From ead41055cad633edd82f915ef368f1b4ec5104c4 Mon Sep 17 00:00:00 2001
From: WeebDataHoarder <57538841+WeebDataHoarder@users.noreply.github.com>
Date: Sat, 19 Apr 2025 00:42:18 +0200
Subject: [PATCH] Condition, rules, state and action refactor / rewrite

Add nested rules
Add backend action, allow wildcard in backends
Remove poison from tree, update README with action table

Allow defining pass/fail actions on challenge,

Remove redirect/referer parameters on backend pass

Set challenge cookie tied to host

Rewrite DNSBL condition into a challenge

Allow passing an arbitrary path for assets to js challenges

Optimize programs exhaustively on compilation

Activation instead of map for CEL context, faster map access, new network override

Return valid host on cookie setting in case Host is an IP address.
bug: does not work with IPv6, see https://github.com/golang/go/issues/65521

Apply TLS fingerprinter on GetConfigForClient instead of GetCertificate

Cleanup go-away cookies before passing to backend

Code action for specifically replying with an HTTP code
---
 CHALLENGES.md                                 |  56 +-
 README.md                                     |  40 +-
 build-poison.sh                               |   9 -
 cmd/generate-poison/main.go                   | 180 -----
 cmd/go-away/main.go                           |  11 +-
 .../js-pow-sha256/runtime/runtime.wasm        | Bin 234056 -> 287421 bytes
 embed/embed.go                                |  56 +-
 embed/poison/text_html.br.poison              | Bin 198389 -> 0 bytes
 embed/poison/text_html.gzip.poison            | Bin 5723373 -> 0 bytes
 embed/poison/text_html.zstd.poison            | Bin 1786199 -> 0 bytes
 embed/templates/challenge-anubis.gohtml       |   8 +-
 embed/templates/challenge-forgejo.gohtml      |   7 +-
 examples/forgejo.yml                          | 247 +++---
 examples/generic.yml                          | 125 ++-
 go.mod                                        |   5 +-
 go.sum                                        |  11 +-
 lib/action/backend.go                         |  80 ++
 lib/action/block.go                           |  36 +
 lib/action/challenge.go                       | 178 +++++
 lib/action/code.go                            |  47 ++
 lib/action/deny.go                            |  31 +
 lib/action/drop.go                            |  39 +
 lib/action/none.go                            |  21 +
 lib/action/pass.go                            |  23 +
 lib/action/register.go                        |  20 +
 lib/challenge.go                              | 128 +--
 lib/challenge/awaiter.go                      |  47 ++
 lib/challenge/cookie/cookie.go                |  38 +
 lib/challenge/data.go                         | 171 ++++
 lib/challenge/dnsbl/dnsbl.go                  | 149 ++++
 lib/challenge/helper.go                       | 164 ++++
 lib/challenge/http/http.go                    | 158 ++++
 lib/challenge/key.go                          |  80 ++
 lib/challenge/preload-link/preload-link.go    | 128 +++
 lib/challenge/refresh/refresh.go              |  64 ++
 lib/challenge/register.go                     | 252 ++++++
 lib/challenge/resource-load/resource-load.go  |  55 ++
 lib/challenge/script.go                       |  41 +
 .../challenge.mjs => lib/challenge/script.mjs |   9 +-
 lib/challenge/state.go                        | 176 -----
 lib/challenge/types.go                        | 112 +++
 lib/challenge/wasm/interface/interface.go     |   1 +
 lib/challenge/wasm/registration.go            | 186 +++++
 lib/challenge/wasm/runner.go                  |   8 +-
 lib/condition/condition.go                    | 124 +++
 lib/condition/map.go                          | 158 ++++
 lib/conditions.go                             | 111 +--
 lib/http.go                                   | 499 ++----------
 lib/interface.go                              | 158 ++++
 lib/poison.go                                 |  26 -
 lib/policy/challenge.go                       |  18 +-
 lib/policy/options.go                         |  18 +
 lib/policy/rule.go                            |  32 +-
 lib/rule.go                                   | 141 ++++
 lib/state.go                                  | 729 +-----------------
 utils/cookie.go                               |  18 +-
 utils/fingerprint.go                          |  32 +-
 utils/http.go                                 |  45 ++
 58 files changed, 3258 insertions(+), 2048 deletions(-)
 delete mode 100755 build-poison.sh
 delete mode 100644 cmd/generate-poison/main.go
 delete mode 100644 embed/poison/text_html.br.poison
 delete mode 100644 embed/poison/text_html.gzip.poison
 delete mode 100644 embed/poison/text_html.zstd.poison
 create mode 100644 lib/action/backend.go
 create mode 100644 lib/action/block.go
 create mode 100644 lib/action/challenge.go
 create mode 100644 lib/action/code.go
 create mode 100644 lib/action/deny.go
 create mode 100644 lib/action/drop.go
 create mode 100644 lib/action/none.go
 create mode 100644 lib/action/pass.go
 create mode 100644 lib/action/register.go
 create mode 100644 lib/challenge/awaiter.go
 create mode 100644 lib/challenge/cookie/cookie.go
 create mode 100644 lib/challenge/data.go
 create mode 100644 lib/challenge/dnsbl/dnsbl.go
 create mode 100644 lib/challenge/helper.go
 create mode 100644 lib/challenge/http/http.go
 create mode 100644 lib/challenge/key.go
 create mode 100644 lib/challenge/preload-link/preload-link.go
 create mode 100644 lib/challenge/refresh/refresh.go
 create mode 100644 lib/challenge/register.go
 create mode 100644 lib/challenge/resource-load/resource-load.go
 create mode 100644 lib/challenge/script.go
 rename embed/templates/challenge.mjs => lib/challenge/script.mjs (89%)
 delete mode 100644 lib/challenge/state.go
 create mode 100644 lib/challenge/types.go
 create mode 100644 lib/challenge/wasm/registration.go
 create mode 100644 lib/condition/map.go
 create mode 100644 lib/interface.go
 delete mode 100644 lib/poison.go
 create mode 100644 lib/policy/options.go
 create mode 100644 lib/rule.go

diff --git a/CHALLENGES.md b/CHALLENGES.md
index ba7985b..abbd33f 100644
--- a/CHALLENGES.md
+++ b/CHALLENGES.md
@@ -13,14 +13,15 @@ For example, this allows verifying the user cookies against the backend to have
 Example on Forgejo, checks that current user is authenticated:
 ```yaml
   http-cookie-check:
-    mode: http
-    url: http://forgejo:3000/user/stopwatches
-    # url: http://forgejo:3000/repo/search
-    # url: http://forgejo:3000/notifications/new
+    runtime: http
     parameters:
+      http-url: http://forgejo:3000/user/stopwatches
+      # http-url: http://forgejo:3000/repo/search
+      # http-url: http://forgejo:3000/notifications/new
       http-method: GET
       http-cookie: i_like_gitea
       http-code: 200
+      verify-probability: 0.1
 ```
 
 ### preload-link
@@ -35,16 +36,9 @@ Example:
 ```yaml
   self-preload-link:
     condition: '"Sec-Fetch-Mode" in headers && headers["Sec-Fetch-Mode"] == "navigate"'
-    mode: "preload-link"
-    runtime:
-      # verifies that result = key
-      mode: "key"
-      probability: 0.1
+    runtime: "preload-link"
     parameters:
       preload-early-hint-deadline: 3s
-      key-code: 200
-      key-mime: text/css
-      key-content: ""
 ```
 
 ## Non-JavaScript
@@ -76,20 +70,6 @@ Requires HTTP and HTML response parsing and logic, displays challenge site.
 
 Servers a challenge page with a linked resource that is loaded by the browser, which solves the challenge. Page refreshes a few seconds later via [Refresh](https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Refresh).
 
-Example:
-```yaml
-  self-resource-load:
-    mode: "resource-load"
-    runtime:
-      # verifies that result = key
-      mode: "key"
-      probability: 0.1
-    parameters:
-      key-code: 200
-      key-mime: text/css
-      key-content: ""
-```
-
 ## Custom JavaScript
 
 ### js-pow-sha256
@@ -101,18 +81,18 @@ Has the user solve a Proof of Work using SHA256 hashes, with configurable diffic
 Example:
 ```yaml
   js-pow-sha256:
-    # Asset must be under challenges/{name}/static/{asset}
-    # Other files here will be available under that path
-    mode: js
-    asset: load.mjs
+    runtime: js
     parameters:
-      # difficulty is number of bits that must be set to 0 from start
-      # Anubis challenge difficulty 5 becomes 5 * 8 = 20
-      difficulty: 20
-    runtime:
-      mode: wasm
-      # Verify must be under challenges/{name}/runtime/{asset}
-      asset: runtime.wasm
-      probability: 0.02
+      # specifies the folder path that assets are under
+      # can be either embedded or external path
+      # defaults to name of challenge
+      path: "js-pow-sha256"
+      # needs to be under static folder
+      js-loader: load.mjs
+      # needs to be under runtime folder
+      wasm-runtime: runtime.wasm
+      wasm-runtime-settings:
+        difficulty: 20
+      verify-probability: 0.02
 ```
 
diff --git a/README.md b/README.md
index eaeb121..b5ffd04 100644
--- a/README.md
+++ b/README.md
@@ -42,26 +42,19 @@ Rules and conditions are served with this environment:
 
 ```
 remoteAddress (net.IP) - Connecting client remote address from headers or properties
+  remoteAddress.network(networkName string) bool - Check whether a given IP is listed on the underlying defined network
+  remoteAddress.network(networkCIDR string) bool - Check whether a given IP is listed on the CIDR
 host (string) - HTTP Host
 method (string) - HTTP Method/Verb
 userAgent (string) - HTTP User-Agent header
 path (string) - HTTP request Path
 query (map[string]string) - HTTP request Query arguments
 headers (map[string]string) - HTTP request headers
-   
+fp (map[string]string) - Available fingerprints
+  
 Only available when TLS is enabled
-   fpJA3N (string) JA3N TLS Fingerprint
-   fpJA4 (string) JA4 TLS Fingerprint
-```
-
-Additionally, these functions are available:
-```
-Check whether a given IP is listed on the underlying defined network or CIDR
-    inNetwork(networkName string, address net.IP) bool
-    inNetwork(networkCIDR string, address net.IP) bool
-
-Check whether a given IP is listed on the provided DNSBL
-    inDNSBL(address net.IP) bool
+   fp.ja3n (string) JA3N TLS Fingerprint
+   fp.ja4 (string) JA4 TLS Fingerprint
 ```
 
 ### Template support
@@ -77,14 +70,23 @@ External templates for your site can be loaded specifying a full path to the `.g
 
 ### Extended rule actions
 
-In addition to the common PASS / CHALLENGE / DENY rules, we offer CHECK and POISON.
+In addition to the common PASS / CHALLENGE / DENY rules, go-away offers more actions that can be extended via code.
+
+|  Action   | Behavior                                                                | Terminating |
+|:---------:|:------------------------------------------------------------------------|:-----------:|
+|   PASS    | Passes the request to the backend immediately                           |     Yes     |
+|   DENY    | Denies the request with a descriptive page                              |     Yes     |
+|   BLOCK   | Denies the request with a response code                                 |     Yes     |
+|   DROP    | Drops the connection without sending a reply                            |     Yes     |
+| CHALLENGE | Issues a challenge that when passed, acts like PASS                     |     Yes     |
+|   CHECK   | Issues a challenge that when passed, continues executing rules          |     No      |
+|   PROXY   | Proxies request to a different backend, with optional path replacements |     Yes     |
+
 
 CHECK allows the client to be challenged but continue matching rules after these, for example, chaining a list of challenges that must be passed. 
 For example, you could use this to implement browser in checks without explicitly allowing all requests, and later deferring to a secondary check/challenge.
 
