From 451e3fda705dbc1edc6ed424bd3efe24f6f36c48 Mon Sep 17 00:00:00 2001
From: mamo <mamo>
Date: Thu, 5 Dec 2024 16:07:41 +0000
Subject: [PATCH] new configuration version

---
 .../k8s-nai-6ec6739e824c8e56d9633622.yaml     |   2 +-
 .../opt/nevisauth/default/conf/esauth4.xml    | 129 ++++++++++++++++--
 .../nevisauth/default/conf/klp-profiles.conf  |  25 ++++
 .../cossa-token-exchange-authstates.jar       | Bin 39137 -> 47942 bytes
 4 files changed, 140 insertions(+), 16 deletions(-)
 create mode 100644 DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/conf/klp-profiles.conf

diff --git a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/etc/nevis/k8s-nai-6ec6739e824c8e56d9633622.yaml b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/etc/nevis/k8s-nai-6ec6739e824c8e56d9633622.yaml
index 6dc8d94..93fa567 100644
--- a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/etc/nevis/k8s-nai-6ec6739e824c8e56d9633622.yaml
+++ b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/etc/nevis/k8s-nai-6ec6739e824c8e56d9633622.yaml
@@ -45,7 +45,7 @@ spec:
   podDisruptionBudget:
     maxUnavailable: "50%"
   git:
-    tag: "r-1b5958d579b73adfcfdd586254a2dca01961443d"
+    tag: "r-9a15536b90b5e872bd73f728ffb3f053888f4846"
     dir: "DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai"
     credentials: "git-credentials"
   keystores:
diff --git a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/conf/esauth4.xml b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/conf/esauth4.xml
index 19bf395..77f5f63 100644
--- a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/conf/esauth4.xml
+++ b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/conf/esauth4.xml
@@ -54,12 +54,12 @@
         </Domain>
         <!-- source: pattern://b67f81a971e4c08aa79040a2 -->
         <Domain name="cossa_realm" default="false" inactiveInterval="7200" reauthInterval="0" resetAuthenticationCondition="${inargs:cancel}">
-            <Entry method="authenticate" state="cossa_realm_AuthorizationServer"/>
-            <Entry method="authenticate" state="cossa_realm_AuthorizationServer" selector="${request:currentResource:^http[s]?\u003A//[^/]+/token/.*$:true}"/>
+            <Entry method="authenticate" state="cossa_realm_TokenExchangeEndpoint"/>
+            <Entry method="authenticate" state="cossa_realm_TokenExchangeEndpoint" selector="${request:currentResource:^http[s]?\u003A//[^/]+/token/.*$:true}"/>
             <Entry method="logout" state="cossa_realm_AuthorizationServer"/>
             <Entry method="logout" state="cossa_realm_AuthorizationServer" selector="${request:currentResource:^http[s]?\u003A//[^/]+/token/.*$:true}"/>
             <Entry method="stepup" state="cossa_realm_Selector"/>
-            <Entry method="stepup" state="cossa_realm_AuthorizationServer" selector="${request:currentResource:^http[s]?\u003A//[^/]+/token/.*$:true}"/>
+            <Entry method="stepup" state="cossa_realm_TokenExchangeEndpoint" selector="${request:currentResource:^http[s]?\u003A//[^/]+/token/.*$:true}"/>
         </Domain>
         <AuthState name="MockRelam_DispatchMockRequests" class="ch.nevis.esauth.auth.states.standard.ConditionalDispatcherState" final="false">
             <!-- source: pattern://1641a38402138546573b7e71 -->
@@ -127,6 +127,74 @@
                 <Gui name="ContinueResponse"/>
             </Response>
         </AuthState>
+        <AuthState name="cossa_realm_TokenExchangeEndpoint" class="ch.adnovum.cossa.TokenExchangeEndpoint" authLevel="auth.weak" final="false" resumeState="true">
+            <!-- source: pattern://89578db79d2bc15d55e11141 -->
+            <ResultCond name="failed" next="cossa_realm_auth_failed"/>
+            <!-- source: pattern://89578db79d2bc15d55e11141 -->
+            <ResultCond name="invalid_client" next="cossa_realm_auth_failed"/>
+            <!-- source: pattern://89578db79d2bc15d55e11141 -->
+            <ResultCond name="invalid_grant" next="cossa_realm_auth_failed"/>
+            <!-- source: pattern://89578db79d2bc15d55e11141 -->
+            <ResultCond name="invalid_request" next="cossa_realm_auth_failed"/>
+            <!-- source: pattern://89578db79d2bc15d55e11141 -->
+            <ResultCond name="invalid_scope" next="cossa_realm_auth_failed"/>
+            <!-- source: pattern://89578db79d2bc15d55e11141 -->
+            <ResultCond name="ok" next="cossa_realm_IdTokenVerification"/>
+            <!-- source: pattern://89578db79d2bc15d55e11141 -->
+            <ResultCond name="refresh_token" next="cossa_realm_RewriteRequestForAuthorizationServerAuthstate"/>
+            <!-- source: pattern://89578db79d2bc15d55e11141 -->
+            <ResultCond name="unauthorized_client" next="cossa_realm_auth_failed"/>
+            <!-- source: pattern://89578db79d2bc15d55e11141 -->
+            <ResultCond name="unsupported_grant_type" next="cossa_realm_auth_failed"/>
+            <!-- source: pattern://89578db79d2bc15d55e11141 -->
+            <Response value="AUTH_CONTINUE">
+                <!-- source: pattern://89578db79d2bc15d55e11141 -->
+                <Gui name="Default"/>
+            </Response>
+            <propertyRef name="cossa_realm_AuthorizationServer"/>
+        </AuthState>
+        <AuthState name="cossa_realm_auth_failed" class="ch.nevis.esauth.auth.states.standard.AuthError" final="false">
+            <!-- source: pattern://72e29eb80a951e518ce123e4 -->
+            <Response value="AUTH_ERROR">
+                <!-- source: pattern://72e29eb80a951e518ce123e4 -->
+                <Gui name="Error">
+                    <!-- source: pattern://72e29eb80a951e518ce123e4 -->
+                    <GuiElem name="info" type="error" label="error_99"/>
+                    <!-- source: pattern://72e29eb80a951e518ce123e4 -->
+                    <GuiElem name="submit" type="button" label="continue.button.label"/>
+                </Gui>
+            </Response>
+        </AuthState>
