From f0f6e92b191de51b907e51ba56012a505bbbfaa5 Mon Sep 17 00:00:00 2001
From: "Scott S. Lowe" <scott.lowe@scottlowe.org>
Date: Tue, 25 Oct 2016 21:32:18 -0600
Subject: [PATCH] Add Ansible-based SSH bastion host environment

Add files to show how to set up an SSH bastion host test environment using Ansible instead of the Vagrant file/shell provisioners.
---
 ssh-bastion-ansible/README.md               |  45 +++++++++++++
 ssh-bastion-ansible/Vagrantfile             |  71 ++++++++++++++++++++
 ssh-bastion-ansible/bastion_rsa             |  30 +++++++++
 ssh-bastion-ansible/bastion_rsa.pub         |   1 +
 ssh-bastion-ansible/config                  |   8 +++
 ssh-bastion-ansible/machines.yml            |  39 +++++++++++
 ssh-bastion-ansible/provision.yml           |  45 +++++++++++++
 ssh-bastion-ansible/remote_rsa              |  30 +++++++++
 ssh-bastion-ansible/remote_rsa.pub          |   1 +
 ssh-bastion-ansible/ssh-bastion-diagram.png | Bin 0 -> 23359 bytes
 10 files changed, 270 insertions(+)
 create mode 100644 ssh-bastion-ansible/README.md
 create mode 100644 ssh-bastion-ansible/Vagrantfile
 create mode 100644 ssh-bastion-ansible/bastion_rsa
 create mode 100644 ssh-bastion-ansible/bastion_rsa.pub
 create mode 100644 ssh-bastion-ansible/config
 create mode 100644 ssh-bastion-ansible/machines.yml
 create mode 100644 ssh-bastion-ansible/provision.yml
 create mode 100644 ssh-bastion-ansible/remote_rsa
 create mode 100644 ssh-bastion-ansible/remote_rsa.pub
 create mode 100644 ssh-bastion-ansible/ssh-bastion-diagram.png

diff --git a/ssh-bastion-ansible/README.md b/ssh-bastion-ansible/README.md
new file mode 100644
index 0000000..0615fd0
--- /dev/null
+++ b/ssh-bastion-ansible/README.md
@@ -0,0 +1,45 @@
+# SSH Bastion Hosts
+
+These files were created to allow users to use Vagrant ([http://www.vagrantup.com](http://www.vagrantup.com)) to quickly and easily spin up an environment for learning and working with SSH bastion hosts and proxy commands. This environment was created and tested using VMware Fusion 7.1.2, Vagrant 1.7.4, and the Vagrant VMware plugin.
+
+## Contents
+
+* **bastion\_rsa** and **bastion\_rsa.pub**: Private/public key pair for accessing the SSH bastion host. The password for this key pair is `password` (all lowercase). These files are automatically installed by Vagrant into the correct VMs.
+
+* **bastion-hosts**: This snippet of an `/etc/hosts` file contains IP addresses for the remote SSH destinations. It is added to `/etc/hosts` on the bastion host automatically by Vagrant during provisioning.
+
+* **client-ssh-config**: This is an SSH configuration file that sets up the SSH bastion host configuration. This file is installed automatically by Vagrant into the client VM, but must be edited to properly reflect the IP address assigned to the bastion host (see the instructions below).
+
+* **README.md**: This file you're currently reading.
+
+* **remote\_rsa** and **remote\_rsa.pub**: Private/public key pair for accessing the remote SSH nodes behind the bastion host. The password for this key pair is `secure` (all lowercase). The `Vagrantfile` will automatically place these files in the correct locations on the appropriate VMs.
+
+* **servers.yml**: This YAML file contains a list of VM definitions and associated configuration data. It is referenced by `Vagrantfile` when Vagrant instantiates the VMs. Generally, this is the _only_ file that requires any edits; you'll edit this file to specify the correct Vagrant box installed on your system.
+
+* **ssh-bastion-diagram.png**: This PNG diagram provides a graphical overview of the different VMs in this environment and how they are connected.
+
+* **Vagrantfile**: This file is used by Vagrant to spin up the virtual machines. This file is fairly extensively commented to help explain what's happening. You should be able to use this file unchanged; all the VM configuration options are stored outside this file.
+
+## Instructions
+
+These instructions assume you've already installed VMware Fusion, Vagrant, and the Vagrant VMware plugin. Please refer to the documentation for those products for more information on installation or configuration.
+
+1. Use `vagrant box add` to add a 64-bit Ubuntu 14.04 ("Trusty Tahr") base box to be used by this `Vagrantfile`. You'll need to specify a box that provides support for the `vmware_desktop` provider (it should work with either VMware Workstation or VMware Fusion). If you'd like, you can use my base box ("slowe/ubuntu-trusty-x64").
+
+2. Edit the `servers.yml` file to ensure the box you downloaded in step 1 is specified on the "box:" line of this file for each VM. (By default, there are four VMs, so make sure to specify the correct box name for all four VMs.)
+
+3. Run `vagrant up`, and when the VMs are finished provisioning run `vagrant ssh-config bastion`. Make note of the IP address provided for this VM; you'll need it in the next step.
+
+4. Run `vagrant ssh client` to access the SSH client VM.
+
+5. Use the editor of your choice to edit `~/.ssh/config` on the client VM to specify the correct address for the bastion host (look for the `Hostname` line). Save the changes to this file.
+
+6. In the client VM, load the SSH agent via this command:
+
+        eval `ssh-agent -s`
+
+7. Use `ssh-add` to add the bastion\_rsa and remote\_rsa keys. (The passphrase for `bastion_rsa` is "password"; for `remote_rsa` the passphrase is "secure".)
+
+8. Use `ssh remote1` or `ssh remote2` to establish an SSH session _through_ the bastion host, as specified by the `ProxyCommand` in the SSH configuration file.
+
+Enjoy!
diff --git a/ssh-bastion-ansible/Vagrantfile b/ssh-bastion-ansible/Vagrantfile
new file mode 100644
index 0000000..ea994f9
--- /dev/null
+++ b/ssh-bastion-ansible/Vagrantfile
@@ -0,0 +1,71 @@
+# -*- mode: ruby -*-
+# vi: set ft=ruby :
+
+# Specify minimum Vagrant version and Vagrant API version
+Vagrant.require_version '>= 1.6.0'
+VAGRANTFILE_API_VERSION = '2'
+
+# Require 'yaml' module
+require 'yaml'
+
+# Read YAML file with VM details (box, CPU, RAM, IP addresses)
+# Edit machines.yml to change VM configuration details
+machines = YAML.load_file(File.join(File.dirname(__FILE__), 'machines.yml'))
+
+# Create and configure the VMs
+Vagrant.configure(VAGRANTFILE_API_VERSION) do |config|
+
+  # Always use Vagrant's default insecure key
+  config.ssh.insert_key = false
+
+  # Iterate through entries in YAML file to create VMs
+  machines.each do |machine|
+
+    # Configure the VMs per details in machines.yml
+    config.vm.define machine['name'] do |srv|
+
+      # Don't check for box updates
+      srv.vm.box_check_update = false
+
+      # Specify the hostname of the VM
+      srv.vm.hostname = machine['name']
+
+      # Specify the Vagrant box to use (use VMware box by default)
+      srv.vm.box = machine['box']['vmw']
+
+      # Configure default synced folder (disable by default)
+      if machine['sync_disabled'] != nil
+        srv.vm.synced_folder '.', '/vagrant', disabled: machine['sync_disabled']
