
zUis?jP3?0;tm3hL2Er`gn^LyKceeYTYhU|>I*I88czR>1-?u(1BAASig_|_ymFIiJ
z|7p(?^Yb7BL~4empTHlAuz6#asx3gG5$?})Cu0mMgGm9)B6{UX9(j<N3PQKL0f|X_
zVsvD2^2iL)k`YA%OOmLQI2`dt<seJI{Z_SMiJ6T`2t4X8`XEvg)n|pCOxmt*uA!gS
zunzp0LI&t?@^eu8Pr2P(gVXdG9R!2T|9r3Vk2fnV7oz#o%766%$m;z=(dcoy4nQ7=
z4cq4yVD*3PfPnz71RS;OJg`hzVgJxZm@Ixihe$TxNf!t>{{o_`tNYV~Lcowl6Z!k_
z=$&kqYmyLmw<gcXcr+1(+&Q=A&$c!WoO=-U9@Y#4pW5cW?^+1ngKBtZx-w^_p#&O9
z7IVm1wOJGx8X4gQ)RN-jkS%o5-mG9e*+ax0`-^1x;$x5j^*@RDgM>}|B#HpQZ*cxt
zJN%^Djtn;nQR%)yf7Rr_^|a_R@ee5=^kQV#*{wZh4T0FfA;>Nu<suAjf$Jy+V!0{6
z30_yLhARBe$1i6bGf0|vXrgH5S?>){?m?a*z7X^1_A(|BOGUBmW&JeHs%q<=>#xv3
z045;r<mPf+`vFW){^8`W7ZI!S0tER}NpU<=UX@SCe>fP`bn3m!zYNpksRAqTlRNf5
zE`MR@F48q?G$SUkB$OnGeiA8|PE<!sKtU8jkp9GDuB(l`zVy`vfe+|F5F3!_ga~84
z3-%cDAiP7^V+BXda8sC$hOh{e^0Kl|<$7{@pG(Hl=@BHAii{9?!c@6f?KQ^VB#Ts8
z+Q&CHFkn0-3@L=^&$M_1sld*!nS(vzKQW-V!_NOO8<+x9JO_6m@WMaa;27C`CEzQB
z*c^f&kB$VDo#|;nM>t<z8FYm2{@Ki>Y~_owL#*PmstxsLVIwbD&NpADt+~mO)ZGk)
zMUMyl@#JVrSZj_=^)SbyW_7MH&hOob<TQMCPB|-^xdCz|Ab`X^&Aj`<m^1MYFqaH2
z_zd2LjS?Av;c%9M{?DfRSE3y-zX6Ned2l6%>D8k<($cYlHx5tL|LuPGk4MNv{dEX9
z5lo3r>WCaKD<zO>ll^C_@BA3?#wi*8W3!J=T2VqQmjeg|+Ma%yivdNWv)!GL^hj77
zxNS{vIv;Rv!d#*doAuuduWFaomxyQaeJB!kVMaY9Bp>SiA9p(x<txuH!^VFEZCg?h
zx2E|2?67AHD`1!Z52ob*c-f0H5W769vk+JF|J>!l_lBFb$NKsH+vWf3X%}Hbba^ME
zPb~irClvgVz|YNjG4ua^*;K!(>}r(%u-UfaAwnVlr*y4{SU(JQsjq<s{=-v>5TU@i
zg!Wauj_dz%8<0@ok`6(Y-~Y=(1iu1tD}Nx?-&Q5r0RI1(ZspcBe*M4Q_y2$UwhE)e
z>n^-t{I@E(lP-heVC%B@UEqTYR7k-spfS~hNZCdN=n5>@y>UCAw~Ya<j8<&}L^Mz&
zA}gh=I}7s^Y!)$K*ZP|)&ExkG?0Zol*_36fL!62WOaUk7_zVj{w7ujiu+`!Hv(W?n
zRJSXL-|j92uSnas36^+!g7fthNn8Y<<mw&-4LPkY$I4Q~w0W~<+#!7b9LoqdD{q&$
z3af1K{LMbdMshaKZzL86XORV3#LEk2_5rK(GLq{Of(3wZdq+<yDqI2YIRygd(&(A+
z_YZd#*gY7Xix9sCcIzH037{JMQy(~}fLZj=4cKIwV3Qn^P6y{fAQ`6{!4r@GlUow_
zb_K5BPhTqpB4x4N*9$B7?{Y{;3uwD9)D(l&(ZoC*HW#4;mZ0E;S_FLbU*`dsADcDd
z0O4WOouMXS@We@@7{Lcv1r4mg&`Mi^@MU0ACjrrq+t34VcUcH~!t*x|!n+VbR8KMy
z@Df}jmrw9jCPC0@@7rXRyi`hXB0vwhS*NYON3aY??vjLhg&s8-<(}sD+AjkCY=ep$
z-qaAj9ZSe(V1MhOaC}Dq_Kc7w@`r(g6STS3l&=wo%D}&$mvIoBzBv$PPN`G^%STx3
zk%Nuoepo=~jStrnxNN$+mb?MT#^$Oiig7p=(F)~AcS*Ae_;>)cG;hOS7zNukRamoA
zr_ytNxmeSEs~K_{wVN^-%yS2v`qAL(NFp+VRPu#*Iu&1o`L7@X65vJr3o&nJ4>UC=
z6W-VvJOzw{j<E!vyUXAIIw~r80vw4H{7>i-CBYtFmBcZe|KTeT=W#(>w@Q>In$1Ib
zaL4RE{&V|}7EpyTpj}LCZJh$kb_@vZo(jXOR|~3g5tpj2`fXLIbLe$3`11?($2dd&
zNed^Hb33E~(2KFN`w66WdDCRiCj=Iq-URnV<4nOV(L`doo@YU<WQc<hVFW;3!0ZI}
zt{r}>er#f>3bQ{**+FADrM)|hsaj~dK%7D6Lhf&MC>09rN}bYew$Ffjy{`B_r&zY9
zBmD@&_}YNSIL`nTk*er^<6$3Hu*TFsmI6p6b0xm`ay9e8VGcO0d2hB9B%iI#oE(Cn
z9{V5PsE+?3R{@}uQi%`&c<2UGda79i+k)Dis_JM!el*F(cKXyhDA^y)?2%=KP{q{_
zvE<nqA;`7#rmD9fRqN50vl>@>1O0PpA}OOydk(}|)H&eGAwmCZ&_-ePsyI7DP=wsu
zK#oB=-E<6m9Xz`d?(1P6J{|-e1jM5{^V^J)%^(>Sw>2{)u7(yD&bavPcOH|I6-SjO
zbsmD5jgDY5oz!VH(3&b<{{Yma;tgxja19Mn1EKqUUr1wgM;EFyW{M8hF4t+1`+EO_
ztA{tK%-{57-NEwWKs!)$r&<Ju_dsZn$4e!7v&a|yG6jP#%w<o$&Y8pD01wKMZn;<2
z6azOumir7*gR6A1I;ltias|g)x?rHt=4Z6E2oON!gAMQwswP%(E#RJ&y~UImMP)7Y
zwG74k&cJu)L|l@;64Z^!`k0nAF!%g<d4kQ$PoXsm%Fw#VuXsmPoxbJIhY~v8y-a%X
zs#p3`moe%G4A-T^;~lA-Hox)7in9^TH)EKi5r-=|EBk;aqA>ZjQB>^P=8V|=x!rQh
zyY1g%KUL@af47x1bG=F!Bx=hEaCUlAW=zL~qYu-J1+Mr6JKrZ@j?pTTuoAi>dvAT9
z3qzOM@GQDEhJB%9zX!OAC%lJe23hz|7;3fUQoq$AK56}=7UlIn{daZX^sn9wgG0CJ
zC3p->36fHyNi9^TB=%~1PEB$&Hb^@zU>hqDc&ft;*cvA+_Xuw-!?iBoyNYK1TP_g5
z^b$z17O$Y#s<(s6=r$XOQsfJkmezd)u887toF_th`Q>uVbw~7a*uxV>p}(w@;!&z}
z?p1LQu59-Cq|Y}o9XY#6Zjf+ZHHh|FNW<Hrn_?5xQR*S{C%VGmC^$p=E=oG{IHm3r
z2nFWnSb*i|!q5zZvN4sW2*dul{OxEOzeQpaO&8tJ1YcO-WSps?s}lYJ^^Vg9sKdq|
z>Tbxt0*CcyFurEutHiV>OlK)Fjj(FcvlSDT&iFtiZ9Af$93Q|_h}=V8{Ud%sx{+S#
zR!)D0SHHj&WIJ&z53_%GXCbg0=(+#qMpJ@(WyfqfnPTw1i4vvpISqe8M;B$1Yv+KR
zZ}njPyJVg#Y_Z;()reG;!v&vT>*d`-weEOD;bi5YhE(a_20*leQ?>csa*N6P<Ng##
z(o4WdHJr-8YmX0fDu1K5(r(`0Vud|?o)!;L+p!TVx(wy6&#yeP`tr3UOfZ)2O>lk6
zN15AI$FpQ+4Q@M$L&wWQHQz8N9(xTJDpUV$W*j`TsFV~SK3xX3XgwS=z7RO`L-a$9
z$qeS!hkjZ<^9;pZtZIet4*EYHt*d3?8w}|rhJ?L_3=R`v;(dsS-%;l~D0}(<Yo7GO
zR{^fh>y4gv%eDkRs*-U{y@kR%2d}cgMys?CqmLg*c&}_d5qv5=wzd7FQ9qcot8*^1
zpt{QCmhxfd2`2F`hFY|B8-neZfCL=RV8bI%R57TYwcE(6vLsOZ3#%fW8||A={k?3F
z75Z!3<8d^}pY~G2vQ%4$nU4=rq?6|F+%Oq^^zbyh+9%j@vHi6kC_<x<u4#zPNO9;p
z<n_kHqg6>z-;ZIj<iKFzMS*agnFKyi%W!&G9gbv2Nigz}kxvmh+r5@_w{&s}&8rRX
zu)|5m6$Jd!F*Uw$U$(eSogdac?*K}eVXkMXGhZ?Xz5At|=Sw#22g#<8gcXeS(w?VM
z^ekNk-V2qM@YnZ)q<L?hi5OQe=;)FFcOvS0cXPbE;zuJ5(VP_p3VDN3Z2H+N!Jz2l
zp=|d`@A?<FAA|6VosTPWZ}#Ka-%os@yVl`XCd#p1RMJF4BO7KiyIc5sxfOLl&co?s
zc>y-I_ZI6Z&%Z5H8fC5M+1${fku5g>Lln`?%0}vuHJS(`i^i~`{^QMET^j=n4M_>6
zN-nPoTPQ(p3cUYS+RTTn6^ss6t~{>TfdL^G1nitwa=tAzL@eZphUg|K#S%?|QFx_%
z`?b`{n}S9-^9ZO{s$RQ*Yqy#p)wdL>jz>K6+V1C+TuDgXN=$98OMn(q=eRndI<16$
zVkhlK-aF?XUvycnlOA+1{B$`{nHT<0vCk%(wiMc(;BGlgy*3v^H9khS@D{ttp;C`m
zgRrJR9DQ5y3QFYvA3`q`@7#apMCd#2mzK)ig1gduQeht0WZZO0>2Qgx3@bwQbU3N@
z97EskGJw<IgY8f<5`kBX&`J^F$P%v5dKw$#mdgE(NqBk>KTq7*ZzikNU7_7Y`<LtL
zWCwJN0*6Y7d%oN*##C-g-~ePDp;rW)>Ti<Lt7gZ^$r8vZJ}jl?0*rBaJceJ)BkfSk
zy53GgH<ji<Ia=P5``9do9NIrg%{m&Q`i0QlUuoPU)*+c^<jqg{7F7NGKABxJPC)N$
z))Sd^*F}$c-V%r3PmGf*CqBqM^kRRg><I0XnJrqoBRj#zc?6QxH2H!{9_OYo#6IR4
z$biFQTlJ~;_-Z%GkvH!%@VcdLz<jL|%ScCVofI&e2{4ok9g~<<9lF=&HLa&RLhk8^
z%G;YSHZsd0f(UDU9PJ{1v29V1fP3}K7p2fkJaB<(kHz|hMm|jkfLXeZ83A@WpOwTg
zuLD6>M-KbzC=x@(><NRnk>FG9{d20fBxKan95MW3_Q2`7sE3ramPMcIgE}mO8~TmX
zott@lxx24p%xPKZ$EhcQ>&H5>k2;0Mn$zc5AwP|KFN!6h;3P(3{LzbvYyV;*vxgc0
znw8?0-YBH}%Ecg~?Ct_<8HL<Q>GwJ}LhVvd99A=2omE(d_L=E<)Y)Itc7I~@k2hp(
zh%sFEV#6h)d9PfLU;?xTWJf}k>H+Sqb%;W;r!x|Q($_+A$r|^T#-S;rjMa=$342&8
zLC778F`L-|-V2#};c#9lrDCW%U}#UL*yAQV(e>7YMG&1PfGf$V!OxiU#x76jR(^4K
zvSJ2THyKRp=B+kesU&gDTV@>wgx*Q|7^68PQ9d*7U0yTfnV-x~`o1!70sslGX>;pO
