From 13e5e14a2f98059c903bf0770d6d4921d2d62729 Mon Sep 17 00:00:00 2001
From: Sarah Gillespie <73313222+gillespi314@users.noreply.github.com>
Date: Wed, 31 Jul 2024 10:03:10 -0500
Subject: [PATCH 01/88] Update UI to allow for showing software install details
 from activities related to deleted hosts (#20866)

---
 .../AppInstallDetails/AppInstallDetails.tsx   | 11 ++++--
 .../SoftwareInstallDetails.tsx                | 37 +++++++++++++------
 .../cards/ActivityFeed/ActivityFeed.tsx       | 16 ++++----
 .../HostDetailsPage/HostDetailsPage.tsx       | 18 ++++++---
 .../SoftwareDetailsModal.tsx                  |  3 +-
 5 files changed, 57 insertions(+), 28 deletions(-)

diff --git a/frontend/components/ActivityDetails/InstallDetails/AppInstallDetails/AppInstallDetails.tsx b/frontend/components/ActivityDetails/InstallDetails/AppInstallDetails/AppInstallDetails.tsx
index c4991f0fd7..dd1de5a727 100644
--- a/frontend/components/ActivityDetails/InstallDetails/AppInstallDetails/AppInstallDetails.tsx
+++ b/frontend/components/ActivityDetails/InstallDetails/AppInstallDetails/AppInstallDetails.tsx
@@ -90,6 +90,12 @@ export const AppInstallDetails = ({
     subordinate = status === "pending" ? " when it comes online" : "";
   }
 
+  const formattedHost = host_display_name ? (
+    <b>{host_display_name}</b>
+  ) : (
+    "the host"
+  );
+
   const showCommandResponse = isStatusNotNow || status !== "pending";
 
   return (
@@ -98,8 +104,7 @@ export const AppInstallDetails = ({
         <div className={`${baseClass}__status-message`}>
           {!!iconName && <Icon name={iconName} />}
           <span>
-            Fleet {predicate} <b>{software_title}</b> on{" "}
-            <b>{host_display_name}</b>
+            Fleet {predicate} <b>{software_title}</b> on {formattedHost}
             {subordinate}.
           </span>
         </div>
@@ -111,7 +116,7 @@ export const AppInstallDetails = ({
         </div>
         {showCommandResponse && (
           <div className={`${baseClass}__script-output`}>
-            The response from <b>{host_display_name}</b>:
+            The response from {formattedHost}:
             <Textarea className={`${baseClass}__output-textarea`}>
               {result.result}
             </Textarea>
diff --git a/frontend/components/ActivityDetails/InstallDetails/SoftwareInstallDetails/SoftwareInstallDetails.tsx b/frontend/components/ActivityDetails/InstallDetails/SoftwareInstallDetails/SoftwareInstallDetails.tsx
index 27480cd8e5..61c2d5f04f 100644
--- a/frontend/components/ActivityDetails/InstallDetails/SoftwareInstallDetails/SoftwareInstallDetails.tsx
+++ b/frontend/components/ActivityDetails/InstallDetails/SoftwareInstallDetails/SoftwareInstallDetails.tsx
@@ -1,6 +1,7 @@
 import React from "react";
 import { useQuery } from "react-query";
 
+import { IActivityDetails } from "interfaces/activity";
 import {
   ISoftwareInstallResult,
   ISoftwareInstallResults,
@@ -21,17 +22,28 @@ import {
 
 const baseClass = "software-install-details";
 
+// TODO: Expand to include more details as needed
+export type IPackageInstallDetails = Pick<
+  IActivityDetails,
+  "install_uuid" | "host_display_name"
+>;
+
 const StatusMessage = ({
   result: { host_display_name, software_package, software_title, status },
 }: {
   result: ISoftwareInstallResult;
 }) => {
+  const formattedHost = host_display_name ? (
+    <b>{host_display_name}</b>
+  ) : (
+    "the host"
+  );
   return (
     <div className={`${baseClass}__status-message`}>
       <Icon name={INSTALL_DETAILS_STATUS_ICONS[status]} />
       <span>
         Fleet {getInstallDetailsStatusPredicate(status)} <b>{software_title}</b>{" "}
-        ({software_package}) on <b>{host_display_name}</b>
+        ({software_package}) on {formattedHost}
         {status === "pending" ? " when it comes online" : ""}.
       </span>
     </div>
@@ -56,18 +68,17 @@ const Output = ({
 };
 
 export const SoftwareInstallDetails = ({
-  installUuid,
-}: {
-  installUuid: string;
-}) => {
+  host_display_name = "",
+  install_uuid = "",
+}: IPackageInstallDetails) => {
   const { data: result, isLoading, isError } = useQuery<
     ISoftwareInstallResults,
     Error,
     ISoftwareInstallResult
   >(
-    ["softwareInstallResults", installUuid],
+    ["softwareInstallResults", install_uuid],
     () => {
-      return softwareAPI.getSoftwareInstallResult(installUuid);
+      return softwareAPI.getSoftwareInstallResult(install_uuid);
     },
     {
       refetchOnWindowFocus: false,
@@ -88,7 +99,11 @@ export const SoftwareInstallDetails = ({
   return (
     <>
       <div className={`${baseClass}__software-install-details`}>
-        <StatusMessage result={result} />
+        <StatusMessage
+          result={
+            result.host_display_name ? result : { ...result, host_display_name } // prefer result.host_display_name (it may be empty if the host was deleted) otherwise default to whatever we received via props
+          }
+        />
         {result.status !== "pending" && (
           <>
             {result.pre_install_query_output && (
@@ -106,10 +121,10 @@ export const SoftwareInstallDetails = ({
 };
 
 export const SoftwareInstallDetailsModal = ({
-  installUuid,
+  details,
   onCancel,
 }: {
-  installUuid: string;
+  details: IPackageInstallDetails;
   onCancel: () => void;
 }) => {
   return (
@@ -121,7 +136,7 @@ export const SoftwareInstallDetailsModal = ({
     >
       <>
         <div className={`${baseClass}__modal-content`}>
-          <SoftwareInstallDetails installUuid={installUuid} />
+          <SoftwareInstallDetails {...details} />
         </div>
         <div className="modal-cta-wrap">
           <Button onClick={onCancel} variant="brand">
diff --git a/frontend/pages/DashboardPage/cards/ActivityFeed/ActivityFeed.tsx b/frontend/pages/DashboardPage/cards/ActivityFeed/ActivityFeed.tsx
index 3a5d520d27..c9e6b08af9 100644
--- a/frontend/pages/DashboardPage/cards/ActivityFeed/ActivityFeed.tsx
+++ b/frontend/pages/DashboardPage/cards/ActivityFeed/ActivityFeed.tsx
@@ -37,7 +37,10 @@ const ActivityFeed = ({
   const [pageIndex, setPageIndex] = useState(0);
   const [showShowQueryModal, setShowShowQueryModal] = useState(false);
   const [showScriptDetailsModal, setShowScriptDetailsModal] = useState(false);
-  const [installedSoftwareUuid, setInstalledSoftwareUuid] = useState("");
+  const [
+    packageInstallDetails,
+    setPackageInstallDetails,
+  ] = useState<IActivityDetails | null>(null);
   const [
     appInstallDetails,
     setAppInstallDetails,
@@ -88,7 +91,6 @@ const ActivityFeed = ({
     activityType: ActivityType,
     details: IActivityDetails
   ) => {
-    console.log("activityType", activityType);
     switch (activityType) {
       case ActivityType.LiveQuery:
         queryShown.current = details.query_sql ?? "";
@@ -102,10 +104,10 @@ const ActivityFeed = ({
         setShowScriptDetailsModal(true);
         break;
       case ActivityType.InstalledSoftware:
-        setInstalledSoftwareUuid(details.install_uuid ?? "");
+        setPackageInstallDetails({ ...details });
         break;
       case ActivityType.InstalledAppStoreApp:
-        setAppInstallDetails(details);
+        setAppInstallDetails({ ...details });
         break;
       default:
         break;
@@ -197,10 +199,10 @@ const ActivityFeed = ({
           onCancel={() => setShowScriptDetailsModal(false)}
         />
       )}
-      {installedSoftwareUuid && (
+      {packageInstallDetails && (
         <SoftwareInstallDetailsModal
-          installUuid={installedSoftwareUuid}
-          onCancel={() => setInstalledSoftwareUuid("")}
+          details={packageInstallDetails}
+          onCancel={() => setPackageInstallDetails(null)}
         />
       )}
       {appInstallDetails && (
diff --git a/frontend/pages/hosts/details/HostDetailsPage/HostDetailsPage.tsx b/frontend/pages/hosts/details/HostDetailsPage/HostDetailsPage.tsx
index 2f2c88a5bd..a55744bc33 100644
--- a/frontend/pages/hosts/details/HostDetailsPage/HostDetailsPage.tsx
+++ b/frontend/pages/hosts/details/HostDetailsPage/HostDetailsPage.tsx
@@ -62,7 +62,10 @@ import {
   AppInstallDetailsModal,
   IAppInstallDetails,
 } from "components/ActivityDetails/InstallDetails/AppInstallDetails/AppInstallDetails";
-import { SoftwareInstallDetailsModal } from "components/ActivityDetails/InstallDetails/SoftwareInstallDetails";
+import {
+  SoftwareInstallDetailsModal,
+  IPackageInstallDetails,
+} from "components/ActivityDetails/InstallDetails/SoftwareInstallDetails/SoftwareInstallDetails";
 
 import HostSummaryCard from "../cards/HostSummary";
 import AboutCard from "../cards/About";
@@ -172,7 +175,10 @@ const HostDetailsPage = ({
   const [selectedPolicy, setSelectedPolicy] = useState<IHostPolicy | null>(
     null
   );
-  const [softwareInstallUuid, setSoftwareInstallUuid] = useState("");
+  const [
+    packageInstallDetails,
+    setPackageInstallDetails,
+  ] = useState<IPackageInstallDetails | null>(null);
   const [
     appInstallDetails,
     setAppInstallDetails,
@@ -577,7 +583,7 @@ const HostDetailsPage = ({
           setScriptDetailsId(details?.script_execution_id || "");
           break;
         case "installed_software":
-          setSoftwareInstallUuid(details?.install_uuid || "");
+          setPackageInstallDetails({ ...details });
           break;
         case "installed_app_store_app":
           setAppInstallDetails({ ...details });
@@ -618,7 +624,7 @@ const HostDetailsPage = ({
   }, [refetchPastActivities, refetchUpcomingActivities]);
 
   const onCancelSoftwareInstallDetailsModal = useCallback(() => {
-    setSoftwareInstallUuid("");
+    setPackageInstallDetails(null);
   }, []);
 
   const onCancelAppInstallDetailsModal = useCallback(() => {
@@ -1026,9 +1032,9 @@ const HostDetailsPage = ({
             onCancel={onCancelScriptDetailsModal}
           />
         )}
-        {!!softwareInstallUuid && (
+        {!!packageInstallDetails && (
           <SoftwareInstallDetailsModal
-            installUuid={softwareInstallUuid}
+            details={packageInstallDetails}
             onCancel={onCancelSoftwareInstallDetailsModal}
           />
         )}
diff --git a/frontend/pages/hosts/details/cards/Software/SoftwareDetailsModal/SoftwareDetailsModal.tsx b/frontend/pages/hosts/details/cards/Software/SoftwareDetailsModal/SoftwareDetailsModal.tsx
index f8373d8c14..2fff0a4fb4 100644
--- a/frontend/pages/hosts/details/cards/Software/SoftwareDetailsModal/SoftwareDetailsModal.tsx
+++ b/frontend/pages/hosts/details/cards/Software/SoftwareDetailsModal/SoftwareDetailsModal.tsx
@@ -149,7 +149,8 @@ const InstallDetailsContent = ({
   } else if (hasHostSoftwarePackageLastInstall(software)) {
     return (
       <SoftwareInstallDetails
-        installUuid={software.software_package.last_install.install_uuid}
+        install_uuid={software.software_package.last_install.install_uuid}
+        host_display_name={hostDisplayName}
       />
     );
   }

From ff623f9875d3118c3f43efb8ad63c57314c18eee Mon Sep 17 00:00:00 2001
From: allenhouchins <32207388+allenhouchins@users.noreply.github.com>
Date: Wed, 31 Jul 2024 11:18:36 -0500
Subject: [PATCH 02/88] Shortened up the Event lead follow-up section (#20883)

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [ ] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for
new osquery data ingestion features.
- [ ] Added/updated tests
- [ ] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [ ] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [ ] Confirmed that updating the timestamps is acceptable, and will not
cause unwanted side effects.
- [ ] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [ ] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
---
 handbook/company/communications.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/handbook/company/communications.md b/handbook/company/communications.md
index 8d8a7c1f60..0c3eed5af7 100644
--- a/handbook/company/communications.md
+++ b/handbook/company/communications.md
@@ -133,7 +133,7 @@ It's important for Fleet to engage at [events](https://docs.google.com/spreadshe
 
 #### Event lead follow-up
 
-Eventgoers are expecting a timely follow-up from Fleet based on the conversations that they had at the event. It is up to Digital Marketing Manager to make sure this process is followed.
+Eventgoers expect a timely follow-up from Fleet based on the conversations that they had at the event.
 
 1. Once a list of badge scans is available, Fleeties that attended the event are to add any follow up notes that note buying situation, amount of endpoints, level of interest, and general talking points.
 2. Within 3 business days of returning from the event, attendees will set up a debrief meeting with the demand team to discuss follow-up.

From a33bd6527249eb40e2033b68b6086a58d7eeaf34 Mon Sep 17 00:00:00 2001
From: Sarah Gillespie <73313222+gillespi314@users.noreply.github.com>
Date: Wed, 31 Jul 2024 11:34:01 -0500
Subject: [PATCH 03/88] Revert "Add minimum os version requirements to DEP
 enrollment flow" (#20878)

---
 changes/19674-dep-min-os-version             |   1 -
 server/datastore/mysql/apple_mdm.go          |  58 ------
 server/datastore/mysql/apple_mdm_test.go     | 172 ------------------
 server/fleet/apple_mdm.go                    |  50 ------
 server/fleet/datastore.go                    |   4 -
 server/fleet/service.go                      |   3 -
 server/mdm/apple/AppleIncRootCertificate.cer | Bin 1215 -> 0 bytes
 server/mdm/apple/deviceinfo.go               | 179 -------------------
 server/mock/datastore_mock.go                |  12 --
 server/service/apple_mdm.go                  | 110 ------------
 server/service/apple_mdm_test.go             |  78 --------
 11 files changed, 667 deletions(-)
 delete mode 100644 changes/19674-dep-min-os-version
 delete mode 100644 server/mdm/apple/AppleIncRootCertificate.cer
 delete mode 100644 server/mdm/apple/deviceinfo.go

diff --git a/changes/19674-dep-min-os-version b/changes/19674-dep-min-os-version
deleted file mode 100644
index b9adefe9ec..0000000000
--- a/changes/19674-dep-min-os-version
+++ /dev/null
@@ -1 +0,0 @@
-- Updated MDM features to enforce minimum OS version settings during Apple Automated Device Enrollment (ADE).
diff --git a/server/datastore/mysql/apple_mdm.go b/server/datastore/mysql/apple_mdm.go
index 0bb49993b6..a0e95f7d75 100644
--- a/server/datastore/mysql/apple_mdm.go
+++ b/server/datastore/mysql/apple_mdm.go
@@ -4603,61 +4603,3 @@ LIMIT 500
 
 	return deviceUUIDs, nil
 }
-
-func (ds *Datastore) GetMDMAppleOSUpdatesSettingsByHostSerial(ctx context.Context, serial string) (*fleet.AppleOSUpdateSettings, error) {
-	stmt := `
-SELECT 
-	team_id, platform 
-FROM 
-	hosts h 
-JOIN 
-	host_dep_assignments hdep ON h.id = host_id 
-WHERE 
-	hardware_serial = ? AND deleted_at IS NULL 
-LIMIT 1`
-
-	var dest struct {
-		TeamID   *uint  `db:"team_id"`
-		Platform string `db:"platform"`
-	}
-	if err := sqlx.GetContext(ctx, ds.reader(ctx), &dest, stmt, serial); err != nil {
-		return nil, ctxerr.Wrap(ctx, err, "getting team id for host")
-	}
-
-	var settings fleet.AppleOSUpdateSettings
-	if dest.TeamID == nil {
-		// use the global settings
-		ac, err := ds.AppConfig(ctx)
-		if err != nil {
-			return nil, ctxerr.Wrap(ctx, err, "getting app config for os update settings")
-		}
-		switch dest.Platform {
-		case "ios":
-			settings = ac.MDM.IOSUpdates
-		case "ipados":
-			settings = ac.MDM.IPadOSUpdates
-		case "darwin":
-			settings = ac.MDM.MacOSUpdates
-		default:
-			return nil, ctxerr.New(ctx, fmt.Sprintf("unsupported platform %s", dest.Platform))
-		}
-	} else {
-		// use the team settings
-		tm, err := ds.TeamWithoutExtras(ctx, *dest.TeamID)
-		if err != nil {
-			return nil, ctxerr.Wrap(ctx, err, "getting team os update settings")
-		}
-		switch dest.Platform {
-		case "ios":
-			settings = tm.Config.MDM.IOSUpdates
-		case "ipados":
-			settings = tm.Config.MDM.IPadOSUpdates
-		case "darwin":
-			settings = tm.Config.MDM.MacOSUpdates
-		default:
-			return nil, ctxerr.New(ctx, fmt.Sprintf("unsupported platform %s", dest.Platform))
-		}
-	}
-
-	return &settings, nil
-}
diff --git a/server/datastore/mysql/apple_mdm_test.go b/server/datastore/mysql/apple_mdm_test.go
index 53c8423809..35a8a87497 100644
--- a/server/datastore/mysql/apple_mdm_test.go
+++ b/server/datastore/mysql/apple_mdm_test.go
@@ -6001,7 +6001,6 @@ func testGetHostUUIDsWithPendingMDMAppleCommands(t *testing.T, ds *Datastore) {
 	require.NoError(t, err)
 	require.ElementsMatch(t, []string{hosts[1].UUID, hosts[2].UUID}, uuids)
 }
-
 func testHostDetailsMDMProfilesIOSIPadOS(t *testing.T, ds *Datastore) {
 	ctx := context.Background()
 
@@ -6144,174 +6143,3 @@ func testHostDetailsMDMProfilesIOSIPadOS(t *testing.T, ds *Datastore) {
 		require.Equal(t, fleet.MDMDeliveryVerified, *gotProfs[0].Status)
 	}
 }
-
-func TestGetMDMAppleOSUpdatesSettingsByHostSerial(t *testing.T) {
-	ds := CreateMySQLDS(t)
-	defer ds.Close()
-
-	keys := []string{"ios", "ipados", "macos"}
-	devicesByKey := map[string]godep.Device{
-		"ios":    {SerialNumber: "dep-serial-ios-updates", DeviceFamily: "iPhone"},
-		"ipados": {SerialNumber: "dep-serial-ipados-updates", DeviceFamily: "iPad"},
-		"macos":  {SerialNumber: "dep-serial-macos-updates", DeviceFamily: "Mac"},
-	}
-
-	getConfigSettings := func(teamID uint, key string) *fleet.AppleOSUpdateSettings {
-		var settings fleet.AppleOSUpdateSettings
-		ExecAdhocSQL(t, ds, func(q sqlx.ExtContext) error {
-			stmt := fmt.Sprintf(`SELECT json_value->'$.mdm.%s_updates' FROM app_config_json`, key)
-			if teamID > 0 {
-				stmt = fmt.Sprintf(`SELECT config->'$.mdm.%s_updates' FROM teams WHERE id = %d`, key, teamID)
-			}
-			var raw json.RawMessage
-			if err := sqlx.GetContext(context.Background(), q, &raw, stmt); err != nil {
-				return err
-			}
-			if err := json.Unmarshal(raw, &settings); err != nil {
-				return err
-			}
-			return nil
-		})
-		return &settings
-	}
-
-	setConfigSettings := func(teamID uint, key string, minVersion string) {
-		var mv *string
-		if minVersion != "" {
-			mv = &minVersion
-		}
-		ExecAdhocSQL(t, ds, func(q sqlx.ExtContext) error {
-			stmt := fmt.Sprintf(`UPDATE app_config_json SET json_value = JSON_SET(json_value, '$.mdm.%s_updates.minimum_version', ?)`, key)
-			if teamID > 0 {
-				stmt = fmt.Sprintf(`UPDATE teams SET config = JSON_SET(config, '$.mdm.%s_updates.minimum_version', ?) WHERE id = %d`, key, teamID)
-			}
-			if _, err := q.ExecContext(context.Background(), stmt, mv); err != nil {
-				return err
-			}
-			return nil
-		})
-	}
-
-	checkExpectedVersion := func(t *testing.T, gotSettings *fleet.AppleOSUpdateSettings, expectedVersion string) {
-		if expectedVersion == "" {
-			require.True(t, gotSettings.MinimumVersion.Set)
-			require.False(t, gotSettings.MinimumVersion.Valid)
-			require.Empty(t, gotSettings.MinimumVersion.Value)
-		} else {
-			require.True(t, gotSettings.MinimumVersion.Set)
-			require.True(t, gotSettings.MinimumVersion.Valid)
-			require.Equal(t, expectedVersion, gotSettings.MinimumVersion.Value)
-		}
-	}
-
-	checkDevice := func(t *testing.T, teamID uint, key string, wantVersion string) {
-		checkExpectedVersion(t, getConfigSettings(teamID, key), wantVersion)
-		gotSettings, err := ds.GetMDMAppleOSUpdatesSettingsByHostSerial(context.Background(), devicesByKey[key].SerialNumber)
-		require.NoError(t, err)
-		checkExpectedVersion(t, gotSettings, wantVersion)
-	}
-
-	// empty global settings to start
-	for _, key := range keys {
-		checkExpectedVersion(t, getConfigSettings(0, key), "")
-	}
-
-	// ingest some test devices
-	n, _, err := ds.IngestMDMAppleDevicesFromDEPSync(context.Background(), []godep.Device{devicesByKey["ios"], devicesByKey["ipados"], devicesByKey["macos"]})
-	require.NoError(t, err)
-	require.Equal(t, int64(3), n)
-	hostIDsByKey := map[string]uint{}
-	for key, device := range devicesByKey {
-		ExecAdhocSQL(t, ds, func(q sqlx.ExtContext) error {
-			var hid uint
-			err = sqlx.GetContext(context.Background(), q, &hid, "SELECT id FROM hosts WHERE hardware_serial = ?", device.SerialNumber)
-			require.NoError(t, err)
-			hostIDsByKey[key] = hid
-			return nil
-		})
-	}
-
-	// not set in global config, so devics should return empty
-	checkDevice(t, 0, "ios", "")
-	checkDevice(t, 0, "ipados", "")
-	checkDevice(t, 0, "macos", "")
-
-	// set the minimum version for ios
-	setConfigSettings(0, "ios", "17.1")
-	checkDevice(t, 0, "ios", "17.1")
-	checkDevice(t, 0, "ipados", "") // no change
-	checkDevice(t, 0, "macos", "")  // no change
-
-	// set the minimum version for ipados
-	setConfigSettings(0, "ipados", "17.2")
-	checkDevice(t, 0, "ios", "17.1") // no change
-	checkDevice(t, 0, "ipados", "17.2")
-	checkDevice(t, 0, "macos", "") // no change
-
-	// set the minimum version for macos
-	setConfigSettings(0, "macos", "14.5")
-	checkDevice(t, 0, "ios", "17.1")    // no change
-	checkDevice(t, 0, "ipados", "17.2") // no change
-	checkDevice(t, 0, "macos", "14.5")
-
-	// create a team
-	team, err := ds.NewTeam(context.Background(), &fleet.Team{Name: "team1"})
-	require.NoError(t, err)
-
-	// empty team settings to start
-	for _, key := range keys {
-		checkExpectedVersion(t, getConfigSettings(team.ID, key), "")
-	}
-
-	// transfer ios and ipados to the team
-	err = ds.AddHostsToTeam(context.Background(), &team.ID, []uint{hostIDsByKey["ios"], hostIDsByKey["ipados"]})
-	require.NoError(t, err)
-
-	checkDevice(t, team.ID, "ios", "")    // team settings are empty to start
-	checkDevice(t, team.ID, "ipados", "") // team settings are empty to start
-	checkDevice(t, 0, "macos", "14.5")    // no change, still global
-
-	setConfigSettings(team.ID, "ios", "17.3")
-	checkDevice(t, team.ID, "ios", "17.3") // team settings are set for ios
-	checkDevice(t, team.ID, "ipados", "")  // team settings are empty for ipados
-	checkDevice(t, 0, "macos", "14.5")     // no change, still global
-
-	setConfigSettings(team.ID, "ipados", "17.4")
-	checkDevice(t, team.ID, "ios", "17.3")    // no change in team settings for ios
-	checkDevice(t, team.ID, "ipados", "17.4") // team settings are set for ipados
-	checkDevice(t, 0, "macos", "14.5")        // no change, still global
-
-	// transfer macos to the team
-	err = ds.AddHostsToTeam(context.Background(), &team.ID, []uint{hostIDsByKey["macos"]})
-	require.NoError(t, err)
-	checkDevice(t, team.ID, "macos", "") // team settings are empty for macos
-
-	setConfigSettings(team.ID, "macos", "14.6")
-	checkDevice(t, team.ID, "macos", "14.6") // team settings are set for macos
-
-	// create a non-DEP host
-	_, err = ds.NewHost(context.Background(), &fleet.Host{
-		DetailUpdatedAt: time.Now(),
-		LabelUpdatedAt:  time.Now(),
-		PolicyUpdatedAt: time.Now(),
-		SeenTime:        time.Now(),
-		OsqueryHostID:   ptr.String("non-dep-osquery-id"),
-		NodeKey:         ptr.String("non-dep-node-key"),
-		UUID:            "non-dep-uuid",
-		Hostname:        "non-dep-hostname",
-		Platform:        "macos",
-		HardwareSerial:  "non-dep-serial",
-	})
-
-	// non-DEP host should return not found
-	_, err = ds.GetMDMAppleOSUpdatesSettingsByHostSerial(context.Background(), "non-dep-serial")
-	require.ErrorIs(t, err, sql.ErrNoRows)
-
-	// deleted DEP host should return not found
-	ExecAdhocSQL(t, ds, func(q sqlx.ExtContext) error {
-		_, err := q.ExecContext(context.Background(), "UPDATE host_dep_assignments SET deleted_at = NOW() WHERE host_id = ?", hostIDsByKey["macos"])
-		return err
-	})
-	_, err = ds.GetMDMAppleOSUpdatesSettingsByHostSerial(context.Background(), devicesByKey["macos"].SerialNumber)
-	require.ErrorIs(t, err, sql.ErrNoRows)
-}
diff --git a/server/fleet/apple_mdm.go b/server/fleet/apple_mdm.go
index b86434ac8e..e1cabf2533 100644
--- a/server/fleet/apple_mdm.go
+++ b/server/fleet/apple_mdm.go
@@ -841,53 +841,3 @@ type MDMAppleDDMActivation struct {
 	ServerToken string                       `json:"ServerToken"`
 	Type        string                       `json:"Type"` // "com.apple.activation.simple"
 }
-
-// MDMAppleMachineInfo is a [device's information][1] sent as part of an MDM enrollment profile request
-//
-// [1]: https://developer.apple.com/documentation/devicemanagement/machineinfo
-type MDMAppleMachineInfo struct {
-	IMEI                        string `plist:"IMEI,omitempty"`
-	Language                    string `plist:"LANGUAGE,omitempty"`
-	MDMCanRequestSoftwareUpdate bool   `plist:"MDM_CAN_REQUEST_SOFTWARE_UPDATE"`
-	MEID                        string `plist:"MEID,omitempty"`
-	OSVersion                   string `plist:"OS_VERSION"`
-	PairingToken                string `plist:"PAIRING_TOKEN,omitempty"`
-	Product                     string `plist:"PRODUCT"`
-	Serial                      string `plist:"SERIAL"`
-	SoftwareUpdateDeviceID      string `plist:"SOFTWARE_UPDATE_DEVICE_ID,omitempty"`
-	SupplementalBuildVersion    string `plist:"SUPPLEMENTAL_BUILD_VERSION,omitempty"`
-	SupplementalOSVersionExtra  string `plist:"SUPPLEMENTAL_OS_VERSION_EXTRA,omitempty"`
-	UDID                        string `plist:"UDID"`
-	Version                     string `plist:"VERSION"`
-}
-
-// MDMAppleSoftwareUpdateRequiredCode is the [code][1] specified by Apple to indicate that the device
-// needs to perform a software update before enrollment and setup can proceed.
-//
-// [1]: https://developer.apple.com/documentation/devicemanagement/errorcodesoftwareupdaterequired
-const MDMAppleSoftwareUpdateRequiredCode = "com.apple.softwareupdate.required"
-
-// MDMAppleSoftwareUpdateRequiredDetails is the [details][1] specified by Apple for the
-// required software update.
-//
-// [1]: https://developer.apple.com/documentation/devicemanagement/errorcodesoftwareupdaterequired/details
-type MDMAppleSoftwareUpdateRequiredDetails struct {
-	OSVersion    string `json:"OSVersion"`
-	BuildVersion string `json:"BuildVersion"`
-}
-
-// MDMAppleSoftwareUpdateRequired is the [error response][1] specified by Apple to indicate that the device
-// needs to perform a software update before enrollment and setup can proceed.
-//
-// [1]: https://developer.apple.com/documentation/devicemanagement/errorcodesoftwareupdaterequired
-type MDMAppleSoftwareUpdateRequired struct {
-	Code    string                                `json:"code"` // "com.apple.softwareupdate.required"
-	Details MDMAppleSoftwareUpdateRequiredDetails `json:"details"`
-}
-
-func NewMDMAppleSoftwareUpdateRequired(settings AppleOSUpdateSettings) *MDMAppleSoftwareUpdateRequired {
-	return &MDMAppleSoftwareUpdateRequired{
-		Code:    MDMAppleSoftwareUpdateRequiredCode,
-		Details: MDMAppleSoftwareUpdateRequiredDetails{OSVersion: settings.MinimumVersion.Value},
-	}
-}
diff --git a/server/fleet/datastore.go b/server/fleet/datastore.go
index cb85d7782e..a043eba04e 100644
--- a/server/fleet/datastore.go
+++ b/server/fleet/datastore.go
@@ -1288,10 +1288,6 @@ type Datastore interface {
 	// the provided value.
 	MDMAppleSetPendingDeclarationsAs(ctx context.Context, hostUUID string, status *MDMDeliveryStatus, detail string) error
 
-	// GetMDMAppleOSUpdatesSettingsByHostSerial returns applicable Apple OS update settings (if any)
-	// for the host with the given serial number. The host must be DEP assigned to Fleet.
-	GetMDMAppleOSUpdatesSettingsByHostSerial(ctx context.Context, hostSerial string) (*AppleOSUpdateSettings, error)
-
 	// InsertMDMConfigAssets inserts MDM related config assets, such as SCEP and APNS certs and keys.
 	InsertMDMConfigAssets(ctx context.Context, assets []MDMConfigAsset) error
 
diff --git a/server/fleet/service.go b/server/fleet/service.go
index be8cf36adc..5375b3d4bd 100644
--- a/server/fleet/service.go
+++ b/server/fleet/service.go
@@ -918,9 +918,6 @@ type Service interface {
 
 	GetMDMManualEnrollmentProfile(ctx context.Context) ([]byte, error)
 
-	// CheckMDMAppleEnrollmentWithMinimumOSVersion checks if the minimum OS version is met for a MDM enrollment
-	CheckMDMAppleEnrollmentWithMinimumOSVersion(ctx context.Context, m *MDMAppleMachineInfo) (*MDMAppleSoftwareUpdateRequired, error)
-
 	///////////////////////////////////////////////////////////////////////////////
 	// CronSchedulesService
 
diff --git a/server/mdm/apple/AppleIncRootCertificate.cer b/server/mdm/apple/AppleIncRootCertificate.cer
deleted file mode 100644
index 8a9ff247419dd22a07c837ba7394aeabdd0f14e2..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 1215
zcmXqLV%crb#JqR`GZP~d5E<~YacZ@Bw0-AgWMpM!Fi0}wHsEAq4rO5zW(o~96gCh9
zakzxJ9199^QWZS&lJyML3{*gZ+`_UDLFd$>lFYQs<iwK9{5%E6(vpn)qRf&?Loovp
zkUC~zUWmG&{QMFHXGa4$ab5#60}~@tBSRAdW3wo6USm@OBLhn)mo9E-VpKx*IwLCs
za}y&!gFzD`7gG}>Bg2!4D>>yS-j;I@c+L7YuChh<wb`O@pU^kmlAZT{dgpv)U#(=o
z^g_b!M*!#LddC$reqKD4Hb*5}@WSHVPo%XD%TJwG#k0h{JNk;4x$)^E{J!TzGB2K#
zEczPDceOr#_9s>5U7`KHvAiEsOqE5wMI&W5Px=0B&b;#hyADPKr1x`dQTTp(jgCTo
z!8UtFgP!fq=lSQ_e%AKXkUH`2+}53ZH{)ckownU-we|}?AHyW>jf!G=C0A{DZzqYZ
zUR*fIJvj8>dVR;uKYl+hIQwj|k87R0Pj<jG$Ic@qN!$X>j_t->jT;Rj-bAq&^<-@B
zm%W!-{69S|b&uzbviZg$sSC@eoYZAvW@KPo+{9P~43RPeK43h`@-s62XJG-R8#V)e
z5MLO?XEk63QU<ah0X`Nn77^_WneJ1{IRAag?$vWx_TAmLo+Hjc9we>IB4HrbfL%co
zBPgB8DzG#$asX{)0b&Md!c0zKWi)8~WT3^yq0I(NqwGwKVsaTJB?ZM+`ugSN<$8&r
zl&P1TpQ{gMB`4||G#-X4W-@5pCe^q(C^aWDF)uk)0hmHdGBS%5lHrLqRUxTTAu+E~
zp&+rS1js5bF3n9XR!B@vPAw>b=t%?WNd@6N1&|%Uq@D!K48=g%l*FPGg_6{wT%d-$
z6ouscyp&8(HYirePg5u@PSruNs30Gx7i1YwCER{crYR^&OfJa;IuB@ONosCtUP-YY
za{2^jO<?+DWQZ}F>7!e*{cX?eJD<yEe=56FZs31VzO}hkdZw+r`KOh$9r|>xY@8r;
zW8atJ+3zl;@Sm>qH@UIM?q|jS>=W#7YAu_)gB31Y9ND;kmOoeaf9*e!%UL;V#2vx}
z<w`DZ?^d>UUwk!R<<aYl+Y9dVyFOGu^)a{N?eneT;w$ddDVd&9y?T@XTK1JiD$0W2
z7q00qZcI2P9nGmfY10oEj}HkJ^F+Ves--J*8E1XxZ90GN^<w>>!CBEM2a=7;zgw~E
zguTASugG_6SFxo3)|+Pa2irq$E}yy6$m#cutA+FG76xsX-aFYzMM&#7zw9>OIdRD+
Xyc@&=R&`yy_2kb5PImJRrKO4hMS!&;

diff --git a/server/mdm/apple/deviceinfo.go b/server/mdm/apple/deviceinfo.go
deleted file mode 100644
index ebed273690..0000000000
--- a/server/mdm/apple/deviceinfo.go
+++ /dev/null
@@ -1,179 +0,0 @@
-// The contents of this file have been copied and modified pursuant to the following
-// license from the original source:
-// https://github.com/korylprince/dep-webview-oidc/blob/2dd846a54fed04c16dd227b8c6c31665b4d0ebd8/header/header.go
-//
-// MIT License
-//
-// Copyright (c) 2023 Kory Prince
-//
-// Permission is hereby granted, free of charge, to any person obtaining a copy
-// of this software and associated documentation files (the "Software"), to deal
-// in the Software without restriction, including without limitation the rights
-// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-// copies of the Software, and to permit persons to whom the Software is
-// furnished to do so, subject to the following conditions:
-//
-// The above copyright notice and this permission notice shall be included in all
-// copies or substantial portions of the Software.
-//
-// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-// SOFTWARE.
-
-package apple_mdm
-
-import (
-	"bytes"
-	"crypto"
-	"crypto/rsa"
-	"crypto/sha1" // nolint:gosec // See comments regarding Apple's Root CA below
-	"crypto/x509"
-	_ "embed"
-	"encoding/base64"
-	"errors"
-	"fmt"
-
-	"github.com/groob/plist"
-	"go.mozilla.org/pkcs7"
-)
-
-const DeviceInfoHeader = "x-apple-aspen-deviceinfo"
-
-// appleRootCert is https://www.apple.com/appleca/AppleIncRootCertificate.cer
-//
-//go:embed AppleIncRootCertificate.cer
-var appleRootCert []byte
-
-func newAppleRootCert() *x509.Certificate {
-	cert, err := x509.ParseCertificate(appleRootCert)
-	if err != nil {
-		panic(fmt.Errorf("could not parse cert: %w", err))
-	}
-	return cert
-}
-
-// appleRootCA is Apple's Root CA parsed to an *x509.Certificate
-var appleRootCA = newAppleRootCert()
-
-// MachineInfo is a [device's information] sent as part of an MDM enrollment profile request
-//
-// [device's information]: https://developer.apple.com/documentation/devicemanagement/machineinfo
-type MachineInfo struct {
-	IMEI                        string `plist:"IMEI,omitempty"`
-	Language                    string `plist:"LANGUAGE,omitempty"`
-	MDMCanRequestSoftwareUpdate bool   `plist:"MDM_CAN_REQUEST_SOFTWARE_UPDATE"`
-	MEID                        string `plist:"MEID,omitempty"`
-	OSVersion                   string `plist:"OS_VERSION"`
-	PairingToken                string `plist:"PAIRING_TOKEN,omitempty"`
-	Product                     string `plist:"PRODUCT"`
-	Serial                      string `plist:"SERIAL"`
-	SoftwareUpdateDeviceID      string `plist:"SOFTWARE_UPDATE_DEVICE_ID,omitempty"`
-	SupplementalBuildVersion    string `plist:"SUPPLEMENTAL_BUILD_VERSION,omitempty"`
-	SupplementalOSVersionExtra  string `plist:"SUPPLEMENTAL_OS_VERSION_EXTRA,omitempty"`
-	UDID                        string `plist:"UDID"`
-	Version                     string `plist:"VERSION"`
-}
-
-// verifyPKCS7SHA1RSA performs a manual SHA1withRSA verification, since it's deprecated in Go 1.18.
-// If verifyChain is true, the signer certificate and its chain of certificates is verified against Apple's Root CA.
-// Also note that the certificate validity time window of the signing cert is not checked, since the cert is expired.
-// This follows guidance from Apple on the expired certificate.
-func verifyPKCS7SHA1RSA(p7 *pkcs7.PKCS7, verifyChain bool) error {
-	if len(p7.Signers) == 0 {
-		return errors.New("not signed")
-	}
-
-	// get signing cert
-	issuer := p7.Signers[0].IssuerAndSerialNumber
-	var signer *x509.Certificate
-	for _, cert := range p7.Certificates {
-		if bytes.Equal(cert.RawIssuer, issuer.IssuerName.FullBytes) && cert.SerialNumber.Cmp(issuer.SerialNumber) == 0 {
-			signer = cert
-		}
-	}
-
-	// get sha1 hash of content
-	hashed := sha1.Sum(p7.Content) // nolint:gosec
-
-	// verify content signature
-	signature := p7.Signers[0].EncryptedDigest
-	if err := rsa.VerifyPKCS1v15(signer.PublicKey.(*rsa.PublicKey), crypto.SHA1, hashed[:], signature); err != nil {
-		return fmt.Errorf("signature could not be verified: %w", err)
-	}
-
-	if !verifyChain {
-		return nil
-	}
-
-	// verify chain from signer to root
-	cert := signer
-outer:
-	for {
-		// check if cert is signed by root
-		if bytes.Equal(cert.RawIssuer, appleRootCA.RawSubject) {
-			hashed := sha1.Sum(cert.RawTBSCertificate) // nolint:gosec
-			// check signature
-			if err := rsa.VerifyPKCS1v15(appleRootCA.PublicKey.(*rsa.PublicKey), crypto.SHA1, hashed[:], cert.Signature); err != nil {
-				return fmt.Errorf("could not verify root CA signature: %w", err)
-			}
-			return nil
-		}
-		for _, c := range p7.Certificates {
-			if cert == c {
-				continue
-			}
-			// check if cert is signed by intermediate cert in chain
-			if bytes.Equal(cert.RawIssuer, c.RawSubject) {
-				// check signature
-				hashed := sha1.Sum(cert.RawTBSCertificate) // nolint:gosec
-				if err := rsa.VerifyPKCS1v15(c.PublicKey.(*rsa.PublicKey), crypto.SHA1, hashed[:], cert.Signature); err != nil {
-					return fmt.Errorf("could not verify chained certificate signature: %w", err)
-				}
-				cert = c
-				continue outer
-			}
-		}
-		return errors.New("certificate root not found")
-	}
-}
-
-// ParseDeviceinfo attempts to parse the provided string, assuming it to be the base64-encoded value
-// of an x-apple-aspen-deviceinfo header. If successful, it returns the parsed *MachineInfo. If the
-// verify parameter is specified as true, the signature is also verified against Apple's Root CA and
-// an error will be returned if the signature is invalid.
-//
-// Warning: The information in this header, despite being signed by Apple PKI, shouldn't be trusted
-// for device attestation or other security purposes. See the related [documentation] and referenced
-// [article] for more information.
-//
-// [documentation]: https://github.com/korylprince/dep-webview-oidc/blob/2dd846a54fed04c16dd227b8c6c31665b4d0ebd8/docs/Architecture.md#x-apple-aspen-deviceinfo-header
-// [article]: https://duo.com/labs/research/mdm-me-maybe
-func ParseDeviceinfo(b64 string, verify bool) (*MachineInfo, error) {
-	buf, err := base64.StdEncoding.DecodeString(b64)
-	if err != nil {
-		return nil, fmt.Errorf("could not decode base64: %w", err)
-	}
-
-	p7, err := pkcs7.Parse(buf)
-	if err != nil {
-		return nil, fmt.Errorf("could not decode pkcs7: %w", err)
-	}
-
-	// verify signature and certificate chain
-	if verify {
-		if err = verifyPKCS7SHA1RSA(p7, verify); err != nil {
-			return nil, fmt.Errorf("could not verify signature: %w", err)
-		}
-	}
-
-	info := new(MachineInfo)
-	if err = plist.Unmarshal(p7.Content, info); err != nil {
-		return nil, fmt.Errorf("could not decode plist: %w", err)
-	}
-
-	return info, nil
-}
diff --git a/server/mock/datastore_mock.go b/server/mock/datastore_mock.go
index fdbd7a6238..3fdb56d30b 100644
--- a/server/mock/datastore_mock.go
+++ b/server/mock/datastore_mock.go
@@ -848,8 +848,6 @@ type MDMAppleStoreDDMStatusReportFunc func(ctx context.Context, hostUUID string,
 
 type MDMAppleSetPendingDeclarationsAsFunc func(ctx context.Context, hostUUID string, status *fleet.MDMDeliveryStatus, detail string) error
 
-type GetMDMAppleOSUpdatesSettingsByHostSerialFunc func(ctx context.Context, hostSerial string) (*fleet.AppleOSUpdateSettings, error)
-
 type InsertMDMConfigAssetsFunc func(ctx context.Context, assets []fleet.MDMConfigAsset) error
 
 type GetAllMDMConfigAssetsByNameFunc func(ctx context.Context, assetNames []fleet.MDMAssetName) (map[fleet.MDMAssetName]fleet.MDMConfigAsset, error)
@@ -2257,9 +2255,6 @@ type DataStore struct {
 	MDMAppleSetPendingDeclarationsAsFunc        MDMAppleSetPendingDeclarationsAsFunc
 	MDMAppleSetPendingDeclarationsAsFuncInvoked bool
 
-	GetMDMAppleOSUpdatesSettingsByHostSerialFunc        GetMDMAppleOSUpdatesSettingsByHostSerialFunc
-	GetMDMAppleOSUpdatesSettingsByHostSerialFuncInvoked bool
-
 	InsertMDMConfigAssetsFunc        InsertMDMConfigAssetsFunc
 	InsertMDMConfigAssetsFuncInvoked bool
 
@@ -5407,13 +5402,6 @@ func (s *DataStore) MDMAppleSetPendingDeclarationsAs(ctx context.Context, hostUU
 	return s.MDMAppleSetPendingDeclarationsAsFunc(ctx, hostUUID, status, detail)
 }
 
-func (s *DataStore) GetMDMAppleOSUpdatesSettingsByHostSerial(ctx context.Context, hostSerial string) (*fleet.AppleOSUpdateSettings, error) {
-	s.mu.Lock()
-	s.GetMDMAppleOSUpdatesSettingsByHostSerialFuncInvoked = true
-	s.mu.Unlock()
-	return s.GetMDMAppleOSUpdatesSettingsByHostSerialFunc(ctx, hostSerial)
-}
-
 func (s *DataStore) InsertMDMConfigAssets(ctx context.Context, assets []fleet.MDMConfigAsset) error {
 	s.mu.Lock()
 	s.InsertMDMConfigAssetsFuncInvoked = true
diff --git a/server/service/apple_mdm.go b/server/service/apple_mdm.go
index 2118b13670..3f1ef747a3 100644
--- a/server/service/apple_mdm.go
+++ b/server/service/apple_mdm.go
@@ -18,7 +18,6 @@ import (
 	"sync"
 	"time"
 
-	"github.com/Masterminds/semver"
 	"github.com/docker/go-units"
 	"github.com/fleetdm/fleet/v4/pkg/file"
 	"github.com/fleetdm/fleet/v4/pkg/optjson"
@@ -1288,38 +1287,6 @@ func (svc *Service) EnqueueMDMAppleCommand(
 type mdmAppleEnrollRequest struct {
 	Token               string `query:"token"`
 	EnrollmentReference string `query:"enrollment_reference,optional"`
-	MachineInfo         *fleet.MDMAppleMachineInfo
-}
-
-func (mdmAppleEnrollRequest) DecodeRequest(ctx context.Context, r *http.Request) (interface{}, error) {
-	decoded := mdmAppleEnrollRequest{}
-
-	tok := r.URL.Query().Get("token")
-	if tok == "" {
-		return nil, &fleet.BadRequestError{
-			Message: "token is required",
-		}
-	}
-	decoded.Token = tok
-
-	er := r.URL.Query().Get("enrollment_reference")
-	decoded.EnrollmentReference = er
-
-	// Parse the machine info from the request body
-	di := r.Header.Get("x-apple-aspen-deviceinfo")
-	if di != "" {
-		// extract x-apple-aspen-deviceinfo custom header from request
-		parsed, err := apple_mdm.ParseDeviceinfo(di, true)
-		if err != nil {
-			return nil, &fleet.BadRequestError{
-				Message: "unable to parse deviceinfo header",
-			}
-		}
-		p := fleet.MDMAppleMachineInfo(*parsed)
-		decoded.MachineInfo = &p
-	}
-
-	return &decoded, nil
 }
 
 func (r mdmAppleEnrollResponse) error() error { return r.Err }
@@ -1329,20 +1296,9 @@ type mdmAppleEnrollResponse struct {
 
 	// Profile field is used in hijackRender for the response.
 	Profile []byte
-
-	SoftwareUpdateRequired *fleet.MDMAppleSoftwareUpdateRequired
 }
 
 func (r mdmAppleEnrollResponse) hijackRender(ctx context.Context, w http.ResponseWriter) {
-	if r.SoftwareUpdateRequired != nil {
-		w.Header().Set("Content-Type", "application/json")
-		w.WriteHeader(http.StatusForbidden)
-		if err := json.NewEncoder(w).Encode(r.SoftwareUpdateRequired); err != nil {
-			encodeError(ctx, ctxerr.New(ctx, "failed to encode software update required"), w)
-		}
-		return
-	}
-
 	w.Header().Set("Content-Length", strconv.FormatInt(int64(len(r.Profile)), 10))
 	w.Header().Set("Content-Type", "application/x-apple-aspen-config")
 	w.Header().Set("X-Content-Type-Options", "nosniff")
@@ -1360,16 +1316,6 @@ func (r mdmAppleEnrollResponse) hijackRender(ctx context.Context, w http.Respons
 func mdmAppleEnrollEndpoint(ctx context.Context, request interface{}, svc fleet.Service) (errorer, error) {
 	req := request.(*mdmAppleEnrollRequest)
 
-	sur, err := svc.CheckMDMAppleEnrollmentWithMinimumOSVersion(ctx, req.MachineInfo)
-	if err != nil {
-		return mdmAppleEnrollResponse{Err: err}, nil
-	}
-	if sur != nil {
-		return mdmAppleEnrollResponse{
-			SoftwareUpdateRequired: sur,
-		}, nil
-	}
-
 	profile, err := svc.GetMDMAppleEnrollmentProfileByToken(ctx, req.Token, req.EnrollmentReference)
 	if err != nil {
 		return mdmAppleEnrollResponse{Err: err}, nil
@@ -1430,62 +1376,6 @@ func (svc *Service) GetMDMAppleEnrollmentProfileByToken(ctx context.Context, tok
 	return signed, nil
 }
 
-func (svc *Service) CheckMDMAppleEnrollmentWithMinimumOSVersion(ctx context.Context, m *fleet.MDMAppleMachineInfo) (*fleet.MDMAppleSoftwareUpdateRequired, error) {
-	// skipauth: The enroll profile endpoint is unauthenticated.
-	svc.authz.SkipAuthorization(ctx)
-
-	if m == nil {
-		level.Info(svc.logger).Log("msg", "no machine info, skipping os version check")
-		return nil, nil
-	}
-
-	if !m.MDMCanRequestSoftwareUpdate {
-		level.Info(svc.logger).Log("msg", "mdm cannot request software update, skipping os version check", "machine_info", *m)
-		return nil, nil
-	}
-
-	// NOTE: Under the hood, the datastore is joining host_dep_assignments to the hosts table to
-	// look up DEP hosts by serial number. It grabs the team id and platform from the
-	// hosts table. Then it uses the team id to get either the global config or team config.
-	// Finally, it uses the platform to get os updates settings from the config for
-	// one of ios, ipados, or darwin, as applicable. There's a lot of assumptions going on here, not
-	// least of which is that the platform is correct in the hosts table. If the platform is wrong,
-	// we'll end up with a meaningless comparison of unrelated versions. We could potentially add
-	// some cross-check against the machine info to ensure that the platform of the host aligns with
-	// what we expect from the machine info. But that would involve work to derive the platform from
-	// the machine info (presumably from the product name, but that's not a 1:1 mapping).
-	settings, err := svc.ds.GetMDMAppleOSUpdatesSettingsByHostSerial(ctx, m.Serial)
-	if err != nil {
-		if fleet.IsNotFound(err) {
-			level.Info(svc.logger).Log("msg", "settings not found, skipping os version check", "machine_info", *m)
-			return nil, nil
-		}
-		return nil, ctxerr.Wrap(ctx, err, "get os updates settings")
-	}
-
-	// TODO: confirm what this check should do
-	if !settings.MinimumVersion.Set || !settings.MinimumVersion.Valid || settings.MinimumVersion.Value == "" {
-		level.Info(svc.logger).Log("msg", "settings not set, skipping os version check", "machine_info", *m, "settings", settings)
-		return nil, nil
-	}
-
-	want, err := semver.NewVersion(settings.MinimumVersion.Value)
-	if err != nil {
-		return nil, ctxerr.Wrap(ctx, err, "parsing minimum version")
-	}
-
-	got, err := semver.NewVersion(m.OSVersion)
-	if err != nil {
-		return nil, ctxerr.Wrap(ctx, err, "parsing device os version")
-	}
-
-	if got.LessThan(want) {
-		return fleet.NewMDMAppleSoftwareUpdateRequired(*settings), nil
-	}
-
-	return nil, nil
-}
-
 func (svc *Service) mdmPushCertTopic(ctx context.Context) (string, error) {
 	assets, err := svc.ds.GetAllMDMConfigAssetsByName(ctx, []fleet.MDMAssetName{
 		fleet.MDMAssetAPNSCert,
diff --git a/server/service/apple_mdm_test.go b/server/service/apple_mdm_test.go
index 4c959a7649..545de31a0a 100644
--- a/server/service/apple_mdm_test.go
+++ b/server/service/apple_mdm_test.go
@@ -24,7 +24,6 @@ import (
 	"testing"
 	"time"
 
-	"github.com/fleetdm/fleet/v4/pkg/optjson"
 	"github.com/fleetdm/fleet/v4/server/authz"
 	"github.com/fleetdm/fleet/v4/server/config"
 	"github.com/fleetdm/fleet/v4/server/contexts/license"
@@ -3372,80 +3371,3 @@ func TestUnmarshalAppList(t *testing.T) {
 	require.NoError(t, err)
 	assert.ElementsMatch(t, expectedSoftware, software)
 }
-
-func TestCheckMDMAppleEnrollmentWithMinimumOSVersion(t *testing.T) {
-	svc, ctx, ds := setupAppleMDMService(t, &fleet.LicenseInfo{Tier: fleet.TierPremium})
-
-	ds.GetMDMAppleOSUpdatesSettingsByHostSerialFunc = func(ctx context.Context, serialNumber string) (*fleet.AppleOSUpdateSettings, error) {
-		return &fleet.AppleOSUpdateSettings{
-			MinimumVersion: optjson.SetString("14.2"),
-		}, nil
-	}
-
-	testCases := []struct {
-		name                        string
-		deviceOSVersion             string
-		mdmCanRequestSoftwareUpdate bool
-		wantUpdateRequired          string
-	}{
-		{
-			name:                        "OS version is greater than minimum",
-			deviceOSVersion:             "15.0",
-			mdmCanRequestSoftwareUpdate: true,
-			wantUpdateRequired:          "",
-		},
-		{
-			name:                        "OS version is equal to minimum",
-			deviceOSVersion:             "14.2",
-			mdmCanRequestSoftwareUpdate: true,
-			wantUpdateRequired:          "",
-		},
-		{
-			name:                        "OS version is less than minimum",
-			deviceOSVersion:             "14.0.2",
-			mdmCanRequestSoftwareUpdate: true,
-			wantUpdateRequired:          "14.2",
-		},
-		{
-			name:                        "OS version is less than minimum but MDM cannot request software update",
-			deviceOSVersion:             "14.0.2",
-			mdmCanRequestSoftwareUpdate: false,
-			wantUpdateRequired:          "",
-		},
-	}
-
-	for _, tt := range testCases {
-		t.Run(tt.name, func(t *testing.T) {
-			sur, err := svc.CheckMDMAppleEnrollmentWithMinimumOSVersion(ctx, &fleet.MDMAppleMachineInfo{OSVersion: tt.deviceOSVersion, MDMCanRequestSoftwareUpdate: tt.mdmCanRequestSoftwareUpdate})
-			require.NoError(t, err)
-			if tt.wantUpdateRequired == "" {
-				require.Nil(t, sur)
-			} else {
-				require.Equal(t, &fleet.MDMAppleSoftwareUpdateRequired{
-					Code: fleet.MDMAppleSoftwareUpdateRequiredCode,
-					Details: fleet.MDMAppleSoftwareUpdateRequiredDetails{
-						OSVersion: tt.wantUpdateRequired,
-					},
-				}, sur)
-			}
-		})
-	}
-
-	t.Run("error getting OS update settings", func(t *testing.T) {
-		ds.GetMDMAppleOSUpdatesSettingsByHostSerialFunc = func(ctx context.Context, serialNumber string) (*fleet.AppleOSUpdateSettings, error) {
-			return nil, newNotFoundError()
-		}
-
-		sur, err := svc.CheckMDMAppleEnrollmentWithMinimumOSVersion(ctx, &fleet.MDMAppleMachineInfo{OSVersion: "14.0.2", MDMCanRequestSoftwareUpdate: true})
-		require.NoError(t, err)
-		require.Nil(t, sur)
-
-		ds.GetMDMAppleOSUpdatesSettingsByHostSerialFunc = func(ctx context.Context, serialNumber string) (*fleet.AppleOSUpdateSettings, error) {
-			return nil, errors.New("error")
-		}
-
-		sur, err = svc.CheckMDMAppleEnrollmentWithMinimumOSVersion(ctx, &fleet.MDMAppleMachineInfo{OSVersion: "14.0.2", MDMCanRequestSoftwareUpdate: true})
-		require.Error(t, err)
-		require.Nil(t, sur)
-	})
-}

From d19e5c4a9a6ef3c77210ac86a48cc3dc4d362b66 Mon Sep 17 00:00:00 2001
From: jacobshandling <61553566+jacobshandling@users.noreply.github.com>
Date: Wed, 31 Jul 2024 10:02:16 -0700
Subject: [PATCH 04/88] =?UTF-8?q?=20UI=20=E2=80=93=20Fix=20hosts=20table?=
 =?UTF-8?q?=20pagination=20(#20853)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

## #20604
<img width="1511" alt="Screenshot 2024-07-30 at 11 50 20 AM"
src="https://github.com/user-attachments/assets/c96ff108-4c3b-436a-8d4b-c3e2099264dd">

<img width="1511" alt="Screenshot 2024-07-30 at 11 50 48 AM"
src="https://github.com/user-attachments/assets/63a4596a-dd12-41e3-8c83-f196ac3b3a40">

- [x] Changes file added for user-visible changes in `changes/`
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
---
 changes/20604-hosts-page-pagination                      | 1 +
 frontend/pages/hosts/ManageHostsPage/HostsPageConfig.tsx | 2 +-
 frontend/pages/hosts/ManageHostsPage/ManageHostsPage.tsx | 6 +++---
 3 files changed, 5 insertions(+), 4 deletions(-)
 create mode 100644 changes/20604-hosts-page-pagination

diff --git a/changes/20604-hosts-page-pagination b/changes/20604-hosts-page-pagination
new file mode 100644
index 0000000000..c1f68d5f94
--- /dev/null
+++ b/changes/20604-hosts-page-pagination
@@ -0,0 +1 @@
+* Fix a bug where hosts page would sometimes allow excess pagination
\ No newline at end of file
diff --git a/frontend/pages/hosts/ManageHostsPage/HostsPageConfig.tsx b/frontend/pages/hosts/ManageHostsPage/HostsPageConfig.tsx
index 114b537d3b..910f4813f3 100644
--- a/frontend/pages/hosts/ManageHostsPage/HostsPageConfig.tsx
+++ b/frontend/pages/hosts/ManageHostsPage/HostsPageConfig.tsx
@@ -55,7 +55,7 @@ export const LABEL_SLUG_PREFIX = "labels/";
 
 export const DEFAULT_SORT_HEADER = "display_name";
 export const DEFAULT_SORT_DIRECTION = "asc";
-export const DEFAULT_PAGE_SIZE = 20;
+export const DEFAULT_PAGE_SIZE = 50;
 export const DEFAULT_PAGE_INDEX = 0;
 
 export const getHostSelectStatuses = (isSandboxMode = false) => {
diff --git a/frontend/pages/hosts/ManageHostsPage/ManageHostsPage.tsx b/frontend/pages/hosts/ManageHostsPage/ManageHostsPage.tsx
index e5bd75fd0e..71f2386c58 100644
--- a/frontend/pages/hosts/ManageHostsPage/ManageHostsPage.tsx
+++ b/frontend/pages/hosts/ManageHostsPage/ManageHostsPage.tsx
@@ -405,8 +405,8 @@ const ManageHostsPage = ({
         osName,
         osVersion,
         vulnerability,
-        page: tableQueryData ? tableQueryData.pageIndex : 0,
-        perPage: tableQueryData ? tableQueryData.pageSize : 50,
+        page: tableQueryData ? tableQueryData.pageIndex : DEFAULT_PAGE_INDEX,
+        perPage: tableQueryData ? tableQueryData.pageSize : DEFAULT_PAGE_SIZE,
         device_mapping: true,
         osSettings: osSettingsStatus,
         diskEncryptionStatus,
@@ -1578,7 +1578,7 @@ const ManageHostsPage = ({
         }
         defaultPageIndex={page || DEFAULT_PAGE_INDEX}
         defaultSearchQuery={searchQuery}
-        pageSize={50}
+        pageSize={DEFAULT_PAGE_SIZE}
         additionalQueries={JSON.stringify(selectedFilters)}
         inputPlaceHolder={HOSTS_SEARCH_BOX_PLACEHOLDER}
         actionButton={{

From 134534a9d88afb202e09d323ea10ae34b7cda719 Mon Sep 17 00:00:00 2001
From: Martin Angers <martin.n.angers@gmail.com>
Date: Wed, 31 Jul 2024 13:56:25 -0400
Subject: [PATCH 05/88] Special-case the name of the .exe installer for Notion
 as it uses non-standard naming (#20881)

---
 changes/20440-Notion-exe-installer-name |  1 +
 pkg/file/file_test.go                   | 13 +++++-----
 pkg/file/pe.go                          | 32 +++++++++++++++++++++++--
 3 files changed, 38 insertions(+), 8 deletions(-)
 create mode 100644 changes/20440-Notion-exe-installer-name

diff --git a/changes/20440-Notion-exe-installer-name b/changes/20440-Notion-exe-installer-name
new file mode 100644
index 0000000000..bc3996cc5d
--- /dev/null
+++ b/changes/20440-Notion-exe-installer-name
@@ -0,0 +1 @@
+* Added a special-case to properly name the Notion .exe Windows installer the same as how it will be reported by osquery post-install.
diff --git a/pkg/file/file_test.go b/pkg/file/file_test.go
index ceccdc9f6c..73d1ad5573 100644
--- a/pkg/file/file_test.go
+++ b/pkg/file/file_test.go
@@ -104,10 +104,11 @@ func TestExists(t *testing.T) {
 //
 // That is, it breaks the file name at the dollar sign and the first part is
 // the expected name, the second is the expected version, the third is the
-// hex-encoded hash. Note that by default, files in testdata/installers are NOT
-// included in git, so the test files must be added manually (for size and
-// licenses considerations). Why the dollar sign? Because dots, dashes and
-// underlines are more likely to be part of the name or version.
+// hex-encoded hash and the fourth is the bundle identifier. Note that by
+// default, files in testdata/installers are NOT included in git, so the test
+// files must be added manually (for size and licenses considerations). Why the
+// dollar sign? Because dots, dashes and underlines are more likely to be part
+// of the name or version.
 func TestExtractInstallerMetadata(t *testing.T) {
 	dents, err := os.ReadDir(filepath.Join("testdata", "installers"))
 	if err != nil {
@@ -120,8 +121,8 @@ func TestExtractInstallerMetadata(t *testing.T) {
 		}
 		t.Run(dent.Name(), func(t *testing.T) {
 			parts := strings.Split(strings.TrimSuffix(dent.Name(), filepath.Ext(dent.Name())), "$")
-			if len(parts) < 3 {
-				t.Fatalf("invalid filename, expected at least 3 sections, got %d: %s", len(parts), dent.Name())
+			if len(parts) < 4 {
+				t.Fatalf("invalid filename, expected at least 4 sections, got %d: %s", len(parts), dent.Name())
 			}
 			wantName, wantVersion, wantHash, wantBundleIdentifier := parts[0], parts[1], parts[2], parts[3]
 			wantExtension := strings.TrimPrefix(filepath.Ext(dent.Name()), ".")
diff --git a/pkg/file/pe.go b/pkg/file/pe.go
index 1a436665e9..1b0e053c09 100644
--- a/pkg/file/pe.go
+++ b/pkg/file/pe.go
@@ -50,9 +50,37 @@ func ExtractPEMetadata(r io.Reader) (*InstallerMetadata, error) {
 	if err != nil {
 		return nil, fmt.Errorf("error parsing PE version resources: %w", err)
 	}
-	return &InstallerMetadata{
+	return applySpecialCases(&InstallerMetadata{
 		Name:    strings.TrimSpace(v["ProductName"]),
 		Version: strings.TrimSpace(v["ProductVersion"]),
 		SHASum:  h.Sum(nil),
-	}, nil
+	}, v), nil
+}
+
+var exeSpecialCases = map[string]func(*InstallerMetadata, map[string]string) *InstallerMetadata{
+	"Notion": func(meta *InstallerMetadata, resources map[string]string) *InstallerMetadata {
+		if meta.Version != "" {
+			meta.Name = meta.Name + " " + meta.Version
+		}
+		return meta
+	},
+}
+
+// Unlike .exe files that are the software itself (and just need to be copied
+// over to the host), and unlike standard installer formats like .msi where the
+// metadata defines the name under which the software will be installed, .exe
+// installers may do pretty much anything they want when installing the
+// software, regardless of what the .exe metadata contains.
+//
+// For example, the Notion .exe installer installs the app under a name like
+// "Notion 3.11.1", and not just "Notion". There's no way to detect that by
+// parsing the installer's metadata, so we need to apply some special cases at
+// least for the most popular apps that use unusual naming.
+//
+// See https://github.com/fleetdm/fleet/issues/20440#issuecomment-2260500661
+func applySpecialCases(meta *InstallerMetadata, resources map[string]string) *InstallerMetadata {
+	if fn := exeSpecialCases[meta.Name]; fn != nil {
+		return fn(meta, resources)
+	}
+	return meta
 }

From 672da9049d24c766068eef3a3c0d0f9341c2ba86 Mon Sep 17 00:00:00 2001
From: jacobshandling <61553566+jacobshandling@users.noreply.github.com>
Date: Wed, 31 Jul 2024 11:06:02 -0700
Subject: [PATCH 06/88] UI - improve comment syntax for better VSCode hints
 (#20864)

## https://github.com/fleetdm/fleet/pull/20850#discussion_r1697497788

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
---
 frontend/components/DataError/DataError.tsx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/frontend/components/DataError/DataError.tsx b/frontend/components/DataError/DataError.tsx
index 1b0fbf1d10..7b2cfd6d55 100644
--- a/frontend/components/DataError/DataError.tsx
+++ b/frontend/components/DataError/DataError.tsx
@@ -15,7 +15,7 @@ interface IDataErrorProps {
   children?: React.ReactNode;
   card?: boolean;
   className?: string;
-  // flag to use the updated DataError design
+  /** Flag to use the updated DataError design */
   useNew?: boolean;
 }
 

From d16f0e085e83a933e266ba84c83a6a044480629c Mon Sep 17 00:00:00 2001
From: Luke Heath <luke@fleetdm.com>
Date: Wed, 31 Jul 2024 11:26:41 -0700
Subject: [PATCH 07/88] Add isExperimental property to features table (#20775)

---
 handbook/company/pricing-features-table.yml | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/handbook/company/pricing-features-table.yml b/handbook/company/pricing-features-table.yml
index ccf0f918fe..f29ddac991 100644
--- a/handbook/company/pricing-features-table.yml
+++ b/handbook/company/pricing-features-table.yml
@@ -226,6 +226,7 @@
   tier: Premium
   jamfProHasFeature: appleOnly
   jamfProtectHasFeature: no
+  isExperimental: yes
   usualDepartment: IT
   productCategories: [Device management]
   pricingTableCategories: [Device management]
@@ -247,6 +248,7 @@
   tier: Premium
   jamfProHasFeature: yes
   jamfProtectHasFeature: no
+  isExperimental: yes
   usualDepartment: IT
   productCategories: [Device management]
   pricingTableCategories: [Device management]
@@ -689,6 +691,7 @@
   tier: Premium
   jamfProHasFeature: no
   jamfProtectHasFeature: no
+  isExperimental: yes
   productCategories: [Endpoint operations]
   pricingTableCategories: [Endpoint operations]
 #
@@ -1477,3 +1480,18 @@
   usualDepartment: IT
   productCategories: [Device management]
   pricingTableCategories: [Integrations]
+#
+#  ╔╦╗╦═╗╦╔═╗╔═╗╔═╗╦═╗  ╔═╗  ╦ ╦╔═╗╦═╗╦╔═╔═╗╦  ╔═╗╦ ╦  ╔╗ ╔═╗╔═╗╔═╗╔╦╗  ╔═╗╔╗╔  ╔═╗  
+#   ║ ╠╦╝║║ ╦║ ╦║╣ ╠╦╝  ╠═╣  ║║║║ ║╠╦╝╠╩╗╠╣ ║  ║ ║║║║  ╠╩╗╠═╣╚═╗║╣  ║║  ║ ║║║║  ╠═╣  
+#   ╩ ╩╚═╩╚═╝╚═╝╚═╝╩╚═  ╩ ╩  ╚╩╝╚═╝╩╚═╩ ╩╚  ╩═╝╚═╝╚╩╝  ╚═╝╩ ╩╚═╝╚═╝═╩╝  ╚═╝╝╚╝  ╩ ╩  
+#  ╔═╗╔═╗╦╦  ╦╔╗╔╔═╗  ╔═╗╔═╗╦  ╦╔═╗╦ ╦                                               
+#  ╠╣ ╠═╣║║  ║║║║║ ╦  ╠═╝║ ║║  ║║  ╚╦╝                                               
+#  ╚  ╩ ╩╩╩═╝╩╝╚╝╚═╝  ╩  ╚═╝╩═╝╩╚═╝ ╩                                                
+- industryName: Trigger a workflow based on a failing policy
+  documentationUrl: https://fleetdm.com/docs/using-fleet/automations#policy-automations
+  productCategories: [Endpoint operations,Device management]
+  pricingTableCategories: [Integrations]
+  usualDepartment: IT
+  tier: Free
+  jamfProHasFeature: yes
+  jamfProtectHasFeature: no

From fa529e47f9d35b35b26b6e2e3be274752641e6b0 Mon Sep 17 00:00:00 2001
From: Eric <eashaw@sailsjs.com>
Date: Wed, 31 Jul 2024 13:26:54 -0500
Subject: [PATCH 08/88] Website: add Segment analytics (#20867)

Related to: https://github.com/fleetdm/confidential/issues/7339

Changes:
- Added a script tag for segment
- Added segment tracking for contact form submissions, signups, and swag
requests.
---
 website/assets/.eslintrc                      |  1 +
 website/assets/js/pages/contact.page.js       |  6 +++++
 .../js/pages/customers/new-license.page.js    | 26 ++++++++++++++++++-
 .../js/pages/docs/basic-documentation.page.js |  3 +++
 .../assets/js/pages/entrance/login.page.js    |  4 +--
 .../assets/js/pages/entrance/signup.page.js   |  4 +--
 website/assets/js/pages/start.page.js         | 25 ++++++++++++++++++
 website/views/layouts/layout.ejs              | 13 ++++++----
 8 files changed, 72 insertions(+), 10 deletions(-)

diff --git a/website/assets/.eslintrc b/website/assets/.eslintrc
index 96d18f3427..6cb581fa72 100644
--- a/website/assets/.eslintrc
+++ b/website/assets/.eslintrc
@@ -49,6 +49,7 @@
     "docsearch": true,
     "Chart": true,
     "gtag": true,
+    "analytics": true,
     // ...etc.
     // - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
 
diff --git a/website/assets/js/pages/contact.page.js b/website/assets/js/pages/contact.page.js
index 4982f49cf8..36571b672a 100644
--- a/website/assets/js/pages/contact.page.js
+++ b/website/assets/js/pages/contact.page.js
@@ -86,6 +86,9 @@ parasails.registerPage('contact', {
       if(typeof window.lintrk !== 'undefined') {
         window.lintrk('track', { conversion_id: 18587089 });// eslint-disable-line camelcase
       }
+      if(typeof analytics !== 'undefined'){
+        analytics.track('fleet_website__contact_forms');
+      }
       // Show the success message.
       this.cloudSuccess = true;
 
@@ -98,6 +101,9 @@ parasails.registerPage('contact', {
       if(typeof window.lintrk !== 'undefined') {
         window.lintrk('track', { conversion_id: 18587089 });// eslint-disable-line camelcase
       }
+      if(typeof analytics !== 'undefined'){
+        analytics.track('fleet_website__contact_forms');
+      }
       if(this.formData.numberOfHosts > 700){
         this.goto(`https://calendly.com/fleetdm/talk-to-us?email=${encodeURIComponent(this.formData.emailAddress)}&name=${encodeURIComponent(this.formData.firstName+' '+this.formData.lastName)}`);
       } else {
diff --git a/website/assets/js/pages/customers/new-license.page.js b/website/assets/js/pages/customers/new-license.page.js
index 6917592f51..3f1b582300 100644
--- a/website/assets/js/pages/customers/new-license.page.js
+++ b/website/assets/js/pages/customers/new-license.page.js
@@ -39,7 +39,31 @@ parasails.registerPage('new-license', {
   //  ║  ║╠╣ ║╣ ║  ╚╦╝║  ║  ║╣
   //  ╩═╝╩╚  ╚═╝╚═╝ ╩ ╚═╝╩═╝╚═╝
   beforeMount: function() {
-    //…
+    if(window.location.hash) {
+      if(typeof analytics !== 'undefined') {
+        if(window.location.hash === '#signup') {
+          analytics.identify(this.me.id, {
+            email: this.me.emailAddress,
+            firstName: this.me.firstName,
+            lastName: this.me.lastName,
+            company: this.me.organization,
+            primaryBuyingSituation: this.me.primaryBuyingSituation,
+            psychologicalStage: this.me.psychologicalStage,
+          });
+          analytics.track('fleet_website__sign_up');
+        } else if(window.location.hash === '#login') {
+          analytics.identify(this.me.id, {
+            email: this.me.emailAddress,
+            firstName: this.me.firstName,
+            lastName: this.me.lastName,
+            company: this.me.organization,
+            primaryBuyingSituation: this.me.primaryBuyingSituation,
+            psychologicalStage: this.me.psychologicalStage,
+          });
+        }
+      }
+      window.location.hash = '';
+    }
   },
   mounted: async function() {
 
diff --git a/website/assets/js/pages/docs/basic-documentation.page.js b/website/assets/js/pages/docs/basic-documentation.page.js
index 2c40e629da..d09d42f605 100644
--- a/website/assets/js/pages/docs/basic-documentation.page.js
+++ b/website/assets/js/pages/docs/basic-documentation.page.js
@@ -229,6 +229,9 @@ parasails.registerPage('basic-documentation', {
       if(typeof window.lintrk !== 'undefined') {
         window.lintrk('track', { conversion_id: 18587105 });// eslint-disable-line camelcase
       }
+      if(typeof analytics !== 'undefined'){
+        analytics.track('fleet_website__swag_request');
+      }
       this.goto('https://kqphpqst851.typeform.com/to/ZfA3sOu0');
     },
 
diff --git a/website/assets/js/pages/entrance/login.page.js b/website/assets/js/pages/entrance/login.page.js
index a506effa58..a18738b75d 100644
--- a/website/assets/js/pages/entrance/login.page.js
+++ b/website/assets/js/pages/entrance/login.page.js
@@ -27,7 +27,7 @@ parasails.registerPage('login', {
     showCustomerLogin: true,
     // For redirecting users coming from the "Get your license" link to the license dispenser.
     registerSlug: '/register',
-    pageToRedirectToAfterLogin: '/start',
+    pageToRedirectToAfterLogin: '/start#login',
   },
 
   //  ╦  ╦╔═╗╔═╗╔═╗╦ ╦╔═╗╦  ╔═╗
@@ -41,7 +41,7 @@ parasails.registerPage('login', {
     // If we're redirecting this user to the license dispenser after they log in, modify the link to the /register page and the pageToRedirectToAfterLogin.
     if(window.location.hash && window.location.hash === '#purchaseLicense'){
       this.registerSlug = '/register#purchaseLicense';
-      this.pageToRedirectToAfterLogin = '/new-license';
+      this.pageToRedirectToAfterLogin = '/new-license#login';
       window.location.hash = '';
     }
   },
diff --git a/website/assets/js/pages/entrance/signup.page.js b/website/assets/js/pages/entrance/signup.page.js
index 6cad63f897..d749af7b30 100644
--- a/website/assets/js/pages/entrance/signup.page.js
+++ b/website/assets/js/pages/entrance/signup.page.js
@@ -26,7 +26,7 @@ parasails.registerPage('signup', {
     showFullForm: false,
     // For redirecting users coming from the "Get your license" link to the license dispenser.
     loginSlug: '/login',
-    pageToRedirectToAfterRegistration: '/start',
+    pageToRedirectToAfterRegistration: '/start#signup',
     primaryBuyingSituation: undefined
   },
 
@@ -37,7 +37,7 @@ parasails.registerPage('signup', {
     // If we're redirecting this user to the license dispenser after they sign up, modify the link to the login page and the pageToRedirectToAfterRegistration
     if(window.location.hash && window.location.hash === '#purchaseLicense'){
       this.loginSlug = '/login#purchaseLicense';
-      this.pageToRedirectToAfterRegistration = '/new-license';
+      this.pageToRedirectToAfterRegistration = '/new-license#signup';
       window.location.hash = '';
     }
   },
diff --git a/website/assets/js/pages/start.page.js b/website/assets/js/pages/start.page.js
index ac31cb69d4..191a445f99 100644
--- a/website/assets/js/pages/start.page.js
+++ b/website/assets/js/pages/start.page.js
@@ -87,6 +87,31 @@ parasails.registerPage('start', {
     if(this.primaryBuyingSituation && _.isEmpty(this.formData['what-are-you-using-fleet-for'])){
       this.formData['what-are-you-using-fleet-for'] = {primaryBuyingSituation: this.primaryBuyingSituation};
     }
+    if(window.location.hash) {
+      if(typeof analytics !== 'undefined') {
+        if(window.location.hash === '#signup') {
+          analytics.identify(this.me.id, {
+            email: this.me.emailAddress,
+            firstName: this.me.firstName,
+            lastName: this.me.lastName,
+            company: this.me.organization,
+            primaryBuyingSituation: this.me.primaryBuyingSituation,
+            psychologicalStage: this.me.psychologicalStage,
+          });
+          analytics.track('fleet_website__sign_up');
+        } else if(window.location.hash === '#login') {
+          analytics.identify(this.me.id, {
+            email: this.me.emailAddress,
+            firstName: this.me.firstName,
+            lastName: this.me.lastName,
+            company: this.me.organization,
+            primaryBuyingSituation: this.me.primaryBuyingSituation,
+            psychologicalStage: this.me.psychologicalStage,
+          });
+        }
+      }
+      window.location.hash = '';
+    }
   },
   mounted: async function() {
     //…
diff --git a/website/views/layouts/layout.ejs b/website/views/layouts/layout.ejs
index 9b090d48db..ed4ebaf20b 100644
--- a/website/views/layouts/layout.ejs
+++ b/website/views/layouts/layout.ejs
@@ -61,6 +61,13 @@
     <script>
       window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'G-JC3DRNY1GV');
     </script>
+    <%/* Segment */%>
+    <script>
+      !function(){var i="analytics",analytics=window[i]=window[i]||[];if(!analytics.initialize)if(analytics.invoked)window.console&&console.error&&console.error("Segment snippet included twice.");else{analytics.invoked=!0;analytics.methods=["trackSubmit","trackClick","trackLink","trackForm","pageview","identify","reset","group","track","ready","alias","debug","page","screen","once","off","on","addSourceMiddleware","addIntegrationMiddleware","setAnonymousId","addDestinationMiddleware","register"];analytics.factory=function(e){return function(){if(window[i].initialized)return window[i][e].apply(window[i],arguments);var n=Array.prototype.slice.call(arguments);if(["track","screen","alias","group","page","identify"].indexOf(e)>-1){var c=document.querySelector("link[rel='canonical']");n.push({__t:"bpc",c:c&&c.getAttribute("href")||void 0,p:location.pathname,u:location.href,s:location.search,t:document.title,r:document.referrer})}n.unshift(e);analytics.push(n);return analytics}};for(var n=0;n<analytics.methods.length;n++){var key=analytics.methods[n];analytics[key]=analytics.factory(key)}analytics.load=function(key,n){var t=document.createElement("script");t.type="text/javascript";t.async=!0;t.setAttribute("data-global-segment-analytics-key",i);t.src="https://cdn.segment.com/analytics.js/v1/" + key + "/analytics.min.js";var r=document.getElementsByTagName("script")[0];r.parentNode.insertBefore(t,r);analytics._loadOptions=n};analytics._writeKey="T79nqv6Ow6Bjov5LZPxXqsuhM0YOHARv";;analytics.SNIPPET_VERSION="5.2.0";
+      analytics.load("T79nqv6Ow6Bjov5LZPxXqsuhM0YOHARv");
+      analytics.page();
+      }}();
+    </script>
     <% /* Meta pixel code */ %>
     <script>
       !function(f,b,e,v,n,t,s)
@@ -439,11 +446,6 @@
     <%/* Stripe.js */%>
     <script src="https://js.stripe.com/v3/"></script>
 
-    <% /* Delete the global `self` to help avoid client-side bugs.
-    (see https://developer.mozilla.org/en-US/docs/Web/API/Window/self) */ %>
-    <script>delete window.self;</script>
-
-
     <%/* bowser.js (for browser detection) -- included inline to avoid issues with minification that could affect the unsupported browser overlay */%>
     <script>!function(e,i,s){if("undefined"!=typeof module&&module.exports)module.exports=s();else if("function"==typeof define&&define.amd)define(i,s);else e[i]=s()}(this,"bowser",function(){var e=true;function i(i){function s(e){var s=i.match(e);return s&&s.length>1&&s[1]||""}function o(e){var s=i.match(e);return s&&s.length>1&&s[2]||""}var r=s(/(ipod|iphone|ipad)/i).toLowerCase(),n=/like android/i.test(i),t=!n&&/android/i.test(i),a=/nexus\s*[0-6]\s*/i.test(i),d=!a&&/nexus\s*[0-9]+/i.test(i),l=/CrOS/.test(i),f=/silk/i.test(i),m=/sailfish/i.test(i),v=/tizen/i.test(i),p=/(web|hpw)os/i.test(i),c=/windows phone/i.test(i),u=/SamsungBrowser/i.test(i),h=!c&&/windows/i.test(i),w=!r&&!f&&/macintosh/i.test(i),b=!t&&!m&&!v&&!p&&/linux/i.test(i),g=o(/edg([ea]|ios)\/(\d+(\.\d+)?)/i),k=s(/version\/(\d+(\.\d+)?)/i),x=/tablet/i.test(i)&&!/tablet pc/i.test(i),y=!x&&/[^-]mobi/i.test(i),S=/xbox/i.test(i),B;if(/opera/i.test(i))B={name:"Opera",opera:e,version:k||s(/(?:opera|opr|opios)[\s\/](\d+(\.\d+)?)/i)};else if(/opr\/|opios/i.test(i))B={name:"Opera",opera:e,version:s(/(?:opr|opios)[\s\/](\d+(\.\d+)?)/i)||k};else if(/SamsungBrowser/i.test(i))B={name:"Samsung Internet for Android",samsungBrowser:e,version:k||s(/(?:SamsungBrowser)[\s\/](\d+(\.\d+)?)/i)};else if(/coast/i.test(i))B={name:"Opera Coast",coast:e,version:k||s(/(?:coast)[\s\/](\d+(\.\d+)?)/i)};else if(/yabrowser/i.test(i))B={name:"Yandex Browser",yandexbrowser:e,version:k||s(/(?:yabrowser)[\s\/](\d+(\.\d+)?)/i)};else if(/ucbrowser/i.test(i))B={name:"UC Browser",ucbrowser:e,version:s(/(?:ucbrowser)[\s\/](\d+(?:\.\d+)+)/i)};else if(/mxios/i.test(i))B={name:"Maxthon",maxthon:e,version:s(/(?:mxios)[\s\/](\d+(?:\.\d+)+)/i)};else if(/epiphany/i.test(i))B={name:"Epiphany",epiphany:e,version:s(/(?:epiphany)[\s\/](\d+(?:\.\d+)+)/i)};else if(/puffin/i.test(i))B={name:"Puffin",puffin:e,version:s(/(?:puffin)[\s\/](\d+(?:\.\d+)?)/i)};else if(/sleipnir/i.test(i))B={name:"Sleipnir",sleipnir:e,version:s(/(?:sleipnir)[\s\/](\d+(?:\.\d+)+)/i)};else if(/k-meleon/i.test(i))B={name:"K-Meleon",kMeleon:e,version:s(/(?:k-meleon)[\s\/](\d+(?:\.\d+)+)/i)};else if(c){B={name:"Windows Phone",osname:"Windows Phone",windowsphone:e};if(g){B.msedge=e;B.version=g}else{B.msie=e;B.version=s(/iemobile\/(\d+(\.\d+)?)/i)}}else if(/msie|trident/i.test(i))B={name:"Internet Explorer",msie:e,version:s(/(?:msie |rv:)(\d+(\.\d+)?)/i)};else if(l)B={name:"Chrome",osname:"Chrome OS",chromeos:e,chromeBook:e,chrome:e,version:s(/(?:chrome|crios|crmo)\/(\d+(\.\d+)?)/i)};else if(/edg([ea]|ios)/i.test(i))B={name:"Microsoft Edge",msedge:e,version:g};else if(/vivaldi/i.test(i))B={name:"Vivaldi",vivaldi:e,version:s(/vivaldi\/(\d+(\.\d+)?)/i)||k};else if(m)B={name:"Sailfish",osname:"Sailfish OS",sailfish:e,version:s(/sailfish\s?browser\/(\d+(\.\d+)?)/i)};else if(/seamonkey\//i.test(i))B={name:"SeaMonkey",seamonkey:e,version:s(/seamonkey\/(\d+(\.\d+)?)/i)};else if(/firefox|iceweasel|fxios/i.test(i)){B={name:"Firefox",firefox:e,version:s(/(?:firefox|iceweasel|fxios)[ \/](\d+(\.\d+)?)/i)};if(/\((mobile|tablet);[^\)]*rv:[\d\.]+\)/i.test(i)){B.firefoxos=e;B.osname="Firefox OS"}}else if(f)B={name:"Amazon Silk",silk:e,version:s(/silk\/(\d+(\.\d+)?)/i)};else if(/phantom/i.test(i))B={name:"PhantomJS",phantom:e,version:s(/phantomjs\/(\d+(\.\d+)?)/i)};else if(/slimerjs/i.test(i))B={name:"SlimerJS",slimer:e,version:s(/slimerjs\/(\d+(\.\d+)?)/i)};else if(/blackberry|\bbb\d+/i.test(i)||/rim\stablet/i.test(i))B={name:"BlackBerry",osname:"BlackBerry OS",blackberry:e,version:k||s(/blackberry[\d]+\/(\d+(\.\d+)?)/i)};else if(p){B={name:"WebOS",osname:"WebOS",webos:e,version:k||s(/w(?:eb)?osbrowser\/(\d+(\.\d+)?)/i)};/touchpad\//i.test(i)&&(B.touchpad=e)}else if(/bada/i.test(i))B={name:"Bada",osname:"Bada",bada:e,version:s(/dolfin\/(\d+(\.\d+)?)/i)};else if(v)B={name:"Tizen",osname:"Tizen",tizen:e,version:s(/(?:tizen\s?)?browser\/(\d+(\.\d+)?)/i)||k};else if(/qupzilla/i.test(i))B={name:"QupZilla",qupzilla:e,version:s(/(?:qupzilla)[\s\/](\d+(?:\.\d+)+)/i)||k};else if(/chromium/i.test(i))B={name:"Chromium",chromium:e,version:s(/(?:chromium)[\s\/](\d+(?:\.\d+)?)/i)||k};else if(/chrome|crios|crmo/i.test(i))B={name:"Chrome",chrome:e,version:s(/(?:chrome|crios|crmo)\/(\d+(\.\d+)?)/i)};else if(t)B={name:"Android",version:k};else if(/safari|applewebkit/i.test(i)){B={name:"Safari",safari:e};if(k)B.version=k}else if(r){B={name:"iphone"==r?"iPhone":"ipad"==r?"iPad":"iPod"};if(k)B.version=k}else if(/googlebot/i.test(i))B={name:"Googlebot",googlebot:e,version:s(/googlebot\/(\d+(\.\d+))/i)||k};else B={name:s(/^(.*)\/(.*) /),version:o(/^(.*)\/(.*) /)};if(!B.msedge&&/(apple)?webkit/i.test(i)){if(/(apple)?webkit\/537\.36/i.test(i)){B.name=B.name||"Blink";B.blink=e}else{B.name=B.name||"Webkit";B.webkit=e}if(!B.version&&k)B.version=k}else if(!B.opera&&/gecko\//i.test(i)){B.name=B.name||"Gecko";B.gecko=e;B.version=B.version||s(/gecko\/(\d+(\.\d+)?)/i)}if(!B.windowsphone&&(t||B.silk)){B.android=e;B.osname="Android"}else if(!B.windowsphone&&r){B[r]=e;B.ios=e;B.osname="iOS"}else if(w){B.mac=e;B.osname="macOS"}else if(S){B.xbox=e;B.osname="Xbox"}else if(h){B.windows=e;B.osname="Windows"}else if(b){B.linux=e;B.osname="Linux"}function O(e){switch(e){case"NT":return"NT";case"XP":return"XP";case"NT 5.0":return"2000";case"NT 5.1":return"XP";case"NT 5.2":return"2003";case"NT 6.0":return"Vista";case"NT 6.1":return"7";case"NT 6.2":return"8";case"NT 6.3":return"8.1";case"NT 10.0":return"10";default:return undefined}}var T="";if(B.windows)T=O(s(/Windows ((NT|XP)( \d\d?.\d)?)/i));else if(B.windowsphone)T=s(/windows phone (?:os)?\s?(\d+(\.\d+)*)/i);else if(B.mac){T=s(/Mac OS X (\d+([_\.\s]\d+)*)/i);T=T.replace(/[_\s]/g,".")}else if(r){T=s(/os (\d+([_\s]\d+)*) like mac os x/i);T=T.replace(/[_\s]/g,".")}else if(t)T=s(/android[ \/-](\d+(\.\d+)*)/i);else if(B.webos)T=s(/(?:web|hpw)os\/(\d+(\.\d+)*)/i);else if(B.blackberry)T=s(/rim\stablet\sos\s(\d+(\.\d+)*)/i);else if(B.bada)T=s(/bada\/(\d+(\.\d+)*)/i);else if(B.tizen)T=s(/tizen[\/\s](\d+(\.\d+)*)/i);if(T)B.osversion=T;var P=!B.windows&&T.split(".")[0];if(x||d||"ipad"==r||t&&(3==P||P>=4&&!y)||B.silk)B.tablet=e;else if(y||"iphone"==r||"ipod"==r||t||a||B.blackberry||B.webos||B.bada)B.mobile=e;if(B.msedge||B.msie&&B.version>=10||B.yandexbrowser&&B.version>=15||B.vivaldi&&B.version>=1||B.chrome&&B.version>=20||B.samsungBrowser&&B.version>=4||B.firefox&&B.version>=20||B.safari&&B.version>=6||B.opera&&B.version>=10||B.ios&&B.osversion&&B.osversion.split(".")[0]>=6||B.blackberry&&B.version>=10.1||B.chromium&&B.version>=20)B.a=e;else if(B.msie&&B.version<10||B.chrome&&B.version<20||B.firefox&&B.version<20||B.safari&&B.version<6||B.opera&&B.version<10||B.ios&&B.osversion&&B.osversion.split(".")[0]<6||B.chromium&&B.version<20)B.c=e;else B.x=e;return B}var s=i("undefined"!==typeof navigator?navigator.userAgent||"":"");s.test=function(e){for(var i=0;i<e.length;++i){var o=e[i];if("string"===typeof o)if(o in s)return true}return false};function o(e){return e.split(".").length}function r(e,i){var s=[],o;if(Array.prototype.map)return Array.prototype.map.call(e,i);for(o=0;o<e.length;o++)s.push(i(e[o]));return s}function n(e){var i=Math.max(o(e[0]),o(e[1]));var s=r(e,function(e){var s=i-o(e);e+=new Array(s+1).join(".0");return r(e.split("."),function(e){return new Array(20-e.length).join("0")+e}).reverse()});while(--i>=0)if(s[0][i]>s[1][i])return 1;else if(s[0][i]===s[1][i]){if(0===i)return 0}else return-1}function t(e,o,r){var t=s;if("string"===typeof o){r=o;o=void 0}if(void 0===o)o=false;if(r)t=i(r);var a=""+t.version;for(var d in e)if(e.hasOwnProperty(d))if(t[d]){if("string"!==typeof e[d])throw new Error("Browser version in the minVersion map should be a string: "+d+": "+String(e));return n([a,e[d]])<0}return o}function a(e,i,s){return!t(e,i,s)}s.isUnsupportedBrowser=t;s.compareVersions=n;s.check=a;s._detect=i;s.detect=i;return s});</script>
 
@@ -635,6 +637,7 @@
           window.history.replaceState({}, '', queryParameterLessUrl);// https://caniuse.com/mdn-api_history_replacestate
         }
       });
+
       // Adding hover events to header dropdown menus.
       $(function(){
         $('[purpose=dropdown-button]').hover(

From 42ff57d05948f5d15b481d9e572f25b478b9465a Mon Sep 17 00:00:00 2001
From: Roberto Dip <dip.jesusr@gmail.com>
Date: Wed, 31 Jul 2024 16:49:24 -0300
Subject: [PATCH 09/88] UI/Docs changes to rotate keys using Escrow Buddy
 (#20843)

UI portion for #13157

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
---
 docs/Contributing/API-for-contributors.md     | 21 ------
 .../details/DeviceUserPage/DeviceUserPage.tsx | 13 ----
 .../ResetKeyModal/ResetKeyModal.tsx           | 70 -------------------
 .../DeviceUserPage/ResetKeyModal/_styles.scss | 10 ---
 .../DeviceUserPage/ResetKeyModal/index.ts     |  1 -
 .../DeviceUserBanners.tests.tsx               | 46 +-----------
 .../DeviceUserBanners/DeviceUserBanners.tsx   | 30 ++------
 .../HostDetailsBanners/HostDetailsBanners.tsx |  3 +-
 frontend/services/entities/mdm.ts             |  4 --
 frontend/utilities/endpoints.ts               |  3 -
 10 files changed, 9 insertions(+), 192 deletions(-)
 delete mode 100644 frontend/pages/hosts/details/DeviceUserPage/ResetKeyModal/ResetKeyModal.tsx
 delete mode 100644 frontend/pages/hosts/details/DeviceUserPage/ResetKeyModal/_styles.scss
 delete mode 100644 frontend/pages/hosts/details/DeviceUserPage/ResetKeyModal/index.ts

diff --git a/docs/Contributing/API-for-contributors.md b/docs/Contributing/API-for-contributors.md
index 8e42d4480b..170ff1c8ea 100644
--- a/docs/Contributing/API-for-contributors.md
+++ b/docs/Contributing/API-for-contributors.md
@@ -2755,27 +2755,6 @@ Signals the Fleet server to send a webbook request with the device UUID and seri
 
 ---
 
-#### Trigger FileVault key escrow
-
-Sends a signal to Fleet Desktop to initiate a FileVault key escrow. This is useful for setting the escrow key initially as well as in scenarios where a token rotation is required. **Requires Fleet Premium license**
-
-`POST /api/v1/fleet/device/{token}/rotate_encryption_key`
-
-##### Parameters
-
-| Name  | Type   | In   | Description                        |
-| ----- | ------ | ---- | ---------------------------------- |
-| token | string | path | The device's authentication token. |
-
-##### Example
-
-`POST /api/v1/fleet/device/abcdef012456789/rotate_encryption_key`
-
-##### Default response
-
-`Status: 204`
-
-
 ### Report an agent error
 
 Notifies the server about an agent error, resulting in two outcomes:
diff --git a/frontend/pages/hosts/details/DeviceUserPage/DeviceUserPage.tsx b/frontend/pages/hosts/details/DeviceUserPage/DeviceUserPage.tsx
index 91e9292dd9..189c8ae488 100644
--- a/frontend/pages/hosts/details/DeviceUserPage/DeviceUserPage.tsx
+++ b/frontend/pages/hosts/details/DeviceUserPage/DeviceUserPage.tsx
@@ -42,7 +42,6 @@ import PolicyDetailsModal from "../cards/Policies/HostPoliciesTable/PolicyDetail
 import AutoEnrollMdmModal from "./AutoEnrollMdmModal";
 import ManualEnrollMdmModal from "./ManualEnrollMdmModal";
 import OSSettingsModal from "../OSSettingsModal";
-import ResetKeyModal from "./ResetKeyModal";
 import BootstrapPackageModal from "../HostDetailsPage/modals/BootstrapPackageModal";
 import { parseHostSoftwareQueryParams } from "../cards/Software/HostSoftware";
 import SelfService from "../cards/Software/SelfService";
@@ -90,7 +89,6 @@ const DeviceUserPage = ({
   const [isPremiumTier, setIsPremiumTier] = useState(false);
   const [showInfoModal, setShowInfoModal] = useState(false);
   const [showEnrollMdmModal, setShowEnrollMdmModal] = useState(false);
-  const [showResetKeyModal, setShowResetKeyModal] = useState(false);
   const [refetchStartTime, setRefetchStartTime] = useState<number | null>(null);
   const [showRefetchSpinner, setShowRefetchSpinner] = useState(false);
   const [orgLogoURL, setOrgLogoURL] = useState("");
@@ -248,10 +246,6 @@ const DeviceUserPage = ({
     setShowEnrollMdmModal(!showEnrollMdmModal);
   }, [showEnrollMdmModal, setShowEnrollMdmModal]);
 
-  const toggleResetKeyModal = useCallback(() => {
-    setShowResetKeyModal(!showResetKeyModal);
-  }, [showResetKeyModal, setShowResetKeyModal]);
-
   const togglePolicyDetailsModal = useCallback(
     (policy: IHostPolicy) => {
       setShowPolicyDetailsModal(!showPolicyDetailsModal);
@@ -361,7 +355,6 @@ const DeviceUserPage = ({
                 host.mdm.macos_settings?.action_required ?? null
               }
               onTurnOnMdm={toggleEnrollMdmModal}
-              onResetKey={toggleResetKeyModal}
             />
             <HostSummaryCard
               summaryData={summaryData}
@@ -448,12 +441,6 @@ const DeviceUserPage = ({
             </TabsWrapper>
             {showInfoModal && <InfoModal onCancel={toggleInfoModal} />}
             {showEnrollMdmModal && renderEnrollMdmModal()}
-            {showResetKeyModal && (
-              <ResetKeyModal
-                onClose={toggleResetKeyModal}
-                deviceAuthToken={deviceAuthToken}
-              />
-            )}
           </div>
         )}
         {!!host && showPolicyDetailsModal && (
diff --git a/frontend/pages/hosts/details/DeviceUserPage/ResetKeyModal/ResetKeyModal.tsx b/frontend/pages/hosts/details/DeviceUserPage/ResetKeyModal/ResetKeyModal.tsx
deleted file mode 100644
index e9fe2b3f05..0000000000
--- a/frontend/pages/hosts/details/DeviceUserPage/ResetKeyModal/ResetKeyModal.tsx
+++ /dev/null
@@ -1,70 +0,0 @@
-import React from "react";
-
-import Button from "components/buttons/Button";
-import Modal from "components/Modal";
-import mdmAPI from "services/entities/mdm";
-import { useQuery } from "react-query";
-import Spinner from "components/Spinner";
-import DataError from "components/DataError";
-
-interface IResetKeyModalProps {
-  onClose: () => void;
-  deviceAuthToken: string;
-}
-
-const baseClass = "reset-key-modal";
-
-const ResetKeyModal = ({
-  onClose,
-  deviceAuthToken,
-}: IResetKeyModalProps): JSX.Element => {
-  const { isLoading: isLoadingResetDEKey, error: errorResetDEKey } = useQuery(
-    ["resetDEkey", deviceAuthToken],
-    () => mdmAPI.resetEncryptionKey(deviceAuthToken),
-    { refetchOnWindowFocus: false }
-  );
-
-  const renderModalBody = () => {
-    if (isLoadingResetDEKey) {
-      return <Spinner />;
-    }
-    if (errorResetDEKey) {
-      return <DataError />;
-    }
-
-    return (
-      <div>
-        <ol>
-          <li>
-            Wait 30 seconds for the <b>Reset disk encryption key</b> pop up to
-            open.
-          </li>
-          <li>
-            In the popup, enter the password you use to login to your Mac.
-          </li>
-          <li>
-            Close this window and select <b>Refetch</b> on your My device page.
-            This tells your organization that you reset your key.
-          </li>
-        </ol>
-        <div className="modal-cta-wrap">
-          <Button type="button" onClick={onClose} variant="brand">
-            Done
-          </Button>
-        </div>
-      </div>
-    );
-  };
-  return (
-    <Modal
-      title="Reset key"
-      onExit={onClose}
-      className={baseClass}
-      width="medium"
-    >
-      {renderModalBody()}
-    </Modal>
-  );
-};
-
-export default ResetKeyModal;
diff --git a/frontend/pages/hosts/details/DeviceUserPage/ResetKeyModal/_styles.scss b/frontend/pages/hosts/details/DeviceUserPage/ResetKeyModal/_styles.scss
deleted file mode 100644
index f40c1f1c1d..0000000000
--- a/frontend/pages/hosts/details/DeviceUserPage/ResetKeyModal/_styles.scss
+++ /dev/null
@@ -1,10 +0,0 @@
-.reset-key-modal {
-  ol {
-    padding-left: 0;
-  }
-
-  li {
-    margin-bottom: $pad-large;
-    list-style: number inside;
-  }
-}
diff --git a/frontend/pages/hosts/details/DeviceUserPage/ResetKeyModal/index.ts b/frontend/pages/hosts/details/DeviceUserPage/ResetKeyModal/index.ts
deleted file mode 100644
index 3cd713ee62..0000000000
--- a/frontend/pages/hosts/details/DeviceUserPage/ResetKeyModal/index.ts
+++ /dev/null
@@ -1 +0,0 @@
-export { default } from "./ResetKeyModal";
diff --git a/frontend/pages/hosts/details/DeviceUserPage/components/DeviceUserBanners/DeviceUserBanners.tests.tsx b/frontend/pages/hosts/details/DeviceUserPage/components/DeviceUserBanners/DeviceUserBanners.tests.tsx
index dc7a052653..cd3f28c01b 100644
--- a/frontend/pages/hosts/details/DeviceUserPage/components/DeviceUserBanners/DeviceUserBanners.tests.tsx
+++ b/frontend/pages/hosts/details/DeviceUserPage/components/DeviceUserBanners/DeviceUserBanners.tests.tsx
@@ -6,8 +6,7 @@ import DeviceUserBanners from "./DeviceUserBanners";
 
 describe("Device User Banners", () => {
   const turnOnMdmExpcetedText = /Mobile device management \(MDM\) is off\./;
-  const logoutDiskEncryptExpectedText = /Disk encryption: Log out of your device or restart to turn on disk encryption\./;
-  const resetKeyDiskEncryptExpcetedText = /Disk encryption: Reset your disk encryption key\./;
+  const resetKeyDiskEncryptExpcetedText = /Disk encryption: Log out of your device or restart it to safeguard your data in case your device is lost or stolen\./;
 
   it("renders the turn on mdm banner correctly", () => {
     render(
@@ -19,28 +18,11 @@ describe("Device User Banners", () => {
         diskEncryptionStatus={null}
         diskEncryptionActionRequired={null}
         onTurnOnMdm={noop}
-        onResetKey={noop}
       />
     );
     expect(screen.getByText(turnOnMdmExpcetedText)).toBeInTheDocument();
   });
 
-  it("renders the logout for disk encrpytion banner correctly", () => {
-    render(
-      <DeviceUserBanners
-        hostPlatform="darwin"
-        mdmEnrollmentStatus="On (automatic)"
-        mdmEnabledAndConfigured
-        mdmConnectedToFleet
-        diskEncryptionStatus="action_required"
-        diskEncryptionActionRequired="log_out"
-        onTurnOnMdm={noop}
-        onResetKey={noop}
-      />
-    );
-    expect(screen.getByText(logoutDiskEncryptExpectedText)).toBeInTheDocument();
-  });
-
   it("renders the reset key for disk encryption banner correctly", () => {
     render(
       <DeviceUserBanners
@@ -51,7 +33,6 @@ describe("Device User Banners", () => {
         diskEncryptionStatus="action_required"
         diskEncryptionActionRequired="rotate_key"
         onTurnOnMdm={noop}
-        onResetKey={noop}
       />
     );
     expect(
@@ -59,28 +40,6 @@ describe("Device User Banners", () => {
     ).toBeInTheDocument();
   });
 
-  it("renders only one banner in a priority order", () => {
-    // set up to render logout disk encryption banner, which is 2nd in priority
-    render(
-      <DeviceUserBanners
-        hostPlatform="darwin"
-        mdmEnrollmentStatus="On (automatic)"
-        mdmEnabledAndConfigured
-        mdmConnectedToFleet
-        diskEncryptionStatus="action_required"
-        diskEncryptionActionRequired="log_out"
-        onTurnOnMdm={noop}
-        onResetKey={noop}
-      />
-    );
-
-    expect(screen.queryByText(turnOnMdmExpcetedText)).not.toBeInTheDocument();
-    expect(screen.getByText(logoutDiskEncryptExpectedText)).toBeInTheDocument();
-    expect(
-      screen.queryByText(resetKeyDiskEncryptExpcetedText)
-    ).not.toBeInTheDocument();
-  });
-
   it("renders no banner correctly", () => {
     // setup so mdm is not enabled and configured.
     render(
@@ -92,13 +51,12 @@ describe("Device User Banners", () => {
         diskEncryptionStatus={null}
         diskEncryptionActionRequired={null}
         onTurnOnMdm={noop}
-        onResetKey={noop}
       />
     );
 
     expect(screen.queryByText(turnOnMdmExpcetedText)).not.toBeInTheDocument();
     expect(
-      screen.queryByText(logoutDiskEncryptExpectedText)
+      screen.queryByText(resetKeyDiskEncryptExpcetedText)
     ).not.toBeInTheDocument();
     expect(
       screen.queryByText(resetKeyDiskEncryptExpcetedText)
diff --git a/frontend/pages/hosts/details/DeviceUserPage/components/DeviceUserBanners/DeviceUserBanners.tsx b/frontend/pages/hosts/details/DeviceUserPage/components/DeviceUserBanners/DeviceUserBanners.tsx
index 9cc5e3256a..028165648f 100644
--- a/frontend/pages/hosts/details/DeviceUserPage/components/DeviceUserBanners/DeviceUserBanners.tsx
+++ b/frontend/pages/hosts/details/DeviceUserPage/components/DeviceUserBanners/DeviceUserBanners.tsx
@@ -15,7 +15,6 @@ interface IDeviceUserBannersProps {
   diskEncryptionStatus: DiskEncryptionStatus | null;
   diskEncryptionActionRequired: MacDiskEncryptionActionRequired | null;
   onTurnOnMdm: () => void;
-  onResetKey: () => void;
 }
 
 const DeviceUserBanners = ({
@@ -26,7 +25,6 @@ const DeviceUserBanners = ({
   diskEncryptionStatus,
   diskEncryptionActionRequired,
   onTurnOnMdm,
-  onResetKey,
 }: IDeviceUserBannersProps) => {
   const isMdmUnenrolled =
     mdmEnrollmentStatus === "Off" || mdmEnrollmentStatus === null;
@@ -37,11 +35,6 @@ const DeviceUserBanners = ({
   const showTurnOnMdmBanner =
     hostPlatform === "darwin" && isMdmUnenrolled && mdmEnabledAndConfigured;
 
-  const showDiskEncryptionLogoutRestart =
-    diskEncryptionBannersEnabled &&
-    diskEncryptionStatus === "action_required" &&
-    diskEncryptionActionRequired === "log_out";
-
   const showDiskEncryptionKeyResetRequired =
     diskEncryptionBannersEnabled &&
     diskEncryptionStatus === "action_required" &&
@@ -53,12 +46,6 @@ const DeviceUserBanners = ({
     </Button>
   );
 
-  const resetKeyButton = (
-    <Button variant="unstyled" onClick={onResetKey}>
-      <b>Reset key</b>
-    </Button>
-  );
-
   const renderBanner = () => {
     if (showTurnOnMdmBanner) {
       return (
@@ -68,19 +55,14 @@ const DeviceUserBanners = ({
           your device up to date so you don&apos;t have to.
         </InfoBanner>
       );
-    } else if (showDiskEncryptionLogoutRestart) {
+    }
+
+    if (showDiskEncryptionKeyResetRequired) {
       return (
         <InfoBanner color="yellow">
-          Disk encryption: Log out of your device or restart to turn on disk
-          encryption. Then, select <strong>Refetch</strong>. This prevents
-          unauthorized access to the information on your device.
-        </InfoBanner>
-      );
-    } else if (showDiskEncryptionKeyResetRequired) {
-      return (
-        <InfoBanner color="yellow" cta={resetKeyButton}>
-          Disk encryption: Reset your disk encryption key. This lets your
-          organization help you unlock your device if you forget your password.
+          Disk encryption: Log out of your device or restart it to safeguard
+          your data in case your device is lost or stolen. After, select{" "}
+          <strong>Refetch</strong> to clear this banner.
         </InfoBanner>
       );
     }
diff --git a/frontend/pages/hosts/details/HostDetailsPage/components/HostDetailsBanners/HostDetailsBanners.tsx b/frontend/pages/hosts/details/HostDetailsPage/components/HostDetailsBanners/HostDetailsBanners.tsx
index ea3110af9b..89632164b0 100644
--- a/frontend/pages/hosts/details/HostDetailsPage/components/HostDetailsBanners/HostDetailsBanners.tsx
+++ b/frontend/pages/hosts/details/HostDetailsPage/components/HostDetailsBanners/HostDetailsBanners.tsx
@@ -79,8 +79,7 @@ const HostDetailsBanners = ({
         {showDiskEncryptionUserActionRequired && (
           <InfoBanner color="yellow">
             Disk encryption: Requires action from the end user. Ask the end user
-            to follow <b>Disk encryption</b> instructions on their{" "}
-            <b>My device</b> page.
+            to log out of their device or restart it.
           </InfoBanner>
         )}
       </div>
diff --git a/frontend/services/entities/mdm.ts b/frontend/services/entities/mdm.ts
index a5b7409922..f8cae4461f 100644
--- a/frontend/services/entities/mdm.ts
+++ b/frontend/services/entities/mdm.ts
@@ -83,10 +83,6 @@ export interface IGetMdmCommandResultsResponse {
 }
 
 const mdmService = {
-  resetEncryptionKey: (token: string) => {
-    const { DEVICE_USER_RESET_ENCRYPTION_KEY } = endpoints;
-    return sendRequest("POST", DEVICE_USER_RESET_ENCRYPTION_KEY(token));
-  },
   unenrollHostFromMdm: (hostId: number, timeout?: number) => {
     const { HOST_MDM_UNENROLL } = endpoints;
     return sendRequest(
diff --git a/frontend/utilities/endpoints.ts b/frontend/utilities/endpoints.ts
index 235029bf70..92553ada42 100644
--- a/frontend/utilities/endpoints.ts
+++ b/frontend/utilities/endpoints.ts
@@ -31,9 +31,6 @@ export default {
     `/${API_VERSION}/fleet/device/${token}/software`,
   DEVICE_SOFTWARE_INSTALL: (token: string, softwareTitleId: number) =>
     `/${API_VERSION}/fleet/device/${token}/software/install/${softwareTitleId}`,
-  DEVICE_USER_RESET_ENCRYPTION_KEY: (token: string): string => {
-    return `/${API_VERSION}/fleet/device/${token}/rotate_encryption_key`;
-  },
   DEVICE_USER_MDM_ENROLLMENT_PROFILE: (token: string): string => {
     return `/${API_VERSION}/fleet/device/${token}/mdm/apple/manual_enrollment_profile`;
   },

From fbf1f553992d0b8b895d0af73cf3cc0be94ac3d9 Mon Sep 17 00:00:00 2001
From: Eric <eashaw@sailsjs.com>
Date: Wed, 31 Jul 2024 14:50:42 -0500
Subject: [PATCH 10/88] Website: Remove duplicate "Fleet" from page titles
 (#20893)

Changes:
- Removed the duplicate "Fleet" from page titles.
---
 .../api/controllers/articles/view-articles.js | 18 ++++-----
 .../articles/view-basic-article.js            |  2 +-
 .../docs/view-basic-documentation.js          |  2 +-
 .../handbook/view-basic-handbook.js           |  2 +-
 website/api/controllers/view-query-detail.js  |  2 +-
 website/config/routes.js                      | 38 +++++++++----------
 6 files changed, 32 insertions(+), 32 deletions(-)

diff --git a/website/api/controllers/articles/view-articles.js b/website/api/controllers/articles/view-articles.js
index f8b685a8eb..8f28c6c5c4 100644
--- a/website/api/controllers/articles/view-articles.js
+++ b/website/api/controllers/articles/view-articles.js
@@ -50,7 +50,7 @@ module.exports = {
       });
     }
 
-    let pageTitleForMeta = 'Fleet blog | Fleet';
+    let pageTitleForMeta = 'Fleet blog';
     let pageDescriptionForMeta = 'Read the latest articles written by Fleet.';
     // Create a currentSection variable, this will be used to highlight the header dropdown that this article category lives under.
     // There are three possible values for this (documentation, community, and platform), so we'll default to the one with the most article categories (community) and set the value to another section if needed.
@@ -60,39 +60,39 @@ module.exports = {
     // Set a pageTitleForMeta, pageDescriptionForMeta, and currentSection variable based on the article category.
     switch(category) {
       case 'success-stories':
-        pageTitleForMeta = 'Success stories | Fleet';
+        pageTitleForMeta = 'Success stories';
         pageDescriptionForMeta = 'Read about how others are using Fleet and osquery.';
         currentSection = 'platform';
         break;
       case 'deploy':
-        pageTitleForMeta = 'Deployment guides | Fleet';
+        pageTitleForMeta = 'Deployment guides';
         pageDescriptionForMeta = 'Learn how to deploy Fleet on a variety of production environments.';
         currentSection = 'documentation';
         break;
       case 'releases':
-        pageTitleForMeta = 'Releases | Fleet';
+        pageTitleForMeta = 'Releases';
         pageDescriptionForMeta = 'Fleet releases new and updated features every three weeks. Read about the latest product improvements here.';
         currentSection = 'documentation';
         break;
       case 'guides':
-        pageTitleForMeta = 'Guides | Fleet';
+        pageTitleForMeta = 'Guides';
         pageDescriptionForMeta = 'A collection of how-to guides for Fleet and osquery.';
         currentSection = 'documentation';
         break;
       case 'securing':
-        pageTitleForMeta = 'Security articles | Fleet';
+        pageTitleForMeta = 'Security articles';
         pageDescriptionForMeta = 'Learn more about how we secure Fleet.';
         break;
       case 'engineering':
-        pageTitleForMeta = 'Engineering articles | Fleet';
+        pageTitleForMeta = 'Engineering articles';
         pageDescriptionForMeta = 'Read about engineering at Fleet and beyond.';
         break;
       case 'announcements':
-        pageTitleForMeta = 'Announcements | Fleet';
+        pageTitleForMeta = 'Announcements';
         pageDescriptionForMeta = 'Read the latest news from Fleet.';
         break;
       case 'podcasts':
-        pageTitleForMeta = 'Podcasts | Fleet';
+        pageTitleForMeta = 'Podcasts';
         pageDescriptionForMeta = 'Listen to the Future of Device Management podcast.';
         break;
     }
diff --git a/website/api/controllers/articles/view-basic-article.js b/website/api/controllers/articles/view-basic-article.js
index e7fc38ff83..17b997f5f7 100644
--- a/website/api/controllers/articles/view-basic-article.js
+++ b/website/api/controllers/articles/view-basic-article.js
@@ -52,7 +52,7 @@ module.exports = {
     // Note: Leaving title and description as `undefined` in our view means we'll default to the generic title and description set in layout.ejs.
     let pageTitleForMeta;
     if(thisPage.meta.articleTitle) {
-      pageTitleForMeta = thisPage.meta.articleTitle + ' | Fleet';
+      pageTitleForMeta = thisPage.meta.articleTitle;
     }//fi
     let pageDescriptionForMeta;
     if(thisPage.meta.description){
diff --git a/website/api/controllers/docs/view-basic-documentation.js b/website/api/controllers/docs/view-basic-documentation.js
index 3961775bad..b5d1746e8b 100644
--- a/website/api/controllers/docs/view-basic-documentation.js
+++ b/website/api/controllers/docs/view-basic-documentation.js
@@ -69,7 +69,7 @@ module.exports = {
       compiledPagePartialsAppPath: sails.config.builtStaticContent.compiledPagePartialsAppPath,
       pageTitleForMeta: (
         thisPage.title !== 'Readme.md' ? thisPage.title + ' | Fleet documentation'// « custom meta title for this page, if provided in markdown
-        : 'Documentation | Fleet' // « otherwise we're on the landing page for this section of the site, so we'll follow the title format of other top-level pages
+        : 'Documentation' // « otherwise we're on the landing page for this section of the site, so we'll follow the title format of other top-level pages
       ),
       pageDescriptionForMeta: (
         thisPage.meta.description ? thisPage.meta.description // « custom meta description for this page, if provided in markdown
diff --git a/website/api/controllers/handbook/view-basic-handbook.js b/website/api/controllers/handbook/view-basic-handbook.js
index bd30a469d6..6c9f1b4b01 100644
--- a/website/api/controllers/handbook/view-basic-handbook.js
+++ b/website/api/controllers/handbook/view-basic-handbook.js
@@ -64,7 +64,7 @@ module.exports = {
       compiledPagePartialsAppPath: sails.config.builtStaticContent.compiledPagePartialsAppPath,
       pageTitleForMeta: (
         thisPage.title !== 'Readme.md' ? thisPage.title + ' | Fleet handbook'// « custom meta title for this page, if provided in markdown
-        : 'Handbook | Fleet' // « otherwise we're on the landing page for this section of the site, so we'll follow the title format of other top-level pages
+        : 'Handbook' // « otherwise we're on the landing page for this section of the site, so we'll follow the title format of other top-level pages
       ),
       pageDescriptionForMeta: (
         thisPage.meta.description ? thisPage.meta.description // « custom meta description for this page, if provided in markdown
diff --git a/website/api/controllers/view-query-detail.js b/website/api/controllers/view-query-detail.js
index 3d974034ad..c4f8f51430 100644
--- a/website/api/controllers/view-query-detail.js
+++ b/website/api/controllers/view-query-detail.js
@@ -35,7 +35,7 @@ module.exports = {
     }
 
     // Setting the meta title and description of this page using the query object, and falling back to a generic title or description if query.name or query.description are missing.
-    let pageTitleForMeta = query.name ? query.name + ' | Query details' : 'Query details | Fleet';
+    let pageTitleForMeta = query.name ? query.name + ' | Query details' : 'Query details';
     let pageDescriptionForMeta = query.description ? query.description : 'View more information about a query in Fleet\'s standard query library';
     // Respond with view.
     return {
diff --git a/website/config/routes.js b/website/config/routes.js
index 8339089831..59b068e650 100644
--- a/website/config/routes.js
+++ b/website/config/routes.js
@@ -23,7 +23,7 @@ module.exports.routes = {
   'GET /contact': {
     action: 'view-contact',
     locals: {
-      pageTitleForMeta: 'Contact us | Fleet',
+      pageTitleForMeta: 'Contact us',
       pageDescriptionForMeta: 'Get in touch with our team.',
       hideFooterLinks: true,
     }
@@ -34,7 +34,7 @@ module.exports.routes = {
     locals: {
       hideHeaderLinks: true,
       hideFooterLinks: true,
-      pageTitleForMeta: 'fleetctl preview | Fleet',
+      pageTitleForMeta: 'fleetctl preview',
       pageDescriptionForMeta: 'Learn about getting started with Fleet using fleetctl.'
     }
   },
@@ -43,7 +43,7 @@ module.exports.routes = {
     action: 'view-pricing',
     locals: {
       currentSection: 'pricing',
-      pageTitleForMeta: 'Pricing | Fleet',
+      pageTitleForMeta: 'Pricing',
       pageDescriptionForMeta: 'Use Fleet for free or get started with Fleet Premium (self-hosted or managed cloud). Have a large deployment? We\'ve got you covered.'
     }
   },
@@ -51,7 +51,7 @@ module.exports.routes = {
   'GET /logos': {
     action: 'view-press-kit',
     locals: {
-      pageTitleForMeta: 'Logos | Fleet',
+      pageTitleForMeta: 'Logos',
       pageDescriptionForMeta: 'Download Fleet logos, wallpapers, and screenshots.'
     }
   },
@@ -60,7 +60,7 @@ module.exports.routes = {
     action: 'view-query-library',
     locals: {
       currentSection: 'documentation',
-      pageTitleForMeta: 'Queries | Fleet',
+      pageTitleForMeta: 'Queries',
       pageDescriptionForMeta: 'A growing collection of useful queries for organizations deploying Fleet and osquery.'
     }
   },
@@ -106,7 +106,7 @@ module.exports.routes = {
       hideHeaderLinks: true,
       hideFooterLinks: true,
       hideStartCTA: true,
-      pageTitleForMeta: 'Get Fleet Premium | Fleet',
+      pageTitleForMeta: 'Get Fleet Premium',
       pageDescriptionForMeta: 'Generate your quote and start using Fleet Premium today.',
     }
   },
@@ -114,7 +114,7 @@ module.exports.routes = {
     action: 'entrance/view-signup',
     locals: {
       hideFooterLinks: true,
-      pageTitleForMeta: 'Sign up | Fleet',
+      pageTitleForMeta: 'Sign up',
       pageDescriptionForMeta: 'Sign up for a Fleet account.',
     }
   },
@@ -122,7 +122,7 @@ module.exports.routes = {
     action: 'entrance/view-login',
     locals: {
       hideFooterLinks: true,
-      pageTitleForMeta: 'Log in | Fleet',
+      pageTitleForMeta: 'Log in',
       pageDescriptionForMeta: 'Log in to Fleet.',
     }
   },
@@ -132,7 +132,7 @@ module.exports.routes = {
       hideHeaderLinks: true,
       hideFooterLinks: true,
       hideStartCTA: true,
-      pageTitleForMeta: 'Customer dashboard | Fleet',
+      pageTitleForMeta: 'Customer dashboard',
       pageDescriptionForMeta: 'View and edit information about your Fleet Premium license.',
     }
   },
@@ -142,7 +142,7 @@ module.exports.routes = {
       hideHeaderLinks: true,
       hideFooterLinks: true,
       hideStartCTA: true,
-      pageTitleForMeta: 'Forgot password | Fleet',
+      pageTitleForMeta: 'Forgot password',
       pageDescriptionForMeta: 'Recover the password for your Fleet customer account.',
     }
   },
@@ -152,7 +152,7 @@ module.exports.routes = {
       hideHeaderLinks: true,
       hideFooterLinks: true,
       hideStartCTA: true,
-      pageTitleForMeta: 'New password | Fleet',
+      pageTitleForMeta: 'New password',
       pageDescriptionForMeta: 'Change the password for your Fleet customer account.',
     }
   },
@@ -160,7 +160,7 @@ module.exports.routes = {
   'GET /reports/state-of-device-management': {
     action: 'reports/view-state-of-device-management',
     locals: {
-      pageTitleForMeta: 'State of device management | Fleet',
+      pageTitleForMeta: 'State of device management',
       pageDescriptionForMeta: 'We surveyed 200+ security practitioners to discover the state of device management in 2022. Click here to learn about their struggles and best practices.',
     }
   },
@@ -221,7 +221,7 @@ module.exports.routes = {
   'GET /device-management': {
     action: 'view-device-management',
     locals: {
-      pageTitleForMeta: 'Device management (MDM) | Fleet',
+      pageTitleForMeta: 'Device management (MDM)',
       pageDescriptionForMeta: 'Manage your devices in any browser or use git to make changes as code.',
       currentSection: 'platform',
     }
@@ -230,7 +230,7 @@ module.exports.routes = {
   'GET /endpoint-ops': {
     action: 'view-endpoint-ops',
     locals: {
-      pageTitleForMeta: 'Endpoint ops | Fleet',
+      pageTitleForMeta: 'Endpoint ops',
       pageDescriptionForMeta: 'Pulse check anything, build reports, and ship data to any platform with Fleet.',
       currentSection: 'platform',
     }
@@ -239,7 +239,7 @@ module.exports.routes = {
   'GET /vulnerability-management': {
     action: 'view-vulnerability-management',
     locals: {
-      pageTitleForMeta: 'Vulnerability management | Fleet',
+      pageTitleForMeta: 'Vulnerability management',
       pageDescriptionForMeta: 'Report CVEs, software inventory, security posture, and other risks down to the chipset of any endpoint with Fleet.',
       currentSection: 'platform',
     }
@@ -248,7 +248,7 @@ module.exports.routes = {
   'GET /support': {
     action: 'view-support',
     locals: {
-      pageTitleForMeta: 'Support | Fleet',
+      pageTitleForMeta: 'Support',
       pageDescriptionForMeta: 'Ask a question, chat with engineers, or get in touch with the Fleet team.',
       currentSection: 'documentation',
     }
@@ -257,7 +257,7 @@ module.exports.routes = {
   'GET /integrations': {
     action: 'view-integrations',
     locals: {
-      pageTitleForMeta: 'Integrations | Fleet',
+      pageTitleForMeta: 'Integrations',
       pageDescriptionForMeta: 'Integrate IT ticketing systems, SIEM and SOAR platforms, custom IT workflows, and more.',
       currentSection: 'platform'
     }
@@ -269,7 +269,7 @@ module.exports.routes = {
       hideFooterLinks: true,
       hideGetStartedButton: true,
       hideStartCTA: true,
-      pageTitleForMeta: 'Start | Fleet',
+      pageTitleForMeta: 'Start',
       pageDescriptionForMeta: 'Get Started with Fleet. Spin up a local demo or get your Premium license key.',
     }
   },
@@ -278,7 +278,7 @@ module.exports.routes = {
     action: 'view-transparency',
     locals: {
       pageDescriptionForMeta: 'Discover how Fleet simplifies IT and security, prioritizing privacy, transparency, and trust for end users.',
-      pageTitleForMeta: 'Better with Fleet | Fleet'
+      pageTitleForMeta: 'Better with Fleet'
     }
   },
 

From 7a080a9b36aa1c30773478868c1d5f05a58472d6 Mon Sep 17 00:00:00 2001
From: Roberto Dip <dip.jesusr@gmail.com>
Date: Wed, 31 Jul 2024 16:59:30 -0300
Subject: [PATCH 11/88] use Escrow Buddy to rotate FileVault keys on macOS
 (#20842)

back-end and agent part of #13157

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [x] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [x] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [x] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
---
 Makefile                               |   8 +
 changes/13157-fv-escrow                |   1 +
 ee/fleetctl/updates.go                 |   2 +
 ee/server/service/devices.go           |   4 -
 orbit/changes/13157-fv-escrow          |   1 +
 orbit/cmd/orbit/orbit.go               |   6 +-
 orbit/pkg/update/escrow_buddy.go       | 120 +++++++++++++++
 orbit/pkg/update/escrow_buddy_test.go  |  86 +++++++++++
 orbit/pkg/update/options.go            |   6 +
 orbit/pkg/update/testing_utils.go      |   1 +
 orbit/pkg/update/update.go             |  14 ++
 server/datastore/mysql/hosts.go        |  15 --
 server/datastore/mysql/hosts_test.go   |   9 +-
 server/fleet/capabilities.go           |   3 +
 server/fleet/datastore.go              |   2 -
 server/fleet/hosts.go                  |  26 +---
 server/fleet/hosts_test.go             |  44 ------
 server/fleet/service.go                |   2 -
 server/mock/datastore_mock.go          |  12 --
 server/service/devices.go              |  35 -----
 server/service/handler.go              |   4 -
 server/service/hosts_test.go           | 195 ++++++++++++++++++++++++-
 server/service/integration_mdm_test.go |  32 +---
 server/service/orbit.go                |  78 ++++++++--
 tools/tuf/README.md                    |  13 ++
 tools/tuf/test/create_repository.sh    |  17 ++-
 26 files changed, 537 insertions(+), 199 deletions(-)
 create mode 100644 changes/13157-fv-escrow
 create mode 100644 orbit/changes/13157-fv-escrow
 create mode 100644 orbit/pkg/update/escrow_buddy.go
 create mode 100644 orbit/pkg/update/escrow_buddy_test.go

diff --git a/Makefile b/Makefile
index 8f7cf455d5..2e7c317baa 100644
--- a/Makefile
+++ b/Makefile
@@ -424,6 +424,14 @@ endif
 	tar czf $(out-path)/swiftDialog.app.tar.gz -C $(TMP_DIR)/swiftDialog_pkg_payload_expanded/Library/Application\ Support/Dialog/ Dialog.app
 	rm -rf $(TMP_DIR)
 
+# Generate escrowBuddy.pkg bundle from the Escrow Buddy repo.
+#
+# Usage:
+# make escrow-buddy-pkg version=1.0.0 out-path=.
+escrow-buddy-pkg:
+	curl -L https://github.com/macadmins/escrow-buddy/releases/download/v$(version)/Escrow.Buddy-$(version).pkg --output $(out-path)/escrowBuddy.pkg
+
+
 # Build and generate desktop.app.tar.gz bundle.
 #
 # Usage:
diff --git a/changes/13157-fv-escrow b/changes/13157-fv-escrow
new file mode 100644
index 0000000000..e6804a05ec
--- /dev/null
+++ b/changes/13157-fv-escrow
@@ -0,0 +1 @@
+* `fleetd` now uses Escrow Buddy to rotate FileVault keys. Internal API endpoints documented in the API for contributors have been modified and/or removed.
diff --git a/ee/fleetctl/updates.go b/ee/fleetctl/updates.go
index 8ef04ef1f6..2e55081fa4 100644
--- a/ee/fleetctl/updates.go
+++ b/ee/fleetctl/updates.go
@@ -270,6 +270,8 @@ func updatesAddFunc(c *cli.Context) error {
 			dstPath += ".exe"
 		case strings.HasSuffix(target, ".app.tar.gz"):
 			dstPath += ".app.tar.gz"
+		case strings.HasSuffix(target, ".pkg"):
+			dstPath += ".pkg"
 		// osquery extensions require the .ext suffix
 		case strings.HasSuffix(target, ".ext"):
 			dstPath += ".ext"
diff --git a/ee/server/service/devices.go b/ee/server/service/devices.go
index 4208ee15c5..590067e916 100644
--- a/ee/server/service/devices.go
+++ b/ee/server/service/devices.go
@@ -17,10 +17,6 @@ func (svc *Service) ListDevicePolicies(ctx context.Context, host *fleet.Host) ([
 	return svc.ds.ListPoliciesForHost(ctx, host)
 }
 
-func (svc *Service) RequestEncryptionKeyRotation(ctx context.Context, hostID uint) error {
-	return svc.ds.SetDiskEncryptionResetStatus(ctx, hostID, true)
-}
-
 const refetchMDMUnenrollCriticalQueryDuration = 3 * time.Minute
 
 // TriggerMigrateMDMDevice triggers the webhook associated with the MDM
diff --git a/orbit/changes/13157-fv-escrow b/orbit/changes/13157-fv-escrow
new file mode 100644
index 0000000000..b4ff408b05
--- /dev/null
+++ b/orbit/changes/13157-fv-escrow
@@ -0,0 +1 @@
+* Use Escrow Buddy to rotate FileVault keys on macOS
diff --git a/orbit/cmd/orbit/orbit.go b/orbit/cmd/orbit/orbit.go
index cf24f3c0ef..d124a47d57 100644
--- a/orbit/cmd/orbit/orbit.go
+++ b/orbit/cmd/orbit/orbit.go
@@ -870,7 +870,11 @@ func main() {
 			orbitClient.RegisterConfigReceiver(update.ApplyNudgeConfigReceiverMiddleware(update.NudgeConfigFetcherOptions{
 				UpdateRunner: updateRunner, RootDir: c.String("root-dir"), Interval: nudgeLaunchInterval,
 			}))
-			orbitClient.RegisterConfigReceiver(update.ApplyDiskEncryptionRunnerMiddleware())
+			if orbitClient.GetServerCapabilities().Has(fleet.CapabilityEscrowBuddy) {
+				orbitClient.RegisterConfigReceiver(update.NewEscrowBuddyRunner(updateRunner, 5*time.Minute))
+			} else {
+				orbitClient.RegisterConfigReceiver(update.ApplyDiskEncryptionRunnerMiddleware())
+			}
 			orbitClient.RegisterConfigReceiver(update.ApplySwiftDialogDownloaderMiddleware(updateRunner))
 		case "windows":
 			orbitClient.RegisterConfigReceiver(update.ApplyWindowsMDMEnrollmentFetcherMiddleware(windowsMDMEnrollmentCommandFrequency, orbitHostInfo.HardwareUUID, orbitClient))
diff --git a/orbit/pkg/update/escrow_buddy.go b/orbit/pkg/update/escrow_buddy.go
new file mode 100644
index 0000000000..72ef1fab5a
--- /dev/null
+++ b/orbit/pkg/update/escrow_buddy.go
@@ -0,0 +1,120 @@
+package update
+
+import (
+	"fmt"
+	"sync"
+	"time"
+
+	"github.com/fleetdm/fleet/v4/server/fleet"
+	"github.com/rs/zerolog/log"
+)
+
+// EscrowBuddyRunner sets up [Escrow Buddy][1] to rotate FileVault keys on
+// macOS without user interaction. This runner:
+//
+// - Ensures Escrow Buddy is added as a target for the update runner, so the
+// authorization plugin is downloaded and installed.
+// - Shells out to call `defaults` to configure Escrow Buddy according to
+// server instructions provided via notifications.
+//
+// [1]: https://github.com/macadmins/escrow-buddy
+type EscrowBuddyRunner struct {
+	// updateRunner is the wrapped Runner where Escrow Buddy will be set as
+	// a target.
+	updateRunner *Runner
+	// runCmdFunc can be set in tests to mock the command executed to
+	// configure Escrow Buddy
+	runCmdFunc func(cmd string, args ...string) error
+	// runMu guards runs to prevent multiple Run calls happening at the
+	// same time.
+	runMu sync.Mutex
+	// lastRun is used to guarantee that the run interval is enforced
+	lastRun time.Time
+	// interval defines how often Run is allowed to perform work
+	interval time.Duration
+}
+
+// NewEscrowBuddyRunner returns a new instance configured with the provided values
+func NewEscrowBuddyRunner(runner *Runner, interval time.Duration) fleet.OrbitConfigReceiver {
+	return &EscrowBuddyRunner{updateRunner: runner, interval: interval}
+}
+
+func (e *EscrowBuddyRunner) Run(cfg *fleet.OrbitConfig) error {
+	log.Debug().Msgf("EscrowBuddyRunner: notification: %t", cfg.Notifications.RotateDiskEncryptionKey)
+
+	if e.updateRunner == nil {
+		log.Debug().Msg("EscrowBuddyRunner: received nil UpdateRunner, this probably indicates that updates are turned off. Skipping any actions related to Disk encryption")
+		return nil
+	}
+
+	if !e.runMu.TryLock() {
+		log.Debug().Msg("EscrowBuddyRunner: a previous instance is currently running, returning early")
+		return nil
+	}
+
+	defer e.runMu.Unlock()
+	if time.Since(e.lastRun) < e.interval {
+		log.Debug().Msgf("EscrowBuddyRunner: last run (%v) is less than the configured interval (%v), returning early", e.lastRun, e.interval)
+		return nil
+	}
+
+	updaterHasTarget := e.updateRunner.HasRunnerOptTarget("escrowBuddy")
+	// if the notification is false, it could mean that we shouldn't do
+	// anything at all (eg: MDM is not configured) or that this host
+	// doesn't need to rotate the key.
+	//
+	// if Escrow Buddy is a TUF target, it means that we tried to rotate
+	// the key before, and we must disable it to keep the local state as
+	// instructed by the server.
+	if !cfg.Notifications.RotateDiskEncryptionKey {
+		if updaterHasTarget {
+			log.Debug().Msg("EscrowBuddyRunner: disabling disk encryption rotation")
+			e.lastRun = time.Now()
+			return e.setGenerateNewKeyTo(false)
+		}
+
+		log.Debug().Msg("EscrowBuddyRunner: skipping any actions related to disk encryption")
+		return nil
+	}
+
+	runnerHasLocalHash := e.updateRunner.HasLocalHash("escrowBuddy")
+	if !updaterHasTarget || !runnerHasLocalHash {
+		log.Info().Msg("refreshing the update runner config with Escrow Buddy targets and hashes")
+		log.Debug().Msgf("updater has target: %t, runner has local hash: %t", updaterHasTarget, runnerHasLocalHash)
+		if err := e.setTargetsAndHashes(); err != nil {
+			return fmt.Errorf("setting Escrow Buddy targets and hashes: %w", err)
+		}
+	}
+
+	log.Debug().Msg("EscrowBuddyRunner: enabling disk encryption rotation")
+	if err := e.setGenerateNewKeyTo(true); err != nil {
+		return fmt.Errorf("enabling disk encryption rotation: %w", err)
+	}
+
+	e.lastRun = time.Now()
+	return nil
+}
+
+func (e *EscrowBuddyRunner) setTargetsAndHashes() error {
+	e.updateRunner.AddRunnerOptTarget("escrowBuddy")
+	e.updateRunner.updater.SetTargetInfo("escrowBuddy", EscrowBuddyMacOSTarget)
+	// we don't want to keep escrowBuddy as a target if we failed to update the
+	// cached hashes in the runner.
+	if err := e.updateRunner.StoreLocalHash("escrowBuddy"); err != nil {
+		log.Debug().Msgf("removing escrowBuddy from target options, error updating local hashes: %s", err)
+		e.updateRunner.RemoveRunnerOptTarget("escrowBuddy")
+		e.updateRunner.updater.RemoveTargetInfo("escrowBuddy")
+		return err
+	}
+	return nil
+}
+
+func (e *EscrowBuddyRunner) setGenerateNewKeyTo(enabled bool) error {
+	log.Debug().Msgf("running defaults write to configure Escrow Buddy with value %t", enabled)
+	cmd := fmt.Sprintf("defaults write /Library/Preferences/com.netflix.Escrow-Buddy.plist GenerateNewKey -bool %t", enabled)
+	fn := e.runCmdFunc
+	if fn == nil {
+		fn = runCmdCollectErr
+	}
+	return fn("sh", "-c", cmd)
+}
diff --git a/orbit/pkg/update/escrow_buddy_test.go b/orbit/pkg/update/escrow_buddy_test.go
new file mode 100644
index 0000000000..0ed61883b0
--- /dev/null
+++ b/orbit/pkg/update/escrow_buddy_test.go
@@ -0,0 +1,86 @@
+package update
+
+import (
+	"testing"
+	"time"
+
+	"github.com/fleetdm/fleet/v4/server/fleet"
+	"github.com/stretchr/testify/require"
+	"github.com/stretchr/testify/suite"
+)
+
+func TestEscrowBuddy(t *testing.T) {
+	testingSuite := new(escrowBuddyTestSuite)
+	testingSuite.s = &testingSuite.Suite
+	suite.Run(t, testingSuite)
+}
+
+type escrowBuddyTestSuite struct {
+	suite.Suite
+	withTUF
+}
+
+func (s *escrowBuddyTestSuite) TestUpdatesDisabled() {
+	t := s.T()
+	cfg := &fleet.OrbitConfig{}
+	cfg.Notifications.RotateDiskEncryptionKey = true
+	r := NewEscrowBuddyRunner(nil, time.Second)
+	err := r.Run(cfg)
+	require.NoError(t, err)
+}
+
+func (s *escrowBuddyTestSuite) TestEscrowBuddyRotatesKey() {
+	t := s.T()
+	updater := &Updater{
+		client: s.client,
+		opt:    Options{Targets: make(map[string]TargetInfo), RootDirectory: t.TempDir()},
+	}
+	runner := &Runner{updater: updater, localHashes: make(map[string][]byte)}
+	escrowBuddyPath := "escrowBuddy/macos/stable/escrowBuddy.pkg"
+
+	cfg := &fleet.OrbitConfig{}
+	r := &EscrowBuddyRunner{updateRunner: runner, interval: time.Millisecond}
+	// mock the command to run the defaults cli
+	cmdCalls := []map[string]any{}
+	r.runCmdFunc = func(cmd string, args ...string) error {
+		cmdCalls = append(cmdCalls, map[string]any{"cmd": cmd, "args": args})
+		return nil
+	}
+
+	// no new target added if the notification is not set
+	err := r.Run(cfg)
+	require.NoError(t, err)
+	targets := runner.updater.opt.Targets
+	require.Len(t, targets, 0)
+	require.Empty(t, cmdCalls)
+
+	// there's an error when the remote repo doesn't have the target yet
+	cfg.Notifications.RotateDiskEncryptionKey = true
+	err = r.Run(cfg)
+	require.ErrorContains(t, err, "tuf: file not found")
+	require.Empty(t, cmdCalls)
+
+	// add escrow buddy to the remote
+	s.addRemoteTarget(escrowBuddyPath)
+
+	err = r.Run(cfg)
+	require.NoError(t, err)
+	require.Len(t, cmdCalls, 1)
+	require.Equal(t, cmdCalls[0]["cmd"], "sh")
+	require.Equal(t, cmdCalls[0]["args"], []string{"-c", "defaults write /Library/Preferences/com.netflix.Escrow-Buddy.plist GenerateNewKey -bool true"})
+
+	targets = runner.updater.opt.Targets
+	require.Len(t, targets, 1)
+	ti, ok := targets["escrowBuddy"]
+	require.True(t, ok)
+	require.EqualValues(t, EscrowBuddyMacOSTarget, ti)
+
+	time.Sleep(3 * time.Millisecond)
+	cfg.Notifications.RotateDiskEncryptionKey = false
+	err = r.Run(cfg)
+	require.NoError(t, err)
+	require.Len(t, cmdCalls, 2)
+	require.Equal(t, cmdCalls[1]["cmd"], "sh")
+	require.Equal(t, cmdCalls[1]["args"], []string{"-c", "defaults write /Library/Preferences/com.netflix.Escrow-Buddy.plist GenerateNewKey -bool false"})
+
+}
diff --git a/orbit/pkg/update/options.go b/orbit/pkg/update/options.go
index 90cdcaf62a..ed04f5a10b 100644
--- a/orbit/pkg/update/options.go
+++ b/orbit/pkg/update/options.go
@@ -122,4 +122,10 @@ var (
 		TargetFile:           "swiftDialog.app.tar.gz",
 		ExtractedExecSubPath: []string{"Dialog.app", "Contents", "MacOS", "Dialog"},
 	}
+
+	EscrowBuddyMacOSTarget = TargetInfo{
+		Platform:   "macos",
+		Channel:    "stable",
+		TargetFile: "escrowBuddy.pkg",
+	}
 )
diff --git a/orbit/pkg/update/testing_utils.go b/orbit/pkg/update/testing_utils.go
index 53c943f2c8..83698e240e 100644
--- a/orbit/pkg/update/testing_utils.go
+++ b/orbit/pkg/update/testing_utils.go
@@ -85,6 +85,7 @@ func (ts *withTUF) SetupSuite() {
 	ts.mockFiles = map[string][]byte{
 		"nudge/macos/stable/nudge.app.tar.gz":       ts.memTarGz("/Nudge.app/Contents/MacOS/Nudge", "nudge"),
 		"osqueryd/macos/stable/osqueryd.app.tar.gz": ts.memTarGz("osqueryd", "osqueryd"),
+		"escrowBuddy/macos/stable/escrowBuddy.pkg":  {},
 	}
 	ts.store = tuf.MemoryStore(nil, ts.mockFiles)
 
diff --git a/orbit/pkg/update/update.go b/orbit/pkg/update/update.go
index c6b00df89e..f9bee2413f 100644
--- a/orbit/pkg/update/update.go
+++ b/orbit/pkg/update/update.go
@@ -384,6 +384,12 @@ func (u *Updater) get(target string) (*LocalTarget, error) {
 					return nil, fmt.Errorf("failed to remove old extracted dir: %q: %w", localTarget.DirPath, err)
 				}
 			}
+			if strings.HasSuffix(localTarget.Path, ".pkg") {
+				cmd := exec.Command("installer", "-pkg", localTarget.Path, "-target", "/")
+				if out, err := cmd.CombinedOutput(); err != nil {
+					return nil, fmt.Errorf("running pkgutil to install %s: %s: %w", localTarget.Path, string(out), err)
+				}
+			}
 		} else {
 			log.Debug().Str("path", localTarget.Path).Str("target", target).Msg("found expected target locally")
 		}
@@ -558,6 +564,14 @@ func (u *Updater) checkExec(target, tmpPath string, customCheckExec func(execPat
 		tmpPath = filepath.Join(append([]string{filepath.Dir(tmpPath)}, localTarget.Info.ExtractedExecSubPath...)...)
 	}
 
+	if strings.HasSuffix(tmpPath, ".pkg") && runtime.GOOS == "darwin" {
+		cmd := exec.Command("pkgutil", "--payload-files", tmpPath)
+		if out, err := cmd.CombinedOutput(); err != nil {
+			return fmt.Errorf("running pkgutil to verify %s: %s: %w", tmpPath, string(out), err)
+		}
+		return nil
+	}
+
 	if customCheckExec != nil {
 		if err := customCheckExec(tmpPath); err != nil {
 			return fmt.Errorf("custom exec new version failed: %w", err)
diff --git a/server/datastore/mysql/hosts.go b/server/datastore/mysql/hosts.go
index 1afd8e93de..f5ed94d2f4 100644
--- a/server/datastore/mysql/hosts.go
+++ b/server/datastore/mysql/hosts.go
@@ -2271,7 +2271,6 @@ func (ds *Datastore) LoadHostByOrbitNodeKey(ctx context.Context, nodeKey string)
       h.policy_updated_at,
       h.public_ip,
       h.orbit_node_key,
-      COALESCE(hdek.reset_requested, false) AS disk_encryption_reset_requested,
       IF(hdep.host_id AND ISNULL(hdep.deleted_at), true, false) AS dep_assigned_to_fleet,
       hd.encrypted as disk_encryption_enabled,
       COALESCE(hdek.decryptable, false) as encryption_key_available,
@@ -4955,20 +4954,6 @@ func (ds *Datastore) ListUpcomingHostMaintenanceWindows(ctx context.Context, hid
 	return mws, nil
 }
 
-func (ds *Datastore) SetDiskEncryptionResetStatus(ctx context.Context, hostID uint, status bool) error {
-	const stmt = `
-          INSERT INTO host_disk_encryption_keys (host_id, reset_requested, base64_encrypted)
-            VALUES (?, ?, '')
-          ON DUPLICATE KEY UPDATE
-            reset_requested = VALUES(reset_requested)`
-
-	_, err := ds.writer(ctx).ExecContext(ctx, stmt, hostID, status)
-	if err != nil {
-		return ctxerr.Wrap(ctx, err, "upsert disk encryption reset status")
-	}
-	return nil
-}
-
 // countHostNotResponding counts the hosts that haven't been submitting results for sent queries.
 //
 // Notes:
diff --git a/server/datastore/mysql/hosts_test.go b/server/datastore/mysql/hosts_test.go
index fb37661ccf..ed703b0f54 100644
--- a/server/datastore/mysql/hosts_test.go
+++ b/server/datastore/mysql/hosts_test.go
@@ -7616,7 +7616,6 @@ func testHostsLoadHostByOrbitNodeKey(t *testing.T, ds *Datastore) {
 
 		// the returned host by LoadHostByOrbitNodeKey will have the orbit key stored
 		h.OrbitNodeKey = &orbitKey
-		h.DiskEncryptionResetRequested = ptr.Bool(false)
 		returned, err := ds.LoadHostByOrbitNodeKey(ctx, orbitKey)
 		require.NoError(t, err)
 
@@ -7696,8 +7695,8 @@ func testHostsLoadHostByOrbitNodeKey(t *testing.T, ds *Datastore) {
 	require.NoError(t, err)
 	loadFleet, err = ds.LoadHostByOrbitNodeKey(ctx, *hFleet.OrbitNodeKey)
 	require.NoError(t, err)
-	require.True(t, loadFleet.MDM.EncryptionKeyAvailable)
 	require.NoError(t, err)
+	require.True(t, loadFleet.MDM.EncryptionKeyAvailable)
 	require.NotNil(t, loadFleet.DiskEncryptionEnabled)
 	require.True(t, *loadFleet.DiskEncryptionEnabled)
 
@@ -8361,8 +8360,8 @@ func testHostsEncryptionKeyRawDecryption(t *testing.T, ds *Datastore) {
 	// no disk encryption key information
 	got, err := ds.Host(ctx, host.ID)
 	require.NoError(t, err)
-	require.False(t, got.MDM.EncryptionKeyAvailable)
 	require.NotNil(t, got.MDM.TestGetRawDecryptable())
+	require.False(t, got.MDM.EncryptionKeyAvailable)
 	require.Equal(t, -1, *got.MDM.TestGetRawDecryptable())
 
 	// create the encryption key row, but unknown decryptable
@@ -8380,8 +8379,8 @@ func testHostsEncryptionKeyRawDecryption(t *testing.T, ds *Datastore) {
 
 	got, err = ds.Host(ctx, host.ID)
 	require.NoError(t, err)
-	require.False(t, got.MDM.EncryptionKeyAvailable)
 	require.NotNil(t, got.MDM.TestGetRawDecryptable())
+	require.False(t, got.MDM.EncryptionKeyAvailable)
 	require.Equal(t, 0, *got.MDM.TestGetRawDecryptable())
 
 	// mark the key as decryptable
@@ -8390,8 +8389,8 @@ func testHostsEncryptionKeyRawDecryption(t *testing.T, ds *Datastore) {
 
 	got, err = ds.Host(ctx, host.ID)
 	require.NoError(t, err)
-	require.True(t, got.MDM.EncryptionKeyAvailable)
 	require.NotNil(t, got.MDM.TestGetRawDecryptable())
+	require.True(t, got.MDM.EncryptionKeyAvailable)
 	require.Equal(t, 1, *got.MDM.TestGetRawDecryptable())
 }
 
diff --git a/server/fleet/capabilities.go b/server/fleet/capabilities.go
index b1bfff1139..be397bcc32 100644
--- a/server/fleet/capabilities.go
+++ b/server/fleet/capabilities.go
@@ -78,6 +78,8 @@ const (
 	// CapabilityEndUserEmail denotes the ability of the server to support
 	// receiving the end-user email from orbit.
 	CapabilityEndUserEmail Capability = "end_user_email"
+	// CapabilityEscrowBuddy allows to use Escrow Buddy to rotate FileVault keys
+	CapabilityEscrowBuddy Capability = "escrow_buddy"
 )
 
 func GetServerOrbitCapabilities() CapabilityMap {
@@ -85,6 +87,7 @@ func GetServerOrbitCapabilities() CapabilityMap {
 		CapabilityOrbitEndpoints: {},
 		CapabilityTokenRotation:  {},
 		CapabilityEndUserEmail:   {},
+		CapabilityEscrowBuddy:    {},
 	}
 }
 
diff --git a/server/fleet/datastore.go b/server/fleet/datastore.go
index a043eba04e..7c61870d68 100644
--- a/server/fleet/datastore.go
+++ b/server/fleet/datastore.go
@@ -883,8 +883,6 @@ type Datastore interface {
 	// GetHostDiskEncryptionKey returns the encryption key information for a given host
 	GetHostDiskEncryptionKey(ctx context.Context, hostID uint) (*HostDiskEncryptionKey, error)
 
-	SetDiskEncryptionResetStatus(ctx context.Context, hostID uint, status bool) error
-
 	// GetHostCertAssociationsToExpire retrieves host certificate
 	// associations that are close to expire and don't have a renewal in
 	// progress based on the provided arguments.
diff --git a/server/fleet/hosts.go b/server/fleet/hosts.go
index 8dc1eca42e..ac0e86723d 100644
--- a/server/fleet/hosts.go
+++ b/server/fleet/hosts.go
@@ -321,10 +321,6 @@ type Host struct {
 	// omitted if we don't have encryption information yet.
 	DiskEncryptionEnabled *bool `json:"disk_encryption_enabled,omitempty" db:"disk_encryption_enabled" csv:"-"`
 
-	// DiskEncryptionResetRequested is only fetched when loading a host by
-	// orbit_node_key, and so it's not used in the UI.
-	DiskEncryptionResetRequested *bool `json:"disk_encryption_reset_requested,omitempty" db:"disk_encryption_reset_requested" csv:"-"`
-
 	HostIssues `json:"issues,omitempty" csv:"-"`
 
 	// DeviceMapping is in fact included in the CSV export, but it is not directly
@@ -574,11 +570,7 @@ func (d *MDMHostData) PopulateOSSettingsAndMacOSSettings(profiles []HostMDMApple
 					// but either we didn't get an encryption key or we're not able to
 					// decrypt the key we've got
 					settings.DiskEncryption = DiskEncryptionActionRequired.addrOf()
-					if *d.rawDecryptable == 0 {
-						settings.ActionRequired = ActionRequiredRotateKey.addrOf()
-					} else {
-						settings.ActionRequired = ActionRequiredLogOut.addrOf()
-					}
+					settings.ActionRequired = ActionRequiredRotateKey.addrOf()
 				} else {
 					// if [a FileVault profile is pending to be installed or] the
 					// matching row in host_disk_encryption_keys has a field decryptable
@@ -1230,19 +1222,3 @@ func IsEligibleForDEPMigration(host *Host, mdmInfo *HostMDM, isConnectedToFleetM
 		// the checkout message from the host.
 		(!isConnectedToFleetMDM || mdmInfo.Name != WellKnownMDMFleet)
 }
-
-// IsEligibleForBitLockerEncryption checks if the host needs to enforce disk
-// encryption using Fleet MDM features.
-func IsEligibleForBitLockerEncryption(h *Host, mdmInfo *HostMDM, isConnectedToFleetMDM bool) bool {
-	isServer := mdmInfo != nil && mdmInfo.IsServer
-	isWindows := h.FleetPlatform() == "windows"
-	needsEncryption := h.DiskEncryptionEnabled != nil && !*h.DiskEncryptionEnabled
-	encryptedWithoutKey := h.DiskEncryptionEnabled != nil && *h.DiskEncryptionEnabled && !h.MDM.EncryptionKeyAvailable
-
-	return isWindows &&
-		h.IsOsqueryEnrolled() &&
-		isConnectedToFleetMDM &&
-		!isServer &&
-		mdmInfo != nil &&
-		(needsEncryption || encryptedWithoutKey)
-}
diff --git a/server/fleet/hosts_test.go b/server/fleet/hosts_test.go
index e350d701cd..94d0cd40a0 100644
--- a/server/fleet/hosts_test.go
+++ b/server/fleet/hosts_test.go
@@ -214,50 +214,6 @@ func TestMDMEnrollmentStatus(t *testing.T) {
 	}
 }
 
-func TestIsEligibleForBitLockerEncryption(t *testing.T) {
-	require.False(t, IsEligibleForBitLockerEncryption(&Host{}, &HostMDM{}, false))
-
-	hostThatNeedsEnforcement := &Host{
-		Platform:      "windows",
-		OsqueryHostID: ptr.String("test"),
-		MDM: MDMHostData{
-			EncryptionKeyAvailable: false,
-		},
-		DiskEncryptionEnabled: ptr.Bool(false),
-	}
-	hostThatNeedsEnforcementMdmInfo := &HostMDM{
-		Name:             WellKnownMDMFleet,
-		Enrolled:         true,
-		IsServer:         false,
-		InstalledFromDep: true,
-	}
-	require.True(t, IsEligibleForBitLockerEncryption(hostThatNeedsEnforcement, hostThatNeedsEnforcementMdmInfo, true))
-
-	// macOS hosts are not elegible
-	hostThatNeedsEnforcement.Platform = "darwin"
-	require.False(t, IsEligibleForBitLockerEncryption(hostThatNeedsEnforcement, hostThatNeedsEnforcementMdmInfo, true))
-	hostThatNeedsEnforcement.Platform = "windows"
-	require.True(t, IsEligibleForBitLockerEncryption(hostThatNeedsEnforcement, hostThatNeedsEnforcementMdmInfo, true))
-
-	// hosts with disk encryption already enabled are elegible only if we
-	// can't decrypt the key
-	hostThatNeedsEnforcement.DiskEncryptionEnabled = ptr.Bool(true)
-	require.True(t, IsEligibleForBitLockerEncryption(hostThatNeedsEnforcement, hostThatNeedsEnforcementMdmInfo, true))
-	hostThatNeedsEnforcement.MDM.EncryptionKeyAvailable = true
-	require.False(t, IsEligibleForBitLockerEncryption(hostThatNeedsEnforcement, hostThatNeedsEnforcementMdmInfo, true))
-
-	hostThatNeedsEnforcement.DiskEncryptionEnabled = ptr.Bool(false)
-	hostThatNeedsEnforcement.MDM.EncryptionKeyAvailable = false
-	require.True(t, IsEligibleForBitLockerEncryption(hostThatNeedsEnforcement, hostThatNeedsEnforcementMdmInfo, true))
-
-	// hosts without MDMinfo are not elegible
-	require.False(t, IsEligibleForBitLockerEncryption(hostThatNeedsEnforcement, nil, true))
-	require.True(t, IsEligibleForBitLockerEncryption(hostThatNeedsEnforcement, hostThatNeedsEnforcementMdmInfo, true))
-
-	// hosts that are not enrolled in MDM are not elegible
-	require.False(t, IsEligibleForBitLockerEncryption(hostThatNeedsEnforcement, hostThatNeedsEnforcementMdmInfo, false))
-}
-
 func TestIsEligibleForDEPMigration(t *testing.T) {
 	testCases := []struct {
 		name                    string
diff --git a/server/fleet/service.go b/server/fleet/service.go
index 5375b3d4bd..0148eb4162 100644
--- a/server/fleet/service.go
+++ b/server/fleet/service.go
@@ -928,8 +928,6 @@ type Service interface {
 	// for all hosts that are already marked as failing.
 	ResetAutomation(ctx context.Context, teamIDs, policyIDs []uint) error
 
-	RequestEncryptionKeyRotation(ctx context.Context, hostID uint) error
-
 	///////////////////////////////////////////////////////////////////////////////
 	// Windows MDM
 
diff --git a/server/mock/datastore_mock.go b/server/mock/datastore_mock.go
index 3fdb56d30b..7c9523da38 100644
--- a/server/mock/datastore_mock.go
+++ b/server/mock/datastore_mock.go
@@ -618,8 +618,6 @@ type SetHostsDiskEncryptionKeyStatusFunc func(ctx context.Context, hostIDs []uin
 
 type GetHostDiskEncryptionKeyFunc func(ctx context.Context, hostID uint) (*fleet.HostDiskEncryptionKey, error)
 
-type SetDiskEncryptionResetStatusFunc func(ctx context.Context, hostID uint, status bool) error
-
 type GetHostCertAssociationsToExpireFunc func(ctx context.Context, expiryDays int, limit int) ([]fleet.SCEPIdentityAssociation, error)
 
 type SetCommandForPendingSCEPRenewalFunc func(ctx context.Context, assocs []fleet.SCEPIdentityAssociation, cmdUUID string) error
@@ -1910,9 +1908,6 @@ type DataStore struct {
 	GetHostDiskEncryptionKeyFunc        GetHostDiskEncryptionKeyFunc
 	GetHostDiskEncryptionKeyFuncInvoked bool
 
-	SetDiskEncryptionResetStatusFunc        SetDiskEncryptionResetStatusFunc
-	SetDiskEncryptionResetStatusFuncInvoked bool
-
 	GetHostCertAssociationsToExpireFunc        GetHostCertAssociationsToExpireFunc
 	GetHostCertAssociationsToExpireFuncInvoked bool
 
@@ -4597,13 +4592,6 @@ func (s *DataStore) GetHostDiskEncryptionKey(ctx context.Context, hostID uint) (
 	return s.GetHostDiskEncryptionKeyFunc(ctx, hostID)
 }
 
-func (s *DataStore) SetDiskEncryptionResetStatus(ctx context.Context, hostID uint, status bool) error {
-	s.mu.Lock()
-	s.SetDiskEncryptionResetStatusFuncInvoked = true
-	s.mu.Unlock()
-	return s.SetDiskEncryptionResetStatusFunc(ctx, hostID, status)
-}
-
 func (s *DataStore) GetHostCertAssociationsToExpire(ctx context.Context, expiryDays int, limit int) ([]fleet.SCEPIdentityAssociation, error) {
 	s.mu.Lock()
 	s.GetHostCertAssociationsToExpireFuncInvoked = true
diff --git a/server/service/devices.go b/server/service/devices.go
index 31e9889cb5..288fbb304e 100644
--- a/server/service/devices.go
+++ b/server/service/devices.go
@@ -564,41 +564,6 @@ func (svc *Service) GetDeviceMDMAppleEnrollmentProfile(ctx context.Context) ([]b
 	return signed, nil
 }
 
-////////////////////////////////////////////////////////////////////////////////
-// Request a disk encryption reset
-////////////////////////////////////////////////////////////////////////////////
-
-type rotateEncryptionKeyRequest struct {
-	Token string `url:"token"`
-}
-
-func (r *rotateEncryptionKeyRequest) deviceAuthToken() string {
-	return r.Token
-}
-
-type rotateEncryptionKeyResponse struct {
-	Err error `json:"error,omitempty"`
-}
-
-func (r rotateEncryptionKeyResponse) error() error { return r.Err }
-
-func rotateEncryptionKeyEndpoint(ctx context.Context, request interface{}, svc fleet.Service) (errorer, error) {
-	host, ok := hostctx.FromContext(ctx)
-	if !ok {
-		err := ctxerr.Wrap(ctx, fleet.NewAuthRequiredError("internal error: missing host from request context"))
-		return rotateEncryptionKeyResponse{Err: err}, nil
-	}
-
-	if err := svc.RequestEncryptionKeyRotation(ctx, host.ID); err != nil {
-		return rotateEncryptionKeyResponse{Err: err}, nil
-	}
-	return rotateEncryptionKeyResponse{}, nil
-}
-
-func (svc *Service) RequestEncryptionKeyRotation(ctx context.Context, hostID uint) error {
-	return fleet.ErrMissingLicense
-}
-
 ////////////////////////////////////////////////////////////////////////////////
 // Signal start of mdm migration on a device
 ////////////////////////////////////////////////////////////////////////////////
diff --git a/server/service/handler.go b/server/service/handler.go
index caaf16ddb4..3d606bd159 100644
--- a/server/service/handler.go
+++ b/server/service/handler.go
@@ -799,10 +799,6 @@ func attachFleetAPIRoutes(r *mux.Router, svc fleet.Service, config config.FleetC
 		errorLimiter.Limit("get_device_mdm", desktopQuota),
 	).GET("/api/_version_/fleet/device/{token}/mdm/apple/manual_enrollment_profile", getDeviceMDMManualEnrollProfileEndpoint, getDeviceMDMManualEnrollProfileRequest{})
 
-	demdm.WithCustomMiddleware(
-		errorLimiter.Limit("post_device_rotate_encryption_key", desktopQuota),
-	).POST("/api/_version_/fleet/device/{token}/rotate_encryption_key", rotateEncryptionKeyEndpoint, rotateEncryptionKeyRequest{})
-
 	demdm.WithCustomMiddleware(
 		errorLimiter.Limit("post_device_migrate_mdm", desktopQuota),
 	).POST("/api/_version_/fleet/device/{token}/migrate_mdm", migrateMDMDeviceEndpoint, deviceMigrateMDMRequest{})
diff --git a/server/service/hosts_test.go b/server/service/hosts_test.go
index 67492d1c4d..b0f6dc7529 100644
--- a/server/service/hosts_test.go
+++ b/server/service/hosts_test.go
@@ -137,7 +137,7 @@ func TestHostDetailsMDMAppleDiskEncryption(t *testing.T) {
 				OperationType: fleet.MDMOperationTypeInstall,
 			},
 			fleet.DiskEncryptionActionRequired,
-			fleet.ActionRequiredLogOut,
+			fleet.ActionRequiredRotateKey,
 			&fleet.MDMDeliveryPending,
 		},
 		{
@@ -1857,3 +1857,196 @@ func TestBulkOperationFilterValidation(t *testing.T) {
 		})
 	}
 }
+
+func TestSetDiskEncryptionNotifications(t *testing.T) {
+	ds := new(mock.Store)
+	ctx := context.Background()
+	svc := &Service{ds: ds}
+
+	tests := []struct {
+		name                     string
+		host                     *fleet.Host
+		appConfig                *fleet.AppConfig
+		diskEncryptionConfigured bool
+		isConnectedToFleetMDM    bool
+		mdmInfo                  *fleet.HostMDM
+		getHostDiskEncryptionKey func(context.Context, uint) (*fleet.HostDiskEncryptionKey, error)
+		expectedNotifications    *fleet.OrbitConfigNotifications
+		expectedError            bool
+	}{
+		{
+			name: "no MDM configured",
+			host: &fleet.Host{ID: 1, Platform: "darwin"},
+			appConfig: &fleet.AppConfig{
+				MDM: fleet.MDM{EnabledAndConfigured: false},
+			},
+			diskEncryptionConfigured: true,
+			isConnectedToFleetMDM:    true,
+			mdmInfo:                  nil,
+			getHostDiskEncryptionKey: nil,
+			expectedNotifications:    &fleet.OrbitConfigNotifications{},
+			expectedError:            false,
+		},
+		{
+			name: "not connected to Fleet MDM",
+			host: &fleet.Host{ID: 1, Platform: "darwin"},
+			appConfig: &fleet.AppConfig{
+				MDM: fleet.MDM{EnabledAndConfigured: true},
+			},
+			diskEncryptionConfigured: true,
+			isConnectedToFleetMDM:    false,
+			mdmInfo:                  nil,
+			getHostDiskEncryptionKey: nil,
+			expectedNotifications:    &fleet.OrbitConfigNotifications{},
+			expectedError:            false,
+		},
+		{
+			name: "host not enrolled in osquery",
+			host: &fleet.Host{ID: 1, Platform: "darwin", OsqueryHostID: nil},
+			appConfig: &fleet.AppConfig{
+				MDM: fleet.MDM{EnabledAndConfigured: true},
+			},
+			diskEncryptionConfigured: true,
+			isConnectedToFleetMDM:    true,
+			mdmInfo:                  nil,
+			getHostDiskEncryptionKey: nil,
+			expectedNotifications:    &fleet.OrbitConfigNotifications{},
+			expectedError:            false,
+		},
+		{
+			name: "disk encryption not configured",
+			host: &fleet.Host{ID: 1, Platform: "darwin"},
+			appConfig: &fleet.AppConfig{
+				MDM: fleet.MDM{EnabledAndConfigured: true},
+			},
+			diskEncryptionConfigured: false,
+			isConnectedToFleetMDM:    true,
+			mdmInfo:                  nil,
+			getHostDiskEncryptionKey: nil,
+			expectedNotifications:    &fleet.OrbitConfigNotifications{},
+			expectedError:            false,
+		},
+		{
+			name: "darwin with decryptable key",
+			host: &fleet.Host{ID: 1, Platform: "darwin"},
+			appConfig: &fleet.AppConfig{
+				MDM: fleet.MDM{EnabledAndConfigured: true},
+			},
+			diskEncryptionConfigured: true,
+			isConnectedToFleetMDM:    true,
+			mdmInfo:                  nil,
+			getHostDiskEncryptionKey: func(ctx context.Context, id uint) (*fleet.HostDiskEncryptionKey, error) {
+				return &fleet.HostDiskEncryptionKey{Decryptable: ptr.Bool(true)}, nil
+			},
+			expectedNotifications: &fleet.OrbitConfigNotifications{
+				RotateDiskEncryptionKey: false,
+			},
+			expectedError: false,
+		},
+		{
+			name: "windows server with no encryption needed",
+			host: &fleet.Host{ID: 1, Platform: "windows", DiskEncryptionEnabled: ptr.Bool(true)},
+			appConfig: &fleet.AppConfig{
+				MDM: fleet.MDM{EnabledAndConfigured: true},
+			},
+			diskEncryptionConfigured: true,
+			isConnectedToFleetMDM:    true,
+			mdmInfo:                  &fleet.HostMDM{IsServer: true},
+			getHostDiskEncryptionKey: func(ctx context.Context, id uint) (*fleet.HostDiskEncryptionKey, error) {
+				return nil, newNotFoundError()
+			},
+			expectedNotifications: &fleet.OrbitConfigNotifications{
+				EnforceBitLockerEncryption: false,
+			},
+			expectedError: false,
+		},
+		{
+			name: "windows with encryption enabled but key missing",
+			host: &fleet.Host{ID: 1, Platform: "windows", DiskEncryptionEnabled: ptr.Bool(true)},
+			appConfig: &fleet.AppConfig{
+				MDM: fleet.MDM{EnabledAndConfigured: true},
+			},
+			diskEncryptionConfigured: true,
+			isConnectedToFleetMDM:    true,
+			mdmInfo:                  &fleet.HostMDM{IsServer: false},
+			getHostDiskEncryptionKey: func(ctx context.Context, id uint) (*fleet.HostDiskEncryptionKey, error) {
+				return nil, newNotFoundError()
+			},
+			expectedNotifications: &fleet.OrbitConfigNotifications{
+				EnforceBitLockerEncryption: true,
+			},
+			expectedError: false,
+		},
+		{
+			name: "darwin with missing encryption key",
+			host: &fleet.Host{ID: 1, Platform: "darwin"},
+			appConfig: &fleet.AppConfig{
+				MDM: fleet.MDM{EnabledAndConfigured: true},
+			},
+			diskEncryptionConfigured: true,
+			isConnectedToFleetMDM:    true,
+			mdmInfo:                  nil,
+			getHostDiskEncryptionKey: func(ctx context.Context, id uint) (*fleet.HostDiskEncryptionKey, error) {
+				return nil, newNotFoundError()
+			},
+			expectedNotifications: &fleet.OrbitConfigNotifications{
+				RotateDiskEncryptionKey: false,
+			},
+			expectedError: false,
+		},
+		{
+			name: "windows with encryption key and not decryptable",
+			host: &fleet.Host{ID: 1, Platform: "windows", DiskEncryptionEnabled: ptr.Bool(true)},
+			appConfig: &fleet.AppConfig{
+				MDM: fleet.MDM{EnabledAndConfigured: true},
+			},
+			diskEncryptionConfigured: true,
+			isConnectedToFleetMDM:    true,
+			mdmInfo:                  &fleet.HostMDM{IsServer: false},
+			getHostDiskEncryptionKey: func(ctx context.Context, id uint) (*fleet.HostDiskEncryptionKey, error) {
+				return &fleet.HostDiskEncryptionKey{Decryptable: ptr.Bool(false)}, nil
+			},
+			expectedNotifications: &fleet.OrbitConfigNotifications{
+				EnforceBitLockerEncryption: true,
+			},
+			expectedError: false,
+		},
+		{
+			name: "windows with enforce BitLocker",
+			host: &fleet.Host{ID: 1, Platform: "windows", DiskEncryptionEnabled: ptr.Bool(false)},
+			appConfig: &fleet.AppConfig{
+				MDM: fleet.MDM{EnabledAndConfigured: true},
+			},
+			diskEncryptionConfigured: true,
+			isConnectedToFleetMDM:    true,
+			mdmInfo:                  &fleet.HostMDM{IsServer: false},
+			getHostDiskEncryptionKey: func(ctx context.Context, id uint) (*fleet.HostDiskEncryptionKey, error) {
+				return nil, newNotFoundError()
+			},
+			expectedNotifications: &fleet.OrbitConfigNotifications{
+				EnforceBitLockerEncryption: true,
+			},
+			expectedError: false,
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			if tt.getHostDiskEncryptionKey != nil {
+				ds.GetHostDiskEncryptionKeyFunc = tt.getHostDiskEncryptionKey
+			}
+			ds.AppConfigFunc = func(ctx context.Context) (*fleet.AppConfig, error) {
+				return tt.appConfig, nil
+			}
+
+			notifs := &fleet.OrbitConfigNotifications{}
+			err := svc.setDiskEncryptionNotifications(ctx, notifs, tt.host, tt.appConfig, tt.diskEncryptionConfigured, tt.isConnectedToFleetMDM, tt.mdmInfo)
+			if tt.expectedError {
+				require.Error(t, err)
+			} else {
+				require.NoError(t, err)
+			}
+			require.Equal(t, tt.expectedNotifications.RotateDiskEncryptionKey, notifs.RotateDiskEncryptionKey)
+		})
+	}
+}
diff --git a/server/service/integration_mdm_test.go b/server/service/integration_mdm_test.go
index 647f298c29..44b1e95271 100644
--- a/server/service/integration_mdm_test.go
+++ b/server/service/integration_mdm_test.go
@@ -1729,7 +1729,7 @@ func (s *integrationMDMTestSuite) TestMDMAppleHostDiskEncryption() {
 	require.NotNil(t, getHostResp.Host.MDM.MacOSSettings.DiskEncryption)
 	require.Equal(t, fleet.DiskEncryptionActionRequired, *getHostResp.Host.MDM.MacOSSettings.DiskEncryption)
 	require.NotNil(t, getHostResp.Host.MDM.MacOSSettings.ActionRequired)
-	require.Equal(t, fleet.ActionRequiredLogOut, *getHostResp.Host.MDM.MacOSSettings.ActionRequired)
+	require.Equal(t, fleet.ActionRequiredRotateKey, *getHostResp.Host.MDM.MacOSSettings.ActionRequired)
 	require.NotNil(t, getHostResp.Host.MDM.OSSettings)
 	require.NotNil(t, getHostResp.Host.MDM.OSSettings.DiskEncryption.Status)
 	require.Equal(t, fleet.DiskEncryptionActionRequired, *getHostResp.Host.MDM.OSSettings.DiskEncryption.Status)
@@ -2521,36 +2521,6 @@ func (s *integrationMDMTestSuite) TestEnrollOrbitAfterDEPSync() {
 	require.Equal(t, h.ID, got.ID)
 }
 
-func (s *integrationMDMTestSuite) TestDiskEncryptionRotation() {
-	t := s.T()
-	h := createOrbitEnrolledHost(t, "darwin", "h", s.ds)
-
-	// false by default
-	resp := orbitGetConfigResponse{}
-	s.DoJSON("POST", "/api/fleet/orbit/config", json.RawMessage(fmt.Sprintf(`{"orbit_node_key": %q}`, *h.OrbitNodeKey)), http.StatusOK, &resp)
-	require.False(t, resp.Notifications.RotateDiskEncryptionKey)
-
-	// create an auth token for h
-	token := "much_valid"
-	mysql.ExecAdhocSQL(t, s.ds, func(db sqlx.ExtContext) error {
-		_, err := db.ExecContext(context.Background(), `INSERT INTO host_device_auth (host_id, token) VALUES (?, ?)`, h.ID, token)
-		return err
-	})
-
-	tokRes := s.DoRawNoAuth("POST", "/api/latest/fleet/device/"+token+"/rotate_encryption_key", nil, http.StatusOK)
-	tokRes.Body.Close()
-
-	// true after the POST request
-	resp = orbitGetConfigResponse{}
-	s.DoJSON("POST", "/api/fleet/orbit/config", json.RawMessage(fmt.Sprintf(`{"orbit_node_key": %q}`, *h.OrbitNodeKey)), http.StatusOK, &resp)
-	require.True(t, resp.Notifications.RotateDiskEncryptionKey)
-
-	// false on following requests
-	resp = orbitGetConfigResponse{}
-	s.DoJSON("POST", "/api/fleet/orbit/config", json.RawMessage(fmt.Sprintf(`{"orbit_node_key": %q}`, *h.OrbitNodeKey)), http.StatusOK, &resp)
-	require.False(t, resp.Notifications.RotateDiskEncryptionKey)
-}
-
 func (s *integrationMDMTestSuite) TestFleetdConfiguration() {
 	t := s.T()
 	s.assertConfigProfilesByIdentifier(nil, mobileconfig.FleetdConfigPayloadIdentifier, false)
diff --git a/server/service/orbit.go b/server/service/orbit.go
index 0afa2631e4..40f64ef2d3 100644
--- a/server/service/orbit.go
+++ b/server/service/orbit.go
@@ -207,15 +207,6 @@ func (svc *Service) GetOrbitConfig(ctx context.Context) (fleet.OrbitConfig, erro
 			notifs.NeedsMDMMigration = true
 		}
 
-		if host.DiskEncryptionResetRequested != nil && *host.DiskEncryptionResetRequested {
-			notifs.RotateDiskEncryptionKey = true
-
-			// Since this is an user initiated action, we disable
-			// the flag when we deliver the notification to Orbit
-			if err := svc.ds.SetDiskEncryptionResetStatus(ctx, host.ID, false); err != nil {
-				return fleet.OrbitConfig{}, err
-			}
-		}
 	}
 
 	// set the host's orbit notifications for Windows MDM
@@ -309,9 +300,17 @@ func (svc *Service) GetOrbitConfig(ctx context.Context) (fleet.OrbitConfig, erro
 			}
 		}
 
-		if mdmConfig.EnableDiskEncryption &&
-			fleet.IsEligibleForBitLockerEncryption(host, mdmInfo, isConnectedToFleetMDM) {
-			notifs.EnforceBitLockerEncryption = true
+		err = svc.setDiskEncryptionNotifications(
+			ctx,
+			&notifs,
+			host,
+			appConfig,
+			mdmConfig.EnableDiskEncryption,
+			isConnectedToFleetMDM,
+			mdmInfo,
+		)
+		if err != nil {
+			return fleet.OrbitConfig{}, ctxerr.Wrap(ctx, err, "setting team disk encryption notifications")
 		}
 
 		var updateChannels *fleet.OrbitUpdateChannels
@@ -371,10 +370,17 @@ func (svc *Service) GetOrbitConfig(ctx context.Context) (fleet.OrbitConfig, erro
 		}
 	}
 
-	if appConfig.MDM.WindowsEnabledAndConfigured &&
-		appConfig.MDM.EnableDiskEncryption.Value &&
-		fleet.IsEligibleForBitLockerEncryption(host, mdmInfo, isConnectedToFleetMDM) {
-		notifs.EnforceBitLockerEncryption = true
+	err = svc.setDiskEncryptionNotifications(
+		ctx,
+		&notifs,
+		host,
+		appConfig,
+		appConfig.MDM.EnableDiskEncryption.Value,
+		isConnectedToFleetMDM,
+		mdmInfo,
+	)
+	if err != nil {
+		return fleet.OrbitConfig{}, ctxerr.Wrap(ctx, err, "setting no-team disk encryption notifications")
 	}
 
 	var updateChannels *fleet.OrbitUpdateChannels
@@ -396,6 +402,46 @@ func (svc *Service) GetOrbitConfig(ctx context.Context) (fleet.OrbitConfig, erro
 	}, nil
 }
 
+func (svc *Service) setDiskEncryptionNotifications(
+	ctx context.Context,
+	notifs *fleet.OrbitConfigNotifications,
+	host *fleet.Host,
+	appConfig *fleet.AppConfig,
+	diskEncryptionConfigured bool,
+	isConnectedToFleetMDM bool,
+	mdmInfo *fleet.HostMDM,
+) error {
+	anyMDMConfigured := appConfig.MDM.EnabledAndConfigured || appConfig.MDM.WindowsEnabledAndConfigured
+	if !anyMDMConfigured ||
+		!isConnectedToFleetMDM ||
+		!host.IsOsqueryEnrolled() ||
+		!diskEncryptionConfigured {
+		return nil
+	}
+
+	encryptionKey, err := svc.ds.GetHostDiskEncryptionKey(ctx, host.ID)
+	if err != nil {
+		if !fleet.IsNotFound(err) {
+			return ctxerr.Wrap(ctx, err, "fetching host disk encryption key")
+		}
+	}
+
+	switch host.FleetPlatform() {
+	case "darwin":
+		notifs.RotateDiskEncryptionKey = encryptionKey.Decryptable != nil && !*encryptionKey.Decryptable
+	case "windows":
+		isServer := mdmInfo != nil && mdmInfo.IsServer
+		needsEncryption := host.DiskEncryptionEnabled != nil && !*host.DiskEncryptionEnabled
+		keyWasDecrypted := encryptionKey != nil && encryptionKey.Decryptable != nil && *encryptionKey.Decryptable
+		encryptedWithoutKey := host.DiskEncryptionEnabled != nil && *host.DiskEncryptionEnabled && !keyWasDecrypted
+		notifs.EnforceBitLockerEncryption = !isServer &&
+			mdmInfo != nil &&
+			(needsEncryption || encryptedWithoutKey)
+	}
+
+	return nil
+}
+
 // filterExtensionsForHost filters a extensions configuration depending on the host platform and label membership.
 //
 // If all extensions are filtered, then it returns (nil, nil) (Orbit expects empty extensions if there
diff --git a/tools/tuf/README.md b/tools/tuf/README.md
index 9f30f296f2..3915fdb892 100644
--- a/tools/tuf/README.md
+++ b/tools/tuf/README.md
@@ -225,6 +225,19 @@ make nudge-app-tar-gz version=1.1.10.81462 out-path=.
 fleetctl updates add --target /path/to/macos/nudge.app.tar.gz --platform macos --name nudge --version 1.1.10.81462 -t edge
 ```
 
+#### Releasing `Escrow Buddy` to `stable`
+
+> `releaser.sh` doesn't support `Escrow Buddy` yet.
+> macOS only component
+
+The `Escrow Buddy` pkg installer can be generated by running:
+```sh
+make escrow-buddy-pkg version=1.0.0 out-path=.
+```
+```sh
+fleetctl updates add --target /path/to/escrowBuddy.pkg --platform macos --name escrowBuddy --version 1.0.0 -t stable
+```
+
 #### Updating timestamp
 
 ```sh
diff --git a/tools/tuf/test/create_repository.sh b/tools/tuf/test/create_repository.sh
index 86fa0f5e17..0f13a21357 100755
--- a/tools/tuf/test/create_repository.sh
+++ b/tools/tuf/test/create_repository.sh
@@ -28,8 +28,7 @@ SYSTEMS=${SYSTEMS:-macos linux linux-arm64 windows}
 echo "Generating packages for $SYSTEMS"
 
 NUDGE_VERSION=stable
-SWIFT_DIALOG_MACOS_APP_VERSION=2.2.1
-SWIFT_DIALOG_MACOS_APP_BUILD_VERSION=4591
+ESCROW_BUDDY_PKG_VERSION=1.0.0
 
 if [[ -z "$OSQUERY_VERSION" ]]; then
     OSQUERY_VERSION=5.12.2
@@ -168,6 +167,20 @@ for system in $SYSTEMS; do
         rm swiftDialog.app.tar.gz
     fi
 
+    # Add Escrow Buddy on macos (if enabled).
+    if [[ $system == "macos" && -n "$ESCROW_BUDDY" ]]; then
+	make escrow-buddy-pkg version=$ESCROW_BUDDY_PKG_VERSION out-path=.
+
+        ./build/fleetctl updates add \
+            --path $TUF_PATH \
+            --target escrowBuddy.pkg \
+            --platform macos \
+            --name escrowBuddy \
+            --version 42.0.0 -t 42.0 -t 42 -t stable
+        rm escrowBuddy.pkg
+    fi
+
+
     # Add Fleet Desktop application on windows (if enabled).
     if [[ $system == "windows" && -n "$FLEET_DESKTOP" ]]; then
         FLEET_DESKTOP_VERSION=42.0.0 \

From 8b5094ff3787984789666f734b660df03e70c553 Mon Sep 17 00:00:00 2001
From: Grant Bilstad <82750216+pacamaster@users.noreply.github.com>
Date: Wed, 31 Jul 2024 16:10:46 -0600
Subject: [PATCH 12/88] Fix link for fleetctl install  (#20835)

---
 docs/Using Fleet/enroll-hosts.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/Using Fleet/enroll-hosts.md b/docs/Using Fleet/enroll-hosts.md
index 952383ec57..6112eec51e 100644
--- a/docs/Using Fleet/enroll-hosts.md	
+++ b/docs/Using Fleet/enroll-hosts.md	
@@ -12,7 +12,7 @@ Fleet supports the [latest version of osquery](https://github.com/osquery/osquer
 
 ## CLI
 
-> You must have `fleetctl` installed. [Learn how to install `fleetctl`](https://fleetdm.com/fleetctl-preview).
+> You must have `fleetctl` installed. [Learn how to install `fleetctl`](https://fleetdm.com/docs/using-fleet/fleetctl-cli#installing-fleetctl).
 
 The `fleetctl package` command is used to generate Fleet's agent (fleetd).
 

From 6fd628463dbf5306cbddc77b407b0a79715d2dda Mon Sep 17 00:00:00 2001
From: Eric <eashaw@sailsjs.com>
Date: Wed, 31 Jul 2024 17:25:18 -0500
Subject: [PATCH 13/88] Website: fix pricing table filtering (#20912)

Changes:
- Fixed the IT and Security filtering on the pricing features table.
---
 website/api/controllers/view-pricing.js | 53 +++++++++++++------------
 1 file changed, 28 insertions(+), 25 deletions(-)

diff --git a/website/api/controllers/view-pricing.js b/website/api/controllers/view-pricing.js
index e3c914e0ae..7d07b6b770 100644
--- a/website/api/controllers/view-pricing.js
+++ b/website/api/controllers/view-pricing.js
@@ -44,36 +44,39 @@ module.exports = {
       pricingTable.push(allFeaturesInThisCategory);
     }
 
-    let pricingTableForSecurity = _.filter(pricingTable, (category)=>{
-      return category.categoryName !== 'Device management' && (category.usualDepartment === 'Security' || category.usualDepartment === undefined);
-    });
+    let pricingTableForSecurity = [];
     let categoryOrderForSecurityPricingTable = ['Support', 'Deployment', 'Integrations', 'Endpoint operations', 'Vulnerability management'];
-    // Sort the security-focused pricing table from the order of the elements in the categoryOrderForSecurityPricingTable array.
-    pricingTableForSecurity.sort((a, b)=>{
-      // If there is a category that is not in the list above, sort it to the end of the list.
-      if(categoryOrderForSecurityPricingTable.indexOf(a.categoryName) === -1){
-        return 1;
-      } else if(categoryOrderForSecurityPricingTable.indexOf(b.categoryName) === -1) {
-        return -1;
-      }
-      return categoryOrderForSecurityPricingTable.indexOf(a.categoryName) - categoryOrderForSecurityPricingTable.indexOf(b.categoryName);
-    });
+    for(let category of categoryOrderForSecurityPricingTable) {
+      // Get all the features in that have a pricingTableFeatures array that contains this category.
+      let featuresInThisCategory = _.filter(pricingTableFeatures, (feature)=>{
+        return _.contains(feature.pricingTableCategories, category) && (feature.usualDepartment === 'Security' || feature.usualDepartment === undefined);
+      });
+      // Build a dictionary containing the category name, and all features in the category
+      let allSecurityFeaturesInThisCategory = {
+        categoryName: category,
+        features: featuresInThisCategory,
+      };
+      // Add the dictionaries to the arrays that we'll use to build the features table.
+      pricingTableForSecurity.push(allSecurityFeaturesInThisCategory);
+    }
 
 
-    let pricingTableForIt = _.filter(pricingTable, (category)=>{
-      return category.categoryName !== 'Vulnerability management' && (category.usualDepartment === 'Security' || category.usualDepartment === undefined);
-    });
     let categoryOrderForITPricingTable = [ 'Deployment','Device management', 'Endpoint operations', 'Integrations', 'Support'];
+    let pricingTableForIt = [];
     // Sort the IT-focused pricing table from the order of the elements in the categoryOrderForITPricingTable array.
-    pricingTableForIt.sort((a, b)=>{
-      // If there is a category that is not in the list above, sort it to the end of the list.
-      if(categoryOrderForITPricingTable.indexOf(a.categoryName) === -1){
-        return 1;
-      } else if(categoryOrderForITPricingTable.indexOf(b.categoryName) === -1) {
-        return -1;
-      }
-      return categoryOrderForITPricingTable.indexOf(a.categoryName) - categoryOrderForITPricingTable.indexOf(b.categoryName);
-    });
+    for(let category of categoryOrderForITPricingTable) {
+      // Get all the features in that have a pricingTableFeatures array that contains this category.
+      let featuresInThisCategory = _.filter(pricingTableFeatures, (feature)=>{
+        return _.contains(feature.pricingTableCategories, category) && (feature.usualDepartment === 'IT' || feature.usualDepartment === undefined);
+      });
+      // Build a dictionary containing the category name, and all features in the category, sorting premium features to the bottom of the list.
+      let allItFeaturesInThisCategory = {
+        categoryName: category,
+        features: featuresInThisCategory,
+      };
+      // Add the dictionaries to the arrays that we'll use to build the features table.
+      pricingTableForIt.push(allItFeaturesInThisCategory);
+    }
 
 
     // Respond with view.

From ba2f79e1c4f5bb2d47aca419fd854ebb22ea35f3 Mon Sep 17 00:00:00 2001
From: Eric <eashaw@sailsjs.com>
Date: Wed, 31 Jul 2024 17:40:41 -0500
Subject: [PATCH 14/88] Website: personalize /better page for Secure Frame
 users (#20890)

Related to: https://github.com/fleetdm/confidential/issues/7227

Changes:
- Added a banner to the /better page that is visible to users who visit
it with a `?utm_content=secureframe` query param.
- Updated the `<animated-arrow-button>` component to support customizing
text and arrow color.
---
 website/api/controllers/view-transparency.js  |   4 +--
 .../images/logo-secureframe-46x48@2x.png      | Bin 0 -> 2053 bytes
 .../animated-arrow-button.component.js        |   8 +++--
 website/assets/js/pages/transparency.page.js  |   1 +
 .../animated-arrow-button.component.less      |   2 +-
 website/assets/styles/pages/transparency.less |  31 ++++++++++++++++++
 website/views/pages/transparency.ejs          |   9 ++++-
 7 files changed, 48 insertions(+), 7 deletions(-)
 create mode 100644 website/assets/images/logo-secureframe-46x48@2x.png

diff --git a/website/api/controllers/view-transparency.js b/website/api/controllers/view-transparency.js
index c079ed5300..7267792026 100644
--- a/website/api/controllers/view-transparency.js
+++ b/website/api/controllers/view-transparency.js
@@ -6,7 +6,6 @@ module.exports = {
 
   description: 'Display "Transparency" page.',
 
-
   exits: {
 
     success: {
@@ -17,9 +16,8 @@ module.exports = {
 
 
   fn: async function () {
-
     // Respond with view.
-    return {};
+    return {showSecureframeBanner: this.req.param('utm_content') === 'secureframe'};
 
   }
 
diff --git a/website/assets/images/logo-secureframe-46x48@2x.png b/website/assets/images/logo-secureframe-46x48@2x.png
new file mode 100644
index 0000000000000000000000000000000000000000..86107888f9aa26af557972d36d6d9b5ddad47c98
GIT binary patch
literal 2053
zcmV+g2>SPlP)<h;3K|Lk000e1NJLTq003M7003YJ1^@s6kXIFs00009a7bBm000&x
z000&x0ZCFM@Bjb+0drDELIAGL9O(c600d`2O+f$vv5yP<VFdsH2bxJlK~#7F?VVjx
z8%Gewdq$%C6lZe+Z%%-8f`}6kp8)v;#*eAkAb+ItXnX?j3GAG}@(B<p$mRqQ$rCZ!
zPWQ~9Z)ti~5=guAb73eL?ZSUsz1=;%GYYnZ<ns3vN>0D|OQzr+NiI7HK&=IkH*!^b
zq9AYax7|nSQK$~;uwmG8bA5ZH5LyV>0zf`B{mY?>Y(#Kt$-0e79U^>dDTIh)t%9@A
zxvo7&#A7gSA}T%2+5~@m^_GS1D8x$m<D#rAcyjq$16BSWko|MS$4Y`*s~(&|L`)&U
z*;k{geTr5cPO#u4c8W@Wp&Mcfkzj%ZABhbqYyir_GAKFXOmm%LQ`*x7%&+LH9>87~
z;HKYicKT2OM1rqFY%4PUL23O(Rm7c#SMXKEwnD?}e)ClqB7PrE(a3qh8)QbsnrBhy
zN%XQGQk;DX5FYwbw)sI}-i%_;ve2bCSMn!>(WgSyi+=Ou0wQx+=u({D4uM=q?P<UH
zYY!p|nJYM_>=aR?Acw@>JKz}&h%9Bsr4)!t$c^kZqu4TLES&1uG&>`=ZX1ad6WdL>
zHOPU{l$+jHfTf;pQ#g1rA-J(_#5M?_3q$es$!7>8xqRC~1*bIS#$p?Rt1;zPOQtMb
zw?OVnvVQZl0|DIC&Jn6xWt<S4tqz2cD|rC{#M-%KnE3G99E8@5ps616O6*D=U%h!x
z?k7%Ez(l5*|15kBXuSO(9c#sgV~7}rf>S8?ljH?ljG}6vD7oR%KooltBREGVU?K(q
zh#w`x_?YBIIuMz_S$It*wjme!?gFKOO5g-HJ$_!CJMm5)&<&XH2Ps5mFkvBC<G!d%
z%FNgZhADUsVNiL1U6m?%;j5k*!6~IqWld>*K}@z9kl1kToGwwPD${P(!o_d@fxrSy
zZ3HCP(m+_Yy6b2gp~#R~q3nJD1xf>DKnIM?M5B~`A{r*VACwIeyq3ZmL2-Fi2Ui)(
zK!}A$)&L1U$lyV!W^ZChZ=uLlD9ryt<!|VsF-P?20)!-&Z`#E!lJ136Hto4MkWg(1
z#(yqlTaWeMAb`aD!568JFvpbmya&<o)Pb~jWt9#vn!aoQyZ=&D0~($0b%%^XJU?)U
z?{CshKxxvE`iID~MO1h$eLj<Z&x|hk0Tk%4)tFy=clGWl<TV_!a-INz*uSZ>&>Og$
zrpiEs_7=I^)fHbrRNuaoO!PF@df_|62(C=)u%BF7GdJnFn9_;Pa{z7zZT5F?Lqu*s
ziD!k(bXrJlq;#S$nja1loJba3xpDZu5NPGhE{GoRH(_g@R@xpc#P7<i+}25g%dOik
z`f*rLFl*(*Ow%;Ziw>fWmfeNNQ8;)C;bLsH=<aV48t1H)k5YSiF^R-hqKV-Z#MoNV
z?YZQxW!lQe+ax$c5?wj6^5;@3FQe!#D9D6kTjN>{1$Q?(X*QNDi#4Yyo9I?62#8vA
zd-&DV55zTxWwGWwc0}|u?thewbx(OnJ;LGe9Fqs(XhnAOv<F(A#!j;XqElUI@JSvN
zNPRgr?vANv4-)cLVIgXt0><xx=&9UY;)QG+BzL_(GlGX&Io}i>_uidD0NXCQb(j8g
znB&WDp7RB_CmcM3fYh8){<eL@P|o&S`hT*XNO3rATSw*!9vW*h+(%d@(cJ`z09ocq
z$J^)63+FV8q~;|PJ&{FWc^72NziEyWmd4(_W+y}!;_oQtV}gu?BbB=EU^J*1+DcJm
z**tfygJNwPH{y}@Jg+}WTt;qsF8%P0Q`WuqDDh4ryDON%J#c^LGEtaUaJ}}<f}5nG
zeJRo@#dTAws^Aaz@NG2(S9mBIhxs+Em3me=!EOIKw1mTDF}Ao@=B8gc!R-o1Qh{{W
zH$qxnWVo!m@#U<y1>3pBg*FrmBzpiMPeFuDBJ0Kb=yn9HzDHDz(c0xQ_-X6w=85nD
z1mzv2Tmo6=M1$(u!98?40}lTSLSs!-rj|dDmVY(Jg~$wcEdl=;Fz$ik7KqTsr9{DJ
z$)wipmOBwL=$cnRWCC86M7qL}bh(r92a2QMW7x+SWzGBc0RdrnIW|dAnXu4@U2pO9
zOgcVfF&}`v;YEys7g(~Dty`L1T6Z#XQB@Y)b@<|0$YbX=feNthsphK63GUV|{~9Xv
z=m4gLA{CC#rk91S^J9bbmI~=b*+Ep_*1!kd{tAmI@YG@0GJ~@{KK`6EV&J|*?mrB8
zNp{^h`EmN2F)S2NK<tGbY|+9!6cL+C1OGH$KAZQmXyHp>pB*YTcuE5?4xfXoou3!k
z7)qJ_E*6&tqTpjp?v@z7i66)Hl&xMY9Rrb}&}z6XWf4^Gy78*%8&z2gAFf@l@emQ(
zD{f0kxy(S+LRYsZe)M2{8u!O-YL@@du<xea8pdrDXv>@8ZaW51Ld8>T4Q_~ps!(vs
zZ9b}}u>Le;hkzIs7KCdu>_$SjV~9~o0o+y$9VkE)JPcPmKj}h2qDv97uI<jEg?kw7
zmRQ`X$BBY3U{l*tM!_d>>ka77o7yR{@`9TOTTL4SuQM>{ZF*VlI<KUs9&B~a`-Z34
j=)>;EoUJ<LR)qfnHw%kky(|*n00000NkvXXu0mjf;`Yq;

literal 0
HcmV?d00001

diff --git a/website/assets/js/components/animated-arrow-button.component.js b/website/assets/js/components/animated-arrow-button.component.js
index 00e7df9e76..d7a42e0049 100644
--- a/website/assets/js/components/animated-arrow-button.component.js
+++ b/website/assets/js/components/animated-arrow-button.component.js
@@ -14,6 +14,8 @@ parasails.registerComponent('animatedArrowButton', {
   //  ╩  ╩╚═╚═╝╩  ╚═╝
   props: [
     'buttonType',
+    'arrowColor',// For customizing the color of the animated arrow. e.g., arrow-color="#FFF"
+    'textColor',// For customizing the color of the button text. e.g., text-color="#FFF"
   ],
 
   //  ╦╔╗╔╦╔╦╗╦╔═╗╦    ╔═╗╔╦╗╔═╗╔╦╗╔═╗
@@ -22,6 +24,8 @@ parasails.registerComponent('animatedArrowButton', {
   data: function (){
     return {
       type: 'secondary',
+      strokeColor: this.arrowColor ? this.arrowColor : '#FF5C83',
+      fontColor: this.textColor ? this.textColor : '#192147'
       // FUTURE: support more button types (primary and secondary)
       // type: this.buttonType && this.buttonType === 'primary' ? 'primary' : 'secondary',
     };
@@ -32,8 +36,8 @@ parasails.registerComponent('animatedArrowButton', {
   //  ╩ ╩ ╩ ╩ ╩╩═╝
   template: `
   <a :class="type" style="text-decoration: none;">
-    <span purpose="button-text"><slot name="default"></slot></span>
-    <svg purpose="animated-arrow" xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12">
+    <span purpose="button-text" :style="'color: '+fontColor+';'"><slot name="default"></slot></span>
+    <svg purpose="animated-arrow" :style="'stroke: '+strokeColor+';'" xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12">
       <path purpose="arrow-line" d="M1 6H9" stroke-width="2" stroke-linecap="round"/>
       <path purpose="chevron" d="M1.35712 1L5.64283 6L1.35712 11" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"/>
     </svg>
diff --git a/website/assets/js/pages/transparency.page.js b/website/assets/js/pages/transparency.page.js
index 211b9f441f..be7cfde1f3 100644
--- a/website/assets/js/pages/transparency.page.js
+++ b/website/assets/js/pages/transparency.page.js
@@ -4,6 +4,7 @@ parasails.registerPage('transparency', {
   //  ╩╝╚╝╩ ╩ ╩╩ ╩╩═╝  ╚═╝ ╩ ╩ ╩ ╩ ╚═╝
   data: {
     //…
+    showSecureframeBanner: false,
   },
 
   //  ╦  ╦╔═╗╔═╗╔═╗╦ ╦╔═╗╦  ╔═╗
diff --git a/website/assets/styles/components/animated-arrow-button.component.less b/website/assets/styles/components/animated-arrow-button.component.less
index 60102c4d7b..61d9b459b8 100644
--- a/website/assets/styles/components/animated-arrow-button.component.less
+++ b/website/assets/styles/components/animated-arrow-button.component.less
@@ -21,7 +21,7 @@
     height: 12px;
     width: 12px;
     fill: none;
-    stroke: #FF5C83;
+    // stroke: #FF5C83; « Note: this is overridden by the arrow-color prop;
   }
   [purpose='arrow-line'] {
     opacity: 0;
diff --git a/website/assets/styles/pages/transparency.less b/website/assets/styles/pages/transparency.less
index ac5831ccf0..4e787318f6 100644
--- a/website/assets/styles/pages/transparency.less
+++ b/website/assets/styles/pages/transparency.less
@@ -128,6 +128,31 @@
       }
     }
   }
+  [purpose='secureframe-banner'] {
+    width: 100%;
+    text-align: center;
+    color: #FFF;
+    h2, p {
+      color: #FFF;
+    }
+    h2 {
+      margin-bottom: 16px;
+    }
+    [parasails-component='animated-arrow-button'] {
+      font-weight: 600;
+    }
+    border-radius: 16px;
+    background: #091922;
+    padding: 32px;
+    img {
+      height: 48px;
+      width: 45.474px;
+      margin-bottom: 16px;
+      margin-left: auto;
+      margin-right: auto;
+    }
+  }
+
   [purpose='feature-headline'] {
     max-width: 510px;
     margin-bottom: 80px;
@@ -332,6 +357,12 @@
         margin-right: auto;
       }
     }
+    [purpose='secureframe-banner'] {
+      padding: 32px 16px;
+      h2 {
+        font-size: 24px;
+      }
+    }
   }
 
   @media (max-width: 375px) {
diff --git a/website/views/pages/transparency.ejs b/website/views/pages/transparency.ejs
index 12f255e580..4e478e147c 100644
--- a/website/views/pages/transparency.ejs
+++ b/website/views/pages/transparency.ejs
@@ -25,7 +25,14 @@
       <div purpose="logos" class="mx-auto">
         <logo-carousel></logo-carousel>
       </div>
-    
+    <div purpose="secureframe-section" v-if="showSecureframeBanner">
+      <div purpose="secureframe-banner" class="d-flex flex-column">
+        <img alt="Secureframe logo" src="/images/logo-secureframe-46x48@2x.png">
+        <h2>Automate compliance. <br>Improve security. Reduce risk.</h2>
+        <p>Build trust with customers using automation backed by world-class experts</p>
+      <animated-arrow-button class="mx-auto" href="https://secureframe.com" target="_blank" text-color="#FFFFFF" arrow-color="#0FD082">Learn more</animated-arrow-button>
+      </div>
+    </div>
     <div purpose="page-section">
       <div purpose="feature-headline" style="max-width: 580px;">
         <h2>Don’t make me think about IT</h2>

From 68f2f58ebefc34f1854f470fe9487156cdfb8ae1 Mon Sep 17 00:00:00 2001
From: Mike McNeil <mikermcneil@users.noreply.github.com>
Date: Wed, 31 Jul 2024 18:24:31 -0500
Subject: [PATCH 15/88] Website: test bringing below-the-fold content higher
 (#20913)

Co-authored-by: Eric <eashaw@sailsjs.com>
---
 website/assets/styles/pages/transparency.less |  6 +-
 website/views/pages/device-management.ejs     | 11 ++-
 website/views/pages/endpoint-ops.ejs          |  5 +-
 website/views/pages/homepage.ejs              |  3 -
 website/views/pages/transparency.ejs          | 70 ++++---------------
 .../views/pages/vulnerability-management.ejs  |  1 -
 .../partials/calendar-banner.partial.ejs      |  2 +-
 7 files changed, 24 insertions(+), 74 deletions(-)

diff --git a/website/assets/styles/pages/transparency.less b/website/assets/styles/pages/transparency.less
index 4e787318f6..15334ab0a9 100644
--- a/website/assets/styles/pages/transparency.less
+++ b/website/assets/styles/pages/transparency.less
@@ -54,7 +54,7 @@
   }
   [purpose='hero-text'] {
     text-align: center;
-    margin-bottom: 40px;
+    margin-bottom: 80px;
     h1 {
       font-size: 48px;
       font-weight: 800;
@@ -193,13 +193,13 @@
 
 
   [purpose='accordion'] {
-    padding-top: 64px;
+
     h2 {
       padding-bottom: 16px;
     }
     [purpose='accordion-body'] {
       width: 100%;
-      padding-top: 64px;
+
       [purpose='accordion-item'] {
         border-bottom: 1px solid #E2E4EA;
         padding-bottom: ;
diff --git a/website/views/pages/device-management.ejs b/website/views/pages/device-management.ejs
index 93215dc33a..f7b0f37a84 100644
--- a/website/views/pages/device-management.ejs
+++ b/website/views/pages/device-management.ejs
@@ -416,7 +416,10 @@
       </div>
       <%/* Shorten the feedback loop section */%>
       <div purpose="page-section">
-        <div purpose="feature" class="d-flex flex-md-row flex-column-reverse justify-content-between mx-auto align-items-center">
+        <div purpose="feature" class="d-flex flex-md-row flex-column justify-content-between mx-auto align-items-center">
+          <div purpose="feature-image" class="left">
+            <img alt="A laptop using Fleet to accurately display the status of MDM configurations" src="/images/mdm-shorten-feedback-loop-528x377@2x.png">
+          </div>
           <div purpose="feature-text" class="d-flex flex-column">
             <h2>Shorten the feedback loop</h2>
             <p>Spend less time debugging whether changes actually happened.</p>
@@ -426,14 +429,8 @@
               <p>Every change to a policy or security control is tracked and auditable in Fleet’s UI, or in your logs.</p>
             </div>
           </div>
-          <div purpose="feature-image" class="right">
-            <img alt="A laptop using Fleet to accurately display the status of MDM configurations" src="/images/mdm-shorten-feedback-loop-528x377@2x.png">
-          </div>
         </div>
       </div>
-      <div purpose="page-section">
-        <%-  partial('../partials/calendar-banner.partial.ejs') %>
-      </div>
       <%/* Scope transparency section */%>
       <div purpose="page-section">
         <div purpose="feature" class="d-flex flex-md-row flex-column-reverse justify-content-between mx-auto align-items-center">
diff --git a/website/views/pages/endpoint-ops.ejs b/website/views/pages/endpoint-ops.ejs
index fa80f91e7d..dc107d725d 100644
--- a/website/views/pages/endpoint-ops.ejs
+++ b/website/views/pages/endpoint-ops.ejs
@@ -123,10 +123,8 @@
         <p>Remote-control IT tasks on every kind of computer – even you, Linux.</p>
         <div purpose="checklist" class="flex-column d-flex">
           <p>Write and run scripts remotely, report progress, and replay queued up tasks on computers that went offline.</p>
-          <p>Integrate Google Calendar to install updates and force restarts when your users’ computers are actually free.</p>
-          <p>Reduce human error by automating click-tastic tasks directly on the host with <a href="https://www.openinterpreter.com/" target="_blank">Open Interpreter</a>.*</p>
+          <p>Optionally integrate Google Calendar to make changes when certain users’ devices are actually free.</p>
         </div>
-        <p purpose="feature-footnote">*Coming soon</p>
       </div>
       <div purpose="feature-image">
         <img alt="Ship data to any platform" src="/images/device-management-clickops-or-devops-380x280@2x.png">
@@ -228,7 +226,6 @@
         </div>
       </div>
     </div>
-    <%-  partial('../partials/calendar-banner.partial.ejs') %>
     <div purpose="feature" class="d-flex flex-md-row flex-column justify-content-between mx-auto align-items-center">
       <div purpose="feature-image">
         <img alt="Ship data to any platform" src="/images/endpoint-ops-feature-image-2-380x380@2x.png">
diff --git a/website/views/pages/homepage.ejs b/website/views/pages/homepage.ejs
index f46f1b6c48..e068fde91b 100644
--- a/website/views/pages/homepage.ejs
+++ b/website/views/pages/homepage.ejs
@@ -180,9 +180,6 @@
            </div>
          </div>
        <% } %>
-      <div purpose="page-section" class="pt-5">
-        <%-  partial('../partials/calendar-banner.partial.ejs') %>
-      </div>
       <%/* Integration cards */%>
       <div purpose="integrations-section">
         <h2 class="text-center">Connect your favorite tools</h2>
diff --git a/website/views/pages/transparency.ejs b/website/views/pages/transparency.ejs
index 4e478e147c..fd94fc5f32 100644
--- a/website/views/pages/transparency.ejs
+++ b/website/views/pages/transparency.ejs
@@ -2,63 +2,12 @@
   <div purpose="page-container" class="container-fluid">
     <div purpose="page-content">
       <div purpose="hero-text">
-        <h1>A better employee experience</h1>
-        <p>What if the way your employer maintained your computer was more <a href="https://fleetdm.com/handbook/company/why-this-way#why-open-source">transparent</a>? What if it helped you get more done?</p>
+        <h2 class="text-center">What can Fleet access on my device?</h2>
+        <p class="text-center col-md-8">End users deserve to know what their employer can see and do on their laptops. Here’s what Fleet can manage on your device:</p>
+<!--         <h1>A better employee experience</h1>
+        <p>What if the way your employer maintained your computer was more <a href="https://fleetdm.com/handbook/company/why-this-way#why-open-source">transparent</a>? What if it helped you get more done?</p> -->
       </div>
-      <div purpose="calendar-feature" class="d-flex flex-lg-row flex-column-reverse justify-content-between mx-auto align-items-center">
-        <div purpose="calendar-feature-text" class="d-flex flex-column">
-          <h2>Tell me when and why</h2>
-          <p>Fleet installs updates and forces restarts when you and your computer are actually free.</p>
-          <div purpose="calendar-checklist" class="flex-column d-flex">
-            <p>No more restarts blocking you from important meetings</p>
-            <p>See what's getting changed on your work computer</p>
-            <p>Avoid losing unsaved work</p>
-          </div>
-          <a purpose="contact-button" class="btn btn-primary" href="https://kqphpqst851.typeform.com/to/xnnADFHP" target="_blank">
-            I wish my company did this
-          </a>
-        </div>
-        <div purpose="feature-video">
-          <img alt="Schedule maintenance with Fleet" src="/images/better-scheduled-maintenance-468x334.png">
-        </div>
-      </div>
-      <div purpose="logos" class="mx-auto">
-        <logo-carousel></logo-carousel>
-      </div>
-    <div purpose="secureframe-section" v-if="showSecureframeBanner">
-      <div purpose="secureframe-banner" class="d-flex flex-column">
-        <img alt="Secureframe logo" src="/images/logo-secureframe-46x48@2x.png">
-        <h2>Automate compliance. <br>Improve security. Reduce risk.</h2>
-        <p>Build trust with customers using automation backed by world-class experts</p>
-      <animated-arrow-button class="mx-auto" href="https://secureframe.com" target="_blank" text-color="#FFFFFF" arrow-color="#0FD082">Learn more</animated-arrow-button>
-      </div>
-    </div>
-    <div purpose="page-section">
-      <div purpose="feature-headline" style="max-width: 580px;">
-        <h2>Don’t make me think about IT</h2>
-        <p>Stop distracting employees with computer maintenance tasks and reclaim countless hours of lost time across your organization.</p>
-      </div>
-
-      <div purpose="three-column-features" class="mx-auto">
-        <div purpose="feature-row">
-
-          <div purpose="feature-column" class="ml-0">
-            <img alt="A secure laptop" src="/images/icon-secure-device-48x48@2x.png">
-            <p>Get your team’s laptops secure with as little thought as possible. Minimize employee interaction required for security updates.</p>
-          </div>
-
-          <div purpose="feature-column" class="mr-md-0">
-            <img alt="Automatically fix vulnerabilities" src="/images/icon-automatic-remediation-48x48@2x.png">
-            <p>Give people a reliable digital experience at work. Automatically fix laptop vulnerabilities so security doesn’t have to chase your staff.</p>
-          </div>
-
-        </div>
-      </div>
-
-    </div>
     <div purpose="accordion" class="container-fluid d-flex flex-column justify-content-center align-items-center">
-      <h2 class="text-center">What can Fleet access on my device?</h2>
-      <p class="text-center col-md-8">End users deserve to know what their employer can see and do on their laptops. Here’s what Fleet can manage on your device:</p>
       <div purpose="accordion-body" class="mx-auto">
         <div purpose="accordion-item">
           <p purpose="accordion-header" id="accordion__header1" style="cursor: pointer;" class="accordion" data-toggle="collapse" data-target="#accordion__body1" aria-controls="accordion__body1">
@@ -163,6 +112,17 @@
       </div>
     </div>
     </div>
+  <div purpose="logos" class="mx-auto">
+    <logo-carousel></logo-carousel>
+  </div>
+  <div purpose="secureframe-section" v-if="showSecureframeBanner">
+    <div purpose="secureframe-banner" class="d-flex flex-column">
+      <img alt="Secureframe logo" src="/images/logo-secureframe-46x48@2x.png">
+      <h2>Automate compliance. <br>Improve security. Reduce risk.</h2>
+      <p>Build trust with customers using automation backed by world-class experts</p>
+    <animated-arrow-button class="mx-auto" href="https://secureframe.com" target="_blank" text-color="#FFFFFF" arrow-color="#0FD082">Learn more</animated-arrow-button>
+    </div>
+  </div>
   </div>
     <div purpose="bottom-gradient">
       <parallax-city></parallax-city>
diff --git a/website/views/pages/vulnerability-management.ejs b/website/views/pages/vulnerability-management.ejs
index 833a0abe04..bf571b88ac 100644
--- a/website/views/pages/vulnerability-management.ejs
+++ b/website/views/pages/vulnerability-management.ejs
@@ -110,7 +110,6 @@
         <img alt="Mitigate CVEs automatically" src="/images/vuln-management-feature-image-1-380x281@2x.png">
       </div>
     </div>
-    <%-  partial('../partials/calendar-banner.partial.ejs') %>
     <div purpose="feature" class="d-flex flex-md-row flex-column justify-content-between mx-auto align-items-center">
       <div purpose="feature-image">
         <img alt="Up-to-date data without scans" src="/images/vuln-management-feature-image-2-380x323@2x.png">
diff --git a/website/views/partials/calendar-banner.partial.ejs b/website/views/partials/calendar-banner.partial.ejs
index 7da1b7e7e8..e3c91817fc 100644
--- a/website/views/partials/calendar-banner.partial.ejs
+++ b/website/views/partials/calendar-banner.partial.ejs
@@ -2,7 +2,7 @@
   <div purpose="calendar-feature-text" class="d-flex flex-column">
   <div purpose="new-badge">NEW</div>
   <% if(!primaryBuyingSituation) {%>
-    <h3>"This is a terrible time to mess with my computer."</h3> <!-- Turn OS updates into coffee breaks --> <!-- Break time for you, update time for your computer -->
+    <h3>"This is a terrible time to mess with my computer."</h3>
     <p>Install updates and force restarts when your users’ computers are actually free.</p>
   <%} else if(['eo-it', 'mdm'].includes(primaryBuyingSituation)) {%>
     <h3>Patch your C-suite with confidence</h3>

From bcc723cabcd15738679d81070edf1c177d994a07 Mon Sep 17 00:00:00 2001
From: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
Date: Thu, 1 Aug 2024 12:01:51 +0900
Subject: [PATCH 16/88] Maintenance windows article update (#20926)

- added a note about DDM and updated graphics (as part of
https://github.com/fleetdm/fleet/issues/20680).

cc @noahtalerman
---
 ...alendar-introducing-maintenance-windows.md |   2 ++
 ...ucing-maintenance-windows-2-900x450@2x.png | Bin 197115 -> 92420 bytes
 ...g-maintenance-windows-cover-900x450@2x.png | Bin 272988 -> 78778 bytes
 3 files changed, 2 insertions(+)

diff --git a/articles/fleet-in-your-calendar-introducing-maintenance-windows.md b/articles/fleet-in-your-calendar-introducing-maintenance-windows.md
index 5f23f9bbce..534b993835 100644
--- a/articles/fleet-in-your-calendar-introducing-maintenance-windows.md
+++ b/articles/fleet-in-your-calendar-introducing-maintenance-windows.md
@@ -1,5 +1,7 @@
 # Fleet in your calendar: introducing maintenance windows 
 
+> Unlike other Fleet features which take advantage of declarative device management (DDM), the approach described in this article still uses traditional MDM commands.  (More to come.)
+
 ![Fleet in your calendar: introducing maintenance windows](../website/assets/images/articles/fleet-in-your-calendar-introducing-maintenance-windows-cover-900x450@2x.png)
 