+      else
+        srv.vm.synced_folder '.', '/vagrant', disabled: true
+      end #if machine['sync_disabled']
+
+      # Iterate through networks as per settings in machines.yml
+      machine['nics'].each do |net|
+        srv.vm.network net['type'], ip: net['ip_addr']
+      end # machine['nics'].each
+
+      # Configure CPU & RAM per settings in machines.yml (Fusion)
+      srv.vm.provider 'vmware_fusion' do |vmw|
+        vmw.vmx['memsize'] = machine['ram']
+        vmw.vmx['numvcpus'] = machine['vcpu']
+        if machine['nested'] == true
+          vmw.vmx['vhv.enable'] = 'TRUE'
+        end #if machine['nested']
+      end # srv.vm.provider 'vmware_fusion'
+
+      # Configure CPU & RAM per settings in machines.yml (VirtualBox)
+      srv.vm.provider 'virtualbox' do |vb, override|
+        vb.memory = machine['ram']
+        vb.cpus = machine['vcpu']
+        override.vm.box = machine['box']['vb']
+        vb.linked_clone = true if Vagrant::VERSION =~ /^1.8/
+      end # srv.vm.provider 'virtualbox'
+    end # config.vm.define
+  end # machines.each
+
+  # Provision all systems using Ansible
+  config.vm.provision 'ansible' do |ansible|
+    ansible.playbook = 'provision.yml'
+  end # config.vm.provision
+end # Vagrant.configure
diff --git a/ssh-bastion-ansible/bastion_rsa b/ssh-bastion-ansible/bastion_rsa
new file mode 100644
index 0000000..95a72ab
--- /dev/null
+++ b/ssh-bastion-ansible/bastion_rsa
@@ -0,0 +1,30 @@
+-----BEGIN RSA PRIVATE KEY-----
+Proc-Type: 4,ENCRYPTED
+DEK-Info: AES-128-CBC,7FE49F27BE773D4FFC45681AAFBE2100
+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-----END RSA PRIVATE KEY-----
diff --git a/ssh-bastion-ansible/bastion_rsa.pub b/ssh-bastion-ansible/bastion_rsa.pub
new file mode 100644
index 0000000..3bab203
--- /dev/null
+++ b/ssh-bastion-ansible/bastion_rsa.pub
@@ -0,0 +1 @@
+ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8ED3jLmtB0o4NCqT4XirE2lGNt4M+WKd5PjIZj1/dgb4Be+IntdrWPAfkbgUoZaAGxp9Apj3asZJKVjFXqHIthu2AUoRGpBI75CQJ/8qXGtkazEhyE9kccIRKsTrngPBw7/uB7o6qXUWVkCjIJ6+QBOF5oTn5LB/FgB4FTxgezyVoRsakuFsuGRpTfndJE/YxK05/w+2Q21znfccORblLPASNnJ6H0vsX5glbF5RqhCLHHlIRLNMGNiUoleVojG60Z5m65fiDJvMSdexGcCZuk9eKxQ0sVwLmEabSZ3muW9SmuyJM1DjKD2/l2Ia+2RKrez1JLJFVmZ6GAsfvAzGX vagrant@outer
diff --git a/ssh-bastion-ansible/config b/ssh-bastion-ansible/config
new file mode 100644
index 0000000..7119d8b
--- /dev/null
+++ b/ssh-bastion-ansible/config
@@ -0,0 +1,8 @@
+Host bastion
+  Hostname 192.168.100.102
+  IdentityFile ~/.ssh/bastion_rsa
+  User vagrant
+
+Host remote*
+  IdentityFile ~/.ssh/remote_rsa
+  ProxyCommand ssh bastion -W %h:%p
diff --git a/ssh-bastion-ansible/machines.yml b/ssh-bastion-ansible/machines.yml
new file mode 100644
index 0000000..93857ca
--- /dev/null
+++ b/ssh-bastion-ansible/machines.yml
@@ -0,0 +1,39 @@
+---
+- name: "client"
+  box:
+    vmw: "slowe/ubuntu-trusty-x64"
+    vb: "ubuntu/trusty64"
+  ram: 512
+  vcpu: 1
+  nics:
+    - type: "private_network"
+      ip_addr: "192.168.100.101"
+- name: "bastion"
+  box:
+    vmw: "slowe/ubuntu-trusty-x64"
+    vb: "ubuntu/trusty64"
+  ram: 512
+  vcpu: 1
+  nics:
+    - type: "private_network"
+      ip_addr: "192.168.100.102"
+    - type: "private_network"
+      ip_addr: "10.100.60.10"
+- name: "remote1"
+  box:
+    vmw: "slowe/ubuntu-trusty-x64"
+    vb: "ubuntu/trusty64"
+  ram: 512
+  vcpu: 1
+  nics:
+    - type: "private_network"
+      ip_addr: "10.100.60.11"
+- name: "remote2"
+  box:
+    vmw: "slowe/ubuntu-trusty-x64"
+    vb: "ubuntu/trusty64"
+  ram: 512
+  vcpu: 1
+  nics:
+    - type: "private_network"
+      ip_addr: "10.100.60.12"
diff --git a/ssh-bastion-ansible/provision.yml b/ssh-bastion-ansible/provision.yml
new file mode 100644
index 0000000..e6a5334
--- /dev/null
+++ b/ssh-bastion-ansible/provision.yml
@@ -0,0 +1,45 @@
+---
+- hosts: "all"
+  become: "yes"
+  remote_user: "vagrant"
+
+  tasks:
+  - name: "Copy files for client system"
+    copy:
+      src: "{{ item }}"
+      dest: "/home/vagrant/.ssh/"
+      owner: "vagrant"
+      group: "vagrant"
+      mode: "0600"
+    with_items:
+      - "bastion_rsa"
+      - "bastion_rsa.pub"
+      - "remote_rsa"
+      - "remote_rsa.pub"
+      - "config"
+    when: ansible_hostname == "client"
+
+  - name: "Set up authorized keys on bastion host"
+    authorized_key:
+      user: "vagrant"
+      key: "{{ item }}"
+    with_file:
+      - "bastion_rsa.pub"
+    when: ansible_hostname == "bastion"
+
+  - name: "Ensure entries are in /etc/hosts on appropriate systems"
+    lineinfile:
+      dest: "/etc/hosts"
+      line: "{{ item }}"
+    with_items:
+      - "10.100.60.11 remote1"
+      - "10.100.60.12 remote2"
+    when: ansible_hostname == "bastion" or ansible_hostname == "client"
+
+  - name: "Set up authorized keys on remote systems"
+    authorized_key:
+      user: "vagrant"
+      key: "{{ item }}"
+    with_file:
+      - "remote_rsa.pub"
+    when: ansible_hostname == "remote1" or ansible_hostname == "remote2"
diff --git a/ssh-bastion-ansible/remote_rsa b/ssh-bastion-ansible/remote_rsa
new file mode 100644
index 0000000..19162f1
--- /dev/null
+++ b/ssh-bastion-ansible/remote_rsa
@@ -0,0 +1,30 @@
+-----BEGIN RSA PRIVATE KEY-----
+Proc-Type: 4,ENCRYPTED
+DEK-Info: AES-128-CBC,059D08D45581C2138081DD04CAED14E2
+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-----END RSA PRIVATE KEY-----
diff --git a/ssh-bastion-ansible/remote_rsa.pub b/ssh-bastion-ansible/remote_rsa.pub
new file mode 100644
index 0000000..cdc308e
--- /dev/null
+++ b/ssh-bastion-ansible/remote_rsa.pub
@@ -0,0 +1 @@
+ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCp0CZCDAEBX1QPzo3dV2IkSWaAgDuqLBjQc4r8TDFN8epTXauo8IzDJ4L7UuRDdw64X54wSqwK+Z+WzvITHujWtIvznXUTf4M67odDbvWt5T8gT/7bi9+Y2DMFsKQI2CjrQ+lEeiGAZYt/XGGQW9nIhKpSO6m8Vw4JUTfFxrZFkbQ6RyU4kvwOyHlbNYktmfxXTrWp3NHyfWRQC3ywSX19QvVFMeRIu9mmzZWtDaj2k44uwUkBlFjb6ijXzBuQNBtjWlDfwge1XVPfTVVyXSqDZJerHqDfFhqwPB8ZHRvg4YcnOz1ryjpkESJGl3BM3ZFBZHsrjfHhkG2kypn5Xefr vagrant@outer
diff --git a/ssh-bastion-ansible/ssh-bastion-diagram.png b/ssh-bastion-ansible/ssh-bastion-diagram.png
new file mode 100644
index 0000000000000000000000000000000000000000..364ed5998e110999dd843bdad0bbe440f3db3a59
GIT binary patch
literal 23359
zcmeFZbyQYc+dc{i3JB65lG5GXNOyO)NH<6$jnbV;iZn=fNrSX>gLHRz=Cfb-cAqoe
z@2~S4XN)t(=Xk8ede)kG$8}%V3{#YsKt_Cl2n7X&EF~$b3<U*~2?YgB4*wWjk&9cc
z1Ajp~DNDS9p6R3W1^+>?m(+5Cf_jPp`3((~n*JQzFlni(>8vRy%VT0^!(e1;XKcpc
zZetJbhJxaA=K=q;F>^K|cDJ#%b>ea7C;96R9`J9-WkwR>zix51;wRCRQzRC#b2KAn
zXJBJsA`w6&CMM={G&Sc@78U>fb?`ralGo18_B@P?Zf<T2ZmbM;juwo}+}zxZOe~Bn
zEcD<GdM6KCXCrrdTPM>0Jml}^h?+T>I9l2}TiV$YL!N77Z0F+4PeKBD(LcZb(@tkg
z^FMF0b^6^c&_PDXPZ*gQm>B<gHux$Z<SLJdosGStnUfQEz5qMlUw8iBuKjt>f9_X&
zZRczUM#0h2M9S9L%n^Lq*$C1)0hZt2{-5voe?CjW(b5d``mb*@|Ni#Bul>HCj}g-G
ze+|TcM)|L+V3-9E`56D1G6BT$HI@Y^C?O~*QDIeg==}_YCN-7Yo}}>aWapGDs$|M6
zsxR0=`{TnE$xdEK<DyeHFDieEhNl)GTcvk;h5HH<JtdVYhRT$Ny5pD6v=zZ^=CJ!A
z_vL}hft|O&Wv2IqzSX{k@3fYu;H}n3RU)%A2{Fw7FF(sf{x)|QTIim#%Vl=0_fsav
zGKoKbUHbm&f!ifis!ZjN(<pk#luFeqmAU61@Kf^+6e{dZ<PaqufX#I_$F<)qN*YV?