-POISON sends defined responses to bad clients that will annoy them.
-This must be configured by the operator, some networks have been seen to only stop when served back this output.
-Currently, an HTML payload exists that uncompressed to about one GiB of nonsense DOM. You could use this to send garbage for would-be training data.
+PROXY allows the operator to send matching requests to a different backend, for example, a poison generator or a scraping maze.
 
 ### Multiple challenge matching
 
@@ -94,7 +96,8 @@ For example:
 ```yaml
   - name: standard-browser
     action: challenge
-    challenges: [http-cookie-check, self-preload-link, self-meta-refresh, self-resource-load, js-pow-sha256]
+    settings:
+      challenges: [http-cookie-check, self-preload-link, self-meta-refresh, self-resource-load, js-pow-sha256]
     conditions:
       - '($is-generic-browser)'
 ```
@@ -394,6 +397,7 @@ services:
       # specify a DNSBL for usage in conditions. Defaults to DroneBL 
       # GOAWAY_DNSBL: "dnsbl.dronebl.org"
       
+      # Backend to match. Can be subdomain or full wildcards, "*.example.com" or "*"
       GOAWAY_BACKEND: "git.example.com=http://forgejo:3000"
       
     # additional backends can be specified via more command arguments  
diff --git a/build-poison.sh b/build-poison.sh
deleted file mode 100755
index 7de3ee4..0000000
--- a/build-poison.sh
+++ /dev/null
@@ -1,9 +0,0 @@
-#!/bin/bash
-
-set -e
-set -o pipefail
-
-cd "$(cd -P -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd -P)"
-
-
-go run ./generate-poison -path ./poison/
\ No newline at end of file
diff --git a/cmd/generate-poison/main.go b/cmd/generate-poison/main.go
deleted file mode 100644
index f7c4bb8..0000000
--- a/cmd/generate-poison/main.go
+++ /dev/null
@@ -1,180 +0,0 @@
-package main
-
-import (
-	"bytes"
-	"compress/gzip"
-	"flag"
-	"fmt"
-	"github.com/andybalholm/brotli"
-	"github.com/klauspost/compress/zstd"
-	"io"
-	"math/rand/v2"
-	"os"
-	"path"
-	"slices"
-	"strings"
-	"sync"
-)
-
-type poisonCharacterGenerator struct {
-	Header       []byte
-	AllowedBytes []byte
-	Repeat       int
-	counter      int
-}
-
-func (r *poisonCharacterGenerator) Read(p []byte) (n int, err error) {
-	if len(r.Header) > 0 {
-		copy(p, r.Header)
-		nn := min(len(r.Header), len(p))
-		r.Header = r.Header[nn:]
-		p = p[nn:]
-	}
-
-	stride := min(len(p), r.Repeat)
-	for i := 0; i < len(p); i += stride {
-		copy(p[i:], bytes.Repeat([]byte{r.AllowedBytes[r.counter]}, stride))
-		r.counter = (r.counter + 1) % len(r.AllowedBytes)
-	}
-	return len(p), nil
-}
-
-type poisonValuesGenerator struct {
-	Header        []byte
-	AllowedValues [][]byte
-	counter       int
-}
-
-func (r *poisonValuesGenerator) Read(p []byte) (n int, err error) {
-	var i int
-
-	if len(r.Header) > 0 {
-		copy(p, r.Header)
-		nn := min(len(r.Header), len(p))
-		r.Header = r.Header[nn:]
-		i += nn
-
-		for i < len(p) {
-			copy(p[i:], r.AllowedValues[r.counter])
-			i += len(r.AllowedValues[r.counter])
-			r.counter = (r.counter + 1) % len(r.AllowedValues)
-			if r.counter == 0 {
-				break
-			}
-		}
-	}
-
-	for i < len(p) {
-		buf := slices.Repeat(r.AllowedValues[r.counter], len(r.AllowedValues)-r.counter)
-		copy(p[i:], buf)
-		i += len(buf)
-		r.counter = (r.counter + 1) % len(r.AllowedValues)
-	}
-	return len(p), nil
-}
-
-func main() {
-
-	outputPath := flag.String("path", "./", "path to poison files")
-
-	flag.Parse()
-
-	const Gigabyte = 1024 * 1024 * 1024
-
-	compressPoison(*outputPath, "text/html", &poisonValuesGenerator{
-		Header: []byte(fmt.Sprintf("<!DOCTYPE html><html><head><title>%d</title></head><body>", rand.Uint64())),
-		AllowedValues: [][]byte{
-			[]byte("<div><div class=\"\"><h2></h2></div><br>\n"),
-			[]byte("<span><span><p><span>\n"),
-			[]byte("<p></span></script><h3><p><span>\n"),
-			[]byte("<div><span><p></h1>"),
-			[]byte("</div></div></div>\n"),
-			[]byte("</p></p></p>"),
-			[]byte("<h1>Are you a bot?</h1><img>\n"),
-			[]byte("</span></span></span><script>{let a = (new XMLSerializer).serializeToString(document); console.log(a); let b = URL.createObjectURL(new Blob([a])); Array.from(document.getElementsByTagName(\"img\")).forEach((img) => {img.src = b;}); document.getElementsByTagName(\"body\")[0].prepend((new DOMParser()).parseFromString(a, \"text/html\"));}</script>"),
-		},
-	}, Gigabyte)
-}
-
-var poisonEncodings = []string{"br", "zstd", "gzip"}
-
-func compressPoison(outputPath, mime string, r io.Reader, maxSize int64) {
-	r = io.LimitReader(r, maxSize)
-
-	var closers []func()
-	var encoders []io.Writer
-	var writers []io.Writer
-	var readers []io.Reader
-
-	for _, encoding := range poisonEncodings {
-		f, err := os.Create(path.Join(outputPath, strings.ReplaceAll(mime, "/", "_")+"."+encoding+".poison"))
-		if err != nil {
-			panic(err)
-		}
-		switch encoding {
-		case "zstd":
-			w, err := zstd.NewWriter(f, zstd.WithEncoderLevel(zstd.SpeedBestCompression), zstd.WithEncoderCRC(false), zstd.WithWindowSize(zstd.MaxWindowSize))
-			if err != nil {
-				panic(err)
-			}
-			encoders = append(encoders, w)
-			closers = append(closers, func() {
-				w.Close()
-				f.Close()
-			})
-		case "br":
-			w := brotli.NewWriterLevel(f, brotli.BestCompression)
-			encoders = append(encoders, w)
-			closers = append(closers, func() {
-				w.Close()
-				f.Close()
-			})
-		case "gzip":
-			w, err := gzip.NewWriterLevel(f, gzip.BestCompression)
-			if err != nil {
-				panic(err)
-			}
-			encoders = append(encoders, w)
-			closers = append(closers, func() {
-				w.Close()
-				f.Close()
-			})
-		}
-		r, w := io.Pipe()
-		readers = append(readers, r)
-		writers = append(writers, w)
-	}
-
-	var wg sync.WaitGroup
-
-	for i := range poisonEncodings {
-		wg.Add(1)
-		go func() {
-			defer wg.Done()
-
-			_, err := io.Copy(encoders[i], readers[i])
-			if err != nil {
-				panic(err)
-			}
-			closers[i]()
-
-			// discard remaining data
-			_, _ = io.Copy(io.Discard, readers[i])
-		}()
-	}
-
-	_, err := io.Copy(io.MultiWriter(writers...), r)
-	if err != nil {
-		panic(err)
-	}
-
-	for _, w := range writers {
-		if pw, ok := w.(io.Closer); ok {
-			pw.Close()
-		} else {
-			panic("writer is not a Closer")
-		}
-	}
-
-	wg.Wait()
-}
diff --git a/cmd/go-away/main.go b/cmd/go-away/main.go
index b927001..051fbc4 100644
--- a/cmd/go-away/main.go
+++ b/cmd/go-away/main.go
@@ -12,10 +12,10 @@ import (
 	"git.gammaspectra.live/git/go-away/lib"
 	"git.gammaspectra.live/git/go-away/lib/policy"
 	"git.gammaspectra.live/git/go-away/utils"
+	"github.com/goccy/go-yaml"
 	"github.com/pires/go-proxyproto"
 	"golang.org/x/crypto/acme"
 	"golang.org/x/crypto/acme/autocert"
-	"gopkg.in/yaml.v3"
 	"log"
 	"log/slog"
 	"maps"
@@ -134,8 +134,6 @@ func main() {
 	clientIpHeader := flag.String("client-ip-header", "", "Client HTTP header to fetch their IP address from (X-Real-Ip, X-Client-Ip, X-Forwarded-For, Cf-Connecting-Ip, etc.)")
 	backendIpHeader := flag.String("backend-ip-header", "", "Backend HTTP header to set the client IP address from, if empty defaults to leaving Client header alone (X-Real-Ip, X-Client-Ip, X-Forwarded-For, Cf-Connecting-Ip, etc.)")
 
-	dnsbl := flag.String("dnsbl", "dnsbl.dronebl.org", "blocklist for DNSBL (default DroneBL)")
-
 	cachePath := flag.String("cache", path.Join(os.TempDir(), "go_away_cache"), "path to temporary cache directory")
 
 	policyFile := flag.String("policy", "", "path to policy YAML file")
@@ -318,7 +316,7 @@ func main() {
 		}()
 	}
 
-	settings := lib.StateSettings{
+	settings := policy.Settings{
 		Backends:               createdBackends,
 		Debug:                  *debugMode,
 		PackageName:            *packageName,
@@ -327,10 +325,7 @@ func main() {
 		PrivateKeySeed:         seed,
 		ClientIpHeader:         *clientIpHeader,
 		BackendIpHeader:        *backendIpHeader,
-	}
-
-	if *dnsbl != "" {
-		settings.DNSBL = utils.NewDNSBL(*dnsbl, net.DefaultResolver)
+		ChallengeResponseCode:  http.StatusTeapot,
 	}
 