zDOA)gW!8FJE6cJpzbNTnAC{WU=SZzoz~BRFH5Z#-t!=E~WMaN<3I5heMEyB-9H`et
zb5E022JY<9@}X7ySr<Z)YjwQ=G)0yYisP8GSv->bf|Ch9{8Hjl4A9gJ{4~R2#FO{P
z`MUJ@iYUasq;(EcmuCd4o_v_=sKAB)ZWnr9SmRoHBJdiGYGo*}cfeYV=p)0uP@%YB
zLlDQ<J2Q6Me6v|9$Msmg<10;#MI-V_Uqj(T+a*KVx<kM9@7;}ku3CJ-O%MB#aWq_`
z5y_4z(1zSB>FyN;Mw#+vF3L%yB_Q+pqU-VL514!Z9VEA6;LZzPPpWA7h94P)`6f<I
zxsNu_VSCSAfj*EX&QN0f^V{WT>@}sq#?%(Q*_5dEAdTxGXv1p!zDUJ33zmo7k-XpI
z%8RFOOp^BwUjX!TG;zf&lQUA5uPio{a!p@0`Q1+OaA?Z|w((9A_|DJEI7e2Lpk!=%
zguR9-y$!!2n!pm8sq)^Y*5;$uSmKgZ7^3y^PJMQHg(uPd55?0j5dyf*B<u|D)ak5;
zCQE4qB0}c%8979Sh?g<5z36(5ofD3%>=6h`CF+$ohdMi{utd+DG2>2G!-gVa)_rtW
z<h+(Yhea2%Jk%Jg+F4mWAU!kBm)tCad8D^y4>bmge>KrPtl31v{R;`Bcd2hiTz!d!
z2TyNY<Q}Yvdu`cYNi0a8zk~Ye`nf+K(|;3Y&AFzo8OUWC2-8ms(dmA`mDK2JnhtAg
z|A|->L5xE1Xo9gpbgc`M5&d4BNl0FK|L|i0Gu!OJ2QQ6zhqKc#y(_M^eP0-6=~?(z
z><Lppu(FH9r_yJ!xYRvAvv2hnlvM-WO-|wV;dG|*$WNrHaFTf=B5O61mn@aK!WR!?
z5c5MM#zxgl+!StwTdOrbiXD$(DdDsWQUhxO@dEkZ3hK<yvox&nOjf4x+%F6To*aL4
zgNF#8p%Y21_s8+i=cU;l)K3=QtptI?|AQ<ebu&-?geGeJ?$VPi3&rffZ@4AmDo^Qd
zJ{cwQrU{r821?Cgip;Moq_#f(;R4%N*IOeG%ln~9ZqPD?B3B&Sk&B-A5?8f)WEDkx
zbyxsX)uqG><RPpg`gq3*jVtexYq4R=t7z3GDC5u27Nu7TdSRkn)WHz?ri%IXm_U38
zS->x>dz(NH#_mS@sngleclC6K-B?1G;{rGr28@v_vFG^o8B^UbRvY0ntosK(k#@q5
zUmJzY9iz<FO}<v~a}v&CR$a*0P~XIZz|e1CxXE_nUFfS3%?>!=CKmc}nc!}UUWkW`
z3cedY!cdFOVf;jny8qOZfOh4m?;3WueG?C`Dx|_FV?6M>lww1Bk|S>k<DJ}-_=PXJ
z!j?W)=tkpY_oKH<4qY*rC&8aH0yT8g9u@D1-*%%1E}D--Yj-!KO)9>3)et17+UaF^
zCVB?bFND!)O5*ZB)+Y`x>XfpdUpu))%dwXSGmve4c79|tCEmM=!;W>3ze0@9kJ~XB
zcE&^%%!{AVL(SmC%sMrgUF)RCBB?0y!oyIX`WJ297hxpJ-ly(tA+I8pSiKljZWKiD
zh5A}*-N^+RHL!M9F}L$u=k>^{-}Y=jsQ@J$y76P#Hl^$rZco=Dv+QUeVf8$`Z&4x1
zG86dY!7#BSFAOiKitX1G#P$>sN`Q>7;xgvq^Qm1{X|v*v;>({GZHdM(ca9ztgw;EE
zdTAK-38k91{y1Lf5^x!a@%^=C!;x_2*YgZZ^qv+DpOVm?Ry}!hp(aW%wfIZp>1CcV
zMk%ZQkk)&vNv97TcmCAlvqjq}-g6N=5IjD~`G>EqqI^V|ztZC_aU|M}p9%xdGC4^S
zZLX7%(_zZdsvBk-8;ilGZ$w{o(N(uSwniUIELpgCY@}snpmNEBBk<bLz}sUFUjeUj
zCmyrr#(h0qqIBV~<L>pxlG-+R^)L3a^Qc$6bbT&(;dCak!jTfzclmUipJrE+p?9!A
z<rKb?ozRe<Z80G#hialTSmRBLT#w(3<(3pHmBdE#ZMz;i?7EWBjd#rNI|@n;K1qX{
zol(;M>10g#xNdfkuQz>e;GCO9`B>E1+;<)C&ltnxe+<<6EJs3#cIQt#KB(<wiX}Yx
z^45&7;umUp$spG1`&dW>KDp0niBO&7MpoItT;(6z9Q^IxUN&KXRaYz!^4v*j4#RwO
z$(r^|!VMl8*rit>z(9M<xGc7o$>BQ?85(!Es3H>@t|1svzrayVZJ4Lmuvpo&adgqD
z@cOxVMc*<R#$o%ZZ!y<Yc|+`>ePJqYjQSAfRsHnnk(FP1i2q)m*%fJ666Sl|f~nPp
zpPxKfzL-9|OPUx`S`@1neofPMJo$zrSMYd~OjYvxtApdo_ZxcJ7$@WGS~bAH5s|OB
zX(ho@EAJK-f3xljFC1y)l5r2LYFBABXlwr_{6S?gn~msMl>A0=+v&(KA_{7Qc=oo6
zz#RWXXDD0TQ1yKsf!AkVRhC4Cdk|>6JV7#H(IOMNYecs9i;J~3o-rWy6@>3|frHI2
znlb{=I96ueLiQw(+6`~UdX2ZQ=?HNq+U_h`(XwN-SMx2^Iw2_j(V4w#kKc^{)9?2)
zs*1smpM=B!v4L5`NIP9q_Fm-oKN@#aGe(m}Ao{Dl&+76DRvv1F9BCQww2<~bndhoB
zzaDtPKea3Fs=Lzs;0XlRQ`B;9R3saoI5yfKTHXh1>hEx3fBwd|wjIr4Jj>9)GATQm
z^7;35IAbVFYMImL&v^S)dj=|v-(h$2m9yR)Q(uzo_#8Lph<~@$-#F7trFCMu<1--0
z=d!@68b<b5f`lf!WKa^<Xfs!<!HG(ZHkOU(d(X6d@%+BFDC^%L*-l`k5OH1~=!&@*
z&b0Z}y^jOL9WL^kh4Pqa@e8$s9daZ((hChipC|M65QJL2nIAU@0cI;NLJzIi-?_U9
z+QlYBVZht{93X06P59URw}JidpRIfZyH$8`OnD!C-+#Ny$x=VS|LO@^(;#MjRAHNR
zoez3EJ{YExW%G{c;0*=%1Z~*~4T?vtf+SGa7U4Mso93*#rCQMa(V3@o6<Wom;(70h
z!D;gm`U)%fNBw;JB%=RMfZzEjGq)@Kx_`Pv&Pk+>F|)3HWP-rG(*fpW*<h+tI}ixs
z)g1Y7InAqsf42FZu}oEV4|x62esF*u<*b$A`~ykyL&?9!HVz{liD`NZ1kL80+kGz@
z&x8QuQ%KWdleN$PYV0h-qUyRn4mju_0s}}0(gFsZO2>dAEh#OXBB^vUASpStNZ!KG
zARwL6B^}ZrIY{@r$NRaS>-qTdaX2$)pW0{bwSMdWFLbi7G95p0Nl5tPhyjID7=3f`
zbSI4?IYDbA3tM?F&zqTQ2T3-r{B3L7eozA!3Yo0TzRzY6`Y5ji<COei@lDTY2(u`+
z7WolKzE-NrSAz(9ux?c86y#|OaOjR+F>G}wD_ZmUPgLZxfxMntN`s>xDwuSWM#o@l
z)z|}5$09J6dw#iPh~fe^LSM%SzSm@X49l_NZWzPsFj<k2cJgm}$%Sr{JO?0qn|oM>
z*3*KxPPhkElY~3kRWAhNaVU%I1>$N6*Gwb<i*-UJW84R%w}vtDlQ<^<Hx5&QE^CbD
znO~0j)<DsJ+L%>zH-cH;lpeoypAhft7dj=Kd&e9;Lqu6MW&MPmPQb2x5!%oHs5s5i
zgPVvPq*IMidCY%6KO^&HxKR6LE>zrhxQ8ZG=lRAd&>DPQ)@5%%WsIXT9mdlJ_sJ8N
zcJpfMxLuV4lA8tFQs=tgO-EmI7->@Xj3t(u^zw7PhNp~}XUlz<T1U4M5jj$1-z@&7
zY`QXpn$31n|KzKBxWoDP_Hrfza_rQa4(K&y2zGs4f&~X(XOV#U-M)k(1?}5-N6+wD
z%{GDQkcx0w-L%=Jo_mjQVpb14K`-WQ)%(5%R*I42OIzD;r#(UQoRF~4Lf-zTSv)|v
z-K+EJN#G>c#cAsXw%H3cO-hBwuUNZf)6KDOP=AlMocU=@M8Vv7wQS-VWRg<cmU(e<
z4ZP<U_)CKtfbz9veILguKpXR~CQMlgT1+^G*>KGk-hnE#<rIdRijCK{r!Ur_=$&pq
zHezYf95ydgFK`Q!DA+44SEMWuuhPy0NpzXZ(pII*M|p1wv0q((oWj%nHLvK7@#ivT
zLh_X|N9x=Ep%2$r@dT+t%k)ZgInPk>3yPFpt8V!K0TyxM+!)J)*WG*|F;TghKK^{M
z)Yz;-$S8qR-{LfX@In9-2JED5Yho#?zLc*6RaP~hjuwobA>)gU@1CD6(eCGPO<MgS
z0)-xxFcmYV1i6{ke?_-HVMMnDk{H78asNZ|Twt|e1R#Y4yJc$ye?TtycR8K{q{)?k
zf!LNl@Ch3o5@o<*c|q(7`gT7gh#GEmX5(@HCf4NRJnI+lHCtdwPKKkydQu>%*GB$^
z_d6gsq>IpxXvx}%)sCA_1~9}xOsZlXIYQ2WFz3M)$RMQYEHZ^ty)nm^^mnEY<S5~v
zuK#PG<d+@W;aA2)IV=VP0!Wkzw8L=Etu99Ny*Cu`e~>EH{)TL9s<fo3+!{4N%vRT#
zjBDgjPGluBKMg7`K5v54y<zbMcZ`P-p3qEmL7XeIpJSDK9WS?3(n?rBA^;4jvUj0Y
zGG1*P60;FS^+!4=Dtw=1EG*JlIk=>Hz?P~;UZD_E^`v%_<4q}7a)!XL+{*5-gOZ21
zqa&<eNq#SK9*poT%h&tI{aY~%#_B1R4Y)-_$mkphB)`6@HF{qjXt9hftFMA5-lEyX
zN;NRJjfjZ&K}(+4AzlFumyvHUs<JKq!2=@WD1jf#v^NQ;;+~d2fQDivSC{_Of;%8t
zGdy1fggq;wZ;8ALWqCOZL~DbLuGsddLUTuG@qGZZWkw(^lpxkq8_j-9`>qLF(l#1_
zStxITs9zG2P9N)@8^kyx^MeprUwckiW<~fzv#BgVbH^y(l8^RN5<68ai-h8?_aHGa
zO3!$gMN;P7FxP6+D@G6e*HWI#pPozU{rc<oG`l!qKj~VAJ`y%=gL>StK~*M*l?UqF
z6vr7Uc0XAEluaxiCwIekLJiXnfI99?;&pMO>rouLWqnB8Bfr%(ZGxo+y+2ZcA%QzW
zJ*xv7yv~DxNTzb<N9gtM&u9IAYCWH>mx*`<UG+Ggf=<u;tHXoP-aEB5S#&$=t29jo
z82^A#DA!PD8{Dj|??jfRH<YC(^&rv9tTa?6Fhw>W5U_rY$lin3A`2;8R0w(T&NmaR
zGD(U^X10OU7PyfyCwT=1vE;l~FjBm~ya4KaN(M`p4gz~je0lpNjwOcpnSPgXP{%E@
z^PTsNDK%P(39bQb#0XGDT)mzW9*C~_$PpP;jQgcIKXgLnE+bV5?7Mb}Q8PKbT}tKd
zT@wiiw{}*?ZN>?iy;xbce0oL}ssq1uiuQq<h4dkxjnpsbAD*ZG`ox=5KQLSWUQl_u
z@46}0!(vsT<~nIBU37(Z&9Ks1V{t$s*6R0gjvK)Yef5G<uu7;=U{t16u^txNy~(T?