z$S2PiKX*G!)xKY7q&QVEq|WrINz28CMnnDmIfR!yJ}d1bD~AvD`~A6+5(+QK+NUTK
z6M_}}&!>$SMwzeKip3Z1Va{V==_!>*>@T$w1}%+rYM7nF6cR1d^Utj~xI3}lB-EMY
zjrS2}J6P6=xpk}#EO2<H0mcX=BA@}m8ormMeRr6e|I_0U=>E)=4|??Kwnd}Vn}3>$
zb`<G{sc@J&XyA`!y{tD!{iCgs;%QXd&f$t>1SYwXuL4?pB^J16q~lm+n+=}o2Qjkd
zO79oLclKZ3B`JSy^_;feIb38<$%2tNKC4<FtNznxcL~sEH#rLbfAv`b^!eVJQ;Pmi
zqZZLXqx9mgY0CqUo2+=@@Z6_OSI{)?`T1;OvdMN1sRNX2I>0?zTs|}zkD=l4a-nJQ
zwXm#FBVCV_5g`*H_kU_4)XV+dYzhn?9j4Op!4$QI6woWji{A5#DfX*#frdZrQOFx7
z{%H7)%`k|xC;+)*^qIc&r-uW*szNXhrap*t-Qy#!aT9;`#xemkbtV`c*nh1KK?JZm
z{_99>mbD>r9F^{4f|-a5k}y2KJo+jY9{ahq0A6|q5saqA%2lEB3s_9+=*PwOrfTKF
zT(j*m)Duh1RveIV7*y~dzyEZf;+C?VcpUdWcNh_x|9xcuJ8i<IR&lxC=T?g#+rH1L
z_X}CB>b{o+C9i0xM<U|ir<jd3`Pn?&$V^?arBL54!Pd-(^SrkZe0=UU@`6rw^-F6=
zA-i&{*gZeFY(Hj%kiM_NHFQ?2>x*5oS;{~22ztGZ8oiqGjD7>_&t5>IVgf?|CteWn
zXH@>r+*s?<Zs2=A$#?O?WV7+GW$xzV1=wzw2>$xbZ&R@8wK4nZ%||kAuo-lpb5GCL
zJ0VwvdtJ;}#CXqwecI~{GkO`|Tz1uoBFI*JaXx3)nx`|-c&E(A`ookeU9Z8JIRcx$
z->~G1G^{9bG3;aH7p4dGTbZHmYF|{DDYLvPsWnP<O|v+_W_HXHI%_7*pncdWDnnu%
z{E13#RC?x28LbeKcM=W^fKV8TVu3ut>Cc>~#Lre!-QXJL`!*fBX0u`LE&M9eKJ?SA
zEIK4DmRPz>-`dkkvjN!x`3%|WH<N>lo`*KWe5bOfL!3*ZK5)OTM|=m#lXTIqhrexQ
z`P#l<e`AWxsBiu41D=IE*9xrX-QDR3XAhCD7ujJ!md_h`zGG39>NjdmN9|A2Ryso@
z7T?rZ&lvBzZ)La@Z{$kFQEc{6X1$M}3<j-ihvz%)!q_bDe8!qUqsBt7Q^Uq;KG>@<
zdUL)zB!;7B3I-abYQc4G#>aQRdU|sJ{Pej>qpMBT{l(ne+PfzxH7M{0IA`}!0yn*~
zX&ghgzTmaNf)^(3_S-8VL>xnDoSay+>TDtSj-mArH@l?wS$y+4!AQ8qnLam`BEKjN
zs?3K@kXITT&ZuEX3<o!o3~a?eyfC|!?1>~m9?@0KwxI9X)+lQ_38y#65l8MM@=jmb
z7x2DGUT|Alc;;4h4|=ZHl`ogZk@9eVoA&4#SDR|7?hL-mgi`P)7v&~TfBxi4yPb)`
z&7)2fPTu{mah6Lh%^qN0=U-M$>wDtT<;79RRbFQI`r|Kwl|0=hlf+Ps5|Kcwk-A&j
zIE?h1sjcZ|r|9C-`C63VY*t%17VRDi-IeEZPiV*00Ap+N{pHdUzW3Sa1(Tp{?T0dr
z&S2#IhYFLP*-uw^wsq|fp)-9t&s+@2>-Q=LidSVU6w#s4sJNi@AA3A!-t)fQuT4Y5
zqIpiJI0EK8cg$&ofBGY)zI{8~W{d<Oa}R-A`t@b&F9HuH*-X9}U59S0e4Sd`iz_XQ
z46~n&oJ(F+YR`C`e;N|KI@73eTlBD~GU|Lhm&IwfXgwm5C3t@}J|u9vXL8W6%P?MJ
zqf_+S(Ke~B_G6Rd(n=7{hTBjo`)0g~JhhTKYL7@3N%VUtM2eP4$_(dNg3L|av^_1E
zjHlRi<(F{p#hakAg|ZcE-c0s4^crFE-0oGCytG{H3R6c4ZkemLvbbfukGn-+{BmY?
zK-om~tpP{Ty(18zM!_lbc&$e#uf}O>Sp9nA%C>Reyut0z_Ln<11GQxu8zWm8vZGze
zMX6q6>a>CH0?o%^&fN&c7AB;$<7He9>*RZ*Vx3xs6U6{LL|VkHyX(^u$ND#uG`El6
zjqUh|-hKYOTRp8G@$nmar-<44&g4bAT8*`qRl-ZAPqqsUF<$jG!r!}VmweK!k`k(>
z-{mw$-4hs4+g>p?9lctIi^k#8f86@(!SlAQqoe)Y$mThhy<sl0+k%UR({VQr9$nf5
ztJM_UJL8||;nay^U;|GcbiC>li3&jr6L{|u$8zP#^7fU1#J2NxB=14_6f$A@69VVx
z=2}B6qq-9H5^avTcxshFT#IxgqWqSY&@Zix*q3YL1rNhN$w*;yB%(O(Z_cay;`pt$
z=lHC^%-Wa_r&|s%tx5`RF#Z_vcy@{;p+#nx`~&#_jw+4pAi`$$E3?&fDLawxT?I1L
z`xYGgtj}6i`2<6TrrqTFrqq`w1B{J&7Z__8mxxH(z1uoBo`o0j&eB?Zr`kzRFsG0T
zoX3`v+i-cdG>y;&r+^ii<D_4#xhm3cZlG5C5}zXA{WkZ_Vy>gs_IusW9HJlL;q5!!
za-O9}KDaJ=Y^7W-`7SklH>|kYF32L0req9(MOc|X%$APgT7@sVIyROTG&eQr3PnT9
zW1TTOdet9_(COM9h;P;(&&=3zWo+v9?lCg>9<Ku$@o{Al84O7|J9KeS6Inz2P8D|E
zB>BxtM9!R-?V<~|6EFl&Zg>UGu_)w4ZikCgL(d*57oQz89?m|<XkG4Y#kJf^FWR@_
z$$e1cn7&N7S|(YPE)U?65h-t<2_gUbG0cdQ&Z{Zm7$+mZ#}F)x2!Y~5;E&+Q{PLK2
zxCdT#S~u=hMtFb?SYm~Y0v#{6g|gFcB)qcX=W^Qm>%NRY-=z1$imO+1Ecvj=D}-kh
z@%net3l5PhzX)irUpqv)5CBh@LLo#%r`Pbcgd@Yk<|{iIdF;xG;mzDz3%8X390ft*
zM?Kpkqn6hv8?Mt8J%o7Py*|HgcFRhZEC%0kw^Vh}W^N25)%riG*jzLvvJ*K*$Bq_7
zcuM0d67r0l|Lxfinq9D}p3j7IR>lHrZ4Q6Lf}7!UweqC#sevqA`jy^F+WBUhT`Dlf
zBidpW@~}ia-nSR*cPlF2;Nhex6IJ^gL-fx)=G_Wp9f`tx$}2_)+^)}op^fJ8UuI<m
zP2RD%GLUzM^7@t&H;%h{ZW4SURkx0&iJ4J{k}#pV8ZztAi)u-T#IxMvmqLKStMr)+
zbK-RzkIG9j=?OUx61|G@I>GD>MbVsH8P%l7FhBTQdB4}EAH`x~M+AR0o#%b~0M;`%
z2Wn`j`rTLDa0_VofVa90C;ha@?ZUa<mkZN3v1rk4l5pV`m0d^N=i*B`N6;3z-3vOg
zlR0Z(w!#ohPqkzO%^WX(-Xh$m;<6fRiNqv6j0{kR7kFNr_Q5|@y6)50#W1K?l8|Xy
zl{!UZYK!I>wMlLbi!@38@Z|kdK4N%3q9yPui}Lg%RMH0a<n$;ie^IcR2=!qRnI<Ad
zm{CN%M4r!*x=Tp`zt0OB`r7xf`LdXH2v~NzM{q|7bFOnXHi|?R-aCZ_gJ8#$h^>7c
zm#^|kuj@f|ZtHwMis;pot}LwxlZee3uaITY4u8j;BO%n==^eNo8>-z?5br56lF45(
zhMVq4&kL(s1RswNGxK(eh4(SG42<s)ngv^s;VYQODPb_vxXNeEek*R~U)y@{NU?2s
zz4YI1=jB_D=U<DfOUu*VA4=!BZ#pbPw|%9NE$raaZ)*R@)p9l_gJ!^xui2*Yu1}vi
z=G3I&_Mq|fUjN5PR2&p+zWGbEkD}jUM4SiFq}TCKzRuY;(i>=bqk)hJANmHjU3f4{
zqKl?;W3V#<UD8;9KU*eDcgtT`AYb(*k<&>wRkrikR=wadwn!T^3Sqn&T?$zMOqe{S
zU$n_+*k{dng##kKrsw%(2CXgL4jTd=!KRMJ{i}boeeei~o1a1m-yBjtFG}{D#?7w_
z(7X)bJ!~46@9yGTY$|`)HTYGj(u8KH8LQIZ*1~6SIiDs^ef7xjGxFBj$6u01Tz2%D
zg6{BnY2_cY(^+s`q-6PCvuDH#(jShW(Hwt9cW#q>1T7%1g|ylI_V{!}Q0HmB3T*4$
zi45;);B6#%T+4v&$0j~(GUg17&eNtJJWr*Bca96+-!v+em|63Ql=3ZAofn%q!!F6s
zyNpTIO}`w^^gKwBXD&N=@NSirDv+gCS>AEdKSt6m;$W2(LdiyYH00<~|IytXH|C3i
zkkCCpbUG@bvM-8Jjyst$Pk2G_EdLwLFq%I>vH%81cAR#lT>q7Ug@Oz$>V-@;Bv$<W
z8G+4pznOm<tM_-ZC<Mz#vYfFBadwU2p(e6le}LEnDXyNi-75PtU$#z)on2onx%qg$
zTxodvgK0QUt+9-}!DohH9hhRvLHr~JG_m3IdfO6{TEQFEj20rj8ZsZsFRn9{X5`0X
zE<=Rq%eee@i%nj!NoSrSrDsNmm?I2&4L=aluGuSnSZKrdszwA{eFj0m`GfmJ6PGwy
z;CdZ{*OyS`6Vno*Ra4~<4O#m{gNqgKrGb6coOlKKn+UU0#MI5<469wkfVb!veH_+5
z%0Eta)Agt-MDbrFXPo#W^?HK1<J(|S28rT4tY&y@Jxj_&hSXe&Roo=MX1Ra$c-Ysx
z5ebFP1nH#$B=5xPDHC#a6e+gq84zk&4^({?t--kb{1Yqki$<C4)~}(7`V@}vdbx9w
zRO;+6lxeWZyQ$nRQbvuOOi7HF*y_XsuBrT<H5s(Yr|Z&07t+UGCw-Lrd%udy-aC4H
z!?pO)mr>zds#7~mlg-!0<FaF_UaD*9i$Y~Ai#;@Sv0uAXGq7IqR&r}NV@ORy&rE};
z95-TxNXDg7-<bl#={;P+=~ITfwl?~kA?CO(RXq|#MHtzR!Q6h??>;kTNi*Hpn#ukT
z;VuV>I=0LpbS|g$t8>boz0~s|67UcX6k%d^;J50vps8S^!Z1W365vx&`$CA;iwKQb
ztdt`@;|W7a)pr>z{O<A0EeXD39!k=Rv6rN5o7efIh7RpZyB8qp{#>YC{Y9^#zt0yK
zr&K++g-OHu^$)PS2>le;-)>J62dySP#|+J8i#=^rMi|iGKWcjvOkNRAT9GPMgMm$|
z{@TbxLES_N-M<{wkn8@qhlq0^iLsW%sN2+xDKUk#VoYIwwt8Q?M^m7juhL%Ri}#ZH
z>ak$r`hc@>e9-MW`?RhJW!H%F{TBsT7Gb|FtQ^APIQg;W6{0Wo-$R-!+_TA6(>$iM
zEM~BmKfn`3gM8rEIEjZ2ooCP6ou-+%UJ1mT=;Mq@5ls@-+5WbQ4zk1^(`)|3nGS7-
zaXHTJbKX3s^Pi)njy$D7D}wV+o|~^d7a(A$m?y%{2HDPR1GZ|h<|rEo(Tsz)Rt77L
z$l@()vDv0WCozi3W8njXpr&NSNi~O__{!bYYU0xIRPYhB+HAFEyjhAWE%>;k)d%ke
zrB1*LhGoAptqK0gcvl!kN!rLW-aSJNev^rpKb98V*N{7(G7dOZ25w1FW|(@96~1HN
zFlwifZo-ekW&Nf;RN2_{yfF|ic@%#>Q1eM9`Ay69CZ5}m(nm{89!^zn&)<w!m`Knv
zhBxAsl94vm+Z_>Wp!+kSf3zDVny=y>ynL*mIm-RKBJ9AbTufqnskPPR(1cx7oC}u+
zh2n<S%;ENv0SY1Ck2b%D;rr#BD1l0G(i*LPUYwh9&Tz^$rEjkd(Gjux$pmCHh0+81
znCZgi*QKb;`Ir<nmCn+A$$O~gsw@;ZSYvIQj>S7)6gTBnh&!cm*bF9U=v$UH9yBDM
zR|PI+i$#$1)KSn0QDq^8G+!=y=G)BG#8{DrA{K4<K|k6P*_yQ~W2ZaryE(d3WbUlO
zW((VOopafls1RT&Yq@!|t~-nBze>?2H-}7~#Gp4z<Ax$|^>JUMF8HYJrP0RTLSwC(
z;&tYmB}zLA^j$jAPO!UdM?TnHfeah3F!dG%MM|H`W19d({3~MD;k2dY9`?T6o5?1!