+        <AuthState name="cossa_realm_IdTokenVerification" class="ch.adnovum.cossa.IdTokenVerification" final="false" resumeState="false">
+            <!-- source: pattern://a976546c6a56dc04c0d34592 -->
+            <ResultCond name="failed" next="cossa_realm_auth_failed"/>
+            <!-- source: pattern://a976546c6a56dc04c0d34592 -->
+            <ResultCond name="invalid_grant" next="cossa_realm_auth_failed"/>
+            <!-- source: pattern://a976546c6a56dc04c0d34592 -->
+            <ResultCond name="ok" next="cossa_realm_klpscope"/>
+            <!-- source: pattern://a976546c6a56dc04c0d34592 -->
+            <Response value="AUTH_CONTINUE">
+                <!-- source: pattern://a976546c6a56dc04c0d34592 -->
+                <Gui name="Default"/>
+            </Response>
+            <!-- source: pattern://a976546c6a56dc04c0d34592 -->
+            <property name="well_known_url" value="https://login.sandbox.pre.swissid.ch/idp/oauth2/.well-known/openid-configuration"/>
+            <!-- source: pattern://a976546c6a56dc04c0d34592 -->
+            <property name="httpclient.tls.trustAll" value="true"/>
+        </AuthState>
+        <AuthState name="cossa_realm_RewriteRequestForAuthorizationServerAuthstate" class="ch.nevis.esauth.auth.states.standard.TransformAttributes" final="false">
+            <!-- source: pattern://b6cbd53b8eee023b6d65f62d -->
+            <ResultCond name="ok" next="cossa_realm_AuthorizationServer"/>
+            <!-- source: pattern://b6cbd53b8eee023b6d65f62d -->
+            <Response value="AUTH_ERROR">
+                <!-- source: pattern://b6cbd53b8eee023b6d65f62d -->
+                <Arg name="ch.nevis.isiweb4.response.status" value="403"/>
+            </Response>
+            <!-- source: pattern://b6cbd53b8eee023b6d65f62d -->
+            <property name="inargs:grant_type" value="refresh_token"/>
+            <!-- source: pattern://b6cbd53b8eee023b6d65f62d -->
+            <property name="inargs:refresh_token" value="${inargs:subject_token}"/>
+        </AuthState>
         <AuthState name="cossa_realm_AuthorizationServer" class="ch.nevis.esauth.auth.states.oauth2.AuthorizationServer" final="false" resumeState="true">
             <!-- source: pattern://e02a36447ce2d3c66d8d81c0 -->
             <ResultCond name="authenticate:valid-authorization-request" next="cossa_realm_New_Test_Login"/>
@@ -221,6 +289,16 @@
             <!-- source: pattern://e02a36447ce2d3c66d8d81c0 -->
             <property name="scope.phone.clientCredentialsFlowPolicy" value="true"/>
         </AuthState>
+        <AuthState name="cossa_realm_klpscope" class="ch.adnovum.cossa.KLPScopeToProfileBinding" final="false" resumeState="true">
+            <!-- source: pattern://9c293034211ea47bd3e9c12b -->
+            <ResultCond name="default" next="cossa_realm_CallPolicyVerificationAPI"/>
+            <!-- source: pattern://9c293034211ea47bd3e9c12b -->
+            <Response value="AUTH_CONTINUE"/>
+            <!-- source: pattern://9c293034211ea47bd3e9c12b -->
+            <property name="prioritiesSource" value="klp-profiles.conf"/>
+            <!-- source: pattern://9c293034211ea47bd3e9c12b -->
+            <property name="profileExpression" value="oauth2.scope.${notes:scope}.metadata.klp_profile"/>
+        </AuthState>
         <AuthState name="cossa_realm_New_Test_Login" class="ch.nevis.esauth.auth.states.scripting.ScriptState" final="false">
             <!-- source: pattern://635e4d617af6818edc9ae7c9 -->
             <ResultCond name="ok" next="cossa_realm_Prepare_Done" authLevel="1"/>
@@ -243,18 +321,6 @@
             <!-- source: pattern://635e4d617af6818edc9ae7c9 -->
             <property name="script" value="file:///var/opt/nevisauth/default/conf/new_test_login.groovy"/>
         </AuthState>
-        <AuthState name="cossa_realm_auth_failed" class="ch.nevis.esauth.auth.states.standard.AuthError" final="false">
-            <!-- source: pattern://72e29eb80a951e518ce123e4 -->
-            <Response value="AUTH_ERROR">
-                <!-- source: pattern://72e29eb80a951e518ce123e4 -->
-                <Gui name="Error">
-                    <!-- source: pattern://72e29eb80a951e518ce123e4 -->
-                    <GuiElem name="info" type="error" label="error_99"/>
-                    <!-- source: pattern://72e29eb80a951e518ce123e4 -->
-                    <GuiElem name="submit" type="button" label="continue.button.label"/>
-                </Gui>
-            </Response>
-        </AuthState>
         <AuthState name="cossa_realm_JwtToken" class="ch.nevis.esauth.auth.states.jwt.JWTToken" final="false" resumeState="true">
             <!-- source: pattern://a1e5d0192e082e689465a0c9 -->
             <ResultCond name="ok" next="cossa_realm_Prepare_Done"/>
@@ -273,6 +339,27 @@
             <!-- source: pattern://a1e5d0192e082e689465a0c9 -->
             <property name="keyobjectref" value="tokensigner"/>
         </AuthState>
+        <AuthState name="cossa_realm_CallPolicyVerificationAPI" class="ch.adnovum.cossa.CallPolicyVerificationAPI" final="false" resumeState="false">
+            <!-- source: pattern://5daa6d4f525b11a4e9b0ea79 -->
+            <ResultCond name="multiple_profiles" next="cossa_realm_Authentication_Failed"/>
+            <!-- source: pattern://5daa6d4f525b11a4e9b0ea79 -->
+            <ResultCond name="no_valid_profile" next="cossa_realm_Authentication_Failed"/>
+            <!-- source: pattern://5daa6d4f525b11a4e9b0ea79 -->
+            <ResultCond name="ok" next="cossa_realm_Prepare_Done"/>
+            <!-- source: pattern://5daa6d4f525b11a4e9b0ea79 -->
+            <Response value="AUTH_CONTINUE">
+                <!-- source: pattern://5daa6d4f525b11a4e9b0ea79 -->
+                <Gui name="Default"/>
+            </Response>
+            <!-- source: pattern://5daa6d4f525b11a4e9b0ea79 -->
+            <property name="evaluatePoliciesForAllProfiles" value="false"/>
+            <!-- source: pattern://5daa6d4f525b11a4e9b0ea79 -->