 Fleet is excited to announce the release of "maintenance windows", a new feature in Fleet v4.48 that helps make sure OS updates occur during times that disrupt your users the least. Now, just like any good colleague, when Fleet needs some of your time, it puts it on your calendar. This approach avoids interrupting your key activities or important meetings, whether in the office, on the road, or working remotely.
diff --git a/website/assets/images/articles/fleet-in-your-calendar-introducing-maintenance-windows-2-900x450@2x.png b/website/assets/images/articles/fleet-in-your-calendar-introducing-maintenance-windows-2-900x450@2x.png
index 8405577e42fd876bd0965c1e75f758999beed753..468a372a38ae6ecba8150b5aaee657bb1079e803 100644
GIT binary patch
literal 92420
zcma%iRZv`A7wq5;gF6iF!QBRTcXtWy8r%u)5Q4h|hu|9AA-KB+O>pM&{Z;oq-<LU6
zQ?>T$?zMVLoqb|dm1WS7iI4#R0Ggbvq&ffq4+a2W!VzIU{+UiiO9B9(zo;r|N<koy
z`IEc3<69xH#O%?{^ug8K$M621nZxU;z029d>&e}V>4QJh`<K%*vonWR-}4Jw+uA2~
z&WG0zkB^UMkFK?J4MsPQ9bMc;Hjc)(&*o2V@9yp<cFrbt&&Re-$F@$!Hcuj=Vq_In
zG<EeyH%~^^kKi)5#<ow7j!(w7Pe(S6lT*_pqGPJ6Yd^4=Sz5~}s#I3j4h#-0oZhdk
zZ}@%*%qu8dUtdp2OE<BwHM6uCUON~V{N?K(ICpfNmzOubb3V3xR@cx}Ra4v9**Uy%
zG<|S6v3ud}?cd$q9T^>ig@yI<@?2P0*!r`bmX`L26)|+;&-?rP@Wx?pZ?CYh@R>S0
z6%|!ML4li_+qn+!)zuXf6O)31!T}R(R#ujbjEsY`+c7r=P03zZSQr}{+fORkGc(D4
zN~k$%z}vsSyYx`YG=TfZ=ZDSZv(L&B5)%D~5C48oohmXt?{D$&@NCinl$4ZCq^VE9
z#Dg5znwpxE)KFIsufLD4`}_O9efxHo6BQU3XliPDEQmKk1$eps^Ky3dI60V*kl^R%
z=jG+K670yu#dR5Ab)d@D^9l3m<;}pr;E$UwFE1|{85t51(&_EPQB~gO&!6`UL{>$~
zMz@a7``YU2>h`W5c6WCldYb;$6>cU4-zNHAN4hL{na^7)j_XSd2#}tiUkncqmzI_9
z<t15ISp0S|*mu>N)D#?+XWJJg-8{ctT3&8xY1xkTDWF6c8ymYXP2Y}i|G`Ok*ig1z
zk~Ja4aC37rJ3Cu1{i$%}E@l22H*aS{jeC+4YwqI7qUTJr?S!lPVB(AYu%&9l_Fu_{
zqw!F;sp;9t$w?FkHy!|#wS=6cn5NI##cv8I00;ofeqxdX>#R!GiY15-5J7|mgaFu(
zV1wa903aZMHUu#H@qmTyqXq(qV4;J-fGk*Oa2OZ>L<FRQ0k$6xXed)GL;xBz6c_|h
zgoY{*0|5|WgXKT~uK)kRMlI^lkv`gy0RFG@8|(wNDm38J|4U8te^dYbf2l2I99#^d
z%m`3ViMk@Mf?5&YfZ@a?K1MmU#6zDNXqZ}&F2WWrHQj?>;aGTd%6@8`ug+Het8s{j
z+(0JY65lo4gE#0Ky)+M9WvK%DTxoub;4b#(iI^A~!Hu}({@x!`2EMmlTD&Gg4Bn~*
zpV6nF+`=+CDB)3D`UJfmIk>c#ECAM97yTP*7(@V%9NQGtnR)t{1b-E$_N0+?R}bM&
zpd9*X+E0!Qk&NNKfz1E<EdLBP_@$2e|I6^bXtF!mo*IW?H2kw4^tydUew%nZ<2IS>
z_VozhTX&X@5{?iOLsyID(fTCk>rQO-d!(vR*6XX2f5Ji6llA&%OU-l76by!n00QT&
zc3W<DY9CIP<*}_|yt2eV<B9Sha>zae;SGi)BAY7+q4Nhnc#B525MHwRc1iJ;H<$Dd
z=pGkMiV_VtmEh3iO;#BvXwR^l5BKV~%ni23qH^RuX8atuJL6`7bl%*1miVDq*n7j1
z4!bYQ6uX<0dvKQ+P}{G!dJ)f$PO!~kP{mmh*+3bQK2)yidvXC@zj=z$K##62yPZg_
z#d^!`ScF={JxWJOP~68rV(;<qYJ&B1G#`43`F&?n9D*@3!)9k%;l<-?GA%d5(lGkP
z_bbiR9q1%Nm$d)spabL6k7dq`K|>Uo!ZO2&wJcN7o5UN@chMzLzbF6)@3xfjG6@JD
zR`)xFQo#z4P+H`-O+-7#8$nG~tvd;Ypdb>4A%B*OLv?he_My6834-oaVH6?kCvU&A
z?GeZ$gbl*?cr3>Yv4o_2Xm2!u`XndZ!)O&pDy_3kPiF}<6OTUuai(2Xv(-qyGEPic
zRuP3V+|OcEg4L`DY%)U-g`OYWAp{?S8@#R0LH34E8Q~_qlXSQdMkfZKyE>k`4=Btn
zmBVOj$mluQ$0?4`O*4kLZFbSbJuOu0EA<6e=;*?8Ov2b4n?JcU-x5F|E1fAM?Pdgs
zNYEGo4>8-<kZrss*(%EQZffwnyJ?Gq98L?)4pD37KO9K@sL2?FBcAe5T(~8cGAI}s
z6oecfuVccXnP;tv@2Bm0A4)7m_Ey2{kQ)lNPisDx($V<2ARjLH*SpFMjmylS-yUn`
z(Y?y}^(!QCH=op-X*Rt{SECwu%gz}5imBQ1{SQDLHI0~@7pgJj55>GzEOwfTe)?4W
zLPIMufu3<!Fza^@HPf8*>SM{05wcwBCxn%TM|=qRKraoXqO)2@Zcez7KafI?{eV*w
z@I)XGv}L#AyVAjuc>0xZj)IiVOa7QpNV>Me$Y6C~?)2IN8aco0oAzb+4-K<7LnJ-u
zU%ihIzIQ$2{5$jG!~T~ao(gaO4TRGrmYM!|?c(v%U9j3CJ#-*(K$9nk*?T(ny9oJC
zm6)*TCI)lq`58a^liRjz>3@g@d%r(%y4fNNys5fcbSs}zX##u`H+kY=5^auz7M<>8
zwB{t4+{b;T{MS;`{hLJ_+ju>1A5m~1dl1KWc|pc;uo<lg>uS;!eUwDE=(#Xs@E1UQ
zn}OLKG=@qR{Z}d1*jMP&4U?~z4w_5%Rp@$gZk%0>JzR6LFtroW89%u@sO^oa!|^_b
zgL`*2pYnVD_0@s?2EA*^ca-=83dR&)$oJ9>k35uK0sU`snnSTf`ZzE3)JCO)QRI$T
z;+%p7p~#)nYF`j!%rIYE5N6NNPE%lJp=yhq#v|`Xg3%0unTB_Ani?xV$U5KkBB)3K
zw#FroB0Gq0v2ej##TIQM1x2K-{$LxWNz5p=#Jvh-QpD14WH?Uxs^v6m?Q%BU*4PL1
zm5E|4?uJBeztd{eJ5O11DT4KHDHwSF!)^4=#(mox9QyvI7W{W^O8~()1{vgBV00%K
zdwV~~vVv%&iR+J(V^GP?C@{pP8dv4pIT4KgJ5K_YFLBX1s<b>%bw57=hy0M#sNrZA
zog|MC!j*)wtc;=+H?Qzs{DC`YntbYV+$2E%uQVe;?9tzv$@;&@AXZhV1GL*_o<tf9
z?8{qS!6fJcS`B|~a*I)5TYSjUpo@d~Y5mHGe_U~%$+{|!_rx6bcmL+%9IRNi0+~pr
z!Ru28_#4z}*Hd#N_JBla)T6kAb9{2xYz=69Y9RUGGU5?^0h}k-e-v4tCI+@!xdk|e
z;ZVe%@;<#>yJ>efKEN>scZGg}ETH`q{@d5E=A#+eQ3eePfx#jos?^A=K!N=PG;1y`
z*tOzjul~w$kB|y=84OB%zo2tTF_g&6x&s)kVEpp9z`}FhCvo9Xz}wgkmd2FbA|#3p
zx`9Am8{S|4z+e9xBYkvAuMFBe7dpVh1sj8(FlN@s%3B(a_wT!?Z0oy`qHbX(83&<G
ztxL-_%k!FS?AX3n1W?;L&^o0Uy)+k$%b6RW&e2O)G7_$N=tK&iZ<O^Y1-RolJRa;}
zHC~f{cqu5Xx8@ZNHc|#*q1u?7)hSIN$Wj;TfD9M>r{Sgd`Df2sKiD8Lp4K=9+YzSc
z0SpDDX*yG-SQw$*m^I~KN*Bigi=49=VYDG8&T^VRI1cIxQVF<aGN?#X4*sfYTbvqP
z>myi32T}W&PrRSJZ`-8#Q<(8Hu~q$@D%ckM+Qvv3gEu5RO-vADq16|kY6|GGWg1p*
z{g?g7_MW-iZKIxXxTsKyuR{UptQ(ye<+vW<tO(IWSTZ{~d~e|gMago_2S93^iIgNR
zD6fz`lh@vH@>Y9r_!nQTa~zra7bA!#-5cRY4)G^xRqCCzYS{@ogu6ztu~LHjMIM&k
zZ~2>1IU>m@P8vm4%qw`oeoV>dv3VQsA5oO|Ggd+!M$&^h1<q@ypHh4OGrrXOq{Y+#
zHbpaq*M>wT1ZK1)5Zg@*E=kZstH<^JpOrA>mtn?1nT^-461l)}OZIi^cmo0+LTzi_
z5-m^TeN#3EZE48#JH>3gNbXh|Yt1uajl4DuF;qgxWtGX$^r_*8Ob<^82E*tjTgjA-
z2ZKG0ukzoY6UD0``aV)0c}`x<Fk>^LJnziFBt^c;U89m6Rutc-L>nD3CU`@ncL|kR
zQ_)rl5~o`3eRK!GGGe;`uOo-wPJ5@;X%06e3x1KOWY8vD@;}YM3O%HE{V=%w?;$-s
zC1_+v&?fani3Nv|{e=m3WiZOO>}3DVwL0%uue_r;S#Zgyw5|+Hl1i0#K~`3kWGBMK
z(4&O@`wt1S)_Te!)cKWHtvB#AUX`e#vsV5j<f9`84}7Lp>vEbk@LyNnUEmIEM@;{O
zZiVKpWQSd;j#wW~7C5c1FK$UGzE>#xpj~5j+$)au=8UF!9C;2Kh}0^&>%-ybN;$|S
zc5@d+{;yRdAb3b~usc%}*$;bf<)2oXRa7CEB8;JiAJaj&(KntRG=!MdTd#JCa~Q@D
zmYKgsXoIjHN14xk&}I=HAZR{~09CZE$WmLk)mQT?WUoVbvjTk@U&PYAq0d3Z5QyX7
zNuNDSgTG4;ex^JW@Nxa>)@JzPYf_THd(#XSJ?&ASiVBLN_td#YX04PJ?r%{^Lpnil
zb9Ms5*o11=bBIsdnUDzxq(5l6fLv~9cf`yGcDCt+N+@QgrOVzX)w>4$0IfsJ=|zr;
zvdiumo&|T#ffU-p`oT=#SNZOmfC#bP>ZFcr$neHHsZilr88r4qK_0RSo_blrmL;}t
zMRHC(N+df5V<B&orG{1GshVX830lgfQnngWatlM0V=>runkpxTey>@ulHDkKt>@L`
zJ*W(Fn_HMfqcnD``IQ_~Z4yRu;FZ-(IQ>2HcZksLO+-GuU(LY$V$?E=pV?FL0*Pt-
zh!<H2++;Vv$?%#Gp<x$WO(qGcLm|7ei98`?7&|V#XVS3jQ)=qxIRa{BTr{M#xF+6l
zG>&<*sM0bbj^oLyw1nGls7(!3)tq){WKOX)yCs8%UyCOohY-4_?cd+}?!b#Cz3oEj
z`&RmaOAqatLQf{nz{2LEd1qbHQS3k+eR%kxwQ`my7FY2tp~6urWgwh-Be&$%J!x`r
z3@dSa$bbfQB+n@b@9Q$<F6|!Id$N5B<qEU%8lFGpmwET5IZd^>Y^C5`oYHW51N9@v
z#y+0?#hoNSVvO8+fhM-GuVt)|Oo+(=q(rQeM7WQfH>>Q+55|S6O#9v!K?qGR&W|W@
z<Z75F?6dE$5fax&PQGqWJC1hOY;An+oej&9_9?y^Gx3>}$M69eCyKZd`ylp?3YtL0
zENoE&j#&p@sVNRje|hTsEeb7npyvWIVXgl8M5%6d7N>yR*<9`8S?GUS96yN$Jp`r1
z%uAxq207}((=OuOQpi{Q(#;SzB$YMu1gY4<q^_ke>=5;?u@$n}JYZqQH-MDqXTIRM
z#)X*v>!(-_uW?-lga0bXEH4?kp-aOO5Lm`@lrXz55&ZCte3NAxl&lZIL#@0OXzZsS
zW6GiYtcrqp#4xNWVLb1q<Jwj^!(9JghvY$iIyt5I^LUC8OVu6caMuOaM)T)EEV>;t
zTJS84K8iy8#d)ztk7aAh|9t7IPwm*ls%Ov{R~QX?C^I)WtB?;iVrNj6B`JXNC$hFH
zqAVQ(otCB$Bl)HYHYuPjiBjSF-@V|7_)LE=N0HA8X=`li6K7mM;`)La9GorBi5xNg
zuN0Bt+n^`N-*<QE&HHfJU0b53sULKvugq3XLHW)i3_kX;E!{7q)iCUKcV3%J$XHPi
z>C<g=fCUY=9HqrN+xRLj)P*VLybDKX$NZOQ7xDlM`dSJ^-)&W=3!wix6(Z&h9%V`)
zVnl*@^c5-e#DJu%87z$tJb{P4_`;q*iEx3EFm(r94VPubzHJS8%<7kGF9e3q{(U&%
z1~FxvmRbZfnu%@?|2Ycc4>5S!E@q}5?Kx-*y7&onh#hWfg`4J0S~Nsdo=#}I(hV3z
ztA=TJ3EDM9=SN0R?R=iR?7IbS`d;u;QriPCa{5SbktobDuPmw6llnFA89at$71-c*
z;f<4~RG|#Aez-|!|MJ4S_?)>GErUwIy{;-2%w?W~Or3RvtY21<i~G4c_1L`fQx$6x
z=GUK$X3YP!^ByET|8;>0loHyR6;gQ&>^xfRCNA0b*8O=^{p@}@tx$tr;u7Q~8+;(_
z-Nr{njV|)_yp(=(Aq6NC=!X_QNx#wQ%5D_g^L22HdQh#&K8u?%5hFtTp7SybJ=-OZ
zk*IQB%e6^9Ac{=~A6=*Rur9|{&&t|WFBqCrx8LWPe6^V6KN$O>jAJ32aa5Mx)bWXm
z%6S@zxJP(&Pe_kb;W*3G|MfLs8*(#GWZbJv&fyB%%7=ydjiCB5q>9HEJn#G_BFnl^
zf<^+Lg67_&=1QGSLvLHs_0^yd<W|O<p)@MJp7)o7ZA_9OQ@e3sZj%~5!p=Dri8%Gy
z1xCrw`hT{*6uqdhQ0TNcxA=#r`0ttZHhbOn_qn9F-{6EwM2(2#M>|K1bWUTlCW^O)
zlHZ<C_-*b0I-=~tNM)0ObX4+;+Svvjs2Vde6qU$m)mc0{osRe=)2S?tm?*(dfyWP*
zl+N#wW)hWe#+?oSxhDit`|2#=Ss8TJxFok(Ni#5|;NNY(#ElR-^J4hChC8848l9}r
zr4iU|cQ&Z<eShQVURsF7S@4HLc9_HYui`GYr}#n}=^EQCoAP5)ga|su-I_W5m*VMD
z+u>=(^=a=aon|ennY*s)4HO3JX78r*Upz%y8h`&In|~4{71cSB8{}*-)E(&itTTEL
zoAo7UHvFN9g3PGnMVB?3QX7G?%fp$i1awf%>g+r>_697=%O0mmZb6mA!V+GgT8Ql}
z7lAVL$;yp`rw&Z=05GIS4B1+jRZL1N081-?bC_7-R_hg7n%vaO7brWjr##_8ml=Tm
z({a^)Gv5E!JJws1ZuO#);rEg@KapV!Lh}dj(4k&$P@p1nXiGI^g8)!m@co6pYb9V&
zRCkNj!*2oZhj-#c{yTt;K@=3QgMBMwImB%#=TEI6Jxy51DGsv?ED57;597i@lux2a
zmM15-foUrU<@BIvXHL~yakYH8j^JTP`O1)M7jh=zTZ$4rpRu8uB21YTG5_DxTK<^G
zC$1Tt10JB`s;v73^Q0P+pJ;=x&dPCbq6Y_g)m89~`5l7zU<AQLe0~~Ni>4EG32NCW
z{e)k%43*?XHXgwCi71;mjS~B_<=@esU(pqE1LB`jX{LnSM_!wi87BnNYbot$$XO{?
zt19f%dU7UVW7R#m^=iy3#LzENGXC2G3<TLeA1^tfzA5y<r4}dJH|@QDsiwd;75V4$
zz)|x%>dQ;3KoY=P#$P$L)ME#JocQyR^72-*8S2dNZ##)M)sb$D=&+wIAS-EPd>Pfz
zE{`$}b;nUG<g5!M9Wjj`vgM|sI;HSRr|N{i8&j!!)4N;VH4Ahx-z}*K8krqb4c}QI
z5CllSR9@aGp)pM4IRT4nbD%>YKHFnm_Wj`7$OI>ay-tnuwl)G*U-;9E&gIsRyFNOX
z?#OJWU!4!xWEKzmp`q^!e@935f5!Eu-ZSIjBY?7V=q#*1p;B0ea#F-bq|A7q_Z*$7
zm+2SUiB=;;Jk;gct&#8A%_kp1ZXqadZQU<*rN<bUk*WU0J`mGxRORchWn_YPKOWX;
zwGsAsWrek`mYkQA_-@-VEV^oCmK}EFmM(;n_d1_q$VF3-=|s4tU;3#J<RV6z4iY?0
zvVV)}0`M*I1F)uj>c6%k$<Fdq5OIu#V?)y*W07i;PH);T9<Ox&AphU;`WTcE`%O~n
zL66o}q|t|kmTW6*>%3v|ef!@p=q2(0F&Fn4oLax$`@7O5se*2&(#pR!E7867gL;JX
z>cPS7TqsN+_)~&Zh6F9&vltpI&<vDPt2XYN6gE1ofrG8cy~a5uVG31x`V&<bFTRP)
zzERCCVM-R#?Ao7TC0@Y-32N|WS#=EqyKt!>hU|R)CBJ;VH9^w%kVU2Iot2*1Bl#z@
zOkOxHwPqiGu9RFHgf?T>MwIi(9^&1SUnbXNwURxo=}u!nTG$_*Kwnv!#0)!hTA<+k
zw!Ut95sq61X4F40x`4g!nP2H_gwZOSN3EG9!>IeqwIA;g&?m5hkbIz=kt8AOa}{>{
zSs4nSf}(IKRl+Esn~}I`Y_HU=;xA|<g(~w57snLMK|OR{*|J0x8;RQeM@zeP#?)lS
zzJ&OotN&Iajh>i6n8Vh*uckFwUi5K8AvD+Wn)4-O`SMt#yjPFwOdBxSAviF=RLROE
zOAJ3(5etJ~kNwXnJPTS3Kcl8s1?scd`qvt@FdE9DnJVn*Ig`>)sg-|8t~)W@(!{}(
z2(l8$dOXyK$ZRR}h!luPl(OB$mhgtiNqTe!qfv3YZZ3cSRBj=s=)3>beNeu29aaRS
z{7{(-ef?fZrmG9VxQ^*!vEt`Tw0m?^JYz|%)~bD5dcSfCl1{%sPmS&<jz8){EacLN
z0uT4kJaVCPkj`n6&$fe(qJMWoueQcJLwO?fU(>iz%K_*xLPZPU0tZob;-=>4X$_~F
z2f9%jt=oZX_&VUgBLuBY4r<(OlO#k+3oCYGDaMHUlAKEzyio#WO>MPrPc_W#lSm9y
zQVsIDH<ME6zJ;S4U*!T3Z-*ZPWZ4i}&fQ6Stc9z96<=xTK7T=63bcnjw30t)qwUQy
z{Ifbjd1+j;^gP5itD#&WCo;ga#neF{h9guAL1k6R7%5vCadE6s)9Am~JhXKGgXsPX
zN$U)8{yBpI>C0(m{bOzwTXaE()h^w}0E$AoMBv0&I@~Y&*0erhJk3;he&#f^KSIbH
ziNZKgbPBbNpZK8psS_`9en{OjOOTNM3c`eqVyyUf7;CvCUQsc#t6}#(VDzs-e|=O&
z)@UQ|(f$SBzPAOk-6mSBuB=*`?T-3ph;jce|15XH)}Qp}xzX0LrkL2i=q7};t=1d6
z#2=0Wl_i)mwM2ycb4*;R=`#YZEDCG68m_UZ=+>1pepvr?@9w47%VYZsq0@j$f1nPj
zeBEARnBQGszv|ozeKZ4*6wMyyqy(~K4>Nrix=N1dzL}I8^!C#T6@CyBw|+cbL8q)&
zLHXn+#;i}Kcp87u>RN0dn>vj<x-={rh+!JqlID{|j;YACgZS&`H*ZlTe*#pSzL&fJ
ztok6L8WDL7Qkj3|MxR4ab^D#GyLAJiv@Q%oPIQJiX+xf`lo7iP_G<34>xB<?yfw(-
z2j#B+^+e^WL$hX>!tac~gjcVDi2p__!L!4K;_ukQN_m+kzgxud4fz1k%prsR51;qR
z;0JxL|Ai1FHevA$TZoS$CM^^`nWL$^^dN}&>3~8-`M`ESsh?Mr^wa%>*VlIwW9>Se
zqNtJXP|~ubiut);Igd&cF_^-c+o*&ZqM;NXcx1PcE$zuRVd2NCMvN`$zJGfMNF{g&
z_L_Vs((bYykVQzrG>@;qB^%R-qf6nbK@7_`T524bFxLXTdh)d#{!}7FQ*n`e!LV>~
zf}#9EDd<Cxp#TiyY}C0J?xmeS4TyZP?+Cq%eWez-^DWSGSv>1a*m%a+KZ8|rMRmbO
zt<qOE`8xQDA93YF0p9Jm|L}lH>7Jhm<YiP-nU;>m1qtdF+3st>t(R-jh#_)pRqymS
z^8YG4S(+4zq*Ly!{|o#@T1aVg)sM+57B)1_rZrn9Ec{b!O~&SU5Jbw9<f!q<prG9}
z8Mz=$O=h-Q?3--O&fv>0Q?^{}HWF|Uu@R|UqJ20t168n@M~EF7eL~Ke52I`^@&R1X
z%RizD_z*a8XmQxx2#l*Ub-DJE9Z^>Ju-%$RR57_dBW6#Y=iTwdccxX^ek!l6*-ohW
z2I$HRgmgsqzW1z?x^j~62r^x;{A$$Z(FfAwU+eax)1`zSm-dEo&^Tt{fRc>)6W`4T
zGtU~Z2LQIxhNv<u`2umIz3g}LvCzb=EBk*zXblI2B8HdUIdGWPh-}G5u{*s9Kc40~
zwLq-TQO?g{1ag+dav{b`Y33f&Bkl7!m-vIM|E599b_9_{`Qy_q-zAgt(vVKPaVN8T
z_+Lzsm_sp%&4NnMOEEHLAGzwzUe6zR8Umbw8`&m+nqc;wElDiBwlsk`uVIDnofy0W
z`g)>ExWETBp%E}`ki*7lpY3#EtMvwep+XhJcp~QF+@tlgS5TlSUHqW6Yg2&Kft=nk
zl~Ahfk?Xkw+U;;4mmh?1z(e~zt|L3n!2D{IKA5qm3+^K>hjH<4FGtQUqeG83XCeGf
z>ShMCJ71`7k21QLus<iaj%#LbEV$2e`JMd-ay(uQ=%=7)3u7^I7L?gl8KDk2{?w(6
zz=FaXX=8Kg%Q*Bcku={v0%Vr=1v~W9Fpw=XyPS|ST+GG0rxM)0I6OIAFKx|n=Xg3!
z`$b8{#0O|;1+}UyM1GW(6kqZ1In+vh1v$+A7kD3*3Gt6grRoy0b-fQ~2EiL{lH@YO
zlAe^&@<M<f)Kgc$mhpnaLaUKdmo>Fy9#S7XYcQaqcPsP*UT>qg+8NgooPS^K+$8P2
z_^1Ni)n0@81oEh2=_{-3cpV{(Ii)5dTW~w0CU+z_)D$YvT1v}>+q7n>-7_EMyj){z
zXCs)|$-1#BI9K^kQ1<h#N0X#^ZMwLr*bSNS6cM|+m`hNPO@($XE<Bk+PEyPqsJ-sR
zH;`LYB6BOWh6z-jJS8WuA*RlogU1&iPuLWuQ|OBUg%tX7M`a@gHQTo%W~RV%;y&(E
zgRkM;%d$SvSru&f3HDfnDDmJCz68np(`1}J+iWhTi0*%xszjRX#Qq}HFCC#%XSe^Z
z;(amUPO9h7OL26G2vJN_$|2A@n~yL<i$ku}yVJNc0Kz`lEMI7;ShEe=N$Ey^Quy`M
zeR{le{MB+!cR&lyvXcjtnHaM?;z!vuY(8nb5TV0uGv$vc3#{qux$*;CgIzWxQ#`4T
z9R@ota5AT840XWDf=AWiJ#(m%ZM97$#smm)IZy$AX4^oBe`b1YY_)&uQ$S~NAF=qh
zUW(;J+&>{_Q{MW{@zi+2S-KxB&_Rj{#3+fmGHxuK;<VFRj%=n9AO08nLS;W)1-6Q8
zaG}`Em@M;~B_Vb{I<nB?Oy!0<Sm5gOqaYO(U^}CpRQCzCU?}hp>=FI1#G;9XAQjSs
zfl`SYTuh#(#m{6KB~$GVo1&~$AbaG|KFC>*HSdGNH7)O+<5YNOL7_{nmR5epvCRKC
z%CLqCCF9~oWPgq3wmZ=BV9h970G?|mNlhu@;U=lr+zpLoM{ITKaU@#;rI`R+%Qe11
zUr;~Fhx_<A+f{8{VLlt{f{oYYo;8b0-R>btHkvZYm$fX=;jFa4)rFZn90#TIyJqI~
z{oUunSq!+5Kk{g^&3#-`fxEMhMb#vN_k_7*RnDg}q(cg?rwRUan)L{j70_-BNtyxj
zu&K5j?E}s&7Qvz07vIGas3=gS{3+wuKZS>f%e!f+e#<C2yEFtfjlZdI!E#idGI0f_
z&vvV%vEE%eTOqen662%Ch1Ub1e<B97)i$hl!Qc|_!++T$vQ&m@4|LumHQFrOcWm8J
z%omdZgWv<%oNs}b1L|pnvdoof1Co8PD=;@ge8>IYUO5ylS0lKm&(n&--H}JD559DQ
zTDu))+Q&o^PsO&;4e0^cBFJ=R{319~PfsM2xyYRCP-c<<-A0(}CBOA<b@wf^Nz!t@
z@?cbq0Fq+B=Pc>zRq)lz@S*RlI2Vb>Di1DDDjVvvgW_Zy4kEt8{o&G_zrDcHO3>L&
zryxb@bkPh0NJ3zmZOR>$`sL#L)e~GaRCY`jHvVqfSyU0dXuhA2Q4$LpaeyLr2kP{r
zPeXU&!#eI#UCbTMF;3EXQapY+lzCH(3I-`9AGi;QXZfj87ORpG6w3jlMNP9i5H1^H
zD+bo><HK*7y5f@(43sQO(8$#SPm9##S=<hB-O|XMe>VWQ_6L(>MWam6x^4WAscgE0
zx}0G&%wAIBNuSkKd_V-5Fz&$zQAeVsT<Cc|(I?EI7d#-$G(W)5bm*r$l3_{x;+uq8
zTE0rRTzVSMpT5u&4(22@Nejh5CG4K7dQGtPzC!^)pq~XQ=Fv*RZXpZ^9(`ztxYT1&
z2~JYY+O+O(QW`QHrFh9tfVsDHzk$UJQ_X}Y{b-kKtOoMvU#mQbK-=oS1p;ylNDe_?
za5zCUG^c|6t&AoZ#|r-6rS>^(L>3ZeNCx6g!EVirZ?i)WrS43rx(4HD8Z?K%pJ_HF
zdlOz=CE23H>2^4%Q_raMKMXM>>xHx(MU#C!I?3akuoSe0Yx_iGs6s9K9%5UUxlOHR
zQw*T1=i>aO_jUM`x;Ze_KqCN%h0R&+F{%c+&<~*>M_ue*N=s13V#kIPHv~}fAtX5l
z{$eoZQg+pbdTLFY{ih?S=<mO82+0FrQHuIHe3MNNSVsOJT=0iCnbE2fzl;urg@Du&
zf$R%UrdrSn=E>Giq5ShWMvl^8!*&0Xg70#=7Ojgi=OjX|k_6DWdui0aJyHYSRB;ZE
zoBq6LpSR*F-@`JPn;@Gj-Y@0!ANC4u$sNzq;U*Q5mBY>FVTN1Pc&i9O11T|iTd98U
z^J&+92!?#tp@5t0@5hEKEglZ|F~T67>Yk|aMGLe%fx<mkzRQs}{V3QvWJ&z}>rMt7
zOagTHLKv^y-<1a~;g5C>sq^gqEm5*T9+M0W+zUk~+8S1vF?w@`4mjfb#Sd3<vuzd?
z7>5k|Ea2gw+BS=wUMpYgX(TH8pM`2nUIMFIGSaXx-3x*j_i;$O_HjmFZwbr!j#-w{
zpxpwZvU2Zf(pL>QGe*LL6?Re{1Gm*T&l>9T&;C=p#`CR)@-LsdyhR-jd~{EgreOzC
zk!!5V5l+&d!hD`+$1dii9(2+?5M_jTE^?-lWnKPx6?73jXMNzG7gt%O_3z2i&@I?d
zhF<Wm(HdP}5;bz00om$czn0a{kT_;3&H+UZzI+O3X0Yr~X~|Gjw5HxeT^)wh)5O+O
zr#_m5>#OhQd0IynNqJjpC4pu`_5NSK<i6vGVH)Cy;fTTFOToFStIdvy&5lXU{hsRY
zoz6X2@_&OnqdxlL^z1Y7ZR;@bYK;H*Me04s`c&HHyPG~Dt*#O0fOvgvW>O?qb^Z!N
zS%+L!Nigi{O4~QubhWH;drsq|8r$kBWKLbxV8qJ}eLkvMF(|PloD)kM7LU2_B2e2D
z)r>YJ6<vXru>ZhoE+L0Adsch=q0lMl>jRuz;&{AUxEKZ?sa?1sji&hruzX=SQCy3A
zTNG#%GD9sa{rT|u<E4n_6r(t(n9FO9ljy>S7jCpazSum+C<zDdU?)ZDCwP!}V37Yt
zQ|tS(FIf?yUY%#Jw!FTe8C)ocfo*DjtzV${rHA#7qfS>U3m+KF<1yA8Pfcvo>1@&g
zjrG3Y=?^N*Rz`Hzw+-=mx<;fIYu3i|JK2o$2O*|F-wBP+)x^(s;8?9@dKxu#MH}6R
z^2{OId!wQ-C8g;$&hFZPiVG<n`6vi4Fqdk^g%#7@krkL)c;=Z9jm;=zkrfxdu@l@P
zV_xF8yLi?y4)ia6SJ#zF^omvELx1KnfEdIUwlW~g*6_Dgho^;xKT04?ArCOAA6pia
zi!+sOu#LK=ERcnQAfmg-6NJ^x3q{Pu;Ym5}15Keg&70hVYXtrhMVg`3v<%46Hgp)_
z&)89nYZ*2mQ1~Kh7YYcy;3{2pxTZFMbDs<`w4{&AbN;NKu~q^}{fL`_KgMjC(0N@-
z^u(!Pk+J)kN(qYp=fZ0=tUK45^$iOav?HN~F<AL?VM}XRlNTAr1qI?QWML|d<kB?V
zt>`NI<Sv)FJv`S1ovMp{(d*mSK(;BRkD6G14*l{?E^BU<gbEJz%V4?<;Xklxh6<t0
z0b6k}NEUfiPF|4cFn1}yB+}3$Wf}G?F?6<U%DfB*C@PntB&DJP{_?&3L^@oW(_0m&
zOgWjF*?sa>ygY#BmD`B~2P>w&(-)#lB#5efVp~3Xo5L<GBsKBX+M=gpZThC{tTd}2
zxDR*fN8pgKxX)Z<8yxJ~0G90Zvp~tJokcvU67N0^UMO`xmr5h?)LLx|w4f9ol^7!;
zEK*=sb=)TnU6Y9<t~VSFoTT()1HoUY1tT0u7+adgU_^_6XbF6IBwpEV@eyQLu@uuB
z8UDB>hT;}_y~#B5dbtymG+vep8B{3~ZRj2T6jOX*N2paikPAH>g=fvU9$+3I&*n*H
zn&{H^U-Sou%JU1hl@?X;%+PeyNt`=2i$Q*8P9pO;;dOpvha$Sc)^|jVDN2?@DK^eZ
zS#<Q=`lwIMJj1BPgvWnO)?oPW4F0Rfh{q=Np>3R+{zH8%8U9x$Wuy&rZZ4D|)paR>
zd52JH22h?OO8Bs>#|qT}8Nq-#cs9}4{xXfnEA7^#(H-J(QgJ+vo=9mUj6Y-C<+E{j
za#Ah~EB0O#BN9TKF>lY(hl;W^APZxmtJKdg46oe94r6{=IAR-pKU_bLlT`W$pwCs3
zrm4xsa=W$9V?i}zu!&C&dn+%iC+iV-)iB=f=^C6^@E3J^Kk62o$=~*kJVXk8&4s}>
zG+S-akdGGOnnRj6&jG+4v&3t3*_MA4Z%BF>dAb!E3Q4a;$Y&G47751!WVzQz8y;2m
z+7zV*<+GB!^B@1Yy1u=82=cyrdLi~EhyAnV_vQHY!zbIED(-Zhu58lwaM1HjY}u<^
z5mDGVEP;PeRKvh<DTc(t!caFgcyu+t5Si-j7@%Tv>ILcw;Vb<Qafh<aau4rWkw)Lo
zqk^W-Cj^C7A>Y3U_4r?&E_AjTe|fy#TiPsFsWbBX>WLWodVp-7cX<+SFbJB`5tPCz
zb08Y{+!{l@K^sESPwPkNummoO9zq_fjuK5<0D-i0iK|}n;OLA6S8n3#MBizko;+Tz
zS$_t4PK-GFfsVI@fBw54-anq9e8>~+@wi;uZ1YFFjp*hKvMWa2f3#njl5&#GV5V4&
zpfweb##bGFA^MKVjVY6>U8CG$TA6~Z&v1sZqF)!AP(dY-fM-B2pk2ecrq)$=Lj<AT
zKK9kya_CTqeT4CPSV)uO@!bw+61)q%>zcV)I~ldi!v9V=!GZ|{GMAr(xy3s56XODm
z_@(TvLv+=_!Lb|U<z=Ah3Z3hLymT>qxZIP!a_z<mmgx@iDf2fQc(DV1kS%D_6S!Sy
zjt7z5xTy@U%;S-fkzq24k6X7R$1+}5BJA=G4h|mBl!pa)+VU}@a@upGlNh=K1DXvL
z65x{!v%hY!+Bm?#5uNUnpLs~Xe57iAo!>nM)E7E(h<}!|(x}uF`Z3(5&Qdc>hhlxP
z+B=*ujQp0xOqv^*=Qp$cX1ZIKN{62q_$qX`auZgXJQ5urj~4ZVM-@X>Ukmp-MD<B_
z=>>##Ks!f@yD2`4guJ(7>;c%Q^1{i`nnf<CeFl?EM*WHFU?@7d@s-3IHXt7xmzP(=
zVPN5QD3lzyGG@w}Gx5$GR(NoEThSuQ74^DUL140(uE`a7Iz82iic;y3!kAP^qjiL9
zXs84&Bu&enrsagXb+PQg+;moi?j)$QiS0y!l%GxK=i-`TxU0?d)WO%<`)CL*f()Zn
zB~V+oh0nSK&fRoa$(2YcN@BFnK^lrTr}=?FI}Y!UZzB&pSu%V&Y*vY7<aMH{pz63F
zZK5Z)!1wBOPSG!%JObd+zT_L$j7ZVak)92`90D3^YUsi*Dm|<lvJTU<xmTyOJjbM5
zrnH%<ja5~q49xW9vc>hUKfamz^=W#P2czKQx^`vqf2yy((GQ(ia+4t?X_hU9USz!9
zO*r{9i_sCCK2;UVD5oxMx6&2-dhgzegs~yUGo%2g@oZvpc!Lj*XyMVw#rJlYxxgga
zrNB26@OrkWbAMv`*{e@d#Bcpf`?CN7QvXb{5@xW7KJN`7XHLOf#DQoj#`6Uw&oOZ}
zeDq%WVoh!-9-@z!5E=PTvHBcJTp*WdADp_La>MFweO{=p3b=1ZtAR?uJ&a$E2D=WV
z9$GXaRd}v5R<cp(Q9&Aul{mu70#bo&_MrEQD)IEOz`6gk-H_4FUiH3y<g$8NcU2#=
zD38i4FHa=@q=Ze?I&#K%(gG(r^G~24ekIp=R#IFpdEQQb+G})2awPPRi0I#t;BSjD
z23P_s8R1j(WET$=-E<u^JLtg3RNuiOu7qW@kS){DM+*3A5y}Y;qXGHq8;>rt1(Brf
zwdF(JMyMYQSqpVYqmJRO7rXNpG5dX!<$iGdw`140H`q<3gENG_XLGMR_iNBaRH#Nv
zf0_ls6g&{Bf(&z#T#!71f|QCMeG%(VyU^fZK3#q(vJffA3SKm>t@M7FbBwZ?Z@6*W
zH<1lWqUt<9i~#CGJfg@_S$Uyyr`D{!#7pkS<Xpk!UOl#QJ}%7?NaPQ?(b`@Tg4}Gq
zTz)Y<<3*;?lfCQP$w|r2!=`WYO`@%zk=-g;K+mqA5_p#<^P!_4Nr}j3p#=u1Y3qh8
zN?ni``Ql)alX@~^^bP={BSUU<f<b=<wxJ*x)Rlsy54xV&#qFYm_3QkiE6<)C7aT}m
znU*px-)?A~3VjRqM|%eyPshKVXM?0HPozV;I=xMNTfbO;_KIxm;wx(t%gC^{nJ6`q
zk>&25e87|i&To!u+her`=l-@C#Y?(NfR{&?&#tI1#<2|Xc|C!GLJ1$2nGK0hyl<%|
z$+#~vPz94b?vyHmMT2dVo`<`BQWPQ-*H;`Oi|IBN$)@1UIC5Yd%>By|lAq2_T*6M`
z-3I^rBAN87J3l^6Cr~#l2QCBu9{Kj~HS6JRNeDi5<U+AiJFNqXEKQ6;j^Du0{~(-6
zB_2~xN+4jv=ANi3&mD)kb?w>F3h08+t1~s43xe66c9eltAlop*OWcheszEm6{A~#%
zkm^`Tu|$OAJ^c6)W&N7{EjGVRPj6>E`WrncF-RqNuAD4y<>_B`olK%~d>X@q%wJ?T
zH#<wq`eygVQK?C~9#tbFl|JJE0b&F2v?virdoGU7!Xm<azgJr5PsPj={LN6}BA;#o
zudoSx2O_htd#!NhNIC2W%5CI`k%w?_YQbDUAkZUZaWD~sCPluKW(DgFxsmXXZQU5W
zxNjQ<?$Yj5;LeXrSfBG%nAEWCcb9NfX4OgphQzeqd4^Gg!MY2Qjc)r5+nk<QTWWD6
zLF5TMpgou+30_W1gMny>X}K6<=*l|;j&e^RqwlP}NeF1HJQvFojSCkZ%A0EdI>9bR
z{6mizjabT?S|8}?j=~LIY)+g0RSDM^0ekS4iE=)Nu>lc*!pjqIaoPJViUb9>$}i3k
zbVIO9LKtY{vgh)7OBXze<Z*b%{HtCcjJ4bIMa1LtKmi;{6rNwlO?+Q3E>OtCM2FW*
zvlohv3m5p_{zE#TI(%;V5_wU*4`_@-1y#v!9!R+b<8112nFQPEC(U25GIYR09UcFa
z(TWvrR=M~U{Ws2MU<SFm*sGWtP%;E}|2NLi+93`L1BieN3PVX07Ih38u1=5$6+VD$
zPNmygPL{^uG@714O1;E~wkI9-VDK#>2l<xzn}En>=hd|hQ<j*lP6NERy0iy!<Ky|z
zQ2#tqQ90)3QGAJ4>~6XM)UNZdd)MABDdTN>0IjzJ(A36}JIBXB4eDp`$v3Ko`Y{53
z?2-{#a6Q!{33=w+^-V#)ocOgsA1VpY3OFuE>Qc~UfR^fLJF$Dje+P}rZwWnWb(Q$(
z_rhjR56{*IyOl#Y#prFq@{kw1sFW1JGlLWT)_mmX6J&E(ytjR;!%p^8RfE392gx?%
zDWUkJy&(wnuaDKYU-Fkc?G8+c-Jj(#J-g5fexi)zRdMLs&D01_-&8kb1v50}%gwfz
z@9FHJtO?599I}K@&?cNBKDOq!rj?3SeKEAwLSu$<+Xwer(<AZh@6tWy;+-4RrPOme
zzF+pCL;KC8pKhTX;~u$v-1{v18l2SmUyTEFx;QzZPJaiC%7Q0l;$Uk2gqTn$*C~Tr
z?IjlIer?Z|*_*o%Uoby=7T1>;8mjdpU_rr!Bn8gVJfFPo;GR&O0d=pfX|xUd8;gQ%
zKZol>aiI<la5H1xf+g7zJ4Y5fQ@F5=5+reG(zOe4w5^$tWX*r5YKVDJ&z@zi`4`+z
z&trzheNt5VxGcmo$~%~v8l~Wz$|!!+tKolsZ>Y&mJ`z^~cWgDtzyifdRBm4k?S|r9
zjo-EYcVr5Vy3C$zA%6Jrd>CsOdcL}oHWJ!g#GJ&muK)86GNDl?n^z@vZ15`D__r;1
z;(c{mLYllt#iVHFCPiRoVh*S%x>PY#?O$rDpcws!dvR5H2=LinU~q?!#I{1$15(Mo
z$-@-y{h|j_DuWNeVy*L7OSOW}_8bq09el<CXMI1sm5YPxwV2C5LU`vav>+Jkm~i1;
zNl#>+{XNHZ5AhI{RbqU5jU1=FwG0eTp3_YC=Vk|~+Oc8SlFaXQ<(!Ly%5x=3>Ax+w
zuz{AB5{?}_jxn)6as(s_^L{g#Q-gjVqYxrRKSdkF`vC-2=f2P{67J*UUWxy0v9Fp>
zbhJ0}%-)Dph>3S)Nc~C8&?wIW%tA~d!v|!CJF(MCw_KLwcDTj12J1p=H|OJXi18u@
z7+&5Zi;cqEsG$t$VEo=_NQ=o)U$}Y1b1xFTecGth5IjQf_Bopki#jqE`imtJa5TGt
z?(;lP@oe|!P9_U(08X+k*3;w56m)i$(8nDn5WKd8h|9m5B`1$R!;iUTwd1fm5)MBu
zsb%w6=Ld^~Rpe2dRxu^IIt+N3K~P>;OFBBGzk&M_A?!Iwh|azL3`DfqUzu7G8t4MM
z*1=#O1M5yB^!?(#2U`?C%o%1>Gp0LK`{VeKK8E8O!wodlF2Qn)%i+nB<4!Do2QbgO
zrD4L+jo3k_1FGKmduj<z#(sLLCOG9MO(6z0QZZKoeigYZl-Q?wY@}K-P8AZVHy30@
zi6S+%VA8vQz)X5S`oK}iUc6WVrq2wSpI77+bjgjyHKwk%HNF)2Jhbl3V*h&ckA1+q
z3M}Gl?)@25;d4doy&dG89D%#paepz`DIz$fQzMPf1xL6qlC=3Ue!$%4T7cP^Vte38
z3p+mc%gj;aDA_<*D4Dvz#Av`<{7YV<BVF7NG-N~-uY>Z>)mcUoU*gUYWux1y2M<za
zD_fjv<wbe1fLlD1GunTJCuKIO&UeZGO}~}ba>VV!8JLoG=l)<}X)c}p?P2s888P7m
z2bZhALIM^cwjvtQ$#@Tr)s%}<5dmv#52J!Ghk1@rrtFh4e(@ca^T&yVBLCQTUF4W#
zx>KD9ZH(W9u~}HydHWyp)yPA;SC!0lD>?me_1qmME;wxf$9E^`NTD>v`qGJH@tQ+-
zjoQI<b2f<<JL81DW#X{N(8DhFkH->@H^}ZGN(*Iz#10F%%LSZ-5rgads@#GjC1YR*
zmn1L7fW0y^&|CRE4dM3vd2w+Ospq>b%U1Va?VC1FBW8+xC@?Ln7*0kY#_cq}SQ4kG
z1aN6XhX;niF40HQk>pHO>i1FC9?;;A8m95N_!`$gS!k1ybLy$oG!_hylUH97$1hyr
z(fw#CO=O^mXgQQc`5G<G9F4BA4JxoVk^=z^K$-7a?F5Tf;z>uc$dR(B_Bs^Ua+4$?
zM{oayum%-38wrIMgvR1pGyD~;)V$O1CpDk2C#ZbESNH}d6HSXK8h6+pojayP&5@E~
zbid}VFR?i9ANePI9_o@n_0tSXH_?)!C~qLRN00|yfd75z^$|uTVWzHc^G0Vx=V&B<
zNX7-<L)@|`|68^&htFxVl2X!d-YbgG0^IYKQ}6yzPY;Qd<=M3#?hlO5U;52?U|9RQ
zKvz_0C)!ntyRzRzN~tvQz-vCGmaSH?=}T{nSmRJ`s+`rJk1H(3pI5nIWvl<eFbV_{
zOsyDg95>_j4_SE2$^)2QlV5Y5B4f*2oqE85X1eS5>G~X_Fi3R$2q{hpTfo2l;=z|-
zuiwATD~0@97BE3{(PbHw{ez5Uw#c|UVgwYSNf@MoXY_~@5-s)SowEp7@ntz;Xk!P{
z9A*KpJBTL-qcC?=cNl#pUEKn=2V=>{dBjK}NQvN)Piv~goF}kP_iCPK#?&91kK4cZ
zcdUxjEL~2iatuDv?gL4mYGZ#HpyQMqdm!rwRr5(I*M!t0Gy=rSnHX_1WUVxQn293;
zFLS=nk)XOY8b27TR+M8O(ZC=YJmC<6LmLUd&Xivx>TBqzAZ`gSf4|&I{tIFiLA`0#
zmCh_Qh_f04VZT||n}ys6kUHM~V#Dmt!x9rxjvW;Di592z4NbZnUkk~SI1>UQ?nyl$
zjD?x$s$xutb!y=|h=S*AsfKS-@ZXL|VUtiaKEBhPu&85Z?d5=Pv&e41*06YB?Z>vb
zAL1YpVFwXmC>NuhbGDkPDf{Jt$VIq4j-)n%4bA&Tzf)}OJs)I39T2^xsG!s)3-}~k
zr)MIV^EoA<2{ZdrnyI1yrGixRW1y&0ph~K#!IbkKq>gz2h=-Vs&44ii05t^z2Wuy4
z#(js^4B3Tjmcy{yAGLgXt35YW8f-2zerPGWXhxLHI1vv{XxJY-4qW`W-*bp9M1d<I
zE2PR%2u7e;KsI7Z2RmE?0on=ds+?fb=<_(mqR<xl3^`Hn)vUn`nIAeCX(Tb<f*KV*
zB_%GYqwZCn;17z?s|DZC+&mG;z)rHBTgYgs3p0jP<hZ@rY33LG>G%Vyrmyl=09a+-
zv_NiJD@H&xkH0v2Qb6g4&)9=Rgu(RmI>^Af_jTR^j-W6<J!6k-Bqr3?XuAC!Dg0kJ
z7UoJWrj&))dye%;q%b8pmi%*5h1FHRTNGyl;X+NwRzks`jQxyfqoG6sJP+q^wjR9e
zqN{p+-9W3)7b`0(4HiCw{t6Zo6W7((2a7AWi!1X=fyu}0O#p)=m0rSmkCbNv;6Zs}
zV4#`X-pSrRPdnf1NH<Gx^LrgYjzIsRdmRpuZs-Cn;@>+RKyDOD{6Y4zUA1BpdK5z8
zRunZDorv>uwzwIlUr}7A8|Lsn2}6=giY|LGP|Hd_7{_m|@uDPn#Azh<kLhLjz?5od
zAO2Tp(LL2MSf*;D_EapS?JHrA$KQiKg1)+Re*YYWTx{=yS;$8PQH+z^^;t(|$t9CI
zw}nOd+1svnlQ6kn{T{qzpg_ru-XOg;Wj0AkoBL3kad=r}Q78OvUFQM2O){_#0*G>o
zQoaH!c+`d&K~^=rYwi#&13sGir@R|sjbzePDB5WHOR8=n?_n4l^T!E(mR0{8+K12X
zA|dCzIs#5%S)*#~qvOSW+PTfTn&FW6*uT#1dMpYela`wI3~P4Ke4N#GBT3U^-k)lj
zFs_XBkbcxmioPs0+4T=TrQ4_sgrwsl4pM%HW*trL&j-1y+W&gKo$AboM-U*Wx4tI^
zn)yDQLGZT>u4#WxK*>feF6GT0H@24okWK-VCX8s?>}>(Tuq|PiwE$4#W(W!B`2ejH
z2Ye8IRsZG4K!rMd4SS3lPa}@UT&ru75<@t+h4I21L47I)q;*sirln=29vu9W6tO~J
z8>3`c%op?t!DrHC{p{}JBkYViLi2$-)GKQ2rC)y?yoA@6Gp7>%In7_%yzCHkiMMCf
z`Mbf#>xNx@aXsUy#XVO*+<^-u`Tk`7v1xW(hLYT1Kma+pg6Rf>3wgM~;Isa}faGP{
zV{gmjS1+g{4DkfbMi|VxuW3-g0HL}zF0ejLm)BQD<_vilSOctKC=i1KJuZv}&u@3{
zMS=cNqyGb}KvTaLuzRl0^8<c3kk^zw2~7x)ChZOcZgwh$1v?NsRx0q+JL;jBqATVC
z8<sB>Z3Gh*Za{VtKtAs8ALvJ2c%^r<F7y{<6MAiR28>vPZ+^A*xXM&@{F^UVi64vV
z7++1iP>+EL%dM~Tesz!kasUA(bb(v`tNp6wFsEPV86XT7#Rwo?F-Ml-=BQl_ncB7u
z5WS;D*$zMwbWc8GIY9LB03}RVJVO<wLZZ7!WYcBnvkJP)iYY=ERw@~fM^mxg5Qc@7
zOu&U+=W&u3J%BO)Tnmf4qBmK2AZAcL2ZXag1VNnW9;<VDz=`gHAIJlV`eLbc9Gq$4
zhCMsU2QqXA(xEg!?kM2m)aoJ<<oqY6*Pc2)L_<9D%^%<YJUKZ5{8)WPwmIN(tp~XV
zR8G61_F<NK*JS~c;VhE8S320{S7V9~FhIK1hx|c3K=^bwqpVo7>N;Wg;W<_a5Y8_Q
zZUZ2^>F`TtEC)!2z^(lta)2->derZcX!9Fi2CFBCq?~(re@jC=-W*N&u$nsnq!#3<
z$99B(k$|0q>j%g2TD7oDqiXR3Y7*N}{Ks&;!&y@YVOaIG-~(~N4rDg~#0Q($H0))=
zdv;P3*0=oy-PCKK_2S`sZ6wSVT%0|61Q7DX7pFJYzFyn->fD)kCnpCd=4KaP)H*=4
z0YhSU5xH6we57a^S@iLmF9nES(_6%U4Ug5zCF8{b21tjljI16Ye0o+>gjS)~XbN~?
z8prm1AiSHQ+Un&3gm~MA=lbO{mIFjlulnvp34rjt=u71s7NvL@a(o%AQYKOp)|JU{
zvbiOlMiZ6~%-OpTA@%i`1_Bbjr1B=LDp*CT%^HSfLVz?0Q)S+ASyMxKASjQc4xJz#
z7j9Qw)C##V3f0^p9=rjXqE`rzKT8AT&n-vs3i}oOUN;2DK!5%P@7sz5Sp`4H93W)!
z`F9?9;)!?OJU=-&2-}Z^nM+UE43#Yu*X?QRPH^}rm!56Qx)thsM{JM-gvV;@bkixk
z@J90Iw<(>N7|j6TD(d_$I)Lz&B?z%aomXFzKbe%#oLvz>XsARsg8Asd^1^s|CW%lk
zq3CDK8!kCOB8g%YRu{3LG(aM`!k5YyNPig$-}V8UB||5A7&ai$c>2ahU(|>AzzTVe
zdZ)tyH%}nn1iNUxGHE|TQvw9UE)dE@Cm%Yo#OV}ayZ{h%qDLEV^rc&{9PfUJ?5hkQ
zFa1~&ATMn>2y39AzTV!^(cXe5eH0%dK!6~i{(jZ+@cL&n3$uuji9yoD#F4q9vx_sI
zK4X)pO_DNzi=a+!xeuhoSVRMsx(H&o=EyaM{Xn`Bl4eh~obLJU1H_+DHw|e|lnIb7
z&i|9mSPl?QAW!T~(4P_jG0uE!_vbHzl?Adj9|-mXNhTo!%y&a00%SK7GpTjCfF5?-
zf?yH|2$v5bb2db;G9^HoiXM<AA_#RP1O@7x4wT0MTUCtWMHAKy(I_MmHiWSw;kCB^
z)`s=#)`PH$0O`1W6hyzoonH7aTRi-a%5QS~jcG*4(Yd)JAfN~0<HZe|Twd8?<IicA
zC#8fF9h8w3(CAEP+Vc?{43@!+V%(9iOS@Kv*utOF%zgWbguE9cDdmRo^4F-yW-JGY
z{(}UwB>-Yb5Gw6X%2;(wwpI%Z%JD)5SgNrRYbnMc55$G-K(HZ*-ChM=bSkCD1R-;V
z`AR985+I~POAs<+iptD^8fOhS$Y2XnUyD6$W7JS8nrcqRlTcZ0|6O}*73rmiF3*pL
z-rIT*Rsj&hXK&YNlzw*%7msW510VljdS-E9VV1P8usE}NnztXNs<{W<8ny(rZN23H
zF&Zm$K-Zs&M`Ac=j&#^00MRrpY4;lQuf3y!OmxlM+YgqV2f`CkWHXin1Qlsj(WZ1B
z2q}`0bc)wp2FrdW?};7`6G5U;pD5=}g-q(P5SG(P0HJb<+C)ODl!-Z%kJ)Z2WD<(H
z1OYN{I_jLYAlQLm6c#9*Zi!<YFFMgH(=V4bV*U8b*8ABG4-DsZmbpQH>DSr(K>)~O
z+B09<II}uELz@2R+}d$lDRp)SMH5u_reZ3gb~=*bBMPWfm3M%TBm7wDZZ{rFl#Fi=
zx$|SFMhuDf@WUGxM~m=lNd8Rj3Oe5#(aq7Dqto&E1FFeLCQL8!YY!TX)Jf0t2}YmQ
zFOKlT?og;L8)4{aW-J}yfc^{Ok@*#pZ{MGV?~X5!;bpKS+ksFqtY)mn8}<2igIwf9
z_h2fa!x`{U6Kre;Vwtc^sG<{HxY0#WcTFH~!}8n$P7q2Q+8u)(NF4hSHiR)S!&af*
zd#K|52Prb}GV<Z&mxtj8MJ{s^Jsf7;yEz2-nNw>Ur`JxsHni1u+qW-L@<?T4(E-UR
zx-+D&+9yA~5>-Bue8y#da}~XZelV+o$>nQdg&_?cTFIrNSjof($><cvTSpBE?EzXb
zL>szdQkglk(M<@DCMd=$vPSb8kbGTDEcIUlO{F}@54`!Xl!-5uP6I%a4SS#?Va594
zH)DMKb>~avEGB2~SL@c{i=Cj4K`#&V^yY;gk+Y-s+ALZ6m%X#cu^NV=FpA>XjuTmO
z6j}C=I4KfEc`YRk6j0GovI-W!-YD4>K6W4jR7h0#ev_G3Oqr3-`2L(j{B;TIVPWSU
zPOO0#lLHB1rYJOHNF@BNho1deDNw2$?lG(^A+R#RDtg;$EhAjc3O$hX{JDv~zxW4y
z`TQr}pdNq0hYz2g^YWJ!k>|hp`r!pZ5PxsyZZ~Jcx*n%dFjK^dz_15`I(Jo#6<X*y
z4m&}Mge8%;esZ$yHH4J~grzo!;H>MBC^gTMnS2Oacvw5Q{RKe~|35CW*(Ktq$;?J7
z*~^Yeu30PUmR&cHC?U6a6xs$UP(Yrtf?PGMCX&;QM_6Go#yZYB-b*<fHGAXFbqzKp
z61o=zLHz&h&N=IBSXSf#83hI5lF42$fktU6SfG#o3@ioE4WtC3X@7O+qNhGsZlX6W
zOMZ%79>bcIk;WW;4aaI97G{bBLHz#=JMtU0Z3_M{epcDez2}`4qHd8$c*U6BJ&-~Z
zZA%o8$gek$YpZnBZ9B4v=1itVLNj?k`E}hehGppnLJ&pZkZEh}x~^d|nBz@NQS?9r
zi_|~O6r1Lnze*n^ZW5L#Ai4Pgu0W}(j!!+-EfWHv=sn|7sT?RZo$In<k<i5{EP^2Z
zfA&4u@oq~vrZ>2O%#w2iU26e5chNT0WybqF)3(Gt!ZHN}?;B61NtaQqg9s)foz{5`
zWX3YOj{*`l_t=MzRKg;N5`dk%UF{Nr@o&6QYF61zQL~7Mk+x|K<lX~G2MSGLl|qFF
z0&+Lea}T5zH54SRfh03Ua~=oAc<tjI^*{)s3|<erbI3%;CZS5Z=#ry|^`7Y*Y1{mk
zh@Pt&<>g70C?HR%V0n`iB>osLFO#lA!z>BNj7a?u!nRsR0zwdFFzo1}Z)*sPH)d8U
z1rkcub-EQz$^!v7I_@TVnY-u(3P`59NHbVTLB_UiQQ%~ZOU{*)Mo!-Q15I@29uE=_
zf+&JvcY{q{Scmr>k+yJi=TSgdJ&J6mSjDGqs?x`>N)(U^Pk!l%Ym-p7@G)V!W1RPW
z4>LuBRdgT1@^FuVn&<>k1St<>v*&Uy$xKly#bqy9uUQK}-g>O+%M9zsNrJ*giH7ba
z3P`r$jh{IbJ$<1grfYOS;Q7y)M4%KD<iHKYTIYtH1cV?;U~p)nFPlFnxGCl$7MDo0
zWtxq#iH;sfu3^z8dTBhpivK8FlUSFXdvz@mHVkumJ!)7=^~eJ;({ZlhT%2`O!Xk(w
z*oVj978_PrnaoD@{oJFjjTVRyjE&=U0lDi}@hPwaQl^09m!0J!Up{L5hytRufP!=k
zLs)2{Pm@QgjD0vqB`ks{1BXPZZP`NZfk;eYMY^5|c=0wZR>#u!J%m-}1*Aj)$=Z>*
z$9T~LsYbzsMjm0$(<)&UkmK}Wvu<%a2?#+H!7%LB+GPphIHnn<cpN7J>sX|&+nhpI
zMV?7WnVGf)3dqy#WAb!OVS%b@Su1j;l$3q1lrct`V>#Asd(ap!L6kxikZfh*&*QC`
z%sk6p_B`c*)KHKSlQ(#9h~%@R&>B{G0s{TGK?glI#9(DIB5>?|FH@wHQbu_*oy)o{
z){%e^L?L7=tZfVH1dLP)X9Ds-bj=!}a|`5`3rLw(SOp5ml^urnjVI@UU>8JVJ`Y9(
z9cLT?WJb+qnhx)yfIOTf0U?MY__({v%H*8<tkNPngB4aMgcf6??+O;?coT)1VHGGK
zR|%`Sr+BM0k~cQ(C|Fx}99<AD@rUF6o8`n9uN~e|4}>7Tvv+MxiW*UPR%j4V5kzis
z9aoFROF1){TWvO}q*9xQJme++|F@*iX`t0{vooohl&1Sz;|OYBFm*o8T?kB;lOTwS
zA}{k_VlZK0D!Ku2yrd7AAZ<Gk<PAw6Vqw-59cY~(DtghOoI7|xekTOn=vHP}Y39~$
zS(GK{A5sI6kPrgP2viWtA94Jv6=yEU0)y33G}V5On2p<1<HdNT4@4xizj#{-3%kQW
zDH9EDFZ6+-8>|?X`%4A4Aq9l-t|Wm-NQi(Rmy;-<1XAR26{o31VHiX=1~#G4%=WGm
z(CHu_gpA`AkU+2@A%G`>0DwRUU@#a`3K;@@xS5+4d7T%OLCz?V&>Qc=`<J7P#<%aX
zwB$-c;-WE$maAY9EQ%UB+9G{GBH=*q6L6E7(?)1;7dm~2NFPEHNLw?rhd=_+kU%uj
z>zmX|h8_?d{<n$aDlJN=WwMHv%d;Vnk+P4`zZ_+(_-|#0O+z_Po4KOwoYPDDboCCv
zNx!t~c>YMI-@If_C!8zu&^bQyFnaaw5XmDQ-+wW_hr9kQc`=>D{|uAmGKhkrF3Tc~
zV=RVc44DZF;{2(<RK>^}`e+G6R0a`{K!8GKjr#EceIRWnp^7SqJ=AqVbr1{tfuvQD
z=RpuH&xk;tLV&N_;NScIia`FHD<Qu4O=0l8|BOIz(sA=@-b{bA^CVOlo;#7x&wPJ;
z*d1cjj6c6S+CJa)!E_s`bN$aiHIM~_@s?0bF@;K4SPKjDK>B_3fFO87kPosJmN;mu
zV8Kfy5bQ11o0=LSEESy$jHWBPo7Q<*ELN+@*_AT6ZUx?dLm<hsqOch~Dnz%V(KQ~v
zKY?&67`IGvGsfxXhYa$WF6eIL?5Id@mh3CaH9g~hpFxs8aCd+w82@gxrQhNVvcKyc
zpUxTG(S<!+N&K&{j3!?fWs%o)oc`iw7BUF5DeYs^Qq|PZdZqR_s7R4fSVG_jqz(Fq
zk%$J0D2u{UwSJ$VkrVn!4K2(Asp`C_ieM2<qUh?Z@ZS>1lTYO;oAIH!3EwKp=szNm
zFLO#4j6l43Gri{@Zr~9a1~;Z`@x?|_9DK3<o}q8l><-}b@#mdx!FTN_%9oeZN&KHM
zp;)YfJg=+Dbu+`VAcmI^NF)RTnNC%PUIQ^Bus(bckw7R=`IvRpcvX#6GBK$Kgn$M@
zsIF=OvN(0CqAZItiq0;K_a6!5)BV02Pd?oz`-ku*5(xkB_b^v(oMuLp<m|=mTL|QM
z5%;fWFGcZ3AKA1U<;Lsgat<_v>*i&s%$qag?#$=!?d}Wi4haIs=ihIRoW=$7QCYv3
zE;+uE{7QGffHZVn45CQ@_1vqvtliiJA4p~x7{`m%cugDi4|v*x%mWbwo%@4B#W3C}
zF;$Gh8W;vN1YstuxGeI;Dwv#66xI=egkdAvlGY*e+efs`w}LR7D|<d~X9tG-$Cf~n
z$9ebR$B+%lULHuiZRoW#c5)j;`bh%WhU@0|8GX!jT`&#K!WV&uufzH}X=Y16aCeeB
z#O>|w8o|#OF+#m#esJa(r+4SK<KqB$Rd<hY#Am&JF`dJF`>@41ZVLD8ZQx2f_zOs1
z$pwMxAJHNxia3WbtkkkHaDnLh?@+57O;|5l+6vjv_JfcF!rdRd78aoQvugH12^oS3
z3u|FzaU9oWT@+EYI=hBaErD=>?xC3E-d%S7i3+cq8>RIO{Gl-HZWX^VO)0=P^Ls95
zxg0$;V~8W+bj~RP;Y)+hj@b(R0}u2ce1)$9r>i?f=`@#HMM=;;<uf+nAH~J*=rdO_
z)~~ysPmP6&(~hISGyuM9J{_l&r#Zip2YcRn&5PZY#6@5-Sz;~4oN`DSXPK2*I`}}y
zpilayIW?)wXj~v#S4UCIFf8#1WHw`Ec-x}x9f3fascjN~p(BN4R-DFeUMz~JJf|?;
z?-0mFQPv5w>)$h*K0WKLnW>(-!ov~1={IusW=lWppuwMsMQ+GBJ)^@$N<PB?uObk1
zU?en21Rd45i1jD7!qFQEWUS2hW%(EML3}>4r>$XS38yDq(d(|~9cK$16VLE{;;y~c
zj>o6Nt@;kTl751FR&H*St9ze*9exk^0c6DQWq|U>YPEn2;ySimEaz?vu_rnxAZFVE
z0((JlV}_9B6vZPDbbjDp7R5^+Dgp{&5ds|v;a<bi4L5V$^j8Q5FQVY<a<aTSE1V_}
zl<&7~5K`Ej1l&68BkR^FjAAcYd+fWdu)OEip>NGNreA${0B81V38Y=p8pZRdbuJ`3
zC43u!@S*w6$6z!{fK0e*GDlrv^p=PL9GMdocXv3Or`9013F)rkh)>5D6|P`=CD~>%
zLkADr-G<6fR}z<iA1A@Gz=j}ooW?10ffxhBMgmc7)5d;;pn_<f{YuPKbnys;)l%$!
zZB1k9C@Lb1K!~pE5XVdDBl{(;^SlhAGc4zRnn0NB=hFPh6};&LX+lNe;c(a7)Pp0P
zo{`CY#O>9q3B>Q-zHb)6kB{&e-hY!o`0n^AzV}0k&c{CDh2&F%<RpRk$L<b}kGSj8
z(;a_HLAt;%&AFl?aS512t0)M9MfqzSr>^B@888TBhY?^9Vz>2=PyykQSkj3u2KFNF
zzz3otdM4383nBJE?^6b`EHHh>lt9wOB3cDsFGT}Ul*dmD_xMhzD9@cF^;?n4<yo@b
zY@WB?xV-^SIM1A(5ls5w=7ByxzM4SB`zxH|3K1_^$N{$bHi106g+M-?B#<$8z`T(_
zZpX0e&9?~T6I@BhV^rMkj4K|ul0Ys5(K1@Bf<=y{uw27MABfTLhiaN83JhS6Ljn=c
zf+Zq>z+FPCbppClCMKEMD(M4*5Pb-)v($|%C}>a?(fL*5Jxw6+w1+Xudnn9-pGo%Q
zo}>6IKaj!4;S%Ob@D=CVGx})7VF?hgA&}!0CdVs09^vypny~o0d|dAF;3h2akeoDO
zIbnm*%iZBuJM2!l-p8=y<LQ+BD>-in#5rOiM-s?|U_up;C@PAwE~?l~v6KmPDIE;Z
zLSa(gU>&7+7CK7~kQ#^xm@)czQ46bQ_6cYpLu1$^qNi?F)p1$ZL9|*%7egSsumgzD
z<aVdD@uV*Z<N@-j@9wrC{mb-{&-hkydPeSF$K(0i3FLT%FPO?%d*33EBLUC797kU5
z4QwLW*KQtO>qK|<^_D~ZhzIv3=pNx`kkmf2D>?QRNgx*v8ilnAf-*1jv~u0l7=jml
zfYo?aLLVB44D2bzA!r=0hy>EcY}0363Ja_8YCs_HpP|D&hnr=wTU2Gah@#1*IMMOO
z`xu^cO)2D#f0kKPxIY_*YsUbY_w5<i&AjMx|MVRK*`3xv_zK?|#yi@lKprv0og+L3
z8P9NfdCm3YvB}&+bBrfE`*1v+)3MD@l0YsT%SjYPi+qvSg-d&)XN?a;w+B#5(bnu~
zTZ>m?$_M@vl0gI{kXaAGo1>#Xs`jQ+f*9Ba5C}^IsnRMgi((P1F2IC!2g3EVtVByz
z$ZnjuKb`vqP$IU1m<mzv+cR<_5*Oyl_P$%fL8#RHC4t}~{xyLlbM!$VU`P9Qr2B()
zp+ARH&HbycC#RibPtfT3K<~NbL^eV~Tz6M8lmv3&_(}-`TA~+FOfgH*egzCNun8uD
zKs%6L6UfV3f%K#kT?`yH1YsHosHCPzrr<*-I&>r)4l@V=uhP1tPV{pwWzxyx4GOh&
zCpW!k4>HZ4xgQyxc%cp?5WhPNTXFcn6_8V2f^PihP6P0j4L2U`2~$UTNg#X?xWcy(
z2yUa}g5TJ%JgO}0h{bQtJYVsE=I?=Lx!iS3;T-1=vT2hO(_MF0Qkt+X9Z=3aD8Pvx
zR~eKt0SyE!+cv~tsb+uLhVUYPbR0611R?-1k?@DTdhR`yX&{93;om^VINl+|@n&&a
z7j+&$Ly)tr#{1C7<3~t6z>JQa*XFz>AaI>M#{e%yhy>!`SMabMF2rH5AWE2=HuCK7
z{D?`)eSi9&Y_dBz#8Hn4<irZ!Mj(6#BM{-dlnK;!d~6HrI&4+#nGi_lwbygkq>_6r
z4}~8eS;eb%+UssQ08YnM5>NU-E*{I}652^E%D76?*s@qR5QBgd9mBAuY8!{u0Y!_9
z!V&_l!U@1cLizwLq)8+k=-7SC0{(F8swf~2BskwZkP#LdcS5B}?B3Gj@#qeUPkmuY
z8=Dc99e0{HH~1zM-gs|5e;$qKp|6BTakTXNw<l)AJi=#Z8}il|FpToBbvE==(j2l$
z{8I#iQ#`jTd?SHiJFU&$^y_xLF#FbdMABji@eGux8o&N}da!u<Ed{GKcBM?bIZpck
z({|I1VY-gk=3Cs;P7=t4V={>rMG!3VBCg}q&0GxQHS{48h)Kv4r3QVPb^3>xL0BRZ
z$P9GNt_2Kz)f9A}LLC!RV+1k;4+u21O{=_E1jTB(oSbbr_pyTb+{RdK=L+Jcy(Q)W
zv;565lV|tMySHN{JPL^QPi0E*`8a>HlkijbbG88IR1_A4<2Nh(@>U-R)?RP-%U09H
z{jQHAgOlrKn%g&APrjF@)~(|oojx@kzmnIIKrS3KU?z%IK~?0Chz<qaDTcOAHIQlF
zq!cn^A-wyAOg_klQo;axfxzRiC%SE#Jybx5PGMx01$iJb5D56t&#e~L$hqrYKI}e*
zTPmWQrkch!{P^)<+qsbG+q?CsmGx`-COz`l_dSOlKEdIEob%>>a(YG_;-O_1K1n!E
z_9ofUqmlD;#ny#Lx)nMw!khZ1-{DaF%g)QV-=}NXsJFjlI5YO%cs-qP$1fi*W#aIw
zituo{QFl0oE9udJMtgh4LjYcIiA%s_Lg^#Q^CB;x9|-Gd3ucJ{rh%BMI@8efjXn@w
zoK-*-L_h)o=HSpYtqsE>;6n!jF`%Js2K_)>xB4Z|^CF0%v-5$x7yQ;I?@(<)LP9)D
zA}FU=6nUOjmTLi^zN$VXHl~Vc)0xUkVIf4dVF^eev!?JF{mY|xAr4C;ERk?v=vcg&
z5=a(9Ev%v}1L{{hvpkS@!l;emP5kwhgoJ=tM$2Fk6j;gxg0L(q48SO1LNP^KQ>Q<x
zJw_j*w?r3_Kw2GSKMe$1+G?gorUd$d*ai@YYo)POrFoeLK{Po#C;B^qClPwG0g{A}
zh$fSOGDuyPE@YxxE?Te##(=PL?&g$rF$ELWjIoC#5MglO_WIB%AkdKz6VYv|su}~D
z2VzkI$<iv$7kRXbR$>r{2NACl5+Y+VS*;)sq%0wdH**b410lu$Ynhl-RDk~j#D><?
zFp;H91VWFx(HjQopsCu_REdc#ZFOQ8kVa^^shh@mRn)5>h|aB)$@^fVgjW(0LL-_$
zDteITMV*2LO9vMSM)49GI-(O5J?K46>nvDeb^{TUKxXZa&cm>JDrg|8**8rf5Cg(^
z(FfwjDfR<dttMg+$apM0=MsYBN92#PDB?KAD69-hnGA-Ihdw1Xv8SvWF9zUn$a3yN
z0L!@_l;Z^ly4ss+YTxYlfj}sO46+PNSaDrIYvh1B(M5^El8_J_6Y2wrR%Kq6RUOAE
z1Yx096u84yiKf|T^hO2&u%H~Nfe3;gdvN~H&<ipJ?bIgZ_aUgOx^B4?aaH6+5fs5{
zac+4a5)u;c0L%jkAQQdFD+t4~+#$4+8tV4%1VS~<sf`w_jzCyinJlI#4Dcs!p1VXs
zTl?8mA(D4UFcIC#tTcAhB9Dt82%=>m2}D9d1WYDhqbOibbWlKC*3i~~7_7c&ni>Ep
zgrP|z6j22ckU(ZfxrC^TQWE)@n55sg2_ay?GBP7`Eg+Dxtb;(9C@cvH;Q>)t(E>V3
z)oC23hHGIWx<0fCF`;qkR7E%Xo(n`~q6>u{=Mb$aX3{e?Vov)k6J5uCAe2DTsxI>!
z2qcgMA|W9Jmdn*LD1bn!%1txO10h&U5lfj6`)9~Q2L=Hf78=Aw4Z{+TKz;yc*O3y^
zqy?#_YLY(qK%kl;_R_D@w8TWhC_1;6wh|H&?*f`Nyb2aUo~K2c#V#d~4C-@3F-0h)
zsM?JIOYQMuSYkFL6p%mwJ?;h3SQ1E&6;o_#VGRr&6_6~A(>gB~ltKPFyJCtG5)$tK
zG+{+p&Aq5n*G;jO30Sb8oIBiRVi>Q+6p($)#A^s5B7w|$KQN0WuVezx5P{W)a{tge
z1{nkr39CBK7Yk@eC^ZlX2_f(!wP39Rh`+3{8ZT5<HK+z++oX>=2<Cxs0%;uRBB~$)
z63CGOO9KXh$Iqr|_U$Pd7!*481Igkz%^?aaT6|pwXVwoyLPFwi_ReR=RU3@r9fXZ-
zKuAUi*^!M|5FyxhS?OxJX!`(t|7WSsM>5IWeWj}Ye#vC+K6i5R{X6Gh0oe_7iN5Z^
zTYM7qS`VV>R4oj=u+YJxSoF6YUXHXah_^^|5)j(LlA^|%9>Q#!{L{w#4Ey2Nb#v!f
ziW@J(l+JJWd)ANHAICvvil{)EjOc_?5E0Bkeh!r4Ev!<ge#Hy;7AW;&FiPa78k!y*
ztY~crHl&occ`L__mtjhWW+3Ohttn6<A-VDPjixOuWyJ8zL?<_1;>K&dr9l46)W-sJ
z5kyF1RE;&>z7fsP>lm@e8||`gvzwj!uSME24D+wx?#X2dSyI>|3@KvNSw05cbY$3F
z%O4L1@9#@k6<?wk!J84*2MNgKrZ|~QZA3TpLJPPlMtGSVep%Dz9JjC-rVQM8o^*)5
z1Rr9INVM%67<E%3;Z*&QHBCXjtguQwL@!c6K=o~i4yviHl*Ez++}!gswl;<s0=%$X
z8r^vQ!Z6JLA9yLw2n1O|h&HxuY+9;7pdWQDu0Sd1hm?>HJUG&}6mAvOn?IQ;%4(Qo
zEy#_x7s!<AtqtCL1nX~`JMU%Kxid`h+{g3W5@sOS!itD?=o{ULu2TZ)Vd@M{LEbWL
zIZ&z?=$(G;Z&Ni&ndlQP3C$qL%B0nZ)3?EsoBMnpd5F$1MKIpy(WPw*J_PGA3)Ncp
znQjt7)<V)92z~i{1rq+s0#XXqdn`IaVaOV7nxvsf+o8!^ky1W}w5-cE&yEFzVai~1
zr%Us8_|;nfNqHa*ouYRFC5XWt$k!e(MS<jB?1fbbw@1tJ8BIt#-PabDsB2`RBT<TG
z=)s21BQ4A7PHtf_Od;I!A3G|Lb@87zU<RUTjaLYv^23mg30<O-g76(kQQRKgO8k26
z@uCQsjL2Y*R|s^m+P`eD{@9OWTjy=&3WQ<Gz?~xnO07#eyhSUUGUkNnkXdTPBy0I@
zh4t);^Cfx_Pzi!3xYl^79yQX4THp{w^}UWQT38_lPaQ0m*b9qciolI`=jL=A>3|WI
z%|BXnS`E~~st5C&fyg&6lZsndg-}uUef7E|tZE5oW+CdU0?}DNG?`(w!R`wL<a8sq
zuo$KY#{9=V&)eqxZoQ4TMDKA3(hWikrdHF07FPAPgH^1bdyxVHzB*X2^#{-qV~kK;
z*JN}XTN_%KIj`H6oMSt8hAD&be#aPnTj68U28%;NjL~~4Ka3eBgqS|pu%H|C!gnA=
zaJ#Ax;)Vj`F%cW2#11c(z0vWEv5nE&{a7g!oo65nQwZaIoSoa!lKlSZqt>*Ar90IL
zX%sDOVru#=&bG_~q(}jw>f<fZmcC6q>W@KDCVD2et+nm%Hmqyf_ADT5Wx_B;Fpds0
zkTv-fEd1O%jXOf!UtU<k&<F&Nr+@(V!YYH?E58`8n1i7Nk<&C7SZ#KVPz`EUjRsc0
z3?!YiV>e!gDT5Ow$d;C6@qxCm=#Wr1y%K6t#tgN5cqz);vkGAWDT80BPg%V?nOwdE
zRDoPuyjqK<Z!<P}8<s?Ogzn@DgkefxJU8d&WkDcev@vD{X?xK%ogj>?u0z7d9KF;H
ztdEZZ1?08G`(~y{8UiP*S}6?CspHvO8@>0(x-4_zKq-bPg<OE#=QM9=-M#f~Ya3jG
z2r&qyj8Rh51dT$fXP9k~iMAyQ$RiBo9jZso^r%33-88z>ZQF*}?qTs;avQJlGE5<4
z0a?k<-P=8)g%xRruA2^LAV$jRxwt7GJ|=}4nUpCYAK$0wbV(>{i8;D5f_hjz<O2(Q
zKGF<i-Z+tvVG7}yiM}4m1{<wzo0iP52BFaD{*eWwdd)yS$~EIHQ9xj2@?Ae_YH3c>
zwPMlrqG=lBAX_Yfr_XgsSwbA&fiO%FjQ4YNZd=#I2HysFDH1qDS4J8PL4bS<lqys~
z3KWnxGhVz>^+Ab*vNp9as_QzT8{K9?2;Q$tm}lO?Vwh5Zm*PCbhkFm!x4lLE(Psq_
z1I&0QIZy#YGmtMMMGllI1PswH>A1?z=eLPTDgipt&=yvfkQlrV>$)Hhgl8ZOQwF~|
zH$y;{W%rTxcy&gIUI?QU+40iq&6^o-sZ;a<1%#k_^L0o_#~@Rs<bVo<Tnk#dBn*36
zARw5bbEGZ9l)yNS=XtIv9l!7XnxeP5F#<CXRU1)H)w6>oUjo7vNEuMENv{N?;|e82
z93dT|H%+hGhT;fA@M&L=kIXX=hAD$FljgLo>F_aN9NIKJW*~#A5lJ}E2L`@+61VFE
zrN}j`0tF=VQzSZSkc^osBb4fpJVu$eC_#3AtouBloJhzpg@6hAe5SN4pS!hI+g1b7
zbpmU=KZc2RHf#B2$Xn<wVTl5Ad%V}r_npk#VWx;kbh-l(FfPzGw!!<uuN(Z_xdLIB
zGC&J!PV>5?#fR2HKN`@9j1-gr0lo(4RDl#(f|MvAs5!rQ{b!g4BUP>7$lJrb8FsuD
zRwl=?xO8#_!Z2k(aUgES5Zy*NVd0RF0zrhR^TSM-pFgG`Wt*9lC?M3rdfF-8<OkFP
zcOb(RD0OY|Y7EhX{q!L%TXOU1SU?!22*&&0&be(_kHcF`(PLJR9s;7Wen?@S$78a3
zU4j(3gjJ$|<T%2&+aC$YTyrv_5@=#+jR{DPQ*;}5zpmTn&Xd=88Kw-z%r>XZFLsYU
z*ft`O5O(fnsFj+`Bx~ZQP;}nHDgp$80K5{{5dFF%q)>Dkp<{i|hkefivN*>rEQTqB
z@s32PIjw76<MqMn*f!*aH4LhTnaR_^TYkvbm(dcpcuN!z=*RW1ry1|Hge3<fCam%H
z3RkB(A`ChFz8q_s-FZ640>UsQ@Z0Dx16k9udyio2hyjR33ri@(Ns)rk`VCRAonnCk
z0^a-wWCbt-F||<ex*0G7Av2R0eb{~4HaDMaWx_CJ058Rqwq@~q2=SVMXsw%$5(%ZL
zu2kDAk??7!SY)15nF3N(uSgIHY9Ngm>OqJ<2hlV-)7lX2zWX($)wz)?5QZs&(T#u1
zI3&dPM=~<W&#vi(A_0-t2n2V8Uo((0>yJVO<SIa3lMwha(-xMg6v~iJ=!byV7(!T<
zZFbwqfl>@p1Tenawk#k^2(ir%9h;2kJ0%8D84S_sfQ;fmz@;D9&?$@}1%%3vuMU=c
zOwk9E5keu5uz?kp#T`hvys$7u|LqrsVgCP&cjw5C_t*nwAZ;6|tKA6!#|mMl>m!4%
z$cT?yp@|>`3drr(kGBHk(hnS?ODO~<A!6us-=G4CBp`m>mf78T2Es69Fpkd6+qN!C
z3O)uzqHFB&_MNC}rO?CrDG!AD;w36bfdZ0w<`~lm?1~nHox4GSs{ZV-ago6th~IY@
z8sG~Fx3Czd2>xO3+LjYHf~aE<NCG4z0|KqY#TXaC#zoBf7H2n=d!_P_f5@-oOY)q`
zYd$1jlsQKdGg1WDyNQ>LbP}%(l4g2FqduDHp6>I(xgZd4HW~{Ps6TA9h7Dl?X&OyU
ztLZgO#|jp=5+WFHWJD)*yegg*y?_Mrn(J50O9<5BV2ZVF)kNBS+t!$o&}bMgF&WJm
z&b?g1Dp8^kI1vm&Bl<ja8~!i~=Pn?0gMeN|D3jypKM6r4#hZW>kwCEBM{XoUVtfJE
zKy1yd+BBhShS9*72}9Q(`=f~%OoNMZ39CejLSVpzAmhbk<bVD3P@vH=nvCbJ)pS#<
zA*HQMNcahVpjZmHldymU61^uR5&Ub+2NEr4ni_&B>MdPs2?7!S!-6&+`J)kn@qS+t
zNQn|f0Mp08dw&v!K7uJCIyd<Pj=b8jS*uDnEFgI!Eu0fp5eY;<%?Bblgukj?)6}_&
zg;$MM3!zLx*LQuvA7iXxmEqh=lqdvFgbm~Zp-dK|uUwkY1q6T81%KF8G5`4TxXQOq
zdSMa8^ua13fxM1<CioA)5dfoD*JMgU5QtGXT4L0=p+6Kxbbsa{mg1nafs`mw1c+Ez
z!f#*LKqleb_n8o+flycs=dRbx<8I`4BaI+j(kNmutl|*}AvY0nA39gDXb3Si-EP(e
z3=jx%qAy0H$!t70dG8s>H$U#iuYVksC{g0WBiaWtMl7tk>%s&gv;o2?HZ@(4hFPm7
z!4%~t^n#`&EF^*8uD^oI9X#+zAwbuzX#}UM^#+%)Tz|2c`1HbhPb2!9&-dcZQHc^I
zJ~&Reg5`}SW8Zh(&_Fm|qmEdL45r9@AOcVx<c-*%TFyX<06`oubxG3~mN78{>1s?!
zsM$@%!h-X+7(B!ISlH0L_n(1$v!6h|d1jFv$5|i!`(VMr(MN){v)*>V%Czd?;YqE!
zUphyJfWUF?j}8PM(}?(2Vqpyi<C(C5d_9B_-8C8@kopfc+-$1ciJq8HV-$2FdI1Rp
z+@XY1<OGE1)@r(K>RPjF)HP-#bcenlA|Ht7&Aj&|kU#em$nVcAa#^WN|C7hssZ^|^
zj|BZnFaN+<rJw#{RjFJ)MQ`^imFuGeK&Mh^9~}t9i1_rVFgUq5rwx6CjUayL4jXl0
z7j0=R4Lb=n?Rc|<Rg2^C7BrZ9Aqhmd@xE3kAS4k+<Fz#;lxo^Wx2`c3R>Suf;Rs$>
zVomgYZ6LpYvj@LDx5QpWRdpqS0PA*p8-YwK_+}fdb~}jmHi+ik5VYG?Ng(fwn|8Z%
z^dTYm;{;1s{$%72>4wD#2sRShx^5zzJHuB*v9LZVvKv+b354sF61Bt)t7{^ol%_SC
z27+NRBcc0MI3JBip63k?FC*c)Qu$1(#F9XW(@JF<fm~HS+p#3nhKh{;>U9o5=NFbh
zKKSqxE|)WJ;E4&yBJ^Ds0o?^Oqls-GRg=Lh7{q&%6P;S6h;xtv63FXUNhn?*-iHnX
z=~la@ZrXxC;KyrlBcVS>G~V&R`+jh61hTC3u9HXYfA$3b7X(7=BM>4u44q#R$cMto
z31VT1Cx0@ZgFqTX13IDJv^7mPYi9Mh3eb=D75SsEZde5*ki_whKiEbXhb8EWsj05(
zn%%5purvgQzU$9Nh{o%Q3CMv3Qxy8;G?>P#E&sD8_yZBhVd?ymKt2>iAQPlS7Y_WP
zFLn~T2KIqq8wlL6#O$Nnt<v!yQ;=Ad6q7y*N+9@=Ms)B8Bf8t>v8idA&21np14a<v
zWj?9JVDSCHEn)F7>!;1=pI)`wS5{_e-{FExV2MLFs*ev(-Twqzne(hG6uHxwu+FIg
zpZ7?>Z+L=)TI;%_HkDuOBanc?<`xz_fk1e@C9g>}6ZPln{QW(3v!&Qz%~EAyd%J-M
z(hXwg$gY;Rv9pmpb6fa13yX!Q1j3<^FRZLrwnkQ!?UUUN;_%C!@si*SM7UusCW{a&
z+4W%*%|vVJrf!<H-i=b)D&Z6h${$4}kT@2W^ul6P8v)zYbiJxIn_9E3(F;p3NEl8g
zquF5Qc_)LTgTe}$(^8+c`+kM!b&_ZPzQ-@_#EH>g%UH_<5Amt%9R$J>9(mp)iUh1x
zg;;iSUzwdwAEl}_SaFTF6=KB;v&UK2o2mGGDvaIJ?EK<QuR?76a8V5|zDp5^Rf*Ay
z2qdZFE~S@P4X@3+kW>;8&}n@AZRaS6>!Utp8EVNJ%8FsJ%=m8f(>*0vAy_8&B56i+
zN^m!o%~T2GCv*#nl-;1>TiKxWIG`LHBdmzx#zW$kMaVjPj#^??eBK_`E{6gyltW6~
z``|V`rkuFw4hDu=C`V6TgV^c>O51qF%i-i?CN_f1W@CRG4*jq(93sO5%%irhADdOJ
zN*q@c<9Sg{=!GN@kOzJMGDsXuv1@j#V31}@Gi;<Jbm4|IhZ`@A=m(Y$<UaDin#zTm
zpYg1nQNcUWGryizK3jbzK41M@iT`?tp3)vp<rjB53B*aR>jjb4sNjn;>e4&{x$9A7
zq-waLqQd7@UwoeO!t8O@1)M^GTgoz>tW}C}ziI07b~}NbK4z=1lEV7Db`OE@depjt
zw5)F0$#lai*g_yYMcxgSK$2qnn_}6l;1P|2WGs~gBKafR4H9>}Og8A-%4Qtg#f@_|
z1Hp=mz_4MRTLuE_qLjQ}j<}RVAzxSl-20^3n@kb7xg4Rg0UgpXKSyQc6Ua~M6)%P_
zMC>A@lv?=XIkpnIQ7}b~M)X=$vuQz(Cm=`-ftOPJQ3g{i0uqClOi5U!9o;m|s%hFy
z#=?q>=!|8uKrlt`KMiF<{PEmPAb6xME0sV#dF=qMq>-L;#IMi5F<0UbVJi`bZhEn9
zeys5Gk%KRG5eQ45wr|I}=`$w~Uz}!?SR#SoGwaivH*hgd*U;u?3bVqw+2anbJ+(fy
z)<*$IQEjBdmuc3@Bb4WqSBu$-LLh-<y%oh-)(zA-4#ibZgH5Y~q_CABSmi=dw!;fa
zAo2BYgXqLw<xw2zEa~8z7U))aX}8uwE>V3D_0$!vZj(?X*v=qo!-}u-om=!SOYJ9;
zwIzW-iN4L&+E;s>U$a1n|3=izaexVcld$7;5cO6M-Oh8ZxP#wf7_ED0o^#?tI_$jo
z_Ot^z6xI}03eR@2=*w6-M~;<PkPf~%icaZ8gW$6_Ng2wmXoKi1l>Q)_jPdqT_+oH=
z;dyYMS%iKAfDOH6FdDBOXCkc0jJ8lF1zp4{B7wY?7IbARx^Tm?s~Sc~y-6Dg(#ZJ!
z97gmB_knzIP@znE(PL_Dp1s~iAv)AJ&gR{>UExXcY-e*(2g-T}fv^Og_Q+rHiy(>1
z$srJ`y1W|t$-2~4JIFikP{s&?1OlazK~Jfbf-N`a-b^doZ6LTTZvXYBRTe*RP0h-)
zfk*;L8q<-l{8P4~BL!Nb%&ZM0-BUMd2|39EtWB{&OoHpA16EYpER6i|$kVdjAicRA
z*&u4=`=o1Gjs^aRTLuOM?xR1PNEo&WO(W8UTyg&9u#BW-6d%_EFvH1q;S2Vp6qnUH
z(Fm2_TqpBOHfWt|198}NqK*00OF`H>J%KSZ61s?`I5dP#zzoFJbkk%8I`I>kKwiZQ
zSY;@aV&D}QEfqv@nX6yIKhNyyKWG>%bpu{l@Z+6~q8Z4^L4`7b+K^TP$qmG1r2Z3b
zu%rr`@{#RrK6AZj2Z1E)a!aLpjY?%5S#**mo@@;_C_q~K^Nu@GMm9xhq$6t$pmOl9
zym}XbtT%F9Zd!G(^wT~9i5s&@1mJuxN1!Z$@Wgd~7gtbhBH$Y-bmr#XB!xXBN>r^?
z%#Gy9ayO|wP13k}`#Wmoq;<J6bWLgGh1dCmiNXe1VN>mLSduD7AAhSOlq;{iFFSoW
zD4s0i#ik(VC!B#SgddiVl(tbQMMmSrBKNTgrBOSUPFP8F?~*_YfY@&v{{URQ!hc;j
zc_UxU5Aik-*A3lp?k`3QZ!{RZZ%W(We%Z$#zdSvZ2{n3<Qcsu31FR|m)sjG*$p=@O
zQnnKabxK^iB&!{Mr*E^RCa?T$+M<EH<5F5;6>BTlH^@Dz=YT?<)TLVqL>^%K*(zQz
zb)H5bk7{2N*F3487ATKER=8M-c&ZXeU#i4x-GSvej)h{ZxUjo~Kh$neCCE02r>T0H
ziaV$BzDj@m`!Z8VhL*Mp%R`%cPn%1+2)=lzBa}?cDal=DJAqKV)G&D=d~tq$?s?v1
zvREJ*uhFOvTOg2@sUhV<&9v$GA1!6caEb-wk0KHX3|=yvB26GsJa>!@Q#YHoVYKQ<
zC}p^Q7>532Hu49Uf&90jOul<Me@IS{4}PC2EBhE`{Xx%SjWRt;fP%IYh$Xd#R1*6)
zF09ivT*gN9-g4d9a$MFWNs*1@1YmRS6mqmxu3YVO<INHX*JK3xSJr+4k?-8o)OLuo
zv_N@1fHvieDEp9fEbEpYQPbNEf!tLR63=!+Aa~f~lK$0=+H6&FDs;6YSb5Gsc$;SM
z?1<PdtfRJ=^`(or=QsUy18!pLOuubyArLEWyOjM!z@6yW2;z^&ixBZB3~gA)1O%^`
zHs&36RUlsc=88sP{dkK>Ah_!?6c)nTFqootZ0cIK*)mL{g^h%+>o-E!Ks-+jsFOoV
zDCNjUpH@yPj;9d_k4QX^K-y0sklY%AOT`~EdptuR+#kvBI(&^zA)qi)M?RN8XfUSZ
z>eC6Nmm-jgiaY}0@2rSYmMsL*>A~Y@3D2g4KzbB3h})xp7bI|GgIIp5QF{nPg&aU~
z&ZIPayReQrHdtSJJa!TSQ4#wKWId|Y8^zxV&OmT4gA1{Qb>Rs&-ieE>)^NvcX)S{*
zSe$@#6B7v6u%h*hV*2qGkU*mK%2&w*1pL7t(>8T1V(D1F((0|DEBwD*B$S$Y0*AGc
zuvbxWEf-CmNFZ01MCTa<a`_Yj*-}HtIi=W6&T&~6@s_06gUW!+zgP+=OdwZVo<|^r
z)$UVaz9WH5(*ou6K#(Gk{?iC#Nyjw$9K{48@OVkrYs$0AuT?f^nbrN5dkN$+cOabY
zBM?>CeFP$BAk%*~;O43?y~MKwlA3``UyeXdPR8DB;0X)JV*XVKe}3dBZPr^hHX55%
z6T~4Cg2apAMKpmFkw8En>2Qj1Jgh4C1G|MH8@kbO!-gLsCHl-0PFROTAorO0C%{5C
z*PNe9Abg&)*iRt5`e_7WZL8tt6cZ*|F}6r67reQGkw=ZG2w=Tu69^GF@JD?Y0--?r
zdVp$Nb(q^vAc15wD<%-yKUVl47s4{gHb@nYRqP^=PQG1%b?qb&)sMl-ClGZ!@^*7Q
zEf1U$E_230N<13wUI^zWgOiKdcsB9pq3aGCLKo1tzbW{mik%?jk5`z0B%oF)y|9V^
zZu;49Nb)Wrym*n%7HG8$4Ge+_h#!t8laV*`zCS1eS#k+kaf?Z7)y_@=;YN#hB9K$X
zl`7apAXJ8F1hOQD$9EA3_1h9UD#ty5j#TpRXAy{$g#M`SL?9GsH-V@jX84}JpFn8q
zPBCPM{6RP1K>F@xkZ#Z;PrFeqWxEK3M)tfLs@B!XArN&)Ir#*l`kv8D!d7J~lYYxN
zV*%oQkN{aH7boz-nv526-}l3YYsA46o2IGjHPg0hjOd=piT?Vy+(=jiB<~9`qG-IZ
zftcJUWVZx;U?)0Kkqzhb`C>K`HuS+E*+A6SZfYK~!YW7(_tv`z<mfFA5l(Ch`1C0R
zV#znfPOra)A_(#$LG|UO-}W4uT-Q>)WRI(LNfo+@e<9f>=+T7Ir@Jt*`X_+|I|;<<
zuM!#GjX)^SZAzeQ5Ac)+Wx27lpFp@ZBk5b|g%urr$m<3I4eHARQ>Ss4%1#1l%R~1)
z=@6B!tGCW05Giavfdui6QMsQ;9ig{<3n5pgL7MiZA8=CDRnoH<@-GCYv_&{~e-zGr
z7i-x@gA3a*qHCtvjo&#*ARBd3NGnJY3FLL024AjUaX8r6M_AQiDdRSDVFWRJ`0@Iq
z*@bt0NH!4ZR4KQ&Nk`e>Cp^qM2!uP#qGJ{}yz%i2_7Vv7{+(1C3<-6YOCUFKtP`Hn
z3+QXQ32<Sl$A8B0EP>$sN9x^Ft-<4FZ*?zeYKB0rBR1VmAXLY42cvr7!xIT4E09F2
zH3Rh&ZnNG`AiRwo3ieo$1Omi+=5HZkQslMDe0QoB^<@&CDtJI$I|)R(09#_~ph9yj
zM7EF(-zIDxfuIPEM~(oVqK?pq#Pe<yRidzid{5!`WDrSHFM}@-O>sP%`IC9bZ6HH~
zJ3(5usR@`Sym+hB9<e4VY)--=5{Qg{1|vEqqg=<b&6;@(FN>yuo#@<(?z-W4F&TN@
zSfnU>&tQsw{PNG8AK$!V2y^Pztk>%bezK19Fs)!IV;6zY^Yiw~xe^6&$MH2R@%ssc
z&vEZ6s-sOoq+*fv<kY~=%eCe7sqnMMWnEH(No5zH)`zIp%gs^I)H^{wzoZGof^mHL
zxSc=(Ho;ooO*6Wm7fzo<Af1dr5@_DC@5HCH<=uD!fwVV*y_Ezaca*E$z%mHgAbfp;
z&&oLHb#@Vmz?v@24sMHLu+G+%Lm*dD*n9$^9F^PlgD4ty_M~@s+t?@k%tA8k5KM6^
zR-ZD^0L5E!yuA>(6a8W`naxIvMK~XZ4Hxr|rfx7FNVlqW1$_`geL#&AH<C#q354vy
zf0B)a^y9VhYJoS5rV(Y7a)<EYqZigdL{~fcFG898`HqPq`WdBpn>fl6Z-YGqLeEd4
zcb}-;H~R^MdXb1rM2Mm-!OXAJ8dw4#qq$y9)#I!y(<Xi)WA74|Ql9u?soj+$y{!bI
zHsLyxun^c!Ao&6jN#RcVl;BAOLRutF<wnAdXt!Hyl@0nVj?p6Sij1VYgFtw2bMc#W
zLr&GY*zj$_ZXpmUN1LZ)Mkqh`<!DksT0<@Aw!Iug+&j;kd6UT`gb^Kk30qC>M2~cY
z*~O{_7B8?NfGFq+RuKv0)hqA^B520JcoCBTSz@ZTuG^+&H!)UP4Z}r35a0iLH1RIR
zC*JuN|3N5|zuqxtw3T*CYDbTkbqeqNTPu@UI>7nKnNF-A+A9R5Z3mk)u9>9N@)uyW
zH#SqaU7lT9v6{KP-<A=)bE(w8bNSiHJ<hr^ZBmtrbBkJ+mMk4jJrftN(RK-RLcf14
zn+h;V1*=e-(8=<$xbRZ8RbJ035-9`O4HQTP`?cR+cJgJGvJei7mHF6NsOS+39ofm;
zwsx?+NVP%PaX^vUH#wCj1HoZ5T$G=NrPRfS=L+jUOcW1c)AjLIoUJZ9Fz>ucz7d6@
ziNN-5>|Bao4AO0TF)$y<1#+T~A}=gq1Zg!G3oCNNGC>|Pqis9^DP$y*LJ|lzq9?aJ
zUc;)^5X;0g;l^t=>%xX!uM7GJhyHvqMoL@eMF00gnf&<s(P3aI*2GGb_-|lUKAsGh
z@lJHHXzh(B;XDdu!h}*nD>OBoTM4_>8VH08B4a5E6wVE+fCRGHLr8EQS_Q<YFspji
z)-|kPi4lX0Qf`Q#&NJ}G`+8yh{@p*Lmjp+L0q1a%r<VAiAh^3xyul7-q(3#K?Z6Wz
z5JWQh+6`$#XDlqcstX3GnO|19geCJ4M$6)_i#G)+Ac4H5(Tn#ynScN_yK0(r(}No?
zZ0Lp?`o1r0=pzp%kVA6g{kPHSAC)NaFG7ZMr!nW_8ed<)jn^9q8_3vqedM+_T802-
zAhysFUv?v%A@hMir<5BBi-A|X+0uwE5DkVZcM^602SND0ZClfjfvn}a;n4qj;ZMfn
z!N5B?w3N0bN*praRF<R={>T<c2Ux=zd9w*J5@J8t5Wy6+W~&+H1L<}d!5i8mCXdLX
zTELWq1tbvihdKx0R`gocwrf>gH?^i_a19HwOoR#D9gSyW&l?O5Xdg(45{HjlxWo1P
zf<8XB1yXon2`dOzufN7RHde4&t-99IbsZ*j8-Bcr4TLYEg$<`zKmvjPRT2*iKQ-nT
z!>BOzs;(hsbKNk6-$la>{V-f07M2Kwbv`Hwq(q6QL;6~OR2KATAIM<ljl~Mq!bL1B
z7}4wW;}w7#FD>XK5Fkk~RK$cJ1tgHy4B)R=(c>9Nl+jlF*hZAnw&5C~I~V*h!V=ct
zyd;nkC7y$hbGcl$KQ{Wn41}?;W(;K#3icQ_;Fk$6EUE|_DkFBo+Mt+IkOC4&VggBw
z=u8J9@Fn9EV2)bHgw-&(g@`%P$KJ*F|7#<9i4rBG5giGo#@=K!_rGRN^oBt+o4Q^_
zO2RKW1Cc3hqxnYx`QvZ)&aKx;Ad13T87>2eh2jVmX3)?e)x^YWqS5%GCO-J$|NkxS
zHPBmP)uTpJXMeq@Jz9H;cCoL^MFDxb0Q&?MT|K%$K>TT)yAU|th=?31tWI}GVSQl%
zVHhVUij7je8BI4fP2J{5VS#`IMA%7mZz`c5jiS4`3d=<SxxOF`u@1)Tog*ReOIe0t
z=!MfREW*}6hOstUZ`EeY0>Us(K=n?{f%IKB4o!|ZboA9kNMYFsBzx--D1scHjB*6x
z2J8JXxA*%&!psxaQYuL@6w!&6qE`|S-6^%Lwp;^Y7$+!*tum(5^?*$#c@&`pl6lG0
zhE-x07Qzp@g6r!^J$Mep32>yXGr9%x;oAsAlv4^T5UHI+kJA<@tU>oZx_G$@i(#Cg
zfFq$XjqZl#UEZP%3!6+tYE98SUzQj|KkULH@B<GLI>CAlK91V3Jj?}^Quv{;qyaKm
z7$j`+u^UXMstwP9FpL`%<Y}uEGFW5Y)UhQ9tS34lz3lDWg=KeP?bj)C1mXyb>23k$
zE-c%|n?XOyBn^W!NGWQ?GR1a45#4Ny4c9;z#tGmjrTP(*=xvQ6dKAM@Diw%8Bx)em
z0s>jAUF^YwgwB9fCP&PEgs`;DJaqA9BEuj$svtQ$(KS5Lx7&hiAPnOKNMWgMueBav
z2^6CSf+~8F2<bsVrnAmDe_>%mDR)@Uj#B$R-gz6Z6w>O4h@!+UPm9|c0-}4PD#~GT
z1i~;bfD#DoKu`m*p6K!9D3uBzC2Anxv<AWg;tKoYy_oPUC0%3)2}yz=!Srd=KtQ^|
z^hy<6L}wT`C^m{B5L0(%XfTQ1#*-&H&Mr#<{jg=z1=y{@B3yKoa!^1H!ZH73-i75$
zJBN-<SUA~equg%88cky;oUM2cgkjtOUA$O^RS#pGHxUIOX@ue8Bos2Fi?nI)V^8#j
zqubnF6p-~U<h*{^g+*7t6haCw6BK`lAc*4DnxZ$O?%-)#6x@ZyFiwEgsnu3@S{rKP
zZDLzQw~mA%PBNueqW5O8Tj%cZCKDG01PXHEXltusaFhy#2S=#@gXk&#)nJhDoz}Wn
zy(+5BHHKmSe~RLLRVl1dZH5?QAaNQ*II+w^A%(THwMBG)H%RDi72QDrS=+<BFQZR(
zQiwoG8D>JD1QG_3wX|(&x^$iCm8mub3kbuw0RFS9P7R$I>$b_`76lNx*$BjwVOB1D
zyNj1N<T6~`=I*F~EWq(7Iw+-w2t<5HDOOG6G$Ijc>j8csM)ey`VO<!ji?ZSV+whz7
z9X6Xy(Ho=ddKjAAMj*&w1%k*z*xGu;u^~F{oh*X5C?L~1MQ{)hA6-~7gQsm0QUDSJ
zag^tAT@Q^mS{YMt1ae_KzkOLgs(+KapYHRUa~?R_Via9>W@sTGX+RQ^OnxAtlo^SK
zhZtneV7c1Ed)-L^A^A9N!P>WBWvGvN61%Vh5k;t*!I7};I^C;^1_@a}h~@I-wTs}z
zv61SN<?^>qxj#R?vpQ><v|OHACcUIbRzK&rG;{MRFYfM{LvWQRTiw6$_!@H#s&_&^
zhOQf%yv}1Af&^KRWWER&*oI{t(Q%_IxbEmOUN;3~jyew#;(;uaLW)u(Ns!VtvPNV>
z(;$VlRRtSLSuVxjdUfN*y`x|J-pjsAfBwyxuid1ty*hd14n4B`DKWmW=h5otzq2#n
z%axvNc`3*7pHNh=Aniw;n<lp@tO$riSWp3(0}y|`uYtI!ATA2XJ_K1G1_|j_$`A@7
zLgYH_E)%R%%*UD(M5&5vApcZA?%ulf>?*(i(Ty9c6LaoYzbPPh&I$-|^W+2mssaLT
zul|sLfZIQMtDtiCxeRiSswz|kPxN8T^N%g`!!C3Wg~+57q4YgqyRZ&p=sZa12s`)t
z>5%XIq`bFi!J=DI+7gJh1i>z>vFlXD0`iXqWQ7mqpXcVu>%2XE$p1RG?&EJiFCY((
zrRypJa`OSWd5=Eye_ucz?w{<(6^<2NH1lm<)8-<jj2X3=c44&<s_01yy9Y_;rKRoS
zwR41yS3w*Ukgx1r+j8PY5ZyHfn_y%~(F!aJY=hZiv7s;oY?tFrC6%hADi8UG{QpO!
z&(Wn@iZD+0g%or)z6_d~*2r~^dipZ7G)*nVBi1EgCOR#Uvo<RK3wgBsen0AsuY^G4
zOxr^-#s3q5boolJ7(W}<?!RgF!5dWdz_)p2tB3a!$d~lT`&#Yw8wo_4-S?2g;9!Eh
z<pYsjES@JN1R~Oe52VR3UU8Gsi%ttf&qUwXINm)Z5HJY-%Y^hn0)cgUiqk+)xS-Yi
zz18Zq#*>@tn@&d(Qx6u%|A#=-0|J=}R(=~^hGFoQty8Nl)L)O^|22WcQ25&kME9q*
z+h_+b$Xn&y@5GCK6<ztlApO42Ou}}Zc_4KhK1axCG>TzZKU^LNWKYC~VWnR5Bk_SW
zPO-r$d!51{C;hhXw|*Iqqnpvq-Nnw=!iqiDb)7BO%-mV<uECs{>n?+G-<UA9v5$*B
zMU7@fjhtKoPEh*Db>2xJ@e)%NM=mtn(*t6`*+Ks|=lep9?C1Gn#RE^TL1Ph!ouToN
ztZN~4)$5(|Q(DFa0-@Yu2%WhY#<jvQtM?Pgy$q~_dF5f1We!p)vR^Hm4wKPUbUlt*
zJ-?Nt5`sWZ5yyLeo@`+?KHBZ8eRP5BBY_-Qx#R{G-5?F@U&$t?>~zY0CmbLrJ-;7K
zWD9H3xj<mXhaC~u?00wxSjEpZO6VCpvUoF)P4-`h*qv99NpWnNy+G$E%L_G}hkfZr
zFfjFp_@!eTHk<Z&P8)-@)rcMAZZc~8A?T{-m^k{BHh8Lsf-G()700L-&T?wOc-D(B
zw?1=^-3aowgL<2(+carNDdaV*QEc=swAN*@1ma=_wSA~Quh%7@#E+@wk0k<udSC6#
zb`l4}sIq~51cOQfannT`#C!<V!!ByI)rW&@$OE~MdhWfOD<8G6eAG2Ug*@T|N-2Iq
zC3l!04HLwBI8bU&guz!f6<y?*iG=w35JBNhFi5K(`6#A18jUV?DHA<5Z@eLKGXOl?
z-aY^!HWJ8VP2IZ|q@{1yzPJ<TALb7^!n3auNCkh`K65rd4WSVmo>P2#4&{nlqH>7O
zFn*li=yI4{{J5P!{>Vq3rZ@N)5@1!Ef)k+2Ph1kFc6hkOpu-^5jT+??^~k%K;{pZQ
zAVgy~Ulv_Q%%}PWXyOv^dMHY&D?cSA5Kic2KR`8|8PuKW_NWh3`J;kB*0@&?$V&}U
zF)Y->d&5DheIR#t7k841eiQW&iHV3zxY6rm5TOtu5L7a;K(eRh6!(xokcs|-7C^gf
zWWIFqj-A2+IjhTlCrT-zocp+kVv3{A=g|&1(eHtCN&`fu0f1o{0<WtHWLSG}B}QkZ
z@4SO-hzwij=mq$BanN%>gx9{yAcv{PlKnAF`>X`$)+turlO3oL@r^C~L<lgTjl#h^
zG<;p97tg8)#Br9=+i{#2Q>Rn$V%}gVEnilz7Svyh{t)7&n>P%h3Ki%UbaT-_9Yd~w
zYiVhkTok)DDTKP3px96bU=#B}TrPnS$tq)N2VFwyq68A-o>KluXU;>ZUIqDGOgocd
zmWDw7Fltx=VV5rd28Lp#eOY<QuwI-GtA79osU(o}M5#$M9{YY0#w(y8Ibv{<epknV
zQgouzjZW6s*Fda2BoNuQO5PQ+0}0chZk!ZThoG9fIML<r20K`jG5AB``gX?xVGO2C
zcbMkj5zoObl>}0&J(a_7(jn%<+Cu#do&u9=`YKFS@Q0_rcZrtki~>j)4m%pc3e}QA
zXT|m*khn}BsvCdcRJ>PS9Kfbwi&e)dXN2gUf1vZtNuAV9wZ|o2gA!HSHFe#%L?C1=
z`<ut>*v7_tXqC?r!)|25EhWE$K&=~(EWn_yz%C9Ss5Jr01QKJ1FMz%rtZG=jpMzA_
z!jjSx7uOQU%UW1|QjYheUH^?o28p}0A?!g4u{Ow|7S>+KWigC5%SAsrKLUfGlt~jl
z5Q;A*2r8L$I=dBxg*RS(yXIFdQqip>5Q13Q`<oz?*X7mRe&MEAVCP|9*T9tWhw7tF
z>nEV=lhJ6EKvpfkWSE2UnwajH*ZdjAe~UoK2YLq!e4;JZ2cVmLFWH{Ilf$X;1E_B5
zQmWhxyX8PCN+9ZCLBN-)Z#U7nuyOA4kBf<fLwj?|U8<0#j|cqv%tv5F1|b^_Gk(0q
z0F}e4RtKq)A0>|W4tXGxNv{|6eIKWRv~i*oogl~OKOIw!>>k#B7BksH0ulDWzj7S!
zk(6^!PP7&C<D6SqelPN)>zimI7RXI!mk7imMi6fUec@K;cqM@ZWlsvQ5m+C1=mSLQ
zs&!-V)b_<_${(A8P+jyWhWpqz-=XTNpshy9n*<W#0_%AWU@>hb5RPS)w0z5zv${Ry
zGp|@y3XTM`veTfNK<Ht~hgS7t8DtqS3c>muboTWWvJPp2@P-OzW(noFIDvTtR!k!L
zYqHMls%xf{cp#9s<@*j22|H2+uNOs83vzY_H#+593LZ6BPBG6T+|&K5kNZd<mo^JT
zYhg85%H)$AH+FW09jtb<-xk|7f)8ZWx$a!-RxK=oGLa$2VMV3aY62+@0a!z4xiSXg
zrC*oCREsw3YY61AhAFH#+MuRIE(^lBqBePo;${T0vOV7<kQgu8nZT6b4Q?h7efzd%
zn`;Tg>K2sZ(7MJ^Kp*)0c^Ov_NX#*LD`}GrpPEBYyRdq1s__)FE63m&epO1*UB|#Y
z0xLo(Q^>tj+M;5Q!mtMdd0V7#>fPO))Z&fCsK)E}+dK}0QCLUy`q6jDBTV)#)Ck$f
zG{Su(5c<1p2o}Dgu;wR*Sik~7)@i#57l`~DUq#r%y7;_P1OntECV4p%SU}rOAUWF2
zYaTJ3qXk7cC$yFcBqSyp6s^EUj%Rg!lRy+lIoBHm!tW{-1frCs4v&;>hJfey5y&%o
zt=Av`Ta$569meaWjLz_3ZTb_DPu(@cutH_E3IaiY{LGGa<4aXji!IPcusOxk5=hms
z{NdmO*&siDh7bK_G!gS7@|!HC$UKm9o{5e`^d$1XP>gpkZIC@A5SGEZELb4i!eS|t
z^ZMyo`%GRo!~pSIeiZd4lWP=H{Jc{>5N`D_Y0bLBDb98aM8|OPaUh6`m-8vnuS_6i
z3q<5au<*Is0#T6qj|8&bP9OtEWmQQaOV!7#S?RuuKo}FiMTos(s8ZmqL(Ryr=uD5&
zQ~t9@Z`6a6s6(H*_ZEThT|oEgG$s!77uhx7Be>T`u$4e`SiAf*ZVpl%g(aE8*BuGt
z9ZMcapC_W9!3A<w$5~R}A&-z*AViPL)c<iPrno19XU(tR5ytN}$RNTWl(UoX+F+1o
ztM7{sB)Yk}Mk3)(5eU5u00wn?7{9P3kf$mFQ7BpP!Wi%u))oqgCRd<LATKfAmzTw;
zu*JqgOH^+QfxOxjz=95Lkw7@kmeL-o5627LOc-Ldoj_;~Y>ss;R6bN)!RT<I=S>T}
z2@t(yHA^7oF_rRH;M*ytM0W8@kURo}+r5)ObXdz9!J(GPCJ}$9>^Vpt$ha3p{a!20
zL~quSht4z68G^+)-rNOpNF>}7xlE%aG>b6xqoWoU&Z|Tnlje!AN2?$8dSj`n){!02
z9U~B!4}w>Ly3|c(p^X^wHWLVZ=iLNqyUd>sa@$572&-aWfL9h#s$%;D3d|Y?wS_>Y
zHff{aZ|+(GDc2z{yELpmI$kOCU^{_W`nCOIH3U{=0-+l{<i%{_Rk3|0am_ALi9pDr
zytz^UgBE4cm^(g#6*sZA6Ns*v4y*f)2dVafd@tow#R9pW_^8IqD6Eq<P9(%0*72uL
z$CSp$h6%#DJZxd@h5R7@lS5Jl$xbAc;O^5?8X)y%8|B>nmhbm_JuyI-2l9DmN|~hZ
z^+VtlCDiP&Ux_0&vuzWB5YnEBPu#;A5a%_{Qv+UYUk(3S7ww^04p7q=EEL8j$$ATc
zC?Kync~DaVPy$(G7S?kfvOEox4=OF7sYOY~e{ClaOTSa|(eu#JUL^wIV!lYbHfces
zUz26*YPUx$k|mHh#DlOm7boG=4wpg~N7dJT#H|G4m4}5)GlKi_;UND^B<$RDgg<({
zK2IcMDU;^ec~Z*+#S}|Ekjwpaf$SrJTz+I8x{czcPpt71jwD1B7S2S+zNg=ee(}Ws
znczH-T{{!qscH7Y5{Y6tRs{xK;y-E|34}BQs7!;Ka2;Ve%Sw1c4qzpL5DjP69?E`o
zhEM<mGY|6I>JQrpgnd}ii@cQY&jevYAo~7JsC~?%qN)jm86w6WGd$<Khd>7WnmW@5
zI;KKzP$UotYn+&-Wro^+;)8TyS6NF~ut1!bbeCzK-`q>8C7c~`wm1XjKVG|h7lD+A
zwYC|v?hkd{D|{fGt5NUfx*tXTrr$>%$XT<EEv#d)LTG^?nJ_J<`0;R{)E-GrAN+<b
zEJo#>iw}erNE;qA+4k&<@fyJb5g*8C_YRcmn*0YBu|YF$CT$N-8KS>PgP_A31hUYa
z?5>&tOL&`Sp4a84)dWH`42pEtg#uZ8=@c4yiAKRz0{KeyABP!6&ywEH!`d1kn<^Mi
zQ3+&)t7iOAcceD#VJ+=vnPsz`KvtN3xtzV!Lgay{w!^8j#4WK+2_#<vPn*beFP?*C
z{3~IWnSDy7Omq-A;aqQSkk=LnpV`92q57JczLh|9SXYNNW|T{{4^li(O5%7gMx&db
z#{vO3(w1?&sB(0Aj%fb|Yhl@HSo>KCYd;CZ<`8~l9B*<Wp#)c859<u)fxr#Y@|%8d
z99>=EM8eL_5eWCNErU?Pr(*QcOYjDP#L5~A^$fFC6Xjv?VFQ5>4Q&+YD(~Z!G$QJ4
zi^96k)YTFq6xYcJB*>2y46J&V56ZR%H+_N<>Bd_L1ns%*N+9Nzy5&+Plp!b6ChEx*
z$>OZNP@j^{!fU9J>7;(|cu<@+u#aH9jX*XI8)iDy4!)4Gd@oM)>(OWwjU&{;l7IA}
zpZs?AiM6oKnFf*^2a+ERv6nko`$!;1Kd9d;4dTUj*~X$1y)I7ldR_ip<i(@s`#(=;
zf!y4QS^Ht9WJ(0k9ECZu4rZ}7JP72tsNCd$ZrrMnn?>Fl7Y@Uq^)YujnC;8av~OS)
zV4qv|u^MG>w>rM(dU}XQhT>lL0qPqK(AoJAxY>xoeYZR1jJQ~)x(_nVovIjvIVR1f
z(g|0#!wUCcb&GKUl@F7fS=eQHLMyZ~5}-%AOkS}mSYQQ2&854@KH-|UaXNb@UeaK1
z&M{hZ+I89z7aoCjWV4k8^r;$FJyX1FeJILX5{cQDYFJm-H<O;<i{Jr4ZrJHbTi!5F
zkB{r0&KbDbFsbMV3uJ%fZ}!e+$8j47!m&e2qJAQTjzEY8MG}DwMMiFOOMqbZu-OO5
z`#(!qEonUousLM_W7wZ%d9DKwRMYJ4sw*909Rh-vAkH+TheSd}epoP3vu=%k4sgO6
zpQ{4->BF2nkbwN({D`Iu^DTb*ITbI=w<B#wW9He~g}ks}tg2+$A(4=}=-VR$$KRRn
z5#}f$*Zsf}7ZA7=LJWV%f_Bkc)u{wF(P4*W{XE~tr)#4B`eBSH-bFw#Ai#M^-{d!R
zrkHOZVUd8W-oEOofq<w^$r3$~s;~OK5CHmdI?lp56FnEM`@|i6?bJly=Xm!Xh-~{3
zZS<*udaTaI*++A^%}+JP`_uOyCe7h}1mvfmxdizJXo+x`)PHB9$9W7f#;{J4)=D)>
zRZ?{l98*|F9`=dy(9=hTZtgh>$Ub=Y#>oT<l3s`d5xs<b;LNj0V2vnRAMT@hE-x%h
zIenCWA>Tnjzz^IS{x(0cxc;Y|`_0_%bFemOZB>(K$qP$XRaFaF7ee470Xdx9ITJk-
zuIJs%<n1OprmzZFnIr*0A|WCPDbiM39fN<eKq<_KewYH}yB~QBh<Pe5SOl4a_t9zH
zAklUrJKnBB`BB&XAd0<<4(R|d>HI3k5+p+bIX#R_jx`V(<n0SFzz(ZzmFl{tR2oxQ
z%d&VM?@2+Pst59s9=adtcVRvPm*nRjXR}7{7K=#RsiQ^0wv}?IMN#8<0Reft50GaG
zlB0k;8tA7(K~RCz{aGF@kWO|JLeaHz*2gdh^K2E!FCWK%BK<DB3e7wbmrJ~lF+}TE
ztF@y{^duqh!b;S#M)|RaqCc!mIMOy39v$@ak&BN$dR<q7{5D(4L|2n`TDvvGV9faW
zcKho)hG9NFsQ?-8vzeoJ?iGhv3SK617Z6cn6+Hn9q|=)rEEbR~pga(8rF*eQq8CF^
zS6DPfB4JBoyvjAsIls=qnCG)HVHoCJxQv(2#)LImOHB~6GU>`*wzAr$u*klfPA>>r
z4PZO>Ot>B$^sfRU3S^@1cJ8uQrG$Xc1o#qkoaZ=Ro-0s_VVL*gX0Qihg7tc_jnj>q
zno?1q6vct`#gPZ{@G?1_vs^{bP(ZH#jzr&P^2AWcUMBwRR04Lqy0LCryqjlZSU?yi
z6X1nqaDo-r31++v9te2%l@vpDuC^(xGk6$b@ex)YT<I(SdZTeXk?4oMlIVc6s)T%?
z2612PvgLtXo~wz@Fw8pv0lD3S_aSJj?bJ-uM0Qx{frxsLL;qML+-7pJwd2iEKu!<+
zxTY7tK;9p9Ed;zw$`V5t6HGX*b<WcemKn#VS|nr`=AFPI;dnRm8WyJ$jcSl5RrXSz
zt4g9@y7$nxMRcw}GUL#XqXlvniM<CR+qPAECOR5u%Npl6nhQ74872=ddnS5>mm&mY
zQb4vXndQ+U;U*vHdbB{;3o8q*_@d9?@N*XhK8B<q5^-Z~S*or{Oxh;>@Qe4Ox$zMe
z!{ov3GG0a#<`CSX;lv98fk`)-q%b`i1Sp^(*V7>(Stf#HC?Lls`ePMc(3J$Fl0!B8
zi7k*MAQ;1PZdv^662=&w%nOTQn0Er3==XV^eOMQ36*kdZEQ0j=81Em00FN17Xva&2
z@{y;2Jch6yyCCSK*F{wwJrJ;YDX!MftC?@lmIuNx%=<ug?$Lx0oO}J!=n^wna5$21
zQ^X=6+>iE?3j$9SwsX&f^Z8$Pin}QRdLW5bm8!xKmQI&*+WMp)VZ7Z~Ko}+mF6Q>v
zNP8fwYrZr}tFkM%DXdz`z8?PAhp-Y~$2qfXfn+KmZx6B3=l0hyz-Y6Ow27{^Ci<k2
zNEib)(G6E143h<06W!wk%V~=tET!7Am9ibAsIf98!1<vcdBzc*vJ{Z(>8L**1qc$Q
z`dZ4f6te9o(Y8}sO>T1Q0{ysi1;Q|ykOpSP5Y6JfbD9h(lq$<omDm%jr7VUsJu)zc
zb)<nL*v>r*@Fl+uMc>A-(yK4d6-v}U%NF(O)HKdo>wJjw3^(^@vU6t`=DoPxZpMtW
zkF*EkrZ1}LV5TTrNu1F{FAn`U?RipJdYNP>AaAFzjvC}#P!nB1K>7}WgmRj;IbP>O
z2xA!UH=e>`m>js=ZebjQ_jb`*Pg66M9SV>ZUDA4}`)w0l>;*_7OC!b8DNg}8S|10Z
zpqHrox~?P{VyUjAJrM1ji*YfD%Z2US872otY@(YOBl1A3!x0uTg37j~F-?i5#r8fQ
zWV%O~rGT8y^m;qUi@$|INI_<bQYE?uV3E*yzZe8cjo&d0^YOtL?`USfhIP@+)O6^9
zs4WkqmW3F|%l(+)-IvhwEI~39kTY>QZscSFidxbfZz~neeNU7~xHuc<FplHpsUmF|
zhIuEjNI06LAgf<LHF|=EluAii!pfu<qJV->`}ENS;R+-lNIDLR!w;(vbzRjx#(1%J
zicNH9-4gsd`_XU{onbQJf-|gW<`~z-Zh?fIO6u{agq31l*M%TRLLPRCJcX47*Q1C2
z&pBQ(AnX`sisWUYC=Wzis}YJmn$K*e$S`?uxqZeS;cWflnr2FuN^~mehrl7$Fi`sg
z0zxO?8Mo1M6cDO5H%?T5(4WG!=<8lqRo^0eOsWoJyv{DK(feQm2TCzaCZzh~vl-_Y
z!?HBCNtEcKm#w78ARJf#8sj~jc)0?}h3ljKz`GzjMJhsiQS}(IP~?WyOpUhg(;DNv
zM02|v77&KXfy-@+v<-3n<gC*w(N<+uwkSZVZH%`d1tCs}7Z#9wAmw;akh%X*7qzHl
zqEaQ~gUl2cxB5?EG-l)qgkiD(@uQ;&-owsaPfAT)hduPRr8p2#3}jyMhywvxy18d5
zAS55S9|&;%qYxGJqwNqU1tYA<rEBpn20z{n3kbtx!SA=*c*i2h3M&&eHQiLoO+cg+
zQq&|MP!QsjY5(JN%2Yr|KlUFA-1nipK}xKmw_Qo0=rqQQM5)=BalG&z2*YH-<u;}+
zdYtXLXiQ;Ea8vB65(UU0g@m0uSz)~y!^$&HDn|jqS4}tikr3qQPJy;U%1&Wz2)Hl$
zllCyf8t<G)$S`^E`vr;Ueu>svq&hV4!crX)2@^u}137q;9q)-0<b|Fm=_5Dt6Ofnd
z*VUgL)S{v|*9D5xO3JQO+Z?Z+Cc7+t_2xd_FYJZIFj;^-LKEZc*JZVOLO(RAhw6J-
z)s^h)Y7pRPf*cV;Y^InEBq5JQLUOek>bi!2R4{YL;*i#peszoW^Bmx1!beyPlLNn_
zhrXKG`_<WInl?9gS<)1*sO!Ejr~)DRc-Sev@Dx@KY+v|s-_1;*Aia<htEMfiHyhPJ
zKvuV|>uiECw>wuL43h(w+kG?!0<yT*snNPqEp^e!YPGJ>{18VVA#utzQz}CN!5+xJ
z?G%e*_rj`W)yh&T$^%i_qKEDm7`hui!eW>#7~!RO4@)3F_o->hQpt2BDDk1%ym-G3
z;n15i(evQtt(_w65$<-1eX(bvm!(RSjn){$T7$(HR_dX%fG|uBz)Ue3GY7jmXBE2W
zK(<&#?<=`y+P>ZYU@Mb+IGlJ71TJwELRM9UOmv0t7z&iKZdqdV^Eh94k??Q!&c3&C
zA_(Jc;<deNZ{2Qcmfh6eHOP^11b=WnUIbD_g*ZL{-~Y3)Gmc|(5MCst3+((-1@$Gl
z&~Sd3otft$h&Tv~ghykXcOK?=!44}cV79-+Cb|$W8`O_^5d;r3BHbj6Qa}Qy`}HDW
zEs_eFAWWhc7M}#f4%Rw-)CUp}f`|jmlQO+?-PqWcPnqbP%c{&-o(k9lNvA2^Sv>Gq
z{5ifU-pB<6Nl!IM`XVrHtdi)2RdA&mrG}v!d#}ww(-am#M8OUNL3H1F$OCF|6NF_9
z7YX5*LI|`|OarqMFE!C4VyQonWTF=5JP;=N6bSNjV{PZ0*6w&XPz6E|F%YsFj#_)?
z?Pyig7A?<Y7GMeL2TSS%z&YNtbi~;NiBLfHaJL%bo#Lcmmr&%nfC_{MihwFwYezTQ
zUiZcrsz3-L2EK<(Tiy4g^|n!vXe(vL7;d6N`5|7Q`bhBV0Rpmzt4X+{DXd7C=I&<w
zIAz+_K}T|ygB6yPyZ~C&G=uBB*L_ccQUnnPQzp80qZ^t=HQ;1Y!eoD0GE|T%O#+w(
z61$yZd;;=}_h%z4IL5?V0#m$bhgE``Nx@sClvUP`o%6=f5f(v2g4vmaHqZmH)+!7o
zlpOrrs|q?GEUiI5<|C}dPI149u8kg_fCNr^qe}&Xq*cOz3KG#XS%3qlvTF3sb=n-M
z0wIVvfF8Qhz5BuWMonglK|Z8pm<Pg`NRzn)N#`}fXKJEH!v1#cz>GbR1iegBk+MLJ
z)oQ_8Y=OKEUFUmk44EksL>%mPILPaqcdynqMF8e_nS?`%JQ1Q!fOR5BoLeAK3J9>;
z{efl}DoBc6iZv^%EP#FV*0!(B&^fQQHs)|c5XAo<Y=Ly0cbytr)$pQ#)i5wq#K<{O
z&xaO)wVh&oCs<Jm$nuWQUW$00Sqm{0s2S%a53~vnK)nMeETfH~BP@c5fv}1GlkR)y
zfiz&}&f5abcx9PaEU#G#3WB4X8(>~WCoimM*vx}i*hHU7kXod59w-?vIV&&^q-ch*
zb6wwQeWXM}f{22{PVcn#ox@1N77wsW$;x*u2fOaMiJqLwk3C*Z;&j7`Qb48=EV!S|
z6w_&uFwJvzO0>mQ^u{)-ajx_I(U6r1LBzoh?RZ_^b)$k%hl0ZymXxw$0U`1_P4M7i
zHOKo*0ul+&=iSi_f|C>wD76u2r&yvLuWUK|rvnv;@1g$CBp?J41v>}?>2*I2Sb-?T
zc~L?e<YZ)mO^_5?AZt6tJuMQ(0Q9+5iRe=sEIrw|*9_rVpeR(U?BHGJd~Xb8q7y_M
z><$O*b>F#h9AFOwD-c;q$#PbKouW9I@rK(T#N!lkN}1?Uurxp>(y1F(Z)!+H#|k8q
z9JYrVYi;9P-<jU*s0Tt2QGk0O$KG{*c*P^EmIqi?l`PLiCF(lp$H`7{bKVM|K&d#`
zWAU*>q6bcP?m5EVp`Cld3-ohu+~9R*jvbBh5=0ch7KrJ+x8u;X(;^|SO2`8dY0gA0
zrVQ-a%w(}sjIRWVP(V)1L%djlz-=QEfrH+%<bk4X73hbDb)pg0KuACcA_l-r@o4(a
zb%Vt*-i%A=faE3iKoW*litl-0!97(V5wO9J#mWTq1E?xdr(((j!6_^Sp|;IvJ?;@6
zkJJMph#2_(urubUowL?L38En4n(?eGD^^uZoZZ|vo7n9XBNULceB90wGR2F%h$P2F
zLg;~%lDCCwtQ`i|Ij#F0d0`Pm9E2gPqc&aN`2m~gif0_owI$1In8K>7O?ominR_63
zC{7hf6zp;2?zed$>13t|c8cXY*aIoh%0v~7SI+g?9E~9_EP{xET^PC4UFY1Wn%AO*
z9*Bf<iOJ5LvARw{K;}J=*-kOW8YD&m32fGTASW+H_-9@-R+bE`H``XJ=I3VcUDxaW
zXs7}qh&VtmMX+<X<7jQ8TFxcsyp$D75|#*5k6A(Dwo{B!Kqfo)#Y_<eBuN>1DOOd<
znasFsF%^CI!8@-Z6rH@V2qFs1FUIty8@#ha(X@q<TtX;1PGE&Qfme(TPVvqMSd@t#
z3;XjLA&{Q!6jLzcg%TB=OrQq>dmyjl*mZq>3}YEIg+&lC5KbHP(fAH}AgXOzIL`(F
zDIp6a2_H53=Y_j9F`i(>C?NA1;cS40V_0~G#c}~=SQUhi6<J%T)+*&Y*L!_52O8rg
zh$uMh%)y(!cYajXPMaWE$uf*Yhe+GW&pln5AOWgCVgY4i;&!S(P(e~Kx=Hf<oy<5o
znY2X#Q&`sZ{umU5B5esG3c$+5Xzgt`3<@p;EzgjW2{1FM=Qydr%1)64BntL>xL=G+
zuniJEUQ&@%um@7|jF$z6JrI}!2RnCTsEJMxkpSn_N3C7gd8=$21f=C0t_o<TSPM~u
z`_UpG$So}r#=(A?z*_9wlSxDBnk9KIz|Ng99+0q!{=?XH-uL==*wGOdLBxPDJEQg3
zJ8xAp<$*{EyXb+O<wB(A3S`y(pg^fe*oTj0jqnr*0@MlgK+5uzXseVe)G#>bH3kyW
z9tc6i!0rGAi0;4)3nS56F5!|Os(i9@e?k3#%f@OAgvNN|U_UL5{&tZtP>H+>H&$Z(
zA!VV80<28j2vb-+x$zQ29Do~dueBdt^FyNwRba?<j+yAmMzFe0fVGz*iU*k~M!_r|
zC?lvK*h3Gu9EY$f^ulU6^gx<sZ~@)-bc96^aR8a<M(eKg<CKYB$WnrxdnIrV3n#Fq
z?&$`>vn#4V;$Xc8a*L6+2~xormPm4j)v7EC6=)jkz3Z`y{?pCX@Xf=-o42PgJU%=;
z{=3irbaTZ#{=L`t^!2xoHy@txYOmpC{2@;d58vDnzjNc&kVxppv1uDMS(!*SIho`_
zu=?BtS#6=m*h7y|K*GEIeBMSsuMsAjI!*F~306T1B$F8`$nZM2uG7#2xuy!_emnEg
z1AgIdyM6d~pZ~L)E9POly}S8qKHqM?yZP|on{%Z+ZnyV0#QR5B#`N0v-g!HjDYnx!
zfx#l7Na`9w=oSIlAk;*UgXhiK%OpL;Nr9bv%4(LdcO^&tXu;6kT4g)u^_6*H-ES8@
zCjq&{SKIBUHy@r4BOq_@?;roUfZX4|xrrWVq8kJ9F*HTdU<Cr3gtBCSsOlt{L(!2)
z&#!Ky6p%U7b|FFPDoMc6y_7s-k{4XHjkOBR6phh`Yg#0P3q0`l;iK*LTN029y#44Z
z{`dNW2nha;{<(l`x1ZcZ&(4^`u?IiiK@GN1sx2}eZjv#<(uAcio9P7Wy-cY+RUlD-
zRp)w)7fX;@z!o7BtYmYdRIBVTc1_<OjlQZ)^l*WnF91P7o=8A0aTT2$5|IBGVUh5t
zk9`kjij4(VykgozufeM#nJSRYvIue;rw`WcZKMJc*v#NE=_wB+Ww-|-nUu09a1q1~
zesoT2eK1#cgtfXleMtgx)sTSv$Jm82EaQWK3=k;Q;vBE!oMnR5EU%O5<)k0swhZz{
znMoL-fb8cAWXVKFGpt&O1e^-0l9fCwWGhwMsG+f4ub}|BQUQ5_zw+yA)ZG{N_YaTj
zIh*_Yd$^Qb`2O_yB>{Q53y*&Dv^o|FKmNttpN;k4_y3a5;CbF&_~!D`9-e;p<Zn+G
z$K~a}S-<?tFKap8zx=r6*R}A3Kl(R*@b0(&>QDIj^yXZ6HJ5)I_yX_V`vN@X@*DT`
z2H&f-fLwl8@ag|TKt97qUHEm*fA-&dA1?nOe&xD`{(^k$v>AHuo1rZlRe+O;%vfFt
z?4s9ck}h6Yt5ozo?SaI=X$NH40+|#<Kzl3~Rmr&wH?E3CwZrJW^G5Hktp{>5^IHMA
z`}ovaKm8SbJbnJr7pDQ;<@@h_{)Ync<EPW3zn=fD&rb)Jl`paQLFO0m^!fSw3*j+O
ztG@Ol{;{i{TP|bEb?;a9u5PJyBL=r84gWZ{F^&^9P;g*qNHT#8DGcRw+Uc|xz35G!
zpzr?>l|EaR;>G=$>4m9L&yXg&tJP`~ecqK;JMCRLs#^h>m1dKm61q)G@wtO}uUFaN
z2d<HbR@}F>alDr8o{i!1D?*Gf%8#UJO|Owi{Y^QhG%?cRy#k1KqH|)k@hG|s62lDR
zzz0xR!^A;O2#OX$+98BB;|KdK0J)Mzp*KV&RSEjGW5p+UrkPjko4ooGq~3&qnS1W_
zTDIV&fSJ+V<&b{)liQfHxf6iw5)C+?`&R@bl1=f`Clkl}kqfIc^r`rd=&V?V@|WTJ
z{=v>3g<&1-k`LsVRv?E2ATcdsXS9|bwd+oF10YZIYgGXGjed*wtErkE{=H7Kdoh4X
z&gCmEcWBM;r+EMP27r7EcHDa9ls&OScP{T`CSo>`?$BVV+yXUH3Beun$x#pHt`R_9
zdNs@Pt4Ncg66Dk2YClYAF9q93wJ^O$%v!CTK@clH1`IKNg`{RgzFr~qI)`w=Qv1l)
z5X0{T@ek0dYD2&{wbPhTL0VSHF;BILCUP%UbOjJo1pX@9lv_s)0OHLNNL8YJV`hvr
z3KmdHFVKZ@eZs&j>$MO-Zf>qe*B6(w8E;|5hZIu75OQ?H$3Te6yQE+{$dFKGq^^cx
zbr3+#imggKGVlrn=RlYSxN&T6aLmiq<3pnT@r1IuQ#|;PE=6xCfMocI0zhDC?(sVB
z6~EzUf)`gl_ytAnhq62@@Z>&p^ct!uH30H$`NW%KrL9Z3I=wE*kU3NfwtyimyNl3W
zMHy-XXGB`?LA_-IfaLUqPGM#ul}huNQW+|}ihN}GvZ5ceAW{HHsra$fLWn+WJ0-^z
z15`voA;wDrjZ|Z>dR=3n;FuSh<t`wtOvR>`D}bmpI{4R88!kdc2oLtumR`#TdHO&F
z#zb>>I&qnbPIKjgASCWV5EQGv&!X)$bc`OsF1G;k6j0ZHP@@D7COtbxAW_MEgx1pc
zv+5JT@PMTtgp$R`8hY{+4`wvY?b^a(C;EsMAd|0WKaS%`%<#b(^7==#OF{q0iC!3u
zYWJ$6_YrmyK#0@@f|Ka*p#w_}4vH{d0uXkhPsTsSvrA6Ldv`Kw)0MUrfIMcjqay|r
zwkfG<Jm57fEqt+BAX8F4Y%ZPHb0R=OSO<_qQ6(!FyQ`A@8r8A-QL_&wwmY+*^eV>l
zrNE)5>S;W8ZvzNSkrJdyDrrzDtv;FKgNJH33t=0vEmyIqh2KtLLB-ghDa3H1lE}`$
zgBd8KhQ6^ZOYynwL!0{2SZ(AiHUK0PW;uplDLN~lofZaVn@})OX4X-evp$eWca$I-
zdepCp?*kE-vvXttL`TMrA@7T;_-#l8d=9w<(-&_l9?aTzO8<uMM5pvcbOJ2?Vaxz>
zNXblgkB<pGzTzbajvm8id@87$7ovaJNdP&kJRoO45Zp*ebV{k*nFf7Ys&W)BZ(;o~
zAt(C9aKtwfwkR8KNSg~F>;+T+62Mdx1jA-%j$g7oaqGIltP<(~qV`yzLTSbJN|zQZ
zu@Bmv?n>xhR|GMmZQn`Q03d7cSb3uSs1mr@9`IKOCIDi^dJJ8?ooE1dZ&ed{Dk`ud
zdU^%RO!t9+nWhg5AXb{!rAVWL522IPsu3%Yq^j|X8duvBy;4IQ&=@U%WLgyBGpqm1
z2N0FS&XEF$85y7jPZx$CKFJCuX;4a$5?>vv>bI4L^iK#u?uK*%>~=inT#Dy(4uldM
z9dV*nN`&<#dC`$d(I5z0l<uWc>?DAI<Vp~1V-}g2Pj?P>$U#O+kR#4paCnXjr6`%=
z?CWdFtakT%yH+4VS5CKV=H{0?7tgg@BWG3wyOz<0wp3AsP*Y_91eV8`jTec`A$AFw
z$*kI#0KP>0R}GWy`>Wv+jvK`)Fn$w2P}5S19_{n%V#_(7>!6v*qX38>1ZDe&L@M)Z
zO$Ae}YHYUED;9&W$xXVmix*ECt*K~$=K!mX1j`H4JgiML5VIkS*O{UOobC7@8URFf
ztCOK`?7V6R8dV+^tv6IK#aId)*+5tJfo0l?Q~__@i9Q+uK_-*9Nav13CP$nI>)-$Y
zf^>@82MIq?nRJ87nC&w;Nm%41IK}oR<x|`xq7?{7VG+${mtS)nZ`+*c3((T3T>(5y
zg>u+X4W)U(kN1&1quFx_8&|fzZ#{ck#kq~bB0qel&yiRizyRk}12s&jCwuuzdO=&`
zxP22qP)A8ad$iJOTl{bISs7p>0D>KPC9j<wwX<jvSuretSiRD#O0Bxf#pDaT3VG5@
zxu$9(w-^JyMm<utsZBHtbOV3{+p}_I_1_%Et92BYJ$doSz#Y6=2)qK<2TWN&>PW#M
z^%d_5{kD%zZjcP?g0t~X;`os07*6y7A0_M`oDOgaHeUzwv4zz^5+}O2(XpYqb6W0U
z4Spdf2o4S%p3@5CYrc<gIHJIeb|q6Z?<{~=3d$&}Y=dwiG)X?AC`Y{I#@2olKrEF(
zG}BGNE>oL}4GP#sCD?mw7@gn@0ztRC`g;I@O|rucxQ-!WBaidYh5`tBu#|7Na|X+7
zf6V~m>D31i49Ku*o;vWgrOg1+Jke1zfULLcW;Ol$0OG@%)u3$+!D`?Ijo~l#oXS+K
z(5OCP?FEpV5gkLnxcK^Z!kJ8BI*g7u-n~BkN68dnF^X&GszYVnJdNH#06C*%yv3=}
zasg82)#OzFI|qA%0q}$V#hl6{zMahoK(2=;ZMu=L5kT@l32tUFyTL}9B+CtgO%qs5
zTi<yA^4XL=7Jlr~F<U<4Kf(TB#|STxX^?Eo7YfdJ0OI~3fP@}^tgQIDDF=_OS%Fvp
z0q;L-JNuw*C2j@~tJhT%fXv@sf%tG{`OX^w<gX^$H35jI-p<Ol{@p(W5Z4GG-U=i`
z3wmH!pk_{05>)XfthE3_VOT>>=YBEcV<2%{Tu8{t6!!-GK5iu3@}ZacSwAk6>JDib
zRskWL%7l-i9~=w@`?x{>{E&Shvsrl(y;T=VH2?^n^DV8_j@c$Kdzo%c`26dShhEH5
zhBBBk{_|pe2tJ`6o3zC4`YVHG0Pzj2;>1Sz*u64%#tnc(b+J}{JG;B2ax?<STICHD
zK$>)?{vfSsrFp42ME)K?uIdwK-A|^eF5Q~OA2a}nog?3AWxYnG1N5doj~sfRQ~d}G
zz|>HS0c12Jzvl({KxXkFCsSmLz`-?r-sk@G>GTu3(2MJ^K_3SRyF}$(QV8FcAS?h#
zA8wF6iuXR|8>P<ACltwhadCY?Hzc2o+7BSsDeh`s^2|2DTL+J)*7pEpqj+R_*dQ-h
z3fZD@IH%{6)DzIr<0Il9P88@CO#qS^X);s-A3rF{0jLB(YGNgNV%;Mwr>ugS0L1p(
z-~+KHeqjM5G153!NR!yGxMl!po@h9u>=>;`w#e0Emlq8H;?0qb!b(i*#CD))O}_J>
zbeoYrGH?ac_W&TH5$*#a8j}y?JSK<eF~wl*?^3Q+%B9#ZS0Dr-3LYJGgLDu;&VV2Q
zkTRKKal7#;r@|r#IU;A-E_p!CWAcH-<Jl#J@$!v?ZMqY^0YF@?#{oB4pg(6+pe9e7
zJTYd@)?cL2Hh`ebb9H)pk-%r-s>2LfwJ^Yrk=k|8Pr^<&eO6)@6KSk?flrFECIER*
zX`<4>WB9Oq5(ShQW|4{ox$_0#rnYlvXD~|MMX;nz0HOwb-QWWW7$;Qqk?BO?>)TYN
zQEmJ^fNW1(78IbcuG$b+oqJmpq!fdvJ%Y0Z5Ow}LE7g|#Q!T*+V8ly3WuFR=V+RW?
z=cOotH({#ZHXTL3p`ZJZRv=$r@_j(@AtT7{et-X%JRs~S#fAm@(JfI-&c_O*3v_m7
z4ibI|KUm>JCoc%{DIOJJSm*S;iQ`*326B5jyc@PPnWD8TIL8GO=$<9RNv1iY@P3s@
z1V4@s;yn<d?%6Jbe(^qeVg72ve-bA;cDqw)8nA0cGHs-u{nyhCR!p?bH0ekafVfno
zdCgG?d=?I6zgBiI6QEK6c|@WXBi2SZIgATr<wqB3(hMM~*IWU_*PW`q-ic^2)lsN6
zngPU4^vX^&&LBo25^+@ss}*spOnQ7u>i{wZhMGCT@ycwgh8<Z@&dgHq1LC3gyaF&p
zT;YF3CbvPqs^6D39VnzzAOs-S*Aq(T9*@rti*)YC6os`%3lQ8$SX^VOK9G*yXxl{q
zA=+Mnl&4Bh2Nd6pFs$AFJ`NJb6N<tbUtV5w7}oF|tUzEI(nS<;vbz^~zYL-U*#I<I
z(EI0Ly+p!|;(d?nr?6^u07>}cFp8e@qPoke_BvQ*z573US>=V*J&h%&I$TCn0cV{p
z+2eF>C1Ogq0n34ovL*mQ2yzPMQpu$}9B!u8eGQ;e01>ekMl9QIzNJ^K2<z7bAkb?R
zL>qc(0FWewv=P<(Tsy>Wr7_xghBlf2q+y~{IRzd;^(s0Po-J126h#?CL6MGs1KGlw
z2GUK&A9-`6AqY9X6&rw$&WwCdG}O(B$XM3+6Q=rI<0OAuXvBBg4u_Yt`7nt&ju%c*
z_JQp6iN2C#iex>?_$$10@g!jv0i<w#5CK4Nl92vUY~BGaQ2A2y<Nhw=2QHMF&@qrp
zK1euv2T@q`3!V2$`t0P95EMp56Dh~<*S^n^x(`H~tEDL4-#=YdmNl~vs7ncvO`nuo
z70Fw5;k<4`5i4i}5cCcTQ3*MfyqIC9U?KqGi<M-xcE0@J-vl74n1==@x~Vc3F`AU*
zs!?R_i+=_ncH&%#oYLRD*<FJyUXjZ7xgLe(P!jrcWTUWjBI@c;6qu{yL?0dOgsFZp
ztTr7<zqvs=UW(+so&3NnkaG&+<%_Nddz{XF?||(ElJVL*ZM%4mu$usa`Q}&94i=+)
z9E5f_iH-(?;uy#|A4VS&fLvUU?ru)nbP_!X!&;DQ7(SLoS1B2aO&}#vMsKr#ugEUm
za}e)zp&nAy&w@ICC(XI~{HdzFqPJAI4kNvL+cZw*D`qFn4ar8AFQ#+^F_Pjc?+5U&
zQ4+0sS_!na!vU>P26E7fCzh{<2KgaI!)@Ww3i4wrpoGNg&Z-__G<M=^Lnl-CI;gmD
zqOEp%tI%mTS+;O~k;+Dc6V|3AE14#?2kZC7*Fe7&=6jMT+AHHVG~y{<^^5lHS%4s&
z`|xr|Cqd%z5962s<gm!5IOr4Y(UrD12BPOcU{F4yu)0E@B$bIe(F-34U02Bnf@2^^
zrWns|Z#j&2c=vOwd?4?T=vlfwo7^AtFX&xF-u|cb-3htTaVI*RBs|1f^!;7>um4Mb
zP+V!dQ@atp*wyIXeNtTnkTYypDgi<0&uN*<<miYUW&n_LzEb~!;&?Axb|c|Cr1bx9
zce+6x0FaX#_M%^3(oytr9McvSE+pJ1(=a&L+rfPxOl&&TiQdh#=p6(QP=z6g!2*Ju
z(iej_IQ#uw+VQ0COuSD{^zkh_(MO}ZR^12k{^)((V*WuL2N1f_7P+u)$pY||ww%p<
zmjI;CNxP9uk<14BPP-n4)kOfo4wfGN!8d_uaKL#?`h%lBEkKTsIhkV2N72Xh9CA0h
zYgH<f_eXpP`Gfvs?`(Rlgn=+DghER}k~XAiZ%WGof)IBuO^hz|5BUFoi+2X__>t(s
zjXLw(b3gXyhWE_8Gw=Kl5D*Z&2eP<5?>XWSme!5xmFNf2LLP55mem!8bw5d<u|YA=
zouYu8F}%ekBQ<`3BQ{jvfI#MdBNQH#(#C91fjH;A{hRKA{Bykgn}%!{7LZ?JJ(%cu
z346peMQma<3NG4;L5$BPI(Q&w4~sX^sqyrtEZ$s`SXZ2Tc`Xvw0_OC3=wWHy8*PG#
z+dii~d*``@^#{D>0_1;zfPk#_us%ZzE5tY%-S<=9V4QmkA2G!^UIj>bayB&xIv_L!
z<a)DFKF;E!f*;QUG7J(Fq!TcN1txlo0j|op!+UOF{RyvL{Y_C748N7XStPV>$xAvt
z5Cv0M&vd<zki}cKusU{rUlaw+0)(P~+}eTMW4!2rl%o`KfO~{}gR6v7jN2a4;(Yci
z3kbuIz}nS0mvc(n7AFYBYv73>I`K?ZwdWPO@|kZWgyv0Kf&%jN$T4}krm%prY(*>2
zn^H>kz1GGUZMMA4%X07-FT+s5+VzYw3H$cJL^DmQSAB!`Kq^p>v8*e6;X?$UB}98z
z^aKR-;{iD6Xoz8y$ta|dpL&HSrL;CWn7HS8$<DKYFbomSD6C~ka|Ddi8lDMo4`irB
zEr-(r`K|z=8HGhqK+YsZe81s!-UBIXyeB0p2rB3r0m(PY=*h&mg|K9Ic*g?5FeLcA
z`YXz0k73fdh%O)stCMn&V?8`NSTM(n5Dmj3C?Ho0t9(rHmN=3(*6k=oTXhY%AdQ-!
z0txT)4r9E|eq;}XVMt(C>zvOy&FOuB78b6eE12UI5;j5Zb0DZ2EFiQ@opn%~&lm2K
z;2zu|KycUM1d6*m6qi!mp+Inl;83KvmEv9~?hXZtmg2>&NK4zB?{DVbxqoM7v+wRX
zd)}S*InO8H7nQh2J_Pwu9DIb2KhDa~ueh4A=qd0i?^g2Vp8-<jYFho&j@TE9y^_V?
zTgWnW%(gL`&~5!mpu?gtK!?eE;s2~TIC#njw$~jRORUsO79VPy{*5OcV@I(kg;XxZ
zfZUBv3#Ztt8lx$G3aZ8{`bGv+x?O4&_ODWvL&V0^v|(2ehAU%KAPj~&?;Eld4yUkX
zA@*L^n~gnEkc%k^|9Seo!0d)josW&aQTeN|E?i?hW%cEr8BT988$A?le|DOSkOV=6
zR!&y&rh;Z3=)CidC5royvRNI!ubvBn`x5x6e)dz(oOcR?6-D;R92wd4lhFaD1x~?U
zFIrS>1egQ?%9yJM3*EskGzPKN5GC$Z3qGoQQi#rj%!1qhB5J<>mv1=#Hsv4*6V%$8
zj0_3VjmO8l5yjN?AS0u_AmMr>MniQ^%(6AZ@vJXR)U+^K(AZom$k}V8L0VZ08TbC_
zoEAF|j=P*G*OA>(uNf|@Ffg-ysO6w1u^-Sgh6d=FOUN+)tuFyfRW;U{s)lQ5cCs$J
zY@)2)XLg*Cx%Y+*ASn{5Ar4~Zs=wPQ1=&AZ$B>`t@WbIrw!XTS^9B7J*a@H;TrzsC
zS4#mOeyIyM+jFAnL*(uX(JR3-*+*h?+qcNDp6@rq2)x*kzGR`eg0WP1q>wKKYyeMF
zyPxs5Q5Xh?{&tFy%Z}=_l4@G}st(8^TB1o03$lkyka{Z$D&tR&BL_4@N!AJ<St}s3
ze~9gTZE;SkGTNb+Yh=iMunv=KZiL@hEUU7~1vw#?X@x}Y>yeb>C4n^C2%k`+-w4-8
zrgxn6ySsAgE0{cM^qY;QkEbWiu#*O{1fj9UW32Hd;>>qB=V+TCkW1xDPQY?;l)Ct^
zm9Ay;`@p1}r@`&6eNh*A9Z@+0No=q#gMMxE$p9eA>K6f1n|P!q8RAa^b3tPKRv~Tq
z#p>5>`106;FMbBr-s@D`0krE2Qw_fh4WxX64fdrF5RSc11ZGr|7<opGilM&?biFQ0
zg;+%~GZSH5o0WZ}qHVnov!awVxot~1b;lig{`V9j<WdSlYy}?igT#Kk3rCg5eO)Xm
zCrdiM)i-%dA|(T4;2p`ih6P4=WnvQ&fsL&VzV0or$7*$qiBeDbUEpTmlu2>%EF8%c
z+;%TBz+^pWSxO*Yoqtlb;XST4*I+4vZIMep6hiqDyLb+Hd<%p3*o*B>A>tiMeO&i^
zugsC00J5*kJh3K>Ce}X`mvGAiPhz!I<B7W=zj+`}zKvca;Ahp&51PB}0y<t)QFSGd
z<`aJL+jUnyq1+66B&=Z~>bh}sJ@Zh?RWrC*KvvaxRVP-Cbicwl&P?<ekGCG?wc|N4
z7S_{<ZJ?$P30aaMSm?#yxHt@Xac|6xOoIJ>(Lr_36z{wImCrx;6)wk<jmB@;odJyU
z*NT<FJxFPCZ%fGMJ~L|#)huMOdWYR7=7XtO<yu7UqC{6Js7_Z`*5((lwwdww<!=wU
z*r=Bnydxzvl^cm2JqZNArgZ-k%PGnB3@+5rk&Xzdlu}b+j{9OZKh4arb06-I{io(!
zb>e1RAf85ETmF)glv6`#BOv(Y0X#RKOJUe_rAGq~FvJIttV(TW0pH6UQX;J1(pG41
zZ-4i2Wq(wsU?I0UawCd4cEf2DkVT7_y@%6sm7M%A{XT-?h8Nffw*$};{SCVH=0#;=
zVRw1<B|X2s|GI}ad+D5t9u7Gho#HcTtUtBMZk=|!-EKS2LSIzIU2w*8A$p)&nejCp
zH8VExATNO9W6fb0jNc*}Kd^<=MTZ`TsA2g-VlI&yPJ+<|o{3y$mJW%A$V%bu$`ch>
zW~QEwx$yYjw_i+i%yl$q`{AY;P}Ci256W(>D}J2=W{4CE1heg@nR=qiSa-^sqgg(&
z#*`0jv1_`+4C1(3TE9w8#Ko3XS5B^l2D_8huLi<(*I*`)fX|Ml1gfO^@bQy!EaN@j
z{7AS}%&a9+&V{z;L||*H&d)%wKiR5aR$3+qW*#mpUwL>!ck^DsRYTySp-x_xa!m!}
zsoBKf1D(N6)Ci2ypZAou>Z7Jb$S9;sBJ)dNA35$Y>;U|&HQ>b%C*`b)4KT4L?7DA6
z?%~+d<JmJRl)g1KniHvicIHDJpmN8=w={Mxn(3~8i`2u4HLfpnu?$Q`-IT9aIxl2u
z(}Ipv`9tD%(^EH@ka9!BC-guW6eNO1H_I!19EFk!GtRBo<puqbQxffeD4Rg5v4z}`
zv)ek)`0dvxR=ygnyb}Jx7VMQy)>1q_t$-6Tt6vi>{eg@u>wD2zD$6e{zCE~}T3qEP
zs<p=cSCm+AMz2LZFa+kl?&5Wq2!hvqkgCXGAyNdv*K27h^{<mqrUdV#P|k4;_DL12
z8n(subd4p9H`amY7MqKq6t-)VNV#Euim1X1{>rVgNCRtBIkO%w7-KhykZj*2OgnNP
z+3tbV1Y=*3y~cS3LLS7+s<JSuy6Z(;c?qpR$QXY!Qj<pZtoe(-YQLb2yAHsaQ9nle
z3yLA8o`baP+37*5#JM065AJ?F6vc@)910&#s6bvE%H$wZV>hihMG*&!K%_9a*@{NV
zHdSo)wq4?=DM~?4$7u{=XM!)6sf7ky)x|f0<Z15&uBN6}LWpaZWG7{UGd~zCpAdIc
z<ff|}8b2ZpO^_pe9AFMgpk8S--D1+LZHSR!HWXeK(#AMN8b?%f=d(Ku{V4-p9$OK<
zd@4Z|2@H<MCnLh@U6NMFN#getM%LF1l)Xp$k6kgygY}NoX~PQRgQ02`EUsglwD-vP
zKY?{BeMgjjBAMJ<W#-c$7>hXQ?j^Ag4lwU%i((ro?KAHu%eFwUwFMu&E%Q{4(;Jjk
zjow*QnWy;UiaMBcY;v9LsP+mpDbHK+?&OrHw^S0mCEj=LodgCCAzzV@IXU*42-R+*
zmB0ssaY8+<PJRC>T*8M9GsyT0c+MA(QwI1HZM~YxxF1Lc&D3rl#YJ^X$gJoKmRVvb
zX`^vQrZr#vo;4Y9nU=KZ)(K1hduoS-MqQGjmT=~T97@BY@F+@bOg2kB1QG9-GP_Eo
z*Zs-61Z>1k;Wwmm)%LH0phC<<q^BfTS69`H%lX6<DlOO7u02PVkJs5oz?)g7J{SU-
z*gDVMv6dYfSldnE216J03;g8}QRwD9MGjhc)c?-*=g_)CzOQ|o6UpSWwHihSLlBo*
z*<<{D3z!qU$QCQT1pe$~m8A`qq*tv8%C%c9(9gsmD!3&yGxmEj#XCYKCO+g-II_UZ
zNF@J54Ozl%K6%YR`v2p)X8td(i=(3dKU~*`+vS+sYvc(Z*fcio)`OdY(bw=nc(gO*
z+k`qHsj@GlgvsjvXkF;4*JOq~Bz;%tpV3r9aBH)V^au=6@eSwKgU|I;6HUG%VO?I~
z4v<)r!+rKN#Ad+n+7j+M(~0l1|ATc6xb$@WKUi0$>M|0{62knU#9gkR&VAm~GD&#F
z3(1hN3%AISs*9g+2gZ;v2vxns)mTom?qHKC!r%Uu(}?|9elFtE*)Z$>NL@9=C3Y|F
zn$tY=aIXZ`EDDxvxRH1Z7J{<?8lO12-dhG#==wcrQa5{=2Zyw(tR5olW22Xp{2Y?h
zb&Vu-C8&`2#xvt|cD>hf^1T`e4zOMmTEBiww$A-0bEPYUi5kC+LAx%Z&usviCt%no
zWkdVJrZ$f8_kTSkXh>4mG|7}rt}4Ssaz_r5)YW!BD~5W?n<!=2?(LY%WjwZL{6A0^
zHWJkJp)%dVNUb`Sh*cCVaH{nHR`aH_7o-14Wtq*sRI3xJ9~qT}^;w822a>Y6IU{}p
zE<~oJ`Ha(2bHGurU&*p4^h~Q;Wm0!M{Q`D8cEpLeBF9nYA-QZi#*AigX?5lxRanPg
zo*-pEh|uy(N#xH)g1T<3T4OaF*0$=}ewRxk5;PYi;)&$H<L__p^_IeB3GN3cqsCh7
z1C@vuH6PldnWK>@NmSt!bJ6y1Q!lASsuL+3&TFjSOTe~ExzG!qhEbXBW$D_))sK%x
z@hqswKH@_;>E_&+r7xr`Nf<KHS-<XO5n0sT^PabDbcDQeXrZY8uh^aO>lS~ZS-KE1
zUCZQWwU3?FWv<fAyfifSH!9#=Xo0JOC3j5sDuVR0RI%e<BDyd0=S!mxBK^M%G{^Tg
zQXJCX&-!+_GQ|xx4;~bj%Ey;>?HXXCD0<<prfi`0GRQ9cJ$o-L`|Te?x8pdey|CL^
zJB;Ei)Q?%W+=(1NKuAK+F%v=xRDP%bJESd^&=C69JNNQyiIyv*gwq>R4!LnF&1odD
zR&BYoXDsYdR~Ho&bnqdJW4aq+5ai-bT_*y0Ddz-Xsg>zO9O#xWWK@3dNe<92CYFLR
z#nB6pb;r<-p`%9>e6eCbJ*qE<!}qYs-uwaj4EtI*{FY{3=p9V-B5;`XUD9{1J>L|j
z5(ba@E0?_xeyiRiDaXXHcnplDucscRu;G|$L;}Bxf5S4ZmK5lR(SgeE32`)tg?rfU
zM-v=%0u%<y{9Y|-`xK%en+j#$8mlk1)=VaJ&<A`M)sH@SY@btK9sLtg`;R`U#Xu0C
zqYGpEC7S1?_MYX}BU7t0OLy^A58I8jVxWbQ1}Cb#S)P-SYNL7Oc=#96h8xV#i_ekL
za;(Qajk#*<;I}G3;5v>Pp2*O%jU*#M40t$cZ$5gt(w%=pZu%tPYEJ>bTpU{Cx3}!{
zWd{x}ubFJ#7c;QdVJfjj6KS#C@O?RS)=M&zoFvx@uO2WnttucA01>L=CBWEX@j1CT
zuTXUc%6jUmQ~9KhG3Cp2!VgMRmdd&K5sh&Pa%^$reBW*;zrS0mPivej`(PUG>se9^
z$2I6-bx0^@@E8<$L#^UtdX39iLSJxs+N{nYrL9_q<V?bQRBOv?PO_CYZy9lr@UZCV
zc8gV!JXviHJC4{j4zUG81z_3`OtU!POY(0_s0Y{7HSOH(&7jL|`U`{gq?#oEHn82F
z*{AzY6Z<KaK}0g2H+$bZ3B8L2>1Mo_NL>f18KWJ{(@rT-$GN;~;@T7nrYBZNR{uhR
zz{yjP`2iKeBM$W0uy2hag-L7okKs&)LuYbXh-NJ@$%uDp+ui9u|J9Z34Sh%Qo%S|f
zvFz!$`d!c~g+P7z6vsfj7*YXh&Mg^aF~k=`;P}o27?6OC^Cag9>|m&#n_0$>z!t8l
zm-Ltk{T~Q?O|Y<3l)hjz6L<XifaQsU)hW4VDWwD>8}oO(eR}r0q3<Ln@4V#UXg4HI
zK6J5vI%!m2s;r-4JF>**RTzvV&35TljsV=+6=#-Wmlneda<6yON(tU6J5kjSm~T9U
z92%#vj^84$C({{r<_5;!5;pz@$(er!tX&^mvd$5L6HMAk66cx!p_nCv?l%bKI|;qw
zywX)Cdi3ZB9PWk4JriQ0Su;!r*b0^dqP!qVObW;?A`~GPz*vlaf3qb2W*zr&x|D;9
zfk9z5&~laeFg%G3`4g3i|2I~$v3|SXK0u&112rc%glYy$rra3>WS`0=*B?8@q`;x@
zcFjKvsJS~FPBL2N>W%=(Y4?Z;5$OslOSa8`2{F6K0=}r^b{Jp*W${BKnOu#O7L0o!
z?PEUUsdHd(Bhi$mDGa%%md3F|CH1v`#<KlQeCC?WV`$=BJE!BSywIj-Q00{%uVDi$
zQbdRpH#UY*LS3eAdo<<zKth)E>soGp`apFtaC+Q_3kQv}6r1LgRELbSAn8|D5A2dW
zkUVAQO(f;p)NR6|>3xVH%rX(jeCp5l-o(0Z6!;E_(X)k4pC#2~v-CAA&I8k!XkVKE
zy&xs7R#0o@7r1Zlpdwp%3KIfcXlU{tB1E+OasA0vJT0#D8DmbB+;WKQ%To~*{JnR|
zo#!pIl*1?zf_b2{8-XXc2hiIW(AD@XTs=6h;jzl7z!1OkB(G22&p&o(7RB5)F&0-W
z8SB3I5lF{gW8M^*(ERVh&y$yQbkCO0bDLU1?|5+qjwecLCvRR-E2I%4ZAU)OX^;N)
zrqG+Iv@W8!;aFFzE``7O)z|j?DI-r}nuMRI@E43C38$d?%4_za$8G0Gx)w9a?W@Vd
z+rW)jCKt&miGRPzrB>w}{9ZO)P$vi#aY4TQ<h^uo=~7UIz8YI@4g({;`HyW~rhpiu
zB2evqUO_DOtKt=JqX&o#b(wulvS?B^uXfR-iF1=!U~pSdAtRXiC72W~%0_eIDwP4>
zVoBtU=nXobdkn2RDrZKBN#(M&KB2Orr#!jOCel2g+9pvJKh8q2#w+N;z~NdS_yo;q
z4m!=BnsUFA3^Rur`fO|XZ`&yU@&|c&d!+@Vs*=b#3%#PC!boRPE>%J+Xq;D8Mv<iu
z9L}L;3fp#+{URc$qXTooQd?(to5rce_yrquE7ms}IfcX*DbWX5W@%(4VA`pJ<Q}#^
z)L)zw(K!lmr1}4KKYVC${brxL(1L5Rvi1#i-^~**nUMCZMG$DhdqIB6v)Ea*^)dA+
zd&{(dy#lNEI!rEv48S_`$syp4Tg&&JiIaeubE#0yOt`(frTMOn;MQ_ACEAoxSh@3h
z=FiYMCc6ck5;`F2Fxf9_0V9#ryrmLi`3XiYQZ)G_CdnUv_<?yYqdfTnTs91rzCD1C
z$2to)-EQyhJSg-iFYUY(=vOYge^zsE1$?8Cz<wnsV<_-GIoBr9b_mB2bfZi}JGSz{
zwx_AICFQ6gMmqENSo$&4Xoy#`3};?pKy_5XB<$m-sT@-op;tu}#VWNiIXY%n=9ri)
zM1!+icz7ErTVI9ZT1t+)vDL8nz^FTE$LYrw^bB|kRV3n*4*}cla<EAu+EpS$f33M<
z$_;7aMGWSh3jO$tI7y4`KBGA>;(TpoMu$c~Uw1}eF?kGi->m2UUGDb|YHUP2t%9hy
zYdt09lu<5QmcH+wrUN-x!C=cc4kxZFiUZ5yz(x;WEI}EE;WZMfKA-BQ_U@X>!odHy
znZmv&Jh@)4s-JKF*|w|UgS<S%S)2tp!RGD}S*O(3av}ukk#w8UWJ-OJp;9G^oJC${
z)GaqjVEEP^2-FqWuhk1z532vo_1uvduP8_tYW!a%HCXdX8CXFhg5YO2<|cdUmP7PI
zU$VWasxF4ZiT?qKH!@K?@f?OuS;}eRqBZX#j<_4%v1s7iB71``7n>Oh{i=CR)Jf5S
z1EV};1;b}zAg_OM@M47OO((pd>f2n{v^ky0>0g4G0C<j#fw29=h9qw{P28SnwiYp#
zhX1-o+c^u7s)PdbkxC6aB;?DQ0;C^MIVHzrch-S0$!5AL?TK5@UNtaCe6&R-N={bx
z4d0n03j|8*otF{N4e$Az30Ec_eR@7Qq(_SitqT9p_a}F`oj}*mR92|WI*%tzV_rFK
zF4fMC@pA~Ll?YbcS_N!;#Ox6EB}s;a6u|?a6kxcrujJtJf6at@orfZ6EOr!VnXQp7
z66=YV86gB8`7!(K36yPZ{xm@SmjKu$7Bv3vu8X;D^}TbzoHl37bDW|ek=5H(A!JZU
z@=9JGkYvNrKF`RB_@>EMp$kx9fXYLAdbM$x(V_-Z_pr0q92Z_1_2(vsM;QWM_}_)^
z7m|}TAIqqZ%D;~^F1(ngBS+N9*h@XhpxPPpn7v2R^{xv>n(j_Q8i+4tzORX%;&1=t
zby&Uhg_J(sU<z($o&`L(rqIM4k+#;J3!;x<AC7KuM|O|LB_@{=%aV{FW;PNt0Od;r
zD2MM@Y{#P-=lwxAgvzp@!P83hMI)xE@Zv$|<4+r^N_9$T@`u#zsW_P3D=nXpmle%Q
zrO?2}DBqTMoAezHyPrN)Lx@!}UU0HQBB>{X*&*K&ZC%a>t0_^YD&|uwYo?kf1Ji7w
z-I3zk{f;r#8^%N8`51DiyBr*G5g<l{cM?0=O7eevzeK?D-x;NmXg~<0$JN>iP5|9A
z9UOf3rSYZ(p>i^Y2F)OxszQ@T=g-k10!w~$Y<Ly+f~#z65>v_Tdk<&Ok3Y{d_;ZdR
z0U4=IsoBv*r_X#1i$-#=^vb&R?At*c?73_1Z`YK9t{H2_0|KAKx7iEQ%F}igd;crF
zH`yx<PCN{J!Ga2c$U}I15V0UHH|EV)%0u1kO}|F8qPks<;oBLa59`-*1dgxO+&W@n
z)(2ZgXML=I+YLpS`k9XZ-diIg+h#CnXoWkC4(hUDGB0dM-UKYHb>R#mu->2;vMgP=
zz?9>IfN=?+2*3C2NU2LDKn#KCQdCBwS46Ko{B9(7NqJA9HH$;z*^S*IJteh99{)Pw
zxHD1jNx&XIae?8R;0*@<(7tT3?6nIvH_8;^)3tA2kPrEL1O8t}Hhk3L4ihsLVTjkS
za-R3b<aW?fv_dbYTP+-H%Fp=_S90|>t|VtreQj9x9M<B%x6E4@?vfAXG|73tLpT_G
zos4U0cGDb1dD*~348~=6g)0H-^5$$8TsJK&Xc2AWkdz_abmis!wpmC^U0EQr8T4@e
zVi5CMNer8|uAY~-ueahOXA|>mMppN(y7`aGvQ_e3j@=#KmG`w~*uqTk(Xo=CzFBX4
zL4{85j8HxwDlLm8ipfU!vwW>NVRiz@%Tt74f3TdD$<HF+unDA|iEU+{t|YlDC&N)^
zojfu7=Ud~-`%B?>RgENK2$VYY`-9jx-D6M*Jz0y1Q{3a8V_hIM`b_J&b_=>1(ny)p
zh2;vi$N<yj@^gkVpbj?`^xqb+9Vu+A^r-Aq<fd?9+(?!;l_-`4Mvxo6qpPi~zs>fh
z!rUFePCVOmT`C;4*qTA0mN4Uy&NO}@2HQ9>mP`AXj+DyBO`XkmpyH#V3NAd@o4hdS
zeqLunsMS_4I|*r>qSWj}FDnx2LW++1H5VM)!Fa1e<$1gFQT4~la?D6f;?Eg}mn~Ql
zSU^uFfrvqasWRrexXTCOG3=Gj&4BkapU6R5l~oIGi<m!JG22^s(kXPINLY?V<S^#3
zFG_-eZglf_Vnh~75RS$*#J7ILuR#G8MnvucOpff=esuKiCEH|TJI56C>4XU}8*5ay
zAUT4=sqvw*_JJM;y1+CR2{#^OA@IBS63?SoEtMcr%84u}DS8qLs1W%#@BEI}r&DQ#
zhz6(1cO=Io5m4v!1~ZtUIAFo4X#D0X!RwfrN;ZIww8&n}upbnoDK}a<#?007uxIdP
z+Cl|LXy4<mg#sob^xDItL|1((AvR0uX_TCO2#n{b6Vm8=4V<vVVWCPsyv6)uY=f1!
z%FJ7hn+O665yiBh56%{zaf<WS;bcuUl8}H+8)*3KDGkqTN=a-#U-siBvJffK-?Z0F
zLRA(UBr!@Coc`KeZU*JY4Dgv(cv4GDY_6le;F$#~lQNTdN-IN9$vp=C{gc`EB~tJZ
zmJN^i^CqudHNRct)+H?V;ZrZUVVRe~imPKQn9qkEA|y+#Jg#_~V3mmgBz;IobOd9d
z?T>i2@1p6^i=#qu1j+b|pd`LMUqpyb$lQ7i>ZOk?VUl#L2qH^k1Cv!(9AG?->i300
z4>`tm>qco%^`4aJACGq2DOn)p68%!N$lyda#Fi_rH15hSF`t=^t##fN>xCtAMGudl
zLh9IUFrs-(`L4Mx`7c{k@i7W=HbmA%`nmQD_XWpv`L^HPCS%J$5iTmFFJ<b=BpiWE
zQCH^x4fb@1>DNGAi=wc52CmdGyfZ9l!@K$mT*kEx8y`Uim0`xwfK2N#u|^*v@mhMM
z)$V?Do4&P)Q9f{1nIsyjqTI~fj;%Jlp4-in-=m{?$cdcEKPLN(hrlKMZh>eKPaUg4
zl*Ka11Q1#JJW-VQ&E_&mcLoS_-H%omq3)1CIVH!YoK7^!pAH_-+DftS;m9!(AsF7f
zex}>5`8=jvqiMu#iZ$X?sr-g0gqSFW_UJ8OzzOq>>UI1JJ)dx~?`=s?Tvxh6elmek
z;?rnhmW7WwDj0$zVLks1vYGAwRAYpFAXvD-k6e?ImE;$4H*as|Hn@_bQqY^sNf6|E
z>!-gB@A$?8ls#hK5a*)|P*8p}gD$viVBEOpvj<5QZ7@{mqhu8-v+YzE&!1=Sq7JGI
z=N7_VnA>9Si=s95WW`g{j1?aY9#7GP!b0e#N_nG7aT80iaeRAxowXp+@fX*f11jsp
z%0^igqski#steuMjN`O?TvYj1?1S&NdVArb{rVlr1pSH)SJ|GMv{49NJ?c2HVy>aT
zebuC7Uwc|RUFy-p)rF5Zd&Noj>CULyo@<&MOjnWb#(GHfzF<kRW<+yA_K$}S3~^<8
zM$#0Y`@HGt-WbPRu;`N*uB-24n^d2#d-NA|_gXX}Q;bU1$G{golq8eHj0V;?vM=g?
z<za;#x)B%C;@jhfjcNIF1RJMaWJNs<m5b3NT~|?0hzPsHHj*YzH?ZLuYk1Ey!m{X>
zrLcwpj(VG-n1ibBYbN7+K>7?jf;}cWASU0p2OoQ!qCs*N1AH9YOW{ZuVNAGdWS39I
z$b%gouA6)#22LHLEU(kg_|W{t;`c&v5xt;lhU?^l)3hA=cVqMj^#KoZJ*2U-vQ>kX
zwcwL=^gMwNPO_K}lC0|znRc8!d7D9w90E&IASXmmxXmpYtU$B$b>*Hl3IQ&J7|NuG
z!l%C)j2KyW0lXjquU-d?RW9P*zL9;W3ql(J%IDYCt1Va0{g-|(5WQ!lhv7aSSJsCk
zG#wJKY;{_#3*76<eiH~Tyh8n)Hjj4rXK?s<G?50gB}7h=*~dj<Vb7Svb;D01gEQ|p
zP2AWX>Wy8-aRraY2Q-^Cq4scB=mM7QTI&%Fnw_O)!SsLb-n^Ckk8018+xRpgQPxrF
zd9E+DaAbu~0({r*PJ9f+5HEhG9q}5;%*_P$bqidaJv@Z|_{1yjbA9;pLo5M7L+E44
ziz8M7f}{N9=&uAalMLHCq@Vq^2Q->qQ(1J3wuh5^@rx)gNCS>)k4OaNsdL7+2x1{k
z*GK;0s`$_-y3!=J;NfW7r)m3?ZW#J7s4p*9=o;|eati2eessLJ2(zC&Z~JKR`_->3
zx0TaBXa{?ZMPj@}UPq0RekFa613w$8$$PyU!UQTan;T9m*+0#;M#rPg(yPdyOCq?S
zYY=*X1B<cZrmujfE=-a2!M^xQ03DuKJK0xjs80bKGxnFOHI6#-pMQj-8~skBZ|5%1
zVlPAbez|O}om+03!rc5m1&0~Kw(Bv93g%)zA$}a)x=X$NdAIxoALD7hkohD>*#{s8
zBaS|8o$xYf>DDMN`?@0Jm3Xb+sTUp_Ga1KJj~I^x<8q}aHX>7ckMNggftf6LY*>?V
zT8>VkfUs!CQpJ{o4=jJGW&iP)YOTx7;9ws^Ko>n(YsZK8dkep=$R9o%pSyEI9)thY
z!QawG*${oq|2@R`FTh@`VKw#YxX>tIo43FB)9G){*v?)!?%XfrOb%+s)bG6N207#l
zMptlLxQ1-NsrIGkJ^;_fiGAu|qm3_}cu^ZHV#<KA%27wrmvS`XnJjtWcO4};`F?J{
z4y5nY!esybOFfo$k>OfoW<ReGbe_3KLsTrQs@`9}Hu|6n!o)B2o>&GAY@mAOwVEQ`
z7HH|?2>$HAc3$$JboQR^s%}VqBDVM(GiMq9j~(}U%a0U<=rX2giqFdNvbV|1^nOua
z@v3+6A1Q3se#vyOk;gqzpCzay(+O?gdrU`eZ3qNsi!kO<D4C45HUPr{Vj3ZBFHa#)
z`mHCiHZektk-lGsv!brTed?QHf1X<&41(afD+O<V(wFz5BXS?D3o@n)&x%#4wX#sa
z{IFrP2z8de0?S$g3vcVT)7S`zyD9xiceMQjA=$>RjNu$=4Fvu?eu{ZOPX*~u_3K?;
z<dcfJ9*o_V?9HU*x-RkGPQbBy1%!TZT|>cAw5E7O+noERTZG0y-F?^lg&NIGkKKeA
zSA@3YIeJ|>vD`}?Py*9A`#@`0iOa%`om3&Uh_&NRV5j^yUy(&R<?H*as{^O=#EEo_
zpT8dqg9TjQo0}EIx}rl@=VHjyGI(kKIp91z`3a<TOx^6DV2<u^#r4Uff{A0zd*-J5
zWMvqV9$b~)Lbei@a5i1HB!LnAAm_yFM-Rhe+)o6k;s-w=*22eyJndo&(Fp`EEwqS=
z+D7tIsK+&jpF6uB4=#4QH>7eRA-{bpxB*d6z^>ER)@+hmp7}V2&uU|(7AAac38qC^
z2l^EBx6RgPwRX;P^Sr8rP*Z{Fl~}%trbM#L)&{K~u%aWh3<`i85Y}Q$os(I;O|fEb
zZ6cPuhI7P_rBncCMsp;7k@<Qc&9h!od-lfE(#_i5WdMQys(og@r0W|KWt*l!YDm+q
z^rxWrjRC*+*KekmS8*M2E0ot#LV}0($~{L-BE!5x1un%f1!1a<WZN9Xe_gZA1#^(P
z{ssVtmvv5FGY7lxaGtkwuvP!PM3wiM^~CjemrdokTPq{w%CDl*VmucpViHTZ+w*j|
zI|iw*(Hfw25coWx1P>HOG1z?&P(xA89pCD7LPzG67l-plUm(wiIe+&l^cM`QE^JHy
z(XsqQ|3JwL{k9OO`{}X_^1hjI%H>Z}_7YHAf0~{qt7p98ZNc_xxeEJ8aAq;Yo_P<D
z?bJsL`(kb3r6R2g%ugMwotFZ{mr(!K%?ovPDO8e%bLkkcLhP9u{huO3BSi!PS*wq9
zjY%r>2caCRN`E<C^Z5-I=ygn90uZ8MCz4F?ujRzw7QT;ZWK4OXwE+JJVkt)Y^?C9g
z=MQ<SIy_2*yc<3v40~Ybj+r=0lR;s2Qkdm9TA%`acXXkJzg@)d1l7gqSer@$zT0^X
z0}vGwX2n~I*74-1pH};<=&2=)S-rS_#qZa^ae9+QEq}r86k3~qkZ@u`;`%rYKdDz$
zKO}zFTM(BQ=i-O$`@Y=eNwLE@B|=(VQL9A%+<FQHVfvY^fa1V|al1{=T%XGVUEvW$
zq1+}5lNfBgcl{xES%%XVS-2_H2$-Hz)zhC~pKN0(uldg}1KzI!mBC4<j}Z`r>69+J
zR)(pL)NC7^$R4;`Tnd5LDwk8*LnxpK22Giq_IpeV>5TViLyZ*QBc8>GJ;jVnFu~EG
zGpiJo#3#){39AD*uV#&0hLiZFKJ5J70eWdn{-6WH_;54WQ#;h_mq`?-K%!ngZCtg{
z=5t(7OP)rWOoyoVxs=b-3;MFWg{2?x=A5G{W*yy9=CBkaQYxtd&>AW9Z(98Lj!zXR
zX26ee!a9VlQ2dB2k0s$bZM(VFe>6;T!7mDe{EuL>?!&R6TfGtrJY1p+1VSlBnASZb
zc;LJ6tB4W~OH5r^z*Cd*j=SaEB8c6sHS6Dc5TcPCu-GHnOZt3lg>(A${e^rO2;rQN
zvyKN4XxhrrRcTh_wpHN1Y%<T=(a7HF?B;y?>b|yHi=MaBJ;Su^tEjpHubm4ZO2NlC
zf0oyW3H$7PJ?6zO1TIjs5p=AYuiIf4aFFV{zw@5*pWK$r)fUySF!jhmwiSjClb{)M
zLFka4O_jRtej?@CSs6yf_Ba>9IGQ=u=XSrD<)>&z{nbCZRW6~`uyE%GocbijK{!v5
zm9~JfYpAB&k4(n9H;3#4K>$y=ktaa4CD~jfWA(U>y{!j7eH^2$)1gIFxUK9&DuKUC
zID~v9xl*8u<gQa(&YY#RQD338L|~Gyj<vQD3%M*MI8mBDz4-FSk%#Q?<b-mxU7;l=
z`5;#01)QMoBA-|aZ6GFWS_GhM^XmEX{I{Eg5IUsk!?QZx?ZGOu2;PhVUp9zHOnY%c
z1n|9xpp6?UI640=x%24)*Tt$p@Ehp+t6o;IGT~<n@=?ItZx=bA_W`I<j<<z{2b7MZ
z!$Nz|<^zu%7;u;+d>1{Rbv220GFgm*l-jtp**FJB+_OhG3bZ&a{=OIuXeSk;`;`H$
zMEevtOtFR{lRd~mWobjzS!df4L9)K&$V6p(=&vsGU9RS0<8=0Xgg1!wmyX_#M`NDW
zk*p~CFQD&P?MZtdA))$&uu!`lT3+avo_7Gm3kC59MU)0=4Teo+HXY;DuY<or<^bhT
z;~QiEmh0~11dedOK>=rP<gBgr<vjw@NwGT7Q4#%_MFhO<*G;rAq8h7WSc={c<@*k=
zq(Lg~YOzkjOSaW{48)v|+s<v3wC}R{d$KrpTfQU1$(dmHSezCy0Ry$Pnql@;$$KF5
zh;jZyTZos2=HM#pS59;)vXU`0dtxDi;|b3<jQC5z7iCbRBn<1X3qb%ASKK{3A2b0_
z9KYEB+xP0OSxs+>^i!Eq2?=F3)`d@AsAm^9M3z4Maxe@K1Wzj7lGprrE~V5+kkpVA
zxPR)7`tlBa&%Y;48}kTrZWzgO;qtP^sv+3FzbM`Kp)4>GqGm5Z!&ov(Pl>Z4y5J1H
zno^g?!i7EGj2qzMcwI*X&Sw?|iO(*_Xup~;1We4!{Agk0B8L^L-$-NOIa55=#thwN
zWsikbOX`yIiafyvkHT2C4<$U(d5`LI>)k4-?I|hX6nxE2ZGm3jwOFjZ)3d2Za5TD3
zENRHUd>0;O6j0kA%<?;se$Y;j;UHX2D*p)}aswc`KEn15QS;fE58#{3ny&J1y7h>{
zSZBjG$19FS6L|h=4=)QfMOTn1|9;u4JoaHYXTb=koa(OL-23l)46G5fQX^Gb`i}4N
z<lRK427q#JZsds(_Em-+bF=Dt7KnP1xF2)<7d?@+kU`v$6OLed{{|i0m)JkpJSvE{
z=n1sb^>*61C+!2n-u`X3J)o9TB<^!MJbrtp^Y|DnzK2f;V>?t;^Tyfp)oO(8x#yYZ
z6rs*)fZg%uBOCf(7E@Rp;lI2)mu4k&{xgRs5hMnOoJ|=*nzIB^^2!di%yzMY%$|Z1
zKefT4><B&tb9bpDCgd+r!g0ziWOxP}XAw9!hq2E%5t_iDo+6YQRO^bL4nEBNW7KUh
zD#sDB?5NWpDn2U5Dcp4%vom<50byGbfRbCUBfzc+<glcZ;PG!SEet)S^baQ>PZTf+
zfk;vZl4166hU=W&w*@f3DZ)Cfeh5Cy;N=i~W1Dyr91}z0OD|3#W+M)W@SGuuvTcF=
zMTggc%GiltGvMw-BXi(&_gJIlo4k<O^tnIsK>hnys1P+ug;CPDM+RioM!}C$djqf`
z?z069Bu8ys*efk|{o}%nczZE}vVarB9`q*}su#6r#l!WEp#cMnQ}!}9Xl=0ZM3mfT
z<#mtP8@56kD-0YAEMBe4diPJOM3HSdN3b2~En)by_8W~dU;MN+WM5v$d~IQeyY<hW
zhi86V&RVrFoYUSg5R<Soaxy#bMW1E9HL0?PHyN^5-KGhuc3>Ti4554rc30xo11T%g
zKoxsDytuvjj*`yb_=ys-u*9uX$Mw&K$d&Vth{UddgZ(Ez9dShpjt>|DtP#MEibhfM
zTZ8X*v>fTgO1G+Rn%KA|D&lDCB-Tcyb;U*5F6GH_%Kwza4RUx}^B3-ZK+`4EB}P?q
z(=nzR-9Qg5pnXr1K>SC(&Je2C(;ZE0QIGQEHuo0t_UCj}{rdRpSD28y?Fa`phM#W)
zgFc}RCXn4wib~s|fW2qZd4GwdzTN?0qQAJ^B3%i(mjieXqRaUQb2xN)?@DSWbS`WL
z2_6fq%*W`rZUBcJKmfU3H_>CQdKs(tfuaZH{PoK*jySK~TtD!6@Uw5&C8UWhVMv_D
z{PYD#uAxKTI`3HNEaVbeh@M3Am;9Ct5h*SCKE+dbyo=H`q;mHGM|2@ysZ;x;9BJ%|
zMjvMh9MEU!PhCZdaTql0ZS=R5;y7J5eC4m(sa<L0W6AeP{7d~kSiAQJ*JbFHYkpiU
zmA*ZEg$<$9Cp1e>>@|pxcDoBl%uP!jQM91;1p*C-3u2jGWlhieR`I|^Yxiu4NJF?a
z)^mVyH4pMnj$H!^>5`eonWJ-8Lxb@-?F#}|t|f8b%{hq$RT(j0WG`>c2w`^*UB20N
zW~}~C`rZ^dcz03L)jO|O^adxiG`0q#@{i2D(BCE(8PD4O>q?Jah^S&!j!B`A9<2x<
zgcnzU;%*s^uZ4#NF`O|gMM}T!mid2*{&^ppuUX}t$Qh1&l(W}NNk-EI5asKY30u43
zRh)|2mzR^&6-B!NQ*U~12DG1@##t3Is%R}N05EYc{C)HL#`}4Y&d1MO=P9`<7rZFo
z#sc<+hprks2MZf|7hsf7nfSDH)_O6og)V7XT8;2BgZItyYx(#$Dy%`n^(a%)y023*
zKSn-B18kmUvYuZi<uWs*wur@-$Z=@jXV*=1#N~K*C*HtynfZZH2>N_8G{CO9+%wV(
zO`xl0nQK&H-|JA%b&P$|A@?m08>^2YU@C4>e6afQ0hFEnZxgewe~B2%G<yV=U3-H8
z9#<vAg4{D`69x>jwg|6Id~swajw)gOvd%w%7I6yOL0OPkNKK%w(4;Ch#E}LgPEi8U
z5Vhdd{A^{5AL@UdX+d%+_I<=vTKPEu@OAiRPnLPY@4QK<8kfqFKmvH}cLe}+kT*BT
zjNg@k^U8_73=mQ$f`S<xAv9$^Cx)GTm9-j?nGCt+!}Bn;2&GnFVrSD2hEEO*vDGmD
zF;yNZ#J^2nz|E?0+%5IBTXe$!@5zw=J=g(~M+dxq)^1~N;ltG%9Ve<tuOMkoDi<JP
zHs>e5AX@>`*!iUHzyQEz8w!rWoe#+wQ}0Sv^wH@973usk+ttKY<<q?ayt9u{B~cg7
z*1pyFr0{F4NWQ=pRn$T#X|~>TZMLIe3VgCcgYM)51omQKu25{@w@|a-n2JA4IVw^8
z6wk9NDdBNwi&;XoAV`i8vb)Q_bnpD84*0CyQB&c?>!V8Qo>>clQ+Ukd>He#1g*8S-
zs~ZQbb-pfoEmHUC!ro|l?KVULW7onU++FZk`Xq!Bj%nX(DqBKL;Sv&+4~P<;01k+#
zzHHWaPBKeFO(Z~JS+j97M*|y-L;i3d4MnR|2nBdj@IJ|SU9G`yOb?TlADj8CN+yE-
z<(>Lfh@`bu=6)uK3Rw_2?HYnBZi;sq3UYZcO^7O~xsH`jY)0>0)$M;*>HbP>(0V8~
zAwxPBig-x$o;BFUhCB}ZV1Y-KFo8~?;?1nrpu>ss;bW_#C^k#zQ2Ob<9mWTC^l=s9
z*u+!<`wY3i&RHAVeyqP<kj@-hDgXkNGHzX_qM84xQn;5bS9eg`gbCr}+x=7JRmibR
zSnXW8-{|d5<HLNZXE4G{yk^Jss!^89Uqx$^bF8X_1$*C@;1`$TOMRayBwf1VPt%pD
zsE*c(61)<@xZxA-3x_TL<>TYO7AQjJz>9pl*gAdq@vS3}nHZp2-lktr?O~c;8QDz9
zQMI$%H2Y?nrYL>F`B|Zx1mEF?V4g`HkTz78Y8#9~*8IX*0-Zj!((W)}!f|B>=sonA
z<$EN*gZl<+jxhNF(ov^bj@aqgOR<Pm_dbUFL0w$JT;}lGU+;g_$unRD2iYdXU&j=?
zA=6@J=oewV^6#Z)7ACjxFY-_kx^i#({j`(|gZ@Uoy_T@R+Uu3nW$oTp4v5Q{&VE!&
zi^%%1$yqS5uXR6L(cz3ldVaYHc+RY7s<UQ!<i{}^MK@G_g8*~E|NTqM^)76kO^>dq
z^#2S!uh(4`sX{huC;`JGHksEKg>d6_YvR(_n3<;=$7d~S4vvs_t|A}g%kbHiZ7R6u
z!59HA7(F6ZT=^HKi4PRZsC;rwib;OmK_ZI6&XM<>eoCCQt615L3JJq~Dfd~=CkEsd
zf4t<H^m$CB1mt|%N(N#==sS=&Z<ze^a4WcTI*dt#zkT%EOnbiKxl%4*hm4hf?BIet
z+OBHyx|zFvt0^4=4EI%o;%{5s%A$G#q<DLAQ`|1p(V(C)J)ikQeh%<;ReE!60>>@m
z;s#nEq^#)BXn9baRA`yN2qipr7b!#WGnNV-0tw7{3nuSboj3a=aDaUp%dft$+ql}!
z@q=mUP4Hz!vB%x2FfCD`@lBBiOiS(RdU+})cB-T+JX?JDK{V9Tq~okNHWk8_J+Dyd
z67<kegC~u)o8gcJvZ~`q>Kr<dt_m*$^FcUdvHgCRunfJ+ud(yuO1g;zjPyw-tveE~
zqq=PpjU~?}F^TD-B*OaWJybrkGHs5!Ps^PAxv#zfoi0%jZNF3Pz7lPCdOmfet4+_4
zR6k<eG~1VP5!1~$GcF}3EP}Ptp+^$Ut^vtDB#P{wRp2qz$!@-xONtoJu78Q+vNZDn
zJ5xMkkIFT-Scb+Cdz`=fz!e9RQMt-j+qSAYIt!?S4I)Ok0MpHj93hgVQAm&X97s;i
z%Rx**1PL~y?wz<lFL8x<n`r~Ylv-L4yngb0_jH>Bp(hxRO+E5$ln#}2t^mDy%6gmH
zpQ}i1SIYZAH!S!VgR;9y?n@xgqGUYK)w;K!B=)5o%jV+c1N{@X7RTRkQm%g-W>n$Y
zP|Ti2!=qMf7Dzb2_A|Ahi&V-f--V@dNDO<BNj!-|&vj~cd%%wr#1lzW30%7(@Je@>
zL~5OP;Tmj@b`-`-7kv`E!5!%xByebu$BqsPUviq>q<9&qTWC;(D~L#130M-XViz}n
z@a7$xKLjA<<0Po5j=TAJjI~Q7&JaExw&p&C1=6V##i}-bvuYR!NG3GXL-`RyqPn6b
zq~SQdkqD_}2TOP4(=$J~7{B6`h2?s5#AKc6Aw;w?Nboe-^%@|}4VfIF+=;#!8`GyZ
zgV?B`D(iQOS`LNi5<Kn4`c3bNke^M?u2+6;52_ZWoO7lyfm1+4v|ZXLiK7s#Uq+0i
z_RP)dHULJ6<qcmCw`KH1%1cmq|3;N_(pu}qX7NsR#f}SVtYlCaJj(`$6=|<CVIBVh
zRh9ocQTPyhH*4ifx#!RTDA65`mOJS*NtLre63+q(a9hY>V_GC7vZYX$mYK*ViAPy>
z=ZKEgLqP0v8ef|pvKydN{@*VfxSxt!%bn<)o<5`kVPas1w${Z<J59nWrDYvQhuK)%
z#iIJr&m?nwH6VK0RL4g7U7|}d$@;hb=!5UwaU<HWQZ=8A;dK<O2DL5a1VVt@MKi~*
zQW%DdMKS&8bO{Ix)tGN?{fz_7SXNKt7q>A^&g)pl$Wjrlo*+aNjSFHYdL&}%57p&4
znN%$k8)lulz%&fAq8m+<#Wa??4hF~iMlI;xiDI%^-_onAj8cPOQ+SE!{7Xo@&=fne
zG>r_3;?44-KXmS2+MkM$Zng$`IBLFzYYS_>i=#gv$f&}hN`5JKzBzB=f}@>HQAX^`
zvmSLu^8OMt@4lf3ndAo^XkJJ>!T4mk#!?U0!a!~F=Mw{Kew4hsYCNR#Dhw_-Bk8^&
z(z(E+*6>_bDhgg7Oo)o}+9bT_O>`_0Eh0pAd+F2ra~j{VYnEmka%qR_kEcxVfv)H5
z8;`B?#4wd1{SlXf4##e$AGzx$$JNs=U?)<<y)m>6tX+b8_9l^hB#5vxi&L*fZE$@I
z>LLu2A0f2Qk^GV{FX+ceP0oVnU98OW9`WN}g72aEZwTavXR8J0_c=un1qI$-;um8V
zMOz0##!Gm3Q5wbtlXle)zff)>d{ls*+%ItVMi^fTjIe$rC|5{y*jZpopqYK<nmHoD
zNcT{<lQxHh(6*JQ5GolfgwMN}KFO@xCEx-7t~^sq4*vGXa{%uWDE0+Q0wQw_ce}00
z4xM9QgV`|CRwvZ)Zz>|OTxv(26f8{!3Z?ntyYpQv-8!TSRrH?Wt>IC41Fh@aC8e00
zGU8s=C6>%Lxw#fL1e{oV0YwKjT4W3V8wH)slcPe584qgKS&&T5Qg;C$#j+kcNgAV#
zx$ZaKh!S?yFi!60{1w~R!560wrJ<+prQ?Kji^0VGSG~5NDJsD4q6k)3jtnyHcK}qP
zUtL<ygkxAn(0zRthcM$q0a<~OcLa9p>g3AASa!c)yYtIDmXE_p4{R!N7RJ@__@Am=
zV(2Y&VPw@9UQWUbWedlRCwZ@W|0><~(j}LM&5zwb1==6ox9I%A7hl>9g@-^wO@{-s
zqpWSZv36m<4goB6_|6P<;gH-$)vCv0Znk9zW=JMRZexJawstHU&QI75e@h*d;XpVF
zJ>4PH(*vzSQbU3*{?KXNE-ay2m%dGqb6RUMBA5#QG|mB|eVf~lG_y3MhgBghEH?ua
zh9tI(C2}eCGWh+bwjzj_j9H#mH=colwd1fEgrWHRQm*xIybq~C5RXXX`X8gWd>T4w
z^WS(uT^=--p@ieMAJf-TZoTNSP;V2XVD)XUeO<@W4irr;$sRy=VOw(vrI<$yUe*hV
zA;(+1fB26Esk|tZP4M^Ih2)vIjWwX)$#S+(-nHRGro5&U6Ep_a?)v=7JY&PNZhEr1
z@O>?nk5cROu#_$2ALi<VjF;#xnZg4kWlSC`$O2B!JsiA@S%%2^(9YMY-WWS)^V+<?
z{|=OWW85HdtX-R+sYFi@xL4UkmazRAGBc2wY%B+PtP$9_Vv*8^3W?E^rB_Gu6Dp@M
z5U)%~J3}5)VdL07t#hb@w|Y4A%j@6O6N5pj(F!6Mi?Bhlqrqkb!srrTI}Oo$Trm!R
z`t;p1N&|{;wr?E9VN1?yMc&=rJh+0sMU7-IEu`UdsweLLm?%QhE}6n<&c(vNkXx>|
zb-F`{$%w}p@z_)5LE*V5HsD8C(9kwQ-5Bt=7yfl{<K3~wK<g&bAtBD1Vp)275~K7X
z)}nKP80V}hZm36@J!?0^=6(CM+a!OmLJG<yJ}OZ%jpP2ukZg&6N!2UO(q4aBsIIj%
zlUuR`6aEs17g$TTJ*D)ldw&eL!|85qHlTM(7W8L9Y$Yyou*IU(#ut&ZniL(aF{+ra
z3UM!;{WyeS*pX*{8FKKvNx;XOKHQcE)rf3=v=;zI&J#?A`^1PJqljoF!ud)i)de}4
z`jomFB{ll#WoCp%1>HHr<zKvOmlVftg_&Ba<bODsUF{JxShC!K_Tki$5%)+e(<wCw
zTQ#rej&H=bFO*2t%s^`ubIlF(yvmv9G=IJ|w0K*`e<clH>K+u-$l#f4%PXj0$-wLr
z=~TjuQjFu7T8Ngbk4%1&s*L?K=xD~HVs^)%CD>HqeSk7h{0zqJ8Jo7(`BDn{=9W`D
z6261i1uK%~Zswade_^LGe`Ic44%enB300@Uv{Z+rPxO9_-v)a~vFpe}iD*AH;+6|A
zfMgZqGNJqF?eYwP*%wB#H5y1b*4WWe6+*|d5SA+gG0cN0>%T9OsfuC7lLvl#GQTLm
za^+%JFkl7WzUVYqy3(<Z`i)Y6uPR+THyp_&B{hOM7pepq#@oOeHvHIoLnz<6aa!dM
z9$%Js2=U~ceE)v(ITyxf@AH^kMQ2r6_BvDR-DYn$6Ea*F(&vn!T(XHn{Y<D4Bqr|;
zn@$<=w^Xkxh&&-|PQj8i{z;RGJlR)9c73l)u@_;Wz+$32WeQC9edeJ<iXV-?LP}G^
zmxV3P2H(vcIlq%(Mqi_+SGL>0j~CvEVPi7v99RhEVpJoH+a-wWsr~-iFr=*yI?xw-
zls?z8&M-NSqj3v4j5j-`Sg01HjM$Jm`W>k|`nkfbybmUh&BHM>yru{_etJ4Nvmr4c
zZ*c9ti7c8PO0sXvV#Gr=M@>-cu|O4A$|g+i-v4oRHTP;KD)PuaPfKg3pfIiLN5Qsy
zkLW=${+9XnIozt92=g!gUA52}jsm1?ol*WKk8S@zCovL`*Ek+?z<VQ96wBtEk1L8m
zLLq)V=Ds0CkV6nZ1K<v|5abbZ01JcQg7EfpRf&)vS&IpXNEH0{MAdKW#-BqLVVN|0
zFJ8P>ns0f9x!=4?03ILC@Z<GheU&Ddg6WIz^;m+otnq^D&=ZiYn%=P1Q>rE{mIf?e
zBYoponxKy4>}{6uY-_qi{iS@{u|s=X@O9OXFwTc$2bI2l`8HeN)vWx~3Emx@+kjF@
z)H!PDTZkOwr$RNiE^^z-l%AF{B&UXa2)o^;g%{%GM9H&L-W@{)%GtVA?f(x=XW<v+
z6RmMr7T6`1MkJO7Ns-ParMpWyq$C7HL6&Y7>5>)+Vd)T5y1P@lyW6|J&%O5_*x8x)
zoH=J^&UwD$DYY&*N!X8hlU?C-**L`B!hcx|lBx$gQL)P0=EK%KYfg^%Z9uJ5BQpZ_
ztRiU!M$~J-EPt9#l)TNNY+3T_V5GmEfSqM0(&QIgSBt?q-iq-l`iV9cgbSVV`=1^M
z4)_W(8<wP|c3Cdha#58DYgy>>i{4f4p-lauzEcwCc}R1I=xzu4Fd@e77;<rc#`1`Z
zBLE&}wI{gaur)$nt8_46j03Ps%}AR49#Y7sm5DS4I074KLA;xP74(RgD4+L805kF#
zEOQ!8GpfjX+?&}Vq^~%WBO##P+zMhg0MQc~fapD$mT6fx!*$AhIcXkGemWaFZS+EB
zMp9}(ZL(Flz08~P>p{6c9L_?PG>>0lolEW|Y%-G!w2)#SqTZjEZSU@6+yNQlTRkLM
zu?hvLv<Jp~wHb3~>Ocm<3d3|q8}GD*lIM6)w|58ka}0#C-a+qPBue{yzrHkY!i|n0
zC&mW6bAV+Ix6-FYVLzt8M6urH8|*G#=FLq>Lt8LDeQo-nwZR&HRhF9siHPNy!Rum)
zg8k}mI8hV%7-h#(5}x7Ez&t|I>F|f)?wd26bFEGy6d30}pjjOB40wT?F#8k4G%F2d
z`oz;^P!Sm5B7y=;raTWea~&QD8_Z!p!{_h5ZGuFYt{N>T!-j>hBUgUY1IwlZ-ot#?
z7zsK@+9$Ka^$(2gWF)n?*}67iVPTUPM69Ar%8asO&lRB)eo7Y}8s_%SJF?j)p&cO9
zXtnLa>Ba6^H&0)Q6+e(>xf1t=*v@zZ+Oq90S8&fn*W2;m#NM291ElYW=JKNSp9@<{
zKM4V~n=Yql&AT{MwBo%XivCF00vbqe=|d=&L27CXel%FFQC^|(zikH{tMP4uvBZW&
zpsArGr{OJwG@m&x0R3N>MC+>~iG$>y$Rv#HXN3Zm0vJ+rKiijU;grn`#<{lW<B)28
z`dzjNZEdYthqAYsENb(G{!2Ww|Nar3ds=0gsf6%5Dkrz(OIHtUdgumR&IR}+1Z<uW
z7Ox9{TP+En9Dgp@GIzbYfvysM{(6M%VLlAKV>yN^LS#Mt|0aTeNyNZX9F2*oD&`a`
zEq$fPi9w~uv)q+{T4N)TKRP!;fCRQ^4%Q?C7I?@gAq%9O+eic`18uK2(hj=Mg6W5U
zgl;kMmj6oC{t!EZ&VZOxqn3AfzOR>Ju{?S?U`dZPE>81>JcXS2n}|qq^7;=3I5qoc
z(^0~}kQSce;vtq=RbwtDvl#mJ-Fr()cVhC*)0A%r-q%p7KHj099Y%`q%!EKCsIy+|
z4tTkO#x!t?7W-KgSk9Sycq`?ffOl&=Oc0w0)D8+uWG+ZPrBjBk4YQpAt2fBUvoG>m
z9&S&VIekWsI9+MfJ`2F;SAS-Xc@d4sX2L?Dvl>xB&>sA#FAU}xU855+7xNe;lp#_~
zsCvB*MtG>xJGWvzt0=(XybIObsj$6?m+$%Q%gQpy>Cb`DJ3?~?1oX2lV0y*#5q*9Y
zi-aM^_9gsXk7KUk`tU76HNWFlOd*k40SY>W+PT7JhoF!$1nle+IVG@q$eyw>W2bDl
z6PvhK`{r(rNo1$7yX?=0de%GUT2g7~Isxn(yz8tH!COS==LjmCZZ8FLpU4Z<5&)mD
zm&0TkAkIPxMuxf(>XZwTr?2_r8MOJ>mx!lXt1KE`2p?s<hdPhbzF~kEimNP0M%rF!
zPlI;&_}QS40ngy9M|_WHe%E$={o{91N&vxOzDWrn!{=iTz4Gd9-j1E|tgo`p-r9=L
zHo5Z@5;sO5gFjHFT?R@Lu7M=kCWZ7~R^V#E6ZVO*6K#Nb6@Mq$#O$_@*`jDQ)`hbc
zG}kcUu)^ok+7Yz)nSa2-8*7Seg<r&ibP=#ZVl$Po%m)U5BOT#F$1#d40Fb8Ar_`pu
zoB5!sC(k_I&fpBgwOV#PSD0gh@FUF`Aoi&iZ!NP`e3epLER>@`z|d%q?c$`;FM)2i
zuUxJY{Cef&Mkz>!T6@b5m=PRlu5HE&mahM<3-xGA3sE!Z4L2^D5zn{$3Y+H3{>u~*
z=kvO#^NOf9V+6}su~A;bgXT;4<}AFYhw070ixisga=+8ni?v$P?gOxscg#qGE~@#L
zd7i-)33xnv!g0o53xMSkk+tN&go}wpZxbshthA`{q+r*IKRek;3UZLU$80cTQ*^rP
z%{!}nSSt<X&2hCLjzD5oT)Zpt-Y?w^c!OG1oV}=Nte{8?5p}HKp2#E%XsAFF4RkbM
z`$Y35jr*o02L|P@zVw2vye3hhp?+03Amm<&0|s`}tpD`U>t~vIU0vny;wV4`l8rS)
z7~K64+}TdeqM-~G&*-^mE}|Y_%KJN0TK$F@nRUO(7H9o}>A~Hu0TGNDT44R1Js$zt
zdp*~WiJ@PV;#moz!k1NlNx}@n3xO#aW(%euo&7@d4qtcDy*&J4$^xL5#WIbyqJP&A
zARTK!UZn~^FW)xs6YHRcPSqh`xyPM|#I}zj=1~z-avNB5A=H#PbXO!GUq!bX8;y>T
zqF`$r+eY=5@Z1_abLdNmnxfsJgd%<3etGRFEkIgUM|JGfI}v(h6!!kAZi<=Sw&&L2
zYM*8X&e>i=XHS!<jWo^*#jI*s-aS!C36Y;I^3>-8YHI=dc&x@g-YxKkjBfS4G|2ZE
zhu+P0$AzT6d@=UA=nR%Sz5O9Qn>P2;YX2;g#Ll(Ukz@j*H}|)7WSw&Y5%Rh!{~wv*
ztdp7XrB4pld`a5x#q89do|#;6BrfZm29Sb7Y(I1wV?NPcqvjNaWqrv^krvU$2i->B
zCp5zDkv|O+PgzU4;<?O6BeN$-igX;}k->?JJyh$X-HSP{3h{GE+!B=|*_XCAb4-+p
z8-*Bu|8o(Maj0JiS^4NyLWn$pVwp<4rJ`dC+cPHs{$~7J*Vn$fN`NL|;(xL<kOQ_U
zu_7jksC=KlXL0pzV&3-DaUEUM5AHgGgoO;bzi0QeyPY2F2OYp1zo>@_*zjD)3wONO
z_~sq+)MExa`;cuc7><V3&p~;p4-7nE-WHPAm_Y6n`;0qu$UiRcwZADkh#tLu<c(4q
z0KPpcO7N_NEH*z>bbszSApB_Gu+D-fw;DE&^_-2E-D9Z#b7@42T<gC7l&PHmKh{$F
zYW;dbq$AS^_68XAdOcla+iQH@S#pgw;{9hEsi1TQI^l5`i5cnRpAn^Br5Ai9ny_UJ
z%VerTqFFh6D0Bh@4_RzN;k7R5fh2>s7pgjj$tR)4!<_}vLdzDaCjn~b;$kyDy+Z&t
znmAdcQ~a&zr-EI$Wy*|Q9eL{L>_6fGB)%^N*r(k2JHJ>*e}vZ533eC0>REp^*JRKx
zWc-VfHXg3#MPnTzj+kmEBDVq7bp%>xP`AdPIN~H95$Ur-!?7x_gIi9xIb&Y&>um77
zx<cb5Ha<=agR!4S`f|Q0L8GT7j60=jy_Gm{JTjA#A(UG_gOO4=OY>awb==p7nA?N3
z^8)#M^B!^&!BEm3k!83_*1dO{V%h;!gGG#pq(-5Oz{AZ$w((A9N8i8q1+mNCzu(-=
z!NY2`J(h!#`#RImFx#$nTfs79iW0eAq;jVn#HuCgYP{XJAB&NZt_GPwe}&xm1;+ki
zR94zNNQ-}E%(9ek?P@G0!$1kiyY+^XSQLFvBF2*jH!ZM_lj@VTB+=ge_H1#6BdvLL
z<akITKS0l$hapj}7ne<gq~M?%wzy)B10vTljrwD=U$%BhMpBg2R$RFCQZU#Fuw_lq
zFBT9qwH1p&4!wEN5}~Blvi}Xex~GxaGG?Y?*XKfV=fnoZjFSFD+Vs@;wx)|xdv8W^
zLWZK1Mpyx>4UQRT-O?4A`T}9>+cZOWf?{C}f&{BvgXnQ1T@73Jx2MdnC>uyGcgvMv
zpnR;jVv|Cbi2JSz@09dBr=Q+|fWn`#r#QNh4aBVyK%4M8wGS}ko=2H&`c#$G1VPBJ
zqw0N~YEdhw3x~*&!5+SkwS7c-=42<iQd<(zyc!eh>I~W<yB3DzDhpk|z$|3<j>5#^
z{|(%SNre%u75)JY%za{Yvp(5E4gXZ_BUt9%p-Ji*yg~ONMmm^C8^O%OPx(P?K*o{0
z==h)9R1>X6*b#0~^BZE;d$8x$Q+5Zh-pQeNjTnJ6U%Bd?EoG`cEr6j2A(IdoQB3Am
zbRJ*%hJy^zeoocec3zbvw63g3hUv&onmz5Cz?K|Sb=B_!#nZu@$$T`rU~Fn}bhhMr
zr$had9J816|7dpQmQ(4hdIf<iMUu3>#6i?cWHjl@B3HuC0Z*w<qbP`t_rC^W@UyU6
zlTSYxh$NiLJPAq&Fj|mzM3Etw^xx8{Tl(UzZ^ZqIuM^M81oub~_xI-)+vsn###&0S
zx*S=V=d){j%2K;rOnTc6ynk0ykay^!AAyFNzabh9E`mNdXvGI)*c6M3l(>?wPzPoG
zhqE)pXQIyu57~J8ilYb$r5Rjw7cRWa|9mqPn#9ne`k%0czzP1V3ukT6+)qm*0wJHd
zaq>#dw;5EWFhxnpL(=1xP(2L$LwE5UJC>mZrozsWUCilBS(Lq1kBG36#5NuNC)I*)
z>h@Cr1+%-Q8^{%42;!AzEz>LFeSp|Q=}+sXRZDO%fj-dB^X!5{9k?oeM+~RGgTxW$
zVuPa{Sh7AHT%2Jg09>9f3D<;&#Z*fN%c9u<0JEf5IK{CiI6Od@q?O>P(mTrQ^$k)d
zD}#}QCbB-%dz8w_P(-xcGWnS(N{MR{ZIIN!TH9;x<BW9_!3JjWjt(nbdVS?JowKbr
zVKK>Z<evs#3K?&+aMcUi)t97fn-BFroD>DkZV?E}y<BSIqv<e8i|r$e@F{}X!{4J2
zvyx-CLb`2wkO2RSR;F@o7*725KK*KWX9#@+bsuh-6tL4}7_%nx`G13>Zz|1^wr8}O
z+%b~09{22y_YwR!GUD$cKW3+$B>z3r&}GsT2pKBCa{R>+^*mF-qn*m{N9*)L{T69#
z>$Cq9e_k|dLnD-&<Y-4_Qc)#CUWyTdq1yPiqh#u==Ct_+o%WB?5y3_h=dg`gIym%q
zi>DK)JLJ)O9Vf){ZLW>bL3by_%zK`vW4yuI1QB#08)bwxzwWR6I$IWjgSkNypUS+<
zsE*SRQo2w20`ZHN^a3fID(l_H<iv$y5$a(4ML0TX_j8L@COC-2{YdhPj60L{e|-t3
zzZ>iH>-nkl;e=eDnfjwoaez3V%XU6v_JKvHK-?o5`Qan^G^Ls{HA>Fz{X3idOhm_4
z>(x8HCW{(6yC_XW2@$3;M#++Tl_Yx8#JOWgs340!*!lDe%`~Pfi|lWQAKBh7E9s2~
z{<8q!$2!V_Vgb=@{!rpLiHF5vFbQN1_25<$dg)kv^Q6B-*(!<7E`FpS#R17r4*`-8
zk1e>PFm&FcJrI3sAC$t%Hv(SS29{7ddOtNrFFE44f<kc!yB;H&|B3hr=vZ8?GUR%j
ziu_T!9=KsU{#}7wv{YXUZUH>2`r(8U@)FdsNfT`}cT5lpp_I%zmqq{B;vtuqPog{o
zXkiJO{D7%l6d0JgK!?|%C{1;yowaHE7MK6^o5i!$1_8NXIm7}*nB~)F2Vix@%W_ek
z`Rk6r3Enhz?TxIAk#F*=Q|eW}2=tQyXSY!~=24R)S;?X}s1tnZFQfxM%sP-Hg$vOB
z-zva8BA+G-L!L#1XMg;SXVWca-mK(Z<D3hvZN9}Cw)VPeFAZz(B#I8(c@5?(vpd3}
zFuIT>NW$j3;i|M$D|;!%O8jJZ9OGdw1ZP_`>=v}J0T0MPELY&Y)o<<%OZNPC4gt;o
z>XM!<D9tk`-4ZYTgufA?vO~%BXkk{)4R&{uBEP)r!Y<dUI%Rzht++SOZ<x6`?R=9c
zI)N-DMQqI%NG)4NEjcnBgu%^X>mB5;hn?tTqHd9-wla|Syw=oiz3hin$}~*jLYzgD
zoj5XhDl=;xT{AStl}ym&ll=v;d8n@vdZ>2nAK@;db>FG}RSj$wM4IIjFN#~Ih53p!
z$R_a`pB3^$B$csTx&lgK8svop+{WpA`jUXevKYCXiU_D^YvvgCw*(#IYVYa&<O(CT
zs!tIe1LqTL%?!vT>dao_e}W3bziY7zBEf5<U1Z%Rk{Xcsvb7}9v9gs`w5FY5m)UX7
z(TF$_#Y*AE@D|VEa75ye_ct1lv@ZG`ERI@xF<^ycx*xYZM?nzJig*Ae${eNRyj+3y
zBB?Z(m4Gfs`J$a{TM~M}+TEnW{c>a}oGZg7Ue3M+HG>sEm54%v+tc7$@+Yc1LOCxC
zl3-ym<S}oeMwXR7qhctkPnGU;4G73ls09$VPW9q?m<jB>28xXl2trU~%kStQ9dT!M
zdKZEb-;Wh{wC1euu*dmgv>$xP$)8k66fya49_7*l1JEXzQq;5jp}wI-d6Uz}-1+e*
z!VcIn5P_2gr}`^idf{yg;FzZSkgrr6NhS-+vg47O&c`gPP*k&Wd=D4Bee3LTKFz2i
zNDQHMs`vJIu|AYErtg(43Rp)oSh>zCxJfExn(wsi={uwEY`B8sl%8>f!`I{ky<t-)
zQ6v*T-8lN|4_$ip4dfoRu5kiajNuy_e@!DJc!f-<MxxS#tr_vmB$?T|fAj{ka5mpm
z;q}F5CMg8KjVt(~dz8R1Q~*aY@Ae9AY7}+y56LSShnFujqv!N5^{<uk+(ySZ5M@t+
zMp2OMqpKy6N`v7%TUT8YCzEL$-FOq}y*M4zo}BSI_-{kN3VES*T9L3CqkZZ2+b;c!
z!+6SkxVBe+J43_^<Y$vimwBsqnHOb~Q5<aYJ-Fp?IDR4gm{sNUG*|t?*!P!92<$pe
z=KvZ*p`feE2d4quzyc0FDvQvae;Oqtm!AA1KC*>;*+w8&84!By3_%bz!{*P-GOomz
zAHH={lv81D)DtbEJNSl$x*0k{AYlU1w`m6kB?iUsRq0=Q&QfHf5Nl*DcK1<&+Yq0_
z#a-a;>uGCdQQi5kAC8t#DQGUZkX%zxop$>Hjx#PjswRdfr8n}j&nB6;0%_WN${Sv!
zY!dVx5W!c~Etgua)<M|T|Ix+<(5{;DQ@!+rtXL7CjXAQ7;lM3w8k}@|obAAR0*`6g
zF4$PXfQ!A0@N7syl|E^KPt5%(NwlNXf7XF|`$ZmJSfs5nbOLr?)1gb#+Ax&|Z~MdF
z_cS#WhjHRMg-gS-#H?F#|3p6ZeASMbqpnQ<`rjul&;If9Bf*&C=PNiHrujwtA1wOj
zYv5VkQ?5*jvTw?9kAg2*5Sj|E7{a}U%B5~v+sy<tW<gJX`(L`aMS%xpk)|Zq&#yFX
z(+Elndo}#%Gf8+ecT)`?edb0Zt}(ImJ2oU#2~X!1NwiH^RG31Xui8#vV3<Dci}Gz~
ztk83k>y>{e#&08;XE40;8)7X6#sPngqS$CjzZqgS_~yps2CWdZe!>!O&)~&%+C*ZU
z2H;{QzLNOQreUnj0xU(1IoUhfu{djstZ*MgU-)}hjpx9>6%K%sU^lv63=S6)o1j;m
zV+44`ddx-KzQ<O0&l+|<Kgpo*qB&o>opKX+4}QLBl`K#t6-!jbqMto85Bk(J>a>_Q
zgVOZ-c6)iK@Oc5WV7EJ;XB(u31nla?<5WM+$|z%{K>7bmdIxLj<~pfmz3kK0{GM2N
zd5NREjdDYd7@_zwDi@+Rb+^NOyA`7B5uV4h?Z#K08{g?TfX!mXW;kP-<S0`FaE|@J
zyq!gz5?CSch)WaDt&HcdxaD8J@c-?nixMX+J`5)}`c@w*cdd2$m7TlEyw#JcgY<_0
z4<9kg1_!5q#o>Ku$z0Bw@k^HAq3cSsFdJz8n|Y48FO{vWkpU}3D;_?6Wlk+kj?OK^
zGTVEkP@?zKMMHACgUSO11*I80cTZ!q2kBf8XrFHE%D#b?<x8+4wyc34Cewp2eRW?z
zL$|(h@Eg!6_KafZr)euI^9MC@9nn)-o2UF|KR8>r0t;!Li@BO_lZ~yuitS^X%pz+i
zj#C4YMz#?R{p#(gT;=u{T=>ZZufsURfxg6oYOeQViGGnmrO>gqAa5Wd5VeS;w`s9U
z9x(wXMKi=-RCPzflvc?7cju3?QH?TDPbfAxz9}st9(O|*g1%oRt;)Dv`l&I+ymEoo
zI%0aT7RB@wP1~NM?dzm`_(nhEzuCg0ir8Kzf7UcXnz^+fms*W1%@dId-4+RJr|URY
z_3CJ!ud<gg(3Yl)KxJ%)BCl1l|MREw2S3|P*?Aw|_VF(&1jKxC78vYVX4*3(`bJ-c
z)PC3-lHq`K^C>D)2P#l%RlJt#v%Kt-2FaZ7wuLCH;<{&pfg#XRw3MCc&YktA4#!Gq
zNhp1MY*5u%c1juW{?Sj*k<Kz1pncQ4-dat%Kwc*oaUMef3{g2;B5Y-iSeLL<Nv=ml
z8=f6GA(3LpB^?1!PFdhe`DL3irSu=5_8$t)!eN<<*Qku+lN;<Sir%PbXo%Go7<swg
z+r;Vn7=F!-X`PpV_|LVlw(_Cjk?bzR(kW}r{pQj%Akv`PLs?E51@<QuX<9XZttdSl
zkcUCg%B!vP!4|K4r*KC~=t%apN0$uy?@$Rlr@>PpHB|J*7>#u0dJ%Db7vtFjO(Y6J
zhM=K0t&^g>n$%VsduHhBoG-}qu^U&?ty=m5bC}uGlI%)CzHz;XSyXzm?V+8w9L=%C
z+{s9@Q7-3?a&ISJ-B1&z;|{n?=7{;ORiOua$hB!1`7I~v+JX8@nWv--U0&7sLq4y3
z(0BOlWwl5cWNnMSPwrgr>=&;Ez2(mpo^B)AYr*8HU4=?b*jMJ5Yp+;yjNarju-3n9
z%5UHcj9*mwsu%Ugb7{_YZ<&}PUZic`@<O(0y^(MSe{y1(v^CzB-h#vd$D@^>^ii=t
zeB{|QGrfxtoXjl3aV_*~C9ya3K0suwL^BGyXYut%-*iY)y_pI~C*%!q+L}JXLal}$
zDI>LyB;q5U?wn!{-CnpRBF6!B2=tEDXh|1LHv1i#fkddg2UAey@b(XRbtL9?tGPg`
z>1o1gfR&X4=1&$x#ba|@sTV%#u0mV`6E*+l_Bq!U7%926^TB<UK~|-4h5Ap4B8%Jv
zgy>l0=UK7mTY|ArJd=?1=k##i=9<6`0z7GNmbyLu>;N^s><z+;fB#aJkK7}e-Y+`#
zysGtyx5ZT=|2{F;y1cODgKs>lrHpGl*#iFna|Ge6-F3!GtV!pS3UNZ?B{4Dps=#~<
z1A`iccCxKD8{#D}=#E{X8m|mTM@sGE^rXKIbu?x=`%!&R$IZ&Xx(@{f>!-bEA`!Ud
zJd>fn-nY>NFa)pumYZ&S2&?CEnl3KKDa!tMpb)t|hpx_)WUV?P0#Rd~-(!Q8@h~E)
z%J?;cpsYci%#wn{-<YkLoifP#kx`p+(0z)aAL0SnJ=Zx>|Flt0!M+OKYk(PwJ(<7F
zEBY<fO}vy(Dw=7ICZuW;leReTThd5FsUuzkuWY{U2$w$L9C;luO=`hx&M+vkm5u5f
z=bC6BY-cP=s;H+7YBoIrd^glua(~C!SKu6II6I-0vz8KDew08LaTd({$Oy&inDL^S
zKdo;$8n}kQb${U|r@ODgvwu<ur|_+357kap#cOJySLu@RtXc5l971VNfm&aB1razI
zW9bk?b5Resi6-lvNfqat{*Fi76<&$QiQ2DHKhRSZV0dA_>pgigf@a?LFW2aT6xo(Y
zNf=Hd&Y#!ARsEqJ(l7N4n=RNm5<Q8{wqVX9SeR{s5Y)9w_^)uj<+U4kX%Wb?x6~Wj
zan8kmHs(PQZ70V!BKvGz={qevvIp|lW~cI!3373@?|-F5aQg^cWU>|&1ezLgIK}Bg
zdiq}TB(epelwB1u887#nT{CUfm=@LYtNh`n8oP)$F@cnL|KiGnIsFzU1?(M-L+J^a
zE|f@_;oB?X5VVvy)L$Ag_rk}Nvx>FACx4+x3q*H*N4$1d@%%1eFEyr$_RCHZErkH#
zMv-#R!5gShV%kBs0U<^BOy-ccP+1nSQTz<yKV2As)9Ka3ksEF=hx_FO1)%!rf#iog
zb7~t>ygJSf)6eoU<|U;guIo_+1Y))Qm0zc}bI6->X#nX(3ULxhpMhGlS`r7wgOwzS
zW@6VV2T64t<n7-N#a}eCaU|})TyRG_4a9az256mmoOTT1u7tZk{w5)W57a&2cU{gb
zSUCwB7ifM@!x|1-Jk-T{y5K^eJKXG2SBBXY&mMR8-0b3ob-~YJ^HwVuJXIhLJTs{)
zCA`=WX{c^z_3KxhbzlB;hsA{*iQ+`muA0U2t$oj{SGSVI0*e1LTU&>fKosT$5g2*=
zCgb7=u8OO(fX`B4jH&OW`a3q`mFdmbk5YWqsve!tMO3Za?`3}6u?h#xXc8g@*n@7u
z0$VVCzyfrOwTp$LGlT<up5du579ixdxt=R~>2#`b&V)zSGtoCG=F1Yu9a*NUdo4BI
znLp(5>RZKnA5G6H?m)gzM1x~6z}9KlUs4`NCozgK&Bn=7j1TE|8b4!O_L6e5eb8K_
zo>WI&aXr86G=-6VoTMXVAnRX@41V*no~R|s?XMIURBV#aW;{P<YsC3f3Y|C8Fl=+o
zwkO78w%y9ssK}Dqpeow?2>l^a>C6-hT7wtS=$M8+rURQ~N%2~jXOzD|3DGKvYa$|G
zMC43k17F&7)7KPt^Xrk^%e_;y`g_<9P5N4q#E4@-!hNR$z9bXn2JFV)Nw{~8_f&<z
z=lx{YX=Kv$+Er~urUwmg_xEWePYVMV^G35)?v!BxFs=EhVpkTej{RqN(ZTI<B`FPc
zgYX;8Q054$H8@2j32dJ-ASW7mfd}&<MJS1F*|wx%RC&bvf(IF6%$%7?0po<_uDJb<
z4Q%L5UC>pgnH49~qT_ETE6h7R1O-v--3S@@@y%sr;*MAnKIs=NpXEFzC7KUHkHb&w
z=yOU_Xo7nu#Fb*9tj~oT1K7vuu{zdzt1H-WhWDF~2XItRO$~_@<$(1xz3g5o7A*9B
z!?jbIu!><x76WTCatkAL@ShiIEBEfyVU8JLjwAQqT;c~_tkaMzg^NvMr-Ppb6R&Kt
zJ>MhSnDRcqyFkjW-WtP_<`>tOHt}23T0i3ZR5HCw=pX^)%RIB-nX-}?`09MZNQoCM
z4~nSevy}Zu&oxncW-aCIP8)%b^Ti}CR>)ND9oLu_p^6kb`ePdX1qO+ggYB1&KUEr4
z@r*?wK_Q%6*vqvoxws^dL8y33TY2~=q*yVjc`0Ml)jGWNIyCu#2z@T_Xa)CrCYL1b
zZdO@3?R*c6-jtnu^!0>N!(HOv4h2?+Rf4{ui-{03;?5G}1Q^6na$fU|RE2*c58QD?
z9bW@uYC06K0V=~7Rn%Fm^3J?3B1{3pLIG6zjz(88V04jjD=h#+2PU3uH+GtBTIIec
z`t4@u+H*j4x6K225;(y5WkYphJD>eyNT6v)rv3I}ua5IKpY%PBj{Mt#f`a5e&FUAO
z3SIzx!-Q>S^CPAS0`loohKvkLM>gm>dCL2WwK^mdk5AAdBb=rQf$9E;!vMMZN~qaw
zVnaufjM2t?i?wO_v_gd5ws^aFXm@_4g|2n{(HD1wu5&IxZ?6XaW+_MH;T3w5UZu+1
zE6Nn*X<K<|k;=?FiC`{HXZh>AxK!U!aDF#D*Od}|EV``E3&t$%JeVJxEoK9gBmy{I
zAkR9gmBVXS)i6$bsu>V<r4iXuv*HX;LxrLYARPr{@#7bjM{~AuJMl;IoQ(4e^63R5
zNt=Rdc4DLV&b*u{aWWu=i{L6k`Z8@p+)ukjl(S#u0o%A7iBtU>FfW-$Is<h>VH&J*
zRqC7b_SjD|sdk3D_q0!VtD4;(O_KuuJP{)^r3|GQpxZQshXsKAE98dbQBOzqTOT^v
zu)hr&xS;+y4BFD_)!;iX9nZ*>+BtJdyn*#??t)MV#JuKfvMt+*|Jt3F3{XAyX%F~~
z(x%9krZNl=gaJ+{Ap)YI)5A!+WMr%m@wLh-=7a(iIMv@3WTqC2`_n6u8K>6)9^v4F
z0VSAC>fP!^9h+Ic!=U=_aPCf;y>Q>lK1l?I-QMSPsuiJic30%*lh;MeQY+znl;p1!
zep-)_bJ1DkbM<5M6Dw4_hN@9*tmnVf$gA{9BILr9`(S4b!ifk5tU(5F#d+HBB5?mX
zQ|_xQ2d4HVcrR50<)#&uUO16h{7VZg*W#iz&*s*GvQ+&suwVR|IdN_M3Um_K<0d4v
zmYB)<9Q@`t+H#A3f#CEcJNMsTt!*5t#Fy_Zc{yXt_i>C*@*I8pC^IZ?s}|c)sH%m2
zm+}@OA!cavi-<5lwaoS_+aRnl6y&@1B~Zy~hS_x^T$r%%;DZ?j=3xp8^ylrjDQWKO
zco3)`E(7k};sM(H7%sWkm1b{G-~YWD`rb!STPvz2`*UD+72iwFv>0!$q*FnQZ-zl6
z<bIZxbP?N@SU?d%pwTlPPJc~q!*>yYpqj37@pqtvA3IEEJtaGiB9r)T@jcE)`Yb^u
zMb<c!w6tW1rJ}R7P`dMX*8iqN+>#`R)Z_DTJ?^~-fFoSDN=>K38dY@LtW+E%9eleE
zS5+>)5_sjGa`fq6fMVD$-#L`f2seJTHHmmDC!}X+eDbJ#^$^3b27|sRLpt}IgIqn@
z#Y==cB@qGNKa51D*d>{BMkSu;{{2b^`nJU7{t3Ys_&XTeEre!mi<d4mpn3WDSUo<A
zM8hM%y#X`Q??V|w*lp<KW7g%RkFUfH+Ws!-$>Nfq-*td>=?8pVCX(8o{EF~j8Wa75
zvfo#kfmC2=*x6!=A)}wZ#SeW{3`Pr%FYAk)@h(hMTEV1+gF+C(IPj=s$C1o1p(O6|
zm>CORaT0!xKO?Pl8T7X78?YCDdqmB>*71pBq*i+HCb09tI(O?av9>KDVCVAos84iQ
zLA_j@(<jXm<a6VtNIa~LbA&CI3+}KHzOA7xCC($7*tN#WRIG{No7mbZkFSTyD(G6f
z@#z%gR*!brv_Sfo&X#!;`dyUIGvJ=e@zGRlw!D;IV>$OnRjRhKlFLimUwF}D%P_?I
zN+Yo2tmD}s_Gem?HF&7)xvBY!U`zj`KQYANl^OtW!;N~Ls{T?W;3nciZqV(7`Wfsz
zx*ls>nobN{om$Up>#Rrubj4g26hnvs6F4@mt|f)uwt>Ao@WR}^hKRSF0f-VN{Y#a%
zU#yprLYGUKHL+%$`kn$Sc=g}Nh|!okHHZ)SB^d!Ak_!j|Sg}e6or7G+;D20->^YhP
z072$a_Uq_939D>a4BD`W{btP`j*SApk+5c0oMwJ8pWwC=Q=1FL=zNDv!kA>oG<`BQ
zkXJa7Cgcm-KSn$lX<4#T{(f8e*|3K$niXazoGpYYVIPbM?oj^pk{)WiFm8Q1CI`g|
zCLfKf@5%o$hQo2Gg9_vY0khJOS-=7G-V}DR&^E3GtLSWq5+$;=B}Rx>MPlQ~EK+LQ
z+xGkM@;eBdWjwEJv+!l9X5?bqY<cE8GEV$M)k4{kbd^9J>Lsh5B-33@eIrN|L13zM
zd()3QfFlkdQatFfX7o$ffBchS$+lBffXd0SXnL!U3`y0NCT(-R717C(OUMYBXGUZO
zgCX?vulRqgPiet)hw5)c8ru7V|DdD8-TsFD78x(KVn5FOR>c2G$tzfzusKG1e%eLi
z<U-b1AK=WS%7BuI&SEk!Z;8W`JW)}>97Cl6oHo>PM}LOM4L_(O*iNNkHjIjIuF6+i
zxZ><^2P{T|<DV7r5@!deTj|A}gZzb*L4rYlgdt9x8xrw=Dpg`LLP<Ih10w{a6dbsL
zkY(joWr|tHQT}u9;V_?qa^YZUia*1xD+oDze@uNA2)uKR15U*$cH&{w9^H_hcb`lI
z!T+Pserz9bl!9+4LQnfio_qSVTeHWc%40>=><<i4)O1RP7iOQgFG|TeC0Nd*LLTNp
z6`=u*jI%Xt`mu*(dFO~ap%~`^)X|=UyYTZ7RSCQv?stZuy95G>?NMy)G)V|*EvjSc
zTiE6^YT(I^$yU!QkGt8R==4pteUuw-qogi4+yDEl&}lg^dgqwK&e!00r4>c=NO}x_
ztjoZ!Etj@<vsA9Z;U$Zk#MT<4*ymyS?_MdM8P>1Q$7vQtay|QE(On2M9_Pf#D{J}p
zeCqX?aJDTjm(qKwm_*LCF5i{hdryK>14AsknDomH8uBsAonM+$Mn)cWsnH?SYoOyw
z1r`cYwq!hdT;R+H7C){{ZfclsJ%W&Oy)H2{FgIM?+z^-mG_$vJ$vPiqBxJIi&*#(%
z6M*#1N{5VJdtk77P6OkiU>s1=IvIVZBVKetI01Sek%JhNu+XKLZdjx;Hjfr0T_|mD
zQM}XY`KViq8Tk9H{;6nr6!^VGCYe6d6qSAuz{4<hBqhfpnXoNn#XSKzI0kH^Jmxj@
zwY+toRCyD71p_f)9t~#yLM6>C^ctnT=Ky)I5yLxm-pfI6ElKToISnnCx;<o35M8?P
z2O@|gP8=Z`9#|{y7G2^~Ffs2nDaRVY&udmpfhiJa9j$hek55+47jGV=tw^S$s?{zk
zcL_yT3ahD~>GDRiRF>yiZtgE_DK9NG1lsJd?z?8E525s(Axfj~&toJI?wzE^qg$5v
zA=|bmd<m*0G#kNH6SS+CM(IqQXJ3C;;8fG6X?}5k#^Cbm>-JP2d-<=!ADIvC)ANXA
zurw2V7a3KNecnS$R*uJo;O!c4V#@bq2_i{>m|$`Y@gq>Eymx-PL~wpc7zrrxBRf4*
zq}x}Pu&~a*7bAT;4s~<#W#!{&{Mbh)m$Y^&3tMgdSy_XYt-2`J7E82kvT9F_AdBq)
zyB-conW7|%k4=ANVdR+X;pohqA1@*lrd3F?zac>k;O2@6JK7~-_18`x@hn3t*lG*x
zOd~R0R=og4$clIYltRo}^gF4dxJlKE1-5y};>wKlYjM5LhCd!&e!BO*f>mT}Io_|U
zOgR6R5*V6tlREen8Q&D6@$2cNSbR0-@5`B-V>(w_N&gn{f1iFyEQ^Z^(mm0q4shHO
z{xR6|AAhf4O|tY8Y;7oSLa$!hzef?LrB<@HvpHN(Mb6EqqZ)S7KXYHNXc%qZ$J=M(
zu8Tw{&Mwqn5BvS7YnpIVfCW_h)Tudk!e)1)*nX_WeOq<FP}HE7xA5JC$J7PvUZ_a@
zzv9@@))gMneBLWjuVET8aFflOIDhWUR6R7hXd$%RjenT1dM9fvXnU%s;)$DT>?4Of
zngRAdt~nx5`p@vS<Rn|{5qV?P=Ca=eIee4#QSqlr66jYs>t=VK#}^v@@`i1)j5(r>
zzXQ8yIN*~jG&#MNGZ#gCdT#kF9Lfwt5Vo1i&_**vEE>G^{XEIeD#|>1oaIGT35NN#
zO4l^KDMM;2;<};Xp=rB%UuB~4elkW&e?8W=oT!X$(M-w35?Fh2YRzX%8R$hLZ8w$}
zixLi5akZaRLJPtU=6bs4Km*Eqlg*mRCvXV_n!ahcOVWBf+6|co9|H5fce49oi`HbG
z!AJR<g)q;mNm_L`HfuIB13mNUR%b6}59KO7Bq2b=)n@L@A#ou8H3%jt*|<l9#zgpa
zdtIv0zaR$>7P1iRUrbl1z}g&#X0Z`vjaJ|>7jvv_^hQHoR?++YUmr&_T$NdmR}Q7m
zpeg8RWEs_+XdWnz^O!gzT2qU2tyl|TVS70HnHEd(oy4ImD=?3e9J_O%8L#XU+F2ya
z&md{VUtBv#?}%VX21eclsYvQm?$XhzLc6|Gy!QMsnq5~g%NMSw^`++>(JF*cD#L=a
zVYKp_-#}QjPEIK+HiZ7C(<2!K6X0_77Yq%R{X&5TK7+Tkx?W{2x!#vAefSGQ+a0}K
z^h#r(De^TO!7#ir;oRV|muV*kfQSmh??1}@=BM54AU&@^E}tl|fS{D<G+rP5<q$dd
zUTOK<S-}8Ga%2_Mr$MY0trzYtdO;-jqa%c7;q~1-MLto;Ehdr$LD7yg%76~CdNVPG
z8wjK?C(qdm@Sbz!pZ}BsmPhUg`}hrR*tWcOMO&K)KVt^6GX{S0y;Ndp-C!cQQ{h0y
z?KXZ^rs)95JO}e&FS-8K0E4d`fI)xN7zw*`b#C*i8iy=xspYEz7|^QRNn<Yy03-W`
zd!H+W0KHR`9QL2LS?@h1h&*Y@BUjp!{$}B%rIaZhIJEi%b~<i)|NI5Och)hTEx~!F
zA8LMKC$OWrhr|!eBjZv*Q*i@AvfFt9hCE7M53FcaQM$H55w9p{D$;$9Fd~YAhP)Be
z7~s~-p5N&?iIUd9{br?o9_&w4JlW-bL5vVDq8@RqRevY|+6DCcUwelJzLx{ZNL|+%
zA2vQ!oNWP1`fp*P!okx;dWJuq8ltyoH!+^|Q+xt|e<|7G*z{I{d1Ei;O>dEut%dse
z&%*q>1ko%hm?-3%RBkdVgj`d#c|BE|sI=v!)fH%cB3XXPDu&Rfux^%3@0Wz5%N&TJ
zN0^$JveB`1NW{9U2m7wTk}8Q_5vB>Mpa2u`3TjbC!OrJ~16munwpM?6{GJxRorIbf
zO&EGnofq}Vl0=gK<Yi~)o_x0{2fm@{0Ze>tl0hR<;xbw+xaCCtwC9U=GMszI%P7j(
zSru(M1b}{U<}!1wl?{<t-1LdRq)HB2u?vvQU&L=AY4w>4_zTqtBs%mfy4$)zY8TWX
z*@C(p$65tic-UQ3<jj@5ups84?{!5AZT*r4>!W^Girq|fXUnyk)6G~MPC2%$X$gcL
zZ9g1R@cenxw|o0x#g<qR_cd<miMtp^Z>fX0XY3*%MfKZ;VwT%Kb<Dnyd%~6k7VOXJ
zbRt){ad!IyXuo8%+?vQxRk3J%EXxRzG@f);X@r>F%e?CdE=)Sp_Z#xS;Bdbg2P)LA
z=c;Yz-9H$HWGi2C2m8FZ<o{KT2R>uO`!<h(U_RyA^H41z<*2?p+=Au(32|$^Oo%jG
zEck)8wjczYI}V*?)S$K#8uCDE+60W<$773iiUg8|87me9xRsmgqyKdqQOM!phDc=`
zV+W(teN$vaywKjn7X<-`GBCg-%B?6RNnA@{G(D3d+xs__GzKTzjph<XAbo7NZ0`bp
z?=W!D-A8Y#O7XwlXwM{86mCf)aFtZ;$=}RS5Daz7GeLui0AJ0}fzRW=pT>{hfL2nt
zwXg#H@9`<#k-Z&%afu0IPZs$tQCQZ^{!uwk7a%{GVaMG_5q)X#3loNycJm_9Y8%yb
zH7V?mRT%VPZ<<2&yGSX+5>+4*BR-|K%Q^mlosQyJ9&MW5&d*xyZC>d-{{00oS*8F`
z3lI$em9^+}Wml_Lk-Sf4C(g`_K>MZWuN7Rwgz{vZ`ooYzB0vNo33{Nf-2-kQvJY96
zrmE1=IOUjbxVRs3nDxvxsmqf60vYkINH<hWwTr+ifYlX8p^E10$zTQNB4`2Rwq;MB
zj?w0Lv22w2iula2rFe?OI8>h9W&aCFw#K^c-AQ#!1Lwx@o9@p{d6Rhsj4>88<9y2#
zZ;OnjBzC<VXxxh7i9193HB<9tN%aTT8_ezmv#>Rb4HiP@8}sh7=K;xWy%F5YL@<jN
zWnWAq0gZJP!C>LP6(svSf?Eb~Y)i$e&yc7>gP|(gAtGjW#X~zZFpV-ETjK@ptIu^A
zG|P$&gMYMdRw^3*aq6A`V}xdTPp3r?a=zA|1_7WiD+Je%%tE1-dHkfzB+{d7)mD0M
z@QwP%OJ#VYF*DKSV(N%ss+OmL^~3Pa@hHQ^4hF_B3iradYZa2kFFYKn=jmsDTs3st
zd4wKBCinR_rRPK%|DO9f|KC&3qGBM>4<iP`5Qr!d4@eM?GaKmhI#3sV98C|{`MiVb
zEon8Y-O=KvRms+8r1;9D&)HVx6MkjscJ0k`R+5h}`f6^MgkTtOmZxL<Ik6qG6m~hl
z5`66n(Jz~eG{=pYQ>s*j+6s166<7${edgzNNvvkKOB&b^{W|2iDKAyR%=r`+O)ule
zxBB|uN7J}fJ<`Ig?~@=)<gI>~*M=n!&{k27`SOIr0)Wm27uRyh)kaA@^4)+KMy+Xc
z40dDh4M0FuO5OL)njse7(Iei<$43#0p}z-5$nC6%%Uy#Zpzo5V*D}Vyny7#^08`lt
zjEdu;7=s$iAdG%-Tt1%&G!7i5HD<wvMAR}{<U=fcHo6OZEc%XmO2^Q!!!oV*yyWE~
z^#c`1ght)AtSyyy7abYzIAbR`2fpVY=E_DkH!-X>UPjv@DGHTC^=4vs>X;xhPCb$8
z4zaQNGx<>5{;i59I|(V38vY_v!-)sgC0(g30z>T6Yjbh>maHzDv+qsw;6c8^(~+r$
z_eO%JpLpS<v&*k&&H#QI+}ArFmU-!4W0uxy+fBZNIxy^&R#yaic>&OIu}nfN01EUH
zjoQQ#K;<M&<ByCEWTBK_qlFY$5zKt)Y$7oxkbJv!9AEreMle$0GZ`L6<EoL46N3}*
ztW%$1m{xsF8rV+AeD~se+RvbI*9{YN7GoJqE%Gevs)yVGJrZB}mh^aFf01xr5VVGW
z=s^_~dnD>%5mI;^Ufr3dQH2tcNuM*m)W2`*Ns+U(<dZKGpfU;ToAbqHnM$I%383nE
zNjCk4jpwe*vB=YYs_`vF{?JCM=Vm=A>B*yYO5XXT2{%n&n+Z0FV#r}rMo?2bGMkK8
z@%DpOUl^<Qs|q$+-8xm@P<1F9)gEkzUG9sFCIycweb1hASU@@sx>iJef~GT-3-C`Y
zcM#^!?06g1XG*=#bZEaA)b09peClWb$@#_00#o|vfefyES?(*a19eai0Io~puzwyH
z^e#2D0ysaUn&?Gs%7$x`kVqJkkK}uC$h$L3Q$*FwQWb8U<Ss-$iE1NMp28BJSh#Vi
zS7>6nOY<fcWlYpgA61h@|KvD0x5!FiU%Vk_A6xDJ$NWnvju62tjd+1%v?3#Ee#Ftv
zMsNZ0M8`lEbI&_v#dXNiP!alxIixI<^M}o$ZBrQqAuEIs98!=TU|PvYa3sAMjZ$<v
zN1GncKPFMU$e`V_Bp0QuM~6XWG>OZjfNO6%P6Xjh&QvQ0tAJ@ZFetSxl71Dvl30-$
zW|D)Q4fC3K_hV_Wr!BodOLT}LnqOT<isj9Bmj#T_r&)fkj#^(jkkltvT;iumh@#nO
zd-aYkX_!tyY)?uDv&(Cm(CR|ntfE_INfT9;2@*z#-|VJ5o0eXopiw-jEG$SlPcbP@
za=Wr#<;~4@2YADFhU1?RBV?SI2b{CM2V8T^Z{urbbMd<s0y7~(^hw!5f%&Y(olGqw
z89Fv}xHgT?`<Ta1nyI{=w7PX6z6Vb1v~XBT2K^N|9Jx}_qsh7X0bP47yT_0tvSoDv
z$iPB2EKJPlZBGYi``|kSIQ?~)=>3Wg!@fVX0uMsgc6@(oP=P(Z`eVmGQ56z?1y`hY
zGs2N;<!?g14T{fXR$*7`eYs>yn&L>QOOpLUxr$KYa-wqP)>$xTIcuJne78t%Q;BO{
zr3eG?j&;Z4lB7Q8HW%U5P56<d*Pb4sIdMDS<}DPa2UQCK0%93Q#q((cUBl3rp^$3}
zfaRLZPqoyJ%|FIia`x__2(#=`l3o!H4H0@@Wrny_paPEKGiYA540N9NKpuK%=6fT;
zFz*B2H(K}<vdoOqWp2Oj!8i$3fC?+@JQtJXo=nZ=MBH*d?G<leREfmQ@T+;`i)D3(
z_~gF|=D&x%4UNy7Qua#_Hs_P+jw^w=w|rA7Gi?1!2Jf6notcTgwRtJ>5;sJAwZ)h|
z%Dv|49Bsch(z_dJ21=DXOceqFvxv;eLIr@fw~hPyghu<dt4vUcnf2QvZEwNoH&m%#
z-nom5rorBY%QcSaknu2q|8f56oBl=a>010dQUU7VWx@T-LUWfaPB*`aw4Tb7ZBI{2
zC#d7yC%`IgdEFllE`L}x9lX5ZT=P>r?BXTWTcLCJ+$(%f>5^N{-*NuN{aaL?$^x20
z+C9`JVWA~R8@-nQ0t5ogFoI9qt#b9<TI8GMxB}wH!ops{xLvu1e~YZ#F+jNqsccqL
zgRJ?$q#AXI6{)v#_%_sPDu5_jUVR!Y7r&s|9tC5V#SR=f+QhjgE4_NB0*z$Lh7n+m
z$%PKoh3D5X(Qvz&Ck#9>0+e15bu0myHM(9{&Ug7w_tAZlNGaqihUSvh*sS_W^@U0g
zL_Mc^{en#&{q5pPiDpkPiIlIJzA)ZL(XsdUFWVS>F0S;>^eNq#=#VXA1nZwm2J7@r
zSl~P7xg?;tF~o!P{Lm*R)ns&3p~TG0tpIcT*_716!NL*|kL5E)lpORRG+!-)xjZAc
ztM0ffVYo?^vwzSzL%|U~8ztqe9yX=&IPi?9cj)4vHU+6T1Dkx9?(sFTMcf4$>kIOI
zTzjADR-+E>)p{eBhXb!Q&;uC8U$TDQW`67?;~07^thD;|O`<j(w#U2gj&*yd{%SMH
zf{nO7&zpiyP|?%unpMnAKxE@gqs=a>eeb*u&+e?|f<#v|M(BIj64ADv6#eSL+XHWK
zNCmcC_5raTLm#i=%4Hj{-P-%wA8;#s7W`)gU7}Zg82?Ajq)7-<_Fx|^$}66(qDai>
z7^xQ-x2_~~-gw&va<1Ks$3Mn+=My?GDt@-fVC>n6>%k%e!YRw=w>&GE;eSvy<3KF9
zZ>KwT&BAdFNo(rmL+$IntnFxd$?UJ%qCTrJInp^q^by2324Am9-)7cD@8!}T2L;5!
zkXM>sDqO7~_=8@pZ0aM@#lSe<+BF%iwz;!YzdVdk1M~4nKfGK~pL<FU+bJ?REmAz<
zE&gxc<y4vGm9fZ&?o}1T#l=0#9r;6z&&j2?-Y6+Cv~d&piv0>46k_nS&dHAi%Os9)
zW}i7$=>2T4Iyw%LnC=7rK-JH10lJiM=0cWX`OG7Nj*&ho2FOdja8dXlecx;t@z?4g
zsf1fH_th<so67E@P%5(a!zftpIb%sGi_rP$ID2WQ&xXRALH2kho=ZnY`lc~#=K$eh
z2UU4hX1r+M;LrcLI6U6U{~gwI6}W_zE_0ZbFZ*n!zIaV}s%@19848<x*LMqxc$M;<
zl!2F;6o%i9&0{jO)v68+GI3-h0z}ewxaGg2+laka3rsRG%O?EdBNMYB?-Kar67$x!
zh3TiiM|e1K#4Hz1&estkiY6|(xRDhhicifm%y0%c#LDm2L`hDax)M2Cw>9W6xVwvm
zLCH2Bze9=z@e!%JxfoTGD(pKyh$@+yj6jo|4Tf2uN%~8E4uv7L9_=Kt3UiZ;Yt1)m
z#D6_d+1C$g8G8R-5aKFUxyvsPiQRPGcMP2T0-L=HjH-X&ud0$#SgK}eR+EJMJ$~FP
zKL7BmQ5Wc;U835ry{>7G?j-l_Dpn(*C66wImC($`Wc{9KVIxI%FrZL!^;NoU(79M0
zZ%t4c*YS6zF?&&wxvyR$tbO`N5dqsHJ1aX^A46Z5nm*(Sp1d&E^=4<|Idh@GA(e19
zb9Y}%4aej*d;jda>)(P=qB_i(mi1U1O;P1U;L4AJy726^HxSOK@Zxte%R}-cF8zhz
z_(B`;^3yfAmllU{h2Ga5`exRb=&~Yb@ca1S@K<#5181K(FU{Ud91tiq;N^-jY!~23
z_E$Ig*wD&BcKHPNuuwaK-1jx94b)wu``5dqkyf_}NtutDTkU)_-tbX6dWcLSZW-;3
z;S|qS&IUFkNhekOYl5Qr1D`?HaA*BYa-{Ydd_yR4SIKr=f;LVs>^Oxs@j1UR<{|=|
zkB6A!R2RXC79yU{mYz9?`x*C&uUw5=e!sww9v?o5A$2Nhi~A})=>vEcU`Z!h)V_!3
zhZ8`4zstGpA2N|iQUkkc|4ENHS(=t|Ir-f&HzZ>Ot$9ZFKLK(hjoc*6{4Dd8E*O~o
zPTyoWR;%1dxbdUcH3I9yhZ+({6~&9m6q!RP6PD5Kk`tX*JO{qwk2qF7kl7?Zv4T?j
z;@uF4*BBrTP6o;VxtQe22AN;Re%$N%9oh+Enj^ET?2oQx8Vq)Yw4|7AEi2mAkwByv
z2!QQTXS}gMl&#va`?h-ONVDE$I*S+iba8TFynEr@5D4vwY|!8|pa^8n`P^gwGNUD|
zjD6^Khmt88j%AG{aMRl4F{x=HlX?=!2l1lAPD0DD$dBH2OkTqp5PeVpU!1WIWU@G|
ziiG>(y$}f3zG%?kG$1w6=hwNP`k8O{Iz3K?rA!c7>Hb9#NNei@`B2|vymcfHPGy4p
zK^_o=@wg1J=nu?JN7<}gi>#OCU+1%2QONYf_JQn$_d*~P#o3_2iQw$wM#W(*=JT1K
z#=VqsDKh$$3d^w^a)J;nC@57^2B{%|Kr&wX$<_x~B(x02FdgLsQ6@;o?kS{c8prcl
zI+-+4ScI#qD}MbC8cu#_(BN<O&ThwP7z)C)n`0a|!H^Q7xFmLvf}$2~_>s6kLaY$H
z0Pp`SoUt*x;))9vq4oK?Z3U=krS4{WJoe0g0<si`0Xf{;#2!f7Vg6`YLC6vr(<{rv
zNA^JSrcNo8DumN6dmw52%%3KDr3p0jFz&))37J_xre*Qy0}&5I5X#`=I1UgH?>9Hc
zeY`b8)Dju35yzXh-rNe~E!9OYP(VPA&&&r2<6)3~ua(6F5>pEf@g(821rGs%hyFiR
z+6sbjM<5I9a=9!aoUb>RTy$Q=G6WAqSBCgfkyo(Pjey7mQU-X(<6{ESkxB^-k<mnO
zKw8*ls3V*v7dDT6Wbr@*p$v{p7{a=QvzsT_p?pbz2V!-FN<ynr7%$(!DP2&C+=f-4
zfH1#RqGJYOOusjzb%W-y*lCLqWOL_b8-~mO)<`G_!W{tzeYk|+{pYRgy1F~mfSQJg
zD)Y(qanB~-ZvuG>Jxf@kfSl5Mol9*~m^;E0jUlFKYeH~A-OY!|xwBhV<hjcPA_!%G
zC9EL~ix1u*ksDdOpdm(4Y=8ji3X=19iyT2p6p%P`W^R5MdTW%fG#N`R!kZDt+ab#2
z?EM%nGJyy}8N@n}ae#^5%}Bz+LBd!FLR9h1^zhGrx*%nTnUp9X$wL1*g`Ct5>cRKk
zrb4N-i?@b}K6Rhn6#N=So<KxE1fd9yFTaoDxccRMb{$;wnbo6(fN0haMJ68}Q~R5f
zAVqG%Dp5eVj_}sm9|dB#W^ZUuhKTAK4oHim=-s@zWm(tpa*=Jkf=~uWW*x%ne7DVR
zVgW%TA>!PPt+eh<ud2vzrRcH?s|Zd>Jn)!ECVDzYSP@aO(6N2bP20u-;>S^zumqtH
zI63t=pb%ua-W&@^&D*eI7M8WTLYPTT@K!r@^I^2aUA!d<2=rqY$zi-{6PB`udQC*F
z#;MbKMj7&S?axaXcmf$m5fDKrfse-#9>@|r>j#RhXBZ$gmas^pPAV!$+<p@&I8L!Z
z0Rgx22h<+G12Gk8WZhVJAP6%-r|q=4u&(TZNR){nlmW67Ls-3c+ceF|1F89v(8NYU
zW%jAnHZ>CFIK?9Sq{<W!yy5YIQJ@0KkgY7yH%mN!Fo$lMyKQqz2n)|2GJyy}5%BN&
z*8v9!@%b?ZnebQhuq7P@L?sI(rg&!$q|EuFPyxx=nb`?R+04Bqv)33y8mhqoQO?se
zdA|<hdXYjYK_~(Q->oYPi01+1z&GB<%TU{Bva~la(c=NKSO)^Ke!SZiMv(%N`#|ul
z_?BFBYZxMpLc)hF(%f+lWJ+0BaM3?L5Cq}=!(qH*jN?6T6Fd-J%#N$t4G|J6$n@!w
zu~#aOAg4kbK?)R*)4ScR0VL^1rSNfr2u=vuhAlHpAafKDx2&Gi+{FVCgfciDSwGfw
z@jgs$o=}NiV;^tZP*rJ-HLTzIK;pW1i3(DnfH1koI9gz-S`2aS1_P@8)?mj4gL5Em
z+Yo4g4<xdLB?v|Ea(u}GGORvqn{)G_oeyk*G<8Fyv?ATBR7l8=dn6;}AjMO8E_#6i
z@-D7l#a=?77>uK;M;xyuYbiDovTxQ!7Qe<g_j|j9_4M_Z2Y;WZPo6ygJ1=|k`fd7$
zr~LHcwRGPKcg&F$B%0_OPakehaqf(@#OMl9Ci`@|#qLzz08*lW;JD8o<Z~d3fd^vA
zR5n`Z#N!8kW~Qlg!TDtv!g#s2OIXjYt{(sO{}eUnkN(Qb-d<f@v8FuY+VuR*3c_77
z#zK&AUc9@$o|!{iH!;thls2SNrEM-G+~rlQQ-LQ53lxy_IUy(btJDX=C}jv?in`U*
zvViax9JI|l?-9oP^}Y%SU!Y&$`TgU^PydyGym|cOPha-tivKDL$aDU~t6$%&AlwD9
zJ`TJ0mmln1*>clB5Hyx$OTv*Xq05Wp0|m+viOXQ@Bo&T=O2GpU`~(005zNebEMLM<
z7!YWif}m?PK-l(d&-A9LKr=;j=az1~*lFB^KEk353&EdAYgdF-M*;zC?gs)KLSH~W
zw+vdv!jBqfXJ}=TdcqR|q%>T^`fu&rds^u8-2JBr<Xnq?^syvFej@_e4OT(nci<6d
zAkWdtBp<%_NJ0kye{_I9oEGFC?;rz_ZoIsRRnHo%Iugh$u9?7Jh&li$iUk&JNr(hu
zc1-Y6G`&;|KtvZ$BlJ@2|F0TI0~UxXOdtd%5DHcih{EpzdtpJ{K4>80bRq<82m&g)
zDec@1=tK`>-Ay5a(2_<S&9Lf6AcUfckowSR6^n!rOE;Wu2Vf$B;GXFDa5x4(_ecM4
z2GVH!O9awT1fuX;!F?bj^un5W9!elE8=#$HS2ut(U<HfK6pJSGnr=y0O9H`v^~YFp
zM_r_BWfC}Toj~bo=OHa&c_Pop0#~pq=Ej@2z24N`KJL*mV=?7BN@2qzKQ|{|><?<g
z8Gk1*e}A;Z<^Y*M4usB+*;6>92t?uU;1R80MZ@t(2+vDRwBt29=%q+zinJdH04ERP
zjg_FPGLSj|hy$fAmcFPCi!zWvrws{pr%PT~Sp4mI>0mMf4Lzz_26CNgh;Y7h?D7pa
zu|^1eDRXES4T&e3CZ}WjCWPxTU(^^ENmk76KHaf1D8Hr$L)jsnxk|PJx$<{r_<Ige
zh9J?yH*AmTVqh_!A)Ie(AR0!+09Ac6Sh!O`;RIe-{r>1FXdoX3D587jLnM$6*yN#|
zJ9VP7gt|ga8_{b>Ae4Zxogyb7h@jmz9MC|zfr*WT=w&hxBE|hcBIqir6oD*Z?mUlQ
zz^_w0Oz!ab9FMOXgfH;h7w0n#;Fb`Gn`ws$q;Xly{VqPwc$2}PGkz^Sc#mgZ&^Uxx
zTb&5+w+Q5#0uC|2Z36K#y27F33+EY}nbDb}1VV3Q^14!4iNZ+;<oPqw(1+LvB2o{w
z0|8wWI?;9PB-HihdI_t&^5d<knR_h>1j=|{Z6+W@BIL&F=(wR&*D-^RPF`3Kg~-z(
zR$=w~{R$BX%(8bre$BKjkuzt!z)3b-P3<>0JHwR(=G)9aOdz2a+ZPL$FWNSIo!Yid
z7cbX6A|ZZZc6iZC<ZCs2Jr4fDUcL7X-f;`Vu1;i|v$?-IzknMTjT_rO*Jki4pF)>o
zhVp(_gD2lER%fP%2_)GLwzm<ig2FEY_~Q{SVTtij45$o?5)f=8bPU5nJ9o0LkX~31
z>Rg6ZLjqYz=!`a(VFecMD5dM&u8C$?v?HPSKAnJ*Nfbr>Drq2>IDsSVOJB~dZ{-C)
zl#Bv%@6DQPo*X0)Uhd(Go3cVoqwEV0mvo&O1|Ot2I0E7c`Cu~Bc(kpd{iVI5f%IOk
zLeFRj7pafWP#F6JvL7s;QeEl_r}4r91MUbCkUSNhhlcI|-Rxo;NXwGu6-`MYO@y3P
z>X?JnkU(BNW-DHT>_bNa30i?=SPl>f*72IuNGK-g#yjdqAN$oJkj3_bmS1$;xzxPf
z+nDrAGLWQ%K<KKR)~_gk*+;D1$p@K)W?G217lHWM4uQNWufpQMGP;vS;=p>x31rT}
z#wr0(I1z!M7Z&`_A5SJgAZW&mb3&)<=(=IGtyXirC3^cY@kedTuxdykQvTqd*hVOA
z2?9t>4a3l}jMs!JEC48IVlqTG-Ut$q>X<3oaz%*22?!v8+<+%?MhSsDX_OEM@xk3;
zRr<np-MJ5ggz`atK%Ur8-&sgmhZVYI1d_~Q%mt3NlSZJLf1E)0tv>$I6%<ZEAkT42
zbSU6Y1#}XEh7Lcl4Ft=uAo~acpb+XtZ}VDsJ?W#S1cE;c5gqx19NitOX@N@SbO2yo
zfFg+SXg{gE-~U*pB`jnJEnJejAPFAXIRnXr5`?1!^71<b@>2e`w?jlWS4=^|u{&x=
zQ+ThW&K6g@vgLHKPar;z88d+_Hd3qX7=bX4(cg(OH&HlQ1_EVR`8ZE;CA%|_ZYFxy
zus{NFj6iN_yJ4qTQ~szUfvmi+)&wG5Z2%yF7zT*wT^&3Ns0s@hBu&R)$J>7jIY_@z
z9rUoEiKTOG3o%X4#|gwOClLPZA98B5QQ8$Rv1F=@K-_|C<Y){x+$qhCxw5MmlL&;z
z<XDdp2nBnE!KxZwg;Np8Q)mQ%Jqg7q9f%Y*2ErX4P#y&hy=k@d7NOZ<@w~1QdMyb=
z`j`|ZXrzDu0xM`CgLKby(}67ssr*7ru#A^P^os2VGJirvy4RF}T-pT|Cm;|!mo(<v
z9N@!LZ!;T|5Xj3C0wKYla*f+90`WtB#t!!hWO<B0c(p7`RA-^W$?zJyi*QS+T#P2z
zO6W;5MV&<Sc1w5g6DKDixHSaHs_+|SrdS8C;8ko%*diU>vaFT`B070tNfDjAOmZ|+
ztX3b0gpUhD_V(gGFa4Af$nu8>B*E3FC9BefK+l65B#?vy;Z?A`fH4nonLt<pFT&WA
z+gXY^P9SpWEQS#k6iz}Q{b$dk2+L>kR6InO*au>g8?Qm)x%AI#7mb89UBs#*fxKeb
zYpWF<%CMZ4j^81jE@>dRjf@Zz6w$}j2U0;ZMXaaYQKWY#Z|+2AWg$FDAcVJCcEk5D
zNfa%6hcghasO9(A`-Y7^X*3-2R$yxl<Z83C{5XNg_xh@aSK(9uy)y!gXh%X1y%Yx~
z%n6u*I68<Rv;!UdloH6})dH5XGN}h1^M2?I>C4=DhxK_@V0_Ze4(1?Og@tvz;~`}r
zRT9y!GZw44%VWxOZg}leDll8m^=NnEuI24}?Ry0BW|NvSAceyOa=)*E@QGWtF4^t_
ziQ_^&mtXF7@)Vafkb+W{aIu6y_JW;puon#lg<r$7N0fo&P=_Ui7|0C7BsX4M<ZfCx
zX|$U~5f;09D*~wj*!zs_+(`q09|0D5<9;!p<PsJ-VR`99<ik7~_WM=Z(l%tqxR<*u
zWqgeGR=%vET~g|id?xBhs39F-XXONP!yo=RA=pu+U8aXGS_y$9@cL`MWh+JC^IRA_
z<9Hy@1_#Cj63WnT@md*y%qf`7U|ntoQMFhKzlPV(o;{1AXgtnybmKK2b_QoiAZM12
zTRyZchYJ7YQdVK7SVR7(BY~jcRoE$#1S0+1@q5EEtgZu+SqC?iGCh%|senEZ(XUhn
zVxwK*+;*2V*~;U1>f*8Xk{iLpTi3nKH2F~<@4TWL;!*-hGQ4SaQM_YwDwgyRyS57>
zd_6=UfCUaQb*C}h$ppe$`JHQ1JiMkBF5^p@`a`&|gzHQoZ{ZI&b+2(Kzl=aA*!b%F
zqDWs>grvGb6i(2Ij*TE<G|E%-qcHVB2NMwdi0NS7;j{p&#cx{CsBIl@JqbkmpRt6F
zwl-v@s5dP`54vZjWu9Rpq34N*DQX~51m92<%0L?PP$Tfi?FApdSV_{!+OY6#LdPLr
z@0Ah=WdQ{z>|5LVJc#?Ggg}ZwdNvaXKg!Rt)d}Fq#svtBtFSKV1o?fH5eVH_1e<WM
zH=5Ey6n+)Yzp;0AJB|}U6ehuKx7#)i4yM-~+HNBp85@v*0dawZCKsc5fO-FCp{hEa
zjSzP*QbO04pW$a_HoH5@arLP>1xHw$nP)$>xYZilF&oj8bb>_%NEa=TaE67qU7CHo
z2?|I!uRO*A1oeX+N-K$nSQ5{#M9~ajq7N-Dl$y<*c_8q<i%q;geZU+-;%lf2zzBeU
zk9_vcSMV7WJw<$hU-12xxW0oLxIX{&W}!#4xWE7KAqKPm@=sk<KVQDdFOXn$`-Su$
z;-`dP_RF}m{PqQYOJ5Lek>7r~zOWyDzr3(t;d{dW`w4z?KVJ8z|8jlB^jYzb;KPUS
zKkg^|GJf07KVg`ES%G*n_huaJx;#7V=f@qTb<t=XG*+2H;fM=Cu0sJSS|BM3$etdz
zCi*20D?|OjX`$eug9+j)>u@FdZ2JCmR|4{`JYKTYSKPzP{Ff$rf7oU}Pj+$Ofq;iz
zQEz`Ogvf9bg!JP`1xO&6=-h>s0%7PUYDm16$o3uXvqhSw6sRCrfLQ0JX*9EWNlZW<
zsx9`jM|!c$-E-Iuo56h`>td~SRa;)d6l<lV%$3$TCA$A@C;HQ#2MJRkUN2k-X}sux
zD4G+}4af&gqJs-EEX%UaGkECzJ$WGS&kv7OfIL*S#N0iH6Pf6v9o=GEJj*UCI@m@N
zT`1LEt~rB%#J7_qU62$7<ms{o|Ks@;{WxfxBg`Z^Wi*BkCP-<qkJpa#W={9zfxItN
zfIN<u@KDtfbN~E-X^MWH?X)-=0~t!11ZlJqfKu4S8?sC;?<C3YBur62$UTo5l4CJS
z=U7_hYL8tOb%~ScG>YD~&acyGjNcCZJ%uU0D~}d!3tLMb=fyJj4_qv6(=^ZHy1Hd>
zRg3jUElb)5(q*Cp`5@>7e78$C$s|buA@!iAI7mo+yc#bp@Cu_Y!$zrgz#cy8!s^Yo
zrF4Y#<);r6ZTnC!mU#dm_s*EvOw;7hM2CCX)HI16-Xm0(=h>x;_qZn#J;6#*K#oV$
zk7FDK$>Ek^sC$=bDYX*1u5swJDsh#iwe~ztX7dMgk6Bpn#&_R+{mG;7^&`Dl<^g~c
ztPOXfkD&_-OpvCcEUeImrBFQLM%!zsUXn>BDGCVibX`gq&afy8EAN!THeOX1;Gq`<
z$cG#3vU*%;dtW=z8HRZ;XcFD{&G^YJA<BdnN)<&@3rVAdU6!MOpn}|FDFVs0VWlV_
zafXnfIy6J_E>oGzv=n%PRh77s5IvA_!ZWPHJ!N4r4D)_~1=1U^KrqSV+&c2mfuhlw
zltShz&vL3l;2sFa;!o+7APEY{({&x;E*2n2t}~^mO%L06(L*m=XRQSfeKcm<SU?yi
z4gSD3UNeFR;%#ejw{_W+09GJcDe-5QXUKIQ$PwRDc#tp+!e91B6CKC^c&16hPHQ1>
z16k9yZm{RoPTu#uIo#DsTZUoYiyqIgMl(;=pDoUV4H%}V>!wy(OQrtoD8ZW!Fk%BQ
z-V<C&n4o}=e%#g|G>V>QTIZRRO4OpHGc3$9vG&}Ke)h)nJ$oPwlLXj>)f<ne*JnJ(
z#uKcjDMTZsL<?PGA8+(PcJT}=#eGsK3P|X`+FgD09QTU>x>FJ(-L()!SyoL|waz}f
z6|=DV{&ebDKo}+k!0_y6<EP25EoNb%iC)xYSqlJ<u*g9t0U_dop<{XqlAwS*QGoxA
zi+-s<!bV$o=(47jwpClU?E?BS;t^JVe>>3`hIt1LC(6Q_DayowdJGlzW!4QTNG>!r
z@rDxQN}7r82?|KGK%$8rE0COW3a~~ku;HRCX@rP&qI<Kwu!+tvY48Uwl=5a87kj3i
z=v7J7wUimIB+RJ-i7RbmA8&&Ck)nV+?TH;dkUYa%_NUH6oVyTsxlsZw9$`(OAY0$R
zv4Aj462Ks#F|%L&WL=9c`VbVPsPXzzp$!r&^qW!iG^4Om6p-B>;}r20EcDpMo2gDp
znaPla1)vAwmeu-k+{`JdC=-TB81OrB4rHFDb#cQ`HJ~4KEKv)pK=hv(a5Du$53WGc
z;J8P2@%cJPs4@{&O4Slgble95)hh_dI2kBGHugXmCJ7F}X1t$9yR@&v(3WLW6ot;}
z(1z7@`JRSA;EwDPRgYbg0<zm*o<s3TX}mOuE;=1H5{iZ<(W_>#&aF$>NO<5bEQU#f
z18yYr{&}1h_uLK`=#EJy0!?(Ov%KqY5dE5k70VDFBus=oHS*rHVP$wd(RCu1S|AM`
zVL<`n2G_3B;wRJd90<cC0(4>ZhEA~7*4c^x{lJ~*fXa1F4tf^#gR~<_3nWni2~R;j
zsG}mZ@oFiA=;}rm4R&D_m8<Nqpo#9c!-+i*hDie4CuL^z(EVWT02X>hOVM#gOe(E(
zSOF2EOsK6h%`V<F1%#v{67~_IfaID2-L;SurdU-~+gb`!H1lQ-?13;$62KAGo7wz0
zj!SDPOtEarf(8k@OsPvBZ??aI7fPkWaTk+o;3*Cgk_n<DrZwxbtjmTDu`CM6IMXP4
z&lL#6qyShT#!Tag9tiD3hXSM#B|I>wLUmn7XBOG52eNx&0ZE16fslL<8M){k+!S_M
zXi?Mxr%y|V0^-kpHs*~@bcRU-a6qsEv6BY@ag=0Im332Mk4-0(0_BJW$nnyD1^>tk
zrP3e@$IT$&{!)PmC56DyO(<DWL8|uIuKsy6+uZXU2*acSbn%*gGNWBr+qx19kdm@Y
zlu#0GU7qD+oPJE>O*G9tMFEKx2!4!NSa8ofEtJTVsOwr3MOh8B6y2@hf%tiQ<Bfz2
zlLmNT-EX)FXnAg1hfTb2FY2O}c#+wKmA3mB=bmtqNs<C`j7yBKUA*BKOG}JWl(Gi-
zXmI!xlbp{j#_^ij9QxBI48#2YIUHX4e#RJ8cdlp*qzN0*r4*f@m9}J}U%IgH4TX=e
zQiEI&c*;W?7Tmf{Qk-I4$f5*>%DEOzka3<pgz>U~FiZ-V)8WN<vrK-quWqP@vMBKo
zt3eYaQ&MMpic`D}qK6MGAZc*C#wik*N^o(}MJ|M>n*yjP&SbD>EI|A`zi=Bb!=%CK
z)W3N@j?OODwN!!NBzhqLsf5xh1NOHI(Md*<+eetDfP^^3E3_0n$2pKrQWuuQIgkR>
zqphqxyKx-n(Z6v8!Z2xo8*TduM+yD;6$PZh3rbNp0#Hh6YQrKAJq{8k*~7a_Q$UWf
z;v|l-4NGYqRua~t5KY-s*v8vFTR)B7^yYBlo#+gc0tfTb&t_gGZ=YM+R-p|`)<Wh&
z?&$=JY;@9(wBr<06p%0lvb%NBvm6CPVH=hfHO1cG9LP{w=g34iZ@f^7Vbb8x_Xg)c
z#@4&G4OxmfMu<&V*lH7Y2vL|~IJ`<%K~fZuaAbKKr-&wc@X(b+6J3aqWzqtx!=>nR
z&uzR6lLmc%n77G$zpQOb^3lM(E~F5$Q$mJ8^!#R{Ey@RXVI{)xHcoLzaf<ZwptKMQ
z*P_>D4f;W0Sk^7pdmJQuV*z29B=}?NU*_45cDZC>RZW8nZ3}^OAUJaz`ZiHOqJAV9
zrI@CGkb>NRh8RhRRyYVE@COAPkk@J$2HP&HpUeb5Q5<E$FiCLOPA}Vr`=rhwAnh=e
z=z##W)G||Dr>Jf7Ry`8UQcO}n!2ZD7Z5tLv6LeUeN-2uEXo?WW>#FnW$I+OrH(Y@*
zOcFpB*0xRaXqN#LWO#iA0TE>(YJokPRDIm;w58$$J|x)1o1}mMH|LglaM3|OGL@@L
z$WGMM$NSn)AFp+O_8SNYo9GOa1m@Hmzu9?pi?x-50;Ix#Zdue4&#-_nh#oBTi;14(
z9N}N>olTC^Fc5{OBRl>}6v?f~id&A&B2mlUvSb4bls%k-D{u!^Y~~o;kCfdB%@x}9
zF&z%jqj@PmzgJZX$nCko{}BY)Y552_AxhcMiw=_L%xUFZ48bnx>onmtUIeLu>oujc
z7#*T^TDzGkB^VnRq(FvILh?9o5;`rATAQ%y6c7-N|LYXn28^*>$4jBjozad71^Ym>
zvoS0mLP8TAK`P-o8Do<7(Yq`l5JZPMUOvDZ<}k_@{${|>?RX8X)kUvTKrRg|e>oZm
z+Ve8+C^?mMhY2Xd+Q0;{E=C`MnF5;V2vP;R2l6#7##?8>Ll;W)g0r3slygZ-5S?TZ
z*|{B8I<d~Z7RvX0BngjH(8$LT<`00;GJ$M%Cx);jGhr7Nf>gmYEhfQATj;`?=M91&
ztna#^ql1*ZX=Ovo5!Pv@R;nL$3P}FCZ~2=)Af%BEmxK~ZSzkPmk|eY~2D2>5-~@so
zRq*L*QZn9K>$J<au!QJxnIa$fAX^EhDd@-Lv{GxW!>Uq1N|Nxb!pas1fe(?A51i&c
z_g-zA)AQ%McaQ`L3wj_3QU%v#N*{~~;jTYho3}|(Dmpq)K#n}S=<UuS9F>;2S1KUI
z{CG+LwJm`UABoH>LCQ)(w#~{~ZDV-%Can`*<3*4f_@3Yl%lhc7Ra(u8WfL6^xMf3!
z2JDYBMtE#Sukr+|RslJ__!F?jIL~#8oU)#YK5vv#AR+D!CJ63CN02&zGR5UX2-Z2_
zz(dda(NiV|0`rF~1+2vbDRqjqDoC9Il1Gr|#kRRx6Mi>1<pYD_|6Z|8%`V^LwSHNq
zW&Qq!Ajs=;T^E!5`#t(nWFiz3lu__Na*0XK5t1_vP;r-Hr2=x;T}45TC^{ztBnkJ&
z$OP-R9?Gy>bl!#~O$KjaAxIT0)4F^}(OY<bRI>mVgzXF*l7vHB76_FbNJ$V@YN1yu
zAh$~c&*q8jfwWNQPN2@c6I7^8DW`Re{{Ehf!CP1eQU`0Af=Tap>)q_;S#6*nT^>Ow
zkz-4McIR@;AayPSxl}43kL54f{5rSVwykW&F;5_zF(w4tAWEobZ|{%;NeQb=5Tpk3
zMqB?Lqt#luJb^GqhtlRgKx;*l^`prY?Wi+|UZ;S3yq(vufKsQpKRFqQBy^CJb+AEZ
z6V56aWZz9lX-&W05CnO3zQICU6Qb8XD(95g6!ddb#w4Y(<(vQ|h<<^8_2vlc6p-fM
z<oPs#NKSYuGJ)PSh!JkHa4><`V7!^u2?Yc}UY{S3BV0`IezRIR1p`RmGrA-5UkTDY
zFC)y4N(YcS1?03po@bD@C6bIIh4BMc$AE<Nuu;ld|8ABrt?TbM1VLV$Z$H*`3VugB
zXi`+*flvk&tKfhPg!7iPMMExUkz$>fu&NZ0kC)rwdllNpgAhJ)F5$Sd?_mkqtmfHy
z`{f?|GEEB#2!gymzf(@4+q-vqp0#=unGniaDP`00b|h_cq(F**-~>_=w?~%nXyh$h
z(HqI(?SeB3Nf0K~CWO|`TYopZewgXc8-gIO&d=3AkBRqMTM&><sC<IeF)DMB3Ar@n
zSwJqAYR|Ch6p%AX*gQA#w!8raAuz4>eRe_AJVTx0J(wk}>BAd>Ag_*F*EI`>vsx)7
zREdFb3PD0SN+O$5=6+Nm!T-1uy(VtW|9vK<-=DXH43blsS4t_NwpqJbdv9Yf$(!qs
zHv~amn;&LcP4vs%`xu?t$uE>6XN+?`>>tvCfE12>=vB%`tpaj8FJgg|JQM^h5Kcxe
zvtPyp08MI9+qjru)+?T2A;`<~=X!+!Wbsk!sMMT`@o2{w?*=(SWkuUOF7ck{SCwAk
ztyw^h;q%Ey2Log*b&9Ne=*Rx!o%3cf>vY94EChLVTuRdf`eALHm10V;Ua*`4Ay9@z
zT3L3YKVRehSgC^4DIhy%3mSZGd7*97wmAwiu${hRip@$n=d6vv8|dR*@eB(=UYp<R
z6-@LPgZ6Iztd-d5Sl10~pqxXAA~`*f(@VYFP(Ui;cHZ9pXM&96!U-RSY=KBBSg(4e
zX6?N5)-PsC)3tv?5ag9{(=?eF7Hgw+5CfTe!2sA3B*6jUq{#|WUO%g?!OHvv_cdMl
T-{n5O00000NkvXXu0mjf{0juk