z<3<JQmC+PIdyW*fM|`gQ+L_y88t3tAxguJ2Xp=&jFmeq<?}~tlcF~gQ)VgV|`Yz%f
z4UYTBz0lA_kyji8rWJ`=-g+eiCw^sXC$$`g4Kqxs@?tw~UWDGr+)zbxT35QsVIP-h
zUR4_1l{nzk_6UX}B>}zTCt<nxVe~l+n*{nWCzyR|%0T+F)Vni4AIF@QtrSrU*rGie
zN)XKc4+all>SgYS*4NV10Rp%TiJZFmo?du5nK3X|=ojc2NZc+7*gPEi(SBm-4lAO}
zaD#QglxTs<xep4@j~@CSLIc4ighGuJxSBu$A|0CT3uF8Wr<S5yO3E;0v`(HUgJzb5
z!d!_%7RiLs0i$hg@PQ(=dS!<q_l0pM1{vvTZfJ|dh()dgMH`;0UvmEoZjA!ne#Gg1
zj!ERRjy0+B(C8Z1?I}5I+AUHkIvr8IL4a1j;t_8#%{{#^F^T3Kvi6&%jD<AX*|r{5
zgM(KfzzL(^R6>5`Vkhwn8T7})=b>x#W5rWks&(0nIUQzJ(2K@(sh&*aw5TwKvLIOy
z%pC!}6dXzRX;Be!<O`1#9Fg0wiot%^kgja|Fa@?B1y#9bhfyJY$NVXA1KU$ZyQzvt
zsMqBkjlC3X+Vjb9g@z}Zg)df>kqw}raev4il!0>}6C&HSiu8VeszL@P5$Tkf$|)oj
z_Yx2@*ogUh%M?H=xr<vnX}>69WZ(7AyJjx)`^4Dwss|nBsvS%kGwV=zjUCwGncI|G
z!fmvjlQ}cavh!A7{v-`i?w2{@n>#p(54EM@?@!C;j74*w`ZW<zdqe3@_B!2RO(sOQ
zo{=hU&ag}uMEc&8s(fk2Ko1FQ(xxBW-Dkf))^~x-h|ib5e;u&J&$`p3<jey1Z7MVC
zsf#Ris1?NSn?6A_<lGQ(K@%%rbBi_8Nn$9YZ=@$!NwRG;JHJ~qtX73`+4riTIw3}|
z;=+rOuucQHC2Ue|j(yqro6_^2={{AX;e1YL*p`2}*8!_goJADY?J-L!nYW1X-uG@U
z@MDrsRF`-c^zOX*ZOwcEG^BGpoL<m4`sl1k=pA~>2OR?9m63Qoku(>On`m3+Qbg}P
zIE=u?_|Atuwpp@55>JQiZ_4PBTy15@Ox#+p=SH3Am--a+jR7cmD8G8Kq6tJ?b+Hgd
z#XP$k{`1n1n*y7zGw>~4t*80XN6Upj3J!EbyQK-$MTU(HVTt8%7}@3n70W?h;-$!Q
zGS8_&SFU?bES?09HEI+E!TkjFQ<XKU75g<PF;78Gm4|AEl5Sj_?vpAV!7@56i_uZw
z@tzyIBl-{LlCd|+THl{|pGrsQ;tCogL26|<F|@TQB|UDVk96YJAVsP^uV_{qH)zKe
z8*>8XVdqnov52rF<S|Ye-9n>Q=Xfz;ER(mr-EoCg20Epcvw~vG#m1_oxJbG3txcz;
z5Ys5Ay3O*Y46d&+Ux><IZHPJvrWIFNd=WZ&nlSC%Acv;zoE_)I!)8zklb9yznChQ?
z$Gkc!)ND^343FY~tlr156aTfmB)C?kginH*Dtg%=Q1|&t0mV-#PBx=D5il5z3-ra3
z7UJVZpf8M49x`>sNZW%Lmj=JdH3qG?^o;GWFO2e|Rf0mXG53`(_=YYldj1<O{w&z$
zKc7e$6%t3!3yw_}AV@L0`FGnUa>#=dyJo5Pe@|<vgm2=?9H<(iGJ?XHj@~wmU1)Rw
zf^fE+OMNphtM`d!5qO|Xcd1e%7xt07{6wSzeKH@v172c!TyuxrEvU<ym{XuXY&-(C
z9^eaU6r0bN!|aIbBQ(0UP(gU?;Lh@IFF^UFOt@Dyg6FKuKx(Gk>oN7!*(T?}Znwu-
zZmhXAZF;5^$1s*RSgl-DugqP6fH&O{)f+F8hP2$;lQ2T;eYhhU1P&668G^H%PZRjz
zpPexnrz?5i9h`uj?cTzd<>4ea!zU5LZ>>;ZBZVh8%ed{~FF2+E-Nc^;tYm)!lB3IM
z_y_>7IpEbU0vHK{-#`#tk(87aHO(Fozt+SoDSGN^2++X5r1&#H%S?6F&HLj!?&#cP
z`Nf{Aezood5CiwcGo&+EqlAh<As8oy7Pb@6be0R?3IXk5@D^SdsVINzSm6y!8Roo!
z;me6=jjx+nNH~6hCd%<XGFGGr$>c$NneMiF&)&QqQ%rORdgV?&@|+20Ryk*=;_+0~
zUqp?-Ipawh@MI}c4WNsCXy!<JD^pPzRLrS(H9sW<T(n|p<#Vi#gwo4aVwVRaq|Yqn
zG3_N@_WzuN9!FBMqxm09Q3{x-aM!Er*J?xUw}a-39^}?2s3jyTHYOMkj<?rZEj<G)
z#Bsw~W>Hj5&8CoYZ)j4IMb%yByE0jUzBH>GWtH#aHU6IUaD1Fgv0qnL=k^18FA0Y*
zK4tsBjN(I){@Dd62NOyz=ZOL%4H4E|Jl53tQ)woIo!WQ2*Zs<bhJT`BED~o*dnHf*
z$xH8clBFF1HacC?T|qX6^Uv&2co7XOjx)m<Gi59)uC!p@F7m7}r#f(T92&Mb+!*c0
z7znuej7b>&xe*&MF`VXNnbm&*5eCJp&%esexxQxcusReb)?(`KPQYm9>|*&XDl7L;
z;~d$vvE&6P$GM+G;-qc09~564@tognb20>)9ICzJ8zKO9X*}l7sO<;Adx{fi#G4rY
z@=SJ_jnMddg2M6V6`-Ex`s-LIEfju;<7=#a<X-HaE2mINvN-|w&i*qbVy1pMX!Q#4
znGSP5@D*l(8rF(MA>MAS*oBYLopk<nz_%QG_N7t`%}Dr)T1&@PPr2IiR)6^WxH{qa
zd1u%I#JtkyS&XgN!v<~nW<tM^?EPq~jthK;_K#!+t6}wq9#HQGH3)^U)k|rt&;5Kn
z`i651FM{Zy13+Yb(Xe&~F@Fs7!CpB(4!Qw}0<bS5elZt)cxgZVSj0S*7q~QH;)X|(
z;E;pHxwU9U@w^kH`OAkRjdY*ejcFY{3Cd=<fW3qzE8wq6BgcMb1UUKn21pECf+s{z
zY2kQ9q#1#}Yf7ci87&$F(9(pW`bHomRcA}pr38&|h@2NBKn>V=yX&%_FofKk1>JaJ
zJAh_d8u+pAK<l53CTuR=GI<v7)yr=)cEYt9yKXj;+EG&5j}1BVYKZTNjmltP{yPJ*
z8Pq+k2RZ3b30%g9f_77JTv<{q>t?<RP6@6P3yo3zpeoFq<}&uWE3kcRJ6miTu<~i*
z3PB*;@!p9FJp~Yt+>q=IFRm5bq=at84wh(me9A|s%<4C`XC!rgkEng>Fsjt^>kT<H
zEf6YC76~`~=@&YrRl|TB*!DWP#hYc-?pRZI&)LiDS5rQPw<%9Ga5VK)=FTHU8@I^w
zpez`#(f+vjp4EVf`gY%SxE@c{;5in)`JWhL0_3iue5%4bC5u#t;9L60!F1OdhtB&a
zjzD2<rAYkxqWo7mD`*mYS46kE3c|nsSuQh-u86lcfY;s?i-UrLqlYe#&<C{>51j_j
znv^&Uq}&;c&8;6MON5Q*o%PK^rxZ+oBfd?_;+Jue;#Vi|iiiHA09H-`4qYLpQ^`e>
z<m@^>HRi1H(qfV%ob=U%rBnw2*_V-0Y4z(%H}EE4(0f%1AikXWoZi&I#_Ow1t*eEe
znn<)N947gJkMyn73*T|RK$oqZU(Z{IbL2_=?O@vXU4E*nZh4qpGRF_R8gmj~KkL5o
zlLLeIY1@Tm@G%<inSta_)&PE_Q5hhT5?YmNi89Hsx50|BXM1KBjL+aEH5U&mKXES<
zP8o<!GL0B*fU70ql<^Yn4YUN|I~7mxj-Z!owVBB5_BhT5cLD0Xr*$+x5MuvWTnVjp
zH-Z+2<U-bdpu!lu)^f42`ShS(mX**QUyK7uV*<_?2q^0!eW2PH!ap`i2^_hHc}2<%
zB9Xx`%P|-Zy+4^YK2-w!KI)~pkRss6qqLgsS0~e33=WoFa$&WwB<Fyh!O4`bIt4Lw
z+xG+KEm({juK`pgLXU&({MBmkFn<4Aa}*X$Ajh1|53+66mf};oT5^(YZPIp;`KT(G
zREaxS_31r~x`K2gLx1`}(X9;qLkx)fi&JViZ>6*s581%H9eK<-pcT&lgN&Vh052#(
z=%`evzvKhykLIXb5R3l08cB78rW+ilqP`nq8<+41go+1@??AKKDa0}$#I|i&p6~Hp
zD!LuwmYte4TEX4mCM~kzvr1lB*s2-m3q-Ewtqf(t2c=d&)7g6K*Er^UW3nv-p_Tl^
zmT}=-7#7TuTkXr}gENX|lG}baB8C9)zmd$vD1PeC%5w}j<ag{zr}VY+6gVnoA5o91
zUK<wUP0b@T?I+93tc;CYO6R=Kw?(PQB4#ptu6}<is_%$$SJ>aWHB@Rz<Zz?O^p5Ns
zj$lE^2IxJVWy;LD2F1~}Z{)BA7W0x|3T(07t7hTe_!n;tn(DzS!W3I-$GgO|D`qM)
zxSe{2OFv~dFUn&`hT=4SpYKOciw#9icaqF!=aZ#5^J2|^*f8M@B|c`xATE(qXA`+d
zLXU7~h&M)ssQc3^#4ahFqhU`auwJOB2}_chliYD_B!Rr~mrGCNRxF5dgYFoyADAeO
z=(ucYJfZc%SA%@EovV9xTm!sxgw0(KcqDJHB9NUHm+&i|grx0M#9CG_-BZ}<y?xc^
z2Y)ct%+BJuxMmtNBRTY*C!B0tHRUk=vimdsMhZFr(L|BXgroUE_T8QE`F~!yq=Wf<
z^oBYP>(Nw2(CAy5{YM8i(2$2+6&?*yLv$jH6Inu9lTjZ1aQI<@2epTCwnMm$`K1zs
z=o0iB7$`5hs*ujPczxl-R_SehM#vLuPssOCNZ$eokmeHD-HPS5Xt`JQDt_9T>F+r)
zgG_lgWX`r$yv_@i)b&4t@-pO(gA4&Dx4DX%2YOWBtuqzRK6X`R1W|R{iIz(EVhBn}
z8K(f-t33LH+eSo?QNwkMS8VeX%%ZPG?HvYdrqP0^Vyke26aGW$inRS^oyqezA);-j
z28$xSPe;X4U;Dp%>C^aF`8DlL`!Kd+dd3UpJp@@FJ7yrI#-}HJD6bJ~aJi6X5a0`y
zc(VB%S&vTHlu_Jvxr9NI1O0^FRJ<*$t^Hc=9dB`UaXR{y<GNBVLQQX|q9OP9)ciP~
zY>I1tM+sQD+V{~O=^AqSHE3l>qFKuEhq}ScS8+>JZhbRo!}6y*nmWR3_;C=}*A3|W
zjNzHHM&i$(1}i|WQJ9bHQ-<9tNfaz!8q4QJSvlH-)nHGpGp}|?LLzr=Xo3~>3M?od
zNqj~<GQFKU3<Gg8tSN3T`x9-!E!t*;)%ht)vpqymOP(A@%IGO%%A1Q&u-5%=Ty0L|
zSCwJ!p4PLq{mC5s`@cbTI3s<tz3jr6>3=^0BNGLYHaLvr*Z&iy^L_+T^1UG4*#C{w
zk3j4$=rLhq{@>6YED9dtRPOFE@xUMaz1Yto2d4s&-@jUb_vL4HoLGo>j*Sg|+R5Kw
z;@_Qe=|F${6xKP<8NH4D-ybrv1cM+TNE7<s&nhtc`~PitBJN*am&bfFniC8B$;l|e
Ji=>SF{}1ANXqW&1