zdD01kAa5P)jUlyJ%3q3&<U5g6skPN>RAsakwT^>F%Jq#)WYBv<^r{ZkL2!jo$oCt{
z6!q?KMkvpb2@$Vr@wxBectMm_xuJha$S6s2>(y$+MdL%5&=2?{-SwG+&SwA76p%q`
zC-EE01$ckJ*>K&ToiS-5bNtn|+|9ah?W6!wuSLq|30<hcnU0;voSJ$;IHET!h*lq(
zuCQuG%^W|Wc(P6me@Lo@PI}I;8Z6-aQ?bbXc=^>zj)S`-bC+yK1C!IHES_O!+7sX6
zq;R-*A#m;D?Oor!id}yA{<^<3tSPBc^70^Fj$nCv_S&<_^YTF5QWRl>o<gaEeffOa
zfHMMzu||;PWHm&3%k$@_kUjQ_C_^N=Rsa~R7Bvfa>1`KNH8gR5GR*O+wVoN<Y$t~f
z$_U|3#3o0Be*}Hw{CzcQGJ1*HmiawC(;L4zB<~D7KJWDSH%o5Qy^_%V`p(kqOi<lU
zkc5rPv0VPN8^^#pK~VqVxg4=1YKq?K?9UN0{ZuX1OwWX;6sD?=mgp}o_vfbXF6Qji
zamA)I!(yIIh4(myPsVpOM<z+%@b)u=5hES&&WA{93Ls38C?b+41m0cs(S!*-NBHh0
z*?#`L^R3;o0BTv8k!UKbMPv%QRiYY4Jq3s*3OpQ4MPnZZT^b$+LLZBhnI9UNzPoJ)
z-pJ|@uif+Aq4y8G2+Dr-qYz0_^pYW_=bUP`t02Ls;B;H$3ng|7OXEi*pAsX{y^b`4
zdkW{1)8181B$)qGkkB;@eVon6qfLT7x!m56Mj`Ra;RMyl{n;+8uO^oR?sEI4@_*8k
z+xbp1uHvne$AU&%#gy&$v)KNt#D1+5j8^ReAB@F(SKMv@oS*}TSVYus3GjpB*iBQp
z>chA!obsO!gKk@bn>+6>`>4d3jytr!s8XMf$uQ0=%**`zMMlT2iE%BGLN+QfkVtP;
zf~!k(z^ci;<aH`nq&p`o^<X62{bDs<zOwV#E@MwX7>;_9VgCRX<2J*#{<7px*7vaP
zQ>=S~Pvc~anmNgKtj=U^2(jgp%GHgZceVw}Amx<4?*OZJlIC+A-iPPRBnPtirG!hj
z<($|GB-1%1acnU8R<^5m%zVxEE3d2&mRE$<9%FPW+#P>k`PB31gSdEMF$m*^8hQvl
zHOV<NBW?0k8cv6KbKE3aNQtOlCv5O4T_9DE%TT58nP!NQCAR|LEv8J9(S&^K7xwP+
z+wxWM+xl+<MfW7pHZY~FutW?8>F<^8NjIaG*r&v8r;voX2cSGu_HXObQC~mLaMyA|
zG&!qSb_=c#2n!(*et+=dbBHHO%k<t_H_kwb3g7mx!Ce1@cem&auxFOy!gb$F5eDcU
zvTWl?le4^sD|aq>8YSx1=ARx>ZlMHeO2KxB`i=7XbW&N4Qd?gJi+Us1CcAql?yhp>
zU_38o3SDs<;{UMXap3Zk<~a60>xk3NqGIja(4(hM)_-<kie1^9Om#6~bG}XY&B1uU
zpvuSvpbF)U{p?bPBQC#Jk6ZAw^j7VraF6Jfq<*r?QQws3*e3FwA6=+3@n;!f#Dv?<
zaX2L?1Qhn1`qSh5LlnyNn~Q(3+_Po09PUu<QA!&)uNwKcVr@e*2o(Y5iOBANk5D*2
zw)&69WCinySVkD8!wocOe5UL0Kkhv)Ni5aB;I1X9Wt^d8vHul6mhwJ666XnY<`C=<
z^SUhJY4b}oq8qa&0U7Rsud8o5`C9H)(7U`NlQu+oes7eAX9u4G%Wx9K(r+sCS@y7G
zHHlw4+y1yRWXAj!Pp?T5(05OjP5+{uuh14_U%I1-@Jy!@&d-myfUTz}>ZJ?Ma}mq-
z6*ixEq%sMV%kCn|MV}w-*>&jSwb5hVlGsU2Ja(=KN7-VI-Y=dK=b%!V4O{d}`AuSM
zL@9l6z7cS`GA9{je8*yBB-(D;fRn8rrrd4pf0!s^8&1`tlKJzjP^Dm22>PzLPsYHI
zjC?Ahq9{Zm-cJ8>VThqvQn{vMtG^6SA=M$=&f)gg_b0FXEckQa_*fmhpMtI{MXdCT
zWEHf+Nxa(bX>vD4&J)C7`#|_^$*tArevcn!4L5NqmEGzapP16cN-_+lV*zlOO0!(R
zTj$V6o{9#um<IWhVavz!QGCpQDaA%SY6^>C)bj01C^ue~!d(}YgsQd?hBSftGZL-q
zm&b~$PsBgM_L~$Ny<6r!MmDQ^MhicBe8*HEn__&>e5rp+fjOA=dXBmTX`dN|#1VBr
ze1kn^TR<rzg-hJN>-#5>T5W#{440zFJ=EU(F~92QmMu&L{RelWHL(vN&*ZPtvsS3Y
zDXx&KqJUu@!Nk%}wQq0Ncv=LTLnWH&r0|ltII@-U<Rx#rUlZmjl$fxY=KI4s1l05J
zbM#gl7=J}7J%YLpL#z$xuIqp>>b#>ZGOk!HMn!krh8_dw<u?EJVyW7QlTSfr6w~Of
z1G>$nOkc4^-lDgvV2&^?;h_WYMuehWLPD7G<>wR&p3~D4I#Cp1Mnk-N=!HN}sP^xo
zmAqyN7Cgt)b#M+#E1qCXMW;2tn_SBU!Ik8}_pe;Gm8YMokY&ehKM{DiGTCj4a*4y^
z|Ipj{bmK!HcUo|+Q3cx(fr@~Wkx|~dfBQRP41^-_-KmoOM`54nisSj-2l!YX55K$P
zb9NsP5zg&gIc<+(yLpLO_Uz(RXe(s6Gt~o1s*b>r8u2E4_R$R`Ot++;!1J?C^NS~o
zS1AMmX$*)2oZ11W$>-1#Udms*1yz#1b-u&Vy1`~FJd-=1=3~1unI$<Oy~-NZK(H1a
z6{R+PffW#uEE7i#RsZYzbiI7O$Xbhd09+~4;OUlmH+=ty3_Y~Q{3(~<6ngdsw;c~-
zyk?XGoIRr55k7DUOsLD;-FEXKo+2drXHMC(N=&$;>kn;D$;6*uR))58Jf*u&yCq;O
z?0Re8>O@*UFA}QPt`}kg0^?dKScY#EO;!)I-wv{8g3cqw?N8Sn)YpYycGG<bio#<-
zCZPTF6}?NOBT(+anyi>mbk5|OE|dr>Q70II)y$z|XCUhNuB8J7;aL4^YAX5s89vU|
zR_hBlLOR&<Pw;RVN85s$Jh=J=C`Qzw31i#075xQOD88)O3Lf<?If(5in#5tsV)~aP
z5m_%taSjOmg5vmk<pf|*p2oU!=gAk7Y*XZ$w;M;$LZLKR=j-kt)>|JBn)@nj)qeX)
zG|<b!f-7s(#0k3*QQPdWCcb-!%QzemgQl+<wzx$YM}=iZBu^%B#(d+cFa4hc8rGwA
zU{!?=x1%F9?4)->O1cl>DB4&Oqe!XgiTjB*OB|^Nk!Z>%j27+65_iY$L7fm63?iw#
zJq+U4{?vxgPexq(Cm$HPS?5~uO%m9QS<DBM(QvnWAGGedM8Gn14$aMRf6F@Y3@W&!