+            <property name="klpURL" value="https://klp.agov-w.azure.adnovum.net/api/endpoint"/>
+            <!-- source: pattern://5daa6d4f525b11a4e9b0ea79 -->
+            <property name="basicAuthUsername" value="testbasicauth"/>
+            <!-- source: pattern://5daa6d4f525b11a4e9b0ea79 -->
+            <property name="basicAuthPassword" value="testtesttest"/>
+        </AuthState>
         <AuthState name="cossa_realm_Prepare_Done" class="ch.nevis.esauth.auth.states.scripting.ScriptState" final="false">
             <!-- source: pattern://b67f81a971e4c08aa79040a2 -->
             <ResultCond name="default" next="cossa_realm_Auth_Done"/>
@@ -284,6 +371,18 @@
             <!-- source: pattern://b67f81a971e4c08aa79040a2 -->
             <property name="script" value="file:///var/opt/nevisauth/default/conf/prepare_done.groovy"/>
         </AuthState>
+        <AuthState name="cossa_realm_Authentication_Failed" class="ch.nevis.esauth.auth.states.standard.AuthError" final="false">
+            <!-- source: pattern://5daa6d4f525b11a4e9b0ea79 -->
+            <Response value="AUTH_ERROR">
+                <!-- source: pattern://5daa6d4f525b11a4e9b0ea79 -->
+                <Gui name="Error">
+                    <!-- source: pattern://5daa6d4f525b11a4e9b0ea79 -->
+                    <GuiElem name="info" type="error" label="error_99"/>
+                    <!-- source: pattern://5daa6d4f525b11a4e9b0ea79 -->
+                    <GuiElem name="submit" type="button" label="continue.button.label"/>
+                </Gui>
+            </Response>
+        </AuthState>
         <AuthState name="cossa_realm_Auth_Done" class="ch.nevis.esauth.auth.states.standard.AuthDone" final="false">
             <!-- source: pattern://b67f81a971e4c08aa79040a2 -->
             <Response value="AUTH_DONE">
diff --git a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/conf/klp-profiles.conf b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/conf/klp-profiles.conf
new file mode 100644
index 0000000..c9c07b9
--- /dev/null
+++ b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/conf/klp-profiles.conf
@@ -0,0 +1,25 @@
+suisseid_auth_address_verified
+suisseid_auth_address_required
+suisseid_auth_mobile_verified
+suisseid_auth_mobile_required
+suisseid_auth_phone_required
+suisseid_auth
+password_auth_address_verified
+password_auth_address_required
+password_auth_mobile_verified
+password_auth_mobile_required
+password_auth_phone_required
+password_auth
+email_auth_address_verified
+email_auth_address_required
+email_auth_mobile_verified
+email_auth_mobile_required
+email_auth_phone_required
+email_auth
+autologin_auth_address_verified
+autologin_auth_address_required
+autologin_auth_mobile_verified
+autologin_auth_mobile_required
+autologin_auth_phone_required
+autologin_auth
+default
\ No newline at end of file
diff --git a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/plugin/cossa-token-exchange-authstates.jar b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/plugin/cossa-token-exchange-authstates.jar
index 6ab90a29a67d20a82fa5c4b51f3aa61cbcab9e56..f54309f0284acc9f489425220e60409ad4157fa2 100644
GIT binary patch
delta 14394
zcmb8W1$Z1yk03l|W{%m8nVFf{F>}n!%o8&+bIi;PF=Nb(F*7^nn9hE`{r~;4&+Xn_
zPfu$~U6QI)kEUBvX{#1=@D3DSQ3ebg9RPra25^VQ!Bc>7hX%#5OOtVh25AD`573Xx
z`vLa;H8N)a1N>)yuF$wbD$sYTDF#rk&;$?=mUmFk4pIU70e8W+AU@y_%rMvoj6)Fn
z2dY{!{)6u^j|cg{FCl9{yfdk1#yo}lfJ7u+ARlmx6a?x6?oyNgb3eq60qmm<&)AFi
z0jFg1{<-h0LiZ0oU!4{51HY`h4~zId2~B}<Z$wpS000R!!N3wL;af69!et_ILT4&M
z!a#@x$ZS1Bs0=u;V81F7%}OF9M2-VA%65#kGztx2G-F8J*H2k3P=drYsDzc}PWX%X
zjRvV547@tWE2np#Zj6BOgLcf!6Wenjnj(hlmNPCvmvhblPEw`xLprKiH3}tlU|&i1
z`6+i|fj#~(R{jWAoD;RJUbL3wQ1tE3otl*tuu;vSE4~dN+bGs&iQoRstsq?rn@A7&
z!2+c)CzGI1>rT^kSQae5S@GJo*F9`px<vhRr>}*=JHRxDG)oen7WaNWq0hH|6?<O3
zEhS-Qvc`<yLPgNLL!>CkyzyasTI0wzS%H9YA2YRr#HZ&&u&cf0Ko1QjbDjT_Cu>9*
zi5Sh}lBsP4<g9f<4(`VCSnNJYahEGYN<Pf~`sMkJ`C{UGGL62>F}<boMc&b|E^8OU
zi@g4U>MMmigzMCAv<FyqPs*6;ZL1F0TQ*@BlM}**!aISiW2p_Xx?)!xg*p8^Hyj&K
zyYHlpffH_12(<alkUx%HafU4Iap}-5ws+^(+lQaefQWMJ-Q8bqrZXKkiNf&VOF?Xw
z`lZ}??!KdWQPsyNopBC!Lt)oAo^u{k&H7dE;Lh=jkK1i)>y#>tPZ>1+Vedo(clfk1
zaDVu0rE|?QH$Sx)xagrgv`F#z#BT&=kLqP!;Aba}Bk|kW6NeBPekY(&vM|M--Umrx
zL)??(1qexgvDMdH%cfimF0i8292qlD;$3ZaJfGK?EwliY+O&lV#@)>jf70^;cw6N>
zC_e!><yR3y;{-!Equks6#22Cwu@ebju{g$Um>T5>DfI#`ez5(vSl<zi9EhRcmex+V
z84_vB;fj(<2+<um_|I7dx(_(6wraWgiU}0X3dTg>VT1n-5*U2)COldaOjvID$0Aad
zq_^zit-C0@Q_qmk?m+$Uc9S1}PS4C<j%CI<QjT!1+k5_c*R~hAQ2t6vz-3a=>zhVa
z(K^u%Vcr7K7aS6KGb0_X_fu_a25aZzbQ7Rome^6s@8r*WZNa)7azCa!<P!qIkip5M
zKJvg~&5S&fp?@7xJ~HOgz>}u<RnQeUKqH+l*vUBEC;vw@>bPLH*ehVW9nGjF1OndF
z3)g8e%&Gr?SKj`DWz8qDuQi-);Fm%yly7hj6iW0EO7sp^WW)jN#v5u^IEk^^TNG0i
z>58<1&UXFRp|xogeNa|1?ei_+db_+Gc|quE@y}r7-;>8HLw7kIY|N3nb}kqqg-{~8
zGu(0ArvC{1=fBQ}X=l*r;X@z+0DU9?fIxx}CVIkp3O%q<3(g&V(d9KpuYLtTwqvO~
zJ!CO8gg`Q4ypIS6PfA?e6atiwQ9nSUoz!CLe1e&U1{r&Z-PLfX<BT`6!6p6AG`oeB
z4k@u@<Z6-JNt;CmzhSf7SBs1$i{s8&iBFE_S<Ca%D;TIRKPkr7TAeOh4_@yx-!fUY
zD+%>H!McI2+{NDm?VYSC^9GdnCCPEZ(wZv8R>l&~%&CUd6vaz29`$5Cw~Ym&;GWIW
z8FhzRL>m-owQ)a}e9P-D&O`MTzGbozjriO!r*CZc#>BUeOnuI*6kH#msHMDGEJ!vt
zG-hlpSdagUJ55$J+M?EARaR^}J^vQBw1uNyS*951G8zL&lvc^r>Or9P*AQJ|ce_=)
zSd1}qUR^FM+=lr@Qev8IFD&9r(8l_t8Iz$xJBW(8oBHD^->Wj4c$8O2LlrG+&9m7E
zr?h8ZtC^;d2ZdmT))hs`fhC!VvM<cJI*Eujlgl(HJgFsUlh85KS-W>iIdVIg(vG_@
z2HO=V+T0k)f<D42PC^pgzZ)Bx%udqo$fB{RT`S#VL#<|nV9;oR@Ee(qy@17Z<a18*
zoJ)SOHG@n&Ot?X_<2|E+=4<duFl)IsQCj%Xcw-291?il;dWmX8Jq`kP0FF#=*R`>%
zLPRi9V_-%bZ32_CcwhO#QhBdbUz3L>;V}%5<`#u6ZW>RQAUAjQtZ2R$$}$a1T)6qg
zTrl51G#sJDCp@gR42>E}mZp>|nt-CBoC`0@HgGv%SO8C8!7#sOMXo|Sx9{ZI2<}{^
zMs<Ll6~#6cZ^kkmMpvd5rGRa8!6^n}4-eJMGbP;9RbYyk@Z41MCEcc93%gNIyIBdS
zrF5T5*3~Xke}-0sfrYtPv`uhoTy1hQ-a>$NAvelNCbV8?<zO(Z4M(dxM{?aB=z3qa
z6ojZJU>8)exj9A!aw@JOR2<H?G#aYF0q!xa93U<o1N|i%sZI>(SiX4z%C0DI2(K)Q
z)pGSL`V>WB9ebe?{Ym9if}>ud7Y`k{0?pHe29^;mmbbr2#8Zg$qvDZ(<unW$DK$-{
zgXtSs%hw(ujF5g5b%h)WN}gOzDhMRxPt}b9wjq@)W|O{ngW`nIsL7IlES$#-_zH6(
z5tt-B^RtfbMMS#%Q^Pr(dw=5u?wu*R;}h#!fzke|W$j7fv8wX>nHfDF(nE3#v|t*A