literal 197115
zcmeFZ2UC+>+cg|76hsA7Y;;s0Gy$nngP?Q>Eg)TxUZpBEC@P{-L+B8ZKp>PTRS*J-
zQl%w?&`}H^L|PzXD9IbV?&ta5`zL%eZ)TXxxrZ6f9Ov5WSZnPgB$=D(bDZEk0RR9v
z3=M8s0sySq007IA<E+dTn(4tC<{SHc1G`WF;3W6q&k;ag!6oM6kx)y09YD<>|1$I9
zsMk%?n*hMO)RX(J#{eux(hP6iw0?Nx*8%(MRei|POU&fbpsuI<by!mF(K8=KULWM_
z1^JyEHw8Heae|KxFjVCx%~qqsbUW*g+zt?YUMJs#RgTy4VL!6RF5-GFLtF02DR->O
z1FiO`Xb1sqUl~W8>TF(`jvmC$fkW12_jW32wtnkq`v#llq1nc6=8gW}ua1ANU-`eU
z0f6{pEGJI?_mVWfdHjE`-2EQ^&(Z&0I>~lU_`g@~+;|N*@?T3GpN<?m{$DGA3!LKG
z|Go0|zV?xS{%a}z>HoW>|5v5|-(X4lcnSajluUyH%p8RofP(khbmlgQU;Yd0m!F>S
zq=ovaXxgW8V;ZW~-@LtWt$uP~O>A*NY|+jo=&AbTd`)E_D{V-dj$)xD?qh-*yE%Fo
zVZw|whSK2g_eW@K0D#=l!_9X8lsK%RfiEW-q<DGjM|4q&;M~LY0RoM@luDs%S3xQ;
zhQTRvTZ^$_9sy0XZN&qASKt?A+a(jUOT^SOSO&~XW4nsnzpynzh_Mu0J$DelKQy&-
zFj}ikx03Dw4HQX{przXM%ZvlLG=|-yeXvPv-%^~NFhgQ2IGq81a*TNkRgVsdASJ_&
z^}wTcY#`0~crK2*IkdOZb|Q#Ue0I#3H-mFz7}-bVei!)+gj!RNzNWwGHX-V0R#H=v
z;<8lIud3+k4^{-uytEth`J*?jcL}T*91%2$JVB0KuM1GJT_eAxI77!`g%2X<#Oox2
zoW!UrdqZz+F)jSNMQwL6dyg82Po8!n%074<w+5LZym{=??yO#4^TGLjLFUEC^3K!L
zeqG5bv#GK##8!>UnyXVye6{KGYAU|<nxu9H7R$=4GVFwdOXB`ii#DB|0&<k?fgU3<
zo@6pU(zOF7a69N2r;?aX4<;+U&HMWlLoL_mDW0ER2NAgA<u8Br8RgEGD~31uJiaUT
zRA$h|+8LYY9mP&|Y|aMChSS7Nzs8vLC+k7}WCkgn>E~9QQp*I!ynB~NW_7*tb8k~*
zPCnhrgTO6^A%9yvh`M>%>122qLBy;nAdsssz+y2@W`M8~2HC{d`GFs=dV#`*nln_=
z4}LjD3R-e4`A3_FyJ%UhG*!&XTzuoA{NZf|<tLSh7J7DDz(LG~Q1PVn$ga;K*}1)I
z2W!uNzYSY9b+h3fhGD+OD3!obTdswGq{4j@N0y00cCm?yyYIqOF?+f-EF>Wc7qc|F
z^#14`(BBJ}do<!QM-LQ(Xmp?E>H$^A^W-+JVlB6AA72FkZUq0uLY^XP4K1MPO&U*F
zs(y~1>O5((hchM8^0XMh+0@f$T8`Z!k}7TDo`D3GV@+-p8g-(Qa#dg@bW$G@$bCY_
z3$i1B8Mx9Fz5!`=zw*=Sjs#TGaJxk&>eEeMUeYgW98XMc!3W=wo5TT=u1TMT@(|Oa
zM|f_-d`!TUZ~9GH^V1Vw;&+R7$~5hRqn9lubTM=_0jh~<eq~FGWIHa1;66nPz^4;y
zd>!=B2jTQVvozz7+03bJ&6$)ad2|sYttzM9A>h^ldqsU^<&@2mlcp4B{@yFe{7SMz
zFZAG)9}T$l>&baa5E(!N{;dqA?+CL{m4DKpJ&bp0P~YBmzAOgiRfuae1#w<ZO~{ET
zc0g7u7Ybw|=+47wub`<P>;Qn7cMOmFv(&ixayf84FYHEWdlUw=^pQUNIb3Ia>{gJt
zrUK2|G20N`Yy)q~wmIJzrxY%#^av53<Y1cN=r^z9A!$xD#`Pnpx9U!ywgL$a@E!9=
z`%U`*yX<!<E_3|><)3nuO@|sGz{0@nY17dFT$J+fs6HoZu|*y~SA#{R^T2ONc<v-|
zJ~3%1sh^<a{;|hDlINFtXYHaDUdjFaNLc`l=pvBDa4uxh50v>?+tV=>`JY7{WDRAZ
zT1GS>-wzkk7|Ll-C(a(|z?HuCxGYQAImxRMw7_XUcQ?FDq2aOGxl1iV!<k-84t&We
z&209-(>|}q`C3~P#kZ5AgXQvoXQJ-sTV{Sl3!Wo#KULGjI?rwSzINv7+R}DhAoMjs
zA|$-b^x>Dm^7FU(fW$}TkoIE31lv_>u0N(TtpV#XnClY$X1~x;1a3Ni;jbs3AORYR
zs&&f~YJF|RN!|y|1fekAYI+)`VmBko)7dme%=D+5lR6AK6GYbX>R&g}YF_1AJ-rSt
z+Gs5Esg--(KQ3ilXeQb3tth$qJTJV*=b5eiDtZb#*tCY9wQ>loq%<tJOy&zSGK84h
z0-VO+XQQ;QkwA;C<l{^nkhjT{n@rZ!<SA*~_o5MYNZ5>Mb_Wnj<UWMQzkLfgW;PIN
z+Me0&D)w9v0Pq*T%hWqJj>vV!gb%=P78l*Jh8?wJ8Hnl#3fYWU%6`I=XPqty(X_}p
zhsA1D@Z<X|Q3{F@;@qPVu`8{Kxctl^b5(NGSmdb%sntm|8R>U0gg%Kpxf&s&aI<Kq
z*(6#ERz6h^hZY9O3Q8DO+<L>QUOion)fjI__kOQBh_#&6-89aMlWRAO4G*NDCU)-@
zu2+4(%<MO6r~a1%D(uSCWSCd&7NmC3>;pO2!kmb(tJ_BjN&WIx)FbBSxXZ$F@-(31
zSr;c|zoW7wO88<|ywC8G$42+M1cwPBezf~lRDu=FpA8ka$ZqB2YuInfK15t_mNJof
zaF62Jd4@nus~5$Z0hM2>(2QG)lVD_ca^8YGcbA?zS)Q<J4@%@O^R2W|Uw%k+N5|Og
zp!arFN4dGDB39*BewX({i0xRSA9=-jk7w*)#Ozr}p~k>yU{tNgl$#F1d<abPyI-s4
zzUyAezuQ(47tKL^WYa$6L4jQat^C=|OHweOz3fTDro}0oWBm{BF-vfWdFF?vlMv{}
zKzL;hbou-0eSdaB=1p1&I>4B1xH+5L)jPf&$K20+#|}jr-zAK58*d4L<^4G$4lQa!
z)En6B_WT&jth0~CLi9kA@4Yt`U=gHpl$#y+#mb{_zuGsQzAHzfoe;&nCVu9#U<@dD
zlO<r(2$h$@^$ZUywP}mu_Ma>IypmKqP@>6>j~vLTkujDMqRejRsyP<U-BmxeoitXr
z3etDz-q-Jh1s4t?e~%KWvFkut{`<1ty?QhH4zRoO;iWh2M(TI1os#WHE+}G#0H|c2
zEYHyoqOKf0M6H@G6SM#Mz%JRxDA1S%5WFV4ON6$gXh&aog|MeL>twhz+YqE|)EK$D
z(cHyEWlN?P8W%t8iQ}&~giTl<dA!bE=R6fJ>S<P-=RMxLydnHPJiuGN#Mlw)`xHiQ
z@u!OPl^!7@ldPQ@ePC9mgCAPT`jxE%1sX2~y_VJ*?DCe3dSmfrU9;19qW`FVcb%)-
zg*uZOdl)t@cnUV&B3w<kpTk?&!x)AK9q{KY%Vx6@D)sl}ZiQY^x%d7C+g2M^)s()X
z=#W}AhygMnJY@@nHIU_RiWBbnjhr&a#C;V7@u0s{-EPLse9%oE@yr%?nGvp49imOI
zco0iiK-gSi)I6xpVyKx&=$?>e^c*{g&7||EAHUfuwqEhskE*KDuW%F)|KrpkQ<VA(
zZxi8Uu5T;DvnoK&>YEi^6K85IGJnd!fG$|g9@$dF3c^NA725)mShvw6w}wtCy3Q+f
ze#64s&FbLYq=@Xz-%sRjtu7VUoWxIhXOVTk+kYoV|K{0#5ZxCI`Bv0_G*@ww9AT!p
zj`SCIlzyS$!LzcHuv*@yhWS;E6x3bjq%!Pq0cHAaL5Rh`FLn!1ODtaN-=~>(N9-?x
zL2ZK8r6-w>S(lz@*Sz1fcegV2R4HE4&uPw($|tE?$uDvLp}0NksBVTfZX<KHTyb^h
z8~{*t@zBCm-E-H5fHiwehJF9!<*<PH#?5%^!F(n|8F4b3pC2){Z|)7ZT_`z2gnkln
zH;S}*ocqTz`fLGtS#uz7%LwQmj@>fTA}iW_l7<cYaJNNLD&~kj0~w3MZ%!)BgZovS
z5kY4ajsJ{&dV=l3rroBamQ?m%d1XNJR#jF1z5Dabw>jiV8bTGZ8(VmR)LwXjg$7a+
zW_0@07|;vzRb#FthCA1ZTW%{A$9a;fYR8WI*}NiUGR@|g)cr@t0C(E|D5jmfC#^4E
zPVw0w@Vafb+0!m3ydRUA%a+@%GsCDvrtL@;?xVCS<GI;JR8xKLt64we_3G1U>rG`R
zmoLpVW9MFEZxugMJJq(sA@o&Mw#}iuur_5%a>zX9z%hDrx+)<QY7P6`nkKis&)Rn}
zbj@nVrEtjn>oAH?Sgeczn#H{~X+8zPRwr3!0`s_0^it=%aOX0UWk^5B)IcAH2Bzj2
z)-Lfc7#3&I?CB`ejylIGb9(s09_Ueu%e*#yYT3X(4H_*(L0CQ7x0TSPhpQc>Wy^E6
zCGLZlbz$UH&*xUex;6dHIGSTOkr?KpNGy-KAo`KwY*a-RuBZHF0mL`_b3vF1Tq8}@
z=LmJ*KZz%}^+IYi-%{h|kt3`E%HSeYRo!q6q7Na)btZ8QEM-ilBU_P?saehkmY<|d
zqm(B1z3=$!VMGQ9M$l_`r{%4Jv6K+#7$wPi$TG!dwoW6#4wtK9c1>uj3xnr*#YRIB
z0F=2@E}Baue-EP%=Rm%Z;B$u5p7P%-BP%`aW?os1YeRg-1@h<DhMXL>><evL*G%cv
zs%SIYIWIE0taeZ=XK5u}cw*%|({jkZWkQqRc3#_vE-ns=DPUh{*QgI!b&|Q|K^Zk_
zKQ$f``nH_yRkdQ6y=#+6cw0k>-tF4k7*-_y*>IeW-HLh5gZ4SSYy2Yx+^m{8f!W4Q
zJGYLd@|n4yRQR)4`{gphyt6wsV40*gOUi~qxBm=JA4vR&msuTXMBoH5C_he9Oera@
zXzLe6KHSFk1^;-QRd)m=PAzjaQ5Wn_QEE#Fd0xCc^?Cgi`&9%!u+?sXgGo1tA~7a<
z@x$kP+F2=}%hivhn3M|@cp%Psh6H{71<qjiiE@%rIo-w8mA=z(MW<#tauvDn@FFG4
z^7b5Y4ASt_ps4O8CBdcBrS2Tld3B#WY&zXMO4^j!U;gPwtf6<oZ8x3U`fqbd|5(}x
zbepyl6LV&L;0{!3lPisAmZUT{Om&&va)4=T-oXGt@<@cDcvG;WWTwKVNUB<_3mhDA
zhL&Lif53k-wY=t~0%nqG3w`03EuoyxxgJgXJ-fti*Sr><PwNd>2yq9ymv!hKh&<h5
zAyzI`^?P)d?vw@ar|%@+A1qVNL9I3I@`5_;o5y$Y%adcn9*v<byO9-{q!tX>kF2{o
zu4rA8l~J2286<9${eo1vr(6{@I+SSWN^UNflN2aSq}3>F?j4+@AaIHM+@v{Y0+XzF
ze(2Eq!+Ssw;-Mxj)UQmw%xLUxnm@y#37V6}pc+4||IE1|M8&G8WZC9&gY#Ip>|QG3
zAE3Py&tI-|2m%0d&cE;Y2f*)=sZ;D|l;ErKq4~Xy$R*JeBctyVd~mJ0_3{;8Yg&6a
zmA3}5a#>k3^4B@x)vE4nQyHz2$(5azdoACnDf}~Ix~uXMDWA!v)7AnG9)&hS5-QE#
zx2+;YQf~xPBg}AqFMSX|l3ncJ!P~%SD?NA-RyH8*gdqM+MD+Vd%h3lWd67BC8%^zf
z>OYmE9~PQH8W&@+T6yLwNd|*isPkh=MaJuq9NF#Jo|UW5S@%L@9b;p4KytCSUGRx@
zoL>+k4|Id62b8=2O7k;JodVj3)G7KO&EiV|H*?j6^oXC;+4TC=FLn1qw)dn!VP<iF
z>An6XzS!6L#<TMrE7X%rPjc_C1m*mrC|t{enhbf<*!R;Ryq?u;5J`Mt%zZD{@^{yp
znu|K^i?8lsu`wyc44uzAp<D|v5Q6n7POv(uZ}_v}#c8<igrT#Qoe4jrw*clx!u%j?
zdURC%unqq@q?34k(<%C_eJPN;YTCupmIC3aV|-8I26>Umgt+&<!&(89AE9=whK;0a
zLl5?$OM43=Fl5U>>?Ud&x;Q&ZSWw(+%ex3PvTKus6~0pH{7G5)4cvRBGqbOKV0mCF
zP_b!Ov#eG5V+A|gv8+f|#y@(7y%^>|*1FUGMLWiY*oi89Q@v4hnGtx0-uBn>>(ckA
zqdq!xd_YgT#0MD;QhVT;!#1<X+@#`+QfX0;Z9`BxV=%M3-o%)0D4jYffOU7hreSme
zZ5q-Ocgbp2uOO@R`Lc_I0LX$K>o9u+@a@uJzWHt3O0U=BuHnHW8)$Zc;B*6<9rk)U
z{=Ff0QIbcgqB$W!Md{rDqOipgTwqVL%;i_=6QM&&ojo6a_n#nPC2C(xEh`o%aI*%z
zD2dro^CD=}fLz4`bR$2xiU|-t15qe399A;FCc7q~B3sg>U~7UMZfok17F|PuSBfP!
zOZ#5e?JNF~Ro{cWS!(xHL~PF6)UmRbKn#hCbSs+dhWP}|V0Uvr$1U>Fl#2u`WUtxz
z7f0b7vMWE?MlOei?(;60FjR=ZFMiakGcumIm5>jly*9apysVS3tVprs_4N8-H&VG|
zs7k{AQk+cWU!}p2RQTJf!G~H>mrf=be6dT~#~-EbNG9)VAd_RL?itd}E%6Y<z`AOZ
zOf!0`4e0ODNUxD74eEcz=}{z<d*chF{%YG1i<(|P*?|_VMSI;brmIMPbW$47as883
z(5=ZFx#f?er=#AMcACCaDJVKc!5x)#5rQA__xm&{4vp2!ggvK#AO$gquq_i6+cBa<
zlRnlB|A0f(N^|+@3Wr<b<Q>#Zi}JSPSI(|t#cg*Jf|Oq9z{mGB(LtwcfaTVc!R46o
zZjEU~*oPf_jw8c|T8RjksFUR5*k*%w4{wcbPs057>M6O_?au82@5}mgPQ2OO+^1j=
zP^s1$zt{lWj-i0(+x-_U1NV9jlG>eaENiZ-V!IEsJGG!5DCqE)I4D6|Pxq(x9S)N<
z=4NFuTOXOqm~Ia%_T2kNj#`#sM2%ZGMI|<q5R-HI1tA3w9Ck(yqo)pL)OP>Wh6gK(
zEm-XN5X%*wbA*Jev9fxbZRBcp!=yPG2ZOGq)LXq7SMPWj*!7p+z;dyCy~8StXq!|m
z?OW=#v767?lkl-U;i~e`;)51pxHj`9YR)?d+zG2GK0-F1BGP)p1+)@hrkg(06dr`J
zIB|m8La1!h2ag(=y<)#;cRY#;{Mr_0koln0P?M~TBbqb^9JzM`Jy{`{t)hw|bMLCE
zqLh&>D-%D@mdBOtx>a<Vv(Ao&dgJ&K#{I5KHB{nzdSWO-{g=N#TY&yl<@|2B*Wli>
zeXq9Ge{!NJ0*4OkjRSrDplY!f`L^J&HP-2*K?P1w=3btptrKO>ANJ71ecPSwN=_CU
z!i7!^9gH=F-=4hL=SLD{eL*FJ4-m=giQ~W?4ZghRCB3z7?N`Nmp)PR}1mI|!88LtC
z2q0dG<xmAdN>4q(-4)}|Ve!?@V>7!&0wT|s&?Hw4Y07I<%Em#HPlxhPlr8aUYz+{t
z{4m-p)fSd-hm9fMKu(G*l6_uJa!)-JXT;^>KW~SR=WZ3HCDu<MwMKmVaa{+7CPDYj
zSi(`?m3;_bGC!7{L)Z2z;8^yYX;#xw|6F$UlK3IA3xj32NFl})h^x*!2QAb3QW&*Y
zGE?<hO2*E*-~ELw=Nyt-e(&CVQQ3aAtd~)xO=rVB-5>fNQ=UB}3hIHL;11GZ0!e}B
zL1jAg1Qv=5(E(L+(wmQ<^*OU~4THZQcxU9gDcxbH9;@FXgB}p0f|!giad@O-!^5-x
zs;{FbTKy>hr40@a02R=5K4QaOCb@~F)6sfP@YJ&%ng`|ed!ry+M@vnjncw`aXQLf&
z^U@X?1un&t|AbE@dMB4SDSiBz=+^{2m^O-B?TF4|??Xnz=FK63GeSU+1G*(8|3-0M
zDTlvSV?ffgIXpkLP%)`sX#%X<zh#aP^PRbhuSr-Q8j;b3NtYc|*$03JC}z?n=way*
z&uh_zY$PZ}v#0&qp%HiKMp!>9-Z<Pf$hQ&}|C)oQeU(hrx<1AeMGlEqz!j;LPnA#l
z*~?F+h+Tg-i{{teu|H9@omIBL0RZT;Fmv;GhzLjCHsECin?~}@VECucj~YBF!s+wH
zsrzxr!L1&Z0M$g+&Wa7sx3*mLm0p-2NmZ$Q^tJ%6!H`w=$0!xbvgs3VoJgK`ige}s
zgCs8n$EZSOS3b$?qSy5+dMwLBo%Kls<ZS?Vpiy+ASPs5VzJl>p?eaDYCXaAQq+X1$
z)#W!!oD*HPCx5u-o$gu`;rmo2U{S2M9ThdgMiF|%<WH|8Vk;Ld=*c0M9<l@<v$=yR
zfsDGDb?OotTfHQ?gH*gGYTE24U)u0V3pgd@sB0!a(2!6JWcG6@7O%sno2W5v$#O~X
zXL+<nn9u6|=5-sM#rMkz-l%!oW4*Me7Yoh&L@FpM%j#Zi=__@xs59vk5~MbX?4gCz
zh^EoXXm6M$#j#b*k-U4_^OwQs_#;?e2WiqQVciz|s%&XJI{f93^U`|Ws#a!#U+Y%f
zdqrKJ?)^m6p96Jg_y>?cU+jYwk{$>&_a3wBUqV`ltY{@`6jH=$B;`i~V%8zl<0^Zf
zN7Bu{Xl;37v5*&!-m<v*(z1ai7bU~=X7_UU><jhj1-n&iS}h!Hy_iZ;`@w!5W$w8C
zQ5t6MFknk#X#EvCh(mrA>$a!sn+0X?iKnheS*GL!vcu+#XPt*s*l-X`q?SwoX6bXr
zbHj4_vmA5!O6Wc|w9Ksftw*3EwW}y?V4QXYaF_M3+2zzIhugvOR^g8disJt)zLuDy
zDz@s1poVwPl>t4pC7|*jtxxc1p8f?X{mPGfsgm$z_HGmJbF%!>J0KM(=YjKN%M*>o
zh-GUz)LG+YU^NQM<}5*zwk{a9Ru8wbb;5|hhI-(&RU0w(aC&13)!n`{b3THWN8c*@
zI{Ue5FCRIA82%#}zz)iM;FR(hFKV#aceE>acd^l&n|EqGRwiK(51}O*s=$@S&bK&u
zqO~f4YvI_@@=6tnZh6#=#TE^ylV@SknjF@`EPRMK)Ihi1jmLEU!TuUuMXi&M0fR`j
z1TlBqrHpQyxxhXUoNn%XnGwMA<S*8$_k|fpX((LfvlTWb)2d9p{`|UST9lWB@UGo|
zaCXQF(shMFAvw|hkz3|ju;+AJ!cfaTOc$-#7x3=!gPerhMljpzNn~$JCvtPkH5R2g
zVyJuN(Y2k1@l>WAxA_~ANqsUI#tHYHV#mMkBf2J00PmZ0pH8aZdS=1hq+wq9j66uC
z_`(gPwaR6p;SNT%wl6YH=ROJ%)IdFgUit;u>9MUSe<sb+E`Mi$1s|pfenru4Jmt0p
zxU)uU86HH!*Lz=2_djt;^vhJ4IqA{MO~aKf%;~lF4h_QP^Vl&`eGM(GyAZft_T@&4
zi<o9hUVNh^eLBv%;iVO^B9H&)@6FQiZBnr+&(Hh{W14QHXrqK~B&+jGXmaE0S;^;h
z9?IMTk_#s6>P``O88kS}cIcgNer8r^4T4Q+x58=xh%S1RQn})Gf&ImP{=+K|-KSpH
z3stm~Wt(}en8fY|ED=Ia^9W0Y()N&nR&$so^VrMGqRS3-R7R&k!AwxM+b%FY{?PHm
zbXkpyd8&}Xz-^<ki>}7oZ~QBk@|67}yQ-5P6Ksvwv>G0;Or1A!u@t*C3WKUR7Ue}u
z)SvyV)EQM9{?&uo?MjX^5A-{xKYxTxa{Txu43^@XMxH4^rm-&RVs9q0KJ*-3E8w}`
z5@!1KNu8xGYwRpuWWmVhnR#Vv8DO!^)*~dULmH-_*;8bF(TL?1YDGDCV=4dG0L!l;
zT9T1f#6P7ss9Cl0ImAt)J4AyIf{yu*8f;5`rm=F6R)3MMJq>PY&1jq)xK*vOb&!$G
zW4&`O${oKAQ6GaPw47243Q6WkkP1dhFE{V3WZ?~0YqnB?Cb_e1+AAi@RYrOPrW#XT
z7?wZHw}}j+Q)L<)S@S(Z=WB4mCFmK`_6SXyN_e=nCbQmW(vu`&O}a;X(DxOKWn1)I
zeycerC;WwUMfkrKiP=Dyse?3a$9+Ary2=o9w#|oH!i^hKx{$4#DfRAQV{%^?NHRc*
zSUy+xc>h5)W&8Tvd6xP`##xoNB(H~MJCb5Y03Ak$qYrW_9!KU(_*gTKVQG=xwg#Yr
zR}Jd52_5v;5Y`p9w&LJq4Qhk^Wt?C=AwkP)E_!Y*nDC+oKQ!X8V>MAhD79@yxbSiJ
zYn-WO`&pe-MZ))~%q$%N(tab+Dish|!u~1ig-;}cDjGOWtCRJ4s4%iohK({06cb>I
zPwvWEgO){}5AzqUU4@xmQ9qJJsV}PV+mjD;!mqADpvm9E5i39NAkVeTt@5G|YYeoR
zqIpEFbzVgEC*$1EqU7GnpbM?CjJUg>Bm&-SWyG`$PHkWjsaXucl&`mBn_gxx%m^4;
z+qMnM9d)0?X~d6)nl%_iom7j|I3$PvG$n>!R2uZW;9*VmDRXY+Gh2H$&H3z+%bA3W
z@g;G<OS>Wg=4&g>L4Jb2ywagtvGDd}lcLc-8hiU7EmRGe*G71C-H2(&pY8n$h}K}1
z)^U_YC|sYz&3!|DThi4&K^xdidMi2Pd)E{9GU+#Kc%CCC+$(Z@0HyJ+2gVOeE8HH1
zscGK8u*Q@Xid3I#q+3QrQEo$=dbN^^Ww*x^(psmrTNk%hj$N@56KJaOYS#A&{PD}Z
z=}Z%mw2Z(ZVHAm>-13=rdy}aK_sO(<ZK8N=*B&}mO%qcaUW%?R-80mo)dlUux-7Un
za6!9+n}VHWed=w5-px#KXi0%bP1=>t@b0eltd^|Yf;bFaVc`2lqL{w-RFgvq^i<E=
z8r>OIYMYJYOxM{r$Ns|auy)33f7=$brJqYJn?~5u;lq59L*WE?9ZweTL#iF`%~HQv
zV}63MXT<|6dZnA{607A%+dCr!@0{IMU;F6Pg%~$10AT+2yk-B-cIwW-M*|&Jsi?Ow
zwi}WuJ08Sro>L2ZZnW=tG*x)ub1m16zMb%g7<`Xyfn>Z@oxZ+jyeNypR&$>UTm`in
z8<ge+JaHW{9RWF@h-B@utl99bsBuqtU3uqm)@`ja<{mYmO=Ee<s-e9CtD=j$Gq-&l
zf-P&6NGw1}ZIWmiO_5xtgJ0kLW2!e<G5R5}J8tSr%oOYd0ug;xz-2a?fNHZg!im4L
zj#{qkLz#g<b<<5D^&6K}O8T0vp%ic2{0;w8>AO%BB0#PkqpZJVZ>{{avg9`vZ^ElO
z#7+TA9B8~746yiO!6YG{%Dvhbr`H!0!zPUL78OdhP<`ichC|>L1w*<i-|7D?aWqYr
zE^+bLU$d~YrO8TJ7riQ~NSQ9xDqfS+yr%BldzDa2vR1Vc43GY~y%ODsfKb+r<`gIu
z?En+jmHfVD=h?W7{iXG)D<v&LzunbiQA~Vl93FJ!2xULhiL~aeU`uf}70K(hMy!4l
z<6!Yn97m`svNjy_rXKv-&CLk8Ellen1>dzK5xnvf^M=)wzKL2U7!vuWm!&E3sXZnp
zB8~wzE?nLoZ|^9*ltkq{Z;sGhVNc1t+}3Lth0e2L?Ui)ex<!3b%&WZ=7F8#11nb6W
zMZH}|zg9~cdoo^;Z)0c+!ubB<Dn|Mpg%JqTA|Q48pTrGD)y`D1OzhYXhK175F|l^u
zFRje#&NODTPej1j{rsLugy7CXHFI&-W46?&6ro+Sigw*yZZX@1ac`g{w~iN{z+ImK
z%>5#EzWRyn#6=o-$hh?C5EsP-_hf%+=Re5BbQ&J~b+7H{-}e2W>c{)h%lOi>@<U<C
ziXSc&XA+kqD2=PP#}^W|ADz{SZ6rXd$D|VbBh}A$qd3h(o#y_y<;2qiE3uy8N35}U
z>@@)3HJ9VvBY;H_&i=33rGldb*r}j_a)-=!E=tItQ^?Q)-?OSN0!Yae@4FeF84<I2
z=46fV@f+inVyr1qFdkU4(Y@J6ZufT6*@iU=AXa$CFD>ZZy4?E~hMmsj?3p3!qTdHL
zEwN#9!3tf5n+9A+@=)UtA#(VMeByhS02S+$;i5oAJ603uNMvQw4{Z$!VJq0<L9Rx(
z<zjKvg57n(>g&D7z4`uoWB8l4rS_C!&-W1%lbRT~i+a)3yh}A;KT4HV9|EF(3H{+(
zYDt{d0p_(~Ff0D?{?x-X=;M82X%5F<zv4nHPFFdUulPPZcFw42NG}^o*z@%`#j!2w
z<&+W`J|`I}E(LZAj+L#dI|3;tWSg!pgKIDnK|NzTeL=Z0(bbK`K7Opa)PDf+5`Phy
zAEh!n94k<URSy2x&WqecrPtBjzMN}T63;I?7u=%Zd;0v3h{$2B$PLv<IS0t|XFxre
zQN@oz3Zxo%oElbI)T2sCR@@`ro0g9(2liqup2@qSd~pH&$`vUv%Fk^3PvaD#2e9p9
zrES*t2;<efUH#lkD{53@Yb$W$N?3WerxR+Irncq0bau@ETC+BBb}(wd>{12EE&54`
zQRB?1gOSG28r{iUV1O7b+OPpcvw5j$-DKRGR6f^O+NNPq0yTp{eWfpN&l#trG0tWk
z|GROC|4B$dB*v{Ys8v@E4}tGw=p;O(L@E1%RPtbS3DW9_ID6)KXNct#ViH_ldjHa-
za5)|+SvbZW0pT;4+zo9pFpmKM7LUlh1purzg5xdLpIEY-4Vd*C*m7FWd(yu=8VNu3
z)sJY7Hn?B-O!<e*@&sissw1;+BK$V3cq`(124~UAsC1-YOkdhqy5EzGBpapsTN3&h
z)>l{)z?M>oD7#VT#&*FQo-lZ+?WX&;)yjHgfX>#dQ3c~ZpbtNSrTcA}M#wd4q8ZUD
zyE;<^eAzlSY$m+9R7NJ-?&)SrP;)^ekRaQFR6O}Y367Gra<fWt1Y#yXEk#)dW}{OV
z%CTr0LlF3!b-tQru@O~~o8KyM?gKF3>=d?twPvb^x@#LHYB^-n5O9s*Y$SOg+Tav7
z`+Fki>2ZR-(cI=hYXG57(@PYKte%u?vY`4Kx!kv2gtoMmN70?(UmzZ#Wefu$0was=
zgk?ci8}Y+Y%XoKu&+6ew3-?XBsNDaODsvDlLTV_cn$*szn?PAdH;%RGP+9xN98$_{
z?*DOi5xaWktX`&2R2>40X|B2wXRlygYSZEbf0;LD+zxAwlSS<B|I!_FB`oc)v`J>I
zKkZ$p2C)D-&K;)DIq|#(Qhu*K&Rm*ZL!?K?72Pxx82bYCtZOvD^Pt!$HK)u6ej_v}
zm8@^hRw00<y+rKJZ{_q}h3pcvmxK^?(s`Z;o4=!v$q>ABdQAP%SMBkJDXe6I54gEz
z%W|3IweBCQ3;iA~|DEJlVzFO9&O0&8SI(`ZmTL%o8|T@j1NmUHK&07*D<=H5i8jl<
zyX~&i6fpQf66NSkXcKiYiX=)^R_?AKwQz3&*A2PTZ1U@IBkDMlOL@*+=(d%@dz}>U
z!BE={b8u*0`(WjUQuSNvfemljDJEqyv<1lIe}$9rr5>oPCX)%;!@*0HYr1rzIbB~y
z@>Rj=@T3~Drd9l*FTVu_G@-97oUMDHO|95H^K*MQ)$_G!m{8#->-CcrMe?a!t3U5~
z<whSI0o>OC98O&vorE2o*tC$+(NKD(MEKVEYc_30m<o`dNm|Fho@-bYM|%gKE@ORP
zJtH47)BUm;jTIT;Q)~bcL=6*aERU=-J@>m9=lx17shKi%N})8R%)nW41Z+gPDhcD(
zRFzAJT``sUngVK;ffBwoU(|!EfFnZE21$57plrhOij5yYb|e-8oGXWY&VCzCSBsrt
zbthX>s{8J#!<S)b3N7m0cEtix6856f13fFS5I$=SzYTuO&(Y*@(44`Do0^!<QyX1%
zpI6IAWiTAOY_uTJk#J~GqJQCo@OGjz)`+lNn+s4)!4Fjc=`0iw2V8)JF!{FyL7Tal
zb6C(8HrjeWkO@}AmOYp<r!)<rS^7f^!yT$b+{CRQ)T$`A*Zo%(h>`s}H)|4XRgEA{
zhN<?cWpkKnU_xB=%6hFE`@A=<%Q(qp#kZ5mt*p$D5THA8-IeWeaEMK+(jE){2Za(9
zR*deBGcW!{gsQ2e^X<ljE1KhQVGjTi!M(iQ7Ku4&$LjHA)LHb(g171M@NvgA3Rdt|
zqm(o5cU$9IyJmC<^_!BiDI>R`sL%?w-2x)*hc&FoS5`WMU-xqThP4Dn>8Jntvzffn
z7GeFp0-Y%1BvC_#SLS$ehZm|Sp<OCuY<WAjJ`Y({LYLS4`XSkKD*crooM*bUl<f9$
ztssMHLWPahR_xXvc*}*F&vdWk^}6)wHwKjNPNR*<&D0A%-Uf~{ulcP<lKFdfUNoDz
zBiJmqKIr4Zxk>GFsgU`jv>+<il^$r%p<5!tFEgQvptLc^yjGk+YRvM^F`1gAF2Yc}
zqbF%=&!PS<-H2m6*6vsK?P4^7!_>&A31)56hnKDDi+kOM_PRYdGGd-lAi}VY{mz_%
zJ$C3t<p{`PFZ)2&!GpqUx-dnB6P0??ThPlDuI^5=cjRzXpVD=cW_0wZob6a-?wR&n
zi_*KR?8Q8pmY}2-|G>MCZHT%r7NfX7(y6ng;^3hQHWkGYKlqH|v60awUoo-Kbrnhl
zvD*Z}FE~!#$Y=>ukLz-RcMX%g-~Limq#+BkkuH=*iZ%E#^$8eUkSJERx|?ALi-L`#
z5vQqQ<k6lFa}SKP!armJ6z>dPem03E>We)o(G#k9sT`ogjIw(^D1k;-OP8rZe>?h|
zEa<SGi=Jav$AvjYn(dbXBteA{_hc9cOXifC1w_alFTwb;(lc+dbFASXeJ|RT#<3hc
z;f-xhF+n>@*zE1SNw;s;HR}sbvzcnh>;eFW|6$fiJKy*77($Wov5iwp?lg5#)T&h7
z^c^lguHN$>f;&p-Yc0#zLlr%0)HVXY4lm^mCUO%mKQ-sMg#Y#}_WrzWa-ygg&(A@5
zS7{&9x!WFnnsTZo(-9GJ0hDsqY3i*xlGVZ-y0gAFC2uk9*Yh_~GR6OJYSw)ZtCX+g
zgRGy5H3r|Zf5}FDV!hLQhmGhM^V76L_kGF=`)vWUrhD(#P{bynF8T;L32S?qTK87M
zc3HX4t>~UoZru(+39n)~hiu&6+1>s8MP#Z`w^l5+hRQEeRCtLz^St^jy79@rZDiA7
z)LAO>S5wYC``4_8y&|<cfzd1TCU)gBDb_QYM#!VJaKmfXJX5H$K4_)6q$$zY3QZ;!
zoy@1$hD^Sgvi+yUIsz;PZ?POCF%zc4VB5FvE~@l-j@Hc$7(Of8SEV-%SEAC<$D%=$
z!o*~~t1+|Xs)_Z>sn#F+9xCAw8a8fzH)k0klruiY{n$Cu`#xm~;n?U5In#;se)vb=
zSw3X%f(E>EXE&Iv(MPfd-MfNXQF_ZT)4Zp7Jdjv1IE5_Cw?K_>ts2UTk4H@=`9(|O
z<2XmXxj>F?`aU}MrevkQS@ZXrg20*|`N{|?_Fl^mt$s%su?*QQ;IaBFK17(HOKHij
z__99V#ml>Fx-0BvQci_rl2$4Cu17i2Wof;~>}?FSHKbJ|J%9>pq5mxz;!q|9b=CXm
z(xYjA15qenlv8heRO4+r`OX2*38bRWQU6J2z-zDC9*U~ZklbQ8Ck8j{b9ECDgj<EX
z^8THMQ}=VmJPq3<@PRmg)JedNcZWl~uMHB8VV<?JsLOdyT)Vo>`T#z!%N0^~@!jXu
z0R1bV_r`<7aDPsLJ%vY6=97G{lv%3|&h3(p)XI7UU9j*%_FbHG3GCOlH`StSS+MBV
zMWb+Ew?C01#-92H9PwMUSn))^*-I6CNX)zP=FvyB-1_K)j}}Tip$GERKIcR!+O4M!
zk$)l|BfYM0e0fc)Dk=_45UjawjsePrKO_X=fO(r#FM%f8u}5ChQ7%nhQn9vTC1pdl
zu9of)vs#Z!lI=wnV>{$HT=ccg5RhNoqxYU|2K_VUg`O4{h_!+LoFyTAHAwAfh5t+0
zq%rPEGjL6Wt@<r>^yH^}G01rvMwYPd=u8)f#+0+bfD&Y^z!${zrlpyU)DAJTU8Dtw
z_S~QTSZlp5np~vgp0a%e0OVwX@BU*v-`z3pV^`2KF4V7fR)2b3#8y8prE!s*9noxx
zqOWZiyqh!SVfj&KM^8G!dv_9_VeJ}!r(iw}-yPavJ%9l}B=-tW`1_Bn+?1VQpB5+B
zCNs}dS`2?$+%U~e8(pZLa<go6pk)-gcZ+D4=Dpeh{&On<HgrMvBwKin8kFWQHt2rw
z*0a8ObpAkCg%jP-b^Ec2l8->1v<i7TAE44V_wz>^GyT^)-$;CxOjmuMrr>iOdA{*H
zc;#j?y<F@)@}f=IwF{q5Feg$hWB(JKwWrIHTuP1q;tpEa-=3>)b&V0OYU*JcoK$rl
zXEG0h(2ZN-gb&<4B85JbL=FdZ9D{|ORQ2G)NOqdHj2eS8sG-^C0dI3&9cPM`s|gi1
z?ntpb*+^mo`e<9UpOF9glgq9Ago-7N%I0@n7LBt|;BwMBpJn~fN*Upo&gL(X78~x)
zioUjxm>XKo`(EREsbXpcTc8ZwY2k7}VgJo=-Os0-;MXfc_Smn6`-s&htT`@PgL}KP
z^}ceKEs}tly$xIav|YVskH-*G*3bzN>p~$5&B)NQQxS@oJzq@nSLE|un9!A(T>nSU
z#C)j2twlLwG~;&MM5%oLRxnz2LPOL=B_}Y*?P>s||B2&J2y*I`e}UevZXft8PiVNE
z^?SpIq8DMiv4h}Jm;QD?WHsqy>x+Hcg8{-zF}3PqwTfto_^5B!X#aX>m!)G&f!%+s
z2MY20*BAcduR$Bi#)V5U)HEt;&(kQ)41?1yIIG*i#cgPRR39`Gh7-XOH6jIsmmozL
zGSM7fagA|ZA5F3pG-)5$wGk0rEu-pVRyCQU)`#a@k5L-JQuj6#Z&W%jv>_BP*(O8;
z<c<hQ6GpawmF0D$tI+V;JXN{DyrWA-UqC!3mx{A6tfLtj+2^+IUu$K>dn*aouvMX7
zpA|JT8wDuNVOWQ?z~X%!Gbu@X3A*6Yhfb31*>49I@|iiv?afSwuTl#cp<<xxRzs@l
ze0sK)Tvg%Cq`c8eaw`V{{{UHZW#Ko5wXa3G%{B1e6~|8><ae{wZX8S(npGqcSM&RA
zpI**y{0yr#P<<6*K}~4kq#gxjtCrsD%i4XtMr@Y-nUvaRyru$_@}2dWY>f+ardq(?
zVt`NFF%1sQ(;E=SzVL{$IMJMzv3&L{#ZZ@>QEyZRif9*|ukX|){lU8EU9UAZF|*(%
zy)y1li&yfcL1&2nT1{PgfRm2>rUD5umb_0Uz1laPH4-c+Dp`4MH}V>163~IEk#UHt
zLHCwtK#5hCs9)y%Hiz!psk6IC2_O?H<r`+XN8bKYIpGZ#dRH7{+(_7x80xV2fCI#H
zb1;XEzCA&ywN_o1$gTP5J#gLq^k~lrSdh}AtpP018v5-~%9_MYsYvuLO=(k?kZ^%W
zaA-JPzbM1a!K0&&dy$jzrn<_k5fsKx_eUL<Atd-KSfAN0=(|PzZRrD(A$+!WcsfF(
z_GffYple1eb)hX5MAdCP3EBj`Tkh8dENqOzzH@HmlxH8^G2-ovo%s0<Ek8<4TO#y>
zn9~!iTQGdOiYv~2vIOphc2Fp=-`EhXstID)DfS_!(q5S4bf~7rr4Aivm*Sx{x(l_7
zyZG`2eNGkvEpH=vz1?#5iZwRx`O2VcJH#m~={wfS$Qz4bXSOEUAYq0m_zDx<F4+L)
zwUCSosof||n4vGq;3kb_>Suxp)bz^5v;-FbTKep)RCY+s0f+fy^)|s#P~xdjxjV*#
ze5HcEzLKJ6<E4;x`_-F&)bi&PpONYrqMFfpfcP&*nHs%d<IaNq!}VYB4(lggj$N+F
zO`(Y-a31Kpvx-++Q-q`LekMKdp|aX&bt?x`qfvBpw9FDWkdKB=C6<&X_I-jCjz8>E
zHxplPHLUrF+%1bK<=2`sR4*9yljcgF@e^U`j1tM6FZ*iJqE%XS(wJs1U8_P{!aeH+
z_x9%>sRdSF>f0+Dy=w=q4Nwg&sSKHnLLaD$SUtBClnfW0iYnVzBgh43#QA(Mh<lFA
zvn};Wb=z)EF(X*u*F1gC&hHVEtfNuC!z5nSyGmrIKz84nY^+3-_j>_XWZ14rkbQD(
zBd1y#j511r60BQL2<S4-W21}{t#>_!U}i=wY(XlUL}p#vMCl0~r>yss@fN*=f1K{J
zYgCgz806@OJH`L(Z(sH!{SVL&W4ps=f-q=Gye37O%gjzG-mgRxDC>l}?B+M2V`^3X
z9E)2IZsoF7-Xg@b94}K?b!{=CatH^culMZe&6FA}ppa8xE>_^|e!oQq+9hv;04(V+
z7&6?olSOnzC-J?!Y@}CuE~Je)YuCYk;*g4-^JWr$K1#|Vj(z_%c#;Xa$oM6kaQ%DY
zi{darnt(-vCQ$0)%8grg6KVR-v7`E_=E;J36flb~LhrNN7Ypf|=uf#8S9`t3JdHg7
zraq_3fX70lJYD^Mpidz+R9#(IH!K5JRVGUrF@Yz~XFp6lQ_=h438C4x?jJ*|qLQLl
zk@B%RIPop6AWF8OO_2%d{<{K?hfXWLf{p9hs$;ziAsM{xOYHh)a}~Y9@TA7P<5`Uo
zrgt$0&8r636UCGDicgK?z*ms@y)tG#{b&1Tn_$mzU}FR!;I^cuQlwud-dLcu=oehM
zH`d5B(`n`(XVc;Z^(!a!axGWl#K6`lt51e}Vz!}buWWb9Gn-p2pZ~Bf^1Lk8U|~YE
zqh+r%yO<MKq069)rZG(?O-mDZpf=-Yx{<uk{N~la!p@S5nS`e?3ZzJfr`^y=ISLr<
zVov|(`IcMXx@b*|VYw$d?-sn9xR7;2OMf(k;6Ho1+b9B?g&PSCF4UoOQdahQCg=rG
zrAe#k-5XXpmzq?BhQ5TLR}HES#Y+=+?09~ds!u5LHLwDt<ql=cr>k}BUgrd=3(tRV
zd7-M|J=|HP_}1crz^sZ<u`K!#Lhy8pWL5619s`9TX{##5h)_G8%S}{~n;dB&bcwe%
zA?5F2nWkQRVz*Ua<ed|%3qYd{d_r7V-(pP)S|wlp^6iBwU|8cNEnJc_8ln@-zLaVh
ziYllMa|ij5W5$y5Mqe-p6fEx>^kz_QJ)9l6os|AU3g%hiCmA1r3LEGRHD3rTvFPo$
z65KZakm>c!G}6f_HF!LoZ^BD7wx@!<poRI}JLiaJ@Y<}TE4haEH2-A(=2>o8*^3I9
zU#+Zo5IAhvKE7BA{b`u9{RoHXs~b=+Z}sJX*GRmKjF7hz!v`6uk7ys1f{=#!8PMK-
znd3Bm8x#cm>`$bTfP(x@Bag2OmchvmkBqd8=%Oin@EcdG3T;oG7Y&s>$O}=UP27<B
z|BlL-2f8vEOtp#0c(RZ2qS>w+YMzW+HWE5RmYB(Tw?CUXlYVxqB|7&+%P6#3quH8M
z_NGDX&<(0a+p_thdP$<x0&eJK0clLeZLNE;ncQmZ+@cv^PMxt=bE$zfnpf~u%UlH9
zJ(TY8+*$HDeYRge7vIgiELjy)X6VuJBOpdUYFJ{Yyk&mtvsAYgEkC12xQqM|$txD+
z@?ySUI|t2fC78GT=*?(}p!<SOcNk^EDS4_zBMr>rr?82he81(n;mg|Y`;7;9+zBgm
zUd_Wi7w8*FTE{=B$XS0$O*X-aRBPNBsyl%edx2cJh(9r=;C2({q!L!a1)q=BwA#4t
z9C=~p{cd5=Z6qZ#hH}+VhV{LcW1Oa~6s&Ww{$A@spZ}w6_pjUUEmN&`YRJ}nR{RDJ
zobo=K`>?<tpL%;c<;4?&{0s?%?U1e5!+o5gK&9bn0%e&R^D*&8NJ%RSU2r}1PIh0Z
zc6psojY$82d{1Z?RYVI+v7RZcsf!cZdLY7Gb0y#2)4lc@x5x~!|MPhMItB-fjVsFB
zi?)Rim}R(MkvdRq(tX%4<hUE|Bjcklx)pr;YLiQk{wFD#>`9?mTDIEZUfezVU$%im
zgps)xdd{Ut$Yn{H=joQ25hK&l(dMf`(eGRuzZn!f9w&0(Bz0w=4&7OaL^57H#)LcM
zsiWpc6DZ1NGeeY?#~Oc}IUyqjesMMM%bKF2_cNHP0l*yVzTp}iELSQfbIUjWb<YPq
zF;3pm4ppu+wBoO6(>95O2!Y<rB;2?6r#3~>c%-TQk{`T`lzl(@z3AxF_sSP%yQXW7
z06GSL8(%o`!PrNQNBDu0;Apt~jrIAx{fUX24ms0lykA3`^-9Xc({G|t^63UoPknFW
z-QX@wx)aqU-@6@*TL}H|UVeBdlVZ491%wt^x8Gm3OT_`K7A_C0j23|V7I6Tr)C~Q|
zC74N|Dzq>)Q)P!JcV^RCkbgo8AHLlDnexB~cV$6V{q^?I>3wc7VQ14tU4FB~(Klb-
z^OuyCZWkCeFEmHuv!y;(EQo{kTJya29EE~BqrYESUdq@DMv0kt-n=EKw|}x&ze3Xr
zwAvzKw@k}^daRae&W)PxCa|Qj+yA`hB=O)U1`ReWY(-l1i&?CzOCX8Mx7qtnUX-sO
zXW<nfCwZJQI@2DYCabItCZ#;eBoVQmHmod#DjwHD4T9Wn>~PDj&XgvtoLFf8H--4?
zbN>DQ>yjFtHJvd!*Om^&tb7ka$of>s!QB+JUXBtZs8U{Y+448=>jwRba4ZJvY#l?O
z&%XSObaxt@`$j$An_yzFP8Oe?-N0to?i4vXUA$6qDP7L;m`dhlz_%x^%zqhScE_C}
z%yJYVb|mV~T~Ifex~8Q5{9VF{x|hbLRqn$i(Wpzgnb9fF?q{Ue7zA}dvP<000G;x?
z5|&|2L1nA?+1~v)@m85+;8Ww0?*&Zd|MwN2+(EgM8}idYzyC+`CcU%2erGs+BkKPC
zMY#W)*7V$F$dl&;Bk-4WxDFO$)njAsA@Ew<<VH+xP}4c!K|?%!e_G`nPn<#XcV43b
z3NvPY3}8++ckFNTEhJ7J^~@A(tLBYrGUPwHEWi_W*J?I;BJa)YUadoEpD-uZF_idB
zs2pOV%2C|4nbnoh%C<Ub^r12E1oS_52k5x+DSxjq$nL~?Bz;eKl6Q6;RB!TN9dv6a
zg~564V&x^x&<CDtPE~j3^%tUK4#)-rjBx9^^1E<B(VlpDoq0*W!pooE7zC|-^+6>g
zRIS(+*Z@G@wYsL&M;w;`K>phj+VBc-eA9+E?EER}w=&-Q+jCOf_5oCj1&4E&sBJe|
zS299G|M;6Ot9h(kV^I+NRoE8Imnrx^_oqF-7Mu99QIqZGx9?XomCn6*f975L$Lq7w
z&Vn(GJnvp`a68W%jQc`M*fF1$qp8u5S25t9&D|8NEi0fS=?GKt6qNrIf|eea(6UUF
zmJ&mXUQ)4b>)&j^_g!>(@hw^R+7{08ZMlxff_`80ev?P<NGEve*cawE`~Q8(0i<*S
z+n^u;wbp_eD{|fK)<UcUtF+`R>g@(v$b~8ogQ;-1@z`aU^4&hN_=g|=01CYCLQcnX
zpZnp9wu~eBSygMt;9uyXF!=4|4zAT51&^#3=9#iID=^LCX@6w&J?h7rnn6_`^}+4`
z`I`W-`;#fx!YGXc+tqDsT`$sDf|+?Pko0Zu#*z?0rp8V99{ZI|oivH17~dTTEzi=~
z`Z7m@bLj&yiSw0k8HemsC^o<y6Xp!vx1(Pw1O#*wpPPn1g%>{9jd`B;`DIknSn*1O
z<!6;DQ~S=VvUUrU#ITkH>uifluLF47p`>MXSL*+u7x49Xkf6pMa<x8S>+DR(dYoDq
z@=iieS*Lfvb(_bpmKXv;Z)C`<@}TU_A<>a2(_+^%XH!{LG3wq6w}TxZmO<5Cqc%cj
z0l%czi~j(=-MV*+$*89gY=H06ry45X#0l8MdC%ph%l)yC(T!bbGt!C_7~1p9(a0S6
z!RPX!iz4aIKke@n5;l_ip?Lp)>toX)G1WADjBC==A?so9@aCsS;Vzo=2dZEH4^v;^
z5cT%Fy^4T<gi1&*DIleEF4CohL3ej|E!~~c9ZGkXbT>%nvh>mo`!4r;ufO;F1E1O1
z$>%&X2OhrT?|SZ1E87#&$)$N~_OvpovgDP5$`_zY=eEW6w`G=_1R8*s7%BqOm8A>8
zr+{xaB@mhzaH_)A-$*YlkiNNJld>S=%S$c2A`XW{xgCdL3)IgwngowPh34P7m;BWW
zgFkedAl2oIGp5~L#cwK00sWYD;o;t@yywvZ=o%SqS?6Si6`8fGQJbkP3+2l{s>R3o
z*#%0({4i7BVFTKAedC1@5)70E>i*1{#yLpCX*K$(!^B<vDo?;mKEI%Us)o(*7md2)
z!X<jt!0J>574sEEcwky&&p@PxNg(=PRYU}2K64p6ET5C#I!a&XPenVm<*}=>{eBQL
z`0FbD<WA7dudfGafh=lQrSGT%LG7H@WTFndxtk<e!L}NF24KWeW_q^jCxnUHY^Can
z(?Ey<(4=R57m8g|^_$0RXt&8(R&wP<!pYk9E4ik=7@_Y$drkJsffzf-_a!Nb+dgbg
zA_&6fzo(dzf7Fnsk1n-)?RV;8QI%j5q%`%Of|x)fwJg#nyX!I$80W^|mMl@9gomHa
zAI*)N*lAK3;ajYm6KhK^_o`Cp^#u@+`bN7O;XqG0n%{>6s=oZtc^H@)$JWGe?_SWU
zfCd~g>^}d_z_P+3@<u%zRSra2Zg?0jD0sDbAn*B~AOJIfnola1q7R+Z3n`&-gSzRN
zobO*EsPoX~kOVMm-sL(LS&*0}*@+jrhzHSWSJMRDMb~1z6dV31jc8?`76kwpxsL+{
z?|*vxD0=p}v2kbie0-~!i%Z`&i%-sTf5)5>oO`sq4|~3W6VjP{W6l2H)HQ%ffGUp2
zq(|?r(;D2=xHAzf=YNk`XK6`F&nfI+&0{f@?pJU<*;t-nN2r5;>RwW5C?(}`Y)uHs
zU}Nc*J&d@{z18zM3dpBd6=XllYP?CGBWCpxQH+thb)F_Go@8FPlfh2j3XAQlbg*mt
z*qe{WRbNZ&=|f(#ZeU~#YjrcmPoca7r54Azxws&}f<L<(sj;>Hw`yo6p~}f>aGAip
zcFDRMotmE4RT>p?GH=GEqS-JzV}=u~YN9hk+sq60+s_}$pJnt{@Ecl3Mgo+t{Zr9C
z$@4QlbRSa$iXvH76hkCH%|rSd2Ul5n@1;tsQZIVCJw@HFe`-+8aVS=j5=!vjZdz2c
z|Car$3GI@#>&s5Lm3To3r)do<s=U`+*tjL4{K36}F$pTMQQhA3jY00UfvU-cRPmSz
z-v(HZ2vIYUtk)lN9!8kik08@orC}hLYmNMD-fHV3$Z$V<QQxH!=~bDdYY+ybhj`zF
zaa<hJxKrVeeoGCa@g2U}SO5JBfC$W{I?L?XS}S_y;$E;!4$VYJkoC4R0rcjYQO*bt
zi%O}XeZ;b%Ki6P}@r;<KH>bj0q0G)X*3qW_`=a#|06r<A6jat;2Xv~MZ)&{$UVlS=
zDz4j;ErLybvlCr;A>Z`z6%AG|v@EM|bGyekM|Obq0h}c0G-xv`$r((;3)Qc0MeLpU
z--+NbI#|vp)eeUq9e;|7W+?DDQAyVvxm~>mfANd^9I0s$5myC@Sr=U^vIB|dC@jC<
z2~$HO?xn9&_ctBZo7j>Av<p8DIblRruzgOUiTfV#MYoz!<cnymI4G+V4-#zVKRrh*
zCRx4xrh&!*E0~C6M+j?fR82fWcEQ_s^gpNd(!*5qF0VuJ=#ltl7{?=+0ih2Ga<*Yt
z)I7RtW1ArxU+pxqn%#QwC0JF({>N|%68a0+LJDUMN02NAp!^Sl_0o<eOej~s%p9V6
zJ-&jR<*4X)+g(ou%q;aS0)Q}eD}zl~12OS|%gOzQV$vX3&J}jNZQ2V&o$&9mUgWk@
zvXx51MKe#L2*GLTX-6U5-|>#ALsj7pN+6r}$x#%=HH)bPjdOGP?dM4;8w6>(6;2?!
z<Hv1S*4dfG461zOyS{_yt#r&mVGO^V>(KWmW~IOQOra;J<J(?;iZOS67lJD>CpvRT
zN5QK{JM!?~w*e6Z2%EqvGoKdfSkD<e1v}~q5UCLSVWyKDa1~h=-Z7&=%@Ye~6{ai`
z+H`oj=eR(8FF7wS<xv#fOvbt@j8K8|qY8q3Sg|eAo=_?aAcL)4wskZ#cHZ-rl#;~B
z>f<u4aokPD3k6kOx;IM9YZ<vNHJXSnaIw7nKOwLmYclBwXG0_EA^0RAnZ~T3VBFL-
z(BuTDW!#F?Z%6mKwSG5&AM$G%Fn{L$gaHSDPxe1!v>`SL6lon(QVqiXL^&r)(L~j#
znVfzD;{Gn}LjKy(yHI3gDAT7zbizw-Q`}S{KrWzg<V67W&Ou7%|0UE2t^&&y-H|zM
zhA7*kdJx}~flRnFxvL7XWEFT|7rkOgUX3L@StQMDUM=*^M+QOF^!Js4=sp~X;PeP8
zF}~N)UW*wW7M-MtPo0hyOvc`F{Xh|aCOwuvD@%yuFEY`%N*TJOcFoSMI%7aJhnf9J
zr3w;~qp`sG|0#imulC!i9qlQ2fS6RmL@$?4;$&WQjH}+=xsgFNYG9=n#>CEE!sWi;
znp1QAwQ`mYj3@64DEE5Q|L^r-nU(MHWg@jU-9$M&Z;xr>=Zo1>Dg)d!u1M~@nZ;xx
zWU*vo-|IeEKg-Oyx?F59VEfMl0IOG(F7&Qm*1MlZt1)c(XCp(fmXGS$(@#$g*x)R;
zB$I*$m=sjZ4IXOrI_f&pid5l96T?Xb;in2I1^@u#vp=$!?b)4rPaKq$TNl{~YtSQZ
zLYmo@i%%T1EMu^di2JFUT?YojjZfy|eP?B=t2=T?Lh=XukP2Vc>i)HX-Zat_E`!L|
z<LA?Kd*u54<ms;`=ECC#;I&G7m^}`Tir;d<LpspqVvYJ{vS=#ykxNPDx}wvM#ZE6;
zN}m9fsS(tj_UssN{otzZ_C8i3Hq}?8NM2I3joY~&{C!DmqRp4rj5ztHGo%C%q;cux
z2L5HJ!tjJ~aP9hwzgy;3>#NvpT^?90OaEXx*?W*eFIBFE;zm)TufbDh_3q+9=20(n
zB*bFBSS=43g~)Sq6P~Gk=U2Yc<ZXp=4hmgAY4>@G2uYzKydomNw}(TkIWOLx=xB>}
zyVuNfthHn$7wq>~n_T+K_$G7XgaoD=tz`0+CZ2ilQ&GqNlrhln?tk^^<9{mg+Q1qe
zHSo=m2?fY5D(+kh#$SUqzZ}J3izJ4}&Io+(?=AWq$HP?PN#QcnT4XqGU~CrWvi=0X
ziH`^i<%PMvT{Y{SFK`Xz4Xc;=PC>bGjGsfL-eLRbzt@xC*~!JWP)v4m&uyC5NDM`f
zD<wMm@4E<ln502Q(VHb4a7lMX%CB7wGD>Y~_M|Y0I~52r<c$+qC&q}hb=!V_)-0aA
zWIG%K1Za!=6N+WuXv?oa;>Q&IoNr5Q6eS7O>PdRS#kb0%6uy`nt3_tMk@5}WFMqig
zslQA#Nss!o;+Dbu_umiCU^BPnUkgU_eB)PkiW*fUTh~l!0r}y$is&c9p}rF$y5F!c
z)1tt3OWCTI<xr0obYkU4h&13MGWJB--c;$U=vH9cg+C!4u>oqpYnd2Ri9m)Cc9}*E
zqD35oJelinD7YXM|08c>8}f<pcruwyjgXaY<+TTA_3Gy4PgNGTe<f+JXdiq+lCwGR
zs}a_PjDKB7E*0`z(H6H(c^vN|X!hA3OwLg_j}+HH3T3!b$PeoX*i_B8cOe4=D~whx
z_+NGr2KnvLAb+n-x8>ehD`o{O>YPh39_J;6qQ_!CSW90kB$ed{iS4`+4D^<*BN<G_
zCSwSR+BU>c`|zI-Ugy4PO>QgY&D)LK@PgduDnyXZ@l)2P-!&N|ttN^YKgLjYD+p@R
ze{IVB)~k>}an1PBy!F{X3lY8iMO4(T)-B&@#mXar-iKlqv6cR+q|BW$)YnoTZ|0z5
zm{=8ZbkxU)u}%+ELLynFn8;%TnS18E{}>~L83+7Ng!V?trkZU2NF&|@6Ut)3+-vyN
z_c&k=hhrtK&54{U_SiC=bV7H$;`750wZrwS?5r+h70*J~AR2Ul_Az2Q!OLI&O2VzL
zt4i5-6GMDKr<l{8EL)wT;@*1B0}tD?5wgAz>*Rmr5KPb+IY3BmI;M{$VpV_qw@7HW
z>5*{y&JT@DA*L@yE{90)j&>GYxA7pcrx6gv0X6qU2JYRtT{B^^!fw@l(oxP7fwtis
z;WsUyxFx(mRRqcBDPsPtJgU&!Cubk@3o<*=P;2$+SBcn^Wr#8EJA5il)(_W?8uJ2K
zPLA^Y&jfCvn;p?%))S%i&ANj)Ctscfe)zj3vOFCpG;($8o#w#I8_~J@ct<@*Jf-Li
z(k5ecVW{=M<TC{jxyCYs;LBan3Df?}HWW%TpllkRZs|^VA{K%f$M_1dCPMq=IBM)|
z?Rw7Q<-yfk%(*ljdf$ZY)7ZG867zv~I=!=9H#u|~A?sb?`|VW8?Txwt=&%1qCvDPb
zb#>@9cz%1^So=Y6KsrKJO(#rT3Ys<YinL)LR0LX>x=eT;gWUJ5+rMm<Thgsj-m(Uf
z=Ki&bPA+iufo!1ExW~$kZy3nWJuTl%B_{U?mI7J(vpsAc;;wEsk>54P+O$CD^b=?r
zrO?aYm(}rqH2|1-(v4YL+rP>KF4%(em%)DDfqCepcojbS8QVN$jN*)I(!}WILGbw)
z<bsB>w%Fnu9h)rZi20rXLLZR`MiPVeOmI()&+qR|wDbMnEX&kapoVveavx4RHoxPN
zuF11yy91Kzn+HB{hZ%u0WsV29?+~l6c5b$7iwfo6s#W}Fmx#&s-zh`}4`uP_5&Lt*
zHY07K>kx_zOd_PXa}*wcMv2&ws!%yfKQu_uK(ee<rz0z#`a~5=(`kzYM=Oo%F>&Lg
zrvBrfC2d2BK?C2Xwbdcts;riT<~-toM`?s8!a8>!$jYg?RC!G2Av(Bh-|qYeYBK3;
z*sM1HO40tIU4h5FITeZZ-7S4Qhriq&l1}N0f=yc9#GsM)kI__lkz)mxSGm>tNcmVf
zqZigc`4w%xx(pTa>j40qoR9XfX1!H@a->Snt2zTbPM#!?#3F~GauuX>p9ROLF%a6<
zYi|+tyxZ^=D~Kan3p!>0gVTILm>h%6ClDjW#E+n<|9kcVWpQ!WoUs#AB}I#HT2K_W
z;0CQ)YC582ILyG?mot<THRXrzD`kGv7-1X;=?2~GV|xtmH~O6*dHFwXVqqki3CStA
z%RJMQn~p&H@Zs~@9FeVbn{5h_P-a+{d=Dv)o5ZwbNHvlu$~zFf#0hiMH%}f0Q5327
z0*K{{|2s2OBd)H`nM;*b)+SH<22<V|WRWvas-wLYkc>l`bX%tU!zZfgvR$U4ZxE!a
zRyY}bD*_ER9>jLe258%OJ?2emBJHy{)XKrE#wj8|^$7aT^(?j7yJS2v(Q9(Hf&3DK
zOiIs>B4j5SR5g>o7bx|R9v9&LbIL8p29Ooy`?h-D-^zWxVb(|-j?9jWs_}|ZmYQrV
zl;#q^vwA&sX})%zFUyj`>9ImAj!2v~9wB?FT~vVfe?Ucyz`d5qkg#+snHUYs)<({a
zvKHcTTV6oR_W<KHQw_stPc)=(W-`-!C!4TAI@BB|g;<gQz7J3aZem8R`L+r{?jr3i
z3;nQ9!O&vb=NxbXF%)1N86L&5vY}{!TC2_z;qcFy7k}(M0K9<Jt|tg220xr#`N-94
z^<XvgYJRHet@>z;@5ySrJ`VgKK}wuACz`F5{gfGl);Ddvvr0engp5Ifn;-UqFt{>c
zRE!w9HrbB4i~XM<+V`umD&k4-h43E~pLqAaGJ?cS9)Rjvk?I$3#+jTHjyo=ceb#ei
zG^x5g5>#7^<9Z+tSO;wbuN6vQeF^Ud9O~TzFf0N1*pKcZtl%go?{FBX7_hC>@;PU}
zRT5s$UW}8dXv+qCHN%0)hG_Wr9|lf&D87w6=?_c|z5Ycf=gxm-?$W>}O^6nHPxzl$
z?KeJLjE*L<uzo0wZ*dro9JV=RZD30rG?f}pmi_Eyp14)8P(%JJF_~|s+#A}$3~Up`
z@1Xv1o9a}Nn(7WS&jH#Sk5fkY=!x+_X5ixYk*6jH`o>9~^QRr|6|3X}id2@xn^Bzu
z)f^J+3L1)rc{Wj%>|~4EzO$V=+dJ)c4|@|>QPFb_9T~yz|F6`UA>fxWO8jGB(cbOi
zkqk$@{O-*TmoxI#SNcYk$Ryd!<Hi4uUsQ+E$fw@@V<AJY`-?PWR<GPyK4NO|Qd0!V
z_zZzEYIj5l`6@bB$C1o;v5B!?2B5rPl|*AMckT_i?B7#VPz{0v$f4$*jzmE0y;Nj<
zQ+ebyTEqTeDx%{}98|*Oe`Nhlczc2CVei~LRvmm+SyKjhfE@?%%0aklk;UXM4a5~S
zubK(J0)xnA-%vlryHxu^WN|;<xctkTfsCQ@X#irY;WNbGO1XCZz|&mtdu5)59C=68
zC|*CtK)Hb+^YL-K(6E`cU0D_LZIPbMa#jy=)q%9LmnL7r-jA&zO-wob_g?{usj7<@
z1mFa0;qS|wR5e&zp_P{w2bh$~{<%!C*}XvlWF}0)VIPInm72<pEw|0-rFLsxl&#<F
zKf%~TB)X@Mfi0_iAaqOid7dksAcTqK$H1@7g|op-LvsFjk<ltV>Be^nw4(1kiEw$e
zaM{gS_vp#I@O|z7ZgTcI7fLU1Q&23l6N?qri5uDNOJShr?Ru4mqUIfzAnx*7U)^$h
z!u6>^(JQI4V)`>Kcf-6;p23{&mMw~uWwPB42rR7p<6~zetWeB{*g+C)d)0td>N&=6
zA6UD6w42O{$@IX_08Fb<D`~#<t!!fSz)32wS9bj~KAvZ4-*2>SJMZjW#_*p?v|Cnv
z%!*7)C>TCW-3gYx7B$0BFtk6J55^OpmE?N6`SopgWmn@Jvp5Ap_t2NVpBj%N3t=?A
zL8}48Uj9!QLJ;YHnT*KL38cLF(RPE1t>wnM!{-@BU_$(-X+SoEk@Hn4)Q}-9QFcDY
zZ>1Y)A_OAg2sIf}`f&B12!I)kYjZ4Ed|B{1G9@8+^S#jV2UTh2O8p1e>5ZSG3C-*f
ziX0XYO9Xg6avpUmtgEl|P-y-KR|c1K_WN4g+dzbU{F8-=q+N8dc;u>!dCwx79aSKx
zF-}4{6i7dKMGZ`M)tA33Ow{^fmO0wkUwgdR88-U+{bJM;Lekyxi1}>Fbd}OYhf_l-
zp3Oz4>*6t-(y!9EC98dV=wedq(>+oh#o!<`bb7H6^w<2#VdCN)x}4FvFP|b5@fhvU
zT7<HG-em@;(4I3&xbl%pju6Hoje8I>{y6)pyc{1*qIMiV-uLr^sL=>oFrT=)Vu-RY
zZpr(ORiyt!QDzB}2wayQQ2izfdkNtmT|Jp+kik?zB~KiANos9^x6)M;G~Txei<hDY
z1@P+{b184VKf5y2RR^^9=pk;p@clOBCh0E~zfGYqnMJ*tRJApp9M3Ms0jJHFcJ8FT
z`F1knNY;8<c|dh@lFLm_*uXk=OzkQ3)pGeKCIQ+17i&osnr4`Z2_aSH5xLfyg(QY#
zOPcX`p*T6JZqJF|rLif#)j6Q3Z?`oF7f$R=wfm)E+whPaWL3;&yoViF@&mw#{^%+?
z)~`RapJTUNxDaZ+6HNNfjYcKZWRDV*Gp{Qm{RN91!vzZ7lxLf>$SVHWOx7rQ-Sr~=
z{qBFt0L;8Lsmy>Lh(f$h><b%;Nks?4m@|lldpf@_zM-EXO_puw9)SAv@sR7slOb4!
zw((*EvHl}vH5WRI<}VW{0Lr+JF)Vs4KV?MKHjaEoHwRRhI)JwMPTkQ{OpHfJs$(rq
zxI31_qX#KQfv8JzK(}vqT0A@x$L52fk)v~*EmQc>_rFCzF>P0XZiAZQsq;pP8WwVJ
z3b6aDSb>Ha-^N=tb<@EHN)?`QJQiH`S7o?0y1pl>lA}*W6V-slr8A$zcbdN<t_Hln
zivjR4SLQvktY)D;bgv`y^P-)!wl#3#hLplxiezSpK^EoZt=xPEL^3ML_4Yy&_G?AP
zcV#lIB79bkwv0~QrhnrIV9$&Hvy<UNhKJo?0efAfWqEdj@C?zP-&AzWF((~PX~UF$
zJH_1rbvyG%x@$tFX(COiN_A5`avt)$J9eUoC7S=hOmC{2=oNUmPv^rRw*<uwK}w~i
zQw|*D&$E87ZHW<51}5%QiH6ae$~((D26y{rj`VtCVY_d(#P#a{|F1%69UBPJuThvm
z*}o>YRpuSN?o`RbW%`(%QnVhPEzPUJyhk#(=WmtRU7uDsBhrOecW$UqlJSkX5+Mcg
zBiQwRleX~%`dbE}q4NOXrz*S7+5Bu=6o&3bkzN=uf()0iKkfVCbe6il0|+~=%Y0`4
z?2XRR-wLsqSigm0cqKL^(EdTfp1%94`sW7*#+XFZBzUN;=oWnL_L+iXEM$UWS3^~)
zkV&kXHdLjUJD}NMiWu|+Kn#48;LX$pYTn&@>7W4C-18jRKp?+-@Id59I{X7!oV^Cm
zH%4S>%gPXB$wi?L?|kFzBPZW9oN(Zx@W`5|RSI`sqHz5+TJDHVk<N`qAxD<@Vur@*
zV+Bs`2yw>;*ogoo<$+N4AT;y{kLURkEy3a|!3A4xBiuJCXkU_o&$t45+}8H7;{%pS
zcD2!-wg)_3WpQ$=s=Q>01MbX=R+Hhpsa(&tLVgubYU4%Wi~qnjLn_++`THAlZilo<
zSj<VMfy^t<PNZyBvg2ZvU|+h1sX4aKf8{C%S(`*;Tzt-NNz$~)JexarNaW<av7RH-
zC1bfRu3jCEG1$muGs9c*IuCeY3@n^%N0C2vrbwWjn-oJ!Ti0fL3m|@k$^WdzvGvBS
z3)6#!m{CYsv?lpT`sk$XRY91tC$b^vcH)7N_{4L2`CqU5RVYiXqSw0-Obs=jp)Vw2
z;j2#(n^XRGl)1W2KMuNN*gU{oq0ai3^KohXn-2a8$+usv9pcrs@`e-V^Wv4ko1GIT
z&WX7So<nOWq2I1GE)>0Mo&z{}ACaK<aY&tK<hdpX(bl_KcHMIV*bu!+>K$G^jR`^n
z=`Y&3-ZG1yv+&*>D?1!x@5Tv>sv9RwI932iAE#jdJ$ooN9!#Yro$PJtO>RvTU({T1
zA)*!g&(R}g)wNw9hJz3{iU3-@inU6S5Yu~+8KQUYlN<?O7PT?|i~1<HRIqnS%1kst
zz~{j4xYHi3tYiScCH#KD{5dHK)Chk&ko%kk#ZDg5pl(m=$+(nDpnnmT0&(U43DJHm
z!YOKK_CkrDFOH43E7niIioJ|M-WELVVDJE=%fP0*tl>hJ8a2C|bCEMv_#q#hwjre|
zI#2BXy(>3G)DNK%{3rkXH*Z=3IN3_D0V%nnN06xFHzSP=C$?lRmAl$zVIzJl-ghUq
z4W-3A?jydaywW@(aq4E>9SY@d`rlSJBju(TSEB!?7cV`z#H}j`2{vt@3$9GKKI!@d
z0;5a}PqbmtR~o^J78$9E4K_!Onc*~L!IkzFo;)7V3m`A;Txh??1B5<uqs^^{o~)Oy
zO__$AP~C19|DNTe%!Zhdw1-U)lD5kBIn6P0h{+<w);IZz??hFMq@4L==ctX4Rre*5
zlA7%G`aMDH`~CMs2=q@-F=5$z@{B@Fs4YvfeMHJ+o^?x2xNaH%f(h0mB+dCmg(!5~
zmyLHSg+(X&@>uuCCr1I}#1d8CgKfr<0e|`)OQ!6oMM;y`v4oQxMd~=;0gdAlsp*d&
zg-?X^?@CXvZ|JUWb2UNNN38u4u=PFzLP*EBadmF3g|)!%HQ)dT9m-$wLc1#kUy}4;
zsf0;VMSYX43+cy<@s2%Y(5H)7BeZzMAGd?o#0Y5Dos<c0c3!hYM}82~*^V@Od4JA{
zkeRu;+YK3@tydL{c+tdv8z;asUoGTW+323U-~-}@u=I56=rr4!zG1gR>VtHA8t$*u
zU2VIJVo@K1AiLctb~5$~tuZN%zm;`+h4|Kio`v|7Lm2chr+WNDDO(qhC(p)Lexb16
zMi<OkB_iVSuS7<$r3hlpnBHYTEXqE8Q?ZKU@Sor9>>77*lY1tIivYVHJ&LaHFu<H>
zzV6QWp|GgFd)N@p_>$214YCZxjg9V|Ixj6XrsbC@<Ab&An4JB-DE`9w7U><P@Xo3%
zbHZjE0Gr)rU$lb}N7udE<lDRbe?`RiHK$lR_g)u^?qI8YnTIq6VYJm!GY!k8?3x`2
zUZ3;fl5_pFq|uETYr>NSE0vy+3>YY#0jlDYua7^Kc?mFgFMoy9PC0%xUOFs>yn)RY
zLEUqMmht&hIG&_5pR#cj>t~K@`*DthTC|t<($ciK9JVSOYo9ANBBEEXL)<}p)atTL
zQh*=+EFL>DXS3k@*>Ozb_zv@Xl{Txi4{SS&NhNA^$)oc|#qKj(fB3Zptycj8w{xTU
zq0Egz|5~7S&g&NLTn=w$V^GXj)Qo21NT1f6`rK^(I_R|ukLXf=<ue1NKSDbSi>5{*
zQFkt)3TR)_o_w*o2&1t`0QWtmo|U_<K`bIy|EH@mPO_2Zd){I&V^aK)uCc<F$_U@l
z0yLwMFxo^j^-*`TvXzFXCtEjd9+F0GQy^yFPZOBqvfl(?vxTNPO%N|1p)^7g)Qp+_
z)LIa0cwR#UX!_V?d3UH?_w|5Hjp#Uv{D&(NO9D<`oM0N8m&?7fHvI>nB=Le&p`6K4
z>N*#Uf5Tt9D$bHxo&oaQHz{4xS4(<gTCW^iyr4JZ*&-!serBdjzEk<1R0zg2S=3Ly
zt;L6Q?$w|vguf_r35pMHO|ZlPXn%ObLNR46rsw9DN}US0K65jyB+RXM(#bdO_f|Ei
zrDOBinR>-6>K&K9SYa~aQljs~5!wIv`$+80JHIIv0e5ugPyq~m@Ln&}SrydyF!5Nn
zUK=*9`e1B@)KyoD@;M#m=Hx9j1!94BChd=YVMl6}WkIYw)9zYZjx#@cL;-<V^{3SH
zXF(VygRj%2)iNFg$G3U~X&Qh2TU2}HP%AqhsgTJosyDDFMwV81Oobp|n)+VW1*R6~
z7`nYzn(C%JlohAXuYWdg5K`u}LK#feQmbc#KPkssf<6iW1zA;{m=m4=s*n&!4l#*a
zX=2@0x~Kqway(V>Rra0TyVx+^g1elRU`jCt$sTE})|LJU%nxecebETppTX017;$3W
z_d^Sm!Om(l%Bem{bCm`%<+aK(mW?}ad11|`TOplL@Q@it_OV{~AQJc_r5fJ$0AgBs
z_$+J9NG!7{E0D%1xYf_jdoQ$E3k!K2<l$D>bgO2+nNT*KWd@Q81le&Mc=Qq*Pg1dD
zYY0A=&fg4yWi2NS|Mfqw`1Q`W#p@iuY3r26@8f06o@;>ia!53O;gM3|392|3-d4t}
z#Wh)05TWg%S0<1f3|R5+RDC%|56t~u<{B0wOskeA-^uz6!4>!i`Tl5O_QU$hWd$$c
zNA5ee3GwDD7hDvA^@1uW8e2+HeupH{C()HOmp;}R&ntCt7Cr%YTmN_z*>TVBi+Vf6
zfKP$(FK9E|Sxabik!=qfpjhd6UtrX#6;Jhx)fX?lR|;-dZWu)Mx=}2ag;SW_pIX36
z;Xn(|le}vC3lX|B97%{9xr#4|N<Ku*GP_gj3isgl$Zh*b2_AjuagIH?y%;#zFL=v4
z&nx?1Tczk{2MHT%t{68mkUXNMxU4E-D0&vn16FEiK_7UoyBA~Jv1}modH@QJGTUGJ
z_7mSp*>u>i&}AzS)cJt`7f_D#Prn^?z`9ZN<vllH)QdEvFG;HPx%K6Nyl#3z*-X5@
zJM>@G8jFO$<;sS{zN+4}(R~rusgp<?HgISNg)szHp#C6qWUC=6&CfrsDf0*);XfU6
zufJjEv|9ee=eVEg!hJW*GMUZ=rzCCO9k5R5O(@{^trghQn#d1L#{o5szq&@c?PIb)
zFD(htwY{@+VN@EFFt#5ssfO%~W)I8VGxMHwo0-7l!P0?(m)Q2BEX{tk;1wB@%h7vO
zq66jIi+_!Q5kFg%&a#9g{A5HrLnO?3IR=-y`=x*Chj+IP1H8WVnds<v71%Gi5P&=T
z2mP#<qgcmr*e?|vNoSG*U>46mb5*9WAezm`8Do6pyiDx@?d<yMT@{BTgBs%BB<zMU
zip(_=JV@sN3I^^}I`I(XpckI*^y;h@dHbxPg+EGM6=M1hu_$-7pFTD8D`AZ2nVu@%
zUusG`Y`wMQJ)in&gg#o@aAl>4r2!XfgciVQ99C|`xyRh0Z4XlO?)^?ZOR}igC}zKI
zt=jw#?-m`ZFB4L>$I@1^$2&ZPe%3?czM3qkKqn3*G(-#dw~nh#PU{7F2BJP=3r0G&
zoDpn~aVSk9!Q5yM+~9oMN0?f<Uo|hW=IswV|Eo3(#o~x;GaH<(o}W4^_|&uaI&~X-
zw|8S={?*t#{>2{8K;*4e5Q%}WQwBbvux2WhuJO-=k-f2!%Fig#c)5ca*T8}R*6v_D
z3`hN^<<XDi8srXo10jo%9fr`T6C@U@*G9h!+ButP9Sj2pM)6+HMr2EwCaN1SRaNF1
z3k1Dmz&^Q&s^$iSG)ahGd;Eb!qkcuWObO%6368z@?a^%8!@2cxA0wZSGJTcB0%x*+
zCzogN;nhRI*u>UL3)ik3lgr4KnAhZOm!7=to6na{8qBsE1zl)Kn>Q5aD;?MlxX)kA
zJ6!Nod-RS}G?QfC&w{;M&->wlSSwB};RqHQTlz`b*%9nosd{fQFbdeaa`%UJ@-UD;
z<l_DTE)`gIOTBbGVKhkyyLxZo+DG+QZ$g}c5eW$shEf?LNK8gnVX1?MC7p()?wo;*
z37oR?cA~Km)Vzf>Rk`hKGo}O2qRbgVU5XUQ46)ET%9q#kuhn&)lmi|ejWP@CMNvGd
z_;Hj?_J^PAJJc;MR#+sHm!j8e@e@8FkRmd9{aJOX@wLq`Y*N`>D&H6^eDdEdsC+k_
zW&2r?OSWF6O?x;c__S7p<5Z4T*)W$)EZ3ffh0fdX=L~|52lHaRPip}Um&<Mijf?A`
zVMuZ}E2P~B?tR#}j%v&wn8_s98i(+`+d@8juR>x55D2bvGlU9HJ-pr;K3j#=r!u>A
zw-r=nxbhtEUuJFAnt!)l9*@3-<#=edd0WDdP`48<AIR=I&A=fe&L@-GzX{+t7DNov
z$`6jsn*}C<YToV;JNsEVPZojgQ9+@cG_w^)a{;@1Os)xzSxt$$B~Q1jp;7bM(lq-H
z7w9Anfnf9q=++#uFJXFp0NcZ_wBfMv$m4VZ_(0LPdUyKIHI{_Lj}lajD2Tp)hn;Ii
z3C~qV#3sPrhE#p#tvFSU>`RSrxqh+J$SKj(dl8l5I4xpb+O3RcV_v=t3iaEz(3%%b
zF5k)w3bUUgdd|m65U^RredTMFmM3(5`tj-865Phz1A0=!nWR&pGu@)D_xN<{b!-id
zF*4)xBHc2+_-TrqZln#>v3~78>O2oYH|KIo#Bt<iPZ+*E?0vr7Uekm0Vrx`~dhXCy
zH8`ot9qDYC$J;Qjf?Nlg>c(=&&I^C8IeUYXktHwNH5)hL1wW<09^P8;!fmS0E1@xh
zwm-JL1?;V1WQ`YcD?%widrpthj5`j2t4dftMaOD?_g1W2UTntI!5Zu(%RPLO33#X1
zc+3TNLZreQJYKlg9U#qhS!~Vg++x(_<+VuQcHitn^r6c^<irmAdUVD-@ihy7E7Sv4
z;M8_`zjjZ}+;AmzHm}s8yF@3<3_mnV8dYztyX#5W7WKnZQo7q8O)(n<AKLBIlzAeP
zV$Z0#C?b_&&&r%03f}ASLiekl4~?pU_bk@jB<goJlqT_5z=SPVVk>fw^&~fMr5XdR
z*^``HQS0NO$lR!)z2`a2Suw%OR6$)doNbYNNZA8)_*67`$=OeWOY1@qj|=9qvx8$e
zBGx^A8#$?uClcUOBYK)4M_UGf_EJm<f1Gf(Sjh`1r48+D#jtORz%}xdO_We~dn>Vl
zWDzWCs_*!OnPC$hLn<o5HeUnxSC5X%v87wfe%VjSM!hCcbmqThvCPY8yE)|e>S^5C
z3YC<vZoU$!1IFGdrcBBSdTe#}M<z5KHillnR^$S)fn;}lwwsdWuaXq=7gmnm*}~5Z
zh|(NUEIhU_`e4KiXgwj=f{I?|gba?Y8!js%&_;uKkAZ&nNNsbT4Mx|^$a@kGsFr6)
zEof8c?Aqxbf9ZHfE@q|8srZijqZ$jCtU-fzJS);O>JZ#J&$zo{-HCZN0fbArLYp46
zf1UWQb*~V#ZKCd6dcv_0=C6njzBGme9?81bJ?d8?vY0KG#*cf29v!J=DvImtTWlP6
zPYJ~+{kkQ3Q{L*uqREeD3^+F9pKqGSopa#HvrP8yjWo}1v+t}2Y>@%w3f{O#<sIXJ
zsdCM7Oc*$c@pzR~RGP9)43%HH36W*UoTD5{AcgxwQD;7oz^jW-Ay_s>c#eMM^yUL>
z>X+jg1us~KuBm9>w;csHZNpk!ydpTvF@L*Qv5#<XyinBze(41qZkQwgmX44DPcGUX
zwCqyZuVmbFGFdE$tF>)pyd?bt#3f&971(Gy-dn!isjfI#&ys72YrSI-{Cuf(37=@*
zcizs~rib0&q@A)n;Ay}U!QxJyhin`C7dWImpBB<D1Yh1Rt=kDjEV}TOyscYuB)%US
zeGqm|BT)SD5$!2rJMq3{88U;eRf~l~+uoL#`jcJ6&SC`Jg`zRC+C_n1u*;3vB6a`7
zgp9e2qss-n7&|wIG}wa9u!n3aQjjV!e`2lR)-Gv^2eI*SJ?v<KWqemn1Omz{9(Rf3
zKi#XVe0Tx`WvZmun#O)_u)ro9l#cwN(9f1f9T+1P8mVAol;@}rCO%#r-|5QsJWE}3
znd23zY(&CU3oIz$m-W*lRIO#=hX|vGQEn&V`!TU5lbm++sNobY)V)x>4v)(vf@0Z#
zIOfFyInecH$Cc;x^QF5RrEx{5$te{x<$R?@@egM&%ZHoK_A|b~Pil_)FIue<dw2Fh
z*SNgUXz1iH9D;dPp5cml;CWX!&TkHau)F@=Tag-cyBxy=+tCO-Ag@R)I7Vh1L}*l>
zm7khi=a-G$w_Tgr&zH4^D<Wy?>qB~}i?AK{*i0y5;>n>IPGlOMb9o4W_Vj&!`0}wM
z{Y7Zo+2B@F<ls%Z;62r2{l)oW?ujVRHosfY^Az%KO20~jz)|!FdzCayUR9#+fzgR)
zKB4avE3cd%jP0Goa!1+Xon16USua%4bO{JH+Z_)Ye*bjS%tHnI`O%IjEd1LQZb>39
zpl^4rPk2Y@RP_2RF*C4fXOAJNQT2M+ul<8V`FQo;zd~WW8N%ja6tJp%6AjYJeLbs2
z`yPH<aG13*tS0CrXhH3`|K}wxc`thHkv2_V)H&*<5%VO@C3v68{%CM^Vj`cZ+J38{
zV|`<Jp;ap5s;MoH1$;(jf0f?UCuj}6(v!gfG2U%jsO{`oxse_;t;w*n<diIIqglBV
zSb#Q!&T8ZyoK9|mZwguxIR!SOH#se`?_sxX#@Fe5CLF75f~pBX+kl>U@O6iEZO3=u
zJ+Uiv0i2i)Uxczxx-9L%CqI=|0RSI6S2*sJI#IJ8%lg%Aw9`8XvxS$v%LA~4&wcSu
z(quz_RteO{E27M|y-ALJtoTyHG<02LeNzcG{dO#s4jB@9?j-j5XB^!eFZDeJf~NXE
z@cG%>#)j;E!5JwX1(@krS(;Y9yJjEv3z(tPX5~aK)affMSyC0p!ZdlwwBL=ElNvE}
zFl6Xq6Y1cC#SOX`MzWtwr?PKuI2;k_?M9xJUOVN?Cq;0&7ZEmUzde?<MM!Q=_}hSJ
zy;ktSVxIkQKSd6V<D&S3<d4Lx#wj81`M6x}QX(ky;aCs+c@TRaO_5?BKXmljT!V>d
zfyI(A{OkfQdfR$qkeoPNkSa^idU9^RVo^7tq18n3PADO<Kg~w=k4w#^oM(!nZ`;k7
zgzK#HT68?HneL~CuZH!53nGiPv66Udb`C@qfgTX9@8#mMR0b!y9~#ucZ?*dqvtLu@
zN^{=_e<b(;0Odq|DkO8eBJQGncY-CrJ`||~7fSQgPa(19bgvfm2Hy@uRI-X#bPbjM
z5_iS)9S}%v4#=FQP+il(WgQ*^c!fWIysCZPr=7`L(1~J$WaK5k$RQN>S+s_g8jD@O
zJjPKp>Lhk&8VghFlc)q$A~yHyjPyBMYB74+;5c@EJhtg=hHpuO>0ativqGvY?iVAz
zXG3<8C0}&%$}4qZy1P}|Lm~v+F4#|(8XXucR$5yKBk_nYJx;84a&6!%)wk3qsAQS9
z7l&CbdSbm_wNCBM`k)>x8gOvBw3aIzIEI|)PHeH<$OH?R?<qsYn&etJH{^w`Jg^@$
zuU4>QL)}N)vQyyuZDS=`%>lA=0*azxc;q=6v<jCcG`vSn@NmbrGpKR39&HIO$i2Sy
zfg6$S3z+#qaF<a`OP$SqY|V1_V~n=8hEQSvAipDI2IxF~8Tc4n0mYOi>CBo`n~YH}
z!>4Y1SoV;!pMN;4|7q?z1-0t(75?2!t4<Wp9xfIrS6bW5g_=*0Cxs=sE^B7oLS0rM
z+2~UBHVy%->OX==3i1z(8>Ps%YJ&B*LYVJUFU69+0G}r~8C>xn(HUle2(n^lnSXI-
z!-o}QB?7Qm+qL&%qSc7@lm|MD$CE{|gjx7RWJM1J>OFToU|Hd(FO=ur=UOYv{E^Or
zxQ3P}1Ps_g13@3{tyh#QK0HWif=I9g+wRkEO`wEE<0A06QxlV0S=TeO714|~IH>X1
z3LZ1!Hnd?pnZV@or957l-zsMTes^F$(snI1|4<leOh$J18<;%`zn9oqZMlrV<4DQT
zv_Hk?z4IR(i!NLFs76+0o7b7%f_+wctU^{rjuC&ydjN2G)Ei>P{WwPk3a+FSZ5oRx
zi-TT(8b%V3ga%PYMjDGJLZWa-l>%dX>vEiNf}HaUXFhHM9KLAMoy`Y1y5$k(aYVi%
z0Q|2P^QU;Ai=61tzW#MnVM#BPI&YHY#Dn`<9xc()KGz$d=4>AimsQA)OM7kJNVH@W
zUwnOZs&I_Ki#5r_Qowgo#-J1HAKV#%@g7yJ2i-@CxnKs}(c59Q-8=o2Ux{%2C#J)D
zAQ0oQOk74!Y?a%x&V*s9&Imj0ejhBQCI{j`AsU?AfN#LXGQh)d=~?*s?aprrLC*T0
zuZT}9P_d)bK*DuxmudDR*sZCx>9_Bb<JmIKJ=o_jSm*6VHL4-iU+3cdd+?s`0PlVm
zL`pxgWiOx5<4~Vcw>xmK??m(u=UmH$6U$NrsZJmb+vC@?WKsOs<6^VZ6d5g2$95Mg
zM#y!VHAQ9dW4{7(N5Mr3k$b&6T6`k~BYN8}{Kc}*@9HyB?PliekLwQ?d(7f{Y2;id
zehG9=Gp``)`9mOy9?-7J&%b8J&+aMaAV#*HF-055iQ#a|ruz%^(&-0T6|~-LpxLfb
zHPOM?FQlsZ6(`;{2Ensvj_c)(>T9>}mv~ZO#4fg-IvoyAH$=ICe{u(=CZp1SZIC=y
za1HMAKNU_TxmjCR7c2vGiJ_tW;?x$;d)ApkCDFewl4`kQoNq1~|0-9@vBP=t$0`WH
z(*K8ziTqnha91&UT#@{W{auni`ELc6C<?<o8pJ>kspSkZa`5XE9N<P*eKyX{C!%J)
zT)RQ)p7KU?O<Z6O8a^X{UE9Btz93b&*B6z{IkUhWK_ZUzAuh(hwY<~ijxr0rUyQ&b
zL`_7zc+)AdeLVU=z`3gYp6rytDu2)EAfKfTrm-QGFEO6~Ic37{_hf<yYCq{UiN`56
zICjLPUv8{6aJY7?<~lcary6!;Id8W_yK}bG)Cc4dwKVw}wbZF~O+tzZP4!TO&2!9Z
z5G?AJKqx6#c#qfiV4kqs0<zQ*3{e)(HH=P5m@1^(!K33ey((KIaSrnj<GJ$#_dSrX
zpe@D`g3LY=sI_1a<gi+$Qs1IF>JS8U?uU~sCZVN{xILUj8iw39!mm&oPdYDNBssx%
zfTQtn_WWs$Ra?7TTfWi3YS2mgu|oi!=l*Uu0pqOh_{j;(GvWH~4hl-tyxmp$#JCc_
z(N=divygmmmf$+Pa0!iGa!K#!TRBIa%S$JR;!LX_R|#6(_#Rfd-#e7S<pgFu5$~-j
z4~k$Gs0q?;ag@0l823`lWCQCqVZS0DhKH_)Z`0V#NZ&YyI(H9(O-<*OJhwa7Tue3_
z?9@(MRN5}LyeB;`>w#6e2C9PTHO%)XCHGc{{68eDY-fFa6ux<%C3AXZYgs6BSehtK
zWpEHZ!yrDg&9A@IK~vXu=Sj`{t1$It%q-uON{;J2m73QlhBjLdv6?-`mR8}<q!@@7
zHN74w*3aExf%BMj!mh{bIF!IM4%}MB%x8O%%^!aMwEGxS6ZlRJ^g;kJ1)@mGy86K=
zSW>mWYucz+8NqR=>Kq98Dkl&hfhrL}f(G?wWMP4}Ej2mSX=sPTNSp6x*poHig0IL)
z`JJQ0Q#dE3BDvcL+)Zw=T+diqqere<!7^Gc2prg6TkyJKy^{q<)+->Ia@gQoyL9E!
zcpw1F^x$&$HiT@_stey<91s`S`7z*#+3>&Qao-!ZXFu|hX^9#P<q$lrYI|?<<k)!C
zcS7qf2KWLaeG)(5jpm)}0n5Fu@@86K)hI9D)LNe4L+sbnb!(C>hcYnI@IbK%M)O$D
zc`1PlZO2ZlgF4K$!>N#;#4`PCmQOuVWp|{jdxFdF==4lO)@|mYPv<Jh?xras8hN4k
zKJ1oYkO^j(L7RSduW~cYZ$V>n%C^RBcJ7fK{lLn^Vp621@K&R=X1|xA-)hG32h>ec
z8zb7K4aV*c!n<5S{JEl1JQ&688`UdpzP3I|b<7O+7C#EG5KnJo>sYRwk1jqZE9Fhv
zxZUSmFro>r!HssC2a2i_Z2#sJDJW(gn)f4VF2yChcK@n0!b)ndm!}TiJC#kDp?n7T
zQ}~D@JzYJiSlg9QK|vLDl<@6BgZhO@E5nAdT^aacm19QE@<i&QRo@Cmo@Mb%_PZ3?
zO5W9n<_sc*Wy6oI$sM`+`H{VzBqStkhp~-hZXh#!P(JP$z<JO^mfSOsvMfI0u4HMv
z(*A1gDA<kvb)i?<x1=C_S=OELE22bmu%D=E%V>2x<uZ0DzS7P^Muv2=S~Q+2&fh@H
zcGQ4ZBD_a(Tw{!gZrGgHe$!gM?^&ILNoA$`ihzB!h{y7{W+w)BGkGV5O;LknABJS{
z&<_KJ!T^Fm&&^)2ZYlREv+arS6k`a!Z0zKgSffjlLxl>i0xaE5A#Bo!W>Op~7<NlG
zYoO`eVLt;MX@a^O+owO!jXo%UkOOX6m)+-S^&6xX!0goIRK4QG&g1(^<BVu*jQj_=
z<iOFjs%8;lf-}Xrq;CaM;ytm^sytWbSeHOf;5FERN*tSdLfzfgg5nf`kwOe`*a~S@
zCmQz;!0TK@Gt_!q%<=5*qm2j^!f*PJVc2taev0n7@Kh4{Qe2{`@}Bp5#M3HSnq_8J
zx=F0n`BAf^zXY8#5qmYf9@|F1waE;U_q>(CUM7og(a_fx0Sr-~@Sy|Ingh@NP2sSF
z%Js{Qc%iT#zWRGud7JXRe!1)Q_L+pyy`G4STx`yru1NmkHZT0OH?y)|`Ir2jNIZgK
zIvx5o!Som9y4JlTX`4iA$e=g(AKLCRc5c#|wr?)sptQ?XI}^4*Ck3&7X`I^U4Uo&r
z$p*nI+xdq+3|c&nT&1@d5c1y;-`jr6&SW5{>rQ0De^reb!=e~xRnYN??R8!v3fDIV
zhx^W*PpUr_NEgw&HO@ttjh&tNSYBxypCpb?-GT1bI{5!s-KTpazt?=W)ri&bEvdSG
zs5FDQ^=f@}C5_;ZW&Lr_RyIi;l3L*>Tf0sSoml+wuHkP*%%`e@#a#7=;Pb4=v(nSk
z4ZBzM9t}X-+e)kZMp(!miDMp{=<`!xAORcgxkQ8;<U=``@wtx6p$IEw)94=ZvdZRO
z+J++(q%v5q99*r<!vk+VwI%U<+pO36o!Rqk+3mSj&UF6wR+Tn6?q$<dgQ<1pvyJ5V
zY7uMHZuBj2K5N$!7=`R*<uUB(toPc(#c`3~_#NpQJG1A+KGdN)?nP`X?3pD@hMCN=
z$Yg-xpwX(Z<jN^*RNmz{be<ShaiebS&boB;u`@0btGLUwmo2QXJ8_w$wkp--QdwhE
z;Cg3<AHP?ez4{#9bD5UtD>@J$mtL2PJvZ$rqZ2(s7Y?Hte%KnH;UQncIg@Tcyn|c+
z&wY$M3bK!a-&EFcjqdW!lt;zBB*Aa*KAWSpY{Fl(5MMjoiM3l5v=~%D6YZDh<R38U
z^?1*QSe)h%lk$}!NgZSdPZ6`gtF4#CMgk1=4!RgG4kZfG996k9Q%ASCFBk20E*7k?
zFGmF7?u|Ch%I)Z{u{uLB3Nk!hg9gF-Jv$M6htESo0tNPU>`#ZeCTlGgd}NB;U@ctA
z$%|n4eaG%b@$q`+!A|BRs^C?}*|3!-o1fdmX~v2p6PGGFSfiSR_Hdu-B7D%Ns+qqc
zVw`j)#izSR34S8Ct+2ssK^A^u`D^%cN$jvlD_8B|sKovv)HBXe;9|X_Istn>6rGrC
zo0brJAZd6ZLiNJ=$stqQv3R3yv$fq`dp0wRae&zHtOOY1&e_2an(cfFX&;$^3SRPT
zbmtNzcY-%4nlheaC^{tN)6=P1D}y#Z_O7wEK<Yf38k7fT116xZh{cJ}u-jELl)EwP
z>k1>9?kM44f;m;bQkU^#F_ycB%<2gQJ?K&Z=Ai}SM|6F4U(KRpnBtwiYo|3AX-)I6
z3p!`jFye=z@Fa@LKJ7;KhA7^5>;6=9+#W4y<(azVS>~AataVz(0{2!<DAd^$rRC=V
zu|~))r>8;NYHZ)M6h*5YXSFyqt7kFb?g@bbOx$O>+;w1?;IFeLH23ueOdm>s*c~f)
z>I9&D^^@c&tbP1nd4M$-5r{-R9Wv&GW7jR$#(37BkoxJX?28XmFg2IHj!O{_TgmI=
z3G1x^yYQ!eomE4pmmW-7A|b!0Z!A{LU>$4Q2$Y@L#rnCCo8xgYmPZxcOXq`365WwK
zWL|xKYL9QFKOK;B?j$d5Idw|N8-^93&Yu=QJobWC&+r)HW6%&&YRrh&aNDz2ZwIi-
z7PW)vjaXjc4MyV1tC&jCWq9cJjE-we(>0U~Ty`<d&|!I2o0VpMjOM2cr>W*K8xef>
zt@5@gm%4+HT$@a}zatbKe2e(aN*WG$9(NnSf>Dn{yS4jiB`wlr_|nR~M(aq~-R1Qt
z7}V^!#g>7#M!nw)x~Q<eZ`>=zD7#ZxpVkq)8IKHb2i@<;1@b>^Sv|a^`*N{AH_1@2
z(3~W$XMoP|F~Oq}pwr!Z@{+d_y1au&I@s@Dc7<&}Z>J@x)pX9uJ7go~*;|%!*cMvr
zaX)B(o6(kb;c-6b+fUNC!8u=PV#jM8<-<@)rPn=R4DGKb^7YVM)u(yRK$YJSDz}dw
zsG&c+Yx=Y1eb>>`B{Qx2f#r1ymb;^;uM>9=#1>^uuO^G%6x|$&S~qFKopB8#%~5mn
zCWE2bOwL)m1Evy}JU<TtaNkx~tV|6C-om5Qk`gK<PfVE7ZEtP(Msx|QmVaW48ajK&
z5GV!WKXb9EuaWVT-02xDp9b<|C~7550V9z`&Y`TID+}N3rc7L_d0Zr$m09F>TMVIw
z+a=!#e6as`U45p8-aD=P#Y4sNs(hcQ)^ZFTE20Q)dPO*;!)(H+Se6U4BZThsidgeC
zpB}VLel3^gtG;;w2G$glZK~MLInf$iM?DQ(16_mJC!nwqmnGR_Sf_j&Fs7S=OSuHv
zaSXOvlvM|o+-cV@FG8<9(*)t`n&3{QVUEMu-t{^JA4Acnn9aUb#_rBpKv{m1<0<+8
zcEt;YimyaDXA&--KTeFy?0lQyTEFpS5@`Ts-W}1jDU#Z2Oa$V}S*<<;nEx}BCyb*Z
zhDYPAWXY;AN}ABEHYp#Yfz2~#z4cK$&Mww&Kn6`1q(4GNzoRgB{c`AAEKF`iYBMgs
z&a%Fb!T0r#44=6*G*DB=%^L7wjbDDb!H)J|rA-hh{Sa5cPopk~=!&*&BHh%j6}l5h
zR~`;l$TT73b`h7=1p-X_-`1VwJa)f|B)g~KF{#y>qwSO<_eGHMZSTl|UF%0fi4rwk
zP2Swusc@TzFEsnt@^Ak?qP{Y$&1l&gC{`$5+#QM*ic5-9q)3aqySo>6cXueo-Cc_X
zcemidHNcmi^WA&@<Zt#f^X`!~Yu0AwzpBjKttH;|Ya$Vrwyl6!ev8gDUlk+cYpk+<
zf3>9NN9<!!(bIDI_R7f*&c`U3$b9ICHy3KW?P?FOTg&tVx!g?Ux^tcJf<JeDIqy6N
z58p0h4Z3CVkXQJ+Yp2+l<;s>Lunk>MJ<;Op3C@1MKNNdQ?Kk|$)`7tihTtZG#={Qa
zjJXZ~37J`@yWcZ2X}ib2)m>g&o(YoeWc@7tc2RJ6T`r-)%6UJ{pSv(=p-Uj>6(Zp<
z2^yTIqR_IQYp?R4tZd|cYtwt1*GJ=ezf9Yuq@#biW1<7a;_F)&b|fS>SSAIQgUzR>
zHnBD|6%Qm{EFQxOYW58+E7Mf{s)$45`+;1uPjt;{o%-Wd9wEE}EET{{erg?%Qc<n+
z8@rbH1r%TI#N)Ach{l1Z3t4KJE)0MuMg>4-s3~v}AW*8({LW9<Y)c@0Y;tq4-h0tO
z=Y)UY=6OLv%ziWb=DBBIUpA>(b<>4qpBE6BVi@G7RpL_`vN`C$E6f(M8dZs*wLtEo
zQ;c5zxC(_?m}otN6*KX1dPf5Xa8+*zroSy&22wLANLozv(z>Za^$d!n%b3~sw3Sql
z|IFiPFp7@G6^bs%97h-J45{y@&BDQ0%l$*AC~IsBJV!Bt*PY^pkNO9nh)HL94Ugg+
zFHMp;z68QaEhv=CdME-}QaO<_ii`f1)r&7B(6qri%Cf7!tM6aHThw+!^SKBlA75-y
zsEs|fs_x`wU?aPV3!O^shU{<siAW|rJvgq7^|7`O9jvO$xhbMYh{QOLtzdqfD;36F
z(-69fk1b;Jy^J*2_6M(fo>bl(N&zyuUT>?B5XKU7A$xJn3|H<KkV3#y;mvO;p+6c6
zq_Lh~)~|yVrm+l};$oV}_@pz3UtV+GE;o<nN_}`H2Gmvm_5As4(e%iAk3Hm5!Mhx`
z8v}q#rSHw>ojfC#fX*|Qn>g|}gq7RFx+#~#NrA&01s!<|foqXV%$q<X+G+LoPWH^P
z^jt}_QnL0AT(6M}(7guV^?Nz>Q<Hr}HtS9o{po1%{DtTY#`xh(aDNvx*tAnM^L4;*
z+0>?hoAKiAPknj@k|m_&m(boij#N1lFxcu&f;n{4c6Am#FK_>pKMU;fZ8QY)`zKRm
z4KX9ZRYRq)bs^&<sw``z$H5~j+0eng9b=lQj`c@3#aVPQT^3z_RcwVopxW<eFtblR
z?T_Z~wN)9zEExA1=+*eH)!hy@A1Ror>zTQ)A5j{uPc=+T7N+lvR2Ah;h65djQE%!S
z-rc9Sk(MytntoF=zpeCGc|_p!t`;_`kUL`hY6~87Jt4t6XRH5|^xz@)gl5U8&Ps6q
z;^9lYq^#7=ZvDayh4&(`@E1fFu^{4#x(@cn+QtHnF_;A<CxstFL2o-8UJVT&7w{VJ
z!{drblylA<ASs3gEhnxforSoPmFW$WaMQUC?EEmq`2VQf$Vr-ob$cU}#%}NC0UJ=T
z2!%WrNBZFRP~3oq1mbKmFgt5~yWMyqf3ygfrM2cKvxv9axFVxwKo1Q3_&c_SHMdP4
z=TXMeJ^#ucq{4c*pz3R{repo!_uU|;uMcEQ{JiLTi7gP{S@p6WKS)mhMGQ@=@6})W
zP^&CfQ2BKSD90<nv1ss|-dDiqgzYs9ot{U1-BD^4L-^~x_l{lJbGX{H`6_xw_#XOL
zY%&24WD!sx1?>+SY_xM3tf*H!w_vZ_*5sNY=O;(K0B+R)!SlbAE7@v(L2b2tAR5+Z
z^~Y_D)6#yal%ua8b5M)5Rj?~84s<()?HG;akCauM-urXGV}u#2s+0D)ZBFq6gJLtp
z@wU}8{JW~$I?hg&`)i=zPetsB(G8?K?%DbFDlLIM(E9uF6b@n~*qJ|G4HTM>t;CDE
zX1Ml^Cq$+TgHDt!cu$o&!viSBDZ*>YGTN?3H}2PS8vVEE5x`owHerg)SwTPM>eMLw
zC68_Q`>O2W-`T90jBA=X0IG(huJZNR(6rl&(}lh#W?*=?ntJbO-5=cWHKfPoYo~7a
znCo=S3-BbfkJG}d*O|);ShNW-BlO!#$?dAc-LhHL(?7(A1kIz8vek~k%t28}pQbYu
zhi&a=64ibMhVmFr*J){yIp0iiBRm@(#iVBTN1afWhP}QyRjMK$vxL^%YXu&t#+1I%
zKmH!7Ke%&t0k6Lu_mrZCCy8E|@iW8ePz`H&1QQcE68~P5-6Ste8I*A!lGYI7FSlST
z&6n*MiyL`_G_DG3-is2-2^37sxr{Q~^BqnhI4wC&2YS=_>@(@Tcf1V1@A&n4N&fbk
zfqh9daPyjpJj8cao@bgiRU3N}-12<hezXb6^us~_Y9=w{=CkNFeY>bfKGStr5GmRb
zDtwc_EtE^$r%GEvg0(cEI);GfbbjBF)^!Db<Kh2u<s7D?>N3{g^hVa^*P-uluR@;B
zne*cFg{hZxp}H$sxZRIj$8X>3umF{{s8VZ*RP|$#O(@3HRkLk=b>|WOQGB(x&{@aD
z<xRBP8(H=jU2RPw(CV4rueLy_1X~M<7OOj)P4`8uGc#s6CZBYZ%Mv#mT<zwSXKmMh
zLJ-D*juoqPJJ8HvQN4^idVvZ**Pr8rk3noMGNv*ca?Sd)*;UdGUejjnY8`;#<$2~M
z#x`CN2@1%1SDOOTU}sWMWUtr!F!AnQ#q}M}kvH5%BP){I;sUwV-{lkIQo+UMqdwc@
z=Sxhhd31=}<1z-5svX8vI}t~(Du4O66R-V*!k;s8vVJVS(4mTcvHPW@$WfGHI`GFb
z$x)JRpyW5%ZJii$7JhGbviJ3P>Cf#uhUJBIDPQ+p)e9LSl75zSRBcCdgdB4PcfkJ8
zhQ1_<f4{R3i3p=l{cq}pD#9;f1SuCHS|<0cgiHyuCh|;TXJ_$si!mwFWHAU1?9J^9
zMidmP#}tu>X7Ms$IjJ&cE^3Jsl+ZFsI(zhcMe+7T)$|46l9E64AbBFiI{6t6A~G>P
zjAOWZ41zWIu7c<V{ktxL*@8HQ$X+i(kr0Ln&9X$GkYWD6j<IEE$I6=(nMw5F!bvqt
z@bxklgSDDhNLV&#-DsX})-2mabtH0Z2oz+_4LBs>KNDar^~rrAASF6^iHRDk+n<76
zaWE%ef8E@WFZCXFn=VQGo}W$#dKp;k4y;=5N)&zpf%8fQw;dXS*9{(j7p!rq2Go?7
zSHBLcO;y>oXPv+Ly~U7S*Mus$>61TRZpQCZi@-XL?gR6uW7eISr$Ip%d^opoXzey-
zz(aEuM6!v#^NQ0IE}gQ^7*>r0#j`fe^AOaG;Q}AE%vD>h$MXk|85^PD<eOwD>R78i
zYcKE$B_H%@1CP{Mw<dQptXMS4`GG6vR+P_BbZqdx*03?x<V8-kJ$m7|9TiF~?6KTV
zV6r|N;(v&X;}q@Zm*9B0aM-A3`EvDGXh2F~L-E7v9c7ee(?|;W-$048<v*_Nl_)Dk
ztx7+=hLH#F{*n2(|3hepG5-Oqy5@W=y?NZ^jbdLQH%_MA*S}KYHb`ct2~BS=*ou2M
zF4op-Nz;W-E4`!?FZr2rqNrp0OP~GU)Lunt&h!yDcGQZSEwS<3>nu=Ez2MSQ0R2<N
z-c~TixnHdN0Cm6#)435u7oFGa1fvUBRkM^4h`|P8uYfnWSH;)17a0khHHgG$y3$Y8
zs1V#1d=Mfpn8ai7j_qHEf&?OER1ry<uzgwA?*Ni-4;bWyfxGueLsa!gBOKX|_m$3z
zHk)|@uU863S*g(6NH;m&g0A3xds4RA5G;H<+%2Ziap=9$NKNV}oYJcEiu{OlUa0kY
z<8~;r>uFbLa`k*SbEWRkV3+mQH8~ypc07FO-n&3?dT=1+3!xu(u{GL2YtLx6T0~Wk
zT1gwPOKVF&n7*ys@@3xY0(^VyJx?k^+dqY?X(OqA9jclPNg{6#TrID6TwY>XAoEs$
zgXw7-C`Jfq3BeTN`^bc%r)?-O8k&8-W>Lxo-z6APTJ(ec{iV)E2jMN_hV_~p;eE&V
zmX2X%*HC4JP^DB#uim@@>r3<qjQ?)0sKa>k0|Ju<LzVRR>>IK3{SKr!D;W40H2oE8
zz9=nF=xW3U^+t@zB(_i*f5c1sF)FEqjn2nY@@GS{g7+j7=a)szEfTrh>&AT-kGhq%
z>#~Wn3;)C8j4WGmtRG}I-%jYvLZPtx?YSGQVKt6=Z}T^B69D!A7RGwhwAp(;&E|fG
z)`j$e9W|mR=JC&2;Fm?`mrUPu^mT_HHC;=BtoKb~Napw1%~L*a_PA%B<AcsKiMije
zd(LZeAm9z@=WZ8bo#%LrDcabsFxMDdF#}(YlwO^&(4%qERdY~EZI)0CkNPhX5>R_C
z2EgwCP<j^I7N?4%s$J9ls(~N4OwZ56Z<)$a&+xS+n`Z^ivApA79}u%LA9u&HIcfyn
zKr+|GlhEk5;RJ3^vzQ*4b=V7l4f?GbPrQWsQgkYxx^6=Kew$qm+P@jy0}?0E_~Ut1
zU))*TLE!sj^3xPBbO0l9?WMb>?{nBsPRP`^5E@m{$kb$X`LFhuk{8CFOBEZPCnUOz
zyZOzaK?Z!2`fFL#e4zLp1`QOMVxj5HDPtDRdZ`I7aj!OgRs+tSjR(Rh*|s#|iF<Vt
z@IyMTUpSyQkM19V@asqn^2@9?6ZZ|!xAu=cUyds02#i?h^ec4ZA48_3wBX^eEkvVy
zOqC4!5ZqtbBX2(o!7z<;hBI;{VX?ASt#`jDm*Dm$1;8JW;>m@*c^SkX<S@?7LeWVJ
zpoBD`4$uk27ca7ml7=-G+#8yI4U>hT2Z9hxDs0rNAp6;t)LU>0-EDTK3qS8}%6c0j
zz46)+rTVO@!;123eszNuT_w{^XALK{__NwkV{S*8Z(*;)Y<ePo_ru+?K<}Mh^Wl=(
zis;!AXm;G&4}`9(Z@zssFNfaEhp)}zu`k7Mat$)=*$sAXx>H%8p0mi@IkjJNsPY}i
zKf%bGVX9OtgP4BJRi;Ajl$E*_yAlH)xRSHz&U!4i?LN1zPfpJZE}NXHuNAI<_mK(n
zgxpLTzdN^wjAn;U{JWnN-^R&xr_A=HP<>+@ZKp6g_WXqNnME}>ajd3eV-YGwe&gy@
zK-|adI-u3iWaJ%W7-g_f=-#+df6({L(w-~%qOxhJ)#_eUQxwYQWUz3;1wu)(h2w9G
z-x<aCd#>N~*LzjTb}w}JH^pd8FnAR*8T(<693Jxr#v)R_r+XDSH=NkDrt+8#IeX(a
zanU=YM?$yXQU2rBL-Iq%u+|r>`+2LGjI@V3twK(-Q0HZY6mEmFq<P7j!@Qk38FKG~
z#-lRESe~ld9T>W^7tDLLnpYU79+0)R`*!e6gjxsH4Wn>o;JU(~NGqx;C1g}4l9dTs
zY%V$VnE79jw~y~Y)YE$&FS&ey7ltEKB8THgKzG)&u2T=^EgbTKVh5#^p#pXyCb=e`
zvukJfF}$|x>J9l&a97}W-(yaT1{0=<@fKkP-!o{a><AWqs@g0n6~3|N_qkS28Aie6
z|DyVfWKAJ-`0-SSuI&wZT1@ZGa^)_paFcK}B69I{raCP+e}Rxp3YFYki#%$~!>(a4
zf5CPwR?p{li|S%}uP|AL$$@D|0IW7Dn1WW`+1_2%-tvRr3>U*yHySju&#x*|vMYb0
zXr~LGTinTe9)5^k-V~*EhH!5rQ6AfU7`zEcOy2VJJg@lOeal@wU{t(e>EnjsQ`(_l
z0Rs>7%SA+Z=Evl<^IxqXlpPuh6MQwt77usQ){fUa7s6hh6q2-@J{Qk=6B#pcpWu)V
zAjl&u^Q`UR)-&9iL4}w{&B}-Xs&@4`RLlXU=c$-MVEjAMG26kNZ(H`50l&?5{>}*}
zpZ1D_QUU%+tRt)RUq%Lr8Op<Am^N?fKb5jFgjc)>coh1k>f2D4)$Aj@T`rSZXZPY!
zdXpjR?LJq0Gzj@<-3D0j`7uWH=8%)c4eAB`vM0OBxjq1>MqPMNh}9_XCh)w$vgAVY
z?9q|i3;5Yp;aJIer8B#4ELLs+ujFlSM&$Vd8~3a$ezUhn-r36+NO!YGARTGh)#lmC
zdoXRcANjQU<u=AS>S!#|(Bml~ee>=rYhh^TDOUs0MS;9cWpAz)t3pW2UE3?1d*{fa
zW(&Dv87I8f?~dE%4Oi`TbO)j1wo59Ipvg{+cIr0=_u8tE6JZ51HE!2aU_Wz2bm2sy
zMEN<`WAoXZtVKI<6!_A0O9E0l7^kKt&Q3YWt2g^8T}xacVT7k9Q|T*cmz%x-y?vG7
zGL3Z(oyYC@H(zx|v2Ky;mch0iGe2R$#C-0u?jM>9oQYdC*RQP5^jNX?*v*t1m|$2$
zcj4&+UF_QFQ#TJ|k(ObqHj3Iw&v)EljCV9lo=t8H_HWgxd(C?fitsd1Nm#dF1mjQn
z|D#j><M~lwz<PQHXcF$oe;76Mn(IE?$f8$9|AgwxU9a~i!KsC#tF)5an7v<sr)_`o
zgKdPEqF#k?5(ix>WpT_UVj99ZXWd~BSfH4OfS*|E{4ZBb;U?;puCA3y*g*O9@7Z%Y
z23GFeI||P=V!vGUbN*y>cNC-qa)PnRtNg%*o8%Mo>(I9-bib!hPYZgG_v@FhZqx6e
z<fxc6KQ{U`J5*ud?m_kR;@e*LRH^TI=;2UvcQ{$S6RMDDBt`^=@b&IgZ(xI4)~nB$
zc&KZZXzWWgplCWK8|uXXc_)LzPB2E~&Ft3T!~&d7Hl1G;{zMDL_%T^9e((e4hFk2|
z?M^CWi+6)KX7&6T1ZeIqY;Gzb6h%)sXuDuqENonwUr8Rn^%?shgZbBpOw;$cy6x#W
z+@WR7Dj(i_KKpsM0=0L|u2sha`oO#9rD(Suv!at<mdR!O^R6a?A2)XW>A7CHuw#b-
zVJ028GW!kMt;Qm-L?&x=c`dGrzV4^$tdx%lzWmS@zvA>bihVN%w+pm*YXxtH{2PPP
zz5atQWa6CwV}cBtw&Kl8pQF+zkUB+Ec?=I;62(1qMEg!SMJG<>nHU63fH;lkV%qjr
zwBMq21KEjXeh4Rlv7jV`f1PQhxJe^a3OpK{`=#(BmOO$uL3~p1`t*#nhNnC9^@aeK
zuu~WZQ_Q(^=i7rw!4ajS5!e&ukd0qRzhECA7^z6JO#mw=bBDlUi@|9hrK;h;yAcMw
zMk^MdYV={&+J~sPZ&{DP9EI2yjJM$P`$Bg*Bqq@mAyP6Xk;AH0^V!XgSZ<$-`@@UP
zSA_N3&DX51M<lyqt&LmLwp-xlcQ@|~jHA2z&d9FMuim@Fy7GEH*VQvVYF(M%yY~^>
z9(r_c;`U$mh9YA3U!IS8^81}Pu?oC~M`Qa-b0iczfGQ1Vl(Bj9dr+>S#5F(LOt(qT
zP5{1@yU1Z9lqK8gbxKs)DE2VO=4}8bVq>`6*(eGo)0N(pphRO6?gn*UYamqMvE1u-
zP>e(xCLZ_RyBo;%g(VN+qL~a%84|JOeb*!?zfMaonIGh3d)1ooHZ}NtzNQc|N^PIJ
z=gTDhX35B;yQbJ6-ASjxQbYTFogAN(FH@r5hRZ@Jr<+>$TDH3lGqQz+_G@KS#d?rK
zCTXN^$3jEb7~p0bLqU5Ebai}Hjr2g+^$={ce_RCqSw%nAQH7xwxxkmpWf1C1T=FtB
zas3|%RkA}VzT%xY2BwEsiFznO<Wqyc^1++!+?t?jpBf%fa^|PynxmUsluTucN_fU=
zE(I2~k$DRWC~IM93o6)%7jWu6%OG;4v&oOiJea6<#xzUA@-C?;>`+?6fwypvAlCUx
z#H>I&-1LvDNP4A+G#K%6zXQ`qNYoR?#qg?#vuVn6`<vOg!})+i06vEL-@Hm@O_}#T
zcT%!g%6?=hh0m7jc2+c`tkmrT83W5~?pQ43uSQQZY_ISv<Sn@=8Yx4I%}*vPUs#`K
zpwK~ayIpCq-vfA00g!k&$N78J1KTCDdFXxbE0X!DkK1&N7nrKq4r4l=dM_0NiFP8s
z7D7rgM$4pj7d>cuO-&}R;CY=p6%$FOP>#kn_iq}`Rf%ehmBqq4iE&;>hHTT1sx5}9
z?;YleD*PcGSo|Ab{*hD5<>Cc(QUI`rGpPn0i`O8}jfN&OUz5yrW!QVYjI_kKcsZmO
zlcnlux)Ljtk69spR8)i9j2-@gj;152QSDN-Ap`n@6rmwbOHWzJ8XiL?o6F9%gD%Fh
zm{mY#ph@Fao1WLYnHN%`lgGw{*<2Jp2T%dEUK?FF3SwkbJc!1#HYFR0pP#$A6b<yr
zz!%r(E!pO;GmHh3pLkZAwUC}P?W~_Mqpo$$Y??SctfTIYhT;Y_&c9oX$2HlJjAJo;
zP<+4_tj>zAP4I=Ny<<%YdAiiZVW#&zX_oKC4`yQmHa3#$neC6Xmom7=;8)~rIq_)%
zmHkSu+#t-|BDdEB&}k$j#Fv=P$FBQ)(JvVadd&aUR^6Y7wOB0F!nVS^Jc}#v==`p)
zV@%s0bBY$Qh$3mAlgIF>VbvNtI8t}^Fx|RkL!c7A%whrrmD%_&GAf>_U&)~fSP{xi
z!<K42f4_ZYLl_oiZtkA9E6$_kOM$wN!T`QGjM|Zy(H{&?o6Ufod_TlFx&FP>nsmAo
zDYhH?kPu{Dcstp7zag-6PuRLqw{VgC;n0e|YlG6*xP&OKdFOI7Uo6xdj||fJmeG{!
z!|JoW*_n0TeR<s=`2F=F%zTVDnq?hJlfO<*HWVXKpe6Qj!7rlf$hkAH&ykP8E9H?n
z{_-T>fe1-xkW+G~x;@96Pv|@vTwsIY_puVUgZTA{*p6V$K=9-dnN2=2U#tUao@ig=
z4trNCBmdazt_0K7?Qxkv4fJgtCb~wo-@{P?jjf#_=-eO)4qLVjA#EHtWCdYRApW6k
zwgYU&Y63pL7OKN+&I<x47ofY<?yrhd_52optji|sxW37;>%p*w*nuo0uASFabu?p^
zA`DO<wsUsBOanSk0ihsY{T6_)sLM6F(F?*XG##Q!A_OG@pE3FoC?R4vR6yNMm4eeK
zE6xg7j0A%>8WZnm_T5R{goN&|vY$|eTC?{BRJMd)Qa0U<t~V@Sxf`@`pmjsUxAWS4
zcBeDorw*N%^Qr=DYL7(eYwu)f4Y7+In*hhQA{N1f;I3?N@x3QmYGmp8-;QdO%-yU!
zD|DDF<Q@b(D9)*1W}z;NPRTr%phGP0Hs`Nz39DY3HF<dW#|iz)|A^zkzOZAqUp>8L
zXiE$)CUHMpmNi)X2UYw1bq_rxJ1sE&M^n_HS&lt6sh#g(fsP1P{l+vZ6$`%liq5>W
zb`#h6SZ>g?#b2&?&PQgM<dng%@43le>K#|y1Os#Ky2=kl-o}8lI=(pT^>WT{53v}`
zpujP50w$5AWZc|+hr=yces6uh2Z1lI0=%yse%@gJ{;|ufScj|&o*2KaBF@7OJ#S8*
zRWISDl2MFpXxiA%yB%V-U$ampY@g|yt_VF`xaga;8rmmOCL)oA@*P=KOoQDb6|C5*
z=-HMUwJ+oX@a01B4ntaY_5rv%6Ymz^2H7B~4S4qC9?-_g;+*6Cnk(4*87yZbFlj{l
z694>so#S=twnxrp?DmXV@nD{fdNsT2JBhkSOn6St^kOUcua`F1UyO?iyOpgxL{{|#
zK<q3!9bBJmwU4gjzzg3{9{$@(U+)$sOQsFum&aJciza1>(F`IeWxS1LF=oG)8BE6Y
z@bMjH&_0BUhIrdGH2fUZUmzVNlCJ$2f0mN6(8TAEoxJ%DhFkDoyM@_O@e?`skA#lo
z31(DTY1GF*Iv0GEA03PE{jLjY24tZ-=0DtVOY0yM%19|nt@y5yid_0K?})+PvR+Po
z7n}-$>14If4}_;e-dXqEUZZ6VSiI21Eg(l=nTaUV^1;g(Xqy2cqNogj@p5T6Srj;B
z#hvSnB6Oa*DV^%`;N*Oa0jYK_-IQ}<8?F~PSCB#TT~AD+77?KW&vrh~fP7XJ@<X*R
zt#0PJAzy^{q^k0a-m|q`>`VwoiaCfJ%5$<UUGz;0Y`(S|h&beU8&h5&0JQ*-lO0T6
z8+SXNkc}3y%Kk2`8WY6OTrQ07ek*V~kskPn9`Ux7ZpFicyFA=LWrBcY<F)1%g~>Ye
zaf2ejWX5ZF+t<JCt7d25_I}%EzwWBNTk|cDkF!i%<Jqv)x1ZYG76;I5T|7avV>bmJ
zuPlQ4MuV9%X7E4MQRpWETc}ivc+`+A1#%)_TcGmrr8`0YZ0n1L5;bJX6>%QbKlFFs
zL<jj=m`O1tQl2F_Y@>mY<ygRy@jEn>qTVmB-hEAgRsZ-&?dN5JngA0K;L1`;eA6-L
zN`tbCNq~ZXzfJ}bSCD<GmNrT~Y-GpY-edlg6R2JUrA$PLWNlzP$M?0>xxjH<C-iXH
z&*9{=TkxPNx!()hWIla%m+vGM;m*Z&|4q1pcOL_l=0&F+wBYJBEHq7cuE>9Ow7EW*
zaQ?S9pYh!)GQL#!wyeSD*;VsB61XMV_NDxO+Q#oX^`-~(>YoDc4CQ9QvT;npc-htM
zqjE8ZG~bRp9VLO?5woANfdx*lkCEmU_kW!`4BVtouMR?pZBJWK4cvI}^}HR_F$IXM
zqTJ)I%=(upvVb`otUL9Gb+T+|GQTvgTCc>&xpO^WV|FL|8W(j}S9{4Io4}SZ{7Lwh
zr(*~HMXr-tqO-ws*OnOa?k5~N3|(d+z?t&m(c)Pzs$YHMu2cr7apZanfnTYn0lnY0
zQH!^<$g!5o%7cbnSSt@|z+<2pR|7g#4(?<iP~SWor^m%_!ztHl2E-|KY=3=|j>mM?
zUs-3rI$406$piFQ4bN?F!X%LK%i$-9?r3^Ct+1ip)L=eQrjK!hF43mfE7A>u-ZegU
z#LgcMm#?E&RHQfb0Dx{&6=xj@j^;53UVyCr%S(kI(6XZ$H`q?G-P`KzUp+Vbu!pue
z4suSK(4V%X?)cQau-8y0#zf3;UMdIjYk7<9<cV!OZJQLh7gkVQGpxl~LR8-uLF_Zk
zg2jx4!<M2tvMoh(I2=(LfK@t85igiu5HG>~@$RTZLW|o(9`ma_H+)=zVKbca&pk>i
z#ukBJe82r+43u7C-$7*qchV#VYPV}XMXN$4&!5ja7gwynPLre?ir@{cO@&Wg0$Gn)
zUSQ!9trM*YFUFWSc)ZT}85zvf#c7qlmVvJ&)c5YYT$ELoHQ$k!(HVYW*2xDM6c7Al
zZyJrmknm=o&#~YK&Bgver1oLeVZjL}O<^vykx^};HU3Q7b*eM@n;~;sTZgcKERXZ`
z?k~={;lZ27Bd`$p%FfJ>4gNRe*MmdSJbn4EU(?-?)VG<l)6=Mx9$2Odmu1fh6r$f0
zy#Nm(xg_E4tK@1Dx!EeGoV2Tq#ST*g>YL(2xAnK@(6@z7?*oiAx3^tC=eNz=*Wm||
zryMZgT=zB*u*cfEQ{AdINmhLgLk2=41H-s-hbAw3<u5obX@|YkoW#ANhWf*+EuMKV
z<$(>(-rCNe+j@5!+*k)(yw$aTgY!`T8sx^>JVsLoS(9!0zQz*O7K}BM-MvzO97aLY
zNV-p~!J5-4usYYV-o$XJ2($Z$A1*>7Rx*!|h#`rPSbL95nTdgbDcTgk{Bh6U|0Um+
z9OED|iTw7{7E_-z`6uu=D+XeKhGYfI=bcd1d~tw+6<-owx&PtvvnFAttPw36O*m~Q
z_gAlVT)<(NliuSZXwB>u3~&OzTslrPsO@(@`-8(L7N@<8ah`mULBL$M?pv+y{nu;1
zS72h`d>QO%?#ps+EBSLRxl^_0d^w{0=&FYzUw~yI;2{uTzj-aR$;ltx*jHCAlI7oX
zRl?Kx_hqo#{U(_p2vZc9G6=IyO%awV2CeZSUiXy9frh}VT$vKA0;%~Vd5Vi&ml$+J
zxI<(GE-D{yy(j+mG1;tFPAi<bZtK8Dbi`B?HYkq8^iyVjI>U=i9sBX?d*w1E2)hwt
zCo&UN!0E!BYTY@F<43F#=G7YnCDckqo93Uv`md3la775N>YI-WNb~_;Pu*{8)vS{a
zl|JLpz6#zispBrG={WwioN(6jeKfK0?qW{EqZ(t<ttC|9`u}I<K=||(=Cs@!@3SZ#
z%N!i4v#^$yi)FOV4(g2498LWG_+RZW*qb;S64)HY?>&)Q=vN*7448|SINiPjWoeyl
zuwbcX#A4R@vcrjuaL02J55dPap%i`K|D#d*jL%!U_+kD_XC*=WaU8QD{N=OU`eehU
zM%jhEN+5@|I1e%AZJkbQz(A@J#^<lUA1=us$fP(pvEBhJ{f^jPXx%7VZf0ajp_ct;
zUhRs9s_zAJru$U<zlSLOe`W2ZfiK%n4JrKt{-{&a_=UBg8%4ADNIz#q9S8stj5Tr|
z<5A+KeJs2}3GhEaO<bRE(G?Vzan;{Zp<ps!*pKT#%_ix?CHwyOBDt@I?-2raL#h-z
zZJCFJ#g?*$L;A#>NGX;qGp<7sb`geL3&sDpnCL<{yEkPk^ohanyp_-&$<(Ms_9=?n
zBFv3mR_4hmIH!N)luhekc~n)d7QGq|b!8y-E`s8VDk`y<qTIMB6hYQ#yDH==fd``t
zmTT0UFBk1IyVOPbA$RZ&7WTiOYrB=(%7j){1xI63h1Rm<Gu{jQOi9e>m3Y&Vrd>a4
z??{~g`?W!BauPuE)pPM~X(T*Jr>P^sV*lmTeZM|Xe6nkfhxW7br*A7{k!4qfV^w%Q
z-!{Hz;k~U6h|ra#<Sw3!Z9or0{O>Rb9ye3^<*X~?NR=?Pexd}U3`4{9%=9XL=JQg>
zpDc?$#pErh=QHw1gh<(a67^oro3mc8;6_VxY_%E|LHhr`!K`C7-&DXMR-EqJ7tSAA
zr<_PiWPMK1Ke~=I6v9np=HxD$9m3h^X#GQzc63GM{G7$=B=~-gN_9gyKB2@RC=M+Y
z4w-UQbbhr^u*r`ei&C`2tv`p772|8s=hlwRza6dlp<ig3fLT`jg=(ufGJmBRsR)<x
zv9$hOyZ_!j#2|xHioFO-hmMH*+d(v09kSy`QI%dS!~mK6*<%a~*K<%LvF=mk2O|`N
z7+J}U%wiO2s0Gn7^Kk0qzw}9QsS}i+W6t+3>6G;s|6P;DrLb+_7njv2Y*Ya~34eem
zn3Cmm!ur<sy<YtEDvR(-Su=e@YEJ{|fBqf%W2{pn^tBPTO}0tZkUlwq#;M-PD%(aP
z{vj{cg<8kee?(T^E|^_9E$VY*wk_sKoVZN(@ZyP8snuoR#vf`<98qo*RcOXwk!~7D
zd)QtRU#(KSy^TAHFvY&25lNskERoQRw)k=|n`cDf3!gZ#JxT$8^I}W#5kbTBHz#1{
z$wveIe{3PT5Ef4}PGz2S|6Bvrbr6eT{8-MI&2ztjX~pcJz{KMnLmD=fkokL+AS4fc
zYenr#_~)}Gpi_Qac8#lcP~1ci?!WIsL{`CSb4-(O>KOf5rV6GOY_*Ec>2TRQ9vCM$
zHFZ0Nt@T_U(h!{>wk;dzq(@X!${by?7ew`c9ueM)h=mO7hXvr&ir7>JsGF=pUqIPP
zArO77W<#3`6i4rvEgGF%@g2Tzo8}GULC2vTQ6eZOx*Wn2Oj`;yqK1B<M5AfYlXTsH
z*_Sa{@^ku+wgytohCW-d*E6dj!qwC!V5@<TqhgisG8XWVJ}sAWnrJ2+>AaTCQ&RHC
zICWVjN&e4q;<!Yv@SI|!4ZU#X0!$h1mJc?%Z$2Dxx#~Zstzdo~=|$;S=jn}T*?_pS
z=g#sVX6mv5=BUDke!>l6h&I9eyD6wnp8!Gmv<uRNzspPGeJSR>g;m`1*5=CNlQ}15
zXRUOq?ij8Q<S?yr_g6R;>d+qS*!HXZY5zBFjI`xZiP+O_Pq)r^^=DepK;k445?YS9
zrs7VkMb|-M;?bDe^O6IaYEc^YDs!qj`^gI%?ct?C+h3qQ350{*j{szh{0Ebg)R#QR
z!jjtR1lSN#c<G}u(!4!bSvw?(jLK=1bc#Cb52n_Vq0;oVMPJl06qoC)&-MjLYyQs=
zqD(^CM<B}ZcptqdGxf|*WhlLyX&34rqYaa@Q(5s=CVwX0NFrSF``|3v+tR#ZNhV5I
zJu_eHhtvFkM$xa(L{&*)UT<GpGUJB#qL^7i-V13=C;n?zKenJ^(xZH#vdjn{{f9if
zT2{t{Vmh2)23JYkx)Dl~LmlFX{NLCm73-F8xRlHrQ2lIHMDVrs4cx}8<$U)FFmIF&
zm;IP|{!>XA`*WjG8w7}FqrNRxE<UuzW;s@Q+-SWl@ysOJ^p0DE-dMI~2cZU++!aO<
zmCB{;H{{l7RO<Qggm7^yt9}eDcPDkZpQJp`k*#ipfUD=6XbL_XvW%-!F!4%v5cwaA
zRG<}b-gIKIYvY8DY+&>bknQwO-nRRg1mYT@SWwA_L{$@5{h7Quj59r&ahr>^(L+uY
z9Ww7@C>KIr=7$bAM^v|NrJ!qmB##0#<|a}eWsGRJR-Yy&<8Hr|Sxi;L@Lv2Cm98Li
z(4|k7iKVjG!(Lu{M`IeZ=T;OkC;(Q6{NF+FmBW<;l=c?+SJ!`>zd31BsD*}o#RlCL
zKlSZD4k(wOv+Qs^at>iD?<&g=Rd{*1Tb#z1q_4y(GItbR^{b6h23d1_{EED+|L0C;
z1A_y1MVIWT(Uj8Q!O%Q)`fOnM<-Ceies4UAM%g?Ui#`);4(W?<CR)@^xBAmcS+UCK
zVa;oXMO?wPye;ql#*&yMETqtfW;Yc*%&D<TKL$Ki{!S-}-&0GXQx-HHb+O-4ze{{P
zBH4)|mQ0?ru&${nUQq8SD$qfvG&ahI5gkGNK@$M!Kg~kN&az@Dx)MCIYeuHu=rS%!
zZi&)i`8<!UoN80G(^C{H^!2HWE%3dXXM#ChXrifkr|@00{VtbCzot3g{{-2f3hJ4p
zwV!rD5W!`m$5U+o`_mV{+G@ukW2*h1O$#ctk`yYGRK5*&>%Cmb#B>LkqT!iApYXPk
z(1~^oMUa=R{}ttz?xX}u*b@f(QtNZ&f5;rZ`|yu_X>$fyhe+m*%2^o{bHaU78<liH
zwR!{Ibj91TE3l@bndUsCzC-_?a~QuIhTtjbJ_i#~Qq4IawZ5^b5VH<{96(v+3n%4O
zJFSRwKXMd=otV3}cG@L3@i%}7(PtViq~_jta?Mi(S%3QHCBz}$ZZRSC8o)u-XiUw!
z2+KQ&s|7n=u4|X2FkL~&-H&EM99`=wPtM%G=k|k<oYI8l6})QxH}Z&x|LdIvn9gXn
z%Mjt4jE`l>M2>Id^sdmQ`>YnFy-zV~aynj7M8r(t^wLX|x8&c1q-LMSOjRxenRCKg
z>SV0_kD$R7>EB5>jDKwtP4}lbrRX_qCI#Tt=9|-AWkgwLU4lO>Ps;q^_iiMeTuzu-
zqo#?ZWJE1;(`imbWF6u!x9K_WaIzNs-zZywVVTGR7xFFWCw*AetUG*0_C571O+eRy
zJXJ}Hm~#o(+)SHMF30S3bpYq8n{nHy0blx-$OtRQn*ZN9Q0DCGeH$-pZZzX5e|+Sk
z4r(L$5_D(Q)iiZH*N^k&I&)ROWe_P|{IgLr#@%-E_4cKTv$1x5t1OHM@`vjG>a#S4
zbRyRQ(1NYN=876z=nYzQ46Y7SfH9Lz^tZ6Q1S2FqSWaW;hh_2Y$F=G1=&rRt7q`x8
zht3Xzb3TQ!mwPa@g@GN^l!0*dOPdVGS?le0GRmXPD<fHrHvRONocY^N96!jz`K-J{
zlzVL1si{pHS#cxWAvnwXDXGLFh<WRDx&Aye)^DtGG<vbSmlWW;X2S%`@nwC5iqECB
z-yZM?)cKt@h8RT{$^It_jYx!Uyrs&ZnPnt^L}R2u?S@A49?^ske_$=z-V}C1z9o(0
z45K70Kl|j+8Mm|W>=0l%$9H*7q`QYyY|;gVK)MQ15h%6Z{cE56A!Akj(eY7;kE@nA
zCO_jqF1vkFADK)8qioIS(YROS52KNPpm`^Rnl*H0yi{+lyZA8dNM<!)6l-(6HGfk6
zEI<1`eP^(qtu?d@g4_H_ExXO}1Obx-|8$oQl>(EL3~~i<pl9p$b_7gj@$HiN-sHB@
z=X$PW3%Id%xeopvTW8@}-?L47uY(laxnSG!%8x=38kRL{Ro%6s<27+YU)q0rc~Pk6
zrZ6!nG>OsE3gCNodtTk}q{zJ-HZ52*QV`tE0bGlAblGpz#t>Jv+ZLZ#S@S)Rwe6Si
z40oRlaO4X7dT}>)g^+te-V43*9;jt|PISd~TZ=un4w->NPBv=hpai_h|1=In6=O|2
zt}DwdR5!|l{(i-mt-RK<3eyDg$im;%JX874X#WI=vk$FyEm^0gLSN@rJ8iYuDvV||
z4=62zxg7cviCMR-2t#R1OaNiP7crm+;pI6+!j{7g(=cX4yex|+^yXHI_Wu-Td8>@N
zQ+|p{_z-mJF>m&{$f@{>x{TVCy&y1Ean)YwjRLjhW{I}2x4*t#e=V{eW~I3P7k)rK
z%Lm<RK&;Ru%YBa-fc#x5@34`-I=tRzc~rO@s3gp8J<PG%nwjv+-%7mpCN!__v3jn{
zMKA$JWRMxPFTAW<YrC8ErQN&dZzF6&zwUK=9Ko&k{YrAydZ{SoAU)pQb8lcfh!x2n
z@(j2OpWdfviS=t9uR4<$YgJs@<-cuxw?s~od-q`E2Q}uYb$5=#z4ygS{k2=87Vh(M
z^MI3p*UNUbkIy;CGu`R_)Twm$Gsq4W8h+}K1}^z|_!ck3?2k#XB%)*(9r*lz6ooUZ
zrcM32LH#B_-C55OGQc`8Sb)tfcU7vRllfqQH7%BECV?06ue|(s-|<c{oY<+PW>=}@
zEi(hsP1NV9lN_hjRWm~AJ9Tn&N<Vng1X6#572AxUtw@NUZdC?Tj*X(uh{%B>v>0$P
zIdT)}721%5U&?w<?xAeELKwJ9qf?){E(+;z8B};akpI_m_)&#%xcreK{907PBjf^^
zi}b~wCr;XrQ3ev&VOczxpHRHc!QPv|L8oqfti71~bzCN;Uq3A=)X^Po<E6->dmp4s
z7tKF3`CYs#9P9B?M{h#NbA%1}#f-Gb*HudPckxLnf?{a_=zV@ItAVo9vb6-q_sTo8
zRL#lDT7Mn*5`YYgWr>SLql;7zwqpl7MVkN~2KC5wB)!h<*C<n@2T`g%{|wC%a1*vA
z{}<I&3&RK~htTw$l1Xa~cM6-BTpn*f<BIO0Ow)^&#`#ii{ERX8!{n^~B6*LkFx70`
zVb~RB;1$Pj6<BOlh%7onCkCz0(4>OVsdYzyPUC6pRMN=^l*I)lX3{DwRFO=@G`D(;
z^wASzZR)L99UZ#Hku5nJWn8N4bZYZ?eFA2kLbRptXzQniBQ@}Yw0}~Vd)#;4Tl5h0
z&ZlNF+i&{=eJEcg;%@xuh)G0%OcXH_aBT^fownR!MZYXzf1XMY0pN~6bdz2Ul26KY
zRGIwu&D}4R^)N3wL_vOg<=xw=uzf-BQ+8gfTDw=wH41&)`uy-S)h!U?iXHRbTl&ST
zb<X&`p&{4zWBzf0d4l4Y>b|6dE)hVafl?D;H<(-{b{B|JBlR%(n2+(@N?kHur10WH
zsEO#WK9^ZlWEOrmOryQE{3pcW7reV~|5Ab~)yC%iKB4VyqnUXW*It~MtNY=fw7}Lk
z;Gb`-G~uEV%m5ATM+db2a(}1_=3IDUAn!2z*_W#hYf4Jv#3K?)<3d6!O;*6dQRfqq
zULAGA&xSvU@8`vGg}AOi@W;iwXi(DbX`?feN>E?(>ezjf^k)1KJ)8GFgBcCuiOTnP
zY^mEIPf{EjEZGC{XgL0B9mN#WbxtOZb5@2M+sVhfwu#VS<1uQO$X}OSY6|y$aWeiV
z)x>t@evuYGV|>=W+<D1cj|x+(`v5z;F`EStIsv$qXC=QX2}=gKu6lyduyxy?1HrMe
ziL|pje-L|7n17R)zdMA}#joAzjTaVo?L;2f<ehffnY{1PN~P|7Lq!v(dR$w7i`UC|
zZtWKiSL6Uc><ayIYW$rs<_PlIz-6*LcL%mhrACuc(8uWEkpsM*oNqUDf$IgpCEsrP
z)W@6+AQ%Svtvcq%KSONkQSoNpec6OOdjqQP--aBhmaRa~ZyPOun;izMx%C20Zgmfd
zC!iUVZL}V*njwxXo$~RMc5ScY(|_}R#lPUn-t-gtmYHW|_5$vkoQLgZ>Tqw@GSaL$
zbGI5AvMJR!ywCi(^7U<00S#Sw%3DN4&*j2q7DWka3YUQ-{D#{BrprHk5C>$*C@6SL
zixcab$w}dx<JN_$v1-&`8(^zVh}@}>8My`F76K`l0xGXDiPJ*seSifvk|hmcXpt2~
zrwuhJ8uNPOC%#ulrAA;F>;5CUp5=3-w8hPL{?2l4X|NK;aYmWb>_ok%jEZP5UU^Nh
z_1d8=U6@Ox0z8pbwCt|(%mQE~IAVb%5(7U6$bk-Lnxr@a{1NCZ@h7Tydm(+!@0eEa
zyBa}n-3kdD&rswau+Fg8!d_3HhUTEkjkr9(9cTyvt=WVRGccw=v+QL}=yC2x;%vl{
zQ-9C}0}1d><?`9#4oD{Zs5_`f;`N*z{Ak<a``Q>`ap8lC$}|Rb5EyVfzD2T4<iX4B
z{-%1XG4MD59-K29_073_xz?}3u3L@q*!RqOBJFuTRf3kX#yZnpKDd-^KjY)qDGhg>
zxZ>H-hN2r)8rCNN#&7U^%V=ek{<h;>4E{}H#m^H)Xx>*sqs4uvZetP}E$}mX?meXz
zEYrV2Hi|{XQ?rhI2oY}Ij^R3(ov#uooHKnqn(Qx2e-d9}lCZO#s8_0*mjSC_8Kzsu
zC-c|J75?^!>j($CUV<SYPE4{Q{y?L1sif5gQwY&|+Gwjjmwe(>V(J8{eK2l*#|M|)
z+_{_GrfsaNXZZ(LA1TPs$oot8B4Qiu^W&Wx<kWadZow*3N|w9PnscLhOxR^Vx!B<%
z;Pt~H`7ev94o^0JfuA;CjWy`h*+h0`fzgpPykw5L-$@KF-X2LBgs=M`5s{p=pYNTf
z@kXeIaly?X$sUi|P8!XUs`u$`$Nbv(6y9ss`54R{rl+@VV-q~B6539;^ZdC&C7ASv
zIM>UUmgTGzDKOf4kyT=H)Va`%3a$2RP8v~zh%{nO1+3Fqzl`~wU%XH*ZZ$4y@8VJR
zC3wf8)Kn$x0$e+R?@m%p8bzo7fWCK&Wq`RJbG!$T;~jG(f~>mf5uQDU%$hn`6Sgid
zTdW0#z8H10r6~-2{O7;3kzm4>HwELxuq=8;+>iUdU0rW(+<Y_07|QYf8<hFqE|?oB
zM4Iz?U7J<NuS{7yelP8;O??&{h^1>y!mMlkSJ><_;u3I=^`_XzywuRAFe9D08JS3#
zBXZTnd~rX#`byu-a;-b~f$`hCvU>e7Z!Wt1Xk5{l{EVy^r>S1tt;CZoj4?mpPGHks
z;WctI@(oiiDeqZbpNQ;f;R=*l?{SIIiBiLi$@xTlLa<sy&?_*$3f2B!3v&0)?9Nl=
z8DSmb20-RFqptg155#RhM)hRE?^)+v<YSeS_iFAkk9G+oD}JLqv5CcLTEAm#F%Us~
z<)?U|ic4o*#I8d68<Q$`iRUH1wGw~L=Ss>ttM8p155yV>Fd@o(YbiUen}=03Z*9QR
zF(#$TVHTB00gcw;j#1msm;I1s0j*dIG)hYg$W%;u&6h1QXKkPe+zDKy)$;b=wpOUG
z_*Sjj#JPNJ&_VoZ1M77T(?!4kOt=~OV>3~CkONWJ4rB&ikMB17%$CtK2Exj9!{Ryv
zhrXcoyjIlPe?z9+qoUJNw|M7R8)u$HCnHzD*|Y|g$i9391kHfny-(FC#R(dU5nx#*
zezx=A{6NZ%x1^4CTKxxMVO0TnS<c*FVq}Oq9cSZa(VRFaT|`VpKAtwQY24Www@FX>
zYi_+_a;c0Fbn)1_CV)9^?|PZuiWw}^?@EuS*@<O2s=BOt9J60)94(?K1NQ^jetqT3
zw8R#;m+dv9{e=`9MfirS9O?5BPPh2;)pI$ssWA&RF_|A$nvIRufGQGf-Gc4=F%Ne<
zK`}+!Pmv@|KSx@I?wSZ^)bZgWMyw?jF+^OJ*(ww`GO?0~QH84$e0(tVy&SA5M=8>f
z+liK0|Na&>@WiSR06Eso>B>&Cn$gjP+oYeS!be?dSB2Mx03At1r}{klYuk?JO4mxL
zax+Z^F!Za%w2o+@qLH#}t*e`NfTNQIR-5HNlp3LEL8~&^yCr>=>H8J3fSk`2FpU-F
zl-$mDX?Yy*qHsZ>T6Ry*PM~2kVpX*?J?jE{TWCG(Gym8KI*&-CU*{NcnNwBmMfs3h
z?y;Hp`%j<uombtyn(1cq-81P)|2@`0@@-SD)+5?4%n%??*BFmT4=pskIZ(QtwSb3(
z0G|Hlw~`<EMZX0&+s~gjUQlc5@23UOsUE1m^NbjB@B5A?xq{ozLA;=WT{_~bStl4B
z{nH`nC{0SsXJ^kNi=_q?nUWa&U!-)e3!_Bqk!v;gUQAM1lEJjIsTXC(CG1MCGPVdq
zNO5vG3q#la^H{HDmh2P%mWYu2iJ0cuZRM;g^b?6=-0cA3b7_Fyupu>gE{sou9PM4^
z55h-vQ{o$J@Cy##S8jv=w;#RVI#}Vx2;6lzr{#yZ;Zo|xhspd5*>f9<HRb~MD0&_0
zMC9O6FBRbOc{Xnj8qa*D1Frd9SeD6f@Awl=F2wO<hI%{#Yv9CtR@g9=#ecTOeXUW)
zt!1?gT;tW9xfcEHC8WKRB0|)(>Y>No$*9^GptXQ5lVJ*cc2n=PQ(Z2l!kmBMzjz7R
z^>g%BznnY0jslZd;RFL+1U7Xi*E?)<Z-f~8hSI}<J&kI5LMvkk*P~qFyS%rp$;U~c
z#TKeCOwp0S$c;CoX|f1`;E%dNCH}2<DB%u~dmLELzeb)tV8Z~?vGK}V(?fj9SH(PF
z+2C)!y+41=aYRI`z*A=|oiP)OBQG2OL*|AGM+fuPen`M;k?zPQOA6(d>+#I?KcU1b
z1rXISU<c?(rbA!KifhHH=XUkFMc_&ZMR#^)+iBonz#^_>_J&t8iN>t^E?x6B$K1ok
zX0(ck@);O@vYFS*DJVtp2zhime>$nsN}FfJ6JFHg0T2_MhzIU45;Ic>-(hQu^;`^?
z3>!J=y?@H~DMKeHM1fy@Uc%Xo5D{p%Q_X5sM9Ufk=)tWjdj$B1DJp-mv-f5zVyIU;
z$W~h|9Ypk;mZh8|E;lHt79$=RbZNFm7$j)1Rg{2Nw1FSXK^>&y4ic`gkqqt=l;yX-
zM*`H;z&^J*UCZ+n18+{-M}4b+9rkpp@g#H)aw5NKHxt#geK}Nr<pHM!zfU}pCDEO$
z>G1gx{ih7Tx}<){D+swC%=xpVI-g8|{o`U`y01-TZ#cU}DebllN5aa_q<IW7{Gc#S
z8wK7H?T60Op8j<jm3itK8u?;l((7q2$xf<*jCUHh7=9!3lxb8b#Mz68`}~JfwNl48
z1t-%<v0u8sd}Y(J`J?J8KO}{xWY`pn*J3{)vVf8K?RAP76Ec<BRd?k*;@#zh*Wveh
zRdaju^3=j_KDiWeo_s;nl+fScQ&03hh56IPVu@#vw=c&<$T57_r%E9_Oosze6f`Q|
zFw*atSTPhrcesABI*!cTp1NkLXzrS0xhhrtFRBRYvZb<YH53k~*kw(;-8X_%A6T5c
zE7h^y&DnldJ~IF{2H*zV(Wf-@TBdTwnhXr#Ad!ft+Gy<)C0N{RCQqwM`~?w-u3e7F
z?9cj6t}k%|pL47in^W)c<(-a%%hjP!PFz3y{i&{(i!tX(95%^q?EngiBYk3CTt-Q1
z7lnH>zSU`izI-(E`-E@dhfZsvI-jCURI<31LXNRFf8%^Y3eTUg>fckMGsdp_`!6{&
z)dZr>h8m5dmk%0$Pm@4f{N*oE0gr_y=IOpCA^{aNuR_A|xT1pU=2Juj(z1l2dBo8K
z=I>Dx)tTV2)Qq&f%Qsm5ReW14#g5lWNI@g`I)F1RgWL-lCIe)0oSOAEubLSKAX6fl
zm;?@WD0BVVV*Dgw{0y872vHDzxhY~vtz;I#4TGmEe&h?NT+Aq$4GsT)OkD$GozK&a
z8#Qcfr?H(I8%<-|Xl&cIZM$*O*tXF)y^Y<xH$VN~FOclro!OZ^bIy5eK$5uE`W+64
z!pk&3e9Tch0&%5bZTR~J!wlMQ5?}v$WHqCt??8&Ac9@(xij2-){A6ajPEAK9ENL6r
zVm7$p42ny}H@9YdgA<!c6`1h|iidCCXSztLHnBuQOj=Z|=a4E2`tAn$1hfMkw(9s-
zYMi#Ph%)DtN-)2W)QmOH`+PC<CDhx+B?mq4S}+D6vg&7Jd<#wE0ug2j3S@o+hw~3m
z9wnToJ%^R_bi0|mpG^Bd_%V`7H4UE{1@#>*FNS%>J!r&P3~kvC#*qdnybv4DzeCka
z#H5lsC(M*#p8{A-)1S=B{ENnr6h87yRCTX^UL?rp+>5+<ko*y1{lz*C6R-H<G=Mm4
zrB9MEdeIX!i#VIM0X=JT0{_64k+_BWmWK|xn!d>o`|;<9R0%GzJqfJr?6Ry*8l_K`
z=l^1L@7U%!<wuU+`J?yhwh_Wy1P|3GM2FlbbRuGZI<~CM6j^X2XXl`+k1>q&+#ub1
zSI2eigLtP7JmT3vV1D?;(Ak`z%(1IJcFP%iH2sp<*EwDVISzQ;aFmf_T>L`C_%{B8
zI~BdM!OxD4k%}6zpb8vAFd}KiI={q}>2X(Qz9p`{)IXzGG=I?6vuE+fB#sjUHy-WA
z`2xu9M!skZ{7$p?!Q-gu2x<Fsz3;@^-7YmYI_R>%B5Ro|AUAOt`cW|e(XKI(m%6OI
ziNZfcPa3lEhSx!BpGOTLo=evrAC@i#zfLuvcBfXO9G-T;F#l8$QB*aLj4lpGf(Q3L
zb;W=pKpZd&jEH55hyH5DdQ99azuW9Dk)>C`s?0R|h8a(uW+DkKiK=fLDO~gG_aFkB
zTC?T6^L8@(3`8V8vyog5svYBMui1u>pUF^3FVU0Wc{%awK}&2X6mXiZUVc=%Rg%d;
zcVEZu*UMwu`e%Px^?{Ycqw5s+nXt6F5%|#vsB4xdBk{-OZa`~!D+bdYY0<>lY&{nF
zK7k-t2X<XD18L`^h{ya+hK_1h$KmOMolknmWtw<RC0<QWjmMWDL^`ARhv2*pStGoy
zTD-gKw+FOgy(!f0=@g7SJ6VIlR=T^DG3H^G5}MU>kAn>m`pN#(?o}Eo$ltbg9XhX{
z1Db}dLJ1dsL_}kvV2RTq;L*DYTA(Uoy??7gW4@`azfXaWJ!XgxM!i5VTw=Vw%dgrN
z=c$@ZW>{a-UGzKwF=jr#L%tBXpwFi2rUfV)G+~gK23W4KMKdfW`w*36H8-ZCvoy{l
zhRd^3W<}s$<mHcloa50ul^f7SSj8v7#tDYQI*8K{S4bQC-9^G#l|py$8AV@&X&PpG
zQ11^bx)1;gr<kPWV{gG%o;dh;_cKvJ=LmOy{fXxTrR&Cw;_1+jASW8_k&>=CAS4Id
zbxaSx?=?i-`)kc!kI?;QHhA3f!l8<N>Jvw=cU+Z&T+{L{Wq^_QxZI$J%@*^pnbKhR
zS&id(z$pZGX|4uJSkIeLZkX@zlYJOF`qXovV@C4&eSOp`TUigvNWCnE$^16PgKjb~
z-^3Gg*K6~!J2%qspc7bUmirt7Xc->Q=@9$4chT0ks8nn=`T`skgFtu(D;IC}0&Vu7
z7hgT$;oX+Y)8fBf%WNyOy<u@ifMzChR~K^`6;S{LoEp$j^%ObUH^{PYEbT&tX|y;>
z45fkKud5igZQHH<A<QQuT@|HV7w_{KoeC}s?6EU3N+TnUOht)PQ&kfkYib{i68qd8
zwSU=OBX)rX{!}I+qNz??zevEbQlF7U6K}}JZ>0L190FS%&s)!iOvoRnDe6Lo+RYE1
ze`gVIucppjS?hs!$XkE`(roW=x9~)ua?5u%JKgDF=cMb@=$hBgT~S^ix3A_eAMl-i
zzYRO~D#pC6T-C?M9#9S~_4^{CHrW9PaV)%|tVE}hp?09TF%`w;0`{MFQd6xIx@pjU
z54OK!#I!o0nGs${y$gW-4S|PZQkteN7V;UNXI>u{lz~_bMezeXgra?HpBp2hW#?Gv
zhidgeBY|f84&*v*O;<ZQF(<z;CQ4xgU%N?v^tSd%(p)Vsft7tjTG<jPUe9mq)3+=~
zNE5uSR~>cRK&kgGqw;dgLwew?V#**Wd?(}it-`V}lAr&89e94$oG4~)h($@HwB1^d
zFxg;@CN%66ZP{_o!zWS-8V#NQHDh)5i?87Lz4rY=<#J*HVvdE$j-s&OZu*9Lbwq9m
z7kLup>gmk%j3><=;NiJ;n$V3brp|m8PepRmPJd}&H^q7zfKLi5Px|mV;74`i5tW%g
zzeN@S|1UG}wtCZ6*aecA5MlxdzcivgE+}9fpWBScPMkg~L?&992pE<(I1|y67vJ-S
z#biawVK<svW1kD$FDZSLv(D26tG&((p0C9-YmR-IM+2#EQX522I;ebD9Yi<0aqgve
zs{zhq95E(6kWilo3yCJTkQ)p*Vgw*kVeR&~3IZTCHb9-3d(&XU<VL-B<at}2&D;w1
z@cruQ<@eJuS|emkKFmv_s#)GUofwTyLR~Ia5Ba*u4?6z-CR>j=t`@|&%TO)AwN-Z=
zCxUM@D}SB^t|Dppwysig!@*s$YU>?+r$1~9sKdmB%U<^$bu-mv3p3(pNo2Wd4_`iY
zolIVOa6K!w=h%RGSKx5h@Orh7o7<*dznpKZj1kkBZB_~dIlTZQmia`Bs3Wv}6z^q%
zdS%RxPW`|5Ixq<YDS^OlhSm*Z(dyO5A4fRD#r&-gbP@XOw{3*Ht`FZrz&a<|`tM1*
z)kL#?xH9-)g>2WSGB!z)y;ts3?Y3DA1e)?gJMMhu0mA&b{=yZjR3_0dUCqt3mHd{~
z3rmsY4GkLp07{2L&c*B>A>x|rz$I}ny6}I&3tHHg6LIS|b`y8@mwe9abZbNmQSCo{
zKr3GmS&+p=PDP?CCvE`YT7F`SX_0ITmbzuAf7sNN1df6sCKx|6FR>rW-wLiEQY;Rd
z^v5ev8zao_(07UtH$)THM%>8WZ8<RDy?W`;2-SiL5Z^!hg$Zt|Q;ewF)#w}<#UfwS
zFcAfK8(tbNN7_6-YA7I|i4g;LOANum9qNxWBtC%yRF^o1irZL(2#MIxUXrdkRlWU*
zKSR`k4mswhV09Kcl*alPn1(7X@rZr0bkd!d;WqHk&IiNkp#Hi%=|xTeVJOzMy?Jb~
zb$_sRl26*s^-XW7z)t{A$51Ii<m!=t_x=uFUMKT@B4)W>CZ;@jNnH<K`#Exe-D`>H
z;ryt1u1W`K>FsXS0ZEaV&pPI4TKJaW@N_?Rdi>_Hrzm482U+%Q2Fusx*ZqE{N#NZ^
zw0EvtcE^p*@6WF}_`JY}oS;E0P<;VaeOm6PI1#iiR6thwR^9zuiKWOjbE1h#E;`SA
zrw#_MBr~jrQ8`rK{t6<08az^mKaF*o&7G03jQjK~Ok`YjzwgoccoGZTD%x6tB5i=I
zDSev5%*jNEf;bh!NAVd%9a{M-KQpGdu(y+WK}t{Wl2as9MF$v3pR5Q$X^cqKfP)h~
z*Fj`1Vbz~EC-e1JV0~3$a>0cvibzRPB><LVF>AN;%Y_jvq2+o%t<%g)*$KW>Fivab
zxMr{Z+w1C7l$FHCx^J?P;@vBU^%d|P@?lsbk}1vw86t=1&nfk<Ux40J9MpuFY7m~+
zF$67mi?pz!01zydwjplpK-T-bLzmZ<Iu>X$wZBr|dpXRVH8zne;VEx7WiMZKJIAu_
zZ(*-(0$9Z|j>%>77RA)j16wBvnCLvK<F8ep9vx@Y`+jj2qHNkcTw!9Fo63D(9y*fl
zW_<`}{J=Nj-kdutcHO*l9p-408h8eY@d2yBcZ#Lz>J<k%V)b$uu)9sO?Ok^K{kEh>
zz&*xfwbG{+e%9xgj2=!_huC&43uA?tLZ49&)z8jxW}YqOUixeIoQzhTw*}XC7Kg)v
z*YgC?V9#0_-}Z#-rhE?R!Lkxx{<w=`3n|%}0k2f{4fCoZI%{)WVPzH#kJhgL5%=nx
zrdR0D&mVH+DlwWNshrt7W*{;a<~s=ra%kJ385#7A-Z`XCS=~Q%dO9)*r(rO?^^oC3
z!DcUd3!dWiQk#&dBEpcIp0we$G^|K$2i$^7Hf0K?&T1coBw#fd6)?~*Lce)5c3gMu
zdn1UF3vt{Q=##xqzd&Vz)emfs*2)^|O<d?l{-xcY^<wzg>~to@TV#5Fzmj`#JDNz)
zUEyws{%psf=6gU`#v%W8Rex|$4uROHXffI5y^%NVmj{5BTD<IL!dPtkMN{(85=Fry
zP&slE2S1x{;V0Gwc_g8W5CbQDVxM%G8s5Mg>%!iLKig8*j`c55(~r(#BklfG#-m|5
z4HrT!?AGnXaiB-S-|O?F4p9QAIFzaH%Cb7vx8mNdp-_c?(u2KqXigy4vMvvc-$MsP
z61f!vMHcV-@1WwBDewE_ZK>-~BZ&U3W%@GW=*}3SdTsWpIyvep?(_E|i3|tex@U9x
zX0ENvCMy^5gv4JD(&ReUfhpGUd}${-wK+KrTl&$$a3ofN4=087zmo<LthE5FbBuw1
zQ>q$vjqgKm>Q=;psdYzQ-_9?m<Q@F%oK=E3L{ftXTZJtjP_w4y-ITG{feWlnbdBGP
zbuBrigQa09gp@ZZHB~|1y%Sy{`0I#QpT;;CYqyaC|KR_8{C=^hkJDD)&LD%EbOau$
zt}msBvTY*6V4-YU`Q_S|cNA(AGLcL2idtt=4w6jkP#RW)b|95-!{J)au~etE8|JTV
z3yOOs+mmpLLb*S4LjYE;Kg0pwM1C@$IzV1`b7>5yo;pXE$wp1kNL5juJnu>7ixKq`
zmKBeQRtS!XSoQy;vhKwR1u--7N)buc{Zz0zm%)R@e0I9rbIiitF1*Trmz_7xEv$Mp
z&M!AODbn+HrI(yMlaB>$(DAFde<!tun(Ui_k2QQexpveF{ecGhrQshOZ$DU9&*WwN
zy?qY$sOUsG6$^Dzi9=Yt+i$5wlXHxs5MbSWsko^75b=gE7A#>zIx*;O)qwb;;tCNX
zy!QNkOttFU<mRb@7om~6UU*PV3+5{W^Hw_9-EgufU6W%E3^w#lE^SE1nEELcs;+{=
zTr_>BrulkW31iq7nOi!Ki0aMv+=};fLwryX2hu!}81r-atlGP-uWyZY6aKw(+C@dr
zz5>T$mb6?=xn`Gz5nl{r4t~{GqOU3oM-xj!6fb`lvo6^(yEJN@zAkY&v*{Gs_&h;d
z6HOO2S*UahsK*Y9lY6JvYWXi@jLq*@UkvbhR-R@n7{?aqx!I_1Sz@~Uad|Rdhnt?>
z^w~Mm;Gi=962}%EYhocL3s+GTG{Xx5d+eUqw@?3J%waLFX29S70_ha%A+5{^fIoR{
z9XYP6G_XhKBOVOsTjvV`=4S+RZ5kEeAVT4Db*N+)gwC5~==!DhW8)|9A;;~kE-yMu
zAB09Q1rg{#g#Y-YAnmKRy2my|s0k+$bpz1~=_jtb5eLzyT2tj98l{38GJn{H{URw1
zmDAG+o+7%XV1Fzs81^kG4Z6Rt4bWCC!PWmz{3>h+B{drcOzs?Z@YUOV8-HPui9x^N
z#$mZba4wPV|E|4)En;<6jX-2T?el<!Jj(@#0lM1$ihG2igt0%#h!Gx&N;#+FFGd1q
zBxV5px>;uyz0!{(b6`fLbYC(HLb(+DCCpBM@k*bgsLWPNrm7kjQblKruNMUV*`A;{
zXHqRu$wjg4NXNkCqLJNKUxhw$e){+@U1-!=Z&B3tsL5$LJteDV4A11lgNaWG=0T`>
zRLW~J!g#dhhgMG|Xu=#=@0kc)aujOy<nx`oJ4HyGwtpgAGwZiKG5RnOOZ8H4J73<(
z7#K+rV%*;Ii5!k4=O;~JOr8mz!1}>cS5GAF|E-2hH2g<$%D(fSQ3j>*{QC3TIb*)#
z-J05h#4{bO<)>w!!g*~*cM%8SUX)d^hIexo2WG)_2^PUSV(s<Ln8QfQ4`C%tIXMZN
zE^g#T6v~W<e%%4_=AYb$CZbuao)Td`c1@ncD*CMbyk$?vh~8XGYCT+W3;#Q{K)1R?
z<i^{2H=faIq>5gQc7=fs?F7X9O|qD4INnYE0IK4&g4#GkzICdO?P`Pve+!F=EUbOs
z7zHSBgF%6d7qd*cyPu9=w7`%e<`)J`uY&iEp){(mD4ch1YAJMr#e=2(S&qT0IL|T(
zldjAapdmp2KfbFo>9Kc*y%Q5D6d`H4;y(0)FG1YM^{0Dyb=!4ODXLn|S_>~yDvOrL
zs?=F^eRgkAQP}c~f=p-Be+cqimPS9%N{;S;PVAEASS83-%!Lv*<=wFf3jhQPDJEvZ
z?5(PKHt|-gsPV)MltypEc#5;-A&aU%{}F$eV&XhQV9aRgi-yZ?pqcl=r1nG`jHIeQ
z3H?a^8MM|8Kbq9vO<?+X61>JDgO{!~UcC!gDVkHzFbfWrDhZ0a4SCOAk&#uj{@7+y
zCd3Lluk6P>Mo-S)XNdjhVQl5KVv)Ku;?g~_W4hzUfj6qe<uH8WAg8a-|0YL+kMS_9
zjV@r8Q#*m`wk;ajoQ{<3x&-D()ho<UnnLxVZ|p8XVD(N=r8VMH6?S+rC@0|lss)ds
zdZIBEts(Mghf@M+TWy->OcePnViQYYT>=iyVX(N^NnyRHr{d>|*rXIyONFfTnk8p*
z1A(__pkx2*0y{XqEYEL~*$XOBvGk3dBWh}tN>2_9-T<a<6*=o6)pD$5Gh&csON}+T
z>~Lr}>c7%Y<MtK)^0%b<A{!O(&y*4m8}$Q7S`v(@Zn{-3u0Oh0fv7mAbh&8VN_Ef|
zIe%}WF#j`$kXfcEaV%c9k=CipuyJu7=0CQv22}t;G_NQ<-2j(hYS71WG^zUs?{x91
zTAc{ao30aET<9c#ijTSwnf&s&xH(tBMI=v(_-eaR)S$euNB?Y0K-`5N=nU3{(+J&?
zq{Qj!Xp#**G%YMCb<?^vZBudMeuBr0dkYzlkYZ{wlab%7af;G47MPW)j!P4voZaF?
z<x>B96v8pMK<R=a;`|`Dx9w$)wNVc(G#Zh`4+|sM?RnS&b~O$iWvVP_^kpUUZlTUa
zu#0O>dWW47|8Q3^k^qEH%ZMx$bWtwdNo!2oq~mG{5~r8(szq{>6oHVF(|bG}h87gw
zQ%zNit~{`(?F42Ev7N77^;-_ys6itCWu&o=<o)aFPjIN$*mAJX{KAUUijKCx>(`#^
zsqZ$!KTn}9o7d7w54OmdaU88XwC5GN7Ui-m)b=8wQ)@)13`r?T*1_JPrvMh}nUJFz
z3+kNs^YDlYWQoVw<yMjXEQ`V97fp~<OE`*vO0w`qe=Bx;dXZ?&h+M7;LP}Rfe$ejk
z>IPbn2HD=LZ>~0B!mTqJ<p3OMcPjAh`TS2@iKE8DNPPfZjwI{t0ZTmSe?RQf790OK
z9it53z@RZn;5j7uhIQefjx0QK_&$uV>0?9G6Gdg~{FBm3QC#h6s_jzq5@+E_;8oOz
z2*a?~pPpT39Nb1TXrUsBKc6NPh3k6AqGlXY)EAwJU-#eE9GHi_^7y+_>@pV{Atf+^
zzH+598a?;c7%Pvqgi9NOJ)_P4i3-lD7{dr%vh4i1vn5|PKOjU?pPe}dCR6g%32>Aa
zE%o<`s)^Z}vkchB%Zy#PXRxhvku^d&Cx@y+&En=3vx@Wgg2w|B71Tm+yiX7mZ6v0^
z!UMC@*bQ6#|69wMUvqWJT+GxnWqkv==AE|*M*Q2zYY(c7>HJ`k<o3-^SfPFN(O}{2
za=L0^bRzqbM2pND9PvFWz%WQ*3P+NO@P0@T*MXhJ&7zO~_a&(k&pEVP8TIAvs6xVJ
znd$B)`>4{t#Bei%DndV`EIPM+kz|NXE;(U<n#3%}EqYuF`7en`BoKZr8&wfgiSFr<
zZodH!00c{xS~RQ!4O+lA8&VU85b7=gWA74DQL#j(C<ArZDCr416W$5EvyfS5#ALJv
zo8L-uBQ3-Nr-vUlrZ3x+h5FQWEc{CmdCv8Tk*)U}8#{Fy7$<JTHAg3Bu6V8lNmad%
z!AfGUgXyx|)~&m0ltEM3zi*Who_OGT@u)j0n%6Jzgv=~6yvm)($>eB_Bz3VUCa%n5
z99oI1XXYGzG}aFoM2js_Sw+^C{N9_ure>H@bZC-w@V{dBNurGa$~<{Uog&x*Q8hJc
zO>v&jj#-7sSv9Cu^y4bb#HN*)<lRvcU344;Mr~nnXOUsz&jW9uYU9m+Y~zu9MMG#1
z1=tgVMiH^Myd#iYH%0siHC#**t(4K;{}|gKk$m6RYqQkoxWYsf5$_FK6BPa$H4|El
zaikys7wLT^!SNGNsDQE9x3n-6alO06Pu{v>9AzxR;x+Pea&w7_2AzD~mZm9#F@1+a
zXd0X-W<yY!z5h>r1z0g2oKp2$NXC#NK9SKbKxOW{Pi7VM(nw?w3Fl8!53Cthc2zc%
zyyaUr9YvEn@B5QHJftuVDse=A^%=US?3JgnEo(;Vn79ju(v8e(=TQ%~RPxb%vSuFc
z=0Fr3pWGv0v#rE7@bqwSi^#qEA>#(ZUiUULPXouoZlTMtbn1WdqY=%SP+d<CaWhyH
z9Wv8e7hO-U<JX>((R{erFuVyu;DCi}viRl65>0$ub&uH240f1fa%J#!ve=-0$8c36
zjD6C%?7w7v`h)G`1;;{6)(RMX44>bUPrglo{=|Xle06cdi!b#D&aG2TzkgbZ!-!;z
zqHdHa7`2wYUF&czPX8M!pyos5IMOKaJMRIO;&zO=)uzd10jL{+^;313_|s$c<Y}z;
zYitRAUQ*GN2|}v;xDF31LL@jh!W(g)QsvqSB=2~aywH<|e=;DZk>!ALy!8`oWDKy%
z2!LL`I0rEUu&S#&Q7Ny$D4m5}73V6hLlskSMWO7)%i=3g+^HB@1r|*${#%U(`qit)
zOD<=9(BYq+Yv+QJO1iSn$}!HXR{=C?C2KMY166NH5sp<3dx#U0iqR}F?)dbZ9woRG
z6<gHTadoJF0wzGgi&aPGHD5^?5|Y=7`t9KL&Svz7U4IV#qQlpkQ|--OSs9h=r@%4d
zGGvRk*I(Zl;;YAXWQ<slxc*;XXn~b4Z@i!_lY3D;|Jrl&Df#*BfGNI`uc2CnaZj>o
zW^LBQLn_8;Xm89_<-B)@?$bxVv?)TerQJJrHTuwGP>1>#Z6DJ(PM;{&nBDEj@>vEI
z=lsU>_s(^mFbs@~;LfBVDUv9g2pQXYl8jO@wlT-di4ldAnu*CsuOwYVz^b^WKI*@n
zf|aN;oA@3S2$3I*X4pD&-D1N^l|~(a29<|!8K*roa94yIn9=iJrr=@~A`S&5%26x2
zCG8m)iJ#ZiLl9If;7N={-k<**24n2iC<a}0Ru_eM7&1l3k~1bSYMggrj^9arKiQLO
znv|C%!0;+AS<>?GFaq+6J;W-MpEq^yhmYdXD+T}Cpj#4njG-rK;Ol;-p)E!evZVK0
z?jGXpt8WZ?T23M09z%}#<MPcZEN+iNMg&s0MH6?jO_aY>YLGQ!tzA%D^q{(#YPYJ;
z2c(~m`dbekwFo%!iK)cWl2cW7@|#sr1ge@nY}^tsp*0=Ih3nZvth)5IRmCaYl&b1q
zD~rMY-Ibs!1QePAj22Cu@EPLAB_W#{p3W583laGS(M~W`HPVnGY;e(JVh)Vtym+d4
zY2;iT3Yurzql$xZ(j>Z-R7&n72T<n%`QFUy!wBpQ!Bo<}CM`QFx|{4tbl>$k6;}+T
z9~vdItCYdubRo)j&VxrIT8e%`-6cDaMlM&F6*q6l|NqTwthrQkrX!^{MaV$w<ZF+*
zp47h6kwb9kcYCX-0+;%@;p_q8D?N)Oz(!GCcz(kHb|cgDsWh4zf66OJ`SO?E1m5d)
z|2$M~rtf&#m5{F}bda<XO~&Ih&ZOMvlVSmlNyXC&BDPCA&zbPp7m~0dns}BvRDUrT
zW|KM*kn-!F^D(|)@((0X4v@4(ZkwLw2k>rNEQa2|&Jq@~UXrhByOU{?<I#nSi8>S%
zv&nq;%-yKhWC8kKR8!eNo4?I>R?x^Ai^P~W4-_vgGwS*(1^s*tcDs~^sKBX*o*E_l
z;sx&_z6h=_%N8mhwze;xHzWouZbPfkNF`EBQ*BaiRen}XsR7?dqJQPK@y9svqsF(3
z0{EgdEj)0DAA{e}ga&G~f<KrU;)ppNKPymKnhKG^6RIE@tPJ<#vBEXauy}}DWUon*
zM`MG=fP{ZNw2Z;~I}OExn58+9m-!qlomF(d^r!i_a<Y?U&Z?bR;nrk^92NK#O~m9`
zsa`_9T@jZcvd!fckAGYw7y0jwA+ZXWZc%|equ!VF*YfE}EJB@M7P+V<7gu2CO%*?7
z(6V|CkNAk?8M1_dU$cstN<g(iu7Vt2;SRzd@ZL8>Re^<!uKK~ClDBC~_=R;`yKp=K
z9)%bC#JXA1i$2LeJkdX{l7+L#l$=8!c@)Tc{)<xJi-pf&z-NAElRVM?5~#U1a>ihT
zoXvlBfbb~}?X!}hG0{F)y_z|Zr5dc#BI=F6iNB_8#~xGsQ}o^7q@fd8wXc{E{dd`o
zB587)LnC?0e;Swo1!>;R&V)&(r~O|Ou^p5aLA$Y?5oj&&qNUfCHb0xC+8_7NoI^@h
zC9SizKA1(S2R@nABPRdbMrlwHTMGs$9EC&yDriLJ@YZ|_Yb!xt>-3}4iuk=N4V>vL
zqs|entg7MCHoq#~9LrPreA2ZB=qzr4=DcR6N{pL)e}-xamH$8qs85;;*_&i^fqi|r
znY!7NEXk^eFC6C=9LT6(T_hHQ!DtJ2*AljTN->G7vaU+T%W3sAdgV(!HTgGEg5nUw
zWrIGEkS1Xk7JHE$Fa=NFzmf0=up#(o>^dluw27Eo7pxdqAr)8OprnT51F09uInw7-
zPg2OS&*-E<AR^%XcA2DFz#x`~jx~@ni^jFAI9AZm!TmZgcp9VQempR*R9!RSz$8Ot
z?4AuzPiiSCz<Pp(Hg3?71Wy{6v_LjcuA*u?@J{~uJ81Bk#m9U3pQol`)|A3wQKMk@
zcx&w;czu^I272a1yQXW<D|`>ICA|2P4rH+sAP39lgAtNZ5@b8F?WgPlLyq$!{GsGv
zDT1sy{-$$#b49qIR`l#+?~(`61<0lb8P<X9Dw3AP%;OuB8z&h4oH<a2&RY~NmntU*
zCG5s4$0ul^Ueq<DmR1x0_fQ(aMTszi6h-s|eoG`YP*U;m^q4p2lUvUu%wrI!!OQ%B
zAtw4e?l_d(p@f2$H8!51YEad^{9Jq;YLgjCXoN%PouAYff!*x9kmjA#nvO`CbpS4%
ze2apW?af~gZ)J-i+t1S6dupg*h2JabE&0vKG!)-LfuuizukPe0dug;t1*PSGNu`0@
zIWK;Q8+z<z6G*?byb2>@_|dziA9LQuY!7Q`lvIYgBtgWG&^f?FQ!Nqd)T-mR|Lfhz
znIUwJN2~(OdtyOjf)u>ChCK7OWXCdrql0PlNnUH+c&eh|Z5Yh!!ZZNIx7avZ3565X
zPB))B)9kh#j9T|)SVGD|$R84B4FaZT!cta@(X(kj|4%WRF@3CJg<{a34j}C7NLX39
zp%v>CtdNk-MNXf$GNcHz4*;y{-pUDlwIzf?N3VYs)(nkeK0?F;jm51$ydRcU9Jn~P
zDYNqA4_UFWKQ?@<9dHPA1aU!e(D9-~PwlJfN);8}!ksvN4~G5}#dU=cvj1Q9pR=Re
zQv)#@5p^z7tb%vgEl_3^ls<(;QmiS`v~sFQF?wEWyOo$VI{ImbdvfB#C2Dwj-BVy(
zwf}oQ3GxcoO-`@-5E`X_9Qj^HQLM5Zd-#=|3*^CYyo>4p6B5r{;P+L{!>KKR9F9mA
z{%e#Usjqj=a82sJiA`c9com*82${vfnJOLoz(=Xo{^0S6*ULx=Lt84si4r8(<@WiC
zPZ?n0wiTK;nvidKx4U6Zw4hKS`BJcnGj;wigTn9TnSq~cg19$2)mBvlXD`(P8iu!;
zl`yTul1$!|g>i4c29esjk$HVU_C@Hq^P@Lw8udC(6QdOFC;OTI9S8c>;}ZZd3}!fG
zOq7h;^_B`Hk-hvZG*^u9l>4CBw9Ubx&Z1{?bOAG7{l_Jn)*_>(e#dekwE-o4?O(VF
zTF7Tm#oYW&Zfe<B^8r<Ff=y$r6SiJJqT=fKSvNKA$;)YQXsk5E*rkrRKfHk-pz2p<
zx0jfm(n&SH_CL%CRs(WiXe@FhPA}zc;CzIfJZxbW=TgWJ-q3Kdd{HIb>ZZ*@guX>g
zzwgN*;ivjQAqHo~%77#g8IL#KnF&c~#HE+=7=%FT`i>7nMcp-Dbw22;PWES<u&<M@
z>#hz~Zkw`y!8DwM8d<fY;1^*LXfl!dg^bp4p)&R>&Nvc<Qd%AE-%NH0B7XyEWMijL
z6ypsl=^7*p8o8`ib=IAh@887A>KdtB!*#{5qD9?w{8vQ<+}4KJG%M|@U-d6P{39@+
zY+7hyxW_+(P9RdbwjgU@`X+-huGTd#6v4)F)?bsD^>KT}tauDn$;6PZt>V`Bp5f(e
z0Lc2rsOo38^S{$U?&cDcvW+FaQ^Pf5x_{eqB*?O_I-c;Hx<Q>hN$AGpj#$}kL>F7d
zm&;@0*mw%T<HMh!jA20mZN~c(z^35Q-ZnTk9%oLUloq+q&3vtGVQEamclxF^5(mrB
z8Dk-2yrz)CTuAEbnyw&XTBU?V@^tPF`iSqtKTtl1*}8^8fd4c%qfIM(E~-d?w*O)9
z5AIC{lLlR_?EEabUEX8c5cODtC>v_uAh(f`i4j?e+Nrvm=yURt3CXQb!zWN%`Hlvz
zi~cca#X<d9oxhmO`f==le{$is9B#0Mb%->Ig)ze(tnS&fqJIMANBdsVbmHVv)4P)>
z$Q%G-rK0vJEvX8nkmo;RBTxxAD1#%_c0!XG2@uDm@RD~sZ-kw@A9DT?3GGsV9PJnc
zi*A^@SPUiga^Waju*2@MGofde(OCL0aMOK!xAwUH6BN2=e?23G8u8bN4nIHB*1mmI
zaS@#*iAqj+a)ZH;P<Zq|kJd&&`@mPv-L4w>piMt#u_$TI6V@y&x28JJMgP5`_TO3r
zLh_;ZcfcZSl4|i=l^UJWDSNg)IA${55(wo=BmU@MvMcLV)`?LXkq&U*maQ7M)uGTl
zvpbO?t+g<u2AMT*5dO86Zd8s5UO7j{e6|~0By1X?A8iTQ@nR`SHt{rogpIE>!gFjo
z{9yI8&ehn7DMt>AVUuf;kyk1||F?{o9Dkc+Lz8&JWO^0i;x`FY>`uqUvoQ2Bl@{9i
z0EX%LqwahVwMNt3(|&kl{)`P5qC7ZZsag0rj_H%o$j~)B2()wCL-yPrM<*i<s;C{V
z;~7Y{h6(#<u%cd-!688Xh-xv$W`1d+pP!D_Raqe`ya}ZfLe;fC>7wqop|(g_jDy?A
z@b7x!oJqoQb#0%Ob|uh0FU$%h;0~&GFy1Y_ej`dGWcOFxLfaJD$77%{Y`0D}8A#kQ
z8GLkB%c<<0)6`;ro&nsoH1Z}g!>zi#)1onnF>o(ppZ26Dhp<><wW?lK;-G`OjYXaA
zD*MmA_uh6{h^Msnjqb-CA+&F)v(EufuZq+$CAqDzGMjjZ|DWfH_wQ^e-3hofKqyYp
zZd(u-vG)0$#&0`r)g6;H`ReBCXQ&49V$QGuSkZ-<0a;-48ktRGczh8YOdl$+^rEif
z{=HYUX8TL~Eqt4~kz!NfdYDF#a=Ebp(5smWm@zdfVIjLaRnVJYfG77cqmtid$EaId
z?ynJCvSDTET(&4ADx+N`_+OP~^?KEBig#OLEy@t_aB!+OGe@OE`A`=<8|b>$RXANA
z)@@@)7~$PorB~f3>rhf0;fn2F<WMj}gBBtWx9arpnbMf{_Y?=q7vG8P!{(>@(L4oI
z())cT$W(n893H_LlOmqQnR_0ExW{?HVl^Q$`X5&1Rj%D*BXx4qS1CN@=KsT}JQUFA
zWxh-UZsdfEr!T>PYXAc0sDjQKN|fTS7QfyMGIB%rSn^*1R{<5+;u`(t>OvV6<238=
zadj)2fhY}!@2s=_%jn;`L(<%tEK{fP7po*t^Snhm22Itcna=LlE`)r_ql5q?#VYDR
zAq9NwUEemi_KU}SlS)z_yZ={}kOy~p1n7lBG5sb6Vi`0|ZdITq%3I72?<g?if}#~@
z_`FIBB8RZF=R5k-bR>yT-HRP6?7l6C%cLq@kb^{!2Ix-099c}HUdoUViIZ`ZjW~!x
zgTbevTgq-wW)}@n%O#oy#Z8DfJ1Z8I)-esx8m@3xvZa&IjjLZPmq&GGJ~K*pU#`Dx
z@ZV0fZhpP2csuN|_q~<yU3l&HwQGFm0{s=_q?F2ej5y%Jf9CQ0g?aoQUUF_w<40w_
zlZql#HDKFk97lDz*kBn1qeQEv1$}vbQa1_p-fZOsasAc*@>;|0BYiC^P3?ND#XI0D
zTE3YLGba&_aMfvOV{weM^RGh6o`<Jw%Odk|e@eRjs?B%FG`(1QwKxM@8YE2H)a%5-
zLIHr**>e_?;d>8!o9TL56gaMNe?7zhw~*~c{fYB%4I>k!77qSW55<e13vACmX4qAN
zlaP*@m`{p`nhPXTjU~?V`%|b|7FTlGf<_U<6VJ+6+5pdaW_eUjD`6QQjMCu#ezbv7
z0{b91R*i)u1m|NujR=8WUTsj^Tn1TE5nQaeNePa}778LyC+*pJv*JMUMM4A;S$iI$
zODpo4ukn}`>n&Uxmsp&@pZ&LkrC{f^lrFowbB+7+lcT+Tqv4n~tJ=1;_`pFzBYZu4
zGvTG=e-!$^6nc=235H{dTtTw_xeI8o8jybf?DF!$*7I!5y9OlaXI=01J*;WJl6LLC
zwY3XUw|m`p1gqh4Z{u~pDk3w6k0FCy6>Nx2Vq^Z0JwzaDZFuMUfn$Z6c`gFgy}&Zw
z{uf<NQPs#$$=LePPZUv?guX@PX7RfE#KY=(Y-ts4;mg3kr_p$_Drq><jIs3%)B1Fk
zng*hn^YAEl7R%{T9}$@xt{uve`kp&{yR|%GR-_XED&ApbbN73TI8NvRR@Ln@D|Fv|
zT8XU32M6?CXM0$lfdZ~)y(MbCd=EcszYi0>sd`1>ol2PYNp7hV(ZOnNyw!gh7)CxP
z+mRUw-ic2y^RvR-8!&()&VAfC+Ke>Qi^vVGl=mLH2=@H-TIcy^0^wxzy!AIoGrL}m
z0Q+s*8|ck!{<yOL<$J2xv~AbpWDE-Ua@Y&Q1_%0YYQH%575jnyQhEC<@sW_7=2mg(
z+4Dt@vEnrFUvC}ePkAZIbF>2|#ya2fbPb`C7n5Z!BNk+e)J>l^tk{%O)QvFJ$<{Ay
zXctWbP|Ur>Mlk<+xa1jsUb&jAIQfn$1XD&-LaXs<aa{+u>0l!ArhuUH6K&PE(#Qg6
z7*g+^vm)&#8X<OqIU|=aMzLZ=q|B-Y2ktX5ZF_j|gT$VvafvlZsLs0zrC-mWud!@U
zUZ0-;kBy*=ySdRtu*=AT&Y_K)BB|})2mDCru+%@&v2^XQ;Gsw<(DAmDjr=9OQiWeo
z&i8Ggo}Yg&E3(U@HB(=q2{U~AtwpV(%c=VolBO)kz|gKe>i_%%&{C3`o}tz^pDUX1
zdrR`c570EJgjSiza`KTluhmYLwK!_Vm9Toy>A|dU4i(o1xw)3Of>=L|@3@`nPPUC{
zjW_qiCj(u$;8%lGaEZk)MT}Mn{sFEk0w}2RJG<#i7<2j~!InN4Mpur_V+nndiS?*Y
ziun%p5WBl_0=KRNtGwTt6MHv`8;J=Ul5#zsEI{2r9KSy>X*fp`!z7g6ulMd0q+$p7
zxNd^zlWhpl1F;~Vi{yug5RmK|LlEUySXH2em)W!PV!Iqg@F0!rUiJMiL=vtLkAaAc
z=%4+xy##OKwA^oQBtb4xIYi00*^E5GdXexf)vEF4da*U%wT%r#_YoiYwKl)rL?obS
z&P$Sz@e595-Wo-KAXC2gY6s!fQk&ov!jUO7E|87at~-V>bf$<`)_Q`@tV4F7OT?l8
z8+hqIp<n&|9KM-{ol}z0xz_#FyB3mC*{=*F^Cxt_I!Q_o0o$D9?BZUVlXPK)R0r`6
z4pY+0?8b2s5K#O|X#T=s9O6+T`8+OwUxUF+@2~R{!2)X?@Vu2Q@~118PXPof$X{=$
zox9b|ntw=KYwzLr)oizo)&J14rPF{B0}X*Qra;YI4mrxg$BAIomogbKxkU*~{0JLW
zC8zi;Sr_#~3arzgBYdi1<rhtJpLC|Ku#J7w8q~~a1YZWVA%yS5u1db7ua(w#$<a-x
z3T7vrg8;Kt-cRpTiMU97JvECah``+TxBI(hCiAFYlTIpnu`fQS+znc_l@q$>RSOv%
zm;#!acJ71|9PcuXYXfLd?>i9ooq6kF<HWN#)I$p*gO<I4+TR-KcHF6$JH4hJxAaqH
zm0`Zg2U^40<e=y+kb(BC6XmsGO)wUTV_lcPz|hZ##MI$aWc3wdPxs^<f|rNf3^=N~
zS%|t~Zf>ouie&O7y*E*7>^~X)HelzfJJoda20EptXMJ~!kcXioWc*Nf?bV^-{79aw
zfC*1im#70TS%UHYAKwI~#?@IbUUNe0A7l4;%u@rsbzJaNi$NSf<UiF8y6e-Yx+(V9
zJ6ys^{Kr-xBbZ(M+Dxw5UvJ8c(e<wy#Ts3&)?+Uc&VLve?mzi3%1<vjs}ExyAze$q
z;icaT6D|ine8U#;vAw^>!Nnu0y3(<+@Wrd`I=n4>UeP_OyeYBhnODp9#aX*<UN&l2
zuKyvV+i2AD`T0?P?W}$act2|39inQY(-Mdec51AnrQzz}%gE2Ka&DI)iX&}=Or|_y
zXf{85c#`c{GT6>q|M9Z7%!tTBnl|8j#eUhcgiTa_L^#{J$Ul?lj|YE<R94Hh6xm>(
zh}1YqtSCosIyy2ocN=w*5!n(H5`q#LID~-njz<-zpWMG_rb+@6R=DIcGn_}EoraG}
zPVv3sx-LfwV~2W9V3;?}e>DDCofjwtk2U!wxNH9cqADwFc52%7-=%|?#&-L6@0ahp
zhsndkZtb5EUf*9Pt{`WMXbyxB>_8hxb>u_5%wHjA+dJ=uCsctfdrFLx9>XmdT~MlR
z_S=j`!@FvLyHPi7E%_Y26Tnma^WhfM{zLEB1PnVJm-unEodV|^7jkRoPqV%K4uJ>o
z`!x-ap3bQDL)AFpyvbBQKatnl!ENXx@NH$-47|cjd|M)K=TGd*-T~m3+3Urla2&+C
z1H%WJ-c=2z;~eC!?akjqoP*2u{D60DbmaGIZvm`WJU}9{?=5G=eO>LbEAyf(o~i;@
z?KMO~S}Q-NOYT=_%G^ek-mAI``sF_ZUsT6^i&m)&W*_TveIxm?kiDLi0<VLOmU8eq
z_$$wW3xKVsl-!yWi~GwyMsKm#?c5iv9?mpmp?;8M&eZ1PmTUB{HxWH~L)`AfI_vXc
z{(B#{tC!u3Tr9q9SH9i_`<&2oiLOmO=2yX?>FArU=}()zHxG!vetJsR@SY>kjr?wl
zw;XPWz6A~zOb@NtV)xd29n97aJ90W}r#@Ow?H4vW-c5GCa%$g)th$bWsJK6RrTpdk
zy27bF?D>jF&k9I;s%g&U))oP|NN{+>*!f&EM>@wuQyg3e-A>|>$!33<h`kuBA82k=
zLpoi{b=|^>#yEI3J<Z7GOi7r=@&WpKQ3B*%F&SBNejK44*`BKJJAOFF-XDrL>N!qh
zz`e&mFdK;pr@H`3JZFL(dT(X%K3w9pfgP+nZS0d>e!Zx<we5bBP&96;M0@^)^6Uk&
zOLT}mRvdQ-XLhRhZ?C2ZcPvsd)S2breRb|mTMwe_{;CqS@~iN$ONfP<z7}Ne_AbI!
zRcQB-Q}Iv-FE|}F5KWBh;s_ldStQ!BU}e!!T|U`=XdMPCRrcdz{T+Y1a&bD@?tueq
z0WBRS9KO7!BCHAt4gnWecps|I%3}j&1+N^jaoOEbktq-L*&0Ru8_YVGatFUUQb`w^
zT7kCZH#U2bhmmtrkSJO1V8Ka!I1qh3+Wnj7FmEMsp>-u4<UDcj_la&Im=T2`jy<=i
zi(LHD@=POZ&Y0LNEe)7ErC#PAEG1A0uXcCEje%zdOp^&m;Ln#Ml7jfpF^@LAVh!;o
zKIeEPIP1f&HQNE#&LB?_CW42FT>8<b><>$y=X(>T0<I%&CGAYlI}Nq!^_12FtUdt0
zc&pZ1drhHCw8tf*4m0u+*5YszU9^E+J?cSon;yx!+^SG^to;Iho&VLtUppc^?3$q6
zTFmq9fuD9e+9--3_73;Q<@Z+t0bciy1fQ<>O&XWhU;8{GeK=FVhgDN%3AH*IhL?P7
zqY2jQfjWG{XB_(B?zNT;5B3*^zV{B=Sm8ttbobYrOwcK>AeSV8Hrq&m2<+k1^HjWv
z{xjC=p|Em_2`HraGJQoZuno?y*@hM#t$p$8dOQipWObfh@JxsfU&Ra847b$HEvtxo
zawBUryf`p*8Xvk^dj^e;Fo!)X1?=dmh}Q`baCjM>E|To?`Ad}cbLxQ-)^96j$9aJM
z@qp>}*Usv8B4fExh)_0K*JcA3i;$d3(YW8#xA?QaH0hcf?c$-Lm!x^a$t=~9p(Drx
zj6E-gJ{GFmCSNoGWzfvZahb!5rl!!#Ku-YZItUP=M1l-aHS@JTC_9M&_CW3GnlEoO
z5Dir*0YlZ6BR`B-^><l_&?=IQF0h!6gI<##aB(-Wei-R*`*J7X`i1}6#x<$)ZsGGi
z@>}2Jw|TdRSu|Num|SQfOeh9B*3YYFMgxMqwJE)!#_MA@X;?!1aG!|BZO0<O(p|p~
z0YN4&`z%l!PKE&e;Ezx#)nZuR>U@1%3SalEGnuB}wb>)o%{ciNFJPQ0D@$083P%gc
zAFN#K5m(eUZo2u2WJsXHe?_c^40F}2_(U2bLC`@Cqb(5+%kIDc$<*_Nr?Gr51Oqo?
z526(DTh|>@NON-8arW*Gy=UEfFU>Fb>VVgWsa7y&VuHIMTLO>f=x3cCu^KrqQ+=|~
z*TDt~KYz!tYf=m(wd|*)%pbbjcN^kg8FST?LpC;zWn#0{jAgWb^VImRGFSt%f!_D}
zJrqhli&hXqxEfS3Z;4+@358vFOH#ru>UE5sO=+p^yuLAcM;!Y9q~|e3OY8r$_iXre
zF?CZyIcLWWGPArZbvohvty!%H0Mi=FZb;XH`gYLXwRbT3T|foJ!^OIe=qfwX(Msbd
zt_MJs&6`v;kq(lj!C$!)?2!*vg}DAPr=8wxe*N{2=^sQ0D9P9(u#1Wjv)Zn$i~Ezt
zuLCc2gzL|8OE0Sr1iyo^*@&LE#CDWvZVz~EPkH)#>VX&T>X#xl$m2p@oU$a>Q(7(f
zBG$toA2sFdBlY^b)tlF_>nPDk7cXKJn=AKVY#tR25>f=8W$PXmEg`>Y|IRI+*488Z
zw>2yH@%ZcT{b;M97&SWrFH;x(5p094yBLG%<rU`oWxyR(#BaUV=vg4fW0(1`PUH~$
zsHVjqcG~5a0xMM?;BXB4p(lAP>(}@-UDu2HG)~>VJ6VI_{04ka`SX^rxK&lsF(B6=
zNS)MdD%&}BiBgB$&{O&)Hz&K&7mcV87bcn8Xb0O{DR^x#*W`RyD0X{fH@_Z&R`ei;
z=<C7nshi)Di=+{l+M-`zkD8{)1`bbZDyzG6<O`z4&)U%he#<d_H4DNJ_~yK*TDbuH
zc>y~yNN$X$4{G|f0)QbOJ8!!96yk;s$k2=QysMEu<6yc6jF}>&V`4j<!(7fJIV>jZ
zl4uZ4jTVSB)2rM{FcpNCW6vfio5|=gG7x)t?YH_azk<FPTuSzOU%mY-5ThNmiZJ&E
z$*EpVYyjzxJU!Yz^fAp(Ujt8a$fz>}jHEaE3Nn|VCq6noHTnTupO?4=GmX-eaVn>^
zPYX)-*VLKRvzi&=o~hQir{Tj7-z|K0=5w{nArAA>d62jyT-I|u+FLTs167cxzD2F;
z+c)8+L(de^fM3gMNM4vdqjI5*<Bh^5`$0?vh9P_MBbVmN9AN@uCu6N(mI&1UsLz=6
zoY~%EjrZ9nzYgj>A{yYR>7)l>lTynw-=!zz5pu=X`g52s=PWPD5a{E$^w{KeZ2`Xw
zE~`yC@TXMLDnhSPJhgYaEaK~Vq6!S%O|Gr!x7#vkeAH)+K{dwbHC<85qI&EY1FQij
zlvq){W&u+o0Fd_dit!_$RyC;iF>&8`Igu`C?D3Pq&{XR=JGs9I)H9}u4ua9M58paX
zid6xU<ygy(=P4$7XR^EfR<+${4zo(qJqgb)qG@n(@a0H+JkM`~IToiYdv3e<qpp)H
z_Jckn^{7IoI8_he1|=8*z3&lkARuBBw{g<_n&A_&X0;8ITyJBv4~Z{;H$c!R+%RHW
zsDqSZKzm`h*n95&yqN>|a)06oGSPYA;4`JM`R$I6hi9NCf3R#qlqxp0yuci9Mbx9$
zAfSYyz@mz+74rIOS*yXV$0e?`Ojl#!?!Cp%OUW?C@;ieLa#`Cd(X4jUeIG;H)3Fwg
z6)E{=({rFr{5C48Xi%dDHN^5ncWA8*TEKzZj@u}gE2>ft28zJ>eSx1N-Fnb8&z;d}
zqxHSf;#n*{YD@h0kL>2Rq9@>Mc=q|qj$G9PC?sU9h+kX7(S~82okQ**K8Gjug%Jh1
ziFd6|UK@r}jAj&r^HBWDKZhoPhxIAoP=WzBitauw{$5el#Kr}j?-ivHF!lXvx+cXD
zat3k+(J87ZM9k&q_ok1M?24FNfh~DiSaWc9wO`5>_EN`Mvd~HqYR~|GInp|x)bPBf
z+X-2MQ9go3iHD=(Tn8Pln=11XXR?%qE!39-u)YN+iWv^?Mt&d+CTF@Q945i1>zID~
z`O2S<B?2SB=^#Wnw2hWtBHTVOZldQ)W+D;M@XvQ1gw{+`Fj9vezk0lnm%UNWTIn=n
ztRtBysO7yWNfcJ6S39rQRHI=z!dlEdQ3pCf#*G~alLT$UgV>xLtDWO^<){WFHK^Kn
z95b#-vfie4vex>KE!>1Ru%ZyC5zw$!<GLbfZqU!oIk^3I_-U?F;CJgV&v#Ece8Br3
zn&TVHvp}#~p}d3(^FG_{0w5UeUbFuWvo!}7L;*)0eUss@0w7GfuL>>q@2iMhk`5cL
z8YK-N@ohLY_**$p(#y3u99(!E-O!T9IyCE=m2qMF1mwUNRAV-4+dnC8r@;~4ONg%Q
zHpNT%Fd4UftVMYTJ?v#EU^GqdIN7r8pXRy+blQMvjJ>W|bsv`QPVB|G#%n)q=Dj7@
zj1ftFMdZ7^nJ=85s4VHd<f+=SyITvC<h12Izl^I8XxKXT_At__zQ10h=qi%8ME-iA
zli}g#a`<O^)M<|jRXAr#InDTtUMi!C*PE+Rr|;t@6g4f=Xm0Zr8xT^?@s1t9$S#VW
zd4KkOEwVScoQax0ouEu4{jz)%azt8oW9htzfjWSQQZej3LYUiTIUs|_N;DXsw78oP
zYTmNZfI)&~wKQl|%kxwBwnD9~5N6$O@=WiD1CG|RY4zKW@~mb6hFimGA}0f?XzQw<
z5y<B1Cc5~eVsjU&Ci!nTTg&{(-&#S<P`pt9oNK@65xy9ZA?5LzgGemiF&@&6*ExnV
zuPii)f<M{O?jc3Mxy$o8yW7>(ClvYU8G(8yg_pb~TMZX(w1Je<WXwm|mZL9KMdVr@
zgu@MbZX3FdgdG>-Y~R1JRw3h^Uw8H<bmdHC^8!=Aug!b!XKRV1ncngQ{XBJdrn)(A
zy*K6W8@T1swAZKEofJlHW4(1L)68oJyR!Q0;U&g(V=k1L)Sq5NJ)2&>06bL(G(XiP
z9WGdO+h0QB54iU8t@-Fz;=if1d|WvPg~iBOZKiGvzd&V{W8a<m4{W2Ym);on9DeUL
z`aph4r60j2v$i+tR}m(s&%F)j?7Zwq0nR%O!)p=dmAXVq`~51z`J^K&ma^7`$~QZ$
zdn8Kq?j-8BYmgv&vP`R&b#b&Vb!}eGFz6&gqVg~9BVTyXOTpFzH<Ke`8nPD7`Q(o>
z0mPPlU1z5`B#RI*jB<nY5yXkP%Wt4lXL=VvbL4fW-wFy7wyq)uE?XO2S^6lkSmt=L
z>fs*W*o#8?i<U+Lp-XQo89rL?v0-PWMIrNrL*`^Xeq}ek&u74E8*#fuev5l9*86@W
zc~MI2)9K<8`1HE{=KW1cvPI&g1eG&T$zOgWFY*?-#MX9z!qegF?{69@%`vOv?bf~U
z{)gq~J<L<u`rrd=AEJ8%e7X-{Gza_(_YShI&8H!2s%!b5%Cs=?;(D7OAI|x@(`rrr
zkEpYXiUY{HH7>y+IKd$VcX#&$hXi+bcMb0D?(V@MxI2wQaJR<wHq6ZZUs#J5R#R17
zb!4A!Kg-NBRfmG(YRVV@hJ`9O>Q0=(!I1qW4c39TEK8p}>$IVyti49RGiXLbwVvEA
zZ(>GGlSb`|H%w-?Fs2p`M(gY$r<r!a{>rl~4R{5=$37i4-q+XGNk$m|JNZnJymJ^e
zj#)&XsXig3DFPd$86F;J*`poqfo2$`RhJRdoV~$Fpavyx<s{RHG>vT1^3s17ryl6%
zhAH5|SFK3WAh|>Ega|TeXU*{XEk9oCiP1K!Li_JWEis?zfch;#F2i8iq7(naHH*xb
z@BdEFG5O3|9XoIJ<2eSrJ2_B}($<dIE8J<dd1~pJ!eCz%vGjt7BVemIQ~4oldgC81
zA9@9z`6Y?|^gdVC0M<d&xB59=XAk;ooWzPKRZ~|1Th||YWNP+{N0H=)*QG=ulm?F(
z<YsZ4RysevRw--MJ`8XhLxhN-a~Y-SQRTuBHZ@Dqgt@L!3J(>%i{0sR7geN`YT`~9
zlm7i6V3o^94)|gi;__Ad*x6YhC59O2SQ@(|yA&ex_o=O|t#%p*2BG6vg$m7&d?7-R
zF}5d0gH3yOKNm}mUX_@){jm78ifok33#Pk{;}K4}!CBZIvW?2M8F^7q+XAKDDudUp
z0b+>v#7^gicX7-|Gx%aiJVrRJA}cb|brK8Z?sx+=z{TmNyQjj3VbS=YGRIUPzA`fe
z(@I;Dd5SUunkyNJR9Mo(yBCtCCQ8UxJ`D@f!UFr{)&cTNPPbZx>#5~8GWru=`$*@>
z{!iW$X-YG3+Na;^$ba^9ZO9iy7H^F#;|f}8q5UBtrVXC-y1G>Ps^Op*94re25CT)N
zfv>bc+_+N>v4|S4=%~0vAN&ahj#KTZVcuKn<u5yIZGcIDw!18yK0{YDgm?5b&P$eu
zK*a`|eWt+mu49FQUY#uTZrS3gx)Cpu9?p|2LdA{5IY7%UJ+3p)RqLmzXzpK)Sds*@
zD}#0-XtYp_5Jo+urhwP4YW~+`FMRC-ywbV_f3#(Tu&4ouv(X^n#KQ+NV#xkC>uH>t
zmu(ZcoBKG*sK~g3O(I5WCrZop96&$t?q?%fxuCI3=vFX>9~r_|FB=$PG1+gzvMiEz
zMi;p%6j?^ahHiwcNSVnU)5&|i3r!?zF`W(P-4{W76L;+vRd>##p&~=_0<!G8#;#ra
zLhg~9X@S0A_;It7UJ{UNGgDaOxq}d^*pJ*X#vr!4DYV#wY}8UHaXHccXW;tn?YuvO
zlF+P?ztsMO&BDI>r$yR-*--Vm)nuUP_9<o_gz#}awV|1r^JV}{3E2#4b3V;Xhq8ye
zPA%@{nEX}WATfL9pZ`885BozU^b;;z(M<RHt+AO97KkvHx-pq+lz7hK>9e)bJ~>rC
znHjaw=&$KeUPIrd#Ti|G?XG^SKH~DA;1B~i3DTdoi`Ql?XIwCRe$NFz3(8Mc**vS}
zw?Zsv+4C|Ydmn^%Ih+1HqTW7C=CC~RV#?ndlrQe!Q99`^bxJ(1+YX2akW<EB#~DD|
zt#<+l^GFb|wd3g7q*xN{QA1gV9Mrx#l)=U6TrOGvDv1+2J+8W@Zc$&Of?J||Zyh2@
zV%T{tBT|(~orV|rscZjE2tmdRZj|ee(2WIAy{`;&a@I54V*Ki&=E(U<bV(sGt0_uS
znnSqi`fSnEd}8Kn`A`emebC|>kyof_d^e5JIKmjT1*>;D^sTVyxttG|)i(&p<B%5F
zowdGN+P>vX^j<Eq<X?|>vpoy}2<N+zm`nbhZY;xsP`AF8=1?jXIi~4<)@@&=X0?I_
zQi*E;r;SgM+x27i>>ZE!{mUtm+xo-igIt2P$G2pkVUaOvW0pa0AnK6Gg(e~uJ%hQV
z@m*`^^dd?rXF5Qc+e<>LS($O^_SttTrgO5Buz&h?b=U<GA{TqBeFAg^a^}<t@r&4x
zS6+FL&t`FYGh(8b>sD797Q0>yDop_Nt`{`0JjS;;iTc>uuwy)ZCvWPySd`|!G<{tb
z%4CVazWkmxnXj)@26y=@k|_xD30dFkZ{4=p%Hr$&Z;C_B2vd6l5FcObb-#=nQOdm`
zQzAU5dC{25q>?rdQcP_NZ(2&2Mqc;`o|(kkG17F)US&jiQn5|I7-C;~qzHs!r?>Q%
zA7YP54@S|pcK1j0sdM;dnkGpjB7D|@mIkxabQes|;qKu4Qx&fc#l)sep&_+}sDAq>
zQe6=SyOWM%*EN84xOa&jj@aOHPng(S)wo=*)vP4(R;bk`XLP*;Rl?%$q3HeJ-7CK{
zP@q01RUWlWE#kj`>iDIngWP8iQ?PSo5VJ4dO;<JGaru9cEx{BXrz8W8=HNUR16wix
zEFQ0j8gJJ|{N*OMwN*|ABO8SNsaEtI^r;iUJs(e#Cu|7nA2=FRLMNYmEc|w@1lbzd
zoMtOm?`HVAbx>;(F)FzNXo+=+9Bw2a@}2KxOcxZD(bb<j6D6IZIK(V6{jKBstNMbZ
zb>sPEz+~PU*j{vH_7be-Mv=X1G#IV4F{#+!a$<kWd?v&;)eFk+uhtp^*%ql!c9-j$
zQp=TTV)KR0-tyIBgQBUui3!yocDXfX%m{R8{gm_}_`|<s9xhGqI#IS&@T+D2q5j6I
zyfye-AbrTCZ-6-*MKhNNYS59rH|Sut(<SDk+uIFTsKk?FHc$$e)U{LS>$TO~s>?K-
z3j0)ExE+$wE+4O@z@=uTrD(Dy36s$Q%7o>kcjMgf8osNnB#W(<K&kY^sNbm&&oR42
zrz|Z}N4%R{UZcOf#nbt8B>TMK)ZebY#gK$rCCUyb<zG){3r}E7Kr(;c_v;?9I(Id(
zd|b+k?mdZ(!z-uvA^hPrmj!EyUl)Z9nr>LifvtUg@i#tjeyKb8W@CrHDv0Vx$jQE_
ztv<83iR&*~x1nFo5-oPD5tLu&*;Ctp!&l98c8S>u%Yo~G#COrcFqY|jgvU))!Dx1h
zQ(Obcs}$6PwVZu$18_xclTkkChFMg3d#O|gStvy%tLtf;xOtiO)UJ-YB~GF~lD_A$
z4Cw~C&8I8~-qF5m&9%~h5Wr7zd|$M)AV`_KMTnT46~om*n|PaIHqF*Hw(n5AIC+(K
z47sm=gj2zd+<y~ovHW_wt+~~RzkXlT0{k^?TrI1ixnyx3TRr|(RkOd>N1{R#E0Ti-
z&r1I<yaufwVb*h%ofz=sgAD`mdy*+!+p4WsaP^=y^FB*<d%nzr>t9|bJ!>uMZ_@wH
z^7bejt7cY1Md%Im=285q2*T--CHvhc6iU02c!cs55<{m`zN{i@b!aseUENEIMrkIe
z2$6SW!!%uNL#~eePiO-EjS3#u)}FLAqZKM_^{^a1GcQ^R9s<;+@nt^OfxnN0QKiGa
z$423kpYMe71%9=NV0Tkf4-&7qAVlQ$rHdBts9z<0cT3i%nnjqB(z4>!7_xe_ry#*@
zk>JnIHQG0SjEkyZEfFk3cX$^KkVudx_s4yf7bDa?;*9{&5woQ?=dk!SwLJ&r@{uNd
zE5J0ox~Oby_>|0XXI6HR&x_slR=z9rklFJu-r`m^m^5i14thA8>|*jap($^oO7m(%
z$oXhqP^@Zl!WJmFrCpsXwrDV8%skrCyy7po(QehUzphi_T^~i{$2P-jo4N8SuXge?
z2(rEYbW2N_`$-83hJXPdZon=fr}f!7GPaXOplbi-E_qBhd2*`#{L8O#+n~~^o~ET7
z`UQd8hd~QC&G1dzUMCyQI^VO(mVZ31-IhuSw-OVFdAf~8i3X(Ey@pPXwjG3)jXio=
z^`lc!L`;<Uzla9Ff#}?-xWQZ8y;rs;r~3yFEN|j886<(SneissH1MM3x?Rm#o{y!|
zX11rp_O)F~0F{;QSH`ru_+H|Tr#lK5)bls3wO{!tLg#P&N9M9Q2azdp`mm*6C5yd8
zWqhLAA339cxVwCAJJ&Z-xiEgAa7H_lMx_Sn%aPvmjU-f9f=eOOx^G7?I%eokB7_k!
zdW~_;j9ZO?n2>m^Jjro$a~JKC`a#hnWyqTLjb<mi|NMtvZ6_8AhuTXeLJ%btZ$jwz
zNq2qTilhG&XFYVS`aCea^`9oIbsVXjAqhOVtfqS(`8ci&84O&RP%m;rTQgF?Mc|9U
z{~+cJ5X83TwG&BwL}(W;r_1vB7lb1kgD<V_Nsu_nZ!K(-y++F)Qx9dAAHIp!bfa!5
z@6NwmC&{=!v#1R0JlezbBWt<r+h}5XR&aR7AFWik<wZBJp0wY9EF@kaPanF+>#b0u
z1gqMEAF8{~S|RV&BtR%GFEPVbP@AG{&MhVf>2(<x@=%L%F*NAGG<4V3?D)zqV&8SV
z!7$BjjI|Sx5;CUbyASklGd**E;#t?oR9iHX>aOLhzHe`e+@QFp#3WWYNRuPWR$)!U
z(t{sFTtD)-DQi~2ykGalq2LRc61)}mo!s57Ki=#oC=lI5$PS9Hx9a83+weVM`17xI
zzHWlVP->4kDcZPYQNk1DqmOtzu;|iT2ACo(_$wXwRnx#V>KJK*f@5zt(h7ke@=B{-
zz6(FRrYjOoR$j~C-rN1^u*2wT8yIa4iRMMbBn8iz)V!~)X`eaCQ_VRs`f9v18S}yy
z`_g+CfC+DHF@ZLbdd-9;WVL<|w!tIemSrbv$BPz$Jq@>AbiESiEplpu;48O8{Z|u@
zg)iSr$yOFCvsy(U7@@i6*_&{It!>UZ<rs1!{XTd@U-@SSj}N_f@ks4}T}oX~+-^wC
zbQI_h;CJ7Jo_hIjhXZLhe%)6z4(_CT$P!B*w`qD16^a%lZ?Oezyy-j)G4!AFwZGBS
zPqx4@atd(Xf{G|$0WaxzU9oHfAvo03%Kv`P_3`pM9=>*tj!zVlxXJD{0EI3NoHYf)
zxg6yXMYf>ilcsTN`x3<vw}|z;^>+&ngx+nVAl}uX2t~0EDM$+`d`ZhXExJY1{Vh#G
zDPh$0e!m}WxRsV-DOm%cvU#~Eo_b{_qg%m$4#|xcz=oE?&}eC9J7AmK_A5<#u6P~a
zy?%H3At?GVVDnb>R4(A&f3l%tw-Pu$BPwV<FZ**0IF&qW0OGX@K7epp)G!j{HIIwi
zCK4=Pr)8izaHHaW+5awPwN6Yw!-CRBy>3c9$!Q$r3Nx+*cDn_AZG*xt)Z54T<7OQo
z*OW_jds>r*EaRY{$>PC<lJd4|83b+H5vk<>=cxNydLxhmnOt7w(?vXFP+p3q(Ycw{
z?<RJk<W4GU6hcbOGrx#cJ$i#O5S4!7P_epb@C)2iVDmBVrr<nlpWYOvi=f_!AED&a
zvP_LmAS?0HpQ<63UT@INsBS0XjnaK1u8X&lRQd_ha+I5+c(CaokEr+CKot{|4bz%-
zz;LB&^frtF6v3QJFV3j<Z({VW7b}}D&-_IX0=tCo7^-Dmb5GxML`@zEt=)igV@sff
z$sn+w*BY-JtDj%w8RvL~6@{w^hh><FD`N5=@5R%dev=VTg@rTj@-bw@3)Xh?&cN{o
zWAk?mev~KNV14gWL~T~<<x!g;I1AmQW{7Mea=4*=tM$g<$(2?Oh&V1NGD1gv|4a;g
z3S?h1=T^=8X*1q#)etBE_Gm@Q>Nogg{uQSukn7@sPaU7w8QE6EZ&Ll>5ImJ$CytQF
z#T0Q11dxHNr}MfKfbWh=c<8s1GD148g1bY)H&~;hmgl)gXX)R8bTB=F6!W$vG{xU&
z*dT*8%Wi@db@OH|dh6<J*FL*d9=9KpG&mZ02|RnfRkkhOt4;Fnzi#RXoFk_Jw4FvW
zIcv53PG9`9FgKn$Ht+)w;hL)O{s_ccVZ09Lyjh&hS9?1>)3k%UTpa~&n_r8<NI{OJ
z07SOcl7Ag->vvtP*$=@sp|cCFYgK@>iUlUd>c!%*6>m@ES}(OsZnmTIXaH(Mck4v9
z!2avb_gCd+Odtuya~4V@tiEB#5PRQt+v}x({V0o#PO<><rfZdX%8`SeOp}rz*6xGD
z{+dhI(^~sWa{r6R{@aznB*drQoF`1KZ8X4}*7=i!U3!wy5|C_DUFPDT>lJWb<wyv&
z5Re1cgsl^Q`rO=gYIXT6`$a|;81J*+wXyxE#-l@b3rx5*u)7g5=gtsltABZ!UAkQc
zx}UNE`h1^34?(0uvO#qEONBme^Qxm#<K%sXf%}u24wi?Pw)<i2pEb@RXN_?Fa;4Gd
z*d=GoqRD>d>>!=zpzP=k1rP8Q`a#88G~Bk+t0MmD@{>3F{XBlG)4R%!-vd#Db$}_}
z8srD>{(WW@-ORFzjb$qhM?MrEjwFL;ce6{TS&!6X%?Se!OS{e$1L_U3yD|Tr=5<e{
z4Eav7m1D=$b9q{sP8QoJJJ7QI=a75;zQ|;{!TrlV@Tm=Y8xm?|uv4OgCQ<DE&I`di
zUX^EmJG<?kOI&3@_MZP~M&rc_EammQ<1+HBbLnnC`w6yiQj(i;-+0iV5y<w&vR;>L
zfz_2s%Drq+&v!feyw1Swb9&=<u5doXbx-8I^>yoxWj&bc@>dtI%?|Hb`*o<?$F+ul
z2ifbeF!?%Vd2;KXlXbjn%w;>$<K%n5u>$qx>t7w$LT`rG`xEZ^mHLfIe2wp~7vHs`
zd}cem?Ho~yL#WI*Uj=x+o8lFe;nH)k-7N!q2aw9@P~8%?;mt>_R;fLeV)JOqPw5AW
zSti9$bH8wqtoXf6EG2(4L$AC1{9WePDU-1uTM0y|4F6F?=%(zeIEeGSLEAPOIU0dv
z(kNH5S%Wlj(HyPu#pye$hS|oQk%0RW|Gu`%73^yNK-bfq&w=+1Mm9g{6V1O5Sz_>+
zyUw%B5Y9B#_N7gWMCT*E#lF<{cVTdyTn;+K?GG>&GKu-GzhgQsPFZ|DzlFUdD%*1E
zppz@SDConsxR}b<$qEINMoE6o4MEQhAs9IN_2lG;o=in5nfduB;y$(*=wv6+s0p}6
zoi<YkO=3`re6WY|R0FxXMtbl3E5R$h=gXyJ=uACDs5xggw2x$!SK(TEa3B38VS-~-
z%gkdARt`s=nh4lUgIQdrqu8}ydIfg853$ee-prj19Dnc$g4DtrQ9kgvBD4VuwImGh
zy5S*8;srZ^rq|71bG(&a>*_>~K!R@rGu--gwO&;ELBK*>_jW+?onnyW8h3$n$&@#V
zcm--LG`IAEVAwrVYc8oRYx)K)pmUFHDP9HibbT27LCoCu00i#k_IlODB>Uiq47Q{^
z5%@SAm1DDc)HrYuygrM%AEJ<AX^?Pm0}uIX`>99oiojcE%TTi`YnPq0B61WVBS+y|
zQ2PebimNm&zPrCmuw$HH#s~DQf?&3@AFjWCjhCLtqI==3S`OGHCy|ho_WoQ>ZINuX
z1zRg1$=a`YNyg5A!Yow<W>!Y4h$!+Hduv`#7dhR}{0m5V+HM9e7H&pcLrV>4m?tCA
zoU?-yZVLSn6PA`mH(5F~z_;Rli$I1IzFHhZNJy66h~oVr)tOb;B|&3<tubV4hgVOK
zoSdCr>#~f<r`(yNHCRm}Ob=D+c3%7+Irb91X#+B`?Yo>t9N$~uVU9(C3T;X@BSuaH
zgb#5PKv8TI*V#C4OE^jCL$%5H(?6c)QYa$%v+7-k--By%cEXzbeTK;GNLB~^9JUA9
z<}rvIG*9({S(%9iN_XFdhQItSn;f_2iEiz*;NxJ?JGFni!IolD2SS~f3yD=jejzG8
zE_W)jS7^5iitS`L7Hk@_u3-Eog=@8BMnH8l*708eP=!EA0Uz)$0!!@nA(em5AZ(oM
z)CoSX&t8yeJjIlIf+h8|zd5SOL8LB-06Y`fIRL%Yu3vr{2N|g9xpP-w6P(;hGGoZc
zpKvc$eftZq%hri+qy{!5Taq;KhHZQ{)8!v&;|`_aFI|vKzsY}7w)x7kM}zq@7Q1LN
zxa3nSJu!;9FrOTnYDN_6j+2IdGJe*mM_OZU|JSCU<U7vf9cQXPh49on&ced0;ko}K
zbvI;jyO7bbL-Bf`i9gRy2_<y#xp=YklxN2>^G7aF3ubX%JVbiRl1<;R)ektWM^bJ2
zdlaBiRBg_}9nXkMgs))K5c@#zR9@@$8<=DTnhT};5WR*m6pfA#_C9wKB^fiK4p0mB
zWndImcvb(Dsep^!U;Mq6;q@;}r}!Ey7Us0{`;axk=E>d>>eu5Ti_dMeYq#wYfXssb
z&BZSf`~bfKDVhK5PiENdPh>||f9X1@qjLXoPn<r{oc)$xrkMZvJ9&D!{7Ds0>CDB_
z(XxfXbplvwxrivD0=f1-t<rx~wIPOs9q~mOwmnn3DZ9(&u}svX<<Jlykig3aNFbJm
zVW5ui+HQV`CSfG<c_c-5%PT~MU_HTGRfW=R36<Van`gpyA_TABsJuCm5M*ZkRqDq-
z(IzxZVu6GAyX#}J!Ty>T`0OK@C!WmX>T1wI=d8s4OOtCQo$Oy@a|ymAk<`HuaQ7(o
z4{to<w+^8?CRNP0seLktfdr8O_2<AXSdcGz+b4`VXxDOTPPHYaVTYF$R#*&%i4me%
zHt4JrIz(9N{xj->x(;?6;6xem(3GTiHhuUP5))5O%pacG$?8TAo9brL|NA@@B<^oE
zXKNx+U&t>Z<OG2)9Smofo$#CyYmfU=LSh?t{aEF78_q_%6Cq^gdPe=o9FmU&;o0x{
zTaWkYaI7C?^omQS?u*8pa{|{&g*v$p<%PK|xGnTUh4!iyu#sc4-ION!l7%7H&yx75
z<$@z%V)e}SrRATfs_s1>pV|5q+5R)}0jeu`O;Mu&DD_(B5aw2g09Yzw<fSK-vIP0S
zfdrmO8o4={MsZW5dU13?EBm7Irr~Hf0+l*bU2^{zt9KyNFCjGC0)mFqw_NwYdVwoS
zvEInHdssJtq_hQ!Tq7-w`^CeNR;@VhvWiGeTvF|9HZxoBU$no>s442QQnCLxcmf*A
zJAZg0<qWjcIh9^7pyb*!c_b`4cky7+O68wm!H{UpR7){pT~K|<z9yf404Ax>W2<JE
z-R2^(DGNuS>4Anw|BKn#rXBAaLus_JtS+<vj>e&hMh_!1!Jl3m$aeQ|VN8g-eV{AR
z)Za3)&7xZDTHK_;9b#8hEji0et{VB{>Hm0P;grLQ7&uz??zZ|WyV8h4zhWO1k<jhW
zCp#-imtGva6#JRlIVMyo4wcwRL#XvxXfiX`$er0$sM91zjzD(BFz-1Iv=A&-+#0dK
zPLsX<$^I`-rg@3k`2g%#O3x}Vv=tg2oQtY6GR1WUh+spP&6_Hq5&u*&BHG58Du?BW
z{Qu5M3|lul>YbP}+{3E?n<Rs{+A{IlQXG;_IJw<Su9BEk_n0-tGWVJ|x@@B)W_rvn
zTOxTYzEfi8|JhMODE*sO_8Y@S5#EhnS~i{^{XS39VaED<Ka-U`07;eJ3iQN`tggwM
zQ1fS)vWq21<ztg|heVgOe@FY@{=jMA+vEPWfeQKjm1?r_(#^J?{+B4+ex;U}yAFP_
z3$=5fnE}d7+%p%YLc%L?RUewAe^KerRCM8^hi{<p;jsNLnsAfvb3QMLt86$i1;StX
z<3`y=S|Z43)F+1&X2pG39aP+bgl3BRe0n0fG6@E`nNwy++NQc3vSY`rs`UST4iFSH
z{bm9V#n$H_J?s;H`48-{i4aU}X!LY)-1ZRi!t>xr4O7~`+{()5jrgD`@G*}Hco4oV
zGWf$!yD^4Ib>N#)WA(5@`tH;xN@m7bMJ1DZk}>t(pPEbH!FN^ens>z0i79UWuQW@<
z3IE3-X%w<7f6}Z3_r!2O1;DeUhkag9$lGyBI&^^keM>aXCuM|d*4k=Q;?#mu4ps|{
zns%E^1DyiI_fvr62Id#6gh^xo5zH`;sgy_>SL@dkdV2G(;VOSo@8QH^-t0Uo=k})(
zCN*in;sWW<AblE%|Ls0%9pTQin7Vdv2RO*pQfrlLIW^2zuOG3o8`)?YRi%P>i$_4c
zD>_%MdQ{3sraz>e5lg`|UTF4qB~Y$j2=t%7V-r?<?{$_5@#&+*(iA6#WrHch|86;?
z!q#!?4+Lps-CN&2c$v8`+%?fQ(#%R@I9<M-c*c{EdI?+!791-}{_hS2At+<c-aG)f
zGUW+li-S*Ym_+`VREnI6`bcJJs~aMgb-Q*+^or-v&uVICtS}@iTR=w@VI#)|(@c8V
znO*g`l0LeW2&tigUP92SKwjk&9A!I#Tq*dgsi`diQHo0-Kgd$5QoMxm_2c|;6>J2B
zC*6evSUUMHbu)EOOWm-u20seW<))BAQ2tu$h@#q*iA$R}{{NMVxydQZuoVkjJnR$a
zIq=};5SJLsId_SN+tND3Poo?gO$_>NY8PboG}U=%PGd#(JL0SNLbb~LS1W?Prw8}~
z&|3L_oDwOil%p3WGb^@fu#PNBB+0lH6+EbrlxbLwpY&z(gq@Z$F<nKiWJ~%^%bH^g
zZkt{eU-{4KYW{bh2F5fBf@I&7QU@<SN5_YAOC+~|q1vDZuy0_OrT%@G>E-%<Dp>1M
z1U>B3E=!+#6OEQeqM7jNrEVK$mjkEGy+NKiAHFWcDZ=nJBhvffFihK|(dYx-*R!nh
zGCw*xr;^z$u*6^E>8c8(QUMWB>y{QHP*Qcj>A0*GXpkn|k-7hOdSaY}w^6))T!LB;
zBF>(0@)h-7cF9xz(daA({eF4PwV|D1-%IetqPVWPCN|}wqYp<Sr>xuY*S@y#?&+b|
zVZOIe!%-1vo@@wbQg|nh2S<gR(DX$T%h`|2JQ_EIqfz&zZ-RLbu6XTgX57BOfz07q
zY2t6Bfvm@eQvd%$un9IGGQ2MEe<ISCN<=4bJGmw1c<5*62_=o>39`~W1BvSO)l|M(
zN!!Gt!n|S`X_W5tMV8{`>xVimP<5_>%rrmdt^M!vZx#NQLHzB8lj%oEuIG?$l6cl>
z&OfGQSJRqUmz0~H5$x}WIh?R8uj<9jmdlo4F8#K=Wsdd#cSe)5p|v-BT%{TrW9u3<
zo_z4ph0|>qJC|e-Us`8+-Hk>NiYIzjR4(-U5Oo2(yLL!=8;TMp8J>Y2tv_gFPHqZ*
z>62(iim9_TA0v%DZW#k%x}N3ZW>`?-HPCkv&7YkVh{`$UfwKduLncZH*0azmR@VN+
zuT*|K$`dfP&XB(hK%Kb&jZyS<sb#dUX7akt{Fl5$&s*E#Hb+|#vpIY0WyVTBE+pL4
zs~DS)QYh7W$YQ<?XIj?TwlX+46VLjIq4sZI>h7KsNNf=rFF8{<H6Ur2Sy<|B8&wO6
z@IQ)c@R!ByXnZ@cZ3*E`!jcoFF+{h#lPT(3k(_Aw(LyPL4)$j3l&N?{b8{9p=!bXz
z@+AEq9@o}*Q|yj5N*6S|(&&-RGw2dQ^v}K*q9@U34-gGk8vH+(a7?}+L1lz|P8Bl!
z8bIPQZ==#Z5m~Fay><h+-c{)62F(Dz9*}>ZdwyEv#$6q`VAaq)AdpcCf#%m=rBu|M
z^t0y#5;WJ;1o?h9!e4D$)?<<04*HC=%{*VM>_Y!4N(({`ArgavZyCuS?GR9`j%L+8
z05%*}tGYw+5RZ&cJLxKpXczu-Pf?<l0fjF-TrOuB9`_bH(b1quoFnx^k&lD75WcuE
zTj=pjrEWU^d-f=LZ3;h~M(r`klqlwkqs?qzUFgR?yp4A9P2uyXc5_clY)EkJoVf$_
z;1<zBf1Yx}Tp}5W@DlKTdkV*=5@X`;o-(2eDZ9YwG5&}ldLos9!W7zZlbT8iCE&?C
zcJXMexYBsWshTZE^;eEk{<7uBI#V88f{Rpp4;u5QrzZC0z22?v8wAaL7XK%HuKT_D
z+7-^O%zyiM(yCuwX^rxy|Bi%PH1Nk3JgNPVW8w2(GZlE+29r<0XjF>KMUyWQv&`Xw
zdX@D9`osqJ18n(l^q=`a4!(;}nK4$xDU`bth|HEirhS+NRUz7P7`a~QED`S>706F&
z%nVR;BA7IEY75`wCXKpDx8dlRtp><y^9mY)|3}eV-YidlLiZW^-dG%5{wuY3AFu0x
z8i5*<$6c<aVx2{6f-P5Ry}348UytHE%F-q6Pg8Fl#?N#c(0wHgQo|sL`_xr(>`MO?
zLSwg7*mv!{c6U?6Gr!`w&NK|(b#gcKOE~n>BBVJkAJG|oY!gTPzjp->Rr(q1?yUQE
z0+mVR{J0|oL*4+aXIal|7Y1vwv0OS&V#5MO$>tR~4+c*HN7YY~R(KC#A&AsUvQ!!*
z&f;z8CN&Hw_5SO1IZIG}kHapQ9F*`WhLKszef{{6yA&(+<rqku8y-GPD$$HFsw{Gb
zu{Cw!c}w6AOItTX3@JA?!mQ94CKREZbZz{i=V=4qLfrj(f4DfynIX$dN~i5;F7a|h
z!D`X~<R{+2`{Z$0YjCz~p-pt^w*YUs4K&fVH8Fmx$ppI<yKg>fYI^c`pW7WY_F*8e
z699RR%j^7d@>xEHd$PA@f77lavkWF!aRc~f$~WP5u->-P+a>^BnKwBN((O6}J5D&d
z?RPTHop3+CZ7cHTwDj^Qf6~wOpLI=4Br=H=ZGLcylivj=Ag0Ds@>I{072=wHQgV#c
z2n-{e`02dA7>sbkYP?+5)0&QfZ&y_Ym0Cs!S|h>_*`nx03XhbM?N99R_w`A_Rd{r}
z)+j0IN5{QzG!LRcn$pTb-hzb@YHRZ$G+7V*EBVtw<&4{7?M{fUU4KT*WJUxob@P4J
z$pdB;WM3QR_s@;E#`|rMpO9z+*n`ry*-HEZTL53bo6As~1qCWXR?hP#{Q^0qFfB&v
zUP5NSCZun@8?%EvMP)rbS1jG$t%)DkU%DRc?%r+Lj@{o4ib19|$96=MySl7@46(qv
zE*}qxpCPkfJTn;1&d)s!6nVStx-Y?8+V|Ja7ScC(xxYaCb?H0@O<mun_|;l9=(-a$
z*ZRIJzUn{Gm50F)Wu5{!fZkemS34(~p7s>rVpV>nFD*vS88re*qkRuvn-1C8p+u7r
zom~gqt+!vjnP2-G{T%EkJBX?RaeQ|TUU^LRkyiYiK4bz#@i$(^&WOv~Z|~Q*TQ{iH
zFX!^QI$FQ$tydEv2I%bIKg-f0;*dW9EOLJ*=%VFMnv8<pzs!HA$Gda8O*O9$a03uF
zJuIZJ6HKawzaZ+T>v$Zo1#AaDeDnRtRT0tBsnLYDwwL61(Ft|H(V)D9zlcU>(ke!f
zYYs5SDfax6+YK32p&&JHSXk>(c5%(@it-7}@I0*e^G_O4lv?$7he!q*2)UAu2tqI~
z!6ea+(<Z4j;mxI~&qKnJgyG9Qm}Rn|sf4xqrOG4{<|W-vSOhrU9939W&lG%<5p5dA
zMw!mSBsS!SLzN+Z1UYbPalQm-&~h;$STF0+L*%_X3nkwBZPLDKr6p(kj}fVX@74$r
z6Y6&>6MKKcZ+LkLCFXU#y>_|2RQfK!$MvNQC$QYuPak|GsJnShoPfq~LdU!hJcQPz
z{k+Qcd5`3&jp&xld+2r1_i^!+m$^-xac$9!%VAHpJ*wi~&tiyPq>3yA$Dw)ux#bTn
z)UFYaC?gnW6{<uHFM$sH`sgE+o6ova;3?rR@wRbN_9{qD!0j^riZQ{qST>-ZVSX_B
zV_j(}DVfT?iw@1>pT4|_R^)z%Pv*i`DwkrcW+khxX!Wv>n9?pLgU`?()Ve`TH9)a`
z@<!}O5m1LEF$8{$KlnWlwXsV2t|{x3F_dZJBVFFLqYMbsyw&bz^{6c2Otet*{7p(P
zgDv5h{X?!R31oRb)GEP?f1tz{=@8B@R6U0P`N2V;u6F)w<>-^Ot*uTi!|L`x50r53
zAO_cWLm6$`-AgYcW)}4YS(zi8^)Io)@fvgtbqdg;&WRBd_N=DcxC3P?TI8FZ6a<N$
zqRna|X6wB=?MN*)KB2ot9S$aWJ+|ySwlsx-`R(dsJI<_KX1S;g5{?e?=lm6kx)jlQ
zZk%?KJ!OCZvL6VbK<(ctJ^1N9w7>ZEqx+xThx?S^{COkmQa?RkyIU^?fB0qm<ad;1
z5Q!6b+UImFiM3KxMdsE8vNLhmKT+4mUDOUCSO3~{lZDc$GpT?M)`?oJ#ryk@NqHpg
zA~x;za=FgAwa3#+nZ<@R%fvLu93@g!<pfq)56lu$^vjYB&EArg`Q*)F%j3h6{SMH*
zfA{OxX591b`yqSV=bA4jpcLyPZi|a`72a<ENQ6Q=atYOqst`Ke{7w`hS5a~g+VWYW
zao(yk5H2bgi)d2pJ^E}Vn|m$mbi-Y4We0go`|kFD@($R-N1Ysd-X<iUB{jhJpO2g_
zM9()gIuKABfD^(`-)|Wi5>8r9a~J>*3nPl`Mzc>WQ@0M{^*}QfMpGbu$9N?5{p46O
z4@w%$aup_8k%mzYQrFwbLh;J^)C2*gPm}?DzUu^4jKX4|>3;yXMP^DjPX%|?w89Pp
zv9viHI)coFrJe+}K#^nFV;8&ri9^#xE7ga+QkhFvi<7<bB2bVysxU+jJy6HU$8I(G
zu*J`p(;sM-t%@yBBM{BDCDkUtsfyx#3Al06v}ihq>Vs*CLY?XYcAOJhLY76<oM5<R
zV`)jCZZGd{x~}qJa6=LB(4t@|+^Y9)3#7~MVUk!N(n9VZzUsUd_S{gc(2n-(8_ky$
zh)HInwVlP+1Bt7{OJGISA%T-B5A72x#<UDe3x&Iq6vL!EeD8Y@6OOIJMh<v#XP76}
z&&jL_jqDGjHYK}WS62w_XquR(lsP-$-1aRzPlQ0OZxVkV!bp&gGfv-mF<N7XBRT%?
zNAr6&(Dq(E7C(p=IGAVlBy7HyCXe-lfx%|B0T@aTh2&$`3PXQZ!X-_lXp!zq2ahX1
zsTA(8MCKg&1afN!|DlW@0nI(RCu{4QQ#T&hT>af>2og#+_L9MGv9}3Q7>3us+e3(&
zszAswd{Jl3Ua8a(x4x&2U8B+z3e{D@*PD>D$lm)$DGO$ZIG8uXQ=85uq`KY7YxF9I
z%PY?Yu<B3cK{e?haw0Wp=RfW=04yY6y*gzi)(tQ{cVh|-t_zI@YFHcC^rvBE47ve2
zuff1MeUyY3f;NR5+V?VP+Px*Js(RR?;XVB^!#?8AAy0i4hfwgH6?cn{)5u+ClZwKM
z-Gp`q_>^ykF-QCbUrVdiewOjrZ~XZ6GR@A*@N3GlE!B82x$l5_Y>?b=`-8^7_!_?+
zhN}dGw;C?d_(8B}iW!VwO&x0)Ze8q9m@V1Ve?-xi2fze%K53&SK!T7f4F=pVAo5Y%
zY7;T1g$MJZU^UW3xG5tFlt0?0JdodIGxZ|r*PR}VAq~%R84lEOp(1$RK>G`tUiY$&
zo_6Y6TDeY_a?o#(k74$a4D)x^lr7>u6dH65JIhZYtd))P=ifDTlr;75+P=eMRPL&e
z77o&f`cw`v4P1`K1ueE)%>Vo==O-OwR3?Rt|1d_+&CeWZ4HPXLZ&YJYGx`se5?vu<
z@msE#&Ds}M<V}0op3)Rl1K3Osd9;aBNB$KPE=<0H>6S5bEizHZ+J6wK5`=A(B#t#N
za_xOTbycKNL23GXHi#cxn{UpHy?li7RKI5YqYnU+in4GvVl0`U(Khm(g-!!6$wP%f
z7+uW1Fs!*VORM-;4rwaj6UU1zZD@yVy8}JrsXuM-;trTHZUb+IjzvJx<YXUMTZB;!
zJD;i`m+37=g4k5^qVBwZfZ^ZK+7$CNZ3IX$f;w;yo^#$4N0Tw8=8D!X)n_oct#gX-
zuJvq-Rc%h7@K2b9t`l!f2PbYy&IyL7>vWKp$n)-yJC;TsorA1Ay<T~fCEKuGoV!ED
zyw#r@I)RRhY&e0*F2>IB(G#AJh?r?pyW@M0zx*oU*0%gcbBBo6emJy?)7$x~b+!S7
zm8S6Pg!YCXOVB7u2!Tw^G?HD7deMVhnj=+AgFH4UWeI*?ok_`WCQ6;9)hlK@T}P7|
zMF2P9HPi}M!z8EcWo6p&9RBpgC1WhHv9hgA=<(&qd(wbp_nK{*%b*ye7-BDrCvv%*
zQ&xW{2{ri66*C?FzE3ePq&?;<gOHN9odgK@i{7j1LQ4jwr`47eJ$3#8nP;mlK<lpV
zqp>g|FuAci#aN~DNeXL*A?7M|k`(V!jbtlHpU<>jgbY$Eo@XId9&OraQCKhk;SRyd
ztPS=KpLPvEOS8e8y}6Vb4nMwjDSOVrr+L-RIuARyjs6usQsVwBU7#qckJGQJPk;{z
z-#=JxUjfP>+22W=bU9QAKkE)NKVjbPcfKCp6^`_NqTmjRy$lBk$#y*dfT3{1Z!a$n
zU(i71cJ}x(cAd-dYxAnkqn^*Gc?Wv3PN@#U^rz>E!=S$I=Xr3@xT~_~mmYgxepn9K
zMcPxg9FIf1J0!vR{@O_|k~4f!VyOK}9DOk)Wir8wZjTf~a67XcWQ)>(2Ds(&Azic{
zuoW2ms$hFEkL%z+K)!QrGY!~p6P6y`FRKqP;cBqZCnHI<l^BcL9{{)=T}dpJ;ZE)_
z;*!^)C=_k6Ktc+VZ^$v{$4~d(O%oG-u+N7P^`b;pwK7C8bC`V=t36>D)J-W_q~l54
z7D+1oUoy%clgpr0J3zItCCv|p?L8Voh4?B?2zCnP&Qd$FYWp{ZNTnf9FB@sKOct%t
znMa^2L_lWe#yBJ%qHJqIVJxhW*-V^PEDTfTvT0)fh{u&bnV}i#rs%dUR4>|CGI7gw
zH_ovGv5*4P3&lkj+%Gx1=X)b-6?)}c-dpHA*r*_7uaJHf3+Ugk_}RmlpBDw%8E&-!
zI%?tKjX{eDGAexPE9C*`N|uu-Cq%cv*lMpeEvMZ?nO_cm7<&Yre+H!yS4<2T0MnQf
zmc5R~O>|$A{v=giG+^J-pw0uLbe5Z<K4Lfmg2UIY=q(sR$d)$-j0al7O({ugi6Lzb
zQg2ba0;Tv*Uu(fOQh)Ee{p_R6P_`!jSJ()2#(TOD0U+$NBBKN5LWr1syk`~OIVQOv
z80aq{I#qR$UBrvk9=pK(?cf?RT$%WOl{MU+5fs{!>vb!lO;V<|OOc(%)K#=DwQxbK
z2D)vS4HZeb|G+<VPw{F5Whh@m;B{KhHTw_#1zs=2Lni;QxZ3WUJZgWCCoH~8t|@+o
zKw>#}!CRoNRSjYK7Y-WYmwUGA>Y_%Zg-W9ZUP5*+4P;W&HFn;v{eW}8;GNG222H3e
zT-j*5y(iZ6Pt{@mP~Qf`nRMtU`?+~|kSXxoUo*>_so~MLx=!oLcC0UV0j62>gLs(I
zqZ#}8b;lnG{gUb<m3RWyj@1c?K&b)dz@<<iQYcHo55XuV!{*Q_PRSA@75Sa9@)D{J
zSrNyA8Wn=v%mLo&N1v(Ju>YY!KYxm_Da0iFtNBF5Kn9mO+9)>%%x@>GhD7JdiK&1y
zv!;(6i-Gp<S_Y$Ikj9T|nW3t@x8LiLx6aCPM9)quM5}{<BbS*X5)M*k$|1Q|-v#$C
z{d#qr;;p~{!!xdI1XTvN2dyQR(1NP&x8I|Q3;9z4GK9*%`^q5ttDeEw>j<F%?d0tz
zT*$%W+QD$7B_U;=?%R<tn8kq=hai+FKG7Hz!CllC>Nq!D9c#DI$+3k?JHE+jYfETw
zaoV<%)@byTS<-(ne5z0ud`6SKyx{OpZ3jPVWxt55@On?1z#k_#G$!-YC?OrezhAuc
z=38_gop0wZ=}&Kt(G31#4I@X=lhK?(cjl)5#xzUu$d&D)+FO6F){Leu_i+jT?vp7%
zYojg4v3O^7vVRcj1(`_;+LfLeB<dMp7V9Pz_so3uj2Ka&BYCZg1E6%S5!?u+&r!|z
zDY4YG=v_{qmJIIQ_eM~Mci`v|Me*reC=A8O527~<q4;cko_>8T?%L)%pE*2t-O!5n
zQw$+O@nnbgLmTR<J^X5aG@=O2h?UZROtfY|>|EWD_(iv@IQZoI32t0D1~F@d9*xx*
z$YZqi1WR4#U&^QV?(td8AEPF@pI<KKW)XrA!`FzQ9*g(Hz;ptAXIbpz{I65gpl~ua
zcsA}F;`ed4f>~{|0m*y90YJ{C@kNQne7@Av*^7rd72d(f5;lquy_Q?<6n$JKXh3OL
zQa$i`DiDtJxbOD6RyGjza%Z9W*^!t1qlQ6l;O_i+^ki;>Z087pl|Ok$vJadbw*DFk
ziDGG{MRT5HVMPRiI+V^d-+?2-Enz%vuf%$eu9uWgx%{EO17trlT?6~B1YpHxAWSyM
z8|=o$Xb`x#s+)-CWp7lIj5&(>A%~s3a!$!qKm$p{wAi4k?rlQpb#hzfB84Lq;8+Vu
z2brxIOG;5m;26W_yJ>l(7Yk7f(Du4n?ZkjP$P)-L+$B2*&AG-*&W=E8(=!VygVP|y
z%ieg4eS#SkMg2kw4^ag-miGvfz^&(ux^k*T6T3cbL4Ou1=xKpEE*3>XlR0Tn>R_!o
z2RVD{a;j*0uJYaXVO*-q#5=HNH}}{QZ1<im`C7G}emPf012w_5yObwm4K6cY^*_^t
zi6Un>EM?!~eH1k2>qxqJ-~QrO7R4MNP-71K2B2BCFMumc3SFC5ztl5ye6IYr<KErq
zVS<H72TCN?EVJVo0}V{?o*uBZLk6KnyKl((+y-g@#IJfD7X;b(E#8dd)jJNDlR#Nn
z|FyMBjt-4#zBYMZH?>nfgFF0{cFQjOj~KsFg0{$>)VP=_*psL${OK*z(kKyw>`A*n
zQom6P3NBQxfS;6Pf@XX&lU?p^t0WV@plxPvmD7NV5{q=Uu?n{m`reZR38b}oN2gf{
z!GIx*@Qm*CQtEMMw(q3v>C%^sCnCd*U7O(xk6nOiSxUmVTNx&$6$EK2kS3|E8@d?E
z&}~?f-JsM-=+cn;8ABCelVFm@$wh4*8d#^WMS(H)MaPrL<)EdA*{Yu;|9H9ZHG4(+
z;pO*$w%GAQGQdGkJHQrArkk{lnsy(g^&IhXZ0ce#_Q<b2@qv2W;71VLa0mYT#TSaX
z0NIkuGXdRXhl{G|a}nNk=Iu>+M7x}QH_;buAz|5f_OJ;Ha+r?-0H(LM0cd^E0p@UB
zI%lru9$QU<-RZ5jyUSlzj6DZz#|i`{K->*qrte_jsI_OF8(Ma5!~Ca~SsT`)yJxu!
zuRqx`8xPQL9Znm)G%Tw>K=m=<_}OP~Ug)%n!bOKPc-ydEcEOSw(U%=Fwgk1{HhmaR
zS&LR4r<lto5@D^$rKeZ_q&54N1KUCieq<J&{d#Bjo$BptxvV*4gT`{$d*CqkcEu>N
z<Y9>9iUMpr*_A|?bt)%QDUH?>5?gr>;Pv}=GgOOQtz5G_qV8v0L?8W2&WnK5X?;>A
zqc6GVe9L>?hAa=`)vvRuV3)!p>OSXf$!V}X8X?ed8QW>k@d6LC_uT#^KHJrAY%a%g
z94+sf#Wef|@fh`_%NZGlmUHjBwpL5S;f*^4foeaMQf01b+H;U{va!<z^<6p{aooqR
zn+lSed+XaT6S>`>3?6RZPTX!w7_Ts+Sn~L9+<Tny(hf>@K|z(it>bUt+_|lHf<kMh
zLAh@4k=HHFOi&0tBR9}>?$O2Z37<3i^i`Lud8`Wj1SN^j=4nq$;$7=_2I4*WoUsq{
zPYAqvQ}$``r=QLJ9f2YUzQx%FlBk-X)~{bH*~|f5UsoSoPnRuxrrF;XHy+aijs^FE
z86CH80R1}PrB|+}Cqz|^SnUj3GdlMO)e)n8{CPH!S^|VC7T=q2H#PqOe_IVWN0I;@
z<{HTdk7i_|TU<J~zc@^Cy}uws{e3?7vkuFKyut7dGrju}(k+1R9YQmXuC#W+hShYD
zBU)+BCK6&1*87+$Stb>T!%T45bWJj1Aw<jShw*ko`O3NXN400DB!=6U8(dG!z%o$7
zDQ;D_o*0HdB>+$-svu4sAA~hrU0>}U!AWLcQWGoA(vp(@$Mtrr4HuSb_>;_O?c)y^
z>LvTpQgy|qC#SDI-Dq{6^bMd<UA2-45dtePOdT2KrAy+tEIpXtzxN<(ZO^9%ff)}^
zJ3GmOuHk_ZvwTOp)C2pm?(oV)Rdd(IxjO%l+t0(3G*1;(_>o2>Aqv_!mR+D3uc9mr
zkUtx{&{snmIAhCAi5KcY89td()2tF@U&N&BzUY+Ue^<VOqinLhED6=OPAG8&7Oq~3
zHox#TUF)e!>88tK7pWp4QR=v7d_6PqWdCdAFw}(l$Y@4W7=^M05qnwzGmnD~8xtsL
zqeZ5vBBclw|ARx8sG=21V4x3iMRJYZD0x2-6+}e)0FcrtBda)7N0$Pw@ZDt5uHA4F
z-1owwG8XlqQ4V>~*Q%#hS23f<IcsW1lTKrt4qA^95oosh=JTEtA7M3O=U9ku2sxd0
zE&d~K0~J0XMS*zzTV<R)qM>;pi-4-{Qi=I@Z(5;jIowd7U;B^?hFd}~w%AERlMJ@P
z!zh{nX3i;8$2a+t<#&7PCLnMh?8o|0rNUboRM+-&D^r9RD!P`=*v@R{E8CHKP;*>7
zTzieo)y$JK>&EUrW%Q$EfIKcomQuz|Mm3+FvF9n7(hXez&>#bI%-ACo;>hujU<I^u
z1c-`jxi>g13U0N1=m-`3d=p#HqR3WZSvEIqnF+2-lV@++z*Rv$`spyt!yxqZi}h6R
zBkH7kt}U@&yVC=bVQWdC8wC8lK1M^eo-$ufg2;?7zHbruiDQPAFR?V~XH@6;@i+VY
ztF2>P$LX6bJcNpjf3YK)v+Rpys2W5a9K+N(hu8JRT^K|gwrlu%>@;6L-h0rQ;$E;L
z-9e91_Cni`tG?^_L~=QwDZdS`?}51u<@IBQ+6D^Qq_R{vR8R6PrtA<j_Op|5D)aNJ
zackY0u})a#9~yQ|*@6ERK{kUUyUY9}ankeM^whb_M1nfuXtl6}TQiIlLcf%N4F?1@
zaFKBEu^>&1v)|@M;}X4N7kZKvRo9~1J!CtGX)bn@CPfiwZF_G3Tpwp1^aD1+%$xB1
zt#C_3H1PISfIK(9?(YC=i$-hMS4C0u<dtM(QZ1?F&%vRJM*7#t;h%7gGY#4l`{moE
zK7+J$+@PL-&R%h944q(LP?Mk9=;lokQ;Js99=D+k^~Py|{ajBSkk^Y5LXukT)S*ej
zmU-&3aE@*KCo@;8CBjkgYt~{4AoCeqVu(2hVrSQ3e|sBakij7^#_VK&cg7(34~QT8
z-;auQdAk2bwO)Si*gsP?%Ey=2>)cQ~!UVB0w+f9(Pu&cAYNuTkt{+Sj^?993sq|mt
z#-RFhemuaTG2|MfR{7YTB35~y1N8W?W88waTINCyTJmZ8+-j)=y}`cVXOsq^ASP^J
zgrU;zs0VkXp>~3wkPXXMSq<~6i)**d*g#B^KGZ`ReHn#W)6k!E8iY``xP26cT=#D8
zHy#{`htQ*?s0>YQ$6umQj2#@|&s2tlKpixRILYb$6>l9{3P(P<&mxu0vp_~X`fgS)
z`IFB*Mr9J_hh&Oh6PQ1}bKO5Qz^$-Du2TD^bR|k?ee&Ogr3jUClpD`_6!xU9#6tdx
zYtj9zs3`DrHyQn@HMM7S>62+wQGMl0sg`ZK18Q~r=iF7G6z;oK#SgvkR(Lr}=g7{=
zC=1bWwvtEmdFNI2VQYF<AAQmHa4~$c0`BSJwRLh%24*JSIlay4DN>aSz%4m`<jy;}
z!f@7Qmk$L_M!;5gCvFpIF|B!ZS$F?~){JUuanHnAg(S=lo{ofWXC{0yc2N<H3VN1t
z22$D2a#Y?QS?c=_i{EN~`5kZP4mQzq_yw!m#XEzmo0?~DPoNSPW-WO?T#;yaf-Y`d
zWuh!c4HRHgoUgjPX`XGeHv<eLeZ=^v{>9XxOUKuAyy#kpi<;`--=0w=sn$li5!USZ
z$!Ei`C>|=L<s};Fch^JO^%nO;Z5)oR2PzQ#_}>u^tbqUXwsCrsr4u3*H#5l+M)L5w
z(UNiSM~O}xFD<!W+P|0vKI@~XPByd3Ylv@Um0<lCz?nM1G3sm}9OAaN?9GA$!l-{3
z`w6wv^>@{|wY}Kc=#=v~H;hi?1<ETVS8>mdjivWM!*EHZUC!rFjQe+zii;kKBxdMA
z|DW)p0$04b`=tX8EA#dxCUD5{4J3x@_#-0OHKmQg5S|}YL2SA!NyX5A_q4WF@g2%d
z!vJ38S;XK|Ze6o^5b8!4`Fn@g;$8XJv?+ttrwr-HVn(U_HwcrV-A#^<XV;CEjcwGW
zWoKSFTlbY71&1-`us@$Annc*9PSkNTKAz>uKK~_=Ba!^S7Zk|x5M^t;<N8_l?i5rJ
zsxSE`XJ0U!Hx@)9WPs>eFM@IX%q#g!atkBHa&~f3g6a=7Vtu>1ZzwC!YSv?BCW*xi
zvlW8>y|aR@0VkZ;aQ0)nesCPt3G91|qSmS^-$L_b8p<!qB9t<QCaDy0gcv$;D(R&q
z>EVSqWg;8)RnH!S^(8WiQQ_i~rjeh2H`e<9C+9c-KzVSf(b;ltk15ffJc&sn6>N%c
zo$~ZX;8Q}|7>RUu_Wzjr3br_xrQ6^T9D=(gxZB|F?(VK(a3^?hcXxLQ4uRnAZo%C(
z19!5|clNn|V5Xn9tEyM6l6B#bL4}A}j_$=2IYT+g7k@j!xhg<rDqUEe{iH<?UTv5D
z&+db=5JXLNZxsLK2{y}0p&O)<n|`^=(@waKthDkSa7V_-+)x#2dK;2n7LuLP11-Tu
zx((*xJdZ3K-Tx<~+bm3wmkBLVzo+q7mZi2r;9WUtZ&D|x35{|H>!!i0Z+TE{-xXBf
zKid;cFu2UqEZo5b5)`pQ>IEwwe*7z}2bs7Z2M2K;+s;QY_T%g4F<}FwwxosT1&RaZ
zianu{K?i>A!ulk7q*9YmPSw;@U(GHQ>Ebn-pE5=(H2>$=XbqfY1i=<2C&>OK1GKXw
z$M5NMl1-~W%@M0H0s|t&xMnLUJ~H?=tUQ!7m`0hjWxv5xb2}}t!rcx_c>b*dLH#8O
z&xJ;XzR0kL$<Ji3DmP<mN((tH2#Lbds5sygq_x>O@3)g%so~+w?2T5<Ro0P15!<ik
zG>W(DAz*~WZ)6Dvep9;qZ=^wMU<@A#;#weLM4)I%EyY2sT5lAkWt<-B?*sgNw)4#n
zj+?gRb;wPiip)`2^S4d@?wl;&Iza4G7lUKIyNJC$se5UN?V$xDGAz;mSG4;3!O)ro
zTho5=OAwQyTn{P{H2WC53Z#t~$~lAy?8kaM?a2Z7Hm^c_Ej6fog-Rjj>6K`|T!TdR
zCW!yA#(%%mV#MD1_I<aYnsi+8qb0DLQ)5;C@MU?40$gIYEmuz=Nw8D#3LjV&pNzX>
zbvHHLKk*|q6%OHCROXOcikj)f0H5Zcy(Xe;L>VNYdI`gqH#KWZwpuKf?GEjk<a=YZ
zL=1-ZD%W7{AK%ADgHp+Ri*D4>joRsBj@o%Hm!baWT})qJH~ZVjI0Y`{_#hwO1rV@4
zm$GOZ-HU%cYENLc4vF3So}8Mv3+Wp}SF|@d382%!EiobCESu)!CaL~#jU<NF!0?X^
z!_%591E*TDoLv+s1mF|2joIicfU_%kP~e@<Si)v_09R2u@tbYvw=CMSA9l9MT>KGV
zvgh{4s;pl{tp8I%{2LGBIQlX<N!k>tFWwuk$b7ll2eU;Ek5#E8(WUmji8jU(rb=P2
zH=v}WzWZQnvqQ{R6~;JuaAB#{Nf(_1M+d?C!SMdJE8)HTwkM7?=Zu=r9OYjV{?JV;
zLT?|^rEbR=dMt8$XPlW`>ZEXdoezb<pvmzQHiZdNa)G;=czYbv>0i?U?mWM*c(-be
z#oSKT+7KDv<Q<IdeVc$z|4?`!iXmi&Cl!b;O_7KsrV@@RN*O}!MxPkY*1{<F>D0uD
ze67LGhEkSUNV@?Ja(E^R8KQ_98r~>DB;dp6@;w^6ljLeo1Po3?3*u#;>v8R5kov;o
zLXXYDs`t6?<ngBW?K_2HuJ2;8M)jCM<)Ztuzrp($C$y8Fhy3gCjjCyBi^TA^EbA2|
zEb-XBY=hGv?C%%zZ|t&Aw(%xHrOhzEM7(V9j+m{nn2+8`_pb7xg5wH5G&4k2sb?<4
zV_WBJ()uT7W13r+!4<Tp<}&~dERMG&5L4T-AlDpfBP!~m;yOcJi_KDtlC)CErT+aQ
z4LDZzsQIJqSLPWbTE+$;E6^v8{u7@N07ojt&7nu|(i5YW%1PljYrkohS%A4sOw+L%
zBcqf*2;C6&1}Z-&!<u3MkEX!`)Ae~!sNouA5nlE>UC(2Gh-;$06ktL&$PP|_;?hOd
zG20G|#{_VQ>AIp#D@PQjZ(1_!VEGRvX~m8IuM5ilOLu8lxmVEA2kEcuNl_8xjYLq?
zzBO383DIQI7L{|9D`ZM|bZ=38HqlQd0yGYETG%rBSL?#wJPa-kYH4r6!%jkAx@stJ
zaU<X?ViAG0F@vF2871x58i2o<X|@2rLT=3$-@qn@Z>xqp^#KKCLqj2Q0U~@62i=+>
zcWo&uc3y&dPTMEyzYoF+ff~fmkLjl_&tEKU(mI=EwEJFrmLciY3%%Z_&I6pq8wCTg
zMM)CWTHWVf$Se4iSETZ`y33_^E2BPzuNDyn#uWyjpozplR9ENcZm12ZSQC-68kJK}
z@*Ee|h`EY|{Te9W{c>JO@#~O>RDG@NcY11LIASH{Y*l|R;(xJ(nSUK?fh%bVR9HA1
zQH2!~ZsfWfFfYlAl(xJWC5hI#Ut8|86!2Be8T!Pt31i0`RBmq;&|dy4^qc(*SiFbj
zpHC8C;i#5aGKrecC7&8QgV~ndq5x-OR8eA4ErV4RZEO`0_YBb@sG*bjxsqdkH_Kkw
z?Z1B?e1=XoVkCYj!pVX3^d@LxAr&5hj%{|_d$BE3GMv})otq*pA-MG{Hj(ygL$j|I
z`fU?LTtmjF(ayX~!Ptw&i#R+$Z}Si=L@Gp`k5;qTsdhj}KDjjc5wxU<hfBj+STPZg
z)BJMC>C!t6#%obcQj=&45cf`B*?Fd6Tz&Z!{=b8~Y#J_*gxE#sQ8Ym-qqL~m7ouef
zjdUtyN+h+}m~{`$&6#A@ZOg{BRj_hbd49>P`RsazgzaN3foz+M2JB@9JB_LFWM4dj
zdLPiSnSZsNOnq?ZB-PB>Lry0euQKnu^$tcizI=Eg#j9Y2iB-9Ql#|;)&*03<PCbdT
zLu4z>f6rpJrR3b3C!C<b#@yg&CU^PHqc7zu8o4W~l8IZDJ?qhe&z_)DAFU;OM`;-*
zH2B?FeaF?sEU&Go!MAto^Mro65;JLHoM>2zxJV4VD}K{tj2oUToNM%)nC(|?%dsd^
z;<i0VQw+|X%5ULJzb3vZXXBHp9am+LCGZoolGCn@K_Oqtd<y$RfLQpieyEwFlJidw
z9+7D?zjrtonu)3Kdmcg=)8DWDItGLUGm~hIk_qahuv#KU=1sO$b||w3xQdkm+EJg~
z8mdD+-e_Bm;li#G!viFqCO+>`mmvo2K>4W5cTz+r3u>trzlF(Id>#s)0u)w+lv|e{
ztZE^v(VkDx%0Ly+oo$_6;R2Bp$(jW%N{5+?%vFN_4KN}PD5%2GD5sVlV>ePVXe&E$
zTkooagK2~$D`KP=n(<i@36N|<?VqhzrBtG>nyZEF$;;ek#&(&#Vc(+U14<aA;Q?kx
zAISE!tRnmn5=9QW7BZ$rmeBLSnsZos*(y41JQ>4?&hbJmQq$NCE*jD-@*#8UWihd5
zQV1CfyW9u=&Xqhw>{2R~N><I~pI~H|@96FK;wlmA5|Y((x96JKsOeS|HQQ=eUo_}^
z*vMi*-qge+JxH@I!4yFu;Squdd{#T0ZL2V9d)v^?uk`-ze~8-B*{`Ntil5zGK~ZpO
zmG44;v`=nTUfD+*IiNoHVKSM}HGhR<)9LEp9O(=*k2qc*qkP#jrE&4`ou%hpvoD1T
za&G@q!p)mtz@B=`7pv%5Em3w}`IDL_9dru0pZt~khx4pz5T^Rk>LSC&!hfTiP>fC8
zGU8W1xjCho^z9B*U({SEB(<Noc>!7x^SJpx(kx=F2(+fxZ6j<6rzx|ilq0h=ITmDH
zVEtm&KK~ac4EqH<zz#zym!HNV=2Xf<*xFeQh6Dv3jkIhhv_sFsupAD+W320x&dWE7
z%;TA8lm3_}c@MlpT>ENo0oKgQ`}_Vt4Os$c;81O{H%r1bpaM&X=pila4_(zARc&2{
zw~em+l=<T;e4YKQ3{|>fjmBOo9Hd4`ts~3+k8A?}%tKHNWcF@?=>Q~kB%xdRrM4Yr
z^AER#p%|8&FDFSKnm=AvhkLDu(m`Z|uW*WdbtsXjXu$y<NZX=19k>|FtB9Zw{k@y7
zfhCb5!H_%xK10grsWiw*=GiDh_&(B5=MsV*hRC$5E;FNeg_%(>W26P-Nxtz-i}R1{
zPv6IoI`#kco>x(QF}-jUB+Z_8Q{*@mL`ocSuJ4t06vMMCGv6>kIOWyKL7Y^&{c05R
z3d)b8c4)so?C6!ENKI*&MBv*589{=14OE7RU_vOeq$B93jj@xofP4PWP#CFjn4<A3
zqv?cQkY=lT=N{79#B&0r)-6=Y$95Y`E80KH{uk+Ur7qu;S9vfSX>KfC`ImLOH4mi_
z0--}3DtDB--r*d_p4a`X9fo5*8ZL-VOe7;e28wvkYT^E{Ui<a{{(l4_Qt<!NWc?Hv
z+=~9R_<3WL79Z*~V9(zbEs%qMloS#%qqLp0Zy^Z25&|O&pgvggAww(z$-W0}i>T_q
zZyxwo;`b`>@#vDP@YUW%wUMWHlcX+R$~7e4_(P?MP;}R+bVcbblN&^AEJMu;%Tz*W
zG=f(FyX#`&g{vhid?E{ALHeD)mI@bxh3DMtvrzOwYw0_hi!mK5aYo>YQ^w-OaL_jv
zRQA>L0nc5^neJddDJLpt$_GGc!VBjs<&TQE_CNe0E&nCk&_o`BOeCfJzX0eoS8!FT
zks0KOh0I0PaPx;fL2tFqqO+V0{C$P0VnhV8grAhCiAn>j3+b)dh@1uC0X~02M{j-K
zHw$g{+rw-UCx;sTi%JM+izq4nnB*aHWM0z7el7)!%g9EUM(M%pd1DtzIooKO`h0G?
zK(Jg~Gq%(;Jo50@|7JrX!+uKhWIjnfC@X#O20OltS~=%1D<<)0&@$AsTF)CKSYPTS
zr1bD@A_o4T3(AR6(DDvv1dJMNTh*&VS16+aDgS~c7IZoJxd|*GM+$<kp7eUyN;xux
z>?Q}W^Vl=zdr}|mJaI!YR`Lme&2Ob67RXSa08F&`-Jf8MyZ@J!Deh@L>`<<Jw2`Lq
z$aQZXzh}-W+LqF1ObR@jJj00N*v%?e$}(FMW`3rtVp@fE4fTt6{&W6Qja84TGcgK>
zY;W2VT*V+nw$HD>V0Hf0(`!6?Vq~LJKB}_99v!Y!8_J_RJGxkygaCOjq9!v|{7t5c
zfi=nA)NR-ZkMuts0e>y#RYZzaz1|P5g8PS23FO2{ockZLHP}#Nxm!5L6*8N|-VgF{
z+7z_S_N(aK+*+L#5<*Ir`+wl`=O3*a1iofCyM8??(WwZI>;DHQ!QfH55TBU4Wg`cs
z<JP2ef!4VNTzo4Lz+Cu%TudAs8%jjZepFl>5miG}aox%GaOvGLw;P^9g4!Z(`|E#(
z5B_ExYr`M3u{Sdn3+8DTyhu)l<IE$PT1L&0(Ok-7V%AlfsG@WfKM`RxL{+FAZH4F3
zs?Rt2V%}*_Ij`bK!UJ5W!NLd1O0b0R0t32mBGhaZFJx&bIyMnW?Zo*VD;U=3ww_kK
zA#@x9dRW5fMs^r>dF%{F#PqL0@&6mDd{gRr535g@tzo6d?}~WZ$}7<9vxCzqoVP=o
zabwmfKzms+Yt1~i;*sJI=eO&SI7icXg-W8I^@EngfhP+?{p-pwzLG<F?4tQ@S=**v
zv~S5o=*m#4`;|N^pS!<k!g%SO{Gkq!6l$>@hsw06V@>jlB6RuJi(f^M(yKNflNI>m
zXgw(^`Na^<8s4m8!t2%G?Cl641Pc3v-yv1Sle2d-^w6rw3f34wkLKBvUf`<;0z+1m
zti{%EK`2}0r!(S2xa~PLi05K(;z>pLyi|Zrds{64!>SxcR7sr_+P&XEH(<Ge4vLsQ
zSmM9Weq5JuWN_)@n~p{WG;7M^dwGK^wG9R!lLEjWAtHv*bcdN7iOarXW_9$^=BlYj
z;rrPJPaQeFAWawy7XNWs1mhP;CPcHAP}se2SWR+T=7yigdgE_j)1H+Jn8Y$M3#pr?
zwOwM61WL*aR4sP%5ahGt$&1AQJpex$4|hYZ&^hGEk8rnu#Kb4<1!9>zGfv5qSAU=V
zA-g#CIXldQMEJz5YG=s(?s|Kdz;OWkw1Kg4!6xq_CDmTte^M;s!R+0`t|?EM=9pY<
zCQ$Yr$M1mNHtQ(yNen0aY-0{V8vp~|)6v7Al1*?KRPoJW(hh3&znEiKz<72sf8@i+
z<$Jw{XF@qX)H3W(EBP}20+c;9f&pCh&#>?{QISD>k6F$l*<V(ucMgjB>$5*iw@J%n
zp#iP_1`FkB8@11n+?;>(<{>3i0?yP4q>a(BYou(EgQmJ;W+Ec3FC=KJE`IllQ!ueV
zy9}2%IDKGS)=BoWdUkS}{-0BTKA1Ny_{5pjli9KEjem^)iSI*|T7BDP5tUYLTt-<l
zkHQj4pUx4p2+=dB5r-ii=$EF?I1ZDb0&Ytw48R5>)exm7Hkc@r>EW=8ppNQ=o%Nz!
z39RodG3xjg?OH16w+Z(wEj$^FkM>A;$HykYAyWj%j9T%H)7rWJGfUy&$;b-swnkv?
zfzNcnm>MQDB)czm_r?5<)R>S&C|mXUkrd5XmX1Yui+xY!&jUXTl0{il<Cc$Pd(3}t
zgrbj?`SYy0eLQm(2`N70nsq8u&?kDJhF_|i`5X7=a(djCB#{G*YZjyfw0e9}rBC)(
zP<PJ4=<ff8?!oISRTqcM0fg?%=626<^Ms?X{#0w(jeHTl`P6d3N%$r$(8<dYxkCy1
z<ns_|N?!)D=;!>FIHYAhSX)|y!-L)5WM(L6RLj#4fD^3kD@PRI;UZy_NcCl4bpRrS
zAr+2>Y(z)8BwQl!=)v^^>j6Ewyyd;$YIfc);U-W#-v5lF8?B*AUCr&Pn>LX6@c8w8
zJF<#{hafZyA_3pIxD4J*U+n!mW8xWP#x={qx%F~Mgl$KQg3WJe1c+PpCf$(~jK^Q-
zA~6US0cb#It$e2?9;!h8f$URm!K&@hH_Qrl<!T}fLDXZnZ)?3RraYA`1#2TbnY6AU
zr^6VgjNv&iF(4)tE$c(Vp#RBi@>9Uj6$~VCt&|;Y<IZcxm#71^v5$^qznW2>7mFNu
zB9x);+A)CQ?1?AS6N@M;_AMUCY71ksbW$Sw(t-(jT)=19wptWdeEWDjCbh4I=$(@)
zV(950O@OSyz>md@T6`cWBXi#zV;S>;8;VJ%RRZ3q;Q~zRi$d`;VL|8lD~<J!vBdd`
zZvEExs%BDI?w)@e_$3TWhb>0J{+ps2lh#m1ibF`xMlXnpg8(|ROtUWst;o7(!C_|9
z-;@_6nJprCsh#}v@1wG10*+)KV!k)uZpgug1L#P9_Q5iDn+2;i3rA4&7f=AbDr+jC
z64RdJZ?*Zk6=oMz`O%29g4e$$%*{q68U@k*Yc*%6)baY8@7VxinZYnPOKHY%;)pCa
z2g<JZQ~wzQG+;HFqkS3(5>rvno{M@7d0Q!cG|05hs&`xQR4_6R^FJhsveK!BLrQl>
z%^_)!DQzj1iG1whwJ|zojay!kRTRX_o=i#@k`ZjuCap@Ybv#<L@EmD>N8%18ufl)J
zqF^u-zE@U;=<Su<PkaJ-IB9U+my_2lteG2@XvPGuJ`vkwr~XLMCO)1v&BM$$?3Eh*
za85x?$btVs$1=<V)(iu<{ZCNY&OR-&p9F2dkUUNB1PRt#3ou0zBM^C5g@#%99pO?0
z=xO|c(5{TL4f>=%#lAgL7NhoM;9s<CRx5S+^!wQAW?8vqbiP8Q{1(0LKvG{*Z7jh?
zBOE~1;A}SjYu=Rzlx>Gw&d+9SrW;s$U$d^`gNgRBFFRQWmTZsouQ!_-RgWj@zSp5N
zhkh>kc5>;&=Spk6-%wNPj!UJS5n<F6;wjADAVNfAK3y;wGe2krGdGt(d?)ZPHf&&e
zqED^9ystnrc7tdp84%Q?8QD>paZ>m1H93_2RxqrXynA#!#L5qQSz<1`fX?P9YIT|r
zJnb~>lKMHAko>Q`BK5*UstR6z+nR#BPHrUUVawRBXZ8e&{lM^r5FgS@1YjT*|0XSC
z&{>qRH<v`X;|3Ut5TiMb|1YsaeR(6Hs&mE`cMB{_B*$V!)!1VDbY4+G)Qk+>%pr6Q
zJj^rlqLWUx4R2D2E=Mj}miuYOWfS&&g~o^<43<Uyrgeel#z&%EIs62m=}!WVa{!mC
z{QZ7CUDEM3zS^Sj(RC-JgR5yT(y~$-ZAwwM7^E^poA#`7wDvGHwf`9@4)%|udA!-q
z_t(2Ol5?1#Tq#G{!LUL75`+pN<&$V^0#VGX@|XkwfmD1&St;+~!AVI*^iM+O;5g9(
z-xx4Dwb~2evLENh;v?h#5(vN%p<xY0fz#*5{_IZUt9~F2mb(eHc}?6kp4`VLflzDL
z$aRi)-Wc@o$~Zjg>88(Y6y<~aSB`er!1(fAqm%E`v#mC1&-+kp<$IBVRQXbT$%0c_
z-vL#6C7A+FX)tMn_BGol(Mzi2Bg#tCRpno4uA$5y65|R3!J(26otCE92)%a2^`?w+
zyd~XFS09CtlzT!B#xjg42#28R2jM<TQPXk-GEH3$!R)<{@_|fHK7Hx`fB=XTAfV@@
zVf6slIixF(QksrM+H4P870*~ZJd2zkl-9Ed=#{TV-_6QQ20f78ch$fDa7bgyQAmU)
z3q$+|g_)C1FG9{t`F?>vvbI2|qJ4!*vAbvEc%=}EcecbMtvQLs5=GUjlUpK??P*4l
znvPnk!aU()``-owe)8_M*f^L140UB3UM-u@P#ajKtX?_vY%cVyk2J%;;Hs$dpn|4y
zH{`V##^0cI6fn+?o;7F*2Lp84zZMGZ5uQRVqx$Rn4Bdwma>mdGJ0|ZUkT+rEnAknv
z?Tg=)66U}P>8}<D(DXe=1VxmN<v`mmgA?|B-<|4zjl-;mSvOb_W2IcF&ADyUGx<BZ
zdGiivi;(15Fjjn?gBdf67KO56ygOe8D_sT)$~Itp`BPKuIjU_O22k&B$Ux7FwQy!O
zvxF4*vo=5don3=1%_{pd1rq&N(nLZWQ$`()+Aou_O$K-a+irt|6X>dXnM5*?SjUyU
z9{<a59jVhv7?%(xKB8WOw$cklHxGuY-r_djebuk{K-DdQCOv4D-&Y~&x7jRX2h2l@
ztY%!bJf`CVgk)baAM%@Ht-8=fhMjsH*~uh@sbK)DCFLu+?f8UAcM6xJrj!h2bU${?
zsL|22ft6NYQN%As{W`Rc#`pM|%hBP8{1UViU?q8;(op_04e|G>X@K*v?2BQ6D#D&^
z(IJ{l_B8c*uid)-<%Sl4?UsYx6ya6v29b`h1?pU;<76|0QYT`fSk|<PCH=qr2`(Rr
z&kkepCSW|$rkI|^ym`n@3!@@Q4M$0mje#W(yR@YAKv**B&v1Xz5tKGSX>e{Pi_E$z
z!6slYMjJOYwtGdXeH;9-{{=|i!K)<f9ioP7R6*oCV(bJ1$PX)vuHpc4#iJ(sMFhkj
z^93iwDg9OPjK8*LHo}-S|8zE}PGgA-=l?_kGtGhQ(^qKuXn8_uBgPY0B8~-=c7WRN
zRDf4g>U46?iCHK@QY+Z+bcqGGqFgw0(!LQlQgoW9VP~HZGB^pc<o{J89zOqKZePY*
zkTR{YBo6#aiC`C*Ibgn{FSzi*H3gYfOjo%2E6d2u(K5hAyOM47+V{yJ&dMn~$t|Bj
zWLWrbK$8?M%NZ<|SXM)vdwgryHE|{Iq)()*5c6i^CC{4&L{X_cNbXxHYcm?Y1o<|A
zEBtoE;0h|?#Qv7&3g%|bzc`?a%;;Phvqix}6N@c22F?4K2}4uVEiSLxh#SE23Q0a@
z<%^=<LvUaX+#v2Goio>gK?c>o6mPqL+jJP4s4;+_di!x<;q7;BxhI-YF9#83>2n(t
z!qPzBXv%b~<k+}@*J!$2dxAmYenPoGU)1whMqO6nytww73Fv=s#jJLkC-1n6*kHYo
zpS0)Nk{|#s{oKm*>o2en`Pi+xIyuhA1)X9OL)_+?@RcvUZaeH(vu!#z6^T^4LY$o=
ztjCKK;N#F&{e|;rpL4JJHpZZ7WS7uU&kxxZ@Cq?0dxa>T#X}RW(N!j5w@-w{;5T2?
zSVevCuYT-p<4$xa-|^XR7hz~2{UAkb^8>Ye-@Z&)9vZg0jOcg!tZex1Lp6@A|8VN>
z@;i@ydKT5Z{63awzJ1;E-tGPS`tzQ~x2+A|jyH$R&SUU0*`bT<h09pMKP;P?;eD1U
zZOOx3N6DIok-6sdF8iZclJI057(&q|0WXC4v~oEIuT4sB^d7o`t8@d(37BFc-`mDx
z(CYC%=?2m@s`eHGRDikQmOwmWd0<3~c}#L1;zA6Xb2qohFq!B-X5d9R7UYe40_RT$
zFsI2@Ala`e$`_e&aVa_io?J;mCC$Jh9vzh-hKF=2;3pLw#m=^}CS75pW60E=bUP0S
zW8W;*zRmN$2Kl!*0a%#%-$o3bQTd<ZM><;_I?r=n21$md4BuvPHY7=kSZruK{^WLm
zmm;76Wzi`b{M>U5e20Febu#gRHZI$63}2-G{CR24ZL{ooKa4^9Hbn@eLx&4DaEz@U
z6b1)ck;%X?uc8r@xV@?bwt+UY(yQYTfhTg=efBGsCD3@tEQJw4_*lRSc{*b!jaJjB
znzJkax}1<Xm(nLT6_eI}A26f|`iIE~xcT$wK)7V?^T{T9(#zAu%<7~R#X`w)PDS4|
zRLbeA$K{w2l|^*X)Cu%=bS&XHwJ`Rkk)SAUy^rS1pVsas!6iBX6Xothxuefq*V`b+
z<KE~tIBMaHOk`fJTDHA|U7cVgbY3npR^TbVaOBMMAh(1RZiF~qj#mVJ=I8!MXj~GZ
z4~1j3Ik!p|swRx}0qP249IG_2T}mTE>LPwm5kY<1V)IJO^`~xBv9*J|53W6l985o!
zrL568sz?mvUtSfm$uBf03Uv#c(!J{_wEbY{tRe5129Jo*B14E%>Pj7isw==NJ5UYo
zGiFqaNpRw8c1g^OCr+#1wY66eY1wHbdD}P35EC#k#G|5=-KkDSS0QhplHK_ZZV?8D
zadEQvMc`%p>trFS|2R02A&3v2j~X^j;GFaII{F3&rU8N}o9rxGP}Aher(#l|a|x+R
zD<9v<ETiS@P_)%}iv~$MD16a|!tH*G*`YIz7#0T}tstnZu*vjVSoe4cE8Q1p@;09-
zHYS2^CHQY04n8`(OeTv93c}|swd$keX?~_K9PSUK6KkEMupn~NHs%%ZpdF1v%L`v<
zJyMK<Mo`+^%>EPlG?MFv6|zXm*QI@4Ue(Je<w%nD7vaZ&LjjWL_^J1!A!U?Epgee1
zQ{;ko3UtL(fSK}$|M%S`gfW4{RShtEFiv{(PmPQ`gxLoPTDVK44B0%hEIkI4fR_M`
z=<OTH2zqb`Cf$$Eu!^)xI=~h8xaPoEmbi&D+9`_nv%Lnz6&iz^C<^;#<#u*91O`NJ
z*MxPbv0oGXhiIvqKB3+6G_b%SEMn0lsJ|F;e6_*=?E1tF0`Z9;6Lh3Q$IyW_Qj`a&
zJ$Ep#ueA-Ff@HyZlrI0YOYK?JCFIcbDxW53L<SVO!f(4M(Ky6Dgne+8UGUs#SPiL6
zqEdUYVf-*JS{=vdZlaO4EGuL(#v=z0@JRa`%am9dlG>y~Imi0<;Un3N(nk%jh^E#z
z!Tw`oDa9<W;H(!gXEt75zQbOYqpnZMuwSb|Q?_ZVQ)T)9*Tzgqu8VG+p&wT;)^Neg
z<p}OGjtEH={GoLsQqU((p%<}DOP*Zc<Z-Lr>c4pJF8-i<H)H-PGdkX8S^rIIv8P4H
z@YQd~ri-pET36Wn!r}gbiwxxDx**6WpsDHGfBL2oxRjx1`MCACQ=JXbW!ilz(7e>$
zL?-x3syf%fWLMehKlAFo=&iYyGK`+%ZaCE#3*@`^Yd&}H>e|wu@7m?7$-M1!Y+Bl8
z9O`x_%H8*_8)H+5scgFa9EI89Yhd44ed|$^HB>LCXy#v|-{H11HTLjy&Qr2-co+mU
z@a2oOWb<@1eSlRh7`=S|@&$YPsDX%V1+xj(x*RJZ>r>EJ^Rzr89V-&H8lWPn<*m{U
zDtk9OlgS1px?_{vb=#sWiDTYx2TY`Y{0D~;zf}_v=Bwg}rK*oqeQ@P{IYo8~D40P5
z^TSgPF-LE8R!CCb@?*7GpG!^m<!IVUwdjgy1T1LkF<X(z4u5JJT<wJ@yVT7D#PZ#3
zOBPfuu18wY{(KwSxX%R%k19Ps^^-Wq3e47Gk*@A4`ae#&ZN6zQ2_jDQT>aJ(ySMPO
zmNfHLq1QN}8m~WImL*X1J4Q@4-ftrTE&CpJY(?e@z8)*K#R@ib!v-~h1`hpr{rqlZ
z4Wouc<NXA?Y)*frSLJVluV`%+<azD?YRF}fspz-=SoP!LR`5^c37<Vr>*>pvrTxO(
zr-di&$-dt`0{+AXKF9kW$cT#XBdwJW0&m|9zr#|`g!}KZ^)%~TWLCbtHR-&!Rr<Fr
zxPRSnrGTCJA^_5jT#f%t4$7euV?5Ncfi&LAd7HcZb&fdY^PX$R4*UDQWC%7EyoY^h
zUUDZx#ca!rx8bd33l%U4^qoA<U00nXe{QXb^}5tqlI-Nn`IF5waCx)-HhSOcV0fqn
z^iMXuQaU8uc4cra+U$CsJbRR0eV)wqu|4+%&Vdvb1?gmKGF_)IjYoWcm)H6>d!PRX
zsnoc~=bjPy^FMT%F8T@j8Jjod@P^4=)F0kQ>AL%VJm-jb{dRP%Z161j_IPqhb@=rn
zqk1*_`R#Z8R!HgFHP=QY)6!HYj-emmjk?Qnu>G>2&ZWo8&Y4Nut9!}U@NhNWoaCk0
zFebOSdk!=AcqyshR`jChrYcu-2zoaT?O4n#)iP~XAoD(rY)v2&VaEO0L{KVZ5(-wn
zT?gI795DPXO<KkqiFDz7Y?jQ@S50NLzR#|7cqXCGR_Lh7an)ctn#%~{j`M4i9ozJ?
z@bEWL1bQ&>G(2iWfg9XDto2qJ#Yl@luP*>#k$C0HLgHkeahYY;l7gA_UA((nAhoJm
zZQe!%!Gz3;EJBHYk^18loF!;Ns?4bG^}c&Q03QHr``zqQA=)A#`tK)8!N=zd#0t4Y
zPb;)I*I#MQl77cY<^$pRza*BbYu6<ElN@>;F_>OAYM9n8tKSb|(pj8`-@;j*Ka1gv
zxjFUxdb)aY{L}BSbr|F8eP)K|q7*KyVR&Tdd)_R+Q5D65!CxV@77H45)UZFTw{3m*
zF;&xo!=KJstIKJsos115ev&c|kN-W_(Q>tJ^X|2@C{7Bp&L&yAxle{N2OHUtXiFoF
zxzdC7gMLq{^Oinf=xO6uxHJF5sgk91gn+>T{G2UfwBsz(vvm*2u2RNY&zGK?4%<h?
z8rhY}tZ$B~0uHxC5__FCy63L6!=3islI<X>M@>LzW;c{atz9i(eR17ya^v#O=jeKU
zU(bjnB@5Fthc7!D$N=1m<K*1n+RJj_vEb4eTzE*^xi1~EoAe+^_3RJ`>*@~2^tgDQ
zznE&7vJ#HjFZoSN-?g|zb}D1YncXkHWOw;m`-o;Qige{X8GdVV?ApB7@dKeV^$ghE
z9PPTb)aGVpm;d;zX^`o^2u6~Y5890pUfZ3Ok3Mx7t*2~NVLo9wYd3E)QaGyh4^&WM
zLBzN0>fgR9*kg!?{3QH5@!F#TBU#ZU(#SUc#-gQp2A9GxiCQPEHW@uFXRA+jI+Pk5
z2MYU})x&)5)CLIKIkb{$87TU5t&r6<I0O1AYPeFYYewnuOpijbc~lQ&WK<a#1`Etp
z&iE8n^c9_*o_Ih_NO|x8e@Y%TZQ62l!^L+eR)NvTQZr1Wy@K&n92u5?iu}Xp&t8{p
ze2Q^a!r#*dtav@IK`&fy+}KvBI4_lt^RrkO&!tR9_MD;}zRywU=~i`#Z-Nc0-Btbw
zQS>UP;sy;1!*^$o?|<|PAd2NzNOo%Uf?ysIDa3!(-A8pE`M1Xu`Eb^5opz88s&L$l
zI3@$*NC1l&0CGX+Q0wC`9&Q~tD0~60!;4=&XPcw2L&X>*w2I`Q1m~p-oEs$E2x6}*
zh*!cwk)72uB9gP*tVr3*o+eJ(KUJL#K+cWv27F-Wg|6?^o@4yl57YcP<(EnhFR!I&
zJ-T-**X$FP-1D(fgvR5S#AlPHIa}p|m5_%&Rbx@{=6CojpS>Y!8CFt!T4$8PA7KEo
zsh6F4_o5~Cjs7<qiy+-VeCzty2LB((XN6g*u4~h_zc1)C*HsN)K_}jyL25x|dY7o*
zpqw!?FKTytUnWmB1>OC{?+n&DrUdGFuxBMM1?aXx4j0;FQ>4eS7FlOMOHN^XZh`)t
zwyqo7?grgBrxyg$D%9p!!<H*w+8z$b9~J;h#NO+M{1(pfH&chyZw3Tj$YVYu4K}s4
z4|t%{O4}xW_ot}D-%H+uBh8h<7_v34z6R2~t6$=Mybj>r`TSCln&~QSeJ|3ETP}JY
z`!7beo_AMYACgh!%zLk11t0B}Ov6lbi=}j5I%n)sP^-InWBXiVB|KJ0_)&kFKJ)1f
z+)7<iz3_`7ls<HGxp(jD=sac}HwUH5J#Ki{ZoKY$9hu7*8;PGio^(uiJm#4~=U%UE
z{=UX*xkwvnTiIWc3pXx-m?*-PpX9L-&obha%HH^fj}0DM@SuCmw+*j0s(UG{NqLUR
z`J|ryA#;$@ykAiuAG0U~W*Py&_zy<P+l1Z{(~wJ-TY~eh^gNbvlNg`Y0x%AEvaoBD
zFPAKQaJok;uqzlgiw4a0lQW9&qe<K7W|N-;XF=TnBebDSq_pshvkS&Cr>YDJbSdIG
zks_5Pk#lX1ga@R^Z}%lr><tHsnG|acs$9JY@T@@wU0+*O6xw}R)&*zcy)Y=Ec@*D{
zYz?z<;R*?V*<|n#dx5rKd|7bze(A^Pdykv1Q5RE6)Nux~5Z^9zk6gA~2I4A;m59fI
z2D;yON2v>{B6o+V<=F*{{0}Cx^-xbIH+TjD3P6Jb<M)b4L)E5oKPd3GyBGKcR(m=c
zW?*Z>B89R^8sq_7_@IvYybS}cSq1M6DQ|Lg^0}q+NFK?9)$a{Fbp3_6`Y=_`r1OWC
z0)aZwdJX=M{T!_*9D^T$_9KsZ9C^pS!c!Zv(S*@FgKir=`Y+24qHihA`GeZl{tC1x
zwb2?Wu;w9VZ9SXhK~k5sCh+IJlEsd)J%#*-VP64T{Y}vt`0$sRUOlJ$bbAI=ho(!H
z+X<&7ph;V|go3Tew%1Uf6wYa@s>wKj*P~=|bq23RIFDeveN~Nd*Tvq;Pp>b5+>CZx
z8n1J_?jFAPIZnWdl*6+y%UV}JtykxQb>Yf~o1mrpWS<@fTc_a`c2R|g=W@Y6LD5sm
zIZ&cK??7VjDM@~}hOG`g$7O#z%twUB$1%fa-`789<F_xJIg(yXGnd+qJ@?&9yj#E;
z*9<<*!@)0Jf0~H+P^qn#2@HpCyyUIdoVUJd0#j@<g*|c}J@_m-_%ad7KOmITCa~_k
z?3cFXSh<-5OL*~e?FPQ3n%4p=#YK4E2^PrpMy{w6R%%l2+>EA<CJ>D|*MiZ2KK~H^
zXn852xqLs=AAu*5(^c{75f;uyV`RuYgX`Vg%uPn^i_p^O#6jX-YTBQ>xkbn0^Aj`y
zw_;gzJR9E<#rB(;G{9T=$aRLgNa8E0XYo^8D~JN(f1NfJU7PoOX`{Sd5|5W%GdaRJ
zFcWa-=5?eFXX=x0GS6J8n>?mC&7jx~Y2+1}4tO?a4!rNZox!Iy<6miY9Wp@5vPt^6
z`=HrtoQFQZ|5x$mse?m+53WH%c1nLrhzoAi#hOHC@6Qg$awa4Clym&xsvrPP<dm`<
zUZ8^~w_`D(&n~r;YhDM<^k&^PWazLSndj<hL;N>)PA;Gj;5RhzwS7J=IDROzhQUd1
zR3LmuX2tdWAPbYhBYW80R-YtfbsBVY20XohA+c|uY7u^Et(lxkc&#MedT(<p2s+(F
zb$|Wx$lKLp=Pb}-o_YG2Cs;$!c`15)%VkSx=&Aj6u)SN%Qbyonc5uB*IYrm~tqB?8
z@>;7*FGagm&||%}OPS#NH6C+naRKO$o!bwF@{M`X9+HM?`6YV%>zTTZ&37(+$3uOO
z&f+eTjflgUgiAagi0kLrN9Pd<U3cQ^r|*TLYr=R{4_+ATUxi-+CO2||L{i0{D{nnQ
zo9%4E;`a9<@~-*2&0Ify2_4%-YlClheg+vr(JhQ97ggy|y9)ZCWDpY2(Btg4Daw%0
zc8J!0OOlIks!lN|D~9`m9K?bEK>1sGr@lH+3-^C6Z=rfYt58!Uq7mAI1@qrjVSif1
z^sK5;9SyKB-(1q(SoT^@hd(;TU~U+!ALP;X2hgC}nJBZN@C~DcI~6|`T7B-D#Sw}+
zd3}ORhh-0(!dpx19JZ~$s`)c)$+2CA-lLCGXvhNTfq4|%J01!Uvk-0VnGY8ns$@ft
z-Z-y`qM|K!I*)#qgFj9r=HhqrqOZD)PLx8HYEb0wFCBI}a!F!JI9`3AKy?&&tX3Pv
zP%DvLI<5{IWR0R;3ZIb=6+O!({;g@qtLq!%DkYdYI(Dxlszji_4i#OQ=(hR8BA3hD
zJdX^q7TwPOf;T#yH&)=LPWNX^g7!&3nOXMsA4l5HJ~Xz2L-sxOXR8CY*Y%2iz~49L
z&FdZh+fEnX4qpdj9&=qEHIqCtL>v85?$966FWqG)hYArdXc*QExPTk23fFC~BZRm_
ze)b2eZI_$(TeU53qNwp2I*-0Xo|nDP{iiO8i3&%)x#~Zq(4g*0USst7J9z3>bx<=~
zI8x2)&O!cjuD%*qejVqxR{9pxgt9%BsDZcgQ!F__8aF_cKiwcK?s#zp#Up-_JHipq
zL6Ci;_?36`?<P&sIEzg0KUqQUBaPr~;ow!3%t$BG!zhTpAtXTzsttT{?_}?pi_Kdp
z8}X?PQK+eqpUnwMOP9Z&Gy;?kI?lZq(UDf8giBbs6aT5}{$(y%W~7vhrTen5cwmJs
z#h4lkK0(kma?nxu4eF4IZ#uKmPw$JJRLozOshT!NGs7y~*w{pV>H)70V6oimd4=jI
zel~pf^o&<SK6CAKzSV!FAFS`FonOJ#xhx3l44%4YlDMg9sr5R$p<tR<aTGDDKZuIZ
zx&xiEi6<StFe$f`U3M|F=N8;EXmiW9f;5JNN@8-`Oqb?1HTIT=osvzz*!vvWRL6n{
z%{q*(o!K2my#zBxrjP37@7i%A*?F25;D*Y!7L6*_v|2A2OsYIj2NgA76HYG*e)xpi
zO2i1CPOlEEznLceFbl93sTFj6J8ov0B%BC8S@4~X!U8zTPW{SMPno^B4Lfp5cyqV~
z>3G?jkX(D$$F%s3=ttL|Ul2XIBFJ9U%3fG@JSfL5&7NxPJ-0AG`sOT6%=&#yxF?r5
z0ra1=TfG;bwF@3zN7V#UVnct-g5e8Q;qxAG*K9-Z-FkRqT3T~ooR{UH^XgeRJjWQI
zDQq57ld+@e@R{0MmVLh>T=(Ddja=<>f)>yn5H3ECG!@GheBr~n%kaAT2DjS)++-P(
zO0^9VzcT2W;5TU5;LXADe5bmUZ&Hw~rzomIMoO|XJf!;q-}xS!LA4uMm9hc{^hImJ
zvHEtOM~g}J=}_FEa$aV`P7PkmC|ej@)<^zZgtBufAQUNdPsgr=gX4kACWc7haj7%T
zq=_CvicTv=&q9{6dy8ujD$po(aFh#**k++xNd9@2{%NJJNwtAj(Ly^U(r7ITJ_`1e
zWH2^4j##5ElE9Nl*CaCyQ%ylR=q~pyT^z<{FyJW8_WaurfoD+W<>Fw@+Aq#EheGQ5
zx;jz`IgTI4^}1iI=deW`k)iPWwj=^gau@RIP6et&&0Pn2sRePhqku~G*g+1W5tvNH
z8$FHOKNunT9Aq1t4pRDCCV}UsEH3<lGFWY|y}*8&2YXE#%JowH3;E2J$j8EB-%fql
zmg2`Hd-LWN;nuGCxE|YwfQHlhMO*XC^HX=brFJTu5$*27Gzeg2@0-J`UfcCUv^1~m
z<vR|8w^@VIrJ<kx4hQw%t9{K#@z^e~%hcC8a(7FGnvdsrhp)_3y@r1TQWXwfrlvww
z)KBm=2xEDA)H45%`r4L#?YVvI7c$*K@oD)H<6%FjxHg4n5^U~cpBFl<-Xb2Q-H-RL
z{sEjKg<AOy8lIW?@go(*ePr-zBZIMS+Rhu$ixgCQT6tjpxsVhGeM%wpK{$Gav;~%%
zKZ~hB6{4AO0gCmfkqHM#thI2>4c}OqkS--8Au=Voow!EK<A)mbglMiy9eSaJj|`yt
zMP`_olqo^S%9{pv<jXJNd-E1eBhB#1C>%dN-6~$}X;6RdV5%ie9<2)JlE!IgVl;Jm
z`03QTd!ED3;>XlfZ<>>K<U{lEPru((tV#2$jRRro#ko3D&&gjIQDRyxkhF1OB9#BA
z`$m_<x(67G5!$Zd#<jT8O9huLQun=004yhicw3nNtfNehEz>StTMB~8s~4@Oa>ZyX
z8=;Uj*G3U&4vo`POtYlm_*;ZtEZ5F2XNT7I&Gfzeli{CSCueVsj$OSMPrWtaN_awA
zj7f+{7&`b09mD!jdNj!^o8;|dIwsTfTc_4*4$&<Z>~^!$%{dxHFBnerB%bMD8l~<4
zfj73!E7XVANECbPeR9aDtb*VPE$DQ}bev<5VR5-lY0x5!6KO6{skk^ib#M(HNzD(|
z&Lw+n+Dxf585u2$@Jgc32S~@uYFd=pas45G*=I;YSYiiSe~$OO(6iVoaSo@H;3Uva
zUS7IS!n_*M`0y14ih{z>EZm{oFV(%;x($qUmQ^L{vY>&N^HHH+VSH)idk?_p$r}t$
z_ZaF;>?&2Vba>~NWqfmi!w>ZW(#G@Z1hFDT`S=fNuoBrs%Uk-dJ#_e3G}_c1*has0
z%bX`sg`=iSqH>%AtXN!JS<|5?3F<BlCLE)UJ*pV>+kcBh4x6NWdqB-*<G1&2L)m*`
ztUe~SDk?u)6Oah2K+;S2sbe8$_+^Y@NHR*plHZ-yIgr)-*tw#3R^q||GTOI8W}^7^
zvBmrJyp?HhRV*x%@Hf?<37=)_=!dXJO&03fj-CjL(*i<LuO3n964$d``k$t>ubpEo
zDXyEHe$GyUF!~QQ{Pa0hQ&!Ic7cWu$wz}pCj34<dGi`ROz>xZ{pPfI=9nNI(>S=cH
z#ikha{Md3o99QOpb7UBQQ%+~hPu`jxN2z8b_djjSceRmX4&wV=jFQT?#4#+~=z-2(
z@}K+s##1P;_DRI=z19vLz|CqAzGpt)jb@KHU1aWF#^2wPOh^(WZG!B1W6jVJ(w7k@
zoS-}8kh<}~GMtWKMPc?)c-UAplALTvOjV1p@8`h_m%u~hnfeirTp-=;nipwC1uayh
z8s)}PJgG*w{(Go!G!zYE>Pg6x3etcz1iQ!sM3Rn<iO`X_c0s<as?(9JE^Z^1CyU>~
z>w6JxQVpp0+<0daFv%vP7Mm?0egTOO;KcjDnN7lAQZbWydSctO=DpvnxgkFHpqS0(
z{HwS5iS}ZM=W844#++bE=H%QduU_t2!JyRlJbmCs=ZnskahXI#@sK5v7Lq<2I7}9U
zynV)ykp37jcD3lF6Z5^}7_a|<DSNFSp{YFLpj)pvdTG}fdGQ`-M(p%k!V<l>9<?2d
zp$U8q8}f?D8Ay0gJ^8>8@Ava^swJjd7h;iQ<sL8kzSThA!@w<hV%1!?OTf|l-4NK7
z6`~K$a}3kHiK|VI?<2PwJ8J)IJb9-&=f!;75!I~KxLt)jq;6i};kesm0;SgH=irPa
z*{?jLVF2mk-QS<yE>8mF8oBm{r7roTz@u01d6(}iq1#zd-@|202#RY>y5i>MaHXti
zKlOc65qBVORTW`hIzwEQb?H(7_rvd9{Sy!K#MJ2*$_G{nUJxU5f0K&tS4603e4l4t
zl5mR%Zo&5=W;f~??<si6jWfZIEatK<)gsM~TN{zg|JrV*VaIC6e;@5QC{p#*5HYiP
zx`*9VA{lwKCitAZ<%|lNWvcbv>G>!Doov$^uEo&Q6;s;t%Kv!u#gD^+Bn!)xcHrkZ
zK?G>jZ^Ui?X<~s`Yso!&(hv^YG8r@{FfoE-?BbAsqw5$D_uD(gG&PEPWQGinzrCw%
z6@w&1fQhCg>Tp{*JVEksw7pCRz;x)OZzoc47eci((SCaqY2={;^zm9EDF~%IPUXhr
z0+cP*pEpy1{Li@j*dA&R*Von7wH8;J{24MhsI2mLUAO(h8;>;1aTzvZ@INzsq|X7}
zh2EkQW%2r?GK%s;X!|Gj8BVUXpGxFdXZBuhi{rp=h1loL03B8>*?G8A&5TFumoDep
z&nNgVTUS!(DGrq`AfAW@ZlBHq4^Oo(H@u<_A8^=eTYQP_KZ4iz&fU|Qe%ZKu5UBo*
zSzXu?L;VZkcgSKn*^x8d!cB&|%{KSmGf9`xk}<ehkSGW2nrj2+RhW_}am?9hL7!)w
z(DL5GDwNEI2H{bVvatu1%nd0Q5Hu|V1LUwr4Y9PVRG59GS#B4JP1bB6B@xKN{uzHj
zo(p3w$%2hEpuY7QtGr1PS1|idUx~0gyKOYQLQGTW5<nfju7T&3)Ey<wY1<nW_hE$?
zA1?t8U?54%qMH(g0(_l;Tn!wRy*FU|MNKL(td&{FVzVv#c+1o|y%AHz_Q=XKiDa$V
zLKYL(c0Lx_`k-BizJL20&?vNs**~>DR^Mq<c{Y2xRMXa2(4Y{Ai+f<OZSGyLQ!9ZV
z)g)FrnZ=?P<)cOEOXS5!MXT1@$XKD>$Qs<{%rso@|DxD~bI8P^HhwL2k&Dl{w2%_6
zVr4X-?QTEZTpmiw(%l??lg2;KmL%PwV)mjz3M=mlUESfZ*U>ULO%LnCC*V9Nlm2jT
z$DZJuJC^kG^tm|sn{8r{4QAOf<I-Xli*5}=TX%8plEzXM{!|f@4R=!aIMEkv#YwQL
zVKc(G%q*wZc3YfttG&dycCTDwn`zy}o0q}%eLlx`#sVe}#f;ZUL@&dn=X2M_JMa4A
z?t0XwsiQVa!VATzYf@Mrm!fe1l9_(j;`I;Or_S85i&YC<ub4ISD=%;Y`wQVK@uLIs
zUL1Yz=Jl`Jx(iRrZC9$-I(ZPK*@my;!N?DhzRPIRL!n$Ypuk}k>C2gDdKd8#X>MYV
z3Uj8?^Yp?ochRH%dHi5#PY0NvLvd>G{e#(qkxkvfqcrS|h#YX2h)*D1B4b{~%q1!t
zROFdKqhbezk9$m@4*w@Riv%Makg_d*r2VJ0K4@H}xfZ;r$r0RXj|^_U0e-q88MbGs
z<(oMuM%_<!oE2A{6X2myD^!JpEEF>r(iJ5vDmu^Nyys&MHi;6SXtvJ95CZmm)hmEm
zp~~jWf|aeL+H<2A<cn8OE|i}2c*`5%T=#fA*QykWMlE0i4Om7vVV?31$95X|`P{2`
zo16cLoDAjKEQ^A$Pinx2XW!K{7^H%{e)GO;)<KvO4tAqEq?~zkeEZX0&9s*KQ1|W+
zbN_jAE`a7&f3DX3W3}G6UJC`&`$-;p*Vp4zVqO-;JQiqMCcfO*`m<JC-6A&;pjl@<
z>!e;pf@CIT#=uejIYT^Cg6aFfs1gG##)JyGXc%FKY(4ya$0D5Y%k^EZ&)E6Li(2AX
z*P~{dL)VdJfV+b^Z>{0$`IB}OeQl4^#A>hee22gk0if0YuDMo1)M6ZRWGULm(rd^^
zKiAAq+!n;Z{5Ix(ctIb#VBin5ujwG(>!4cG+09!G#=W>+_4>p0W^8wQfvTtN17`S6
zuhk8&UYi}>i{97nG-Imu2=IMt9%I@BKJG5Ba8ex5-+@W!yROdmA+hxAg=bCEM}1}0
z_uVM(uGegX)<9f7hFx!0k~MW$+f3)#4u`Am{4K=4wc3elHyf}TaN#}P$|l@3-j}H(
zH~+m1-`%+$b8Si>Nz!j__gWmUkaCVwR#>V5`);B&Y{>x<-*eR6#@bef5qznsmgDAv
zHJctyl{?UN@{ZTVTj)}^8O88cM?pyU0v_!vO)iy`aBOjuH#p9XxLe>9$+szZ|Ngk{
zn6GKq?K?T_t2L<n<h#KxQ2qi1GwJ%AqbeH50&TH(l2$V0DcJ8dT%T~N8h1HtSWC$5
z+?)ij%sxG{xiRq&r$+hHx*mC%w`)-2z?@(1PHU@BwWzZKQ1Jlm>JwZ(&<X=Q;Ph76
z$=5;6Vt*zHhoK54r2d<k(VIy^3G}W}f7jmaC0kD1IJ8#hM-vpPC~y5X@Zq?ErldcU
zjq=Cph{+mIORq}Gshmv=j$0iTah`|_Y_*}Vo--OWX*h-_vNGZEJAWB=GamdwGmybv
zd#BzQqR&*?>t1U25o6bTg1uoDL|6E)wp2qs!?^Cp7bd3b*`-@nBN<*3pMKxm$mJxE
z<EtMH{$=<1+l;2)6w(L#o`qf<#1hB4iOM@P{3)*U%29ECDDgV)1}c;B|Hsr>hDEu3
zZCtt=>F$=68M;%XyStT6rMrjj?rs4o>28o#It59|c?Zrp{@*Wr<GP-Cp1s#zYwi2~
zEzd*SF5hBPe4bv-#W;d46+_`Kj-CJ^`RZ}kJ-q00u~WX$CR%L1LxxtFzAqtrpVr*z
zvL+$Z-F9rnV`52EAAen9?!5xCdFRH<^Vz-&x?YYLTzfaUw%Sy5PamRIW$T>$ctp7&
zdmF=gum!pBT|61WwmPlpkg?{VkOxnK@|wceAFJKhMp`jpw%E`yjWe7%eb;>WEvgP~
zOx8Y$XZyCu&Dd$W_$IF+>|IO$`oQ_fzwy}M@wEHv%H3?s^HeA0YR4-P6_HZVcK!R8
zDge^hyA_+7mh~IML0YPUR%WM;&c-$k7yd(qw&l4~zSzBKY_pEZ>R*<3QQs}}@`jvu
zmrlXA1E&=fH?i*&p;$k%RXW==PR6@p8|^)!W~{(F4QBf;4rgQP?PMw)lu`22`e=9}
z0`kPvYuA+OrDnWjwZF~PixSC4W-*H=H<h1|bsnt_k?VnWnSvLq?xW?Tc2H%jG_Z9c
zTKMhl79sHVDL+KD;XeU0_OKsjmNrYB$hhNdHz<nboT2=v$XKzSNvZz3;g|&py?|e(
zu7L>!PSxPu4O0tGVfLf9?>)No5VjieC(W%4y>J_nlpNpt58xA<r;R&Z-_ges@UXAl
zN!R_a_Um(|H<6sD7diJit2Iw8IboyC5}si!tsgJe5}Wdlo}|G)eKARK$)oQM*B?*j
zo4xO;R>DAN6%$VtzPB~28xP|feFvM|SY^TVn<#g^4fhO3@*)10?I&H=qNs4~1Z|gp
zz~2r_*1&EX8y&X}^X~DOci+Gd!foJ9VetK0^NyZOU%{oO10mR{>9p-v0fzALXRtds
zo>2K|V&j&-PUN5sdW<T%a8N5s$(@zGd+7Hq0{GS!PZ*-*e|)=u0BPG}ynmXw<%`LN
zs9DVn!I53y9M+jtLoa&=V2e&5>?D=}v6KDJn{9lNQ9Vq{FD&f`f8Iz=woBM<c-#+c
zryjXm=;!EV)5Fsp%x*j!`3l~z-R^)7Q+TgsW3IZu?oS;)S!=4YOO?8ozdEThua+aO
zP%eQ6&L6bueVtiOwz|52Y=X@lyq6y1O^X3Hsn<HwM_}^pdwH<7@~`#|+fwt4d;L>`
znmv=*rn;C0gSYi3spHK*I;Xvh?Y%6T<tIrE1>lc<^~*Q6Tnc?(A(yOfUH>E<XM5B2
zRAd-2nd!P%JT^=84!qEH)w20{xao~+_{WvKI!G^iWh>{Q@O~Wpv#aHV4X_|+_GvZd
zA^G#DGx5sI-t?-L>A{6nOd{ZSb^BI~e8uktUoL*$@7&c&$x-h++kgl&r|*V%suw-I
z^>oevRD(8aJY|!$`lr7$es#@M|LTe=`+VDV_lA@*<B#vt4!<P4H^lG?^A%jtYaB*M
zIsr|^S~_EG9d}$9HhL$gvU2G8W#AJfR2qG6-vS4tg@Iag1z!0MFh?FN-fk{7<p0yx
zZHtu73CoFQE_mR`WIr#Xfw25IYV(g@qVk^I87LzDo(Zn0Qb6Yf(@vrQF!Gf|nsW5$
zdizuvyuiKq6|#jSp4O9m2O(NCZ@BQp`TeUs-#_>*YI0!^;pdWNp<*!Z5#FG`Sq7$<
z0|t0616*TkYtcuPrwz^ge#n~qkb<z>E{e)sKap;39fCp~sTUu{Mk<mjgVV8~mtEF-
zy<lxa$V%{8d%^jgg>0=owir6ToDr52ZV=PeTyZmF?nLWwVxhG9c*}37ySLoL;t14R
ze2naPE8UfG=s@=2UUEygiBF8(+0a}zdr?~+ftcrH;wT+&;&=Z+W^5;K9oa?ODSzBu
zt-T}BZX3x{3Em0#@-=KU1TCQx*#@A*$eQ?b;;0!tV#MFL97mO2CW9wHw2*0~syQ|r
zCK%I+4;7;MhxPELu)P$o`6XSt_>q^-e@<0tEWL77&Q_K?WLVGta|!UR3b)j9y5xsa
z9Ju7gd^4aDp((FyIHo^34&=oJ;OEJl7H{tTW7}E9<96V<BN|YN?ai~1aI^Vx{uDd2
zBuh%AcD}-pla=f^ytJub`BukOv^hig{em;E>C9EzqY}U9STXkg1I0GtbIE3E{BAc?
zMb@N<(cw_LGzH0i#S@D#H%cXSEXibVJ&9ZS_Jbd{+FqvQhc8kITzEWOgYOOkANWHY
z>wO{DT*qJkoR9v#(Qoa92ne4Qy!RmhBr*NHS%V`%mV({TV;V;PjCE8rWzuhOrTEBA
z5(Trcg%wI|-xi_LRFxKxOB%0)iM-`f*~Ae60?!vBT1ta~lFEq)J}nGw(?goU?86jw
zbE+h{+fbunFqn}G1m!ZA_PX#~1k-ud38^Z`$`r}L`7;I+s!)-b=h;86Y(Mmo`!A8d
zJd2rOodO2_*m|yi{8s9rCEp%X8q+v({07I5IuGs$H8+Pf8*dTbVMGJW52J70(Ds1W
zu~TSxRXYtodIKm_AqaqHnuoMM9+WfPJ9B4V!P2~aX}=AE)_51*P!@f4cosOrqO1t<
zf^zB2qeK-_8PrZTuaJ73yOuE&iZqBRVi4WJ_gVe*ub=2X%$;bT50^in=E#zUSi}=d
z9&+4FaP}yy)htsdkDK-@QCS6=L$x@}=6#TkCp0N}GVP3NS1D~vxwUqE<hf=L3Br@*
z+x0x+gt$O@dHL2m<BdbD5Cdb3%KrGCD^~z3p9Z#EM-}-T2PlPj+#j1gwYQ$1g_Vb<
zL($ghOj%>p!iM~O!}s);?;>Oq)?F+_x13z)r<}SxzpS#K4WPKkAK<%N-JPtpc9N)r
z3-7LqLo1KCwwQ^SpM3%JTZP9iO2psTOS#NSj|pMe$RmsP+NkrslUK&IrLivXb21Uj
zW#f?))gS`!UJxXH(QGz?V-u&0Ok8jP(kh4I;`|XKIy?q<Oxe7Hine{Lc;a1dB-(VC
zl?4~=Q6OO?wIsY^*}#xZHbxAQR#4mxGWYiLk~(^MG>WJleZwTuIbtd*>;rWnetf4a
zC07^Rz0j}V94!%Z9ljQ0U%X)C%A0sQTuKMTEE=X>bKlZ;CQ=5(w0-YJD$=ANZr5kC
zF_dc3=?o@H=EmH)%xt<8a2hku-js&`YhYHj5;qwozDP7^&|hKVJ7R7fBTT^`992UE
z;_q4-kolt^&Thm8(*NL(Vng=*0hAf(g#{Id0f+^iccE0q=A-;sWZlh5Y78KIDmb}a
zBv}*r3#o47pJMtl`sTGtDixM*%B)tN<>}A4WH&Cp=y2tfXn^z8tG)&6oVDbPh=lGY
z>=iy%xT#OpW@`3|ZwJO=Q|o@_VWt&Bx=XsM2rRrmO1E1whs^+cW5fUXO@iVCB@$T2
zASIWWTqdr~dxCWQ2S`&)lT$|#j$+I)PsA-$d@pRobx~ep0<9JRv4MLdS$L%inix^g
zQ4YR(Ry+!*-d22u*vjTAM#vmXC(A~)jwXzQ22y7fYzIePp@VwzdE_wUiLAqSU)@Ak
zCZMz+Xwg6I`n{n2pBK=QF#OvlLB3C?2+|UzC+K%ihV{I9&5Wq6XnS*RKN_R0GzpwB
zEy8%j&TVW@$cuWWa`qaTYdaop_}~Y_6#fN&z<W)eDq-NA85=DA>4uVQ^2$Dmbnc}M
zg~cOp$hXkIhNYrY$Z!t2qG;=#Q4^0q?m^pQiK`3m{-4d0%&6vf|2lg}9g|fyCu=5G
zujI$;C-O#$G7HD3f+c8>id%f0ig!RdsmWvfmu!bFmx_9Fv%PSjW^)}YJ4r&^){CMX
zmDK3Vz=87XU+1+hNys{xX!dn=1lCx>d{d{W+7ogOK%aSxJ@z8*Ma1EWI9xc+ViQXp
zzVReGtbH}wy#LvuR$_<EDqvusDc>QP5R8#=$e_heaE2Sr3c#9_17Y!$$VHN%Hw7+E
z2eRXQcS*?CbSUPzm#HA8_?N3;_MUMsn*!qlR%-DShV>}SLzgMc<v}0TJf75$l84N~
z>xN#K1PLDXCL3v<x0=FR9)}cfn~4No@1cEAe~EvPKSM%TFtn;YF@N5U*zalHkM!iZ
ziWivlPXR^i6PuT4=JG)H2!K~yW})zM*4D}w#m+m<$=!#ni+CS2`H|Hb5CLRX>NML7
z`@@RCvQRaQ{f?W)9c}X#@)frwo>O_)>ZT0V<&0kWj@f?_HzTl!IDNa*sg;hXtv$td
zNBDpv4%q*#P;XdR4vi!!@%V;?#it%<;)X3TI417d-roDJQC{f82`9!2aRPNQ`6MP_
z1QyhN>J?q%AJ5nMOLOw`x9P!R|H35*tP-n6Ugaz9*pXj;sph=#Xi1z;NRYi>Pw|&6
zJB9LX=k^E>OwyB4$fV;<4%f*^Pd;Rcl(^rcCwu+hg9NQ=)Hn9htcWL4)x(IdUy1vG
zL%qmMOF6{@MkM$u^>u9G(#4_eiCV4N;4Pc6f3)f_y3CC~sE?r~LxJugfSi|mdxBI6
z+MuPx@j`C6QA>oNPsh9ms+3&QOHoS%jOhh-1z`r-iLeqM_d^EtrtHo-tMN9os#Lu&
z4}ZfClKuTQPfCmi_q&f>u;LnRTDOC03?g(ZqNK4Pw3#m)mAqkG2P_#FOa$|pJlC-5
zGiOQ)g_Y9cu>WpX6bfH+Z5-g*yf&q)GP@N_2N{$rcOY$}NmU#txr+G3Ii;l+AA)HX
zrL@%-wZ(#{B%fcFWci76afiZx-^4Kj(K5s7kus4kD+19UD_5bA^IxaHCg5Dms|593
zrUlrmPA4fXL^?iZ?pF;e->iHmm6l|<VG5UtD7WKYh!)(tQ+`nXQoyk7L_EaES;|>z
zp*hnN^qiuSZ!}yqw={CdwpY5;OeViM<C}@}l>p2`n_(-2>YqnfzQ$$IV6v!~`+3ao
zlZd-zR+85~$NHCdv%P?|aXNUO@^v8gR#4ci?D&$IQ2;e*9BLgri;Ra-b|p6BwNy95
zh2-Iy@yD*sN)Nv(%QVD|Fk!~Y#TQ~ReMV2glxQ}7WwRnHmh2!YjL=x3$h*^;zZt66
zBx??iN&FGP2H^&73q>(R@32JDuq8BzvTV4rOvI{;jq%*&{`Z9tTi5ozpFV;}@r=h#
zAJ>DZOq2>nPr-Kv<hFrPOO~L*YL+M`*wz!f6at?FK)!!AV5)xnfqkX#n}}Q@CdQOo
z`~$@I%K04XQTGGMGl_SgejRyH<Rup|T>&4sS=AP2>)?kB`<Etonxw=ORMA9n4CO~E
zs(ySOwg_gag0Rhx?Fd~B@uY13-@CzvA^Rz~u{RcNBFx|x^6K=Kpp;P&NB_h5(`n?0
zq`5cyy`*)!lSv|3z$!2IQTn(`fYgdT1TumD>@tB*Ubz2=-d{$dMi96ka!{{PV>(qD
zW28*LxJ5l`b?{?=zC&?Tr0JKrCrjAwM=b$C^njVh#%M~(NSEusp`NlO{+N8qi<FI7
z+$tX3)y-(iOz+)J&78)MLkbyJ3z-wlMmQ~26)O}UmaIw)7n8X|!erJNpfES4Di_4Z
zi-7Um1w7-%`2A2;{c|V73MFF;&)!&oNAMj>1esWACXFM~TFiR@SvshEIa32cVvxTs
zcPSNtuSgz5#y=o~X^8fBXgI`E7(^Agqp;SaTczyEk89ccBU1yO^$8<kuzvA#LI+d5
zS`|slGU1GmB{@@yB!ePoNx!tP+ja-la?MzYjxrP#VjTr|u*~HZ+9-0f8&4?#uqi&d
z%+mR=n)BHFbj`vYkmG9L)1P@IO)UmpiT|;~Xqej5;A3)Wxgzd=>ow>YjuLEn3Kp*y
zwqnIh=$MFt963yc4k*>!vd5X~&^&@n8naDRMoaY7I_q{AC}x#(OB5Emj`~fg|8k}f
z-pBZM11S=q4XkB-O1%@uk)a+KI<?v4jfVH~RyorPXXF|nPm#_L&NNnl8ff<eNAE<U
z>>31v{@*j08P?u_b7jf38mK=ZM#G5N2Gg_$!^_3=3&jy*-iudqY)1U*pPRtibRyfm
zAMi9Lwa%ol-wpjx{Mz!_`O5daM$Zxv;qq=U-Lt$X)PJ*UathE-;5eE@F_wQ@CIa>5
zH)4&6Vj(a(?#!cEyh>xiXp)^X4)o?oJWjf-302b>gjgc~-N0tCN_)~H(1aq6$ZCwM
z+_}>&r?;JDYsL}St*qa(=b?sUUWeVXR2=axyDehg@qh97BsTQ)kB`yOqOmN4fN|O)
z^vi@%!KcR1Oj4?ggedjeX1gh@ujY{w(y}pM5b@5HZG6?xlONnKLo;JE#_Ylr6In8N
zc5f8`wEu11>yXsEpLIZK&%u^S;2IoG5P@j3+&qm`<pvg)SU^=8epEA@w&n>;`r}V#
z&tGw*3`Lq%MZNAM#C%o60&<7|t(QYsDQleWzQEJNoqYAAG3`ePU+qv}7-oc234mQA
zFwSwT7l&|6OCJLRm>G8s%q<vL;TBFD1Bn*3P~iOcAdsR+Gz>kwva*VhhzSM@U*`1M
z5t)ya=8S_;6c=!6MM_W~{i^UQ%tOp<NKYoShHqcbIhP_z;)qR3kF_f?w-n|-K!a(e
zOj5qmv#iQEv2HBC$8@1}dE>gCd%29+BVey=Io1rSor*VEM80jYOjuy<w#@JfnYc^-
zz6doQ&*&_p|KGIa7^8oI0t}xp?RNHb>Llvy2_9s@@Z2Eh@t6_)vHP7t&x-%Yc3e88
zGC&NPqbVkAd~`<JsQsf-hQz)8yinD3(K;REy6=V9LctyA&$~rECLx-59Qj9+IzzqK
zGa;{DZQkY;R2uoUrnVuMq)$>vIw?6BuAp;$*lYdRiA0_y=D)9|l{JV?5lfu`#M&JZ
z&^H-abL3m-4$gy>vuU@QJu7N1wFr<1KfyFwv!1eSG)&B=L1!gRKlxc_uQpwJ0~sof
zPW&9zkiV+m9v&E$n<Y7CvBbqRn-j+I5v!$UCiMpFRD<s45W{<@=rRF3%c6l6zJ2EU
z!$Pvc)K<Yji_E|I$$iMeD<pf~Fi;fqI@<2oM{P1@GZ?>4a0Zd2?262Zscm{v{9Dd)
zyVu`&xWgLiql3zgskx8ROkvyKL*mEFQjrOSLm(svp_eNl2mEZbc=a=vaCWH?N;amG
zK-r?=O-GU{ppx=56ubXtrfp>X;2rrAp@}jHdPE$@VZeV|XNlZL{ebJq_A~lN1=z)}
zU`=h}z<H9ZT+I05duvgr4Tri3644bnT>7&1lVY{Ua<hJGAno?l&z97<f^L2m#9~77
z*>v*i_+h5ybaWExFUe@o_2NY{Q{39DhVXoCiU-=XSw&aE+)f2@j!jpCDtdzM2|WKZ
z&wrx&-rk-o8tuyQo1<egGK(S&V~h-o8^#Q^Sj68A&epPi>Bn;Zj@4)>w9r}~csl;k
zEx~@18xqA{?59wLK6jf@`vB2hvP+`Y>B!QsSq*g5xxvIq7<61ZK{>ebCJJpk+q0z)
zGl$L#zzj%#V(Ts)n)&GOXD}0HPZ3Y9PwtlHdWWh5Q}`8JutuTPak>4KKosQ7M`)L|
zt)d(szU+W?f(_8ZDVZlO!>upo1xdk=F2@Q#H&|YDw{a@mqk&y)LcG$f89Q`vgCB{c
zTrx8=`wmJrai@!j217<PcmBj~cOw=_vdZjctj7G%quqJE=ql?L`QMj-Y}${aqdtXi
zz2lk&K-m>7;LE3)D}YEla!`HNu6I-kwZiyB0tcj=xA6W$!goO2guKV%f%E!}3(#bV
zn&3>^0_X(+EWI$%2&NDo_%sgk&97Hs_|=XyCBONpb@gi793323(>j}1nWr&Z5;B+?
zpkHxi9LJKt<)bI`<cmc-Sqy>yM*;Cw8tk#EUm$`{3nbL^Me8(k*>0+zYkn(=5<9al
z*}k%@Iv-(O=kzfzm&H8;jZ@reyU}QngmRnjrOT6RmgTlxBv)?b-Y+#!E(dNT%o|~w
zzJ6EF6sikrH?)&){(F#TS+|-`>f8RvF)l=K>K_|;N6sSf7c+H?K~~|5-uV^WE0EMO
zbC(;iL>f>5O<v(vK)TsimX$l?N`D_DV@XdRIjT)TJ2WE{sP^YrXpB!T!agVll7Eou
zKuEX9#kAj!_Tf&OSyzLFP~;_o+sJ7@ij%&kL>Doe;tH|ulw!1DyONmkqupkRq4I9h
z(Yz288@?+=ZvKBDLmX2gRb=VmfinOMwWVg1>Da5XD%h*`&$I$b_6XlnQA*$DtJB_7
z=N7#xtP%5L+(|&N{*Z{4gDd0?X?F!YtAn6eJk}juE+g{1an~+0NNEle37QDJ*p$eO
zK5m}>ka{8s5m1l?l+RzghH-fq-X#kU`o}N8|IW59`7d$}k>xi53rr-E?0z!OO58uy
zaB6U{bMkY|yf1?ZII@Yxz-Wd<aJkvhJw6C+@~uzhZYzNB<K$O}-52pC5j*oo>xZxw
zg1@bDXF2<QGfeW)&;j1cI<=>hVy8FHjx|OV<_?%U>4V}BNXyvMd9-JYI^<k;SX1rr
zXBGcLvc!F&UO4;6sM?!IqSPZQh_9o!N<u(zwm-U2?f~VVY>>sc-tRZogIrYsBL!xQ
z!Dz78lD@~*Z1B(bSC>Ho(7n)=M9I_;P3hC~bmvAjbjNMsQ6!(3-UP?Lo=C&h7=nS(
z6~Y&LyAg~Ibn&e5$_8#EO;+U0vKM3YSR%*~ga2|_;#S^yfo~FY3dtmzs<P=z_4>b}
zd!7gj@<99;3vNU>+RzLgORN&sRP*<7u7h748kH2xD;1I}>>8R_E*I)(MW4LoB^||v
zvU^_83J(y2HG@xOO+rigZqVj61Fg`<SF=~z+qYNejz2g(6865?hpF~93YmA~iW&6i
z(nZXp)J+!r52=t1k*~BOdcJC9Oo1UUU<yJu4m~$L!~tAT!^X7|$@8znRWRmXNtkEj
ziAiU`Fc}ybl@!G(v>Ea{xTLV4^iM;KcP}tsX;FF_C>Nf^d_{OIHW%dZ{=@~n4H$$s
zhj=|QNRi25fgqd`$&qq3&Co3>Vq-PyQlU{#PgU5zS;&x3o{H8q;HNyAaupJj)>+}3
z)0_GGuIic!Gya~`K*}P6{e22~7*g`uXpMyxqEn+7Y^%XzN(=ft1PCW4^m(xc7f<0!
ziHsfScsUCcUU|n}#a$?w*K(k?t;gAx+zWK`F`ihPh2Sa}qNzy~G|-f6uVO`A*N$V<
zj)TInv)BSlz<)FMC3+_lNlxM*2(aci9xmV$7-N@R))!B{&k7xDjE-=#5$iBLUnSVW
zzjV@Uli;_j2yHr^j;?Hz0b&*p<oX`*#Tu)0(aYm1yh@}m{|@FvLUC>ai5!7bwu}ka
znrY2}Bn;KuFK(wM;#Wz_=OHH?Y5AcT^zRmgww2AFfKEeym&-9RWgCMYBftPbsMuVr
zNuU#K`3Xtaxv?!@NY1!G6^6DtpOJbQqHQd+!f?#hfy$^^wzj8ic1YiU_WAt$hju_{
z^Ch!$$=NKih$DnjOSx_x#!yuxGy%#5I9h(7NyHsRu!P0^=rXioOT|po%AC@|bzp1x
z^)HYlZY8o4oZ>gw=>;=^0Z=cfT8SrC7}dmH>vv!mdyLbfhm~a2t0PvMc&(Ib)e@M-
zC@4LocLHguys%*rVn*b~CD|@Z)mb88s3rnSk?*|;oRlwm7V1{fBf}7J5ae!gvPg9r
zSww*4M;?68b~)Huf5V3m)^P_ZE-7Ss06A^y%rV@#uYKIm5$+Xo{Q7{1Y{_hfwMEX5
zXu5rZD{(ZehN`p#DJ2=S9E@EgrqlQ5BhKHHQv=d&j_KNK5EWZV{ZyGnSg@VE>?12n
z+E73PP!K7Y?d8p52Rd*xmjEcIgp-D5PIP~ATloGx-@K)Vc*FyH6;P@;%3Vdf0nnnE
z*vDGX%=45#<@ocGt3gI1)@$fi!tY9H8!F=fat`lqpaSK@X|rDQ!lz-2UB6^rL}D??
zsh_J@1B^lDKaYkGGLF|IYPb{%sAuv!-E^YTIaCfmsh#U!qH*R2780HLZ3PnkFN8kD
zzoxGAxK&vDh?d>hH7#V+95z*%ft*=zK?zi4vJB3#vrG9i+zek{rcPrjIhYLT0?|BY
zS_DHFpIx2Qnt1HuYuz4)&nM<5&}ES3X-yiXDj(w;#OLxT1F>B{2DM?f(}h?eGuyZn
z7rVAnvI;D*{R=#U+%X9Yz2<fw1{fPBX>1hCA&{~&G^o^0-8`yfG**xPd?)37Mr&&3
zm#dHnGiWp(e%bOg&nIw5R2t_A&5QgWMoMH5Fy-uFm)ITP>K)t->Qg5yEEHDPY&dy8
z6o_wm;i|;7oleFfXErq!Kb_BP*Ur?yqXPdo!&ssZK#2xQoM=IqiIf0dZh4xHtypuy
zq)xZtb@mvg4Q`;)K;o@Gdi0mo(kymo30?dqe5s{!(@Q&g%JGkh1r+}t?UZ8}0wYwU
zNR=b<99@-oJgTe;hW73<a6{*>26x&hfM&`_RRmbrQWeDcAZ_J_*?RLPbVQp^@KZSd
zi&7^8?br-urHquF;Mk@pH_-Zm--yyY6x`bo9^4az33VI%c`4vRfDNF*J(o(dwAtdm
z-hzzsUv6XW-0#{A_My^z_T?)Tt6r~g7Q<EnmFU<;N@kmCEE1Im76)erkcQ6Q*o@Aj
zQDCkypW~0mp+|C2uhAV5O!U7oA?_1p$BktY0_At%I4BjHpu+T`Gl$cQ`>qT0xn|S$
zW|2${X4N1)ZyI>h>$@EY-nMF^PqY==kmidWaWf_i#8U(Rl87?|LNj~(N)Om1jLt4C
zJ^Yv$+BuFM?L-IEJa0^ef{q~|p|{Gre05=Z54i8Oi7E^p7X`gd66g5;+&2h)oh~Vq
z=2I34PB|>r-VOvIT_Ie!qvz&hrYq`}ZN+g_$Ql23GxDNWGaE!$#*7MU&#5*-)if?X
z&$jHA`i$j$j!}cqxTqTvj#eJt$t{dURc;n`{Fa~h>kH6?W{jlZ*~)v<l4@N70nGi{
z8Zsoa-4p{s{LbkW5+Q{>(HW%wuOoJidE|<`p5!-(8v{V<OuPZ-Av?_7<(R60M64^V
zOyV{V^B81v6Ezy&$%yRm?N+^8!`+=?N2(kcnD+B8oLF#<nTA*kgr2K>+#tFXE<1X{
zq&_x!A^6IRyp=O0J5(Nlz~bs%1~g}bF9Li>u5Lqo$!!$s!cMR<B*%TFSjRAbcMe2R
zTeUD3({oQ(TMw%fV@mrv-uK{Mm``3~v_Ds7V{Qkr=NLye_}i`;NF%Q<mao)o8U9m9
z3`CbjjMNM%mR^vf41Ngb-|WKA{ce;-3$peink`st3^FMw=laLKF8oHMy{3wOC#K#j
zzDyLNM^95SXfy4CA0Qd21~=ow+WWVXg#_@gHPX7G=wXRD5}(1s!>&Lj8(l6gwfdEH
zFh?9Gqj=&nd7I!6B1egA>N2|$X@Qf)ml=#d(KZCVBC3p(gYaGRK_n=5N}&i}3=5pC
z(c$9S>S5oLy8JMrz_8ogm|8EL#;+ClqT$5R_%&J}E=-%8*N<?^i;`ba08h7uOZ~q*
z472|I_Kh245CjR5(Bi9M$%%$2^)ty`WP7}R4J=kvbQnR?U72k16C})3!0?~ayJ9!c
z%)Hla+qyL~nj$T-SPaZd8G9J&#E)3Z5^X>ShYMe!D#bC+jiE<zR1gz!mZU0vPhlII
zj0L&^@W@e{r9`w$t2mSmnE|p+*W5q`{~audtx6G9M%>}HA7UcRU_KWA%Jokvn(~ye
z$0F)Gh}5TGk}`@jdl+1F1s0d<{OA+8A5=RpR~d0KUuzQuLh6;5s|T%p3A)m)0)Yo_
z#h|II;|kh=ui-38a4}JtS?Ljl^zY%UJnz)TSorzr)}k5f9X2x$0Cv#-k45+7*AoF_
z;WwA|dRUYbuU%rR?`&Oj1k<q|PCvxN`;~5>JwiP{lcmg+d-C`UUeC2(*A*9{4dB0X
z-G9+%oaw$`{5rKb7(OAj-YSY0Nd1)AS7gr4CBlkPL27am>-ji+=oYnA=K5ygY3Qim
zS_h@i^I`)wazrMu;O8fLSC{{oRuG6|07sO@EEkhFqB4&OkL#JnR_{7Ek1iBWAY#qv
z>XwELMw>{oWTjq0Ecr<TA#_P3vqFtEvxbI=?(vtb<-21B?X-Y@Pu;q>oawS%sgto%
zWIy#k!}L|)X>|Aibc^$DF=5T4!NkQ`;LNv_l_>NO77+E9>H>Ig?xzgZx0;iGKM!R~
zC_7$1yt?}kj>=jLgRP+1o}?#O8pY4tt@24Y_>N3Fr5)4+GUsOC@(V09b1~WzQ!YJo
zZjLQmD`d)6g!DR|LtL1QVg$P*(-<DC^OawB{+j^Xhyb{^nVDMG1DHis0(^Amujtgp
z+|y@ljzU4nL~}@+-O2^pltB8HG;pJd_1~vi!a2Y9dYBAk&4b)V`;e9%Fd;FWmS09c
zJiUQR9Bz&eV24a}ri`=;%o4Fp(_y##ow+Y}eX8eYuCCknc@|G}DDR&{jG-;9dg7^;
zw%i}8nrI|;;)A6vZb-($cIk4Gi~8Onv_*3Hp#r%Yf~cv?NlZxzK(blUoi%uv@5kSZ
zyX)xfc0^Z-f_|MlmJeC$;HKizPB49Nc;-&Ld6krFj092@j_s`N$3mEJW?{8vm_}^^
zi&y?5WTXclGk43~Qjs7~wwHh#fR26UOkdu^uQ_U1o&c2++7mb#h)hcG!>_wngbH1P
zMU0yJ(@0raI%+-9eiTQ7S!q6}i%}uAHq@OA1hnzDgBeB^9g`)p0WNSh4LiLH4BgyJ
zXQXoT|MO&cj2&1m5!Mzw2S1#dZGjMB5xOn%Zk(V;r?@$dHIPwPHv~o927=HPd4X<1
z&+trR`RgP%oto|g<r~puYIy@IP`vwi^c;P0_hb@BI7{S+j;(Z<EnH9yT*c(CBP_~d
zN(xS5C#mTz{QqWa_u?*UewRrd_k(FnA6{3Y%RD~i9HT;PO3gST<H|Wl5p)?Lwl=P?
z4Tc2oq(Yaums3X;2D)?Q#bQ!!ARDU(dL}KYTD{g^{MNhPAyY_)de+<t<q&E3xy(y{
zJ!D*TVjJ%q{-f4DHgDyWJNq}CXD~>I_gztKeoZo@2>I`|7-C9GCVt~BV|L}X`s&J_
zRv}uvqj?_}$kJ~>p`v++D$5J)SPq+1R!TzT$uW9)rmdb20=rcsce2EQ(C%koLuW|E
zhJJTLN<8$`VHgs#+U2?TSq_nhiD{ueRe=X`8sUMPrb*oDrSOCW=!#z(prX-j<{0y1
zV&k|3xyAdD^Q@)Q9{(l`$K=YOL+(L^yAeWcOUO;4oT2qkmp!MD&~nF&=zNX3smZ`)
zit`Vwi9#nTwcSegfMu2+HNb>E^&D4-RdNvOx%ZFk^Z0RMIsHT=_x?`^f=|&3(&!*m
z<Qqk7LNkxBzFPa><pU?qAwL?CImr=Vc>kCNII9|7cKCPv9hOsj*<&HhvTaHn*;|Lz
zk2Qwg1?g_!Pd9DyDQx4_7n|~La;$ILYka!(Tb*b>f8Lp2TpiDNi{IkP@3}Ld({}1}
z)BY<f<FqZ5>><p1b2i86-+fvC`Yio3Cu;7mALACegj6c9f{X%xK#y1_uS)8^14cYB
zi1^B`B<jb-x#?*rW{;edKT#>_FY=TC@zhmhsR_wapox*~F@s1jo{xJL?y@}VnM+C`
zV><OlCkM08h|x5X^c>|8e{;r)<G!i%y^<{}w81NtpRtt~z=0k)7dN9ES3|vUR3wNG
z74Hn95?NE-__JlR3=wrsN^8PDkuBC3=CFX5lEi;(#rjmXf92C$-pP5G!5@b@&pQ45
z=33PA*WrAJi(gp5{&3Ah_2c71?C0ZWMXUG2qVM>>9jzgg?X~q#>>pM<BA5C?tlR@s
z`@_Q=d@QLko`jo_2`5srrJP)qyH=(*R-bSg+|94i))sP`5jC4^+o9cXm&p+UY%j?k
z;+?PT!Rn8PsZEn9v0IYm1MA`3{$Z0#sU|7)F@?9eOT<jENh*f35Bm>sL^SndAM4MP
zGnb7dNtwiBD3s|T@{&JO^WOQrPz~&T!$0*lpw4{_@0ZM$D{4A;k6w8~*nj*h54rr@
z%PfRHmx*Vsok((Y0n)gDX6M0Ot@uhZfm6^twYD(po6gIGq>H1FM^?p_(Udn3GTd{<
z6ho9_UeP@r*H{~Bq8X?8dH77JKvM3s_S-&FFwg!5#U!ayLzPbOQ`T-0kOJpk`nTJc
zE62Ph>OK<sF=&WA{2!Cykv1>J-u2H|MJ!@qY1g;ns{*pkTr)pW5i(rZwV27@q}ty`
zcIGs~;bqq`Ep>7iS_HI^mToBtsY*(KUAO?QQ*=sVO!_c_sw7Q=`!erMu1}uyj&6-%
z&LXJbj<M(k*^f6#%m~)ozpif2v)mPnhaEkx5x|u?rycvRJb&-xeBW?FZ9|VsF{~z$
zcOspE`uDeyo{G@sBZa9gm78%9$iKs2&13^Dl@tuyXFO8YR22JNx=-K?HzTm5lc_VT
z8YxDGAG|tD&Sy^s0(F*{E68UmLpgs!#IgaB5PS!+*lS0Q8g;_E^kmE>r2t+L&`6T?
zZ+dy%XiVdHc%fFIu-CGohMnuhuDvPErX83FP14=BqL1(DgDP%TRUcWM-lt*(%zCF`
zelzU4oBeg^cFRour~MZu*4Be*4vUkfdll+cV%NXpuk1!sZGB9}m3oBKCHu1mq%7LS
zvRsvypvKbjV=yfHC+96Fj!J-(;_C)=wsX5M^BqheoiA(2Bk?dt&yArMhOo51C%zrB
z6pL12KMk?V@tadQ9qVc(vRQRWkld4Em;T(w<vKo~N{Lg1PA5GTt%65fulC#C$$H_H
z_`I(e@9)T)Pad3Ads7}A)V@V}M|@Heauu$H&u-&iN?4(T5KI@!&Dae%+}q(QV+r}6
z$Pi~A?jLs;hNxuPJM$J|Fs?oUMCj+SuKvuYNuE7F&^hV_FsD{mwF-2()mmxDI9hGP
z#@9o2=|4%mI$&uNf^?&w1yCHAhp3pA=&`kVewy)(DkU(yTkI!X7VepcgI}tptp5~~
zYMY}juPcoj^g~-&6XuxLo3O^|QRpKumOV+k%>?0UL#Chi#rZ-2eHA9#9Y6{yZSFy4
zWuhaL`Np?3;K*SocSG$QD5t@qo577uzIY<6Q!|7JGd-D;xRn!^xRVWsmQWJn__Ub|
z+H(~Z%L2*z57ma?R?^<q9k0ft!#f?WT{r6c&nL?~{P6CTcP_LyAMii=?&!4p?%>+p
zGzikkH<#_n<@VvflqBJPZ^YM^-YY69WXok?LS<5bSo7VW^$cx-zI?6JLK|>wytSS;
z+X|Z%N1BLgk_gGGafy%2)6G&#n4b}m*L*GUzClcyG4L-?9rX_gD*rBn_S{&%QH(lk
zrx<Ra+`sQff;hFMht_o{Dln6oM}o$Ly2VPH4zCDGe!#O6SBCs6n$iFVK%U(@D2_G^
zbwT&7+**k3hq)y(lOag}GY2|Eb{AT;5I7-iddB>&BaZe;xKO_=k21K=n^O-I?60C$
zzv|w3-(i!sw`gV=7Pa`yWwTj^(1HT3&er<|g?}?ACG0~GkLE5USGzy2A@fzi-A|t(
z;KtR2t_!#pSUc5g>Fc9g{LjbPw<TaZCp)tz$Uob-s0{JuK&YMWJ0l-k$?9WBz<{!b
zFBlk~`viX<yjMpLz&G>)I5Z3{cKsgz(-2NCbh9$Q;o+0ydQUg>B-q&|R2a*8(wgG@
zyU+6Ts363Km(h50x$|MAiDjZ2V!pHFx4&q}x%Y9SE4IBq5Wc-WuKPzFcZwxekArA{
zl4Ci~Py;u!HHJ%YAg+-*q!>kGoV49Eukxb-hh_qS@I%7J1bS>ClYf&yM1={}0c%f2
zXL7xmDiTmgY#tv%K@fRnpM@maMoeHN#T*Vxdq$ZJ0n@d7Ds`k?1<i37KEUyaM8Ikg
z_4VCRq?3bC68y_8$<*e0k+mn^28&mMNj&3%8<meg@SdyJaD%i=`a0^JtSGc(1e<<e
z9G*g8TT@lysKc9M`-Fd9r`<e^9OU`9n7cSoUx5#ca>g9C2pN>vtQx_T6fxl?;7jj@
zEA2ji3Mns+wn@SxSHSI>t>KDRsM)T-HE|cfJBAI}v3b~S@#+mgrc?WMzTse-Y0(L*
zc5%x)fa2i;=C+66{ri-we;Pm}972l_@KY{ewAZXw{SMg9JGa1Y0kC_$=4RB@ovU#A
zwO1g@<U$52-D(A~8VNesX!^1ue&d&dCgYi!chGY=5A$-qr&7=<%!tbD<=OM_p8E(-
zkFhA?rjQc+X(`GC%B~Wa;7YN4&gK#lcp&ByWVtI~6WVo#mm6VYgdv@OhzevJWWlV@
z><m&FhPG}1{A#~3xIxjh4GpmfL^Q#5h(0E7^O~;`PxeL6BzA_(X^cMIeDJvZ8LNIl
zD{nHvx3R#{V+Z;q6*JC79JN<J={ynb*2=3Zj{0DKPxYH7hU2!iz>$+xP;*bxh4W$S
zgT|ivU17bRJ=o09KyM2XM`8wz6jzXjzi@4Ll_TChfA%yhyWsGoh4f`>d&Zj9+^qYc
zNp_Z3Z$V}<y^V=s2!A~luaZelq*JC%IqeAYMbMI7qv)&)=c^5GL?*NXr}|7ZzcgQ-
z7Y^K1ncb1EQ5`$n-q8<Hti9gvgcPu)JSI8%Ws_J4^b~nTfoK&toASxhQ(-ZBsQN0#
zJkhUPY^SM%ShiJo=?b83u51@s`17Ov@L_7_gyXK}M4~vgIsy*J+uDR+B(QqVshLYc
z_{>#U<5HOSA`}u>Vq=9tB;@DB1*a>w5d?kHfREWr<T;O*C7W(L(%T?hfY5uNyO!hA
zh6TSkA>r#`Fq_4Oj3DyTX$ue?LtBwV+$pB;{f71xQi^SZ^LD1-ZPA<RyQdD1hpvaB
zHwyIueciEx+9dCsqTZO7bSD_f%@{ak8u}LKy}=MXi+9M1viy8DS#d$hsgfdkE_c*}
z2#GB+8Sj0HlYiRW)8Efj>`c#)F%O%~91+DPu-rU5(I$+6iyM*m%=h#Y+=(rRvifW8
zr^aT)FIie#q!dIThvSaqqyjTX;=0oz>^G3O4DVAmr~IJ@-#nba=RnVX50L;T!r7kk
zEj?uZ=KJF3+vHI6=ZgX;^`B0AbQq@&8lk;bp><Z~ZN<Mrnd|V`N-E&@=orhG9E&d0
z3FM0!Kt38y%|jp3e3;V6C@r(K^f4{Fs_??x^$FjI?ZyEqtj^|v6egGh3?3Y?6^{5v
zeu%rTJhyb_uV*%wOniKI?|lsb$Y%QCnbP!QuKOj8%<zuKgU|V!s~@-IswC*>E3%g@
zd^EwOF2ayFhR~0Rz=c<D_C!eF?N6fkO{&5_s1GV7_ut_=2^DoBE_{z8!aFQH1lSZl
zjWi{hicbbMJKiM8JKlzpDIE3P{&>^wb!F2c6q5PI#ZPZM?RCNqFs6ducQ117Nj9gC
zqu?>&$WuT5{5locgAHqVzx#+5&?1yX`gV4Ub|uM+d4}Bjs0V>8?9)Fpnok`;igSnk
zpRQ^!T2npIUFLw~w=J-W<>x`3!qDH*^^ibw%LO{7b2hQN*PF{svsH>H4YV%M3_WSn
zj<Iv?T>74F=#XhGxv+SUnU7wbp@(@wdzanT8fjxZWm#V;VbI2S3uvSbzVGFsGSq%g
zwTQB+bH1%4q%-BZWOzi?Na^zrgdACooLV{vg-KoCbjYe4Z*^iGy4KAI^lrQBzfEFO
zZg9~>2Ew%dcC*iP$U-#<k`4_g$X#Jc7Uz;0b^H(;O#*IK@;D_hfG<g!Nf-g`^wqu@
zl(VU#VJu78+Hhjk>ugxp$dGlyYFyl?sUbn%^f-8IT>Pk;QoK_~xEGu|C>H;iLPWC}
zH~pA=dsOdLD6H~F54mmj_Mb8j_tfW+>;vaYSx9N%4Or`vWbukj4<+5x7~E$ac%xy6
zyErR3RyNb9`-s=-;M_EK!3@!sV@dBJ{8!%v2=%WO`rQ^^QFS^cDp1jxKt#>Sx@blr
zl$Q2>b{b5HpX={j(?2n_s%dxoV15rlHXVMT1W1_)Ce3~WQZi*p4yky71WnW&vIuWB
z+{t|m2s87tg9t|YYoB(_vaF-y$()z4GYShD*<gSGnk{isZu{TPj-{FEF^3urzrGK7
zE;p`%?C|5`K+9y#JZclnrWV9H(&LaL_gzaO@!N&P)qV3~3eXxQr{?#RlJo2NG8b^i
zje}k2KUKGQCOqVVqEBnE<x?p}J|S5EklQSaq5p&y$j{2P-7U`?m%Y<!Duu|$ls_!m
zAUcpQ;h)MB;;g~l;nI#yFu&v2`6vlSfQas1id{K)goO<&6wjrZYoi)!hGhn%{(M%J
z_CEEaeo;B~ieBBh&`}u598xL`X%_klSW-;Sq>dS(L^~az@KCcAD}n?G@~jsYxn4WE
zoN|)uu6bBo10U^jz;4agJ5{dj79QCN`Q$?lr|AiVVTZV=SioLrt;4#cV=_xZ#_7b3
z`*73sJ~erUo@NA}I8Cnv2^H0w=CVHmFVUVdyb!EZFXWThexA!~d<_>XOzVMDg`vy}
z4a2H`a#?H9NEXJVzW+7b$L-?A#my9~R1)qG1yQX%%RNo=hc`tmWoqyc!_0~|)?2gn
ziklJ&xMnsABvmRy7>0-A@z~blg?ka#<d-ODK`>l0Bjpv83F9cOF^DL63HI?oid4zp
zb_sxKNQkVaCWJi!wgk{1xGqI}imWrZqnceN!fq*lzc(xi6p>gsxVt)<=LSeQIluvu
zsXn+d)70oRQUI=P8Rd%>7bs`c$v>S@PXk;Y_k>T$U|Ku-{4ecPyFy+*XdKegB-Q}#
z>USpj(&*fWld3Rlq;El<)pOS}VALes762W|ciQqha%(}HnnPS}Lrb01QAjCC!ux#K
zD{T7*_0B1EO?dtgjVUj~hrUaJGOJYE;DY@y{hCpPI+^8tJc)WAJi2nDU`m3J4-Y%i
zNwd$wK~N7Sr99Twd4n*6ZwnR}a#(aP9F<}{YMc#0IK&%J!&HnSYYRiEk^8=HE*?<c
zsQLO{&*r4##^Yx{7=HeslCYH@e{r*W<@D~;t-N7o=4|9HC$7Qb=AjBPTtn8}&+9%*
zp`CwvL}}D`Y?}QcETdKAXh{bXhgj7tcrfIlELg_aIz{_d=wHXqb%>M>^x`L-Cbk<v
zvAvortUcN0?Ku6X*=uGXo^QDjGXUYUbxUEp6h119q2Zeu5gx;=r$GVlvOi2=bwr>z
zN?Jv)SaGzepA5RaFZUq)h@E7XVv6nODC6`b>_vYToH0B~GpG*KSg$7pcdfkzfC!CB
z7pq=0);;L4#|uq$xiTdCf|~8-;)F{idBmcFN42KFHMeOZ-Az}eVM}1Al%^f&$glJ`
zgHIy+ZdtR!+|cu+B;iSh<M!eg&dXv2=*`_yXcG@7vjb5~E{lryQXyLptFX;ksZi&Y
z6pIu(NJo@QLPAGAkzS)~&@O?&qx1?Yjl^Pc$Ssmb2sLrC{)!*8`S1L<m;h|$X`$4W
z{QX_TI^UipEF+OuM@9Z2q5g6+SBWP3+VfoK9`Fg}$Uq)>)A=;IqD3SUGqvE^fQrKi
z$oz0;^vL!ay|kp8RxkvdS8`(mL5|mVNRvN(KYn=5aM$Ge_8)zcVR1~q%td{d)<MvC
zzbjjB?Z&a$b$LG8OxEmuI{}Q`l4c$ZVWU?>c=Um^uofP*NGJD*(|AN<PM;aUeD7_X
zWb9)a_(%&e-uwJ&*@^{n@H!%pNGJ7!t{UGnJP$H})TrwPu$mov6@}_EixZKBVMFDL
z(wRc=iyA~NMFJyM!LnI#3^7S3xNY$|J>Pl;R0FHZ`x@cPb7VYRRUtYf1O(dJ=Z4(Q
z_tH%YAN~DRDymGO(GnQ=gzgb#qSOw`(WtubsSUWQWl&TBIZ!IPlK9Mxk9CP!QTan<
z73(YA7LB6Pzfcl{hhk*<K21Jv6AHx`gWnhJHJKgoz0ES$V!G`T@m}co;e27s>90**
zX>PTWlq}?SVGMbSZ9OCy-U{A8+}B3vZyZfz(4uJdv;iX|dMKNhm|I;GCxYPKuJ2zm
z&mdV7Kiiu@g-o4IzdFx~t=rYZ)BDr=+V;yQ`CkJo9|mplV()nveZaCUTuuUKsbM%<
zNt(XEC5xt0NK4}SwnlTb8J(b&P1xmX1tN@sytuFK)2JBUw{J}x!diK_wVcCF!Ibdt
z(`noj>(A-zlZX`E5cJv9VPu;FC`S$Zn<yd+lg<a0OC8%7Rf6cg&n$UWJ<?pQLDY~W
zFXPEPDj%UZRhb-lG*Kj|IWmiKzJ0YIR<{Uqc>9Jhi@JRDKuHY6tSVhih5Sl5^iP5P
zaHT4%Npi~koQ9lHy#Am5`@1EQBh(w`3rIPzKz!d1<>+hK{+wXys^og<!;f^%EJ$MY
zc9;qIJToDDlYzpp@s#bhJ&q1LBMX!<6$@#_OFWxuab6@<bIEfYfYDn#X`OcRqh`iY
zgT}z<m!C``BwIeB9v{mTX@1cVZ8CJOZskt!Ub=y_53ELI+XsE<shzaB@M=WwLBOay
z{7sV_DWC8Z85WR7gx$Lkv=>8u00kMV`P^Zr7P;cmrSIKU7?;9V&7z?2echPHo~#fD
z^?|fA3T2><PlshzLOArR!N*i6&X|&gY`Rh8^a&zTnsop=aEQ$c55`F|rZ2}-@$gV%
z#E>%9%|;7i+JpI}K_PV}?i>I)ztu<#NMz0%kXrGc*{*B*u<<*EAp_X-VJy^yl=97Q
zR+7w5a~!u>Y3(m`BkNPmGTwhWxnT~C<ilS1<h}2&>x}lIZ;X5F$B<;=hl~Tv8AoOG
z?oC4yseh~3Z^7=jnzU$+kg(vU!B2yS!4Ztugq7+ne*enm_2Cb8Vp$y{6OuC9f(0k7
zd4UZZJ4ovs>tAQ<PGfbMvTwGHjtz0Aj6u=s%B%fc864wBN{o+AYv_(<5XIwF2)82R
z(VltLyORnaF9j8KaZN-6?OS#g_k>KWcww8!&<|o!Pxd{B?*_J{$v%IH$nV;kxo;m`
zbG@Ay5$P%uew!Y!tkShzIgwiQ>2>y>v69Ve2`bq_5G+T`<h&eU^t!J!W>7z7o^3RI
zODgJm^5I8LyY1ro$J5GYRvy;s%88!^6`f(?qSpw~56*j<#gP{xGzA8ptiuxFT)7=W
z+XRC5kHYSgkNbnayx3~lM)hyI5$GNh4pcn!?idLf>%STlEWful<b3O;_&P0QaSD4d
z^7x2r15E#`Kjky_jd(1IgKB*=*`Zm(P+R?nnZ=CLPTSFcddxEmzxVO5C$Gfy8B~@f
z&&%hCqSMHi(y;bCEX8yR06LlGp<gonvGwZA8+nwx^AbyAe)g<SWw2di;)&94*Zvl6
z|Bc?&A4Gzaw{OdI!GU7EZ`78t{(e_m+4)jmBs%WW9m04duo59UOhup_KHwaH8v8!t
zw9`DLY;vy8_F4(-t@%VMJ>-p6M(ckCIZ0>mt$qF-3cc#~G<gIz{9H5WMFPdi!!6&J
z_K*a4!>KX&RTV+v1W`krhK(I}KH^I>hhj!mBr<uU!4S#vTU0s-hC(Q@n+h^!H`K{$
zyYl1bgaPeO$WS(Je72+Mwr@+*Gv=EQ5hF8M@*@XD2VN=TII?qu;h2p9a|+Nn)x_s!
zG*~YKJ9W<2#q+PGZz-3k{uxdIiQU%$`5&{uK@{>$NZa{)l%qDW@48Jr=NDg%nxM!)
z{4-`wX3_}os^ypJnOR@i4;pN<SU+zP91L4&^Uo_n?A9-5_K%>LtpXxU5z(5))S5^y
z^F6Vv+|c|(b!0{x`;b@4SWx*wBlW4lDmw)pnv#}UL6X_nFu<|lO)Zb8ua=Njb4o=Q
zMjZp-pM-E*21?cc9W+AF6IVc>7_;9Wf%ivY`<wlGSoyFT)>0^$7!);Y49eV~4SOt?
z%=Lt(a<kqQQmTK=l?r~nRDyG}W*Fe>1kp$~i%ILe7~Ip4{Zz!-=6N*2p6LMegv<$J
zoorBc`bfr(`MHki!UD<rBQp%`HLlHouQy+wXa77d6VEp`;Pw9d-Qt{K9x#}Ei+Ci*
zm47C%LTQFKiH9bXvi*bzQjw#^MiZl=R%7IwLkZ{^>zDUSr}7U|!vnB2@EWx%RQSGY
zv@2!-RQR<a74pkbXT<F!rvF-5wIRap<5>a5oh#a1{`>*^6x58$Cs4z;Z)O~2rVO+5
z9Qkm=DqV*Lqfy3Z3oWgPQH>#%Q*fS>zgJO&tDn1ov1*d-|4I?In?bIHAY3=E9P+Ob
z@}j&U3WEw58@PC<GH$wpGbC!(&B%{+JKRI{e2R2e`~ewFZ()^MN^yC`th^);0cy`z
zDt?UNX|2i9$<fG30_wu~dG`JAthe;6hRN7_Ayrr?X(|2+<p&&)sg6wjV;pEQ+{}`$
zLelcOuJdlHIN}ZOAPXM8?4I&UIBwAQaq&M*%`wh;xit-QcPg?!kaeHZ2J?In5u~Pr
zL9<M$_ZfVXN((Ztko#&`<doNpL2eHpIIC0GBnV?x4-|^hX|8Zhg_SeJa*|Mjj*KhF
zm0-+mC}0A{NDk<-Z^0mkCoKh{=_r9m;NMis7^BfMOAj5Sl2Vl@&Pv+u$rFajxX7H*
zmZ{AetKv#4TAB|qdd4~)%+TJfVu0(@-5@s}{~W@Q9S}@u=``g1m|9fUXknFDUB6t|
z7Vw~oU{l=hj29}aRP{MhU?F_Okk-4OFJ!n)W4E`}A^t*VyS*Atr5S@qrd-N8jAEPM
z<<15o#<y^A1sH|bvIRqv9|M1s9)?H#A5&Ms5LMT$K?$Wnr8}fMWI#YVMY=nryBh)N
z?ijjTx=Xs7k#2@=7<%sbes%u<oY`lewby>u6Q;6!3g=a2$a&H4hF?vq%=6+q=4!12
z+3(NT5n?YHEQ<Di5y%FkP@H|}gQpbw7v_&uTMfgm^>+)4B;zN8-F%1V@W0G>qD6VD
zCO0~+1yKA<T{MITk`m)m(2FB5*+;*G<6vpcHjBVcN`vpuY4Wh+g7oikflvT;C_xFH
zCm<#ipBBcOODCB~3(Q{&eL_pV&kc;YuX%Oo^}z5bdK8H8=c99{Nfoad;`qN>df3-k
z8-k#&Lj0t_|6#zOL5S8itZV^^m#X_BhhwR^9Z{||ks0U9N5*=LNK3DV(tI$R#pBKb
zVgjrx{43i?DLKe4{3ngGfdVzJ4>zlyR5Y@N+tzDo&IDpyImcXENzlcwlPu2fLyDvc
z`<PN*F0t@iX|Mh>bq+cv>ztVB-jI7<^?^condMOOy)-7QiIO~j&fx+on^e_U9o0UL
zpB#2i4;UJ`DCT00!M5=~3Kio#2ipy}T)aB}G}6l1zQZWfVuYfIL-K;?3j6s7iz%$K
z{kLEB=le|;VjuT1_M@?iN^AbT?l4L7JGo&#l?KWA?{JFgNvye!M*efE7ChAVOsQ&!
znpzYtW}_N$&dNDc>#F_Jwj1V;O`uL#w9-F68OiY(^U+BSQY&h&x*An$+Y!o<m6hI0
zX=&HW@#_MRt+Gd}JHcgdVHG#j&QL~)X<)R;#c0XX*A=339jWv`o+xRY{%nLzH+R<&
z#E&_aWdhY>kZcgx!G1R~Kz<`uh#>{{{C0F@Xta;=sB)Wnt|z_07%`At_Pb02f0?B)
z3<Z%y{D-vL83rtweuMTHiRt8iuHFD(aNPOH+CNmm>>SWcJ;;q#sL&etBgPi_k^6U}
z#2Df5LA8>~s`e?vzbf(H<KdOPy$TYX`Wlp5nyO<Rd9*jw5yViMdD9SR;v-j3ugoLa
z&6igzSO3Ap<0P6;;z8#j?222vuU3K>A)Zf%b_xdPW1kDcGJP>F$qiUCXTKJd6m5JV
z|2FIghW|>MSn^H`m&hrX)B00nuA{q3Z%!<bp3f&z{{8$W!==`rY!{z@mtYwG_N2!e
zaX)m3TPQD~H($(c7*~3<l%DEPs@dF5s&ZiK!1jwrdHs0_x3JpD`_jsy<dWBe;b*eC
z4T}sn?JF_e8geiNz+b`@j?%+E*XZw;1!P{{4+cMEkYwpc@43uFU&m5NXc=s>DbLFh
zNtJ0;%@NLWsSsW7lwd|2OmV4xn%|xiR@(UWKUy`JoOE7XB~sdP#g)O0_>mUT8V5Tt
z@S$)~5l073x=c%AwDBzd$mH16W2drS9*gbA+-TrC#E80l*hLlQocI^K6AqO}6iUb_
zo%p%2V5YS1{gts{f!d1d{XOG7$&r&eS1{3dO|JXhCuy^!2Xa%6IR-`Wn}X~-rWEl1
z)8G>w3v|R)HbOkg<FhhJs)pnZpA{?NEpgOafsBet6wQ3S)UtM^vjtVxn>qRd$P&zH
z^Qbueov<4551SV$XF{Ufr?l(2!rrtbkLb(u$UH+<DQO6wl*y90lDeovKsQ`2EU&BL
zB2DY-c0N~57~&)l$t6hRyn@##C;NXN4yr^_v#YHUDjl~VH8}^^PKuo74}Fk|s0r6R
zviDU?|4aw2gx#TkDgvam+$vZFUGC%fB6GOtN2o3oW&~pJ_Y}fcFcTl#+;oV|iD;U@
zO6;h;?_7hEklO!7+U}lm7?hZ(Jib3AG<#ieb71vVK52Xeae8Y530Z7E?!Q}hNY8+P
zu+x>i58~qig%nD>`EEB<;6QxE-xbmrUfCm>9O5MYUHceC5QKfvJ693rxVm6q7B=F$
zrDOVuULI?S0;ZS!`zTU$j;i#^R0HZe$nHnybXuvgD1_fp0(bqG`L=fo<R)9Q6!~P4
zSj*RGIfNoyKZ2y<nq;13>OzS7r;Czg5QcfP_;l@u0zbkoXa6Z_kD}iClb*|(QxyE~
zM_>|o9QBKQ0Kv>-2UEftG~tAt@6%_K1b<*tW8oqh{pgPK*2Wiln}oeG4#9^<Bl(nL
ztmy|z7<%xJJ|Mt?89gbj_Mo+ZwF>j~jJS_7`WP5qbZDA@A+Rto%pfpr?)1RIQBRD3
z(Y*S-uv?95D8Ni7p(9}VrV1_nGZpK9s(h@E@H*&u*g%t9W9st~jmp+YK~o0#SNrtP
zRSMG>|M48f<TrpnvuUfwCAAWV2J$J~&3wx)IjNiBPDK;1a#3M0+{WKv+q;tO-j}hT
z-6D31z&D6}Onj8Z)mt(i-3q2wJ6*GEl&OgyilUQ$#GnP&BALJNTX<Nq*BfNKrD%FX
zUwnkp^gpG~f-wfnb&VhsyVJzM;NwqIwdPi&P*ZPrb!!}!ud+P}7TSu^M!Rx~{Sg}P
z`Z7qHE4P7+M?ao_x7?=}HVggoXH-=rh?O3q=!Nl(qT$E6ZD>FB_ZP)jhnkmAlFiKI
zj&Sxn5^LmBiR<i4ixcjkm6E=(v^Y#P)UvlmFq0<Gx#L+)+(!S;J2SDHf<X5xhN5Fe
zd^b9tNs?$<HE}zMx=VTBvtc}c1c3$0`6cq{EH(+RAh#+M6!fGkV;=?63;{}Nk7|pB
z|9GUn9{7~KWCV7=kWg^eJ}=5Gwa9N_w}N5hY3dSm={<_h0v$~&Sh9*Y6L?^0d5f><
z8l6uhB&^03UD9s<BW!0)@xC2n*^Drz;$zLZYeqH;?tr$jIT+ko*WrI{<d*{y_1fcr
z4>;BeT2lZlp4`eu>##So@wb6`U4&CdSYRMQmqwh6#-gJP%D06ly;ZQTKqGeiQB$JI
zy)((@@4)jdlgt8#S3*Qu`Kuy@#X03`f+yg^A^AIM7rK$};`%80EJGYs`dz1M?Jrl0
z_bDv8jw!7Au5SAG{$ADR4-KDIB3Pk)KKof-E26M@Gj=T_j3X5aO0b8aO9N-KUhpet
zn7SRbYobGrJAZV&wxitblD+E52NkNaAJ016T;znBXW8eyGU`39_QwAV?2fv@cv9}<
zS+pFJ5v<RB9i4o%Fh~NMlu-oZ4KcVgC9BsY`z-^KVf6()|La#&>Rpm90sD^Rn^BRA
z-whm>DKk4P?S|yBz`#<ul7ibe$#IrhPUKetmCu_xBw~jd2lZdD96$e6R>YA<zjBe9
zn|{xRZ|=-~mCi#~GKhGxy{3&)j%Hr)r=_SsrtFBWw0IGostPNqTS>KCW0VRrdd?%j
zgTB?a3_DMef`woGGtI9dqn8I5&CAU1e3FNSHn?_B=-x{53=6CG<Xtw*>hZomMK5|l
zn6PcADzxXm)b7dQ>FN5A|5~pld9C%L@dN@35fq0^BOkzN2I#Ol3aNpyDF;>DVJxyO
zyB54r0go^$u~REY!6ny*uk5FGvuj@Hu<4@DcE&{=G4!vu7FQmQBl!j|q@`T_ewC()
z%$~{oyX1#b0-D-d5}0-PBLyD+H(2WVlcfN57{2^Ub1eWZ3SIOBL4FxOe8sJXy}6X6
zZ;s|^%$AG$8~-Eh;QoiXt>G`SCqPh<^*MQ1zXfho!ztmF;hu^nI@e)Iq`~XxrHHMB
zkHxq|S6Wy3EdIET(;St;TV*{XSWRH!EBWF3cr^2M=f4)00xcZoq>MNpbfM2xRA=Zr
zgwXP&T;*80Y0)81oWMrH2BDXsLGwQVgU%~hnkd-!dfPHxCs4ggCoFsSp}odYqrKsQ
zxi2!vO33N&NOkLmFQfvpIO!w!f_ti=OQo(J&D)~JrYyPab^GWyaa6KN;?6R}DUvsQ
zfKM9)q}|e)mrMHRf&wsl#fypbp=aVplqGVkseCZdkUdp^+`rz{-Z*Y7yeE^;{-92$
ziIrP0;5mWwn<EJ}vfz6c*AnG?hUU|cjo9@T^|c%St;JgnB?Z+wC1Czf!zj~qp;IQ&
zyv~*y)W{!GM1sSRRM0$r;p8Am5nJuE(V0b7BohtRIFsW!Kni!8UwE^MejAe%V^GMt
zpN9AW(moDk9hKv8gk`<!&A=b-<Gt-G7TS%*X6F%nI3HZOVtwKzY!<T&ZvPZ(?jD6B
z@P6^rI6l_jz$?Nk%*5(y;OL?EJLG<<a<3_%DB}oBMC+JXi-SA>LpeL#g?ybGykpGN
zKp}iWJ8K_<xvkar1fExgA_hL)GmVlRJ^QE&K5R&?#HdXocpxdgg2|4shXgcEk6w|G
z4}Pnm>FWZ1bSk+Nts&y7Rqx+`g-Xv){|LuTvJDy~pb?!Qzi<hbuobF5#3c_@eI;nM
z9ENDTCAgTJhWKxquB50Z9c{;W={ri6X(wv)>mUpiAcld?MLF+TIBNcob}15gV`_2J
zFf=|QBcrYtpx&ZznL{c0GZ9{P7>D4S<Vib~iS}u$x0%^t<}?;lv_Fixa&Hdj`64M4
ztwcX)Y3;McnVpXR_ASK@B^ELap*+<BtYy6<*i|Ow%0z44x3oIyc(d}A?n08>v#Zdr
zIL`W48dnB)*A^(3Jz+tL_TMT_PfGWOCP_-;%zB()WURjcH;@3!PwFL<0!h3K=yDrW
zaG8@kw<lE%6&+a{;udLFrhT)-!scbnpj<feVcJE>%5(cw6+Z8i*hwA}%8k%RZqZa&
z^Gd-9i|fUXCEL5)z%%O|OYnGz4S^To)KJI{;wJOMqm6iBQOfLZ!3ij8i&jhM6Sl!l
z=;k1(^lVEqNeLkc0#X@KKVFVV6_xayYUEx8VmVItMMn6gbGRq-3SpHlUd(|yE&XJp
zV$^=0eYOAo`L6qQoz3v`X<hcqoaN(s^gq|imM@ODk{%)IH4F+~v0Aw`uI6zaN<<RQ
zLA;-ayA`~vM9Z?7GpI*RRZ&(Hro6*hGi)2@ks=yL2)QI-O!&V8H!5;*s=J3D>(U3u
zX8wuCF~0AEWaU2)B$fnHnK`F+t6e8YIw){h`d~5Zkt*#-5+CnqktV%TC#~m=Kp4g*
z0|XVU;!=R$%Dh@Fqce>2inA$2YLgJkE<|69aY?^7JK5$rDbM<hOS@)D2BMgeukL(E
zzxhV(>N&k7+nxSSOLn8ZAa93PN4p{F`Sav0>nngCrFL$ALE+>-38bjfO`s{=8iNO9
z)&g>u>d9q2%o7){WGl<zM(PN|S%Dl~`6{A&O-HoJ?Ypx}fmxA@-#inT;!D2A30=5#
zQhjNZ++wat@{7ot#aGQd4J3f#L%75F>z1Lj6^}+AMaarp9r)C{!p;;9?lk+?=+(EX
z6f01bDrlT%@Sp;u+xF7<=%5FB7Pn{2{wn*J4;uA|-o1XDir!5Y6kTd`^})4~JzHA7
zX$FGagRLd3;YFPda#U1YEx-5|5E(H@F<6p18am7FDTGLz02NHbcQgpb337i<=bso3
z!6!R-Xnf*U08(`v$I694tf~8nG@1UbNP|%Tq`r~uIVqz33MvHdbroUWX)GK664~W@
za~>O<ju$=(yJq2mOyx#KEYM?>NWXG_-i_%=c_6QWws=I{k?(v?;|!NVs9T_j<)ieW
zuk8Ehq=Gq&s!RqJgvup&1c;H#5*ZPT^@g4wV=D2CxbY2$u)_&Hgy~0R|D~w3>T7fq
zK$fszY>cc^0;#=+KaJ3cay-%L^=vDB6Vn9(wt|UJ;x-;jB8XzQO*rnelG5hG%ZnA6
z_{edte1^Nc{@+;6Kf(2d4G378`j$w?mRz%ZxK7WB#&m<V5S(bxc+obeTc$5;@}NY3
ziBLLBE)=elaMF_4*tfBgB@{;$Z%jGp`pyaDPbq;$?-=zM{TMmqOLx-1SfVl$!MUg{
zTebMrXThm~@nJQ=bte_lINyeRjS_k!IIg>$aVtJ`)jR>`{QPjEA!@t|u|D-JJd)B4
z(~Xi-Vida-y%qM&e~oZv$J+7a_~Z*raUiM|b@*-V*uL?sd<%iO`R0u$bRI!ULx?k4
zjLu;Bh9uIL9Se`7Yvl#*PYGQKRij_QR;R!tpRHVE(qD~QdLB2$7yJut->R&%o0A|b
zE})L<uT=?y>5nP+61yI>QXOe6eC+PJ`w;hx=h-vJ%DqIgH-u+(cJFk%^`*#ntg`yC
z=JX|heX-7(%ws>r7tlxr>W_dfLt7m@?gd9K@QNiEFI<zs9KN((lkz5~E$t?sX_o~t
zk%y`#f2^h2uX3t&eya3lB4ylp>4IV&bNa?4(tza8yejtV)XvPD2H^%dor8d6iUD3|
zmN@p(MwU{RSX#|G$qxC_MjkF&?!Rco%=*KWBgCvhKPrDGJFyJ<20S%#YKvpHIvT{<
zS2Z~2tjzam2AG`5d`eBka%7vzlNwTl<4~(gj!hS1?>@6!ZS+rN#E9Dm#!?!40IUXE
zc7}$;2TalwBjR>xw%X@8q*)kuU5EHaHjqPp&NcX{3g4#w{M~~D@ay}Nqtklr>!ui5
zb6B%}H-6{%5!>9TPqa9^-P!lnDLdOoGitOwGkKcF<hc>u1K!(dP!88Z|B+5=+1z?=
ztIz3V6csw__aLww(il_QS>I&^-O(|GUh|GbT$9}I@)MwRSqy{#`buaAWs*UzrzLtD
zen!DHHgPsb5zV)C0?8cTBGFh+<BrpLC8so|NbwG=+9lR~+!~|SxO3w2!tqH8GXa5z
zO4pvhjY|dzs*wSBlau(lh>K@>*$wCb_1a9LC{YW%zS7*~L!Yi|QgR=)UJtwM9l|q$
zi)3Oyff%PjeUybmABlsT2Dj&zn?tWcDfmZSY~%FzpYXV@;K8LAil;R0-*_2Q>CZ>3
zgjSoMIPJ5A&BF9D_Mi4MC0hoqTh$M^Kf85aw_2P<bU1aM-p`0W-0rCRf*M!7PR*Ay
zPLGTt+lRbPThD%t)C#;1L4WZf8JRB}$(>?%97!ds8=vYf-cN~kesa&+%gR2QfXtj_
zS({an0QB9-Qf`*b3a<0rz9qWswAz4DvI{3QEWCzqQv@IPPG1Y`EanY%amTazury63
zM!Xty0)Ks!n|1m%?)2p`bTA*%kp%k(i??eWi)x)_ji8D6GY3rXg{<99@#F;Rl0!n0
z^vXCrXkD48RHHxsA9Dtc9+b34YdnP;CbUbHFs4WTug+DK#)sh<`L(1P+R9$iUyWHU
zjtOC%*w24bPkVk7dn@b62}??;W1w>ITLY{O&T&a{M<Z1|OPCU7bVgkV;!g}`ue$qa
zF^}=NIK_|zhU1K$QD!^eIc7-}6jCY<;`J*7F7@<AO!-p?js4q$Y~sB<1SR{!gyB%r
zk7RT4znS=YUn~n>`RYE-utp7?Hn6fLls)=MF02i{Q9L$g<*<M2San_4BoMuX%<kBp
z)Z}uL<<WuxAe;FXX8#_5ARdXWuYYq^Nj%JABUmpUEaOE?s!1|>>n&SJAdoy0GrGv@
zkTvA{mhdankVpTJ5?AmLpg(V3-<C3R_u)yh{OFpw<ZLPrG^|79PGTX}rYAXr_sle%
z@0j@pKWbSbIRB!k<GV8du4gJ^$tvzq@)2$|@)&PC&qTloaK&dg+zVz2ZujUyb$d2B
z=1%)a1Fm#KW3Scl_1m|+CmrF-i0<-5Uf$L}ITK>h6gh#&RcS85vW{ZP^<+V7QUjlz
zm5#$JSh2wYI(~ojnCv_G<Q;A2$(dlZZb*d^k0bN&%kahASSCQP>$dLh5$3mF+1N7P
z&~l(xDF5T}?D?11bzI1{Yk^G%o>Aue7GHKMSYqUGqo??`mlX6@@@UZ!J>hN_6kIo`
zm)sHRbsFz`=%!Ic<)CF)6avgpSD&bAnqxoj?JAi_lBszcQyGSjXIws&b#}|o3CkY!
zoITS!Tcm)Q)E7eZ!?Evpp-IO<)@Pi2`ki$%v;YiD?nPyeZ-F8OevSeS7_S7>ot9aZ
z<d2$IyLS2hBwhqA8k`7Jizh4Z2<B{X=WV}RX%tK`1^BS&TL44BQN*Z=Rm8=Udy!I$
zx0)m;j!!pfMK*Si#0t)Ge;)NV8*;WaY>?~t3!>EZyqJ9lPBuJJY&HaxO|ig@wClzz
zdJ)#&NXR<a@lXAnWvWiKE8^TRV8py?SEQug8U1wOX&Je~q=cv*y{F6%^km$OCJf?9
zID8_>>zA4^T~pcqGUmh8(iT|ROGe)T)&cVV(~))8Qj27+*2upw7+kPNw3d*d7uvSC
zX)v0M{ai3s3t@!+pjF+gicMZc$cWY}9p4%+7wdoXWhQ`kBD6I}6@!ri9N7NFkZVJ8
zM=P0<b+wY>*pUh6$tEM1^_-cV&*?^q4ymFMJx*^rMSQVXH}ArP1c1?TYf9L-KEh~0
zUEfY8ROgvyjjpjIc>t}73vdLQJQsJ~A}4Iq4e>zVpwLAKdqkW2-zV6q2J=#MH2aOd
z_`(K$t4doDE>6UrVC|w!z}W{+LB_IqUsF>!#hp6&K`F?B1I6PyA-E5V+L4mOr>eTv
z&PZy?_)lXlC{E%!@3e(*Y!|sJM7>(C;lMl+Cm)57X4y(D_DJ|4cXl~+SFh&u)^qBt
zxZZ^nT%!J7hsLHp+sOZY@7FW@kp@nPK+0A5AT;f%Z58hx<2JgBQi4u==X&W#U2qg;
z&PN&*zk$U#eP-5`(zs}I(m8Yy_m~vF6Vge*sk~?Ml<XgU?gGK$Hb6-|37B>3;KA-V
z6S@iU!<sCWa4P3ihA0EsDtmOgoGv=EvV~;LyNHgeXvagl<-%H?n`6CB1AOyLu-Ev5
zWT)wsZ{h0{cK#f8C`NDc4UVl`X?Ag%SDcU(v-<5qw(XuzCk3`mvV6O;?uD7pu0ER7
zH%=hy>UXwH4}<W1=I^OP>%KlL^TA!~==R-$V@<EUqPgw0_I4niAgQCf9&qhtCMRF}
zCyM9aW`*DR>(^s!;u`zHXdxjj;9uT$7ccA(Yh|$HnOET?L5IY-ha+G?W!hojvE0RT
z@@irDPXc~ImnmA_x^TOm*K_jO^a{S*VBV`}zafIKvnv|qSG{!GR^Igl)LwxILY4{z
zRk)numzS@HbUc)^=rH1yCa8ETC<wtW#AFmX#)S@^8!Rfqz^HApK!LXu$mstNg(+f4
z^Qh<LZbM$G!0&0_$b9E^8s+RN{gC$>vszmnStdXGAhWtw#Hc_r&4Q>rpJz@Or{b$f
zqd1WGBxXNL7DYgUfh8(@^@B$kaFneF&)dVn%j)B+^QsEJ&x1aY<oy@j*#{88(A1w$
z#BJ@sbw0`XdOzIll8Ua0FZQ3r?yD1i#rX(>;V7R$DOXL6p#zEL=Y@m9OX{Na64`4k
z3Ik@!)0SLw5C!AyBC9WpH+(*)Kev8qx{b>SO}Phy-$jvTOn@{k-;u}oT!LCphPc@I
z7$B?s`UM}lLQXEMNXi8EqPvL6VEIl5Q{~RF)<>m6O!AW41(_j0@>A$|#+fTPf`XB+
zgtX)=Vhgr4I(WqzleBt|Ka7_h<pw{r<$d=9xa}jXI@?q^Nzi93DZ;{D&vGK7s|NtJ
z(YIN@Yy})%Hr%WmF@_OWV7u*p7aj63QOxqJ$+7c7$9#uhM&AbJ7C+Ex%2lQtYjyb{
zHlo*Tzq&d(jbHxvE^!pAxvO-H8|-f`V-lRzL-5c#H9nEX-;kD?l=|*98rnV{-MJ^3
z&bY;n4^MAivrf)Ix;qa5T5inQco|v6ZFx5v3k{W^HvgHQ%txJ2j%WHee2dgzkZ4tI
ze9h&LsC7<nT%o3q2KykqNb#Gjd;*CbYXo%;?lJT{&G!yJ3|s^lC8eb_Nf}&dKKhri
zVe6Q_E-`8EXj;lKR7qo2%*CgzU3a17$4)x3{)mr{GJ*S_yN*BdiEQqCT}2*2j<2NN
zA`ssr*V7l6T+m?8_M<iJLdYd}$NGKBD&>;Dm@k@^oItg4AT=>t8iHErvdJDY0QCVU
zLden}?oG{mo7+m%Z+?E~KW^elWh3F$1<!vpj8-zvbq1*o6e5B<Ub99p*kO?XPzz*9
zJ?@T`j4x{m3*#?i@ITL|G7eh2%Q$>zPPB~wZJNAwhu5I~7REi_v&FOQwyb0I%n>zw
z=O}niYyr!5;~eR=jxdqh_t11?Zr~scAK_*O=xZcwF;y&MkUqMAz)HQFt=rWb7lYOz
zF)Yo#?2Hw=d*g1anmwJBP9=T6`x#$%i3te7L;-3(T6s?EqER{KKvA|O;_3(@O$>?V
zv$gTKm996@2>`Q=A}eCf0JiuCrV<C=Sx#Zicy1?bh|Uv+UA)dLo!91kv=ec)8GE`P
zGD;VumOzWt=gzPxtYtfBa*9R?*v!g+N0&3}xXeU%G8yj_4G95N>mJ!cKObr91Yhxk
z6M<gQ7QceOlUi?WM-_m?Yp&Z|)Rc<)t^vQq)~pUvH(tCxnI%*lWmnbh@CQvA5ulC%
z<WfHOl6sS`CYU@P0l%0K+`eF*otDXAM`VshvUja}eMmA#jSi{W7v&*QiQK#U;)PJ9
zLJTuPQWOom@rV)$c7icg9D{x#!7SO~id<!uN-$6u0F3&q{3+k2anTuj2tCeUz4qUk
zdc)pJwQz~gO+{^L=Wac08Jq|oF7fm3&xCn&DwYhwkY$Y8Xv`QN4gU`bJT9%j0JYK1
zW#!EC>NSqXU_j^rBaxoQWGkz>>s*@})wEK_u|Ay5sm*jcu2b*_z=SNZFrK0Np8<F(
z^MV%qtTn!nSIcd&T!XXs?{pt%tobH!zJ~pj(_S#eWrB}M!uR&O{*4*|65lS%sxF5x
zwUJJiA$N^)yCokv&0b_X{nmkc@R7!2Hyz#5IO<MJYJ&}6^!o02FKy=ufmEPorC<lX
zanrPidKfPtcnfG9HG{9}3ypjyiq^2q%Tqnc`-Ml>O#@SWqV0+Lz712Xcc-yIV~4aH
zG%^44Xv8Dsu?qOuLWqRtFgXwQKW;N|wH2wO+^hNqNY<LtB+-wt85&X$tlwyHrN@g)
zJ`(G)``tLHAbbk4TfLKZ`4-_~uLkP+o+yQz_#ISWm8(w%=95zI=yYUY1|%1r*=2h?
z%En&7u>SQ%r&&G*nej{`u@qA`50)c<=W|rVC|rx<0C@Q0&f?uljBopm6PzaB$5^i%
zzKb1FnBa8RSh3xVB?)SIG_x{)j4A^|ortFxTwF<`w;_DeZz-1vUcor#5Fhamv?>hC
zKx*R}el&wY{5hme8Qo~}z@eFChPYi}Ly;uLhlbDgFfzZKWk9ph>)dxi|2FXs&>CUz
zLHoLSRqLFFK|xprJqN*yF)@9NPCCA3(=2P2C-n!SB@dKYX8sYV^tGKxZA{dZs=^>P
zD=@*q;2p9p5o{r64T!0ZB&rGB8o8U25KUNRTg-s4@+Y^EUTJ(GLE(}`iowU8Q}7VL
zi|^89t@R{sWVhDw^mFuHJ%zd3p(`IHKR$fw)D$0!$Q6lbD`U6R)%{76^IB|KSH^C!
z@X-f?NK`QqNHgdM3nr`XsT)$)?c@ZIC2&m;X%nqub4A)LM<4dfzHi4(v5P9om@?Ye
za?9aqEi}JsbbYU<zpR%5tG)_ZFSA0NR0ZGp!xNPg)wKy8NY}~V=I1!i@IVghkC&|q
zn_1#*fI~-z_`?8I0A1yJO;F*WOo~@=i`v%h*~+*y!(&yn-*7;@tDcqs>pXlab<<44
zG^1@a*!#%K(y7yJ@dbw~km@^E`wH)u?>qa4Otm)EyS-wl;rYr|8DO~D>qXua)#ji^
z(n*~2r2`wg1C95PvjH0v5x_^K;1EXnSUR&0;Ui*nIH2T@dD2uy>byxyc??3kmuF9g
zv2c^`K1CNN5Rx&3?bfS~2@Wf3C!y+)S|D(j866h-zOljiw}bNgoe)PxyIspc3Dve<
z+_x?#7+|fYz7ey{x+|(@jH#li_W@PNfv8b;L!&bF!6wB)>>53suy&f;=fD(*i&}-b
z#*P>S{J`wWpcqzm7A4L)Txp1xpVLk)^ju7@^o^KI>A2nOegDwea=+_9ew{30CY~Ah
zLb!0DxrhG2$Uw=hkM?IbA~x;AVf6G<=8of>!sq4>1IKm0uJ1-U1S(xQ4YGwhWoo_V
z+`ZM1-w@`y*+^E!gw$@{ER_i@^L{bW6p%M+SIy7hQwegZmH#`lz%|97GmB%3Oo#g2
zsXqEj@3bDD@h@)BgMxW&I_q)=V(bS2b9OEBQqMq1vPGus{4oNpT@AyNk~_$ucQ&`x
zNuI@I8n4Zc<O7RPyiFd4_`RMCI#*h?l3jBr?@Qz2`dUq5<L)EXvR3VL;pgk_*A71H
zr$^6-oL)^fXZUemFj#!Yi{jG%1fT^W{$ktDX@_SvTNPdDa-t)cAH?Kv{-AG-q4v#~
z4nF?jg>3ykP}W7bee^~|Srj&Qz47X1ioaM-waImnb1&W%fZ10;hVclh;(Mk|Jp6;y
z8u(KM;+tU8{C^xU>FDGmm0YN%87-shOLI?N>+8OASW3;r-@mi>m<pK5Rt=Ue#ipDl
zxoi@1j}%r`t^2qS$Nj~=DcC{{g`zF5U%tP&2)j1M*6=-*vdZn=cs47e`Sae5-)5uu
zb=r-oYMvw*Esx>Zk)N2H0p7`H(*Y~|de~9)z$0KF@CcNW)%D^yX+~eBf)9(LBSRIc
z?zH=6wiu?{EvVn>JUB7nFiPCoeRQjqHwdlLfOC7fi`c9&yNma5w4J<M?V+=284SmG
zWQqSoXW`_hEGzmzH=~5J+jg+V4A$sMS^f?)%Mpi&bHdl}iBz8=NPO&qqJj3R_93z{
z5etaZuOPC(7nf%Q_5zmbdn%@=PC?9(79WUCH1~pnA^|nv`=s7|_rMW;9os_g-~r4?
zdew-zZRBZ<eNW>0^)BA!7u5nRdKMw-IQy1Do%Ax119?<^XDLVz9trZRKPVR6e*hSG
z+ag62&KXna$o;k~%+4b=BB;XyK;oM?RyrkW>x9q!rh2*)+FO^hR~wh8Kmo}GzsQTI
zizxO%pjA}^q)N-`9vXP5XH^9lB)$^dbG!HR)T@u$Rgcq&f1qtGQbH#t*cvN|T8otl
z>{FCw*=M^o9s0}w!j%5#V10NqiMU8I*hzA_{3n`7-iLE|dVY}%?osvhs$A@@DSDbg
z=c`%ET<!Vf521&qagSg6_I7%EaA_H7tz|lft9Yvuz%lY?CR>vHd*kVw$FCAoJcvne
zjc)Umf=t}|AbwzdsH*f<$$RX>AXh-XsF@e_bOi4>o;v2JvxHe{0g_WT3T-H}rN8-y
z$REl<6PO~dNHF%U39UjJnbMrj2PC56#IZ8dx{=#J(E|0K1LqwHzrWW6hp@M(Nuf-1
zdwc1+*7iX)wE6h^?hRG>S@6)<gNTvXOfo}Rb=^IDcelI)U81Bq+LNaHt-!|-U=ZD1
z<t}mZff(72J1N5SXqNVy_m7N63DC^F&!bB%_FtkLNpxejIf~bfy368hT5Q8=&T~Mr
ziaUHV*~A4T*IpB@LVh1m=O=}&R;%lvyHA;3--tM)4_<A>=4eUch)1S_xTr&8d%#w@
zV`G$_+i(QTp4xq3<Vu2-=1%O*0cM!?wxqbcgPZ45KW9>;#Sgp!SbhooOrC9tU&M(w
z<b)7ry;_EQEzn)#bN*xUaWbB{)%$*TP+N$|*$46dGlW13#F-JuE7b5>Zo*WT->OQ~
zef~MhC1<K#4_Y?)N*7N1ws2@VH(7Z!G?Sz0yWsjY?CRg@!@}AY?2J2|WRjGwSG!(>
z&&a!;jtLCC(Nhx!1!XYClx9Cx-i&udJM*hAX?7&^(Mf1ai7lGb4y`M1I>EvK`Y*^~
zJcd&I&@_}{H~PokNur}HOT>uuyxR~Kb6acnQdeL6hG<6*J{arH6~?(Sp&i0T*&4D}
z6^P~OMfQk8&s%C@7wH{PQJ!Au>!wD-;xo=mO=8UBw3gGIzc1NLcrX4*RYig{Hi*Y2
ze4l)0BlJCP_b7?;m6fv!EJI>3mHn<VC^<<JSMd$iEFU*{y`k|)PT00X!=Z&a00=<h
z6o}!uJan=f>0t-c=*wnA5^(el1+GuB0(_Mp)uX35-WHmIhd5A*$G3E}8ZoE9%V$sL
zU#@h}ESws>R<CYl;%}kxav?QN@34DjkWhMAIK73<NFN*4Sb2Gj5JC(I<zrhw1@D<s
z?u8agv};BjMAwyUvaHmrH}mqhML+hl&e`?mfnHWrqNhy3A1BHeS^#*w!DM=$yKG;&
z&%T{*xAaFI-P6E=?N5GLif@w9lmk)sX>Yl2)jO&WZMvWFgXbSl?-R2>F6JqZdED+>
zo#CoBYx-q5`OPhtW%Fy`f?p8_8AlR$+O@LRbDC+_WYXbQbADgYg!0KVMt<5!pM!+g
zXfZE^dH4qJBnV2JDT8Zy>W};*2{StyOUD-RoWQeS0ieR@Qu&W}$`fG#kV5PgDnxbe
zh+uRj)oDHc@sux`h(qKWn|IfG-z&uiNz0WeRL2$D+akpE4Xq~*dx=uO=dYD~hO$4y
zDXGMtIYnC-pIb06#{ar0HvV;P;upSWtIo%}*16%jugWL33<>)tnpA=+@Fr9%i^D7C
zy*eIsRXtU|ma;dCRct|0iK)&*O1?164HN@2?)NLUnfdt7eBmy~g=mU)%B&A|9}Y{#
z*aK<n4?szRGZOFO9!h&IV)-c4U)$XM+;llc)B)N)(C86)xNx1O{?JG3ADtTbfhWO%
zZ{VE}Nr&G#@X%om4Ts-MDw)&^JP9`RNmJC|_aBIEi0%yOu^cm}^cgt2aShW+(4Xvc
z&F?~vJ8o4PdLiR%ANBaO+dTv6t9dS4p4OBjoLifE?rGsO-N6&(k1VT|C*D>Y$FPCZ
z^<C-IW@^HCSo=88{g6Jt0y+3r^s=eP>)JW$K?C07lThXjtkI`g{(i^@NBOo9?YKOV
zrp0|A>cqI>tS6)sxZt&1N!FgH#NkwJxcaR$Bo9!1+l3$rClx0BI9e-Scz6AW+vzly
zb$5w9%IgJaR<a_xtA&E2yeP#Aes$ZM`c4$t#{59sM|ZQGSetafZ*jsiE3m?kWuNLc
z`x;SBH^yl)?t!qi+_Cew0_!6(Ncl+Ti{BnEZge<bzSA+Wr~4K_fzwTHYGffn@a<%m
z!U71pKEd*s@YRFn=SD#R*2cPB=QyWkJs|)&rS>W~N7|SXR(EjcjE1FiKhOY~tS+B$
zR4nq0UvZ0<SD=S59QPlpkegGz7Gqt`t4rQY2|C7y`40_E<XHMgntDrJusyepmzEl*
zQR38K54_>ow~_HOjAjb?;DgsWfs9go<Z8@*Gk~Imj+GgGh?>*J6ed1o7?4tor}xwX
zY9EwcTbwPP9nD|x!!zbYLkIQK8MWV8ybVvmpcAh@G0>;fhL?b6UwZT;j(GkV>O7Y+
zg#>MxVR(fmK-(_w$*aa@uv){0pKD+E$+C3&M>@Q^Y{0AF^)_P?M0||gma0i2bLEJ*
zH{Eaunz8B2b{*Uu`=XcNy`Kppl%p<0j?vK$pBLz{@_8w93hkNn9%z1(i0{^rl3fry
z`h<M?-q~yB+?^Uf0f}?T>queoF52e|UkHDBcsCt~k5+E0B7rdY@aMOE)UJJn!>Iwk
zy`I38I+XneetOa9%YdsP;5c6`+mOj)M|+*EavL$<%c|{%VD$pPu9{l;k*t>I+u)E%
zOSD#y*H**<-+;aeU;TuD|CQU=K4K{muVR5YZ=@m{#&7n#I`*ATMWVieNbTH#G4=TN
z<j#qL7lfrb@IGw(8Q;>)hL&HMoRY@ids-Nbd*ns^eR@NKiT~4}Wh2vT5PURe^xNCq
z&&B6V2}h>~U`Mf5{KXUpCOuXN^U^GY!^dV0{Ax)LH0+FJj}Ch7YhZ}ZYR%@wvsEL&
z<89nh=;oOtz<D5rA0(SNN=}eGjcCS;TCM(Jk~%jxIrXsAcKvXqmnYlgv@Vd%wB$Z@
z7GaOseGeHa$9rz^fAPF;>~~V+XcR%uAg*BrCFzlZEi?p)ojN|3aMokgzNmKJ6p+v>
zgQzrahzZ)NH=o>@WX^J9y?lWE2X)6S-icDV?$_90=2PSc06BOH=zw#}84apshxa$p
zIU+5J`H%%4n;Gw^9ODD^^5wh5tCDp<80B_eZJ<@x%eJ#~klRT$swf#WxB)~Omz^Q+
z!1djUOX)pA{K!6sx!q|@=ARK&Un)gVAq#6UM#mm|zZrR_i_+Ssr0d+cf1^#dOk&zr
z8NWQkn4EXu0&y9iOAe4gdngbHh&>60d9S(t$m30Al=V}!$jo;UCKT_Mvy{YpJxV~n
zWgoXhzBSbC-zPr!Ga``OA^1<#mH4DC(_LJ?xV5Ez@;H56hau7%fVCKktll4=n%RC-
z&G0o<*6~VnN&G6o4z}NV&GtR1O^r}0g3s9Ku*5z0;fh^{^Z1C!Ko_*(C34ysRzd)&
zk$DSY=q46YpjqCg0}~D|QmB*uo%d{N@Q^WnOdnfFmkWZxEe#s)C>ryP$J1CH&SpCJ
zha%zNSp;f+?HFjp6RS83e~Ei3lzqVrzvH*V)0nwmjZmLI+V5NRCPfqhS?17%`;SLJ
z29#(ky|e5E*9Zr<1QK$mTOl;BKX`0xQ9rKWz||(5o8A_tb_PCdsnHZj^JYeyri)#z
z(F1>Ym}ZSrmT(`uZFJ3=X}ztf6HHhrt!TInwE8ElY-6UcYgb1n#uKc>exrhMgTL_l
z?zkHY)!!nbbt+@eau3cn@cG!l>5wr?o+jnYPu7IqEY-Nu6ZZ9_8jJAP8`SqdOBB>_
zHBTC${diP8T6)cE$EJUzM?E>!0@5odY57Q|%Nwg7vB*-nyDPY&_3{LPe%4htUNpI^
z=qThMCUbsv>hUaqUEz)tC$Is6%HTH>yER8*K$Y5W7?(PN3<hI<%(i4%5tV`uS7z+D
z{yK~A?Nzq3c|U4_x`3$0Gj2Cd(plh}n!!$SZC=Q1i?Q#L4%sW7k1;LW{a1$8Xgs^-
zv`5$+oIqA<Qfmxd@20co$1YBmFuu^Oz%k?gwwlz*aCG5i;wM;iE&trh8v;W5>|QT%
z8Su|WW`7gfQepyebgT~H*Dff0La^TJR`7n&NuMVu_T*!b#QTYuEi)QBRo0>_xuZ8|
zX~lF3xZne}FYL9Qz|FXYcgVCKSz_*$gJqn3cd*coGATV4@i!>~lgTeFUKaSP*@MP}
zDc4gv@UzbyMF;VaO01qyZ}`{m<*z>BLj6;;G}`5imRSAnL3`EEhZJ8vy>8#L*U;rH
z#7n2rXSc4$)t9SvsF&ZT2Ai)F)ICBLO;I;TJ>Fd{caYnrE`jHO$(ez$w}C(O*6kQh
zJnug&Yd{=UZ?%^LUA+sOR%k&wPGhWrJkSF>Xyg3|EK}KUFyb2es1D7}1}A6Oa``>3
z`i+hmCT&v;cEQNEdS~0Xj&kbE(P6$LzRgd28G9)azAuOBU6)-wY>u~M1a@B@&xN|2
zYBA$)0?^WB*|lFShuZ{9U*VG7@cFJKKEE9ZTfd8Hk_?=tuePh2#3ueW7UH9Fw(fV0
z3H@<@{0uGD2hVu~Td;-qoL}x4Ej!g;wt1_eMq@uj(84zw9|L>sW-unG^tCsxE!JZ^
zJJ+8x{a_Kh51=lFhsbrT`*0U|f~EFr<-{j~Wl$G%QgEaAz{>Q&b0JdSi`!{pvgHwa
z1JeHn&YXO&aU8+QS|yz3cbq=xS(Cln4jNR<Mr9*rZVQGxEwA;PzSn1cC^&*KX1=To
zUR1vn+FkX@<<s4E3EJAREG3@w^ZA{<CS%Kf{si^3pQw0!is+cRTD6l~^o4AvRr`5`
zsrtyYR_TvK#hH57i;F|o^x#qSvMmWyadmH3$De`phoz}U4YE%yf?7JIUZ=IbzP1i5
zPqXXyCq@9N%XY7er=Ew?mp@(j9p4PdNFoN&m;HUBy4dz)GK-e+9wE_Tk3*|u&n0d+
zUrA(JZtd+Ppv6@kHLmu=4r_)0w9>(eHn-@Nt{niJS?L-EIq1VFl`*6?u*weuU)1~T
z5!wWeG&=x3pc_8f8@FQ4Pn!C$e9J7J87Ks?MhQ}38h`#2Qe%ZWYmf1K!|JDLT`V-Y
z?Ll`1n&iy(xL27l>1pA)k;~@8bN0J###)Yg)@2Pj8$C_afPM6cB2&XhozIxiE2#1H
z=RThe!L#m+31Z6f3n5>RMSk{hkv-H~tUC>S+JKd$uq(<Tc7)I2v-y1t4PoaUjEOW)
z+1G$2wn)WY@slYGBS|1xSygCb*!%vuw-nk@&;5m;@YTM;ILdjn4{>tQu6rR9AJ_wt
z+oOZK;rhiV5%PE+=uBx8vH8%sG3AUdoWkm1L6Dw!wW4UwpCe4`+^7qtwS*4HvOgQX
zp;$(z%%#wOjaArGR`b_ys%2^af$rPWKC9WhItB8eEWN;^vfaM#mZT8Z&N<dwhF>-W
zI73Vy?o}h1hm&@@be^)=QG0Q@B`>mAdlFw#G-#cxmm`z|8O45Oe!WE-(jh1&CZ5jP
zc+GB;I!LH2W5&(FPklut$5k}36MH*Y(0%h6RzZSc#(s-$fij5-i$t=db8GilWnmxa
z^9#583f|9MpS!h0hcF_&7v7Sgq!aT}ru^)vuS@twbC^YuzRZGK>Aa#iJ302N1WNWq
zoR7QShwZF)Ez*Cb3Y0&OdrFT$<rIHY0pp*AhYdy_yCT9dS(f0omi@e;n4?~8U+M`$
zjYZd>fi`*70d)C<;`M-Q7Ub_mz_{r#bal5it|sXw$#rB3et1|GS*>V+7BOes)?Se!
z5jDS<Nx<7H%B$YuI!jt9GGv|$2yduEZ6xU6INmwgJgA6|oPL*^HN~5f{kpgEmu^rj
zBPu1*CPG{~it#1!k~>Ae;y+T%<lG~+8sFCxL_v2PN*$3C{DLAjF<9gT-%;UX)Tn<Y
zJTx$yHYjU<9Caotl&5HfFAm`9A69Z>lJWWG+GU7JUr;;7)(aEf`TU*j>k1!y--2Ir
z+1>3Zd!6gu&QDWhVRRilGv5bo?WmW>L*~{iuETsyBBlBB4aS|6j73#FM!r>SkcGuY
zU%j#j5AORvi1zj?Hy7WyIE8bXqSu2S1)rrw|E?xSNU<>-;sEg=riLhtO5k2_j6nn>
zq2Qe{HGNC=^oNnYOu}ZyTv@7B-N=oN;!kY}*48!0M?}kT9}%@Ut8l^(^MG1(V*;w-
z0TFEkie(I#&CKFkr9xJy4V^J}krlzLLPP*K>OONAM@@-*%<M<AjuQd~#!W_qivY^=
zSMO6uuV*}$8gu@Kqf~dFNfr<+N7$N)t}M*xSGA7!Jil;GzxN7WDkd!Vfu$dYuoYUg
z|Md(WB90XZzd&qGL#%ka$ZKtuKPkeGW1YGNCM?Xu*vunVb95AQ37wNyjU*n;EqQqH
zJri<MO5j?cP1<>f_nKRj?Ry$M4#=dQGruuzh%e%SqFx-U_T69lfAj{~ZqlqM=^xty
zw$?Ze6pvrahPjt3dZ}G8KL<B9&VP;=jg%)yMG?niYq?3xKeDY!2kbsPKl7%-1kh=M
zW3)dPXv$#ktpx~u$;J~mG%Ud~{^_4rh$(muz!m&!k2hpJF<65*fJrQhRcpwVSQK9t
z`1b5(&13ouuR+GDOXQbo0TS+Q09`hTX<a)E+ioOFJ}7vxp!Y94A(Jru5gI67t-SYb
zwC`&kY}B#(`(<l}sGb3*mQe)*^D7~Kb7}uztwdj3+)<=64hhB8ZOdIMt3>17nmDZl
z;1o+eM7e)@)a3)>;v?|oL7Ns@1Y2(&d(U>~O}xFN2)yy#PwUsSRc*IgPM13kTw1W&
zvG_K2{%&CRJTk#r($Try^}q!RNjE+-c>V?BU_&^o2g^tOd~Ud*>Y&HO3UtQmyG$t+
z@ig1F$tp7MFV{=VO$!QI=)MgxajcdSk~bKO{-WpZOEvv4ej>F|!abTo6J-6@mmc=~
zI2w(fQcdArG=o7z$!H0M#-`CKU82y`u8<!2u66JY{`3(spPr)@J&@jzR66P;A-F`f
zHP^6Zy)_!vCjVQ-Wb*Fro)MZ~g1F=Y7!`eKC0F01sS@8}C=qfVX4!z*UmTa1gds>u
zs{i5Ovr4+^`{2S?@2r;A9|tZi%_LL4k%1M@w-Gt-YEgMr3s!c7gJ=5(#}u|_!c69K
z%r&ArL*L1<=db}TMWifBEZE{f^x~7E1EI3pp<D{3?W`PFBkO?k|GHZ9ywz@BF?$q!
zDkCOs^gIE{hg1zUOZCKdC>1Dll`??obCh9Jycl|L2s3w^41h@>|Bu`o3hlqF2y6C(
zxXK24bw^^8!C>W+2GpXIld$U~dG#dy0OI7YS5zp}lXj!m8k*VMWrgi8RgV9%7y7#n
zFyD6x)9(oH@~bi_CL*u(?2?ScFEi=9zKpDV3DoT<+qmBMqT-gTeBl2@NX;*TF*PRC
za%{~$Vn|ugh)!XG{8zxtT;v|K%w=T$-8+&`w9H8V#+#3X3&38Gqe(pHyuc7O0lQoE
zK*^(aNl0r*@RW2R%0HZ@Z@B2|3Svhsz5ngA3ft@R{jNB_@qzg9;}q~QEDM+?x(bnO
zdLPSWl|a58!&`JFbs?R|Cp-4^uM1-Ql7dvZtLN8nIZ5a&lV&9jfitKgL$`myp|&rc
zcWu+wVV<7PV{WaLmVn`<bHu4f1#mv=q4Txk(g+egli3z|F{aCxr|Y%jlau@VUt@ZB
zz>j=iRZ&t4nU+#*4~t#eb^jZul@X9q>R42=88-RGePtOHam?pS0n8hUF!0Mbog$5q
za%wV=TCltigSxhsSgrUF=Au{l+{@2#?e<~ALdEO#J(Cqdi1bkOmk3IVw(haHF(%Ez
zI^i3Gp3+Hzvy~EJEK}hdw)5D;1!9+J0)qbTFnDlSK`&onOVWdhTm>Gb&q!cN1@xce
z?C-{n{o3t{vxM(V14IzRJ%ds;1`8tS1e58M5iLm;|D0IGLJZeK_TzcQD<0ieLckGs
zlY8X*UP;52j#K{4qWnL2DIM8mrlXq1?gsw*YYwIA&w_uxk`ilBk=3;))u*@sR9mga
z;H2eIx0P-~Qu+?->Zl9yTe<wFPZpj}TLp~M9AW$ZU;0gJ+zVZy4k%GM2b*<d((&bE
z7n52SbP#&Nyq5%lp4xc5RAUZteK%mGTju=vPShIRf|T~2rpP@1RMs-(FaC}Klh!UG
z>O94K-l3VH<e2LkLk)HaW2Ua}Q>1Lom@t2qRYs@uF5lIl<P)jSrvk`Mxten!c?6xw
zH)Q~+D0GuxZNtBxCHAW*qGDOV7W)jxuofyGHK(j%iwX?K=g`vA(`GF^^uAl7^ztgI
zvLgi&wD=Ua0)~VfL<uf_-;yu)xXXz&lK%53iQm89>EViy`Q+f)`~hC%0;xHsx;I3U
zPgI<P(i!KG*@u6`BhyKrG6a9u;Qqq#vptD%`Tr+d^A^1Eh;QL3ylzx0*iWoaoLGom
zr-9>4MH5*InWJvlm5Go;&n($g5gO@4i$dX(s-KXjU*U-yq&7MFYfzJ!^DI@JNnkws
z)^kdMJ8`!{jzvz*EJ><fJjBSXG)v0f{jUCx2HPq%IFde(x0Qv_`ymu#S$gA5=6~zR
z5YlGmJ1?yO?NWYfe*Z8Y#022mHP<Q4!uN)-UA|kFDJ>sk0COXGTS-VEk7vU&rKBnC
zU?ifL*O)@xVyBE~iX+lU_;)Ql6Nyznv?!SQ?GL(=2yYfQICCYai%ClDi1S-Hl}K1?
z9{T**>9Fsi$Kh0MM>4N?7vM=#yQToQN;CMi%Rc#T%WMIE8{hT64(!%w?&@cOH97AZ
zkfANIU89eklL!0O$r~(d(5S_;{I5BUvP0|r*8+6PspbKpjR-cdtsDX9pX{v=MV78~
z7Jjqn`*-&qSrj;`9b{OvW=XzeTm!D2EC|fPmq;|JIIHu&_4oXKC2dxRwHzsr-M}E^
zu8F4Mx$7O*BMbOb^YiNGe=EOwc5QS>90+QHH?)ZF4qayqpc#cgfftHM=C_*i%Lt1n
zEPOm7nKQZhVjSY(Mtk4+Pz!!}1%>@ILZmQh`{zxOd*Rj+t3J^b*`cTgn6Y<DRTc`%
zrI*LHz{s#NUYxfSP*M`S*oi~ybiCODHL1f4^s58kVhok#|3#9Ne~T?~WZ$O3V}mS`
zPS3$fB6dR7(y-T#ymSpdN64oFn+=~oYsE9DAhIu>=GZ%U9;Og138I)uo9fv&Fi03m
z{v|Nj{1x`PzA8Voq-zo{)TDRezw8ynRM@F2$SDFO)~m_ustP9HS5jz_3(qiMnjagH
z@8ol}av&}Ygrd-fXIf5C9l1y!%-WCr??qu<W~~pV=dL+SLka`)>ZD;dpk}gIg{iNN
zz7&M2xIYG(1T$Hq)Y82?_>btlq6^$Ej6K5;GAWi~cA#06at#}~rx?}L)r566<A2*E
z`PfV{WAXMK$a#~NmcaQ<uWs=V+@BL)HL=D<-uwn#>?;$gHLMQ8hs)0Dl)a5d;;(UH
z*_+TRB>Hcii5>6Z=T~{_`033Um$Zzwtj(xC{r@rbm2pu=Th|~+cXtd(H-dBzE!`c1
zv^3HkLw8DdmxQ2zbPp*h-6hfu@8Er|_x<8GexBL?bM{$#oxRseWphVx(u1Fts>8SP
z4x9%R^@np$^J3%<O}f!}>M0Vt>awfPJm)>&QwzdD@5m#V71g{cv8K)ZZ9G+lVI+xE
z5<Jzo+zl^hyif`iSpqQLyEGP@h*xs2C(P8ffa*oESj;`yeDj?AfL;Yhw~K$ao7AL|
z8g57#l=naH{XGVhGYH~`51hv^MP-t^m=fPT__t|v7S`D6@x5~uG&jt01cBS7Q0f)*
zb#;Q>k)Zrs3$euDEG_`Bk=K1_+srMxIHOCUd%`7p-t+Ecf<rv&3obvac>!;!Tre*E
zswO;=nt3qZtl913O5WANido5H9~I*zK;XTis=m}gy5pL7a~xDb{`0P}$E1J9`po6d
z&FN-Xy!}S~fWOI#PS(JuUw7g;oiqmDJtn_9pK3ne9%W4L%-5UmR7bB+zFT!I<VP~!
zT`g8f8&x1Qy2?HDjolv?x>k4TxtwF4efImpHXlo$bLWro3j>;F8>Z(UsE1S*u!<ta
zmsd7UHXc{q9Q}@1?Ow6<nM4{8>=lfr)LgE2-e1uM)4(hR$(qPf8Yt`xr%SvVac@qq
zjsMQY^;uzo!McEzHyNuT^zY`tqB!tndiy(5DeeyTB%w=;rxwHGj}pFRvI`BL_=Qi$
zawvBXrkcQKTMsEu7S>P;!eA;?dT<=f{&z{*SRUt8Ig-0UuXI28W=uXYil@8WyKyLd
z_H-F}|CTBV>i*h!6Ug7mAr`!AeADWA2CZR1gX0AEJM~|4bNJj2SWjRk?>DJ1;_3Y#
za9y6*7k4SM$ebN~LF+_;!Nfl}omU@oPjhoUuUbQ=w+#1NG=H?;uiT3sJ{M%yLFF)B
z@(G-j*>LE)E4Br)4etk$mFMe%<P-%6D*XsuxxMB+4ezp>nvU?WU2(uzUBJzoKa7IP
ziuutA6HOwD8FB?*#4fI_dC(;WdBtClOAs1NYSE{ih2uO~olIrA3<EM2#ZPiOOz226
z5BZo;t#|2{*oA!2`|59jgYZtRDs7;eqK<EP7OEEsPnZp_z#^%mQThbZ%+fWu4Fa{S
z(L>#DE_G=T4i1%!4rxx2`B{uwJve>)ZxJnfxpr}OCZQuScP12k%Cz2FzvFyCjpWO-
zwluq<FE^^4$8$@UDfTNaO+!@&Q6!9LGTIDs^!kWU`yWiZ5l`>8n(Zs_Gw~QB^-9`?
z!-w3lS#du~2T4o=ES7Oz*g<lgms&J0F&anj_2fBVav|@)Dfuo<i=Aj%OkGDh-EJ5O
z6?a<wk!nB+QD#(;Q!~<*&H1-;a=6|nBC29t^K~wX9oT&wDXPs?TXZ-gY7l?Rs(U3r
zc6RtD-$r|e)I&7vyAU!uN2R@U2c-{VLrL^w$1Q#n{?a=G=%p*%>4;F9K8JyTX@f;^
z%8#a3h|u3O)!X@P;FBA?fET??)oUgjoW$};{FCR~<xX`T3A4hIr6ttd?9(aT#hG<(
zNxPayYT#5~$y(M_oMUl8Z@QZFVyXcWi0dnK=NkSkw5dcc?D1c(?}*eDe@(Z>L~49U
zDQYID!LLqxjVNQ8gh#k1#Wezy2}4!WX-h~BBDoaoxi+#_aDbvG1OE7*r@e80e9UJ#
z@jVDiU^hr7w9IBa5#rzD_tt?L2SRs4^vp9Fj;3j5GthOCKhY+5>y3h7FgCq(jXhIX
zn2JF=Gd@G&!#g`P?;#~qn-tV)hDq7II!)e4O}F>&y|E<*3A*ELpf`i1b6tr2fo3x~
zfM4@1q=<{-;7ZcTId|3u1Y;hx{e820XE3g@k-HV_S%sK*PXLgv($jS9+ft0rc>z~j
zHsWv`t(jFWPvo=wBQCknmFdPFE=&EffZTALQf^ft)Vxm1W>~p3-4v3y@7B{q>^;cL
zr@@zGwv<(v8s>k81Yj*{(h$alqVsO3wu1ZX?Dvypmz;XfG}3lO@km2|7}P}UArK^V
zT6*vd`RVKNt2T}sPSZ9#$#-nw`d`zL0TE^S>>u)0k%J6UFM-og7xqDXm?;KA_70mB
z@Zt$LV4(AT1$B^>)yz9=>ss6nm_ObhuCYf7rH4x#=#gH7{k`@ch4!38qR)#&Vy7TK
z%L)TUzSr%cHY4s%FL0j}uU{ig-jh~&{W?5%_~{*xS6gdKFhC0IINXf&?hEa^0~w~D
zY!!4K;t|X>y~CJ-&^hB>;~kM2g+osXZ%$QIwoQPS8%mi3U(!KvTOZ+}Pk#KLcIfFD
zN(r<OFn%knV4+{mT47JpugN3azulRHmU=ktqn<%oO!k#?6pk8n{~tIZLzf&Jz$sVh
zP6w7!)8Uy1n`b2Vt(&38<()HHS4R2!f@dZcXq(O@F+T=v7Nf$E?*(~TSJk2WK1A8!
zo~SIWQbz4l(FOuqTUKw^yDsj3KP#R--abF%BAg4|&M5nE?zRQg!1Sy^>C(XjKBPK`
z_sMfrt^TV#LCk&pfQ}vx1j%`t)w>;#DD_V+ty1xTokv{Jr=dOf6~86KM|Yb-(pmQV
zKP%oM7Qeq92aj1?`b@2II%YY3zwr6=>z3MqsN=SulyK>JXl9OtELf1>e(x&5Pccvc
zKhEb~u<&(z+OeeFW{>gn^yKz#7XAD+U#$7Sx<}PJm21h|)f@XNk1rSMv3<dqJ{@Jo
z9G0S@P6zCd{2a}Y@aN^+bjzH3>-tgdapB!(WUkJv9>1K<yEp~(HcbCV<?pH#LbrvK
zO20?Gi9R8&h{f?vUU3z%I}$-zmFov*F7(5$yAr<prOv}=v(@bT?%h!`5HVT!H7l9I
ze1}#$Ue$Alw+R0}QkU>Xf`k9N<MGV$bLH3!0~fyEYCnu7Fd{4tGpCJB58A{9cPVau
zmC;CDtv0wAO$(IVWm+|{`%dl#h>Yuxql@|u2^YI5|IB-oc{&ngUPk>}tO0(Wb8u49
z5HO|P469sEcW#G|cS$B@lgW=2ETMKKJVNhK|G3vPzEOJ10L8&(<j;rUk?1|eV#<Px
zCo?sqAL_OQio>uP;9k@?vZ)ABnM(vLk7O$>>kYQcID&5t71hUva-nkIS<wHYMUxe~
zI{A$~zA8S>`ueniB&Bm|rTR9I?~F>OXN~|t&OSf_#8u#+Oy;khiHM-f$JifjaHu9I
z`my8map+d{e6M?u?on!WV!$?86}^9yo)iO47c<&_(G###zVzellkWp=pZfvB7NL>P
zWOSe%0&IVO{l>YK{$e<F>+7osqHPQP%QFtX$OIp@^ygoa#`1^#?&eFbOY@?vG>idV
zM4kKF+QP~l<oDW?h%9mb&SV^ze&P8KWnF$gW?NbOERCn`3vG4B&IV4bEG~RG{N&Lm
z^J(T`Udzp+E(dql2B(8}3bo<p?2x!wPv779q8Aw11RTkmzov-soPQU2epo5hgT#3m
z?o}G4foS*6@g5D`$-5UyYd_DrZ(h^K-3SSx)KMOKLwVD9Z<~>>!0mO=<Tc1wxh?Vf
zML`T?=t>9VfCX!$Jo6}?+;1VBs$aK(ln0w64F(A&oi)r{CMpO*6M?SZ_Pofou7}F1
z5(GG=xBM#YhjgjvMjSbblH#kwp%aBi@J<tXWT>qBl{OJ)oGY@|ijtus0%AUTwl{2{
zW2lxgqcD>g(O6CEY9v(-%#euzt5^+XS_~Ce&bOa~WS~{f^p8Bo1$aU>1CCwFXUr$=
zf@I|!p#=j3rO?ts*ps$Cp=-9Cp9zCz0YTzexuym_EYh)*$*Jd?zX(NEv$TuM^?XAD
zj~_O>@-Twk75Whn-g160(<Lg_UQoI~4^wR9)QZ2kB^)Vp=abS~0Entjp2Qy$H=h?6
zBi@A%I&ub?lc4Q!ki4=xWKw&-yXnlq^>nJ;$u;jMRW{<+FY=R^jzcf1i)aB3Qw#g>
z@<~#^8jZ+4tN(1UY_i{^>fScW!Z<26VDm&kMDV~@6C`Txzvjc|veWpCL7Zb7+ivcx
zOE&k}0R>W-eChJI@m<XqpN69u_xZukFiTR${V08Z6v^6OS9F5zF6MkAOnp;VMwwai
zQT2G5F(;Z>bnwqqXp@u3+V_5Un3KIK2)Vz~<2Mudfz!MB4Ugr58kdLI;~o(m_uRHd
zN5u^TpkT{#W*p6LN$1g=hf{TH!}L;-50}E0M*<huTcOhgjm`RZXcG`sd9!taq{q9_
zFXP3d811#%t+ktX2HQC>mI+3LSIZ6CebixY*@k@gHDN*&FIX6F=mHFhZLd)vCNkW7
zT<x5@E*_(TH*i;t2QW!X;YUK2Uf+Q*|F}n3xq|89HK>H|jKfZ|V#FqQO7O05Z6h0T
zBnGu!)P~&QodAmb!eWtONUN@JC2YwxNs5v)(nLSf_Z|k1i8SL`U>=oEX!j-WY~1~1
zQS8{9q3+zEfEztPcI+TW{Rbqdy3X4HvkR7|{Xr)_QBWH%M^_mw_P!&F&{?$uTC{^v
zj>UR%JcIj?2p`&7a{A^2mI<x*O{Fo#1$LMh5n*U)CD_iclqj{Hf@pomt~7RbF03V&
zXUn^ee5lUf*UFnkU#i4Bw*~NEN`yAB`MK|euY)6RxLKYxiT}q9+vB~?_5<v|W5;9U
zs!~-;>Rh6EtT~5Uj_j&yHJo_#G|aiF@Zv3OkkI722d^Jr#;a4e8&J~B+c9OuO}*c6
zb#9AQPR=De{+i4G+Tn>VUxGP%dm+{T16NsYcKlQ~%+Y^r;QW0S)LF0V+wY~6SH4MT
z?Ct*T$unk|b`H$mC>T7jyE4b|Vx)Q<)g693wS6vF$0o!>fUZ{d`#xj1C$dNB^+qhm
zjy11@V=ptnIa;1^^|ADlqjPifc^$F0$ev4c2Sq7X_(9t>yzfa+QhAe5Z1At7y$2|v
z(y&kUhZA1zY9)38xD<Ho{1^+F7e7XiFRG6oO4Na%9pUDkxX{U}6_>&BSKgIEIfCtx
z!3yG<!B^OxP<!&fY@}e2(EKHw_n&X&h2&xD*aE>)dp_-P=|Ln*ElxS{cqGrZF4=J+
z#fhob<#IjhbL2yX*>7u=fIN($sqsCM2l!xf)8Rc-$!wysHI;O(M##Et1;!7uUBs`p
z1<fIl#;-d3uN(6}DjF$FEHNfrij9~UTFIhEsP|f?_3quJit8!hFS~Bu545ev4G=A2
z@y)>&aFg`Mk~g2MGjYRHB>~9@Ke3jd<j3^kEU<ys{TH0X?gv%6+Sao8<Wud(P4lyv
z%wy}lM8|=GmHlX^i?F<O-`wA%4-2*G8e-m&gt@5J5RY=Fj?o<}5DakRLb#7s%iVqK
zll%Auc;eiN46?prOzsXHckK6X(N1t#d`8QGJ^Y2+ztyePPX9u%eh!IQplsI;M%t%J
zgxz?yA!e@BWN7pSFi3BqVF->ca>(Zcn$v;>Q{HM#wvc@#&LTDBu2LKMRJw5pTw|aH
zE&YcztAd?^z*xVJlF*4sRvBXGVi$=lOs8kZ4QDp}p$3YwVXWj}K#9dmDr7dxeS8*x
zKG=H(;aSPQ=t56~dCb72o5RmaFO=pQigHmx;z~8MgZUwtq9^Y+G2n=X^)Se?GXfbl
z`El6Iz<nZ93lv<Bw_&jQ(Tin6Fok7Rr7OyM8%VG7^`kAqko1iGYiLly435)1oC~mg
zVpdkZ(D)M24wG5!M)Up{=lpF>*$g<r#BCIIQzGY8U*Hr&yK=;;o?_3AP#dY+ZqC)O
zJnn(VkyhVrdOAjT`*>jc=W6LA&q#b51K(=@!Jl6Z-6CS7MqEr!)3Fsva|noo%(Y6;
zSqu3L<hIm_62Nr`|J+2q4xtn~;)O2`WXCc`xXq3o8tE;DA)fK<#2$>RSE}xHyxt<c
z74fvS-_|%zFQwi$v!~zas|re4dj421IHrgZQ)(CK98DMUXf&4Pu*Sx#uq}qtf&{ZK
z-L_!K*OrlQ-#-RWYW7v+?3Vuy8wrNl9PTy)1gH38iWZ?^7m|@xEaSPYcdz;mntR$$
z2v47!l=|Hv;mnni07RfhDHzURtIdlAZp#m>h1;rZkWrzsNeCuK3qcndB6<UvO<@Ob
z03_v8x!c}rkddqw652c$<xaxmZHEr(+R^^CS1>Ob&EnVFsS!dm<Nj>2fz+8?9m1I)
z><DsMy>-fFC=Vj(`F8A06Xwa&4JC{IShvSx$#c|W$RlQWjL51|4b>NyWP?wk_xXoz
zYYx6S5$mKFLz;n;l)FVBg&F%OC(rC=%&5&_rxp~#6qofVOkeB$2j?ePyZZ>6_OBwl
zzm)4J*ICF$26cA*xDf7w{WiQ>Zw|b!XPF~@5jwH0I_-w1LTXQt)g*@$?pU+(zhat_
z&|;rr-lIYq3ai4QA0vc}jaSZMX}Bif7iKwf<RaC*Dtf`vq1gxUn40!v>IBd`FrrCj
z0I#f9751C>uK71ZJ*Ye4G4bMWRpt*f%{ZL~>66f#<HZVi0h#va+qqMnUDa#^*qR&y
zGJ-|yglVbMmg{Fi`*G)qNkZTxZQCoCdvPqlI~8O2;Jim2yk(6`*{YXzFO5c1|C%mx
z1ZK{u>fjn!>S+8C5tc?tP|Zw2jxy;p5CPS`TPNF=;Gz5ZrxN-D0-~(pTSG3fnlNgT
zguOxd+YL$o^aCnc-fr`_@MCF^Pj-HO+(O%c5oLJc=)pY5r|}`?<QjsRC3^RruXd|@
zmQf{k^Gb(hxO)6O)$VSaJte^*#V6n2Ro+k4i<n0Wj1%aNtGN6u7l;^Z{AVtecHA|h
zcB`g#o2oAH=C3TlM}&hdU7S~YEuDg2>0yoOEu2K#^mG-VmDnK5+TJ`S25PqNdJh0N
zjdIR%^vYZ0>tvtUK)XRtkL>9=l<^JGyzAbrXYf=>8MMKj_=!SHqYL_mG#kA-!j`6#
zXqL?cM_bd2Rv-=Su|Ry`3{f^Ntnj!IM@kqkEAnf*;^?!64;`&LCc<J+``rfoF4|VY
zH6JfF)7a2Gd?>xlT^+-mEZ`BT!y|Y{4YjbRM?B0!J#C%QgH$kK!%T?Us0K6$msjv?
zcH=?rVm7h|I^gf|HT!{f3FfGUIe6{T7o9c8Trvc^3}Q2PxT1IY?^X&@k!h`a=fRtB
zh3sg1j`BbI^;x`6gmd+*eQ|uBwcNaBeyE;;SX^Vh$Ul{OadycC+L~u)(k`|JovV+8
zN4RX;;ERefG?1%dn&Hn5oh2N?h;bctA&Sh6N{MNqlf9|cR9bdR@a~D=;kKwjKy0N)
z`l`K=%O}G2{lVEuSwaixcfHI$!^=xFM#vfJg>N0A*xj%^D;5nTf$j0*8vOnpZA>*B
z<rkJ_D1}n_6W9r_LHpf>R)A^Bu7)MDhMZV8p}YADa0<ZW9g+cks1*MDdRrEL#kDJw
z*r3rQbO0-nab{h3QT+b(P^1+)w?PY@T$-7cQVQd#A9gk|jtr;3k5^w5+U%@4--ST8
zHWJTV0HS#^(f(}8mxN48tKHC0T-d`f_+ds(l^c#p1Y@F~N~2)f*~E8ET|}{{MCrvH
zFh<-UKYLpIW$y<%E}b@v9ye`W1eC)8Q70j5bG9s+MZUPfPZ5g7+KJMHrZN`~s-&K~
zv+r7`OpMJay#`j*O(_q9rVyQ?ts{7kU6(>Ob`jTazIC?-9Z$K@#G)9=QY@&L?+P{G
zIKEe27HvZN#YLO6F)zrws!J5xb+|(9r^BVG7sd|adK6kta-`^CbmQSpe<=-B&0^4U
z`6pj{i>b6Y*JD^^l^jO)3*@g*PwGY#Uz};LTYk=Z)71s_Q}^~}vIU)bx7_^3XRs5D
z=T^|oIHE1jrYX^AnYa`^`vesWZ8)w&5`gx_>lP`9X6j=k6uG8|Ca=C{5h2*Fa&-q&
znq2s*T1piND5jVmL^Dx^6@1_&6gcro_`(vEqE%oMcTr!LQOn;Ai^wnKs(M6dl%?&e
z9r-rcE!t=>Cq8Ib=N+K(^$Y?(N?{Xkx(F#b)`*Ann6^XdN6gm=Z=5@~XW|R?9T`H}
zs7+V6OG{BBDBqah6ZQXs_T(9<ChNpYjH}&)$W5{cbNo+3bw_5Ltr!3JT1Ol~&e=bH
zq_$2V!lkLra+m||4z^jrH5g2X>pu7_oBOL=xD{`I@8{d|-I_YQ{iWADzB6dDE>iE4
zlUw4KyBO3)SVju(`dH{@P0r3(^EBAfk#N#7UN0-~@=DrQ0@!=f_h~)x`2(t<Jm~x!
z)*bBk9CwB2<Xq%cRDb-a@$Rhv_xE-&P@@ahhpeIbinul<S!S!Z3rf<o4bYc;)RznZ
zU%XksW>dphNM5j;4|xJ(`d7LM*%PbgFNqgPD*;pNus0EDlmv<p*wpBIWddbO1@#Z?
zGa0hq1moX{4rWHn87%wRf}aS9D;Q1o5;wLvN@~o@gw^r&Wk{zGi6&jiLwY1o65*;@
zMZ?&L(1Tr%XW~aOV9E(NIa;zv%r3$MPrg_97i7a~qu5>hUi<gI^yNg8fa~oAUg=K&
ze^GvRivHMn-ec4(ePX-Jdv(&V8E~0bi^)8Yj;D0BbbfYomgduY<1Be=O6{9z>oFG_
zIY8krbd1_cfbl9aAC7-++hF$0jwjKyel-1YR1tB*baQ)aLnJk5LEVHR>rhR@Pcyci
z#*+DcwSr9z3ml|ZL7_qFqW#3zvZgB7H9M2$j^b+1%wIY1ILSL`1=Cqs;Cg~Gmd)Eo
zuK5@5jKWKybPrD-%J_;1NT7f8iVi{ZYG~FZd8~_f@$EvFX_yVZH|JL_MePPnX$zM!
z>k_pdt7`QuK!Jy80S#@K3yH*_``>|&z({9saKK%Dj)Ef^4O?`ib9@B#S(nDNf_BuN
z_tnSFtm?D+Ee5otEaD9`Cobas8Ubhc{RZ!a`VBN1_CX)l#s>v<V=D+;&s7A&DSY92
zIxf6)C6ocP<1+dQY`}a)`@RTM=UG)M<IoF<qd7wLD*}|dKoO7x(qxb?=1(QEO-cJN
zv>Xb=VMJbBswI=z=A*C8^#zT?EahigV8($CO%~@0625G2O*FkydGH&ZkCk;8T+VAp
zMU@GIiovX!lCxT(rF#C!XICc4!X!<&4pRT{+pABN`hJar>n)5;G{~~+Q`Els-nr9g
zdW^5I`!X5Ne9pH`VZ?hv>GS%>=%<m^mKwONB7y6HtOiG$J;1*DTGq_<c=@Vhwqb+-
z>s{s)F;gYqX)kgR^skjCmk47O+!cp~t!+Ggm8ZDO(lJVh$v^oGJ}+wwy%-KVpeK?@
zMfNJPKP1>yBKZe(OFF(K(hTqMSPIJgSt;wPS&gwq&Kl+4u3f^>uQ-pAC`ofQQXGw|
z-pH>bEnu<#Km{T+L4V<Mi>((PTJJt;2G;9sF!8A<>f%*t^N2_#O-p4|hO$E~%BH@H
zF#3LQ7M!dHz~yN02}?)0a^m(1N?)17BO^$#z)EPrATSZNnh*t@lDiR_=zMcr54ycx
zz3cqWiQM@NWga%rBhxXZ8DtT&g?$C^pQY;^>}5mFH#yLnf@DqeF=4_^2a@roO#_ZQ
zPI8p*n(MRGG_)P)qkk`&#2u4Cb@*RHx-{Nn61BN~E3NU5YbE)y@LHFa2)7T*bD(?P
z%X!klZlF(Fav5`>M1T}li5B#IZ`*<IlEOtYxf|-ft&K`d30j`<dYqTJX3e7F8#np!
z{eIJbZM^ufMtDCCjw{7g^~#oD7lzjH?Os||9EVt;NB|4wK41ZXY>D|zu-kOZyAnGX
zBJbL$dps_2a~{;S_z7b8@PtQLSI&zlLiRiB5tPbJACc1=f7vF2@1~xUxp(RCGR5DR
zRIkf4;Sh0Sg(2ccmcCEx^P<%@<$1N&zFtimzh1?T#Sz|P-fzmeiI}c>N&0=)UV8`;
z`lZ2}So1pMG4kB^C{sMQRwD-0x3k+5Y)iU}bjA9+(}l0)tHWx0y73k6)-Ono=gEc_
zn*H2TxQl_Pprf*vdp-N*nff)YVUIMW?Ze}O*@8aCX{!|U!m0`Z3+bdRn+BQpGF96$
z<LFRJa9J3H2vD@=QWVt&)4=Cu&s>YGJL~4MZg;AuMsS8IeyUhsZ`=Upw5GnE8%bRv
zBo~4@Rf8&DYBs}ysfxxJs|bTNX10P3zMrvZDz1STi~ub@euL3<6}Tt}A^lQZFv%ur
z9{-za&9Aa{X$R3Jd0*lfFr0q$0`?W3s48DU#ZDi^IhZif-8e$J*4$RR^B52&v<MKQ
zeJS<%UN@3WnNq9i0Pus$4)1^Kj(hMUaJ@BIyI(Z(Cvz2SQpHu|=P^m1R=q@IboRxX
z*bOIyuz`O3801euo^p03KZk%FGGD0Na-;|DaU+`#uh(>9iJgo0?ryCf2F}LQO-VTr
zL?3>#W1?O2X-|j_Jz23*X0bnSMDmL@x**>J(Y~nB=ZCs$1bhi+@TTpX2({QXI7YJ1
zCgr1Wl#VDovk5pS+|B((-wzSZqDlW`NMCUj$Ie!hGH13U(N5t6xeeN9S8jPN6KL?M
zx*4Nzyi(0r=FCUu&Ha|nFGP=iS@#7U0_xw$O_K7dX_n(N!pIBecR8*F2fJB-^A|*{
z`f3~Dq%PiOdsurdg`#Ljy6QEc_PPvp@#JLSE{{%-#K1HR36jhZzZ~@*pv27^ZaCYF
zSy@!2_k?QCUY<6FUD!VXwXnYWay>MjbKgK6a)h>cOTC&lMk$I`%3K;jfhCK54sFb-
zX18^7H)Yu177W@jA}S-oFJD(HlKCBXx3cZ`SpCV!94P}86m1d^u6mwn8|zt!4aj&t
z6@5V5Id<^(&Ky@D1M*jmI2iFd82L><{HKe)&h@^!C3F1gv%me*q*<%mkG7)UU8^3u
zf}hVH9y_l;P5a!SB1-NRUSfAaP2fv@q=b5MoUHm?e?#ny8pZPKaX*k))LA|8U4z>h
zF}~YiiC`i^iId@HCi*demNt*@K=;^Y(M^<n?{A}aZM2x;>t$9liSu~V?tc|HxfzXg
zsQggr&%Y>Bh1>6TaSUx-Z@S$!es0itI?CW)ak{*Za@#wvL|D4{)_Jb{0G&F%)845i
zJPxqk@RJaQ_^!JY_UkNsXh&~2YDE-r5P29sxj3X0JkeShZ&+5pC+R$VB;g8D%Jjbz
z>=gF2>o~3UKdF7sCxJ1|8RiBN-i1G+B*VSf9ecN`p^LnJH*o5)YnD@Pt5_4h8a-F{
z0n!>tpFP+gv&`&>DG`H4=CZ8p`>^gqD)_w8zIUGGjXaB9inlmGqYF`ORjLzRA#d@o
zdcQ!q_eDf>tAo2`Jg@z^N|df)e8hX=?4Hgq$+tWg^YT%-xz-Ij+Boch_NaGMTJ9|o
zWid{1bXd#sd+72D;v8%0W6Y|@w@!!W-y3=~(A`x-@VuGk&?~Xql}~*Iu36$vL<NY)
zSF@lV9>d36`#Z$#O>wR0;vA#oOUY_~2!6{@q8*E-Uv7!lB#TOloJ|>W^y-Q*ZN<cn
zhgv^QX*&z@K*XkJ;ZKxAD}<drc@K_Qfo~s8Pi$+kyfQCBaDDd%t`||(wI0a}=Qo<D
zx3AL4+kJ&rw$h5guL6>N+huWmA**e_9Y~-z+Y)*M3{@XO&ch^Tt?V-5OSKKvnSYpz
zs@)dI;Z&LGd?rm3fn&F|DCiE(<^S*zywx;>f;Y5{b&L>d*CJ~jVgHI3Ay|*fTerTu
z?1xHImb!b=;)jA@S@Y}2yHZyuqFMfnwZr@-^oy&@{VDa?WCW6fVJHm)VP86|s=YMX
zd$(rPBYq&ElgM2LOiPyLBIHIE4d^j|wr%#x9T#Pppk5jA)zXo+G!;3}Hn^8+;JAPI
zxd1)?lW%H6Y~q4%VRKlNp0?>qJP_&!YQ@Yi+WXtY?7j&nloixwAyT>HRO9Nm*Xf2;
zKCfbsPYUhq`|!834;<%y%u=Q<5HqSK+zvdDZ{(c*#dc`L#Hyri5j`*DP1H-vUm4od
z>mGb*Eu%o<IEYiu?3*}xrc2X*BaZj74C#Y6FoyFPe><h@DA^bVG#b=+l~G|+nC@vF
z;-B`epOx(3IrpZ3--2c^>YXS+F?seg6g(+o)D{6{ely5q8*39uQHt>Zv1F)Ex}D(P
zf^YDLB#?QpD#Ah>^)jCNR#=fj`9c*cfT3^)_)>HZK`|ty1?tkugmW|H(Ey#{ccX~$
z9MZf1M(-Lo^PtWd&E$+itUT5)9}>!{Zmdo(tF(8?2NXHK-HMLH@*!Ti22uzPe!S-7
z?v)oSLUsp}eIS0mG&|p$`d+SFk~r&L9Fl@D<!X~@3o7S$431w8cxjn>{h5cmCpSNK
zd(h1Ksi?M`OISTNtVyn+LVE#VDums@O%;Q069iT+9DV{@*K@%nkWj_XHq`qL-5}Y2
z70S;14BZJosm|eusn%-Z{CfXJ3>rT?Dv3JtZ5?n1iQI}_QPs@7s2wb$W}(M(+%dy$
zB*>qSF^mGWY^maF>!8chqIAKXA)#;!P&zVlv4}h<KKt*|V9TqibH`K$)XK;KM0Ls7
zI58KhNreL6d(74}>VvQP63ooW;|uJoH;H!@unEhRWSh|7pw<ka%7jJAfmm|xcUfL>
zFTsNL2P-kr=pmSqY-82ShYv5I-m$chlQFbXfMsnW;ED%-aWK-U%Q-KpxJdmxFMHE{
zekQpjTY6CPfi&!6R2Z~h3HClp!Qqb$9Y}j3w37r9S8tIhQnKaqRp=%@8eO}EQZzIG
z)2X0$Jj&uqlNHO>mD4?qjK=rjqak<-I@;|j<OchRnB#FXi5~4`b8R&#)RvCZ$99hV
zU$k~Qzn_WvriOoSxnCrcenpXTSop;{vZ>X?D}Lg)WOlq&<Q{EQPYd)k8m9g<8m((-
zAuMjtT%sw7D-uhHOw;NNl}3FR4k3x)Ci)NrJ(%CepdS_{O_Ex%+><d{Kx)SI(O4g3
z5;7QFz$=r*^HWqg_*M2TwpU>|Za$2jyIo$Mu0t|gnf0L))OK&-<KD&JHp&Igt@h3`
z(TWB}vltcRsUy3z9VUCcI%E)i`25@NqndA^GV{9ua!wuKU<pBX6v3bqg$%r@25zfT
z*%i9Kqj3y@z`>e2+RYyP*CY1BYh{OF^9FddR(AbJ7@xJ1qH+fYqbHJCrEwiyrJiL}
z(O73thaecw)hFtrRlmd2mNx7o{{{&9&%)bYvWYjE$O$d69SI`epGRD=4#F0H1^7Ro
zs0p^7TJe<8Hu;ctr0yAwG7Rws(^lhWGb|?LkG%;!mh@E~#t(+RFb(objsU0yr4lPE
zvdAxm*or;0lyD7y2|?g=p`J#ZIJ~A&f#9*eG5mHup2QGMt^HA0l0ApqIYLB|*)0Z)
zhdDy&mz4jX^Vd(c6XMsYEuM7xXe{sXH7j@h(CudXj^%UlG0v>VKv)a+%~660{vX&>
zrn;#m9s*v(#@)Ne0%b;N^-m2op%n*yR{GL&lUHJcY~9SCp&hR*XeE?u!38_$)>Svu
zJSnId1Fy^{InB%=Wifq&w5&X>ym@{5jUg%S{bhTR7pr@J_Us-=7f%Y+;TPyTAmFL%
z|F~nn<OT#&O_f5<p$}M5o<(-CctXUh&yxMplw_2XQZNzB%8E3|ff*GOtwU<sMx5QL
z%?R}oR!vb_1Tqbld;Y%oc^NyjA$Ht<GnUnWB<CK{hd{h2&D`MHo^rY`EGgU;^49AI
zWdQcXC@G65K5OyF%woK0m9L{08#mxsJbGQ$FmsImL<xEp3kQ{6IeFa(kQcB~>k{<i
zVMHs9nD<~$U5hh#54)?%+NL$=jd@mUE>Om}SF>`7C7PFHLi70F9@jLiYz6bkpzX8v
zdNK8DHUBuusR!xONRr9DMj$!1t~5$<X_pF15JB64ngw>J>`AiA8)-w?t8gANpa1R~
z=*x;)9GERa<w$5)cjVrma`idNWP~ix+6+a`@A)KoOS6$)Hb%`@@~y!8;hK3h>>l)P
z;i%hz87?VU^NM~ZXq)RxZ@(dxG*8hy>h=RsNxqF`kiE!7_1)2oSl^`*J{D>MNjno8
z-2%;27*v?!P2W#Ut00IaI}j3;dB86q>3?<jKO3eGdB^BXs8U5WhAbXzysr(-CArw5
znZOiwsB~otWo=YL{FBVcAIsHk!gQ%O(ByQfys|Z)Veg8UINUzGB(|55fptKdpRtf)
zhO1o(n-u|GQ?Lz5$3~Ei+3T}fAzW}UWKs80D)K7nT=EX*!1wFhTGoTG5VXWLFq97Z
zzo^uREUHqeD>_CO!3?v6XCHchSdwC_A>XR^jo!`Sdy}je+Efm1GY%hu&CCQXIYQDC
zNXn;jqB7{4gnMaAQEd}(8jfF@7E?EA4K;uaRs-Sod`u5Qt${+d39z!EW7c_Ndx*AC
z;=pV+Jw9_#N{2~CWSOI<e*7%S9R-4@UruZb^S=$^!Vm?9JNdz}ecxFFn`j%@Td*g$
z!L*1};M)8t&*K?rRhgFe9%M`V6RBQ3xm}(YY!|>$qKa5#!7LX^Vis)j3Yy(9StFr9
z3bMTif7z1qlT&Q&ng~r+kxbE5_XG0>=SGxxIhW$iHy}^6d$N*Zo(M(DW4{Opj<n(b
zc8Qe7_4U*&cJ6y@(Wpb}_HBKq*expA;)!e<54@9SNXf08o#?wcpiC(1L4N<vS){&r
zKC3kg`PYou!bO@8yEiYV1vSJm@?!G2x~ML7UyERps0~B*p%zWT^?jTWc;fY#q#>5&
zu((tO?1rK<)DjZ*tyH9|Tc_X>S=GN~Y#m^4RWK1VCsZ9sJq;I;<Sj5_uUtx2$KJGj
z3Kk%<cE`0tZ_3gfL}AP(W+VkBGbNgZGH28DqiMX2bffzm&U^=L4;OiXKqGR%enm!O
z9tN0MR{&oIKR)p%O>sBT_cot;yTm9FNiMw}92^s6jSa|((zEzC?#a~U?6ZA06jf!(
zSG`m0|NC`9;>W0#u)D9REG<w-CCi$qLx-}}GU9o?G`GI{Jf|&Eo03oFm^7(Nk&(KP
z;Z>-#<y6>_dqOS>O@AX&FJVHdLpy$JM=D){pC_9T%xBvw;g3<UArK;Q;n>gt0Ggo2
zhw$nw+Sw15Q4qTQd*8xBK_9(J<p{S0(@n*M4W=fsEGerpG{S$&u|v=$@AkU2B_t<X
z$6x6W+MYDRVkPKOqWa1bgTMONv=LH+y|Jss1N3<UA0rfChmwN;c@6k{na6msHh3XN
zNH5<>;cHQebw5hpTmrh6pW)Y0Yfq+#sXrN{70uu(dTF)2)NeH-3FHj`^#gypg{m5L
zAmodD*;uG}y2HOtY&)FOl=dam<{&jS`S$V8YCCO*R}zjzqr1-Hu1QBYOt!u0MH2Od
z_K0jl#`|{#nkuEXg#2^<F{JWgQ6Zn=PXSO!=)esfbjW9WJDX)$b(7|tJ|mExsKwNv
zVVx-@1=g0#VlZ8wDU3%hI0ywNry|4Q8|xR19L_FK8xF&8{`Vv!E#Mi%m!Dk<Hbw?J
z4QWv6l6wrC6xin--u>~mRCfo@)4B$fsOr)Hnz9>d?A+^gRAW@cvqR5&S`AhUhwmn)
zqZxxG(|)Q!C(022CVZ2;36HYf+z~sh><H6})v#RVfpC^wo1kqH3X!CqzOHCh;JBGI
zI4TxrG)Yaz!Vx6tRYm#D)mxmY^3&MyzYH^|S){H@FiV#!RinvtDbkw|=-JTNJZRy@
zw5LW!UjN2HVXru+%w5)mLbW{pghWuIg2BI8bHeiWb3zBvi@FUmi-dcS(AvaaxW}=W
z<863>A6N--j0fm!h&g9qAKUn+Nr-l>dy9m!1f1t+W4AFSX00=^TzrHnZS?OneU?0Z
zI=PdO|29}xcER-UEP&naJmgNrBM+5{Uc$JOz>^T6UpTgD<0TKtEYPa{CUt~Weig3P
zfV8xZW(eK6qAwA_Z6qf*pG3=;aw?!a1fJIJf&Y-C1B`zT^47DqG8GTJfy5bjNDaAP
zI+>`WX|?@|%L)G9<){9KI;rozW1<XEjn+Y`36VW8JMAQireOT1I5TOudTvvfcn708
zFd^Hl!T_tB8gK}CZ1K$KcZOobU??_k&RT5AM<j1nohyvs;{fsNYBg<=;~6DZI3#b?
zSsN~QTdP_o?pa0RAp=%0SKk%R+MNZ+5K8?2AO+an<L%GLoB~IDe*dhpuxP;(kv@i<
zMWIU#K-60d91g|Itm1kLx}9$us!8C5Yl<!ilhqo9{&@D6AHU7_?qO>96>)WbzOz*J
z5H`L*L-$~<z<tl&XdIa@ti2LBkUA9d-KFS@$a_se3j_=j?VrR$5_<pJo><?5Y3`7F
z*{EVs9T4Z2&U1ms)QIxZE=Av=x&nUL=s13g%@JEkj=`NxE)pZYhs{k;=iU7LV|+%%
z8NHs&q7b`xf4@RmxKrVc=b=lM8jHD1D(Y%*M+qes5qESwSQj8&z^yhGr>2AoN2zOk
z;v9qJl!y0}CG-Ft3;FL}SfEX8Y^vlE+qmy!H=+Plc$M10)hNFQ`xl^X;gL$6XwnJb
z8|+(ZpZzk2AUowq6^0NeVay$e1VAj*pq}&gFJHqwNUxA<E!n&$7Rb6Mi}J=>Q%0=_
z2{oy>sSP4+ER!1<CHGqziU1ye00Hc@w~bNd4Sq1w#l<L(6A$Az;+X#q2QM7!XV#ry
zs;KI2I>XVb06Z;A)K<IOW%+*D1|HYY-jsQ2FTyup?nK;vD9xit03wnw3(s5Y#ngt4
zv7r;UP&bI0wFY;(2~{+l+X)}Xxh8>VVvS!60M5G(SxJ0C1qQR6FCuq(GSj^smrB-N
zB$TG6oATLC<%1cvEXse;>r16Q_5-*JRL%NT<eWQnO9h*jPX|VsXjHvvQw^sXE#%@-
zoLan!O%@vW8%9fLo?b1eYb9R@v$kf*u7;xVzXNnKvcyDi`xR}n=}*h$R!GZA!u}LR
zdjQK@hmVAv*S_(?YLdAIgJjs0hG}Ggas)6_<m`gdrHeH7r+@j}Kvivdyhh#m7aODb
zrlg9?;K_5S-KWvB!K=_Jj&%te*@idZ-qhz`yGJ-G2qqN*)I&pDN1t?)Xc6OicU~kn
zcI=^Dp@QJ(l%`M@*yscEVVGVU%aD&;yCFrqmjQq=LPSQkK|N}9DS$ZWkqc(uJQZB@
zMNjZ3Hfe)u%5NN675ra7K<bXFv%}1SI{J9x*PTQ6{+3^=n%sF^IpJvEesEUBPH|g*
zq~}tuLzV59p`4>P{S2tFKM*KS!R_VGt_3WkG~;!$LYJcO(h^Tjg-`OXNxi!`{3|E=
zt_;&x>SrflX4wqJY3?`2Zxe?T_V=z@*1%a@H(n??!5++ir-LPYVR$X7U>X|3jn?*W
zh>bTItE%ixiCtpM8Ahy97QU$-by~_Ra(j$e*Vc9wBw<LtO-OoUvJaRS(>yV$i28$t
zbPF{bO>CB0YScg4VOw?<sPH5|oth9?PO$HpgX-I7?6O#<@N-HM)+No>FQiCA|G=Za
zEUsor;q^$-`$us>{xcJ41ksLkBq%}ke-Roip*}gK`#x*QX!qIH|6m~nEtMU-BG)gY
z(~sYQM`#m}KJgV^0SeF93XI^rE2zdUw2ugy9$G#QSZznMtn+AsvauS-|1i;kMx2H@
zId8ua55dSmQ1I8|5jc1)L-3l!8)#^NGQAgCx>^WyBIh(aU-Y*5kZmz9#Xu(OW<BCc
z3S3GCBpUz5Q9&*fI19IrtF!}>kej+;T^!VcZ!D$cq{t`FXQB@5j`dpL_x7~+p-MuW
z#miK+bBy7`Dij8YQ3B)-8F%A=z5gR+aFg3oMv800Mu=0oIFqNHJ4$4ZZ)CA?OI-6p
ztfG}JhqhQS(M$wb+f#}~dRQQ~!C~TIJl@Mju31F?-8vz5SY4{B1XqoK@a2@(koR6q
z+E?)9=xsN@j$eBRGTZotct*8RcCjW#BR9eIFzKFrpKA8)Ws-@34@h00PKC{Yf~3Dm
zPRE?Y`m_1!=RHKfCPmBZskfxNKPixjJ!HeeL4JcoJ&dg^&&or3tvaN%hhAZ@aZ+v}
z0@VK-VkQMbFaPU%+PGtj%0#`C5jT;nnp@Rb{FH{GMEt}otV#Z<0keaK=m&J(=m{e(
zQz`u**2|hv+GZ3a&93ZFJp^hH^WQfK6SbXTMbRq5^8E5?v2BOd6Vil6F4ehd67n|*
zpU?KJqPAWq45By{ZHY(m2}+RqGNn_bHp-tQ{X0ybgJPT)&WzYmu!q>FuHc^gwi3zc
z@W=@-5e<)o7*s&F<pyNJ4+<F+**rZB#T#Ja7U~%{xhz{gP^Js6L^Jl^8PpjhiBi7<
zL_a~)UIGZp$!OWmT<B0RP50Iws;29xMg~oXN*e|IPvD46dG#KHsxStGkPuOd%;kTp
z2>$-;jeL|2#LlMLC_)MyHLN(<Z*bR~jGafwnkUgXbvD=Nx_}NA&SI5klSq=vHfMb8
z`jCu~1S(Y-!Io$yd|3v*8bO%Q%t)?GA!SAPuA4wOnn;mPdO2zcF|PjzW5G?+iJ`NH
ztT0w}X#`6mn}Cc!HEO0Sza+J5rP_Z~Enf0VgKp6eAPpq`;Bhq!N(!^@9f^675>w)Q
zBBles0@l3Cv`5qYQOYOZZ%3tDQIPd9nz-_FrXAi8tR$4tT!B`8f<aP7^F=ZHrA*4Q
zBN6dgsBDD9(-?@lzX<8xQTyU|Quh>|7}h_DpK_R+#bB0dv=QW*C%EX!baqnuCp<3-
zIgDb|lezwj3@Om-S-Ee-Ftrof%n0qgH+aCjlyGj3<*1JCaoumBa`}0??<fy5_~CZE
zg2;=xT#Bw(pafkrTGbK>jstmt5h@`#h(VpG7R0u})22w4@^zB8XH_Fj5)&&LRKjE#
zJ{FwzR)>>wxDeI49!SbiM?spnZKt(^5}eOa`oFo)F)BV0MRzS|!R{5O%)=iI(qbq-
zrY+4bZnYonK(ar&^%TJW%E%)T%~{y6swL;ke%xs^8$+mEDhHMM3jKQ{3t^Sn1`h5v
z<4WyYOCwhS?j^@`4=v@d!l9u3JrpMc{na>KOHosYoPB?{%)mM&o|3pp#8^NT(f=>6
zHHhDQx;L^21WTpN^|>?hNJ{Wzt7T1O0M3@g9EU@xMvN>h(8%#x-`Cp~T@DJ(#@dS+
zwbVeT=LtBWu;A|^U@8mVG)!r@n>C^Ygo2~k#+QaE%Axn4dj>ei(qP41>nA*?b$sG%
z{vGv*0$%uGF$B!Hpl_x&gE+1HZ)$rCumG@&AH)b9j)}O0L@A=NS5`x9Z8vG2#t#4o
zIO*kCOww{1Z|=hwG^J29(G1~0y(Lt>RnPSZjMU#={Hl*&&a9L$!uAv=FrNi@T&ZF-
z(dleT<!TWKyr^)=2z^=fwAc`LWpvmu%`Uv|h{o2{4Jy%5zF6!t4|t&dH<N+P2Qw(?
zW|3o1FrT2ARR(co=f3O-YvtKq^^cGbp}u&t@ef@<a{%5S;x94}LWU}hRst+lQwb`8
zsr!|SVT&SwOKIrD7Hq8*bl@rt)mbXB<b&;RGspO8!D>}v8dGWAAFkepv0!kbzHacB
z5ohiF+S5=-Vpi$fpNHb%<e=1$t^_oZFt~q7KEw`Yw#Y;#7gi0$x>S$6e{0q2`N_Cr
zv&Vg{fxta$rzp~^+&!O*$My2uu2u))fv(~7{bIO7!W*iq0$D<%2EB9iTuY$a*P~!M
zFVJCtdc-W6TkC8@CTnaq#(qdIoYu=q%ppM}7dfNBQ2&kzS{K{DzTZMaHcwH3qjhHq
zHPt!!?AD4pTmS#>81SQbgWy&ZIWgV}HDH0NL?L&&fsR?G7dfUm$qn$@Kwj0Ya%WnX
z=6yp~VJrH_svA$!(mdvu?ecdf!ZgoRGbBj;b$24!tPb@BlRRL|@=ZPM2Y*+7by~Iz
z?>t1LL~*k-+LMR)pSP}Rqy<9V-F;_l0>G@IF@dC#f3ev*z-{2|C0CWViaG@F@dd%V
zM}D3;ulV$+0yk4+7Y|uNkq?a$PnGF`P@k6w6r!(&+apAL2$%h+-2_BhkpKHo;@CIM
zH-|)OW4buoqG3>FM-yuiB!%Dju8>9|ML^p;BK}d8Pfsd!Wanv5q&R4g%YiIg$Czxa
zx6^4wc%|mQrzk$AYk#p&ZeGCTz3S*ML5Zmm|J1Js1;J8FC~fWSAma%Wit=&lk#{{p
zNd_&NM)B)HO+jG~3YQ8g)1g=m?JtN{DUYJxCP0Ny<a%21@lQ<_)z1g&!^ZOkN`cp!
zC^2#fGAtB{scxs03JH`I%Jm)L7cx6z8B`VVZ7gH(|I!+$FkT>Uz1^t&tGBn9&t@Di
zOeLtfJ*EqUC}+j;#8!b*uTnO{6zZFw)&>|7$+shve#IWc_@<TwT0;zlY3tIBdC@{2
zr2d}jSMP2#O2M(i#`_LT-ZalV<x1h~@FfS4RA+#FdnTE13Mmg6Ii6)H#0UqPV!yph
zX-}59U05tQw*N0EjJL;-3KKbV1m`*4QBYz~=!h<nxRZpSup*20!FSF)?PmBS|5)H`
zcI-g3d(5!)Bv&{dM%)xdBDa`cE6u;MgRFSM&0<D^l|QAVa$6CfTy-mauTi-u(}uV*
znSvyBYT=C*`{r|M4+2ZLNxTTY**i`fT0u$Il1Pgmum9yaPMva@MLFtID$AevmvVio
z0AgynXMsf~Gj}k^1#C}c<9sMj*5#U@CXC>YK#rv6)+ooV(&(JUr}a$rA5jK!u~M(A
z$M1OWOP`pXweDI3F1al{dSN5gnNt;GB-ptHc-3aXBTDfq_cUk@Z8|1~yhUJ=(?fhi
zWekCTL3uBMlD1T|rGoI5j?w<JChb(iFu|HnzH51>>36(Oj?oOaM^>MSWHtJ(46uu=
zHS`ASR)O|vhN!gmX{ucM(2)F<cZ4a=HPz^sS^pt>{!{s}|3@KDZ4G5mGzK98o2T$>
zx`3v};vZwd6r}^R%nClctLaaMt}H)cp_Jd9=)aYq(`3TmF<7#mJmVl`kfBFCAIEh(
zkC07HP70<(U>~6xCQn@{C4=JjhO6Rb8JG)77P8zD_1^+TqZzZQ+lQ5)B0zsjQ%PB=
zUa@X@fA*(}aL*>Py#up-rp0bcUj{~2Q5CSWHnqMKj!ufCG#QVz*yL_md^=n906}a<
z#pZvJHB#%{{94ryK_9}XxYD+q(@*uNYmdfuXxV9VS_{;4mIk!p(r6`(syq5wl<m%1
zH_+xI1V@6dJTn!QCdJ1&o0U|%)auA8C~o=-Sg6$+gDUP-Eq%Wp)b805jC}qBK8c#q
zoRc+eVq}saV~2o-m~M?Z)60VBA5IJzyi$w4Y={k7^RpxTe{`tiAGcnTT;B=>y-~9-
zMNOa&@b`gZ71;fF&983_8)Oxen-0vcWa~(EbbZZK;4}rr6Vp=<^zGT51kQVtbD@31
z|LGcBP*s^-CmM$t!X3sNe+#2BQi_DpSP5X;x?aOn1x^?mC8f1Wl!T)NNl;_|?1U5@
zB`#W<16M{k_WtP%EKoH}Nj_oFLrYbICHgk9x{MS+fop2+T-hjAaB>`;2IHlY`d~@w
z7O%8Lu7(u-h=xY-MKKbC8^6!Y6ovSp)_;VOA&X_XBTd{z8k29kPO<##*y!6bxzNwF
zvZuxsadhZpjf)GmZ8(A@b|3wW(LOr=E>{4~AodNIX~{80{tvNK#(*3__kpJ;&qf4-
zePXGRSnH3gB__iX#oaqC{-xX!7xGQP-6;!idO8-m<<tu8v4CRM2Ff)KHc*lp?d6un
z(VXpfH9fzf+y+|-P(6T)lykqeD_MB);kTRmxPzqv=FPBX2#*ieqTUXw9?J&0?f01c
z_^Ueha!1EQMS$uF1jSSWWY;qi$<@k)dtu}~pIdsa{l%4)uTYNjIOty6={+isk?M1l
zl<{O%2I3{^THCZIKu^x!QW=hReXJWf(XX1e5|oGC^G0!Myb2|_FZ4Z8o|KG~g9br3
zYZh5lf>MPG8zd#ZBvbzaIC6EL1z<kYmL4%m(PcJ;`Cm9<@)N7%yW#-8?eq&&1;<!~
zE{jSk@}R!n*dhd2eetw|IFiCcA1OwZ!ed;&Gb)Q73=wPSYfJGCRE**;W`UP;{4zLf
zCESRZncfhc`2Fm>IM;$|Dx-cq(1>o(t~Eh(YcEm+=yegg30w@=q{Ww-h9mngSP3!k
zEf8`qBh)+4y^Xu~ts*2Ts(-xq^BLEU0g(oA)6L=Ie-0S_1Gd2~uBP#u&7djwK6vLe
zrEy+jVdX*vvdo7kpcV`q0rrwYUgbVnM-$&k_L}18W7C5_^3U$YzuIT8+Ib$n1N|}m
zhPST@%9!t8lccRR+d)R)<XY}^E4mFnq6fbFhu~tmLs`(DDRRFERH-dtY+xByRAa9^
z1N{VN;dyk2hxrUU3(s-y<WWXEJb$<U3h(|MZ%@UqF4fJdpyx>ewUgn7Qup|OFXg(S
z^0m%|{N~~-YP|9sE;W_VPFGf}j4x5E)TVEmMC{HgXxGP&>f$XbMlqok3|Er>`6Qr(
zgrhGo=1a|X`+rlu#Gqy`P+x3r+b-V7(({6CY?D@>wtY2fnVRMEQ-#^y)3sIM4?Iea
z2)Cn?LnXZ2Bsh!jOC{Sllj5I624@g0xu9d5|4~&zPU9A@a<&S%AbVHhC>>qw7smVl
zn7XQfsJgW+-HkL1CDJKKcb9Yz-J!IC(%s!9-5t^?jYEi}bTfo>!@u!6-}%qYT+PMa
zd#&}ZH=a1nH{=v?B?x6)G^ud@f{a@@sq0nlM5jrYU{Raxty4^Uj?gFt47>kxH}jx7
zahWelScN;v3yd|;YcNgU`LN03I#F09YJAhITLc7EQ;HNm_wzSAn4$3Na7kN0^rErr
z=AWlbRk?L<;fs-QY?_=MDZ6&1+$Ms@CnnNf*%k#U(3;y2X-}Wk)McWi(byoc@+(G;
zV9Ir-3Sy(iky~Ovi2XO*mn)u1gvLt{J|F@`Sjo397myrSwhgSRR{~q&P!n%;NP;~H
zSaGhzybh7PlA4DUl|=eSe>!ktG5?n4-}T5QhbI7jm1B5;m}sOeavZ)b@e>u#N*lgz
z?W~(eHx(CODH8$ICs11LJkUI9Zq6OMZDb1EL_&1qhu1W?&Hvx=Eb=_IJ!BetL(Ea5
z<mzdcqBb6Ns^%Sh+94~0R%oE+8|lp(+6@U#?k~)Rq{#ZadQ_$PMX0;>yo#=q=gAGc
zROSL682||F1rLVc{kO90!B3n1yz~an=5u1L)?@1`2tWRyl$L^BGp`#oc$qHm#1N5#
z1s_bi^A>-dYQ>X43;uZQf8!_(Z*}XmCi(vbf+rUxc0gtAd`eN%G`!;H=d(w5M4x%_
zL0?6QZZK$$YpT^hqcGxd`^AJ8P5)H?z*>Pz>9P$&fTq5z>t*OLOJS5b=QHT&Z;<1V
z&)fP#Gy`8Nr4<CP6UnEbCK%$<FX)xzzmG)2;iXwnSz#VZbaRv<J73LO{d*Q|uh7UQ
z)*J&G{om|1BS6*=4yAhx6-zk@21i2FmG1k;FR~VG_}8h2xV1eh1ReEqBm!>;B65$9
zL)_dJ5Y<R9zl=)d<1OadGw@58L+XGQXE4<-0K0zE^LwVvo;f!nIPKtf=nq;HW@7kI
zgCq`*)k(V!NNUd-?Fe=C5IS0Y`Fs78?VjW18!9-gu<P9{6O{i?Edw0;P(Gy`XN}}K
z4qutXr_k`fp-jpm!=f%-YNNgr_kSIsh+PZ*ge3pU!9p?qiq)cKp!AT+1}t?6%x(1n
zjuDlBL|OrgE4&0NE6=^sJG1~48#ZYL%A;QQ!gftE*+3YD9kg7iYFN~ijvO)*ra8Z)
zl}?%)$C8|RXq2tCM@#GrTxo?zHYz-WR@Y%bdvMEiVV<k_N3GeQbc)CJ{0`=uC%4zt
z+^^qdpXcQGtVy}toNmoK#PuQFfd<8Rz3-b_06y5>U7eY0VYG=?)&5!N-<OMZ5L@1>
zOuD)jjcw6ue>!$ER2JxXDmLAtE0qdW3sfbh@QR;AwPUb#ExDx-`$a8pxoAQsTNl9W
z;=k+u^Pte4fXe*ybJqya>=K>f7Io!dyJ7h<<Wu3&H-{*KJw%el!_Vj`X;IR|FCvQq
zov+^a*u@T4K?kQdQNhq&D%_b#MvoTPAGJ|8CdU#~gFTl7?=M7HiiDbZ(LS{7J^Z*~
zGi>KgeOey<kS_54&e+A9r~-O3F7)TdyxIGFaplAd8&I$b$Bbn{&m_DhTKcjP6$EEK
z&(W$jSR<Trbi4b^BmWzQ^h4nJi#}eNe@2F2e#>!y+sj&(XHZK?d~Kfh>q4lEdP^@_
z-=DKXNNhilKES_;kG4Oo$_~-5)s*k>JIYfW-M?H2)X7PeT`jG6&HQUWiK;#-99*dm
zti@6d^$bMZEP3suR7|H}UUh!msn$qV*5tzG@5FhH5<kCqeLzlw4Sr8l?glTCNjA_x
zPWg1$%ZB*V@Y6}ZDnMT(G;*jo6S7qA@&2?vC?dB~`(dCd>OcEWYap$ck7`OC>?*G_
zd|H!-fwO$))f+tQCNCi_lcI>EEN3QH>yoQ54_Y|l$a6GNjIW&vnpMAQ?8|o#4%9*m
zV*v;Ry(G{1N7?%U(e)8NE@sE<KH~U|o@wP!K}Tzg5Lrg10eJ9il4oYwi*zpjR*7x$
zCT)9EYB@@;Uujzm<$*-%l6Qc7(EZJByQBLwC8v>q${RvM)~&`W0govKW(UT(=s}7n
zvD>Rnb&-GPlg>K4Twk7!r|!CP_KofY^gEu~PR(k>&KZCPz7yl?uwh2LQcG(qq^4+t
z&(m^cVKzx8L}>UdaB{l9h64WsPm{ZA;1ADZCg=HHXrNraJ!-4V3Ry3ZlnL*ga9B(w
zpSs#wl}T3GtF|?sy1J8gmb7;bF7U7*wSONH%a_^O>FWD+Mtn4PvW$@W{vfF7XF>MU
zW~0yGe?IJxezLq*FW;;3!_(uA#kXoGv~&0daoo6;-{jO37V1hNAt)yq;FLtRg3#6`
z6J!oK+EJ(1R?_oV=18iGs)*6So+ZE#B3PRP$RwD~Io;OI^j_D0C!h(s|MPYj(EFxz
zpnCZ$Fmd{~cg|>lZpIrC{at%pJB=cFJ;=bGrq3Qc71yVgv@6V_MlupM?#=2zG>k#y
zf(Bce5r7r?@AcVkQQK#a;jxG%viPPn;`mnYl)pq$$Lyj`{&pm6tGldszl>g{hTOFX
zzbp1O&qH`47!hGuFwT4CLPYX0!}&Kb$$a*OP>$_DkeZRXi2b;QTlOfO+@r?bi-?J=
zZ;>*W_ZTAY6BUrUe9m|1wnpoB@RC#Hi++)^!jA{&t6myR*WX{c0vr5je}!!vGotE#
z+xHbb`|XnNAb4C@E3B>fd28JVH1=_6cn>`m5H{$03fkCAv+@CSX)qJ<B82nYhsbW2
zneXn=*a#L~fQYp{T?!?HcFi1c&bd#6C)3`}S>7+2?{UBk9t8E*CTv7|=LoqhRG?k<
z_4hyO><ISO4SDh(rL-*nvue)tysGcn_p(H^Ab;w#_rQiP8E4nx8Tuqftz;Ghvd7;+
z+tI$ylClJF->s5ywCuKwE-7#;+l^dm!nntE#}m*GDh<v2mB{pW$v@Q=SJe<yw0V;l
z0;Bvb3-m-4+Z%XG7W?}=8WS{bvfe!)mGus4QR_S*V?UU#=2;GnFDeGW6}?xR=uV0-
zRA;{EGj=K7>77QOTE;GYO~9nTRLSlEb}nlswFry%Z1DO{xhIv&zRy?i^s*?`X)^lk
z66h|p1)2}CVU4%}-CTYofW+j)%+U7S0#U8SPwXyQKtzLA5uT`f{PFU*==kl*r+mJv
zpz$<@i7OexhY3Nz%3|_E2I3vG^G-xv@iSmzL3WPe)%*a#BK%45xZeflMI0H+Dt*|#
z^Zt4FV=2N*8w7W*aQw4;jkcFZ7>KS8@)fyVS4(Gd^{Atl2$vj?fZ8*h(VV9UPyyg#
zL;g>=ET_B>UPIX1>=5Q>bB!%xB17R5kR+qPjoRC)u8>p4rjeS+&(vyCBuYRl=<`#X
zp&_SEqis|wXh@KKQ3NsIn0ZrB3xrJgS2aLhn|F|y+=ZIp5Le0J8mZCWtKlw_&RSY5
zUnGx+)dAU-?e8^J!ZI5Xdv_e}Z@Nx@!ceGe=PN&MFha1V5-?WC)7qsrtSw|DXWAp{
z?YuTIK?%*X-}tqDR|;J*EAr(aiH0M}9z>tLJ{$&Np(W6mZB@ni^jbwlvY;7Thx~*&
zBY*kr_xWQ_L-H4$j;`J>5=f#QAU}6+<IlB9>US8%8OI$@_1+-s)faw#MvvsQ8>Zx&
zb5Xxi#C*nu&O^4>%d1%(?2bCSTURyw^Yeq;y@#%n10w&qKQ*0dgNsYVLeKh&jAcuy
z7Bri}*}JelY3Ti?PGYHijU?wR8i*ciZY6uB?T+yi72QEV_WVt;x^nnlgY3V`fU9b?
zj`xSHUu@XCR0d^H^KG4`-6Z@WmMK3q)kA}g%@%CzaoxmS0|Qyq<t->D!?+4Ym2u9&
z0&;)!hcHbR7}8`$cPpbV-FODmeir}ukj+R=5|06E+)#ya_%@T@qNw}+-J48O?i~<_
z<lFO(LxKh*YzO1aGnt1g5)Wa)lA$(A>=mLBBAy97t=B+C(4uTEIz>LW3Tizo3n4<_
zWYZg)z?>{R2<J%3X?%mGkQTqD0Wt=b)wz-^6Em;U@n>p1aLdm0ATdeH$kfpQ0BIe8
z>Dd=y$2VZYC4wyPr;ipzQm$VlS3=@z%TNnPpUOxm`2zY10f!x;g-aDhykXYA<LzgG
zA967PHebl~1f1^_mD-5qu#wP*Lt(MNV5OUi)(2%NpH%E5oE=Unk%GC@QJV^etLap)
z9E|vH3|A>Qgyt0N3w=6O^%%wtDT)CLCFmQs!~OR<%IE`nh~-Hqj(w$j=-4n9{O{W?
z0+t!@Z2bhad9~RO_kt#GqZfr!i^L$Zw2AMHm?IPsS@?i3C~RjKA#L9P6TrU>ceQ-R
zAi^?a?e%SrP0!orJvjz%=(%t}{YK|IpR(O|qhF)PNX<#Q{ivqz)C9_n+h^zbN}NuN
zU!4S@N4Q{l@i_?G25r56Z(e3#qX%I=Cm+PVYjwLH6y=dA0Vnt!EF6A&JQmiMTj;Hw
zfCh4*@3dsHt#?li9>YU@|JiGO;`iuY)nr6PbrQ|A30pf##AI1O!@7cV%~V=0l>tGb
zl|KK_m9kK)CAO6Yf&nI@?h;xbvPO*LTnvcK`Uk{78?U=-()5UllU7={EyMAxAkXvg
zhp??{D{Y&F#`ho>k5#iMmORm5gkgi|D#zTSQ1lq_o^zeCF@Au_DgPBS)ZJH>99x##
zCV(TdCtmj})Yo_Og-6TSr|yPUL}@f$5s1&z=b(I;QA5v%i(X2v+W4T}`;r{hS*ppd
zl{QCnQTfte!Mrb56HCY`pOqJNldf3M_ggWM7k))Y<#hZxo3yCy>TiJy@IIuUJk{P|
zLMaaEy4~`7L)<9>2)W?9Nvcdd+6su)fZZ+;_U%K}<-1S5pO7Y$<7QVa^tRmm0X-~=
z>Fco3erwoJ7U+9HW;=x0^5=B4^!<PC(-6Pu1MG`n-d};}G5tPS8ds6WH|x#px_rIY
zS5F<g_bO?m!iy4}WiJ$1oPN1Y@~n;MQAk_3(Y_vPZg*#jo!0vKoC!XMHB)EwfCO9c
z*0Cl_411;RcZ}Dqtx^5P@aK1Tt!g@vW5@x><w%^Y_p7c-@xr{kneV&~otLm*Pf{{s
zd`Cx1;J8Sv5N8Q^<tA#2LI)nrcjxIgMz=-kAGX_hIU`)puJ^5u`F&^Yn;9d|4i=ff
z$L>jAS)Wou*brDU0XV*r*_f)Lz7y#I->RDv|Ak^ldYhft$HSzErw(fgf%w&fNeIsU
zWwaR(6sw=s8f8C-BnvU3)U-@1Qyzo>1SaEK4Mgb<wuxj&^W^FrWuK(FLX1c8AffPw
z?CVJ*&%uS?W1xQywdJIW;~$^T>eC1?9qqSm%qB_OZ#kD37X1~@;1?y46C?5bziYWR
z6K&P7>nVv38{5cLCU+EkeIJ5d*Z2&FV4-V69vMUBio4)QrH#f*g3Y5L>oqcWbERW2
zx-fY$`P!y@m1t6qD*k~AVe<S+SlY9}yhRU(g5x?McD}*ZqWhDf02d^iFJG7~ldh~N
zkSNcHn3=1(=2EArpA7EJOcb+UEeW<8;s~kC!3$AoB_=zBJDGPOzX>^oXcMF}@peBP
zerdfKX!qIoirhMCK9jIy{b1njqNN2<RkdpR?YiMAjhabdHrTXG=s2a6#WhqjN&Ko>
zV+v4ief|JseDU^iWT-v!6H>2(mY^ChF&`dRUcC;8Qq#^$wm_QF<Y4*^ppf_#6yMf(
zHRrJv#r80wW<ixo4k%mbN`W>p-`KNWFY$;`BbUfXo}tubD2H4z*LZ^7TWJ~VbE+Q=
zWX7&?0Y3%gD=Os+Qf_nB@#Bg(c57=L+tf#|yU2w==57o9ZAKJCDQ+w=Gn|#47%tG)
z6{I#X{6tqvPie!jbK3kHCb2NMS;THiSYz7bO!GK>3rrp>AlJ`T?yASFPovQfiS?FQ
zO|DrlUs!?ux!+}!t%93EG}tuws10mB#sadxjV5_Yxe*RTG)-_c4xie@L1>8rMv6kL
zJT^~57_FBdq+9c50ANoCSFk6LQwlx56`{3I7a)rveia>&Hz4CKuMshr(<e&9$H6Z^
zFT9OJB^Oj4nTk9~=A~1WBD|TXiDwu5=}@I(otFj4%5g$WD<7g)0%dKm^_U+0nl0Wj
zri#1o{-rn-5ruZhM$U+>^VXJ1%<WaTd*2Xiup80dnxbcCe3$q(#<sxa;W3@WBU(hK
zX*$n=0!t*v#LUS^iHH=_hLv{e23Z+7#Vpz9kbhovbEv1>s{zh+vUHMd`Q&8Y%9qF^
z<r@PfXNgQ8f;w0w!QtgpHh1BhWM1`nc}aV1+UBI3LPtxYElDRPc|8uYg#S=w(1~fS
zi$ij%rugcAC$UTkE9^*JGrUWPQ!;G-sBGiv&R9$%W6ullG8%|8sW^AVYPpQ`zZW+L
z->@6k>7p^cWTG*DX>9IuaB|<lLu-dp)H2#F=A1~GpI7zdE56^DkEl#y9%dj1$rN_T
z{=z5_xEeSaO~h;S;ubX|kT>4Y^TxuZ&RJ#pt`lM`s&D4T#uImY{q=H~1utkGsz|HU
z!M6G*eckkxM^LAM5+D2D!+Sc@BQJ(ge25V*W#W?SjAxJb8L;x4gSTx&M(JdxZ8WXt
zd%?x4Z!CknPiWf4ZX<-^aLkUksKS<Fo2?d;0Tf}lIzS7>!dxPKVWI{-#{x5jz^zIV
z$*szJECp8&oY=m9-_=2syJi~4`O4yDK3}+drrg>2L#Jv>tu$&>B7}6gY-qoMQ*dNu
zrG9`@2KvIIQdJ@ESB`?V*m_BoS6&v?#j#^DvLhf6ICIzeo^;AgJq^qH__=)G32J>(
ztLQ`^Gq`w6wMC0AVBl+bz3;W?IF&21^R$jc+Bp6<=@`1CvBlOiWYmV?V920>kVE~_
zzv@gTMdRW@gNe3c9piCK#b3}RrzqmE6uy%BQ4ZM}SA{L-HUhVMWhnvzp_UTm04+q!
zTL%jf%~D>NQ9xNw6|1uF&z(1!>nA0}r|NN=G7i{2t#T($6^{Aw$-Q)%vKg6)Q;jqx
zuMhNXax*4lCQeJk3Hi8+R%Ub(O6Af+sxEsMCJt!4h!AaO!}<mPH6eM=+$c?p20--0
zU4>Fz>Ntb{PHcQ};p(EZ|9;5P=GUd~*=n4~U9`tF)W`H$%Yf8mT4q4uu;f`u;MS9s
z#N6)p=O?SzcF7G8t_IByuP-O_R~{k8w};=nYOXQ&-ZIB@%~@T`{PRU}zxoq3LM7}G
zIMH_1jLlpP3IcI54v|kEKPZmiPR<0;*1z0g*lc9VJTha>qDZVaAkNeMrI57ZFvbf6
zERn=+YIDL+-87r#$x!RqF1d#?JuRa9s)g^A`G7jCDybWx=j4j(ukP2pGWM>vluC_P
z#FVVXqj@tSqe~ppzv#oHrpSaS%`qr-e{r7Yv_1;uk9J@GX7u)cwXZmhYry{A=;NWB
z3nM?sSkz~8aV1OhoKzW+IX?@lgpHb8x~7VM(U|z{%Jrk=rFe%(f9T4HfvA>3#OLFi
z#1?>Z9@|M10E>xvezMs(n+`B$4eg)Gr84HQs=-^ZyDt_$U&)B5O@9zufe4+y@>yQh
zS-nd<Pbyjl+(8`;x=&v1P+j(^%p5+z$>4H|yx}c=-*qvQRh9A2T~~!IZy|srMRLr$
zYhMCK0?U2EMkqY)9bxSEX9k|owYHwDNse1q;!X_8I8U9oLCYr=$xzr`_+ECuq_Qn5
zCE_P4pVLcYd4NRqjFDkw|3u$5nW)4-mYl-Pz^x%5VxQEz26g@#n>IcGghdZ>-E&4M
zxe{bd-P)L`8mhCtea!DLYGXl~iz;rJu`fMV(%g9l6W4qW-m*YlHM&26WuE#<FwL%?
zB@ARvjr4j}eeNnjZ$gIWI$LgvOoWnZAGouVTq;|RvrU$;cxz%id=HWqa$y6Wo{P?T
z_*f4om;9p;HUglOVkw{W^Kv@!8^<Wxm{T}RTDb9J&TP3eRW@<^=UXJJ(Hk!AKZq<K
z^OIMmJ-vE~`YOSpjCz}jv_P#iHWJ4y-c{=sjNn7ir8tKtDJL;Y^<#7rTWp9`^sk6>
zw6bH-r%wTyTDIkR#$_0X7mffVwJ=Z%%tZTCr6%#pzYpqSIT-#F!5pi@Ozv~0GhAf4
zFSq(rmR9x=L{(0$i=D1lRcfiYzb`**)bq#7R5BZF^_xuB1qK%q(RZw$C{tx|oK0PN
zkk{v4jAt*D1A#O#Y54Hn8EX?15P<x^6Xt^T#e45D7+z;|QXQ^%>bIBQgU{pLik*DK
zFXeKJe*~V9sa$Fqx~S#N%Bi=7|8V@e**$IRvYFmjNu%^1GPp_qI)jOt-qvid)k}X!
zVUzbLAP#=f(I7lQAodSRy(x2ZLIn;s%+*)82p{?Er)E(|oQA3#hNje@MbT=4Y;We4
zQCP{J{?V^1^Q2Z5o{;rF&^@L20cZKmvWewHX6#{FoG8e$)F6ubyJ64n+^_k^J0!F3
zH2Vuu<PewKp_NkR58Q*xlbOfgPd=u#3E##|K6Zyb4E6S$oY#wRv$dykA=Ug=db@0W
z6v|EEN~%tbaOHKYzPuV$;ipjDl|93u1vMvjxq3YV!%$rJIOsh8is*o2MS;-UB-`Vt
zg&GQX_ag08suelSW1ZQXD<WmThp0!PvjdlijVqTkY5R8|kqQY=SFJ<o6#^}Q-YHhj
zA{jFL)g5;FJ;rB!{8i@9kH6iUb;bVXN}H7tK3&IWZ`%j1s5=}gQ{mU|d~}f-K0RTf
z73j#865=LDL?<Q7b<@FATDO)M5H@C+1$t84yvJDjmk7Pus5lg@Vr{lvN>^&gD5TJ+
z!l9jpjhm7HYgRNhpa^xAI>d6SICnca-K7+>42`1B_4*UNsWD4=N1QK{_mi&b`kV5j
z(*F!h$9<lSb|BHK3PwzC<n=%HMBpgCU?{02<)y8t+Q7-8(6yn4;6cNZ8x_G?<+12-
z=jx-ZbtLY8f}U}iT>puL6g)+?t$D&BEKt8@wPeOwXiXoCKl5wdGWo}mr;3@Egnt6E
zYh>?@v`1_$z!R|;fP0KQr>H?B(PaPV--!JDQ>WV9lDl$NiO>J;GQi%79**;@O*j)&
z_j~nWW!v{h?`7-(VT;4VXR73+%_hzIB0Z(8M5ib>fCun*u#d1kbH^?np-!x6!Ym*_
za#rL?4px+if=gk235wv<<7}=KtLC!!T684k!K|Aiuli$>)I?85hA>ZxWbuFIV6x{}
zvK`SXBGU!b<m(3$VhP?Hab39jehdMW{b_y%xDIHtjk22hBZH>lx1j!*!sQ??`Ry`5
za+9(s9`7{(dU)<7&ZrB0-zcsNP5~?kengr(K6p?4oR*r*atTWKK28O#r5fxDeWNwK
zt>`9d-oEiu^NzQB80^1ob$pBO)uZ?~t$zM74{$sIgU$1LM?aTwGrkWwu-}c08~Hl_
zw6^jTz(S=Q3X{U%`g7|xS5CB7=cT>PREQqq==Z9q_x`L^h74Az)8vR2xOG3Ci;T+G
zLHwH<N@hSbF`Zy9!7?3Fb5PX(foD-BpY=nyID-IJ%fy!khf0}c=iHg~Rm}I5Ou4YK
zvd;gmj(C+Y>myso(?>O$1~z}nAYq_cEgmd@piL)tkgAy%9!IE?vEa;b_Z|Q2^<p17
zak&^zs3x}zi7heE0rr1pYh)8W0oAbe;V3P)rtoxS@(*X_8&!L5qr~ps9o7}jvVtk`
zdM*L*zCZLtgoB?J>7#65C_@%~zm{|Nf7izzb?;$CZYrc|9!I!&1cs_n+<!?N_SKy|
zC={dnan&v|wc;~JgA1=nj%L^5h({d18lTwy7?!@$C<Ge-i#k6KkfFmks9!Iz-$r>-
zN}aGLa0wzo@OU|Hu{Gls_Wk>)zpcdw^kS*q_ePK^7Ms^qlqpeTl6JfVLkv-#8X1#j
zfUo)Q0?ku?zrm>!<uBwd)L<B6|2jEyeA8666o>!HRNvOC6jRo<q9k>^y}2U){YTi@
z<?i`WJaL}Cn-!&wD_?nOIu6&(J=6xBXJ4i*VxH<+Xh^4JT8qS$H=|CfJ)c(Epc(%(
z&dvuPGx>VyPU7-TW31v#Igvi&*Wk+k+UuYTOZ4sUliiR59O=D*S7M=t!&+hKlGV_U
z*OAyM$&p;1i?GQr?|jXD=ESoXrI6&0G#&P8Fb0FOXV57CY7@)f5pF2NGU-88s67Mg
z$a6u~F#x3VT`bT=H=m1-ogg5#Go}v@-BJyVRqo2GxnNgJ&dsA#4~8)BNqQ<+{1=Tv
zWzOZeOofxw_)0>;obn!hZE5+PsxlJ1FygCF=AFYzIB)|FJ;R6M$6Fh4N+wh3W2ov`
z3@=NAhL%uFwpNpv*|Xo<^N19Eem)oJWmDYCcqdQz*hh5GaZ8Pkl|$|i8;i8}Y}3f4
zh&;JM<>7e>MWJT_Usq+rphsCB^M*wG2)QGEGWh)$gJF+3KjZt<N}KO6eb*I+@Z;pM
zx?b>4=ZeCg0#&~ZuR=$vL;BZ9w!xpakl{_`$>YxT6Cr9%X!*7YvRx4i#r;i*P=M_F
z57VjHmR-f_OLG`~=#(z5etFS6twfTVCcxJlxtCozJ&k8Djd(M?dtD<x$we1YkOy5(
z<BaS0CshDWQEa(?`8s|hs#Fa^K_2C!i`D2YXl<!$)GvOjs>x=~KwpDXto?hFi|xG0
zMDaJH%{*FZeSX@-zWt`gaOsvLfIG4D*9gN{J*hhRu~1fvSl!Am5eLH~``nI1gO-me
zA1ygU{79XewiTblBwjtA;thZt&Y9gjNcdB&t(O~2T>S681-J^_q6S$Q)bRPf++b(R
zRQi~$JQz^`PfH@Dyoh`VouOr-sVX3xXSA4&rG)hItcM5VRq3(vNxNPF*rjLM;sLx#
zjj_f6(v(<`m>9cIC5b4}FU6^OMYwn(uSvVK%BFKI#VuJ3-Nh|>OfyAr;?nF>C?poY
z-$Vn4^M84z0W6GOw@-8;A<l}t>K#vnx}@MTKHDU5$<+5D2*VB?1Dr0Bi>w+>@pX%q
zvXj-~TA4-afY5_sKkx)IyZ*-UCma<wCX8tn6_qxLW|C}4h%l46YSz|tx-1z;ymg94
zx>Q-OE<|XZ^JSfsMz30$JrC#rf5v}TB_mMb_(;^BWYl!s>r+lh7G)|{yil(kqU>=z
zY)}(ZfjeTkTM?^Xl>@O<cQNs`2ua<FWsR~>)W3`I6)+`mmu|?UG{f=?`)w_yaczT!
z6g)HdeMcD!A5jPu;YT55+K2M`$q#B!mt_8oo_W)U(|Fhji+^D;*mcCTDH4fw(yL~i
zO0H^fv|Uet*S5mNRKQuDcKq)p!<1wc)|WVG^oIn?tT+MO7Y)v@g2ZPgq}7Iv3ojo;
zfS3mJ7Ziickbcu+L;xbqPyE3d;BV%c9=$uaxOn#SY7IZGg>f)=NW1?!X0_X~MT$Yz
zvivuul_J&FRtmS6`?HznKYf4<KQ85wFM)4Azp|@T@MK+n?7Qol-cec5l&4>m?Ud<S
zDKDM$m};|^iM7Wfg?sH#sAZyvx;!0D$O%rUlX2~~dYqj2uf3YD;ObqcEa4B47@-<)
z?H5&AMV$SQsfi1%U0p^)28A<#35*;uy;tTtsFl_{hyzuUj1C-*I((bK`WW;7PZYq5
zc}r`@ViL=d>U2_B&zDcb`m(Ue0k@$>Z$ZHBWAUYAqp41XL5oTQ^T#X<PXF@FhUs9y
zJLmo199tB^?=YmWr7^kfpA@MX_n7AGDCHj3kV9K;+8p!~BTc7a?1?MsGI=-}XEx*B
z1^H=ry?e0a7Q`$Fz_kB4E%umN+D`}e-cQ<HVeLuNNC?A6tBN?+It|c6?9b8%@VZq3
zbFV40$TOMgEd4eqN6&TTf@0qHh33;PO78+U_+qY9Tx^!H4t0B^VU6XlUhsld9ImS7
zQVdx$RW#}j5+%|3`TNxBxQO)pY+0h3W}^N$i)w;V`Oc70U653d`@d@gpt-&%n#ryK
zMpQhO#@`RZJAs<AFzM@;S+>C9yu%mgwZ5LO^pfgDGMn(}_n3C36Yqx^Z9cG&3e$gi
z4`9yWpARi;>#9fJ<RoM8`^McO@DU|Wu_RmngqfdnG2&}F%=dp9q3i6gHcJSgDOAc<
z4oCX;2T0Otq~G<5vH;zSe?ACl==A=1IF3|Z5Q`$-#a-8s&Q15w?iliuGdXrg#WcV)
za?dTS>pj1pe>zIs{C2BzZ#iJz&2lD;JWut!Q3)ro>;ZiKhHEZ6m*UQW##*(wFw+?M
zJ#8&`7}H5}acz(tOHJiLu$DC}A|P6Yh=n`tr*WmMTR%7LJnR2FM@De<nu&Okw3_n-
zD&~4i?E3n!UoISl!z1fH0pr9}I9ERjD0aS39J=lscRYU*XHQz1?+{i#DXKciSOCoV
zpV`Grl$ea7E1{Ow1Q+rVEZ*gaXu6M#kU|=!NI5kfR!sD%`&w+zQ}EDNiS2KBI}BYJ
z_Z}x7RxZ{8>L>lw27Ug!OE+!tmY)v45|nD@EtF;#tF@eZkbgQ{S$WqPR#M?WOUH?%
zvS9wrcS^G4%Fp7ix#F7&x<y4iv$mm?gRV78!nVfg3KL^EkQ$&rOLXFWM{0?WoQk<%
z@F-s=Oj)96`5r>i{l<&n<jUDw#Bt9)erF2mt4?F%W!k-IV9;Hpn5e-<>ve?jpB)R>
zjlg?6#Yhch#b<DG{Fy8l55;a8eTu)89J_Z^9yYjWA-6LqW1zl}JjuWppXEWS{FDnP
zppH8H^{#M3nuoz6m*`oX1mU?rS2j+7qk1=@ikmRxY}@IKGt9VW)`DFgo)E$Hz2CxK
z`5?4^vhDqNajETar3Sjv#jg^WxXMPc2j8$*8&+_uxnb*{x~DHo!*<WkJ1MMZz=%5?
zFrvB}2PPXEQ_s*9Yr~f7vZpV7rO+QI8-qW10=(QGPo9k5H$UF?Uv_m}D_vqV;VhP=
z#65hu9J6sbnB%C2?ruD4&0C7Y|3=F8xGdgI(l)x7h3(uR>F!dG_>6RfbxXlP_*(%e
z--;g>#M`W~t}^P2-(elenAi7k!3@@2FjH+-j?L+W$ATpbY6^-%@Q4o+A#ni=5w~Ai
z1>RKX87i24)(_nK(xE~xJ-3-kpTw3KKTqObGk@6o_;oRE+(I4|z%2cxg5@%vYfj(S
zH1Y9HKq5UUdin)5(0K@GqITK##B0x{A%Ojrx3kt9{ot=1agg+>Y^HO;?&B?wS#pSa
z8oh9QLA@MmL@bA4+j;AAV{2bz1;FQQ1J(IA*EAQb2a{XDoh^I_Z2Q>l_{x(@{n8PZ
z*%2^`?Loc)3ebm-!@nPDV+vL%9xgxL3u6rY_)xUR?mF!4y~%Pa{!~xs{hs3UJ<{VD
zUa|5djQBEcxAoP~y6}sg!PwacA19Gd2PckC?SK{{3t8YXw@dfKRv75Xe1a~Ms(CQm
z$lwE(&jr(Rni3DGpu|zz6W1eG_N&2|E<3AiG}HEMJWAF40EFnN>keDWLCy)Q^DM|?
zpV)vJQOXpIxO?(-=kdynrlm}LfA|QN+PgOpBCfXuQJGnj0u0F%4kVB^sW19o78~qz
zjGB^LC@1RHNYeG)EvoVaO)Oy+5tOQb<#GOAY(sE}hks<F13AD7#MUMDk-dC*6ptOw
zpT39DVUXV6gAHSbj695FLT8Y1C{2VV9p~yKOtP{xy%fkfy{0Z{&B@wz)-A|`eRqrk
z6HFIisH4$g*d9g=mHShjOijk--22Eb@gm7?1zPx54HD7u4g;w-ZT&uzlYPJKbj08k
zp7tWR0xY6VZUCQ>)16~5C`&lRZYRY2AooW^#N}$_%lzACI~=_$y@r@e$7)OI-bpnP
z0ahdLpY{U0Ppi8rR*(GA2q^4-MnQ2Wcf-ZrrW7~z#|6hoPQI(Wy_0OS+x#$?b4GRJ
z&vrSkU$IZMdP_-i_1-L&Mxs{g;8@gtC5TI+%KT{gDXHB0GxF%=vM#kdEI8r~y!>Sk
zOx^*N*1W{jM++`hA$!E|qRT!>Gev#j2<$qczscfP`AAJn^u?hA+1AukBXm|qluBv@
zeEy8jU{}exg65=qkdtFVzEGsxFi7psScyFzO`UF;566gEjfEOp77C>~qSd>u*-^(;
zDGHpAfFP5d>+&k?u)(LBt>GrATZBxYb!oZiX9626Pb6qe8(8aaK)(8-#{&&mIc?I+
z2&|_z0I6jH-`|mEfga>{wP)p%&RGC?>c?t_+xQKa^Wj@Zsy2E>^ReJ{_YUG=9!5jR
z9ZM#AjMvj=CQ>z@`)PHCfGEt^d<01O;)jQ?ZwEpmdk(#Yg`axI2_Z2ed@3q0AV%cI
zj`*KYMxPzr(AhhmwNpXO<5V=v=O_>&fT8GN7n?|a@8hqYCtDjjbgYu>%kmYudAeR-
z-y%LVi;7pw^Kd$}f1)vhItfQJUPpI8o{w|g^PFFgQ>Um7plmkbJ<}YWX&HN43_ka<
zdWgPVqVjY!apfrkG_}->nRyMw--lEf-I|^|mr@D&q5!mjuIlZNQGP+;?Yj%727%Mp
zt)R(R^!(FA)u%$Vu9D8K%!Wh#`?uUr7{$tI;1>h#(l)r_@SvNjOb{?ZFCD(4FYs~%
zwOFi~Hy=Nad+s1*k~J5L;+Aix?PM$DfNo~qrn@ChP#pEMmvpsU-;MM?bzVqcfOmi?
z`v~ZpgLm>YF*ejWH9CwTHrJUbEyIlf$Tlm&BhpA~P+YY}4dk|iP<j%FHviNuL_A$N
zt*u}9OscucyJoTAQ}vFEk(6t@2N>t<YCim|`@lb^_OXK5v5K}@O?$*w4bWBl31nAV
z3FZ}Q;np{lvsi~~eQlVd^gl(;Higld*N<i8l7=Ey*-;pZS*5iK-1y(>L?m3Us}<qQ
zQ$bUhakNBVyLjYG<#Z7h>gt6KaEor1`RZYr?V`tlIR_?h#DGJ*Nb|fKtgM22;$T7s
z!geP<Ih#llFpx$4{uswF;p~mfUexCYbl1FPcLtMdevIRqi$2R8<Il^{?{;E3V`TAq
zyK45XHpD{hz&4e%T!dMm*k-dPe89ISbL1dYT~WmsImbjqb~zfm(MAnGo<#I+QQ`G%
zx@T&|Axlk#xCv<7nTS*QC2cV|H-+2T2S8xuMh9B<fMl-iADk)?y{kNk>w%LxD5;@h
ze?^1edJ5`FhhbeemV{3gv5*-bydW2M&dMj>uw2|g1&FlhS?RXXK0?v6D9s7jOT;cw
zr(Uxu$?EOhg4q9r+0O(8iLE8$!1-D)8GSt6ELp=uMBz1D4pmKC4y|KfCKu^E+?skz
zXmn=bB<M5-6Uj^ey?sPjq=LsWdUqpc0pa>1{vgQ9%Vg3@H)YytE^*<_9AR@dPodB4
zf+R>~^@`GA&r`J0?w)c-!)_(Z;N0V-gjI)kjeT2O3l%1+tl?5!9tZy7<)G0+`1AN+
zwTmYGF<5=&&EcccY?v>{!zB~*=q$fw`O#H=ftzB$=Jfu<&mG6|sF??gU!T{BD$hPI
zH9@V8TJJWZ`fo}Cs8@Z@qWw~|?PL^;dZ<3#Wr27?q9E*IMoyItnNcpWP8gT-fZ*lM
zVvpCVJoUJ82gYna^r$A&RtIUpM+#w};*PAOI?8Q9%%>)2mY9ib;7siH>(w3qtclk{
zCI9wXsz=Bl<;V_|_V)Vuag`f1wLb-@kg>W2jynkgh_pXtsYM+K9+FrUJ5It+H^V_b
z&8>2ANvt4+3e=5%iPP&6^9y7xDguIZpt;JMU#?-xC3Ydk>{C~)FL~dMUQ%H+#z63j
z>%=EAv0iX+1U1eEpjWodOU1GDS)<kAS}EsTPR6n0M*f0{v&Re*2mH*g?konvi)r{Z
zB1tN5LDvs}KiJ1<WWSP;HbTVy7B;s}933}sUB@DQ-7p?;1iJ}DI>z*$0Fy~FZX(Jl
zyoWwCy1X(!>%)MZr!yZ;nc?}BNAMG2zwx-2NxNvrG98hLn^L5}(S58)(G+4daZ_$G
zj0Z3kN^2aKvXnuki)pMKL*|;n%Kb%1hDMe^GXL(ynFw)Ak_zEYrQgZgS`d!sOE~{b
z(oqN%4B~qtWp>a$*YskLi*459o|peY00SJLTPwVC1@~!P#z)s+rw$94C@mPdK(0K=
z>yGWRzSxhFM?f_I|B;g3PYe9T?C%svP?_6ejD-M*+_0S4;xr$NgK<s+YEn+jl|P<S
zwp;f}{{#M=Xym~Hd&tEGiMK^<C2t7kPpYD0E7+Op>eAb6*krJ};kI4vZ^p@!TZ+zu
z?AK=-ogrOTgyS_KPrFS0$J9SGKtBg5a*lF3bJo*ue*`(zF3+H`8Rd{^s^7uxR1=Lr
zq1s1Om7kN@-9Dt+>L(|ChO6p-%hom7u4V2c$WL9(gE$ifJtdF$ywJMS>8|*@vG>ed
zGuFiaY*jKbM_;=R?V;~+;3Ac)L+fKfq|oS}_8F*c7NOZrqwn2Trqv&O_3@q3I}@)%
z%08k-lk5-XsN*ef0~pe{0S>4{Iom4bI8w{o5htQ@7n%(U12px!FOXELvZy`^t^}p-
zfmNA|h?H_s1=1vHW4zsl3XS+m=dx7~R@3*9O%ASN1PYm;ff5UYpB}11I{n@R9aYJt
zBE^)DR(BxCFg+7*+C=-rCY(PpCv~fh?)wEWL&JANctzuQ9F{-~%9c~d>xz4(CU0`c
zr{rMjg{3?SF2cvO-Vrl%f*wxa()CcQ`Z^}R;Fyq0G{$(dtA7aBF563)o4;!u`3q53
z^427~1wr~`iry=JeU8PI94~C!F87-qA!>7g3?bXTsd@Ioj`|&Z7c}Kl16;rX_emjm
zq4|Eh8FD*IAPw(u&`C!j;4lZixQ_ALx@bYH`QZtkGbD1*3R@5IBQPe-Hmv*IZ`}-J
z4k?p)?BStQuDVaQ5*Mnf$JK6P-`Scl21Oxn`QEW(1k*?YmL)0@5)cJ1VHjBnlVy_M
zGL${}$27PIm9qhPtM8(T1WyDOCUzPO2wO4kF*me3D%?*gzW)haAM|K5WcF#}cnW^-
zD9rz1CwW`q2HE!terO!wD?eUytY9nu<-5Ulw)=oolaoyTlkcJJ{I+lyn%mjc01>+f
z{<q(O?)CEuu_gGt1E%Xo%f~%$dC*0Nk+)H!Fk<8(lwZU*xw9<GK13?Z#CZZ8CDQ7s
zxi?Mg#b8mVcGMEvEZ<7t?alAjCjF~E5(5EXaYXiAw8=uM6=kboGih`!EA8RDB#rd0
zK1Rar2!oQrBD^8MytQ!B3O|`}&?jOhwfNV-oKv6BH*U-KQEADC@9Ow?)h*quGk}B#
z9$wkhHV2>9bfTaXjw+y|2T6Ay9cvben8hx_bkEDakN0JTE}yvG`v|_CJX~z~K_q}v
z&h;$D;97eMG`+2CWR2%9CA^yLjU**DZ?|jT59W~{mxRt!3d7P8NTOXxM5eTJN@JK;
zpnow?+d#cd&x-5aH$m+HnG4^(Dtl#fp{6=^e|t_C4DW<Ltp-cQRbYS^x+Z5xD?&g6
zi76#iBTDSI_9Nt%92@7*>*k{gn%DP&ZT(tvywf{3m;R2l-F9PvhZ<4p;B4{zgR$xm
z7@dTjC{*lg<G4xSKm@OE#eB!rm%6!+b5=(BL@+ATH??v8O*)2Th?PA1o!upW0E-6V
zoh}});2sGGM;fAQ&enaYg<iDg0JY?a*-BvOzDKaVq`s*)+i2}BG*Rpzthmlen)JrF
zW<u}u!U<;>YY%ieI&6nUC)J2Pf6Oksd@<=`qMXIQHS6Vsk&k*Cbtq2zM_1EMR^Scx
zB;z1bf8RyNi`gQ4mH|#TjWe?tk)x-k%d8cGgOyK_6Di3WVZtJg6nR*;-l4*Rt-Ja7
zj9o_y2@G~pr0D?c$_&%LGso~t<L_DC+1LjdD`M}#2lXZ-prAAlH1-+2Kmw4zi<8S8
zj2o6CD$A`!*<n}5vt_%Fe8!zAtY7H(2#TwiT2eL)e(eyFb?B9q2^ZZ82R)L19&C1<
zOW>HIIFt>B?Hs+#(H^*%>5Qd!_VED<2+TSS>2DabUcWz@UD<mm!)D?Q5)RrZP9a^n
z9(Pw&akQ*#7z|hurN@lmsHzLlMf)=)nba}f>IPTvp)5?y3tpTN4$5VBIScP^M44T0
z#^lIf{m~pyhK(McJ|l)+ujhfBMFbzKoCcE&1TNgDcG7;2e=#2TwovE8`QGM2%Bp&e
zzg;(L*5u*cO_$kt$nAX0XIVR=;d;WWG$g`7nJY07(4Q9Wqwkl)!VZl%{xF@;l<Gmj
z)3)C(JCSLF10T%KV$rdTVhtLo{XsP5fq`l58XvEf+F#D2tXZ@prQ@kmFE)#HsDnRf
zptuzazdVyeGR??K&n+%;DD|cRNN3OBs@Fq7ty4xx@_Ldc)1zVA+li9Njs5Y<lek)m
z;pqzSNZ~m*ZtgsmKFu0CikzbU0W{~;fC}BB?Zvvi92|knbF?J)SS*9f!%#An<tLz-
z>qcY4+`?#3ZbD@9G!^up%=cyxqM#9zI+Zp|-uX)YwlWl)^{bXyUosLZX5_(jet_lQ
zE|_D~PBbgc&jvjS8ZTbItn{jKgP25i*Op(Qb>=@X1RM<a*S))?{xSP@F}70_S9XT!
z_Q5$D(d<MZ{9;6;<Gn*>U@dZ;b))Kw;CDj`!@}v|>lJYi2>H_*fz6WL;zcr%`pfLa
zn+bY@QnvioX2HDh(Wp+|Uqu}6<r4S!gS<OTY@8w+ok)x`Hm_}WWW3mX^JPdOP(@Or
zFh}&7XwMaxb6wD)=gnZ*8QkHo9oAbFd`4{u^Wh7=<yZ`ZmrieXJzv5?zyQ+m!!iEt
zHK-!9qkxa%_`@y#^sFxU6FA4m(Y~>Y;h0S04t=1nMRm9}xCf1`lb0XVWK_l1VZ^R<
z1RiR#C0B2GSNJF-%&LI5*(ffcqg;hFZ$zk>RX)?%?Gg64w!$gL*5NREgmIcF`1Bx>
z<Msi2M+WK<;gDdXKA#XWoRruJE0bnYhj~l#a}hJd1*#hi)rWliEwJ@v+W668{Dk40
zgKup-;=`NS+?<p3@78Ot4hg&}tI^m58dH-8GWUsBY|Sdzc(dy&Q;)5Z#%AhvBpwbx
zi`t&;dRH*xNW5<XZ-pc841p=$th3!%fVZr%1o)%WN{$NKKKtO<=05K7UH%B1<DLj3
zTme87>cPodK6Lo<^p>YwhBv|1r@({B0@bOtyJ=$Vl$|=)LZd5E>qwa{)SgTALT*YC
zeSp@S@L35pixLYpex`6ZJ<ZJ_#*a(vCEe^^`JPo{dlXa-lEhmXdF@zKQA&|TvHx+U
z^PR&X8itBleE@A0W3VZaxFuj;`bUk<O*D{!fj+KJ+_lad1z@R|Q`qQlg8!JJn_Uxq
z;!7fwa&XNQ7jR~ML&m2YPPO}KcCk3FA_W}R1q;$Qwf0vPC-uDG_%*n?R_*QarWN~V
ze+j#^gR5OGP1kIaS^P$ni|NR9(8_o=WFVvk6VV}*C}FC{BQb9)!r@lR<Vy}et6KGo
zvAEy-^dVGua79&4S^fSl@0q8J1h}Eh_~$q~2h(1Xq*rz_mC++v{36kVC1A4GL^XP3
z1CLWU9V`<vyjZnH?@G?3>h@QWOSkGV@xbt8Ua9fI@m_S4BVMeg)6>v$zUr#C<_?7y
zCFotX{3@%d<BB8WzB$~s_`Z0PIs(B4i`7a)7;DXq=rv{)&L4cK^hnzWk1*6{iEa^I
z$22%4Vrs3~${IOvEl?r89>nK0+To=in1LzEhDl{5HXY5DQ6JRGTs3Cw!=ByKF*@gC
z0T^#NF4<Uh)kU|yozdWsb)pLgjrq^-gfBF1+YeeiS%u9UV^V~{;b}ZmA*IHdZUexc
z*jRb`oT5R|t`5tH!wPS3y8`IrX$OT$2d;utoBRuqP4e*yMmurs!qY)cKjd6Kufk9I
zePtcjhNvwFI(Nj@k#7fJ*FF3t=~5~O5~tzL=bHSiH;_@=^>B{D%HR|+Up9Ox_tq=6
z3YQ#$?G&d)RIjEuf_h>`!W}Bto5jj2)k?c#A&tZw7^$j2jMDnaf(7A1_~m@1k-ysm
z)>0J@=aTngr6qCf9n7a;iU{lqJ}#4?<O<A5XiCb=f_11xzoWB?O@@+Kco6Fb&r8+P
z!f|uZ9&<29bagCufUFD~4DQpg(@*ILw}!EclUZ*3feBqy&$i-j;a_QtED{Mk276w4
z^<~@U+P|wZS=8fBkP4$^g^|@~qmwoHU2Z$_&rC9Qh@zc*CU)Y6!T>8*RH&x}Imjz&
zJkARD^+HnYOWkes0GRWzpg448Ne4;A)7LT@Owuc_cZez*&uo&$V7+okTy}@J^+@UT
z=e5kHr(#%=f4R5F{etc7G}<xLtl#et6EGcYk~o5z?K*tfIL+9m#~Fm@#9gtS(uRJ8
zlTRj>5z9$&sjuElPd`JSNYgXh`CVsMBe=7moNhtf+!{5Cw{tjsCN_{(-Ok^clN_a8
z2)b|&Ju`(oAm8C#X$q~3(+#Y!%n)-Wl*`2S@Tg8xE#QjtZc|>Xq2`v0Q<(4r;y%ee
zxM|F6xm$Jdfvl-V4tU5V2Y1a)xfyx%mf71R+9?x$1$2OKPd*3Ay!W%8eO7l`0oPU+
zzdGS%I<2ksfQW~)?ea@C4K-h8KBf4xycjoG&#iW3XPpOcPzLHe)zmi?!tZ6?n{EXq
zID2qZT$3c{t(ZfA6VV?ZH}@b)W%zdM9(tx=rjAG+&OPJ~HsSME_2>?vC{u!?7M81t
z9&cs{OSm`H&z---1;)J?AR^jvO{@l}p5_N>SLtBm_gODGo?_<%4rd1srxgc-r_G4r
z?jFKGF*3zfG%W>_(xBbX3LT+*?M?nTc(Y-W`ZKpT>eB9eIYi9czEG^4ZB+ukprSjI
zT#J$5t|VLvb%T0qs{_Fv;enPn?p0A)SDv73gZkj$P7syn^>-MHnu2$;W3F|f0X+&-
z{jGd2a^faG&P{pYE}^#+w;)=8Q&7gk`0ix0xeeVv)GAey&^Uu_^1nh1eG@mHaeHG3
z2pRg!i^_sV+2C_k+ZU@K2w$c;yQi(hiNU5p_U8|=4_n6=G}6BVro;FY8_d?tK8Wp=
z1FZK0x9knGi-|YQ?>EzXy{sXPG_wnHd>>D-AuXEOF)TA)!W9BJmRU|eHAs#0)m$ld
zInGQ36NV;nGZEuEaL8VQ%L?PNh*>*!+Ng)rY{PE>4+B00g0sQ}%Cb+Mb!d_{EZ`CY
z1-+L|v5a4Vdy2VU-kH>c57F#DYR}4)I2e}hO_CJ&vQ8Z8vL-JBU_@%zZHzaNSk-En
z`M`>hP1!iIH4&;xZbF&*{`Rbxg$W40-RbI30qmZuZ|pB@n(!*PcpBTq=oduI#xDjG
zxC}#0BIV)&XH(d`QVhr0PRpf>!P&$~jPppJ)_y4y+oznrBXssTaN?p*XFb)mdUqUr
z1~<lS{|#O3w$QVR<2W5<<Jk_Zh+Ve3`D+APNJVVGu%Jyq3#(rHe%+{OQF!KuW=z*N
zmm0L+D$J4=a0Zu8qD|+)CQB8lL`~mQQH>Ac#;6#63vV+|-8n8@*yX44qRmQ?9=|iZ
z`>3V+#v<r?L2z<6%*&;(^h0{S@kp&^{xO_O)|@Dz#2^RRX!g`kyS)J>r!2AvUGxQ*
z3wgogc-J563tgWv%$^t#&0F4*Nh6M^u0dlZ2jQa^Gb6vd&Ar-VQkfyqd*Bn^;pZJX
zJEiB79as{}#tP}--zWmmtlK=PleM1%uRcQS0jS{wrA^Yl&4HVgXRwkoRz?zaJg1~}
zZA2LkKc2)r&ayvc8i`j<CT(G46X}SNraLZ6vF2!S1PKC_`NzMq<++|EZE?)8J#dB!
z;KICZj?aB1Vqqw^nXIpx5dG1$473Zoh;0Klg=Mp1@t4++*r_tU_jf|)FjfkevFivz
zNeFCSwA<U{|4z-sXt<ZMx=kW-O5Vy>COiwr|B=a$!(A@9Y9de&Tfi$M`6w^IE!jrA
z$cTx34mJ$`DD{Xs#%<lO-DZgpu*2#4hAtWb{ad4xXu|=P!U)pBLOBsgJL+<JKyR3T
zYGFy;&72if`+KZPjqo5y`3uv?P1+}l4tMxq6QZBAc9>V)0g~w=xo;L{JB~%^Fs@ok
z7l=c87<Ud@o#pvyR0UiH!gJufa>T)rw>Mn<V(69YzP%?QXFxxikU;s|sK5nthY}V=
z4`IGoXV``mqflEs&jH+E2HS%(y5CF5B(t5y^rQF~ZEkkWfY=a?(CA0pMP0OJ0ckZY
zl<a2!?<Xpzw=(Z-mM*K|GyZ(xjdV)j<$*Z@mDe!n8kwWWvrr3QnVPr~lE3`?*;}ia
z47by_m6-ok0cJ@PM!^^k;US6^lCE-z5v_pSQ5nMlZPgrl{=qAT4RdK<1}gLVzwCL@
zAdS@AGYLWzQgn1R`XIZ4NX9{#F^H@#8FkRh9c<l-%+S0{hRzRO(@2_=6pUPwgltfC
z61&KA_9`MG9L^9uo;C5rI@s2U3Te_Z|NFt=NsCP>;<NRwgA&6`H_H%7ECnrj2Veq3
z5T`eJ0cw(Zw2jWSmtSd3eJ3S3axyu{Aj`>|QcMz2F&$K_55aO2BsdTXg_D#?2Q``~
z6ok6Y#0kgf1v@#lN68&GOyEjFYZPz_TDP&$*USb9C$Ah)|BtAzjEXB*x*Z7a?yf-s
zL4y-4NN{(z;O;KLg1bAxHE3`rxDM{F!DWDXL+*F)>$T?mm_KKq>gq1rT|EcK;_FwL
zkgoVnjDJGq0_O2jAyV|-xpj9h(T@z|+TL=Jr$=z4uSH<<c6z_qHsTt8EIBJ9il<hC
z4bMvKx*U#oshKK2)O$el(s`rn&u72l=%pdw5{-$wUctX3<idNoAC#$g>n{B5kDL|G
zQSlA3$+KBvLa~W;PoS{^dmjn!-Oh%+9URX$oMx|VXEDKx;J4$8sVvmjA)tq8Q#sNQ
z*P^?dYxfD>Kxd6XM~~P=amgvhL+7(~Zz0}CpU+>Glz2YhyjY&MlzrJ?ig6l~twvke
z?fyc12Hk^*m5o=2VTt7N<Cdqgp44Ln;P*A1m?Z@smyo$bC~>)=4y`<gGV_y@q8Z(&
z6YfOHHV|^MT-ziA7ecjIfr-k)u4m$;B6Cp<aW+A>1!mbq@v6R{VN>ylH!+(397Krb
z0bp9dQGGUMEU!?<dS>#Sfo@#DLCf^YFxg_Or)vAiqrd2)G**Vs>e=e^I*|MGiQMBT
zhh0igP;A>$j}UI;^slei)_`hMzS^u<K?rTV=C0aAP7b-CkE&(ZG)~*$GXbBI7t)fS
z$<^h|!N98VAP>IwVQ-<z!Q3_L^C}69Z#AhIXS)Mk4y*Am>~{uwMXg+5k|m<-^di~>
zm!zZm>)qZ_$u9D09IxCD75KAGgGZ+T--%c@I^;syNry3DylSA$yk=F}+f`w&?mQy<
zSwqYDZfWT{pGSwrI!bm4o%F_1v|vBP)4+|_Z65&6YP@p!P|9-axD9JV67TOcTeJ=O
zRI(yx;uCsWe$;utTSC>ovLAh)yK|A=2&oBdebiUuww|4Gsu*SOiIIUj`FJkbb|J}Y
zPN#ub0nNgn4W(?Zo+n=#(I~njn%tk9gLj6QoyM$&ieY9gbuzs~T78(ofLyJ!=gbf+
zVM`lZ-1`-k(iHS>@pTU#JhsHp5|o5~!IYyHLeX2)<);#DV}#>Sz7|7@Im$<c<1%^_
znm;=Pz03(R=OQH!6qs@I$tO^yI+lGPzr1YfVCM^o!^P-huBTGYUn2gwhas*mBgx)u
z>i>&c!nC0zVC&+JU$|XeFg(*365cTk2DH&huhBcEJlOI%-;z>XUH!;lHUS~cPEL*`
zX{IRUn`Lfx&tR_93)9Z{E_tO8-lh_YP1eM{OfP@pI}ytrHOZSi$*~3uOqpe39IY|V
zR8AiNsW)D$wZ6xgE)dc#BRq>Hd0Mjpp_-y)*CYogB=nGnEi{?gg0@I{A20s`!KM_f
z?;^O4!i4UepQ3x4oF>Kntt?`M{2kC_ZLJ+-Vc>fr2&OyGOt3VbNDLP6^X@x%pwvak
zsZagmEnrN5^NjZlzi5YCvX==pznl}R08_XPC*#o*ZTq;T<Wd<1&rvf6ufdPP<4^R4
ztCX{L-{usp%zpK3aaxcrPrskl#uC#Un&)ObIr$u`G&nVR**atNdC<>!5Jz)Jj~v{;
z44hCZEG|qDB#*gzsCE+Wb$lx^7@VqP-#X5jm^-;1>XCDZ=&DE5ia?K!szkgKTL;t1
z^_2!lE~4V)-aiYJ$4Fu|#I+SyCr!G^K=q}G&KF352@nZvmt=Lb@p@0uMVrX}^>^Lo
zXghI&31&Gp%WO+_`zw9yKNk!|ADqrpE0v((<(a$RX7ELO(I+#$M=^5Oq2#D^TJRVQ
z_Eo`Qqc(-rR)!j-LTF@jFE>Zf-#w4{4&T0+PjI(5dR@qN%u8U$nx+<ihA^WmOn##h
zY-yZVc*8C7Dnk`Ggo2g!S{g}a0H<Gj>9ht-D6E`^Hy3}%H$%$0WWsvwAq`}w;o{Xf
z94MLA`q4YubX1fOIOBxB{F!2fV!(Z9IY}r=#F@0#zJHj>w}k~y%0BSONvOA!%lt6u
zh4M=c-xcWzuH?Mt8N5xZP}A=Kp;wbZKHW)`g94$UpCtHBew&)QnmhznL(nlhddHn`
z@8;O)DPpiu!b53vU5YGkJlS0*D<>~qNzk11^YcJyvzF&CI`|Yqj?WJ>%-L)=T+CNL
z=;>(A9CEQna?3zTs~6(NHhR150ocYi1_CuCi9;5{_z^{99_9sj%D(p9YzB=}Pux_4
z_itsMw<4Tj4AQAi<+~HUKgLT>epkCH3S0+0kXUGOD2pPk`r@|A`wzj>a*r#A+xp10
zIKMV`H1A}XnMrb=VKOM5hy7Ma?>5Ifj*X-B3MSned#_%NP9mv0q2REt)6)xVKcc<W
zCu9RxF4gA9l1^G=*al<9w@2|!Mn7WCZ4ZUPmR#(&^fKHs1;P^HTRcNruuz)>f8X-1
z2N(So$Ct7YI}u!9nI82HgV5oIVWlWG5YviOoyf^^6B9Yl2tXrU{H?pLD;E#NBwMJF
zno9~nD|xvVhWebnFjD;eaq1P@PejhEd<#}3phx^*dqOtUQP9twuO!{0JHENENm>^C
z;<J4GX3O%Zdc$k}!oFVAzfvx*n4c~^9KXN1AFl96zJ#D;v5hc5f$&{F2PI9gwo?j@
zgnUQ|#nca&uH)8}+45=+c-KDGS4;mQV%mUXcz04U0T1<sZ~8`3hleiwX29KYy)Qj*
z(qt5wj~|xxHO{@)GtwD}4>SXB6Gc#Hls4$5=YBR~p6ggG2su-o=Gp_X3DfM<oIh0D
zS)Y(!97zm#j%$Uhe{<VplCXZWKh<t|S<p!|K?dQhyay)QnJfvd(P3b|?hJIM_=cS&
zo-7dW=O8C20hv3+?9Ph6KjYsG`QH05N-KWg7oJ*Je58!OH|7j6LIu~xs4!lm06$c7
zot5?p@Zb-gH#`aSJVyI%=eV-x(7R@~Sk$OQi38Dle6_0Ub}o87@1?=5o&J41Kb-Hr
z?^X(~TFYz<(QbFSO;~-rARhuHnJONFa7r)S?^z}ST}j|IOI%-vJ;Onb>-a4P6IH=M
z-e-^w7$9xt{U6>ha~)7aK8X#&XxIYOral4A7@+%FYxO)|M|rQIhiw9ZXGsG#$sVxP
z#j~+lYdJ@k8&?o~wLunqH3zmN(F(dW&Byoz6aq;^k;N~Lp988KdtqvE<PbJP3||Q`
zWu?Xl5=2Zy6O=gVV7^GvnNmqavSr8?)Q#+p1N|CblBOTDmHxtP5C@Gfd3&98EG%1J
zlpoI?Jmq-*9^IG}YW`hO;il#e<n6Hbwf2nyr<Aq)+_?6!yX5r(8$5gJ>rXVgYwh9Y
zZfKEYKfanh-0zkiaDl6@E?nf>;;zs4o7<QC+@G$`b?+Q0dB``=4}z~R?@Pg%75*07
z<LL(P{gLm;TJ?b-qOS<mP+ouKvFLcjsg&y|U2uu2F+JBSX%z9iKSW^5ax$Q2Q-8rV
zQJx*8o_4vF)Z%KKr?%q<biYDF!30Pse*OG{?`zPL4<p=_#t2JmZ!NJ@(GU*tvhz5}
zQknRTf6dIb=Ln!#-AbDgl8ZAWSIyG|M>4Eg2RuMcB<qi*)z@eA!cU@|5cZDyD74>%
zXko8`Z;xa}QBiU#2zsFC*Wnwa=l+T`wVy+1Lu@{nV@v+`ErU0{0RApX@>jzq`9-Nb
zo6F1TSYH8n*!_Bb-aIz<%Q4V)_v(QV7~b<oYvjAmfP>d}DwE%u+O-w_9<2M{J+)qk
zzLMy#8vf}dBZM`1>ULQtkDla0ofFD6jCnnG_-K+@d5?{yc<>n;-c<f;tvM22>wd=I
zwI7eQ!Q^e(y()32u+Q<!FPNK--?pTs{>tp}AmCWf2fLi-O)>P#GPVdL*!!nz$NlG)
zlSFqr0pSPTo$gFBY>s>Wf}#7E+XJU-N@EHCoR2;+k9p|@U4;kG<ib&LR$N>bfy4e?
zS~yEL{9_J^ueJ9!#J>pnIOd1GwQn$Gbh$d`_B3692TgSBL1RyXmam;-KB=S<!@>ss
z#3@q#LbkIw&!vC8j}BnyV~xoD3>b^pp7a*_7A)J(jW)U_58C(dQ?L<k><Mz+RpuiO
zcH9qml(s~`aAUs0e=jtvDFg@G0k7V>8?(-jtIt{KOE>Q3iD_tV=v7eDueog>HQA}7
z@Wj3)k;#lv+#|>Ti8GFupe^Z{z^1aR4Ns_$lx5yZjtXFdIXj>n<?2bWBoVF^ALo8_
z{&Q=rEgtv))!o_P1w3<Kl?DX73=zd6b2Mq_uTI?_?{hhe0?#<uZ4xkaJ(*xDW@=w4
z&%1-Tp{B_!tn+C~*hR{dsm#^{ex0xuED^QW`1>Bw!gMQbMGcLzb_p2Bb{rk}xm9!{
z)i@s&r$)xUxT@a?4=Fr9#O@hV!V^s72wDfibs{{+lfUNs^bA3@9$?RH?M$0Ir2}7Y
z22GxNM*X|>uNA7_*<{{TywE;Xs=SWxnfODlICf9(?1|ZtM8^#C@(}RN&G9;B@VZ;F
zxOO5tS!nJOgrC=c-o{_4p8<4sPAJDaaI<=^OoD%t2<+B9C`>nZ-n!_Ay_2%h8Wc(U
zq}$cHF^XQjL5=!Z=zg_<8_wVEnatnC_fik0=#J}z?bvamgRa`V<pt<JzFt@c+#Q;p
z+)Vf?k27sVTDf;$X`pa_V9=an{i){O^T6Kc#uFZcSMw&!|Hk0@WGnBCTWf?i&pW#6
zWCI=C+J1Im|82dG?A3Q0=)ZrOe(NYO-!Am3w>`<Fi2LnnGGzKbQFzDM0_2>1UjusX
zyybSD+o-r(<RqAAwgA?w_*dJvUs?b~w$K+_^SV}ET6_N113T`1UcJ0#?H@d3ZPzs+
zGMX{{YF?OJ&$UPKFL}P-f}A)^8(QUd_FcIS0h`<LDWLVe%2&r`3S;B3J**xx;iG}F
zx4Yz;!A~_gsd)kyI+Mx3s#yDDj?*oZF6mQ?=L?v=3!vN;zwrGl$oabVf*q_c>zjJ(
z|C1@OTDPmI^;%ij+3#gi=$=Hd!!I`WsyQF*D}358b<tSXg(@lH56n?e8!YLPc-FtP
z_8j@DFKhpMFU5I%a`m34uO{~ZX2a|0=ovJ*k$rtJ((2#E^y;nOHOliX*#BPO>1DJl
z^~H1iV1yXxufd%ST*>qAyKz4_^?Kc$<bUyAB+slryND4M23-WSc0D@FX0r;culh(D
z^zGHZuHN^RI2ZYIg}t!Ydnt^zA81%?sO*c5rT2vHfuDCc9=TB_jAa<#Gb1XC|5(LN
z8Z_>&C1TFW-~J+9jU$N|A#Hhq?piX%7`GXUZ?!{|dHU<qlFcVc!e=Z%w-6SY;0ua!
z1=OOqa)p&kI*L*6zDz1TuxL!UMvY3Md5Rg00n+1PNXG5^HE8z_+U1!nqaQ{i>Zqyo
z%*%*hK~hV-Mk%)t6KmCK=W+Q3J)j#I|L&v32|?$_T&pXj3G%G`s-=2^mp`fTp@@LD
z@#T39`)8FXwMO8sU+zvh%Gsqz#BwLGaWd`~x8=4UK&@6XQZ9L=VZx;7(NKja6uaR1
z$w%NelPJ*+69NU`RIs)i+A#K8WhGyHVPjoJU8~GA9AS+~0~%Iw&~OA{=Py-|zh&a}
z>3A6^=G#?E)QQ^1{5~D4CHCxH(@6!(MgYJezeVAc;pxlXKRkf<%RAJZZVS(2dDc>9
zL)s);W=`L7X^<0kV3~tFQX^~<aTC-+70c^_GK!9XXO)%VmaFJo(?%1^Bdz+oI?w>-
z&_Dpdd-M>weNz2UhVO-1$9ey&P_cU4l(YnkH0iE_q)Eg4-B~yvFQO?nQTANv`+{Cc
zOdA^HkgT&5vO^;dTnLVXXpkPZGA9M>KTO11Ctwc>-o$)Nv8&nhC*de^ua_EJDywL@
z0bQL$)+*%?tNGzPHiXtanz2^%{S1O~YJ8KnC#j*E6fHRvSVsf^-a8l!0G^0tSC*c1
znZ?zK4juZQU1@QFAOGb#ij{Y9lh%a$?D=oRJ}b)xmS4|Fu<^>Y%Jkg3&%B<`d`lwO
zE&xDF+$xh?+>#Z_Jo!IRhIsfqnvS$mGo~^fudISXU;D1L_eAms5ofdoMySG1m@=rL
znC&ddF}`4Zn2*V17)igZ6{Ehbt1ZAPr;^qO(mF5f%FP7;YH=vu9(>4^UtAW&%TfDF
znv}XGo;N<GwJ4tm$&g8`n-f%)2j>cJB1TmvWhv2bn8lkAd@q?1zXv8&C|l;hL#EK@
z;TYYn8tEUfZf0YP0pJ<DF0Ar+Ri+Rr8z~N^_*t9Yg_2V>mRBw)NEtYmMQ+hk7(w~V
z5xQ}Su3UYs$X8NNKon@JFGK$w07&^Ktw00<y9j*DlF~JS(%+Kiu4<{N-(&@NYD<pl
zmJBj^^WD^40pq7qO%~X~50Z3jt_4bTA3U9Q*u^0zNLcTM|9<Z5INg<Q+j;_G{{seS
zfT^n@(vswrMC#l{ub_%<=_E6^FJ=o;6iw=(*NgPary6cC4tAQHY6=Q&Gof_M%G1gq
zqaw=uj70~Cq7?9YB7FYxt`<f&q9i$?#F0BhNVu^hGs<Np^+(L^U1EPpc~T6XlKAiN
z{=<w4mF$~19gVO*%~qaVFnpR(%(tG|?MV?c71d9E(13Oa&#N01H*kF-E49Px^!-Bu
zHfu39y*$Q$fI2^~?I@`CP_!H)O8@x9BT+h%Fo5Sh3<O_(Hh~I0QOE#S@lTh>bUKL*
zj!9=2eVi_kMyYz2ux#l0)Dq!O(ss5=2>{&vz{dm_LebRd+Pq(q)vJh8toZ0sZzw9!
zSj0})zhuTXt$;ID!?8aSrKNuqz1}>Ax-vCrZrjg#w+;VC5ek4I7(?DZ^be4sj&bBn
zSn#0wvYC-ydd-E}!Eoo|IRm->u&<c7!{&o1o}AU>jH){e*|L~xOYJe1LH8D;LMbk9
zNrISU^pw~|E)-z#lVKoiH&v+?o{Uq9@`7SJXwa^LZS`r_%MnLqLU)8s3LT@dgh=<B
zRRLp>1FV#R=<!oZghUE~we+nd*s4AEK)pluKjMKr9eRc%;@EJ1Tj#Qtjr>TeEGX0k
zJL^*31S?K_r*SPt;9bbu(U~c#CKIKvrD<p>@BLnLi!hfIXCvaYpcN+sSoBwfg6_t0
zz$GEX7AUEzWvsReQH60#$CAg{x_Bl)zkxKT`-vOe=ID`_=F;91f``lXD>pr*+i3v-
zwWnMnZH8K0JVTZJ>;C}NQuBNWu36HkNNyETRS9Pdaxe=UM0~#MtA(gQ0cr7l=@B{B
z&hV&;+yu?V=lrnU%8GW3nME%Za?x*R{n9|>eBXFLKnDyi1%MgqpkZlI4bv7w_^RPn
zC%5ac><*k~2f5J9tDe15-L)0zL(*ze9y9sXBt<%j=?UEJ{ta{_BVGQ!dcWrBugYn{
z1eX8e3Rt658-l}Qdv5%#;ANW0XdNWq!$rh;@}>1$!<(5^+*0<l1SYNk=Tm+}mYJ#3
z3eOSM{5l28MnmV1i5_TIasV?jWS3`#gX9DklvM7NdMwyW9k5EvNXo>9nEiJ3JiM83
z>4$X;QClmywBOwrMvpuv70NQYXj5WmmX5l_^ZU{0{TB=1x7d5&<;VcsuRnb@wewHf
zHnp4!7z1cJa?K+HtQqFJIKx1rxira4L#?}c+Q9D%EIy`Pf_1u8-PZ{)gfIcL0AyxB
zN)VxO!bx+y&9tQ}*S-sFZs)~!d?hD4iHWAE$k-XMSZ0B9u_V&*BjK7*@n&)=>@f^_
z>U2-<&}O}`@wcKBiKH}yBmDnD>W(pb{L%9Z4wrlQ_EIX)%Gd;0!@2k6n8`W({iy4x
zVMMZQ40gY<H|}r0f}S;L7P@Uv=nWd7$^@Yh9yCA`t`q=e$Z!Zl9o;~XVQy4S)o;f?
zIc78nJxWKz5J90F&d@YI*ru#@f{nEbL!*k!{2??O#}H1I@4xR4SPQASU17wi7{(xH
ztXOsczKrNnuX^PpF^rSd4=gA$N-s3$d&@i1S*U#e#K}QEAjxSSbd3Ig_T;m$$lviv
zkRO>!I%<~V)>oO#PV%)5bEi!i<<>CC1QZl{6H}<dsvCkLNGYFO1X(F7prBc#=@RrG
zvjzdtji%^Ruy6^e-{03hiYGrX{rYFLVG)xrvs|2uAwhS>jDW^ZiIgtE+Jj7`-gIP+
z6LiR2dn|e-giCBN;b8&|IQ@k28K4Q+1L=7?v`7QwQti352#-^bVBxx0c+q7w8sjyb
z)A1i)73pz0mk3(v%#YED_6UqWrI!w+SF%c{;~33A{Z|;LSb?J6q^xWKSsa87?8ZQF
z#-`=U_m47dMW*0gvn9WkCBq}Ps_akEgSK{IfmRuGu6VlH56bY<jfjBSjn9y&z@&M>
z`;?y#PG74Y{e^(tnP%3Q;2H1aAEUg7Y4QtGCKtVNMusZwZ!Q6A$&In>FfIjMR*3P>
z;>n}7PGN-q;sCe-8taf4*@ul^=q)7iC`F26dLqz?R1~o*dMc}}bg5--ziZi4boYW1
zX-3P!C0Xq_>mnl7$%WhsK%YsV1Iz;G4gt(Th8ue-&|kVLg{p<p<gRP&d`FuwR+xm_
zA8ol;!ZB3TH?vU7j|ej!jXr!W5|$#=$jtgyFCoK0Tlqg6E#Wv|_>R}f2@LJ{tqNvw
znmV~*9k*ugwX<7)T*l}90X?dWL*w{xLw<)af-mTxv@iC!c8%okUjc@gdC-srV^myX
z+j^kNiqQ(Rv4|d?`Sn4K#Q@bb5y#dPZx-s?#FxX<2ARF^3U<d7-EqJEjwpY)TTl|%
z2^N8l?7t|w&oRnXlJ4%Lto+R!;oM(pgn$uQCIg!})Idqq8Co$WC)GOYaBK-dlCOC#
z+^csm(dRLT*pisx07JsJIgxfTIPdt&Rwt4!8-5j+6;`tG$EIo+<ejoYX`x#>uf|Ty
z(iNLy3QIdM*$~MnQZDP7z?ro3RU8T%{l5?lEr!w1>bN<ZBQd%X)WdckL>jxy3utB4
zN11>wzYs`PpI41>T$yp@R2?XtxYdQYx4nwxLnSK>zUko2bjl|M0cwH&pbX>xo(wNl
zh_0$0=6XMSz^p>;@(riDj!+}WlG+(p(nIS<BXn_P##M*}hX|2^+~v_2c23%$8iVRn
zq-C;n{W`^e5dm5jX>eKKqG`kPC=0~nLWbT`N&T2`r7DGWqb!-=6%9pf93_$oqS^Qo
zA*~uTfHu6AU_GI~jeT7+5CgQ|h=m6%etmPh5E9IIZw$tq?=*T|<>cJN=P9$2Qyx9&
zuq9irf*U>+;n65~I61pi;2|o1VAq_NI_3+%6_w*v2l9MSn$>{$9~}N5X9vS_TUASv
z=C2JddXgzayDZm@ozzQW(IPN1)L}^a)^R+c=QOPcYk#=?E*PhE!mJIj^vomjF@yn&
z-v6M8(%ZCHwC(T9*dB7_eB=y*Q5v7Xh%YwPNs5f6a-WNgtDl&X|NJaphHvu6gGP;7
z$hr^(H{%cH|3K*ad}&hqo+?qU)}$Ud_e!p2h#)@h6oZ|n#yzjuL$M-$L|m>$(~<11
z=#HYbu~3I0#gueYjk^#AlaBzn%X#xwE=CMa*^b}QQx%oe47KouSaH9LLjAU?S*fLQ
zKKC46Z=U`ugs-kvHbP1+S=uTy@8pJNCUDW{@?}vqbI#myxDBw`!sGkIxds|womSJ(
z7x~n&Hx4s_{@f|#a~$sjUIyxl(aUG$6*~wSth^Y2;RK(Dsa?*vY9>tN&UTVDx`O0$
z1inoQzCP@@Yye;RJFakR@`$Vb1^;bQ0murNTtRwwslBmO%4vncbX?_CZk2ZnmlXR&
zl3(-YeyY0HKENf5%VJe9)8`cB@u%#ml4o|$=;*lC<ad$#Sh&-eK-b>CsUnnR=yz$X
zeHG8cl)XVSZWv4n*^t`6gfZedtFIPxe)U-6u?>8-GO_WBmA{k)YR`T(!?WJ^B5^G8
zP)1Q{8A1U_kS}~U&UhDnz)!CnlUeyX8<$ZqIl?6ET_@+0yP*5Z;CqsO1EhnKM!|=v
zPrw}?zKt&M3HsEF|K$N)iGb%5!^)7P(2a;!->n+pad_yQ84~?w(gT}$EdG5fivY8}
zCbkP5EV3NRQ<eZJEq5(Z)>^Xe{`IXt8Zk<KB%^1cxDwnL8}xy4J}#L$EtRj>?&os5
z=?Dt(9T=sCmE(b!%_LGl_xiuAVO++=Zqv^%-u|cG%1q`G<`}((IkfWLgUVLWJ$sFP
z`4@V>XjWahiM^jEY3iu7HaV_49vhbX;?xQENj?>d%I6alj~h>%?u9Uy*K6HS?r@;h
zJ}R)QbEF^s_mHpulZDIv7-5^u3-6hiYk%U}<KV%vkug#ixBtY|4p~;iKNZCfpIT41
zp<#Iu`yi~$$p33bRF6j4r57$@I)qQM^efE#F$UI9xHwnJ^!?}T1QxGLlk%ljmdS{$
za7oDi0lAb55JeGZZ>n#%de)!XYR_V4aH_nP-<jsOolu^to=vexP)tNKVCgI90y4J6
z&8&=D9+S1HeGcj45=^8n4hTU8#3Z|Sc9>2&cRw$<KZB;PZ9d(Evc5{cdOC?xK>Z%b
z^*ghEY-j@q!dn839Jkpq>Frw1Z*|lX974l|E$sbH7MoBHnBTso`%)#5#ady~2XaT7
zs#UTS!R?Wy365(kp|0j4l@u5q_^jKH*tjQemq+(q>HZ_rcbevn5+u`J84^IP|C?nH
z9Af1CrCh+Y^b1aZ_nBGx0CS@AkG%zI?=o+g5Pl*j8OK&ZwHnA@@x%Eh819=J%gMu#
zE{pPMo$<(OToB#~m`zbf85+P-Q|pTXAD=o`2z?6gGqHA`%sQ*o!;AcevG!fjs}U~W
zoI}t+tPz)~kvMS%dUS1G^vG9INw=i%5wGtwj_vOu9Zi-I)>aIs#V=yC)0B7cULAtH
z5u=^qT&WP4YyWR+I(Ybl(lv%mJ)Y{rF+D{XG3xQR_d6nG{<+v!DHW$BvNCyx)iyb9
zNkM4LFXaSclr1x=cwdLPT!GPSTYya-5emXn;{U2OJBzAeRFJpKYlM8>6dHv{&TJ=n
zn-{7EjWuk!V=z`VK~{$wll)D}hA*~Dmrr?pVIAs)0S3U(J`e!io!}58@u<ui6%0x>
zcOpAo53$S_m7%DbDb>;0h&v3yV@(Sm`RVB?vk->c33nErQYr1lfxb2Vu3Wf#daDz#
z`tI|YJ&P9n*P8aL$f``P`xTD%Go?&HXVxH<pJe$KMG8Giu{%D!(G`zjys5x?roR?f
zQ%?=N<QHZB3LaV32G_?`APL!Q6UimN%*)5;=^c}p9cO-n1HQhYr-!Gs+lHlsYm_(P
z14x2qAp~~?uEquZd@Y~%bueAh=cIg<^-SXL@6c)4lot^5)%|xJOZ&;3a(4MjrVwzK
zRo6mMGrsSq{NnwkzGY|d!rjw!qE7=bWPST`GU~J5Q>Aa}>*fLwg&TYh$j215vW`(r
zq!X=mQmI%*Fq^?FJ?GFaMo8Y7iA1AsLpiZUGp>K7c3#gYRzMKPs1-Z~)kNoc^YHkt
z{N89pQ#EkjJ?r{AQ2$b84;~Q9{OXJz<PFK+%l&N=j+ykmbN|wF<qdAR`Cxbs`r}_X
zD&J}2M(+MHq%iw}?nAxd|F;Gl_Tj*H{jT%=0Cewj=MD^fOr4Pwa<iD_d77gpfm}%(
z4QjvpY4B<JXH3Q4CxKVF=JpR=1|+BZzIH*e!9a^9ErX?f!EBJtv-R$M<WLJ_-{ibN
zbe=r$7q<6b`R#9J656xMTd=ahD9AXGT;q2(dBtY$jrQa$vIRU87CX=ESx`dia`Qtk
zS)VM-IvHEFXc*`Dv~h*3<<q*=c5)bl?jO*U4;Hw+J@ni=n$*(I-2f8X`Kb8$%sHoc
zC$C;^p<}&GRX1|Z%&S;s?Px*IHW~|eU8kNI@hQ#r7og^<nil6sx&$eMBP_PW@RGKY
zd_9Vh8cOwkIafk#wu^$?fFi{HhLZzM`7MLcy2(_KIf_%mPU@yjS!GQ*Zwe2K20kHQ
zU&k9c5E2XY<nhHz&-jdad4*KhY2nl;V5>#uVO7~Am)a{2Vi&mO!gQ;zUe;|`LJyIQ
z9RLn!vBvg4?~{^)czj(++t0Ub*B`%j2`uOMKi|2py?jINl<x_&BpcGe`%9pq=NVd6
z2sIDtdPU`vm#=v@`evI7KZ74bLZQ)+I64cAW5N^!t?qdbJ5bSuZkiumAMS4$%bpH}
zGs`9y`nI9r2RwaA53uOn{#x`N43o512}?e)d3Xyga9B*vw00jX2zK3r3Y|4GL+zc>
z$lzkPCY8E!AwowX{|UCa(G@=C!N(G^Xk-tK^_F42T|J3;`F_&O{~t@Hj{p-bErmm&
zeT~kjMp_q6Fs-FbYnxPkCieIw{J@9_)R|kYE*}jY6q3Qd=^;vQzC^J|<jObt)ugwE
z#L)AE6aX8D^p?FFSN>}p2Hr-mwlWDpq*ZNrpYanu6Vls`DYIR%vG>pTI9dS$6@1ZN
zLDhpYJrys1(Vc9w)1q-Q?OtUm53EjapaohI2Sir1Yqul(nMlZfIUF~<iz85S6H@nD
zug@eF^&BK5z8Am!i!nd&C_a__78ZllDB4H>!k07HF0(ott0eF2Czl?OEY?8g<L&m<
zBvXbTFRme8%X9k@-R)n$U+lrLq4#~Ux2|@g4ciLYe2soxok<tYw`0jC_v&?4@j%_g
zP}uKhN!&|h-#(_lds<P&|7h^C47_r5R)nlW&+AgCCa}$;TOuy5znj2>z5f;VxZ~4g
z>cw?y|Bi=HGudyrCk4nNy9r!k^AMKY`?X?c<<r#vbf}#*eQDr4&h<#LcQ5wtI#)Xi
zRadEJ^pQl}hikgSpb}c%KZgC;@2a&B)cS;bt*)*s(QBgTJzjB?ec|DK%|9E<am(-A
zxw*5kpQZNTD(q9P8us_1s3zt}X*xz2Thr^GPl5vnOcIFXO1?uGUr<}fRQ<H+zbrmp
z-==An39EJ<B5zcDr$MWaX+mUcJwU|C{cM+7Y`ziw(tIH@gA(}}2JjUC{U0N4Zs*Ip
zO7u+yF%)bJM3kIWpji++5~oz0MHdgnu7+j+$(XT=mo2UL6L{LFYw-~t{ZUY<#AO7K
z44SZ%ZbXrzz^^D&2X~X?UA*fgX<4vBLEBxw)#>6T>eAeMMq9h<T>1LhT~yqtf?*HY
z|0b-ko2h0rP#x`y_2$F6@axRNg0N(0th3G1ta{;CexSaAU~i2DBcQT_><aYI{prd&
zt3Gb~z_s0-tcNc0-HI-5kLc*!>urPDZ)!Bljk_F!bdsoz>l(kk(ZcKCA+sKlp%#d1
z#|e!<e($TS*BkiP8<=YkCh|nlpD?M_bX4_`_`>S<@wxSqci2tkQ&lL%3&~ID=gvR*
z2Qlcraq^v~ruql_h$2B73V8c1GBjNVCqThZ>eX4tr;YoA=}+0b1`j}Q$fh;$`_(?E
z*B^gkFY8|hL6eW!>#$hh{^tGN(s@QM6W4b|*O0|Xq&B-Fa#1caio12%CX6h@_(&D;
zE7XY&eI;yB9X<xr0{C$6`VMqVn1Bv=JWT*|0L3`BPhV|QP#@RT@icDnv}Y^75>>`5
zJzT}J)PBzrYU(lE`qx<ve@m6y-Mb^SPW5UGEin#2%pVSmlCv<L&5^)Mp@*t@<T2gN
ztgW*a=)kRjb8tc=_V-X+^7q+DGE7-jlTbEjr{t**Jq~$(vnRZ{mJVqfsa;uhcW>_2
zl`W!rS5^#kSB%`!edpF)nIu`ZUMy^W>oLZ<zC`FyjwLLLeQ-Zjzb-~@>c;Jeg1`j@
zI6d7tE%v3l+G|hOuxEQ8b)KM|9PeFv7<qa#*N(G|$}LQ+b0R3a^#UWR9yvm|x^H5s
zP?h<g9=GR7sp^p|I0k=Fg`9#w-C-f=xxK0#@@${uQF~Ynx}apdl0s#=sm9O7z!D`s
zPQ#LYGAWQ7DT3q&-!vFGPgVLC>KJY|fhzLElmNYZ<loIE(r*-dBgSEScuH17)3!k?
z_elgCQYl04L4C;`2^9du_fSweo5Y#U=wW?cN*<c+!zQ}U<N0o?_6{P7_O!Q~pSpNk
zCrH9zZzkb2y0-U*5^RM-@zI~YucAbWb^h7cwe4D5kEr0d8A4W|H&D09$yu73-Kr%+
z)6i$rBQ3nMdgeptck|N+6_CLCqctQ09q+@9cpfG%^8JMyy(A0{O2`OTR3#pcBUNH;
zz}}v#e?e74w{f5sHTft~qU#K6eYrPV2rvwqQvdd_E8CIX{)+CWMa1<5-A*vdmh&8U
zRcAMEO=GQnSu36EQ)5J7wxO}F(i+>FH~aEWjUo^o`ykh;T_%(5U`-_yi%`i_{=_x)
zOIIaMTOrHzlxZ9($J6$!FSyf|SPVZW=%}G@9g7O7M6QJ;N!v%UZLBmRrb63vQp^dB
zZq+B&@86WY&$NGpUB<IxU*9-*r5>7}-6^#x7v)8(?mBOC{o8({ywzQY@8R?Pr6e+t
z*F)f(o{iq-(%Ww&B9)A9qSc4nN2m;;`{iSk5piZ68QNe&UU!X3W>~5aTTPxu^}Tl^
zc6tu0+4H20kFf7X9B=jNw#Qt~pD3o^&>De<p7Xg4oyQ0JCdYcvZ-S|9PD^yPHWNI&
z?YO()tP5t2V4oi(lP{ez0-iYQQhefduL~PwD_Az!8<Nf}3i|?+U$SFa>+Sm^KO(|q
z=pA6u{w>IdDFVZ{o+1@|kO(#fE3Sl8>PUpc!>6pp(|?$`7903M(>oHEnKyKmR$3-M
zeelaQ;*Mn`dbYA`Nm2K+hDb)a$rV(Sm^ZP{OQ8MkEB?<tNhX1kj7;y}%xF&bf7~v3
zotvsF)DY;K5PA*Xv#8#N^(M0}dt}=ic-~$tJ8R?C%O%U9+n;2PI%7MdwO^kw$*twS
z&*dT&ULgauMj94Nj!9dSRpSzQp<TB$S4$)um<;vLGc#8owhDp#a)h2q*X~I8FK4d2
z9g{X{kfD%?Z32ge2HZ4kRY1nYO(Wc>Z<5-CjnXZ-<`SY8QfFf9NIvnGkJL4|Krd3)
zWVn9}zx=$~^mWuJnhnLcD?1Au;)cF==8=6WAHRb%ze?wN8C_!B?@sPIDYtAO@(eIk
z`j=MxB{v14(_e?SzM<Xlv^@6uFny;)Pna>?6N`S_Vhv@Yi8|26I9xL4>DIPm)sLHv
zpam;qoA>2C07^38-SBgv$j(r%M{oTEZy#vE;0gWFv+?{=?Ohh?xotSwjwmw9Z?rCQ
zp~9TtKkZ{Hs%tL&vQN5Y6x;Cd$Nt_WU|5aUQcH&{-Ee?V6!CN4MSf17c3FNhWvt*O
z&)VI2;l2CTS!=nt0X%Y$$~<a&m%`dh`t_Y(4zG8L8>W!3)}|q5NN7IC1<OIDy`Nv2
zEzz5hx{<N)c+{D!)#am&nh=P@)oG2*(Q(Sx8r36U>bmddDeJjg$qE@2aWIQ$l%FDF
z7Va`LY;Qc}wkw-i;*+cjN-hGC0E-51I)$@~yr!YeX=6mcM-N>uPKG{HD`1~3fsR#2
zBU8vBY!_LU?!!4tQP(%Kr!;CjI<<d!6l*cd_O2EYk6m?a^YgxeOh8uaeJq$phtQFt
z1D|c8krjSL&e1;-+3d2R0?G`n<ODQ^TBBt%bBtbX!*dKeAs%<G^|SNFLuo-Dbwr?e
zCE@MZdpOt;_#3_URX9>oZujx{siWgKk||af@hVN#{iE}C*g5FwMBhGlk3{!FeY9H2
z`E@z6&1e&9CsI*PL-AuP_&;&e=coZB(Zi=;xUWAd1qEap!;QAZ?m{T)`C^kYf6h*6
zd#m6n710lWoO=*C^oqcm7yt9o)^%Q^;@9MeBh9WcbS=yj3~4}UH<jo{_h`;6BRY{r
z*f7$b&c+|H-zdl$Mg{430!KVj$N6P@<)(yW8G9l{Vn6pa6J&M&Ajxw&7T2q*iFV%L
z1~^l%z*Plj-1{_XvwMD}MBQ{MdEu5-gR-<o@UzQ=I}L-KL9gIkY}7|Wih{Lq9&k`h
z2L&E_cgXdfl5G_3Edy=r#C>%yBJOGpHOH1pkU|VVt?XQWc9orY{O6CS7mMt^2C+f@
zv1rJr_OrFmJ@!H_hkQQOCw?{U+Z$8Wjx&hP&#jO92cLAqAms+g2$1%nb|kloGe7Kv
zw{+PKvP~RjWK$iEOQEE_Oc)+u(^dVvjsM635y)<Ttdc;X;OV(zWB-il_%eXB4wBv@
zeJdjcDKiq8`!Kp<ZH|imlyt;KANLqm=x1k}{u6uqAvGN>BU)tov?giub^JP-GCb_3
z!KqiW<(F{UA0d3-q(>Ur-WifjsCI1)e%d>Z;q~dh|8er-*a5@KdpMGQo4L7p$nSrY
zTBX!@1(zBD=Cxqs9P-|9=U;OfUCE$mnk?GDSzVww3mxpT$W+W^@<V@cWlxm`fLnOZ
z@B5K;@5z*L9jk|Wo4z)8T)emp4G9VTj=?|mLC?r(o&2NGV8bW*sM&;h<<Zd>Lf^Ei
z%<?OHuIZpM()l^(5Y%;)wP(fpPfqykZrSTg>MOVHuF^GSi3?(LUa5E$XFYo0#Oj}Z
zSPWd;YBabMLf`7oZbZ&ou%dA=kjCrec`YAIp#HC#0$puYaQnNGEY*2CT%K+WeU{rT
z9j9JD>H7g=sdz&hQ8~gk9m4p_d%qlQF05bCTEp8?Bgc8$l#D4lom4Pd_=dzh7!~8q
z2jVEX$rl3{P2JPoAK|SJnhvaB&<>p)e&cKZ0>kz}ZT&uf9W%wqioH~E_g~JC1#Q+{
z2(#mhALQN8#UJ?W5D(fXo=tkJP@qBxBax}It((F>dA9;9*v}t3Hh%7eOvaBEVRGk^
z8}NKLF<PO0^?9_g^AV!weDJ$6GdW=pjLpsZW_&I@*~*B!-i7}GEf_Yq)j4~h8-8H$
z$K(YvWV?{a2_xrioacVcn%@{{jikjZv+LZ$uMhBK3z7OKOFfG60j}xyc#75F;yB~D
zCsg?&7e}N)qEeNr!_u83^8-&o1KaITtRrbYLP-D2;j~B{Rgo`b&0t9No8ShLW<_+7
z`|X8UG-*!o;W~OG^Gt7~)SG10&8z_X`p0)zEFD(i)Zt@|GFh7|J^@}wLh@${1rM6*
z!f*0;$~xT8-Ecxz`RKddG<`ifc39);vLq;b6nnuN&pH+5?>pXGea->4o+Rd4HXZn3
znSo|#*6b%8z#)lP7#fS_QMSQ60e?=eKCE!-xk@1N3E%Z&)6IQcMGtJg9O@A<URST6
zf8a4-n1_EQ;L-do_x<%c)PR~CpIo5~$%FGEb0BZyb=Q94&VO_BvhU}*eeBDL0MfIc
z?%e>Z)&}x9Z%>mrJrJ}vnG6f>Oa9>N^$@?~sUR=)&P_<t33pgKWV@67Q`g@3BgvM`
zJ0Xix&55n+R_ffo<^$lL9cM5$nSnt?j_{v3@28Ag-qC~X9ARdUzb{NREeUqslfRj#
zYETz=!~IX58fJVSoPSJC4rReE;Q;lokK0jW`{uD$Q$sdlXB7mKLEjErC%T-QJ3x9a
zlvC?M?e>Be4+282$2czsldnIQoKq&5!0C@&n2|`TC|w56ME2g3)0xxn-lq4IUp*hQ
zcX+EO1hs7U?>w=@aCk9!IIRhsbb^a?RwwKGGNyS&+fGk%YpDLhh^(Hr%zH^aSo95@
zB7BJ;Qfz?X##?4ewA4*)8K;ttU)GFA6<!Wl+P6hdc)T_;`W<pY0U+Hru1J(#l^iXA
zCG79u5Jwz+X-cWgnJ*5Tpv%!46e0h8wc0aXP`=6%y4%QMDpBIcr0*-b6CnNFfRJXT
z14Rnx{mnM4z5fOI3;xsLkWfzZeW3g#?Me4B{{qxb+5R+%%bpOmE>w5m<1E&%+@N<u
z?miE}g?l70U9P0H^C+*NF26QU(l)TIceH?kD#<pp|N2j|S)&J8Fmbi_%i)XApV!B0
zWh295=dJr)L2Hr7cdITx>=C07pC6BTdoKo5i(#UKB}_fQ@q@w)2PK{Ac<GQvRI`P*
zH@ET~KYjFtZpQ7k8=R{Yc^>QAs`0fS9?N`dyN7b`ji86UH?GfpNOa{A{0}Uj`G-XR
z=;gLwXH5nc_8y=_eb5aZNV?wpi%or>*7|!jm*0XFQ$%%Xpyd2*ZUFeuzx96}a~Jzc
zc(yi84U58h##7F_?g|O#!eT~amwwzrZAyHhPNr}y=#s2WlSKWY3XE!<65YwzdWwgv
zzTElWc3nI2kODF9a#Y`n9&E<ByU>>J(I1Im4f*Gtq>LPrt0JAB%#qd0VjP_920yuE
z6!gRM>+CJ`>mupex6pOH5TP6hgdvUic*92mb%dfjZ>xS@JE0MPhta``6Ms8*`pEOX
zvUa#Qfi84d518G^!az(}ZbD#^XTP23PczwFm($VQLact5QN$Iw4HlEycmm}AIHJ>M
z7a%ULmC20+VD|DWU7Zf!%iPgESNr8)?)cE8$;ajPC318y*|%A{*T>Fu;PJGhpUVq}
ztE>-mjrW<t9*EU*B&s-Q-|A`P)?2Vqs80>X{}$+<c;Wp0*=&;fL66ZyKRfpN=w}z#
zW6q(s!{bxK4(QpFe2>d(f6(yZC5s>L#b(3d#dZAPZ=rI0?U{8pKYXjxR!MU^ZEmp2
z(BNNd@14oDv<>_99D80VFh|WxnLx?8$vFuKLSN<db@>oiN(yO7HE2NyMmw?|RpYDg
zYOt7?X_yqU?sEQA6PqfW+X|fAfN3X-EgsUit9=y65voS&GCv>f>+(+3b)q6C*Km1R
zxwYWDe+18ipEGp_`h1R?h1fjDp4)C4uQn1HC~@9YU^BFP1H99GefGCNt+PrEcl-Ra
zNJhG~^A+V+(rD{Y)iBL=5%2KGMa=JYdd;Vmt0-bBTnSGeUrNWv=H;Wz7w&)8dcdu|
zha~ZP3xDPY<{@@>CR%Zed8V0n4WpBqs8Suv$n#$oR?*}uu_nAv$J73!odLP@LK2VL
zMcrtgPWrrUEKapTN#Aw;9<tc|4J+PHv>zB=`Wig4L)D&GDxl-3wah@+XOJ;=?H((v
zRSky66@vTfGdC5a?hj*;xEBhm<NiJ(OX$&wAV@9XqqZZ~Fs<GK)CaeZr79As?Vbci
zRMnz#<#Yf;@;8oMN`R`?4?K54kwJqcWh8C&`avUUFT0{@sMd=Yqn-VcaYM6WX&)Yw
z8N?VQdb5B!QVrY6^DE{`sv^&5NNm3KOH+-_Il2gHk@mqy?f1v((|_0inbRj=W_8m`
zYS!^dHOLiPcCytQ-v^=QXnR%ksFdvjgj#Y)gHIb4&2UFgKXch^-cOVCp{UGL48$<W
zwOB$H6Y3k$k}dx?&}Za?V`9dtt#(#RH-6N^l8z?()o`A0y(_UYYtBL@oY^>f(kk7m
zcHeSUvY$-lTe#g$m|ZRe+U7c>&eXYgjNar7Z3ujXp3r)O7Em}F0fU!{ptd-?9cnFf
zP8_##+f{Kp#TL}hT(IQ!GrollrQ$iOx)8Lg-f{^1s>l4VQcM01&Z~DCEDWpR4-PUk
z;y`iaGUEt*v8y8SA-aR&GHmRF;w4j8DQaiZ6^#%S_4ES4ucCq&t>aBvf7f6PYj}Ly
zxNW;$`Ct-y&VwUq|6y?!seUnuhT1*xw<sQG3r<VW1ApB#R?Z8Tmu096HqNe^C(och
z`p{5#@hBohnONSXj<0}V2j+5%UzWjm4<RbSy?K}+0$X`^qe6=``QyJ1n_T?T8-*8D
z8(eTT)hm*@=nvvs=aTRBpS(gCZ9)vkN1^9^QRJnRh^uk*79<^ph*o(Zvie*hoc4(#
zk?a)8Ya*rOgq8l^EY`w0jaLKD#F~cOCcpY)Sc4hV$h=-Im?SF25Rl0#)Dn}H`Z>QF
zHtFng;uf@>&@s%4$NkzegNgddSxr>i1#O7=7D+OMFe=I}8%`%lsMpf%_C!#OaB*ln
zbViV!tccKIrWh${oDSCX%6bxf5EDBVqM_`&r?@N_SL`RnhB!pOf7HCTY_$PrA+3fH
z1M~)S8z2VR>i?>nD+MDl%BJz9+G^h_^IG_lJS60EWc5~iN$C3-y*vB_crcWxIGa`%
zjQiCBet4xQ%N?Vz`(d&}t0hKpM!Kh=56HSAK^7TeY>posmmY-I`(#a$F&3^IbBsl1
zDMK-xF2jy#y!uHT7_pwL(jPUaZ6RU*TaAw2=hNWagU=Uw%Ou{fSan4t*R?qhB$f1n
zt*u(j*aaGTw>1cWS`eh(T;}5qNsR3O@B+A{b68AFL4Nz7|EtP1L252{{?}DnrYiMT
zk!o&{Q^%2}YGh_F<$6ga`yw{=RtD1~$PRUAFP}90D|ZlGb9afVo9C(IKKDlu39-x!
zNio|g!P5b{{jRAX4B&vLPys0h%h_-r^=As<lhOi789w*;=|&^1^y*U9pXyF1y8|gx
z;dHdY)OY+z-eu;dQn=wyKF6Au6vsV~twy-zbaxaXz&8*UJ^VjBn1cZ89j%-2o&*YK
zlzb2K108#y9t*ft!!m)4l6DzG!lSe<icwegb{`?(2g6Z1Cl(XYrI;~J;GiR>RW`>H
z5=O2nBwQALV?Y|mAtB)rn|G!U8C<a-7mS80%2BCUi(Jcnvr@PF;M}K{n`9HA_(#+A
z3gg(2(Qa-m(ydGGB4IP<pBlbBy3gZS=fzf>`-p<$24Gs+sQFfyqK#mxp8krt;Sv%B
zf5fDLX&6P4BQdcFQ!8uQm^-Ubz{_@8fOuT2|JYh0qwI~2_|aeaUTnV-B}d+wq#~hd
zP*PDv;R|S<P8}!qB)6mp(p)|<OIlzT&dD2|dX$>_!vH^{UjIw5ykRhO|2u)bdsg3Q
zN)@lAZC%-&K$BRl%*63jciW_GnaWlVIfVbq3T;~JxT&cFU$<oXCC2zYgWMoQjY05l
zT<GrAR3}!CA3*1Ma?V8B_{gCWl+vgS_Bq{6HXQ#+tDbqXu#3l@*BoxNkq36(x?^-1
zE=LH>8u9Jr{|1YY+Y5QcVw`QQ6L>0U5L-5hK-6SbPc=@e$5RZYf>Og{(JxD~Ir?OW
zv=cvk6%O@1XAF+(3WSbJu9DAEh6AY0r6@q?raBBkv7mJIpbanPSIl+FSNWlQiCI;r
z>5v#jpn@x~a3W#*h0glWv~<xd8BywotCLYO<%CK@-B7}aOyqF;f6)NkVC_ZJb}*)~
zXdAvt#L)Bb+cN!;S{N3P(*4X8<@8dsgSL+?GQuT*-ht|lE17X9GE+BrnZO|Wmo1^*
zKo!DJ+Q>uXgD?!V2EH9;L^0&&lDLqiwzfAI)R2B=<giNlV)I8V!h$24OMPsfOpPX<
z5&bpQS0G|&>JLWFO%XSUDms?*e_;3nxcN1h%2y}*3?}J;6l?SrDbe#U`7B9vdrD8i
zC_TowcBy#o!{=C3IhvJ0`;2@gxhI*qu{#Xw>&SrG*teW2tf3lK1RZg}?S1CZvVWhN
z-eQX@ysO~l26JL`zL%|4P26WaI0P=|P$SJf$A?%2o67pZ&Roy>*_DWY`N}seo7>c=
zQ^=igVk|q(V|o3=1vgNX$pSQPhD{oeerLGa1F;MBE66w<D+8t|G{1)ShGuSk>fhg5
zQ{iJnN&|11Zi<mpN*(2KRsTa<AZ`)bCUZlZMO2)UyJ}UPI1Xalz3w_68NH%qx#;s^
zwSsnHV-I*>m$<}a;a{5l4Z<msG+#PMGgwV&7gyP_>o^q4Iz}Ixl1pU97?9neE?<=7
zM`hKK%_N@{z_wIDEoZ7~7n%OhuP6rt3pnNaw^|l>WDj4MGi|<?@TScdB<L&&8l;9+
zxAlX}_ra<th@Fvz<-`I?45%}ubt^N{N*%0TKQztqul|KNZx9v*=c0RmbJJ+_#MeBV
zG<M7^N>nfuNzcL~l5(nU^$k%!Rh7pnp_Q-zchX#kDS{x!rl8*f8|c5q*%_E@YOw6*
z7i`t#hne4#TYsp!D_X%|+uGz1ryoSfogFAuaF;(|U0;vf*=iB>8JbjJ6x?ZvyvpXk
z{{Q!r*1HGyBWYs>I<YD`r2wt`CB#Y*<Aa~1LrTKnIe1PONq^I*c>yD6bQWG9Jvv_M
z#L9+*DIFG<^$HjuCgBYWRjI*WY4PyRY0nI1WLE|v&X+y=1r1~Sy$-II&a1l$wY5*U
zWrgW6Qqp1Cx{qR0baYEpUo*<B*(1#C-(>J_7}5^|pQj^mXalAQ<U%%K5jdtMRtAIL
zpA?(Fw2y0(5UR5}nYaiF2hmxz9b>H|VzcNPo8QZFxLx}Q5<nse;kW64IUilJDb@bX
z=$r9vRM1+>f+)El!#sW<Mz{A5bZ8`#xOpJ$yEr-e)m<^jf7w{WMCq`Ye3f+K?q6KT
z-bc^>Pcv%87Wcs7&qkWKfxUWQ>maiYdsQ*SLdJyP|JT%Y$FsSA|4_3^jZ(E|Xt=bt
zQZqC$BgCp2v13zhuiC3-sZCKMR_xhOqa{YD8nsp3TD4VcxA-Of-nzf%kNla}dCqgr
z`<&1FocHtWj8m@ot4_p@af7{wgb*4It`%9h4<F9@8KH(d34~2{li#%G-oOI~I>Pr2
zY%qS3u$*fdTSh_|OFz}i05)$#yo*ZjM7|2ls4iKy6d2g<8+Zmg9K<aQOfwfxoEB{U
zZm)?xnUb$qYc`d0GUemsnA#7reJEHPsuHlQQ5Qq!p*-Fr1^>u_-h7-Vlf=Ue1O-0S
z9d0w!6#pc3s_OUk%D<~sMZC*J>XSdZa^1PcwP?gMjD~bPrp++w1u|?RS>&`~CjpwX
zkH4QGjEcF-ZN|+#)-2FmF<biDcD~9jLH~O&gx^i75ZqBqyp(75+t~*~wOCAkBwH-i
z(j>EjTkWjaLSzID%EJ(Pa^(cge~d|p2GNNJ?x{sddvd#71xz_wf&szHJd!aJU+P5o
z-DFw+x)IGIvzMsx+<Kfl->k!HCZ#0V?ooq%(K{f>0E2K1IzC!FY1es$eRt!&$FUOM
zg&9+{N5}wAwJ1ReiddRNtghYI?NHk*z+AF*HCnV;Ive+J<l5506>0payixcq@2(8R
z%@p8{Y{5O1eM-W3m$*D1c|a3%a`q%s>A;L`LT>J^m4s;NU)-rbTZCH}O_aaXMB1s&
z)x$-Gho2-RSvYUnng8zuK{P>(tE_$ih+-5NC~EDwUaWDs?cg=76p(&qifo5}IUHIx
zlL$%%S9Yhq?#;pg%6jF1y&4pR4ndUIpo>P<d>NRlRDbX&th}lw8Z7J07*VKm%fhSt
zx=E>&{A4uQynb2zWI=Nv*T&aDk9x%e`%0<5jV^8->(pm|Qo|-(jJ%(!sdx2MlhJBb
zw6vmw5}Gh<lr4-(vJ<j^q(WZ-)+_7$xf5;<+JbJRM5MV30fO%mv64_a_<#KB6VyLa
zVq+grImHz|)iRGtjicFJ7~7rs%u~C1tIl$8ofUKM>n$f})E)_SlU4oFXtWN?1B#a_
z7inSr_@9k)Z2K8^=ddYiV?StEpnqh)1ILCA=9emfBu1{{_mWjz8)h;hTq5<PW;*m4
z-LfmA947cZa#R6?)n_h(Cqna3l)B3xsp%`*u@CHMNAVG_ZmpiQJRf>*UCVFsG;weD
zR<~e=J%Z1qDy!d4cqNd_+pbDW+9Z;L!!%M8dID*@)`a%_R|`XM(4$L@En?~0h`4`Z
z=qu5Qzckb1nxEgqg=Gt`aaJb_s`oE<#IfI8@hyyn_T56KeNx>%yd5v^--;ZQ#QCLh
zDA5sGIu&w)i+BeQ&N7;E*d~p10^VtRVc!4MFA&^)l|{0kf*ZGCD0H`R36W6b7XmaX
zHpkdd{y286lbc8wRDW2*fAO5&(&eQY;H|1;Q`ySOny8Qgy1K2Q-a2`f=O#AjXj%IE
zZqLkXZ94CjZP#F!=F;gtcdKI{YVow``mBvxU%(`9`GN_6id=0Kiw0)pJidQ)<yo|N
zzyl$CkBouW(BVQ%8W!lY4EhOEhT$6%`Nb02x)IC})Xs~EuzzJt1XHfFx1E(_SSS`?
zRRnynEE}#U5%H*OdeufNNYk8*Du2^PFRHv-+qP+yZrmX@n>LLTeQKCnvJ$;E8PQLW
z50DdEurMQwsNfNr8{k45B@?RzVbWgpNmi$%48*`9`!HaQ0X|Wia%EtJH4^c+-eyaK
ze9OdZnXI^0vHdf$Ki+uzoChDXIrC5TxzD&JXmCVZAI3}ARxrrtTVoEg4SG<noK!zI
zk?~BEL6kzm*MFr*dJsK09#>ECZ(TuBRWaY|lR@Olvx`oTx%;OPSmj~O)v=T+R57`%
zh!x@UW0>WFzYF+7At~=^MP3y7Rh+ui)S1pzM+^M10Wd{A6PO=X{@HW#+-xtARfYA0
zM6}qt>GRB(ItZEtQJJSiE8cn|8c^jCoSXi}Mon@_r#gXNnD;7Eum*sHEV$cxpYfPR
zvBzo1wcniTfqZF|mB_8q%(tZwMvISob$XSgHoRaVwQTAnaG$jSu*jSjewh3TT)Y{Z
z5JY9q;Zi~I$CTh4URlMj3T6;i@H&+sOCB?yl#y2#CA(T}<HE-Iu;Bfb5}(37mGabZ
z@#AKj8Vm!AQE0RvzLUZsWZ6QzHEra+*P4voEWPR}z*_$IdC|1ZNwr+q->~{7ufXxv
z(%;Hn-%7<DS(Hqz4TAL9^m#(}c40euvP}6k=Hu<$-f`D@_~H&|@yHmWWboh1bGP;=
zgdEU!;`hz>6lH34ZdgV-vVVu4O8fcy#od|RJRG-xv6m<8Y0Qe9KEr*ClR@wI!QnXr
zy*)^!+JLY_0YaEwl~8$!<@a&{_(=R)ic{gy7a8DmDd&(fCyFqa1_6IkF>z(i%!YYT
z?#yP!JVDx5Nz_smE>g#DF}KS8L6_h;8~@Xt^lnjW4m<X8p3q1o?!9yGx%o_`F>Du4
z+SHOL7JrZ_>I}c$f8fhw#tQU97XvMk3G58v007PJ?VWeh9Q>%K55sRwUqZ)Rc21dw
z0om)g$jfi-E(%Nv=e&IR1J&&(Vn*I8Jb?UmgQaoAY?RM<XZ+?5J}tLq&>xoo#Ke|Q
zl%*!m<Hf^)>g#;XpNBd%7A*6{dj9ETI<^tUCqucemG7Y5R6<ihp;Mafr;omFxvv8y
zt8ReC2#gFD5%4JnU3q@i9V)*!>QSFd!vrI5uy3zzH@Bk-Q%WaX>Hb0tCSRNDI3Tax
zeC{5(n1wa58eZVMOn#9(Q=EP@7+}7^HYF;8Z0mBt?J!Xl+{6b3Y5A;1tI}!5`)c+m
zjFSImSFf02w9_b^%fnxQ;O^fM3+umgn!az~R_JP8Fnx7UveL0QE%Jm~zwWD6bh)_|
zEoum1{wfvUhwAHuP~Cx2H&R9$Dp2HH;oZGx&ZlmAlWXSrR}Pg1=Of9j=Bp!NjQkp{
z!s%yOico2xWcF-@0g=o5_$3V%XzLho&21U#<0;vjt?7OvV4u<zOJYh#42Ua+MY)K+
zjP;MaB8`WiaQO$ngzYP5Y;jo;_@geE5T&Bc?panBES%1=#5lMjofFJ(U(NDapEPLW
zuWC|Wn*X{~UW(?kp>RfaVV3DIIaPG_*c19f!TXrL{2?=d%4sb$iBH`r4N($xl8ol{
z6Gt9B>9%NmRx)kb<W|v05d6~qMzohyV}g%n54TILPHYsP2Q3lk%7g?o6K&&645HOq
zq(Y+XW+yadS@DY*tq7CqcQ8~-Z{02oMe$5wTNHcc$mc>BwRt&vDr1gMz@`o>n}U6d
zYLw94-lXH5m~l>ai4b_;-5P95*En>q4oSZyl4VO)1-I4u)u;Z!H00?B|6VkD^_=8w
zfeM%*xSJlh?dyWYtIog-MvP)%_;%LfI$)N=ayJH~uMe&mj&wvLxFte%Z?IW<;7@ep
zltOT1Ogq&7lhP8xH8@ts(-?8`@xgieL9VleUjD|BoCcp;l^&WFd^{~YF)dG$-0;HB
zaXtrSHRjFqs|yNedIj;d$HD+LtUQGAyZ{?J=)qEe+(#S`?lOW1pArB|iv2o~FrF8k
z<N7LLv_-BaJ)j<*#FJ(c_}Vupe$cUsE#wgRCsS&kmIl)s!nxfXxtX=PBQp@DW4uo1
zbaju4-`AK=-|_D-wNFO)jg@M6wyB_63*{UHnIsxIO0Py7v4ZcWeSm-JiKHS3Er~U+
z01_|fm2vdqHN?HiCi5yDc)R^_;T27prx3$r67g&@<~yUpg<%$<5z^Ah49oQBhcZdZ
z;6HW%Ec{Uk!}%?m4=2x4P@8#s2YD;<bHF!FyZg%WPu=GFL&+HDdA4QilD>i21YKt`
zn0RByu&{<xb<DVN$$LW1vJrDO8ZZ96VPqTg4xBtpm#O6=nd1{DTGdZ?vp7TY?s}m1
zkB0+e5J5wJh>V6uZ;|fEo+;|1??ukMrDGt#hI0|cq9`Y@Toj2qNuALwkabdKIHg`f
zQZ8*aNICmZxmhJteX{*vP;gxd&J+tF%CS_5U=DpaztNWQu7S3<W$P53&sl12iMM-O
z#~(U$BK*j#*=Srhuz{mV$GCvy@zjz=g0z%<<tO1bj`Impx(hFeQ5~NInT}g>q%E0d
z6@DdyIwx)C@L<jDJkyMqPl7xrj2mA=yrLm?j~FKO8ty=(nv8Yx_~jMEe3u{H)qitV
zGO=N_`Gy2A@Ec6|q^9X~SuW`YjJ&ow0J=+UjP)8nn$cnWr4&ZZW&bl@kMNlRXy)ot
z@k;c|@~gmNFrK5V4Gb3xq5byx0>&Q24kO@@>LJk>$a2p=C#ag2;WC;Dd^%39p<C51
zi+iY?t?u~I>*y%%uqk(FeDt&pzQ4{U{o4BGyN#1YG8o`(9Wgo>*T4zJZ%YYugYTuo
z2rCpUdDd7+Y=RqCa(^|$ned)Eu5zode#LdUtyc!^pdyfhA2Y5%<qOA5(fXS`v*@LC
z4$aNlI2j#NG_jStPAv{e*+(sU$ID)$sgQu^C0;9un(CG+t)0@VYA#i<n16+KH(k6I
zpK!f^9w16i3=rC{wRkB~@{zvtQAPPvH714iL=bukry>M`=e)46O0ejDcURpmaYjcp
zN{%sh$5BW3QUlNVags5kfdJ3{gR>hk5Z>*pc2~3O)eBe&gfWY_6yWXckURu?)qDP_
z{c~%ih7KPZy>=9=Kjr$o!l$ifKZj}|9ZwQ9$b!2HNFyWQS(>KR>4-GvM#tuUErhGZ
z=BFZ}wks>9XidW4$5xy~{tZ&jik+{4TvZPn?c4-@OzK$fIa%IAxnDTNbC<dc<3z#d
zPF6O``kqb!iw*B#z}bhEPWa)F&x*FMA`<hOpno@gc+QsxW7=^7LHn)uy%s|ei+ubq
zJ*R^*81xBz9W@bJHL`Zgb>f#1uQ*?1NepRa(i^?N0a<fukjwdHc8{?@K8#1ovIGgJ
zcj2I<x5(|i|Ht}Wn?H3Q@DHCYf)nnUPaSViQPr<im0o)P-r_aY96`0lfl;oaW^pG+
zpJfphSG3-*Va;`iuC2(`MZUqUJ}v?sMMgw1;cWP@f97FlPb4q;^)p?zUr*fCM)g>5
z?Wn|DE@&NSLDkHPJx{v`n%ML8z~Z~Hg^W+qX+PYQpp^ReQV1J!xmFJH2@#$=2ML;v
zqRs80@84DZP+#Q$;%;{$oK2;81ULSIBWVJ;4V#l~I=QrS*FdUS0{VnMsSzd`!BbJu
zpqNo{v|7&%Dr=jZh?)u46rxuo90SbJP;Q5kBHjLn=jHjXvJmwK;lY8Vl$Mn_SPk_x
zT1&E<qyvYaTK?Dqz{+uecT^01hI|il4Pn;!1{tN4vN{)PF1~KiCE8T)w6IxYxV1GB
z%hq)(qf5hEj0r4;x&1<A8f&ierLz4+5cS&vV$Otq)9v<4?P_0jl)Ta6@#HmE0{a_>
zl~z%GIppr=rO`3rfk<A{R2MF@%G%PDP67j&h4PK!(lDfk57-_b@bLW?uh^+y13p8`
zE&&@k`7)Eu`p*b*`c~`4{(+YpK?Ad{BC>GZ==b>KfK*Kejne5J6VFm#<2R9UIdEII
zq6MvwfH@=(M(73@i7f$RJ83v!f_6r84%5Cl85Slf{SeNCORSf=UCqqhM4KAOjdybl
zP>0k@BP(HE2POfpl2%wJV}}9{<^Mz4?q#0qK9E;*py)&bt_d5P8daZH-Vw0+nhrxF
zyy%;k#bi{ftRS|%oH?vXV1H=5+v9xS&f)v<@=klW1v>m8yXtpAfHo<SMa-X+^kXky
ziOq59p_Cl7)0Xql^X}%ASYvhVgdN<zVh_q^%7Wj8PnfV*{u-_<$z+@1M%S)iE;8wR
z-0@iDzlVnX_2cm?k;!fN_=^YJW7}Hnxv{onl33h5T`b4ay{Cb<S|>mz@i4DmOIm5F
z7jt#SEKRIxd1JB64))_c%B@Gd>WyUcPp=VK3Th(Ogf}^6luxZrxUfAnu%c#kts8!V
zDqio-d_Rj}HhEalj_Jb1WuPhhVC7l?3BHGX>+OZ?vIV3U$U8-Hwx%%Oc%;(2EyN^K
z&_f;xA0L_3zg^pLR^oSR#VFLRS)P(5_c|)0o28QUW+=p|cOKsH&HdV7T{uC}@Ec=T
zo(*BB_`Q&r+kS8UzC|K<#B1LvF+~P^4yGd<f3@z-)d=L~nmfV!m9*6N1MRhp@4ReN
zn>;`5kevTLxBKlK3yTj*Kim9YCUY)gDV=%8xwuZ|d7je;hH)qhdxfk{nv{#6l4ZkY
z^%gl)d-0^2Pb=EUvHKj*vc~z`D0@O}CXN(Elg6aT2DC?~&g-nUS^9;gj<Zkv92ju%
zwMZ{qYMgiDvlt;nMj0Oj?jkCynFo8B1HHZRcDZ_EKR1?gZ)-<|>>}62ST;X=<1lgP
z+gFTblQv7LP<CR_jCrH3<9oW4l}8!NpR#d2t|i)t%jrb2Eg`9ml9hz`uPfyz1H+&9
zY-6}$m1MuOQvOQ-bJ$i7jIiNTOGm-L2#+UX+R}@iCXbzDBCERXF@ru(2~~@tKKceu
zHv15?js>!e^aWnq=uJgFhpnPqpY4wy=X*Jh)E7Z?{aMh_!Q&X+)Sa>y@U7l_K1llq
z@#q)ws&GbL%I34lp4Fwzx~p_ZE(ID;QAHTKsC54dCwd3sc|N1X&UmMd3ckqq;jc?A
zlz><=Vr+Ncw~C0~B;VLkZK%chw3tNA_L!t)M5(%ePi$FS*Vc)36q3DX*a2hbpV*?v
zOvw&B`QHvY(V%}8zU@s1G1%B98W->d2zcYu-uXRU@g;93zE39R5}CXSmDLS3GizS2
zS57~Z)6NRs;h3hiWQ%Ve7gkf1{nQboyKQJd3Yc;sf}>ov^%u6RS&0WOO`krp$SDsx
z>3bm}t6sq?_xh5#$^f;_m*ywm(`6bx*$vaS_9?Hoxcny9Q@~qyi~{4#|Bi0c`c%=i
z=8vC(X@->jf4*9KGp``*MOvFbdKA_oH{~1Tb1J?YvAGTFfs=$SQgr(koGl6W&<mK2
z#<DYZd{efs0jm0dO^!#by_g8PC{c#ran&Vq=LD0GMPft4Hm}VrIhETFzKRj7n#t37
z&59nAc6R9XTR_@ZY@3EklISM68q}*x{p8CezrJ(0bH01yKTL{P-s#wnYnEMIZZ$XW
zHceu!bS$+z{~AM^<r$Z_5frO##K|wGP~Pq=f9}K#{oFC-Gs`3Os4k<fqt18l40~6B
c@H&=XL6yiO%ewUESmLchHT1w$YSy9u2RFAdPXGV_