z0+Z=|Ui=H_JDm!9%-XS()UW+&WANp<bd2$~=NYlC_hKH+NaIG;-Iub!UC2TuVS3eT
z;R|mQ!PJk1G*`L@WD!3a+-IP<$f6ikr-P{@J_;UwG1i^oI0>UXuUqBvkX`Oh(wJ7u
zI49CNv$`(RJkP7;Pd_zZI8zr42CCBCd~LeYC8I8X*-@lCW9%0^rVEjLh$j!W0?4nO
zg{bW6;MaHFQR&9BQpzb&XQsqyvIm6;m0q|}XByokNF|n|N=h7`z4^>f=SLp$4>$nO
zzZ-xL<d4Xb|1Kr}RZvD00tG_okA<QCuW$U=1`E(?wdKn8fI;tmM9V(xbIn#CZ_~mR
zLl2t>NJYy56#BIACtTzKj3MKfN2OE!#?0s8+TzyxbaTkH{n3<}-9kgP*4NiD3nP_v
zl$q|?mZRB0_jdrXHAXk(=B|Clf~!eU3(70`9;chGtIoqA*{<7pNvRZasXxx6Kwa;=
zWG7rLQZ~uJr=EVgSc~-(V4JpT3^UIXN1HZNt*mDN{*fAtj5jMd<>$MZVqxvD<6>3U
zc#|x93li)K11;^SNg2)azg+8XsV_+NFMcrh;G0}5`TFWmo)TrcOli5M%tBIjwLAp~
z8bhTHO1u$Rt?~>o<VjGp*q_>(FJ`UKiWaVp*Y<BVsoseMBQf9KUe@{rKO=aP^fnzt
zs%j*5bt}PM%bL^o=}yDUdX28^RAmgG3@Z;ma4s_C$s}>GS`2^P(y25JQ+xRK9v6c<
zgtpV7*s;oDgySg=0~@G=u&;glz}o!w91&Z}GA$uBIxcYac9{3@N9z+JukX6fqhhX>
zbEa4s-WN0KpS(5_H1=H1L9h*rH4uhDIm-jGt2fDko{LQ$u3;<P5jd1Z+C7kRJMk`9
zA?5@X@_?y<8Udv)hgtUsg^$TGnS5oo*3Pb#$YVXm{Ne6eo!YFLfG#N))Hjo>t)^#f
zF3Y^GPaebVfdtQ`5ot=U--O&76hDS0H4JRZ;SWHh65JR0>uL?95%I;qDV$1^BS`qZ
zaGy`8$Q3H*6(^v<an?<2Nf3FPM)K@XRauTxoKET3X<3oEz>Nb$&MskpS)fKM>89f;
zBU=<m-p)RGEoq&g?;fUDWa7?@#MWu(xu~r-&IyeM(-*a-JN8qXpRD&CL<>NA_3;OM
zJarB0ZWlm<$y3`P)zPb`3<)!J4koOYV`NTOD<N~AEbcI_@dUi;%!1H^&M{=nm~3hn
zTsOaqps-s_6*JSS7ng@jmFQStbwWRS{KG^;*CD8Wzh=&Qfhua<qF%oELpx>}zWO96
zdP-DgmsbW7gwqv*z&78cC(>1t$Z8EkfzK#GRRd~i_%-=7!5YSf)6LnoD^8*!rd^UE
zS49VdPR$^`eH*lG?fts;^S5r>U^3Yh1n<9UHNUOC2ART8oPvNQhwc1pND7`LmIbMc
zD_Vo;!p3`>p$Vogwe5N<%Z@%qld*!(c%cgiy;U~2(BSPhxzpu>+m;Gc&aVAZ#nnoY
z#|ZyrGU(jY9w=$K-hv`1JEY!}!fX;OoMH{29)J{om@x_=upV{a(4;vA6*ZSh9kWvF
znaY?$>$8J}xrxt8ozA;cLwhZ^2iK9GP!Ah+ORq2BT0bVMm+3DYbX+=36>G(GUb)9o
zDF`V!zX17o_0P&yvw_5mo8`@TRk|wOB2bI~^=wXP<Z2wZr$6sNZ_r?nluWR?5W~j8
zu%bnUo{7vMsXZx)T=KasIX8K)iu&V+$5uv(*d%g@337>YUbtFYdTf|uaJJL}RRYzQ
z<NlW@o%>_~f#vVji`0h_+p{HK@VS?_S4#V#`sB3-uD+15Btwy=w0&Zc?jT;?t3F3H
z2!VJ7^3DKyP*r)?tX@f=-($QNFHiH5xDX^jH3FrheT|a{Uqv8jYNf0Y_6Xf0^>fhD
zLJY$zPf(!Re7HU2MA8tv`I%F56o`OPyc$?WvHim&id{qBBd<`Ww$uY4mBk}@{HW)L
zpbEo8nQk9YO~yj^0OoT}2#=&gi3Imsk940sw?|>br)|v*MM+2?Sdw$46^YM1_AD>U
z^Prw%86kqkClgkH!1wN$<0g}sI$jSwoOtxs_J%ZGg)U7~ZXll8WJD@cbo2zNs59{O
z`EFV3;__{{FYO>YdGJqwp%|uh_YHh+{?C}R``e8187=akma#=pHNxLTL1E+4sY?5x
zw!PBOy(cKruXo&Fd5j2G^(qMQdZ!b;pZj@mRFZLmh({MAmKpPcs2@hm9o2A<9Mzbn
zEm%UgxoR0cH{0qj7fqu0kw%X|DYVgYuEu7}F{m%P=sv?ICgQSUb?-3fI-}5<3;vFO
zH8xhh@Y99;*OXjfKjBe(bH}8rN2Mum%N;3{dDaq4+*^pHDbJbtRV#a4PV!=DG)mKB
z$D|C=g>^wL1(*c%yV4dkC$v$(qx6wQ14fAuX@muoI0a|L(Xz!idwnBxm*tV_txQh}
zZ?07h@s@1q`Zv(jG(KY9gjz!3sqVHJj2gF%beZ+%ypxlr!9wzyd^sA#?X?ltSN5rH
zXqmE+^92e-onC(UCc`b7VfAMLMLE$=4Cu23!_vu>6T2`eCPd<CN2^Djj$%U8lr-Vs
zh?w(@Uou}3Z)kc4)?XpA@JSuPLO(^ysGpQQ>N7^fq?GtNxe15~HIBrO5Gh;UAg#T8
zB#f)Te~uYa%=luoazY0%J$MIu*l3FbPk?=z;RB&5WQP;O2%v|azgI9zVAiDwP>FHa
zujtP^dCwSX8@&^5El?vxk|M%6L1+bsjyVXD>=D@vp2^Y|uf9?}y8@s-D;|e66W0;z
zB%<_d=kRKteh9ncTO@(iBLsM3LwzCi(a*4tn?UJr6WG|=qVyk+e1Dnv2-C%-XKgFP
z3lUeW!eeMuy@HRaf~CxjyE?8~Cy-fS4%|{_UEz~0bez_6BQLQ%`#CygXVo467fhv*
z?K?88v(hD2))D*`;fG<VaB0@0JRoBve6=<EO>+aN<?jyNl`yj~^9IQr_mg{m!%^iF
zy8Jm`UlmqMk`_lhEg(|h{!QCI@RLbCeLH7Zp#s=HT<@x*0$rlIFlj5M>>{gq5W`=_
zWHfafR<HMn8z-kt%Gx*eyxGoH+HY_2rD~wE;@WZ&$ktX0PnmeJOC44nrv<~5tf?LK
zT6@Q|0n^8{y^EQ|E(gQM7W8959Ya@QYmL_l4}D_?eYAq=V=qodax7d*SjR>j6e2lV
zFF8z$wva9!(hIiUVb-0NT@_$*Is7$8u1t&GD`AYh5f^wzt<HUhm>CzAc?>s+99z<h
z9Z#QB1NzZ`B{_fR-DXZ=4$8|=#;N9N&wP+H32@)`Acm2605@qj$-y<rDkfv^f|<VW
zAtJmYy3M<t8)wbkZ-Tr|55EzYAQ=!wL^PiGu^gSu9<X}mwv}kqzF_u!!w($AV9!A{
zmNL6RFO4v|Hp~{_?9sOuoLjemLr0e;D@v(r9bjl2Jg^88pi8?Vgu}2B#()<#{_rLk
zMscFThiCUl-*ewA>GEmfcn$oOY@5YX_=8uPLeIlO&&Pf`HA=do^*#o@bkA%T?u^kf
zqjUGkJhTmGt`$`0Hhvk)zxMPCUO5RKgL8b(O<2qqvfQ(+N7RpLkOXtA7vJudxGwTx
z(r|LKsPofB0hU6<6)y$GsFqyHljy*c2Cr*J-t^Yjqa=+y@ckqY2_R4kQ|-Zjo22U)
zcD`ZiZAuq%rx;se{_2dn6o#s3n2}A{a#1`ROD>=&rLA4df;wt4>7`S?O1pBz39f2+
zMSw8@1@qEN6t--4>a}b~rJWosGaaE{qHQWLnnHDgV4adW!d1}W$`-6AHj<HIqvmrv
zGMep0s4-;11wL$`W1}9(*g6NYFRp!vgdLdtqBc+}w66bL&-(@w8ci|-%4v<llcDDe
zy*f8$r>P5;DyJbP+XB{%ao_%2%XcllHE6G8|0l&kG1ZC3DrC`5x+B8!lmrki9H?jd
z@u^Ay<Dz=T<9VIOwL2<z_Xi{I9pO(-PBm}?6(~WmEB2UL1&SvhU%f<56!B;}Y`NWY
z^yc@xn5VgdmoY2GlDn$FkPIp_uj~@R04ZsCtnrYG%n@31WWa~>Y3hu1<kHux{W~hK