z3b2>yNjY-vHBul<g|NktT$?^rk~LCtW9^BI8q<@Qt@4751<yAxlicAn7^rBgAF6?A
z;H)qL4jLFQU>1*;wj0=LDN7o>7^maw#CRD`qo~KCcx51RTH!6@pZ%7dMuMUUyw3TI
zmzHoacFM&{5pr_9g-$$^bfka{yhC;iqEip5F$&f!9lYF%Oj`2&Gxp~c&Q^dj^4<W$
z>=HVcx9Z;Pfw6hKs(8p5qNQ3Pb~vA!pl|0C3akwcH(qkd0uj_3GNZ6(98x`(^vfkU
zv5t2hjc(utQpp2RwqbHps?wj-Bad+&vkh5o|3|x@W$UKioI`PDT?DgHKoq`-*w)cN
zC|Z`Ip0u;k?FVANoe(koR5)MI%KC?r@R+R~@Eo&UYoDG^3ivo~`H=aj-SzJBJrt_m
zusQpR{I_gS9;;h)6k@dFIVX3p7!M10yB((<7&!w6sd0Ex30qWsP|T&NmqU^%g+oDh
z#~qh3I~3?0-?y(Hq+G8_fOVQ+YU?OEDQww>s1YX=3xB9E7+^W6@sv+xPoGRMsyB;G
zdTUtHT*Xa1hkDM;miv|VzaSopd&iS>2IeSVUQ_!DDLRZd?uae0(%AgkDwgfN+TtZv
zi3On@Z2*UR$qQd}@S_^c7G_%Hyyum`XBcEM49a)-6|EVZG9_!z3EYn*ZN|B4!ZA$~
z7e2wl^~Fq4^~U+S#nKq1+$LJw7ea$q8sC9Snl)8_xWxaAie^)6abysJ1)o91M>CV1
zxO~`G&G;4b^Vw-CZ(Ns_F+)>!>dzG6#p==rmuE<tkzLxl)M(J`;!O^-Emeg~Lc6VI
z6>t2makG>OdZCuuA|O%e8+~p+p4z2X#~Y4A9~_Q{<}M-Qp^Ygy3R1Cbh)>SIA*m<(
zc|^&xT+h*kJqXKF+GwUOV1br8UVwx){sNw5rk2C*hX66HjhT6xd1?ijLz`$HuG(dB
z#dyK+OIo7Q=i82D;6!$JO}}&6VQ?YJ<5kK-lYf`e)#5`2C@@=*w%CkCI>Y}{x~1iT
z4z&C3uXHBV%#m8sH@a8(o{jPc`d7c2y+8dmamJ#*>dH+mw;X?2!brY;8Sr|b*vBF;
zgQj2R9kMx3+@TPIxMZMy#dsTZ_UUED(-qIa<k6;(9bpeofdqMm>a5-rP<_UF&9Hy!
zU^CE)Orw&(v<2Q{j@j>baple-sXR0I4pRwr9qx9x=rO{;>AUuOi3a+mKaO>r&)$Ba
zVp!hypPph#U+__xh>lA!6OVT2p;J*-`Td1VyC+uNbBvDVN#GEZh&EM84u%brakwG2
z#^JSU0q?tIn^5j|>4-yd`KNuZucB~#15mg*t4F&@PuIZd`KYRjQ$wx1DWxP~|7wmg
zbpWAt7Y^ZgTS`vyv}2H3NkhEtNb-@Ac)96`Hhb&dhP<Z1?=AYA_}vx}H7`3ZDv~zU
zLe;!e-T1j+mnNd7WUyeC#3v<Hsd9@bVJlTF2{t@I9d1L!1IZz=*1o&k!tHbnJEt73
z5SoiK3jttTk_QjBQ4L2ZSApNLN?Gx3=1Xm7Wq$PVtJ(s3j*?f)yh0TE7xMt==2?6^
zws4!s1kvXHbEf*thL(MMD-cB3yg+ss@MxNbptuPNZ2_A>@t~$!t=4mSI%0nRLkC|0
zoWPQ_^3mwTjH1vqjR-qb`N`Fes%lZ{MAO=+W+osYu#ED+%Zqu$_t!B>tp?^j6Ww&N
zX0ZDm_h=?@0Md64(<tV}7~e?0V_(}*!_IGVr0i>@g?pc18?he18F`4T$G8$T+aW|8
zOEYor$H7~MCF1tE;BTH)^^2F5h5sa5d6OX<v8+=pDOEi#Bmb66@ev%Q;Aa4?TAhu2
z=4=D1?>RPG$K;@l*<37GVMb;ujlfhLC!lb~F3M=IMc~=ZMpibgSLqO|@%?}&MILRl
zAt#t+ktFa?ZV)UQdKt|hQ04+DO#1alHk;11W{gnHw%El<z_ci^)VEt`_BtqPw#irh
z%QJ6Fx?4?)y|ZibCh=$oAB!q>Q;$_+0p|d4f%gPa9L=<D121}QG$?Rj&oHz2p?y3O
zV|EoGcj;$d=Mv?DDdinBFp<jIrQCvB$H?+XK8udgR$X<9NdQ4vIJZEWig}rlT%k`g
z${qwQ%yQ(lWss!-gl<0-lOoK|_;q&mam1fvM7O&T#LH!lHH778*~0RtsNeJL59btM
zrjPB}STpE=t-N+d`O!l|^~kdIt)eQ|vW{t7zS1B~_fuei$}CLp@pg`59cB+IwfUSv
z@nM57l2c$V3$I-;H9f2ClFg*ybJ`m)^2gTVL$Clo1L2Px&FFMaKkrCl3yhrUzRbNc
ze5xjmM>Z+Nq241Pf>K9I#S~PFUiK_-9o>@}*DV5Z4{rfKlCew?<U1bOb`19#H3|^0
z?WOokC&RyJ)ZTF+47D+ED7`YV1%wh@{XU%S<g!Cq-5%N9<3QW;Ey%^?WXOI8g0`}}
z>)Rdz7K$%H?x=<rqlWSwh6)}n!h%bT!3*bki_(xC$5%n8l8WvU{N*pXzd`MQ8z~7W
z)M#K@4BuaPt(2wRu3g|TFI@<KPK~s$#S|V6!rth!c}@p{nGd|QAVFOrW9^H$17bFz
zvj@L;5>Bpcori0cU~F%2g&~e~vJd8p-pxCet2CYOtEE{t+LvdZZ{5Kr>g@$lqpMIg
zC<}?4Luu6epYIWy&^prfwM1|Obp&N%x+&(0z-|lCTB^alK6M6@Rp-(yvG{eO>I`lL
z^kh5mx)&0=?~)K$Qd>bIhI)C3*h{X_eDWV6kEIk!m_cq>OTJ*v42X<nP|>^R2Gd1R
z8f2PLq3VxzoSaeI1D8+9rB~q!zUO#swK5nc<mCyb*yvv_`i6b)Ov&g6G?PYwjoczd
zdjQ`;<p-199Fl(c4N>(xAIt5R0zFCE!T-R5_FxF}$-g>$!K!fW6P#XR<#l$TOeXh_
z(6-wi4o8uVVFaI9s~5-N3wcXuU)2dCMc+zryX{J*4!VsBq}S-oH`s-<xXowZKF-(6
z@YUCyj=P+ZI}a7+(~Bv5-~;4(A;k7Xqlzeh#4EnL`rWneU4+>*kg${N>5=|vz$vYv
zZZaH9G%|*6qOm-B09(JBSuwz9>6?MIm_Hp|7^M;~H3IIC!zaw_t%c&ao>A-`EC<kP
z1N5(hRNhG&zW7Kx_?cUcgadAu*z0{eI>$MMO1wgFm!IkSl^YNhfXd*6M&pyy;=Fz7
zzM;2|j8=CjD^W2@g#7e$k8mZyF*31FEzRg`1&S&w$B;UO@&@G<TlW@7&D0u`7t?yS
zR265<r4icv3y(G{5>GhIv+h}Kt&@{&U6Oor5dbTn;6H}|l?7tK`&pqQuRNDf?RJxs
znoAV!*jqANK0zc{;MeU16z-qFZ^&-tYdg}j8tIogwv+;b8bZIR=?(oZNlw)+$<BxG
z$sTuxPc$JWK{Kkh*%SAJ1JJz#a4&veG=p+g^Ni6yWA{=2KxA;pu|M*`y29!uCcn%=
z)w}WPMLQn4oJ4zYGuVF<@ov@f7gMPV{YhSumzdG3yJF(y4^){b&>Q*<Q?|Y3jJBoP
zlQ|>5AU*08UHkI6AL{Ye`;Yc=P*Z(hLp{dX;K5YT!EPFzYtl&VB)_<|KuV_O-o_qF
z3lvYQ1m(u)L-<v0gtL?G3mGg}^|XzV3XeEK%7f1DL=DQLV+hmKNf!Lh*k%n$C2V6E
zMQn!)L)xoLDd2UT;r{k$!=wHS=dVZ0Vxn!axdz|N^EQ&O=^+Dya)}@3+zeOAUrklN
z#+?MdYgWQb;C2)P>!7I_djo^!r${xxg|dMy24CuV5<wvbpH`$om5**MbMkD8!2}NM
zBC)*e+}({Xyp={#N0LH!;?s8_oONl7&<mMI+e^E2T82-#3A}eG9zKZ#2hAMUe^j6E
zXxmjt>GCPuClzL(jw}Lw!T;TjuD|sQgFyLkr>%Ui-@xAkd>|12;Z6f(WEGW-?Cecc
z>=YgCOf9TUge`21Eo{v`E16i^8GQUwFtju=a;7)3HgIyvQkGGeQ$&9~mra{U<R&6g
zNa~@8jJfj51MLiD!0YA=g=wE@70hi|a#d9O1O&rH+gXUhMHAZT?XMIV3HtMERC2Dr
zKb8DG(`%Az<8dPYE3nh&8C)M-ovt93-C)UFQ2e{ch^CWtCmL;H(SCA42DGtwN4E?;
zT)`8RspBw-S#RAmwDx9RyM|+#P>Y&2RjUCWPhtC>7Y2t;((Kj`%FKIjk6&<QdNuZk
zoi`#97CbEu8WB2Fu?!~#dKzs~Zw7E4tZC*=wYYR$Ol1{AVL%;}rL%=RNyw3gW)ceC
zjeA2mTb($o`dX+nP_B)zgj%s9dN^pCqlW21T1^wGgb2^m+FEtK{R7g+5^^v%-64&o
z7(FxyT%YiO7aAcwj9yWV+kHOG#!$zpL1H{ibNGUa!PO*7>H43ZbK+gcl^9Y(_lu(|
zOEYg?^E+THpuj;54KiQlWw>2q8xwi)*@?`bOG=2kLpcs43cpTb#Oq3^3F+VNk%J+|
zJn0H>rSifwErlLZi|e~Tw^N7h&?|73-xe%HQB>*3bufm?!NWAXR%}nqMF-VK9rM*t
zdk(Mqtlo3zQD8t*uu$#nx?)q1i$g%Zw$jS)$|Db(M*<uB%R-9;j#**xM8e_hE_Xc5
zE6eFyhZAiqk#6vx(IANw3z~u(e5uekM9>Gw$F`YVyt}L98ZezQ4k<C&r(cr!sql7M
z3CSm)BGW|?G0uOpvhWLXm`+86a8^x)mQA2>!kEiBAZsbpDy@;9D`)kY8JbWr6iB4r
zY2`j3RstP|%{fY(?K*@B3tNMHL~y9_&(fk&7^4;$XGp`ftR`^>i`bgMKAB}dzzyri
zt?@b=hVgVp&R#kY`0aBHBi_Whgy}F-J7rmf6BHkgJZ{4a46rIho0Z~3f*Q?i;4J8q
z(7*>|wNrQI`N0AK!CA8in1M&6=D}NK-P+z?29#F^=<wWo&TY4bSMg^&epM7(pRhC?
zwUW2|qHUMAQhW*@{JJ^YQu3(RTa!%MB5N_7T<AMc<NI&H@ejKqsFO|yfdl}a-~a&e
zk1*B$g<UB+TG%;SI9r%F$r;%H%e)HJwB68D(O=~=oZ}g%lq89XP-_HHrSrdGq$}kH
ztq6O@B@@w=%%%~ixpJeKk|*VnQ0pn8iz>R$7lw}FQU`5o>GD6xJj4Cb2mUgPPi~M(
zDnuH|tiMRPICb)UI(cRN#@B)(2tf_uF6#bephkP5pKO3}$jQiIxxt3YmvVWLAw$!p
z`?P*6A-$@}A~+A{=ucmnt+e+%4{zR2L=n{pQ*(J55u49kBvCRB<B@K$!rS_+dm%`^
zARs6*M9ilzNVb1y#~WBBl!0fqRHMjan0IC>h2Liimv(tCcn-`xdBq&k)JOy;Qo>5a
z5duPnh81zbia1-<`eEe}HOdN3(4-vqB#>P|)xtEQkVS5CMaarW*3GclKg-eJr_{w~
ze%WbDlShjIx<&UVG$>d0qgD)%f-Z!)qo3d`yhZT#F^{iTBOc5^!2>Nc)G;_-g+Oqz
zEip}T1+inUY!{U4;^?#YO|4OoQBcIJ)r3-pCEfzhN{rw~_cBdNgIT^umHtYvvT8cn
zB(l>A2(>XczC4OQyZp__m~zz;N>P*5W}Cq!qeeCOD2Jp^k&Qm}d7J9g5IG{PU@z4t
zKEa?QLiE}b^2(iQCli=`nVZ(*W&GV}wF;nBBOzEGT3nlAaGTkX8Aq$_vVHc*5MV#k
z;90=LyrChe&o4KW7fv4jOgmMeu{uSs-xUgWsIS2!Kt#Z#D*8E;^2wR66vw-rLy7);
zz(+K~K5foAL~tsM9t27ZPdNT3M~)oEBHny_Nxqnv<FYOUw<hpVsQMc}%A_Oqd~&#=
z9CQ4y{A|}2>#k4`JYo%OQGE?AtNBW$S9A(+ysQ|MW_NzP{A>jLW?Xq|1fn2flpzOy
zZeueS-^`}O@_R+9sDNt-6b50EKq**1Dr~AKVr~tYJ}J!HZ=S7|vY%8}<wTM*^V1V@
zlg=cAMd+6BsQ7><(@Mq94TWOH-@kOj3W&q4O+aQEUfx?-h&Vc8a;@ta{wP!_WfQu!