diff --git a/security/intro/index.html b/security/intro/index.html
index 0b27a1f..1352ee9 100644
--- a/security/intro/index.html
+++ b/security/intro/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -550,13 +552,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -641,7 +643,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
@@ -998,7 +1000,7 @@
 </li>
 </ol>
 <h2 id="what-to-expect-from-this-course">What to expect from this course</h2>
-<p>The course covers fundamentals of information security along with touching on subjects of system security, network &amp; web security. The aim of this course is to get familiar with the basics of information security in day to day operations &amp; then as an SRE develop the mindset of ensuring that security takes a  front-seat while developing solutions. The course also serves as an introduction to common risks and best practices along with practical ways to find out vulnerable systems and loopholes which might become compromised if not secured.</p>
+<p>The course covers fundamentals of information security along with touching on subjects of system security, network &amp; web security. This course aims to get you familiar with the basics of information security in day to day operations &amp; then as an SRE develop the mindset of ensuring that security takes a  front-seat while developing solutions. The course also serves as an introduction to common risks and best practices along with practical ways to find out vulnerable systems and loopholes which might become compromised if not secured.</p>
 <h2 id="what-is-not-covered-under-this-course">What is not covered under this course</h2>
 <p>The courseware is not an ethical hacking workshop or a very deep dive into the fundamentals of the problems. The course does not deal with hacking or breaking into systems but rather an approach on how to ensure you don’t get into those situations and also to make you aware of different ways a system can be compromised.</p>
 <h2 id="course-contents">Course Contents</h2>
diff --git a/security/network_security/index.html b/security/network_security/index.html
index 49ee8ee..8ebec6d 100644
--- a/security/network_security/index.html
+++ b/security/network_security/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -550,13 +552,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -641,7 +643,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
@@ -1357,12 +1359,12 @@
               