 	state, err := lib.NewState(p, settings)
diff --git a/embed/challenge/js-pow-sha256/runtime/runtime.wasm b/embed/challenge/js-pow-sha256/runtime/runtime.wasm
index cb5051891ed9a3b7954cef66b6d5fe4bc1382090..e18b75e83fe15f5649a8a21ac34a1244c0f864d1 100644
GIT binary patch
delta 138134
zcmd444V=|gwg3NpIuCQs%y57i7#JSD=P>9Df>N17NIBn=^58>~mf5uuD@zCK3KG}*
z%lwYQ7!(?LNbP1tNlK-OcQmQ2#;3wW#j>KJBt=Ct#WF=D`Mp1Tf6vSr!18y0_jmt)
zd^u}BefQ(qYpuQ3+WTx;*Z9M`hsVwt=Y7m|9LIgso4mk}<JgTC1OP!Vj-3S=Mfm5~
zWXBY87EH6Luk$aJrA$$0LE3)esCGAQTi{Z&tJa)>Jkx~>)uidrg`YqFQ={qzS|T@V
zBNtxy`M*xf5A@KDE1^5tbt@ltTPh!LJKZ`$qboPKxg_*}TOZf?FS#$eId7zwuTMFd
zyjNH6rLy&2y_0dAAmas2&@^mVs-Yp3aq@*AQ%E(Fn{{2s4eI@TDmALnNqJsfV~|RX
zZfP7dwsoBEx}H~`%jZ&cROXTEc}j9~xm4iQ)j2^Bj1O`_it49&nT$W7E|Y2SQcgab
z&nhr6@WNCo>w7^q8~DXiV^Ej%h*cJO;ahT<Ad~ZQlk#3J9|T^iE^w&bb<^2&%1{1f
zEzD%HZNoFegOq!&TP|1b@FvCY4L-8?%rl*TNq^{!bI$qK4>|A4EI!kQ-k(4H?2n(l
z<m@xfIs1Q|>3pE!gfkYN`S!EOJM-foJ=1x~9d^o@i_iYZzYiw8;?{lAbs{$(9nrbq
zgCF|vnIHM+S!ciN<ZrpxyEnMsac^`txHq}~>GrudySKRCb#HYyy5Bq5{l5DH_lNGc
z-5<GkyLY&Ex_7y^yFYesbNk(&xIc9_xqomUcDK8KbRThdxR1L}xI5h^-Rs<^+&{Tb
zyMK0{b$7YXxqos0>OSw*yEAfIuWWd+vfiIq+;L~7!*M!&Cv>B*J9@e%+TI;Ke`lt$
z({JzEmLwNK$`#T|51pu`Tc0|Pz9L$vMyZo%wi@N*zWKqU{)~t2%(Q#XF+o>EQWO?~
zXzyNsQOO};i#|ERbMg^|$`|$UuixoZd@Eg8nC%Mp+zARP7O7n16rFsS33J`W6m5~&
zcW-vPpCg|pO#GJmkGmO_=l{MbjYqrwFP}<R77hDb%ldmV5&w7iPT9SHp+{Gd!2gvC
z3!^@;mN5U589Fy8*XxR|+N4@T?}VVs?>frqa-w*4gQw)981|Bq=@AvEkaJ>#lh23l
zuzb|NE)_Kt4kzkF_kAN3jVQdk?=OX;+;|;`7kgcy7wvVZGjxw>aG6<erUP0G%X_hM
zhLIC_MW2Q7<~4ZAkJ3w{es?j&2p_d5>WLQ@y@&<1pY(K*)bGzBvuA^U;v&toZz}NT
zHTb52`lZo!_bsM|q&`)nD&2u9sZKTY1PfW8qtuJQR1(Z<sN6N;4R0GLNZWqBmmh3{
zPDan}^^Rm1KXmhCd->4mHscEYVfjMN$^W);#K^m*g+VmXS%OJtNlgZoAxKvjEG}ll
zpz`ykGlr{ElpO3-<&dV;l|M9<8)#~#<B_SBD{p9i(qFM6QyD+%o%6TtNk_Xr8x)3t
zM$h+Vq8?DF8eVI|Kk4ubv3G%YVe|@%l_{Ju$%&>fET!65cKyeI*8MI$n>o08Q>OBx
zQDb5tiEekv0}TnS-IQUUIIM~N!hG|hqfa)i$b>2txzSxKGW^|ePp06E)hE$k^aX=b
zz0~4$mwa2_*HoX$Wu9Mj<}|qAx@+oEiFlvNz%<*1zo|kZZg)`#VLq~T`vZOby6UzC
z{iN>K=;J`OkJVNi<fCN#!9ahnQJuDw?Qby9*L}JQ)n}wHI>#|2mmwW+CLd2`lI>yt
zGoK93W_;l3{Nq2IPLq4U>D;G_1H*p0cG$JE8Atm}r!Dz<r}M7^^$xE6K67b{RM%eX
zqjj%#G_E3%lP@L6XD44c$;$gxj7klx`ntgtvfcDw3p3fwO!t~sh49e%g?7a@J!a$m
zN{Cfr#eFvA_G*#m|2FiK-Db~(E>yJCRCZ3b`v>w!pM?P4;NrU$?aeltCKOhQ>Ut})
zI&wSkS!4C7;Q{%w6E=OS*pv@b5xh!7m{8bVHtZ}V&=QR-I{feYU1YUXK0cwfa>>||
zkeJRC9g_F!P|d#9H{GGzJ<V}SzIM2Xw&`Dk6Z+9!cTtp^P0-U~zQ#@(=x*fXi*|#S
zDhIbVjN4(S^?-e^%x`V>|9{ruqi^1$MTS6z3rkL$7OEwgb@6^X>yAJ+bZ;o{b(a;J
zH1+)NnR(7Km6b&kT4FDB!>0MIMK5eFHi={{EV)rU2foQ39eMl!vS``Nl)IpW_>d@u
zD4eC0mhjOHD)!781(pPYKk(B)YvYFEP+~lTR4Lwv99Qv43*^!R(e|iG-4U*b-EEHD
z2Ui)af8FEX>mO(Wy2GZ*k_pZKU(dm@|HV02pX~g?Id)Dq-j}Ytal)HjuX5Ie;_(tv
z1{ao{3!)rwVcB>Cd#SpxB4AY}2sNmjw|h$KzSOTu{8+Ne#@!R+WMTFu)F<iG^MA1M
zLwu(=LXskDR#;dHEK?6hgd;u(GOfEd75Rlz*t$wtTO7&W9&xmj{QK}R?CTNX$PYF+
zLc3bhHORZ-eZ+u6L?aBEYIIdvL0hjy8zc$bQ)OLZ^TP1`qybZ6fPK}>Nn9&d4DhaJ
z4!~nzS_z>wGJq{o%e3~Vv}4&1ET7w5L!b?JmdI!O8N<2~a%sc>lg$pbV#{j{nr{uU
zX6A=X`G;Q5ln<HlxH}Td_@A8eAu}E`R>Qdd=catfj5GfKyD2{d+&rY1O|X8~QQ?Sd
z26h0;;YQPnS+ha@LwjT}tK_zph*tiy)D%~f+q$k%n)%n(^$|lptMOe&eMm<qP}^Nt
zWM2&w`})8q6wxQqwCIq~ZAI=Mar9+>zGdx;KUw>>wF8By*C5Hj_tzBT5vsLY$3eQd
zhl3OUkoEa@{y;<9Z~q8gj<lmkoY7kHOh!KiACAs!4dF+m-TJkGTItp6t;&yw*2QtH
zwdDRE)a4I$D?PNTbm+I1{C`$eob*~lOb^zT8Cq8+Ot+Tm{#jkGzpC6oRdHL_Kbx+9
z(yh!uU8X86A!i=be<9O817n%#=D^zJV@4KD?=Ggpi~uSDfm~Q8P=}NT5NQO|hZ0&Q
zexl@_7fR+JHTSWSALY(jsO$#fJDiUx*a)=+466!x=SI^P7YhbAoyeKnS{$A*g(3$s
z=(gV#24TZYXBeO`(`f`W&U6|8!)H46h$52FIlzYLnNALnnd#I4ax)#yw_)8(hXZez
zpXsCl^)sCmUmQBq35X4w>G*)Gj<|`aN~V`crA04#rzOQhc&9yb4{%r`q7F){epOnn
zJy+Cn*3}1%i33DB1fRgjPPEKf+8hdCgrVE+1u#x?oO}Aynb~At4_FLbmB4M6*!XP;
zT$RA(3FJ6#%HNg1+Y)$l0^>DFU{wP5EVmy#pTMURxFdlNC2(^B?@HkH30$7QEf?E*
zuDZy=-8~j=NZ=~Lpesi7m%JJ}h3R3c-OK7veRa@V?4Z{rgS|R|YZCZSGRVyd+>?yq
z=>+ab;PM1+OZv7hfp;y-#AbG`Pdd9J>FhS!Ir>(xefyZYRnVU%)3>O-a4KCsCz@F}
zwThv>BoP>`i#iB=w#P4*W04TYm(XP-1HXood0jf_sO)PW#H<?Q$*S;TD?^PDNL=tE
zqsB0~?5e67!!d%8N(?>Jjg_En7^yu?BQ%PlOVDrzI$9NB{K$wfwq#)Hwg=h+h%n+^
zcF0mW)C@W4rD=1z5g~>SI1UfcOLZ~Yz2At91eA=}<g!5-F|+Lrj^Q<gp+u5mM)Fa%
z=tD=`Xx!3b5GUszF|&V1LS}xnaH&M_8X^UC)82He6g0)=G<ah*aQjK{TA%#d>DF<{
zk`>fUW6cqX@o9NJ@DI)h5P&FH!cht2Sy=Mn+5-|HpVG29Zgmt+t)9Gu8(JJ4)TcvL
z3h(KAcFJhCB>mi$&shDOTSWKZp(7k_)TLLUE*)KXccp#mP2Sg6Rem>hj`#VMm9}Z6
z$-6%rAd`&HQ8Ck9$`tBKSyVF7E1wP89p?xJl#O<OwsO<7=1R}B`pJ7u>EZj9zIfGO
z>Afob=EFX-Dmct>P+f-k=#qi#e3b4E{m|Q!BO{PP)h%YC|M-2n(tPOA-se|UPCIn2
zcloNyHx514TeGV2+@XhiUszQ+_^>7Z3Y3svIqVaD<u~cdsOd91zOX7N=Ib-CqQl%m
zX}GGYqpB-N&eqrE!{HK*MnvCPRr&Ynv%KZcRc@XBRzTki)4!DVAHOKox2AKAuk<NL
z9xkxp$SK}eS5;OW`F3yZs>*{$b{xL1igSZiaWYZpg6u>E-O=h*0qP8`d^TFOs&eS8
zRi>*yoOOC8si1GtTi@u8P-JzYFx5hBUDfx|w|&knK5P})PX3F58^i-At0+_Sqia?K
zMXyrqI`qo<A9Zt;6T7CwE4QbMUOl*lB0Bn(^6SUsrBIG;Fp-vglp=DIiHx?9@0!Rc
z8~K5WG}~|bO{B@@++`voSt2U9$3#Zh$O9%aoJdU8FHNkFkA7zYDCQqAfyR9FqzN?S
zSqeYeWg_+YC`aTa6G0wT<+nYoLFDpLBavk*HHbRfq0gI0)>iNZ6Uo@Ie#JySkhXpO