diff --git a/website/assets/images/articles/fleet-in-your-calendar-introducing-maintenance-windows-cover-900x450@2x.png b/website/assets/images/articles/fleet-in-your-calendar-introducing-maintenance-windows-cover-900x450@2x.png
index cb61dba9bba0b08a3208a359ed29aa4edc5c3786..8537b5e285f7ab0199312b51cc8b5e83015594bd 100644
GIT binary patch
literal 78778
zcmYIuV|blmv-OT`dq<6J?--5IIBATgO_Rp9jmEZZJ85jIv2E-xJ?DMDv#<Nt^URuA
zYi7;0e>``nvZ6E!A|WCG06>wIkx&HyU_k%?Q~*5G$CHV8lo$X2@=aM@T@nli-@d#a
zUfmyGKfJ!Zo!vfO-ann(JX}3Ij~+c-+&z8#US3|#A75@CU#=gY?_XZ;o?Zn(;u%Gy
zr#Fue506Lp4=};tzkA0~N%fwg5q}Qu)U|Z(pI(nn&Q{j8lD7A*uCCH{7Y_~&q0;wm
z?;bL;a)$SACMKu8|FjPb39CLlX>4jaIJ>^Nx!K&_ja-^`@$eqpy$X#@vvzd;>F9R-
z{Nf!HAtSGJ`}llzegU1l`PI~-d^Tv{@8#vgWA{d3Z~uUof5_C~S!r3t>grlR*TmTV
z$=t~WRN78#eB$!il}(mI>%~=QOXtbuO>A>=TtZ^}+FV3p@<%Jq?jQGW?@M<!cCK%)
zZtjNnjz24@xq18dT;FQBnEu__^-qmR+L~Xzxb_VSn|*$nTUs@?aj8AMXlm>58^2z^
zxE|O!oL|}0(l^?Edk+qeDm*+{-Pl-peVe?0Ov^2#q@dO`wA#A59Uhw~C@l|&h`0X!
zbA9u#x}9NSa{AuUX;^H6v6XGc?qOAJ{qVzMP)u@SW*##;e@;nf&g_a`NVHd6@W7wZ
zf})bvo+&&65+x1o;Mnq|i^t~9UZ32;=+x|ut0zal!2Zdl(WUjGrLCxu`H`EunfbZB
z+n2)DjJ)|5&)}T4gELz<@9O6E^!&C>1{eq5R0Cg2kd$iv-<7uYZTI2xPsRK4>Sjfw
zlW|$m(S;?Qot*~e?v`!|Qib4+*SGYF#2pdhLv^mr>({k|!{9=zlInUJUla4zC(B>H
zbu)`ewGCBG!`-{D#^E+g+xz@H+&^8Sf(F1vHC=o0e!T)@QVl1;<y9s>zqU=x_(T-a
zCWBKZSN5%xhN+?BmNqOBe+FhnR~%ec4d(w$&fN2~%<UdjH_}Pz==G><l$4Z=t9CoB
z%8eNx3oVXyi?zXt2Alc?<_`Hr)+Ao{xAmGzP9MLK#EpH6j)_o{PHO%2yt^fqIm#7K
z)ijrXKR?0pJrV^4Wq58pt<~2AM3>{~)3VW-ZKwhL_-G7(V0Dp|5LI_sIb9Wv>IWjj
zsFa<&JD*dBb)Q|%kNz>n#(;g{LkcHX%Q_hFYMLBoi9%ux82OdFI8|lX<@J`*6=xZc
z`0}Fr)aUnncd}R|a-+HGW*NrH!?=;+vWoJMtydgueZ2S){61!=V4Kd+ldL*L*n;2w
zqca`$_5)z(y<fFS`gdIUix7TcJj`Ly;eUeh4uq|ke<t3FOok?_N`2INzO#65)rtI6
z@#-fkq=($M^RD)vr>TqEe7&yI!W7PY22JLv^_wvB|6wOAOB^J|Jyx>F&UpY5QIPl#
zfdB0o_8af*V{F6qg{ymF$_VEZSKWWv%=5?pBCaLD>WM$}KYU_3`VXHXnRbLRY=1i}
z?t^i?A_ReU`wvDZi&;-63b57u1{_J{IravOkAO5R;?&-9qW`@7W-8o5MtaZX&|r(m
ze^a==Uw!Th-b??d=4A4<VK7<3oyhpK6Uw^$<khF5+0#Ub)AT=3qzw-e5MHF{3f|AF
z*_}cmx6A3e|KRSDd7fpkR!t_Sx1?n)(aJ0Z?pn1){`LP~JCUZQBpwEboByUl>teTd
zd;Z~Mvl98X@Sm16n%pl&CerQeptSl`%N!(Xos<_?hPOgG=D2op{8!RnGFraO?kVRr
zbBD7DK%>a++4&uy(ZSN`+v;b*2h%sh`*Sm%D16x5;w_yqFxU<`Kwp!%@hj*gm1^gQ
zkPPXM0Mb>N*Q+5iaE7;CUW>woh3Zkyga`lmcEQcxWgmZS2U8i&SxXN=0`LDsvB^c%
zY+I(Iea}nQ=DUbXy%Boh6WSh9pLE+G{%?%-#@t0g_4SfMO@vC&@-p1r26wJQvpQ0y
zythLad|id=zg*t0&hPWDm8Y*Vv+W(9DHBJBCiD#X!h?o}T{^hDw8-MMdiDPsw}-4)
z{D+<0DwS`W^ZMvT&X|TOm0`xlB)7ft$GShcSm+^16AtNr%V&5c<Nwl7+tc_&C?#4Q
zDt@N0iSyG?aTCLd`K0MMPhHK{dJ`&K<o$6c8a&Y@byUcfudoKasa|rSjDjGv$2N5!
zdv_=42_s`oS!Dr!%<|lc{ukVJQ)Rr!i2sFc7Sy;1dgGg;62w$N;KHg)B%mkM9>|ya
z(T)6i;rw6D1z*PAZ9eHi7iirH{)7#<heslsGrHM@Dwd0=QzliJ4uMa{Gs5{VXQLl2
z{VAO40kOox>zCt#Hj#qDFsM|Y%_(`2<`ENpX8jd^mi_$?4VLID!G1eB4MKbrYMxm6
zgi+`gv!5C?r3pMH#fhMUhr(<D(j7gkv~`L9Y4g?QQ_>FJk&)-+X9?Vsd5$lpMpYQf
zm;<$FbHdpR)ywFAD5Wt%Wa#ZyzNj6u|Lcm#y8yU!)k3CQXnUP?cb<wnShBJS_c}=N
zdj4I>Ps^yqp?v{`C)`A%g3acW`F{n^dvy#b_PyTpY3Zdw0816+F>T$^gmmL8NI0wY
z%&+<n_3zBJ_p*)T?IjWZKQTN$IQRB;lFEd|DAu+xAz^is-f@cG5|sR--@a*|gq8n}
zcMA+Brw=C;{cjl!=BhnYm|EZ6S!{eGtMn6^<_C7ssVAs82ft8jb|qJwU-x<9hkqYw
zS^q2L+9xY&*Zn-8IP9R*_`cPe=c_PgK&Wgz_~Al&@23!R$gynSoB_5G!dX96<bQ2(
zTvn4_>KQ^=+X{lyf?ky+F2cPm^*gvQJ*H&qjXf(B7U?KC6VQQXVfVD>AW;naFHSF5
zEpaW-y<6yOi-g%)!XPy-DRb+2UQ73xS#1lp(HQf~6EBO#?`e~)P4V|-Vz9{lggK8j
z5WbfZt^{q{k}4~P_vbCrB_`j2)$6foO6Kz#KJ$q}ErW)r(^<+<mUTX}`4G~+?fb`B
zys}mL%Qu|(hC=#WjR<2)p%}0`2dm9s#p=UhIoSE^qGrDfb-~CCaYE@Zjpuw>Wc3gA
zzd%ne?jxD2Jprg#9Sn)<4LaSRP<f(3t#8tjKAh5tTnwlQNjkaPa?VrT>SJ8r{||Sa
zy^iV}gMu9@QLQS0t+8P$D~ZmlDkf=0`ck3Vc`)POd)=n~o9$TpA?SZ=?R%4e3(M^@
zUv~3|vr~Jt(<H<pijHk*4Uu2|kT{Y)eIYDnWt4{g6a43ox;F(|L`WLm{{aWD5WEl+
zeW$dRkurXsI^Z_&|M?;`521dV+tD+V?Q(g9nZbizq4ecfiJjz_(G8FHzta`vP1&m!
zL_3i!8&!<{SF?PV&XZ!)@kFwpVj<Zyp`L`wFVF+$)4YDVc0igPR@?5_=Ii*!0rS5{
zGNJ7DC$)XWZlso^9}z_nprhhesHZTkuuP7z+xVL_b$1CjG3}f<EQBcs{eR`$5t&SA
zs7k2vZj<WnfbgK)Ipibbo(a|Eny^)<#UEl(OR-eObk;Qwz83!niVq{tDn4X3F6Q6k
z6dovPR=iQIn$t55)WXy&%gO&-SmJJ&wwDv6g0cnkc+mTQ9KUNx<H%!<djMhA<0idP
zL-Ip<@Js<3Ovg!z6hRHQ!k6LpH&_I$_GP$xDIvrxdjE$!qcdK^pfTwy7~B0BJGjGN
zkg0?NN}unLz%<y0ypq~7fwzGU=Rl^B@58I@A`CL}fE4Zm?@3xpo?TeHcoSvC$Yx`U
ziC|K&f92BXVQC>%yi?<@gSKPTn@QBU2br}|n<<R#5v9ExSF9T22VGe$E!@pMlUYzj
z_;d0vf^`kCT=qT{PT9nYdgKxKdb-i+Ii=hh=A)}ep%{IEKS_Sp#Z92FKy25zTQV^4
z{#T#Z!25NjHN?XMyd!kk`yk6{Ukm0r!n$fp+3*iejTgR|MzA7%llXl9ObEusm6|qF
zg;1$?JODm8Hb3T(ZW?B#8Q~8WZI9kWpXHLz2H$txYI25f#OZeluY%L~U*;U6E2A+B
z=p`l&ajMuje<6lqbsm%afWQg(IxPW;Rc-YNYyN?E_c(*x$0|%T$)cMSgLdToSk>2K
z`4j(xN*BU#x(-&rVPyiXZw|h@8}ZfY4U@*yzVz#hGON?=QlNThL2!6Zm@fn>^YwN|
zuo3=)U)E}EIoT8#V5mk$NN#9LIu-Kkt&0sAU2<Y)^b?#iO0I;N<c4YVm+OFf2j*m@
z<J8lO_FjVW-)McT=g4>nDH|Q&>HHIy{&#c47J+5(>Lr%AyH-z>pTlJk1EADcLm|Qk
zEyTE=@*8rbym>k-`I48-|6&adf17z;ya&4`66m<&MAf}@k@!LCY4*Y$t2~<YZHa6q
zu=9w@pO$IC<x_-Y1!nx-8?Yb?GFl_cY%)vRr~xAk$O+(mnIsfi1rzzt3?wJI@1tay
zV8bHah5ShI%2rV$NA1rmpS<L{9LoZ=XeI465PYD?JNJjQE~dfFy{=oaFlKwp@0+DV
zdageWgZ8|HnL%r%P?k0KF~ZJ!Us@z32pIVaydHNLKBVG^Y+&zpJd-tHAS2LGsU&RK
zfNkp?$#?14k5vdjX5j+ekaPZ{&l3#H$DHW#HE#NiRpYG4I|f&&i1sh<4`4^&esNmj
zhsc~S=sjlYzkMt8u&9{oe{2Xmr~RV+W&ns+FDh66%G~?>;gF0S$K}F@LvIhnfndGj
zQO2bCfe)UU@C@Qi8#H9Dqn@5Ldgcym@phAI!<}Ku+w=^ul05jSzX$$-J$Hs`JH)}G
z?&ekt<-1xE7>f5`-1YYTNQ>N_OBvb(kJF<93=u}@XDNq>(#zg53N2hbSI^mK+kbpJ
zuROJFH^F{At%g0xnm-%CO%6Fp^0c)tlUBK8kfJsG8andhV`B0x;&F&_PRgJ0v$flD
z#wQI4g6zPLwM;BL7v8qXWnzE?2-?Gz_f1GcOU2Y4`0s~ae44%l39Kf}xkJ<jg`)f}
zXp+6s*_FFN<E=LT>YiV<GtM%-WO>+$w@nIIiNEQBKNK$^?J9TWzwIFLA!`Tt8B?Ks
zJ(n~JYG*!*Q;$Kr9Tm3rrV5~X2K2K=!1Y9%b$kaCG4KURVOqY_Zry#%=hP0Kl7`hN
zrUFM?pNp?}Ss*Z0N`s|F2~94gH1t!-4vb-$NH;t34%?-fZeiNJ2selA<0O{+U5&Q6
z(j6Gr9d`z#%}|QDZkF4=6m%(YTv#R%LlQ5qMr*32(VOqR%M<bl#n{J63L}zq_WO-x
zAHOm0WI~ioTAUr4eDWU5J%>cGTYZB~LM^M16N^3;V$xPXCSfMCS6-dx)BteDk)PF`
zm>p_-wFxr9kM_M7b!dAZGKZ9mgU!J->x<o<xCa-ig$ZW{?8mCJ%ZtdFDgJU$#Zk6b
zWzi?keM>#P=@93KqMn(KxBYclv$2a3@{z^=z^qLLJbLBo{iWBcop?`kB)E((Dg6vw
z(M8T{A{}r|{@s$WJ&5p-IZlB`)7%sB$T<IylxuYFHB%aYUa7X-4ayjQ5XwlqFzv2O
zxX*B-g)k_N{+&Oo^TS17qSadOzn1eENb-b~h!(Wush&n%oGPFz(Fb$nqK;Dti1?Y|
z4^nPBYTGV=IkRxB1{WFaVfA~TO~JPCNyI_s+D)I`O<9v7aoli1=Ffq<y+PDAzSn%*
z6gk3H5!Xhl(Mg4S1s_`~h}_AzTJdZsBo0#M&E0U^uW36ZJ@{Cj*dwf-{zF;VfDFFk
zNsTx*dl27t{Gz%HAA{}KvZcxbv53ck`JIUIhX(QOmurVc@U*AJx>ZPI5VJC%^=;&R
zvo%@o-25!V_*1<8R7(t%d4D=ImmZY~ODqL?+%&;Ph&7YcsT2;$!|Gpfz!YnQbni*+
zMlrZ1F=pkmFAjg3^WFR-X%jXk`$An)9fizU>wEE?35eUu2fdWu(+jmev4L0I`fDU9
ztb@}_?VdYF#O7&+P@EbYdVofODn^V`H3B)g#kP!I2HefGelPk+XlbGIq6?Qus@+uN
zhM+r9WccOY&XD^fTIVM?Lf`LcWm~mZcXVL1EIcaDu=xI3q~)pw$&}0CZ0dD-u28~H
zIm{7U3|Yhmk1w=l2YP5H&N)1Uk*k+iSGe!~(mUb{`N}CFOCn?U31I0c-YRE|JZ?ov
zX7Gs>uj<wD!TXV%0kxIeaK}*h7khP9-6!fp44J&?X7ow)U6NOeXGLXGy4!D8)A#$=
zYVTx@R#vUBp{2d=Pq2cTp_vN18v9(PMwVFys(3;Cga}C7CZA(Jn;m9*-I9sfauOzO
zzYIMzT^hQq8+<ZlY|u%~-gO--dKFPE5WIHo;p@mp{B7T)@yAS*YKyMyQCXm?xHjC8
zIIsHou7JH69*I`g+ap5igAC#%_FFobg5@w8D>gztU?{^-@yQ$bNlf{Vwprs^e$UyB
zR&A=QLg461TxX(^0C{T2ZX^DTN{_A<@u))i{XsJ4zlPlHtdfIk=!qkYwa5k5@~AO)
z5TLTI!Ns*q>O|NI*e$PW+Na4(F2C=)zd-#7_kPk+DTXg`q!^m*G(5qLk;=0p5*C59
zpYYx`4+fQcT^_FQW|Z`O%th5AH*zZk3;CU*<CsxYJ)jqDV??%$x+I|QbAmDk4k3!0
zuYD3BMhpCc^A-0$BJjgRk1Sv%yh+yAFpS$W4~d+560HwKW2UaLbf5L3lvRn*2i_Fu
ziJ3{$5`^P331Ui#d>B+^{4rDv30L975>_E+EIBL1Ge8qhN}bUR2MLcgh?}W<-&ht<
zAH9>W??&N?{g`Fd&A-;TP|K+gTv0vq4TN8n!S4-hPg_;bQNUjJGuux8OLE>v3AEkn
z(rW06moV*T)Y?D~;&>;sYl7=i5l63)=>8qd$4O0S?<Fj%vM?f}6PC2^RuaW@zq&*Z
zm%ZK@F#o?94qlUD1iL$~ZfDb}<gbHYMQEvA$sf<u)Kqz3?Uh4}pJ&Sj5767fsv4}a
z@ME-yGwKs81dh-H$%sl|@~18Jf~7$lz20Eo<{F;jjwQ%<p*^rDOk6NMdb>Bhe|>V7
zG9;7V-6pqFDAis>Xh0j8hTZn(xd@KCg-II-D^9`(UxHyau+cBZF|eC9vXG8mo!{}~
zqxVm_r6#+|l(BL)(k9eq{m`{kVjg4h1~1)0t)eA4O8eTX(VxyT(S}+c&&=f?<E12p
zaD@YJ4`!$h)LaT|#3t^V>s5T1p6%+)H*kMpa^(lqr%Z&;xiqU5oY$qkR3W0NM|7o!
zjm1g36Zx6GA0GSMgRq+n{;L07+zB!l!ERqPdGaxf0G@mTR|K6yN$)1Lp7sJKCvOzQ
zAnP(V8Yej-8{mt$yF%UI^8psPf*<As`@&EQ_~3&aeh<tD?s`L0oj{a;=hqF*hUlC2
z2n%`iO*z)CFomzZ<dYzC>Z#?h9{$If)T9u62VGNbr%7h2{d8_rVyI8v{j~uib7VXi
zO{W4XEQ~fsq?WY8eAY5Yx!CX+6n%4_VkOk&Op~IGwi}Mg-9DBKE!wBu9}GN_&87ZM
z^V{ld3A&$m7c8oH4^v9P+CnD&PG>XOA&ogt&v#lTbaDGb)+$8arBcrDoe3BzwZr`r
z;UobpcE%AKSF#x;`5eP0n)PAn_6U>V&~-bVQs#u%PEVfkTj~bMofgif;w(!s+>D7m
z<bbJMVhu+P_^>ta>Bi~Dk&WfuM$|r#RyWi%(&f8_Cnj$OnoXM;HzaQji2x?JHo0Vg
ziljZ568P|1lm~p4Byf1#u#7UX9{`VL6=+n8@fOEQ<e`(CkWYi8V^K9O8h9wEUuu5a
zA>Fg^xLBZXT=P2v{d>0fWI&ZqN{tqie!;Qmc0UrZfdoyjUF`3f``s(rRwo=<{dL}n
z==I~`>+dp&j4^Vss^3^5{&w&<nj?H;#TN|4j1hR>kuAihqKF|la0GO0UW4Oe3hpLj
zj}a9TkQ)o7qUn@LF8nfFdd?&S4i`EeEi;HAe|_dKq#{O!Widt?rg^Ml;jigg5M05Y
zz9Ip$>;Z;oNNE8I5uV+W!-I8#hsfx4Q(Cm1*ND(?7=@5e(k7$3zynm%kK!RrAL4`W
zv#A@C08^8fQPb4ms=sy!qL!>jUP#Nc$dY^1+S$rh+jBq?pk{1BFx`smSBHgJPC=oV
zp0Ag{Mjwv=u<9!!lK9RFre*;Is>cX;%{Kw-WYslnN|q@x@L28`gH!Zq6a!PPmKkHV
zzV5IWA14|fKTnu%6N=!2J|slTUlDK$Y7Yf3ca*#XJ@8WZ-S7ngfugV-mLJ2cQWary
zm5B3|i-^Ho>Nu`8Rxs|X{-k&cd?{k4z&{G4|3d*ia-pyLFHPC3Kxq3O_^!;`HvCKY
zq_OQVOi)z5hqy%#zGo~g$9E%$M0Ba+_AXoc#B2*wuRs641B(rR!!_%$oVzx=kAH)c
zCi7(+m(NrQC4Xu%X1VjqiMQq3Na)J+;fu-+gts=5lX1gWt<kwUYwb5x!}|AxFG1Q*
zdP_~ako=^O3bwWC{`O1_W-+s8KFs;}N>TgBk7(DZ+WO0>JqVHlE<akPnt^P-CpflG
z8~)l)lkD5)@l>$PV^+s6X(ybZo@&A~kPW$jviOj2vaD$QZ)Q$;^V+D>JBkzO)SG4;
z&LJrpK{K1svDeL|p!8AZwo|lJh+X72aiboH%NWOi<UCYn0bbrxF!cGdAGFtdHO^?2
zzXMwuRw&eOU+&XSDiq$l=njyW`Ja)EM}PJaK(_<zm(7yiBsqN2bG+{n_Fy9ML9&R{
zn9X|q8%2DjU@F%L7~DlIBtTLEE0&L5`p+BGZh66-!E|BwKuav<`mp3Rlp#|6Y}i+E
z)!wzW@PM*&skcV-r~S})Bn@M6S+j+Pa>Kc@RSDBHJ5N=n`?>YZ`a}OQb@yY(m9EWF
z8&#g%S^`@k71?$s4j<yhu5^ya8R_kqmtqJn&23P>=o<}o1b;0xhBPEa)7R<58c8Z5
zCTizXqif+9*rF$wU}B`9bx2jMwe760#O@r#O&rE}*>cTHKFFiB5pJssn*equ^ZDW9
zj^YE|p^2}mar$E$60HSY)<S+9wpJat4HXAc0DIlB*R*y8{taE2VS;D4e9*`^20iNA
zgvp`fL=xG&cbG-Jhgl#7hE4znKl_qsn&p(AQ^;<~mIm}EJqmPaIBDd1*YmMvgl0Zq
zf^@J$#^-(8UznaV%iM+#wW|8u*3!4CpYIBlsEGc`y%m#{4v|)7MFLC<Uq79l=o7*W
z(>)IrcA#4})-GGw;eH*`mjtV|M<0tMLU#HQi4H>Kny~Z>46t4qPt!;#!$O;}pwy@O
z5}p3=Elcnvs+uzGWXu$nb0H8_jC_~w{RF5z4(89eHNtNJ1K?3K%+}aJ!mW*nF&wwH
z!Sco5P){Er`BR$k%?G9r+1_X{%%O<__YQ7F6k%a&M9GHY584NX?eJpsqnvYa@7=fY
zx_N^Jm0?=~M}I?S*FWiMDFAkJY@ZKVE9Z`6L?C8LoYW&5kYjT6|GDQ9HUyckGhRu3
z&ybH~g;Dx0%Lc9A1T6)H+pvun;L}8b{7k+5*Ll^qG(a<A2O`f4H8gvY3iE;9U|}-!
z-4cILz`rH^+jWt=7fgs^nuY{Mnuzy_=lqWa-4T2C6LNvhl0i)1j_DU3(1KarwZeoa
zIOTSk5u`XJVuA4DRVrAogQ(ou!Eu=T{Uq;Mi8r)|!@O!Wb*zVOj)<<BdV3n?6+MBb
z8%Pp0r6;@M+qWk(<q7o~qt1%okT;864asizlIo6l(gh$`94~c+50~rO;hN6A5f6^r
zvtF1-jj`e?BLWVXQ*06hf640Qmjpw{Y<1wndIHE2ps24=B+Ork=e@<00bl#oXY77!
z3x@b)D5d9FxsGoTzrg6FXUaQt@rDDTc71tw27g9{o(&^&*J<v^Ud}_6IKqb;@Slh|
zdu}?so56=yl9zj*W^`C%tKbJIacG6CYdhF>%OQnB)acsw$YEBalLt~D;bIu6s9NTT
z@u&IV{zajR1kz!X7i<J1K5V79W-TwWQNE9HbNn)hA3J>lW8MgP9Hi9|6nky-uB^6b
zRrZ=f)IxxZl)9B;kb8Fi7E4lG_WK)rEv*8h)x0$4KE~zO5O9bI3@I99kHykMNl2zd
zXLQ%X!VT$<kt22l9|R|9d(CT%00CO+IDByIUwlpz=VvvI+#B?RP<<HV-ASTbA!>!(
zeDsj&&g}U#d~P4SoffZK0?D*65s7D(EbwIWF`l2nz`u5?B)_M{VUGG-3C)e3D17}{
z&t2Zb1W;fZT1sR?@50j6p>~N4xGdzivI!BQbPhQ;Co(ocUUyETLwV4{KeXfj8fjPZ
z1K8Vy=%Z(0Vzjk4{vHU>H$Y(G?wyT5nqs}PAXJ@UwqK|66ZcU%=1ipK6@k&@{-WcQ
zBw9knV`C7Ylz;1RmZIw6k}dOBecq`4i4nI~iUyi**BTOAep5waLc6V18fyC0%NMij
z_~U{ZZ*}j-HTzNH410uBUG05(c<mY%$QlZbzNv0$y-kR@X$2;xdT7#_vq)S3BF=#2
z6Jm_QqX@J&1>E%2UmNpSX{(hdV&~H%@Q819!65Ih6}-n+Rq`q{40Tm>lo47#<_JyA
zi!Mo~s*(GbxG<Sz^p03u`^WxRiPSQManclyn)t(t&F+rcnW#-v6Lq`cv+JB;yX^4I
zKU7xk77_$8n*h`M7~-4eIarxDz_3j!U^xVQV}wEy3&2AU=$XYyrd<K>SbX$edEK8f
zgsRaJU@<r=1QC=Rz{H-`g2eP$vf(z2z$`Y7)kB{HZ%MLzrjqQ%&U&*kVN6AXqlb9d
zo^R)TrN`L$%O+!iu909XHAm7)Rh{phnfha~m)Bx7pFUe^*2OU6UKfkAf+)L(#N^x?
z6UgmFM2{sDW#v=Nfchr)2##ZfHHK{H!yOo+n=1ubL0<yaG^;!`HF=%E7}hwt6o1Uf
zWj+{%hkJ+6M&d9>o7iL;9=}3*X1BFgl-2`R4O-^QmxU?nf4*|`Ub}J&m(CL_YONV6
zvt7nMJ^@4B(k(1qlj=Zh9~=9kRF?EBNBEG>lrhghI|S6jlnt3?YMW?%GIgzyO#+Cy
zE!@*3fBs{8keQgsB}46F(+l4IB8vWF#e2B#=tc|yl@-)Ky$BBGD6VXfnWq_f7(ICL
z>1f&vvE~d+rctAw7TYGM!9wyWPUNks#L#LMBRIuWFvI_a8(2OD82R&uFcTBR{TDpZ
zO_pBKD)3S{O&%g*x8V8ajov{^Za%G<OT{&JY-&*FyKmPZ=#ncSLx@B~trt>w46XQT
zAqF&@S^1>jo(1QJGJ+gaUS8fq2VqM29<6>uC@6t_JL`&?3>sV~S2#TZ`y0*W?`a1>
zQa(yMZNOgrOv)}OER90JKfy%)BAxxGn9yL2W6l^$z65~OY-yb74pkp7pKD=ehN6!E
zB)al0!6TsrS+P%IOqTIsk5rGF&E4LBb7;>`1zj$;`X+uE!x<s4_WHGkxLs|jPhsh5
z<qNrMWGnx~Int`<mFhTWlilOOOvzl_@SDY5!6w@o|B&ALKhl?W*@AQPP*}GxS}bMU
zwsXOw;NTM_vUS4_mzq|v<+qcK$P6UpPypnzol2Z8?qID$xXL$PUIY6K?gJ`%023Fq
zb%mvzWtbzm0=x-3sJ6BimKHEG2`*Wai1~)&6hS`dh%+~ZPpDG`o(Bhi?rC*AdSCeR
zwC$Hm8u@+E*3=3<?p+u&IwOd@UMA88aFvvFls(=Per|)l<tPHj_r$jG(N_q1i2N?_
zFR|P$MwreeS9CTR2_2DX2F!jLPIBn&G4KF5SdAtLuZ)laWi&ZelT>UPvmX0tE{G!@
z+o<(RFrD>?kD$rE++;T1tusnud+M(2?MK!ehJVwV<dUFr$hlO<OXnn6v=D?>EPm1j
zlbw6GIx?ldd2HLmNz}Utig*$r3%5?yz-d`7XS>OEC*V{FSGY?$o^kus6&y(c4?4Sq
z`Gke}`T2!~UEhREKL#fYDdP>6{wewkYUjYK=;Aa%fo2gN=)Dc@8;!o{dwY8K5ca;m
znzvvz4q5BjPWy%o0WLPVUCK3s;r=xten=K5W0Wxcly*T6bO^I5mAzG>kv`CUc5=8D
z{+C_ye{5koes!u}9diGMD#^(5*P;A|228du`(lfVws|`FjXEqHC1|*#qD(VOu*GYq
zZvuwbcV+Fml-EFp?)Nhnb>#&&0lh0NoL~j+tbA^kz>`zwXG24aAX76G2|#`m*k6S6
zhc_tyeycNkld^y?<@m=(_L=u2=imz;nJ~$71Js2I|AB(}#DKW#o*PHaomgIf%i{+<
zj;HpB^NS$1(=%QQdgSMn0X3*$8slh15{rP3)M9}AD)6r)HFcn*!m6W45y9)&?_Wrm
z!W|}ujbK|qE@*e%D0euCkkVFUql3U}x+h#(SJM`r;%xhAQ7V5CPe0fuD5=i~FPt!r
z@q9{-Pyrcu@y)~ZBlX+Y3uK*H_*~w1W+S5<yb^r0?}s@;4GE+HTTD-oLN17~ZZR-u
ziRe=^nDDWrr{p6P2Dd;exLCaa<6jtZhzJ9>bC1-5cLEM`q24@ov*+f_<_~Z1B{xoM
z>sDKDE*y2w-6@Fug5VsHOoE<VzqKxCh0x6#CA9<ypV=ORVv&4106n^LSBkYMeJsmR
znM0BV%ft2j#Wj0OF2BtZL^fsh9IHI-1u2vYHBl8Eqr8C?K?Zss>*$0!aQ|tNBe)<7
zeD#|T6!`~Wd`xW@aBL;gAFyyL3FioJc|lV;@Kn6b6(K3G1B)&-5R^?%45pwrP}A~P
zu|~urN4}ZDfMlEWzLu6$c;L-@PY4@%-3%=Ct-j64ne`B(KkM+AxQfDAye6VG0R4n7
z1KWmy86BN<*63s6?db6-x#9a5`Lv+eM!o+)^uI4kK&$k}&NQ^F<u1=iKS;4)s07B4
zNk1J+Gg{C(Bd8S1xtB-5o=7xL1GLz5pjs4R%*ST6kn7e!K=Y?bvKBht!<1fqJb2%=
zAG;k-!D3!<WEb}fM4~_BxG2R~(SN%#*5f?6HUWl8Abmyrx?zoy3t%DHhP?rf{_J%H
zl{L_gL4%?p=wBw=z^cPnzop0<C=?5|`w^@gvq?JgqDLQm;k~Ox@jtQutA_>_LtPPS
zmZL$+0Y2gDGuiB*<i<?UAC;m@w*;9(z_FPnA7&q_9`v{f!9jXM?}gz9Y3t;J<ZsCS
z%9I^f(jQ8=LPce>pt{@kbn22$EthDLZ#2X_i`B{U2da})G^jt&ZPk%u+^{s6iV%lS
zVlT+jbD9{)S|smDBKC8FkEVqraxRJ+608}lNbO4-wsYA&Mf>=q>Yhvz88!}QIek}4
zG-y5p95Zlo7Ddex4u4HYoIJ!}L$1q*_f6gx$xc#onJWU_PW=f}tGE?Hd<ydHAX^L5
zO<SbR(9GYa-K=Js;}vD{b)qdBR08JBc{T%sjDBO2qu;y+H`^V!>!*C`N*@o9Cg)lI
zp~LzbtN6emM&9w1gA0>7gjglRFohKa3i%Tj4cdi-XYps1H${hJ8}~kpbbe$m)-osT
z;Zpb2;s{g^I%;dKq*YMFBK7B#H4I3w)0Cq#7R4)kss5|!i>!*}f*Ec^5r7_|{Vwjj
zt4U<!5garjdYCUmai~A_ou!CAX;##h-J9#QH8ISc8_htN9A%RI3E||Vz?xk12Qj}d
z34~|RjGRs5l|labDA$MjgnzSB`d(u6oyj<`KFPBPZo5G3c>YD}3Ozj&ArRi%1$kzf
zf^4JH_WcL-)zyWxfUVq<YDvNfj^;&?RvH7kKcocvK4yT?Z!GwJs*lTZhtO;&)g5*^
zhwfS>Q~}KSqHY~t`i#CZKwJ@js<etC+09bZoxL=V&IEziNi7@dZZ)lN82BV0G8P*U
z-T&1hV9)RgXu6YJ2*<Q$J%KZZLXoc`>mj4Qk9?O_<Mr9S{H=5`Eq@9ZSDS_NizcKo
z9Q;ZR#xT&VJNd&<QvXumq3e40m&4}{3>I?A@Gw1+LsNM9giFR{?H0`2G;TEM7@m9^
zDR&6f2|tyWi-ieaG77RCYJ$9C0Zmj%hgZb+P(J^%#~6v!YRjq(ufPi&yMG^Ilnh^=
z3_O$HcG80<X@8W#$a_QB(IGw)2*X2{33;{nfqa8y1+B_l#oN##3f)(i0?Ljx(6Mi?
zskw^iK2a>9%rvpBjQjd=)3l1~I`7Ti;(ENfg`%)NqIw4yqatVI@D_4NY&MwqjwC*D
zWK^fSHenj0QTLKU5GYfSw(BLOY8k)#OUfRdPTL%9UwoW`_le;`wLJ!st(*Jo8<8Oa
zq@7;V7XvzZl)v`{v_TylqE$)BauTn{N_h=Bj?%@zuFX#)3wx&!m_0l_1?A$I-#BY|
zmMb*IZGP<k*(5?4LJ;B=;KmtFWM^<>yMcjb2l|QT)<<MADq=A}$1$1ySdNMj?XL!<
z6=Gx1QPHu#nq9oQ67u!33QNWrLyb$7B~ye}Hmi$b1XAx#JV7!SmrL5$u;*3>#t@sD
zhK4%^szGCpM(P8%du!L4**JmFaZ0#)W;fKukEkijo=FFTb>SVK<d}Cnfg4Xvbpo<3
z-d+b8%L?C3^j7IUnHEI5e1etXe0i`PPCmn9+l@D#{}JmihQ9mtyBri5xwBxqf#J)#
zcgLC1*etxlq==hj==M`U;0cOhMWV2<@XBi0&&+0tr@*TB$Xna#DKa3B+QblC7CfG6
z_Urrhwv^AVd=_7MdNl((2sMz8sp#H&ZnQki=zEb`OD!elZ-Gau#UB$4D`qRh7|iol
z^hvltK6_8O%rFQ@$p&w*U;r{T(eHQ@VC1-n)gMH6xE!}E`ftp7oi}WtAuP^xD%Fw&
z*&_FiCtt~FqRv-mTmN_}ZR>s_1W$cvp-j{HG9M`W8$tcM;_(}Kr}$ZbtdNoi@v-R_
zw(_|~TNxONS+D6v?s7(vcyEyrvrx>OGkhR;cuZA7vE4xa&t8)a3w$nmKT?@H;#%B>
zXq#Kxdgk28fy!l0<(q;*@Tml}R}v(U9_`Bo%LG2)n$`!>cE^a{p!dD%FTl>}AzIG|
z$f)e3w!mFwnko}>Efg8kZHXWro~u?E8U;-oBj^ZG`{o5^g_V)G`7!3ilKYFoZ7P87
z&YQEctQRgPgKTPjJ^Ry=Se@>*&c=Rf?)eCsNR!UE`GH3caO=o!y7KomM{o%rNSL;)
z3Yr%lC;@LRIk3XGt8jrB59y;!D68)`TB$L>b1Uw(Rz$g25{{=pC5ZC0+I{5Cc8d?h
zIAptco$0D^3Wsruab6oK_eGA$$jE@|ls}2OhJiKP_5s}?I7?<i9oq`fAc<175OFUR
zB=;hEVGP&9*_U98gKrl7T=Ki2`TLrj^l_ViJ3Biw$;H9N?GJH&YW6Zs4T<JN@j>S>
z_F=3qr#Dukw9lFrLhrMsz`cDI5IH_;MT=R@$at@E{`2hz280Ud(c?)?D;XV*$`MN2
zAwR`vOYEiBClIUMoy&+y?rPh2ae%55Q@N8pO39csL&>zwx;pQA*vHZpB$q+XPg^ua
zxK`TANK0AWaSovbA|Jo$OqQqk-|IMANCWd1U`T`N^QwI)29O9cFI~&GSDs>GH@LMW
z_M*bmzJ@rY1)T$0QXtU7GDL)adWFomuR|DPfE>bdN4FiuE?j1?fE%XkaZvs6cDVZ}
z{_PtT@QvV`+3=F}uZFE!zxKW(SfP#SfV&+<-I_4TgDU#na{b#&`SCVQhh<96rR7**
z%_?=4@t{tIoEk6$@jD>w*|321Q4juYoe%PDLq?v6F=R&OGdhsFQwM`N=YSgGt4+sc
z2+S*T%4uDK!FJN9Fbs8CI2d3l=7>Vg4ODo|${V4xgp<=dzm_iO4)x|%-1%@jPuOUx
z_=&lWeH5)ExnM7?Hx&UrCr!iJvug7OTgb<UP<jI_occW)^mWMSGeiv8dI1C*NX#N0
z*`!8jm)90H!(gW~I|!zM?&fTJMD(q45<(RYy47DetDi9WTX^xtIdU+W!1vTY&)cuF
zF(F*<!fmz29pA=5!<lb%V!!{Ye7XVbZpXzkv(&?eG%!K_5p24k;)?K1Z*8mlSQBRY
z3Vh)7@2QE*Zp5rGL|Y;QEPGMPH7MELn<t49dyje}r@%#(GFgl(UAADejS41Oh`e8e
zo$sC6BDQ}}&x)6cvp6{-#-(Hg17Uo&I{YnocyeRbKfW!T`@!@1QSzTfT_&tL4b>w9
z?4Dwc*+BbYuF~m;6b!Z!d~|Lu1D6nf9#*rAU+5EaJ(n0wE%g(T(2E)L&~4DQLGe!R
z>{mPlo#X7Z;_uSX0sW#5IiGpNskA+(2!NAqvm{1#oNk1_yO4y&e?tJxCg(qFM;et}
za)=UnNSu21!io*9y&5FJ(KP3L&j6@qWrnt{^8rM0HJp=&&87R!V?<Nz!oQ^(F|K;>
z;i`^>t1wC<n{tDG1b`vFtbJ=o3@>|4V-;@uoh)v_FB^4y`Umh7d6chqp`FYITFCps
zjrJfLp(zHN>P&zSi0fibl#2{{>w8FP>f_RO_RQ~zSz)S05}-Ice@boVqDmVHfh@Bc
zM=a7rAP;(+CIr?!_^wgDb;m0`3o5X=jJ70VYD)*qa>b3Ixl-nsi;sVAbBKV5)5;Qs
zgr3Fec^~H|D+zH&>U+6;VTT4)eoO4w+1csn_(K-BprswNN(4k%ujnwiyTQUOcGi6L
z7bnM>h|M~!pw<rLGNEZr_v$WmI1GKO+Jln#qMa9cDE6DON{(OB$*@Q|1(3)FvLvWt
zn}uP;y(5WHF$>Tn+}@L!5gDu0k7oB^J@MG5AH^(9sqzJa%RiAw>5O0xD%_V(^VcD2
z+RW7&)G|1w_$z}gjD*HvVu%2{{@jzjhyeJA7y~<qlcti7JKV`lawh|Ff2EPpS7h)f
z;C2R7?S&(Lg79wwc;_PII2#a9BWmuZn>U0Gjunr);CK-`-pjP@bXV6n$5WS2exdxZ
zwSAfQn&$K_+<IyTeuu0{9rqiMqV)YuaHFM{s$^6%<Z28gQ}!raW<c-<)LtB#sq4Qy
zrQtmKNRCb)*2GS}hCuk?!_#7t7a9S>sqB5mdX?5;GUjl%aDQ!5x(JuF^+evB>-fM{
z{S*tLp`jV~+i^MhezPZ)w=JpnKJ1-Rwc=D`$-~YFTF~-{TGVd#s{Q=@Q8qjUP0c~`
zO8BzBW7Qz-!512`UoN9CIxcnmxE)Vr@4B-p;VV_g#)3Z6&tZqy6YIA|Fe3wOh;gH+
zAAxEP)?1=-kb`6kT0_Mq@o0c{k~`^H<70WSYWDhzqt6QMF{@Hy1;~d`s;~b?b)s_x
z10T9-a!swXEk~6Q=-dJ#0KLZTh-;BCND&abcx7#-2E%B2Hq*?fLHwXb24~7c_szQn
z!Z;wd8x+Ql2n$ILLFfZ7w|MxoamQr%A%6{0U`RK6p?99Nc~UK+9Fp=o?>h;89Fpk)
zKHaK~fte=0Q($>H_8<qDt?Do2@uKR?eK%a(pLydi`38`~jbGBHpdgIj3U^jFO?+ek
zSA1Xb<t(8J5>OBVh_Xdp1gQKy!r-I3{N4)P%?`pYF#e#|Ewp`?b^^(`4|q%|@DJo=
z&9vy9-||MMl$S4|Tvv{WNW$)k^0VK#K~eogJ$b*rzK*{RuG3gVc<LVIOzSZYj@lUp
z*r6&lxDJ$+rBj9<YTd6zKRiE@MHG-|3v+JV+_FOkxL{xo4<4MN_yrJQ`-x$Y8bKO&
z3}dYkmMI;dF&mS`ZKbcRqrk$w343R#=S$O>6C^a=G;^)Vyt|E-d^r>0*-&n~NLxnE
zpy>sE36CuYIOivR<#X4y^@&kq6Gy|tL;G92ioBpYy0W<#N?L>M^H>d#rlo`u&3J{Q
zRt_XgAr}7n6K5>iwP1TXb_<>VM@+|--L1QMh57xdal<ih!Hi>G`XqQe`9^wf4`r_<
zm(m2aNz*NJ#EplvX9vHHLp#D18DYhsnY|NJad=YRq(azBpsPNuCk*GanyZ?YuP-ts
zYY-|sa34hp>igx32P|Q$c1uNZVdEiDc{ff%R3BhQxcDwkH`3$plRB+oDi7hzlVZjX
zx51pbiz;EX)Ic0q{RSOM$WX1d6R+Nq91bZ8%-SK&h4I(+sk85@HO5v9s4+2HjfDFk
z@;G`lWn9b+pF0?u1On#t??Ai-q%>NH7`HA>ChFHp2uTO^<GX+VE~XhHe^RKq;QOPy
zmIfj_IwHeb!W*@-bE%8je}wMxgA+8+8{8WQ6^G4Eefq-+GTJq?f^1?EpBP6lKqP;u
zE<a<pZ<#{+8Gd?zB7;F}0y|{ymkR~@wWY4h02HMzp|$g@QTfAJO(|s^{5N;$r!6_J
z)1)nv33Rn)R{wZx5_5@@F1u6f?4OzxR-Bu_QGH=t?}xxNHV{QN%Sqh!?iKsofQc_g
zjK_(DkULoqrZrZZkRF$9-rFUT$HFAp``oym@r|MkIL=R!=4wVwfWk%49qo+3qxo?K
zZ`KcvVuUdI@xVY*m&Wvt%?V^YFe6V4jC=E^1R~h|fJ8(W1IE&C10M<U(Gf+{NnPc}
zO~4RbpC<LE=RRr^9%^RfGthi@uPma^G$lx=`|RcHkmb-4@U*tuY^=&?YU7JFj(i|D
z%H;ShXPURnk;+sBZ#Qlr4Cmwq8xH=IjFDG(3s5}$jlbB6Ky1#y9KA9d_UfPkd<pW2
z?jmgNTqEpKYugyrb^3n5OenTt!`ow*o`2Rc`KL1Vp2+(;O!Q0Ha_yRn%;*qesl;?m
z<Bb*`#)vOUkl`g6F|aAZtM?BbjTfCboLmkm0d-D-O4A`xg&kt6l&?p=+!};EzNFwg
z*ydGcz|D>_r@e)64%A|Og|UhrhifYPxgPxq)I#nn%g>hkh9?bskw-o|*4^-v?~dN^
zQ)RqUmGjTVib;R;@<B*bQQe2gRu8u^DzEw=f~ygra1l;>uCu3Lt=5mK!g*XX%nc5F
zS-dbK<x@m!Y~3K_(tPGa+Hm?^9ZqplO|d-MAh>&uHNemgm~oJ0B3uO%8GZS^XZSg*
z`jU0f2SS7biF6p_A|_Dx(KmO++XV<`jzAT!41X|0Mwi4s{iV~X^uEw4m5aP?@#O9W
z4$3bqEGFF(<pGhBrto=^=jk~gj3Q!+glyk|_H7K9UEn(4Ub&=0v3tbk2G~_)!}r}(
zr7KFt$IgM!*$EjeMs5_V)#!mBf%d@o(gwn8P!DQUM~?=J5R0sAqyLhC3^4|?mZ3=l
zZ;z<ekZKatkj*aO!+fDjb%x*F0WBwd2u*SW*}7o>v^W1UH97djEiVaeLB~Z|T=!4T
ziYtg>8|uX3QZc+!N0EqFa&ztt5tmGrYc|1(`c@68bJ1Zj0ickQ9f<{P2QTO`+F@>_
zg4&8+l^RA%Vr!P--%&j%C8So%z!DA-OZu$h6-8Q7@B!<)QVHJVHw7q(25%q)cX%5d
zUn9gQa#T0E_uUu-zxF4ew1kc{$uki+nbq=7!rwz<LCwkT&dmYnOK^*@Q*xY*VfXuI
z{nGHH`JXNPMEl!kYEHa}ZyWXErWS79f=cAra^j<HsRL{d@sUDhVup&kwOyzRM4V-h
zk=t!5=1{4`Ax6&Zf~=9KKbL)>&tg?+7OoUGyLuD}zj|q47cvQg_kms!ae?}ArfJ%_
zozty@rStVzoF?yQSlVr=Z$RLgi0)3!FA85Jf?H}BQ)C2`LoA<o;Qqmy_<O5dnO9av
zaQZq3$_ucA$!)@Pj^laMf#Y_Xp`yg5K|^xEDl2OMFVJ|WJ4X}>L{s|XEcGNn@khPR
zpEET(Wkx)NPJMM6qG1?DU;N2DBG>0@Jtkhr5ZE<>?6F5r^EAi>fKcy!Ek@4^_%T6)
zfEU5yiD=Y_Sa8X+YtWNBa3)grefm4V{V+<dQ)~;SJ729Ek(&4KzRE&z>U`r8-e0Wz
zzgrWJ7$J<y=1Qm1H3W;3UA0O=F^ut?dcQKF)t!fB7KSBdTD7K`@a^yMncm5Df%)WG
zBpTInw^+*2)(!6SmJ~R|mID>E+@Yl^EQwnN)7+$B3wAHMYGM7FIsEN^^lHB+0XW`H
zo$(FE9DJ!m%pXsE=Yx8@GTtl@&@|SRdQp5dwuo78ajxKa;4ct|yWv@Nc3PL(eqs1o
zF-}D>Ls*PL$qc~BEKm;+W}LhbkB{iui=~2wUDja|JYR#3@<)SR7Y!@^Mq@Qna!Pm2
zpwR=Zu^(};5pIEGUs-#*NOwHwiU@&EVb=J-54Ul6Rep`O7@?$q1hTA%@Cl;!MG`YI
ziUvUwE3aB$%ImuBB;IGW6b!4m%c%@qX6^ojlkyQf7qw6J*em<{*4)QfSc5JYOCcx>
zx=*)`LU3IFwc(Ufv_Ke-5O?gLdfkX#bEaRFQa+#7^5DINrtvE0<o90KQmjaiOTZtg
zg7oVDqu7?Y6<RS{sq|hq&+r(Dsic2=2lp_n*~fHcilpI6u2@L6RaNla+wpaq4Ld(c
z0AGw$rui*i2nhpO^z)rv80!|SAoQ5&Hr_eh;<q!Ayz_!bo;B=U%deKq!aX7`(g}eK
zRO0ir>fRlBmi&b^Yu2JXeHZG(`|z}cBWe$ujd18rofCrdX~Lq%!fLH#I05+#k`?B)
z6Qt&CWJ;!x!^GPcX=DCih<4>f)jkQ#-!M|q6XJ*qaG%ibu`00p;7oQ5MJwaRKAn%f
z_;$pNv2|Ym)wy~EpI!N9)rw0F6*vjMn_s+YQ<n9zdWBs9)0U9oIRfRXYeE<yBxUis
zd<MSQhhvlL2XThN#}0py<)|c&#PvlX6ifY{8(B?Dn>Mc~672Wp=Q7bTnPRvhl+wTc
zZEY;$rGM=PyxIC9c$4{%E&v}wHtH<}W$z8WAEJbk4MsA^lL@^tpWE{eM$B<?8bsu}
z@Nm<iL-aGC4MwH(!?Cwt5_z_EC_xXW=8BELy+PXcSsI*zK_*RtWWT9cY2k_59E{I2
zR>kqG3*ju)wy5=L(G&CPs!~dF6BA<<ccDjO_i^~zr5-<7d+Cd)fWby&HY!fHr&{QS
zjvVlLNURiXahcvK-RX_T>TMYX|CfmwJyYzV1RnE#m#)jmjk5~DEDT$9luLlWlnYUS
z&g;d5w=R56hLGCq>73pjz8sD=d%U?f!`JVZU#q;S{5G{!XbAl!D=SWemuQffzaEIv
z0m(=%_>HQ-sm5(0d`4G?F0qTZUQdk%6&lDy_3?La)R@=no^2>7MEx`f5tu?bG>=RJ
zJMsB!*2n@iZIjA;Dy7{e;*zdDb4+zc);{An{0m>to()f*39!Qt+fO|I*cKPL1Dlxl
zMRpi95k0#luC|MIP0_mgrV{nV-G{YstgpNB^cYlp&XnJ#U@EwDO+%IEchhQ+!j=v*
zqwZ@O!%^-SMQfq%VW-n-t_Dt+x9&2AWVtsU?|%)LKX<hTutYnH)V^pXa^$O6)Si1g
zZ_h`QdEpL#P=7Zj;12&%Rzd_w^fn?Oc)^6ZuxfEb|BRrTn%h@FVAZ7f;CcA0BH$SI
z3@Dl9Bpse%+XxwboTS<7PW<jUHr1L6f2c^uVeCZPE}{SKoR<s|e<3+DKZ(e(Vfg*0
zw0Et{hfrAX%cc;YyrElLyZ)NzQXe{lNix^KcOK31^QtzVjggTg#m9<GB&B8QD!%Q$
z^&OV+^;<+Z-2pLw&fUZpk=GynJ8i|Jd1w*OfvoKLs!&?cF+S+Dl+6K4=>?p%DFeKw
z4nu@YBD0XF>gH|lVE4C1U3-lI()&~$XBq66{xb-Z$7sRr_Kn@(W-1V`dIEvbb3xXJ
z4XT62h_sZc2YD2+Ne-`h&B`}}69?cJc6_dMIK`se{yv=LHoIGN4Y4=>sol&V6Kubm
z0cMV5csuXSA&8KWQZFBR5}l$(#Js0snUh`ZZxmD*m&yJ=0G&W$zk6Bk&!6xA5^?|j
z_i5j}3I%5=1vr8X)OlVw_l)(k<TapO|Np%H%t7L8(p;&ZN;gOp5WDpc;6DZS;y8B&
zDP~)VhZ@m2)`jxx^1nk`O8C^fo+|ZB4}mHRyxku|AUHQ1qGh+rr2m!8z4LE3IhbD`
z6hTK;RvxZ~Vw7%wWj{np6J+~gue&;OqxU}_iN?1_D9GaB;nCYp_~`S`doJN%I2a7J
zC)pC|@C)pAcPx8OlDRSXH&bcGpf_kL*Ep!%%}RcF`!{>qPW46~h!@d`@nL!RFA*nk
zI9mn&sau3N$rVL|<W%sf+q(SkIG}}@!>KaW$5f(L`j5ehn`357OtWBJYsKB8Y99;C
zEiWw%2k&pBnKEi|;9PO*)+dD%e(d*qPWbg$3ZfLkG`sfe?pjEoQwv2gSf5{7b`uBA
z))VJn-i@Qd7A?>a8*&3?ihUq~7A@&>y2|jMKn|KCUo*7>Xl|~gqbMjqUH*4*^pr_|
z=VF*VWXY}11X(y;sb`P6C9U)9zTMe5($#c}<@I8<szm$M?(N~bA$4b6m9`%AN1IqP
zdwZqTA^i019>VnD=STg|A6c1N+AhtVVryZ3qIR`9R!eYVw&KxZV!#y>(3!TIh2<6&
zC!M@C1R~(Sd}qtY1OzX-70c=ua>kMw^(zUe$^XtX-vAw);$|RRpQ0YcGB@KHjwZ1-
z6MTs$_R(rILiplzuv~l+>tIwx+hb5VN$%=m$NJ7Gn^+%)?Xa($!x6HFFu6y+hB362
zWwE@pJt!vYh!+3AI2(E+_hDMJxYR|&G2m%D(3@VSD3&w+Zm%rEe>_R3%(xJs<w*4q
zylNsJDyhT&jwz+RCOVE_0%V|@a)KyVCyu>sg1jlStQMeTG(rM?TAO)_+PkZq>Z&F#
z@#}RDT*UBB_i_J`6TUt*yJ5X!IaqX}_t$>ZkVhKC;$Uk6zD`|6KDIv2&{j8EObQ$i
zr??B4!tV+x1%%rbUcLrHniuk)xHiPCy@KmP)m5qyG>BJR{nX@tC#wgq3M}s{p<zx8
zVmvx@9h>6Gj|rqD{%G8?2bNJ9A(@8U-d-wbE@jmay<*-4EUolTj{9#X6}T4;2Je1k
z6$D9nSUmXn$H#m9-6SGbLEL1)ycXl%V0Ly^zag%y7%9{7p}6YCG6gY{XUw8B)>Riz
zccKJM7+Fu#6G)?~DD_kY>T;Bh3C5uyBv?u;YuEn*)_(<@xy$IL?M?5=0x5+9@(++a
z_;LJ)UE-r6z|A69UkQjxWo&qLjp`^_i~pTyKm5`d_<)g7h3u#wBqLQf`l%dmEG0lS
ze`lvJu+6k}?_PJsRs_Af>!pC)>Ybd9oagIXC#O0Wth2qLL-w(TJKcqaLDB6#`0=-&
zzI@a}M%;EW5f1eZ5AJqdp&N;a67j$UF;JYO>IOhc${`5{k}pD0pr;BLxl937qba;g
z^{NiP0VK>yQksl*{V#a^s(zJ>Oy$>v1OXBMSw{!t3M~Jb!%HGqr99P<2Z<1wXi#1L
zcc}-j#@G!A783?li}clr9uE(qiRIy~B_us#p?<aaxG(IA@Rv64ZEkXii`7;0-6)0!
z>koanr~V)*$lPFVediFH!woloG+%=_EQXc;eDMBG_rdAo-;R!U_rJOG?#={kU_JG3
z>vE_0EdN1bmd+qAKIba5C90^F<mh>hsu)`3G#X_y9>k=F0?SGaNFj(RNLG_>*MH;I
zuk6eAv*cBurmriMfS8ZsdcvRM_zypcfd2#&0ZLBwLt6<499)b4og_+=@;-+4_69=0
zRC9S$8<dS~76nStJ1@3(y1(@W*$m6;gL@m5nKr8JQKH_)-FM68D<{7_lF_p4mbXq0
z*~S{)+j$&1L{rwgw-q~B8m=#F1uP5?+yp@04?K>zAT7jJ5gp4tkcE;IDmRf3#WXX#
zMjK$-n6#*if%Dev!YGn;2$%~DYsO{Ppk4n9Tz^N4ABSo4evAYJ{$tDE>@tnzzw?An
zNEgbrz)<0`dQJX!-rE6CJ5|ZRWaXc!o<<RTsdnK<X@L~3o3x^}_>SHZ9Lid{x1k>V
zMe3unVfVCBi1j7sqJ$i;Ibm3A?fe)!e0$`XpU7A9=3f`Y<w1+Y4(vwM2DCsd2h4J1
zN6%1JZ@TUJZ_fJlcXGUnOx?>BgMf(tM4HJFQE{^3SMy&CJ$xOl49Nj}k5;6ZE>zUz
ze~0eC^H>thqsl@xm>E?q%9`prgkE-<{xr&5+i;`%aX;ax{O<I*&7D<dC6SW$u#(<e
z>zg0MS1k^fovS3|y<})?ErrzSA^TW!#YA2E$R&iI-1e{^3sX1~e)K4xV5Z8MDT`uB
z6;(<6t@5ifiipM{^%LXjiDA`LRp_4Lh!`j@HBc7QsM4v1s;hP?U<T*HcKt7M{rF)p
ze=<1y=u`BPUR@;gkTOwlCI4|ADU?CkfpFnw$&zG40wdJpf0xS-)6)%kI~3LiBUBQI
zv4u+MiO>;ay6P!PNO5R3vNr!Z>zT!}D3ZO`;~U$HqPvavV^C~uFC84rZ_US4v2%Ku
zoayWHZX#hVknAn3xMD%#9Y_i;5~+wn^e6*p1Ck4&%2Whf!E#CjKza()btjQbDu<a2
zbx}!!G7MZb+nJf^#3WFALyjS6*MH^uW9oX=ulZ-EwQ{&Ad&hea5W{~;WM1?u_z&78
zn<%7vadBP#cX@AUju8kvHwv(S$R=bGfLYLuSBARW80>s}jD(#1@mC=OhWeURC95F}
z0%DQgthKO^UVF716s7yla5!8TEVygK;*7gi*e^!4FdOH5ri4dAf@oO`qmUl}m+=u6
zA}rf}^tz=u^#cntEUX3#F-Vo6q~ROr3Z%>c2#>Vl<eRlU-})El^7WU)HE#Vgi;Kj~
z|NlDc$NUkZb||#qo0qQ{uP(Zqfgm6m|G~2;#Z~-AZQuzkBmfLplm8vFwPksqIn)V@
z#n#eFM@}G51w|Ox#(EF$c29oX>qqRJ{qe_>?kXZkOMrk}j=7~EAWL)Z`tZheb#A^0
z8v_JbyQ2f6@GswfD7O0}%D22jQgQ^vF0Lw}s!(8JINOH+QIku1vN4(R2J}g7z^CGr
zB>G(IzulY3)*sQh^@pW?dh!4N=UBfIlrS@4?7OnA|1|I7P1(ba0+RDzzPWSj3jP}x
zQk71#5$f{4qYy=4>iHyzQm6uj7#g&>NFs@%ZhCxjr`Y-U@$uuGv%mlN<FB*TvW8~_
zJ4g_an*l2z*SULT!7)pA&iTlhgWP9_1mxLzwG4P^TVnMmK3l(=PnR#wZ{YfafYiin
zmVr2?zm6b(!3mx|J%#29$i@685WAHBU|3YA3`oPjnLyR$f1K#>z5OM~tSCUzh=tWW
zlV<f+N>bKm`zwQcPo8Z46%^!)v?i=6{?w*GKwL)wKj(qJ9KnFDt^o+h{|Q#~KjQZC
z%#Fcytseoo7GN!5&&Z)}F@+Y$c>eQd-{?~Q^VG->Rl)bFmvMMK{&%B+jYjFgtcm7x
z(vLc^vOwER5mRIIlG#<cYlE{VXJ>!?@nk<Yz?enz1?2q4u?w6ZI6gSrlc50u@*?o*
z4HA%R#-|9#HG!i75&7jp>p~}Juz+03e~{>9{AanH66z+xrF&Y|<bMf>(LKdIJ5!8G
z-l!5PNpXrXKjwqQmfLIeqd_*#f)VoM$-_}K);&c6Vo&heH<+aN5gA8jt{|;|v;y+N
z1;m_0=5{5(%@-omu!S|2{}h4h#`7Nri|9LL@zI`8LZMK<&%powY5qq*sD~&pb5$d5
z1&#5k#@I0e^3F8@ql(g|-pW~crO7IbO(jZA#TM3h9|)HPr5{xSsKo9_a~ufZ>df4}
zxzBX*cIwTxn8o{|Vye+ifTEPBoRnf9)mB>;m2zxHDXZrC-+Vn^e|$7>{cpZ$S0g;{
z`qd=6rOsUv&SC-kmtB$O3dlJAgOX*5jORbv&=35M2*LcuPyWpO?=Am3qA7w|g#h^y
zDpNWDQOi_?G)^2VGeodlm^L=o+N!OIwkoUH0>aA^xqWV~e{k@A3eL{AXaG7AA1R7C
zhQ(iYOpxXZ$kqH8f3D!a3qICkV4xXBCeW9f{O>e5I3D{)P>Iz!{f^nDvN~#fLYfpY
z`oaKH2i#6%;VenQH5FS}4j)La9+D5&qQ!)uBYTFon}A$68Z01n`A;dRm3|Nt^@5dS
zp7r?Osn|?RX=dzEyOcr?tp8j;c6imMzN%`zEROk`&KWn=qU{t|AUc*J@c>*rZ>^6O
zlZDRt{VibZ?R1{ExdKw3|HQUXJT$FhL)B`;h;{kj!S&QMi_z?@tKK?QsHbWX3{PKa
zS@_;5Q&5$wGUJ$)s#q19Eg%w)GL#1$`H=n5njbAD52X`^O)R^SWzb{+sn373P^NKr
zK;3%6@@i3!|D87qW!>;<?lb2+4HQQ!m^j5$;ZFr|L={m!JD~NIcoshu_dp~be0Ktv
z)mA`jezcf8bk5yPw|?}e43OpuNPYe@OpjYYS*DJt+_tOB|4zDta4C%t8ecg1%0a~J
zsMg)VuxKXpR?@oQQ=DYVQT?j3<_pM3L~{A4_5oV^qs2s`qw{23Dl`_z6gbiA^PfFk
zYb*K+Mq}VyHLuD4?w0kkGY1^?l+cet^b-?=wb}I$FyR1FF(4xsAw*IOnUYgj9Yrz$
ziD=#DEhZM)f3^DIB23s^0eNoz^A}znCqqqnSc0dMy8Q1(rD}nRfDB?^c`J5?$*GU9
zDMTz7M{ydYvCvlqPiY~^5SfmPgq+;X)FZ&PXfc^c7t=dHhPHE{xdQT^@E?b`R7MeO
zoBGDTqO6+y@2Y?;G{&+9jrwE`dN4YU8d@PROo`hdrbqL~!Afm&<S12Xwt#eu0b(&*
zp>=??m{@f94iOZ@xIm`D0;$J;wn~iBtLcb~hSaFb{|<X4z^E3UdPIpVGY{kJL7%Wd
z6rqVd#jFSoRR>sG1{cs&_(1p<1!g<#0jw4i58m?LnKe!jNk_wv@z&?R7{dQ>HNP4F
zT{5y%m;ar&fd27NFl{Os<AV$~*T~CsL<w9b+5JZ=cE}A0#JI`Fc+EF}Jf$Di>#y1q
zSS=<Q9bT?@!OPvJ;Z-Je_>ZzoZ(wo?U}w~-F8?DSnHhv7!~{*3tb{5IP?eE~mZ2*V
z%o}sdjFs=~VZ1c|9tc+mjeO`8Sgi-7#bje9;KJJ=ypp%^0#cLztd^(^3`~X*8}(S1
z|DC75T=rOuF&q@WoVj~Uf|k-Ray3zURD@rSo?+#oO-!)yuQI_0;+zqXfSL9PZ;J`X
zY|;;2X_CIQ*-gV1R(<}1M0s_V$JzceW8l+3d+PGPQ@`anbQ@B(A4OQ3`mq&J62V@D
zu{H7*lGr%<%j75)vN**y(&C06<K-nLdL;dj`O&)2TTC`OGC?BPz|wzmgEU+~YVscz
z%*+3<cmB$4!!Q`<-~m@>^_{19$lU8A<r%vB&aYlc`KX^EwATS1A_`w(i+?}}?8W#B
zfux;NR-gNxkoYtz>;D^a=p|6_yDpH35tBMdv)E#WOfp8evriTn8j<P6FI{9yi1-eW
z1L-8<H=%d>s7>gF{X=KLI|gAT?-5pECH)`2Je@*HbwC6oD#-c&hSpWt#_dO6FFB$a
zLt_w?kQDYB;GQC1CM6p>t*X>}4saIMx{4S6U<KCnu`2>8>>c{Lk+2tJ!SF|!Wc^>{
z2MYLYn)ITc_5Te<62u4u5*XXX;4Jebs1|Ou4tDFrB5{c67(^d$6lM!0F*Jd!aQx8|
zAhnCIuz#F8gOCK_K&&G~AZh>SD1)-(LYLo3k@f#gMABhj;|!&qrBrge>ScxX2m|vx
z3)(EAK?aKgf-cW9Ql_E0>oEvK8N~&S0OU0BM{Pqd41n_l9$~Qr>lhJ8-v3E@Mz6+;
zFSwn1N&nw^XUxJ&l?YN?q*+9}h_lRMSQTX<7g9FrWnS!ew^_=Z(y2Ol4&+2ZnUDqR
z7lamp6m}2AA1i|Zj-eiwK+^t?fq;iS^poW<wU};@^#9E|v)JYsM$tgDPO8Kf*t~_g
zwPId^imw`F%rs<36itl>ISVTugLOL9L0E-Bz*oCJhad+zjrS$~&lU+Bwn!(Wpw;BP
zeAfTBxs0Vt2{4{{OfV)4vn|F*N~#PZn~H!rN|cC67Yx!;E{>-3v^w}BEPaqRSTg8u
zl>;dZ03KmYh<gc7Lq{Na|0npQN#q>;LL*R4&i^-Wwn8dNo1qCM;wRY|IZFB?xf--)
zTgzY}TIRZl)=N_#|0`|vIf|!XRT8~00?xwQd3zofA;{1KlJ<W_4?Z}g*ZqIoallFc
z-+FQeVYEsJ&EX&xLyl%|TCAJ?u}trhh;bM5#CUi6v6JYWgB4Tgok1?GP}nohE8G`L
zaUk!=8wp?H|B$g|C_5-{{5{7Wh$ZX)8-|*hN&%*J6}^F`%GNp#SwxKnbYXMsNnpif
z)k>8nwT??5L?D|rycK~IhQWmZWXAJW5O5llK=S^N@Wp715G6%o%KHDd$%fl1AA!tf
zH9$1CH$oiN*@8I$AHqa-#V~60j7lJ<c$gyJBvt!B3PS(_fk7HU$k>M|=KUW%kz+jm
zP7hiC-~Myo*l2OzIak1);{BC937Ws&&1mF4>h)AO_9Lw4Z6Gb~BAnkYMIeQJ<8l`M
z9fAx@Ag}O$h-;+UX$^H+vi`qOfuWpv)X}D*=1acCHbID?EgD1z%}}7rvlw!W8Ga+-
zi4tja7k^xeKngp@`Qo+`LLjZD(Fb0ImGpn{q>(82gA$!cXZ?SBA}O=&IHN!<0?oie
zyc4y?03=dMR}*H$>w10v9=N^MkjLXOy?wlYY;nC#zn@=dg~FckDO@LfY_a_PPalKF
z`|I#|fBznMTz@A0A1{gk<^gJA!%5cvH#U*WUMCh=Cm3mv1f&7I(PZ6Hcm-)QsuH4;
zVCS#1yIy~N58UoARd=6$=8MPeetSkM6!wgp@OygQ=bvZvzyFthtZu))39diW{*M|*
z6B_+oiAB8U&HDdlxc-3WJ|+kUaO0@j;xs6Spa@U_F<*3uWxPDV+MeY8wm!nDWxR!b
zV}1@RY_}2~WhZ*h|3O09xovo55d5<gWc`1O;SS-0+6*1Q?+!#N##wPFRq9-#c3l9b
z+Q6%@$f39G8s1JIwGX7QbBI48gXjZrgjHBM|3^DOz`J!hY1*>>zxgmB@KiJ%z1%wL
zh)P|Lr$U-z8-2Exj*&#?qob5!$IKu_AcZjifrQgc4zUwG?f*g@>frKExvc+hhDnSC
z5SQMW1_Mxva^AOkEw&g>wU!FpE1;Coc9><njy&`Tt9GInhQQ@~VJpbfGAwr#!@vZR
z@qhFq=io&2tC6~I*8exmGDDLinLbkeG&_0e2&_WC%!S1aRepL@O>L2t?NAZOANI}|
zG>RY!!>>3*Fg6PZ21F21Jc$Wc2!b{z*w~0@BP(1Xg2IJEFro;G)ma!tY?30Nh>C?4
zR<RHSL50&oNSQ{ijFp90y1RLEpYPVoU9u{B>-@Rg&dt4<d2=NHpEqx3@~eWN9zF-+
zG3qEsu=nvg{15*VJv;x|N~0i#!gY|<CoHn^zv!5FNONke_H`xFOb!?itqGPmuU5u=
zY#XoBABP>Pr~<O)HgpvcFCZQx4g@59qI;qt|G`lv{rC^`<v$44a<*2`h?40sEB_14
zTs1>N`hb)<F&DNNr2`bxoOg|%>A9S}7B*ZX=OeQz^id{K(hK_tZ3t5K0^%|1D91m?
z?qmfGLC}z*M<4_EkLv#XhcOI~1Q=-|&>-l^$p51JkMDYMMdPi4WjZ7b?<uSMX<w*9
z1iM0L$GKmv2PeC}(VEXPO9WD1$gO~s`XoVO`S1ebQ50wZLIeW3Km7%dK-S_vtzL`&
zVD<Et5xTN%X^@fsg@LRCJ;4t^!$|C)BX~t;xTH48m4SN=(UsV2dP=Hiu}X<@1_7ys
ztsu7of`}OXh`!hc;_t%p7<I$~Qdae_Ns#~MKN7CNf9OV<|F9#}pc3JLc=@xQM@Ie^
zw8#zS3O2GJ^65?WFkPgP+0zS3=&Tu%s00_acqJ5Ro=xqlSJBR}52QAI=Hat?t_6fm
zguVMf#(V_gQ3#Ytf~1q^(UTN80vXJI$>sR{^SAr)9}lAtbjG{ntTE5Z|H6pQb@wil
z(;lt%(J>WVkqLwj_n0{IH#rgfXly!gU8H$4Dl!Xam>~x;6<&M$xwRnq6_8T$&>{j-
zN(98;h2>EUlw*(sDH#PRN#T!kUyJ{=uF<R>sb1~Ne`ZG>YdlmrD=e|f%Kw5RbYi@t
zijIt@P80BfA_}Lli(V|{*@%q7{h9FQ%#_G%a6>KZ02};=QahW|FW<)TM~(%AEJ$wz
z;#RQyQ6?TEk4QcGBtazpj!|3z8Nh$~e7?FcIZ-{=hyPMh1ql`SUrE}P;qk2eFQ^!L
z!?S5?+{YO@bS)9Q_<{F`t3L3U;p2Luup7bDY%3IziSQh65XNmxKxV^<ZI9m^tc&DX
zKtx;skA6hoiG298usn(ZmaxX$RuCXDN`>D@*q{HB%hl%OWW9R3AOG3hH}xc=Q3p6%
z`8O;7i))7m7%^h(i9YE|6paqC*OBlvX^X1a*u&W)NQhx0oRU5BBC-%Px*qDt8_a<$
zOgDGVjlY<V={~;#!u==0MvyVZs(Sbwh{wny{xMbsK|siY6n!7aApVQ1R6sWM;XiGo
zFO}vKq_WlNv!$}~za(v`VY4FL(iPzZ8itRINJG5Q$+>R0Ady<sl6o8~$h-NnNIg8K
zi*rUrH?LDbc2>js>9_ZuH6=oh1q3CrDG&k>FCZSHkFq(-Bo%>_3ce3yApa48B=wg6
zu!4CFvnuQJBDIW_k^e<I><)q)G7b@ia{)J*ECC5Kab6;DYD=_*{^(1Et9Tu@7G(e2
zyI4WGF$f><dUvAN!U<`NKWx<`L5>B4o8Xa<NIyt{_$0c==)>K{%NkZnJ_;-#1Nkq0
zsDLEzrTNcBD{!l+r0mEYUCG4%k{A&fIC{qfk5D(J%R-zsvogu}dgTRO5Od)vp1huE
z9)7pVll9<AQqLsTyOD4ztnS=$XZ&(E{gGn<k)E@7Q4sxQ`v(GY<ysHU?sJ$F50C8V
zJ;@|`kV7y0PV~Y2M+BnvmjBW_{1T80fz@rgL%Yw)|6-FkSfe-zTyvi3%|s!o^bWfj
zjlSZmI)vA5GFsONXK&2SCrr6BJgX);<T}s7x;|Z#ZIACgtBOO81;iZ(q`yn-BV;4t
zUl)*<KTcW998?_MA>do5y%eFnQW6i3b%7ju{FPq8Di!)P-ogBbfT(SX|9G<Z|0;PC
zfKWw1l9m5O{U;u>2KJaPI^#XYGE>1%`eG{X9aqb=(M7!^=V479pPx&(viZo3f!D(d
zNG-fBa%cR*vl?~z6%hXVDn%fR{!h=s+N%Nrx&pFW9KJ6tE-tm(?d9m&{w5wC8{0@|
z|0Rf&r0@~Q5d4RLz_y0}FpP_qvXLiOi6STmXXJk&hC$$n99#n%O<;%a5n7Qi$JoYP
z1W8s08N4S?e}ASaV`CCyHfSJ>Nh<_oVDel}-@4ax_f>8M1PO8CK@vn4u>SsSych5G
z3P|hADh`jS$>j2rrOx+n3BI>qEq27iV|bKN5M99nLKt350U3_}5D+rl@E@|^x-uDc
ziu7y}4%zr$evJgo`wE7$p5r!CM(^-~9U-O)A;cN;A(&g3XM&)$O&KdWTaoC82xQRC
z!3mN1@u#iprar#{;^ZTxAKZoY_m{AC&GZV$4;7G#TfK^+j+O77_Sdgpm)k2VE0LUx
ziHFCAj&o1#B-CGm!bTuN@t+eAj12#AcNBpOX6b``&2ICo{4Z=2w`mphi?LWxGvkoc
zM<^JW5QI1iUzji>xeJqS+`QJfF*m2o)V$f~s^M^VVb!jMHIdVA$6thXvB<4}2sse>
zbp?xqO#Z<}!X2$sy=Vo&`{?V8E?+Ia>U7#4KQ4Eo%h!)f(evUmPN775_a2pz#^l~z
z;_>H!eykp4Voy`l*rTWs$Z-6JfFLUHAH=VPq>MCC$JrlrpOyaw>c^Dgs-3DGF%Ct7
zC0s<Nh%(d?^+IHDhK~*<QrWo@RHx8`@KV>2HI}e2pRP$9etZb7OA5Ia5OXFL+dvX*
zECShj;rSthPY(tKZb3>we!Nd`Y?W1`_#@Jfj!OHt<&W)HL8J$J4h9hp?(0Lrdn=Xd
zI+(mtsr<I1iAv>|48Vy>WkNQB+QDGER}k>0b07*9vGgau*g24)_zwYr?cqN)<BQk?
zVQ~Gi<^{6xzo1I4l-_*Etk55trKCbD0V1buwTyG9rvo$4o`14;KB0|NaU6e#9)wl`
zk%EOmkYJbz<46t*L30^NFTIpyy-0)}WTiq&5w@a6D$9cPV0M)~*dF$<sFfb<p?YXt
z1Yuz-HiANX%SHC62l24%(cgRXZNB+sk~F)~lFjZnn`GwwA8~)5{k`9NFPEy^`nOQK
zyu^cv`vW9iUa?-s<n7P9xgVnpkk&R3N`=rL6d*r1d}w|9L;t_s)z?y5UAIb5+}vtP
z^!$i%k3SpD!=tS~wf9lZLOo1yC^=?e<)opm?c}rBz?`BWo6Vbnr7LFV%oF|Ra{QR)
zGTwFvMBd}Q3Tq(yM}R0FL|@R2Kz(KIk<Zu)E%%W2->6fw=t}TSIxtgllDtfMSM~5%
z9EUz|n4?t4gD^I<|K+vp#>QsrG^<O4{37A=YuOdC>bIuE{aCM?v_=;o6THxiupV|9
z@6+Ii*022sQBDKo{;E~oO<-;9H;<alrY1;pe}78bUXkay&*)JFNU<kC3bxxP8VVpS
z=@1D1Cmio7tW)hDgXjtuc<W_U_BOSDBE9#5KE<&1-`E>nhdq-E5PCozT;qZRVoj*c
zMbda-CK8b3)ak5Tu7!q%X`v{Q5GMj89XZdgJuh`$+>oP7iruXH2m?f)VggMujQ+r@
zu-<;9tNPDk)m}@>0VFh{qphQ(Mne<iZsSP1AhDR<;;b0{f?VVuRe;QT;y*nB2=pHV
zggZed^iGhm-v=^~{R2Q;n$E$k@)Ouhdqjjn4dP=c`)}wtu@#p`$e<fu@fdm4H0P<<
zD*;KmDu+pgYt<R~M=~v)tJY%Eg2+PkLXy=3ATO=B(8u(~3$pb*8=I~gU4X!Q*E<QV
zhd=p{N14C@c`z5G*aaZ>uZesc@;KhxZ%EAJNYp~cRAc{W??@Y1@5Fis{-X*IW2Da~
z0Qv6)esC2Q;URy<d>_aF_KyJ3TkJ>~+F`Ee)s_>@GnLDAhqeEP;9@iUO7c`Mtd8r{
zc5<D}ip)WK<c>N~l7!`8QTW2O_3OmNTJ=)TWxVmSU3fLUIlXyx<{LYY)m@_t5Jo}t
zBCLsrje)$<UElT(I+Gie1<0&*HY`A<%weOQAac9Ew-+g!U4RKjD(-R$Ak5b#bi%*@
ziCBaQJpjV8>`~wLsiFbGr_hD<ElaSY{zY<QdvXk8AR?g$3Bm(;$94*9F#D%tAj+t+
z9O!~Kvd9;*0oN!yto=7S5YLJ_oWm4Ag4AS5&f=+|bQU2(z(?G6B93knYhPQrv0$i$
z+WMug0Ew%$#QT_D`sDY1!Sm4t2t5!uARq`g5>B20Kq}n;a{vDQ)ej}JdAzsROpvj^
z4}w^~WPfk#UjKigM|l?*3BnVAl#L&hgd?=>a*q;Ba4We0kf=~7<N%;TAyfd#ows$%
zm5BX$Nn=F-gcYS-o0YSLY%OUNnL*M>az88GIilKLlh*tsS*}Zx>7!CsZi}-(noX{h
z+n>Xip>aW)eTbxAq_BvG1UBlMaa8*h7S{2S9*@BfN)2HD01&c8Es5frd=TNoO2?{o
ztbSPgPk<mr4W8-DJ1NewF%5SaRLZD8x(eg)XB#t;qM+Mqhw#aqbhY$mHJN>9D5QEp
ze3IuE;;>$?udLMT@r~!>W$SUw|2DOG=l0BZeGlFpU4YO7NtQGw(kGex{{V?!>rRmM
z1s4L@Y8;vrK^l8|?Lm-=je+Dk0}4<fN&ph%kx-5j%UV<=L?;Ej*#sb#BYq1}g?4~c
zN?i4&`^y&q5LP^C*UzC)Y1T0)&`ZaBxiTUt6qk`xami5FUJ0E9k{qZM>5cdBrabne
zij*owkL0`=L+PVT+%&C@fsFHSq7PvI2oRcCWN4>Anj#bEb`T5gn@cjZ;ltT~gLLF@
zY)D{+@@-UW3Zg35f-lV&^*kJYrrQZD?ka;scXKIQtyXJl2K{oix?EdX6M%$qy}q{W
z@L}$3PQCcaH$QF5O+Sq;Kqgucp)iF7oq-4P-fP`;V7<P-j<*_jjV1^HVw0iBbN}S_
znUX7ITM80@NQyGFWm_k3K0vX<@_MHMq~bsnxNdVD{gpZZ!j3(UL&Bgj054JiVU<$U
z4iHvy#vT9xY%tioEl>_zVhn(^`Yr1Rbw$|dxDo_ED8-)xQOkJgh>s^g2C{$jKy=6g
zcPh$F8YIFkMDK;T8qWS3)<S-&HB?5C3_I_bnj$?}n`F~o5YiIYLY*eY+l~$OgzA!-
zlA5~n+v}!Nx8`r%kz?CG-$v1%8d-o$&;x<!ft+CsWVYs&<yG_K+rF2}$!+1~1Ryy2
z3Iw^U0RrKl*j_$|1baUxH@>|HEkH0M6qc-2h84}9T!gT+B}vJNchL_ZC|b5%g`Q17
ze?=etX@H34q}9aVvF(@9Y$aQY&B;g<Kv1yYG9urXx@F(@qolctF_MQyf|J5|ECSAX
zw!35`9>$vWeCs2jO6U?I6WIqXwKqB^7h^b!rS}oq5D3_Df{rm>g*88z{R2SgROr(a
z@kb+se4({Riuz@bVeP*Gr1-_$77W-RbGtcF{9=oINPP2m+%o`<dJdA29U(u1%O9&X
zE3wwj(U>=#n%cN!Hh=m2_Z=@br)g9HLJy?f1wjPl>;Up<`2-#IwJdM>Sgv_*STHvQ
zAcrVOA7t`)Urk}bpwf1St*gi@&CSASwz4E4M>{{4K%n3<9MVn$NTIde#7~OE?62Gj
z5Zp$k_DQ9RyT~zwqX2?@6W9zEU{&S?EQ}|NV#GQ45Q&!*!8fvG$)QM4iBzLwx!kMQ
zA}p@N8tb#L2C;tt2<)GZ3b&NOhn^L}t6LB{DKV`5H*7z(%$RTG98r8$I#NO?cow)N
z0y+M!F?Lc>b0|Z^LLV(HEnQwQCVpvJP|=}Vx2AuapWKj*gM;iG9ASVMu7YnN<jhxL
z?aHYo%h~E5)j#Bqcd#rk`+4Bqu+TW(+B!l(`XGNE?`>`UW0Z1pUJ}sIh7gO3!WIi6
zxFj&Qu*#97a~og2KS0ogK~ELQ)~#uPU_n>0RmNk9TrP*PD1ek(<M0$f=8%w-E)g4|
zic7!>EBn;Ki#Qoifs55F9y$71*Nbj+{1#(PJ8>JKCWsUm=ifvh$o_F32t?4(q%$i6
zGn;{_Wd+WbQN!AQlU!sJqS6iE3!!nf6~!g#1F$$)rn4EnEuAIx+F*WY*A4})SL?Ox
z>U$fV22|qaW^?oQ%+2l9su@V53y>B@^fIio1juAXT)pDCASj+Y7n}=<@==uUS}pig
za_<R18viJQ?B6wi$qd$B`ft2nz%0JCofVZ8(z-hP>0%QB<U#>H91uXD4?tYe04lkR
zGT~!_PJjfwVhOI~$_D2N5Y3lR0R*@}$K_;<T)`Zox=EIwl?&2%*ySN&{HK6YjXvTh
zQl8?0SQkX|W87mP1KGb5fau5sS)s!NWD$Il43a2ScsToSR6W-hu%MYl!M$Mr@Hphn
z0im-DSf??fX_KO#Mg=d`*GHEwEj?BJB4t09?%cWh%kMY0*MFYbDVozY$^gM>qzEOd
zDJ-Wm0LaU)%BJ(|!5?z|ZfUi&`iH#bC28xS{TtA5b6A=nht>gU8cMIdij2{7`834@
zNRXvmO6=?})E^+Bt{XUDg+xYAfD{x!LI&Ok1c+oQ`Dlv(!LeXaSAgUb2Zw5}FqT1(
zcK-v*c&W$XH_=bGe+;6t45f}I0WI)$_em;)(7KIb?Y}{)%3xD+t$SrQg!N!ZaadH{
z>4%{|g`v2rEQdsRG_0YPDztQA*=TKC{d#6b_6@H8G$Z<{TEAgV(I^81>I|Y!+COKs
zj5qg2wN^bRFOM$?s8?&B)h98Bwg0Ck$euVL$N!ja@}1R;1_Fo|P_rg{Fn|P9{^0<U
zvmxxcFw6%J01!RuTo-^8?BFV4rQr1jh-au&qvLlVu;9bKpos|*q;(F~*ap#G9L)X!
zASwGtZXl+tl_n9A)Y7XV?Z451cC^eIeMCQr4ReglBU}hK^v9~*+t*H1rt?t7%L_&s
z(5pK$H^2YhdLK?33-x7L^7|++<DE#)V2LKr%mcZ&y#CpGb-i@ZrqaP@2i1cWy9_I8
z2tk_n6hSOMnhG1|%LcN6VoYK61qjSJg}ooVR<<|joWhE<4OUZFg8^g?!EFp~uqiC`
zLur7h5KNCLEX?Ln#c@9b7(3D7f#_ve?mgBqkb&$U0McpyP{v8cKZvAM<O0i)*vYW=
z-;e}4<euKAqG!~A3X1e#3n-2|z=UH)A@&CVw`Hb9_iCwT=I<E%)~#r1{pQTfyVusY
zx3_n`lgrzZ_ENFlFBUSw0GZ%byUsQS;)h{)CA^YXk`zgGe+};*%OqBlKFD8o3GY^e
z{~Zt^Cmt#~h@R^TkV;#)IC3AfyyiRs5+f+m8AOj+7rQ+eKN$=l@>#?(uz>)Ak}Xt5
zT>%oe;Fjy*fy^?&_(`KA%J@alyZs(WOOL@>ScBNV%>2g=AlK(<|0wzjFt%zdp5DQ&
zLIyD8!`gqwKu+Th{ik#y8qW}IHd!-<J{et##PecO29LoJQ+zU9SO?_RyfK^8;K$Cp
zGc(_1>+!<E!i{=$`{v9i&zc+8R;vBxu|^jl41%P#ft=k=^xZ|PFt4=el!SAe;)3iQ
z9o~!VaPJ*9wnWDS3f8A$VQN0Hjuoy<EoKY3E&z$RY0h^gOn@EY*g9d8T!b9W5+JT9
z`ind-v`w(J@}K}Ip4{iW(*Xi*_-wp_QEPy>Pe82)Ksb8I^TJ$5qvJP&r4Lg~EyEh~
z-$d_k|1N%d<^8#pVzKA|V!ziuUi2^a^bBBdX_FykN=XOwJe>VEh_kRzhELNDHr7^L
z;08ZNL=XvKHcHa`D}lfr1r>nwT4xY*Y1x>KDKotZe!RP5`O&iB@wVLG-uUXR_0_uR
ztq}$Yx1y&Baz<xiEiUfv?k;wCAiImZlKx&YxaP4%$iDquspkHk#mDhoL&3g#;cU(?
z*o%|B)pl2*AJ~g705Nlx3CZzPwBMyLatQzkDo5gx5FjX;fTPTk(i##514tgg%9T%z
zfmCdpejKx(2uMp$VF6{*d@q2+7=081yd8~>o!SAC+6OY`9?12$m;IZ+cxCO?V)2bP
zFT5Yd@r@{Y&X0G)_t)kGBd=b#eldfX1*NxjrxG*zw0C|EY5z?()X-l*HSPA`o_#~?
z9nJ>3!wu8;s7T_HUUtaFkfjKEIX2T9a6shiyLFkrs<xZ(`u5IGKi}Lr_`7QQXjB1m
zat^P%pb$Z~`u~q}e|gub10ahoF-Dm~OAzX~aW8#@I^}B3ItX~~vuwHnBr3ZSu85c8
z2_GKbHpyoS0n#d3N}A8}D3emjeheN&m%KtCU#9^i!X`=Qt?;L_(jJIQkeouH)N>V<
zV<#R9|0&q$SpKN4-UlL@czisN>&2C4yV$?^MS;f~AAJ1G?W-HlMICy_zp^I2$oqcF
zre;!xxvzf$7(m0?f5Qng&OxPI8gdM8-JagB!d!L;)-V|}SZEp<ARj5C=+p^8!NNz+
zn)$>5*?4#T^Yp^qcx|O7uReBtbOG`&d*>1|Qy9kav#?M&r$`CeObMgWS%_rgmP<`o
ziA?0uSTK_z_eetSWul0ZSSh!~EJ(R*<We@uf-Gc%m4&kNzVG~J{_~v28J9zNoj<<s
zc<;0Lp5OPp&-*@y5fJ%85V3>xn_nnZ_$ojqwo5xxfBFD~SnuQcOL+hb!2xLMjASy!
z@g)rqoy(8}F=KQC>Jv~hVJrcn(-F#Kir;^Xw=;eJAUa$SpsK*nRnRez-Ubs#rvOB+
zo`ZUL1}l+`*X>}*WLQp~dLXl|)#G(Z`?q$%%y{*IM-Pr0tuIlOaYwe-Ekoq333?9n
zWHeSHw8n&4?SG)@Lr;chs3MfGw_phC<N+|Y(*3|f>8rQ|zLAK&a}<f2rlG~N;e*{(
z!a>Kc9(=fE=<eW$^>+h=?g#lXm~XWG?XR@mc++Y2Sm;<UKp4_}|MJOmrzejUK9CFD
zWkw&%E)(0?635|=;e^E~w|UXgqMh)aeF_uY(b|G-Q{o`w%`Fj^&fR_+i>CINtZNGu
zkbvDLaGxR4xsPRHcSIUY3n0v;-zu~hS717K48T>7i>HsqN5QH&78_6C%1q<M?t_+0
z@f@x|uU-!7qmWFI??k5$f*%2Yv+*t~Rv*y`vHupXGrq@xN5|WmR7%%*%aEgVE1dnO
zJywxtu~EjW7Fq3okTwj3zEX07ie-AJNL9!#fF+?3*@r07^pJCGJ{GLK6u8$*Exmko
zr^)30Gv@m*1_(nSG8ymSAKSvBZjm75$B@3ccxOPy3pwVr@8*n-#LwZ!_ix_3@3)vj
zp`=RqoZhE@ml9j(8eQ;1;&j=2>4p4Yn}Uzdhqy?{e7x$Fgx=mnpH(at@73#TJN9qV
z?3wWnLl0<7slR6Ij_d0Ten^CfUWjySQlsTr?SJ5&XzKAu2I-EvfY`%)BwWO)l+u=k
z8|?Z6i2N?io$<ll@d>+qb=PFQ`Wy7?JrHbR35E>%(QLfb1&NUPPcMAqXYJ?=Xxs3?
zPNkzx+qP|6`^R~m%LffNQt8~O!2I#{9>~^O<6L>k$auy;t4RkYFF)|$xYGmjqn|cz
zHwanCS7*=?OCr!5D`m9*fyRw0Q9VTqIwD|4(!rn?1U9N`=Awg6@0+9*O73iHZrHqG
z+?~A#XZ|I&>{p+{!aos1Pv+wda^?D$)!~Our|8h(w+B*L(=rU%ZUZ4^^9uL?L#CC!
zM=K0Mm}ZfFNUF(>u+arKC9C}pGzoP3DCMdor_%&b2-7Kt8ThcD3T07R+#~{Xu)l?(
z^?N5b%`0vH4*d=fM847162x8E%>k0j4<QCZ7lizP1LE&Z^krrXtGuaJyA!Wl7sq1_
zHICZ9?#tR;->Gqn<N74!8;D&kC6;Hk|3M@HqY<DwN2t)dSg`IYOv3N|!thk6bKSF@
z9>G_D4Cv<K6$BZ?V^}#ra{cS-J%yFHNEig3pTb&Jw5o101c^^IxBaZ{td3{z(FQzS
z5x-}({{j1u1vJ$h$GQmG>Pt@bM+0x9gsPDwPDnomli<QX+Jvqw@*N<Mx(CwT!OA_5
zT>rd!Vj#&>Cio4?-+Lgdszo4Vdwgco*|Uwt*+W)WYUhe=ovRh0YOPX)TDBI|uCQ_`
zuJ4i8Cn!c2D27Ec+J69qf@$W2<c(UB9xt7D{G!ijX(g#hayb1*9th&-atjOm$hWX^
z{rl?K!jfmO=zw_ZfoyG5L4u3>m%r-r!#otB#-?IN1jwdVw{T6%jZm3~3nlpFo4fqN
zI3xNI(vn6Q?Y{zuHv1f@zc3s6s0u!4?C5r3%9Q^VK)NCH9)jc^NG`wR0Kyo$V2JNA
zkXa<fmHOdjHNy|9QMIaYJCc4!nWfd%8uz_&`cAxHMDKPFpSbNqu_~ke57JSP-bvp_
zRKQ~qm(D)=sSoX<{}vzvfDcOKQp^F8>))4%fw*f<$q0zQ??j(lHufL77vH&f$mwjY
zi;9XxiFQWTxL#;c!Dd!-W_^UTrCO>m%4+|EL@(7PbQPfvn`>Gr^z}UJg|kE2T0;!W
z-Vy)HQTznR0I`cjfDB+V#XN|f>))572V4++j}RV+r!kPNwOVaWrCfBn6Td#>bh1(G
zXcHb4HOee*6+w_IBWI3twl*Cdq1pt>X#W{R*MspXy-g&VxoNad!ZxA%aI8`I!KV+^
z8f1G85&7(aSS7C!x*$j%1Igu!3_p6`iS7b@459n&fy}F%TVoi~sJJjleLo`T73Fmh
zCfv?~%En&-Nv`aO_t7*b3~x%PJgfZ=XpwafcoDjSh=@QAVf7<Dv19}T{i=nVGmIDo
zi9-8GksTIT-g+S71Xj??4@;2z9!M@v#2|X|BD((`$TG`_T4hZeA@}0@79fa=FxUZ|
zYo$DQwz*8l8}YhCAff%Ru(|!kkt5fy?>l-sVSKaN|3H<S3U*>!hUnQ+J>e0hDQAm0
zR-_JBVQ@C!IQ$Z_*kcc5K<^8o6R!gqoZm#x<%xPdkU`=W2(jU-2eJ$vgt-Z_rdlkY
znv!rp%G|2riC$IFTEl?){dk=<o6bmb=l|%+BS(&`e6iAg8}@l%C@gI@`yWJUmjNT;
zE`%7jCpM2qfh!iUShkd8Bo0`O(a}*4i^XwtKLPU9Fgo&>bb}x{Kyv-#!aLD%5oCb8
zN$7bltYr=i76z48quO>s8V&7eFrcpYurL4u>L7@-nPG&W$1p>Wl`CH?GJ5xR<&isk
zdg2UO?SDYi57B7rT_#Q`0mX@wXM(BNjhN8KwCKgqM-n8$aM<DU+5_SKFI{@<VdbZ=
za(N>F1O(wJtTsFFL*TIo0uQ3vXjChw_QL^z8n%XBM^&Q*0}v&aAhe|p1x<qw0L025
zq)9`a)&2*lMFpPOkH?6KB=P|@Y7>pKibb+g(m}FKA2mw}-NO^}*8}0}*pjcb&F_Ka
z@<hy}sB$TG;o<WZ7CZ<`ka9DAb+T2aYMaWGxpkiMpG}?rRBDZK`F?EqK<zm~fH=K-
zabzE>Gur>4(-9cp@BU~AK%ghx0NDC&u_P3_s#S&PB3DdtV7I0y0Yem_&<*4-KnCEe
zya<x#!ph~964`ix4<=Le`4rYNdJryzv25m@T6S%ZkA^hI1BY3D03guYBQN&gclfOK
zKNuK>9EK3Ee_`x<BM}k~sQ<c)gSNmI(7`sYx;;6G)}1h91SIU%qJL<6VF-T#@`b(g
zdyS)t;`n{&i>N8wzO;2v!oa#Su2V)(2U&zIyC@N<iw~kPG+0XnHz_7Xt(Ar#5@l^s
z18Pbth=LSBE5bhe<HbiG^CIFyUiu%1FP?kmyZhbinAJ2J8`u5D-MMpr%}uH2({s<g
zcl-$~)9-)K1=(wW#1@LpKhodVE0^`V88<^OKZwjORMXD%&4m5kCiS>kL7IgWl~f81
zFwRoQzG`Nyp$q&dF2jNYKFX`G9+{&H;^wHHKX-i5^EsFnEo}7NJl`o))Ra`Z=e6U@
zec|qF0ua>`{RC+*!=~=i{+n%f9<o!vRX-<a{Mn(05~f&7)ddH!hYFgF_z%dTDGE9I
zJ?c|fKnX;I{A(UaC641Pkgv*+0MhKfygabBJ}iJFsjaw6WV6f$jb45jXhvuXg$1ky
z)?FG>LtoPlm24K^9qkn@YMQZzEr$>J@H}^VAfnOsK-@;c#ig0YI~xdW{FHtnS1-^(
zEo>A*>cyD4i@{$$dgesWsGexgLR%g|&cU4S(*7GvEg>_XChFmaDV3&GNFs{?36!8q
zj~|5vVsgj*BYX<F#j^+zy`VA&Gr~ui9O(NP2GMbt;=d9Dp=loqK*Fl}GNG*|lFpLh
z0Hh2fpE@Kpf-LOuBP$zIw^bvGTwxi7MXXut8e~D)Q6uW&)5eMGC2>R6qA@`{4gV}G
zuH%IhGTI)<qcbxbON$E&oentgLHdhaihIvViNfK$L=E>9UOs-I$AMN4Ae+}cg1i8e
zygU1EP(rIs(?7uy6%u_84knX)UxUS(;)C&F&Ahg@m_S`RF-&rFBos+C!X5}i=>A3!
zIv_U(AYr8jL)@s8lU@n{Ni<1OK~Q!z>eiLlY-Qk6*b7rdsco;@itDeWII&YMQ$BJ2
zfKs85>Vjfw%4!4st)|@Y5=V_nsHJinNs-nl^S4$dI<}-%8`*c3@2waEp$Fm-<bM!E
zpW9emSenb{vd(;6BnG#o7w-HWhnx@lC4Hl7C$HoHK@^1AY+rH3yS4wOXWO+2tv>og
zvEvfRgdg^dKm}Qb#(p2%;Q@@HfG!7c!W+~gqP$M@NfV>H59B~!%Hs!C%nLsLC4lg|
zY%4lrBx*V{9l2Dgn+h5Z50%U%>n6!^CPYDKAThfHNZHo>r$`x|;Xc}7Vw_LmQZ-W$
zd(~m3Hq4)wC8q8M6;$<J$H78VR8kYl$i=4lt)om}0WBSE2-m7%OBj$#m>@2>v4!<a
zE_E~3?mZB16&7@0WZwt!Ob-<ci*tHCck~_#R45{YP6wS8f9>zr>1i0!-v|(&AhXv_
zNR8dve}nKg8mjU%zUa;14h?$`MFX07bte=mYoE?ff7-&M{2)Jv!BUWcO9Buo0i7h<
z-^Tv`ILgF}f$%7kn+K4pErpFKN08X1QUO5{WRi+A8;iZJmcz2Mzf)?o)%H?y=c<Gz
z41#a~K<rf5DA`!&mC)a|!my&Q!EYGXveET6(hS2#Aw@ZWl)DV52F7HzhQ0&2tKm-j
zsk#Aa*d>s$HR?97B^jY`YpmUz##=m1k=xNn+5=Iyq0@1J^rg?z!gg~)f&gI<gm<1d
z@|1)@a*GOp6lbxnw?7jLx?B5i`nPP*EkHTUIP!7PQjY|DS9$AfpQg{(CQWVrRO{e!
ztF<O-$!IwW@`RxeJj+|b3qbixyl_#E=kW66{?J`_PVS{1ntZ5VcdATLdkc_?+F6GO
z{2N~b4HeB(i=P<Bh*;23!n}|V5Cp5Uh8X~mD*OdFFmPuE00gZuHC9gYOpLTwSV1O5
zfK<AWisdHEN0-VtLvlw(BSrcPxd8>%B_mtHW5>Dy-Kl!0Pm_DA@b$@kA^`}E{$giN
zu0N%h`=EdXy^LZIgb{YuTa>T2brS0!0MgFo6J)F1f<fJd{Wq8ff>rmsgHzzI{N)1}
z6h~oedj4XcCXMRC{Pg_!^Jhf!_N=R`njj5`2n<z=vHq9zkd$JDN4db)IehG{(N^oO
zR!^r}r#+dyRS_U*R(2{0N5l<j^#0A>^ES%$QoUS_bTUaAro}LOY@;}`%|QUE!;&X9
z(#J(MF_3d!wgm`oa0MK~zQP*1aEi7E2vm;)+te-y5YwoaO654vK`WpdE^`c!8`J52
zxxe2|`d9w05!dSi5QaPE^bC`q(zgqfRQ_?iYyyXb)bP&d{XRXdW>aDyLXPX#W&a=u
zLVz5S3cIxb#y><$FIvbcG59nS=$kt*SU+z(HGjq2`t;#jO|E06pp)lUS{NJvfHbJW
zuF<o{D8@;^pMxX43d@_tVhlvzNq7^dup$eUOcGlg#Gx@+N<73ii>mU`IU!hO%Ekz5
zyEw%FfRtg$LkrQ7k-Q>6IEFf&7|PRCsVx>J6{ng95cm+F1dG(`Le*;3Wn|T=wE#$$
zF5ws;LwF~;zZ1Pb_A%O1SkAjpyZ>GKRRI{hFWwG#MaXMsPGBQ?dke(y2_lY33nu->
z?Z0tXq6M)AxhR+X^-eCIeWFdz@UP8ZFi&4P;`GC%k6MQhPkVn>>z6LAKP?EEUTHCq
zfgYSl6=bs*A#)5Kt_VOl`ujlie<Tvbdnfu$0Z0($N_0I|?B=2Z0;G}$)wO;U!5I4h
zL9`+W{t-Z?@Hj(-NdX{?kH;3JS%j{ug+ht|(cn27Qdyb@&*5U#Y@A3c8UtkL0J+Tr
zh*5fs{$YynHgx?I0m7g;>*T~BGPc_#GN<XU(idEKV`5hM0fO{J(&cbobwL2TKt#V<
zpB<XL_TjZd=YG2p`){~fN~<vHj`<>nB3PyC8URX?UOP3Po;2$}uG-bBUw-rB=kFak
z^6h!!RJrxu)}^<O9C`2MtKWQb>98>u1tGm9R=iB~!tj{g(i|NJDojWUbYw7nbXQ^d
z=eqmvM9=lFdLUJV5D**Jm9hz<<T_a;DoZl9T9`#zU49AxL0_h-mqs&zl?FiS{QyyG
zj;9TdfoMCRONFJkQdn|@H4bYVfZ(@aoTL)>c#>(6c2mmZA;B0R!vl!_Qgr_y6V-@%
zAdk(=%skG3xvZc1iU8p%-r{-gXtG^|WT|tHyk7n5<I7?_U+Uk2K1+gZ&5GJr*7TtF
z%`JzMYrpN>{u?cp+zGDe>e^|fv^D}1XzIV#qxGpxC0u^^^Q)(13;nBWXHTt6Pp{gO
z#>pNLz4y)PyHl^8oxb|X53O5GMb>7WZ8@0H`Ji;b%)_V=4$)!;c^p$leG1F?4#-Uc
zNR)-nIOhTG#2NRXksJ3gOC_&qv^dUpQJAKUH1ur)Jwzn*05XLsEI1r#ce6&oXAmGI
zdNhLpl4$cJb@n}s<x2*t{RN>b3{bcoK)^q3;6~R>B(ttXN~fj<|AX!<SZO?kHEa(A
zb6DOk!UOynMS#4rpj*-B5E7SZsD6M*)*yheyy%du<zaIPIm<F$Z{<~QOZuh)M8rcD
z<(S?b+kc~uiF`?IPDk+=cpNMb>C6#&rvtH?UO9R4^n<IpX8}n(#Oc_o$j(o-wC39M
z)gO=i(0Y2ZcF~@~SaK++$U9|&E8#Dr>dnQm**^3@9{Bi!z0v!*o_qhX=j2Ca_Ewy{
z3YyI<Rb%Rsku9keEj0t%Kq{-+Sa=dNOHlyZDjB-&*8@lxXb?RJu}CU#HwGPNkq?lh
zYNJw|W#M3esCl<(oMGu#n)fFeS<QHb+W{n}LX1aQTaicWIIA3G&LSI^qHH{cHB1kL
z?gyu^{s$h&E052~S-PEt4Y(VfB?5#VMgbB26jyOo*4vxy*{$pD)gK=&Ph6Xwz3#gp
zk^z1QK)lke_B%VZ|3<DL2U@x6`b~cTjeVbh2D~-(>B`E=)bc?*P79|mx}f<*`|Iy3
z*nyJQz5nX!moI<&=7rQ^qDtyQ6BvLdq%RDHq~hdOZzTH=AO}9aWjMOSeW<&8y6?Wb
z?-M;N|2=H>TFsJPD%C6~C9!S+jIt~$Yi5)Ml47wK(J;+|sjyzsT(zw=hZxA!FkxJ^
zQd?4Nswv5?hjH0?5PBaYS2{EU<eKOuz_=PwO~K-Z*XY*KL2sj4Z1DTwQKi&f>N+$Q
zCB2@)N)vxH($;0WKbo<2dm69f2b>V&xgI0xfhZ#6eS}Ln4K_N10WvoricX&V-0ng_
z5OV0xE3fkHAY0%^VSD<q9ol~byX>;rPLjOBo}(=;cyYPA!q~$<KsQ2)>FMc}CzlVd
zElY-C1x=UN-jGcquP*B?7{ak>CLYKGcX8u6AKG*u0_1~RhNU|kKW-sEdJu5{QG^IU
z_OpUmjd5(o8fzN?AAF}RPvh;<<G`o}(O;SAPEN^@Sjr3r(dlp$0K&jK#oNp6Sx#Ba
z@@0ga!-7~wwGZvk{u}&zAC3Uv!X`{1Fz<xQo+;N0A1w)z4BG-(#2dODi1wpd|6}tC
zNK(k!Z>z9wzh#K>T@c|100MsObAVtCZ+(1D)L4T70)}`obiiYjccMFhfFSwO+s+pR
z$i@JG@V>Z^cT@S{&slAe5F|){5j~U>JG1|$8xUc*K@zmt49X+Q?h=eg=+%c*pFaVR
zXdCxXtfNAy-v?sk`f$x60nr#J67k%{eK>{n{vH8D>2U`fkbDYjzXK$wnz6>(*<p%B
z4`g&t<9%g=hhZr$mevUn&QKNJY0EQ9ib3_C88q)-c*RL7^1}xRJe1nb?7xu|3_nPq
z<=O=@XycUu=z$DyS-g{b#N<f;VUnneF*qc2Dzw{v_XJ}hYtS!*R!Hr)v#^E<5BYEo
z%XdKT-v1s*IU2u#X{;N5BVkSry^O2}vO#x40W!0mt}jBJh5Sk_bOzny_G>sGL_)hC
z6I(t&z!qxujX&G})<FAja077olS*WZ$a6PX4_T-((YGfaSU_4uWI*T-o(3}+b?1{X
zOc1flyM4D0WT*h~gXoN-ccbY08X#kh_0IsZ%?qXE2NW4mfUJM_mFTkQiv@Kr9$!zt
zTY@@^OTM08V45|k#m>^wGcUF`x3)GnHx&@=qeq{8_Sw{z<oG&%v`^2Tx^Ur)%RS>1
z-LFl~TsZg6vA?$eCO65P)<Q9=;g)d`wb^Xblad48L|-FN#MRXsE+eLT{em=%<fAbw
z5ipo6(}9gFKs<tYF35jl3hNK{&R+G2Ad2E!Sc#+wHnGxD5VEEa8$a>@3faQO;x9q4
zOOwWJ42S`vou&~aja4j+RVoWDEqnk$Y<vX^3&A_HCwul}gPKIajB~P?oy^?bO?7|V
zxihm-QNNV~(RsWi2qKVRhp_IaBJ<>fH1Bje)7PdK@85kkeF9@{=(MaG&z?Pe`PTa1
zy>rH$PTrby<!=3c|LAD3SS**z*=%MdwfIdrTYu?M-zakb-Uk1l6b&30A}l}<bf6%D
zWY~#~Xrd{Yf;&s{qoHhSaGVOycMarS188z3%>s@<JUuAJABQpvD=KQ6g@jI+hL!ju
z@CfAF*N;v!r_!?@na-N`znRuFX|-}AMT?}MG{$%|u)7TSF_bK4AFu4Lud_v(-o4jY
z_x}l&c31qn3l<~^f&2wcG@(uOkPs?fW?f(j8_G+`ATeQ99k9bi1ylaHB>JDEhYvys
zkZK4LBao;d1bjdS4?CcO9RaTcdH!p^{dL8dcg^M-7i@H1cXFXcOO!u&@F2@FEA3qQ
zJZL%F#q8@o4Cxy}*8G3cU?2c~Fa&`O*YL@p6)vcUDV#M0r|%1S2BQvIx+joRnnI_Q
zK<!^#iT(!xB5Mg{At4lVAW?@d2|(<-o<<Kji4K5lsqZF3%5rhk2SW0vAFi$RWq#v^
z9UJuO^XpdHUjiXJX?b(-xFP;O@g+pIa3qTvaN1~vWDuT6t7iyqOMdBN*@~)0CLjxE
zn1v1yj}ZIRBM^*WU5Z0kQ3tQu8wt6UBKE`jpCgc8>8pWcxj1VWX_XN9;%G5<UmW;)
zh`dhwvwfa-l-|EwO_L|&1)JgJk-zZU;MO{Y02~tIjnqT{!3als){(+9EsF*!;32H_
zB)Z`P0Ac)bJ_01_u;uZA5Ja=+%%H~z<d+;-9yx|E2w@mPeE9O=gLJviqn7FNbj2wr
zs2e8K-3wC0K+N1B4O%C7oTNcR3xb4~YB*Gi^{{gw^&C1Chp?go(aHKWEGh~6o#=lE
zAWTu@MHJHR0U_=~ga9P(wj~I&F)r8Nzi9+1{eQBmtq5U7AtpJPuaIbf?p@J<DvV))
z07FZ?yMm#?Q$r|3rr@e@0kTe!^&zad4kYT}#jQ+E2tYhItPFW2`Zu2+-%TH9A8T6N
z?0SN<+dae{b3lY3vEp^w9gQ-~(}m>TI^%aV8VxR#%JV^b=VIyg6F7L3b_gIy5E;LM
z)_OS-CE}H|(q|}{oJcDTgX%#@xBw~Eplc2t1c^!Xs8A#U2v?$WKdfWnPUC%X;rBGL
zkNlWSCa!{pywE7?Jh<5^0MhoT=(SN(gxpFenNb0kO?Z2KgmwAb8f>yG&!^+@aM(0u
z>EnycfiQjTg^n@;L4%Gt!LBG+3RC>2ysny3krgNC<Wt3@=oE(Vz&GH9gqX%laRe(a
zB#a6}YwwfdJYI4m*jL&<nNFwUx<(V$YnoEoN~1zqr!z@E6aeWtSlHRsAjBe8rlaO2
z4ZWHhHOW}*-lqS@N_2`{6~_$-2qP2@rqUKC-wqQZ3I@E&mFuAfAE@C7lly27dKQ)u
zgZz+bya%!yZ&cKFTbXDE1hcThO`>0IZd8^xcha!a$qRs(T%^(VngbnnLSh{N*+v(p
zWwkrFNB^I|<qIrume>Fx0mB4(aq<S85Um(VpjlW$Y;Xh&br~=tfr?I81{;B#DvqjR
z1QHdPbO=ibl7#+7LIOlI+7}>adLA19$gOfN)){Nv4ItwS<Fc9#EB-$b_l<}F{Xm90
z;{@Z)i$>U78@N)3Z-?*#J#1q39@0ceSq*&}FT;=8Rwglt9u<Zdft>IFSzn3%A4VYg
zsJWBIB|wZIbEH5_$bVRa!K63e1t8g^tPax075|^Csw99_NEO{73u8{Tz=OX4joNG}
zpomsFE{0pffacQ4!7u)wkT+BG)X*1#=q#+5M2|XnfgeyM1@a%f6P*ANUC8zZ$QeTg
z0pjI}(wnz?y8tB5$}p!pI7g4~0iu+EG_%15n4$-5U;(=E1xN@O(4`V{c=60@2{7Ch
z)%7UnAAF_lpI=5ueh?r~Tu2yo;Nm)v6GZ?*fH3|z7UoKH0f-D2?G2D#4*)4=WEDiQ
zW4<Lo^e+w4tBs2PPq<+rT|2(?^f=Mq>&z{*fe)k#0}WmZ*sN0mRUR~G@G4@7hT-Nw
z3?G_C=MYxh$|NcfZQRO)F-Q{fO7zVDnNFI!X<7wH`^>yu1&EzMl-@iY?L2}tO~=Qp
z{yzaOaB>yaH0?o9Ft(6Qb7{tKW%KHDJ`jeeqOXFI(oS>eVBG&Ojn^>*%LwBvtf=55
zIgpYcj6p)4#w!33?G2D3fzB-YyaJFj+X7_BLA7r8w)p=9j#x4t!VC#foC!~`XMa&4
ziTIOQau&L<+&A)RC^VbSj0mhl9>Q|Lhb|<vFNUxpK%xTC&$co#aQu(cc>fYW&g=}3
z?80zWOYbzq|0j+5GC$p~mjgzq>u?ucKdow8>XybD+ms-Y2gy<rcJd!p(<(s^VR?#>
zAoht7NK{~|0Hn-;a1Pe7pcfMUHGr7fUOivz36No)F@t_x{eOaZf^1*}K^&CCfvKz$
z<b^Pn&8%Pw(HN+x7|U1|A);eg^2dBruv?jc9FQhK;$B!k*gKmR_o*n1--SzGXhaZ<
ziUwm7N;D2?D%n)pO*b;*MnRB41QEeaK^#Q|v5P@hIxbzg@+*iR$?xE~PoDP4wVm3j
zRmU{XfBxyseebB}=eg(Jq*q6zXJMH@k3c6F136e{TLEHf0CIUKK;(dYRet|)X#ZV!
z4xITd`wq2@ztBJhAP_Q`FD&pvS}=EGJqsyF5gAn!SqPy{KTI(^NeKU=e->7+ZYey7
zE)N7tR~>&E?>`TaOGeQT1BfCZazJGNA*YA3n`D(0{s^r)Z{%tS7c3(q1Pr89viU?4
z`9Jz(QeIJ;HEf5w4xa-7Iut|i-$>Z2gKBTVvL78Jbgud6@H^4}Nq}4&4Ipn`D*|E;
zNNE4v*lxuQg){hP+*BJ|g&+vQgfhptvRkyYKc=xS8~YB%Y=E3KFOVc2L?~oKEsn4m
z{_>;CPvhNk5=1A_`xr>CZm1nX=QdusAoM}H`Z)K03m}&S2=nd+kQ;5mvNME#w*O96
zTT50!)Oy?`<a&(9?e!#uM?@aa3XNm+MHtKS_hSxXcjU%+O)D}38R!=sFf)jhfGM5b
zg{7nDn=Z)n{W*|c-B5T8#7iCsFmhrZ2%ckdkQN4zZ?*#D0sy%<3?Nt6YgeTFZTx5Z
z?+6pxY=~JK@0MzpGp&k>O3=Oo8N4<GU>O;MT9hXW+gm;hHexTqN*XG4`y_hvFf3dE
z5Iswg>H*U0f3FP>L~li3gX5H9Ag{i;I37SQ7z$Yf<nn?`Sa*t`Q?I}G>xTVz-a%jv
z?6(39iet$5H})OX<+m`e6%HAoHp>NsfKlvp%(0jna9A>e)dvAkf+LF^ej0D{PASFE
zdw}%np16&d1ktmwfDk$$C$x=s`Rdtm0CL#|$S(~*E(MSS7O=i37vl~4?<_--Tfk4|
z`gXiWFvF9^QsRfdTP=2Rg=*E_(rnCb?C(Gb8!NaW4`qxY6#77A4x}@L7_-YK(f@Rk
zP}{Kjb0EFCBA!Io!>~+R!#cTLSZ`jRJ$ihAT&@6ead|g@Ec^l%_1^36Z`yxH$DsND
zeJw^owE4aa##=yX;uQdfd<51Ri%}BpT2x`6oXjwy1fg-VNTC``+Po8vfKljwbb1Mk
z_}JXW`+Wa2-d>%M0Mdle!-ME2=YiO(V~+}u3%Vfwwgr#_7O)oOVz6od-PqQ!EXUu=
z+mI;-X^>}^F<664lW#a^7=TIy#5kY^G6u>4Do6pa$=6ZgSS=xT%ONmVEw|Bu8FUmN
ze3D|z1L;qq_v)PVFkb%`(gK#lkLgsN#=Cs=o8_SZS#AdibpSxPfJJ@$`upQe`|m8F
z2d&dBATsRA@PmxCPr!uxl-)P}#-{6nls+&BI~x;INOMY7ge1z;Xyb!*<cf4T2J(b_
z5XI0N^-tsN)e*Hl5S=5`Ny5`Q2VyH&i~9o*9wDRy^2Hll?7v$(24gKcd6xt?wDQIp
zafFiBF+h|9l@(&KA9y;H9}n>na;V)EeISwx;`jzQA&nx{(2k2)T?GixA;|@K$^P^~
z^j@71=%FCGX$=t5iM^3<adma}=rI6d+62fi7k326)%8LSNcsI>i~V=_U{;eHXs7Hz
z5MVVU3Cy{bfJ5>O=nv>d1hOQsflSt7p>|@ay4(wiM^Kb80D0`vT@S<*u3`Oo7gql)
ztX}_n89zKj<brH@C;G`8Bs_cdo10?-<nmyE=m@%=VzSNty8*ojA%bx6m2d-y@Dn*3
z%t2pF5FJ?UB1EitpwOE^gV5tyeVVx5#X8n2nrhT;10-}naA|MC>SG|i{`YEa!V1q3
zp5XgHme<#3M+V5{i_(Q<_<I0kp8z`N!l#&Qwf~MWZvQbxu`K(bjS02Ui4ZoR<AMZJ
zED{Y^Nbdt<L8`-kxy;4>Fc30OEKFHBZo2$5UWP%|0FnB4qW9{GHcq0q9){&kYa8$4
zn^&*S7Doq&bSHo;6#&s8!VUZH@PQk}x|!T?7FH<WAO7G%3aO$>TWz!q7P14_V1@=1
zGXy6^^jG6|br;qX!Q&J|fE?t3y!-W5?fm6UM$phDqr&|g8qJ*49(9_yZJLdaJ%OP+
zmNdotEBwCyQ?=HwwnWh%IH4f=;_T|xZ_XY)7C<ik9zYh?sHCTu47S>ThvZt!B~*|e
zVEt$v*BH=a@mG;Y27Sx{=wn!Yg}&9`5spKi4A$jnfCQ-}l5l)}5BWOX4WgUc5fHsl
z>iI(e@^ZaZ@3<YxA}DjCC~;er9M|ARDHB5*&qiJKK8b1<su+5>)X~KKg%VWUS5fYc
ztTb{5OTP-~*uU@pSnWMn@<4(^ASV(7x%uY$>g?vI0D1N>fanCF-emjvcKh#S--FdA
z$~O=>fD$xRB{Bk?suh`|TlGy8sS{oa7|w%mz=gf@svtc&?sN>~&ruNRfNi{=9RiRz
zfo=y#8vP>%EkQy6De|cc#2HP><gX2Q^1lX15``{I2LS?tY`zuUN>9iGS;7HX9uAP3
zEdb$rK`!iu4^rF*AmGO$a6lHf*nfva8!FPuQ;~Teu%;}#&(Ug<#5{)7nNTevf@RhX
zGX`kMT58LNinb^!(&cTuJO&~s<ZnI7<f*T>>4WEX1H?i9IY2g~8TA19zXL>XBm_Rf
zhbcaABD=5_XWjuhTl}*C!TluwvJXGxfV_W;{dWp>!+b-Ee=|=}4mN~XLsH4D`>VoY
z_(LKUU7i3TOwbYHJlN+c0A#xZ@^5Y94FOW5b)1cw`z+3;mXp^}o+rpkr%4&7&P_8`
znw4?w%hYa|7inD1@>%0lOwdm~Eu1eaEwwUeqcW=Vsf{|brf@QR<>VY4LU|UI`Or;r
zt9)Kq!N?_fT%)-Sg7KidMnyNv)!1&5X>GSf%FH3=3V@(^sw|Vf0w!T!!4i{m-+H<^
zEH%u~-T<OetSZ``j}q&h{rSRlq)CK5rDc@mBh3IhPw_ELeS6lO<b}g83g0fS(Rn_@
z*O@TQAuxkk7EfH1^6UOL(!&&~U>C2zaRMI5861!UR<J~%9RRu94<O<PJRvzCpWbHw
z9kPW9m5DQf;Bue>5fC~C8{rgOR{R-oT}tgkP>2<*CP=AU#YybiWq>?^SK5jn8xF|7
z43HwO@-&0VIghf`Y<!Vqag=2<){W~dbvcSM=aMR(&*M08&LCr1=f0P`$}(4FO_wv5
zTID>73m@dDtae6#*f4Q6w<={k&#TJHtssf3c^X$7t&Zw!i2uFM&4Q+NbZ*xynmX3A
z6sLuXBlN$@97dUS9A(YbEOC@ssdWv2%&NNZQ5Q^~7>dfY^sOfqI!|qm8n%p54qN*a
zgs)av`?QMjCH;4deOt5UaaNUStjWf;2jO}|^u)Q&v&geLX@2>6+p9|KcBc6t&soyG
zo&Pm^Rde4(l<^;-O=_OU@eDJlGY=4c-Ty-JK;(dg2MHbjbl(G6HV(-0?}R`AkRMh6
zxx5u17XZlq{8+sH`Wv^|f2S2J8GNP#j|A3#V2uafdZR>6!OEy>6ftFh+8jnz6k=fk
z*+N>dYi%)RkD425T6R}=Vd<Ud!9n!U0r|%PQjNR{Sf4za!5VpMoWcsjY_02Z)oF_B
z$SNkzC28SOv`f)0E|4sMfTjmG0~~xwQvZ1gD^C14Q*ReR99PT}A<Z=aLES8xlX!WY
zV4j7Ht<kLXx22^45KJWHb!O9azD@>!z@R2^>9gVt^$T=99a=_RpmWcz9K+&Tg~NJS
zG+oZEUdgYYq*hkc)+N}1RvBC6R+l5<3tQf>y@b`EEJfNnsZ#z5R{6sKAjkyxD&MyD
zlPYWebHnc%%t7t{k{^1M3B^rVB*^J_AdAKUIeYYQooxc-Lhl8+13;DyKcuh9?{BsL
zPRl_$ebI6g6l$QoZXzCng`Aav?_Mq15?MClE%H6AIlB>Q)X<jzO!!e><IZ{@-ub}a
z&8NBldrMdmG=#0Ha@tauX&@i~NX0xavyxLYgAh!yv*w6tpo_Gzi#hv=0S7WE0LX|f
zVHa7r2@u#|-lKQ)Fcm;>;p8z6I-d9{Oee!(k;fh&jX~vvrfgT$2}k99jxK{?bCht{
zGR8*&K&_`!*eGe_alo1RZ1#t)L09VvNdW|t^rB<o=2d}T?1WLGDic5mAb!!I0eV<X
zF|jOW<^(f9?f;Y?;Xy)50KqcWDeS^pnCXA@2oA^|0J-=JfGpm;z79EdQ!d}Q)&4tf
z)a6-pCXfOa6q@k)@-lFPd`8h(8RHO842lOktT+p%StOx=A$9hF0YobH&TrA>7zmsX
zL4^1?{GI6E)m!!TzDrn1MCC4KstN#tx)qCJS7cFDj=V{Qv>6zb0X*u6GCRB@h#ofp
zu}W1oO11#RA;s%Z^Atd6&s|-v?W(RLmw=R&2S`>$DZoGto6)MMK2Izgl*BhkcMZ#d
zSjI0@V3gPcq~y$o?7z-kt`XBH%FYu3L|X><djcbds7X&FZUcm!(p8zpo;#B$!LS54
zlTnGU`yYxS5DNGRT#%DENNDkIGuwwaAVSb_0J6M#_4=DXFJOInyZv`C$Y#=UkDFk>
zETwg-(C#blEo|tgRS{z}CZBV$d!|^I_z4atf+)<>fWbmphqv+S6ro%YY8?b|d#m2A
zm-h$Ad<dB#%9_+{3qZ<sksJC@Mp8sMvtR~kzd?n#9yX$3-VG4Tomz*pzXV9id2Rtn
zmTd({9b0Nvdw^IVBAWS5Ikkcl8kK(4C%+XSGY!i*ZvZ5ZCWV`25lTaVWO-{uj8;XX
z5FqM|UnGyY8fYpv07B)NtLJW76?v^mSsf(tb<1kz{zEB<{-Cz;O70Zi2ePyUEIJ?u
z^WzQxd2t&+IFV~Vk8lUpJKyfG{|<J%x#y25h-|AhThV_|cfkfO@Q7p4qhL0Q$OyrT
zX{MxcFf!o;1n~z0b=U(@0AvFo2OT8*y56SGKG+u^2*{d>R(1#wS!k$0d}HpajJN28
zv0Wr#j-hE|^M<<t;t<T(1rRP_Q341JtwC@bKni4oGErO<aa`DhW}Gxspgby=?XZNk
zYuK{d1V}UWybX}`dRwj$o4-k2ZCk>s@qrBFlNE8s)wWpx5G=)6zeO~P=hnK?5*7hc
z7e!UO|4QLD-Uq{1N`W4y@IH{m86xO^#{oIp8z7gr17vY?b#3zqw}O3KPIlRU$9u)Q
zSrzU9Pinwjup;6Fgh74YuM)yZJ3x-bGY;;1VLV1&g?3cQL6QdRJaoiKt_JV62NJ%L
zQ1}o*{>5EbT+AQE!*wurO3SRe>mncEu#y5%<Pj{}L;y*vI)f!UN9EM&)xI`Dy9!o>
z06DLc##BNm+XfJqq24s+STM{5j5mYmn*gbD^oSS;rezH>MBQuDpH(C5JuCb?38nOw
zVSS(aYI6aknffeh1EgtHlu_<S#1u<6tcFC8Sehw_-l+Dobp|`;6TW2t5JYcc1gN5!
zpA>`WoI%6o38wn*O90vOFvaju?%iI(x-kdj`kMnC5E3W^2-E=NG5`pOB7lVWFgM6g
z0}hDz@!MdR{dZbmQp|h>m?ocmV2+7V2-H%{d|eF<$Po6i$`}w8=zu-5Kg-7ySYPPS
zq^PDonp%^t14I%*^fdQ>c^fab<7Umq(Db}&wn*VrgzDxj@+E0n`*w9yrg>Bs0!R@x
zmM~>ySZ_;d7i<=l^AI3@U+{UFp&=||Tu!$FB=PgarYvY?Go1MT&(F!H%_Xe4wXlg3
zAa*-s1CEBB$mhPxiO<fk|7`29Xdiqv0c0ALJ}Ur-wJP%}_8A;;!e6u>1F{-(Z}r(b
zHMKO*=JQb(<JSU6BWr`&u_jf`1Q0+6_5Twoh_1)EOU|9b!xXuIMZ<kKKQ;k!c?W>p
zSmUcJbQ1DoxBYjDTOd<zf!2zYq1c0jepH{_7^^i{v0l>>VN@RxabyY&>YY7W7Mohq
zKG{QOAEt;9x@p%gtbZIJ({m<<xpxqzb)2QEgM@KfG${gvbybv<G2t?*<2o(a3zX)n
zJWm{Jr#M^)C3!Zr`e=SW;z7dP#vh^>4YEmdkPv-MbVWUDLruzZ*kt-o_C9M}EqCO5
z9-Z4bzFm>0K0j6iH?5oFf||r+>#$Qt@vEUs$0n_*-Qyea=wFg%Sz2W1pu~v57r>oQ
zD^Ez*e3}%0gZN$)e}_dr3MR!FxO~E|`=5#UkPjk$oQ4OoUckCJc>mRY0Kun;0NH$w
z7UKBrc`QCIe;(|%|E{ssw8q>j%RCu*-l+?e;ir9299@iAl|`x|&=3^NZ@8x6I1~0n
zo(xQMpjfNv=l(5W{eHv<NEic=`gfvtM#W4A{`MB#vQ8*?rET~$UdThF(=iY;+1FS(
zS|0uclidKZL>nL%1W1Sv9z-!MwExQ9LiiW<-ysi%-vEFzS#edCV<Nn;7&XWIG>r!e
zagYscO&3E!5E4s)6#j5LbONWtgeqi=m~{`AuzozU3-ZMFgM|L?-+7$-efgc8y2@&G
z5O7~91k?$&c465MbW$;p8(QuIR<IbkxEnxB+QzFMxQxbmkRR_%27hJ$9m=`6$xBfN
zid<PoD;U5K159YnqaI=S0z$Do2Bkp=t*a@INt+mQgezc<lVR39Tf%zfxByWYz0Hs3
z|MuhD-*LU}gAfBj4C8LfYS#^gPvdQQAa4COkS_1Sx>;N9HxCSd>;TBKn*f1U09h=S
zHoo{l-7J^O#d7)jd&9wB+J6_G6;~hvS@I7QLDAX~(@2DE!|2Ia{V5XT6KsO+b>I*`
z?HyU1cId|77Jc0_55)a+yi*_wqZ1)i50LICnP*u(ymPCxBMyj`u)q&R(H&okj!RcP
zki`v;pqp-vzz+cgOI73u0dgULys8$P{9wjA@4c{x{dY|A13RO<m<8*uZfMJi0U?Bh
zP!6+IZ_L#$O<_e3l3<OnMubK?uFh)Y)VS&V9s=Ze1d;o(c?<-)+vD6PZ9V6D^|}Wl
zJ}7x0U<jR$t^(wHg|7DqftXWp<E4trvpoTV>jpq}@#DJu_{+f__TQ~&;w57pxGVq=
zikUACkQ~fpLRaJ=zi}&`!~n|EsSy4&6~`h6;G>~be;up2Z!r+l0}uUle7*J4Pe1<n
ziT^`=Xg?o*=z8_~KZ`LCDtI4=k)zu&knh2dZxnjCRa|PK$Pmjr0zd$<h9Am!y?peI
zz3jhhMYW|>F)w2#o<vnWfy97-T)V11SFP6lt_PP-VJ-At5+vE&I)pe?w)72z9N%Vj
zb3Z+h;|l*N`3qz|KHmLldJJ;Cdi|dzegrXe$aVZtCf}1Ey8*&LMW~w_WbOpWMF^0~
z03ZQAFbV1Uo!2LW{p`P^6=snhhbsp{J_QnMz^D{n0zXy5?!q?cTMglnurCzwlLM+}
zp`^VM$BB0yAVdiH@jwHQ9w5CsqTn1M5VHA7sm^*J;0Lwb?R#wME&wri<f07_HMlZ-
zgzm@H>*W_;?rZ;@tafA01D^q%06al-9U8AYR2BBjQDpi}WW|%rAG3=mgHXqq)zJ)9
z&>I@IC&q{h8$SN!bN53}zsAIo^)@bV7lr+`%QMnz&$wQ_{?B@*t>PK~FL?2`*K_}n
zo_gWA`=PfV{{Z};Zgy<a{igr|dVCYQBd?bqf3&~-cix0s4Z#KJC!0H+9A`PDPz1$F
zih``ywg@Mtc+18l7ix-Xgow6Yu{EnB#byM^3r}}kANjv4y&uT+>h%YE=M&;c5ry%_
zKL^nPEmQ=n6>V+PO=xXBOoKs4=p42$690fgE`uzLAb3)A6djON7(6L@6b~NNiyrjk
zMNm+0UWC1fM^_OM^&sM_*I)WeO)?rc$=EaIn@p#=>eZ_n(D&P_SDl<>o%Qs@*(Vy^
ze9HCw4eyX2T!Q#JS4#k7r^bb*KIFRN0|cq_bCZrD!O0-cUwCHW_^$xbr3Z5)A<b(9
zh`@!And=Z$=tX>R(F1m&1DvuD5*f8X3a=iHP{HJW$Zq-^$W`so&9|)1mwT*Af2r%B
z+i$<_c2TAZHrnVUD|5PCCI4Mtr(#l_ds{2hO?O_^4n2CqJLhH+8!xMn;8-a@ZuJ1-
zc(FGa*UBdvys&#V{8#ZmK<LIjjG4j+Jw#AmngVZABV)`Eu1Okn6Ome&5EnvnN8W&U
z>^QAZj9c~~;mTD%Qq|<p36)I_WTTTW4;T0>EDA=aH3zaN7RCn`1CSj8L})S%kioWS
zoIm-j(@VR%yZu*Ref8|w7q9u(@js{u;1&y@3Jkds#Z}BC5f8sGnJ^+mjsrB2AOAeB
zHgg(2AecgFJg^;8WM7P^wrzV7eP!I3{D`IivPq(EbgJZk8t-9%obGQVTo51!<MFwF
z2M~w=!87SQ1jryC?A|XybjkQ1Fohj9XJ{F$wFB?<Ix#~H5P(r;71EYYV9cYxA!@mb
z0po}ePA*h7!K`hc#=Cmy|3(0aL&(Vo$S^n=ilShnHS3W}8eMwHrK;<%zy4bHd->MZ
z!&{<jw^pLdP9#9i?MYr@aL>7w0%R;cU%DR=da3vyV7;I%UQQx(w`z?x5(ChH8|@du
z)`<}x!y#qCOEbAC?{W#zP9ZD8v_73;7Ond%td&dI0e;AfxsmIxJfQ%IOsVhv?jqJD
zt<Y;Y@zXuRL08o89PN^A>P6I<i;AAz<e1j2`$Tuwx`VnAy5dHBBEt&w!&_|w$nHPk
zK+Z&sbIDPhJIF<ntr$3MZy(4v2kz}j9^)bblIua;P+rT%|3KRG2UT!N3oaQ*CD_19
zJpf~~06=A^{Rn~yEKn7)h9=C+un!bYEL!;_`qtxX)VscdmWmO1R@Q<ern3lbjPEKj
z2}-ds^ZOW;jTZVS^o~)*^HxeyyU}{(@Nu7`hrGxSB?u6r6j_PhY#Bga%JYT^zFeJv
zqi)X!2ixPpV@_Hv_0*Ui990$rNOhJ`b-DPDEi6Cnpy8g5_yz|&0Y!t5s{>#mWM%{)
zU>7$BQo&im3Rt1%P|1fPsv5Sm6CjV@wo08jq<hcYJFTFl`kT<(HC?<H$pW5o>)$60
zckGb>siG+ATbnHgkbV>mQ>==7#l>a`vR-ioA|LTadQkXgoYiQnWdIQzK=~mk2ryEB
zWjx;Ae)2(I`}_L`1C{S#uoysg8O@iA{{)Bv03@pKc$P{F@XU=e6mbj3>^&nui{)n8
z$ZB9FS`6ulJzS!PE|gg<+`@WywfLAN$VmrC0wVO1*!**R&TMq3d#|Vv`EzsR;M(3<
z1RyX=ig|-?mLThv@&f`u+%JT0G+32hYZpM?*`7$&4*PCD>cKbOc<`P#?h!!j9iVBP
zZ*T8|8x)#nbOb<D9ze)~rQ&}OGTV-IL35r~{mBdM4BM_qG4waR^g>};00ZX`dQY9O
zK_;NnXp-e@47EYM)WftciT=%P>jcQX_&F|sL?eqYQXQtYmqt?PmQva422n0oxgYh1
zQYtesk#<*62Hn*3(ozC&jPBi0HnJ7=q`KH2>Sm^NrC2?VYO@%_bn;2TS@hJ6DoLt(
zU69(?xb{R1F~vLrK->U*`f=)t<tPF`#JZdYh`>zdU-o(tXRWZ?Xnpbl((GT!YZ@Rc
zT!LKIQh>}A_%S%l55Q#^fP|B0AeN2)fir+u4__g;5W)e{;eZc9dC2ty8_>*&kOY3t
z13fTr!hxw0?70D!biliI0pzQd^5Z|=!WtGu6<bs4ep6LxDYZ6{y0}Q<p1ZfXlyYOU
zNhr2S5GTeaRS?;tl47i#iX_F()llD4lL-v!C~cjG6uxsKwWUd9ykcUSOKmv;NJop2
zi5);<lf=?ZxX`bs*q;C-FCy36bAI~jMJ$b2DnN#XD-j^Ml~Ph9NyJ&ZX>9he)+m1q
zi&}9Cgu42q0c0@4kA2W%QGo2sUx7f&#{U4_*_-~FD%MDy{@@;zP+Rw=@7^{RO+%7q
z#xJMGr3P-KBeL*J?+}+Qd=6yg`46GU;VrB)#|02;qdK-mCeIL)Qw^<!yD9*zmb!8!
zKoG;z!ga5VbkhDveRChF)E*M70hH9F+F=+(t}3dNB$?Khoe4nXr6WepRaB~>qg5{x
z+g?uww@H!|MMo*)ntMei_9a}pp(FRF0U+Hdibgtrt*cvNT`2WW%QwfiRt-RAa_CHg
z{2u{wa8UDOOnwj_O9LdF<eHa_|A9L{3(O!cv#~Y?4Wu*Poh@y+@X?~QHoRa`oRILL
z!JReEpTamgvX=dYPCFkYylusrU4Q@~YX%5ns|IivP9x+5G|&f=YtfvkN{Yh(LEx9S
zQp}?ON-e+CJ1Z*fiVBzwb=auW$*S76=%F_NQktO-BLIP6nmC};lLbKPl}~{`qzr5h
zehmd6<cGAWDz)MtE#u&3qjhR(2g^Ih>*@al5SI=SX6#`D%i{-Xmj_6*v9oOa4>Z;j
z1rU#Ov5JFCr7m!bAg?|^DtJJvw{SptQiFq7bnYwE-f~4F8&3TSMCmb;2syqL2$S4-
z4~g#_0KnBqAg=&~=rBM!21?ZsLQKz1SCkYP5)FzUF+-LlN{q+?HiePo1p$&3v4(a5
z2n>rv{X*D&5+3xDKvkrg4~KJ`STiCeW0^<>T5#7&{dG1gkoAcx5NN`V=`F1P&k6+O
zQ0;G%AKvm~MF3%1W6Ag*)Umti%E0g4vl#)OZ^%u+ha!p-gAF@#x-_GIkcQp;KdG@o
zW7}6Czx+1QFHS$M=oGJ9jtL+o0n(hDItn1=EI@{)>Zl?$^qfWp>dyyAVmso%wP;N@
zw+aBP45~sW5WC@>VF&XfKtQ`g06}Wq8k>R)WW-^BRA#e<bqw+W0udj2J*_K{*Y_b%
zf}m&;=x8BTRs;|zTsHm(TJnNCjUhJxG8`deKRYqE!GY*cX~mU>Z$dvL4d{mPlzTF|
zXU)H=ecwoU8}-UV6Mb8VeyNG@`JWfQzVPRVi{S&S4@&8AET^y-TeD^@5}9fiAPN4#
zj;*Jl;1*WRmaI0UQ>4;iJP#n~3T|auHW>ioZ2Lv30EtY=eJ!;mK&)GqWH|Aq^Tfc`
zMwzwQ9Dv{+y_F&xtyOdQaif2X_w**wUnd-Vd^G&n^QxBy$gKnjV(qf=KM4H*&q&Vg
zBk9f%@0oEZ^`ebU{=P1UoT4~F9pFLYaO#{S+c+uS;??REh-m=w)VCr9$S)VpfB);R
zKYxGz!jBh|0YMJ^c$4TOn?*%h2k~eYAR4awCPmI8Hi-j6uE`D8y|hXO2zd{SJ+aDU
z^8h0K)v2}&3q3AOfH==4Qh;P;q^pKR{Av<CNfaPRgLkw!>)A+dHHmKPBsyB=0E9_&
zP$Y^sABnX--RE>T1>)sDPHzr`03jy!rVsEw>197I8X$Mg2MEIPQt>~)W{~f|^*|XQ
z2st85;DXHHQyl~Ys!^d`Ay#s>ehc2fB8=YnY~a*lfV|%T<oC~vF^(7?e)Qe>pPv4}
z{`tjsA9)0MPp{PDZ)?q&nKj5KZ+~@s02vl`RG(<=8ao;(D`o)F(?hl{>gG~Ptkno_
z5_i<eq|!ZA!$wt+F*)5a@mzpZ(la#)67+I2G8MP595Ha9E0?ysND`f5JgSfJ7S`GV
zIFrf($9Quo;ux<(S7$yzhSs`SSEvyed9cx1#E&wWB?$R(YI7h22p{m6=EuSQ?C#a#
z0NFVVkOv45ZcHs1{{t=@v=L6h1-+64brk`DVd#~;I0DSsLT6}1VnpSyH<*2gLof$r
zN6yxLAINRgZx3+^^4Vvf2{3;A=!-A@yw|mTaN+!yuAutrQ|b7r$B<9;fs!+z2X*h;
zSH63UPohU@&nBI^WNq$B-BG}6>Y{NZ(1<g+&8nW<m9Z<PiC9EZk(4lm^k{8Ajc^x_
zf^t+3Foao_cBF?JxQ|sr*|WVE9pGM&AYSm0;jkNHvO2}osgjbj$*mR7I@`%SM_qM+
zth#GOslz`SixGF5_k)erB|Zn@i2ympr?3bRJbF$I+yjK$Tzy;wKpxmR8X){<{gUxN
z&`yZca&_!Mqy}~%l+@gJ1Zxt)BY?*X_F<EDM>o7Y?_5lgN_cPk7S<F%et+sIBfR+O
z>kH@4|8YhM^6|&d!S0hFc>D2hg01&v0MgKd5`eVpqf9K=u(+z?gzO2Gn-uzbMS$Gl
zUh{Gwr};s`zt}t1(3iqEj-Qwia?4&YnOg35k!%suIXl*$+-Am-88aiR$wIkoi-^cI
zMrpJ+cG7smq@hL0id<?*c;|&%QM{1+&a>bA&asU#mpRV&e|9d<d7g8gy?H+W@AG?}
zXR9j4qlyr)+`4?&hMihJ4-imo2Z97?w*BYIS4bhE4bcZa%2#0;Zj{0@<ED<7vk&r$
zN|RF|e}X%Fo~jn)X;cjQX8<yP-@coo#hSjf;m!T~WrDo9bQ|-%<npi&a;0hqVi6&)
z8X#T&d4P->`j1Sm7^bg;_1i@;5CBN6#dtLwL_fo(3sy^B!(B0*@FxL+vGY0r!PdUn
z_MfX1P%uF4X0SAdTZlmTOo~^O|A<mpm)R>uE1r$F)z8M~U>dy=BkyWBu{~m^#U04I
z`3im52?^=juK*mE7(w1&tVBV&F<3~ag0RozxZEiQkbI$AH#tR=;G`glfRf;XZl_A%
zKrE>eup^Vo|C<2OrArNvTBERNEkz9jq|WkJ(0%oDn%*El$Xhho{&R|qbVKz7rKM3O
z5~CDgphNkI2glk@pSJa$t%`b6l|aNCsy^0*P*J%<uLdDXT5K&W3+dH-r2rro(qKBQ
zNRW3IFTSg|jhuu<f?T&#Ij$h5afK4c1w~QnW+;>l-6Sv{h7PBWbOnG&T@F~Sax|nB
z05U_55a?<OAnJ+e)eE|7HU@I0w);T)QT+oURhmx172O*I2sP?Ww*MT<sRRwR>mUUt
zFa>YobtNyg@mK`6=^Gw<BmT3GY)dN@p=S^zu!wv?^;EeG%t!C3ly1Gn6fLB;i%q7r
zCez}@i%o0SnyxZ{h!uhWK+*^hDaUcSpd_C$l)U7M0FWTq5w0YPB?C|-2s_DeL=vrq
zu3rGsrzHTQOILHFuxdonRrr9<{{oO2_)z|Wl!_i>A(^yp=K77R_Us{mEc+%vDhOz{
z{pT<{HRD)>ZIsSbDTR!poOl--eoCA3JQ+!~`4gq5wx#NrI$jYC=sS>6QTC4!6$ydt
z{jCg;UeESFo3wb+r2PPqUN)=c-2-MiL`IPJ7t^mSsC)rR2I0u!AjP0mj)4@poG2PN
zNs@|&BVxu-VnK8rAiA_8pvO065_Z;f5dF;8q>vE-o5EGluMXB05NF-V(OWAm>DF%n
zWEmtNK*(4$+5U5c9VL=5Gn4XNYAZt}$v`OM=sQ;OspBWY{;)rGXe?!c9kGJyRM}Cb
zF*lZ@Q{1zhtvnCp(WFUhO}72uLiVrSKgssWB0fk@V0VBZpKf2gZ6Qg)Zd}F^1d1>b
zKqSt<bcDGO0Eq5DbZJNw15wxy)l78l&I3V!FjSO5fu|KwH&uOpte>sur>O;yxitVn
zEq9acKgTW<4L|0?E6Pc@Qn%*hLFjFWfC2lTCL>9|*<13qnV(;w5x7)8+*4up%<dhc
zPKO|PLLMeO3U-IjZR|u}Mn1GOK%Vb6O<MenX)$<^w-(Fx2Nxf~4c3cwG5sFdkuS=J
z43~pXEr8@@6?K5<(x55;8C)+2qTz{zabg9M;zu=h?6fZt;|^}0<17JWt_mP10tkWt
z|K!4|Hdj6oJRZ9v>hAun_MgL}qGOBNbIOVdRfa?9Zcr51Sn`NJp1Kz?2Lds_Ik{oB
zx->ZvrJd>EvtzZ5RdPjrPWi3?AnE?)ovj;07vm%1GX|kX#Nz-E>+STVyH+{Ae*0qj
z4d#=$Zm<Vhyo65y&Vq&F7l6PREkm(9pD=GIz)6X9VRh62qDvE^l}yGd>G5AoB#Z+$
zeu^B_eYHkz2s^B{3nA7n-e?dY^nX13vkq-46n55WbL|3<#Odx-yZz^=%ZMf?5)&wr
zO*o<3cvN0d5*QGkKao7{H3z)rMA-bOH;vIk^;er0qf-b8PPg&9a>17hh3rwIT&#6x
zqQ5$S{(O88YSpS$PZ>DU7w>=k_~K$3M)cC0k3vx@<~SI>o8y8~u^Xp|fmniu9NayU
z5dkGZDI<@<vUco}kuvRcfav<?MKKU%4E_J;!irCCO3;0^sJq({@=&XJxlw>X!`q#q
z!|rsujNg^d4n088PSx!{2g%(D5_m*a&N_4e5cwP^-)gse0rerN!Yb^DUSi21K6!!<
z1k7Qtygf82BJE43t?J#o_o^W)DsSrKwukIKBdH;bgk(P=v?@T}DggrLw-{C4JV?uW
zu-QuSk5jC80S9Dp-SQR!h$sd*IRqlf7R1oCYiD^PVWtbHpAHaR|GdzE)B%XLmve6p
zAY-Q=bcO^wvg3yUa$R7KC2IT;xt$)*>JCJR@=Wv|3!(y4LQM=t5{N|j90KbLvjaAK
z?y_W*fB_J|0klWxs3RiX-A=n5s%M(TA799W_lWsni<wtG7Ca7c4U<<bH*MaO%|6a%
zk8U<CUp2dDPoRgxW&BySGC-i`YVY2?Gve{{AZyu}TzK>5%>}d{C@B-n6meawV1^y?
z66_&50tA7(c{s`^nWB`Jp!=#=KGOlB>mQd45JE_;iG-as3y@Wt4j;~<4j(?eX?FwI
zAp5cVnA2wj)d9$uZvf<s@h9aILaP@j=5zx<WGz@N2*4IpCnJC(gpr8)avkfN72s(~
z?6h~<Ww6OGIP;w6y~!j1#Oybly<zjyc}8Q@d1sUD@U_(N<Gb!XjKyN%<FlS`*mTV<
z7tkC)tZ!w#lJ%BJwEUn%*s5f;w$@T6x^y)S5S&Ly1o<!4!n*8mI#)-_aylIlZ8&@F
z+>`5v57#FNMbG0Sji`D6S@sJ7Lh^wR>DV770|e!=pFMjPhdVV8hyd9JO<(U5Joc!&
zL#O^77C?`hvKI<^u=og{1bCPuF>|2J{BVQOxOIyun>x<(eDYzb&6|k${fUJ4x^3MJ
zEdr!ziM0q~6-6B&x-=uzT3AGo|6(nykyB+YVjIaFbqHtAUC)mHmi<__Vu7(ifGqoU
z03ja|f-$im2LXf`5s&8w;t;lhdxm028v^xT_o%Jq`Fkn;p$w36H<o$jo`bgRE?(Bc
zgx?z|g=3&_sV$M+d`1UI4b?Ruq7D#U+7L|xQOyJSFNX1!0fH3yN*$w)(7Ee}H`R%r
zqy4B4kY&FMAT&M;<VJw}C_@M!^|WVY@?L8Az2W|FIGkt;hv9f=^X6+whL1>F*sRjM
z4eJ}Pxw{<Dclvx$*M9(z8XiP<AiA_7bRbNGkpE*fUIa*ewOcJ*dx9NW3Vci-vcULP
z0YXB6s2LIx-1SQ|2$1!!kEi^p6gUm9H<Ivr{fWTyP0W5AkF>?i6~)4`;QICS%f|1?
z?Ubz!^G+^Td0?0TGhVa|5Tb{gAEFKrU78T#L*+qe5{QOZ<5dD=QPqa(xY~0ryQu;D
zQ6C_4{}4ckA%e$IuSA0Ynede7{XAdt0wn@%@CiK69_K-+L=4#x@cR8STObw!czLw_
ztl;p~ji$SNf?$s>s8!q60*Lfm0b*tR5OoKlOCy@1T#gs%q5eG(?GED|sRV~w>O{A2
z?fRzr(U1B7VfuprAw>mGZ5z@cKui!Q_wq?#2fza;Qkuv3kvtJVe6&Fngq%p&>(8zO
zN;m{Ts4*V|V)ed>JwUAwkm4@}h(#ZTrAxz7IFSGDH_=rNMEzGqk#_cL*-fzY$(g$L
zLk*C*1dzFN8BzWWKu8N59=k6JlR5-8GK<VXBLKO)f#-J(=aX##MhCO`(dmUeC^Ec)
z4+T9i>F5>q-ia<JyiWlU7t9io>G5v>r0`4a2m5^0f2GGjbZJMQ**l-tCW0uATj)g+
zupo-4Xho2!hza-uBnTSaM8YZtn#SrPiNRH)xEM)9q1YItl^z5IA<;|JQx3fg9-=o7
zUJ8LAQoVWeU+~TBOD5CZjnPJ%-Mo)=ySpj$)(>yK@69lO9JlP|J{(8d9zaE)FeJpw
z_V*;LW!WwC_a>0|{}c$axd0P{n~(6n>Nj9n3u}@d1oG?$WaVY0VG5))UJ2C|pgLvN
z8ySp2Wb!w~Z@v-9viZem80JwD@WM3$S$Dmk{y0M!2;pf!AS*Xh+%}9Ah+PN*7x{T4
zJ?)fFI|~Gfr~b1*tRx~>7&r?=WawavC8ePmthmUH=f751`&G4K`UBqDa5gw5VA296
znZ8^l5Hv{t7qHMDw1h=?h~o@70|9*u$BBey27;EbV0ksdfPA{JS;k2qa`X{cdx5~;
z^c&gO=3WHy5XJ~!DoUfo1(Nx8zsdrToav8TM;Df^<uZ5f+<_DwUS7R6X2o>^S@*7a
z{a*oFp2(~t2sb0<2puvIj|-$*2*SmJmklE=CS#UKi=G4$9{_;>HzG+Vfh1sr5|8hg
zHJh;53?Y!oPqP9<D>s-kME%h$Wz?o=6GP3Yu+ZfRf%KPA04|8%@AsK(;;bVGH-iEZ
zljz%|K3=c4@m>&`a4ta59)fh%p-WZ>BrvD~fgaz8jX;uNNWNq3KHG~GXt-hm;d-dQ
zW(7!DQ`m#1qdtsM$&ga?T=D7z3B&^W17QL&9YO*j+z$#w-b_&%L-({mx^cnA9YP_Z
z3UQf0APdPRC4nSj5U?jY!-^eG`9>y{@eCKp*2N`OfGkzuUN50AbW0MVmd*xAAVM7G
zKe+%I?WjO}BoM;wh%PKUeRzA2@Z1ImJ>cuEq}y{At`o@EhH#`UkVG^aw#;ZuTs6CR
zVIy9~_8d<@lm^^`QaCD4LS$6+>A5i*hEX7+;?7cl&=MBm6<Pv;2xREaL_asO8YZKt
z5IcdSECPuK21g(~3E=`sXTw-}NG$L!UJ%F~-d**g%32&<by!s0*PQ}}9vaC@cfNF9
zU?`=L25AXF5K$T#x|E>>0Rd4`2}Pu(2WcdvySpR={rG)<-sd@YPVKYL+`ZOb+rN*9
zj7HoSMQG%)-SC(?K;ifVLFlAT>JVC>xY(K`j%t^$5}sfA6*>M;tDy=6${oZL-NJLh
zFeojOlg$E!i+CN9xu>zYJf~bK(NDD67ZV_*W?uSTv74pq`AtElcy?KtrACDGcFY~h
zSY5u+>To<Ph#c~s4diV&lfZg%qJoI%qkO5f?ow*Gg9um{NG2QnWrH|D!4h`aCbeWU
znhz|^G&rWbVjoF-&Rv*9_sC2O$T6%?j#Q{Z9DSw{BpM-10tPVoN`ju|oG49i<~|Fc
z^cyGk;yZFx9O*Q{R`cte31MW&@ImBZG0jt9X0xhD&7$OXcKRX)b_|X!c9-0Jg{vtF
z6?;RJktuDAz*OY*dW>lRPuQ^EzZ0$=*JcS6>=n#3K42!ZnPr^yZ!b)47R86P$-Yq`
zI2NH1)bhSfWJO)PRwjy|KHK9&)!#ndL6VQ$jCJ4h$5$Agunfyr;)QP&Ahmrdw1U4Q
z#Kow7w1)be&kH-9x0j|CEdCK1C1+N8G)O@kFto3(yOc!wnc$u!E@k+hdKu^>s*#CL
zNO3#H*`!|s%qSRzzdsoQZ#0ITb1DHedL)8<%6LA=5+W~s?shI5XSSi%_Q)~ZN>G9h
zR>~h-QPn0unO|BUV!(ud&<+#V$U}r{-H8q8LeA;mx(=Eu$W{i%0PonUo#NJ3JP?%T
zjJHeqxY=KUAb9mJ*5Vs8CDG;MJbdxTU+`+~JHy0uo>nOas%vH>3zU{+7+(TNLUj0_
z2pg0v;wTwJX2O4C@1e+^+262jY56ST!LIz}dv2b1WHJ{=sr~{Q1hL1|RI#55W#wpV
zvhSQ|8&3&PBE_fwwqL;oP)p>jCP3s4g=Z6!ph~n8We8$(Lp%ee1pyr^P+IOU5#kgL
zr+;7e#^DjL%ry*r#^wgh_I3_i!m{}P!`N-vXRA#X#i3ey9bSoJ(`l0r;s0}E1g8Y=
zJd<A02<jhn6T`Mx84H)vVR3!1xPR4PN|ZTu?0e$4aUv(~`;{VkBJkv61yRKzoL=>#
zkKLcvc!LiEL<CgH2332jZ7Fe~Y*<suLa8;t#%w7L;b0tz3u#iyhO;R|lz^h}>QlRq
z#ZvS0u^J78oL#KOibR~r(W$N+BffG_>QV11TTV*h>ss(DqOL{I%;(yGcU+;P>D|j8
zAX}AWiH9r4u2VZgeEf$(T0-sG+ST&$F}oQlc5TwqX14CZ<YQed$g}}EVg7f@LoNSe
z>)I&|V*e&Ie}44x9ns1~iOCM*53Qo@wyz}254)E(U5#VJc@zFKG&P=5ed%fQK3mFx
zvBD;{P~#1KkqSlfm8wy5ERm{k5i59z=hd{StHP%;5JlIV9E$h$r2obFuC~<ky2qot
z&;Qx@4dy6{43Yf4zRKCi$yz^~b~FiNDj~q#5>CQ1W0kKu^PEK@mSfhHp7KFt#h+v^
zK5>t}5R+Gk6TLWg^^YP;?I0d8uKWk)vxOb{loM0Uv_5R!mn?Ajcf<m^msbU{XzAMs
z!vQR}<`CRXJ7}F%9I9Gs3Ozohiut#~wHz-r^o0oJwJg8fGtAUFJ`3W9FUv6HI`}!U
zX}|bB_>|}=Nn&1D&PUzSe_G^#tg^SL4OTMbwF4VTM|iQ3#V?~S(a)y$1Q=I}YMRXs
zEXuhn?aqp%DQo)83g7%R_Z*Gh$H$ojg(|?qsw@d`Ka=+0il$@CxA+4Bo2e1Uy6v{R
z8|GoZ<UJTH-aCdo*q6EUwm6>vQuAmTaT@#-6412+MU?Hs3%m{^{?2}hK7b#2a;Zpo
z?`7~$f2wu29C?k?n+ZA#wK7<e_(6)GeC1*@;(pCb#jL(j`FxADybtO#K7JwuDS8$R
ziW~&(W_^Gf(cf6%Df9p54Z64BtFn1(Noe5{&}q^UtPhg$PC89q##I)OH+?wu_)<!M
ziX6K9Wk*5#NC?8t)N_R1y#)}PaMcscAd|c`1)ya;V)VDC#<?k)U{oVKc=`+yusR)p
zhn?dF$s`D{nwX>ydEG5Z6b_OU|9(A-zYzP6fS@RJkVt;uEFgf>HmOlY&X{i~z0WxP
zEjP<GjogL1G5;xDAjEJLqMk8e|8a@<eQ<ITrt1|1SxSJ_OU-U;Cw_m*lz~b5-39)g
z8oq%9I1OD>hM{CoB&EXZFI!#|VDe;0f+do$+>n~B;TFft{GT!WYX5O?tQ`+;=JMo|
z`#tv5m~tJ0k09-X&ACAkD+!O~Dh%$=_=HkQih019^1UF^n3COyP~cQOg#mKJTfFMs
z9JxaS>t#y>)M&eZ0s06xn~ukEe+qmHIPVq4Mw`_3i*l20qHA@dxORE9Z6KpUnW{YD
zr4K{dP7GBt?z2D&_a;4!Y-zbnngy|?NkL&>w}~2(_XyY)cy5Tt;nFo=rwZ^)m)54*
zO8!}IN!o3Bqm=D8qj)Wi)@b|(n><<L1!Ymg81hs=da=>wdh>bMZhmITK~^Pn^*a&d
z@+wMWdgNHXfF)?%0TRG(@%o+ODw7J&(Ff&<ItS7f8OgX6L&44F!`@v;5O;#(3~S&4
zVrMdf?tKs4K}JeupcqQa3tfkTv2Dp#)cyvUDCp+UcnqpDBDCr`YZmRl)65ndF}XMf
z5X(`-rOq@A-sNb@U1psVuZB;Wz4w(au*sJTXZWg?yHSdf`wdS>|D{x$cK;>Cn4Npj
zb%K5rvpZ9>`y&+=aajXytM(+0>+g!3Wt#f-qwBQwdtrgP!4SP)$u+FGHB$x5oB_&t
z%*gQ?&WtCl?J8}NM6@AR7o}^R)!R|sA*Bo_j`>+w=RYlD6V<USVu>}uEe_i~=Tp<>
zPvQ^K4t#81?ajn3R41qP?3`9#eYU(h?ISgvgs<|$kQA#95Q`_Vo_E;j;J6t&dS-WG
zq+5fBH=M9yL){xO<owUm!Cva^bhb@Xm5omDS+6t^n{7oCb>C(F*xS?An=|8P=caqK
zN0tIY9hNKfS^(1zf$32nYZkMR@_c+*3*QRSbJ;OzNXnDxIGVf1fe)0BauU>;yNO1h
z$_B<2_7h(e{!THUfOozM<C4?8Y@DaRQ!baqY}E3VV+?Ot{c#O8V^QOp-q+yL2x}ky
zQ43MaykP>x0@4}ccy(Jowy+!juh>~73)Ul=@~_8(r9}GnOS4H_lIu^Xx~WY|J{tSn
z>3kJ#6j$!@1npbc6#G)Jn`nF14CHHc+)~-*FqBE^{QS9y^jXbxnE(Q)n-^=P1_-9f
zP@C+K0JpS}HVV|}Y`vTg1b8UHJoHFey4Lx*Zzc?RC|>0s>JhG(OwP#8dGAlx(W%`@
zw4Wjf9Ku<UkAxIaR(uZ$I#QmCoogDM?FH2Ey3Pt}3*R9`72{)pb!t|pb!Ul`n!4{R
zO?FAD-LJFaL&#|DR=F99@Ii6naQ#IA$JsKm$ASS&>(Pd)Mi>a5`)~VBx*XrqDoWv~
z3eH$jDN&i!XE~UR%@TJGnf7Q44?J-<UVW3){tCgNRPk29H2Ya2*~hBz&MGoUulL=q
zWRCX@DKgYfR+Q%Ir!@ch%A3cto<db{y%RNM*PGBH$*|pTj!Fc${XP<`E>*(Qri*yq
zLZ@X|)9_AZ|HmjE@^L7dCQDgX><V8Utz_2ut5gY_`dhOSQOBB;g5F(dRX%!0=Otq8
zB#onipq?v*z3QVuCv}LPI<eIK_Ta5z;!Z&EFZ?!U=!+yBhb-^pNSM;sbmY*p7pjmO
zsYz&@Kz>TxWfz6iNJzb9=yp=5!6!kb0b4NSN`4f3gen}7>F~68ocPRV^TL%dNa`2i
z_bT0xHX!Z8G=|i<;2{f~^GiXRzP36Xs3M!7qEr#iOn@u4=o4&p&lY*9y;4h;GbaL8
zF=0SImIeGP0zRJ=bA&mauR(D~#PvI30}Fxp#Ma<$gh|%eAR$={EgyY&m&Kv!!*l&%
zst{#~;!oCv(e(2Fer9#qq+5*t-aYl>5n-YnIUi7Q`YA76N$xp6-SYLZWuekX&yX2&
zqh3p0d+N%U<)3<dkb*2j3n%-Eww}}!Et$8Vf9X2)Zs8Xv_Zauhba#d4yWbt{bJDB(
zR{UsyqZhDF34Ah)Bdq8X1bhEc8$v71HXe#X!6%&hpbpabT8RP~*X2+ws<i@w&8Gkb
zNm1L8KF+Ap`&tjtun-GoGF0z$Mmc$V5p7k<i|O}4`;7r1t~2~Fr=Fib8Gv(J;V^2A
zrNDk&#{bN(>Cwy*1RP)V!&x8pgjx|{g;+fsLQeILRld|X{WB}}BhC3}z*;stBF?W9
zdj9kGsy~%LjnrISecv;uljK0=iqzU{aVYzlmNP-E8(aUCW;NaxpWra*lUTvGeSC+p
zcQjwqgwM*<GOrWk+eqYPLnxG3**!`A2E0OkHWp%g3F{|RjB<t`GL6Vl_to2`OW~%6
z<S!wx7F;mdD`!1>%uDN82(rS_hfONdn3~*!M)wG<MfxqYXrKCO+c%8Kx{w2Pqx{x$
z-@Umu5W=R|hJb?mtqKrr+Uh^=#KR=bxuvk;xhX2m<KFi6cff8}$KK5#p83&h|C3Xt
zZ6}Rn_lHEO_NVWsnVFOtWvY+6+{uf)LR?Q2_Z|_yiq4q*>Q|X|nryWN-<x&&Sf~>=
zd`FYlXlZrj#Y5u0H9_T4ywYc=+;$F}y_D7hS-mUML^MwDgI7j}v2F<m)zTrS^0*X4
zwHI6JK=0TqQ=<mq9N4Ssu*6gd#|lSPWk5K8Um9&g!^<8E#j?2AWswz1!(vxw*hALt
zuHmUiAK5HgTkeknfr6wvz9<_a;Rgo4#WYhmV?16JQBER<Rp>2qOLNZ>{&2b7hEHd{
zj=02K-EQ~%wiWAiWBl!Ew8$?Y3tLoD;J#m@Apu(iG61q*XhL-ZO<58=hD><<=I0B>
zHv&n#x+C_kSJdyjOXemuTQ8ppta7@H(Vn|)yFTw5tIsBWDzWfWZ>x3Rz3EfkA4dRt
zq{=7QVOdTeONi1uoSq3A<Tb1bQL#{Uj=C(IGZM_Xa&8Lu8B;AX|MuyyJfgKDaWTC*
zZa=QaWUQJvvDk?3w{DoX<ie{jV(MdsUV<y{DWOvZA3u`*_>t|w2O71c6|n#%{K2fv
z6PE33v>&4()ke<E1{3dq&mFJgO`}iT9mSfY$FYaZ&(7_bJ!sxvOW_cc@WLnFnwGVV
z#H!je`@^|Fh@g&XwaoR1Rn*xFNV{Bc78FJhd0(k7CQHR}kET4BEUwp{14_5*`@TX#
zLGs_<i>E6G{|s4H%oszTF9VR}y!(mSit5*(u8gGfzDFcdJmBIbK5{EC%=^0O=$+2Q
zV;WP-ntavo@_)-1w^i@@M^V-&cyLmy$1STAWUqKDvRU&ObU9%Qx6quQtiS#zpAd;W
zmeg{G=c>7FTMC%W1$+>5z3;_I{b>vj@YL;HBQ}aUdyhzCWuRk_DM%<YI{U%nn);{x
znVg64c=Va!L+YY5*6lx$_f2`-8re%f-bS#oCDC@$kMGk`f77SCywuR>t?w!v&w?qV
zc1og#p%mAWo6uECNR0~%4)`buE{26Mb-*j?-;qMZjry$QT1^avam@jxy<RT@j(d4t
zu-e*%DM(%o40(g|Ic7?FYl25=B2(?AluB8Jt7F5zYRqvB_&87b>0&EwM(M{*&sLr>
zN<S#}-K(9P*ZOBu={q24>W8bAe@65{FZXvz#xu6{9!he==;p6sxYi?xy`th%3+VDc
zF$skt39~y6CivwHpWgF3|CjXn^k`L;4Ex`Teognk{yH8dU-q|`!RMbW)IYE-6X4#-
z7LpyJ@%xCi+rB(zhCB82NPkhgMgc;hKV3}7d5?@EEB1%e|DsC-7y;4?XxP~GAq!}E
zTlVonVgzPIG|2?a7i1Zq5AvpO<x42QNKG}$_@83oPspz2qB_Nhf`ilKxfYZ%;j8sW
zGXVjU&zqQvPE%oH)dd9<?1R-Rru7b}E&Ad<wYaj<+EA!ZAF1c)T;IhL=|dG(d|byI
z3`@2^;$oo~_Qjq@?q&pGf9sQ)`6^7IFlH%eO^^`OC%B*?<nVr|jMcnDcdyt2;w2De
zfUgj*)_C7N^x6t?+pma!1UqE(-{f#V>cTJ&21e`Zubbxu90aVGMD5T5jE}>nwNavo
zLV}^{1|;yw@$7!;<OuOo5y@D+YDF5D*oUgc7pIWhvLr54(`Z!JlcYctUUlr*au<1%
z)<_Ow#LlS11VveZJrXFP?{vSF(hRRAa8yUXiz>_9w6BUO^iv@YIzmN)g$T(QCZE2k
zH(n3_HGY0$(>mRqG;lq-uk&^HL-Do$!N41v9MI^gB24yZ1K|^un0%{6Jvp50L_`%U
zTupbDrB=M=@qjoot|P5o?f_Zze!^ez_ryv<Kpjz%II)q%z@G0dTSEY=S)P$(e>VDe
z7(ebcNCGEDIH)bf&>}nSjm#4$ki1P{;Hzsl%&ju`TRz@W6G~SO5-OZOAgCe)FTkbC
zF}HZH6GhtEH12;f1E@E~41If?Ez!Ki<tv)vILpizroefoK5NG|k2!)Z1T7flOmE%<
zJ5mP(bPzSvm@pZs^>NtL)C&v{5j8fxI}*wM-yITp0L3f=I1O`eeQAPGB!26!r;T+N
zC!AWMJ8wfKNj#(7c}s&6|Kphc`xeX*cR)B?w2oYXc%5~x=qO?-aJSHE_MdyODRcpp
zJ&97>f-OJ*!GUCI&mOg6wgNH)P=j|)keq5lz>@rRXg~0^ccw0vow+{!R0V~+rbq-A
zlPIV#^nd+Om`#!l+SmsX&PL{~A}9miz5Cbp7>~xK-F)8GC7QN<6&%b-Y&n5dujEBu
zmTYM5e{6q1!S46UO|aydqOoz4Jchef3`tr=q0Wqd+ct^OCd%z_Y;p<B2q~P{)V>}c
zb6Z-C3M2Rc048lQBvEf)%;_@aj!XJ_IKjkI3t)WiUaoN8*W*=15)~1N#P{?<V99U8
zy}7*KH5D@?ahf`i6K%l()N)V=z#Ziri<~FY0)ZcFAE-k3V21LIb=r*L>Ei^LL_N-*
zY#Zm9&WsJq+U+)7#2-}gQbgRn!b%;Cf0YW1;!he2Ve9W*1}h2Fr{M*D7}`8qJFAU{
zQXrdWk!VIvpAaA#gLg-8aU{l!ne$eKZGjdU%ZdTL%^zSY9^|t0bs0BroPS&P&lxHA
zSHq)JxCe8qvrNlkc)LO1>9k(9q;qSbX~p^%M`W!s5vZcjq4_Z<2ts@|q6gq0GKPy?
zp94`e);*0d&D3_wFW~naYFu0kVWbuh&)_AK&qe&3Te16a7~fws5JyH8ezd<U5dkuw
zVmk$}&$}qJzS4giaq9kA6f0@ll5WmOrfC6)Lyl@O--zyr!NkxABw`4Ct`4lnMfP!E
zRZHjg-+~~<$igqr%iDdkm?B`)q)Brql9;nd+-U8qK;+^sVAoF*yJ!h`xtNgVexq(O
z6x)#|R7DjN`J_LVXl84GsZb~uQ7Hxn+26sZsc45O;-NfT9Hfk`6G7MSuQ@PGhBuq?
zf4EUuKeCmD_lN5f^rf4G&G;|lmwTy#`t_ZeY69gl$@7Gs-ivE@uqN(Y?)P~|p-)=0
zj^t!S#VVPdevOuxoEqsNNv+F``vjWe8Jj<($zXG+IF}3uFnAH0CgvaTkN?0%IHCYf
zvdb9}Ojvats}WtX?8anv?Ys2s!W#HWmUc{qqL68$Q|vJ(E^)@OSKCyqJ4*l?O^rO1
zpw#08untN(fcgP~xQXS!LV)7;P3Or<G7Yj23lcg-KKP$KA&giX$cu_&AG2efDYOKO
z5u^LXAjtN>WFRz<#_Rpqi3AoMz{b{-ardqyy12Nx3jPSmg^gy!co#f1mxF2B(RhhD
zrHlGF?@biM`@Kp1DL(QWqUw;NX##WrXyBoUpc?wHxT-3Ck`U~tBFtn*>A3Qyg~PN-
zbD0=l@}%~TjHt?eC4oV=;_wp0=BJmCMe7T_Mg2kvemfGXWEE>vS}=Rf2o>NrqrD`;
zOGbP|5~T^Gs$lFUoK%MiwqZf%k~b^={r>3u$iWFuRYWe@Bg)y-{!U@|L0lwnA)H!8
zhvzB<uSR@>3ir2>^VLOfy8*vOW>NI0<565(bpaPKqG;m>?aW!|-_&-NRzX3*;A|e+
zZw6~eB8QQQD(f@{3+49FVg-Ws#GR@a_K%821h7owIv+SMchl6Q4sz4S-?uXqpRd@`
zmc8v(&TY6j<(uX7_r-(x4d=_NB!VO(?X9_uoz*>n0#$Cy!XGZIBn!rXrjrJjJXOD1
zkJV>pxJA<L(IB;26$j@70&uVUJ#<^;o@XHnNeXuucL&7=pkx?P*weOeAmBirhb%G`
z(7ijTqbuh$=>LP?^Hn7MxMi6RvaLec#aC1AmoAqfZLA;7!C}>u&In3&F$t@rT1qab
z(L$w2yORncgH)AexllElk0oek8o95R$9iY$7fv(<(Ex98YvY<qRdl@Mx7QD0G(OqC
zVn4r;v}JpVk7zGao`uP&VuwC~>m&HfAzJBPGYg+q_#TMNFt{TNUWrFd*cm2)s>bFV
zRs#>?qg|^WKtoO$oDA~fSQ5^xfGA4BBF;S(5U?*wZGDFwLm((sXUnlR{XR8DdT8*e
zCSWH0=&|Z;y<AjZ$~)s5l>1_<Fsd719r1N!VH->C3)1|CuezjJMcOGr$-o}<F93*C
zh83`FQ^Y>kV#T9;BQMUV--8swdXLsWZQW0zMo?<Vo%hn<G=vusJlQB~;??Q>xkeG|
zZ&l8H8E>SEWp7l7(G=9U<{4?4$ueE_;-7QBWJ&Y(wox{6HXpyHMGW`7x?>}<P);S-
zUS2i(vC1@LBWsi6L-O!pE0uZoP7wQ27#i@ttqSDx_>?iorGHuq6}^O%`$FyLT}n`F
zm0_S$pgT<MXlcl~U5%r5;bRdW^YzSsuNLj=N+;5${QX@_iXy$o=5Dny(;@0`v*2F-
z@WEiEfQ_%=P>oT_PsQZm!CvmH)5Cc`zvHbse@xiJ4zpv;ky;@nTJPg|?dRIFwYG?l
zAEStsI><fj7Z;wC_WH`zfBW`YXFl|g6vNA&z2`yKC5qgeKe1%nd%+2*Lwj>`HVsPK
z=YKXfHh4PGk%5D8e_hcpu<u{9?mn{SR^GbVILe{Ww8B)_(t!OB<MC}`JvM|nv59+8
z&bCP)a-xhd^3X=VjrD-3j~&x#=*9HYrb++&NJ&O{E0sJp^lf&%ksdz<j@Jotwfs#t
zai%EcXqLX8E;V86OJQdkI$T*tuTB1{<?vYu9=quXUIaac{tNhP(8d(rI{|;cJBBdg
zau&>HIx8haNHG6<`}a@~$@yyffJjU}SuN$Y?mtfqq00F+TE``kukBylR7HDlG`LC_
zIn_a8f9Euen6n0p`p%rC4MgU?0?T~YpElWF8PFjQty;pB0j$h+vu%27j^JzECyte~
zkW(65LkV`+l=~sFFP}h_)FvC$Vw?KkyWzL*u42J5b4pbaei$^s&$f*fr6s6`1EjSW
zuZW#)YE&Z;s;}q#N$Xe&5bXW!;VQq93lOTm_&%aHj)4ps<e|IR+0z~)Dr9u^V~H!G
zNItZAj4)B>?I<5BY5|M4ztpyA@|6;4UzrE`_>Q(&x%;!i;!;55!4IQ`1Iu_=o2cnp
zb^#^9n{M^PDYGV@e{K@fY)Vb!BN+uBL99|CVW-E&<6*o{Np|vn&|{5<6PVaveAFWm
z3`jbnRh3LO>?-~d<5vK?BaKTFqeE01bjDJPeIRUYOrl?nVeW<=xxM+h$HL?rrzhAz
z6e+Npw;KTXW`EQnu|$QkAbIYqOui7QkRWB}M#()H)@Nz;eggvh{-csn&-?1`<H6!1
z_O*&w)xRm>@6G+@xM1Uq^@KV28^*tDw7KHRCW_pBvZjhMMoYW4cl;Si--Mi<kdWEG
zH-MKe+pPv9JQ3nVNh(-y&D|mZn37?+UGD~%781(bJ<sBGmv49~;kPpycpcrPchT{`
zS-y%PVG9G<9^LMaMO<DXSVsR%6^79PG8$2_M0#S|N!c{{f~eLrOIbFLcmLtZ5pc=g
zLE+@&p=F!g7<vi#Rjl5M^F)}exJ+caDk)-gQM~u*+eMz%NborGt7LV8ZVwq0Qz9yp
zM(CtJkyQvPrL8)FKxRhae<6_1jFl>MEIv*@{Vhm46-J+@GiV7X0hDDJ10F<S^a3)^
z)coAKXNNE|6Qz|*LirY@#L}YV5G=?XDyS_6v$)H8Es6F;?o4I3dB3s$jopjFi*ahe
zcPKW5tI(^k+C+o*kF5SE1diou4Acou+CBjCm9Vpme(T#Z40)u1q&?+N6ngeZTgYRI
zD4`tKHG=AJ1f`ujfNul-MR91!1iJnMOYf7yFsu2**Ne<&pW!gW4_i{!bt7LcgNE(`
zsKfOy)R@PInjILc@_X!kEgNKdNw%4ka1~4i;i?a5r-!q{aMB@?7Qv3jdMH!P>E(eJ
zSsi0@{13K3n0E9+4J9FBY_QPp!hT3#-QkyCpi55zr$hW^pB!2)VUl`;v;q8$WL(wz
zhD>>>Io<70X#`i<<0$#?PP!hnRxSX)zd3MVUfpaozF(3j!C2hG)sA!`WbXqf)P7d!
zP|W2MBqMxyA}t6~bbuVYi@P$%^{cQWMS)TfZ1!s^QUX8vWjG0zzu9^Qn4z&Q{~rC<
zwXwEQ5nv(w`Qbb3(Dp$|zO^34NBC;u7+n13wa)}qtTWF7G4Xq>oe45~73O9kK#1U`
zAJp~sB?{p+sw6EE>#RU$hF=jdq=A1=RNKv>U_ZNls@kV!_e8aKbLT!1&!Z-iAM<$J
zF7jl!SnAM1ZGs|UvmfBbRM=s+=YlWlSyf;KbUD3`fC1&*T*HJNG<A>WFKL@dC|$Bj
zGN=<RO8HG#<(Tr#@Td~a6#I@<TZo};U4Hm(!~y${kdrkfqWFcy2dyy|gx6$wvX^yk
z(_g+edVZZ5d{O5nE}NCr?;d*IpVgnpijUg-Jm~e}`iQ6?NoeV0gM0?MI;F`&f(<0O
zq0q2bH?pMTOs>(l<zsV@1S#(jEs44RH8awvdM5X*xy#)$xoWwGF9<k?YmEot6~oz{
zy-Jv+12X3(86cydxLa>(X~6vlIig^Ne*#L22I@u#ME53Z^U<)nLW;B>I5B}a`{XDM
z+^p|@;Wbxe&U7H~5-~LohpKG{YSEb<Y#%{YkyB+H0wJO85PR0huYF=z@@ex?TD_QI
zaV`(@S5CA*RHcz_j3r|q=|^IzvuB*w=06Nvf~|)y3+_HOjO2g$>umw^BPO>;x76is
zeG~d48np&?VJe>=3gjV6zN?n6f2>wa#Bk*h97Dn?8c@ai6e`MyFaynr@|PW3Z)fx5
zKzdehm1&ml1Rypgl>O;^9mFt&+LEAM(=Jk1t#nIm*-7j(laHknsren7_VACz{+cra
zl+$LSI`upKc<V_vCpPANPwfdeZllsxFsEi3(VCBN9{^Hd;`8s){wLjtvaEd=5J@(m
zA2r@>ZJrNmyaoG)137Ylo7i{T1v-g9gR2-^3p?|<>vWWJNQmM%XN9AMNT=;dTC6{X
zdeuv=_nL8u*g9Kt9J<u&^L^p|(A}ET5(mJayeK^O1pJDRqqPg$`ap(jgRBOBu~(ir
zG5!rglHUW!k#|C2uhGA2?@MLxYfrfdUNDix(F+GV;A1VVIqd2<Hau<l-&jx}veIhl
zkzR^Jj6a4SBoph6MA_BbTlQ4enUlV&dPwV1OosJD9&>y64PlQ;D1g+F%XcN84MlId
zwBd-<BU56^udPL%yenxqyKe&gc7oIZB$xQ|ClX~&X_q+1Kh0_M!-)dOiX4;hTAJZF
zH|>p!WkxN&<HV&9_-xyl6GQ5A+|rjG(2siR&_u8dq@6j}N&nq#vUw?5e_*L7?-^EM
zi9L+?8ot?{Nl3n?%hfANtAP66-uCwser%6aIMhKus{ZW+v>iWNvXiDLF@G(vQV)Fy
zekU&v2$Uf&8jR}W$`H)nBW7E9@*jw8>v9_23!Zvoom2N=#H-Z<f~8{VZd}FOw=w@1
z06@QwY<v%32Dt5e?4f|gf8b{7AqzyjR_N}kKg%Z|E9{l$uX*$!scfK_Qkif?APM5M
zYN40}m0xfv_To}B)Fbfh+0&YmH8BRi2HWQoG8~?Mj&rju3ie@R54aGD5ESTi0HNq5
zVH&N3B0_WxNdc!%*G+eT-`@<3+WAF|K7?vamh$3goFkjy4w}hRImTHs(yPDl{y7GS
z3(A>MuJ#ML1;q`;e;(gzW?OZb%@JnM;c4Cxk^l2s9Yhge)5FhI<nJNe9EAmWGsFqB
z!qsmLfcpU{uv@yR5k}8N0nbX|$zkm-Z*rT*C+yDHg81yJk`&pC3mX14&-JIHRh$u#
zW=?73iS(_^{@HbR(ZJQor^So(@0D^`&V^Gv@l(F9<XD|Y57D2ph#y>D<xgM$zVC$+
z-)F+bUUY~r_Q4dt5Z=9vny4a*?Cp^Gyj6NP<iEbgySR318Rq&b_NC+OO=JI@dM;0^
zk-%_Y)1riD@E3&a#Kh`*7=R3Tq_){qs$s7JK~kU<3fa#K-~Qa6hX+JJjWo5iU!|Ud
z(?8ct*?b{RFEu)`mM*42w^%{mTYj(%rFC+j`w(O?EKQ6`{VBYFR<>e^T2sJEJ*yv~
ze}IHoRBCSozBN1>wB3OoFULVwi)|<oNDDkvioXKhV<~iTZY4oDz1CXTa8Cg6u`~<t
znx_JW#}@;=Tcn>&Ca#AB1o@qGLXLOHE-_D<ZhcgQd9vu?oOO(zJVVs@DSyL_xonui
zSMF33m(FO}#MW6>)zClowFEwz!nmI>+*GUlO3!iO*F}QWj4#gukFyWj+Y=(wKPZ|P
zH|3A9l{B(Tz`{IYu}7Do5?AlCL(c2R6O2S`=VuLACk7HW^a%j~mp6}&`5@*?fGXw@
zMvN460S#|-jsV~0<HTR=nJO;&YBk(aB*)iyM-CRN;pWYpVkWU7Z<(aPNSOs)rXn|L
z+QTKtvM*;iyk;8yM1)eQL1QJoxYJZ1-dBDj$ngAf;O^YK6nAURR#zL;sfWMkT~$fM
z>r=Ueze^gFdV2a6uX~Gn;S`UxXF3cH9LDcJoDxDSnq}DNUMy5h%nkh8#6iQomzh*V
zPjcX~KYvcnTJN9PH#rQ#WzXuXrYF}lBK)CPA>Z+>+yj+nzlYy0u1rfSw>Emljcl#v
z=I7_;a_PZc6wRL(*(YGmEA(rf>L+r3OSEZ$5;l)1VNmevXntc79kH#LVl0xDwe>bC
zRCyT_32&_RzPvse61sb_gM+r8qKw1M#guahmVHUeM0mR_tzQm9i#*3~6W{!6Z-M)j
z@(^D~-IjV!qr1w#gf|}%V^hSuUR=yS*%2@`3=J{N^!5q-aaH)CvgN{E?|`|sMcyL}
zr7AjpVD}6e3Go3Cmv5@QUC#DC(_H;tw~`}$eeEAq9(tYA@cHq=-@i8<!$Aivt!5$D
zM?Jsc&5xe(4rZqQygB_e-g6MDP<(#Qf6#bNuExqL2TCC^5Ws4CU~qp!YODFggLsYt
z#NAZMZ~tnnTF1AyC!xJb!R;*s(V5a#!<N)FcF~4x`;}iaU;hZF`N;me2$(Tc+Ht4<
z$Xi6uFw#Q%0KFk<%QqSI44CEu^9KhP?zLX*Oi5i$zz}~liLw9v%{juq22lt$Y%`oQ
zt-=6ZzCL#bt4=Tahb2+C6G!{rm!pfNNk`jI(1qcbLM^3ya+<nhJ+!WX`sLjj&)L9R
z523Akoq3S)B}Adk*8Hi_te?~2AmQ;$!bhYkq+b4cm>py#$DQp|3R0*r;U0EzjDd`7
zmqO8}C%GF5`13U2_1}2qjfU-w`%zy_SfkY2o#JoJVvy<f#J=m@eu}`VvEdd82(Sza
z{N$@1)x^XkZg3!c4PrD|0Czfj`}E}(5lhn(r+8zNe>cR^bQ2uzqL#O#ke?ZJNt%ek
z3kwb!gJc;ZvYQEvmR8O(pbppfqYML>%0!E)bMFdT@Lta{mVMdPtR(qt@Lsl<ruuFO
zz7`nttz?*gWO{6L6J%Uqc*DlUApB|w1|*Z=@U;cSH(>vLrImY^*lhjY8q)7Q5lVBv
zqpG4{M8zV2E!qP0;f_{UCZEtl$rIlIH8~eYE9pV|g6+^%!@(>hR@tY_Ox&;uy;9Yn
z7bE^5+qEkWU)SR!o0p~a!<i2vKVaW}^DfMTDlglG&{I1`4}ZH54^MQIlqKrYC^1a3
zEDeq4ZKv|(Rnx&_$yb4~dg}lpNd4Oe`P%@9`@OJPC3*KS^XEXM(gtSuV8=M@%N~Y4
z-BsC%&Vg4=IivJQm8+vF>?6_E7h$vPW5@ZEUW0qikvON(1A(9bz}Qy6#3<@N(TPu$
zCPq5<5<LH^IoFB#82)e!8@6~^6e(_BT67?gWn9LiWv%r(vVfOT{XP2vc=e4h^_Y|w
z&PgavbGMH=X_vh^-Gq=P?VZOLbv6#E+gz&<sm;$&0TL?REwwv8rBFYK5Z~C-m6F-C
zRR?-JIx^qizb){#;A1W+wpXBfdosjqbZz<48H_#IwYj{N_%;5k;-RwS8ugZ~9_u`g
zoUz<06Q7;94dMEJfAQ)57v95n*(8tbB~gE$K-{d}G;3S{VNLZbBTaJ~R?yWG4gxJ2
zjY{%%xkr-tDQMGZXrZk5OeU21(w}AMnZ1}L4mS!oK1cXF(S4EBAxRzmq~|(x^3u)?
zkNEDrEfR?8jCnL}xNmQ&XecRYJ%;B-oY1KX|0W+F<?LrzmOW3_&=xJeSX}c78tH?%
z%hEZTmsFpRMbhUtIFTfTio1lF;`Wl~ve83kAWv}A>2Or~)Vf4S<wO*h<P7zRZX!{^
zUL2E#&OMX+K||T}UD7D%6@zrn$y=OSo?ZSZF6o~EMV(Ld!>V0gpOHcooKO7}q5`z}
z*q8^6uXQ;ou$*?U^lmQul&hGZ<0Iz@rncm_QuXUjz|j?a+!!1~WkeBKOyb@LPp$}i
z>lH`K$??ayhg0VfMEeJUJ=^_$LZ?bu-A=;y1m3XClqOnu8$JM3KdC+QuP_Bhhn4m@
z6dXPIkBglKVrW3D2{-&c(dEyAbt_DL76CE@vCDp2a7R4dMQ4<N8b?pt-G8V5(xX)M
zg9%<D`eY5F1;q4;p|;xkRH%xbbFnYA9F|U+^T%?^?ZdyLet5$};(q5qC#Y3a&Mlyb
z@jA2obY1N-8A5b<nV-EqlSpLd$Q*Bl;<nH1)^quYqmr?2llA-0yXpSmBYj7v+)%3r
zLKja?&XW9kNKpd54)%>QB;{-Lu{>--)W1_0K<d034OKQMGJ8sUp@B`CX&jQ$4eQU!
zFr5ix%X|o>yq6_51%yQqF$O*hL*$SZe3Mw+aKSkGz}#)j&yKWm3d_T<BNfG@@Kdym
z;hd57o>nG6Nj5pxS?Or<Bnn+DXQG?<N6kL|c{Ti=#H*AXA&=ywyO)nC-{_M9O5Vjn
zQzK4mG)7xmUrMidAMAhlNY(i<u0`Z!;AC#^n)rQ<i2Y}0zb{R^o{>Rt&62;i`r~u`
zzWS4|YM$-lpgvN6K1K=)Zhp*wj*^?_8Q6d4H-(_}^^4sMh@Sf!;N9FWyA&3rS@CG4
z0PaqiSJyz2<#ZIR=*2ab9_Ts6F+fuA1pnhwYXe~*Zu12+rJso3Y4AA-$~^YRcL``w
z8ORnQ@pgbNo$Nh71Jp?J2`TV|8PHMv%@FT>2hb?3f&S5W-Gq;AA_OWbDv{ShM8tPZ
z`Y>bBM-5Z{=kNO-6#Lb7%hLNcz8g=#fDqix_#cl<VO;sZJHStQo<$lQ<R^E!RKNWz
zZxcq3VCuK_;Q-N;?br@x&LaH?=IEpoBA_b5r3!&M^$-J>#b<{#yRl2i`1aIR2>9^*
zpvM+VJGOOEk)AwY5<-b1u`&PoqWlddGLexO|9)JW8Gau`MG_$wXD4HplG!-`QK6c&
zN&*w`36|Mw(sHsM;A`dNKYi)tRzOUA8I=H0aVk<AkOw|b&8pWj#WF_KIzm||-~A&s
zOl-6{R^xs|!b*ab_G7@m(|i@+7#1ArHw!66sVe`+20P}3s2l_peNge$Ut`iRhsBC;
z3<Fp-snaNJBXNoNPl;~ihTe!?dzZB1Y>3hHmAIfyjP?3wV%K{_DdDWIk#ar%g&CA8
zw3ra$^ihi<-=ZzkzVzLSMpL7uuOp@1?$o~SmfGx~Z4nnmKH~rr@7|M_Tiyux1Vac!
z`}RwHTdTmwmc?m*_W0GyuT9T@7`enJsz;){AxrG3KVq$1*<x7+;0T+zE=MRLqU!dG
z=`r=hW4wbE_s^o|i-EH<<Y0cn{^JGi>%FAbf7kYKO-_@cSIoe2g^wCTL)A1vtf7%(
zqML2>Us1!nkdm@*=8)Lx4u8oc+GFRt(Qz*NB}<~(@4e2i3koGDT~L<mypJ;Dx`ivS
zL}ckO@WL>W_(!4Pf3`?xA!A77$Sr*;kVF|gGLs!P4{#=3;jDlcRe8DF(Thxet*~JK
zNEm&@KX9i5e5eaq$}xZ@?MN}tGL4G8jWei5cimEF>$xAAOo@WuWF2!|Yx?<S3Uuh8
z%e|am_?tQ>M1)7mRg(td-OhF(z0UEfGlq(>gV*NVvEKKl_e~>q%7tKDJBd(iOo{Ym
zQuE1F2qhABnBr~hpvq3r@iLNn6e}V2fk2p40_$_tmG+vYUh2WxVsC^Wc?(99yjyda
z;E*)2a=9w^xrOVa@%QgV-)68UnEwkM92|UA@Y+oMc<;|!rsJ!DLp&p5a2vn=1Gr3J
zINf88iut;+PfX}Zw=?(f-V>2oTu0h4nLWMNtdPmGhvR-nbl&9F5i^kBu+NQ^543oh
zBTQU}a(;EyDEB1okguCn`HUPL5j?qmPoE`mcdA-qM3GuixL9}v?>STOApfFS#^;XW
z+<hhc-FQ|XKlokhp3dsu&_lubxwV08)`6@5;s=n}u9wT1=6?eOuW#_Yq@MA6>6TM`
zOH_u+l;=@h$Y)#-Ck^G`T}vGu@x)Bu+p61f*O~(t%R|HDD4&Pd_DVhz-Fq=*869}M
zxp6sFLGBeJf(m&HTjDw66O=$ord>T^*$pEN2Y!hhG(X)wA`o8rsKQKWlB!}~FMc1{
zc{foHH~4;RVQMHw1nU@-<^3XGHBX5hbIpa>`>cX`{n=(Tc1}J&X`8rkryYnf;Y>rD
zbu+Y+NAaSNdJfN2PH%qp-l_1ufXQ;+Qh6eicwv`xq6Ok44nKe2@DunR*m22e0LS8j
zEtCm9z;+c-P(aBA3#gHlV^_Wt8SF3bkJ(%{C|)P0#M%CrTT@VVs^}#NVZIv`sX(Bb
zzG-9l{WRU-b-2rF=?KNdhD-6oDtr+XMJuZSyns*8fnMtk-`5QLC0p1u@jX0?GQJo$
zqF?43W}K`^Lv}A!fIurYSJWwiI?y?1Os7>&7Rio^D%!p&&;oWkHxpNHM($KB5u-QZ
zWU&5xGb|YUNAnXL>KhNr<#W6U1Mj2OG+aF1GQVkKXaQvc8`+SX5$q@jQ5@;}#Ua1O
zVj*>aXtR?w9x*!j&aY8zV#k{aHZlT)_b9*$<Zjz7K8!Eqk!wO(M`<-4@!xiN+cf-M
zfIR!Zsk}CZ2+%h;wXQv!PS>8IL**_;A;oV+{iy-h)mw8jPerL~0c=Lb1YovJeg?y!
zisXM(y0}!eklzPlt_hgdn2<s%T=*Tv`L(%?O(~h%;2>17K+3It0%4lx$zJ+1Cf$|D
zPy|Jy(!idQ=@3=P^`eQP3_R_Kvs*~U-p+wuVh1c@LON1oa(MI$nRMAs3L^~=9LYM*
zZejv4Aaay#L<#@$ba!p?K)EF}<T)-OSSYc82;uT#Cu;LB-HRS=Y~Bf$Y=EoI<|J@b
z8CqGpMSG~U?T3_hHg{Q_$QB6Dhx=+A?fv=Va?l#8U1L`7yy{$QfAIM(?*fNo6>Q{u
zi6E8axWp?evTrHPkIL*;^>>_?(<#x^KDT4qY5J{y^@H*xr7>cJ8kVd#L9p*V@l>6y
zvT|m(H(oeXDLi1d+{8TZG7105eyG4Lv5gEp|HH|J-2a^%_FYq~ox}FJs4k7$<JoX1
z@oH7Lp_iWhSvi@L*wbIiOWBF^^0j;w-3)>hVFrlNhs^`EEctqXKIMwI7VskG(<I4g
z4-x@jQ2#hk$!eKQs<PNr>JX%|0T3T6xWcXlWU?D=`lz+<2(6saQHfaBe6Owk!}3&d
z=FNSZ-C6n|f@50$gqX#)2S*Ph3JwlG1R4)Tf0p^;2mJxlSk7m7@?reHMNWy3g{fLZ
zk;D)4<fnjKQ}!LycHBI-Zf$730TAG1jUZg5JbkB)4P;yTDZn|RJ4DhP=Qw2c*tI*|
zP-iH&%_Js(Me5fg20{OD|FS>Ie&Gvz{q=k>o{JLG#^GK!?uS(7E0;HUbx!0>iuHZ5
zhV6S$+oXQ`IDX$B7+g`-1l8*guU<Z(;Ka7t;sgj+<Adz86qNU8$e7F?LR!4*C8uFx
zE_Q@5<nmAH2FnhpPF4^s;!7O&s5BQhSEx-5a;sk-Z*kyV8y>`c+BwVBxjizkl4&h%
z4fwD%62ch7vDqf1{BottD(m%s*E}rV{ja0g%3m{6;A+GNn8>aN#LN;O!CE<9`Afa3
z8dk$p1;~Vb)rt(~419;mWyiid<@*a_N*o?p!w6T|Pp>q5UOop78&W`P86BNYm-YAp
zDNEQ=sA%%{r2=B6BfgmA8_5FzTk082zKX3jN&;DWO#oF!YRnk!D&?PnF!nT^E!ky+
zdy1Rpjpu!H|18AuP<fR%D^)V0{uMY&*fT}Usl<f}s)>-qql}grrA0pd(4s4gtqxZl
zsYanQ1qj_lDx^${&XDh60qmojrpX?K6%{5bmd-Ux@54B;_gw2z-FZeTsWAxeS<Hl8
zC>Iv{RvTt90Pl7q?4;w+#T;U??ua@h=7YmPgEe8{K`OwBRowYF!Snh9<*uid#+wrG
znbvCWdZKE@wTVSWr4MDS0rKvutMTb0!pMN91h1-_oy1zJN>VmMpN&*=VRZTlOl^GM
zz$iFs!0!xw0sYU5_rodP!B1FwejBYGN>k!6t{=|`YhiqSKUlN_uQtBv{dC;s{W&0|
zJzBvVFENLnDfyxyf=UD#6h|r>=xB)$5=)JFTPK1&B$-EgIx``!V^YA^eIkRo8K50!
zB*jcAF@i<RN}QbKuiaJtdsz+*&8N~2ZXhcnmQh^EXD(1vf?KDqTW6Q_+374?EzvBc
zeU!88PE|j{XK=N7)<W?wiVa6YM0ojTh1LD$gSXTZ6-JMxHc3IwRS~7#so(BqTDZel
z{bWt^-Q!09wroPww;c1D;+>j1Z&$J$M$|IO#AU7=fh0n+seigjKKuGGnqSPPT_)g5
zZ;t@hk~$n2H5)AbV6w=>II@9H&_C{GRviH|Ko}MKQJM2%1wPL+$XD=c+vYS<7;&%A
z#6EaIr|mo3GZ0jG%X2WXBV%r(Mz-HtF=u?9uHBpl@NG*wi?jYYi-DGeB}ViEs~ew5
zH94qtdyhoOqGVwd_ywGSxuGAwm)T7V#om24t9tkZ+9kzW44z(DJpHe$r*1D!>51Ej
z(1<#M{bReT?>0erQO1PyV-75j)mRT+MXEy@OvN&x3XSkNpQ)#c{KDw<NLoEN<7mSC
zycEG~Kdl?4beNf{;Yfr0J9O`sdw0o+a^M}~!1mA_BWTru@FK4}zF}^D-vc6=7(U%*
z?~=ZNbhz@WqjZGfOA<G2ys%Pp9?O5<h%q^mTG?dAK<&RE?WoNr9=6-N5X1%+_N8xr
z%OpHQFC_mKh164FT-_e#0KH%AiEfpNICt&!eZvjdu|2%ENrxH~vH3|*Tr(1V&u4}H
za$+=^ABBqfHEFXQr+0e^*!fSp$G`e3qvK$x@2i*mNOAQx;rUJTXE#Ge<jMtNeLbT+
zY*eiz1{}sV?5Y>}Q<$-@8w47ZWU5vwo~^2H*6nO;r#|r&7Ypf{&f@v^mYdPg&)(v^
z=f9!8rrTn{NuHgizy$kC#gQ$141`;vyvm)=xAE1zjZa9Y27%137GP7yY$xKA%yBgV
zXM8(_*3PS)nDEeAYdjx|^XBPMS_<T%+FS4Vs!u<vVm}Gmk6e5xWRl@3v!eWQ3zk=%
zd?L(6Y5^n1?iA(L8VEDYm#>%{8EMMj0171+;+MVbtcDG|{IrWksQ%_HzU9yze@@~%
z#Ug5i9()s=G{k#~`NCV|0#Y(ZCK-3llp{uey{h7nr)2p(X2s01gp9npu)1k81s?8A
z2EWP)*he83!)dizg<^!!eq~i;LCR(&p(+NjDdGQb^*kqt1AmJxj_lVk(+7WM%;Bvd
zE3pZy3L)oo-Bm<6n6u|Q%T@7D=_MUxd0}6RSNPbD1*4PMhoY<GZ>Q7>@VBR@cJ_@f
z2dCu;1zy+@5+4>+y3HB<(ED#m5ZmS=!l)3MP=z=?R+zdm_?Lb{6RV3sJ?2<~XH-GR
zL#1?%BAuEeP4JmQ(e}4JemZxqpKm0Nw#IW%mU^j#@+40?g0Y-RO1>D*MKQ;L6VB8U
zDuhMbWwIm;?d$xgh&x+$94HA&m>zuyJ&V)3WP^@6s*pR!$0pQxJXqRqL`4%CTyqxY
zzYK^D+X%r;@1L6~&nRyO=39mE{~?i`wis)y@a_7b7d+La|Dt^9LquPJEtgX^fB%30
z3o+XA1=8>J@{0v3<}fS$6-jmTP7?@wy#{blxQGFpXmDIf52&<4G}}YTwS7?vH#_2j
z37fxeh4{lj1zMa1$17!b{H^obU6pyB)*Hcr8Ywm8ZfjQslJZ0ql;*K3$@^ELBuQ#=
zvK6MVFsudXQ1HmcN-|l(UwVbnn}<v>NqG>=MO%5L*Nxrlre@j7tx(-#IWZ(eb$w+;
zbD3sNvNx)7T;;`<?bh}g>7{@09)T?zN_nv*QXN^GiV6Y3NC$bTR3|9#1??}15X+UI
z7Ne)LxgrvA*w$Nc&hSphi7uKCpA@lN4i^2?cRe+n3)CuvE1gPeur}`qc_yRJ8IYZ3
zm~U*cKat@U=3%5a@fn8Ps;uE4Yi!T|7HCzFqMTg!U>Su50ACMQTn8Vd8diN0%sHgz
zi|i!+MT91rnx(X1CxDrcDE;W<MNq^ZfWSNv`fDdZ&akV6{I$3WRw&O}m{Y=zsF9sk
znAe8f`=H<F=qP4FC{?J;4}>fh6$S>=#C|b*=6j71@`Td4!=Cs6$CQCuXy7jlbHR`O
zuSSgcUfwzS;9VkJWKwRFx@(XO06Sttc0R(~N_M7fN+H@L9-x#4G)|{Q)#L2r=iwNC
zLDU<KIw&$%bddS5;6eEK=a-S0->nYksT6$ylr0{+CtIbuU*SR}(W7J$MD>rSDx3jI
zrDR8D701bc$$YC_uThEA`=V#m4aVI9MODsCw-ccH-(r37A}ACiyFAa`WPHzWqrfLw
zD3WE=8%y>?U7R7#Hn~h^)32DH_L)OE(Xhp=6sr9t7>PzK|A)en-U&t3bp;2{GU1pr
zt9;&<x!Qjii*D&3xBfyLnFGOu&7gtjX1*A=rg^GwAilF9wGJLTa}qtqHDdN-qF>=a
zwZYx4E0tS^)i>}5Wa$^I=#~(S6Mx`EXb#Ny*rqk|og+Itk89nU&M9LF<<KA2?{cMU
z(x$^q-4urS6DsC=j%0W~J3W=`tBC{hKKCo?kJg7K<9dcjF`FBCDXE}_1(WhxxWBT7
zUXj{sJzsf}gsMm8CGE#K26#1AbUV2%4*V#K)~~-VR>)*gsfaieIpd+L|Lg3%|KaMs
zu;FQ#QAaNc4pE~Mq8q)J=z=IgM2p_b=%Wu2A_<A!L$n}7FuJHg^d3YIz02eNzW>1c
zJm<%A_Bv~q>$A?@XO*j2A60?*M5?7@5;w;77?8B2*gmw7iDMHJ7;A)N4N?n@L)2e!
zOe~(LqlcE<xF+8HN`~XSBB*-P|9na!*1{Y6NrJnr?@&%SaMfcqBGmumj4Eja`s$Zt
zc@FMvA6sELLMA8ccSRiQL`5B8FHcjiq1N!Q;Q}l6lr7^*LaZw3Fu3AJUf`h$ddNC<
z-#GRqG_?UlH103Mjtc*CGGJ+E!;74j)Jm0g@O#@Wl~qb2@u9znQ^U0mqF)(zWf&|f
zw6DlZ{8ayY?VGGqwt^@&^@Vbe1eEQo(X6Oc;~e$Dx5^RJ75vL8z!=|Z;l?PzifB7x
z&ESzvzN8D@L3XRiqz4r~q~zYCB2RhcSSma!4~@u?ID82ny%K#K-gou7OYrmE)nTzt
zhG*)e^LTde0^(}OpNxNc(X&c_+Wy51!@o#moTqy9dfb#@RblH1H|i!N6Qa&~UkHzN
zJ$22nf0fHcPY*cb$LcNUVH2d3j)-3(4xVfpbNF5RtG^(>jiC|Zp;R+JxYVRUtbL~G
zm2R!hc(L&{KWnD{t%3X)HwZ>C{wFwI!~k$wj(6yQ7o(Z%s3>^&^C8@lsyk{6L{SuL
zt;m~^Xu$85)RNIu&5^I10{-vrXlyNHlpGU$O!s|mgSM9m=V6@Xt_TQ!(!p>e*CWwP
z6ZdIIF1hXz_oQvoCrPFJDM+NCPE=aSB#dYwi_|uCV6+M2V96n{72%=4EdF?!$w-ZP
zc(#%S*?I{iyo<{TiHqDN4lkin@qCo2o8FySonp3T4e214l=wr|?nn{B>9Au&VMz*$
zWla-N)XHn4_ItIdBElOn>+kwZ6rxVAsY-B{8qSh48Jnd<yI07HoakPIu};5*NIa4+
zV#TuMA2hGzUo!X{THkqrOunU6>u%WJEeybZwy6#kO;bJ<jB|VFOb&l>7D@gLFHdwO
zi8g|l70a5eXvw11@zGi^Ia-@E02yMjqF|Z4=F`Q#KrRG7?6727lM=<RO*m7KOnceV
zsXo8F%Jp?GZYh`;aUe!~YP|)=aY5SeVp=N{0q%09<Y_kSTG#Kt7qlZXR#uv(KZh92
zWIEY-1=UjMy5KlZV;1DU@i6Jl3e+H-5-r7Vc3$Z*8Z(*hxF`+g=ByQ7!t?WlpI|~e
z7N-nZdY{JtKsL6WuN$$HwTZch5>ZA?Lj`f+kWZACcxg2kTaD$A{qE%S-~A|%G$o^%
z+!(Wrc~>>PK#Sn5+fEtJv-QBdywPK~c>LFcn_t{wh_z#NZ?${L4Z`j0ymr?p9?EZb
zicr#tsETLg;RT@srk(v|ZsrT44Ms*86{U}F4B0}x=B0aF!%?L37M+l=B?_9FQ2gj9
zG!2~hsSPRai32Uhs<x=&Mau2ZG@%8<&jd8f#Q03BWhm*V^h7@u*d>3Vkg8}ZIOt-8
z1#|HYj(hAt-CNK9_KmI{I_znMOPgkqec1c$G885w_7j5W9umjyO%YQ5dEaS?9u;od
z9}HPGGT8s_tv{sUpi@$YIGm%#_+qkDdR$vDQp64WZhI-|tQ2QT;ii4k5TTUdH$(M&
zZ)sRFN^jha0Vbh)NYu^y7<KR4fDe?)8}2uia~_BRV+Zoy%F?qoU4G3ha`kP885s*|
z%v9?#RM2<dmR+(YboUK+pbCW&S^`-f(25!>BZr&`xK(gZ8-_IA$KJGuw{mqJm-BIq
zlAC}+HtCcuq4$uN0rjYliTmI4Oxdu^UO&S9A-8e+I5x=@;_lQ2mD>{z+?o{k_z4e|
zr+n;thd2+i>K`|tB6YgXid`WKdNyL-guv~`rJDySI8Ag~+&6^vDjXE9EG5)8P&5_$
z^)j94b5Dh$L$66!_d6SP-iQf&e0ttCP0Iuoq1(CO{1#JIRuS#9rPC?b*Dy84@oko>
zcQ4jSMxjLZ+~!YZ^r@N&xWV|Gisrg{NEADqKMPh${`1o!77s2`V4=K$SmC1`&DMy2
zQbiwYq8mz>aT=nE46t8v74GlUn(3%yC)apxZ(ST{PAh)eExD~y&g)XO?$&ae#oYBA
z_zdkE=0v#_nM2m5dIWTjoV^(7fdHEFIV}$<^oPlrz-VXKmX%CnzW!rSnr54J^Daw*
z<(wYHvH=)Z9!7>tsiN?<0yW9TyfV2ZT1`6@kpS0dwpVr&4<C&D_$A4U+C5Z>FAuW0
zu128FOqdy4%rwz0nky?OlHi(q=-`LyDgbM*dDc77bm`K7_MCJ`P{#knl<*Y43eb$U
z%@P75+(eTEz&TCCl;!y5!gl(!sHw9`jG{@Q7XL599X|gbv@ZJEVy3EAb;u&kBEk#F
z5C}~1Sc*>bWNpeOn}RN+%*x(bgM-uXJu8PvrnR_+hAvBl4bQ+uj+|@R`sKpxS}~=Z
zbt%FU0_SWB?0F!>WUb-llsFowz58}F#8ai&`x`~4^yr24fzJkAcl9t4HRwK1Cu`}e
z0lbv{@x8lU7oZ}d%)ZiJ>0S~JqpnBUUIh;%TvTE+4uw&Y+|ov~3hTbRT>(JA{#6m^
z9C4ES6tuRF4~?~AK3wVfZ;I@Wp12kFUVUhrO-2DY`53AX#E$E>t93>h!p?VtaUkn-
zktY-V$)a~A#EI-Yi;PLFd3T6ubq>@x3^^pnOGrOFs^2$IFPA>=q6>`eZvxStEWm2S
z8yrXI2v*Z=OepZAGdtbuH7-eJr8@;pjqK&PIraN_I%!jdFAWJ%JYN}(01ayOpV%NL
zx9=or(geKm+Y)YSagWc}>Xuc)u`i!~D0*XgG5HA091G^|n*UZ`)L>oJL==eS5^naw
z*d?zyv>4*L<v&nO<@nvHPwQ7IfQuif+%+aN_<^V?({XF;DRR2w*qvf4q8#4)fJzQr
zquW0J*>CZ(?Ix9_u9cJsD-AMpDN>tZ0MI^Q<PSj>u%d>K_4!bKeoYru27`Z7>&6&=
zkrT(7(J`{=jhA7&Cm#>UrtKc1_~N&-c~AGZSH6<x$t+DPT#x&Y%OK44YvC}EO9}6T
z<h^r=h-B>uJpCGGfr$R+Uz>Ww)4inr^weBFc~cKklj$zh?L?Hh7-steZr&B=;~s5}
zT2af+grx!5Wd#++IRhlZ(e*IQYwpfvy1sU*+BRQv&UuIQ92vwj!?N<<s7ID-T3e>^
z_Rl6{9}7dwq{dF}h6m%f&!_BV<L<{W&u%w@QVEub3jbN1Yai`^Zg*G!(??LL_;_Rr
z)-D4?|H!~&i>2W(?iwrC<oP1VQ{Z-3n|(1&EFW!5<M0$-_>>36jp?@*g%^P219TD#
za}6ZV*DpQ07QA3hg5|eg@)HijAEDo1&><?h4D*5s;MVV>lmb?ydplL^u5#?sr@fr4
zA=t@K@6F&Po+`;*L`w1p`2>P#+$zS7uD`bbEJ`XFCktllG~)4Ub)<Ls<-}Zhz+JHp
zXM11j3$ZJPND7^VD--yxWqU1tEcV<F4q~JRP7lHG!C|E~r_S5-A638zA484qrEvQK
zf_D%D4AherncB6w%G7!KgjJwVcqqN3c&~&wZdEgnG+s|DT`MIf4y->x^0Spjndy`i
zeH_XFnlSg8F2c#6w7b)YC6FWhht2{ax?28+#~~eH<C}k?@#7F(N&OlwmfpKAy6=O=
zG?~1LDtLF-Yt$9qUT$h)LyF}FO^zKrsTL|f*{29yoA*!H@E4KRLI2Sg)cmLMrEJ_G
zM)zOQ&7or7yB!}xG+YtJw0?K8$Qe*Thr!hDv0H)Rh4_ZrrcjJ=eT-f!4Ef9~q(Lu=
z1<f=G9xHFJIr7;>@CcGS5on^9sDVvRG+R(PL@D2h$P7oVg0=HyN5MX%<^76I21C5i
zN>WZ1c3XsK*!sG{KXTwZ3@Zj@>#^{?gBI1v%>fs1kl|g_HFB4QRP>Yg%Dh+ePe#e6
zF1eLfk&(Tyhrc(u`M3Q6)HJ+7&M#&_<w}4>AAL!Sd+me%`xw^OMu`1(I_E|LWH(w7
zU=)$|2?=+LK^U(o?h1MR{N|tcwRcOoiO_0xj@)%A0b&FMR#0MXYMUY?$wjKz*j4DC
zq)qE&1W6=B-wMK}YZLv+DwfN@RJbpi6en4sZ6ivestuz5{_1y^2S&$sMml<8EyfGY
z0*!)F8JIGv(U&!3#UB>X1leTY!_E^;3dgZnWd`V0uqF)iEQTi|kOATG%a0&ymzA`m
zd}Y3m4UPrCxH6(e0TI-nMUcJ}e+@p8+o}r0hL6sObbc@`%<zB)RNC!H)v<5u8$0&y
zL*6Qpejoyi%;wD-P=+b>3knH4R~OwK|1}DNqUXID1!aW09E4swCapy8v!l2yvSk@3
znz<N9)|I^rxy_P(rZzZgQ5k?8G>;@X&=`7&f;#KQZaW&C`EY6ry%aAyUWcMzF|m)I
zgW+G)t-R_}Oqjx3f^(?0V7;<<+ta$k2et&vl9zvzh5`e%@~GYm^~UrtYFW+C-=f|*
z0XSgljR8Hv&{5CqCp;v*b+ZT49_ch802bSMKF}EV16rk4d@R~u$jzRlK!5WAaetPk
zl1%N-HNIvDuvW@6@LcP=k*t*lr{DB#{1&BZ%%69OGPEnRVgg)s_fyb6JJ-H0o4aLS
zu-iZD1W6Vp_-LZt8wc2hvi8P}eM*hqO@LvcZzRN)XJ};f6V0V8MRaX)U$6JsC}lp?
zng3Pnw%up@j@PTY)3;^!{AtT3$*ID}ljZwheG1r6aka02|LDQh&cJ)C_sq;pp_iZ5
za4FulJr6I=58A47YHy7&k3!AnKbpg*cD?wzHa<CaFvQGlMn+-u(#~0H=EI|JCRYn@
z%PV=iIJ|Zqm+(JTA1KWA#6&vOzFr&G-3=LFKi)jmXU{K(ny`xu@=e-|7w-Lu;%mCQ
znJYilUNBkQ*!rSS<`ACIq*jy{y^yGV?-`f?iI8FOUR!XFhXl;i_s*}~*TGIvl^t6Q
zexAyauejWHj+dn?Br&QHY(+eWP`T#vj|iGsI){K_sniB%G>JS1l|QTN5#>!jY91Vy
zH5|iO>_i%UReP;6b#CPS;k_5E#;={Hp}1-|Om=?9st499g9?pv7lKT$r#6Iu^ot>P
zbs0KUcPkV?=K{3}v3d-lYvjEv(xrn~O5l=eE+ljZA87jrVa{E7fSu1F7#n!k5((A#
zJOGBj12rY}(^nL98JpIycOtNszhS*PU{ASg@=&Uc@IMDy-uWYklMJyLnL*bG>>ci5
zYwD|B;->o0g@LvaN<eCq1$^*3boUDkZdhObot(4!SK0l>)<0pJ4P}vv7_h!<Onm`C
z;nFQEeQvEVsP9Yf_w)9CD0a^m4{K1oAQH{)46L(WNI<4P-x@h8fL)ztFFX-GJ;l&#
z^(TASc~zXM$4G5DT85a%bW@&~*EWeg@!LbjV4+XX)pRB5yido1ZsN|TPPfjdYxMVY
zq|OV8_hyq<O?Ag!j*W6&*d%mG`YM)stIlqD#Geg-`t*sh@4#ukC?rsh!rtW^HLIYM
zPV)Oo>}*RwW@FETul5n79<<k&1Y`|`SDW_C5k!EpDB02?W2-%>p=>5-9DlFH14M_S
zX~labbuw6;2InY(<yI`m7QIG@H9AWw&POu^ED&_qX0PaYkKB)^dFf8ZW+H_0#8VR{
zU_EF{#db-y*H*jdq>O-7nL7F{h_No<ns`ox{F3?Oj1*y;Psz80!bvu*izHF8)d#mq
z&Cvx3)efLITXeOX<<|X$C}0lSXZ1g^ys1b=S13w2OUdsQ&Bt*~aI1LMg$A#>i5quG
z#T?z$vM?_q-Y2m)a=gST+Hs%&>m4zbY1ELw9rDdp#w>Gy#*+7E!24)+J)W;*Y*yD)
zpn$VCu?t^wR2MsjA6}E(q%x_!c(D>cRzqR_JQG5=|K78ZlKGagxW>Z8XxWpcD_5ic
zG56`MmXcS$HXW>f8yMB%LNxPScs~o-ni=yIAIbd=n&F9F&}cgg|4~C(JU%<ydFP6K
zn}887Y#X>5kZbkk|K4SSug26*09<TK6l~d#DV~M+LxU}tfspwy3ZRfzZUSafe*;6|
ze1FCvEu`>)kGnNs%uiocC|l8yoPGvKp=N$X)nxLb0ED;#(9%dbZ&Yl|dl9v^knc*w
zSm~peq&DFTGRY5HQ~u6)0YA=isDYAU5H0{p$`#~7uOtfsGm;_4R6(9NRX<$5mZR#?
zIj`h!xSha%U@+@a$97($_&*a4P}hBV;%u2~Sm{9~=W6s+^cYo9WO)>mx?e;3tj3>~
zd2vSnkJED(qEtVp3~z%dqVGC-wk$@@b~3vg8-yaJ2@y4{Xz$6cYy3yqF44!5xZJz_
z?f9NP#(vt0MeGHJB%o5kV~;RpS98H`%x0e*s)k)DdYjSW$8Dr!9S=UiA2^ar#%H92
zNl(wdjyA6|T}x_$YO>pU{HamiR&pR<5MJSp7ekH;tWnC%!h0`BRCbv+u443h?Bj36
z_D>(aAO%cwvrK#mu#Sp0nny^=I|C?YM&pgM+@`;|O`HEVM1#p#gTJ*Iv4+dF5b~G{
zp>#@O$4^n4awF~e)%^I_YI#3Cl3n)Q&*pP-=JYQJd0r`^(`#^gjbqleOoPN=9Cusv
znV4y!)#<j182-0a7B##tkOhK!cs+kZIk^KUc{LM%_mUrR*@=P+(itVoaBTVRtV*$i
zNpspE;Kq_%x}?$78+LP|kH(4_qHMpfGTwv=l2+YMZ+b`k4i(*8{bXmUq~%V+SRCtX
z!W~t#X+@1&S<iCdToU7a`&|WXv$_ulrg*>u<gZJ;RYz^S`wAtHMWI2uxlh@=k#!M+
zA6^sQvyoTKF45b5oyOu9t<p2GS+&1_hOQaNDVaFV5h6ppO=Y4V>?_Vjll7V(?Zko(
zX1V4*TI-~UY!1I*B@;pkj}8-Ie}dH;piOsC&9Zl^ON~k2A~>nUC|m0&QTJQ)J06we
z4|)sAQ!|j7PY;74gu2yt`8Zsc2Z>d6%RdI1>2;<&;_K#?UYoF;oufc?S1lcS(C!p=
z+>QBZ1VOflpXtZucl=GhS`4JMowT!fYV+F+{7AUKWb6~A+xCdh3fVf%-~7^kca@m4
zGze~c>4nUMp+vfB?95IzuLA_LiGPO^-_)6!%Xw*HNlGO7#qn!1LhO=MVbsuTWJL_j
zRWhpZ!6Q90hLPVF^cQfzM-7%TDFwLb-Y^H;vl+vSi)<vuYITA7r~#f&dC(ma#`jS^
zea~!;?e~fVrhY!T9}S-TLJrh3oc5O6$?-)iNMOhu_CRB#TM||Y5ezNiMhu6%%1<{y
z`@U*P(iC3-w6(?-TCRw?=O9TPWIJvN`sDgh@lUt)`O-+9kho$N!>hrE)~uu{*0e(d
z`cG>a&hkeHxgQ#tC7HB@5Fj<FA5KuMypf)?-)guIfw>04KkKI;=oMedHfbs!aidxQ
zG&am!LVt=8Qt+W4eQI6XX}Ac64L5Jes3=F={JjgmF@ws|_@=KgsWtr1JpcO>ekJxB
za!14GiAJfNJm{O4-oy{tlY1xzbqezo8y%Y3vrsVbG|+hTIg4n$ax0<76)`}U@*_`G
z1Py-?1>NRKjNRd`PbUY2Sn`;jJX-t8KxaeEpn6{$KL@1Gruw<FS6|T<FCwAE{pl<9
zv;YEZ1W0&-O02`QXU4jQ9I&GVQIt>9aj_s??mTblD*_3@u+v?}C%B|&b#KKCJb%kg
zJhY>9ett&5MF~maN+;DgJre(aohQOZyN;3rnRhyV7y5J<iJ*J=>L2EUnZbEl5^6sS
z;;1X<6s~r|K>BUBJO46RzCHR|*67kG3`y)~?N5d3{l{dB$LmV~io;I;P4^8Ul3F3F
z+>>CGOJW-_*3<xG6B`0h{?2_!4j5IBDuXZ@V0}{02$e%weC+RgAoAw&LYFooEZ?iY
zaI{j4Qt(LkJ7TQG|DaMUYWi0IvKDa}t|yX94zSnjj3YA=6-}RDo4w)AJp1!7Yz8Re
zO#asM2Z?%P(k33IOz$WG#T-U=EKvdLuN4*f3U$DcIeGI&TZZPCIFcsYEX%tctbE`C
zp$8FB%7u4}Sn-*-6?gMNWd0$fSiWBq2G^$4o7Kug+Mrw~HxGC@GeKWsZX(z5b2@cx
zP-!MOA}9CWKLR8zZ~6r(Dyph9>iuL3RAKh^><RWDW4kqNo_M`=aH6nPfX3~45IuT?
z&MztHdA^6yt5CT(otBX@<j_O@*V>@==XMO!WK%p&a@kIf@s~)TmG^IDA%}QW56kIt
zS`w(;qN6Kxg943H_dXad0*#L8yxd$1qop|Pr=Yvr5U-QvcuNd4ZVfm%wZvxHQCK>8
zL-tV;dnHlifNAivk&Xvn6{1-ASy2@|&9{k9pDZ8Z^T_y?esg)F^l%~CB@;{$p;+Vt
z!`$MChO#`ay7f;6Sb<ruR3n$@S^`}#P@P7Pykh<)gMIhEh3LBqz^RUO1p+#yd5#P)
z%%d;aJ@zf%s}oI%2mJk>EPqRl5K#n;GA%4?n4wY_hoTP4c9r%fKBB&KN?=uHI=Ji!
z25367(|k=G%c)|9z<GrouWBp_kx4~oG7H4&93U2xZTBvnn*`wzcsq)wF~&#p7ED`q
zl>J(G)h}sH?LFwLjtR*hHm^Pd#fe5It3PHmLO;DlgoFj5+WmJIo{pP52zpV)(UOme
zWaK=Fqr6a9u1RcxN+!$0AP}<n*MQfuWve9&URmolvNH@_ONqWN7~8NBLLE^3xAhu4
zNq^&m(#xDBQ!+0ke5S~g>=*w^d?a_<oqCT5mJr%Ftm9e_I*zd&T+MVh9yb#gb%p00
zJ?8nlxtY<1wDvI}$zYH6OL8I<QsSBWh&LVzXT4u{geK95)*^v*sci}&vfX+M30u3%
zqq}HlZEyT(Ep1UY`)Yplq*=zEzoI|fe|x~tM7-<Lc^zb^JD=>NF-sBog+&K5zZ-Lh
zs{OH}d!Coxt`n_BRE`gxk(bOX7kIg^0Y%23t%l)tp!4qzZIDOwG~$Rw38h(vd;Q>@
zqWWr&a?cs~*yrE9@@h2{w$_zX`Qk0uQ}`C4_`N@&^rVL*^89U_fh-$jExnq?aV`ak
zjf_p9@8a8X;D86knmaiS2Aoz!2Q)$Ks8gPk-Fja^S?U9oy~;MIJzql}?a0_E3h-K$
z)yZY?_Y0xT_da<&{uf6_7oPvNN7X!tu`lDmp88wk0;^rCE~IuhT$K12<kSlg<pjM?
z%-1T}!SL7HzNpYe=tHq8fnh(tMa9nf%#F;c;_s`0wF`f&cEi%y_%nY+fYahab<h=?
z?Agi$miCIJ!VSWfJT>}8aV~~)`UJ2IRATF!fpS`O`_1~UYF=o-^oyHmY1!7Reo#{$
z9dHg&()+h6gZfMG*W;KGVOGH$+Y@*g$eH{jGqbqoyF=J8s44lsW>J5`uhce1iiLRb
z;oCGm|LPW6DsZKBfeTROC%be2EiIJI3OyJI_+vnbws2-*<m7kmMDv}!p|st=>l$0M
zg&{FE7%aT9dc8^&Mzq4hJNf<j@rD1-V{twu>(WUX=$hy4cY+A{V<lfJqLHAZS#<sd
z(|ePZ!HXKJsy%vumIBK53=I<di<hpIFM=|CSUfSl8p_U}w`dj4LX6eCT?-MEUL7$H
z;j_^IifkXv=CC>G1fn>)nx?1dcb5Mtr(iDfKNIh2d`|_9@_`0g%2nbDk1qqS`#}=5
z{|ynQ1P@pQFW+{p(y`u3E+HY|TYcNDu)+WK`x^MwIJFdN-Mm^i^~;`T9x@?jReN;6
z2IYUJgxf+WQ{IZm+o=)r4l@cKQJZ9hu36Zk-x*#Md=DTbgY;J4V_A$FY6j2C?RFje
zV6bgo&-v+qEUr7~;LFvzGrIJ@k(v890}Io2jU-STf8wX`0;IQN$~C>rQCTFucLP%5
zq~r=Mb5b>>)ADJ)nfdvezg?TIf~n`vd0^z_`3Rf}lJHDlz8HC%><%EiAoL$29g6zI
z{p$81$1syrhQw23F9Zd|;|a&3LYq^o30zxHJSxg3PD+hRa5gC<#x}e~6&RF`0$z6$
z5u%LFMpp|XP{Ppg5}MwmzU<9$)?RW5_`>=TP3WAUtO5`ajyfWYiiO*Ga!MBML+0uH
zShJO^<N=BQ?yr%ioR36M(dcRIq(89wZtW6<5{87^tsnYG4KqiN)TNwayZ{v6!b^u1
z6mX74Q4!fa(Drx&sM&yhHhIGm1vB>wpl~I`9cnl$QjdX`<ay6e)O|E6z4}qO;IWn>
zlGp(D*rtBnE6Ggk|7(`y&_p@^#s3_0iSmt+h<e@P>fwvOwQwpMGb31u;E}!-(xlKw
zabkZNoc-#O+!(6Woc+325gbJH{;T2ra8w;()Z+UiO-dS_ygi74YM4)q?k5Q&t*|^v
zQI^0hmzAd>AHwW1Zve@rS4Ke?^*>!^>Oxnp&zqdyY<8IiHQexR3L{{7MnI%&=#b5_
zLTS=dg*5&WOs;L<yE4Q=+)G1|)-=y6c{_gU$_PZC@4_v?cF(ebnrFkafN_dc6ySuX
zfb+UNnQ~slEMGLY;wYb;S!$=%zI6XE1t|ZJGZyNtZdiGm+!o|CWh|LwxDEMlSvCR5
zV|HwY7)1Wg-pP_=+@%?#*#q0ksQ8TT?Y*`));D(rUsX30?GMeo;CT##jPf8km_ixO
z&|(Wa9%_^76^`7E`;$dbKFn0;&C|*>5`s@@I(1ZY-tybClJtD=s2_xO(q!9A;obmb
zn#!j}OjIjjya11#!rQz1z6gBE^V+sroCD+aLi^YWK#uVsLrviMn6HmW`=;^Q-VJHm
z#gTkBy^pmg(dT@2Z+u`$1=lK05sp$TM>U3=2)wk}O|*%hMdvsE7#Uc;r91HCE&)5k
zHvYB6j@--MTz9V?iurB--^>V?g^d&-%JFKeH8z&AA80vyXy`cQWs6xS3DOq*ac_xX
za<<9yT6{u<`48S5QyVUX+faQ|Jc9(wHv2v$XR`EIQ)_TRk9a>(k5L-~ad_|NqQ^||
zsH5BA^{stODVG-{Dz|8!!+%Mr<^6T65z&_Ra?R56OS4Si8xwID<Pi_@>wBetKIw?&
zYC`2y88^DOEYqy^G^m<b-FlOT<^iey+F*0Z%E=T2lRmruOfac$n{&iX9ua?Pqy!9t
z3y9r4@0)z~QLDd;gl|#zj&y5ky}U%t5Hwf!M?@L~8O6l$%Z~RcMZaW;ki?8PH&bPs
z|EZ9K<(UGV_WHPS2DnZhtxBbTSQ7=#_=}eHJXNnQe^vj|({H##1y?g9#wk2;1<7>R
z)2?nm14giZIS?eeR{j276ulgjbJXbkbs_nb;dwa9n`li2mSsHpNJ#*G(jS>3#W9T{
zTTLKCJ+_@`Ke)gvV?kmZ!in2^P$p1$@>V*h+xp5vsx3-^iF*Ect*UR5wpTTzH{ALo
zP->r04hcZE9Jb>=bf;;bn2`HxL}(=Aizm#Qb~OO99<s~=$vVrg47Yw4M6P6xa=TKG
z#;MJI>m@xJwQ<pjMgeB$%}cKu=r*3vjN;!<-~6482k>$4$TK%lL&CXede=}FXKWX0
zfGS*xeKe!F)nfnaj0tFLrEI>UYClb#1qn|z4tM`|Fd&aL1{x_XMeSb*gc!W2F9)sV
z#yzR$vwYXR5vKqkTOmzC<2|z%tG9p%<PHnk5~SFA@x%P=1KH^TgSmw>&Nhx0uJj4j
z7<47A<q?d$_K!mSc=W~fK?6ls+d>1|ou6vVI<^5{qF)M_L`%Q#y&ZZLO47k0%R<$r
zH4_COE$LnzQv9QRQC`Wc5cVL>$Vy{aCs|OJnJ)_UfG8?VWT<uHp1x`SS^L8Lb^{62
z10+Yo`2$4+zx(DBD)u9zl>e4Hlx#^WVq!Bj6rCJW{nerpmr;3kFN4pFIG~NK;m)k9
ze&<EPTB_3J4Q<TtQCiJFFA3^B94OPqc!S`M&CY}j8)}RMDP6KYU-c`wrqH#f%umiY
zl=lfnDQ1o?coi?S%KS9vSzqa_Jp~Zf7WS|8+(lrfYPY6!KUmkV{P;^)Sn*}&r`_r6
z*p{0wnTs>!*He3u%**S({|K(<L-L<p9%VC|FMf5E^~;a~#y-^2Uu}+3E!F)6d*+{a
zT>g8waSjnFf4fcrERynN3YhF{q^|GUHicO1J(_(XK$i2>MXvdhl-b|qeDeBjikF|j
zXI-n4P~1uW#`b};?){{y6|??wuhktDHHUk^@Snw#Y`?KKj?YYAva5Z6t7O5{?yHWj
zbJCG1Y~uj92DP#0Z$Bx4bHczKLOO-87<?VYp{mZ0kr|<7Z`IHRcL2~&ql4W(ATR<e
z!s8h7{joR&EtZ9LnJW7b(Gm02L(me!whr2=><wypw~{F^22oeYHh8}AeAizG6V6K?
z^;GDPGAe17frSFVI-vn;KM!#dB^m=QZLn%4CFOXSy+mHHr`eObtecNA7a6HY1lA5(
za0h?uv)l!xydCTEAMcp@FPvs?r;RtCnG%G|teLa~QPeVMK-jiG(+<7+$qhBHZSO~L
ze>mUoc-h}ZKm<YrmU%u|wtmN;0%4m6wa<$}ASan#nIwf{=l~rOamA{M8{e<W>MSiz
z{;w3@$~oPt^oFh((oa6aiJ|O}G9+EzZZ0h6EzZ@+J);ukc(IEPW+W_N2sc45QLqd?
ztNBb(d**o4r>CynwQ#?8e8<E#on*he(?H>NP}nJZ%Qb(6o7}C}<8(QGXYOYl&EwZz
z=-V=Kf!WT5-%KY=DS$0}IH*IXE&lTq{%FE|m@}VGMSZ(T!pcxGGm+-@+|Pr=9sAI2
zYsSoj$@O|cbH~c&447ICIAUIuX*0h1YjC1V2}_NTe{p(5vVOf+ZW5K4n4$7l1V^!U
zIA`&2ojlrw_C}Ixz4D-vlFk)Sg4h`@%C=+N<tW$ORZFef-^7UfNB`wmXMGqG(yf?N
zTaxfSWg|JeA{N!4X&Y^Ocw7FvnWn<zck93dly5apXW2hNasoVPZf#N=H750pg5$lF
z8upLwP<{e?vb)dk?$T{g)I-*_;>%jw+R>5P?<Ad*a;0`_cK~?f_mp8~SH;nLa}}g^
zp8Q{fKh%)%yGGc_z{Vca{-cocq5cWqE*>A<uVWq8Bi3O#;@aTz=nPB4qy|IRx;9d@
zsHo<K%@oIwsR!jjTYv6YPydT}$_|&V?Jkx5oEMX)*r*gVOD7eCv10_7^OrwZKafPK
zORX^}^Hy?d#7-UC`V><0Oq@3f$H;W}SUmVOtSicaz|xw2iW5!Lj`iX4BR+f5FnD13
zh@pV<SnOxqFLs#p9bb6l2hLgs0Yx^{V>%LosOREoA9?%8SooKDC<+$0)=T3E-B$Yi
zMez|>l0*`zD8!canjY6V3(gV&3F_6xeIZr<-d`G|js^ujWz-U=Sa<yIAtM5kU)Cq?
zLyN%1Cn<_+vf9zzzSAxG#iVU}?}NpOmqvl;5B3S}SxUWv`fWTo!+KM}ukJxnR7?Q1
z89@q7&HOuW-CtycLh5&5MaaRI&B~+Th*aJV;s?{XBJJGCz(+gJvpWXsH4YThRUgVt
z;0Yq?{`|1slS9ca?#nsc9aJ7(NQrJH9Hn^4!eQ&|N}TOjX+Pt**Dz|r;P64j3Z;j6
z>7-BlP3efFb88*HH)6W|9WVFm$dh&o`W3q1$|b`7ChJm`l}*~e;(^(yduo`T!-}EE
zKF24e^6@0t{=voAf+<oa1Z{X9mZUyn)_RBU)3PaxG^&03b3%t%`A`HRTK?_53<iK3
z*Q2PJII{_migwVAC_B_VX)kDO{QfDr(N+?!r7lwbsIhn=e#=@rU|~);W~X27I(Q14
zrV;GouP^vX*}8M|USj2m78Q@bGGTR8BXbV3TI}<!W60iq%`J!Ll5_OmH)WR9bFb^Q
zpANLPgY}CknP)41aYRzzi6^y@^by2Scbs|e-r+)c#JT+?7Jqh<ldAk7Cf~$8dPZ51
zibilQ@iu+E@a(mFq34l{IF~<&5#xflsz8sTwLc_}$vSOmi2we#*2vrAm&|D>83I{{
z7+R{O={7c7LH|YhurVB4Y5k3+Sjqj_Zh_?^Mu%%x>`D0h(^-E6A-d%w@}kLY*y0J9
z$Ye$xwQ~R{kmp_7&;i{BzqJ;R`eF^72*xs-5U44G$JXdoYN~OhHew&YBeUes-nRy+
zy4}I=0JRMAKARIVx9g_;E1~}Z<j|m|OuBLpq&h%8wqX%hATGxEn3er&^+j99>R1g^
zTeT@K=+_8r<~AC{LUT-uh&|cOLUU9M-0@}h>h*QBe);&0l+~<+lUY2322_|KRv>Bn
zTGjSV5{&ja+sAy#jh3L?PZ{fwg2UOcI{r5R*>B&&(xAin1dl3bWwen*5lPoK@0g>Q
zfC}-l7M-Ek(~aD6u`(hS8D1o?Lb)^Ris<Ou<B++TZ#B(D<DsNVw0Xypx^hiC9`h)O
zOTI6wb+zQ5IK)@GZ_Uw7Qk6av%P2<hU`jx7?&du|+Q?DcJZ)qYc;cRJH7FYLf%N0L
zhpVM@15x?adJkWSYK82Mx7WrD&l2-UIG%e)azmj8^tb(;$8u`Lo9UcKQNFb>HIr`#
zt6c0n2`MHf%4!@S@#mDTJX=fLsrGRRM^7@P-mpoU%rgLYDPGxn(%>w$?dc~aE2|?(
z-7B9Jxr!zeFa&27g<pn6>psXTNqC5dS+jg-)w)`)|FQFpf+5eJ4^WHZ`IbB$vkQB&
zB5Jjd_y=}1o3=ha=z?#C$RQVgSyDExWHiWvGq@;8J@k+hhuTI?U0qIm{!A-hM4%?W
zUjCAUE-@uiOqF;UkIS21^fHz&hB#V$_>HPXGb^f~nru2UowvJ3e(?QB2a!7-^^C>l
zW{L6R)NTWo=j|`5b(!(h3^YzBez4SyzM^F&D5Lg8fjCxoG65xq&;DUf@0=|HjwT8~
zarUlZE!I|l)Or(e+%y2_Wi%tNybdkxdi*3c!^E_&ZGa%kWj=Ps>C-(H0cS7GXX>T8
zcfRpy_?wsL$JYrDX?Ug1C6gfeTraPT9Q$+ng!eJet$1rC2?PiG&9L`KG|E>4MBFXV
zQMLop8xFK;xo??e(xmPx5ODqB#iY_)a+v(X>;3pK;+=e^)?KHqJAP~>JmP2Ij8%jK
z3(FH?tlrqxAvmX!UylDfMumvx+l^a>u=24b+H@eLJyNl6+BEd8hu+a&NMes^#9)!v
z91+s_T<9;daj6K6SZ_Q+fds#)T?f+QOqdBU45r(kikYTQLt0ESKIv`ZaXFNIVNWYh
zfhcLabe<SgpWwHJRBvx)SNW%atnY*bq?J#Bggiq34pOk~*kIcshNS{ji)`?bNQOxr
z^^Y--f`(M)R(8ze0Ih%O@q4DA5*t^P=P?C9^Tq$?Y*`<Pvvht09-3kD0w=;496*8`
z@^u1cW`<K%r$9&6;14nNvWPG!&W<GensKd1NZvgjxkQrq+*F-5=jQC>dP~6k8T--S
zMva^;QPRuIjXfy{%zEQ<#Ou5^rp2@8+fcQG)u&?Aah>A-f~7C)WqHAF%bPeClkdNC
z+GJXV>%g8zSM&2-Jkf_+X1t;LGT-tbi^^s}$}3y%?RFMtV!rf}v7SWmA<>%6j$bOn
zpxmQYwpFOtdxhH(?|ESGZ+LfaBP$PGs-fGvY9HMRVM~x_4nMlx)C7HD*RpXNL*I~E
zXm*L;e<dE){-rm`WdKNf3P3|d^{oomlRue5Rh*@6!}PD^LGC(N;V;Z;4cZ|%h+#Eo
zh|=X~C<S^8wYKTcPgy}II(UTkyFw6DC_D`8e-;rj{mP>c8pqH40R;OM+z19Qg-?tD
zpzum-FqV$f8$?lP4F>(+UhdP8(EmvR|E5&*jQ*dmS0_uT|8%29Zhj;f{{QF&isW!W
V<(Da<tK`4N>dHDw9~G=4{tr1G`R4!t