z=D>)r-XA_3i9#q}00<O$W2V&=6n~c4c><l@F@6BCl6l?0k<3oXYM4{znvbPeVJYL4
zb~^30&>ZLfgdz2f1<u6ZNc{pYM0i*_nT3NoVwN~tUNaV$YdtM{d+af`NZZet1#9vy
zFd%T@QB%R#jHUYP_fAQ!lsleyUTK&%OHjRH)}Q)e;zC+3f28gFUR+U{B5He(sYLWX
zhYNP`EdJiH{AE~avD@aX=B2WF#QIoUX~7~l<Vs7mTFH&0Tw7j#sRy{&$@_-HSs+j#
z%zIgav$GE@(X!8!@CfPeOV@AFgP-x&UpFr{resY#PAK9^A0?M&(U6UE%a43eOcT+t
z%*(18_Dz>&&0=7&=8aeVETP&fhUL)mEuE1qmun1~KsPv7>&)3>2~TjIEGD?^_Y$Uk
zl)<cs3B#sxu*92YVz9bi>V8a&9xost=ovoc7U&AZzzz!Oyn)PXlrI-ragvs^wtAq~
zi2UV;oY6nCT6Kf{ve@=4Q{WIst6Ow1Ai)@lDo(Z-5JtOMb(sBGz}p2js=#J?MFc%#
z;f9jReN70Revgb}l&}S+WlN7N$g0YNi9v<&tvfM9!1#C3k{B$pU?z=#;U4+|W5cum
zW$h>69zDD3(7C}ZzID_~<ilszx%1ADe!kO_Wp)V9HdZg;Y$|7#H9?xM_@)mSrKWbn
z+D~hrAv4N_RcGadO%fOm;b3zNR7<E2SJzMNpdTr&o~N(*U7hytGgxM8A<Gt4a5bb}
zN8;=W`?}HP)i#@O879kNWRBjP9<Ct7Uda}Ko8*QM;q(LAk~>yEZ!z(_15z&O^m^Pl
zLoQ0Y1zOq63-gMJi9#G^E=0kkqLk&-HfiORgQ$m<KA~~$G;K@gs`=`4j~Yj8sjke&
zsp$DS%fHf&bcuI-?qHc?sRj_DA!ANaP2Gm!cuGAUOoJDIXOd>3*~x`H=af8v<>nFS
zGIjWIz@0@;HfF%y^y##h>ufuxsU0|YX3PHAt6CrAIp+v<J31j<hP!DO6$2emI&!RX
ze<0-uje$W_zk;bEz2W%xH@G0pR&c4FmG=~F%ln%f)BpU0Vfv4UiHf$uoFMuuq#CSM
zD|9FctXPVR+ZWhyb#xeT2)dM-!2Y3JeAkG=`ZU)cKmHhbFMJo3yU``=cqQ0LtMf-H
z!Om!y<#L*E>vT%HetkM=22>g4!MK!g#4<Yo5a0uVw#)l^lo#q8*6QLY%@>>zV(M!B
zbvi1J<4FAlgr2?{KO-4g`%MIX!Y8EF+qKuSewsEWve_n*4Q_Jr%~=IOlDX?WZnHP?
z|FIw9%R8Z%Gg{4>3sDKVB8w-?BjURejUBC?$dE+%M3TOfM1~?+h2-0owkB{i7Jao{
z9g8jlq(H<yWOfi8V!rD7hTblX2=C0|{JHe1kguKbWeOu{DJ554A|`ByQ|QP6)0XLm
zM=8l#Z_8G5$&WS(TBSPwq)CJ)ckt8nkiD%IRVgiwR;{P;zzm6mj;C7GVujhu*n$yg
z4X8jkQXU}%LMC%u4?tw&>oa4)v%MTMy5oc`@JmGPjOv?MosQaXkgo{+8omSF7QtyR
z#Wo5@@{TjZB-Kx4-HeG(A=z`H6O0WP@j7L}x%-kra#AtLYC}i^-Y!O}C3|N9t`cp$
z8e2aXpVAo%tHJx0frpiGOw@&C!SIm)L>@1dEY|c0Cbx?(F>`o@5p`uc4zr6HXkB20
zz!`l}Uv6hGoH%{?ev_lL7TDe~aVB+#IM`!Vu&pl!;P=UUu6F0FkU<GQe@#>~vQ9)$
zX2+rE5;(EL2c^Thqr)g2{?Qe<e{D6aF@I(CCx_P1&d3&GO+G#>{1ksf`w}&)Co>b&
zgQXuthdqg!Mf`_77V#2<-KV{&kueg52>8eoo2h)#S7E>><dc^~XYFs3_ejQ_oj2qW
zZFKe{pjv-^2cgdGb_>(-BAe{cf^~;-*#bC(>PskfmsF5*Nbf7o(WwvEaOG^6qUDU4
z?q}CFa`Mvyb8&)<CJ=(fN&wJrF;`MCxA<Fy6$Fvjxz@=k31of74LLu-Tmw9T;QnnN
z;C<AaG9Umz_PdS9|IhaEzx8*-+>K1^oh|Ha|7AQ$N+a^1LdZS?om8RW(s^MpP|1N;
z(T=g^iWGs+TkG(24LEHhwEY{u^<{Y<Kz#ka8lB?sx!d<RE1jHpswR1QcmX{j?fo4;
zp@=4g?jcL~Pc@oCW=J;P90V8Yq~NHV0`*HF2+KP2Z3D*@f-<4GD!p;}+Up;B(WFsP
z*JWFhNQL`!TFq$!&}XEK-yNTKU$u^m#hSc$u#tg}>EJ6&bP&2;26E+sc%bPmA#YEJ
zhJ+j^u^sG)*Q@tf7BTKBH&BT+Y2XyaNpuqkY1G3RI65!&x}+Epi$l3l`_KvveFrR?
zg-;fgylpvgNjf2`6)CA)gCuq%CUfIvchaqr;C%SOfOniAd35q!n3yxXdxjx`jc&1V
zap5s^A<c6KL<K1NTh9w+w^7y{{xaM@xey7RT@hTEhG0K`3I0lZi5$@drrjV}*bC_f
z@$aQlLFaa(LjeFb$N&I_|8c4QwH7}#;k=a>J>Gy#1vH~rjG$n!3_{SphG0_A!-AlY
zP&~eV_-N2Dt;tn;5hl7~>dfpO9G|Id;>j&C1Sx%{n3L&7%LkTBX?_Km%CxJuk$Jhq
zG-<at$t=2RCa`Y$9_UB`lWjmuyS@%iW_q2s9(W({Y}~);N!aONKXQLVaPAG@-KDWF
zvF{aYAz#wPpMQcc*J^Gs&TH3V_hhvey*-v&vy(B0$=cMi6OHN@7xuN#41uymr@Sno
z43ySrP&k<_OMoF&!e`CzG3Kq3K%3Woy47bk7^L$TD7&y@$=eDAuCL=SHY#e@Xd{u4
zdQ$R*)RZ+;Fj1sQIj!Ef=b+44q03UJFg|HfTHcX)dBmAm%r~<(H9?H0uG=;Zj?<Io
z*|FyluX`<1BNgRJ;(3whmNhv1q_O(R4a*2ukAYsE8qgXT#KmR9;d!gADGA<K+F4uM
zX=7z0bDhlIyS+vMl$ori3Pe(;O06~o!9-QliNk}gub3;A3**lJigXqW+nztS&Xy<E
zH_sD4U9x~PZT0CBec$L_gJO#8=N-=|+z1#Jqo&NJyP@qi6CBgI05XlTO-qbXdjx|!
zY&uK}*%%7=tSv?C1+>z8klx?c;;X0*R97P+5R^it{>&H=z%TNY8Fhc4*GJ~iRaRIB
z4S@BSWo-Gn;+!~(sNR{CFG76e+_owxY8)2Rv4io1mqQIL3nvU|&abGzIoXE*s!yK7
z0k9S5vD#vk6D|{o993jvp(kz>E;P9zyD+pIRc6?<?L&2?kg`3$j;W{99d^F$+Spmj
zC6OhsQG5ml0Fj@xdROpx<TM9CFxZ5<*I{@Y2Ld3LzD2>>syLvrqfj&KaR>S~*6gZO
zQE+BxuQb=Osj%sdw0%Od(<(QFYeHRf$ikU_O4Z71V8Uv#tcrABPLjj=-Ksgj?%-LR
z*p7=3n5VI(|0DEeb<CKz#LHbTKb)Mkeg)?gXVY4m5%`uRWsq~i;QFnUQd)?{3x~@(
zb>1aX2uZ6(iPeUB#es&$`o~5MYO?dvd(wbMbuCzzU4-Wbny_4<c^TsbMux#Qq?FGR
z{AE@3v<E*@lf1rkmYLK$U5##fd_gZgK$$@z>j(8Y>bbsc^+JBVA4FrnJn8f}A5E?p
zS~AgUDUgJ6NzGr&87c&t0ov==Aqnjvn}~P{N}^}U*+KxH3u^lGreMNe;IlgCZV&$r
zWoXHvSR$iOWSqG21E5eL;`1$L5l49gafZTG8WLvTFW7Br+L|{#Rul{+sSLJJ==Gm`
zPnU*UsaWM{b=(x^x(naG$Jo!#k>XfQ&WTpD1pwR0>Bv7%RT~1JpdnC-)`;b4Z#OoD
zQ14*{oC$GVkK7B{Loe0*p;UN7Lp0WEt@F|<wYcw(gfPeVONYiIE;UJ0Jv0V{;(XmX
z@k2!+KY3*POK5UgEF5byPpETF$H46)q3oLkBqqQ(b-`PakWsxSVtJz}IP(}Qw!>tH
z>wr$tuCt~T14cffa(!RYxu1(wc!P>H)uQM)(2`lxuk0H!XH$h;`r+$Ypd$`ko-~ZM
zY6uQOUo5=Ed(2dMX$0FJn6F`G;mi3~Ol*_BaDGnZtJn^$Aq~o%tGGSZn;5-=ZOc)1
zknM*H>4D>Y0PQT<l%bB^84Wbi#Dy4N*8?^YQH5J6Z=xPH1m>{z{t8p06Qvw6n7`#Z
zV<n^r%&KzPDR8#f@yU63^?!Kf3B1#}+Jk+um50<r$9*O+7%v1%wP8;vZn<JMkgsW%
zW>zv`Q8JM*Lej%X8?o|ksBi(p+wcr}dQ1;j7RH4jVVf5HNh+=YH;1r?X;`ICKL_N<
z+m7t+ckWxsb0hD=NqPh6tlF#yx7$S0j7yPew-I0&m3GyFA?@LB5{ba|M=f{zeiJ`~
zIqJ65^E6{wOQFRi9>?F<vNK4CHhj^;<*nRvLj8&kWY^1c%npsN4IK`2lBznr8!;mA
zhTBlPJfMCB1*R2I`WzLx>)>vRv;$eo<G?<t(-tnD*mSYd+hELE28O*fhI3ru^K3_@
z`QR5%xQfTqX0;rX##+fwys8aoyJzf#7D}YPz&pW5O7ZR~1`LNGdTn*X__Y94t`vF=
zI7LA1Y@b=omiXe9)>T}o$=}MufqnPb>lXF<vxKRrB?7Qv&d}9&U>I-FZ@^7xeT{Kb
zLn}L3(dox!-g#Fmo!w!{$q3i>D^htSrBZuF!<s0y+hdq07Me=xla8PVCf~fxV(M3!