znu(=sWXB&=9m-Tq!?h*{wVjzD6M^ih)f-HNjT{(O)L%eWfC-gE$jzsHD=WW@=4PH_
zMJBUX+RDGneQ~v+Td>(m-P`-j%KrH6Cwn*VsWct^4ii1|=+h1S>Cp=eoN~+#1BcH(
z`@@?)SN$3$B2Bp#e)Z?}*PtuC{{ZRxqF}AYJqceq{T<%u%HL+cv6UUtjX1%M5U^V7
zq=HI$&UbS?gJbdLUXxqCrrNp6jdLHYB5UQ-^WK$v<<e?a-(&Muxw-9^RpXUU9(Ph&
zz3sWQ?-$3_xhA~(bCrcBEY9s5_^R^632V$GT=)*V8yZgh^!uM4$PPVCMqxA)QaeCZ
zyK&9_lT!~(V$U7n1#CTAi;fuVx@h7eB)&+i^W2F|qhBj;-27#^#|DS+&H2B{^$ZSv
z)jRLb-8ZmMmD5hTa?<mIT{Y|WNX}1V)o?Fldv1V6r`wz>uTHtGXNT!%t=k<!!5P!I
zFg?v#58(~d?cO>Uf(~5ka+303{yJy*k-td5cHQX2s9`lVNG46$8m@9N!SUr9w}^b(
z?yYu<e!kMRt@(6QNz{xK?od%FCjrE<brqp_s=bsC;;1=QZ6Y7m&1uL)2uggy<N^K2
zD;ylTi;ii?SV6`JGr0!Gt892@Q>A?U$T&!))46mulg-xUV0&h8VbaC$yvRMTn5l;a
z*o?L$qwSrf7OJU}lGI5`9ac>(C8?z|NNvnBcGSUCQ<xm45Aj<#PyoW1lS5itlu04S
zBxcVDNj$_aoUw>c8}#XP`)Rx8XnN5RI9zj%?%I6WPQOW;I;WvNg2}*So#Pv*tleuj
z<~P`bi+rF7ECpu5O5SYBVJ!^iH0bc+%wYu(tq`4<Hh^r0`Ya5@r0c~6-9-(l`gC=G
zEv2kwX)ps?%L6DcsVhrU>1aFFJ2P!zwlGHMauyBJqYtyDfCZeh($QI4C}j}Bl;Y@x
zVV2za`tvS*b!y?D6810Fus+O&`8j+|L){$m>(sHl%$E*2V0WRxlm=(4mtab`NH~N1
z4b^L?6pwAXa>N*Ke5?})(uGbU(ofWG%MzH&$ysRD@6aOi!3uyE>1dNiQy4+03)AMM
zLDZ%m&efme3mqiS=vJ74w|hrN*IX7vBbD6Y&nPxVS$4G(He!>Gw#9qWmOv&)EVE0@
z!erRu(O7iHoJQ$8!=i_&(8<H}s~uf$xoRmRI<C&K7nmL9-OPDUb%QdS<28FLgbj3Q
zxoc;=$IX~|-{oBSue06e_*`W!QOWZM=9vlJf1Y7eqFGxnGc=2-cIGf7aOIfA+9F^D
z^9do&hxrEAY_nwNqXryvoMtj~mY`YLFnp2B$<Zk3*Es;UXuQEO*r?%8n0OjExJE&D
zF{p>(K@EkDtOw}mL=7T~PGpI>+8(5dc1poj-$;RBz;`JjtYq2H1=l6jg3L5RL@T<%
z?QZj#>&h>`y=F$3?AGd*Z>eJWkS#yDnmVxMD_^_*GfkG>hOFyghbl+iaAuRGtwS^V
zHr|kPo02gM{p45QxzIhh^6nd#@^|x%6AYVT!7I<*c$#<Ly2?8?Tyfy<c5j$k@lHO;
z+g+)ga&o8lQl;{_liM2iRH|~S8<BMT$rHZtBlncb!zW)jF%(@325D8>d}7cjvt0|5
zDi^%#W_L>E4e$O2e}Db%@<2zzQx3}Y4szD{rz~&2dLWuCfpZuN{b%3v<w-r4R~f10
zfd+r7JWsf^eNE-YQy0CZmK7?z<#LN+thiJhe$=F8_oGV&>+{7^zgl_jJ%?5<JE5+!
z`n^%d&dNV+%~X3QUmaC>%fGxoe(rUC@%%wvCN}J_A9k2&bJ%IHDUTysBn<}KL_ujW
zpf`Sl40>h*ct)e4v|~W|jG^+NAEFp0f%+*WPo5hDvmiI_861Bh6C97aquYL#PR<i<
zwDD)@O8<wND)Udv`)EcgA2@Baw{lPA-%dMn)Dw@Vi>b(C?YwG>=u9e`PMa(t|Jl=)
z9ikFxov<2<LG<&hf}%@H(x)_})y2fp;2Ejn%kLZSedUVEZSM=??_5!p^QFm%uDv3#
z&N^(VuhfKxOOarYH+}=W{R-+Azw$(!C`g;bNrBe-q75n99*)L<QA$G;4Ynd7wWgII
z;Ooli?{5`RW%p+bqoNzBE{)`x(u~bQ?f}dv%0OpkAKA*x{xJ=WYAmpV?utt*KX`vQ
z{VSIy{f`PTIZth0RZSvF+pBA$e3bvdnE2XD?PyH(QZ?Cy9A;LRucURdNg~c9+`MnX
zntc<bk1{AST*8AFNiUUDp-vaT2qta})3)L9d1+>jQl!@#{1{Wk4-BW99*1C?bC|2a
z^go_X*2mRgHr7NpJf5yR&1j_hs%grJ&@;_xDA>6I5ewjF*FrYx2u<wKwkIw0<SH=8
zbcEzC(~*{HM`(F{O;fbIwkFDl1D$HAEI+;3N9|U*`t+i|ej6Bl`lJcBZW}DY#~W&*
zD&j6^ne^jr7Jr#6DeLSAMsoZS_L7L^t}<)ElsUh7Je{22&2m0C(6$%dQxk52M@LUS
zo<`3ergSW)5_2%mVLtmkQ+30FN#(~LuWmk1X?746h3%|056oIKvnDYonYIsuT};!0
z%7`=G@s{e=Q%_A_rCqcGXi)`@o#Q6v_*ab5t%v0>AolMU&p7CeU4ykQvAFycg}i7S
zD4&Amw|nQ(82TQ}p618^R$To1!AW3kULKfFGbewkiBeZ3{NVVLb`G|3j&0?V-|O_)
z#1WHSODkuYR+=!?(TXo*yJDafU&waZ@2iUlg+{gUxevBZXB<+YCWA#j^X1EtD?jR-
zN?PtZPB^>w225MzE{U%0NmaIeuqEE@bVo=PkrU>^T=}RK*F{d@4eA1-3)HjSTjA#I
zl$DsW<@XOvS*ePTxFD{(zq)p=91O0$zuGyoPuA2#>H4ag=<>KGQj$n&=vqA-AJRT_
zFlOzdM~(O0J|oeXa`Q@FE0c)pUFfxnHlPe~tAq2dr^v*m)xlkz3~p^)9o=|Fw`0@5
z=*Cw^*W4Ywv}wq2p09~AoTqD|R4}ml#_uy4X|q`d+!%Ehv)t%<_Ymf`VU*^XQ{C&}
zN3oe1X~g*ocSf|#4Rr*h6K`lCAf>oz205#kww@2Jv7+yf55C0*=FH$jHwch>SINiA
z!_1;@X3@~L0St);Pz1RXe3kgwk}sLvT!JeKL1e5zngl^o278Afh(8oT3~mo1h{5ea
z1o2g0GNV2fnuC)F2!dp2PU{>S&{DD^<@2Fwyje$D;0BkyZ6*uzz?_EBO#H?J%t(Sy
z`^^Lvrg;aN2~0<3v-sDCh`|=0_MeII%!H6BnF)}|&cqO8GD9CkCNuOwWb#$Pz|cV^
zBy~nU`5z4Zwq)oV-O5isJjIvB^RFMC+qxBMBX*`gSxh5L&igDQKeckonIAgl{u&Ae
zKL4~P3LmJU!`T|{RWH01_tF6kI$SyS%yE@5ADM5s%sC&K_|Le^H$QTazXEdj^N$=n
z;fiW2pf4R*T@zK2(H}k2{|Yev=qLTJ0{{NeN#*OdRXMR2k+y#)F#}5PMkj~SNu72R
zX7MgN^!b%D&N|Io^FrlEXSFqcr$!99_R`9(vkq<M<ZmS)P1kfw2@kKl>Fjx4-xZY$
z&u(kH^@^(Q*^5ZpaCUp+6$3Jwhfr2|{OoCCr6*vY=ug2;{Z!k2du3Yp+1}^(RIchi
zv51BO`{2hUh{|p#wLsyGYPbc#5iqWjU3iKQXRDmCaOzm>Nc+^OeMqrF<+_E(wjj9b
zILMyR#^8`AF+LOZSL)9Bax+w4URP2j>-dV{^~>;qADlC3`j8wy$r&tLw-D=W&mF%$
z?BgO9`l#_^<C}qlMbi36Y^7`8oUA@p&f<?PF4cUKjl6}W9A|#K3&VOMVS_1_{`ir;
znmGF72l@K!V;|q)ZmgX2uYdHGzfgJex$hQOb?y(nl2@6xsQ4y~Iavk@A>f!ArZw!W
zp$C{InvH2<<CQ_wEU)f5&4`QQ^)riRW%^ezEh{p8_bqyl>mJ-U`Mi6)Mkx!E!+vz%
zy1qT1SmwI#>g)NpQv&W*{Q8r}@OS(LZ{_c47aYyswHF*+=W@tK<q-vyhd(*ClKE7L
z^eLZG?!SI&Hh;hSsXtenx-ts9iIsaUJk{;4l;T5%yG~&y9WrMW49JD<$_HZlQu%JY
znZL_=Udh~uqId#6=)D(R;<xO$2w5Jw;}x1v*Kl568Vy?%F&UG357nHU+`Gizc~PqJ
zv)-wS?(RKfBvy!lPg3&FCjFdCKBDZ0E-@2%$fr+IEdKPu;D>>msyy@QBVwPk7K*5a
zk^2cWy~qu(_*x>^f;oCb-jeA0%TrPTht9lGfcJzrcSyjWi*_h-Ku9;*<G+Igm>a$7
zFB<a2aVC{Ig2gq}81)2hAjdXvJTeygXqVML=*B@Y<#p}bsb|3(cd%1pVqZ^nALgQh
zI6$Z9$g|GzsCUp=4VHAweTLa79H-z~#tP=17h`W&FE4zXTTJcS@^wtd(3ZEXeC?K#
z=~&Nn$Z}^cP*mrIt|Xu8zJTePw>Yk*g<Jyg_}q<pB^|t0cb2>Rc4zJC*X|CjEO(Ek
z|E9HSNn7_E<MEHu$=de%4*tv&nYtUe)pKD6^KxJF<yW{L^*90Oz{Dck6PPoXwUeNl
z3z-zdp36?z4YQYog;sH6Dasl+#BRJZa|FaN6>&s6LN@R)r>&cc0O+Qpy{|}_Kr%bJ
zzOtt>#+<xc)_k(Cenn<>>sx%s8XF7Em9MTj&RcO!<>@t-dp+0m^?c!B-+vl|+Xuf`
z3QXYBU;d<9dVZO~(PB<rj`rACiM2i+<rgy3vQ%H&S6}eskGddS3ra7~oEeO<hDq1x
zAjNYvRT5-ENQV_Zyy{TA>QLC08VX{lhJrhc9STdzP>hijO7utH&tB-o?x*OFJD(|Z