literal 272988
zcmZ5{WmFtn(={Qu1b26r!3pjV+#P~D1PCsJyA#|A?(V@gSO`IayJT>J%X~oc-1pvZ
zEqZnLnfWnQwQJX|I)`v21u0|%d;|yx2xJ*)aTN#%7-0yA*FkVFPb)X_5BX0w_z%+B
z&JYlY7|+)$i1bX{r^Q#!DpH~lRTG5!PcKjwBJv^-5Vf(0_eRhVP;{p<;v#D9uMQrN
zYs~juutTaYTqflvql%;`M(P-&O-GZNY=YJUfRfjW@RAyEYr@QVUnvKIbtk@Hei)%j
z%Ft~MdPf@yiOvj=kuLF*k*0F2F){Aua@7-N91ZC050S0|Bs0l=CXt<|7?)1Z&fXVf
zusC*m;0G<=@h#&|TDINs$1XchT={r)9qWMfCvOifGOw0zWfl2d^2?0P>B(Jh9d77O
z@94&abp5Lz1k;2TTZ{F%O*)AWwFGrn_i`q$SaOC0_WC>-ZehC|cG6cc8jN;{d7W|;
zg!%-dA`j<*wjE!tPP0=fhM;xb=9DgdvWJ%2t13q)(rstg<`-7S+K!^=csdtJPad;T
zG8|o<)+$<^4@N99b{YtxTl-KloK23|TWh1eTEks)T8p-XZo1fyR$QL$ijRrle{R=e
zPj8}6mz3~h4pE9g&M<h{V;Fb_yhJqI{Upe81Eeep-QHkTXhiY+9PU#WQDMlp>fC>`
zi6$es3jvaqud9yPT3YjNpQ@g+>M;ji-m7|pC9fFI8O8eUu2m`MV#Wcn$0orn2-VxE
zm9lX6Ij+;z_e2Cxn|n=gV}(57nM4@(db_9Qj8~J6;j1ou=KW34$6R}t$(fiwi}Otw
zlb>xc`vSf=$2iQo;|a~$6Sc2)8K^im;95LZRK~6i@VWYpw@Ww<S)2hae96Ejw*H3C
zKffvPo(5bzIt<3md3qQDGYx|s;cvPS&z?TTjl37Kr+M+i^xkP?9Qe@ltZUIV3}vFG
z0NweW#_O5yL-WpGKiq$TT0nGyvZIP{f43`4!P2cQ*9kYVA}TJrJZwP-+B4&+^5=C{
zF14{06W#Cs*q*qCUhQ-Gp~Fhxa+9#R{~;dp`@^`=`a;vrT9o|UQ3AU$>$Y6IL+4y%
zSgNg)e2fwJt(~Fp&{3dqm+lYq`P0c=?@`<Vohp-98JFF+dNj);LSu{a3YWc9?T*WL
zUyjJYG&v(rw!J>fxgQ$+pm%0yy6f}wOal(S&)FdZ-??moy)mBbI$q*_Hb3~~x>_9p
zPX>TtIjFHm;cG0^n6r~^lVL!~T74d-N5~0C#TmZM1`sN(?=1T4GcYH$#O1Q>zt1X?
zG>-!o8xt+fmg30+`yJr7&*iUhV+8b92QS=9j%f1yggjwH)c7ab9&9hgvY^gAo9<I1
zU9Xd_dc2gjHqVjMxD_spjkV^fy*AT_<Cn=hxFzOkk^-Ft_r%Z4GiEyuR~qDh4Sh;E
zly#ms=6KJ|cTPQ>#XH4J2IlrfxDf(!-HANT?Y`i24tJ|74!i~Qe~Dx|h+6m$f=Rlb
zfDE3cdvZa_?gaSt8$#|enMfHf8svL>YJ%@?2Fm&D?3M6i2VM;>Gk%k^|4>5ZJC94L
zvl`niOvbw*HJ`*a)O*X>viEkGVoePleKiEydf>J3j}7i2_6>{g;hCE#`3<$)!C%wK
z=kF(>M8L&cuS(<$;TD9(+}E%7x<q>9bm`x;rF?roZL1iWc9+E~pr2!M94&N%>!@-n
z3N>J(+Ol(6q(weCs3QY5Ub;(oM`C&hJ;(Dca;K&c2TZ?n5<GW61%8Sti4P_Cf$AxA
zub;r1b6@QRl}Y}*{wKJw?SCIfz`B0mXO@|P#Y%OdR><I={Y-!vGdUMEDYrbh4H@il
z(kp$>WlxPrJqK6y`znwJbd28DjhiN|#n^yu+~y0S$;IlgH~v8%{BiO91pa&gANltK
zeDAkS%+v0&V};csG<z$@^@iME16`&<dRn+P`c<1n?9DsAOzt)=bfDO{X?R;_W~XqI
zjE<+Qgq#fR1cB;tDU53O4rA&~Xrf#&u8wyz<Q)>g=NB)bJC2h26RTC*{+lNwo^$j0
z>ROa|UI%*%+;m;>KH1&%{vPEOR3cK=9=Ao^Wa6y&QNJEP>CKYRA`_AnD+b$2ub(Y?
z`A<Qr4gO~8P%k8>q6es@&SvgdoS>VBTmH=kT_v~Kt+8G&r24K$jo1{qV9z0vhE}uN
z>(*L3gY%4wbuE8;kn`4qM--iekBk>uuUD+k>G%z6B~y@_t{y4z`Fx0&V#*v&B$y^*
zc!Iwq0`y_%w-%XAEyYtD$o|B_;VKR+K>TD_S2#(O%wNN*p1%+V`(#7k?iRS}%a)L@
z<YS7!nfECWOE`u~2L+p_9*44J@4%5Xb=3W>+B>9*?v0*n*8;zO1li_7IBO}}m3o4M
zPtnM6zhMSW&A-8II>;kZ83-)AwM9@Nk#ai_WZ!o%UA=A3Je&g%G&NxZE(f)IS1Kxp
z5WdDB2U<pdYf_mz&K|++48y6@U(9P^;RdbX6lWT>ivto$7Y@e~=M;F6<}Zxc9UKSk
z-;+H3(w72Y=o%3R=H5hndFO_>=^`?@`D@e@h3LsXeM|K5?&3M`LbdM8u4AR%lkLym
z4Ibi~Ov<=N(dHn-UsX*JT~xAsZ>UpOJ9E;5`$>n%Q-$POLeyLv|9VB1eJNQ(I40h8
zGK4qH*5<B`wFTRPX5M{DW_K$gp4gc0{HoRFFk@Bbn_awMa*3}YbH&Iw+Obv?;TO~}
zTkp3FO<sofn^zZI>_$#iBS%p~fOeBi6X#W=%L9qKxYxRZc1iZyRa2j>_fJypV{L|k
zzcc=_-V@TmEtOA!5?YpeM7#ke8*U0b<&qGe<eQh2avOZku9oC`p+T_ft1WR?3=P)U
zMr}-(j~k{Nldl|1f0B)FSzZaI^ojn|4L@|q!rOXSyL>SB^3~OB3pwVCY)c7}jxsqX
z%vuB**Dln8X&tXtA~%pXb?&i!iO$#MbU|-PT${rN9drrUgRMc|Yx6s}SquzK3d)Bz
zvKbJA;7ZkZ@61xdT#)A}y=pUeVmgqSgTYKG1INoZkhXxZ-UbpkKuLoWW61gw^^H5c
z{OZ3XFeLkI3fnW{{*>-5p~2U?<Y1#WFE9mbtbu#Nn|x6t;|<;nO>0B~k4kCe^=jS(
zPZY<S+2RQh5Qsq4eU%PFDB2}vHlS9BLhDitM(~bIiYMC2M^VlDCSfcpoU&RBVKZ(5
zC?0VCj`X2@?drG35^=3fUc{C4cX=a!5{m5UmQit;sF_EKtpV@7R%MX3V1{|sEa&J@
zyNP&iPfVR-n?dt&q)2UM#LuvHa0P(ej`KdcW0+r3_xz5`U>0_qdh&1#XH2St<&4X2
z`DC2sihuY%*f{rS6_>_m=;CTplR|SEh9=_maF06?;DsfHXkIJ??p`%K*SG(XBCzYz
z%Ufw9*>fcvB7Lg&N7s>k;8P@25tUm;bO~WU)V@h~jBupH%A76Shqogr0=STp7V)q6
zE_X(9*wjN)`);-EM`?E`rT9+2c+wFpp4Vgd$l0F{7*2B3^AZaNtwC*8;XAfA^){7`
z0S5WGDiEvE!hR3rR3AUi;Y*R7pA<eAsaE9-H@MasU;M;7Usx-g?sX!@g$w{hzXmmq
zpoHO6#ak?1wwahr02T<ms8f-KQd~H4TrlhDupiv?xEqIKO>9CDosy%aylp|tv-&TE
z;IEN6CJo$NfASW1L-|q-|E1$rVeVrs{DRPQotAmvz5B->hNMXeLUqWmi_38aT1JTB
ziY9W7)f4Pc`A&BWB9R7=_Reh+u3B=Y@0B6QtEBJb14i+oqhHDCOx;v$=%1bj{E|VN
z4kID~cAeNqCdwU!RmWRw6j|C1R%Dd#jZU$I$P;hi%sTRUMU7^=uIR_v-R7(LzpFbX
zYIR~XxA&|B69b@~MNcEmoJsViJImH(aXaBJ5vl*jJAde>L-A43<XY;bN<7gK@I3ln
zi0c@W;tAUhIWPPKZrujw71eK7a(2_leL=M)M9O0CB7wADe+`2S3=PsDtgKD(ng!;g
z{n*BDF4wn^V8jKw2t>W9c6@YqMxIR-YKD?X2;OeZDziO>@+&DOsWaPuOD)I0LCI8F
z@et$@LbU1GVXx1iOex=qQtdeIE$>rm&5&GuH<*J9qz>s#9}aSiHu@l0OJc)>ZW^EL
zFoGJT&ScEn;C%qX1Vvu$;FCpr*Tv5ftJZ!M$y`N*V)WU}Nj76J+1;SAJVNedo%IuA
zWu0)W9oQPKOy=(HYH%oKy%XkIMNx=<HaPSNw5Og=_6`AFkX$|gv@Db^`$SkQPi|RV
z`J>>Txoq|+r74G#dlCg5m;Dt;d7ZYTsh3+#qPEKouR<}L{gy+95nS5OOgN~**wHl#
zHykQkuD$b<C>cZ^eo^u)gdh^Eb4Eqaw%YP2w!DG=6eRIoBGt2m&282&P)UizI@|N7
z@kXMQ=wQY|7{eX(_-g=~;lhx?fh!!dvLR!H0KOT|T*D)7c`}Md(HMxVMqv#WQ|z~d
zSTr;A+%Abtwg=v6EX!x*8t*8VPF`vy+MWD7)hNp2IYy<7d}u>#PMP`XuC?zLBo@q%
zzK(Y~O0+dwU|h+d`$^CUm^JM_R(GN11qXpfsISj}&d<#Drz-tL2NwPd|2f-s83@AO
z3-!yxsFPyP)4OB)`%4TDD8Y4JL&iE*LNkiC%E0Zzqmtw~vno-yt%Bwx^oGQId%3!#
zZc!<~p_{x}X)az;#%g4#NNPCce%?0sNQRr4OjQW)iZb?+By1}0D!A-G3;j^GSCNc1
zbd<c9xgAaMo~Q=XHFU0P8Jr29S6i|bzRFGBGA5T8#sWT((<Zzbk^y$){#4tNFt*Vd
zU!>36>I)P<)mOZ5i3Tkv!(MN*l>xzL{lRHn92>VgfoexG<s=An#%x1*o!`8IYkcJg
zF^p-pz@D5pIf02_6``ka1Ch9Y{*_Jt>DB%u5cseM90(P;e3IIlz=<ReJBo_p$tagV
z3W@#3%_J*I$K-vl26<|KzLn;A1LUV*GsX=}@p|k%Iq8w!#)mPCdE~|upVmA=TrtaA
zZ1|cLR_R~+rDgGy%dwf|JNr56NCgSZCRQSsVesGTs7&W`?g`Z{#Y0QaR!%7DhI=2O
zVPnU`RvYA*y*WfyB9mTg`>E^OHCzUxM$+GG*T)Dv_PlM}$dTYbz@kkCpi~sgd-ylq
zHV5stC(7b0p9@AK5%4Y;Yx8bFO$}36)rMSr&!(VH0@9zSlyyzGAPBCfi1hPz-q(mW
zZ9I#77nT>BH!)t~|J={OKGCAk;0rB2>&TpYoHG&=na5S)`?**FkL`j=vC1{^e9tVX
zPvkP=yu7L+>|Hn}O=2qN^B+Hx)lwdc7ti*Gd8^NxV_rp{h6+5kYeKVjC-C5oaj1X9
z7~AjMo{@>vrfu8IF7%tHuIk&tR@ED->l&yX);hI*v@=%P>b}CsP<XE|&@X7pYj|{f
zZL~T_j4P$Hvh`gPCKrglHTGlRBDK?x3jj&NxyiB8keqTcN;_Mx_@Pq%obYRtv~2ME
z8SHj*@T_4omI*ez`5^(KaiVkgyk$m{aZXcNMr*VPSd{v?wykcm$41uvZ3A##Jn+I3
ze`~^@mGf-fOmI2G_e{n>s-1C}uRoP}c7g`Qv!q!udXd937+OD*7Q`x(4iaMhJ|(&6
z4ym==ZIE8hA)aZPXR@@E>K|lWAut*A@p>F>@>9PL@LL!vc{hh{&^OrPz-}R*yyb7>
zYCD!Xc5cy#!zj%#<+W!jTGiegU>0DDsEr29+BNNTlSAL%5i+t<r+6@ZRC(7G=hs3k
zC=n!AQTCQn0lQU_G|;1NkBWiao_w(*BF_k!O>hqf{mXLH%^O1{1e;LjPYm5QTK^F^
zJuLq=_BrY=cH^9Z->iel2sPns^|%c*zqf2-F%Ey{P+Qa}#QmDcbsSqUF3~-Ju4hls
zqZJ(t8lxvyANn?N>Up6C>kRD^6xr*hz8aDQ&mCsindCu1iw#W|+9zSDZ8%}|_9&=c
z`Ym#u7IqEg<o;x0Dnmq307`aHXK(pxiH6Rg-I&X_i3{adOP!sNk({F&bQLLJC7UaH
zq&+O+NXJ1bXPHsOlNp!{YbL3wMEU?Rnb-(-NNDQ8-#n7g^!2U>#Nre0V4+vxiToSG
zq9w^#%ULAGl@PqOMNTb+1h^|}@dNE!5D;q9u&YE@5q@3|+#{0PJe&+PoCp2S_P;Ke
ztoaWw{-sAZ1Te}*<R|4HI^n4l3F5l8Fl1-=(tZeGzs3E-rDCKuq+ytm#>AoXV<F>q
z!z<_dXDe~}4%9w$BT6!NQ2%^5r?=mS_>tVe?c6BXK+BJ|WSn1^pb^<LVc_W4&WR0&
zEeP}dR)Rb{;yplpIU{^aqC3&ir)%Pvoe`5)Qis3>+7QY<a;OuhK^c^MRbCSogdQFO
zO(%CUDoM6$eOTd3;sJ<gGV@ViGh86#l2qvSytV*E%0Wa|*cy80YoVTvLMBf;OotWA
zIa-~frBO$oq;5Ur8^;M@``(SdgGH7y$x?Pq4wJ|1uamD6c76Rf3I0qsLYtqvvr&T=
zCNLZZ-^V>M!gJS5k^C%^Af9UHPM7aNcyR?aR6+_3Oo0ya2jd&Nqn1Q##+Zt5glY+=
zJ0)CQT{9@0&v<zX%<!-v-zDlmXJMziMtW6raY&grx!Mr6kJ9gBB4p6%abSd8yBH@Z
z0_UT1TD5E#i+O$r5o580vm|ZhPrGAP%M&{JI4vREB4-Zb7KPR(GuhYaBaZN=+Lis(
z?DueKT*2@1lFnDamLXk3B_Wv`Q40Q|-$kjCP^XtAP-`&lmy7;*%~RU6*a2<3gi*~d
z%x-9H<ebeFbMT(tmV2U|-l!2m>%$Z8Jy}W^_5uzvFvW+zIQaMN87HgR_gA60bMk0m
zR3ZxLpNUflD`=c$$usH*t9wq_NY}<N{V1~w#n_-(BheTWNYn06DU?z<AZ42LoWI?6
zK)=EEp;GFns6Ow{u*JBigK4&mwZRJ_ON?q%*vdg%w3X`bs~#U-Xo!ACpzSTHIcM5S
zOje7^z2VQ&Qna0c)4Go+UBr^*`5J*@i<G%ao$2S;e(l$bf!-Qz8kw`!a5f;`mRmr+
z)bw4_-1I^;xFV&UiC%rIF5w4GrM-J2mHPyb{pbcX=h%5?<?DYGf#{PmI8J%dhpT_b
zKtf-hdpwrsA?A|@SiD-WZh)4i%BwLPqI*RPZ!HUyD96!rDL*Xj{xnXUUXP-&OQ@@w
zrn-}l|7MbnPm5vs1qY`V;nVN%WgZYEiHM52UJc=}EGBmGh4U&*Bh18DB0ah8l*~r6
zJMv0Zt+ucJU>W;0>AEJ#D3u}I;o~SR)Y@J89>OWo5JgWf%#|6lFUUn&!QWJQfb;iF
zfwWM{FfN17shdR8oD26Xpbteoc3BByGmvu!-?83fm=P*jypsQ`mNwQG+5oJq4?+mB
zI0^AhErqsQGqh~hsBv5U!!|sIEXL}QoGJ=F2O8%Bv*;3|)=Vde3<sqb)5al2=&%-y
z9s=me&v*d;9c=!^LJQ1ax8xklyg0E!=B@aXqo$t+!6X2$`0HvCuQNKt1&e!QV-mI>
zt!mnJ3R<O1j)pX41uFR1R`l@;YC?9_n%L-$5;MS*XmT#Ko_9MPZVPP~kHShO%t~v?
zu*f3V^y2+rl`BY(G*qzwr6D3ZfNX4eqjF4Jnshs4@MtnVu!B{rS4AyP_=dleTD2!p
z&v5kEuS1#bC!5I3Tv0UL=IHvjNF)V6F4-OE+ob@4X_VeP@~q&Bq2f+8#+?jf9S=m0
z;OQ8zUrykSg!!TrlVTrYRzr+?R>Pw$R$s!83H0bm)4W4Urss<dyTjs(*Y?<2+@*8L
z&|*fMmoVrrjDYhrLwueiK6g%H^Z#zIUf8uu?y10F?*QRQ(}p|45MD9XMc6uV;(S96
z+#XJiQLlF@3TPd_PM_~a8^2q0QT4BLLLW>SZ;_6ZgsJQ=p;bp8i_|Y=t%@fHI+tO)
z;SV9oo4uOPu4?)?LFr6FPkO?4yWY8Oq3zA@pKmQyD;@Bz@^wXJL+{i^8nKvog5x0~
ztVbyCj|ey2Q2M1kcGM5Dgh2hq%Bl;Ntdrt_+DSy&{aV8#fgoL83z}ljc#*q-CczPf
zQ-^_apOF4zLnq<OvHIvkKv6X(rpJr9X0XrM@D~SLU9f*TX0(^jMu4Ze3D2GY5}blj
z9cT>_9q}U<BLaGUS=k2SanJVoRhaf_A;GJ&R@LZyf}6JvD>~OWAKKa^CdKHlHeiVA
zT3KXssQ3=2M%Sdw{86jE^EfY=77m7EN(XidE)*dF8GSf_8Gj<(u+g_lxr7|O4O=pB
zadwr=K=7DVy)tUZ^za^$65tZ{L58w=gd%VA0?rm)V6f2?yiv-|4QbqGz_8(QI)yJ*
zCs-yr)xQC{Npu~(u7dzFh3^O!k5CwBTbR&MjfZ;;5rC5WQ_CyCHQG||XXio#MK#PO
z5E;9)w$-qsJ&9V&T1%2Pt;e4x>epe%SQ5xbS6gQ+opQPBtE^rX(X0Q+>*tp12^-JJ
z@;71r`6v<WMhHehi;@-(6Z!DNiOr4HP?u7wW;RP(eSB+Ni|*XcK%I>Gcu2IR{_PH$
z7QB#+9Y*)CBdDx^<|9@rQbMqCl7odea#)VX9tO|;Y^lIc|0oIH5fMc*QJaFvmZC~K
zT^!SoajeKA^Af$m^7tV5(|#2?r4N{*9K$FQ6oRp$nVZ`6RS_acOX%$n;y^a82u^v@
z`N|fB91CwIME{{FYvRP~?7A|3AGW9*&+M%)=n~93VS2cfmwD4k(rT=l<=>16M{9nw
z@u0P$dPEp1sBSULeAe>H3u(Ms-9*eaUJsnZF?m5vD8W;4?UKlTVv?!1f06S4-JVo;
z^BLC$m@E*jKw&a)=%|1X3cd-3dWA)dBFPq)s&+<Fo?eVHJZ+@SDVNE7fpqQTTblKh
zG`zZbHqvrbGX%k4dEP$KY8o5eR6Wyha*P$TsVG1t9<OafV_Rtiq)@jI&Cj)D^$mjg
z_b{COxlWex=okW(KMWknig+d}2xHyNBxR_MSjSlG&)*FyvOYds(XzGF#kU)P<%DO%
z5C&b6z9o3Tnp7BanV))WbI6sW8%i4msf|gRm6KOgx_cVQ5nFn*Fxj|$NZ5B@-pJQJ
z=w2nY$Ay*9r|~s4!t9uvTUgU!EP<<Jv1i;G`O|qkdu1T<ud?{7KYIB7=b7h51l;sT
zX3WZ@AaefT_aCtC3A*~B>EP?26;WN88P)7kkWH{1@r#vsH#P|Cqdnz`4sRyurdy5_
zr*8n!TDKPRB(&^Bxmiii{m#htRaNa-Pz@<+g-@(z^1EhgZ+Hb<Y<{~_wdjEvY+!6p
zn}!IwfBjs?d(9=k-yU6XgS6i12O-~UPi^Xpta9Y5&A<Yh3YAz{HB^zG))vH#=Tfz!
z-lH$pQy>V$NiX0iys_1fYTA~qn62H|vw~_xH}LpDj$?+ARyWt=__YK3x824!1N$}~
z{C?}EaaprN&Hq`NbN{jx(e=zF68~k;!k3n{84a95L@KlHa@rTJcKi*T*IB|)B<A8Q
zHA56T_6<p#>iT*YN>4~@Tu+@(?^_jZ8xzP+Vk<XH()=Bo;i*Q~YC+~?FXW}^FKhe2
zvZc}iS88oly>Zo5JI!c-Eox6lZ#mkuW8YbhT1V4N!H@DH{7oGZfo{$!B$XV)rDM4o
z^7UaT`HaS$W5<ttH7&iKRo3qZA$B7H8#)&qM0{{kY}WG|%2is-$6lRQo*AuZ$0C(s
z<zHiddmtHH#(Kw$v8p)?0qd{v`W-78VIiC(9*UymStck@_$_klOnq;X%(Wv5%P9N3
z#&mCv1{M$5GX}Yka7#K){|@K=loz28s+YaD7ogxg?{_?J5xn^DnDUVX>NAT68dAZ2
zoCLW<_v}&y+{|&ZsdAD6Jst}8X|0MQTbB^JRc1~oCv5cZ);`R@t>~WqNbU5ZxEO2}
z#;472syZ0PGc5)P^oV3wUQOA$_eiUvK6)J=WA>F+LJ+XwnLekcVsIcDQCeWB)G9d)
zarW)fPGsw)1!KcgC!bbc#2`%*BS~x7lsOqD(i7XS)85$_UDTuIae38-d788O%zsL%
z8RW8og2+hN59r!T3B=%v?80F*M5zp5HVBnc;5@s-2^u0;!7gV}#t3UB=ayp5)kocB
z#HYWJP?gZ2l>G#>(va)8Oxtza`MfU<YT*m3zSw@=PT1;#yD@Bf-pUh?`M+fP)5kvx
zc_himXOZ&sMR4U9cpI+b3<5^UE?7iew=NcPij4(p%7EYa{p(F*=2S5Ox`(+uRBIU8
zY803;iE?cfM7{)}YtwB?RA7{O?x$N2FEkSZ#Wmlsx(so@f2pfUS<-x<nh374)l@`K
zQiN3$mT$v#zuolxCV8{N{qG=X&!1c|o43l}ItcIH((!1p^QARvQU(Y8s8cM);=B^|
zA?%@ZA}$$jBwkNZBZ|DXI^(QL>}V#yGDOECDQ7_*kTyc9BaOD+b0s2mGm&v~;+-Wv
z7yZn-N9`|eZm^{i%z}pl_C0a@VE4Iuod2KAy%F#Z${&;eHPC%>01*FqW4@URd|{$!
zz?+6qG*|(xZ@8QP>mVFX52q(GSG!|6lde2;Gwoj8I}Yl*G$-aXoGbM{SBcLUuep|u
z_ma^gX2Yp6r6;3?9!s{o>WQgs9wY%Z+W<DXbAs_{jbt~yU-X!u%R<6w092SGHz>5q
zOaA1>t*p2((mth28wbn(v$2VCiq4%hyNoW@MyDXpyG9(bX6HnjN@*<``}5CWwQEsC
zFT1lo#4wHx1*=s%KVvfWsE`Npi|u_Ifmnu{wX(6pEVD8^(??PM&0T}_l55->Lx-m!
zCzv(yMXR>OJ>Q-)!_8zE{8Re>Xy#eTF8YB(2iA>JWr7(t-bU#r^lRhs;~1`TT4A;3
zj(<Qdp7x8nd{>l8Bh85WUX#|Qb*OR!qn$WSVgU2Z9TVBzZd-HU+xJ02x3pc;e(`mK
z+NA}JS1$4LoAd;_Q?sX;!}~alC!UiDax?(y`BohOj(_fDjfc<bV3(0B^E=9J(q^*?
zar$Ipw{v$(_v`{Cx%>!obrd{T8&d&FJ<RWNu03PuT^eMyc9iwnzNX3s<jjJ?pL*En
zrC)jIv|0r8iBR?FK^>o?Gy0w&@5sflpO9aPy1WrY5|vy(aj9kW-7GEuYRi(t`VehI
z+E#R^=P9yaZp7&lF(3{KyhX_Lz#R0heE-tYpd`O&wLe2q3%S2k^3Po4#aCJ2+f$nA
z%ph%hh1dp&bx>o$!rqUu!r6U=oX(@6wYlQd_knAhS4i*L<umdcn<#GhKkWElKpDQS
z5@EuXAIn|KwF>FU97Mch1CVOSe{snX{uz}&W70&OY<%EXpO*f(`g=N{;McK?bhVDQ
zr>!kUl-G&{nvtd{H}$&oda-TFQ}0V~+9T>!<B?s}v8$!bMOxh;8FyP@j6G|1Bq@+G
z_NsJ)Bc#U2WxG(W$wDA>GM*qIM==wxC``?&o|oF-{>+Q&45JRY%e$B2HFL#r<ySk2
z<;^tLzXK0&>ZkkFRGCNa#9?ss(;n+h&eLR!=AV7>KkWMC8ImYpv>PBQ(ox&IkvqMv
zF;fSFNC-WLq^^Zqk!<@a(z0_X(%_{GXA*PRGX9pj@^~)uk!3`dm|ard4{OzV@-}?N
z)5SiC!0zo1F?RY3`F!{29~@ZHRcL1}d9wjU#3-^FHyVJ%cSuQs)f|FW`W&j-1<VcU
zeP!1Y(u~t031g551e9juueNQjP4Sv(&+u(P1>vW&y~HM<+ir^eqe@3@bc`<A3f=Dy
z8t?<o^PTCAw0GksaRB=xExFXl90>(V^lyj1Hv1Q1zG)B*uv8%h4C&60Sa0V@F-t1+
zAH$R%rBSoS;YF3JdPX7UU(@Xjd=;bd#-x|=;`mj&|4A-+`UNvDEc#rIfE7qD{PK^i
z{hvd#`hgGgiHh3L4i$a`JdpKe)K+3p^f;xEE7+r1fYP*gWUAE^$&vX-4zygI_QWcr
zZ{*0Cw9=bO$$BizSblU|%qeltLF4**23V98f(4-lhlSV;hw7~GrA!SprOmtS?~@0h
z5>;+*;ReghI46PuQEuMj@6wWsq$3Nyw&9q<^KlB%MY8!GshoQ$-UQ)^8bL2wUo74R
zj%!D8eo_byM#Ej*<k&$eGVA=Y9f1f}`&#p>p$xbD_sbL5R`eT2<2_*1u>szR482r4
z3Ytcs5<O-|gO7<bv*Ar@tCIK22vsOw{-v7m^Z$=ypJe``<n!7;bPLoy1+x-P>A~T_
zR19hlSUpe@edtBnNlD){ZzWIicWo>k({pG*<LO#GTTqtgLR2!30fn>`QrwL3pZ+M1
zDff$pRTr4Gk;|;HR)q*bJaV{Y>(DYu3zpgh8j&@qiMlw=Sr72&Hzq386%~Z025l#s
zs6kd(@BXUCE6`)|7}O)R@YbIVI)`!&wr%@fO*B?vNKT$jF19bH*?17ACL@MCz!{NX
zWTz15!bCL<3-vaFlvff!<WB$?$qbuIgY~V1+K=M^u=E@GD1$Z|?eVt!BJy{mQxb;#
z80pi@lILRXg>m{f<NJp<a8?!ic1o{#wbcP3oFA(cGiWtgkTA}GjNCUu`Y#3g*(=Wg
zX(xMe5aLY^aRQk9U(Sj=2P>7smy$)hr(wp^QtbE6iYr)lbIEBDgbRGi>YJ}JK^IJg
zA#&=zwL&8&u|S=2k*yYeUp;FxE^3}^gGnr<#|Rk+kJgVCFXzO-r!PS0cq$%te_^M_
zR6wV|oI@F?ihSuEvlW?-#-&{;TUoU6b!X$&VU%^J5gxH#)A2l%(<91ydznkNR~^j>
zF_#BX3$@_X1>2wUhhFz!Z#u;=kwno=W8m2cQP@R=G4W;zRv$suG*ao(Z_%vIL7al!
z%)!d|zO-GK3t;%M=j{4gtEY1OFj{cFs+m#$469uwpf~@3*4#0;I|RJ{qonUMguI6t
z#VyQFnaAC%CqIyA#DfEDUJkGPgP>U1m*n~*{+<)h33Lu-4P!h)qK4+toTvbkw`P8$
zIAus{Oau7V>ft)tNA(X^oZ6noBC+#@(!U;3X;H<GG~>M_6~&}x!N(t9vK#p{Lo8e_
z8d7ayE_B6QU8)uBG4|`ibI7QUOj8Yc$5ODZEJMghKH}qvUp{R&!tAekVrm(J#2Q6$
zFFytp^7-@uA(nXFDM~~k^NDNYVTa^lWJDlo>SJ1HRobUu$1l|gg<H4kOC|!G4t@6*
z>cVf#jFeb}lYrTo#3SThRC(2!z9#M!>yh@RSHmKwEF+w^I)DJu{JqkB6W{%LOuQ3#
z859JU8!UcllTF!L<A1PI-1UN$zQ}u#CqJk>?Zp4X%+FgjIrl6C4nB{dp_~pjY|A(^
zJrn7JQ%Pu9N8U3xf`f&2MQ`shoSsRvZ10hLqZCu>exBBr+~4pgGlz2R1yf|JTFB8s
zu%m3)c4(ln?)ap132H=RY@AVXI-&mY>L4eBC;)q|uRy=J$xq$P&#7C*Dg*AVJ2iW{
z*(Rf@#nt0+LHMdDs{tGeaq)#Z_XFfVe!Y*+>$=ogtBrw2Hn;Sxl*tks;(i^KwQeXM
z$sdLr-J#u?t6+TSMExqGuQ(YVwOwy?SYjkVjhAX+0~Ok3eufR65dv7&&AIwk$Q;bx
z^r2Axv`V`$6*7F+;CP$n#<2WfT=NeDKhGHcvhd59HV4^9;DH*%6z_q3{hH|22!I!}
z)K9Kf!Bm3AqU23o)B7|Qdppiw1O2<bkk}HW(&}3gluTxCoXH@Uto(ysU0|cbm_RsF
zq@_ngj)aFJU6wRrW#sckB%oMj8)6r>CFCs!7Q}JcFEnFI)4ZzCVrY18+YcSuyERTu
zVu&eBN-2$fL~5u7EuqleWPpSp{(<Pe>H-$K(I}8OlRtIWS3cH)0bjXGy=GVj)iC${
z)7exc*O*La#O5u+&6^+88YA!P+4y{{;6E5gP$@tTz;(L+OPU1#pU!`t%1_OQA-<7#
zd^&Uams6Ty!HUpv#TEKN{cl8d;_MBA#<XRR?NopT!_ngJu-+U*k+TyJv*!g~tZ;b%
z)*0zDe<@JKcb;j?kh2NFAJ|&Kv&XkD{(#GNoL+1At!3JSs+3qPF2iX{u5i85@>b9<
z_1(|cl%YoAahc>y{E#+mLvGB>Y(IE_hmQ5XMW7;l+&;)zrmZBAin#t9MUGuHI4EK%
zOXfI{XgD8ug*IXdH&3aJ3pGdH#rk1c!Yt+Y$pFH1V?lp)r92Y<r?PfVvoikin1@U%
z@VeW}!M0~3pF3kiC&GWLS?IZdKT`K;aKGpehRyt-6>s~ULrXI<MPwko&Wa~D#3X?-
ze6L?C9jto#%UT`P_D0=COOYdzlH2XO{#EN34mP@PqZ9?1#$tU*_>32^K<enZopMgW
z4B_aKsukj=VA|se=tSBiK_HsbShE5oR703!yqJJLKOX07ZiJz3Jz7QTP<{-LRcI2n
zhm~1PO7_G&Jvy-s%g2#)r1`doF*~$TPVKp#=CuLQP!X<yWwr+Tv<w52^R{7Rix|n;
z;ES63-V*LPFO%^vG4MOWNs(<*dE%w#q_d5JBpzC`x-be92>2+ZUwIqOc)Tw<LfeYf
z^`}8C8s2#0=k$=O(3Rf(oJ4}<|3rQZC@20m4OD)LK1zKU28XfSu#neC{)I+@+e?`S
zGMocFV1~m#s&QG=I5VBT?R%e!Q9LWCGAoQ#J}^o;dl7I|70=7_`qpB7%v_IfB%)!x
zEDWo8P<`})2Cbq6R;C$mHQd}8t<U3J;%X+)T)RWAiJpECSp{ff*t+cyxyFNah0(0p
z<hum|{5X-}&e4pQ2GRSIWsgh3iS}FT<=ROMxSo~WSSKf0rz_Gcke5J)E~6QuF+xUk
zS!DJvv^Y8pl0|7|vRen6+E)&^dt2Qe>+CXH7YWl>=nN3jT(Pu%;S65w3mK%b0_*{T
z9oY{TaF(zC?(KCAl2rdCNq{7l%|9TTCi*vi+zx%>Z@L7b1Ymki*}9+|YUC>l2!CRu
z%00>SbqW&s&hU9aViaR_@Dg^Rh7y~9A-1ajr)B0tN?p6*k4mw>-`=kf4xt<AL}gYF
z(1+EtUw(8L^o;TG3?C7g708E{a4Vz4DnNi?j#!O`Mn`u~q+ktAxu@rFp5ntNQTl)-
z-^0s^=!Tge)}hh%n}sWNI0jR$ho#5J8T&X3a;j^K^^IAGoizP)ipa`aV0=svQL||_
zA~v9hCG4l+z9Gbi*6HW7yA0AV^Y^DZ*+T2f{iHG`pHFHLOa0r>7gyvAwn$u~popvj
zbSRGXkr{$N%&Wr}p|xBWBmlX(S-aU-B%Q4(bJfNeBcr;FlQc_rsz`o{Ywbs3J4eE@
zhBUO`c&nt6{1QX+ko|SbGL|wIGLA=~_ak|}hB?=LAQ*k%a|9$NZ(`tV6FUfC6ATBZ
zR;za;z}v&=5S;gETp{&K0E7`<?M$6eb#QN%A&>hirbE{xqm4NF(8ECf+NzwnrFJv{
z%KA?x{_h)<fFmw2l|D$Y0GYhqFjJsO3Nf}9I4zy{HGKKb^E4+?i{aY~prt<k4f6{-
zf_MHLK>ue);tA{E!y)hm9OGhH6mOcYzJnO~gi!Gv`3J`wKUJBNj$#B<n8Iky@Z|(_
zO*J>{x=A7vP`oD$7rb5z20xl~Knsu?8^a@hFHtDOx1wv02bLA{t#rOi1nGmgZ+!Aw
zr%$ByKraxl3H3pI>aJAuJiSa&E2)X{a+*ViYWMODBHXg5idV%T7E#vy_eh_KJk}(c
zJ0z3MrlxD-rCF9DWr1I^h@EQ_v=Q1pZiB1Wq*|7F!iU$-`ue%Bu|B2l78vOTzFp+c
z$4EsV6|ds|Ow<3Tj8+5gNhTq}6)O@sK9O)pUgE$ary!NUuA}be&ZI()d>ZUCK7hWM
z=l^aSY0Mg*cN1Wf^0^V>D?m=dQa0*v1HL0=#60nKuIfse6p%p5wA*xbIAgv06H}8m
z-1!ye&yqx4r-N$-a%ZZf))t5RSw@OQV-;t$sZ<0?JqFe9YWx9FW#?Dv0biK7uUMU5
z?<5haY~aMf^}{*8kJ}JGPz&L2_5JdQuvR~0uwqv=oEgE_&Bo4W@<_!@W8w6<NE^Gh
z6Ry7~XL{TG1P7OU^YOm1^Fb|k!G)5UKzB0TD`Jl0Xaz25lRW8=JG_3baPqsgzjVnO
z=c*&fw0Vb|uNcH#jbz=&A$wP+as6h$GjH5ZpRL$6rTXVvFKTv82kNu&kgUvQFK$~7
zI~T(u8_=Ch?AXnc@Z((Z6M#rI<G~-GU)mTau{bdMFxcbc8PM}tiHbgsB42m$Bk3gz
z&Ik8>pI%tlb*%xr3El$7v(ozdE-Q(2*9%t{y{3&umJE+2bNU{^w@9djIAT815@qKe
zX<MeY+-RnhgHAUtT;Aj{wg{m+!1FHyGIIAGXj?qm&6`$W@)bHAXGrsIq@>xZWd8v3
zx2iODD%a#kh>M8Qag8ghShC$m%0c6CPV`?W$G4<a);)(6jEO{`luhwhpgNZ-1&8O|
zlAP~m;DS~eBo|=pp#@Z5ckvW-R(w<)tA%4W<@o~QsOCPOsI^=bEi8*T@CjC+zh-+J
zsh{hw%Bctl&B}xmL52F~&vDmyUv<9}H6Mq0ICvTu+RluB2XwOsS9`A67=EcdWYjwt
z_rcgZS9Dbrl%LD)dITbn5+oH4V^$+$x5~efe|$%`$k>}tI*i|<;$_h|=$Co;_$7!Z
zA0a=CmF9iDok1Mko4mH80TJ$Vxe*R{T77*nUAN&D<&zzyupj7?WefKh>Ri&n(Wo5N
zZj}-&g}P4aObIeurA~g<1@d(COy-Zg*eZ-+P8#t^<i*k~aa!(Q=4ImCV?64m(zTkD
zEw7Fu7gfjk9}aKXCo2MmMjAnoO<xBhaki@3nZFK9v-E7c1(3r1^S5z1)HqH2?K?)B
z>!Em6)@4w(&!vuU)9;`+#Xh9^o}xI%=$Bx7@Z&0=p>ZZk4ad9)q;!(zR*^|2y>>yX
zV0$l<neqrG_j}Lkl%HIZ3u)&n=2wZ@K&(V!dF)K1KxumKD<{zFH!cH*$Vfe%T)drP
zrE8Wx8w}?N$#s{p(IOzr)Lat%VdN7vF9P#B9RQl0rU(*&rVxdx;M0G#(71lG%{X-p
zs{!U{<aMBt<2fSlPM!)dO7m@jKwLi9`2k}C?hcVjUMjVX#=#8%Z8R|+3ziH=<CTZ+
ziXnZR4%7A8Z{;G0N4?xueUy*Be2iUkp44}`+D{?;C*V&Hj=P&%TU%;St<0L)o%D+O
z9+FjtSH4s0YDldg=!5jybZ0|9)`Q)2FTlwFWz!x|oe+`RA;<kyP)v;n=QzC}DXJVO
zBI4^0&71*$=Xvm4Eb!M?8Ai{3K$4K=yxeW#QV*J9Hm5PS(qymnPn#o)Z-5a}X_G0<
zZFCBHzKOZnd}?}OCz596I35vSknUIo5v8k^I@4kugczBCGIx+)!B^ABGp^DOlMW@e
z(PRBaZ1gI)*VOW-$CtC|gk*p=>%=p}N4dN-!%8kSIg<$k+nu-0KlHp=Hjh>blkUlD
zlTWo3gAdoRoWr-%>=^Zgumop`NSM7DjfcoRmw>ARPCSG`|H4E7&#L>*Pn)xSMZ@^w
zYQYTS;o$ZoNV1@Zu6iLa$2%a~!&F;=rE@+l<?zI*ieN|DArBHL&B2c3m!Ltnr<<cG
zy5G0m^LcPAMa{>zIQAO5Dju0ZpHA4RM@=V|QJL1{k%X1k;(A`KiZ_vKTnXVIXF8GJ
zIu$O1&>RFMmvaI_$0bA)hP^EE#u0P}?b24ib;T2oj?*-K{wRq=U{zS^o>#>MnMdRm
zY))vkdr7j8X4hh8xq@%*+IJ2%=g?g)Rx5^98%*Us8)`cBi!<wdC1N_P)Wo#LHFMvm
zG`1=G3R|Y>2D3C$ceX=#;yiaU1DEmL<Fq38`eqO8ks%QM|HwcDwVzn<{KxcJf1+Zg
z=<s)*_77L3s7{jtH@tViW(BaKtJrH1zwC4OW<>P$<^uP+etHs8;^zFC1kwII{kind
z*ELua1p^Da0x1vReX>37V5{18_QQvp652zV*aF7^*1FAuO6@y(#V%{Z<xg8Sw4%<w
zE&5s<JFlqoC?lhti=aPa(aN=bzU0&yY{bLK@#;7{m8+(w=IZ_RT0u9p>0HO00Oqr3
zID(Eo!6T2`$At)-T_4`G?`csu)W4;F0JcUt8sAZqCvWVxvRdRc^_I7&vFQt9L8iJ!
zOcxC{awij!j5=yY+F=U*A0-5khD~D2!|@Vs9o-%4D`FUdk7xJ57t9Y0eZ~(hu5m4K
z80W5=I~ODEF$W0yuDcDjq{e*YgQ<rHwK1D9zrdiOZ11nEY3=K|!UHXZZ?x&mHI9x;
z7`<Tpr#^tD>Svc0`XnnqZcBT9Yjc`w8VPa`+*;w6!gy%01n46++cr6m*uRS7rE3bG
z!4PX+oJj9YRsV{(xsv9gYY2Uh$*V${plJfPyaW;(%BCcRpr2IdzZy)F?*)BihC5;`
zN!@#|O46u)$3E8(uF0zSz$`m3sZWB#tQVIe^cx}=<sasIdf4DK@_2unSWG@l9>Un-
zKDq3){+r|u$YKDVj1J6hmX09QA8s)Mdu_7(p4vU6j}S8hcW^mMi+^<Rxjf)0egHmP
zmqMUpXTvAG+x}8NYCKF34o%!P{(vz;nc#rLLBvpacRo8LG4W;TXJ~YXx{&od(}Q11
zKPkI&!4pUE+SgjK74O<wZPjJAOfx5r`%={|M{Bi?_}DR|cN$A+WmFlOPxqnDrL8d8
zl@8Z*7SHKsbdx$ICcub*M0rBj;lQsuZMv|NXQQmYMb#GfzI_46%rv!r+fFz37vQ`Q
z&$$^>1$kYqy2%*au041U!v34`PRj>p$|t{8dvB<M?Bh;t<Gez0A>M;odQW;Uzy$<t
z`%@uZAB?|!94{(f=9~RyA!H&Ilu=c$wBA(2qsHgR6%ZXZd~*OMak_L&1Ut(>|3I(I
zlll&lrsnYSIeQ?@r^>^$BSfSs=?&{%q7I2!Y%5cU5yMrVgRS<e(m^z3ZWuqGkwwLq
zGj^O?{81Eo+A!Bhoo@X3x>9UkYdqQ}fUhY#k!vgmalkw@0tZJOICIz>Hh0FmVncv6
z0gV$ZU}EoqZZitNpv%{a46OLIrj-%(dC2LShKajCZ4ZCK*aycHtq-E%`VzNrgGee#
zq}PkuRY1$AlhYuT9~DEo<SSqJ#+S~{#{<qUxBHV7p!;uuEb%D<zaa+xix7_<r`}-(
zp<|I&P*r5HPl?3<7%t_ZYtjg;STjZ9s&FDyFo(t<;YjMW)E5JnOWSb9c{o3e{H5p1
z<MGF@-}aZr$L1T?1Cll@c3Z)~;dUv%jhrBWW1t9nnY5s`WD%0n%m{MqXatpwN<&bS
z<!?SL{ZpA(C)4pp0G+mxTuxa|S3*MIEH~p1kz$Ea8YMV(4muu7-S@NvMm=$25};Qs
zS^!2-UU<yf`U3Phdcgn*iO3c#q-bT7+;km2n`){WnFCZdD{ZFlK7_J`S}jn?JaeVC
zOv=Ok62wuBQr*JpXZe8NIdFwI&`TRzlqY<(xU`t@=7v?35{HZZOm-?6h$5JZADUPB
zd=1(?)w91inSD7)s&+5!*rK{Z_&1_N_;Xs^*8@6!C83PGzFMVmb*c*^^>lK|dh(VC
zxO#w-`0OyJnCJ5^wkYn)@fskbhWw2?t5i6Ohq?ih4Zw3>C+pWZNp~}6pMu-RXi#I;
z)gw4hisrR#)se@Wj3&6MXs=R9Z+SH#3XxFbPd9s!>T}lU5I@LI_@#mx!$ItH0%0{5
z10OQRf7N4{0Po~)b5T7f4=5|;-<dKllr`bi4M(e&4lEo{qoL_hs`q{Rx=aqb%(4Ga
z7QU_-MhZ&$MGdvP^e(v7ds&4u>ysg^sMV*5uR40D?}~8RPF!d^YqQ2l#xQ*~%FKu9
zb82q2(v0Y+pu;0DYe=Q{3d$#6or)<Sj8XWc=z42_H;i^i&jk%GZct7=Nd8k!5F=7L
zfBSlz_}_^^!T0z*bm5eMaZXE#h~DnA&_n=&q^d0m=4;mNe^S6ah(JRlOyS!^_h{AE
zcK6MpzOj81UeHu$jZ;QIu+?!1M#-ZLj=<D4y~o2sk1)_2_|Y~M&-36;n~2b>)IZ4C
znN$*A*3<@P3E5I;6NZ}ik*amNNXMF$!**(3^tFG}cyM2UG&|O-V1S#CWd>CeH_KZP
z==76ETt&a#@zo$~`d1Tsl)95fZM+O$@`>6zsQdHp#p(1$T1FYB8E!dnP>ic%ywFvL
z1Mm6#{K<bcg_gluW%J_5=4#o3?8@19Ief~XGPd&AzRXq-qs|B>B?|@kD%^B-IzB9L
zdR*?8mtWV~is-4i|C^Bm-18i7&U}~yQu)t+s7B)UK9Wpa@LzzTbh=5=3t3!z#&a2z
z$oBH^^GADjvYqBp7L|K3r{iSD?lyh`xY9lbv`nS*D7PhNK7pr)tw)i(0uPrdTFP!G
z%(QNgpG1Ms<fi^TzgDOg|MAL@^~Z}!HRkvRv3D}{HSA4l+Zy;`qO{7oz4Qh|5jgY`
zV*7j?lj?dzqo?;#+>_fzDK{}FQ%lXC5Ua7w!0^_2)vs1avfD@&GV3uV+5OLY027Ex
zIQ};^T%}<Ml)tYHD^1!lBk>rA!xXWb!??qEkMid-%!83hOn7}lqqXss9KW(k%GD9u
z6m}*@GgCsps-17guQbSsGu5$S3kfG|1kpGhew~>SiTE#scJU+O>WD*K7K%MD8x#i~
zSI-y0eRf!-=0QsAM|;R0n7Y=tNJr;)oSEfzV7qid8M?n)s9fJhDe2IPhHOM4*n5wx
zyp3QD(Dj(`0)zeNW3*991~Pbc=xOa+jx|dB$$|hmrFju0sh062zb*@C<0BdJ9Pk(s
zO2P}}eodfzOhg?jwJIS5VJUvAk?9-y`hLK9nUVPY3i_m!EOY9bhXb0S-C_-85&%=X
zY)`B6&6H`QL{VtLYp%tmB_V0n*t|<rbz7G)AzOC9yd5O?P?k|EF5)B_T?a&1;QvDu
z%iXC|A5CHk$#!qlUfoIkp0O>826J`Hk=8T4aby!$BWq$0B|Raf>)_S@=a|TVZJvs4
z>B~f$xvkq7i+QkD_AO8~hkLa;i%v{&>Qh?7Li4&XPDDp_Cc9eKoL#j38?sxin^jSh
zQ^Nf?w~e0!j@UYvD~@g<{`$M^U|?9*>vcUCH9dFbWu!8^j6}49Y+*;maQLJ_$e5tB
z5-y<<n1-^E5fxYl;ap6sF*@|GO3E~et2MO36-&v<J&+Ql6K)u4<4Z#IPj{O#T?6*y
z`UKI6EM$v38<7B62F&;j@)l^ziskTtg;dd)pG6yVOF|Q%b0nQ1S`$pHHGG0!=q29!
zv|~mt8;1RT#&&GnY};P1y77w}V^k8}k2lk)sGz`p6*WUEiFdXMj&lA*IgH+AHSusT
ztvScpcHjNrbX@55A7xK!z}T^2hEgTfz#`SScmX;93!pp*)pIG{pSJm3*X|<+;)Muo
zb-vjXU$Q?9JpinKoZi9VW?PB8NGmR%E63d|hJWT|vKatIS~EnCLZaL-{}~-7VJXx*
z6XU@ajrZI^Kki`O86>>M=7Q5Kmj1b8Bp?wb-CHXw2`%{!{W{4L70FsJm`})Q-T6wY
zoeTEO`TL>J*@f+>@0eIE%Zb%zW19i(3bR1L7~vQ^%r|mT^r9E7Km?28Z4Gu%jMdxO
z_lM3_(4*hw!wX{V6j@#E0!1Zia9UlEAHo1ysp)_tJm*}<a769LnLDl<GHp0eHZ5er
z<WlS7K|QEzTXwr=^a}nzRjVVFhfvMn@!M<A@uXg>3O(c<Fp-3N4(v=)xJ;FgTXrvY
zKFgJS0PE0?XL}_(F#0)f%FBWLTM()-W<RN2?>BFsj|JzB@J1)CM_`f=_E6(+zG5sm
z9P9T~9AR6nn<5;tSagGEc8QzDVdV-70d?w`gQnS*8z{IbT9`{3pFttmK=Z&t*ByK{
zB9SCM=D17W4s~3NPI3OTWQC&^J=29#fH;4PxdzR>ydx*Tm2n0ZPc!;X{?||8W$4$7
zakkmDVvhCFC(Oz2Rk*g%x;`Yl@eY%t39ecLG&1b^2iuslqdSKhxF)N0l-c(oe5OiP
zu0YIPysK*7tQ0E-wL~j<;WL-By^6^P9`)}yjFS)lZUjlgbYG1Ev_R*=3bwomkq=$F
z^WgGwWP-|wFLS?TzJjM%aH5Iesi}nJ@<Rq6#OA|4my03=z;spnU*(A94o?TpIw}b$
zp)z-O0fv`Wg}NTVV)P7tN=G{EL`ij+&`3C3Gwe!h8#^BfvAD1-w=4$fBH*y!sWN%)
zsL_f3KQi7ix~|9h9&XYYjcwa*Y};<^q;b;Vrm=0?wr$&H8{gRX$>;a#+yC?auDjMb
zXJ*fyJ$pt2o?$BZFguqicUo9Uq1Q0#EF&Mff5bd%Qtqcg!vjuf@}C;h{-G-jmKy2+
zjl3AM=Ec<lEh}n!aJrsu05$laTTOBPbI}4N#w2XgX1%FAJL+!_;kMN2BDxK>tA>6p
zz!z`KZLNjX?&dN*Gf~}{)B%;Ju=M!|ON?N8d&e$-cBmfUSUaqs=4ta^QmD~?qjYz)
z7;htsbT;@2GvD5OT<YDj23<*<D!bPHoRv3!`GsFUQ$@2*UKxgO1QRaIVn`%u?11Q&
zrvBqmyt1Jwq@ko2ql5df^AUs;_cJ57`)*hEew%|T#d}wNR55mvCj56l`8_kL>=3me
zF0IC~|8r|Pr)9eGNwjn*oNRp-b?rtDcFco0aTBD7j68S}b@CuzTn7WGe3vZ}tHYHn
z9d2E3?RB!j5{DKYZ5gCi8g;&>#8NgTD8*MC$d(4D@qW7>+dOg@=iN2>!*=8qPSV|M
zPARP#>%M<cI@u(0_4vf(NM%&mbun690vl<+oCaMRoe_iD-rCb3H_O+PZ=j&&pN>%%
zbwXLoX6LjqripJL`CYK(l=2lII%`?3bgoi5>>G+wb;a-(>#o^#1Dep$?%j|8JocWh
zDT2gqB+TCqT;7B(s&FuEEf{6@b_*ov(JwC}w;D~W;8WeLbYPe@fVrXC_;{jAOqa*{
z4Lp2K!czt7T5SPvb(&&AA_Ze#;@@WTkq}p#A?D)MIGTC5zLA{3E4=GLtHeqr&agBf
zl}^v7Q`pb*Qx+vwz7W0t?|QpAg~4b5<7Od2Tr#h}H99{{+0Yf9bXl9%(7b?>n6qqR
zQ^RsF{Fwj;fLIwDw+^{RI30;TypUt)$+PbU+)pP#0a8?#UiED*?_1btUHn?}F8`UN
zq4L{5*<-K%sjd{=e-<U2W-2PGbC3__yC9Z#uJ(2i?nL$_d3b1UYoh#nmtZ^6tAx_f
z_{_OU%&><ZFX@RvbIiPZC|I~?u(8nEo@&m)C!N82U{GPvBX1JQKQZf`qWOp_l%1QP
zg++{-6uTBGD#vp6)LJ}=k<FNg9wTokH+hD5MTSRDm|GfQZ=@3oUZH!++^`|{CxR_z
z;FRBFrVCOMBF6iW@j1Q?0BDqJPtt&Y{7HNZmM(EdL1j4gLM?|W{OwjBlaDbps#1lR
zH|(^lGf+G)O=G|RjB)1ghDgK_Vf<;Q$Xez%Q7s$_q4=9=R_ALV>)pjsqmGSN3W!G%
zFzgol-ynh6*BA;w+U)u0bi2p-R2Az%CF?KkjHNCV#CR{Xt0hT{`=)RGJOkO4{X~6U
zDH_)?*BQ?H!H@csct(`QF(}yl4jjTEbkis8AOH*p6_lD?bo*j_K;Sy0W27BB^<>gI
z#yBBmQU-yf0&M&7fh<L4zH{E6i+C|e!;B>AytucHa{XJb8B;n))<wxW!awN3{$0<=
zm?fWcT=@Nv;`Nk3MRiwNc^<0r5+fH3FnQKras3yX_3Hh@LOMaY2?n&%Cex!4B!vj7
zeb9D}llNn{K%w5TmGBv!-&tJoGbYmeRw(1L>@N}GT&TQo*<ML!L@2^XKUMILUYgF%
zt~THQDLk8}T5f*y@^xo326$PXpRZ#TH1MRAzT&m+k7zx_XoExCO$P4fN-xks92ZxQ
z`$#<h+M*MYJCD~!0Rt<fJ6TRcRQJ2p>Y|+I6IQ>5e*v0<Y@S%5@F&R)F%dDSEd2WT
zKeTsP=0@<J+39#MU7Bt<!~_4ntGF~?b%(aSg&j9#eEqt!BxpyQbm-$R9Um5D0^zvT
z%~E$<lZM=Sjf>YQB0kaY<j<+C-+?Mjfi^TE16pCw%xx8qx7Z6KAW3(eTtb!VRY5ee
zi`&8(*iZGNp{)G|7i8vRXCHPF?2%v6Bg%tOLoXVuQ3{qWa_3<gC-M+vC>%(g>PS@W
zj_zM;+jf~w1ZeX1{2%%KQ*o<`o?vQox3kUSdp*C2fA7J&16`*xli~+>HLOGc3hnQy
z1Iq+$2YyWuI(G~ktMj=*p$0B1goSs=8wW|`a0kUuGEhfvzmK$Lc6@+@ITFMziYRg4
z)4r4nc_wT(2oTloQ<f_h=8BblDotu4IkyDJ89YjmgLl1<e#Ek&d@6wxri(PWc9n3Z
zAx8j=77Cs@67hkVfnYrrdvcKtp8N~kft<@8HCCI<sFg5eO4B{uehR5P!drS)9->Je
z)1=iK@>tU(q`DSMyfy=DdSh}ztTcCR?WrqXLrRhU%Vd^xh_Ii_91cYeRkE7G3#`bQ
zlpwm`kK4nSG3#BYyQLv`tbaM1z3XSQeL$X22Osz@cnw$pWf+Pns;hKjmwfGeT@49Z
z!E~HDs2;ZXKuFlOaLAW!tO#*Yjj@__t5*~t`*nA5fOOz<FtIr??CU;-=P2+QE&)#q
zD|ymPNtUjZD^ly89gFx!Pc;%sCL)SLXJB!~--jUEq>fK!+Qw6EtqDn%mhzMkt4t|i
zL=FviF4>vBqpF|rwcK%xnkLAYdt&M^G5Qir!v<=qRT!^Gkb6Dta_X*@V&tGIyQsiI
zHX|=tbW_MfB(~AJE%-QcA)p_Oq0@=(q<>l5k0+UBgn7=ubE4ymDY_Z?3hg{IZh27F
zq@~^BY-={~T8)&XciHu5Px8Mg61o8v5>Q=|mZ@hL?Z)*0n*Ia&>qsJY@?q0aF9!J(
za61Pd!jB8iWUfp-qK>ZH+j3f_DOWC;1;DN$&DbKUa@g@2{EyuuYerQv`EDlC74s6(
z;r~VF9HjVR`~5^&#9t02v9XCsg?|z6T^vYSPZLju#)-xTHPK`juEHS1PhTYOp(F}u
zY~E56xnqf=4kw*Rm7JP<!Ec9!s1_ZTaP{ia&Y2m)D6{s{t!jQ`(oG|k_>%#^J?aZS
zU5|4FLm5fx;`?e(&C?`ztz9;yATe>O?5{GDr{k^!mWNDR9W~?~Z>6^~9ezD_|2e69
z+?+c2x7KbzKN_@KynDW{*_?yMfFFjd`|`hpkD%<Bule1HA{C229_q;ItPS42x)E`J
zY6+@Q>}JHJbC%qdc8RtIES}lezeJo(Y=5?mf<nlM484BIB;dc{F&M-%y!EXUjaB@A
zSJ3i&x*|73SUi;}B02`lZ{@k-@b$$jJD9cS(M9WoD8(zp1=ZRbiKGMJ5mu-X{O|k6
z?H9%b|H9{Vi-D)h!NSPo+U?8){w!)r;A<|HZyrLYy?E<kalQO$1qp-d9gaxJX#Vqw
z2%>_cLHK(>#QTa?1$Aw_Se>?Byh_q-Hno^)CnEfe&ep}tSa~whH|YN-0w5nZ`4!l;
z-G0}CG*^s3NOrJBB)`_4KGriZes6P5Yy12;ZGs~nf<qR(X`B6<aM(br(#is~5EPxH
z_!uPsr5aGhi4CxdD}N12`|m9z!nH_COkqq+A^S>)K{g13!^H*_ps4v}_maM1XAC9G
zJE)kAgR$n8vZ?Kx#P^b7Z=;5%`u&17{=Mr>MfLOpD1+<4bmhEbF<-nDYnw3B?MK!a
zo-Y|nri0{EchjLk0Fn5F9E8L$H_YnUL@=S=p>W+@uS)j4N=|+MA!Ks*5~Hjir)Q*{
zGe~2OfNqCOq8`lNhE^TN?stEfW6Su){e+QEPKV&XS%COC(lWBE&eH3c{@988Fua%K
z*hveF{9{Jfjak-xF;8WmEdLn&q~W07u)=#B<I4jfM76<X62Qcu!6CuXWpZILxBH)n
zwBI2@i~~6w9n#f`YR>#a;F&+;+*37vcsbC|k0E?wb^3r79XC9*tZ_e+$ZW7NGwVv6
zMZ{TFQ{a3^aDg5I#qy~V1?OvobiPl=5_$_hT6mB)wKs7i`%1X46lKO}&G(I9!L1T+
zulDJDt+iMcHHbwvWIy6);X<XSMl{*qyWn8s`{A&axesmrCJ9RH&8k+jOwKTBW>x;0
z0(mm)Bbmb?`4`>#g4%$d*UJcze`-YwUUGMGR%RuE)B~vbz324e1^+rSv9sziqycoX
zQnGO!-Pg4c9sKah?GGAsY8lyF*s2qJZCgdkhWrxcp);lHn|<{Ga+;1Yhg0OmZJd6x
z79J75euW6|3x4v#oO(<65W>f%8WA<h&7ukEak#IQ(FiKYehH#Y4Q$QTnK{$~lQE#Q
z*aW9Fdg-9n&kMBTjbK2dIJPzxqfU}PT97XK-gr>M?qR0eFYb4WW(B)v6DKoCT-3X%
z@Y-7P2G_*B(*DloA*A@0pb~;YNx?p}C?vD?gi)_#JB7QFv4f@iw=q1)nEsbSX}*sX
zdeYgMXucSuUMuncN{SGU9edRg2S{EQFR-rw-uIqA1Lh#l*I5U?51Q9GGS2&vTPq*J
zHnowczBf3NrflX-rdj%&k&z+Uoi5Ey6Z{XW`y9v1+f9(*;$SihWWnN&ENSnLWZ!h7
z+4Prvg-G&H$a*apIRw`rT6F(+0&Eq9v^%j#8)F6X<3f#xAUIH*UmdndJ$e1|J7y$K
zjRK(hBwf6)D6X2nNnla5(J`Ec(L9ue(oT0i((OZA+?u?nh&moTiqq^H1jfCXV~%cr
z`bgQny;)0tn<ELek;2nG15|pkH6~XJ(+c=SDFN@951cscvK`~kwjem^wR3$zV8&&4
z1h3G)>41dA6fJnpp{wxS2;^`HN*Yb*z+vwsT(Q8fXS%#PDHFgb$!uBEGZwl3h4`{Z
z9qoZ2{_uKf!#+>Rc1~flYT)~Lkf)|As5@-~>dC&-3lKswTtE)ULd3DO;X1C<%ahaQ
zg&R*sAPURJxr@Wb%;^9Ps9u0co*^KdBNa-Yyz@g2I4K+Lb<D;I-vRdpIRP4`;V2Z|
zc-=%$Y0kC*uWZD$Xe8HrTxKD%2A)*3PC`5A%El46<?g;YGWM>lX#!sn5={6fytjVs
z*`%MP@#^WY0PUpGn}^xd6<CGsXzlkoEi;eQ#T*;xZ_FcUx|FVBCHH>=zr!kCj^3lS
zjc)xb6553?9N)gM{mM88-G30lFs&cUfLSznfenU|d|R6Mt_<UDZF#AHy(eBr>~=_h
z6_bSz#jq_MEHmLGb0u8R^IZB>YX=#ZGIQZmgh$eYU`aWvoL0_IZ|s!3?b}ROEtppu
z5x+m2p7r|*1zL(PzL}??j`)o{i;iHtp*TA?UW4yL)p=@)c+-)Rq!y*ME@I_rkp9h6
z*yQ)gg)+59WrqYS&h^O?pNL;H7pgUYX;?tWh;_s3TH&c-ookr}8i9p!n;FLaU5=EF
zJa<39Azdpm0!RD{LVfo#JPon0D2Lje!;NThzZ&Gsh;xVPTike9=w|B`GoskP_yEgj
zfPJxj#6t|f3Oal5vFll@eZ&(;m!&peC_pUV%Rx$wNpPQpj9Pk+?6Q7H+#-r7JuDOC
z4tOPEx!b55L`Jq$Awve)c!V-Y;bYYPI{B2Mk@O+;L~UNj*d35gQ>3zoFmE(B&rHV&
zVD;N>fvTq}%&Tlm9AaVk@|@phCJ0@Hg_YECiD=`+&R{BJ5=gsr1VAQ(qO{LV&;a>8
zxU%Edc+3)1t#Mt%_>&c!NZO+7AP;cs%0AKvdsNc5Mq>U!c4PdoFXE8#W|l%*xUgF;
z1z?Y<(G@>Bl8T;!IfbeqDVQTfeJNXm<S1z?v6}Sm@JoReo!a(o6$c|uHk#i&Uygr+
z|Lbsp{v11OedNG1O@;napT@m}3M*)&BpDXR<8oPoFs2IDA$V8ssa$UF-IG+XioD{C
z(T8uVBGX$yjzf^2@#X9!^N`cLZyEsbID9r9E-wqpY-`lkyN%7_$sSNp@wqp{0j&N$
z^N2Vreb2T}&5@J>oeK)|33c)1%<HQPX2OhL)#r`(Sn6K*?vZn3BH<{*q2uRMo-`<>
zXcN}Q55|yRLMO~M#?m(0dS~Kz^SIMr6Tu@L;+%pM)aRn|&u)OHHs5s9l5ChSrx>(H
zF{sH=6s1tHoX5{dSS4cDd0gTAkvkde0;?aMJE)eI0a5bT@Gu78F^%};&sn)vSci|a
zZo(`S|Dp%c_{WX{$YGmhcj|}bQ^={&cF3nH(cEcsirKc5V>zpMqI5(fJkc7_i_&$2
z&a>HF7m!zst+BRAm3-qI%C@#K{UHFMH0=Na5zFg`ljWMKc(C)YeEf`esh+$JoWFQy
zE>sWy9ZwnGf!BC^UeSd^sX>92YtA6y$E;*gv*fkFPda}ix^W_9I?zZ|app{$9P$*0
zrcG<Y;S^2+%uQ_+w9K)XSNGm5F)FfVTXxda)HE}rj^)Yutz8FaV_Lz7V|#%bW~Y`W
z(fYAf!$BTGEz%}VZ)o9yFpaeM6Pic`{dNMq1=#m}iNx)|5@PVWl_iJT+RHq6Y4zV)
z0^R#*^RNRsoS)8~8qmS9lfwBdvhY1boPiyCaR&FYC}7RYhv0w28X&q=i_xdEqN7X_
zdOip6QX7|qkFZuJpmr`}{nwu(E6u(Ap^742B%Zr%sUDY0w%ca;eZkn&G~7~sc(d<Q
z$BmH}Dju#b&kkc&IfHL890eM(Q)3ifB4nx<;w@E}h^}$PFT^~coIC4dl+KmN3HzyV
zmlvFbZ27E&(|7lnN=@GI#97A5K={33+b9Wno&!5H?yq$GRs;gFjNa5x;U%O3XMiMq
z!WR|as_qvYM_Mg%Rv89)hABh<@O^Vw!`WdPn*EWmrR@22!?uaPDdAt`Mw4Ei<pBhd
zdG@eeLFr+7wNcNZpObaBg*f|@NaI)`p-g%QA?_UZ3>^j5(fX$3IF!(fnsSOMz@{K&
zN0I1z&8O0tc8c_^?8`A#(Swnue#cR;;9TA+W727Q6Y=u8TsfMzFS?1a3ZE3J#q9ii
z-Tj}td9;9;xI-hXbo184@1J|_bDhL>>g8~LFPV;6d#p*hB)H<G@zY{dsu0oZ^I8)s
z2mZUiEW>dod#WV_dPgv1T|3xGnW5%9pcJMJq?12nqB8=W@LGnP2J7AO4gp2ca1m!!
z$<^>mzIhxNob<I9nb=(k2@;#YYkVf`bfmxk55*<|P9i;kq8~v0nrp8If3y!Rx6k!;
zkwj-&Y*)5{kqD7eJx~zXwXM-eY~Iw3>2^b5u9kwq74Xt04WJ%4;?jq;!#-R+n`P?m
zQ3iS7kGQ)1i_jttWa!nt*txhD3x8b=YYYyeYt)*mnoz1MWDE!=tgTq@UU@xZUaa4`
zERT14pEq?&n{WSIpL!@rKC?zOdbbLcknMw$!mVOj?5Xdk3L<pT#FN(H4c*9ZWe8?_
z?yu>8SaLV|YJ^oY@RW$G8fL`&g{1r7Vy$~<E-dGUz!{sh@2AGuY2+8rrU!FndBJO|
zH!yn6B?c%=>_3j_$-(~bByyiKL?R*ey=NH|Q2o5d-$&p$yd$YhQlsB~uzJU}nOXNt
z=7sG__r0nH$#*=~HR8tTPrSa%qN84DsY#vODaqMM^XCLf;#awKLQJ>Wk8q)^TPW*P
zFH_O5bWAjNi6=ZOeO_xBNW@s~2>ZsjTl)4sLd|6I_?0AiH4<Hse3e$|3km!%s^t~z
ztY`)#6&o$Ux21s@jS79-C~QK(DwBqKYO5l@D6JN@?LwIIpy692e1G-{8&eC!Q`Xc5
zCq*ch%9=;YpR^aD?ex_o?@=4=tY?s;5p+*>$PIb8S6XyRjl&IUww%^c*I`)C)aP+0
z2RzjANa0-c<^Ljrm&qyOitb4#2>Qfttymbr2*~MvZ+F(WK?9jPww5v@(W4_sKrNvD
zMzfkwV<B-uG&!(7MAUzRqMq&+tWP2)<-xRuBslY#5DtkW(5eFWB;;8c3C^oUdm67U
z0xeY?tw!oS?gX1HN_pYrv5?b!GXBUcKc9&^6J~Q=leH)Vb<a=Zdb#7_Yd3L`c5v!+
zFCtzUkRols=Hl}|rz1uTMK^lfzx9dRT2)NWX$+-HJv6yC7QP#~SO(=`R*zYP1N|8^
z_Twu}#gL@urLS>H0A&w{tc|kXh=VOskVCq~eFS8bo{YI0Ux%x@we&ZfW)YG0HNF20
zhKG^$D3kwqrFw|Y2q4#@iURHsW3EMA+=$p~9uDAbU_AH>Az{WQy*Q@s)?%%k8Owld
zZY|3T$a!BvV$khNyW}i*@(%ET8vSLIr5+r{*>veuYwhB&?hsnvEig9hgR99kZ4%@_
z%e`!l6=ZL3`Mbq4Bk9%OzyIYWS4A2}OwEdR{?h0tPYh?reh<SCJ?MaifMbu+jZp5u
z9c{fq#CE(xSjjsT#djIza>O<2q^w3aEmj5Y(Y!8gQFwLAm~r@?LGL;?%UqFfV35dH
zHBpSHXvY46Pq?;3t%%S0XVZlH^!Z4}{y!!m$CBUgJ!{|QJdM3e!kB(u{h@GpIYbo^
zwq|TgD1PkL6gM_O8?4{Y<89WAJx!VN^6&{0)|e6JY5DxvTc@A5eKznY4`VakaEBNA
z<%H>2dLOP<fAuiN+AixldoNbMO|}_zyEZ3^6grvq-}g~V75;+rArF|)1;Rm6b8PaH
z>OWYHp<m^%I_Yh$mZsP}VXvIay$}BQR%;eJXMzgLO|YTvrtM68nbbxLJ9(6E#+VSc
zHiw|4-oc|H;7|#@Zcu-<iV8^{v~X?;hw(%!DWdQXJ9LLx1@T5V>x$I(bS|K+c&Co6
zvk6%34@2A*H$673aJI`rO*LbtEPGu^-qWqNckxF<!EeZl#jfMjMJ=|SfrySjM}nGG
z8!1ZSs_etY=QL~XD)Z_2sS(L08BIVo$6x|GWj>|S=Aq5^?@ACS4Siyd(kSNyJt^o$
ze<bnKiV`g2`u>1RPg=xc$Bq8++xR|A%>h5af4oSbvPf8;-c;t9G=&S=L;^EYG9O}p
zlh3HaRBEbP`d&PYPuq|lYF+7I3ie7y=)A5lNHAWfDN+dr*Q59lfkix7b&>RM65|ED
z_n5p3@^Ox}49ayK;jg@Q7dYtm_oH{*IG_KV<8Fd}?IjkOWC__~AZ@atd^s#{ztI1+
zqh*98bJu-ei54`i3j%#{^DOAjAc)|#WzCAb8V?tQ-CpQ(S@$pa&UN;BvdpO-<#^mM
z&Z%p2%+|MWd{MK}z$V7U%cK{@jD=A=*Le4REnB;p2K9E;K<mZ(V2z|{_rRMCT_#r|
zC^p`mj*q(ZT==(L0|!L>$|5r{>vQgc{I%@42M${#iAd;}K101CbH=fiC&b2%ijqnr
zLsC9{^8pwSRJC-rV+rp@4{hDbo8_~&*cY;Ysol4q)9PI#ABGZ=<tw<la=8py0gJ7U
zeyMW2?2Tc<q3ArtX2^epuZFG8V$Cetjn%=W2gd=;p1baG&g&q-P)Q{rl70+eNciX-
zbKD0SWqNaU>RlZ=N3NQ0dQ(*xkqIdnTWl$|8*h963gU&XjgrxPy_u8@F>9#pxBLxJ
z)ox>1?KB=M#(AF`cb2xdVeZ75#CjzwDh`Dok%)iuM_X&bdtweHUY7@RvXfLW5LT*&
zq-H5+f(#VA9P0`Bf*|Hp=zOHp`IB#FtTFmuypNH9u<B)kPX_<{lrZ}WLgxlQKn^7!
zi#Z3V4FtT|sfSvcps%a^;Q7%;a>Irt11vg>*o%4_1jM&jv$8Q+D8BU?VN$GpLtj&=
z(yvciJ}KLZ-F$BqMm>g>%l0%n*2)8}-G;-p9!D19CD;bAutG5pQ-+?8P%w#-aG1yS
z_La2ON0!)V&{$BD`e*o9uD^;tEK1qx-^$!-w`bBw0`i}f*}I~EeyXaFg2xNf%NjI_
za&=Rr7gD&5wqL?!UsC1vY7Qm+NpOZ!Y3qDo&?WyuRv&Lql*AEftPE}lSfIoI%_-T_
zesk)AkY<R-O%&e89XvpWw5iO<sh~RW`QKXY-}>J7vGbo08r45Ftq_bFN-vJM^iUe`
z0DZb{oWGW#ZwEAJ*63+I&QXA{o-qj1r$xz7B@%1l<uzx42#N%T+?=$60M~_oBp&P-
zI@~UJSf3ZO8g+Kv6m*D8IG;+>i>liQHr$d<ny12ZLu~_825>XcFr&$}P3hPv(j<&a
z(o=4-59c%ppR%Ms&;QG{VFT9f57C;*r?D-8T@l|CAeyrXqxVJjH9b|qPzOBBRsBaO
zNLHUL<RiiIhF3P`S$E3OQ3)}JGdUxcE|(cI!fkH<jt-pIW$gc(#~H?`n5&?GkDX}l
z#cUjswSbW=nktr<erVFy5f7JCzg@KV^>dOHG__u&S;}=sCCm;E7godm>?kQ@UYcn~
z5MT?;f1C)HgBLptb3+M%Fqn;(6^|VcCD`<bn}5u~FnF_=+L)=8+rEv>RaC>N=__&S
zlrg8mST@r#>UX9lsY8jtRo_Hu8&qj~>K~RDm~&(us2Y$Q=mV`tC(GPHRd7mCS1j@(
zmK)_w_l{o2>%Q~anmicIxL|t=gkO(Ti`j=rlVs=)<)Z~_j4JD_?cmYY&STTmm!g>d
zpXdC<E4P_q(8)?7H-wIV-%c*k8JQ&DVYGE>J1P`?hN|ujXN4<c2HW|nebsaRIN5m{
zBsfSx_@}y63tnpj17)LtuYv8^f~w=h_cHVHTy0g^Q)CY({>OTuym&cb&mJF&kQ!*W
zC&NyDHzuo2oXUiREOmpWk!n5>2B!gCnjURRg)fYOU*7{5a9lZLM@w&2Ylzj{UTNLd
zBrl|I;|~*QvS6M-1I0;UNXN=)$01VxLr8d#1=)hRc*=lYODXWX_UA>(YL+wbB>!Dg
z3+m>7pHH`cA89Y>|1cTdsNR9WP80UydxT)d)6u<#uQ0-T7d5jH(pq^20R1Th2+n4H
zrCGU;Of>d<0V2}CD4J%FJsQclfCEEAh9UJl1=y~ChwO1!#7oGq;q2&VW5V6ej;L4P
z{}K0+s1QBnB44+eI#1X+k1?d6we+{M!OF4yM;&fUfj`_i+??7Of&ozzM`%LLn+GEi
z6UMxj*O_j;sRjf|v3ywsOM2ILezc*N=3;^-9yGq@Byl}6q`2N{gOiShfrEml^Qzly
zLkkRyf3q<wmS6n=G|zM%pgE$a+v8eeSCudSM;gr=|IhvKWpq2nIijJ)4n{QjnU5>H
z5wzVGN1A<&&y~ls#|drUoRLp|ks4+X9ki(WR01*D#BOC>S)W5*xfMV4P^ZIHijArf
zb6;^UV#d4El5Z9qwM82@#$B<-{i6l=^agJ_;;z?5Go*|eZ73XYqHjbLP)x&)Wu&*!
z%rGXw3?}|<MAB-4Zgu*db!{<0eYa0!-ame&kT$aW90lF5#qOu5>zG$#qIm|I4p+};
z^=<<hvb_8KD@L<x+2#4onkw<XypU7uOt1lza!{<Lg6O-&{&+$_TXAtOc}#MQu+!`q
z=Aqbu#%ge(Q`YSsF7`eLUFFcZecI&)nymf04Px&8weX)QxYutQo}q|5h<h;#;eJ-e
zv3|WgJ}0daVxUTTZCA1gdW02_{QA=H*T*JzZ_3Dselc@*K(gUu9gsv8NT|%IDW-e#
z6@`sua9w6&8(-+fV^E%A&~)HDWMp|i*$E1LoL-k?z7cy=PNpKf8LdGLWo3eest{hB
zkoKCWIi+ou49zp9EZBtbY$N^nOz#@!;Z;#dk<8$433r#M8D@Z;UGsg`|I-`)KuY+p
zF{1M-B3$Pmv8{K%=#gOZPH)(#zSl#KdmC^)M>}x+z=p6nTXbK&6Fi(*2%%q=cUcZx
zw@1m8oVEagkQ4si{e~V`M=ontV|G-gGOP5bx@8@NpupU1#k<QaBPU!pp2iYJyr)*r
z*O`<v$e8wxD75~~#+OkUsxe>M^e6Q$3&ScQ5uD1yAd}9x)Y^VHGroRb=ZZs@Z!?**
z*VPpvIS&s0mYUWs*jGn0a89CzgzRt~CK7T&Vk{m#`No%~Zlt_7UCv^^tT!MjcUPJw
zdq80*V5gp2n(}u=1GR)B^uMCn$d7ZiAE2wq55qg>2}bYD-!q8L``@Cch_VBOP_Gb`
z$zBdgSc8Zc+}aLP9dn?+e6$-hgzOy0ZWm+^qo6Z>%F3WvVIToKN@UwJAuQGdx$;{c
zd39}}s52|}3xh(kRP`n!h1a;e1d=*)sEOesOt%Jjpg(7Ru7_LZstck14%q%l77Zb1
ziqZW_Q>$>4lH43+Bw2YbEBee90gUra`h7m?RUYl%5BsYf<<qwybG~5flZkv~lsatM
z(srfN^f+mRF=lJ-t!6!=&Gn|*Zw7w#vqSgUt94Nos|9%^ea&@c)RmeSnMIQSKa$+>
z>EC`-5LZSXo32_;ts^UV+kUVtP^^CcJYKWR0zdqH_~9GK#an%a5<x7h>JN!-YuEiN
z&nH${<H_0?0x$W#FT_s=988=32o5~*m8Sk(G25`Uk9I3&90^(?juBJpv+C4b;9OFx
zXTIi$7Mm9zH9iw(G%gi`+VCc3#PNiWcsEn~_9zff-CtcBdK)miq}pq2gB*@6uf`*a
z4Th>-xAwNE#>YRITjI&8MeV1+8l{&e^}`^N_JOjMAKtFfTPj{XR^}(}!M7<?d(>U6
zWL)$(^!*EKLxiu8{W2FDVL7eSmDhs*VsuIGsW#R*=;97^v-Q`7K;8R8GA2rjGy7Kf
z(nqdOfM=K{5JQ}${6orM-TOJ@aW;jEdzsc<2<Bm6gJ^T4GhEU=YvmKl7#pqX1{<g|
z(T8p)5D+TGapM?^sKbIrxRV^)r1IulNgKbR>n6PYvg+eVU7$aA6lY501Ue2^iDLp<
zqjF@q7}*>tCcc_2hy>A6a^JTb;AqLcDJfDki<r&YSpdD9qUjLH8IdJ^cElyJT2=j&
zPEqP_iIl_$U-WwMCV9K-FMzU9Udi%x63QujlLK$nV29_-rm;3_2v7X(J-hx(gM7+$
zW=av2JVNra@C0gQDL>5rrDFcm8}q+O-@2vDKLPwSW1te`j##(ZnA~X?QT09Lpp%j7
z9MYmj{fc3O!|v$7`+|w61C}Qxg3wpc3gNCIb+<}3%Sag*0~c&Q!#&J>^$v>Yjv5+h
zPB&%cx5#IRZ?gD7&6xcFzZc2sv61zy4{R}GFLH>*F&j#yJjNm9#!CeyoY>O7B#dm%
zC25)XOfERItjrwOzRBrG_&2dAI!y}4Jv6+k&s^me*T{$~#t=77@CcXF@AQ;Y?e7t{
zX3SU_jTH6Cg2!JULngJ3T5%$|pt$rpe)S-HQ=uIMGq!e~OOwJqOQtmLvu0@|wJ&UJ
zw_~ux$*v173jDQO1r>2NXVGw=y9eXn+62V<*f&gmeD8mC@Yn*p5P_sU-_UYm9YCr8
zPD8Q>f!7ewAF88{?pLpv=;tNFd%VNPw@Xk3GDKYr(R&?H%GIl`VC&xatM49`LfdQB
zO)!&h*IS<8wOz)e;q56?EZ_w69)id8cwHYt7%%v7_0D^C1-RRJH@Rr=V$#<c(LVl2
zUjRS|<BvpjUxDxZ8b1h91Rc18W^T|xe@YH79A4#bn7S@9I9DKvKu<l7AfBVYvI!HT
zYrWb#QxL+N*gGF39|@|2J~w|(`YN8ioceC`pM#k^yWXOAJ~j@`n7pjI0c6o=5RQ0x
zi{C!Q&lf<!Mt0OsEKzjb4Mt|IP!ihvPBgGN@@hwvLek4yhnG&(%%%wTYQ`ne=_N%J
z89cViI#|;Sc&|{>Y)ZVmgUm+|lSF;LI2@GBxuxX_$M4)SHJzS;b|(3^(H@pk^Gjo{
zZQduEBWcYsR;#$k%TSPkW~Aviu)Hv&Y!U|GVi?jmIxV^z>#&AnUBMcs-5jcLzu2We
zE2Q?RZvnu_oU*AmxoPRkgfWSH5duh)LQ)jUb}$Ckn=g+0R?+yf4gq!DpoSryH5_DZ
z@G}$fyM#QZg`AxV*jWk(SG-*Aw{rRX_!j~EsD1xHX6bqBmrUoh-E}iY58%AFrSbu@
zFmj84?^MPPIa1eop7(q9<6EPi=gZ&wcdx51&1@uk#0(~$cfdCb`YBz1;^+fJ!<(VA
znH<pbW6R^tdv=aC!1t+uD2YxpTj1!l2>3EUqz~wRQEN>FE`4sx&9|nZYy#eZik16+
zZm!Tu5SLpTev2YY)_Kp6j0oJs#f*n2f*43iZ-8dkKC+*tsGyAZ9-o7DI?d`zJ;0+E
z!2G@XO%ycapv$9(JV*fd0MY@?5K~To@Ld`WN<KW^N!llUbQc0PGQRh%F30VQ+*`?#
z1M3hnw$>&tKROc8_+P#^TZh7)?eq`)N@LgWzZ$DEh7Qf#`2dN>Rm~@Kz*a7nTW(?*
zy}6b<<+^F}7|Q?Rnq+Ou!j7X>;8UE0J65ujFvd_G%vwhkTi;i^8^j`^2y6D+mx+tE
z)8{k|S)$}GBQ8-LxUMc;O3q1DF$PYgZvI6RHy_1NffRupLg1^JX~`6)iAPqXKV<Bo
z1gBEY`pK(mZNYO=+1XBy@5v2=Fa9lo;fT~RpwR_WHGpqEvthb@qD&YH;nie9@6r~9
zyPEz^_crwewPUL6rWvE+r8Sy=+!Avu?dxZ>6MCF+dFy+<UkHNWE56isg1lkTk@)Xa
zF7Jp#PyCAF>O;{d3_S{FQT#`5wn_aVGy&W0&KHi4<~&clJx4870LShhX^%4>C7<^;
zXJg*B7AP+(j_4FJ1R#WM>)s%r@Pz(=@`#>!KmVIu=6PiY!qIEj9OPj5maTWK`Ed&9
z2`3hOnRW+)wkbk+QFIV*k0@RN+xdt)<S)w&8U<_g(OmCHvjr=s0BXUvNFkV)=7(f`
z(=dHx7KMkmk(`>>=+H=~R}=T&1p}RHIq~W=7=LeOEh<MYM(uNM7eRv5df2c^w9-UF
zP9*^u$MEFhaEhbNu0{J5ds-I;p)~093@4JYDK?7q(~t3d&Ww^6hWAp~0K3-QAEEtd
zC+|6h^83QmcA^+DFzqC4eD-?*{SDkgrlHRFnJLSf!+zugNb)oL-raI)5#$isLkDOp
zme2f*L^3<VKoSAsf<nCO+6N;WRC(`=xR^9ZiUMQhuM#lwG6?gm&QGNnicu$}Pa5=d
zrESMc1rlW(Gz2o<RY<~h<<%FH-`O%kEn|`Xuhw=VhxSnV?38i05sSrGb`QS769V26
zd}k^SpL=gKFD5?u(l*dUkn#V1?Bac|>3j6zyv8H_8S(HBAX;Qc?T?jRHKIQg(a~?Q
zB;^tIvrL4dfBq=zZbdk@Br;0e;)*4rW=jZuAB;XKIQJSk8E6PE(sc+{Z7+?@9&j#g
z&?F?v>iGZ}ksl(1xsYdu^&4k)yU%{qq5*p~_xsc2b@-o%;l-3rdI$L_m|%*tZOw>a
z4<^v#vKX7`q!Zw*sy_;KLfO(Ap<fO&(iP*}?~$n(73saFXKs)=#~_$o)i*EWV&Nca
zxOHgF2)S%bBE<8;Sw!0ClBz{aa4t9Z`~$B&c1;u{SVIJ{(IWi0?(h*s0+9ny9gryp
ziM5Pe9VJxo{g+x&cj(K9MrTw!lnCT0+--l*;pr)3bZQKLjUf-s8<+n-KM2s9EIKB_
z;=Xgn9pHVy<$cl4Yr2hCe~#)oRbj|5gVlXp(am~dc>I55J^%WNiV(}6`0|GsDE&V!
z55HH0d&BwC2W$ZnD@a|M{`DECBNJs&>kjMZBsdMNC>+gOn`wf{R?lhC5NS7jb_!*z
zL;7kQqZ3<!uhX3U=}#61GKhw(b{}kbtE}Nh`N(n%_dav?OLzD>laf4GWw}#A`3q-b
zP=ZUZV3a-8NSj+(socZ4S%)6?hfrd0t%kL#B<gy-72k2$F5WP-n5IoHa6-(`W65*0
z@Cn=Yfl|4eIl?HXh6l@{#Sa}fe|GI3Tg*srqHU}fR@k0RVs7M&|C+c^@204*ZLIIL
z-U!1}68+<W-O;;dzlAxr&jR}`ebBL^G3s>1s~U&0*Tc{VQQqWuQ=ClPKUt`Wur(^2
z7{++miGJqBPkQhs<>=|!+@JWNjt}}U1aNp&eG<u}Md;Gq4H~LRdF*_FS4n-kmK3b-
z?s@FYf@Fin`mc~XG@I}}AdlEHXhn|<tUw6AonA*1d8ND!3cg5_!0Zo=Ac1NClD@{j
z6lQMT{wu&Rga@DugXngz5#F7qj}H#snRU`nDX(|2!2-nePGq1y^8$hUM|G4h@qQED
zxkz{l)X)Di`ZW4AAd2zBFlRYq0d7S!2kTec!b_2S^F0p)Mv9oXzMd)yH|zPQwTnpt
z{BV>rYor(hCT_k{f{kA+2^D5|oyN4Z*bzDorXI0rI=#Zx2|bpfKjccgSWbeBm8O}0
z@Y!r&Rti6-jK)RdQF6Y_)JcjlV9CGDxMa^Ol!B~14j-2V0Vt{pGj<58ds@kBWw8$V
zoAsGBY{g^P%7>;uEF}t<cJI8bV9hl)dl~*k34uImv9S)J-a{h1xfT3cP7o>Uifb;k
zEN4R9rgXhH&XX!~C*lOG*i!kl?2CKVV1=u0WFvzehsSiur`xM8=BQ?o=vV2dOAiSs
zTnpi->M?~CNmiS@MF9V~y&mD$dVZso%~T6RJYiACcDVX{^!YW;`604Cx7Z0Vg&kuu
zVgUOIBFKX$m}d&IJ9aovr>e>(m_i@@hHujkzn&T233hIDY5YDRCH%a;9+YxhRL|Tw
zK?!iHH!)wuP%RMK!HlkCm3~y(vwYNPj1z76?UC`ycz*(9pu{OrOD-qM1|S>GG&Row
z?^ng~+Sa@oUqM()Ehkz~B)8%w%KKvv;AkP?Xms2f#5h4=ba_(ZGHHpY7LHTc<Hlel
zD1P4#?8RAOm@O;?aW#*<;<2QL@CRF9Nb!S~)T*RGUn2bcaJF!leIgt)2w11$mXlQ|
zRPs=jbVUc5*_6a=`VJ(dfde{uzdfpYUNB4eGVE=fF=N#zt1?674H#&O&}Rs-?!DG=
zQ)oBcyBm$cIt+sm)5#yi>-F4LrGhH>oL&c2W-CdpH^Dw%k$}PbCl3{z+#-YkX4Vo~
zxzhRvj@G@sSv%CzcZgzkzVZt)<U9>>d%dj!HD{oqX;P5~ZzF;xypW_p1)xhJG=E}&
z7A-f*ok`Kz9^hGz+q=Din>izrpkemX{qn-&CyQpw(}@BdLB9gl&WR8g)c;tG5B_?G
zy;I;Y2`;&)gtB^L@rFYgK)~4aW(L3L^71$qAGCfm>U!{q)*4X=Lr+vf4l6yp!lg2@
z8bk{!xcyZ9up#CjQKd@tk`m|96JbOY=A(5^4{rz%FhV<du$VR@b4iWF_A5Ce6dUow
z=O(XKwAgNu7B*CTf_*t6Z*FJWEk589yF&x+^zn`?Z0%_KGnU(|C|kEGruAfV7Dyua
zO_`ft%B>)0&<6SRO?I8~>oo@qHvN-^XqZ|yt=-~HM4#s(^LCJ&Hbz&kr^T_WUWJ)l
zfKn=RK^~GU0j{;=G{a)_N5$yTs%H2^c<48wBcVJnayZ3WXW3x?SJwChLrto-fzv?Z
z8_QXG`4sU)t#oFtb+8*f6iIuA4h4@l4B^h!)|)$w|1e}ow`cE6WA8>6@OY)u6OfWc
zc9r24{dvM9<a1Ql^^s$=vv~Sc9;-XNMZ72#+&fI8OJQJYTlH&?Ok_>A*`?~&9Iior
zs@jTXCBy4L_ke_Kj?y3Hjt-vmLWVl1|3q+Xne+*<R6iXgE#=7`SIM~i$RpoZQB$1;
zg9#Nh%TajzO-Q-~_$ty1rW>1I#5qf^{HxG~aly&ZlmXA44|w6YI^e-E8-(8$n-_(C
z{sfxvNVL@^E_EWK)7;SFOO}@giX4w0wo;&0GdRJpYk6;O(*C?G5w@Lt4~5=CP+-zc
z=7a9VjMMSrbBEvN5;j|tKK;O%ggvarI_t?xe=sS#(W<K*SiXJkP2#(rDke=A#eRto
zbje^I`3x>H$IpGoTc+L<kR(%jjjU+$C)LC1t2knk#~PfDf$TY6i8QHAK5_OQyQTM~
zpTT^t?s@1syE2?A;D^~4AGmq%_~El1BZx%Zdu8bF;aK~o+`G}^dA=KdCG%M-rD{Pf
zE1-tI=-8i!)y^58B(IG^+LaRg;Vw02`TAvy3GcU%Rg?#hU2MIzgTST+0K;`AB;C1E
zWT^YWfv5$pF-*|Dm%cRTr`(^z@CZVI1$_1sHFq&!9!Xsc6(T&OB=J%uxCKxPcZZbC
zqoBz$4x!0xI03eLZj<&fn)*9|m#5R~WabF6aT-SB<_%fz(E^BHI_J!pLo^4n8cW)h
z-6f1LLxWx-SQB4T<hg%*H7F_IOag&sf!)VHP*QN0hZu9YbvpqZ>G;MvVCjJi5mHH6
zN|_;u?Q$l*h-W@*H^4&;eP!-MaFm=M!F{F5#PNc;eE%?LGKel`!)_>#G^fy1P7Az8
z^!ba6KR1)s2T_;9TX2m&(P-zJ;4cTjhC_Tx*Ll&+9umOC$Dxnw5+Ce3Own8AV{cm2
zAf<;IFc1gLi3Xwk6wW0`x<gUWR?p4@<hwcYsLYAY8J~$ZiV1)(NvT7*^1bp}F+Y<O
zc$vGmtUA($m}mvf)9k?h_eFd`zV9nl9lamphVMl7FRv-Yp;(v`bDCFAbwq-n9Z}%h
z9~!~W)>!rPdvR000=VWt5$`C#`HVi~p}B}9n1BeHyogY#i;^%B`3j~=qweJ|@lHaa
zVBM~ikKyO5sd=(Mu;tO$h2*Y1EzuaD=OxH+Q77@Q5hcUl`OsRDDcOQqPL|jn`eX^?
zj%XJ$R%Cf#d7Cq#<<km|?LlNc^UBodkAqf**kt%i8w$tr)FIJ{qUOaz(ki<2{-l_)
z?-z5d2ueegu*TY^_1Jz+n*MMK1=@b(g6_AXlXK%sB)*Z5R)q~yEV>-cve^RO7*bIj
zjzmg-;wnR2B`?1%$oxz*?Y!1h@xN^vD~*i7Ktc<^|EZhIcBvpi1J7R<?xkV+cL>XS
zCgdv$gd=0E?Q@UQ(dl~NbM@6F;Nsz7VdjDGOWT`Z&}|cZa*qaRz_8yU0C_N~mR%5Q
z&IE<bfIkf15NJaf_kU8whwm~_(+giuY*hQpb9c{k0LN94EM3jc3!-f$>R?2ac%WW%
z?@O2}3)=G}G&9;@M8uJo)7~MegzuE5FGWlQc_=UP=YE1OXr?__#YDbq1$(CBep|wA
zpz;~UgzhPiLpKa&t}>>gJY{RM`bknz{~%@ysQ_fV{L<e|@3^>>I>WpDsgKw6yp@%(
ztu!kU*;?<*>iV^>v6B3NQOf>F=&*Z5_j62ijs5M!+?9%XwPH#Si|8i;@!%mAWq~Qn
ztiqf5gngt+>}XJmoYu~ldimgb7Mb6iAg&d+SJpKX24)GN9G-{UX!L6o?*tvio#8}*
zFJ+v~GQYM*GJPtaxO&*dO2Z0WWmmJQqO6X=hS^}5)J<s>9u}!`7QHUpWDTCfUnbQ2
ziS3yN=QMz}zfH8nqL2WGDTlz3&tL@HUFv7l-ri4e$PPSUC!cwmLJM!=C!07Vn^Zrv
z;(XG^*!$MZ7~i`;siS?*S{+9XpV>nq@RUiM{dND<0fiAO&r#y~dG%z3o4{n}&wrtw
zF*5bB(`^BCB0P}5r-IpE9{IfCGCBfyhHX2W=XYA+cW(f3-Gju+Z8GyEpEJgTwKF!n
zYW!KhgnmuXQtHssNpyeNq+Gop`ncI#v46j*9s7v^F&G``=&+Qc7{uEH0?_*D)pfFD
zVsrZKB@MJ;&_>FTHN}^s=F<sm3|5h)o3nr~6l~MY8QXe}Q5C@;Q+)N8ZnS`gDx?80
z8$RQjh@%FD@bqQVuDtKW;H)cka8sg)b4D0G^qy4-n$&F#w{ee2e9_qv(Bfk;y>d<y
zCoB}6_?>pFBR(Se_*%@Dz*DBH{72vcTcmDtSld+5RHj_{%Rjy}dy7eMm{&j-h>8Nr
zD8yw;a`vUyu~2g|DC*Hf1Ud4I-!u!N^nz$mGPgs2Nq1zGBTuAO6X8IJ$n(-Y=hMqf
za@7J9N;G=$s5&K?b@bKcsY$bqm8v+iYFN~ktEIdr#=7rfS#K7I+G%uBv3`~LR-}tj
zs`9=0uJ@b_n{1Z?=L>8x`Mn|O8FLzW(y(5wcPn>gQrRofuqN^F1D;mM-JJDh`igg@
z+&YQ2PGRM<msC9NPK`<}SptUi7Z*+On8GzxlVxo2d8LrS7dDyYDaUoV;H6Bm8RoC^
zS13rKDGs6o9O0%DSxl*p8pl@cc~C`pmOaWO|IgG3>J`xOE?7lCcR8^*Qbm?QE;t@5
zrl`lc9}?JWboLF^L+`i$s>vE&3{UgEB>(XMqKKrVoH_98@R(y4Qcg<N=bJFXErX<8
zq9NKeHfoxbMMalZ^I_dwR|$?<)uM$y$hv7mtxSK`aHx7_JHM-v$_SLF62%Xl*-W|5
zWY2Wa-~Ea_+CQvwXc}Mf!yldk)fk47ztD`n5_G#GZ~Z$98*?nSxxzHtCXQkxT5Q@h
z7&3X%PYQg27PpQ$*%>0Eb2joXMtR}>uQh5*e}k8O_Z70_vdQC2m2et#91Lo6G6R-Y
zF~m_0oU$4Xu@F*ooPyLHTA_Q-jePNch7&D3k?%bZJa?eULP&_E;991@e0)&|keCmu
z<>uuRn~TG>E<zPfiltLUOFYI9_ARC0-I9-55~kPKYU0nY4+`KjmE`|z3FfKA5lV@x
zkHGHr3n3x|L^PUrs0EjN4@ryHHBsvX#_*ys{~$q^Hcb^Q-%MhYE}BI%FBE?cfWLxZ
z<_+Uwz`|~(w}MncY*CetA{5ULBi1>zlrgbWoL5>`D=y|O)S))>k(6T0U;Zv8=CgSp
zk0u{Y=3Jnp#YatbENd)rBaUx!N6XptL9-lqO2>f4s&LtIB2y_o2w{BXx!>@Fi%oAz
z9i3XPHQJTWe$O6mBQ-BzPF;(up<w3szal-cy^ZP2r$)aGT4<#6D$(#+M5eEY<;`z;
z;laJ#=jBsiHD9w)FC+R;fQ3j;fDb1mVHS#Ma~qaYEv$cz0r(O5mLLV^4}V|ryaEx?
zJ_qMz3pK=Z;J&PJ$4susu@5mv9`}S*xQb&MwsMogePvtz9`8z?gm(eY)o=JA9vn0u
zXfOKY9JOo3j=ILyOe!9DMutPHOd(8zBnn$G7<aKIog8Lv0L4DyD87K87Xy?fxN9Q3
z_4qQMvpTc~hm(w2MsfXj%Ym976&86TeG@vOjUEzXgN9QZaoArh&#{9JqFCKMms;I+
zAEsur*;L*36j=aBHeTtr=6Q2x`beD`hFu!E53ZqsK-G0(hQU|<&z{U60n`KN_#@|c
z#J0oz<A}4e4m3{_ZeQ^)tt{|pX|&Ln>QK()VWRPlS(R<09eiWhi8vc@Qjv#}Js0Ao
zb@~JVG9dc1vm+}KxXT;46D4|y^*$URLeZ2tyg8b<={<rz>|4k&{1_$Ep%PreB)kQ+
z2gGq!)Fw295^WUDg{{<T)mb@opEu!&LJUXl4)vEqXj6y>)Y?G6H-(Ldp~oSBYoNFk
zu`JSnee~ML@{P!go%sAn>mn?V6hZ!iu0=qn4-vz{MoEP$jaM$EZ;`GnB*~z#q9V#d
zkxAd-b6&@pGzoWKGADp9b9T*vn)hsJCO*Ao7u;B8h=`Cpy3eQm?GjpWh;6Ri{?Sga
zO^!v~e&VxV`yUrkYeDZvPUA-o+y_f%zv$G;bf@_Y?nf=(_o=_ZR}wHeHY5IOF`Gfz
z=#Vmdy>9GxjX;<DvJiy#do47uIC7%qJk?h93ByMR0?<#|yUff$CzYwYhr<xw5)c3=
z2#OYD0!<i#&R!4=ADeF0R|Go436TUmJiDHNF`)Rj{nw8)zK7M2!+;om$`u7UB9C3L
z=X6P;Brg6NO3%YMuCt>Fq+O4_szR7#C>P!SF}0t#Jl6NW^#*#>mPtD~to3YgEXa3S
z$wtG3@5RQzV-ND>_e2?mWJ3H!q{!J<V??AMwQc7ae*$0UbjN;FT^II~Hk~@!=-|_)
zk7t5)5&Hq!pg4XQ>^nzYCyAt*6!xb*V&H6Sk|6GV|5i^PB#N-ueMDFBV|aUJHlisj
z!VseRX6%6NS>hi&a);ye?|nIbz62e8gD1#xws|*j_qo_U@S&yNYV^>U6q3XFhN!w<
z2WhlZjK#RxHGJ9ChbuC}y<^96Nt!gxf5;aq3rwS+lwXDADKO4kvhVhJ1--lrK8Zf)
z0wy+&%z=HXEQecHo;95(cRMjXXIB&VXbD{1f8}rf=n^JLDh9<tGa6P`5+zu8>)xmn
zv%=*5e^k9yR2yEfJzQLh)8Y=rin|qu&|(FO6?Z8Rq*w{0KyfeHBB8XD7I$}dcMB4r
zI0OxneEIz!?!Dg=4`HpWbuwpW&z>`Tr==^`iY96pgh|k5%8I;Oq3iY@v{yBU&WS^e
z_1&aYjT%*D+@2_S^Coa8nf(rYCk_;4@%vSl7MJ3woi@Z)f37_&5NeAjoa(sUXr<DY
zb9$cgma&w^fm>VAbE#BmjMcf!h_!sdv5gyY9)g9hY>2HUL?%9AyY>3ns4rvQr>)mb
zdwDIe|0Kiye@E4O99d!vNl8M%DZLj8(Pr!aEh<57$=^+t<laqZU=o-x&!_?GZ{mDU
zFm#V^W6f8VY?h4IFa6DumcKLFF5>kwN%WUuM@#{Y+(LC1>gN&yR9~+6&*u-aR5$Gz
zouaHjM^yu`nyy33`?EVzwN(E+Le|reo1mSfhc1Oie70snwj$fXpTNL4xwB49bK%sC
zQJaXZbDbY)F(qy`chOoD1{`VaTDF%pX@#k&I$32XvvZZ}#Nw|?NW;H$H~s45ahP8*
z2TWuXw8qq=G_Qs;J7(L3lrB`VR+^rL^aKVTe*4%SF;-Vgd|vj|Oyykl?v3Uf?LP6X
zKewP~W_YfBz%~<6R`KU=`~mOD)A8T`7?P^nESn#BU%pY-7@w?_&!ii{GTpz%q`B>c
zQT*p<7TweQ-`hIYg=D@&&EAh2`QM(KT;UzEJ1)_U_XjUy$kMa5vohGET1{S@(fC=b
zGW3h{NYJz=EyVQp<4tP17Eh~KBaZ}&@He&LpzFxri+VmufZ3K@iBtJ0sqqrI)<Sg9
zi7MRtTw5rdk;1Y&HWx<dJ8tXXv6&X~hJ=uG^nj|-ym_x+)#t_n9$3-H2O(A_L#!xV
z_KZ}S!gqM0OJ!AgHv#$Ka@x|_bCsJGJke|yByl|&&$2;v@ivL?;@{v51MvD@i)^Y|
zuaKW~CiCRcd)sY=K8i{|-__CGWDrXs-p>|1@PPTs7SlB^g9L0f1p)fHLgY&pq*p%c
zrFvz$j+MA-&!YLur61&@YRiaWD&ui0aC6TCHEi}qYT(He)@a%15YT&AxNhvjc2W#z
zBjy~a^k9A#K^iL;kTj?%81v9<91EIqp}noEc=o?%+gSElR`Eps5iQqIhlDgZmIST#
zeOnIwDx=h=7GxGUW9LV2;6{e=Ls4;3N_xtLOXpUwtc>`g04Q|IpetQc6kl&!Vg8#T
zM)u-UwDSs2_=hyi=-L~P2xJFx68boBy+2`|as&RCse=kuwY)jo8^USQ)G3cy^*t{q
z8sBSss5TGTXh+}j&>1Lm8Xj}w&F_d5yRboaU`Vg!<M)Ms{gb&DU6HBDQdw1%*_gdC
zME`QQ{oLe@afzP~so!c8pJNV@bcc&wkH=vACJu6-`u)Z$T($drbwV4yqyu+;oz5M*
z_^#Hm`$Zs}?$vFZL747Ek-;=UH6S!$&0<z*dYel0+c1Rbo91sRv2GUIVEKz7u5|PU
z*(z<o0G?XNW%$)a6H9M05FwHRMHUtn42J)oo!ka7<tNh56^^zFgBDSm&`O0vcIUf@
zww?MGTiLx&kr^kqvWP#9?N|=apS=A;AZ&dwbHLH*EO*Pm{vGlfTE#~8=e2&8Jh1FA
zpk=3Teae{IFUHOB8%HLb!1li23WZt)Up<bUIF-M8sT*=P10T{=Ks#+K2|#Zs0*Bge
zh6;mDQfM`60?5^wLas)P^k8*G3Yj+^U&vI~eeW)e<q@hBd*Y-Dt=|!6`x6dDgYXMD
zx^8PH$%*(Se%@}UdyUT#*Lmo6$!w7HrY*Z+5k~dhR4IFa_{x=vXR<!h)KE@&S{u{9
z&u!I53id5Xdt<T2@K=nCVwk(PPKT3uL(H0a&Q|r|#jZ?By@WN8D$E=rW#<VbafvY4
zEm(@is_DDaM+fE#{fJHy>VY`{JaRfANhJ(JUCpsUZ)IXx{~sgxU!LqOi&@3+Mk|so
zv}K|-mll?6`)+(jcYKl(V=g0GPnXHoQmL&^*iRQeR$|(nams9vP=`DHus)?nH9nd!
zpofsUs`OmUh)Sqkg9|bmKu9ib-@?~cIv|bTOB*z^*t5Rk0&l%UNn+yLlB>x3?C>CF
zo#gqAD=bo51TE9<1=sxFk(rXos<p$eAc7TgkB>Fd@*e^_?<jTUSaszPu>A?Hop5H5
z7SsJ?6s&3n0+9<2K8D#pS6RROEjh$KG67gmTaV{%z*`wyXA`fZ=pzlUe7!r|y6DTV
z8m#HFbadd1O`)VV?5MwV$&x30R;qkb{JX9)PDrHuutfev$7arcZ+*a~gmjLXeZ!&~
z1<1g@zmWfisNQ*B$CpH}_}E%nnI-;}H*QpR919LvSmUdzBlzvLzx+)u(*#b(%}Z6}
zV?`0!|Ayx3`$cKYIJAC7#g*f^v(W8N?=i}dj3%8o?-XrtEyIC}pMhZRirWX5SFVDK
zB8frY-$krhdO}JdpK;m_O}RCKmc?i6sFo+b&m?r^GB(X;+jX!&n%{~Jj7R`{u1tn~
zj!=*npGO1k4h#{Oe_7zOGrGC4><jZsD$knk%Uc$pPBt*O_q+KKW^<erhp0ie#0S^2
zlbcrm$D8fbJG>Ib>S(qOL^hNY7<f5l$naXBFpfy%?_2Wt1Z7G7&h_zFMx3fK9{rZr
zwxKPA(&Qkzk@w3gdZG4RE!OfvJ(N@ehAC?Wb$aV;jx`6;FPr6EpK*bKc5%m}TyKRw
zT2j-1d(A&meHV(qSl&c$8`7x&x)gEl-aXkARm9(t=!O#|0q;X6%FcwhlR)W%%t%+l
z{~L>;rcZ3pPry*W4{g6ZqgVZvyGUuNEwQWv4y4dk{F2-RWe_}^B5;`i6(@})c_z2Z
zs*Vu7!)PwA3^Z33C?$v$m2Gps{rTW$w{CeTd*rS>)*t1E`Sm*W8w(1aBXYPczUqcT
z)lev2S4OkN(ZDa~igxy$@+`qtiQ~;TCz{>}Wai-G&H73?Gr+OUeBF~bnoj{-XW|#v
zdNF`%f7pN`Z4iB=pttQC;uR^tkd+l!_WE@;4y6YMg%9UdjvT$=(@3QPk7)ktwMSM9
z#InJ}*`3SO<n^26olGgDYqdkgt%fcpi`28^N^N^it4B=N^YPZIVAmxoPFY#^Us0u$
z4FsAluuF5wXoyZ9#=Bj2smYVvt;W`iXaB{Xd*#t>z>mb{JGUx1#m6MH`PuXT4LmYI
zPEHK;Qe|`fqfJ1KARs)-@ANWJ((8Ljrm37_imJMxq<_OvG)Bz?ck<`tCnrF)7q!fO
ze=d=i>&&b7UM9_=9#$!iW|V?wi@b|NRRq-L9rxeHh3i9pEipjouTWPjsMVWAKK%z*
zuSYS2g3nH@9O9d9nF91Sq5|6HvBU_^sJN@%b8ynIUSh1qXM<iXw41Hp?f}0+5f#Xi
z|9~SS^LRnOMkyz*hTOf~dhpa-Ir+%9ccJ`xdpKV|nZhbUC*D57xVwI7*Z454yxaY#
z|M-m4eb|bE^x3BAyDr;U*JAeqy{c|^uYdaOrsrb~yI&?)#<ARE;&AQEXRMe))zB|#
zGAx)o4ujN?LjyY*SV?_s{{v+#-SVGQKiK^jUX@%jk|R@!`#!$eUU>)_z7(|L>WY1b
z)>f#8|9t#jq82G01UsTWujNA5XK2<+T_I^_NZTgFF~*g0fO91Z!qPn!rY93+o2V7!
zQVD6F$s9lz-4*bb;7Ynv`TFd|D@$%ZWppJ4m7#g-fHt%iyjoy;Wi%`JyaTC&=){xf
z?$~z+ra~X;p{;Tz!AYgEfouL|rOaBrWLJ0_w@z%?n3bGQlC6I>yW;addDpcI%W}_d
z@E995en~Um&@zVAf0&@p>Cko}C#1pEBFuE<$I~d&#A|_H-PAcATkyvCsa?C>umGW%
zVr#<ZUiL~fgNL@eaAHFnb*|I3$S2w?5yRO#qS*fT<>~pBHT!2Y;nlK*-<oSnFk0oL
zd0TDn6E<OxQfBg`4a%9!(V8Hby+f8`wLyBjVqSAAauZhgRI%kk%;%?5LZT6fH_xvh
zYgnZ+OI2LO%OzWOKhtfY9u(=+GuobSkh&paIY4f53rZ@=3sgU8yZ2}Up|Fa=2HU(B
z`dVN<p^N13T}gSq2}$GtYQJR%eD?v$UhxoSJaUTaK!qUSl5H;jH`oG$58t#fRUZ<2
zBjW011vV_y&@M54M)2QW2XZp2bahJy+k!cDe;bD$D%qF#)tRsqdd8YDMRmUn@8{$j
z_#TGzI7#zGE4?+x%zkti88FIc(H{PJv??2C_6(h!=KH*1bMRBY&i^1=A=ngVg%J5)
zQZRag=Q<Cg8wu%<JeH8M-813}W2Cc|jLf%np0T6&y<V{*_LS0dXX()<+ip_$rXf2|
zSg__}D1a!DTQ=togjw{IU)pnPOF!EU+j;D#<B(C#e%r-*(RePP`gyKvF-5qWE)7M>
zSYqznwcW%M)5P+-QFL~P89*!{`{$Ebq<P2|KFCvaSebR4jG^E3-GKtz&$|ZXIl#LL
z2p{;<j#~@_J8HfoeZcP6Aztz5d+ZBsj{SvroanGgKd?qQ@WrTHg*I<Vj-k+RE75Ok
zrW0@Jx*!&8YPR&rLDgO@Be3W&$sSG_-9EK5BDrt)pD#}THfJ|=*4VYUZwU~xV0(So
z@}p2710x#XP5(=HpvT=8BxKj9-|eT!M52E?3!q0Vm-Yq=w)#M%S_0@(0<^?t#|EH9
zwzO7gW5B#zRM{3#`x`Y*k|lwJBU~mrVi>0FIAncJuP5uC>iHxV-m=La`rB(eu{z26
zS~<zu-K4C~s!T$fu1i4==T@d_DaP$bI}lM;bgM4U*KuCbei;}fkI(icnK@{$MF))h
zX21&L5B@MJfkFLF{fc84JC^_L@s`G*X>ROZ!mT)_-5700Hjyl8wRFp+TcPM0A@{a%
zC8hh&UoK=^POv=0FDO+*gnHqzX+CNGYDs<t`{mvn^X%OxVT{C6w)Y0QpxFN~s%@i1
zU(ypbvj2heTRt)DvWknS)a$4{9`$^DvE$Lf{hLJa_h4ze_J?4KFOKKGq8vsW$e(1O
z@;`fz{uYy0EkPumSY(-gw)+9gH={oEx7xEqp6+5rOIFWJtcz_pph!{1oBfc@wY$^D
zCU(RHi)3hv;Q9;F4!9xwZb7c~gb=Yr+G-_#{+DYfqF)zv6a@=H?kXgc2E&YDh<<cK
zTKN!xI+_@|K_#FNmr!Uj_|XiU6mqM={9b{6rTM#nSd6u6iqNvcf)uKZfA-BKM?s?T
zOu!6BiuL;ie2*o}zNxdk0O)GCOLnG>7sg6i$k4s$H#2gx*mz(NmP18~IOy9`+Gh$W
z^=dBBpWgSHg}fi-vdn^ur^$sj$*IeXNzQM3(x`UQ8)&<sMbDzmup3%#t2S0b6kz}b
z?*GA{*yjakrHDr)bXmj763C1VwGA)myz9K8={z0#@Eg(Vo*-F`IxM=Pk@K<drn~qA
zQ!bl3P+6>JH?c-r8=G(8MS3yXk(29~zdgH!UE%)|p71)|!nroC0R&@8C!@sxpN%Fu
zBV+;>mjyD&T%W<Y{hz4uDOuAVA_YMgr_~L}xDE>@(EiAdBe|?{2Babc@e(qlGE*V{
zID2=IrzzRcVizbeSWOR$P(H$M`gDBvNo>A{w8Jrweug{DW4__FX>s14EP)SR)6dFq
ze9``0sdeL3tCEp&v$qC>n#=(8EykRHZx3t*PB~zIBKC75tYEg0;v)TR@d#fnqc<MV
zPqWV*_H8}eYz}h(ervPgiM0x1ToH^72qK*MS8-6{)}#J&e7>+o-%7c&2dn!-Z-8|m
z=b*yFV>jMU%Kte=L8)Cv7W`|J#5Li`u=CcKYyB~CRj@EIvv+iC93w66zYF6e6Kk%%
z%HY~WpVGRkqxtSO$%Xr}x>N?;<&)HT6iEuE8%3?V1)fX$DITknTRlC#i3DRf=S5lL
z3cg>PThOl8uzn0L=9^6OTY7~vNmLIrV)HbW`ECWuB^dngIea>sOj&?IU~uQ&ip}4u
z)lB~SRw0v1;licqup8}$Vj+pDyhL3KKGGtB6yR-eQH94;@AHp2#=%`5CR#(5aNrlG
zs4URbp*+xCUjZ6$)-{5De}JZ=uB>il5N#bdH$&*Qpo$^Ra0|dc&UyaoUu8MPmju=B
z`!_Bl)PYLRqcuM3?=834#eT|&yM%H3y0sjaJZEJ9Ts>Jyjx?l0o9Pi;j}34BZtR->
z%l%$jXH~Y~*Y8(TGpL@kpPaGxI!~+a9&vqsB*+_&Ghd8hCoD|J2VaR%3!*Wh1w|N(
zr5tF30NsqfV$-!smBox>24C#;>zQN<{2zV#R_n%)$7ay(-@*Z3J%Jpg9clu4q@a>E
z2>!rKEf4X?j`E5qYzXhct3tLuTe=2n7v%wK7?<ynl9y9K{g!9yAWSb6MUJy%*KDr-
zYwCaZ)uOl+&uiTYv0?g%1c}#I<161=w1d3n10^EXSUjMsr$&&4?vwW>=}*CMUDN<-
zbEO^Oeyt6?6#SRewjH%o@kk2g$rM=gS5dO<Vhi9S1z7bap`R*c?rbM1w6}vNd)`#n
zoE_CU?O>gvXsev^zC!Moz-*_%r@BM*?U!SRs{?1V=_T-sj$7ft;}WZo<zL7n|J+p~
zc~p8un!*|CRst~ykmmz$>4I8XcQ>PU>MDZEJecYYp8C4|dBc(W6+=*Qla1o=vZHFO
z)ctV3cQM-CXn5<+n~8bP+3lP|m7X;DbF+`!>}F+NUZffHJ6*V1W!7qJx2f+Ra>Ws*
zwbcrhgfZI&Mrs16M&WXV*8i(T8y}GLDOPv!t9k)j#e;L`q@Uek@;_J)e+x$ipCxK$
z{Rp1)sIYc4KDm#)>S=F*@vUfn?Al9K-Ci3rfMQl(4t1T-1>FNqvvbML0XI=dz}ZIa
z5C`WwsFhzRz0~gnx|7$<(WHNXkB265M+pn3D>?6vbuoVLrRc~%Jz971b3Oj`ZGp~W
zE!YaYGouUHpl3#&MePK2>;>(dKIEdb+hLmEwufdb6#b546+=v&96P$ABQEdmd@DX_
z-#=h=+)lvuiy&VmLl7v3;748LIW*HB34{tx$X|UiZ_S7QeYpVp0KF3&@#a`aIGe8s
zu6c;Gx>tiM7cj?N0brX^%#p;h1&}%GD)Zwu_LcN^L<0*_^x7Lrl8>xX+vq1A5n1V-
z=TF^aW&ez|tDZ|&QCc)~u)5$j`5aD->zM_YP<Udy5AhpZ@lldX&s=Aj?U{UIeBoPM
zHs93z^gl!`D1Y*0FC-^|8S$zJYE|)nsQdt>%0PUXd+@;S%HnYwQtG!0qs+R(a}jU6
zo`iugsDI*d_x<_O^GV9`->9XwZPO<--LJuwpVlHeOs{j$Rw@<@3a<oJm)io$Y7ZYD
zGt366mJ~gY25WN^cIhTmrTzG_EN)Rq6!H<p^3^MF`@iW2x`&tp-u73dCV_6LVS<l+
zrzZa4t4C8NH|svHnLtB3SI~GATo#$tigE(K34wD#eV3ivfzQ#H;T;j;RuJWbfNe8p
z-k&x##&S$pDx?U0dZeGoImAkOyqJSJNDe-YkfJ)Af!w8m2K*lo;)3g!gY17s%l=rf
z-fug5!2fQsrMgmMMvi#uIoevx?sYM;9-2+3cN3GW<gzPuE*}~>yKWV0&$rd^HnN)V
z1n78!0#X!(!{3#=yQ+O<d@XAA-K}1_j*)+0QRaEa+DIeT7Zyu%K7iF@xh$-SdEhLO
z6wb}}zn~&Q<>*P1P-3So3h1MKWiFnM4OT=1v>{!Qo}MXHaaha=`85+O?BAxT<QSca
zscX}GLFLvJmkrB0@r=f*TvommL@dAOP)QRHuU2CGV_z*A=iv~TEaW_e7nJ1=uDhsz
z`@)_VH9xS<R8*UQ)o(4RZilo&UOrzj?0>*`!Hk@Yx|)DUpuk9Kc{a##&$LtP_GxfO
z>jeO;C;$!8%L}<~mb--;k4U02pl$N_j}^!Tus&0xSl;pZtmp!4Wc@)L&fjryv*tM}
zh$t`~T0!+$`Sbp1tz7%Xl^39o3`hOb9TIFk4MwbArLxvp`0somPhtw#2;CXv3mn>?
zz|*zr*sUWS*+FxZQjd@5XwTStve;DRII3QiThX%+G`vS1p;I*Bmvl@=-IJBt>=!Ar
zBtFngRgnb+N*v!-TMcs3|6XXh;j>e?8q)o5*RD1Cww{>`ak|d$FNeHETWI}H{lq>8
zZO2FDqYbz~N6xJy>ol*Z$|TJeK1)reXVb6X_}uEm9WxwX(8tdWFrr?Spaf+DQ;hS8
z4?POPJ5}ZimqbohSI$F86$YAszdn3hNhfu)vb-;UA>HGk28H97{){<{U5jE0(n7)-
zPyp|%r63r8$9Xmkf}8=fDclC5a$9$wLRnD5f8To5bPsYVAYPV`!D~(tQQrIIJ-lD|
z8b2=JG<p8nSD+_{!Le?JJFfYG(vN`<Imqpf!PGW;2b>^q>+ef6BV@eOmAT5*aUEyL
zbz`v%Mh<%0&%@6yx$;2X&$Tk3%x3Gd!H<i0%x2(rSm;Pmoc&9ljJ-Iyhwlr6*-U{m
z`yG-HLT=I{;+77>ecUIuCxq<YlxD@tK`ZX6PAR1&eJXX*_2Qc2bTzS7A)Xgsc(QK@
z<#ehkG6B})y>U?vHv^eSV{d`8X-ziN5otW+|DJFG0n5#L57J7zdZCdt$Th=b=I+q`
zj5s0+^e)tGFW$=r&`*msG)dtaZ|B3Dz;oyI6NxIX!~lE^#ZOJWeFZ>~p*VL3?}JCz
zewJpK=|&`3U}#Rr506k`^#0;X*M6ETiM-TB)jrTe?<z(%Ju^W_>Q<w5ln*Lu)&E9K
z+Ps+$)qi^5ko4cy#0@gTJoqjage<XqX@&f4)o^kfy$2qg<8sh-Ft3yg+I~UW_9o<}
z0og@Q$Tv}h51*YYfp?%*?{~`4K6g(QPM^a!9&Z?*zsh@w=2p?uvQyr)huaopJ9=n#
z;{X_{_JK_`$nhr0-({%LNNYwgR3sgpEw<FJ`F-IF=*>{V><O;sQ3M<rl)2kGEqb$O
zCocJm+C?(b7y6!tpsU>Z)@JJw65o^h|Mcm~8}W=Rp+0M<mQcottM)rL)Meh!n@w|p
z9Q+gHq8XkGX7W+24uZ(}mK~A3kAi*~lLeR_KV?p~5;?a1=AQ+UxY%mbzI^W&$v5HZ
za&GRI$cGtCZ+DT9+I0;D?O9DJ+!vv0&84zHy9d5aA9?NN?nl$F{uS4#CZkXg<WKLZ
zJPUvM!H6K3c*VUwqFeCOPtXQ6*eGP58vH5v$(=A?L8r(y@SYLXFcZ|SHQvn@1{zuE
zcq4!MJafl5yyHFz$__-p1z+)gdYFNrk{@P+pj^xkg9=tw;78+EY*sghz>GbtIPU5r
z4pY?>|Bm}M?_-$iIy|FcaY63xkASRNhFv{XJdPYfVJV1GQ8tzr_+Tt37-%|3NU%id
zr_ueJ&&HU{Q_Vro3&7ad5u3Ozk|+cbJphRw6otuzh0DegHVX0Lk~xsZR&&}|Rae^w
z3EIC1yy}><C^~rO>kDlc6dclAM|6!GuUL%yHSj&~gIGa$Bi@M_U&L_a=FvMN^v(8L
zsX*2XgZgYAvLf};hsY|wg3OtQ&9dSV9PHT9ij{VgkOBpK&b#fVBqbIyd~D26#sB_<
zS*j6Wupv7R#(G~8-nh8c<WkBj>7?O)Pa7iJ7y0oapfD|2NnnfP&jOXhPQ@V#Sl+N(
z?xdNv|18v~AUvx!`o43D$*UHSayvbYm%7NE^<1!Y;o3g-6#*Mre7yi-x$j^a7)*(U
zN7Q+zoh_>0!)Kw!F}MVjR*1XY2)O+b<h9LQ-n}edBJ^?c^U>-qe<1c)Cx*K-uE9XF
zwwdQf>Cf*cD$~NwEIL7mAB+AKucizhj;FXP%Y{v8h>mH}>aP0u5&9PXqq$MOf^MCM
zy0W+iTnT;6SM<UkH2@WWXfken*!9Zks0Mi~g$o&5mav`rwWM6zN2>0BKi=5!Iw5$u
za%S_z9^Yu0Ewgk_HiPtsz3)O#if#GCfB;6nN?JR5nxs%N7R;{1uKHM{lnbw?dblKN
z>ajC;qAuf<5pNH|F6&*rg;Ylt8DTBRF9%hxpUt<Dgywf_S8?TaTAjAz6+u1`_Q#i_
z=-uFJ-iM4P)gNh%%HJojhU3{y_Yz3Kqcg3cZ8!Z{!tfvgvP<m#dZwI){Bt4^=EDVG
z=N&P<$O?n#r;j7o>AWM0e|doOqqI`RdU=X0|7e-ABo%5Z2AIGF#>a6-*Mpf%>)b##
zY|O6lD4C$o&&IFVQC1(zT!+f1HNx5U$&;VHu+EGro*Xx|;`p<r8&Xzl&6TuJmvH0U
zhnhJ2!=`pX&Ka6Wwm_eOr=3|lqp$j#M;G_+cXDOdo#lizm)#fl3(vjB<`(StCS>mU
z_$*s#P6G~C&Q?W7=v3AHchi{VDj8L9>ugdz23FP|&oK#X&n^v;Hrj(udhL={qxiEW
z@_z<DS!P52Y>`EY?X46PR$02u&dJ+zI5Nt}vMU#R-j)tI1I_l@ndN*q)e}pZY2mQ$
zJ<lHg8@sr1oaI#(>*o3P&*Rk1bg%(8t#48!23(26@Q-Dt3zKS+c^2(5ab(h<-F7KY
z2$MU=k|35sc*OBr#~kt3-pg=S6;AEEFX1G^>}n*gpa$-2B3`bT=sCV@qPPB)bD>;8
z7Zuz(Lh1s2-)4;t1?~PuJR!&TBf3WUg`59Vt+2iu%xS$HBo9eSFaQ&-wpIpOrXmkS
zLn*V9DL8HW(wgc-=;1xdESO5*FJ9&7I-c6tq-0GKmC&UILD=(S+V2b-Ho~bF#D)W^
z#S*+`+xIMhBMeHIq4`YlSXV&`tp(HdMDf9GoAC=`c@-qZS~rIuz){)2mY*UCRZ};u
z7stvbgxLI@4<sR{0EHpTCx61K=17A#g6obx>=YZ`9<G5&LoyXUBJb(G>{+63wk&h>
z6JgjuXU-FHlvNXv;V%GAx4l+W-9g;--rJPc=EZAUgs%}^fym1{CdC&nN{{aVr(KP&
z2TR>QYVoAJ({GSXA2vRp?pRQ1$IhVUb~WjL$ReK9mEU)89n8m|5%t5A|JVf(VS{~*
z6YTP@c22I3&k_0(u{7HH;V~}Y>JS>LLaI<-N=!=&zf4WC&o1zZubyI@kgK7YP-wxY
zw=~Ih&ltZU5Dp3_qLU#UfLt!CGY&i(77t3K;rzD|PTCib<&7B@jcG7kVihQpD0@P~
zAXoBfskmJH@O)2pck`SJ;=3o|9zsq}M>({7b$GV5tDQ);GVR>KDzZ>+1yKvn`P8lH
zc@PtosUG<jrU4A2WOux{ibx1SyZ#xN9kB>ymnXTAvG+vnk+b*E5A5DY;|kj+j#Ua_
z$9ARh7!;iS=-zlu`iG)tBV1VGw)8XA!o^FHYoXTBjFQ1Y(cQ|hAqg@}RhC6$W1*5(
z>sHYsFU{5#W6kG<QwXQv0R>AENQmq0LB6C0*%Fb(B-A>mq+!)hmgxf-GY{SeM$BHR
z;CA1o9n)TbC=soQl+Ob`I%SFhUe>DxOth?9z6l#`+Dy9bA(s3>5}$fa$$anWSc8rh
zx_+Y$_!Us*YXNP%Mex>7=GR|YcKs28{wV$=w$~2=PchiYj#{JH6yN-$ppb70*+kh@
zW?MgtCaA2(y2?Rm>$Qs+rEq`dDkYo}B2Wm?&NaG6l|(0UUU3lAV`HQ<XgVvmzL?IO
zA37xNFIdBV<@)Ss<9x6E3^B1i%#5O8Ja#9>ET9icghXSJ$dENW>~kK?PvsSwX7b12
z5Yf*jQcHOBkLbL53SjmjtjDc2z5DH(Yr2MA!#5vE-H`uN=}V5+ZcELh(ysYUoE9Zl
z`$OFllEYCjxd9Ta{5H>2|Db;5wD+_kdxnL8Y7^@e%xrm4JfnFCKKko))&ahy|K7#d
z=8LjR+W56p<9R|WsQFtsC^Bm>nckxbuO*2#6nsC>U>DR?yW-ZkzO?j>(Fx9Ho@VtS
z=d^l{$m^?xS(=roUFW~%Y>l+nsX|Rkzp^@B8*tk7dQ!T41)crPvFGbCS#*w3&aJf?
zA=VHAy^{2!J}I>Idy7vNYJI;A@xX5PlKk|=g}8dFr2>P5)>xZumQ_(d`zshJu`xgj
z8?k0==JMP;XI1h(X760;=rvNx=%Tp9<1?)$>OexF;=v`YBp9}A3P|r8=$ikw)T_tY
z)T&eYASYnOy7%F6K>p_7=0aZ;FFF+5%p6}!+nMb~R9zh|I03)Y>xWZv^p^|V?deh-
zeHfZ9B*r^#2=j4_k!91=clg$98F(=NN|F%!5d(tiup)6ANPg&VA1$gfyfBm9yHmi$
zj$suh`lghx@y0IBP&M|ynl>Kin4KSls<h36ewK3XTd1EwpeRISf_ty}VXCiT>O4&<
zBcOCOA64H1KI=l>uyDB0l0N+k`<zF9;IG#)tJ>F}c>oOQwlObvuHOI{$YFOy0N?NM
z6;q`|z1Z%&>O*SFk0~-&wKJYW3xfS^;1>FlJTNZU4B-}jM6*H2u*@Q_^-+EAPMb#9
zp2eg6oX%~rvV7m$&`|2K($2FpG-^xGfBj2S!=pU<wYN)wwpQ?(V0qUB_`x@R-A<YP
zxJoLPT)@KOkY2r`X>-=Ye^0A7oK-IRl0_t+Nbc?@;fMLMp4+OQ)nk*H71h{1U-v2t
zydM4;Xr7;KYgRfQH}_xB-k!BgEOKhv8QT0xxbA#rbXqk~`z~@SomD$ptEoenWb_>T
zI6!UjE5<Z(gs*Lm<<0C=O%e%Qw5J-E@=LQrzJ_3CM1*VvWgPRFTXm_JtAUe;a0Ef2
zah7?g;-t(8&<2=D6Dg&k1}a^j{PZruR3eU@({YrEjq@N}(A43YTKKB8{07sKB2twc
zQ?;^WI}~w|{gv6*nn6MsVUr`O`aMf``%e>mj~H+Qg@25E)`X~E`7b`+<$rVkaqf~+
za(_}o-3}K=?KTAlfrhFbaPanXxZyo~nZDEKAr7D4nWEDUfPKtM*@zJPxsc!R5NWlc
ziiu-oy(_ZacYjA97eOp>{pQ-Cy(lD8TiTah^FR22*FH;rao;VQANc+>E{+i?H>{lQ
z;oNqCKpjyr6>B)Y6}>p+P|1@Jw4#={t8el6_Zj3h#fzx=eHgDb6!YXOo(JS9w!J3J
z-yd`Y-f)&FYF-YF@As%Wfn<`>V|m+f`?Ku==|IZ;c`8L5sssO>siv(gtyBZA$6a&T
z=k|D975T|F*GEgAt|t;D^e_+l={;s8&B5V!_g1K{?qMGI1P0NjBp+@!>fLDhRKgyv
zt`DnQ%~Zm&oJlC>s`kDNEjb>n(YLH3S$1bsbKFci<XIGmBs@NmgTWgF3_iWcLI<Z`
z=x-LZ2$i9kl_xW+C+ceed*;eYdTuBZ(awg}N9x4$L1a)l$2y=(&iL}%Y8x*Yk^7>@
zV2T+EMA`m02DHELVF;KcVt94WeesubPt)xM?X;>%w)&7bY-MdS{>Nuqle}E%=&L%r
z6`kn~gFiz5VMyiN!oLTd$z+k0LYl6$BHOum3lkqSh?tg?9MF!)-xYLBwCJmRu?P9v
zW<x@)ox1)-`t1H;xBM=xFh*ZoM#g?_iMg9_{;oILtNwd}%}|V;gb6je2yx?)M}9FC
zC4I9@<sKIDv_`E4A;P5?pDLc%y#)i9nsP#T4mV6i(TIN<jTC;A<=yYr$RWC{-KHPT
zp^GB-B8Vh8_zS6k-FP=?zKd)gGJHS&WCebIA-wU;PHASDJaKkj%mHwvxe=@fOYM_T
z(MQN7YX3{f)^(UmBqauI_I5O>l>+Ej6z@gJA<Wz84cEuGXenh?eIE5oZo?%eOYkcc
zSWE7C#r+@hVu;$0G<BD=s?>$-eF=6?DGWzV%ptP$zjZpmkaAyyJm;}|f}o)7jk)a`
z`wRt{(^q?c`>irOx*l+vOG-3-%l5ky7NDOM)&tmOB>cA{h_kC!Hm>8bg@b%rkqM{$
z8Z85W5|etE7t#K|P6Dnr!kabGhVw@PB1SP5cEwR7`#@e+NM&x&&Cf;uyIVKuQX?Dq
z_h7|??m;J{ZC1k6m?cYG#%_fSef2LN?RKSmGytC}YuMQ2qT0^GV;<O(NBSKJH~X62
zV-hKOw<hpz!lGH#MxmLg?KqRVW=cv<ZC5h38hS9`Wz8?DA5xy~QkFWjc$790Mi;8Z
zz0PZ+WHs#`)0H+h(VXs~ij~2Yb>pb<1Zh2+0&b}kcp@hZ0BR5u`CcFR?hVN2@?-7Z
zK&@WjM~&P&{eWf}d_9)M7s-N!K5x`Nc>?wsY9kA$94j1`O6-GGaGii1U$+NTL$f3u
z58W!!tpq?08K9wRltOl%Cv%?1s+qx0+<sa!Vd<bIz8l_#C9-oKIYx*E3~B7^m#waW
z#W6?zlb->8M6`0)TzQ^u>YvU;h|nM7`@K@N$BYx&0G`|rlE8OF!JgAzq+c{y5zjNf
z4^1{afF10yU#`bGz9v*;H4)+EGp^dnu@(6|?QL<;yUwI%AHHiJ&6R2*rahS>CQbI|
z&u<hI$K@8zUCm{bf_6%0-BMF2Vvjbl2b5E(9&bR&iTZ43U-Q|S8?|Ke5bbT!)@|3@
z`U#!ZggY|82<5M44XW&iD9nAX#BclisDJuA#?eUs+B^ea^O&E9S8z%SRD_@Kn^k(a
zQ{xgdM6)N!V0>6$N<>_o3`LWLzv9y384H@L^YNPY5*51md^bgHK^$hg-V--TPcu0m
z$+OM5b<&{_A&Z35NVtsx<(F4hDqXct9!0W$gZFDrwLQLjNN9Dymlf;|dc6`pM%g)q
z$IuCbfx#o$)u*b_p#3<j-eFu;?+qoq&F4k!Z0u^by_6WixRK=}oIE5uoN>`hV*<)7
zWN!Ym2|3ZkX(16I7aGU`EB>kH4!_o42th39dunIYsV*kZ|2W5<tZr0b_1%rw7hI_0
zIkI0hXIDJMmSxwG*_67(wFP{5{=+7x{5-n?z<5r9Zs*ywIB?0I@7}mfe<7&5==XEJ
ze%Q<s^8&f7zfSG`@Y1LvOp%2<ij^O~jE~wWN5ZZ@-VaKe=lk~BSR?A--US_x7vc9o
zZKPRNH%O@Jx(GD;cl77!J?L-w7RFPQrtI8I+`w6M2CuRjKr58%wYl`9-ZPRE_P;y1
zTO!I7Jw>DhQTaJ#aMYnQFgal9<@@@$R({sau1t~(w8_UKZ4wS$$?Ixf-Jd-8Je<ze
zGshZ=<j=8ei$3;N!uH%$3|DP-%aBjyKVgi^9P&NZ`#_5`_)O!;RdAJnN8M<J78+fJ
zE6;ikswCW{MjOU?pb4ZcVNy82S?PB@23FW<Pvmh1IqQT%2Q%6`N#I=<pMvir<YXkH
zMrJqqQONf8tyoVkzdCrfYa=o72-sU`vvgBl_rdG7G}!ax&?<vNo`?u>-c(_cQYd>e
zXtAB}CyT7<I1yxUheGa33fE3mR5&L)*U;M!{sJ}eF_jmQMSu%w4E$f|+JF1E^~~G}
zlL{Yuh2&;#5%rTc^z*-((R}d{m4VCPxkyi!mnxrWl)K3&TU)0R_C{5%FQM9E(J{6$
zF%*_gd>@Km-6*_7^E7WsuPj6y0~twtlF&(b+Bt#&ltUhe>%}o2>5O`E;bt6pyFC43
z0?pl|{Y>9sV9t?*GG;q%N_~1s`~nuGSoxIQMC5gPDgjbFD06)Wa5-oeO=y$yL_#-X
zoa)2jrLPk;B{|K?2#Put_u8%UcUmI5{@XO#jZeeA$)7Mpr>Kl@`5_MUr|k416>=$L
zM+^b9-;dWYIvVhcAM(r&Q48{y{eYFpg-R4AX0c-V6A(Mayb+t8xicPnG+LoGyR}|g
zX=Xh8*d)KT@Y#1te6_IZw^^M+0X=jiZdZF|z<x=Ac2z6y^S<F^mKNXI?HC+?yQ!HZ
z$0-&(rjOjnha%`!lM|KGm%+$>tb=~y526&X&sd~Amu=S*<D?8(ocR5Tj7fUz1J;X^
zYm-D5%$7Ni$D+Y<jtoMy_a}8uB5P<B05dz!0T#Ko+rU-N5h$7k!t-m;w4$Bvamzzq
zZtVo16ZzS)F+;=x<UOOf9eh>vw91Y0I+xgSiSND4hs}b%#^Y<*vqID@TSmqEgqm@A
zGiKk*sik$+Vtb4BXHR1u!UVF@oVOB}-k>kbBbgwV1KGpbi^LQuD?Hx2_{00%was-V
z<6N8^p9C(YQF&G?`4=3#A(x8W06wQ;0gma?M7FosVIf!%WuIo!fd7_>=;z~p5MY}<
zZ8vSMTALy+5Vj0+3VvG8NuT!=dj+>&$GGfTFO_rnWu37`{HR@I9!lUTc36AVQC~;z
zw63Zuj3F|%=UH@pzT`m}bQBT$xAZejWx9~Di2o-%;C-s@k{ofe3IsslCW(TONUk~t
zzB2*-QOI?bJ(uC>X600fRaIUm9fmV4H_yK!z<e%1`}{gQR)Uu+vu%EV;dRgo3iyo>
zo7adiqd5j&0^o*y$J(!2<4oybCtV<46he53Ue6rK0+IpcR}7!s{fa&G<KfIV&`M?^
z$D;PbmWNM06-nvv8tOCU7|g$xu%4k?J!@g!UbcFC;?#P+CiQ3tBus1jbQS9cO_pA;
zm}60!x4pZ3tX!$Iq4~}tqa`+YF(KH)w9Q#S!UR6}c2x1xj)hZqkujAkp{sEXkZ(8H
z$@kv=WG%@$sPhO%<WH~|Q?Q$Kb4!EuOkDQG1=h;cyu=fF36I`?DJ|kJ6f!D~x-$jZ
zc#|mpYSav5&0kZQt}jK*eOUPEbNv2D)=N&E<O7p*O<k6ZgEtkeEpqhtLC5_g^K1m_
z!R1KWhHYH#o(~-jfEA4WZ;IZKXI$N%Ul%ToSZ=Eqyy3(_2L!*~?(H6jh6M$ye5NvO
zm96|3dQ8<p-1zVIVfDxMXMp^_8y;zUbDc0Ubf$?|i51D58|WC=(^pMaoD|GA^Qq2i
zFh+=&peyxD3l!+_?n=)PE-Ogp#=pB7kSZ%d<$LGCMLk`*Qb~dtYCX`^${@5CnT^S1
zwKhoJGFGX`vN)F<G#vf!?PUh|L`9-q<P_>K!pVwu>WbX`E{$xfG5v71K@xj1DDbsM
zr)9u;*97n3soskb4R=kHm14B>VFe!l*e{i$pm9amu{9~`yV{I1M>K7KNMu7?>;1=g
zY%l$IEsUgb4Di=!jPrLKF;WEe{EsMeyw=f13qsZrn~KIN>^qGaxK<vU>CS8Mv2mBV
z@}F1jrH<b7LkF{YAH%;8GuW1kp>*De@6DH*hHJKm2=7ink~Vt)oo;C!8p+oZ>F(Ac
zTO(GPtCaS$f7XN#(2bz;_Czx44f2@k;YzT<u{xe!mg)Xj0nI9t49_Gog{O}|)Jhf`
z&(#2tM;ckLlt-bRxU3Y)+n<ArZ}<cMo%h|YPwd%`*cC=osDMB>)IQY>Rq{7UK!63G
zN$oGC&!t_pUP1O?6<J)HpdPnk9sB4QB1DBC__@`?jo^mGUK_oW_#m0+k#aaOmn~J^
z&P2HMtK%=_!8G5{)pXJ0U;Oox&0ai;fpcj??{*>{+X&PzI^~{Zax3Y+R7Nfx{tP<_
zOH^+{`)K1sbu$iT*Srk`cj>&d73btW=MWVgJOQ?1%?;Gd1(x!W;ny?yc-;PsLkbCv
zj51#7FBt<^{(V3*hsJh0yd9A7m;q*Ebc&2><zpc``hK<!oAmDwwt?;9{NsN(vg*qj
z&7&D&$6FN9Tk_V8Wtd9jKi8y}hF1HL6T@V50C=4OtUH$fP90EI42&C>7#$zeFPO1|
zw7)Q5z;~KE9jXE^4gxu11s5okW!6jB%3ngC$$Q@RNPPK<7ZUi=yWKWD?quV!iue)5
zOCFKR0emu1DP(wF*zorJYcspH*p*={%Txs0^3Se~G@NOZPS^8F?g<LldfeqOoTru6
zNKA3tUQZ&RR3)$#iCbz?=(RNj?7|SG+TO&u*-D8z>Dx{CP<h_xF)F`nFNP*;E&Yb+
zg%3B_tK5cCiIwdO*%gTT6LUWYUYzulN7|qrVi6aIUQ?MBgKUQVNh3gW36Iry!(2i8
z5vQ_{O`M#N>CM+@PL>_|&{Zcb?fw2SVQ;~GH9BHKK1t>Jd&aT0GHjrkn7*p@199Hz
zQMcyJ3jGQtrwGg}6C}>AT>h{mcsAb9P7IVf<jV=1|MraY_k+n5LQZse_uT-ABd0nM
zE4o#_258Zpo$_>tCBHG)OVL(y@D%A&4Kxn`(d?&m)86l-uyzFg;#M)oV?%7+;e>?{
zr_1s6=>b~Bf=Ybb*6cdnype6pmZ6fZCv`NUj%lxMu*=b7{s`h3hrf)W`FldW+sqzk
zQ_PM$xuh=!0pWS8dJB)l)cDwQLaHyodYx_{<nYY*dowxMHxrh{=SugIx2LPZjHS_A
zxl7l~Whxzl@H+TAoiLW@>y5x6mkBGA+G=|bnOK47(<iIdfH!)72vdY=VS0iHlvvz4
zx2fd_IYY?b7rUKK<a}@LH?o8%lueylpQcnTn26~pjyKu{^9&1{d<R_#*s`6C$o>_r
zA3S|+yTmxRf&>>6=kXD+g}$YbF2K<FxKy>T9=k<28R1a=z-z>dzqz^no(qwBZJxgT
zW)SbyDvRACjBaIaE}dUbm5xCe#NpA1{Iq(}(BidPRa3RK<m3t5zD-;~#ir^6V&Rf9
z#k$O(Md=b{cAq_L4Fm0F^Hfsl^D=Fcyi$cfE=J=Lz_Be?VGBCK_R*#i!+hTyhN0=!
z8AEiUAhG$j$pk<Pys&x{Zo+A6?-ovT@ct%@T|rBAq<Fk8;PP)_<Ka3^fa_Gv67Jyu
z<J9u*zKX1jXLlFg=Dt(rc9lb*{a9SKq*L$UpiPhGWZEaq1ox*jY_J)~gVZ=0_M=H~
zMq)Ntf>Yk#ahbi+BN^tB%QfwZm`Q<=UCc@E1}?IrCuu2|Ia<*(XNL~3*Ts3oa3X|P
zkC_UZrit@C{)woH!4BN(LR2krJQj<Ff^Qkmdhn)2(o!UScb?<l;ZOiI4ZD(QiXeW3
zA;HI|tJ2&5gu%P+A8U@Dr?B(BU-usUGli!7%j|}}IuPrhA8f2P0p(jR6W{@+CytVf
zzQ<N9Wbb;CnREV#!3Lt_&)VMyfdit239(yvZ--y6>M_b@UDU2iyM>c67;X-dIJZ0I
z`Ba}{LAYdH7#9Tef62*w)*#bP^k%X29yY3(Lw3x*(h&A$)qSn1Z<3f4fBq{m)dc6u
zYnzH^eG=3+<kZ8#oxgurf0ct=ZweBGJ&~DAnQNo|>x)tdbC|NtmA376oQgmedb6RT
z2nQIB`j0o#xjFN%KaD(%ow#on|Ior!x9n01qmSbzivz^&@VDL-m&^%PG~s?&X#MPB
zz-0&1=%9CVa&l6S&bb=*w;2w(x1FD4&1$@N&bcmDYurN?HTqRYC*FY1lpp@xqe#oT
z$yjD?q-kE}nZ>8Se3&+Ld|gVvXC7VyeL%X+Tw0LVzM~pgObObkK?SOX)9ibYDIqA{
zw-D2Y6+r^2n59pN7_v;1N8Ga711~agT?}>PX(?d&e^XceYnTUTCitNzDa;NUl&nts
zl6k(4XE|#2wexCWJv9;UnOd>K7(csQb8&FuNF7jc{H={1p3|e#(Kin^(g?}9GuYUT
zkY7tW&SM5kPZWt}7i5cpNRv!5s_*QF$?@ghBZ%eqZ|#oncEKO_Mkl1LPI{7A(S)CI
zqxnSErx7rEj!RmTv)a(^6R6HN4P2lf4<IJV3w-O6H+vfJ{8pdl4SLvn`2_6#uuhJ!
zIdb+K*oc4l({gDTzevlA?(01kjp1b%nHrez)^KuC5YG#$>3nnAE^k2n<!Hk(!x{eR
z@qSB~<A}8jJuP{fiVrC@K?pIQ2_AEBBnQr<D9TDp#{~K+82;(qBByJG+1HT+8S^|I
z(DeeJVxPcXVZfT-iQ%jT-RfW9PxqW2W|>vpFZi4SNn;wnw8wd8&rl!Q%`>e0h*Z-W
zyQP!5*TbeZz0Hi0^J^Z|Mg9JqJJ394J-y~3C`jg;Nq@dA6Ti<0Vqj%gqzPB9UU}o(
zL*_Gfv|Z)WBlB<+d+HP<N~Sg2b@8$}KvXE;A4};!^Kd*St1m^FuaZQvcqJu<-Chv(
zT6ccNppmqpQ$LkwI-K{lLHKA^Ux+#}MZT=K#T^g62l$y%aP&vp^w6P5Ugj__t|y|0
ztDNjA>O{<6bAvn(baJczQWe(E{d2_bH!?E%M1+FEMuY$95xM<?ZuIe+O(MFRae1n#
zuW7y|#f;Y-dZJRFdUcm#RlVwrNk-kljpwcwtdgDzHj||mX-(mWO@CxPBAi3&qoHGN
zC$WecL$4%>gQ~Kqoepg~0yNN-7cVSCpOgKfJm6D!k<7)Tg7eRhDqpf%9WO4^Mjc?<
z54j8cWS5fM*RDDit?=1YQRVGjvy;wghmqBUh8Qy854n(!-Bte$9<hD3zBg_c7~_QH
zlG7r*mUb2^S(BP29sTb97TI&yKPSRiBE0=d5so*a?~AEaBBYnB;Ls6>{?Cw!K~jI_
zm;ZH_nxWD+b%_%5e!JrtLBky~cpo!}LKJ+A1vKeZ0hO_V@4ooh*LdPRSErgZBY&&(
z=W}|3?Cf(n8|z#+dcq7ip81jIM%9pJT%Y{RP-BRXHf@l3KZ4i6^+Mi%Ie_E7NYVZ+
zE)KQfk3a+tN+ZlOU*3jo9*%lhzYo$<{b&7JWWY95gZ-FI6pp;YdE2PPl0z?OE--DL
zXGy8q9rFyQLT-VqaIw<Hy$HO#xez=PN5!vC%5U<yd|aSlK*+_LN-6)O`B3n7xzDPr
znYv-4um7qG3vaWT{<Lqa@a3cddcFxn&H%lZOV+>SS#RW%#50K1EBVEbW%P>J4`!|1
z^a4Y!uo!|zd89TvdnT=f-5)p}cG>}+_iGn5r<~rf2;8OFIzN6ANE4~ftExKfr^H=e
zcjQry*ioh=Bb}--Xl#n_7*l!=0nwq?4DSIkXK1kMxSuTn)T0Jn{>+jK{0i|@JS1|A
z3RIVM=MLP_Vp%*9N(AdL^eSvUh{~%EAsmxF@XTLKzUn#UT*gW<$5u%s!?5-2M@nN%
z^JWjv=%Cr)$)q2?6CvSayCb_3t=~M@l!+Q^2KZJ~7K1AG(N*Hg=6VuwdJ2+U)Er1=
zjs&?yb|pArA+K+7Tlg%R^9;LgSXCm?1j8)AHAaTAP~2q;`x5(nL>=95P-94!i9-jo
zrNTYI#2G{Undy68JCkuwK|BSZ81`5J4D(-j4^A1Ga$d0dT}?3ud2f3BWO8hCIw9uJ
z>|X(cN;;s~8`S;=x#gktDZ%bp(eEA$V?H`|mW)#Q*T(Bjx(R+GCQYfWR<~b`+UM}^
zLgAhiUwqW$h;6?{BT&9%FH(IdYgfM+a92c8lIgvRvQ_<pdVE`(VVsf`s!*|!K``SM
zC{_gA61x>~D^2L?u~(GaXVK26TFYrUkEB2En*dwpdahPwO?z@=D|A1CTV(H7o$lW8
zSyd5c)9sY4)Do05TMlNZEz@N^%AB<9jrT(tr7q9xs>C<!2a$Mf94n;1I_xezPYr{-
zF5&|G<_L3w`bRtu2%>%#(MXrdy&q7G)}j%WVNuHv?;riL23R??z?uHlprkr@8lr#)
zLCh9;!v9uu2A)bMiH0R=?~ppZ8RE}VtZcJkK%M;V4C(inlw$i8&+<CuxtH``yYLjo
zxqay^IKcPWMA1R<SNF8mGv0rDi{B-+$Ch``?{*#cU!It}I*6XPyd%TE6D9g_Tc(NP
zVo}htH)MqOSdab_4%MzOX(|>gt1`&*o9;dT@AtPZsBORb`EqsL7&r3IQ36yhP=pH2
z_nVMb`*OE%xwItVLF3ror{j;OBw9o88^kC|dIhW^&Ytl#r3C#DU%_6XU^|o5fe~Ev
zCDd}^x7Orj{@r9JH~A(Y^7AiBx9F!*X`-0V<h@^?K!9e5;(fgo8xE}1Ureu2i{|tx
zKqp{r7xK({b7d%rd;}05m7Xw2(9W0TJw?}^SL!hxlJE({R6!aWi^1n(XtMs2L&MoT
zRP775<hw_Gw`O|+eyY9#vbMK?=0bcsSO5DKDAG@^&68aIu?gI_8O0P^#U9nN6F&+!
zviLA>xBZ*iLdjA3MUDTLn1_IWr<zrD{~t|f85QLlt$qH2l%#-kOLsSjAfO<flG5E>
zBMs8s-3>!GNO#B3jSO8w&z$kR?^(|W7GHq1=Hb5gzV`3Bw&0n@ktt~bsVy7YpZZF>
z(C#Mf9w$8Wp8ejE{ji90P8AAy(t*M28a|Nf54Y5YA05<NA2)iXgG8J6budUp8K1k2
zX5UxY=t)?PeYC~yJX|cb0Bk|04nR<<+_uZl6KP!iTuYBg6g9;R@LrAs3&iu0)A;Xi
z8!q*C%WjFc`00VtIccn1&w#SuPp*mWn2$gCjR;Yn=q93Tz#DEu(NdOEm;!Cilk|0;
zf5AVixOmD`{hWA8Q>g}XieQ19EAXmW+N*~k1z>k{u2DYq>6PreA0ET)X|)@iIO<zr
z1Tp8^CutI7Y$(B1qHH{N^`NdtI22zA;#QaYf?}yC-5bx;N8Y)#^Dgq7!jMNCVJh7|
zRqZ<dgQQB1G^02@BYf4H>9V+Y|JQF0(9|awusFxFGccLWvV%SDKYWKga+SnX%jLm9
zEO*|9{Ydx0{sxIQs<9j7_-<`p#NIoV^`ODgBRRB{>TN0VRUkqKOl|<d?4#UDJvG<R
zZ649QDTtLuaz&A%%^g2Ape3TfGKrLyqzFr#J~C)>vG}(%$~w26-9oO{NQ`w41itDs
zB1ab#p<%PM8!((RbmlQ7rM3Kn)i7DsGi|a7g^z3}XcfhHB`zP-{T}cBG+T`SU!x$9
z{Vb^m*wE1K@_wu6{dh97b#*CqzYDkWz4tj26MOE4gkY{b?3&wJ<EY3O2BBcr=Zcf`
zpN?}I7j0#l%@zz2>zMJEQ1UA89hc?|Y{vu$-le6d2{*NJ3EMg6$T~%h@z)7t=8?WB
zVlO#sLxDp6;(7XlxTDB~@t+mRa=-WxUH7M<ZGGCnVXIEsQ1iWfz38_wxck<@swu$!
zup)a`^cAlkEht0>4Jq&}OltT5sn_~>_lH900`&(~Bq;*b;|rhWtLZ-Ix(N1EYWwGc
zm{>C66br~(v`y)7Fq-`v72Cu(N_Z>j-mpsQS+!%?b$zsqG)r09V|<b&2`7;L)WYsP
zw1K>a;!`V!@LzVhB#^uD4Hsk}`h4D{Wgd%MBI;s0<wOKLIMlsx-1_bZFDYMBX9-Z<
z`Azp_@rxHp_rn4@@fdMV3+ie&Z_E-WmhEM})g4qP?aCL$AqvUnY{=k#dKP#&uJ$=F
z;4~-Yd?1SR<v@8hs^Z-ZM^jGc@6pv96TWZKy&CzVcPVRYR`}nx=>FS3pE`<LT|F9E
z@nZiXY>lipVJphk9Z7xBy$)crdix=NJIAN-;FIMfhnj-|ay|c%*&}0CT%PmUwaph5
zkQYWM1CeVMno$*2B54K(!$Inw0!vbI%k>Hwsae$@{AocC7}b7v(lfkc)@r{)zwzg2
zqs(5L)NJt*QRBa-Sx_tq_GNW{9!acPg215AJDsB8&}h<n|9P1z{hpeu779EFQP^yv
ztU%V`<4KKfJKRW0DqwWwGHvt-UX127nI+|ndEwc7U|;vR$bOi;hf!jQoobVLd)kn?
zUPP@}JbAjh?tlC=oEHG9kEqdU*p=)&sCF2Vm4K+=@W=+0R7zSBsqTgF*|=I*q`p%+
zIXzXkX>VVTx&mwE#wCmRddfucW<e7d66oYFA7L-tDQx<yMt?|((CqX!sU*a2M*)B2
zEv8WAerx_rX%YUpB-tl~hi078C;V8a)Ay)L>5Gb@n7&T+<HuH3wMOu`v7c(!&IFIs
zp^n8{yz2FHG$aw^P=r>mpD(1LbEp{p*@;xHHN?s3-(Y(vH-2K4Oci*gZ?tmX`tA;8
zZF5@5U`@?;-fY)(QcA?JYZb2KEU?b2y(t>As(KO5?Xw_IwfZq?sEOR8N#{e9pr^2=
zkRk}EJp1nFK<}{8tiFhst8^^c5Vxt`Hfg$JRs>!l=_(nkMNHKsVC&M6P|ZFey{{Mw
zXg37`S;2dKkJx4o88@N~6ady3-{YNR6BZ_|(KhBa>$_H+t{0Njmh_xK=pa<hd8r;|
z2)npwIM_p#3d87&7$%RTlUEp!@M4P#20i%lt_2<4hSEan$GcCuNsX^DYkk~4d^ZO3
zKzt53J_D~uXbl2q3uXAvPAVWvqid`HkWf8rX>5BLRixqd=BD0v4e!w70uJN7snqmn
zcQNn5#`C&c!BeVBDi=`-`HDwx`mq>}U0T#B`av-^CQ~Km*ue<Q&cSPX`%$4Kbj4-1
z&4j3@uU*FW&dmrZVwC5GJ74x0(r$D^o=s-lXk?PyDlLv9d;U|Hn1Pkj`t1*L%>_LE
zlw3YFAg-I2*dS?oEN;fXf9}U)sBzlwojwTBryo0xeJ!)3VYv1Of>GGakY&*=&miM@
z;V9i(VVYF|1IYWZ8K5q^ejQTE!Gtym{7+KbG+{>_(z}4jmmIK}A29u(i{w`<o!X6O
zz1;iW_qutwQ4Esd`TaD2=d9TerT9Z{2dHpTTWdRi>)P02a+%i`-4k<KYjZ|YwNWQ7
z&sXJy*m;z;(V%qGGF&#h^5Gwu11zqzf1Gz91;8@x68yI%!wO6;l~1iXXNfI3uZu@*
z;0Zcbz7O!NYR_BG;!`3QqVgUGQpT;3x0j))(mS$`#7|+!+RfAtsogKd>x?9X7a1ai
zu&WRbeyDiZUTk)>Ij0KgxMt1J4dx%yeS4|;i{QhP+l=sp@;wOZ)CO$-k1a?1nWVqt
z3{ab%WZ&+nyD2}C!$NpRhW+22J3+tO!Wv~SdfEhZArls6=h<&%os1C?Krn12e;8v@
zsCm7Xz{{R%<1+lfG9+*g*~cun*7))&dPe;GNcT{YrBN+7wd-p3xF>3+7;Nr5)5csX
z#UqO@u{D94IH#sB`&EaWi9wc!;Tw6WvW{4N7L$JI-1S8nldLHFZs+6^ulsq?kW7Ug
z6DTv94q~JsOn>|`*|HJO=0-3slPlY~e>t&3a#8?Vk!#|zmrrLmA>MUQ651F8hu;w{
zGeI~YTe=X3k$zqK4%(59sRVqc^kcGQ6I5(GyD!W4AfMWG>gR_<kdTzC?>`Xq{?tm)
zF#0BCoV(R2=g7evrm_6crcG!JJAN93`uUafzUU=mYA$Ajr*pOs*X%u1ejwev>ZTeP
zl(B?hXT!Qb^QOSxXl&)SOi;(g87ahFhq1cLa6<M6<Awe-|Hu^i^sS6|WYx?jXhMKu
zdEa+g*wqNdrJz!z<1`C&{1*Y6C0JFQ`C}sJQ0=i}U$_`OLEeQz_F&=dqbB?oZev8(
zWf0xLdtkK8#c1*JRgCHt-t*FOBtPb49)9KxC#!GQR8P6?OjxvGZy%TT4xWz?<1b1j
z5WFxMgd8D6eysm<{Oe<bU-G;BY;U~}b`4gZ#)X%2ZOnhME+1`SK|^@UJ+-l|T$FTy
zmJys=NUdBcxEdz{cD??Ir9W#U)PUhwQub**qkBVpzsh}nu0BM7=Cmr?o9+8=+KKqA
z?^#Lq$uAyD6==-?I5!sj@)vqtZ#vLpgbKW46C4b#HCO?M#CpD0bnd{>;Y{GohsIol
zD(V@1;*A{8;9+3X%l7AVl5%#dB)>uIo;50oibA`I94dNalXI!qpYw-opgGO?p>sH5
zw917#PHHk7$8b0uM>(!pH9+n2eK6)vsl=m`9;7<*DyF5YI)5v2k}0I*A{t(}*#+R8
zspBM~l5si31%4J|(WE=>xzgIcX(5=;EQ{m5?w1aC<POOLS@`ovyMaI;gIs>q4v2*o
zo?`F{TKqw57WIn{_y?%podx^2ys@5^MnmZo<M)~}y@+4zjhdg?RF0q>PttMYw_4r3
z&hTs&4aJlP9}PgU_?~EWR8SHIlMq-qL-ldbSv96Ksh{O-&XAzCA*@|%XI&sWU12y|
zo5^dBpYP;C`@&4|`{opP*WCbA4R|SP3_HMimQ~Z|OKf9?d0lwwHkYC(nef~2k3%k9
zLUA4)`<X<{Z_8F8hWwPuFg{XJW0)~)Z4O#Fcf~~lo4u<pr!5Z3nbOte*@D+b;-M2}
zwpi-t5~eChk4-Od95qmhhIj8MMkYh#Ohu93bUCTEPopBKn(mqR?aE(Vm#jp@46sS;
zcw1t}noP;1h23DLluyL3Gx>t;lmME>cnLm-=xP@Ezs$|1fyM-nIEZVUXL9kr94_CF
zSNP6S@0~M4)r>h3Ae4=#M4i`3%bl51$qc2o)d7Z*Huu;`<E2$t1ZJa|Nlc?|h0S(B
zXQT#YSpIKaYh0gA4o;ky-}Ts#IJXUGrneax5Txf^f0ru5gm?(TD%f`NU*8-2j{aKL
zo?oVG_ol|dr+S0cgAX=33>=A}4nj5=sN3KyDnzuiv(r&+K>ENI)Fk#ZJWeHyJn>6N
zT9;&wKNxqS?VK5oNAh>L_ezHSe0g9Z5~}ck(13C{XDNBG($;yiBPKX!(T{pyh~Phw
z?0<?z6Sr-HR=%vN%RWnPV_-V+XZGo+i?_!JKUw-h3SdEdF+#{{C5odd0~x|*zbkth
z8t|}11+h_jZc)j2&1fJ-K2b@1adfe4e)N$qp2z+^W?oBn>q+qph-)Z$Hz95yZe3p(
zcH(dxt=rfITbfxtJVj&5Hu09n;PuDLy$AbX+0TCJ|2>e!sX~!B<MFxvddPnnHp<QL
zn`>Jny_p={1IEdX$M!htb{8#%3?I!>78Ve^fzNzjrw^pjM#s&@dyY5~F5S5DHK@w7
z2b|^>wo^gl6>|<;C1flwKEBlxXagr-lQX>?53h?TYBCqqG-Vr5UMsv!hE-2lEB2(z
zzV(ln&pEN&2_!PHC#Gs?da$%BEGEyfOyiX@+1Py3(s(thi6-W$*uj`AlqARy0gtT;
zdoPro+TG~zSQzDYm0En1YXFYzvpiFXT!JAkASa#8oD~2#<HNHoPxz~k4kp^qlseTZ
zSRP{LLQF5mYIz&K>1Et!F{v=DJ_d0J^~;^Z{WiA13vT7g5cqIj)R4k!U*2)oY1mZW
zk}t6%Jtp(6V+EkCRH0W7Gu~L6hmP-W6U|+Ml2#*|bnR<j^gtK3%KrT+R_rsDHL`G(
zkf+ZZohK*g5z5#0;Wc!9Dc^SMW%@dyP(`N{4$EcIx$=fxG0ECoyp)8boyLb2Vt>8>
z_$xZy7vtsfUtpE+P+F;a&UjF+63kZf@y)gEl1m~o@MNn<3tSc?>pn4Qg)R9aI%86H
z?YNcoZv70amA6rHG!@!#Xp}E4?9#2$WWtvX>BhX*_Y&gErgm%1MgD&F^EueEXFvJG
z!h>?)<Vw|Qa-mHB*E`WsnFG$<&lb)r)T5#JW%}ry*0T0o`FWNYECQ(b&yUwZ<79r&
zO070|b3iO+CcinrT&QYv4>AB57{WZM+hpxnMEK$}Q>w$Vq_;Kmz+*bXGycKsNXch0
z)A5$8)X3tG&z8HhOyI(xoyU3v>}3vS^Ww*}Hr^jkc}T;<?QeKcovc`gNWvN2KNy*6
z1g8hRuXev!e_zfRx*yc3po_k7Ihq=Lr1UiW!1a?~ha(8I2cPszo2!sFwzcW(GKXZI
z`*E&d51irxjdl`Bd}854cP?6GZ=1c_ws#bLaB;_EwY6Tm)sjoxw@<=&sV{8TgwU60
z53<rN?}CQ(N*=1bJxlnqN!PmdbL&y)<J|DFSH^?jl+w}neUvW%qR%06$;u^lhcBdn
zhp3Zlt6B*{L8}bw(XT4WHDl?j0{Se+XyvyR5qlyBf{c~4?6qUW+9=h+>SNc-Vp|F^
z!pj*#`9I1#6j!UuYc<3c;tRpP8&BX>RXtf9eK9Kwr6D=;^nXRO2lDe)-OnK1c7{!!
zqGaFz^dy-DVrT$^G{P2|m`N*5U~ns#G771H{U4Wc5iUzd6l8wr%WWSGd-&Lh;=KQs
zeGRp9uzriYx{xsv6-ghE@wOR(@Qcfl_f>#s)p+h9hu`zfShaWIV<w4LHZOo#R(j=D
z+&f76OY3r&1h$O0<&yoG8`6=jn`<x@*~M7=+ofmpT7k=qR;=}Phvg$6ugWH}{QBk7
zC#X^NtEv&GboqOkYAr`}>!bqqr@G;9HP~CcH4R3h+8dYRH2Uxgd19IW;Fa#t>?uON
z@m<ZX?`Wm+ATP9xV)-KcTnku#v*-Y8Zt7^E=#_S4wT=5wsa0)B#^JDzP&*wSb$(7r
zD&33fieWvRCyB`AJKz{)DYzQ_$=m_Cu<vUkg9Qnfk6{{Wh%I*1I&p1ByYM2MH4P_q
zc;SJ7E-tf;_ijP5r^~L7mH1JK&;~*%<*7?=fVqq7_e2B>Dyv@yv|-M`uM^qmX?hZ0
zS8SH`+?t*yYyBe}{Ps?CiloaGrrD-PBCYlyy%e-z%fGj`kw&hkYN7<aj=Oz?jQ1R3
z#p6FpO}y8m-<av^!i&D$J!FgKCNu))__TH@zz;?xz>~|%zU<cULir@EE7BXui(Y9>
zGDoI5YbmH0y@>I9YUtZ#l?<S-8KZpv#b}@vcZa5D#2|(29gvjE-_AQo+v~yimZ(~|
z*L$}LlyZ=i+`%?>QQpAby;*TnCU8)6LN@u-qfyGp(V!t~s6<xhMiyD$Z(%b$v?Rz@
z`P9asSYI8m0yr^i@n-90hZtrXo*JG4Y{t(VAk)Kcl@O)Ju^KeEx9~rPPZNgeFl_tj
zU`q*9ckyW=JesyjQWd>GA@GuTV87E_BY&$Cy`vcS?A3Qc;LCwfmpEO@GT_Ic0&j&k
zE!e1o=qrT74UMa^k%G>_%uSeu%|MH%I7T#7B=SQ<v_Uyk`f_<|mtm}zs-}(6F125d
ziEix~sbgPJTRRO5IJ6CFRnN1(>pPY!^S6*CtEFFj-75cmqT6uQ7lhp<8V>p3<WqWC
zA85q8|1kr|O)v!f?OOFYVQR654HZYqQ?zqiT=Zo|Y{d_L6MC=oVSY9Nidzmzj^U6L
z%ET;moHb`MbL#uMh9Dy1X3Er!rm*W298G0c`acBano5trX|;<)d6V?ASh%T$Mp)RJ
zVlYnVxc233w;!k&l%VaKR`Cmjgwuv=C5j|GJ^wank1mWNhJiBMkU5AN`%wIrQ3jJd
z5V2Iznu&Sus(5<)v4&6Qt}qmH^4etpmj;>s+dlk7iNG@_*A{dzWs2mtLbeX0cEHL=
z82=ew!n5g#HRX3Bq_ZChhf~BKN=XA8HqUxcT5wPGE_sNG502H2cAeD@u3UclPuBRf
z2g$``nPSPiEaSQ9K}kY9Cg#}0jFw+>#@5t^|162GJG`?Ph13*Q*az7i)L9J*&8@jD
zw=LP8+RKMIZrD_h&5-VOmhOE%?Qsi#y=NbQpEy1&Ju86eakd7SFh5)bMI!s}Kkncj
zIXy=#9$B|@Q#$Tok<x&KzrT8!F3`|ViY#J0J52Ezs2@BM*l$i<DCuKuM^5g=9gk)_
zVmF%&p7R5Nh%=q(8RJ&DN&I8AfziE)pMzx;FL}FT)(LuvNuG%xM75<umVD7FsGfo!
znMM0Pf5aj3>NiDnb0J&YStUt1q7?=@;Yug{ZH*?`oX&z7^d$(}M%3AF*gydUe+LBE
zPAcs`unjyfLxP^xwft+s;KzetJ&Li7QA%ls&k<$4^#RWcpvOw^>2IME__);AH0ZR>
zHHkFvi_8$_59!cE%=epdojX-gj7i{BEtsmI*TM8+%6Wj`*)0#3=U>R0Rsk`_f81WX
z=boc|K0i+>#8SrvkGG&T_uJVQ{sRA4R}XOt31*5i9U1|rvNtZ~&-=TzhJiiM1NJCl
zG43_I0h#r@%F1`y+4`Vvs$94MXos(KQP+Fo^y;T_SQ%$9QY<PLXVJ(^Ul8YWFQ>El
z@$W_LW@oecgNBS9D8q-{LAJ~Wy3R6#hWoKI_-*N6@WK~?jEmZgIB~7|?6(G}l{dY#
zY2QyQ)tYre7j7+)p9|xSsGZ-Gm2R?ecLU3X$WA#-N~#^+S`PlF%wXprg5R7RWNb6G
zL4u;AkwbnQ6;a=0x4tUuF?6jf=^$j(Qfi`l+LNYr3Rqic<4M^<hhICA@Ne>nscEFc
zKT%ORz9}*pF-m%brR{Azo5hRN2h9Eb^=Iu_PPj$oB7gmn!_E~UTUHLZe|+ZB^ev8b
zU)G@^a@%pPFXcG35`tyvtfAJ?^+D9Cm-%YoTfoUB3okA)!sSSYHf<Kpm{mllm4A(F
z-r}#QEAhKJ>5cE1l_#EVRM`~*AHT8w+?FG-29T-rt(l!@eY4Yo^)UPhbZI8Y`Z#)1
z0f6peH-UnuZ2dR!(q0Aaq4O}~KRG6jeZ%a%QRzIlmm8rCikFeW1Bgp)k(S#s<^=x2
zG{b?U2-(+K7a2Z;HEo9^@K9wbLC2wZ!JUD`*(P(bCv*&A;PmZPnpf{WMItrKdFQCk
z>E?spLoHzeC)b1IA7@8GeR1WNBHY?q<TNo!I1hI*r<lQumix3{dik{6{ja9?Yck~>
z*ZZe^AbZstRv%PO0Ds7n7KQ4hj7eLj(E*2Ih;qI}58zUjoR*Rvx1=C&amF*jOLzXt
zp#7pQN%-B-=HP_~=arg6Kqv#Y(iB^Sbmy@d1{@t*s&w~eMph5;1#Jr(jMQHT9<)CG
zabbFM05HJp+%vi*S_4l?F?VnX-+PbmsN6p-fjwmfrJ4nv5~P6a&BLTSYlv%W^^B0M
z4mSur{BxE%?Xfuc{d#YoE%qh7$}OA??t_xR#ijcG3Ls|1#l^+iyviy5sdyu8aH4as
zLTz-DY@8X2C=I028%5q(+o+;C8s3j5pD4En3rxZIX+GtB1&YRhSEI5m`(ce}yP0G{
z>7~1>KKmGBISy%k`J7D<6P-s%^9C6;W%oMx^Zvyhu-GsL+cf4L;lD`19n#JQR7_dT
zQzIBavTJ9~p4}-nrMJK`Htg_~;HdkK&GX*tVyX~nrFVRdxCZesx&O1hCC+eW-@X;&
zw*c)r-;uZE#XCgY_CMVPS#>(4(<eItUUwX%3cFNfZnqIc5>^*Ork6DTK4R|Y@K-Lg
z-LxSmn{lDnTMKwOI}Xpz(f>V)8Tf|z`n->lKKoY|-wh&WNWjL-YY*(Xr}Fha#~|~?
zv)cue!t=VE)tUB-KM}Bh!5D(G!#OZCM^Fjei|B}*f_(UT_TQW?E)`Nk(NZ;bnxEuQ
zJ6$~n{6j53CcZ9L^3^Mlgo_5KtM3MUuZ37-d~*>X*`-X+HF(Ef%-*!Y=R~T&%kY>w
z-`sKid4Fp$Q?kp{n>zizE&P3Khz9ncm{($*PP)1Q`S2$ev*J}*Gv)T2BtydLzsxC3
z4BjQT^%N(~<*fQj*A8|%PEW#ng#yntSl|V%<dUf-O;?8*YYMoGI$ry(9sqw}P#c)Y
zn@-A;B0N;2SHcjwx*xZ&N1Y+IYU$&u<y4V{Na<gPD%kajr0Dra+y>of(Ajm7jOv>#
zGT0|#$u~0L(o;VB)0fPysonryA9!qqX+$6@>Y%Qv{MB<pZ#<4BAZuZpbTBM93LZ#Z
zQ)io0;GGsM{+^Dic7)@?br+2o^433sgNlX%e+Bi@TY6ui{w~kq0k-jr9z^S<OY<rG
zL3_TfO47HJxHQK)wKece9Y6V`Z*5pO7TIt;LY<yRyp~tvZydsJ;uwii!imgU1@#fB
zcNBp-G$+4;u=*R1p9O@?Pf}pu?-PPX+%ZDNJt^Thc;%NczXub~{&b7oQ<te2%w8~m
z<D}7>cl6@;^gJ#zAW-?{V{^;iVdf!k@&VlA+Dq;+F_|*fe)Y7Ke2&X~bp9L|9?87_
z{7W<*7cUeie<WdHPTPExRn4BoC(%)~(edjC9q#A6*L9#iPyn9i;O98H(aT^j9q9P!
z`fWf3FVlbrGgM#{pj0fSOus?<_kF@(N=Dgf{7t}d;SV1XPM`jw>S|sk7Oa#Nw1fza
z-EbC{H1%S;Vtq43;+y4-jg38i4WY2HtdC4ys>|b3e2FX?9y;9>{H0UF&I3o4PanGt
z=w<bfbTo9#o|qDAS?xfc-xqPmHTZHe7j;UjoygtR78Ts<VNZ7Np9$fQ68szh41)mr
zNyqgHH5E2)V{m&)2mj|crgdVv)3DOl1i7i&ig5g&xKsg%8;2<Oixr)&S}8ul>^Std
zgGXAQa7KH-Vpg#Kc*CsVFn#3AnNa8}RI+Q)IE+Hp7QdXczWnj6QW~T4Ez0C!rB&Ns
zd`u;8LE<vNDYqf0sm?)phISsYHv*A?l)*?_8ufTQ<-l$0{uO4s4&R(5jD(6y`K`7e
zWePwUlOrag+<8%zMtu9-eb`JOIAEtv5|!Y?hb#`<Y*JoQ?JRQLx@~H|<@L7KpHrCD
zpavGFh4^8k5qlrgU^&B2mD1s$%zkNRxQQKu@^$6yHb&v&0#l*fF`E0YI2BWd>qf(e
zdyc<hl>Tzj6nt-JWutE0Jlu>I!8Jpel~erYhMWM&X23`+;9*0i{r1{GK1VmeLRdui
z_a^7Zkw9dj`WmiyY<SQ`JoUXqQ(c|K$okvZ?YORzMH<bFMKdFCK2Tv`a@yZNnKhCQ
z$5txqMt*x$R{5*<<uTeUpL!OH!SZPbOrPoSMq<mAtUIG1@@_slEnAU8n4<O46aT>S
zy7$MSC$o=Wt+z6JCA^2sqG#`zh|tvZPp2)eNn~cPOfO_|n^;rUkYy&9O-?MUf>vBG
zS;Pq~@n!32n9Vw+i)Tca0>#6p7iYitcApcKfrpbY%$!S<m#^^0Csc}SlYHH5OBD?N
z34I!F5wDT(=U(iY<D?SEUu0U@zGRDW#XAXx1Fa$wbGTG@uYhlKDe2C!E4TT0<5VE$
zzdC||UG`HgTn<3-F6KBvEHJ!)@fv-_6cZ+wld8FnAbLz3{uW|4y@>y)c=MR3e^c~d
zd337D_5P8Ya;St76DUDBoW@qp@HfXvan_rM1fy?XkZ{tbT;pBQ!T;T9<m2(35_cs&
z!OEwZ(Qs(Q4gTtdD*1wQNd|^z9T6kYqXlwyia~wbB4b|(eVyqNX*BAFGB|YW-DUy<
zEDo;5-id@@w{IVQI`Gk-$o5I4mQHfotkv%!wzEU5KYA!9lK9CDA4vzQ6uQd}Z!e{k
zf-xJv1^YgWr0y|DyuM|Bohl|K#-%k~`{O^7hpS)|f&(0CszC<LffnC#yGl7@P>PH4
zK<Oe0_oOIa^4j4O@#F-`d(q2}6n=-qS-uMstQkQ@G@?KBr<j|fG_BjJa*RR07h7SY
zr9iX#lIRUumU-zQJrLDDnpxxFP@wzwUaS~0JV)T(D5X~z{M@US{dk|?Q;zV$kP47>
z?MArQEq`|qW>)cwGh+1pbA!n^dI*1*#VN|mu7bKShn{YRsHm2Z_z$<3vJAysV0)&J
zmnYP`%-RC%tszoz-I9?4mMhlyo)xBH_r3Vo3dZk(oSdB7PO&^ZjpzCfE8qN%&t-`3
zByxd4DYc?B8EQ9ZuX?s^>Gq;=Oh;F^B9U?U@9_Bd)MozsQFe>a%;;I+G7$*)uv)hk
z-q8rDP<`_L3%gN6ak)hy%{z**9!&Y_EU#eYEobg;_?{Zk=Z!@H(;(!@5l!eZ?lsYe
z@1|{Hk-SkJ#b9>?zN5&&alh@FG1Z6z3kl1E0Ovo2QfAzUf-=j)#DgP^K)JCK<}qB!
ztAo<A3w+uy+Kr0yjOm^|arz@L!*9RV7pcT^JZ~vFVK0DQ9gEyaA!24Ol8-f9Kf)B!
zBn*v8ULK|nOsLgo|FU9GvB#^C{f!C4uK9c<BM>BPKBAE0b#uhBHv#{b7yrOvknoy5
z!O>aQ7jgGzb+-f@MEWs;S^>3C<{-vPDhFOpAkmUae^WwD)(nrc{aO|4i*ez5?<IKG
zsD*R}Y`;eyUOu5M!uXKS&Zb+r(mRQ~A~NMi3VqHr9A01=?Bbs2X7PZYsrbI`%3o$Q
z7)AgDk1)@F9Id)}K7o#$MmFbXnE!Q}Sn1+?v<wRSp%Dl|k9E~6KL!7jY7~84ze%fm
z{%acqIn|SzeuPp*UY0BQ>xJV4<Pkc-TzbnTFz*qadL~s?cPBBJN8fY4mwLMu|4}j!
zcuc`AXBE5NgflPm#$~f0sJK@BJA-C2tt6ilsz!bd57X5AgjIo!;9u3L$Rt*`lWJ>|
z<e-uY%qt;w4hgMdpW=*rkBz4jLEF|SF=9lsql~6vo%C{E4U@K-P4LJnMs<vtznF~D
z8GSOpM(hf_&(t7cFZ}nl!Mo!6_iNZuYv+p|`Lj~=nXs@e!Q`#l61G^i65J|5hKh=F
z<9x|~3B#TJ6jt*|_w!XpC<9Jo?8*$QP@F$!%f7rj^Vi0Y6)v^h-d>2ao(H}Z(Iql)
zUGw!kp#c*lpJB5$wx*IKkhGX;QR_7q?4UaJ6kci~t?;QG-{4|m>v&>p@~Q9n(nAOC
zbp9p!x<K1{<RGxOpGqEfv*|+-YT<BoWFkfsOC2<jOw3E>U(JJ5Q)Kk(=92P^R8N^R
zD~t(@bN$sSTa~8r%bMPlGCGjzp`hy1+XLEGAr~OKeH^{Imew-K#v&*k%_e5q)vbIm
zk}!Rbb>sH|OTGD7XcQ5#gg<(T;>J6v(CC4j=sn=~)sy$saMBsj_Sc0-!2gZ-Q+@1V
zM&weF8gaiY>EtEUIA6~8a@F0cTN1m6|9-0Da&7B{WUGC@@~ziDXT0GHnEvH(Swixt
z!U7)CbOa|%%%yJJ;84U?#NIovp644O&x=eYSz?3r&bRjxkFM^vs5lKT1ZNwwYg9C*
z;MRI}aBz4W3T0N<%@)i+heV$0FWt+-f7^aNQUOs24;ZH^DMNsk9*(@+um_CkBek}y
z^C6mGcZmh@mS&0O(3e)Io)I{F7ts&oA)K08C{J1Qc&D7RL~*L?M78J?$IDWB9^~C{
zV}{k)u9yIXEO%`xXpZSFAFJH^Zk$vXFkmH_D^|9fwa_Rjkwv(jSi50p9p@#xRF9<q
zVVc8f|6Us<Fy8;3HV*782h}7jN$eU*6|p{~<y>_CEb#Dls_P6UMI%h*QTxHKJ_hyj
zh9vPbid#^^0Y(Hfn?QvWb(?9bk^(p9Zs>A<#D~l1`6fG37k<m{HO7Q@2pidS`?%bn
zwi!@zAF{<K7#@K-0;X<1ra!Y2L?%#W_b%tX!H%#oj9(bzNR8L`*E{_U1<3w#tuY7?
zT7G@gV16DH3B99{^4-U*4_TR^)rycf>Q`~K*7D#SJVLCggXkK$o@P}mT=}bCdD}$U
zIZNzU?R?prM3MP>4$N?6Ham)#+|S(qrQ1m<B%C4G+reZ@+FGAR*9vbib6+?3?rUtn
z*061$qmXgp?J=B3tC$QCqQ<vNhdWKc9+%dx4r+ag6Y1B=qB<G;Bz_@F@6yL0qcglm
zG=b#ybUu;%^V3ryFoO5y#@UB&rp05HJ0TjLFY&VIA0t2xCZ{7i|1s^ZUY=E6LR-4g
z3uVtkH~(BG>#vw7)Yp*OccF}Hx$WMSQUv8ojit^o(|%SEfxB6iAgH*g-e{pnUKba0
z_d-`()UAt-7H)Cu4}(gdZXQ=(9lecd)7I?zoG=TKPoiD~U8lh)+wItwx_b&%i(E4b
zCFU`?6`j?3vGXKJ$8et)-`V+BkZxo(F{Kz=4}%qW!DNPXYQV1iC`XukZ!c%xfxsA6
z4R2Y!9>u<@l~N$q!>(Vd|EXCEb{<O4b9weqp!fLPLUjkY9e(-n;n)Rko<Jq;qfS$c
zRb#f5C-Ny5;~q_{#9f?Q{pc-G?Bgy7e7Dd@zsH&7wXr&T_Y3Lr;i93AH%h;&WC<^#
zlKgb$Xy8lG{tK_$?(Et+`y1s#ep+U3_}j}{h4EEf!7*VnS7X3?=G5oRufq#U#Auqg
z5hu`X*feTfChWE+THeM9in3K33!mXt3Ri2VDFqO?APyN|*1E_HW8yDU?;zZQL$5cc
zNlqum875H@0#5|1-+jYG$yO`j0L6Z`rsnm{EaW6RzbwG=;H$@>Y_Zo}DDRdu5U4U>
zsORHscv*V!x^aT14jCOM6vHi7RPbq`G(2ksUC^AeUc#J$vpfMcpROK0@_5@AD{myX
zK9gi|%8RYzyxYPB;bSh9T>p!`_9}rfVL&O-0d4__b2Ie32<lzVzPk*W22ePN!V{(s
z3ZS?5C|3#aErc@mL~r)H9E8Yyq9_731F3~Su=}wS>loK;_}`2AKImI~{Q5oyAJ_O(
zX0cK>_uJg3fnhE;uqoW=p0gv%|Gwz=DXN8PZVc`Ms((8Aa!_k;ogVpEe=hchRC!k%
zKr2mLb+3Yl01JdSiZW@Ao$ofEEX1seU4JFz(s1#jr?a|nryaV$$L^xBA^Lr>sWpb1
zK~kqZN%Xc$k@O_5g2I5X$AI3a5?<3bH}kuCc%(KrC10y9tDRYu%r7{BeSEtsdUkC@
z9W-9Anp(-7gqZZzlXWfDQzYT4c#r+Yzna$=)@1>6)$@pI4&1DRwL2G`7L?vZ!I2A}
zZ6rC_AcSK(7^UIiNYNcG(qqf^&o$~=C9c4a^d_x)!Xw9{?+sBHjJN$7e>b5p<#JT!
zs&;tgJX`3nsnf0;g4LC_!`x>v#64=ZjdIN1*SmWgHdKeTY>rL1jh!64#@Pr_Y2(}l
z6`1?zJGI@`{Do<Sb>4cuo_q9=A9WpxGK&huz1CBn=6!C$<0mrx7~}r!k{pFyv`NVV
zS@Wf@Iq27TffPh_*p@uo;!d!b;R8PtNhxG#N(r?4ick<ks}_lZS{Z>csYF$!|JbvM
z@EAP%@G`CsnAI}$Yw~``AFf;8L@}!M!ybp=aS?I(hSPl>%RX&XNYr_M5@`FC^(;)?
zi0BJ#RGPRopRxI*W#7odiH$#;k89_2oH5FB+`TflJ>H=WwXoWPq_phZFB_1LH9K+{
zxPxsj2m0^n%xZrl9RFyjfgoRT`MbR8vFa^RNp8A&Q?HslR<Qe)t6VtAPK^{uRv4vh
z{CGHZ7TsFZp!#gzv8Sl#4muzba{dU9aC9-vg%>qpt&n)Qfy^h*B}jts`{Q{Qdd=|w
zU&ak@4_$;mlV{uQFU#>Oykf#%8^Vg@AS%_Z3=V(>1mVY>qjil_m^$%TmbmL=lSurK
zU>Bnuc&BU3OXaYU(d9QUOKz@G6BoOLhJccqra^<S_pW2P^U&Z{rjQR9EM9!i3>tHd
zXKqo{{Sn^=pXuE#kLs4lLdDp5x;6RDPyPyrsP`m~_Rb5OM8c<UFzSEm`v1=K8eeaC
zCzThs#Oh(fWhA-fu5dX2D1`P?=!)2<<^Y&d10%vN?)B{sDU_YNzj$<`7#%-EG8Ob*
zmqfGul(u&KYmnzfJk_5N0;|<LDF)#z1k{|}jgpgZDw#UBk-G&?yOTX*O|cb7_w33Y
z*NsJ5{^X*<17LUw{jQR-r_ZzTJjvbf=pm~tdev%bbnW5=20k_$?+A-sVN?5M-f!4e
zSCC}<weVX9I^Uh=PAILR1-oD_(O+BrmOR7}U!wj*><_^*l`G$WkxK9M&IU-TB>J{o
zLT*l~Zu)qT$xG)D{}3oW6=s$g)rD~fX$<X;3vVQOy=I*(@-6EH9pwQ23#0I7E&0AB
zA+HvOx+8D=Jx5fBr-WnKOvf{^MI{)6!3368h44<_Bz@}&F1obve-6Ifc_$vT1%+aJ
zg6kix(n+NUP`02MZ)ShW{if7&qZPk`@~DJP`<?wBlZ#n9&xs|qe-#n;g9?q()iRRo
zFW_MfJIPK+6NICBJ+&POde&OO-DZp)(GF?$DZ}1(l?EWHFWwvlU*IT}XFJap(S|RH
z^t>q+f73JC3Lbfef0g#1KO3>xi$L|4Qkv)d<Ee{YU=+y}$54b?{1^YIQ#ld7-LMVe
zsr=7)@>y7J*D0f_bT;Wc`SxNOM-^m@FTNYsl`|8wGZl#R$r1<a)|#?B>6!UDTcuAt
zbh>)x>3CJP>qXsKO_d5;lePt?tyR^N;PMKA<kA?wA-7Z^vXha-Z}K?*zqKNKc8DQ2
zgPA>5nXI|Z4FK<u%uIZ2#_&;*{18LLK6U0MC-5rxuRXy;v#{H?d5~YgLiIuG61LCb
zZ;#@_Zj{tKzisAFQEum6`aN&x)!+xVzfpo)92}+H7!M%BGZ5~0d`Exdl;x@Vd<va?
z)J2DB3$z^pylKTx1h3aW)FRP)H1?6v-144MVSwHq=yMMs28k~s>Ec2UVcJv0f>||&
zO}*_&%7mFn+o0PpYyu)gy3fvYpyK|C(f{pw#~@>Ur)_cXx<T9aSnQr2;Wl?$Bl>9;
z7IPEO`7w#|Owvoo*k(mCGcYB&4^r}zN27)-&TAz`>-oGR)_>!~pfpAV%DC=+L-z8N
zD)GhVnJS8chay(ujul??Mlj(G=M|b5<v;AjiXg**R5Iw*9xON_k-mHsK6;t`IP@fP
zVJl#y*Q1=7d{5QhhbaBM5wAk%X_5m#d>Z{zE+8hqpVJ-A1-p;*eO28Sa5>y90--Rh
z-K>$q0_PQd(Z=98B%CkMX~5uY7<pW$xZAEa2H8ps<?D5<4vEV|{d6N*n%nj*G8#AK
z{e(|vyuaS@CKX&^ZxB<UKNlxa62Bq)APy59I&Ic<-)ubLs}&Zrc}B#Z>SqwYBYrt^
zxHnpwNdFv+ip0ld&3PFU6o8o-(8D@8J$O@|8)q3acb@rNjQqPr|8yRT05rsd7+G3K
z9ysV-`$q58X1(#<b2V}lv8HxMQuZ>733_OMuKp@ob$#n3WOl4(wYSGiJPs}wUM4NG
zws8>cUA8(|O2I8X@FNv@sUY*|3IRgpi>;QR?S5*9aq`LiH_J{#5L2=N{$YvA7`3t!
z{E}&NyIN}(Rv*0>_!RlzpBQvAU9pG%?_fJg!5!cD{kq&V3jZaxYVe*dYXxZbZmDK1
z{69><!mst|L9v{*L0IV<0SErlxZ%X?>36Dq{D>n3h}&HoW8bnPQBOoYbg}oZKNP8S
zZ~hul&gTzoQxu6W8&oef7Qd>BPLHZ-)cd}VXfa&z*Q5D~j<WfXFq<cLmRr3uxlbgo
zPi&&5tuugRz3a?%gYp%I2z_iI^o#kX+5MUELzj^Vp$cMGLe+cEe!DOKY4nr)rlIZs
zF}lLL#rWyUk5A6Hg5v^_fMu0A*mSbLs49V*xJr5|2@!ErM1*iq5tY}#2&FTb_M^!4
z+(Xp1hRkmj1;tW4Ym{Y<Y-I(d^g!7tq5w4|5zJce1FNT6K--tsQ--a<2Q;-Aej~<n
zuWcrH$Z4#TPZT2#%FvGgi_`F~51g%~@O2b7pU%OYq>nTLj`jHX#VaO}MvP&;H#V-0
zolOw*pR;{|jU)eetttOY@3FyfTd8F;W*Tty4s>{dLS9D+AroMabA#JtoL(mZ!{f1H
zMKf4ZnrUWLF~a)@7^E5Wbo5cAK@wYD691BvzV3M_l~BLm2cOvYUqvutOL=yhE_LhR
zu|JPqG>jyonGCDHrw&CT=J6GP2P+`K3En?tKcyOOkWr>HB5pSCu%aw)`-`_8+5I6m
zhDLgY8|FPYaP|aKiao1afYa}zBh2N~(a<HsG)xmnDKBsj-*OdUVhOWJfuSaKa%E~I
zkZ1F1>=0U5ciKxNi8Bsi*OD=X$)xuevKltrteyPVT$N)-H@}pmOUL3j<kvsXJKjU9
zeArr+(8B7scvt-ew8AF8X1%F7R?8v<5@aEz)i7&HkU8yX7l&8<?eM`hiZSet3bN(>
zTK+t)*=x4LT{`7}>Av4dkAvzRgY@5Sr^~<S96=p@@tL4zg1*OqQJw1Q+7yvL4X8L5
z!5-oZdfj^dkdGIuA0B}Ov8#@EHs^H8OSzT!@vQM2qBHrs(qD)>IfV408Rz*X*QzL!
zu6+~|-w9n0u3=xeH9x6NEuY^YKRJp8K#yRQ@I8$N4?+Voj!$No%ZhDd8h?^L|CI9z
z@%qyJeG}DnMGg$^RIX*0C?cRF%khMlZq1MAHbKlQnKJ5$Z!VMs{x%ArOmDU|GuuR&
zc8!%{onvJMl!v#u;M0XzKGr9cCxzDW40zIfA__EvEDN4B&fnS?JX^b+Ou9H8k++yj
zk7P7uHiY9Oy8Ov03}i0}4}SaZ!?vOLjZT*5+*cwY<Bz08rdg<9)y7egz<S(9P($9B
zoA9Xbq{gz*?MVCs6uY*!GmN5-kYryL&e~{q`wD4RYv;rxk{xy3zY=kK@*4Q>;=X+|
z5J&4mvOglO#=y5KKw`FHG9mZ!kSefqN&KAho-P!LD|nU-;MJQz{)LG9U;z&vj+3LC
z{3W@Jb*pvGI|3E7{;<;qmpkis1}BNe3&b#Xem-r7r*`wwerA7$+p-?DQQ&H4xYRw8
zxU;E$XC0n)SG>OfXfjen^?W$|7245|LEb=$nvr^@)D=rhohByUeT^Q%ky}uI#EDNa
zRJl2Da@=pq@;C;L-J*(`Z@fnS3Cb+H${a6mS9Pcvx*nVg0KRBAd`ap0lARDR{=+>7
zpp>lJqHlILV8>x2zrlYESGQSQ{uF_uvsugAD~2?6B!-16oiQ{<w-T@Pi(v~ZUyFC-
zqL-7ZCU2GLY?%Gh^-I8n&$2Vf^?-#6t$%!t77);&po4A()QE<u8$i1zppQ-MemF<9
zz|;!g&Te44Zt_?7ap@`erbyDiu?0IyG(V<lW^E2us&|Vp7`3l;BgA`&ZgT)!8+Ja(
z-Fft4iIjP;yx7k_S@#$tzf_M!FHr9lMf^qQmUJ_E&Ch~w5O-vJDctMV^^s=LjJ#L9
z8c5f{-<B&;%!E#NPaw-NOPh*fU^vBLIHQdIIs&7_p|Z!h+WNF5`I{JtGHEqLE`&6Z
zQL7xCn9EGc{W{=3&OHP*dD}D{tAXBw#Wuxe#3*8uh1t&j^-trYZ(%_-XJt0;(&^)V
zcF=p7xFddwSCtc7Vfq!~G%K|7cDglx-_0VmX*ytK$&+*x!Ez>+i0gB<`;*mE@ScT0
zcqnDX;|;~Yij!KMC&+pN;OVsYq#Q*|VE@s7U*0fKE9=@h>!ze7uc6_c?6i1>&BPrc
zB}%h_rGqQ`1dGJ5TWO#>1&>d2_f?5R`JSTSe@EFK6v7kc3J|be%jR!2MSmTttsXz9
zM18rWYnIEQ%{!!#cDGE&as3<4GCv%wbS_LY&SyZ{K_!K^D=}7Pn}^A@($@ZY%d+%@
zk0)-<k82F9^-@t1c+i7cO{Q7Bzx&ywAUvYFc$Ny8HVkvnVDDafdDSiL{+0%Vj1#9n
z3=6W%M(nokG;F+6@Fg#gRZ4F3TKkP8pJE1jR=osgSKpO*=N}yESqIBEFK`>51A|2Q
zX{^|b-&g*<oRu^Rc2SCl++~EYs6Ehc>~khr*@iuQ_?GW#;Wbt44mYq;fW*tZQ@ZG6
zw~NmBzT)V}^s>{N6d}T~so}eUCzg|=2R)q*PhySXtF+(KgU5TWdZDdd<v_K^@hJ_V
zSJk8OAtU{^J#Qc3l09fSNr&0gA9Fu-*`9J|HSVQkp>B$!|NgH>nQeqJpH@I9kG_uT
zS%@xu`G#E%tTc_Czqt@guB=diqpUYnQ3%A_FI^cq*2xUab<r<?^IsRV1-k?P)fbE$
zXLo44Zc;%yujkBrkf<Ye<la<#tzTk-sdkKUFdd9H+*CzojNqG|Or3Dfd@OX2XN=jM
z?QT~_A#wV_Qh67NVqM5z=d~P(M)>)U+h06-2&>a8@k5GVhbQ0^{7+_^F$!lnidM(%
zFBZHhDzN!kTAxNFQFi7vh!Gt;?=L1mMMeCA-OeXX+FYnJ>{UR`R(Kuy0pnL^M}yP!
z)bZz19uZ@2wEzQkBm8b2QLbH)p<BJovrhyhb>kLm2Wfnmo7e&Q>F|7WkD(KiV}bHY
z0CW#IpiXFwazB1Jg+6tVTM+_RMZ4h+gdXUPJV-E?%LKX7fNRvR1NXa(aEgR=gb??*
z_#}Khx#c7M=wuuoXH(OSY|(XfS7Xp1y|g1s5y6n_iC-)HN<hTVx{lOkGb!wQwZ$&2
z`>dShysJ_?5E>Bi=CPm6!{h-Dm-~&a%(<eRix9g&eX(=2Z&|T~9KEfCe|)g<lqwkq
zKu|<)UaU{~yr%cX>5v*erbHlcJqHbp8xyDb!};<?rEu!c@GvtO3!rGqCuOV#fe{rv
zUU6q6U~&D#i}eVOchrH$Ti$e`%Pma)`fJxiPt(GfdvYw_oq?<uPF%+FFes53_PJ}c
zxSE-|SnE(sScUU0_ZS6GZMfXKVoc7@A@rfITLZ<6$AV@whnZ)QJ||~<p$b#OZ}!wz
zC*93;BKDYVN%J`mUBjD&bZc@-<2XO&JD&^Eo%wU+KIh->&#`Ch;)(}sq`Kv|W_QWt
z|0>JK*VOT!RB%Jh^t=GA(D-URbAygVam^yJOSO^Bvljfs)P`e7eny9-=u6V7Mh0pr
zwF0kzspyl}wkf45<(2-v1Nwr%RH^GQZi4-2dgd?P_5()ZR!5wrFCbB}MYHU^?z18h
zmWXSMK-9Qh`BSgLcTkTX)~xrkCzgCP3_LfJrSxV8y5w<^jZr$vipl`^YAOq#U%@fn
z{GDlezB99}*AeRM%9{szqeejy_0a|+z5S-*tATud58Z_D72duxH{JJsr*jWjnqw?<
zsgcMPTKLIC7`Ca34ShTKnTC5nW)e}OBR}E{Y|}wx`5E>l!y+l4zh<TX#T{rB8B}9L
zIQ@wj-ht;T_2<G|3w1x(K>OwEyyOK+6fo`wIA^KM9pb`BrAGkp6*)UoB1h&&lgI}_
z!pLuBD)Df+YbF=iMX=+cuGB?S=~dQAvAKFzYFRU7TR8vGlN`7hKJ>uRnWLRwh>&H#
z!|O#ds5jeW5!{sK@=94}drUJS`VjuvM^FKO#PHk;bv(7Uf8nc-(ZFT?sOuRbve6-Q
z-tq3jzCWRu#c9T0jX5HD6c5si8+IBio1-1bQrkr=B@$}1y6+qq!Vzf(LE#c6;;UkO
zcZSDpHfH*=9i|13^AZzu@c+O?YYI<IM4HSEP4k?`2*DN@i38yUP@g?s>^0bcuw`E?
zN?D*HJl=KIam>9Z5QjJlhJ(z^+-CUxB?4J+K)QsdS_YA8&FK#ZQPUJ58ShG4Xs^<d
zx2htDw7UEW+-;|)VF+pi3O_Uf_o`<lS!G$4cW)+5kGz^wO$uX9bu;PtVpN;8HQia3
zJ;_DwY++`{yTZ*)n}g8G`N-GOaWGpr{6*ACZeUpjWYH50;vLzTi7r`r@QAFCJa1{5
zXu|VZ#NWIzRqk-HmaSX~_Wyz1#P$l<`7Kx%b239sIgaPALelLzxIdP?IU%VCH5!vO
z0C{?`rfRk|hM%~Ko5{RK%H6ccEdBg55^-=1?-pgdapZ2y6eTt(;#r~GXxe&m3`l<F
zxAwXO>v29q{vMHxdB4LwD{SRY&biF=qoJwAncS1^+QT-eFHdUFvJ_L|vI@vlO~_Ez
zzg+mxZV}}cHCDj=&7m1T0(mar@aQLt)H<>|8K<UBu`uuUueSM&cFAF{)_QQB1MhO;
ze6-90md}<{N)J4t6@F{_emd)d?FgRIF_<62GgJcS4gDGEQ*lt}(Rcm@y}JR@g4i}l
z@EE?2(MVxsIN_L2WtE3vQ%-f{dtxxuvS;eGDo)7!h26h194Hlkbb2|p=;=M#d>FD#
z^hn$dqI{rYe?D9eqRaP}IErmORuae*Q@$Kf8^7wmcp<DX;#Yv3Y*F?bsL}79S>%St
z#6ad6l{oyd4BKz5$+%8FW!+_fii6RHt34+Bn*^o?2kQ46SHFgt9R8QcGT+nc^^U^u
z31i8AJv^vH;m=GTdGfKtKl$*np|Z|$wjc^g=zIkf-DC3qB<WXTreRs@9D&S|+Rd4|
zi>Vim@plq->3`#K$w|UuY{+6&B|%PpFS0G5wE#2j;p-BLqRJWpkr)*LeI0{@Qi8@G
zN)88ScD#wj3KDMDi(Va#6HN2EPvs)^sz-ax4zd1g8TISdk870^<`6@H+!eru)W70T
zH<byp<>Tc;3b#=)QIZQ(inwiQGx$|(s%Nxw|H}YC{6Dn6Y{vpj#7&gnzdnZ)z%h$Q
zw6A1}<(hr_Xcq$G@SB95=r4WUD!rE1usVslx2yN^BCoIIqvdqnx8-=qRGA@Uz(UZs
z3}Vk2A6NhRbrrp!^TnuCMf2l4i%l_G;dib(t3fk*!xncI%R41l&yObe!Wfk7S5-0`
z$2sotPx&gMJ->;nA4E?&^WyC)zI&XU|Ji<r>|WKV-2LGD(U*FC30pK5pPH1Ah+^AE
zn4XF^5Q_y1mFoS3I|i+2Zzy0Uy&hVoAYRvY>KoYla6-5jCeiwa68bkp8PT~E8Wmay
zO{0a_fcFK0NB(??yfWIGfB7GxzJe`|XxTP+Ah-kz?k+(G4-g!JyL)g5?(PsAg1fuB
z2X}WJ++7CdP0qdNzOVm5ckilQtCmz=oP2W)#Ipp&jwH~KX)l&RiT=jRE4bDjda17q
z*}`viTFP|YscOGq_l!#|tb=yk@9N%&R^T4S=qpUojoBDdn3f>%ZUDTFJ6&~-vGiBq
zzov|Wr}rWqj$?geE%#`4u0$XD#$qxRS2o)(+_BX`C$T(des2zw`1g{(f#q#iVCGlT
z{DjpS{lHY7y*mn4m)H|;e!x;yzs;jiP}2kw!sXY-#NWHD-iGg0?Y8nhdAYOyR9W??
zS>gZTX^8lWj6%&Nup^)F+n-{RlfN^T=W{Dk!K5S^#I(1!%MdZ~>v~mHWF;bZT(l4~
z^9iXRd?=Atrxra)J&avbQB|kc)p3>1N_5Km>D7?8W_F+dP2G7lX;!BG?%FxNa=dAD
zH7y=8K5Mq0@Hmy-eQ7R~E&{w9xN9d>%N`{1PgqYg#!^B$=>I&i`;B#M%d*URdb+Jj
zk}DowOwL_p9U7ZuE(@jQ@;(rrr>iimWFTl71_4be?fhWU!FXsAA*H{~Elod>@0!Bb
zcc1j(SnD24rB5FEc>DJm%RP{b785adY8j|7FXB;46ZnuYrzh@XR*YNT(u13RibTMc
zhRJ(EQ2@Gu6LOj?!9Fc2Y;`2*ijhLY>HbBsFsBa!b3qTF^!4?~&<j7$O0H<pghMC2
z=-EF|yipLadVY{5IA0UntrO|ts~t_<z4?^4&t5)y=fi$w0~g=6e@>kx`ph07Wt09}
zc=#Y`Npu$y)Bu|eDpn|~-7DH1Na^NU!!3ZAj7DLzib<9qS)-GgjnLQoH~01hN3sur
zZdA)19#+ivDx4-qhY*bMER7;enF+@aX0^9KYWMo!YrB=3AMn-Q{k$!^#X=*q<Jm$a
z;O9Y>-Bo>ERk~A8!3Xg#UfYH%wPc)s;!uR%?z0^(J7^qw?kpRn&;#{B4{Gc8j}oj9
zlRKWLoKiVNYAh6p8VPfq8%+1BdX8sz+M5-^I9<KR;B|f_ay8pe^bb!?<8-1n<GkaX
zy`W%sju4Cd=t7jp%Wwj~{*#0wG@J}nNZJ_BotDjF$1f+I9?QU@(>&!7Da(MX)hXo=
zaJW&?WpU~$Aihz)QC&!xg%ZkcOO9`pwsXFVlU^E^Qg&r*oaMf5WH(nYBXN5!t@ArD
zZnE~`lEG?b`c8DHqU$MLXt%h?V^`K;2B5bp{<mYt`Ja)Xx%w^TxS}E|u_L7AXXAxR
zr|PXF(Ms7U#536&mmk{XYMKm1d2xRj{`MpURq`~R;mJNS=I%@@9z<IFsP+Or!^g>p
z9Y)b}1$B-ePu*g+!00^#^L0Amva1|@w2J$o759KFO)R6h313THTH6$_YTKv$yu#2E
zH}v1YVtyJ_CYqnTq21^-DAEEn2nbA8aCCu*u|gOqtn`7y2+WB{X?^y7Yc8<){&bjw
z{wZe_l3l{6OUGS0v&_E`6){hEpR$sGe8b>V6b5b)K6~ir=YqY62k~dbh_S7w*UiVS
zSdzDGnx`wc?7x4U-5ty{D<D##tzXYY09I7@`nczb=1qSVZ=ekGw*k2@L8XwW5j~eb
zxydF7k+>{>!H@oEyAdQl%{xckFs@s#ADCa3K4sE(Z&^%5o-V;DlCwe5c7|&ASDbl{
zfz@NHtJZWC(dl{vOUz(SE<0H2sI^WtF@#>mR?frZZsV7yaJ*$f);X)M0haE8l5JM+
z#u{z*IC>h5WRa6A5T}Z>_N6QfoRHK}a&h9+(5k<+WZ%bm1>GRtrNeQ?5P}#2_b{fW
zyiCp4+%y0BQ7H7oLgOs%q^63qGX9A#Os0;5HsOj7HN?d$1aB$}`f6w?rAZ#6C(=op
zAprSo6#?fAMxBr{4u`h7I{|UkZf+}M2$j^aY_yC*LiJey-`DxZcB17p{Or0`<ZHT}
zDe*Dg!26tO<QsQ2WE0<YW(0nld*AbTer&l&%y9l;>RH+VN+tJxYNSuM#3^-Pfmj_;
ze}Q5zpjeYhHVatBn0T{ij&{88J)|w}ASReJPr?239qrAx3Nu?TILi(vdB?kfS@9{P
zEh6J=MN_%Xn8T=nx7ecvp@B>$6^#&}6HOyUdhG%2F7q)Ax)k$ybtk!g*XL|qVq*f-
zRiR*`z5eKP2v#p&w26AvTqEHcd<`LL|LZttDs-au(BL3^>c&gQ#aaqVBvT?9|6n}S
zm1ji-Q^Kl|=Jlsu&(s<_AuVcj0f#b|zSS$POJ}2Yhvu&Ll=`_f+UX{6LDxcNoOYH|
zl-}zED;qi%o{f~eAc;1J9bzvDejOgVV!_o*Wr_~AU>pe1pl-+TeeZZa5fTK8pK(D9
zL&~D?c*&;|EXT&=`9J?NppUNuEv0lvFjRqf^*r_&?2mSa7PXM9R1ZJ3oDDfm&j|9o
z`pnjTy^a?x%15<r_Z0MbeqCep8DEZqEtO#vXs}0o=em@t(0PF7vRjP@ex0GG*3YD>
zJL$WN4qs=Z93gUDPs5-L!FC_ho{TGOfb}MDCi$g|=6elen}n5@7Dz6rujV4{!<_ze
zcRd2Q^4a1cM~B9jh^X<8P?uiwrH7V+!Ve(r`MJj*-UtuEiM#cPgi1ym)jwIon$A@V
z4V8;42_4RVyZj+#15!Agc*`dn|1>QCJmVoslBHT-0P}0ssCw~P9s8b7<UMAJs!Oa+
z@jJj7!UyOIc0)rCL^9|2X6JsP4FnD<5|1~Q5cT(LxPvfSL*KiXX$W|mbXQcWZZ+3@
zDaZr(E&^T3ET({oI<+i-X*rK6GqE~z1S){oHaj&Syoy39%&&3E<;OZ**xH9XV{rEx
zj2P8J;r68SxkhFM_IE8{1_q)+QjPy%wBH|Ll8%{P;YH0}$*pWLbNtB9mBz*NlL(m~
zT2L9;1c$zfCj`z#em5lTiB786?m2k!i@A{RSWP>-cCA*`;F?u0ZLv0-p~p_xfnfT2
zWCTG5<meA8Rtjf)-U`2dA&V&(d^xxCUGluzO3^zZ7g2&wqx`9(9qDcLZJ{ALi|zdM
z>_o-Rb8PME+|Fl$DQVD<Tq#Sl3kkA^=ZwjC`zf2=C8X#2f+0u2D0qE5W%ztDfig=;
z19u|k)Y8P_O|0JyT8e>XE2+O6ZHp$XH?2Jo>cA_{)=t47gBJ@)^<jfmRd_8xrvAA<
z3vrFpW-h1y^PO~ghSsTo!?TB}UG2MH3AKrIz2np4lb4Q!?h&lN5-><wAaSnv`KulB
zUz?J$c6zx{DaHGdF~)@Mimp0@CzTavB1RA&3yVBqbECYws$=2gEkMcr=?2f#gWjoc
z{y5U??el3)T3{igO&PO~U=sI2Q=Q8aK8*7|@DP&x3=z8eCasr3YL0B?KeA}-8u<gs
zw=)vB6(#i7>P3aG9QEKtSyLy`q%5~Cz+P#Yob#(9WYQA25)dY!l<ZxSk$20~=%uc=
zIknrD7yEVv-!08ES+6khO|V7|<hyFu6#d&o<TG4cGet_k&w|fC0F@&W(H+vPLzVYy
zKQlcn^(2r;SDa=N2K;P(Qa6YgPFb>Q#+_jO?&inkKT%_dLDgS%ZHtmj=u54+IniAJ
z3vFi$dCnX{7kAx6u;CNJj5j4Lij1vIB&MLzCj}z_r8>zs%&B4PF<mzov1s!&B&gNQ
zel-cI+v#Pi=j<kx*AR1ObkyEJ_0L+^p^aKn<1zl~9Yx2hRI<&>X<B2;LL;8#AVePj
zjg7*!hL_~b-YD$e@A5axwdm%CK%mM05z0z}b-Hx3A5{psILiZx`S~TKw#bR<LCAob
z%XT%RP_yv`j{kkW{^_(c*7$lhX{9v|g~rSC^~3zXo6hy?>ARoP)(tf%d+N=ziRR<F
z@DBVD%|}!2>s(5}U`?MZ?fu?%Oz%l!wP)q~kS{2Rfb%Ei!<OBa@Mo-@tLgsO-B0=;
z==Z}}JA?fa2aT?uSVao>k%ppt(rc`SeHvZ|U$cb|PjDb?X{6+8o!Fslug`PEF*ee|
zQC|d+5ze`BxHsQjA$gBcP&P1Epa|ym+aBe#D`jbN0DM!k@$N<b^-;&`)f|Iwl&Q?;
zoiy{$#=ub=x0B;RjTRG}3wL`%>Y>pEt6Fy%*Ts;wH>D7Pq3Hg3c&Ym#p^d1ej+0-I
zD+mrKw|o)?&v*OK9pd6bd{w?5HsvscP~DDG@a2p1Y4M)fWKiAZ1aVhul&R!MmWLn9
z99pJ=fLltEK9!8>TKNktr^{~(g_DHha>t_iBsoq8HN1hC@V-Eq1ooCH_xHM+J&-DD
z0_2vi@KvDrgi^wu(YUOmOt7pjPK9txP}xbko^5ijao4__KDJp3GTHrmgpwrAx<MW%
zT50k}I`y^6RQe0vdKKJ0m1ixQ+3G+WHM4)Tv?J~RTa=!|sJ!-gt+-zFm<#r;ca2;k
z4SLo7SY#>f{FM00!I_$^!RPD9#aps&Sza>%@@);}C<m-brWcOX1C0R0)GRb(#)Ku$
zgVRf+UcIvV`^6Jp9R+-zS@op9<m!1dRC2;<pym*(133uqafHn8#m5YI<NX<gOT&%~
z1np?#d~d*LPlumaUWA$;aZDEV$vVJ9g;V=9+RCRM^$1!R?iQ%c`MlY+Ghsi%IH*qr
z75>*yg?+t8pWsh_PHM&N-hvMDqY?M}Vm?&!PB`zZ_4qtNcAb?EsywOKdjcJ^Z$ce9
zg&iTFpni$ygG%GF4~<MqDX4&Db=>Sn+}3fG%P<TIWL|&MvCmw?{xbISiW0^$u1B)m
zGA0=KMllGk$kuIQi`_bRygHz0yPeT&{oolCrQO!UEcN=>w91Wb=NtMhG!9fhgBvAA
zfv;{ZxMA>QGr4*Ws|;6};AiH~<NAJkv9~h3X_ARF*;-)<dM@!kz;bzY@Y@796jx6J
z;$whdu1IQX5<&)t43DDnbgJ9Tv3xgyC+MhC6baehT9m<%i&VYNW#ZMYN%Cpth|pFJ
zlk>}V?nys<PIH)svamb-d+GCN)zMOmg>c4)0fS&YV2lPPLYwIR<oiB{^0X(%y))VR
zxV_klw*8Kf-B(sMfugh@EIa9Z%59duzC`t%x%13XXK{MN*K231?hPUf>k26gwS33d
zXOYSNruio^flAe9CEY`{#G~dASg@)MERhx%P8N_Y{?#{D?kHC9qj;l~UqEDmXS+@v
zxIu7N5T#}!eZSWvRu3>*Ngr97tNmT)DyXNtCz#AYWuCP0*HZaVi-~680pRpQM_skE
zgZZBZ45AW;G;kd~-)3;zTM}RkiLLLIhM7jtw((3wS9Qx%3F0t%#Ap9+TC}j6LPWm+
z*V7Cm9DZ3(ob=MjPM5Qk&1yIJO2eF?z`+tyC8F#xSy)pyBl9k_jFr`3FQ`+-^0P@z
zjcXuE>a$^d*m}+R17)NtzEhpm>uy^S?n3=Do9i7z%^QGSGXv9Y@2z$LWub6G=0@5*
zyHTkklX3a)8>0p0%*g)zg3udy1yh4kgUy;o-QJ~ulXIS;J!LqJi_i)CE#hG5(|33Y
z4$?0<dJ0`+Y3L3gW!PXy7`l*PRjnpe;F{Q?<OUY=tdt{Ew&8WFLUu21K6<P+e?3tt
zG8GP%(QIwQSx5k5v3ROlf3matxxqVDV3vNDXbr1;6#5q&i3{`$jKbrDqUi!Tqe#3&
z()KTJNSJt9CZ1b4tP#2H5?y+*0QlNj>qP2OwJtir#5p|79rP<2pQxccrzT#s^IOt>
zk69(Rz1(wl_pMC|Ak>>p{L4-Z?0i@wDbDuMD!Qzy;(Xet5e$!JaoKh@??61vU~5kt
zXT9-#$_I!2lL70zWJ1s~hN`~w$v4vPF{_;q@ft#JD=hXq-98w_oi7s*t6R}PD`$w+
z@w4wDY5aer<zmqZ(Kc?j4>xYM&!dd%4p-Z`co6dW_vlTcy}#!x(_qOc!gPrY<Wb3#
z9f%*VK$g!7BBR%f6zDpZn{!k^BDo9mPP5_Wis+Cc5qK)4sY0B|;wj1{$jneb?r!}4
z<VYjgP#Uvdi>#C4@Q24vRlu}v0GMXHno}>E1*lt+Qm3&iKUOXw2%Wf-dM<~|vWaqu
z3oGLo*pH%VqHM{*FG(@wRh;F`w&0>w#iB?++s?TaHB4dTt;)SBy_^p7idz}Uc%#Np
z$C=rGIZ?%XD%ubRz|_04H};xx*;$=nX*`vw6F-ZP{K#6uHTEGyq2!G<Lrj|V-aY-8
z+`U}+OiVi2nc7Mo`L1zs7{m~}Fod)c^4|SH6N0!JQo<VfmZc2wt*DkN;C5v0=SDx|
z+waR~F<;HKozfXXciU}lo^j992XKnKs?91HwAF;9SbDlTfPdaefV-)LK{<Q*pJWXI
zW$gAhhfGW^8eAHyb#fBR+lYx893My>U(5p-+84De3@nB|lnn?YMbZ3_ceu@f#;iN`
z+IGf;N1Kxq{)Qbf?o4v0Q)VVc*lf`}Nz`%HOZnrAR{@~trNdK`AZW{G>$jJ*@1^IK
za`y`myt`2C%?FQG83SLky1gc*m-@y{Y|V4*yF^OX1xjMs8?T?*4_s*!Cd;t?<S20%
zAn0PlY5L0?*;?H^rETYhkk$2KopBVH=i5m;W%k;4^zttmHv8Qx1pv{(J4_NPFmGV(
zi{g6mQy`4L;}yx7Dc?V%vGhry#9M56KlI^Ods)s|po<!LwJ1(DKoWm$(!3>kPJYuB
z>4_eIo)ESM=SzWvWrRu)#=s|B=Dxg;j)RumSkj5GI0{xPNOIj&;(Qk!w1~b)edu@{
z!VHhEW)?uc!VIWhxQB}Vl0~1t!l|dW(qHGm{=2_GUSNW_YV783Te$~%%xw~{XW19=
zL@vD>N>z1LPa_)HG~>K+%ioTqg(gzE3=EM~NsZlQv8~Jy<Lsv#kOQHcK&>@hX3?+D
zhkNesVEii|$wmxe(`SeFXE&Bpw5%9D9OZ3eD(1jgU3vMxZPCsP(%R`O{}c!R^Z3?Q
z*;s;0+l;(#@2<xfRDqoJ2wBvs@?{&&FRhGrIHP9}$NoDa9%vKEzz_KREy)l{r$EeF
z2O3xRSt-<^uj=A4YEuCY`naYF{Ifb|Q!N;cF_VcT4CLE%ZrRN=m*89ah5kN4)byu5
znuc~Hpc?wQIic%B2lXAZn<>5PvwjHLi~nf@_yxRh;!Jq!GyjKXRuL7OFto=2)T4Io
zH$KW7<yZwbl;!X}=F=#Gzm3&zR=j}^pI9RBWUEPt=(Anrclbw+kY$wDjNL6V*|&ah
zHCbR~o&BAvHS?Ni;y0YfRrGzD6kTTdC>u%WWb&&v>53fb#m-B=&LsRDB5AK8_Vltm
zsNu#yQza!Iu%6B&hmjQ<#<$}^(0>_Cv47w-M-cVb)OeReNccIQysKf4MS}gR2S{rR
zpYqc4oT$Fe9P5ttMsuSRyh6K_jz<r1<GE-twg=Vj)M<$YW!U%8x!v+sGew7x{h%Cz
zr1{zp=|1ir8O!%VArOB)x{8{M?O7HWm7-C;<lB7P45_#r)YjyH$ZE^U?{m~2(9=e>
z4}!{+zpK92aUA5P5N82*e*AB0`VaUvUk;N9UTP&O>K&tRl)=~|%DARt(h)TbG7x0K
zh2IS}j7;R@1)Qjz`L|lhc%y52rf9=@g!Td+6%qDyXwFvI5&L8v<6X#}24VuNqxKUz
z&t)ZLg08G@K}sv9E(104zTKpwGBN0e_98~D?TTFRcIfp%*^|>M`El&<{pX!F80@D2
z9t+MM!{Q6pTpeO+z(HmnYN5qU<@}ILS~J)Jm7b}VJATog2dL{%%v<jX5D~HRP~6f4
z?sFvGI8&&#>3U9B`EkcSTG%TaCYj5q<T%e~WJDZGGU$8x!%>xvFso?$i0;8RPzlvN
zSga0&#?zj7@iAK1$DtZzT0f5)#bVDi+xC%~)lHnN7KuVsdyjIT$?R7xi%b2_3A(!u
zq<=X(8{Q;#D#F*hx2+KNgVK!a4FOx){fzy0<qYo#zTi`R`<vtH$x#I7=2Jl-yM3cJ
zsEMe}%!6^J=upP`^cIzQ+Lm3q>MS0g0KoCU-gKh}-8-;8dx8s)&1vk5On4xbG1le8
zJL$D|8raD;Uc15wf+(#b32mR4e6IRQjAnMtYnB@53Oy}SB_r1^Qq!5Zo!^Bz2wm5G
zuxvZs<(tfhev^sjuEOuWKYyzCRvX_WE$x(&T`}+4xqkxTf>~nt9yC^}MQdd8nP=ig
zm(EZG-wzDw?H1B~`ANJ<SPg_9h7cj-wg34ka*%&bSzM4D6VK*o7D&|7#?nJWWNW65
zi*gK*KjI6B`sf^w$HKq{ob4KOFh;k6U}XB%HaRq6mb}g;A$~L*YCWd3*(!H`_5++9
zv)21iK>Cn7A#eWx{idL2t6pT&oHPW8f&_v7=w>2U4<e^h^vpo}67d*(^X^D=Lce_b
z?e%?n)IAz!&bcJ{{Q!*i@Zs7$^^4#*Y*mF(4fH9@1d>v4p6GXZgaSemPH|&c9xJhk
z@57V1cqjeea@nQu(aba@H`N&Ykyi0kGDG*4jSKOI4o4Z76~zI&iufJ8l9`XrPK#qi
z{oYgB3gbpkEO{RjG*YauFei@gjpjn@P9W3-t+#Cip<dg5*P)rAjyxB!kFgOv*5J<T
znLUWC`V;(anZAA`gw5X{%4^Azg8G+Y&Oa&h?)*i~J>TH%=>Fhkjb!biQggwQn}Q@s
zTz%c;l}IxY-VhR4xB2s9<YPD51VrZgZ%5L!KR-{WTt`)8M#TSh4Q8+>(XOidB&m3h
zvszGK*!)DN;TPOLV_w-UD__|(_SRpPY%o~f>{bWkIbZw@)WyDHQu?e#V__e#H2S#I
zvzJ%hS{*D~Gt&fx{`X@x_fUM}@yGC8jDC{r#KTTta!3rXs*Orn2P46Hf7&4?C3+qq
zegYeK+mAB$V!ycawoEl^^U_#^+qp`-f=gQcp9~IH9s^?Bs1IwV7JgzE`0thph`c^O
zt{10g(?9uOw6rAvdD8N2(B0M&GCwaGk1Z#?fl;6#F`4AcA(oZONV_nx4D_?+92z+p
zzr8+uo`V`}YP-%ki&xC}QNxIfkD@YdsJB9pbrp8TVoQj^CFmBw5l3X@lBMs;RGeWr
zAf==(|Bx8-$>WAnMkA3Pd76I3h9WWqR~5G!e~HK8URAyStnzv|Uttdtt_MjsdhE~I
zE6zdA_{e)a+<z6GAG)1;$i1s@`e@7Z?u*1?`D-ruh~~uA1zdP@>ylw2^(JPa5~r}J
z=WbIK<>dqMnJf+aa4eVV&4aviowE_!Z!o$)!qXxWc2(HG6Xpkj4R0A1bDSmsUm&=n
z!}yHP-ktmHfw`xrY#IO#eEmEnQgdEw1pIl%Wo;2iO9<QhAWly};iHl7#Kxxhkn>rH
z^zXA0uyB-Ph<aC)7zDAG`p=i@L~)w3+&qxq2>cr+^?Sb4y54gU@Yvuy{JFQO|K*;r
zCU<9>SU_6MAH4wM42s?43X*i5YQ?^3mnyGGQb8kI(VpmD0!iPY1!pHP-M+neGhu6g
zr@wJc5YnbtzN8daIm)S}*Fj?N$INylS1{CMiw}HF__QxdyptQqg!hsS7K->_NM!zu
zDTKb96KYx*@Q%EsW&D8sT|8&nU~+fxucG`nQnL`1y!H4OYk?@Dy1^p@1N!b{?V1My
z5;6BdO;O!%?DW70Svg`KUi!%x|Gse@bukY(Hwku^DpsQkxfC%!p1lS#3qWqaeICQw
z6OA_JDP&nWyQJ^i>EYIEjK^wEi^_AvDx2LU1c1kV{4k@vxYITUhQs~REb;KxRJ^$R
zfctlE_EHC8L1IL@-d<pl162_pDAlKmT~!!b_FUv(IU!8~HM?XGmJlUriB23;in80!
zSSYSY6<`x9LE=l`8M8q|@%;=Q@<|x%vIb{}=<+D<JBycSZ$$sM9g;4qu_}^=d}Irw
z5PE85FSwb0etPHH?CC_^_i=me?MQ7lo6wTY=0b!PL4t!WNCElcTZESmqeyir<5V}n
zsOhRa#@v8KQi|(MprpO0vd(fS$7^NI!e~^ru8eOV*!prHA{;Iw-^SaOawB}&ro!we
zFg{dYYU!DkVa<sKPYo{mS)I=C;z~q_VV4HP5P%dZAQv%m0IM)+Vl7&|KtQdxC-T%d
zc)<C4itb+n`xO*d=`|eeOB(+?LEV)B7htA>^=Hhtcr2D_#0R#85a_;!CRCs%p;!WX
zglxuKp!z*T5VxS~bhsOGYBx}4u5LC%wnroTce_`##<1T5VlzKgd%3OZwq}^m_RBzT
zyl)}>YHtW|wLzlm4@s8q#}Mj}TFi0e6n<tKHkH0(FmjoW`1z=ni&1a3&=mdw;|zcf
zZ8AhEZZcrk%}K#sHaj3=G<ZKftI5w)NWx>E!+-YAPwn3i-}H$G(dftLa77#<rKBR}
z>zRaMOp!~GkLV&_ArT<MX!Xd8O*ddN51Fl^Z>tIt23t<Chc1s`{|Dw;`FGk;O3dV9
z@oltN&~}C4e)U95!ZXI}oed2(BIRb0-`R(4a*C3yX?@~{^pxmHAkqcyJGc*1gBgho
z@7E%Z{$vSk^lheTxjKK)$FS6b?YS7zrqB@c58f@GfD@y$F|^w-5oMO|Yq~!oa0myX
zGD0Y5Bw<|kKI_iTjMn1=#rdKEFn%#Mt2pR{0^4`C<##Y06ET;+E0u*yJK*p$QBH=#
zR8*2}LA2d|&$owGqG97!=oDrn70QnrOfq**5pr&~x%u|n%U%NCAZg#0{en*yvDMS_
zp0d<(6OP6bGn+I~l(V%L{UyZgpA*O~V7d^(gntL1lk$CbmPC=)xZ4L*M`BS@qY0oR
zJwq%>|MNzd6<J}!p37xC8osG<P)LoAO2@GV*dUMz!%m=IK(R0DFGHreknT7nhd9`M
zuq^r~cRD1#0Wj`0H53f`ci*d~zYKS<z+enU>#ufP;_!8!u_wx+-c~?Fa(b>c^9eCi
zp%c)3AJZZI*lr9y&eX1g>-n3_>S(^Zq#UWA84SC1fy_35;`B$erGO5Ut+GQxn9WmP
znplypx{uih`X50G)dC|1-B_NfD7G}&%E>O|e&B71%&MD)h{8F5WRU?r4e$gp91&u&
z@hmCFr#WOLuff{N(Fo<WJHz1@2;f{6=9p}^O_Hd*>MA%LMRORcp7{X8M!U3--iryS
zWrrm333xutJRJ=QMnJAo__m#IpAE8&ryC7FnJEwj=ue#vfI-ew$<=ECrTOrN`w{Lf
zx09_dvIq&u-wbSB!Yp_K7v&#6wg;AOat$&_mgca)L5pm`(opO=nI0>l8L8S0W3<La
zV26ieX+B8*Z?&kQFnGw?izB#xb2!oClE)3)LgSVhs~(D*hmf@Gj69#fj#E^Rt}nQc
z&O4P}o||fI8*je3TxaX}yfc;kYBS{**3RW;I@_M6GJLI6ITm`srgi~bF94P6h6j*;
zQ8gf9z~S9xtsp@E>z!x$`vusJAxao1aQof<W$ZO5*=v;OHUdDD%LWYkkXheeS^p3K
zbb|kjN$R$jGZ8v&Qn!qe0UQ_2ZrFGlbp3)ts*C6L@N2W#)?O=3_mGw=#83)uZK3Ox
zli}-9Bz&KXNGny{Ivs!%|JiRFD>!!k2b}TbuYFB`Ot@Ro#3ar@9)@B<bI8cqBl`$K
z*F!BMN2)4mi)yvGO86k9?oXm|2a_KWCm9@;@nqlbG)dmL*W1k~sbejMN@BRYPGf*8
zdZgd;ICXWCXX@)hsmH#RfC?&93WmJUf0C!~EQ>A1=m;kf>h@wnY#>R5LFl+biAkNu
z-?Q0vddK#v4F`ZjOHVWczmWdhFZrMk^f>M@(Zs#*24tH5vLHDmdb4=4(RP{t+rVQj
zc6W(_d;x9=+P$xQP=g>hzCLjAdgS>qQD;Qvt*45cYn2hR>MHBTDUaL8CcxDBDo=pr
zlUSC$+5opM4kFyt@89ET7i$gGTL;QnzZ5$dFH#O)3ZY;8!QDr_Gr?qN53hd*#zVun
zVb2$Z@<k*j>ZDBoMP6CXMnQp2+lN4l?y3}Jmvqi$TT>KFLmEZ*QM6z2{UcLRQ9Q+d
z4tXk?+DX8;Z%Bdo0{CG>y~(~gSqt`wQa>U%If^WJKC88_kfnajfX@^;S+BY=iHW+#
zp;a&1LJmzT!jMIlZShh<%#5y*T|+bZZOaZEvDR<9Hh3MKcb()l-z)BJ`}|e!RgnLB
z_vq{{_PvXMn`u6k%{ZidXtU>7xNZ68ga)bV8te+51N**%9^At$fh0Z_6J!hhSqV*@
z?j|5c8CHUxoYGnL`Kg~OGbNP&f9HbU7_k%L1wSk-Hg^$P3ht5&v&S}5;HW^I@HBUA
z{+sW+xQ{sT+&amphrUPDE3oCnYDuH(cE~>Bb39I%n?sPlS_c2s<|f3DSDN4`MNj7t
z1G_0x9_NqVvO1`an&s<rs+7@9t2TRI9Jxxem2s5M0k}Cm$EhfYV1j!WRri5|I?)um
zROz9v68I@2ufJn7`<605ZO1+3k7GjKxwu|;b#Q(3gUR%W3vvLOhZ?S`NGN5tH0bXu
zqneaY3Gk%>#gP&5cNdxcS#XN>%C5!{#)buKJxrQHvM?K619N#)sgU>9?%%?%lGUV5
zE_zaeyXpba2}bS>BqdE}R5HmX0~7mn$^jF8WvlUMEw(f@oale9dc3lO@2@0LS@LIf
z8Pvz9j{>BJiAmRR+kVxJ#6@gwqxqILuPH4(!5E$F#P#!A{{dG2_YV#rLagUMJ(x(x
z;4wP;#9xZ*S4Li}%nD2eXi;$meO!6?EdVLr+uRUWRML6`Ns=3I>k;&g=;a46NlxTz
z!2Zo)X<$e_V5N(qLlEb=AoEf+^abhk;7ZVT0AS{EKf_O-CQ({bY!mCj`%(+;j!vp%
zybj3Fn3X1@hIWht`H?<9#WHyDB+W5#sDH7FH+J+Ih_L#Ynls8*f=$Q~V~C_7dGc|r
z%>CSoCwZnQuw17207e`L8yL1EXH!6t1c}QEJ-5&*8XYCvM6f8vJ(&|GR>xmw+=fRR
zej3?#%G79LDG7X;ODgnMw&93~K?xejm*x0aiPO$`>t<?;9v?QUfWB(yQ=n-y82Y$B
zk}#hL|GcAhlo1=|YUtp2m_Wj3UMy_az@c}0zmrIR@z!@oxIhjWKsk0p8=t;XGkrAO
z7eCR;<X(QN)qMYNNrr54!}5iZTht@E=6C^9w^z9SZuq|{&w|Mz6n!UBx0SY7$gGn>
zc>)37f$I0QyT23EdXJeRgbnIUl1?q?s)Zl-Cnwd<a;XZTcN#MLY!(32LXJc;e@{l~
zGcxuuu0_V;G<iFiU#h{~Og~y&7X!cC%8%GiA%CxEfhug-9*u@Q#}VIA+6;{C8E#mN
zLcVLuv%2aG>>*}~6AnxtCflNzXJ+m;_Q$Igu~tXN&nwaK5nO_c``C48fDp7%LB+~N
zu2j;>@uRY;!Hj5xFK&i8rl~$K%49x6ZVW-1$35<gZQJ$t-zbjfeW4wSZpQO5nR6NQ
z{-5|AjQgl*_I47eTTpRsdD-DvxqmDbudusTA+I(6Iff8>5VzYL8BMa5N38GjK&h5a
z?D?#35L<ep=qJPSsD^E^kG|V7Nkb$rZtmC5Dn!>X`TsjX3fEBd<_jo24rDyBW>e<{
zZXFg~*gW6QcRH(5hOaYxf=rS0UWQsA-<YtEQkczK!E=Niuj#|Et}(B6w@iSB$Ih~K
zyY10yK_?ppi_39W=eTw?ZBqnh9pAIJ)h3rqPqj@J1<G(jc>94sK7R-|#m*^n^2V)c
ztab6NM=dLfe9tg&+?o6<a<TO$)N>B}sW2C+&1D(vS4%>qpC9_(Z^>lCJ2*Zz=mt)T
zE27^Qte`bj_hlOp<?k$W7jtmeq=`k$P*+t}1XffbH6un%)P+BB@(owG*8zs71LVvq
zqJv@jmteS;>nXLKA4+q;Ffb3sI<1^5>)ZEHB}-Ux(zRda<<>1E8@+4<&qp2DgH}Ev
z)7w=<0H{b9Rx3x;fBf@5_!@Tjf@j)|c<ug<u8|y~U#xJOV?j!o{po*C`wOPh0L;eJ
z-+gfqyMk=u!1lAT5@k};*&m1vhr@K3jXKD8KXwwd5>sO_r&Dkh?EVCQ^AUxnoJK0q
zDu9NgrF;FQt&@ddAJ-+0!5yZO^jB7b&?F05b4D_GcBhL8##{{*^GiE8n_M_CCgUs_
zR>>bdnUeGY{lglf;CjVh7o<-qKl6K!UC$o!fH0Flr;z*#bdgqB(rW%_Qmwv`3xH@V
z_3~ZKK)h=6LE!o|j-Eq-`s$C2Q)%A(V*j2riOKk5v63W0d;hYvqeu$XmdP6*2$}N1
zCV-n-H>!+Wz@Dg&&5<DE_)aWxmy_3OKO_!On0)5Tp2oU?6T#4Gt3%)L7lJ2x3x?$Z
ze7U^VumUhE6Jd8R4_WInCFBb0qBMZ!W-2Cm!WVnCEhd#gqZ;%7|2`3xqk*`IpeL^r
z(`@=#a`6JZg5ks#c?dxhA!iVrasv*2SN$oeQu~;rMNX&hFqFBkNS`CHRY|y-F!x7X
z8P-N*rA(xvvPL_j=Vg{j#3;q>B&NyQ;I_f#-PuO!!^YMd*hb3=7KuW?i)2et5-B6E
z0u!5!p3<5W8~x{Et$df=8zGWA{_0%Z@QOHhsv!k!PeCn;aun2j4Cig;&dJTW134CA
zpKl9iME9EeB}0*HId>i?gV-rwjWL_VOBP2q1yGU>AH0MyR^XMs!C9CS;QifNANx<v
zxd}EZypW=QRqK~g?o4i)-+{=R$vbr(2WkuwC;Le?Bho`&x+2z-w6i*Auk*>hlZxE~
zA*JiEgZ<q|3y`y$iJmdO9R#oYHRl$4p|=+?@yUjVOz6K2#v6lQy7fdn2b(R<gRO)f
zMM2x8`d^<%9fo3h?-p}b<OnlI*62?%(#(kERmj<hH>z#=B`IrC@Zk#vY>L*kb%zji
zx7UTPTC&c_T6I7Z?Ii+DZPLNMgnZ4N9oU!9xYSzj{DmKn2m9I2;KNVW>h31OKfeRg
zF!{&e&+%#7b5W(lhO+2xp%Dh4IE?Gg%xH41KC?>_ol3q!<$bX^ga`D%w<VSSs5Zsl
zk%R@FPT^Ot?>bV;_tyK5qFGIKSQ0H`m#>XgQy?j{e$!a9(d2dbGiG24H(^(Sk|S7C
zw@U1I3UbJ_EYOtvGtQV$s?zeE#Qft5`nA;u_}v=E(k=_kqO_<WB^`a0u2Vr73&r;5
zeT(SLXdIy#+J79Yz&eB)_5n*}G&hh4lh2QRNUPo(&t~+8m?iz^6&_jTc&gq8#J1{h
z)S1fIXI&WYdFn~`Z>lh(<6p~&vpos4L}ZdcuKH+x59go3`n}-8M;<b}ip>5ayewq;
zZ1`4U951ne@~!uk1^{g&-({NK_KTd8QNaWzm$Xx-<L9vi2?DW?mXE}~;0JKK+;rxx
zKHX?Z&)Xfo46Z#?7SC`b&5q{B1RDH0Cl^}#!l$mAJ*cZw-`d;J5vcA`)FhcD{@fj2
zlvx@bI4$?J4}@0h*W!WxQ4+0kYB?Ag2=~rCCR%ktwf-)@<1tzy-kbqRl|n-wG29*^
z;o&1-0;6QecoZJ;MRolh3YyRYTBiu4_(Rs;Vn3NX!F>N(6!QmOsDBl@LUz;+dLWFJ
z$5_n=v*4FMBCI0@8=PsHwKy!cT$_oX{rAr%)g7e}cT_%j=W}*yX5>-gj@?i}=`oV!
z(P6Cr1C^`$)`ti%gCMN~{uujB_7Fvh@*|lb?iOG1Bm$}+<S?6)zIT)I4I5T{8R>g#
z-y|d9*~Ljp;g+NLLHc<5^R&VIF!2)M06}e^R6VPkv~yW*g-FPNGxwXjF3=~F@w0dS
z%4g(=!prJ+FxNSOq)o9%P6KXC;`{+Tz)}%GR)0HcD&wh2ylUoS8`>h?HlAdADExW|
z^?>Z`_5@)@ruwu<HiJ3!Xq=KJ^Hg#z7d+8XkIbFA)8MO|6K!P^VgIs=g?UBA928gB
z5874dswLfKBYA!oaL&^<P_~?DJeE{HxxK{gHozZoF#HQ326@yw*XLJ4u31GbmA6ic
zC6`9tFWVBfJc)!Xi*>jzS!(VP{06ut6oRf+j^iiIz*wtfC5VPAiq`W;I<q)b<b7z)
z{w5HM%0cV@zd=%JVp@WNGhkNgdWi>A$wj1yV>KiCovOt(m<r@822Bg}8rd{I%|q%?
z){TpI8`*wtZC4|sWZu><F*j$z_giMUoIKs;KhDO!kR<-CzximhJzvDW=kbyb?j{P}
zV#X!F1_jV*mny+EO@+=KEvIDAI3GH@NzJ6ra7BDS9Q}w){zbeA6LPT2gU1S&BRlxZ
zizYm_0ntWYH^%01n~Uc?UxnW2zaYCiG|8h=h&R&Nh5R|Dr&f7Gn9KNSWo1uFR*$gc
zqE39Av0CLuX83v=WR2by&ax!cvL)p&SAfZ(p%G5f&>^J4ik8}Yq9K^{N8`3@?7lqj
zmJ&;R?CQPYkE`jSxwHKm4q+yzhd379F{1+*B4>9Y{bhfMC0H<srgQzAIuIrmQ-{#1
zvNAFG-}VdZ4R!5Z9e%StLwYUXKyT-TCZA*FK;(e0dIPBhL`eU6fs;ueNT7`JNw9Ab
z4((dgxf)By)la=^hDYLU53O9-u@vGMkPWBdtRyI78B(4Hbzdv8wd#)$PO+LC8H_%Z
zbP5VQ$BN#ufPK@=r$IN;cZc{X9TZ6{6;Ik`nJ3cEnaAN1d(tMptGIvp<{CNF*)4mL
zQn2iFE;JN{%P1sq8;WD8KP|@a)_XX%mLxPBM5!lFqkZU}>$J*0$C`kL-B9?E&Ct}P
zMOtHN?5b$K=!4$ym7qgS$eki^@-ZDlGgGr^+PU=M-s0-PjcCBz98r--Hud5QBcY6o
z`R#twa5%|pY_sf^+M-Lm_%lZp@+Py*+QlyfALOa^0852uR=R%;wMQztt^^g8xUhF_
zKuG1_k2~JJr+Wc0JcJedE#QC3BBX<mD?N5(_~lrjw`BumjIZxX>)ePYK1TDDi9z<f
zaA9CHDKN=ehc?A@;8^)~`7r-*!?WAdgZq1~)aLs21!&3O<;urq*5-_2$)CBzt$99?
zLZ}Ci)OGSTsP{FslRx(T3~XmC?~C&~XF1;EO6gkn>he74AUavBc(o(uFE$S+l8Vxp
z;fmTAgBGA63yh%3&9KI9-N&ODeAp#5{qDa02+NnMeiHT9+5T!4Hk~Ii0-5r{-c$27
zT(Z{r>L$c;)lm0UihjDCP(?PnLY_OE<GqbeJg2`Ut|DXmmtK`4G9itsMp=u#g$Ca@
ziDzC`g0Eyd*b8ztGhG&*mF?POS)mQtc$Ho;0w$(7gpi)<f>*XFc#8OxZs*1Op==B^
zL+Gdj|Nbv7;6G^Ro$5f`+_j7d8`-yQ7R;nvn#X=eFy!Q-xM^d9^^d^$sy=SC;reaT
z5}forTO6uD-6i@&{q~6toD|+=nBa&7SzR&cmWQ4=yohka>f?ZJ?uRr!%--Wh-&gRO
zESd&+k29^6HmO?=Dw&&=o_5-KZId-R@Ad68J~wSgJoM*yEp$FGj`pc6g+(dhaz$KB
zpx>4deAPOw&e(lOgl~QzR6#3h15?KFUwp^SmFJM-F5^INew}pm`SeS+Z<gmF+%b&T
zrmZMC>)YGG<$ka`C`yd<0|bpqaC=v0m6iDuhZHbV5;7W1t-EXcX)5eIc0AHJQ8-Y9
zk<-(l0}*RvAUq*Kj0+d=z8_EViM4Th)oTrcuVq7Up1&kVJUoi=9>Wn7fYCfrmAlB1
z(@5@ch<nff;KVNkyD6?Jv$dL(?4uX;d#BE(7M!t=OLG&1HgydqdjQjQ%cj@_#yptE
z5P_Ny<z01XgcG@L4H6WV#*VzUv=UHr+zGCl;;Z=>193iZKeBgssJ2C?4sU!Rc-sJP
zea2!r(*VBg#@zPA79fpYN7M^>_>gKgijN7`G9<<|7$S5EJdm+4W+wU9LOK_{`*JK5
z_Hs|tp>^vh3cpccA5;;Hu6??q&W|Y}OP>BkHCKDMXa9@-yr(z+B?0Fc{k-6jI2wb4
z<kR3NIbLrdP^<L@G2&QJk*{y3s%J&|#Bxms__`EJFMe#}siK|E4Qk@T2@;E2w~oI}
z!1Tf+D5ToZ+URYHJ`GSn9#vrUqI`8ma5iEBurszwU_mgOU10Ue!OlJ+4Tq9l@3j{w
zAx})JRQvzd85r9#I@h$Zsn|O?uREy?v@(RnETSusQV@qN2@#NQ6&)Nnn?ejamg{(^
zfsS^Af!xY!(M%21uH8)R_f2|1`Gsw@khqNzu((*^#`q9GeiLz$&t=jUc#F|)G!prr
zt8?vb%BMnI5jgWsB*GI|^DgQMgw}<?a!GNR*e`cg6mA0J244_+0Q9fh-}|GOSbr9^
z%kpk){As3$y7_pzXJ7&&ZgphPjmDatwrGe@YEjuZzddQk%EM5Gmwte(3`I7FG?nZq
zz?M95yy^oFU)5?IR!Oq%E_wdwE#9`2yio6fIBE#kwYFvDJ+{v$NQr$JjiGWq8_6ck
z`|hCWrN!J$5f%i36fL|HL5?I0!s~u~8jcbWcCX?g)PGqJq(@d^`Y+*^R(k?hPcov^
zOpq)^W^SC|N=&qwZ$1z_@$)V?66DJve#131N01;|&rg|P#V3>B*`2(U#CH^qY<R=g
zUCk0YHo0mo1xF;;9kHY^5GXSSdO5m$2REtg^)3Qu$rxZ44FM$E`?AdpQsNaTriExm
zAD{hTBXR}9V|E}3LxF!eCmAH+Mj`uBlpmwzJE92zP$LLM+~`YN9}%drQc(03;Wsg)
zi1<`*buSvVnORCgS1}1cq6g7jJ57@Mxdp&b1UWu`^S2J%K?$r4jM|v*HTfvS)nFHi
zmba6@+$b(Vc&I_m`+LwA4ZewQ8_TH-#V>(#MGsQ<ALBgm7-afMZjShb4$wlcMRiwT
za{q4v%a4n&C1y47<KtS|^A<Yd>sFWFkQtg;;3uH`zT({sIgN22!x1BWF2TlK8krA~
z2&Rs2mhYT*Qm=1l5ah-+E(NC}Cu=_*aw^s@cs`!%@1ljJ_pnT@qQ6$W7DAvYf`g>=
z=oNzxf29K>%Mb~A0AIFqfBa#3+=nBjLO6}$4U`5IwaHoFVeOZFFm(+%6b;(lI_Mzs
znP7|GV(6~9AS~(R=o$X~Mu{$q_p4%MLgbjp?`B7j!!Hx#D=+ysO0faGzkiS6P2E<K
zu#nyUY`36FR(pM$<>#NQHbnporCZGLbSkefA`JnV2r>!3TE`>L^?VJRWIcO=Cb`=F
zYD${Nd`<!Zkc@vk_J$Lm87T#3$8K3il3>zpBr|D82nkAWnn5nW|5NMbu2Njb$M_Fo
zC4_HZ4R6h>h8{;DPOL7Vp&7=1m1_naO!7MUYo|$E5<rA0X!t!uY+USOOqDU3Dtfs4
z9JD2ZGuZYNuieJlNe}eiYC}ideOncl<Z;+?^nCy~uZ-&8ze~h7N5|~iQw&Pxuu?`4
zA*2`9yd-jy4<Z!5D%TQj;pfiMVfrnlCFK%f0Tcf+W}%=8eKRsu^i-+&m1MqF0mUGg
z)<e+YLZ*??o^!%Mp_2I3XzR$}jo+N3z%_nww8ZFPvgp>v*#mKLz$s0ofg^?F%pm+m
z;ZFldxPYn$wCX?kvLi*|26KqPo=7`Yj`7vEYD*(+v^iSA<+<_7Ynr800rFRc{wAkJ
zj<5b+V|6X6cH$oy`d)le$e$=5hW1}bc`_i?Eyr`!jdz)+jaOVlMLaN3SEdjLa^hfi
z!3-7yvS#8E?aWWXt=&njiT$kD3i3}Wr#qlEg8iX`w;pM#V!@7V9(mk&&fG4M*ZEUy
z!vWCE+bVbq-gh!M$?uqAF8?$lg9_%!!{(WLVo|HULO18*YiSQWE#1t$#)#h-tlb{Q
z=PdpjUrOBCz;Wynf;F}%+U=XwyBQ^=jKP~+wRu}XsS>YH_a%Ozp57dC{11Y7)&f=0
zj8t))D+aY#=-D;UyaJbo+=8JDBbDJp@DbGtYwyB6qd<@8+VR0Q8)9zMp0{KIpZGiL
ze6zNx*<}TL7uI%JLi$EHLxVQfI3?q6`Jz>xgEVx1l=J`j9!liVpveF_(qVkpn4GgV
zz4nGcf81#cx}OaHf3cE*%%xowI2&_+6-mc6f4I$rb;GK_`DAX1ri}b^`lW1m0%N`l
z*$Axp5K#J7B6)RUcs&d6GoXbbDaf+28Ta}1j#xU!Wg~%htEPnOoDjJ4Tr|2nB2G@1
zAj1>)@R{39M*_pQP`<5GVODIw0s$PM1va~Qcca0;w}WvslnAtMGy>{1OW#^-F;KAO
zf5Lvpwob*em6VtAGOP-0q~Qcf3<v{F0&&JtL<8lNB@i<8orQ8*3tZ}kPZy!)M)qA`
zNcoxq^CsrUY{)ZMbp&6M6R35T=<Sp(baYbuF(kYzHrS2<GQ>d|a0xn_&mWhy`II#=
zX+PdNrXT;{BhN2N?~rvhs|Ys1K${Tp@PHh>H5^mB>_N02*Zn$PSuw_#K|LfNC)hA3
z@3x18c-<ke@&6u9s_D+3UvMUblv(Z*3uVrIaZ@te<g?jo{{hR417LMXw#OTt%6{&G
zmpcn7DaWvR)^V7-O)J_`H|wQtzk$uz6lJkQv9{x>2Yy{s$$04GYlPGXxdMqz<`zM}
z+p$LoE|UJK*Wqn9IJb8oABo?4Ke%v9s|D(EnT7#xDfVU{0J6RQNgZ;EIwebgPGw?N
zy7Dxmqj+t$TkwhGJ66~bjzPK0dVnJgwOW~JPG7vFStU_qu_peHh{j}m|I1<PT~e4D
z8`W?=RBD)7>j+8wO0V``U#@d@hS{x50mg$GpPb#!oYT}x`+KFKTNQ?0G#4iyOw*}?
z8c;0jOv`Gz(8ssGybd9c5r$n7WlD_w&gWo^1O~6CBf@%<sA3RJ^pJpd9eMCEg`P&>
zkN)Qh27yXqR7?;$hx@^_C<?d|fmgS5D&n43p0@7(k`U+<9jw0(zI`{iq%jk;XGWCX
zejAJK=eoi9YDCGB{xKH>{3W4xRAO;1bBF5vv)y+l%j;N#52m~0HqG4A=?7(KX2NSD
zxO;+KN{_$DevPd{sVN9E!rhVg%@oHvVsB2XNG`aSwTq|5U!u6efmQ<ccVGSdXj+<i
zB6MBfJAroe73aV&6Asx(y+J+yKQ<sN$?EfWB7p4WP*l-|Z{j6(b8~EV=!c;vORMYo
z=d|@4&N&_oQJY%E0*W80Uhh8C(_ev&SP6}yHrjYKSyi1~cE7Oyz?Kb68G)8JwT~|{
zQWdSg77l;UgZeHWJTy9r$L>j*59^hPb}0okjS_u>EG+f?=nX0NLQ7JIB?~KGiwLG9
z(j^?(#Smra{|hDMON#pp$h7^1&>^0m%`=J^_30}iu(8vB-kq{YB0|Mfk~!kr%4o_F
z9j<4Uw$;U)YF8Bhi{EoyCCSod&NjK0ilo=?3imY_`M;i(nxEFc?@wM=hr`ye@3Txi
znnU0?+OuGImjZh$tYH0muEK}_2HP*avBg-VcxM;f9F}4_W8(ogQ;ZoS;e#W{TgOpU
zdzHh;({I8~^<jn6BYS=}PR@i5nmh`L$_!1<ZqxEvH92s_5`*w8%MLZr*_lyzGvDA~
zv4TmE<8}}V(9u*QL-=XbyaYy13gfENxx`2B`>AJj&TX;W&+$nAjQ1tCv*1T!i+Ar&
z1f836UnH(cj-2Y?{8g}!EiEB{w9@?F<cvxt2)>@t-L0RC6_Td%`2(g~V2?$B|9@sj
zaTtJ$eafLl2TTctqvtlTAu8b<i)=pvP3!(GE)c2SyMw^7Nuttq?wnTTbuqST#9JnQ
zl^6Zws1}=Z1-NUrHrk`V#Ky$w3N?w?FpTJJ&=I$1`?~R__9x^+#DcbD^d4Oy2ev&2
zo!$CJ6*-c&lI=6K-Io}tPw=0Wkr*PcRU&*JVW_kM<z{Nt|2Uq>SK$mA>#pLZ7eXJ<
zFIx=i%x(N3RN1UD;4l60#ylyFBZ->A#i8Ys)7I+Hs&LNr28DShse_X0A2*4U5N{{E
zU!38!M|x!6QyRruYb2(6cr7*4vmY{n64xluB;nb~s^)iuf|;4z&&?!L5NSN7Da_hr
z9mgn;o|8I0f4M{XZ_*?^5%YzB<<2CtJW}7#f)09P^8}7|Sdt}(*Z+59g7wBXeVq2<
zU3vnNbS>$gnC7XZsj}b~R&oEM^fti^fKzB<-h5+_4S~QQ^rJ!7h~EytT6PNkrUMU{
zjC%c7N%Wt7o~;6;XpDS)_cqSJ6rhp;OH*h8YG(z>Jq!3~3(_TU?ESlhe_{mBOy4N*
z1_B8$zbRv*hfq8lcYAhphoC<YI15TrLMB56NwRsfgH%Tt30#2a|0C)xgW~F<rQzW2
zn&9s4?oMzG?hssq4({#*cY<4R3j}uy?gI?&Zu8Dl_ulV2zo%-ZYW7*HSMOfk*HG08
z#@|$spGip=+0`0s(GT{6FYUzsv|w04kE(f$vbL_i3;X+os~!mD+R4a-4)D?@siul6
zw|X}mEaNR#qNk0#N;iwz99&5dp6E3nrTKqm9Ugqv2xX@|sNRE3x$(6;e<(7TEc8E>
zf@vGZq@L4iB@*))`o?wspLYlp!%YdZQOwnjbJd(csJH&751rg3^8c^MAp#O76wm==
zN{>C)0o(`f&ZA9H$++eajhKkae_Cj2;#~+u83LYp&FP>Ly=6?j71?F{9eySFo^vCJ
zzdVQbrHsw^_3LyksW+gtJN?#z$v8Rj1Ci<QWlFvd08wu&__KHVK0jH8ufQUYB~i4y
zP}AiyDMdo#Wr^bDGA$mbSRqGmFU_PCKkHUW$sEXprxdgFn+f6U-XDz?XcTQY1aZcn
zm`-t@BSc-c%?dw3lDJTKn$^_>3F}#n<a767SS`+KrrQDC{Bg8MAgsVb2-Bj$&`VOR
zFXr6?oBG9>OVeOh%qcENvRsRt;QR@QR8*|8ItX7))P-LZ^DQDO8KRwlh>RRK07A9;
z0@pc?*X1DCUUh0VAwa|b;akKP<R=tSe=;Ez|H0YLb}ZjFU4l+a{hB8|2z`l2e+@2s
z3p8U0x0@UT@sikR7??-CnjIVN54TzdwIb8GkzZNZO9On^l=m}jL<pbyV;5R73(`(a
zwl3Qs8Z9=nUM-D7%S1+sa(dlw*>JIN6G~c$XJrEZx2vNwFD!hS^1;l-66)U$5I#rc
zDgMKWcnJHKVn%fo%?*=9=(?4Avs+w)!^)nrXu5NN&{H<Sbb!i`p0oa&q#+rL5zjU=
z4$E%eDhy_e7dfUeGy#cu-zE&>rw((H1w!7|7`%^QCWmE)Hv6~Ywa{peBr>FT$gv@b
z%L<}bO7-OjI=7^!=P25Lv^uQrO}nRrRX~91|D2weFB*?k!sCB~M305(#7=^u(sU59
zJ0kHBz4#%Z;sSiDWSssC&*e#9`t~R8*X(Y^J<qFrWXRv`<N8TZQ68Bn)VkQX0wK@%
zb1jbrBDVH_ETRw+DQ>pS=wGE9N**H1H8<U*wrOJZUew~u9X;A9JgH<<2Bk(G#<u;a
zvR7`D4uvD-XI@*}3H12Ui|F7ahB(dj04^>1JTDJ?eij|!X}`GI=8C_;bx;KVioB6J
z1@EYBy`F|N%mClj7S+S?y%3J+`^r_&5PsfxGKd;OSUE}q=Dy`{6r(2W!`e21)XAcz
z$^43Rmf)}uZ2!O;+BHcBz85vdT9V52<(ct~->x|M0Zsz2A)FpP4fv;g4nd~t6nttH
zmzxRLOW}4jPwHbJZa<@+R-alux-83y85dT%DFknxsr!aO+up06jF+!=|I63@Kb%&h
z-;8f$zl8hH;?9Qm6TBvToXqw!-MNY=m3+KjWRJA&xVK}YGJTtkPnGV7#bM))vXwjE
zVDJY8z0}S)gjAaYS9Fv8%zab0l{l>S1pQjA69tuGi01kCvSd#+Ga5p2aRh&h%Isu5
zF4MaWri$ernZ3B(CoQ#{Ldy|CmJ$N}I(_++9d}*kVD(GRgUq4rGEf(fTZ!?6s(&qb
z&RUq!vBP-6G}c^eCF*9Ii(p~MJE68(;Gxt~gqn7`H0i?>@dllyp{K<x(=0s5Qn5>C
zjBK%##_OJ{>A<G1J<Q8;%m$Nc?#I|CA|HSbUX#(*wekvQ-0}|p*+6b@B-YTJ7Hg7?
zGZS|I^$UDN$S-aga;K{b_HUG;Se6$=nZFOc4|m4Am7swhWD#MlR#wQzc%7X>P1l1+
zv)?YsLJ%sSiWD=uwGRW|DurKrguZh8uz`&!2OH%JLljp3JAO$N3`Ts-X(+mmOA%Vd
zU3odaNX4Oo|LrVqV2~ea+G|5J3_oH0T;W40IA9+{C;mHAVkOBjg2kY-`2%M=ypR|f
z1|Btx@r7szY%>N6*!0d7IG)c!FbY$;NVH~YUNBWuoz%TREDD*SEa4JvEbUjo)Rj~5
z@aC-8$;3cpoD%N)z3K-SJqs}>u5y1bzo4$R_S1|s`qD9v#q)_qik$d~S&PPH$sj`c
z7HV=VIx2mUH@>{U+q_2dpzGl(0b@;_5Vx$BSs~FJVP1f*FvN4pLxYUQ6Ar!i$<KY2
z^L$WR5kL`+d#!0q)Na=F1=tJSXU3>%Llad2qOUD@-yoE~S6CUzjb^q}UmjP1SQ8Ak
zi^xil%kR#O6b$EE{1}PC>Vk;5#W8F<;cqc34z_vxQdzbLQ|503ZzBJ+GD}ixCrAhV
z|0Q6l-Xw7<htFn2_$3sFlmn?)pIiRKUpWi&Dd2~p*XOh(@}2}dCS99kv4x7SArM8U
zkLzv60UFtIQo``|jz=-z3=FipMJ?LK%Sc07A*dQFE&A2TY0_p=Tt#luSZmemVb$^r
z1*CZ_AdsF?G6~***abPxDQs)h0wvI1ajKGSt&H`{_1g;I1Li#|`~#=BWO_B5{vD@P
zkfl#tPAtUDjd9Dx;V~%EEg_Y3wmZ0{!MQ<nn0rMfb3y7=zZ|v>DNld-v?p-=A}6YD
zcA+X#KgMFtAmFt5N)m(Y^q|nfz?yR-O(_ec)=eH~kmr+q3d6tqYT&vlOv35yF}OZN
z*ER4}$J91WAb=UtE}>n_LuTwbuFd`|3-Rs{No0teU87MS6n*_)a&mSV>lO1!grlz_
z9w~7VCDZD$kHMVUlT{}FzblzwWRuJ%@TfD<;fxe{@rzOTPK|UaA6p;e{`k6FU@$O0
z`Y)GNHS+h%J}+?p@p|j_>%Sr?4RN^h6UYq9Uzg0fCTt9-8sw#(f@V0#{h%(_&L@Ip
z<m|QWpcTx#yKSDni2x#mobGswyRPQWuK<V*S0UFzh8<pR$06n&jdtIem`d0Q`H`w@
zH+xKRyu6x2u4s#qz!Lk4YGlX#fT|E0c$nB#S3};F0p}rm!Ia=~xO_gkuroTU#FPNw
za2T@XQsv7TouQ9lKQm0F?~3$)DhKYT+$wD6+-r*uf{N&9%-az@0XDxYrDVqIi2s|l
z{@eKT2P?6?UcGKS^=5%$FQbp!Q7i2^k}27+AwwEWBU}u4<{6+47yq5iZ2UN3L!zF4
zZa3vM&`1+|2p-^b(bnqe_WtbNSRnY-`nbt=Ruytel1qq{UGNwpn+1xbwoSyVTr1s|
zFn?{4V}}F^0#N9s%?A(McopQ#L^EEH<)MZ>ZbEJ*%y!{mEJp{bY6c|EQc0+%tD=I7
z$Aa}{vOZhf2(0RLrKBd>Q>n3I>J(V0Gp%q8-A%oQs@LU*MZd&iSmHGYVTDEpq1}~Y
z(b+@HG0AHD_sTH2s}kD;X5}0{8IpQ^UF96=V!*t^8pQbi=I<|Zzw|AJxF}KrucvmH
zN>t;XaPay63ROriG=NRn&yVm*m6B(Y!{kfGMdUMQqxNIZ+g7LcDkKK>Au{1DXAcbX
zY>HI@x{>_={>Bg<mm1kmMfaFOgt>`yH@fZo6%dS`9yqsk%z_nwHMU>RP}m2#J$W(>
zzd<dO+?_ITBIf4Tj9*X}?Sj@PEDlpE@`y)-9tVLP&^yr`rA!9C+Cx(TEkAKso^>iV
zC<}^K(4P!kT3n)vn6f*Pyb;%2b8?0fed=aJnaoNJjSKsIIf`@ODW59tW;**vBlse(
zuH(Ycz*H^~`TqMDBs!JhNV#MdVKNBM!tS|UDkj%Va7S=z-{PRF3h1j)|8vVjo*Pe|
zTpl(`d^U47&P5H+>=|<3kV?oAJdo&lXKiR$F5LZpV)_?Bk1;o$xA20ew;(8(knYZ*
zQ8XWQ$ZUQK;Tm;iughGRzT9rQfm?6KGE>Q2e?Gu@Z==_yCirjXHf+Y>77yOVRLoSc
zG!~=uLaYrOCnN(O!EJCMoJ({?umtc@%Sz%kq#SI)iiDwATI8RjQOIs;^z#$LKiE4q
zUH?!w-XC_W<Z@71-|dW{E!pzvq105WFz4(?MZNX;n{kT;kr0g|p$m>!UJuOvxo7^>
zN`jI7m3gcf2-Sc0g}A!#iL&YRdHDFwXdws$e>MnbzN*E|KK8_uqu11{*X@l|2mX6s
zIZF>Kh(?D@nhZ=3E<x3mGsG8Db=3TtWeAxi1OAY;W@DjG)!jy+=jV@C{6haAC!Bd_
zj3LLm!)f3nhx?y~=LLV|x0yA%!}gl?B#7*{Kg5PJ<ddC;qajUxq<Mt%(RbFl6fh0W
zd`-yfOUtOgIWHribjKd36Dw2PE~cgYGvOStD~wEgebYIG@?B0@+_gaX5v{A-4U746
zDfX-Poh}5kS-EjO!P{P>fh5~!YJz{#GwN9DSPx?B>!?dr#3zn>qQ8e=NsM@Qz;l!U
z_ao4YnFfM)v!-&dxWV*4EOt_9P!Yo~ba$~eqwY?mQawaxe{r?2EwoH6S3viqPWD3e
zk{WGz%QaqjoPGYy#Vn-fR_PEz-3W<sY*%g#aB{h6g&?eJ@m(92&d$S=>g%&6tEYa9
z-um9V12&8KeFcB=^@FYfz@ebmSIgAWRK5Z;f1$#Fwvz@&WVcXS%ro1o$Xe@T{-?hr
zMj)bsQ~EuskGT2?7=!JBTmg5N?SRLQOMiu?C$8{^2e1FK9EA>nOr$6a<zN3Y8DAr7
zLjCUx>xF;yTDYj8b2pD+1bo!UB`gx_wbVHwt)3R~^ABW&6hhq5udTrMz)H>^Y2X<g
zB(t1_^T_-2h3<?t4);!b6SC)SeLwCVhnaOn!1q(lwmMrmOgMlK`L6DxImf#`hD&K?
zjf*V#9fbA};$Urn?=KyLTbgEn3#ur}Et~l_nLd?O?JXWr`l)3o?{VA{Mofn>23A_%
zW~9b^8tG^S3L6`N8%Zymp^Z1ceqjli=cq=(0X0~oyF};k=T@SMq(~nXG#(N-Y8xV0
zQ$!t~x~AZ$RwrOsAE#GzRY^{*bQ}d$-v4<~rfG%KA`f2h_Pi-NEnCE|_2c$ypceQ&
zz8-jf>5DNfe9GJn>bZ2?gj&+^_QI49>BSzR<AD7;(j2<RhEje`xYRB14uwL%B5Pwq
zhn~-a11bK&tUi7<XZ;KZljRoaQ5&-l=dDjg2{^QsHwXQWBYXLN7yUM(x1aBDBOnon
z`>AttbLu}Y(lk}Zkdp9cdu{|Ay5D6TjGyRRnFHZhenSyLu3J(cBwvFg&1P$;W_f)v
z{ui$}FbzT`mVuvj6~^e4=3$vw5c0Ukl9CM-304TDX1NXn(tIiEQk7;e2_ed+#P~2W
zK`KFrUmdlQEm~nA&l}vc<jW}7_%IXnOw}hG*q^snK}ptFJK0&h31AuWeTjzXW1THm
zq6d3jK#Ar#3;TBIl<=sAg$>uN{^3lNhzh|E8B(WyMMu#I@r?KG_UjtmrK>NtRzyHO
znAq4>bxNP(XczUI;mB1>$3pYXweRCx;ey%J#HR;}Hp3FB5hO_}F7_~Gd?e2s#q*~V
zc1$VDo*Z{Ek3K4hL+IjPYU)@RvB|L!H*|<m1YWaNy>E_XeyX)?c!=a1w4$1TPnPp?
zwF1k9(u62|{Ep%ZEP8r7u-08`JjK?)z*eD)!OzaZ2=)Hws}Kh~vPkh+-DFDkBcVWB
zpdDmqe*OF5F5A6Y)(aDpTth%3DBsWAzQO0#TKHy^s$aI?Ze&J1O<vQ(xj!NY5Q<0U
z&6Dr9$z0QMhO**unYZfGvM#Sl!TSL|>p=*zl1Uf+_;<?R=ts$=3>!iI)5?nGqN*A(
zVw<tBp|~zaUtP=NU!VRePqC>a5|i~GSbFqgdD)PCVRq#ZB;_Oag^tre)lEU|ij&R9
zm-|wu^3%}#$E_YursaUg0FylTi(agA6JN2VUN<p^w^@dxj(0Zs|9w`ll4fcfd7}KS
ztp{f&IE|9i<y$yolky92uw@BkQNVOJ^BiWq&Cg;!eQDi1D8h=rzZzUiA+_mF-=`e3
z)H+K445AqG)hs^-CDmIQi^^K2Q;ci9>9=aq3n>S8F+TAon0@qZP4DhVa!_=CKZJ>E
zS7Tr%4jWHw3Q<psBs5fdP|8$i{6+sGLhA%mdE9h<;5(*Mlif0~>X(1mrDXWz6s9x4
z3S%WWX1p!nZ>oAMr@j@=eb_lUixx*93^s}hs^%(mN`O6=lt=!0p*hxIWv}%y(_p!p
ze{-XfUZp9s0|tX`W1;f04Wl7*uh^S(nzrC=DA}J^F>n03xAOyjkW#^4-QI_<{;vkx
z!w6z`67tQz6kVY4-=^T^7sp#iekL|5WcR2%^PV@6?*c<mSO?$W{B{}$dZEur`i9Cf
z-##HBmEhr#c~Q<umZyt-?472wgEH~SQCm@y@hQ{iY0nHN^F@f(W3;Pv%r1K#y(B~}
zW}kTZ_%ME|f~(4G#X!t=Tkc$6FoeFakb!AW9tAMVGAf^cpuMAgr;0%J`dxI{-!=Q*
zR^6}*Q!jHH3nrs2@I*hco{^ILpJ(79#NVk55};NiRC<6Qfr4U7;#(;G_G+w)sahrC
ze%o@xLqTCi&C&TJro`Bl2NV$z@rL;9%x-SRXJp_Ldt6Bfg@bV(Ii`vecm70Ivi-mq
zcB;!7TCNkn$PBt${)R%ifr8iCH;6_kh)-+j*V62ZnG$iuY5Drs4(<!UKctr!_!ijn
z>z8KQcn#j5DWmjW(7z<hZ#HjKEX@9NUHaA{QI#&@SOH^eqCfIVdQA8Iv?%g_i5KF+
zQAVEa$dm7^g)d=SnQYZXY#3kFM8V?KPE2`e`4ou%YILC$uhN@~anf0XWMTG-^JDd+
z$X3d0sSj+R9bj;eGua^T$<nM-ztUjZj>8dFU+&-Qb(qsUYzGFmJodisB8YWkUIIX$
zpPp99cqvC$$({*&Kc?#KD5x1~VKR*wb;vyzFS}R%h?H)S$lXZ<cPz4o98Bnbakbm(
z_Thg<1BXYF8U;@TKEoLLUO#dKZW&Tj$I-U?se~^V--S^&N`2TaB=bbRap);X&n5pU
zUchL_f)PQS;8_21cYkkoJYPmTEr(_6U!nX{gD3H#&oKIHfhbJb=Vtcj5)-NSfu5oh
zqPgBPNSf)L;$4j~+`r|}VFi|~b{8yKwl$1+KeC``zl+RhvU=H(aFc#_=Vw0UE*Fjy
z5ZnL$^O6G(K?#G%EHy@Du}n0~qA}8#&u5d8F?Ez7i#PtnCOJt-4elJ-PhvA|hk7k1
zp92mq0TrVne(st$om?E2&rMd||Ll!>G@r!i)?AG9m%Rp(lx%$5Sh+znSW${mCqM;T
zZCdOoC+y>NVAf_ex>4{d3NhQItfW*WWU+1TkNZE1bZ~v5??$!ubx?nGxcJeqf?*~`
z%tLZ-872KcR<7i;{W(EyAMC1-oUjc6=3Rjy6@-{fGRrynO6)N>%Fb2U#<7L)s+5Ae
z+<IAh>nv43(gZnOxdE#nnLO=7hq>V7pXta#zmV{v@D!wDurh<RWLyhja0-h2br1a+
z8;O<}BoZ_WrMKSfCgH_cXQT7N-0q>(z*+MWu-xVP2kO=0aTD}q4mhaW4Sfrm;h`Lz
z3H14_BD|Y^qTBZpp3iNk5&UcaPF&3S+=k9@b*?dB!q;YtzzO|(=15&gYpWL(y~x#$
z)YA@vXwXyu@H)|tba=b23$+h?Ka={D%+6TEbcSDj2UL{nT0+!Vp?`5LM}bY(JBzwi
z65Ei)$L$LJ=<MulV9{$d4{xT89^!gYmQ<qgFa%HtemwrQ72Px8xX`XJYtV|MiLD>}
z8~8?Y0{_YZ`bA(dUK}ttI~xS4OL_sfp5AwFY$Y^8yq8w>{rk^;rZ=yBK`eb8h%<S<
z)aAx5XkRd1Y#i8xyL{vQ#Qc_8J5ZJ6y+w<gn{i0;au(iH<>d)e>3wy|Y>1ou(=SYr
z8nqE)Nzw<Civ15-{^h6IE2KgWibXP8e=-QH2ieX)T~KA?*&8{o$P0nH1?>*!IRE|H
zwh<AEA)q%^Ahx{}IC2%pY)rq*c>ZjCcy5$mhxX7u&rHoQ$CLr`wEFIBMkV0>L2=UI
zc1ba+t?-S@`{Uax_nKGPes_r<*X?YI-@_8NMGCk+ljK5Z^q6bBTGQ#!whnWD`deLR
zC0Wiee{z3El-paMW7e6=wI@?dENz%`(CAbq10FeewQXkV%Ty{+qnk}e1Rjrf;msI@
za_N~X-|j)YRQUUjPJC8-O=ahGkRD?HUj)^QH*!7`37-*tC(h{WU0>f|*ciCHZp*fv
z&9G>K3P-+ieD+d1!gdE6I=JnYPcw{Re5{HAe}WNAFLFCh{6GOHeA~WE7wy2yX*~R0
zG1UN(Z?tVYd6)i~FOU-y1IfPrStwc;Uq@|Vb3WPliDaum%ftPL=bZWOIpvcKE%E!F
zZYI#^QW(bBA863<^z!Ng%8PBhyY7lxucii2$LS1;bu*GA2Ff3Ykl5a2dm|VmBT5zk
zca8+t;2!<|mgh_4g2jmdH+ppW7e^y5b8A`y6boOj%LC~4re2o_$t(~|2f~nOMMqkZ
z$t{h))-_m9W~qB6K$ofJ@YY^+*7a=%wa)Y)02BN<vJ(VIL(d)CL2Z45<xug!X)uE|
zsju{|r?2U!>iQ1oME`pn+q^DJzur9_Tfnt_VY5%`?t6XzUBOn|iw^|bH2U6uH+(qV
z-pLj-vL7{xwn!BCV$*vmlEq_>?}ZD2xl|YL2wRWFXFaxT!elPfy1mvf2`&TIBfv1-
zZsK*E#|=L+*5~W8i(4NM0EQ}hqW<aYgVYWF?Z>PXdjI;z>D0=<28hGH|4vO}wx_uJ
zM+({dCmcG6lcl8OfL<8>5>ex<L{g65p2hVoq~E#s>O7P5g&*(3mr#d5>M|~~Yh3aH
zxLw(RKx)!)tsRMlB{lv@f`7jdChk*Hr6bN^HJnfy7-fjWu4oSyZ<+Ogw@xU3X?r>A
zVwrhfx*N86JfBTRgWavW<wm+^THspTyWwkFaS8zwt`bH*UWA7QUK-c%Ggw0u>V0%@
z7LGORH`_`Uzt2I05I*Bm$U;J8CZoz7TICt+WKR4Q%KZLFo*8~3XN3M5l8iBj`!eGt
zuYv%ddQ%UjGwZgsEJ3zJv-@h#BZ__u?$YAKHvd!i7(x;M-V3r$GO81*A>0M-Ig8NE
zDmq_nhesXL0LKoJ6Q00SOx7>ytqM0(9)p4Q)192O3El>!6*N31*R_|-1y)*Q$&k6n
z`mxv=LDu#w==UwInE?(tl5oGvPPF>xL~vvmS-^(T?Kn>22pDjDORkih&ZHAV6oeD!
z-9K)2kZ#pEJT>-)Uq1LJltwKa1cq6K!4MAP>p3{r>ounV+yG<Q9f$MV-^SNn@6$7j
z+<}_yXPIIudvXK6WLfqil?|x<uP{V=GuV@`<~l=YqL_6vw9`JG!(Nvj_oA3|c4L1y
zt}$MRibId1&3FLgP7D6ZIU6M=4?JB1?J?9uVe<nX^r^z`9v<KWxgX-=<E@Sngw`4l
zfzGlEq_2g$g;ebAb|UcWOTZwi#QqIev@GEO*`X#aBNFSr6Eyyp#79Zhyac&G0L4qb
zL43K?2V9jMF>n66wK;JEPy6wq!S&LQ?)9Yg#;4?hKDdfpFJJLNXJ^d0nLrs&!rJ!7
zEkC24f)>fq2iRz)CTH0%s+N17maSSEaM#jZwtn<o9u{K3H+v>0B_*+EV2Tmky4QIG
z4mETuu7aL?844YkQl65N*uSthy^*0{Yn1-d(PecXxrQW_{}KLeoq(TDw*SIOhw9C_
z9RrsDvi`F2P;q!llSqv7T2~w6W3TBxLbBfZU0;r5cBtcud<Y}x7~m?tXvTaCrtwQw
zOQhsnAs!`SptJo&eBjxNgTBO*s{N8?!0T@``Cz~^6ZjjsObFB$r+s%&xq^nvZz3dW
z4*e>u&mbx7AFaT&ZtaX-N3?HWle^Z9wM3Bx8<Q@`6z4LfH^okwH#(zgaIJssy0%I|
z5P_+17Id=^o2R;4di4)C@0c#D5;n1;53=t#62p+I!2RQQed2s?!t>XE_tANS?x5)*
z-M$CB?nfA#pWb*j-3K1Zgkn%X#IA8$Jsz`45lFm00lbcfo>o?EEM#Oas*43rcg&{m
zxx$L#3_JasZ`^Tb43fI4RX+j?{#J<I3iu1)#BSYQ`~a@?iNy77`m;emI(SzG+>HUq
zMxta%rK6%S`z?iLwyMs+Qjw`c+=xlJJ@F|y{icq(H_nTB0ya_e<F|Encp_!)kHFWc
zXmU%arXDZ%RJ^eWG@>}f0ZGK36gYYHpgWuCchtoQo?qMGg4s3ziC_j>_*OfqXMjjn
z+vSJe%Rkk^*VT0GiJAib&yfHSCpX!hB=h_2KUpoi$-%S_xy#|hYCyzp2;!D1;Dw7P
z8l3>VT{bL94T0M0*JG-I`1NAv@rRe)m;Pi(kf#KW*-Jh_N^WU})A22TdIChwkUuyx
ze%;*Z|5Z{>a=<psh9k6u>JNDA3tlW#x;@#VkI+@%x8a$fn7a9dw(yp*q~a*Ae~rc1
zH5+?y$V^LmC@9Nq8i5VUz8Cih8T*fWiU1uH&ODSB&wnbjDLn_UpHk%~)OV;YGQeyM
znaR3KZjE27o7mWavPdcia|5`Mpmg2EPaLf}x_7BKf~XnA;o;$Kd7l}-w*EB&I>z28
zSZ)ffqHDS(h57EwKvOtIcdptoZOC?Hbae{e$J5y=x4Oz^YooDpWfv-b3(sQi{zW<A
zCPJtpp3JsyCD_|2z%a;^Ae^VC*2u=1ABFoB`j+wOaSIo%NxE|WyRkr!5pK8q!PLcW
zBw4?y*9A|#$k1TTit`8YnW!h@g>e&ZBD0CreA2<d<1`pw^rJD+>|k8GSY6E=e$7u?
z{(A<C8i!aKZcKh;J0#WpsvPVqlpy*d4-~9%M}b)8It@!<h$Wc3Lm1`jW-{JuEo|(3
zXTlSNv^S0s3^9%05TGWTWDUNFG;%oa_ZjU2q4at$51%sv*yUj<Vw3XX4-c(zU@ZO2
zHak64o{laqcrO{e5YnmU`T#7v?;muw8;<B6&KMV6=hhqVAhBX59N|&y(mERyYZc-|
zyzLiM-{#*^yKn{1yu6PXh3Azc@qRU(0)B-+Ka&B|$16j>WE8sSw%&uO_QR^}-SX3V
zuKI$vrxED>qwY(<rH@q+q>dQoy3L<%yskD|?+%`yEyYQkM(v%?ntapz?=&IF<V5Uq
zHOBCxeCA4A81F`O(^Sv3Y4N3oG(yoh+K<HO0ILP<u#}v~HZd?LjFjb<dDPUE*(?+r
zy0@wjM<iqs_nDD}Z(WEpf6SNV8(q7DdIW>E+mYd;X&kZGS%*7*5jWRXz6ojbTOg9~
z?s2HL+y<m%5G?#GN8#rCJ!nm@(Gr6&3%BYT--yGRd#+-(2X!CTheNqRRO=(JEJ}00
z5?sS>Mo@9H@Q+RK0+Em7ZEfC3!`)<`F#?agRIw7WF)NxSn9aVVJfa_ByG-X3==R<&
zGQO-pthr^0e1<-efR>3tYUroDW!iqwph%+XEm|qFjgV)N-c~4<H-8iv2jW8E-AD#t
zzX~3{GsDq}>5~DT%yPX>82BH%FL#sis%JUPh!aFy#Jb6GqzIWqx?hbhDd(gOD$~}F
zoDThQ+Un;9Tmdi2KTyA^A3Z<(l3n7YCVaon9va^K*VngC^R!-zk>gFq_i?V;em=aN
zZ3-G8_N4xwgEXT37OHaLmTDSI^<cxiaLc2Cy6e}${Te9xUf6ZlNFq0B)ZxM9#XHJ_
zryuOVmV_rSCl~1+C?ko8MDF^T=;H;U&;sU!Rz+5q)<w9@6(`|&)l;u?AIZVE2RZaS
zr;xX;q@@d{dKxV3yR7}ALQBk!^Wk{~Y(50@DDLbe#W3;XYW3hK;K*qanbN4tfF`C#
zf`dfws!%t^&UKnV%vn@*TogwjcXTbx=riu^;f=`~E&=!`<m?hbi2LE|e|XAP`s_qe
z^c7!(ZUSUPQzO179LtLbCv72}HRLmXij9pei(V29)|Bw6`qt7@8HA_Y$^@osw>QCI
z`Qpfz#KaFEX1*Nt`{F+0&|+50YA6zZ58DkQJv~ueu)gX>Q)y_}3x=mQx%|-9!7<xf
zekfa?EXbTdP9%V7f8&@0FC!@CYOCwja>j;yRdZlN9UuQWW?|vuzJsf8p^GFpKaqtm
zOwB72%lj;#^B@h%b`KR^6cuCBTZt|-3$61Wn)IqZ^78Akk2Lgl3x-D~GXyvMD&pUX
zi3dRm9qXCTe#;brU+L^n!Q`XZ#_PD)b7rOZ?S)KeNrVR9qo2YB=LSs1=&MbsFHoqc
z=}2n<m}!=#m~XqaW=Hwrni=%$Wr02~&as*E=^KCCWLimo{CirF6HDOB_d=%S=GncV
zQ8n{_cnR@wXYXCTe51kIui7@2(7`w<F!6>J^;klX0gP{ZgaFj9zb&jK5VYZWe+Z|&
z?}VVlAB>Dle>7n6>xed!>Kb|yEY%t$4lNr-P$lwz0=+%8$wS6A%B^UfyU^&%%XC24
zkl0<-yEoI?ChaNavdwRcRrH3pB)#6yTQ=y9ifm3R<W{=1wYAy#`90Cp`;m56U<fx+
zeHZpuT!PXzqSGZ0i$vW%QcYtQcJ!|OMDME}I<v=oCvNLyED82TKNKC4JG4nrpaZvZ
zfqvu0PqqL&Qv07V7icp@jdkc{u2V-Zx0kd2PaMDC8k1aCiXw5#OMsS0Zf6{FWu~)8
z7SPnb)T>mGepeHcZ*%-JeN%5NUJ@1$5(PRl&=N&*!w=bfqblg3$!D9HLqh7}mPG>V
zo^Fy?$gBeTt(`}E&i{gu>XvkP8mtQgvoJEXdG7#7AvP^Nr8J4CBcGW@{VF}NrR|hb
z+S}g$uJ1Ak{XP9Im)4c>$EGg*$iR7HuZC*p$xdBvo53OxT;DddcD=L_ZF(@Q($Y<J
z<36uL=^WlH-*B!*Ip3{B5D?v@vJVSK9>-VmPQA!T%nYudBG>&@GoPjEux-gAls(b%
z1@<QVBBY3L2wQS!TuG<6V~r)zU*mbG>^!&F*lqlCT0yiA&8CY>*&8JiY^pHT{-MyC
zidxy~_UCQ%H?%<&4SJIZY!WN`l)h%47r=r)oBBsjk2!k-sk-^q+dGsowfXL7d&{0R
zlMvn8l+x$xsM``faxw71%vG&(08yL&ajr7zGy8CxGVc<(fv>OYQ?W=c=6nhX-49ih
z=QY0Ta5jIWg6ByvsB_Y*n9P~NQbN4LfIcUHVKu!3o7&f($Nn~&j@a4U7jyIknE#q-
zzPgYI-0J!WVGG#R96O;h%M7aPho)B1y$h{58Zqcbsnhsqj7s_BaIz`d&mI}O+H7Ot
z7h-6VY`{VbE&mq9625lXj<s-X?>J%o+Y`;SAT!rCf$zLk2>ofR9^!fYF7%Kk42AYn
zUedk%Ik~IhB}Ez5XJkZuTd)Q4)d@bId5yq+leUh*-)*J0EgsG7B_wJejeqOzcHn&X
zfUyjb1;6mMKOY*z*^|LX)6)?L`cF|JM{{M`Jga?rpvw@pOTc0XSSdmPIy(E@CUxCB
zzu15LUilX~UiP3a^4$&tL;;heNxBGMC$*KaXS$OaU3jzjp$LuBlDIbZ-1o7+Y}TIS
zS@za$`2CWBF3<9%7GDWI=Gtv)Z%Bev*o)2~l!<;dQj4yssc<Iq?MXvdXQQpj$c+@Y
ztXhlq5vi>#LqOd9DUossO<zV~)RpE@PYdCqP4PC2V&q$0B8@652ZtA7u5(=Rb<qR!
z_(#=!<Ydkv!N0^8fc+9d3#5%K?``>AvKShqA7(oUb>NqLfL`HRnDU!jCfkZmIJHP+
z>~q;SUbQ6$>Y}`*RNsV^X9T*h=>W1B%Z-HCAiNUWziKVMG+5LWW|n_oA8hx)-z#qm
z5AGEQLPBm^qFbZE&AE-{d`1A>?vNE}R@>7zLigqj`_}GSy8D32H6(EffLT3q(`qU>
zRM1VKj3gQ53GJ~a<SF4^hqQ<u`mfKc@Gw2t<g#l)g;gjkAMG$gAY}{drU8-`;KL{$
zu86w<t)46081l)B<Y19_<uriqu$*~KfhT*y`d%Xa^3L;K8<6`q*z9Z62N7=Ua15$-
zk$^q&`HS9z%wm_5dJN%XFPOXfdmUk`;!UanGje7Nz9hVA-5c$nRP|T;0E^JpaY1bO
zmIB9%h%6>wfF!6RI=tYto~FLtZWY}RYCF$Cv|;(VOF~$7{DCVEJR2z*weAcSO7I(-
zxX%BPXSSz%cTaH1U+xZhg{-^}qU#4R0NzlCQ+Xx7xk#F;%tSqW=4#$#zI$w`mOMts
zh2*BL-0nzW><WSM>}yQdgj#pT#Wv&9t95|R%O>&1wf9f&&VYRAJi0gr)O#t&9`|!(
zfihV|<sB6(?Ffz+t5=v3kz2S-T|FY?q7!BM_=5GW#d&fu!9mo+QI;)xu4!cJ!rz@X
z<ZYoWaQOYwo5$L-&CHN?wmM%~>v`m>_d}$9!1hCOOa^%>#uHu5^Ix{0YvAOvKX{%_
zjVbGo&0g}JA7<3u`WMV1#%LWRT0)z5?+n*UZ3SD3Busb6^qB}TACex?wUItPiIeWZ
z1LeKO$M|4U_-_3ew@7c8V0-D}uReVS0ebcf3!B6snJ7Owfx@UrdGC48y^lIHa`jL5
z^>AbFhcVEI=`sOwg)gYOpDML<p_8XU{s+~x+uz?+mNkS46`;A=XLRcId;Zx+4xvM1
zO(^C2H#yX~Y~MVoWb^m`X39s%y~y{wWFwXmRD~LjUDKE#F601qVw*!rC!B7@;^RFS
zY~Ww~5Lm+IR$-RLw5=QU)g~hA%^0V=-b)L4rkW`2ZnF+h&!H#74l*AF)N(Idu1|d%
z?d6PJVwhR=yXach%f}0@E8^B#{_fc!OvF^BG}m3*>J;JLrzpRoO)=I)IY)8m5M#bO
z_xhyYL2vSGjM1n-9}O9^s1oPK!T+FZMJiC#`Tp`bBYezUH(yCcTO2qdz){9};o&Sc
z;r~Po?vFuH!~`c);OU?WAe`5$FERdY)t$Y~=d$VD%=>-kLW8cSbQ;Am4$dTp7e~^>
zPA6Ko<zovQw-jO`KYyN>A;zi7LH64)w#SpRt0dpP4H{)Lh=Q7&K%CEMYU)dIzui}^
z`K_4<T_o`weT)FrZ=T7RhmAA59B&hL*b0A+*J;;F7$Aa~;<d(L+gpF5u#aQc=G{J@
zT_MEB9pn~3@iKwP9s^P_?(yI7sqI8MAI^8S-MOuEyy6p7p?a0D7keKNZ1>t9yJ@`v
z{pbZ6={1<<M?1S7?aJ-_M9Wb_0{fhtUN<YTO%JC0*xid|gYuwP?C6Z8Iekfe)mKa?
zL1gytzMO0}OmfE-yYMlsMDqC93B||}2Z680E#hV5vBj{5ks05UVq`Evlt;vl_NVzi
zYEYPE`HkKz*v&wp^7aCx>%jW@`k8lyA9}FZVzvaSpC5Zkm2LB4hBIc-bZ=_}_>W%u
z`cE{dd^<aXm1}fGjD8}z!RVO0q1}n-I#|sL`;o$rY7gy*^XenaZLgXc+rwd%qf$bP
zJs;2POg4*}kFM_)W<OC#SgC!;lv0I89cSgHn}&4J<0D0rf!;24L*1Kg&aDxb6(nm4
zZ^T@d<WNr4&vRjsWTnbh=jf|Wsk>lAo!IWXs8>HP>ZZwIb+AeRmEOB*+d;jrRnvG?
z82?)2-;zw#$$KAaFTH=v;$I}{1?}~&XJqk$Y}^aK^=ao+w}hPPFVbeOH!)|YO4S-w
z-7eLzVH1}=QM|U;)@j>wMdw}%#!H;jXVVFr#11ABa&N~DXRVRd6P-*bo?4eK`$!JR
zixcR{;OwD^-RV0a@7b8Nz9lV>-u@f^6#=1tspEuYxxjo{J#gBYD0Ix6`ymsp*MYtH
z*%sz2encZ_YRG`~4tRSiQ9ma!_mhy|ncF7+dRz%Zz`z%TeCO%#FLh+@r^RRu#O)&J
z+pXOi**UBWh@yctH{kn2NuBQl=r%++qzoqQgt(Q+9TD^gw>WwII3&hMx1r2LbVQe@
zy9C&(I#aZ2&zvZIA-B(mCj<vpa#Is(b(&!s2sQ`6kCv0nTVT1B-+*XPpeGkOrd}=)
z6W#BX!0siuj0sDzoSby@Jzu?MGL{!<kj5|nomq!m8fnQN_AV%MHKJH@u!^D^SDa~#
z4G#r8s+@E16@(MQZ~i+(aa|H>!b#3~ua4YH%e(Jn-UXG*=ZS}6Z^pm3DY+Myr9z~G
ziNL<KSSX?|$<1F4lR9n>-4I^jBkM-@38hZg@Qz5(+&u3mOpFr_m~^uE$t;g0$*Unq
zdfV9?u;KEqO?YPH44tR>ii7P1N3ZSFukMkrb}px@{$=ZcHXQXC$i~{d)P(JYjxKy9
zo(p(6w(h32F=rdPBCn3WKV7yMj{B_F<;7C2k{1J!xB%B;{7p53+_6=79ae&tmUJ98
z+UI&y3Pd-FD};F+*TVi{hzZlzYi)nZ{tR>1BFG*z9C7AH=NHf6bRkLnR#NRc6G)Qy
zoK{x{RaH+A|6@Byd((g&^j;wIck#HNM^MOw6C<03Dg?DXGG$G?Ye?v9+6n#=K+Bn4
zBjMJ@8>ux(MawwWg9fKW_sF$qBQ0qR7^)}n$-mtC$X>NFhNUEm4igrb2;IC_3;3Yx
zI@DK^*2pH}g1(d9-HS+=OK^ifp9cSV-NIRf_)nY{3ufJIzxSftOh+MUc7D`4kFoF{
z@nh95nrIOm58G0cpDMn8L?;%I{MLOS!db`NF`&eEYv1->7K$eWHHt);PKO?jGSC%R
zM%gfi8gXL%s#BgHITlTC2?jyUXghIDrQ;+7c8tXy&IVcmy^8Z94S74-_MWE;+J?^w
zgHI)HLqXrSOiVn@Q<<p}E8JTJ0N06udoOzpQs_t<JPKx^uo5bAjxUhkOH?|g@RHcs
zdDU5KnJ0bE_|1emZd7pO^c3<@9vwbeOYC#c`^gKajrz2R!ITwW+6%r8+12k6YZLC-
z8=6BthS*4@-J*8AZU!rkU)p4r!bMZtbsRShEkKC%Io}_v!@`WPu4ze;?BJ#@X&8~n
z6q7P#W=7NVmt)6ODdi;xMkP4QO5(xQhBl9<^0B|S@CPzR_9EdUrobJ(>)dO{L?IPA
zqQjg@6y>r0j)uB!Dj}*iZcEpD%x|`RyGE-o{9p2X-0(=2Q$jOyI|=FyjfF496Y)@x
zEV99D&x1Pm$+Czp(p_F8V}X*<Zh7Zg{AS~YQq5$}Dlln0hTnu6PT)t`EJ-}FPqpf|
zDo0^s7CP)5r^h{0y|t4{c9nmnHBiq>*3Rotg;rNO5}DMmP%=2>u*@+!jAw(Mc)Jv=
z;Rse)I_$JWvC?cqyvAz?rO$^aYUTFJHS$+(arBT`E(ra%*WaE6EB4pyW^g9&8;+c(
zeB|-eMY&h!kC}&Ho?rO->Qo`4)e+a$GpQkj0dFw9ktX)r0a)!t!Xm*ri@u}%v~}UF
zYkyl-!ScLc9*~c8mM<>g7=Y*`AcP(q!P}K&uI~xM@Lnj;r{UiSi+=V506=PdJs;?W
zPXQSTDH-3@7+->i3l7NMvr@%2j^xN<N!&&Z3`tF9y1wkW;mE>MJ0zJ(?8&IACi)n)
zIptxo$)gszOZ(2*#9UH{Eo?)46Q_9Y6psbO1m)`Q^ox6~7(I+cMxm&paXmM4=9Y~e
z;^i+IAk(j^p7wIw#a6EacDmY^qmlN=%fT3TvGDws8Q5b!HUo1bXFF7D$IrPNdt|Kk
zuvnq{->toZnJ9oK$2Eyro7?H5m$8AwF=P<b<w;e;E}%HLPX~Urh$!8k86geet_qen
zt|9<Q?C%eWy-0|+ZxNk$XAUwfQ{g*B@n?h}B$sNO6+Vo6Y2-yep&~voV~qPfpu3du
z5)XQ^e6M%?kw%gU9kd}(&?Rz%4<jw_F6x2yKKDAoIaivE$ZMD+?|S&UeHsPelH<e{
zq&=?$13k3FqF1WI57FX3m&Gdhx`j)FtPGrb5AYpO_ByhcuZbi&l%#Xxag1HNpHnF#
zg;fI2n#Km(F@d)S4j03&Ec7h3@vD?hipe>QNaJ+ICa!tFdl~zel$u;s%SU7%me7P`
zy&=N!Z}i3`X=LdXw}q{v*H#>%u4i*{9rq0DlJ>c`@xaU3H;||1xhMrlpO^|Vr|2TY
zqF&!R%=sk1P{I^XEE6{3d9dus83G`DlRV|h3SZTeSmAsC^-JD`&sQ)q5o~TPYs3s#
zp?DGdzD~_V_G7j4Z`0$rT2#Y8bPd4iZnqs}8fNZ~9wi@Ud|Gqo7z?q71IO+u?P-5^
zPe<QvOU&bi&;)Lr)khySg8s;5zl7BezQUW#@Nozd!@{76e_fLVsEY^NsKQcUya4$7
zaJEpb&iim|ObWb4&dFLX*FY~Yvw<3S+k~Q3gG_2_;A{}uAfj=<=TkTcH*Nw-L$O-!
zGbrt4%lkeYg20CQ!ywt{^iOdt-9uR?f*;PVf=#*se=6M&PGZ;i<`wR?r8L;bYG~6V
zw;f1O5@MkI93nmYX&b?5@*%JvWs$7@Idsc@JK!2}C&!6TDisVHdYK1i*$4oUoRp9W
z7}OdzYM^GZsNbCz64zrvBau1#POQ65u(bUoBolk?i_N{7TUdx>BG?We3hY49{kX94
zK4~<#t}ZYN`_XrcN=<$CJxT0O3_xp)#PZsww_JW>hs-zbNzTBZ1YAbuR03l;*64Pi
zNaa6EHgxf8X3*uOWaduM?kIhf?+afODungMW6~jHN`yo#eSt_NMs5x!;_nf9rgQja
zax2~-f<pnSIR3?dMXrx<M^oivJAcT(y!y>u?-=2o+HRNyfRKe_;qUJ5=QJH?Lr_fz
zQV<$W)(a$Nvb9;yhr67H2d{xeew}j#@Bhx-*<0bIpRmThO3Gu+eWhmBCmOVDjz*)9
z_g<SaVo-s_S@@5u9N>pT#g>Z+A;|eNFZcRHjhiYdiTx^_tGfoJdY&r!ZuRFh2llh*
zddh)Jmer5=L~43M-cZ<Z#doLCdtgA|&9wJGd@@myd+$?6%)4yq%>y!`(PI7e6SfL-
z7Q!N_06@km%{Gp}${anE+0#;Rm2BO7Na_GrKe2%ZnJT}!MKXb-Hdc{xQQCg4zx}ay
z+%lldfA53sMEAr`fY!Bd7+?S2RWx*eEaqdyq{*~yXU1ToBDqBT1&_ubYPDI<VS{Q|
z{|cbSuk=&e|K1F-=5d=XO0&=c=hZJ^1<_0*bRz>X%++hJzmw@H%(x{IzkRT!puq~K
zpVSacLXC|b=5(1wzeX)ohl4Hh4X__uCx}IAL%tp670MWO4;1BAGp(EG&^HG3-+OL2
z7xt|1&!p%gNQQ?zTOx7{w&?qyZ`|zld#^ntdVcifv;Ag_?owMt_Y^YwdTF1r@WvyY
zG>|s3ywG8ej7PDG>24fO%L{OAm!+?zP%ihz79@%$9Ov5#Kv#B|++pNho$uWoul(6M
z;BuPs+HYf<a~x2S-oo)so;A>$2eYP;AuJYsDUQzYU1gE}<kCM#e~N=sj~}LE`vy<L
z0|sgvHuTMitV1X<&t_{-S@|2A663P*x@FP0#0FG{^Uy|<s>#W|rpgkA*jp4O)c&LH
zJCw=u){iL~V9poUr!7B9czqfF$8P8BPsf&MH=U^}OLPTqf~3S@K&-pU0Tt+>$0r$`
zK9jc-w_NXm>!;~wP$wa&Qod0<99KE8UruMIwJZM*BzZgx!n+&fzVANfWYHlZSs<mu
zCMqUbzrB^jCn`*!KU=AQ5ICE@eIUjy&~jMri!Xf!a`l^TE2CCi+d4V%iftTwj;ApY
z@;T)Ss0Qxu#fXoLjqlA$VekwfMw5G>b<BTvaNwpy>=;`M1iydv^;JC>)gxz-BaTei
z7L5jAbGCYzzQ@OM+zyUE?zp-W?ChY_4{uiV;odg+CQO`Y@?{ylF8<Z?nwD$0TG-|^
z5pm>W8NTS62{G=2+SK1lHSs2Hg`*apCA<9H`<!6_)23;OCdrzX)t(lDhy*`Es=3)z
zg3lBpRb5&st&@U@qvvKh*hrmdAwTb@@cVBr1=0bfnt?3=SiYk_MQFaj`-XvwH=X>{
zJCS^ZMqS0yxrH30oaAgzjLBG%VS3_9e$~$UPux9tgWTx0Vn||rwb;sUH;XYtd0mPb
zGT=tj71Rh0yM5?3>-=i%wagRZ`+=X)e^Iu-Rxo-kj$Ya0TpcZtPG0NztLFRd=w$N|
zVOOt35~0Rzz}^@g<Z??#jhc59q%X=^D{6i%CF(vh)5|%dI5R9Wb0Pz+1nC#k5kLkx
z60q(wK`#MINT)$C1ui_S&9~P64o+}InS60+b$Pc<ZW4}`CXoVUuoV7LPUB2dF`Wk^
zpU>Bzvl9!GzaAe>9VXKbUuUJp$1<`YF?3Hn0nsTEnO4cS6W%D;abYOCdC!lHA<FwP
zw3Z_>;V?>1^AQdNyP_zJ+2se?!>4Nf^@>u;D`-Svdds*!kgHyl&1^#vN2WYXZ^4+B
ziOz{UrL7%+D?u68MoeQss^A=8v!-!o@2?$*X6zLrQP14&<nQ<qO$YH1L(sRe%KSB9
z@=64?{P(a@%e!8KlTEjqi0y(%HzQ|o!<co8scx?h_21T(^(YvJvoXlf?Ed~y*E3S4
z@NUFX>@CoxKOE8~p0lFSIGwi)8C=5Mo#}$Y63HMC3uotjkuNudDey-Jmgp~$Fq<Xk
zffLUhmzg|O;8=x@=`~L#aFps{1R`7$gcDF*IiLtE<$&Pb8-(;Xby^GGt9u!Ia+$96
zr{=q4<pFu*Akn6yqoY6f%O;6Jm)#2_>yYs5t3^#!0VZ^8Inuy4S9gDivT?<IMr6uo
zO<koI^tfivCj2wm?5)#fSJDD+fcz06SMoMjyNJV48F26Gh232Jowe~V`r-9be1z)J
zY#xOXCt@G{^s2x(a(&wk8s8L!HohQ8P$X*1J_9(W+JjRT{#xv5h;w&{e&@UzHw_iu
zG13DK2`eU@zxciu&k|}f()&*HlV7R*ZWVuY^Sy;~t5%fw2hYtng_9)>jBFe#ilD)+
z(`vYuI{4KG8J^#5_`BxxlXb57%DD}m(9j6&tWBn)7VQpwd2j0zl;zmwkE-ib@JcO$
zx<VuUE3qfy?}Eg9>IOoI5ke*wgZK`A_4%ksF6kgDT5`U3Omp=T#Onw$pLpD_gx9ye
zZ-zz;M*l$^iAdpf2v5r>ez1hzKkR%Mem-m`7YThW>(*Da`L8kxjN<J`vp{HVh|Ha0
zg0ID#1quf`Sy4%Eq%|Y}aC!)=H)!vJCYCx4m1ifzUV$5AjPzVJ47vb_0_47bFf+cn
z3cX-<u5{jN{7aB2L67$Yf*wU2{3bHm7gvN^ST#mO>Qp|JS3m<OUC-Z&gcV_`N?zlB
z!6`S49D5tlVbfBOT;rp-bAo0VhJmiFx}ZmA$q2-Us-w!7R+4rGvrOktg?Ovm4@-cu
zky)bt`)U(&ZM7D~Nw;`Ykrk6qA;3?dH|Bv)lA}Yrl-0(j_v60a?4U~fWiOUhXS;7l
zk~vpwW^l|@S3MmTs|jA<KUwt+9@F&}hCd?sqbakpt?%8jF5fh`T0UznL9f@J25?<H
zarGw@V|VjX@Gl%Mox|~Q|E8*N_}_;O7!0vqVhqvW#BJMmy29`KJx?#XeP?S~Ne$Ih
zTSm0o%Qt@&KiZiTCnV+1E*MqFz<O!N*j}QLjcoH8;ROCY#9OLvv94{^Z0<2VKQ(cW
z7pm$67<B$Wr4_o0a`oJRJ4K*ez2&Y%UE`>r<-^(Pa7-91z98uc)X$gVK&j1*o`&aD
zy19+zNQP70-BqQ&P}hQ|FDG<uIyKI>PVQF&DD{Jmm!h9<n}sV{mCGYplvf+RRFn1+
zxXXW9{Y{$p4nz332addcB@Q}AqGV(MjGXY;6L%<>%hN2YQH5unkxsLM743wC_<+yQ
z=%0*GS|g(xxf*!(pi}RJ$>>)eIYx-%dmhKf+?uS5^WJ7gywU%D29gBpy%l;&=}18|
zaqN4a^l{FQ04&%ot#E%kRGHW8pF)%*2X67+y2ocaWpct0HI9;W7F@sh#NEUJ!$<Ep
zx9_@hlh|W8zCHIr+wLAJY-#gjOymeY8b0%|iaEv7EyhB0!YD%1%h(4h+{xXgKsz{$
zT$As&QM^MSpZ~|yTLr`wY+Jj5K+xc>jk^;hxVr{-*WeJ`-QC^Y-QA@F1a~L6YXg60
zpS#bw^$JhD)~cFw)EM7f@mZYtin}DRJ?nC9=3xu7Wt`oX-^LS^Ecpi}q579G^WyV|
zhg8pC2jLue9tz@jZPESHKJeoTq#$-1Mu2UJXjuxTrJw`{p~Jjc)?vfEDZc!Pt<U^D
z@kr<@f1O$vz~&(Ae?vvpd~EMT21`|hFByams0|FrHQDC9oiX+gh7rE&oyN9D_<^x4
z<zf2DP=T-n)Qs+X-Dy0@(GF@E70opLm<%TtyrXhu9V*!KfZ}9pbpt^_Z^a3oLji1A
zX*EQgj;54y-_FdZ+9R2Ipul#xAIzSQD^C-yy@7*|YcP$aazYewD314+HGPl1ZY1(N
z_w4uJYGYuWDtG^|d$(t6Chv&|+ay3vTRgy<9-U9)2{60&UOee=HSp|aGE94Ci`Q4&
z+kq;Rs}+!G+XY|iy)bFt|C}qMMhs^RFZOt*kyl0;APGVKK1(HroL(Ziz0F?#O=@7w
z4>EbaMjwq~`MbHC_(dYhfd4EV2@#L93}Zd@1q>WDxldeM!_O7gTfG8X5Y*Z8ER*55
zW@)~qV4;f>58h=rTqRQ{O5@g*{2#drFW($ySCW|SI|U7|iC&|AC;YnC{cvg*yZ-eK
zA;cCtVf6>X-%3_P@5FpCgAkXil&KuGT<=c<ZU~5u_k;Up7WX^jck$~ago!WO__e|v
zO&%>F8xL#767P$5+Up$fL*3tMvQ79at;<FiM;ewj^V}E{$V&wmS+QUPb&RublWW25
zteMfoM)PSaYiEf7qfg`Q^8UXgPlO-CtZX}4Fz0ry?$xR?mtVqGSv+|(Ybd~tOIYyN
zXD|FnLa68TnRzy>cBo|FgjdXM>JnBsUGmL8`?3`E<K^+*hjTC<9n?SsS-nh#7|f>}
zKUGr3&;ylbw1bx~-0w_BHX`#_<1(wDq-{-9SZYDr#O-QHzbpRo0pL0_pp9~~%yuTV
zVLs4SHsAplVpw$}9AdQ<7+ZVvx(EDcM-D}o>Y_<79d{4*8+Wq%*3W&ch#Gi<X@rR=
zKMf&V-v`oG<EsrD@1MGDv`+BInKY~yrj0>tS26Y<%sejh>W>i1Dh*EMnV>><vj<Ue
zprd=kJqvC}N$p2dbU{FUQ@@GEa$ni~lC08VLM0LoI8(Fm&n~isoES%yO=uV<RsYe0
zva^QQ#Ho1Uw=HgX+xTO0lcG6O{eg0SdP-DVOo;IuoBu;h%m{KAn3vtTFoYcb*maB8
zbrYnX=6AC7{c&xCVUeaZ3-PD<d0<d%t(j?@XNqh0X;fcCAOk;=eiKy+qjo3^kvraG
zjz-{`?K?W2jJExXg0BfwW>8T5m-l|va~SjwK|1Lla%I#n;7|iO$(1c9E<QO}@*h3z
z{dnz--X`(wa}spM9dn{q)M_BIw6bCqxN*<=>vDTI-Ong7aJG~cp_-~2HQoAw`_=n%
zTHB2jB4ZDMH7ly=OQpQn-rWSxZDxu5sElt1&QjM-F|}#HG~xnscQHEOhVJrmEz5mW
ztkD4ft1*|`DbFThTt;(3WdeJuZ2>hCsbD4Q^?rbvwT{l$U@isPQZ2qPawarM@_y;-
zFM9eE8a&OMzskwtk9tRv)!`N()zl}o6ZS;zJ%=AInp2(N#2~hLc(#5haZQXq`b3!x
zvB*UXArIURXUAv7`f7E#4MD|G1yxdKm?xjqd%!%N+8<i$<u3ShNng_N)k>fZRA@G;
zYH@-a2k0Bk)Esl8S<;wDs$m58s^fNPel~S!u!o-c#bB9N#t|=y^j$%9dnb+FH3cRH
zurRRRpYY_qDZMzU*4JS+7xUx_)irL*Z2kbDP<d43JJWA<eu5~p&a<SXj1m6^n5bk1
zWQ2QbOsq#kMZ&3p3~beJDPIMHu6f%$fkPz?L%l~~=`gV)D8><BYoBpB8LZpENog|K
zn$v~^Tp}jX&+NpfL!C{%(=7(8GSzV|&qPj6KpMMnyz{}WNvvG3C~lV^7qOe=z<%Go
zvx{TryQa21sXsogb_)E<4@Ak|!rDEw$u~|d)fsEkB}&B!Y6Boi*_%A3h}H9@_LR9u
zsZrCm_XqF1pFPs<==FjNMc*CXHjJ9@m1^E}Qn20K)(_m)9<|EsXXvNzIr2<++VOmB
zXqoof@pXxEgV$Vdt2y&aeLoR@{4u|-Wpd|!x0gHc3uEDud;#08AZ3U=r!<0eoM**O
z>d*KBja=f^=+RiI?cmF1e93cu6Z@91@2^JG<Ujsb9@(K1=ow2A*&TISY46>9&2w0|
zAG=Xa<L-g>ZF>M4$lko4ZdD^4?(G=+J|3@K_a?UVa)x4qSiU~*Rm?q0AMFy`dQ}~>
zUD_wQkMPG>qne=oqVMSJj7FeuSOv@m=;+SUy`f4%{XIQp6UKxizb4Ku6nLNdd+afh
zc(bSeU7S=hDzNv>$r-5Q_aIBWww@Wz91HsVwDPR+7WmQMQRy3gaiCyW*Gko9X5hrL
z2)ei8y%HcE{lkDiyV{A{(MZUrslE7Uirc+yf9Aee%A%8H-$lg|F4((2nu=Aj*Efnt
z!-0ZJ3pa4v``R60B9MID;@Sm93&-4?hjX=kJHMz^LH;hki+rvUd+JaIyUVMR8z+-z
z6*qJWj%;Y9nQ=Lw8^tXk1&)+ve4B7zY0Gk4{cC!j>@9B7(I)I^O=HY1I5TV|Jk#>U
zaf=AH%8piJamc!9RVTlF!nliUv^>MQ&Fa?N(}3$X`E@U=*6Z6b=Sr!_v}H$&#Rgb(
zI*9{Thye#217QRZMlU1Rb;g0L=Za<D{uRVAp^Jr?A9Mk`U6|INua+cQv7I!a8QY*z
zsVAC?eBZGzdJn-9M-<v?F|xY$E^X+0!Z>IyLj5AYkdL0Vt$>0q+1h%N@CWjBa^Y(-
zIGt%%B=m6LPDoWzGJzV0A2M0>a#g0p_EZiOS#xL#f|R8Pg24zPk>iteqT|vs6r<my
zPq*2SfBkkYA9{u(Tg02763z*246)BZ(Z75Rq@vDr+DAsWhbMG<%CaD-7Tk~apSK{q
zV^Cn^XTqXO&D^p$3)=C=Kql3KCwW)C+>#4tiTV!QI6fm+?s@`X5pSIVCL6GrgmQFJ
zP%PGqrf-qOa*j&?SXi;ey%1MlM;^x4xt*@^k-bsCxG!Z&oT))*a2&1H{ha3T^3B`_
zr`c~WFwVNF`%x!svZjr|ylaopt$BQp-nd^#c;x1QF5nb=JN1dcyQ%fqZQDOoR;wdq
z&i4r96kSR8OJ9t!CZ*PU2Fh;hPYX0Me;a`S=<m0-i<i^uSN#uIn9ElD8f`Dri2L|B
z0KnHv^|hZORz@h$cL)<&j0y#HX0+HP3?xK7Ke{`nA!fZda}LvR1*n&XS5f{$n}MI~
zvwVB>6xvO2y8IO@-(l6c>#B6Az`8ZqVzT6ixjtn{l~%;dB$MFQV{h0|&odnF?fu6{
z1;RTv@O`UY!+rCp?vCwJY|TBl|I8Nz{fhiEWOXilriuZ0Z;g22f&%srVJb#X<1mhO
z2qn~EoarP4pOMl%y!i$IHsS0%Be#U)uu#bvB`0CA6#2o|!5!?WXP*l0stbrz^eZG}
zaV8&rds^B3gl5x*#r{L3qMlw-rVs%b#*oHO6??YN{rPqOsUCoi-s}uY%zcj{8!ks;
z{fat~pwa`1*h*SR-26d=0rF`Q8L<Q)_`5|N-%|0vwJVYAPpwXO>ao@wH@p`&$0HE7
z7f;uZ5)e*FWH6;l><Jpn4v<Z&676N$_F%4|E8me@#}&9g2+Ve^pq82TOuPdWb;sud
zl_op#L6U%CANv0}DUx%HpPx$;+JtK7&^nH}rAwkYQHR4g*^8$||G5>E#y?d3OhXAj
zsN6LvkJ_;cyjOcw{S8ox7N%~sH(B-xo6f05mogrXxgJ7M+<)@dT#_<!TRBN?BM_~n
zz)@jIGH%{Z<v0OfAsnNesa3A{)*TLw=>1v7K9)Ks4g+Zk!o#H}<y9lT5tbXb^PUO9
zQNa6$OA}P*jC<oAiwaW<H{|G~dO=>LHkXx-%a;olDN>_AOz`};_N(6p7xBmeR7zcS
zB>L_AN}4tAE!geRY8r5>bgQ+2r_MNi*|jc-g92r3{6`*Z4=9<VHtY)x(IL!{aAMg3
zp;(-U>(~ilL8&U)D4$(L?vaH^_4&BQl9A@AhfV9A_C`*MWIyE#ymT22OW)VW=GYk7
zAi|g=*B|-A?EYDCvIon41*QW}tBe={!=9Ti;`UbKjg_<CeRx+n>{#f|!2=cTCkbQ!
z+1v_BJrORt{>EBlYYY@)`%-Cok&|nTxiD?1zs!<LT|I?j!T3jQHEPqjdlwTsu-f&Q
zH5vC8c{Fh(*Oi;2@Ib;S*bU7<Y5HPB*Al!+mpRMBn>Y}eC@BYBdtL+%`ugx)cmky~
zK9&WTX*z8O43P0s_#-+F6a-C4zp@I6EOF-5^dh6bcr;u#K_Hsln%(vRS`bZkr8$Br
zKi25#x7r0n-uAJ6ehq^v(!iZF_m#&|qkMVLYl5W`y|9xXhaCnRUV!Z-Bm;3(ywo33
z9D<IB5t{YgLPONy0Qwr{@bQa+u(POB;lIVjUy9!x7pYWyzo3@iNw_;Z+al4+P>=nR
zfR;f=`%%WYxgo#V>cBro0kjuf^1j(K=Rpk)*J^kG3}o<+p7R|PEhR@2A2^taLpn{N
z*O<>fsajuJe0t>ee@XgvnHbg=#5p}XqonLxk=j&M;9#uyGh)!b&i%u*Q@nihPU5dy
zROBIh_3V#|Hrut;4tdbUqwW^2kioT4>#sI_*AY+|yFPb{#5yrKK#Egc#T?D1z1Lck
z(>a&RFlarN0vylUA3<q(iUTTwm6K;$-6%EBo|LfM!oaOdrR@LMjYID6he7(N(%fXa
zBOfd<bYb@9TX}r-NK!lqHLF`|Q02h&)(Cg?F-rS+0@qBZEe>Su)Zct51fRGH+M}pi
z-l(=<YVr!aq8e!#P9U-JKh@HXpQc;Kz8KTrd=v}bE7RUQLX~Ps6_2CdZ}P(S_bnsU
zcN>GVj{`EOLJkYb7<f0gT4E7#gr5ag8pZZh$k(ncNCxD;aD!*0g=C}2GBW7f@H}T(
z8>gvr9Ty1nA>;oFpmswiV@WrG=}<SND+$s%eSwAE&tr(B%E`nqIT_(37O*{Vuj_z4
z-d2r~SZCykxA}gn{O}2?6zX<aIEHYaVDHxpK3e7p%?w?S6ffv%aAh#F0UYW>dLQFc
zMIHOTcR?Y;Vthm1wg3CGHMRh)-%wH}k=Gv;TaQVTs<l7y;Y13%YuIlPoLldoY}?*x
z*WVs19cGRMGS+n|$VKA>5@^GTZgfBs0x!GHH;ot~Pk8P&UemYN5^I?c8xHTlt)@%z
zGg)SLiM>97{b$wpwxhipr(%Je&t6}T6nw#=U=-Xf_HJ3_Mc)+i2NQ>ET7=76-^jaA
z)8m7olPhP(Drdg=-uGMSMIxJxZjCJ-KNoL2o4rz_e(avu&rBU2mBYwi!oU2x%rQuH
zZ*Ia+>3}6KLTP7I5}iR4lHR`n@2|mx5TxIWDPWfZe=Ux>kf4@~eF((o{mE%lIQEdr
z`N2I(pxaI;+R=N?aPU0oRTjn8DuhUC^u2~o`vN1J*u1B=i=H&dQfKdBWKW_dP@doN
z7438lzY+c=am>BpQ=Whodh>0yojaR29{uuH=#1EZuDOP5nvD5{#p4#gVP#7eaVOb_
zQ}V<^r{!7jD_qV5ZVIG%=%i&JQK!*Ya->f~M#{9Z;{JIBZn#^H(_4<+TaVK<;Ymf3
zDQ=V9hsqvgbHU-+z5H+DOdsmyGktNO+^RzO4MJ#eUmVUT8l=NjC!zaYpK&k|lqKJ(
z_yrns34#VVnl|se&yN!JC5y5aaY7iMn(3mgjhxiC20PXt-Fl*uvjwcD%ydP`0?kYD
zp_UleaMo6oHOJ|O;7KzJx%#OUFZv>4brgl=_WHN`UDzapzwL;3Kvxb!*1M={$vWzB
z)ntLbYuqPl4+U<6;>VF(&N0s&14mr2FRI<H_CLYwidvi$2Ed>|ea?g8E=xk=pa1mC
zjGmf!WQ?gMK)!i0bRUYMVM45SY|gmM^r;3xfyaT(C2_4Kn5y(ykQ4Vj0MU}=;R5p9
zQ6-_<dGO}uEc87x#tU_IZEd5VSn$Y`F)KDDWt|Xn_&80#m8j&BV-SjT%libQ%c8ft
zo&jKuT+x3qU$Xrmk<-`jIW<~z=+JgvLuC*AEOR~dLt*;`9F_mF5!lH8qz5`Guay8N
z7F>n|)+>t1u8^9ZV6tV=MGlE!)MAN|aupcs_}_p(>=))3+&T)0*U*zL2c+(o(+v>f
z3W)dTx;1BGLDJiO53GFp0{il}%7j?mk9!(dxtDznxgRK}A0W@4ZdbN{zTV~M@8=?a
zDYHVS%(u+_%<^$>H#&tbKM@qG_LFHJ>U7CrZ@P6iLjPmryowT~yq%gyf!v@Oum(lC
z<gWhOjT^s=swv$?`l?6q$kqryl!C6evtgx*@I6aAZ{M;Qfdr0}ZXC_8iUWK}zi7A+
zD0H6Zlh1q6efgfJkk(eBZp>gj>U$aBw^o|w_>0Y(bi+Z3Pf|9|<2UaPhg=pHNn6ed
z^{ZK%OSKEAENjx|`p4cOZO-SW#`pb1c~%#SR6(8GL8NkiVsa~7&cvhq(2n=2ln)jO
z;`0%v3)hp|K_ot$Bk#vo%-5`;zy<4w*Q{0TYGCa6OXi+|3ObT?c4ZQb=8rmjDyvjy
z?&PC`C2DAqRK`PCM|muv7IW)US$F-LLgF-cO5?IC0<uX&t<K~Z`I&<@VC6#Vu}|Oa
zf`+fj8)|1qAxjYscYUS+Tm}{SknLoLl;rY4KR(}6_u9G6;1}XeYEht8mu8V9HO+U%
z$;d4#umz4jYn>VXxi=y?gec)7u>jgR9Xs9Nu@`L-N|@I{NRWKAvXEmRv3OCa^Z2nG
z@R-~hb6q>sOMAcv@jPL{P2?rlcMVy`+hSK|uVC8l%8wPsuJ&ykviX?v*fCb5CU6Au
zqjt5^117Nl$||AdB;u02M?>B$-zdEQ>(Hn4R)%G0ccp_0g)B9n2jZOt0&_wDrIXTz
zC}Fco6(mXjAq8dSVKClTkIi<iV=SWpLFWcKDloJmhqXapUd@({2}9J9gqU$3GVEm>
zTfb^?d=q&td>rdB`Iw9oZljr28DkKJV#(JOS<-RJ1V5O$U}AbcAQNlnVa;~bb%qDI
zv}Xrn-Q)DU?b08n9$X87PErNL>?jopdMp&8>}&@X1FHBg^g9U9GcxM7K-}VrH20}>
z`{4^3&r=>vHd?XxHN9Xp#|IJSqBpkwNz%<{FPtjXuoZWn+5IMF%}^jk>0IImxWAQ9
zrPsRpR?j>ja8guj>;trX_P`Q9t}QlQ`*m?COFuajo2vVK_6uEz-(C@+$Kg)p?5B?J
z+dZXZI{`Z6hvbpN`T6;`Mg08%>2Ns+M7&Oiy^(fnZeW4Ci?jHjx#x_y;!C|-dJZOU
z#BN~qu%J2236<PPTRXxmuPa1G$z@131nE8xL4W7H=|uLQwFF>`k>{VlTR^Jf0#t_8
zvff(<+r)~d%LeXty=PCWh!J}f@IeE84Sh{3SJ!feiu@;?#h|3`!y3EK7g~5Py}NW>
z1I%!|n{WIxnLk1rEols24c<cJRvItO=yjN3;NZlL|Nb3bJzD+ETZ1dN$9wrL<Ed9b
z=M9El`+<G)<6^y-*WLDc2AOfFQV%?+%K55)aQDMtGRoa@=Y2B%S<8Ot#^=kaymS~u
zLVf6IZUF0nIi`);(My3rVHa;L-=!}2zHE`os2$=`kM<akyF~g=OI7a(Eciw1@UXGB
zDMVdCiq0rU#gxZ<guW46M#3V)_=Q*yj7BZ|T>o1?-9ol$%*%fr=b$?N=5}>~2a9rF
zF!`&7&nCQzApweo-AN*{e2&QP7JCwCPAmpWZ2g^?<kr~@z-}hu4O|i6MNt-(VKVY$
z`_uw~rK7lsbccko(lsX~b`Y#+*PvK_F0MNcp+=SS(d%-={mZ2*MAXntcz*t}YW?wZ
zllZy7ch>1}Mzyr(ot@xHA$0fl!~20FoEYrl9a-QMG%bLEBdT0o+N+0A7k>P;cZgrh
z0y*Zu<b#PtzYfD`COr1;c^Sgw``1a*?VS`3Jd9kdbD{!{F!=@`c^wFFZIHs2oVy8}
zOfCoofxOTJaZ>pg!*h8T4WZ(z`yDzt_oiRvS!>DsM~Qvc&l(ufhR7-9GJ?DxH(IYo
zziE0^X}2N)d2eNRnr}wm{*?cy2lBrHNd9N-JVT-hzP!9Zs^`(mGe2<=8(Sj_6W~`L
zd%#H<VDWhl<IB<(%Pf14Ly#L%*L@P+g$V}~#(%sHs;Xnd18QfW;yxquyJ>)O;nz^-
zcLJOiCLD$X6u#EZP9(+`AeQ(Sa{>5X02qP1M^(4)Q(q;ZcI>zhK-I2fBTLv}G!=R3
z&dbC#wmzUX${yqq(hq&)+3p^6Oh^huLteO&y=ElHzNh|pO!Fo29vQ$XQ<$g1GTn~v
zG^b7kEaR0-4oxN;4GV6=JjFrKS8d<ctMwpeUAD4y(fqqb%tV{s>WqUu-Q1^qX6U&=
zA^D1HL`LmBX*7_#wn~4&9)}i{)x?qj6RSRtfeZ<SS%Yw%MMwJ{Rn}kJO20#NjZTt!
zYo+$nvxYH&{go>yQ<Blc@+9Vkg5my?{FoDzyWni>5*8!nRXEyF;+8_pi4oo^<VVbI
z`5azcs$8#xgty0=J^hf*%P!;0p;+JbOjO5H&b{()z=GNh<lBxTwY?5&-^lkIMgoUF
zz2+wC{TBpqBr>V%kxN|<7+DV?KkT>tVYc(mn842|2!o6^AH3Zt@z>Xp_)dY-*|&!E
zfwl3YxwUS$J?PV0x0vMOKaqt3eqmqMj}rYag$k2|6Itq-)Q5=^a@^di-<NBMG?cz@
z_4cXeh9Enxjt*eHL?6mC@zg7AfADe|y8of04ExSLrChI*I3KxV=9psFWItbg`#p1S
zLRI!^-2SmGF87O<wvD$OcOZXH$TraM*^`PHLSE7V9`2~PdtzUk;JO#ZJMWA^`))4n
z;6w9Md<5A2CS^ib>TJQd|2>=SR~8>gcBvgxtnAZD_{c4Syan~oHWjZYy#ANL10{~}
z?n{mwYWWw(#NS_(43lAhIf@bX2kuiPV$DlEiw!K1sAUcasrC0s?LgY*2cI`yRu3Ft
zl?N)Wp|lL%b3f8K=jFLsqX~>x6`0i?IRtcSx+@7iRW{lLC|+g7<p&zh&N7E{laEY9
zlf+hI*cMfsj4s?45{J~q68SuV=XgZsauT;XKO$<ww!e>bUM<*V#ir(7c~ouG5oK>^
z=QV_mg}ytman$JVfw4gLtL3EzGq!dt@6$Ajp4y(B<@*8dw+-LDXNGB{BylFoRM*R#
zqcM2)&Hpk=b@W8|(o5GN?-w}z3$FjqD*Oso1Q19-UfSyFp#{+r0gcocqWg_bv)}%v
zbCVb*3H76o6-IqjYMr0=eXs!O=AbQiJHiiX8P?7GFA5)o`y=TNID0%_G_DR;BM60?
z9N^lsbkYKNOQCv+;A#96@l~dZzi;B0X5-!rgPB51&_%uw`4^O}DA3z5vXS8zl(ATm
zVu(qL!Wd(iEVarju3F<GYvDC~hL?eVVCQkipaI|YoCe!jbyA4gbLu8sO1w)=)O3!H
zW%RO=(bMccHR!GC=5qeFc3CMn?D@0PN5g=H(wc3(N6GZ2-!PG-|J%PkUEy@(HypEk
zc4Mm`!)m`vkT0_%IxVrO+LwN~EUmQC1?A$vpXf_+cbS9&IV0cCerz$RQ8?d1U4&5o
zaMWDCII|m`NVX`WGkouAcdMx;oLuBTV$5?Rx>Ns(EYN~>`PK(xKNQdOE!SK=JH%y@
zXtehI5?>r-VVNEAdeM%l{{HY`fBr4i^wN&awho6bcg0|$1aK_yd@c4g(+V8!havJS
zjPXF-ywkV)R}Vi8R-o+?n}|J{(P)Vxb2G{n^Ww0EnSlTDKMS1jjlWW~{Hy>1gP`b!
zW2KjFpVJg&cfqUy>L4O-5b;8BX(ztTxlOR@#l?k?tNJ6ywJ${H`IE5?_n!nc(rWlU
zHkfO6u1!&&ZWII+oI>ID3^zka?$qkfwmALWnq>RD2X88t?y?S4l9U@M6i`q#_^G8N
z?1?NhA4}G2Ff;V<`C3Iq9lIuwM|4wBerV8x3Riyd4PV5xbP9(hJ7LcsR<j`0X^#cD
zeed#Gd=jSm`?iv95+$EIUgRg}NU7p*sB5Fj^Z3*pnFkY+r%U+cAr9R4VYslr6{V+4
z%k%6ZjR~^VFh}?Chs%j;H2>+UyR~g5#BLvOL}1D~dlm@vlFx`sUMEQH{-g(Jk^K=W
zYp?XZce4op4uSmQvuI@E=z^R|n3zTFVo!?^nkG;`L#`(Y!_h5f`7g>V{#4_~L;Kc9
z>HBNp;d05eHglnA!esWYdzZl`0lNyUm(1=cm{vhS;Bg#pVUukZ6Tf_YHW6xnvGf50
zc27<YMY}V4Yir{Zxm}TfZq!o?jS;SDnS7eL-@$N#fnLI9fx`>_>GiW--~QnL(8-Rd
zy&WTy<NQc`c~!qNx#nON?-1IZ-D-4nCZv!!@JoG?`tMeWGac7Iwl^&duIjpFfoh~s
z&%C<MHpS-qZh=Z3De{syn#^RJXrQf#1G+lPd2uj7of7?9NBys9E$2s*fzc8U*B{h3
zL5>@_A3xuxo)^``EXzoTI?r3yY{53S8LqZx)#u)>Uj=+2u4a_FYe4Q)Yr=CbAxSM?
z>KUxCcDr#Z&z?p1`fEc>uaDOnXh<2n!%W=`-AqUsl;Nnh@(!w$ZgUcz4DM^Yk(o$X
z<Lr-GAOaR8{o;^hnVCc2GDe760KN?^383YGyonHb@%*P{R?LiLj>E6IPvz9hyf7<6
zl0x*{=a7G>4R?)zfH>@+zld}?ct!?(ZaZsCKbgq>*2&jcyGe6pGvQ;<CB=>TD;6v3
z@wxCHfoM_sEwXyQ&4PDT7<aRjdw;BEjNLGs7$yliV(-ChjBUquf!j=fn+Qy$qTggM
zz(q3PZ&|J!bs>n=wY2c?9Xl=FuU(fs`;TaxoN@xmU0Xskl2O@O?N$^Vb{EW8I6>x|
zKL-NR=civ8`1lT+6L{#+1bXaeI2-YQVaGHIe+efBABw?rzMkA#l-O-G6B8sXfmM9A
zJ@*_S-`r<bt<vdl!ea;Oo3>DK?VSq46saHr-!3zjlv=Go&g?r{ud`cymL)L3K_vu*
z@AKG(`OPS<J{iMz6UDm%&{HFZG*~A4|CTtJQKSVHTZCwo^go7(L%cl+gJ4JncwZP8
z+XL?upPt{{cM$a3M4o#$bBMaZ;HLYhy;%Hy<MR{QyE+|hZ|}foYs>6_XQ!ird%w3?
zt6*drKX%is_3>KIuO4HN<ee$>LLAM_ncK&@eA@Q&(VXo~({gea>8#K&gwA=WVpxnC
zaq~f|Cr}mSr<QtMI41nGbP~%1gt^(32%E#n@XJ!bTC^hsDvWS9LVf`SYfql9mp$RH
zt9BPHEbOG^0~_ia&0;#<D2ZgXaR<M<i&+2Z9iD=o$~}HXSf6)0zizUN4Kl>=R-a?I
zS`u{*G}91U*^t>?<t;CADd$pf9aPX`(jCw@CM5@~4>;+s<`6Mi$0i5?ZEUi8@`7r)
z*7o$|u5fRtubX`m0@k))#nLjbKUw5_a^J?Lpi+2ORB}AYKb36zTbLhAZ7#;B*5Y>f
zgr9JjV;=IGCy%Z_W$yy3rP!9`)jjW^V6J~%QCcfm@CDvkX4<uITAu#2Zy@+mhn87)
zZ>4%&H`-ha0DvgCpalL)G~Hjg<`~`>^aob+5oz{JX!v66<iMotu5GoWJZ^c?ZC>Xn
zWE%VSo--}a^%OKbq3)y=#teb2d3gVFtWP_^Tcd4o^K}NX-mD8AUJuaBU#%CbNAG&f
z9YFa%qJ|~W1kpxlY2omjOAd(LZzM87EZ{tM&0H+c3|$M-|LzfzIMs2$F)`ra-2|{*
z84#WuUObi`!R;RboE38c{}&D}q6y-Pe(f9E#nUU{Npxv1YV{ATR{W2pjg9Jyj#Eb7
zx4U_AH)=En$>TIG2i6i`R$_OH$${Ktd#%)7okeVVy8WzTeGR$QS?6Ox#kpqVFI~!r
zCd22OWQ}e!!kX7xmqRxhYlK4vjl737bK<i`Ab$<2bQpV#vH6Q?#~hd#l4o=?SAXf=
z;fMJP9u_|d_A>@W`EHtyYmw9M#~k`pBSFFbqk_aTF#|1#*001lq+gtxNbq@5o_!ZK
z7kFTUXx7P*19JQp%Dj|*+j`<BjYK<>ueL=5K|}HOcrC2L)WKn}!|LH*p)V?^9g$bL
zJwa9m-B=HHWiyjbq}tT&Ca^K=A|)?nikPY)3PaHxywRQFq*)5mko?jJZr+9%Otw70
zlLwwBy8CaqVxs%aGD9N-ZPgi64Bcm_@^bA6!xOAV3Kd+^@=_1GY{xj=lBnCe=c&$q
zyY6D+yUHznr>c41I5-5|Gy~I}Odtm81(CKqfejPuK1=9Ni_cq}yQ7(#FQ`uQdS26}
zPo;s6ecbvWf)*?j)SJG~$obvfgmh|ELtXAp8>gLHF5+?p(gS1L|JT}!lK=F@IM=C6
zX<3bBdCt+*bI`Jc8#p>}n4z07cht)KZ`lS{h^VWpdkpT~ft@$59MIpX#<t#-QR2&-
zvw)c0OlX3;a^fQ4<Z#-d_xK$7g~n`HjA?;EL8NzgcSh$<HX2)sp~ZCS+wrHh65xY_
z!1Ju0>!HoKHT**x3^bexf@!wg6E`jw(pk9!GcCPee#&OCuY>{6Zhz%QJUf*bN%&QX
zrc`VEYxd^45}GAtWDpLS(qh5gUg}U>S|v2Xr(L4rW~YID&elnwBRZcpS6K9ldn}v-
zi2$jtQ@E(tkQAX15sN0H6l$mII)WN3eC$Q5l17N|rYqw02e}^<V&b}{{*-uVG#wL7
zots~hRfS7~O^~)x!`{k1#K2POPs#KI3jRsTr06D0BuSSBN>SyK8&b%lqlrdWh#_=q
z#qd3?Ce;We(?HsjLm&-jff#-76d92-!&_DRIG&tnDPY8<;f-KPYV)d1uGkC04?Br8
zV74O}_01en=nL7Fd&A7N4*c{Gspx>5mxxl!8*j1&<JPaW^AkJYw@7q`caO_Jw^<+0
z!u%ejR)H5NunEU}`@N#H6xp})9u>3=vo)D?HX6NFu>h<YYA8nDWhl*sY$2Dz@sxxd
zixI2l8HyN+wQ|P@$Av=Ub#6Lk;2*)k!4b5!ru*+n00y<7gKdui@9*!d5F!yo1Z#m?
z^NkE(qXJuVQ(21p&}H*7EG_C$>QF3UAh{noA~cp@&UDIqBSr8?2O7tQ6VpZSH6<C!
z{vzOqb2Uhxvf-rn<L&aKhUWrG+hZ!b)%*e9y`%nyTG-ngE)we^#PSEFfw|$z4QAVi
zf9Pixa&#~I-$F3ScGOIi=Y+YIh*(~dpMg$mDh3mCTTd##V{_K-bX?LUcY-KyX)Zip
z#Z`B9os?5KoZ!Vf{6xMOT^mPTe^ki90%*^I>@fgj>-YiOfSvZiyy9>bP5%ShcntKc
zNcJVmgsIS<L0H@&ChgAA`(f`56&T^D{uQ|4@P3h3JF1G>DHfHT@)>Nw_gME|sUm5A
zMrAocyN|x%f@eyFo-cEMXm;r6q9e1}2GEuhz;hZPNvkBxKaGqIs&`qCP$gR!7Y~1-
zk{;)#u{No=J*BG=bfWwPW(l2M_Z7zOj2~295i|M1y<aWigB25ksFnGWw#a`7ft#(Z
zs7a;|+y^b@>0v~Y(<t?vrwEg5mXUa<I6{PHk&0vQEODa9;IDrNq=mnHkG)MM4dWg8
z3kHz=Uzz?{(=YB5+J~)~zX(6oB;W|7*D<u~H0MEvB}5BH&@V0)&k+t-BL-K1IPi0j
zCZ;24U$5*Anys(LnwJWayuB7G^~L&!rmv+zTdVYM+3CmE%Z0IcJB7_Icvu(p`eL(z
zvw!~heSX~Nu9&POjD96{gMBnL8oQB2Bq7<~j`|=Y30n7qLx7aopd(htLG{1jR-}R*
zf6d+?AUcLw9ZpBOh<_G$&LnN{EBg~A$U9!{^tXD<p)`OkWIro#uSbgGmSyPUh_Ma>
z@TD;-IfU8YFfmmyJU)81A3M91TG1Z8Age|qU3uiWJmAD$3#;SidwCsEOBNRpGR#t^
zdESx9tfxva%MU&^h+=l19O+9UBjdPZ5@C}4ZU{VXfP3E+WQ+m|jsAln6~2IBxPO7H
zYB4`rK){W6i3#Kri>r%k=>%ni9i3<|a>BQmub>|)$a-xk7hNDJHM?d4&vl=*b1>P#
z*E)bs_ic384cNJ93xa;%4#hSaTur`sS-bFn{BZpXv>!e99bO^!@r@XcR}3NdJJT2v
z7H9Yy$&U?3iuhfgXY*;4pgXoU6%w|0j+l>~0$is3&x)d~L!f`RnX0KP!jy<l>kp6s
zrRyDp6i5&0%wB6il_xP8uEjyc1?BfahUIV(rLhy~zI{GEI~^>M9RjFpJnCIr-#I&P
zn=<+0LQAHm;?dfGnPV?N-yZq+D;C26QR8zV-+IqV(x@-jA_2Q0>kdZ(_8(vpD@oAm
z`k!_BVAxPU1;w1Y*mm>4-+VuOyhW$5f8IT;w_rq}X3?S>kR#Vl>K%x?`_db2--BH<
z(Fj!}D$i}z5V(v|UJ8PRVaG8rV~Hz=C)AQ|iZWD47}2hpd}N6vQtL41H#G@fRM!Au
zv7S}(c3U`)(g<3~``?Uc!|okDiIIKrZ$^Ajdw|zK?4+oje(01ejqM>c1`n>)c*Bv3
zJf;c7abYq^j5L7MHDy{{FxXkV98Ps$ToEypplA!(NiX7WV4_#s{Q&g1Sm&<jt|r9R
z^@585+TN_Nc<omq8;vK@*-!8GnhB48<vRb9=&%U0l}gWt2LJEViX`1BOaPExD%DfK
zXgiD%dy1(Mdg+xM2nZ9Plfwc2@A&&V2aOfDsU8V2aEV*L+)pYQA4j@1+Iyb(sln+#
zPX)jr*uu_P&|HtYhj*fsT0OeyFXa4lCF=F#MxECK=uLn<q_-pjG4F6h=$a=W!%46c
z$h<m)4Cff`0=^I8CfUbvjCQ%|r^YP81lf=P$Go2MP~f0oWUsPV%r(QenvPs>5DIZj
z#y<_JQn#F<WR7`z+hip){E9Yx*M|~fLUR!{>Xg|cgmqmTjZRKB7w?&){t}Vg&~L&^
zg2Z6-eP6R<WL(*+utJuS>L=`$jbp+vV?_`OTA6E$qD}A9pkq-c4H&%lWr?`p1{3Te
z>BXXsbu|3z$db=|$r=gwqH}W^ziNP$TwN4aNpeyUL`!`iUZyw$jO16sAG8k047hQS
zH6d>M3z)dtHAw%xm-B~9etaUC&f%hci`CXf&j&Pl9nk&A#(A1PpP2g*WJC^OawMo;
z|EZkZ3qu#bH<sc1Qz+5sTUk<0oRQyuzX|dv@wiXIzzR?n{cx1@08F+ywr1B~Dx?CU
zBh*4QLo&Gk?q?2&DB?1dK~3!6j54AFJtx0KI((e_a*|4x*976)war$&@ja}fdtNl#
zO%K2rAKpn>*b;c}hKe!<tw(^5Ob+3(Q!tX(Og4AN{gkxz1D0!sbu!q%m@9rb&@`(Z
zkU4pZp&6azaFs<Vfm?aPi<B%pTddqYO8)OkNDdK&v(1$72R~OZ^ljLwqs*sNQxg`{
zs}1M~Er(Dwz^(V@jMl({3bjK8Aor?`*4l7(2szycO<0jKXqkU3+E20OJzR7cKI=HE
z0?bm}@rtHxRVTO-nR=1<L*idqX|a=0xhrOcA6};8cA7L$4|_5cDM(cN$CWlpj&!8U
zzCH*~=8r(;qMb5$YX{>X{Lb7|&;?8~q!)=h0^qDEWa8S^xvFJT|NlQLN8BgUT<zj}
zn8E~{fn0Z|IIoeI;H2f3K;UTDJmpW{|482|VAUN1!+Y`RS{&98HK^`&0D9RR7;Is=
zao<f$uipY0%Xee(3;BG2B$Ob)IF?6V!8Sc8tTtsAYP)S4km3|&#mOIUrzu>oxrsm*
zP?+kjj;SIl$J<NWj1a{KX8B(a$<BomVrb*3pdqZ6amfULtmm?fq2&;W4N~$ByOI#_
z$ch?uYQ{g$+PlM7)H$tV*P6|awX7~}=}OcyKjG0RwqcE|euj(}YIpiIF$fQV`WI<d
zkcZ4UA69rYh$0*t9W(?-S$(61T~MEu?718!<-@6&Z3?d-&q?sTq8lH<7F*%2fu#;v
zd`EacGN=;w`V&S3wWCHevvGrMuaRl3J*LGIlA3=|V440vB`A#&e96fA$H)q}O>6|>
z=f@6|do{+^xXUpP{6jkSzppHL6gig}j1a#-V;M<qsj*OCEV|K-@Ow(?sC%QLlAhSo
zzq?Ar5)Mw|H^E#7PYR*jR99ys7s|Yg$6a3$JB3z<(EEY2x2L~s*UJ&jlp7?T=eBy6
zo;SG8j}OTQ0@f4cXFR@~yq)ecDeCIO9#iSeL~Nt6gM6opg?N%_+y*BY^wyU{Avrk_
zf5(!si?!DlRGZhk&fqjxrrj#KKii};4_T~w6TP1gGmUg~UXElhZTW$-x?0)qCG*j$
zVcX!M>AXR1=dg{osRNeFnntfJ&}h)JZ;H+==vhBkM;Mx0#2#Ckxl;=kd-Zk&ClKUY
zUUfTwq#O@P24^dz-l?#vwytmRmN*W-KM;tI^Hsn^3v{qyolIg%<0+5LPGlO?+rT}l
zWCE_TiK7e@n<dTG>=gF@uBfIE@KM}iRpfCODTxn&qo5R2cis4mxrCo2WoVh)#=Mf#
zhImnTL8yNMsWj-(l9){NZEPDZfejA74k``&Eicd$#l?(=4o>P!IBHo}C24RxD;q6x
zWE=xLe&7hOwd+YYktsw93;hGD27w_SIK4~IYWRqo!D>nJ7XgU@FsYcON0)>XjdK?*
zLI1nr#eYttf@!PsH|;GJ|E9K?n}Lnm=^EG?o<j%VXC8%!*Z8f+Rs1-yP7w-A_z;}o
z*D}8dsq}q8Sa<o@J6u=Xg=z25Vz#FBfPo3YAfYt1<h*|{qDDkKe2nf;cB!xhboMIx
zkXQUES6*nU<gnv_*v6L4&{#yq@9<>ayBc(O(KHVzdjwA(=xqBtl4)eCuFa}T1ozkR
zz+Fkyi{_ImK%ZH`s`d*3kjZv*N^G#y5oGIi*_t`F*O6L0jC1gD8aN=#%JoE04ki73
zB118`Fk*_AURbvvG%lVL8nWDUslvv9e>CSIi782U*$(IMHf$2HHoAmeOKZ47!lNhA
z53C-*Xp2Z#B;DMUX#Xxnp)^=-B!sVv8|)Z_sSW>2E9`wX-iYRv3@EI3>RBggNT&}=
z8Uk;GD#RmP|1-RjmjfPt!v2UP7&Y&wN%g>(`4B;~93r;TN*7$EmW5d|*zFD(_t+#Y
zkXD2_rr0^{j4>$k?nk#etwtU&CU^|TLu{UNk6NYI-C>o%<a>><>^ZB4WAhKfZ2#`s
z%ei}hdUiI1E|bIVlE%g2yd~k%1qSmlI}C_Ay)PTbjM(>|gTMmp(3xhZVHKFhGuLkY
z?#z&*+qimnZWu~r^d6EaaKz%-s=2aE5Ukl~wvgmwJ-LpjNGzMdm0xEIW{u}QpRTWm
zcRy++EgWrE*u>%3dhRyJyA4nNhu^FQ$hAIjV$C(i;G;T)oJ2}5r7t}8F80761jkL5
zp8<3c;piDrus6peEwWtH@7`<a*G4eiFUf6>OT8lzYj#7|b|3{Z`}Mb{2;u9%I)m17
z%4rdN4z=pf;YfQYr}Z4@S|N~d_~ZfX;<h08wUlt|{Q+w$C$dEs7j?N#dOFYEMK!Vj
z-um)xdSa93teYIyotjg-J~_^fAaHh4xcj1L30K`<;%xGvt7%W`ygJ5+u=6$tABo$7
zfup_g2)`|jWadQ}n%$FJ$4xJrGwOBl7hBgso3U-j)E>$R;6tAYDJ6aZ`uRFsI{UCD
zaafrGhUHjJsf$~d5jN;^K%4xon_>=N@(r*&KJ-2cg-VQaz*`^iC4`$>si1FNe7t4Y
zC9Ilx>XR@}HN9Fxl^Bd1{PIfq1XhX#F;f(Eo*NgXif?rh?CuMz1+sqrBnA>j+Rx`f
zUZCo8vmjT`&5PhZs%hA`ehPL(Fx}8-pihNg*(Jh}>OX-}5ZO3YqZll2!l;2n;*|DZ
zqz}uh=@@8y5KC?0){rAv9n;}{kcx)?-13|yb@FNoJb67k`F7}1B)B^Z_UdxeYc@co
zzU`XFl%<YRgc<N3MdmV*-BtRpai<8rJ^DBDTj`nhqLnF>+ZEfpj>j6pKC^8-Zf3kZ
z+~|LR-Dq3I{p;LJ=;@me`gSAQTQ`RdcPf+%5+$Xq3f#{wB~ygZXg!RbyPPHRDy;=h
zXiX`WK3^$dC*Dm}tdN_Z!It7GQ~`3v_v>P=kM-Im`nG>3$QgWCaO_ih+7|k<DR_+R
zaR3*w*b!Z_KKZYrqvN2U_|M^RldGJ@!12U7a~bYurddu~0wk~D>$daMRKvdl7s5*<
zp@of=V30c;abt-*YfY`uqZSJ#$G*_)IDBEr_e7XbJe=<nvF}=$Ay|TC;3|0~pdFnm
z4RAGwiRCXEH=;}!!@uJeWtSe+`TmQ{=V3l~2Q2Eb#D)&MwjpqI9Q9;+bs?ydgw#)y
zY>Q5l?08h{zRh)3?6Te#+MAf+DloO*mC66hKw-l;i?(26n|&ibqMt&0U<HpY8v90%
zf?pIa7hmk>h)%8M3mGi^3ZO$V{a%cKS7C9ZVo`{;aXjISg+YrU!v4yQU>rDhf(r*J
z`$AVLX<5%ks>bn?za;P$`8(;$AY3gei{L}IGVNX8K~jr7{n@pUsVXr;a0aWPaB6o!
z9TNf;OlR}lX255)b7ybEiOJ-t2zO|w0qZzvcTOGE;OK_T_*4z+wqfw0ekNH4={wXB
z@eP*bT?ktroA?M256T&i(LjuUo+S2#<3Ub1BWF#5iZhPkuZa37M=gOGJ_B%Ejyu%+
z=;0?zp01}qr&w_yt^V<$Cf@90Y8ZY&0QLudC8M6L7kK}xHQySf-~%#Ny``!Qz3sW>
zBfIn7-809p_qzck<WA@|sauo}8ub^+YLGbiPZl|Jt;3_NX+xEh=doyjxWIPX^mfq#
zWH^iua3&77vPQ<|F0f(%s@dFWv9|%)az@$H=oAS{Kr$%5UDh<6f9gc=Sy6Kk_3odr
zlT-T}y2fzN+~B!qY&TF~@~h}In}d?i&3AeAznZ+@gYd{`qzydjfqk<pSHr4r6SrNV
zrcjdW_=K2RMn8iE9R@UsN=faZJt!&*o?5@--8Z25t-Xh|iGw4fNd%4pQF=`UZxu4A
zjs~4o@=w~bVs3MJuay>>lq5X~U0kRKXR_v?A}>Y+gX6N2gwgImaNFOb-l1V^-6-|$
z7u99+TyOHwG8t+iTW8MSrsO_8?5j9LOLW^7BKc$jVA?P|1n19KjO#-V|JEiPaO7T!
zKr!J=0wTZGi|U6R3FW)0rhs({Cav`Qu8dNr_0M6a2Cukq8($(lSwXJfj1bNw>DBE7
zC$6tzRd2yHVFrEVhBN$ICV=F;KV4+(T_GqMQuev-16%i*;0)5uT}PFTPRs52$o=+Y
zz(Wv%=&2F(96XQFoC;yXc0N^YBRqB!GY|ZnwOs<HdATkOd?R(dpbyd-Nx&113?5CC
zN+s`5)}E3KSQA&mILDh8Im4O9oVq?h=1J!i`4Vm-6eQrJmwY3?{7p~|K{P7?A=fJJ
zc2J5lX_E0*wu;PZbuiWJBP+Rc6gU{LfHFz%gA!I&a<@d^gGB~$g8j=_#kwQgMtAVd
zW0?d7`++Y0j=kg`L+Gd`Jj~}rTUudh^gMD+(0yvACZBg%*(l{1^wkNJB`X>>?}}Fs
zpue4Z>|OGroHg)#M2ADLmP{Il%D|!T$+8Dc$`NXK<#m8@`4(l24*0t--3;h#{PA#N
zLY`Ikh~asN7YZ$cI}MV6{0;|QBScrEYmeypi({88@bm&jI$AhH5HDS>(*YZcw%_mi
z<v9_4y2(8UA~DDa4E6tvF=()u9EwTK&WtYp5>AAUj~``Fx0R%ZF6w3F^dl~(ipi|^
zDwn0a8TypSy^dJ{-izNs=SRxX?_C)Gb$yq+heEYG6JaR^#yVJ&b|E!J206KJ#ic!f
zc;k__-8%v%6W~gt{SysUVG^Idp2IU{8~D=UC;X@;odU_L;Gwi*JOop@W*D`IPwidS
z&nyKW->+rXOg?3-^`fJ^T}Cmu#+l%`LqA{}^g~ag5O7I&B*uj&7YLTd>)WGS#i`l8
z!gC(3$w$;6EaVh)bWYm%9;85{bfRetI}(yDkX=ShAcd{Np)QO&{CePX_J_o2p06~U
zffPZOs^g|h(kWI^!@GMHxtL>?@J^qbs_45L#}|UC$)8x@rdEnoG}!Th7iiS1#?)-0
z&DAdHV}8=|nE~4AuBc4j>(@=~`nXOMlWDlbW5R(yWpTu7TNd%ILVA8Rn^D}{*xN)Q
z!WBr-i(iQ@3AJ#A$fAOCHIAgR3Q?eUp2`q?(A01#pdkSkJW%Qg>eMqJ`(CUjidy$f
zEp#Zzspn?FkAOm*&+}6C;xP2rNa8m?Ss4=s)Se`&rBv4*8AU#M?sI1mdf%JgN^R6D
zBzKQuUTZOVfZdw<4)@2aDp|q0^P7w5k)H1=K4CgA7nyHg@vQq%&tFw6zLNa=C>AYR
z^1ARjtRg`Svh$%Do7mgLfO5Rc=Y_;7iLkz-`r_-erWB+<YLxTi(&Q~#c|a<2Qut{S
z>CqHaa>(CV)U=5&2RWVs4I9-S7Cp+mv7}c|7|G_lQv}}ZwjBpp^R_LEdG{iaqcm!9
zbP-!Zmc|ePHzZjaaXE{u_o&liH8REA7@bsmE|QC6H$;7pa8?pt$Sdi$%>V3P;>G3~
zSOAUV-{5&$SXi?``9l!}N2gD??ci+ie_(C-mA%BLUz}u+8y1)Cq$5$uC1C-Rhz%iW
zd_G+c$fibyfLNHD0reg<-?tTDz2(Xe3*9>NI4T(aqq_y>nx2`VPk+~yGhgWj1b->u
z(ZY7fWNsKQy1E*#wwYB;tg>T_otU1d*iPjzZw^V&G)TKwRDXVzv*|}TobmsD&d%$z
zk?SzJbt(A67(IsXLL*fkj){l6_p9y@%#o!G<yh-cxmdPGhdof_(dhi8+3MgV`S>r(
zTLq<D7E}X!I-4hwnS6G*dna&s%972gXSH$C-*4wci4j9(S9uiigBTt_Oa4&E#5L0u
z_S@AZ8un<Q3#y5+PFnGxCQ2u>>XF>06(j@6!!+2{dQqBn`K?d`+FjF#KL<sJ#x+jP
zew_t6#)pwI?G$=mCC@95Vg-3oEep0_vbYhlRo0Pp;uoFW__mkcU!8V`jBJfKVI5}7
zKQrQDfjsmU@s;RR#lg94E#V-&wXW(CBmP&Pu~X(U6uqoRWIB}ouOeN?b)I=%=uNJ<
zm^g`02+A<z<?x~?*+H>EL9?G!O&>F43+Xh>G2loY-ko_L-02wvcUdER6e+>uA}<0g
z*eye!3dAC(>cRO&?>*_zU>H*Am1I=ZYf&#o&6^?;F>c)+{I|ukTl1+IFH&(D0eOid
z@~~smRzcC38`}q&sD(bfL@Lx%(S-T>L8Lcv`?ul6VC8DjU(JBuDloKzaYr14$<{+f
zgg9&ku%bp=o?G5RAMvlGXw8ft!wQ5n47!9$9|uAW*gPag=5at3Y|C$C{aBEr1m4cW
z*5O>ee^a!hO`-hf=82;P5CB2aEVeO|P&jCU8lr}kMc@%gCCq%q`HrcGhTZHsS6MU-
zUK%(1iDrB%jt*j^XwlDnkDGRz0@k;A#-%F9+E|P?r`{h8C@SUjj@aUsW2=!+iWzk5
zzypGUo+9Jy6=XB5Q#5B}fCCM7=3?6SxGTdE$6CJZxKZ0#BtDZPs2p%}B1tW*tDEg^
zmaIld>u5f#IFJyS8(EApK;2=>1srxXR{oC(gpj$vue7Ovrqi5vcF}eyoEx1Iha?Cx
zV%{AMTAIz==rI_f?jjxr5+bNdfcky3A!e063cs3;4$a6)jOcUGgQvK*9kE#qv3ept
zJ!E@FK?@eN=+VtzE@-*ZHk!{&-ZUAMa;*Kce_;wxg`DY)H45g=<&ZaCc^ddp#PTjZ
zwuw&`eb=o-k)3j<f^s`T&`vU>kMWih{vTEE7?5e$wF~F&G}*Ro+nhAnHYQt>ZM$hE
zyF1%%vR#wy`tEt&_u1dx=Z}8%tF!A|YaQ#rMmi^v_b#abPloQ^#Fk$dpH(*`2w;2|
z_p(p9eP|Q-BI{)tC;HJXv>gfW-m4o81Jo66QJqC4uhNgS`@NUzn)*w?AhkX?Xe;$n
z=KD8U`R#NPfEy(PH9Wv>Iy~Bi;2DV;#&fXTh(sM|15)xkMwLMGUIy0;oJ)8HRs_}`
z^i`KM(v#vC4bbHOfxai6_(lS&;X#+DN`_nuia^T1viP>TAQ@6KZ?J)JiTRkUu{`1J
zj4%`Ts~Ld<C170u0ng|tb0$mg=%juKhCAJg^|W=W*~EdhIG9!kG}}x`CZeErGmCY!
zGj=KYr|n9=nbufg>&+tfg&t8aOQNElDrBKuE0j>44_WR6&EeEhphIRjP0kbAjVMzc
zM3!56NE-XY?)@{QRpCk;YG6atL@Tk|5jjB1RLqZbnuJ@K>VXdg?8))Jha-?(N0yi6
zKK_A$NR{rBp+xhR?oC)Dqk_5@m3C)n`931+;_e2De?e(wj`S^Si#Mx;ZB{DB+Rg@e
zfdIlk4rE6_LIxW3v5?pD`3r}=?OTwohzKRh_2)qH8ps(M#zwq}ckGDIE}-tTiEJlu
z04@ubP}}EMfc0Bxt@N<Pxh9a|Li#uQJtUkmb;s^gK>%>Qh*SDh5k5|US+OIP*^iXw
zD73PgLpd2N2?Q3Xf)<xfWB^hu!V(<O2#^gLpAJ0r0vGi{Qdv0>2(TwdXbuFawsB9}
zePUSZ8aw-2`?9j(NPSuw&H7}rogtgHW~KKsN8rtP7C~HPN*NWJC~j4_&WFuE8Sf64
zRXZL$3#l7M3uJ*Rev9sjm@?+G5-^JSiT9XsJbeV+AP5Gr-*dg2D0<yoO&0Ab2&Kmc
z07g|1R)nbc5I(+8uQC4h_cT=eA&f^2#kJ|~gtMq0%qz_7+Ddrpsiw&@`}p<Um^sf&
ze*9cAwL%>C<QfSv(-eCKI?*Yp!R3b_2x>FEr9I02t|j+2mAqkxrA7kbl+R0vIFUl{
zm|?`gY{wYvo6Gp6lJ!Tq>kRIyHh`y|-zuME3o;SX*wBX5Gv$|6pOmN^-kGgJ`cXye
zGaXGop5I8^u5Hm2f~CPVlchucxiqsyD_XIDXBI7G8@9iliVAFAC`vFK@zD|+C)*da
z5<Q(X3khwx^eSme)6xi_O}z_*!f~AZ#Cd_>7y@~lUZ)}m+88aT@E<rb%PQKizjnJB
z&V8F$nu(Xh%sd$vC~2<@J>mxaoBCm*cufRI)S}H!wLe9cP?Dv{%-V*I(+Me&U~5ZM
zCg~PsT$N5s<P8<n|3V}?JBbGvP?-V|vGhu^iGD+-O75ROfE`E%BcKA$=pr`JdAl3-
za52uekA#eqaw;LIR@=s$*>`)5d3StG&79ScIFOY*?*m#%cGe)9hE@_z$~V?RSZb(v
z5GmomDxkYaVtsCK#C)u4)=H`)^0^;_#4XPvr-?_@kEWd0KLHe>Gi~%bAq+I5-m*?@
z$;D61>dIptmcu3g*f2)wK1x-Mk>w++A%-h_ZL3rTa`?$6(TO0Sa2B>ckfhh>V&M7$
z2M#aZVb#ov2TgQ@t;Fkr!4$gQdPOz)N0qQm?7L`2O6ld_ij9{L5jT9M82rk^)!jf8
z5RjAUGJ>gjz_B64KxP~fngq-Qusud#<H;xBJ9dmFp8EF#?=Z}0jm<|5`q6zhuNT`L
z!%&6s{?>QDkY1*j{;(4$<1ij00_A<KK?&5~p}rksWB=CuboR+eFvpn|l)pAr02x2M
z4QXmd4?N@0u4qqnel=)g2dA0Va)6J>t}Y>F-YQ<zR7ruZYbaRv?$yREH_B*iF`7yH
zgM5nGge?G9iL%Xr+}MET3<;g0?J1EJHb###O>kc3yRP>O<*&%fT&iD=WO#00DT+=*
zt7KUiZo+Rn&LrfrBxg35RBXvmrG0%LUgKh?j(&gXKklI~G6iySZht(|nkZ<e(H%OT
zIs}iZV~IcZol3$RKz~qhS_?#O#f~`MX6cpHZ^l<cPdOMeyQXl{hA7Tsz44LTRZwW+
z5fc=TT=_3|ma(Z&T}kNopx}p&wV)|8>(Y&vYiIZF!S-3WZ*ShNnJ-EQ8QTlEEAoq9
zfGD@Nrq=a>BQA9L8$S9}dJ41G><uqp2}jwCDXM5qYAecZ_P7Xk4z>BQe*^XLm|DAI
zXw*n2L9R<SX!IuXP*Msn%JnrM)4n71S<cic)MZ7@7;TMeT=-nhC&N7T{<qyGk%DW=
z3OX0jL8jv$bQS%1$widIciTe1{b5^)PI2(!xz*}ME<SE*@P9zGS#ObK2X8qI4B+S9
zso9LHKTI4q_^736X1ajpIj#`sH@+7nK|^T^CY=84)TPEp-T(FAKC$ItDA4evgV<=_
zljC=oY3l<EGvU@0xEq_$s%q;krl#*NY-4Rxx#FftwT9QCZ8j=)Ujc2#D`u|VUe?f!
z%sv|folIq{Ee-p?|3brIW<82lQV7JAHVc-aMKnYKxhOdb!me$u#C31@LuNIc%HKCZ
z`=ndhSWEOjdE04krNYs+m_0Y`U=9;bm!>-p)iar9f&iZ_edyE$lrU(Mz@|dfSTwnK
z_&qb4miev@b|~7*8w8!=DiaI5qVXH2T=E!3J*-){>g?}?=A%B=xP=rehU%8H7Fa~B
zkQ#4(#CH{HE$X8A6~2<?Dy(~KJ!PWJZc*WbN^-MUTJJ+;7<2iLsZ@FDMwXgFhz9K2
z-l15eh{V3RVX#|Rg$#eo8M~t0ymBzoJ+6b1-t1QVca)rl2m5B-FIxRA>wdgaFi;DY
zgM`E|P~5}t{EIjs@|*7gu~Vu9^2u)0JJC1~iF4PDR^Kf#F#BgR9mt?1WkeYbAj4AF
zEzCF-!fDvxS$F%cTrSb$E-}peAVaX71IZ+>5(5zxB+67^F`Z>y$w|ZV@bBS*s-;MT
zlbGnfXLMwPVlTy2toB`|lYa1tk?pUAA~Cjh-;cA??e#(({em%UXv}Sy+H*vAFFgDP
zg1C!l-qB2ZF+v#qqAC+{%nnd=`RovAzQ8~e)llpv3_=^XLLlgBB(jXK3M#Cpyk1mz
zPIf*JJfb56%s~?cRT|N3{aaxiv6mE(ZfIlr#WCg|ylPSWx?>>v8JnM-jFXhW(k6<9
z!amH2j{v}h4Ut5N3J|@>=Q?j;&T?o4kIm*b*==3#Gr3&ELWHGYQ6T)`24i}`!srKw
zv1BT(CyvFse$i=oOQ$Ey6WDF=Y8ivi{Uw~}d&2(kxTl-TCDibi*ynSZaK+FMsq!Bn
zXGUa1ze|efgvbUe9E2oTVjmRwZw!McpVv}?)_oMDDxm}~T1TI!P1N(4CLWS}@z%jE
z_rGJ9r*2V^G;}2VEkCk^Ve7DYV1)rYV9x$=5%GK+D1;Dfxkz4>`E?l?mV<Jb95OUY
z8VN1*e^GzE1yQG0{q$S7&|6m`LKX)4DniUkW!yoTK)h+~KdW6ibH|n(8=a!4r_2A5
zjHa*yx>=^uJ17AmJJ`N4?YF`fi@ecP1oHeOx5bL++Kpc)x*)hf#}e(kUi4>$T@;91
zSCGN6pP6N1_hRs84zL;&Ugu%_tlK87sd(696v|_1>lyG!e9fdJdjM~*84KY^Pp)A#
z9?$o}<{N}CDoP1qM!x_)Zi?M_jV8+ncSOVpJscO0N1U%fV}WnN?=StJDdSiO&O(M=
zSC;HUisq6$8qvqNm)1k3Ixqz%yHK_fMqScH?+=x6`|Ckx>Z4s|r#zS6;~F*+kVWq-
zxRQ#ejjB<lMkV6RkcC6hg-SDo7!*9D#;a$67{{$jEAtWu))e$toN1kIA@b0bk~HFQ
z)O<w?yDAk2!zu4Y4#crRj$~x`aMB}2!yZ30@`h3XReQ-Ee4i)=p?z1kw;1}pJz2zi
zJv~{P#Djl3QHH;4H=T7QF$Y6|T0iID&Gh{AQHnz(5`M1o$56^VfW?Kqo`(-N995CW
zeR?q160gps&(1AdnZyb#ETX0ee$T~xu*)?2yR<m3d+X+<`&ZFxtvxO$ZapCJU}OTD
zFcM_Vzr(!ZdfDf7JF~jF`=qkGW;z9~Yq9D2+s1TFs$4<k*Y|vavn9?g>0xDCDSbb<
zTwAWaK12PIDbN13#7L5I68{+Mk8UXWkzqqmoz{S;SG~wqgs;>*pN2YGcq89P?`j7_
zuW&U<P^=x)wY~&ud0t^JE8X0i73rof40oqDLpaRw?U4GqnRT_7)vq3XkuNeVLoEXL
zoZC;G(%_^PI%cB}U+=`!?{~X-rZ1(_DTSh{>)Q1q(!o~jLFp|jcze%yse?N$!BFmE
zA+CC|DKr#mX8+LJ$s2gbl*{_+?{cA$H4N%qixIBlnV(JRKZ2u#$8Af^0o}}U-^Q;)
zXCbNB9lH+Fwt3D6jy4Vv>pw{9IhtFqF5J3ogz$Io7Cwz-Y~eP&l#TkbBfPM{aU{UT
zZF!x%&&a~ZI(dF0gpBC_ray2!CWVDPD*tfa0MWEx-cGl95^p;Y{4XVa()6V-ifD}5
zzH^$(Sjbzk?{tqmeAVlgJFkRh&~)l?hl7_>1V57&e}g7l`bFd{=#^ti8vP>kfN)Pb
zJ<B5mH(X3AW{CFWI6lUKCHOUy<8!nvVvGUp*d4>FvRnbTCPef$O%ed(XHh{O?EIY8
z)M*uaqh|`9tUoY&U(bLC2{M<c1?;UGNrLaV7MdLm^8ahOmcN!$faG~VZ3n2L$2w2a
z+k_=7!svNy!haa6_5{vS3}l&NZ}0ri-CErFf0!aUQ-UOD+Ki73VQm5e&-lomX+NOh
z;9VcIBJwUA1Uh|7c@0j9zxq?qHQqmbIpvd6#u>TL=m$EeQKcn#id|INbpF^YOaQ1e
zZv39ij^$^HViz;{>Znin;CB!?gM{>SqU;}aaX~bwPV>I!7(JELM{qLw;;SZ&ul}p8
zb#{I;Tt^h-w8u0evUt(G=`CpYjGCXdWckl^bDgKKnq;$gI`s-(^_V?o>xiOdQ7AsJ
z(w!*=iq}3Br={31{2)b_XM}IHH{vz$RaAB%9C_S*<+KR}qeQFVcK){!7;k+?zWP^P
z)CXmbV8Hm*`%#tnfVkAUy94j{?d;fwTSAi6;k|zA6d7tp8VF-4BKmI|97X<f&d;Dc
zLiGbZgWk8OvDEk9`z7w$(XQ)`qT1^oUxjH5mz)d+T^auE0*XiAivc$sZ*|mR(?tTu
zK_pBeh9|Jwf%mVYUQXUGi84WR=u*@f98`U&5;3OnLSq0V2`twcXBgBniWC%9h2hcq
z!1=ie&rT!<g(cKkx!@7O$Bk(1_DPo$Gln?O3d9bbd(ZyTGo7@VmJqd)qF}(h;WZDG
zdfLFlK>xVHS)u6Ph~7oxKNzX)F9Cs`N$)Y|3TD|?SeDoCK`8;naiG`-p15arE&8mg
z9mc=U?z`=G$>{(Du^bjM8Pt}4@8mH17glacj0j)vqs>$AM_Jwf<<zzB6!jZ*qiQkg
zsK~!56)JNrCbf{&Q(kG|=$_(#JQelET7THIO+=@)s{Ez@CxC*FaqK0_#8-vi`XcxF
z;}OP71rhzPB^px1$Pru3^Snv25R<EA;8=-U;&e^%q}~qKj7};UiguKWK0klG*Ins!
zwzB|xw(XI&afJ@Cs*X-bV_DQ;Y0kJ^r^HeD)~{(VBvs)BB2g+37HNDZ>H=^nM(LK*
zlph*SzC2}5QbRMPt1q&U0WZ}NjJlEg&kC8<SZx>-7<}yL+q^iMi{9=>c9SpjzL4F{
zR!63{M)73^2zp>`g|b^+!~a}}x%-O0*FqMsH&dbTHMxPXx>h2Lo{ln?`d18Sm3&@*
zJ$FTAZDJXQ@w{)cB4qN(sVleE^Chy&pKdjSklk;XOx<rT|DsGJEB$Lx{XrPxb2uqf
z!se7e`cZLpVW^G>S;W-KS>(@rmTSq6bIDJesPLm4$y~dzA)HUc$4KQBMpb}5xArN-
z1x2;O1hec-zQ-kf!3@0EuNy}p%1ZiR7nPhKCLZdD%k6fJeI!~Zo||=KK=M;>NjV3;
zeV1GmakX+E?3V*-b@ioVphViwe(%G4KSGT^4ogZJ2D2oNgYP|2*{9gGQ9CtiMeYy8
z8s#uAE(cHP8ez8wk@~b%^@$z>9pYNj*DBPjX7mN7&hk@+2S=@96aurhk7*7X`M<i*
zhq%c}3jz3C&BnW-*H&X)D(KC^Ht&h*Cmq#Bv}D}`yBu$LpEA)QLUTulhu<A>tnHRt
zS;;ez2ZNt)gZE(1J|XTbkUNx<o)Qv=6k}sOANe<f0(f`B4y6M0q>8vKhL0~lI}aCr
zAo@KeN?)a)e*VB5|Aw=BcWU@dJdrQFwJ&|*vfIQ?UVO>z<*;50&g^#`eGQ!U9m}Cs
z5z4tZ)O8r#y6ixoFH@QXtUm(lBQbuO9=gKNr87v-bc5m}@svKN)!3cQ8{~%z*!%+)
z7Nll)cQ7~Y(Mk&ij!$bw22~Kr;_(}NupYsKpz{`R!QaxmKagzMoP%EicVlv%qD-(A
z)h|Hlq+2mPu8vY>%yric$9N9-OWE_Nq{^mZ?=L{*0QgS7&J1D4F7yNtU4rUqq98T>
zakNlrJJGG|quBT7YS%~nQU^RgzT`XIsVvh>`TKf{i~q9#AFKVUIyqilptx7(9VIhY
z&3gDB;-5L+(S)A2EV1DQ?c7K~%e)$YOre(@WQWx8x}5?m#W6SM;am^i>mREq)7p6b
z|I&ECk{aXS?sPbWt-mm$X=;T+Yv-$eVor{GGBr@5RxNbv1$63$NF|`!rVewtCu?#r
z<E9?EfauVDQz8KY0Y(eGb>~lB8H~cq@NG#(eN2r2$?1ukC#Sq65NGp!HZ`%mv(wLt
z5?c}u4!U5{H@oG|$Q0ycFuv(HdV!8{=4-0VoOgQB`-7<d11yU@xU(?j(+%kk)}bJS
z!FF;WXt@4}As3EX?Qy-~kZ&TF1^nF4@A$ZCBP)p2Pp<)$eD#Mj<AR^gLv}7i5%LkA
z{rKtlMUd`qDE&*~KSQNBz`mll*M_@$Ma4`NRwCssSI1^5pW2`2#9p8o-mt@=Uq|3&
z-!v*X|63=w#kYG8WE@m8n!3=h!quA*B;)B-Jr468{eKpJCC#U1Pygc~^0mFf99(!^
zz-n5!uu?UPZ5sgG_tfM{{lYQ0L}-M-jqTSiZ?2YFx%d#^SOJwBnD!q?Q){!;qerM7
z-+>1bMyRBz^>kjc(7(_0W{}O_BWM0nOer^W|IYq5_8$)t{mKgq25*f#C=&D3ckag4
zLuWt}S*)nFSG89kbS>A@XQ<3h{Opia7ErojPj9&fD&p2{1ZK|bCMKwWm?(NbHY^nS
z_eaUQ=RLnkH2GLFo|u4#Y&B5A<};&loAG@x7@n-ArR_lb$jdBaT`Ar3Sn+8`&p15Z
zPQSl=p>9D3t-wG>O1Q19Ee0UAjYBfm1|qftR0(#bZ#3%VugeMpo$6FHxbP|M0xGv^
z;Rp${>zsNCC@3%rsnPisg_eF;vMb)MkOJ;Pekw}p%N~HwtgTMahg3>^$>4+Le*2IE
z*+Z-GoH2?!_UxXHoMUOr{jrG!#fG`x-J5txpR-B>T&ZG)8x<y6KY>X7Z4Qp~RAYfx
zk_GPP+)abf(UuJDCsYDHTkoEGCyoPsVF=?~mb#{J0#{EVPxDC8U$@p#$|+J+et*kg
zaV3y*YuZv?OKURq-Gk~laC4MWD@GO~zNrBPkTORO^(Re<nsSyb1OqqU;M@ii@108g
z5`;z+dp*7=gRQC0<2pq9AO9VV3vFIHc;6jyq3Qr)V6%suS`30aqN;GQj1AARSa(Lo
zHD)=%5Y;0kyl)eK@zvkI{ug`Lb@j}=OL*ytZSeUrKk*8R>VP5(t#_#UzVAJLgx$=J
zWl<!gQukCC>d4{HFowW{V*7h&g9bwwOuISW8N!jX*f*<4WS`1ONr=eUxK{_mZ`ZbB
zLl#WPBHDLmuVk05t(xnQ6I9vM3yxv2yVHg5qN<aFNcVD`u5Cfa=0PUnDieuCga`Xl
z|H;|=55F4m84<tTjS-F01YF#JS-Z3~M(Zu%d2smP)*bXQA43BJ$r1o!OnD#+<B&=^
zzLyu4Urm^TgiWy6M*?jxEmP2%m)jzm`K#-~vfs@gh0$p7!o3&=ku#TPSoYoi5YzKF
zXEb6+hp|3JkjKbZR@AiNZRqQh)=c3KoQOluiqDsggI^D4bH8%(ee*Cba71Y`nY+O7
zsfTR&Adh#YzL+=7`mC{3)$^x4u^JAT`Rb(zQ5xO|Im*BGmZ68-1v@_1i~bRnUE0}B
zS@F~=<=S4ZqV-j5ad0v5Rq>>!O{B3m5@JrLkcTURDI!+1Xz;vc>jGvft&pd(1xM>D
zk)ElWOzrq+uTf38R}>`8P8&^jzO8Ec*UP~9Ts}hNxQxl#Y<2+Ks;cyxT0AmD4S_Bi
zLQh<;K-VLS0N2*IH<8|h_O3%XjOOCw1}sgq180_!V5*vA`&&O8o!<c7p~*sDoSXu5
z1nTuNJv*@i)e&Cv!PLLVs%<1g0Qv|K=QH$G-uX?|n;>;`Ddx5|9~Ha#)LMO`OT?Sk
z;ee&q_Q+>697MN?w?RM4C)bdWRZB$MYtfor`IUE`256w|*&~Kv0tG@sXfCu1u0$G<
z<LlG#*i_<`Xr03Ue6wh1fDK&dr6zOv2SnYQbv(hjw3653910cqK1oP>MAZw{6$G+H
z$|j?qJkvRHUvrB2&w%)%imb0m4|on9cXtn&V6&0!GUcJY#sf1X9!eOHAs~dM3tC%T
zpv^hC0g4nMZdA=hnO2bS9Cuc@@styuPU-k>O>S%a*KW)Kc_LpzsR9yi!zL5)q1%aE
zp56$&ik9yhisPaimhr^#&3Qt5zbmSLjY3Iwf2Mc${Ugo=1gwlJ=r~#@_HS@An({3R
zgKY?FQDNX;w^fI#isw4pHhI}|Q%%@a(^ARM%FlC@;(7>QAv5UI0&YF>EpG|dK=BaN
z-KFv*M-Q^_P#@WoX=f>E1r@2}>BSrG7d$P&^yK)kYiuc&h)_(~dSTxk{LuY6b;c2R
z8qzy_jo*7PX~{>=BSqA=L+HO%suF*UNVD3@A-wKadr5x0QDfuJitmENo*V(ft=nSc
zp^Z%~^m6?Yx>ONRC(NDuXrMs{dh_9-<s?~INEQI_+VVPJ!2Ww<N>-~tb10F#E{OPi
z$K?YQIkU59QpT}~_;AYvua9F>&Q71CZZvX+ZZ!>(XBh~_T#`T2gR4|~6H{N^u=XsA
z$a=WHH=SI)mys!l@*Yt@&f>>vGfH1pX`eB}YyRuxP+Q+EO6^d7^<>0U4CQ6*h;|qv
z@K?cilMoJ$9}?p#a~FBU2$bLaKS$Ea@p52D(LPS=>u<Br*f(75HsILwwa*9cgeDot
zrJWF)zp%74{EZ-=-aEf`FQGL$RE{R~?+nd4u?D2JwaSb$$W^yR2}E|!bxw+Ruw&mB
z$|ZI*-MqI9ww*62yrqzbuTLw-Qt!a?X1g}`72j}TW-mf&GB+`OuZ2SSO&^JeA#O$k
z9(r|l$TY9aKIGMF_I7uY;WL2XJWS|elJEC0_y&E8>d+YOU}NWU_h@tp2Gj7OdKTxb
zmi={0D?O5k?sO0QuJOL$XXlbu$REzHcF2hGP`_-;*&m;EFT0R#Esh{YK$upizFGm8
z=+$x&Y7jp;&}Yk#&V3OUs%fz|&gU1HY>fn+Riou%)fL9!&$o(0?*S}?F*?Z$KMdWz
zx~;KupAkjp##*^rahKUJ><a$NR!GC=o1<80Y2~uJ#GB2{*)ZIBs_ZA!)LP%?F}7>*
z-G2!PZwtYo_Gy>i@U^V%y?O1rutCVGQtSo}B?4oyCixuiVnq*a)KZDW25j9u)Fku=
zJ~@_@3u+%D;#RD{p$-EL5HLY-SRdjn{hWikWL>y<{r0uKYSBgl);=uBl*rBs9RASb
zhx1-mosoeHeUeHH2Bg_=vCJEd9C?5W+|E2<x_^8z;g_)d=lGh$C09g{<y~$V`_`wy
ze;M+Bf^p}68p+vC$+)1nx?j@`A_)!WpZ*m9jvP_4YDPgNc+MwcYpM?-DZuf=(89>{
zser0|Q{YGdC{U!UYYG5RZgRu<rUgo^(Ik}`DW86x3c`~ND?9rTbEs^FcEjmHV1R(b
zO~#X{#Wi?KxZe=eVzDNp;`);vcrBhP8eqoTP+c($C%6x9+pi|?yrA)IC&nWu@p`}@
zv}o-x<`?^<51R0C7q7n#`;a0&_Wni!9NDuWB;S(VkkJ;HT<krkZZP5(tM4uMS+<%2
z?R{@`fIdu89@}WvzR#ubFd)d62yA9bIh{OHGK6vT0<zFabD|Aaf<O77ZVlvC0AYkm
z_FWeGQctcQf4VizXSOdsVUZNP#_M|+ZoJCR0Wdy#h;{eZE$3@V>^;MHL3rW!Yst**
zI_T({Ze(Sl&Y=hrL^Kf@K&F6o&O3g5n(VWL|0nEpUut(JK~wOJeoGgjZ9}))^g)mt
zNX`-?iQv)y=H+_5aoc4bn(&zKg=I0B7lIt{B<{_m9lh*+;v$b+=+BGV8yC+{mm-uu
z5icr&2k)lB`#z#;VO6zD!t0**BK!As`OyOhAU%aiD#rIN5iM}D-=$Q0OR>-QPJl2`
zG}oXl)>kf8O00Sf^nA=j^fx%q;&J?N9x(x-VpLVK|E&X{{tX}E6zNrAJQ${M?vONc
z8NNjIL(&{sqvqcpEtU~?N4dBER2>eaY#Ztef=W=#+!i$f1Nz~8!8?^3iZZojtwrkY
zrnQijS1Yz2cVbXkWt#;gyF6-(!;yrV6XsHBwKqbLG6+222)wOr?Zok4^ngBR>G0)x
zu@)tVuNWB}KU;pPyd{8k855H6ZXkP`E{b$5hG2yp4PF+$T<Qc&;`c<%5qyIK=!Anz
zl6te1q!?F!roEh{qPjZN3Qge<-UfH+@d2zDTZbV71nggsSm)jH*Pm=KG6#;7m=`@Q
zn1@*rd(WuWu|2s3tw}Ud?4*+69r1m;x2AkcZoZjRPQZIPZ3`lFU61k}m)`W;Bm2?s
z(nJ50zK55y;l#atVYk<*u3bi<;XXuKQHBQooYneoYj#N-1uZSeRaNu#-6vMLY)FhN
zuZM@uhgxd4o@zs;@te_Jw}*v*e<lzHFG=Y*^k`W8nnDem5yYW+7mTfsd24kR_bv=t
zt;`@LCvx0dy0}wMm#d<mjQaC4GjqSR@XObx*Bl_vxK3zm7k95=j$$Hua|$u%<PRo+
z^nw)io3mC@1@a+9cofyA?a}fSVtCq0XQVS$>bwkAry}(_T*ewkN{mjci&`DpVVwzj
z)YpMhB@jx-Sbh+$ZZ|0!5wJc=9ORn^DZZ#<(bV?emjHwv!(6$t=mubD+tq4>udnx?
z;NCoEa>HF;Kc(K%uUe&m4Aw&vrRCM6nstkE7<j!Kw)!ZX21xn>4n0%hu<7`forT-j
zL`zuFMThWPwECM4tr!-}#Re9kMUL8%BI-G}A7U$*&Ch@9gBf#cC9_qxU~y}iF^X%F
z+d<ctHXwEC@)hFAXIuxrJAq_*yW1hiQ%^gZK4GdAnl)^Q<<34Dl5a*F%A-Ry4cL$y
zkmU{UiP0qbQc#hXb)AIoI2g{~XovvXfec<RaFrWZ1P-n5FdSwO$b%6@uJ?*=$5rF2
zECJqJLxNiKU3l-)NZZ$?%G-<W4!xk8u0mcu3e*n<?ad&fJSP>EcM&ROjCdU!@;44@
z2EO=#%#pU28S(}~lkQM0BJGz%(@2;-u1iAM*(`UqC-o(eJ?n)SIHxE6I4+E(wjLMB
zUp;nz5`xG^6iNa+p1xOpmu%G)GAU0J>HdNE4o~PG@07#a$lvtiMj4Y8*@?WLjK4Rw
zWCwx@MdgG6@gU@5CC77(uLaT&C+Bv(p<Wc3?}6>sfa!Q&Hbf**yr8!smG63#AlB4i
zH<1U2!T0^_>nm~Oy(oJBSdeod{O8N=x4ppk$KH=j6qh+$!{|?e`}-$xsxlRV#QW^k
zde_%I=+|x$La+TqsyINC>rAF1;A<##2s-CPcV+y(xJ_eZM|UdS1%LD3876=aie2t-
z$YcVE27IEXP61C)@Ot_eK36Js=4Gd0-5LOEzit@KdA+F`O(=38fKlS#T!^v|`onX0
zMWub(WQXHJ@4MeDa`O|c;eXZ9VtrN+f;CC}6;Hh1y5cu<WovQzG|6vXis~tL>wgQ{
zf;3rYzA@t$NT2{I<TzAkWr@!Q-R4%2qkRZ^WkW|OC^X1LhZC-#-cd^RSC-)4OS6Ks
z<Tu{1&6CiJi@_#oC^TiVM=X*Vih`YGlTAADl{Rak2jl76y{{Kyj>;ZRO7Zvu`PHxJ
zn@)511bc0D_Qiis&WHAaoKUKDIQejt=k)vv0x0H^3BCTYdCfu`EnIEihwe3etbUoA
z@S2x?UQB<>nvR`Rw8~r0h-99Wg8CKOr2u`ZwGk=&agNvYs~Ac8b3Sp}2b9sLC@)8l
z)9W<U>_n*`Wwgh&{B~1mE`pkx{O3aLBi>1NpUx8BNZ4h-%S&L%GY2!U*?d_*?l4(%
zjtzP&bFfwDCKtQab~kRZni8ufpx@eaA+m<$qLc^l9F<yeeLv3Jw-C?)&-`{2ausqJ
zfZ%#Gg*vJE5(xPvkO!qhcrV7|x3b?G`H&7d%pkP2t?h7Wx^KTP)sE@z!1c22beQLC
z^anJt@T*B~>cL-`qM^~BIWcRF-Gu*AM>0{0oJNeLjeGn2SUeuBGjUwNx?Xc{8@L|#
zf?$cqZVZD!0hRimC*vRbeoy_D*0fHUFS6g%65w-iO!-H*A=V^f0l~5C&Q?s{_pGUN
zHLfO1Sf%BJNMe&r<TAq|JSNSD^y*&OVvQVJYF>XsM}HBjtgEa<(MLmTMkVYFS^mQx
z_`#9i{KXd`R?|)!kN6N)Cp_53VQwV<8CEO6pLp&jgUQwQKnVHpI+@0htF!bDw&lN`
zg8xR|pnO}6{R_IynSKcAnB^$(BAF`yH%1yUb3N5Rs}$Z0qr;UK>aW2J>?4Bewh!D*
znR?vztQXZho=>d`XMwS|b%pJ)4a4!=CwaJ1UUtA<&_iZqgfH=Dea@T(UE~L`M6RCS
z<X~v!WUSWGf<CAHaGPb_SseaMJ8&L~EuY1<15U`{?~Gtzwc>_WoiSyX(+Bo-VM|`*
zqHI;`0dY%F7mx@P5n<%JIPe4RUVQPFv2W*SK!N3qb`Xj;-%I_T+fY<U?E%oil#q;7
zW|74m+w0e_-t~BVcJPv{C*!e+vFv(jdCh5ub??V2D+jy9aN;{<Pa)8HL%|7|&lb76
zQ>aEoDHv8;JYjwAIP}!P@T5J?{n960E=u>r{bsFV((BjXWz{Eq0Y^3uEOt}5gthA1
zPO9P#j8eZ&b6yUyJc{nKZ`~@<*oM*a0T1+`!KU5jtosw;D!hVucz-lG*Em=uWk1kG
zn?S!`>xV!_Bq|0+u4o-U$O>2U4Wz_3Zn0*}SZjf}e+2;@*ReGSv$U7O>7>~LW_~XF
z(FUR9%s!~vImgjV9WtQwM&Z5}q;suSC&N8=TTtI8g_4=WNKtS0eA~42H3o&%7nqrp
zbbko$CYH^(svEPPEGjf1LgUQEschG(w0%UvowjO=%n;^eG9?Z5Z3(cXE_A)&yR?Zn
zx+3YU`}Wm7wxHF_CTvPlj52jNG_(p*kVc@v9L%=a?j73~qW{^ovOYxN72lM^e-*R(
zY>M-RHDjx8=Te|ncmk%%S~$RRpF2{N)br}PF@*6SZ~5ObZVZ-;^GsG|5Exh_W%DCo
zE*XKBfTw?>yQP%_`Er0-s6Yjjf>*JJ0Bjh<(Qa>fxCS=okPjJ*LQkyyL%FtGGE!qd
z4-X>z67_a|y868B(-tgWds9t^OU(gDQqY*xKeH=_h^AzNs=O%t?n&jp9?_=YOHx>X
z0ZmB_-rHJJWVDYj_cY7Q+}Fp8pzb5h{}=DHu>P!_>ubS{>O$ZlQ};E}@#WuOlJi@4
zhhtGSDyusWB%=cEGiuj>pJ0DiGJY#$us)u~lvwtbV5#Jw<=%f9I=)t9ar-b?C}dxE
zfYgfO5LzLOqOA}*!&!1D#9~M7*0BK;?k*)jHeg;+>ej-kg64!r37RIwn?C(%^89%<
zS6yT@b@y!smO`4(7d?KMjif{WEvKn+SCYGq4p83v-<JIAhmJC~!$|VyRM)|Qi`4BZ
znwz4VR+eVsrk5e^t{>4%ZCaoE*y+Hxkzlh=$S*V9PY2T)^77GC(Q)sFR}e%`Br-9h
zDx+ZM2AJ9GmT@m<M?$7!rz2Ri{m6pBcC07O&0O@TRvm{;HG{8H0`rTL$~dgyC1U9w
zxoGHvk!UFOaryfK%mly;disY5G}B>m(xViMFKQ0EQdd(`2z5i984#_%fpn`Axpipq
z9F0k?p~J(!g5Xa^8H_9HiW-Qg-Qr`sj+kJ7@*i)fZU^Ym2IOz^R|q<!@kZl3;N6C0
z2&!E<0I*(98lKa*PGlK^-f#A^CrO^#$)QF65q<x2aAFh4q++xhw>jSQ7^{SLwMZn>
zh*HOD?sy|XJ_qFSLv3yKt;7;H%+#~wKBY!S6#jOjb1{y9(d*_-A@seX(z?3C8!drj
zLL6Xhs30U{#`1Dt6*#m%^{l1W@ZoL;w+G&Jv9lN?)l{C!LRK(DW-_$&Fng|6+s#SN
z7)qVMh)pp~nlz$|?m|-+0^g~c#^rnxJp-C(6w5Ndk*7MAFrf6u&Q|;=^fyPUeKRtE
zlHWc4l`rT&!q1#Bx2E)OQ4ju0aVI1Ok1moNwm7h;k27pdX?(waQH)ge2A{PkuW7CQ
zGFG>-Vy>WtE0FrQilx9e!_z#|35zxup0~xoOFK=k#jg*l>r95#sTmS1PCilBTto|1
zi*oFb_0&2rQ|4OR!FD<F;a-yY1)Fth^^wHar_?-bfh#9T@+XzD!|dlxQNY(Z8SzF|
z0wGJ|9f&`zvfNhOdi1ox<;$y*9AU#7--8L;eRrL^lqyUckP0X2o=Q?!@{;HXYX}Xc
zg{j~BAV`MP$^#szR^WQnlE3BB`l@IpQcxgbQ}}|oqWogdHBiqXv@Ad4J(41zD-o()
zmzEzx4u#a&S|ZjVLc8Odt`n^XzI@<mVsQAO$aqBlqxk&ie2pO6tsH?5fsRY^+dP<d
zUX@#%9>h-`8)vMC`A_NL(5%}e!PdfP2w@PVVFGA}$jq?bc(OX<EMmC1Z!DpSn@Shb
zql=Ui>6(i6EhQzWVX%BecI(?S2>n14#z}F%>5#QDoDKTO18)FVOO;@Ve*pC;9A7e}
zf0ayhwto@VjZwk9`?jP)ydEBI`rcc>#ieLH6lM9X=x2*GHz$W6^Ydqt3l=dj5^i}f
zjXJw=Qcl-GwvIEjDuuMN$u7_;hjMa-C$OU6jMt}cf1m@?b=k-kT$386)0SdNMSHRj
zUZI*{YwcP0$aW%9u&*y<)R|=-8E~uolOArIAbTkF*UiU{uY}m>xHW%{lX+`+gzwF=
z^8;jxE?vrgXdOXr!-CT!Ms<NFmecx|Y6eis$6?(aTX6eg+Rn{vku>mK3GRleDusES
zN8fZwYu%)|sLs!Re5v}Q7P8dNr&ECpGuiip6np1}ckhp6O<L=NHGaW{HKqCOctr$g
zMGIf4ygLj^R-uR3>F*OT+keEP_RQF;^)P*uEIbetN*7yEASNh5ohpizNEBt%GqUz1
z&N}(>Pd@yg!vc?rfSsy0>XL(k%Pi40k+j5a0$yyFoG3VCu7Rffuf6@^CJsoX2;L`?
z7B^m1?CiAqU6IQ}9gY5_x~pk<@l>DWuF5H7VKEsN?dL~Co&U)m)!}ex=AO;J%S)3$
zL1P<X6W^rw;eWMl^Wajj1G7PtQcffLaZt^ix?pN6f<+SwOXPRuHU7CIe%Acxjf4Q6
zMq*J9h<mcQA2_?C?(<HFw02bNv7qi%@}C@wotyegIjy9_7s0I7lc=s43fOf={Bnp?
ze8bK;;g7{CR6rSCt$zj!{<2>a<_ObqS?^M$hmij@tNUIt&|zn3)Xf`bWG$_5W0_7^
zg(17QahNN2t<X=m@s!l~wb+ZyDv^SXaLif+)1CFFS#HcL`4X<L^e-09;W$)>UorTc
z+>xCrJ4Ziu!HCvDJV}CYk^t^8*cwrz6VkcJYOo{ABPtID!<_i|P(mj{Vr7|fR9)49
zTS7=oonRTQpoTLvq;n{ZHq-g)X7JO^v3IbPrR$BQ%?8)&5XV1(ST9b$QXEkKi&MfC
zV}qPux@*QGMznB#4Qgm6Ld$|4JVn%~xqmZ*9wKIUh^b#f1%0wXDhS#@L+1$>q*m^8
zm@iXjW`0Fd1YbhNA=76BDT(M|nvJ=4gCo&dS)5O+e}Y}DQ^yQ)3z|#B48b+ELzyN#
z&9Hf(t)?}JKO%{6E@mU8-$|3n%$NLSYX6)47sM_ZFL7IF9NK81BYxbR65>#*B!2K)
z(JC+tIOVErfVLC->^2#M=XAVS&jlH$9yQi}IdR$v8Bd&C#fSBzhj@j5gvNz~0q?&A
zy!4z6KHH9MrEN=s&4ZDXSTU1p1^pP?8FICJ+HJk=>asiOvu7bJ1S;jElOHo)Gcl5P
zT<tvIu6YuhBnTwdG}ZE;>_)mcG;0+k?RRGc86eMWGROcRyFODIGG>6hKTO2)X8y>0
zf%fRM*JSyy6C}-dy<ysJ#l47d`y70)(H=tIMd1;OP&GDkY5l-(of<rxQGKh0j@sPm
zYO<hn$y;qcc<(bsztbkcSRvd7ePDcuf69BP|3n;*3#{vFR{M;Y!jGMc0^ECh12*bw
zO?LfTIi9N$!_+j3tHh!`ANBsPu}|!+a*U}O1_ovf3Ypdg1CCggCUKE$ZcJP!Q%1dB
z=-=yzTWQ#dH;wdA+*!fTvzY>ii)P#2#^U;+cMI}PqS>8J#IGEE@RNS<4{k~*4^1nh
zLRTwk_=&6=J@mr2*G1>i+vK)Lq8<;9=%67;#l?w3THe6#XzO7~4dd-oYq0>&p=`s(
z$~xkgdNF;<#lvDHg#P`3&x%p&Sb&(gc2is?2j>i7?N3t?dQ(w%m&XW)R5u-_Yp!mZ
zM^SYhQv{_d0*p7z)kv9it^c6+EwHmw-#j46N;8@2;C2kUXbL9_w8Z-dPbsc=4p`aS
zOM)7gXWd#OA@^)fga-GuN$<1euD1ZcQ3TwH#kJEX4X=Ch7ILR+mK!rol#x`hW(XCw
z&N?#?n8Bv!0(hWH4{bae$^0WNl7X;7!@QjQIUueBLHMD=H0>VD8DK04Kp~_Fj%l!^
z@5!F7Erg|q<yvfc4kw~rmKa8W-b|9x9E=M@4{Id@N6l}M16F9+C0gh7Y(rCyzlKkf
z&GiMhCk-MzD-^BsEUT}^q3D9arR$&^=qy=(&l%Q<e4?lp+>{&0A^xLUbvv5y>I$i>
zmrNv}9Cja$F7&3d2Jb^E!8NVOHkl|rFenQF@|?B?q&D_Bu+|VXc%p{3uwf_Fes$pn
z_dp;c&e#Rh4bRXG_IjAPc%{Y`cCqDpnN9a^|38*nF`6=@Au1FiGN|M*(S)h%R-@mY
zfj5HD<f(K2r1-uJes`?vUQ4;0rJb}ddikh}Zd^}Z#cn}vOHE6KN+>ILU0tKP;wmpI
zRg9TnMYD_Zrnd<v_>-(~v_mR7e99L;9~|si`V=e;g>6IwG>IZHo?i_ntnFB;8`G)`
z_U7)sH%2!a$Q)Z=UJW-0*BjxE+#H`=Fwy_K1pb8>XpP)VGJPBHCV5?+(Gq))v2cyq
zb(%Tiu@ATed+`p(ttl}*l`N~06z0lWx}HCF6#K5ZXlS}#0;8~HTFBpbe$YH;IQ-J2
z_4<ds_4DI(5}0Q9an^F#<++2(EMY5Ofeh%3eG3p&TX$;T?{p#kaKmK<KX6}qbsdwk
ze+&j}1I^QGsE1rpd$LJcP^<OGweYX7NR%39lyaRGF@<7601@YZf9AAPm5<rAr0vQW
z5SNw!pw1b-G^VrX1cCz|)gBrMLf7F32JybGTeRFR>j)v%|B9RD;g}EfVW|s_#gtBo
zzC3>&icRR$Or7_VOM&4IQV{gA(ApWIWia4y6<rDHNll4HE*hDWUwfz%W;!@E=TCbb
zpTym=W14nK^^duUo9Q!8vn?<FiWx1aGv=duJ7X^WuULX*r2sxQ>6SUMd>2;{=0s>h
zw8B=jFtc)PA&1seKJY;!`305Pe1<$Muc0%2G5+#)^D_xZ((=D&8Fkyzj8<#pQBsqL
z!Fyl{3yxOOBx<69=F&!!3{)5Rkr9wHg0Fqff~u!nPzx&>97jwgRMfT|$eO8@^Fcck
z{gt{&p<b*4AGI_ol*iMS;1T9Nx0S7@w9%<kDW+x)-o#)LGO2Dq;yv&)tv`{0yApTF
zR;u56*Km^GVRBO?5zqiMHL_~iv7T(!I_N|2Ru}f3?g)!arvqD`{^8I3`w1b=XU@aF
z6#%2WesZm;pleJ%qC$F-k9+oiErrfxB{-?<TmVNuW>CLc^snVF6(Ds{(g*Ts|6PG2
zc5tkz@nQ&$c&pqe3x%QXsa=5R@S*)eQRwTh<KMpKf9Ftp<L@jM@8U<YXV6NZR|$XK
zK9*+ANFf2~Yj6f87n5dDft%kAxJ}G{L5w;AU<tR9If=phZUJGj&hu0W_G<K=^&~ZG
zFkbEEO=1Fj7*m<rC*s2K39E98>1$T%P^E;H^ft`BP`p-u*!0}T`enE<dem9Duns=f
z(O_1$3Ai?9*Mn{X$GCj^f;a;2nw55aZJO?zKn#%fxxIt}a?vgy8nMe1k?%l_pLOu}
zhtow(2}0Ff|NlQFV~}A9YOQa(671(x2|V#cV-ZkOU~%F|rcp?q>^4gFDf~xZ=VuDH
z_t!<WlVGp5xKJZx<$P;vBcxZ=fCvuD&+l2#Muih!K3WJKF|TytH_^tqJ{8VuXxa60
z(h1kOefFd?gtiT6mfh%36%r&Q?EfAAyGEK8{j1!4KXRPGl1l!)<-sY;*;aFbt0J{`
zdSm;v87-UJBF}^#3mp5AvV^!ATsxi2TV{ht^s_1J{<RNLFUZW)F*IQ>jvp&oSEsfK
zbg7hFeV-(kwbRzb%GR#S@b<0?Io&}!*%-Do7i=vp2EMa(?G(x)?7f%29FS1QNvTIt
z8|Z4U@p33dyin}Sng0L_gFamz%{&a?DDA+v`6PlEMJT{)2v%UQIJXsT^lCA2W%Loj
zat?wgWuwT>q!?PdW{lU7mb!s0jQFM@9>%R>ujMDT_pA^>m_#wu8NCHnLTZ+4yGW|O
za*ixJYskbiL+r_8rzT^u`NW2$VIrwNo!_^^7n}4~0=dXG0odCc^MP&z+z$Q<+po(f
zoXxTRc~93!ChefdH3kphEFMJ?L_&6<KGs%c;<k)HMAyP#+@ke+pFy!Q55b)kz-3;H
zU#yntg^dsTsQ>p!QPOGaU0F6i(8%>Wi<uyxS(Bora}rQolam^siJb^>Bp}edz%Ig@
zi{;AnF5*j^HH7w11f=s=n%b9JKiksAe=Dl1sS`T6IA$XoOFLRDZuw?>>zW-i2(8^E
zQ-QUy6(4lw2*TR_QYo+m%lJwCUb4JA)zxLiplVi<IGted>%W3d*(tDnm%3~ADB8<x
zT7J57snqUTg@;OJwVd6D4_>T>r2WAFv=k)rKNc0}w9}>vCa@epv9)7m0I5;C<yJZ$
z`2fxKJt<t#*bs|IX>+1>aEzdLx6h<SR!CW<TOw}BV-e{lqe9K<D@lY0Cfe#*>{#+;
z^T>$2s!{5$yz4-h8bqZL`CjOg08D1e(&}qrz1yrNi3)FB8HrwSo##IC*O~hD#_$at
zYhzAh1}eL8BWThzS~+l_BPI;xY69^$0j6r^*7i=6f)081^I<fxHx&~wObG^L=q-QJ
zYOAkV*_K=p?K1{BV3-r&<|lGL{hi45KY_EsnBq62w{%Jr?$^ssil7UT!t=+p^^zF;
zh~VuE##ns!ljW^I!BQ1TBca5f?>7+Sq46kxe$x`b{WBNfqAK#=J4BNrj*>vO1{d2d
zI7Yj{&7N9XSb#n<2m7AcGV$$@a{61vKiIx+v8d!WgP;_gIJ=m%-7VJi+~iQ=l`2Lt
zaX9OkwPqu?b2$l)e1q_AH8$?&V*7WB9~>9W_;~e8s;;iu&$-!rlUsjQ)L6X!nw`<a
zWOEI^HJz~{yT%Kx1ITPI131tj^9FuXuht#cT1z3~B5XGcIqli#xgBU|wSVAt><=<)
zxcwHzGesQzT;fk!&%yqvt4s|fJp{M4B<Y&qNItz9=m4lp?gJsh$F^n8K-6N|*NC8{
zX80j*(KazOrxd>YmW#}7MWZunV>r_dTiH6PL+sk4?XKJWocuBtEk0dt6@5jnkR%n4
z0l}PYlnBvUH}%ycOMScE1>TmpZT*oTi37a8AAG=A#2l7`P`J7ZZC=vAagXO^m&%dt
z19&Wz6o9~&t;p&s6hdq*M-i<*`-1j+A<Kw^IBTXZ3^#UFgR%1C=aBI&-(Si=_OCjP
zTktHP;#Ca&!L`Hr74uB90ggxe`F`~kk28%ZM{N{=nyM8@WX2sNbv4q2rmu;AYnoUo
z_5XM=D#^$rKWl>oNMaa~*pg{vk_V&H&ISt-|3r|Xxo~@OHeBs*bXd}h43`rI?R7iX
z!;{Wv;#uxngt7BK(+^s9R$`B*F6_~%m3y8D?U2MsSj~E);|I<HgmA{IyD^d18&|cO
z6L?s#M6gJuLB6h9A#d+#?R5_CbUAOUY8s{+p?WptL7z3;P;QZMHalG-L)~*(a5ngF
zZ80iR66EymG$xFQ`%3<{8a+kP4JZI@2c=)IgwDj7wfhtuSPs#4^5oY;tb4U)Kx|_O
zlPzsofRrN2b5fxP7G@y}Iy~{sYD8<i9=|m$k<|r=ZZ|Wg{U;@LToJ?Xm;ILLS(-(v
zS;9PNd^_1~Vtv>+RuS>a3ppY+*<ZSOoBaG#JFx~-kyg$IvJ8CF{HhGc1hS}n)F3T$
z51)3v!FyLmHS_E-(8SNurefTZx%k0F-u+{J?i(fcan3xd%m7PKcpb#-h-oMdqRN#k
zDUCd8#s<=%fATzX%l{xepr5m_U(|_o6>n`B>@Wz^kLU@h)!V7MxZsFE*E$Vb%hLw|
zH=M8KG7V$rzmIySl>Gw~JgRMhI@e^)?u~ysE65VKSSHml>mpt3JO_35o|SHVum5N&
z`yjoXDv@w83CwQ%Fo^x=>OE7&$F_Xq#jjF8%nUS_U)+n@`aq-Zd{F0DP&S(Cr290?
zN5GWxmA|G`;Bg&+t$++QbHA7yg(X7$K{m$AP+x-PbEFD>O`LGP-9~o;lmW2!9ri%u
zPh+ADx4QcGO{UlenIDG5B^}YO^~3)_0bq12{9u+4k9<L(ntFuOYEE?c?b{7q-H*{x
zDCtkyUNdJ-svQ`(gB+Tyhcf!Q4BPsMr$k}o9NS@4w9#yJVRCSY{C&Y_r&<^Tb}tZq
zXa+jLgAX89L0X$oTIJc-PrBzVvh19K0y3;UKzZ!Aml`scEu<%=IU!?!BLxAUUueJg
zM50WgN#r2J0c{7XbOi#PuB6AR%r5N@Gn)7)Y!mfl>O|+8I<HU6>Om2W|BKmplXAn$