                 
                 
-                <h1 id="part-ii-network-security">Part II : Network Security</h1>
+                <h1 id="part-ii-network-security">Part II: Network Security</h1>
 <h2 id="introduction">Introduction</h2>
 <ul>
 <li>TCP/IP is the dominant networking technology today. It is a five-layer architecture. These layers are, from top to bottom, the application layer, the transport layer (TCP), the network layer (IP), the data-link layer, and the physical layer. In addition to TCP/IP, there also are other networking technologies. For convenience, we use the OSI network model to represent non-TCP/IP network technologies. Different networks are interconnected using gateways. A gateway can be placed at any layer.</li>
 <li>
-<p>The OSI model is a seven-layer architecture. The OSI architecture is similar to the TCP/IP architecture, except that the OSI model specifies two additional layers between the application layer and the transport layer in the TCP/IP architecture. These two layers are the presentation layer and the session layer. Figure 5.1 shows the relation between the TCP/IP layers and the OSI layers. The application layer in TCP/IP corresponds to the application layer and the presentation layer in OSI. The transport layer in TCP/IP corresponds to the session layer and the transport layer in OSI. The remaining three layers in the TCP/IP architecture are one-to-one correspondent to the remaining three layers in the OSI model.</p>
+<p>The OSI model is a seven-layer architecture. The OSI architecture is similar to the TCP/IP architecture, except that the OSI model specifies two additional layers between the application layer and the transport layer in the TCP/IP architecture. These two layers are the presentation layer and the session layer. Figure 5.1 shows the relationship between the TCP/IP layers and the OSI layers. The application layer in TCP/IP corresponds to the application layer and the presentation layer in OSI. The transport layer in TCP/IP corresponds to the session layer and the transport layer in OSI. The remaining three layers in the TCP/IP architecture are one-to-one correspondent to the remaining three layers in the OSI model.</p>
 <p><img alt="image14" src="../images/image14.png" />
 Correspondence between layers of the TCP/IP architecture and the OSI model. Also shown are placements of cryptographic algorithms in network layers, where the dotted arrows indicate actual communications of cryptographic algorithms</p>
 </li>
@@ -1382,7 +1384,7 @@ Correspondence between layers of the TCP/IP architecture and the OSI model. Also
 <p>Starting from the application layer, data generated from an application program is passed down layer-by-layer to the physical layer. Data from the previous layer is enclosed in a new envelope at the current layer, where the data from the previous layer is also just an envelope containing the data from the layer before it. This is similar to enclosing a smaller envelope in a larger one. The envelope added at each layer contains sufficient information for handling the packet. Application-layer data are divided into blocks small enough to be encapsulated in an envelope at the next layer.</p>
 </li>
 <li>
-<p>Application data blocks are “dressed up” in the TCP/IP architecture according to the following basic steps. At the sending side, an application data block is encapsulated in a TCP packet when it is passed down to the TCP layer. In other words, a TCP packet consists of a header and a payload, where the header corresponds to the TCP envelope and the payload is the application data block. Likewise, the TCP packet will be encapsulated in an IP packet when it is passed down to the IP layer. An IP packet consists of a header and a payload, which is the TCP packet passed down from the TCP layer. The IP packet will be encapsulated in a device-dependent frame (e.g., an Ethernet frame) when it is passed down to the data-link layer. A frame has a header, and it may also have a trailer. For example, in addition to having a header, an Ethernet frame also has a 32-bit cyclic redundancy check (CRC) trailer. When it is passed down to the physical layer, a frame will be transformed to a sequence of media signals for transmission</p>
+<p>Application data blocks are “dressed up” in the TCP/IP architecture according to the following basic steps. At the sending side, an application data block is encapsulated in a TCP packet when it is passed down to the TCP layer. In other words, a TCP packet consists of a header and a payload, where the header corresponds to the TCP envelope and the payload is the application data block. Likewise, the TCP packet will be encapsulated in an IP packet when it is passed down to the IP layer. An IP packet consists of a header and a payload, which is the TCP packet passed down from the TCP layer. The IP packet will be encapsulated in a device-dependent frame (e.g., an Ethernet frame) when it is passed down to the data-link layer. A frame has a header, and it may also have a trailer. For example, in addition to having a header, an Ethernet frame also has a 32-bit cyclic redundancy check (CRC) trailer. When it is passed down to the physical layer, a frame will be transformed into a sequence of media signals for transmission</p>
 <p><img alt="image15" src="../images/image15.png" />
     Flow Diagram of a Packet Generation</p>
 </li>
@@ -1392,7 +1394,7 @@ Correspondence between layers of the TCP/IP architecture and the OSI model. Also
 </ol>
 <h3 id="public-key-infrastructure">Public Key Infrastructure</h3>
 <ul>
-<li>To deploy cryptographic algorithms in network applications, we need a way to distribute secret keys using open networks. Public-key cryptography is the best way to distribute these secret keys. In order to use public-key cryptography, we need to build a public-key infrastructure (PKI) to support and manage public-key certificates and certificate authority (CA) networks. In particular, PKIs are set up to perform the following functions:</li>
+<li>To deploy cryptographic algorithms in network applications, we need a way to distribute secret keys using open networks. Public-key cryptography is the best way to distribute these secret keys. To use public-key cryptography, we need to build a public-key infrastructure (PKI) to support and manage public-key certificates and certificate authority (CA) networks. In particular, PKIs are set up to perform the following functions:</li>
 <li>Determine the legitimacy of users before issuing public-key certificates to them.</li>
 <li>Issue public-key certificates upon user requests.</li>
 <li>Extend public-key certificates valid time upon user requests.</li>
@@ -1411,8 +1413,8 @@ Correspondence between layers of the TCP/IP architecture and the OSI model. Also
 </ul>
 <h3 id="pgp-smime-email-security">PGP &amp; S/MIME : Email Security</h3>
 <ul>
-<li>There are a number of security protocols at the application layer. The most used of these protocols are email security protocols namely PGP and S/MIME.</li>
-<li>SMTP (“Simple Mail Transfer Protocol”) is used for sending and delivering from a client to a server via port 25: it’s the outgoing server. On the contrary, POP (“Post Office Protocol”) allows the user to pick up the message and download it into his own inbox: it’s the incoming server. The latest version of the Post Office Protocol is named POP3, and it’s been used since 1996; it uses port 110</li>
+<li>There are several security protocols at the application layer. The most used of these protocols are email security protocols namely PGP and S/MIME.</li>
+<li>SMTP (“Simple Mail Transfer Protocol”) is used for sending and delivering from a client to a server via port 25: it’s the outgoing server. On the contrary, POP (“Post Office Protocol”) allows the user to pick up the message and download it into his inbox: it’s the incoming server. The latest version of the Post Office Protocol is named POP3, and it’s been used since 1996; it uses port 110</li>
 </ul>
 <p>PGP</p>
 <ul>
@@ -1425,11 +1427,11 @@ Correspondence between layers of the TCP/IP architecture and the OSI model. Also
 <li>GnuPG is another free encryption standard that companies may use that is based on OpenPGP.</li>
 <li>GnuPG serves as a replacement for Symantec’s PGP.</li>
 <li>The main difference is the supported algorithms. However, GnuPG plays nice with PGP by design. Because GnuPG is open, some businesses would prefer the technical support and the user interface that comes with Symantec’s PGP.</li>
-<li>It is important to note that there are some nuances between compatibility of GnuPG and PGP, such as the compatibility between certain algorithms, but in most applications such as email, there are workarounds. One such algorithm is the IDEA Module which isn’t included in GnuPG out of the box due to patent issues.</li>
+<li>It is important to note that there are some nuances between the compatibility of GnuPG and PGP, such as the compatibility between certain algorithms, but in most applications such as email, there are workarounds. One such algorithm is the IDEA Module which isn’t included in GnuPG out of the box due to patent issues.</li>
 </ul>
 <p>S/MIME</p>
 <ul>
-<li>SMTP can only handle 7-bit ASCII text (You can use UTF-8 extensions to alleviate this limitations, ) messages. While POP can handle other content types besides 7-bit ASCII, POP may, under a common default setting, download all the messages stored in the mail server to the user's local computer. After that, if POP removes these messages from the mail server. This makes it difficult for the user to read his messages from multiple computers.</li>
+<li>SMTP can only handle 7-bit ASCII text (You can use UTF-8 extensions to alleviate these limitations, ) messages. While POP can handle other content types besides 7-bit ASCII, POP may, under a common default setting, download all the messages stored in the mail server to the user's local computer. After that, if POP removes these messages from the mail server. This makes it difficult for the user to read his messages from multiple computers.</li>
 <li>The Multipurpose Internet Mail Extension protocol (MIME) was designed to support sending and receiving email messages in various formats, including nontext files generated by word processors, graphics files, sound files, and video clips. Moreover, MIME allows a single message to include mixed types of data in any combination of these formats.</li>
 <li>The Internet Mail Access Protocol (IMAP), operated on TCP port 143(only for non-encrypted), stores (Configurable on both server &amp; client just like PoP) incoming email messages in the mail server until the user deletes them deliberately. This allows the user to access his mailbox from multiple machines and download messages to a local machine without deleting it from the mailbox in the mail server.</li>
 </ul>
@@ -1438,9 +1440,9 @@ Correspondence between layers of the TCP/IP architecture and the OSI model. Also
 <li>SSL uses a PKI to decide if a server’s public key is trustworthy by requiring servers to use a security certificate signed by a trusted CA.</li>
 <li>When Netscape Navigator 1.0 was released, it trusted a single CA operated by the RSA Data Security corporation.</li>
 <li>The server’s public RSA keys were used to be stored in the security certificate, which can then be used by the browser to establish a secure communication channel. The security certificates we use today still rely on the same standard (named X.509) that Netscape Navigator 1.0 used back then.</li>
-<li>Netscape’s intent was to train users(though this didn’t work out later) to differentiate secure communications from insecure ones, so they put a lock icon next to the address bar. When the lock is open, the communication is insecure. A closed lock means communication has been secured with SSL, which required the server to provide a signed certificate. You’re obviously familiar with this icon as it’s been in every browser ever since. The engineers at Netscape truly created a standard for secure internet communications.</li>
+<li>Netscape intended to train users(though this didn’t work out later) to differentiate secure communications from insecure ones, so they put a lock icon next to the address bar. When the lock is open, the communication is insecure. A closed lock means communication has been secured with SSL, which required the server to provide a signed certificate. You’re obviously familiar with this icon as it’s been in every browser ever since. The engineers at Netscape truly created a standard for secure internet communications.</li>
 <li>
-<p>A year after releasing SSL 2.0, Netscape fixed several security issues and released SSL 3.0, a protocol that, albeit being officially deprecated since June 2015, remains in use in certain parts of the world more than 20 years after its introduction. In an effort to standardize SSL, the Internet Engineering Task Force (IETF) created a slightly modified SSL 3.0 and, in 1999, unveiled it as Transport Layer Security (TLS) 1.0. The name change between SSL and TLS continues to confuse people today. Officially, TLS is the new SSL, but in practice, people use SSL and TLS interchangeably to talk about any version of the protocol.</p>
+<p>A year after releasing SSL 2.0, Netscape fixed several security issues and released SSL 3.0, a protocol that, albeit being officially deprecated since June 2015, remains in use in certain parts of the world more than 20 years after its introduction. To standardize SSL, the Internet Engineering Task Force (IETF) created a slightly modified SSL 3.0 and, in 1999, unveiled it as Transport Layer Security (TLS) 1.0. The name change between SSL and TLS continues to confuse people today. Officially, TLS is the new SSL, but in practice, people use SSL and TLS interchangeably to talk about any version of the protocol.</p>
 </li>
 <li>
 <p>Must See:</p>
@@ -1456,13 +1458,13 @@ Correspondence between layers of the TCP/IP architecture and the OSI model. Also
 <li>This is because IP packets, regardless of whether they are encrypted, can always be forwarded into an edge network.</li>
 <li>Firewalls that were developed in the 1990s are important instruments to help restrict network access. A firewall may be a hardware device, a software package, or a combination of both.</li>
 <li>Packets flowing into the internal network from the outside should be evaluated before they are allowed to enter. One of the critical elements of a firewall is its ability to examine packets without imposing a negative impact on communication speed while providing security protections for the internal network.</li>
-<li>The packet inspection that is carried out by firewalls can be done using several different methods. On the basis of the particular method used by the firewall, it can be characterized as either a packet filter, circuit gateway, application gateway, or dynamic packet filter.</li>
+<li>The packet inspection that is carried out by firewalls can be done using several different methods. Based on the particular method used by the firewall, it can be characterized as either a packet filter, circuit gateway, application gateway, or dynamic packet filter.</li>
 </ul>
 <h3 id="packet-filters">Packet Filters</h3>
 <ul>
 <li>It inspects ingress packets coming to an internal network from outside and inspects egress packets going outside from an internal network</li>
 <li>Packing filtering only inspects IP headers and TCP headers, not the payloads generated at the application layer</li>
-<li>A packet filtering firewall uses a set of rules to determine whether a packet should be allowed or denied to pass through.</li>
+<li>A packet-filtering firewall uses a set of rules to determine whether a packet should be allowed or denied to pass through.</li>
 <li>2 types:</li>
 <li>
 <p>Stateless</p>
@@ -1486,14 +1488,14 @@ Correspondence between layers of the TCP/IP architecture and the OSI model. Also
 <h3 id="application-gatewaysalg">Application Gateways(ALG)</h3>
 <ul>
 <li>Aka PROXY Servers</li>
-<li>An Application Level Gateway (ALG) acts like a proxy for internal hosts, processing service requests from external clients.</li>
+<li>An Application Level Gateway (ALG) acts as a proxy for internal hosts, processing service requests from external clients.</li>
 <li>An ALG performs deep inspections on each IP packet (ingress or egress).</li>
 <li>In particular, an ALG inspects application program formats contained in the packet (e.g., MIME format or SQL format) and examines whether its payload is permitted.</li>
 <li>Thus, an ALG may be able to detect a computer virus contained in the payload. Because an ALG inspects packet payloads, it may be able to detect malicious code and quarantine suspicious packets, in addition to blocking packets with suspicious IP addresses and TCP ports. On the other hand, an ALG also incurs substantial computation and space overheads.</li>
 </ul>
 <h3 id="trusted-systems-bastion-hosts">Trusted Systems &amp; Bastion Hosts</h3>
 <ul>
-<li>A Trusted Operating System (TOS) is an operating system that meets a particular set of security requirements. Whether an operating system can be trusted or not depends on a number of elements. For example, for an operating system on a particular computer to be certified trusted, one needs to validate that, among other things, the following four requirements are satisfied:</li>
+<li>A Trusted Operating System (TOS) is an operating system that meets a particular set of security requirements. Whether an operating system can be trusted or not depends on several elements. For example, for an operating system on a particular computer to be certified trusted, one needs to validate that, among other things, the following four requirements are satisfied:</li>
 <li>Its system design contains no defects;</li>
 <li>Its system software contains no loopholes;</li>
 <li>Its system is configured properly; and</li>
@@ -1503,15 +1505,15 @@ Correspondence between layers of the TCP/IP architecture and the OSI model. Also
 <li>
 <p>Bastion Hosts</p>
 </li>
-<li>Bastion hosts are computers with strong defense mechanisms. They often serve as host computers for implementing application gateways, circuit gateways, and other types of firewalls. A bastion host is operated on a trusted operating system that must not contain unnecessary functionalities or programs. This measure helps to reduce error probabilities and makes it easier to conduct security checks. Only those network application programs that are absolutely necessary, for example, SSH, DNS, SMTP, and authentication programs, are installed on a bastion host.</li>
+<li>Bastion hosts are computers with strong defence mechanisms. They often serve as host computers for implementing application gateways, circuit gateways, and other types of firewalls. A bastion host is operated on a trusted operating system that must not contain unnecessary functionalities or programs. This measure helps to reduce error probabilities and makes it easier to conduct security checks. Only those network application programs that are necessary, for example, SSH, DNS, SMTP, and authentication programs, are installed on a bastion host.</li>
 <li>Bastion hosts are also primarily used as controlled ingress points so that the security monitoring can focus more narrowly on actions happening at a single point closely.</li>
 </ul>
 <hr />
 <h2 id="common-techniques-scannings-packet-capturing">Common Techniques &amp; Scannings, Packet Capturing</h2>
 <h3 id="scanning-ports-with-nmap">Scanning Ports with Nmap</h3>
 <ul>
-<li>Nmap ("Network Mapper") is a free and open source (license) utility for network discovery and security auditing.  Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime.</li>
-<li>The best thing about Nmap is it’s free and open source and is very flexible and versatile</li>
+<li>Nmap ("Network Mapper") is a free and open-source (license) utility for network discovery and security auditing.  Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime.</li>
+<li>The best thing about Nmap is it’s free and open-source and is very flexible and versatile</li>
 <li>Nmap is often used to determine alive hosts in a network, open ports on those hosts, services running on those open ports, and version identification of that service on that port.</li>
 <li>More at http://scanme.nmap.org/</li>
 </ul>
@@ -1522,7 +1524,7 @@ Correspondence between layers of the TCP/IP architecture and the OSI model. Also
 <li><strong>Open</strong> — An open port is one that is actively accepting TCP, UDP or SCTP connections. Open ports are what interests us the most because they are the ones that are vulnerable to attacks. Open ports also show the available services on a network.</li>
 <li><strong>Closed</strong> — A port that receives and responds to Nmap probe packets but there is no application listening on that port. Useful for identifying that the host exists and for OS detection.</li>
 <li><strong>Filtered</strong> — Nmap can’t determine whether the port is open because packet filtering prevents its probes from reaching the port. Filtering could come from firewalls or router rules. Often little information is given from filtered ports during scans as the filters can drop the probes without responding or respond with useless error messages e.g. destination unreachable.</li>
-<li><strong>Unfiltered</strong> — Port is accessible but Nmap doesn’t know if its open or closed. Only used in ACK scan which is used to map firewall rulesets. Other scan types can be used to identify whether the port is open.</li>
+<li><strong>Unfiltered</strong> — Port is accessible but Nmap doesn’t know if it is open or closed. Only used in ACK scan which is used to map firewall rulesets. Other scan types can be used to identify whether the port is open.</li>
 <li><strong>Open/filtered</strong> — Nmap is unable to determine between open and filtered. This happens when an open port gives no response. No response could mean that the probe was dropped by a packet filter or any response is blocked.</li>
 <li><strong>Closed/filtered</strong> — Nmap is unable to determine whether a port is closed or filtered. Only used in the IP ID idle scan.</li>