zi}i1JoXQ2)OtFJ`Z^c~~F`!D%7v@ziUH1d;(#FcM-<VkW*KbU5gUWw=V|F9<BzPqA
z44J}O`OG(pZn{#qb{?8Q76k2rNiKY|wbFC#q5j%ssme{)PMolbp-=IgHN`rblwtxR
zvUDDkP#2L^dFI-&vHVv!_UG8hsluEPMZ~OzKw{huBST-G-jip}!pyt|Q63W2heFwq
zJ`xNIQ&D<VcspI8z7EvwIfCe!r@@D~LUc)nba13F8+!vMk{=c8)N!UBqo1zOSiE9|
z1~7{`W$w*an)}ep<2K|+{T7w{>ipAd%|BwB<{v+AJO94eK|KRD%RAV_K=tV2P4y=v
znEPL=-^jaLEO9Kn&FiX+Uq5E7Nkrx}13pSB&`oHCg<+NB*S}>LK1GoZf?CR(S;{r*
zL$2!Gvi?MAVC_;Wx$w<-{&sla`@T78!s?4t-8jg8y@)2hx{Tdg#%x4Z<;&k38%vF=
z1BPA4NHf2|MLTQP4AHe_ArUtAUr5e_Nm*JST*>nXSF*=Fz*7F$Sj3}PyJ&El5rYR;
zGWXxHk{Aw#HZic0oPr8<NB>`93fguw0r!4uvY|YG{nimNadV>9sak$J61^g`?S+E_
zhAt1+D)~V~PjV+|ghY*`pHQ9wq^=>DFw<JJ)`mPFN*{b6oECXZ{QexwKBmvNd^;R&
z<(+Q?9=<3ShK?6k4!db=<(Qk^evGJC+BAvwqN+Qr60w?1q?(}skYTl3XZO+<_lPXl
z*HwOU)4?$2x!4NS`Tu%NnA^=Fq7@1kM}Ks%>~Jk(tT>>j`Yku9t$$!{<YXq+L6LvZ
zRkMS9a4&6r;Y_X2j(vJPQ0wcelsgH{PHei4N@l-r<sZ%5mFqeU0kV_EeV1ZJ>jRpW
zV;jtCauND;fzwE>_4%8%WJcGG&wGl~`h^y2n5BK1nqUTBZ7XZr`np*lg9e}LJE1f$
zOriL(q(<b%<01`5KMv`Tiog`x(>L~D1}zLoP?#)EpmxD+eaTu>j<|VZ7rL*sv<l^m
z@X<B@;&(Mb^|jkyYt0gFZ?LO!+0CuT4R*5_l&kgh#741JcHY~7YGANFyFqGkVBh+t
z45?3ESLUB_fE=<D5f=`<WkC_nWC&-Y_+RkD;z*HQ<11}UB-{5?ZoK8JhMjwY=;=K{
zIHHx?27PVc^<DQ3mG)b=@b{%#Z*`Ba+_dpy{GIr{X~r*M<KD_i-#gsfdVk-F?~QfG
zoe<_>oS6FZ9scy<*f7sIBpk(&E>k$6@}uvMbx-K~&G+B!dYkU=n||AGT%x%j<=v^W
zzx2Oq-4Yb;*=ubvjbRh#B3xfbmYtIpBlG79@2EsSZaYPV*8hF*gRM2;jmgLPNM_05
zH`p357SBm)2r(AQ<{vgJJOUuE7S*@<)xID6_!{3mvG4Rdzi+)RdiGW(-hBweJ?`%B
zlb-&`uif-6CW!OGqd&bR3HE(u)A+zWsdC%qSDH@J+=67NXXq?^DO)(H@80{08gb>B
z`{#T8_gA_e*kGn^*WStt4-~zgmn&noJZa8*sRv8uyf@{+*(QG8gY72%l?VUi&aZst
z=Wlf1S^445&n0~5FXp)K>|6Sa!?LE}`roygf)D)eoW8raf6*;o%&}=y;S{>!7EUR=
z$H`Y*7q@Suxnp5oIJZ^eM_Nb9$<5<TV;vwp`3hEUcx0lv!XlD~7OeK}fcfr;N2*uR
zu(0lSP7J!tp+Qwqe&EUmRdq-B3S0Nd1GqV=GIOOO|2|2d#H8Qc@75GljxiWVOWEZV
zelZ+y@l@`CI=TMQ`NOxaFf~F25n!V&h!S6UY;<3^W2)<KCUW9qZ`;2}-&Y=cyE~0+
z$V5GI0JHZN;{(9i&fN8m_N%q8@rkMK1oH`{Pm`b_FJxGed~bwTSFNj@x^pGx*++Kj
zP<-%{Gx)pU$)otY*8JUW{)SH}Wx-Psf4~0Jjr(_QX#dwg{nkVOMa+LtLdWFpK%_9;
zLy4<B4GhCF<9Bx*+86z~*^d9c&%CMH#E>E_eYZT*<j&B5IEQFJ$eyCu25?FV;XgW~
z0ERZ=tC2o;*W2CLe61N&6*J{SsW}NVmO)#K?7CFdL+R;JUfxpwUFbucHoPG2;mpKp
zALVfL(@pnX_p4RiUT3_8C4>u^qFcy}l>&n#cX5(!F1N>uh<CWwc8@jlZ-~dR8#%7H
zh0~*_?`5v=Qc=NOHavCkBf|#V=({f@A3?+TNFRjk<SuKzw44RrLULQlYfNVX$9Fx>
z3~oFPynmK^(42CoId1fff{+>OP^ApcMb!)w#H3qI#gC7>fU+>!;ycK2ZSlvdK`(lw
z8uYmwofHV7ClriU$D8f+MbF=xk;}XB<5IJ1A2s`UHRutfEl5`MqZd+9hh!t%M;x(F
zoO?BcVcxip;636R_qx@akzTYm`RJ;bFw=4$?Tn~rPb#X50z#WE!ma4NQHtPBf(=o+
zaE8|v@fC9-LGYq`(ou$6>t`V2d(pZ((EVuQuO@)F#Z6uUsy<qEN2a_&T+&qsmXpj<
zUwQWt-ozLL(W<NXTGEa8?^V@64}tY6eY+6j@^!zt%s(%xJaG9f7n~D)Yt7Xt20)9J
zrJ;LXVI~^AOtgXjH{G656Of>NzIgEVKfdDYu4l~`akP<7whVr9>96m7<-&nR9^d-y
zpUd&P_LHceFSfqc7eBk|;fI`kzu3eV+Xug>8A!}Xp8Wm`>oWWFE84;*I|o0x?r+aL
zm>KBS%FBNL@P6Ie$``v{>x(BhU;c1<-!``2k%^<-ul32Mt<UZZYCqY1Zzc+bM=Tc0
zfqMJqd($1Bp5P#QeKj22Y+j-$A!J3jnIPt<jW%Fxf{s>sI(Q0*X8<{?^Xx%)!5ga$
zIKx_CI5vV-)-M4<EO`h`m4rTTiPRe^I-Qk)CD6PPwm8g5L0Is|CLb7GQV{w20B6a2
z-~~c7I%rg@bT76^A$sNzcUY8T@}8(VHHeMnN*UBFzH#M(RtoiTaF-$oONdQRQg!;}
z2EzV{EY<#r+@vG%VB=ntih_lBqotzMLZhG~&ch;6&&A8L$Q_i-R^Iy8@o|baQ95Ml
z!%!DC5%$bNgmGp<dMJ(uszFM)EVuHJh7(VD#%NA=Tu7EW*^q@GI!vN66sJlf(aHx>
zMxf=_?dE9v#p$RHPb-}nne`@1R<f@}R+ev0rgsGa!`4?3(9DPCe)f#WDeshsF{8WS
zj*V`+7cvv&pdxn>%0>CY8RTJl-FZg_^1c=VXuMjEI77pWo_Xq~N7FdkN9(GTaeXy#
z6^Ejt7quI10V!&uID}{%05Zf??*SrIFX|{%*hJ3~d=^Q1_%N>+iy#?U#fj>V@Sc{Q
zbL}hWUUn)($_~LbO4+W^up_)}g1t)Fsu1e4hXgNH$`*xKlg)y=UnXUfLNsuf;0sFW
zR|u|nn_&E`k~S*HXEzHzrj!i|0k0Q)SSjljV%66PKBSbj3NiAl1ve|@DusY+1b?EG
z)e13;Rf6AF$_j;OYq{WtSV=t!Qqdk4xLzr{6~cY)dBHC!WtT!U|Fqz0rR+?~>=0b0
zl<f))XNCm-@)9Xq6#^L^5`0D}TauK`f=|5^le9@eCgd)`M^&g_AwIiJ@L{EFRH%^|
z5`0i88<H~D3*M)c^$G#k3I0?mYZYSjR}21eFDX|kG=>=x{LV{hBo59Krs`FKYxUU*
zg$hiO;A*AxD8!^)0Jua6=iB%az@FX2&n3Vrp96SV@v{gpe;)??S@8un{yxBV#kn~p
zTzVHyo6&<xm~Rt~2i&3fTmp>uXu!>icM$;00(?ht_La1z#<*aJY8uLi#RDpa=mn-L
zfb1KR66oUe;e<i{>4pp#oJYYO#%4coz-Ehxx<W;cQE1L0f@uDv61F_}yy)id@7eLm
z^Ab-s9_TTIXJM%>@|HrY<Y1jM7jNBmhckJ1@?8mY@zT)eJJG3yhE74QAYGzUZtlv=
zO<w7P`xW2!^M4kndiiWnuc!O>UL^j3voABG|3dG|;otQ}#y*b9My`TbE}@f(8DS4^
z5<AW+|5uJ?NX!a0GZUQ;OduT{j5H>>YnNwF3rAXS{V!y_1}h79LF?Nbn#7A3pujYz
z9ubNT#*n6Z=(mfEeS{an1YnDhEPU3;*9#!#{R-ABE8k-4t1d>zN-%Ti@Pbl698DMN
zYbiN^mB5V<pIQ!0I%|0iF3JgeirH|bJ(3%;7-ORqVr11TgBVh+h{r^e>?N|a)k|Xd
zNW+a_LD*CzPvW?*=Dbi+A3fc6FFTg&iW<OF#Z)bd7>ZKL_KZUmh2_s<HHm(7gwd)R
z|7{q8&J)zAQ59ws-og^1?wQ4D2rwhs`FLt}9u(%$k}Kcfd!u3)n>@4wB;`S6We56Q
z<P<55eCC>Q)$vdl>;GWlZ{sd4aT8_<DOcahC9Zn2FDT|kYl#ypHHK+P*lA2XSteNz
zP$7*R-yrLm$JEH6j^G`;e8Ys$VF4eTF9_Tqr*gDR`jU$Hukl!{iTd76zAte%ml{g-
z^XPrPnA3rxK5XCwUac@th0^|ubL0HU8ldV>B5%`KO<-M!1`o9e_0N^RP#ww;6w|Fm
zyv-SLV!g!e9^q3<!=WvN^0gdr@nG|;n4NyjGg_WEORgyxEY%6INyiu|-;}LmPpUn}
zu~1jaOm>(7JB`Ozi)e->)qtSnYgh)M%mF18-ST)UdXttJNy6y&h9!L(Rz0AYD=#%`
z+Or8hjr^fexDhdQhlMxAY`gt-h&6m^fz&LBq~#G}8<Mu~Hepca3|rk3ERzmI>=#Id
znrxEeg`<k(Zig4Ta5|x*NJLqzus%m)wF8z@%7|gesY3V^9+5_YfD-QuzMIm8HJ-2W