zl9tGz>^z>KMbFE7e5)%^mBol0Pk%nWL(ENJp_}RS0?S_YS+}H0@xX$4ZFrRzHFI+P
zj9kC@+SdE=_j#7HRQ0*DG>%LUf!Y6_6NZ=BywY?3omrfms)cJe-(Wq8npiKsX`H(V
zwEki_DF}f;m3TZtTAN#n4-$>V-OEN8KOVoR33(7&Q8!rDG+q=Yj>)^oQz-F594Ef$
zdm4>B<bm$2alCq0+e+|rz{oGYMRQ)&5xK1ZNZu-xrCxTnvT|7Ioyx`H2p1A53%22T
zeC#O^-1Y@jMSixhi&YrGc6kUNL{Ku09*9orgwBz19~DG)e_E;5$KRugbs0!rRPj_x
zeGtWUU@=8=w1nn1(MykId-Kleaj0}z>Ow+!$2XECQs@{^K|~|anmA!@q_?Z3eK(Ru
z9q64&;35`9ah&B{m!plBaAqY~aeP&hcK9WMkXl}WPafA!I@BYpi?RWaJ}q(5)AwVL
zxH`xw{m=|cbG?z<I?)97&B2yCzGN9w7Imz<KAU;D;7X;=u5hIa`>_!pJWqM-XEcM}
ze`=JkPlUgnHK}uo8378d4~<WFt?jy2aLSQ+R~bx`mlGb&whvFH*q5HDX(P^Trt~_o
z|5K+xj_4&?sL`mYdK#miBy2)5jKR{0*%cr=i2skNcM7kx3%W&v6?AMH9ox2(j@7Yk
z+jcs(ZL8yC#q1az+fGM&egEF)f6n#$Ue&CsSv9KW7&f4P+!-~Pwt{`GHv&UZD9KAw
z;AWSWj>#lUOvwMiWHDEoLG!LJ8{O|Gm@EvyVCyfkF&lmw2bnw`F+L!BJNF6hlawV8
zNBp~VRLr?mgfSipNhmCABtmrCkMoEb=&fNCShoYC)Hh+~tAi?M5q46B@yLOdBvaQT
zaH%@bV?XlCpG0*l<z@dd_GT=1jOAi)JSk3Pc&jxWygd4N-ppb()FFxV$;uAm?}I&g
zk9~A9jdHT{IC5chZ>}*py1&p)3^Y4SrE1GHB<mGY5Xq_)b+yby5pEtUq_n!42r8K7
zI4<PZt0Pw~Ea{mfccNFM)wT8-k@j++YiyMzdKR-0IqRN5+LQAvBw?DxDu+6~8VMwc
zk9N&H{FhKGCC@0k8V+FA&C{6K8`KKv*NJ+uBopm{Q1!pLYEruzh1W1tsk0;4hZ5~@
zq|L?<?a251>^y6xF3RZ-HjMr4Im|Xai)(?1F@;QeCrlpMI!JhVSpLq-z+my;krFKP
z%3TSEEDv02b_evpPRp{G8oIo6(}~}>_%u86ZMDc%Z{~KFoH1tz^mq6!GLZe>=^1E#
zmLeLBERjZh$A&6T?=5|f3KuMhlVm)E$>{nJ8(%v{4*KQINLR8=F_&e@uWpI82+Os_
z4TmoDv|9l<BMN#|aB1~cRZgjFXy{n5$752+TA(~}6*s+4Wg@pBiQw*m4J}1wJ2UYM
zLRwQ}<?|$OJ^!$~vAVpdb<A;&pK-Rhvh!Q*;?G6_k-tzOnBvKoJP{PU>wMF`xgfsE
zM5}I)B=uz;uUWL406Xa5^7B{n5U_s2P^Azxy~LW-<Q|5!?(7gkZsQFfkDoGhUPU@*
z{zfxLPFqEio0ah*q@#_rB@V?gnubcjW(i$pJNf2pf(g>s%~Rh@Zw+q|W0um=HAEeY
zBJL$H;~?)3<C+)6P}=_66U~mWYd<jo*5+R~zOFL?#=lc!pELIjUY@?|V{WEOTno&r
zc1m6LYA+DUTVxn-zB95!3wFG^R$Nb)53*5CDnD12^tb_&7X?_L9PL*sL#p_YA5Ow(
zW{wxctzs4-2dd@93T$C?a!5Xt%3D>nTDk47q)K&r-HfB&M&}qks>6?;vjzqlh)%Ko
ze~|b<8Zn4x`&#>?qIo#S)k9*(;wUHxJiRSBRf=QG#`T}y|D@QtRW0<w9*)(`d8;d2
zaq(+<cBA9erIn3@HihhIpC&aDgr^5?@X#wSw*&P-`@xGV<dKx#AY<@Ckcb58n45+}
zT3e^E>uM5<RF(GF1uVkPYK*oQ9Jt?^C>-{KfR?s4(YxEFm#<`smNmRVzp@y)!sW#L
zZ~CdN)?h%eq+9ODf+xPqR&)aA3H?{!i+s070Cx=7ucYG3U3!ro74)CTFW!#J@g=kH
zb2F(E1y6$r8T~N%sy!<i8~{pNi<+fin~G~H8yS-X9UB0XskriqUO)N@XXI>Kjf&w(
zp)-VHx4bhcls<-V2`-QE+(B`!TY?9;8J`p+_%!fxL1RQ2_CtXOa}Xw|-Hb;{T_k?O
zJ+X-}U&nv=(XAF8B9V}oD?f)Lnv?4N)0Pwdb`W9MGYs?YBh|eW)PiA+aSH^poj#X;
z_yK>?g$vz*QH5L5MS|c_-7}Yc_=_!uFGZWURa*Kjvj0tqlH?`uH7^;iJSyY7ArkSc
z!6nIw%HvJN)PDbRLF#(v!MYMFvRc>CbAFH+%!S|z3K|6CR{<Y;MBG{uuvcf*)5&3b
zG5jk_Ci)&`53Yw!)>)&7430@l$_56+WwROaGz<(J_g|E=_{|%1hpW4~96?P6;Yssh
zD{z}gI`O~zd9>(|ZB7$a7Y7e90JwFge_XO-{+>D1Qfy+gmjB7Y9=`Iw+~NzW1<Pp-
zZhD0CRz%rNCeUOQ1c<-+;vUVSec3J<$*DIbyr{#c>$fR8UR9{gl^4<e&~4bN@rx^M
z*x?s-a!Y-JOT}!`B}}>3EY$^Z>*8{6eJe~2y>w(U<YrZN37|RLxY&&DJg*%y31c+S
zqY|~m;@&%^sEe3VZ6-{{YIQ-}L;Jl!&vZTJq^waVqoW4OS?H_5#TOlHc2j-m5JE#w
z9mt!oOqK`1J*y)HtCXa&Zj^LANYGbxDUNqkX21To<O`h-w#LGL*Y0ACngx2DT9T{m
zWMNUG>+JC#Hky7*{?Fi>%9rwVLAh~3c>AX89Lt5hg4YrLMo=mYDVERuVAkN}CYnEO
zI6Vrx16I(*y4qYpWRgyr;e%z5vzaS?&l}h?3y@;>U!{g1h59J+_gaUNO(SW>(2ij;
z^U%X=7i>kzjvIsCA45A@$QMshTc%Du(A;P1ona~q69bfit2j9UgfP~~D4hZ-felKi
zW`i>L6I}tcY;KLFUTZwlSTvjgo^;se5894ONhIWW#gy9hzP9kSknm8?V8!AV5PPtz
zO`~oJGv_D2ZC+WLg8Ioh<XoHGi-K&j(Hc*;w89=|;Gg`e!(b^scNQ8Y68&af<lz`+
zCc;NB>5^9^yLxJvjZ3qgW6;**={`F;cgkhfvq01aStOvWC%(pWUXEUa(@Z7VIHXWE
z?SPL%K(aez09?Ny(FxD!y67M=`rk3nHywDZ5mE*L-5x$YB4P?G&gghH<H_Wr{YFc)
z{QsDIALmv!BEm<ZFPd;_K8QH$cs!KVs~hGGOtyXTDJRjo%9y(A9Zu_OV~^3tszUYx
z5TLSLFuqKjZRnofzSiE5!Q|r4bP0sqh7Q(p5t~JfTH&f2AgrL0!6-vf(@;p5N!D->
zIQfNO2H(~w$aMflCip-qke()6#?G-tGNQluzC{QMbcl$d3^iG8NvcNncOd@R-}0&-
zOO;()Y#!zo?&cn|RMXo&-PP4}Zf?)7XM7gG%m$RV0P!UWxsTlOG5lo))V<;nZ!sZZ
zM>&kC6aP%1h7WO&50R!}ot$i%x;DN3!{b?z>h<4#L85?~3)*eWpU~+eThXnhg|3G+
z6i)~io(p~VB^2eg#=q9vP6Dr+`N;yp;MBw!Q3iG=PVh(Y-@Mi;!L=N2+n$ESqV}dX
z1P|(FxRnjF<z6LAIjMLDIBKSO&Wu)gV;^o08Arr3f1Ho}p;1#zkI?wz9we`<FJn5n
zBb%T1CpYe=Y#5d?AcZtQ3z1)DMb!Tr00cjD-N_%L5b`r*EBsV>O&@SxD_1w_rO?h+
zjZf)$qo)v(jb&CIOo9VI1PPO%z-qAEVIh~+)ht{CR3fKJFUI)lVDB#IQ3y7KLpX|>
z-)=&@>NVK0h4=PSG#S$k(?&ilr(ApmEQGqc@p3C$ZGkUj#m&v1Z=w@z>p>>pmc+My
z-=mX6JYBP0)#rW2mWwGW&IVt6m1?aPggEhXDnqK;4`+6k9Gp!w!_L?`#IE4+qY7VD
zxjIro^{Wxs<GVPcL0G==TZRNTtmp5Er37!#nr|LW#k+v^(#px%`_cK~a^MD5a%ix*
zag8Zal4!%xIdxx!uX?r4-`?51kRb_Cl?q>D`KT`$-amDZz@}62L7(B^X=@<19mFv}
zLuqRvEnQz!=XcQrxgY%Cy%(FveKx4|cQ+<b#_5J?{@d}rnc4<E&I&a3f_sQ!Uya~b
z8AOKGnREK$?3v!Fq7AO9gUJbE5D-CzrG=#KMjR2gdG*F7K%YH8DoOmXF#DD)!kaVD
z0I8L)mV8cb{&LXYnt^Wh|Ct+5jrLIUv!q8_olxSh*W3m_CG0GpL!Yd11nf656oPKy
z5Vua1pgM9Kun%dILe4;Ii2+-42b}!cH{oNK!o1=G;b#qL*Af8CXBjuii{IBD_CGtT
zH!3VFoJOMyzHo`-QQvR~iGqH$=R+v2x%D=uwmW>)cSw8+eh)QZQ2hLbaY~`4rQ?7^
z=^O%8rNNKVF`c*<U|C?e#7X=$eh*u!=1Om8RF@XHP$-R6_8>_-M-e6y`L-i(x{f_h
ze}ib>W-I0uKD2@>J+?bjj<ZpqRh-ph`#Tdgf0M2<5gYf=F41FTQ;%l)0X~np@aJ8V
z_GP%a^)D^)U+%6^tqiTd>LFWyT?0yc#Bi!8s454Y5>ZqOV{{9g|7yz89IeMtKENb5
z4V9@i7M06f?zDww(5I;_<~=rOugQYX^GE0YC06vifJYgzNupv8G7Q_X!1V|SdezTZ
zg=3Fi5~1Z#aWW)QXjeAMNhr%z%Ese|vaj=>OvT~SEOkV7dgVGiQ~<gBe@D?^tt_rF
z*P9Z%Q&*?LrQroFbfpn<HwAf^T`rn*Y!$S#D(YZR|H_wEh`j>=uk0K{6JcS#E^9DL
z$^+Ys%d?<fi$N4aQ@(TJ5f(-<H~b>5V`B9;4_NTCb`Voj7wOP>&Bw@k<<r198tM??
zOYlgvMKpgcy%sgg65M>%yb79EUhLe^C=9YJe&^c-Pw)cCG{w)xYYceh^+-%ZS(pNA
zFpE1iT}2>3IW}3k3#@+<3GObW60({cASQ&0*GLxh2Z>&Z*MoHA{`+GL+%1nUKJ`L=
z;GWs-MoYYjbD(M}3b@E|8Qd^3_b?_(v4%Vb^Wac<NtY;h{8;#$F|YHYnFsWW^^O-c
zB5#Gx`yBbRb=K1SF9oZ&@W1Qn-|@&Hf_5T945lS^>Hx28mc6u{YYiA3x`*RPQt`aW
zVZGTf_~lqEaHx{45$|Tv|JS4>C^bK(N^>-1bmP@%f&o%h0GV&UFeHv;zhUzBfl>{D
zoh5xTn3actz_+Fu#T9_SZ0Al!|I1j$t8TOXbk3<{L`3a*wOk%}d7g80`z_<}XM#dm
z2I&?ZdWMnU@2Dhj+>U5t#uBfiBuYUkmwjlgeh9J{Y_8Rir08K5zR0m##(1r*9uYz3
zPRv?UL(?#>&2B$NK?xFuo~8kGNM4-XPSN3|cse4CQp#FUaX=~305xMotr(iaFy4El
zZ4?I4Iy!z%qR}zTby>{J{u`bD&aI#Qdd`y6ttSz0B6*(Ld|_R`8nN2)$vY2ZdPUnD
z9SSO8PwlJLd>W0i@52d&{<kD8Sqa@(VG=DC%dh(Mnfu?qk2rqbl#y#0Nw^Ap-P|f6
z$F-2T*4Mt2T#8-X(hA4WG0i<sIU1nQ{~xaenNU)x-$nfFM_PA@>^P!$)q8)>f*rp@
z?J*bJOsOm?EFjnf)diL0Fvl-0?3NBlp!C7Q!DIG^I90ZB9SSm^c)k5EK(Ozn2;OSo
zGx+k0k~IfiL}UV{49+ogSQcs>=7NI2YXaI4+9Ma68$Vcf5O?*%A<x2_0C&|-J2e_%
zE0&_b#b*PH$_s;AQT~%)y?eCCZ>r)tDp5-rtZ{>}-q4aVnp!a%$+g5)S@&?S>ImU0
z$dinWMC+v!F4(PwDx$|bY~s+knYn4y7ocfg(-VXcElqd1=jAB@ALdcc8J3|N(*zJ&
z?x|HCscUl8!oE5`e2aP{*V&ksn}JO&^H7j9O}sQcyaRC0loJIRas>9ZgejcL<(TP2
zO-C+~z+R4Tg6;9h9-;+y*LS{1Ew40YD^2+y-j#+3ORN0PjRt@iI1Bx;=e%?MT}NBK
zM2e^}Nh)%#t#i|QTEgCOPXd$y;x*Xu;0*xU>>NjS^&ByJTGLd5JXo+tjY-Pra%Fmt
zKvgDhT2~JbrgcyRr#ZLJ=u6cJ;*dfF<wZjNgd|tOIWHnrmajlL7du4#9yOwOfA5m6
zWjGGOD+vV^L=K&C7Bq(6o{PKg=K90mUJ^D8YBUywY$VWl)K!0WO!}xYQVFRFP%6D1
z7OYSG<I^!rhWXCMq8GUdJ`KAy1SI{HpEh%Rj_!gd$lQGmNpd%3b_oQB@43ox22Z!8
zW+fbrMkF&1?)u(h#Llip4gTR=g=B2Z{&!_Tlh(9Cm-%(<F=H<@wWA*mRs%|nUvYhv
zpvw_6D`2;HIKE>C8L+EwydTJ2x6;>>nJ#kQ4N&kMo5!HngDR5X{$C5yidQ{JZ)x5h
zTh<*2qtK`rf2u|DkGrI&9(8IZi~nar35;nUcT)3MZ}V(RER>OHlN@2mN8roJOV3$?
zc`>*NE_m=+0{o27U)*GDi!acN<q)Szj1+h<L6Md`p$c)8sHlY~8*0`)bY(EXCh3>i
zyh&67mSBL$Ti=5LZL#wN<jq;QxWd3V{1|vOq+J8>6y-UTMV8?XR$o!V8ZX+X@O@mH
zN7#niHM`X7la`vhW?m?su*mO?cOv)^(@`R{%-`JX3CJ=@R9k0G0bVJMAxGS*W2s5_
z7<K8Mu1SzD;T1yR`D~CUefuE=K;|RHpK6hTB)2K@H>&Gyad|7{h|wvAv{GZ|1o=}E
zpc~=1bNAOd?bjeozl{2uRe&in@(e?oi-j4N4rQbpwqbw??;(-A+E1cHZ0`ScLor!t
z&tfHT(1Qr1-u#7f3K{RZ*G;3+4e|d1K3<X?yAX^96O{z&DD<bxl}k#3GMSgFB|y!c
zDNFH#MUc~ci5OcD)4Qt+dGd4iP1t3Khn$Q1Z$ac#fosm#T;nc(xIt@uMiUsB^Ds8W
zRzYy}cS4v&B(p!LMrf5kxV=zkay#z!>?>>$lKZh(SgD|JpWUi&|8C3@+>2Sms)mjU
z12=8JPdq=GsQ`N!WGN&l5-j&4e{l13m7;tqg#`hJKj2AAGf_rYfRA}_fC!^SZk94?
zEq*uRmY*1Ik&t_M5|A!VBiWhg7A5ZBe+7bSZljUQ5$^o(SL9xu`R>GGAjC<upp^0|
zm{r4rgRvWy)$QiDdm;ek2v(e12$k7Cn9(+^Gdm@kA4UZ<){+?h-`xz#g1mFhOlbHW
z9aOVnm>wZZmh8S$iE2h$NM0=IcP1>Spd*<NIf8%;A$Fi<mB4^vsOP}KwsEcVB(Ek!
z-$y^H53u{2bA}8U`CN7T^zz>@24zB<bn|fM5e&!~&kIE~=|Ib2D)C5n>yQ&1tnwlJ
z>Y>j2F(`9GWM>7!+_b}MZPe5<!zq+bAC&<DMOgrm+;9?U0fbHQ{TOneg4myiyj5^A
z@e{5X6A{|PNNQNVkQVT4sp<x<@1+$vbtI@x!o%X!<^&-_%aguKNkxN5B(-ASG6tn0
zgxPpCEZ8%%C{ehcaGJ-vw~hG`K5SZ<;I#O$4dqcZ+qlUqWfxw)KSv`+FQRRlOPFHj
z{v1ONGISf5wM-(R$oy32_rqx#WQ2mXIyF=3+&MXtm~$a@%Db{jeAii$UW5`#ml6H{
zYMh@U2NG2$By((xS4`=X;V8S&N&M~F_qjHOW@xYgDIp~OMxi%8Fd(nWqg17?)p<wH
z>yJvqTLl)K0<cOd7u!x>+o@vdf;gl&Q66%^Wu%&1HinT;Za?7Z+{U8c>eE-Wam49x
zU|mh^x`V1IhqDG{nub`-#EonqfwQ>8s~9zhW<ED$_iP9nt-D|Ve}cq}t{s%MFse*p
zF}lj`zB+OaN0GPoJ-?@>Of(mWBu-nBN?&-hh<;9uWn`un;uckd^o>`=OY4-JRgx|F
zo2$(=4+k7m41`2&VIc4rcB>}4PFH*bU@nd-HZY2RF67LI38jL3{6m^uqO`=dKa%FT
zq2!mK87(^S7xnf*;+#uOt_hc}ttlKJI91a7w9MI$jK|raEyYKfT;&h^SxdQ7s*bY}
zCdoQ_wSN|{QnEYM<pfSH9U-pDReqQl@#PcQe)iKJRxU0tkLcyJ+8>V7eiQ8fwo!oK
zC2%tO$UnkOkTOW3XUow*$Z>L!1$M9F;#sv?y#s$aX%tXV*+2Dw@KArs1rX8KjoByk
zQq>#xOrs_d#v2Km<Ke9`%Lpq&p7Lj3qvDnf4_DZ^ucdOx<zlE3>hkf~-GgTWV1fT+
zTK+Vc@86H1yWWEh9w1(|*7>*hv@5bKTnjmF)XvHp;un6ot}}+oR;L5Wg;(uH!j*Eg
z#zOAH-S=8nC?PZW3U(O<gSf1xit#+Wq$&mN>`<^0G<Ngo5jACj9^BYlBJ0XXCNE#j
zQQJ+!YaotBqoY`^+i=7!DSSHih&ezjHU^$W6{@v`ann^nO<d(Dy>FbyUhIqtUTEd}
z;y&ta9xnRqdjJbPEsd|F+`Z_YUKlKFFV3Itkv~!;&*vt;;Iu7ue+z9@);nG_P*SNE
zxTXaK%CIncyZU)a+0wwj>Pk~IQigN6GeFpR_F~a@vhp?g!iy^IYK-|p9EDG3SShIQ
zROLHq$nTW&*x#wBcKbjw84bz*?QiY&z7Yp9=(P1ib<afXgSY$NbDo@^^Vy&I)R_4C
zZa$pu#_s<1c^*Wz|02EM-go8Rk7Zkz{Tg8kz^wayR6gyMj;__mWOm&3-Xxdyp$icc
z77sJ9AhNFCfG2za(b+0mQUaMoCLzhTo<}R@`T73l8~RN%3HFr~g#cgp4l?MwAi{zl
zJ&3zpqN_~BrK4<u&CQU+)ip$YdaNWI>A1v|zgt!t{FYLR{42=5p81An^dn>TacQ_B
z?!)Qs>5@4Tp1IcVxB=8IlMprDVyiiNNkCr+`vaVUi}r&>Hj=T0--BGpM-b;Q_DOG8
zbBdkF2Y@-u;Z{2baF~Jw<pkfr@=$2l{n-o*N1x4XVIvCMZr&AF>vRoW3_?R=mHM9x
z&oQD|b{B0l>=n^opTMl84oi5AC|yqAze6^f-TlEPcV_oQ4MTctAN7~;149{?XqiPO
z;Td%?&nhLS45LDCiI+jHCyJ70u}~`syi3wyHwbY2E5cT9f-y97B#~*&r7y}POycyi
z8Z&dPvhJH<!|3%L9aaN;j|$>5_$bp<7Fgg$QXloc<2;ba<+l&C0dni)k3IB@0%Qx%
zOfex-@uW<)FZa@rePOrnBLV<i+Yd<G`ZvAEz9@os^9i5`0z(6EhbK{J(G&fB3mxCb
z|NE|?b9&n~z!D0i=MsG9BA%Ri7V-RW==lbag0>7a81qD-C&cn*fCEf|s|1u-Bm9eh
z>m&;;ALsk7@GFmQtNhoo2bomp3+O&(kdIa1_NkgcST#dwAxr;q+=xCJuJrzGhTplz
z=(O-k9sj0W&$aIE7ly;@30t*9t9ut)9)t|#pYiks2jB=%#S=GoGFMx;px8Ct%tbM{
zz2?=RV+32+7ChtvQ>rt9a#V`q78Hf@CZ$&144SFNXy7KugKm%uRxc8t-@LiPM53=~
zt8aC-uVtrbNtT@;c6U;t>_}EAq;ZuyoK~i6+Pe4dKx&AF-Egkc&+}E9lE5G=&t0JS
z?kUUxl8N=K)vZ@mrEu1Y+(^aXOY?T56J&>Cl~E^Wh(_NI6j!tS@g0>%j3WG!uTS93
zHToB`&#HB>0VGl$2?VAz(xJ{qE?CbUB<}h5gfCEaqJj0vYEMb1LRJ(;Vx(<)9~Sp!
z#CcM1#9Y0e6+}_$VikGtrO-Y-{_p*^novMs%kh50A+-DYH+C9iy51dvmdu>24gfFd
zw!4B10A#iIT$_vwdRz|pz#~9n<o@z4=3R69T+m}m7doeP`PjO%2tdoH+jy#+^~GZB
zdqC5w^&E2OnV%w#*r<aDD)7UY#tkkFnu*#^x}rK5`65Xc2VM>MDLr;>npc_*C~XUp
ziUER)i7UVcv~W_Z5{bjcGS4F0g;|T&tfj(le-e80Rw)ZVNKO(UIkGDj7mJbGb@x_H
zFB@7rL;Toig#5A9tJnQDX|(Z0*B^;^BhsHsM=l*FYtN;H&&%8tD!(xAtb>S(TYy-O
zia(0(KI}v%NDx*F<M<lw&MsX7aO8Y(tnq*hGxxu48#gV;agr}qfwUx!!lD)uqhKHS
zg{9%N8+V@r20QA%{jDW%)#o3?wtl}f!V0biDnv<zBLVn9$Jv7LH&%3m@iRH!UnBg<
zwdvt=%e5>VB*Wit{R%og2Uq$vnhsV`XW1+TIV%h>EVd%q$OAZ@Ld)EZgyQ0avuI{v
z*UX{o>6KAw4!z=pgI{Qy?|=Op>pUI2<Jdx~j|H`kbkK*oN~f;)0foT@(8}wxrLM&{
zT(v#v?2dv-Ea<UN#<~WL*iA3|+;8jxs4naRwuZ6slbm(*%8j}&2jxOGf`4z;4cO?`
z=L_fnk;2SEbpfX_(|?ot57YH%hlBs?@I^|7VKm(`UfkF29Z<ECj_;}tjE|F=#E+?4
zHk747q8$GfZr><`<^s3o*C3bn1Hr7=v5z6D*;jlu8{qBGV7`|d_Hv}_f-TGt^!#Mz
zWHsM3Xx;w@=VbXMSpC^?VAWBfK7h9NMYrP$c2#DvgpZe8vA}XsrG5AV59YQ_!=6_c
z<}$q5gfA03y_nlM1RhZ>5`8zpY$~2ot)^%oXArj)GIJ*tyrS09{L4#)48RIA!A3^v
zIyO{E<7?tP0w3bwONaCAiDyoJT3E-9PFS2#Iag-7KpH5#fZ?t$MU>bQw8HV?>vVal
zj+o?R04~0gtJ%k`BErIf-0Dq2p@vcv%2?iL5<e}CYgRuZO!WHQ%~X|IwMZ>`ylak;
z6#sCH>oPkWA-^y|MB*aXJT_Vt^d2x5LWUG%7}-E+iyyWpTAfGrs}HB($TWp#kXG<w
zp_Z_=bxqbNSJ;!Yp%2G0c1%o5h(7x7^=r0F+?j@6PUm)igKKr#Ov5+RGp-H(O=#{e
z^}WcV6BomlU<}N<8#5~TLQkRlb=~7Ycc6VeZ8*$sr9;d{MW?zi5HTLnx+wn~RvA?u
z=%B~Rhw|Go!F_pMxBCi9u`7J+f6$VA=g;|+J`eGl=K8G2vD%=g#A1b3QTj_5)hJtV
zPJY>ah{qHIu6G@g9iXgtydhQ4*!|~zTomXGCrG?->jEk@{Ur9C8!sh~^~T=&Fw7jD
zf9lG=wfofGu{6&;*_R8YyUcJWKhKyT=Ikh4@N{M3+<Nl<%e|6I*bRkK1SU-K0q0E%
z&|v{CA)5w;@Ws|{{^V^W{j-HGC6!bcQUVExJaC<+u6`W8mN?#T-W$$-VP^^RyQr()
zgWnpg_DTBD)<ND9J2;X38S;}HaDU_*)NQoj7l*L$-KWXZ2Fj}DGG(ZtTY7Ex1hv>q
zX`A9O*vQAEqY^3ci}6aIt|=UfGRk<A&4wKrE@Cxy^pKSi`Aa56oJ1%`B{&5`cYN29
zN^)7NE|?nnczK*RUL`9FLv+_qJ`v63^<dJB2k!^i%l9%Dy1%5ft|})GOjkR4coXND
ztSj=o#)>T##Ta1NpUjUjPiFAqu`c_E>+5ZOW-+$JtURcmDsddud%>hL@J`%&!wDNC
ze@Guu6DOd@6mSm785;n>>R?$a$=GFBn2}^rdakA^WomcLxtRryk9cy}_EI~GR<h^%
z@9%Q@s*@9~>R_zV{Lg3koPA8)4=T-wkbHj=o0|v`g>mi!)yM(tWj+5u<RZuVCiesU
z^#N;iO}_QvgnU1^ZsBjVAkgSn`VL0EBLT60Wgt3uUe>qQR8bkcXE4E(4c#*i_iF+8
zVY+T!OX>SQKYP<y_d6SG2|9@PSxcO#8U&P-L#m&!gPHtZ>B{oz1GegixY$gHJHPK=
zDa;|N{A_Fa__o^X<@cE9(N`U&M02*n&d|y8@6TVq!QtWpL9Y#+zsY`IRpZBx+I)v`
z#J1(n@4G(5f{azOh)m;}ng>hYHeSQi-w~!Fp5F(25C@JEe3sRZ(BBAv6fnz>lOsv-
z;DY8Sp0>yrVrP61Pl!Z1>>A??*oSgvL+&Fa=U&G}|4RIV`dLE!B1(=JuD=Zb^seS}
z=Xq+|BBVZ>OCE6_K|GDTeO@FSvu9wn(&>M3eJ*Do+hR{WkGA)E>6@@Vg+;aBU1c}3
z+-Fh~(~>Xm+Hw76vySKi@elEcZ*%0qOc8JRK-7QHJHRdIv8OeDHT*q-APQm0xLc=U
z2<X0N4nD%LZD;a3oK*f&*^YF5$9Q}btzW^2!G-Z!@zpoLoc6GKThtn~0Tc4lzRBwM
zUF>YB*!GP3cv5iSsu%DioY7RwslM6n-$)%@6uox1pT>oyP-`HNu5&cxGx32(W##Ii
z4Z$FeRQr}p^vhl@D!%A`?zuBB0XrE)<XmIVj<0b238$R)LL5eYIDA@gTHn%-L-c5S
zRYOc!*Kr@H&-EnKJDX@;@o5QD@hP11`<~$B@^WeI!*=}Q3)828l)mR|Xk*H)2=aE6
zqFfa=#!7Frmmu~Q?0ZDR@(~(ta|;z50Vc{h-NkFG@q0+O2dzVk$Ed%>;+-`{yP=jg
zmnI`k6dFmg%_=#<{7xhx8A+geVl`CH8!hme`A*F16fv12Xy==s*!KWC8M2K#5yG=?
zXmX#_tP3=gZrWI+9gyT6#&udL$|NxS+J{<jLIj&@S-n$1Hh~Rr>$QII57>1;0gC}@
z9N7}%blsn?IQZhBFF;x{8WQevGFgTS5E`f|Uh^_XE1Zl>2q0eP%2to)aOYYPR-&Jm
z*tN_&Ap>>FbO3=qB02>T>@IioU@D;uWAR0KOC-lH_Msem!IoSBSJBATgyQpo{r;ek
zhClr;WOTTI4>^O^=vRsmT0Dh0l85OH`$-PNUqMK5RMLh8M&=IYfsH{0e{B{VhvsXw
z1v9YAMogF)(4Z})2Ys(*V_7XT_TFxg?@5Z0@f_!FHu68pT3Ya4R5Kgl6U4~>EVPbm
z#u@!e$32fYUhndfGd&P1#!O3Shgtp>XSS+gX{a-GX33A88ie0BM%_ow)}fz|`#$eE
zvO&Btf)1}uWQidE2DgE|fgb0U;-TNSo%iu+s(~yY^C+#!XtH%nOEpAR6<ODDk<0@`
zj%%M}>Nef}XUK!v^LxBM)8OkBGO73$HDTa$pslE>+)vyjFhKzi((kt)gQ?6qqvcqM
ziGqJ7D&Bbh?QPUx<G+RUo?-m9MuvK)5>vi2EdJwo5R+KA`UPJNu|Bc*4Cz3W8_>`6
zX2kvAv7m8k(U@oztM6g5503b?x{sPYO{LrTXB8h4AJ@&%VS)+5Mk(PS3J{Da=Ja;4
z#V!pdez&p4uibv_Vk78jca;QUzC}(F*3Qjz09PBttoipj2s!gpVoD<TrmLVZa|{`8
zQit$$9QfTH=){IC66hE9k=%y-M46X>zjA++TjUkkj!$OCH3c7Ze~zE**R$nGxba(G
z)v&YT(sS*V`{l;q!;JmtxC`sm_dTiaRqM)E%4|EiR6z!@#y|*P?$5Rsc22RS|F8`#
zP~IDPu%~efR#5StCHPb(O!P9^6riu@D!-i*beQ4Lo9Qsq&oX#?+CtFbAn1JWDU}3I
z4?rcum?T$F1Wu(Z>R%)ju}heNZayihaHRDY#9TcArOOKX)x-eyqBX4?c=}M|GMKk)
zovIC(Dypn)EWB$Q#$Hb;gdv!SSh_|ADtr6MNA>3Uz{)5YEjH%BS=>w>1E$K4z9QqI
z;fw%TQk+&}o38<;Wf)j@uXaT-`G`Oyg2>0g!`S2H{@K`RQ^Vu6_1cMBq99MF&?s{(
z-+DSQOrA6qVOc=icxhy?3)@g{*?tEHf1*rYB>3Fabt?J~Px4GnDwNK^?%L#`Lu^k<
z4}=O~^w*}<L0*WVUx*X%)N0%s5*)i#FjEaOw-S-FB+mV9cwPw$v09BODd80|1J$a+
zEWwaHn}9J)EL651Q~S~=jsSpo!6eR-P|ug;pOZNuWqdDe!@S=OVnc33fTM_9_`4T8
zLvKpZL~pPlGv~KfDMh_zCrgv~?OQzG_pbNWxR?E7!$WgovnZ6Vn7PimT#e$jhU2}f
z=6Hyn({_IgZCI4y*{{vVn?=nJ3<9fy0VqU1%PBHQ*iN9Z7y+IYnV4GIat-V62Q<&w
z>urKVw}HC**d&Z^$o8hJ)md!hq<=ZhW8;=rBP2;!N$&h~gM#V0P>FvaG+0s)<YzET
zR+l1d#$P6<!JkJ&W7QB-;mq}?RKYY5bT{>Be%;m6^X9>&fg|Rf(i*Wg>{YqgI~G5E
zIhw<g-@#5sOKZN`k0T7j+HaB%oyYY(rlolo1R=jsAU4EkUPol2f>tA6OZ|cm%kQ;@
ztepJjUS7^h1Wj9jw?EasUIR^_zj|{}S-3f45Ms<9pSm5M#1V5Lfnc4Hbi7Dkpe}16
zjm2r8PEXmN#<HiF1^vyEF_{u7nfN_x`26W#&F{$fosTXMRZZ(3$VJRJvu0z$Z_&dz
zGa{GXZ^*Sp^bCAY<hY)T?~U859vNTdO@A*dIz7Mei(k+cGj5H53;E)&i-H#p{Lqt8
zaHTf5<Fao3HdyuNMe5HquTBiAJ@Z;W>Z5uZb6_Y4oD94X*I&Jw|Az0A*Vo(ryKn0C
zR^9EiHyXWKcAs=mRl^~vY?*tdLMF~MA(-P9+kcN=`SAX8M3XdCFOijSi++6ZfLGi^
z`kIAC0{0V$mK6F<^st){?p^*&La{x@fgLpJQx#hL*)xLLxe8q}IF-$I)5V{|19_br
zPGZ%WpX-2WT!E0a--Q)=e8dkWMb1WjSSiG<EdrO+ITq71BJ6@nBS8@*Ov2s8%)<h?
zxVX6HrppSK=v)d2?o3J^s5<cI7iH$vVWUNv_*L9Ffo&O&6qnUO40>{G6Z0+{n-C{b
zs}VBE=u7+H>aij5E@%10#Iuja@_qSd?YLbRS*;W^qt)@uII&61xvBNSj+itxD?OWB
zGecr~4qbc1CRz{^Uoi$X!zskc=ntR^yujoN4Qx*I@HK~9TqL1CvrsX)00s@`*h#&>
zKtDUevZ3OkF)RFK@f^?%+}S{)F3S^}#{AU6?h+FT)o75HKSvaXybmc9u0cULq|^Yj
zf%EPm{1{6YH>93Jwv3;2NLOhMu{VF<nX6JWI5Rn1wgzwqL<R1JH<oV&1DQtfei7RL
zq5R{NHCm%!>0%QNPakA>IAHOSgWW-LJ<IoJ9ylJ0r4OA-#V=Ze?6?>YLATc2r|^!v
z<;qqNKKQFnl;pNi_W)+^%I7L9wI77VCA|(WH4(IUXTLY2TRwi`>#ub2uGdt}B0Qa*
zxwAi&NS4#(h`=B+Z&HVN%9_`RZeDM?Ib!R1RjXBASZO1}cpVP96r(0?#*ruy21(ZQ
zi*eu;^gSqkWo&3%lGOJetRFt|*rzZv5Qzz%O}9-iTTbYqD}Qvbu&9F{mQq5p0ykKV
zDQD+o_Nm-Hf+a;%+imJN^Zz>5dHT};S7ZC?ogNEa)n<C`jXxHhe7PH-*W`ZAh=lKu
zDRo}?>;$E`y5NQ*W8?HuF~B6Hd%Z1qD{bg!>sG_sv<L`zAhba8LnC%(C~o5v_wM@%
zVC!d96rot;*q>(|n@86{szsp8ImUYJJj$CgLFj>zy}13LCKEzoPsfToOm9;bvW2O(
zjal63*j=H+JBsrzEnqm+t)#1%WZmP<Rdvq=6?`_T>r(rnx|mqgLVqGEt0|Fc0+iR{
z281kT<d5li^K%o1aM}*iew$Ysc*Q2W3W^>)VsGW25QRQt*@oD_U5V8DFEO>)b}ucl
zDMCrzgH2Dm<}yC!h#Zc-iFyk)dl~3)x5M8hwFgEDZ}8BF<X3Lc_r^IW>ggPc9P=;2
zgJ2ir3gHZ#{7~~^q}2Ey&9%+NaG<ErVi%BwKZrM1{#_m-)8?8oRj&F=m6?^_cvJte
z*6QnZXRh~SZfgVH;);7Hvm+e@YCB0;c0(Av73a#4c1`l|am{Y7$7Ic5rrdD`%zAht
zOJ2q3WDsAq^X}pg4(dYDSO~xAM(_BJV^5SQl?W;;6SyIo#y+2hz*Fs+w75u?lJK^g
z#H18MU7#7w@qW+I)w6nSWV=$$enF^38q5oUE7Jn<U<D<?ZRTQB%8BOk7!?K9#v;+i
zF1yD<hy2A^7e}{3n>qCf9Sz;X&61^A=IQzH5^C<C6pkC8x!xFagRYbzA@c|xP-&KQ
zgxsdF53Yc9HH08+M9-q280jGGK>@8$jEQxoTHM#;EGDw%>dP(vF`98|mXgg0#V_Wh
z(@wmYLzEk(^)YeTNa*c9#^<tUhKsvC#!*7T7TDUlDLT(XrUPg7CcBFjI|&ZKud<W~
zNa~K|7emA)z7J%SIhqVX5XAw4edJ>Ae!@h@*~3HOsvbk&#g4_vp&|iSf7`6orP-+g
zpZ#_qkC>ovJ?Ft>MvpcEUdWrR-(n<BUAnZ*V(E&!h?57BbvrQ*V<bliEkb!Q;~;-Z
zZ1MX0o5lwJF|WW9_B|*j<_M5DE@cUXma$(|6uH_+gD`zp2y&ZYi%0*L6GK1`Q>O%M
zDvBO$ds~1;SDaK2?Rk;~e%JfDj{|?#J?SXBRsT~4>zo@t0Uem1$JW<*Hk69yQb?T#
zNy-6x?MIeKEPYlcK98)c<e|IvcSdUl5)FR!69oObTeJwx#^PUL#nQz_2bzhEEPs4M
zO|k$`wJesq{%+&@DzPlT@H)(}*(~`GcT!&Pzq~%577%pkDKRU!)p7kW?k2+(OOWOc
zKYf>Yrr%VwTHqN%yD2Ar0(tlMK^|m`d-$kI{ySB$c^9^k#{H^<&Q0yxzh0-~ZW>ir
zC}t7Dj<%3`!g2BPqIT}1?~LgaM_E$XS|I2C5%+N4z#l<*Amfrc3N5m5G50Apx3##X
zG3PRPa?_w3z)#~-x7p%U+`L6!`|&qUH<v<<wqsmnU>WhVgtIjcSg5+tUq<dB%kq3U
zrED7EZb1!-v*>&ZUKUR=F6L+TcqK3wIt_a$he)>FPbQw(s~(grj?lJ}kSK9cT4=}U
zh%yH<LUjJArh3u5mL_f#(sv_K3BRK#60Bp2V2JHDS~%HjwuT{57;jjDZ{X|MfT%eL
zMbXvzXmp{`o${NmJ;uTQ6=0s+IkUcep>O^=MJ)SW4Jx8^RRq<EuTU4V^N@u7OX_~M
zS`%@Pw;0de4_p~o{Py1Y3ZvDGUHdNiZ%gmWFd)pzS?s*wjy@6Vb}}vd_1#ZV0s>J^
z7so?W!|Ip{vNp?}E!(^}6=GMzx_qB`<(Kn;C3simV4n%pK|CyokxZo^=*Uq|j_@kl
zgSD#E-jF+yHY3JTn|hsw4Y&SII_FT5h-a{I3D>!uJDowApJXkJE?9;pWEfDJMztb*
zf7p$(W9=Bt5wstnL0-()f?+9~Q$6j$J;ade(h9kOh4{}hQUU@_k9OC9Z(vvxjoaRR
z+NHMI%)bubf;R3@RKErZFmg3Ml%DesJfV|`&Cw*_Xr!ydkO*6!?}&snaaBZ9!hKWg
z+3cl#B=r|MsY`CiQ=B6GY}KdxaXuOS3P<cSiwd4H0!lPyYSm6W;NNskR)9b$L!?W%
zo7W>Io5fC#7sXL5nXxoVA|sJ(RGc#pfd0ppYU%3@yR>i1{t<0hA_WK#O&E`|vix%{
z`Jr5=Hf=m&tsb1;9)bli%trirZ^X0lR|`;BsF|4#M<K*~!V{nR7;=v7N?#>ZwN$08
zBswFI23k@fO%39rg)(7Ng$*=NK=xe{!fkx@2sCVV$B<$k4)I6=FhX=t38i@CV#aP3
zBJCjjv&S!W`s^oQ*})}ay;xMVbPf@40^}V8Dw&P=MpM$_tWRx_bCz^U!rMWTuKT9M
zW8n7!hC?V=H2a^^1R}{&&mC_qi6+HG#Fd<yBwd<Bq{QQ|$uCP7)*V8`C5kXL9XgPf
zYZM^^3Po`+)ifKxPsU)H<5Jfuf8+!YwP!!6FV3IW++~jF*9V`oldWn|y(XDHQ#cv^
z2ZIjH6uO`$+ZuaByo`g5wWdz!-!TVj_!@Q?d8bOrtfit~EK9<5m^be>xkaPxN^2r)
z6DkMkAhQz`vY^C;VP7<T4vd>kB>`|P=lmuSne=$Er6S;M+0bu%zok;$=Pf4jOY7R&
zxs-N0#ks{He#%|Bje*4?4_dko^(0yjYLUu8UC;^okAZmwxj2QNoL@dZT2ak$Er$V}
zrJYKEN4ml)5ym`97XUcksSxdYEJL3?*PaxUK;e}eU3>S6>veTU0;I82RlHg7`Y;x3
zC0^u{r!yM*WvDKly~bZCmYzZcgR6;zGf*j%l>w$|lvchNY9OGt$}%kt<LH&a^m7-K
z)MB7Unq^J;NfNn>Jio_)r{V)oprEWA4S2DXWI7Vhqq_fzK8}_Peq?S6Kgelc5p%20
zE|WWM5l)i~27gJGh(nd`pT2Vbh)v9*NEoJ8NxgCT@1jOuTx?!5U|_RcnR?W%{rRj(
zs0U1VtCsXT?GZ`Ap~;2W)MvDy7$XQ;QJ=Z3wko5%gPd%!IyaQNsO%IzOIUQj2>jJ%
z-};<r*6@{1%{C3G16dAO)xh+vkdl|z;+K=OK9oPt5=SYtZY11DA`a3a5tZOE@iaYf
zW+C8jE$->2NEeU5{Njy8l+aILXHFhvLTS@p^Tg;~Kl<E?&6;0cV?v03z?0P`l(59#
zQH1=d%#Z2##_lA)-uVY^2~I%RNwFfy%~H(T08FV@m8U2IRlyC~oQK`ad>9jzs5egF
zo1`BmZ`y*DVwt7;52zpN`_q{ytc?Oj|F&AG)JN0leO+wzbRCQxA$ayC^vR@jx2f=3
zS`d|K{*aJDf;vcNSXF~+;M5-rW7(ghOxo+ei0zxe4X0}5jN@;c=1)Whe^X@Pw>dNU
zfi-#B9R`MTz;(n_D=rGL4;CupA+nfu4DTH4@+1cbTQN~uF5PoEOeWllgx9AA+U38&
zpT`3Fbw6*g;hc>^szdJs51^SQk#$jQA)dI<Nb3VG>t8=$T|-2z^Z5;lTsp7DA@k0I
z?`s3R*vIy0FH&radk^bYkE)P62W3p~U!1WHTqukphiZI#emBf`=4SRUtUb9$W|0?$
z?pPkL>!09|Bo4yFbxKgcqMGU+Ht6<y8|ELN_DRTsQ*h2npb&+CFEkQaW_+LGN^8_R
z&c^qmM+>E73Rp)$!VntP)nv36Qx5Q5sMKQA5|zL<F1%NacAtnhoi!fCjjQJO&~}MC
zcNeZJ?A4uXue64Jn;xEeHF6TT#aZXNlIHTa+qvboP`bz+N$kd$EUDNOZ*Xc44c2gU
zCRc<KeM7NKDOx3x*f@FNPlY|qJm!qK{vVWM4m1dVX}O)58;e~i`4o0lOCWyMj2qpv
z3oTVaomcji_agez>hNR}@NexHkR4BO56MH9{%{&+%QNSq|Mk%a5EK;MbezJv#6e6&
zukIST`Qf1{EA>Q$NqB+*)<!}}cjZ_D2FL{y+NMS%z%K~q6ouNrsy$iRSxf0}QreDJ
za<om-^jTH!(`ZG})q*k>DW3{0>k7}}d6tX+nD5=qRT@-ZhS_hsz;ux+^>xR?Io(~t
zq#-@X?jN^HLFQK6lsSnX8zx@g&i*75g*%^bvBhgeCa?8fvBqYT>=Z0v(?%Lgrmj)M
z;0}hxu+b!3S5=Piu9}JCSu9v@uP06m@?9)ZW2vjrntsPo=^^UpKUMmz0jvS-762pb
z^a9hc>x*Ji>IL^zBfEJ<eOn-~cXITfUM7vk-!uPEN^lX~EXWQ-2X3Mk&bu%s8s%un
zld}X%(zCyph7+>y6u>8wVY9|S<sru<SONy$U%eEV_p-N7_3}v?dQPN>{VJK34L2Ca
z!qk*~Ht#->v($Ukmj44NGWtfKb0k1WNHz1dA|(Y_>+H3K8R^&E3n5~3<!yo*-9c42
zgy``S<Qw|EA82O#4GYd0^}#3L1$e~vD3Ks(LJ!#)DSIAb_H~)PjrxAt?QEQ>vH-tf
zN-B<n+gE9qW?fT&iZkg4;@8ZhS`LcMxbMtul&$`q6y(||60~sK)#mWpA8|Atp^;mD
zDO&=rpKaA`*aJs4wyq38$QT*9w*r+~Y)Rlaf*Nnbda&40y7a~ktqK+OoAYZd_OR&v
z_MO|@eoDsW3sPfVr24^XyD)=-z?IO}?O<HRnDkx|HG1O5Wx^{KYK}_~hFANxyUvxs
zo@4*D2#rWcDDKQXO<lmaoNxZo5_&@6E8H=HTI8V~e#O+r8AR`_rX<DeOO8m;Y2)T;
z#_-1~W5#DGleWOb#8PBRi!duWB_oJMaO7bJc*p+klQ%&=&GwO-%v=PG3LDRefUJn)
z@J-`m9^ot@9xi19K6cM91wy9a9~zCY%0f{j0Zl6Q4}$aWHQbT!mZr~XAgxjQjCYbp
z;2NLD;FIbPZH>2pk!~^wOoTx^j8|df*w7EnW;@+Ol&uvty3^e@9mr0XDAQKt8L&DM
zRtdTh`Ul3`vTHRN3vH@ypGZnkUbI>PqunS(B5Ek=C+Pwtc2q<`OCL*un{zyzB^2B9
z%?6@Y<X4CoJzEwss0wk@)%G(uiQ({-%MQODvs`p)!o{H2E^w^uVK-(oVem<@S?&6t
za6dEBmKn?39l<A0K_VBB0jA@>u*4ZpEmMMRf|8L=J!?=kHK*a>QA}yppN%}{jF+BF
z(;vsMmY8YlK}*v-)By_j>ZY}@Tre{~*l)iHqX(h7uT>5n*=*`4+fp@0XmoP~=~^nU
zUm(t3FeFvi6ax%C*1tj`i2Y4PfDaE389S#q;(i>v8s%jfblkKMh%=VlB99>QO@jx^
zsba%gSe2+m#g9^GG$zXysSs4Wm^o=#XtQ_mVm#cp4x{_tw}7UaTdao9|At)n#ajA4
z1$_Z<5b+z9ZXU{sJFkI~jIJ9Yrhq(jP48kOgxN5!qS@Eyp10g>tv8=*|8$nBU1F$u
zDGunek>0M&T9hAem>bylB&~xQ*m9;UmtwS;Me3vXOE6nV%6_&VU&DWZ$#(g-;X)vM
z;N<e(zrIbVuaTacobH*wP@pl>Zg;?-lclk^shbEn6Yj&f8+QECt1$_Qwy;TbY(0O*
zyK{dHcfffz^4t2TAjsM5G$|0reyh#5iq_?);jh97bqMq_HcU;V_T{pK+NE|44%%_2
z&1ZZ_h=~rHyt=LFDzg(C3Elf29~Lz#*oEg?&DjF3t4DO}?~Op|p6G~<FP{zjC#SX0
z1@;7XeYd|#@rUCrEebvQs2OQf+9tGd=Iy^>ABupi0WUC_sUq*ay$}QE$Ke*Cm)*;w
zPYrg9DVXR^ahK8a=Em?)%q>1Ad9ub7k853pI!aA8&jx34yzAn5%a#%uJ%iHdq@o^6
ze5pJ#&}K1#Kt@gm%P5E&UCP1(hJY!fb_xFZv_|hJgmzklp#7&NBJDj2$$@0d#&-?x
zyu$++S|MIuEKW(sn!<m@&DHREzt+ftrvtn$z7FvNjy<+B9aW-(#eFthj8`=U2YGSt
z39Z0v)ql$_(3Pu<Ne0J(i}b_^^b@1YA6yys`TtG8Kb*dv`B~rN;Bg3|?y}S6;Rv>2
z&2u2I8LmW2`L!xc4bP&mjumuHnS5J0IJh7Be#-;VD#Rzep$?2M5akFf3aLmgBu@F(
zg^IKy=o-FP1^tg4#z4l)O&3YYRWkYwyha$LJPf33j$KEfu}(JBGu?-N@r1Ke7*U=$
z7purw@7#qr<ehs&?=*nCyFQ8{+a8n2hCGf=DM|vw^Q!UY)B`|BN|g$Yn1doVEWnGK
zogKpOx4_&Q?)N9)_cIbL(U&Mh=W*l_8DvZ$!IyqnUgkfPrDRPh`kS)fwY;l{z~}O0
zTE9-r7r(Z9{U2d=b8>Qmg<gt<Kyl>dDiVPFejvi_ctgT}xd(5=vAev{Ylfh3k1O~-
zq_M1QiUHiObGxOOtN&Lh7GXH_@9}03yQd$AccmUVXblMw(Tm(OI_zS|nM6Az{I{4`
zM68j&yF1p*Rww%Q1OAtRMxOA&&a2bc@Gzif?>NByhsox?_G^1?&oq9yqi4JYu<$%X
zwJkR%o2Xsraxdn+4fHU3ae=7Zb|Vd!zCN7m<LK+=GRQ9UP3h6`l3@6klV3_JR~o6q
z64P=-WK3ZV1GAznJU?;USKGxVfd5!s$gPxVV+dKuc0KuDbUWg;rft9!_Ve*09o{FW
zt(Jps&D68-_Wb-ezYjli30M7W6~DRFw=r_$_CGKi=^-mo6H%9O152O^2~U$Cqh7h6
zn$NsJ@iyai6l^J1m*}t**u(4)>lSDiZ#IQreV>XLqGhs`=YBi#{kq3x*K^=$`aGtk
z=KgZByUmKe+@t_DBX1pZGUQd&z_8Ddr}8iLmuBCY`q9r!2YMqtzNTZql!cf|+UwIT
z=ir@@z-d<hE5yc2F4u=UC(&E6@5|#D5HeopqI~VbjBo?3?^g_u?f)U_9T@9syDr?=
zwr$(CoyNA!#&&kt*iDnhw%ORW&Bi*r&-b2l{=%B;)|_Kp<5y>$0P$(GkII`$TbaL_
z8pyqEOU+T1x>(0#6LaIK*ik;&gyy4H_eaYIkF}G~*3k%y0k?Nz!Fj?Fb5<nHrT#u-
zk{7b?t_O3}FjpRa%_+9UdeY6s^zamX&G!He<@W(TW1rgYh5Vk^?JqrdA+-TU&#BtF
zoc^5Ki+tbo@@28B+z`K=GaWVmlIof}p|*2+3159V*8{>1lyI5P5URdiV_RFk4kcR_
zmRcx?5CM{1URGXkaq@v9C!qq?@AmF<el?Ry*%=wRxq>2Rb)TG@&Yi~Y=JnzFz1!^S
z`zn8~^e`VC=eo*!4xb}bXSDgnRv{9R$8a~c6z-(dz`-Y`r?4uN`1l<_URQPJv&F{_
z(c-oOu-%^?#gwm;nlvY-Ci;V^kuq8-@wps=s;j5MEkU6l1wm6*8>TR|gwU0QFBdFY
zzAA1{vl5~Z92pW9;81XrM4<QUy%bCIS75Y6tY{LU6WHtd$Ec7b2xAKNHD3%l!Dw&M
zw25Jk6N?7%mt{2m?(s9%)My$!4?mEB-?#{5B!>o4JrulB(FWnAq2kl_l@#x6G9X?P
z6}ajq_hno~p+v(;kVVO;_Q@~=C}B=XkF+1-eHUu^)6VLKEZCj#i7Ruz@2wYh2c##4
z?|G8kQB<<QS|Iq`-Ijx^qVqA>+|*hR9ZlZPIG^-7bCqkD%nyU2z}z`+gLjzR??7oc
zP;K0Fw>aTJ$V0Xhmiv5Tuk~40ULT_oajq~z-Bq_(_sED-ovVm9)Og{IdnZZ(3&S9N
zb}q_J$7{QbTO{^FhXrtdEM1%Dr@#v?(1-+l9#=#6C4pCm_;ad<|L0V4<|$ZVrHvCi
zhGb@=7&Hw@ga5{T(^g|x(*nUwoeUP})*ph9r9Z36^g|DW<Q}pvH*rM<7QJt7cc;(<
z2R}RL@>dQFm?)7Y8~8&vIQdQQRpbsevM`60u6}f4b&bpit01qVzL6$hrD_K=IWW#J
z0T~kJw=os9u7d!MmHWYr;R)}(!pR1~1=#ttU?HW0pxwwH*$$QF<RlD1!9K=?1r0*m
zhZQf(pSXnC;bfJkEtkTXgvtkU(o&TdFWJ+*uYG-SVK`yrpakT_<ohf_d~nvvr&pJu
zh@o~Sg}?(SND%ol!eL#R)sg9Y`}d8!!-g*{nnHGxP|NBNg6#h0m%CO96O*o#!XTt(
zOBJD;7As2uoxQlVi5z5ARns&uH%*JFlb=jiFhdR|7cGyHtZ~SE>@L6IYY!qCdQv(|
z&Erk+^cPY|9*xu8($K`4KLb2M*(>aZ5I>XTOM6LG`6C|dqyou6H_B(NbP7m%o6Ej+
zHu-&rNSA<K)*5TUKiTP)51yX(C?S`#??jXeQBhwbp@<<eZlnj8PODW<8|3o5?JHrU
z;x7TaEnSlP@vYQ+NwQ@I6P`;;!8f$3(vtoNaq+iikRdTpB1D5g`8o)<Vvtr)*|$u8
zc#gUbkexx}BMU^MoeeskjwT7WAWHU=r9uxjNN-|*$o-GpC|%jb#hAQ2$JUoi?*7fE
zt&W0yF2@xRt9%bCm;{0uneZ#qu=jtiwmvlwGoK7?yub%+MhcjrE-}d1ofU{cOC?M~
zj31%&Le3sM$wUw_h{<#UC;Z#PvdL{x@h^|ScEutn$8)g>J}bMRg?;hiZ_d{JPUlVl
z@d}jB!H8JjfM4nwY<7K+O)|A$vSIsd0vjhMycu~h3qQMqesQ5#SxeyVSizb-;^U>y
z1ke(9)sAg`5IJeqcKL-lw7kvVAzVjkKH)hSw7&m>=*2Fd2EOa1!Z3q4mqMJRFBUG@
zYCeAF|63Lntx}nf%FepWdB=*x9x(=juDB<XzX_zF;Iz!8{8oPlLr=gdOI}$r9?Kie
zAw^wUMISXg<%o)hnRyoudAeyO!8Inf*K<__Ypnxa-Gqhb>tW1|z=alEHsuiWl?+9+
z+RY88K_tw_NJm3O`R+M*r<J)!0N=d?MzuS%tYOc;aJpaRUb3EXLI&@L^1{dt@j@AH
z8hMI-AV}@(w0<kl@lB4@Zm-wOen(Cw?oP*gAKkf5C-H}1e}Q1K)XcVzj(-JLaMtA5
zg}MejaAFoBZr^2f*eb}_13X@RoRC@cpI2lAnI!^d*sKqSu#9PA&otjyAE2C-K|)%Z
zyt5LjgoQH81wqZHb_gAkLh-lbgy7wc^bn|usrav*lpk+5TQ+TZJ%?E4>G^iv{L5*#
zIzB-P0B32VB5-^NDat&_E_r7*W&w#&bRaWCJH*Py%aw*olA^=ESg3Z&az;WxPPiBj
zDJU)QIZ7T8*7FEC9U9zZ*QIFnuT+Yb7TA8etZ%Fzr55$5;=7khe8&Nn@>Q+tR7Oi8
zVb6;%SsG9qlIY~R+Kj8pJ6JBw+aqy71uUd)=~_4<`e8ScP3`(I=QDiC;?saaBleJ=
z;dOAH{J$Ggu4oSZ>}jPVg19?rP5Tt$01V~ASSNm^Ut;SvgcxYusl%`cv3+7bp^U`)
z>}u<#Ds3o*sPHBij)75d>5^JlBOfyvh-V~HAxVhI4?GPXA=eyA=QFYnq?xhREFlD$
z&>(ztj1cvJKc)YgntevAbVd)T%`foF(=Y*Cp*LXCB@wxvSwhH&7edC}_=ow?@F5Kq
zE<b<Hcbq5rwEoWzs*UhZWNX4eF2FML{QdK$YgWkJ-(z2ITfnN5wr>{R5g==zeS2&Q
zq2&vpXAmP|Rg*BJ(X5=yv&#oQs02ldzXn@11$Ovd96XmGglfzKqxK~~g3q8_L7Nw3
zj%NlAL*)<2t=cOmmrPt;p-QQ#8?M<c^_q&|>68e=%!)M}rT5To2J-}2*aZ=%+g^W}
zEc+a@7Q-`ieDs)d`$|HwXesicpc`fye-O4QV74*sK?L84)`14y!X0_bLwFDPnNEOR
zuZ^bA2b}iA>zKBjrjzcUSt*`wu|OFHiQ=kfdixLD(m9h&kxVDd2Q#Ynbvm^|sCm%T
z-_b+*fl65_xk&{aMnmP&AiLKdyya=B@^#R+p0nXI;udXsE~W0kG9I4yVGuuBAO3-Z
zG$G^|tS${n0;FOTbOtg@xj*N@OhlD>YShUy5?08|l<h)NsrI_h)WMZf5=G(Hf=vAS
zVR?`Z7b+BNCFA`8bfL)gDUCQ@Su#82#2u21r6oP0M46HCU2GH#;I6!^Q0!umS&Gpl
z>6WBkGKv?kg6OnS{Z}XBCh)XyZgUBk_I|MkXj3hv8}Gh4$m$6hSj1PwL1<;=ofs=6
zL*v(>vO;wWpo~B}m!+>eH>MZAwL<iEcF`c*j8Ne7k6IzekCJ_sOE?^6h|qkqo7+RR
zAY;9_ctu<=h!M#yt`t;4%#+bk<e@9pTmyJ~Vwr$Aq{LozW<NTCkG<HC%nul#FdA+Y
zaB;2X*wn3s?d=hTM73YA2lH!jiS9~4PQkzY-4smmb`=woqD-MTvlo*+h+d0R`I)DP
zjCZPL&w~s^3wiA*-Z1OCK+z?fST4qMRb{kb4QR<4j6Ep1c$CRqCKRS55A;`5hpMFD
zDLf9@+MD?pI<c;(F`{3jx`kjgI$|k6;%$W_mH2Ra9Kl2cw2Wl-CJO-@f+7x4x*!u{
zm!MJyw+#vf@v&f#<R~s}vBH+1MeIUOrn+2KJPvtlXzbyq8#&f+fIbnh9UHQPZN57Y
z?Abt>eLEppBS_lMW9Q7?;vem1i%h{SLuV;q*#>eJ0kdn1dTA*D_`&^uzRL>Yvb$EG
zfk)KYFPL7)n*mwL598-Fcw6G(8S2^=Q#t8Dq)4rAa9{WNL&S?=&9qptVMBGzil0km
zg>ZW4yNoK`q?4^a%^&?qhL?CK23`Py_|VA0LEM`IcF0~Ui6#o@HSuD?<ED|z-ToR-
zGh6TVltOO#Riiz?4zVjH=I#s`tmV_{Z+>`W9+|jExIjLUH%&nP;s%umiNiav2s`0|
zI?E=|kih`vEaff~L?#x21<YYAk^~i5yrWi(yMOPXH?u|`L0uV^5dSXA|2VdoIJ8mg
zQzjF=b6TS<+5eN@yiscm(qZ-%a)3`AvY!F~7Hm=swGg*5r$AXG-XZQBT<Rw&Ugh7N
zmtRXPp?gw52FC1Y;#gMJo%0DFtAcT&t+@wZW6=5<HD-!zGlBAZ0OpRC(5+?XMT!K4
zfqX(fYl%t;y69$8wq*{D$}&x_e91f|Z})i8GYdP5!O4NpX^%HMn1mEJvlHmD`5#7v
ze(uNW!eyEgB0R|KwVG(E;pR~+8?~gw11U;nz>V?tv!Q-|ZnVA;=}c>v%9E5dx@D;y
zi;&PECW|~Gn?otPwGFDGuH4bCZ4&}}1ETit@^r8qWyQ(o$6l9zH-KRgX)EP%Rzicz
zBx0VW$7}x$0P(c<@ci!YWBoLXDy_j!quci2O4qelLeT4W8NH7PLD`$a!??vQ79<q>
z#;&?8y{sUxF*TLH#*1pOv_&7VW^<GrAyA$@3D$7R&8aJhJm0KE=GYYI1~fr}duI%9
zK_*;lcr5n1X4vnjy|d;Fh4$i}8Cdu#h{$=${2jI=0#I(j`l>WJR?vT_6p#|31f)WA
zi}^%|&z6VGfcJPGBBzCW!KFd=w_)H?<Vt6vXbp4Ms%^YzlJtX!g(1acn(pV`^hX46
zS%YyFA?DACS+V?ZsD_Axa5bQYL+LXqY^XFYB}IOb2Uou9-|%u10<~*i9Qq3Ko;!{~
z>oCerW8~6q?}?B2!8z0&nxI7ezXJoMlIozXw_n+p@n{T?3L}~UDZ)TVMk%CbTAX`b
zKc+&W?O))H9hO-x+uLGr^$J(_UoBX!V9N>8;RB`=U=jsHW%%imc&_7uoGC_kNfMt)
z3eM>%M1L>lZJ6=%9}xrh9f8*wabR?Y=CqHeRFJ?xhoLU)TVS~T!4B41Lj!<EJbdwK
zFit|46oYka9q(rvk}KG;yj;bOQS?<8s(3L?cbJ7z85$qgvii?7?hE>ce(r;-$<M0h
zdS{_|F20QIOTz{}?U%=<pGz^zydhfBG{%g0O2ngxH}Msj{r#(_Y1G*mzwk)dE=SB$
zH;HN0ifn6nNK~HzC}BAsdFSLKx}qd{G7qNk<)N{(Kg!pUauz_bu7@7$)Qdn6S;gx?
ztX%a|Xz?!yJ0(VvC_%OgwN3~XN4!lLQ5+3vi+!%W*`!91`%H>E$RI|Oi>#A9YJW5z
zOW{Ue;BMd4YcYuz&lW_ZlZh>sODMc1e_UGPd3t%!VIYzKMfv~pf>z-Ewa*@Yl>y=k
zC<Mn=8`yvaXbqv5Bv;hZfC^wD6$4&w!Q(DPnDT8K=7&c&7dP?Sy2acz*1eqE8$r(F
zU6e;3mXm^P&E$#XsF-Z(5Q~bz9SCC^RE_PCDTFMoY+v5&*q11E(e6XVC&kwmEbVHk
z$%SWtL!D{GiNsPvRbXqFa@3^>V(SvMYJs{U)#&mXJOzSi7`M0)UGq8oBg+K>fYFcJ
zmexbd-E~fNbHtRJ3{UC^i96m^xN!i5kvO>R<Rk8j)ZZYEv5;#j!7{Cp<(2H#juCga
zWrd;FS*fjqnJYkJ*Qi`WYVSs^ZoY=h0Rb{(VM2HkjVj~~2D-Q5zWP~GYX0^T8mDFZ
zTrK$!NiFKvrk|-}1;*19$BchYbGYdpj;@vnr6~tPwk?)0!vzVuE9JA|vNNJY;y|D%
z0Zs#8uEa>q7f6Ifg3j)sXAxkB2YSGYuvxhOywKy5yb>9-eo|JPe$&u?(o(#}L9cm&
z5)l)_=hm4z#O$A|<Ks(e+r@X4po07V?f7TIF&Df!FuQ{iTb{mLOloc=r|Oupz6jL%
zF>^puFnMg<EUnXDDRQqaF1u9X-x>*XY4nF?Qy-YgL^1&kR-MR5PHj%qP@`m7c)u3%
z@?K==Dw)@$&YB`@LNhDBj$Pj@hKDW?H0TIb%CSa*`kEz@EA?sHz5}`<S9UHCS6Yr|
z84}?-ZzP$++@^%!k#}P^{%u@^w&%TNAgs7KBD127rtEI#Cg}Uk$A)C$g1EB-0Z!{<
zP@xZBKSwXsNkHs<M#~VR`}h(r9G!j#BNRX_xa?}gvW0g0BGZyWMbwB{x5`izi@`Qp
zm6So-!xaY=<_BlG1|OxVE7xY=44MYH4kl5na5!~{d=p)pIxwXRgH|%_P~S|wGgF4%
z8*dRrWV#&1mD*|L>ky+y7g*sCQdeh5j*S_8M&<w1*imtps6$0HjYi;?%E=l;XKOxn
z;0N@jo|Tj<6S(xRkZyAqDi%C+h|F-k^2^oocH9cE>OlAHit)B+faJ(1UP1Tbs%E*r
zdt9Xw4w^_@>t0Y!B@;WA){#n2gn|;TbBNBS!M+b2eg9v@f{itUWuPE*0*f%K5quzq
z^&Knb-qqMBkxv6ig@GP!$=`mxiyvE~Kr>l#_nK;i8Lako(r&ax>{AkS*5lkW;bnUV
z9XsTxpNlw4UMwFEmV+L`Ec$37od$o$kwWZ?GPf=^*#7Ol8FV2%|7TjwD<lp90mr&l
z=ts|9{8W-1DP8_#ik1{;o7f(=LV&XR(lQ!9tU8~!BzPT<`3e-9FMBMnUM2Cjw@5i_
zLrH1_613n2WDLY`bUc?#55u;8-W;)^4z-XOnZk)UFOqD2e~H0FWduW2QNr`rk;h8c
zu#}X?lh*wpPV~%|6JpF!gd4$QHa6@IwN65g+|a64s7^751<y2qP(r24rNjmJuVI2s
z%SDd0d?5s?A6|bE1}VvcdEnu&exm;{Mp>IQK-dM+>;IM{j0>ys2IFu*%15NUu^sW_
zD<>+#z`Cx;7!KYURl9Te4AZ7QnGsy6o<LQY>!{{4A39J8dX;1!$c^3ZDSjsy9_4eL
zmiymc2G$p{yV=Vp$>|lHhDKx)hms($tm#u-bEF;&gwdppT-YN<L<|@2ES<c<2@+!9
zwvGQx(+o7$!C&PU{Ec<9nHL43ft@-|X$DvJjUL$Z3m<ZY<~M>vq3z!^WLz-x;Tglq
zX>d^>VT~wR@jH-4wJaSrarJ|MTB-^)dJg|F(7V>OHPwL!G@CquZ?t{1T{v}Q<*|7o
ziuaV~wu*saBswV}ghIDvl08zCF^Z*W!t74PFGN4&ALEbh#C>&7h^7_xvZFE3@S4T>
zi5Xet=A<u<U)=_r=;%8sd6(VTBpyb1o#774-1@5GXLn|VfFjeWLW}=(E{p<YFUKgM
zgU-eKY%)WO61oXLWFwJcvflXs?X9pM3FpM1!(3c%D&F_cN=gn-v08KCas18!$Yo8|
z;M=LeB;50xp*8!NtTwByLHDyWD2w&fCfL}7r?3SKzhjI=*RH>E5JHEbF@fo7&wQ=2
zWT(2GL!<<X_0-Qd?Pm*fz+{v*?c3i+Z)^<0@<gaE5-vqPGR^<@fC*WI_`HZShkDgl
zmPJttC^PR%(v;$c{}Y!ABb%r^o_xdzH1HzHkU8IlhU9s9K4K85mlNnf!lWY`uotSC
zc{U6EV$Co5rVy-2?C#+KyjoGdRWu*)^71xZ^i9PEsT+0JCU$DTBgS=WbKrYq<kr<0
zvmA}+JJ!SmjVQ$-iZYHLU${+0U<-Wt%q(s?VE5FJy#-3vsY6qSOt0Zbk-~NorcvUQ
z4m>5BnbDa1X_t5H!4xS`z1ilxhr~jscNa=alHyy4MEDfp_B4iK$yb)(NY&TzCKT%y
zqJnh6&Dt{q0l*EmS%&n|HEq3ltZ8R8fYCV$ufym{N1imAd^AWXkcr?RmR@E>b8a)a
zF6Gfgt>J)~h`pTbAjLHS<F-)5OZ=O(^V5KdU&Lje+EV7wN%rq8l)?hHs8MC^7cae+
zokDAesR{UpOyE-=H}Ie$z$1UIpt#c5>}4f6mPodQS=9}d)U8U)t{&w0u?C~-9W_(*
zO+0|Ixe9}D-I}0H#OD87AYui&2vU#ilq3M0J}VQysh=b#B`~u0vQL<_jq}I1?i~OU
zu)Z;J05J&A!x7$Bm59ND;>AdAWl4Bjr>&qooh97JOYRa1hpG`{oJU{vN`pD!ZxiIU
zXliW~00t4AsOzxgmp+Dha&h7q4LOgb@&H6W!R6w*+^K5`Lo;<hn>x#dYFd3sLq-{`
z5ErF&)B_Q;V2*Q-9~dLwK$?|(hz(*&;HEAvkPtA{`v8!=4zm&qG?;OxSslu1OMy6b
zG9_EijF5G61L(Mx1-t{T9mJ9TC0NeYs-4+%H-sayV7UU;A|OzfuoB@;WThmaL4W&5
zQx`S$*wJDzx%jj=WU>?u6Vp2<(=R}!8a&Nkz_pTQgqD;^iHZLXA|PJ!jVJO=Bc1}{
z(nb==xW73NqxFe_XQHYCP^fo?xa}ua#%NoV+51NqW2fXM$YU%1na`ogY_z7}F+#47
zZPe7l3||4AGFrVZ$zch*J|)MDX$e&%&j0)TA!gX8ZX6E#zb&irc4NbMf|HLV*JD#j
z{PbqUsDeeD&FfU|z&DjOO>oDOR!x7ETCxv(-$Wsi&ut;qH1;sA9?EfPzafN8iOXwd
z8cko(wK+PVf)bMsSDc*M#oblCyx?LL#)6Cc_syXm)(~=B$7r25;f+AR!NJ!m=)V;L
z4K=4CJr}|}1Zs6%ThLuc5%%dK;($Eskt}1dX0&Z=z}qbtU&0C@TkpEamEjWF0^EYo
zl8O@M{3#6V;lcvdAI~CmHE|xi4*MQ$vq0M*<j+wOrWD1JXb`vu%5QW8zfzFu9jsr9
zoGUMRoE;8`B@}Yyf9}AIAE9d_uWJqWVlS=>MWK}M+&5PduF=DpDqH;R%tcpO32>JX
zhtDip^>NVYhvm4&J=7p?i$UO`TJfA$`t(}heiW4l^~RDOl0b>}<iHOlMHKq0sH7Mw
zq7tTSsqllf9&9HC?VyGUTp5rNc<JSCwb<xolr^4(v!YKcjo0x^<SA9mI|reDTmnnf
zU^$8R|Gqz9zM<PTW%&r-2E65_g^axPN^jQdZQA)C?cckwgk)*C8plTEAkwXr-Br1~
zhi{PA0RXcSweAI&_jiVLG+^<lou$~n-+2fmrHB9-8JT(EnHO%HBYWC%JB=$-cw?QC
z52r42wAu`{U##8Gbb{6a%xM+4r>d-DiQ$K7s5bK{!;6?`#6azHICj?wR2L(;NF0c9
z8qnBp-mz4zVy)qYhVJxUy3iipz1LUmVQPi+NPGA|E{ZA&b!q;<RE{kZw$}~l6XX*l
zhdtpQ^cRm)7tq!wFC~z|PzXN*MVXq+;-KLW!}KO<&U*JN>%4(O{KoLJm5mg@5LH@w
zukw?IFc!Q&OF|WIzx#K|Jll$8L-1&JmVha%A;`N({2Bh3LUm0B*&t>JI_j<QzFcAN
z+^GyUI2~1JNH*gbz2CB^UGf3$nDWP<#kZw2+=lr2I!jh|cKGkZ!y+U!{e|KKB-%=Y
zP70TmSs6~@_*$_gbg20I1NPDLX0@F8TLF%%^^icNAFk2soz?_TxAF4J|G|KO=$V-t
z90EK%C``r(j#$3U=2}6n=2h$)wKfPJ2<dh)Zq0y+$N|<h*tLPYkvx!K66Bw8Hy0--
zVN#pJV?d-tMP_*xEX&qv8xJAO@J+8akxYrPed2!j-yIeSH&GgNHQyPpz_>R<TISp*
zSU5++Do?RCwaocR%rz+vFYG*jX(zmRsmX)j5@;|?;^S*R<SF560lkY_eGg4waZ-~p
zIheYpCz&$h*=I|LRB2@kJnFua($`QdjbNqL3@h82B;HB|e#_G?-&uq~!S8DYB`kVl
zanc~fUGYIBaTPy|B3;8=i(f#oArt^bJ+uGGkGI#Hz%PsjFDVg5FH6E<iU~EitV|;J
z&YM-at#O{BwB~i&Z#Sul&SC1qWCM7au`G1hy#0NcVO~iml?CD?fAd8%4B~46ACKR>
zST05;Zgb9aeRUOr-r@)W{5Z&0Ti~JiOQJ?b$S~<x`b|mtXT44VS@YSS76~xOx$M7O
z%X=o5pVv#?Lezs;xNz`Vjkt4t)yIEx_OXTnP0Yl&cl#j*fk2ArKL~3AqWuO7$cO*t
z5kGRk6fA1TW|tHCt*Yx_<Q?<e=V|s`pVdzC!%8of_#I?PxFxYAH1Hv>i-4HeKRAey
z<GyDJ9R9Hg8iW=mx#;6`?PL&pUna&Y^z+14ur4>nT`xad?K$EMv~>!SWAQzxVyDr$
z!~r}_?C}c*tia7G71pLt%a{HFvuskUr<8bZ!x(G*-?+pB?6<o&W1$p;q@zFb|1z1|
zYbjQ>k@7JD-W;4V+#Tr@a;W$sF!@*nr&K26|GIB`EYV&$#;#Xm&X5HP6+C-g;n7LT
zxwGtl-wlCM8xg6DyUAB5?_Co`r7hB(MvRkD>D5F5sbkG=(l084LBQcYU{4-IrK|QY
zf70K?O#(dyX(SbP7qj%<lR9Ma*1$$gqNA!owl~<@*H+j2PJZ4aQfq@K+jBI;_J=&~
zM59r#bxBT^EHwlcLbCS<C@#4)RJktsW?sk}2h&(=VAeH*wIF0zBQlZ2*ZNjt>^&B6
z?18;?gYOhZyzwdC`e4)p^<OP2Ic{_?!L!g$MVUu)5DK?biGoK|^g9diXeILn{C%f9
z7fHl|7zE3h54$u}!fY42d(!C_C7}g`(OfvQCi&tL2|}i>gv1vJ=tsTDt+}wco;2ww
z%edT2P;8*f?)pRyHkM|~Ce7E+hZPrT*OftKu*$qVJVdRe>`~e~Iy@fNvAvCrtLhf3
z4fqQht{ZuBFKDEHe)OPWriSE#8*vyT4q-U;rw~eno}?G7!-k??dFA-j4cptTD8+B5
zvsmjK$**&SiBKm^vuyLB;5VVq6~eSZKm?Dh7yMlaw&@mSELI%!u@&Znq{V7oh|HaK
z@^Z*coz6>1i%g;6U4*j;%Q;S$@Y#)qN38qZk2w)p{D(e889b*on8TXCcLTfLNx9u~
zll7D*8(Y9Z07`~a%sd`K92@2vxb>a9QF9DTB8H#oVM#bOzdoMttawQ<2`%zk0yDNi
z*T4V#-~F|Atv4E3?BYYD2?hU@ooV~W(|azHoZR$}tK&m}l})e+z|_)q1LsQhX9!bP
z0;O@T9Hv1n^A}Ddv6q(~yFYDK_Hmx@pDmLM9FOzr-wnm!OdWr5op0y!EHMb88PnEn
zkL$jmi}tKrzO?qhLs12B681Ik9V_6nNhI-~xF_LZue!(MFF(KA85#=i;1lQE1>x6|
zV}j&zjBKJG;4hSOTuBIIt8|kU6O2zo!y+HTa-?5l{AxB{pXV|MCxZxpeG54wBb?y{
zr+u|tr=Zc(7H%y&&-xjg@H6D>8(1(M;5VnfXvi7_$*<|?3}Xf3(YBx1Mehvdg$^`k
zOWUg3kpcAPjKEm~oLTpe68EBm14wFNp54CVi`1PRpS$}O`EHnR*g&`u#74l|<<Xn#
zU?&bSF*h6t#L?#RGW0m2!1h+x_sKTT9GBNlR-4+me~_z`&%1G^@SlTXYd_ZDgjpHW
z{ktFcER@fEw?B}3Kc2R?zwwtG3nkYnW2q@YEb5px{;Py>Ax@1=MwUZ}rPE598ZKcE
z8}>J2Gyjta&dN;b%?KkO>%8bD19ZD+Kq=>NZSR>qCPP_m9i*p0)#ElKJhZ1~U{k8U
z+#75H<IaX!es1t-IV`byQ8Mnie3^{h0yaU$_a?D&a_%pkA)ts==;m!c&y!XEc7h(^
zwr_kO)=K~g=CD}}o#jJ<AgalD!uQX1G4rRBX9ZONg9YGahr*K+#%*gr1q$UC4Sl3K
z#SO-*%jhlO@{O@`6s?EgkN)bUBr+{mlJ{&MU8xCLKsjZ-+7+oAp1~*%^>Fr02(xI=
z4=2p;{+M&4g{*#$X|P>D>4j=Cd&^p@gEPsdbFoxpR|`YO<cri$%L7D@BvqlaW$_L|
zM9ZgIAe8%;i}yeO#ka|^{gzkYpl0(HzAXm?xEW&_S8G}|8c>cy&H2Bhf2rUZ)-0QS
z%LGa`T`8_N_Q1|Z!4dnHdoD1K-hO<Z61&as1YG=4{@kRVaH4==nSxA0hv1;weqQ31
zjyOdAnjG07C;q_M0Md`<Or3}QSgwx^{W&+D^_;lYXD(6kJ_Eltuftk4|0<<G&0gJx
z0Vx_4I=I_*34LbwkDJd+Exm3vFE$OAOHKjf_5+VQy&pg?A3gcN>)~|!*g<R<^ipEN
z%fa>sqy1*`H96jVC(u-79{13bdiZo^<VT5NQvK+^o&Vtyn?$_+l#>5xui>fS=J3r^
z02}mv;Bm;o+s1U&=aswjaTy^RkjH<iwROesnM2ehs>*xpY85WJf1Bep{t7<+o+s?h
z>~~6U^zc^Kh1!`PyH-}#b2rAP75LwH0AOm}44RlYvF2s#OdqK^Abd>*x@WX1IwbGj
zgcKH4PX*@asY(g?KC4}~Ptuv)(z_lD0+QNk$qYqk0SSC8JB!t{wxKZ)(RURf!~SE7
zHpN|(O;1@~AI=XqVYMIi3v;Y_Jv~~5jq)hOCrXT@%Xwbx3zT5A-O&3;LO}kND&i`3
zoP1()b1|T6_^>?%i>=`@#wTMD8i6-@2HSsx>x&LC-xVZC1Y*2?Qi==MkvOt6TY0T_
zNl5a-H(AB&Zc2dSK08b}6=CTQp&bS}S>J~aS;NqV+{#l+tHmMJOvvbvVy+FPk#i)L
zQ+lvDL1QYs=V;3D&z2(>KuY9^1aLoto<L!uVw7jo7d*x<Quy_%bcxxctX;#x7j!!4
zY!)jT!$v*tT<&BM;`E^`>-mh>41N<agby#c%xZ|+I{X%}ZksIIc5zHuNW-j$Wu0UR
z2}YUP*MtuP5gEI?O67OaEsK+vbi2UyoaQ9t{%#6+>qp#WM~Uo)F+jJMEsF%#`#6Lg
z!V_J1t?Jezr*8^M-*;`u1rkCIt<M|yA#Z3OcVexeBnw3WAJ@k(AKH6uJvuUdZ1^!B
z0nsbqtSN|BH9M0l{fz;_x<Kj<Jbs?r{Frb&;J6&u8uP2FWiy@d-cB_ONHL*5N=b$F
zBQBNJuRRyIfBA>=a`gFvE)<pzJpeh9l>@E(`gjsHJ{!DW$xh<%Mkw9%=vLg`Ue?pj
z4+jwYT*gv>HeWM;+|~3;f1WXS27mbzKNpY+*Aiq9wV18e3P<nkP((Ro*JPbvBG!C(
z@Q{-WD16lW0aSYTsq62^c7wO;5NrJ%J5LF3%Hu%f*HPEo%5qjLWy%;ZGO+XT@B2Ip
z?$iwzq_maJnAMpDTFz^bzZQ*#FJA`@)xVuFPZXE+{MTa{4K>n+nQ(}Ka{4t(`J|`5
z<3_ZxAsD#tWu>OF1zE|O^m6|kF7+s_5#cV1x(*sLWYS!?TNmB_ve8`%2i9jA<X9T<
zc+I+<q(Vc6UQhTUHOXaM?N7K>jE}n;Tq2EUjz1l5L8D1e<?rALMYos`N07-SA={=K
zF4vZdN{*S&+?8*Zhqda`1eNRE*VnK3(T7G(DV6TM7uE!hO8=~*E5@0wyXWI_e>Ca*
zusF>M0Yk>XW!3C&M<21j`e_9F&<OkIS9*e}9z?7fo$MbS&T(KPCTatlR;$%?S)4AT
zThmT531r5W$*ifZwR4l+W3uEP10(APyDIlgl*~B(58TRa%C%|A{OT=<0+7L@?l5Z?
zaAoKvL@|qdQ%&pK{eT!Cj2%i8t|S;4Lpm-<kCTu+R4x*(Jjc_`Y~;~sDtu>dy}qvA
z*6;JqY}7E4t~`!k3fB{Pkrfsl2dyEJ$*I*o?c2+{SboR3HVF^HhU+oU#`}khcnA!b
zD^-Xe7Z0D5v_`icAxc8CTWU7bNq|&CEv0Cdd&3+`9!RfXMjN)s5WLJF^c0d}_SR-i
z(8|Jgmpwg90)wM>Ii<+Wb%;T<Za*q)2Gs2?Lp-a9)v()IgvbEfr_=y9-rTHAkM<8u
z8617*PoJB-?Jl3KM(YWwWN-sgmvAsgadAGpo1WWACtM5A;3y(_tP4(w;iZc=#%SB%
zxK|kvl0UuCu_L)A0ZeS6XLC$1!3B?s^QJzx*T8=jpjx4y-^7XcR;T~N$X8Zg&mdrx
zG9pe44PreCT`fa68COGVBa#CBQ8=A_GqRWKx$jb#?d7f=GYx$NB$>VZwUp4fV}JWn
zxbbRqj;ol<ce=wVVNBd{uC{UonCSf4nfnOT`~uHz#}#TbU#L>ZMC*%&={C9yj}!W~
zFwMH?A#}>W&j_$Ds8uo{SP27P2h-OflKZ{x;IDjgQix<I3>YVBaI#PktA8%`gd0H5
zg6L}N+bTaE!w-yNFy+#0aew3Xsh(B#+gBZR?G@+_)UZr*Em@W#f~o@JM8fQ(r6GOa
zzGEr(b7Xf1u(LPld_F{Fkm`ZvZU=CQWpmgDb4-zH{w9>iE;cXs*=?BOn@=I;eQ{f7
zBA9**`~|uf6B4GYN-7jqMX-%@3Z}1qO7g?RsyQz4O=&&DWG!`_aQ~@99!7w)H#hKw
zqa-hC8eb^QMkKA-@N>rP(e3helQ4h%G46uoP$Ct+oG#hTrHGPA`P^8u+o7N8wJ4>r
z8}VKi#@dEd(XmHC@j^XbGuwNKiLabrDSS({L<zPeHs)=ZX#KZ-^jO9`df^tAbpl<}
zBY$Dg%Y$EHN74J?Zhbrk8F2mHWN+gJZ@)j50f-UY>uzOv^8V`dAK-k_Z=g2`(_}?$
zSh)_=Npm&z*wJrtRLEW6=l3MFg|y+2q$dsi;`s_WCeAW{Sc?IPAGQ{dB4_oYm5>0V
zg`e4pkFX%)S2M=bh*{YWfQSq=dL7bgO1pxy0+B8X6*-prp`_iy%#Sv5)ewW?9vvp)
zI+(-kk}V+;%8R?m>#S#p@63?;UhpW%M#X&TR@1iDO4_lN`(w16yYp&UZ_e}uP{MZF
z{k~|uefYz0O-)NpOU3B;5?_8JbW&3ZPx)lZp0;m<gjyIzBagXGNZR=OKXfUujXwb1
z7HBa&pT&rR(2U-~MI*qQ-AdvPP)iD)Yac{{J6~b>lQ(MPg6ftpO3!e}`Q66Z`8Vjl
zZSJ~NhHb})l6`OAsHtK7)8j!zT8mkOucLtfJJlue3dqMfSATooWUb@A<x1^K*u}NP
zJ$LJa`HJ5j*L~!+%lZ+z($pNH<tenu<uGEc=K$2n#nn(W<eB1otz$JHZ1-N;!E#Ok
zBQ1fcp{t^Uoxj>`_8_vVEX3Dy?(`II!A`MaZ4@RQEpNMRU2Yw8I=>n6)8p~)OHV?j
z(DSbZXM412p3Ld*%YK(f%f0vnJ&#{<Q??&bxwlt<98h6REP#GEoE2ItzJ*dA2#TzF
zNWU1QmrB8&rFB|;7=C5+kG?(W640SyGgEE_w-oS={v+OSfd^5RTiyo=B?Hkuf=bLm
zXbH3u6_{?thQ`_J0%My=U2x|iS?88Ct@}<ki9>Z4^rWg8goEUwNXh_)c%@|pM#_mU
zQ*@nlt=W|rb)(3FQwEmokQGcEien9hZc1fK;A(a2__dqPPbC6KbZ0wS2k#<4!C5Z2
zy}6I4woU44p|yTQq*g(xx{I2^HAIki|5)cw;-5gJ$RkEX3q*~sBA5~R3SHl}j)KsA
zNTk0+UGDiyd4#Ts1*3t15gd0Y-1_mT5AM-nz3efEYn5Z7Z?WmS-Xee+G<;3C>dA3X
zEJ|!Zn}pB67MJoyuYpSvGiDo-ZR8vM2R!}-gB>jX>z-C0=tzoW5LJ0I^t5s5xOGcD
z`$==dO-mMVGr*%XjLYjF|1yOwAux9QcTcFDfm|m_Wqm9aClcP4{JnG6f|*(22O4v%
z%Mj(i_n;^O8DFnXW21{xc*SqTKF}o?TL+q{%{0NdD)*(~9ZS;!Fz*M>(ubPa5)hZu
zOQA0gB7ZCS@1llH$i!xuqAkHL=oB>V#+gB^><xjFPpi1vTnly$mRq88eaXbQq^br4
zZ9&)9CrA~BP9nwK0u-dw;ac=L{sQ%v^jOQGar7e{ANlt(Rn0{+8Dmz}Zhl@qKg5(+
zMGxZCp+xlGM9{2N`p_K5%R;8*G_~1o;>G$jIWlK6gxP2!5>`l_%2%FFG<bVfU3Md?
z-QaA`fA6P63d>9et_>H?z6)INa0YH^{Awk*DAELBSmDR%C#wmczqj!O4R>%M{th+u
zim7mBNzi8##Z1MQSnuDTi8F-Lm!paT<<7CA>E{Ag>vq?E3(KIo0?dpDHw%D?DRc{n
zge52Gwxc!1h^A)Z7*}bao!!JFbU`)zloL(Ia`m9Lm4b9BiR{WZf6HP-=Bar0InID?
zV<M{u`BIS$UiZF$9Mq2pB!d|qNhC1wnOxNR-W0?5gv_2ij7D%G2iuY~7kVZU5das}
zrQ&7ae?OSm%SQ4ddMhzQsqyC1qLt2J{GBMBeQHSmP`~<KEjKA>t;tU7ikMCXDbf$<
z;sgsOA^sawSsdxq2+Gk^iWy}{xwn;dsiu6*R$(5OOnLQ|w+B)CzJcw<mzz%V$%H&3
zAJfk9Ylj9J>fF&B0;c_-pNDu;FgKP=7;piUVMpB7(E^*m23&V$Z3XGUqwdXH2VRZ6
zf^vE9LQEH5Y0mR%ZB}YFD3|Z=B+~(vRlq0;EO!D)d2!Rhg!O@d*}8Lz`T|-hGoL*Y
zO$3a^ku<~=UUbV?NR8QzF{#yBxJV^to_sBvMgUIr461vPu8Pg^FoPBiWQCjV*R$7P
zqvTr%^~X$JV{AFoidl*SaT<CcIFH%N0-P&T+saj$0}tlZUE8PE@nns#ohD(qiCC`4
z?V}ALez=()Nd~l0pdS{*5DbTu5YKwWMp%Kst!T7+27P}gjN**_l<U2glp#%)K1ro<
zgSyXrsp@X}&r?6DwwMIO!{Tz;S~Za;O`Hq7eK~uNTUNtKFza6uGDOygAGi*ctwwZD
zGBRvHG)KDo%K4oHIS<%)T*T{ogTGati!R0tVV%Xjr4bgHliG!U|52Mtu~1uAzcxWx
zWuGvGd5p;M_PS+<v9FrM0q7sF%H>^%l6-g^?M|2yK3ZG#ggQuoMJh3xzEAc4-G#M<
zAUa?KwTp)a+HX87+%Ow*GeC}$3K3XpYooz;noU5=@If*{Q5lCGkw3wKTGw0f&QI11
z?}k-t7uCdjC4bLh6ylSB-@jVM=@-@{8-kgt6NLKrWrEfv5&G5Ku7{4jTfTmXVRqgH
zeFnj$Rwo<}2R7&yXxQWKVJeS8sz~5ZCJC=t)BHXD1NR*txid&@i>4cg9<xsKqH@bB
z^Ay}r+T!xFZyEPi#|IcnV1KVv=o##u4F?A)`B0SLfjM=)QH12gs4lco>k1_1Q^4nb
z@AeJLUAV5a0g}dP0$g+!qbSwOE@YZZ!lci1>A%Vm-iOlYL@-7}GmKA3T!ioXoT%Po
z)FEv)2~kMe9q7Myqmv8zp61?9^pA$7$8MWC#yPs=>7P_Y*kdwZ<e97>Kj|k`2V-$0
zVPL+YVEo0`B*}lButI?C2bV4Gpj|U65qget%l4402NO=bklE*8z&bdC-P8f@!w#hz
z5=#Jh`VA#I6hkgDx!P_Y5)0T|Gg6D940P`9hsh&tjo=AMA_o`8rrJu$Q^%KH=no-x
zcFC9@0>;9mz!|M;FPc)-VF?Zkh8~ot!w+txZl86B8KyPdP@4(#|9Z{oVChfJ72z`h
z>TneZ_cAbVos~I^zYdbqPKJa^f)50Z+}^})`I|fs0npY!-ZuCYXj<H0nWsiUL&ZQD
z&+BVPVW0!^U(5X8mAZct?U~9Zm2^T%+IjAPQ)MLdef1H{mpT+A-uj}jj45-wMb)|e
zg-@pm!K8K4^+EmJ0(ZPlKDxXJvSvz1?u(A(a{*5A<ou%HeYtp^^^**JaDSz(HDZK5
zoP0E>DMobU3$d`UX-bd6Lv1=T=2kuWd?z(2m5np37ESq8b#B$@4eBZ<p*N^MBBl3s
zHQhH49yX-BTm*3NWSD!P7(a$Mu`!n)BFz}*-42?_MQ8%2cqe`tVn_p3yI3)u(L5ja
zidK}*HgK*yIE071wudWz4x>o;7Xmj^V^!ERb?DG+;avxux!sdxGWt8LzP$Rq1Cho)
zBBB$jIydq)wupG~F(@1Y#lL}^MVIwAwtWGj5pbIn(D!-VzTWxbTR&RFMQ^1T-lX9f
zk!0}k$lwWDE|_5bK>xG({D%WX(D7Io0TdsHS*9Dm1;_ig{v!9XLD}`Er>~o?(i|iA
z%Lo@q077qL3!iIb5JVr4PFg@3nm$j6(X6aH1#AjUVf{oLf|re^vcD$-i<CiMQ$EhL
zLomhf8flu>FW5Kw81G@Drv2}f1?_W1#8@B56z{x^VrGoFlsxKcJvBXUJKm0ZzKM;Z
z0msrXIL8`@6`smNNG=98CsjcXw*nFWs5(&czApV0@pAeFtG_j?!^u<$kf~Z`5LL}C
zmwds!8-NrX5!v4qgeMmUD2RG#v8#{cWE{X08z5`jx=6vO3DRJOi#h8MjR2z}=wbdy
ziBWDI>sP00XlsFVlF=dQ8Z^2J-$7#$B1;zGEt3=!yXl1lcNRB7dE7FoYhb|epJ}uh
zV4@%`m@yJMj8)1m7MRVEjRu0j_VdvvVT-OIF&;t`9dj_ZxPDHIE`M_rK|XZdDF!B8
zwCa*2vdo^IAu3LpHdc5S9*lNWfF4DR8Oo%0%1;lS=Qe8Yu9zM-m_<erPY&mnLhk);
z5(4W(?JZB-f;t389vQ1N*F8Nc>u>isXJB?}UJ1Ou;w40?6tviKOHGY+s_R$b&8IcX
zOeXylTTC^KOtXxkg5-;k2AxgdscRru>NyByYyUP8Ku;lc!Zg1yTa|wlmJExs8fW-A
z*QQ>}CQ{6Y25C)FDzZzkZ1px$?{D4O{b^Bi0|AXj{Frf1zAPcZQh<sde|XXlGmok&
zMi)K+`CF@Oqdc3|H8lLKx~-j)gqx0I3y^j>5O~ij&UC{@26*Su=T=*BEW7CS6xn}&
zfE1lQwllJ4S4$_Ua~;qBh-N+5_MTt&7o06{GVpZ>{%2f<hqLcSDX2gAgeJ;p$$=rz
zGLo`T{pLksR~uiRvto2Y!~l5|yj~ZO5wQHyu`|5w+h9{X(qLBC6FcSqAs~7zyK0vB
z_NTrn>AxWs<%}Nq(3|z^p=gZ0QJWXM?^2UoQgUG4Bj_Z#6T*d#5a(dIPZ^?b#1AX$
zU}MSI%p?pMLzE~M$<$U#!*WU74b>#plq4dbF$DPl1)aO%hIIgO8G#M9%x?wdNuuwM
z9gtl2et%K|#+&w&3IBRGe`(E0?S<3X0^$A55Lzu<bNVj_90^?`uOc*j&9R^*)j$2v
z2rrDsaJ$LVpr)(Cy=9`}8!HR#?SoFr#835wZo;0Fp`wwS1Uy4L0_gNiAw&$RUF$=%
zI3wtJ1>bJ&4qp|_JjTykIz_Sas~$p%J-?{}vaJ<cEX|nDo{CsA9KHHBy#+DIWBpFG
z-)`%r4zXa;!PSkPQ7&GtdZsc<fmv{xS_T$=R<8CPe;1uWlx$?T%g=AJh`$5{4rg+2
z7KYJln|qLnazR_Y+QGY>@6v9Ntpt$2;e8JM-tqFKhqbu?2K9FHC?8tYIb&Uxx)l@8
zDh9IgC)Kv;*o|Z021xL`N@n&Z^5v`^iP~b2Drym6faF&2s1=y3mr=2Sb3naH72JNb
zX&Di=O^|gSZ(g$<fVG#24Y1>0#b^JvpD}O_Ai<ugnm3J`)h2SaN=wF+fy1#FM^|oa
zJrdh_5qj~;XNkdZAD4^)nLu7AokVU?zW@keTuK)m4iJCv2z(B1#Ds=7GCO{a8hwP@
z7*UYdUTAL{`7SORl8T9-fsRMeWnj2nuAAx?8aTjUB2B!d3%{8KIudY89xBYw@$}XO
zvx+zeW(lK_0}nUG2p%%m_#g`W^t31JJpRPWv2$eipOSEC0!7OIW=A0cG``L87nxHL
z093-qLLKpjRSqd-GWm(G)laHqs^1W|<E{Sn&509PJqK@TvUxnWBOm}VprgDJDT6nt
zdtlC(X%AfV0DAcI<m8MsCdu;;vWCC0vm1p71dG$mUvH!-qs~l#%*f9VBgLtO>?wgw
zQ<y0;4_Cy!3oM-G$u84$3{V9~k?NeN7&TV<1-dj7QI(i+E-UDx^oo<55+di{@I9p3
z^RdtgTJqkoNiiWYEd<N;o1E$A9_%umW5K!GO{9mQ3OZ;h^o}>p_u9!QtbA3!>~bl}
zka9=f<>gg%hh_PX&3&3Y{Qk~-Q}N7;aCZIzn2c~c5d0g*KMB_2b0IqhaoUCKR^Kfr
zHu=BzZg*lK1>6%KD|#*ISoP8V%0Y8j|30a=GsSr<vChQfOzn5G&OM-`+=J7e_dzxT
zj$gpa2})=ORq(kZ$nsWI)7SGglDMN)^9=57ektorq3T|EmgCNfUd|g#Flq8GIo8uS
z>EfnrH23cL1v^|w+J*Akm|pn6?5lW;R`9si07T}9Jc-Ic_|cI=m}_>DAP;vfjvJap
zA!(TZdkcs-3+!C^7uR~Zul+7urE}az8)puLxH(Hmj=_S-a-wv_ujnt5mxQW!W(p+0
zs3AUx<%X1xq;@(9o2qx14~>j4v9||n&UYmP+T1fTGsFF%rFNz|u0!~*UsxF+0TUTj
zoN?Log3y2d{6R+W-rAf;%*6#|bNXC$!8teUe%Askwa={jc|5^hn8IkR8+Zj<t3uMp
zE@Wa5PD;ADtT(C1&8iwHwG`p+zi1ybm9I?v9NQCVC3Fwhx)(D(>C|nV7w%_#RheJ}
zRJX_7nO}f<>FKYiG>9@MhoG9w*kb$w`UD}|10-3wgJ_xb(E>U*P2<%K7Xj-qcyRbE
zv^B&8`gjtDKktK$&P60?9QCIXXN_-8aa$zmlQGAY?+cD~rQy(9P+QvvwYcfba0oUW
zuxhs(tE@q8*`|l~ep(bRQZx(bf;LG19vu3{q?5YOhLC#apiu@_m*_mE9tI+T2}T{x
zL2m_=9f~+VpRBBGO}ac?ZL;w2;Kc9hPPfxc!V^EUb$&r#hd0%{e(mJ(2S6BoZVHF+
ze^&}F??$Y>?EScDtafR=yNlhe$2WvC`aEIozpr_L5okR!x5fs~rNlW=VG*b>@wRjc
z-g5Gl6Slvu=$+gq4v!qhw*=eq(oHCUi$2~r{|O549@ygL>@<~T7I3qJ_6vC8@cZ1g
zVV_^;kIIJ2`V`uB{qZ$pVK+(eptnsJo}}Z7XgnS6*!X<C_z2?J35vKb6R-p43zYT#
zH-(1*8)dTmlc@GLK=1AmN7uSyqo1s{qJPrO4LzqEbYh;FocX!#fN$iAo=UjD83+&I
z$qHKj-Y^^H`xq&g=m`d}yMC0jI)HBP{GFvudS951N-VQ>vbZz-9X5ypI%zI;NDNsK
zJ81ux(uO+WG;r=?fq^-J`zP0B>jm>R;(K)n3H<jtqCyoB7wikzN@|L4GwDhujz7gb
z3&?RP+rB^f494#y?hcCoJ_wpA;lo+B58z{K%M{cYX{^Ga$HraM57+oDHj0nHmkjC?
z(t8PaiJpp87?42mhjXF{fWUjaZ(%%^5=9uNL7(7Gnjm`o>}7U<+M+WozM31^Ons<z
zz{fxrIOV;2x!@~cKw=Nc8~cEE$P3L&g~CAT`?}ni=IHB-_js`ie!g78-P6(0VWJP+
zb^<$)*h~EWb}e>&ZwS{^_;K^`{i%0y`aAK0+-~2V|LV4U&x2@d-JQY8=Y`#_nUO!E
zz!zkGP|{S}_)Wih`wrsqBd%KT&BKV*E@ul;pSan*@D0k1-1nn&rIcyu>ueSXnC(cF
zwvkispCR()O_pb)fX_@lz8&nTlc}+9k<*t68Q;D)Qj6bwsXda+IajQM80Ha1ZU=rv
z0@DEZoV0qck^bsYMWsOw?f0gA{9mCVLO>csMw4*YgrDZRGiqy<o3ohF+y|rA&jZz|
z{@PFEMcWjrI_kW4Jmvh0eLDlE<2rkYyRbGlmzMG+d8wP(w`(9hii~ELFt;=GrI2Ua
z13pANCs2sPR#&Ms#^C4{5A(q}^;E90`x>0#01dVG-i=>B2;Rg~;c)-@6bI|U;LD-!
zaX`e@bKA7IhwJ^RDU$5+AykhdFzfKl?Oz1zK1?m@@Khjr##=$gTtEC^_5%Ew#{2qX
z>)32Fv}xRy?Q74ZUIq09Mul)Es*D3bLX)oW`GZQ_nWHmdv%K*zPFuJ42if@`vLmX|
z1EZLLz0kW&U+DiK>Meunik7Bf+~MHv?(R--5+uQcySux)yIXL#;Cg`I8r(I(-SvDY
z&wKCvswn<Z#oBw%teNSa?hoN(1SO*Fbg|!hKa)8PXROE;zlYpBwK@o})*6nklT0Ki
zvk3+nYJa`Bun{`PQWoAdA>BcqVuu+!a@cr~ZMayN-=W)n<z09@3oj6`V0wG*2|!dQ
zc^!Sbqv=EAOJfc91Ks<rG}dA1yS>UD3LjRx-}PJ6eRq(HN!a9r<qHU4rot(ky1eYM
zM4#TC_3!6g9Cko8YC^t++Z5V2c@jx{kah5Q({c%bAiB#%<6S2b@1=6%8d8g<Q-~(n
zbMvSf3Qh|~h3KW>i;wt!)DGY^s;{*j;Xc)Xuug`;^?bFe^X#5pt=kukhJ9OSyR?PX
zW~Z9Bz$2h84GcUB_wW2S{?^!Ru>K)jt=q1<n(O5Bf}yuH-0%o(b05PkiF{O8GFhBA
zs(Cpb%k$hK))Y+(bvk@L-V9e#9>Bzp*yaHK$13v!Pw^UcID@uT{+)dp4UwB^wOdI$
z@59;t26(R`>;*&8Bx7BM8P&i^Ic@^?X#_7VUYU>qnfxjBi{_)M`By8P)wkj_P<oMZ
zHTpNI)=Rud$|-1*P;rSb1Xn2|Rgv`KZ5bi$!7al4mVX`MG&CK542UpGk<6?IqH0ZB
zd+87-u_cmXwGoMwsD!CoGJR%j4@#{PHFh36rXnwazwC?Cfr*OV4_UoWF}B0$t&%H}
zIR8OWfU;}CXjjeMV_e<qmLzE28>2+71(yoP+m`3<?2H*69$r{n3~k;7AAYQmu)4LK
z8&rMy+{gZYP~K1GE=rQ`JwtUB6T)@1_Zw^0_s(HAj;@E;T%DY;*KxOcM*#HXaMg5A
zsPDF2zWc5mAc8GoP<R7<o$Y`!2oB-9b<o|hO|xIm)dTWU|L0zJ1YBrQBl-uS-j48v
zIZ^N3aaKLwSnCt^zVK&W(P^Y-0U(Bg%FPen^T%1y@3q61XpCkCFtWt>ncaQ$cwqT!
z!;oQ6Z7j~e(E_oB%Ir@-pSUrATJj4Ddc#b2>9?#NB06^hlvsV%=R@<9UR^Zg5OQYm
zFKHw{<FKedHVaC@LqjI$*h&sj!DAB;caEZRFe|KUG35P=txP6&p>E};j<q@Cor3(_
zpw*^0uc939vFV;{BmM)Z!HFBi7&#QnrbBq2h&D4OKVdMB(6w-4lMV*f3HFB!!mlq-
zrTkP$XqaK6y=i16)QtRgw~zXCEkWsNZ{7ESe2F-d?dDMee5VFqg3O;Gn0(eEw<ycx
zznNC;qMADSouP`Ju&V-URXL%xa{7l3V9wUtl<)5z2FidES0f#~E~v6*P8`DIjP-P1
z2CU7i%@k1I8HeU}c-%B2n#S?cT3aYkDwj9ae>{0b1zJ%!cYozTQP4MkD8yct7Ai~l
zQ#mMIqt(f-^{M!GJL3M>wMKNuOEeo#kRf<}0tFKUBWGYhc9t_rO0TwRE9CL$QOM<!
zA<%I6wf#JdEl9am2uH!dU*s)!4VsPMozvB9Ouy?MhXC>0!}Hrd!7>op-xt|7pCG(;
zFkv7+IPj?aZat$UVt5~iux&#C4Vr`oKR-@0h}<Z6X!PNu$;s(HZp31TuTRAK_jNV$
zeqi_e8jrrjO=GOCmq|LBgy!BuFXvnR1pLn1y*ih{hJOPb=zPg&MP#YLyW#9bZ@F^E
z?Qd>+#q-+*gO&~|+xN&8?S0>y@}-=18osxQ#7CdEwLCw^O$NQIsIv{SJ_o1`Uz|uS
z6xRz*uXR}HtLAcz-31<!t3hb4t3I;KP{1Y!TyWap5({#dJIn~1Y0bZCa_0%UN7bek
zLe6VmSw4+KLc%mM25SHjH8i*(aGsqpy?@jI8T$+O<S2Ns3r(pS58kte#D{h@u{t-%
zv?%_!(8X_I*qz{9x?(c)35TW{F`eFin}q*|6~X~0F`8P=7x_#(=x2xyQkQrKaKYCs
zY^qf-(LaT{S;JoQHV(R!3u*Wc@m)GGn}InO3Ie=`6(px3#Tx1xQYO=)U@HFH8oMv7
z^1V9IN?osFNf4GMjEUG{B$;<lhG*KcatOiU=It>6#OwQ~+8}J?ku2~&hxwZ0W=Pa?
zDQzb7P~`Ia(ed&147Sv)<6tkDlzf&IdsplAdzCP9(WkB^37N@)2~}y+pg0>Wxo9bg
zAITpJy<oNXU4|}4JE@ShRCSu<id2%Hnm_HfGZDrR15IvjmCexa8GhEOVIZUv#a*;K
zgcVQW0Pejv=_ME!cLYxlir^uwc``L{JejG)(D_7Od)RO5`GD2oAISNS#R2`x#Gac=
z8D2D_K|DG})~?us&3IX;Q}QdSj=f~&C4*dT?gIt}jcEEeEg`E8pF<7L5;Ox$=oMZc
zkY9Gsm5=#M;X5ZfjcsuBJBs0z#v)@a0<I13vTv6)Q8M`{pJX{?!Y#Nr-a<H1&=9d*
z8^cV8`5vaTh3nUsV7L8t$#w5K-f4T`%U<`(QB4nzcn{#<g!_y?%evdrbkCYuu_rLK
zx(?W5xeRTgI=()iGC6vsf1D;L=Wt$&&YqQCKeByC?(=r%i(TS=o4=6vyy-;hJ{;hI
z7%61d{0|S&ky+epFoX}HgU_M*&GN+q9gCU-Y{rDAZLZ$F4!^TCHRp#~yT4$xtAf%c
zwmD)8AP4V_JK9R*JdwL8`xfp&r;$b2XwGYJLY4@-R6(`|K*B^v>v4Zw{X`HVMxM_m
zR_+FB1MfOcACgg~DpaXZV2<0(Pr>7y*qm>n+YakXBo$ZjZ-Mukh8t$jnb-x368j&(
z&QooLA$&^EI@bMhpd#m*kb!ZS^Pdn=&cQtV%}cKeodeI|yCg`iSkp;2q3*wHQLy=*
zB#(C3<#e^RioX#x4%>CitBTN{`+$xTcI#wGBMy7s%&rFL@{qxxiV8!<PUFbKfM(wv
z&Qlv-AI{eOblYiMNJx<)k}hAVDFQv|GSzR&4jy806L|5q_RYO>ytPT#zOPn7+KQ1a
zqT!UYXM5V>O9@|vDrVg=ynvZWk+WCZ_(ekqnEH6FA`i>b?-MT?q!Tc*FhtAs5iSOI
zloc9w4bE>;$<Q1;Jg|S9SKnlAnwy*FeMcZnMd<P%$=tjq(-~DJWL!PuC8d{(@{@?U
z7VV#UEP9AKdtYduI$lDq-h@Pvy}dE@Jx**2)6YkkAT&+5Y3XVXS|E;IPHbk@4Y7$p
z&p#Ap7K0dLbS`oup$e&tg21wH(seHb5@b7XVqBQeh}f|NH*sL%0Qp?dwG_IX|J(8W
zS5)J5i25lpueI;R>_D);QyV4FS@q#DJg)}~|C0vY^0^b<K;ux%JpYE2j3)nhUW*Gy
z03P?I)_g+tFnNG5{P;RIB%gpZv%Q4c=dJ`07M=^75bI;3GUm2DWdSZ1^g(X<=C?0^
zo%jB))U6Sfnp5nl3i0P9ImXzE9Q-6M>p9!EbzY+$sA70O3L)nXaQ|4~uehP10w+8A
zF!jU*)a#(SI<$zV!tPmCqop%GqA(6|C?}(ju-2r!;w;u+dlw}_e0=uS%%Gr_*~LXz
zXq)AMHCv*++X7H|>x~wIHWwaZQ(;-@5!8;Rk0d$A59ybYTJXk-met!1)M4?&-?Gt)
zEd@BsVNw-o2<IA5Q4zM;9HHy_CbeWP;y7>lHiMYlB5sXsZ)`V4pa{{*cgWBtE05R-
ze&hbV+xAZkks%Z9Ytqn>0KyuO!FzpQxU3CL`++)$WP05VPMCuia$l8D>Ee<{A@Q@p
z8`stQq{>UY$5svayYn~#+U6)>lQJ0f>j)9%3NUfJIjM=|^O2FG>pFbx`OPq-jj4)B
zZw;8L1AJ6IwWx}p@w?Behoz_}H5PaKG_}_W%C1VF)R*F09pSYUi#HtbcQ~OxkP4dG
zmmIBGdwQ-6J&Er@lR;bo0`{Ls2naaXNFti<Eb6qOH>U_P8Qlh`h-Lzh&uGDGijc~J
zo_rg<*YdQN$FVS86D^k!Yj_6meJbmyGXYmNvzd88Ag87JK}2}6&<h2EGP-iZfXDEG
z8;T^S;q6N<;Oy6_AgN)Z+=)tYB?w`c7}U{tBn+^JLpzzCRw--4ED!Efj+n4%RFYmi
zghU}D%ymaZIci7n)615&r;q#8kM$}(e+zCZ0b4MDx1SVS)L{-*1P0ru7YdMX81jg3
z{n>Pl!BJ~pHfoySU3YoAd@VOrlo_p=YWfw?C=^cUIA-_?xdZ#(c8Uu2k^9uY@@m&k
zW({ucex{FA6hWuRQXUiH5?f#5OLk^Ju2IZZ7jlhD$K@XQL#u$KW5^CKY=HCosa$vt
zg=a-b6G`=L6Y2HHGdu7vrQoEKwts1|^Mm?^*3D}=bcHVPrhY0iuDae!NyZVS&`-vq
z4~HqE4J&!d(A4zjuLZqO8W+-}ysiavp-}1b^tZ@|puY-<`~M6cH0-w-O|`-sWR{2r
ziGm8~@e{m!VRM#n4SYg+tZb*UgBByyAf#hac`)gyKkZk|dROr{#uy(+|5n+OyNp6M
zqa20b?@9QzdwQVFpzrQ)UqCuwjr5~j^rKO^|B-Y9)k5U4w87;SxBaxJ$8k+Qq`}7-
zv-RPjUs-0@@bCo^-+P#=ke3Jc60`%qD71a;{_(aqLD<5llJIL%cg2iMBl0ftWsZX&
zQ4*$t+8@r5=Ci4VX$gEEzwX6Xf<f3F-KJmGIgS*aH%YV;OyX}HwxIC1?u4Gn7`=9g
z*x0YJGWu1|^5mJwX>&cZ>+3e8P>$-5@jxDejv!N64-Y;yMx2U8>%RcR<l|$j6w=08
zZnQ^nx(%n_VUC5Ja7&7@{kM;A)pX+Mo^Brxw_AWI(5s;5uLXP0IVyt)Z{D_C&ynRq
zVG$^g8ZqSjBZAzvTzm);5IgG#)67{T<ZNCSlUhh&4iil0<lfW9h1G3FM7IqJTd(R%
zh`|@N#1bi5NF2&YGJ!T-LE8HFxM(uy*hH4+MJlA+^yEsTGuOM4`*aAe^*VpgQ?DM{
zS}()-#y5@s+?C{7itN@$&J6hZKObfWc>luB>a@8;z&3LH7Gu)E(|%Cjtj|GVTi^07
zd@@283$AXUXo?39Y;h!FBsPLNaw(faQgZ)_5Xl47yi*nIm9B=JEzPONd@sk+i5p!$
zckGR#7A#{(X(;V?GEs?53!XB!Uxdv>Tuig}s%)$)V6B$`<YzA`v+WSXXGQ07M=-S+
z_Jucxt=xz&GgAOtOQ?nM9<Kp3Hg{*e7D(rQ)^kdNLE$?y6B>)I>G3Ex7u9^-r*Hgd
zKnT*`g3+|b&J~FlPnKkfOtj`N@G_ho&P@LM_t2|;$~X|c_7`1;0|O%4Sk#Qyc{0Oo
z=G6*R^jJ-OV1;Dt-Yd`t*;(gqMqyhuG#vcPPM`Z_81l3rK{$9)X=zS-nwb17+|dVr
zqN$I#-2?J}+QaKZSl0KkQ-e3OtNBFM8B`tF^Yyr}A!Jsp7F~XaEHSWB%hy{ao+TJp
z>e*c0dNpmUf^Wgnyg#p!Z}Rf^ECv79_lHDvCx7egTv1nXxQ=n(jj$2+K<6di#k2bA
z?;O>ujkTSet?l1gTN->GRQ?c5QgX^w0Du_3f@D$Wg4jrki;MrdfJcIJ&~T9Q=+yFw
z*sEP0Y`I%{AwFdg=0zw4y;qA@oem&@?wjeph*#w<m=9%;>bsLC?6&Vc+2E080Fl4h
z3#sRIzC-`nq&_~_Tv=1IuergpqTBOtI$H73Q>TkT*!I`wpliWdyG5e>1q%dpSJW{4
zBg;zyaXj14Y!a@(G*S-EYA<W$P;_inCqpZR<8iDuN%%c%1&FzjcrOg@L+fn20H19b
zUzbai_HwAcZx<%ZHL(BF0N?=<GT?abr$lW_ILxgHj}UGjm!j`ebz9|7$J09je<zVk
z;AzQ}ZUq_|BeFKNM}>|TuKtiS;Qc2NfFs?kAF?*dUDC+<4Sh9e*@HlxB#c_xT&_+{
z=T-ri@>_m2l=iAMkIjDj%gJH?FFb=ub)@Xo{$o|;#S?2ms?TMduYX-@(cr^n*2Fe3
z<;7?97gkrzjg^#E0J*C;Z9bD0pb>8+9zyG?@RNMn1;Q+mHi-w_+7rc}6Th{gGN2~Q
zV(La1r|DJ4E*Rp@NQ0;5(pFm-SO50LS2dnKxM^_EKV!6jG{0vOH}h)*@x{{lx2z}x
zNK46aHGC@coKknJABw~fD@j&|Nm`JBHG|+#sRMwm+n{Z*1#>gYrJ6#?!i}i1;@m<G
z)KH=eMo@`=9Tdc}8|Fz`>0v=rK}GVQP|H0$UMGN9a-Yv^3SFkYOZuOYkw*09Psfrs
zFlCQ40hjVbOojOc(eNC$5CHM9gB@)C9KH|lmk~@{oF(PubjBm(xdwCO*CEn$c0{6f
z0j0^bCqx=Ev;I3#?EW8Tdn%G#&Fs8fIeG{L*SoP{Jp>Y8S(%O`etc3lY``R9#*6Vz
zf3}q=TWGGfVCF*Gf3)h(%ufF^)a+_;c*dv`TvFc*U4`@pJE+y~Saih(1?2p64A*_M
z*Ie}Y+hwW>8pU3emv`w#MVyb0T9ns*!*VZh=W<3d0zSR3>q&EG)x#H#)$@$vDI~xL
zKKDb_A*k=H0|BkVzB!<E4K)B1YY>49`Y>~pcY`}IDZW}%EkHH!y15VgqmzSyjQ>Wg
zPI?4~EQWZ{YHiwz@h)1>(fG-511%QP`4%7}5@mb>^Sn%8KWO;Jla-p6y=-(ju8Ua+
zRCmgp6?n*BuY!_%%d0l<PW_sWN$CoZaUQM-W$Fln7yQX~ARK9wEfjuo^=8L=y!{Sd
z@eigz^R;uc`pfaZFPj0QGR?|~YK5P4yz)~dic^g1X0+|ATCHylpvy5OKO?R_04e;!
zRw5s!k?t03>j2+OL{q;7zOxYqyOB=K??`q3+LxsYGXEGL>-s(#55u3Z$c2fZr{8lV
zy$nW!Z1+!DAfw`UC+h?Rbwa$;-CLuiAS<RP<5#m*afCRD&a*Gj=$E_JMa%6YKw9H}
zzfoK?az#RmA25!meP+@v6y=RUUON5TjF`?eR&{<FyI&0E*tvQz_lV%(jU_0}43J_K
z;NtaXsMQu36;?yPa5<N-H6LqyW)@xi=eoOqphoYYYf<xgC>qirhUm8}Qo`(deq7Xx
zSegOs4fMBXr1i__q)}s61kWE@`w;sqt_q*M`ZOAibi>Th?Oh>e$kRjkgJpEahjApB
zwj~&&^#MMlUTUDLEuTfM{C6lzbKAA}6u4a-4`GBHUI2Nq<&B-`8KL_NRhERKFqI@6
zC$wmd0YHbf6QTDijBNmwPq!ZVWlUsY=$cu07dwE{3_hnuS5fW9#_oHB8DVy|hG)_w
zZ%$RV9)gXaprND#o~uUsHh<)qVX0snnSXZ$t;MOMqxYJwN=xhysV%~&BscAK%F{@^
zG_rF2Bx)ydn28v>QhEHN#zt25CxK-0{r&yF9$V22Z$qxw?0z<W!-qU`EpS_JH+>Oe
z??W>KDHpvY{?Ad%gKW9a*zEzYszz1KWV~lRc)Xw|-Xkj%;L#Jx#+D1_hVOa7bfw29
z4-Gj{@}TRi>ZL4CQaL5VF9~8^FW)nUlUwBM$+d&5lJ1^1235l&JqJ^~rw%V1xSeN!
zGi3JDhH5mKGX@5t5cM5y)ItuM1&`@M!#jQ+N&{jd!gi^2p3~c23SwZ$<|m^6N3dO<
zs2I#JjKn8c#JrsRCOA?5ZR+lwgX!3nBh$xVbiUE#g(a4yZBceuaMQ!~_IA8^H7bSm
zad{!HmGS3xd*&k8&QJaSt@?qh2MwxJKF#)0*$<v=SP5Cqk^@_K8a$SaBnny<t@}tP
ztm-o;$+Zj3rQeT+3<{}>5MRsooFvG#zNUUQt8o9xM8zMTI3+3PyW<<qTCe{!fF~}{
zY=EXXHE?woOCg*HKLDFDT(>$eP_E}vw$MA)unGs=L<}d_w7D<Kk~18^)nzGj)$ggX
z9L|Kts&zRk7Y|N*wnxY8?n_jV_A`3(tJXRMd6ht5rIjat^Py|udP|MVlAGJfBx_w2
zc;5T~8rOr5h-0GQ?ykQ)`HcfBY8eTo!te}f6^Ic?U&x(D7<f_1n2T=w(U)3mF3yWI
z6T?a5nh}~zB+U4#cot${F8)Wd(1<8zOTD$Ysp~uMx>kpplH}9qHAW+538(lUsARY#
z&LL842IJ&g&o(3e9nptt<qDTN|9lFu*>@acN|T<Y2RDn5-*u^^6Zq|MG&bbFw8(XQ
zn*9i{yiU?I2k`8B3H%?zPm3R7Vjt?>S`{VE*TIwm?<0!lao_FUchS`{#SkzcSixS`
z|8Txeae})<nu*8AGHk=MA|`-}wMvHxKMG-gdLFWf)Ln69tiVQ3DI-HmyW3lo{V7bY
z*h)*uwWHLLas>qnc(WTC4@XZ6+roM47^0}Dx8sk(E_1syeL>i-vI06<Q{8D112K4>
z_q~(q`pt*|*CY+Xn)_aPQULLXS+<Us3~mErdUu3R1)3WO^QCB+fTLg}6F)<UyMR?f
zF=~qAYjD?n-&YUr+Mm{Lc{A^xBE<Lp0a3C+a{`{I&)Mv*&0*1~D6JnYhjouuiGk1E
zF$|pC^PznHJ}@6I(U9#7RG<AVGV&t)T`SNIYwJCw5k5dZ1YWmWG0Xi97FPc2rLVg{
zZT|XZ+p;rSlj|{9-1PI^Il;FzzKGpNwv&i$!M>Rx$f5_(;JWN?vg&^~R>`&8X6IfE
zxMgOoFAbruDKQ-88%!fN%R`(8y&89zI>BQ&JM!8~R^hy8@QxrDi*yzr04GRr#CX2^
z$pBg@`*Ut^aY8PRo0{vg4T^iv*`8enn+;<8^?OuQ0w!>+i%$1sk!&J7f*q%tis_nn
z>rVCFVYIAA@+9gRn%(YKiV*279&=DP^Q;S-=RMyg94}=c5?K#sz=eZ5S{*b~P*#`^
z05#`aE)wOzwKCT3TB%3)IjR3M9X$aC)KI_W`lDr_Oc-=0>nE=X*W&n(U)aBiRwT^I
zYovy2gMm)tycVfMS;G~$M3=LC1caw^bgPc(0aO!xqKlzpv9{upkG4Go*bruF5Nc3d
zGSr_`avcR?(|!lu50`c$Gn=Vn1lf(Bz<b+z%NV_XnT$CT6BZLyHq^UlKh$sEA(-K`
zQeJ7teIRc5*oS-Z-bv!<LLyE$^{DQNgQB(xI72?V2*1Em3Y^(^VR4(DcKPypZ{{Yx
zZMCT}S4cNZx8TwDsP~j`>94%$b*RS<rhd?w!;EyEVIepA&(re%bRdf*=7%r<T|Dm0
ze!R2iVo)9CcVV%19({7Vmc}cJVNqqH*1Lkr9^!QM=r`o$uvI^w=+U6!=V&6hIpuV*
zB!&t8Gf-wNLMhzY*=e}h>Gqe#$l7|`VPqTsb+8(1gW2U1udR=pj7*hd@mAl3spsL$
z8?3ME5sTw0NkPcGth?mQBtG$pJ^*050=dn9X|WS^@eFpRNo@CYlL;oLaN1<p3{Mqb
zgzfC!W38n>4+A+u<ae|TR`9TIj$Gv2)ipOPfYG>xAzX?_b^f3q(FZ)+_+ZbXC#F>*
zE@#*@@@2cz;GpT`ug-?zZmvPnc30Q0bh}GET-w?8^P*yeRaxDQC~ag_uNzw)%h+#6
zhN!GFt^3z<$tW}2oIgr({T!ZNm+DPT;r+?7Tcm_Oo(8DquM8xcuS(o-_}N|u_dhOz
z81TnL10J3K|D=tR3Tjqf{_8WgYMg5|It(iOl`|EY+i*#;E9A%n|9QW6=uqkRNy8d0
z7?B+>PF}?q^6@F6dX=2Dz%Zwy{c(9esj)G7mMe=)c%OaUI@e~7s_VAtmZj)goK>#0
zJ`0dVI&bf1OiQ<q*Uee&R3<$NGeOKFz?)sw3wPU0M-~qog)S~8Xe>2yacCnwI#Cfx
zi?%N_;@jAa@FAvn?HiBXV9^T+e=0gAz|U@C)m(CO$2aknp|td1&+D(EB~A*AMpd&f
zjG>OT33{G1FM;ofJ7}bcRc@r(;f)G}nH=;XjhONKKyLUml(O@ii8bOL?4(VtoI#~6
zY=<35`aASR@4&;>wyaD=i92i2V|a0{!A41G$V_Vc?WOiA%)yUHDd5447JoXeYdUcK
zavK_p0MYeN9f{-RY$Sy+x@PWA*xu_S{oD84dz;<sD28GvuREdbptuOM{+YfT9CNZ{
zEUtT6;hUBHtEu{TWMR+cyoTGon4K}@E(CA*Hd85883@H0!Zdl*m;!<iA^g(_xBUFf
z(2xXCsK?C*7Jg6A`&FvTOxSI{ACB#MCoJ!s8wm%)f;A*2d7ieA-5NgxSX%wU$B@sK
zbOXX>2?j^)Pd%B<=}Me6p^^g(53Zh`<P@4`H)-ZYd@QbLhamE%*`e1AjlKEpWZxhn
z#K}>tG;k~)>==)9kY+H5d+8+6nLA#Jh_t6}m#P**qu32HY1V7@?UyrB{LDzSvq3wj
z)QDeS2;FQTao%DP{NKFUknQ-``*lS~&@Mk9?(38gdfV&gaX4ODJZ+#lF3e(t{I>_?
zZ5ID`Dg*7tPO8JG4F^0*)8nfH)V!>(v#p0f$w78rUdVN20SqwrYjS7cFEkZ<-V|bs
zGa{q?*-r57IPtK@&tuAy_6A*>woJXjrv>aU@d>~oHFJ0pqL3``P9-rZ=fUW~?Cf|7
z^%|Vuh{p>uSJx3uh5=k!{7G^Yhm5SuPQBPw#;nWVtl18Mrvz;<M~KC0WY}Vgdv#Mi
z$XbGVE-Py?{mi(g?zmuEM;3$hA490zz@I^w>QzWT&~!9t%&Hva_@+@38xh}?Qq?tA
z+Fm@YZZfd1rGDg%A`!)lI!8C6tbFmwc9WgsT_bz%GT{l3Or%%ZL;<m6in3s6c8`BD
zn+Ym<{J;>tZTf8Z=qDC_xm>neu7Bm*9$>n#(%PU@fiCe2wsUU4@_x}-UU`vdINn@7
zPiAShnf3#=BSf$Wm0>Qx_f@Fj<0lvD^H*sDn^mvyk@7+ty95f#$T#sX7Tb;Q*Sbf9
zHteTgsKt2;JV<>{doJ%`5KQqNGQ{2ij;DO~VNCe}EV>WB+Xk^rxEy79fs1Iu#>r}3
z)w6v@sJ4VhTp^Hp!EQp%!}On*0R4A}IlDJ8Y}`)ZN&1w-0O+~@)#y;b0*GvI!`0x_
z@Se8+Z%2_B%rGo;bv{MQrA^6tg7_G`T&QKdErvTr{!03s)Mil19oc##?0hXPu+xTl
z3vE?_grm{TFw1gSsBV9R^x0}k1D@W1TtV_65)<_6zw=FX#Pi^6)owJRN9cgmNn_;)
zVjI%L&s#$2nzj&L#BB{T^HZboC8IsEC!KiT)5yoWwgsaNOksjeAZ)nS?JPWASreCV
zFC<`p(SmF!oAs7*6vc_IT^|HEMG;>gFC!X5B2d5*<-)e22{7!lUd3M{cx;yXTb4!0
zls4R(uCaf9bGSOE7ax5ubR0s4_s9q{9WCD9XAdLI)P1u+ahW~-WXwOHUsT)kTj_5_
za=%zNwj7BwyNS;1-28BU-3A10H3ogC=kbg#yvL>=z;_Si3#WhgyWraFk%O|#y!lem
zSOBL|O)#l_l+amcW?<hy_$~#0_sv3#EZfc1YcWp|Woc6paV#>_E6<v{=f>F59al+j
z9q@>nU~VeI=L&9kJhtymu$K1&0^S^U-zL~1GP=)cJxwh!dtJ8oMFG^>N@8B<N?T2&
zW5oF52&s)V%_E#;xU0IkCH&0Cs^O{yAFiI`X`20fVy^(liGmO1_LuDH-QO0`Gk9R}
z4#%H~XlJT4R@etj626214U1%JkCo^N^6<+sACSQ}woo06OLI0Pz1Wn`MREF}@pHZC
zNJsdGtm5?x`zilT4D5h*L1<#gAY}h+)XVT?1d*mojLKcTixc!>bUX;F@0O<XJ|sLM
zxz&c<^MXU@*Nsw>h!QnEP(Y4oeY_YWyK+^wnkm~-I(yECg{aj|3K<!&0xGC+#1PaA
z&E5$@l#F)7(}_R@tGSP8TMW1uTnQJySRT>VU}sN-t)iw*CPjpCyCbaKSe&9_(GK?4
zmg&uJ&XGb602e8w!p}$v#lXZSY-wOK08eZhA?79=b#{HxZtY?+1ujmf3K%51(%@8k
zoEkJu?lExm5JIr}l|lQ_BrUeT|6T68t^ZBR?xpAhqNOQ-W*NLjeAQpX@HF<(=vXrm
z@ES$56BS!HAbwIonni|+A3;bw>X`*E3+c`3Lz@da(7Wmbz0K_Q2SLlAHmylCbraAn
z=hzKNWKL*<(l<lMl9eiRIKgk>=O~r%O=}92fmOc7wVV0eYwojMMr%v^XtdIv{z0ma
zr-pM~T{rf2Edm86Y%ZHAN~TQpx<aY*1B5DATJQ(N{~#%a3VMW&fYGJN_VA%lDzTbx
zQa+DO<_6l&7B;BkT?uw;f24NRSQ;hz3zpdwZjcjf?f?C8JXv833$^ss48P@i!xHn5
z%r{ehDk-pLNhtXFJqSaYygsn3x#3odvd;=si7E-Xj6_$7Lai}L93S1;_MR9Cld9iV
z#=~Nf6MLDCLc_}zReukU>(LvoUARV5v#k-?rCym`wvz+A%@6K3_)U1@Yb{&k!?r$z
z7j9VQ@&VWKZosN|^GgqdCRi!#ofZIFfp>2H)AG6?G7(<PJou;tl5$(lp^?W266>#C
z2SqVmgU<c?iC;4HyKwX0<30KlL|?T%pOim{^>3^DP(*r|$kgEX^S}H^0Dj+W2U>ML
z*)1lk&%1U6ZE3e&^de~0XPZFKnV<Xx>@RTVNwh54_Vd#0tCMRnmQ<nj<^@=T0LsNC
z!J&WTFtW~&iG+q(#OAHsrPnEHT#NT}ei~2VDC|cIDEp7b<oqWB3~_=<yFY7873Fzn
z>2~kk+7sYC9F=JX(&K5)!tJSl07WR-xI+z3K6G^tN%E7ZU=d2^Z&1LZj<zU!br+nr
zM;D><%MTLold49h-gv}Aj>rkZNIo87xfqlQt)*x{*cdrq$3<BlDjkh)_rSS2h?0ZR
z<7DPZQDc5)s8A{zNq<i6Y*cYnKN1|taN_#*)4q$qxC~uHz`2O&hf??1*j23%DK`Mq
z;(P;+s2Oo*BmyeS>01DsS~KzvaLx%tgz9hb0eWX!@jBsMar~IyrPCILQS;OFec(Mh
zz6@Rmpk%eqKqnK2=;hI7iomtVnjvCB$f11cFkwe!REhmuqX0Y1<?epU)=k`dn@|w4
z?X!FdWcwI)Fr}7DaDrb-QZy9N-ezr!4%SVf=m<X#lp5*0KwDXuw;OLy<-ZyNFD>In
zpZl44T6RMQKkU3Cf#oPuVN?Sw$&Q4(za)L9jz5?9=C9_Z@+C2~?JC-jG4h)}@G_)|
zh(?aSDCw;$&G|pK2^6p@Bpwgi3o-)fTVffN2zN{=ygj7KSQ4#%k|Lm2D*b>#9D9yQ
zv~7i@)+2?6I#QfGGKdj_TJq|0(oM){FPF>c^5Ey!h%>)CjuoG6ky_Kp>z8jcAA}9=
z=ifaq+-5>jTJ5-oWL<DNs_k3H22)XtP=l!=OIyf=$O)QU9P^%g1DugaNlE#_&#;#7
zh&`$jM^suGjZzXo90z*=YJx0YiI})?GFUHN!JligY(bl#CqVw2XJistk9Ozhd{;)|
z%<S;4$3H}ujciI6r#!%g2y=5oekx2-ViG251^ySos?|o3E0=n2*f$*+{*9Le5JLU)
zA_$E~HXB88(zL+swm+10wv*Et3VM(&jEDoplq)%{WoeduWgXR`-e4J%O`2Q_l|MjI
z9U&3QF*w-&&@LvRI+D6bld1GmmFHB}jj0^g#yFQ?e*LEyUq}@=#WtR^;*7o{&$RS!
z|AUW2`eD;MD}&&Ns3J6A&PUN4oy0u5(Y%FOJ1oF<j&gLpwhXKYF~3G8`Zo<B=_J5_
zc_BW&GE5r96QAF(`-;b$>JFU`X-LH73rFn5HvD{Xarj&R^PhjUd%3>vZuH0t{SeeB
zzS_Z`jsa^^-sPsJ(eKX8$dCgZnFQ0<0Mv_wIOYDKvs5R=&~RsN%M7l+06oH~r5yH6
z+f076P-ktg;+G^9B4!?$Ys&NEDN>n4^a=@O87&kcsFGa08abr}EWZV{VRN*G?KZy$
zvcl`p!G>F&J|qv3pUV!ie@6Z_0ug}t{`{Ak>%*}i#(34{G3cm-h!NTyv3&m7bRA|i
zwZK9_*a@#CmjYza3lIQY20a(-dd+m<F40&ulA1I(v*%;r0Z0kC0Ah<Zpcf&bHCm}e
zY9W5nyg#ZTE!sMH3?&ge^!-HB=V3GF`EU|U-zY;I_N~+|IC8fjaB)Jb#ZqZR0&6u~
zqEWv&sfcEi#%KOCnE%-6UV#(w5KXY_AF+-3jqDZw-`tN7PtMIvq<H8y4#)X;Ez%GE
z%_089*_V}7;89}@lWsV-P%BpSkM!L45#*R$=+z3Cjv!xYNU%C5E`n=Di=CpwLmM>h
zG(XNmtn$EM7g;!+`(?OIft$cxt)2-sS@r$BFNJ%Ef`9=mC)Z|ZojuJ(V><qXQXu+l
zr2kq!;VlX3X$3KUP9xBs-G1<;mv#SlBvJQRMf}0oK2^$AsYZb2eT7Q$M!-x@gZ-(7
z<>Z?84=7XTH8>hJqqjKB&Z21O4{}8DMkZPSN$@-PSvn39ZNrEeAHYLx>Wj2Lq6^oZ
z(z2nc+2^(yk(?D|hl5tS9QUYTTg5sL1m7(Ja7Axl10W9beOPU`{S{J&hgpxg1L!P<
zkfB})#!%ECrpy7Riwa}t-{ovE60fo=78MhnU8{Lk)?qDb43NRB)nE(z^UyYfSpXl%
z5Cz6Xl5Sgl+C9w|`5>YUw8{aL<uGt6>z>&yy9QQ%`wolO%aii~8{aj@2<cPlf`oyD
z#_->EyGF1bJkE7Q$B>YUbg!#B<Ellq)MxCV)35b(1O()2>qhay;Ic_I!%Ft2lH8#v
zStrW{ohLwo2TfY+Dg@3N=42ZJ?Z^-LF1Tj}x#91FCJi*rwRIXfj?JsRn_wm>inN+i
zbN<w>dX{horfe+4t~j*FM-itfYvNauphjtQeB{0BMtPS$z4^sP>WlPr<SwrCCX4q%
zP#nytU&007b{uj|jeo_{j(AgWa5CtXrL7;?;Dgh1XI3rs@5Z@~AukmTDIr0~#l7F0
zD5cniAUDb&S93$ErJB%=Jev=J?*UZ+^riQ*&|gL6_b-03p}4Yb6v5*^?$C)BJzrH{
zrpgn^IrxEz9$_wF2vSyACxhKN9BJ@Fb&YS(k_syAcp|A=IXw2PnH^1N(GvT}#?6R{
zL-<7*QpP%89Pi4~A9?=+r~pr3I`RfAbPo5B=D4Y49=_NbZ=?}R?2ZC1p<=ActcWm(
z|0eOHlaQVXc@+Pe!2CT*N%^m&-Rb@|Er*tE;5m5=A0bneK4l{pdZ(s2RHKJrpPre3
zQuNIC%UYwIcuGr;suVSG93t)*-{2tsovNXu9vQAv$f(8WX%_tsE&nLskrPj=y$T8y
z<kcT2p5S{Z<aqIX2rSDx1YUHJ#ozFoO?bE8Ps11a%x53*Qxmz@=^$@!2Q<{;lU0mM
z;A#6UGTv!2u|9dxWBujG!{Dx<28zA)7>%H{KTa5g2fVihgjnc#(J;g0&SE0O^N=In
zjC1+yM8MnpRc;XX6!EJ<9SiXK5g40YDSoy){hpTQ|5PBnQ!KXB@r%=oTq3!L+8al{
z71hrn8&85l{6DJ}Fx5CiUJXyA=3JFrxz>ZMXI9_MA_GWiA*0lVGvt0H*>TvnC@^v!
zRUUm-iF=wVLBD3i@B%OJz?=h>jA%}W>-*oa)|h7qbS=(OEU~uuMA1%t1U2vXo_-lp
zC}2wX@Sh-{LlMqLLHhdoVv-VM1u7C?G;MIwyM7Hji5dI82}55{sRK=*pIxz4A$Sjm
zwkUMj0Z<aLD;L8Zi^-;<Re}6Ab&}XwPPw<Y#pZ{&_4L|@y!|16_Hy#0xh+eJyi=&R
z-3e3t&qx9q+SF%%+ex_uyZ4@1byl;X;aCbjQsUY_q<pihkf%+3<+f`O3Cdr9Ayg)g
z9}@;>1ur}BxL*RnQjmhJk7-le$jZl1zyTnbw!`+VvmX|xR<QV8k&@-7{a8ltt;taW
z*}Cg3r&!&pZW!d!f1e)I?I__AhRyAl(+!O@Vxhg?E2U!BTy5$BT0+qQ8Zyu&Q8Z8z
zQ^5S9a|?a#Ov=z-f54RIVC?ZJfRtwi>`=Ej(b1UAOOqHouaPcs9|hGX-iNvxmNIR_
z2rYWFLoEr>`0r4m(DLYNxNoMG*qdqtQ8wO2m4PrLjxv~rxkxa{xbGw+GCYkfZ6iZ0
z3<JQChyD~eK1n<4r9?6;<`4Lye69+zo>zPR-OyV0HRe|n^!2tHJ^)<;F@8{xDzD5)
zZf6-8DM1dq6JK;7QWBRUF)peYn6K%sYidOJ=0lyMqBKRD5yR&YdT9~2p(_O8vE_xA
z>vN&>ZzZo3f{y0Ke+K?b1gAD7=QqxfSE>92m0hW5Vc-9--Vij{a&HK7yR_7!)yReO
z5<rl?K$S#A*#lU9fYw)XG3T~YDorhntRJ^jZ(uXC#hB;Oh+n-}<<HJ;BcBiwI{NWO
zs4$w`6lbCtKBX&kP(US?j&Mi>k|(~e3$#xUApjx!{QS0mERf5|#hR52TFOux23~xe
z{aBryhh69TZ9?J1C?hK?;o&ARSjp(k2^9)em{F}k^E)lAKA)?~;r%cmh$$Z=>}h#f
zWGRG6?jiaUk1^`S#KwWoRa4<=UlJ?qk3ePLa)s!HV0-%td4*bsgXcmb`JtUIyt1wf
zs_#uofi)8@xGqHh3BB1=#f(nzQ%o@@7>m@(ALgTf(URLYQSQx#lTYi@|DH%Z9DYVE
zm|XN^>HTCIGt)sEc5`8TUfke*Eq=!9SXXzof+@n3QG;CFeP~ZwFmppENGU;&3dm#y
z3&jdw39<>TTW-DHev*&u_Bi<A;o=rr@23<h%*~yTK~c@8_0o;5I+R=tGlH*z*km&S
z$Is0H?IT0CCI}~=0G%@L2m*dx;o~(kcFFDWC&}&eg3je_7(VEjCErXCzM;1jem1pS
zVg`pCLbj7^V8u7f2k&^DwAYW@SI4#I!@-YTr#@8Z3aY5!b-~yDo$HE^_S0DeY{<ug
z#3btNZI7!4=wdN2nZSfVz;!naufGR8Y@nrGw=n_d=u7}3V#R1*Icp=o#6T3Ll6?sh
z+K1urB84ysNxAbI9rAxesv6K}J-9~XNi2l3p&isx?UkVAYN;BLyTTiQBBDC)!ZY(Z
zg1c54>qe4XOMa(|ndRa0wi}+L%E6yTH7_=tL>K{+_wV?5bwK6tVZ$<xfY^gl@v0B4
z8azAdq8#G@EoWjbBy=>CzkYwiAqQVXggMc2UT?Jf=CTOELQcW?*08*0Fu<|*cVt?@
z=zq><Bs~;z0+{&vkiU&`^5BW-h`T}l{O=nsR5#F#`y~=suh5!CYF$Ea?rH%jQ<K=k
z@BQyO%`TvkE$9wYWcXI1;n#|WC~L+X`eB><BQ0tP*0m-KrJfzAeYn%T7}kHS2){1&
zF9-^BD_~SKw_Y~9X2L<`XSsVIBF381N#YM2mjAUY)`5N+ZZkF1Q?nP<&Q1~vLG&C!
zvpK0-m9j@29hJq>IjMafPCO&ewL60%HWRna;39#du;+duh-X;i<!UtZYa5GMd#G?p
zNmwF&HS!2G<folRi87*l%Wc~Sh*?`p&zmyT&obVQ8=!vZ*%tF!P#jX?Zmg|@3QD5z
zr@bA&N1%Z68ln%{P;|T^v|l&`aOap9KLTdo>j09?)739*JfUM0Aen3^oZ`$trD`6h
z!>Z8NSdRQ6RK=c}#0Q9v&l-b%Jf9jZ&9f+AfB}b%7AN+v4LKY_Y1S%F!nzB&O)H)a
zBy^>Ut6Oq@g5cy`?;f=O9lk1*vnVu=u-K}X%8|xN>U%rHVLHB1Oo;d^#NWSwvu3xH
zU&v0nQ8VyJ3+wu1dwbDx#9%xQETqy!&ziU`CeX5XEx~VnZ*ES<>OQW9{TZe$LxHoL
z6>fwZOtxGhXXtD`r>j2?`7<zi_eI7PrgXTo*WPn7iSQ3226-*Cx9JQi|8;UXFogN(
z*-*y6@Rb=Qa;t}xJzb0Mjmg<YI%qCtfx`35i)aa`Rm<z3a>qg-f0G)^Jn%MYAQNc2
z-GSBXHj?+RC;A-J0hQu%P$`69&ZCpV#L~{4kwQKd$}Te?g-!mS;|8lE6ZsLxb}^L(
zLk)@Gt{)zrX?N&0S);2P&&)q*!#T&7QdG#(|A<hQJ-n?mCSZVKUdrch0L#NwBZP=-
z{=Ee5etjA{;Lgp&p!iHeR-%`oY3X1&DH%w9Bm8xtd0$X4{&zbqQ>+OqoE!!i8peCi
z&&-_sNN4l^)%*ThWOFY5(=PcJ#F$G!Sf-#S`jP|ToizpwCb?98>Wb4*9a2c|A>^&W
z@*<=UU77Raqnp|;LkQ8%*4ZBDx+uxZB*aj(f?A-XZ#j{o0?O*{aZnN<@-My{bmbhL
zysYDXtWZ=sQ%`Y;h`J^Hde2Zm`G=hTD~W;DFqJ&?brEoe(Z^+f7(I0XDE_1(>x?PW
z{^73ZXfDs!htA_<-_@vYHkiTu0;XA(rL0r<og&G7M?+)6bnHsxnol^gGN#<ohw_|y
z2c?$Wrv7@&@dB_2m?R#XZg|2^JN7FDN$8e^vOkK;yWrjPUCQL=*XN;6n<PMGe7&#_
zWc(22`JE)*O?LmFM5WDM5_j{0o}P$9qKoU1$4{U!i<j*lFr#=EA@SSdjgs4@0${1E
ztZ-qT%ue!A6MTa#`_kPb7@K(T33KwId5PbT=+-q(Yxm*$yE-BaTiDF9s>laZkHY5g
z;t!aX>2gRVgHO&(6TP8}gMlG^{pn`U_n;`NS&fQ~z4Jc<Bd}_+_(e^(4-?iUbVxqa
zW$?HtE|-S}%^&wH2r!l6o!1w!vMOrDQlL6}-j4+V@t=nR!z}H~0v22?p{XTGs~PX|
zIA-_dp`wo$V?3p?Y2zXK&j^!Xh>qK7p<S_$eV?n%OMg6T9@HG(0tg#;-hna}p&hVt
z0J6m;zkou(cx%dTSzFI4C_gthG=kJ0#{Cj}z5OxxfE9g9>I+iL;RS}_8Nev_9Z}+M
za3df~Ysz@Ka>2@_G4Ls{7HaA1#*cyR!g-yv!yp&t3y&f{tbf7KD+d85;k$%(M<T*0
z079HM@S9pJp>O2mh`}Qlllb#pO>aUz8GMn6;Plv=$SCxLte&4t6^EScL2UQgB&6g}
z{+7|Z^8ZAq{yilPz)w1!AJSsOVe0c(#5<dMX`cdJA9X_Pz49Ll8WXC~*QpLMvI=s>
z|9Li6V_;LiPy0m}zP|Jhx<{qS+Lo*d<e;rJfrX36{%9D(g;Zyl2K^0oTEHZ)I05rc
zdMzUp#wrPOJ@+adSGnp#tXt;KE{`t)Cs;-2eW&5o0?veAnQtFAs_Qw|-7P{#mmPXg
zw?5+8@Hr30Ekv;L-TtJ_vXc7PvZ1s$fd#cnWGXp9usmaX0p!md9GfTkNb+cEi3dsa
zV2}o+)|-k9ov+ypUrf2I71<lBbzHwzD6Se8PNDteMLLC$2rh5KDQeqJ50t>?UW1^c
z_=^;tPnz;EjhvaEVc-%kfHI%rE%kp~g#Q;&u%gR9Bv4RIkigCZ%utLSm$apB9%jE&
zWL;%^XK~9Z=cMv8<FW~E)v)FA3OApret=aIz#otts`EB*H<oqDaWDH9+s(9kAUQ*F
zBEF(YPT+G;S@clo26orb52pnTaw*@pTQLxFuH$b4$0Y&0!T!#;uh}g&ox4_exm&o;
zUt!dux^Mo7S$te{zLH9Y`<|o}gr7QiTIooQg4L{d<<)&Y;?II9F^kVO4BT4Am?^zD
zv%r~3o<kjd!xzFN1bgUiWo=#ch!8nJ$YqmI(mHnP`)?By<%}$Jv@cWrA!qF)BXmaW
z>vaEjr7%vGx67pwNEdi<szPB9{uE@r)Y8xIzWm=sauVbhZ+C(YfccR&swnB6Nq$6=
zqhE=RmOkL)_<QJJSJx1hQ?liXpyQ(6x9mapU)ox0G#LzRbP*NggbeZ1`;1GjcbJHO
zi@2{qv#7)ggmO~DATM}3C>OrIuBp~PTO=ix^Dn$9{;r)3j3#$O7)E}+6Z7q5p){Qu
zR{Zc$)+9Gpvodlz<ZvII^{oD0EYyWxj*O7_5zi=`kCg)*h4MCm>?yjk2@4L3{kquu
zFOT~iN4%#CE${g-U`P?4b*mc#oJ|cY6A!1W=t)2a>$jtTZ_b%`k~01!)r;u42oz1!
zm;e58@QVcJ)T$uBqeNZxlgFQZFYsxn)p140m~h^-z1E;iBHQ<$o7)1$r=31e%vX)V
zri1Njf(-9XYzzQ3rzg5UKi3Gmh38Xk8tZBo>C_0TM;ZDP<G>&cKRxxsi^AwAuOP8`
zUw;M<8k*V9*LaXFymsgsblcyeCw9;Bgm(AIUUk~v;l)BVyWb9Vj6;QQMvG@x*YWJA
zaNs?H)Jt}D#BWN{Q_$q2D4|N&sKjrKLkewbijK23x|Q_iEueA_|3t0(`&z=VZZ*vj
zC%_;wie1%LJAVmH0uQpPVa{Ph*eKclPGrDKA4(zm9S+HzkbeIE@6bi0Ur>1|YtXv7
z=ot`uBid7=NLU0zC2Sn9@PKrsi@Jg5V59oHLyvzY7-8VU+-;j}V1(>&5h7Ou4VCno
z^w!4mMXNA2>}Rnx^OY=bEJ8t>smaz2xfA{A3xYqBqF`Dt&yh%FQ>=T2x<k*$sH`Xw
z=wtH|IH3>vo*9a^uW&L1W+*<qK1vPs(<lq#T#yn5Ny?k#_xM9xOe4a@TZg}=sIo`_
z)3@wzvxY~-Gt>`l@dH6?0SG5HOTfiGKPr?>C-^rY**gc=YiTBKfgI=T=d}3m!srm=
zz$f@b-mhjC&EF0>3I<ll=kLAkUwW-^9+X=!$;<1GBO*rVkPvYMm%%WJ48td+q{g*@
zkP2{-Ezu>XPT;k^zB-&n{8L0(`Zwz?_`djm#di&9s1{LpzvEdb1zT)2)A^p~>?g8U
zU)z1p_QfFqccfR8$?3g#9>@i7NHQn~FEjnpH3y4)gO|8}R_C|cqYCqbfe3K75s#c~
z!8wW=E1F<cG-|Ia6<LG3&>XEey=27rnq$XXxHL-($HSU?S*6kB&LSDGSBq#j)l#F6
z#pQ;dRRvTtpShsVC`{V4>}2=T#PP2BEU8!X9m*8c`+oHS@I@aF(b);;egy2~k3<-P
zuK0C3Y~VNCM?%<jM<9)20xlj{*nh9W?(1=U4dh@U?CD__Ns}bMyEi-d1ph^OSZX9l
z0q5W71;7K4TIVQv(pL|!)!`lVTa^wx3Rs)p4Yv?R{dmc{<o(mL8-6<VFhb_j{l~S1
zH@Gn2V%0>n3v5vq(rQ*08z=4|6F7TW7sWxp%&20&RG9l`HHRKNaSszLJ)IR=BRnjw
zAyUc83ffxDY^SfL{bF$-b18f+JUlXDs25N_<5MMyJmoz_?>a5=s0)4r!KI(_Q$;tG
zUa?aiQ=&tt+`Q6;Kg78S?c=Bas=Q3keEnYd`sqI*9ke4Cq^pyJG(`VtRz2F<bf(cv
z()G%0aOob&f8twbJNbj$)slc@R;t>{VMtiuHsJ1y-Ci_%Mr-@$e;0!z_CB~LFy9rf
zl7Rawzs@QE90LfKaYry!FG*)sCqPL2-rsrRjx}>Prv`V;P5ULW?1H)u68ANB!{%U*
zt1>uv+F^?QZ-sru#t2EjhAp(yU`GE{cmXeB+W-sEea!X~i@K2dZU4Tn62gZA%{yDN
zkAv(nQ9&os^Gc-L7dhVwzZ-!TTrUJv&Q-=ZEaNQl!bu_z<Oz}Y!2nac<%CQhAgd~(
zDI$t5;0pJttMAR=D&C_TdFy70PlD$3ZkosD-ANb@0rkS#`9cVc=Vd-!`#GLiSquWZ
z$O5PAUl$~?0vWC!m!_aqSS+ZeshE}{S=N_+LRq#6aia=Rzz;?giaER%g)~5~iDy5q
zFzddhg2a3rpvXtmH+>59%`aDZe#hF%Fa7mPLTQaM3sH>x6L!8!lhA-Kv>Ud#y&tyd
z3x|b?)td46MeF8Tln4RQz%)me6lMZ#XotnHKi#%lp^4Xq#A+$O)WZAu0;G|5vEJt3
z_BeSrc^5l9!|LX-SgX@!&!Xz~@tE5j^zjUOwfNpylOuXp1V|)D7;tUGO73b95t(c{
zrlhRXCd+8XD#+PB&m1|%glZ&52>$mo2`Jj=dm&S<KzQCF&-$`<3u82saCY0O$%}<_
zC@jR8rOS#DU`}gddOh0dbueK5=ZCpjlNm~ZZ89-=FgdeYCm~VlZclnE8UL4ijj9me
zjR$0%{|_ZW+P)W=Nn{DG%b8ex4uQ>lczlwMkB(DQO$~K5)zi9;R;nZjiG_SDm>8sF
z=p7lSk;zG&`?{^Mc1mJM)d?W*CitJ<`d@VAO*hk-=bVuhKj7s7;bVsqKupe5^Isku
zc7|^XN(K&4zCOSk<ERo%%ur7zJNk!cO>1*ja6vs!AM2;<|LkVE_xt}uAN%MhX!Dhu
z3)bT>R-6RgjB7S{-~b){?eFM~Z+@5lJsc+|fAFf4sj;D!s)_ZhSLx5sf8onYxY|pn
zoU)1pK@g^cD|zBnLQ>hDA3^0f2Z$?aI=;gL#9U?yBZ43Zf*=TjP<4dz6Y8?~kprSc
zn9`}VFM@b;^>Z->`ry-FFPpxcg%hvBoJWWCT%7efG4h8{-ggozKveos5atD)7i4)i
zja+jLJ->5jKw@+Ex`m!0Ml_3g7BZ#^gpVV`qdKR@%GMaIY>ClaVhSQ~UVvu~a*D)i
zqqIbcFr}!fm>v&3^b5M<t9Q~BfA;5j;s?AuR&{siydNf*-`&+(kgtP@)kK}izyS_i
zkN|@EmNdFMk42FlKUWAq#~&OWqqn}}?bLP2rF8dQ-=RotZv7f#J0XYHNpftAnwnau
z6qA#slcvuXOO|xf$jAr@f*{NkGeng=AJ}29?B$H@O~T7f4-m6XTl5g|Ll6W(5ClP3
z2<Sjn+2><_uuocN`0&G1aV`)d&j6S4y+b%;mAB005luXwOfL^(+m`2aCbyD^9~GiD
zj6}iGnSwB1)J4N|!Ri%s)>&sO8?VEcpiGlNIgzs1Y+Mk8VxG(ru%9Cr%D(<MEo*9|
z^Okkyd1lN9vDz9sv#XuXS=yn)ZS7TU+p7eTL@L;BUNs&dPdxD(`d|O>1G?hRKS*bv
zxh^YyfXg<lqi6RV&P#d@*!#l;!c@hJB<Y@1XHqmEraMAgAv?V*3>J8<Z-CD4>ZC)4
z@bb#=2sK0^wE3-XrkaKZdj7{hq2(Jd)S<AD$$r$|mvBvPoA4evzGDZy{L5bwuAk;u
z@jqyLUU{YJJV2PC;W%yCau0pzgCC%-rClTlf-qf5g}*Yt2hB6RJor0PN?ft)lO*VZ
zAP9mW2txH@g_+8x>R`DeqrErS!$UtGE8B&a{M^qU67oDi!hZe^4;EBPB{<JGL(7IF
z|3}4Wsg-<$f-v9ItNZ3fCwFUG^0WK)C>wQdz<p2-kaBW^q*R%51kU-$fqr;+j7BGu
z+T&xsMUNnQVvTx&js4~RA)3sj>7<s%g78>XA%Gy~$N&0=f1(TDaWkEN?rC}A$0^+%
zbaWt2dk**It;60Qj~_hhtP^Tb|M*1UHpi7JR8!;xI}{%c41<ME?N21M7l<i>AV<iB
z-Am}4*IufB|Ng#zpc_B)Sz6i_)9uAR)irybBM?gv)2uZyM(HERY5nQvs*9)i+1%OD
zMzuB7=^u5)A6`yB{^?fQy?2iYAc7#wDz+zxDOA9_!xlVT;zvZ?gE`cdEBA=$En<3#
z2y@RPk3L56cz$fiSS&`}-QBc)-P(fk_iuebFWb1`JX$OqK75#-+O}Qq6ZTE0e&+I+
zVLOKpAEB$Ryn=+;2lpg!=_Q*;s9v^h+eU}fb%EoAzZrtCxbbpz=)~u~*G2X_QO?6d
z=lbyG>t|+og{19pR$el7&IjVv&d<UbL;T2zE<DS8rp_-b%mjFUEN`mH^u59YAyb9P
zvll9`<G%W&rTRNW5T@98Ni#fQ-hBW5J2{b}NPX0~ULKA?pkN}IrlCZz1Hg1hslO4&
zM<?i%w(1o=Y!KxMULiq3$h_Z0dyn?gfB*V7>4Ufb-_+q7&aZw=VG3^uAue9OqKAsH
zy0y9J@>1)sXl@Ez*3;BTXDCs^=KQ6dbpCa3rLD;c`ti5ENgw+B?bNG8oY9F%YGMx%
zC5S{bVOnz5*%bfhd#Saxlg7uXC<hJ>DS_yeypUSeLP(uhhYug6)vHb+K@f!LVv7*v
zcwU(0SlDnSNe7vLhXxi;O!x&(5}?m7_uThGZQykQ!}8bu_A7Y?<~zRlWo>lcxZ$g`
zSit^czdrSekJHsxiU6_@n5$z3aqyOp{DuBLtiIoH-P=f*UB349Z)h{42q4wXPq#iu
z_doC;ZP~Cv1Q6kbAS*&x^SzuNIzX16CnRlz!J?c%k<~Op*&n$i>g47BAa_c04xN>2
zOGYAJRS1Y5r?=NqZA5xhm<e+J%oI~Zf(HnTAO|vIlnP~v3Lx6suE;f9uDKx_fzaBP
zch|1$F^+~KI=obL0fyeQg^-LoKFeYa^DBTLXT)c3{~WcP_Zk`x*Xl4=&#8$);`2r&
z6#V9eeFf`YqePNz{R7VA=itI+OLVBJpd29J;-01S_@SeL%OPZ-j-YK|IYMyRULxz;
zS}3U=ENVAhN)1PP>A`>cCu%zP4`^t7g4!E$U5<k?5DL?&Z@h*ceegkQZ|<PBwk5Q5
z*>Y-YUsABWLq`Ycp~s%5)7SOT%9A>2zS*;HKkePCrhWV9w@+@PKlzili}!~h2s5IT
z_~FX`VU}aD!uIUoWv)CR_BJK-RdsUfCq9<<8wO?=w{Cjx`{?d(e@i?ggcA}NcHs#H
z50KYhaxn=)wR6Yce903ge(;af)4h!58~iPSh<MYD@1~pI^KKG^g$SY}#cIM?FASY`
zl%Ijs6gET-Btj>{yEz*YONR#!WsQ8g9ASPW&+wOLWDB`NZ*je3gxwORMnv^lvpS|r
z>cf)zLzppg22~ywLBhSqX@59g)NT-z>^#qoVR(s5^^!*fq~)<j67n&HkUfJ#^DBUC
z*>W${tv;PDzxoQAPz^H04}^?@*T*lm?JQVt`I1%|OeF(_34k3fCVqfuq<9>~;fYD=
zs;{U0ad&cWh#zZOo9W4;$MfcMC@h4>I`yin=<%<8jh1H`Y1!FlIqO+*(M8m`emxBx
zIG}Ta^zMF|jz7GgnqzI$-rh;ePhLaqZJkt8TSuc~6ZGUWd+CLphiL7prPQ;mZBFun
zjE;_K!Q;2TdrAo&`>FTXaq8&kpmpok(W=#J=s*9-pHNd%6A6MKRDz(K9d?5BpiozM
zi8DPn%<{ItVS9PlLWmtwOPC+7x^i>D@Ac|$(4AlZ25q_bhjhz_K0tzSB68Qa|DFUv
z5QGz#?#3uB@l67Fj%APNXf)~!@mlQD4h@S>eikkkHn!NnArU|XL0F7H1Ua{B2_=tY
z=;h2H1qGoh$C8jvDgmU1@0C1gGk?u=T5J;20s6q{o$d1{fIRezU(nAUd7NJR{*TZq
zC3O7K5<0rtVmkN7h$D{&gpuB{L}1-ezltS5XOgMnen!1x<2nRZkN^VD4{Qr3ebO+V
z;rmPdLv&_G8$GE+nhXBy&*-uL@jt0`<qB$9?hfVEsKf+J-RGP`t6O4P+<9TgP8xdU
z6?*=eXK3iDM<^Dpr;|=vtvy7Dme4aVyrQR`rLA<%87nF-g!CRerUZ{|^xG$&qL+8?
zq1U|THMC;I3VPk;uUEpyS`q|7m<@u$R++zD0tpKl_WE|t5HqibDRQ_36W8{H>f!q9
z-bQzQ_j~lnV~>|5fb7`0i+1kZnH@D>%xeU(;}Jt1l*%dM<zP5mvR;HMLL15{TP~;*
z+s7y8MF|S`G8@~s>n+uWN>FZpPZ#VD@;sEAONP&ta@#YP{bimX*ar4zHqVc#oR8)@
z=<n%llh+019xpzBN|m>d({%F+P32xP7yUPt``}cswW-uy4D*@_%J(!I+YO>p_fGrx
zmO7`VT7ITX_j<y5v(fKD`MA8E&1YLvfM7Ah^Z1~Ga;3bj&25?#8@wb4g0NVDasB*d
zU6eVTp%+sFly=A+rf?AsxF?FWVfL990R(wJ{`bH9gwDS9owQ-yN!s(n7CI3A%H{om
z{1=_=F?#V}aOkS2I-w@ZRK{?!26>XegQUH#xTt_+={=1N1tQ5YC7!HQ;z=9USHi~H
z*I!OMw*DVldipJTd8CB*31~g(Bt5}H1noR&G*18a_^;_#PdrY^{y{qXoC~OH>2f+m
zUU)2o#=<lc;OX&8B}_r|2!$i6>Fw0o)=qDJ^Eq@>9k(Z+e3Bk`-~nBBWMou_F=Li4
z?b2Q#jg5`^^ORFo(dtu9(P6PpQJ;b!2<1>pY_MO(ioI~*J4V3S%UIOl$sE~c3MBkp
z@_;OCV6;L$20NDsl1ATr<Gb^WHbG@k=8n&QF3%7LgWIQWyIrqif-ouwr(*KRqmQe4
zzf_RW-Bq?+kRRo)?|d(>PPFrCwO@9fuCf4qaLWfjppAO)q(OdzpinRzD(0%qSJ17W
z{J5TnP&Rk|-8ZJZU-xf)Q1?gBws^U@E%YHge(e5s9mgBq{tlg|;hrCSzo2gP!`(_a
zyYp|qsttUo@A|jDQ?~`T7c6HUdFW>p1orvX+df-xu0WVuzt(NAbsY!vJ#u$&e{uUh
ztd5H-rw8}Vt)KX~cl^{bK^yG01|4(Pv6=31G(nqj4wX6|&5%QOe*^R%&dFk68|VX^
z6DHW+EgyV;UVaV^xrB4UzP4T0HE{I@mo1m6+)F^Y$IColo10?=>)8Fr=My}IaDChD
z;q%BO=-y`DFHAV+O|ff}+ri)(1-J%rEtcvtJKqzx^Ukk-Gp{^fPo>~~WY9KlpBbJj
z=(wPtv2Vo$D&EFbn>W+?^=qB?YuCAeGJHMR{eW%q@w$KO1G>Ll_X=DexL3IDvAhiD
z1aJFmzBi@4J%pb$g%I<4`tV0Snmy(cLaaKly)oE(gR!4?;VEK!bTGw)5Lc*KdtE^g
zgcAkWYhTsfMPmn&v?n=SusrCVXqp&;ygSVMY^FqgLUHCr0Qu)F_vp}9r=7Z5AHY3_
z`|_3}#MMB2%<26B&yfD{MA7=S2gpQe50LRxs_1ffazGp@CX&EQ1YxjTULt0QtTmTi
zMn|4`hW7vZ*ILl1DKZkmwLSb^wrUlvscq18jrR4?&u_n-PCDsiYVYWwQ%^frhs7El
zOVIh}oI+Ct!pHp&{7g?H>N|jlu}8JNYsCs$rXKDijjdF(d_A3}_UWq2FQA`4w}%?q
z8fk_4T@wz`?!mZj*AlgB^{Gkv?eCwb-#+nM9olQ`;6W{jTzKIHbk<pCR;?g{2f@i?
zk^~_LIY(v(+!66d-@7$(7RExnKla%yjRobrI=uNPs>_G`#AC!SZGI9nKQ1x(B1tZP
zi2gU*p0u&9P+h=)14Gfq^MXgI!Z^c58W?DJL^TXYSpTVQPwN~aY{Y^=8zX&Tc!v=c
z^D!b8Mlcv{Io}BCgMn~FZ6Ecrfk+z~m5~eQ5gUVGq`mdF&nSbMXS{+JB^$U<7Rjqi
z8GLPc-5%fI>$T}fc7CiWrVVre#z7c!&Fus16Z!z_!2k(EHP**`rzqhMfVlp;YqR|i
zLz=x`UsDE2HfjeM&tbrWn1OA<aAzA4d0X5Ll*2wWt8(1mJX+ax9H#?}dN{5)_I!+s
zf&4QlgSK3M?b~waiZUX)Mnac+%+Md0_vmAfxdjlvZ#Hf?H?VEyw)ohX+tTg#k4>rL
zSkC#$##8h~uK(QI%k9U5`uaiLX8X{8>({O;Fv^?2=!@&>(oGlZaCqo@ULV&mi(4kR
z55TAmgLC#CpxS`z8pd2ccep?7a}E80vgMp(=6%O(qj@hu8*Sq=!unl*?SCrhzeB1X
z2o<jW!@1`PdAa_>xny6%=ojo0@BcP+Uw{W4_7&$6pR?Tdkblg$ANiii_X~#aZ$a1Q
zPIW(pq1~(J-TJ)7J(jPT9)G)7hx?58$vjS2W?tib59Vu@@7E}gJ}c#o5cAu6_{d@1
zPHb<3|F@($=7sfjT}OQHMnCI5EF%QnQ`@)e>()FM%=6DY7XbDZ;*RTjVj&&(3cb(j
zymZ|wSRBMQ>~jJ4%O1nC#=L&{xZt>%=c?;^;&TM_i1)|5;tlvo8=f3t{j3|-A_asG
zGv@~jB5Iv<+Q<!nGAX}Yi2M{DnsAsCqkHR_%ZoX9WS5H<NX21esl1m8L8K&H(wqW2
z?rVCM(TEa3dedWh%Yw#Iri(<q$j&Dthl?E288PPq$P-WehW_Kp?ewafJ{aibfe=@_
zEm4FyNr@xH!e4=gNQC+m6I2e-5`T<`Cnu@Bww4Yh$DGT9!eH?-051@HKkpsypvUjL
zlX}ioFRU#y3w3~SSv3s}^nZW)ll0Ipeo6oOuUqKyKYR=AJD`>|)J@3~1fi}zf5%t!
z=eo1cqLrteMwzyyG*Y8pN|trfg{QBir*<k4<Jce}t<I$z*3s_a5!D87A0Rd%R2a7l
z^2ypI?bNh-4ecNHgdyAv8V?_&-u<u8SN@;>m(m0Mbmp07(jVV&eN`n+PpIRxXYT<L
zgdlp4_v=ZRU0jLC%SlR}@5Q0lQuET;7dSIS7K<A};jS|2v@yyeO`V;cB+MW7h~RC?
zpv0q9Z~4&s1J{FrPaE{C5wdJtgMkP2uz?81!6%h*=xW3Gin1^?!4SmxMi8QfMHSPy
zw0_;^bQyD7F!aMXbf-0fnd^ih?b1z~$_{UW?Xpp>u+EF=W@VVie#3ywVUJ)uHI1CS
zU+g`A{ef{9#xEGzFwblc3~n$I!a%#;Hv(cCLHl*{d;eUwk&S6Ccw0YJ^_u;K{loUr
zCoDt+@2^*eM@!FS1hVTq3Bof3dxlyw{F-^L*ma|QQ#oen0~m@;!zlL+8%2ZmgZt|)
zOBCX5p^lqw^yU>ij(mRJp!PFpd+3WT`W(KP?)a;}%v*--p$@bM#%1%ILOUTmnDwq-
zw?+#~FcudRK(v>KIzQ|(-Rd0XHrv+|&TrFjpEc|&1M$PkSj^Wv`UA%NyL_=Tw=bKt
zh``~|ioy3C`~F~_A25KgSLY7*AC|E=!LWx9%D{`j?mycwjcXhp2QH&G{v_fUbNyHk
zf8%iNVE_5N$3AK!zuJG~`ZL?k_e}Htfcslef1&(V)fSw`D9;{OS^!Z(s+k1+?jn6=
z=6m90#qRBVPbdc3hPtpX=wF<l=5|ZncOb~JcSx!GPSAeoW3I$J2oQX3dZN)zr$+^j
z?=4DrKwse6;_zT*m^;9~UH1{x&7u)+5B+L-+j09gs0sIS^yS74U(IU^&ZoO(C^`$3
zqxV=p_4W5>#R~v$kL-{kBk6hAPms>fxDj}T_}_y<VA<pbEV-5idxi*=M{E~D5aDoy
zYHRCAm^)w_zNl*%{m0S6bUZVjou4jg!$27lW|=t`K)&;x@6s7>yiSW8t{fjoe%=;q
zpo7ZT?qX?MjP{i<KGsL0lpGtUQXouLG+ZJP`eag{#56h<SSBb87BIa)AP%g&=px$n
zi(k<CKfa!33Iq^{2RGbs9bItYtLd-*>Tl?xKlmehL1{`$lsK`Zqq$@q5Iw$f=Qrs5
zKfIhSeEnrK9<HM&Uf4&I$rP<q$LLI7q{49ug+p}miY~R?8ajM5=hlT#Va+u)dG$Wu
zH>eZABauABA9%2gFIh%w)~uyXS6@YszOaK1yzl~j@{YfulUrNpvddpbmtS@n%{O&Q
ztXjIHjRe8PD+iBIo4TH3O^qbX4w?LaawEnH9vVXM(ZKjKf3Y{jOuuju<;5~idoCZk
zJl10ogxC`V|3U~cyhhAK=vqLLCz5%`HYfua-9DuZ`^9o@u+iRS)P`{h1}umvj2E(}
zTdxaIfMc7pu@9qgy={BKKStidaLR39qZ-38^n(o6Fre%3MarmJt^k73yWl1(>=SSQ
zI#nkOYNk<_4aF?na2$KI3){zNUl=1_tBh(K3dS^e@n~YS*W51{AA|M_hCN%{Fu{EE
zzdd^SF5hsO^I&;eABS54w#COW$aAG!g3c2c_uO}1V5l7)wGAUQQ*0m1W5)f3WBb&$
zztHD}DS&X_U=(=}T;@}s_*j8)GUgkqc|Phdb{zTqFb(83?2+Qi!-MUhZZ_hZ=Qs;o
zCNQ|;JUrxIXF*`StNiP9SUrDZANV@O`a5>*Dp<$mjfC>-`2)B=g05ExFPtNx7`R@v
z*T8!Mw)x{9<&ME)UVXPZju+2|s9|4|Y(O_bo4x)k^j^BoAx5&-7p{K*<2ZZ3nc@e-
z*DN1P?yu_u1Tvfx<>Y4q4;Se(&iBOEIN#gRhGO@2J8acdV1XUiQP6z{=Z;HkvI*KR
zT*p}76rov=bd^Ut&>mBaH?L8?-{YF>@xxc)+%fMXPx^m9_#VRNpKE)3O_}XuZYmM}
zOPE_)Tbigr*-=>R0A}c`>^yuz4AIZg$`%rd=;!1RSz-r@k>^Dc^1VF@1r5V@B>T8t
z=pB+bdReF#L&I^3kBrgs?&=v#DpVJflPMY;9wlLJ=~nja^OIflc;8_f$#{{8c+jO6
zmN0imWKS+_hY0c#QDwprwt0{+1Ljl!LE>{-(nF0(5exGEK!~f}0r$fygpr9*rohv}
zrXdn88Quyc)1}M6c;8;aTLWRRdYT#n*9YtcvRWDWfBD5PQsixKr3Ph0g>X{PekI^g
zeeR+d8ylr@H6;^cdF4&<2Dvsq{NWGKfB)}y(&npfpeLW%OIN(^Y$^uAUcvL@oHxFe
zUc32ndUnrY+H?4zUWPDa5I=tDiyzUtC^dJt(c11#+GpKF`FNOKF!+4#_<&9X|M;O?
zzLwoX-m$&p^!4;)XNL|4me{+89{=rc>7Fh3()CKrnNJ}E4~h*9^&|*E)YaC?IWkL>
z>*<jf2h&RU=&B3zUFA$~5&mr_Ja^3#<_Ft&2}2BzFb-meZ`6Y^kmJo4D+hvN(6ga2
zKH~iygK-dTg7FXrCJvus8zs3OBx*0#hPY!8MG#N<36(Jl`0nq1w_y3OUzZue2?kk|
zHTRVh414S3_KOW(=7?e#{Cl*~`HH;#!v5c@mIbkM=dQqIs2j#Rdqg>hXUYBE=C>_4
z5i-0FU`Vu$bW>s7+O=hu<q_>c;u{;*nNr7$;bUfww$B&T^83bJ$B}FuF3f9&&xe^D
z$8!1t+k9$!{x!93UHScO!(oVi>W9H&V6esc@47Fz+Go$>{s<D7SYRmj7XczdsnC38
z`%oVB2K66rbBA>dx|ao)cL_-A%jj=juhji&r!O#Zo6MXm(*ga(=YH|~WIUUY9Be4k
z$9!*@F1(M$t|JzK%zLGaV)vFyln{vfAEss{Kzm`+g8P$?BVXsb@73R|M<0DGD}dlW
zvGKffvx&@2kspGyc@M$)2V8>;fcf{tyti(c<%I0Q)TmYOC&=dkIJccCgxDU{rbh^4
z&o`f)Sxj-|3o+{{_6#o`A(drR*`Oj~yAX;H4l7&aFbVU(DrML18*iiSBgZL8zO8}W
zVlYH#EpmiQ-y<^;18YXisQ>~4_lj%&IMDk8U>OYYF1-97r9)fQ*F*zzcG#5i06{&r
zcY_T)AiC5ap6AK!wPJdKz-t3uAkY2$XLQNi{u8y;7baOpxF`q+b%_!B`F-D|J$qhK
z>qY5b$C7l)DW}r8uiiu}&%K~vz4O$A?lsqJrstl2n$9}s0@`=rIITP>IAja*eVnEq
znqRNP5BBl^@WMIE5I^dg>#1o;Gd0xKP;+gRo;g<NT?0><dL=x?4Fe<upZ-LGR=37<
zeh>yC$e0qS&hP4^CypFbcZXB-i@_Vzjo}yf+*cJsh#&~_hyCIdl$g=}?s{S4`KCvQ
zU5}mQ+$_uA!zKP!2(!;jM)t$l6J%`NV0<^@_M0*2Ii9_%O)y5m&<z9e-P_<f;fV-e
z`26h!;iiHNWN5=wjPK>t3D)}~xXm07oNobejCULMO5t!b=BRLnjn1X^tC$fOz+lJT
z8(K8*Lra<Y4&o!80j`*^Vde#xt^iUlY^V(~K<i~C!~hq%zc%E~NIM*vt8aqZS1Lpk
zQ;FkP&M13$OjYugjdLWJxgYpC#ko40Bh!NfhQe}{I}i0XEm3wh;A4q<M^O85K6Ecz
zmREkJ{mu2@9yJxida>=!rFTM*=vGc!*qacP)1SPI#rSN<yzSew;*b_m{JcF7iEtmm
zIg2s>974~obHj!WR1ER<sD9YPIVgOr9hwT|O`!zX$<6I&Vv|zO=XO~^5QGznbC!0{
z=)oktm>3`g)=nptO`)dnUN}1H<?#thg0A%wPv4e7nKNY01Q7QAsB38r6gg^?;U8We
zK^`CwK#r7?+hYnRMNNr6#xCy$R~d*PF(tg<(*{C7RH=Eq99|%gefi6@^0lv{!^y%r
z&**5S{eAtk_1j;f+U68>pSv`>Y$$$|e)7M+L(6x(;B3z|*IZ2xKKK_pDS9yh1l}J{
zJh_do`)~g(D|G1oP{-i14eN9mEEYdvOI!7__PSc?9d(Bm8&7&+u<ZTcF)&OQbT6U(
z!=riaJv=g|bG4kiq+JU`5SsR=ZD0N8@1+9=57FI!{RMjV_s>;bju1g8MIx1<iIn_d
znm*Ym#Qv|~Wa!xx=o!bd5PNU<wHSXF(!5fJ%cpZ8w9;P4D{e|!f6wTV8O^1m3JO&Q
z8^R$jAQVU`Flv^=-`HVWU}QB%^qcc}^fL@k_uPA*E(b3X#B^t)5k~o5T_mT$RNy*U
zq$vf5D6-?&a}EH6UNT{0IFB0M;)^7v2&Kd0JmBReKrH&{!X76)ikd^Wn7JL;*vg&;
zE)E~@4ASL{a-T_99Niw(KAj|ZS8=Zhlc^pvz{$`#^ies<&jI?hoKfjSIiY4I$I<1T
zV8Y?#HdbiFxEHc*XF<*afNK%w?R5VNbARdf29zl!uyCIiJ3s7gmJ(FF91iPfw&DHS
zaNfCPiO#&QcCMP~ZWp3UIrnN74GteZ99X8@{x8+0V%HIGzm({TMC(EDwSzj!xwr5(
zk?5XbFA~&+`vmIX>lxP_gn8T(n*IH7c{r8R??UwgAp?`0zrz+c%um~^gV%9+c`)XD
z*Ls2=2qz|m_dnQ>&s*9_gNG*QU~(j{1iU?1@GylB*c`%^joMr<m)DepX)tF3$WQ+D
zetPZoZ>P4NZY^>^%)n#<&w~kN2uJ887wu}jG?J3n)dp^dJvvsGkz|~cm&4<t6sWIQ
z=&gu4fmgRS>xAGgaGqwDtGb3?dkH<R`ee;!w~PJ3-~Wy#Mu(|=?UKCtwXs@Sa%v|X
zc;*R8))Xd#Z)$3yO`HCJcJF?XYHH8bxjbqd`}dpQZKLLsPNruL4(55{Y*=@aPCyS4
z3SqBU`~W>ojr3B#+sg$W9j<;vpB;{m(u(HBJTDLcPY~p5LBH%C9M&QT#E|t%me7a(
z=ik!5{NoSkv$ubaZhFs+bisuekRVhu!xL#bsMLFW3NxqpOH|H*w7><Qy*%(W?Z3e3
zn3`$M0-23xoXUnuG`vapK_rv%w&A;^;_JyvNLXO7F$pow<MH=9jacwJK=>qYRJUhX
za*c$==z9|w#jviK<QoP+7-V6*;t)~DsR4mut1?Qt1Q0K&_0vTYKHI>^tK;yiI$cI(
z-gYi;$>D5&*gX1Jp=S&B$MinX;Z&>;M{MjwXe^iEd@B3J`7RJ1$~8K<)c#^yUX1&7
zdB>Q;<=Dp^;eBQbCmyzw#WS{NO{sl=;SwG>W`CK<&|&Z|mHeE+h;Q^qP*Qlb1IANq
zs}jc%##cLxnF$Mr#lrebg<|J3mO)G?*8|3e`y=Rjz26VHRceGj`hiE{yV`<tofFHW
z|8T7#ar^a-d=|XTb!*qqY{TLwju`|vdq3^-p;UkIc@5F7*fBBB^`JiUa(;OAtn;sR
z&cESmXF0iAic#u1;$-gSoYz77rM;H?`w{nLse20x(q`B(^gaI0puIRg_?yOXUL4%(
z(NA^=J-&Xit}B$8+3!O2VtX#zo*yQ*S4WTsh@C^k<)Q6bPs9*G5Cjj{oX>0Tq_Ja3
z8ciolme;n3h<MD+7IPBQ<Jo7QrIAdSYTK94NlRL_fqhgN-R%hi$bn;n&Sfy<hif8Q
zK+p-b113;xxjn%^U$R^(sXaJ~l^GbHC|c%~p%EP>i+`_q-DULBzyG_lzoOv?z4XK{
zsHQPk=!w)usYZz*|L~)KDp+>bS!dEf|1td?iH}_D-M5ccoOuqd@)Mn7y5RJc+B*l}
z_qnH@tc4$*kjDi3V9w*Iy~r|%Oe<nd&SmI-e6DY6$(z@%&V_5=^(XY^Pkw^F{hja8
zmM!;?AXF>I##8j-z=Vh&m7v56Q_$l;m|wOyNn=**aIC3Cja0#lo1YHd_c{sXhYFDQ
zxCP72H+l(k5#QV#EsS|z_~Mu7&cFLcHo-R=g|_-5?HL%NII%PXqu5>Q@6(-@_XHbY
zdwgRNj7Bgjp^m$)IymGO!c!F+L2tu(Mqrq->%?~8ee&tsK3iZYwnZEkI9zaIVbtY$
z#cX!Aq11jA8=>vmA7C3Bi|sFO3vhyV0OKW#R1AK@NLWsrO2Ij4xPQ!Te8I8brH<LH
z>Ug>Oi?{Qs+iusN*I#!nl>)|4oPTUox3`6Jp4(7~<H&|`>;qp*3=GuRUXQ*Grtc|a
z!q+Jbx@Nn~b73ZR2la>UJL`H6;wJyT!y)w;J_m7JILS8mAMP>sHOkuzN{U@+So}nr
z@3gKJv>oRm&IfKM`l{Idjn8X)8{i%*=M10gcAo+C8S243mkGMJPxU-tZxZ%+W8t*a
zb;R4a<wNf;XEV-ofv+typ?J`}1?X^rsx7vc91BQTj&(L#BL0=?{>`Eayn9Ue{KNKK
z*Du<5OBwx%enS2hyRU?~p;%51vrI8z#ID26k!P+`PWUUA_lY0~!imO7ElspO)<%&`
z896?(<|M-_gcGI9ZFI)Wi3i9-5B-wb)}KXtl<<Mv5<6e%b>{zAe{vV?Rb>X^V+G6L
zEi$ack3*wlMYq+KN@*dYR5<{T1&9%)%0?n#3aOK=Sh@O%37ylTSec$!qxO{0iP1x0
zYCZX6I=*8Eb*^8ZS8iB|7lQ+RRM+ZGtRAlMbgM{R4gK4rKciQleLkJB?)2<(Bt#z>
zDW2_U@4o%Cdfl0M^UTm>_09DZHat3@T=o|UKbBM%WwbUNuq>_j8+F(oGFY~Mc!X9o
zH)$^r=1_c8mp^UQ3cB{Qx6zOP{@Zj^y+D7+3P~ae^9{mX?HQURp|aR<inH$a-qPR|
zGh~FbN_!=JQ6%k$%_2W|R&E;z8IaOX6(K(imcLQ*V`-5nAPX0as2=tcCUdfK0KowU
zD2%A*QP-yN6J;?H7iIKsWfU}x=`cpZ01HDPM%?n~T}~cu=4n7^kz15e3dTDmZN_L^
zGm$S0UQ-Ppqw7>gDOa5cbMm1NejqD+d{}*lkx&~hmAHfX810KI!QL;%9Fc7s+sbJJ
z_>}5{az_nw2$vuahf>=@ADV5%@xjPyvpmXTpRo;BIJ2pMzQHzK=auePbxzraz*5J|
z)n7a!A4W}hxRi6Ap!{Ed{&QLcgAp4e#_et0@%h`!Y8UvhaW1*QGK71>Id<!9pV4jP
zHnSLbhm{j&CZHZZZ(&q6uT%6<s6>+TQWWbCKF*~=Ruwxxbb@sCo5Sp(uh4&=_Qe7S
z1Dw;uJYI7(0w327LN?*v27@^FFZLOq_O({d{mpDU!Y{EQAKO6v*#D{Y8Nf9LuRZOF
z=a=VpqR+~`&N&R9zW==Gt$N;F-~M~O9|#+WbHQ~TfpYJ0@DhP%V9<V<;ue0RPa#OS
z%J=B&?JEV_;Cravo+UPN7%cra&kBEq_Vf0Fu3y*oZ0_IsfG!V@OP42;FuS-ySONCr
zFvC{45}Mm#vx0Jd*tqiUxx7In2Z$gDCo*R)X``Vd6LgS9ik9Q&S64a^5t3(4<kO$|
z%<VMGeCykH(TYp|h?c2?-WqG59ZCSPL6|0pBinW!aMl6Ok#K#DCms|5o(S+b=o?Q^
zDZEfxAsU(}ZoF)YMyatTTC`3G0IS=Y>3}larvpyRh-z1BZEd!m#*PkpaqCuEanVKj
z1qXWR`R%{fA*dSK>zs9s9{1`9MI!X<3%{pJFSvwi{bcQ1w%kiQUfMyYo_-#!J!L7?
z)D(uMdRV>CB$lnF{;{MEcLnboc-d@M{XdXM(74~%JayLB)1i?uIyf?#H=n2Y<fQfh
zdG`2#bNT3Gl9nJ*eBWTfGW3TQqf%+wtHcnVe{^)5TGTPhp#RT0oA&P6OIv^N1KOk>
z>T7F)y<?`!sM^1%YDZIJJqdz~zWzaqH8oP55r%JnJV~QT`D0WWe8GVzaCBO(Xl^-|
z$$5c<@`gxo7%UEHmG9Y+U82Kc@l!|0_Z|sxrV;h~l#V76<{l)M?d<GuhURdAToB0l
zVTSndLV$GZ1HEtGK5YbAwQ?oheB+G;qpD#Xg7Ihn{(ag2<c)~F);9{~*Zr0^ze(2%
zV<GD8>+7S7F1%1D8o$U0-B_#s_M2r<@5ID}+NVo&*{iSITy&q}st<4uVpK23nn$}}
zgzQky5@;*7jXL3}aqA~Pmbd?%s>~Z+f0^EI>;u|*)|qE&qn9?`S#>io3{I%O?=Y;L
zb><lb?b3at3|+4M`n0P1qA7&0eD1mD>DRycjW%%hI1Gx#w&m(Wl*c|}fBRM6VBi1n
z^2>GK#A3}<tM23IBlHdE>+jdUry@k5JVKmdT|Te4U$rrIWF+vI_4oH>_rZ0{Owh(y
zbBx~drZ=hcc16K**ENE5U<5^*Mn>WV=f_HQ{+HXgZ+QLXR0{JPLw{g<s26R<_Dmx&
z?yB53uKhWrjv3|`JAbguy!NnNT&K5x=F<i1<N87W;aK5XG;y`Xb#3WuSntcn{r+w*
zd4BWxfxg6fh<f<GW9Jw$j~DkJ*5iG$jqJtFSNnXx{@dq!sk*Q(`nS(GPjPO4^dtYZ
z;93j1zoAcE<<SOsS72Z9JZ0WrO7)q2{P;XTLU7(LpL4afb$Y*D$K7?T03HjlJ)Fx}
zr`R?7Idxo0<+WiiG}MXX$oJr4=K_F`$9=@*(QmwO9ggFO^B2bwZL{0u9h)P%-Wwd^
z1n+au^=ob~=z79AioX}{d+(n*+b7H}$z(F?vB9{+jB-BBXKUB<xcxn7Sx_5<$}l!I
zuI@*Z)YjHQg5Uz-o<~L#R8w1{Ct>F3`>b`}qcZMouv4@s8|IPt7)?adG&z}Z3K~eQ
z5RHblO?h%Moi`7~C;WNHAyVTHjPL*LvvkTStMnukC!`G1vue3};)&nTcYg99t^1=l
z(Ru4mqCs`Q;R#{`506t%?xM$jzuQ^Q#b>Xk<CLajW8+1)cXD%+PHc|+5~bigA*IS9
z^b<T3o;lWEwA}eiJ9Ul>S0Z!(VdmnVE_(PtZq(S%Zoi!_`@|<G+K}`1$n1WO{{8=a
zUkM<{_tEOCt8eE}))gw1n54J7{*Cmu&2QDAqJH+frzvsx5WVp&@1iSScQ!RP6h8ES
z{tI8GhS$7->RQ_L?`vLjCjG)shTgKgoocLgE?l;Rp6eSZx^F1+_@Sc|#2+kQO20XL
z%$Z9C0*JSMZ{BiUZ}$?~(LY4J>e#<@|NS)a!t?ayFMp9L&9NhW>P4)EmM&={L2$8S
z*IruI)k!Tzj-luJl)#si&{q}1co4AvIEBo4hLB;VP4^O*+d@djNQlnfAZb5eNN&9}
zZ&cUm)x!b_*1v4+QW6AVcECtyjM~2I+utHV5QN151QYh+fR~FP%od}gqsmw|sl7W~
z-W+C<bY5nc0p|L^&J$vLc9?ZCp)&H22s7unvds(+kI*TrP9i~Yk-(thV}sPt)Ig1~
z1`=il?q?923j`4DRac%_eOKQQZJ#(!L(1-&OcmOYYL%!_Umw-WMn{u@^B{o4nmkc!
z*SG$eUiZ4!((5jJEeXY$^&B7&Kswf(roS&$B8Mxy6+mM2{&;Zss9GJas&vvAh#$#x
zWi_2~rJOdDktlskwXeA*SXqT(9|A&~F?xK-`t@}9>8A_IA|wk)2kBErVjScH+4}H<
z^bbG$NBWn?e?p^){WKL2`s(OFT#FwOwVyQ(!2|+DkoW<xZwNhBjDhh4b=A8)S`dm1
z0!L3{LqWYrjJ~eDMYrM9tFEHj)6by4`@8aDFbl$LBjQIT$z=0(WJL}0CCo0J$>fi?
zut%ijeigjDad@jpB$8b>=k39sAO3bK{5M4qgnSSNM;i*Sm9Qy-AP9mm9XPZVdxG#M
z3lXM=h$&jISYeAFysn8W?}zP0VusraT2BxJ;Y4IrTQe=q1dCB(c9>meT>$ybZ+=TH
zC$G{Wt}q1&AYDbo5deXtm;v6z<ze80lctxhFGJB#>8=`9?W->#l=LeRz!XWk&pC(s
zUVM?F$;s>#PN)1)%u2N#E-$yh*!URz?AH%bZF2)f8|r8(Kmg&eWHn8N>+0Mclcn2H
zN_aXpmY}x!U>EfL@lon&D!dusI3YjCnH`>I21Jk-`uZg?x*#k%LdL(w+z@~A5?}ZT
z6((RbLuh4%l#u^|<`=;WU^pDnzmW``eMmg7kL(t*iPR+tx**IhNd6p@XG9PLK@f!E
z*xnW_XaLiT!}jPf!Sk`1@Z3&{ZcZ+7BPbEO>$e~X!ifkX+??IsLCqPrU6iBzm?rJC
zjJK^Avnqf*`|Pt6ZC^ssx;iaz43_Zl7#(-#_keIxo>bv^Doj>*gn{;Mh?MTCgfi5Z
z6hIOa)MezDKmzomyPl(+Km4wqj%>Y;#`o^cE}w|!3lFJ@6pb7mrPSCYr6;|ly^~5<
z2-ie)QuL`lTp;&HqncQJs&xn;4Uq^9Pn0J<MZ>}Ugne(X3l?XPAU&z}$Mle44v&n{
zq&f}=MFuv!;~n&qpFgC|vFAt-ghfIolS@3Fos|n+m3y%&%<;j?LzcIPS;p5h{MFNb
z6``!hU0D4W%8D?4-ViOMWJuoI1Yvey?~f}ti})c3f*=Uf#TGhvUf6m+cZIAfwk#WR
zHj^pp$zg}dGUtm2h#&}pM_YXzt#4|jsA-Nb;~ptO$jpfjE2DGsEG5L*vwJVKoa7~0
zga-%0ECqq(K^`D5(vPRgGr)u7ESwpLw+7>WvAV~~2$cmdmO7)%_W$!es$E_~$7_yJ
zI1-|x@gp>{dqgQ6-UTo@medK)8`^5AfA1hAmGDvDT2Ha=1|1%2q<2Ic>LN9zLv*=V
zWq5ypNL{p`OiYO@<$B8?3|3G?AoLw3o$x%MzC-a*olM=8>>df!FX&#Pld)4n1HJlB
z|CGM|^>5IZzw$+DYLw)}g0SETdH;AHC0?FFoX|Y?vKF>p_;TJGs$4iinN&(YTOej;
z+IR8D<kS^PYr%szkkR#}aL><(1Bf8Z7D)WOWy3#Gb4>n@3xcq?Kw|JMKln!ygt^4d
zyJ6<zFuge7@nPoju<LLoFE2LO(&Y(K&U%6%2qzADNG6@y(Mm_hMrluSSkDbjC_6=M
zBqwqh_tCTn$Q2{nJ33B#2Z!~z*PiA^YOkMK_@rX|{@G`#b>->$JMw=#yXUa896UTm
z0=z$X`DB^F(4yh#2?3?x92dpH{llnVABmQ%hdo8M|J#o!nLJ9J>pQZ`Yh$(4w6u|i
z55;Np*q9O|YW3&f{sBF|V@-a7ZY~S2kg0~gdfkR~v|?qq?)&v8cj<YNXrTv3eKe}`
zudGn#M=`KZ=XZ4!EfbAI=)&$UB`Bqe)Du-Ah<jfkLcR8+WnMm*o-V4{vx~O;^SyM_
zO*fJt2n(J3*uf?R^Rfbm@xn!!T&DEAmpjtp2V*`&gpj)ke_ulCub@^(Jhg+}Pjzy~
zbVf$53BoK9i^cRL2!gN}>FHiZf-u{#P~nAn4HtyNGRv9s&HNxip|NZc#Qg0FuO*4k
z1wjys1Ka8P)>b;wH%4QbB$AG*DXeW6X(IxLiR2}nInm{QNFf;I2NM%Y42e^tGC;3r
zjg^)7yBK@-?xj;+b(#KNEdK{QJSK{G7-$cWGCdG#!n5;-7NMD<CH{!piNJ@C9@G<P
zXzifprOPQ=S5NS|p`)+R{-++JWoIvS*45k-qlx$gB`1=Uo=j4twub6r^?_yKDS|0d
zQ(S;C`Rxn)sAK6;`suH{Fj6%QHPo`aP{25UX(zqZKUgvcOF89ER_7Z+YV8;pDq7FW
zN|bYXfj|Jcc==L#;>dB`-!-qgkRH7Kc6#GAS5w#0E)oP`A>)mR@bn8mCAsx7mBsh$
z$P{J_(YZYIx;%s;lM_ZlAwvK$Myh4=fMmCm$$Ft=czr<-1VIo4L8wCTyc&sk_8U_K
zVS>Crf`kgQoVkr4k;GhXhszQ%L=XfaA0$M7B|bvWC;BOr@iY)b#qtJU=E|iV!be)f
zkZF;%mLn|F(r5!MZEDbB$nJq*noOl=X=4MmHPlU63>g_2p^;2P=l_8C0TE*|K*Xpi
zlK+F3PbI9?c&gltA>{)Plw$cU7$gE8eq}ek_}GIqI`E1X6+)4a7AFwCYU%n7)b@rq
z)3Xn6Ree)S;b`!~K-(&%2>!m8!Zi_9u6X~W?9pd?;bKAMg0N$~Mp&{)Kq$0&^&mB#
zDzE=b^%3%Xv^UolEpv2iTqlZm2_QHR_7BCiH_C1$*3~pL(3;CGqkrCV4}IuEAE0tL
z)_05=8XBpop^*eZs3th9l`(pZ@<*$A-!p!W4*Nxmh~rfm*+Tr%*~+qcJ~AP1oe*+7
zse4O0yG`|<x|gN7Za)`@AP9mW2!bF~BP>|(_i%~#at?iE4>p2`!UBfNE5sB*$`Lk1
z{15~|aC6p@4mx~rlm;^sN(4bb?ywGnWrw}O@05rhGsfvI05N1udyD=KuaKR6gA@sQ
zA+lcH@hlzdKSt-DeLi({ED5Z5&z?P0-`uLdL;UD3k^mjcONGEH*8^m>NT$o%{??z~
zN56aYel19JI>JHq?|zOR`0gGW9_*u<#`>alMQS5dr^JHvWa)<n<PT};YNXM=gfiWg
zm)m|xTP#li2@+ZA%M_r-lBM&sK%9cOQ4EMANOrzosi7|R$47N8kp07>x?QW40P^$O
zZ>O7XzOiU7kRLwqBYOCWM`>WRUmHBv^{l1;^7cO~dL9dcFvo-}5hO%8!NN#_p3U(=
zoc!DifrU9NT#%pmoQ%Yco}iJ=raISar9H)jqi2D%pO8J!14R%7K@bE%5UK!EkT5+k
zSOj6A!+f3%@)B_+J1;j62#{xHK@d(XGQqP$#aC-nw(vELEwp`PI4f}IdvKb(0hnF_
zQ%WWMdBTh+884}|u2xSRBI|%M#&6%fgZ||gKc+wZPdCx4&N)9@cJG0GG&(j)OO!zw
z3DDP_v7RnCeI?cU9w7Mc0-gu}Wn3VC$V3PyN9i0F@K!jrt);A-A>&Gf=xSc7b54|^
zUG+hODmPX{i23D%Kcc4}-b%6V7M;tZV0--&l$s=(oE%nyg(o(^@D?f(wyU9|frbx`
z=-eFXRPlYPQ`<x?kWjQd0i<2^`_8`c?C(g8d%a4EPpB(XLeD`6E%bK~5IqLQ6V#>7
zheM-dSuc=({mD=1h8wOgDBs(6jQ+>nchaH$!_>LHot8$tP+13$9;E+q*PZm&AN@-b
z1fg2U<Rw7QdUg1CFJ?w)tK3@tXMVyk?<LK@&!+v+ZXtMgqzmE|d(S8=jfC>*A{o6V
z2!bF8f*@2ecCvGOAP);7ws*BDmbh|!nDv{OUL>wIm|}`}f(U|e!r>G_GI?KDEBp1{
zfqpuk@|*@HlW8r6gc3=F*wLv$#>PtzHWx}$cESh_k#)s+=h23Br_!!N2k7TdJWOYv
zaULB#a)7@7qkp0o_w4WtSLqbB*R)al>W#GLuo4*{U?{^kzPmW3yF)KOcx=$QT!+Yt
zhP>PvC4k`^iQUH>VX%^kaoYF0N9pLkopfOD4(&A&4cF0W8(%}GUjC*MHD`2qtKPA3
z=hE?^el30=5qVv#(8D1;nWlKJcS5IC+akW`0y|!)h+Y8?kfGGDw_dWi<X5Z8BHUKF
zp;{W1;M6;CEc-j`5Q4P#M}?(E#J5AJtRSxv%uo6u$AZcn8X2QCt<72h0ViK{5&hyD
zUv~;1cYNb-sDE@wd&ubi@j(Ll-o3rF_2CEU`JFG&yRLaB34$=sWPDGKP+>y!JWmYY
zQ$%}#WLT=mg}TzN|Ky1vVJjhHCL1OzlND4vfh6r$8S<Cmg)Zg&PRo!BK@bE%5Coz6
zFvSKlY?Vt80j6ky?`i!E>=r)k?_950zloU-#B84+2!c=uyg*j9w$VV}7(wPp`2*iW
zxG$&W-dRb?&zNn1JRwWht)nwntfW_l;`Hy^x6`4aK4tvpQTsJCm>8x=qF;wtf&hX9
z=w`Sj69^z!7PNf*$z59faOH$x`uD%Ard@Qjxrq`T%c=RKQ}UMYd-73w`SG7oxHe5~
zD_f}hTrc@}Y9d81?|y>z?cYPM{^LIntRKP(ycdGn@Y^4KU+2)kANQKZ!cbC!uNdK+
z;GN=oeL&PGmfs^WJfRJENwwXHc!=s-YjkL=ARw3|2Fg<h?XY9v01uF4g$;iQgN0=A
zww}XD<D>Nr)LRR0o+!lwwhb?lI-}njJ31(>ZW>3A_R>-#8Tuo?d6bS1_xt%)^7jv-
z6g+Yu-r?B2>lzXSVO}vuLu9ha&<kDZ{Re@Nk=fkO4U#d!Wnm7)k2FLKbLd5e9XdEx
za)^wKBYxGM=z&}yUfuHWAqavX2!bF~A7-+0)BD2Z31WL}1bKP5LRkfE!&Oc~VF`jD
zQ0Y)u1TT<Q+8ZCDW8~Xty+k11G!4d+NgWjlcJx##t-gDM%uU;Fy>Cx#R<=^uXJfUs
zR1;p@HjiluAPk4c`p<uOC0+dLP4uhnzouuNdYIzz0cB8*(y_hUsQu)1RI~1+qB%am
zWRWmS2%$w2!AAXEO4!)<<U`c7q><pyFw#4slZ~Ht*_)Lyy<RWh{i~m8?~K^eSe}4@
z@6A0iI=<r-I{5qF((<!kO;ZKp%izJiS^&Z*VmqYOL_Dbs?YR?8KPdQRQWI&_#zH}3
zazqI}`-YU55~YqcZQ5I9^!OMZd#R5)*R)f#(S7KUbbai2g2H9w0Vxnb9EsBEBU4L$
zUk=C>q7$nd$Na^IeoTj+|FsU|1)jbCA8Gli8)@z9-lUJA4K7@SWouLCAB$2gC!IvU
z`OR<Wnrp7kmV<W(CwI3)e2ooEXb}YA$Z)<2f-t{$9v5ljcc|b6&Hv^<NQ8X7B9qlX
zJi)_WC!{B@4A<{_e)yUPdwAg9oZ)zzz6c`vhad=oAP9o65HQ0|nI0RaNW#lZLBq5K
zm<iESsZ^i`NU=5uf>1qhu1uji(Ow|2R_Yr)MrpQnXoByh9O)ujQ%jjxGre?tFe`8%
znog{)MhhCvwRKwHh=wEjlYvOWqR4P!l6ptR^*k6p+Eshnl>NN9wuTlH6|wqaB>wu&
zHd^`GH_+K@Pgg?7uW0v<r)fCdN5`LkoNCstqDEzGUzKr-Aelq2&=R%0(ONz+IYIH!
zVcPMVBRU62b5kqT*5>B{Idb$BEp9Y+#&k#{fY0GWFVd4g_$FO+$rV}g1AnM%WA0r>
z((;%8<7afv(v#h7?2l4JogAHx&|1$w{&Qtq_v($-6$%CuaVvC}ao<TMQdCFzC)G&r
zI1L>b)FG)_mN#cTGmuvV9xHt>4^aEcR;LJ}#ho%AIFJM6vJIXm42*u!y26t?s`?Dd
z;Q32COV$^wsnH3}lO?uqm%IN*|3n9#{uM1dCzp)8<>Y4SKlB1^yXO$S>jNLBhK5{n
z^U<*pdj9Dr=~vGTXc48WX9cZZe>yc^a6Ucz@FR5ghO>1p8nE}^eyVM9C!0@>rzow|
z&~kI82!b%XusD$&Q5H}xWF|K!Qz*$LPS52_&;7`dpG%C`=Y!YFa0AE-qZRUU6{XFW
zJb9551VIo4K@h5sVtG1rSXe*I6+T^gJZvu!{^WIR$`L|Bc{%+u5(Y~U=9T<Gf_iwM
zT$8iMG)xD`1+r&sn2u-0b%<{eN*7k8?&4HW5o(>Nr6th@I{&}CR|yt%)Y;gOCvcR)
z%!O^|+m266QvX<j_78edntGZW^)?nd6&>~tA!OsKRdnV_C(~1VUrmqx$G_1$U1e02
z`_n~24&5bnXps)-?rsDGk#0n~yQRCk5$Wy*=}x7)^U&}<+<X7;T4(vi4?HoynR)i?
z+52R-L3MRy)6F%SNqAK+SMM%o6WHfu;w$|yYL+K}{2~RdTe0P*nplx5zx!3Js6tm!
z`>WSy1lYiqHx-fVqPF*=qAwyjAveJ*+ZkPYg!@-uh9ZQ|i}tJu!+Q((Pu>+ri0sw=
zd~bR&;q?N>8CCl0b71n~@fG$s<{Rel0t!TUwG~x1I@^U0c-oZWeFmfo<v3{rsCXS_
zkVbJzLX}iCWQ7SpII`~!&2IEsjXdd6(`q>-N^}_B!>>c%skz;p<ePe3M_V|13X8Z9
z^>k^x-7~#;vEeyHTg}}i3m#^RvR1cH;yL`ycGp7ragIY()gGRh>jJaw>SZN|-{kw4
zPrL<Mt5E+vmMgU8hjoS|!Va(+MoxD?#EKOiiyL)PF5kFpFX`WIgC8kGUser8Ru=Fo
zP{(1!@cM?y1{4)c7tDJnB*dUF{(HB0kgdud)pL(!q+aBhzMLw#t{$A74|{)`G#BVx
zS8)UG`f&Na7gU4E4F-vnB*YM0eAB0jt=cFMhPHm~O%{*b9LKmFl-pz%$Q)_nTFzvW
zq!_8JHc;Rof5lOSOedc{y;-(?aq-g?a0pNQX)S`R6#}MQDC>RlMZW-4s?6nY?A%Uf
zAKpL92pUVs&@gk}J(U-||ALjvVSH4<!bhw(v*NmD>;`GaE6yuONUU{qW6X$zUDq}H
zDeyzA^|~i!gGQ`2C+O`a%*>JpPr`7HVX#_T7YS@!o=l^3i^5m$J55&0TggoH;{@iE
ze5o(LSm#>)MnoSGJ+K0mu_H|g`~AF<Gq$USM4OlBUfFNlh7c@SiLjlo`T!4AX2;@<
zi9o`x*Ar4k7EB{%_a=V(Sz569;!mccHbsHbHrIpY)M8I{OI_}CyaBZ1ynBe-@u=Zg
z6e)4Rq+y-~jAJ~0YJPL#I|i?OPeU{60uG{I9>q+6I))5mj)Alyhu|Hz_YEwDV3R9{
zc*r?<(3$3Xw5=cntJu;eR_&A0?@!WAlNKHo|26Ib7I{Qb$h^WlN#p#dJFWbU0@}<h
zhqj*1330+=eoCInxxpc1v;Gih0^&k}3l*W6z`Pm!()n&Fg{!qqHqHSA3|}{}N3ppO
z0@?UA#L^}@kTM{g_JK_#VANs*CWHRzYTE3pVmjoATdW5@O4%*9754AP$<M{`@pAbI
zP_b!Q_zDNTvx5yRTr4u44{zV+qk`<L7D!-)+?{UkIM;+#kV6m$-rk#iIO4tfkwiH^
z0BP4_g6Vhs5qYh+cfCLua6|DKkG`yvmlA^sTS$mDrzllu!wpsVqX3t1M8@4W^#!~D
z_T_8R7m0@~H$c|bA25ctBr*k&`d1)Zj+26D_&Tn)OumeVV2T8x1<#nP%aV0Oo$X_e
z152%vtSPM%>MQh@E2)GcIUOlEmG9$jF!48<uRMmv#$Ds`xhdQ@Zs6y8uI=OgjeOXg
zR9h;Z-8(>m346`+3u-Kq7&@+iuz{3jKr}bJE|~6}Av*`3@NlZO`4@LyM~+$JHkKV=
zY|;%&w&je}O98tv5V;BCU|~u)D!sFt@QdZM)7-nI<!NbmXOism72nuHhk7T~mmJ-9
zq*Ct<JDe*eqi7uPDI^AJ%0k^JZhvE8TEXy$NEfh4|4`B-9Q{Hb`nxBJPhtG=e(~tE
zoT`agRW^~HWygIrYxNw{cuhX~yxVe-Kt!e9_KTqA*7!Sqfy|qh^Z{7>6IH_!A7lLt
zLF1cYrio2QTPkWClAXy(WuA6t&T9zj!Rr1MrMRX26YJ70g7Ehei%*^&4tmkl1O3JL
z<1;f8Tz2_0v&!<KqD}(sX&u45OSEbliZEDM@##{<5Z6qaJ@_kqQTO&@|K2^2XCU*Z
z`z|@+o=HOls&H(#GNIc&&u9F;L=I!|$St$jckz1cg$IgMu?K7~$@y^v{9n-n?x=dD
z2hMxKMdg|v3?MDEvERw<$JW>R`&`j%7Na$Eo2-(5BGYh>&z4{n2RB+#FO#%=k;VZq
zs@G;ijjYf#I0H7Ljc4S$hSMG$qvZ|~t>mBgrumKG)OZ1b{<J}R4SJp#ag<6~q6+5b
zg_%M9=?#)NPW)ogm+l99N*?j`r2DEHB6J_s^wo&P-Y;?D7qK<-w2GavOM>a=N@RJ9
zf0g(`h>r6Hp0{b@L!#a*cVXeDz9THD`mGx2<{qW&E>AbBf+F8LP-0^`B&(A)_Cz+H
zRZ?q8-$Qz$7SMm+Uw57k7b*84FZ>>ZSmgsz=-%C?e;nLfCq`b3tZa=h)v1Y2?)~>G
zh6A(0BM6M5Pc7HGTP{CPPdsBRx`&v(^_c27#mrsw{HSTB*>l7~Z-+$#c0pUGQkIi_
z4<x1Q!C}}1BGT5`1AN-i>tEwa%il@n+T&lvQAo?sOkuC?Zto<kU9RoNX39<8PO``-
z=I@7oeQHTnTb-9Isqf+?Ftn~y(<aSXiUbjRJbUqX)UPZ{ly&VT#m(5{Who3<YN2O_
zFtZ5c-s`{T<t)DsvimFb;4LU|uFoXx8gWppW*~Cy>+G=+EcuA8hvDf_^)=2=COz~+
z7fs65w|=q^DnoXG_z6D^vFn^M3>dPW@dw*2K~&}5sbH@Bj+Ga;&5ho`)Wk_zKx?Iv
z^R2r>^6%jq;|q<!2we&`C-wH>_N1LZXi<Ip<D&X6eG%2%f`DF2BMN=>AcM%id9PSy
zLBas=3;uhBs2|hIIGj@{=f@|0bmv4+BM(R^@zq|lVh_0merJ@=>DFxcO%-uHb~g*^
zHXtLKJ9#EE=8c*<fS8oxqSB^ao^4TPEY4<TaGFAc{3|to(KVMmeess-xSxe_xJsb8
zdW3=JM{*S*=)u~=S|ZFTU=fR<HpY*loPB)EtGGh8_z_r=QxfzxvdGNEOod=D^j?>%
zbZ*?tpIgP7og>ivP8#FgURw5KO!$e<q~V>Yt3LZc`t;aI_V%GZ{*9gH75gq}Ydub2
z_wQz)>l=~%z(Q3Le!f|{(z^yI^Y?E^zthO=8$8R$gr9ltrE%n{h-t)hjyKEcL#MQi
zazP_5S!a(RCCYIr3sTvXW^fam5tuDzWnM8248M=YWi}{c-?tX6ow!V>%n6LTKNzw0
zHT3wtiXl_F$?~1=SEM|Tb2tXIbvJMS@vj4XCbXZMnng*Zg0WMcX$H22y}X}T9Chm$
zEVB!D-dUXLNK_@qjvp8e)`RJds`Y>UXyY@s`#rHJio6!c7>L*0+AXn1SB+WrkW&Nh
zH3`QrE*Cre=fDE}KSLvCW=)dhN;a5Ix;ZrEG5xn}s#OS0`CU0{J(wKS-R<8d0**Lv
z578N~kz|~@@q5E9GNwch(<&ToYA9}LwbCXG_6n!<)$^3}I@trZwV+ys=bY=64~=aK
z+n!8SJRX%D$s+cQ<Km=^(Mj{GVr-2m6|u_*f0ay1*vIu3PPJ5d6x{rlfFMxCcG4N`
zUwi^)yPuQ|UDZPIlMj@OSO=MSn@Y;AgWxf-PsbI(V+IoT+JG3w!GWdubqU>-?aAJ|
zX+KcNdtaK*SOxDK)6a<!c5D@pQILNIR|oJ!uI%9uwe%Od%?j4dl&VS0!=wRVe1sCv
zlUVJ2(BQVoan}nF6eNO(pjwP$A{z4#UilMtldJF$#xg(HC7$beO!w-NdM$`e3jSM(
z0zUN1nW2)0_+c<758_gdQ0|dY7?ly|4rkiT)4&A5>YsO$keR>me+iK9f?WY`Uejh!
z66@k!Qu$Th0(=pUOL8CPCBpm@IkyutB$UXf;QPFXAFLjdB|lqg_S{;&E`0_2C9k15
zhq3<P<Z#O=>-Qw1DnZ_7F7GMU{rXkX5v5Mum@9a&Y9Sy}h5bDSjOrw-g@t)o3>Xxa
zQT9$hpgz}%1bwJo(|CcO5|1(LF+{69?b|25-`^R`UjidMY|s?3^}VB`&zT24y77eX
zs*{g9{~HP-bt)fLgSp2uZKxGEBU0;qr;#1Em%Juy&Y>{^`a~B%VN@$%`%dT!L|@Lq
zrePklfpg&l707dWzgw#8k5E!QT{v_oo9KvPjmh>dg(c5N7MX%f+NQDJKi#WI$oJJ4
zC8%28fUOqZUKb`FjL9$o^#ZD=hQctg_~O!jOF!`((ct!-IReFIMbV+GslC@)8+xt;
zPu$dYYyMs{YlX~L9hNOTCi+AiG_C((qi<9Pp-e>VpRJSXurijRC8~5th5aOy1klfs
zflC(Wpigx1j~|Cdw)se$dvJ;>VsK1?pL-7M@R>0%kx$79cVFiGmgbp7bWfP)D8>9#
z-yi?^>hqFoYaAw4)K9@!EMRy+rIN=F-AgBg4y&)Mzk5~Li|&nJ+$PQ?-PBNh+Lohx
z)Sdo^FTW2B^;d%Yx0Cr8g&Ile=iyY1u$R~*0pZL~{{;<PFddP4)v8IZJ?}^Y_v*8C
z7})7=xd*uX7?_xGq1!~ef-UKDO5f_@qYFFTppCoPT~!(VfS~kWVrI4!zk37gLRQ5w
z#U{yP?qX%h!4$%LBNy(fp-LW;J!2##|NMBKpK6CDw<#(ub4T#oH6v84`z7P2jRTi>
zNxlZ^?*ml{Shlh(8ESKxV_C}LDV<yOR|x1F4(Vxj{f$8)#n2CIt@)=iqxEfI#1}Y|
zTQ-oLgcKlI;7URUCc4lCIgUlul9F_mN&fH2BQGC9V_kT|Ca|&ep|OQ0wvD87&en%Q
zk%PkUrU}KwqPcrX*R)1Q0zuH{h6Cqsc=CSc87-D#3PFh&WYky{U<#M><%mc3y2v1)
zl(f2H83tY+<?m+-#SFdhCqD4wjw4{8(`!okfZymt>-QZTT#AOQuhU|VW_+k~40M$_
zxY!AFybFoBqAtzM%dLC9AJtv#dKP|KY+_#(|E=Bu5Z<7hDEA7-#r3)9ZS+IzJ#OKq
zi4Hz!aHR=So(7Ji)fl_Q3T>Sg;2odG<j7?@hw=>r$kl5XGYiVJ=g!9gO4#xkTz7IV
zJQDS{@x#aCg~R2>ZaoCx6eHM6(UVNP2gPFvM`z^~HC6A^QYZWkiYu4wDHv}q#S(%N
zi$>x9x##R&o(+HUgo<)QoU^Z@O*%O(m+~Eixs6Vm{JxowWd{LQnE}5MEtmlmj|;9G
zKXH6FE16H5%1KUXfk0$0&Xb_*Hw^o+p%zd%^rP;q6Y$n$L};e@?lRmh^XLPDK8>h-
zS=&zFxCjpL@a@49va4x>=P1YfEo%3B9%(x2-;N9<@=>3LwE+%I6}buy4K>U-47bol
zMP>x_Sp!&mfno4l3)6Y1>4C13t^`f-^5{<X?mawJYFtlVSUs!L`an@CG?|Tlw(z`R
zxUzY<pm;|>^gWS|4tpx!ox>emTi>8Ud!Xh$r`4ogo8-U!dC9x%t9L!qxj~fUJ6$fv
zjm2n5d25u2$Z#M#K~FHr<Nw-u8B+?4G2~l)nIHl8hK^e&O+>%28P259<?fc?^h{Pl
zVu#&zu>PmBSF9pugZga53m07H*XgV1RWE^Wp$%q%!&o+?e7`%OHVnX9jlO7~m!k5)
z^Uw4(J`(04u#1zN#eF|ajFB>FnQqWj*)fN(1V<*e83pr8afFhmTUtU^E<W9F&pnvW
zkok>>srkTnZy8nRl7J@PoeKR}P)>a}s}UC$2lTX1tY<5ONW8|Byf?JzhGJbJw{+@~
zh2U`9_M)0dih9XljXytAL}62}e>}AR6Fh!OzZ%7maQR%?wG!I|M~oSBa^tfxjQ+&K
z?)iN;pdb%fGjP;q<6m7?Jmg(2CgZu5k_Wkd%#@ot>&?H<EL4|KlZIa~*KyV9sfF?Z
zRj*IYD_a|4sbfB_XQdaHy=gBjJos2pnmhHx1nL&)cbB^G*D>x<+oyW8OVmi;M)7VJ
zv|#8Zm*Hqn_{x|z!{W^+#33m~{nCd)RyVj>%GdC}7?*hu4ySkbPR@l5Zebm6ZeND+
zIa1Q>>y5VSF#$rHt1Hcc8aq}GQ3O}a&F|JXe;b``D94*GC$5-cegNpx4u}b+I~0$t
zX36FYSsCyxpMHL-0J}XA?lrtTv!&wyk~45{0q3i#4j*DDABtI8T$|<>PFT~ZEoUFd
zsebtq9~*}ikBJ5kFj81)i9$`DIobp-bla;fO>51%GAVgbS#@v2FUSPBwJC{|nY?K~
zlF<u^CCDoGzl=W!#*K2uvT&0B7vJhZ1l>P6?8zN;zZvX6CdLO)qhjoOk+dCb8L(j2
zd&S)SZYK$h_;R4os}acurzIn&hvqbe0Z$f+^H2mThj2@qsQP=JgKyuI4qY$c0)Wqu
z#0dvYW@u1+F3L}Z!rnsJedm|@gb%`8n1!KGzR(*IhL&lWsY^@6ZFzA#OP?Lh=qSx4
z-E;LDVB}T!`CL?kBnJA;C`pQPCY9fv9Ol_xhbrkNixB|`&U?x<k3YA^9}ESgTo2Ef
z1m85XG)LI`eE*9s$m+#M&vXjHtY4>MDeEx~JZlW9UXR9=t}Xum`wZES&_^WYa2ouX
z&8$&=?bj-<bKO!;1u%9b7f5|vME=6)*tUd*FZ`w9Ko<rZ5dDa<5QeG0G+Q{tUzkc_
z|2S~~Nj&0vyG>|8ZcM}9prv%43g&CI_-pa*pd-ZT5i-xN8XdrE9-wETJ0(ucKWr}T
zjF$0dTArn@6__5{I4{*wbPTdS;lMkJg_2NMq;3AjzJ@?lY+j(QN%^92#1+`VB0zW<
zRgvIc7=TRi0w2w^n(#PnwAy(E+`W{jt(y)WTm{dxnRY&lE-Gp2;Ms})7X9(xsTpnT
z4XR|(n?}C0_(4)QAM&%@U?b4dOKE`~7;@@p!XgZ}2{G@5emp24(i0VA=i{+HMXOxH
z{KQVHywQC*R?sWv2jOpvFd4e|XlXXfy*rtzs+d>sYqYkuq)N!R6uTJD50SdE@ULvU
zKr&bG+X1YZ<$1*lBCc$>m>k2luoY3*obKpgVCLG@BNe}MaX<KA(k7?%d%7lc!Vy#^
zx9)Tmyp*US#F`UM=H;SG`Wbdomy|$Ix;doozuxIuKgewq>EXa#w51nCLyDeQU@k_o
z_xVd?@atGyT1pIE|846ZK`~ROx@kGhXo8lc{&#yr^4>y<4h~cHijNkbxrNt`s}4qL
z_G>@>G<UV1E(;~u?#vyOq3TR;un5Ey!<^ydQQ&oMlN&&76&ZjW=k!T^;IDh613s#p
zJSMxZ?guZ=)?C-iG-EXSBR!AiO~Yt)Q)-#4ZVe<uo|M^w&^NZx5x8T85dXX4k9ssz
z4KywENW_K3>oU1x!#c~Xf$?%Nrp5@~R3PZJ8`n^1Dmfe%?-9x?oEk9D+bKqejq_wQ
z^DOO^tUi}p#bl=jpy8P*nu@k%&N*i)N=lAp=lP4)9&RV?pN$cReUQWD6S5!*-GUS5
zQl^!2`bNWZvs3WItiI);HQZ(tSRFdjru<!Eke(_x8{f{i6L7PGh#KCxiaQ)Qc+aGt
z%Kd-nM`eunU~>U-s!7i9J=-H&dpd;+o!QZb%yB?j(L}xzGHKh+MaN-|>)oYB`ULf6
zaMTv^BhJiR68>0lNtQ|AfgXkQ(D4T>x<Ip{mi%s}r;|D&sW3gj+nByDkTv_h`PNPU
z)NAQs11YSVjxs@JpN}4RNQ_6l;pNHQTgiat)Vk4u{u8>db3-~Pb}XoV$S4q1k-n?r
z@w>#m_#~F%|1hd0<~|e<E|JO7RXcMZ+VW<ej&g6=^tE}pX%Zf+Fcgv?cH*D$9ZX6A
zCQd~uTHIQwZnGG@YZ;!Wd=ef34h7F13idy%MRAdm78b>MzY=&-4Qo<Y4eNauYS>F5
zmm{kCd!;y^&s@JPb7asN@sM?v`u_f%@5U9^c<%?sPiE5YM^bwpj$fz1oGRgKWnJ2&
z(8vr#K6OrQZ6%X|RbCY}5*yfv2cyd<F^UB(OG@wodU~%7T|jBSoCgV|$3jkZa`<LS
zOS~CItpHQpS(P8SkvWeaBm$gFQheD70=AK-E_%c_0m7Q}a)SlJG|tlofpA%l!!72!
zT|Kpy1E@S_k2SRu$@p2>JM|`jeBEFVzP!l~uq&GEGpl8|RyndnJ;87dfk5?jpocQ0
z1|AXx&wT=^N!TogtJMGI7dT19K%y(G?8+p+t?fgcCJYz`^qf6N8FR#X(Ey4QhVGdz
zc$(tWi(u&CJGRpTScGQo$?-)m{Zm7OQh}x#^kC>)%%YAVJP}>ZmPlPUw+BDOhy*Fh
zVumRh;I)!S?0t~D{n;vb-L4%3*#cj5tKV@8is+WnDN2zIQGaZ(4+1~p=sveLKf<#J
z5+#<0$(@Vq{O?H}^h2JR`9*yg%wVa6I7PJ=$*PYkHB3AiH`4>UFaa8=$TDi{%jIbk
zyFF|D&6gRr!y@iSXEWOc#^_rjNKOj104K&9BMd0At=zhwW{x*1#~2qQhEZys)mQO6
zDHzbQvDrv|(LFb--+SLN(x<vtv86+<1JX$rXZ8swW)d1^yupK8y8Vyo;Phw|<8B^K
zss3cee@`@^(VPtJ&tP`OhkRj6#oaKxcqcXjyH{?#I6TrUb_)=iLi)Dgy8U2IhpkRx
zw4A&67hdFc|Ayfeg6+&);@wiyiep2dszWAns^%&R<C2^vRmb^6EBIb?W_RGFsi&73
z@eyTFfmJ_bqHmCbjez?S9=n_hkxY20_HP>q#PMS?6ul%AO#}pjw9R;^VHfpuOg8`J
zn(J=Ax3SsF<bfGbe^Gsne~{MeZCoI-96Gsr!EO@*rBU;2PYPStYf`D$Z42(3q%N1(
z5CVC<q)Z(v;R>lx*?3qq0NFNQe8ijTAJ$bo<{vJ3CtaX&ZxSO@C=J{gn)_99)qA7F
z-|d>`eo9VW{hCRldbW*aN?h^8a5)_hNFwwh0paleWl68<&aa(=$gIH+!pAfO#E9+E
z9&9F^?zc8Y3w#d%1J+M|@CI57y^|6h;ZXPw27h4ffMnh3_Jlw!+mU3u)Zw3^l+rP(
zDZ$KaNDxmc`+Ap{ALegLgs?E4g7`13ULV`ME)yK42uzjhSh!gbh7B1J02Oj*Sz;$0
z*^R}VM*uFERu|+HOuO_KM~hcRd%rlLNx-D`DTEZ3FM*QghZ3X7r@>-?k^IleEJfix
zN+75oN`TE^X%iWV)~t`#H{3;HX)t`j#SlXe02kUj58l31k#)?(=cKd^T-NI`0OQ%u
zx0=PybzqkKC478YC2h}bxM(v2R&k0@0J9<=G~&riC^PyXUpM4~>Kw=OQX_5mkzQ&I
zrTXYPY4Y?_MNW~|`KdY<Ceoc?>m;p#8aAx&Z`Uu4C&*1nrE-iM>hI%<<Xs}cWR~oq
zFVMKC1T4S8lZ1&yWZT&7zNCatqAEPTH~95mVfS2s4o+$O^E|pj28!!j9lbLl?z?b_
z=XKK*10qQ#24xSuk?&?K3*}Iw-`cp4o8`*wGjq0hFaatZA-N@@C!03V$c+8CeUnQU
z@B2qwg`kk^hn}C1osmlbc@A>~mFkSjS6TTwWvU-DAK>Jklht|At90w!3ho~%+z!qM
z%x*QA)L|MIVtMKT*vBu5p#4LfZ9n$hZOZ7ecxH{n*zs2y=6UkB9b3katSg3zS@#qz
zjP5~utnCx5)5`x7KW9!`7#}r(wuhkGZr@h6NxJ;C6EVU`qXEz})O6%F<{antJr?3=
z`>J&Oz6*ULkF;I`sR>=w)~xNTQ7d~Zqwq1UIq4c<Jxm7>At2<<pCW`GswihhwzZ~|
zPCZLH@LMhQ9a%_m^#+4V2Jjg+J1N|8e_gTPc{x7i5qrfi6dMZz@Dbz6Dq|3Eg^_3d
zRK2$Xexx4?zMON!W$YdxKhOp8F=3X8k}*lT4HEsry&!4d`b70_gRDko(vFgJ^VZ#^
z(avW9Vd9v_>gcQ%!e^gCDS`*9UuqN>rFGG&w<$pQ;7jXJiEmF%JyQQ*QVy4W+e^t{
zZk4@A&eM1C8Q+&zhR_RtjKb`FtN7ai%&Q?iovcc9@z3iF<eB8^Fd_z%;&_u4GdFkG
z!nYFsMti^+<H%7Ol(PF43Wn^Vd)ZDKh<|=rpIafxK|iF0(<Rb6jg+G%JowS`wF;@c
z<JxKrUH_yB5L;Y4P13CnHK_8an9bmIo{G$9xw?rU9Lqa7IqBTi3}Ribx6Ts{j)I-z
zChXm`Z9Z&S&FisfY4A9Ef;-0k=hP%K3TG1U*aft9w{Y%0F!v$36F)32<1)EuvFPWi
zff#_3mDYsJy^Z(=P64|j%HaFz9!s|U`+y_W&)umI+*F1_dLP)X74pK*Fv>=n@(*u=
zu8Nl`dBS)J4~y%*Ic>NiY`?+Cf8Ge&$7A;<2YnTa!;%JS-TTgWzKNVm;aoPZ)Q5AQ
z&-f4f_g!6zU!LGgE16;g!XHV{xu=XINUzi7rnGJ}V&QXK*E1iyl5v<%uHca4csriu
z-7J=!o}LN`SLHc7cK^B#Hxyr=uHNf8anHS!+<U&jth6!^a*TvR+08q*7u~=KAvXbX
zoUcU<_$72ghAJ<;^fr8h>s`9^t98ghNzP>Y6#$<T+YO3hH0u_e8%+2#Pe%C31JYw4
zKD$aGmXOL|GW!$WPfD>YW^B)*s3x&~`k>xKhL*}mV-<YNB_Jg!DM3rd4c-YXsCwHh
z7Ye4yu*DsPCos^^2}q2Arx8ZCbBQSu@y&$^ZZ^0XIU+S+Gf%p^*x~)YrzJB33bs3s
zUWB1cgYUgnOzM)&IVB(;;U^p$Mj(j-cIsEEdxFtS`_L+_A0U3$&i5M#m3?s*>yaII
zm|xuP2(N0<8@DOEF&1<)qgemB#}Sl5P5q#5zheEM#%g}n>b$H7*gc)3eJae_QG*Sj
z(H3b+FD5I(MbuyAh|3gD1I1=>&X0ZLiTL5_6Au$l1R_uF>~!%%MeeI}mXh^Eab#zg
zDlX#=5Rd*k@yFe7ty#K=?=(ux!0&*tmrhDES!{-%j*472a1f8&@7zPE6_05sj7g4w
z_XWNJbIQPS5Wg!Lsbu?QbN8(<rsLR4O#jVyDLbDLERb?vCKj*r@sKuTroQOc>awHR
z&&(6!drnwP2#IgffCnO&Q|E@`_zr`VV3Mrz-&Fr0Q1;K-U7v{hqVAm2H*^SjRfF*^
zqV24u*K5a)lxC$_W_5c$G$ojr&DOGH&XJ<}rdMJYv*ZSObwFYu9-mbXtAw4w#ynQ+
zz#djCdS1r?gP(&%I@q~Q%sy~8@{k{!3Nwz}2ZWReEG-3zLzSSDv2JL>(Fo5Ek4_r5
zXTN!gQeq62WVB66TJ;|mtsRPR7*2$=-;v9F@>xgMjD<1M)$I6Y4dLxY4gnEWA3Vd8
zynm0zgb{+Gv!Wh_av-J!qW&AntepULy>kCMYTC*dLa~Z)|27wcEy0uRFxk2bB!XjC
z<zx4degl`qm1#nP6Y_OIvX=1j%Rt)vuTP5L*NT_S$SB;6Y;GJzVItzt|7aaNjyUvY
zqjW&x!UqU)dXnxS8mWSl!`}|6I~z>Bt%zXiL1I61zLZ>Dsvx3w?`Cz$WYgXO(uL7j
zlui2v_cvW$?*!&#?ca0{iRCKG6sfRdk{01oxdrw<NNW19&j*>isQiKXAX+G7`u^Ql
zF2mc<fX6bD{qEj<g6SHu7gPZ0mCNb5LPV%a3Vq?HfF5k^406G5T!e~Ty&YSxVEkJf
znz?ks;C)q<4rLHD&}=kKZTiHVx_Z&abg20D?N!CovBnk6!P<9)h4PFRn8PnG5a)wa
z{?f-pQjgUp;u?}Mb-z}yv-gd=>o!-}3?M;E*R^Fxb$EXUsAETcm>l?{QTqVM{wieE
zkpiYkjvbAV2;X3oC4<Dx>a$P!!f-jwT+ToK>S_?W65NN2!(Yu4mv)RoF6zHM^$uM0
zBG|h-dp~Gj0jvJwBs3?YAda2K>?bjjWI(x|>gg#F&C93!W*p=7!D}KX>k=+LI&I;S
z))v(Yq7RPX7zo<K^Lr;<JXbDLZ2)Al?hTPJ@U2SD18=KfA^<2@sXFS<p;KFm%gXH{
z3q!}Rk{(Yti3BVf%ey0eIcpv+sjmt(AsiP<$uW~BrlP^(K^vTy03mdX7-<>CTZp&*
zL~nxK+6hZP9?Fv6>&jaS`FllMq4WNM|0v4qa(;a4BG{-VD1a|UlnG6lgC5sLQTNXd
z8XFpja7-TNzS+^TCdeLF#wP`fau8<gReV^F&y<2+sLkYW{rU=WkK^ycF!S;zZ3H~0
zv<a`HBnGcD))mh0<86ZZye}t&i*_K=xg+<5@BB_r({R^0@;apThCy`x#aOirNrPS2
z=N>J`JI`q=BHEA97O&Z-Qj?kg<4C1?x!6wOd=OyDFt)46`<T!s-_rUs{EqfDI#IcV
z-Kb7Z+wwMNbOj%jeM|dcdf|4FgjumcWc;HMGmA=!-ACWuobj%|+`e0agk>esr^yv2
zM90i+h<`|6-Dv@AD{`d@TC3x*XrFv=ewE~eo-2PDKbuG{|5;U)X<?bSfkIA?Pkx}r
z-`19>yO))XfDovTp;Hx>(kfV)^0=nv#t?2HTX6a3DQ21?ZSW7~C)T5n8#GG0cT2z6
z;_5Z9cHV%{oxSHD#&Y{9qP8(}dqm%4lBZKXtxJ*?0Rs89T6cna;9$-!b&YR@)<d^m
zyYn3}*Nk2F=n8B6-9fG{vdNBrja|O~VHU6O`&rQ{G7pF0cN5Gnr-}a_ZprPb&Sv`9
z)E4Ga6T7qeu%hMDDWSVirBr~IFHJ9*`lm4BtVb7)*5v&R=u?DRtcT!Z5BY11n_tHm
zJ(;w74QRk7_TuT*4Ne2naAODaY2i(~VgthRAHZG#?xBR=dZs;jy^SkB;S1?f<R$Dt
z!p*MACcbXn9U@SBf%VD|TCOcYB-8ZY6TTUjJvxacO37FRQm@N1w-ch`bZh&;=$iI1
zXsxAi=s|(ePolO<g7`%R@+fL}5z$Io6GgjO?U|^jt68J)&^>FtVzJaTargG*EW&5W
zqkZF9>l}osW>yZ#?@~WIyr-9g%9FRSpg3U5m$dOWWA}zd9MW^8+{i$}nDy#~;GK&l
zTUsO_+MUGm@Ni`2=H=1K2pz@6C`^ODW<!Zrm}nDq-S7V)UB!+v8a7ILmr3STZ7=Ea
zGn^E4ST3EBVtxk=e^q~w!(NClR}6JxbJyK0@}qeVpHI~)HabTpUi#&m{_g=QQ;xL4
z&<0S1&stEvO1`f2;gv3(t~8A#Y-MWP*?ff$4Fb^(6{>F@yoZDBM0&1ENB?-?Ke-Y>
zj!UeUtH}z2HYv1heTKnI@DPH_Ng8cZ7oqXZt;@r?Ux22TZWUxH7waBD1X1W~iUGzw
zlmT31R>ojv7tbGs{wrMHHQ(bLv|E={p*`Os^d)tA((u<FgkDTeAEq+d_h!pLzxZfE
z%gNJamnjkUFRt8H3NW)<?=>hS9|Q_;^E*?)M;uLbV5~o(Ifzl+;vHf^uK#&*NlwJr
z{MXNdFpe*BH?3!w*ViQTnIts`7d~Qnb?h9h`QqqoEZPPh_sb?#lm;N<!eo_+$dC}~
z?h!2&(#bexe%1oaEZ(6v560uVV~kJ22;{EBHK>dO1{JL%qfE@7Yi^-Ld7>Uy0fDD`
zEC~nvQGLE(PVokPp;aYd3LxnpI(#YOE~E2MUk0k)ULm!hXd(E7po@FyOYHQsXwVBD
zfxVmvOwZ-3PZvJtz>GB|8c<~)n!Ls(TFFusg{9X8<Jj{6kA=j9?p<De5WTevq>XNa
zzU%a%CLzsE=B%nwQ^RFC%HnXX0kx%9A~pTDGd%K9ZyGZT@Qb9z^dAsdJqacsdl17;
zLWB3??A%_ZW~fiJZ1<J0%2f?xlhIrsT48;=uZ1OH$cNj`fO<oja7B}%s!4=*#01U?
zpe`zqh@;ZM_K=r8TOb<NW#D)(F8@(=A^Pwj(%(k|Y8Fm=E}hcnPm9KSjjQ)UuDUqe
zZq}WKzWk&BctnC?6_SM}XA@pRZ&-<z4wJul6S+otnb2E?MlN4fvN(B?y%~V6bB4Nq
zp5(qF9JT-btMfgH@IRSxp~~J1s2=6JMwhPhWAFxZ=23f&yE}P)s}K*@NL-+}{8_6Q
zb2zy+94aJLg*-Ls3A_3vgDG)i^MQX_h22t31zm4Kp<~ChyywiX9$qvR+A4_XKXW9=
zOx+Gf-|(l<Yi5q+J48lx-<j_|mY|D(=!f%q(gw(??24QzKgThQ8+T8_x!)so=k{&S
zu7B9H+jVyJTNpm#u{uRxhRIi{iV95eO(!AR7?KNWv+ZeGJRL-{jbe)I#De`EQkDYE
zvJMDnTaLrwFUoJ;zY4*NY-c{4OlK{0w6s6{;>%eNYUrR?j$-R8yJ@zp$gpdV2Ty$4
zVtjK3ySN_=CHkIi>ys}{h>I8SQbA$FB!7Bxaz=ecI;otJVZ4Sgct`GZlG=zbU6;f%
z^MEZqTtR)oBnubBo5vZVoyjlXNx;-+Z?#qzOD_e$^q*8P(KW)iWt7~GKL$z=TNA0F
zNu%?|{+5<eP;kq#7{Y%c!(b`=o*zX1(b286#BxNz@tUR7#)>vQ^>Yc?+)nyYb+P~9
zrgi7~hm_R(&`{eSXxIDZ>;h60Jx}bc>_YxeZS3D4LBxX1S&=}caYJh_>$tfg0lKeJ
z_#{bqLnK@Xk1&%vatCFz9YNCu4W4BfGiRsIH+S~$-_T9kvNpSn{w@u<nk4Hdj}TEh
z6&IxF?bIbB$>j`U(}GzOD7-51jorhO4-HaWtrq<IVRPXyixrJuxXtfJPoFLU-*$R|
z$F3XG;qRUcBnOgOY(z=_qz+si-N|wt;vMJyZJaL$1Piz#L$2Qd&=eh)liqK^^^<ia
z(RxK9``oln)%&1M`)|>v?hodkl0PY>D$q@T@uYY;0<@93C-V$?uJ`Azwe`0MVSfmX
z@WE|5L<KlqYD24;9BL-DyAtRz%)5_+&KWYa`fo`-m@`DmA8ad!P)Truc=l`YWUQ^M
z(w&Z$Wc|>4V*uVVrU}}-tjhXuoPxRT+IGzKkyOD&Y`#76mR~waW5?cUiWRoNaYo_1
z{KF+HkJf$A<!9++!37xqDt;!et~ztEU=67PpEbYVWu(7bOn=bwbxK7sD<ub?Db%3c
z%tvPM)(ya728z-*9=5!oH=>GBo%pA%JP2g?Jo9s|6vy@1E1=HU&Ze!THXNDEYMiBa
zRik-t<t@1vxob5j=w)JkXqVIWI(xE9RdDt=ALjXk(*ToGxj}JW#s#<V0AuV*c<Xi3
z&>{YB`@*%fED7W9-#a<qrg5wU!D@_6H|6JgOlWN7%yM{^TecMQ-r-QeJbzC9((6P9
zi-9UxTwfmvt6x4z4vIOy>HZp>Q%3LCfpQKwE7>Hs*gH)2LiuqHYJEAr0`@aL|D7Wz
zmx2=#xtbp1Pt$d~_<hv+ow5urym+-k|9E>nV-$nF$6vMajO-`o9>%f^w)6vq9M~dX
zb>;oH5UR!PAR1uF{X;HR*`|s=n3YAKbco6^q)e*zQ=MQbjZzV$sqL4;ABXkct-;C7
znW;ZwC@A(tDp_1>?fQ@6l!;sy-j^LN>cf?0IU1t~__`&?;}9>?ss1GsR~svlPixzV
zwt_56J>(_K-kr(Th+vajy0@-Ea=zW_Ce%V_E*8sQ)oQ&0{Fh20hta1vZ%#u2d5aNj
zd+(7-UH<lg2s%8_(r`|v3+rJEU>$I93aLJvb?a%L4@wfHT1Cp23={a8W7o9pe>zWA
zF=11TcAW~g<wpYl9k%<uPB!$K6uJ#^3%Dgdenh7`i_E+n=?p-ha9dLhSsj1s3Q5L;
z^hT9Q`Kmv;YQ2H`86?_d`fbQt;3o4ot#%@kOHf6$@&Y}0B>r~reFT~7S*#N#>_6hZ
z#A#sRWVG6kT-ZY$hrt&;N+@)1jKmNBEPllU=pDGix+kP_-`M5t<E4yQYR-??_HIne
zi@NfH=@`xAaQKqNXIL1itP5gkJ!?n_<<0ba39mDz45T~_85nrYOUf-htit;x2h0G9
z$?t$9SYqRIC|VFB*oS>)ewdpztntr9iV7n{*f#i>YhZ`(vf)cZKxZlA+NkX;r0Du4
znbn|040;Q3v55|EV^G~>GYDl-Ijo+gRXe!$f=|{>CItPA>%B&?j|TjFi`U=gR%7&c
zdbg`~r)ZAL=k7hOyYj#Y@K{nyxBmgfcMUKg`5H>Ps%Frwz>h|b30N|vMGZ(gd|h7l
zfe&2N9joy(3@|<e``-Fi?-G(vj-I+UG{_4g<0f@Ir-tsd)x(j}e1pG8?A+W0zFG%^
zX1hH?NDFV!>VGO<1L`|1Qo#2QIxZFpiX(PtK)No;XV~+$?CXcxESdm&@5T%7co_$h
z_$VgOIdlo%D~)X+IsQh4ELzM!1QuO?1wr0^(F*-tiX5ZN&oO{xEQ4N>1E3|Cg^DWt
z_)o*4Q4^{iw*(CAXG+Wqf+C@l`ox7u&{C47H4p>a^WQIrOvU928EmpkQs_FJeJ)xW
zG<CIu{ySFs?NUvc@2mCn!zi6}(Y5JWL~qZLvfEHv!nH`f8tQ(xt&8nOGI@obtRA@L
z2yrFTDWd!X83%wRBqeE6<aR;{Oc?oinMlOY*@EFWhq4CrjpRpmza=&53z~*Osklbo
zpiG>dfikKOD1m?iR7^<-^MeZCT41*nD;amrA@2sN^6oN@-1;f_>4sltSjUg#@0odo
z2kc|1qwyXp3PxDq>K%2arh32^eWv;b8%hdT*a;S{tz9&}r;aqL&N-ig8<y_^i1>od
ze8OAC^33Pm9IxJu`2Q>cqr>LBW9H8|HZ^`oNrK0QbG2=Ji<7WPY!F5baRO>2tZ&NU
zBdMOUwtox~KqpF>{&io~X3EXrU?mLT-UkC-`yT?iMIyc~xnySaPU;Sj(3&EWkq3dC
z3Am|`V2@r?9w3byNEbj?DUOiDW#I0aJl@Wz7zwV3%s#6tuYNs~p`*Y8lSQ}vLxcV#
zT5vFkHBoLVL?tO;e{xbuaaci19tp<_KWq+IKLHde%aiiJHt6$63Ea7(I;+UmecL)r
z0Va*~(|=cWzjB>3w+XsAWJb{a6H5SF{XIu9ja0yzsj>C~=puvz9w7nIpDGi0Mj*d1
zTjQdr*|{klI}zkiNx7<Bw}<_$MEqHC*@6jNEA+RPqX)BBBTVMPF@%eLur?S3uH+zf
zg^4{@?QA`roHChhv~@+sO++-kC?6zD{QxZZfR?2TfA5*qF9=PqPfi$p2gyr!+w{xB
z;^Ow-t~-$tp2l$QsJMcbL>A%kgV#$~GvG^6so!a;o6KZp@df+w{S-rY2?znPI`Z)H
z6z4Rh^all-=R`|C<Ta_%B9;W#7ZW)P7hC8sDbx!o%fVLty&X*wP`v^nIvRhQ){*R0
zeRJi&MDcI@S@hy^jO=P_A3^Qd&=1%%(MU4ken^~m45bskMgso$tfb1K+<GWWVQ)yj
z&4X0o)V+IKmIxHg21Y4j*7c-WpIBHEuHY5NKI|L#!`d+pxAR-5Ux#LCNn^T$4jgl;
zk~h*0dbe<&-y01&FZaP|)7=Te<}A^gUg39S;~<6M)MgHUS*41FA~{a<^Z7ur1UwJm
z7w}=gW3JD>jN$XyWhF80aON(er?CKA65`KSpj-_Po!3orz~KZ1MAYc+o+}ZM8^iqZ
z%*S@1(-uUz85dfn=XXtRVNw1oXQ%nykCO2c01GPfgK4R63q(a3Fc-IEL)f0qpXpE?
z<MKy6(&T~$S*7f&sR-`PDjfP@14Yy}6bo{ZZCseve%z+tQCrohKWAR9VWIu{Hh`ZJ
zN+Vy&=yweh{GZ@AJw)_I^VYlL0IV+vJh2f$m`#KO(lh{(4}h$g*%TLi9HJIb5BA|0
z;0qxuZt$iTet_R(FY#)apD(qZNx&9Ee=hYRA-_uh-m_r~Mu$F}I0Id?%MzX1`F1<c
zl^pKhWp2+n?|~U$&n6ON6jUfb%Q`x4ydei6g{rWGjvALUYtfs0r#IrA!3iVX3Dchl
z;p$|H_}`UAEad3PpLe5b!Ht-H^)jhHv`zT9i-S~Q-0*6Sn*0SU=i(=pYC%qBeDh7s
zKy;fJ3Y=RzJHH<a%sfosFn|xg@_K7V(=~BcQs_Yh^GU5q%xUic$(b&UA=4(z@aMHC
z4pmVreV6eyGRB1T?9Yx}ffNR<*Z~#;9xRAI*sPKoz82rM(0U}3)yR?cc&u+8Cnr1B
z=>3l^FdIZXH%kI#gmzK|kIDjB%LOZ<CMDJVlvlkbd0nF_L=A}g`_yygVUq>95+bqM
z>I~W)(0LQ=kMoNKU@3laPX#;7UA8@4rKfHLJ$bSw6b7X>k>-1KqlOI#FM8!iDSVw`
zyb~IN)dlZX=!*Yt(3S1*-q3JZD>y(6PEas*0F?m>X8`K%H4<ao_h;t|(>L&5-<Zxg
zNt;P9sB#_y&+DIn1absRmZ8=NvpCx2^hcjTFGeR<$K+)@PqYtAE3bK?CV2n6N@cOh
zv}f6nr?V%IX0DhfpcP<V<t04?7yqmhMxc;BFe}b$+6llB0ywh24#WrwXJt|_hhWxw
z82POkGMp~#cqZl*J=@yYS$RqYgQH0E$Ua8&1(&>=SRr-1wun8`@T;77ui?TBSf%1U
zWG6A!c=1*>GvrEv0N%~(xyeb@KSg^!LDcRWwpyS|?HPQFKvjOX135YcF0lIuY8}Q^
z03dsh%1V{k2`{e&_#hnfbMO@Q7><6VsWsNzg$V_ei&=z!Io46ek53i8<)8eqeb3n)
z8UY}&Tmr%X14ruN=D2`=+$u|h#YhK%?OHy9bpu%KLGRO@(P2_or8Ny2sKzR2;S(K6
zl5!3GA4ebt?Arr*{GL!X+?1JdY@GrVt@C?2EHD8FxM-8N-O_D;1m)<o(`t(=qbo0i
zMyO~WCtO^-tpx4TQ!OkgvFDJ@R18$GW|aW$O5}ASmnT2*Vr{7ILY2Q0|I44&fMJ>N
zC{=e2U|YTNJ4i-E_o!f~?i&kP@6|zNTvpoU$mD;6ZGi5VJl<Juv<-E+_%j6_mZf}m
z&mdQPLXWbB@%8CdcODwjC*-oVP-gU~#ViQ@s2kE_%BlQ-Bw|eV{AWnRCO^+KU4g0H
zE}G<d($jtigH?b-Vlwr;c%I!4q;8Sig<)*fG1&xKhXp2kK9x~acbu(rGK#s^Hv?oe
zi+)rj%N=Nzjx>ZRSyzwb?$EXfgYnG^A_gFzXhlnI7Hq;SjWy@$UJxn5SE0rQbf;Q7
zG?q=zO_knw`jEIDDKFi%tWIr-`I*EuV%8ckkedPEY@UuSg&DEx5wmw%CJDXWS+mYq
z`TW(}7-g%=fqyM%`D}FQae;Z<x6d8l7}VKbo#VW99k+2PM+E;H&P@~~SxxOK)!E&i
z>A%jjmH>lV&rBxV@5Gy_3ssgHPAmPFW2z6X-+n*U&NDc-S(xsQWn7)*MNOm3xBV&|
zm)1Y8Q96kdF}LdK!WFr_<G>8%f+tzb1XD9IS-TUvngEzWF+Iq&4nU3+eqHF0&PIa3
z0wHM-E1M1wxCRtIbXa~%;bw4ruXXd*7hY;P78T$->no29t5%(9G79&gzFBjVwznQ1
z!yq3)`^VQ6+3C&Z?yIk>x;Y?6cnawCUfnp#6qh(v?TD=v4f%Mzz@SYfq7arYb?#>H
zel1k=+}L!uP6!i)YI*=hkPJ7^l|mz}!2I$ai+r7d^wH<CaV`1po%8CTHs0ZSbI0ao
zmiEN_+^cgRlI}u-w!jr&v~*{X^M@3UQy5{`H6`@v=nzp*n;!WSiz0@r?mu@J93)9A
zz%6a+;3zftlK_)i7z-uXJb`tB^c@MAK19f@Oi;5Ub>(r)SyguTXlpn6^*mRm$hgqC
zw_B>cGwkPca*b#dff@|cx&HoYkIMN4fJ?2pTKC&dr?Y0?hF9|s35At#&xwg_zmD33
zlXRcordsMb3^;ioxI;kOzMGD(lg4uYWL)n0$2HRZm|!o7o0nV3gU`>6?GkH$*P9d1
zA6^G`>yaM2t6u6A{s`B41PA5)haEbMe;uk$k|Kuo=s`4?jo)kq+cs_50fetIE+#4N
z>d)gbrijk?pMuPo(X-EeL$ADyKH>JLbG6tx=h`2)%5Qo_tbF9I9snzX*_rn=^YqYF
z`{{AbCHwtp`@Vp8;ReDK)nfvHq51K#{y@Mt*`s^b9r?1V5YIRwsPUz#Y3=6T@o*2Y
z{1c6$uc)7##uskchF_%-=8CyXZ5CLcgzmzeFXpZ$T3x^MMSw<V6<fQ5&hhW6LlG#0
zMGJs6Ebln6W+#f8u0LKjC-WD;7zemVAAIR3al**?#_12;KGkPMe7WQG>o#oq2h5Xu
ztttoo={d932FqpG<UX3<!lleN(jfwPWy+qdcM&$Z-fc|6l8}=^8M5^XARJi}lvK;B
zA7f1i7<X37@tU)fc<r$>GC0MGN%UabWC`R+U60Ox;A3FC5ZO-XCkMhymP~wRJ~F_j
z8%pV4TwGX@YY0T=Er!WT7c5Xqjw9xE-Y0_FhDa97XCbIAa@@miPj;|b(;bMcyi*#h
zN<HA#uxKfF8#+d+(c$KHx=lwe#Ty3eb@pt|DSEY<eR&-@*V@lBwxON9U2o+kf>`+H
zkyedavCOuw9U`qIUjnw(mtBQwr0{kA6_+L7YzmJV`qfVKAs@{l<^@BE&1hq_Ov44S
zH(B6Y0k*&P2BpVzPJ*c)rtf%Jr#q66GP3`;?65Hl?xsSAKFL}AAcELC)5i49;=X1|
zKC#DSVlk*HA(51jd%{eqLWf3beJ5YgMUZ8A4(ZD!n%Um1Z7MD1vkW>eV|k2a-w>`l
z0o$%{YbR3X@ZZ(#b$vwYov>V`r_MFor{z^?4eOOM<Z@Cv&B*WE%;DfiR3Ryfa4z5!
zdQ0C3R;m+Nk&M%!!5qqSw)5I};>SiiZ}pJgnE_Th8UnGeu9qsN=zlle{gRiL>piud
z9NZ@$P`mz>4UWU`z=R;G`vD79Vx7V&F2lQPMb`<t-C~vh=C4MyJKXw@A?ZC-!&$)Q
z)}-s6S&YmhWl<8s!m|E+VW+Q?BT7al!QZ1_S&3$a>}*XK#73Fo<SWqYwd@IFi=v+h
zbs)l<!sKx->jrJo(y`-Ck#bfgVxW&@b^1Ernvh&Lxvwj*|9sXI>1p#V5(f}+jWi78
zV~4m#7|#<vVK}t<*&SsIxacnC6dm!Apwn~}2`IZTGz$ruzuEGIuijm3c03H3VHvm^
z9LUp|Al;+zsnlYuBzo|*#C|9d{Z?XMo^Fpf&*{}eI69&XjfRVF@x{~ThBj*&gfutZ
zMz4)}sPFmED%SC*EV5}4RR`W|^?F`cyHcUaHMSCU*Su=ka!0GnYa_L4oJ`~E#nUNL
zRtJCDVQ(4U!+LWT?3cLmhdeq#Ii<ytnZpl+4h(D_FYKq1uGZ=|dPJm`0-ukb{hwL-
z2n5CogRu>>Bt6Ev+wAAdGZr_0cs80MW`=IpkGE>1EgK$P&LQiE91>%7wpZz`-!Jc$
zBFWw8Xj@fg>l;uDaSr=tn_6p-#AI(XQeGtheaaQaxgi9dt_sG*o6o&AOX1XlMjxWp
zQ5MG7wljKlD%k4WA3FI@GC?i;;00x$$!#zS*;zA27Z_2tp$}RRK~BOcMZ=fXPZlP6
zN`dP6s0XvFPi5EHiPSS5bU8LmDE#AC_))XNDS{)Y3knucSXE5^8fm)^_yB3lvc)#=
z<BuI3+eX4{fqaxBB<T#@nKP5(iXkVbE)w$NLiZePkxgxys%4$gq0d6x_yXrm@&vi{
z??v$e;}y<y?U`gmLmoTs#-$NY_P@Q?%zOs?GkKRCw-T~79ZDS>9zQ*|W7ZZpAhRpf
z$X3jmklVMcls^ZWneYE@5}xVp1qx#<8=%3}8fH+bRNk&1m=e)VSHg3x25M!tk!Gff
ztY$Mwgg<TD<4vo|7%kTyo427YG#t79T7oqM*Z<ySJ8=*mI0VeJhnXGRBy<GY7pM<}
zwCJao&roU=ORO(L9_`j9m-r4y4n=O8=LJd7;l9l+^EH%R!XM^+{f?|u^cOY#C)Zoh
zc;5y*QX1rL^8hLPMk7OXk5i}R&$lbKr7(9aSWJO-t_Gd!<ZR@F+6OLouVOF9x=kSD
z<L1B3_&Xj|8Zb^!Uj;Afwx8Id87RYNIyItJdY=vH>%)4E%;&pWO?<=8w?%n{axPAs
z>F1JfNZXlGfdA;=$*+I&rfb=hNif{=$xA-e719>*z+S9dLw~=(TX;D0-1>8?ZbZmv
z*7JE`Q{hbjoN#)F@WYS@_L%e4%d0?lDuNkWB;BfEp-9t>q`SN1<E76y%DijXwhrFV
zm+IeG37W9Ib^e!&t#5tWabe1Rk5*08NwX|@olmBgzh_v6MSvBN*&csBS*6PqyvGcM
z-RWZ+W-I8$aMz+md!4(J!P|L-+_JcbKy5&AfB1Z0VfJ6UJi@qldZ|&7>pS1!OY$K2
zl4jx;&;j_9M==;RO8h!!%`|N<s~QN-08Jqq<6xsLLO|<0y)Z`4zPo|H|Bt7)4vVV&
zzK4ef>F!RYLApagL_(Bq1d)cJyF*e1=@J8xRJwbB0fw%jYmn{%hIkLp=llMyYyRZy
zb92|(d+oK?o(4d!WRY@Jo?IFJ;-Gqwo{l4&^(6kV4h@Hxv#}TiyLwG$znw#E_$6tL
z9F4DEFb%xHC4i%)T29>k%i0fQ3!M3TzQQ%7nk3Dt^@<m5bk$370qej98>`Gn?&sBa
zG1a0a!<jWWTC~{4)FezotcMth1wJxXR+DN%c4?w=@>S+%or`T~<GCq+DqA<!Zb;7^
z=_RRzPL4Hfo$>o5a*2he&0Ws8lch$U<x>0JOj(-1kFIIqOAWwM>F^vS?%8jP1HBay
zIm;--Yk_&(vZyEE*Vk3z=z-XNOi8eguptO(aFi{93R{KXX^R*t5&G3_3?dXaj}WX&
zIi*xHC6en#hrQmms2g%aklOVp`rAazQxWu%upS)AxtSGrn6F4$GY{RptGk?mozIy6
zRyY(%yaeD7J^E|#Rm_lGY!F&6(J@x{Zz|HH)9~HSTBf&&eHU{)2RpWH2j=_kwWv~w
zRxur2&+yZaNgEeexF0cQ&_}r2>{%Dqa{G?^8jE2Ghe0|S^_9>0B9-RbmadwFdL^Tz
z*Mi%jBCf>*bw3YN5H6$bb1x9mQwO`{yNtKp$d<L>fa)cMzl=IA@E;kS-~oc*K6J%V
zsdDgq2{>HtbjXw8(*OlL;(`*ACFi1R&lS2{<7*gZrT@Y6FvT8TEtgBa)w=AxWHY{`
z?6}layL)m$dg@W$n4IBn*(EHBMRNytwggM|T{PCw2&<T7RpHd!I=jdd=M+`#A<R+!
zQVt}a=7>=BaV!8JBC|fgah{?x3Ls>!?ruF^1y5fhff^+yyA)}$V@5*KD4Rk1g)rDW
zT{a$oPH5VXvxN+?*^J>?J#$JVB1}pZl3-bw?M39j{Fw_Dc$pEeYBRrDIU-?Jjir>S
z@BxphWg!SpR6VmX1fyl+_-)(S99z7(PPGp%m{{2?lbk?hcwX{)iWc&s{q00AmUq?a
zZWU(>NIWyUqY8^iY7p)$dAP8$&v>lt+mVVH$+9Ds^qhb|ZIjM(mL#sOlO$HhnYoWm
zrUkcQMA+nVr%YJb@1BLI>LYB*o(4HgdY6s~w>$2qJa|&lu1gi%85}8(Bg>W*N*&o<
zzi^gMkN?F(0o;xe1zvN3ugHe6Hkn!J)~lT49;OJrvn|4-SKc3$-?Iz5?TtDN8uGmk
z1}XK54Hkr3-~3d#(|dM8J-Z*-0TRXu#^~lr7E>0O`}!qm|BX$=t<wE*ZLHp=T-&T2
zxK)rUi*=U9(Ep;M5kmT?BvY8qr6WKocqo3ueC_9N#yv*Ey|x}i<!;d1)$u(AqQ~Eo
zE=%u)cPtS8c(~qM*(uWQe0toN;vF-+mZ<!9O6Tr@jiD?tIY{9$CyT@0YYMxHg%+tw
zMzfgu?iJa`oE%4Dwgnkx)XeNuhpc}ZF4EzL(#t=(zVFD3e`cW3Z&mnm9rz~MA!Yr|
zo_u6el@3y-OS;K3JPR@3ZJ^QA8}ryPbJa9Kjy-2Ldou!))S{p|nlR%5b<uU<n4p!W
zVE&$wObk@0Chs1Kt&)^GyL=UGnm_kC_%pJH1ScN8yDrFV%BDLDxV6PIC*J9vl##Be
z*AoDeNz#(CPu3uO>`W|Zan$__ks)n1r*F<GOJT$<XXr1}@oFtx%o$&%|CKP;%n@wN
z6k+qj>uS;GD@!*Y329vWv)9|%zPjYrPBCA+VkYQ#GHzh*-oQ?zf~kT}kMZsU)avs~
z8`)P5C4%WBjTH3a&bSLq-PkV-;SI9$)`%zWoz=H4#h&1@0ppM+6r@iGmr<$1eanAP
zwp@M7;L(9#6ze1OJ}Y?P_6HAGd?hp*D?(@af);VI+JFoSzdg{yes%WwMXps<8G{O|
z5u%^E3-Jp1=j4Kw=P){$X;1fS?vj1Sm32Y)rFk+-=FAs%^;~bXyhtVU(@d)yKB~T9
zOh6Z_?)F*!3?{vfv9mIB6)7Y7Z~U}+!U~7ayOK5=H$O=Q@GRJox4MC{9bhy>P<7xm
zdx}3^zl1YSFjKLc)LUICDfx(%-RU8)Z5Ki?a1(Tf1Uf0d!(xj1?pa$jTZ;)pXHaPi
znRT)c{&)&)LHIN28@}xolAE_&v>X~WTe|Z{@F!z+5o3RpyK`KwV>?Wom!Nth$6DmI
zEw)g(FXZ||61uy7NOPz%+Gax=>z{kD+~_TOV=6X<vaN16+&s|vg-W!j^KmhFy#*H8
zHo<HJ6M74dn6da|8ivG(JxeXrH6Tb}`XNz!l{mCJ2U}cQWCf}h(JZJ)=vL;&re5oq
zClL-_$lM0f1O`6<g-U0jE=b3vB)~r{Y<;%Eh+f3euYze^*{A<ly7q5U)Z8=7RJIjN
zHG$M=0aC@S59y__O8-;S?V{N1_mIO7a-)hLb;;Q>GC($5nQ(acb#YV*z;^$<UQE-a
ztO7|Hn>}(L$YtAwwTInpdslwv@)j-KGkX1?^CQI;brnI)p*zbKd;8uErWN3NCvLgT
zfzyA}9rJ=l$JHQ4B>8WfQMYkb=ldV1cUwPJj(8Pg!2!+(>fL{~MP%`rSPG3o=lX<`
z&)xbOa2O=o%w`J_WOZ5rgA{MJPI9N&%a>7Y5ezIxXVvN*I_J4>ZN&)oHsc)k!XrYS
zyjeQ^CTU3D#!5#)t~iwHVT`7_PhV%7;GRj%Ay1*ubmeDV(Dt=bF3P#PG3FPld6V-k
z5gGSO_r0N>e-l`@7S8RF^F7!uu!jAM6#<`$S?Hkf863*mqG;45RW(ekgge@fo6?gn
zxv*4t?cqFw>I+PpJBd6DgzTXS?lE$$XlA<F;=7UrqJ5gw!NJu%J@$2#MnXL2jU7V=
z8)0v8c(jfWHDucwaGJAVm3;OMm;^C6gw-pZU)6;V2~o6*oFV-nK<U1e5SJO1Haco%
zSR5Ub702{laq&f3RRmr~GX@h|Gb)zn>p?Y%Dv(V5uHw{r(DF6JqYY+2&lX0Z)S|cr
zh-<sOR?9X=<N|#_f<9goF%=HPM^VX{eBmp~r{sOVm@Q_a<f7cq>z(V)-kHQz<jSV2
z<H1hL0BE-mF?_p4U5tlk<QsnNKi(79ooO;OFI4yP7M}zP#io>gWpJHtj!+6f(`&{U
zu->)dX2-J*H@y@jJFVAc>^KUqVx=jUoiZa!Cu)A0^H%*4HEp$tqnF$TwVI^hmnO!@
zds#;P0>Z%bu%uVg1*(d)iF7!dG_J8ft;z<Y`D7T3V${t=89X7B@0ffE<J30`ReE^3
zclnuvLXELIUgeW+MlF_7D4ff&T4~fJo$St(kFDVrtNSV(6^e&_0pF~cqea$e``uo_
z()oysOaG-8A%2}2A`IMdvA2C|iWvmSMQNp{JGn8H<SmRVX>0j-(k5P8r%;BSzT$Sh
z_#A30Q!#d*ixJ%#Wmc6jq$M{-a|WrB#~EC96OHX<U5@Pc7PPOVo$>C3l*5l~9;a9K
zoCXX~lX<uvU4@@}Fm?J7!&oL>q>}e!Bp3@Ge9kpv%zx91$wx#V<I|B7b-I;llk>hq
z@Cz|^8o0by{fXOb!N_g(>}~zR?dly5*U@q7f_4N`RB#2q!4Seiwz~_XiN>DCXr_Zr
zl!9vJkdAL7z^5JxP??8tNSG}Qx>N#H@`&DxF?YDe<0<2`sC@dDmd{M6ZvQ5Z^bu)-
zHXa9c{|yKz?yUVe>TTE(ez(CGs(jdTEO!QR3zfM=NLZ*Cwm4#xzjrGFIDGS9j4PGP
zzVJhm-&OL1Ef;$e-i(L-hXoUqp*KX*_aA<5cMTg(<Sc_lTaSqaXKWIH?U3L!X)>CS
zCiQ8!b|{^OY&M>yIz$uiSA}=f4hWk@ykcJX0u3?NpYt>EG5Ebv{$p7(<|0?K7{-x$
zJpv0DCDov4{}-YHF-nVF`pY_#e2gpj*$H12>o~<rXQtq?AP?-mE1TPB7a;Z;#EO2I
z^#KPLd3bBOcziAOPb$*ZwCw)ppZ%<^eNS3!7h+cNhQHR6*eKfzG|$gf8H&Hm7$seu
zbrG_Ua=jRf63h_NTdOVa1ysD&Zm1lV%|lFwa%ma9#(sVy19xDA*vtlpg9+45cY{2*
zHELFa1X3__Q9(;(NElKxtjcS9xA1hVcDWxF?rp_@lx12#+N9yN2;87Bm+>#9=Yf=a
zLLG)wT7xU9McLf<QcCsmW>dbky+3%sxj1;QAz4N~G|<QYaf1#kfrmW)=U1q~MnB1V
z3S2Vnck32JKfs}UKKFneOV-ixqj~IQsEbau4T8>6M|2?e56Oy>{1ywV3^T3}G;>z!
zVlP~^uF!gG3M?0xaWV@)oSFPAPxpW_1Dy3@FMC6ra))0;&CGjW&c{mf0YE5F74#S_
zFudchVrC$VgW^!wZ1^t$x-0`mBWjy|xIk;>QqTbNXdflC_qRGpDS_duXBn}vzh#Bg
z|IBR;>ABm7kSu+HelM`386I;}J_lN&5wHl^ZzVP?&TG8oa>6nqid<Ay=016&COQ$<
zXLWyYb1eZa?H0w{O5iLx)vsT)@JON27Kaw!z4Xhe6HWyi&8m4bl^?QYEX<mYp!#mH
z4q3pVk;w}4PV~gpcQfb&2QB7Qehv4oN91qU&1wkUfd;;$_w_Vz#BF_wQ?(0>isA3F
zcti0b35V8D)a=FarYzg6;osY%C!;g}eA^7G2#(~Jk0mU}m9Z0toZZDL(HIn(D;o$i
zoS)>q;L3?q+~-!6G$f*u7pQRgCtiAiLtC~V+%yHdw>~@^F}DbbWEtbyl`E`U-?5cX
zc@b@${V3>e9>H#vLV0@A3U5bvesWw$@a`9^Z5Q}RJJZW<aPt0)yMj`m;F-)(j+~^H
z`$$o~y+Wr{M|Fq)<_@=DSqArxM}g-O4Y}WJk<KvqGjfi~3*fs)|M`$knoq!%--f)7
z36Pnj`(i6!_oj-mwo)=Q?D2TDyW^J`wzM7S+>xu-BC}F;AjK9OA%_$eYHhv@al8kR
z^G!1C7v>nVKBJ9&=K=<ro5(6G!qdj-A#$4;>j3QxaylqcH75)P+!kWE{O4yM*QFtl
zUyS8!PjQVoFb!xs@ZYL0r(W<pq(SU)440A%MU;vMBP<S9#;jwTo~UDfTwtC`pnZhj
z_Z8spAp_(Ieh5V@+$<@;=wz(YoW#}q1SwKyK&y6EBxeNg^ObaBGhd;)ih?4nFhs5~
z8p-_L@=uT5dMx?RrM^x_$CioW4!0)5)}-0D%2mlZ_WzuI-=QT*&`o&}uYOV7T0vq?
zLz#3XdBM}Z+Cu0BbX)p?a*7oZ%6b0LA3keY_Kr&lVRTy(OSo2&acbS5mVvyq4yXv2
zFg<TUh2F3)!f@}`qwP?isKAm)5Td3-!~ZW+MFAX7*C00R70LtF3SP%TSJ`XbxmmkY
zH?^wT7(@7sUz(naA@zcTLQ4r}p?^?#sW)&6s;1lESdY9@tBsRHhLL0kb!MfTs?R(*
zGob4a>OrShQ5V^2Yc_>2k3=sf*4X2kNsq_Arn3@JD&6v6x$RgNc-__WoEb`*o|l^E
z!t+MXx4*uscpL9y1qBVA&JYCKU0}5ckO&YW*P7dJ`Psi2)sGN+0&Ua=n0ya(P)!|w
z+6~TG{ADZH1-)LoF6W%fDP%b39WpNH1XZr0a^ABDPXF|2HKRhl^h;XF-Ecy8X)Drb
zqXk<^?$OB_IJ+?(<{zi;`P3~SyT7`i2epr@g;-V%-MQpM2TE1g-7o?v7F_q%H9AOZ
zREqkYfAix?;vtR;lPG;iL93su0Ybmpse?$xV8`tDYlmjX-k=Jxg3tc6>jBz6{y<lq
zY`A+cv16<gpwrRi{7~<@_W85)LOL#U#LNHnK;xj`EW0xzPUI~4Rc8=NO~p-KyiSp%
zR`N^FGXmH3`Wol)^rVLOn%q;~A+NMd{s7F@4y;~TaRrx3;-JdPjKJ=oFj<nkJVyT*
z@*fc7r7q5^U~wn*0poZ1MF@!c+T6zuH~)#8ns8ZR;Vi=p?YPqE#Rlt0(P>GW{ce?T
z!ie7awbI>GlhCO_O0ThKYAvTg(C$tqa)+Yg4UARjq~&zqZKitPI#=z_j*Xh}UxkZ(
zxO#AK@Z4QVd3muBn6Fa7aq5;3ez>>IQ}VmA-BOVEOCZRlWoK|WASd`X_?kvbORK~u
z_c`-zf9M-*<S^Ez^-!+|ot}#-sw%}&7hA}M!1rvXG@bYK8gm~ZzS``6Q|$r{tq#SV
ziawWIAgd!B!`>8ZI#O=Bt<!l2<NYhxP!6i6*ds?W4z{eGXZ&j#)tMzuL%8@F-Npxu
z5vBEdbOw|hf*s)|4Yag)vO0rOOiEC9?u{l7*ZJF&y25gxW-sz=TB5zWkjZ8CTz!Xq
zk^y=AJ;UtlXYF>tAazZzsF&-sw^iVRf`x)}A+i+-+b+J}Z>KsVwY9)#k;}!9SoX6O
zhp0*Uxm;kz6*~2Kn+>@X-6jSH=UCAPxmxFxyol|bZ^?4KANu)s(|vfAZUg)$SH7;2
z)vaJ!8s2%1V?Lp@-+Qbivj=!u6g$U>13&bbm%VRyXuQ3=c21}9ttq}%KK39%{c*bw
zX%*z5_A<AkwY0t6xeNEPS{`%bNkP#@-Zd>DE#}%oEiXb+Law*f?*xP8vi2i886e|(
z`jdgs*rkFQUmoZTW&sXQ0>@T`I1bt|=9OpLkzoNihIf5`rDa><Aibrst{y!Qx^j8c
zcDK5jv3nYSxEaJWH{&lgi(pHR4h~f<@Qf2ay^Fh5?H6X4LEdL5OhE{DtwKk!XIhyv
zkxmTs3o3dN%y7?2G?ZE3!4<-r{=)+R`P}XZV1w%qRpAg~$uZ|ZFJ%<So4-(-LKa+q
zk<@ja(a_Ty&h&EB)()_kcM@WQk`vi7T$A#tWB^zFan|#R`3r+;_#<s)_Rr6cU+_f&
zeVfjoU|bDO+mlgoAKPLKR++23$f)_q(f}lO1^IV(zI}NT&)PWao<xUF_pA>(w5+te
ze=gN173epM2aD`-1=wx)F+xa+7oQUJ{?gnA&is#{I@Lqy7K-z$y~Ybh+@`}#Cp5c$
zM<7^gs&M6DvbWHFj<&CaS(*Mjfg`SfUwZ?bM9awd{jG?x&<cc89utq;UZ9nwl7u|N
zkL-*<a7}$vYDq$|yPMr>u=F#)tK%Re_d1(p5qm18Yg-mhB}$_3^`q|8#x+SP`2gB0
zE|+ufr{Y;0032)WBcz@r{JljvqK8<fvH12?U-6s~rbqmf%?5y6?i?W`B=og$t=zVU
zcdOF0Ip!e?zZ0$kG2c82Ac>k|(Xgt*LC!9*>>clErn$=V=A0(@r)Apx$Cmhu){}Cb
zT@}Zy{2T}<DYoCcepCAXRrACdurWwZAu&t&;|WiwdMb6ic|q3X*agS~PY5X2JMH|Q
zBmVDlTjM(5ueM|hAANEUWvt}`(Izy+k<*VlYL080_6ruS%+2psB18)>rvYYkws-nt
zD#sT<T8*p<p{`RFk68rdBelXS`mpCiE+uPy9(1}Qbl-nSvJi!0`oC+yByA2ELR1-=
z^__vL>sJGcD54tCkH_4AA~Nqk#(t5R9aS-sH};>*9;PTH+=1{=cA*)|S|DDP&EJ1d
zONS6;JbkvYg0RuYwKm&*x!E|&kjViX2Vlfcw~-#+`h%k%sGjSyq{VK4vK~UflG?W9
z>>pXGJRh|j1wS3X)eP3rOA45!K`OYoTYcJL{Z=hrT0diAs6JLDD>+03lt1%C1CIuO
z=p_=^O0vdhzX(wBmjjXYWMvA5{?HhopVy2KvXrfL2^6QG`V>k1LRA0|&|YSc4pI$e
zW4(^YY&iqUUAQMhPUR&a+2~+{VJ_~SMtdL-*N7q_?TP9oF_h#L-AL!p#@sw~m&?gu
zcaFQ%^9MR->VD|W#o&+^e*WO0I>xpX;BNvzmHt}*<@6yY$lweEurE#@4hQ!jWm=fX
zYjQk&m8Z&tVx&8cWrj9t-}sa;sF4k1+82ZbA4_9QcI1S=3DB_uE8eS|dTA{v3eAMN
zNQC6O#WahAg7f^0YgDYVb~Bf;tlN&1e`!ck0<=_Y?oweo^p2o7(CI+X;b}ZykWg>F
zeq_|6iyJE~H$qYMIP(!cOXt7~U%;$p7}|y)Bl9;v#VD0U3yW0ohsNvMV|5X)IC_C&
z^aw~QnJn4B)2Sz&>;{G^yXjA)$YDvDWTry=@6TStfuqex^Fd!zPOHq>C0~>k6P2s^
zljm1m&QpTK?aw6v4Zjiw|8d}U4Y~U}r<wMJRIg`<8)~Prq>$+=3R^DirGox{ir7oc
z=r+$y(5h!k{y$Ee0L5m{^+wfn&-_(@o@hVV)+q_-dTK`qz3H)$BTOX-e(NccLy-3@
zCH}QZpl|NNxa#>|9_$As2yYP4xk~!zcWhGr)*$C?_^7amloC7nbFr6C#=1`}^irM%
zwAZYV4kV$|>Y<2Ne!ZfOAI)^6?((Ufo_VGJvOH=ZXaM58XVm#Uio^nPvq9a!GS;ni
z)?Yk7B+KH{x+M$j=Z9a3xRz36bVA{B1?FZ&5MytC@BW|fo)-WoVTfYm)}f+Y&*yo3
z47(O1FriA#WX$<;^E&M3pG__mHA?5G<jhvST23q}qhi-~)P%}ZQ)g>>u_wTs41>C+
zDy>8lwM{Moc+o5|1iuFe;8SCxEH*%?vYq~ud-dv`%?fJSe4yL=4DZE>J?x?0;o(kk
zjKsNUkd+@oIHG7XpzyQ+0U|QZ!C}IOQ!79NO6~+aDNT6;>wq|r2;mA^_0#FXQ-3W(
zmJ$wL6Ps)MqX$0z%$Px4KWJ?I(jkIN|1tm0>sLLiRpxTlYPWEFxL8^1+bt1ip!5Qt
zIfGkG>T7f>fuOI3pDQ3s*jVWDK+^<%%3?Nw?z8BaFj1ABY~}dh0^miPqIZ$l{6Ld9
zT;=bI+rQJx*+Ot9)G<@vcg5T~qAjuf^sXCAfM9Q*u^k_gEbWZCo5j|aCdItVE%;_O
zRAmmF{Vmy0pcnI0%8OC=RWivzygaPqVxw6;K8fA66Tj!GU%md{nm8X4-HjCdpt0V9
zh_<U2kI4%6Tzs|PQ&Lshcb@`Sn?j64z3QB2=|Z-uAY;`P`>Im@AKljF4#P+-Yd2!q
zC_XpWNt>Ra+G7IF(JGRN1vVd3K#EA%BZ&!2N?|D3um3HxUSqV$eq5bO<$n_o@JNNa
zO|sCj+D=78k><J$yx_(>P#zwc!d{c691NJ2G-%PPo^<;=JiIO~+|N}dVO8NcNu51W
zcZ93!(MutDLkvqy@17i6xAhQ{Qz>VseL$g#gVQuVc<7N}ru^~?YY@UBlaas`vRsJx
zB<IQI9Y~S)KLRMrYx*BZoE9mgn+|X#zpJ}H7|6&-I?&r+74AnC>Y4$|p>OSbFO)Yw
z2i$e~K&p@QPg84j9kaZ4>?8)!r<8))nqtS#DeP%9Cn*m~Q!a#nXuqxw@Z5JH%NDcc
zgw}?+3e=X{^8ny(e0V3{)1hz$hQ28(*1b+8*%gQdwi#^Fr{DN*u2U-u%n8_ro-{KU
z-$kX{tAJy03^I;ld5)S-HsB8`b9MS<avT{hfh(&|Ht>yT8CVRfS3A+ajJEk^5;FG3
z-70O{2)?XuJ!pJB{H9b#t@2;7zT1~&y8!!*{;lJM<<o`$A1Lcmt3odwFgczwCkfiy
zkK+cGrsrL;ggx1Dj;BGuDIw(oO4@7?M^)-Svo>k|5|Cw5gOT;>oz>f{f==AnfQkUk
zBH$Z*fUI-y$ph_>3-hU@gYpHQ`W!4sZSF$l?PH0Vr@dE1OSGi+8+K)up}zr+s&#b-
ztlA#eC<KTQQeOB!2h#@rfo5)M);<hKx&wvb%kVr%;PoTCaL(71fE*_=ffRWoj0zxQ
z@su--aFiCZ3<>sr;?(Bsp|lbtmWeOkzqNLqcr%ii$H%9A(0CYoHd(h{W7m!Sq1T3k
zkICKa|JY=^)8heR{I4%%TLGuMCe`n94Dvt`NIBR$_yH(f@ER|954HIJKWf>c$<T_(
z;v#gglzR7Yw($iXi~2Ue)B&iaBvkZUASOe3VttNk@Y3;hu0&Kp;P7T|mo4Qf7r=4N
zB+>{<KDvw0ecXegS|UA5z5(#|?Q<4yRRT<%Hu|36zIj$n%_TEkCB-c0R@ZMmgDA~W
zAIxG$fZ7=b@fU79|82Szn#!M0bKvTu^_?==`9UTbppCHZ!esCxCNyPlQm-McrrXV>
z8a|o!S&vqr>ivyn8DBLZQew?&gQyn8IR$0R)a-BSITz|xqiOVFKN?^Gkl`QQej<;T
zn3bQA5|b1?0mwaOZVI(rPQP5KTm$0YY6fPPz3GbOcuf|yQ#_gQT9~wl4`Mg0=b=F$
zmF_Z_ki){KwKDeify8CKsyiZ_Gvd*DC3iRtV7py5F$IysN^-KxL`imAjq4|gS2xbw
zdi4tXx~4xQG=#^1k+H@Btq^zKyK*R%Z~%VQ8|bgR^0P8BC4kPWogUSjG9e9D)uW1f
z@-=hRs(HG3u*rrZ2ajfWS;_Ufq9;iSPF{*1Rj=g0K%*|K98}lM$odoQM8qm^ma5LU
zj8E<7`rqauUBz_g<=3e7(N*>uAejC$Erx1+tuVXE8=TuvfOdVU`slrQ`l&}LWT*@^
z{z80nSOVrW`KA;$4E~+#0>g4>r)Ju9AGpm-0aU&Lm(9;&GuO95_e}?pn_ZU;ZfvK>
zjIRr{XUU-YoeQuB<OjTB*2u}9=4O5qwljTEic-^jIp*BoqGe$`q#j}uRPb6K?2=~V
zUHiIttJiU{F@f}M=O&+%12<h2lcdP8Gs*LfQ{n|7(Zt}RO$=Hsj_uig$-Jql>XlDD
z_+9aesVlmgRaK#<3Au7#hjZU;T?nZ+&aqZSU9AJPkSg?AXtDKZ76M_sXTCI^hX8W+
zH^vP+X24Y8xcWW4(Z_mFkr#<QqQWio1-)!#C`#tvgR05!uyE^;)?U!9w_CBP{AGBH
zbQQz7b0ad=|8(pJeMNANMJ$q#wN1BPPLr{bD0S~D;LY6^;?0>*#B#6-BBlXQJ1JE`
zds!PSE(BsXj9APN3RphrL?X^NUk^qA^{JkgD0t;tXz`--yQq0?c*D@G*VNYVoGj60
z5_kh3Bjw58d`z)NX3apPzEwChA#j#wT-2C_XNkC~HgWDXkPCs9bqeM&F7j0MrKg8a
z?r&@_Z^DilcAGm+QkSNY2?yNu6AL=@99W1Jnr5GUK1ql>)2dn3E<ZAJ)kLK^6^x0X
zMe<(bA?9b=?g+1c?cmEaHaaz1+$WBf*9WWNJx)Okt1GOvJjKE}&BO{{PrmirC@M&o
zt#EMD4PEzx&uET@Gz@-)jr#r&0xH*qW@e=hBe2n{JFM3=Ge;UQi4B1UT*NL9g3Qq{
zppZKGiHr$b)}+r<T<U$`x+hQ4o~wu%HPCP;Li=twh1dC(FY5;&&+J(7dn`gzN2^64
zYLFd0PIv0Tx5{B_5x1v%wCfO**7xeM^xxlqm^cB4ohajX$YU6BpU(v1<N}`+pLq+)
ziqBQ&)ShUSV_DIBF<%x3VqF^?&L7Ka#kRVP8lzVy>(gXvBwRnbC6+D8$m%=y6z)xt
znYu3doRnYUi`nPOsnL=8;oBfjXo`p;B-_Rxy$_fS1N!&1tj4vB`zt5DPcS@#IPzx>
zT;TQ8HJiU&bl%lF;j{28ucs)hTWSHT&8K_RWN&G6KUW32P1Z4Nw|#oMsQJ{USUf|W
zQ3*1@r|?Gi@PS!7)4VDRq`yk>PpfXb)rp)~F;M-RAKlilImtTvlkVmligbHAsue@w
zYdABldQ<29wkdWgjd-#=HAQ#x^?IC2rXF`Hs*2<8@=KDT)ou&PznDbb^4Pr~%R!If
zI@|BgfMTCxRk<O^ofRXvSrTTnV9SzubPNf&yc6?oTa~n0WEm@A&}5upshR!W!^kj^
zGj;8ApM?q!(DS)%@^&;m9E86!LnwXC0`4rc4p{rmf@4fbEi?<(VDB%A$TJ@?V{VZB
zk>GCws6rnBl>xJxsS@>Mk#W1}4iR|X^YC5f7rKYrnSbWIQ(0cqkt#-&z5^nW3j%_P
z9a@ej%L<ZZpYsZUhN{3qD%6pnMVKAzZ(c}WBp9bAwB3Gv7Z{5Rh7q<MldAO{9N1y?
z1&Wt;yEkjoa?#ST30v35{P;y<=yKdmrDLU7my`#P&wi^HcBc-xM0KY1VwyH6UYWjz
zzhpoEo+B{wh|n46rZBtIM@T=3bn%bz9*P~iE*&<csDWMRHk^G*z@JB;s|8HD)y?ce
z3Fjq;7QSC=&`+k1-C}o-4u8cXfC{Ca*0~eZXjuClxci?SwwB%`=LznHWD%7FuKOd#
z8AH!Ao<WOT9LTRpAvnQq7wSVgpOQA~;#O&Qh^f!NhF3G7<06aku9+6x&F!#AYVh*O
zw){UhVKI^MVTS<==iX2KVh_B<b>0kT#az8yJX=DJQN79F4_l$>{QLw4#mwh!<Hnia
zA^S2|H0j|T-qvx~Q~@><bf8w%tid~9zs4xI21Hc4>Q<XZ5e0D%<!$Ug;;d~IW;|&_
zumQzdXW09UpX#F*ks%3yKa8JXs~ILKDO=hq{Dd<g4Fi)@tLh%F%bA2rsl+q&XR!d;
zv@pg`j09$lG67uWbDKc7%+v74uN$IBGe9<#wke)})jQ_|LoQtcQgNp+5-><WTE~$}
z+f3s2V4Ct*X=DnZ1YRzlSRt9cXf(jdkav;vrftz<ig^vPm72jPF^Frt56AIh^bNYZ
z*pn9}MioU>6>!lMxzc~qi(Qnb=E2eHrTo$V^t!7*QQmW(o&Z*Y7=yG(lUzUA@AGJy
zw_Z_W#KjXcKaQ+^_Tyidb;@OfkR%nT@0i7%U`&Vat?;(*r0>5UFDYUEo%zpvWX^n2
zHj<IAld}e<(7s|8*f!K%(y7R>Y&4GieK8p{)3&^0iL=lS#%l4OrSEg4z6P$0CGXxD
z_Ka$H{5t=GoXqJ<DHtrQ06g3&r%%ee*R!)(^DMsz%i4MrX!;9dkkbDAiy*JLOdk&8
zaBiu}Bq1iTRvMjHPzAy){ShoSzyu#dghf+?tejugevDh?JAB5Q6U5-XbvwZag!(zU
ziX5;FU!X(Hz7mYcX1D+B**-Z8LN*)Q{)F-jdI{oZRu1MU<Ih8why-RGnp{v5cOlMS
zXJ^`fC61=pB~1#Avz3tra%D0x@XV}hbhWsa%lz__TK%311ufC_Pl37x)att(+_ogb
z3ejTH!<ifD%sMVZ`z0d41r4gDp71wB>10$!D{E~R%8ZO7A0)rmVRTC&AS>%M90qS9
z3PZ%KSIZV``>ZS@FEYUJ*(;$4Wo@i|nS|INIT)qP%_)rqlkaaQg}A(sW_P~&QZRba
z#_V708SJQLM~w{upm;GUFQfbHK&T+apCnbP0dn!d$6q_A;Up-E!#AIW&xj<zaoH-j
ziH?4ofinp3ke&gxs!AZi)arqav}sa6V4I4n=<x;|_sP4qo@4xcTCxs6Hlp6;1Eatp
zNl}wkw^Nx$;=RrBy-UbWN^0y!8nv-38u3OKB^x|jy8C0suNVZKM$BryS`sKGJQA>#
z5yX=wagN3E`K%MRg%BWqH6CN3wH+%Xe=oJzwt5*SkkBU5ZIk6J)P_i&=<;}{escV?
zF8DD$*^Yohk<YIxO%M|~362&k{_6Kp%ib3CAJEs=wF|Zek8)#kF?uMXQ*|~-W2v7%
zuJLPdks0O;vhc(eqTc?Tq^3>l_vD|`S~yOPI&mN#7H0?$L}xk;kr>^`k;PLGJbJ<n
z^k!lro(cPI13M%`e*s{Asz!5*3aYf;{%nXCzd%5+0k}x9R04w;3AwmRYAfm-q!#*F
zL!M5ly?>U_Lrf7Bt)`29_NxqM&j@0MJ<G&wHgb039z9N0iW3J4ljAq5LZW5xTNF@V
zJX$Sa3DXkujl)a)p2@<7iRRG_MSdiIZ>1ID2+z0`dY$i)p0ri@ra(y6HYCN(U0~~0
z#M~;e?ff${tnMQULy9!jDFQ{7&&AMILSxT%7L9%_dvTsAzNOMLnlJgR#b2wcT{0QD
z-NGd$jPGwe*n3u5f~hZO->V4sY!p4IBt9c0i-50ogDQHH(7eAEOlPbPyn24w5;ZGE
zY5l0EUGj$df;@hKl}33l*OiF;0Wh*s_<aH@eEsANi(dowRl}!Z_!3)%Y=9CIn|^RI
zAP{&Er=vCg0)q4YWgu8d#8b(rOoNETx)V5vB~eL|oS%Mmh(yL?wz`)UG}#gYU_cl8
zx7-ZQQ#+^_`moqwA{Jr(P%6lW%qzp4t*C0NpyANJ!`+B0vBozeWmiZ|XtIKs=G^sU
zrr<tT+?^fx1`;VX<osLn2k#9*;nrQxt1IVo@d<lSQF>eOI=2~CpIKe_er$8s&Cfcw
ziBsNvy|B9MqPPZy)PBa>csqtaxC3pGs)RK6{<JAo^`|yM(((0r`5v1tS-)jT9Rx3E
zSKC<b{2J{Ci7k5}q}ZOWfAiL(QhxKEO?b8Nd=Q?pH6W0W0YWhf#_AAVp5NtY5F&*1
zj#<4A;V|c%?b&Sc$mVPYDk(@d*J`n%JG}tthhSY%-I{KWt~&bnukjMoQwj=;>57RP
zi!wkF=akslF?Ow38WtPJ+!Y^%%hDCWTFTTvvg7#Ew%E32{Sw5;NINwFKwP(|XPiOb
zUeN};fsr+S#P34yA<}u1EEBBT1#V8fdiAdIT|h`?bqXzBxY&J%Utm8m9+oT&52iub
zz0PQP^D6(C3Mx#-cv`U#^vu{gVn~FBGi4b!_^CN8`axC60{v7lq_L2QCP!+nNy;%7
z9NeKxsPZQ(5Tj#zD8`5*r-Gw|+Jb4pjVo6x2ep0eR5`qBi+#HC-4pP;*>g1VQpgAA
zg2PV=n)ZFnnJlQnTKx}N58GP)kmx#NoO!K|I*@#BV62nGfD!XATo#S}5NRqnja!kl
z4K_R=q1tp_MT1yF38Ly*es~Uj=v;bPm)Qjo*$(IoS=^5$1By7T&^M!~d7nu^(g(Hz
z^dJyd>Zr;Gp$mT`Wm>13DMj!gY_&Vz%!Ds+!t^id0r{bxg>_u`$}HoA`Vs=-OF!SO
z4PuZ{NWW-N#4HM!T~sI&cy-P&KlX&RGK!oCh~xQqQt^SN()dZ-`i`2fMDh$yTXYRQ
zF{q<@m81k;ROq?<_}!Lu+D+tbH{#2w2}tHWI>k?{7vix1^xEtRcZ4#RPKt<igE%UZ
zGKH49O7=Lx@?RCK{qmEoDf=8ZmNK97@YO_r{!qN=JR2KMvA>>bDxTZGIBS8CYl;3^
z`i62oRu;RY0G<#MMvZYz7CfRB=oigm_`#UUy`TFGbslnuA7&eNC3IoCytf{;|EHrP
z=6zZuDcu@%U_qh9MQ#?J21By=w(OHZBf^90i)HGKx2w7a69b1<OzMW{M>ePdNYN*)
zb0DM$S#`oVuhNLUb%+VW`RE#0B!RgTyN%eKAK2%;oaC0b_^7%jS+Vd_2{MJLjNmUl
zgubWF=nd)qjRWthO>|i`*$NT_I7%igX@vz;uMX&eI8#7itdrrg8`hcmF7_{aE;on9
zk$e2(3Qr$nQ)g04>$_Qxpwy=99lNS3_b#%lvv=}f8N4oZj3pKlc{(S@5(BxaXx<}5
zF>w(!J<h79VnDp!u)WLt%}AepD!pHYU8}&;GC5)p3y=N+Y9Wja4biJHzuMj1ToSU(
z_1>bL@5imSof=Gk$cdK1C<AB-s*I**mVXj{A}1#=y~#QoOSv($OKYinyQs0VI5$@W
zcAlJ`-g40|9>Jhdl97>~6u+(wpQ3z~uq)gu4kZ1*Mvq{4Y~Y@spTCdXHeEX7Y65QG
zVxl)c2`}*BN|(HF49s0m=9W{PJ8)-{zDoh&^wia}$zSbm%kql_v(v*8OGZ_4&3qRh
zp-rkk69ifcS0syMJ#Ecg@Gu?NuN_tQdF97+%tn?VuTb6^=Q7t6@On6gdsZ={o8PUS
zKZN<_rYQEcY04<-4qBi+mpTj~MRX9Nb)n<4t0yyz9B^L~Z+f&*z;zhOw8cUI*^Che
z2_t4Hg`pcseJOh*W_TTnFmr}|M+ttFTk(IH-@Mu#x2^LXlc3$4WewED;mq#JrAiN~
zhKy>@Wfn42Td4%eL(a%oED-S>o>j{5|0r$iYwLi<!(JFROKvb+6F|~Y#A{{#{KdiB
zGH2?#t^igOrTJNl%e#UYP;{btvUgPJb4MK5#{V_b8w-z9=^;7N*Vi|-T=v}2$%$3T
zJv^|h-yuSIu<v|LF&F5gQ}S$&rVCHY;jPGH6*DX)j~k5w5$BoFaZVQwT!9CD9cYvE
zuV*LFp+^;%TL1=LlbnU@_L`|z|2fw#^$xc(a@obj(+%iQf<@E4x(b3}X+Qc8OPuQ8
z-Y%h10x7)c{@r~u91+9FG#!M!<=r4#c}ON?W?emWu9;44-*?=GM#scdq;HU?8nMFm
zF|)83g8g3C{4+E?34iQ0Ak(ep8TJ57zKP^lqezf)&e%NPKlGs$?X(^B8FG0Js9Z}P
zH$aJ%-o!6ZJV2O2@S{_KeDMB_kF3JB|Mc0l5DwAt9~-!6C>%C?LcouEs^eRx2gsAN
zkUl7dM?L8Zne%KlOFuoapRr4hh?EhsKp)m~wP&p0NY+2r0FI3{#v!rb*v*d*8$bSo
z{O6(y!e5ehn{ClazLh_n_ojrajfw=CDgqucV9!wr6Oc>BEPCS3$tIB@yvgD4bY?x5
zX$x1<Dz<UW->foA(p;?)uPYuSFf{Emh1rA2Eqc_|+_{zu;&=sN76|$%1-szDBNL6t
zhrhH|`|l5c<R=@hd_USJ?VpnvW*;y+dpF*WBN<5c{lt%#ijH*p@6WbY7Y9&JEysrx
ztS_KUGfH#*CG2@4Z+RyLLo=CU-f2jiau2?(kEE7AUzU28rwyRWA*l;=&+E(wdLN`H
zisonU2U+PD=mzDlV^o%!H6<Aa<yB&ptq+Y&sPX>2vn)h>Z$(p{<3^;iX1={qeogar
zdQz^z&y_{5Z@D6l`7hd%=@FB@J~^k7JL#imlirL)4-zGbVyQ>>^+-XXPiDwGMBtyL
z!<~a2dqbzWKRJT%G@t?Ymsa*qZM<-jXV$GUPVwl8S?T<%*U9{IErw2}e;oS1sEeNU
z6XO=D1Cg`tmuU=)G)@Acu*Z+68^So}I%<XYrj4?zFS9vK--_i-EuM$?y56vzzAljV
z)>eIMU~lkt8p$rkE6T*p#=g#+<$vcf(y0fTB6Huy?>QQcLsPCWw-hQaW*?9eaTv9z
zw!aEVAoR@+&Xt!4)MtNFdvP>4$IpIiXQY!Txw*J7SN)HAo$D3otS&x2{)`y}TD0=>
z8%<0mSf*>&F3;PI%r|}iB5|I5VrDtRApd7P8Mnt+!Rs$SBygt4sjsmYe$ppuP3>|S
zY#Qu;IM<5%tSem00WEi1zmotnO!jRV1c39Gd|6bBT3S^W(5Uc8I)sIUtn9TJL>1%6
zSjcUQ?HxaS0O~H1T0hp7E%O`jS+8-waF#F(nE|<G7#;*1c!5BmLM^U7$T)qCb60nW
zdY!q^T)WRr^QhIPPqz8=p$K#{#E_UjV=A5B#P)8U@NZ3xjrOw7IEa;=K4<G(f{GxF
z?%D$ll%}>FtG}(T@1UsOP8lb&rS2dF%{#aQy&Y8pUXf<LB+0avjHs>`Q|HVk8EES4
z7eMH6U!j3`*vVKxVdMSRA2;PMLQCe}S2Md`RKqF5f*G3VM_NsjJL%CtAYFqH->N&L
zt?wxK7=g08lE7(P{=L7<7Ek2LgAPi=!Xp7GzTdbl9K7!2692V&Pm-9<FC!y^f{^^W
z*X0{$qz1;|Zlr8(6c68bDrx5RHF0R7bjo6EdOl!Ya0mm1{b4~v2k|7a@hd7T)SV3K
z^Agv;;PcI2UQ-zlXU#(Zk1J+HHx-^V|2bhct&7%}PSPkkw{ego1o4nR`~$B(h<zu%
zrEDK)3#865@o#|kgkZ)r5yYK`5&+LKh}UEN4L&$A_3mNX-D37-IUn^s)_p--&xdRl
ze-4b@I28m;q4pB-58ZLL$)xnV`Duo`CW8_<Upp_zHyAKc$oHr3H@-L8?y}HENaZxr
zULu}U^KDNZ<%<A!c2dwvm0mFhX!}u-0rOpobZC_tp11$z2!0akqgX#X@VG9Q@v`x)
zht$m%wrlylP=yhCU%|Ta*#;J1a6iy6K#Bt!x1%4tU)rGr1zzRD#lE}@nYFuRj;Zzp
zW<RWZtIjW(Q1yUIT-kPS&i??pG`jLHDG{wJNfi_(@-TJVPl{CI?j`G5LM|Wwvo;Nx
zWsa-cj5V!LAOv2{L*M>AdKs(icGnkwcjUBP@ExbXNgMM-1RY3M+$$Ul#1pMcZRih;
z!S+9cR{1tJDr_xm#46awHIyqU!+`;S23gMXrad7iRnVr;{Y++88;;*^YAo%iXW17t
zFhM-{|1AN}r?<GALO0CzcPae7Lh4XPmPPq`-`?IPDEfnmJ{^tA<&1q>=u4l5)5XJ?
z1KChhf7{JoY;zo7`u<x0O^eT{QFE7rfDl82YP<bK*AQxx1MwTzhv&mYJlgB$=>u*K
zhkUZPe#;oar<}^1jCsGT@OXlC$2LJA2MI?XP+{TVL8!Zt&G5bpwV@BKufIgKb%r-0
zcCembh319<Fl2`aT|PHeXfDr3p-{-gSn6GIUN_UE19B5?xgQJ$Af7}_To6Tih(997
zo;&KAaAfC&<Zf)X%fHnNZ)YgJi=nef@4gN#V2OwR9-FnEGOj`5QR4u<gwkp~CZ3#6
zJ>sqw+UqK^7U<P{)Jy^TKqu5eTGP^KS5fKmE%e-*?`rU!t0-uYtx{oC_rCki-0dz!
z3N?Fpp?N<^skrA__tm%YVb1fmxa4mRyS{Aw+Ekw=R9UMh@PPU<L;BG1Y88vHaDh4d
z2<rS;)z<1#QBjt&yGw5`boEL?_^AU|EY5J&fQRU)Axc?1bTb=Gm#FAl<bJ)RU^S^`
z+FQbL2L!x%bKzgLK>dI7T2-FMuV7ttr5Vz2Q(^trL=6RhGCtq^G731evl?NA?-n&a
zG0x1051V|tp<&#UfT+g|&;7&0D7^XeiL%;m0pUZUA+vZZyv40|;|i*&Fo}v9{BOm7
zj2#Z#T{4S5U-Nacb0hiSokQ6)#`82KCmsZfjmN|d7`zxR^|!P3m-y#l?>Ur6;GT`K
zSeRAu<3=?`VI=mY#igx(!^Dk$o!KX*hv}A4I9^S;Ejp~Je*3Hh%3J@eCg-MVVxir5
z8yz2{OEpPQ%w19ofj(ceefr!dmyTH&p~giRc0kqy=BqPvXlr%iKVu)>C!hOrc#4zk
z1!biLMj7_UlbqpTSnkf(s2%^e?o9QabclrUGn1UBU|VuJ6%#zr2X?fGii`OZN9oL~
zjnTqJ<YfHfv22*n%ARBUXiBv%Z^|g~6C@-Xe$vf9BM9GI`o2Z{VI<G#VZ`jnz&~*B
z-^*k@mXLxkVoY((j3~)nlm|QX>vM)z|82FVPh`vzpL$}O8l=HH4QSF4f>|!<V!Hkg
zv`BRmJ|&yOpi@(?2I#eKXY`kKB5}ZKnqC<`Uo{>nDtOj%sp7Mtw!>b^tVne*#(&31
z$xzSGP|(6s#FwFf<2YQUgZk2kcic?=ce;jizQU1z$+I}qm=G3MH@Cxo)c@PX?WVlQ
zz~3ffu_mFH%LytH_?xwbBbwiOK5;m3Ci8+Qo}pu!Tl<4~p9k?}uNQZ3#lmu*f&z5*
z)b-hSuWy*ms+m2n$9^)$`Oqp@E8~+q3^A`@w*UHImy3JP*V5O&eM-ZjtX0>uyPXsd
zxXskiF~8RZ|8=y`Bx9c12qd=+0<{j`Tc=AHs5=DvGNjHDi-kIqygdEPT!)3LFb~+%
zwLchExd^O)@38-t;YIp8__y;KBT-_@pV2^z5tz7|FBZ*P|5Q1TXzOI!vUg)Ey7A5r
zvP}-BUzUq6*e!Ol+{&yfm%qGW_P)Kn#eP^B`u66>3e~G2DZ`HM_qnCgE_ud>(^EL`
zK!wi0miKc0of3Zc;i_mt6q_gEL($JEpC{v+Z_3<kQ0&8ZwRpt$kPMk+H(?t@^Thte
z4RHAY8>wp9V-Z0{#|^t3+0y~Hr^Gh(dP0e7pLo<KU9eVSf|6L#B3_LdF)wFX3L%HI
za^j1WFw%%D#fjgPoU4~`YQ&+6hwk;Z!8zApBpqOJaPU54k4t&Mzs`xTe#*-^oAR1z
zFXNx9%=9bzatMqZ#FGsC=PHZl<@<Y?_4)bMWyERZKkZDfeDiv<w_-!mC>a$OT^2u{
zuMZ#6B`|wD{M+p9yT5gzgc4(<&0`SDB}NIDHk58<;a>Y7gBa9d{ZF)mRX@WJHZ1rp
z9g57&<hnv*ur}tG;W+CaG+(+e+8V)METXzTrZ%B^uqG;FukPRuz6Bz~xr`oM?_j$O
z-zy2)=r(rL?x`H`bpe_%{S(=R!_V7g?0KIvIIA}W&}y{x6HJri1;~mB=??ZpSj0B9
zG_7B9m|GO#3q8`1i8gVGI(Uj-`)I&q$((C)a#<Tm&RZm`{4m8LuOhmALN~ejZm1@0
zJ~I~?&{Z4ER#!h;cwdch5DUpbSJdNB)Kn{HP1`V<Ul4ggZ~Ct$Y2&J2F*JLxgj3{t
zNHKIjVc0=L&Yu6dK>zi$+P+)1?61tbx51oDT(Q_g{VR$leLbVP5ONN>LzT$9Wl=C+
za4;yj&Ip>=Vy6sS++0+RH6K|*LtOYeBb>6~>0!Y{z`)Yd6&f0ElbuXs8U~2!H)ESC
zaz@=DWTfrU>K5Z1PR0xr5ONTm68c8!V?6g@7xtG1JW53d^qOjkL>D;{Iw?Q#QtTO_
zSwM32WXnF=p|R;tzN^BO<0mdPu9(=N<BzL#oX=d#+%kXv-rd5{&MSoSf||2i!F-cx
z%Xg<JDIaLktveWT8u{?Cx1-vfpL!WI8x_+^The|%{W9)umZiw`-R&XFKc0|``9EK4
z+*(tFXReTnNoF7;(f0W#Yfrz?+$@GeKQ=}9#Kk%6`?tgk{c_PymHh7wO*LZ}m>FH4
zzet+-VlX^DZ6Ljb18TToHm`oGQBt`!+Q8^)Xjmu1D>F>#G|o(~kNL1O5_EkHFPh79
zwsDiLRznYygON$KqXK^{0e6RsjD@jqnh5xyeEtTp&)(A&S=~E}dd!>DTNKI-QJX;2
zeedVRhdvkCu%E}8aam_ak#Rq3@d|!?rS^vND!ih{5P5NedUA24F!(1V=qmDQ6ST?P
ztP$p7)1#9-dP@nsesGXER%O9p^bTnufw$%ZrqoRA`9y78UPFs27QJ+N1nT_=dQZ+t
zm?mTdU(#;=D=jKzKSHRL?YdD<F?Pv1^ZDC|lVRo0auw~Qq)h$w;zoWW=acn?>c<#f
zoNabrG#&PcLYsmGjMw9%2FHoJbe%|nmlpCZe4!0d?v}4#c3IpkANBKJtNZ3^AF2^m
zL)-omtx$-Jh5w>&C)?lqeeLwPt=DWW{lAfK>Qvs5-u5<px7-24u;FE)YsX^MI2oTf
zGNnrXat^%D!(LjS?M;$ElG4h<$H7HgSFXIop<!yMnV0qr!3?O#{N~-K6O%w-1KQ@O
z?~T2en_(VWu$1pvBH8e@p3-;~`G4N^IC@=eY*T!89)kpusXDxM>dlvZffoZLNsM2G
zRVUwkxyz$te(arL2^#EtsXUADhc@pui4Uw2gZ|ZR9GQC0Zs7Ws0bWUA&L#iT8`nzZ
z^~eU83LcqnD;pdk^AuD#q!Gpt))WyS^*ku9uSe3i1!)rabns;is5RE7Z~u!JcHCzD
z&CyIfw86Knv0O$Oj+?%IpNa9XSX`4>U+(4)D_x-^3Z!gBRO5HP%Vmcn)sUc2?1$JQ
zm5b;2c(Cge?e?K4@KKX~RW27+oa~?wRJ5T{G8Grnv%j~e8rsnqy2y2R#|U;cGy<$D
z(#{=L-x)FA`I?UTF5lhVomCfH;w}nNG)eJX<SiU3e^LFP3-vy%sp%C`durnpmApQ|
zArC6-{cxxFs207NA83^z={u?x3R16c=JPF7zmH{zEChyJICSG$ws2T?(Fh!Sg+*q3
z7(XQVfLkLdWSrf}_-Un0gD~;KasLLA>4O-&!n@e|7w<*l4pP^#Ln=6AjGEh3H^XlJ
zi5rum!Z#%bkmSrEhQ`2scH<z!pcA^8wFn`WcW=+ioR!I+JcTK^<p<tHpB)ENkK_RN
z>~_%bgb1~u#nZ}R^Y}0RX|wBrNORxp=7T0EpP*n)W$-Qizo&sMJ#zNM?YpcKWd`ZM
zh+REQd1L!7-J{89j28{AHlv$9onM_^F%g0!oiR!mesZcTI6;4JC8gJTksLmJKs!kL
zzW>=@U^X=1^B{HdIppHM`NCrCTYFWmdDFZw>Th{7p5aSQqa#UqGEH7^OMbf7`{Lg^
z@y!Bi7$@}ZHgHQJz3l$Xu&qhPa`*nt$<4oajuZbMOWz$&<^TSFN+k`7Bv~n=%#6r9
zWh5)vE0n!u9wX<}TT*0%Ly=A9aU7e2QyItJ92}!;4(DW@gX0{(+vof9hd<AGxL=po
z^}L?rx-%PJ|9vX_i1&DxR0s?7^gP}6ENnj~Dk#1#td}{l-qlnA1bPXE^`4A=;J<(4
zug+fxw1EdYB*v5afLm)VZ0j%=c;m>*Lb~~Kl7Wu{banSq7Yk_hZLa>}40>ofkXCuL
zL<^y_s6s-Hv3C?nzYnaLSn$%n($drM`q0jH-BdE-_>D@)ZRmD>2Jf*v#)bC{)}Y|n
zGlmgpE<yjSU0g3IGlj=rjtvy9wVo&=jSvq}Bm!O83RcY&{_@l#^}};ik>!rV50CY|
zzQ+shY|mE$aFEF#0IwjBqHqB2o2V%NU*RXyN~3CB?8n$lFRA(RnASXrlCl-M;8z1p
zE|SoZFsPeB<zpsRe5eLOS@9b%c!E~*pAY{Mx-%VuD!22BxdO|0{=3y6xoz2(?J97s
zoa^Vw(y><5yL6f7pu8gae5jN*blUe#;&ndI>+@<0Vf7<|;}77+4n1^>5u4Za34XGc
zoojZ-Aid2hI=fj`F0#P!L!)b@jhPCqSB9EmF8T!sd$<IpvcMONzgd|vB~3n(x0Vnu
z^wkvbnQV2Ym|}IQX@Qrfe#HsrZhGM9`(miTjj%6unJRowJx_ru?Cw7PJG;6d;gG~f
zpMZqS#aDG)$+>6=Oz8O$*>hh69*?q*tH_Kj7a5htBi8kI#z$m6e>#2ZKM!?udk5ts
zP-`o4+E))BFVho7;+4>zMPj}%?nWD?>?+Tm%QeIb_(Etoww7ATNW#o1hZV~m6XxpS
zAYU{#^begHu~eE%8!|YC9^#B5seIwfEM$|W(z1bY`o*yB>Yf&=4M`6>c;&K)H+HaM
zmQr;rMk}R3=Vf5^K77@4EXTXxneb+V<HF;57j!&y(R>68nF~w}*)}+yAu7juZSNPt
zB*TyXsgq>mX&qW4Se?*%hdjsTa;z$uuvclF$~{CFLWQnNVwzkI?{rZUAIwH~goSJm
zv?P?1LLVx$@ae@N(Q`x(T)iZDp8@px+N5IycsvTD2ZO;5AEx{{AIO>hphL@56#-U^
zoGSngeyl#{YVSIDf&`93_d@^8L6$js<&iIRk6S7$zSkx{H#cm~mK(=D@P8A~Iqh$s
zw#fMQZaH(t)ths7sy_oeN9+*_(`_G*2gC=0qMWeD71NIA6$f}2+sxL{a4JL)PN`*o
ztDpQ)N$6?Wf5#|;BXZ_q)M`U|+w);f?epk9nX1A*$L8C1Jtf1l%+<4(>cS+_7g5t@
z5(9#tF4x5%T_kO$!;k(juxt<qkZ%@oxzv&nB4O;&;$h*bL2FIyr~$N-BgriY6p+O#
zWN?HB&!!$-;jxBcFyvV4g<nTwr{YvVpyuq(dM-M|xvmFS7U*DOv-GLv%434be&7XA
z<mULl?-^<L!LQeY|7BTyXxiKTR9(=yHS|~Dz;^^_{8IXHcSHV74ZEj3U6q^isd>{N
z9}*i7au&42M$Iv;o_poX#+9?QX$Se^4++t)g7oI>OiRRh8nq%oxQG1SiHk@KT|SJJ
z$#Mbas!+olye>(P2-$GpoAJuYKJ%ZAT^E~p9<Yq-SB}&1I+&)lvtI~xspC#Bsz507
z23UPBf=B+Kbw`06?bWn1rxuzQzSlGS!iP+)F!BY59a?-k-7F-iG94aX-LfhBDoKEA
zO0(+%`gn>l%rmg8zqkJh8@JBw1A^=ECUsf3fao8Gi=bd;fDTnvSZcn-s8!dq-xKA1
zC0bB3db(&a#V)`S1ez+&dDb_ksD{vd78jd_PRjq7ct_`R(cVYa+jGxYZ_gxLG9<uP
zfI11<b51+T9%BS?t5S$HgDi4Ad=tvM(;42>2SIfXsT9W0OSG2(g?T$BOx|p4LDNx4
zL2YIQV?O*mmapEF2|A>0n@`A!kH4Bzo;MnqXr)tBTA($%BZJ<VmahKXm}MldC#R6x
z7Q>T2V|Ix5eJmu@0l_uD{;Q@aUYdR{FwZHxIdj_ZTkTkcSNp4#;&f4^0U^-z65P`_
zNp&6C-69vZG4;y}wT(>5k5Z{se5MG^kpK#G9Gm3$#Re;swBhS-O<CP@olSxrlKS#6
zNBj(+pN7jYK4wAgBT^+X7EErSaS@_Ze1RI8asOHU*2-Yw`n7dl0J(&VwYd3h{1g`*
zud9m~(K?rg4-|A6g{PiVG?!)sUASXDWk$4d9d@k>f&KHZbHiBw-~rhjy}RYb8Po{9
z(b%)_x`=h!>}_fLTf}+HYdT`hPLS8ctz074Bu6z}xmLpQQX+zw^}^-*-is+RUpP6Q
zBA_YYp%?R{o(dD~+KD|>?MtHwbzStD<Bd4psJ?`nv1<_5l2!e{bEma%uO?%{L*=72
z!kIXQTYrMpVG@qr`&${&O$eNNpGdG_QAtjwV%HpMLQx2t6JF}A^^tdlfShw?SVTNJ
zPDyf?rX&|+>)C?ldz0$Tz<dvMZ9MVJ#~vZ|WY_vk0d?CJX&(Tbrpaha3p^2*PLY@I
z8}2aMhKO$3dpKr;X-b1QKF^$-wvXdn&sh1V#<#xk%P1&+6?pLBza9_ESi8!UGObb;
z(A~NwK5g$x_36dPx!pN>y+17BfQh+I4?>+@GGo5kHf{C~ykwG%?}nj2i{MOu9kUk-
zs+nmvC{+aMDLxMkzvX8r{RDn6APlGJzLUsED~N{1M!rImDrds)b>&@`(0Ti@asRM!
z#C^WyqR))EnNlK`=0saE{&WYs&JA&Kq{d2DzOk8TygYD2{O02@7!5ByZXS>GU5N`6
zCQ@AFzu2=0(QEB(oZ4IDla7Glp*BVMk(l89e!b5H$F|nC4~_-3-`};&k<vJqwAgBu
zSZy&krOn3LrRADdKiDLbw4g62ocz$xXtCjd%Z<P$sC<sFG|DQ%uspi|Q9)kX4Fp<B
z4#a)S;HBm)2|wP5uX?w5h(QdbJ(9Noz@;lb;9X$-^qIFxH)^d9kmC%sf$w<4rh~o&
zUNLw>HVEQ_5rMXmd8&2h*AR=&r?i3a7P5tn_T>0A_X25a7*86R-6gZ*Ch8M|{JVc!
z@!`AAt)A{9EROO!b|jlBe0T&Ox+9F1|05_9E;++2KJfrpxZkVqRT8IM$X|#!A&89t
zgOT~r)A?Gn`f8dfr$E`pH*YfJTk8CGG`PmO1E9*8#VC5_H*S4vhohgxY|Ea~1~x_y
z@Y1bu`nkT^L`1y4J)<wK_JK1KLk7d6koI%dyQy6|arH1SPW&_TXnJGNn*<C0aBJp>
zY(5D=&{4E6#PbSDT;>I2CZu99s-6LY?qU(N_snfyAx7y>h^<uHzP5{RJg8in(CA>G
z%-!^9OIZryT#Adxb^L;9o<l%lmV^?l`iOb8n=G~TT^YL>nUCm#6iHOzs7i{;b(i&p
z(vM#7onLnQ9MncZfUvq-$#gM&_aC;cYQ!D@rU+HFh4B5ku_~*e_f{WIG=r(}(*ha@
zwO!KJQ*VjJ+Q(5rTh`v!Y{vc2Rok#X?T51cBCR$l*Kb7`M1+^J&V=sgG%rBzTE4_y
zn6weT|3f1$Sp(%Hg38vRTRG8=IrW9=Z9Ix|ZN)h{goQ?~3s@dWNpFBw=4-DsJlI5p
z)fT_&uW3m<&9@(EH_aodJ`=dfo4S|`-H=yxpZXh4qJ7&{8QwaWw}UG1ytbht7Or{R
z%M0|xIav~#aGcq;2)~Uctm+niIR>`10`N><Rc0(27Um-xA$!&V?;BgTtv~D&oVI#2
z39mIyWlQn60o47Yt3;NPCO%zgqJSJUO5c5g?<Euhq6gmseqZ{}mKmD*EC(g&dGURj
z)6IelhcbKbJB+o@HnZL=3BV+p3}PE`p%nCN13Ip#pwsW&mgv#@Sf!3nbMu-5G$}pR
z{T<SrxH{7r!E3t%LKkHp9-LgVBN9_tTHqsH^gs>E{|1gtG!u_5a_!T=(O=@$Htx#_
zkRPGEf+!XG1V%oX%zd|d3bbnGo%oB!yeWK3P5TNZ42Ag&Gk*SMd<sQVBlvpog0A6)
zuHOO;?(JtzUJU_%JvmN?xAh}l4fNfK;9K;J*TCzMCSd!+@*~)rj!Lp`8yesFVZWUh
z_n(Wr7`iZmO`3f<V`b~${SlFXs}@$>VO;J4Q`M|$Svl7)5F)@7O!`VD%y-}hyBWgh
zm}U6=r}3ekiz_?W#pgz?-Wc*5pVKQtEHGC{7|SdS_8J`zTZasL=gG!>^vX$WDUagS
z>4p||<?d~gN&aM<igQSHi)~a`lc)V+O#`m4ZIO<eNPg-UpE^Uj*cCJ;(qRC-H<Tol
zoESb#1pz&2rEdAP&xUWIZjn=U%H_-7GaryMt>Xr0%=)bPmmlVX1{1ow$K`4iAKBBp
zAIK;xyLu~W3wxapJJ|McUT&-A<l~ZYZ7$<`ZaHJ_R5N-$uy83TY3W&&&6)ZLjmDm5
z1_oRJB*@k?GdG7|o2up_Hy=WXvXIR5udlIf{%m)196!SH48QnNpT4c0{XL&(X=y3r
zqv)T0N=;5qu8-g&_H}5>P)1J59hi(IDnOuuD;{Qi?p?16qlnJ_NrEAWhttcnoXvm#
zqljjHlGNk^?j-Cx;N8AuWMrriK6GG2rO!QGr7DXT<KJi913kZC^YRo(=a-LJ7A5cA
z=;f4S^<E6Mm$WlMnw!{8x-D?R$31@nHAj+_%E1W@=%y^OEp%14$K=&?I{|H=stbos
zp8-9;K#!NgoQ=YKACMp+U0_9#jlcb1-x~(nHx+>oI3dWXo?l4AL}kdOE7l*Zon4y;
z^`C}N&jDOyE}(H-(=ZJVbD|B3NQ;*u|30T!p!SX)4?4^M^BTZ({Si`}_T4%nHRO<b
z@LfAKo9WJO{x-&a<Na}y+Sey_x`!}2UVk0$)OdLbkDNPf3Uj+ie?B!ki77YU<#k}F
zSua8TdKZxKt3_uUIRNa{%ZCAaXf&Yy$iA0-s?-3<aGJ5Xp2o2**Ry%y=h)mF26^^r
z(VIHL$(Lt;wqNkAx3OQFJ0!<7w4j_)YHLRXqEa|FNHQa>>dwIxDHb<)$}WFZ{wl=7
zEICxs*qkAx=Xv{ycG>~ra#c;T@-woX_Lm&TIr*fJDFZ>hCnLD$QpR`GRWb#N|CL??
z-FyT*zY7Z<&cM(_|7Y#&i10}rn1?{v3GO|l6VefMH|e=3i=l3;hjyjID}Q_$X+wZ1
z?y-!Dtm~7c#h+_HcesAt2~M>8WuwO?plzg~oz%YgU;t6}ZEW!%IPr?*%#@UIYeW|&
zC%>02t1!&9AATC7`2}?9ZSH>Dq*+KfGrA|TvCNOrX%~$Y8E#IQD-j^yIQd?-@c0?+
z7Np3e@129fxYE&Fb#WzPW~Nwp<wExGxJZ|WX=3YVQWmBj^-V}C`NlziO=PvTcsLs8
zYv||b?AZnag>sxI#`oSQ-lR7*?ak2RW-z(S$ADrSR-5Bi3y;Fv`IRZ3JY}(Eb6g*M
z$+W7r#^K2aclHAx1*zXRI5Uew{T#=&;{f`H^-c^SeYt>37p?u}+t5{+2htNe+IK(?
zb?S2&KsxOPL2XvfZHcU?Q^Q`{cT!xL070n#gmz+164_iam+w8A3Y}US>0PZjm}MI=
z8JB;oeOpjzmo&XKRlU0}ge4acblo`Y51sBSsip{|e9#s-^@yVsi13ae856!@{Q6dv
z`u@Cx{S7n`oDx4}k`li8!@+qne0E|&Ry~5@htcu2^<qsjZ7;>|SPh}#S!ed61!GFX
zSdrjmiK^u)(#y_!KTr$|v(-+f9=iDi93QnS&OQ7^LO`SbhY2Siv%U<-oA?tsP*EGc
zZJvVbod$%c&N`6=Q#XUiH`K}ZoiF^33cw+%L*`Now5YHRNG)V|P9Y*<tBnJ5oX&w?
z@jj#>=aA{v@_noOMV#q39{e=KdYyh-8cJa3p%KIrOM+qQJ+)SzTx0)H4c&5^%GN@V
z3UZjv7CC=qYnx0-#B+m|r<Zm&GsZVmc|Hu%Wh-F_<&L2xN_B6MR&L_8{tIxGIkD2P
zZo~Dwl(yG=IM&-;l4p%!Y5h2k*6N~}$3vw*keIpY>DltY_?q;9wOZsR@b|1bug~f@
zm=zUZ8y1q5k2Wr8$1{&?nO(d>V+;INKv{w>W_iaceL1@Cxw6my4bwatj{Hl3p<&0=
zrGOsNv3s#Q|Jzor(`Q~^V!oVaEF8~yYjGR0(z`qQo|9{VIXcKSAlny`y)$?i)B+|(
z(N<I;xH^ab>X+`HKe>6P^u?J+X^A3JW6fg#S0SLH(-tS_N8C@g)MquujgR+1aB{;T
zF2YzPxvz)w^Ocr1HoEH)&u-k(U~0t8S=<M?KYa@V>D&QyFxODAwO54)3y`*s!+$sw
zLk?cx>39(E9dFH^m!7`dhL9+C7Jf3)#@MYN@gx57v#<C<p`avw4rFg3lW5Jvs~6Wn
zcUj6iLC>!-yn>h%1!{SMb|ymk<r@A<uGAg9PP!}b2>7r;_f!t^UM}tS29c4q`I4}M
zt^`sqj@SfNP)yY0k{3@6TIumI{=e%h`<gvM+4J`8l%tA)Dyz^5>0R722pd09Zc`e{
zVY%8=h}r)9?d#Y30Lut_P5=K4<5{2&?>Gkq)fP)Du1&_I_D)Z;@BBm0ep9uxwUx7@
z9?B1g<2<gY;C7?t_7d)uHZ(Ns)=Y=vGM3BHMCpf(0ldmtZGZeFn-WyBzTS|hWPt7N
z&Q=p~Ejc^k1vz_hiZ&GbApzzvoAE-+9;d>sPoCO<{>c75+Bdco$zD~_;MOk$U*P!R
zd?_?4k)PukZg!+6rpK)`VJ(N>Kh!VTj34y+Y5n18kWSwGOxHD?M~i_jOOhO1!UD;E
zDuB_;Au>NACk&xJ$a%s|j-0_7!?yT(zfF!%0WPu^b|`B1fCapp5V9c;4WD~sdPar5
zHYX22h2tFaGLhn~RW0a)@TO#C=v){~DB}lhgpThPX?EU(d}F%>49(n|6h<hKCh#ck
zu4(l;_h7?1^#lYW-qK$BK_?uuNDweUdLk1i_Hf2Vn*fe_l~%3sH4a@Kv-V&q73|2I
z-XAFpK8B4W9eny;kUg~LpJ*e|#3q^MbG(jW+Y?x5^S@97@XpxooABLM%xKk0YO@?V
z>)zcg4y0t7hX<D%hxTFA?2qgGhlNr$o~2g;eV*Jt15%73!vXWl>m+7NaY+%*zGhko
zY9&W{+AaJUg`paxpv=*a6M3x$FU#$&-t{rcxo(dWZM9h{d2PHzblj$3`GV03>n9}W
zrqKIA8<SHsQNDv3*%p(olK1T+$7|p;B<+}v0e~2dqFu17HIk{oYmmsDMFpJh2&9`1
zbUH&|pt{_K^fzkuo7o1K{AsR#hSAG<WiSawKI=ca+E_&B4Cj#e+WO=DCL{DO$4E*L
zQgB7{dWJkOK*f(ZVR##yIkp`A=tY-kqH3RV!8*0neat~~Kt{n5d^+%izw1@rt~#Cu
zA@ZeE>GZKu=TOJaqt5ha-@Xm?UrLGf8~nNE&h9txX-)QOt{HzR9)Aur$eEvUD*INb
z<tBF>zSP3p44T-cN<mlqrS716w$Zo?n~Y2et$A&cA`=oq@C*`}C}4iJNTfE|V$jZ-
zlh7DkoC4}Xi#8aWbX^RPNk4je4Bc0!66ehm4UVt*>p0$hEG4D-iq|*Acw60<x?iZ;
zfR9WX2MS9yEhy@NQdp>bEh@_@oI9w8CEeto^_HXIyuF05cA}OzJ=6PT`ntr%Le~D`
zySj_q?|G)*IC~1{zxm@@HRI5*@O}_D)2aAUF;Mokqw<o<M7A6^R0_W(LQO3qo2q?1
z@m7=;Jh$XbIC+?U{gwgP7)>>w*;p;NkInci{3!XFLXt_vA#IT$;cxo6*t2gWDDHyk
zi}k%ywTh?Ut)TC$`2Pfbdf%DxSVO=u-qc&uG;eIJ+CuZSnZiNEnk~o5xz;D~Ir;+Y
z$Z*n;z<WfS8O6oY=7t*$3*J+5BY+Tj<rSWmK^S%F_CDs2XGDkmFmRsRh@uY25n^wM
z_yzG$md!2HO0=v@ihACPUmosE2*8wn7XpvE3vbqLRKXG(n)F|+HZj#)5Xl|i8{=5V
z?T!qkyer2hE@E}I50lG`OOtLBu8plyd4^Z_Ds6D2+o-G>Qpk$s9b^?dwnj|0KT4#Y
zkxIQW%}q@>f9h@j{Q3pZ-Ln|@6WifmKAiJH_m4Dm%q*=2m_xmBTh?(2AO-GP`*yF*
zS1Ms!>28`|iDKpj6S$Tw`7mO1ExQdz|C~GRDp%bj_|tV=)l$EwGdUAmOfO1a3}+Cn
zC?``~*m41_54LFDcZYQFEnsd~!Xop)9T4SmE4xv66U~JaxnoT>kUbw)<ThpA%&SX9
zsBY1`e^-AN5iuQFGt#W>Fxe{h(}ic#QKkp5-EZItmD+WyC+shR>}q_r0a_rS4j$hq
zXH3y1LZfZtZPh=+njCga-Ac#L1*P>f9W(njKNG}F`>RniUl@{`2Xa%G6>Sy40cEC{
z{hWL4u;t!06`KdeJ%v}SI~KAIQ<r1x4u>-x+~V`%KEbrmu+N&}g(jJ>OYD;I(BNYf
zic|yhZjw|;@g`humXB5n^L83K43+ep4C3M8YpxAA%Iv(sFGa3zq<V>t&IEsKhI$zw
z!KHqbzghIc8tFueLiP84{!Pp>;Xy~aXbz=4QyoJsHuxd#wn3lVd4do*`nuDzHSnNx
z$lr2+-GHu`LnGfiC~(NbgxDB1e7cyy&?ofB<U=B-0eualOKJEB%Mkc0B-}BAGs?${
zQ)jKnhl{obTp<{Tn+IZk1K)0=?9!o%D*aFn-<<tA@sREEI!m0eAr1mnmiH^O@_o_c
z=<U?^!q!5LG8^>$f|sKo8-FT?yUp&stEWM(;;ONyKm}LViQS}Sk<sB+pRT_U-z6|4
zNiavE3gDG;c6gtP;7$3raoX*rh+F1PXc1kLFXD%#7Yt0x@D~QH7huW>^guMxu%N7Y
zL2*-8Ra?k)b|o>o=6R%x+3k)vaIW9XW{g*X(T7ugD~aL8OPRKHwiw%pMETH7o#<8X
zaCxR&w_0l{^wG`$CV|&Qi5%@Dx@4+Qd_g9R@_Kcmg`z^5)Gsem+qK!F49+f<R`OBX
ze8xm{M;?!p${=++!ft23pG#md{S!krCAg)RH0{jkZlWim_0Zz6h1s-PcvsEV*_Je+
zN&6KILk>wBJ@Sf9sON)!{$I+2P53Pdx7Q(LZmnkFo0vybYLUDFdz73)A!YLujEbek
z<-{Fu5a0x&R5hF!N{cSADxkxy1jD2aOnlu3ju}aksvlxSI!)vHd33RdlQEbyp@vNT
zID<P3at5Pwr46F~Yhn3&8y1gCR<B!c5n7PsXTgZP@UEM#GeTY__crSMhNy)LFXNNC
zYjEuPBh-y7Ds%}E%aO4YG*=TxRh{^1Oo5f`o9m`os69zjNZsQld>@8Vaq5&e(akKH
zj8b)o4{D!UbFZO8dEC2(o@xf?As7QB)>Tlr3(YL{@r6_c)=<oz>RP>%SKYUP+hLjP
z;YisT+jtMANm29`Qetfbcn~mhr0YghBa-d-FyDW-cro~1CaDDS&c&`UPAin*aX-OR
zD6U%vJ~7u4nn5fdyf3Jhy#LkO@&PRDAX*`vIaAde1VTIprm<)p(O<>qeT2c2e@Ff-
z0wi7C4b+iiWJ>&HccM?LenLG$=XEf&UKJXZ$lEb0(sS%@^i5a}l^qSYYCn<>5?wml
z0#BERO`~x&-ikN;o42KcT*B^Ny;Bn0Bw2jlSl*_j%okUOFzFtQ#Cq&S3*xsQ59=To
zZ$STX&^4z*7tGF%nR@`PjA$bEcnmXLbriwUq=FdrD}dK&FD0`+^46^7E&bh%(5ofI
z|5%f7Iu0g;4@!moF5NJS{L1>U<frk)WQ)iKR*{@;k7f$6c_<7A^|U5JT{74-SHHgR
z=<du5uVl}5JG%@QMcXvCFHbIh|KXNS3Tn(?rQ8savY#Uq4m&hbn#<v|@!jU}287P@
z^ri;UPpP@pmuX?dNRID*1BDBJkDQGTywOie0#|m%!^PRvmeyz$;!jO1H(S7N9uWYk
zv&%hv*l6b1jFfZByUswTk{z4({%a-|l}!X{9-Am2yc)z4cU5N~bObeyLV`91_4$cb
zZ8j8Hd=dnwsifM)Y}Bb_9liIKnJ!1BA)0DQ#bm_LL-%B_U;p3&AqX=Lx`MrRPrdlK
zfWB2TMP;pK7m}p$Xgt`U@6B~_ToR||oG6@B*ZKTS@m{k2l^#ZD3%O-qT;6j-6t(sA
z&sX#U#TC4(zwW>HYmHQ%MNl;B*&|}7DSa)^#E++UB!A%Dfr|NP#^)M2xrN%DgOrPZ
z^%3l<_Qwj}Surl4<FA39pW!hCpz1IE7j0HACdO~%_$r@x1}cvv5Xo1VyzY$JzaQs|
z(uE`3JR*Ij-2=0uwXKIlYv*S-=QYCP(6n{Dqejv2&X-V#M9GclkUC>2=SdwG)7!<{
zYq>IJpS%jTA2C3B>a165L>2PT{x!&fG173IxVai!zt%c$Fd(e3xqAq#(lX}0ayChe
z>B44IqxePBl&MYUy@lhJ&M-Gdk8z&a8tIk>>%Z5hQsUrou_DWW`}1awfBBFOo-$6N
zLyGr4zWK8<%a`GTzRniLEvt|1X{oDie>_C7g18c%`QRQ~wOJ_E8qnIa3gI-J-Zk&N
zUFPHXqbXv`gVvS-OH!%+e{B;UF=5kUVLT`tua{(yjbWk&E^;tXFsNxM=AHLSrB&xO
zh143p9RGuvcM_c&2LXfcTD@@QB^#<wSq<TH?vuIYIm}7;Lt)_c#Lql3`@fZWm{etH
z#x|MPERtuJHiK{GNDQ~xitd{Ch}^rW$QTg5Js^Yj>FE(gQ;l_V=lGiFYk?y4&C3`1
zIt(pc%UDcJkX~Me2-T<1Y<8l8lvh7bx*oc{v8mo31Y&G0lmU>JnvIPUz!D6^3#z=)
zfo=dlmg8PquW(g84Txv2ADUdv>t->Xo&04r<9pYW!?bpIh8`#y<*6BWXv~6g!cOQI
zS_dH#*T2nl4?+al35|JUv!6Vyi}xKoxUYu^2YY6UXnCcYhsKsve-`I+A7Uk7n!k)o
z)>c|}l}}Jj@Z<1R<z~s+i+8A@8Y=^wE6-L|hOcW1ZB`0C>H2Ra6B&pIqS*AA9^(Bg
zuI4y6CoxyOQ`(;SRfQP5aU+K!Luw8x#BbIkP}>vr(HV?nW}ggj$(b=~O07}XD)C;7
zzFJ9v(Z}v;TvFL}=Gt@#!KIBB(Z>#?vO1(VsWDfgr}{evF}O7@H$rR}J^e@5?wM#5
zNeRYJOCJlJpN!!c!B_&vRx#;)db5F>>thQ$lLX2ks3_2)Y9mk^dsKl2SK<oGu0L;_
zB}`W`1>2pRR*QL6VJlXo`i<uiAHLu_vhzW>{NJ=M_5Mg};8-{(B#@(lL!<u^PFZyY
z#RP`<D)8K;k=M3n&T!SaoO<K{jM|SLzZu#nv)FF+TKXG5_V=Qoq`kwt34xC`Pr6uO
zip)_Wi6+JQ#KH}wzrxo~&SdYgE2rsOtcat;*Ed8tcgRPW%w~57abZQ(CkXx5$m1I2
z*_QN<XuCU8=GN~Xbodn7;q6_+tzDT(27#!0ambs{ETU3YxSkislS9Z{BzW4~SG=}T
zvb0h@*}~PNR3wQj2S<oMbvx)%s`I4(!2w5f-C)H+`=a1~&IAaIVBx{1zThJ}pN*Z#
zjF{pGGjCK$-LxT)n>riIEt1#{X!WArqmgityui;h#9v3hR@JA%CFFk-(PT>-?dD}c
z@iC)EBLOce8_7nj1~^}yIo#<_21*Dv_&lP?nR~aY$W(3N_+w+GpS6u#NhfMM)ytGS
zaQJAwF=VYHQ30&vaE`ia!LaF19o0zlG-h2~T<s)I+&WS`^>+S$yoGSe;6HTz1zK!i
zJlr%>>2+fUG42$r6-P#rkhCg|TH{?%J}T1WDVV>vaMEIc*Hx*(qr5pRi8DKlYfm(1
z-b{FX6j|jhV-d39dP@yR+aGM1C^zb!ula1oR;wAQ@+_3ca^}i`_<edw=F9W3fxdu6
zX@g5fpu^kl(~sv6NzDeE8^wP5?6?{?pP4GX&6-|KQ3Eec*d2JV)4z7f@Ow0_n=JOl
zsy7-7F0|t=1O+bgn%4#DUsrPepduO21n)H=qzxWM2MY2;2YkCO9o9&;b)LEBjpPr3
z7klg8hA%NgGrddckle@_nPNS>ika6RGG>zJv+bv{K`D>DhUp7rZWD+tG}Siux<w;?
zj&J9ellA?zP!D8-Dm=#_DB;w2OeG0ohI>hF3~`o2pY3=Ij<I@-HS3C>nve=(G{l9F
zCxoF&q0>7P4yO4v7E1F)Y$jI`Q!eKewF-+KbViQIpdBKbLf&830u7$`HU&JQYMy$`
zuuwDU-#i=2rCeedZm`?Du+i&!6DfNt2*OwywANtrV;nJ%5jI}OUWe)y#p~Si0egB}
zvo0nE)i_vxoIuZRKI%dQm5S!l;BBbu9JL1IE7sbyg*{v@?iKpxMHD>Udy;ki=F+6@
zoUG>L9wu??W+q(+1^r`+5-E9D%g{(=u-7fqe9t30!_(F>Ug9M2b>m^@%rL^4`i~{>
z+X5xeXO3W@Sr}Ir##{8CG@?jPL~Cb$3Fw2FGx_hx`s{db)()p6kE*kzRmxn9HHnaV
zdud=($Y(q86wu1UXL!^*V%DrueFwDIK4_MUrtnP64AYByY5_gzxJ3!v*0NkSK^a&I
zGERLP{c8|B)UxVp#;T7LHT$5Fwfj(3$WUn_#j94S<4Tyy7Tc~_scMYXua*xNS6XcX
zonjplg-I60Z^FV8%sLE(i?%~5Fp@lZr&eW^<T?uku2yzkwgPkufLOj;V(;oP{Um4n
zCiL_jkLTL}O|EZj)J9V5nfWod-b%8M(Rivb5p6|%=)p<bNky^y)RqeA_LP`n7qaNh
zyWSJI)Eoh9#4Ko~_O=n6xVb^^PAS!~t@FF5-|HxFUiOLBY7G@W8U*q(^+Us728Cb}
zyUCx9YkW2k8o0*w=zAJVrQB$+2tJN6XYc5OAHFYTw(vIlt6H%z<s)?O<{Q&X*jhny
z(^YH3{rtKnl@Cs@7!{eDA#~^zMNt+SBjO*}1e5>fQXqa!^+?w(#C>w79WxECsO=tl
z$g30J`sOO+rw>I1`Ww%uUxk%Jo=xyt%TBpWB(q1X{n_h+9*|0jPwGen<ePnUAp@_b
z1S_MFIQ|7}wF+2`iQmf(Yk=jCw~goyzJ0}RpgCct<fjTQCbMVr$BvE^$Dy#!>ot^0
z=F|WS{Ws?6@g&8V<WzQvN++Q3>v}8ucfiyE8S4u6S4kPfJ?)Xvg6}+}PD~2jn>Mxk
z^ku?pbKuaJb&y)e0W)OE!vB~KG<^hR#F^tzu+7dfFplkZH|4HL=h=7@WG{<&dyYBA
zD&pv0y0?scBHs^xQIB(=gm^&0%D(Ge=_ZP~D6)m6bh^|24pa@y_^KYEz-m4CQ-hmt
zS92<d0B1b+!B!^-OO%Fc7G#ztYQpc8+^X8y%w7)VB}BJ7p{IrwSycc1Z1F0Z*V>Wz
z4l8xzu<k02wlq~Ml^$fKmuq~0rD7(OFzQGf_$bk%4nAE{4~*=XCZZ06O}wOx-Xl5I
z*l1|q$?WchzI0(Te$)0THP7M41vmJKPe{1<46VJoQWr9VM(R(aF*~kYHRF5~Mx3F?
z2dyNX&N45R4U@LgTvKFw%QL*GML~;anW=i=<f*33utHq9Mm%{029`CzzF?2HqL1&3
z`|o+@JCBrCzi>aB<3wKt2otjjLY4}qIu7x0Yzr5%R99VrwZR&$e9@nn@Scip!dC4$
zzMr+rP|wBXxE-eNwXDAoonlpUu$Z`D54prCN@|=JerxYZ0f+J>pQ#|>clOZprv0s)
z+Br`KmMVwBd?=>ydDP>Lor$)09ToNHpT6-SfG0DNRxD^7AU2k(xl-BB7|2;Tz=^+U
z7=(<~ezOF~{D)$SchmEOb2DWtnclRI=3A8rFwMD0KA5}EreY>yEak!|ZNOI4uP|Bi
z&|O#%EYa5|GohfPuARVF0{K)^-|{Up9rU)IK6iweJIp`za@=gZ_va%Fppi;F>KyJa
z;pF6$i-=f^!{-bMsGId%!qh}<-s~}`n84<EQ6qBWKfm^Rs8^EE5JU@YzI}hXCRxN|
z41-BIC_L^tZt`gnF-`vYTtO0Z<Y$H2R`G%Q8!_$ryDfDOK8F@`5Fc{7IFESk6MDZt
zd?h3#oY<X3$&a_Wxo^Hx%@U-t8AI+d>y!}e>FxbKA^#Rl!a{ew*67GGv2+hy`8T$%
zT9e0A;^M?;cT+-BZPi+3iOJ2IH|381?qumwj`7EPm>-1In$lbnjvjvuX>8HOK4)U`
zQpb);Aia))D}8!IMbY>{55vfU89p9suM@@kp~@4wM>Q#O7P$nU3j3D?-iq4|E*3NW
zJ~rDk#WRtfp6*t;HYBTU)MSnFfl)C9a2$pVJA(ZO8SvoanoLPKF3#G|8U~6(2O(O<
zM;+pOkag7NGu|Jw7@C7~nxhO7`g3<2?iO44_qaM|+Qx^IM%C1igmLIIqNr969#;@P
z9)`f}VCcIB=~(Cjj*`KZOVJ}W^d~JHDik>sO2f8!NcS=O$A>T>63u|op<9KBE4RZp
zFQA7g7E-y}b+vLMv>}fQNDX!tH>byXHUzcgH()6EQw^zwmA)n#jWD2(`w%TxY8;`P
z6Pt64`j8$&?zIX0jhdzR{gFT=PC>uxBk#17`HO4x;QDD7BhTHzd7ugX%?sc3fUuEd
z^R~^7I(S=d=Qwypsqbk0LqlVux2>g>Hp#p8SVFS=E6#kpZ-xUpaTE_eNOEo%u5+QI
z=crE)Nnx|w5n(?FbKxw?U;C|51Th@F59#&QJk^}AgiOPk<9a8RNYd&fSiR%UqHn4p
z!_(9Vu;XkQ!EGD<XA?}$t08D_PaJdKORINXtSb6K(V4Sw$1VR0#2&v1>1hU6gvEJ)
z1Bg@gIF}Eq$c@U770uPq!tkJl7c2QR?hr_}QbVrqsGHn@FUbqr*EX1as@u^ypiN8&
zwYNT8(%|)G6g1x7A7`npYQUI8NTDNqe1wmKde_Hm8!`p@yalpgfEqP2fX5{b{5)7B
zadlxD7G<_N4xbz<(^AFcF}1VPm@%t{i(TY$fvg6R<FQ3#ZE3j0^n@&-3+j%kO~l~k
zOMgfnd?)5Ho~wTB<m8c#w|duh1ov<Tg3!}J+h0$q*=C^K<Ma*EP=+GE@j0E@E5u6Z
z{A~h?`r^}N{O?xrp4$EMDk;UqK>Q((ac;|)hwE;=UVt#F{FVVQ*IiEjBw{tbi?m&<
zOf&h}N$%H|8MH$yyz+ec^Ag##_azL&$+Ka=ODWjdg;XGSROCGPY5>w_9J86>-bf-h
zkljk@Gmog{N+>NxcdAPJ&o-5IeducQxo#cyu9K`3hqFuXPyQG3zV!hJEBy4c#8=kZ
zxBogHD*TwM=pk4;KRo!nPC({o89E%6>8N@zCayI8;8}J-(DcS2XDsnkleDt2>UWD_
zk71Q|qFuXR95H(eO41h8miu1>+8^+_p2?aAJ-@<-%J>TjVdvtWv6~eVtxSRRT#S7%
zFQh!Zq;BJU>aL`ct9KFpHV9F0A*MYRQT<yDE>V;JSp3&3wlgK34dI?ggCbTpznBGZ
z9Kp+QXftHRH@nHF=sZq+TjY;5WOv$4UOl!uPOzDY_(jIX$VO*0Wz=^Eg0y|Gk|c0`
z#nZ<R?86}^4*`34`8fnU%~EJxCjZ(RhAmH!7|<*3PZ)&KuW5t*lQahQYGQXS?n>pJ
z>2lm|6i&SHG)X{bBZ2!d$XpYU)F<A*2j2)CDo0hnfWeNvS=;nq>_=o{yLZ{{#d`8R
z3UR&f71(UF?91}jJMY5B_UfK!L^!+Th<1BxuLZ=UvDzr@PqF!IZyYHjl@}S?xBIm?
zM%;9KH675|*K41^O{;I*le`>U?#o{E^hw?G%7de|Z?e8xtoi6jRUfU9ahC8k>YGr%
z(eGSeWwkWZ#I##n@*VESlCqEkR$;y6LRoc(w3f<d2cdI5f=^a|UwLsAplAOCd9ZU`
znXwyR5mG+d7OOk^@$gAaM5fF?g+VUaKjl_1*GKlCK3`EgPf<qGmJK1rAMs|nd7O%>
zIsv`GHic7d9}l%)zOUQ{Dvj?%m{_H}ZDdW$xZ(8EKY%Cw%mJBzb88+I+;38O7=|E&
zeMY<=COMR#+HG4<jvtaVI-hN`!KAf6=rOY-UQ@8Y!EmO?;nJ1G5HDiMH|I+UwLQAZ
zz)MX3u?c#6FxLe}rEk2(`S;Yq;CB^*K6@}Uj(GT+4`VdX-6fvAsbL;Ld-m)ziP?(f
zR=S9t>|k+NVX=taGXc1yNp{Vgw~;_`K58Lfk3|q}m)Ba&x^`a>e2z-(ZE(<9A-eDK
zb|CK|t9#nUrhd-jyB6MsQcPtW?g-c@{q)LcsAzEVHuGRW@)@Z5#K&J62{&W8bL#Zy
z7trHOT)6;K!adeooAZ$HC4Y2v_f75@N%gLaur%;;l-K2X@19y_6hZHQ7NgK#N9%{)
zxSP@{CR~MTaLH*mE9MgJDt1{lwS3yB={J!MqQWnTY5+L#*3wJs;MK$VTH>E`5!+9(
zW|L(z?<*SoM>Yg7#|E+SKg2a<`_G3m44nhw;}$*4kjAXG*OBL>>m1(If4VBqKVN&=
zH`Sj}1y_F?zlW9r{9{jQBcnvd9(YHw@;2gkr+tZjlA;)@STn@C&Qdrj1b9SoB0rZ?
z%=>`h>D=mB9cK@*D~Y!<TzsS}vKks~J@oj!@81;;<SB$zEjX<C<8>Bm3gFeymnz!P
zclp&Wej#?SUjg0xiM63#TN~Cn@>Q8WxQWeMo#2sEm{0jDWFRJ}r?wCa*p|!=x1dfT
zePROOKY`d{FNH_H^THaKzEod?=iBSgJYYhoGZTm5Q$L3uNusn9Ffibi40&~5=DO8!
z4&KtMw)7jeWEo03;Ue0`c}7mvK2DJ7Y5+^)&(rHb4mo7Gyy?}CLZRNfHZN;5%kZTW
ze^%%VgMP#tw^F?J{?_fkPU0ih^VeSLIN3Px4e@5kCT88fm3h9Grx4&np`D>q-NNA{
ztky`k{IwlKDXwp_*!OTwYryEDu;9Tg`G@h^SGI=_!}8u)0VW;Z!lVHkRsXQ8`8BJ=
zD?n5H5|mny!tc(nMo94c|MkHOREBB5r7Pf5iDQB(OXVxVkEV&08xHCFuhFCSmjEBm
zWYMs-Hp}Jwl4#Oyxp7M&w_C0Ka;yO7ZHS)1u(UwyQae20Pe=#t5ptyFFJ8Nnq?IUe
zK5aorrG5xxZynVuxDsg<rN_cj$WS5^^z;CT@~=OAdy9oBfxOLj6Q%LglLyxPJmw0d
zmj(7H0AdLfyP_g|vhIN)eYax9b6Qp9@zTZrJf$_*WlHkV;i2CpUUQqAUnny4K$$1z
z&sjg?k-ysyC6-j;Yp*Z(bMWhYxZCmcLo&-86!5uS)p4~ztyxCoU=z7(m0?XR81C46
z^FsO{(8Ej6;fP-*h8kWkaZD#nh}EPI_EJu1N?NM7SV4q3gI1&nu`o)0#N(Z+))f~t
zyUFm!0h?<}aXh(>ojn(I1=MwbWHIQPsnqBHW}l$WL@m|*`$!AKp4*yy|6!9=w7MJ(
z&cT8}0sj$Y!`BXt4j~no_-+pFkN<NooI9vxC@O@=7{u{)ZK;j!nWo*!)w~pULr??b
z@Aa#xvfi^_DBd@w{8K82*|0}`BlGC3<u}A!%U_P2eFB`)(w_Z#ahw6yv&ewF|IgaX
zQGA6SSQwSaS1TCBLu%#uGc7ry|9-+z+tnHbs#c#$-CYm0Qt+U1xahG|ry-J2HjXq}
zsd<vWmss%)9(k>I^LlX1@gjNT+{0+u<=95p$iBS5saVSwbFxS=L_R_czB>rchEF?o
zE-mh?@XghKVa}#6uQAC0`veA|pMjf3>fHJ5-ey}q2FLf&AA>#yhL}29D)kw>tw$)T
zF|nYunbU7<CGq}WU0288+u<U%PeZdumd(tPc3$7nXD+HSlr)cqiWcviemC5T$<srX
zFRtKc1G+D951BC^ZkU<}yLrSrRFfaMOr~G4wXxN2p~R*E;Y)3?;T;Y1m6?+st(mb@
z+x=0$?pO?bz#l%#VVOQyA+9zZsQ!t)5u+yB*Vp$=_;};u+MF$=1_^6broml$x3??r
zUF3mmjsQj%yWk8LNn4%qgLR^RGcP=6Ev0*eYV`vby=}ZS@?tyBoc;L@fy=F+>YRhn
z!MoNI&lmIOGNslrmGO4boi&@G<|pjWqE!<49<G~A!sxr7526J4gOewSg7EWW`@AbI
zF2e-gE|!3_##bh(0pP<Q_+HePU)3>UHN94Ivr?`qs(U~XROGi(JKs-b*_r+-rVIGc
zRs)ND8`}d1SZDvUP2CTPf@BmrR<-3yo~DWRiHG_Dpz28*yjf<^m!!_8wtN?20+MvU
z^z@SR;@5D?<zKO28g-cgOo962Y#>V#$oCz2d<SE@TSnXaCywQSwC-SFr0WIpgM~Y)
z^iKvqy4ahai8DB&;F2Z5LpG~Ap&+MM*b9caj}U6MdLoX=+=dX(=0`I<Qu{K`^MV0~
z(RZlOUTB>G-G$U(*w~;JQg35yYilLdlWx8CbL}(xu;S<{V21jo?|6;#JkZ9y`mS0J
zNUQ+4+t7_Vu`UrV*S48G9m>U(0n)c}9r6i;Jm(vKoIa-;|0VH8M(+C$iQGwDb9}Hr
zn?p;yO~;#S(k{*}lxGHHoX~SnU`-BsJrF|cow$!sdG20vqj_P%B<<2<OM?TQybYHP
z8SERKcL)CW#`)f=L$Z-X&%y{<%56c_-G(qX@5}+)<V@ADvD<4=E(U3TflPlC4*3m8
zGP|)4pMJ9qSOkChY<(FMH2qRuV&5})YDnGT!z#+^ZT-%)ug2Sm(8XqO5?!5gci3oU
z$d3N}kmbBD^@cfzdO+1X06-bhMt&l6-hbE6g3P^Li&j6U%1AbjEM+|dSU^=|ct6g~
zN2J)T%8{$gySmI%&4vX!d9a1OosTe&7fwiR!`-)ISLOJxa$TFz*W0(Tj%>tM+Ps`R
zAo@cr>j3kLSR!APfeo_?<>;athk8|2)iM!H{2WxA?=-fVNM9Dm_io1yLp|P{hkK!Q
z6)*KQJwubMp7jibBDh|NpgXB-d1gF-H$#t4KCEndC%;n_A1G_~DW#6eTpdkJf!#S6
zQdE)sN|t&y&oEP-&c+{&t+M%AeM<3hmH|bG=@9na?kU^e%;z@7&{(|6_=(K5nQqF;
zum8VgJ@6(XavF<r0|Lp^i3>HCm;`OMt#Y$vWaHk0>#Idd=4j=R9}5q!S(3v^Om&Ut
z#U=TU4k)C1)-yMX)l^4WAI(U+>BSe)=fPir4BCjs+eYQXeXOdxZSdcaol!ez2n5`+
z&jD*uvRm>{3JQl<=WYq|(w6L`<BvAL1~}Su79AaqH`Bx{m*NWw6Du7~_>v|xpC!^5
zJMW)$tahllhvQka=GC<wY3=fb+<R<~#Z**d`1HCnR5D<xUS7(vbGnIFU{x-S-TQe1
zM~@G2#MHf(ESk%j9Yy6+b86^ZjbzUI&*LHUbM&oDH<2AwJnb;E?b9)D)P9dEpO?9f
zVjMYqEF|ZEsPM;FZ5asH1^F>IjVP13_#UjP%56z0Nu>nwo!Px9e|4L30`=qc)4rkn
zAoq53Dv{N6(ER9L|HMleE{;)co}sy)Cl4Sd|5q4~+12kPNWV^EhhDr=GyRW^H)m1n
z1kRhAqs9eT-NpawH!NrrDH<3R9VImq`W>g>)zUBEGeB&kFy!Am>WI^(Y%FT4GmKtW
zeHt%8ZFBK}PXn`n&{-359v{6xrKj}!r>##6fu;rBfr5;@+KG~u2>$BhsalbNy-+W;
z-?h2V1?zeArhVAAHrjoDz-Sr?1ph9NA;M^5klnUz;ko_s;OqZ$*e^*6;i1x&wx6P@
z5>0{f3fVLoJpRZkEnrY}A{=@sI*{Mfk$6_3SzZU~dMOsL4nA*eVFiWuiCBNinj%0k
z2Z!=4UuyqVAY0?=avT=2gr|hzTkVTA1XQBDL|Bt)N_QO<u@;18bYlWmOg9P7l*d((
zf&A1MtCr#u@<X>{*_VwNp7bjh1%b_aa$7m*UP-+#`;SOfpRSm;^#YSVz7VUc&~gp|
zerpeCeL6{Lg~D2B_cCtEPAX8>8R_ST-mdAqU;V+w%0Kykp3YL;(%XcIwkMvC_MZ1#
zMSlkm0tT<^%vihd0<)_}JK6<gbVdqe$$RsH2L1Czx2@p^C9Wq4(~3g1gI|oZ-m3c-
zF<;I8l<xhvT>N`l2%Nbq(zv-jVA~jwedc2#Ux@~$RCP7vGwZEG$d(b};yui;^^S>Q
zdGsz-V#DiQF3yB2pNbgT-n*Gx@z2`ZHG@R}xl^3)c^oJbI=xV|Q1)?1^(fG9dd?ge
zRKcScTJ`%U-v38d8racRQ}0owBk4<-d+^RQeb&1{SNv!rTiR^5NZ|vSi_yy`F~($O
zBVz6JAj()brZ8z|b;z-Ws#@5U?l?vLjw|;Y9+%r&9DLldTd`Ck*35hyZaS~I6A*`{
zX48yLcM>l)GJIm;4!jAz)qE!qnnPADek*3YbPssA^FZjg&JL5weBCzarUL<<e|mp$
z^}e`-@8ZO%5wF{hz78?h`8iiVUI*P&(|sG%tqa{pC>*)TS^llt_{WD|QbVX7tvpn&
zO{C5j#84Y8Lfabr=}5wiaQLmku`ihfVwmYDekl{W{B4(nDX)9|FV);g1Hs2U|BFf*
z(1%`oC3?KM&y&LAuP!cJDbhV+Ca|{{)#&JlJvG!w^sSlYa;>pvd#+<KN>|M)FTF03
zv!!VA*Dn8TWQw-6N3czRTNW25<6`)pMtpeez!+uc9o0kp{f57;6Gk%OPbGCTNOznW
z*r;VyQ=eG|+1u+3n{{{&EeUQ2c2W&7(HFHH1<SlPnN%_|<;?STO}-(<(Eh)ta;>L|
zEzgZR6)y5dQZNexfQz-Sg6^Nrahu9r^&@pTEH6b0?rfIgMox{OIK%;?Zvh)uRja=9
zeosUE*yR+wU#rcmLFGO|`RLaGO`>K{VVzYQaXx?%LoXh-`V`67tVA0NRa2!L3=|%}
z(e0_xxnVu&W6jfcuF1Ro)+(gt^?fhFpv>m|QnyleeBw_b-{^p({FHMBW9a`X1CE4*
zf3vG;o;zK)VBMCetoT8vVo{KF^umHXcnj}lZs8uAn{tnmfk|k=#x}7if=xb9Z*Klv
z=I7|gCW!`N_HM=mER0>+O!qoFALR4HyKhul8_Bm+aAE8OU_0=>#@?$)6|pzrcVpB6
zgO&V?5RaDurk64#$UJyO@LKm2dx}*W!pkQetvfz^>7gh627g32ZMj###=-K1I4JwR
z)tLabGQ0>S<nCj8Hct8>{VPAQp4U6^PV#*wFP4nG#Vk72>NF6SFrUB8L*g%9HM@8U
zV|~Z8!^Jdh&IVa#E*K)3$em$CU|sK@k-AfTtSF>&ZYeOy5vyp(>5h1niVNnjqjt=F
zb)M8{eH@=>o7#vURu%c;lw?ztg^XSK3z=chUGi{<o4(1Q5zx}s__uq?N6CPxDoF5=
z2EsiVgqlfT3v^AV2MgY1p=F!QI{=ClVw7hiPfF#=LL5u(gu-WURJG0J&&rR=PG1(a
zHn(Uzc!XoK(RF^J?S5Ly`}QJV()+)o|DLCvR{%yP07D5%PX2+I!pE#M;vWco1P=&3
z*Z||ZTMZH>u%8+H>VX)q=x;d4Fw)mb8yZ?W?lcsP5RBmYs1%<FsueAYF#9uL(_pXo
z_at8`BqQtG<`|x}({Xo*Q00)}`kgtI_4Z9Zb!-l&cjB!dtEeIBD=hwbi2K>ChQn;a
zP4FG0XqhB*O&3VQ8cn}X;6ZC(z2;h+HYhuiqrj3CbR;5Jts3b~an{)$I?VfS@~))(
zQEd`tCC<PPdv6eg2OktPg!s$pM+cNEiC9}+$o4JK$l&Ax7ObFYSI}QZTq>->SC<(C
z9qJE2cb`bTncL8ty1g?$&9xjBub&32omeiK?>+_690KLvsqC12opc?wl-&DzWp4~4
zK%H@Ih@WZu`2X5_@1Q1wHeNJ<h$uxtML>#3QL1#QL8|m39RVfuDqTPbR-{XB(h-y@
zEs+`vz4sQ1(jgS-B_TN*zwg|cJ9FpE+<Wey=N%?Pl6~{;KD$rdXMazo13ixf<*UAG
z0hY(b_Ye!-6I)4Q6TX`#qCdQVDzF&zXn=y_`M=7@3{T2meikq~L<?p=_S4(ac@A*=
z{G%CjJvsVD`1-3SjG1z`vYf-;EyuIjP)Lsl{q~a?bv!X&cCki{(zVh|lzTqp^qCI!
z(@M~DNv%-s3vWCd+u2m+yT!GsT$Wxlb7^I6%BU<MhIGdB6!_`G8tgOFn!99<A9<gO
zT{s!*%@oTrMk2L&sJP}x!p(95fbvhPTN>RzANuPF^tE_QZ2T8aXlUCP@nv*E|L>(<
zfxYS4x3^{FFPP9m6u#KjLMXX7Kn5`W_e!~*4QGuICzPfi>`$K6T>HMVPNrmWxD||+
zi=$&N{yL^Gg?}=I=;n_WeahE38f{qrBKXCX6yCOMT(wXt^mHS8L+6nu#BEr>!tMm7
zbMsBvK0=)g_4XBu=uesucfP*8t`QVSa;HbiZtk^1chtQv`@s#%XL*n><nTmo?#?(B
z+a7<UvRz3C%!dCt+21Zmp!(Y0fjIt}czl8D@d!9slQV=ECFMrUsl<3(nR3{CJre_O
zo_Mge8L%3&mgfs}B7x&<ym*hQbuGsC0N$L6Gqnx%&Jj0E3*4Hp4V3h6pinnC5zSXS
z(lN;~O2ok{f05;(joA)GO)ZZh_iu1r*_M~Lv$8Z-w~$~HpQa&!kn2;=THz;HRFb2)
zcofyCQAuj9AG~GebR4KY{MuU$gWqLoe?Up;dsd+QhWC}xU|GZt5yYXPyBM3VmeA!Q
zlZuGHZEl>@Z+^JIhFx_hugBvtx@S7+SM`?~ct^ywul3cwtZ*3K<(Iio*JUj7z_kt>
zYVgQv8hN34QM2=0t+f89#>2CpCzqBh=Z+8Ly6<@I)dgZ=Ibg6=aVIS*;)#Jj44E$x
zLbbMYwNNIc61Gfa6KozPAoM!#T4RfjOequ9LJqTwutm0Qtst}J=m8AzZRUX-t~_k0
zAc;<2cf6m%ck|QB5#Q<k{^Z<XgMCcX9=&7U)~{y#0cvule8%IEby3HTfZ{^AV|Fb|
zlhr1sp{a`P8v(z6TnDRpf7rg2P*0xkQrcHZRw~j*F%XFG*agD5(BBVPVo@gvb`~}P
zZCguwc!Wp8Ge}0(l@{D)f|$z$Um8D>B|M2AshP0}CUh>S*?-vozirnk&>b(prvHR}
z9UTRy9mNtq^1Qg>5>}dg1MlTNZWJPEEGQ#4a<N7C%_1Y?pQ!<-;(Nv_`{DFFJ$x07
zAGz-s>Yx2pqW#oKf~+#_E`DV?T(eQ@GTyViyu4NAQFlafm?)Q!_+`mxwiYu!ytEVt
z3_nXNbd9V3Bc|b>TfcOh7g&}PPzM?Ij*b&rS~{t0x?M~f<+Rejl1+@`mxNNc1NJ6^
zEAC2IqX(b@IbI{ht!%Fqv7fv4DYoHQccgW|e!bBa`0bu<q4Ah*!s#$Hvstxa8&SHn
zbWK!DHnDk(aphp!9V(^cr{Fgj!h82=_ju)?FtU9BDsfB0>&~qlSn)zhuvWtljaf++
z>y*PzL79&mMRXK_!Rh!%&>iTfVeyc#!v%q(*$ls=WbUT;`^bt;Rzfy7YQahQk>KXv
za9R>P2wB|Lu}aWvZ-ukqD=!G#2HQ;@nz8-6U0%B(s7c(SZX;~2GWcZ4WT+**?Sa(7
z$6<4w?UdPU_$dn4e|{7Bt<nkK4Mves*fu0HighBnP}92;w<rqmL>||RWE*!(Xp9-_
zT`E7Rr52U>kyD|-rxi_=MmTJv-Ye`pj3&=BW}9k@a96nBOMO8>=8I91{OwUDTlauo
zEuQSoU^#pfvZ|`K*R70rsI|60(eA(dMdi(&y;?d^JlFn+6?uf2a{SaaSmffzo#ejk
zKU>;hU%^*xDXb<WB%Hsm<y@AROlyscgwn?NzuYPqyLDQ(W4PNq|7@aMV!vVA{qzQf
zw9f0Kj72`vlJop<fbb&)4m250kvdY>LO^s%!@{jLJwAD^9C;zXTRo@xDjb}fI>NE9
zy=b6-B)*#4{Uv`y&lE6YRo9=?_>5o=(mFXk+2&*mUJ@XhWlV{<zYXe&{=-4$K3WVl
zVdlY(rLmLY`rg}}3qbZN<%D!Pw7u({vuYlSCmE_JbNhgUm}`Xt3~qBd_IkSHbvoS{
zop>BXT36uSCi`0bEk~@q2O{A&vpnRgs>zMb#n`ngE^AkqM`TAbliGHkrBuhBc|xac
zAKsp^A<5je4Zax}*0hy2Fq7r_1Ux^B*HTcZER`)__%5$ys8Zn#L!=~A>H#}hfe@#<
z_B^8_E%keRtU9?9-?VeEnXreH?<?lZpk2llkf~^g|8o#f-P{BVq&B$$&UxX~ELb>q
zE?bPVnY8%1)mB&2Kkl;*Q@+rpAaG9X0)i#-T+;)xT1-<DfVMcFX_s-T8%s5~PIl+Y
z%-hrCf>%am3eCf|TqW^5z#pOx9eWhDF8WB|0gYnzuaxEG;jxsJn8DtAde;%+9WLE`
zYt)oYZ-f;>rQ5)MgXD5WM);0!8^kGJ)#Ayw&WorFUKEu~a@Z!FW|_i<nB*;+hHftk
zz401Y`!|W-e;XzIxmaG`VHshTdq7qp1o8o%TgzaQTJ5~;0t7alU$;=`S$Xr7tbH$K
zVz711IfksQ59yTEL%@8wzrd{fdjHvva%%feavNRtFNID^on}!~Rtx5cHACb!*;yg_
z8iAVxqQLz2JWq<AVvEP*AHfx&Z5mrv=e4KwJOF_-B<=fCY0;pm9ORv~2lM&ft|rX&
z)zMx0IXL_F_MVXey}*=jyc&_54}47OY;G!G?>KpS`P_GN^Tm!lSHctuG{k2cy`Ujm
z^2d(6krI}U_Y3m3ac%j?gxT8SQb&S3Ux6{E7Pnlm$1r{UrcE|h{fbPlb)QhmA_c@p
z5<S{BS&;XxTq1PqDSdLWSf+(pw`GWX!05F6r0H9JU;)?|?u>PWt~!g0NKa(PfD}}j
zRqx~GNyh5RrkMjv8*n5S;`7PWi$g*o@Usz!1HhlL97!#J_|cKUr!{1P2E)t)d2v}=
zh!4XIz=HL=E-B&NPHr|mE%NAgi_`!mu+P#NE*ZXG=RW7FU6gUTPiJuV+N!F?<Gv_r
zqA)lpXJO9-k?x$U5r~?vosoLurj-S6v5y7hT<3owPXDItSVTb}^|8E~Moz^t9cvCZ
zSKW(WFm6;RC$L*kPlwa|{%x<SHuTM6W;RAJ0r9<2#AB;z^S<OQh^3C@qYy$*Wx4jN
zfd|}>tHxglN-|f~?|-v2JQ0vqTzJ)z#kW%lj`kvoC3_EholjdWHP<xj?Vuwi2L!6}
zFw}HIut7=qs)9kM#Ds}DA6hl+{AVAsP@3w6U@dA|FXY_;C8ASLp=M$tJtrxe8M0Ef
zJTB3bwxds$<2_PVP~RHR{bd2WJZWq({RXm6GwR<c5WdFX!O!K(dCl9eKBzvE6YNB&
z#1R~2B+afcRsYfr{MKEEao+?-sX1TfmR}x=Uwp?(%eglmzov9nEA(6AaY1+lK15Vr
z<YS0%w(t2qevyg7iH0mhLe=I>m_~Vzhue*6gY4{$JVZmfmdV?X&G(~d_KRl3{=SAl
z%+<nOeFHu<Xh&MLllaie+&^sv2J=%tdvHi(=R(LmJ<3Zt!TTAiD7)qHvEl2t#&GL_
z>7}+`y>pK4ETgttYKTXv#Yl>`{??PAE<$qHz1TJxT*&FxhcqZ@xg@WTC2*=4{Hgs~
zmxfrrv9YZQO)Lrv>-qZxB_%GLF7IKI_Z0c6_e{C>8;L&UmCfz>Q~N2&CSHt>do(wc
zegD_f(ySXK5V5vdH;rAgRkvcFCP{Ta+)Rnd@J_I6Bki+Clmni{xW+_IPB+p;z`xZs
zb#}8}>u*Q~8b-vImN;jv>nl?c1N;pyBfULRhZkVWJ&UO%kl*)C1mva#D-!Q~Lm=W1
z>w1@H?WkSzV1CX$)53aqTFb#$pEK|6c)D6v{iV!!4#IP{TiOwhjI}q?7@373q4zCi
zR!qi+y7bJ)NSbujKkOAb3`Lk2{iM2b^gVaLVXJ52+0;ebr@_OnJSg;*oVpAD?>pau
zoquX^`Q9M>J#DPRv<Qoe40v=E$Ad~dNtFQso=XFCx9Va3*kzq~u2~)YtQba}D`hii
zX4bPTa#hdz7>~&~V16y>yW&w5Me}V7pQ^<hz3&gyDkNaJ;<4zjPAPA6C+z%%G?d@3
zD4y}oE9alNTtX(b8+*x_i2P1(e(2%)sZ6>s!KJQkM9<*&XG8b38>@57>ho%ru4}ab
zYhYOM9ONcI>D7YseWttmeK3#N7LTtjaq_=e#PjV7{e6D;832xu2!9|S`7&QEyA^1?
zjBVZcY&-2&1(cVuE!>J*8iJ;q51H-^RyH?fN`zTx@YaZ3a7&-~Y~uQb?Qrl1zJ~e3
zYabJv1_t%*Ld!Xg?2_%HB+f4)afxzqhE~PfzI3;rf!$-`?qEKqcI!rcRaLU_zDdH1
zqt1dVLd(Rxnbi9}4x_kr)%2^359MY0bz+94&wY<86s+)Rzj{sZ`{1VthS9qN<kz1)
z-w%qpp89>z=#aA`>)iWKFSV{GoNEP<Zkn254Zp{_yfuj%6I!gaTy}Q{b7f45-qAYz
zHfg#Q2{M~(Y;S#0Sl6Yyz0fJo!p6dV%d6!-ohtkEV`twiUn7{Sc{J%7W$e7O<*PD)
z$hjD^rf&WYa^D~kr+4XxcY8hTuL?LGonvzM%IU`Ri>a@9uIeA2kSZHi?#6b;UgYA9
z@QeI(oz(;+`a~Cq6bh;HuL@EfkeeQEX&9aq{&4i*yyhv>`RBg4ymL$}RmMyCce3&t
z|Jl8K{iU|6B-%6AIB>m7y^Nvoeins&!mSGa^3>`_^qldKeOWH(h}YwBB2WP&O!q*3
zF7T{gN>tpPTXST9JsnahmX5_u71lW{o8G(i3>N(BvF@_R#zyKN&Oab99OzgkWB$M+
zk&eT=+hy54ejp71HEF#6K(!XE5lTh1pY~<(=5=yaE|#~2=I}=UbXF&w&7QBrQKB=M
z*DcyMlHCqvn|+%%E&D8Ca5H;rsasnvUP#xdNfZ36+&&T}g1o{jSrh&D^zcR-qVC9a
zb8h@^<s5eQP1gjWd79TF7&c5rLzCLPcxpU}tUz|{#KJdll~~83xhYADh{<Xe!t=L%
znG=ZK<^XK}>%S+iT8CJtL;e+%wUdpky5QWz^px9@r*yb*x*D?oh1?YmpE&XyhB$!H
z1W=4H7A6%L3F^UtX7TKGl$Up~I|f4w2T8uwNt|*zF*F&&2{5^!qP6KR=X5H4uGx(E
z@c@4H_c@ZEC_iw9OG-~Yf5scZ%heZG>rLpwPg$s|4{Ge%!~*Or@m+b3ZNuKAMQ<C=
zpmwe37@uI9MvF<~Tc=dRp>L47(aexlKTas<L+CEwBf0`TQsog5McC_7clRRoSacCj
zjG<j}*~38bFAoh;te8X#N^hg{rF>q#l^rh^O5Ld(T$Ii2=C+;+boZTkZ1q?@fdzq8
zN(39=OEX)Q58nU`od5jzmVPql!$0RPxSN4QE1_9a4U4xoeR7^BQczxAyhT!#9nb2g
z6$_37Ij!k?0jLxozIY-+tAhVvZx#G#eRRg^6U`;c4`g~JA5yL-_p}}AOf_AYf%!_(
zv3Dqu7O1j45wf(_AkZ8hrFpk=s|Wfp(%pj8hsU!qJz3A9A0`4=D;(*~3|4#ZEtfAg
z;GS|l0Jt#kc@wOxEqSgCwSx8Audf>lz|i?L`PNc(eLP2*_a|$=RoXQl9ozQDERp9l
zG(8U<bmf7XJOsPw09$SCtHrAi5GUb`3w1=%nP^)ObXAG;TtJKssWO`Z*re|Hxm?J|
zd^4w3jn=?LHG1dMxegX}4%^Tp2JL}b8<&;kt-Z~~%ED{n($D!wijwUfJFsgs_E&fS
zlNwz0AJ<v&f7WX`DZMzp_<v5-;UF10?{swUKv;2v<BhOlJsF@J2vjeqliGehqGv~B
z@I?m{RLVJS4r2H17Kf4o>RYAfT{)B%PD|ak3u49He1l}PHC8L*nKcsc>OW1mnZCj;
za6Un(=Ji=?Gr@I}6J2LE(?BZ`V2~}F=;|Um<2OpRZ!+{I6H(L>j`)Ovy{@rY=c?zH
zOW}0r&(0G5*U9YlRIB<**R8Cz4Qd@ug{h8NqwXhbGcV79V#=sW$F?@rKxvXHkiY8Z
z{pm4oEnJ_DP3?m`a{t6vclYfZ_sYQ7SqtAFL|K9Au4y>6dIHlyG6Ssh=o*)hYu<z5
zZa+asR8m1)ZCU2bc;1`nc&<|~iy#5A+Qo;v>4mB>hsWA8E!?*7MeQO-Y9fmA{)f6G
zBT<xj!zAL-!%&~lkd~(Bu+AuM=+AzT9FRy4NcM$GVT82cs2=%9^0sqb;YG#zx>sc{
zK#^xo(<6OMcx^A|U}c@%bqNWN+NsYxA|nPiyeEx(Fq{0Op#?qNDE@MfO@z&0jk!UA
z-%X#Hg>(}^IAPt$8{{gg{{-mx5V?nvR>mbnQ%ST*_XA{&J(_lRcfKo^`uLSAr^1IK
z26}c*`41}A8a{kya-#bvYh&lyC2nbDPgyzHMB}aT`u7~=!P3UgA!Q55`lf1`vgE7k
zF*6<PN!wwIL?KcAXkiWDD**v6xfVp|1Q<q>FQp{_LUdt+v$eUY25%xSi`)9JHo*8B
zcK?+ee=&1Ez^i9O@>s_}_zz87{+7&0ugd#V?zvLhw)&)x^JGa==^C<5SzCcDWl&cA
zBi7(+fTu<^DKFEp-O=cMw30l&N>_4j+P1ySnCi^l$C2Ibi_%TDkMSJNcSTV3l^J^J
zti@aj_HB;TqwYXIi=jJ@B+knb@rD93LOkSTB(o*1Iv(Y$aw^b-(-A>D*e1u=HN5!U
z+>1J+mkLB2+POt}lV-N0rkmT(ei&tZ(um$X4J}9X|1ArIuAZsK+X<w>ovZxDZ=JpU
zHGYZmve8zsL&(b(3MQL|7HO!A5?z7P(DjSzKVj~60@{A7)z1Pyk69+j=f9unQ@4oV
zBqUy_nNzoKS6h=VY4yoG*;co~&pv7=B7cX@7R^BjO9z<cFrDmso5}!g{7X<=S*Eit
z^1S{lr7|h^Qn!Nen4R1oGcv|5;qSbR3I)a*uIRT8zo_beeelCjHzp?aOW+cHOrg6@
zXhB(jd<0i!Kd1Zvf3Q8Z@u}mFiSwt^`X#SVY7b_{Sk~LtfsvqI6hC;dZ@w$v6!${y
zauZY(<h5Ovf@Bhyj$S|L2e>t%`6^91{G}d9U)jra>|6sbWe<o*=AWX=_P3wy1_u6#
zF+x`Seao4aZ_K&wu6&J^Q#mGv`QTiK9s`$x&sH<Q{oWMW3QEv$;WhBoi@G!<y&j<x
z?pG^+^K&fPGtegS;%~wHZHho4hILE-^>>uB?QNe4bKWmhiI_QRL&({0?nJ!~>qPmn
zlNity7nB<D`p!+TGgU0CubWQ|!MuZbPX1UoT&fzUsMzO|B|3zz27g}8j=E8P=#J#G
zcMlM6D!lWQqNYnzo&WOzhx&)M)oT3iPmSHW$~5_LYSJQ}_Rss9x12PyY7c4}`1M8J
z7|TxXn|%`0U_2rM4c$-Qms#JoYH|+wi%3I6Q7DoY*a`{>X1D;@qQfuY24HfA7KoW_
zN$tu8FY_Y^`O`dgqz4)XgQZ*d-o?Y7aeVp9&Nvk0&JWW326q9@LuwFLxGvXiUjdS-
z2fc=)cEc8{70}_W`>Y4XtZHX_yPx$%7Ly8ISwDQYQDi(&PqO-Rjgi=s->XB>%RpPX
zcSk1!ocs>IaNm`1CsDJi2xBf;D>Kts?Z9UyCn4@4%2&S``t84CzN87naX}5`hZ?R)
z9O=S~9N0d&N>T&ogF~+d#E>cLTIi(QEHB*&&i2BLZQ8yl=5WoknTJUEhd~)PbV8VG
z>iPJ=tQ#kj42@1HsmG3%l})iM4bvNzUQeWv%`{B+*qqkllX1^>o(q*PdqM%XM$f7r
zSy~#HG9B5n|7|wmU3&&;Fbo$?Haw1Y&cXheTCmbzKKFj>9;#8VJMqzAgboL#!2)7`
zpjLN0h}ZYZ0=H714oJBo84)U~Kxt?aZ9_;yR%VI#MMpamQ!r{BOPgMvBwi4Wul+<@
z!w(Gq<8Jl0>rbjI&4X@!oYge)`v|g+Q@F0=H6$`fB8Kp*Nx$_zWuE_&$;2u~b{4E{
zG<(;n3h@b!jK8yfU5kM!X}p)LJw=!#4~8Rd<aLSGo<eAT>1)555SBAcE5k6U(~4<~
z|8+SKR<h@5i_u~*^9d#gy<#t5v3wc_StCVgmTp4>8gDPW`rO*CInI!95yLwpS^MKD
zx1#fmcUhWbeAjg@*~F;T5lEvGCVr8lu%Te{`_8aZt*s_<`otV@t|L<Yqm>2v9uWcI
zerv9bhWcf$Sm2BqVrC<l&kb<Y3Y`LUZYz&#dE2!w+KH;=a$dO?PyFdmW8b$bqy?IH
zDD&7_6MiWz8)k%DMwgc(+_(Pb*O0k#ECO@GtzuEnF0<ZVpKjhY-sf&Nq_KEouo)mv
zZ5*3=@xRkVw@xX>Ll^}fkiIcyyTfNWZjAJs5^<b-I()DP(6iQjUEXc652}Wge5mrz
zp8Q<X@NKkqA4^M|nd5yd7S$Lc;6^oYkyD{wtD%j2@b~hZHt)jr!>%QrvA&_8;;tA!
z&dd=M!aT_FW=s`rL|G*IMbl5UM5@8eQM;<Irn;e2tX8BgF$WJyXcLpp3y6+(<;Gf%
z^41)Fe`;V*IZk(rc#!{u2boPQo&vd?Fa1-}SQ1pQc}<`JR>)h!x|(|5YOW+rL_^8o
zkC3ev8D)gfhB0+wxrSF$1qhySg}?FQx)NdVsh`<}d2OMp=Am@Yx%YI+&ZLeBW(sM+
zm}tyeZBa%7xdwZ`Kt&-eC{gZZ)T{%A_PE2J&EXlDF)FfbBKzI>Ck2|f7k9{FBeen5
zzg&u0DHlj@aEK8PrgQwTM@Tj_IQ#u&!71h8{TH>@<t2NMxUS*Jv<(q!je1-GLcY-j
zivvralJ-4H=#+b<OV7Qx!hQm2X%iP)c<Wo|c&rWU%Ra@Udq<_rmGj;V^|y$HKdBeI
z^7H!&ao|i(gCYj0XDI+KeI$$RGavNQ=-WxgEoT8ni^*X501u`w6MFNohQQ(JV4He}
zxkqST<?s*muwN_{$7T-^)|#O{?hQ<<FWf9F3s`O&4;m$E>Cr8^c}R~MDk2jezQ{qZ
zHoU60A6`*JM%CqS-<_EbB(8FWm9t-?m}TvR1?utO24Kb1*~hbk(gx|#nQq=5k>}$d
zU?v+lx9>}&1+}ACE@ST)O|cl8uxILozTgY6UfaDmqeV&HT5K+qbS0eDM<$q+xAK{v
zbKVH-&1ypzT$fJbD0$!f32}Uh@gbVB{=vdce;Uj<6#_$fpJiocNX{h~#_Q17`S<28
zw(A^lF9iEg9^^xl8jBom2iu{41oX2FCd*3bi^++N#F3;VK^Qf8A5x${LZl+p1@_BD
zXd*yvRFkRzXOe5<!bGB!oPKj9%BNb#tZk2I9t~Lf43Bs23>I3v1jf;=dW#n}&pSRc
zT{2nxj4lCNdhu+Qs@HJ&>Y-Tm%f8Vy&DBbptiyFOPZ%%)3R7v2%7t$}=m|=N>s<TI
zlImiKe?E>KQ+jZYM^$&$z9ME_HH)S?*R@eR-T22X6uB8UP-kt?;AsQ7FKG1{ZZo6N
zPJFc4=Veh<jjFr(m)7JgG-pvJ@m>BU60>Sai)xv?!i3JvqG;z}vE}d1bQCkIN&7Uj
zOYhp@BwbruX-<2a;}sdd3a)$CU$PvhG-`>*DF_YupP#vqvrTzwa$Y0Er~5t^k-A-K
zO|w*nyiR9+qK+g(ulJRz&C61&hml)vQ1_2irGHB$70+n;>y;S51l4WRB5tK!i=&}x
z_-cEeFL*g-AwhuUMS!Q%WK>K|5&3)b{X1V;u@P3ElFj!@m{}?=jAn8aUtk3RtM*~3
zh#B&E$Evd1*Sy1${ti1-nOhR$p8yK>vQzL}G?zEPXmh$+3k=h1pOZAiH|HJ$#U<g9
z#j9&_!7*kl2R}B-%n9{!9Qcd;D4WF{iQgJ6aU$27{PL<e-nJ^hda&D&q`{~u&2Mk)
zt_HtVdWLTMiQbDi+;@E&3$;E_p{p#LCf|3l))p-a`$crLAT){x!5Xhz=Uf{FC<GJ&
zQ_Wv}#uWU)hwPnA2aMDE@Q7Y}9$k5si=5vY_N##mPRKp_wexc8rB$9wYTt=pEcui6
zn@>K{=BNsLu64Z#M2>7cUpcQ%KzEz0TN)DA(Dxs!+$+TMOO`xLF66*EX#YaG>SqrB
z{eGBbrPxPqb%Lo(C)6<;fXIExX^j&>Rykh>X%riO6{dF83HwIMgbi4BVWdojkotM_
zieJ;_rrX}>n6|g5I&MxolJ*H(u+a3xv<NbmCXMse(Ea)}PHs1<I!`Wlt@=HfC#DaD
zsB=4|ph(!x<vb=5y5?PAPyjkZr!HY1R$xGIF`5nl2y{0o5f$Ip{^W|?orr4vl*CCQ
zG7a#k<JszEf_W#|et$k8z>j>r{c@a7`I5j1&5NV_%#tO`wE)6>1?;t4dr5UFi|emw
zc5in0Hb-T2$a7=HG?GgR=c^c=Kxl4;&HDL`5s9r(^0@@F7WZepXZ4ve*Guh)f^Xt<
z-{U^SP<yREpQ5O5o4&8b34Jzl_S=o8$6wO#P#fu=7->Pt42qWxTg^2(%|2`%nm&Sl
z1eJ>x2Uh;Xa)pPtzPz<(PAB88Ndt|`T{(4F=tWFbDPkO_?00>hfsh{Yv3!}CS@(d`
z?ZZb|+y})@yInEhA|d_#a8RKGoGDog{fd_Kkf?D7^*efRpOB33K2d8|?OpGiRsD<*
zF`8C>Ul!`iXMJFD_o~tF7~QB0tiA5w(lxygHcJ9Lu^DTfo_jN8#g%Ihp=~W5FPGZB
zP?qwn<JUnbi>Ma>w%MFWzIvu&lTN=e?;B^#M$JWWa!AZa04^eS#mm!O9`t5{B!SI2
zAWs+y{PkMf#gYseEU!*0JY-nic&cmSU^BBOGSj<AC)K<Cvm<%B=hj5x34WNTH&UIS
ztF9$@Vf|P@<`jz^ZugtM3^lVMlpFKeJHP4w2f|ubR9|ay-Q>{6JL&DY3!%5w{d4Am
z*1y$_IMNlUYlMKx1jBN)dPNNq;A~4qYncT=|1I}As)HY$*u>+WyA|1lfV^_ft1ro_
zENv{y4nF}PmBzbx*Plv5#wIc{4Y4!dYScBfEhg)n+%p{AO9hBS?#QpNJsI_dp6Gkx
zx7OT2qJ8LX%_R91-ToRm$~=;EpA$J5@u!e!0LfSo5R5f${c?ukk)6IcSr_eAEqvc~
z_7FO)nqs05c_(>G#(T(6wH>Sm#8C}ohd#mm#k=~V4BdEQrXSHSg49IT|ClPCd0*?$
zNV~uVrGkY*?ypZ}o>LbYvX}XyVBimh92$JW^c<HNv*S(4lFJ?k+xh;Yij7VS(q)x|
znCoU64bv|yH(<~~bj-Px&s}>WSokgbk$h+N;E)^f2?`CLnM=Db@!=OE_H>8bt3WQ#
z{oM%e2fS;92#c9136NtC;vgcQuXO;<$%}a8i-aYxBdSL08=LLy3ya?K<n)ROzHb`~
z2yyG4)laHg2${HXK%bnB3aoZ^XJ!*6K4U<~Nz&8>6Sx{fK99sdEJ^@k(VLHQmngyA
zihdTE6^qsT*v(FhD%lBqXho2kP1V(HZ+T(2y$r6%h>ELAdMSiCx@IE#vNYn^(e?|=
zv+iFXyVEIm^SjMyg}kRC0uVzSk%5w?h)et#7beH4K|NE*=W4Qi!UFD<)E(-;kPyFj
z?h2u#BNvrnLDT#3vBi&rxzs~GKBQv<yQzIc4)e6xQg&7vHUr!b5;ycT1<*@LGKXRF
zzH%pN!r~&f#0TWe*te+y5Yu$l`WY+6ZDH_;XJ39g*t_1>ezNiCD}j$Xu-pr*@zx1r
zcFCsl3TFZ0iVsuCwu1&@o%Xr{%edZWY+OcuN}l(B^6Wp%%k%l*WT>qWI>~ZX4%DiH
z$X2hTWa}P}Vd-4ox1E`S#Cu@vGeKHs<i*{sEYUvkY#H{>HXj!$o^>SVG;V7bfxPU~
zzA|HT;Q7Rw#P>HR_`r#_OODdMg`KyDE*-WWHALM9q#(NjnE(p7q~3b_m!q*eP3`I-
zkm#YzW#-Oty6EhD<&KWkJK@SXoPG)H%xHU9(HKiI9ossMW+Eg_cRBM0*v$afz}?fb
zDp39|ffbZ0GU9@&Qef3XAqr7#WP>@YDqk=qASeP{1hKU~`bW!2quQeP#6EK0B1u$B
zKPTng)!5jaggCd8z&@(MmJKKVo^-JUO~<<XP(B_R&k5z#c>CFe5)|aT{Is1+U-NP&
z6KRWIu&>O_0Yp24kwv&$GP>@z`Wwg{HZ+~G`sHZKd8Qky0Dm9!OPz_rc95BZlVu!f
z<L6OI+!<peZm+eIPR^o>e#;BZnC4;la>zq)z12=!e4$<jFYv$JM3+yNe5<owNEBb|
zSO<qc<$8{Z!A^*DHyed=Q}wq_+T3>}5U<aCrEtT;`$Ok#Lwskb4u=mw)lWygOX|L1
z2k<iY^o&l2{Q8!3CPuM;UGY3<TLW?Nq)lgE>y#-X<->Rb6S1aqlazggzFP7&K2Qwc
z?x`y-mnh`;F!r7n0t)Y_i1+%WyK5M43+%bL{5X{YbkGYG%;^^@-^d7&N-KN`ViEu-
z>YP-{3wbLuv>2HWs6Glj<IAh|rJ5$?X+ice<SToc<dBPc*{|Bw)Ox1+W-Aq}%pTkS
z_J(|q6Hj;{fd}Z5#PWRLfDw;sSTEr@)@^V{na?Qt@dZdnt?yo8fP2U-7J6mDA_2u>
z(DQ#+DBV9e>jJG^`}lK{&1Np-yKPg_pnB22E2jVm3<WZ=*>=85eD=OBGE+7G5T1c?
z@Q3*xB=qOV_=)Ct3NZv*=U_kepPL|ec-*behn|n70hL){WQ!k&${Pe+s`3tLAWUL1
z!p>s|#6S5*jD{B*(w~RufePyxYf$she=R}r10uKl_u9WnJdyU_OD+uT2mkk4mHMB9
z0CKMX7FZPjy#i?f^Zxf5@CGCJ?-iN_0>}UJ&Hha=1^>NrR)|$z|9kzPM?n4$q5jW`
zB67q32fonZCovE|iQuQVXf}VscoZNGn{=kf*e6YP>;|BZ2un#O;wKe+HIK!MsNgfI
zSz(B{PaQ73fzc|5b(1G%?S*N3b<S0DmtgZ1JM1gUvmq>3cdT7c8aKoGt~`2%ZGj)w
z*e}x)S}zk?ll##jt2c$ok-9hsT^D=#9c!xp-KICwj<-esu#}{}Nc#A*gt6PC(GF&3
zOxoSPY{ap5cIHKR*A-P}(rH@ce7F@f%2#1i75fF%XdN=!+>&L|xC`qx);<i{-ZmL~
z%XcWP#N)VnGlE4ep*lE0xL1zVY{k&n46h=1X!SOxZYSCI=+@z^ZBq=tSvx9SH2Rna
zA5M5?)<VE<UM94lpwY*3sB+;J=nk72ZhJ1fR3w~me;(RQv!jcnC+s+ZFLZHX-5mHM
zk0Q(hs{hU0*Tze4Ggrzn+t1?^p1o%GdxoPI;ybqKKXZF~D1@oCXXzQhnX<R&eAlow
z=fAMK?4Vt89&cxPtgRZ5o8xyREY_cT#*oLs@K-OVMgAtvy9G`gaV~gunrhQyL$+&5
z4bIH{6;*j~CZcHfj<wy2ZHLXe{oLW*8d+jTx^CltVNUEW6aF~05N3l9yLs@xKr?zU
z5)1hqlt1f^$1Cg=C0zRo_y~;2x?kw^F|F=x{Lxmmwfqj7py+<;F>MR{lX=;!*rW_|
zMoO*gZOk<R(f#Sg9zN;bY!9tH?A)s7`^*9r>!7&t8|b2ew>5)DGFMB@+P_1aqqmf1
zRXz>E-~-->!2{elx<kILur;ea#@FgZW!X+Z6SocjSldYHnsD4dTMq42?h+>l#EW!m
z=m?=BVA&i5JV?=;_-Z6ZS2WH``$yG#f(=@*DjQ5kyIFU}cZqPq#^&j;R>9*(U-{=z
z6NtzSo*fjyb8MIUtM)uJr~xlVe|P*Uf8?<cVv_@_{=ayfpEmADie3p0BU!<VGj`Ww
z3`NHTiidtTmcAZc^|QgUNz)i@d&X@Vkq%G08FHXwo3@<$<WKCv5Njpr$8}d4a^4<(
zqBE_S@9mbc$2Z%upkyoesya@XrsgIpFO@lPV8UXmGp!aMR}SyZi(rHR^;zb#k0s;4
zx|&4a0%KGID`*Qg4~NbZ#`Xrha)aM*CRqD9X2=sif;N{n(ClP4$$@+P+2{$_D+FX#
zSn{P!CD&|Rl@faY3h|>IyBS{%MnZ5Ld9}_@jVEcvN8jiIW;@8gtk$TW@TeH4RenDp
zldW-G_5AEgAbqNZ?@VHtHruusTNv1_98dDU)g!GMeO^)A0I<%ty)*9`;;j^~Ex9pr
z)UDcFuwc0L#{L9FuC@J!_%e$ooK4%7bq9{|betSm(3@<5%Y&}_%oCoxhl6gS4yMms
zNU@F_d+!Mru}a<VSi`!w@q3`-h4cgpB{13+LfOieHT{GdeVQ6>F7T$g#QuFliJk1&
zW0ZL2F*H>UAhLeNW%@`Oa}MxQ_wgCH&mJmz<XO9~2HfsuFyleMbA7A3_6TiVV$_1e
z9hHJ!S3Fl%Hr2+k);==5%`vL|6{VMS<EnP89(|T2Jf>-yErm@NA2qH9q|}Do-UGcv
zt@^!(E8!@{xbTqzN;n4VcK7Nuu*&BDuP^7JHG)8XG0vlorTsE`6IE~w*~FPrK@vxh
z>uYhHAVFfo!N<DKZYwai>c=$L@s@8p&xl(^aL5cZwWRnU1<CU0NfQTlt?S}e=}D!p
z;<o?B>(6nKDzhp@9bS0(tD`+{%N_=(0QtG32!4}71s8V2Q)4v=1P<ZB6~do0$}$rP
zz@Biu7Wi|xA|{C%@HX4k9k$u*fj~QAH^412)7RPCEWWJ1+tsPhqiBqil-^d3(yktk
zcG_t1P`%ACW1RK7w?q0aGiB<;e%_LOlcdVZHMtZE&qi1Up9?zoOlDPH(px8NzSfa3
z#4NYH4Llu=6DCTL!?5FR*?E){=)zo2J$Ut?+F_ewn@53(T_!dY#n1tXBHRLZgiA9K
zg8N=2eY~c~I}0O3|J9AqOG}CpDTzCyWO2kcra#i*Uo9p_Bp_e7%2WnyNkp8}a<v*0
z!Q-5tpr(T_Xh$Zc`BuG)$)rqV4vO7-)8#vdE!~YQzCKY%xPM(O*Eb3ogJmj~!d#at
zI`i(gY!9XlC*U?01$1$9iny>VL@B0=!w$bEob`vp=jUu)=Y&#@=VW4!CF{_)fhf;I
zv*V9a{-mtv@ZhUgKzkHmtGPeNw7xH|P3f%$xSGcWY~dQ0w0>+#TIiHU4ZQ5(>&|B7
z?N8lUNUxn~TyWEZwdcegfj?=#N=b60|A#Y|{n}&fwW;>J72~X8O6xm{-7RB$fzwe^
z6Y}%~aUghoBYJM*_l^eLc@SEza`RBx=;PRm6eJvUmW_|^P*$R>L)Kp&bR6kLATG){
zFYr1yQ!yY9=n9Xk!mSZoqSYEQLD}|$_k_PSg<X{b3dOUeDn{ua{XZ~R_fA-iS`;#w
z2_8;EQ?FGMCJaTp0MU$Hu|^(g11|5$wMt##@H4NfuI>c?2jILf{*?P`v+zl~WI<X^
zg>s?Mr46;g_Db*DnENe<cM+L-T1zaV^Kb%e9?G^eHvy#5wgjLlTI?NAhzr9+(kdg=
zabe?kUmXiIH=>}uV1&Q^S6}l1`I>gd<GjJX%ra8?dUab*)Wh&f()YOu6?P9cr9H(5
znYAF%*>!TX1A#lJnjM&ER6UgRQ+!t#CVw-Ea@%7pob^=i%d)GCM*}x3z~4;rGA+}w
zyIHQ=n;1{yCk_Ji=ordUdKtLQiWpF2$;WeGVp0CgfMtl3r6&Yshp{?r=7Uwr3I-<o
zPxjhH-NK)(v=Bl-t6=#5Q`@X}3(%5FrFpwF#$&tD=N@k;do1?ydI@)+jU5Bys<hfd
zu1dWNXy?3sIX6HBv3B0)PRH&nlB41lCSVXY&;wQy)3y3glZ);Rt3eBb!^LMFDpD=*
zO5%-|3B6?==^w$Ym*1R6nVNCKpn#voB(?i^@D?UCJJzNA36*RuaBoZoH_*>zd|}5z
z#>t%%wDYLC1MP&paKcy;5LtZPwi^^XbJM4VohL1DOxN1_v4;vNrzYd<H&ga@K`NE5
zE{nF*Wzw>^oc>G8_CoA!SK+8C!T8Exk;0uwpTTic&TqSmEJ){<X9p>KyG&JrA9_EQ
z2$%5|rMX=pM5hpG2lTBMnDgvokDGv&4sLTdi2qZAmwvwg{NMN(yy3w!tKnpZ6CogS
zw`n_SCcH1}LRPs_=^J%7<U!ZPug+vxV_U01NXO7aMze}Z9S`4UZv<tdOW~%wg3@M~
z)>rHmA65H%2LLEmuJE6uy46-;7wZWA756z?+1O1WeO@rOz&-!5__h!*8LVTEV}<_T
zemggG>~9e&W}!D$6<uml(=*_mAX>3120wiO5I-aBXRCUxzEvOI#hl~g^&lu=ZM0-B
zL^-*$X%$R29?+a-N!DBCvsv|i{1w2km{*ZOqzGHqw!9>fF_`)O8AiA9)kop~49BzK
zaKb#1ms7`Xc9)7M^=tRZ0<$C=e3X4W2hBVdiUIASoq8*Kc>moRse|#(dULUg_odTl
zM}5E#X7eKbXx5Q|$bJinZT1HESv%t6KsW<m$^2O_8j5P1$gt|2C^G$fEnsGp6zjl&
zuI}fHI{<Zoy}7q>E{lp;NBFB!9@RFSE;EhKDVu0yn&R~fWl(fxh>ie83*y7~4*PG+
z&n=c};v{2^=d4+GP{^C0bFo08(i6-u$G|i>0tR6?q47-g-La$;5cSc(K1>1TuRs{M
zAJ)C?4(wdo0;s?~_c4h@@16Xq@6wg@avtd@Yi@@$RT`TO?Y@Q%@l(}n0h?`CFS$c6
zXg$d+g}hH%!wXai<<cgWjwdmUY<a`xS8Qihrh^|JjCBX1l$MU|j$<QV+-U78w$+La
zW<P0{#{5b<?gtOH%py`32+EFTpnkx*nD%>5Xj%eh?inZkXgj6Tj5r&_1{Z+f+9kH2
z-(h1S<J^9d+Cg(|@+(}Aml5LtRLwIO=7i_z808IfWQT-eH`_jG+EHMHqwOR|x8&}u
zcmpB#sBmyR&ctdkxcK^XtZE+*;rMt(Yxb~Ms{4AhMMCAw1VWo0RAl|H=E>kjXac%L
zbKrkrpNb%u(Fi9SM!3{J-Ux>exA+k|r4OVHRIAMohL+IgUl1Z%6QGM8=@ahV^K&d@
z1sxa7n5a8uGViqt@#90T1>|Q0dq>^H2TF5c#8=4QV5d`YIiiK8ISg|8XTFiH$h628
zV<#g$tsH)pyk6zDELh+k?J-Mn7b*ae<N&;{^DXe3JAhB2&0w)wNgAL3ClEK)aP5G>
zZ{Zg}@BjG1fSW+16p)4g8e5C5Qv!F6X?Ws6-^Ii{Awf(igWSC~vFk0-TNa{BO%UYz
zxqiOtRZscVkk%M)t2(n`ZL+<oomqQJ(@3jOrOGi^T-{Rpn9%Ml9bpnXM)hx1Is79O
za5S>rnNo=^6au(ZfCX;hBRTMU-G@cMiA)CTO9-PYNey($kq0_k6%YuRBPv%2CwACj
zO<>>lY54t!=#;Nhta?@A{F7ors5)Lht8<dgf3CXgpvZ(QRtakw-V-U{!GZ4Q&8IVy
zcaeizt)_mnGxi=kiZvQM<MncHiP3Zn*=Tz2HYYSbQ`9(aRe)<eYBKokIV%grN3gyw
zMmAgciSJ4RPYMNRL~aZ;PV915ot27!rDpeTEF9biEDLD=8MAp7a0;U={2Z-Z1L!A1
zj2VH-7g55rAhuJ0gOk02rv}WlZQUjyBPN7s40nZ=P|d?V(sF%m&_~@|_@jPr!n<T1
zFy@71mUIS-S!G1F(Rsj!Jp<B}o7g4b2(8q?mAZk^pW@j~)BE3Hy*{1;<?k{l4$r*8
z31@rLsNAJkTbzUM%O!>^WR&m@nTgbslK@<#;UJmm-TM`j<G-7ClA@d{-IyM2q@FH?
zjdf3@@K?IE3Z|R=&?|^44R*JMM>d94E-XXKukz=A=BPle3iBF-<YU5s2H{2!rM)C|
zVq9%MP)SRY^&y{28|`d>IR)0W0;3sL3nyvv|7+trzPO_R`r=t27<g(*Y!0&@s`zp5
ztEPQiQi_Ew8HpzMPF0lVTyTSK-!LML<s(Nh%1GoUpsg!9n(Zy07fWHygm>8Yio|!H
z(wUd1K`1x<X9JAGwIVYqaxZ-*OgtZkt*F+14>1z$y4Xa!HP<+<119SqGZOGiidZ#V
z*viQs;8$o3a3z6XJ<CRP#E4q%DA|c>XRbpU9|#zRZR$UsG@B}JTL_~Eoc@dtNA_5u
zJ1%70Rj;|fM(d?T|LqPxi)N`Q4ept;pKVknmArbhQbdu*ctiYp)9<U3?yhyEmzuHl
zOq1KCUP?UA`JV(=Uh*50GPwJ9;#}87ZU2SRj>GEYFUr8*({#<AJ^;O%6RPO&0t;<7
zoN#X*8gndUB?!!&EMjN^?qW4trE(c8m+nAUQoFan-D*LF10%t@^f8c!vM`{22xE<n
zc9Fmq7D_qz_Y5Aq=2e19{dbYVI`%G$_P%~;PbIrIG^VXr(d`4B*+>EZNe=8|TXbdc
z9dn(rkhYju)Z_d;*n{+=X7OFt>y}X6LGOxD+(P`p6l}%V(F}$2W6jVhBYGz)SzzfB
zLk~bg19R5*J>i!%QFTPh0#X9|BCPus&@UXA%Y-l#F_6L#0A@lc`<OOm_!*9m#B2EK
z+;dUIA43l(&ALy8nmek@Fbp$nun3k7d)*P$xe?XZO&!v0H#Z9UWhyrtC&&-kR~8?1
z@dnbIkhoq<_Wuy+ExJ<DIhjnP4GP{2EWkLxGB)UEz=dP5NI8y8nd<=7*v>An28pah
z6h?`fI0p2)1{M%hsBeKc;#3b`gLXie0#42b{*QIRWAK&4^kyPA-tE$5I1fz5O=~CN
zHt?-&|03gj4c;RDZ0|jIHI|))JbV4vXD|6ER>cuY6BuuNdziVYqvp}Z4Io<Iav|IY
zFB#sM0L}u%Q-1qh(uTN5|5=Q0iYL;86vId)U(iwR445&f3o{=06RrPzmZ*kcdQ+gd
zffdm}yGay~X6V01Y5%b&X6&XnGrk8BJvb2bag+qD`lsHZ`l&M$+(|hxkhG3Q)z_1m
z<EwoVfkO-c4KGWqP0UaDlE5$s24ci5lJA-#?&^h%Nie5bbKYT|wC4}CII~(x8tmAO
ze*8T{ib1jay4<)HaQ$_0?TE>a7sLmEAX2wm0so_~u8(qXrEU@;L`K;IRP|!M+kKTE
zef191B_q0r7*3M~1f5px5+U!FAn)p*vcLV0%V>Algpk0Z{!yj<a<}?_{_Jq_@%E*j
z9=dvV!%U~>k2N7?_=SnxfZ^R1(pKv>_}=a->HUf1YYjPVh)w(fn}fD!oSO;9aCCTz
z<>JBVcAaqR>`@-Z@Z-{q+bNcgcUTCyx^vO(SL$DvUfy5U<M5BZS;y!SX+nh6!>T?v
zdNUAus0H4w8g3=!PXz|b4S0PC8Y7S`DL@NG>#%9z$PDPZwcA3lB06@F8;^+VxhWQS
zp-ut+W@%0leed0|e+pRJAPiV;VVfOMs)XAP*21mmc2}<)9|X{!(L;TzS}*$Oj^$x)
z(4!Qt-sRC8q;KvZAIxM6Oi<!6ic82f|Lr-pmq%hIa9?iQc7KkC@R|c*<%q7_eDg}0
z&k?r$U>2M0s~?fsts*Fv>vcvuJW%(?dRno92jTwkc11P_cu@l;uRj#p$+i{*TE88r
z|837PZ!lM}V10vNM}{Kyw+`^ymRh>FK$!4`5^hDVFHi@pCBPw-cJJYj9NDIwTHxP4
zn$`h}g#|_<g?D2x^&?A)Y9Cd|&2>`wCNu&6h>V_SW-Pi1W12&%TEp+?DcLd6!xQ+V
zuvd877dK4!mXd-8PE@+@71mZ%4#HA=X$-x_gc&ideRpBI{b_kCkMsdsTH9KiOQ9SY
z+iDKQ=?JYyDPZxS#sBv{Ko%{agudD&7gKulSaa*P+M<q2-QHL|;ri;j!C?Sm*b{Cm
zETaC5@DmQ6=I~Ms>TtlNWLeg~$f&6uFHsd^2}I;23sC0rdyVX9hc&^|kx)#Y%;%LG
zlPQ!G<u!AlgfZekQ?`DfOk62XczaCi@hf}TJp=T7#tpC@%9;lFp|OBLLmcIR$65c6
zAMv}2z=+R1BU;oG5;&(V1W}gH5G^t+5RW^+yKlmTjRC`_0+fyiOi%T}`DOH*78;EW
z&b{v5i=a#K!qF751ny&OvVZ(_qkTnv@tsI>$CH86O1oml?qh}#jlO!nz(LrbYzs5Y
zb*UAbA2)*7_Ffe`SCL7J32nbhl`Knt6ta<Obg^_rDB<7%J^CLbkJSQa<=#9TZU#Df
zs|5v4`Q)NP0*D&UA`BQffGY%Jk7@h=^}OCsdgq_Q>jul}&9Nl*P<($}C>D$zhPfI6
zM_%GbeJ!Qu@Vi{h%^HPYXe2YUP2)gUh<$s!dVuAz7~H(+1Fw#8a7>$MW}qA?J=l$b
zjkR*Q1aaqUp>TN>MT{zko#&D}Eh?_zV0w#9_aC|v#ok@h^B@Fj#Rtq%@D?r#;&eon
zf}(WozrU3F3N6ZLce(_W9q{mhdwPDyx{>J0NWR<z>+{jGe?R_DRspp_nETqLW4*JI
Ss7u^XQCHDXE?0c=>VE)uh~pyw