 </ul>
@@ -1532,9 +1534,9 @@ Correspondence between layers of the TCP/IP architecture and the OSI model. Also
 <li>TCP Connect scan completes the 3-way handshake.</li>
 <li>If a port is open, the operating system completes the TCP three-way handshake and the port scanner immediately closes the connection to avoid DOS. This is “noisy” because the services can log the sender IP address and might trigger Intrusion Detection Systems.</li>
 <li>UDP Scan</li>
-<li>This scan checks to see if there are any UDP ports listening.</li>
+<li>This scan checks to see if any UDP ports are listening.</li>
 <li>
-<p>Since UDP does not respond with a positive acknowledgment like TCP and only responds to an incoming UDP packet when the port is closed,</p>
+<p>Since UDP does not respond with a positive acknowledgement like TCP and only responds to an incoming UDP packet when the port is closed,</p>
 </li>
 <li>
 <p>SYN Scan</p>
@@ -1565,7 +1567,7 @@ Correspondence between layers of the TCP/IP architecture and the OSI model. Also
 <li>This special type of scan looks for machine answering to RPC (Remote Procedure Call) services</li>
 <li>IDLE Scan</li>
 <li>It is a super stealthy method whereby the scan packets are bounced off an external host.</li>
-<li>You don’t need to have control over the other host but it does have to set up and meet certain requirements. You must input the IP address of our “zombie” host and what port number to use. It is one of the more controversial options in Nmap since it really only has a use for malicious attacks.</li>
+<li>You don’t need to have control over the other host but it does have to set up and meet certain requirements. You must input the IP address of our “zombie” host and what port number to use. It is one of the more controversial options in Nmap since it only has a use for malicious attacks.</li>
 </ol>
 <p>Scan Techniques</p>
 <p>A couple of scan techniques which can be used to gain more information about a system and its ports. You can read more at <a href="https://medium.com/infosec-adventures/nmap-cheatsheet-a423fcdda0ca">https://medium.com/infosec-adventures/nmap-cheatsheet-a423fcdda0ca</a></p>
@@ -1577,7 +1579,7 @@ Correspondence between layers of the TCP/IP architecture and the OSI model. Also
 <li>OpenVAS is made up of three main parts. These are:</li>
 <li>a regularly updated feed of Network Vulnerability Tests (NVTs);</li>
 <li>a scanner, which runs the NVTs; and</li>
-<li>a SQLite 3 database for storing both your test configurations and the NVTs’ results and configurations.</li>
+<li>an SQLite 3 database for storing both your test configurations and the NVTs’ results and configurations.</li>
 <li><a href="https://www.greenbone.net/en/install_use_gce/">https://www.greenbone.net/en/install_use_gce/</a></li>
 </ul>
 <h3 id="wireshark">WireShark</h3>
@@ -1586,7 +1588,7 @@ Correspondence between layers of the TCP/IP architecture and the OSI model. Also
 <li>This means Wireshark is designed to decode not only packet bits and bytes but also the relations between packets and protocols.</li>
 <li>Wireshark understands protocol sequences.</li>
 </ul>
-<p>A simple demo of wireshark</p>
+<p>A simple demo of Wireshark</p>
 <ol>
 <li>Capture only udp packets:</li>
 <li>
@@ -1721,8 +1723,8 @@ Correspondence between layers of the TCP/IP architecture and the OSI model. Also
 <ul>
 <li>Dumpcap is a network traffic dump tool. It captures packet data from a live network and writes the packets to a file. Dumpcap’s native capture file format is pcapng, which is also the format used by Wireshark.</li>
 <li>By default, Dumpcap uses the pcap library to capture traffic from the first available network interface and writes the received raw packet data, along with the packets’ time stamps into a pcapng file. The capture filter syntax follows the rules of the pcap library.</li>
-<li>The Wireshark command line utility called 'dumpcap.exe' can be used to capture LAN traffic over an extended period of time.</li>
-<li>Wireshark itself can also be used, but dumpcap does not significantly utilize the computer's memory while capturing for long periods of time.</li>
+<li>The Wireshark command-line utility called 'dumpcap.exe' can be used to capture LAN traffic over an extended period of time.</li>
+<li>Wireshark itself can also be used, but dumpcap does not significantly utilize the computer's memory while capturing for long periods.</li>
 </ul>
 <h3 id="daemonlogger">DaemonLogger</h3>
 <ul>
@@ -1736,7 +1738,7 @@ Correspondence between layers of the TCP/IP architecture and the OSI model. Also
 <ul>
 <li>Netsniff-NG is a high-performance packet capture utility</li>
 <li>While the utilities we’ve discussed to this point rely on Libpcap for capture, Netsniff-NG utilizes zero-copy mechanisms to capture packets. This is done with the intent to support full packet capture over high throughput links.</li>
-<li>In order to begin capturing packets with Netsniff-NG, we have to specify an input and output. In most cases, the input will be a network interface, and the output will be a file or folder on disk.</li>
+<li>To begin capturing packets with Netsniff-NG, we have to specify an input and output. In most cases, the input will be a network interface, and the output will be a file or folder on disk.</li>
 </ul>
 <p><code>netsniff-ng –i eth1 –o data.pcap</code></p>
 <h3 id="netflow">Netflow</h3>
@@ -1755,7 +1757,7 @@ Correspondence between layers of the TCP/IP architecture and the OSI model. Also
 </ul>
 <h3 id="ids">IDS</h3>
 <p>A security solution that detects security-related events in your environment but does not block them.
-IDS sensors can be software and hardware based used to collect and analyze the network traffic. These sensors are available in two varieties, network IDS and host IDS.</p>
+IDS sensors can be software and hardware-based used to collect and analyze the network traffic. These sensors are available in two varieties, network IDS and host IDS.</p>
 <ul>
 <li>A host IDS is a server-specific agent running on a server with a minimum of overhead to monitor the operating system.</li>
 <li>A network IDS can be embedded in a networking device, a standalone appliance, or a module monitoring the network traffic.</li>
@@ -1773,7 +1775,7 @@ IDS sensors can be software and hardware based used to collect and analyze the n
 <p>ex: SNORT &amp; SURICATA</p>
 </li>
 </ul>
-<p>Policy Based IDS</p>
+<p>Policy-Based IDS</p>
 <ul>
 <li>The policy-based IDSs (mainly host IDSs) trigger an alarm whenever a violation occurs against the configured policy.</li>
 <li>This configured policy is or should be a representation of the security policies.</li>
@@ -1787,7 +1789,7 @@ IDS sensors can be software and hardware based used to collect and analyze the n
 <li>Statistical anomaly detection learns the traffic patterns interactively over a period of time.</li>
 <li>In the nonstatistical approach, the IDS has a predefined configuration of the supposedly acceptable and valid traffic patterns.</li>
 </ul>
-<p>Host Based IDS &amp; Network Based IDS</p>
+<p>Host-Based IDS &amp; Network-Based IDS</p>
 <ul>
 <li>
 <p>A host IDS can be described as a distributed agent residing on each server of the network that needs protection. These distributed agents are tied very closely to the underlying operating system.</p>
@@ -1798,7 +1800,7 @@ IDS sensors can be software and hardware based used to collect and analyze the n
 </ul>
 <p>Honeypots </p>
 <ul>
-<li>The use of decoy machines to direct intruders' attention away from the machines under protection is a major technique to preclude intrusion attacks. Any device, system, directory, or file used as a decoy to lure attackers away from important assets and to collect intrusion or abusive behaviors is referred to as a honeypot.</li>
+<li>The use of decoy machines to direct intruders' attention away from the machines under protection is a major technique to preclude intrusion attacks. Any device, system, directory, or file used as a decoy to lure attackers away from important assets and to collect intrusion or abusive behaviours is referred to as a honeypot.</li>
 <li>A honeypot may be implemented as a physical device or as an emulation system. The idea is to set up decoy machines in a LAN, or decoy directories/files in a file system and make them appear important, but with several exploitable loopholes, to lure attackers to attack these machines or directories/files, so that other machines, directories, and files can evade intruders' attentions. A decoy machine may be a host computer or a server computer. Likewise, we may also set up decoy routers or even decoy LANs.</li>
 </ul>
 <hr />
@@ -1814,7 +1816,7 @@ IDS sensors can be software and hardware based used to collect and analyze the n
 <ul>
 <li>Direct TTL Probes</li>
 <li>
-<p>In this technique we send a packet to a host of suspect spoofed IP that triggers reply and compare TTL with suspect packet; if the TTL in the reply is not the same as the packet being checked; it is a spoofed packet.</p>
+<p>In this technique we send a packet to a host of suspect spoofed IP that triggers reply and compares TTL with suspect packet; if the TTL in the reply is not the same as the packet being checked; it is a spoofed packet.</p>
 </li>
 <li>
 <p>This Technique is successful when the attacker is in a different subnet from the victim.
@@ -1823,7 +1825,7 @@ IDS sensors can be software and hardware based used to collect and analyze the n
 <li>
 <p>IP Identification Number.</p>
 </li>
-<li>Send a probe to the host of suspect spoofed traffic that triggers a reply and compare IP ID with suspect traffic.</li>
+<li>Send a probe to the host of suspect spoofed traffic that triggers a reply and compares IP ID with suspect traffic.</li>
 <li>
 <p>If IP IDs are not in the near value of packet being checked, suspect traffic is spoofed</p>
 </li>
@@ -1831,22 +1833,22 @@ IDS sensors can be software and hardware based used to collect and analyze the n
 <p>TCP Flow Control Method</p>
 </li>
 <li>Attackers sending spoofed TCP packets will not receive the target’s SYN-ACK packets.</li>
-<li>Attackers cannot therefore be responsive to change in the congestion window size</li>
+<li>Attackers cannot, therefore, be responsive to change in the congestion window size</li>
 <li>When the receiver still receives traffic even after a windows size is exhausted, most probably the packets are spoofed.</li>
 </ul>
 <h3 id="covert-channel">Covert Channel</h3>
 <ul>
 <li>A covert or clandestine channel can be best described as a pipe or communication channel between two entities that can be exploited by a process or application transferring information in a manner that violates the system's security specifications.</li>
 <li>More specifically for TCP/IP, in some instances, covert channels are established, and data can be secretly passed between two end systems.</li>
-<li>Ex: ICMP resides at the Internet layer of the TCP/IP protocol suite and is implemented in all TCP/IP hosts. Based on the specifications of the ICMP Protocol, an ICMP Echo Request message should have an 8-byte header and a 56-byte payload. The ICMP Echo Request packet should not carry any data in the payload. However, these packets are often used to carry secret information. The ICMP packets are altered slightly to carry secret data in the payload. This makes the size of the packet larger, but no control exists in the protocol stack to defeat this behavior. The alteration of ICMP packets gives intruders the opportunity to program specialized client-server pairs. These small pieces of code export confidential information without alerting the network administrator.</li>
+<li>Ex: ICMP resides at the Internet layer of the TCP/IP protocol suite and is implemented in all TCP/IP hosts. Based on the specifications of the ICMP Protocol, an ICMP Echo Request message should have an 8-byte header and a 56-byte payload. The ICMP Echo Request packet should not carry any data in the payload. However, these packets are often used to carry secret information. The ICMP packets are altered slightly to carry secret data in the payload. This makes the size of the packet larger, but no control exists in the protocol stack to defeat this behaviour. The alteration of ICMP packets allows intruders to program specialized client-server pairs. These small pieces of code export confidential information without alerting the network administrator.</li>
 <li>
 <p>ICMP can be leveraged for more than data exfiltration. For eg. some C&amp;C tools such as Loki used ICMP channel to establish encrypted interactive session back in 1996.</p>
 </li>
 <li>
-<p>Deep packet inspection has since come a long way. A lot of IDS/IPS detect ICMP tunneling.</p>
+<p>Deep packet inspection has since come a long way. A lot of IDS/IPS detect ICMP tunnelling.</p>
 <ul>
 <li>Check for echo responses that do not contain the same payload as  request</li>
-<li>Check for volume of ICMP traffic specially for volumes beyond an acceptable threshold</li>
+<li>Check for the volume of ICMP traffic especially for volumes beyond an acceptable threshold</li>
 </ul>
 </li>
 </ul>
@@ -1865,10 +1867,10 @@ IDS sensors can be software and hardware based used to collect and analyze the n
 </ul>
 <p>TCP Flags</p>
 <ul>
-<li>Data exchange using TCP does not happen until a three-way handshake has been successfully completed. This handshake uses different flags to influence the way TCP segments are processed.</li>
+<li>Data exchange using TCP does not happen until a three-way handshake has been completed. This handshake uses different flags to influence the way TCP segments are processed.</li>
 <li>There are 6 bits in the TCP header that are often called flags. Namely:</li>
 <li>
-<p>6 different flags are part of the TCP header: Urgent pointer field (URG), Acknowledgment field (ACK), Push function (PSH), Reset the connection (RST), Synchronize sequence numbers (SYN), and sender is finished with this connection (FIN).
+<p>6 different flags are part of the TCP header: Urgent pointer field (URG), Acknowledgment field (ACK), Push function (PSH), Reset the connection (RST), Synchronize sequence numbers (SYN), and the sender is finished with this connection (FIN).
   <img alt="image20" src="../images/image20.png" /></p>
 </li>
 <li>
@@ -1883,14 +1885,14 @@ IDS sensors can be software and hardware based used to collect and analyze the n
 | 1    |1     |1      |1     |Illegal Combination
 </code></pre>
 <ul>
-<li>The attacker's ultimate goal is to write special programs or pieces of code that are able to construct these illegal combinations resulting in an efficient DoS attack.</li>
+<li>The attacker's ultimate goal is to write special programs or pieces of code that can construct these illegal combinations resulting in an efficient DoS attack.</li>
 </ul>
 <p>SYN FLOOD</p>
 <ul>
 <li>The timers (or lack of certain timers) in 3 way handshake are often used and exploited by attackers to disable services or even to enter systems.</li>
-<li>After step 2 of the three-way handshake, no limit is set on the time to wait after receiving a SYN. The attacker initiates many connection requests to the web server of Company XYZ (almost certainly with a spoofed IP address).</li>
-<li>The SYN+ACK packets (Step 2) sent by the web server back to the originating source IP address are not replied to. This leaves a TCP session half-open on the web server. Multiple packets cause multiple TCP sessions to stay open.</li>
-<li>Based on the hardware limitations of the server, a limited number of TCP sessions can stay open, and as a result, the web server refuses further connection establishments attempts from any host as soon as a certain limit is reached. These half-open connections need to be completed or timed out before new connections can be established.</li>
+<li>After step 2 of the three-way handshake, no limit is set on the time to wait after receiving a SYN. The attacker initiates many connection requests to the webserver of Company XYZ (almost certainly with a spoofed IP address).</li>
+<li>The SYN+ACK packets (Step 2) sent by the web server back to the originating source IP address are not replied to. This leaves a TCP session half-open on the webserver. Multiple packets cause multiple TCP sessions to stay open.</li>
+<li>Based on the hardware limitations of the server, a limited number of TCP sessions can stay open, and as a result, the webserver refuses further connection establishments attempts from any host as soon as a certain limit is reached. These half-open connections need to be completed or timed out before new connections can be established.</li>
 </ul>
 <p>FIN Attack</p>
 <ul>
@@ -1905,9 +1907,9 @@ IDS sensors can be software and hardware based used to collect and analyze the n
 <h3 id="connection-hijacking">Connection Hijacking</h3>
 <p><img alt="image22" src="../images/image22.png" /></p>
 <ul>
-<li>An authorized user (Employee X) sends HTTP requests over a TCP session with the web server.</li>
-<li>The web server accepts the packets from Employee X only when the packet has the correct SEQ/ACK numbers. As seen previously, these numbers are important for the web server to distinguish between different sessions and to make sure it is still talking to Employee X. Imagine that the cracker starts sending packets to the web server spoofing the IP address of Employee X, using the correct SEQ/ACK combination. The web server accepts the packet and increments the ACK number.</li>
-<li>In the meantime, Employee X continues to send packets but with incorrect SEQ/ACK numbers. As a result of sending unsynchronized packets, all data from Employee X is discarded when received by the web server. The attacker pretends to be Employee X using the correct numbers. This finally results in the cracker hijacking the connection, whereby Employee X is completely confused and the web server replies assuming the cracker is sending correct synchronized data.</li>
+<li>An authorized user (Employee X) sends HTTP requests over a TCP session with the webserver.</li>
+<li>The web server accepts the packets from Employee X only when the packet has the correct SEQ/ACK numbers. As seen previously, these numbers are important for the webserver to distinguish between different sessions and to make sure it is still talking to Employee X. Imagine that the cracker starts sending packets to the web server spoofing the IP address of Employee X, using the correct SEQ/ACK combination. The web server accepts the packet and increments the ACK number.</li>
+<li>In the meantime, Employee X continues to send packets but with incorrect SEQ/ACK numbers. As a result of sending unsynchronized packets, all data from Employee X is discarded when received by the webserver. The attacker pretends to be Employee X using the correct numbers. This finally results in the cracker hijacking the connection, whereby Employee X is completely confused and the webserver replies assuming the cracker is sending correct synchronized data.</li>
 </ul>
 <p>STEPS:</p>
 <ol>
@@ -1916,7 +1918,7 @@ IDS sensors can be software and hardware based used to collect and analyze the n
 <li>Employee X acknowledges the packet.</li>
 <li>The cracker launches a spoofed packet to the server.</li>
 <li>The web server responds to the cracker. The cracker starts verifying SEQ/ACK numbers to double-check success. At this time, the cracker takes over the session from Employee X, which results in a session hanging for Employee X.</li>
-<li>The cracker can start sending traffic to the web server.</li>
+<li>The cracker can start sending traffic to the webserver.</li>
 <li>The web server returns the requested data to confirm delivery with the correct ACK number.</li>
 <li>The cracker can continue to send data (keeping track of the correct SEQ/ACK numbers) until eventually setting the FIN flag to terminate the session.</li>
 </ol>
@@ -1924,7 +1926,7 @@ IDS sensors can be software and hardware based used to collect and analyze the n
 <ul>
 <li>A buffer is a temporary data storage area used to store program code and data.</li>
 <li>When a program or process tries to store more data in a buffer than it was originally anticipated to hold, a buffer overflow occurs.</li>
-<li>Buffers are temporary storage locations in memory (memory or buffer sizes are often measured in bytes) that are able to store a fixed amount of data in bytes. When more data is retrieved than can be stored in a buffer location, the additional information must go into an adjacent buffer, resulting in overwriting the valid data held in them.</li>
+<li>Buffers are temporary storage locations in memory (memory or buffer sizes are often measured in bytes) that can store a fixed amount of data in bytes. When more data is retrieved than can be stored in a buffer location, the additional information must go into an adjacent buffer, resulting in overwriting the valid data held in them.</li>
 </ul>
 <p>Mechanism:</p>
 <ul>
@@ -1934,7 +1936,7 @@ IDS sensors can be software and hardware based used to collect and analyze the n
 <p>CounterMeasure:</p>
 <ul>
 <li>The most important approach is to have a concerted focus on writing correct code.</li>
-<li>A second method is to make the data buffers (memory locations) address space of the program code non executable. This type of address space makes it impossible to execute code, which might be infiltrated in the program's buffers during an attack.</li>
+<li>A second method is to make the data buffers (memory locations) address space of the program code non-executable. This type of address space makes it impossible to execute code, which might be infiltrated in the program's buffers during an attack.</li>
 </ul>
 <h3 id="more-spoofing">More Spoofing</h3>
 <p>Address Resolution Protocol Spoofing</p>
diff --git a/security/threats_attacks_defences/index.html b/security/threats_attacks_defences/index.html
index 0de2ee4..980a3e5 100644
--- a/security/threats_attacks_defences/index.html
+++ b/security/threats_attacks_defences/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -550,13 +552,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -641,7 +643,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
@@ -897,10 +899,10 @@
       