zI6!;lm20lwzUB5iKV9f_@OCO+w0zatE&aDI%XT^iv@sH5^qS3CjF%0y0O{r1eV^O&
z`D^-i{Z3B{5#JlH``(JXKmXf{zZ7@+1rq-9_zxbv=DNRM_YLA~>+%zuuiNsgEr06!
z0deL{bg(-rM1{h6Og`1(o3X_78PwGXjAJb(DQg=v!hTSG;3t20{HveYv+_`NGbn#)
z`Td`}`<ecpH`7h7ew1&!{OYf5`{|dj`b4LLL9hJ#7jFF9t3TL$_jx)Mu+iC8ZWOYa
zq6J0QClcbN?4wF#eTWz-*hF;j^`oLmPg!V_N=cG|Hfd6l6q|t3B(;}Z){LcLVC)uy
zQLbbUR6o)E_loXFs7;m!CMQNFSF8NXX)l#1EgW{6D7F2M59{6m7WvV3r<=t9`Ft6=
zl3+O|=~VROMge@$@}9O%Z$4v0dxGT&6i_!M<u8rKEixVkDcGXeC<ABbmbf?rsbE|A
zTH?9pQyqrL=T5QHUHG^N%?w>_0E1_7j=KAAoDCG|DlCqiSbJP*D(4;CQc$0(r*mPf
zIJj@G_jtqAb#C`SNdfJ~x{9&{bPZiC4oVclV6e+>!Qx3*bks3aO7oi>Jrb(qi7K%}
zpg*GSnP`+|GZQ^wR5P08BAh3U796bw)o9yTtsq1AuxdAmp?k{J=XcC}z$9qWY6w%(
z*_a9B(E_E~XO+^`hXh=ny^3qzR?@cz&>w1I9Xui!n#NE{2}h*iGz}W1kZmvu2b$sF
zx`{J@GWV^KsnInVUAAE;<~2G~t?7Bn_FT_EnenAepVjyO^QXE}$P*BImdD6M)n1#%
zG$cl|c2iudm^B04U(0JIKp2KUaFrAho8BGW11?PvvO$G$ubqxXL96M9m}1O}3(#jS
zNl+NC$G=l}e6_Gl<e*Uq=|f=_;mw8Rg-USmqQ?N-zWI!EBqu>mkq80Oz?v*;cC@82
z%;DK43*+TkH!I?Zq{MAOC=_<`T8gOgX4&DjM3bY^PJ0s|G{*^9i#ca$Z?Obh+~|$w
zI9SJD37Qx6=w(RyVgiV}upYf1Dnnfkt)PiG(U9UJ28##fb!_vs=}w(#ARRi>VC7FL
zX`+&GgOxlag#^UIH0?$gZK*b`0GurJlBRhA1b04$W?N^qM<`x>%ar(7#j8)95|`&F
z3xYs>gcA!r4#I7l=J;cr3PkPJyAeJ3H@b<omdX6LX!WM5(vDE1mp&6YSW@Fw<0Z09
za|wHlw%Lkwr%((CF^K+DLoEZLuv_%cWVa6_P9F%(sD|v9Ec8Pzl)^g55i^Zy{WrM?
zVn0Py!$Kf_BUV-=tS#<&+LM&oY<9tZ#bSiio}^IWeAbHf-zq|gEW##60FmfwzDI9j
z+Jd~LLG*rUP%?%iv4pcl<5huL8Z0T{ViO%>wZoJE4jl9lVIAEz^UP5x4329p$(faI
zk_i(6F*dp6)#(G=5*E@BU+T6YrKL}Ej@534D~6emE<`mYK|0J>Zyeo|S4Adj7;vim
z^G(-YbLnrteDj|`)|N0;zWejvyY(wy`}<u#cVc)j2^Zaa=a+u8Z27ep6Gw|w{`rmD
z?s@b_>;LkMRCAh)Dg*W)U1pAH+^|r_1sAdr%SJ5&4h9*pFwSrS3vDUOfVn$6z<{N2
z5=%%JFf)%S&YTh~3-)SQFz!gcmAcmMv6h2G9~FYnqHQoQF_g5Cp7Qq&^9pfRmx=qO
zzD0Jbl7ZL=Pm+9Ugr{t@RhaAv?^p>>1h5}ie(8?gU#f~vGl>7`<x771<6B<1ePXB2
zeS`8>x4!h7I}%~4o%n;j|MBe053Kq0gVYlef9}uE@BT(2TuEO0_O4&V&)@jWZMV*n
z@a2_%aR0Zi-I@qnAWC_~<$wM1-pwy9f68nU50o>i4hdce+uD}@exPkh_D<ubw8@d1
zk}JWipIJeXL%74==yv+3a7=o<g$%SnCWC!6qSIfS#5Pb2y^hIQPq-%uuO*Bs$E06H
z7$uGguO_@R39lf$Jqe?-_fgrHGUs>t=xR*xTr;=eKRr6D)9+7`7j)7;TjJDCAAO7|
zFu&7Zp9JU9!z9?%>7#lv1!gd$BsiUJC&6}lodm;9|9o4trPDvxh6<g2jBu<TWIO!@
zHpE<?$_yfZS+axPV=&mYu$ovUPI{NAnpP!Z+8arl0D^XOlc&2EpL5NEKyhX|8_X#q
z_PX?6d6!$>#fwq=S;qhGY$dqYS@x;Y$a3L=Qd4=gdkXT{$a40A(#WvMgs-F44PJLQ
zCH+fEBg!)_A=LA#zpUJT$#MmI_GFfoTTE(C&+cK%%GpbnD<iu?(k2OnTVh2hsEl^P
zd{1b`isj3fTcy1G<xN9j({<5mxA5;e(Ol)pnAO4L7Dou4uU9ZT{Bw&V1<ooq3oIy(
z5;(Ounu+D3^<Ff6jyz5~SgKMB{kX1}io=$2fj|Ik0j7Z=&<C~yGr;M<EN}*}PM@!E
zOJmIE`EZQ+x*n*n8-V({5vZ?+0rhnOsIP~IW3Iy;q2)SAIgeGn2jg6rn(3TE2jTbc
z1|TWE3&2~cCj)rp>LdVfSG^O!D_8RY*s)Ip@clagJa%;gfTy#L2k>UraRA=DIu^h~
zTJr$BpfwjTVwN*UfS%8CW}8r9MLf$n#sphPJlcdpLT@*rc0y$nnocM(p&5j_2sO=e
zjuJ4nz0HIQWWCjdRM{*OQe{V)kSd#LLaOX7CNx9s&mcH*meVO<YCFP&RNI?PNVOeq
zLaOaeCZyWlXhN#(4JM?nO()bm%Q;NIRCcHdsj_J%q{^n6kSaR_bfBPWn_@z$O@_y2
z)@zp2PH5CD=U@R-+d(Fz+9sQjYHKqg)i%k5R9VS{R9Vr4R9Q%9^ekthfT?T(p?EY1
zG|L%p5>*>|GqP1%s|l&Lu_mP2#+Z<5gMPQ8cSi7#JOaBxfyB99niZKv#G5_Ko7pLn
zcC9P0@w(Fa*hHiLSf})$%mMtlJ6^i);hW&UGdKfZ_QS7Se(QCg-I(rVMuYOBo7X(^
z?ce`q`v$VxmHmrNk3I0Sl{bv&WK==<cdPIE{qr~WKEjDv=j-bp?0N2?TW(&t+A#N^
zy!vYoUw`|LSH1iZd%nJT<+5AX?fQ==|0v!L{RuS$o#48xn$RAvyB3ON8+k-32qNO!
zessHIczG%b*u*=ki8f#p@2n=;fD&t2yl;dn&R?&|<IOW~@|oCvQQ90MkdSJ4y9+bd
z+51Zwu10%e?!0@>(VNqBjb0=qTEp5~qUlU{MvC~UQjx?7n?H-b!Ce=GaOEL760f{>
zh>FD9M@8c8qara%@No!Cw=GA*)MC{z<|*g1kOfT>shTEGt4JUl+D2-hHd6bw!NIbv
z+6E(3y;A}0sH)X4gW+y4kc-)cgUzx+fKkpMU6}>vB@3k6evKcJn<@9h5qdbZafiwH
z2rH`&qC1!)t+mn8g1jA0OQ}xm!9E%Sx8v+l$|;2hF$_RJ36-El_CYZrl`ECB6CGhh
za>Q}u#xM?QldyeaMyyRinji9+#UP8Y5)^IaI@j6Cw>h=7o2mwq25TQk^5cEK9MS-C
zI<9C)jSl)Qcn148QGN}Hn8PWa2PnfnsS|+Iwt#x043orfjzbX|<x;x5dfUUlz4nQl
zK6AT~#p87Ofpwd|^q<dsxi2MAJYC-Qja|<#zwEhHQ?y&t<y~L;%+s6hdE!@ZWinYh
z=t`|7jDdTJAa2xRHG;U8Xu^U)LEPJ45RW}8fOBXY5X5UWVIFg=%kyTF9zYjn&PPW5
zx%J}eCN-K2M{>B1@Om#T|NDcy$?+`hQFNCL?9ql~k6QV=g?P;-m1N5%Er0W&>;L%k
zyYIbnx~3vi{@PuuzV`FG?y0m3uk880|E}-<;-|a!{sC2@jx7)W`HR1~`M1|Uaw(LL
zHliI|O9mt=OVPRpZ3B<P8i6b$<HoCk3{o`~Q8)34z4_pE+5bY9;+bfeUg&gjRw%-b
zI`|mo)ZrD1aH|fq6|k=kFDxD+&|ZYYb#PG*me;`p0r0>Mud4`C?C|CmVUZo){31NF
z!#g!D!bLm01x46uhj&&HKHI^qY8Y>acYYC0+~M`OMR;=u2E-z)x&zZ<5$@fA)v*Xa
z@9@^TML2v1mdYYLzXKa)5h<Vp>t+$Tpaaprh@{ZLnX(A}bilNVk>FOhSmylM;ca(|
zZ&$)jw}=GNfmODMOwxh9wuqQQ2fX4O!4+N+Iff2+#d(5Pc}1igI^Y!%dgy>xL<XV*
zUJ;Rq4tPZ*Bs$;~5t!(JS44iI177i+f?K`fN$`I<;1!X!=zv#5_@V<|5m}55ctu1r
zI^Y)()#!j<L^P)Ze(}A6SNX+%5nSsRPZM147vCqi!7sjFaHC)RfMCC0JY8^;UtA!#
z#V?*AxYaMlACzdi-AAzW%3r+s>Fp2R`P0vZo!--M=<?^+ZC?A}9e01WrPJG?BQ>4?
z+XX+^$)~_GI;je{pp&YBr+3m6@B^JR4SatmT>-wYldb_z>!ho|f9a&_!1s1~@oEK5
z?PP4g_jEE=;3=Jq9r*4}<^uSxPUZ&4yDHlSPoe{Y@1z5Q^XY)#iF82l9dtnO1Uevi
zJRJ}`jt&SOO9uq!b;dI0d*NI<AUKB(2+pPhF7OySAb2z#5PZAQU3p=d4k#Yc0l_Xh
zAb1oV5PTaQ5PT~g5S&E^1dpTxf-~uW;9KHO@R`62Iw06d2LzAk#2W5}Z|?NY1svY#
z!Jxx8b&5fUZ<Na13*UgM95B7pn+rIslilrwhjw~10Mj}#BYNS~POlwsNT(M9rgVBp
zZDEJloENrt;>L&>@nEZyXL}E$1}^!}F4ZB=VXl){mkEcR&;a>6p!Q3TKMg79i@UOb
z5FWIUvn3Wre?{HH#Wk3vs!B>^7Gv3#$|w${Rf~pOHI*Xh?}#93DdI&ViNH-1;YkD{