zCEFvFN7RKPij~tuo`jOtD;7k`lqJ;&rkS(d0%U<92J~m8fwxfSV&m|<ov6M94ov1h
zUopB+nU&yWV27jbHOHBcseunJ+*;9TVcjys6FdI?U#dpKX2KL9<?z&KcfMs|%z0gc
z?A1q*hCm11=3#rxj#h`;_t~*Dlzht-%O2(KZa}F6<5eh=o(+|8YL1)QNvAzOh@?3`
zQQlz-QW0gr_+7>-<1Tx#OXYoIJ8rq~gl1@4EA13IYA2BhMZTXwMF3n|8U%bVS4n5U
zR@W$mXV7JAQY;kfH?iu(gq5Qlnt@t63z8AtBAiu9swy(^4zH2xMs1bQJjaW%V$iBm
zf=Q~&2tWBzM5&m3ke3s&(cGaZxm6HKt*RxYV?L4a`cpm)@h~mYBqGVhbVLM7S)a?(
zoUBsGyis~_#$_k7m=7ofp!_uRBzBi^y>zSBVu4_lWlIDued1IAuMCSspcT>w3$avd
zlI9><Pm5Gpi~wt+awOgsW`A3VN?w)Bn#PJTOuH)oy=qc3ONU;;sA4XicwsP7oV{(|
z*shqs4(p4G4s5CrU3_#|sgOk8sy>yvPR|}P97q2=`XY(7JpvHbq0}qwn5JVYo+<}A
zy)$AC)dar-0*!v+^QERHGeb_YYRF(fq?k;y+bQ^<*)#7{5`C_*&_HThs$Ojxcspn8
z<j6Rz-9qw|KVRl#vFO2wJ&CRRc2U}rVZWH+D2c%&p7Fi-;R7Wz7IE@+STjZ`Z-KcX
ztBJUgCPud`4*(d0gX0BBmVGyx(n&D9ueL5%up{|6=W#&IpO{2e=j#TS789^9NQ*FO
zf+k<@TPJ5-@g;Opm#xt1SL9C(BTY9=*X&r#5Sn=D6rJCLB5Ra2-;AxOjEnN89>OD~
z8gRBs$m!u=hRDg;xNzQplAVs{qplS2AtqlZ1;gcBJ3xVy>m#-)aWmz&%|8og6Rhu+
zuOpaIt)(Y5`NR6fmNa?D9QH1|B71K$^Ovx0vrk8}g0QZ?s`^8hccnqB7Qnp?OZ&vu
z*c_YqPE5l$p#Q-(`1Q6mL*%og*pTKEmK17LOU^fK6I_8q@7XUBGh+nnqtjm@VvTK-
z$C&418j}r-5A|7ADTXm{^7P>32`wOB5pA}ZMqX4K{UldUfzy6dIo=Y~%k3oF<sKF<
zm!}pXy22?}<}gbE0~c8KOs2Apls+OUsYm8^{7TP)gP_`a1QSi!sHGAa{sa$Hw{%VF
zV#~8iK1YI8KQ}}AWi_lavn`fmxD@x5sCSA4boLeaBA&<NB4YE^=p@rh6QnC6+f?K`
zg0JIjaVz-b-05_Uz}e>)D#dpnSdt%&TmV$F)h#T8e{{GWKj`a>XLSA0%9ux+#^|z2
z+gQuj3Cx={=RgFT4zgv@Xz5^h<#S6{6G}<)?UD7=y_mh%F~lbRPxCv>a3~X2^5@!A
zy?HXgom8h#m?@P*8J#G37)4kgt{0YNvEsUbMhYVs^-vE$<{G^?*ZuGQtPXGf(2!jx
zT=uJLY6qJE1rEvQ%psgE?8<!()RR$#06mOZ3zlYjE)A*1wX!?#6=7|%)}bp=%PT!f
z9SzV<V#;xv3H=rNB4(qj?Zr*}L0$-+A!vD^1b?&L<&B*I!Fqh)i{n@d39YA#GmG86
zAd^kL=c{xk*{@!7_xg^ru|&A<XL}gyVgZ*qy}y4~8$6z*x<X>KchJb^|DgqHo&B&y
zwvso{^%$_y5C|MERvhZP4QMGmg4c3Y%^tkl#|T)u;!RFeN6aI=W!6^QIzLBQgMl^#
zKIcW@A}#M===resiZBN2JL1|W<_I}1!sZwuKPl{FE4So4wgHg|dBSi&iZ#xivImXK
zM)x9xytmnSxgyP=B`&euMxn0OptGTZ9axcgH+5ASyrFZjLU4Q3>ju?}hZds<-zsn1
ze?j~5Sas+{t4HTlj0)u#fp=wm@<|c{zOw3dN4SGODrq{<Zr*uaZa$@k5$f~%4l_QX
zs5!Obbt@=F<mCCu?5lMIWIf=tUBRV3kb#}+7Tpj;@Awqm6DvOh7`7I%dm$X+g6y2)
z9(8~AwI@!x<OEa^Q(yt;EenNVLZd1+Q#NzOEe%5<-+fwB%7ffwvt~saux$%qX5m?b
z$oJ?Rs!jXqs1+RA=HD`0I@go=UwXJ8=$s_JfE4?qLdcw=Ks*V;5>R;~O@4uzbh|vF
zagSN8p$R(9?`Q_>D_zKlxDP;%pXj({_2005gS?s#pT+hLGFwJP>q-nL>KiCLz-~w}
z{r*EGJ8&Em&b*j2Vb=xYxA+zYP@pzN@_d4L5&`Qiin*s^+S^OTIm|X+w@GZu*K}^&
z7*Sdf0gYWv1=bmU>mCd-r|(H3;30vy1I0f1DH8+!whOl9r%#p8vz(x&J2=1Io-(*4
z<dqxggO^`0a5w<_(s!{q6yj}LIr#F0G*#{BC07Aw5V)V;`!vD$$`hjs{8NPo9D2&e
z!%9An&C>|57+d8<pHfYgyWT2>pezp3kc+4Z#>|gP*2kg?5?9X;NjCZ>eaX07WeSyJ
z#xA=uPU2XD9MF<%d!U?r9nQDr#037n@#ncJ)XA*hEB3tL$BZ0)LA#`p3Hm0%aRE_z
zNF}C|dw)@pS;<iatv1XfFyA~-JN)SYcJW&2_+W2?OMjYjznAGQ2`Qx)!R0F1Zkvb7
z<vH9%Z}_X8e7RB74m|&oDpMp9OfeP1<}OnGuqKo6=}_><_za%uF6rj))?kZZduW?H
zj*Lr$OgKs!(`jBzp2y!`T7_G{ay8rvC+XObDK9a+(Zu+RtMyYcfx89=QtpM)62m!l
zrwREC71%{&nXa=PLT#qSlQ{MmJkdlO2cBe`wO-lvw77)PTj2G+pcH$v3&!}k0*8?7
z!;PmI0}MZKYogfmqHO!KoYC4ImwxbG18jPT%ii}q{)m}k$IFMrJ2-&x?HnGYWo-{(
zbEKdy$tb)q4XF);2cBaLZ%Eu1-aI;r=P)QES!EbA^rnv|{Lovl=GPvCDb<8>dZ`c%
zV#zo1Dx9D>v#YQv-QiQDX9NUEmmY%JHl2mPt@qs^#oiN#Kh9F3*-P=|OaiuedEmmM
znJ-}}e71nkQDo=|U(RjUZ|OR+K>JoBS&(7~bBiKf>ZZq&fyk6b(22!FL`D#*;CLQZ
znF*WrGVFNXh&jxX^HysE6ZxrMPWi*@49^LNl*oBgV6fVKq-*OP1FIC49c#U!W{X*~
z@O&DXH?>k{y!=klp&PNbktrZH-zJBPEALFlw!u!f0@nP5F<;@^BBEN*OlWVUF<rnS
z8l!3n^B6_G199)`KnV*7*thj~e}Z!LgL?SqC|q4@hMU2+BhWmKZ|i|ANZry<ilm|@
z8k?vw|KNW;P85~_+k!qz5gazM`^8`+M4X+ezr-E|k`@;F=t+&*kiW_MTw&byO%t}#
zSPnBwq7ggwiC;(QqPH0K2hYq3p9ED@{hzu)a_T3*8qisRJWLDHEBKfWr=U?p<yw`O
z3XjBOPbovQ?fz%u{qzg7A?G2;=Obd-{E$Z<I-aqBj%~C$ADt$JpLbNt{G_Xs!*`m?