         <li class="md-nav__item">
   <a href="#web-based-attacks" class="md-nav__link">
-    Web Based Attacks
+    Web-Based Attacks
   </a>
   
-    <nav class="md-nav" aria-label="Web Based Attacks">
+    <nav class="md-nav" aria-label="Web-Based Attacks">
       <ul class="md-nav__list">
         
           <li class="md-nav__item">
@@ -1229,10 +1231,10 @@
       
         <li class="md-nav__item">
   <a href="#web-based-attacks" class="md-nav__link">
-    Web Based Attacks
+    Web-Based Attacks
   </a>
   
-    <nav class="md-nav" aria-label="Web Based Attacks">
+    <nav class="md-nav" aria-label="Web-Based Attacks">
       <ul class="md-nav__list">
         
           <li class="md-nav__item">
@@ -1458,22 +1460,22 @@
 <h3 id="cache-poisoning-attack">Cache Poisoning Attack</h3>
 <ul>
 <li>Since DNS responses are cached, a quick response can be provided for repeated translations.
-DNS negative queries are also cached, e.g., misspelled words, and all cached data periodically times out.
+DNS negative queries are also cached, e.g., misspelt words, and all cached data periodically times out.
 Cache poisoning is an issue in what is known as pharming. This term is used to describe a hacker’s attack in which a website’s traffic is redirected to a bogus website by forging the DNS mapping. In this case, an attacker attempts to insert a fake address record for an Internet domain into the DNS.
 If the server accepts the fake record, the cache is poisoned and subsequent requests for the address of the domain are answered with the address of a server controlled by the attacker. As long as the fake entry is cached by the server, browsers or e-mail servers will automatically go to the address provided by the compromised DNS server.
 the typical time to live (TTL) for cached entries is a couple of hours, thereby permitting ample time for numerous users to be affected by the attack.</li>
 </ul>
 <h3 id="dnssec-security-extension">DNSSEC (Security Extension)</h3>
 <ul>
-<li>The long-term solution to these DNS problems is authentication. If a resolver cannot distinguish between valid and invalid data in a response, then add source authentication to verify that the data received in a response is equal to the data entered by the zone administrator</li>
-<li>DNS Security Extensions (DNSSEC) protects against data spoofing and corruption, and provides mechanisms to authenticate servers and requests, as well as mechanisms to establish authenticity and integrity.</li>
+<li>The long-term solution to these DNS problems is authentication. If a resolver cannot distinguish between valid and invalid data in a response, then add source authentication to verify that the data received in response is equal to the data entered by the zone administrator</li>
+<li>DNS Security Extensions (DNSSEC) protects against data spoofing and corruption and provides mechanisms to authenticate servers and requests, as well as mechanisms to establish authenticity and integrity.</li>
 <li>When authenticating DNS responses, each DNS zone signs its data using a private key. It is recommended that this signing be done offline and in advance. The query for a particular record returns the requested resource record set (RRset) and signature (RRSIG) of the requested resource record set. The resolver then authenticates the response using a public key, which is pre-configured or learned via a sequence of key records in the DNS hierarchy.</li>
 <li>The goals of DNSSEC are to provide authentication and integrity for DNS responses without confidentiality or DDoS protection.</li>
 </ul>
 <h3 id="bgp">BGP</h3>
 <ul>
 <li>BGP stands for border gateway protocol. It is a routing protocol that exchanges routing information among multiple Autonomous Systems (AS)</li>
-<li>An Autonomous system is a collection of routers or networks with the same network policy usually under a single administrative control.</li>
+<li>An Autonomous System is a collection of routers or networks with the same network policy usually under single administrative control.</li>
 <li>BGP tells routers which hop to use in order to reach the destination network.</li>
 <li>BGP is used for both communicating information among routers in an AS (interior) and between multiple ASes (exterior).</li>
 </ul>
@@ -1481,11 +1483,11 @@ the typical time to live (TTL) for cached entries is a couple of hours, thereby
 <h2 id="how-bgp-works">How BGP Works</h2>
 <ul>
 <li>BGP is responsible for finding a path to a destination router &amp; the path it chooses should be the shortest and most reliable one.</li>
-<li>This decision is done through a protocol known as Link state. With the link state protocol each router broadcasts to all other routers in the network the state of its links and IP subnets. Each router then receives information from the other routers and constructs a complete topology view of the entire network. The next hop routing table is based on this topology view.</li>
-<li>The link state protocol uses a famous algorithm in the field of computer science, Dijkstra’s shortest path algorithm:</li>
-<li>We start from our router considering the path cost to all our direct neighbors.</li>
+<li>This decision is done through a protocol known as Link state. With the link-state protocol, each router broadcasts to all other routers in the network the state of its links and IP subnets. Each router then receives information from the other routers and constructs a complete topology view of the entire network. The next-hop routing table is based on this topology view.</li>
+<li>The link-state protocol uses a famous algorithm in the field of computer science, Dijkstra’s shortest path algorithm:</li>
+<li>We start from our router considering the path cost to all our direct neighbours.</li>
 <li>The shortest path is then taken</li>
-<li>We then re-look at all our neighbors that we can reach and update our link state table with the cost information. We then continue taking the shortest path until every router has been visited.</li>
+<li>We then re-look at all our neighbours that we can reach and update our link state table with the cost information. We then continue taking the shortest path until every router has been visited.</li>
 </ul>
 <h2 id="bgp-vulnerabilities">BGP Vulnerabilities</h2>
 <ul>
@@ -1493,36 +1495,36 @@ the typical time to live (TTL) for cached entries is a couple of hours, thereby
 <li>Injecting bogus route advertising information into the BGP-distributed routing database by malicious sources, accidentally or routers can disrupt Internet backbone operations. </li>
 <li>Blackholing traffic:</li>
 <li>Blackhole route is a network route, i.e., routing table entry, that goes nowhere and packets matching the route prefix are dropped or ignored. Blackhole routes can only be detected by monitoring the lost traffic.</li>
-<li>Blackhole routes are best defence against many common viral attacks where the traffic is dropped from infected machines to/from command &amp; control masters.</li>
+<li>Blackhole routes are the best defence against many common viral attacks where the traffic is dropped from infected machines to/from command &amp; control masters.</li>
 <li>
 <p>Infamous BGP Injection attack on Youtube</p>
 </li>
 <li>
-<p>EX: In 2008, Pakistan decided to block YouTube by creating a BGP route that led into a black hole. Instead this routing information got transmitted to a hong kong ISP and from there accidentally got propagated to the rest of the world meaning millions were routed through to this black hole and therefore unable to access YouTube.</p>
+<p>EX: In 2008, Pakistan decided to block YouTube by creating a BGP route that led into a black hole. Instead, this routing information got transmitted to a hong kong ISP and from there accidentally got propagated to the rest of the world meaning millions were routed through to this black hole and therefore unable to access YouTube.</p>
 </li>
 <li>Potentially, the greatest risk to BGP occurs in a denial of service attack in which a router is flooded with more packets than it can handle. Network overload and router resource exhaustion happen when the network begins carrying an excessive number of BGP messages, overloading the router control processors, memory, routing table and reducing the bandwidth available for data traffic.</li>
-<li>Refer : <a href="https://medium.com/bugbountywriteup/bgp-the-weak-link-in-the-internet-what-is-bgp-and-how-do-hackers-exploit-it-d899a68ba5bb">https://medium.com/bugbountywriteup/bgp-the-weak-link-in-the-internet-what-is-bgp-and-how-do-hackers-exploit-it-d899a68ba5bb</a></li>
-<li>Router flapping is another type of attack. Route flapping refers to repetitive changes to the BGP routing table, often several times a minute. Withdrawing and re-advertising at a high-rate can cause a serious problem for routers, since they propagate the announcements of routes. If these route flaps happen fast enough, e.g., 30 to 50 times per second, the router becomes overloaded, which eventually prevents convergence on valid routes. The potential impact for Internet users is a slowdown in message delivery, and in some cases packets may not be delivered at all.</li>
+<li>Refer: <a href="https://medium.com/bugbountywriteup/bgp-the-weak-link-in-the-internet-what-is-bgp-and-how-do-hackers-exploit-it-d899a68ba5bb">https://medium.com/bugbountywriteup/bgp-the-weak-link-in-the-internet-what-is-bgp-and-how-do-hackers-exploit-it-d899a68ba5bb</a></li>
+<li>Router flapping is another type of attack. Route flapping refers to repetitive changes to the BGP routing table, often several times a minute. Withdrawing and re-advertising at a high-rate can cause a serious problem for routers since they propagate the announcements of routes. If these route flaps happen fast enough, e.g., 30 to 50 times per second, the router becomes overloaded, which eventually prevents convergence on valid routes. The potential impact for Internet users is a slowdown in message delivery, and in some cases, packets may not be delivered at all.</li>
 </ul>
 <p>BGP Security</p>
 <ul>
-<li>Border Gateway Protocol Security recommends the use of BGP peer authentication, since it is one of the strongest mechanisms for preventing malicious activity.</li>
+<li>Border Gateway Protocol Security recommends the use of BGP peer authentication since it is one of the strongest mechanisms for preventing malicious activity.</li>
 <li>The authentication mechanisms are Internet Protocol Security (IPsec) or BGP MD5.</li>
-<li>Another method, known as prefix limits, can be used to avoid filling router tables. In this approach, routers should be configured to disable or terminate a BGP peering session, and issue warning messages to administrators, when a neighbor sends in excess of a preset number of prefixes.</li>
+<li>Another method, known as prefix limits, can be used to avoid filling router tables. In this approach, routers should be configured to disable or terminate a BGP peering session, and issue warning messages to administrators when a neighbour sends in excess of a preset number of prefixes.</li>
 <li>IETF is currently working on improving this space</li>
 </ul>
-<h2 id="web-based-attacks">Web Based Attacks</h2>
+<h2 id="web-based-attacks">Web-Based Attacks</h2>
 <h3 id="http-response-splitting-attacks">HTTP Response Splitting Attacks</h3>
 <ul>
 <li>HTTP response splitting attack may happen where the server script embeds user data in HTTP response headers without appropriate sanitation.</li>
 <li>This typically happens when the script embeds user data in the redirection URL of a redirection response (HTTP status code 3xx), or when the script embeds user data in a cookie value or name when the response sets a cookie.</li>
 <li>HTTP response splitting attacks can be used to perform web cache poisoning and cross-site scripting attacks.</li>
-<li>HTTP response splitting is the attacker’s ability to send a single HTTP request that forces the web server to form an output stream, which is then interpreted by the target as two HTTP responses instead of one response.</li>
+<li>HTTP response splitting is the attacker’s ability to send a single HTTP request that forces the webserver to form an output stream, which is then interpreted by the target as two HTTP responses instead of one response.</li>
 </ul>
 <h3 id="cross-site-request-forgery-csrf-or-xsrf">Cross-Site Request Forgery (CSRF or XSRF)</h3>
 <ul>
 <li>A Cross-Site Request Forgery attack tricks the victim’s browser into issuing a command to a vulnerable web application.</li>
-<li>Vulnerability is caused by browsers automatically including user authentication data, session ID, IP address, Windows domain credentials, etc  with each request.</li>
+<li>Vulnerability is caused by browsers automatically including user authentication data, session ID, IP address, Windows domain credentials, etc. with each request.</li>
 <li>Attackers typically use CSRF to initiate transactions such as transfer funds, login/logout user, close account, access sensitive data, and change account details.</li>
 <li>The vulnerability is caused by web browsers that automatically include credentials with each request, even for requests caused by a form, script, or image on another site. CSRF can also be dynamically constructed as part of a payload for a cross-site scripting attack</li>
 <li>All sites relying on automatic credentials are vulnerable. Popular browsers cannot prevent cross-site request forgery. Logging out of high-value sites as soon as possible can mitigate CSRF risk. It is recommended that a high-value website must require a client to manually provide authentication data in the same HTTP request used to perform any operation with security implications. Limiting the lifetime of session cookies can also reduce the chance of being used by other malicious sites.</li>
@@ -1531,20 +1533,20 @@ the typical time to live (TTL) for cached entries is a couple of hours, thereby
 <h3 id="cross-site-scripting-xss-attacks">Cross-Site Scripting (XSS) Attacks</h3>
 <ul>
 <li>Cross-Site Scripting occurs when dynamically generated web pages display user input, such as login information, that is not properly validated, allowing an attacker to embed malicious scripts into the generated page and then execute the script on the machine of any user that views the site.</li>
-<li>If successful, Cross-Site Scripting vulnerabilities can be exploited to manipulate or steal cookies, create requests that can be mistaken for those of a valid user, compromise confidential information, or execute malicious code on end user systems.</li>
+<li>If successful, Cross-Site Scripting vulnerabilities can be exploited to manipulate or steal cookies, create requests that can be mistaken for those of a valid user, compromise confidential information, or execute malicious code on end-user systems.</li>
 <li>Cross-Site Scripting (XSS or CSS) attacks involve the execution of malicious scripts on the victim’s browser. The victim is simply a user’s host and not the server. XSS results from a failure to validate user input by a web-based application.</li>
 </ul>
 <h3 id="document-object-model-dom-xss-attacks">Document Object Model (DOM) XSS Attacks</h3>
 <ul>
-<li>The Document Object Model (DOM) based XSS does not require the web server to receive the XSS payload for a successful attack. The attacker abuses the runtime by embedding their data on the client side. An attacker can force the client (browser) to render the page with parts of the DOM controlled by the attacker. </li>
-<li>When the page is rendered and the data is processed by the page, typically by a client side HTML-embedded script such as JavaScript, the page’s code may insecurely embed the data in the page itself, thus delivering the cross-site scripting payload. There are several DOM objects which can serve as an attack vehicle for delivering malicious script to victims browser.</li>
+<li>The Document Object Model (DOM) based XSS does not require the webserver to receive the XSS payload for a successful attack. The attacker abuses the runtime by embedding their data on the client-side. An attacker can force the client (browser) to render the page with parts of the DOM controlled by the attacker. </li>
+<li>When the page is rendered and the data is processed by the page, typically by a client-side HTML-embedded script such as JavaScript, the page’s code may insecurely embed the data in the page itself, thus delivering the cross-site scripting payload. There are several DOM objects which can serve as an attack vehicle for delivering malicious script to victims browser.</li>
 </ul>
 <h3 id="clickjacking">Clickjacking</h3>
 <ul>
 <li>The technique works by hiding malicious link/scripts under the cover of the content of a legitimate site.</li>
-<li>Buttons on a website actually contain invisible links, placed there by the attacker. So, an individual who clicks on an object they can visually see, is actually being duped into visiting a malicious page or executing a malicious script.</li>
+<li>Buttons on a website actually contain invisible links, placed there by the attacker. So, an individual who clicks on an object they can visually see is actually being duped into visiting a malicious page or executing a malicious script.</li>
 <li>When mouseover is used together with clickjacking, the outcome is devastating. Facebook users have been hit by a clickjacking attack, which tricks people into “liking” a particular Facebook page, thus enabling the attack to spread since Memorial Day 2010.</li>
-<li>There is not yet effective defense against clickjacking, and disabling JavaScript is the only viable method</li>
+<li>There is not yet effective defence against clickjacking, and disabling JavaScript is the only viable method</li>
 </ul>
 <h2 id="database-attacks-defenses">DataBase Attacks &amp; Defenses</h2>
 <h3 id="sql-injection-attacks">SQL injection Attacks</h3>
@@ -1559,7 +1561,7 @@ Here the username &amp; password is the input provided by the user. Suppose an a
 
 SELECT USERNAME,PASSWORD from USERS where USERNAME='' OR '1'='1' AND PASSOWRD='' OR '1'='1';
 