zzKw8&lL!P>Ik@){fhQ@Fjz$xKO)HX#T8N;sS0o#aA%e<Ok-BIsk(dXD70X4f#B@)F
zNIn`z1htnU_0f1Dx(7j|A(}v>!A2URi9~qnL^;Evkcb{8A&zLwhLJtsJPB+jVW&w5
zNKmIK!4}J4|I3o1E|Id!6sadcFMYu~(DXu<L5M`qfZf$4YEC1DNP;z-K>E+Hn#Gs4
zkjXNiO7%PNp_I0zgT*1dX)%8fzE0ZpIl2<U^y?Wa3>qea*uokl5io)^NFu0~ra2g2
zOfjSc)*y*stz`|82+|a5kVIhTtU(gt`7zdDPHb!76*AT!$-?fz8YB_kPh$;|2rsg+
z21x|N@HD3}i40R@7!k|B0+F}Z!>Que&#L~PaH{zAvnock{lA@4#jl@LX-fawIaU1n
zSyh!&aVFb`Qw95QDzwdpQw0g93KC8gB%CTpI8_jS0Qw873KCWoB&;e(SXGd)sz9s?
zP8B4aDo8k0kZ`IX;Z#Awse*)41qr7L5>6E)oGM5-74pAjRYAh4f`nBC39AYcRu#ai
z#HoUWQw0g93KC8gB%CTpI8~5vsvzN1LBgqmgi{3xr$QZNSyhm*svu!iLBgtngjEIM
zTMVZP5>6E)oGP%KDzKa?u$(HeoGP%KDzKa?u$(HeoGP%KiuMhw3M{J%EUOAEs|qZu
z3M{J%45xy>q{3n1O!&3T2BZ*7L;u9&b}GI{ytc5vrN&S~jO){!zxt)odgk3k{^G}_
z7Ljlhd(JP75pg$>U4Ch-$i9g@>z7)^5KQD5zcfy)!bJY;m&WTUcoTWrFHI1CF_Ay{
zrHSG^Ci0YD!Z?cakGk-rUn+`QDH1z7{ZdJc%w#>`mnMnDnaJaQsZGq!L>}`?lf@QI
zWQSimNOm1V_G@T+)t1Id41wObZE&!89uF6JHkAq(Lb07N>6|bYMvLb)pnoK%hws`Q
z-p7bqaAt^5f-b_5Yq6?dYGQ<1mM-RvL7um7mq#PTv#+B#cAItyQWWRZaiH2`H8xN^
z&+fO&J(BXciX5o?km6`9qt%|49Fvny*$fi(rYm+<)SE$=j_Qe~m!kPJW^dHB3~HhD
zv{B<yw6<|txy@mn`DRquXbjD~MzEtlZTt=D$dC497DYQY+JrP8+Jp@@!Hq^G3F~cw
z7u7Em>*rq)S&riu=i$5_J*ZaNI8bSv)LOT1t#HJB>Q#NE97`~wwyNPnI@h>wHFf(`
z63SJ})Raf$9~H$ly=op(Rnw3`Htt)`$Z9?HXqz#iNu7ZRz$Pg~jl6RX@Rnfa)3}jZ
zaLwZbyEM_Gm!ypntv<@eOU;BQDF*BExHb++EP#qR5U~0kc(M4r5*ApVbz$MMrsiDj
zCtPyduMSpVXccrOyELx-OwCg>8gU76T;VV^=WC1b(f&2p?^|<D8%G`sHRGaUl<Sg2
z>ogPfHa||LB6omlb!TFr2FA<?4p=S56bZ%JttE8y5=cS1r6uzN77Dj4Eur3*2n(%P
zT0(&@K^MdJ(o&2XUm`F*U`tEr@+FBPF)l5kw3i5t;d*Ilgq5v%Ja=hnq!qd~ccmsP
znrli*%~obtpG%|UzM+FaRunpG>2)?C)M<N0$l4PC{trmH64=dRhLYAb04x}UBxnbr
z<aE>dP%^rfCKpOT*C6ttq;rj+K9p!~`X5Rz*Gvx&C6sF%Bf=sfoe)NbB|?(H-Eh)*
zv7Ni7u#H5WGn&K6gmnBE6&^$=@vY2i&CqF81$yFC!JkB)Cr;D+Nu+t=beTU!m^bW4
zbQ*bnKoF-h9rzzqMfgOCHjvF(U_eecjzoiEI#D{9i0MS=cOs?}0TuWov6u*bOvH2|
zG?<9#M3@wb>5{*RF<FV6PK1FZayk*FR&u&6#*8OoIyo#vBBm2zu!)#Xgk?*_bRw*#
z71QBKp7@g5W3jEc9`m5SxhXF__lA3n3eBj~Hok1^+SaqsrkkskDp$>uar}TfIo&#~
z)xtHPBSZ`LfM<WTl^Yo7g3Y~`zMj2rb1Q#)_5ApUIWKF~=!pl76y<KM4i1G^tqv|E
zI;b(h^5E8pp{O#eCU#?C&l0WC@S&@xcE9|aoB#aCFYo>Jjoamj&>s5b2iM*A^<Vz%
zm*3tBUWCN&S#!f958d;N>$Vtesb9W*`K4cfXw!q&Y$DF-u>8H}pZ?=7e)_;y`K?{8
zTluCPo4@vppWOGQ8A2<yfs^DHzO!TNgOC1H<`A?2<%@bRTeo$~AMad2JS6_o^M8Ky
z*AK)G|G0+)6a?kxcHDQ(ukZi;4|bb2yz-L|-SFtI?)%-XyG$Ei`Hy#9dd;sk|E6yz
zaa{TLm$sl9Rr9c3&9<gsJ(Hb;1VVJX0BL-wX0#YFbZjD@8l`2L6^lYt#)*MgFC+)0
zlw4^E;X@X!(3KWl%am_TVHqy1)`=v8H`b>yU6wJs_aGna-#xF(%nW-&<jIc?Lp+)n
z6XYHbJM={K9Z)ZXZDo5lyPE3_<ob)lz|t@wHPQ#t2rLkQo?Xu0gwTT25fT|O9MU*{
zE2|E6Ihf&fhuN5mPd3Lu^NFjUD#gGqwkpK}=NiU7NQO+jh76f_4H+`=K{8~&H{N3f
z$Wp<^&2wZ;=W%DF$tIYGF<U5rElmxMQ-kA(kF#;mvfT@bV|r75o8oQ6+iV;(#y^sH
zyNyp(d@Av&xHj{wRn6jH5kO8gOB9>?kOZx36(v2Dl<5#ZHes4rFEd*WqYLqqumvo<
zFvk8ZTm%Yq_`Cg5u8is5IY~O~FjqczSt*Z80UjKFc|n-}RG1_4WYkh9qD+g%N>L|+
zrS)yoTH%G4O|&NxH>&EDu#O|K{rzm2HoWq#C;R?($s^D9RFaMKi#;#@`I%R~bq@-A
zG;ZY=FZ=r4pS$Kun}3_^qi42#`Kf!B|LB$@wT<EhMc3;xXjI3D2aFm*CL56fF_joK
zvV%sARASV~4tf`*5}QW$z%~ucaA^J$=b|e8jBCA%Qo1M0&VrwrYp%6K*AVKTRc#%{
z{gb7saW>jD&MR442ZS`h))Ca&BW2yKA%s|WwbOU_v0l5APo<0>vQ%&qXe-I|K%m{a
zp%Ds;yaLJ2FM1ZR$D~G-vIjhrSz@w4p?Hu$OYvZVun11dEYTq_y*Nc+M)44Vt|It}
zSt2e@6P#Z>RN&O&VFC+^(*@4LSOGW}4G`dbY!!eW7h?r*g^RTUxZ1^B0lZ4)3gB9q
zD}d`|t^jV3xdOOR<_ciH%oV^*GFSK=vFs9WQ^Ho+D}dWw>=nSBF7^uGE*E<RaJQ5|
zz#b2C1rW2uF@l&SW(#7Lm?OAW<_aKYiFtyUC5{!uEODG*zswat%n~P{h&6VJcPIh7
z#EF92Wv>8YmUyQiW{HyoF-x2**yCfa0Iu*cR{$|foFa%>;yr?EWv&3Om$?FnS>j&=
zF-x2#*e`PhaFcXEF#+rnA5a2z3G5Xj8{08>Z<nNoX#taiE7QUjK}-vq1Tii23u0P8
zkK;;Tvq2Dj&3ZvB3u^_jEMRhQrLRGc<4Rw%LJ-SBkKoBDf-pI_QrPSg#I&$e5YxhT
zK}-vn99)?ewg_Tc*d&N)p<fWw0wxDn`kD=b=xf#sVp&)#h-CqjgDZUvdK_2!niYar
z7J39@ObeWpT`6oZIk-~T>=eYbuwC#dV{&k%ufgQtN?)@{5Ys}xAf^RO4zBbym>gW`
zYt{>5Sy(HGWdW0eD}4<X2UiN46@u6ndVsNXHs=$6qf8F2bT(%Jur4eBU|qoSB%KWw
zEU9cTgh^%71;Dy6129D<2UjW^<RqzVLIB1E<f8B(nH=13vP=$ch>yPm;J5l<Z&f9C
z+@sF8)11Hf+y`@)D2T3xpLAckSSOjkXqC7uFZX}tp{(Ho@sh<Qe2tz{9@prrdFXDq
zWkntiNV}Am9n3?O1M?-11J1L`tFw6+;-)#McDO)CCMTX}l$jg+5KRwmE#!@y>HJxF
z`N2FCKRnDr9w#Ey`glbR=Aj4TP7`@3jsB#(hQU14Ld_;`{LI*SN}0`rnW%|InM`y_
zPbzQJU>-`N(IyWS(@y1$9?V0B)ME0`I6a}fmccw!N@GkO3aH1GH>R4$D-Eca#+pp@
zQI9EeY&CPLgT|@V<lz~HX~PX$qs%9wPsfWS*DNt-=D#Xg>!lTHG=))`U5qN8bwi0l
z>M)baG58{-W|CCYQcD)cC7jKAl$=eH`8_RW4d1i9s@UjZsA7ak<(T`bQgcb!ktUUc
z?cbHkuP>SAnoKGu+&xOIPg2L3RL;7uD3v!EOxbw6Nyd-uWhFN!$rDT}hufEwIx0z>
zXi_=m?pEsPBsDatXcu2pYD<z@G^uDAUr_3pB(-ExQ8)fgseXSH51CGsfXg%&W0T^(
zDUL$&d5T+R2N1IZh}i+e>;PhR05Lm&m>odO4j^U+m<z81h}Qwc>s<Jcm>p3uJAjxS
zK+F!%BW4F&A!Y|$EoKKa%nrCVvCXefZ1Wou+q_|R<o74G`Avy!eoJDTH@uGg?QRUS
zBe2u8#`#@hcEk;{1NMm70S&VQ8fFJH%nrCVvCSK1N8B(wpka2v{=_zKm>uygiEZBS
zI^x^o#5ix59SMfn0S&VQ8fFJH%noRn9ndg4pka1E!|Z^D*#Ql+0~%%rG|UcYcpcF4
zx^^$#?n_x1+LiZ0yLB+YnazSbyV)HmgUx=x7H@WdCvQw}9{r-havsh#c<sp{6GY|*
z+70S@p+#0yEe1Wk&?2N4S`_3WibXCo!84(|d}wK|CtptJt0!kpXsIV}PUt2-z-vgP
z7g}=Yg_iVrp(S%(h*}(q=7pAed7-6La0Nq^KvP43ywDOG-DfqF1zwnV8CaHYya~3b