zUKGn!aImz<-fW{|sRFehOmY0PiKF{zOe)qx)gqJHO-HT*b{-$An?{i9FzlaptRmPC
zu4*18v(-DSeVY<Q8)ut(WictDB|0Nr!}4V6$&}^6_fPK#DtjD~D~sI*nRtZ-M3bvt
z^~RFRSYz@^Qwzod&drN>!+0sW5Hc7~NQ}7EC$f@DsPSx9^73H829|sD=*rhvih#+`
zkA6TfcvvYvtXu+(;s$>sx|V7<#D!g}qaolIwHXMqEa}sP#n|*c0zRjobLkWA<3KMV
zbXA&`GirsaF{EKfo1Xlv118@QhHnj{gazAfvebP8{jU|M$gmi0-B<Sg5MO_2ElleL
z?Z+x<Y;1m!aXwA=GzWz4C_}vBlw;-MNm)g%uyT}}fG%31<}4yZ5C*^3dB$|(&a-rU
z8K^{Zt>=A}2+VIY8r<yu$dpCt@NN>lez#uP;i>ycKtFo&nbeez1slvIhCU7VHyK)Q
z+)E5Mg_X><r`c)dbo$)-Q=jpOEb|Qtm2!eJhLLKq>X-@e7`xtgEvv}?GXI8<&nlxj
zT+Pjx-|Ih8Uq-EQ%e%iT-tJ|Srs;UQxMZRihc|>2dD7jF)6A$|ubO$BGKHMIfp~hE
zp4`KVZOAalPi#z};6~&EmmuGN`baMStJp|^6!#8w=$Mq&-Qet3%eWX~qC5V$z7cLI
z3`%)6K(2dO!nw!s$EWZke{_j)gX?s|@~SNqCWkaEpEg2cSW8IL^#l?DZlya#5^UHD
z2fUAb4+>I`8I&c?eo8hua?isyu%S^o!oca7(f!?~aC}X)jPJA&7HG_)mX)H!8uY|k
z9cp`%{V*pA7`-qjC=sf)j@2MtPuXD<x|T-wcc#l+ymC*>eLPVOs@0|;Lc%%SCJAwH
zWV|-H+8{!AO!MPZ+OJ<gYT)@(;09dFZEe0^{j3G~ynI==m@Yvi(P^*~OHNfF)Cbv#
z-;F07&1@2lf2;CPa_K7dQ_C-=35?kO@xI9wh*kzM7|Y};jHzOg{1)<`9}YBBzO>#>
z>Mu&uijB?XpDG;brU!Jjs!PfkQ)gJNC~p!&pI;IqGuBKlHNU3#6%@a^?TfdA_$N_r
zdkUdlzotL{)R(_$><^Ht{C~YIe;ze9EGeOh<l{1GSt_k=2Oz^1@heA*-}A#s_A9$X
zSivKT?75Oc?T@Jg5EVG!@B$0yo8m+vlw_6vrDp#xHTxfGcAopqjBTv;A4W$LDRK9B
zBSl=>KkJZWnG%qt|GS#t4okEB@nUrbgd|^i1Yi6>m{}vKgnoXBDNL=i0u%>y_<{-Y
z@B9Lg$NaD&ixD~CC3xMbgKiq#hVlVLJ?@&i98*DXPEHvD;Qao$fvofGv?)5sI{$)@
zz@K+ypi%#w#NG-+3)BHMDu5&}hfU}|xzst1O)Z`MkV!&iMvD&`9<)|4W{Ij;F8rdr
zBSx+L@yhEbjCqP+6U;y;>MVkAiT{K8Ko;g-jmiRz`tKuks$mFG2e?8=@_iko<u{)0
zvm|0t6H6+vdDcN-G^_0IRC$nL5IH0tsdH7*{2<2PU(UmX=o8YwILK`lwEa)&11ZBl
z_Ub4O5OV(eNIf7H19iZxJeUb~Eq7RTUlawMT&l1e&+w1&CH9aUJ~B(XKo}SU%Qi#_
zbzlr~2%6$w0b^kPzs4Z-e~rQaN5&wYTGt@~+kXN9$aP%QU-lImzKdoHj53DEb>2{A
zDho7Q)qIB^w4)?9$;TY|{xt;_@c$rboxd?@`H+FH)FB<fC$ikrn&NlJb8|EDwNp+2
zpYw0C0b(~k;P}>JMt%P58dU%HKwXrgl>UVd4TyBevN8HiUbsCqtGap_f73{`Pev{F
z@iUOV(7jnDzw&}?;bWDHnd5_gGW#h6AWiuTtJH@Gl+3E6UjKRSQ54vXzh-68|79YQ
zAa-lU8vP$*N=yg)TkDZr!)4cep1A#^BBxNTDA5wYV7TmW;%5N+X7>C_6)2JvN;c|&
zc|0nG#?oE?M`sg6)+gW(*i|V2sG%&uXa@R(%}~-vCcuv@!R2<$<$kzY8-g&L-k$Fy
zsPng&O~IbDR44bG&;XnGO~pRuk4=mvONR|cA+jw=hh*-y59ff>pA0B#^N@gS4<M*3
zm`%~jeXClMel!e!2O)~iu!@7vW6fWu8SQ`^ekt>ATtSc>f}BH0UEEj8?~udw?Ai0p
zhf-4jDAi5l%Km18>F(1qNc!#a6|w}(0XWF1xij+sqzNQAUjgts-s<b?)CT<|xj%t6
zEhmzvpXsZ-c8zt48X*9>NZ-Nq*<S;U8I_vXWk(ePo$8QR0><zrK+z)bbpUjq01^`X
z*FVZX@juL1WQm<@%m!nQ=vpc10lem~#jwr<jVT*H94F7y=LO!bt|g-6Bt7?|!bA?l
z<AcbY^M+XBA;thuP?x#~!jvJvU9rQG#Ow#f1>ATc%t^rFn0t@MIV_vbHHt0bU^88s
zQ4e$$g8&M)v~9h2g@{d3YHa3GEiyg6LAYJcKfkxr<Wf~yA2yv1*X#kL&KehU@?Vky
z@=nlu+qV~cmZuF6;%;WO&+2JPk!6~0Gn1ai75qAKbDss1*ATi!b`z)X0@3Q&sJ|&J
z2yso&2E;gFN@-sc$WFC%do-yO$ZrBxJICLw{A}mL#RV^r;cr3&2B8;S7z)WM^4#6U
z`pvU@05#1AplZI$?v(lFU<$`bBE60*(9rBHfg%OT#?DlU6&QERgl@p37^JBHDwoQB
zij?Jvd^x--*M03%z_im5s{m>o^<yz+@)CpA#ff6AaU@)puD|eqqF)UzyXFJUcP9fe
z-nJ&&V|i0sr^zOf%yE<ou8qxCcXMyj##lwL6&O?5I0M(e<*#EwH&eM!>aL)x-}CG4
z$5@T+)y&y$u0}9M>SBi*fr10Fy4<Bk^II1cKuBTrzB!W=h*wYQ2k2u-G}81F441~<
z6C8c__K8wG-t50g_vXi|-RgzNi7s;>t1Z>4wauX4U0*o`dZ8-p5g<VrHLK17Kv=xx
zVpIK$+miPXf!ln{p=PPKlD$%C_3O|wN}Lkdm)|lFMwQ=s4t0g8N*tgm`i?YnAdh3M
z*l9I5Thfk!f=)5ki>Fk+quWJgE#Z3|JGin`F-S>IRK9OHZuBR(e#u#Os98|t>bV5y
z?9Wbf2%CNhu<08onO(i^&!?vjoj~_C0mp_N(ALVf=W5GbP(l-#&EW_SK`P*|CguFw
zv`~e?!k;)4>ef33w|)`{NhRceTelDcNb&Q`l^F+*6FuqDMiG{j(fwsB&_!;^f=5im
z3f7*4kM))F^zYJo2rJNQe+^Yr8{QvR^c-d{WRUzFLrFh_ri+J2oIX%2nI-AHza?cM
z5W^%I382`y2WT-ev{bvOp%UP+ktB{RGuPm;y*8w;q{@^h6i{Lc>+jL#HSU5JQJiS<
zIF)`shJZ(%sR$7X{ReY9N^FDh^zs3;95Rb=WAv8vjwywvP(FhPu7x50O^2~m^w{lT
zt6d8avEa?f$KL|7o^>E^f{6n;iw~&wY=UxHMJGfW){v2kAgJWUb8V{G49WzXfT7O@
z$|Pwo`@Mk-2(49h3nhHMJ~h{U^UXl;Q3IwmYKOQKU2H%E`swH>EJ)rk+D1RU$KYBC
z#MtW>mi?q!qRlQ6&z-0k-`J6RvN4dx?X;;0cM7U5)o4e*9xhvLzTUL?KO$9QokUmR
zLt73EkcM!H_ElvE>BFtsS|83Coj{E)4FY|Ncdn&{d&xe+y2m+_`H)T~!GXyaO^UqT
zX|}#|Mk7$p82a8L{M`Wx9CQIoBBWZ1xuc7ezS`iGB2TS_BVySZ;s}Hs3W@9`YgeYL
zbM-*km8TZ@(${nr2&%?uwp2D-A5|*9HK(fUEl5l#{wMlIKq!Y%;y@Rc-loau^%t~Y
zpv~B>oKo~`=!!S^6CjIz6oSNg@M(zu_K3MMp!f=IY;6PTOhrTIZZ*Yrv2HPeC&NHc
z{OH4H8B~8dh&U4N^A{Ele_iL^DDOP(Do%2V<MeuMJxOth2gEF(!SGLiN!-n9k*bVC
z^4l}i3mXDA;%a=pJjo<T5m(>n^8H;;z?>*xT2*v3olohwu3qYfPZ<EA(~)xXJP5J>