From 99fccbbffc7e1040a3f3ca1df0813a09e6cc4ffb Mon Sep 17 00:00:00 2001
From: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
Date: Thu, 1 Aug 2024 12:05:14 +0900
Subject: [PATCH 17/88] updated archival note (#20927)

Update archive notice on deployment guides.
---
 articles/deploy-fleet-on-aws-ecs.md            | 2 +-
 articles/deploy-fleet-on-aws-with-terraform.md | 2 +-
 articles/deploy-fleet-on-centos.md             | 2 +-
 articles/deploy-fleet-on-cloudgov.md           | 2 +-
 articles/deploy-fleet-on-hetzner-cloud.md      | 2 +-
 articles/deploy-fleet-on-kubernetes.md         | 2 +-
 articles/deploy-fleet-on-render.md             | 2 +-
 7 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/articles/deploy-fleet-on-aws-ecs.md b/articles/deploy-fleet-on-aws-ecs.md
index ac9428865b..38b802fb9b 100644
--- a/articles/deploy-fleet-on-aws-ecs.md
+++ b/articles/deploy-fleet-on-aws-ecs.md
@@ -1,6 +1,6 @@
 # Deploy Fleet on AWS ECS
 
-> **This article was archived on May 16, 2024,** and may be outdated. Check out [Deploy Fleet](https://fleetdm.com/docs/deploy/deploy-fleet) for our recommended deployment method.
+> **This article was archived on May 16, 2024.** Check out [Deploy Fleet](https://fleetdm.com/docs/deploy/deploy-fleet) for the most up to date deployment method.
 
 ![Deploy Fleet on AWS ECS](../website/assets/images/articles/deploy-fleet-on-aws-ecs-800x450@2x.png)
 
diff --git a/articles/deploy-fleet-on-aws-with-terraform.md b/articles/deploy-fleet-on-aws-with-terraform.md
index 6853032a50..38f8de9b95 100644
--- a/articles/deploy-fleet-on-aws-with-terraform.md
+++ b/articles/deploy-fleet-on-aws-with-terraform.md
@@ -1,6 +1,6 @@
 # Deploy Fleet on AWS with Terraform
 
-> **This article was archived on May 16, 2024,** and may be outdated. Check out [Deploy Fleet](https://fleetdm.com/docs/deploy/deploy-fleet) for our recommended deployment method.
+> **This article was archived on May 16, 2024.** Check out [Deploy Fleet](https://fleetdm.com/docs/deploy/deploy-fleet) for the most up to date deployment method.
 
 ![Deploy Fleet on AWS ECS](../website/assets/images/articles/deploy-fleet-on-aws-with-terraform-800x450@2x.png)
 
diff --git a/articles/deploy-fleet-on-centos.md b/articles/deploy-fleet-on-centos.md
index b832e0f4f1..f9439d5773 100644
--- a/articles/deploy-fleet-on-centos.md
+++ b/articles/deploy-fleet-on-centos.md
@@ -1,6 +1,6 @@
 # Deploy Fleet on CentOS
 
-> **This article was archived on May 16, 2024,** and may be outdated. Check out [Deploy Fleet](https://fleetdm.com/docs/deploy/deploy-fleet) for our recommended deployment method.
+> **This article was archived on May 16, 2024.** Check out [Deploy Fleet](https://fleetdm.com/docs/deploy/deploy-fleet) for the most up to date deployment method.
 
 ![Deploy Fleet on CentOS](../website/assets/images/articles/deploy-fleet-on-centos-800x450@2x.png)
 
diff --git a/articles/deploy-fleet-on-cloudgov.md b/articles/deploy-fleet-on-cloudgov.md
index 5e5e2b1644..c075ab6c9b 100644
--- a/articles/deploy-fleet-on-cloudgov.md
+++ b/articles/deploy-fleet-on-cloudgov.md
@@ -1,6 +1,6 @@
 # Deploy Fleet on Cloud.gov (Cloud Foundry)
 
-> **This article was archived on May 16, 2024,** and may be outdated. Check out [Deploy Fleet](https://fleetdm.com/docs/deploy/deploy-fleet) for our recommended deployment method.
+> **This article was archived on May 16, 2024.** Check out [Deploy Fleet](https://fleetdm.com/docs/deploy/deploy-fleet) for the most up to date deployment method.
 
 ![Deploy Fleet on Cloud.gov](../website/assets/images/articles/deploy-fleet-on-cloudgov-800x450@2x.png)
 
diff --git a/articles/deploy-fleet-on-hetzner-cloud.md b/articles/deploy-fleet-on-hetzner-cloud.md
index a7cd76f1c4..ec6c7da9a9 100644
--- a/articles/deploy-fleet-on-hetzner-cloud.md
+++ b/articles/deploy-fleet-on-hetzner-cloud.md
@@ -1,6 +1,6 @@
 # Deploy Fleet on Hetzner Cloud
 
-> **This article was archived on May 16, 2024,** and may be outdated. Check out [Deploy Fleet](https://fleetdm.com/docs/deploy/deploy-fleet) for our recommended deployment method.
+> **This article was archived on May 16, 2024.** Check out [Deploy Fleet](https://fleetdm.com/docs/deploy/deploy-fleet) for the most up to date deployment method.
 
 ![Deploy Fleet on Hetzner Cloud](../website/assets/images/articles/deploy-fleet-on-hetzner-cloud-800x450@2x.png)
 
diff --git a/articles/deploy-fleet-on-kubernetes.md b/articles/deploy-fleet-on-kubernetes.md
index ea85bbb07d..5e5144efc5 100644
--- a/articles/deploy-fleet-on-kubernetes.md
+++ b/articles/deploy-fleet-on-kubernetes.md
@@ -1,6 +1,6 @@
 # Deploy Fleet on Kubernetes
 
-> **This article was archived on May 16, 2024,** and may be outdated. Check out [Deploy Fleet](https://fleetdm.com/docs/deploy/deploy-fleet) for our recommended deployment method.
+> **This article was archived on May 16, 2024.** Check out [Deploy Fleet](https://fleetdm.com/docs/deploy/deploy-fleet) for the most up to date deployment method.
 
 ![Deploy Fleet on Kubernetes](../website/assets/images/articles/deploy-fleet-on-kubernetes-800x450@2x.png)
 
diff --git a/articles/deploy-fleet-on-render.md b/articles/deploy-fleet-on-render.md
index 1b5ba740b9..703d872cf6 100644
--- a/articles/deploy-fleet-on-render.md
+++ b/articles/deploy-fleet-on-render.md
@@ -1,6 +1,6 @@
 # Deploy Fleet on Render
 
-> **This article was archived on May 16, 2024,** and may be outdated. Check out [Deploy Fleet](https://fleetdm.com/docs/deploy/deploy-fleet) for our recommended deployment method.
+> **This article was archived on May 16, 2024.** Check out [Deploy Fleet](https://fleetdm.com/docs/deploy/deploy-fleet) for the most up to date deployment method.
 
 ![Deploy Fleet on Render](../website/assets/images/articles/deploy-fleet-on-render-800x450@2x.png)
 

From 0b2369b9638b9ee674913eb1708460a5ba34c057 Mon Sep 17 00:00:00 2001
From: Victor Lyuboslavsky <victor.lyuboslavsky@gmail.com>
Date: Thu, 1 Aug 2024 07:42:38 +0200
Subject: [PATCH 18/88] Added null checks to GoogleCalendarLowLevelAPI (#20887)

# Checklist for submitter

Fixing unreleased bug for #19352

- [x] Manual QA for all new/changed functionality
---
 ee/server/calendar/google_calendar.go | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/ee/server/calendar/google_calendar.go b/ee/server/calendar/google_calendar.go
index 713ea9af52..73c47d5cde 100644
--- a/ee/server/calendar/google_calendar.go
+++ b/ee/server/calendar/google_calendar.go
@@ -144,6 +144,9 @@ func adjustEmail(email string) string {
 func (lowLevelAPI *GoogleCalendarLowLevelAPI) GetSetting(name string) (*calendar.Setting, error) {
 	result, err := lowLevelAPI.withRetry(
 		func() (any, error) {
+			if lowLevelAPI.service == nil || lowLevelAPI.service.Settings == nil {
+				return nil, errors.New("calendar service or settings not initialized")
+			}
 			return lowLevelAPI.service.Settings.Get(name).Do()
 		},
 	)
@@ -153,6 +156,9 @@ func (lowLevelAPI *GoogleCalendarLowLevelAPI) GetSetting(name string) (*calendar
 func (lowLevelAPI *GoogleCalendarLowLevelAPI) CreateEvent(event *calendar.Event) (*calendar.Event, error) {
 	result, err := lowLevelAPI.withRetry(
 		func() (any, error) {
+			if lowLevelAPI.service == nil || lowLevelAPI.service.Events == nil {
+				return nil, errors.New("calendar service or events not initialized (CreateEvent)")
+			}
 			return lowLevelAPI.service.Events.Insert(calendarID, event).Do()
 		},
 	)
@@ -162,6 +168,9 @@ func (lowLevelAPI *GoogleCalendarLowLevelAPI) CreateEvent(event *calendar.Event)
 func (lowLevelAPI *GoogleCalendarLowLevelAPI) UpdateEvent(event *calendar.Event) (*calendar.Event, error) {
 	result, err := lowLevelAPI.withRetry(
 		func() (any, error) {
+			if lowLevelAPI.service == nil || lowLevelAPI.service.Events == nil {
+				return nil, errors.New("calendar service or events not initialized (UpdateEvent)")
+			}
 			return lowLevelAPI.service.Events.Update(calendarID, event.Id, event).Do()
 		},
 	)
@@ -171,6 +180,9 @@ func (lowLevelAPI *GoogleCalendarLowLevelAPI) UpdateEvent(event *calendar.Event)
 func (lowLevelAPI *GoogleCalendarLowLevelAPI) GetEvent(id, eTag string) (*calendar.Event, error) {
 	result, err := lowLevelAPI.withRetry(
 		func() (any, error) {
+			if lowLevelAPI.service == nil || lowLevelAPI.service.Events == nil {
+				return nil, errors.New("calendar service or events not initialized (GetEvent)")
+			}
 			return lowLevelAPI.service.Events.Get(calendarID, id).IfNoneMatch(eTag).Do()
 		},
 	)
@@ -180,6 +192,9 @@ func (lowLevelAPI *GoogleCalendarLowLevelAPI) GetEvent(id, eTag string) (*calend
 func (lowLevelAPI *GoogleCalendarLowLevelAPI) ListEvents(timeMin, timeMax string) (*calendar.Events, error) {
 	result, err := lowLevelAPI.withRetry(
 		func() (any, error) {
+			if lowLevelAPI.service == nil || lowLevelAPI.service.Events == nil {
+				return nil, errors.New("calendar service or events not initialized (ListEvents)")
+			}
 			// Default maximum number of events returned is 250, which should be sufficient for most calendars.
 			return lowLevelAPI.service.Events.List(calendarID).
 				EventTypes("default").
@@ -197,6 +212,9 @@ func (lowLevelAPI *GoogleCalendarLowLevelAPI) ListEvents(timeMin, timeMax string
 func (lowLevelAPI *GoogleCalendarLowLevelAPI) DeleteEvent(id string) error {
 	_, err := lowLevelAPI.withRetry(
 		func() (any, error) {
+			if lowLevelAPI.service == nil || lowLevelAPI.service.Events == nil {
+				return nil, errors.New("calendar service or events not initialized (DeleteEvent)")
+			}
 			return nil, lowLevelAPI.service.Events.Delete(calendarID, id).Do()
 		},
 	)
@@ -206,6 +224,9 @@ func (lowLevelAPI *GoogleCalendarLowLevelAPI) DeleteEvent(id string) error {
 func (lowLevelAPI *GoogleCalendarLowLevelAPI) Watch(eventUUID string, channelID string, ttl uint64) (resourceID string, err error) {
 	resp, err := lowLevelAPI.withRetry(
 		func() (any, error) {
+			if lowLevelAPI.service == nil || lowLevelAPI.service.Events == nil {
+				return nil, errors.New("calendar service or events not initialized (Watch)")
+			}
 			return lowLevelAPI.service.Events.Watch(calendarID, &calendar.Channel{
 				Id:   channelID, // channelID is also used for authentication -- it should be a random value
 				Type: "web_hook",
@@ -226,6 +247,9 @@ func (lowLevelAPI *GoogleCalendarLowLevelAPI) Watch(eventUUID string, channelID
 func (lowLevelAPI *GoogleCalendarLowLevelAPI) Stop(channelID string, resourceID string) error {
 	_, err := lowLevelAPI.withRetry(
 		func() (any, error) {
+			if lowLevelAPI.service == nil || lowLevelAPI.service.Channels == nil {
+				return nil, errors.New("calendar service or channels not initialized (Stop)")
+			}
 			return nil, lowLevelAPI.service.Channels.Stop(&calendar.Channel{
 				Id:         channelID,
 				ResourceId: resourceID,

From 1dbdb57d7687ff54c51a85d9a9f1123bf0f8d5dd Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 1 Aug 2024 09:17:15 -0300
Subject: [PATCH 19/88] Bump google.golang.org/grpc from 1.64.0 to 1.64.1
 (#20852)

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from
1.64.0 to 1.64.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/grpc/grpc-go/releases">google.golang.org/grpc's
releases</a>.</em></p>
<blockquote>
<h2>Release 1.64.1</h2>
<h1>Dependencies</h1>
<ul>
<li>Update x/net/http2 to address <a
href="https://nvd.nist.gov/vuln/detail/CVE-2023-45288">CVE-2023-45288</a>
(<a
href="https://redirect.github.com/grpc/grpc-go/issues/7352">#7352</a>)</li>
<li>metadata: remove String method from MD to make printing consistent
(<a
href="https://redirect.github.com/grpc/grpc-go/issues/7374">#7374</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/grpc/grpc-go/commit/4d833de0e0ea4345c2f8333f5e1d1155f93c5222"><code>4d833de</code></a>
Change version to 1.64.1 (<a
href="https://redirect.github.com/grpc/grpc-go/issues/7381">#7381</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/e9193a42987f93cf634aedb7c6f32d607281f8c4"><code>e9193a4</code></a>
*: update deps (<a
href="https://redirect.github.com/grpc/grpc-go/issues/7375">#7375</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/ab292411ddc0f3b7a7786754d1fe05264c3021eb"><code>ab29241</code></a>
metadata: remove String method (<a
href="https://redirect.github.com/grpc/grpc-go/issues/7374">#7374</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/355b9a557b63896fc569d8be1518905eabde0026"><code>355b9a5</code></a>
Change version to 1.64.1-dev (<a
href="https://redirect.github.com/grpc/grpc-go/issues/7219">#7219</a>)</li>
<li>See full diff in <a
href="https://github.com/grpc/grpc-go/compare/v1.64.0...v1.64.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=google.golang.org/grpc&package-manager=go_modules&previous-version=1.64.0&new-version=1.64.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts page](https://github.com/fleetdm/fleet/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 go.mod | 2 +-
 go.sum | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/go.mod b/go.mod
index f08fad8627..f735a2244b 100644
--- a/go.mod
+++ b/go.mod
@@ -126,7 +126,7 @@ require (
 	golang.org/x/text v0.16.0
 	golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d
 	google.golang.org/api v0.169.0
-	google.golang.org/grpc v1.64.0
+	google.golang.org/grpc v1.64.1
 	gopkg.in/guregu/null.v3 v3.5.0
 	gopkg.in/ini.v1 v1.67.0
 	gopkg.in/natefinch/lumberjack.v2 v2.0.0
diff --git a/go.sum b/go.sum
index f0d7931bb3..7eceaae2aa 100644
--- a/go.sum
+++ b/go.sum
@@ -1755,8 +1755,8 @@ google.golang.org/grpc v1.38.0/go.mod h1:NREThFqKR1f3iQ6oBuvc5LadQuXVGo9rkm5ZGrQ
 google.golang.org/grpc v1.39.0/go.mod h1:PImNr+rS9TWYb2O4/emRugxiyHZ5JyHW5F+RPnDzfrE=
 google.golang.org/grpc v1.39.1/go.mod h1:PImNr+rS9TWYb2O4/emRugxiyHZ5JyHW5F+RPnDzfrE=
 google.golang.org/grpc v1.40.0/go.mod h1:ogyxbiOoUXAkP+4+xa6PZSE9DZgIHtSpzjDTB9KAK34=
-google.golang.org/grpc v1.64.0 h1:KH3VH9y/MgNQg1dE7b3XfVK0GsPSIzJwdF617gUSbvY=
-google.golang.org/grpc v1.64.0/go.mod h1:oxjF8E3FBnjp+/gVFYdWacaLDx9na1aqy9oovLpxQYg=
+google.golang.org/grpc v1.64.1 h1:LKtvyfbX3UGVPFcGqJ9ItpVWW6oN/2XqTxfAnwRRXiA=
+google.golang.org/grpc v1.64.1/go.mod h1:hiQF4LFZelK2WKaP6W0L92zGHtiQdZxk8CrSdvyjeP0=
 google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.1.0/go.mod h1:6Kw0yEErY5E/yWrBtf03jp27GLLJujG4z/JK95pnjjw=
 google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8=
 google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0=

From feb32a274a9e3424cee70e68b9af5f3d7853652b Mon Sep 17 00:00:00 2001
From: Dante Catalfamo <43040593+dantecatalfamo@users.noreply.github.com>
Date: Thu, 1 Aug 2024 10:27:17 -0400
Subject: [PATCH 20/88] Linux Mask `systemd-user-sessions` (#20877)

#20370

Part 2 to #20699. Apparently `systemd` now automatically deletes
`/etc/nologin` on startup. In the previous PR, rebooting the machine
would remove the nologin file and allow users to login. This PR masks
the service that performs the deletion, preventing it from running.

The message displayed to the user will be what is specified in [this
file](https://github.com/systemd/systemd/blob/7767896d127264f660e1e8a714e5cd760840921f/tmpfiles.d/systemd-nologin.conf#L10).
It's not the best, but I suspect messing with too many systemd files
could come back to bite us in the future if things change, so I'll leave
it as-is.
---
 ee/server/service/embedded_scripts/linux_lock.sh   | 8 +++++++-
 ee/server/service/embedded_scripts/linux_unlock.sh | 9 ++++++++-
 scripts/mdm/linux/linux-lock.sh                    | 8 +++++++-
 scripts/mdm/linux/linux-unlock.sh                  | 9 ++++++++-
 4 files changed, 30 insertions(+), 4 deletions(-)

diff --git a/ee/server/service/embedded_scripts/linux_lock.sh b/ee/server/service/embedded_scripts/linux_lock.sh
index f6961f3b42..227b05fd73 100644
--- a/ee/server/service/embedded_scripts/linux_lock.sh
+++ b/ee/server/service/embedded_scripts/linux_lock.sh
@@ -38,6 +38,12 @@ for user in $logged_in; do
 done
 
 # Create the pam_nologin file
-touch /etc/nologin
+echo "Locked by administrator" > /etc/nologin
+
+# Disable systemd-user-sessions, a service that deletes /etc/nologin
+if [ -f /usr/lib/systemd/system/systemd-user-sessions.service ]; then
+    systemctl mask systemd-user-sessions
+    systemctl daemon-reload
+fi
 
 echo "All non-root users have been logged out and their accounts locked."
diff --git a/ee/server/service/embedded_scripts/linux_unlock.sh b/ee/server/service/embedded_scripts/linux_unlock.sh
index b9d0554f7a..6e6880c542 100644
--- a/ee/server/service/embedded_scripts/linux_unlock.sh
+++ b/ee/server/service/embedded_scripts/linux_unlock.sh
@@ -21,4 +21,11 @@ do
 done
 
 # Remove the pam_nologin file
-rm /etc/nologin
+[ -f /etc/nologin ] && rm /etc/nologin
+
+# Enable systemd-user-sessions, a service that deletes /etc/nologin
+if [ -f /usr/lib/systemd/system/systemd-user-sessions.service ]; then
+    systemctl unmask systemd-user-sessions
+    systemctl daemon-reload
+    /usr/lib/systemd/systemd-user-sessions start
+fi
diff --git a/scripts/mdm/linux/linux-lock.sh b/scripts/mdm/linux/linux-lock.sh
index f6961f3b42..227b05fd73 100644
--- a/scripts/mdm/linux/linux-lock.sh
+++ b/scripts/mdm/linux/linux-lock.sh
@@ -38,6 +38,12 @@ for user in $logged_in; do
 done
 
 # Create the pam_nologin file
-touch /etc/nologin
+echo "Locked by administrator" > /etc/nologin
+
+# Disable systemd-user-sessions, a service that deletes /etc/nologin
+if [ -f /usr/lib/systemd/system/systemd-user-sessions.service ]; then
+    systemctl mask systemd-user-sessions
+    systemctl daemon-reload
+fi
 
 echo "All non-root users have been logged out and their accounts locked."
diff --git a/scripts/mdm/linux/linux-unlock.sh b/scripts/mdm/linux/linux-unlock.sh
index b9d0554f7a..6e6880c542 100644
--- a/scripts/mdm/linux/linux-unlock.sh
+++ b/scripts/mdm/linux/linux-unlock.sh
@@ -21,4 +21,11 @@ do
 done
 
 # Remove the pam_nologin file
-rm /etc/nologin
+[ -f /etc/nologin ] && rm /etc/nologin
+
+# Enable systemd-user-sessions, a service that deletes /etc/nologin
+if [ -f /usr/lib/systemd/system/systemd-user-sessions.service ]; then
+    systemctl unmask systemd-user-sessions
+    systemctl daemon-reload
+    /usr/lib/systemd/systemd-user-sessions start
+fi

From a41fb636bccd65ab7314f584fe627f358189857d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Georg=20Sch=C3=B6lly?= <git@gsch.ch>
Date: Thu, 1 Aug 2024 16:39:01 +0200
Subject: [PATCH 21/88] Detect software from deb_packages which is 'on hold'
 (#20751)

The list of installed software was missing packages put ['on
hold'](https://askubuntu.com/questions/18654/how-to-prevent-updating-of-a-specific-package)

The reason for this is that the old query looks for the status

    install ok installed

but there are other valid status which are also installed, like `hold ok
installed`. The syntax is `<desired> <error> <status>` so we only need
to look at the last or two last parts and ignore the first one.

See https://man7.org/linux/man-pages/man1/dpkg-query.1.html for a list
of status.

# Checklist for submitter

- [X] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://fleetdm.com/docs/contributing/committing-changes#changes-files)
for more information.
- [X] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
---
 changes/20751-detect-held-linux-packages-as-installed | 1 +
 docs/Using Fleet/Understanding-host-vitals.md         | 2 +-
 server/service/osquery_utils/queries.go               | 2 +-
 3 files changed, 3 insertions(+), 2 deletions(-)
 create mode 100644 changes/20751-detect-held-linux-packages-as-installed

diff --git a/changes/20751-detect-held-linux-packages-as-installed b/changes/20751-detect-held-linux-packages-as-installed
new file mode 100644
index 0000000000..6aa524ce80
--- /dev/null
+++ b/changes/20751-detect-held-linux-packages-as-installed
@@ -0,0 +1 @@
+Linux .deb packages 'on hold' are now included in the installed software list.
diff --git a/docs/Using Fleet/Understanding-host-vitals.md b/docs/Using Fleet/Understanding-host-vitals.md
index 77b9e68ca9..3cdabf2fde 100644
--- a/docs/Using Fleet/Understanding-host-vitals.md	
+++ b/docs/Using Fleet/Understanding-host-vitals.md	
@@ -504,7 +504,7 @@ SELECT
   '' AS arch,
   '' AS installed_path
 FROM deb_packages
-WHERE status = 'install ok installed'
+WHERE status LIKE '% ok installed'
 UNION
 SELECT
   package AS name,
diff --git a/server/service/osquery_utils/queries.go b/server/service/osquery_utils/queries.go
index b811fc0026..1baa63a9f1 100644
--- a/server/service/osquery_utils/queries.go
+++ b/server/service/osquery_utils/queries.go
@@ -944,7 +944,7 @@ SELECT
   '' AS arch,
   '' AS installed_path
 FROM deb_packages
-WHERE status = 'install ok installed'
+WHERE status LIKE '% ok installed'
 UNION
 SELECT
   package AS name,

From 5820d028e035a177930edef7b260e7a43ddec35d Mon Sep 17 00:00:00 2001
From: Marko Lisica <83164494+marko-lisica@users.noreply.github.com>
Date: Thu, 1 Aug 2024 17:11:07 +0200
Subject: [PATCH 22/88] API design: Improve host identifiers in the docs, CLI
 and API (#19752)

API design for: #19127
---
 docs/REST API/rest-api.md | 11 +++++------
 1 file changed, 5 insertions(+), 6 deletions(-)

diff --git a/docs/REST API/rest-api.md b/docs/REST API/rest-api.md
index 4e711ccb86..e07c86e33f 100644
--- a/docs/REST API/rest-api.md	
+++ b/docs/REST API/rest-api.md	
@@ -3102,18 +3102,17 @@ Returns the information of the specified host.
 
 ### Get host by identifier
 
-Returns the information of the host specified using the `uuid`, `hardware_serial`, `osquery_host_id`, `hostname`, or
-`node_key` as an identifier.
+Returns the information of the host specified using the `hostname`, `uuid`, or `hardware_serial` as an identifier.
 
-If `hostname` is specified when there is more than one host with the same hostname, the endpoint returns the first matching host. In Fleet, hostnames are fully qualified domain names (FQDNs).
+If `hostname` is specified when there is more than one host with the same hostname, the endpoint returns the first matching host. In Fleet, hostnames are fully qualified domain names (FQDNs). `hostname` (e.g. johns-macbook-air.local) is not the same as `display_name` (e.g. John's MacBook Air).
 
 `GET /api/v1/fleet/hosts/identifier/:identifier`
 
 #### Parameters
 
-| Name       | Type              | In   | Description                                                                   |
-| ---------- | ----------------- | ---- | ----------------------------------------------------------------------------- |
-| identifier | integer or string | path | **Required**. The host's `hardware_serial`, `uuid`, `osquery_host_id`, `hostname`, or `node_key` |
+| Name       | Type              | In   | Description                                                        |
+| ---------- | ----------------- | ---- | ------------------------------------------------------------------ |
+| identifier | string | path | **Required**. The host's `hostname`, `uuid`, or `hardware_serial`. |
 | exclude_software | boolean | query | If `true`, the response will not include a list of installed software for the host. |
 
 #### Example

From e761543262f41fd7a40be80ab9daac096a85b1e3 Mon Sep 17 00:00:00 2001
From: Sarah Gillespie <73313222+gillespi314@users.noreply.github.com>
Date: Thu, 1 Aug 2024 11:08:30 -0500
Subject: [PATCH 23/88] Fix unreleased bugs related to VPP app install details
 UI (#20952)

---
 .../AppInstallDetails/AppInstallDetails.tsx   | 39 +++++++++++--------
 .../InstallDetails/constants.ts               |  2 +-
 .../HostDetailsPage/HostDetailsPage.tsx       | 20 ++++++++--
 3 files changed, 41 insertions(+), 20 deletions(-)

diff --git a/frontend/components/ActivityDetails/InstallDetails/AppInstallDetails/AppInstallDetails.tsx b/frontend/components/ActivityDetails/InstallDetails/AppInstallDetails/AppInstallDetails.tsx
index dd1de5a727..f6ed1a97be 100644
--- a/frontend/components/ActivityDetails/InstallDetails/AppInstallDetails/AppInstallDetails.tsx
+++ b/frontend/components/ActivityDetails/InstallDetails/AppInstallDetails/AppInstallDetails.tsx
@@ -13,7 +13,6 @@ import Spinner from "components/Spinner/Spinner";
 import { IMdmCommandResult } from "interfaces/mdm";
 import { IActivityDetails } from "interfaces/activity";
 
-import { IconNames } from "components/icons";
 import {
   getInstallDetailsStatusPredicate,
   INSTALL_DETAILS_STATUS_ICONS,
@@ -46,7 +45,10 @@ export const AppInstallDetails = ({
       return mdmApi.getCommandResults(command_uuid).then((response) => {
         const results = response.results?.[0];
         if (!results) {
-          return Promise.reject(new Error("No data returned"));
+          // FIXME: It's currently possible that the command results API response is empty for pending
+          // commands. As a temporary workaround to handle this case, we'll ignore the empty response and
+          // display some minimal pending UI. This should be removed once the API response is fixed.
+          return {} as IMdmCommandResult;
         }
         return {
           ...results,
@@ -66,27 +68,28 @@ export const AppInstallDetails = ({
   } else if (isError) {
     return <DataError description="Close this modal and try again." />;
   } else if (!result) {
-    // FIXME: Find a better solution for this.
-    return <DataError description="No data returned." />;
+    // FIXME: It's currently possible that the command results API response is empty for pending
+    // commands. As a temporary workaround to handle this case, we'll ignore the empty response and
+    // display some minimal pending UI. This should be updated once the API response is fixed.
   }
 
+  const displayStatus = (status as SoftwareInstallStatus) || "pending";
+  const iconName = INSTALL_DETAILS_STATUS_ICONS[displayStatus];
+
   // Note: We need to reconcile status values from two different sources. From props, we
   // get the status from the activity item details (which can be "failed", "pending", or
   // "installed"). From the command results API response, we also receive the raw status
   // from the MDM protocol, e.g., "NotNow" or "Acknowledged". We need to display some special
   // messaging for the "NotNow" status, which otherwise would be treated as "pending".
-  const isStatusNotNow = result.status === "NotNow";
-  let iconName: IconNames;
+  const isStatusNotNow = result?.status === "NotNow";
   let predicate: string;
   let subordinate: string;
   if (isStatusNotNow) {
-    iconName = INSTALL_DETAILS_STATUS_ICONS.pending;
     predicate = "tried to install";
     subordinate =
       " but couldn’t because the host was locked or was running on battery power while in Power Nap. Fleet will try again";
   } else {
-    iconName = INSTALL_DETAILS_STATUS_ICONS[status as SoftwareInstallStatus];
-    predicate = getInstallDetailsStatusPredicate(status);
+    predicate = getInstallDetailsStatusPredicate(displayStatus);
     subordinate = status === "pending" ? " when it comes online" : "";
   }
 
@@ -96,7 +99,9 @@ export const AppInstallDetails = ({
     "the host"
   );
 
-  const showCommandResponse = isStatusNotNow || status !== "pending";
+  const showCommandPayload = !!result?.payload;
+  const showCommandResponse =
+    !!result?.result && (isStatusNotNow || status !== "pending");
 
   return (
     <>
@@ -108,12 +113,14 @@ export const AppInstallDetails = ({
             {subordinate}.
           </span>
         </div>
-        <div className={`${baseClass}__script-output`}>
-          Request payload:
-          <Textarea className={`${baseClass}__output-textarea`}>
-            {result.payload}
-          </Textarea>
-        </div>
+        {showCommandPayload && (
+          <div className={`${baseClass}__script-output`}>
+            Request payload:
+            <Textarea className={`${baseClass}__output-textarea`}>
+              {result.payload}
+            </Textarea>
+          </div>
+        )}
         {showCommandResponse && (
           <div className={`${baseClass}__script-output`}>
             The response from {formattedHost}:
diff --git a/frontend/components/ActivityDetails/InstallDetails/constants.ts b/frontend/components/ActivityDetails/InstallDetails/constants.ts
index b3cd75cf79..c4c1ae8cb7 100644
--- a/frontend/components/ActivityDetails/InstallDetails/constants.ts
+++ b/frontend/components/ActivityDetails/InstallDetails/constants.ts
@@ -14,7 +14,7 @@ const INSTALL_DETAILS_STATUS_PREDICATES: Record<
   SoftwareInstallStatus,
   string
 > = {
-  pending: "will install",
+  pending: "is installing or will install",
   installed: "installed",
   failed: "failed to install",
 } as const;
diff --git a/frontend/pages/hosts/details/HostDetailsPage/HostDetailsPage.tsx b/frontend/pages/hosts/details/HostDetailsPage/HostDetailsPage.tsx
index a55744bc33..0c4b9c9c3c 100644
--- a/frontend/pages/hosts/details/HostDetailsPage/HostDetailsPage.tsx
+++ b/frontend/pages/hosts/details/HostDetailsPage/HostDetailsPage.tsx
@@ -583,15 +583,29 @@ const HostDetailsPage = ({
           setScriptDetailsId(details?.script_execution_id || "");
           break;
         case "installed_software":
-          setPackageInstallDetails({ ...details });
+          setPackageInstallDetails({
+            ...details,
+            // FIXME: It seems like the backend is not using the correct display name when it returns
+            // upcoming install activities. As a workaround, we'll prefer the display name from
+            // the host object if it's available.
+            host_display_name:
+              host?.display_name || details?.host_display_name || "",
+          });
           break;
         case "installed_app_store_app":
-          setAppInstallDetails({ ...details });
+          setAppInstallDetails({
+            ...details,
+            // FIXME: It seems like the backend is not using the correct display name when it returns
+            // upcoming install activities. As a workaround, we'll prefer the display name from
+            // the host object if it's available.
+            host_display_name:
+              host?.display_name || details?.host_display_name || "",
+          });
           break;
         default: // do nothing
       }
     },
-    []
+    [host?.display_name]
   );
 
   const onLabelClick = (label: ILabel) => {

From 08d08d5602d29d98138340915e1657e212d53ecf Mon Sep 17 00:00:00 2001
From: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
Date: Fri, 2 Aug 2024 01:09:51 +0900
Subject: [PATCH 24/88] Homepage tagline update (#20931)

Updated homepage to include the new tagline that was settled in [this
design
review](https://us-65885.app.gong.io/call?id=186190266621232138&highlights=%5B%7B%22type%22%3A%22SHARE%22%2C%22from%22%3A2009%2C%22to%22%3A2061%7D%5D).

---------

Co-authored-by: Eric <eashaw@sailsjs.com>
---
 website/assets/styles/pages/homepage.less          | 4 ++++
 website/views/pages/homepage.ejs                   | 4 ++--
 website/views/partials/primary-tagline.partial.ejs | 8 +++++++-
 3 files changed, 13 insertions(+), 3 deletions(-)

diff --git a/website/assets/styles/pages/homepage.less b/website/assets/styles/pages/homepage.less
index bffa783ff5..72c04a9868 100644
--- a/website/assets/styles/pages/homepage.less
+++ b/website/assets/styles/pages/homepage.less
@@ -60,7 +60,11 @@
     min-width: 540px;
     text-align: center;
     h1 {
+      max-width: 640px;
       margin-bottom: 16px;
+      &.vm {
+        max-width: unset;
+      }
     }
     p {
       margin-bottom: 32px;
diff --git a/website/views/pages/homepage.ejs b/website/views/pages/homepage.ejs
index e068fde91b..d07b372d36 100644
--- a/website/views/pages/homepage.ejs
+++ b/website/views/pages/homepage.ejs
@@ -6,8 +6,8 @@
         <div class="d-flex flex-row justify-content-center align-items-start">
           <%/* Hero text */%>
           <div purpose="hero-text"  class="d-flex flex-column justify-content-center">
-            <h1><%- partial('../partials/primary-tagline.partial.ejs') %></h1>
-            <p>Replace the sprawl with <%= primaryBuyingSituation === 'vm'? 'secure, open-source reporting that works the way you want' : primaryBuyingSituation === 'eo-security'? 'universal, open-source endpoint visibility' : 'secure, open-source device management that works the way you want' %>.</p>
+            <h1 class="mx-auto <%= primaryBuyingSituation%>"><%- partial('../partials/primary-tagline.partial.ejs') %></h1>
+            <p>Replace the sprawl with <%= primaryBuyingSituation === 'vm'? 'secure, open-source reporting that works the way you want' : primaryBuyingSituation === 'eo-security'? 'universal, open-source endpoint visibility' : 'a modern device management platform that works the way you want' %>.</p>
             <div purpose="button-row" class="d-flex flex-sm-row flex-column justify-content-center align-items-center">
               <a purpose="cta-button" href="<%= primaryBuyingSituation === 'mdm' ? '/device-management' : primaryBuyingSituation === 'vm' ? '/vulnerability-management' : primaryBuyingSituation === 'eo-security' ? '/endpoint-ops' : primaryBuyingSituation === 'eo-it' ? '/endpoint-ops' : '/device-management' %>">Learn how</a>
               <animated-arrow-button href="/contact">Talk to us</animated-arrow-button>
diff --git a/website/views/partials/primary-tagline.partial.ejs b/website/views/partials/primary-tagline.partial.ejs
index 52bd6fc370..869c05f94f 100644
--- a/website/views/partials/primary-tagline.partial.ejs
+++ b/website/views/partials/primary-tagline.partial.ejs
@@ -1 +1,7 @@
-<%= typeof primaryBuyingSituation !== 'undefined' ? (primaryBuyingSituation === 'vm' ? 'Focus on vulnerabilities, not vendors' : primaryBuyingSituation === 'eo-security' ? 'Light in every corner' : primaryBuyingSituation === 'eo-it' ? 'Untangle your endpoints' : 'Your easiest MDM migration') : 'Your easiest MDM migration' %>
+<%=
+  typeof primaryBuyingSituation === 'undefined' ? 'Open-source device management for everyone' // Default (no buying situation)
+  : primaryBuyingSituation === 'vm' ? 'Focus on vulnerabilities, not vendors' // vm
+  : primaryBuyingSituation === 'eo-security' ? 'Light in every corner'// eo-security
+  : primaryBuyingSituation === 'eo-it' ? 'Untangle your endpoints' : // eo-it
+  'Open-source device management for everyone'// mdm
+%>

From 2ccc0f79e7a8ff3c07f6ffea7f2fa41c7ee48f80 Mon Sep 17 00:00:00 2001
From: jacobshandling <61553566+jacobshandling@users.noreply.github.com>
Date: Thu, 1 Aug 2024 09:17:57 -0700
Subject: [PATCH 25/88] =?UTF-8?q?UI=20=E2=80=93=20Follow-ups=20for=20iPadO?=
 =?UTF-8?q?S/iPadOS=20VPP=20(#20916)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

## Follow ups to #20467, part 4 of #20917
- Use combination of apps' fields to uniquely identify them – [bug and
fix
demo/explanation](https://www.loom.com/share/2e5f088677604f04927bce8d9dacf8fe?sid=d946bea5-11a9-419a-b946-962829a53adc)
- Add new field to vpp `POST` requests for correct add VPP software
functionality

![Screenshot-2024-07-31-at-50131PM](https://github.com/user-attachments/assets/57c925f9-53cb-4860-b6b6-475b6d5cb2a5)

- Implement desired states for software action dropdown

![Screenshot-2024-07-31-at-45556PM](https://github.com/user-attachments/assets/b6d3db97-dea2-43bb-9662-29256e87fbf0)


- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
---
 .../components/AppStoreVpp/AppStoreVpp.tsx    | 55 ++++++++++++-------
 .../components/AppStoreVpp/helpers.tsx        |  4 ++
 .../details/DeviceUserPage/DeviceUserPage.tsx |  2 +-
 .../HostDetailsPage/HostDetailsPage.tsx       |  4 +-
 .../details/cards/Software/HostSoftware.tsx   | 14 ++---
 .../Software/HostSoftwareTableConfig.tsx      | 32 ++++++-----
 frontend/services/entities/mdm_apple.ts       |  3 +-
 7 files changed, 71 insertions(+), 43 deletions(-)

diff --git a/frontend/pages/SoftwarePage/components/AppStoreVpp/AppStoreVpp.tsx b/frontend/pages/SoftwarePage/components/AppStoreVpp/AppStoreVpp.tsx
index b6191d228b..874d2d8849 100644
--- a/frontend/pages/SoftwarePage/components/AppStoreVpp/AppStoreVpp.tsx
+++ b/frontend/pages/SoftwarePage/components/AppStoreVpp/AppStoreVpp.tsx
@@ -22,7 +22,7 @@ import { NotificationContext } from "context/notification";
 import { getErrorReason } from "interfaces/errors";
 import { buildQueryStringFromParams } from "utilities/url";
 import SoftwareIcon from "../icons/SoftwareIcon";
-import { getErrorMessage } from "./helpers";
+import { getErrorMessage, getUniqueAppId } from "./helpers";
 
 const baseClass = "app-store-vpp";
 
@@ -64,10 +64,16 @@ const NoVppAppsCard = () => (
 interface IVppAppListItemProps {
   app: IVppApp;
   selected: boolean;
+  uniqueAppId: string;
   onSelect: (software: IVppApp) => void;
 }
 
-const VppAppListItem = ({ app, selected, onSelect }: IVppAppListItemProps) => {
+const VppAppListItem = ({
+  app,
+  selected,
+  uniqueAppId,
+  onSelect,
+}: IVppAppListItemProps) => {
   return (
     <li className={`${baseClass}__list-item`}>
       <Radio
@@ -77,9 +83,9 @@ const VppAppListItem = ({ app, selected, onSelect }: IVppAppListItemProps) => {
             <span>{app.name}</span>
           </div>
         }
-        id={`vppApp-${app.app_store_id}`}
+        id={`vppApp-${uniqueAppId}`}
         checked={selected}
-        value={app.app_store_id.toString()}
+        value={uniqueAppId}
         name="vppApp"
         onChange={() => onSelect(app)}
       />
@@ -98,20 +104,27 @@ interface IVppAppListProps {
   onSelect: (app: IVppApp) => void;
 }
 
-const VppAppList = ({ apps, selectedApp, onSelect }: IVppAppListProps) => (
-  <div className={`${baseClass}__list-container`}>
-    <ul className={`${baseClass}__list`}>
-      {apps.map((app) => (
-        <VppAppListItem
-          key={app.app_store_id}
-          app={app}
-          selected={selectedApp?.app_store_id === app.app_store_id}
-          onSelect={onSelect}
-        />
-      ))}
-    </ul>
-  </div>
-);
+const VppAppList = ({ apps, selectedApp, onSelect }: IVppAppListProps) => {
+  const uniqueSelectedAppId = selectedApp ? getUniqueAppId(selectedApp) : null;
+  return (
+    <div className={`${baseClass}__list-container`}>
+      <ul className={`${baseClass}__list`}>
+        {apps.map((app) => {
+          const uniqueAppId = getUniqueAppId(app);
+          return (
+            <VppAppListItem
+              key={uniqueAppId}
+              app={app}
+              selected={uniqueSelectedAppId === uniqueAppId}
+              uniqueAppId={uniqueAppId}
+              onSelect={onSelect}
+            />
+          );
+        })}
+      </ul>
+    </div>
+  );
+};
 
 interface IAppStoreVppProps {
   teamId: number;
@@ -160,7 +173,11 @@ const AppStoreVpp = ({ teamId, router, onExit }: IAppStoreVppProps) => {
     }
 
     try {
-      await mdmAppleAPI.addVppApp(teamId, selectedApp.app_store_id);
+      await mdmAppleAPI.addVppApp(
+        teamId,
+        selectedApp.app_store_id,
+        selectedApp.platform
+      );
       renderFlash(
         "success",
         <>
diff --git a/frontend/pages/SoftwarePage/components/AppStoreVpp/helpers.tsx b/frontend/pages/SoftwarePage/components/AppStoreVpp/helpers.tsx
index f359a6441d..a0130de802 100644
--- a/frontend/pages/SoftwarePage/components/AppStoreVpp/helpers.tsx
+++ b/frontend/pages/SoftwarePage/components/AppStoreVpp/helpers.tsx
@@ -1,5 +1,6 @@
 import React from "react";
 import { getErrorReason } from "interfaces/errors";
+import { IVppApp } from "services/entities/mdm_apple";
 
 const ADD_SOFTWARE_ERROR_PREFIX = "Couldn’t add software.";
 const DEFAULT_ERROR_MESSAGE = `${ADD_SOFTWARE_ERROR_PREFIX} Please try again.`;
@@ -40,3 +41,6 @@ export const getErrorMessage = (e: unknown) => {
   }
   return DEFAULT_ERROR_MESSAGE;
 };
+
+export const getUniqueAppId = (app: IVppApp) =>
+  `${app.app_store_id}_${app.platform}`;
diff --git a/frontend/pages/hosts/details/DeviceUserPage/DeviceUserPage.tsx b/frontend/pages/hosts/details/DeviceUserPage/DeviceUserPage.tsx
index 189c8ae488..ba78e6ab25 100644
--- a/frontend/pages/hosts/details/DeviceUserPage/DeviceUserPage.tsx
+++ b/frontend/pages/hosts/details/DeviceUserPage/DeviceUserPage.tsx
@@ -415,7 +415,7 @@ const DeviceUserPage = ({
                     <SoftwareCard
                       id={deviceAuthToken}
                       softwareUpdatedAt={host.software_updated_at}
-                      isFleetdHost={!!host.orbit_version}
+                      hostCanInstallSoftware={!!host.orbit_version}
                       router={router}
                       pathname={location.pathname}
                       queryParams={parseHostSoftwareQueryParams(location.query)}
diff --git a/frontend/pages/hosts/details/HostDetailsPage/HostDetailsPage.tsx b/frontend/pages/hosts/details/HostDetailsPage/HostDetailsPage.tsx
index 0c4b9c9c3c..5f4a57a356 100644
--- a/frontend/pages/hosts/details/HostDetailsPage/HostDetailsPage.tsx
+++ b/frontend/pages/hosts/details/HostDetailsPage/HostDetailsPage.tsx
@@ -922,7 +922,9 @@ const HostDetailsPage = ({
               <SoftwareCard
                 id={host.id}
                 softwareUpdatedAt={host.software_updated_at}
-                isFleetdHost={!!host.orbit_version}
+                hostCanInstallSoftware={
+                  !!host.orbit_version || isIosOrIpadosHost
+                }
                 isSoftwareEnabled={featuresConfig?.enable_software_inventory}
                 router={router}
                 queryParams={parseHostSoftwareQueryParams(location.query)}
diff --git a/frontend/pages/hosts/details/cards/Software/HostSoftware.tsx b/frontend/pages/hosts/details/cards/Software/HostSoftware.tsx
index 3049a8273a..095bb46122 100644
--- a/frontend/pages/hosts/details/cards/Software/HostSoftware.tsx
+++ b/frontend/pages/hosts/details/cards/Software/HostSoftware.tsx
@@ -35,7 +35,7 @@ interface IHostSoftwareProps {
   /** This is the host id or the device token */
   id: number | string;
   softwareUpdatedAt?: string;
-  isFleetdHost: boolean;
+  hostCanInstallSoftware: boolean;
   router: InjectedRouter;
   queryParams: ReturnType<typeof parseHostSoftwareQueryParams>;
   pathname: string;
@@ -83,7 +83,7 @@ export const parseHostSoftwareQueryParams = (queryParams: {
 const HostSoftware = ({
   id,
   softwareUpdatedAt,
-  isFleetdHost,
+  hostCanInstallSoftware,
   router,
   queryParams,
   pathname,
@@ -169,7 +169,7 @@ const HostSoftware = ({
     [isMyDevicePage, refetchDeviceSoftware, refetchHostSoftware]
   );
 
-  const canInstallSoftware = Boolean(
+  const userHasSWInstallPermission = Boolean(
     isGlobalAdmin || isGlobalMaintainer || isTeamAdmin || isTeamMaintainer
   );
 
@@ -213,19 +213,19 @@ const HostSoftware = ({
       : generateHostSoftwareTableConfig({
           router,
           installingSoftwareId,
-          canInstall: canInstallSoftware,
+          userHasSWInstallPermission,
           onSelectAction,
           teamId: hostTeamId,
-          isFleetdHost,
+          hostCanInstallSoftware,
         });
   }, [
     isMyDevicePage,
     router,
     installingSoftwareId,
-    canInstallSoftware,
+    userHasSWInstallPermission,
     onSelectAction,
     hostTeamId,
-    isFleetdHost,
+    hostCanInstallSoftware,
   ]);
 
   const isLoading = isMyDevicePage
diff --git a/frontend/pages/hosts/details/cards/Software/HostSoftwareTableConfig.tsx b/frontend/pages/hosts/details/cards/Software/HostSoftwareTableConfig.tsx
index b01806032f..66777b1ed3 100644
--- a/frontend/pages/hosts/details/cards/Software/HostSoftwareTableConfig.tsx
+++ b/frontend/pages/hosts/details/cards/Software/HostSoftwareTableConfig.tsx
@@ -50,17 +50,17 @@ type IVulnerabilitiesCellProps = IInstalledVersionsCellProps;
 // type IActionsCellProps = CellProps<IHostSoftware, IHostSoftware["id"]>;
 
 const generateActions = ({
-  canInstall,
+  userHasSWInstallPermission,
+  hostCanInstallSoftware,
   installingSoftwareId,
-  isFleetdHost,
   softwareId,
   status,
   software_package,
   app_store_app,
 }: {
-  canInstall: boolean;
+  userHasSWInstallPermission: boolean;
+  hostCanInstallSoftware: boolean;
   installingSoftwareId: number | null;
-  isFleetdHost: boolean;
   softwareId: number;
   status: SoftwareInstallStatus | null;
   software_package: IHostSoftwarePackage | null;
@@ -78,14 +78,18 @@ const generateActions = ({
   }
 
   const hasSoftwareToInstall = !!software_package || !!app_store_app;
-  // remove install if there is no package to install
-  if (!hasSoftwareToInstall || !canInstall) {
+  // remove install if there is no package to install or if the software is already installed
+  if (
+    !hasSoftwareToInstall ||
+    !userHasSWInstallPermission ||
+    status === "installed"
+  ) {
     actions.splice(indexInstallAction, 1);
     return actions;
   }
 
-  // disable install option if not a fleetd host
-  if (!isFleetdHost) {
+  // disable install option if not a fleetd, iPad, or iOS host
+  if (!hostCanInstallSoftware) {
     actions[indexInstallAction].disabled = true;
     actions[indexInstallAction].tooltipContent =
       "To install software on this host, deploy the fleetd agent with --enable-scripts and refetch host vitals.";
@@ -102,9 +106,9 @@ const generateActions = ({
 };
 
 interface ISoftwareTableHeadersProps {
-  canInstall: boolean;
+  userHasSWInstallPermission: boolean;
+  hostCanInstallSoftware: boolean;
   installingSoftwareId: number | null;
-  isFleetdHost: boolean;
   router: InjectedRouter;
   teamId: number;
   onSelectAction: (software: IHostSoftware, action: string) => void;
@@ -113,9 +117,9 @@ interface ISoftwareTableHeadersProps {
 // NOTE: cellProps come from react-table
 // more info here https://react-table.tanstack.com/docs/api/useTable#cell-properties
 export const generateSoftwareTableHeaders = ({
-  canInstall,
+  userHasSWInstallPermission,
+  hostCanInstallSoftware,
   installingSoftwareId,
-  isFleetdHost,
   router,
   teamId,
   onSelectAction,
@@ -202,8 +206,8 @@ export const generateSoftwareTableHeaders = ({
           <DropdownCell
             placeholder="Actions"
             options={generateActions({
-              canInstall,
-              isFleetdHost,
+              userHasSWInstallPermission,
+              hostCanInstallSoftware,
               installingSoftwareId,
               softwareId,
               status,
diff --git a/frontend/services/entities/mdm_apple.ts b/frontend/services/entities/mdm_apple.ts
index 820d0d2bf4..34ea85747f 100644
--- a/frontend/services/entities/mdm_apple.ts
+++ b/frontend/services/entities/mdm_apple.ts
@@ -69,11 +69,12 @@ export default {
     return sendRequest("GET", path);
   },
 
-  addVppApp: (teamId: number, appStoreId: string) => {
+  addVppApp: (teamId: number, appStoreId: string, platform: ApplePlatform) => {
     const { MDM_APPLE_VPP_APPS } = endpoints;
     return sendRequest("POST", MDM_APPLE_VPP_APPS, {
       app_store_id: appStoreId,
       team_id: teamId,
+      platform,
     });
   },
 };

From 81af71b80a221859a3109a115de143f35b4db7be Mon Sep 17 00:00:00 2001
From: Eric <eashaw@sailsjs.com>
Date: Thu, 1 Aug 2024 11:24:07 -0500
Subject: [PATCH 26/88] Website: Update questionnaire pre-filling. (#20953)

Changes:
- Updated the /start questionnaire to not prefill the "What will you use
Fleet for?" question if the user has a primaryBuyingSituation set to
`vm`
---
 website/assets/js/pages/start.page.js | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/website/assets/js/pages/start.page.js b/website/assets/js/pages/start.page.js
index 191a445f99..e6f9514e05 100644
--- a/website/assets/js/pages/start.page.js
+++ b/website/assets/js/pages/start.page.js
@@ -85,7 +85,9 @@ parasails.registerPage('start', {
     }
     // If this user has not completed the 'what are you using fleet for' step, and has a primaryBuyingSituation set by an ad. prefill the formData for this step.
     if(this.primaryBuyingSituation && _.isEmpty(this.formData['what-are-you-using-fleet-for'])){
-      this.formData['what-are-you-using-fleet-for'] = {primaryBuyingSituation: this.primaryBuyingSituation};
+      if(this.primaryBuyingSituation !== 'vm') {
+        this.formData['what-are-you-using-fleet-for'] = {primaryBuyingSituation: this.primaryBuyingSituation};
+      }
     }
     if(window.location.hash) {
       if(typeof analytics !== 'undefined') {

From 7a4773cd0a355ac0c4d149d661436d5664696685 Mon Sep 17 00:00:00 2001
From: Roberto Dip <dip.jesusr@gmail.com>
Date: Thu, 1 Aug 2024 13:56:09 -0300
Subject: [PATCH 27/88] escape % in query (#20954)

for https://github.com/fleetdm/fleet/issues/20940. Ran `make
generate-doc` as well but docs don't change with this.
---
 server/service/osquery_utils/queries.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server/service/osquery_utils/queries.go b/server/service/osquery_utils/queries.go
index 1baa63a9f1..59b2430b54 100644
--- a/server/service/osquery_utils/queries.go
+++ b/server/service/osquery_utils/queries.go
@@ -944,7 +944,7 @@ SELECT
   '' AS arch,
   '' AS installed_path
 FROM deb_packages
-WHERE status LIKE '% ok installed'
+WHERE status LIKE '%% ok installed'
 UNION
 SELECT
   package AS name,

From 30cbaf0a74e11e38d30c98b8e0976d094129b028 Mon Sep 17 00:00:00 2001
From: Roberto Dip <dip.jesusr@gmail.com>
Date: Thu, 1 Aug 2024 14:04:54 -0300
Subject: [PATCH 28/88] address PR feedback for FileVault improvements (#20935)

feedback left by @mna and @gillespi314 in
https://github.com/fleetdm/fleet/pull/20842

also fixes a bug found by @PezHub
https://github.com/fleetdm/fleet/issues/13157#issuecomment-2261615471

related to https://github.com/fleetdm/fleet/issues/13157

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
---
 orbit/cmd/orbit/orbit.go         | 14 ++++++++-----
 orbit/pkg/update/escrow_buddy.go |  2 +-
 orbit/pkg/update/update.go       |  2 +-
 server/service/hosts_test.go     | 35 ++++++++++++++++++++++++--------
 server/service/orbit.go          |  2 +-
 5 files changed, 38 insertions(+), 17 deletions(-)

diff --git a/orbit/cmd/orbit/orbit.go b/orbit/cmd/orbit/orbit.go
index d124a47d57..40d1d5283f 100644
--- a/orbit/cmd/orbit/orbit.go
+++ b/orbit/cmd/orbit/orbit.go
@@ -870,11 +870,6 @@ func main() {
 			orbitClient.RegisterConfigReceiver(update.ApplyNudgeConfigReceiverMiddleware(update.NudgeConfigFetcherOptions{
 				UpdateRunner: updateRunner, RootDir: c.String("root-dir"), Interval: nudgeLaunchInterval,
 			}))
-			if orbitClient.GetServerCapabilities().Has(fleet.CapabilityEscrowBuddy) {
-				orbitClient.RegisterConfigReceiver(update.NewEscrowBuddyRunner(updateRunner, 5*time.Minute))
-			} else {
-				orbitClient.RegisterConfigReceiver(update.ApplyDiskEncryptionRunnerMiddleware())
-			}
 			orbitClient.RegisterConfigReceiver(update.ApplySwiftDialogDownloaderMiddleware(updateRunner))
 		case "windows":
 			orbitClient.RegisterConfigReceiver(update.ApplyWindowsMDMEnrollmentFetcherMiddleware(windowsMDMEnrollmentCommandFrequency, orbitHostInfo.HardwareUUID, orbitClient))
@@ -1224,6 +1219,15 @@ func main() {
 		softwareRunner := installer.NewRunner(orbitClient, r.ExtensionSocketPath(), scriptsEnabledFn)
 		orbitClient.RegisterConfigReceiver(softwareRunner)
 
+		if runtime.GOOS == "darwin" {
+			log.Info().Msgf("orbitClient.GetServerCapabilities() %+v", orbitClient.GetServerCapabilities())
+			if orbitClient.GetServerCapabilities().Has(fleet.CapabilityEscrowBuddy) {
+				orbitClient.RegisterConfigReceiver(update.NewEscrowBuddyRunner(updateRunner, 5*time.Minute))
+			} else {
+				orbitClient.RegisterConfigReceiver(update.ApplyDiskEncryptionRunnerMiddleware())
+			}
+		}
+
 		// Install a signal handler
 		ctx, cancel := context.WithCancel(context.Background())
 		defer cancel()
diff --git a/orbit/pkg/update/escrow_buddy.go b/orbit/pkg/update/escrow_buddy.go
index 72ef1fab5a..e1f6fdf116 100644
--- a/orbit/pkg/update/escrow_buddy.go
+++ b/orbit/pkg/update/escrow_buddy.go
@@ -43,7 +43,7 @@ func (e *EscrowBuddyRunner) Run(cfg *fleet.OrbitConfig) error {
 	log.Debug().Msgf("EscrowBuddyRunner: notification: %t", cfg.Notifications.RotateDiskEncryptionKey)
 
 	if e.updateRunner == nil {
-		log.Debug().Msg("EscrowBuddyRunner: received nil UpdateRunner, this probably indicates that updates are turned off. Skipping any actions related to Disk encryption")
+		log.Info().Msg("EscrowBuddyRunner: received nil UpdateRunner, this probably indicates that updates are turned off. Skipping any actions related to Disk encryption")
 		return nil
 	}
 
diff --git a/orbit/pkg/update/update.go b/orbit/pkg/update/update.go
index f9bee2413f..f1803ec787 100644
--- a/orbit/pkg/update/update.go
+++ b/orbit/pkg/update/update.go
@@ -384,7 +384,7 @@ func (u *Updater) get(target string) (*LocalTarget, error) {
 					return nil, fmt.Errorf("failed to remove old extracted dir: %q: %w", localTarget.DirPath, err)
 				}
 			}
-			if strings.HasSuffix(localTarget.Path, ".pkg") {
+			if strings.HasSuffix(localTarget.Path, ".pkg") && runtime.GOOS == "darwin" {
 				cmd := exec.Command("installer", "-pkg", localTarget.Path, "-target", "/")
 				if out, err := cmd.CombinedOutput(); err != nil {
 					return nil, fmt.Errorf("running pkgutil to install %s: %s: %w", localTarget.Path, string(out), err)
diff --git a/server/service/hosts_test.go b/server/service/hosts_test.go
index b0f6dc7529..b2765516e2 100644
--- a/server/service/hosts_test.go
+++ b/server/service/hosts_test.go
@@ -1876,7 +1876,7 @@ func TestSetDiskEncryptionNotifications(t *testing.T) {
 	}{
 		{
 			name: "no MDM configured",
-			host: &fleet.Host{ID: 1, Platform: "darwin"},
+			host: &fleet.Host{ID: 1, Platform: "darwin", OsqueryHostID: ptr.String("foo")},
 			appConfig: &fleet.AppConfig{
 				MDM: fleet.MDM{EnabledAndConfigured: false},
 			},
@@ -1889,7 +1889,7 @@ func TestSetDiskEncryptionNotifications(t *testing.T) {
 		},
 		{
 			name: "not connected to Fleet MDM",
-			host: &fleet.Host{ID: 1, Platform: "darwin"},
+			host: &fleet.Host{ID: 1, Platform: "darwin", OsqueryHostID: ptr.String("foo")},
 			appConfig: &fleet.AppConfig{
 				MDM: fleet.MDM{EnabledAndConfigured: true},
 			},
@@ -1915,7 +1915,7 @@ func TestSetDiskEncryptionNotifications(t *testing.T) {
 		},
 		{
 			name: "disk encryption not configured",
-			host: &fleet.Host{ID: 1, Platform: "darwin"},
+			host: &fleet.Host{ID: 1, Platform: "darwin", OsqueryHostID: ptr.String("foo")},
 			appConfig: &fleet.AppConfig{
 				MDM: fleet.MDM{EnabledAndConfigured: true},
 			},
@@ -1928,7 +1928,7 @@ func TestSetDiskEncryptionNotifications(t *testing.T) {
 		},
 		{
 			name: "darwin with decryptable key",
-			host: &fleet.Host{ID: 1, Platform: "darwin"},
+			host: &fleet.Host{ID: 1, Platform: "darwin", OsqueryHostID: ptr.String("foo")},
 			appConfig: &fleet.AppConfig{
 				MDM: fleet.MDM{EnabledAndConfigured: true},
 			},
@@ -1943,9 +1943,26 @@ func TestSetDiskEncryptionNotifications(t *testing.T) {
 			},
 			expectedError: false,
 		},
+		{
+			name: "darwin needs rotation",
+			host: &fleet.Host{ID: 1, Platform: "darwin", OsqueryHostID: ptr.String("foo")},
+			appConfig: &fleet.AppConfig{
+				MDM: fleet.MDM{EnabledAndConfigured: true},
+			},
+			diskEncryptionConfigured: true,
+			isConnectedToFleetMDM:    true,
+			mdmInfo:                  nil,
+			getHostDiskEncryptionKey: func(ctx context.Context, id uint) (*fleet.HostDiskEncryptionKey, error) {
+				return &fleet.HostDiskEncryptionKey{Decryptable: ptr.Bool(false)}, nil
+			},
+			expectedNotifications: &fleet.OrbitConfigNotifications{
+				RotateDiskEncryptionKey: true,
+			},
+			expectedError: false,
+		},
 		{
 			name: "windows server with no encryption needed",
-			host: &fleet.Host{ID: 1, Platform: "windows", DiskEncryptionEnabled: ptr.Bool(true)},
+			host: &fleet.Host{ID: 1, Platform: "windows", DiskEncryptionEnabled: ptr.Bool(true), OsqueryHostID: ptr.String("foo")},
 			appConfig: &fleet.AppConfig{
 				MDM: fleet.MDM{EnabledAndConfigured: true},
 			},
@@ -1962,7 +1979,7 @@ func TestSetDiskEncryptionNotifications(t *testing.T) {
 		},
 		{
 			name: "windows with encryption enabled but key missing",
-			host: &fleet.Host{ID: 1, Platform: "windows", DiskEncryptionEnabled: ptr.Bool(true)},
+			host: &fleet.Host{ID: 1, Platform: "windows", DiskEncryptionEnabled: ptr.Bool(true), OsqueryHostID: ptr.String("foo")},
 			appConfig: &fleet.AppConfig{
 				MDM: fleet.MDM{EnabledAndConfigured: true},
 			},
@@ -1979,7 +1996,7 @@ func TestSetDiskEncryptionNotifications(t *testing.T) {
 		},
 		{
 			name: "darwin with missing encryption key",
-			host: &fleet.Host{ID: 1, Platform: "darwin"},
+			host: &fleet.Host{ID: 1, Platform: "darwin", OsqueryHostID: ptr.String("foo")},
 			appConfig: &fleet.AppConfig{
 				MDM: fleet.MDM{EnabledAndConfigured: true},
 			},
@@ -1996,7 +2013,7 @@ func TestSetDiskEncryptionNotifications(t *testing.T) {
 		},
 		{
 			name: "windows with encryption key and not decryptable",
-			host: &fleet.Host{ID: 1, Platform: "windows", DiskEncryptionEnabled: ptr.Bool(true)},
+			host: &fleet.Host{ID: 1, Platform: "windows", DiskEncryptionEnabled: ptr.Bool(true), OsqueryHostID: ptr.String("foo")},
 			appConfig: &fleet.AppConfig{
 				MDM: fleet.MDM{EnabledAndConfigured: true},
 			},
@@ -2013,7 +2030,7 @@ func TestSetDiskEncryptionNotifications(t *testing.T) {
 		},
 		{
 			name: "windows with enforce BitLocker",
-			host: &fleet.Host{ID: 1, Platform: "windows", DiskEncryptionEnabled: ptr.Bool(false)},
+			host: &fleet.Host{ID: 1, Platform: "windows", DiskEncryptionEnabled: ptr.Bool(false), OsqueryHostID: ptr.String("foo")},
 			appConfig: &fleet.AppConfig{
 				MDM: fleet.MDM{EnabledAndConfigured: true},
 			},
diff --git a/server/service/orbit.go b/server/service/orbit.go
index 40f64ef2d3..1ee8725a08 100644
--- a/server/service/orbit.go
+++ b/server/service/orbit.go
@@ -428,7 +428,7 @@ func (svc *Service) setDiskEncryptionNotifications(
 
 	switch host.FleetPlatform() {
 	case "darwin":
-		notifs.RotateDiskEncryptionKey = encryptionKey.Decryptable != nil && !*encryptionKey.Decryptable
+		notifs.RotateDiskEncryptionKey = encryptionKey != nil && encryptionKey.Decryptable != nil && !*encryptionKey.Decryptable
 	case "windows":
 		isServer := mdmInfo != nil && mdmInfo.IsServer
 		needsEncryption := host.DiskEncryptionEnabled != nil && !*host.DiskEncryptionEnabled

From a28e4d800ba27dec651f5fa4bb64de6f534b939b Mon Sep 17 00:00:00 2001
From: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
Date: Thu, 1 Aug 2024 13:43:07 -0400
Subject: [PATCH 29/88] Supported operating systems docs (#20679)

- Google Chrome and a gnome extension have to
be installed to use Fleet Desktop + Firefox on Fedora.
- You don't have to set Google Chrome as the default browser.
---
 docs/Using Fleet/Supported-host-operating-systems.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/Using Fleet/Supported-host-operating-systems.md b/docs/Using Fleet/Supported-host-operating-systems.md
index c7adedff89..ff8cd5480c 100644
--- a/docs/Using Fleet/Supported-host-operating-systems.md	
+++ b/docs/Using Fleet/Supported-host-operating-systems.md	
@@ -28,7 +28,7 @@ Fleet's agent (fleetd) generated for MacOS by `fleetctl package` does not includ
 > Ubuntu 24.04 comes with Wayland enabled by default. To use X11 instead of Wayland you can set
 > `WaylandEnable=false` in `/etc/gdm3/custom.conf` and reboot.
 
-> Fedora, CentOS 8 and 9 require a [gnome extension](https://extensions.gnome.org/extension/615/appindicator-support/) and Google Chrome set to the default browser for Fleet Desktop.
+> Fedora, CentOS 8 and 9 require a [gnome extension](https://extensions.gnome.org/extension/615/appindicator-support/) and Google Chrome for Fleet Desktop.
 
 > The `fleetctl package` command is not supported on DISA-STIG distribution.
 

From 580a81ded55a017de5028c750271d6c4bf7d2027 Mon Sep 17 00:00:00 2001
From: Victor Lyuboslavsky <victor.lyuboslavsky@gmail.com>
Date: Thu, 1 Aug 2024 20:32:45 +0200
Subject: [PATCH 30/88] Fixed duplicate app install activity on host (#20944)

Unreleased bug for iOS/iPadOS VPP #19447

# Checklist for submitter
- [x] Added/updated tests
- [x] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [x] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [x] Ensured the correct collation is explicitly set for character
columns (`COLLATE utf8mb4_unicode_ci`).
- [x] Manual QA for all new/changed functionality
---
 ee/server/service/software_installers.go      |  2 +-
 server/datastore/mysql/activities.go          |  2 +-
 server/datastore/mysql/hosts.go               |  2 +-
 ...59_AddPlatformToHostVPPSoftwareInstalls.go | 60 ++++++++++++++++
 ...dPlatformToHostVPPSoftwareInstalls_test.go | 68 +++++++++++++++++++
 server/datastore/mysql/schema.sql             | 11 +--
 server/datastore/mysql/software.go            |  6 +-
 server/datastore/mysql/software_installers.go |  9 +--
 server/datastore/mysql/software_titles.go     |  2 +-
 server/datastore/mysql/vpp.go                 | 20 +++---
 server/datastore/mysql/vpp_test.go            | 29 ++++----
 server/fleet/datastore.go                     |  4 +-
 server/mock/datastore_mock.go                 | 12 ++--
 server/service/integration_mdm_test.go        | 21 ++++--
 server/service/software_titles.go             |  2 +-
 15 files changed, 198 insertions(+), 52 deletions(-)
 create mode 100644 server/datastore/mysql/migrations/tables/20240801115359_AddPlatformToHostVPPSoftwareInstalls.go
 create mode 100644 server/datastore/mysql/migrations/tables/20240801115359_AddPlatformToHostVPPSoftwareInstalls_test.go

diff --git a/ee/server/service/software_installers.go b/ee/server/service/software_installers.go
index 06ffb9f941..b17eee2b73 100644
--- a/ee/server/service/software_installers.go
+++ b/ee/server/service/software_installers.go
@@ -425,7 +425,7 @@ func (svc *Service) installSoftwareFromVPP(ctx context.Context, host *fleet.Host
 		return ctxerr.Wrapf(ctx, err, "sending command to install VPP %s application to host with serial %s", vppApp.AdamID, host.HardwareSerial)
 	}
 
-	err = svc.ds.InsertHostVPPSoftwareInstall(ctx, host.ID, user.ID, vppApp.AdamID, cmdUUID, eventID)
+	err = svc.ds.InsertHostVPPSoftwareInstall(ctx, host.ID, user.ID, vppApp.VPPAppID, cmdUUID, eventID)
 	if err != nil {
 		return ctxerr.Wrapf(ctx, err, "inserting host vpp software install for host with serial %s and app with adamID %s", host.HardwareSerial, vppApp.AdamID)
 	}
diff --git a/server/datastore/mysql/activities.go b/server/datastore/mysql/activities.go
index 1fbc21a99a..d0e6dee037 100644
--- a/server/datastore/mysql/activities.go
+++ b/server/datastore/mysql/activities.go
@@ -368,7 +368,7 @@ LEFT OUTER JOIN
 LEFT OUTER JOIN 
 	host_display_names hdn ON hdn.host_id = hvsi.host_id
 LEFT OUTER JOIN 
-	vpp_apps vpa ON hvsi.adam_id = vpa.adam_id
+	vpp_apps vpa ON hvsi.adam_id = vpa.adam_id AND hvsi.platform = vpa.platform
 LEFT OUTER JOIN 
 	software_titles st ON st.id = vpa.title_id
 WHERE
diff --git a/server/datastore/mysql/hosts.go b/server/datastore/mysql/hosts.go
index f5ed94d2f4..47125e16c8 100644
--- a/server/datastore/mysql/hosts.go
+++ b/server/datastore/mysql/hosts.go
@@ -1045,7 +1045,7 @@ func (ds *Datastore) applyHostFilters(
 				if err != nil {
 					return "", nil, ctxerr.Wrap(ctx, err, "get vpp app by team and title id")
 				}
-				vppAppJoin, vppAppParams, err := ds.vppAppJoin(vppApp.AdamID, *opt.SoftwareStatusFilter)
+				vppAppJoin, vppAppParams, err := ds.vppAppJoin(vppApp.VPPAppID, *opt.SoftwareStatusFilter)
 				if err != nil {
 					return "", nil, ctxerr.Wrap(ctx, err, "vpp app join")
 				}
diff --git a/server/datastore/mysql/migrations/tables/20240801115359_AddPlatformToHostVPPSoftwareInstalls.go b/server/datastore/mysql/migrations/tables/20240801115359_AddPlatformToHostVPPSoftwareInstalls.go
new file mode 100644
index 0000000000..6b70578339
--- /dev/null
+++ b/server/datastore/mysql/migrations/tables/20240801115359_AddPlatformToHostVPPSoftwareInstalls.go
@@ -0,0 +1,60 @@
+package tables
+
+import (
+	"database/sql"
+	"fmt"
+)
+
+func init() {
+	MigrationClient.AddMigration(Up_20240801115359, Down_20240801115359)
+}
+
+func Up_20240801115359(tx *sql.Tx) error {
+	if columnExists(tx, "host_vpp_software_installs", "platform") {
+		return nil
+	}
+
+	_, err := tx.Exec(`
+		ALTER TABLE host_vpp_software_installs
+		ADD COLUMN platform VARCHAR(10) COLLATE utf8mb4_unicode_ci NOT NULL`)
+	if err != nil {
+		return fmt.Errorf("adding platform to host_vpp_software_installs: %w", err)
+	}
+
+	updateStmt := `
+		UPDATE host_vpp_software_installs hvsi INNER JOIN hosts h ON h.id = hvsi.host_id
+		SET hvsi.platform = h.platform, hvsi.updated_at = hvsi.updated_at`
+
+	_, err = tx.Exec(updateStmt)
+	if err != nil {
+		return fmt.Errorf("updating platform in host_vpp_software_installs: %w", err)
+	}
+
+	// Since hosts may be missing, we need to update the platform for records that were not updated
+	updateStmt2 := `
+		UPDATE host_vpp_software_installs hvsi INNER JOIN vpp_apps vap ON vap.adam_id = hvsi.adam_id
+		SET hvsi.platform = vap.platform, hvsi.updated_at = hvsi.updated_at
+		WHERE hvsi.platform = ''`
+
+	_, err = tx.Exec(updateStmt2)
+	if err != nil {
+		return fmt.Errorf("updating platform in host_vpp_software_installs part 2: %w", err)
+	}
+
+	_, err = tx.Exec(`ALTER TABLE host_vpp_software_installs DROP INDEX adam_id, ADD INDEX (adam_id, platform)`)
+	if err != nil {
+		return fmt.Errorf("updating key in host_vpp_software_installs: %w", err)
+	}
+	_, err = tx.Exec(`
+		ALTER TABLE host_vpp_software_installs DROP FOREIGN KEY host_vpp_software_installs_ibfk_2,
+			ADD FOREIGN KEY host_vpp_software_installs_ibfk_3 (adam_id, platform) REFERENCES vpp_apps (adam_id, platform) ON DELETE CASCADE`)
+	if err != nil {
+		return fmt.Errorf("updating foreign key in host_vpp_software_installs: %w", err)
+	}
+
+	return nil
+}
+
+func Down_20240801115359(tx *sql.Tx) error {
+	return nil
+}
diff --git a/server/datastore/mysql/migrations/tables/20240801115359_AddPlatformToHostVPPSoftwareInstalls_test.go b/server/datastore/mysql/migrations/tables/20240801115359_AddPlatformToHostVPPSoftwareInstalls_test.go
new file mode 100644
index 0000000000..98a5a19f26
--- /dev/null
+++ b/server/datastore/mysql/migrations/tables/20240801115359_AddPlatformToHostVPPSoftwareInstalls_test.go
@@ -0,0 +1,68 @@
+package tables
+
+import (
+	"testing"
+
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+)
+
+func TestUp_20240801115359(t *testing.T) {
+	db := applyUpToPrev(t)
+
+	// Create user
+	u1 := execNoErrLastID(t, db, `INSERT INTO users (name, email, password, salt) VALUES (?, ?, ?, ?)`, "u1", "u1@b.c", "1234", "salt")
+	// Create host
+	insertHostStmt := `
+		INSERT INTO hosts (
+			hostname, uuid, platform, osquery_version, os_version, build, platform_like, code_name,
+			cpu_type, cpu_subtype, cpu_brand, hardware_vendor, hardware_model, hardware_version,
+			hardware_serial, computer_name, team_id
+		) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+	`
+	hostName := "Dummy Hostname"
+	hostUUID := "12345678-1234-1234-1234-123456789012"
+	hostPlatform := "ios"
+	osqueryVer := "5.9.1"
+	osVersion := "Windows 10"
+	buildVersion := "10.0.19042.1234"
+	platformLike := "apple"
+	codeName := "20H2"
+	cpuType := "x86_64"
+	cpuSubtype := "x86_64"
+	cpuBrand := "Intel"
+	hwVendor := "Dell Inc."
+	hwModel := "OptiPlex 7090"
+	hwVersion := "1.0"
+	hwSerial := "ABCDEFGHIJ"
+	computerName := "DESKTOP-TEST"
+
+	hostID := execNoErrLastID(t, db, insertHostStmt, hostName, hostUUID, hostPlatform, osqueryVer,
+		osVersion, buildVersion, platformLike, codeName, cpuType, cpuSubtype, cpuBrand, hwVendor, hwModel, hwVersion, hwSerial, computerName, nil)
+	hostIDMissing := hostID + 1
+
+	// Create VPP app
+	adamID := "a"
+	execNoErr(
+		t, db, `INSERT INTO vpp_apps (adam_id, platform) VALUES (?,?)`, adamID, hostPlatform,
+	)
+	// Create another VPP app for a different platform
+	execNoErr(
+		t, db, `INSERT INTO vpp_apps (adam_id, platform) VALUES (?,?)`, adamID, "unused",
+	)
+
+	// create an install on a known host
+	hvsi1 := execNoErrLastID(t, db, `INSERT INTO host_vpp_software_installs (host_id, adam_id, command_uuid, user_id) VALUES (?,?,?,?)`, hostID, adamID, "command_uuid", u1)
+	// create an install on a missing host
+	hvsi2 := execNoErrLastID(t, db, `INSERT INTO host_vpp_software_installs (host_id, adam_id, command_uuid, user_id) VALUES (?,?,?,?)`, hostIDMissing, adamID, "command_uuid2", u1)
+
+	// Apply current migration.
+	applyNext(t, db)
+
+	// Check that the platform column was updated.
+	var platformResp string
+	require.NoError(t, db.Get(&platformResp, `SELECT platform FROM host_vpp_software_installs WHERE id = ?`, hvsi1))
+	assert.Equal(t, hostPlatform, platformResp)
+	require.NoError(t, db.Get(&platformResp, `SELECT platform FROM host_vpp_software_installs WHERE id = ?`, hvsi2))
+	assert.Equal(t, hostPlatform, platformResp)
+}
diff --git a/server/datastore/mysql/schema.sql b/server/datastore/mysql/schema.sql
index 74f18b3289..9ed81803bd 100644
--- a/server/datastore/mysql/schema.sql
+++ b/server/datastore/mysql/schema.sql
@@ -563,13 +563,14 @@ CREATE TABLE `host_vpp_software_installs` (
   `associated_event_id` varchar(36) COLLATE utf8mb4_unicode_ci DEFAULT NULL,
   `created_at` timestamp NULL DEFAULT CURRENT_TIMESTAMP,
   `updated_at` timestamp NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
+  `platform` varchar(10) CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci NOT NULL,
   PRIMARY KEY (`id`),
   UNIQUE KEY `idx_host_vpp_software_installs_command_uuid` (`command_uuid`),
   KEY `user_id` (`user_id`),
-  KEY `adam_id` (`adam_id`),
+  KEY `adam_id` (`adam_id`,`platform`),
   CONSTRAINT `host_vpp_software_installs_ibfk_1` FOREIGN KEY (`user_id`) REFERENCES `users` (`id`) ON DELETE SET NULL,
-  CONSTRAINT `host_vpp_software_installs_ibfk_2` FOREIGN KEY (`adam_id`) REFERENCES `vpp_apps` (`adam_id`) ON DELETE CASCADE
-) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+  CONSTRAINT `host_vpp_software_installs_ibfk_3` FOREIGN KEY (`adam_id`, `platform`) REFERENCES `vpp_apps` (`adam_id`, `platform`) ON DELETE CASCADE
+) /*!50100 TABLESPACE `innodb_system` */ ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
 /*!40101 SET character_set_client = @saved_cs_client */;
 /*!40101 SET @saved_cs_client     = @@character_set_client */;
 /*!50503 SET character_set_client = utf8mb4 */;
@@ -968,9 +969,9 @@ CREATE TABLE `migration_status_tables` (
   `tstamp` timestamp NULL DEFAULT CURRENT_TIMESTAMP,
   PRIMARY KEY (`id`),
   UNIQUE KEY `id` (`id`)
-) /*!50100 TABLESPACE `innodb_system` */ ENGINE=InnoDB AUTO_INCREMENT=292 DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+) /*!50100 TABLESPACE `innodb_system` */ ENGINE=InnoDB AUTO_INCREMENT=293 DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
 /*!40101 SET character_set_client = @saved_cs_client */;
-INSERT INTO `migration_status_tables` VALUES (1,0,1,'2020-01-01 01:01:01'),(2,20161118193812,1,'2020-01-01 01:01:01'),(3,20161118211713,1,'2020-01-01 01:01:01'),(4,20161118212436,1,'2020-01-01 01:01:01'),(5,20161118212515,1,'2020-01-01 01:01:01'),(6,20161118212528,1,'2020-01-01 01:01:01'),(7,20161118212538,1,'2020-01-01 01:01:01'),(8,20161118212549,1,'2020-01-01 01:01:01'),(9,20161118212557,1,'2020-01-01 01:01:01'),(10,20161118212604,1,'2020-01-01 01:01:01'),(11,20161118212613,1,'2020-01-01 01:01:01'),(12,20161118212621,1,'2020-01-01 01:01:01'),(13,20161118212630,1,'2020-01-01 01:01:01'),(14,20161118212641,1,'2020-01-01 01:01:01'),(15,20161118212649,1,'2020-01-01 01:01:01'),(16,20161118212656,1,'2020-01-01 01:01:01'),(17,20161118212758,1,'2020-01-01 01:01:01'),(18,20161128234849,1,'2020-01-01 01:01:01'),(19,20161230162221,1,'2020-01-01 01:01:01'),(20,20170104113816,1,'2020-01-01 01:01:01'),(21,20170105151732,1,'2020-01-01 01:01:01'),(22,20170108191242,1,'2020-01-01 01:01:01'),(23,20170109094020,1,'2020-01-01 01:01:01'),(24,20170109130438,1,'2020-01-01 01:01:01'),(25,20170110202752,1,'2020-01-01 01:01:01'),(26,20170111133013,1,'2020-01-01 01:01:01'),(27,20170117025759,1,'2020-01-01 01:01:01'),(28,20170118191001,1,'2020-01-01 01:01:01'),(29,20170119234632,1,'2020-01-01 01:01:01'),(30,20170124230432,1,'2020-01-01 01:01:01'),(31,20170127014618,1,'2020-01-01 01:01:01'),(32,20170131232841,1,'2020-01-01 01:01:01'),(33,20170223094154,1,'2020-01-01 01:01:01'),(34,20170306075207,1,'2020-01-01 01:01:01'),(35,20170309100733,1,'2020-01-01 01:01:01'),(36,20170331111922,1,'2020-01-01 01:01:01'),(37,20170502143928,1,'2020-01-01 01:01:01'),(38,20170504130602,1,'2020-01-01 01:01:01'),(39,20170509132100,1,'2020-01-01 01:01:01'),(40,20170519105647,1,'2020-01-01 01:01:01'),(41,20170519105648,1,'2020-01-01 01:01:01'),(42,20170831234300,1,'2020-01-01 01:01:01'),(43,20170831234301,1,'2020-01-01 01:01:01'),(44,20170831234303,1,'2020-01-01 01:01:01'),(45,20171116163618,1,'2020-01-01 01:01:01'),(46,20171219164727,1,'2020-01-01 01:01:01'),(47,20180620164811,1,'2020-01-01 01:01:01'),(48,20180620175054,1,'2020-01-01 01:01:01'),(49,20180620175055,1,'2020-01-01 01:01:01'),(50,20191010101639,1,'2020-01-01 01:01:01'),(51,20191010155147,1,'2020-01-01 01:01:01'),(52,20191220130734,1,'2020-01-01 01:01:01'),(53,20200311140000,1,'2020-01-01 01:01:01'),(54,20200405120000,1,'2020-01-01 01:01:01'),(55,20200407120000,1,'2020-01-01 01:01:01'),(56,20200420120000,1,'2020-01-01 01:01:01'),(57,20200504120000,1,'2020-01-01 01:01:01'),(58,20200512120000,1,'2020-01-01 01:01:01'),(59,20200707120000,1,'2020-01-01 01:01:01'),(60,20201011162341,1,'2020-01-01 01:01:01'),(61,20201021104586,1,'2020-01-01 01:01:01'),(62,20201102112520,1,'2020-01-01 01:01:01'),(63,20201208121729,1,'2020-01-01 01:01:01'),(64,20201215091637,1,'2020-01-01 01:01:01'),(65,20210119174155,1,'2020-01-01 01:01:01'),(66,20210326182902,1,'2020-01-01 01:01:01'),(67,20210421112652,1,'2020-01-01 01:01:01'),(68,20210506095025,1,'2020-01-01 01:01:01'),(69,20210513115729,1,'2020-01-01 01:01:01'),(70,20210526113559,1,'2020-01-01 01:01:01'),(71,20210601000001,1,'2020-01-01 01:01:01'),(72,20210601000002,1,'2020-01-01 01:01:01'),(73,20210601000003,1,'2020-01-01 01:01:01'),(74,20210601000004,1,'2020-01-01 01:01:01'),(75,20210601000005,1,'2020-01-01 01:01:01'),(76,20210601000006,1,'2020-01-01 01:01:01'),(77,20210601000007,1,'2020-01-01 01:01:01'),(78,20210601000008,1,'2020-01-01 01:01:01'),(79,20210606151329,1,'2020-01-01 01:01:01'),(80,20210616163757,1,'2020-01-01 01:01:01'),(81,20210617174723,1,'2020-01-01 01:01:01'),(82,20210622160235,1,'2020-01-01 01:01:01'),(83,20210623100031,1,'2020-01-01 01:01:01'),(84,20210623133615,1,'2020-01-01 01:01:01'),(85,20210708143152,1,'2020-01-01 01:01:01'),(86,20210709124443,1,'2020-01-01 01:01:01'),(87,20210712155608,1,'2020-01-01 01:01:01'),(88,20210714102108,1,'2020-01-01 01:01:01'),(89,20210719153709,1,'2020-01-01 01:01:01'),(90,20210721171531,1,'2020-01-01 01:01:01'),(91,20210723135713,1,'2020-01-01 01:01:01'),(92,20210802135933,1,'2020-01-01 01:01:01'),(93,20210806112844,1,'2020-01-01 01:01:01'),(94,20210810095603,1,'2020-01-01 01:01:01'),(95,20210811150223,1,'2020-01-01 01:01:01'),(96,20210818151827,1,'2020-01-01 01:01:01'),(97,20210818151828,1,'2020-01-01 01:01:01'),(98,20210818182258,1,'2020-01-01 01:01:01'),(99,20210819131107,1,'2020-01-01 01:01:01'),(100,20210819143446,1,'2020-01-01 01:01:01'),(101,20210903132338,1,'2020-01-01 01:01:01'),(102,20210915144307,1,'2020-01-01 01:01:01'),(103,20210920155130,1,'2020-01-01 01:01:01'),(104,20210927143115,1,'2020-01-01 01:01:01'),(105,20210927143116,1,'2020-01-01 01:01:01'),(106,20211013133706,1,'2020-01-01 01:01:01'),(107,20211013133707,1,'2020-01-01 01:01:01'),(108,20211102135149,1,'2020-01-01 01:01:01'),(109,20211109121546,1,'2020-01-01 01:01:01'),(110,20211110163320,1,'2020-01-01 01:01:01'),(111,20211116184029,1,'2020-01-01 01:01:01'),(112,20211116184030,1,'2020-01-01 01:01:01'),(113,20211202092042,1,'2020-01-01 01:01:01'),(114,20211202181033,1,'2020-01-01 01:01:01'),(115,20211207161856,1,'2020-01-01 01:01:01'),(116,20211216131203,1,'2020-01-01 01:01:01'),(117,20211221110132,1,'2020-01-01 01:01:01'),(118,20220107155700,1,'2020-01-01 01:01:01'),(119,20220125105650,1,'2020-01-01 01:01:01'),(120,20220201084510,1,'2020-01-01 01:01:01'),(121,20220208144830,1,'2020-01-01 01:01:01'),(122,20220208144831,1,'2020-01-01 01:01:01'),(123,20220215152203,1,'2020-01-01 01:01:01'),(124,20220223113157,1,'2020-01-01 01:01:01'),(125,20220307104655,1,'2020-01-01 01:01:01'),(126,20220309133956,1,'2020-01-01 01:01:01'),(127,20220316155700,1,'2020-01-01 01:01:01'),(128,20220323152301,1,'2020-01-01 01:01:01'),(129,20220330100659,1,'2020-01-01 01:01:01'),(130,20220404091216,1,'2020-01-01 01:01:01'),(131,20220419140750,1,'2020-01-01 01:01:01'),(132,20220428140039,1,'2020-01-01 01:01:01'),(133,20220503134048,1,'2020-01-01 01:01:01'),(134,20220524102918,1,'2020-01-01 01:01:01'),(135,20220526123327,1,'2020-01-01 01:01:01'),(136,20220526123328,1,'2020-01-01 01:01:01'),(137,20220526123329,1,'2020-01-01 01:01:01'),(138,20220608113128,1,'2020-01-01 01:01:01'),(139,20220627104817,1,'2020-01-01 01:01:01'),(140,20220704101843,1,'2020-01-01 01:01:01'),(141,20220708095046,1,'2020-01-01 01:01:01'),(142,20220713091130,1,'2020-01-01 01:01:01'),(143,20220802135510,1,'2020-01-01 01:01:01'),(144,20220818101352,1,'2020-01-01 01:01:01'),(145,20220822161445,1,'2020-01-01 01:01:01'),(146,20220831100036,1,'2020-01-01 01:01:01'),(147,20220831100151,1,'2020-01-01 01:01:01'),(148,20220908181826,1,'2020-01-01 01:01:01'),(149,20220914154915,1,'2020-01-01 01:01:01'),(150,20220915165115,1,'2020-01-01 01:01:01'),(151,20220915165116,1,'2020-01-01 01:01:01'),(152,20220928100158,1,'2020-01-01 01:01:01'),(153,20221014084130,1,'2020-01-01 01:01:01'),(154,20221027085019,1,'2020-01-01 01:01:01'),(155,20221101103952,1,'2020-01-01 01:01:01'),(156,20221104144401,1,'2020-01-01 01:01:01'),(157,20221109100749,1,'2020-01-01 01:01:01'),(158,20221115104546,1,'2020-01-01 01:01:01'),(159,20221130114928,1,'2020-01-01 01:01:01'),(160,20221205112142,1,'2020-01-01 01:01:01'),(161,20221216115820,1,'2020-01-01 01:01:01'),(162,20221220195934,1,'2020-01-01 01:01:01'),(163,20221220195935,1,'2020-01-01 01:01:01'),(164,20221223174807,1,'2020-01-01 01:01:01'),(165,20221227163855,1,'2020-01-01 01:01:01'),(166,20221227163856,1,'2020-01-01 01:01:01'),(167,20230202224725,1,'2020-01-01 01:01:01'),(168,20230206163608,1,'2020-01-01 01:01:01'),(169,20230214131519,1,'2020-01-01 01:01:01'),(170,20230303135738,1,'2020-01-01 01:01:01'),(171,20230313135301,1,'2020-01-01 01:01:01'),(172,20230313141819,1,'2020-01-01 01:01:01'),(173,20230315104937,1,'2020-01-01 01:01:01'),(174,20230317173844,1,'2020-01-01 01:01:01'),(175,20230320133602,1,'2020-01-01 01:01:01'),(176,20230330100011,1,'2020-01-01 01:01:01'),(177,20230330134823,1,'2020-01-01 01:01:01'),(178,20230405232025,1,'2020-01-01 01:01:01'),(179,20230408084104,1,'2020-01-01 01:01:01'),(180,20230411102858,1,'2020-01-01 01:01:01'),(181,20230421155932,1,'2020-01-01 01:01:01'),(182,20230425082126,1,'2020-01-01 01:01:01'),(183,20230425105727,1,'2020-01-01 01:01:01'),(184,20230501154913,1,'2020-01-01 01:01:01'),(185,20230503101418,1,'2020-01-01 01:01:01'),(186,20230515144206,1,'2020-01-01 01:01:01'),(187,20230517140952,1,'2020-01-01 01:01:01'),(188,20230517152807,1,'2020-01-01 01:01:01'),(189,20230518114155,1,'2020-01-01 01:01:01'),(190,20230520153236,1,'2020-01-01 01:01:01'),(191,20230525151159,1,'2020-01-01 01:01:01'),(192,20230530122103,1,'2020-01-01 01:01:01'),(193,20230602111827,1,'2020-01-01 01:01:01'),(194,20230608103123,1,'2020-01-01 01:01:01'),(195,20230629140529,1,'2020-01-01 01:01:01'),(196,20230629140530,1,'2020-01-01 01:01:01'),(197,20230711144622,1,'2020-01-01 01:01:01'),(198,20230721135421,1,'2020-01-01 01:01:01'),(199,20230721161508,1,'2020-01-01 01:01:01'),(200,20230726115701,1,'2020-01-01 01:01:01'),(201,20230807100822,1,'2020-01-01 01:01:01'),(202,20230814150442,1,'2020-01-01 01:01:01'),(203,20230823122728,1,'2020-01-01 01:01:01'),(204,20230906152143,1,'2020-01-01 01:01:01'),(205,20230911163618,1,'2020-01-01 01:01:01'),(206,20230912101759,1,'2020-01-01 01:01:01'),(207,20230915101341,1,'2020-01-01 01:01:01'),(208,20230918132351,1,'2020-01-01 01:01:01'),(209,20231004144339,1,'2020-01-01 01:01:01'),(210,20231009094541,1,'2020-01-01 01:01:01'),(211,20231009094542,1,'2020-01-01 01:01:01'),(212,20231009094543,1,'2020-01-01 01:01:01'),(213,20231009094544,1,'2020-01-01 01:01:01'),(214,20231016091915,1,'2020-01-01 01:01:01'),(215,20231024174135,1,'2020-01-01 01:01:01'),(216,20231025120016,1,'2020-01-01 01:01:01'),(217,20231025160156,1,'2020-01-01 01:01:01'),(218,20231031165350,1,'2020-01-01 01:01:01'),(219,20231106144110,1,'2020-01-01 01:01:01'),(220,20231107130934,1,'2020-01-01 01:01:01'),(221,20231109115838,1,'2020-01-01 01:01:01'),(222,20231121054530,1,'2020-01-01 01:01:01'),(223,20231122101320,1,'2020-01-01 01:01:01'),(224,20231130132828,1,'2020-01-01 01:01:01'),(225,20231130132931,1,'2020-01-01 01:01:01'),(226,20231204155427,1,'2020-01-01 01:01:01'),(227,20231206142340,1,'2020-01-01 01:01:01'),(228,20231207102320,1,'2020-01-01 01:01:01'),(229,20231207102321,1,'2020-01-01 01:01:01'),(230,20231207133731,1,'2020-01-01 01:01:01'),(231,20231212094238,1,'2020-01-01 01:01:01'),(232,20231212095734,1,'2020-01-01 01:01:01'),(233,20231212161121,1,'2020-01-01 01:01:01'),(234,20231215122713,1,'2020-01-01 01:01:01'),(235,20231219143041,1,'2020-01-01 01:01:01'),(236,20231224070653,1,'2020-01-01 01:01:01'),(237,20240110134315,1,'2020-01-01 01:01:01'),(238,20240119091637,1,'2020-01-01 01:01:01'),(239,20240126020642,1,'2020-01-01 01:01:01'),(240,20240126020643,1,'2020-01-01 01:01:01'),(241,20240129162819,1,'2020-01-01 01:01:01'),(242,20240130115133,1,'2020-01-01 01:01:01'),(243,20240131083822,1,'2020-01-01 01:01:01'),(244,20240205095928,1,'2020-01-01 01:01:01'),(245,20240205121956,1,'2020-01-01 01:01:01'),(246,20240209110212,1,'2020-01-01 01:01:01'),(247,20240212111533,1,'2020-01-01 01:01:01'),(248,20240221112844,1,'2020-01-01 01:01:01'),(249,20240222073518,1,'2020-01-01 01:01:01'),(250,20240222135115,1,'2020-01-01 01:01:01'),(251,20240226082255,1,'2020-01-01 01:01:01'),(252,20240228082706,1,'2020-01-01 01:01:01'),(253,20240301173035,1,'2020-01-01 01:01:01'),(254,20240302111134,1,'2020-01-01 01:01:01'),(255,20240312103753,1,'2020-01-01 01:01:01'),(256,20240313143416,1,'2020-01-01 01:01:01'),(257,20240314085226,1,'2020-01-01 01:01:01'),(258,20240314151747,1,'2020-01-01 01:01:01'),(259,20240320145650,1,'2020-01-01 01:01:01'),(260,20240327115530,1,'2020-01-01 01:01:01'),(261,20240327115617,1,'2020-01-01 01:01:01'),(262,20240408085837,1,'2020-01-01 01:01:01'),(263,20240415104633,1,'2020-01-01 01:01:01'),(264,20240430111727,1,'2020-01-01 01:01:01'),(265,20240515200020,1,'2020-01-01 01:01:01'),(266,20240521143023,1,'2020-01-01 01:01:01'),(267,20240521143024,1,'2020-01-01 01:01:01'),(268,20240601174138,1,'2020-01-01 01:01:01'),(269,20240607133721,1,'2020-01-01 01:01:01'),(270,20240612150059,1,'2020-01-01 01:01:01'),(271,20240613162201,1,'2020-01-01 01:01:01'),(272,20240613172616,1,'2020-01-01 01:01:01'),(273,20240618142419,1,'2020-01-01 01:01:01'),(274,20240625093543,1,'2020-01-01 01:01:01'),(275,20240626195531,1,'2020-01-01 01:01:01'),(276,20240702123921,1,'2020-01-01 01:01:01'),(277,20240703154849,1,'2020-01-01 01:01:01'),(278,20240707134035,1,'2020-01-01 01:01:01'),(279,20240707134036,1,'2020-01-01 01:01:01'),(280,20240709124958,1,'2020-01-01 01:01:01'),(281,20240709132642,1,'2020-01-01 01:01:01'),(282,20240709183940,1,'2020-01-01 01:01:01'),(283,20240710155623,1,'2020-01-01 01:01:01'),(284,20240723102712,1,'2020-01-01 01:01:01'),(285,20240725152735,1,'2020-01-01 01:01:01'),(286,20240725182118,1,'2020-01-01 01:01:01'),(287,20240726100517,1,'2020-01-01 01:01:01'),(288,20240730171504,1,'2020-01-01 01:01:01'),(289,20240730174056,1,'2020-01-01 01:01:01'),(290,20240730215453,1,'2020-01-01 01:01:01'),(291,20240730374423,1,'2020-01-01 01:01:01');
+INSERT INTO `migration_status_tables` VALUES (1,0,1,'2020-01-01 01:01:01'),(2,20161118193812,1,'2020-01-01 01:01:01'),(3,20161118211713,1,'2020-01-01 01:01:01'),(4,20161118212436,1,'2020-01-01 01:01:01'),(5,20161118212515,1,'2020-01-01 01:01:01'),(6,20161118212528,1,'2020-01-01 01:01:01'),(7,20161118212538,1,'2020-01-01 01:01:01'),(8,20161118212549,1,'2020-01-01 01:01:01'),(9,20161118212557,1,'2020-01-01 01:01:01'),(10,20161118212604,1,'2020-01-01 01:01:01'),(11,20161118212613,1,'2020-01-01 01:01:01'),(12,20161118212621,1,'2020-01-01 01:01:01'),(13,20161118212630,1,'2020-01-01 01:01:01'),(14,20161118212641,1,'2020-01-01 01:01:01'),(15,20161118212649,1,'2020-01-01 01:01:01'),(16,20161118212656,1,'2020-01-01 01:01:01'),(17,20161118212758,1,'2020-01-01 01:01:01'),(18,20161128234849,1,'2020-01-01 01:01:01'),(19,20161230162221,1,'2020-01-01 01:01:01'),(20,20170104113816,1,'2020-01-01 01:01:01'),(21,20170105151732,1,'2020-01-01 01:01:01'),(22,20170108191242,1,'2020-01-01 01:01:01'),(23,20170109094020,1,'2020-01-01 01:01:01'),(24,20170109130438,1,'2020-01-01 01:01:01'),(25,20170110202752,1,'2020-01-01 01:01:01'),(26,20170111133013,1,'2020-01-01 01:01:01'),(27,20170117025759,1,'2020-01-01 01:01:01'),(28,20170118191001,1,'2020-01-01 01:01:01'),(29,20170119234632,1,'2020-01-01 01:01:01'),(30,20170124230432,1,'2020-01-01 01:01:01'),(31,20170127014618,1,'2020-01-01 01:01:01'),(32,20170131232841,1,'2020-01-01 01:01:01'),(33,20170223094154,1,'2020-01-01 01:01:01'),(34,20170306075207,1,'2020-01-01 01:01:01'),(35,20170309100733,1,'2020-01-01 01:01:01'),(36,20170331111922,1,'2020-01-01 01:01:01'),(37,20170502143928,1,'2020-01-01 01:01:01'),(38,20170504130602,1,'2020-01-01 01:01:01'),(39,20170509132100,1,'2020-01-01 01:01:01'),(40,20170519105647,1,'2020-01-01 01:01:01'),(41,20170519105648,1,'2020-01-01 01:01:01'),(42,20170831234300,1,'2020-01-01 01:01:01'),(43,20170831234301,1,'2020-01-01 01:01:01'),(44,20170831234303,1,'2020-01-01 01:01:01'),(45,20171116163618,1,'2020-01-01 01:01:01'),(46,20171219164727,1,'2020-01-01 01:01:01'),(47,20180620164811,1,'2020-01-01 01:01:01'),(48,20180620175054,1,'2020-01-01 01:01:01'),(49,20180620175055,1,'2020-01-01 01:01:01'),(50,20191010101639,1,'2020-01-01 01:01:01'),(51,20191010155147,1,'2020-01-01 01:01:01'),(52,20191220130734,1,'2020-01-01 01:01:01'),(53,20200311140000,1,'2020-01-01 01:01:01'),(54,20200405120000,1,'2020-01-01 01:01:01'),(55,20200407120000,1,'2020-01-01 01:01:01'),(56,20200420120000,1,'2020-01-01 01:01:01'),(57,20200504120000,1,'2020-01-01 01:01:01'),(58,20200512120000,1,'2020-01-01 01:01:01'),(59,20200707120000,1,'2020-01-01 01:01:01'),(60,20201011162341,1,'2020-01-01 01:01:01'),(61,20201021104586,1,'2020-01-01 01:01:01'),(62,20201102112520,1,'2020-01-01 01:01:01'),(63,20201208121729,1,'2020-01-01 01:01:01'),(64,20201215091637,1,'2020-01-01 01:01:01'),(65,20210119174155,1,'2020-01-01 01:01:01'),(66,20210326182902,1,'2020-01-01 01:01:01'),(67,20210421112652,1,'2020-01-01 01:01:01'),(68,20210506095025,1,'2020-01-01 01:01:01'),(69,20210513115729,1,'2020-01-01 01:01:01'),(70,20210526113559,1,'2020-01-01 01:01:01'),(71,20210601000001,1,'2020-01-01 01:01:01'),(72,20210601000002,1,'2020-01-01 01:01:01'),(73,20210601000003,1,'2020-01-01 01:01:01'),(74,20210601000004,1,'2020-01-01 01:01:01'),(75,20210601000005,1,'2020-01-01 01:01:01'),(76,20210601000006,1,'2020-01-01 01:01:01'),(77,20210601000007,1,'2020-01-01 01:01:01'),(78,20210601000008,1,'2020-01-01 01:01:01'),(79,20210606151329,1,'2020-01-01 01:01:01'),(80,20210616163757,1,'2020-01-01 01:01:01'),(81,20210617174723,1,'2020-01-01 01:01:01'),(82,20210622160235,1,'2020-01-01 01:01:01'),(83,20210623100031,1,'2020-01-01 01:01:01'),(84,20210623133615,1,'2020-01-01 01:01:01'),(85,20210708143152,1,'2020-01-01 01:01:01'),(86,20210709124443,1,'2020-01-01 01:01:01'),(87,20210712155608,1,'2020-01-01 01:01:01'),(88,20210714102108,1,'2020-01-01 01:01:01'),(89,20210719153709,1,'2020-01-01 01:01:01'),(90,20210721171531,1,'2020-01-01 01:01:01'),(91,20210723135713,1,'2020-01-01 01:01:01'),(92,20210802135933,1,'2020-01-01 01:01:01'),(93,20210806112844,1,'2020-01-01 01:01:01'),(94,20210810095603,1,'2020-01-01 01:01:01'),(95,20210811150223,1,'2020-01-01 01:01:01'),(96,20210818151827,1,'2020-01-01 01:01:01'),(97,20210818151828,1,'2020-01-01 01:01:01'),(98,20210818182258,1,'2020-01-01 01:01:01'),(99,20210819131107,1,'2020-01-01 01:01:01'),(100,20210819143446,1,'2020-01-01 01:01:01'),(101,20210903132338,1,'2020-01-01 01:01:01'),(102,20210915144307,1,'2020-01-01 01:01:01'),(103,20210920155130,1,'2020-01-01 01:01:01'),(104,20210927143115,1,'2020-01-01 01:01:01'),(105,20210927143116,1,'2020-01-01 01:01:01'),(106,20211013133706,1,'2020-01-01 01:01:01'),(107,20211013133707,1,'2020-01-01 01:01:01'),(108,20211102135149,1,'2020-01-01 01:01:01'),(109,20211109121546,1,'2020-01-01 01:01:01'),(110,20211110163320,1,'2020-01-01 01:01:01'),(111,20211116184029,1,'2020-01-01 01:01:01'),(112,20211116184030,1,'2020-01-01 01:01:01'),(113,20211202092042,1,'2020-01-01 01:01:01'),(114,20211202181033,1,'2020-01-01 01:01:01'),(115,20211207161856,1,'2020-01-01 01:01:01'),(116,20211216131203,1,'2020-01-01 01:01:01'),(117,20211221110132,1,'2020-01-01 01:01:01'),(118,20220107155700,1,'2020-01-01 01:01:01'),(119,20220125105650,1,'2020-01-01 01:01:01'),(120,20220201084510,1,'2020-01-01 01:01:01'),(121,20220208144830,1,'2020-01-01 01:01:01'),(122,20220208144831,1,'2020-01-01 01:01:01'),(123,20220215152203,1,'2020-01-01 01:01:01'),(124,20220223113157,1,'2020-01-01 01:01:01'),(125,20220307104655,1,'2020-01-01 01:01:01'),(126,20220309133956,1,'2020-01-01 01:01:01'),(127,20220316155700,1,'2020-01-01 01:01:01'),(128,20220323152301,1,'2020-01-01 01:01:01'),(129,20220330100659,1,'2020-01-01 01:01:01'),(130,20220404091216,1,'2020-01-01 01:01:01'),(131,20220419140750,1,'2020-01-01 01:01:01'),(132,20220428140039,1,'2020-01-01 01:01:01'),(133,20220503134048,1,'2020-01-01 01:01:01'),(134,20220524102918,1,'2020-01-01 01:01:01'),(135,20220526123327,1,'2020-01-01 01:01:01'),(136,20220526123328,1,'2020-01-01 01:01:01'),(137,20220526123329,1,'2020-01-01 01:01:01'),(138,20220608113128,1,'2020-01-01 01:01:01'),(139,20220627104817,1,'2020-01-01 01:01:01'),(140,20220704101843,1,'2020-01-01 01:01:01'),(141,20220708095046,1,'2020-01-01 01:01:01'),(142,20220713091130,1,'2020-01-01 01:01:01'),(143,20220802135510,1,'2020-01-01 01:01:01'),(144,20220818101352,1,'2020-01-01 01:01:01'),(145,20220822161445,1,'2020-01-01 01:01:01'),(146,20220831100036,1,'2020-01-01 01:01:01'),(147,20220831100151,1,'2020-01-01 01:01:01'),(148,20220908181826,1,'2020-01-01 01:01:01'),(149,20220914154915,1,'2020-01-01 01:01:01'),(150,20220915165115,1,'2020-01-01 01:01:01'),(151,20220915165116,1,'2020-01-01 01:01:01'),(152,20220928100158,1,'2020-01-01 01:01:01'),(153,20221014084130,1,'2020-01-01 01:01:01'),(154,20221027085019,1,'2020-01-01 01:01:01'),(155,20221101103952,1,'2020-01-01 01:01:01'),(156,20221104144401,1,'2020-01-01 01:01:01'),(157,20221109100749,1,'2020-01-01 01:01:01'),(158,20221115104546,1,'2020-01-01 01:01:01'),(159,20221130114928,1,'2020-01-01 01:01:01'),(160,20221205112142,1,'2020-01-01 01:01:01'),(161,20221216115820,1,'2020-01-01 01:01:01'),(162,20221220195934,1,'2020-01-01 01:01:01'),(163,20221220195935,1,'2020-01-01 01:01:01'),(164,20221223174807,1,'2020-01-01 01:01:01'),(165,20221227163855,1,'2020-01-01 01:01:01'),(166,20221227163856,1,'2020-01-01 01:01:01'),(167,20230202224725,1,'2020-01-01 01:01:01'),(168,20230206163608,1,'2020-01-01 01:01:01'),(169,20230214131519,1,'2020-01-01 01:01:01'),(170,20230303135738,1,'2020-01-01 01:01:01'),(171,20230313135301,1,'2020-01-01 01:01:01'),(172,20230313141819,1,'2020-01-01 01:01:01'),(173,20230315104937,1,'2020-01-01 01:01:01'),(174,20230317173844,1,'2020-01-01 01:01:01'),(175,20230320133602,1,'2020-01-01 01:01:01'),(176,20230330100011,1,'2020-01-01 01:01:01'),(177,20230330134823,1,'2020-01-01 01:01:01'),(178,20230405232025,1,'2020-01-01 01:01:01'),(179,20230408084104,1,'2020-01-01 01:01:01'),(180,20230411102858,1,'2020-01-01 01:01:01'),(181,20230421155932,1,'2020-01-01 01:01:01'),(182,20230425082126,1,'2020-01-01 01:01:01'),(183,20230425105727,1,'2020-01-01 01:01:01'),(184,20230501154913,1,'2020-01-01 01:01:01'),(185,20230503101418,1,'2020-01-01 01:01:01'),(186,20230515144206,1,'2020-01-01 01:01:01'),(187,20230517140952,1,'2020-01-01 01:01:01'),(188,20230517152807,1,'2020-01-01 01:01:01'),(189,20230518114155,1,'2020-01-01 01:01:01'),(190,20230520153236,1,'2020-01-01 01:01:01'),(191,20230525151159,1,'2020-01-01 01:01:01'),(192,20230530122103,1,'2020-01-01 01:01:01'),(193,20230602111827,1,'2020-01-01 01:01:01'),(194,20230608103123,1,'2020-01-01 01:01:01'),(195,20230629140529,1,'2020-01-01 01:01:01'),(196,20230629140530,1,'2020-01-01 01:01:01'),(197,20230711144622,1,'2020-01-01 01:01:01'),(198,20230721135421,1,'2020-01-01 01:01:01'),(199,20230721161508,1,'2020-01-01 01:01:01'),(200,20230726115701,1,'2020-01-01 01:01:01'),(201,20230807100822,1,'2020-01-01 01:01:01'),(202,20230814150442,1,'2020-01-01 01:01:01'),(203,20230823122728,1,'2020-01-01 01:01:01'),(204,20230906152143,1,'2020-01-01 01:01:01'),(205,20230911163618,1,'2020-01-01 01:01:01'),(206,20230912101759,1,'2020-01-01 01:01:01'),(207,20230915101341,1,'2020-01-01 01:01:01'),(208,20230918132351,1,'2020-01-01 01:01:01'),(209,20231004144339,1,'2020-01-01 01:01:01'),(210,20231009094541,1,'2020-01-01 01:01:01'),(211,20231009094542,1,'2020-01-01 01:01:01'),(212,20231009094543,1,'2020-01-01 01:01:01'),(213,20231009094544,1,'2020-01-01 01:01:01'),(214,20231016091915,1,'2020-01-01 01:01:01'),(215,20231024174135,1,'2020-01-01 01:01:01'),(216,20231025120016,1,'2020-01-01 01:01:01'),(217,20231025160156,1,'2020-01-01 01:01:01'),(218,20231031165350,1,'2020-01-01 01:01:01'),(219,20231106144110,1,'2020-01-01 01:01:01'),(220,20231107130934,1,'2020-01-01 01:01:01'),(221,20231109115838,1,'2020-01-01 01:01:01'),(222,20231121054530,1,'2020-01-01 01:01:01'),(223,20231122101320,1,'2020-01-01 01:01:01'),(224,20231130132828,1,'2020-01-01 01:01:01'),(225,20231130132931,1,'2020-01-01 01:01:01'),(226,20231204155427,1,'2020-01-01 01:01:01'),(227,20231206142340,1,'2020-01-01 01:01:01'),(228,20231207102320,1,'2020-01-01 01:01:01'),(229,20231207102321,1,'2020-01-01 01:01:01'),(230,20231207133731,1,'2020-01-01 01:01:01'),(231,20231212094238,1,'2020-01-01 01:01:01'),(232,20231212095734,1,'2020-01-01 01:01:01'),(233,20231212161121,1,'2020-01-01 01:01:01'),(234,20231215122713,1,'2020-01-01 01:01:01'),(235,20231219143041,1,'2020-01-01 01:01:01'),(236,20231224070653,1,'2020-01-01 01:01:01'),(237,20240110134315,1,'2020-01-01 01:01:01'),(238,20240119091637,1,'2020-01-01 01:01:01'),(239,20240126020642,1,'2020-01-01 01:01:01'),(240,20240126020643,1,'2020-01-01 01:01:01'),(241,20240129162819,1,'2020-01-01 01:01:01'),(242,20240130115133,1,'2020-01-01 01:01:01'),(243,20240131083822,1,'2020-01-01 01:01:01'),(244,20240205095928,1,'2020-01-01 01:01:01'),(245,20240205121956,1,'2020-01-01 01:01:01'),(246,20240209110212,1,'2020-01-01 01:01:01'),(247,20240212111533,1,'2020-01-01 01:01:01'),(248,20240221112844,1,'2020-01-01 01:01:01'),(249,20240222073518,1,'2020-01-01 01:01:01'),(250,20240222135115,1,'2020-01-01 01:01:01'),(251,20240226082255,1,'2020-01-01 01:01:01'),(252,20240228082706,1,'2020-01-01 01:01:01'),(253,20240301173035,1,'2020-01-01 01:01:01'),(254,20240302111134,1,'2020-01-01 01:01:01'),(255,20240312103753,1,'2020-01-01 01:01:01'),(256,20240313143416,1,'2020-01-01 01:01:01'),(257,20240314085226,1,'2020-01-01 01:01:01'),(258,20240314151747,1,'2020-01-01 01:01:01'),(259,20240320145650,1,'2020-01-01 01:01:01'),(260,20240327115530,1,'2020-01-01 01:01:01'),(261,20240327115617,1,'2020-01-01 01:01:01'),(262,20240408085837,1,'2020-01-01 01:01:01'),(263,20240415104633,1,'2020-01-01 01:01:01'),(264,20240430111727,1,'2020-01-01 01:01:01'),(265,20240515200020,1,'2020-01-01 01:01:01'),(266,20240521143023,1,'2020-01-01 01:01:01'),(267,20240521143024,1,'2020-01-01 01:01:01'),(268,20240601174138,1,'2020-01-01 01:01:01'),(269,20240607133721,1,'2020-01-01 01:01:01'),(270,20240612150059,1,'2020-01-01 01:01:01'),(271,20240613162201,1,'2020-01-01 01:01:01'),(272,20240613172616,1,'2020-01-01 01:01:01'),(273,20240618142419,1,'2020-01-01 01:01:01'),(274,20240625093543,1,'2020-01-01 01:01:01'),(275,20240626195531,1,'2020-01-01 01:01:01'),(276,20240702123921,1,'2020-01-01 01:01:01'),(277,20240703154849,1,'2020-01-01 01:01:01'),(278,20240707134035,1,'2020-01-01 01:01:01'),(279,20240707134036,1,'2020-01-01 01:01:01'),(280,20240709124958,1,'2020-01-01 01:01:01'),(281,20240709132642,1,'2020-01-01 01:01:01'),(282,20240709183940,1,'2020-01-01 01:01:01'),(283,20240710155623,1,'2020-01-01 01:01:01'),(284,20240723102712,1,'2020-01-01 01:01:01'),(285,20240725152735,1,'2020-01-01 01:01:01'),(286,20240725182118,1,'2020-01-01 01:01:01'),(287,20240726100517,1,'2020-01-01 01:01:01'),(288,20240730171504,1,'2020-01-01 01:01:01'),(289,20240730174056,1,'2020-01-01 01:01:01'),(290,20240730215453,1,'2020-01-01 01:01:01'),(291,20240730374423,1,'2020-01-01 01:01:01'),(292,20240801115359,1,'2020-01-01 01:01:01');
 /*!40101 SET @saved_cs_client     = @@character_set_client */;
 /*!50503 SET character_set_client = utf8mb4 */;
 CREATE TABLE `mobile_device_management_solutions` (
diff --git a/server/datastore/mysql/software.go b/server/datastore/mysql/software.go
index b91a38a89d..76ab0da294 100644
--- a/server/datastore/mysql/software.go
+++ b/server/datastore/mysql/software.go
@@ -2129,7 +2129,7 @@ AND EXISTS (SELECT 1 FROM software s JOIN software_cve scve ON scve.software_id
 		LEFT OUTER JOIN
 			vpp_apps vap ON st.id = vap.title_id
 		LEFT OUTER JOIN
-			host_vpp_software_installs hvsi ON vap.adam_id = hvsi.adam_id AND hvsi.host_id = :host_id
+			host_vpp_software_installs hvsi ON vap.adam_id = hvsi.adam_id AND vap.platform = hvsi.platform AND hvsi.host_id = :host_id
 		LEFT OUTER JOIN
 			nano_command_results ncr ON ncr.command_uuid = hvsi.command_uuid
 		WHERE
@@ -2143,7 +2143,7 @@ AND EXISTS (SELECT 1 FROM software s JOIN software_cve scve ON scve.software_id
 			( hvsi.id IS NULL OR hvsi.id = (
 				SELECT hvsi2.id
 				FROM host_vpp_software_installs hvsi2
-				WHERE hvsi2.host_id = hvsi.host_id AND hvsi2.adam_id = hvsi.adam_id
+				WHERE hvsi2.host_id = hvsi.host_id AND hvsi2.adam_id = hvsi.adam_id AND hvsi2.platform = hvsi.platform
 				ORDER BY hvsi2.created_at DESC
 				LIMIT 1 ) ) AND
 			-- software is installed on host
@@ -2159,8 +2159,6 @@ AND EXISTS (SELECT 1 FROM software s JOIN software_cve scve ON scve.software_id
 			) OR
 			-- or software install has been attempted on host (via installer or VPP app)
 			hsi.host_id IS NOT NULL OR hvsi.host_id IS NOT NULL )
-			-- make sure VPP platform matches
-			AND (vap.platform IS NULL OR vap.platform = :host_platform)
 			%s
 			%s
 `, softwareInstallerHostStatusNamedQuery("hsi", ""), vppAppHostStatusNamedQuery("hvsi", "ncr", ""), onlySelfServiceClause, onlyVulnerableClause)
diff --git a/server/datastore/mysql/software_installers.go b/server/datastore/mysql/software_installers.go
index 9539ca371a..51c952151c 100644
--- a/server/datastore/mysql/software_installers.go
+++ b/server/datastore/mysql/software_installers.go
@@ -421,7 +421,7 @@ WHERE
 	return &dest, nil
 }
 
-func (ds *Datastore) vppAppJoin(adamID string, status fleet.SoftwareInstallerStatus) (string, []interface{}, error) {
+func (ds *Datastore) vppAppJoin(appID fleet.VPPAppID, status fleet.SoftwareInstallerStatus) (string, []interface{}, error) {
 	stmt := fmt.Sprintf(`JOIN (
 SELECT
 	host_id
@@ -430,13 +430,13 @@ FROM
 LEFT OUTER JOIN
 	nano_command_results ncr ON ncr.command_uuid = hvsi.command_uuid
 WHERE
-	adam_id = :adam_id
+	adam_id = :adam_id AND platform = :platform
 	AND hvsi.id IN(
 		SELECT
 			max(id) -- ensure we use only the most recent install attempt for each host
 			FROM host_vpp_software_installs
 		WHERE
-			adam_id = :adam_id
+			adam_id = :adam_id AND platform = :platform
 		GROUP BY
 			host_id, adam_id)
 	AND (%s) = :status) hss ON hss.host_id = h.id
@@ -444,7 +444,8 @@ WHERE
 
 	return sqlx.Named(stmt, map[string]interface{}{
 		"status":                    status,
-		"adam_id":                   adamID,
+		"adam_id":                   appID.AdamID,
+		"platform":                  appID.Platform,
 		"software_status_installed": fleet.SoftwareInstallerInstalled,
 		"software_status_failed":    fleet.SoftwareInstallerFailed,
 		"software_status_pending":   fleet.SoftwareInstallerPending,
diff --git a/server/datastore/mysql/software_titles.go b/server/datastore/mysql/software_titles.go
index c73bc4e37f..2c214616dc 100644
--- a/server/datastore/mysql/software_titles.go
+++ b/server/datastore/mysql/software_titles.go
@@ -40,7 +40,7 @@ FROM software_titles st
 LEFT JOIN software_titles_host_counts sthc ON sthc.software_title_id = st.id
 LEFT JOIN software_installers si ON si.title_id = st.id AND si.global_or_team_id = ?
 LEFT JOIN vpp_apps vap ON vap.title_id = st.id
-LEFT JOIN vpp_apps_teams vat ON vat.global_or_team_id = ? AND vat.adam_id = vap.adam_id
+LEFT JOIN vpp_apps_teams vat ON vat.global_or_team_id = ? AND vat.adam_id = vap.adam_id AND vat.platform = vap.platform
 WHERE st.id = ? AND
 	((sthc.hosts_count > 0 AND %s) OR vat.adam_id IS NOT NULL OR si.id IS NOT NULL)
 GROUP BY
diff --git a/server/datastore/mysql/vpp.go b/server/datastore/mysql/vpp.go
index ddc5bdcde7..72bc53ecd7 100644
--- a/server/datastore/mysql/vpp.go
+++ b/server/datastore/mysql/vpp.go
@@ -45,7 +45,8 @@ WHERE
 	return &app, nil
 }
 
-func (ds *Datastore) GetSummaryHostVPPAppInstalls(ctx context.Context, teamID *uint, adamID string) (*fleet.VPPAppStatusSummary, error) {
+func (ds *Datastore) GetSummaryHostVPPAppInstalls(ctx context.Context, teamID *uint, appID fleet.VPPAppID) (*fleet.VPPAppStatusSummary,
+	error) {
 	var dest fleet.VPPAppStatusSummary
 
 	stmt := fmt.Sprintf(`
@@ -63,7 +64,7 @@ INNER JOIN
 LEFT OUTER JOIN
 	nano_command_results ncr ON ncr.id = h.uuid AND ncr.command_uuid = hvsi.command_uuid
 WHERE
-	hvsi.adam_id = :adam_id AND
+	hvsi.adam_id = :adam_id AND hvsi.platform = :platform AND
 	(h.team_id = :team_id OR (h.team_id IS NULL AND :team_id = 0)) AND
 	hvsi.id IN (
 		SELECT
@@ -71,7 +72,7 @@ WHERE
 		FROM
 			host_vpp_software_installs hvsi2
 		WHERE
-			hvsi2.adam_id = :adam_id
+			hvsi2.adam_id = :adam_id AND hvsi2.platform = :platform
 		GROUP BY
 			hvsi2.host_id
 	)
@@ -83,7 +84,8 @@ WHERE
 	}
 
 	query, args, err := sqlx.Named(stmt, map[string]interface{}{
-		"adam_id":                   adamID,
+		"adam_id":                   appID.AdamID,
+		"platform":                  appID.Platform,
 		"team_id":                   tmID,
 		"mdm_status_acknowledged":   fleet.MDMAppleStatusAcknowledged,
 		"mdm_status_error":          fleet.MDMAppleStatusError,
@@ -430,15 +432,17 @@ WHERE vat.global_or_team_id = ? AND va.title_id = ?
 	return &dest, nil
 }
 
-func (ds *Datastore) InsertHostVPPSoftwareInstall(ctx context.Context, hostID, userID uint, adamID, commandUUID, associatedEventID string) error {
+func (ds *Datastore) InsertHostVPPSoftwareInstall(ctx context.Context, hostID, userID uint, appID fleet.VPPAppID,
+	commandUUID, associatedEventID string) error {
 	stmt := `
 INSERT INTO host_vpp_software_installs
-  (host_id, adam_id, command_uuid, user_id, associated_event_id)
+  (host_id, adam_id, platform, command_uuid, user_id, associated_event_id)
 VALUES
-  (?,?,?,?,?)
+  (?,?,?,?,?,?)
 	`
 
-	if _, err := ds.writer(ctx).ExecContext(ctx, stmt, hostID, adamID, commandUUID, userID, associatedEventID); err != nil {
+	if _, err := ds.writer(ctx).ExecContext(ctx, stmt, hostID, appID.AdamID, appID.Platform, commandUUID, userID,
+		associatedEventID); err != nil {
 		return ctxerr.Wrap(ctx, err, "insert into host_vpp_software_installs")
 	}
 
diff --git a/server/datastore/mysql/vpp_test.go b/server/datastore/mysql/vpp_test.go
index 449789ebe1..27fce609d3 100644
--- a/server/datastore/mysql/vpp_test.go
+++ b/server/datastore/mysql/vpp_test.go
@@ -188,15 +188,15 @@ func testVPPAppStatus(t *testing.T, ds *Datastore) {
 	va1, err := ds.InsertVPPAppWithTeam(ctx, &fleet.VPPApp{Name: "vpp1", BundleIdentifier: "com.app.vpp1",
 		VPPAppID: fleet.VPPAppID{AdamID: "adam_vpp_app_1", Platform: fleet.MacOSPlatform}}, nil)
 	require.NoError(t, err)
-	vpp1 := va1.AdamID
+	vpp1 := va1.VPPAppID
 	va2, err := ds.InsertVPPAppWithTeam(ctx, &fleet.VPPApp{Name: "vpp2", BundleIdentifier: "com.app.vpp2",
 		VPPAppID: fleet.VPPAppID{AdamID: "adam_vpp_app_2", Platform: fleet.MacOSPlatform}}, &team1.ID)
 	require.NoError(t, err)
-	vpp2 := va2.AdamID
+	vpp2 := va2.VPPAppID
 	va3, err := ds.InsertVPPAppWithTeam(ctx, &fleet.VPPApp{Name: "vpp3", BundleIdentifier: "com.app.vpp3",
 		VPPAppID: fleet.VPPAppID{AdamID: "adam_vpp_app_3", Platform: fleet.MacOSPlatform}}, nil)
 	require.NoError(t, err)
-	vpp3 := va3.AdamID
+	vpp3 := va3.VPPAppID
 	_, err = ds.InsertVPPAppWithTeam(ctx, &fleet.VPPApp{Name: "vpp3", BundleIdentifier: "com.app.vpp3",
 		VPPAppID: fleet.VPPAppID{AdamID: "adam_vpp_app_3", Platform: fleet.MacOSPlatform}}, &team1.ID)
 	require.NoError(t, err)
@@ -251,7 +251,7 @@ func testVPPAppStatus(t *testing.T, ds *Datastore) {
 	require.NoError(t, err)
 
 	// simulate an install request of vpp1 on h1
-	cmd1 := createVPPAppInstallRequest(t, ds, h1, vpp1, user.ID)
+	cmd1 := createVPPAppInstallRequest(t, ds, h1, vpp1.AdamID, user.ID)
 
 	summary, err = ds.GetSummaryHostVPPAppInstalls(ctx, nil, vpp1)
 	require.NoError(t, err)
@@ -266,8 +266,8 @@ func testVPPAppStatus(t *testing.T, ds *Datastore) {
 
 	// create a new request for h1 that supercedes the failed on, and a request
 	// for h2 with a successful result.
-	cmd2 := createVPPAppInstallRequest(t, ds, h1, vpp1, user.ID)
-	cmd3 := createVPPAppInstallRequest(t, ds, h2, vpp1, user.ID)
+	cmd2 := createVPPAppInstallRequest(t, ds, h1, vpp1.AdamID, user.ID)
+	cmd3 := createVPPAppInstallRequest(t, ds, h2, vpp1.AdamID, user.ID)
 	createVPPAppInstallResult(t, ds, h2, cmd3, fleet.MDMAppleStatusAcknowledged)
 
 	actUser, act, err := ds.GetPastActivityDataForVPPAppInstall(ctx, &mdm.CommandResults{CommandUUID: cmd3})
@@ -293,7 +293,7 @@ func testVPPAppStatus(t *testing.T, ds *Datastore) {
 	require.Equal(t, &fleet.VPPAppStatusSummary{Pending: 0, Failed: 0, Installed: 0}, summary)
 
 	// simulate a successful request for team app vpp2 on h3
-	cmd4 := createVPPAppInstallRequest(t, ds, h3, vpp2, user.ID)
+	cmd4 := createVPPAppInstallRequest(t, ds, h3, vpp2.AdamID, user.ID)
 	createVPPAppInstallResult(t, ds, h3, cmd4, fleet.MDMAppleStatusAcknowledged)
 
 	summary, err = ds.GetSummaryHostVPPAppInstalls(ctx, &team1.ID, vpp2)
@@ -302,11 +302,11 @@ func testVPPAppStatus(t *testing.T, ds *Datastore) {
 
 	// simulate a successful, failed and pending request for app vpp3 on team
 	// (h3) and no team (h1, h2)
-	cmd5 := createVPPAppInstallRequest(t, ds, h3, vpp3, user.ID)
+	cmd5 := createVPPAppInstallRequest(t, ds, h3, vpp3.AdamID, user.ID)
 	createVPPAppInstallResult(t, ds, h3, cmd5, fleet.MDMAppleStatusAcknowledged)
-	cmd6 := createVPPAppInstallRequest(t, ds, h1, vpp3, user.ID)
+	cmd6 := createVPPAppInstallRequest(t, ds, h1, vpp3.AdamID, user.ID)
 	createVPPAppInstallResult(t, ds, h1, cmd6, fleet.MDMAppleStatusCommandFormatError)
-	createVPPAppInstallRequest(t, ds, h2, vpp3, user.ID)
+	createVPPAppInstallRequest(t, ds, h2, vpp3.AdamID, user.ID)
 
 	// for no team, it sees the failed and pending counts
 	summary, err = ds.GetSummaryHostVPPAppInstalls(ctx, nil, vpp3)
@@ -330,8 +330,9 @@ func createVPPAppInstallRequest(t *testing.T, ds *Datastore, host *fleet.Host, a
 	require.NoError(t, err)
 
 	ExecAdhocSQL(t, ds, func(q sqlx.ExtContext) error {
-		_, err := q.ExecContext(ctx, `INSERT INTO host_vpp_software_installs (host_id, adam_id, command_uuid, user_id) VALUES (?, ?, ?, ?)`,
-			host.ID, adamID, cmdUUID, userID)
+		_, err := q.ExecContext(ctx,
+			`INSERT INTO host_vpp_software_installs (host_id, adam_id, platform, command_uuid, user_id) VALUES (?, ?, ?, ?, ?)`,
+			host.ID, adamID, host.Platform, cmdUUID, userID)
 		return err
 	})
 	return cmdUUID
@@ -401,10 +402,10 @@ func testVPPApps(t *testing.T, ds *Datastore) {
 		GlobalRole: ptr.String(fleet.RoleAdmin),
 	})
 	require.NoError(t, err)
-	err = ds.InsertHostVPPSoftwareInstall(ctx, 1, u.ID, app1.AdamID, "a", "b")
+	err = ds.InsertHostVPPSoftwareInstall(ctx, 1, u.ID, app1.VPPAppID, "a", "b")
 	require.NoError(t, err)
 
-	err = ds.InsertHostVPPSoftwareInstall(ctx, 2, u.ID, app2.AdamID, "c", "d")
+	err = ds.InsertHostVPPSoftwareInstall(ctx, 2, u.ID, app2.VPPAppID, "c", "d")
 	require.NoError(t, err)
 
 	var results []struct {
diff --git a/server/fleet/datastore.go b/server/fleet/datastore.go
index 7c61870d68..6847f398af 100644
--- a/server/fleet/datastore.go
+++ b/server/fleet/datastore.go
@@ -1572,7 +1572,7 @@ type Datastore interface {
 
 	// GetSummaryHostVPPAppInstalls returns the VPP app install summary for the
 	// given team and VPP app adam_id.
-	GetSummaryHostVPPAppInstalls(ctx context.Context, teamID *uint, adamID string) (*VPPAppStatusSummary, error)
+	GetSummaryHostVPPAppInstalls(ctx context.Context, teamID *uint, appID VPPAppID) (*VPPAppStatusSummary, error)
 
 	GetSoftwareInstallResults(ctx context.Context, resultsUUID string) (*HostSoftwareInstallerResult, error)
 
@@ -1591,7 +1591,7 @@ type Datastore interface {
 	SetTeamVPPApps(ctx context.Context, teamID *uint, appIDs []VPPAppID) error
 	InsertVPPAppWithTeam(ctx context.Context, app *VPPApp, teamID *uint) (*VPPApp, error)
 
-	InsertHostVPPSoftwareInstall(ctx context.Context, hostID, userID uint, adamID, commandUUID, associatedEventID string) error
+	InsertHostVPPSoftwareInstall(ctx context.Context, hostID, userID uint, appID VPPAppID, commandUUID, associatedEventID string) error
 	GetPastActivityDataForVPPAppInstall(ctx context.Context, commandResults *mdm.CommandResults) (*User, *ActivityInstalledAppStoreApp, error)
 }
 
diff --git a/server/mock/datastore_mock.go b/server/mock/datastore_mock.go
index 7c9523da38..e062476d60 100644
--- a/server/mock/datastore_mock.go
+++ b/server/mock/datastore_mock.go
@@ -988,7 +988,7 @@ type DeleteVPPAppFromTeamFunc func(ctx context.Context, teamID *uint, appID flee
 
 type GetSummaryHostSoftwareInstallsFunc func(ctx context.Context, installerID uint) (*fleet.SoftwareInstallerStatusSummary, error)
 
-type GetSummaryHostVPPAppInstallsFunc func(ctx context.Context, teamID *uint, adamID string) (*fleet.VPPAppStatusSummary, error)
+type GetSummaryHostVPPAppInstallsFunc func(ctx context.Context, teamID *uint, appID fleet.VPPAppID) (*fleet.VPPAppStatusSummary, error)
 
 type GetSoftwareInstallResultsFunc func(ctx context.Context, resultsUUID string) (*fleet.HostSoftwareInstallerResult, error)
 
@@ -1006,7 +1006,7 @@ type SetTeamVPPAppsFunc func(ctx context.Context, teamID *uint, appIDs []fleet.V
 
 type InsertVPPAppWithTeamFunc func(ctx context.Context, app *fleet.VPPApp, teamID *uint) (*fleet.VPPApp, error)
 
-type InsertHostVPPSoftwareInstallFunc func(ctx context.Context, hostID uint, userID uint, adamID string, commandUUID string, associatedEventID string) error
+type InsertHostVPPSoftwareInstallFunc func(ctx context.Context, hostID uint, userID uint, appID fleet.VPPAppID, commandUUID string, associatedEventID string) error
 
 type GetPastActivityDataForVPPAppInstallFunc func(ctx context.Context, commandResults *mdm.CommandResults) (*fleet.User, *fleet.ActivityInstalledAppStoreApp, error)
 
@@ -5887,11 +5887,11 @@ func (s *DataStore) GetSummaryHostSoftwareInstalls(ctx context.Context, installe
 	return s.GetSummaryHostSoftwareInstallsFunc(ctx, installerID)
 }
 
-func (s *DataStore) GetSummaryHostVPPAppInstalls(ctx context.Context, teamID *uint, adamID string) (*fleet.VPPAppStatusSummary, error) {
+func (s *DataStore) GetSummaryHostVPPAppInstalls(ctx context.Context, teamID *uint, appID fleet.VPPAppID) (*fleet.VPPAppStatusSummary, error) {
 	s.mu.Lock()
 	s.GetSummaryHostVPPAppInstallsFuncInvoked = true
 	s.mu.Unlock()
-	return s.GetSummaryHostVPPAppInstallsFunc(ctx, teamID, adamID)
+	return s.GetSummaryHostVPPAppInstallsFunc(ctx, teamID, appID)
 }
 
 func (s *DataStore) GetSoftwareInstallResults(ctx context.Context, resultsUUID string) (*fleet.HostSoftwareInstallerResult, error) {
@@ -5950,11 +5950,11 @@ func (s *DataStore) InsertVPPAppWithTeam(ctx context.Context, app *fleet.VPPApp,
 	return s.InsertVPPAppWithTeamFunc(ctx, app, teamID)
 }
 
-func (s *DataStore) InsertHostVPPSoftwareInstall(ctx context.Context, hostID uint, userID uint, adamID string, commandUUID string, associatedEventID string) error {
+func (s *DataStore) InsertHostVPPSoftwareInstall(ctx context.Context, hostID uint, userID uint, appID fleet.VPPAppID, commandUUID string, associatedEventID string) error {
 	s.mu.Lock()
 	s.InsertHostVPPSoftwareInstallFuncInvoked = true
 	s.mu.Unlock()
-	return s.InsertHostVPPSoftwareInstallFunc(ctx, hostID, userID, adamID, commandUUID, associatedEventID)
+	return s.InsertHostVPPSoftwareInstallFunc(ctx, hostID, userID, appID, commandUUID, associatedEventID)
 }
 
 func (s *DataStore) GetPastActivityDataForVPPAppInstall(ctx context.Context, commandResults *mdm.CommandResults) (*fleet.User, *fleet.ActivityInstalledAppStoreApp, error) {
diff --git a/server/service/integration_mdm_test.go b/server/service/integration_mdm_test.go
index 44b1e95271..b4180fb2b2 100644
--- a/server/service/integration_mdm_test.go
+++ b/server/service/integration_mdm_test.go
@@ -10290,7 +10290,6 @@ func (s *integrationMDMTestSuite) TestVPPApps() {
 			extraAvailable: 1},
 	}
 
-	expectedInstalls := 1
 	for name, install := range installs {
 		t.Run(name, func(t *testing.T) {
 
@@ -10307,6 +10306,21 @@ func (s *integrationMDMTestSuite) TestVPPApps() {
 				strconv.Itoa(int(team.ID)), "software_title_id", strconv.Itoa(int(titleID)))
 			require.Equal(t, 1, countResp.Count)
 
+			// Get pending activity
+			var hostActivitiesResp listHostUpcomingActivitiesResponse
+			s.DoJSON("GET", fmt.Sprintf("/api/latest/fleet/hosts/%d/activities/upcoming", installHost.ID),
+				nil, http.StatusOK, &hostActivitiesResp)
+			activitiesToString := func(activities []*fleet.Activity) []string {
+				var res []string
+				for _, activity := range activities {
+					res = append(res, fmt.Sprintf("%+v", activity))
+				}
+				return res
+			}
+			require.Len(t, hostActivitiesResp.Activities, 1, "got activities: %v", activitiesToString(hostActivitiesResp.Activities))
+			assert.Equal(t, hostActivitiesResp.Activities[0].Type, fleet.ActivityInstalledAppStoreApp{}.ActivityName())
+			assert.EqualValues(t, 1, hostActivitiesResp.Count)
+
 			// Simulate successful installation on the host
 			cmd, err = mdmClient.Idle()
 			require.NoError(t, err)
@@ -10324,12 +10338,11 @@ func (s *integrationMDMTestSuite) TestVPPApps() {
 			listResp = listHostsResponse{}
 			s.DoJSON("GET", "/api/latest/fleet/hosts", nil, http.StatusOK, &listResp, "software_status", "installed", "team_id",
 				strconv.Itoa(int(team.ID)), "software_title_id", strconv.Itoa(int(titleID)))
-			assert.Len(t, listResp.Hosts, expectedInstalls)
+			assert.Len(t, listResp.Hosts, 1)
 			countResp = countHostsResponse{}
 			s.DoJSON("GET", "/api/latest/fleet/hosts/count", nil, http.StatusOK, &countResp, "software_status", "installed", "team_id",
 				strconv.Itoa(int(team.ID)), "software_title_id", strconv.Itoa(int(titleID)))
-			assert.Equal(t, expectedInstalls, countResp.Count)
-			expectedInstalls++
+			assert.Equal(t, 1, countResp.Count)
 
 			s.lastActivityMatches(
 				fleet.ActivityInstalledAppStoreApp{}.ActivityName(),
diff --git a/server/service/software_titles.go b/server/service/software_titles.go
index 82e367c7e6..39f38177ae 100644
--- a/server/service/software_titles.go
+++ b/server/service/software_titles.go
@@ -198,7 +198,7 @@ func (svc *Service) SoftwareTitleByID(ctx context.Context, id uint, teamID *uint
 				return nil, ctxerr.Wrap(ctx, err, "get VPP app metadata")
 			}
 			if meta != nil {
-				summary, err := svc.ds.GetSummaryHostVPPAppInstalls(ctx, teamID, meta.VPPAppID.AdamID)
+				summary, err := svc.ds.GetSummaryHostVPPAppInstalls(ctx, teamID, meta.VPPAppID)
 				if err != nil {
 					return nil, ctxerr.Wrap(ctx, err, "get VPP app status summary")
 				}

From 7abae84be5f1db4974b3d164a674379baf5f99aa Mon Sep 17 00:00:00 2001
From: Dante Catalfamo <43040593+dantecatalfamo@users.noreply.github.com>
Date: Thu, 1 Aug 2024 14:36:40 -0400
Subject: [PATCH 31/88] Use gitops format for software installer query (#20891)

#20747
---
 changes/20747-gitops-software-query           |  1 +
 cmd/fleetctl/gitops_test.go                   | 28 +++++++----
 .../testdata/gitops/lib/query_multiple.yml    | 11 +----
 .../gitops/lib/query_multiple_apply.yml       | 11 +++++
 .../testdata/gitops/lib/query_ruby.yml        |  5 +-
 .../testdata/gitops/lib/query_ruby_apply.yml  |  5 ++
 .../testdata/gitops/lib/query_ruby_env.yml    |  2 +
 ...r_pre_condition_multiple_queries_apply.yml | 23 +++++++++
 .../team_software_installer_valid_apply.yml   | 25 ++++++++++
 ...eam_software_installer_valid_env_query.yml | 25 ++++++++++
 server/service/client.go                      | 47 +++++++++++++++----
 11 files changed, 154 insertions(+), 29 deletions(-)
 create mode 100644 changes/20747-gitops-software-query
 create mode 100644 cmd/fleetctl/testdata/gitops/lib/query_multiple_apply.yml
 create mode 100644 cmd/fleetctl/testdata/gitops/lib/query_ruby_apply.yml
 create mode 100644 cmd/fleetctl/testdata/gitops/lib/query_ruby_env.yml
 create mode 100644 cmd/fleetctl/testdata/gitops/team_software_installer_pre_condition_multiple_queries_apply.yml
 create mode 100644 cmd/fleetctl/testdata/gitops/team_software_installer_valid_apply.yml
 create mode 100644 cmd/fleetctl/testdata/gitops/team_software_installer_valid_env_query.yml

diff --git a/changes/20747-gitops-software-query b/changes/20747-gitops-software-query
new file mode 100644
index 0000000000..100efc17f3
--- /dev/null
+++ b/changes/20747-gitops-software-query
@@ -0,0 +1 @@
+- Use new gitops format for software pre install query
diff --git a/cmd/fleetctl/gitops_test.go b/cmd/fleetctl/gitops_test.go
index 5f504a8106..826dd43374 100644
--- a/cmd/fleetctl/gitops_test.go
+++ b/cmd/fleetctl/gitops_test.go
@@ -1215,7 +1215,9 @@ func TestTeamSofwareInstallersGitOps(t *testing.T) {
 		{"testdata/gitops/team_software_installer_unsupported.yml", "The file should be .pkg, .msi, .exe or .deb."},
 		{"testdata/gitops/team_software_installer_too_large.yml", "The maximum file size is 500 MB"},
 		{"testdata/gitops/team_software_installer_valid.yml", ""},
+		{"testdata/gitops/team_software_installer_valid_apply.yml", ""},
 		{"testdata/gitops/team_software_installer_pre_condition_multiple_queries.yml", "should have only one query."},
+		{"testdata/gitops/team_software_installer_pre_condition_multiple_queries_apply.yml", "should have only one query."},
 		{"testdata/gitops/team_software_installer_pre_condition_not_found.yml", "no such file or directory"},
 		{"testdata/gitops/team_software_installer_install_not_found.yml", "no such file or directory"},
 		{"testdata/gitops/team_software_installer_post_install_not_found.yml", "no such file or directory"},
@@ -1224,14 +1226,7 @@ func TestTeamSofwareInstallersGitOps(t *testing.T) {
 	}
 	for _, c := range cases {
 		t.Run(filepath.Base(c.file), func(t *testing.T) {
-			ds, _, _ := setupFullGitOpsPremiumServer(t)
-
-			ds.SetTeamVPPAppsFunc = func(ctx context.Context, teamID *uint, adamIDs []fleet.VPPAppID) error {
-				return nil
-			}
-			ds.BatchInsertVPPAppsFunc = func(ctx context.Context, apps []*fleet.VPPApp) error {
-				return nil
-			}
+			setupFullGitOpsPremiumServer(t)
 
 			_, err := runAppNoChecks([]string{"gitops", "-f", c.file})
 			if c.wantErr == "" {
@@ -1243,6 +1238,23 @@ func TestTeamSofwareInstallersGitOps(t *testing.T) {
 	}
 }
 
+func TestTeamSoftwareInstallersGitopsQueryEnv(t *testing.T) {
+	startSoftwareInstallerServer(t)
+	ds, _, _ := setupFullGitOpsPremiumServer(t)
+
+	t.Setenv("QUERY_VAR", "IT_WORKS")
+
+	ds.BatchSetSoftwareInstallersFunc = func(ctx context.Context, tmID *uint, installers []*fleet.UploadSoftwareInstallerPayload) error {
+		if installers[0].PreInstallQuery != "select IT_WORKS" {
+			return fmt.Errorf("Missing env var, got %s", installers[0].PreInstallQuery)
+		}
+		return nil
+	}
+
+	_, err := runAppNoChecks([]string{"gitops", "-f", "testdata/gitops/team_software_installer_valid_env_query.yml"})
+	require.NoError(t, err)
+}
+
 func TestTeamVPPAppsGitOps(t *testing.T) {
 	config := &appleVPPConfigSrvConf{
 		Assets: []vpp.Asset{
diff --git a/cmd/fleetctl/testdata/gitops/lib/query_multiple.yml b/cmd/fleetctl/testdata/gitops/lib/query_multiple.yml
index c3109b5f71..f14ea9ea0e 100644
--- a/cmd/fleetctl/testdata/gitops/lib/query_multiple.yml
+++ b/cmd/fleetctl/testdata/gitops/lib/query_multiple.yml
@@ -1,11 +1,4 @@
-apiVersion: v1
-kind: query
-spec:
-  name: query_ruby
+- name: query_ruby
   query: select 1
----
-apiVersion: v1
-kind: query
-spec:
-  name: query_ruby2
+- name: query_ruby2
   query: select 2
diff --git a/cmd/fleetctl/testdata/gitops/lib/query_multiple_apply.yml b/cmd/fleetctl/testdata/gitops/lib/query_multiple_apply.yml
new file mode 100644
index 0000000000..c3109b5f71
--- /dev/null
+++ b/cmd/fleetctl/testdata/gitops/lib/query_multiple_apply.yml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: query
+spec:
+  name: query_ruby
+  query: select 1
+---
+apiVersion: v1
+kind: query
+spec:
+  name: query_ruby2
+  query: select 2
diff --git a/cmd/fleetctl/testdata/gitops/lib/query_ruby.yml b/cmd/fleetctl/testdata/gitops/lib/query_ruby.yml
index 28714447bf..bb61c6b32a 100644
--- a/cmd/fleetctl/testdata/gitops/lib/query_ruby.yml
+++ b/cmd/fleetctl/testdata/gitops/lib/query_ruby.yml
@@ -1,5 +1,2 @@
-apiVersion: v1
-kind: query
-spec:
-  name: query_ruby
+- name: query_ruby
   query: select 1
diff --git a/cmd/fleetctl/testdata/gitops/lib/query_ruby_apply.yml b/cmd/fleetctl/testdata/gitops/lib/query_ruby_apply.yml
new file mode 100644
index 0000000000..28714447bf
--- /dev/null
+++ b/cmd/fleetctl/testdata/gitops/lib/query_ruby_apply.yml
@@ -0,0 +1,5 @@
+apiVersion: v1
+kind: query
+spec:
+  name: query_ruby
+  query: select 1
diff --git a/cmd/fleetctl/testdata/gitops/lib/query_ruby_env.yml b/cmd/fleetctl/testdata/gitops/lib/query_ruby_env.yml
new file mode 100644
index 0000000000..c9b15ff229
--- /dev/null
+++ b/cmd/fleetctl/testdata/gitops/lib/query_ruby_env.yml
@@ -0,0 +1,2 @@
+- name: query_ruby
+  query: select ${QUERY_VAR}
diff --git a/cmd/fleetctl/testdata/gitops/team_software_installer_pre_condition_multiple_queries_apply.yml b/cmd/fleetctl/testdata/gitops/team_software_installer_pre_condition_multiple_queries_apply.yml
new file mode 100644
index 0000000000..7c88f9963d
--- /dev/null
+++ b/cmd/fleetctl/testdata/gitops/team_software_installer_pre_condition_multiple_queries_apply.yml
@@ -0,0 +1,23 @@
+name: "${TEST_TEAM_NAME}"
+team_settings:
+  secrets:
+    - secret: "ABC"
+  features:
+    enable_host_users: true
+    enable_software_inventory: true
+  host_expiry_settings:
+    host_expiry_enabled: true
+    host_expiry_window: 30
+agent_options:
+controls:
+policies:
+queries:
+software:
+  packages:
+    - url: ${SOFTWARE_INSTALLER_URL}/ruby.deb
+      install_script:
+        path: lib/install_ruby.sh
+      pre_install_query:
+        path: lib/query_multiple_apply.yml
+      post_install_script:
+        path: lib/post_install_ruby.sh
diff --git a/cmd/fleetctl/testdata/gitops/team_software_installer_valid_apply.yml b/cmd/fleetctl/testdata/gitops/team_software_installer_valid_apply.yml
new file mode 100644
index 0000000000..9fd14c4922
--- /dev/null
+++ b/cmd/fleetctl/testdata/gitops/team_software_installer_valid_apply.yml
@@ -0,0 +1,25 @@
+name: "${TEST_TEAM_NAME}"
+team_settings:
+  secrets:
+    - secret: "ABC"
+  features:
+    enable_host_users: true
+    enable_software_inventory: true
+  host_expiry_settings:
+    host_expiry_enabled: true
+    host_expiry_window: 30
+agent_options:
+controls:
+policies:
+queries:
+software:
+  packages:
+    - url: ${SOFTWARE_INSTALLER_URL}/ruby.deb
+      install_script:
+        path: lib/install_ruby.sh
+      pre_install_query:
+        path: lib/query_ruby_apply.yml
+      post_install_script:
+        path: lib/post_install_ruby.sh
+    - url: ${SOFTWARE_INSTALLER_URL}/other.deb
+      self_service: true
diff --git a/cmd/fleetctl/testdata/gitops/team_software_installer_valid_env_query.yml b/cmd/fleetctl/testdata/gitops/team_software_installer_valid_env_query.yml
new file mode 100644
index 0000000000..1c60d3f469
--- /dev/null
+++ b/cmd/fleetctl/testdata/gitops/team_software_installer_valid_env_query.yml
@@ -0,0 +1,25 @@
+name: "${TEST_TEAM_NAME}"
+team_settings:
+  secrets:
+    - secret: "ABC"
+  features:
+    enable_host_users: true
+    enable_software_inventory: true
+  host_expiry_settings:
+    host_expiry_enabled: true
+    host_expiry_window: 30
+agent_options:
+controls:
+policies:
+queries:
+software:
+  packages:
+    - url: ${SOFTWARE_INSTALLER_URL}/ruby.deb
+      install_script:
+        path: lib/install_ruby.sh
+      pre_install_query:
+        path: lib/query_ruby_env.yml
+      post_install_script:
+        path: lib/post_install_ruby.sh
+    - url: ${SOFTWARE_INSTALLER_URL}/other.deb
+      self_service: true
diff --git a/server/service/client.go b/server/service/client.go
index 73515d0211..09ab08e031 100644
--- a/server/service/client.go
+++ b/server/service/client.go
@@ -14,6 +14,7 @@ import (
 	"time"
 
 	"golang.org/x/text/unicode/norm"
+	"gopkg.in/yaml.v2"
 
 	"github.com/fleetdm/fleet/v4/pkg/optjson"
 	"github.com/fleetdm/fleet/v4/pkg/spec"
@@ -620,20 +621,50 @@ func (c *Client) ApplyGroup(
 						return nil, fmt.Errorf("reading pre-install query: %w", err)
 					}
 
-					group, err := spec.GroupFromBytes(rawSpec)
+					rawSpecExpanded, err := spec.ExpandEnvBytes(rawSpec)
 					if err != nil {
-						return nil, fmt.Errorf("Couldn't edit software (%s). Unable to parse pre-install query YAML file %s: %w", si.URL, queryFile, err)
+						return nil, fmt.Errorf("Couldn't exit software (%s). Unable to expand environment variable in YAML file %s: %w", si.URL, queryFile, err)
 					}
 
-					if len(group.Queries) > 1 {
-						return nil, fmt.Errorf("Couldn't edit software (%s). Pre-install query YAML file %s should have only one query.", si.URL, queryFile)
+					var top any
+
+					if err := yaml.Unmarshal(rawSpecExpanded, &top); err != nil {
+						return nil, fmt.Errorf("Couldn't exit software (%s). Unable to expand environment variable in YAML file %s: %w", si.URL, queryFile, err)
 					}
 
-					if len(group.Queries) == 0 {
-						return nil, fmt.Errorf("Couldn't edit software (%s). Pre-install query YAML file %s doesn't have a query defined.", si.URL, queryFile)
-					}
+					if _, ok := top.(map[any]any); ok {
+						// Old apply format
+						group, err := spec.GroupFromBytes(rawSpecExpanded)
+						if err != nil {
+							return nil, fmt.Errorf("Couldn't edit software (%s). Unable to parse pre-install apply format query YAML file %s: %w", si.URL, queryFile, err)
+						}
 
-					qc = group.Queries[0].Query
+						if len(group.Queries) > 1 {
+							return nil, fmt.Errorf("Couldn't edit software (%s). Pre-install query YAML file %s should have only one query.", si.URL, queryFile)
+						}
+
+						if len(group.Queries) == 0 {
+							return nil, fmt.Errorf("Couldn't edit software (%s). Pre-install query YAML file %s doesn't have a query defined.", si.URL, queryFile)
+						}
+
+						qc = group.Queries[0].Query
+					} else {
+						// Gitops format
+						var querySpecs []fleet.QuerySpec
+						if err := yaml.Unmarshal(rawSpecExpanded, &querySpecs); err != nil {
+							return nil, fmt.Errorf("Couldn't edit software (%s). Unable to parse pre-install query YAML file %s: %w", si.URL, queryFile, err)
+						}
+
+						if len(querySpecs) > 1 {
+							return nil, fmt.Errorf("Couldn't edit software (%s). Pre-install query YAML file %s should have only one query.", si.URL, queryFile)
+						}
+
+						if len(querySpecs) == 0 {
+							return nil, fmt.Errorf("Couldn't edit software (%s). Pre-install query YAML file %s doesn't have a query defined.", si.URL, queryFile)
+						}
+
+						qc = querySpecs[0].Query
+					}
 				}
 
 				var ic []byte

From 8fb64cdd0049aebecd84f84307011de1035173af Mon Sep 17 00:00:00 2001
From: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
Date: Fri, 2 Aug 2024 04:04:18 +0900
Subject: [PATCH 32/88] Banner update (#20925)

Updated the banner image on
https://github.com/fleetdm/fleet/tree/main/tools/fleetctl-npm

---------

Co-authored-by: Mike McNeil <mikermcneil@users.noreply.github.com>
---
 tools/fleetctl-npm/README.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tools/fleetctl-npm/README.md b/tools/fleetctl-npm/README.md
index ecb4499e93..8ac619853d 100644
--- a/tools/fleetctl-npm/README.md
+++ b/tools/fleetctl-npm/README.md
@@ -1,4 +1,4 @@
-[![banner-fleet-cloud-city](https://user-images.githubusercontent.com/618009/98254443-eaf21100-1f41-11eb-9e2c-63a0545601f3.jpg)](https://fleetdm.com)
+![fleet-banner](https://github.com/user-attachments/assets/fa90b8b2-cb3e-4277-a561-5719968c4bbd)
 
 Use the `fleetctl` CLI to interact with Fleet, the lightweight telemetry platform for servers and workstations. Have a look at the [Fleet README](https://github.com/fleetdm/fleet#readme) for more information.
 
@@ -8,4 +8,4 @@ From the command line, install `fleetctl` with `npm install -g fleetctl`.
 
 ## Usage
 
-See the [fleetctl documentation](https://fleetdm.com/docs/using-fleet/fleetctl-CLI) or `fleetctl --help` for usage instructions. 
\ No newline at end of file
+See the [fleetctl documentation](https://fleetdm.com/docs/using-fleet/fleetctl-cli) or `fleetctl --help` for usage instructions. 

From 3df700b1e6d9a4594a3eef07df6c4c031ab3a16b Mon Sep 17 00:00:00 2001
From: Luke Heath <luke@fleetdm.com>
Date: Thu, 1 Aug 2024 12:18:59 -0700
Subject: [PATCH 33/88] Update release script to branch off main for minor
 releases (#20956)

---
 tools/release/publish_release.sh | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/tools/release/publish_release.sh b/tools/release/publish_release.sh
index ea15c37499..6aec1605e7 100755
--- a/tools/release/publish_release.sh
+++ b/tools/release/publish_release.sh
@@ -628,6 +628,8 @@ start_ver_tag=fleet-$start_version
 
 if [[ "$minor" == "true" ]]; then
     echo "Minor release from $start_version to $next_ver"
+    # For scheduled minor releases, we want to branch off of main
+    start_ver_tag="main"
 else
     echo "Patch release from $start_version to $next_ver"
 fi
@@ -699,7 +701,7 @@ if [ "$cherry_pick_resolved" = "false" ]; then
         git checkout $start_ver_tag
         git pull origin $start_ver_tag
     else
-        echo "DRYRUN: Would have checked out starting tag $start_ver_tag"
+        echo "DRYRUN: Would have checked out starting at $start_ver_tag"
     fi
 
     local_exists=$(git branch | $GREP_CMD $target_branch)
@@ -730,7 +732,7 @@ if [ "$cherry_pick_resolved" = "false" ]; then
         prs_for_issue=$(gh api repos/fleetdm/fleet/issues/$issue/timeline --paginate | jq -r '.[]' | $GREP_CMD "fleetdm/fleet/" | $GREP_CMD -oP "pulls\/\K(?:\d+)")
         echo -n "https://github.com/fleetdm/fleet/issues/$issue"
         if [[ "$prs_for_issue" == "" ]]; then
-            echo -n " NO PR's found, please verify they are not missing in the issue, if no PR's were required for this ticket please reconsider adding it to this release."
+            echo -n " - No PRs found, please verify they are not missing in the issue."
         fi
         for val in $prs_for_issue; do
             echo -n " $val"

From d95a12bda647933a8cb4351670d2f861b756a5d1 Mon Sep 17 00:00:00 2001
From: Eric <eashaw@sailsjs.com>
Date: Thu, 1 Aug 2024 14:23:28 -0500
Subject: [PATCH 34/88] Website: update homepage and endpoint ops
 personalization (#20961)

Closes: #20736

Changes:
- Updated the category switcher on the (buying situation agnostic)
homepage to be MDM, IT engineering and Security engineering.
- Updated the personalization of the product category sections of the
homepage
- Updated the tagline for the endpoint ops page.
---
 website/assets/styles/pages/homepage.less |  8 ++--
 website/views/pages/endpoint-ops.ejs      |  2 +-
 website/views/pages/homepage.ejs          | 46 +++++++++++------------
 3 files changed, 28 insertions(+), 28 deletions(-)

diff --git a/website/assets/styles/pages/homepage.less b/website/assets/styles/pages/homepage.less
index 72c04a9868..b9f9f5b262 100644
--- a/website/assets/styles/pages/homepage.less
+++ b/website/assets/styles/pages/homepage.less
@@ -338,10 +338,10 @@
     .selected {
       font-weight: 700;
     }
-    .eo-selected {
+    .it-selected {
       transform: translateX(100%);
     }
-    .vm-selected {
+    .security-selected {
       transform: translateX(200%);
     }
   }
@@ -999,11 +999,11 @@
         height: 56px;
         width: 100%;
       }
-      .eo-selected {
+      .it-selected {
         width: 100%;
         transform: translateY(56px);
       }
-      .vm-selected {
+      .security-selected {
         width: 100%;
         transform: translateY(113px);
       }
diff --git a/website/views/pages/endpoint-ops.ejs b/website/views/pages/endpoint-ops.ejs
index dc107d725d..c9cfbb40fa 100644
--- a/website/views/pages/endpoint-ops.ejs
+++ b/website/views/pages/endpoint-ops.ejs
@@ -3,7 +3,7 @@
     <div purpose="page-content" class="mx-auto">
     <div purpose="hero">
       <div purpose="page-headline">
-        <h4>Endpoint operations</h4>
+        <h4>Endpoint operations <%= ['eo-security', 'vm'].includes(primaryBuyingSituation) ? 'for security' : ['eo-it', 'mdm'].includes(primaryBuyingSituation) ? 'for IT' : '' %></h4>
         <h1><%= primaryBuyingSituation==='eo-security'? 'Instrument your endpoints' : 'Understand your computers'%></h1>
       </div>
       <div purpose="hero-content" class="d-flex flex-md-row flex-column align-items-center justify-content-between">
diff --git a/website/views/pages/homepage.ejs b/website/views/pages/homepage.ejs
index d07b372d36..99d70bfbaa 100644
--- a/website/views/pages/homepage.ejs
+++ b/website/views/pages/homepage.ejs
@@ -27,9 +27,9 @@
     <% if(!primaryBuyingSituation){ %>
       <div purpose="category-switch" class="d-flex flex-md-row flex-column justify-content-center mx-auto">
         <div purpose="category-switch-option" :class="[selectedCategory === 'mdm' ? 'selected' : '']" @click="selectedCategory = 'mdm'">Device management</div>
-        <div purpose="category-switch-option" :class="[['eo-it', 'eo-security'].includes(selectedCategory) ? 'selected' : '']" @click="selectedCategory = 'endpoint-operations'">Endpoint ops</div>
-        <div purpose="category-switch-option" :class="[selectedCategory === 'vulnerability-management' ? 'selected' : '']" @click="selectedCategory = 'vm'">Vuln<span class="d-inline d-md-none d-lg-inline">erability</span> management</div>
-        <div purpose="category-tier-switch" :class="[['eo-it', 'eo-security', 'endpoint-operations'].includes(selectedCategory) ? 'eo-selected' : selectedCategory === 'vm' ? 'vm-selected' : selectedCategory === 'mdm' ? 'mdm-selected' : 'mdm-selected']"></div>
+        <div purpose="category-switch-option" :class="[selectedCategory === 'eo-it' ? 'selected' : '']" @click="selectedCategory = 'eo-it'">IT engineering</div>
+        <div purpose="category-switch-option" :class="[selectedCategory === 'eo-security' ? 'selected' : '']" @click="selectedCategory = 'eo-security'">Security engineering</div>
+        <div purpose="category-tier-switch" :class="[selectedCategory === 'eo-it' ? 'it-selected' : selectedCategory === 'eo-security' ? 'security-selected' : selectedCategory === 'mdm' ? 'mdm-selected' : 'mdm-selected']"></div>
       </div>
       <%/* Device management block */%>
       <div purpose="platform-block" class="d-flex flex-md-row flex-column justify-content-md-between mx-auto align-items-center" :class="[selectedCategory === 'mdm' ? 'visible' : '']" v-if="selectedCategory === 'mdm'">
@@ -49,38 +49,38 @@
         </div>
       </div>
 
-      <%/* Endpoint ops block */%>
-      <div purpose="platform-block" :class="[selectedCategory === 'endpoint-operations' ? 'visible' : '']"  class="d-flex flex-md-row flex-column justify-content-md-between mx-auto align-items-center" v-if="selectedCategory === 'endpoint-operations'">
+      <%/* IT engineering block */%>
+      <div purpose="platform-block" :class="[selectedCategory === 'eo-it' ? 'visible' : '']"  class="d-flex flex-md-row flex-column justify-content-md-between mx-auto align-items-center" v-if="selectedCategory === 'eo-it'">
         <div purpose="endpoint-ops-image" class="left">
           <img alt="Endpoint ops" src="/images/endpoint-operations-hero-image-380x380@2x.png">
         </div>
         <div purpose="category-text-block" class="d-flex flex-column">
-          <strong>Pulse check anything</strong>
-          <p>Use a live connection to every endpoint to simplify audit, compliance, and reporting from workstations to data centers.</p>
+          <strong>Automate anything</strong>
+          <p>Remotely run scripts and prompts to complete tasks on every kind of computer, including Linux.</p>
           <strong>Ship data to any platform</strong>
           <p>Ship logs to any platform like Splunk, Snowflake, or <a href="/docs/using-fleet/log-destinations">any streaming infrastructure</a> like AWS Kinesis and Apache Kafka.</p>
           <strong>Osquery on easy mode</strong>
           <p>Use "read-only" mode or enable remote scripting to automate anything on every operating system, including Linux.</p>
           <div>
-            <a purpose="category-button" class="text-nowrap btn btn-primary" href="/endpoint-ops">Start with endpoint ops</a>
+            <a purpose="category-button" class="text-nowrap btn btn-primary" href="/endpoint-ops?utm_content=eo-it">Start with IT engineering</a>
           </div>
         </div>
       </div>
 
-      <%/* Vulnerability management block */%>
-      <div purpose="platform-block" :class="[selectedCategory === 'vm' ? 'visible' : '']" class="d-flex flex-md-row flex-column justify-content-md-between mx-auto align-items-center" v-if="selectedCategory === 'vm'">
+      <%/* Security engineering block */%>
+      <div purpose="platform-block" :class="[selectedCategory === 'eo-security' ? 'visible' : '']" class="d-flex flex-md-row flex-column justify-content-md-between mx-auto align-items-center" v-if="selectedCategory === 'eo-security'">
         <div purpose="vuln-management-image" class="left">
           <img  alt="An orb being scanned for vulnerabilities" src="/images/vulnerability-management-hero-image-345x380@2x.png">
         </div>
         <div purpose="category-text-block" class="d-flex flex-column">
-          <strong>Report what matters</strong>
-          <p>Let's face it, most built-in graphs leave you wanting more. Report MTTR and any other custom metrics exactly the way you want to using fresh data from real computers.</p>
-          <strong>Deep context from the environment</strong>
-          <p>Fleet gives you data down to the chip level on every endpoint to help you make sense of which vulnerabilities to prioritize.</p>
-          <strong>Untangle your security stack</strong>
-          <p>Use open data and APIs to connect your vulnerability solution with osquery, the agent you might already have deployed.</p>
+          <strong>Osquery on easy mode</strong>
+          <p>Use "read-only" mode or enable remote scripting to automate anything on every operating system, including Linux.</p>
+          <strong>Pulse check anything</strong>
+          <p>Use a live connection to every endpoint to simplify audit, compliance, and reporting from workstations to data centers.</p>
+          <strong>Ship data to any platform</strong>
+          <p>Ship logs to any platform like Splunk, Snowflake, or <a href="/docs/using-fleet/log-destinations">any streaming infrastructure</a> like AWS Kinesis and Apache Kafka.</p>
           <div>
-            <a purpose="category-button" class="text-nowrap btn btn-primary" href="/vulnerability-management">Start with vuln management</a>
+            <a purpose="category-button" class="text-nowrap btn btn-primary" href="/endpoint-ops?utm_content=eo-security">Start with security engineering</a>
           </div>
         </div>
       </div>
@@ -104,11 +104,11 @@
          <% } %>
          <div purpose="platform-block" class="d-flex flex-md-row flex-column-reverse justify-content-md-between mx-auto align-items-center">
            <div purpose="category-text-block" class="d-flex flex-column personalized">
-             <h4>Endpoint ops</h4>
+             <h4><%= primaryBuyingSituation==='eo-security'? 'Security engineering' : 'IT engineering'%></h4>
              <h2><%= primaryBuyingSituation==='eo-security'? 'Instrument your endpoints' : 'Understand your computers'%></h2>
              <p>A <%= primaryBuyingSituation==='eo-security'? 'lightweight' : 'quick-fast' %> way to gather <%= primaryBuyingSituation==='vm'? 'patch level and custom reports across all your computing devices, even in OT and production environments' : primaryBuyingSituation==='eo-security'? 'deep context and custom telemetry across all your endpoints, even servers' : primaryBuyingSituation==='mdm'||primaryBuyingSituation==='eo-it'? 'compliance and inventory data across all your devices' : 'device data across all your computers' %>. Pulse check or automate anything on any platform.</p>
              <div>
-               <animated-arrow-button href="/endpoint-ops">Start with endpoint ops</animated-arrow-button>
+               <animated-arrow-button href="/endpoint-ops<%= primaryBuyingSituation==='eo-security' ? '?utm_content=eo-security' : '?utm_content=eo-it'%>">Start with <%= primaryBuyingSituation==='eo-security' ? 'security engineering' : 'IT engineering'%></animated-arrow-button>
              </div>
            </div>
            <div purpose="endpoint-ops-image" class="right">
@@ -171,11 +171,11 @@
              <img alt="Endpoint ops" src="/images/endpoint-operations-hero-image-380x380@2x.png">
            </div>
            <div purpose="category-text-block" class="d-flex flex-column personalized">
-             <h4>Endpoint ops</h4>
-             <h2><%= primaryBuyingSituation==='eo-security'? 'Instrument your endpoints' : 'Understand your computers'%></h2>
-             <p>A <%= primaryBuyingSituation==='eo-security'? 'lightweight' : 'quick-fast' %> way to gather <%= primaryBuyingSituation==='vm'? 'patch level and custom reports across all your computing devices, even in OT and production environments' : primaryBuyingSituation==='eo-security'? 'deep context and custom telemetry across all your endpoints, even servers' : primaryBuyingSituation==='mdm'||primaryBuyingSituation==='eo-it'? 'compliance and inventory data across all your devices' : 'device data across all your computers' %>. Pulse check or automate anything on any platform.</p>
+             <h4><%= primaryBuyingSituation==='mdm' ? 'IT engineering' : 'Security engineering'%></h4>
+             <h2><%= primaryBuyingSituation==='vm'? 'Instrument your endpoints' : 'Understand your computers'%></h2>
+             <p>A <%= primaryBuyingSituation==='vm'? 'lightweight' : 'quick-fast' %> way to gather <%= primaryBuyingSituation==='vm'? 'patch level and custom reports across all your computing devices, even in OT and production environments' : primaryBuyingSituation==='vm'? 'deep context and custom telemetry across all your endpoints, even servers' : primaryBuyingSituation==='mdm'||primaryBuyingSituation==='eo-it'? 'compliance and inventory data across all your devices' : 'device data across all your computers' %>. Pulse check or automate anything on any platform.</p>
              <div>
-               <animated-arrow-button href="/endpoint-ops">Start with endpoint ops</animated-arrow-button>
+               <animated-arrow-button href="/endpoint-ops<%= primaryBuyingSituation==='mdm' ? '?utm_content=eo-it' : '?utm_content=eo-security'%>">Start with <%= primaryBuyingSituation==='mdm' ? 'IT engineering' : 'security engineering'%></animated-arrow-button>
              </div>
            </div>
          </div>

From bf3d849bd01434c090b2bc9ed973ffb2c45ff36b Mon Sep 17 00:00:00 2001
From: Dante Catalfamo <43040593+dantecatalfamo@users.noreply.github.com>
Date: Thu, 1 Aug 2024 15:41:37 -0400
Subject: [PATCH 35/88] Fix Deleted Host Software Installs Details (#20820)

#20271

This fix requires an accompanying front end fix to pass the
`display_name` from the activity feed to the modal when displaying the
install results.
---
 changes/20271-deleted-host-software-installs  |  1 +
 ee/server/service/software_installers.go      | 34 +++++++++++++++--
 server/datastore/mysql/hosts.go               |  5 ++-
 server/datastore/mysql/hosts_test.go          |  9 +++++
 ...20947_AddSoftwareInstallResultDeletedAt.go | 38 +++++++++++++++++++
 server/datastore/mysql/schema.sql             |  5 ++-
 server/datastore/mysql/software_installers.go |  7 ++--
 .../mysql/software_installers_test.go         |  1 -
 server/fleet/software_installer.go            |  8 ++--
 server/service/integration_enterprise_test.go | 16 ++++++++
 10 files changed, 106 insertions(+), 18 deletions(-)
 create mode 100644 changes/20271-deleted-host-software-installs
 create mode 100644 server/datastore/mysql/migrations/tables/20240729120947_AddSoftwareInstallResultDeletedAt.go

diff --git a/changes/20271-deleted-host-software-installs b/changes/20271-deleted-host-software-installs
new file mode 100644
index 0000000000..674b8a823f
--- /dev/null
+++ b/changes/20271-deleted-host-software-installs
@@ -0,0 +1 @@
+- Fig bug where software install results could not be retrieved for deleted hosts in the activity feed
diff --git a/ee/server/service/software_installers.go b/ee/server/service/software_installers.go
index b17eee2b73..8754879992 100644
--- a/ee/server/service/software_installers.go
+++ b/ee/server/service/software_installers.go
@@ -463,12 +463,38 @@ func (svc *Service) GetSoftwareInstallResults(ctx context.Context, resultUUID st
 
 	res, err := svc.ds.GetSoftwareInstallResults(ctx, resultUUID)
 	if err != nil {
-		return nil, err
+		if fleet.IsNotFound(err) {
+			if err := svc.authz.Authorize(ctx, &fleet.HostSoftwareInstallerResultAuthz{}, fleet.ActionRead); err != nil {
+				return nil, err
+			}
+		}
+		svc.authz.SkipAuthorization(ctx)
+		return nil, ctxerr.Wrap(ctx, err, "get software install result")
 	}
 
-	// Team specific auth check
-	if err := svc.authz.Authorize(ctx, &fleet.HostSoftwareInstallerResultAuthz{HostTeamID: res.HostTeamID}, fleet.ActionRead); err != nil {
-		return nil, err
+	if res.HostDeletedAt == nil {
+		// host is not deleted, get it and authorize for the host's team
+		host, err := svc.ds.HostLite(ctx, res.HostID)
+		// if error is because the host does not exist, check first if the user
+		// had access to run a script (to prevent leaking valid host ids).
+		if err != nil {
+			if fleet.IsNotFound(err) {
+				if err := svc.authz.Authorize(ctx, &fleet.HostSoftwareInstallerResultAuthz{}, fleet.ActionRead); err != nil {
+					return nil, err
+				}
+			}
+			svc.authz.SkipAuthorization(ctx)
+			return nil, ctxerr.Wrap(ctx, err, "get host lite")
+		}
+		// Team specific auth check
+		if err := svc.authz.Authorize(ctx, &fleet.HostSoftwareInstallerResultAuthz{HostTeamID: host.TeamID}, fleet.ActionRead); err != nil {
+			return nil, err
+		}
+	} else {
+		// host was deleted, authorize for no-team as a fallback
+		if err := svc.authz.Authorize(ctx, &fleet.HostSoftwareInstallerResultAuthz{}, fleet.ActionRead); err != nil {
+			return nil, err
+		}
 	}
 
 	res.EnhanceOutputDetails()
diff --git a/server/datastore/mysql/hosts.go b/server/datastore/mysql/hosts.go
index 47125e16c8..fb4b88f077 100644
--- a/server/datastore/mysql/hosts.go
+++ b/server/datastore/mysql/hosts.go
@@ -541,7 +541,8 @@ var additionalHostRefsByUUID = map[string]string{
 // the rows are not deleted when the host is deleted, only a soft delete is
 // performed by setting a timestamp column to the current time.
 var additionalHostRefsSoftDelete = map[string]string{
-	"host_script_results": "host_deleted_at",
+	"host_script_results":    "host_deleted_at",
+	"host_software_installs": "host_deleted_at",
 }
 
 func (ds *Datastore) DeleteHost(ctx context.Context, hid uint) error {
@@ -4943,7 +4944,7 @@ func (ds *Datastore) ListUpcomingHostMaintenanceWindows(ctx context.Context, hid
 		WHERE
 			hce.host_id = ?
 			AND
-			ce.start_time > NOW()	
+			ce.start_time > NOW()
 		ORDER BY ce.start_time
 	`
 
diff --git a/server/datastore/mysql/hosts_test.go b/server/datastore/mysql/hosts_test.go
index ed703b0f54..379adf166d 100644
--- a/server/datastore/mysql/hosts_test.go
+++ b/server/datastore/mysql/hosts_test.go
@@ -6743,6 +6743,15 @@ func testHostsDeleteHosts(t *testing.T, ds *Datastore) {
 			`, host.ID, calendarEventID)
 	require.NoError(t, err)
 
+	softwareInstaller, err := ds.MatchOrCreateSoftwareInstaller(context.Background(), &fleet.UploadSoftwareInstallerPayload{
+		InstallScript:   "",
+		PreInstallQuery: "",
+		Title:           "ChocolateRain",
+	})
+	require.NoError(t, err)
+	_, err = ds.InsertSoftwareInstallRequest(context.Background(), host.ID, softwareInstaller, false)
+	require.NoError(t, err)
+
 	// Check there's an entry for the host in all the associated tables.
 	for _, hostRef := range hostRefs {
 		var ok bool
diff --git a/server/datastore/mysql/migrations/tables/20240729120947_AddSoftwareInstallResultDeletedAt.go b/server/datastore/mysql/migrations/tables/20240729120947_AddSoftwareInstallResultDeletedAt.go
new file mode 100644
index 0000000000..bd4219364d
--- /dev/null
+++ b/server/datastore/mysql/migrations/tables/20240729120947_AddSoftwareInstallResultDeletedAt.go
@@ -0,0 +1,38 @@
+package tables
+
+import (
+	"database/sql"
+	"fmt"
+)
+
+func init() {
+	MigrationClient.AddMigration(Up_20240729120947, Down_20240729120947)
+}
+
+func Up_20240729120947(tx *sql.Tx) error {
+	_, err := tx.Exec("ALTER TABLE host_software_installs ADD COLUMN host_deleted_at timestamp NULL DEFAULT NULL")
+	if err != nil {
+		return fmt.Errorf("failed to create host_deleted_at column on host_software_installs table: %w", err)
+	}
+	_, err = tx.Exec(`
+UPDATE
+    host_software_installs i
+LEFT JOIN
+    hosts h
+    ON i.host_id = h.id
+SET
+    i.host_deleted_at = NOW()
+WHERE
+    i.host_deleted_at IS NULL
+AND
+    h.id IS NULL
+`)
+	if err != nil {
+		return fmt.Errorf("failed to update host_software_installs.host_deleted_at for hosts that no longer exist: %w", err)
+	}
+	return nil
+}
+
+func Down_20240729120947(tx *sql.Tx) error {
+	return nil
+}
diff --git a/server/datastore/mysql/schema.sql b/server/datastore/mysql/schema.sql
index 9ed81803bd..73e02ac322 100644
--- a/server/datastore/mysql/schema.sql
+++ b/server/datastore/mysql/schema.sql
@@ -519,6 +519,7 @@ CREATE TABLE `host_software_installs` (
   `created_at` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP,
   `updated_at` timestamp NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP,
   `self_service` tinyint(1) NOT NULL DEFAULT '0',
+  `host_deleted_at` timestamp NULL DEFAULT NULL,
   PRIMARY KEY (`id`),
   UNIQUE KEY `idx_host_software_installs_execution_id` (`execution_id`),
   KEY `fk_host_software_installs_installer_id` (`software_installer_id`),
@@ -969,9 +970,9 @@ CREATE TABLE `migration_status_tables` (
   `tstamp` timestamp NULL DEFAULT CURRENT_TIMESTAMP,
   PRIMARY KEY (`id`),
   UNIQUE KEY `id` (`id`)
-) /*!50100 TABLESPACE `innodb_system` */ ENGINE=InnoDB AUTO_INCREMENT=293 DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+) /*!50100 TABLESPACE `innodb_system` */ ENGINE=InnoDB AUTO_INCREMENT=294 DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
 /*!40101 SET character_set_client = @saved_cs_client */;
-INSERT INTO `migration_status_tables` VALUES (1,0,1,'2020-01-01 01:01:01'),(2,20161118193812,1,'2020-01-01 01:01:01'),(3,20161118211713,1,'2020-01-01 01:01:01'),(4,20161118212436,1,'2020-01-01 01:01:01'),(5,20161118212515,1,'2020-01-01 01:01:01'),(6,20161118212528,1,'2020-01-01 01:01:01'),(7,20161118212538,1,'2020-01-01 01:01:01'),(8,20161118212549,1,'2020-01-01 01:01:01'),(9,20161118212557,1,'2020-01-01 01:01:01'),(10,20161118212604,1,'2020-01-01 01:01:01'),(11,20161118212613,1,'2020-01-01 01:01:01'),(12,20161118212621,1,'2020-01-01 01:01:01'),(13,20161118212630,1,'2020-01-01 01:01:01'),(14,20161118212641,1,'2020-01-01 01:01:01'),(15,20161118212649,1,'2020-01-01 01:01:01'),(16,20161118212656,1,'2020-01-01 01:01:01'),(17,20161118212758,1,'2020-01-01 01:01:01'),(18,20161128234849,1,'2020-01-01 01:01:01'),(19,20161230162221,1,'2020-01-01 01:01:01'),(20,20170104113816,1,'2020-01-01 01:01:01'),(21,20170105151732,1,'2020-01-01 01:01:01'),(22,20170108191242,1,'2020-01-01 01:01:01'),(23,20170109094020,1,'2020-01-01 01:01:01'),(24,20170109130438,1,'2020-01-01 01:01:01'),(25,20170110202752,1,'2020-01-01 01:01:01'),(26,20170111133013,1,'2020-01-01 01:01:01'),(27,20170117025759,1,'2020-01-01 01:01:01'),(28,20170118191001,1,'2020-01-01 01:01:01'),(29,20170119234632,1,'2020-01-01 01:01:01'),(30,20170124230432,1,'2020-01-01 01:01:01'),(31,20170127014618,1,'2020-01-01 01:01:01'),(32,20170131232841,1,'2020-01-01 01:01:01'),(33,20170223094154,1,'2020-01-01 01:01:01'),(34,20170306075207,1,'2020-01-01 01:01:01'),(35,20170309100733,1,'2020-01-01 01:01:01'),(36,20170331111922,1,'2020-01-01 01:01:01'),(37,20170502143928,1,'2020-01-01 01:01:01'),(38,20170504130602,1,'2020-01-01 01:01:01'),(39,20170509132100,1,'2020-01-01 01:01:01'),(40,20170519105647,1,'2020-01-01 01:01:01'),(41,20170519105648,1,'2020-01-01 01:01:01'),(42,20170831234300,1,'2020-01-01 01:01:01'),(43,20170831234301,1,'2020-01-01 01:01:01'),(44,20170831234303,1,'2020-01-01 01:01:01'),(45,20171116163618,1,'2020-01-01 01:01:01'),(46,20171219164727,1,'2020-01-01 01:01:01'),(47,20180620164811,1,'2020-01-01 01:01:01'),(48,20180620175054,1,'2020-01-01 01:01:01'),(49,20180620175055,1,'2020-01-01 01:01:01'),(50,20191010101639,1,'2020-01-01 01:01:01'),(51,20191010155147,1,'2020-01-01 01:01:01'),(52,20191220130734,1,'2020-01-01 01:01:01'),(53,20200311140000,1,'2020-01-01 01:01:01'),(54,20200405120000,1,'2020-01-01 01:01:01'),(55,20200407120000,1,'2020-01-01 01:01:01'),(56,20200420120000,1,'2020-01-01 01:01:01'),(57,20200504120000,1,'2020-01-01 01:01:01'),(58,20200512120000,1,'2020-01-01 01:01:01'),(59,20200707120000,1,'2020-01-01 01:01:01'),(60,20201011162341,1,'2020-01-01 01:01:01'),(61,20201021104586,1,'2020-01-01 01:01:01'),(62,20201102112520,1,'2020-01-01 01:01:01'),(63,20201208121729,1,'2020-01-01 01:01:01'),(64,20201215091637,1,'2020-01-01 01:01:01'),(65,20210119174155,1,'2020-01-01 01:01:01'),(66,20210326182902,1,'2020-01-01 01:01:01'),(67,20210421112652,1,'2020-01-01 01:01:01'),(68,20210506095025,1,'2020-01-01 01:01:01'),(69,20210513115729,1,'2020-01-01 01:01:01'),(70,20210526113559,1,'2020-01-01 01:01:01'),(71,20210601000001,1,'2020-01-01 01:01:01'),(72,20210601000002,1,'2020-01-01 01:01:01'),(73,20210601000003,1,'2020-01-01 01:01:01'),(74,20210601000004,1,'2020-01-01 01:01:01'),(75,20210601000005,1,'2020-01-01 01:01:01'),(76,20210601000006,1,'2020-01-01 01:01:01'),(77,20210601000007,1,'2020-01-01 01:01:01'),(78,20210601000008,1,'2020-01-01 01:01:01'),(79,20210606151329,1,'2020-01-01 01:01:01'),(80,20210616163757,1,'2020-01-01 01:01:01'),(81,20210617174723,1,'2020-01-01 01:01:01'),(82,20210622160235,1,'2020-01-01 01:01:01'),(83,20210623100031,1,'2020-01-01 01:01:01'),(84,20210623133615,1,'2020-01-01 01:01:01'),(85,20210708143152,1,'2020-01-01 01:01:01'),(86,20210709124443,1,'2020-01-01 01:01:01'),(87,20210712155608,1,'2020-01-01 01:01:01'),(88,20210714102108,1,'2020-01-01 01:01:01'),(89,20210719153709,1,'2020-01-01 01:01:01'),(90,20210721171531,1,'2020-01-01 01:01:01'),(91,20210723135713,1,'2020-01-01 01:01:01'),(92,20210802135933,1,'2020-01-01 01:01:01'),(93,20210806112844,1,'2020-01-01 01:01:01'),(94,20210810095603,1,'2020-01-01 01:01:01'),(95,20210811150223,1,'2020-01-01 01:01:01'),(96,20210818151827,1,'2020-01-01 01:01:01'),(97,20210818151828,1,'2020-01-01 01:01:01'),(98,20210818182258,1,'2020-01-01 01:01:01'),(99,20210819131107,1,'2020-01-01 01:01:01'),(100,20210819143446,1,'2020-01-01 01:01:01'),(101,20210903132338,1,'2020-01-01 01:01:01'),(102,20210915144307,1,'2020-01-01 01:01:01'),(103,20210920155130,1,'2020-01-01 01:01:01'),(104,20210927143115,1,'2020-01-01 01:01:01'),(105,20210927143116,1,'2020-01-01 01:01:01'),(106,20211013133706,1,'2020-01-01 01:01:01'),(107,20211013133707,1,'2020-01-01 01:01:01'),(108,20211102135149,1,'2020-01-01 01:01:01'),(109,20211109121546,1,'2020-01-01 01:01:01'),(110,20211110163320,1,'2020-01-01 01:01:01'),(111,20211116184029,1,'2020-01-01 01:01:01'),(112,20211116184030,1,'2020-01-01 01:01:01'),(113,20211202092042,1,'2020-01-01 01:01:01'),(114,20211202181033,1,'2020-01-01 01:01:01'),(115,20211207161856,1,'2020-01-01 01:01:01'),(116,20211216131203,1,'2020-01-01 01:01:01'),(117,20211221110132,1,'2020-01-01 01:01:01'),(118,20220107155700,1,'2020-01-01 01:01:01'),(119,20220125105650,1,'2020-01-01 01:01:01'),(120,20220201084510,1,'2020-01-01 01:01:01'),(121,20220208144830,1,'2020-01-01 01:01:01'),(122,20220208144831,1,'2020-01-01 01:01:01'),(123,20220215152203,1,'2020-01-01 01:01:01'),(124,20220223113157,1,'2020-01-01 01:01:01'),(125,20220307104655,1,'2020-01-01 01:01:01'),(126,20220309133956,1,'2020-01-01 01:01:01'),(127,20220316155700,1,'2020-01-01 01:01:01'),(128,20220323152301,1,'2020-01-01 01:01:01'),(129,20220330100659,1,'2020-01-01 01:01:01'),(130,20220404091216,1,'2020-01-01 01:01:01'),(131,20220419140750,1,'2020-01-01 01:01:01'),(132,20220428140039,1,'2020-01-01 01:01:01'),(133,20220503134048,1,'2020-01-01 01:01:01'),(134,20220524102918,1,'2020-01-01 01:01:01'),(135,20220526123327,1,'2020-01-01 01:01:01'),(136,20220526123328,1,'2020-01-01 01:01:01'),(137,20220526123329,1,'2020-01-01 01:01:01'),(138,20220608113128,1,'2020-01-01 01:01:01'),(139,20220627104817,1,'2020-01-01 01:01:01'),(140,20220704101843,1,'2020-01-01 01:01:01'),(141,20220708095046,1,'2020-01-01 01:01:01'),(142,20220713091130,1,'2020-01-01 01:01:01'),(143,20220802135510,1,'2020-01-01 01:01:01'),(144,20220818101352,1,'2020-01-01 01:01:01'),(145,20220822161445,1,'2020-01-01 01:01:01'),(146,20220831100036,1,'2020-01-01 01:01:01'),(147,20220831100151,1,'2020-01-01 01:01:01'),(148,20220908181826,1,'2020-01-01 01:01:01'),(149,20220914154915,1,'2020-01-01 01:01:01'),(150,20220915165115,1,'2020-01-01 01:01:01'),(151,20220915165116,1,'2020-01-01 01:01:01'),(152,20220928100158,1,'2020-01-01 01:01:01'),(153,20221014084130,1,'2020-01-01 01:01:01'),(154,20221027085019,1,'2020-01-01 01:01:01'),(155,20221101103952,1,'2020-01-01 01:01:01'),(156,20221104144401,1,'2020-01-01 01:01:01'),(157,20221109100749,1,'2020-01-01 01:01:01'),(158,20221115104546,1,'2020-01-01 01:01:01'),(159,20221130114928,1,'2020-01-01 01:01:01'),(160,20221205112142,1,'2020-01-01 01:01:01'),(161,20221216115820,1,'2020-01-01 01:01:01'),(162,20221220195934,1,'2020-01-01 01:01:01'),(163,20221220195935,1,'2020-01-01 01:01:01'),(164,20221223174807,1,'2020-01-01 01:01:01'),(165,20221227163855,1,'2020-01-01 01:01:01'),(166,20221227163856,1,'2020-01-01 01:01:01'),(167,20230202224725,1,'2020-01-01 01:01:01'),(168,20230206163608,1,'2020-01-01 01:01:01'),(169,20230214131519,1,'2020-01-01 01:01:01'),(170,20230303135738,1,'2020-01-01 01:01:01'),(171,20230313135301,1,'2020-01-01 01:01:01'),(172,20230313141819,1,'2020-01-01 01:01:01'),(173,20230315104937,1,'2020-01-01 01:01:01'),(174,20230317173844,1,'2020-01-01 01:01:01'),(175,20230320133602,1,'2020-01-01 01:01:01'),(176,20230330100011,1,'2020-01-01 01:01:01'),(177,20230330134823,1,'2020-01-01 01:01:01'),(178,20230405232025,1,'2020-01-01 01:01:01'),(179,20230408084104,1,'2020-01-01 01:01:01'),(180,20230411102858,1,'2020-01-01 01:01:01'),(181,20230421155932,1,'2020-01-01 01:01:01'),(182,20230425082126,1,'2020-01-01 01:01:01'),(183,20230425105727,1,'2020-01-01 01:01:01'),(184,20230501154913,1,'2020-01-01 01:01:01'),(185,20230503101418,1,'2020-01-01 01:01:01'),(186,20230515144206,1,'2020-01-01 01:01:01'),(187,20230517140952,1,'2020-01-01 01:01:01'),(188,20230517152807,1,'2020-01-01 01:01:01'),(189,20230518114155,1,'2020-01-01 01:01:01'),(190,20230520153236,1,'2020-01-01 01:01:01'),(191,20230525151159,1,'2020-01-01 01:01:01'),(192,20230530122103,1,'2020-01-01 01:01:01'),(193,20230602111827,1,'2020-01-01 01:01:01'),(194,20230608103123,1,'2020-01-01 01:01:01'),(195,20230629140529,1,'2020-01-01 01:01:01'),(196,20230629140530,1,'2020-01-01 01:01:01'),(197,20230711144622,1,'2020-01-01 01:01:01'),(198,20230721135421,1,'2020-01-01 01:01:01'),(199,20230721161508,1,'2020-01-01 01:01:01'),(200,20230726115701,1,'2020-01-01 01:01:01'),(201,20230807100822,1,'2020-01-01 01:01:01'),(202,20230814150442,1,'2020-01-01 01:01:01'),(203,20230823122728,1,'2020-01-01 01:01:01'),(204,20230906152143,1,'2020-01-01 01:01:01'),(205,20230911163618,1,'2020-01-01 01:01:01'),(206,20230912101759,1,'2020-01-01 01:01:01'),(207,20230915101341,1,'2020-01-01 01:01:01'),(208,20230918132351,1,'2020-01-01 01:01:01'),(209,20231004144339,1,'2020-01-01 01:01:01'),(210,20231009094541,1,'2020-01-01 01:01:01'),(211,20231009094542,1,'2020-01-01 01:01:01'),(212,20231009094543,1,'2020-01-01 01:01:01'),(213,20231009094544,1,'2020-01-01 01:01:01'),(214,20231016091915,1,'2020-01-01 01:01:01'),(215,20231024174135,1,'2020-01-01 01:01:01'),(216,20231025120016,1,'2020-01-01 01:01:01'),(217,20231025160156,1,'2020-01-01 01:01:01'),(218,20231031165350,1,'2020-01-01 01:01:01'),(219,20231106144110,1,'2020-01-01 01:01:01'),(220,20231107130934,1,'2020-01-01 01:01:01'),(221,20231109115838,1,'2020-01-01 01:01:01'),(222,20231121054530,1,'2020-01-01 01:01:01'),(223,20231122101320,1,'2020-01-01 01:01:01'),(224,20231130132828,1,'2020-01-01 01:01:01'),(225,20231130132931,1,'2020-01-01 01:01:01'),(226,20231204155427,1,'2020-01-01 01:01:01'),(227,20231206142340,1,'2020-01-01 01:01:01'),(228,20231207102320,1,'2020-01-01 01:01:01'),(229,20231207102321,1,'2020-01-01 01:01:01'),(230,20231207133731,1,'2020-01-01 01:01:01'),(231,20231212094238,1,'2020-01-01 01:01:01'),(232,20231212095734,1,'2020-01-01 01:01:01'),(233,20231212161121,1,'2020-01-01 01:01:01'),(234,20231215122713,1,'2020-01-01 01:01:01'),(235,20231219143041,1,'2020-01-01 01:01:01'),(236,20231224070653,1,'2020-01-01 01:01:01'),(237,20240110134315,1,'2020-01-01 01:01:01'),(238,20240119091637,1,'2020-01-01 01:01:01'),(239,20240126020642,1,'2020-01-01 01:01:01'),(240,20240126020643,1,'2020-01-01 01:01:01'),(241,20240129162819,1,'2020-01-01 01:01:01'),(242,20240130115133,1,'2020-01-01 01:01:01'),(243,20240131083822,1,'2020-01-01 01:01:01'),(244,20240205095928,1,'2020-01-01 01:01:01'),(245,20240205121956,1,'2020-01-01 01:01:01'),(246,20240209110212,1,'2020-01-01 01:01:01'),(247,20240212111533,1,'2020-01-01 01:01:01'),(248,20240221112844,1,'2020-01-01 01:01:01'),(249,20240222073518,1,'2020-01-01 01:01:01'),(250,20240222135115,1,'2020-01-01 01:01:01'),(251,20240226082255,1,'2020-01-01 01:01:01'),(252,20240228082706,1,'2020-01-01 01:01:01'),(253,20240301173035,1,'2020-01-01 01:01:01'),(254,20240302111134,1,'2020-01-01 01:01:01'),(255,20240312103753,1,'2020-01-01 01:01:01'),(256,20240313143416,1,'2020-01-01 01:01:01'),(257,20240314085226,1,'2020-01-01 01:01:01'),(258,20240314151747,1,'2020-01-01 01:01:01'),(259,20240320145650,1,'2020-01-01 01:01:01'),(260,20240327115530,1,'2020-01-01 01:01:01'),(261,20240327115617,1,'2020-01-01 01:01:01'),(262,20240408085837,1,'2020-01-01 01:01:01'),(263,20240415104633,1,'2020-01-01 01:01:01'),(264,20240430111727,1,'2020-01-01 01:01:01'),(265,20240515200020,1,'2020-01-01 01:01:01'),(266,20240521143023,1,'2020-01-01 01:01:01'),(267,20240521143024,1,'2020-01-01 01:01:01'),(268,20240601174138,1,'2020-01-01 01:01:01'),(269,20240607133721,1,'2020-01-01 01:01:01'),(270,20240612150059,1,'2020-01-01 01:01:01'),(271,20240613162201,1,'2020-01-01 01:01:01'),(272,20240613172616,1,'2020-01-01 01:01:01'),(273,20240618142419,1,'2020-01-01 01:01:01'),(274,20240625093543,1,'2020-01-01 01:01:01'),(275,20240626195531,1,'2020-01-01 01:01:01'),(276,20240702123921,1,'2020-01-01 01:01:01'),(277,20240703154849,1,'2020-01-01 01:01:01'),(278,20240707134035,1,'2020-01-01 01:01:01'),(279,20240707134036,1,'2020-01-01 01:01:01'),(280,20240709124958,1,'2020-01-01 01:01:01'),(281,20240709132642,1,'2020-01-01 01:01:01'),(282,20240709183940,1,'2020-01-01 01:01:01'),(283,20240710155623,1,'2020-01-01 01:01:01'),(284,20240723102712,1,'2020-01-01 01:01:01'),(285,20240725152735,1,'2020-01-01 01:01:01'),(286,20240725182118,1,'2020-01-01 01:01:01'),(287,20240726100517,1,'2020-01-01 01:01:01'),(288,20240730171504,1,'2020-01-01 01:01:01'),(289,20240730174056,1,'2020-01-01 01:01:01'),(290,20240730215453,1,'2020-01-01 01:01:01'),(291,20240730374423,1,'2020-01-01 01:01:01'),(292,20240801115359,1,'2020-01-01 01:01:01');
+INSERT INTO `migration_status_tables` VALUES (1,0,1,'2020-01-01 01:01:01'),(2,20161118193812,1,'2020-01-01 01:01:01'),(3,20161118211713,1,'2020-01-01 01:01:01'),(4,20161118212436,1,'2020-01-01 01:01:01'),(5,20161118212515,1,'2020-01-01 01:01:01'),(6,20161118212528,1,'2020-01-01 01:01:01'),(7,20161118212538,1,'2020-01-01 01:01:01'),(8,20161118212549,1,'2020-01-01 01:01:01'),(9,20161118212557,1,'2020-01-01 01:01:01'),(10,20161118212604,1,'2020-01-01 01:01:01'),(11,20161118212613,1,'2020-01-01 01:01:01'),(12,20161118212621,1,'2020-01-01 01:01:01'),(13,20161118212630,1,'2020-01-01 01:01:01'),(14,20161118212641,1,'2020-01-01 01:01:01'),(15,20161118212649,1,'2020-01-01 01:01:01'),(16,20161118212656,1,'2020-01-01 01:01:01'),(17,20161118212758,1,'2020-01-01 01:01:01'),(18,20161128234849,1,'2020-01-01 01:01:01'),(19,20161230162221,1,'2020-01-01 01:01:01'),(20,20170104113816,1,'2020-01-01 01:01:01'),(21,20170105151732,1,'2020-01-01 01:01:01'),(22,20170108191242,1,'2020-01-01 01:01:01'),(23,20170109094020,1,'2020-01-01 01:01:01'),(24,20170109130438,1,'2020-01-01 01:01:01'),(25,20170110202752,1,'2020-01-01 01:01:01'),(26,20170111133013,1,'2020-01-01 01:01:01'),(27,20170117025759,1,'2020-01-01 01:01:01'),(28,20170118191001,1,'2020-01-01 01:01:01'),(29,20170119234632,1,'2020-01-01 01:01:01'),(30,20170124230432,1,'2020-01-01 01:01:01'),(31,20170127014618,1,'2020-01-01 01:01:01'),(32,20170131232841,1,'2020-01-01 01:01:01'),(33,20170223094154,1,'2020-01-01 01:01:01'),(34,20170306075207,1,'2020-01-01 01:01:01'),(35,20170309100733,1,'2020-01-01 01:01:01'),(36,20170331111922,1,'2020-01-01 01:01:01'),(37,20170502143928,1,'2020-01-01 01:01:01'),(38,20170504130602,1,'2020-01-01 01:01:01'),(39,20170509132100,1,'2020-01-01 01:01:01'),(40,20170519105647,1,'2020-01-01 01:01:01'),(41,20170519105648,1,'2020-01-01 01:01:01'),(42,20170831234300,1,'2020-01-01 01:01:01'),(43,20170831234301,1,'2020-01-01 01:01:01'),(44,20170831234303,1,'2020-01-01 01:01:01'),(45,20171116163618,1,'2020-01-01 01:01:01'),(46,20171219164727,1,'2020-01-01 01:01:01'),(47,20180620164811,1,'2020-01-01 01:01:01'),(48,20180620175054,1,'2020-01-01 01:01:01'),(49,20180620175055,1,'2020-01-01 01:01:01'),(50,20191010101639,1,'2020-01-01 01:01:01'),(51,20191010155147,1,'2020-01-01 01:01:01'),(52,20191220130734,1,'2020-01-01 01:01:01'),(53,20200311140000,1,'2020-01-01 01:01:01'),(54,20200405120000,1,'2020-01-01 01:01:01'),(55,20200407120000,1,'2020-01-01 01:01:01'),(56,20200420120000,1,'2020-01-01 01:01:01'),(57,20200504120000,1,'2020-01-01 01:01:01'),(58,20200512120000,1,'2020-01-01 01:01:01'),(59,20200707120000,1,'2020-01-01 01:01:01'),(60,20201011162341,1,'2020-01-01 01:01:01'),(61,20201021104586,1,'2020-01-01 01:01:01'),(62,20201102112520,1,'2020-01-01 01:01:01'),(63,20201208121729,1,'2020-01-01 01:01:01'),(64,20201215091637,1,'2020-01-01 01:01:01'),(65,20210119174155,1,'2020-01-01 01:01:01'),(66,20210326182902,1,'2020-01-01 01:01:01'),(67,20210421112652,1,'2020-01-01 01:01:01'),(68,20210506095025,1,'2020-01-01 01:01:01'),(69,20210513115729,1,'2020-01-01 01:01:01'),(70,20210526113559,1,'2020-01-01 01:01:01'),(71,20210601000001,1,'2020-01-01 01:01:01'),(72,20210601000002,1,'2020-01-01 01:01:01'),(73,20210601000003,1,'2020-01-01 01:01:01'),(74,20210601000004,1,'2020-01-01 01:01:01'),(75,20210601000005,1,'2020-01-01 01:01:01'),(76,20210601000006,1,'2020-01-01 01:01:01'),(77,20210601000007,1,'2020-01-01 01:01:01'),(78,20210601000008,1,'2020-01-01 01:01:01'),(79,20210606151329,1,'2020-01-01 01:01:01'),(80,20210616163757,1,'2020-01-01 01:01:01'),(81,20210617174723,1,'2020-01-01 01:01:01'),(82,20210622160235,1,'2020-01-01 01:01:01'),(83,20210623100031,1,'2020-01-01 01:01:01'),(84,20210623133615,1,'2020-01-01 01:01:01'),(85,20210708143152,1,'2020-01-01 01:01:01'),(86,20210709124443,1,'2020-01-01 01:01:01'),(87,20210712155608,1,'2020-01-01 01:01:01'),(88,20210714102108,1,'2020-01-01 01:01:01'),(89,20210719153709,1,'2020-01-01 01:01:01'),(90,20210721171531,1,'2020-01-01 01:01:01'),(91,20210723135713,1,'2020-01-01 01:01:01'),(92,20210802135933,1,'2020-01-01 01:01:01'),(93,20210806112844,1,'2020-01-01 01:01:01'),(94,20210810095603,1,'2020-01-01 01:01:01'),(95,20210811150223,1,'2020-01-01 01:01:01'),(96,20210818151827,1,'2020-01-01 01:01:01'),(97,20210818151828,1,'2020-01-01 01:01:01'),(98,20210818182258,1,'2020-01-01 01:01:01'),(99,20210819131107,1,'2020-01-01 01:01:01'),(100,20210819143446,1,'2020-01-01 01:01:01'),(101,20210903132338,1,'2020-01-01 01:01:01'),(102,20210915144307,1,'2020-01-01 01:01:01'),(103,20210920155130,1,'2020-01-01 01:01:01'),(104,20210927143115,1,'2020-01-01 01:01:01'),(105,20210927143116,1,'2020-01-01 01:01:01'),(106,20211013133706,1,'2020-01-01 01:01:01'),(107,20211013133707,1,'2020-01-01 01:01:01'),(108,20211102135149,1,'2020-01-01 01:01:01'),(109,20211109121546,1,'2020-01-01 01:01:01'),(110,20211110163320,1,'2020-01-01 01:01:01'),(111,20211116184029,1,'2020-01-01 01:01:01'),(112,20211116184030,1,'2020-01-01 01:01:01'),(113,20211202092042,1,'2020-01-01 01:01:01'),(114,20211202181033,1,'2020-01-01 01:01:01'),(115,20211207161856,1,'2020-01-01 01:01:01'),(116,20211216131203,1,'2020-01-01 01:01:01'),(117,20211221110132,1,'2020-01-01 01:01:01'),(118,20220107155700,1,'2020-01-01 01:01:01'),(119,20220125105650,1,'2020-01-01 01:01:01'),(120,20220201084510,1,'2020-01-01 01:01:01'),(121,20220208144830,1,'2020-01-01 01:01:01'),(122,20220208144831,1,'2020-01-01 01:01:01'),(123,20220215152203,1,'2020-01-01 01:01:01'),(124,20220223113157,1,'2020-01-01 01:01:01'),(125,20220307104655,1,'2020-01-01 01:01:01'),(126,20220309133956,1,'2020-01-01 01:01:01'),(127,20220316155700,1,'2020-01-01 01:01:01'),(128,20220323152301,1,'2020-01-01 01:01:01'),(129,20220330100659,1,'2020-01-01 01:01:01'),(130,20220404091216,1,'2020-01-01 01:01:01'),(131,20220419140750,1,'2020-01-01 01:01:01'),(132,20220428140039,1,'2020-01-01 01:01:01'),(133,20220503134048,1,'2020-01-01 01:01:01'),(134,20220524102918,1,'2020-01-01 01:01:01'),(135,20220526123327,1,'2020-01-01 01:01:01'),(136,20220526123328,1,'2020-01-01 01:01:01'),(137,20220526123329,1,'2020-01-01 01:01:01'),(138,20220608113128,1,'2020-01-01 01:01:01'),(139,20220627104817,1,'2020-01-01 01:01:01'),(140,20220704101843,1,'2020-01-01 01:01:01'),(141,20220708095046,1,'2020-01-01 01:01:01'),(142,20220713091130,1,'2020-01-01 01:01:01'),(143,20220802135510,1,'2020-01-01 01:01:01'),(144,20220818101352,1,'2020-01-01 01:01:01'),(145,20220822161445,1,'2020-01-01 01:01:01'),(146,20220831100036,1,'2020-01-01 01:01:01'),(147,20220831100151,1,'2020-01-01 01:01:01'),(148,20220908181826,1,'2020-01-01 01:01:01'),(149,20220914154915,1,'2020-01-01 01:01:01'),(150,20220915165115,1,'2020-01-01 01:01:01'),(151,20220915165116,1,'2020-01-01 01:01:01'),(152,20220928100158,1,'2020-01-01 01:01:01'),(153,20221014084130,1,'2020-01-01 01:01:01'),(154,20221027085019,1,'2020-01-01 01:01:01'),(155,20221101103952,1,'2020-01-01 01:01:01'),(156,20221104144401,1,'2020-01-01 01:01:01'),(157,20221109100749,1,'2020-01-01 01:01:01'),(158,20221115104546,1,'2020-01-01 01:01:01'),(159,20221130114928,1,'2020-01-01 01:01:01'),(160,20221205112142,1,'2020-01-01 01:01:01'),(161,20221216115820,1,'2020-01-01 01:01:01'),(162,20221220195934,1,'2020-01-01 01:01:01'),(163,20221220195935,1,'2020-01-01 01:01:01'),(164,20221223174807,1,'2020-01-01 01:01:01'),(165,20221227163855,1,'2020-01-01 01:01:01'),(166,20221227163856,1,'2020-01-01 01:01:01'),(167,20230202224725,1,'2020-01-01 01:01:01'),(168,20230206163608,1,'2020-01-01 01:01:01'),(169,20230214131519,1,'2020-01-01 01:01:01'),(170,20230303135738,1,'2020-01-01 01:01:01'),(171,20230313135301,1,'2020-01-01 01:01:01'),(172,20230313141819,1,'2020-01-01 01:01:01'),(173,20230315104937,1,'2020-01-01 01:01:01'),(174,20230317173844,1,'2020-01-01 01:01:01'),(175,20230320133602,1,'2020-01-01 01:01:01'),(176,20230330100011,1,'2020-01-01 01:01:01'),(177,20230330134823,1,'2020-01-01 01:01:01'),(178,20230405232025,1,'2020-01-01 01:01:01'),(179,20230408084104,1,'2020-01-01 01:01:01'),(180,20230411102858,1,'2020-01-01 01:01:01'),(181,20230421155932,1,'2020-01-01 01:01:01'),(182,20230425082126,1,'2020-01-01 01:01:01'),(183,20230425105727,1,'2020-01-01 01:01:01'),(184,20230501154913,1,'2020-01-01 01:01:01'),(185,20230503101418,1,'2020-01-01 01:01:01'),(186,20230515144206,1,'2020-01-01 01:01:01'),(187,20230517140952,1,'2020-01-01 01:01:01'),(188,20230517152807,1,'2020-01-01 01:01:01'),(189,20230518114155,1,'2020-01-01 01:01:01'),(190,20230520153236,1,'2020-01-01 01:01:01'),(191,20230525151159,1,'2020-01-01 01:01:01'),(192,20230530122103,1,'2020-01-01 01:01:01'),(193,20230602111827,1,'2020-01-01 01:01:01'),(194,20230608103123,1,'2020-01-01 01:01:01'),(195,20230629140529,1,'2020-01-01 01:01:01'),(196,20230629140530,1,'2020-01-01 01:01:01'),(197,20230711144622,1,'2020-01-01 01:01:01'),(198,20230721135421,1,'2020-01-01 01:01:01'),(199,20230721161508,1,'2020-01-01 01:01:01'),(200,20230726115701,1,'2020-01-01 01:01:01'),(201,20230807100822,1,'2020-01-01 01:01:01'),(202,20230814150442,1,'2020-01-01 01:01:01'),(203,20230823122728,1,'2020-01-01 01:01:01'),(204,20230906152143,1,'2020-01-01 01:01:01'),(205,20230911163618,1,'2020-01-01 01:01:01'),(206,20230912101759,1,'2020-01-01 01:01:01'),(207,20230915101341,1,'2020-01-01 01:01:01'),(208,20230918132351,1,'2020-01-01 01:01:01'),(209,20231004144339,1,'2020-01-01 01:01:01'),(210,20231009094541,1,'2020-01-01 01:01:01'),(211,20231009094542,1,'2020-01-01 01:01:01'),(212,20231009094543,1,'2020-01-01 01:01:01'),(213,20231009094544,1,'2020-01-01 01:01:01'),(214,20231016091915,1,'2020-01-01 01:01:01'),(215,20231024174135,1,'2020-01-01 01:01:01'),(216,20231025120016,1,'2020-01-01 01:01:01'),(217,20231025160156,1,'2020-01-01 01:01:01'),(218,20231031165350,1,'2020-01-01 01:01:01'),(219,20231106144110,1,'2020-01-01 01:01:01'),(220,20231107130934,1,'2020-01-01 01:01:01'),(221,20231109115838,1,'2020-01-01 01:01:01'),(222,20231121054530,1,'2020-01-01 01:01:01'),(223,20231122101320,1,'2020-01-01 01:01:01'),(224,20231130132828,1,'2020-01-01 01:01:01'),(225,20231130132931,1,'2020-01-01 01:01:01'),(226,20231204155427,1,'2020-01-01 01:01:01'),(227,20231206142340,1,'2020-01-01 01:01:01'),(228,20231207102320,1,'2020-01-01 01:01:01'),(229,20231207102321,1,'2020-01-01 01:01:01'),(230,20231207133731,1,'2020-01-01 01:01:01'),(231,20231212094238,1,'2020-01-01 01:01:01'),(232,20231212095734,1,'2020-01-01 01:01:01'),(233,20231212161121,1,'2020-01-01 01:01:01'),(234,20231215122713,1,'2020-01-01 01:01:01'),(235,20231219143041,1,'2020-01-01 01:01:01'),(236,20231224070653,1,'2020-01-01 01:01:01'),(237,20240110134315,1,'2020-01-01 01:01:01'),(238,20240119091637,1,'2020-01-01 01:01:01'),(239,20240126020642,1,'2020-01-01 01:01:01'),(240,20240126020643,1,'2020-01-01 01:01:01'),(241,20240129162819,1,'2020-01-01 01:01:01'),(242,20240130115133,1,'2020-01-01 01:01:01'),(243,20240131083822,1,'2020-01-01 01:01:01'),(244,20240205095928,1,'2020-01-01 01:01:01'),(245,20240205121956,1,'2020-01-01 01:01:01'),(246,20240209110212,1,'2020-01-01 01:01:01'),(247,20240212111533,1,'2020-01-01 01:01:01'),(248,20240221112844,1,'2020-01-01 01:01:01'),(249,20240222073518,1,'2020-01-01 01:01:01'),(250,20240222135115,1,'2020-01-01 01:01:01'),(251,20240226082255,1,'2020-01-01 01:01:01'),(252,20240228082706,1,'2020-01-01 01:01:01'),(253,20240301173035,1,'2020-01-01 01:01:01'),(254,20240302111134,1,'2020-01-01 01:01:01'),(255,20240312103753,1,'2020-01-01 01:01:01'),(256,20240313143416,1,'2020-01-01 01:01:01'),(257,20240314085226,1,'2020-01-01 01:01:01'),(258,20240314151747,1,'2020-01-01 01:01:01'),(259,20240320145650,1,'2020-01-01 01:01:01'),(260,20240327115530,1,'2020-01-01 01:01:01'),(261,20240327115617,1,'2020-01-01 01:01:01'),(262,20240408085837,1,'2020-01-01 01:01:01'),(263,20240415104633,1,'2020-01-01 01:01:01'),(264,20240430111727,1,'2020-01-01 01:01:01'),(265,20240515200020,1,'2020-01-01 01:01:01'),(266,20240521143023,1,'2020-01-01 01:01:01'),(267,20240521143024,1,'2020-01-01 01:01:01'),(268,20240601174138,1,'2020-01-01 01:01:01'),(269,20240607133721,1,'2020-01-01 01:01:01'),(270,20240612150059,1,'2020-01-01 01:01:01'),(271,20240613162201,1,'2020-01-01 01:01:01'),(272,20240613172616,1,'2020-01-01 01:01:01'),(273,20240618142419,1,'2020-01-01 01:01:01'),(274,20240625093543,1,'2020-01-01 01:01:01'),(275,20240626195531,1,'2020-01-01 01:01:01'),(276,20240702123921,1,'2020-01-01 01:01:01'),(277,20240703154849,1,'2020-01-01 01:01:01'),(278,20240707134035,1,'2020-01-01 01:01:01'),(279,20240707134036,1,'2020-01-01 01:01:01'),(280,20240709124958,1,'2020-01-01 01:01:01'),(281,20240709132642,1,'2020-01-01 01:01:01'),(282,20240709183940,1,'2020-01-01 01:01:01'),(283,20240710155623,1,'2020-01-01 01:01:01'),(284,20240723102712,1,'2020-01-01 01:01:01'),(285,20240725152735,1,'2020-01-01 01:01:01'),(286,20240725182118,1,'2020-01-01 01:01:01'),(287,20240726100517,1,'2020-01-01 01:01:01'),(288,20240729120947,1,'2020-01-01 01:01:01'),(289,20240730171504,1,'2020-01-01 01:01:01'),(290,20240730174056,1,'2020-01-01 01:01:01'),(291,20240730215453,1,'2020-01-01 01:01:01'),(292,20240730374423,1,'2020-01-01 01:01:01'),(293,20240801115359,1,'2020-01-01 01:01:01');
 /*!40101 SET @saved_cs_client     = @@character_set_client */;
 /*!50503 SET character_set_client = utf8mb4 */;
 CREATE TABLE `mobile_device_management_solutions` (
diff --git a/server/datastore/mysql/software_installers.go b/server/datastore/mysql/software_installers.go
index 51c952151c..c491d38139 100644
--- a/server/datastore/mysql/software_installers.go
+++ b/server/datastore/mysql/software_installers.go
@@ -337,19 +337,17 @@ SELECT
 	hsi.post_install_script_output,
 	hsi.install_script_output,
 	hsi.host_id AS host_id,
-	h.computer_name AS host_display_name,
 	st.name AS software_title,
 	st.id AS software_title_id,
 	COALESCE(%s, '') AS status,
 	si.filename AS software_package,
-	h.team_id AS host_team_id,
 	hsi.user_id AS user_id,
 	hsi.post_install_script_exit_code,
 	hsi.install_script_exit_code,
-    hsi.self_service
+    hsi.self_service,
+    hsi.host_deleted_at
 FROM
 	host_software_installs hsi
-	JOIN hosts h ON h.id = hsi.host_id
 	JOIN software_installers si ON si.id = hsi.software_installer_id
 	JOIN software_titles st ON si.title_id = st.id
 WHERE
@@ -400,6 +398,7 @@ WHERE
 			FROM host_software_installs
 		WHERE
 			software_installer_id = :installer_id
+			AND host_deleted_at IS NULL
 		GROUP BY
 			host_id)) s`, softwareInstallerHostStatusNamedQuery("hsi", "status"))
 
diff --git a/server/datastore/mysql/software_installers_test.go b/server/datastore/mysql/software_installers_test.go
index be7fbbb69f..f2630770a7 100644
--- a/server/datastore/mysql/software_installers_test.go
+++ b/server/datastore/mysql/software_installers_test.go
@@ -328,7 +328,6 @@ func testGetSoftwareInstallResult(t *testing.T, ds *Datastore) {
 			require.Equal(t, tc.expectedStatus, res.Status)
 			require.Equal(t, swFilename, res.SoftwarePackage)
 			require.Equal(t, host.ID, res.HostID)
-			require.Equal(t, host.DisplayName(), res.HostDisplayName)
 			require.Equal(t, tc.preInstallQueryOutput, res.PreInstallQueryOutput)
 			require.Equal(t, tc.postInstallScriptOutput, res.PostInstallScriptOutput)
 			require.Equal(t, tc.installScriptOutput, res.Output)
diff --git a/server/fleet/software_installer.go b/server/fleet/software_installer.go
index 85cb4aa6a9..d542840989 100644
--- a/server/fleet/software_installer.go
+++ b/server/fleet/software_installer.go
@@ -155,8 +155,6 @@ type HostSoftwareInstallerResult struct {
 	SoftwarePackage string `json:"software_package" db:"software_package"`
 	// HostID is the ID of the host.
 	HostID uint `json:"host_id" db:"host_id"`
-	// HostDisplayName is the display name of the host.
-	HostDisplayName string `json:"host_display_name" db:"host_display_name"`
 	// Status is the status of the software installer package on the host.
 	Status SoftwareInstallerStatus `json:"status" db:"status"`
 	// Detail is the detail of the software installer package on the host. TODO: does this field
@@ -172,9 +170,6 @@ type HostSoftwareInstallerResult struct {
 	CreatedAt time.Time `json:"created_at" db:"created_at"`
 	// UpdatedAt is the time the software installer request was last updated.
 	UpdatedAt *time.Time `json:"updated_at" db:"updated_at"`
-	// HostTeamID is the team ID of the host on which this software install was attempted. This
-	// field is not sent in the response, it is only used for internal authorization.
-	HostTeamID *uint `json:"-" db:"host_team_id"`
 	// UserID is the user ID that requested the software installation on that host.
 	UserID *uint `json:"-" db:"user_id"`
 	// InstallScriptExitCode is used internally to determine the output displayed to the user.
@@ -184,6 +179,9 @@ type HostSoftwareInstallerResult struct {
 	// SelfService indicates that the installation was queued by the
 	// end user and not an administrator
 	SelfService bool `json:"self_service" db:"self_service"`
+	// HostDeletedAt indicates if the data is associated with a
+	// deleted host
+	HostDeletedAt *time.Time `json:"-" db:"host_deleted_at"`
 }
 
 const (
diff --git a/server/service/integration_enterprise_test.go b/server/service/integration_enterprise_test.go
index afbb7aa39f..32420f39d6 100644
--- a/server/service/integration_enterprise_test.go
+++ b/server/service/integration_enterprise_test.go
@@ -10619,6 +10619,22 @@ func (s *integrationEnterpriseTestSuite) TestSoftwareInstallerHostRequests() {
 	require.Contains(t, extractServerErrorText(r.Body), "Invalid parameters. The combination of software_version_id and software_title_id is not allowed.")
 	r = s.Do("GET", "/api/latest/fleet/hosts", nil, http.StatusBadRequest, "software_status", "installed", "team_id", "1", "software_title_id", "1", "software_id", "1")
 	require.Contains(t, extractServerErrorText(r.Body), "Invalid parameters. The combination of software_id and software_title_id is not allowed.")
+
+	// Access software install result after host is deleted
+	err = s.ds.DeleteHost(context.Background(), h.ID)
+	require.NoError(t, err)
+
+	instResult, err := s.ds.GetSoftwareInstallResults(context.Background(), installUUID)
+	require.NoError(t, err)
+	require.NotNil(t, instResult.HostDeletedAt)
+
+	gsirr = getSoftwareInstallResultsResponse{}
+	s.DoJSON("GET", fmt.Sprintf("/api/latest/fleet/software/install/results/%s", installUUID), nil, http.StatusOK, &gsirr)
+	require.NoError(t, gsirr.Err)
+	require.NotNil(t, gsirr.Results)
+	results = gsirr.Results
+	require.Equal(t, installUUID, results.InstallUUID)
+	require.Equal(t, fleet.SoftwareInstallerPending, results.Status)
 }
 
 func (s *integrationEnterpriseTestSuite) TestSelfServiceSoftwareInstall() {

From e2fcb44d76473a8d97dc5c316af12d399ed71fd9 Mon Sep 17 00:00:00 2001
From: RachelElysia <71795832+RachelElysia@users.noreply.github.com>
Date: Thu, 1 Aug 2024 15:53:43 -0400
Subject: [PATCH 36/88] Fleet UI: multiple unreleased and released bugs
 (#20951)

---
 frontend/components/Editor/Editor.tsx                       | 2 +-
 .../OSSettings/cards/CustomSettings/_styles.scss            | 4 ++++
 .../ProfileUploader/components/AddProfileModal/_styles.scss | 6 +++---
 .../SoftwareTable/SoftwareTitlesTableConfig.tsx             | 4 +++-
 4 files changed, 11 insertions(+), 5 deletions(-)

diff --git a/frontend/components/Editor/Editor.tsx b/frontend/components/Editor/Editor.tsx
index c9bd360508..e8f230e379 100644
--- a/frontend/components/Editor/Editor.tsx
+++ b/frontend/components/Editor/Editor.tsx
@@ -75,7 +75,7 @@ const Editor = ({
         <TooltipWrapper
           className={labelClassName}
           tipContent={labelTooltip}
-          position="top"
+          position="top-start"
         >
           {labelText}
         </TooltipWrapper>
diff --git a/frontend/pages/ManageControlsPage/OSSettings/cards/CustomSettings/_styles.scss b/frontend/pages/ManageControlsPage/OSSettings/cards/CustomSettings/_styles.scss
index 81c563065c..14828cfb9d 100644
--- a/frontend/pages/ManageControlsPage/OSSettings/cards/CustomSettings/_styles.scss
+++ b/frontend/pages/ManageControlsPage/OSSettings/cards/CustomSettings/_styles.scss
@@ -99,6 +99,10 @@
       flex-direction: column;
       align-items: center;
       gap: $pad-small;
+
+      &--message {
+        text-align: center;
+      }
     }
 
     &__button-wrap {
diff --git a/frontend/pages/ManageControlsPage/OSSettings/cards/CustomSettings/components/ProfileUploader/components/AddProfileModal/_styles.scss b/frontend/pages/ManageControlsPage/OSSettings/cards/CustomSettings/components/ProfileUploader/components/AddProfileModal/_styles.scss
index 222268e7db..087e2a54d1 100644
--- a/frontend/pages/ManageControlsPage/OSSettings/cards/CustomSettings/components/ProfileUploader/components/AddProfileModal/_styles.scss
+++ b/frontend/pages/ManageControlsPage/OSSettings/cards/CustomSettings/components/ProfileUploader/components/AddProfileModal/_styles.scss
@@ -57,10 +57,10 @@
     flex-direction: column;
     align-items: center;
     gap: $pad-small;
-  }
 
-  &__profile-graphic--message {
-    text-align: center;
+    &--message {
+      text-align: center;
+    }
   }
 
   &__button-wrap {
diff --git a/frontend/pages/SoftwarePage/SoftwareTitles/SoftwareTable/SoftwareTitlesTableConfig.tsx b/frontend/pages/SoftwarePage/SoftwareTitles/SoftwareTable/SoftwareTitlesTableConfig.tsx
index 213cc1ec46..ea31ff42d4 100644
--- a/frontend/pages/SoftwarePage/SoftwareTitles/SoftwareTable/SoftwareTitlesTableConfig.tsx
+++ b/frontend/pages/SoftwarePage/SoftwareTitles/SoftwareTable/SoftwareTitlesTableConfig.tsx
@@ -76,11 +76,13 @@ const getSoftwareNameCellData = (
     iconUrl = app_store_app.icon_url;
   }
 
+  const isAllTeams = teamId === undefined;
+
   return {
     name: softwareTitle.name,
     source: softwareTitle.source,
     path: softwareTitleDetailsPath,
-    hasPackage: hasPackage && !!teamId,
+    hasPackage: hasPackage && !isAllTeams,
     isSelfService,
     iconUrl,
   };

From a49c23e74bfa71930c7349043ef32258bc53d854 Mon Sep 17 00:00:00 2001
From: Eric <eashaw@sailsjs.com>
Date: Thu, 1 Aug 2024 15:24:21 -0500
Subject: [PATCH 37/88] Website: update open positions template page to include
 a salary range (#20968)

Closes: https://github.com/fleetdm/confidential/issues/7200

Changes:
- Updated the open positions template page to include a salary range.
---
 website/scripts/build-static-content.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/website/scripts/build-static-content.js b/website/scripts/build-static-content.js
index 470da38f6c..03050e00f0 100644
--- a/website/scripts/build-static-content.js
+++ b/website/scripts/build-static-content.js
@@ -602,7 +602,7 @@ module.exports = {
 
             let pageTitle = openPosition.jobTitle;
 
-            let mdStringForThisOpenPosition = `# ${openPosition.jobTitle}\n\n## Let's start with why we exist. 📡\n\nEver wondered if your employer is monitoring your work computer?\n\nOrganizations make huge investments every year to keep their laptops and servers online, secure, compliant, and usable from anywhere. This is called "device management".\n\nAt Fleet, we think it's time device management became [transparent](https://fleetdm.com/transparency) and [open source](https://fleetdm.com/handbook/company#open-source).\n\n\n## About the company 🌈\n\nYou can read more about the company in our [handbook](https://fleetdm.com/handbook/company), which is public and open to the world.\n\ntldr; Fleet Device Management Inc. is a [recently-funded](https://techcrunch.com/2022/04/28/fleet-nabs-20m-to-enable-enterprises-to-manage-their-devices/) Series A startup founded and backed by the same people who created osquery, the leading open source security agent. Today, osquery is installed on millions of laptops and servers, and it is especially popular with [enterprise IT and security teams](https://www.linuxfoundation.org/press/press-release/the-linux-foundation-announces-intent-to-form-new-foundation-to-support-osquery-community).\n\n\n## Your primary responsibilities 🔭\n${openPosition.responsibilities}\n\n## Are you our new team member? 🧑‍🚀\nIf most of these qualities sound like you, we would love to chat and see if we're a good fit.\n\n${openPosition.experience}\n\n## Why should you join us? 🛸\n\nLearn more about the company and [why you should join us here](https://fleetdm.com/handbook/company#is-it-any-good).\n\n<div purpose="open-position-quote-card"><div><img alt="Deloitte logo" src="/images/logo-deloitte-166x36@2x.png"></div><div purpose="open-position-quote"><div purpose="quote-text"><p>“One of the best teams out there to go work for and help shape security platforms.”</p></div><div purpose="quote-attribution"><strong>Dhruv Majumdar</strong><p>Director Of Cyber Risk & Advisory</p></div></div></div>\n\n\n## Want to join the team?\n\nWant to join the team?\n\nReach out to [${openPosition.hiringManagerName} on Linkedin](${openPosition.hiringManagerLinkedInUrl}).`;
+            let mdStringForThisOpenPosition = `# ${openPosition.jobTitle}\n\n## Let's start with why we exist. 📡\n\nEver wondered if your employer is monitoring your work computer?\n\nOrganizations make huge investments every year to keep their laptops and servers online, secure, compliant, and usable from anywhere. This is called "device management".\n\nAt Fleet, we think it's time device management became [transparent](https://fleetdm.com/transparency) and [open source](https://fleetdm.com/handbook/company#open-source).\n\n\n## About the company 🌈\n\nYou can read more about the company in our [handbook](https://fleetdm.com/handbook/company), which is public and open to the world.\n\ntldr; Fleet Device Management Inc. is a [recently-funded](https://techcrunch.com/2022/04/28/fleet-nabs-20m-to-enable-enterprises-to-manage-their-devices/) Series A startup founded and backed by the same people who created osquery, the leading open source security agent. Today, osquery is installed on millions of laptops and servers, and it is especially popular with [enterprise IT and security teams](https://www.linuxfoundation.org/press/press-release/the-linux-foundation-announces-intent-to-form-new-foundation-to-support-osquery-community).\n\n\n## Your primary responsibilities 🔭\n${openPosition.responsibilities}\n\n## Are you our new team member? 🧑‍🚀\nIf most of these qualities sound like you, we would love to chat and see if we're a good fit.\n\n${openPosition.experience}\n\n## Why should you join us? 🛸\n\nLearn more about the company and [why you should join us here](https://fleetdm.com/handbook/company#is-it-any-good).\n\n<div purpose="open-position-quote-card"><div><img alt="Deloitte logo" src="/images/logo-deloitte-166x36@2x.png"></div><div purpose="open-position-quote"><div purpose="quote-text"><p>“One of the best teams out there to go work for and help shape security platforms.”</p></div><div purpose="quote-attribution"><strong>Dhruv Majumdar</strong><p>Director Of Cyber Risk & Advisory</p></div></div></div>\n\n\n## Want to join the team?\n\nWant to join the team?\n\nReach out to [${openPosition.hiringManagerName} on Linkedin](${openPosition.hiringManagerLinkedInUrl}). \n\n\n >The salary range for this role is $48,000 - $480,000. Fleet provides competitive compensation based on our [compensation philosophy](https://fleetdm.com/handbook/company/communications#compensation), as well as comprehensive [benefits](https://fleetdm.com/handbook/company/communications#benefits).`;
 
 
             let htmlStringForThisPosition = await sails.helpers.strings.toHtml.with({mdString: mdStringForThisOpenPosition});

From 45b61c508545e35dca1ec6eff6197b50492cb045 Mon Sep 17 00:00:00 2001
From: Luke Heath <luke@fleetdm.com>
Date: Thu, 1 Aug 2024 13:47:17 -0700
Subject: [PATCH 38/88] Change freeze process to release candidate process
 (#20857)

---
 handbook/engineering/README.md               | 127 +++++++++++++++----
 handbook/engineering/engineering.rituals.yml |   6 +-
 2 files changed, 107 insertions(+), 26 deletions(-)

diff --git a/handbook/engineering/README.md b/handbook/engineering/README.md
index 7e1d08e84b..d6f18bde2c 100644
--- a/handbook/engineering/README.md
+++ b/handbook/engineering/README.md
@@ -1,7 +1,10 @@
 # Engineering
+
 This handbook page details processes specific to working [with](#contact-us) and [within](#responsibilities) this department.
 
+
 ## Team
+
 | Role                            | Contributor(s)           |
 |:--------------------------------|:-----------------------------------------------------------------------------------------------------------|
 | Chief Technology Officer (CTO)  | [Luke Heath](https://www.linkedin.com/in/lukeheath/) _([@lukeheath](https://github.com/lukeheath))_
@@ -10,15 +13,21 @@ This handbook page details processes specific to working [with](#contact-us) and
 | Quality Assurance Engineer (QA) | <sup><sub> _See [🛩️ Product groups](https://fleetdm.com/handbook/company/product-groups#current-product-groups)_ </sup></sub>
 | Software Engineer               | <sup><sub> _See [🛩️ Product groups](https://fleetdm.com/handbook/company/product-groups#current-product-groups)_ </sup></sub>
 
+
 ## Contact us
+
 - To **make a request** of this department, [create an issue](https://fleetdm.com/handbook/company/product-groups#current-product-groups) and a team member will get back to you within one business day (If urgent, mention a [team member](#team) in the [#help-engineering](https://fleetdm.slack.com/archives/C019WG4GH0A) Slack channel.
   - Any Fleet team member can [view the kanban boards](https://fleetdm.com/handbook/company/product-groups#current-product-groups) for this department, including pending tasks and the status of new requests.
   - Please **use issue comments and GitHub mentions** to communicate follow-ups or answer questions related to your request.
 
+
 ## Responsibilities
+
 The 🚀 Engineering department at Fleet is directly responsible for writing and maintaining the [code](https://github.com/fleetdm/fleet) for Fleet's core product and infrastructure.
 
+
 ### Record engineering KPIs
+
 We track the success of this process by observing the throughput of issues through the system and identifying where buildups (and therefore bottlenecks) are occurring.
 The metrics are:
 * Number of bugs opened this week
@@ -28,6 +37,7 @@ The metrics are:
 
 Each week these are tracked and shared in the weekly KPI sheet by Luke Heath.
 
+
 ### Write a feature guide 
 
 We write [guides](https://fleetdm.com/guides) for all new features. Feature guides are published before the feature is released so that our users understand how the feature is intended to work. A guide is a type of article, so the process for writing a guide and article is the same.
@@ -39,6 +49,7 @@ We write [guides](https://fleetdm.com/guides) for all new features. Feature guid
 
 
 ### Create an engineering-initiated story
+
 Engineering-initiated stories are types of user stories created by engineers to make technical changes to Fleet. Technical changes should improve the user experience or contributor experience. For example, optimizing SQL that improves the response time of an API endpoint improves user experience by reducing latency. A script that generates common boilerplate, or automated tests to cover important business logic, improves the quality of life for contributors, making them happier and more productive, resulting in faster delivery of features to our customers.
 
 It is important to frame engineering-initiated user stories the same way we frame all user stories. Stay focused on how this technical change will drive value for our users.
@@ -53,46 +64,50 @@ If there are no product changes, and the DRI decides to prioritize the story, th
 
 > We prefer the term engineering-initiated stories over technical debt because the user story format helps keep us focused on our users and contributors.
 
+
 ### Fix a bug
+
 All bug fix pull requests should have a mention back to the issue they resolve with #<ticket_number> in the description or even in a comment. Please do not use any [automated words](https://docs.github.com/en/issues/tracking-your-work-with-issues/linking-a-pull-request-to-an-issue#linking-a-pull-request-to-an-issue-using-a-keyword) since we don't want the tickets auto-closing when PR's are merged. 
 If the bug is labeled `~unreleased bug`, branch off and put your PR into `main`. These issues can be closed as soon as they complete QA.
 
 If the bug is labeled `~released bug`, branch off and put your PR into `main`. After merging checkout the latest tag, for example `git checkout fleet-v4.48.2`, then `git fetch; git cherry-pick <commit>`. If the cherry-pick fails with a conflict call out in the ticket how to resolve or if it is sufficiently complicated call out this fix is not suited for the patch release process and should only be included in the end of sprint release. This approach makes sure the bug fix is not built on top of unreleased feature code, which can cause merge conflicts during patch releases. 
 
-### Begin a merge freeze
-To ensure release quality, Fleet has a freeze period for testing beginning the Tuesday before the release at 11:00 AM Pacific. Effective at the start of the freeze period, a release candidate branch is created and frozen at `minor-fleet-v4.x.x` and no additional feature work is merged without approval.
 
-Bugs are exempt from the release freeze period.
+### Create a release candidate
 
-Before beginning the freeze, create the release candidate branch. [Run the first step](https://github.com/fleetdm/fleet/tree/main/tools/release#minor-release-typically-end-of-sprint) of the minor release section of the Fleet releases script to create the release candidate branch, the release QA issue, and announce the release candidate in Slack. 
+All minor releases go through the release candidate process before they are published. A release candidate for the next minor release is created on the Tuesday before the release at 11:00 AM Pacific. A release candidate branch is created at `minor-fleet-v4.x.x` and no additional feature work is merged without EM and QA approval.
 
-After creating the release candidate branch, open the [repo settings on Merge Freeze](https://app.mergefreeze.com/installations/3704/branches/6847/edit) and populate the "Protected branch name" field with the name of the release candidate branch. Then, [open the repo on Merge Freeze](https://www.mergefreeze.com/installations/3704/branches/6847) and click the "Freeze now" button. This will freeze the selected release candidate branch and require any PRs to be manually unfrozen before merging. PRs may be manually unfrozen in Merge Freeze using the PR number.
+All bug fixes that are merged into `main` after the release candidate is created are merged into the release candidate by the engineer responsible for the fix.
 
-> Any Fleetie can [unfreeze PRs on Merge Freeze](https://www.mergefreeze.com/installations/3704/branches) if the PR contains documentation changes or bug fixes only. If the PR contains other changes, please confirm with your manager before unfreezing.
+[Run the first step](https://github.com/fleetdm/fleet/tree/main/tools/release#minor-release-typically-end-of-sprint) of the minor release section of the Fleet releases script to create the release candidate branch, the release QA issue, and announce the release candidate in Slack.
 
-### Deploy the release candidate to QA Wolf during merge freeze
-During merge freeze, deploy the release candidate to our QA Wolf instance every morning instead of `main` to ensure that any new bugs reported by QA Wolf are in the upcoming release and need to be fixed before publishing the release.
+
+### Deploy the release candidate to QA Wolf
+
+During the release candidate period, the release candidate is deployed to our QA Wolf instance every morning instead of `main` to ensure that any new bugs reported by QA Wolf are in the upcoming release and need to be fixed before publishing the release.
 
 Open the [confidential repo environment variables](https://github.com/fleetdm/confidential/settings/variables/actions) page and update the `QAWOLF_DEPLOY_TAG` repository variable with the name of the release candidate branch. 
 
-### Merge a pull request during the freeze period
-We merge bug fixes, documentation changes, and website updates during the freeze period, but we do not merge other code changes. This minimizes code churn and helps ensure a stable release. To merge a bug fix, you must first unfreeze the PR in [Merge Freeze](https://app.mergefreeze.com/installations/3704/branches), and click the "Unfreeze 1 pull request" text link. 
+
+### Merge bug fixes into the release candidate
+
+Only merge bug fixes during the release candidate period to minimize code churn and help ensure a stable release. To merge a bug fix into the release candidate, it should first be merged into `main`. Then, `git checkout` the release candidate branch and create a new local branch. Next, `git cherry-pick` your commit from `main` into your new local branch, then create a pull request from your new branch to the release candidate. This process ensures your bug fix is included in `main` for future releases, as well as the release candidate branch for the pending release.
 
 > To allow a stable release test, the final 24 hours before release is a deep freeze when only bugs with the `~release-blocker` or `~unreleased-bug` labels are merged.
 
-If there is partially merged feature work when freeze begins, the previously merged code must be reverted. If there is an exceptional, business-critical need to merge feature work during freeze, as determined by the [release ritual DRI](#rituals), the following exception process may be followed:
+If there is partially merged feature work when the release candidate is created, the previously merged code must be reverted. If there is an exceptional, business-critical need to merge feature work into the release candidate, as determined by the [release ritual DRI](#rituals), the release candidate [feature merge exception process](https://fleetdm.com/handbook/engineering#request-release-candidate-feature-merge-exception) may be followed.
 
-1. The engineer requesting the feature work merge exception during freeze notifies their Engineering Manager. 
-2. The Engineering Manager notifies the QA lead for the product group and the [release ritual DRI](https://fleetdm.com/handbook/engineering#rituals). 
-3. The Engineering Manager, QA lead, and [release ritual DRI](#rituals) must all approve the feature work PR before it is unfrozen and merged.
+### Request release candidate feature merge exception
 
-> This exception process should be avoided whenever possible. Any feature work merged during freeze will likely result in a significant release delay.
+1. Notify product group EM that feature work will not merge into `main` before the release candidate is cut and requires a feature merge exception.
+2. EM notifies QA lead for the product group and the [release ritual DRI](https://fleetdm.com/handbook/engineering#rituals).
+3. EM, QA lead, and [release ritual DRI](#rituals) must all approve the feature work PR before it is merged into the release candidate branch.
+
+> This exception process should be avoided whenever possible. Any feature work merged into the release candidate will likely result in a significant release delay.
 
-### Merge a bug fix during the freeze period
-To merge a bug fix into the release candidate during freeze, it should first be merged into `main`. Then, `git checkout` the release candidate branch and create a new branch. Next, `git cherry-pick` your
-commit from `main` into your new branch, then create a pull request from your new branch to the release candidate. This process ensures your bug fix is included in `main` for future releases, as well as the release candidate branch for the next release.
 
 ### Confirm latest versions of dependencies
+
 Before kicking off release QA, confirm that we are using the latest versions of dependencies we want to keep up-to-date with each release. Currently, those dependencies are:
 
 1. **Go**: Latest minor release
@@ -133,13 +148,19 @@ If an announcement is found for either data source that may impact data feed ava
 
 If code changes are found for any `fleetd` components, create a new release QA issue to update `fleetd`. Delete the top section for Fleet core, and retain the bottom section for `fleetd`. Populate the necessary version changes for each `fleetd` component.
 
+
 ### Indicate your product group is release-ready
-Once a product group completes its QA process during the freeze period, its QA lead moves the smoke testing ticket to the "Ready for release" column on their ZenHub board. They then notify the release ritual DRI by tagging them in a comment, indicating that their group is prepared for release. The release ritual DRI starts the [release process](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Releasing-Fleet.md) after all QA leads have made these updates and confirmed their readiness for release.
+
+Once a product group completes its QA process during the release candidate period, its QA lead moves the smoke testing ticket to the "Ready for release" column on their ZenHub board. They then notify the release ritual DRI by tagging them in a comment, indicating that their group is prepared for release. The release ritual DRI starts the [release process](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Releasing-Fleet.md) after all QA leads have made these updates and confirmed their readiness for release.
+
 
 ### Prepare Fleet release
+
 Documentation on completing the release process can be found [here](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Releasing-Fleet.md).
 
+
 ### Deploy a new release to dogfood
+
 After each Fleet release, the new release is deployed to Fleet's "dogfood" (internal) instance.
 
 How to deploy a new release to dogfood:
@@ -154,7 +175,9 @@ How to deploy a new release to dogfood:
 >
 > Note that "fleetdm/fleet:main" is not a image name, instead use the commit hash in place of "main".
 
+
 ### Conclude current milestone 
+
 Immediately after publishing a new release, we close out the associated GitHub issues and milestones. 
 
 1. **Rename current milestone**: In GitHub, [change the current milestone name](https://github.com/fleetdm/fleet/milestones) from `4.x.x-tentative` to `4.x.x`. `4.37.0-tentative` becomes `4.37.0`.
@@ -175,16 +198,18 @@ Immediately after publishing a new release, we close out the associated GitHub i
 
 10. **Create next milestone**: Create a new milestone for the next versioned release, `4.x.x-tentative`.
 
-11. **Remove the freeze**: [Open the repo in Merge Freeze](https://app.mergefreeze.com/installations/3704/branches/6847) and click the "Unfreeze" button. 
+11. Announce that the release milestone has been closed in #help-engineering.
 
-12. Announce that `main` is unfrozen and the milestone has been closed in #help-engineering.
+12. Visit the [confidential repo variables](https://github.com/fleetdm/confidential/settings/variables/actions) page and update the `QAWOLF_DEPLOY_TAG` repository variable to `main` so that the latest code is deployed to QA Wolf every morning.
 
-13. Visit the [confidential repo variables](https://github.com/fleetdm/confidential/settings/variables/actions) page and update the `QAWOLF_DEPLOY_TAG` repository variable to `main` so that the latest code is deployed to QA Wolf every morning.
 
 ### Update the Fleet releases calendar
+
 The [Fleet releases Google calendar](https://calendar.google.com/calendar/embed?src=c_v7943deqn1uns488a65v2d94bs%40group.calendar.google.com&ctz=America%2FChicago) is kept up-to-date by the [release ritual DRI](https://fleetdm.com/handbook/engineering#rituals). Any change to targeted release dates is reflected on this calendar.
 
+
 ### Secure company-issued equipment for a team member
+
 As soon as an offer is accepted, Fleet provides laptops and YubiKey security keys for core team members to use while working at Fleet. The IT engineer will work with the new team member to get their equipment requested and shipped to them on time.
 
 - [**Check the Fleet IT warehouse**](https://docs.google.com/spreadsheets/d/1hFlymLlRWIaWeVh14IRz03yE-ytBLfUaqVz0VVmmoGI/edit#gid=0) before purchasing any equipment including laptops, monitors, and Yubikeys to ensure we efficiently [utilize existing assets before spending money](https://fleetdm.com/handbook/company/why-this-way#why-spend-less). If Fleet IT warehouse inventory can meet the needs of the request, file a [warehouse request](https://github.com/fleetdm/confidential/issues/new?assignees=sampfluger88&labels=%23g-digital-experience&projects=&template=warehouse-request.md&title=%F0%9F%92%BB+Warehouse+request).
@@ -202,17 +227,23 @@ As soon as an offer is accepted, Fleet provides laptops and YubiKey security key
 
 - Include delivery tracking information when closing the support request so the new employee can be notified.
 
+
 ### Register a domain for Fleet
+
 Domain name registrations are handled through Namecheap. Access is managed via 1Password.
 
+
 ### Fix a laptop that's not checking in
+
 It is [possible for end users to remove launch agents](https://github.com/fleetdm/confidential/issues/6088) (this is true not just for osquery, but for anything). 
 
 If the host has MDM turned on, use the `fleetctl mdm run-command` CLI command to push the XML file located at https://github.com/fleetdm/fleet/blob/main/it-and-security/lib/macos-send-fleetd.xml to the device, which will reinstall fleetd.
 
 If the host doesn't have MDM turned on or isn't enrolled to dogfood, it is beyond our ability to control remotely.
 
+
 ### Enroll a macOS host in dogfood
+
 When a device is purchased using the Apple eCommerce store, the device is automatically enrolled in Apple Business Manager (ABM) and assigned to the correct server to ensure the device is in dogfood.
 You can confirm that the device has been ordered correctly by following these steps:
 - Log into ABM
@@ -229,14 +260,20 @@ On occasion there will be a need to manually enroll a macOS host in dogfood. Thi
   - Once complete, follow instructions to reset disk encryption key.
 - Disk encryption key will now be stored in Fleet dogfood, which signifies that the device is now enrolled in dogfood.
 
+
 ### Enroll a Windows or Ubuntu Linux device in dogfood
+
 To enroll a windows or Ubuntu Linux device in dogfood, instruct the user to install fleetd for their platform from internal shared drive folder [here](https://drive.google.com/drive/folders/1-hMwk4P7NRzCU5kDxkEcOo8Sluuaux1h?usp=drive_link).
 Once the user has installed fleetd, verify the device is correctly enrolled by confirming the device encryption key is in dogfood.
 
+
 ### Enroll a ChromeOS device in dogfood
+
 ChromeOS devices are automatically enrolled in dogfood after the IT admin sets up automatic enrollment. This is done in dogfood by following the steps found in the dialog popup when selecting "Add hosts > ChromeOS" from the dogfood Hosts page.
 
+
 ### Lock a macOS host in dogfood using fleetctl CLI tool
+
 - Download the lock command XML file from Google Drive [here](https://drive.google.com/file/d/1o6vJ1fHilRtBmyKAj0I5URiKn77qe4gS/view?usp=drive_link).
 - Customize any messaging that will appear on the locked device, and modify the pin for unlocking the device by editing the file in text editor.
   - Note you will need to safely store the recovery pin for the device, suggest using 1Password or other secure storage method
@@ -252,7 +289,9 @@ ChromeOS devices are automatically enrolled in dogfood after the IT admin sets u
   - Enter disk encryption key on laptop. This should prompt you to create a new password.
 - You will then be logged into the default device profile, and can complete any needed actions (wipe, recover data).
 
+
 ### Book an event
+
 Fleet's Client Platform Engineer & Community Advocate is responsible for booking events that Fleet has chosen to attend and/or sponsor. To book an event, complete the steps in each event issue. Contact the [🫧 Digital Marketing Manager](https://fleetdm.com/handbook/demand#team) as needed with any questions or blockers to booking an event.
 
 > Note: The Demand department [settles all event strategy](https://fleetdm.com/handbook/demand#settle-event-strategy) prior to booking an event. 
@@ -269,6 +308,7 @@ Article creation begins with creation of an issue using the "Article request" te
 Check the "📃 Planned articles" column in [#g-demand board](https://app.zenhub.com/workspaces/g-demand-64e6c8e2d35c7f001a457b7f/board) and continue to work through steps in each event's issue.
 -->
 
+
 ### Order SWAG
 
 **To order T-shirts:**
@@ -300,14 +340,18 @@ Check the "📃 Planned articles" column in [#g-demand board](https://app.zenhub
     - [Sharpie Fine Point Markers](https://www.everythingbranded.com/product/sharpie-fine-point-332908)
     - [Custom sticky note pads](https://www.everythingbranded.com/product/custom-sticky-notes-585601) (design is in the StickerMule [brand kit](https://www.stickermule.com/studio/brand-kits))
 
+
 ### Review another product group's pull request
+
 Some code paths require pull request review from multiple product groups to confirm there are no
 unintended side effects of the change for another product group. All code paths defined in
 [CODEOWNERS](https://github.com/fleetdm/fleet/blob/main/CODEOWNERS) that are assigned to individual
 engineers across multiple product groups must be approved by one engineer from each product group
 before merging.
 
+
 ### Review a community pull request
+
 If you're assigned a community pull request for review, it is important to keep things moving for the contributor. The goal is to not go more than one business day without following up with the contributor.
 
 A PR should be merged if:
@@ -334,7 +378,9 @@ For PRs that will not be merged:
 - Thank the contributor for their effort and explain why the changes won't be merged.
 - Close the PR.
 
+
 ### Merge a community pull request
+
 When merging a pull request from a community contributor:
 
 - Ensure that the checklist for the submitter is complete.
@@ -343,10 +389,14 @@ When merging a pull request from a community contributor:
 - Thank and congratulate the contributor.
 - Share the merged PR with the team in the #help-promote channel of Fleet Slack to be publicized on social media. Those who contribute to Fleet and are recognized for their contributions often become great champions for the project.
 
+
 ### Close a stale community issue
+
 If a community member opens an issue that we can't reproduce leave a comment asking the author for more context. After one week with no reply, close the issue with a comment letting them know they are welcome to re-open it with any updates.
 
+
 ### Schedule developer on-call workload
+
 Engineering managers are asked to be aware of the [on-call rotation](https://docs.google.com/document/d/1FNQdu23wc1S9Yo6x5k04uxT2RwT77CIMzLLeEI2U7JA/edit#) and schedule a light workload for engineers while they are on-call. While it varies week to week considerably, the on-call responsibilities can sometimes take up a substantial portion of the engineer's time.
 
 We aspire to clear sprint work for the on-call engineer, but due to capacity or other constraints, sometimes the on-call engineer is required for sprint work. When this is the case, the EM will work with the on-call engineer to take over support requests or @oncall assignment completely when necessary.
@@ -361,7 +411,9 @@ Some ideas:
 - Create a blog post (or other content) for fleetdm.com.
 - Try out an experimental refactor. 
 
+
 ### Edit a DNS record
+
 We use Cloudflare to manage the DNS records of fleetdm.com and our other domains. To make DNS changes in Cloudflare:
 1. Log into your Cloudflare account and select the "Fleet" account.
 2. Select the domain you want to change and go to the DNS panel on that domain's dashboard.
@@ -369,22 +421,28 @@ We use Cloudflare to manage the DNS records of fleetdm.com and our other domains
 
 > If you need access to Fleet's Cloudflare account, please ask the [DRI](https://fleetdm.com/handbook/company/why-this-way#why-direct-responsibility) [Luke Heath](https://fleetdm.com/handbook/engineering#team) in Slack for an invitation.
 
+
 ### Assume developer on-call alias
+
 The on-call developer is responsible for: 
 - Knowing [the on-call rotation](https://fleetdm.com/handbook/company/product-groups#the-developer-on-call-rotation).
 - Preforming the [on-call responsibilities](https://fleetdm.com/handbook/company/product-groups#developer-on-call-responsibilities).
 - [Escalating community questions and issues](https://fleetdm.com/handbook/company/product-groups#escalations).
 - Successfully [transferring the on-call persona to the next developer](https://fleetdm.com/handbook/company/product-groups#changing-of-the-guard).
 
+
 ### Notify stakeholders when a user story is pushed to the next release
-[User stories](https://fleetdm.com/handbook/company/product-groups#scrum-items) are intended to be completed in a single sprint. When a user story selected for a release has not merged into `main` by the time the [merge freeze](https://fleetdm.com/handbook/engineering#begin-a-merge-freeze) begins, it is the product group EM's responsibility to notify stakeholders:
+
+[User stories](https://fleetdm.com/handbook/company/product-groups#scrum-items) are intended to be completed in a single sprint. When a user story selected for a release has not merged into `main` by the time the release candidate is created, it is the product group EM's responsibility to notify stakeholders:
 
 1. Add the `~pushed` label to the user story.
 2. Update the user story's milestone to the next minor version milestone.
 3. Comment on the GitHub issue and at-mention the PM and anyone listed in the requester field.
 4. If `customer-` labels are applied to the user story, at-mention the [VP of Customer Success](https://fleetdm.com/handbook/customer-success#team).
 
+
 ### Run Fleet locally for QA purposes
+
 To try Fleet locally for QA purposes, run `fleetctl preview`, which defaults to running the latest stable release.
 
 To target a different version of Fleet, use the `--tag` flag to target any tag in [Docker Hub](https://hub.docker.com/r/fleetdm/fleet/tags?page=1&ordering=last_updated), including any git commit hash or branch name. For example, to QA the latest code on the `main` branch of fleetdm/fleet, you can run: `fleetctl preview --tag=main`.
@@ -395,7 +453,9 @@ For each bug found, please use the [bug report template](https://github.com/flee
 
 For unreleased bugs in an active sprint, a new bug is created with the `~unreleased bug` label. The `:release` label and associated product group label is added, and the engineer responsible for the feature is assigned. If QA is unsure who the bug should be assigned to, it is assigned to the EM. Fixing the bug becomes part of the story.
 
+
 ### Accept new Apple developer account terms
+
 Engineering is responsible for managing third-party accounts required to support engineering infrastructure. We use the official Fleet Apple developer account to notarize installers we generate for Apple devices. Whenever Apple releases new terms of service, we are unable to notarize new packages until the new terms are accepted.
 
 When this occurs, we will begin receiving the following error message when attempting to notarize packages: "You must first sign the relevant contracts online." To resolve this error, follow the steps below.
@@ -410,6 +470,7 @@ When this occurs, we will begin receiving the following error message when attem
 
 5. Accept the new terms of service.
 
+
 ### Interview a developer candidate
 
 Ensure the interview process follows these steps in order. This process must follow [creating a new position](https://fleetdm.com/handbook/company/leadership#creating-a-new-position) through [receiving job applications](https://fleetdm.com/handbook/company/leadership#receiving-job-applications). Once the position is approved manage this process per candidate in a [hiring pipeline](https://drive.google.com/drive/folders/1dLZaor9dQmAxcxyU6prm-MWNd-C-U8_1?usp=drive_link)
@@ -424,7 +485,9 @@ Ensure the interview process follows these steps in order. This process must fol
 
 If the candidate passes all of these steps then continue with [hiring a new team member](https://fleetdm.com/handbook/company/leadership#hiring-a-new-team-member).
 
+
 ### Renew MDM certificate signing request (CSR) 
+
 The certificate signing request (CSR) certificate expires every year. It needs to be renewed prior to expiring. This is notified to the team by the MDM calendar event [IMPORTANT: Renew MDM CSR certificate](https://calendar.google.com/calendar/u/0/r/eventedit/MmdqNTY4dG9nbWZycnNxbDBzYjQ5dGplM2FfMjAyNDA5MDlUMTczMDAwWiBjXzMyMjM3NjgyZGRlOThlMzI4MjVhNTY1ZDEyZjk0MDEyNmNjMWI0ZDljYjZjNjgyYzQ2MjcxZGY0N2UzNjM5NDZAZw)
 
 Steps to renew the certificate:
@@ -444,7 +507,9 @@ Steps to renew the certificate:
 10. Verify by logging into a normal apple account (not billing@...) and Generate a new Push Certificate following our [setup MDM](https://fleetdm.com/docs/using-fleet/mdm-setup) steps and verify the Expiration date is 1 year from today.
 11. Adjust calendar event to be between 2-4 weeks before the next expiration.
 
+
 ### Perform an incident postmortem
+
 Conduct a postmortem meetings for every service or feature outage and every critical bug, whether it's a customer's environment or on fleetdm.com.
 
 1. Copy this [postmortem template](https://docs.google.com/document/d/1Ajp2LfIclWfr4Bm77lnUggkYNQyfjePiWSnBv1b1nwM/edit?usp=sharing) document and pre-populate where possible.
@@ -454,7 +519,9 @@ Conduct a postmortem meetings for every service or feature outage and every crit
 
 [Example Finished Document](https://docs.google.com/document/d/1YnETKhH9R7STAY-PaFnPy2qxhNht2EAFfkv-kyEwebQ/edit?usp=share_link)
 
+
 ### Process incoming equipment
+
 Upon receiving any device, follow these steps to process incoming equipment.
 1. Search for the SN of the physical device in the ["Company equipment" spreadsheet](https://docs.google.com/spreadsheets/d/1hFlymLlRWIaWeVh14IRz03yE-ytBLfUaqVz0VVmmoGI/edit#gid=0) to confirm the correct equipment was received.
 3. Visibly inspect equipment and all related components (e.g. laptop charger) for damage.
@@ -466,7 +533,9 @@ Upon receiving any device, follow these steps to process incoming equipment.
 9. Follow the prompts to activate the device and reinstall the appropriate version of macOS.
 > If you are prevented from completing the steps above, create a ["💻 IT support issue](https://github.com/fleetdm/confidential/issues/new?assignees=%40spokanemac&labels=%3Ahelp-it&projects=&template=request-it-support.md&title=%F0%9F%92%BB+Request+IT+support) for IT, for the device to be scheduled for troubleshooting and remediation. Please note in the issue where you encountered blockers to completing the steps.
 
+
 ### Ship approved equipment
+
 Once the Business Operations department approves inventory to be shipped from Fleet IT, follow these step to ship the equipment.
 1. Compare the equipment request issue with the ["Company equipment" spreadsheet](https://docs.google.com/spreadsheets/d/1hFlymLlRWIaWeVh14IRz03yE-ytBLfUaqVz0VVmmoGI/edit#gid=0) and verify physical inventory.
 2. Plug in the device and ensure inventory has been correctly processed and all components are present (e.g. charger cord, power converter).
@@ -476,9 +545,12 @@ Once the Business Operations department approves inventory to be shipped from Fl
 6. Ship via FedEx to the address listed in the equipment request.
 7. Add a comment to the equipment request issue, at-mentioning the requestor with the FedEx tracking info and close the issue.
 
+
 ## Rituals
+
 <rituals :rituals="rituals['handbook/engineering/engineering.rituals.yml']"></rituals>
 
+
 #### Stubs
 The following stubs are included only to make links backward compatible.
 
@@ -546,6 +618,15 @@ Please see [handbook/engineering#accept-new-apple-developer-account-terms](https
 ##### Merging during the freeze period
 Please see [handbook/engineering#merge-a-pull-request-during-the-freeze-period](https://fleetdm.com/handbook/engineering#merge-a-pull-request-during-the-freeze-period)
 
+##### Merge a bug fix during the freeze period
+Please see [merge-bug-fixes-into-the-release-candidate](https://fleetdm.com/handbook/engineering#merge-bug-fixes-into-the-release-candidate)
+
+##### Merge a pull request during the freeze period
+Please see [merge-bug-fixes-into-the-release-candidate](https://fleetdm.com/handbook/engineering#merge-bug-fixes-into-the-release-candidate)
+
+##### Begin a merge freeze
+Please see [handbook/engineering#create-a-release-candidate](https://fleetdm.com/handbook/engineering#create-a-release-candidate)
+
 ##### Scrum boards
 Please see [handbook//product-groups#current-product-groups](https://fleetdm.com/handbook/engineering#contact-us)
 
diff --git a/handbook/engineering/engineering.rituals.yml b/handbook/engineering/engineering.rituals.yml
index 4ff04b98b9..62432b78c3 100644
--- a/handbook/engineering/engineering.rituals.yml
+++ b/handbook/engineering/engineering.rituals.yml
@@ -43,11 +43,11 @@
   moreInfoUrl: "https://github.com/fleetdm/fleet/security"
   dri: "lukeheath"
 - 
-  task: "Freeze ritual"
+  task: "Release candidate ritual"
   startedOn: "2023-08-09" 
   frequency: "Triweekly"
-  description: "Go through the process of freezing the `main` branch to prepare for the next release."
-  moreInfoUrl: "https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Releasing-Fleet.md#patch-releases"
+  description: "Go through the process of create a release candidate."
+  moreInfoUrl: "https://github.com/fleetdm/fleet/blob/main/tools/release/README.md#minor-release-typically-end-of-sprint"
   dri: "lukeheath"
 - 
   task: "Release ritual"

From 531b25d2accbfea754bb87f05d029ed1647f59fe Mon Sep 17 00:00:00 2001
From: Roberto Dip <dip.jesusr@gmail.com>
Date: Thu, 1 Aug 2024 18:15:41 -0300
Subject: [PATCH 39/88] if a PKG is added as a target, always install it
 (#20971)

previously we were only installing on updates

fixes a bug found by @PezHub

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [x] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
---
 orbit/pkg/update/update.go | 18 +++++++++++++++---
 1 file changed, 15 insertions(+), 3 deletions(-)

diff --git a/orbit/pkg/update/update.go b/orbit/pkg/update/update.go
index f1803ec787..56e4a79b7f 100644
--- a/orbit/pkg/update/update.go
+++ b/orbit/pkg/update/update.go
@@ -385,9 +385,8 @@ func (u *Updater) get(target string) (*LocalTarget, error) {
 				}
 			}
 			if strings.HasSuffix(localTarget.Path, ".pkg") && runtime.GOOS == "darwin" {
-				cmd := exec.Command("installer", "-pkg", localTarget.Path, "-target", "/")
-				if out, err := cmd.CombinedOutput(); err != nil {
-					return nil, fmt.Errorf("running pkgutil to install %s: %s: %w", localTarget.Path, string(out), err)
+				if err := installPKG(localTarget.Path); err != nil {
+					return nil, fmt.Errorf("updating pkg: %w", err)
 				}
 			}
 		} else {
@@ -398,6 +397,11 @@ func (u *Updater) get(target string) (*LocalTarget, error) {
 		if err := u.download(target, repoPath, localTarget.Path, localTarget.Info.CustomCheckExec); err != nil {
 			return nil, fmt.Errorf("download %q: %w", repoPath, err)
 		}
+		if strings.HasSuffix(localTarget.Path, ".pkg") && runtime.GOOS == "darwin" {
+			if err := installPKG(localTarget.Path); err != nil {
+				return nil, fmt.Errorf("installing pkg for the first time: %w", err)
+			}
+		}
 	default:
 		return nil, fmt.Errorf("stat %q: %w", localTarget.Path, err)
 	}
@@ -647,6 +651,14 @@ func extractTarGz(path string) error {
 	}
 }
 
+func installPKG(path string) error {
+	cmd := exec.Command("installer", "-pkg", path, "-target", "/")
+	if out, err := cmd.CombinedOutput(); err != nil {
+		return fmt.Errorf("running pkgutil to install %s: %s: %w", path, string(out), err)
+	}
+	return nil
+}
+
 func (u *Updater) initializeDirectories() error {
 	for _, dir := range []string{
 		filepath.Join(u.opt.RootDirectory, binDir),

From 9e484b46f4f46cbf4feabf1878cf7833d86f6cd5 Mon Sep 17 00:00:00 2001
From: allenhouchins <32207388+allenhouchins@users.noreply.github.com>
Date: Thu, 1 Aug 2024 16:56:42 -0500
Subject: [PATCH 40/88] fixed typo in Apple Business Manager (#20915)

---
 terraform/addons/mdm/README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/terraform/addons/mdm/README.md b/terraform/addons/mdm/README.md
index 0cb04aac59..4acccf3d9b 100644
--- a/terraform/addons/mdm/README.md
+++ b/terraform/addons/mdm/README.md
@@ -1,7 +1,7 @@
 # MDM addon
 
 Notice: Previous versions of this module referred to `dep`, but to reduce confusion that has been replaces with `abm`
-to mach the change to the newer Apple Busines Manager.  For each key/value pair below, the key names have been changed
+to mach the change to the newer Apple Business Manager.  For each key/value pair below, the key names have been changed
 from previous version to match the name of the env var for easier usability.  Older unused env vars were also removed
 for simplification.  This includes removing the need for `extra_environment_variables` completely.
 

From 73c7aa07b9e6533716d962546c48d1496bb945ee Mon Sep 17 00:00:00 2001
From: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
Date: Thu, 1 Aug 2024 18:25:58 -0400
Subject: [PATCH 41/88] =?UTF-8?q?Luke=20is=20DRI=20for=20=F0=9F=A6=A2?=
 =?UTF-8?q?=F0=9F=8D=8E=20Apple=20MDM=20maturity=20review=20(#20960)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 handbook/product-design/product-design.rituals.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/handbook/product-design/product-design.rituals.yml b/handbook/product-design/product-design.rituals.yml
index c72a9a6207..3ab9203579 100644
--- a/handbook/product-design/product-design.rituals.yml
+++ b/handbook/product-design/product-design.rituals.yml
@@ -73,4 +73,4 @@
   frequency: "Weekly" 
   description: "Review stories in the “In review“ column on the drafting board with the “~apple-mdm-maturity“ label. Would this be usable for an IT admin and how does it compare to Jamf?" 
   moreInfoUrl: 
-  dri: "noahtalerman"
+  dri: "lukeheath"

From 0a5ab1eb31e9f3ee3232d9af0d74b6aabe12d6ef Mon Sep 17 00:00:00 2001
From: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
Date: Fri, 2 Aug 2024 08:37:27 +0900
Subject: [PATCH 42/88] Footer text style fix (#20976)

Footer text style fix
---
 website/assets/styles/pages/homepage.less | 15 ++++++++++-----
 website/views/pages/homepage.ejs          |  2 +-
 2 files changed, 11 insertions(+), 6 deletions(-)

diff --git a/website/assets/styles/pages/homepage.less b/website/assets/styles/pages/homepage.less
index b9f9f5b262..489671a645 100644
--- a/website/assets/styles/pages/homepage.less
+++ b/website/assets/styles/pages/homepage.less
@@ -643,6 +643,16 @@
     }
   }
 
+  [purpose='bottom-cta'] {
+      h1 {
+        font-size: 48px;
+        max-width: 640px;
+        &.vm {
+          max-width: unset;
+        }
+      }
+    }
+
   [purpose='video-modal'] {
     [purpose='modal-dialog'] {
       width: 100%;
@@ -711,11 +721,6 @@
     [purpose='integrations-section'] {
       margin-top: 160px;
     }
-    [purpose='bottom-cta'] {
-      h1 {
-        font-size: 48px;
-      }
-    }
     [purpose='video-modal'] {
       [purpose='modal-dialog'] {
         width: 100%;
diff --git a/website/views/pages/homepage.ejs b/website/views/pages/homepage.ejs
index 99d70bfbaa..365b33a3ab 100644
--- a/website/views/pages/homepage.ejs
+++ b/website/views/pages/homepage.ejs
@@ -373,7 +373,7 @@
     <div purpose="homepage-content" class="container">
       <div class="text-center" purpose="bottom-cta">
         <h4>For teams with lots of computing devices</h4>
-        <h1><%- partial('../partials/primary-tagline.partial.ejs') %></h1>
+        <h1 class="mx-auto <%= primaryBuyingSituation%>"><%- partial('../partials/primary-tagline.partial.ejs') %></h1>
         <div purpose="button-row" style="margin-top: 40px;" class="d-flex flex-sm-row flex-column justify-content-center align-items-center mx-auto">
           <a purpose="cta-button" href="/register">Start now</a>
           <animated-arrow-button href="/contact">Talk to us</animated-arrow-button>

From 841518f729fc9ec24347d369855e3748a1660e87 Mon Sep 17 00:00:00 2001
From: Mike McNeil <mikermcneil@users.noreply.github.com>
Date: Fri, 2 Aug 2024 03:05:10 -0500
Subject: [PATCH 43/88] Update vulnerability-management.ejs (#20988)

---
 .../views/pages/vulnerability-management.ejs   | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/website/views/pages/vulnerability-management.ejs b/website/views/pages/vulnerability-management.ejs
index bf571b88ac..adca60393d 100644
--- a/website/views/pages/vulnerability-management.ejs
+++ b/website/views/pages/vulnerability-management.ejs
@@ -3,8 +3,8 @@
     <div purpose="page-content" class="mx-auto">
       <div purpose="hero">
         <div purpose="page-headline">
-          <h4>Vulnerability management</h4>
-          <h2>Build the vulnerability program you actually want</h2>
+          <h4>Open-source vulnerability reporting</h4>
+          <h2>Check vulnerabilities anywhere</h2>
         </div>
         <div purpose="hero-content" class="d-flex flex-md-row flex-column align-items-center justify-content-between">
           <div purpose="hero-image">
@@ -12,14 +12,14 @@
           </div>
           <div purpose="hero-text">
             <strong>Report what matters</strong>
-            <p>Let's face it, most built-in graphs leave you wanting more. Report MTTR and any other custom metrics exactly the way you want to using fresh data from real computers.</p>
+            <p>Report exactly when CVEs got fixed or mitigated, down to the hour</p>
             <strong>Deep context from the environment</strong>
             <p>Fleet gives you data down to the chip level on every endpoint to help you make sense of which vulnerabilities to prioritize.</p>
             <strong>Untangle your security stack</strong>
             <p>Use open data and APIs to connect your vulnerability solution with osquery, the agent you might already have deployed.</p>
             <div purpose="button-row" class="d-flex flex-md-row flex-column justify-content-start align-items-center">
-              <a purpose="cta-button" href="/register">Start now</a>
-              <animated-arrow-button href="/contact">Talk to us</animated-arrow-button>
+              <a purpose="cta-button" href="/register">Try localhost</a>
+              <animated-arrow-button href="/support">Ask us anything</animated-arrow-button>
             </div>
           </div>
         </div>
@@ -140,11 +140,11 @@
     <div purpose="page-container" class="pb-0 container">
 
       <div purpose="section-heading" class="text-center">
-        <h4>Open-source vulnerability management</h4>
-        <h2>Build the vulnerability program you actually want</h2>
+        <h4>Open-source vulnerability reporting</h4>
+        <h2>Check vulnerabilities anywhere</h2>
         <div purpose="button-row" style="margin-top: 32px;" class="d-flex flex-md-row flex-column justify-content-center align-items-center mx-auto">
-          <a purpose="cta-button" href="/register">Start now</a>
-          <animated-arrow-button href="/contact">Talk to us</animated-arrow-button>
+          <a purpose="cta-button" href="/register">Try localhost</a>
+          <animated-arrow-button href="/support">Get help</animated-arrow-button>
         </div>
       </div>
     </div>

From b1bb4d9dd513c845e168f5a73a2b39e7f6cdd4fe Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Fri, 2 Aug 2024 06:50:22 -0300
Subject: [PATCH 44/88] Update versions of fleetd components in Fleet's TUF
 [automated] (#20983)

Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
---
 orbit/TUF.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/orbit/TUF.md b/orbit/TUF.md
index 1671d78545..53be1e46e8 100644
--- a/orbit/TUF.md
+++ b/orbit/TUF.md
@@ -19,6 +19,6 @@ Following are the currently deployed versions of fleetd components on the `stabl
 |--------------|--------|--------|---------|---------------|
 | orbit        | 1.29.0 | 1.29.0 | 1.29.0  | 1.29.0        |
 | desktop      | 1.29.0 | 1.29.0 | 1.29.0  | 1.29.0        |
-| osqueryd     | 5.12.2 | 5.12.2 | 5.12.2  | 5.12.1        |
+| osqueryd     | 5.13.0 | 5.13.0 | 5.13.0  | 5.13.0        |
 | nudge        | -      | -      | -       | -             |
 | swiftDialog  | -      | -      | -       | -             |

From e3c3c870c9636c09ed561c7ecec07082250990d8 Mon Sep 17 00:00:00 2001
From: Tim Lee <timlee@fleetdm.com>
Date: Fri, 2 Aug 2024 04:33:57 -0600
Subject: [PATCH 45/88] Ignore Rejected CVEs Test (#19974)

#18913

This is a test to ensure Rejected CVEs do not match against software.
The related PR needs to be merged first, otherwise this test will fail:

https://github.com/fleetdm/fleet/pull/19972

- [X] Added/updated tests
---
 server/vulnerabilities/nvd/cve_test.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/server/vulnerabilities/nvd/cve_test.go b/server/vulnerabilities/nvd/cve_test.go
index c69897179d..fb8ac08070 100644
--- a/server/vulnerabilities/nvd/cve_test.go
+++ b/server/vulnerabilities/nvd/cve_test.go
@@ -320,6 +320,7 @@ func TestTranslateCPEToCVE(t *testing.T) {
 			},
 			excludedCVEs: []string{
 				"CVE-2023-28205", // This vulnerability is for Safari 16.4.0
+				"CVE-2024-23252", // Rejected CVE
 			},
 			continuesToUpdate: true,
 		},

From 83d3c6e6bece8213d14bd3f3250ea713dd0ed5be Mon Sep 17 00:00:00 2001
From: Gabriel Hernandez <ghernandez345@gmail.com>
Date: Fri, 2 Aug 2024 12:49:25 +0100
Subject: [PATCH 46/88] update Other Workflows modal on policy page to be
 disabled when the form is submitted. (#20933)

relates to #20617

Adds disabled overlay to the other workflows modal on the policy page.
This required a change to the modal component to render this new overlay
and make that accessible to the consumer via a `isContentDisabled` prop


![image](https://github.com/user-attachments/assets/84811ee1-f11f-426f-a2da-9d14c41840ab)

Also there are improvements to the my Add policy modal. It seemed to not
work with the new modal HTML structure so I fixed and improved how its
handling its scrollable content.

> NOTE: I did my own manual regression testing to make sure all the
modals still looked and worked properly but please tell me if you see
one that does not.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
---
 ...0933-disable-overlay-other-workflows-modal |  1 +
 frontend/components/Modal/Modal.tsx           | 50 ++++++++++++-------
 frontend/components/Modal/_styles.scss        | 19 ++++++-
 .../components/AddPolicyModal/_styles.scss    | 16 ++++--
 .../OtherWorkflowsModal.tsx                   |  1 +
 5 files changed, 65 insertions(+), 22 deletions(-)
 create mode 100644 changes/20933-disable-overlay-other-workflows-modal

diff --git a/changes/20933-disable-overlay-other-workflows-modal b/changes/20933-disable-overlay-other-workflows-modal
new file mode 100644
index 0000000000..e0386552c5
--- /dev/null
+++ b/changes/20933-disable-overlay-other-workflows-modal
@@ -0,0 +1 @@
+- add a disabled overlay to the Other Workflows modal on the policy page.
diff --git a/frontend/components/Modal/Modal.tsx b/frontend/components/Modal/Modal.tsx
index 8d96a37818..2cc3dccadd 100644
--- a/frontend/components/Modal/Modal.tsx
+++ b/frontend/components/Modal/Modal.tsx
@@ -18,6 +18,11 @@ export interface IModalProps {
   isHidden?: boolean;
   /**    isLoading can be set true to enable targeting elements by loading state */
   isLoading?: boolean;
+  /** isContentDisabled can be set to true to display the modal content as disabled.
+   * At the moment this will place an overlay over the modal content and make it
+   * unclickable.
+   */
+  isContentDisabled?: boolean;
   className?: string;
 }
 
@@ -29,6 +34,7 @@ const Modal = ({
   width = "medium",
   isHidden = false,
   isLoading = false,
+  isContentDisabled = false,
   className,
 }: IModalProps): JSX.Element => {
   useEffect(() => {
@@ -61,26 +67,30 @@ const Modal = ({
     }
   }, [onEnter]);
 
-  const modalContainerClassName = classnames(
-    `${baseClass}__modal_container`,
+  const backgroundClasses = classnames(`${baseClass}__background`, {
+    [`${baseClass}__hidden`]: isHidden,
+  });
+
+  const modalContainerClasses = classnames(
     className,
-    { [`${baseClass}__modal_container__medium`]: width === "medium" },
-    { [`${baseClass}__modal_container__large`]: width === "large" },
-    { [`${baseClass}__modal_container__xlarge`]: width === "xlarge" },
-    { [`${baseClass}__modal_container__auto`]: width === "auto" }
+    `${baseClass}__modal_container`,
+    `${baseClass}__modal_container__${width}`,
+    {
+      [`${className}__loading`]: isLoading,
+    }
   );
 
+  const contentWrapperClasses = classnames(`${baseClass}__content-wrapper`, {
+    [`${baseClass}__content-wrapper-disabled`]: isContentDisabled,
+  });
+
+  const contentClasses = classnames(`${baseClass}__content`, {
+    [`${baseClass}__content-disabled`]: isContentDisabled,
+  });
+
   return (
-    <div
-      className={`${baseClass}__background ${
-        isHidden ? `${baseClass}__hidden` : ""
-      }`}
-    >
-      <div
-        className={`${modalContainerClassName} ${
-          isLoading ? `${className}__loading` : ""
-        }`}
-      >
+    <div className={backgroundClasses}>
+      <div className={modalContainerClasses}>
         <div className={`${baseClass}__header`}>
           <span>{title}</span>
           <div className={`${baseClass}__ex`}>
@@ -89,7 +99,13 @@ const Modal = ({
             </Button>
           </div>
         </div>
-        <div className={`${baseClass}__content`}>{children}</div>
+
+        <div className={contentWrapperClasses}>
+          {isContentDisabled && (
+            <div className={`${baseClass}__disabled-overlay`} />
+          )}
+          <div className={contentClasses}>{children}</div>
+        </div>
       </div>
     </div>
   );
diff --git a/frontend/components/Modal/_styles.scss b/frontend/components/Modal/_styles.scss
index 33fc9939eb..04dc539176 100644
--- a/frontend/components/Modal/_styles.scss
+++ b/frontend/components/Modal/_styles.scss
@@ -16,7 +16,7 @@
     }
   }
 
-  &__content {
+  &__content-wrapper {
     margin-top: $pad-large;
     font-size: $x-small;
 
@@ -100,4 +100,21 @@
       width: auto;
     }
   }
+
+  // these styles are for the modal content when it is disabled
+  &__content-wrapper-disabled {
+    position: relative;
+  }
+
+  &__content-disabled {
+    transition: opacity 150ms ease-in-out;
+    opacity: 0.5; // this adds a disabled effect to the modal content
+  }
+
+  &__disabled-overlay {
+    position: absolute;
+    height: 100%;
+    width: 100%;
+    z-index: 1000;
+  }
 }
diff --git a/frontend/pages/policies/ManagePoliciesPage/components/AddPolicyModal/_styles.scss b/frontend/pages/policies/ManagePoliciesPage/components/AddPolicyModal/_styles.scss
index 924a16b0d8..c1cfe99bb9 100644
--- a/frontend/pages/policies/ManagePoliciesPage/components/AddPolicyModal/_styles.scss
+++ b/frontend/pages/policies/ManagePoliciesPage/components/AddPolicyModal/_styles.scss
@@ -1,17 +1,25 @@
 .add-policy-modal {
   height: 90%;
   overflow: hidden;
-  min-height: 460px;
-  max-height: fit-content;
+
+  // we have to reach into the modal component classes to style the content
+  // correctly. This is because this modal always has a fixed height and
+  // the content is scrollable.
+  .modal__content-wrapper {
+    height: 95%;
+  }
 
   .modal__content {
-    height: 90%;
-    overflow: scroll;
+    height: 100%;
     display: flex;
     flex-direction: column;
     gap: $pad-large;
   }
 
+  &__policy-selection {
+    overflow-y: auto;
+  }
+
   .Select-multi-value-wrapper {
     display: flex;
   }
diff --git a/frontend/pages/policies/ManagePoliciesPage/components/OtherWorkflowsModal/OtherWorkflowsModal.tsx b/frontend/pages/policies/ManagePoliciesPage/components/OtherWorkflowsModal/OtherWorkflowsModal.tsx
index 75c66b5fd7..d34ae56ff6 100644
--- a/frontend/pages/policies/ManagePoliciesPage/components/OtherWorkflowsModal/OtherWorkflowsModal.tsx
+++ b/frontend/pages/policies/ManagePoliciesPage/components/OtherWorkflowsModal/OtherWorkflowsModal.tsx
@@ -367,6 +367,7 @@ const OtherWorkflowsModal = ({
       title="Other workflows"
       className={baseClass}
       width="large"
+      isContentDisabled={isUpdating}
     >
       <div className={`${baseClass} form`}>
         <Slider

From 13eb8f384ed5a0db68d0d741dcd51f538401c7dc Mon Sep 17 00:00:00 2001
From: Gabriel Hernandez <ghernandez345@gmail.com>
Date: Fri, 2 Aug 2024 12:52:52 +0100
Subject: [PATCH 47/88] fix issue with stacking banners after VPP banner was
 added (#20938)

relates to #20939

fix an issue with stacking banners on the host details page after VPP
warning banner was added.

This also moves up the banner states into the app config to cut down on
code duplication on the host details page and the main content
component.