z1j%RDH(WTknZ0K}fl`T6OzbOA504(%SI7cgo0n5qN1Q$oog43&OAt_Wu>Y?R=%e;0
zfh?BkqZ%kdGgjceP$wZh_MbAJ(O8c6GMfbOIKB_0NSx3I2#!<y084RSJ^)SpKfpI$
z>7(_WjF)g8kC8x^LQnKjRpcNB@kRPQCdcz0lcW8ow&-7%0>4*`glTj71cem%e>&c9
zg=gTs2ew5K005%DI>uuqpn#wyJRu{!2a*1L+zCVpc%Y|v30I^P2^Q~V0r08tL?4;h
zI-0vdvv--C?=pG+Vzol~Pv@}&(vMkPy_089zhlG_JQDsz>S{^hvI!0VRKNlN)PIp?
zGre~tPbf-6{UFs%!2=y+|7Tp$Dfl0lwnRM8d#(hbB*p|;Muh)=EVGYb4YE)GKsYJ@
z!2K7)cD47;k{_fINqC@N_1;@l36&}sw0}=BNOPnPbLjM4GfnTB`CEn22Jb|a2|UUF
zj7cFG547Lx9fO?^l#Kh&UXTB*iUI&w5;{^y{;e<yiTdAl`CrN`{u-&0*FO_oPvQO;
z?Wa^c(1!5;z~Cepr=tF&^uM;1{6#Jh`_WnJ|81Aae^tU?+4aBJe^2;eZ}5L+|G!DL
z|5qu0Wmx`_0+Ie9MfSgy@*fG8|H|;Mkn~>+>9al<TKu;R|8FAH|5e&wQPsbs?PY&R
fWBu=>{VT|-C<F1ne*pj>eE&?p8^G6^kJkSJ1f^-o

delta 5676
zcmZ8l1yodByB@l8Xa@wPyQKsHL6Am}1_9}ilx9@AV`S*=t{Fg(P8pFd$pPu^khsAA
z-Fw&f?-S43&-*_6y!)KB_F4PsIYmWQqvES8p`nuj0NB`oJ=-{Z7PKzAz&PR8OnbIL
zdVsrzdVjlXXm^*nH4hr#U-|iLsCTL%p1V5)1x4TvYK2kCQ19^%8WQ6kdvW^E?lF!)
z?g29>bszY1&^F#ZzslN*a*u`VC|LJc!pHm&M-%G+-S>On<~;Cr##|5j6jMRWdw$4j
z755%-DdHdWQ^dRvx)EU>G?M%30}9L776}1>$R_}R6a*<u28n3k2E+C7JVE2`H!;Sw
zziIW%2<j;9YpJA;t6)9CJqqt)1A~HeYO3t1r{4+urd2fG`Bi3RxkAbOiGd*2ih*bZ
z3S(m!s7*4Pt^q2~z--u5W{yd$Q(H!a9Y(*ljJ~2dn-#AuO@MJI?dpI}f2NDCW%%rZ
z2QT(SYyFR2Q5s`8fmxb$q^XgYUDnD<DHEQ;v`V_sx!q!1qs~I3?qpiTG*+#Xn#GbF
z7L3tE>veqgjDnL@KTlhB=}WR$v5Si2W7R!$A5EIE4S>RSXvE4`3}wb?gKZjSuvbn9
z&~UY6-gLa~4HoJh-!b3N+OC39xpE3X#|$0%cp*1^bX<^O@D9C<dWlAa7{+7~wmBd2
z^dhz1yWXF%RD73kK)JvzHA^3(A7|hIV`_xry?Di&YIG&NIJ=!W+69X}YIu2Wp!Uf@
zasF9TooO^o$kV7`w?`MIQuZWg$$PdfD>9$oXNSym*glz@{q2&xjMJFAKsuZ3GwN;v
zXJc4#%p+B0um`M6oCeV-&(8dkRFkp5B62GF3cK!vxlGfkHhf%HR@Y(rDQ6Coyn7F4
z`sy{b&hap64)GiG#Y}{D_PKmRwv%*vZps`_tRT?apwk~?3!6ZIU~?#bTfVbLVFJ4U
zK?*t~kVEnU4cRC;V}?JsJgjY(racTpibyyBR00#gmkrQ<+Y0Xbp`mncgyR|kyxjC@
zzPPktuAH=TH|8w=K)1vw&Uhy@eZo*jjdWuCap<61$E+%uqbjjowW8;aWnKByDgk;m
zMm^h9$<jv{X+<*WMpfC@isWr{>Vc2PSLPbe|8{50XXk`<62YWCHR(>qu2O}4ly|7i
zohg8VC(x{Uws%KCYeg0;LA~xJ4Olaxw$y$c#Vp-E2w_!)SdVpmO_9TiCvOsu`#QKy
z=bG6+W~Hw2Brz0<NcbpVi<9UK<>pW}Q5_^l)AKZnnk9KF7af|%KKFj<@z;Ic6G28&
z+iKchOj{{F!I9xhT~`h|E1in+w~YBJ^rVag?7y8C{OoabcX=EMVL#xsW~KS<m<|bT
zU5#Z8Q=p&ci}tMWYqN+g%jl<CpmF;*?E!&Mj`FO#umAI}D=}6T+b7w;{CIzTLp$YX
zC+1-qn2H~qYh<OZsWfBN;{sK6B_pb?$is`C27(-t;7xVR=Po|i<m$<jb(p-G9THro
zV61n<j+~eL5XFmaYCvt93Tjvs7hN|j&s_)jbE;$8opm|L3fqP^92$-vP5kz!jrc44
zrWZ{JVL}Tdc}oYI-)Sv0s|7;c_!BV}B5fymY7}#d7<$!p$)9SwtJ4o87svygoVCzz
z`8wLY<bG{uTp!^!d<LizoB2&=e?>;RfOW=Bl|vifevPsXqwD)!EUuQJpXt-S6B2kN
znX^Pj$E3x4lFj*Hb;osPL%@h+_YpDUVN!VS0eWwH)h@F<6RB!25z2gkL4M}|hE6q?
z#y%s1zIRrk5olpg`@r1uaV>1%D}S5vpzFNwnVHy|pWso;6G~v4fbZe<1hA2>0?b0q
z{~=|)$|2uR#MMs}w7}zZ^+|+kH6ZiFmY`(bQs+4~!=kvTk4eM)vsW2S&H)-YNKuK(
z#awpD;Fu!~$!np<htUWn)reY{Q`sbk@}hx3(oqeimM^JPd*q+jDUqtc$G=i=NMfob
z4b;M?#=Mp?J0fr;^Op(_1VF1yZs1xB`|lhL+-nl~g3vm(pC`5K#-vVK-=Mn5x@QP>
z$%sq{PUopx&vWikamiW9L2gU^kn<PM;@^-R$oVR^Cu(1P&sw_V$fOjVEc@t|m|4U2
z?2|yCf(B-l1A>C{7?0h!Q?G!^il*DpbO8_b#E>nTL;&=9Q?*0*D$p`M#vCl^@`pe7
zhCjD#RKZ5ptbGuf6JEJk`n@pPStfDa4a+G^twgZ0r!VgqB&G^z?Rz<6KJ7iWf|Cm^
zUegkLBW8elZn28U$xDZ@sb6p~O)RY!Z}_s=UpI!EbXL~JDgSyBvB6F1h3julXnZn`
zalq{Vru*5x!FP}3S+YR8tq5@Z<sNZ=86QR~Vk^_#@%)v%G{wbVeDA^p6{g&R6_@Q=
z8b8Cq^uJ45H_*l7`fs0-eFiOlaRcmt<UbyhQXo8n$+zaUc^4i7q3(PzWkKbMc#-Eh
zNDPj1V4dabmEE!p8k^>K$C=KIyqq{j%#9iwFQu<AT5=b8w6Dl-8Wq5dU;8(vqxhj&
z!4sFkUX-YkULNnG$gEsIec*sr?R^jSmXKB!`)^`G+l+b|_1i_6#tnvWJ=A!x`T_S%
z+(pm|emhhBFW2Om{Hw1e#5a1~t&1kf6*0eqOA(_5b3ev$Mr)!*@};qFqaU-L6OrGB
z-9DMEd8d>_0fcV!ckF=YbEtoHP_jf`W{2Ol$A~adk*25Bb7M0jQGP~yCWi7Fw#LTk
zG&iBJvy3U1>IRZ0uxrP4Jd)hhp*~XTxZ!D08^@=^z)7W`lW}0sESArfV;|R~Ep){L
z@u;HA{UK2LMRf9o-=Cq*yO8<Oqk?W+qtX%gFCou3wNU={#U@CAGw@RBx$-S=<+K_z
z9QzU$G+%|Rt{VvZSj>IY6FpSr&V+vVd{TN{pSDe0u5OdhYL!?3=W8D27rmXbYRJ9d
zQ6DGEPbJgO9~pq95MjnxCZ%4WFPqI+SPlKmvt$u(w)!=|ezv<I21~dQkyM(ZG;_2r
zfU}q9djHy-nvY%vSM+VZok*k`amsqC5H*%J<eiXG9HbVYiMRY`kR$y}SF}P;6P%Tc
zT_30+{|FuR71{4T1<H8qSjTqeAV-VZ!@1}BuYG5SAXomIPT4aJw%fwZ$Fh-K`o0lP
zF73PS?)hrf$6<coAt>}?J)$vN0|g;&J~1NZ7Q-1snrJBw;83g9+74PFPqg2blXOSd