-This query results in a true statement &amp; user gets logged in. This example depicst the bost basic type of SQL injection
+This query results in a true statement &amp; the user gets logged in. This example depicts the bost basic type of SQL injection
 </code></pre>
 <h3 id="sql-injection-attack-defenses">SQL Injection Attack Defenses</h3>
 <ul>
@@ -1577,13 +1579,13 @@ This query results in a true statement &amp; user gets logged in. This example d
 <p>In spite of the most aggressive steps to protect computers from attacks, attackers sometimes get through. Any event that results in a violation of any of the confidentiality, integrity, or availability (CIA) security tenets is a security breach.</p>
 <h3 id="denial-of-service-attacks">Denial of Service Attacks</h3>
 <ul>
-<li>Denial of service (DoS) attacks result in downtime or inability of a user to access a system. DoS attacks impact the availability tenet of information systems security. A DoS attack is a coordinated attempt to deny service by occupying a computer to perform large amounts of unnecessary tasks. This excessive activity makes the system unavailable to perform legitimate operations</li>
+<li>Denial of service (DoS) attacks result in downtime or inability of a user to access a system. DoS attacks impact the availability of tenet of information systems security. A DoS attack is a coordinated attempt to deny service by occupying a computer to perform large amounts of unnecessary tasks. This excessive activity makes the system unavailable to perform legitimate operations</li>
 <li>Two common types of DoS attacks are as follows:</li>
 <li>Logic attacks—Logic attacks use software flaws to crash or seriously hinder the performance of remote servers. You can prevent many of these attacks by installing the latest patches to keep your software up to date.</li>
 <li>Flooding attacks—Flooding attacks overwhelm the victim computer’s CPU, memory, or network resources by sending large numbers of useless requests to the machine.</li>
 <li>Most DoS attacks target weaknesses in the overall system architecture rather than a software bug or security flaw</li>
 <li>One popular technique for launching a packet flood is a SYN flood.</li>
-<li>One of the best defenses against DoS attacks is to use intrusion prevention system (IPS) software or devices to detect and stop the attack.</li>
+<li>One of the best defences against DoS attacks is to use intrusion prevention system (IPS) software or devices to detect and stop the attack.</li>
 </ul>
 <h3 id="distributed-denial-of-service-attacks">Distributed Denial of Service Attacks</h3>
 <ul>
@@ -1608,14 +1610,14 @@ This query results in a true statement &amp; user gets logged in. This example d
 <h2 id="malicious-attacks">Malicious Attacks</h2>
 <h3 id="birthday-attack">Birthday Attack</h3>
 <ul>
-<li>Once an attacker compromises a hashed password file, a birthday attack is performed. A birthday attack is a type of cryptographic attack that is used to make brute-force attack of one-way hashes easier. It is a mathematical exploit that is based on the birthday problem in probability theory.</li>
+<li>Once an attacker compromises a hashed password file, a birthday attack is performed. A birthday attack is a type of cryptographic attack that is used to make a brute-force attack of one-way hashes easier. It is a mathematical exploit that is based on the birthday problem in probability theory.</li>
 <li>Further Reading:</li>
 <li><a href="https://www.sciencedirect.com/topics/computer-science/birthday-attack">https://www.sciencedirect.com/topics/computer-science/birthday-attack</a></li>
 <li><a href="https://www.internetsecurity.tips/birthday-attack/">https://www.internetsecurity.tips/birthday-attack/</a></li>
 </ul>
 <h3 id="brute-force-password-attacks">Brute-Force Password Attacks</h3>
 <ul>
-<li>In a brute-force password attack, the attacker tries different passwords on a system until one of them is successful. Usually the attacker employs a software program to try all possible combinations of a likely password, user ID, or security code until it locates a match. This occurs rapidly and in sequence. This type of attack is called a brute-force password attack because the attacker simply hammers away at the code. There is no skill or stealth involved—just brute force that eventually breaks the code.</li>
+<li>In a brute-force password attack, the attacker tries different passwords on a system until one of them is successful. Usually, the attacker employs a software program to try all possible combinations of a likely password, user ID, or security code until it locates a match. This occurs rapidly and in sequence. This type of attack is called a brute-force password attack because the attacker simply hammers away at the code. There is no skill or stealth involved—just brute force that eventually breaks the code.</li>
 <li>Further Reading:</li>
 <li><a href="https://owasp.org/www-community/attacks/Brute_force_attack">https://owasp.org/www-community/attacks/Brute_force_attack</a></li>
 <li><a href="https://owasp.org/www-community/controls/Blocking_Brute_Force_Attacks">https://owasp.org/www-community/controls/Blocking_Brute_Force_Attacks</a></li>
@@ -1635,7 +1637,7 @@ https://capec.mitre.org/data/definitions/16.html</li>
 <h3 id="man-in-the-middle-attacks">Man-in-the-Middle Attacks</h3>
 <ul>
 <li>A man-in-the-middle attack takes advantage of the multihop process used by many types of networks. In this type of attack, an attacker intercepts messages between two parties before transferring them on to their intended destination.</li>
-<li>Web spoofing is a type of man-in-the-middle attack in which the user believes a secure session exists with a particular web server. In reality, the secure connection exists only with the attacker, not the web server. The attacker then establishes a secure connection with the web server, acting as an invisible go-between. The attacker passes traffic between the user and the web server. In this way, the attacker can trick the user into supplying passwords, credit card information, and other private data.</li>
+<li>Web spoofing is a type of man-in-the-middle attack in which the user believes a secure session exists with a particular web server. In reality, the secure connection exists only with the attacker, not the webserver. The attacker then establishes a secure connection with the webserver, acting as an invisible go-between. The attacker passes traffic between the user and the webserver. In this way, the attacker can trick the user into supplying passwords, credit card information, and other private data.</li>
 <li>Further Reading:</li>
 <li><a href="https://owasp.org/www-community/attacks/Man-in-the-middle_attack">https://owasp.org/www-community/attacks/Man-in-the-middle_attack</a></li>
 </ul>
@@ -1646,7 +1648,7 @@ https://capec.mitre.org/data/definitions/16.html</li>
 </ul>
 <h3 id="eavesdropping">Eavesdropping</h3>
 <ul>
-<li>Eavesdropping, or sniffing, occurs when a host sets its network interface on promiscuous mode and copies packets that pass by for later analysis. Promiscuous mode enables a network device to intercept and read each network packet(ofcourse given some conditions) given sec, even if the packet’s address doesn’t match the network device. It is possible to attach hardware and software to monitor and analyze all packets on that segment of the transmission media without alerting any other users. Candidates for eavesdropping include satellite, wireless, mobile, and other transmission methods.</li>
+<li>Eavesdropping, or sniffing, occurs when a host sets its network interface on promiscuous mode and copies packets that pass by for later analysis. Promiscuous mode enables a network device to intercept and read each network packet(of course given some conditions) given sec, even if the packet’s address doesn’t match the network device. It is possible to attach hardware and software to monitor and analyze all packets on that segment of the transmission media without alerting any other users. Candidates for eavesdropping include satellite, wireless, mobile, and other transmission methods.</li>
 </ul>
 <h3 id="social-engineering">Social Engineering</h3>
 <ul>
diff --git a/security/writing_secure_code/index.html b/security/writing_secure_code/index.html
index a043db6..079df7a 100644
--- a/security/writing_secure_code/index.html
+++ b/security/writing_secure_code/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -550,13 +552,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -641,7 +643,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
@@ -883,7 +885,7 @@
         
           <li class="md-nav__item">
   <a href="#avoid-multi-level-nesting" class="md-nav__link">
-    Avoid Multi Level Nesting
+    Avoid Multi-Level Nesting
   </a>
   
 </li>
@@ -1025,7 +1027,7 @@
         
           <li class="md-nav__item">
   <a href="#avoid-multi-level-nesting" class="md-nav__link">
-    Avoid Multi Level Nesting
+    Avoid Multi-Level Nesting
   </a>
   
 </li>
@@ -1111,7 +1113,7 @@
 <p><img alt="image26" src="../images/image26.png" /></p>
 <h2 id="write-simple-code">Write Simple Code</h2>
 <p>Try to keep your code clean and simple.</p>
-<h3 id="avoid-multi-level-nesting">Avoid Multi Level Nesting</h3>
+<h3 id="avoid-multi-level-nesting">Avoid Multi-Level Nesting</h3>
 <ul>
 <li>Multilevel nesting is a common anti-pattern that can lead to simple mistakes. If the error is in the most common code path, it will likely be captured by the unit tests. However, unit tests don’t always check error handling paths in multilevel nested code. The error might result in decreased reliability (for example, if the service crashes when it mishandles an error) or a security vulnerability (like a mishandled authorization check error).</li>
 </ul>
@@ -1136,7 +1138,7 @@
 </ul>
 <h3 id="fuzz-testing">Fuzz Testing</h3>
 <ul>
-<li>Fuzz testing is a technique that complements the previously mentioned testing techniques. Fuzzing involves using a fuzz engine to generate a large number of candidate inputs that are then passed through a fuzz driver to the fuzz target. The fuzzer then analyzes how the system handles the input. Complex inputs handled by all kinds of software are popular targets for fuzzing - for example file parsers, compression algo, network protocol implementation and audio codec.</li>
+<li>Fuzz testing is a technique that complements the previously mentioned testing techniques. Fuzzing involves using a fuzzing engine to generate a large number of candidate inputs that are then passed through a fuzz driver to the fuzz target. The fuzzer then analyzes how the system handles the input. Complex inputs handled by all kinds of software are popular targets for fuzzing - for example, file parsers, compression algorithms, network protocol implementation and audio codec.</li>
 </ul>
 <h3 id="integration-testing">Integration Testing</h3>
 <ul>
diff --git a/sitemap.xml b/sitemap.xml
index d46825d..4cca789 100644
--- a/sitemap.xml
+++ b/sitemap.xml
@@ -1,159 +1,159 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url><url>
      <loc>None</loc>
-     <lastmod>2020-11-23</lastmod>
+     <lastmod>2020-11-25</lastmod>
      <changefreq>daily</changefreq>
     </url>
 </urlset>
\ No newline at end of file
diff --git a/sitemap.xml.gz b/sitemap.xml.gz
index b5e0d8988efc398a4996c003f2c3727e01318451..dc319326960b579c9c2c72ef30e80aa95d28816b 100644
GIT binary patch
literal 214
zcmb2|=HRg6*%#0Bzc{lbH8-(9uOc^x;q6&RzC#KEtQTti9dC%=Qd7&)xVy7tDZ7G5
z^dvE@=CJ(y%&bSUGG+(n+gC2C>}9T;#c*x+tZ8c&9I<#C{d(7|IQ``{{?ao$-6amV
zY?>l_WlMjdRgv9!V`k~IE7TI~N@Pm**EHlS>fdNQwME-_QlG@0Y3c8K9=!a@D|+PO
z_Dx!=l=M&UxuyG9_qNuq@O8%96W(nKEvw-EH+hZhLE&bxsEmcJD8%3XscXe&XxQ(#
Le535400RR6!(3n{

literal 214
zcmb2|=HR$^W_LW(|KiM&)ZD}Zy^7o%hPP)Og_;yZ*dFX%o^XRZYj&1Exo-4TMhTTv
zw}TZ^N`D{OIP=|wWadBb>pyosGv#}d$rSNED{51d(Bm!nYhPzo?Va<<HaA60E|Ed_
zWKdbaWxHc9PyDnw&y!=acvi#D3xyZ{eq!9$x+j5M>+-rY9#%;oqUP;2Zd!ibJVe0#
z{;5?fy7uUN&f4CyJ!kccxSi+jH0?YccJra`5C2VNEdD%E84Fv*P>8SgVcX&o7X4xH
MJy>}0p#TE|0No^NI{*Lx

diff --git a/stylesheets/custom.css b/stylesheets/custom.css
new file mode 100644
index 0000000..7b56339
--- /dev/null
+++ b/stylesheets/custom.css
@@ -0,0 +1 @@
+div.md-content img { border: 4px solid #ddd; padding: 12px; }
\ No newline at end of file
diff --git a/systems_design/availability/index.html b/systems_design/availability/index.html
index 770b7b3..cc62090 100644
--- a/systems_design/availability/index.html
+++ b/systems_design/availability/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -550,13 +552,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -641,7 +643,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
diff --git a/systems_design/conclusion/index.html b/systems_design/conclusion/index.html
index be19a68..92cbf19 100644
--- a/systems_design/conclusion/index.html
+++ b/systems_design/conclusion/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -550,13 +552,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -641,7 +643,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
diff --git a/systems_design/fault-tolerance/index.html b/systems_design/fault-tolerance/index.html
index 3585825..31c5f37 100644
--- a/systems_design/fault-tolerance/index.html
+++ b/systems_design/fault-tolerance/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -550,13 +552,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -641,7 +643,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
diff --git a/systems_design/intro/index.html b/systems_design/intro/index.html
index 81668a4..0c55920 100644
--- a/systems_design/intro/index.html
+++ b/systems_design/intro/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -550,13 +552,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -641,7 +643,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>
 
diff --git a/systems_design/scalability/index.html b/systems_design/scalability/index.html
index f49d553..68924ea 100644
--- a/systems_design/scalability/index.html
+++ b/systems_design/scalability/index.html
@@ -36,6 +36,8 @@
     
     
     
+      <link rel="stylesheet" href="../../stylesheets/custom.css">
+    
     
       
     
@@ -550,13 +552,13 @@
     
     <input class="md-nav__toggle md-toggle" data-md-toggle="nav-4-1" type="checkbox" id="nav-4-1" >
     <label class="md-nav__link" for="nav-4-1">
-      NoSQL Concepts
+      NoSQL
       <span class="md-nav__icon md-icon"></span>
     </label>
-    <nav class="md-nav" aria-label="NoSQL Concepts" data-md-level="2">
+    <nav class="md-nav" aria-label="NoSQL" data-md-level="2">
       <label class="md-nav__title" for="nav-4-1">
         <span class="md-nav__icon md-icon"></span>
-        NoSQL Concepts
+        NoSQL
       </label>
       <ul class="md-nav__list" data-md-scrollfix>
         
@@ -641,7 +643,7 @@
 
   <li class="md-nav__item">
     <a href="../../big_data/evolution/" class="md-nav__link">
-      Evolution and Architecure of Hadoop
+      Evolution and Architecture of Hadoop
     </a>
   </li>