z<v)A%U<U2DZRfc>{dH=rnIV9j9`w(T@1C)Q5V$6{C**(%td5+``O>e4={+E#G|%$B
zsBrR_0(GH@GJ~bk=j*SHK3Lpj=>V<Me*a}(|EsWk<F|laY<+#cJH17l^nnqSGHXuX
zDPMvWWE}~FKc_%ZX}YE=re1(KLLyRv@y{rck@^JypGD;aVM7;tErQ9|1ohw=X&m)d
z9ozcu!DQyna-L`zItd6HI~f@AMQxsGP^nWC1uIi$yikR*k)mN>cVO$I@VmWg(nC<R
zu}kjqxjI^D2_*u$wM^!U*A^TQi87vQm3BcuL}fT<Ev<&{$o|F9=H!Cc>Coc=irw5e
zMZyuFyDT!T^fCi{<{=2Z@v<54KsQ0TrRJK@`%DR<nQY7@Keb^AyDKcne3LMd<#W?#
zSa`-?u}&fFuB53`)h!)vQPcZnu>`!&ke1A7>C<v{d97mThKetW!&;yw+Z0nzYTrpL
z*&X}wzG=zn&#tiqq#j-(dAhu-VB5teZi6Y{22+4GV?_JuDFM|w&YfIgTG)nCaE6s%
z5w_ON<)Pg(u4Sl3(@iA_0<-5lDEZ7L-+ojg?E|;AXnwTZ?n>ZR-0<NAd!^N|!ryAk
zeDB*B6v8SfsOOiEvj8sgjl09uaZ#q$#%nMYvb1F?e`^eco?(CvGa^m(LF7XE<V6qo
zo_iIW?N5llTBVPqagNaB;Ln57qU_;f^9P;6(DPa92qLm61x%%+VS!ugaX=xzWGBr+
zI_0#PotSr-)|)E$3W-60udlI<U-^qOTfF82w&C3QA}AqQWqJSwp#`YqZUQzh(?Wv_
zD=7Yka_<&bAz2NX9E;WO0eDhP^H{|U?<qq|VR`%5uGLs<N=r@p`fus9KR#)>^R}|5
zSbH8drF{D9l5ikDYb7veFlcGA1Y`pOafxdYZgS@0VeK7=WU3(DF??afo?jXd@y*xU
z9^Z#kB38$BNga+W#z`aV;M)wMH$YZub2JVS6THhJ^u2QcwR-%&6n>RbuckO`W|KjM
zSW|F<bJ4w%p`F|M2a_khpekKUk$MRW0F_yLFM%rJFAjoD8ucNO^^wInd*AA|)qs@k
zZ+qR#3?q|BSAn(x)MYa3{WPkd4FSQy6cklW2z{=M#+yCePQfZp1HR`+?>RCahv<pE
z`%2IzXc8NhAM7TO3x1=?7Ofx2;N^^s`T)WTZ389D-sP-Q`k^H5Z%M-$yb>2AfIdyt
zk_++IK5mfWn|d}Bqkhv5NNA#ME_l1gI$mw1QS@<DnaQ{-v~KibLip8jU{IM9wt|7q
zut>efT>Mg!2C{^G%pG6z8vrd7L7;^rDfHl31k_hj5%NIsTp|4;{DsI228C>SIDY5&
z@Ege#P%|IK2P}e%DEOnGr#RY0ls-9B-V6jl{py-Zak=1)jx6Z=;C0D<K<Nk&R*h0N
zz)zmtDWB_cz<lkckuntqMYC@1p1Ir3$fn=X4JD}l(4R<;$EfrAa$psAHouR*J=gi|
zbiU5gb#o&ug03!bIuQ{~OIzKw$7yyg6(YmB2oKR9%BmbEg)2kq{;E-??;8FIFf@B^
zyp74pnW%XPypG!QEk-gQTfO<t^CE*WZpq`=acab{*)~f>`}Shr3L;{;?I{<W4tOQ2
zsMaL9w5si`%2Q7PY5>*67rzq@Atad5mH_6;*Ba0W%X3#iDL(VbG$43qvdH3HAR*W`
zp@MluFN(Ina<rpQyYfKCl2=6Q+{}~Ss4X(;&RsY{0da|e9+uXvX`K%cAFCUQGbE*x
zeAqbcr!8ZfEYhewVcGTuBt>f`G-;N<NQw={*8+mS?wpG3x8}A-ai}v1*%L+oBdVv;
zhpB(lhaADO07x-&ZB!amnZT%)x1?WLWk;ibd{>O5wuaJ2Bd|w`_Fg0!#a~QTMirDK
ztyWBVNGP%-UebSYez@M6lRAnCaykT|zB!2cIQlb|DT5~~W-Eufjzs4%Vgvy}y~vBl
ztQtf|=A+qSu0LCWem3~9g*Nlr03rN~m^0y@1TB=rF9;)u^=AaP&z-v!aubjj7puj2
zuqt&3fHZ@bns1ykCRE=-J3C77;fHvl$wF5^xMRrb+qDmz;u-Xw2HXHKrb;g62=t{n
zjeG`zUL<_3@0ri*lWD>e66+|uI1y5fvpp>;%xEaQRPi`%t)q-K%pw)$pLofgtejMD
z+{NFP=~iQ3&ESXSJ<P#mdx{#%^1R3bsInKwC*D`S5`_pNB*d=)OJftr42CJ6VJpyO
zAeFI-e!yZ@U**vp3SD`l&SR{J2UlJ<22u32TG)qw{zxZU<qNbm!M*O78=_&`3GlJn
zEnf9%>KGgJ{U*Lo-sPP&Nm8pQA(lC9F!=N3vEsW`&x@sx(hhi{Za+jTWs?`NoV&Ho
z^2&x&LUYObc4_Yor*7j6?McZjqm6ShYk4RCM<CWY;TS9SckIXoP115aZ3;(}=L^q-
zG}4rH6?KztI(k%p&KIYLjoSJ`7F(fpmezU<z|bXP=mQuO5tOmEGnL)XiZJ#|&IDm#
zmG6N;aiz&CXO`+&)uOQOkojk-{A1<(utIX3H-8}mSv>czX9}&BpBKi1PnE0}KLd!H
zI7{~r#7*`A2xh>sALU;~5u!=$ewM)Mn#t>B>pD1o;f}a42758Fc9;UD1q3zQGBQ#S
zBG}(SYC1^RNAMI^|CO*aLNL8C<ycT_{TpcHqXa<X>EkmgFF3rb32k+CI2@0E4*qy4
zB}yy{z7t%??x>3m0sYz#8BYEI{a(d}3MB)`6G_EN68q1adyN1p;Z*0~V);)@M}kTL
zu60hl_-Bkk100h<$M9|E%k@&hAs$mCQX3#eQ5Nk-jRK2?j|EV-$<x3cu?r7kfS1KV
zr97X)l@buaB3uzT_31(X6`p<)J&Y81zbuSo2!xmP_lHFUM1kg9U;fo5RDUwi4+`kq
z&OdD;hDm`$d93(qGKi4FJYaI|%|Hw4W;<yu0aE&g0f81qOdLEa=F?OdI1FULPN-e%
z58$}oK<4{!U0^x+CE*${g-Da$UT-9&0mqUI0SCY_0IZdQb?tU%;Jk@v2P_r+&A%RQ
z^Ti^tA<EHB2=B`GzWSW^8ieC=fUPG7&YBp+G4L|ll~q50I3AFs7DHeY0HK%&T%RH&
zm>7UGK=a*><L`cc%tdtvvXf%RYd{hc!|a%;vPc6SAhq6UD-~29Qvh4aCTI;DhEapK
z1Tt5Wp4EiLpV<+EAal0b97?l*xW7ywzLUh|fOtcn>kXXKZ+Ldez{I5R9@KRbDyT>D
zc!C^$b0o_SqU{5G>P4^f%^hF}>t`z)7=F)quLFz(zC)lI0}9_!TW>-OIGJH{LPdcc
z<W?*I*eC~>Pt`TZtx0=kxc0w}4+3v`vLB%aV$K#;h(7`+TzvJQ4vEE+h2S(ey7vAa
zfL|vI%G*OgUNi)}ZERxB@G}CQA721-#TuX}IK><mwFB#W3ELh2%(>%l9@?Bk4*}`)
zHP8v`z<uBU3_zP}aOlOLJn#OxYYG63Qa<2uinmmu70rK9D}v~lNUlFec(n%_^MHhp
z7xNbYNaj{N=~DXojR+RXjozsVB+=_Y-~<fFOU;f4XY!Gkf~bEGd)dT_W|t78#A1Fo
zLbC^6kpRIPo82EA8<GlmlkAS#n6ek-G8O%5pA}zP>S?Mo)~}=AhMdQJy3lkH8#n?d
zi6lc3wC(YNITlShnOCu^TIkx`WYeD^Aff1vF;yLvi+Vq<7*Mk!hPGhi`U7s@^WY&V
zDz_^K2qWw6Y+OM{i~HTHZW@gub$XQs=WWS0)N?}T@4}nF#4{am%A=0YR$JMq?KyRB
z_Vp7$sD|C)ST(x9Sr>Z=dpNr2i0uD+BB}ggj}E(htH8k>f5qSeNt)z<+op@>;R86K
z-*VB*=6{an$N`T%1pKWL*051$a0<Ch;*W+Sf@VMlm7Olt8v^u3!{@0GiC2lBR(+an
zL*G}c>EUO$Dz<l5$IKi3)fttq*R>;puil<4!m>N#tzLv-)7yPky$pFxb(6^gs)q4O