zNs~SMUYWx#Nt0D}j6L44$TZpP=qLHtv!AL2)-)`)Y~@$9E_msZ2%N%VXdRA-kC(OI
z6^eXAz3Ac4x|I>$0_$_F>1WVpXIZaN4dMQn7({%WZk{H~{0+ZI<D3M(M?XR|ZG;EW
z7ru7+WOX_A15Crd&Qz8n8`Emt^Va)=NlRNvs-7`PsQaA6qnPAm1|?%kp7?g>+e6O{
zGL;uLYf#BlD<uccqmXnHo8_zeWHwW85NPm^ndxX`{(=Un)Z>aehca%O%v2`bKbYVF
zW%6M2eZw8*!e1$Sb4btr*F<{e)jr=|RDHu&K8$_WngE6ay%QPm4fOaa47z6V<tjs8
zC8tcd>p~ImT<FH|G#W(Jft&!#CQzQ7UrS8ce4FY`lWEejVN%zUzBg;}0k(s#QUi40
zhY73E`SDv*%SEC?=6&lnJ=*%RYI{q^loVlgdayfBGus;74Da9a7uA`g!*yb>2hU%p
zA!N=b--6@2SAZ5;VoQ`0Xir{jhI-h#Z>R~1#=IlY{z@<+LaV(_mC4(+Se{`Kjuqvx
z{c(l&rt4O!r{$cyWni$2;{{9dN>Ku;TR6i8ab|CBT64)9vrpO8YsMn;;h!d6WVeQI
z*KsNW*5JZH89&pTnB+uFPXbBgxJm$8Im%bMo#kNugHFPQ&ZTGU7qfxlD}Gpw7u<QJ
z8y_Wa3{YA)YSxl_T#M|#hYl@@j-_?y^z@tn8%{Z)Lc;0YhpR`SEuZ@2%4qQ?b$rRS
z16GhdH#lWdAyJ7m7dz!v!xY7=PvBfE<i(tar@P;y6@rM@MItH$>{UeJ2kv;b=iXB6
zL!IE#*(i(kUfk_=+if|H(`+=NMM?Z6Q|^XW2lRB^(h^a!ZdftDSIfh9^Bjo58FA~e
z+f5P9tPnqyS@uM(VI2m8o!OGSrf<!tD~Vn?>=<xdIEVGGTa1aaELDo)cL{dXJwDb=
zSk@QP=z-I)%3@#AvxMyWi!I$t_R9_*W<IcbaD)gi)x0Yqk&!LoV~Lm$1CEr=&L!h%
z5FPnh$?85*F|U89L@>mmlDq-iBbEgBCHo^2^Q_V*{i2ceZ}H&0->mfVyh&L&hNy}&
z+I;i_X5p-)_?a1PZ$2!#*(vlrr^QiOns#|913X`3^iOj_$pkPTKrDPO1a*#WU#5e*
ztgw0L8zry4Df(vP4<L13ZjHM*sss)qCa6t1F;vryWtK1Zx4ecYk8(bomz#v6H%kv7
zD}OlS_g6xZ1m8tJ*Z)a9K`ua-r6Sy$Nz)eWBtxVc{=jdGvaSnj{4mGy|IWZj7P`c>
zp6<dz%?|aBKXi)MWbW0NNJQNH-FE;_4|+`VWN_pq`f1wJlYVzltWb34Z0CKI@Yx&G
zgBfYcp}B2i(`8ztg-IB_$Y?KtD35s>k;oU#v&d@P?d*%evM=QSmq6l6y>s}QKmJ1Z
zvL~gQ6An0~|A29Pkxf7FY*<V}h0iyM3mhzr)T=wb-cEk}4k4)^e!xJ}_9_p|0;X}t
zc4{7yJFBUjaD_L@UT$I<7C0hH?U6*DTF-oZv04Vrn?wti&k4J~k-tk_$f4V`m{na8
z`rYj(U3bm2nfsT-tW<5-aWkY}IMAACXJx8MsSdLN{-*9Uj4Ipjo9@yCnjouLn8Du-
zfcQ<oY`IHJ;SR$D^HSmCej*aEc5F-JQ4xtoU^;F~A8k-I<89-iw|={8+bW`gdd15*
z_R9yCW!jsw9d*e~PyGYgFO=@*RA*tayJ9g?lqh^*d(eZt1<JS~!O!57u2!69w;z@e
zEBu@V{QjdtisUOv?^Us+xH9vI5ko?OI_O5P*L1r9sDlDokAuz|=YJZ2TjG`rqH_N@
zeoWu-G<F;z{ctKV=f?N4+0cBo%r8W`H6&kAA3?8l(dVT<GUfIeidH!i1%z3Cq2aE2
zLq=7la5x&F%$8|(<5T^vCiD+yA9Rs(X`V@U6D=NT)7{5JxdCl2aD{Co(6xV$ut8k9
z!cOAfcK|ZcQvE7UR=vW&&3^>!HxVuwtY;WrJZD4FqRa7DhtNeIGx=`_?JUP2Vag$f
zu-h-lnd&I_&~KZTX*^bk9Qd#2I&yvfl$EgT4akLjr(QSBP8Srl4JAF4;3#BVNIWoF
z1GDk}U{179>)U#I%-Y(Vu~xZKzlWr<&C5Tgs=RO(Q&D3$Y*kmn{r}B=ZCiL4#=}lo
zi7ir775i?3PYM7CJnWRCjmaVVE+0|GYpq<B(82G^IrKi-^#+Hi2!F<uRd7f%(H)n7
zAL4;3o=}liW5LFL#^T9QSDQtBXW})SJ6|5c_jrC2oBZK9^WNk>kWf-vAxPH2b92OR
z;=NWm`=A|rY7X+4txCL!5KE)VncgH)e&yw_;s!5K+u~-iiPDfx+gGZrR<ylmzLT6L
zv1#CTy!lnkEAGz=%S1FcMe-$5I3UkKQG{{cKwqy@e|YK&e4Kz3Cs=+E>&F4%ds?e(
z&0Uj3(B2y@EI;xCtI4(CzOE`g&ecB7yzy2i#(u>Goz7o=N4f<@vCh5rr)EPVBcuDw
zK7O*Ftvyp6U@fepRJgeTM=G>f<22FhX}(~FeYts|{Yxfe$R-|B<C+!lw)JO|K+y{B
zRD5H^@3AK9MsLc253;SmDX)ZE9OKWluq*VIjs&{?<<fJSN*O<Yb(!f)EQjK2wL<R^
zkGSn(qaL78(z=m+YTKiA1+MHPS~oPrdbxCEqft*a&8$44t4YKQe#XrYZjyx%@PeJl
z`~(X@A_~k{vbHZC2|FLpML%EfGVb5b)e?{9+eg7HOB0Xw?sr?<I>&^^XdI=UQ|N5Y
z@Vn`jw?yrsOQ-dC96T4hrJ20icN01mLb}h79h@lMv<yz6rghQL*es@M^u$S|8~0$L
zcb>oF(%fK5Q(EX8t&hu4X#M=d=N!E6U_UU%)*e$g!L@7-$6nY<_J&)RTg9HB6gV_=
zeInck{_%E_YP%ICJlzy)n=P`#mI*dRG3shgb$K<^KQt4Y^D*TTlk50!z;u(Yovr23
z;t6NvQ*={|B*)cVtaFCknJ6Rl)mJFIxqJ_2=_k=oms>R4*NH*uh1qi8PE~>cUqCkU
zvUP~R1le1X;!k6q5L&hQSE{PGurg71aOPs#>v@A37JQQ0a5Peo)_nApD6h$hL`f>|
z%i=e_BWiO3V|4Uy3yYuiore?&DQE?Uj!si0PEaL6wHuDRAI`ZLrPJYtv7*7KBB@=u
zYrYI`Ja091nI9dbV9T56jvzM|f1K{g11&K<LW+<P#b+BlrU&8i%&|Pm$5jwXja)Id
zi;elL^W840ZBvwh>G_^n_a)GQXbf=nFTTg)Wx)zF73VYHpU;`dHR-@*=fGuYLkW%Z
z8_IJFGKSjA50N%$Ki+yTk!D`AuSQ1$fLUzQE<~ArKw1w}ZW&LZC)B(s@N@SUjP(bp
zL-hWLg-o<wpnBOp1$5|AN?i#Bl??5FT|9_GmC(J72g$FJx^u`Nt5pyF9A)*h`<{CB
z^LvP?mcECPYV~_ytkJj!kN-e_jpluCx)uZxt0jlv!XDAz8)^;C`*?|X005E(01&<R
z1pjGypP4BjBq%^gD~t@nLrVtv1jE1AN5ep<WKaHyJUsjSjv0UYf4TGQbPxmhL#_=R
zggV9kPXq{A<ijNVuSt>AflvXw4;j(M6!AJ(5R*FU`^R|S1-g{~KLF(Xw=ziYZ<~1S
z_??k?f(Zaf{BPBFnD^OQ>mMBlM6&*&5aoIhYNF0REIA~;p7devdq(f1@^SB0NDu(P
z^sgZXj2@CF>*?={0oQ_1;nojKRV~XsLwCn0+CDI9wcPhi``ui9K0Gid!X&i+UG2Yp
zOYDXxcfO_ALlJ%SsxHql006qXkHGt{A~rrh3>VQr&ChLaZ|ds$--G^ZiT{_>E#yJ^
bpB0~gLR|^t?kxcTG<QeC-9G^sd*AyX`K_?}