- [x] Manual QA for all new/changed functionality
---
 .../components/MainContent/MainContent.tsx    | 22 +++++++---------
 frontend/context/app.tsx                      | 25 ++++++++++++++++++
 .../HostDetailsBanners/HostDetailsBanners.tsx | 26 ++++++++++---------
 3 files changed, 48 insertions(+), 25 deletions(-)

diff --git a/frontend/components/MainContent/MainContent.tsx b/frontend/components/MainContent/MainContent.tsx
index 5c322637d6..ad31ba4711 100644
--- a/frontend/components/MainContent/MainContent.tsx
+++ b/frontend/components/MainContent/MainContent.tsx
@@ -37,9 +37,12 @@ const MainContent = ({
     config,
     isPremiumTier,
     noSandboxHosts,
-    apnsExpiry = "",
-    abmExpiry = "",
-    vppExpiry = "",
+    isApplePnsExpired,
+    isAppleBmExpired,
+    isVppExpired,
+    willAppleBmExpire,
+    willApplePnsExpire,
+    willVppExpire,
   } = useContext(AppContext);
 
   const sandboxExpiryTime =
@@ -49,29 +52,22 @@ const MainContent = ({
 
   const renderAppWideBanner = () => {
     const isAppleBmTermsExpired = config?.mdm?.apple_bm_terms_expired;
-    const isApplePnsExpired = hasLicenseExpired(apnsExpiry);
-    const willApplePnsExpireIn30Days = willExpireWithinXDays(apnsExpiry, 30);
-    const isAppleBmExpired = hasLicenseExpired(abmExpiry); // NOTE: See Rachel's related FIXME added to App.tsx in https://github.com/fleetdm/fleet/pull/19571
-    const willAppleBmExpireIn30Days = willExpireWithinXDays(abmExpiry, 30);
     const isFleetLicenseExpired = hasLicenseExpired(
       config?.license.expiration || ""
     );
 
-    const isVppExpired = hasLicenseExpired(vppExpiry);
-    const willVppExpireIn30Days = willExpireWithinXDays(vppExpiry, 30);
-
     let banner: JSX.Element | null = null;
 
     if (isPremiumTier) {
-      if (isApplePnsExpired || willApplePnsExpireIn30Days) {
+      if (isApplePnsExpired || willApplePnsExpire) {
         banner = <ApplePNCertRenewalMessage expired={isApplePnsExpired} />;
-      } else if (isAppleBmExpired || willAppleBmExpireIn30Days) {
+      } else if (isAppleBmExpired || willAppleBmExpire) {
         banner = <AppleBMRenewalMessage expired={isAppleBmExpired} />;
       } else if (isAppleBmTermsExpired) {
         banner = <AppleBMTermsMessage />;
       } else if (isFleetLicenseExpired) {
         banner = <LicenseExpirationBanner />;
-      } else if (isVppExpired || willVppExpireIn30Days) {
+      } else if (isVppExpired || willVppExpire) {
         banner = <VppRenewalMessage expired={isVppExpired} />;
       }
     }
diff --git a/frontend/context/app.tsx b/frontend/context/app.tsx
index bf84e72aa3..da774708d9 100644
--- a/frontend/context/app.tsx
+++ b/frontend/context/app.tsx
@@ -11,6 +11,7 @@ import {
 import { IUser } from "interfaces/user";
 import permissions from "utilities/permissions";
 import sort from "utilities/sort";
+import { hasLicenseExpired, willExpireWithinXDays } from "utilities/helpers";
 
 enum ACTIONS {
   SET_AVAILABLE_TEAMS = "SET_AVAILABLE_TEAMS",
@@ -144,6 +145,12 @@ type InitialStateType = {
   isOnlyObserver?: boolean;
   isObserverPlus?: boolean;
   isNoAccess?: boolean;
+  isAppleBmExpired: boolean;
+  isApplePnsExpired: boolean;
+  isVppExpired: boolean;
+  willAppleBmExpire: boolean;
+  willApplePnsExpire: boolean;
+  willVppExpire: boolean;
   abmExpiry?: string;
   apnsExpiry?: string;
   vppExpiry?: string;
@@ -206,6 +213,12 @@ export const initialState = {
   filteredSoftwarePath: undefined,
   filteredQueriesPath: undefined,
   filteredPoliciesPath: undefined,
+  isAppleBmExpired: false,
+  isApplePnsExpired: false,
+  isVppExpired: false,
+  willAppleBmExpire: false,
+  willApplePnsExpire: false,
+  willVppExpire: false,
   setAvailableTeams: () => null,
   setCurrentUser: () => null,
   setCurrentTeam: () => null,
@@ -339,6 +352,8 @@ const reducer = (state: InitialStateType, action: IAction) => {
       return {
         ...state,
         abmExpiry,
+        isAppleBmExpired: hasLicenseExpired(abmExpiry),
+        willAppleBmExpire: willExpireWithinXDays(abmExpiry, 30),
       };
     }
     case ACTIONS.SET_APNS_EXPIRY: {
@@ -346,6 +361,8 @@ const reducer = (state: InitialStateType, action: IAction) => {
       return {
         ...state,
         apnsExpiry,
+        isApplePnsExpired: hasLicenseExpired(apnsExpiry),
+        willApplePnsExpire: willExpireWithinXDays(apnsExpiry, 30),
       };
     }
     case ACTIONS.SET_VPP_EXPIRY: {
@@ -353,6 +370,8 @@ const reducer = (state: InitialStateType, action: IAction) => {
       return {
         ...state,
         vppExpiry,
+        isVppExpired: hasLicenseExpired(vppExpiry),
+        willVppExpire: willExpireWithinXDays(vppExpiry, 30),
       };
     }
     case ACTIONS.SET_SANDBOX_EXPIRY: {
@@ -418,6 +437,12 @@ const AppProvider = ({ children }: Props): JSX.Element => {
     abmExpiry: state.abmExpiry,
     apnsExpiry: state.apnsExpiry,
     vppExpiry: state.vppExpiry,
+    isAppleBmExpired: state.isAppleBmExpired,
+    isApplePnsExpired: state.isApplePnsExpired,
+    isVppExpired: state.isVppExpired,
+    willAppleBmExpire: state.willAppleBmExpire,
+    willApplePnsExpire: state.willApplePnsExpire,
+    willVppExpire: state.willVppExpire,
     noSandboxHosts: state.noSandboxHosts,
     filteredHostsPath: state.filteredHostsPath,
     filteredSoftwarePath: state.filteredSoftwarePath,
diff --git a/frontend/pages/hosts/details/HostDetailsPage/components/HostDetailsBanners/HostDetailsBanners.tsx b/frontend/pages/hosts/details/HostDetailsPage/components/HostDetailsBanners/HostDetailsBanners.tsx
index 89632164b0..2a35d4a418 100644
--- a/frontend/pages/hosts/details/HostDetailsPage/components/HostDetailsBanners/HostDetailsBanners.tsx
+++ b/frontend/pages/hosts/details/HostDetailsPage/components/HostDetailsBanners/HostDetailsBanners.tsx
@@ -23,21 +23,21 @@ const HostDetailsBanners = ({
   connectedToFleetMdm,
   diskEncryptionStatus,
 }: IHostDetailsBannersProps) => {
-  const { config, isPremiumTier, apnsExpiry, abmExpiry } = useContext(
-    AppContext
-  );
+  const {
+    config,
+    isPremiumTier,
+    isAppleBmExpired,
+    isApplePnsExpired,
+    isVppExpired,
+    willAppleBmExpire,
+    willApplePnsExpire,
+    willVppExpire,
+  } = useContext(AppContext);
 
   // Checks to see if an app-wide banner is being shown (the ABM terms, ABM expiry,
   // or APNs expiry banner) in a parent component. App-wide banners found in parent
   // component take priority over host details page-level banners.
   const isAppleBmTermsExpired = config?.mdm?.apple_bm_terms_expired;
-  const isApplePnsExpired = hasLicenseExpired(apnsExpiry || "");
-  const willApplePnsExpireIn30Days = willExpireWithinXDays(
-    apnsExpiry || "",
-    30
-  );
-  const isAppleBmExpired = hasLicenseExpired(abmExpiry || "");
-  const willAppleBmExpireIn30Days = willExpireWithinXDays(abmExpiry || "", 30);
   const isFleetLicenseExpired = hasLicenseExpired(
     config?.license.expiration || ""
   );
@@ -46,9 +46,11 @@ const HostDetailsBanners = ({
     isPremiumTier &&
     (isAppleBmTermsExpired ||
       isApplePnsExpired ||
-      willApplePnsExpireIn30Days ||
+      willApplePnsExpire ||
       isAppleBmExpired ||
-      willAppleBmExpireIn30Days ||
+      willAppleBmExpire ||
+      isVppExpired ||
+      willVppExpire ||
       isFleetLicenseExpired);
 
   const isMdmUnenrolled =

From 695801bff6f4456ab0eb16598f575cb0d9d9679e Mon Sep 17 00:00:00 2001
From: RachelElysia <71795832+RachelElysia@users.noreply.github.com>
Date: Fri, 2 Aug 2024 09:42:49 -0400
Subject: [PATCH 48/88] Fleet UI: Navigate between no teams tabs (#20969)

---
 frontend/components/top_nav/SiteTopNav/SiteTopNav.tsx | 8 +++-----
 frontend/components/top_nav/SiteTopNav/navItems.ts    | 5 ++---
 frontend/components/top_nav/UserMenu/UserMenu.tsx     | 4 +---
 3 files changed, 6 insertions(+), 11 deletions(-)

diff --git a/frontend/components/top_nav/SiteTopNav/SiteTopNav.tsx b/frontend/components/top_nav/SiteTopNav/SiteTopNav.tsx
index 86944020b6..7dbf45785d 100644
--- a/frontend/components/top_nav/SiteTopNav/SiteTopNav.tsx
+++ b/frontend/components/top_nav/SiteTopNav/SiteTopNav.tsx
@@ -56,6 +56,7 @@ const REGEX_GLOBAL_PAGES = {
 
 const REGEX_EXCLUDE_NO_TEAM_PAGES = {
   MANAGE_POLICIES: /\/policies\/manage/i,
+  MANAGE_QUERIES: /\/queries\/manage/i,
 };
 
 const testDetailPage = (path: string, re: RegExp) => {
@@ -96,7 +97,6 @@ const SiteTopNav = ({
     isGlobalMaintainer,
     isAnyTeamMaintainer,
     isNoAccess,
-    isSandboxMode,
   } = useContext(AppContext);
 
   const isActiveDetailPage = isDetailPage(currentPath);
@@ -187,7 +187,7 @@ const SiteTopNav = ({
           <LinkWithContext
             className={`${navItemBaseClass}__link`}
             withParams={withParams}
-            currentQueryParams={currentQueryParams}
+            currentQueryParams={{ team_id: currentQueryParams.team_id }}
             to={navItem.location.pathname}
           >
             <span
@@ -220,8 +220,7 @@ const SiteTopNav = ({
     isAnyTeamAdmin,
     isAnyTeamMaintainer,
     isGlobalMaintainer,
-    isNoAccess,
-    isSandboxMode
+    isNoAccess
   );
 
   const renderNavItems = () => {
@@ -238,7 +237,6 @@ const SiteTopNav = ({
           currentUser={currentUser}
           isAnyTeamAdmin={isAnyTeamAdmin}
           isGlobalAdmin={isGlobalAdmin}
-          isSandboxMode={isSandboxMode}
         />
       </div>
     );
diff --git a/frontend/components/top_nav/SiteTopNav/navItems.ts b/frontend/components/top_nav/SiteTopNav/navItems.ts
index cbf0654723..00e145ae4b 100644
--- a/frontend/components/top_nav/SiteTopNav/navItems.ts
+++ b/frontend/components/top_nav/SiteTopNav/navItems.ts
@@ -27,8 +27,7 @@ export default (
   isAnyTeamAdmin = false,
   isAnyTeamMaintainer = false,
   isGlobalMaintainer = false,
-  isNoAccess = false,
-  isSandboxMode = false
+  isNoAccess = false
 ): INavItem[] => {
   if (!user) {
     return [];
@@ -67,7 +66,7 @@ export default (
         regex: new RegExp(`^${URL_PREFIX}/controls/`),
         pathname: PATHS.CONTROLS,
       },
-      exclude: isSandboxMode || !isMaintainerOrAdmin,
+      exclude: !isMaintainerOrAdmin,
       withParams: { type: "query", names: ["team_id"] },
     },
     {
diff --git a/frontend/components/top_nav/UserMenu/UserMenu.tsx b/frontend/components/top_nav/UserMenu/UserMenu.tsx
index 4e08464120..38f7986a43 100644
--- a/frontend/components/top_nav/UserMenu/UserMenu.tsx
+++ b/frontend/components/top_nav/UserMenu/UserMenu.tsx
@@ -17,7 +17,6 @@ interface IUserMenuProps {
   isAnyTeamAdmin: boolean | undefined;
   isGlobalAdmin: boolean | undefined;
   currentUser: IUser;
-  isSandboxMode?: boolean;
 }
 
 const UserMenu = ({
@@ -26,7 +25,6 @@ const UserMenu = ({
   isAnyTeamAdmin,
   isGlobalAdmin,
   currentUser,
-  isSandboxMode = false,
 }: IUserMenuProps): JSX.Element => {
   const accountNavigate = onNavItemClick(PATHS.ACCOUNT);
   const dropdownItems = [
@@ -44,7 +42,7 @@ const UserMenu = ({
     },
   ];
 
-  if (isGlobalAdmin && !isSandboxMode) {
+  if (isGlobalAdmin) {
     const manageUsersNavigate = onNavItemClick(PATHS.ADMIN_USERS);
 
     const manageUserNavItem = {

From 0a15647e108f0291598c78636f8e890872cf8310 Mon Sep 17 00:00:00 2001
From: Dante Catalfamo <43040593+dantecatalfamo@users.noreply.github.com>
Date: Fri, 2 Aug 2024 10:47:40 -0400
Subject: [PATCH 49/88] Host software deleted at remigration (#20996)

# Recreate out of order migration, replace `docker-compose` with `docker compose` in db test runner
---
 .github/workflows/test-db-changes.yml                      | 2 +-
 ...=> 20240802101043_AddSoftwareInstallResultDeletedAt.go} | 7 ++++---
 server/datastore/mysql/schema.sql                          | 2 +-
 tools/dbutils/schema_generator.go                          | 2 +-
 4 files changed, 7 insertions(+), 6 deletions(-)
 rename server/datastore/mysql/migrations/tables/{20240729120947_AddSoftwareInstallResultDeletedAt.go => 20240802101043_AddSoftwareInstallResultDeletedAt.go} (75%)

diff --git a/.github/workflows/test-db-changes.yml b/.github/workflows/test-db-changes.yml
index 301645008e..ecfe464072 100644
--- a/.github/workflows/test-db-changes.yml
+++ b/.github/workflows/test-db-changes.yml
@@ -46,7 +46,7 @@ jobs:
 
     - name: Start Infra Dependencies
       # Use & to background this
-      run: docker-compose up -d mysql_test &
+      run: docker compose up -d mysql_test &
 
     - name: Verify test schema changes
       run: |
diff --git a/server/datastore/mysql/migrations/tables/20240729120947_AddSoftwareInstallResultDeletedAt.go b/server/datastore/mysql/migrations/tables/20240802101043_AddSoftwareInstallResultDeletedAt.go
similarity index 75%
rename from server/datastore/mysql/migrations/tables/20240729120947_AddSoftwareInstallResultDeletedAt.go
rename to server/datastore/mysql/migrations/tables/20240802101043_AddSoftwareInstallResultDeletedAt.go
index bd4219364d..b5f7e79213 100644
--- a/server/datastore/mysql/migrations/tables/20240729120947_AddSoftwareInstallResultDeletedAt.go
+++ b/server/datastore/mysql/migrations/tables/20240802101043_AddSoftwareInstallResultDeletedAt.go
@@ -6,10 +6,11 @@ import (
 )
 
 func init() {
-	MigrationClient.AddMigration(Up_20240729120947, Down_20240729120947)
+	MigrationClient.AddMigration(Up_20240802101043, Down_20240802101043)
 }
 
-func Up_20240729120947(tx *sql.Tx) error {
+// This is a new copy of a previous out-of-order migration
+func Up_20240802101043(tx *sql.Tx) error {
 	_, err := tx.Exec("ALTER TABLE host_software_installs ADD COLUMN host_deleted_at timestamp NULL DEFAULT NULL")
 	if err != nil {
 		return fmt.Errorf("failed to create host_deleted_at column on host_software_installs table: %w", err)
@@ -33,6 +34,6 @@ AND
 	return nil
 }
 
-func Down_20240729120947(tx *sql.Tx) error {
+func Down_20240802101043(tx *sql.Tx) error {
 	return nil
 }
diff --git a/server/datastore/mysql/schema.sql b/server/datastore/mysql/schema.sql
index 73e02ac322..22ac9295c1 100644
--- a/server/datastore/mysql/schema.sql
+++ b/server/datastore/mysql/schema.sql
@@ -972,7 +972,7 @@ CREATE TABLE `migration_status_tables` (
   UNIQUE KEY `id` (`id`)
 ) /*!50100 TABLESPACE `innodb_system` */ ENGINE=InnoDB AUTO_INCREMENT=294 DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
 /*!40101 SET character_set_client = @saved_cs_client */;
-INSERT INTO `migration_status_tables` VALUES (1,0,1,'2020-01-01 01:01:01'),(2,20161118193812,1,'2020-01-01 01:01:01'),(3,20161118211713,1,'2020-01-01 01:01:01'),(4,20161118212436,1,'2020-01-01 01:01:01'),(5,20161118212515,1,'2020-01-01 01:01:01'),(6,20161118212528,1,'2020-01-01 01:01:01'),(7,20161118212538,1,'2020-01-01 01:01:01'),(8,20161118212549,1,'2020-01-01 01:01:01'),(9,20161118212557,1,'2020-01-01 01:01:01'),(10,20161118212604,1,'2020-01-01 01:01:01'),(11,20161118212613,1,'2020-01-01 01:01:01'),(12,20161118212621,1,'2020-01-01 01:01:01'),(13,20161118212630,1,'2020-01-01 01:01:01'),(14,20161118212641,1,'2020-01-01 01:01:01'),(15,20161118212649,1,'2020-01-01 01:01:01'),(16,20161118212656,1,'2020-01-01 01:01:01'),(17,20161118212758,1,'2020-01-01 01:01:01'),(18,20161128234849,1,'2020-01-01 01:01:01'),(19,20161230162221,1,'2020-01-01 01:01:01'),(20,20170104113816,1,'2020-01-01 01:01:01'),(21,20170105151732,1,'2020-01-01 01:01:01'),(22,20170108191242,1,'2020-01-01 01:01:01'),(23,20170109094020,1,'2020-01-01 01:01:01'),(24,20170109130438,1,'2020-01-01 01:01:01'),(25,20170110202752,1,'2020-01-01 01:01:01'),(26,20170111133013,1,'2020-01-01 01:01:01'),(27,20170117025759,1,'2020-01-01 01:01:01'),(28,20170118191001,1,'2020-01-01 01:01:01'),(29,20170119234632,1,'2020-01-01 01:01:01'),(30,20170124230432,1,'2020-01-01 01:01:01'),(31,20170127014618,1,'2020-01-01 01:01:01'),(32,20170131232841,1,'2020-01-01 01:01:01'),(33,20170223094154,1,'2020-01-01 01:01:01'),(34,20170306075207,1,'2020-01-01 01:01:01'),(35,20170309100733,1,'2020-01-01 01:01:01'),(36,20170331111922,1,'2020-01-01 01:01:01'),(37,20170502143928,1,'2020-01-01 01:01:01'),(38,20170504130602,1,'2020-01-01 01:01:01'),(39,20170509132100,1,'2020-01-01 01:01:01'),(40,20170519105647,1,'2020-01-01 01:01:01'),(41,20170519105648,1,'2020-01-01 01:01:01'),(42,20170831234300,1,'2020-01-01 01:01:01'),(43,20170831234301,1,'2020-01-01 01:01:01'),(44,20170831234303,1,'2020-01-01 01:01:01'),(45,20171116163618,1,'2020-01-01 01:01:01'),(46,20171219164727,1,'2020-01-01 01:01:01'),(47,20180620164811,1,'2020-01-01 01:01:01'),(48,20180620175054,1,'2020-01-01 01:01:01'),(49,20180620175055,1,'2020-01-01 01:01:01'),(50,20191010101639,1,'2020-01-01 01:01:01'),(51,20191010155147,1,'2020-01-01 01:01:01'),(52,20191220130734,1,'2020-01-01 01:01:01'),(53,20200311140000,1,'2020-01-01 01:01:01'),(54,20200405120000,1,'2020-01-01 01:01:01'),(55,20200407120000,1,'2020-01-01 01:01:01'),(56,20200420120000,1,'2020-01-01 01:01:01'),(57,20200504120000,1,'2020-01-01 01:01:01'),(58,20200512120000,1,'2020-01-01 01:01:01'),(59,20200707120000,1,'2020-01-01 01:01:01'),(60,20201011162341,1,'2020-01-01 01:01:01'),(61,20201021104586,1,'2020-01-01 01:01:01'),(62,20201102112520,1,'2020-01-01 01:01:01'),(63,20201208121729,1,'2020-01-01 01:01:01'),(64,20201215091637,1,'2020-01-01 01:01:01'),(65,20210119174155,1,'2020-01-01 01:01:01'),(66,20210326182902,1,'2020-01-01 01:01:01'),(67,20210421112652,1,'2020-01-01 01:01:01'),(68,20210506095025,1,'2020-01-01 01:01:01'),(69,20210513115729,1,'2020-01-01 01:01:01'),(70,20210526113559,1,'2020-01-01 01:01:01'),(71,20210601000001,1,'2020-01-01 01:01:01'),(72,20210601000002,1,'2020-01-01 01:01:01'),(73,20210601000003,1,'2020-01-01 01:01:01'),(74,20210601000004,1,'2020-01-01 01:01:01'),(75,20210601000005,1,'2020-01-01 01:01:01'),(76,20210601000006,1,'2020-01-01 01:01:01'),(77,20210601000007,1,'2020-01-01 01:01:01'),(78,20210601000008,1,'2020-01-01 01:01:01'),(79,20210606151329,1,'2020-01-01 01:01:01'),(80,20210616163757,1,'2020-01-01 01:01:01'),(81,20210617174723,1,'2020-01-01 01:01:01'),(82,20210622160235,1,'2020-01-01 01:01:01'),(83,20210623100031,1,'2020-01-01 01:01:01'),(84,20210623133615,1,'2020-01-01 01:01:01'),(85,20210708143152,1,'2020-01-01 01:01:01'),(86,20210709124443,1,'2020-01-01 01:01:01'),(87,20210712155608,1,'2020-01-01 01:01:01'),(88,20210714102108,1,'2020-01-01 01:01:01'),(89,20210719153709,1,'2020-01-01 01:01:01'),(90,20210721171531,1,'2020-01-01 01:01:01'),(91,20210723135713,1,'2020-01-01 01:01:01'),(92,20210802135933,1,'2020-01-01 01:01:01'),(93,20210806112844,1,'2020-01-01 01:01:01'),(94,20210810095603,1,'2020-01-01 01:01:01'),(95,20210811150223,1,'2020-01-01 01:01:01'),(96,20210818151827,1,'2020-01-01 01:01:01'),(97,20210818151828,1,'2020-01-01 01:01:01'),(98,20210818182258,1,'2020-01-01 01:01:01'),(99,20210819131107,1,'2020-01-01 01:01:01'),(100,20210819143446,1,'2020-01-01 01:01:01'),(101,20210903132338,1,'2020-01-01 01:01:01'),(102,20210915144307,1,'2020-01-01 01:01:01'),(103,20210920155130,1,'2020-01-01 01:01:01'),(104,20210927143115,1,'2020-01-01 01:01:01'),(105,20210927143116,1,'2020-01-01 01:01:01'),(106,20211013133706,1,'2020-01-01 01:01:01'),(107,20211013133707,1,'2020-01-01 01:01:01'),(108,20211102135149,1,'2020-01-01 01:01:01'),(109,20211109121546,1,'2020-01-01 01:01:01'),(110,20211110163320,1,'2020-01-01 01:01:01'),(111,20211116184029,1,'2020-01-01 01:01:01'),(112,20211116184030,1,'2020-01-01 01:01:01'),(113,20211202092042,1,'2020-01-01 01:01:01'),(114,20211202181033,1,'2020-01-01 01:01:01'),(115,20211207161856,1,'2020-01-01 01:01:01'),(116,20211216131203,1,'2020-01-01 01:01:01'),(117,20211221110132,1,'2020-01-01 01:01:01'),(118,20220107155700,1,'2020-01-01 01:01:01'),(119,20220125105650,1,'2020-01-01 01:01:01'),(120,20220201084510,1,'2020-01-01 01:01:01'),(121,20220208144830,1,'2020-01-01 01:01:01'),(122,20220208144831,1,'2020-01-01 01:01:01'),(123,20220215152203,1,'2020-01-01 01:01:01'),(124,20220223113157,1,'2020-01-01 01:01:01'),(125,20220307104655,1,'2020-01-01 01:01:01'),(126,20220309133956,1,'2020-01-01 01:01:01'),(127,20220316155700,1,'2020-01-01 01:01:01'),(128,20220323152301,1,'2020-01-01 01:01:01'),(129,20220330100659,1,'2020-01-01 01:01:01'),(130,20220404091216,1,'2020-01-01 01:01:01'),(131,20220419140750,1,'2020-01-01 01:01:01'),(132,20220428140039,1,'2020-01-01 01:01:01'),(133,20220503134048,1,'2020-01-01 01:01:01'),(134,20220524102918,1,'2020-01-01 01:01:01'),(135,20220526123327,1,'2020-01-01 01:01:01'),(136,20220526123328,1,'2020-01-01 01:01:01'),(137,20220526123329,1,'2020-01-01 01:01:01'),(138,20220608113128,1,'2020-01-01 01:01:01'),(139,20220627104817,1,'2020-01-01 01:01:01'),(140,20220704101843,1,'2020-01-01 01:01:01'),(141,20220708095046,1,'2020-01-01 01:01:01'),(142,20220713091130,1,'2020-01-01 01:01:01'),(143,20220802135510,1,'2020-01-01 01:01:01'),(144,20220818101352,1,'2020-01-01 01:01:01'),(145,20220822161445,1,'2020-01-01 01:01:01'),(146,20220831100036,1,'2020-01-01 01:01:01'),(147,20220831100151,1,'2020-01-01 01:01:01'),(148,20220908181826,1,'2020-01-01 01:01:01'),(149,20220914154915,1,'2020-01-01 01:01:01'),(150,20220915165115,1,'2020-01-01 01:01:01'),(151,20220915165116,1,'2020-01-01 01:01:01'),(152,20220928100158,1,'2020-01-01 01:01:01'),(153,20221014084130,1,'2020-01-01 01:01:01'),(154,20221027085019,1,'2020-01-01 01:01:01'),(155,20221101103952,1,'2020-01-01 01:01:01'),(156,20221104144401,1,'2020-01-01 01:01:01'),(157,20221109100749,1,'2020-01-01 01:01:01'),(158,20221115104546,1,'2020-01-01 01:01:01'),(159,20221130114928,1,'2020-01-01 01:01:01'),(160,20221205112142,1,'2020-01-01 01:01:01'),(161,20221216115820,1,'2020-01-01 01:01:01'),(162,20221220195934,1,'2020-01-01 01:01:01'),(163,20221220195935,1,'2020-01-01 01:01:01'),(164,20221223174807,1,'2020-01-01 01:01:01'),(165,20221227163855,1,'2020-01-01 01:01:01'),(166,20221227163856,1,'2020-01-01 01:01:01'),(167,20230202224725,1,'2020-01-01 01:01:01'),(168,20230206163608,1,'2020-01-01 01:01:01'),(169,20230214131519,1,'2020-01-01 01:01:01'),(170,20230303135738,1,'2020-01-01 01:01:01'),(171,20230313135301,1,'2020-01-01 01:01:01'),(172,20230313141819,1,'2020-01-01 01:01:01'),(173,20230315104937,1,'2020-01-01 01:01:01'),(174,20230317173844,1,'2020-01-01 01:01:01'),(175,20230320133602,1,'2020-01-01 01:01:01'),(176,20230330100011,1,'2020-01-01 01:01:01'),(177,20230330134823,1,'2020-01-01 01:01:01'),(178,20230405232025,1,'2020-01-01 01:01:01'),(179,20230408084104,1,'2020-01-01 01:01:01'),(180,20230411102858,1,'2020-01-01 01:01:01'),(181,20230421155932,1,'2020-01-01 01:01:01'),(182,20230425082126,1,'2020-01-01 01:01:01'),(183,20230425105727,1,'2020-01-01 01:01:01'),(184,20230501154913,1,'2020-01-01 01:01:01'),(185,20230503101418,1,'2020-01-01 01:01:01'),(186,20230515144206,1,'2020-01-01 01:01:01'),(187,20230517140952,1,'2020-01-01 01:01:01'),(188,20230517152807,1,'2020-01-01 01:01:01'),(189,20230518114155,1,'2020-01-01 01:01:01'),(190,20230520153236,1,'2020-01-01 01:01:01'),(191,20230525151159,1,'2020-01-01 01:01:01'),(192,20230530122103,1,'2020-01-01 01:01:01'),(193,20230602111827,1,'2020-01-01 01:01:01'),(194,20230608103123,1,'2020-01-01 01:01:01'),(195,20230629140529,1,'2020-01-01 01:01:01'),(196,20230629140530,1,'2020-01-01 01:01:01'),(197,20230711144622,1,'2020-01-01 01:01:01'),(198,20230721135421,1,'2020-01-01 01:01:01'),(199,20230721161508,1,'2020-01-01 01:01:01'),(200,20230726115701,1,'2020-01-01 01:01:01'),(201,20230807100822,1,'2020-01-01 01:01:01'),(202,20230814150442,1,'2020-01-01 01:01:01'),(203,20230823122728,1,'2020-01-01 01:01:01'),(204,20230906152143,1,'2020-01-01 01:01:01'),(205,20230911163618,1,'2020-01-01 01:01:01'),(206,20230912101759,1,'2020-01-01 01:01:01'),(207,20230915101341,1,'2020-01-01 01:01:01'),(208,20230918132351,1,'2020-01-01 01:01:01'),(209,20231004144339,1,'2020-01-01 01:01:01'),(210,20231009094541,1,'2020-01-01 01:01:01'),(211,20231009094542,1,'2020-01-01 01:01:01'),(212,20231009094543,1,'2020-01-01 01:01:01'),(213,20231009094544,1,'2020-01-01 01:01:01'),(214,20231016091915,1,'2020-01-01 01:01:01'),(215,20231024174135,1,'2020-01-01 01:01:01'),(216,20231025120016,1,'2020-01-01 01:01:01'),(217,20231025160156,1,'2020-01-01 01:01:01'),(218,20231031165350,1,'2020-01-01 01:01:01'),(219,20231106144110,1,'2020-01-01 01:01:01'),(220,20231107130934,1,'2020-01-01 01:01:01'),(221,20231109115838,1,'2020-01-01 01:01:01'),(222,20231121054530,1,'2020-01-01 01:01:01'),(223,20231122101320,1,'2020-01-01 01:01:01'),(224,20231130132828,1,'2020-01-01 01:01:01'),(225,20231130132931,1,'2020-01-01 01:01:01'),(226,20231204155427,1,'2020-01-01 01:01:01'),(227,20231206142340,1,'2020-01-01 01:01:01'),(228,20231207102320,1,'2020-01-01 01:01:01'),(229,20231207102321,1,'2020-01-01 01:01:01'),(230,20231207133731,1,'2020-01-01 01:01:01'),(231,20231212094238,1,'2020-01-01 01:01:01'),(232,20231212095734,1,'2020-01-01 01:01:01'),(233,20231212161121,1,'2020-01-01 01:01:01'),(234,20231215122713,1,'2020-01-01 01:01:01'),(235,20231219143041,1,'2020-01-01 01:01:01'),(236,20231224070653,1,'2020-01-01 01:01:01'),(237,20240110134315,1,'2020-01-01 01:01:01'),(238,20240119091637,1,'2020-01-01 01:01:01'),(239,20240126020642,1,'2020-01-01 01:01:01'),(240,20240126020643,1,'2020-01-01 01:01:01'),(241,20240129162819,1,'2020-01-01 01:01:01'),(242,20240130115133,1,'2020-01-01 01:01:01'),(243,20240131083822,1,'2020-01-01 01:01:01'),(244,20240205095928,1,'2020-01-01 01:01:01'),(245,20240205121956,1,'2020-01-01 01:01:01'),(246,20240209110212,1,'2020-01-01 01:01:01'),(247,20240212111533,1,'2020-01-01 01:01:01'),(248,20240221112844,1,'2020-01-01 01:01:01'),(249,20240222073518,1,'2020-01-01 01:01:01'),(250,20240222135115,1,'2020-01-01 01:01:01'),(251,20240226082255,1,'2020-01-01 01:01:01'),(252,20240228082706,1,'2020-01-01 01:01:01'),(253,20240301173035,1,'2020-01-01 01:01:01'),(254,20240302111134,1,'2020-01-01 01:01:01'),(255,20240312103753,1,'2020-01-01 01:01:01'),(256,20240313143416,1,'2020-01-01 01:01:01'),(257,20240314085226,1,'2020-01-01 01:01:01'),(258,20240314151747,1,'2020-01-01 01:01:01'),(259,20240320145650,1,'2020-01-01 01:01:01'),(260,20240327115530,1,'2020-01-01 01:01:01'),(261,20240327115617,1,'2020-01-01 01:01:01'),(262,20240408085837,1,'2020-01-01 01:01:01'),(263,20240415104633,1,'2020-01-01 01:01:01'),(264,20240430111727,1,'2020-01-01 01:01:01'),(265,20240515200020,1,'2020-01-01 01:01:01'),(266,20240521143023,1,'2020-01-01 01:01:01'),(267,20240521143024,1,'2020-01-01 01:01:01'),(268,20240601174138,1,'2020-01-01 01:01:01'),(269,20240607133721,1,'2020-01-01 01:01:01'),(270,20240612150059,1,'2020-01-01 01:01:01'),(271,20240613162201,1,'2020-01-01 01:01:01'),(272,20240613172616,1,'2020-01-01 01:01:01'),(273,20240618142419,1,'2020-01-01 01:01:01'),(274,20240625093543,1,'2020-01-01 01:01:01'),(275,20240626195531,1,'2020-01-01 01:01:01'),(276,20240702123921,1,'2020-01-01 01:01:01'),(277,20240703154849,1,'2020-01-01 01:01:01'),(278,20240707134035,1,'2020-01-01 01:01:01'),(279,20240707134036,1,'2020-01-01 01:01:01'),(280,20240709124958,1,'2020-01-01 01:01:01'),(281,20240709132642,1,'2020-01-01 01:01:01'),(282,20240709183940,1,'2020-01-01 01:01:01'),(283,20240710155623,1,'2020-01-01 01:01:01'),(284,20240723102712,1,'2020-01-01 01:01:01'),(285,20240725152735,1,'2020-01-01 01:01:01'),(286,20240725182118,1,'2020-01-01 01:01:01'),(287,20240726100517,1,'2020-01-01 01:01:01'),(288,20240729120947,1,'2020-01-01 01:01:01'),(289,20240730171504,1,'2020-01-01 01:01:01'),(290,20240730174056,1,'2020-01-01 01:01:01'),(291,20240730215453,1,'2020-01-01 01:01:01'),(292,20240730374423,1,'2020-01-01 01:01:01'),(293,20240801115359,1,'2020-01-01 01:01:01');
+INSERT INTO `migration_status_tables` VALUES (1,0,1,'2020-01-01 01:01:01'),(2,20161118193812,1,'2020-01-01 01:01:01'),(3,20161118211713,1,'2020-01-01 01:01:01'),(4,20161118212436,1,'2020-01-01 01:01:01'),(5,20161118212515,1,'2020-01-01 01:01:01'),(6,20161118212528,1,'2020-01-01 01:01:01'),(7,20161118212538,1,'2020-01-01 01:01:01'),(8,20161118212549,1,'2020-01-01 01:01:01'),(9,20161118212557,1,'2020-01-01 01:01:01'),(10,20161118212604,1,'2020-01-01 01:01:01'),(11,20161118212613,1,'2020-01-01 01:01:01'),(12,20161118212621,1,'2020-01-01 01:01:01'),(13,20161118212630,1,'2020-01-01 01:01:01'),(14,20161118212641,1,'2020-01-01 01:01:01'),(15,20161118212649,1,'2020-01-01 01:01:01'),(16,20161118212656,1,'2020-01-01 01:01:01'),(17,20161118212758,1,'2020-01-01 01:01:01'),(18,20161128234849,1,'2020-01-01 01:01:01'),(19,20161230162221,1,'2020-01-01 01:01:01'),(20,20170104113816,1,'2020-01-01 01:01:01'),(21,20170105151732,1,'2020-01-01 01:01:01'),(22,20170108191242,1,'2020-01-01 01:01:01'),(23,20170109094020,1,'2020-01-01 01:01:01'),(24,20170109130438,1,'2020-01-01 01:01:01'),(25,20170110202752,1,'2020-01-01 01:01:01'),(26,20170111133013,1,'2020-01-01 01:01:01'),(27,20170117025759,1,'2020-01-01 01:01:01'),(28,20170118191001,1,'2020-01-01 01:01:01'),(29,20170119234632,1,'2020-01-01 01:01:01'),(30,20170124230432,1,'2020-01-01 01:01:01'),(31,20170127014618,1,'2020-01-01 01:01:01'),(32,20170131232841,1,'2020-01-01 01:01:01'),(33,20170223094154,1,'2020-01-01 01:01:01'),(34,20170306075207,1,'2020-01-01 01:01:01'),(35,20170309100733,1,'2020-01-01 01:01:01'),(36,20170331111922,1,'2020-01-01 01:01:01'),(37,20170502143928,1,'2020-01-01 01:01:01'),(38,20170504130602,1,'2020-01-01 01:01:01'),(39,20170509132100,1,'2020-01-01 01:01:01'),(40,20170519105647,1,'2020-01-01 01:01:01'),(41,20170519105648,1,'2020-01-01 01:01:01'),(42,20170831234300,1,'2020-01-01 01:01:01'),(43,20170831234301,1,'2020-01-01 01:01:01'),(44,20170831234303,1,'2020-01-01 01:01:01'),(45,20171116163618,1,'2020-01-01 01:01:01'),(46,20171219164727,1,'2020-01-01 01:01:01'),(47,20180620164811,1,'2020-01-01 01:01:01'),(48,20180620175054,1,'2020-01-01 01:01:01'),(49,20180620175055,1,'2020-01-01 01:01:01'),(50,20191010101639,1,'2020-01-01 01:01:01'),(51,20191010155147,1,'2020-01-01 01:01:01'),(52,20191220130734,1,'2020-01-01 01:01:01'),(53,20200311140000,1,'2020-01-01 01:01:01'),(54,20200405120000,1,'2020-01-01 01:01:01'),(55,20200407120000,1,'2020-01-01 01:01:01'),(56,20200420120000,1,'2020-01-01 01:01:01'),(57,20200504120000,1,'2020-01-01 01:01:01'),(58,20200512120000,1,'2020-01-01 01:01:01'),(59,20200707120000,1,'2020-01-01 01:01:01'),(60,20201011162341,1,'2020-01-01 01:01:01'),(61,20201021104586,1,'2020-01-01 01:01:01'),(62,20201102112520,1,'2020-01-01 01:01:01'),(63,20201208121729,1,'2020-01-01 01:01:01'),(64,20201215091637,1,'2020-01-01 01:01:01'),(65,20210119174155,1,'2020-01-01 01:01:01'),(66,20210326182902,1,'2020-01-01 01:01:01'),(67,20210421112652,1,'2020-01-01 01:01:01'),(68,20210506095025,1,'2020-01-01 01:01:01'),(69,20210513115729,1,'2020-01-01 01:01:01'),(70,20210526113559,1,'2020-01-01 01:01:01'),(71,20210601000001,1,'2020-01-01 01:01:01'),(72,20210601000002,1,'2020-01-01 01:01:01'),(73,20210601000003,1,'2020-01-01 01:01:01'),(74,20210601000004,1,'2020-01-01 01:01:01'),(75,20210601000005,1,'2020-01-01 01:01:01'),(76,20210601000006,1,'2020-01-01 01:01:01'),(77,20210601000007,1,'2020-01-01 01:01:01'),(78,20210601000008,1,'2020-01-01 01:01:01'),(79,20210606151329,1,'2020-01-01 01:01:01'),(80,20210616163757,1,'2020-01-01 01:01:01'),(81,20210617174723,1,'2020-01-01 01:01:01'),(82,20210622160235,1,'2020-01-01 01:01:01'),(83,20210623100031,1,'2020-01-01 01:01:01'),(84,20210623133615,1,'2020-01-01 01:01:01'),(85,20210708143152,1,'2020-01-01 01:01:01'),(86,20210709124443,1,'2020-01-01 01:01:01'),(87,20210712155608,1,'2020-01-01 01:01:01'),(88,20210714102108,1,'2020-01-01 01:01:01'),(89,20210719153709,1,'2020-01-01 01:01:01'),(90,20210721171531,1,'2020-01-01 01:01:01'),(91,20210723135713,1,'2020-01-01 01:01:01'),(92,20210802135933,1,'2020-01-01 01:01:01'),(93,20210806112844,1,'2020-01-01 01:01:01'),(94,20210810095603,1,'2020-01-01 01:01:01'),(95,20210811150223,1,'2020-01-01 01:01:01'),(96,20210818151827,1,'2020-01-01 01:01:01'),(97,20210818151828,1,'2020-01-01 01:01:01'),(98,20210818182258,1,'2020-01-01 01:01:01'),(99,20210819131107,1,'2020-01-01 01:01:01'),(100,20210819143446,1,'2020-01-01 01:01:01'),(101,20210903132338,1,'2020-01-01 01:01:01'),(102,20210915144307,1,'2020-01-01 01:01:01'),(103,20210920155130,1,'2020-01-01 01:01:01'),(104,20210927143115,1,'2020-01-01 01:01:01'),(105,20210927143116,1,'2020-01-01 01:01:01'),(106,20211013133706,1,'2020-01-01 01:01:01'),(107,20211013133707,1,'2020-01-01 01:01:01'),(108,20211102135149,1,'2020-01-01 01:01:01'),(109,20211109121546,1,'2020-01-01 01:01:01'),(110,20211110163320,1,'2020-01-01 01:01:01'),(111,20211116184029,1,'2020-01-01 01:01:01'),(112,20211116184030,1,'2020-01-01 01:01:01'),(113,20211202092042,1,'2020-01-01 01:01:01'),(114,20211202181033,1,'2020-01-01 01:01:01'),(115,20211207161856,1,'2020-01-01 01:01:01'),(116,20211216131203,1,'2020-01-01 01:01:01'),(117,20211221110132,1,'2020-01-01 01:01:01'),(118,20220107155700,1,'2020-01-01 01:01:01'),(119,20220125105650,1,'2020-01-01 01:01:01'),(120,20220201084510,1,'2020-01-01 01:01:01'),(121,20220208144830,1,'2020-01-01 01:01:01'),(122,20220208144831,1,'2020-01-01 01:01:01'),(123,20220215152203,1,'2020-01-01 01:01:01'),(124,20220223113157,1,'2020-01-01 01:01:01'),(125,20220307104655,1,'2020-01-01 01:01:01'),(126,20220309133956,1,'2020-01-01 01:01:01'),(127,20220316155700,1,'2020-01-01 01:01:01'),(128,20220323152301,1,'2020-01-01 01:01:01'),(129,20220330100659,1,'2020-01-01 01:01:01'),(130,20220404091216,1,'2020-01-01 01:01:01'),(131,20220419140750,1,'2020-01-01 01:01:01'),(132,20220428140039,1,'2020-01-01 01:01:01'),(133,20220503134048,1,'2020-01-01 01:01:01'),(134,20220524102918,1,'2020-01-01 01:01:01'),(135,20220526123327,1,'2020-01-01 01:01:01'),(136,20220526123328,1,'2020-01-01 01:01:01'),(137,20220526123329,1,'2020-01-01 01:01:01'),(138,20220608113128,1,'2020-01-01 01:01:01'),(139,20220627104817,1,'2020-01-01 01:01:01'),(140,20220704101843,1,'2020-01-01 01:01:01'),(141,20220708095046,1,'2020-01-01 01:01:01'),(142,20220713091130,1,'2020-01-01 01:01:01'),(143,20220802135510,1,'2020-01-01 01:01:01'),(144,20220818101352,1,'2020-01-01 01:01:01'),(145,20220822161445,1,'2020-01-01 01:01:01'),(146,20220831100036,1,'2020-01-01 01:01:01'),(147,20220831100151,1,'2020-01-01 01:01:01'),(148,20220908181826,1,'2020-01-01 01:01:01'),(149,20220914154915,1,'2020-01-01 01:01:01'),(150,20220915165115,1,'2020-01-01 01:01:01'),(151,20220915165116,1,'2020-01-01 01:01:01'),(152,20220928100158,1,'2020-01-01 01:01:01'),(153,20221014084130,1,'2020-01-01 01:01:01'),(154,20221027085019,1,'2020-01-01 01:01:01'),(155,20221101103952,1,'2020-01-01 01:01:01'),(156,20221104144401,1,'2020-01-01 01:01:01'),(157,20221109100749,1,'2020-01-01 01:01:01'),(158,20221115104546,1,'2020-01-01 01:01:01'),(159,20221130114928,1,'2020-01-01 01:01:01'),(160,20221205112142,1,'2020-01-01 01:01:01'),(161,20221216115820,1,'2020-01-01 01:01:01'),(162,20221220195934,1,'2020-01-01 01:01:01'),(163,20221220195935,1,'2020-01-01 01:01:01'),(164,20221223174807,1,'2020-01-01 01:01:01'),(165,20221227163855,1,'2020-01-01 01:01:01'),(166,20221227163856,1,'2020-01-01 01:01:01'),(167,20230202224725,1,'2020-01-01 01:01:01'),(168,20230206163608,1,'2020-01-01 01:01:01'),(169,20230214131519,1,'2020-01-01 01:01:01'),(170,20230303135738,1,'2020-01-01 01:01:01'),(171,20230313135301,1,'2020-01-01 01:01:01'),(172,20230313141819,1,'2020-01-01 01:01:01'),(173,20230315104937,1,'2020-01-01 01:01:01'),(174,20230317173844,1,'2020-01-01 01:01:01'),(175,20230320133602,1,'2020-01-01 01:01:01'),(176,20230330100011,1,'2020-01-01 01:01:01'),(177,20230330134823,1,'2020-01-01 01:01:01'),(178,20230405232025,1,'2020-01-01 01:01:01'),(179,20230408084104,1,'2020-01-01 01:01:01'),(180,20230411102858,1,'2020-01-01 01:01:01'),(181,20230421155932,1,'2020-01-01 01:01:01'),(182,20230425082126,1,'2020-01-01 01:01:01'),(183,20230425105727,1,'2020-01-01 01:01:01'),(184,20230501154913,1,'2020-01-01 01:01:01'),(185,20230503101418,1,'2020-01-01 01:01:01'),(186,20230515144206,1,'2020-01-01 01:01:01'),(187,20230517140952,1,'2020-01-01 01:01:01'),(188,20230517152807,1,'2020-01-01 01:01:01'),(189,20230518114155,1,'2020-01-01 01:01:01'),(190,20230520153236,1,'2020-01-01 01:01:01'),(191,20230525151159,1,'2020-01-01 01:01:01'),(192,20230530122103,1,'2020-01-01 01:01:01'),(193,20230602111827,1,'2020-01-01 01:01:01'),(194,20230608103123,1,'2020-01-01 01:01:01'),(195,20230629140529,1,'2020-01-01 01:01:01'),(196,20230629140530,1,'2020-01-01 01:01:01'),(197,20230711144622,1,'2020-01-01 01:01:01'),(198,20230721135421,1,'2020-01-01 01:01:01'),(199,20230721161508,1,'2020-01-01 01:01:01'),(200,20230726115701,1,'2020-01-01 01:01:01'),(201,20230807100822,1,'2020-01-01 01:01:01'),(202,20230814150442,1,'2020-01-01 01:01:01'),(203,20230823122728,1,'2020-01-01 01:01:01'),(204,20230906152143,1,'2020-01-01 01:01:01'),(205,20230911163618,1,'2020-01-01 01:01:01'),(206,20230912101759,1,'2020-01-01 01:01:01'),(207,20230915101341,1,'2020-01-01 01:01:01'),(208,20230918132351,1,'2020-01-01 01:01:01'),(209,20231004144339,1,'2020-01-01 01:01:01'),(210,20231009094541,1,'2020-01-01 01:01:01'),(211,20231009094542,1,'2020-01-01 01:01:01'),(212,20231009094543,1,'2020-01-01 01:01:01'),(213,20231009094544,1,'2020-01-01 01:01:01'),(214,20231016091915,1,'2020-01-01 01:01:01'),(215,20231024174135,1,'2020-01-01 01:01:01'),(216,20231025120016,1,'2020-01-01 01:01:01'),(217,20231025160156,1,'2020-01-01 01:01:01'),(218,20231031165350,1,'2020-01-01 01:01:01'),(219,20231106144110,1,'2020-01-01 01:01:01'),(220,20231107130934,1,'2020-01-01 01:01:01'),(221,20231109115838,1,'2020-01-01 01:01:01'),(222,20231121054530,1,'2020-01-01 01:01:01'),(223,20231122101320,1,'2020-01-01 01:01:01'),(224,20231130132828,1,'2020-01-01 01:01:01'),(225,20231130132931,1,'2020-01-01 01:01:01'),(226,20231204155427,1,'2020-01-01 01:01:01'),(227,20231206142340,1,'2020-01-01 01:01:01'),(228,20231207102320,1,'2020-01-01 01:01:01'),(229,20231207102321,1,'2020-01-01 01:01:01'),(230,20231207133731,1,'2020-01-01 01:01:01'),(231,20231212094238,1,'2020-01-01 01:01:01'),(232,20231212095734,1,'2020-01-01 01:01:01'),(233,20231212161121,1,'2020-01-01 01:01:01'),(234,20231215122713,1,'2020-01-01 01:01:01'),(235,20231219143041,1,'2020-01-01 01:01:01'),(236,20231224070653,1,'2020-01-01 01:01:01'),(237,20240110134315,1,'2020-01-01 01:01:01'),(238,20240119091637,1,'2020-01-01 01:01:01'),(239,20240126020642,1,'2020-01-01 01:01:01'),(240,20240126020643,1,'2020-01-01 01:01:01'),(241,20240129162819,1,'2020-01-01 01:01:01'),(242,20240130115133,1,'2020-01-01 01:01:01'),(243,20240131083822,1,'2020-01-01 01:01:01'),(244,20240205095928,1,'2020-01-01 01:01:01'),(245,20240205121956,1,'2020-01-01 01:01:01'),(246,20240209110212,1,'2020-01-01 01:01:01'),(247,20240212111533,1,'2020-01-01 01:01:01'),(248,20240221112844,1,'2020-01-01 01:01:01'),(249,20240222073518,1,'2020-01-01 01:01:01'),(250,20240222135115,1,'2020-01-01 01:01:01'),(251,20240226082255,1,'2020-01-01 01:01:01'),(252,20240228082706,1,'2020-01-01 01:01:01'),(253,20240301173035,1,'2020-01-01 01:01:01'),(254,20240302111134,1,'2020-01-01 01:01:01'),(255,20240312103753,1,'2020-01-01 01:01:01'),(256,20240313143416,1,'2020-01-01 01:01:01'),(257,20240314085226,1,'2020-01-01 01:01:01'),(258,20240314151747,1,'2020-01-01 01:01:01'),(259,20240320145650,1,'2020-01-01 01:01:01'),(260,20240327115530,1,'2020-01-01 01:01:01'),(261,20240327115617,1,'2020-01-01 01:01:01'),(262,20240408085837,1,'2020-01-01 01:01:01'),(263,20240415104633,1,'2020-01-01 01:01:01'),(264,20240430111727,1,'2020-01-01 01:01:01'),(265,20240515200020,1,'2020-01-01 01:01:01'),(266,20240521143023,1,'2020-01-01 01:01:01'),(267,20240521143024,1,'2020-01-01 01:01:01'),(268,20240601174138,1,'2020-01-01 01:01:01'),(269,20240607133721,1,'2020-01-01 01:01:01'),(270,20240612150059,1,'2020-01-01 01:01:01'),(271,20240613162201,1,'2020-01-01 01:01:01'),(272,20240613172616,1,'2020-01-01 01:01:01'),(273,20240618142419,1,'2020-01-01 01:01:01'),(274,20240625093543,1,'2020-01-01 01:01:01'),(275,20240626195531,1,'2020-01-01 01:01:01'),(276,20240702123921,1,'2020-01-01 01:01:01'),(277,20240703154849,1,'2020-01-01 01:01:01'),(278,20240707134035,1,'2020-01-01 01:01:01'),(279,20240707134036,1,'2020-01-01 01:01:01'),(280,20240709124958,1,'2020-01-01 01:01:01'),(281,20240709132642,1,'2020-01-01 01:01:01'),(282,20240709183940,1,'2020-01-01 01:01:01'),(283,20240710155623,1,'2020-01-01 01:01:01'),(284,20240723102712,1,'2020-01-01 01:01:01'),(285,20240725152735,1,'2020-01-01 01:01:01'),(286,20240725182118,1,'2020-01-01 01:01:01'),(287,20240726100517,1,'2020-01-01 01:01:01'),(288,20240730171504,1,'2020-01-01 01:01:01'),(289,20240730174056,1,'2020-01-01 01:01:01'),(290,20240730215453,1,'2020-01-01 01:01:01'),(291,20240730374423,1,'2020-01-01 01:01:01'),(292,20240801115359,1,'2020-01-01 01:01:01'),(293,20240802101043,1,'2020-01-01 01:01:01');
 /*!40101 SET @saved_cs_client     = @@character_set_client */;
 /*!50503 SET character_set_client = utf8mb4 */;
 CREATE TABLE `mobile_device_management_solutions` (
diff --git a/tools/dbutils/schema_generator.go b/tools/dbutils/schema_generator.go
index 2fecce8683..60c01869d3 100644
--- a/tools/dbutils/schema_generator.go
+++ b/tools/dbutils/schema_generator.go
@@ -67,7 +67,7 @@ func main() {
 
 	// Dump schema to dumpfile
 	cmd := exec.Command(
-		"docker-compose", "exec", "-T", "mysql_test",
+		"docker", "compose", "exec", "-T", "mysql_test",
 		// Command run inside container
 		"mysqldump", "-u"+testUsername, "-p"+testPassword, "schemadb", "--compact", "--skip-comments",
 	)

From 4b2c8a6f02b0f848a9b276e0739c4270c8eba75c Mon Sep 17 00:00:00 2001
From: jacobshandling <61553566+jacobshandling@users.noreply.github.com>
Date: Fri, 2 Aug 2024 08:12:43 -0700
Subject: [PATCH 50/88] UI: Coordinate sibling refetches via parent state
 (#20973)

## #20965


https://www.loom.com/share/52ff44615e2e41a99c129acd3d2427bf?sid=f90ead66-9730-4538-95db-a70bf971b5a8

- [x] Manual QA for all new/changed functionality)

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
---
 frontend/pages/SoftwarePage/SoftwarePage.tsx     |  5 +++++
 .../SoftwareTitles/SoftwareTitles.tsx            |  4 ++++
 .../components/AddPackage/AddPackage.tsx         | 11 +++++++++--
 .../AddSoftwareModal/AddSoftwareModal.tsx        | 16 ++++++++++++++--
 .../components/AppStoreVpp/AppStoreVpp.tsx       | 10 +++++++++-
 frontend/services/entities/software.ts           |  4 ++++
 6 files changed, 45 insertions(+), 5 deletions(-)

diff --git a/frontend/pages/SoftwarePage/SoftwarePage.tsx b/frontend/pages/SoftwarePage/SoftwarePage.tsx
index 7def709f9a..5887d0dd11 100644
--- a/frontend/pages/SoftwarePage/SoftwarePage.tsx
+++ b/frontend/pages/SoftwarePage/SoftwarePage.tsx
@@ -151,6 +151,9 @@ const SoftwarePage = ({ children, router, location }: ISoftwarePageProps) => {
   const [showPreviewTicketModal, setShowPreviewTicketModal] = useState(false);
   const [showAddSoftwareModal, setShowAddSoftwareModal] = useState(false);
   const [resetPageIndex, setResetPageIndex] = useState<boolean>(false);
+  const [addedSoftwareToken, setAddedSoftwareToken] = useState<string | null>(
+    null
+  );
 
   const {
     currentTeamId,
@@ -385,6 +388,7 @@ const SoftwarePage = ({ children, router, location }: ISoftwarePageProps) => {
           showExploitedVulnerabilitiesOnly,
           softwareFilter,
           resetPageIndex,
+          addedSoftwareToken,
         })}
       </div>
     );
@@ -424,6 +428,7 @@ const SoftwarePage = ({ children, router, location }: ISoftwarePageProps) => {
             teamId={currentTeamId ?? 0}
             router={router}
             onExit={toggleAddSoftwareModal}
+            setAddedSoftwareToken={setAddedSoftwareToken}
           />
         )}
       </div>
diff --git a/frontend/pages/SoftwarePage/SoftwareTitles/SoftwareTitles.tsx b/frontend/pages/SoftwarePage/SoftwareTitles/SoftwareTitles.tsx
index 1a90c284f5..6456d616ea 100644
--- a/frontend/pages/SoftwarePage/SoftwareTitles/SoftwareTitles.tsx
+++ b/frontend/pages/SoftwarePage/SoftwareTitles/SoftwareTitles.tsx
@@ -43,6 +43,7 @@ interface ISoftwareTitlesProps {
   currentPage: number;
   teamId?: number;
   resetPageIndex: boolean;
+  addedSoftwareToken: string | null;
 }
 
 const SoftwareTitles = ({
@@ -56,6 +57,7 @@ const SoftwareTitles = ({
   currentPage,
   teamId,
   resetPageIndex,
+  addedSoftwareToken,
 }: ISoftwareTitlesProps) => {
   const showVersions = location.pathname === PATHS.SOFTWARE_VERSIONS;
 
@@ -80,6 +82,7 @@ const SoftwareTitles = ({
         orderDirection,
         orderKey,
         teamId,
+        addedSoftwareToken,
         ...getSoftwareFilterForQueryKey(softwareFilter),
       },
     ],
@@ -113,6 +116,7 @@ const SoftwareTitles = ({
         orderKey,
         teamId,
         vulnerable: softwareFilter === "vulnerableSoftware",
+        addedSoftwareToken,
       },
     ],
     ({ queryKey: [queryKey] }) =>
diff --git a/frontend/pages/SoftwarePage/components/AddPackage/AddPackage.tsx b/frontend/pages/SoftwarePage/components/AddPackage/AddPackage.tsx
index 78e559b750..2e7e4b17a5 100644
--- a/frontend/pages/SoftwarePage/components/AddPackage/AddPackage.tsx
+++ b/frontend/pages/SoftwarePage/components/AddPackage/AddPackage.tsx
@@ -21,9 +21,15 @@ interface IAddPackageProps {
   teamId: number;
   router: InjectedRouter;
   onExit: () => void;
+  setAddedSoftwareToken: (token: string) => void;
 }
 
-const AddPackage = ({ teamId, router, onExit }: IAddPackageProps) => {
+const AddPackage = ({
+  teamId,
+  router,
+  onExit,
+  setAddedSoftwareToken,
+}: IAddPackageProps) => {
   const { renderFlash } = useContext(NotificationContext);
   const [isUploading, setIsUploading] = useState(false);
 
@@ -86,7 +92,8 @@ const AddPackage = ({ teamId, router, onExit }: IAddPackageProps) => {
       } else {
         newQueryParams.available_for_install = true;
       }
-
+      // any unique string - triggers SW refetch
+      setAddedSoftwareToken(`${Date.now()}`);
       router.push(
         `${PATHS.SOFTWARE_TITLES}?${buildQueryStringFromParams(newQueryParams)}`
       );
diff --git a/frontend/pages/SoftwarePage/components/AddSoftwareModal/AddSoftwareModal.tsx b/frontend/pages/SoftwarePage/components/AddSoftwareModal/AddSoftwareModal.tsx
index f6af29e7b4..7f55adbc9a 100644
--- a/frontend/pages/SoftwarePage/components/AddSoftwareModal/AddSoftwareModal.tsx
+++ b/frontend/pages/SoftwarePage/components/AddSoftwareModal/AddSoftwareModal.tsx
@@ -37,12 +37,14 @@ interface IAddSoftwareModalProps {
   teamId: number;
   router: InjectedRouter;
   onExit: () => void;
+  setAddedSoftwareToken: (token: string) => void;
 }
 
 const AddSoftwareModal = ({
   teamId,
   router,
   onExit,
+  setAddedSoftwareToken,
 }: IAddSoftwareModalProps) => {
   return (
     <Modal
@@ -62,10 +64,20 @@ const AddSoftwareModal = ({
                 <Tab>App Store (VPP)</Tab>
               </TabList>
               <TabPanel>
-                <AddPackage teamId={teamId} router={router} onExit={onExit} />
+                <AddPackage
+                  teamId={teamId}
+                  router={router}
+                  onExit={onExit}
+                  setAddedSoftwareToken={setAddedSoftwareToken}
+                />
               </TabPanel>
               <TabPanel>
-                <AppStoreVpp teamId={teamId} router={router} onExit={onExit} />
+                <AppStoreVpp
+                  teamId={teamId}
+                  router={router}
+                  onExit={onExit}
+                  setAddedSoftwareToken={setAddedSoftwareToken}
+                />
               </TabPanel>
             </Tabs>
           </TabsWrapper>
diff --git a/frontend/pages/SoftwarePage/components/AppStoreVpp/AppStoreVpp.tsx b/frontend/pages/SoftwarePage/components/AppStoreVpp/AppStoreVpp.tsx
index 874d2d8849..4a210b93d5 100644
--- a/frontend/pages/SoftwarePage/components/AppStoreVpp/AppStoreVpp.tsx
+++ b/frontend/pages/SoftwarePage/components/AppStoreVpp/AppStoreVpp.tsx
@@ -130,9 +130,15 @@ interface IAppStoreVppProps {
   teamId: number;
   router: InjectedRouter;
   onExit: () => void;
+  setAddedSoftwareToken: (token: string) => void;
 }
 
-const AppStoreVpp = ({ teamId, router, onExit }: IAppStoreVppProps) => {
+const AppStoreVpp = ({
+  teamId,
+  router,
+  onExit,
+  setAddedSoftwareToken,
+}: IAppStoreVppProps) => {
   const { renderFlash } = useContext(NotificationContext);
   const [isSubmitDisabled, setIsSubmitDisabled] = useState(true);
   const [selectedApp, setSelectedApp] = useState<IVppApp | null>(null);
@@ -189,6 +195,8 @@ const AppStoreVpp = ({ teamId, router, onExit }: IAppStoreVppProps) => {
         team_id: teamId,
         available_for_install: true,
       });
+      // any unique string - triggers SW refetch
+      setAddedSoftwareToken(`${Date.now()}`);
       router.push(`${PATHS.SOFTWARE}?${queryParams}`);
     } catch (e) {
       renderFlash("error", getErrorMessage(e));
diff --git a/frontend/services/entities/software.ts b/frontend/services/entities/software.ts
index ecb4d98847..d3f85f9d16 100644
--- a/frontend/services/entities/software.ts
+++ b/frontend/services/entities/software.ts
@@ -56,10 +56,14 @@ export interface ISoftwareVersionResponse {
 }
 
 export interface ISoftwareVersionsQueryKey extends ISoftwareApiParams {
+  // used to trigger software refetches from sibling pages
+  addedSoftwareToken: string | null;
   scope: "software-versions";
 }
 
 export interface ISoftwareTitlesQueryKey extends ISoftwareApiParams {
+  // used to trigger software refetches from sibling pages
+  addedSoftwareToken: string | null;
   scope: "software-titles";
 }
 

From 33fa8f2fe976cb9eaaa3ebfee6d37d7ad00912e5 Mon Sep 17 00:00:00 2001
From: jacobshandling <61553566+jacobshandling@users.noreply.github.com>
Date: Fri, 2 Aug 2024 08:24:10 -0700
Subject: [PATCH 51/88] =?UTF-8?q?UI=20=E2=80=93=20adjust=20disk=20encrypti?=
 =?UTF-8?q?on=20table=20style=20(#20981)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

## #20395

<img width="778" alt="Screenshot 2024-08-01 at 7 15 00 PM"
src="https://github.com/user-attachments/assets/26fc82c0-d3e9-4e0d-b27d-82be63711fa9">

- [x] Changes file added for user-visible changes in `changes/`
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
---
 changes/20395-DE-table-style-fix              |  1 +
 .../OSSettings/_styles.scss                   |  1 +
 .../DiskEncryptionTable/_styles.scss          | 30 +++++++++++++++----
 3 files changed, 26 insertions(+), 6 deletions(-)
 create mode 100644 changes/20395-DE-table-style-fix

diff --git a/changes/20395-DE-table-style-fix b/changes/20395-DE-table-style-fix
new file mode 100644
index 0000000000..8907c36986
--- /dev/null
+++ b/changes/20395-DE-table-style-fix
@@ -0,0 +1 @@
+* Fix a styling issue in the Controls > OS Settings > disk encryption table
\ No newline at end of file
diff --git a/frontend/pages/ManageControlsPage/OSSettings/_styles.scss b/frontend/pages/ManageControlsPage/OSSettings/_styles.scss
index 986234a842..b9c2bf11a5 100644
--- a/frontend/pages/ManageControlsPage/OSSettings/_styles.scss
+++ b/frontend/pages/ManageControlsPage/OSSettings/_styles.scss
@@ -12,6 +12,7 @@
   &__side-nav {
     .side-nav__nav-list {
       top: 0;
+      padding-right: 40px;
     }
   }
 
diff --git a/frontend/pages/ManageControlsPage/OSSettings/cards/DiskEncryption/components/DiskEncryptionTable/_styles.scss b/frontend/pages/ManageControlsPage/OSSettings/cards/DiskEncryption/components/DiskEncryptionTable/_styles.scss
index 74a24f3ac2..45790a5389 100644
--- a/frontend/pages/ManageControlsPage/OSSettings/cards/DiskEncryption/components/DiskEncryptionTable/_styles.scss
+++ b/frontend/pages/ManageControlsPage/OSSettings/cards/DiskEncryption/components/DiskEncryptionTable/_styles.scss
@@ -9,11 +9,29 @@
     border-right: none;
   }
 
-  @media (max-width: 1120px) {
-    .view-hosts-link {
-      span {
-        display: none;
-      }
+  .linkToFilteredHosts__header {
+    width: auto;
+    max-width: 120px;
+  }
+
+}
+
+@media (max-width: 1120px) {
+  .view-hosts-link {
+    span {
+      display: none;
     }
   }
-}
+  .linkToFilteredHosts {
+    &__header {
+      width: 0;
+      .column-header {
+        width: 0;
+      }
+    }
+    &__cell {
+      width: min-content;
+    }
+
+  }
+}
\ No newline at end of file

From d1149a0a7d3d5ff68f6b842191a02c06000a48e4 Mon Sep 17 00:00:00 2001
From: Benjamin Edwards <edwards.benw@gmail.com>
Date: Fri, 2 Aug 2024 11:34:32 -0400
Subject: [PATCH 52/88] Fix decoding enrollment profiles (#20984)

---
 server/service/apple_mdm.go                      | 6 +++++-
 server/service/integration_mdm_lifecycle_test.go | 3 ++-
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/server/service/apple_mdm.go b/server/service/apple_mdm.go
index 3f1ef747a3..3ff24a0eb0 100644
--- a/server/service/apple_mdm.go
+++ b/server/service/apple_mdm.go
@@ -3463,9 +3463,13 @@ func RenewSCEPCertificates(
 		}
 	}
 
-	migrationEnrollmentProfile := os.Getenv("FLEET_SILENT_MIGRATION_ENROLLMENT_PROFILE")
+	decodedMigrationEnrollmentProfile, err := base64.StdEncoding.DecodeString(os.Getenv("FLEET_SILENT_MIGRATION_ENROLLMENT_PROFILE"))
+	if err != nil {
+		return ctxerr.Wrap(ctx, err, "failed to decode silent migration enrollment profile")
+	}
 	hasAssocsFromMigration := len(assocsFromMigration) > 0
 
+	migrationEnrollmentProfile := string(decodedMigrationEnrollmentProfile)
 	if migrationEnrollmentProfile == "" && hasAssocsFromMigration {
 		level.Debug(logger).Log("msg", "found devices from migration that need SCEP renewals but FLEET_SILENT_MIGRATION_ENROLLMENT_PROFILE is empty")
 	}
diff --git a/server/service/integration_mdm_lifecycle_test.go b/server/service/integration_mdm_lifecycle_test.go
index 5dce43108d..bd467afe55 100644
--- a/server/service/integration_mdm_lifecycle_test.go
+++ b/server/service/integration_mdm_lifecycle_test.go
@@ -3,6 +3,7 @@ package service
 import (
 	"context"
 	"crypto/x509"
+	"encoding/base64"
 	"encoding/json"
 	"encoding/xml"
 	"fmt"
@@ -772,7 +773,7 @@ func (s *integrationMDMTestSuite) TestLifecycleSCEPCertExpiration() {
 	require.NoError(t, err)
 
 	// set the env var, and run the cron
-	t.Setenv("FLEET_SILENT_MIGRATION_ENROLLMENT_PROFILE", "<foo></foo>")
+	t.Setenv("FLEET_SILENT_MIGRATION_ENROLLMENT_PROFILE", base64.StdEncoding.EncodeToString([]byte("<foo></foo>")))
 	err = RenewSCEPCertificates(ctx, logger, s.ds, &fleetCfg, s.mdmCommander)
 	require.NoError(t, err)
 	checkRenewCertCommand(migratedDevice, "", "<foo></foo>")

From b846f90e542f19446bc51616fab83c48c2147ab3 Mon Sep 17 00:00:00 2001
From: Dave Herder <27025660+dherder@users.noreply.github.com>
Date: Fri, 2 Aug 2024 08:40:29 -0700
Subject: [PATCH 53/88] Add reference to process_etw_events table (#20947)

---
 articles/osquery-evented-tables-overview.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/articles/osquery-evented-tables-overview.md b/articles/osquery-evented-tables-overview.md
index 883f0bc8ab..f1316a85f1 100644
--- a/articles/osquery-evented-tables-overview.md
+++ b/articles/osquery-evented-tables-overview.md
@@ -121,7 +121,7 @@ On macOS, there are two utilities that enable osquery process auditing: [OpenBSM
 To use the `es_process_events` tables, use the flag `--disable_endpointsecurity=false`. See the [EndpointSecurity instructions](https://osquery.readthedocs.io/en/latest/deployment/process-auditing/#auditing-processes-with-endpointsecurity) for more information. To use `process_events` and `socket_events` with OpenBSM, see the [OpenBSM instructions](https://osquery.readthedocs.io/en/latest/deployment/process-auditing/#auditing-processes-with-openbsm). 
 
 #### Windows
-Currently, osquery does not support process auditing for Windows. To learn more about process auditing on Windows, visit [Microsoft's security auditing overview](https://docs.microsoft.com/en-us/windows/security/threat-protection/auditing/security-auditing-overview). Fleet is tracking work to build process auditing for Windows in osquery. [Stay up to date on GitHub](https://github.com/fleetdm/fleet/issues/7732).
+Fleet supports auditing process events on Windows via the `process_etw_events` table. To learn more about process auditing on Windows, visit [Microsoft's security auditing overview](https://docs.microsoft.com/en-us/windows/security/threat-protection/auditing/security-auditing-overview). Fleet is tracking work to add file auditing for Windows in osquery. [Stay up to date on GitHub](https://github.com/fleetdm/fleet/issues/20946).
 
 ### YARA scanning
 [YARA](https://virustotal.github.io/yara/) is a malware research and detection tool available on Linux and macOS that allows users to create descriptions of malware families based on patterns of text or binary code. Each potential piece of malware is matched against a YARA rule and triggers if the specified conditions are met. 

From 209a9b29a5d32fe159113395687760987c0df5fa Mon Sep 17 00:00:00 2001
From: Gabriel Hernandez <ghernandez345@gmail.com>
Date: Fri, 2 Aug 2024 18:56:25 +0100
Subject: [PATCH 54/88] Remove vpp warning banner when it has been successfuly
 reuploaded (#21003)

quick fix to remove the vpp warning banner when the user has
successfully uploaded a new one.
---
 .../IntegrationsPage/cards/Vpp/VppSetupPage/VppSetupPage.tsx | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/frontend/pages/admin/IntegrationsPage/cards/Vpp/VppSetupPage/VppSetupPage.tsx b/frontend/pages/admin/IntegrationsPage/cards/Vpp/VppSetupPage/VppSetupPage.tsx
index a4289664e6..84d75fd073 100644
--- a/frontend/pages/admin/IntegrationsPage/cards/Vpp/VppSetupPage/VppSetupPage.tsx
+++ b/frontend/pages/admin/IntegrationsPage/cards/Vpp/VppSetupPage/VppSetupPage.tsx
@@ -4,6 +4,7 @@ import { useQuery } from "react-query";
 import { AxiosError } from "axios";
 
 import PATHS from "router/paths";
+import { AppContext } from "context/app";
 import { NotificationContext } from "context/notification";
 import { getErrorReason } from "interfaces/errors";
 import mdmAppleAPI, { IGetVppInfoResponse } from "services/entities/mdm_apple";
@@ -121,6 +122,7 @@ interface IVppSetupPageProps {
 const VppSetupPage = ({ router }: IVppSetupPageProps) => {
   const [showDisableModal, setShowDisableModal] = useState(false);
   const [showRenewModal, setShowRenewModal] = useState(false);
+  const { setVppExpiry } = useContext(AppContext);
 
   const {
     data: vppData,
@@ -134,6 +136,9 @@ const VppSetupPage = ({ router }: IVppSetupPageProps) => {
     {
       ...DEFAULT_USE_QUERY_OPTIONS,
       retry: false,
+      onSuccess: (data) => {
+        setVppExpiry(data.renew_date);
+      },
     }
   );
 

From 2f479b3ba938759055af135504395b9498db08da Mon Sep 17 00:00:00 2001
From: Lucas Manuel Rodriguez <lucas@fleetdm.com>
Date: Fri, 2 Aug 2024 14:57:50 -0300
Subject: [PATCH 55/88] Release osqueryd 5.13.0 (#20949)

---
 .github/workflows/generate-osqueryd-targets.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/generate-osqueryd-targets.yml b/.github/workflows/generate-osqueryd-targets.yml
index 12e08bddac..b5518c995a 100644
--- a/.github/workflows/generate-osqueryd-targets.yml
+++ b/.github/workflows/generate-osqueryd-targets.yml
@@ -24,7 +24,7 @@ defaults:
     shell: bash
 
 env:
-  OSQUERY_VERSION: 5.12.2
+  OSQUERY_VERSION: 5.13.0
 
 permissions:
   contents: read

From dc5ff724ecd5f7ef427d14765873fa4d39081094 Mon Sep 17 00:00:00 2001
From: Tim Lee <timlee@fleetdm.com>
Date: Fri, 2 Aug 2024 12:17:47 -0600
Subject: [PATCH 56/88] Bugfix: delete team 0 app (#20987)

#20986

- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality
---
 ee/server/service/software_installers.go      | 13 +++-
 server/service/integration_enterprise_test.go | 74 ++++++++++++++++++-
 2 files changed, 82 insertions(+), 5 deletions(-)

diff --git a/ee/server/service/software_installers.go b/ee/server/service/software_installers.go
index 8754879992..9871f9fd44 100644
--- a/ee/server/service/software_installers.go
+++ b/ee/server/service/software_installers.go
@@ -20,6 +20,7 @@ import (
 	"github.com/fleetdm/fleet/v4/server/contexts/viewer"
 	"github.com/fleetdm/fleet/v4/server/fleet"
 	"github.com/fleetdm/fleet/v4/server/mdm/apple/vpp"
+	"github.com/fleetdm/fleet/v4/server/ptr"
 	"github.com/go-kit/log/level"
 	"github.com/google/uuid"
 	"golang.org/x/sync/errgroup"
@@ -121,7 +122,7 @@ func (svc *Service) deleteVPPApp(ctx context.Context, teamID *uint, meta *fleet.
 	}
 
 	var teamName *string
-	if teamID != nil {
+	if teamID != nil && *teamID != 0 {
 		t, err := svc.ds.Team(ctx, *teamID)
 		if err != nil {
 			return ctxerr.Wrap(ctx, err, "getting team name for deleted VPP app")
@@ -161,11 +162,19 @@ func (svc *Service) deleteSoftwareInstaller(ctx context.Context, meta *fleet.Sof
 		teamName = &t.Name
 	}
 
+	var teamID *uint
+	switch {
+	case meta.TeamID == nil:
+		teamID = ptr.Uint(0)
+	case meta.TeamID != nil:
+		teamID = meta.TeamID
+	}
+
 	if err := svc.NewActivity(ctx, vc.User, fleet.ActivityTypeDeletedSoftware{
 		SoftwareTitle:   meta.SoftwareTitle,
 		SoftwarePackage: meta.Name,
 		TeamName:        teamName,
-		TeamID:          meta.TeamID,
+		TeamID:          teamID,
 		SelfService:     meta.SelfService,
 	}); err != nil {
 		return ctxerr.Wrap(ctx, err, "creating activity for deleted software")
diff --git a/server/service/integration_enterprise_test.go b/server/service/integration_enterprise_test.go
index 32420f39d6..f87d9b144a 100644
--- a/server/service/integration_enterprise_test.go
+++ b/server/service/integration_enterprise_test.go
@@ -9892,7 +9892,7 @@ func (s *integrationEnterpriseTestSuite) TestSoftwareInstallerUploadDownloadAndD
 		meta, err := s.ds.GetSoftwareInstallerMetadataByID(context.Background(), id)
 		require.NoError(t, err)
 
-		if payload.TeamID != nil {
+		if payload.TeamID != nil && *payload.TeamID > 0 {
 			require.Equal(t, *payload.TeamID, *meta.TeamID)
 		} else {
 			require.Nil(t, meta.TeamID)
@@ -9951,8 +9951,11 @@ func (s *integrationEnterpriseTestSuite) TestSoftwareInstallerUploadDownloadAndD
 		// download the installer
 		s.Do("GET", fmt.Sprintf("/api/latest/fleet/software/titles/%d/package?alt=media", titleID), nil, http.StatusBadRequest)
 
-		// delete the installer
+		// delete the installer from nil team fails
 		s.Do("DELETE", fmt.Sprintf("/api/latest/fleet/software/titles/%d/available_for_install", titleID), nil, http.StatusBadRequest)
+
+		// delete from team 0 succeeds
+		s.Do("DELETE", fmt.Sprintf("/api/latest/fleet/software/titles/%d/available_for_install", titleID), nil, http.StatusNoContent, "team_id", "0")
 	})
 
 	t.Run("create team software installer", func(t *testing.T) {
@@ -10027,6 +10030,72 @@ func (s *integrationEnterpriseTestSuite) TestSoftwareInstallerUploadDownloadAndD
 		// download the installer, not found anymore
 		s.Do("GET", fmt.Sprintf("/api/latest/fleet/software/titles/%d/package?alt=media", titleID), nil, http.StatusNotFound, "team_id", fmt.Sprintf("%d", *payload.TeamID))
 	})
+
+	t.Run("create team 0 software installer", func(t *testing.T) {
+		payload := &fleet.UploadSoftwareInstallerPayload{
+			TeamID:            ptr.Uint(0),
+			InstallScript:     "another install script",
+			PreInstallQuery:   "another pre install query",
+			PostInstallScript: "another post install script",
+			Filename:          "ruby.deb",
+			// additional fields below are pre-populated so we can re-use the payload later for the test assertions
+			Title:       "ruby",
+			Version:     "1:2.5.1",
+			Source:      "deb_packages",
+			StorageID:   "df06d9ce9e2090d9cb2e8cd1f4d7754a803dc452bf93e3204e3acd3b95508628",
+			Platform:    "linux",
+			SelfService: true,
+		}
+		s.uploadSoftwareInstaller(payload, http.StatusOK, "")
+
+		// check the software installer
+		installerID, titleID := checkSoftwareInstaller(t, payload)
+
+		// check activity
+		s.lastActivityOfTypeMatches(fleet.ActivityTypeAddedSoftware{}.ActivityName(), fmt.Sprintf(`{"software_title": "ruby", "software_package": "ruby.deb", "team_name": null, "team_id": 0, "self_service": true}`), 0)
+
+		// upload again fails
+		s.uploadSoftwareInstaller(payload, http.StatusConflict, "already exists")
+
+		// download the installer
+		r := s.Do("GET", fmt.Sprintf("/api/latest/fleet/software/titles/%d/package?alt=media", titleID), nil, http.StatusOK, "team_id", fmt.Sprintf("%d", 0))
+		checkDownloadResponse(t, r, payload.Filename)
+
+		// create an orbit host that is not in the team
+		hostNotInTeam := createOrbitEnrolledHost(t, "windows", "orbit-host-no-team", s.ds)
+		// downloading installer still works because we allow it explicitly
+		s.Do("POST", "/api/fleet/orbit/software_install/package?alt=media", orbitDownloadSoftwareInstallerRequest{
+			InstallerID:  installerID,
+			OrbitNodeKey: *hostNotInTeam.OrbitNodeKey,
+		}, http.StatusOK)
+
+		// create an orbit host, assign to team
+		hostInTeam := createOrbitEnrolledHost(t, "windows", "orbit-host-team", s.ds)
+
+		// requesting download with alt != media fails
+		r = s.Do("POST", "/api/fleet/orbit/software_install/package?alt=FOOBAR", orbitDownloadSoftwareInstallerRequest{
+			InstallerID:  installerID,
+			OrbitNodeKey: *hostInTeam.OrbitNodeKey,
+		}, http.StatusBadRequest)
+		errMsg := extractServerErrorText(r.Body)
+		require.Contains(t, errMsg, "only alt=media is supported")
+
+		// valid download
+		r = s.Do("POST", "/api/fleet/orbit/software_install/package?alt=media", orbitDownloadSoftwareInstallerRequest{
+			InstallerID:  installerID,
+			OrbitNodeKey: *hostInTeam.OrbitNodeKey,
+		}, http.StatusOK)
+		checkDownloadResponse(t, r, payload.Filename)
+
+		// delete the installer
+		s.Do("DELETE", fmt.Sprintf("/api/latest/fleet/software/titles/%d/available_for_install", titleID), nil, http.StatusNoContent, "team_id", "0")
+
+		// check activity
+		s.lastActivityOfTypeMatches(fleet.ActivityTypeDeletedSoftware{}.ActivityName(), fmt.Sprintf(`{"software_title": "ruby", "software_package": "ruby.deb", "team_name": null, "team_id": 0, "self_service": true}`), 0)
+
+		// download the installer, not found anymore
+		s.Do("GET", fmt.Sprintf("/api/latest/fleet/software/titles/%d/package?alt=media", titleID), nil, http.StatusNotFound, "team_id", fmt.Sprintf("%d", 0))
+	})
 }
 
 func (s *integrationEnterpriseTestSuite) TestApplyTeamsSoftwareConfig() {
@@ -12243,7 +12312,6 @@ func (s *integrationEnterpriseTestSuite) TestCalendarEventBodyUpdate() {
 	require.Len(t, calEvents, 1)
 	assert.Contains(t, calEvents[0].Description, fleet.CalendarDefaultDescription)
 	assert.Contains(t, calEvents[0].Description, fleet.CalendarDefaultResolution)
-
 }
 
 func (s *integrationEnterpriseTestSuite) TestVPPAppsWithoutMDM() {

From 39a9ec1ad6725c68d1140559e9b6f43b6639abf1 Mon Sep 17 00:00:00 2001
From: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
Date: Fri, 2 Aug 2024 14:28:43 -0400
Subject: [PATCH 57/88] Missing space before timestamp (#20811)

For the following bug: #20810
---
 .../Software/SelfService/SelfServiceItem/SelfServiceItem.tsx    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/frontend/pages/hosts/details/cards/Software/SelfService/SelfServiceItem/SelfServiceItem.tsx b/frontend/pages/hosts/details/cards/Software/SelfService/SelfServiceItem/SelfServiceItem.tsx
index 9c4146da4d..76b7cd7f7f 100644
--- a/frontend/pages/hosts/details/cards/Software/SelfService/SelfServiceItem/SelfServiceItem.tsx
+++ b/frontend/pages/hosts/details/cards/Software/SelfService/SelfServiceItem/SelfServiceItem.tsx
@@ -41,7 +41,7 @@ const STATUS_CONFIG: Record<SoftwareInstallStatus, IStatusDisplayConfig> = {
     tooltip: ({ lastInstalledAt = "" }) => (
       <>
         Software failed to install
-        {lastInstalledAt ? `(${dateAgo(lastInstalledAt)})` : ""}. Select{" "}
+        {lastInstalledAt ? ` (${dateAgo(lastInstalledAt)})` : ""}. Select{" "}
         <b>Retry</b> to install again, or contact your IT department.
       </>
     ),

From e7d56e9149c180d32d5207842af2f602b3a210d5 Mon Sep 17 00:00:00 2001
From: Roberto Dip <dip.jesusr@gmail.com>
Date: Fri, 2 Aug 2024 15:51:43 -0300
Subject: [PATCH 58/88] fix docker compose detection in fleetctl preview
 (#21006)

for https://github.com/fleetdm/fleet/issues/21007

CI that uses this is passing now
https://github.com/fleetdm/fleet/actions/runs/10220076886/job/28279696099

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
---
 changes/21006-fleetctl-preview | 1 +
 cmd/fleetctl/preview.go        | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)
 create mode 100644 changes/21006-fleetctl-preview

diff --git a/changes/21006-fleetctl-preview b/changes/21006-fleetctl-preview
new file mode 100644
index 0000000000..9fe2fd3286
--- /dev/null
+++ b/changes/21006-fleetctl-preview
@@ -0,0 +1 @@
+* Fixed a bug in `fleetctl preview` that was causing it to fail if Docker was installed without support for the deprecated `docker-compose` CLI
diff --git a/cmd/fleetctl/preview.go b/cmd/fleetctl/preview.go
index a48734871c..1aa78695f9 100644
--- a/cmd/fleetctl/preview.go
+++ b/cmd/fleetctl/preview.go
@@ -74,7 +74,7 @@ func (d dockerCompose) Command(arg ...string) *exec.Cmd {
 
 func newDockerCompose() (dockerCompose, error) {
 	// first, check if `docker compose` is available
-	if err := exec.Command("docker compose").Run(); err == nil {
+	if err := exec.Command("docker", "compose").Run(); err == nil {
 		return dockerCompose{dockerComposeV2}, nil
 	}
 

From 480e123ae53d8de5eb8f1e7c055ae9654d439429 Mon Sep 17 00:00:00 2001
From: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
Date: Sat, 3 Aug 2024 04:00:33 +0900
Subject: [PATCH 59/88] Create fleet-profile-image.png (#20985)

Uploading the Fleet's default profile image for use on brand fronts.
---
 website/assets/images/fleet-profile-image.png | Bin 0 -> 11380 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)
 create mode 100644 website/assets/images/fleet-profile-image.png

diff --git a/website/assets/images/fleet-profile-image.png b/website/assets/images/fleet-profile-image.png
new file mode 100644
index 0000000000000000000000000000000000000000..3d28053398fc86c3b0e03473bec0a13b46d8d8ef
GIT binary patch
literal 11380
zcmeHtXH-+&w&+esNa&#jq=u>>(xlgf-ULCANJpBYsPqn@NEd=AU_p@bAyNbcqzM7(
zAWZ?0Dj<X+p?BoP@1FDT-80@e@BTPH?%E@>t~K}0+A~>m&b8vN8tc+gb5H{SK&P*#
zWd;D0=szDg1zCa|4toj!Ag!xL=GtdxXWfrTHpMeaq)(%FgOC2Y?bL~WP(6Qbvv(pa
z@wg(yzaP80dwleZbhfj$da!h`dHVUu#<*|Paj~~YuhHO(&4rHrvJq0&{*Tp~kEdU%
zP7Z$W9-VIgK0Z6z+dbaioIf62+3!Ez*!@2JdwKlZ<^b{Y!Q$!uRPAo<_swU$tI@mT
zr{9`>=9M-q6`ypz&YFxn-P`}w++H!C9n|pCeyjiZ!$aJV^T3NuxAGsZ<v(;cI(0TW
zmrnP`inj9xe?25D;rFKQY!9D)E}l(&SvZq++?bp&^59GER?)%Fj=7!gwMJq|^>o~m
zius(`=DpRghu<r9st=b_+L!%zMmM@XpH6qqKhHmI&3G~%G8OyeNAupv-u~{&32E}^
z2kG$p$xiFh+QGu&Z_@nS?!@-c=<oTVHwQn5bGO!;+li&sOC{Ccg-V?OKy+1K3u7Me
zeXS*eJjVbo=d_5e2>gfq_nO1rEc)+}U1!yd<`(~Ud#I{__}k7_xCi9lwqjx7$UqPI
zV+VI)&x!f}u=6d70`$iY>TFEs>c4M?^?#@5UrpZs*!0*o+_=IGpO;jNc8qak;e%)?
zT-CDClKjSn>FN;U2dUSm@|RH;OuamA#%Wews4c2l_>?q266X0WA@S!e|G%{dw>K&h
z<q|_&JaP;osso$8X*DdT5gtxY$k_}G7mUVR8dMp78CRN2K7-p3o0~h11N|gBGK6L_
z#a@u+2fE(_gT7I=Raoc>XUob-MiNWV#Df~6#`}W3^Y|o|qwLL-+1~pHv0vhnfGpWZ
z{nw|uUgZ@9ILvRn`N+BKq=00&%aonen5x*$49c-q%T>9m&ayBR8-Tv=_&h-UN&b%)
z0ceuvVlVI3`vY5m7`NQ<*1j?k#>qcly%(lGz;idwXiw+&<7bz(aP*n?z!tfD@?Qlu
z4P+K#f(|ORGyz@JkC3-uzsrdJ<I6^k)I?ts1ybNbFLh?9Jy2`%#l}K-hN|$<wRh6X
z*A+Y-clS8I0~4l1I&=%x`p3_iC8ZcFm%hK8&(8Z)`duGlwu$BN%}ZN_XLx?zr(Z6g
zXEs~N^Kv!Tz#W?|<ngQv<#*|-P8#Z^rUc;;v&J?HQPGpH7?`|*)%4)Ax%|A<l@hJ2
z+G_3vv40~M9Wc7V@A^o;(pGBqh~2L$0p1(gI-~s?snDw1_+p)x+_g@-X73nvVe8ma
zBe}UYZkk)44Rf9kA1aSZZvKtBGOqkchE_SbTSVP0)a}9s(+y|w@G%Q;I<xbkY2;R@
zb-FUD{h<O2z3PEb0SK|a#lW@`F0z|G?VE%*J43y5iUzWf(6>;Gpwb1SMx@|tV$QdW
zOB+t06E_mQ)fd`G$z+D!N`6rgqX7nw@VbQ(s)?L!=MjAf2^J~Xq1bsGau$5?{slQb
zN9NCJ?~l(y<73C4jknx+=3&Oi>EC(3aP?}}_o>Z^!%(q>i1`nM@PP29t)rx;`ynHH
zm#<H6vkqW!x*2KagM^W~qHT){Z<bajzqTtNzb;L(Y*0@Z-u-Os^pWP!Dy!oNu`Tro
zdaxzSx+IL5j-Hzo?3%!GQGs8Mt_f4sN-_Lpi6J}<lx$80m(dZH`_lDWhg&2^eHaDB
zxM-a|e=u!LcNCi~676{RyZQ-l2S>t!E}Z7ju_RS5tgY6Cokk(`J?8OiwSMI_=(&~o
z#=Nj6EeaAFZ{|*}nji}P3!pGKU5lkyzsOrZ{{}EB@QH=v*`(%q+k)`**J)+L>V;|a
zFYz{E@bhv10C*H(NPjI{VH}qF?d(A%1AoO?iyHg^+TwWWp5HKZZ(wRIpJpxleHy*W
zh)!6(U;s)>MqLA;g5ZD7E9HfPC_L{KG+e(wy^Z<<6E7q-2Symc0`{-8#RQH}2JDyq
z13x;q2u;2z{F2u_4}0y$$yLtw=QK;OJS-vg?&GRQR5xI^?=XAu7O1iVXRv%O+2KT9
zyw_Jfi7<46j?x1!w=_ZHLON+1sHc(#en=r9j}F|J=|hqKUWRd)4&UFZr6-S8vZlDY
zL>cG6spUtZRZhp>0Mg(jKi>O=$Tqny$y!teopgeDIUU&iH?I1!B#54;+%HI&&_Xe4
zJOg|^#Z_+)C3tV*gtkP|6JcU%?O>|_!sE;~uPvOARQ%5cP@=xrtWcP+d=u7jCXzF|
zq?~u?(E#P_jrGR@{@1^HJXjb_IO5?xbOA)ybNneU_m0`XK7M&&)wHNY%u)-#39|4X
zgdP#^DG|Y;KJwf?M@00~>{?#wXE$n)YM$!OveiZ&A#-6}nM{y33)J<usQ3e+wpEbS
z#z<rGTO68$-#=t(8~6v55P}aHgC5_Al(EGvJVkl1p`M`76i_`os$oCSV~a=`JKWVs
z;1Ub!hLGMoRL_`dI0&RcHseZ4zW$w>{F4b6>rEd{kA#~cv=Z2;*dwW5Pq!sf@^xpi
zm{La)kDDXqsTha67Xzfq-=EDGiYae@HrjxX&PwQgVk~)Wk53oChG1|+O=9*@q>NJZ
z?>Y&+7n($}h%#o-f6rxX5pmRC(8s~8F*DALBl03vT}0GSd%b2M=vpx-t+%bH?<IfB
zA~Q>`eR<1-f<`ovmei4&WYxcMkE`deWm*!YhY!Ks^sTSB+qQWrg`)M6`;ZPS^26XS
z4<9Syo}AJppYKEhaK7N?c`x6WqJCnQ&ED;|@+cw-2R|UCZwFC_-Vsl%Av2?3L}R2&
zv7>2A<yiR}2h&ert0ISU?pX8kHCZuH?ALOfpC~ql1Ia2DOqWQFloiX#qP{LN^EH-w
zbd+uPb!7Ff1rVhAv`4l3v*z2$s7aN@9#v{|wtms1);*mfFM&G6-lxjUxboogzT@(5
zQ7$vF?L1<8jv$J)jGkY;pR>*D4C}^wp9*x*XfbSZL^VbSe8$*mG(rL+T&+-{R}faH
zJz@AI#B&q@;a?Es@8y;D)?eWKhq|B-U_=mgn*voUOI#>Zv<N~N1H8y%BAC=E7=c1E
z63-NIyyUMIYu967OMKm2W6l;te5Xo-&e&!mXo=IC0RnXgPbqQ|>7z-nGo(ji$$g|o
zb;;0I6tHy_!acLG$p^$2=G0&hB!JgTgTZb?&op_Z6Z^T8-V@Q+_)6B<k$hrzXcG}g
zDY2Y7#PuZ|e+}&3qxI<WZ$x_9a#6mL1&3!E*q#<|`XAXq^mO#di+LC3bj8kIVKJ{p
z+*EFKIX)_o+EE;~$_4fxiV*+8)M`%OArf7|^>Pux4gqOo3#_RdbSY{an`-nkdObnh
zS_eH_wpBqb>TB>IgsCDZGwNO->)-cHH4SFDtc&@;0?=&~t>g>b7<)xnVr}Y*A*&|~
zZ1$66-y+f@5)Q8GvSs&?VxFvF_7UN$XVhvwv%Fx_#?sg4Ih4KrZ0V3mUEy7~wXpcJ
z#+CGVL*aYR(EV4nWCmFo>2|asC^RGvU_||mp7Em{(#Z_iIRS{c0oKC7@giV|D-{C7
zkNyjez}`&Sm*@!CPTE{NHxEsWMpEgDF)iK@gpk!_BN5@VH!u8<=1?FR9PrRh?hDm+
z&|IwTSbcdMjznpfZBipPuJ&ja&8R%-*}h8MShYLs*Je1OBH`gU9d^Nym+qyH&`T`}
zw@@lKkWmAVL2WW+Sv^x(ZUk>A)d0vSn8V<kHU)z%)x@pY3W*;IxZ9){rsUiRd0VRN
z+=vgMRQ42a!g?1%#UAtuhIY4IV$Lvfuy_&8Ce<taqbsnlQeVM~7k#LWZ^(3FbY2r)
z#6r$B(B+(Pkv?QPCHt>w_DOag$EJXuWY15vb9py9P28HRlOQ0FB@VQ!7Z%w+88A4W
z`y?F=y{JrVig%%}FHEUZCaz~H3r^9&Na7rI%k<M%WV|MLRaAYj7`9MeL!Y598Rb4h
zwylv>Qx7)$hPrB$114@Q)T##r5wC``ora24CjNe|>eE2n8+5#6LM7ppS{QxkAN`6c
zNEg0(J95qGnXq0xG?ywD3SO-v{$`;PuWt^BgRo86t59AIWp-w!lEVyJqvSAmBM9!l
zbF+0Kn~4%?x(Ut1<`Al!6BJ3DiFRu-Hh^x6WA5Qo+O2#1EvWlVkuG>kD9xzZC#6S1
z?$~AObdGdtWJys>b)t(q_V6EUK}>Z#M7AV*Z3=UT*_5Sylk96(U3+lw0tB32oTFTe
z6JECR7hJ!diBZU!E$mDJWy)sTZ}`2hj&vGsKj*bxx9xgDnaGXg6hn2}GLJ^}uf3&S
zwR7{cjjd+Jc`jbTM)lvl{%~ZqZ_gK-0mdH(W9?<^mPwAGqqo|dW80OnXprpDbtluj
z`!Yz`BY9BQM;(%k)uwDvF^kI>(VY0Vnu_|}kUYn`9gZvjoSzw+gqq5s>eJA{*Nj2-
z_yoG3tV;NB$PM?ZIe{(>Cq~QxHTMNnBrQig{IS<3>ktSZ4mi}s7cjB#V31@ha18)N
z9fyk2xu_PoV{kR#pZdov+!&;Rsoy{ND&~?(0lgKf>)nje%wjn>xL2VTR2P4-KtwUp
zh6Y_9I0hNMZScN^I)CKJ9-A*JB$}SfZ30p`k}qe0;=HnA$qnayO>wB+bFA4ZvS~W~
zPRSrOWh;ygH&5#sw1Z(@o!=pT6!tq;s9T7EZIOmZGIf%wM^A;>{`w;@M&#>~oKboy
z(>-WBPZlNjh1mhKG>LNX=?(WS==B_R!wLe}cxw>iP)<;)eFv7rI&iP809Xgmc`Nxn
zF(ejN-1Dj(ygKXVkpe~H&xA(rBtowz8J3tJX-e2Lu<!o#Z1Cut>gl-RvaTZ+Hnyln
zjb4}Sib~2HL+wl7w2NAU%=&n*a^%10?dq$iyzM4k`JoIWt_DXh%IdjY!ySyFO0R(C
z?4vf~lygp+DFe@6?y!$)Og%UM4l_+QrCs06hT==`Ns~Zpuq=mwz<NC=redEC9gi=h
z|2QcRWl1~)sT8|7-4ZcO>>1QZpB{@jpi$Z|=`Y0I3G`BFx9U!t7a7e17Su4K*I|v*
z%+4;pgjH1xkK!!!)s(|tRl@{`bnWB#m-TzFMiblTs=xX{5*wDI%x!^TwO0^Jhd<;n
znY@JXb0!GV;SX6%<5KJx#4!wza4BELj4p0#u6P9DpB|nZe46I2lB14x<YHsgHiE|?
zz%)Y9T(nx1e_d5s#xQ<WeTXnaQWvPM?Vo{zm*qspt)d=X&O4jQ2nblr^4Iy&G2Dj<
zOXVf#s=mzcRaVcq|5%)KV$-CrwCz1>HnWG3qh5#=J4RiEZfT~6;$;s(C%Vmk!v&M-
z89wK2drrOe{fEcZVdA@&FoH*DgCj^PkwRpdIhr9KM=!>G4P{cl@4wo2$u>vt4<U9}
z6P2;=9}%Ql+kf$F_hMk#c2D@J!K>9qn`UsmSH`nQXZNImfs;62%uU&jCATok7!>Qg
zcaCy|8}+P+%x{HF0b88j>&?z?-Z2Eh<pdO>zw0D6lKierxr1YGbHt((%ViIGJMo;m
zSH|VaZgTtcN>`muQ9881N;*QfXu|TQVO+u2Ul%Kc+7|a%2Qzbp+OD|<UJap&e{zF|
z#a_cE9R_j~)_u=hm-{8fJ1=WGUTbK%vu?A6sMWJWfhh9nd*N+R%0_M2tXMo4<anP`
z-mTdkX!|~`pwU?B)xewmoJ{2w{Y_0NXiT1K;Kc=`JvvN2cq4DMOo~ehny=nWJ^+GN
z?V}OAp9P{1Zt?K7!3OW7J<<%3Nk$|d+~VSs+XU^*<om>>#OOTK4v~?Wo@j$f0xtK$
zUf3*uY<b5T|J#G9V4t$N#^llcv`Tq+m-}PIC*;l*+K0Dp*^ED7Z~)Rh3i<3tx3@f{
z?<>>A&%Me>Nz<OV9cOK-20*L25N-;~LrR(@Kk{`~X)E*@(A*N3bz582tyyi(ob&4O
zWo10^XZdu4-kJ55mMJnJqre-Nb6i;+pXb?WOM*gV_WiHVFIH^BuB)n9MZ+3Aw-utz
z8PFE~y}veFihpr4yvSK=v5x<BnrY&{Z|Xs+wLjEmm^QdeTDs{M;BzOqb6zRrXQ>uC
z)W27{OD=F-VcObVp<lD9J96tGu{JKXHN{f@=8Yk1ckF0rWy0xP{2$?1xm972N5lOh
z$BC5Xdg}cFE!clsnmBR!Pb+n;+gk*(Cw~f%cJ4;SAYjnts|lK~UpQrGcovKE$B9So
zhf_)X+GxFzyf+xG|7zfhN=P{5UzZ+nKT3I*N)(@*UrJhIU+UQ!bRKX%zwv3s_j7Ts
zn!ATZr@QT#_S5Ds9|2rIN%r^;=LLzr<w`z*(h+5e<m;!cJol}o!6>l4pXZk0`ePyf
zo43QhtQa1p7lHwe-7W)xU}={<1Y^+8Y75nIrEn?$Zal1TsJo6BN9bQH{jJAF%Lrif
zIRunt77~N7Bd_^@+z%7%iojTj_QsxdF=b9Mxk5c7RKR5vh{PD)k<C031qe>R4%nY4
z!<03@Z%SPVb%_BsEMBCv)M?_WZf{E|*y0g@n)|j?@&?oJq7#=O1m_<{u6~4MGcbWs
z_dL{ee#-H)kWs-0Fc7lo<K-icXS;E~RHra76-r=OH8Y-LB5>caDAu2>bpmY=I=YGi
z!aKiP$+E6vfpl?CFOB|H#>eime4pW<@>~9gAc2KugHQq-gh<)d59@$0mn5%T)`8>n
zoOSvM&aIkt7MIKG0Nl^<sh>vc)1hGv@4gy|sx?E)6;AstJ+mv0vfe2;f#B9R7m{9D
z&Ri+D{#kE(iUp_L?R<ZzsiVgtys-m}c>CyOmOOO)?YJodFx*V}sC?byB0LwUx4t{C
zp$E4Fr}1km`HN1mC-vl0fi!zg&dx)0AA0aB2Z2_nLWBEFX#L$>-S!J856prdcu#;Q
zkvK?$=A#Eh2liFh8U8goClF|qZ#QpL^F(q~G(W7WMm`DJcQ4e|DL-YqtjvmbzL8*V
zSjM}|Dp(Zu21PLME#n<$6)gTkJ14GX?+@ymEN8FgQ!vi0=stkP7xRk3CG+A=Q;hd8
z{CnzaQ2-x!Z=hjZpW&POhcx;&cqwl+B@djcl($q70q&c<_K0;~p0tGQooOVDrz;VT
zhlTHE%6s7U3rZdBW?TJQb_G0GR)uTB*xSM4>lHe|VwiR7s$=km35^nJ#8e=3kHU;&
z8I9llE2j5$R7uUHmvZn2m?1iRo+cIJ6rlK>4Yz+OoI<dij;R5ZO9$?Aux&t8&{ewI
zl8Xe5x2s?!=f{N5Fb1qi88tzlLe1e}NWw@vMY>4^Za--s$0`*+(oK<0t_nyujoh1j
z`t0=9RKNv*ckRxvt^w&{QmH^Qd03wBU`m<4%Uh5#QP=W!8`$_<c@)o}F6pnRvK0D8
zk2sS_lX0VDloL7i@3{^E8DsZYcLw21<lG+u`itEw+W$9vcmVzm4t^;U06b&D=rEx8
z;Tzv)LCyw{bE>#F6yf407=BwI4&aXj-X*C-%F0HPp-?0c&gn~as?Oh4Zb&4LNaxEK
z%=YMc7GtXsUULZuhoju=)0xmV>0q^f+h1R8>uO_1MY6ZR12M0DoPM4@EtWxQc>-$J
zjNZ3bR+h9=wrOZkxAe2=ITgzB$H_&K&fp2co1z^?o}^i$CXx{SOZDdW(uqvLO`jTW
zCebI6#AR0{MXeWI&*f2E)FHMz`3U$p`8aTN7CCmBj_BXZlv3JopLsVpChqhhv{}R6
znvy`nT{6d$PM^+$+%Sd}*Txn^6~sbmi4ITq%YDjs%5e-n<)gpb>6NgY&0q(u{UXnO
z)6Y)#CY^vJw^tnUDelJJ^Trft`s;x_>0DxgSb`wE**tyj^X58FWMBl`u(3U{F+JeY
z7MMZ@^-~iefY3xZFpU)jj+u6Q+?)0QYQZ8+5KrhF6C{%$=Iem8;QC2_LJwTtc@%q)
zeC}xQ8jv(E>FdB_aWcRysSWEJgdr;)ojY=K14$+)evL?cGpFJ|s{%~EW}D7!(DYBF
zzl&`>S}?imMAgfIlysmfRvDUNO4sst;9w}Cu{3SDw%&RL&}$X_Hvcr*C50`s!*-?B
z#k{=Fc7u(Zy_4V9k&*S~PjLkZs8K*H*nr6Wx-go+3C%xvd==!W55Fta_fc}tHnRck
zj|Q2dSrD_jME-7P|MYl4<{QF<Z)WFnBPZj5t7Huna-k4+0YwepV9qygWBVguH$$`F
z-S*b)3QJLN3gX?0OS!oKRUP^Q)J#cBJ1s`M79%r=+Weh@hqSxiXL=@5CO^5WC?Pd`
z5|W1lvN7khPNKlMIDmOH;Oyoj`2h}zS$z2qyyO5MU(SEs%6{r8-=q#~%ojc!0J`01
zJvYgUKz-IMN{=-Q<S_u*eV1#j`n)}i%<OeJ*XrW)z#{emE8tx#p&5`&&$EKCqi~=%
zae)^TXA9_m@B@nvY+@cDxw%I8Uczu<Y0i)1#hCSl(Y-=H8XCT}3puVT0bG%HOP$za
zQKg+gd1r$!lk&IuECo7Tph^a)BsXzP2{6RsWJ`9K(q+XAv1r4b<AxUpIJCdxI)SI8
zcdj%qt+PJBm537wlB4Qnv1LM*pD(TqC?+oCioZIiw2^4Nv%_6)?c+~G_g-t=QPwb_
z`X~UAqs0vW@go7mECbV2cyL0Bp3h7G6%L+(TE2+LK$W3!RN+H2A@PtukPeqEw)IyA
z*#)iUpu%KQ8H)_`EyvNRmW03z84O`Gx0W3Xl(9irB`o0y&-Hq;{})6-*Shs@l#qtT
zZ`+pK2T6W-Uy1D;8V|HB$pgMA9jKH{=qVqlh$&(T=~6)=`>9SzcB`6z41Gva7;|8(
znvT52S<5tcaSbEX6v(>twN_G^l8q70*6~KNmU*H<pRJGvVn%s(#s;xWrK<6#7@jWl
zC$9_J>wPM-SNElkyswOgCY6Ce$xdIKX{5{UfF^{k@idG|8yQGvOXk~{yRRu=Rj4m+
z0o5qifC%}Z`xrmj8~c~yC?N`8Luo3@y6f*_WKaa_&=07F=dZVsTIA}@h(C?=eMm70
z*#<{$q`b1mzj$7-id--RaeZ;+;*cJFT*FozgVlf~{~8;_FIjyhS!jyArXVeEULfrs
zsjKq*JT(P6Ywn%bwI6F0pXeSEA`%*u`iAbidwyOZGWpC3a&!-MQV;4Si(_DF!&3uh
ziRuorJMW*s#Ada^=;`1AgrMCjcO02@Zld4h=P9@QWx1*10AlvJ9Pi7zi5uw<9IYm6
zqt{~}?6b~0vaY`d)P_uHw@M?UJ5eUk2L>;Q?9P+scn=?1uZl~!0bi!5Bq@+y80}n~
zvg8eh3DgHx;Q-EsGC+8lUyorNxXrKk0R-;zp4P1Zuj;OuitSQhyY9iOiuF>8(P0>v
ztJ11zNk-2Tg@kGeTz7v{WTO_{hN~t1BgoDHvs(UT{We8otoSG62F_XNq9Td<v5oq$
zXxtH~&$pjdup!LZ0zo!7tt1Q!q<Y6|ks+nnWp_$01qd$J9R}Jx7FUO9Xst!9alGLb
zIYy<d!0`MI=T*JVRD8}){Z>RcZ&EYuM3{#_HzQaOKmE9nKCJ%X`vT<uFDKiE=3ZXE
zb*#4M1!{_Nk-KJbe7B@1qS_H+U_Z^bG7*wl-{Z>rWd5uL6LIxot2$h=@`p_s2ZtoZ
zC5>L2y8emxyTyAY+g8os?@POuJA%EE<fLo*?T<9`jwLjwi~bHoA3dLvroyd;aX$f7
zndiBcyi&Kf-A(#=NKH(+z2ne}Dd%Z=WI+d5tyKu+!`+Wp>VyPqLZMYt^9FiMeVen}
zhI%Uj2sj~tTUF~Eac6$=mU2kk_Z<rOr?+wIWd}Syt-?IhwvD_%^v$3pxc*-)Q(-4x
zdb0!sLp_f{(atI<$!(o3dF>l|Apn<vR)|arViWWr4zEGZmhjjR;AN8K!-HG5s^Z&W
zgl87#PBW#64J~IAUqA6)Yv6>m%G)7(bT#utud4z5efP3r1bdUosnEW4A>ZwS5FpD-
zGsfsBjYr;1PfQgje$>;mu(D$6Y9Gb({ikn`@9vxJDIllVb-e!8q{`@xfw!I6)7u`C
zwSjlNM<|F*W8*%j&urGXv$xk8D8hxN*MFV59H-i?aq}jIkltzKnAo|^jC<Lor|Em?
zJ?dU~|5D=pNCxrXqRw7m^_x`%V}>HePTt+z9(m=VzxUJsZ|Mx-{(ssoIVst5f-(|F
zV9In&A;i#evX$KMz~ZNBBI!{Ub!T*s6|`@1mS2iO)_o1mILK@P{+w6&XCtJ)5-*fy
z=*=`sc2g{HIk)KbtAP@j4ysRg?AuIMd1ZYLG^-w}Sa^`{BOXctWK=HHn%eagfMz3h
zy%Qu1qA-wI%&vE`8wZ$B=<AWpnjh#61aO@)72hzX0~lW4@h%a~O5y`L_s{bd8%9L~
zTocV9C08^6`ZaAeayp^9F#qAJ9Kbao+y22&yb?%uwVD&}-@^j2!;7_S!D6_1;<ZUr
zY4W%>E?&uKU}IFKqmz~oXf*S>JKH%xiF@wreb;&K1etU5L+QJc3gDo4pyKty6brh*
zV6tBp33%K!#sDi{=qe~QDbTj{Qhts;NzkiLZ=XMnW9N1PnL8U)aP|j+Rw@d^F2K>M
zdm{|c!}e+J2^oYI2C!W|e=o9472yb5VnWajhBL#@34+1)K9{$Guavkho!R1$BByo2
z+&M;*hd&^oH;9TeM_x#dG2wSzmJd$j^-^aNg9ebBbw2$=ASkkcZsWJFR38muRp{VE
zG69OX`{LFF7&ZKZS5IUZBx*Y&{E`ELGV=j>?bicw%;e~r5)|i`MO}jdhFNSJLX|H8
zx#l(wfh;sA<8CN9gvQD6UYoB0;x^T^)z|<L1CE`BH2Dg^?5hkh$Om_!JEit)i5%ZL
z$DRC%i{r*Fw_c0{w2ElRu`oKi=}+jZb%FK|gR5Z_V}zizMwsg1V0@l5uFnPuG{8||
z>EO5rFU)v;Lcfu^-2%ej41toXu3VB;BG`%gkl|4OHKRxL<pW>tzdrkp1X8@Ce$ppO
z?5(rQN3h3%iF#ia;J3{RbEd_w7+AG|a^`-^=fElgL`L_B9}PpgFK^TB$nVmm%ZuUY
z8XW>Zf!SNWN?@PagV1alFDHcn;*ZR<1}N}($6@&snD|TLyjv=p1BGEDG7uzp87u_>
zu@e*v{po@4wO~&w@Zf|Aa)T3)k<<+Lp#%2zvY?r{6jfx-3l8knID-s<!PY;)2rdQN
zS{Vb~pfbdAOo8efT&W6yS=B4py#P@C@c`3FB7OM>&GcCWB<CRs9%=v|v`q!bq2r+5
zvjz=++!gX(1&CcUUYOZd7&z|b2jeWjS~wtyFA)x0C+~HDC1b?+0jv-j0w=JSY=UR;
z2wcYBV?I3=x;6h$IoSW!qyudf$lPC;n{VMfAE=!>r(7lj#Ps!4p2*6QuSZ{gX(rh4
zAm8LMUyH0A1Dp_|_5@7Gr~#6;M`|{>fh1oK>i`JgG&O<j2NAFtH4g;<J<r}YA!eNA
zH^GoSM!*>hIb1>l`I+;fe$;?Ya1|YUD_Bn|#syB}0OI8G@$chyh_SwC5<`y{)b^*M
zacJ`Xn{j2E;!z^_{8Sg(;pRi9BeWpka@-c%6bXcWbp>IK0wgvij<WXw)Bx%opB?Vd
zfMILJ0pv6IX}AT9#VnJv5G0yGRg7B<$NJLhMmC6`qI+?b3Gne|=q1a-ZtmER0Xb>x
zw$b$ExLm1vFvOuI&zWjVSOb<>=1g^yhTEa(u}~aY41yXWpzsZH5%v3ZS_lSEU5+z^
zOC7e&Itj$GKQD~fnbFEO$LG9AoxXFkTDier@WNekyaX_=SRv@(=$IO08#NN0P>Eb{
z0`QJAu8g`wK(Wc~55gpn10fDzK_SS?he`?k<T;mZBt7CULEVfTihPm78$AFGs$Z3c
z-2ntqa#NuY!)YD9z-EAu=zO=BU`imh)d?RA;BTiSV`@SHgs39rW}Gs*a`p~>3_xM;
z;@80tlnpTty8=Tu?$a)?`QSq0i?K@p%H9sDcxeM{uF(3*?*oBmkiR(c4KJYj_)kDG
zxDeNkG2W%fF);WOcD!NsWZ1f{4je%y^Bc%)Rb%7<nmXs}ofkB=(=*UFyCh$`RZHOH
zJE^Ygk{XP-7t#+E--Mw*Hb1IJdIw;eANeu>Vc+VUCgF}35^@FV4h?hkFVj7|BWhXe
zorne2!kJUe1h23N8Bsp!Q+!by6iE_)sjSgDV+owH58p_b$KcA6?kH*RlAlQ4FuySI
zloA~tqi144`GFS*<?ucd<OLcvG!`gw{GI3zf!R1uDl)_u{1tv}iVkektq{8jBJk~V
zF^oFNsR80E5i!w0fX&3HyMDO2`@}uq!Tme=_6gO`cz}?=28LDhVTPV36YHf~K+{0i
z^rFojEqz{tHuLSt^eamLT%-P5jPw6bTZ;eFik$y@-0@!===+~K&sU(TAo#~e5j$tq
h5=Q^6xBhEI6!7uAZfWaRarZy{^tFw($}}7z{|^JtYs3Hm

literal 0
HcmV?d00001


From b29470913a91d10391e9a922fcd516a57da807eb Mon Sep 17 00:00:00 2001
From: Roberto Dip <dip.jesusr@gmail.com>
Date: Fri, 2 Aug 2024 16:06:21 -0300
Subject: [PATCH 60/88] disable FileVault rotation if the server talks to an
 old fleetd (#21004)

for https://github.com/fleetdm/confidential/issues/7522 and part of
#13157, support map is defined as:

| | fleetd < v1.30 | fleetd >= v1.30 |
| -------------- | ---------------------------------------- |
---------------------------------------- |
| Server < 4.55 | OK/FileVault rotation uses system prompt |
OK/FileVault rotation uses system prompt |
| Server >= 4.55 | FileVault rotation disabled | Escrow Buddy |

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
- For Orbit and Fleet Desktop changes:
- [ ] Orbit runs on macOS, Linux and Windows. Check if the orbit
feature/bugfix should only apply to one platform (`runtime.GOOS`).
- [ ] Manual QA must be performed in the three main OSs, macOS, Windows
and Linux.
- [ ] Auto-update manual QA, from released version of component to new
version (see [tools/tuf/test](../tools/tuf/test/README.md)).
---
 server/fleet/capabilities.go           |  6 +++++
 server/service/hosts_test.go           | 31 +++++++++++++++++++++-
 server/service/integration_mdm_test.go | 36 ++++++++++++++++++++++++++
 server/service/orbit.go                | 12 +++++++++
 server/service/orbit_client.go         |  2 +-
 5 files changed, 85 insertions(+), 2 deletions(-)

diff --git a/server/fleet/capabilities.go b/server/fleet/capabilities.go
index be397bcc32..2e12810be8 100644
--- a/server/fleet/capabilities.go
+++ b/server/fleet/capabilities.go
@@ -99,5 +99,11 @@ func GetServerDeviceCapabilities() CapabilityMap {
 	return capabilities
 }
 
+func GetOrbitClientCapabilities() CapabilityMap {
+	return CapabilityMap{
+		CapabilityEscrowBuddy: {},
+	}
+}
+
 // CapabilitiesHeader is the header name used to communicate the capabilities.
 const CapabilitiesHeader = "X-Fleet-Capabilities"
diff --git a/server/service/hosts_test.go b/server/service/hosts_test.go
index b2765516e2..1e9e663ed6 100644
--- a/server/service/hosts_test.go
+++ b/server/service/hosts_test.go
@@ -6,6 +6,7 @@ import (
 	"encoding/base64"
 	"errors"
 	"fmt"
+	"net/http"
 	"strconv"
 	"testing"
 	"time"
@@ -13,6 +14,7 @@ import (
 	"github.com/WatchBeam/clock"
 	"github.com/fleetdm/fleet/v4/server/authz"
 	"github.com/fleetdm/fleet/v4/server/config"
+	"github.com/fleetdm/fleet/v4/server/contexts/capabilities"
 	"github.com/fleetdm/fleet/v4/server/contexts/license"
 	"github.com/fleetdm/fleet/v4/server/contexts/viewer"
 	"github.com/fleetdm/fleet/v4/server/datastore/mysql"
@@ -23,6 +25,7 @@ import (
 	"github.com/fleetdm/fleet/v4/server/mock"
 	"github.com/fleetdm/fleet/v4/server/ptr"
 	"github.com/fleetdm/fleet/v4/server/test"
+	kitlog "github.com/go-kit/log"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 	"go.mozilla.org/pkcs7"
@@ -1861,7 +1864,7 @@ func TestBulkOperationFilterValidation(t *testing.T) {
 func TestSetDiskEncryptionNotifications(t *testing.T) {
 	ds := new(mock.Store)
 	ctx := context.Background()
-	svc := &Service{ds: ds}
+	svc := &Service{ds: ds, logger: kitlog.NewNopLogger()}
 
 	tests := []struct {
 		name                     string
@@ -1873,6 +1876,7 @@ func TestSetDiskEncryptionNotifications(t *testing.T) {
 		getHostDiskEncryptionKey func(context.Context, uint) (*fleet.HostDiskEncryptionKey, error)
 		expectedNotifications    *fleet.OrbitConfigNotifications
 		expectedError            bool
+		disableCapability        bool
 	}{
 		{
 			name: "no MDM configured",
@@ -1943,6 +1947,24 @@ func TestSetDiskEncryptionNotifications(t *testing.T) {
 			},
 			expectedError: false,
 		},
+		{
+			name: "darwin needs rotation but client is old",
+			host: &fleet.Host{ID: 1, Platform: "darwin", OsqueryHostID: ptr.String("foo")},
+			appConfig: &fleet.AppConfig{
+				MDM: fleet.MDM{EnabledAndConfigured: true},
+			},
+			diskEncryptionConfigured: true,
+			isConnectedToFleetMDM:    true,
+			mdmInfo:                  nil,
+			getHostDiskEncryptionKey: func(ctx context.Context, id uint) (*fleet.HostDiskEncryptionKey, error) {
+				return &fleet.HostDiskEncryptionKey{Decryptable: ptr.Bool(false)}, nil
+			},
+			expectedNotifications: &fleet.OrbitConfigNotifications{
+				RotateDiskEncryptionKey: true,
+			},
+			expectedError:     false,
+			disableCapability: true,
+		},
 		{
 			name: "darwin needs rotation",
 			host: &fleet.Host{ID: 1, Platform: "darwin", OsqueryHostID: ptr.String("foo")},
@@ -2056,6 +2078,13 @@ func TestSetDiskEncryptionNotifications(t *testing.T) {
 				return tt.appConfig, nil
 			}
 
+			if !tt.disableCapability {
+				r := http.Request{
+					Header: http.Header{fleet.CapabilitiesHeader: []string{string(fleet.CapabilityEscrowBuddy)}},
+				}
+				ctx = capabilities.NewContext(ctx, &r)
+			}
+
 			notifs := &fleet.OrbitConfigNotifications{}
 			err := svc.setDiskEncryptionNotifications(ctx, notifs, tt.host, tt.appConfig, tt.diskEncryptionConfigured, tt.isConnectedToFleetMDM, tt.mdmInfo)
 			if tt.expectedError {
diff --git a/server/service/integration_mdm_test.go b/server/service/integration_mdm_test.go
index b4180fb2b2..4ccd1cba50 100644
--- a/server/service/integration_mdm_test.go
+++ b/server/service/integration_mdm_test.go
@@ -1624,6 +1624,42 @@ func (s *integrationMDMTestSuite) TestDiskEncryptionSharedSetting() {
 	checkConfigSetSucceeds()
 }
 
+func (s *integrationMDMTestSuite) TestEscrowBuddyBackwardsCompat() {
+	t := s.T()
+	ctx := context.Background()
+
+	// create a host
+	host, _ := createHostThenEnrollMDM(s.ds, s.server.URL, t)
+	orbitKey := setOrbitEnrollment(t, host, s.ds)
+	host.OrbitNodeKey = &orbitKey
+
+	// install a filevault profile for that host
+	acResp := appConfigResponse{}
+	s.DoJSON("PATCH", "/api/latest/fleet/config", json.RawMessage(`{
+		"mdm": { "enable_disk_encryption": true }
+  }`), http.StatusOK, &acResp)
+	assert.True(t, acResp.MDM.EnableDiskEncryption.Value)
+
+	// set the status as non-decryptable so a notification should be sent
+	err := s.ds.SetOrUpdateHostDiskEncryptionKey(ctx, host.ID, "", "", ptr.Bool(false))
+	require.NoError(t, err)
+
+	// notification is false because the escrow buddy capability is not set
+	orbitConfigResp := orbitGetConfigResponse{}
+	s.DoJSON("POST", "/api/fleet/orbit/config", json.RawMessage(fmt.Sprintf(`{"orbit_node_key": %q}`, *host.OrbitNodeKey)), http.StatusOK, &orbitConfigResp)
+	require.False(t, orbitConfigResp.Notifications.RotateDiskEncryptionKey)
+
+	// send the request again, this time with the right header
+	orbitConfigResp = orbitGetConfigResponse{}
+	res := s.DoRawWithHeaders("POST", "/api/fleet/orbit/config", json.RawMessage(fmt.Sprintf(`{"orbit_node_key": %q}`, *host.OrbitNodeKey)), http.StatusOK, map[string]string{
+		"Authorization":          fmt.Sprintf("Bearer %s", s.token),
+		fleet.CapabilitiesHeader: string(fleet.CapabilityEscrowBuddy),
+	})
+	err = json.NewDecoder(res.Body).Decode(&orbitConfigResp)
+	require.NoError(t, err)
+	require.True(t, orbitConfigResp.Notifications.RotateDiskEncryptionKey)
+}
+
 func (s *integrationMDMTestSuite) TestMDMAppleHostDiskEncryption() {
 	t := s.T()
 	ctx := context.Background()
diff --git a/server/service/orbit.go b/server/service/orbit.go
index 1ee8725a08..e6241a0640 100644
--- a/server/service/orbit.go
+++ b/server/service/orbit.go
@@ -10,6 +10,7 @@ import (
 	"net/url"
 
 	"github.com/fleetdm/fleet/v4/server"
+	"github.com/fleetdm/fleet/v4/server/contexts/capabilities"
 	"github.com/fleetdm/fleet/v4/server/contexts/ctxerr"
 	hostctx "github.com/fleetdm/fleet/v4/server/contexts/host"
 	"github.com/fleetdm/fleet/v4/server/contexts/license"
@@ -428,6 +429,17 @@ func (svc *Service) setDiskEncryptionNotifications(
 
 	switch host.FleetPlatform() {
 	case "darwin":
+		mp, ok := capabilities.FromContext(ctx)
+		if !ok {
+			level.Debug(svc.logger).Log("msg", "no capabilities in context, skipping disk encryption notification")
+			return nil
+		}
+
+		if !mp.Has(fleet.CapabilityEscrowBuddy) {
+			level.Debug(svc.logger).Log("msg", "host doesn't support Escrow Buddy, skipping disk encryption notification", "host_uuid", host.UUID)
+			return nil
+		}
+
 		notifs.RotateDiskEncryptionKey = encryptionKey != nil && encryptionKey.Decryptable != nil && !*encryptionKey.Decryptable
 	case "windows":
 		isServer := mdmInfo != nil && mdmInfo.IsServer
diff --git a/server/service/orbit_client.go b/server/service/orbit_client.go
index fb4fe0aa2f..5d4c5ce60c 100644
--- a/server/service/orbit_client.go
+++ b/server/service/orbit_client.go
@@ -146,7 +146,7 @@ func NewOrbitClient(
 	orbitHostInfo fleet.OrbitHostInfo,
 	onGetConfigErrFns *OnGetConfigErrFuncs,
 ) (*OrbitClient, error) {
-	orbitCapabilities := fleet.CapabilityMap{}
+	orbitCapabilities := fleet.GetOrbitClientCapabilities()
 	bc, err := newBaseClient(addr, insecureSkipVerify, rootCA, "", fleetClientCert, orbitCapabilities)
 	if err != nil {
 		return nil, err

From 3230a9aa543d19fc2d74347230659e4ddbd0981a Mon Sep 17 00:00:00 2001
From: jacobshandling <61553566+jacobshandling@users.noreply.github.com>
Date: Fri, 2 Aug 2024 12:44:38 -0700
Subject: [PATCH 61/88] =?UTF-8?q?UI=20=E2=80=93=20Only=20modify=20nav=20pa?=
 =?UTF-8?q?dding=20at=20low=20viewport=20width=20(#21005)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

## Follow-up for #20395

Wider:
![Screenshot 2024-08-02 at 10 54
32 AM](https://github.com/user-attachments/assets/d9f66377-02e6-48be-bf3a-3cac94200379)

Narrower:
![Screenshot 2024-08-02 at 10 54
49 AM](https://github.com/user-attachments/assets/9ce7e525-2571-4f15-b29e-6da0f5fdce07)

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/` -
covered by previous PR
- [x] Manual QA for all new/changed functionality

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
---
 frontend/pages/ManageControlsPage/OSSettings/_styles.scss | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/frontend/pages/ManageControlsPage/OSSettings/_styles.scss b/frontend/pages/ManageControlsPage/OSSettings/_styles.scss
index b9c2bf11a5..37228609c6 100644
--- a/frontend/pages/ManageControlsPage/OSSettings/_styles.scss
+++ b/frontend/pages/ManageControlsPage/OSSettings/_styles.scss
@@ -12,11 +12,15 @@
   &__side-nav {
     .side-nav__nav-list {
       top: 0;
-      padding-right: 40px;
     }
   }
 
   .side-nav__card-container > .custom-settings {
     max-width: none;
   }
+  @media (max-width: 1120px) {
+    .side-nav__nav-list {
+      padding-right: 0;
+    }
+  }
 }

From 0f41fc1a8d7d14b08a5332f1cdff281f9ae0dcf3 Mon Sep 17 00:00:00 2001
From: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
Date: Fri, 2 Aug 2024 15:49:20 -0400
Subject: [PATCH 62/88] API design: Hide "Self-service" if there's no
 self-service software (#20908)

---
 docs/Contributing/API-for-contributors.md | 1 +
 docs/REST API/rest-api.md                 | 1 +
 2 files changed, 2 insertions(+)

diff --git a/docs/Contributing/API-for-contributors.md b/docs/Contributing/API-for-contributors.md
index 170ff1c8ea..0f1f3a2ffb 100644
--- a/docs/Contributing/API-for-contributors.md
+++ b/docs/Contributing/API-for-contributors.md
@@ -2481,6 +2481,7 @@ Gets all information required by Fleet Desktop, this includes things like the nu
 ```json
 {
   "failing_policies_count": 3,
+  "self_service": true,
   "notifications": {
     "needs_mdm_migration": true,
     "renew_enrollment_profile": false,
diff --git a/docs/REST API/rest-api.md b/docs/REST API/rest-api.md
index e07c86e33f..a447e15a12 100644
--- a/docs/REST API/rest-api.md	
+++ b/docs/REST API/rest-api.md	
@@ -3504,6 +3504,7 @@ This is the API route used by the **My device** page in Fleet desktop to display
       ]
     }
   },
+  "self_service": true,
   "org_logo_url": "https://example.com/logo.jpg",
   "license": {
     "tier": "free",

From 13f68fc387a4b82b0efbd41fe1d3f157009b8f40 Mon Sep 17 00:00:00 2001
From: Noah Talerman <47070608+noahtalerman@users.noreply.github.com>
Date: Fri, 2 Aug 2024 15:58:16 -0400
Subject: [PATCH 63/88] =?UTF-8?q?Update=20=F0=9F=8E=81=F0=9F=97=A3=20Featu?=
 =?UTF-8?q?re=20Fest=20(#20962)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 handbook/company/product-groups.md | 40 ++++++++----------------------
 1 file changed, 11 insertions(+), 29 deletions(-)

diff --git a/handbook/company/product-groups.md b/handbook/company/product-groups.md
index 17b3acbd15..f084beaf7e 100644
--- a/handbook/company/product-groups.md
+++ b/handbook/company/product-groups.md
@@ -296,33 +296,21 @@ To make a feature request or advocate for a feature request from a customer or c
 
 Requests are weighed from top to bottom while prioritizing attendee requests. This means that if the individual that added a feature request is not in attendance, the feature request will be discussed towards the end of the call if there's time.
 
-To be acceptable for consideration, a request must:
-- Have a clear proposed change
-- Have a well-articulated underlying user need
-- Specify the requestor (either internal stakeholder or customer or community user)
-
-To help the product team, other pieces of information can be optionally included:
-- How would they solve the problem without any changes if pressed?
-- How does this change fit into the requester's overall usage of Fleet?
-- What other potential changes to the product have you considered?
-
-To ensure your request appears on the ["Feature Fest" board](https://app.zenhub.com/workspaces/-feature-fest-651b2962605ba29209324c57/board):
-- Add the `~feature fest` label to your issue
-- Add the relevant customer label (if applicable) 
-
-To maximize your chances of having a feature accepted, requesters can visit the [🗣 Product office hours](#rituals) meeting to get feedback on requests prior to being accepted. 
-
 ### How feature requests are evaluated
 Digestion of these new product ideas (requests) happens at the **🎁🗣 Feature Fest** meeting.
 
-At the **🎁🗣 Feature Fest** meeting, the DRI (Head of Product) weighs all requests on the board. When the team weighs a request, it is immediately prioritized or put to the side.
+Before the **🎁🗣 Feature Fest** meeting, the [Customer renewals DRI](https://fleetdm.com/handbook/company/communications#directly-responsible-individuals-dris) goes through the "Inbox" column and removes customer requests that are not a high priority for the business. Stakeholders will be notified by the Customer renewals DRI.
 
-Product Managers prioritize all potential product improvements worked on by Fleeties. Anyone (Fleeties, customers, and community members) are invited to suggest improvements.
+All community and contributor requests (non-customer) are left in the inbox. A high priority customer request may be a request that's blocking a customer from getting their job done or a request that's critical for customer renewal.
 
-- A _request is prioritized_ when the DRI decides it is a priority. When this happens, the team sets the request to be estimated within five business days.
+Before the meeting, the Feature prioritization DRI adds requests from Fleet's roadmap that are planned for the next design sprint. The quarterly roadmap is in the [OKRs spreadsheet](https://docs.google.com/spreadsheets/d/1Hso0LxqwrRVINCyW_n436bNHmoqhoLhC8bcbvLPOs9A/edit?gid=0#gid=0).
+
+At the **🎁🗣 Feature Fest** meeting, the Feature prioritization DRI weighs all requests in the inbox. When the team weighs a request, it is immediately prioritized or put to the side (not prioritized).
+
+- A _request is prioritized_ when the Feature prioritization DRI decides it is a priority.
 - A _request is put to the side_ when the business perceives competing priorities as more pressing in the immediate moment.
 
-If a feature is not prioritized during a 🎁🗣 Feature Fest meeting, it only means the feature has been rejected _at that time_. Requestors will be notified by the Head of Product, and they can resubmit their request at a future meeting.
+If a feature is not prioritized during a 🎁🗣 Feature Fest meeting, it only means the feature has been rejected _at that time_. Requestors will be notified by the Feature prioritization DRI, and they can resubmit their request at a future meeting.
 
 Requests are weighed by:
 - The completeness of the request (see [making a request](#making-a-request))
@@ -331,16 +319,10 @@ Requests are weighed by:
 - How well the request fits within Fleet's product vision and roadmap
 - Whether the feature seems like it can be designed, estimated, and developed in 6 weeks, given its individual complexity and when combined with other work already accepted
 
-### Customer feature requests 
-The product team's goal is to prioritize 16 customer feature requests at Feature Fest, then take them from settled to shipped. The customer success team is responsible for providing the Head of Product a live count during the Feature Fest meeting. Product Operations is responsible for monitoring this KPI and raising alarms throughout the design and engineering sprints. 
-> Customer stories should be estimated at 1-3 points each to count as 1 request. If a feature request spans across multiple customers, it will be counted as the number of customers involved. 
-
 ### After the feature is accepted
-After the 🎁🗣 Feature Fest meeting, Product Operations will clear the Feature Fest board as follows:
-**Prioritized features:** Remove `feature fest` label, add `:product` label, and assign the group Product Manager. 
-**Put to the side features:** Remove `feature fest` label and close the issue.
-
-Group Product Managers will then develop user stories for the prioritized features. 
+After the 🎁🗣 Feature Fest meeting, the Feature prioritization DRI  will clear the Feature Fest board as follows:
+**Prioritized features:** Remove `feature fest` label, add `:product` label, and move the issue to the "Ready" column in the drafting board. The request will then be assigned to a [Product Designer](https://fleetdm.com/handbook/company/product-groups#current-product-groups) during the "Design sprint kick-off" ritual.
+**Put to the side features:** Remove `feature fest` label and notify the requestor.
 
 > The product team's commitment to the requester is that a prioritized feature will be delivered within 6 weeks or the requester will be notified within 1 business day of the decision to de-prioritize the feature. 
 

From 611aeb311a7d5d5250f6671822c07336290346b3 Mon Sep 17 00:00:00 2001
From: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
Date: Sat, 3 Aug 2024 05:33:23 +0900
Subject: [PATCH 64/88] website-vulnerabilty-management-fix (#20989)

Fixes for https://github.com/fleetdm/fleet/pull/20988
- Increased width of header to fix widowed text
- Reworded caption to fix widowed text and typo
---
 website/assets/styles/pages/vulnerability-management.less | 2 +-
 website/views/pages/vulnerability-management.ejs          | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/website/assets/styles/pages/vulnerability-management.less b/website/assets/styles/pages/vulnerability-management.less
index 17a1504178..87998dd3d2 100644
--- a/website/assets/styles/pages/vulnerability-management.less
+++ b/website/assets/styles/pages/vulnerability-management.less
@@ -46,7 +46,7 @@
 
   [purpose='page-headline'] {
     padding-bottom: 80px;
-    width: 680px;
+    max-width: 780px;
     h2 {
       font-size: 48px;
       font-style: normal;
diff --git a/website/views/pages/vulnerability-management.ejs b/website/views/pages/vulnerability-management.ejs
index adca60393d..e1f3982eb7 100644
--- a/website/views/pages/vulnerability-management.ejs
+++ b/website/views/pages/vulnerability-management.ejs
@@ -12,7 +12,7 @@
           </div>
           <div purpose="hero-text">
             <strong>Report what matters</strong>
-            <p>Report exactly when CVEs got fixed or mitigated, down to the hour</p>
+            <p>Report exactly when CVEs were fixed or mitigated, down to the hour.</p>
             <strong>Deep context from the environment</strong>
             <p>Fleet gives you data down to the chip level on every endpoint to help you make sense of which vulnerabilities to prioritize.</p>
             <strong>Untangle your security stack</strong>

From ab7df5155dfe4fbdf3e9bf5e02abb198ea52f88c Mon Sep 17 00:00:00 2001
From: Lucas Manuel Rodriguez <lucas@fleetdm.com>
Date: Fri, 2 Aug 2024 18:12:36 -0300
Subject: [PATCH 65/88] Use docker compose on CI instead of docker-compose
 (#21017)

After this is merged I'll cherry pick to `minor-fleet-4.55.0`.
---
 .github/workflows/fleet-and-orbit.yml     | 2 +-
 .github/workflows/test-go.yaml            | 6 +++---
 Makefile                                  | 6 +++---
 server/datastore/mysql/migrations_test.go | 2 +-
 server/datastore/mysql/testing_utils.go   | 8 ++++----
 5 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/.github/workflows/fleet-and-orbit.yml b/.github/workflows/fleet-and-orbit.yml
index 4cab7da482..571d59d067 100644
--- a/.github/workflows/fleet-and-orbit.yml
+++ b/.github/workflows/fleet-and-orbit.yml
@@ -111,7 +111,7 @@ jobs:
           done
 
       - name: Start Infra Dependencies
-        run: FLEET_MYSQL_IMAGE=${{ matrix.mysql }} docker-compose up -d mysql redis &
+        run: FLEET_MYSQL_IMAGE=${{ matrix.mysql }} docker compose up -d mysql redis &
 
       - name: Install JS Dependencies
         run: make deps-js
diff --git a/.github/workflows/test-go.yaml b/.github/workflows/test-go.yaml
index 0f128b8025..5256806b5f 100644
--- a/.github/workflows/test-go.yaml
+++ b/.github/workflows/test-go.yaml
@@ -70,7 +70,7 @@ jobs:
     # Pre-starting dependencies here means they are ready to go when we need them.
     - name: Start Infra Dependencies
       # Use & to background this
-      run: FLEET_MYSQL_IMAGE=${{ matrix.mysql }} docker-compose -f docker-compose.yml -f docker-compose-redis-cluster.yml up -d mysql_test mysql_replica_test redis redis-cluster-1 redis-cluster-2 redis-cluster-3 redis-cluster-4 redis-cluster-5 redis-cluster-6 redis-cluster-setup minio saml_idp mailhog mailpit smtp4dev_test &
+      run: FLEET_MYSQL_IMAGE=${{ matrix.mysql }} docker compose -f docker-compose.yml -f docker-compose-redis-cluster.yml up -d mysql_test mysql_replica_test redis redis-cluster-1 redis-cluster-2 redis-cluster-3 redis-cluster-4 redis-cluster-5 redis-cluster-6 redis-cluster-setup minio saml_idp mailhog mailpit smtp4dev_test &
 
     - name: Add TLS certificate for SMTP Tests
       run: |
@@ -98,13 +98,13 @@ jobs:
     - name: Wait for mysql
       run: |
         echo "waiting for mysql..."
-        until docker-compose exec -T mysql_test sh -c "mysql -uroot -p\"\${MYSQL_ROOT_PASSWORD}\" -e \"SELECT 1=1\" fleet" &> /dev/null; do
+        until docker compose exec -T mysql_test sh -c "mysql -uroot -p\"\${MYSQL_ROOT_PASSWORD}\" -e \"SELECT 1=1\" fleet" &> /dev/null; do
             echo "."
             sleep 1
         done
         echo "mysql is ready"
         echo "waiting for mysql replica..."
-        until docker-compose exec -T mysql_replica_test sh -c "mysql -uroot -p\"\${MYSQL_ROOT_PASSWORD}\" -e \"SELECT 1=1\" fleet" &> /dev/null; do
+        until docker compose exec -T mysql_replica_test sh -c "mysql -uroot -p\"\${MYSQL_ROOT_PASSWORD}\" -e \"SELECT 1=1\" fleet" &> /dev/null; do
             echo "."
             sleep 1
         done
diff --git a/Makefile b/Makefile
index 2e7c317baa..c7eaac214c 100644
--- a/Makefile
+++ b/Makefile
@@ -281,7 +281,7 @@ binary-arch: .pre-binary-arch .pre-binary-bundle .pre-fleet
 
 # Drop, create, and migrate the e2e test database
 e2e-reset-db:
-	docker-compose exec -T mysql_test bash -c 'echo "drop database if exists e2e; create database e2e;" | MYSQL_PWD=toor mysql -uroot'
+	docker compose exec -T mysql_test bash -c 'echo "drop database if exists e2e; create database e2e;" | MYSQL_PWD=toor mysql -uroot'
 	./build/fleet prepare db --mysql_address=localhost:3307  --mysql_username=root --mysql_password=toor --mysql_database=e2e
 
 e2e-setup:
@@ -312,7 +312,7 @@ e2e-serve-premium: e2e-reset-db
 # Usage:
 # make e2e-set-desktop-token host_id=1 token=foo
 e2e-set-desktop-token:
-	docker-compose exec -T mysql_test bash -c 'echo "INSERT INTO e2e.host_device_auth (host_id, token) VALUES ($(host_id), \"$(token)\") ON DUPLICATE KEY UPDATE token=VALUES(token)" | MYSQL_PWD=toor mysql -uroot'
+	docker compose exec -T mysql_test bash -c 'echo "INSERT INTO e2e.host_device_auth (host_id, token) VALUES ($(host_id), \"$(token)\") ON DUPLICATE KEY UPDATE token=VALUES(token)" | MYSQL_PWD=toor mysql -uroot'
 
 changelog:
 	sh -c "find changes -type f | grep -v .keep | xargs -I {} sh -c 'grep \"\S\" {}; echo' > new-CHANGELOG.md"
@@ -347,7 +347,7 @@ fleetd-tuf:
 
 # Reset the development DB
 db-reset:
-	docker-compose exec -T mysql bash -c 'echo "drop database if exists fleet; create database fleet;" | MYSQL_PWD=toor mysql -uroot'
+	docker compose exec -T mysql bash -c 'echo "drop database if exists fleet; create database fleet;" | MYSQL_PWD=toor mysql -uroot'
 	./build/fleet prepare db --dev
 
 # Back up the development DB to file
diff --git a/server/datastore/mysql/migrations_test.go b/server/datastore/mysql/migrations_test.go
index a8a010dc8f..e782e0d2b2 100644
--- a/server/datastore/mysql/migrations_test.go
+++ b/server/datastore/mysql/migrations_test.go
@@ -64,7 +64,7 @@ func TestMigrations(t *testing.T) {
 
 	// Dump schema to dumpfile
 	cmd := exec.Command(
-		"docker-compose", "exec", "-T", "mysql_test",
+		"docker", "compose", "exec", "-T", "mysql_test",
 		// Command run inside container
 		"mysqldump", "-u"+testUsername, "-p"+testPassword, "TestMigrations", "--compact", "--skip-comments",
 	)
diff --git a/server/datastore/mysql/testing_utils.go b/server/datastore/mysql/testing_utils.go
index 5fdc6a9082..f36ed5f961 100644
--- a/server/datastore/mysql/testing_utils.go
+++ b/server/datastore/mysql/testing_utils.go
@@ -237,7 +237,7 @@ func setupRealReplica(t testing.TB, testName string, ds *Datastore, options *dbO
 		func() {
 			// Stop slave
 			if out, err := exec.Command(
-				"docker-compose", "exec", "-T", "mysql_replica_test",
+				"docker", "compose", "exec", "-T", "mysql_replica_test",
 				// Command run inside container
 				"mysql",
 				"-u"+testUsername, "-p"+testPassword,
@@ -282,7 +282,7 @@ func setupRealReplica(t testing.TB, testName string, ds *Datastore, options *dbO
 
 	// Configure slave and start replication
 	if out, err := exec.Command(
-		"docker-compose", "exec", "-T", "mysql_replica_test",
+		"docker", "compose", "exec", "-T", "mysql_replica_test",
 		// Command run inside container
 		"mysql",
 		"-u"+testUsername, "-p"+testPassword,
@@ -348,7 +348,7 @@ func initializeDatabase(t testing.TB, testName string, opts *DatastoreTestOption
 		)
 
 		cmd := exec.Command(
-			"docker-compose", "exec", "-T", "mysql_test",
+			"docker", "compose", "exec", "-T", "mysql_test",
 			// Command run inside container
 			"mysql",
 			"-u"+testUsername, "-p"+testPassword,
@@ -369,7 +369,7 @@ func initializeDatabase(t testing.TB, testName string, opts *DatastoreTestOption
 		)
 
 		cmd := exec.Command(
-			"docker-compose", "exec", "-T", "mysql_replica_test",
+			"docker", "compose", "exec", "-T", "mysql_replica_test",
 			// Command run inside container
 			"mysql",
 			"-u"+testUsername, "-p"+testPassword,

From c83458e26f1bd05c50ca87d78e14093f98aa8b0b Mon Sep 17 00:00:00 2001
From: RachelElysia <71795832+RachelElysia@users.noreply.github.com>
Date: Fri, 2 Aug 2024 17:15:20 -0400
Subject: [PATCH 66/88] Fleet UI: No team header text and button fix (#21018)

---
 frontend/hooks/useTeamIdParam.ts             | 2 ++
 frontend/pages/SoftwarePage/SoftwarePage.tsx | 6 +++---
 2 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/frontend/hooks/useTeamIdParam.ts b/frontend/hooks/useTeamIdParam.ts
index f1683aa204..530ec3bb9f 100644
--- a/frontend/hooks/useTeamIdParam.ts
+++ b/frontend/hooks/useTeamIdParam.ts
@@ -395,6 +395,8 @@ export const useTeamIdParam = ({
     currentTeamName: currentTeam?.name,
     currentTeamSummary: currentTeam,
     isAnyTeamSelected: isAnyTeamSelected(currentTeam?.id),
+    isAllTeamsSelected:
+      !isAnyTeamSelected(currentTeam?.id) && currentTeam?.id !== 0,
     isRouteOk,
     isTeamAdmin:
       !!currentTeam?.id && permissions.isTeamAdmin(currentUser, currentTeam.id),
diff --git a/frontend/pages/SoftwarePage/SoftwarePage.tsx b/frontend/pages/SoftwarePage/SoftwarePage.tsx
index 5887d0dd11..1cf063cc2d 100644
--- a/frontend/pages/SoftwarePage/SoftwarePage.tsx
+++ b/frontend/pages/SoftwarePage/SoftwarePage.tsx
@@ -157,7 +157,7 @@ const SoftwarePage = ({ children, router, location }: ISoftwarePageProps) => {
 
   const {
     currentTeamId,
-    isAnyTeamSelected,
+    isAllTeamsSelected,
     isRouteOk,
     teamIdForApi,
     userTeams,
@@ -318,7 +318,7 @@ const SoftwarePage = ({ children, router, location }: ISoftwarePageProps) => {
 
   const renderPageActions = () => {
     const canManageAutomations =
-      isGlobalAdmin && (!isPremiumTier || !isAnyTeamSelected);
+      isGlobalAdmin && (!isPremiumTier || isAllTeamsSelected);
 
     const canAddSoftware =
       isGlobalAdmin || isGlobalMaintainer || isTeamAdmin || isTeamMaintainer;
@@ -349,7 +349,7 @@ const SoftwarePage = ({ children, router, location }: ISoftwarePageProps) => {
     return (
       <p>
         Manage software and search for installed software, OS and
-        vulnerabilities {isAnyTeamSelected ? "on this team" : "for all hosts"}.
+        vulnerabilities {isAllTeamsSelected ? "for all hosts" : "on this team"}.
       </p>
     );
   };

From 1d3c6f3a960c2cf9fc760680490eed01fbec5a58 Mon Sep 17 00:00:00 2001
From: Eric <eashaw@sailsjs.com>
Date: Fri, 2 Aug 2024 16:51:49 -0500
Subject: [PATCH 67/88] Fix typo in pricing-features-table.yml key (#20825)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Changes:
Fixed a typo in the pricing features table yaml (description »
description)
---
 handbook/company/pricing-features-table.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/handbook/company/pricing-features-table.yml b/handbook/company/pricing-features-table.yml
index f29ddac991..4514c3c95e 100644
--- a/handbook/company/pricing-features-table.yml
+++ b/handbook/company/pricing-features-table.yml
@@ -1102,7 +1102,7 @@
 #  ╚╗╔╝╠═╣╠╦╝║╠═╣╠╩╗║  ║╣   ╠═╣║ ╦║╣ ║║║ ║   ╚╗╔╝║╣ ╠╦╝╚═╗║║ ║║║║╚═╗
 #   ╚╝ ╩ ╩╩╚═╩╩ ╩╚═╝╩═╝╚═╝  ╩ ╩╚═╝╚═╝╝╚╝ ╩    ╚╝ ╚═╝╩╚═╚═╝╩╚═╝╝╚╝╚═╝
 - industryName: Variable agent versions
-  descrption: Manage agents remotely by setting different versions per-baseline.
+  description: Manage agents remotely by setting different versions per-baseline.
   documentationUrl: https://fleetdm.com/docs/configuration/agent-configuration#configure-fleetd-update-channels
   tier: Premium
   jamfProHasFeature: no

From e790e56a06f690d270f4b3f686401393040e247a Mon Sep 17 00:00:00 2001
From: Eric <eashaw@sailsjs.com>
Date: Fri, 2 Aug 2024 17:05:12 -0500
Subject: [PATCH 68/88] Website: Validate keys in pricing table configuration
 (#20826)

Closes: #20776

Changes:
- updated the build-static-content script to throw an error if a feature
in the pricing-features-table.yml contains an unrecognized key.

Note: The "Test Fleet website" GH action will fail until
https://github.com/fleetdm/fleet/pull/20825 is merged and this PR is
updated.
---
 website/scripts/build-static-content.js | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/website/scripts/build-static-content.js b/website/scripts/build-static-content.js
index 03050e00f0..042a43cfe1 100644
--- a/website/scripts/build-static-content.js
+++ b/website/scripts/build-static-content.js
@@ -804,7 +804,14 @@ module.exports = {
         let pricingTableFeatures = YAML.parse(yaml, {prettyErrors: true});
         let VALID_PRODUCT_CATEGORIES = ['Endpoint operations', 'Device management', 'Vulnerability management'];
         let VALID_PRICING_TABLE_CATEGORIES = ['Support', 'Deployment', 'Integrations', 'Endpoint operations', 'Device management', 'Vulnerability management'];
+        let VALID_PRICING_TABLE_KEYS = ['industryName', 'description', 'documentationUrl', 'tier', 'jamfProHasFeature', 'jamfProtectHasFeature', 'usualDepartment', 'productCategories', 'pricingTableCategories', 'waysToUse', 'buzzwords', 'demos', 'dri', 'friendlyName', 'moreInfoUrl', 'comingSoonOn', 'screenshotSrc', 'isExperimental'];
         for(let feature of pricingTableFeatures){
+          // Throw an error if a feature contains an unrecognized key.
+          for(let key of _.keys(feature)){
+            if(!VALID_PRICING_TABLE_KEYS.includes(key)){
+              throw new Error(`Unrecognized key. Could not build pricing table config from pricing-features-table.yml. The "${feature.industryName}" feature contains an unrecognized key (${key}). To resolve, fix any typos or remove this key and try running this script again.`);
+            }
+          }
           if(feature.name) {// Compatibility check
             throw new Error(`Could not build pricing table config from pricing-features-table.yml. A feature has a "name" (${feature.name}) which is no longer supported. To resolve, add a "industryName" to this feature: ${feature}`);
           }

From c0cc609127d5b9d8934f6a6728832993cea184cf Mon Sep 17 00:00:00 2001
From: Eric <eashaw@sailsjs.com>
Date: Fri, 2 Aug 2024 17:10:56 -0500
Subject: [PATCH 69/88] Website: Use GitHub API to get `lastmodifiedAt`
 timestamps (#20859)

Closes: #20823

Changes:
- Updated the build-static-content script to use the GitHub API to get
timestamps of when files were last changed.
- Updated the get-extended-osquery schema helper to use a GitHub token
to authenticate GitHub requests (if it is provided)
---
 .../helpers/get-extended-osquery-schema.js    | 20 ++++--
 website/scripts/build-static-content.js       | 67 +++++++++++++++----
 2 files changed, 68 insertions(+), 19 deletions(-)

diff --git a/website/api/helpers/get-extended-osquery-schema.js b/website/api/helpers/get-extended-osquery-schema.js
index d19b090b7b..1a697a5847 100644
--- a/website/api/helpers/get-extended-osquery-schema.js
+++ b/website/api/helpers/get-extended-osquery-schema.js
@@ -11,6 +11,10 @@ module.exports = {
       type: 'boolean',
       defaultsTo: false,
       description: 'Whether or not to include a lastModifiedAt value for each table.',
+    },
+    githubAccessToken: {
+      type: 'string',
+      description: 'A github token used to authenticate requests to the GitHub API'
     }
   },
 
@@ -25,11 +29,10 @@ module.exports = {
   },
 
 
-  fn: async function ({includeLastModifiedAtValue}) {
+  fn: async function ({includeLastModifiedAtValue, githubAccessToken}) {
     let path = require('path');
     let YAML = require('yaml');
     let util = require('util');
-
     let topLvlRepoPath = path.resolve(sails.config.appPath, '../');
     require('assert')(sails.config.custom.versionOfOsquerySchemaToUseWhenGeneratingDocumentation, 'Please set sails.config.custom.sails.config.custom.versionOfOsquerySchemaToUseWhenGeneratingDocumentation to the version of osquery to use, for example \'5.8.1\'.');
     let VERSION_OF_OSQUERY_SCHEMA_TO_USE = sails.config.custom.versionOfOsquerySchemaToUseWhenGeneratingDocumentation;
@@ -40,6 +43,14 @@ module.exports = {
     let rawOsqueryTablesLastModifiedAt;
     if(includeLastModifiedAtValue) {
       // If we're including a lastModifiedAt value for schema tables, we'll send a request to the GitHub API to get a timestamp of when the last commit
+      let baseHeadersForGithubRequests = {
+        'User-Agent': 'fleet-schema-builder',
+        'Accept': 'application/vnd.github.v3+json',
+      };
+      // If a GitHub access token was provided, add it to the headers.
+      if(githubAccessToken){
+        baseHeadersForGithubRequests['Authorization'] = `token ${githubAccessToken}`;
+      }
       let responseData = await sails.helpers.http.get.with({// [?]: https://docs.github.com/en/rest/commits/commits?apiVersion=2022-11-28#list-commits
         url: 'https://api.github.com/repos/osquery/osquery-site/commits',
         data: {
@@ -47,10 +58,7 @@ module.exports = {
           page: 1,
           per_page: 1,//eslint-disable-line camelcase
         },
-        headers: {
-          'User-Agent': 'fleet-schema-builder',
-          'Accept': 'application/vnd.github.v3+json',
-        },
+        headers: baseHeadersForGithubRequests
       }).intercept((err)=>{
         return new Error(`When trying to send a request to GitHub get a timestamp of the last commit to the osqeury schema JSON, an error occurred. Full error: ${util.inspect(err)}`);
       });
diff --git a/website/scripts/build-static-content.js b/website/scripts/build-static-content.js
index 042a43cfe1..a34e2b5640 100644
--- a/website/scripts/build-static-content.js
+++ b/website/scripts/build-static-content.js
@@ -16,7 +16,7 @@ module.exports = {
   fn: async function ({ dry, githubAccessToken }) {
     let path = require('path');
     let YAML = require('yaml');
-
+    let util = require('util');
     // FUTURE: If we ever need to gather source files from other places or branches, etc, see git history of this file circa 2021-05-19 for an example of a different strategy we might use to do that.
     let topLvlRepoPath = path.resolve(sails.config.appPath, '../');
 
@@ -390,11 +390,29 @@ module.exports = {
               }//fi
 
               // Get last modified timestamp using git, and represent it as a JS timestamp.
-              // > Inspired by https://github.com/uncletammy/doc-templater/blob/2969726b598b39aa78648c5379e4d9503b65685e/lib/compile-markdown-tree-from-remote-git-repo.js#L265-L273
-              let lastModifiedAt = (new Date((await sails.helpers.process.executeCommand.with({
-                command: `git log -1 --format="%ai" '${path.relative(topLvlRepoPath, pageSourcePath)}'`,
-                dir: topLvlRepoPath,
-              })).stdout)).getTime();
+              let lastModifiedAt;
+              if(!githubAccessToken) {
+                lastModifiedAt = Date.now();
+              } else {
+                let responseData = await sails.helpers.http.get.with({// [?]: https://docs.github.com/en/rest/commits/commits?apiVersion=2022-11-28#list-commits
+                  url: 'https://api.github.com/repos/fleetdm/fleet/commits',
+                  data: {
+                    path: path.join(sectionRepoPath, pageRelSourcePath),
+                    page: 1,
+                    per_page: 1,//eslint-disable-line camelcase
+                  },
+                  headers: baseHeadersForGithubRequests,
+                }).intercept((err)=>{
+                  return new Error(`When getting the commit history for ${path.join(sectionRepoPath, pageRelSourcePath)} to get a lastModifiedAt timestamp, an error occured.`, err);
+                });
+                // The value we'll use for the lastModifiedAt timestamp will be date value of the `commiter` property of the `commit` we got in the API response from github.
+                let mostRecentCommitToOsquerySchema = responseData[0];
+                if(!mostRecentCommitToOsquerySchema.commit || !mostRecentCommitToOsquerySchema.commit.committer) {
+                  // Throw an error if the the response from GitHub is missing a commit or commiter.
+                  throw new Error(`When getting the commit history for ${path.join(sectionRepoPath, pageRelSourcePath)} to get a lastModifiedAt timestamp, the response from the GitHub API did not include information about the most recent commit. Response from GitHub: ${util.inspect(responseData, {depth:null})}`);
+                }
+                lastModifiedAt = (new Date(mostRecentCommitToOsquerySchema.commit.committer.date)).getTime(); // Convert the UTC timestamp from GitHub to a JS timestamp.
+              }
 
               // Determine display title (human-readable title) to use for this page.
               let pageTitle;
@@ -560,11 +578,30 @@ module.exports = {
         let RELATIVE_PATH_TO_OPEN_POSITIONS_YML_IN_FLEET_REPO = 'handbook/company/open-positions.yml';
 
         // Get last modified timestamp using git, and represent it as a JS timestamp.
-        // > Inspired by https://github.com/uncletammy/doc-templater/blob/2969726b598b39aa78648c5379e4d9503b65685e/lib/compile-markdown-tree-from-remote-git-repo.js#L265-L273
-        let lastModifiedAt = (new Date((await sails.helpers.process.executeCommand.with({
-          command: `git log -1 --format="%ai" '${path.join(topLvlRepoPath, RELATIVE_PATH_TO_OPEN_POSITIONS_YML_IN_FLEET_REPO)}'`,
-          dir: topLvlRepoPath,
-        })).stdout)).getTime();
+        let lastModifiedAt;
+        if(!githubAccessToken) {
+          lastModifiedAt = Date.now();
+        } else {
+          // If we're including a lastModifiedAt value for schema tables, we'll send a request to the GitHub API to get a timestamp of when the last commit
+          let responseData = await sails.helpers.http.get.with({// [?]: https://docs.github.com/en/rest/commits/commits?apiVersion=2022-11-28#list-commits
+            url: 'https://api.github.com/repos/fleetdm/fleet/commits',
+            data: {
+              path: RELATIVE_PATH_TO_OPEN_POSITIONS_YML_IN_FLEET_REPO,
+              page: 1,
+              per_page: 1,//eslint-disable-line camelcase
+            },
+            headers: baseHeadersForGithubRequests,
+          }).intercept((err)=>{
+            return new Error(`When getting the commit history for the open positions YAML to get a lastModifiedAt timestamp, an error occured.`, err);
+          });
+          // The value we'll use for the lastModifiedAt timestamp will be date value of the `commiter` property of the `commit` we got in the API response from github.
+          let mostRecentCommitToOsquerySchema = responseData[0];
+          if(!mostRecentCommitToOsquerySchema.commit || !mostRecentCommitToOsquerySchema.commit.committer) {
+            // Throw an error if the the response from GitHub is missing a commit or commiter.
+            throw new Error(`When trying to get a lastModifiedAt timestamp for the open positions YAML, the response from the GitHub API did not include information about the most recent commit. Response from GitHub: ${util.inspect(responseData, {depth:null})}`);
+          }
+          lastModifiedAt = (new Date(mostRecentCommitToOsquerySchema.commit.committer.date)).getTime(); // Convert the UTC timestamp from GitHub to a JS timestamp.
+        }
 
         let openPositionsYaml = await sails.helpers.fs.read(path.join(topLvlRepoPath, RELATIVE_PATH_TO_OPEN_POSITIONS_YML_IN_FLEET_REPO)).intercept('doesNotExist', (err)=>new Error(`Could not find open positions YAML file at "${RELATIVE_PATH_TO_OPEN_POSITIONS_YML_IN_FLEET_REPO}".  Was it accidentally moved?  Raw error: `+err.message));
         let openPositionsToCreatePartialsFor = YAML.parse(openPositionsYaml, {prettyErrors: true});
@@ -673,7 +710,12 @@ module.exports = {
 
         }
         // After we build the Markdown pages, we'll merge the osquery schema with the Fleet schema overrides, then create EJS partials for each table in the merged schema.
-        let expandedTables = await sails.helpers.getExtendedOsquerySchema.with({includeLastModifiedAtValue: true});
+        let expandedTables;
+        if(githubAccessToken){
+          expandedTables = await sails.helpers.getExtendedOsquerySchema.with({includeLastModifiedAtValue: true, githubAccessToken,});
+        } else {
+          expandedTables = await sails.helpers.getExtendedOsquerySchema();
+        }
 
         // Once we have our merged schema, we'll create ejs partials for each table.
         for(let table of expandedTables) {
@@ -1098,7 +1140,6 @@ module.exports = {
         }
       });
     }
-
   }
 
 

From 5f7a644e3cb2b6f737d77b177daceafdb2f6ac6a Mon Sep 17 00:00:00 2001
From: Jahziel Villasana-Espinoza <jahziel@fleetdm.com>
Date: Fri, 2 Aug 2024 18:50:03 -0400
Subject: [PATCH 70/88] fix software array migration (#21010)

> Related issue: #20978

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
- [x] If database migrations are included, checked table schema to
confirm autoupdate
- For database migrations:
- [x] Checked schema for all modified table for columns that will
auto-update timestamps during migration.
- [x] Manual QA for all new/changed functionality
---
 changes/fix-software-array-migration          |   2 +
 ...240802113716_UpdateSoftwareGitopsConfig.go |  59 ++++++
 ...2113716_UpdateSoftwareGitopsConfig_test.go | 194 ++++++++++++++++++
 server/datastore/mysql/schema.sql             |   4 +-
 4 files changed, 257 insertions(+), 2 deletions(-)
 create mode 100644 changes/fix-software-array-migration
 create mode 100644 server/datastore/mysql/migrations/tables/20240802113716_UpdateSoftwareGitopsConfig.go
 create mode 100644 server/datastore/mysql/migrations/tables/20240802113716_UpdateSoftwareGitopsConfig_test.go

diff --git a/changes/fix-software-array-migration b/changes/fix-software-array-migration
new file mode 100644
index 0000000000..27536ccc1e
--- /dev/null
+++ b/changes/fix-software-array-migration
@@ -0,0 +1,2 @@
+- Adds a migration to migrate older team configurations to the new version that includes both
+  installers and App Store apps.
\ No newline at end of file
diff --git a/server/datastore/mysql/migrations/tables/20240802113716_UpdateSoftwareGitopsConfig.go b/server/datastore/mysql/migrations/tables/20240802113716_UpdateSoftwareGitopsConfig.go
new file mode 100644
index 0000000000..96c9912287
--- /dev/null
+++ b/server/datastore/mysql/migrations/tables/20240802113716_UpdateSoftwareGitopsConfig.go
@@ -0,0 +1,59 @@
+package tables
+
+import (
+	"database/sql"
+	"encoding/json"
+	"fmt"
+	"reflect"
+
+	"github.com/jmoiron/sqlx"
+	"github.com/jmoiron/sqlx/reflectx"
+)
+
+func init() {
+	MigrationClient.AddMigration(Up_20240802113716, Down_20240802113716)
+}
+
+func Up_20240802113716(tx *sql.Tx) error {
+	txx := sqlx.Tx{Tx: tx, Mapper: reflectx.NewMapperFunc("db", sqlx.NameMapper)}
+
+	type row struct {
+		Config json.RawMessage `db:"config"`
+		ID     uint            `db:"id"`
+	}
+
+	var rows []row
+	if err := txx.Select(&rows, "SELECT config, id FROM teams"); err != nil {
+		return fmt.Errorf("selecting team configs: %w", err)
+	}
+
+	for _, r := range rows {
+
+		config := make(map[string]any)
+		if err := json.Unmarshal(r.Config, &config); err != nil {
+			return fmt.Errorf("unmarshal team config: %w", err)
+		}
+		softwareData := config["software"]
+		rt := reflect.TypeOf(config["software"])
+		if rt.Kind() == reflect.Slice {
+			// then we have an older config without the new fields
+			// Note: we are setting the new key to be whatever the old key was (if it was null, then
+			// it's set to null, if it was empty array, then it's set to empty array)
+			config["software"] = map[string]any{"packages": softwareData}
+			b, err := json.Marshal(config)
+			if err != nil {
+				return fmt.Errorf("marshal updated team config: %w", err)
+			}
+			if _, err := tx.Exec(`UPDATE teams SET config = ? WHERE id = ?`, b, r.ID); err != nil {
+				return fmt.Errorf("updating config for team %d: %w", r.ID, err)
+			}
+		}
+
+	}
+
+	return nil
+}
+
+func Down_20240802113716(tx *sql.Tx) error {
+	return nil
+}
diff --git a/server/datastore/mysql/migrations/tables/20240802113716_UpdateSoftwareGitopsConfig_test.go b/server/datastore/mysql/migrations/tables/20240802113716_UpdateSoftwareGitopsConfig_test.go
new file mode 100644
index 0000000000..020c071075
--- /dev/null
+++ b/server/datastore/mysql/migrations/tables/20240802113716_UpdateSoftwareGitopsConfig_test.go
@@ -0,0 +1,194 @@
+package tables
+
+import (
+	"testing"
+
+	"github.com/fleetdm/fleet/v4/server/fleet"
+	"github.com/stretchr/testify/require"
+)
+
+func TestUp_20240802113716(t *testing.T) {
+	db := applyUpToPrev(t)
+
+	badCfg := `
+{
+  "mdm": {
+    "ios_updates": {
+      "deadline": "",
+      "minimum_version": ""
+    },
+    "macos_setup": {
+      "bootstrap_package": "",
+      "macos_setup_assistant": "",
+      "enable_end_user_authentication": false,
+      "enable_release_device_manually": false
+    },
+    "macos_updates": {
+      "deadline": "",
+      "minimum_version": ""
+    },
+    "ipados_updates": {
+      "deadline": "",
+      "minimum_version": ""
+    },
+    "macos_settings": {
+      "custom_settings": []
+    },
+    "windows_updates": {
+      "deadline_days": null,
+      "grace_period_days": null
+    },
+    "windows_settings": {
+      "custom_settings": []
+    },
+    "enable_disk_encryption": false
+  },
+  "scripts": [],
+  "features": {
+    "enable_host_users": true,
+    "enable_software_inventory": true
+  },
+  "software": [
+      {
+        "url": "http://localhost:8100/1Password.pkg",
+        "self_service": true,
+        "install_script": {
+          "path": ""
+        },
+        "pre_install_query": {
+          "path": ""
+        },
+        "post_install_script": {
+          "path": ""
+        }
+      }
+    ],
+  "integrations": {
+    "jira": null,
+    "zendesk": null,
+    "google_calendar": {
+      "webhook_url": "",
+      "enable_calendar_events": false
+    }
+  },
+  "webhook_settings": {
+    "host_status_webhook": {
+      "days_count": 0,
+      "destination_url": "",
+      "host_percentage": 0,
+      "enable_host_status_webhook": false
+    },
+    "failing_policies_webhook": {
+      "policy_ids": null,
+      "destination_url": "",
+      "host_batch_size": 0,
+      "enable_failing_policies_webhook": false
+    }
+  },
+  "host_expiry_settings": {
+    "host_expiry_window": 30,
+    "host_expiry_enabled": true
+  }
+}
+
+`
+
+	badCfgEmptyArr := `
+{
+  "mdm": {
+    "ios_updates": {
+      "deadline": "",
+      "minimum_version": ""
+    },
+    "macos_setup": {
+      "bootstrap_package": "",
+      "macos_setup_assistant": "",
+      "enable_end_user_authentication": false,
+      "enable_release_device_manually": false
+    },
+    "macos_updates": {
+      "deadline": "",
+      "minimum_version": ""
+    },
+    "ipados_updates": {
+      "deadline": "",
+      "minimum_version": ""
+    },
+    "macos_settings": {
+      "custom_settings": []
+    },
+    "windows_updates": {
+      "deadline_days": null,
+      "grace_period_days": null
+    },
+    "windows_settings": {
+      "custom_settings": []
+    },
+    "enable_disk_encryption": false
+  },
+  "scripts": [],
+  "features": {
+    "enable_host_users": true,
+    "enable_software_inventory": true
+  },
+  "software": [],
+  "integrations": {
+    "jira": null,
+    "zendesk": null,
+    "google_calendar": {
+      "webhook_url": "",
+      "enable_calendar_events": false
+    }
+  },
+  "webhook_settings": {
+    "host_status_webhook": {
+      "days_count": 0,
+      "destination_url": "",
+      "host_percentage": 0,
+      "enable_host_status_webhook": false
+    },
+    "failing_policies_webhook": {
+      "policy_ids": null,
+      "destination_url": "",
+      "host_batch_size": 0,
+      "enable_failing_policies_webhook": false
+    }
+  },
+  "host_expiry_settings": {
+    "host_expiry_window": 30,
+    "host_expiry_enabled": true
+  }
+}
+
+`
+	tid1 := execNoErrLastID(t, db, `INSERT INTO teams (name, config) VALUES (?,?)`, "team 1", badCfg)
+	tid2 := execNoErrLastID(t, db, `INSERT INTO teams (name, config) VALUES (?,?)`, "team 2", badCfgEmptyArr)
+
+	// Apply current migration.
+	applyNext(t, db)
+
+	var team fleet.Team
+	require.NoError(t, db.Get(&team, "SELECT id, config FROM teams WHERE id = ?", tid1))
+
+	// Team with a package should see it in the new field
+	require.NotNil(t, team.Config.Software)
+	require.True(t, team.Config.Software.Packages.Set)
+	require.True(t, team.Config.Software.Packages.Valid)
+	require.Len(t, team.Config.Software.Packages.Value, 1)
+
+	require.False(t, team.Config.Software.AppStoreApps.Set)
+	require.False(t, team.Config.Software.AppStoreApps.Valid)
+	require.Len(t, team.Config.Software.AppStoreApps.Value, 0)
+
+	require.NoError(t, db.Get(&team, "SELECT id, config FROM teams WHERE id = ?", tid2))
+
+	// Team with an empty array originally should have JSON null set for packages
+	require.NotNil(t, team.Config.Software)
+	require.True(t, team.Config.Software.Packages.Set)
+	require.True(t, team.Config.Software.Packages.Valid)
+	require.Len(t, team.Config.Software.Packages.Value, 0)
+
+	require.False(t, team.Config.Software.AppStoreApps.Set)
+	require.False(t, team.Config.Software.AppStoreApps.Valid)
+	require.Len(t, team.Config.Software.AppStoreApps.Value, 0)
+}
diff --git a/server/datastore/mysql/schema.sql b/server/datastore/mysql/schema.sql
index 22ac9295c1..9efa895008 100644
--- a/server/datastore/mysql/schema.sql
+++ b/server/datastore/mysql/schema.sql
@@ -970,9 +970,9 @@ CREATE TABLE `migration_status_tables` (
   `tstamp` timestamp NULL DEFAULT CURRENT_TIMESTAMP,
   PRIMARY KEY (`id`),
   UNIQUE KEY `id` (`id`)
-) /*!50100 TABLESPACE `innodb_system` */ ENGINE=InnoDB AUTO_INCREMENT=294 DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
+) /*!50100 TABLESPACE `innodb_system` */ ENGINE=InnoDB AUTO_INCREMENT=295 DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
 /*!40101 SET character_set_client = @saved_cs_client */;
-INSERT INTO `migration_status_tables` VALUES (1,0,1,'2020-01-01 01:01:01'),(2,20161118193812,1,'2020-01-01 01:01:01'),(3,20161118211713,1,'2020-01-01 01:01:01'),(4,20161118212436,1,'2020-01-01 01:01:01'),(5,20161118212515,1,'2020-01-01 01:01:01'),(6,20161118212528,1,'2020-01-01 01:01:01'),(7,20161118212538,1,'2020-01-01 01:01:01'),(8,20161118212549,1,'2020-01-01 01:01:01'),(9,20161118212557,1,'2020-01-01 01:01:01'),(10,20161118212604,1,'2020-01-01 01:01:01'),(11,20161118212613,1,'2020-01-01 01:01:01'),(12,20161118212621,1,'2020-01-01 01:01:01'),(13,20161118212630,1,'2020-01-01 01:01:01'),(14,20161118212641,1,'2020-01-01 01:01:01'),(15,20161118212649,1,'2020-01-01 01:01:01'),(16,20161118212656,1,'2020-01-01 01:01:01'),(17,20161118212758,1,'2020-01-01 01:01:01'),(18,20161128234849,1,'2020-01-01 01:01:01'),(19,20161230162221,1,'2020-01-01 01:01:01'),(20,20170104113816,1,'2020-01-01 01:01:01'),(21,20170105151732,1,'2020-01-01 01:01:01'),(22,20170108191242,1,'2020-01-01 01:01:01'),(23,20170109094020,1,'2020-01-01 01:01:01'),(24,20170109130438,1,'2020-01-01 01:01:01'),(25,20170110202752,1,'2020-01-01 01:01:01'),(26,20170111133013,1,'2020-01-01 01:01:01'),(27,20170117025759,1,'2020-01-01 01:01:01'),(28,20170118191001,1,'2020-01-01 01:01:01'),(29,20170119234632,1,'2020-01-01 01:01:01'),(30,20170124230432,1,'2020-01-01 01:01:01'),(31,20170127014618,1,'2020-01-01 01:01:01'),(32,20170131232841,1,'2020-01-01 01:01:01'),(33,20170223094154,1,'2020-01-01 01:01:01'),(34,20170306075207,1,'2020-01-01 01:01:01'),(35,20170309100733,1,'2020-01-01 01:01:01'),(36,20170331111922,1,'2020-01-01 01:01:01'),(37,20170502143928,1,'2020-01-01 01:01:01'),(38,20170504130602,1,'2020-01-01 01:01:01'),(39,20170509132100,1,'2020-01-01 01:01:01'),(40,20170519105647,1,'2020-01-01 01:01:01'),(41,20170519105648,1,'2020-01-01 01:01:01'),(42,20170831234300,1,'2020-01-01 01:01:01'),(43,20170831234301,1,'2020-01-01 01:01:01'),(44,20170831234303,1,'2020-01-01 01:01:01'),(45,20171116163618,1,'2020-01-01 01:01:01'),(46,20171219164727,1,'2020-01-01 01:01:01'),(47,20180620164811,1,'2020-01-01 01:01:01'),(48,20180620175054,1,'2020-01-01 01:01:01'),(49,20180620175055,1,'2020-01-01 01:01:01'),(50,20191010101639,1,'2020-01-01 01:01:01'),(51,20191010155147,1,'2020-01-01 01:01:01'),(52,20191220130734,1,'2020-01-01 01:01:01'),(53,20200311140000,1,'2020-01-01 01:01:01'),(54,20200405120000,1,'2020-01-01 01:01:01'),(55,20200407120000,1,'2020-01-01 01:01:01'),(56,20200420120000,1,'2020-01-01 01:01:01'),(57,20200504120000,1,'2020-01-01 01:01:01'),(58,20200512120000,1,'2020-01-01 01:01:01'),(59,20200707120000,1,'2020-01-01 01:01:01'),(60,20201011162341,1,'2020-01-01 01:01:01'),(61,20201021104586,1,'2020-01-01 01:01:01'),(62,20201102112520,1,'2020-01-01 01:01:01'),(63,20201208121729,1,'2020-01-01 01:01:01'),(64,20201215091637,1,'2020-01-01 01:01:01'),(65,20210119174155,1,'2020-01-01 01:01:01'),(66,20210326182902,1,'2020-01-01 01:01:01'),(67,20210421112652,1,'2020-01-01 01:01:01'),(68,20210506095025,1,'2020-01-01 01:01:01'),(69,20210513115729,1,'2020-01-01 01:01:01'),(70,20210526113559,1,'2020-01-01 01:01:01'),(71,20210601000001,1,'2020-01-01 01:01:01'),(72,20210601000002,1,'2020-01-01 01:01:01'),(73,20210601000003,1,'2020-01-01 01:01:01'),(74,20210601000004,1,'2020-01-01 01:01:01'),(75,20210601000005,1,'2020-01-01 01:01:01'),(76,20210601000006,1,'2020-01-01 01:01:01'),(77,20210601000007,1,'2020-01-01 01:01:01'),(78,20210601000008,1,'2020-01-01 01:01:01'),(79,20210606151329,1,'2020-01-01 01:01:01'),(80,20210616163757,1,'2020-01-01 01:01:01'),(81,20210617174723,1,'2020-01-01 01:01:01'),(82,20210622160235,1,'2020-01-01 01:01:01'),(83,20210623100031,1,'2020-01-01 01:01:01'),(84,20210623133615,1,'2020-01-01 01:01:01'),(85,20210708143152,1,'2020-01-01 01:01:01'),(86,20210709124443,1,'2020-01-01 01:01:01'),(87,20210712155608,1,'2020-01-01 01:01:01'),(88,20210714102108,1,'2020-01-01 01:01:01'),(89,20210719153709,1,'2020-01-01 01:01:01'),(90,20210721171531,1,'2020-01-01 01:01:01'),(91,20210723135713,1,'2020-01-01 01:01:01'),(92,20210802135933,1,'2020-01-01 01:01:01'),(93,20210806112844,1,'2020-01-01 01:01:01'),(94,20210810095603,1,'2020-01-01 01:01:01'),(95,20210811150223,1,'2020-01-01 01:01:01'),(96,20210818151827,1,'2020-01-01 01:01:01'),(97,20210818151828,1,'2020-01-01 01:01:01'),(98,20210818182258,1,'2020-01-01 01:01:01'),(99,20210819131107,1,'2020-01-01 01:01:01'),(100,20210819143446,1,'2020-01-01 01:01:01'),(101,20210903132338,1,'2020-01-01 01:01:01'),(102,20210915144307,1,'2020-01-01 01:01:01'),(103,20210920155130,1,'2020-01-01 01:01:01'),(104,20210927143115,1,'2020-01-01 01:01:01'),(105,20210927143116,1,'2020-01-01 01:01:01'),(106,20211013133706,1,'2020-01-01 01:01:01'),(107,20211013133707,1,'2020-01-01 01:01:01'),(108,20211102135149,1,'2020-01-01 01:01:01'),(109,20211109121546,1,'2020-01-01 01:01:01'),(110,20211110163320,1,'2020-01-01 01:01:01'),(111,20211116184029,1,'2020-01-01 01:01:01'),(112,20211116184030,1,'2020-01-01 01:01:01'),(113,20211202092042,1,'2020-01-01 01:01:01'),(114,20211202181033,1,'2020-01-01 01:01:01'),(115,20211207161856,1,'2020-01-01 01:01:01'),(116,20211216131203,1,'2020-01-01 01:01:01'),(117,20211221110132,1,'2020-01-01 01:01:01'),(118,20220107155700,1,'2020-01-01 01:01:01'),(119,20220125105650,1,'2020-01-01 01:01:01'),(120,20220201084510,1,'2020-01-01 01:01:01'),(121,20220208144830,1,'2020-01-01 01:01:01'),(122,20220208144831,1,'2020-01-01 01:01:01'),(123,20220215152203,1,'2020-01-01 01:01:01'),(124,20220223113157,1,'2020-01-01 01:01:01'),(125,20220307104655,1,'2020-01-01 01:01:01'),(126,20220309133956,1,'2020-01-01 01:01:01'),(127,20220316155700,1,'2020-01-01 01:01:01'),(128,20220323152301,1,'2020-01-01 01:01:01'),(129,20220330100659,1,'2020-01-01 01:01:01'),(130,20220404091216,1,'2020-01-01 01:01:01'),(131,20220419140750,1,'2020-01-01 01:01:01'),(132,20220428140039,1,'2020-01-01 01:01:01'),(133,20220503134048,1,'2020-01-01 01:01:01'),(134,20220524102918,1,'2020-01-01 01:01:01'),(135,20220526123327,1,'2020-01-01 01:01:01'),(136,20220526123328,1,'2020-01-01 01:01:01'),(137,20220526123329,1,'2020-01-01 01:01:01'),(138,20220608113128,1,'2020-01-01 01:01:01'),(139,20220627104817,1,'2020-01-01 01:01:01'),(140,20220704101843,1,'2020-01-01 01:01:01'),(141,20220708095046,1,'2020-01-01 01:01:01'),(142,20220713091130,1,'2020-01-01 01:01:01'),(143,20220802135510,1,'2020-01-01 01:01:01'),(144,20220818101352,1,'2020-01-01 01:01:01'),(145,20220822161445,1,'2020-01-01 01:01:01'),(146,20220831100036,1,'2020-01-01 01:01:01'),(147,20220831100151,1,'2020-01-01 01:01:01'),(148,20220908181826,1,'2020-01-01 01:01:01'),(149,20220914154915,1,'2020-01-01 01:01:01'),(150,20220915165115,1,'2020-01-01 01:01:01'),(151,20220915165116,1,'2020-01-01 01:01:01'),(152,20220928100158,1,'2020-01-01 01:01:01'),(153,20221014084130,1,'2020-01-01 01:01:01'),(154,20221027085019,1,'2020-01-01 01:01:01'),(155,20221101103952,1,'2020-01-01 01:01:01'),(156,20221104144401,1,'2020-01-01 01:01:01'),(157,20221109100749,1,'2020-01-01 01:01:01'),(158,20221115104546,1,'2020-01-01 01:01:01'),(159,20221130114928,1,'2020-01-01 01:01:01'),(160,20221205112142,1,'2020-01-01 01:01:01'),(161,20221216115820,1,'2020-01-01 01:01:01'),(162,20221220195934,1,'2020-01-01 01:01:01'),(163,20221220195935,1,'2020-01-01 01:01:01'),(164,20221223174807,1,'2020-01-01 01:01:01'),(165,20221227163855,1,'2020-01-01 01:01:01'),(166,20221227163856,1,'2020-01-01 01:01:01'),(167,20230202224725,1,'2020-01-01 01:01:01'),(168,20230206163608,1,'2020-01-01 01:01:01'),(169,20230214131519,1,'2020-01-01 01:01:01'),(170,20230303135738,1,'2020-01-01 01:01:01'),(171,20230313135301,1,'2020-01-01 01:01:01'),(172,20230313141819,1,'2020-01-01 01:01:01'),(173,20230315104937,1,'2020-01-01 01:01:01'),(174,20230317173844,1,'2020-01-01 01:01:01'),(175,20230320133602,1,'2020-01-01 01:01:01'),(176,20230330100011,1,'2020-01-01 01:01:01'),(177,20230330134823,1,'2020-01-01 01:01:01'),(178,20230405232025,1,'2020-01-01 01:01:01'),(179,20230408084104,1,'2020-01-01 01:01:01'),(180,20230411102858,1,'2020-01-01 01:01:01'),(181,20230421155932,1,'2020-01-01 01:01:01'),(182,20230425082126,1,'2020-01-01 01:01:01'),(183,20230425105727,1,'2020-01-01 01:01:01'),(184,20230501154913,1,'2020-01-01 01:01:01'),(185,20230503101418,1,'2020-01-01 01:01:01'),(186,20230515144206,1,'2020-01-01 01:01:01'),(187,20230517140952,1,'2020-01-01 01:01:01'),(188,20230517152807,1,'2020-01-01 01:01:01'),(189,20230518114155,1,'2020-01-01 01:01:01'),(190,20230520153236,1,'2020-01-01 01:01:01'),(191,20230525151159,1,'2020-01-01 01:01:01'),(192,20230530122103,1,'2020-01-01 01:01:01'),(193,20230602111827,1,'2020-01-01 01:01:01'),(194,20230608103123,1,'2020-01-01 01:01:01'),(195,20230629140529,1,'2020-01-01 01:01:01'),(196,20230629140530,1,'2020-01-01 01:01:01'),(197,20230711144622,1,'2020-01-01 01:01:01'),(198,20230721135421,1,'2020-01-01 01:01:01'),(199,20230721161508,1,'2020-01-01 01:01:01'),(200,20230726115701,1,'2020-01-01 01:01:01'),(201,20230807100822,1,'2020-01-01 01:01:01'),(202,20230814150442,1,'2020-01-01 01:01:01'),(203,20230823122728,1,'2020-01-01 01:01:01'),(204,20230906152143,1,'2020-01-01 01:01:01'),(205,20230911163618,1,'2020-01-01 01:01:01'),(206,20230912101759,1,'2020-01-01 01:01:01'),(207,20230915101341,1,'2020-01-01 01:01:01'),(208,20230918132351,1,'2020-01-01 01:01:01'),(209,20231004144339,1,'2020-01-01 01:01:01'),(210,20231009094541,1,'2020-01-01 01:01:01'),(211,20231009094542,1,'2020-01-01 01:01:01'),(212,20231009094543,1,'2020-01-01 01:01:01'),(213,20231009094544,1,'2020-01-01 01:01:01'),(214,20231016091915,1,'2020-01-01 01:01:01'),(215,20231024174135,1,'2020-01-01 01:01:01'),(216,20231025120016,1,'2020-01-01 01:01:01'),(217,20231025160156,1,'2020-01-01 01:01:01'),(218,20231031165350,1,'2020-01-01 01:01:01'),(219,20231106144110,1,'2020-01-01 01:01:01'),(220,20231107130934,1,'2020-01-01 01:01:01'),(221,20231109115838,1,'2020-01-01 01:01:01'),(222,20231121054530,1,'2020-01-01 01:01:01'),(223,20231122101320,1,'2020-01-01 01:01:01'),(224,20231130132828,1,'2020-01-01 01:01:01'),(225,20231130132931,1,'2020-01-01 01:01:01'),(226,20231204155427,1,'2020-01-01 01:01:01'),(227,20231206142340,1,'2020-01-01 01:01:01'),(228,20231207102320,1,'2020-01-01 01:01:01'),(229,20231207102321,1,'2020-01-01 01:01:01'),(230,20231207133731,1,'2020-01-01 01:01:01'),(231,20231212094238,1,'2020-01-01 01:01:01'),(232,20231212095734,1,'2020-01-01 01:01:01'),(233,20231212161121,1,'2020-01-01 01:01:01'),(234,20231215122713,1,'2020-01-01 01:01:01'),(235,20231219143041,1,'2020-01-01 01:01:01'),(236,20231224070653,1,'2020-01-01 01:01:01'),(237,20240110134315,1,'2020-01-01 01:01:01'),(238,20240119091637,1,'2020-01-01 01:01:01'),(239,20240126020642,1,'2020-01-01 01:01:01'),(240,20240126020643,1,'2020-01-01 01:01:01'),(241,20240129162819,1,'2020-01-01 01:01:01'),(242,20240130115133,1,'2020-01-01 01:01:01'),(243,20240131083822,1,'2020-01-01 01:01:01'),(244,20240205095928,1,'2020-01-01 01:01:01'),(245,20240205121956,1,'2020-01-01 01:01:01'),(246,20240209110212,1,'2020-01-01 01:01:01'),(247,20240212111533,1,'2020-01-01 01:01:01'),(248,20240221112844,1,'2020-01-01 01:01:01'),(249,20240222073518,1,'2020-01-01 01:01:01'),(250,20240222135115,1,'2020-01-01 01:01:01'),(251,20240226082255,1,'2020-01-01 01:01:01'),(252,20240228082706,1,'2020-01-01 01:01:01'),(253,20240301173035,1,'2020-01-01 01:01:01'),(254,20240302111134,1,'2020-01-01 01:01:01'),(255,20240312103753,1,'2020-01-01 01:01:01'),(256,20240313143416,1,'2020-01-01 01:01:01'),(257,20240314085226,1,'2020-01-01 01:01:01'),(258,20240314151747,1,'2020-01-01 01:01:01'),(259,20240320145650,1,'2020-01-01 01:01:01'),(260,20240327115530,1,'2020-01-01 01:01:01'),(261,20240327115617,1,'2020-01-01 01:01:01'),(262,20240408085837,1,'2020-01-01 01:01:01'),(263,20240415104633,1,'2020-01-01 01:01:01'),(264,20240430111727,1,'2020-01-01 01:01:01'),(265,20240515200020,1,'2020-01-01 01:01:01'),(266,20240521143023,1,'2020-01-01 01:01:01'),(267,20240521143024,1,'2020-01-01 01:01:01'),(268,20240601174138,1,'2020-01-01 01:01:01'),(269,20240607133721,1,'2020-01-01 01:01:01'),(270,20240612150059,1,'2020-01-01 01:01:01'),(271,20240613162201,1,'2020-01-01 01:01:01'),(272,20240613172616,1,'2020-01-01 01:01:01'),(273,20240618142419,1,'2020-01-01 01:01:01'),(274,20240625093543,1,'2020-01-01 01:01:01'),(275,20240626195531,1,'2020-01-01 01:01:01'),(276,20240702123921,1,'2020-01-01 01:01:01'),(277,20240703154849,1,'2020-01-01 01:01:01'),(278,20240707134035,1,'2020-01-01 01:01:01'),(279,20240707134036,1,'2020-01-01 01:01:01'),(280,20240709124958,1,'2020-01-01 01:01:01'),(281,20240709132642,1,'2020-01-01 01:01:01'),(282,20240709183940,1,'2020-01-01 01:01:01'),(283,20240710155623,1,'2020-01-01 01:01:01'),(284,20240723102712,1,'2020-01-01 01:01:01'),(285,20240725152735,1,'2020-01-01 01:01:01'),(286,20240725182118,1,'2020-01-01 01:01:01'),(287,20240726100517,1,'2020-01-01 01:01:01'),(288,20240730171504,1,'2020-01-01 01:01:01'),(289,20240730174056,1,'2020-01-01 01:01:01'),(290,20240730215453,1,'2020-01-01 01:01:01'),(291,20240730374423,1,'2020-01-01 01:01:01'),(292,20240801115359,1,'2020-01-01 01:01:01'),(293,20240802101043,1,'2020-01-01 01:01:01');
+INSERT INTO `migration_status_tables` VALUES (1,0,1,'2020-01-01 01:01:01'),(2,20161118193812,1,'2020-01-01 01:01:01'),(3,20161118211713,1,'2020-01-01 01:01:01'),(4,20161118212436,1,'2020-01-01 01:01:01'),(5,20161118212515,1,'2020-01-01 01:01:01'),(6,20161118212528,1,'2020-01-01 01:01:01'),(7,20161118212538,1,'2020-01-01 01:01:01'),(8,20161118212549,1,'2020-01-01 01:01:01'),(9,20161118212557,1,'2020-01-01 01:01:01'),(10,20161118212604,1,'2020-01-01 01:01:01'),(11,20161118212613,1,'2020-01-01 01:01:01'),(12,20161118212621,1,'2020-01-01 01:01:01'),(13,20161118212630,1,'2020-01-01 01:01:01'),(14,20161118212641,1,'2020-01-01 01:01:01'),(15,20161118212649,1,'2020-01-01 01:01:01'),(16,20161118212656,1,'2020-01-01 01:01:01'),(17,20161118212758,1,'2020-01-01 01:01:01'),(18,20161128234849,1,'2020-01-01 01:01:01'),(19,20161230162221,1,'2020-01-01 01:01:01'),(20,20170104113816,1,'2020-01-01 01:01:01'),(21,20170105151732,1,'2020-01-01 01:01:01'),(22,20170108191242,1,'2020-01-01 01:01:01'),(23,20170109094020,1,'2020-01-01 01:01:01'),(24,20170109130438,1,'2020-01-01 01:01:01'),(25,20170110202752,1,'2020-01-01 01:01:01'),(26,20170111133013,1,'2020-01-01 01:01:01'),(27,20170117025759,1,'2020-01-01 01:01:01'),(28,20170118191001,1,'2020-01-01 01:01:01'),(29,20170119234632,1,'2020-01-01 01:01:01'),(30,20170124230432,1,'2020-01-01 01:01:01'),(31,20170127014618,1,'2020-01-01 01:01:01'),(32,20170131232841,1,'2020-01-01 01:01:01'),(33,20170223094154,1,'2020-01-01 01:01:01'),(34,20170306075207,1,'2020-01-01 01:01:01'),(35,20170309100733,1,'2020-01-01 01:01:01'),(36,20170331111922,1,'2020-01-01 01:01:01'),(37,20170502143928,1,'2020-01-01 01:01:01'),(38,20170504130602,1,'2020-01-01 01:01:01'),(39,20170509132100,1,'2020-01-01 01:01:01'),(40,20170519105647,1,'2020-01-01 01:01:01'),(41,20170519105648,1,'2020-01-01 01:01:01'),(42,20170831234300,1,'2020-01-01 01:01:01'),(43,20170831234301,1,'2020-01-01 01:01:01'),(44,20170831234303,1,'2020-01-01 01:01:01'),(45,20171116163618,1,'2020-01-01 01:01:01'),(46,20171219164727,1,'2020-01-01 01:01:01'),(47,20180620164811,1,'2020-01-01 01:01:01'),(48,20180620175054,1,'2020-01-01 01:01:01'),(49,20180620175055,1,'2020-01-01 01:01:01'),(50,20191010101639,1,'2020-01-01 01:01:01'),(51,20191010155147,1,'2020-01-01 01:01:01'),(52,20191220130734,1,'2020-01-01 01:01:01'),(53,20200311140000,1,'2020-01-01 01:01:01'),(54,20200405120000,1,'2020-01-01 01:01:01'),(55,20200407120000,1,'2020-01-01 01:01:01'),(56,20200420120000,1,'2020-01-01 01:01:01'),(57,20200504120000,1,'2020-01-01 01:01:01'),(58,20200512120000,1,'2020-01-01 01:01:01'),(59,20200707120000,1,'2020-01-01 01:01:01'),(60,20201011162341,1,'2020-01-01 01:01:01'),(61,20201021104586,1,'2020-01-01 01:01:01'),(62,20201102112520,1,'2020-01-01 01:01:01'),(63,20201208121729,1,'2020-01-01 01:01:01'),(64,20201215091637,1,'2020-01-01 01:01:01'),(65,20210119174155,1,'2020-01-01 01:01:01'),(66,20210326182902,1,'2020-01-01 01:01:01'),(67,20210421112652,1,'2020-01-01 01:01:01'),(68,20210506095025,1,'2020-01-01 01:01:01'),(69,20210513115729,1,'2020-01-01 01:01:01'),(70,20210526113559,1,'2020-01-01 01:01:01'),(71,20210601000001,1,'2020-01-01 01:01:01'),(72,20210601000002,1,'2020-01-01 01:01:01'),(73,20210601000003,1,'2020-01-01 01:01:01'),(74,20210601000004,1,'2020-01-01 01:01:01'),(75,20210601000005,1,'2020-01-01 01:01:01'),(76,20210601000006,1,'2020-01-01 01:01:01'),(77,20210601000007,1,'2020-01-01 01:01:01'),(78,20210601000008,1,'2020-01-01 01:01:01'),(79,20210606151329,1,'2020-01-01 01:01:01'),(80,20210616163757,1,'2020-01-01 01:01:01'),(81,20210617174723,1,'2020-01-01 01:01:01'),(82,20210622160235,1,'2020-01-01 01:01:01'),(83,20210623100031,1,'2020-01-01 01:01:01'),(84,20210623133615,1,'2020-01-01 01:01:01'),(85,20210708143152,1,'2020-01-01 01:01:01'),(86,20210709124443,1,'2020-01-01 01:01:01'),(87,20210712155608,1,'2020-01-01 01:01:01'),(88,20210714102108,1,'2020-01-01 01:01:01'),(89,20210719153709,1,'2020-01-01 01:01:01'),(90,20210721171531,1,'2020-01-01 01:01:01'),(91,20210723135713,1,'2020-01-01 01:01:01'),(92,20210802135933,1,'2020-01-01 01:01:01'),(93,20210806112844,1,'2020-01-01 01:01:01'),(94,20210810095603,1,'2020-01-01 01:01:01'),(95,20210811150223,1,'2020-01-01 01:01:01'),(96,20210818151827,1,'2020-01-01 01:01:01'),(97,20210818151828,1,'2020-01-01 01:01:01'),(98,20210818182258,1,'2020-01-01 01:01:01'),(99,20210819131107,1,'2020-01-01 01:01:01'),(100,20210819143446,1,'2020-01-01 01:01:01'),(101,20210903132338,1,'2020-01-01 01:01:01'),(102,20210915144307,1,'2020-01-01 01:01:01'),(103,20210920155130,1,'2020-01-01 01:01:01'),(104,20210927143115,1,'2020-01-01 01:01:01'),(105,20210927143116,1,'2020-01-01 01:01:01'),(106,20211013133706,1,'2020-01-01 01:01:01'),(107,20211013133707,1,'2020-01-01 01:01:01'),(108,20211102135149,1,'2020-01-01 01:01:01'),(109,20211109121546,1,'2020-01-01 01:01:01'),(110,20211110163320,1,'2020-01-01 01:01:01'),(111,20211116184029,1,'2020-01-01 01:01:01'),(112,20211116184030,1,'2020-01-01 01:01:01'),(113,20211202092042,1,'2020-01-01 01:01:01'),(114,20211202181033,1,'2020-01-01 01:01:01'),(115,20211207161856,1,'2020-01-01 01:01:01'),(116,20211216131203,1,'2020-01-01 01:01:01'),(117,20211221110132,1,'2020-01-01 01:01:01'),(118,20220107155700,1,'2020-01-01 01:01:01'),(119,20220125105650,1,'2020-01-01 01:01:01'),(120,20220201084510,1,'2020-01-01 01:01:01'),(121,20220208144830,1,'2020-01-01 01:01:01'),(122,20220208144831,1,'2020-01-01 01:01:01'),(123,20220215152203,1,'2020-01-01 01:01:01'),(124,20220223113157,1,'2020-01-01 01:01:01'),(125,20220307104655,1,'2020-01-01 01:01:01'),(126,20220309133956,1,'2020-01-01 01:01:01'),(127,20220316155700,1,'2020-01-01 01:01:01'),(128,20220323152301,1,'2020-01-01 01:01:01'),(129,20220330100659,1,'2020-01-01 01:01:01'),(130,20220404091216,1,'2020-01-01 01:01:01'),(131,20220419140750,1,'2020-01-01 01:01:01'),(132,20220428140039,1,'2020-01-01 01:01:01'),(133,20220503134048,1,'2020-01-01 01:01:01'),(134,20220524102918,1,'2020-01-01 01:01:01'),(135,20220526123327,1,'2020-01-01 01:01:01'),(136,20220526123328,1,'2020-01-01 01:01:01'),(137,20220526123329,1,'2020-01-01 01:01:01'),(138,20220608113128,1,'2020-01-01 01:01:01'),(139,20220627104817,1,'2020-01-01 01:01:01'),(140,20220704101843,1,'2020-01-01 01:01:01'),(141,20220708095046,1,'2020-01-01 01:01:01'),(142,20220713091130,1,'2020-01-01 01:01:01'),(143,20220802135510,1,'2020-01-01 01:01:01'),(144,20220818101352,1,'2020-01-01 01:01:01'),(145,20220822161445,1,'2020-01-01 01:01:01'),(146,20220831100036,1,'2020-01-01 01:01:01'),(147,20220831100151,1,'2020-01-01 01:01:01'),(148,20220908181826,1,'2020-01-01 01:01:01'),(149,20220914154915,1,'2020-01-01 01:01:01'),(150,20220915165115,1,'2020-01-01 01:01:01'),(151,20220915165116,1,'2020-01-01 01:01:01'),(152,20220928100158,1,'2020-01-01 01:01:01'),(153,20221014084130,1,'2020-01-01 01:01:01'),(154,20221027085019,1,'2020-01-01 01:01:01'),(155,20221101103952,1,'2020-01-01 01:01:01'),(156,20221104144401,1,'2020-01-01 01:01:01'),(157,20221109100749,1,'2020-01-01 01:01:01'),(158,20221115104546,1,'2020-01-01 01:01:01'),(159,20221130114928,1,'2020-01-01 01:01:01'),(160,20221205112142,1,'2020-01-01 01:01:01'),(161,20221216115820,1,'2020-01-01 01:01:01'),(162,20221220195934,1,'2020-01-01 01:01:01'),(163,20221220195935,1,'2020-01-01 01:01:01'),(164,20221223174807,1,'2020-01-01 01:01:01'),(165,20221227163855,1,'2020-01-01 01:01:01'),(166,20221227163856,1,'2020-01-01 01:01:01'),(167,20230202224725,1,'2020-01-01 01:01:01'),(168,20230206163608,1,'2020-01-01 01:01:01'),(169,20230214131519,1,'2020-01-01 01:01:01'),(170,20230303135738,1,'2020-01-01 01:01:01'),(171,20230313135301,1,'2020-01-01 01:01:01'),(172,20230313141819,1,'2020-01-01 01:01:01'),(173,20230315104937,1,'2020-01-01 01:01:01'),(174,20230317173844,1,'2020-01-01 01:01:01'),(175,20230320133602,1,'2020-01-01 01:01:01'),(176,20230330100011,1,'2020-01-01 01:01:01'),(177,20230330134823,1,'2020-01-01 01:01:01'),(178,20230405232025,1,'2020-01-01 01:01:01'),(179,20230408084104,1,'2020-01-01 01:01:01'),(180,20230411102858,1,'2020-01-01 01:01:01'),(181,20230421155932,1,'2020-01-01 01:01:01'),(182,20230425082126,1,'2020-01-01 01:01:01'),(183,20230425105727,1,'2020-01-01 01:01:01'),(184,20230501154913,1,'2020-01-01 01:01:01'),(185,20230503101418,1,'2020-01-01 01:01:01'),(186,20230515144206,1,'2020-01-01 01:01:01'),(187,20230517140952,1,'2020-01-01 01:01:01'),(188,20230517152807,1,'2020-01-01 01:01:01'),(189,20230518114155,1,'2020-01-01 01:01:01'),(190,20230520153236,1,'2020-01-01 01:01:01'),(191,20230525151159,1,'2020-01-01 01:01:01'),(192,20230530122103,1,'2020-01-01 01:01:01'),(193,20230602111827,1,'2020-01-01 01:01:01'),(194,20230608103123,1,'2020-01-01 01:01:01'),(195,20230629140529,1,'2020-01-01 01:01:01'),(196,20230629140530,1,'2020-01-01 01:01:01'),(197,20230711144622,1,'2020-01-01 01:01:01'),(198,20230721135421,1,'2020-01-01 01:01:01'),(199,20230721161508,1,'2020-01-01 01:01:01'),(200,20230726115701,1,'2020-01-01 01:01:01'),(201,20230807100822,1,'2020-01-01 01:01:01'),(202,20230814150442,1,'2020-01-01 01:01:01'),(203,20230823122728,1,'2020-01-01 01:01:01'),(204,20230906152143,1,'2020-01-01 01:01:01'),(205,20230911163618,1,'2020-01-01 01:01:01'),(206,20230912101759,1,'2020-01-01 01:01:01'),(207,20230915101341,1,'2020-01-01 01:01:01'),(208,20230918132351,1,'2020-01-01 01:01:01'),(209,20231004144339,1,'2020-01-01 01:01:01'),(210,20231009094541,1,'2020-01-01 01:01:01'),(211,20231009094542,1,'2020-01-01 01:01:01'),(212,20231009094543,1,'2020-01-01 01:01:01'),(213,20231009094544,1,'2020-01-01 01:01:01'),(214,20231016091915,1,'2020-01-01 01:01:01'),(215,20231024174135,1,'2020-01-01 01:01:01'),(216,20231025120016,1,'2020-01-01 01:01:01'),(217,20231025160156,1,'2020-01-01 01:01:01'),(218,20231031165350,1,'2020-01-01 01:01:01'),(219,20231106144110,1,'2020-01-01 01:01:01'),(220,20231107130934,1,'2020-01-01 01:01:01'),(221,20231109115838,1,'2020-01-01 01:01:01'),(222,20231121054530,1,'2020-01-01 01:01:01'),(223,20231122101320,1,'2020-01-01 01:01:01'),(224,20231130132828,1,'2020-01-01 01:01:01'),(225,20231130132931,1,'2020-01-01 01:01:01'),(226,20231204155427,1,'2020-01-01 01:01:01'),(227,20231206142340,1,'2020-01-01 01:01:01'),(228,20231207102320,1,'2020-01-01 01:01:01'),(229,20231207102321,1,'2020-01-01 01:01:01'),(230,20231207133731,1,'2020-01-01 01:01:01'),(231,20231212094238,1,'2020-01-01 01:01:01'),(232,20231212095734,1,'2020-01-01 01:01:01'),(233,20231212161121,1,'2020-01-01 01:01:01'),(234,20231215122713,1,'2020-01-01 01:01:01'),(235,20231219143041,1,'2020-01-01 01:01:01'),(236,20231224070653,1,'2020-01-01 01:01:01'),(237,20240110134315,1,'2020-01-01 01:01:01'),(238,20240119091637,1,'2020-01-01 01:01:01'),(239,20240126020642,1,'2020-01-01 01:01:01'),(240,20240126020643,1,'2020-01-01 01:01:01'),(241,20240129162819,1,'2020-01-01 01:01:01'),(242,20240130115133,1,'2020-01-01 01:01:01'),(243,20240131083822,1,'2020-01-01 01:01:01'),(244,20240205095928,1,'2020-01-01 01:01:01'),(245,20240205121956,1,'2020-01-01 01:01:01'),(246,20240209110212,1,'2020-01-01 01:01:01'),(247,20240212111533,1,'2020-01-01 01:01:01'),(248,20240221112844,1,'2020-01-01 01:01:01'),(249,20240222073518,1,'2020-01-01 01:01:01'),(250,20240222135115,1,'2020-01-01 01:01:01'),(251,20240226082255,1,'2020-01-01 01:01:01'),(252,20240228082706,1,'2020-01-01 01:01:01'),(253,20240301173035,1,'2020-01-01 01:01:01'),(254,20240302111134,1,'2020-01-01 01:01:01'),(255,20240312103753,1,'2020-01-01 01:01:01'),(256,20240313143416,1,'2020-01-01 01:01:01'),(257,20240314085226,1,'2020-01-01 01:01:01'),(258,20240314151747,1,'2020-01-01 01:01:01'),(259,20240320145650,1,'2020-01-01 01:01:01'),(260,20240327115530,1,'2020-01-01 01:01:01'),(261,20240327115617,1,'2020-01-01 01:01:01'),(262,20240408085837,1,'2020-01-01 01:01:01'),(263,20240415104633,1,'2020-01-01 01:01:01'),(264,20240430111727,1,'2020-01-01 01:01:01'),(265,20240515200020,1,'2020-01-01 01:01:01'),(266,20240521143023,1,'2020-01-01 01:01:01'),(267,20240521143024,1,'2020-01-01 01:01:01'),(268,20240601174138,1,'2020-01-01 01:01:01'),(269,20240607133721,1,'2020-01-01 01:01:01'),(270,20240612150059,1,'2020-01-01 01:01:01'),(271,20240613162201,1,'2020-01-01 01:01:01'),(272,20240613172616,1,'2020-01-01 01:01:01'),(273,20240618142419,1,'2020-01-01 01:01:01'),(274,20240625093543,1,'2020-01-01 01:01:01'),(275,20240626195531,1,'2020-01-01 01:01:01'),(276,20240702123921,1,'2020-01-01 01:01:01'),(277,20240703154849,1,'2020-01-01 01:01:01'),(278,20240707134035,1,'2020-01-01 01:01:01'),(279,20240707134036,1,'2020-01-01 01:01:01'),(280,20240709124958,1,'2020-01-01 01:01:01'),(281,20240709132642,1,'2020-01-01 01:01:01'),(282,20240709183940,1,'2020-01-01 01:01:01'),(283,20240710155623,1,'2020-01-01 01:01:01'),(284,20240723102712,1,'2020-01-01 01:01:01'),(285,20240725152735,1,'2020-01-01 01:01:01'),(286,20240725182118,1,'2020-01-01 01:01:01'),(287,20240726100517,1,'2020-01-01 01:01:01'),(288,20240730171504,1,'2020-01-01 01:01:01'),(289,20240730174056,1,'2020-01-01 01:01:01'),(290,20240730215453,1,'2020-01-01 01:01:01'),(291,20240730374423,1,'2020-01-01 01:01:01'),(292,20240801115359,1,'2020-01-01 01:01:01'),(293,20240802101043,1,'2020-01-01 01:01:01'),(294,20240802113716,1,'2020-01-01 01:01:01');
 /*!40101 SET @saved_cs_client     = @@character_set_client */;
 /*!50503 SET character_set_client = utf8mb4 */;
 CREATE TABLE `mobile_device_management_solutions` (

From 1517b285ec0e917bbbc433f90e079382a03891d2 Mon Sep 17 00:00:00 2001
From: Eric <eashaw@sailsjs.com>
Date: Fri, 2 Aug 2024 18:35:23 -0500
Subject: [PATCH 71/88] Docs: Add fleetdm.com/guides link to
 tutorials-and-guides docs page. (#21026)

Related to: https://github.com/fleetdm/confidential/issues/7343

Changes:
- Added a fleetdm.com/guides link to the tutorials and guides docs page.
---
 docs/Get started/tutorials-and-guides.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/docs/Get started/tutorials-and-guides.md b/docs/Get started/tutorials-and-guides.md
index 0b1584f6a3..612f7c1b23 100644
--- a/docs/Get started/tutorials-and-guides.md	
+++ b/docs/Get started/tutorials-and-guides.md	
@@ -67,5 +67,7 @@ A collection of guides to help you get up and running with Fleet.
 - [Generate process trees with osquery](https://fleetdm.com/guides/generate-process-trees-with-osquery)
 
 
+<a style="text-decoration: none;" href="https://fleetdm.com/guides"><animated-arrow-button>See all guides</animated-arrow-button></a>
+
 <meta name="description" value="Links to deployment tutorials and guides for using Fleet.">
 <meta name="pageOrderInSection" value="300">

From 20e9ebf04182e701df2412e2bfc449cb0537114c Mon Sep 17 00:00:00 2001
From: Drew Baker <89049099+Drew-P-drawers@users.noreply.github.com>
Date: Fri, 2 Aug 2024 19:51:36 -0400
Subject: [PATCH 72/88] Update README.md (#21000)

Updating readme for alignment.
---
 README.md | 2 --
 1 file changed, 2 deletions(-)

diff --git a/README.md b/README.md
index 7e8651a618..3c23f067c3 100644
--- a/README.md
+++ b/README.md
@@ -43,8 +43,6 @@ Fleet has no ambition to replace all of your other tools.  (Though it might repl
 
 Fleet plays well with Munki, Chef, Puppet, and Ansible, as well as with security tools like Crowdstrike and SentinelOne.  For example, you can use the free version of Fleet to quickly report on what hosts are _actually_ running your EDR agent.
 
-While most folks prefer to use one or the other, Fleet can also coexist peacefully with Rapid7 and other agent-based vulnerability scanners.  This can be useful during migrations.
-
 #### Free as in free
 The free version of Fleet will [always be free](https://fleetdm.com/pricing).  Fleet is [independently backed](https://linkedin.com/company/fleetdm) and actively maintained with the help of many amazing [contributors](https://github.com/fleetdm/fleet/graphs/contributors).
 

From 18977f324bcfab7ea1a8a9bcd282183f5d8f41ab Mon Sep 17 00:00:00 2001
From: Jahziel Villasana-Espinoza <jahziel@fleetdm.com>
Date: Mon, 5 Aug 2024 09:23:15 -0400
Subject: [PATCH 73/88] fix: panic during migration (#21031)

> Related issue: #21030

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Input data is properly validated, `SELECT *` is avoided, SQL
injection is prevented (using placeholders for values in statements)
- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality

---------

Co-authored-by: Sarah Gillespie <73313222+gillespi314@users.noreply.github.com>
---
 ...240802113716_UpdateSoftwareGitopsConfig.go | 10 ++-
 ...2113716_UpdateSoftwareGitopsConfig_test.go | 76 ++++++++++++++++++-
 2 files changed, 84 insertions(+), 2 deletions(-)

diff --git a/server/datastore/mysql/migrations/tables/20240802113716_UpdateSoftwareGitopsConfig.go b/server/datastore/mysql/migrations/tables/20240802113716_UpdateSoftwareGitopsConfig.go
index 96c9912287..c91e99099e 100644
--- a/server/datastore/mysql/migrations/tables/20240802113716_UpdateSoftwareGitopsConfig.go
+++ b/server/datastore/mysql/migrations/tables/20240802113716_UpdateSoftwareGitopsConfig.go
@@ -33,8 +33,16 @@ func Up_20240802113716(tx *sql.Tx) error {
 		if err := json.Unmarshal(r.Config, &config); err != nil {
 			return fmt.Errorf("unmarshal team config: %w", err)
 		}
-		softwareData := config["software"]
+		softwareData, ok := config["software"]
+		if !ok {
+			continue
+		}
+
 		rt := reflect.TypeOf(config["software"])
+		if rt == nil {
+			continue
+		}
+
 		if rt.Kind() == reflect.Slice {
 			// then we have an older config without the new fields
 			// Note: we are setting the new key to be whatever the old key was (if it was null, then
diff --git a/server/datastore/mysql/migrations/tables/20240802113716_UpdateSoftwareGitopsConfig_test.go b/server/datastore/mysql/migrations/tables/20240802113716_UpdateSoftwareGitopsConfig_test.go
index 020c071075..0bd2edcab4 100644
--- a/server/datastore/mysql/migrations/tables/20240802113716_UpdateSoftwareGitopsConfig_test.go
+++ b/server/datastore/mysql/migrations/tables/20240802113716_UpdateSoftwareGitopsConfig_test.go
@@ -159,10 +159,78 @@ func TestUp_20240802113716(t *testing.T) {
     "host_expiry_enabled": true
   }
 }
-
 `
+
+	badCfgNoSoftwareField := `
+{
+  "mdm": {
+    "ios_updates": {
+      "deadline": "",
+      "minimum_version": ""
+    },
+    "macos_setup": {
+      "bootstrap_package": "",
+      "macos_setup_assistant": "",
+      "enable_end_user_authentication": false,
+      "enable_release_device_manually": false
+    },
+    "macos_updates": {
+      "deadline": "",
+      "minimum_version": ""
+    },
+    "ipados_updates": {
+      "deadline": "",
+      "minimum_version": ""
+    },
+    "macos_settings": {
+      "custom_settings": []
+    },
+    "windows_updates": {
+      "deadline_days": null,
+      "grace_period_days": null
+    },
+    "windows_settings": {
+      "custom_settings": []
+    },
+    "enable_disk_encryption": false
+  },
+  "scripts": [],
+  "features": {
+    "enable_host_users": true,
+    "enable_software_inventory": true
+  },
+  "integrations": {
+    "jira": null,
+    "zendesk": null,
+    "google_calendar": {
+      "webhook_url": "",
+      "enable_calendar_events": false
+    }
+  },
+  "webhook_settings": {
+    "host_status_webhook": {
+      "days_count": 0,
+      "destination_url": "",
+      "host_percentage": 0,
+      "enable_host_status_webhook": false
+    },
+    "failing_policies_webhook": {
+      "policy_ids": null,
+      "destination_url": "",
+      "host_batch_size": 0,
+      "enable_failing_policies_webhook": false
+    }
+  },
+  "host_expiry_settings": {
+    "host_expiry_window": 30,
+    "host_expiry_enabled": true
+  }
+}
+`
+
 	tid1 := execNoErrLastID(t, db, `INSERT INTO teams (name, config) VALUES (?,?)`, "team 1", badCfg)
 	tid2 := execNoErrLastID(t, db, `INSERT INTO teams (name, config) VALUES (?,?)`, "team 2", badCfgEmptyArr)
+	tid3 := execNoErrLastID(t, db, `INSERT INTO teams (name, config) VALUES (?,?)`, "team 3", badCfgNoSoftwareField)
 
 	// Apply current migration.
 	applyNext(t, db)
@@ -180,6 +248,7 @@ func TestUp_20240802113716(t *testing.T) {
 	require.False(t, team.Config.Software.AppStoreApps.Valid)
 	require.Len(t, team.Config.Software.AppStoreApps.Value, 0)
 
+	team = fleet.Team{}
 	require.NoError(t, db.Get(&team, "SELECT id, config FROM teams WHERE id = ?", tid2))
 
 	// Team with an empty array originally should have JSON null set for packages
@@ -191,4 +260,9 @@ func TestUp_20240802113716(t *testing.T) {
 	require.False(t, team.Config.Software.AppStoreApps.Set)
 	require.False(t, team.Config.Software.AppStoreApps.Valid)
 	require.Len(t, team.Config.Software.AppStoreApps.Value, 0)
+
+	team = fleet.Team{}
+	require.NoError(t, db.Get(&team, "SELECT id, config FROM teams WHERE id = ?", tid3))
+
+	require.Nil(t, team.Config.Software)
 }

From f836722fb4164f9d9047c6f1d99f26b93750c6d8 Mon Sep 17 00:00:00 2001
From: Martin Angers <martin.n.angers@gmail.com>
Date: Mon, 5 Aug 2024 11:53:15 -0400
Subject: [PATCH 74/88] Initial implementation of decrypt tool (#21044)

---
 tools/mdm/decrypt-disk-encryption-key/main.go | 56 +++++++++++++++++++
 1 file changed, 56 insertions(+)
 create mode 100644 tools/mdm/decrypt-disk-encryption-key/main.go

diff --git a/tools/mdm/decrypt-disk-encryption-key/main.go b/tools/mdm/decrypt-disk-encryption-key/main.go
new file mode 100644
index 0000000000..22bf6ef714
--- /dev/null
+++ b/tools/mdm/decrypt-disk-encryption-key/main.go
@@ -0,0 +1,56 @@
+// Command decrypt-disk-encryption-key decrypts a base64-encoded encrypted key
+// using the provided X509 certificate and private key. This is typically used
+// to manually decrypt a disk encryption key, e.g. BitLocker on Windows or
+// FileVault on macOS. The certificate and private key used are the SCEP files
+// for a macOS host and the WSTEP files for a Windows host.
+//
+// Example usage (running from the root of this repository):
+//
+//		go run ./tools/mdm/decrypt-disk-encryption-key/main.go -cert path/to/file.crt \
+//	   -key path/to/file.key -value-to-decrypt base64-encoded-value
+package main
+
+import (
+	"errors"
+	"flag"
+	"fmt"
+
+	"github.com/apex/log"
+	"github.com/fleetdm/fleet/v4/server/config"
+	"github.com/fleetdm/fleet/v4/server/mdm"
+)
+
+func main() {
+	var (
+		certFile       = flag.String("cert", "", "The path to the X509 certificate file (required).")
+		keyFile        = flag.String("key", "", "The path to the X509 private key file (required).")
+		valueToDecrypt = flag.String("value-to-decrypt", "", "The base64-encoded value to decrypt (required).")
+	)
+	flag.Parse()
+
+	if *certFile == "" || *keyFile == "" || *valueToDecrypt == "" {
+		flag.Usage()
+		return
+	}
+
+	cfg := config.MDMConfig{
+		WindowsWSTEPIdentityCert: *certFile,
+		WindowsWSTEPIdentityKey:  *keyFile,
+	}
+	cert, _, _, err := cfg.MicrosoftWSTEP()
+	if err != nil {
+		// unwrap the error once to remove "Microsoft WSTEP" from the error
+		// message, as we don't know in this tool if the cert is for WSTEP or SCEP
+		// (it doesn't matter)
+		if uerr := errors.Unwrap(err); uerr != nil {
+			err = uerr
+		}
+		log.Fatalf("Error loading certificate: %v", err)
+	}
+
+	decrypted, err := mdm.DecryptBase64CMS(*valueToDecrypt, cert.Leaf, cert.PrivateKey)
+	if err != nil {
+		log.Fatalf("Error decrypting value: %v", err)
+	}
+	fmt.Printf("Decrypted value: %s\n", string(decrypted))
+}

From 8362c328a1b010c7fcd8f1f4ff10ec7e0b703ddb Mon Sep 17 00:00:00 2001
From: Ian Littman <iansltx@gmail.com>
Date: Mon, 5 Aug 2024 11:23:26 -0500
Subject: [PATCH 75/88] Fix grammar on load balancer documentation in deploy
 docs (#21032)

Checklist deleted as items are irrlevant for docs updates.
---
 docs/Deploy/Reference-Architectures.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/Deploy/Reference-Architectures.md b/docs/Deploy/Reference-Architectures.md
index 06a7d8dd5a..630b8561b5 100644
--- a/docs/Deploy/Reference-Architectures.md
+++ b/docs/Deploy/Reference-Architectures.md
@@ -150,7 +150,7 @@ In some cases adding a read replica can increase database performance for specif
 
 #### Traffic load balancing
 Load balancing enables distributing request traffic over many instances of the backend application. Using AWS Application
-Load Balancer can also [offload SSL termination](https://docs.aws.amazon.com/elasticloadbalancing/latest/application/create-https-listener.html), freeing Fleet to spend the majority of it's allocated compute dedicated 
+Load Balancer can also [offload SSL termination](https://docs.aws.amazon.com/elasticloadbalancing/latest/application/create-https-listener.html), freeing Fleet to spend the majority of its allocated compute dedicated 
 to its core functionality. More details about ALB can be found [here](https://docs.aws.amazon.com/elasticloadbalancing/latest/application/introduction.html).
 
 _**Note if using [terraform reference architecture](https://github.com/fleetdm/fleet/tree/main/infrastructure/dogfood/terraform/aws#terraform) all configurations can dynamically scale based on load(cpu/memory) and all configurations

From 40b0349d132ef72ba0acb2fc45dc873efeff7967 Mon Sep 17 00:00:00 2001
From: Victor Lyuboslavsky <victor.lyuboslavsky@gmail.com>
Date: Mon, 5 Aug 2024 18:44:30 +0200
Subject: [PATCH 76/88] Fixed issue where callback was clearing event body tag.
 (#20997)

#20994 unreleased bug -- callback was clearing event body tag

# Checklist for submitter

- [x] Added/updated tests
- [x] Manual QA for all new/changed functionality
---
 ee/server/calendar/google_calendar.go         | 27 ++++++++-------
 ee/server/service/calendar.go                 |  4 ++-
 server/cron/calendar_cron.go                  |  9 ++---
 server/fleet/calendar.go                      |  4 +--
 server/fleet/calendar_events.go               | 12 +++++--
 server/fleet/calendar_events_test.go          |  8 ++---
 server/service/integration_enterprise_test.go | 34 +++++++++++++++++++
 7 files changed, 72 insertions(+), 26 deletions(-)

diff --git a/ee/server/calendar/google_calendar.go b/ee/server/calendar/google_calendar.go
index 73c47d5cde..39c31d4807 100644
--- a/ee/server/calendar/google_calendar.go
+++ b/ee/server/calendar/google_calendar.go
@@ -298,30 +298,30 @@ func (c *GoogleCalendar) Configure(userEmail string) error {
 }
 
 func (c *GoogleCalendar) UpdateEventBody(event *fleet.CalendarEvent,
-	genBodyFn fleet.CalendarGenBodyFn) error {
+	genBodyFn fleet.CalendarGenBodyFn) (string, error) {
 	details, err := c.unmarshalDetails(event)
 	if err != nil {
-		return err
+		return "", err
 	}
 	gEvent, err := c.config.API.GetEvent(details.ID, "")
 	if err != nil {
-		return ctxerr.Wrap(c.config.Context, err, "retrieving Google calendar event")
+		return "", ctxerr.Wrap(c.config.Context, err, "retrieving Google calendar event")
 	}
 	// Check if the current description contains the conflict text
 	conflict := strings.Contains(gEvent.Description, fleet.CalendarEventConflictText)
 	var ok bool
 	gEvent.Description, ok, err = genBodyFn(conflict)
 	if err != nil {
-		return ctxerr.Wrap(c.config.Context, err, "generating calendar event body")
+		return "", ctxerr.Wrap(c.config.Context, err, "generating calendar event body")
 	}
 	if !ok {
-		return nil
+		return "", nil
 	}
-	_, err = c.config.API.UpdateEvent(gEvent)
+	updatedEvent, err := c.config.API.UpdateEvent(gEvent)
 	if err != nil {
-		return ctxerr.Wrap(c.config.Context, err, "updating Google calendar event")
+		return "", ctxerr.Wrap(c.config.Context, err, "updating Google calendar event")
 	}
-	return nil
+	return updatedEvent.Etag, nil
 }
 
 func (c *GoogleCalendar) GetAndUpdateEvent(event *fleet.CalendarEvent, genBodyFn fleet.CalendarGenBodyFn,
@@ -441,7 +441,8 @@ func (c *GoogleCalendar) GetAndUpdateEvent(event *fleet.CalendarEvent, genBodyFn
 			if err != nil {
 				return nil, false, err
 			}
-			fleetEvent, err := c.googleEventToFleetEvent(*startTime, *endTime, gEvent, event.UUID, details.ChannelID, details.ResourceID)
+			fleetEvent, err := c.googleEventToFleetEvent(*startTime, *endTime, gEvent, event.UUID, details.ChannelID, details.ResourceID,
+				details.BodyTag)
 			if err != nil {
 				return nil, false, err
 			}
@@ -674,8 +675,8 @@ func (c *GoogleCalendar) createEvent(
 		resourceID = opts.ResourceID
 	}
 
-	// Convert Google event to Fleet event
-	fleetEvent, err := c.googleEventToFleetEvent(eventStart, eventEnd, event, eventUUID, channelID, resourceID)
+	// Convert Google event to Fleet event. Body tag will be updated by the calling function.
+	fleetEvent, err := c.googleEventToFleetEvent(eventStart, eventEnd, event, eventUUID, channelID, resourceID, "body_tag")
 	if err != nil {
 		return nil, err
 	}
@@ -726,8 +727,7 @@ func getLocation(tz string, config *GoogleCalendarConfig) *time.Location {
 }
 
 func (c *GoogleCalendar) googleEventToFleetEvent(startTime time.Time, endTime time.Time, event *calendar.Event, eventUUID string,
-	channelID string,
-	resourceID string) (
+	channelID string, resourceID string, bodyTag string) (
 	*fleet.CalendarEvent, error,
 ) {
 	tzName := c.location.String()
@@ -742,6 +742,7 @@ func (c *GoogleCalendar) googleEventToFleetEvent(startTime time.Time, endTime ti
 		ETag:       event.Etag,
 		ChannelID:  channelID,
 		ResourceID: resourceID,
+		BodyTag:    bodyTag,
 	}
 	detailsJson, err := json.Marshal(details)
 	if err != nil {
diff --git a/ee/server/service/calendar.go b/ee/server/service/calendar.go
index 4f5f971b56..75886f1053 100644
--- a/ee/server/service/calendar.go
+++ b/ee/server/service/calendar.go
@@ -235,7 +235,9 @@ func (svc *Service) processCalendarEvent(ctx context.Context, eventDetails *flee
 			return ctxerr.Wrap(ctx, err, "set recent update flag")
 		}
 		// Event was updated, so we need to save it
-		err = event.SaveBodyTag(generatedTag)
+		if generatedTag != "" {
+			err = event.SaveDataItems("body_tag", generatedTag)
+		}
 		if err != nil {
 			return ctxerr.Wrap(ctx, err, "save calendar event body tag")
 		}
diff --git a/server/cron/calendar_cron.go b/server/cron/calendar_cron.go
index 4e717a84b6..ed943caa52 100644
--- a/server/cron/calendar_cron.go
+++ b/server/cron/calendar_cron.go
@@ -396,6 +396,7 @@ func processFailingHostExistingCalendarEvent(
 
 	// Function to generate calendar event body.
 	var generatedTag string
+	var newETag string
 	var genBodyFn fleet.CalendarGenBodyFn = func(conflict bool) (string, bool, error) {
 		var body string
 		body, generatedTag = calendar.GenerateCalendarEventBody(ctx, ds, orgName, host, policyIDtoPolicy, conflict, logger)
@@ -409,7 +410,7 @@ func processFailingHostExistingCalendarEvent(
 		updatedBodyTag := getBodyTag(ctx, ds, host, policyIDtoPolicy, logger)
 
 		if currentBodyTag != updatedBodyTag && updatedBodyTag != "" {
-			err = userCalendar.UpdateEventBody(calendarEvent, genBodyFn)
+			newETag, err = userCalendar.UpdateEventBody(calendarEvent, genBodyFn)
 			if err != nil {
 				return fmt.Errorf("update event body: %w", err)
 			}
@@ -440,8 +441,8 @@ func processFailingHostExistingCalendarEvent(
 	}
 
 	if updated {
-		if generatedTag != "" {
-			err = updatedEvent.SaveBodyTag(generatedTag)
+		if generatedTag != "" && newETag != "" {
+			err = updatedEvent.SaveDataItems("body_tag", generatedTag, "etag", newETag)
 			if err != nil {
 				return fmt.Errorf("save calendar event body tag: %w", err)
 			}
@@ -623,7 +624,7 @@ func attemptCreatingEventOnUserCalendar(
 		var dee fleet.DayEndedError
 		switch {
 		case err == nil:
-			err = calendarEvent.SaveBodyTag(generatedTag)
+			err = calendarEvent.SaveDataItems("body_tag", generatedTag)
 			if err != nil {
 				return nil, err
 			}
diff --git a/server/fleet/calendar.go b/server/fleet/calendar.go
index 72c3e9e0ba..fa9de8f07a 100644
--- a/server/fleet/calendar.go
+++ b/server/fleet/calendar.go
@@ -42,8 +42,8 @@ type UserCalendar interface {
 	GetAndUpdateEvent(event *CalendarEvent, genBodyFn CalendarGenBodyFn,
 		opts CalendarGetAndUpdateEventOpts) (updatedEvent *CalendarEvent,
 		updated bool, err error)
-	// UpdateEventBody updates the body of the calendar event.
-	UpdateEventBody(event *CalendarEvent, genBodyFn CalendarGenBodyFn) error
+	// UpdateEventBody updates the body of the calendar event and returns new ETag
+	UpdateEventBody(event *CalendarEvent, genBodyFn CalendarGenBodyFn) (string, error)
 	// DeleteEvent deletes the event with the given ID.
 	DeleteEvent(event *CalendarEvent) error
 	// StopEventChannel stops the event's callback channel.
diff --git a/server/fleet/calendar_events.go b/server/fleet/calendar_events.go
index 44d11306fc..5e730e283b 100644
--- a/server/fleet/calendar_events.go
+++ b/server/fleet/calendar_events.go
@@ -2,6 +2,7 @@ package fleet
 
 import (
 	"encoding/json"
+	"errors"
 	"fmt"
 	"time"
 )
@@ -30,7 +31,10 @@ func (ce *CalendarEvent) GetBodyTag() string {
 	return d.BodyTag
 }
 
-func (ce *CalendarEvent) SaveBodyTag(bodyTag string) error {
+func (ce *CalendarEvent) SaveDataItems(keysAndValues ...string) error {
+	if len(keysAndValues)%2 != 0 {
+		return errors.New("SaveDataItem requires an even number of arguments")
+	}
 	var result map[string]any
 	if len(ce.Data) > 0 {
 		err := json.Unmarshal(ce.Data, &result)
@@ -40,7 +44,11 @@ func (ce *CalendarEvent) SaveBodyTag(bodyTag string) error {
 	} else {
 		result = make(map[string]any, 1)
 	}
-	result["body_tag"] = bodyTag
+	for i := 0; i < len(keysAndValues); i += 2 {
+		key := keysAndValues[i]
+		value := keysAndValues[i+1]
+		result[key] = value
+	}
 	data, err := json.Marshal(result)
 	if err != nil {
 		return fmt.Errorf("could not marshal event data: %w", err)
diff --git a/server/fleet/calendar_events_test.go b/server/fleet/calendar_events_test.go
index 3e79bd6bb4..931cd3889f 100644
--- a/server/fleet/calendar_events_test.go
+++ b/server/fleet/calendar_events_test.go
@@ -8,7 +8,7 @@ import (
 	"github.com/stretchr/testify/require"
 )
 
-func TestBodyTag(t *testing.T) {
+func TestSaveDataItems(t *testing.T) {
 	t.Parallel()
 
 	var event CalendarEvent
@@ -16,7 +16,7 @@ func TestBodyTag(t *testing.T) {
 	assert.Equal(t, "", event.GetBodyTag())
 
 	bodyTag := "bodyTag"
-	require.NoError(t, event.SaveBodyTag(bodyTag))
+	require.NoError(t, event.SaveDataItems("body_tag", bodyTag))
 	assert.Equal(t, bodyTag, event.GetBodyTag())
 
 	testMap := make(map[string]any, 5)
@@ -29,11 +29,11 @@ func TestBodyTag(t *testing.T) {
 	event.Data = data
 	assert.Equal(t, oldBodyTag, event.GetBodyTag())
 
-	require.NoError(t, event.SaveBodyTag(bodyTag))
+	require.NoError(t, event.SaveDataItems("body_tag", bodyTag))
 	assert.Equal(t, bodyTag, event.GetBodyTag())
 
 	// Make sure data was not modified
-	require.NoError(t, event.SaveBodyTag(oldBodyTag))
+	require.NoError(t, event.SaveDataItems("body_tag", oldBodyTag))
 	var result map[string]any
 	require.NoError(t, json.Unmarshal(event.Data, &result))
 	assert.Equal(t, testMap, result)
diff --git a/server/service/integration_enterprise_test.go b/server/service/integration_enterprise_test.go
index f87d9b144a..438138dc67 100644
--- a/server/service/integration_enterprise_test.go
+++ b/server/service/integration_enterprise_test.go
@@ -11728,11 +11728,15 @@ func (s *integrationEnterpriseTestSuite) TestCalendarCallback() {
 	require.NotZero(t, event.StartTime)
 	require.NotZero(t, event.EndTime)
 	require.NotEmpty(t, event.UUID)
+	bodyTag := event.GetBodyTag()
+	assert.NotEmpty(t, bodyTag)
 	assert.Equal(t, 1, calendar.MockChannelsCount())
 
 	// Get channel ID
 	type eventDetails struct {
 		ChannelID string `json:"channel_id"`
+		BodyTag   string `json:"body_tag"`
+		ETag      string `json:"etag"`
 	}
 	var details eventDetails
 	err = json.Unmarshal(event.Data, &details)
@@ -11855,6 +11859,8 @@ func (s *integrationEnterpriseTestSuite) TestCalendarCallback() {
 
 	err = json.Unmarshal(eventRecreated.Data, &details)
 	require.NoError(t, err)
+	assert.NotEmpty(t, details.BodyTag)
+	bodyTag = details.BodyTag
 
 	// New event callback should work
 	_ = s.DoRawWithHeaders("POST", "/api/v1/fleet/calendar/webhook/"+eventRecreated.UUID, []byte(""), http.StatusOK,
@@ -11891,6 +11897,30 @@ func (s *integrationEnterpriseTestSuite) TestCalendarCallback() {
 	assert.Greater(t, eventUpdated.StartTime, eventRecreated.StartTime)
 	assert.Equal(t, eventRecreated.EndTime, eventUpdated.EndTime)
 	assert.Equal(t, 1, calendar.MockChannelsCount())
+	assert.Equal(t, bodyTag, eventRecreated.GetBodyTag())
+
+	// Change the body contents of event.
+	events = calendar.ListGoogleMockEvents()
+	require.Len(t, events, 1)
+	eTag := "description change etag"
+	for _, e := range events {
+		e.Etag = eTag
+		e.Description = "new description"
+	}
+	// New event callback should cause Etag to update but Body tag to remain the same
+	_ = s.DoRawWithHeaders("POST", "/api/v1/fleet/calendar/webhook/"+eventRecreated.UUID, []byte(""), http.StatusOK,
+		map[string]string{
+			"X-Goog-Channel-Id":     details.ChannelID,
+			"X-Goog-Resource-State": "exists",
+		})
+	team1CalendarEvents, err = s.ds.ListCalendarEvents(ctx, &team1.ID)
+	require.NoError(t, err)
+	require.Len(t, team1CalendarEvents, 1)
+	eventDescUpdated := team1CalendarEvents[0]
+	err = json.Unmarshal(eventDescUpdated.Data, &details)
+	require.NoError(t, err)
+	assert.Equal(t, bodyTag, details.BodyTag)
+	assert.Equal(t, eTag, details.ETag)
 
 	// Update the time of the event again
 	events = calendar.ListGoogleMockEvents()
@@ -11900,6 +11930,7 @@ func (s *integrationEnterpriseTestSuite) TestCalendarCallback() {
 		require.NoError(t, err)
 		newStartTime := st.Add(5 * time.Minute).Format(time.RFC3339)
 		e.Start.DateTime = newStartTime
+		e.Etag = e.Etag + "1"
 	}
 
 	// Grab the lock
@@ -11950,6 +11981,9 @@ func (s *integrationEnterpriseTestSuite) TestCalendarCallback() {
 			require.NoError(t, err)
 			if len(team1CalendarEvents) == 1 && team1CalendarEvents[0].UUID == event.UUID &&
 				team1CalendarEvents[0].StartTime.After(event.StartTime) {
+				err = json.Unmarshal(team1CalendarEvents[0].Data, &details)
+				require.NoError(t, err)
+				assert.NotEqual(t, eTag, details.ETag, "ETag should have updated")
 				done <- struct{}{}
 				return
 			}

From 7f95ae46a35e99228ee4457f1735584406f97a53 Mon Sep 17 00:00:00 2001
From: Sarah Gillespie <73313222+gillespi314@users.noreply.github.com>
Date: Mon, 5 Aug 2024 12:30:57 -0500
Subject: [PATCH 77/88] Update content of "Turn on MDM" banner in UI (#21046)

---
 changes/20882-ui-update-turn-on-mdm-banner                  | 1 +
 .../components/DeviceUserBanners/DeviceUserBanners.tsx      | 5 +++--
 .../components/HostDetailsBanners/HostDetailsBanners.tsx    | 6 +++---
 3 files changed, 7 insertions(+), 5 deletions(-)
 create mode 100644 changes/20882-ui-update-turn-on-mdm-banner

diff --git a/changes/20882-ui-update-turn-on-mdm-banner b/changes/20882-ui-update-turn-on-mdm-banner
new file mode 100644
index 0000000000..eca36625ce
--- /dev/null
+++ b/changes/20882-ui-update-turn-on-mdm-banner
@@ -0,0 +1 @@
+- Updated text for "Turn on MDM" banners in UI.
\ No newline at end of file
diff --git a/frontend/pages/hosts/details/DeviceUserPage/components/DeviceUserBanners/DeviceUserBanners.tsx b/frontend/pages/hosts/details/DeviceUserPage/components/DeviceUserBanners/DeviceUserBanners.tsx
index 028165648f..286101a026 100644
--- a/frontend/pages/hosts/details/DeviceUserPage/components/DeviceUserBanners/DeviceUserBanners.tsx
+++ b/frontend/pages/hosts/details/DeviceUserPage/components/DeviceUserBanners/DeviceUserBanners.tsx
@@ -51,8 +51,9 @@ const DeviceUserBanners = ({
       return (
         <InfoBanner color="yellow" cta={turnOnMdmButton}>
           Mobile device management (MDM) is off. MDM allows your organization to
-          change settings and install software. This lets your organization keep
-          your device up to date so you don&apos;t have to.
+          enforce settings, OS updates, disk encryption, and more. This lets
+          your organization keep your device up to date so you don&apos;t have
+          to.
         </InfoBanner>
       );
     }
diff --git a/frontend/pages/hosts/details/HostDetailsPage/components/HostDetailsBanners/HostDetailsBanners.tsx b/frontend/pages/hosts/details/HostDetailsPage/components/HostDetailsBanners/HostDetailsBanners.tsx
index 2a35d4a418..fbd7e94c24 100644
--- a/frontend/pages/hosts/details/HostDetailsPage/components/HostDetailsBanners/HostDetailsBanners.tsx
+++ b/frontend/pages/hosts/details/HostDetailsPage/components/HostDetailsBanners/HostDetailsBanners.tsx
@@ -73,9 +73,9 @@ const HostDetailsBanners = ({
       <div className={baseClass}>
         {showTurnOnMdmInfoBanner && (
           <InfoBanner color="yellow">
-            To change settings and install software, ask the end user to follow
-            the <strong>Turn on MDM</strong> instructions on their{" "}
-            <strong>My device</strong> page.
+            To enforce settings, OS updates, disk encryption, and more, ask the
+            end user to follow the <strong>Turn on MDM</strong> instructions on
+            their <strong>My device</strong> page.
           </InfoBanner>
         )}
         {showDiskEncryptionUserActionRequired && (

From a6a9a2e1c26cbea6ecdb40e9501045b5a8d58d05 Mon Sep 17 00:00:00 2001
From: Tim Lee <timlee@fleetdm.com>
Date: Mon, 5 Aug 2024 11:39:10 -0600
Subject: [PATCH 78/88] no team software gitops (#20847)

#20464

Adding gitops support for a top level `software` key to be used to
manage installable software into "no team".

- [ ] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [X] Added/updated tests
- [X] Manual QA for all new/changed functionality

---------

Co-authored-by: Victor Lyuboslavsky <victor.lyuboslavsky@gmail.com>
---
 cmd/fleetctl/apply.go                         |   2 +-
 cmd/fleetctl/gitops.go                        |   2 +-
 .../gitops_enterprise_integration_test.go     |   2 +-
 cmd/fleetctl/gitops_test.go                   |  47 +++-
 cmd/fleetctl/preview.go                       |   2 +-
 .../gitops/global_config_no_paths.yml         |   1 +
 ...macos_custom_settings_valid_deprecated.yml |   1 +
 ...al_macos_windows_custom_settings_valid.yml |   1 +
 ...dows_custom_settings_invalid_label_mix.yml |   1 +
 ..._windows_custom_settings_unknown_label.yml |   1 +
 ...m_software_installer_install_not_found.yml |  19 ++
 ...e_installer_invalid_self_service_value.yml |  18 ++
 .../no_team_software_installer_no_url.yml     |  22 ++
 .../no_team_software_installer_not_found.yml  |  17 ++
 ...tware_installer_post_install_not_found.yml |  21 ++
 ...staller_pre_condition_multiple_queries.yml |  23 ++
 ...ware_installer_pre_condition_not_found.yml |  21 ++
 .../no_team_software_installer_too_large.yml  |  17 ++
 ...no_team_software_installer_unsupported.yml |  17 ++
 .../no_team_software_installer_valid.yml      |  25 ++
 docs/Contributing/API-for-contributors.md     |   4 +-
 ee/server/service/software_installers.go      |  27 +--
 ee/server/service/teams.go                    |   2 +-
 pkg/spec/gitops.go                            |  24 +-
 pkg/spec/gitops_test.go                       |  16 +-
 pkg/spec/spec.go                              |   1 +
 server/fleet/software_installer.go            |  14 ++
 server/fleet/teams.go                         |  17 +-
 server/service/client.go                      | 224 +++++++++++-------
 server/service/client_software.go             |  11 +
 server/service/integration_enterprise_test.go |  41 +++-
 server/service/software_installers.go         |   2 +-
 32 files changed, 492 insertions(+), 151 deletions(-)
 create mode 100644 cmd/fleetctl/testdata/gitops/no_team_software_installer_install_not_found.yml
 create mode 100644 cmd/fleetctl/testdata/gitops/no_team_software_installer_invalid_self_service_value.yml
 create mode 100644 cmd/fleetctl/testdata/gitops/no_team_software_installer_no_url.yml
 create mode 100644 cmd/fleetctl/testdata/gitops/no_team_software_installer_not_found.yml
 create mode 100644 cmd/fleetctl/testdata/gitops/no_team_software_installer_post_install_not_found.yml
 create mode 100644 cmd/fleetctl/testdata/gitops/no_team_software_installer_pre_condition_multiple_queries.yml
 create mode 100644 cmd/fleetctl/testdata/gitops/no_team_software_installer_pre_condition_not_found.yml
 create mode 100644 cmd/fleetctl/testdata/gitops/no_team_software_installer_too_large.yml
 create mode 100644 cmd/fleetctl/testdata/gitops/no_team_software_installer_unsupported.yml
 create mode 100644 cmd/fleetctl/testdata/gitops/no_team_software_installer_valid.yml

diff --git a/cmd/fleetctl/apply.go b/cmd/fleetctl/apply.go
index 751c74709f..a84ade90f0 100644
--- a/cmd/fleetctl/apply.go
+++ b/cmd/fleetctl/apply.go
@@ -90,7 +90,7 @@ func applyCommand() *cli.Command {
 				opts.TeamForPolicies = policiesTeamName
 			}
 			baseDir := filepath.Dir(flFilename)
-			_, err = fleetClient.ApplyGroup(c.Context, specs, baseDir, logf, opts)
+			_, err = fleetClient.ApplyGroup(c.Context, specs, baseDir, logf, nil, opts)
 			if err != nil {
 				return err
 			}
diff --git a/cmd/fleetctl/gitops.go b/cmd/fleetctl/gitops.go
index c56016eca3..6f13fd29e9 100644
--- a/cmd/fleetctl/gitops.go
+++ b/cmd/fleetctl/gitops.go
@@ -90,7 +90,7 @@ func gitopsCommand() *cli.Command {
 			secrets := make(map[string]struct{})
 			for _, flFilename := range flFilenames.Value() {
 				baseDir := filepath.Dir(flFilename)
-				config, err := spec.GitOpsFromFile(flFilename, baseDir)
+				config, err := spec.GitOpsFromFile(flFilename, baseDir, appConfig)
 				if err != nil {
 					return err
 				}
diff --git a/cmd/fleetctl/gitops_enterprise_integration_test.go b/cmd/fleetctl/gitops_enterprise_integration_test.go
index ab3f8bf835..7089ef6893 100644
--- a/cmd/fleetctl/gitops_enterprise_integration_test.go
+++ b/cmd/fleetctl/gitops_enterprise_integration_test.go
@@ -176,6 +176,7 @@ contexts:
 		fmt.Sprintf(
 			`
 controls:
+software:
 queries:
 policies:
 agent_options:
@@ -230,5 +231,4 @@ team_settings:
 	for _, fileName := range teamFileNames {
 		_ = runAppForTest(t, []string{"gitops", "--config", fleetctlConfig.Name(), "-f", fileName})
 	}
-
 }
diff --git a/cmd/fleetctl/gitops_test.go b/cmd/fleetctl/gitops_test.go
index 826dd43374..22bd28845a 100644
--- a/cmd/fleetctl/gitops_test.go
+++ b/cmd/fleetctl/gitops_test.go
@@ -36,7 +36,7 @@ const (
 	orgName        = "GitOps Test"
 )
 
-func TestFilenameValidation(t *testing.T) {
+func TestFilenameGitOpsValidation(t *testing.T) {
 	filename := strings.Repeat("a", filenameMaxLength+1)
 	_, err := runAppNoChecks([]string{"gitops", "-f", filename})
 	assert.ErrorContains(t, err, "file name must be less than")
@@ -207,6 +207,9 @@ func TestBasicGlobalPremiumGitOps(t *testing.T) {
 	ds.NewJobFunc = func(ctx context.Context, job *fleet.Job) (*fleet.Job, error) {
 		return &fleet.Job{}, nil
 	}
+	ds.BatchSetSoftwareInstallersFunc = func(ctx context.Context, teamID *uint, installers []*fleet.UploadSoftwareInstallerPayload) error {
+		return nil
+	}
 
 	tmpFile, err := os.CreateTemp(t.TempDir(), "*.yml")
 	require.NoError(t, err)
@@ -238,6 +241,7 @@ org_settings:
     org_logo_url_light_background: ""
     org_name: ${ORG_NAME}
   secrets:
+software:
 `,
 	)
 	require.NoError(t, err)
@@ -381,6 +385,7 @@ agent_options:
 name: ${TEST_TEAM_NAME}
 team_settings:
   secrets: ${TEST_SECRET}
+software:
 `,
 	)
 	require.NoError(t, err)
@@ -538,6 +543,7 @@ func TestFullGlobalGitOps(t *testing.T) {
 	t.Setenv("FLEET_SERVER_URL", fleetServerURL)
 	t.Setenv("ORG_NAME", orgName)
 	t.Setenv("APPLE_BM_DEFAULT_TEAM", teamName)
+	t.Setenv("SOFTWARE_INSTALLER_URL", fleetServerURL)
 	file := "./testdata/gitops/global_config_no_paths.yml"
 
 	// Dry run should fail because Apple BM Default Team does not exist and premium license is not set
@@ -834,6 +840,7 @@ agent_options:
 name: ${TEST_TEAM_NAME}
 team_settings:
   secrets: [{"secret":"${TEST_SECRET}"}]
+software:
 `,
 	)
 	require.NoError(t, err)
@@ -1011,6 +1018,7 @@ org_settings:
     org_logo_url_light_background: ""
     org_name: ${ORG_NAME}
   secrets: [{"secret":"globalSecret"}]
+software:
 `,
 	)
 	require.NoError(t, err)
@@ -1030,6 +1038,7 @@ agent_options:
 name: ${TEST_TEAM_NAME}
 team_settings:
   secrets: [{"secret":"${TEST_SECRET}"}]
+software:
 `,
 	)
 	require.NoError(t, err)
@@ -1045,6 +1054,7 @@ agent_options:
 name: ${TEST_TEAM_NAME}
 team_settings:
   secrets: [{"secret":"${TEST_SECRET}"},{"secret":"globalSecret"}]
+software:
 `,
 	)
 	require.NoError(t, err)
@@ -1222,7 +1232,7 @@ func TestTeamSofwareInstallersGitOps(t *testing.T) {
 		{"testdata/gitops/team_software_installer_install_not_found.yml", "no such file or directory"},
 		{"testdata/gitops/team_software_installer_post_install_not_found.yml", "no such file or directory"},
 		{"testdata/gitops/team_software_installer_no_url.yml", "software URL is required"},
-		{"testdata/gitops/team_software_installer_invalid_self_service_value.yml", "cannot unmarshal string into Go struct field TeamSpecSoftware.packages of type bool"},
+		{"testdata/gitops/team_software_installer_invalid_self_service_value.yml", "cannot unmarshal string into Go struct field SoftwareSpec.packages of type bool"},
 	}
 	for _, c := range cases {
 		t.Run(filepath.Base(c.file), func(t *testing.T) {
@@ -1255,6 +1265,39 @@ func TestTeamSoftwareInstallersGitopsQueryEnv(t *testing.T) {
 	require.NoError(t, err)
 }
 
+func TestNoTeamSoftwareInstallersGitOps(t *testing.T) {
+	startSoftwareInstallerServer(t)
+
+	cases := []struct {
+		file    string
+		wantErr string
+	}{
+		{"testdata/gitops/no_team_software_installer_not_found.yml", "Please make sure that URLs are publicy accessible to the internet."},
+		{"testdata/gitops/no_team_software_installer_unsupported.yml", "The file should be .pkg, .msi, .exe or .deb."},
+		{"testdata/gitops/no_team_software_installer_too_large.yml", "The maximum file size is 500 MB"},
+		{"testdata/gitops/no_team_software_installer_valid.yml", ""},
+		{"testdata/gitops/no_team_software_installer_pre_condition_multiple_queries.yml", "should have only one query."},
+		{"testdata/gitops/no_team_software_installer_pre_condition_not_found.yml", "no such file or directory"},
+		{"testdata/gitops/no_team_software_installer_install_not_found.yml", "no such file or directory"},
+		{"testdata/gitops/no_team_software_installer_post_install_not_found.yml", "no such file or directory"},
+		{"testdata/gitops/no_team_software_installer_no_url.yml", "software URL is required"},
+		{"testdata/gitops/no_team_software_installer_invalid_self_service_value.yml", "cannot unmarshal string into Go struct field SoftwareSpec.packages of type bool"},
+	}
+	for _, c := range cases {
+		t.Run(filepath.Base(c.file), func(t *testing.T) {
+			setupFullGitOpsPremiumServer(t)
+
+			t.Setenv("APPLE_BM_DEFAULT_TEAM", "")
+			_, err := runAppNoChecks([]string{"gitops", "-f", c.file})
+			if c.wantErr == "" {
+				require.NoError(t, err)
+			} else {
+				require.ErrorContains(t, err, c.wantErr)
+			}
+		})
+	}
+}
+
 func TestTeamVPPAppsGitOps(t *testing.T) {
 	config := &appleVPPConfigSrvConf{
 		Assets: []vpp.Asset{
diff --git a/cmd/fleetctl/preview.go b/cmd/fleetctl/preview.go
index 1aa78695f9..e11dc8bf9e 100644
--- a/cmd/fleetctl/preview.go
+++ b/cmd/fleetctl/preview.go
@@ -387,7 +387,7 @@ Use the stop and reset subcommands to manage the server and dependencies once st
 			}
 			// this only applies standard queries, the base directory is not used,
 			// so pass in the current working directory.
-			_, err = client.ApplyGroup(c.Context, specs, ".", logf, fleet.ApplyClientSpecOptions{})
+			_, err = client.ApplyGroup(c.Context, specs, ".", logf, nil, fleet.ApplyClientSpecOptions{})
 			if err != nil {
 				return err
 			}
diff --git a/cmd/fleetctl/testdata/gitops/global_config_no_paths.yml b/cmd/fleetctl/testdata/gitops/global_config_no_paths.yml
index 76936e3ad5..7d3dfe40f2 100644
--- a/cmd/fleetctl/testdata/gitops/global_config_no_paths.yml
+++ b/cmd/fleetctl/testdata/gitops/global_config_no_paths.yml
@@ -187,3 +187,4 @@ org_settings:
   secrets: # These secrets are used to enroll hosts to the "All teams" team
     - secret: SampleSecret123
     - secret: ABC
+software:
diff --git a/cmd/fleetctl/testdata/gitops/global_macos_custom_settings_valid_deprecated.yml b/cmd/fleetctl/testdata/gitops/global_macos_custom_settings_valid_deprecated.yml
index 177c1c80cf..b098442585 100644
--- a/cmd/fleetctl/testdata/gitops/global_macos_custom_settings_valid_deprecated.yml
+++ b/cmd/fleetctl/testdata/gitops/global_macos_custom_settings_valid_deprecated.yml
@@ -91,3 +91,4 @@ org_settings:
     databases_path: ""
   secrets:
     - secret: ABC
+software:
\ No newline at end of file
diff --git a/cmd/fleetctl/testdata/gitops/global_macos_windows_custom_settings_valid.yml b/cmd/fleetctl/testdata/gitops/global_macos_windows_custom_settings_valid.yml
index da75847cd5..e6231bf030 100644
--- a/cmd/fleetctl/testdata/gitops/global_macos_windows_custom_settings_valid.yml
+++ b/cmd/fleetctl/testdata/gitops/global_macos_windows_custom_settings_valid.yml
@@ -97,3 +97,4 @@ org_settings:
     databases_path: ""
   secrets: 
     - secret: ABC
+software:
diff --git a/cmd/fleetctl/testdata/gitops/global_windows_custom_settings_invalid_label_mix.yml b/cmd/fleetctl/testdata/gitops/global_windows_custom_settings_invalid_label_mix.yml
index 9d2ac6e69f..1a100de6f3 100644
--- a/cmd/fleetctl/testdata/gitops/global_windows_custom_settings_invalid_label_mix.yml
+++ b/cmd/fleetctl/testdata/gitops/global_windows_custom_settings_invalid_label_mix.yml
@@ -93,3 +93,4 @@ org_settings:
     databases_path: ""
   secrets:
     - secret: ABC
+software:
\ No newline at end of file
diff --git a/cmd/fleetctl/testdata/gitops/global_windows_custom_settings_unknown_label.yml b/cmd/fleetctl/testdata/gitops/global_windows_custom_settings_unknown_label.yml
index ba1d06f784..5208ba7248 100644
--- a/cmd/fleetctl/testdata/gitops/global_windows_custom_settings_unknown_label.yml
+++ b/cmd/fleetctl/testdata/gitops/global_windows_custom_settings_unknown_label.yml
@@ -91,3 +91,4 @@ org_settings:
     databases_path: ""
   secrets:
     - secret: ABC
+software:
\ No newline at end of file
diff --git a/cmd/fleetctl/testdata/gitops/no_team_software_installer_install_not_found.yml b/cmd/fleetctl/testdata/gitops/no_team_software_installer_install_not_found.yml
new file mode 100644
index 0000000000..d3bcada54e
--- /dev/null
+++ b/cmd/fleetctl/testdata/gitops/no_team_software_installer_install_not_found.yml
@@ -0,0 +1,19 @@
+# Test config
+controls:
+queries:
+policies:
+agent_options:
+org_settings:
+  server_settings:
+    server_url: $FLEET_SERVER_URL
+  org_info:
+    contact_url: https://example.com/contact
+    org_logo_url: ""
+    org_logo_url_light_background: ""
+    org_name: ${ORG_NAME}
+  secrets: [{"secret":"globalSecret"}]
+software:
+  packages:
+    - url: ${SOFTWARE_INSTALLER_URL}/ruby.deb
+      install_script:
+        path: lib/notfound.sh
\ No newline at end of file
diff --git a/cmd/fleetctl/testdata/gitops/no_team_software_installer_invalid_self_service_value.yml b/cmd/fleetctl/testdata/gitops/no_team_software_installer_invalid_self_service_value.yml
new file mode 100644
index 0000000000..acee06d683
--- /dev/null
+++ b/cmd/fleetctl/testdata/gitops/no_team_software_installer_invalid_self_service_value.yml
@@ -0,0 +1,18 @@
+# Test config
+controls:
+queries:
+policies:
+agent_options:
+org_settings:
+  server_settings:
+    server_url: $FLEET_SERVER_URL
+  org_info:
+    contact_url: https://example.com/contact
+    org_logo_url: ""
+    org_logo_url_light_background: ""
+    org_name: ${ORG_NAME}
+  secrets: [{"secret":"globalSecret"}]
+software:
+  packages:
+    - url: ${SOFTWARE_INSTALLER_URL}/invalidtype.txt
+      self_service: "not a boolean"
\ No newline at end of file
diff --git a/cmd/fleetctl/testdata/gitops/no_team_software_installer_no_url.yml b/cmd/fleetctl/testdata/gitops/no_team_software_installer_no_url.yml
new file mode 100644
index 0000000000..6d83a9daed
--- /dev/null
+++ b/cmd/fleetctl/testdata/gitops/no_team_software_installer_no_url.yml
@@ -0,0 +1,22 @@
+# Test config
+controls:
+queries:
+policies:
+agent_options:
+org_settings:
+  server_settings:
+    server_url: $FLEET_SERVER_URL
+  org_info:
+    contact_url: https://example.com/contact
+    org_logo_url: ""
+    org_logo_url_light_background: ""
+    org_name: ${ORG_NAME}
+  secrets: [{"secret":"globalSecret"}]
+software:
+  packages:
+    - install_script:
+        path: lib/install_ruby.sh
+      pre_install_query:
+        path: lib/query_ruby.yml
+      post_install_script:
+        path: lib/post_install_ruby.sh
\ No newline at end of file
diff --git a/cmd/fleetctl/testdata/gitops/no_team_software_installer_not_found.yml b/cmd/fleetctl/testdata/gitops/no_team_software_installer_not_found.yml
new file mode 100644
index 0000000000..cd7332f91e
--- /dev/null
+++ b/cmd/fleetctl/testdata/gitops/no_team_software_installer_not_found.yml
@@ -0,0 +1,17 @@
+# Test config
+controls:
+queries:
+policies:
+agent_options:
+org_settings:
+  server_settings:
+    server_url: $FLEET_SERVER_URL
+  org_info:
+    contact_url: https://example.com/contact
+    org_logo_url: ""
+    org_logo_url_light_background: ""
+    org_name: ${ORG_NAME}
+  secrets: [{"secret":"globalSecret"}]
+software:
+  packages:
+    - url: ${SOFTWARE_INSTALLER_URL}/notfound.deb
\ No newline at end of file
diff --git a/cmd/fleetctl/testdata/gitops/no_team_software_installer_post_install_not_found.yml b/cmd/fleetctl/testdata/gitops/no_team_software_installer_post_install_not_found.yml
new file mode 100644
index 0000000000..ac0a436360
--- /dev/null
+++ b/cmd/fleetctl/testdata/gitops/no_team_software_installer_post_install_not_found.yml
@@ -0,0 +1,21 @@
+# Test config
+controls:
+queries:
+policies:
+agent_options:
+org_settings:
+  server_settings:
+    server_url: $FLEET_SERVER_URL
+  org_info:
+    contact_url: https://example.com/contact
+    org_logo_url: ""
+    org_logo_url_light_background: ""
+    org_name: ${ORG_NAME}
+  secrets: [{"secret":"globalSecret"}]
+software:
+  packages:
+    - url: ${SOFTWARE_INSTALLER_URL}/ruby.deb
+      install_script:
+        path: lib/install_ruby.sh
+      post_install_script:
+        path: lib/notfound.sh
\ No newline at end of file
diff --git a/cmd/fleetctl/testdata/gitops/no_team_software_installer_pre_condition_multiple_queries.yml b/cmd/fleetctl/testdata/gitops/no_team_software_installer_pre_condition_multiple_queries.yml
new file mode 100644
index 0000000000..a2b5419c05
--- /dev/null
+++ b/cmd/fleetctl/testdata/gitops/no_team_software_installer_pre_condition_multiple_queries.yml
@@ -0,0 +1,23 @@
+# Test config
+controls:
+queries:
+policies:
+agent_options:
+org_settings:
+  server_settings:
+    server_url: $FLEET_SERVER_URL
+  org_info:
+    contact_url: https://example.com/contact
+    org_logo_url: ""
+    org_logo_url_light_background: ""
+    org_name: ${ORG_NAME}
+  secrets: [{"secret":"globalSecret"}]
+software:
+  packages:
+    - url: ${SOFTWARE_INSTALLER_URL}/ruby.deb
+      install_script:
+        path: lib/install_ruby.sh
+      pre_install_query:
+        path: lib/query_multiple.yml
+      post_install_script:
+        path: lib/post_install_ruby.sh
\ No newline at end of file
diff --git a/cmd/fleetctl/testdata/gitops/no_team_software_installer_pre_condition_not_found.yml b/cmd/fleetctl/testdata/gitops/no_team_software_installer_pre_condition_not_found.yml
new file mode 100644
index 0000000000..bafde42691
--- /dev/null
+++ b/cmd/fleetctl/testdata/gitops/no_team_software_installer_pre_condition_not_found.yml
@@ -0,0 +1,21 @@
+# Test config
+controls:
+queries:
+policies:
+agent_options:
+org_settings:
+  server_settings:
+    server_url: $FLEET_SERVER_URL
+  org_info:
+    contact_url: https://example.com/contact
+    org_logo_url: ""
+    org_logo_url_light_background: ""
+    org_name: ${ORG_NAME}
+  secrets: [{"secret":"globalSecret"}]
+software:
+  packages:
+    - url: ${SOFTWARE_INSTALLER_URL}/ruby.deb
+      install_script:
+        path: lib/install_ruby.sh
+      pre_install_query:
+        path: lib/notfound.yml
\ No newline at end of file
diff --git a/cmd/fleetctl/testdata/gitops/no_team_software_installer_too_large.yml b/cmd/fleetctl/testdata/gitops/no_team_software_installer_too_large.yml
new file mode 100644
index 0000000000..db4ffd3211
--- /dev/null
+++ b/cmd/fleetctl/testdata/gitops/no_team_software_installer_too_large.yml
@@ -0,0 +1,17 @@
+# Test config
+controls:
+queries:
+policies:
+agent_options:
+org_settings:
+  server_settings:
+    server_url: $FLEET_SERVER_URL
+  org_info:
+    contact_url: https://example.com/contact
+    org_logo_url: ""
+    org_logo_url_light_background: ""
+    org_name: ${ORG_NAME}
+  secrets: [{"secret":"globalSecret"}]
+software:
+  packages:
+    - url: ${SOFTWARE_INSTALLER_URL}/toolarge.deb
\ No newline at end of file
diff --git a/cmd/fleetctl/testdata/gitops/no_team_software_installer_unsupported.yml b/cmd/fleetctl/testdata/gitops/no_team_software_installer_unsupported.yml
new file mode 100644
index 0000000000..2bc609b931
--- /dev/null
+++ b/cmd/fleetctl/testdata/gitops/no_team_software_installer_unsupported.yml
@@ -0,0 +1,17 @@
+# Test config
+controls:
+queries:
+policies:
+agent_options:
+org_settings:
+  server_settings:
+    server_url: $FLEET_SERVER_URL
+  org_info:
+    contact_url: https://example.com/contact
+    org_logo_url: ""
+    org_logo_url_light_background: ""
+    org_name: ${ORG_NAME}
+  secrets: [{"secret":"globalSecret"}]
+software:
+  packages:
+    - url: ${SOFTWARE_INSTALLER_URL}/invalidtype.txt
\ No newline at end of file
diff --git a/cmd/fleetctl/testdata/gitops/no_team_software_installer_valid.yml b/cmd/fleetctl/testdata/gitops/no_team_software_installer_valid.yml
new file mode 100644
index 0000000000..e0fcaa490e
--- /dev/null
+++ b/cmd/fleetctl/testdata/gitops/no_team_software_installer_valid.yml
@@ -0,0 +1,25 @@
+# Test config
+controls:
+queries:
+policies:
+agent_options:
+org_settings:
+  server_settings:
+    server_url: $FLEET_SERVER_URL
+  org_info:
+    contact_url: https://example.com/contact
+    org_logo_url: ""
+    org_logo_url_light_background: ""
+    org_name: ${ORG_NAME}
+  secrets: [{"secret":"globalSecret"}]
+software:
+  packages:
+    - url: ${SOFTWARE_INSTALLER_URL}/ruby.deb
+      install_script:
+        path: lib/install_ruby.sh
+      pre_install_query:
+        path: lib/query_ruby.yml
+      post_install_script:
+        path: lib/post_install_ruby.sh
+    - url: ${SOFTWARE_INSTALLER_URL}/other.deb
+      self_service: true
\ No newline at end of file
diff --git a/docs/Contributing/API-for-contributors.md b/docs/Contributing/API-for-contributors.md
index 0f1f3a2ffb..4699b76d3d 100644
--- a/docs/Contributing/API-for-contributors.md
+++ b/docs/Contributing/API-for-contributors.md
@@ -2957,8 +2957,8 @@ _Available in Fleet Premium._
 
 | Name      | Type   | In    | Description                                                                                                                                                           |
 | --------- | ------ | ----- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------|
-| team_id   | number | query | The ID of the team to add the software package to. Only one team identifier (`team_id` or `team_name`) can be included in the request, omit this parameter if using `team_name`. |
-| team_name | string | query | The name of the team to add the software package to. Only one team identifier (`team_id` or `team_name`) can be included in the request, omit this parameter if using `team_id`. |
+| team_id   | number | query | The ID of the team to add the software package to. Only one team identifier (`team_id` or `team_name`) can be included in the request, omit this parameter if using `team_name`. Ommitting these parameters will add software to 'No Team'. |
+| team_name | string | query | The name of the team to add the software package to. Only one team identifier (`team_id` or `team_name`) can be included in the request, omit this parameter if using `team_id`. Ommitting these parameters will add software to 'No Team'. |
 | dry_run   | bool   | query | If `true`, will validate the provided software packages and return any validation errors, but will not apply the changes.                                                                         |
 | software  | list   | body  | An array of software objects. Each object consists of:`url`- URL to the software package (PKG, MSI, EXE or DEB),`install_script` - command that Fleet runs to install software, `pre_install_query` - condition query that determines if the install will proceed, and `post_install_script` - script that runs after software install.   |
 
diff --git a/ee/server/service/software_installers.go b/ee/server/service/software_installers.go
index 9871f9fd44..ad0dbe0a81 100644
--- a/ee/server/service/software_installers.go
+++ b/ee/server/service/software_installers.go
@@ -580,25 +580,24 @@ func (svc *Service) addMetadataToSoftwarePayload(ctx context.Context, payload *f
 const maxInstallerSizeBytes int64 = 1024 * 1024 * 500
 
 func (svc *Service) BatchSetSoftwareInstallers(ctx context.Context, tmName string, payloads []fleet.SoftwareInstallerPayload, dryRun bool) error {
-	if tmName == "" {
-		svc.authz.SkipAuthorization(ctx) // so that the error message is not replaced by "forbidden"
-		return ctxerr.Wrap(ctx, fleet.NewInvalidArgumentError("team_name", "must not be empty"))
-	}
-
 	if err := svc.authz.Authorize(ctx, &fleet.Team{}, fleet.ActionRead); err != nil {
 		return err
 	}
 
-	tm, err := svc.ds.TeamByName(ctx, tmName)
-	if err != nil {
-		// If this is a dry run, the team may not have been created yet
-		if dryRun && fleet.IsNotFound(err) {
-			return nil
+	var teamID *uint
+	if tmName != "" {
+		tm, err := svc.ds.TeamByName(ctx, tmName)
+		if err != nil {
+			// If this is a dry run, the team may not have been created yet
+			if dryRun && fleet.IsNotFound(err) {
+				return nil
+			}
+			return err
 		}
-		return err
+		teamID = &tm.ID
 	}
 
-	if err := svc.authz.Authorize(ctx, &fleet.SoftwareInstaller{TeamID: &tm.ID}, fleet.ActionWrite); err != nil {
+	if err := svc.authz.Authorize(ctx, &fleet.SoftwareInstaller{TeamID: teamID}, fleet.ActionWrite); err != nil {
 		return ctxerr.Wrap(ctx, err, "validating authorization")
 	}
 
@@ -672,7 +671,7 @@ func (svc *Service) BatchSetSoftwareInstallers(ctx context.Context, tmName strin
 			}
 
 			installer := &fleet.UploadSoftwareInstallerPayload{
-				TeamID:            &tm.ID,
+				TeamID:            teamID,
 				InstallScript:     p.InstallScript,
 				PreInstallQuery:   p.PreInstallQuery,
 				PostInstallScript: p.PostInstallScript,
@@ -732,7 +731,7 @@ func (svc *Service) BatchSetSoftwareInstallers(ctx context.Context, tmName strin
 		}
 	}
 
-	if err := svc.ds.BatchSetSoftwareInstallers(ctx, &tm.ID, installers); err != nil {
+	if err := svc.ds.BatchSetSoftwareInstallers(ctx, teamID, installers); err != nil {
 		return ctxerr.Wrap(ctx, err, "batch set software installers")
 	}
 
diff --git a/ee/server/service/teams.go b/ee/server/service/teams.go
index 4b8df03123..3d25abafe9 100644
--- a/ee/server/service/teams.go
+++ b/ee/server/service/teams.go
@@ -1246,7 +1246,7 @@ func (svc *Service) editTeamFromSpec(
 
 	if spec.Software != nil {
 		if team.Config.Software == nil {
-			team.Config.Software = &fleet.TeamSpecSoftware{}
+			team.Config.Software = &fleet.SoftwareSpec{}
 		}
 
 		if spec.Software.Packages.Set {
diff --git a/pkg/spec/gitops.go b/pkg/spec/gitops.go
index b6eea43708..e29e9138dc 100644
--- a/pkg/spec/gitops.go
+++ b/pkg/spec/gitops.go
@@ -61,12 +61,12 @@ type GitOps struct {
 }
 
 type GitOpsSoftware struct {
-	Packages     []*fleet.TeamSpecSoftwarePackage
+	Packages     []*fleet.SoftwarePackageSpec
 	AppStoreApps []*fleet.TeamSpecAppStoreApp
 }
 
 // GitOpsFromFile parses a GitOps yaml file.
-func GitOpsFromFile(filePath, baseDir string) (*GitOps, error) {
+func GitOpsFromFile(filePath, baseDir string, appConfig *fleet.EnrichedAppConfig) (*GitOps, error) {
 	b, err := os.ReadFile(filePath)
 	if err != nil {
 		return nil, fmt.Errorf("failed to read file: %s: %w", filePath, err)
@@ -96,18 +96,16 @@ func GitOpsFromFile(filePath, baseDir string) (*GitOps, error) {
 	// Figure out if this is an org or team settings file
 	teamRaw, teamOk := top["name"]
 	teamSettingsRaw, teamSettingsOk := top["team_settings"]
-	teamSoftware, teamSoftwareOk := top["software"]
 	orgSettingsRaw, orgOk := top["org_settings"]
 	if orgOk {
-		if teamOk || teamSettingsOk || teamSoftwareOk {
-			multiError = multierror.Append(multiError, errors.New("'org_settings' cannot be used with 'name', 'team_settings' or 'software'"))
+		if teamOk || teamSettingsOk {
+			multiError = multierror.Append(multiError, errors.New("'org_settings' cannot be used with 'name', 'team_settings'"))
 		} else {
 			multiError = parseOrgSettings(orgSettingsRaw, result, baseDir, multiError)
 		}
 	} else if teamOk && teamSettingsOk {
 		multiError = parseName(teamRaw, result, multiError)
 		multiError = parseTeamSettings(teamSettingsRaw, result, baseDir, multiError)
-		multiError = parseSoftware(teamSoftware, result, baseDir, multiError)
 	} else {
 		multiError = multierror.Append(multiError, errors.New("either 'org_settings' or 'name' and 'team_settings' is required"))
 	}
@@ -118,6 +116,10 @@ func GitOpsFromFile(filePath, baseDir string) (*GitOps, error) {
 	multiError = parsePolicies(top, result, baseDir, multiError)
 	multiError = parseQueries(top, result, baseDir, multiError)
 
+	if appConfig != nil && appConfig.License.IsPremium() {
+		multiError = parseSoftware(top, result, baseDir, multiError)
+	}
+
 	return result, multiError.ErrorOrNil()
 }
 
@@ -523,11 +525,15 @@ func parseQueries(top map[string]json.RawMessage, result *GitOps, baseDir string
 	return multiError
 }
 
-func parseSoftware(softwareRaw json.RawMessage, result *GitOps, baseDir string, multiError *multierror.Error) *multierror.Error {
-	var software fleet.TeamSpecSoftware
+func parseSoftware(top map[string]json.RawMessage, result *GitOps, baseDir string, multiError *multierror.Error) *multierror.Error {
+	softwareRaw, ok := top["software"]
+	if !ok {
+		return multierror.Append(multiError, errors.New("'software' is required"))
+	}
+	var software fleet.SoftwareSpec
 	if len(softwareRaw) > 0 {
 		if err := json.Unmarshal(softwareRaw, &software); err != nil {
-			return multierror.Append(multiError, fmt.Errorf("failed to unmarshall software: %v", err))
+			return multierror.Append(multiError, fmt.Errorf("failed to unmarshall softwarespec: %v", err))
 		}
 	}
 	if software.AppStoreApps.Set {
diff --git a/pkg/spec/gitops_test.go b/pkg/spec/gitops_test.go
index 644c3e453e..58e12553b9 100644
--- a/pkg/spec/gitops_test.go
+++ b/pkg/spec/gitops_test.go
@@ -53,7 +53,7 @@ func createTempFile(t *testing.T, pattern, contents string) (filePath string, ba
 
 func gitOpsFromString(t *testing.T, s string) (*GitOps, error) {
 	path, basePath := createTempFile(t, "", s)
-	return GitOpsFromFile(path, basePath)
+	return GitOpsFromFile(path, basePath, nil)
 }
 
 func TestValidGitOpsYaml(t *testing.T) {
@@ -108,7 +108,7 @@ func TestValidGitOpsYaml(t *testing.T) {
 					t.Parallel()
 				}
 
-				gitops, err := GitOpsFromFile(test.filePath, "./testdata")
+				gitops, err := GitOpsFromFile(test.filePath, "./testdata", nil)
 				require.NoError(t, err)
 
 				if test.isTeam {
@@ -336,20 +336,20 @@ func TestMixingGlobalAndTeamConfig(t *testing.T) {
 	config := getGlobalConfig(nil)
 	config += "name: TeamName\n"
 	_, err := gitOpsFromString(t, config)
-	assert.ErrorContains(t, err, "'org_settings' cannot be used with 'name', 'team_settings' or 'software'")
+	assert.ErrorContains(t, err, "'org_settings' cannot be used with 'name', 'team_settings'")
 
 	// Mixing org_settings and team_settings
 	config = getGlobalConfig(nil)
 	config += "team_settings:\n  secrets: []\n"
 	_, err = gitOpsFromString(t, config)
-	assert.ErrorContains(t, err, "'org_settings' cannot be used with 'name', 'team_settings' or 'software'")
+	assert.ErrorContains(t, err, "'org_settings' cannot be used with 'name', 'team_settings'")
 
 	// Mixing org_settings and team name and team_settings
 	config = getGlobalConfig(nil)
 	config += "name: TeamName\n"
 	config += "team_settings:\n  secrets: []\n"
 	_, err = gitOpsFromString(t, config)
-	assert.ErrorContains(t, err, "'org_settings' cannot be used with 'name', 'team_settings' or 'software'")
+	assert.ErrorContains(t, err, "'org_settings' cannot be used with 'name', 'team_settings'")
 }
 
 func TestInvalidGitOpsYaml(t *testing.T) {
@@ -696,7 +696,7 @@ func TestGitOpsPaths(t *testing.T) {
 				err = os.WriteFile(mainTmpFile.Name(), []byte(config), 0o644)
 				require.NoError(t, err)
 
-				_, err = GitOpsFromFile(mainTmpFile.Name(), dir)
+				_, err = GitOpsFromFile(mainTmpFile.Name(), dir, nil)
 				assert.NoError(t, err)
 
 				// Test a bad path
@@ -709,7 +709,7 @@ func TestGitOpsPaths(t *testing.T) {
 				err = os.WriteFile(mainTmpFile.Name(), []byte(config), 0o644)
 				require.NoError(t, err)
 
-				_, err = GitOpsFromFile(mainTmpFile.Name(), dir)
+				_, err = GitOpsFromFile(mainTmpFile.Name(), dir, nil)
 				assert.ErrorContains(t, err, "no such file or directory")
 
 				// Test a bad file -- cannot be unmarshalled
@@ -744,7 +744,7 @@ func TestGitOpsPaths(t *testing.T) {
 				}
 				err = os.WriteFile(mainTmpFile.Name(), []byte(config), 0o644)
 				require.NoError(t, err)
-				_, err = GitOpsFromFile(mainTmpFile.Name(), dir)
+				_, err = GitOpsFromFile(mainTmpFile.Name(), dir, nil)
 				assert.ErrorContains(t, err, "nested paths are not supported")
 			},
 		)
diff --git a/pkg/spec/spec.go b/pkg/spec/spec.go
index d760f8b1d3..10bafd76da 100644
--- a/pkg/spec/spec.go
+++ b/pkg/spec/spec.go
@@ -26,6 +26,7 @@ type Group struct {
 	Packs    []*fleet.PackSpec
 	Labels   []*fleet.LabelSpec
 	Policies []*fleet.PolicySpec
+	Software []*fleet.SoftwarePackageSpec
 	// This needs to be interface{} to allow for the patch logic. Otherwise we send a request that looks to the
 	// server like the user explicitly set the zero values.
 	AppConfig              interface{}
diff --git a/server/fleet/software_installer.go b/server/fleet/software_installer.go
index d542840989..70a8f2ca36 100644
--- a/server/fleet/software_installer.go
+++ b/server/fleet/software_installer.go
@@ -9,6 +9,7 @@ import (
 	"strings"
 	"time"
 
+	"github.com/fleetdm/fleet/v4/pkg/optjson"
 	"github.com/fleetdm/fleet/v4/server/ptr"
 )
 
@@ -334,6 +335,19 @@ type SoftwarePackageOrApp struct {
 	LastInstall *HostSoftwareInstall `json:"last_install"`
 }
 
+type SoftwarePackageSpec struct {
+	URL               string                `json:"url"`
+	SelfService       bool                  `json:"self_service"`
+	PreInstallQuery   TeamSpecSoftwareAsset `json:"pre_install_query"`
+	InstallScript     TeamSpecSoftwareAsset `json:"install_script"`
+	PostInstallScript TeamSpecSoftwareAsset `json:"post_install_script"`
+}
+
+type SoftwareSpec struct {
+	Packages     optjson.Slice[SoftwarePackageSpec] `json:"packages,omitempty"`
+	AppStoreApps optjson.Slice[TeamSpecAppStoreApp] `json:"app_store_apps,omitempty"`
+}
+
 // HostSoftwareInstall represents installation of software on a host from a
 // Fleet software installer.
 type HostSoftwareInstall struct {
diff --git a/server/fleet/teams.go b/server/fleet/teams.go
index d5eaa71f8b..fa9734f6c1 100644
--- a/server/fleet/teams.go
+++ b/server/fleet/teams.go
@@ -155,7 +155,7 @@ type TeamConfig struct {
 	Features           Features              `json:"features"`
 	MDM                TeamMDM               `json:"mdm"`
 	Scripts            optjson.Slice[string] `json:"scripts,omitempty"`
-	Software           *TeamSpecSoftware     `json:"software,omitempty"`
+	Software           *SoftwareSpec         `json:"software,omitempty"`
 }
 
 type TeamWebhookSettings struct {
@@ -168,23 +168,10 @@ type TeamSpecSoftwareAsset struct {
 	Path string `json:"path"`
 }
 
-type TeamSpecSoftware struct {
-	Packages     optjson.Slice[TeamSpecSoftwarePackage] `json:"packages,omitempty"`
-	AppStoreApps optjson.Slice[TeamSpecAppStoreApp]     `json:"app_store_apps,omitempty"`
-}
-
 type TeamSpecAppStoreApp struct {
 	AppStoreID string `json:"app_store_id"`
 }
 
-type TeamSpecSoftwarePackage struct {
-	URL               string                `json:"url"`
-	SelfService       bool                  `json:"self_service"`
-	PreInstallQuery   TeamSpecSoftwareAsset `json:"pre_install_query"`
-	InstallScript     TeamSpecSoftwareAsset `json:"install_script"`
-	PostInstallScript TeamSpecSoftwareAsset `json:"post_install_script"`
-}
-
 type TeamMDM struct {
 	EnableDiskEncryption bool                  `json:"enable_disk_encryption"`
 	MacOSUpdates         AppleOSUpdateSettings `json:"macos_updates"`
@@ -450,7 +437,7 @@ type TeamSpec struct {
 	Scripts            optjson.Slice[string]   `json:"scripts"`
 	WebhookSettings    TeamSpecWebhookSettings `json:"webhook_settings"`
 	Integrations       TeamSpecIntegrations    `json:"integrations"`
-	Software           *TeamSpecSoftware       `json:"software,omitempty"`
+	Software           *SoftwareSpec           `json:"software,omitempty"`
 }
 
 type TeamSpecWebhookSettings struct {
diff --git a/server/service/client.go b/server/service/client.go
index 09ab08e031..740ac19578 100644
--- a/server/service/client.go
+++ b/server/service/client.go
@@ -394,6 +394,7 @@ func (c *Client) ApplyGroup(
 	specs *spec.Group,
 	baseDir string,
 	logf func(format string, args ...interface{}),
+	appconfig *fleet.EnrichedAppConfig,
 	opts fleet.ApplyClientSpecOptions,
 ) (map[string]uint, error) {
 	logfn := func(format string, args ...interface{}) {
@@ -610,90 +611,10 @@ func (c *Client) ApplyGroup(
 		tmSoftwarePackages := extractTmSpecsSoftwarePackages(specs.Teams)
 		tmSoftwarePackagesPayloads := make(map[string][]fleet.SoftwareInstallerPayload, len(tmScripts))
 		for tmName, software := range tmSoftwarePackages {
-			softwarePayloads := make([]fleet.SoftwareInstallerPayload, len(software))
-			for i, si := range software {
-				var qc string
-				var err error
-				if si.PreInstallQuery.Path != "" {
-					queryFile := resolveApplyRelativePath(baseDir, si.PreInstallQuery.Path)
-					rawSpec, err := os.ReadFile(queryFile)
-					if err != nil {
-						return nil, fmt.Errorf("reading pre-install query: %w", err)
-					}
-
-					rawSpecExpanded, err := spec.ExpandEnvBytes(rawSpec)
-					if err != nil {
-						return nil, fmt.Errorf("Couldn't exit software (%s). Unable to expand environment variable in YAML file %s: %w", si.URL, queryFile, err)
-					}
-
-					var top any
-
-					if err := yaml.Unmarshal(rawSpecExpanded, &top); err != nil {
-						return nil, fmt.Errorf("Couldn't exit software (%s). Unable to expand environment variable in YAML file %s: %w", si.URL, queryFile, err)
-					}
-
-					if _, ok := top.(map[any]any); ok {
-						// Old apply format
-						group, err := spec.GroupFromBytes(rawSpecExpanded)
-						if err != nil {
-							return nil, fmt.Errorf("Couldn't edit software (%s). Unable to parse pre-install apply format query YAML file %s: %w", si.URL, queryFile, err)
-						}
-
-						if len(group.Queries) > 1 {
-							return nil, fmt.Errorf("Couldn't edit software (%s). Pre-install query YAML file %s should have only one query.", si.URL, queryFile)
-						}
-
-						if len(group.Queries) == 0 {
-							return nil, fmt.Errorf("Couldn't edit software (%s). Pre-install query YAML file %s doesn't have a query defined.", si.URL, queryFile)
-						}
-
-						qc = group.Queries[0].Query
-					} else {
-						// Gitops format
-						var querySpecs []fleet.QuerySpec
-						if err := yaml.Unmarshal(rawSpecExpanded, &querySpecs); err != nil {
-							return nil, fmt.Errorf("Couldn't edit software (%s). Unable to parse pre-install query YAML file %s: %w", si.URL, queryFile, err)
-						}
-
-						if len(querySpecs) > 1 {
-							return nil, fmt.Errorf("Couldn't edit software (%s). Pre-install query YAML file %s should have only one query.", si.URL, queryFile)
-						}
-
-						if len(querySpecs) == 0 {
-							return nil, fmt.Errorf("Couldn't edit software (%s). Pre-install query YAML file %s doesn't have a query defined.", si.URL, queryFile)
-						}
-
-						qc = querySpecs[0].Query
-					}
-				}
-
-				var ic []byte
-				if si.InstallScript.Path != "" {
-					installScriptFile := resolveApplyRelativePath(baseDir, si.InstallScript.Path)
-					ic, err = os.ReadFile(installScriptFile)
-					if err != nil {
-						return nil, fmt.Errorf("Couldn't edit software (%s). Unable to read install script file %s: %w", si.URL, si.InstallScript.Path, err)
-					}
-				}
-
-				var pc []byte
-				if si.PostInstallScript.Path != "" {
-					postInstallScriptFile := resolveApplyRelativePath(baseDir, si.PostInstallScript.Path)
-					pc, err = os.ReadFile(postInstallScriptFile)
-					if err != nil {
-						return nil, fmt.Errorf("Couldn't edit software (%s). Unable to read post-install script file %s: %w", si.URL, si.PostInstallScript.Path, err)
-					}
-				}
-
-				softwarePayloads[i] = fleet.SoftwareInstallerPayload{
-					URL:               si.URL,
-					SelfService:       si.SelfService,
-					PreInstallQuery:   qc,
-					InstallScript:     string(ic),
-					PostInstallScript: string(pc),
-				}
+			softwarePayloads, err := buildSoftwarePackagesPayload(baseDir, software)
+			if err != nil {
+				return nil, fmt.Errorf("applying software installers for team %q: %w", tmName, err)
 			}
-
 			tmSoftwarePackagesPayloads[tmName] = softwarePayloads
 		}
 
@@ -810,6 +731,95 @@ func (c *Client) ApplyGroup(
 	return teamIDsByName, nil
 }
 
+func buildSoftwarePackagesPayload(baseDir string, specs []fleet.SoftwarePackageSpec) ([]fleet.SoftwareInstallerPayload, error) {
+	softwarePayloads := make([]fleet.SoftwareInstallerPayload, len(specs))
+	for i, si := range specs {
+		var qc string
+		var err error
+		if si.PreInstallQuery.Path != "" {
+			queryFile := resolveApplyRelativePath(baseDir, si.PreInstallQuery.Path)
+			rawSpec, err := os.ReadFile(queryFile)
+			if err != nil {
+				return nil, fmt.Errorf("reading pre-install query: %w", err)
+			}
+
+			rawSpecExpanded, err := spec.ExpandEnvBytes(rawSpec)
+			if err != nil {
+				return nil, fmt.Errorf("Couldn't exit software (%s). Unable to expand environment variable in YAML file %s: %w", si.URL, queryFile, err)
+			}
+
+			var top any
+
+			if err := yaml.Unmarshal(rawSpecExpanded, &top); err != nil {
+				return nil, fmt.Errorf("Couldn't exit software (%s). Unable to expand environment variable in YAML file %s: %w", si.URL, queryFile, err)
+			}
+
+			if _, ok := top.(map[any]any); ok {
+				// Old apply format
+				group, err := spec.GroupFromBytes(rawSpecExpanded)
+				if err != nil {
+					return nil, fmt.Errorf("Couldn't edit software (%s). Unable to parse pre-install apply format query YAML file %s: %w", si.URL, queryFile, err)
+				}
+
+				if len(group.Queries) > 1 {
+					return nil, fmt.Errorf("Couldn't edit software (%s). Pre-install query YAML file %s should have only one query.", si.URL, queryFile)
+				}
+
+				if len(group.Queries) == 0 {
+					return nil, fmt.Errorf("Couldn't edit software (%s). Pre-install query YAML file %s doesn't have a query defined.", si.URL, queryFile)
+				}
+
+				qc = group.Queries[0].Query
+			} else {
+				// Gitops format
+				var querySpecs []fleet.QuerySpec
+				if err := yaml.Unmarshal(rawSpecExpanded, &querySpecs); err != nil {
+					return nil, fmt.Errorf("Couldn't edit software (%s). Unable to parse pre-install query YAML file %s: %w", si.URL, queryFile, err)
+				}
+
+				if len(querySpecs) > 1 {
+					return nil, fmt.Errorf("Couldn't edit software (%s). Pre-install query YAML file %s should have only one query.", si.URL, queryFile)
+				}
+
+				if len(querySpecs) == 0 {
+					return nil, fmt.Errorf("Couldn't edit software (%s). Pre-install query YAML file %s doesn't have a query defined.", si.URL, queryFile)
+				}
+
+				qc = querySpecs[0].Query
+			}
+		}
+
+		var ic []byte
+		if si.InstallScript.Path != "" {
+			installScriptFile := resolveApplyRelativePath(baseDir, si.InstallScript.Path)
+			ic, err = os.ReadFile(installScriptFile)
+			if err != nil {
+				return nil, fmt.Errorf("Couldn't edit software (%s). Unable to read install script file %s: %w", si.URL, si.InstallScript.Path, err)
+			}
+		}
+
+		var pc []byte
+		if si.PostInstallScript.Path != "" {
+			postInstallScriptFile := resolveApplyRelativePath(baseDir, si.PostInstallScript.Path)
+			pc, err = os.ReadFile(postInstallScriptFile)
+			if err != nil {
+				return nil, fmt.Errorf("Couldn't edit software (%s). Unable to read post-install script file %s: %w", si.URL, si.PostInstallScript.Path, err)
+			}
+		}
+
+		softwarePayloads[i] = fleet.SoftwareInstallerPayload{
+			URL:               si.URL,
+			SelfService:       si.SelfService,
+			PreInstallQuery:   qc,
+			InstallScript:     string(ic),
+			PostInstallScript: string(pc),
+		}
+
+	}
+
+	return softwarePayloads, nil
+}
+
 func extractAppCfgMacOSSetup(appCfg any) *fleet.MacOSSetup {
 	asMap, ok := appCfg.(map[string]interface{})
 	if !ok {
@@ -1045,8 +1055,8 @@ func extractTmSpecsMDMCustomSettings(tmSpecs []json.RawMessage) map[string]profi
 	return m
 }
 
-func extractTmSpecsSoftwarePackages(tmSpecs []json.RawMessage) map[string][]fleet.TeamSpecSoftwarePackage {
-	var m map[string][]fleet.TeamSpecSoftwarePackage
+func extractTmSpecsSoftwarePackages(tmSpecs []json.RawMessage) map[string][]fleet.SoftwarePackageSpec {
+	var m map[string][]fleet.SoftwarePackageSpec
 	for _, tm := range tmSpecs {
 		var spec struct {
 			Name     string          `json:"name"`
@@ -1059,10 +1069,10 @@ func extractTmSpecsSoftwarePackages(tmSpecs []json.RawMessage) map[string][]flee
 		spec.Name = norm.NFC.String(spec.Name)
 		if spec.Name != "" && len(spec.Software) > 0 {
 			if m == nil {
-				m = make(map[string][]fleet.TeamSpecSoftwarePackage)
+				m = make(map[string][]fleet.SoftwarePackageSpec)
 			}
-			var software fleet.TeamSpecSoftware
-			var packages []fleet.TeamSpecSoftwarePackage
+			var software fleet.SoftwareSpec
+			var packages []fleet.SoftwarePackageSpec
 			if err := json.Unmarshal(spec.Software, &software); err != nil {
 				// ignore, will fail in apply team specs call
 				continue
@@ -1070,7 +1080,7 @@ func extractTmSpecsSoftwarePackages(tmSpecs []json.RawMessage) map[string][]flee
 			if !software.Packages.Valid {
 				// to be consistent with the AppConfig custom settings, set it to an
 				// empty slice if the provided custom settings are present but empty.
-				packages = []fleet.TeamSpecSoftwarePackage{}
+				packages = []fleet.SoftwarePackageSpec{}
 			} else {
 				packages = software.Packages.Value
 			}
@@ -1096,7 +1106,7 @@ func extractTmSpecsSoftwareApps(tmSpecs []json.RawMessage) map[string][]fleet.Te
 			if m == nil {
 				m = make(map[string][]fleet.TeamSpecAppStoreApp)
 			}
-			var software fleet.TeamSpecSoftware
+			var software fleet.SoftwareSpec
 			var apps []fleet.TeamSpecAppStoreApp
 			if err := json.Unmarshal(spec.Software, &software); err != nil {
 				// ignore, will fail in apply team specs call
@@ -1255,6 +1265,8 @@ func (c *Client) DoGitOps(
 			}
 		}
 		group.AppConfig.(map[string]interface{})["scripts"] = scripts
+
+		group.Software = config.Software.Packages
 	} else {
 		team = make(map[string]interface{})
 		team["name"] = *config.TeamName
@@ -1413,7 +1425,7 @@ func (c *Client) DoGitOps(
 	}
 
 	// Apply org settings, scripts, enroll secrets, and controls
-	teamIDsByName, err := c.ApplyGroup(ctx, &group, baseDir, logf, fleet.ApplyClientSpecOptions{
+	teamIDsByName, err := c.ApplyGroup(ctx, &group, baseDir, logf, appConfig, fleet.ApplyClientSpecOptions{
 		ApplySpecOptions: fleet.ApplySpecOptions{
 			DryRun: dryRun,
 		},
@@ -1449,9 +1461,39 @@ func (c *Client) DoGitOps(
 		return nil, err
 	}
 
+	err = c.doGitOpsNoTeamSoftware(group, baseDir, appConfig, logFn, dryRun)
+	if err != nil {
+		return nil, err
+	}
+
 	return teamAssumptions, nil
 }
 
+func (c *Client) doGitOpsNoTeamSoftware(specs spec.Group, baseDir string, appconfig *fleet.EnrichedAppConfig, logFn func(format string, args ...interface{}), dryRun bool) error {
+	if len(specs.Teams) == 0 && appconfig != nil && appconfig.License.IsPremium() {
+		packages := make([]fleet.SoftwarePackageSpec, 0, len(specs.Software))
+		for _, software := range specs.Software {
+			if software != nil {
+				packages = append(packages, *software)
+			}
+		}
+		payload, err := buildSoftwarePackagesPayload(baseDir, packages)
+		if err != nil {
+			return fmt.Errorf("applying software installers: %w", err)
+		}
+		if err := c.ApplyNoTeamSoftwareInstallers(payload, fleet.ApplySpecOptions{DryRun: dryRun}); err != nil {
+			return fmt.Errorf("applying software installers: %w", err)
+		}
+
+		if dryRun {
+			logFn("[+] would've applied 'No Team' software installers\n")
+		} else {
+			logFn("[+] applied 'No Team' software installers\n")
+		}
+	}
+	return nil
+}
+
 func (c *Client) doGitOpsPolicies(config *spec.GitOps, logFn func(format string, args ...interface{}), dryRun bool) error {
 	// Get the ids and names of current policies to figure out which ones to delete
 	policies, err := c.GetPolicies(config.TeamID)
diff --git a/server/service/client_software.go b/server/service/client_software.go
index 22c602e96c..d08faee404 100644
--- a/server/service/client_software.go
+++ b/server/service/client_software.go
@@ -1,6 +1,8 @@
 package service
 
 import (
+	"net/url"
+
 	"github.com/fleetdm/fleet/v4/server/fleet"
 )
 
@@ -25,3 +27,12 @@ func (c *Client) ListSoftwareTitles(query string) ([]fleet.SoftwareTitleListResu
 	}
 	return responseBody.SoftwareTitles, nil
 }
+
+func (c *Client) ApplyNoTeamSoftwareInstallers(softwareInstallers []fleet.SoftwareInstallerPayload, opts fleet.ApplySpecOptions) error {
+	verb, path := "POST", "/api/latest/fleet/software/batch"
+	query, err := url.ParseQuery(opts.RawQuery())
+	if err != nil {
+		return err
+	}
+	return c.authenticatedRequestWithQuery(map[string]interface{}{"software": softwareInstallers}, verb, path, nil, query.Encode())
+}
diff --git a/server/service/integration_enterprise_test.go b/server/service/integration_enterprise_test.go
index 438138dc67..79e61b96d1 100644
--- a/server/service/integration_enterprise_test.go
+++ b/server/service/integration_enterprise_test.go
@@ -10161,7 +10161,7 @@ func (s *integrationEnterpriseTestSuite) TestApplyTeamsSoftwareConfig() {
 	}
 	s.Do("POST", "/api/latest/fleet/spec/teams", teamSpecs, http.StatusOK)
 
-	wantSoftwarePackages := []fleet.TeamSpecSoftwarePackage{
+	wantSoftwarePackages := []fleet.SoftwarePackageSpec{
 		{
 			URL:               "http://foo.com",
 			SelfService:       true,
@@ -10320,9 +10320,6 @@ func (s *integrationEnterpriseTestSuite) TestApplyTeamsSoftwareConfig() {
 func (s *integrationEnterpriseTestSuite) TestBatchSetSoftwareInstallers() {
 	t := s.T()
 
-	// a team name is required (we don't allow installers for "no team")
-	s.Do("POST", "/api/latest/fleet/software/batch", batchSetSoftwareInstallersRequest{}, http.StatusBadRequest)
-
 	// non-existent team
 	s.Do("POST", "/api/latest/fleet/software/batch", batchSetSoftwareInstallersRequest{}, http.StatusNotFound, "team_name", "foo")
 
@@ -10397,6 +10394,42 @@ func (s *integrationEnterpriseTestSuite) TestBatchSetSoftwareInstallers() {
 	s.DoJSON("GET", "/api/v1/fleet/software/titles", nil, http.StatusOK, &titlesResp, "available_for_install", "true", "team_id", strconv.Itoa(int(tm.ID)))
 	require.Equal(t, 0, titlesResp.Count)
 	require.Len(t, titlesResp.SoftwareTitles, 0)
+
+	//////////////////////////
+	// Do a request with a valid URL with no team
+	//////////////////////////
+	softwareToInstall = []fleet.SoftwareInstallerPayload{
+		{URL: srv.URL},
+	}
+	s.Do("POST", "/api/latest/fleet/software/batch", batchSetSoftwareInstallersRequest{Software: softwareToInstall}, http.StatusNoContent)
+
+	// check the application status on team 0
+	titlesResp = listSoftwareTitlesResponse{}
+	s.DoJSON("GET", "/api/v1/fleet/software/titles", nil, http.StatusOK, &titlesResp, "available_for_install", "true", "team_id", strconv.Itoa(int(0)))
+	require.Equal(t, 1, titlesResp.Count)
+	require.Len(t, titlesResp.SoftwareTitles, 1)
+
+	// same payload doesn't modify anything
+	s.Do("POST", "/api/latest/fleet/software/batch", batchSetSoftwareInstallersRequest{Software: softwareToInstall}, http.StatusNoContent)
+	newTitlesResp = listSoftwareTitlesResponse{}
+	s.DoJSON("GET", "/api/v1/fleet/software/titles", nil, http.StatusOK, &newTitlesResp, "available_for_install", "true", "team_id", strconv.Itoa(int(0)))
+	require.Equal(t, titlesResp, newTitlesResp)
+
+	// setting self-service to true updates the software title metadata
+	softwareToInstall[0].SelfService = true
+	s.Do("POST", "/api/latest/fleet/software/batch", batchSetSoftwareInstallersRequest{Software: softwareToInstall}, http.StatusNoContent)
+	newTitlesResp = listSoftwareTitlesResponse{}
+	s.DoJSON("GET", "/api/v1/fleet/software/titles", nil, http.StatusOK, &newTitlesResp, "available_for_install", "true", "team_id", strconv.Itoa(int(0)))
+	titlesResp.SoftwareTitles[0].SoftwarePackage.SelfService = ptr.Bool(true)
+	require.Equal(t, titlesResp, newTitlesResp)
+
+	// empty payload cleans the software items
+	softwareToInstall = []fleet.SoftwareInstallerPayload{}
+	s.Do("POST", "/api/latest/fleet/software/batch", batchSetSoftwareInstallersRequest{Software: softwareToInstall}, http.StatusNoContent)
+	titlesResp = listSoftwareTitlesResponse{}
+	s.DoJSON("GET", "/api/v1/fleet/software/titles", nil, http.StatusOK, &titlesResp, "available_for_install", "true", "team_id", strconv.Itoa(int(0)))
+	require.Equal(t, 0, titlesResp.Count)
+	require.Len(t, titlesResp.SoftwareTitles, 0)
 }
 
 func (s *integrationEnterpriseTestSuite) TestSoftwareInstallerNewInstallRequestPlatformValidation() {
diff --git a/server/service/software_installers.go b/server/service/software_installers.go
index 5de426c2d6..0cdff35c2a 100644
--- a/server/service/software_installers.go
+++ b/server/service/software_installers.go
@@ -318,7 +318,7 @@ func (svc *Service) GetSoftwareInstallResults(ctx context.Context, resultUUID st
 ////////////////////////////////////////////////////////////////////////////////
 
 type batchSetSoftwareInstallersRequest struct {
-	TeamName string                           `json:"-" query:"team_name"`
+	TeamName string                           `json:"-" query:"team_name,optional"`
 	DryRun   bool                             `json:"-" query:"dry_run,optional"` // if true, apply validation but do not save changes
 	Software []fleet.SoftwareInstallerPayload `json:"software"`
 }

From 5730c1c3c855ff8837b7475cd5b5c02bd8b122a8 Mon Sep 17 00:00:00 2001
From: jacobshandling <61553566+jacobshandling@users.noreply.github.com>
Date: Mon, 5 Aug 2024 12:57:53 -0700
Subject: [PATCH 79/88] =?UTF-8?q?UI=20=E2=80=93=20Render=20"vulns=20not=20?=
 =?UTF-8?q?supported"=20empty=20state=20for=20iphone/ipad=20host=20softwar?=
 =?UTF-8?q?e=20filtered=20by=20vuln=20(#21029)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

## #21027

<img width="1791" alt="Screenshot 2024-08-02 at 4 12 52 PM"
src="https://github.com/user-attachments/assets/bda1af83-4676-484f-b10a-2ca7e2b14ae1">

- [x] Manual QA for all new/changed functionality

Co-authored-by: Jacob Shandling <jacob@fleetdm.com>
---
 .../HostDetailsPage/HostDetailsPage.tsx       |  3 ++
 .../details/cards/Software/HostSoftware.tsx   | 31 ++++++++++++++++---
 .../HostSoftwareTable/HostSoftwareTable.tsx   | 24 ++++++++++++--
 3 files changed, 51 insertions(+), 7 deletions(-)

diff --git a/frontend/pages/hosts/details/HostDetailsPage/HostDetailsPage.tsx b/frontend/pages/hosts/details/HostDetailsPage/HostDetailsPage.tsx
index 5f4a57a356..cf63e55962 100644
--- a/frontend/pages/hosts/details/HostDetailsPage/HostDetailsPage.tsx
+++ b/frontend/pages/hosts/details/HostDetailsPage/HostDetailsPage.tsx
@@ -53,6 +53,8 @@ import {
   HOST_OSQUERY_DATA,
 } from "utilities/constants";
 
+import { Platform } from "interfaces/platform";
+
 import Spinner from "components/Spinner";
 import TabsWrapper from "components/TabsWrapper";
 import MainContent from "components/MainContent";
@@ -921,6 +923,7 @@ const HostDetailsPage = ({
             <TabPanel>
               <SoftwareCard
                 id={host.id}
+                platform={host.platform as Platform} // TODO - typing
                 softwareUpdatedAt={host.software_updated_at}
                 hostCanInstallSoftware={
                   !!host.orbit_version || isIosOrIpadosHost
diff --git a/frontend/pages/hosts/details/cards/Software/HostSoftware.tsx b/frontend/pages/hosts/details/cards/Software/HostSoftware.tsx
index 095bb46122..c2f57cc0e1 100644
--- a/frontend/pages/hosts/details/cards/Software/HostSoftware.tsx
+++ b/frontend/pages/hosts/details/cards/Software/HostSoftware.tsx
@@ -12,6 +12,7 @@ import deviceAPI, {
   IGetDeviceSoftwareResponse,
 } from "services/entities/device_user";
 import { IHostSoftware, ISoftware } from "interfaces/software";
+import { Platform } from "interfaces/platform";
 import { DEFAULT_USE_QUERY_OPTIONS } from "utilities/constants";
 import { NotificationContext } from "context/notification";
 import { AppContext } from "context/app";
@@ -34,6 +35,8 @@ export interface ITableSoftware extends Omit<ISoftware, "vulnerabilities"> {
 interface IHostSoftwareProps {
   /** This is the host id or the device token */
   id: number | string;
+  /** The host's platform. Only used for the host details page, so can be omited on the Device User Page. */
+  platform?: Platform;
   softwareUpdatedAt?: string;
   hostCanInstallSoftware: boolean;
   router: InjectedRouter;
@@ -82,6 +85,7 @@ export const parseHostSoftwareQueryParams = (queryParams: {
 
 const HostSoftware = ({
   id,
+  platform,
   softwareUpdatedAt,
   hostCanInstallSoftware,
   router,
@@ -93,6 +97,8 @@ const HostSoftware = ({
   isMyDevicePage = false,
 }: IHostSoftwareProps) => {
   const { renderFlash } = useContext(NotificationContext);
+  const vulnFilterAndNotSupported =
+    ["ios", "ipados"].includes(platform ?? "") && queryParams.vulnerable;
   const {
     isGlobalAdmin,
     isGlobalMaintainer,
@@ -129,7 +135,8 @@ const HostSoftware = ({
     },
     {
       ...DEFAULT_USE_QUERY_OPTIONS,
-      enabled: isSoftwareEnabled && !isMyDevicePage, // if disabled, we'll always show a generic "No software detected" message
+      enabled:
+        isSoftwareEnabled && !isMyDevicePage && !vulnFilterAndNotSupported,
       keepPreviousData: true,
       staleTime: 7000,
     }
@@ -158,7 +165,7 @@ const HostSoftware = ({
     ({ queryKey }) => deviceAPI.getDeviceSoftware(queryKey[0]),
     {
       ...DEFAULT_USE_QUERY_OPTIONS,
-      enabled: isSoftwareEnabled && isMyDevicePage, // if disabled, we'll always show a generic "No software detected" message
+      enabled: isSoftwareEnabled && isMyDevicePage, // if disabled, we'll always show a generic "No software detected" message. No DUP for iPad/iPhone
       keepPreviousData: true,
       staleTime: 7000,
     }
@@ -251,7 +258,10 @@ const HostSoftware = ({
     if (isLoading) {
       return <Spinner />;
     }
-
+    // will never be the case - to handle `platform` typing discrepancy with DeviceUserPage
+    if (!platform) {
+      return null;
+    }
     return (
       <>
         {isError && <DataError />}
@@ -260,7 +270,20 @@ const HostSoftware = ({
             isLoading={
               isMyDevicePage ? deviceSoftwareFetching : hostSoftwareFetching
             }
-            data={data}
+            // this could be cleaner, however, we are going to revert this commit anyway once vulns are
+            // supported for iPad/iPhone, by the end of next sprint
+            data={
+              vulnFilterAndNotSupported
+                ? ({
+                    count: 0,
+                    meta: {
+                      has_next_results: false,
+                      has_previous_results: false,
+                    },
+                  } as IGetHostSoftwareResponse)
+                : data
+            } // eshould be mpty for iPad/iPhone since API call is disabled, but to be sure to trigger empty state
+            platform={platform}
             router={router}
             tableConfig={tableConfig}
             sortHeader={queryParams.order_key}
diff --git a/frontend/pages/hosts/details/cards/Software/HostSoftwareTable/HostSoftwareTable.tsx b/frontend/pages/hosts/details/cards/Software/HostSoftwareTable/HostSoftwareTable.tsx
index 6ac5f7a4a9..cf37cd0065 100644
--- a/frontend/pages/hosts/details/cards/Software/HostSoftwareTable/HostSoftwareTable.tsx
+++ b/frontend/pages/hosts/details/cards/Software/HostSoftwareTable/HostSoftwareTable.tsx
@@ -8,6 +8,12 @@ import { QueryParams } from "utilities/url";
 
 import { ISoftwareDropdownFilterVal } from "pages/SoftwarePage/SoftwareTitles/SoftwareTable/helpers";
 
+import {
+  ApplePlatform,
+  APPLE_PLATFORM_DISPLAY_NAMES,
+  Platform,
+} from "interfaces/platform";
+
 import TableContainer from "components/TableContainer";
 import { ITableQueryData } from "components/TableContainer/TableContainer";
 // @ts-ignore
@@ -15,6 +21,7 @@ import Dropdown from "components/forms/fields/Dropdown";
 
 import EmptySoftwareTable from "pages/SoftwarePage/components/EmptySoftwareTable";
 import TableCount from "components/TableContainer/TableCount";
+import { VulnsNotSupported } from "pages/SoftwarePage/components/SoftwareVulnerabilitiesTable/SoftwareVulnerabilitiesTable";
 
 const DEFAULT_PAGE_SIZE = 20;
 
@@ -45,6 +52,7 @@ export const DROPDOWN_OPTIONS = [
 interface IHostSoftwareTableProps {
   tableConfig: any; // TODO: type
   data?: IGetHostSoftwareResponse | IGetDeviceSoftwareResponse;
+  platform: Platform;
   isLoading: boolean;
   router: InjectedRouter;
   sortHeader: string;
@@ -60,6 +68,7 @@ interface IHostSoftwareTableProps {
 const HostSoftwareTable = ({
   tableConfig,
   data,
+  platform,
   isLoading,
   router,
   sortHeader,
@@ -167,7 +176,7 @@ const HostSoftwareTable = ({
     [determineQueryParamChange, pagePath, generateNewQueryParams, router]
   );
 
-  const count = data?.count || data?.software.length || 0;
+  const count = data?.count || data?.software?.length || 0;
   const isSoftwareNotDetected = count === 0 && searchQuery === "";
 
   const memoizedSoftwareCount = useCallback(() => {
@@ -179,8 +188,17 @@ const HostSoftwareTable = ({
   }, [count, isSoftwareNotDetected]);
 
   const memoizedEmptyComponent = useCallback(() => {
-    return <EmptySoftwareTable isNotDetectingSoftware={searchQuery === ""} />;
-  }, [searchQuery]);
+    const vulnFilterAndNotSupported =
+      ["ios", "ipados"].includes(platform) &&
+      hostSoftwareFilter === "vulnerableSoftware";
+    return vulnFilterAndNotSupported ? (
+      <VulnsNotSupported
+        platformText={APPLE_PLATFORM_DISPLAY_NAMES[platform as ApplePlatform]}
+      />
+    ) : (
+      <EmptySoftwareTable isNotDetectingSoftware={searchQuery === ""} />
+    );
+  }, [hostSoftwareFilter, platform, searchQuery]);
 
   return (
     <div className={baseClass}>

From afc292666c1703f4e0c6a5c4be7a44b98aeb17d1 Mon Sep 17 00:00:00 2001
From: RachelElysia <71795832+RachelElysia@users.noreply.github.com>
Date: Mon, 5 Aug 2024 16:54:16 -0400
Subject: [PATCH 80/88] Fleet UI: Update host details > software > status
 "Installed" tooltip (#21052)

---
 frontend/pages/SoftwarePage/SoftwarePage.tsx                 | 2 +-
 .../cards/Software/InstallStatusCell/InstallStatusCell.tsx   | 5 +++--
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/frontend/pages/SoftwarePage/SoftwarePage.tsx b/frontend/pages/SoftwarePage/SoftwarePage.tsx
index 1cf063cc2d..34aeb03cc5 100644
--- a/frontend/pages/SoftwarePage/SoftwarePage.tsx
+++ b/frontend/pages/SoftwarePage/SoftwarePage.tsx
@@ -348,7 +348,7 @@ const SoftwarePage = ({ children, router, location }: ISoftwarePageProps) => {
   const renderHeaderDescription = () => {
     return (
       <p>
-        Manage software and search for installed software, OS and
+        Manage software and search for installed software, OS, and
         vulnerabilities {isAllTeamsSelected ? "for all hosts" : "on this team"}.
       </p>
     );
diff --git a/frontend/pages/hosts/details/cards/Software/InstallStatusCell/InstallStatusCell.tsx b/frontend/pages/hosts/details/cards/Software/InstallStatusCell/InstallStatusCell.tsx
index 38a3a42df3..7e8ea90bc1 100644
--- a/frontend/pages/hosts/details/cards/Software/InstallStatusCell/InstallStatusCell.tsx
+++ b/frontend/pages/hosts/details/cards/Software/InstallStatusCell/InstallStatusCell.tsx
@@ -38,8 +38,9 @@ export const INSTALL_STATUS_DISPLAY_OPTIONS: Record<
     displayText: "Installed",
     tooltip: ({ lastInstalledAt: lastInstall }) => (
       <>
-        Fleet installed software on these hosts. (
-        {dateAgo(lastInstall as string)})
+        Fleet installed software on this host
+        {dateAgo(lastInstall as string)}). Currently, if the software is
+        deleted, the “Installed” status won’t be updated.
       </>
     ),
   },

From 379aa9e6f742daca8d58c3bc1661cdfd170fe2fb Mon Sep 17 00:00:00 2001
From: Roberto Dip <dip.jesusr@gmail.com>
Date: Mon, 5 Aug 2024 18:14:12 -0300
Subject: [PATCH 81/88] add Escrow Buddy to TUF.md after the push to `stable`
 (#21066)

---
 orbit/TUF.md                   | 2 ++
 tools/tuf/status/tuf-status.go | 7 +++++--
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/orbit/TUF.md b/orbit/TUF.md
index 53be1e46e8..634ee62b5d 100644
--- a/orbit/TUF.md
+++ b/orbit/TUF.md
@@ -12,6 +12,7 @@ Following are the currently deployed versions of fleetd components on the `stabl
 | osqueryd     | 5.12.1       | 5.12.1 | 5.12.1  | 5.12.1        |
 | nudge        | 1.1.10.81462 | -      | -       | -             |
 | swiftDialog  | 2.1.0        | -      | -       | -             |
+| escrowBuddy  | 1.0.0        | -      | -       | -             |
 
 ## `edge`
 
@@ -22,3 +23,4 @@ Following are the currently deployed versions of fleetd components on the `stabl
 | osqueryd     | 5.13.0 | 5.13.0 | 5.13.0  | 5.13.0        |
 | nudge        | -      | -      | -       | -             |
 | swiftDialog  | -      | -      | -       | -             |
+| escrowBuddy  | -      | -      | -       | -             |
diff --git a/tools/tuf/status/tuf-status.go b/tools/tuf/status/tuf-status.go
index 6f8aa6fd36..e62dc14f12 100644
--- a/tools/tuf/status/tuf-status.go
+++ b/tools/tuf/status/tuf-status.go
@@ -186,6 +186,9 @@ func channelVersionCommand() *cli.Command {
 		"swiftDialog": {
 			"macos": "swiftDialog.app.tar.gz",
 		},
+		"escrowBuddy": {
+			"macos": "escrowBuddy.pkg",
+		},
 	}
 	var (
 		channel    string
@@ -208,7 +211,7 @@ func channelVersionCommand() *cli.Command {
 			&cli.StringSliceFlag{
 				Name:        "components",
 				EnvVars:     []string{"TUF_STATUS_COMPONENTS"},
-				Value:       cli.NewStringSlice("orbit", "desktop", "osqueryd", "nudge", "swiftDialog"),
+				Value:       cli.NewStringSlice("orbit", "desktop", "osqueryd", "nudge", "swiftDialog", "escrowBuddy"),
 				Destination: &components,
 				Usage:       "List of components",
 			},
@@ -324,7 +327,7 @@ func channelVersionCommand() *cli.Command {
 					Right:  true,
 				})
 				var rows [][]string
-				componentsInOrder := []string{"orbit", "desktop", "osqueryd", "nudge", "swiftDialog"}
+				componentsInOrder := []string{"orbit", "desktop", "osqueryd", "nudge", "swiftDialog", "escrowBuddy"}
 				setIfEmpty := func(m map[string]string, k string) string {
 					v := m[k]
 					if v == "" {

From b49841acc13de31b16ff47929c4997f2b6c6eb38 Mon Sep 17 00:00:00 2001
From: Eric <eashaw@sailsjs.com>
Date: Mon, 5 Aug 2024 16:23:08 -0500
Subject: [PATCH 82/88] Website: Add unsubscribe link to marketing emails
 (#21055)

Closes: https://github.com/fleetdm/confidential/issues/7528

Changes:
- Added a new action: unsubscribe-from-marketing-emails, which updates a
user record that uses a specified email address to exclude it from the
deliver-nurture-emails script.
- Updated the email template to include a link that users can click to
unsubscribe.
- Added a modal to the homepage that is shown to users who unsubscribe
from marketing emails
- Updated the email template data in deliver-nurture-emails and
view-email-template-preview
---
 .../admin/view-email-template-preview.js      |  9 ++-
 .../unsubscribe-from-marketing-emails.js      | 79 +++++++++++++++++++
 website/api/models/User.js                    |  7 +-
 website/assets/js/pages/homepage.page.js      |  4 +
 website/config/routes.js                      |  3 +-
 website/scripts/deliver-nurture-emails.js     |  9 ++-
 .../views/layouts/layout-nurture-email.ejs    |  1 +
 website/views/pages/homepage.ejs              |  3 +
 8 files changed, 104 insertions(+), 11 deletions(-)
 create mode 100644 website/api/controllers/unsubscribe-from-marketing-emails.js

diff --git a/website/api/controllers/admin/view-email-template-preview.js b/website/api/controllers/admin/view-email-template-preview.js
index 5692353463..6898cb3370 100644
--- a/website/api/controllers/admin/view-email-template-preview.js
+++ b/website/api/controllers/admin/view-email-template-preview.js
@@ -117,19 +117,22 @@ module.exports = {
       case 'email-nurture-stage-three':
         layout = 'layout-nurture-email';
         fakeData = {
-          firstName: 'Sage'
+          firstName: 'Sage',
+          emailAddress: 'sage@example.com',
         };
         break;
       case 'email-nurture-stage-four':
         layout = 'layout-nurture-email';
         fakeData = {
-          firstName: 'Sage'
+          firstName: 'Sage',
+          emailAddress: 'sage@example.com',
         };
         break;
       case 'email-nurture-stage-five':
         layout = 'layout-nurture-email';
         fakeData = {
-          firstName: 'Sage'
+          firstName: 'Sage',
+          emailAddress: 'sage@example.com',
         };
         break;
       case 'email-deal-registration':
diff --git a/website/api/controllers/unsubscribe-from-marketing-emails.js b/website/api/controllers/unsubscribe-from-marketing-emails.js
new file mode 100644
index 0000000000..26a9b53ee8
--- /dev/null
+++ b/website/api/controllers/unsubscribe-from-marketing-emails.js
@@ -0,0 +1,79 @@
+module.exports = {
+
+
+  friendlyName: 'Unsubscribe from marketing emails',
+
+
+  description: 'Unsubscribes a specified email address from the nurture email automation.',
+
+
+  inputs: {
+    emailAddress: {
+      type: 'string',
+      description: 'The email address of the user who wants to unsubscribe from marketing emails.',
+      required: true,
+    }
+  },
+
+
+  exits: {
+    userNotFound: {
+      description: 'The provided email address could not be matched to a Fleet user account',
+      responseType: 'badRequest',
+    },
+    success: {
+      description: 'The user has opted out of markering emails',
+    }
+  },
+
+
+  fn: async function ({emailAddress}) {
+
+    let userRecord = await User.findOne({emailAddress: emailAddress});
+
+    if(!userRecord){
+      throw 'userNotFound';
+    }
+    // Update the user record for this email address to set their nurture email timestamps to 1
+    // so they are excluded them from future runs of the deliver-nurture-emails script.
+    // FUTURE: update the user model to have a subscribedToNurtureEmails attribute.
+    await User.updateOne({emailAddress: emailAddress}).set({
+      stageThreeNurtureEmailSentAt: 1,
+      stageFourNurtureEmailSentAt: 1,
+      stageFiveNurtureEmailSentAt: 1,
+    });
+
+    // Update the contact record in salesforce for this email address to indicate that they have opted out of marketing emails.
+    if(sails.config.environment === 'production'){
+      require('assert')(sails.config.custom.salesforceIntegrationUsername);
+      require('assert')(sails.config.custom.salesforceIntegrationPasskey);
+
+      // Log in to Salesforce.
+      let jsforce = require('jsforce');
+      let salesforceConnection = new jsforce.Connection({
+        loginUrl : 'https://fleetdm.my.salesforce.com'
+      });
+      await salesforceConnection.login(sails.config.custom.salesforceIntegrationUsername, sails.config.custom.salesforceIntegrationPasskey);
+
+      let existingContactRecord = await salesforceConnection.sobject('Contact')
+      .findOne({
+        Email:  emailAddress,
+      });
+
+      if(existingContactRecord) {
+        //If we found an existing contact record in salesforce, update its status to be "Do not contact"
+        let salesforceContactId = existingContactRecord.Id;
+        await salesforceConnection.sobject('Contact')
+        .update({
+          Id: salesforceContactId,
+          Unsubscribed_from_email_contact__c: true,// eslint-disable-line camelcase
+        });
+      }
+    }
+    // Redirect the user to the homepage with a #unsubscribe hash link.
+    return this.res.redirect('/#unsubscribed');
+
+  }
+
+
+};
diff --git a/website/api/models/User.js b/website/api/models/User.js
index 72b603338d..53be23f9c6 100644
--- a/website/api/models/User.js
+++ b/website/api/models/User.js
@@ -248,20 +248,19 @@ without necessarily having a billing card.`
 
     stageThreeNurtureEmailSentAt: {
       type: 'number',
-      description: 'A JS timestamp of when the stage 3 nurture email was sent to the user.'
+      description: 'A JS timestamp of when the stage 3 nurture email was sent to the user, or 1 if the user is unsubscribed from automated emails.',
     },
 
     stageFourNurtureEmailSentAt: {
       type: 'number',
-      description: 'A JS timestamp of when the stage 4 nurture email was sent to the user.'
+      description: 'A JS timestamp of when the stage 4 nurture email was sent to the user, or 1 if the user is unsubscribed from automated emails.',
     },
 
     stageFiveNurtureEmailSentAt: {
       type: 'number',
-      description: 'A JS timestamp of when the stage 5 nurture email was sent to the user.'
+      description: 'A JS timestamp of when the stage 5 nurture email was sent to the user, or 1 if the user is unsubscribed from automated emails.',
     },
 
-
     //  ╔═╗╔╦╗╔╗ ╔═╗╔╦╗╔═╗
     //  ║╣ ║║║╠╩╗║╣  ║║╚═╗
     //  ╚═╝╩ ╩╚═╝╚═╝═╩╝╚═╝
diff --git a/website/assets/js/pages/homepage.page.js b/website/assets/js/pages/homepage.page.js
index 5a5100cebc..b9bfc560b4 100644
--- a/website/assets/js/pages/homepage.page.js
+++ b/website/assets/js/pages/homepage.page.js
@@ -12,6 +12,10 @@ parasails.registerPage('homepage', {
   //  ╩═╝╩╚  ╚═╝╚═╝ ╩ ╚═╝╩═╝╚═╝
   beforeMount: function() {
     //…
+    if(window.location.hash === '#unsubscribed'){
+      this.modal = 'unsubscribed';
+      window.location.hash = '';
+    }
   },
   mounted: async function() {
     //…
diff --git a/website/config/routes.js b/website/config/routes.js
index 59b068e650..1a87ea2567 100644
--- a/website/config/routes.js
+++ b/website/config/routes.js
@@ -480,7 +480,7 @@ module.exports.routes = {
   'GET /get-started':            '/try-fleet',
   'GET /g':                       (req,res)=> { let originalQueryStringWithAmp = req.url.match(/\?(.+)$/) ? '&'+req.url.match(/\?(.+)$/)[1] : ''; return res.redirect(301, sails.config.custom.baseUrl+'/?meet-fleet'+originalQueryStringWithAmp); },
   'GET /test-fleet-sandbox':     '/register',
-  'GET /unsubscribe':             (req,res)=> { let originalQueryString = req.url.match(/\?(.+)$/) ? req.url.match(/\?(.+)$/)[1] : ''; return res.redirect(301, sails.config.custom.baseUrl+'/api/v1/unsubscribe-from-all-newsletters?'+originalQueryString);},
+  'GET /unsubscribe':             (req,res)=> { let originalQueryString = req.url.match(/\?(.+)$/) ? req.url.match(/\?(.+)$/)[1] : ''; return res.redirect(301, sails.config.custom.baseUrl+'/api/v1/unsubscribe-from-marketing-emails?'+originalQueryString);},
   'GET /tables':                 '/tables/account_policy_data',
   'GET /imagine/launch-party':  'https://www.eventbrite.com/e/601763519887',
   'GET /blackhat2023':   'https://github.com/fleetdm/fleet/tree/main/tools/blackhat-mdm', // Assets from @marcosd4h & @zwass Black Hat 2023 talk
@@ -605,4 +605,5 @@ module.exports.routes = {
   'POST /api/v1/save-questionnaire-progress': { action: 'save-questionnaire-progress' },
   'POST /api/v1/account/update-start-cta-visibility': { action: 'account/update-start-cta-visibility' },
   'POST /api/v1/deliver-deal-registration-submission': { action: 'deliver-deal-registration-submission' },
+  '/api/v1/unsubscribe-from-marketing-emails': { action: 'unsubscribe-from-marketing-emails' },
 };
diff --git a/website/scripts/deliver-nurture-emails.js b/website/scripts/deliver-nurture-emails.js
index 552c75b0a5..e3f90e254f 100644
--- a/website/scripts/deliver-nurture-emails.js
+++ b/website/scripts/deliver-nurture-emails.js
@@ -52,7 +52,8 @@ module.exports = {
           template: 'email-nurture-stage-three',
           layout: 'layout-nurture-email',
           templateData: {
-            firstName: user.firstName
+            firstName: user.firstName,
+            emailAddress: user.emailAddress
           },
           to: user.emailAddress,
           toName: `${user.firstName} ${user.lastName}`,
@@ -80,7 +81,8 @@ module.exports = {
           template: 'email-nurture-stage-four',
           layout: 'layout-nurture-email',
           templateData: {
-            firstName: user.firstName
+            firstName: user.firstName,
+            emailAddress: user.emailAddress
           },
           to: user.emailAddress,
           toName: `${user.firstName} ${user.lastName}`,
@@ -109,7 +111,8 @@ module.exports = {
           template: 'email-nurture-stage-five',
           layout: 'layout-nurture-email',
           templateData: {
-            firstName: user.firstName
+            firstName: user.firstName,
+            emailAddress: user.emailAddress
           },
           to: user.emailAddress,
           toName: `${user.firstName} ${user.lastName}`,
diff --git a/website/views/layouts/layout-nurture-email.ejs b/website/views/layouts/layout-nurture-email.ejs
index 007880839b..5c4df42a0e 100644
--- a/website/views/layouts/layout-nurture-email.ejs
+++ b/website/views/layouts/layout-nurture-email.ejs
@@ -18,5 +18,6 @@
         <p>© <%= (new Date()).getFullYear() %> Fleet Inc.<br> All trademarks are the property of their respective owners.</p>
       </div>
     </div>
+    <a style="font-size: 12px; color: #3E4771;" href="<%= url.resolve(sails.config.custom.baseUrl, '/unsubscribe?emailAddress='+encodeURIComponent(emailAddress)) %>">Unsubscribe</a>
   </div>
 </div>
diff --git a/website/views/pages/homepage.ejs b/website/views/pages/homepage.ejs
index 365b33a3ab..ef71b85ee8 100644
--- a/website/views/pages/homepage.ejs
+++ b/website/views/pages/homepage.ejs
@@ -384,6 +384,9 @@
   </div>
   <%/* Cloud city banner */%>
   <parallax-city></parallax-city>
+  <modal v-if="modal === 'unsubscribed'" @close="closeModal()">
+    <p class="mb-0">Your email preferences have been updated.</p>
+  </modal>
   <modal purpose="video-modal" v-if="modal === 'austin-anderson'" @close="closeModal()">
     <iframe width="560" height="315" src="https://www.youtube.com/embed/G5Ry_vQPaYc?si=vv0AfRe30yssWWRM&amp;rel=0" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" allowfullscreen></iframe>
   </modal>

From 0995cbf745859c708cb1a2d0eb0b3db352846e9a Mon Sep 17 00:00:00 2001
From: Mike Thomas <78363703+mike-j-thomas@users.noreply.github.com>
Date: Tue, 6 Aug 2024 14:04:19 +0900
Subject: [PATCH 83/88] Add brand fronts ritual (#20930)

Added brand fronts ritual and instructions. Closes
https://github.com/fleetdm/fleet/issues/20911

---------

Co-authored-by: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
---
 handbook/digital-experience/README.md                      | 6 ++++++
 handbook/digital-experience/digital-experience.rituals.yml | 7 +++++++
 2 files changed, 13 insertions(+)

diff --git a/handbook/digital-experience/README.md b/handbook/digital-experience/README.md
index b4bc7db24a..7c5a7d339c 100644
--- a/handbook/digital-experience/README.md
+++ b/handbook/digital-experience/README.md
@@ -517,6 +517,12 @@ It's not enough to just "delete" a recording of a meeting in Gong.  Instead, use
 - Search for the title of the meeting Google Drive and delete the auto-generated Google Doc containing the transcript. 
 - Always check back to ensure the recording **and** transcript were both deleted.
 
+### Update a company brand front
+
+Fleet has several brand fronts that need to be updated from time to time. Check each [brand front](https://docs.google.com/spreadsheets/d/1c15vwMZytpCLHUdGvXxi0d6WGgPcQU1UBMniC1F9oKk/edit?gid=0#gid=0) for consistency and update as needed with the following: 
+- The current pitch, found in the blurbs section of the [🎐 Why Fleet?](https://docs.google.com/document/d/1E0VU4AcB6UTVRd4JKD45Saxh9Gz-mkO3LnGSTBDLEZo/edit#heading=h.uovxedjegxdc) doc. 
+- The current [brand imagery](https://www.figma.com/design/1J2yxqH8Q7u8V7YTtA1iej/Social-media-(logos%2C-covers%2C-banners)?node-id=3962-65895). Check this [Loom video](https://www.loom.com/share/4432646cc9614046aaa4a74da1c0adb5?sid=2f84779f-f0bd-4055-be69-282c5a16f5c5) for more info.
+
 
 ## Rituals
 
diff --git a/handbook/digital-experience/digital-experience.rituals.yml b/handbook/digital-experience/digital-experience.rituals.yml
index bc2b4db7ca..5b9f8d155e 100644
--- a/handbook/digital-experience/digital-experience.rituals.yml
+++ b/handbook/digital-experience/digital-experience.rituals.yml
@@ -18,6 +18,13 @@
   description: "Run through the entire website in `?utm_content=clear` mode and build a fresh outline of the headings to make sure they all still make sense."
   moreInfoUrl: ""
   dri: "mike-j-thomas"
+- 
+  task: "Check brand fronts are up to date"
+  startedOn: "2024-08-01"
+  frequency: "Quarterly"
+  description: "Check all brand fronts for consistancy and update as needed with the current product pitch and graphics."
+  moreInfoUrl: "https://fleetdm.com/handbook/digital-experience#update-a-company-brand-front"
+  dri: "mike-j-thomas"  
 - 
   task: "Check production dependencies of fleetdm.com"
   startedOn: "2023-11-10" 

From c553b4772cbfb06a7781b9f2b66515a19ffa6d1e Mon Sep 17 00:00:00 2001
From: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
Date: Tue, 6 Aug 2024 00:06:29 -0500
Subject: [PATCH 84/88] Remove sprint filters from handbook (#20899)

---
 handbook/digital-experience/README.md | 2 +-
 handbook/product-design/README.md     | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/handbook/digital-experience/README.md b/handbook/digital-experience/README.md
index 7c5a7d339c..d0015e568a 100644
--- a/handbook/digital-experience/README.md
+++ b/handbook/digital-experience/README.md
@@ -17,7 +17,7 @@ This page details processes specific to working [with](#contact-us) and [within]
 ## Contact us
 
 - To **make a request** of this department, [create an issue](https://github.com/fleetdm/fleet/issues/new?assignees=&labels=%23g-digital-experience&projects=&template=digital-experience-request.md&title=TODO%3A+) and a team member will get back to you within one business day (If urgent, mention a [team member](#team) in the [#g-digital-experience](https://fleetdm.slack.com/archives/C058S8PFSK0) Slack channel.
-  - Any Fleet team member can [view the kanban board](https://app.zenhub.com/workspaces/g-digital-experience-6451748b4eb15200131d4bab/board) for this department, including pending tasks and the status of new requests.
+  - Any Fleet team member can [view the kanban board](https://app.zenhub.com/workspaces/g-digital-experience-6451748b4eb15200131d4bab/board?sprints=none) for this department, including pending tasks and the status of new requests.
   - Please **use issue comments and GitHub mentions** to communicate follow-ups or answer questions related to your request.
 
 
diff --git a/handbook/product-design/README.md b/handbook/product-design/README.md
index af31d259ee..4774fe642c 100644
--- a/handbook/product-design/README.md
+++ b/handbook/product-design/README.md
@@ -10,7 +10,7 @@ This handbook page details processes specific to working [with](#contact-us) and
 ## Contact us
 - To **make a request** of this department, [create an issue](https://github.com/fleetdm/confidential/issues/new?labels=%3Aproduct&title=Product%20design%20request%C2%BB______________________&template=custom-request.md) and a team member will get back to you within one business day (If urgent, mention a [team member](#team) in `#help-design`.
   - Please **use issue comments and GitHub mentions** to communicate follow-ups or answer questions related to your request.
-  - Any Fleet team member can [view the kanban board](https://app.zenhub.com/workspaces/-g-digital-experience-6451748b4eb15200131d4bab/board?sprints=none) for this department, including pending tasks and the status of new requests.
+  - Any Fleet team member can [view the kanban board](https://app.zenhub.com/workspaces/-g-digital-experience-6451748b4eb15200131d4bab/board) for this department, including pending tasks and the status of new requests.
 
 ## Responsibilities
 The Product Design department is responsible for reviewing and collecting feedback from users, would-be users, and future users, prioritizing changes, designing the changes, and delivering these changes to the engineering team. Product Design prioritizes and shapes all changes involving functionality or usage, including the UI, REST API, command line, and webhooks. 

From 9325bca9c1015f2c8d58d5d9473f9fb8b963191b Mon Sep 17 00:00:00 2001
From: Sam Pfluger <108141731+Sampfluger88@users.noreply.github.com>
Date: Tue, 6 Aug 2024 00:16:33 -0500
Subject: [PATCH 85/88] Fix sentence case (#21077)

---
 infrastructure/render/README.md | 24 ++++++++++++------------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/infrastructure/render/README.md b/infrastructure/render/README.md
index 23bd1618d0..2a464c75ae 100644
--- a/infrastructure/render/README.md
+++ b/infrastructure/render/README.md
@@ -1,43 +1,43 @@
 [![Deploy to Render](https://render.com/images/deploy-to-render-button.svg)](https://render.com/deploy?repo=https://github.com/fleetdm/fleet)
 
-# Fleet Deployment Guide
+# Fleet deployment guide
 
 This guide outlines the services configured in the Render blueprint for deploying the Fleet system, which includes a web service, a MySQL database, and a Redis server.
 
-## Services Overview
+## Services overview
 
-### 1. Fleet Web Service
+### 1. Fleet web service
 - **Type:** Web
 - **Runtime:** Image
 - **Image:** `fleetdm/fleet:latest` 
 - **Description:** Main web service running the Fleet application, which is deployed using the latest Fleet Docker image. Configured to prepare the database before deployment.
-- **Health Check Path:** `/healthz`
-- **Environment Variables:** Connects to MySQL and Redis using service-bound environment variables.
+- **Health check path:** `/healthz`
+- **Environment variables:** Connects to MySQL and Redis using service-bound environment variables.
 
-### 2. Fleet MySQL Database
-- **Type:** Private Service (pserv)
+### 2. Fleet MySQL database
+- **Type:** Private service (pserv)
 - **Runtime:** Docker
 - **Repository:** [MySQL Example on Render](https://github.com/render-examples/mysql)
 - **Disk:** 10 GB mounted at `/var/lib/mysql`
 - **Description:** MySQL database used by the Fleet web service. Environment variables for database credentials are managed within the service and some are automatically generated.
 
-### 3. Fleet Redis Service
-- **Type:** Private Service (pserv)
+### 3. Fleet Redis service
+- **Type:** Private service (pserv)
 - **Runtime:** Image
 - **Repository:** [Redis Docker image](https://hub.docker.com/_/redis)
 - **Description:** Redis service for caching and other in-memory data storage needs of the Fleet web service.
 
-## Deployment Guide
+## Deployment guide
 
 ### Prerequisites
 - You need an account on [Render](https://render.com).
 - Familiarity with Render's dashboard and deployment concepts.
 
-### Steps to Deploy
+### Steps to deploy
 
 Click the deploy on render button or import the blueprint from the Render service deployment dashboard.
 
-### Post-Deployment
+### Post-deployment
 
 Navigate to the generated URL and run through the initial setup. If you have a license key you can add it post-deploy as
 an environment variable `FLEET_LICENSE_KEY=value` in the Fleet service configuration.

From 9200f1822943eb441dd1868b27620aeb888bd541 Mon Sep 17 00:00:00 2001
From: Gabriel Hernandez <ghernandez345@gmail.com>
Date: Tue, 6 Aug 2024 10:52:23 +0100
Subject: [PATCH 86/88] display the custom labels by in case-insensitive
 alphabetical ascending order (#21041)

relates to #20194

The UI displayed the custom labels by creation date, but we now display
custom labels in the UI by name in case-insensitive alphabetical
ascending order.


![image](https://github.com/user-attachments/assets/43ce642b-8335-4542-ac38-4b5a4ab569e4)

<!-- Note that API documentation changes are now addressed by the
product design team. -->

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files)
for more information.
- [x] Manual QA for all new/changed functionality
---
 changes/20194-sort-label-names-in-ui          |  1 +
 .../AddProfileModal/AddProfileModal.tsx       |  7 ++----
 .../components/LabelFilterSelect/helpers.ts   |  4 +++-
 frontend/services/entities/labels.ts          | 22 +++++++++++++++++++
 4 files changed, 28 insertions(+), 6 deletions(-)
 create mode 100644 changes/20194-sort-label-names-in-ui

diff --git a/changes/20194-sort-label-names-in-ui b/changes/20194-sort-label-names-in-ui
new file mode 100644
index 0000000000..2f27f77f0b
--- /dev/null
+++ b/changes/20194-sort-label-names-in-ui
@@ -0,0 +1 @@
+- display the label names case-insensitive alphabetical order in the fleet UI
diff --git a/frontend/pages/ManageControlsPage/OSSettings/cards/CustomSettings/components/ProfileUploader/components/AddProfileModal/AddProfileModal.tsx b/frontend/pages/ManageControlsPage/OSSettings/cards/CustomSettings/components/ProfileUploader/components/AddProfileModal/AddProfileModal.tsx
index 88b7e96ed9..12191a9641 100644
--- a/frontend/pages/ManageControlsPage/OSSettings/cards/CustomSettings/components/ProfileUploader/components/AddProfileModal/AddProfileModal.tsx
+++ b/frontend/pages/ManageControlsPage/OSSettings/cards/CustomSettings/components/ProfileUploader/components/AddProfileModal/AddProfileModal.tsx
@@ -7,7 +7,7 @@ import { NotificationContext } from "context/notification";
 import { IApiError } from "interfaces/errors";
 import { ILabelSummary } from "interfaces/label";
 
-import labelsAPI from "services/entities/labels";
+import labelsAPI, { getCustomLabels } from "services/entities/labels";
 import mdmAPI from "services/entities/mdm";
 
 // @ts-ignore
@@ -250,10 +250,7 @@ const AddProfileModal = ({
     isError: isErrorLabels,
   } = useQuery<ILabelSummary[], Error>(
     ["custom_labels"],
-    () =>
-      labelsAPI
-        .summary()
-        .then((res) => res.labels.filter((l) => l.label_type !== "builtin")),
+    () => labelsAPI.summary().then((res) => getCustomLabels(res.labels)),
 
     {
       enabled: isPremiumTier,
diff --git a/frontend/pages/hosts/ManageHostsPage/components/LabelFilterSelect/helpers.ts b/frontend/pages/hosts/ManageHostsPage/components/LabelFilterSelect/helpers.ts
index b6aad87e53..746a2b6ddb 100644
--- a/frontend/pages/hosts/ManageHostsPage/components/LabelFilterSelect/helpers.ts
+++ b/frontend/pages/hosts/ManageHostsPage/components/LabelFilterSelect/helpers.ts
@@ -1,4 +1,6 @@
 import { ILabel } from "interfaces/label";
+import { getCustomLabels } from "services/entities/labels";
+
 import { EMPTY_OPTION, FILTERED_LINUX, NO_LABELS_OPTION } from "./constants";
 
 export interface IEmptyOption {
@@ -27,7 +29,7 @@ const createOptionGroup = (
 /** Will create the custom label group options and handles when no labels have been created yet or
  * will filter by the desired search query */
 const createCustomLabelOptions = (labels: ILabel[], query: string) => {
-  const customLabels = labels.filter((label) => label.label_type === "regular");
+  const customLabels = getCustomLabels(labels);
 
   let customLabelGroupOptions: ILabel[] | IEmptyOption[];
   if (customLabels.length === 0) {
diff --git a/frontend/services/entities/labels.ts b/frontend/services/entities/labels.ts
index 7a58cb9a04..5ce8d04938 100644
--- a/frontend/services/entities/labels.ts
+++ b/frontend/services/entities/labels.ts
@@ -49,6 +49,28 @@ const generateCreateLabelBody = (
 
 const generateUpdateLabelBody = generateCreateLabelBody;
 
+/** gets the custom label and returns them in case-insensitive alphabetical
+ * ascending order by label name. (e.g. [A, B, C, a, b, c] => [A, a, B, b, C, c])
+ */
+export const getCustomLabels = <T extends { label_type: string; name: string }>(
+  labels: T[]
+) => {
+  if (labels.length === 0) {
+    return [];
+  }
+
+  return labels
+    .filter((label) => label.label_type === "regular")
+    .sort((a, b) => {
+      // Found this technique here
+      // https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/String/localeCompare
+      // This is a case insensitive sort
+      return a.name.localeCompare(b.name, undefined, {
+        sensitivity: "base",
+      });
+    });
+};
+
 export default {
   create: (
     formData: IDynamicLabelFormData | IManualLabelFormData

From fef8bdd4a9132f74c218744970ab9a849a570b7f Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Tue, 6 Aug 2024 07:02:17 -0300
Subject: [PATCH 87/88] Update versions of fleetd components in Fleet's TUF
 [automated] (#21076)

Automated change from [GitHub
action](https://github.com/fleetdm/fleet/actions/workflows/fleetd-tuf.yml).

Co-authored-by: lucasmrod <lucasmrod@users.noreply.github.com>
---
 orbit/TUF.md | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/orbit/TUF.md b/orbit/TUF.md
index 634ee62b5d..229455dfc0 100644
--- a/orbit/TUF.md
+++ b/orbit/TUF.md
@@ -18,8 +18,8 @@ Following are the currently deployed versions of fleetd components on the `stabl
 
 | Component\OS | macOS  | Linux  | Windows | Linux (arm64) |
 |--------------|--------|--------|---------|---------------|
-| orbit        | 1.29.0 | 1.29.0 | 1.29.0  | 1.29.0        |
-| desktop      | 1.29.0 | 1.29.0 | 1.29.0  | 1.29.0        |
+| orbit        | 1.30.0 | 1.30.0 | 1.30.0  | 1.30.0        |
+| desktop      | 1.30.0 | 1.30.0 | 1.30.0  | 1.30.0        |
 | osqueryd     | 5.13.0 | 5.13.0 | 5.13.0  | 5.13.0        |
 | nudge        | -      | -      | -       | -             |
 | swiftDialog  | -      | -      | -       | -             |

From 4853ecbf4eaf841a48c176b77d6ec3baa96601bc Mon Sep 17 00:00:00 2001
From: Roberto Dip <dip.jesusr@gmail.com>
Date: Tue, 6 Aug 2024 07:32:24 -0300
Subject: [PATCH 88/88] Release fleetd 1.30.0 (#21071)

---
 .github/workflows/generate-desktop-targets.yml | 2 +-
 orbit/CHANGELOG.md                             | 4 ++++
 orbit/changes/13157-fv-escrow                  | 1 -
 3 files changed, 5 insertions(+), 2 deletions(-)
 delete mode 100644 orbit/changes/13157-fv-escrow

diff --git a/.github/workflows/generate-desktop-targets.yml b/.github/workflows/generate-desktop-targets.yml
index d8269e9948..e3835a9ac2 100644
--- a/.github/workflows/generate-desktop-targets.yml
+++ b/.github/workflows/generate-desktop-targets.yml
@@ -24,7 +24,7 @@ defaults:
     shell: bash
 
 env:
-  FLEET_DESKTOP_VERSION: 1.29.0
+  FLEET_DESKTOP_VERSION: 1.30.0
 
 permissions:
   contents: read
diff --git a/orbit/CHANGELOG.md b/orbit/CHANGELOG.md
index 6596e4286f..b6f9278baa 100644
--- a/orbit/CHANGELOG.md
+++ b/orbit/CHANGELOG.md
@@ -1,3 +1,7 @@
+## Orbit 1.30.0 (Aug 05, 2024)
+
+* Use Escrow Buddy to rotate FileVault keys on macOS
+
 ## Orbit 1.29.0 (Jul 24, 2024)
 
 * Fixed a startup bug by performing an early restart of orbit if an agent options setting has changed.
diff --git a/orbit/changes/13157-fv-escrow b/orbit/changes/13157-fv-escrow
deleted file mode 100644
index b4ff408b05..0000000000
--- a/orbit/changes/13157-fv-escrow
+++ /dev/null
@@ -1 +0,0 @@
-* Use Escrow Buddy to rotate FileVault keys on macOS