zK_sN5XchSgh(Y#nm;u`fNB49p6#RHP#g3X>$2~|lHsTT0KKE}szk4x}(>`&!QvlJ%
zmLc<DP3_D#0S1s#=EnE&!k}}-!=4c%npJgSfh0kfjVBrgJROrbh)RZmCi7)S+G#eR
zDEIfUZuvf2sTZ=fmexm$4w^06L`*6N=PtcLks^gLf*1%odL@|k-YUO%zoNlHnTb$I
zd3K9Y{r5MXqbE}{qHQ?9vUyul_x-DonTa7evNm-Zk#O~owP8lMOV}zXP>M``{go9C
zhPu&Q>R8r4zw$SjD-?<G9sYGBr@bbFg5cM`ti1@Ny5ZPwSH7s10z1qD+FndLe1<Tw
z#44wH-VN$QtQ6S$gOHP$Oy9jx-<>GeQ9s^v-2i2l>azb&%Pho`hVK9=j@Y~e!t4Yo
zS|QLg52*J5_OM2k`?2vUfKY8*=%yk;Zpvr72tuti5Mx`b?Ln4lme)zxH8>yxz}@7n
z5<Nv*5C{aYLzzH$FRdNbSPCF52U?FG$6!aNJt1@_c7!CztU#&7+IoMXV`^~rO~b(3
zY^qcbubFqs4Gym>JKLKYO|rW639U}6PqS9NqnUluf_%Y9T}Q<MY2VJLU*K>EHltq-
z=T1={8M~#oC*tT1!C3@2^&0iJ!r8a;Aodsnd<^5T1naCDPnK6anP^~!Sp$?3OvBrN
zOx^?>@e}AZ`N`R3d#wAb-O?f;!gR7(j&*qf@HU1I!V>^TTd+b-efZ~yogQPG|ErlZ
z4~KGZ<2X^uHc=|4Vhod^#a1eeeTXAQoRU-7o03q&gp3$6jckKt$!^G28Y)G$B4)@I
zM`cTnkiCW^y!X>}z308I_uu!Q_uu(v=6RlZ?)!It?(g>t*ia=8L@T2uPX{>H{D7Dt
zjUW%C$9Yh#^Bih|n4fU>fcj{V(tHyy0)$0Ge`o&QZ;jWnMWQ^e2R-<O8+H7gSqQ;A
zcM7J$DPOVOT0TV{$QWlJ_t`1bqs0EPI!N^%9R1dA)OznI`3YwYKz8b<Xze$|r(nO0
zss&B-1<&W>d4bNXF4CDgyG5okFEe&wyzBMApP-V}A-5X{B||r<oS3Js!ZBu)CUQU(
zp4dV7rqacA=hV&Mo|z9oc1V4u-^oJT=G=gc%8A0F7S`Q!DOTsH5+SOP6DFP4gR5if
zKtV;${-e3^mhU;je!%W~cg}z!goJp~k>DkAGxlz8pxsfr*v|9NINcyz0s9rYRth}k
z>w8&}<vP1?f5F<|(owPDMw<VR@%&T-;v*_MWX?T#CH1gZdTV$my}o%#4=gS=)q(yR
zl*wL4DT?-KJa`A$5sIIO0-)NTM~t;46LoRTFI_rw%|?OYsWqv&akgHk*0oG(e~Q#-
z0qp2RY%ll<JyJtpgQzO5xP!3*VM&n#B{LXev7kxxu8YxntA1oiZt}#M7E;4$jA?ns
zM6#A|VY1$hYJcGGm)E4#oWrK{aLFCezpZ;P9BS~gagIq;3u3P=W7$|K`=4F2<mn!E
zX%sE<{#bv3$vZ1(NPvUJ{gj*$;WFU5DH?4$U9)@<mR{9Md5;Yfm3cK8dn2}OYkOF;
z`hK5%c~dz!N|7*tC%q7jaM8WH&<!Gm%EsJ_>$}0&Oa@6?Due`#Xh-wnyN4}xmt2e5
zrvVY4<ZpOx{vNV3TH#)}KW#q6GMBOeWVMX{u40WB?ancFevG|>@2|Y}RG3^U{>0k5
z2paz#+v=Q5XP^U=O>RC9Uo5bf{8Y1!cmWPtP_@`$`C4+K6D-i~5Jp3~)attou~AOw
z+L^~U)>bJBXq=T6HT>$_uUF3jyva)QCmKa&!P{%`%^R<h7^#lF1Soy##W3P!{>eO1
zqIjpOsio-^0H2gjYBVzjRzIzoj(ZvUNwBsOC4U)7@?g-!{2XDo(kSjraM0w$?c@ya
z&`nfW$ii))?waFoF#UqyaDUnwGU~V0`Ip*l*rIDKw97mA*>J?(762k7m;hZ$Ju1Sm
z-yjP^{UsfBc>7r&Ca=Twn6?(SkS^!@)5aQi);U$k#K*8;0P4fnspvP_{`0Oy#qkWM
ziY`m-{c*BfQ$Q%KprpL8_|Zzssa}u_ql)Q#ZYi^mdFZBj0?SqM*xSJz#!#bS%?L{^
zsdHQ-;r2CIvy&*QYOjjF62f*SxtEDDCQ`F!8+hSalyg7*J}!gD!sChU7dbM!3SP48
z7cqapoG?xmznLT<X+l4ff#ReMKl$%vcP6@SgKdo7D75HSWcxy|^UE=1yuwIWyit$v
zIuD2~lpg1)QI1E3%1Ni=4O+0wLZv_rddJ39em8w?HUFAjxTo;-dcqwgn>`rRhwlM%
z+bu-r)_=VsDso%oH%vuvmO<e0P)2|^f5qR4e@@E2?xnL^Vs#Vy4#pvJ2UhXYrmf{Q
zLYK_)+XT4;FU2By5MfPt&ku)h#AP^v7T<}#TTRNK_C!|^#YJ#R-2o?>xgv*h^gEP#
zsMGL=WUFxLvO#`63qI9FHTg!r`-@l%Whgp^6cG(1nhx-LR@<QwUh^yHEGrjTTLJIx
zPESh3CpN)~u3o&`R7jD9+0Ao4UF%*;41gnK$&5mE4#J?2s4qa9E|cDedHqm-HYf%K
znujV`<4t$_CbXKnDo1EAE{D&h?F{KpUW^Givdtopq_^p268e7T)d-A5u;6lRC6p)4
z8L*+0T+#<k_hf88O7Ev5{o^Cra0(=>IAMo^W(vL~8~+tsobI~P+8uRB;tNJz9*H#S
z$9oUyFR#0GHPsytySlp)C|cI6={2PRYP6%tk0UuU6*AW1=R7nbUalY(C}XGvN%ltU
zR|>VI+dAHVr^F@I3l0+U4@xA2v3YPv??vY(-BEbQh{3Hg>rxL6`X{Mc(0QY^0;tHh
zv>C;hJvw1DH_7f$E+0pBnr}L*LGz_=2jkMG5J`)XesH%>9SC39q;r)qo^`8~a3z|;
zuiuedETT!1T`jO9JFnM#rUj8i4ad=Gy79+)TzTz6<MId8QtHRTD_>WvRG^0PK5ad{
zP&Q?<|3nG>Dq~*K_SNPf)rQJ8HCL-zG&SQ@@ov$Tu0iPspBqm8x*Ve^CwH-C$#_1m
z={}!lS=nQ1{lZ<F=lC2eZY!DkeIRj|W5!{J&F$I7-U2+mrIC2ey_`MP`J!%LOW(o6
zx;%0uQBX!5A&pVz3FD&a^49nfta|!Jp9!ZohWn%@<v*5b0bVZ}Q!m+q(#t;so0sJU
zIm2KH=2N@tp%7B0kofTeD?UI7CF8Nb%#O4qUpoOKSVHHfT`c03WBF|g&tu^-AMPO3
z+K=`9G5d(3lG^96W7vd2?pUl!xT=@k_QbRQeRV~iJ&N7Py?saWG)?ydW14J7I6F8R
z&y@aI`7W_DdF)h{O9N8KuP{|YJ|9=?Mc)$oU4~z;rKDL*iW?^KQ_lRJBWB+g9bDfa
zRCt%7B#8EExfny^l|{|S>!ulZYi!5WiR<i`Rl)WHn5P6_WrUl8Wyj#m;2yKSjae*n
zZ*6W1nTM>eDZ+}%&i4bGV&yb5`B^CiZbV!&w=Y$6M&h89s4{!q$O;*?>)Oh6*KU=e
ze43c>M$3jssuNd`Zo6#3CSwbQ7Vp8R_s&0X+^ed%bB$<c*5}n1DcL7KyXe`T8Inf2
zD<OTJgNA-pRaMobuJVYC%^q-FJUZ`+E~p{#WfvZ^)PEz}EUjc34h!8=+b0?u+f@_m
zA>+<0cymwJn4^HIcjU^W;-Zcu$!;T`eY_(MZDZ_d?QK$d1m_=nNH1#FMPg*W&G;;7
zEF~{yXD%D<2}vw{F8pCI=L+jRDVs~UVP)F}lj>Aph37>17`tw!V%c$bRJvTK&iLCc
zY1`K<e^3k@-iE5@m6fcfL*C_nQGUFgu#uHp7bbRG$l6}<)M)vpF@pq6b*YV;i8oNS
zvyL_^{h=lt35i2*)8)kqxc|_S%^{^AK9pYA78m%>ksT8&56ocnn9&b!X~I<5h(LTS
z*AAD_7weGvii=Dt`vl$u@*pFYRQQ_<02pb32#OnBKfUb~MfqgOI}BQO)`Pj9pH~QS
skEZ`Io%KII>fd6?|JzTnX|-zt#QVBJJ*F1xA=H}Bj9_W}z|fKQFB1Zz%>V!Z

literal 0
HcmV?d00001