zBFplPHvuf)coV?#jW@vtLCf-uGXX5$I1|9~jWfY&LCf-uGXX5$I1|9}jWYopKQ`V3
zuzcf9uwBryeB(_3%QxNxuzcf9&@X6NzVRl2<;$BuEZ;a2tQE8@-#8P%@{KbAEZ;a2
z^axsxZ=4BsnTs%%<r{B;?ZO4i@{KnEEZ=w&!19eZLBF77`No?7mX9}qVfn_HV6Ebo
z<r`-LSibQlfaM!^f*wJ`@r^&hxf;J=`NpAO0hxy78;1gU85ovt913(YHZ0#b6v)fK
zuzcfC5E3&i-?J>=vn<~;EI)FpXT70EJ)<1+<4E349(S41V$^s#1su>XdeuMDk+PqI
z7`m<kgTRb3k!vP^2{KAdbH<~F28_dF8qkXCGhl4dm`lbKIqObyTF`g{Mq>;BjKWd?
zXvQP}Xo@iy07qgP0F1zH02q#i08qfO+Sj?1c9Rb1fFh&+GrIeyU}N;MoJbXHi2hIw
z)<>lzG0&sDNia8<UuSN<>!UauJyrdR$A6Nd>1a*$t5oz{H5f#{tp<5duNve{fojl=
zzFZAD(Y+?fd%EbOUo>HR1MnLrYz-cdII&vHm_q+)GKQJ3tvzePdT_}>udj;6DQJu)
z(Gdy`H>uK8z>`&AwW(x;3GXpst4GKFk0ZZHzS1OHMfer(HjxIC@wmdE3q-}lFL7tf
z2j#Wz!thoz*Mmc(${PRJ0Jq&r-ScyOJxjt<+v6*Xo<B^HzH6TUy34y_vtM}A@ii~4
z@oKWU*67NVVH|B;a~m<5CiRWpV&jsNxz?!6X#abHmAhZ~_k)s4nhqy<hflbZWh$k7
zQmLa#D<6Jwig{S>wW|8&i)*J0R%Px&s=Df3&wZ;qZ}&g0ZsYD5Y5nGL&{f&+%HfqM
zFOAagRFz+Po6k=mSJuB0RqlFeq>_H~(n%AB{$^G3`&D`ffuT@(-piAHeki%J=;hhI
zektYq#QC9QQ_G}ROf55B`G>XebIO!{m)d*vAD86!11lfj6Z$)VpWk!3za042J?A%V
zvp=7~V-UIsMaS0h8#M9XNBdXvW36BO`&mA}z+4Gl?eMR^I8&Jp+;LH+^1fG#K0m-*
z>3Ox3d8vYRwBD_}Vb8>Uf1~SHuTH$R$#oy_`i|W8zr4mPu1!Uag?IBH1y`(=_1*c0
z%U!P&RNlS4Gov>%H{F@3RJOk{{(ImKOYWwp+8oG(7xlPv(M{;b&=(m$T{L$_#pi*|
zAwr))2{1h$@!qlYdtUVSy}oYJ8As_BP>4IMl+*=%E;6GxH<VMQrJq4NqYqR=7!%`-
z1!}QPZ!j)b^nnXs(cT~TJ14NCl4i`0PkV)bRU9OB7eXxgys3mKfCmCf_1##CJw2y{
z^NsG#*6HWixu7~1$~oX1YE)I;@m$e^m7EYWq%^mzX+1|bdH%sc4@yYG@py!a;ZaUQ
z4zNMncOamaW<nbEGjyWw%GGf6_QP<}Na08IAi8*`;a{A1JLkJY_e4Dl8)oc$ayL+q
z%&Dog+Tdn&cLdF_Pd;$^>eg!!0+@t9fmzQycooulX3n(1vksB3rZjM>V(g4}b}?s1
zi3=P9OGXspb3{<hAdIUcENpCgVu%~RqZ_8V(35Kj%-8-2%u#ji`H^^)v^NA89QG|$
z#FJcR+&p5TXR#Qp*2YX1sA95Mac)EMg|1kDiVR;d-LS;C;nTpCH`Td|-A`QEmUCwV
z7UtYpaixyun0z@N_p2E$1|L8nP9M11j24wz%rn$UP+)=A#n6o&PM)F*bVq<C@9@tm
zP44v1vSItBQn^P4%T<WWWd+>Z739X5bjgH5DgI4}t7*~?lg52Dw15h6i4FCjLS3Cq
zoe9nD^yk{p{7!$q4V|hhYUECH&gE1&(>a%3zr<TJJWynA`~^`DwuJM`yPdc^Bb;2G
zv8+6UD`k_*M{%R<AYCFmxV*_Z1(ZFg{BH(aM-9An-Ax%TlkvqRgzz=6m&piLFOw-a
zc$sW6_h_n@$tH6Ht9qAga`i4*tk$cS$@D^)9@NH=w@D85s52J`$?Y$D0GcGxumi1|
z1rLKLmX!>n&25}1<llg_aBithrV!G{p_RxkML>~x8yQH}^CIqpGME>K#X#Z(0EO7S
zN*w_paU_7mCJx*rHUmf;1t3vBkV9e%fW$EX634P9NNfd=$dAt|alEM0(&7XFi4y@N
zhOkQ#i?~-SwM3NENeKCE^xBVF#mA(|l>vaq8^H0IPAh=Z&sYFwf-wM&2y$5EL^2w{
z!GRw+(mA3Tz_EfG<2oLV1aR2EvqNW(;Q-D~@^IzI6b}P(vS|bu-yU=DsVBxcO6_tS
z$^keX;Q+0}5<amyTVV{)i3W0_15OISc}Kz@=PgklPC*jkITS(FbVhQbaiVej43Ngw
z&s8Y?=z5769;dU3l;cn~0l*n;Jb)9{IKcm-p_`F+|IZ9P%op9t{1cnm<<OadM-q(j
z)?8k?^=mozXxF>y#ao}qyX|iLaKHn+&=uXP;s3d<rMhDp97}3KJs4twtb`ngQwC5P
z8Yh!no%jdgunsD}FmzOgR1>kDVBEqX(R^XNkdrUc)i2`OPtwMDOrnH-0@XDw>%9%N
zBSyj7K~9+Fbr8K_t3E6a(=z<A0cim*k$I)SimMUj_}LRK$E$Y)as(U&cupwt@WO~(
zJqX3E?^k(@5wRe}%;EaQPR|(|B6HC$<tTqJnDHship^&oQFJe5FoXN>l*Syz$80Zd
zJ~2_Ao=-HaL@fq-axs)#;VmgqkuK4zdK|!V)tXe!U&K$@V&P|gqCIphvxw3VA;zF5
znfRc)=!hrtA{2HbUGN*Q#jmch(<gR$dd1L~1k*t?;*1$^h5<v@9oPcDXHR!@DGF|A
z8Y<y@Y%QhYfDFl4NDU9HW<VV^J|iOFjHkh=Z>FMZHAz|en*W}wSDqav9D~1kEWx*U
zrFR%NyVz<;=gzlzb<Mt0pbAx`L?Jyjpj1J+s)SIR-N)MnhOSRB)S0&mNIZ_tU@{hB
z0rVo9seUue+YOz<`49)qn})g&j!aEVD%C~iEdzdHMs~IS<T5{pnaf9cQ~7le+x-r|
z--UYf5-ke1dckvH2Y|U?5FmtZ1JJgO7DPMOAb1wc0?@@$0$N}s0911$sJ6pLmxq+r
z;V*!`17@&VfC4=SpvW63*yF+=fTx1Ofa!>e0R31hV66+=0G<zP0L+J90NP<U0H@d*
zT~ItU>VG*^oW`niZ@V|l_lCoIk(PQ(XkNq7y<x65O!tP_-cne0SM~}iddumRrE&P-
zjO`6udc#6**xFkvhK=Ef-f&DW`JvZanrKR+8|Woa8efikm*HUHu0&!T-W%5ShN<3g
z6pi#EqBZxHN31M0_m(EHfFpa$-pW!uGMs42s~_p!a_34G9EQ<be%ngwrncTvTW?rY
zjbSgZOAPNVH?Az9H=z6FsVhrzR-#+2wrJSPa*pmT&sbR+O-7-&+_thL4m7H_+`6(f
z%9bkjLhMHLmfuSIVpgf%a??uVFp%vnk6T&F+G3?%<PX~A26%7TUs-AiQBW{<<!LKR
zO}5BEB;<R`xs|1S2&WDkd&|RCa*NjV`(P%B87LpTvQ)>U`^;mxV<on7liS$K%z{?+
zz2)r6lBY!ap6e}-Sy`&@EivcAi8u6?n^)reqTCF#UOr@HsiC)&>n)AZ8nuSQ?T5Xk
z38w4A!|`FWNn&l<ncI;j;`i#dewgLXw`shiw>O-?!synqst$TfBYI2C8ZAuGB#rAW
zP34mo6G`=!rf8@pQlPPLm^!CuZ|M*!g9Vtpw3eE6>Sbdx8O*S4fJ+7@e_}5O65TUZ
zs~}t45>5j{LBV0BGOZ;NR9G+tK%7wws6HHLGE3un`3HiGp`$`5#>`qUTdj1CsRL)~
z=oh#MYS}hCjcKy53lw1XsdBuKgh}KMLpdfFghVf9@G57THORrVGnk1Q+93wFWiVq%
zV6d4)CaP$bu8~c_ZU_%HYcEkKG{}amCL{+H%^I+=KxK<hQxeooODqQ~SX48$ARLW=
zZD4IPlkbO94RR$Y140GiL1tUFunjX|yTO*Rc5)69R(F^!RA6Nh;SA~}$T&&JSTcyt
z3e(CsgVV7=tzKrf1iH(K$LtXy1e441jRNT#&8&>o(sBAUk-V@Alrj;ps|obCc*9P&
z*u_F=wA18g#|r1GE6mJe`v@(@$HOgV+4ZginHaQ1U=VylI5t5*P-U!Hd>S@Wt#vnz
zm()lzC?Sj*DLjWrn8;|x1fCi!1v?-WEuq=k?EO*}f+n2RS77%DA(kOhEC+j?ZXIkV
zo4q~SQZ(UqINq!%@9l^Xu-6Ti^_H0YygJe*T!M<Q=Mg}(1YjaMOQ9;*XYdR9r=<dy
z4p|v9r%1F0`GjDg4v3fRQbWx^GAM#@0W<{pB#wht(2NAFiV0dF{2II)#!~npC<YQG
zST%vJOg2b77OXN@0%_MY$L!z9>J6yG?!gI+PP7^%GCN<3Ny<b+TzEiY5Q#L!$^MwC
zy*Le>u+|ynuW$>}Y%$N^)_CC-9Koy$!~rT!fz}YOcS|2w*3tl`fqd<dzuo}^V~0X6
ztGL&q@1ZM9H!{1al3jgB6~iF8P-D23$pMR+>5<t%A~-zjkq{T~u&FoJx*KZ64lq;(
zjIpE)te66h44_XAWE{Y<F-(fxDNvt!LjVU*t3Z`?;duI|c>zseSmS#U3^L+gqD&ya
z#TASV(0`a-J&lqC${O+^LS`md8uA2p8t`(m*oJJ8O8RA(D#(`V<uJ)_xtTH7_aZW+
zlKoiMi)dgN3zUc>tJV_Cz?)S3Hij!EmFg@8aRH|#VOdN?da2I3L0C3Jt`}h?ZS$FG
zgp%CAgdu%!Rm7mFPH#{|&@5%K3+cd+j$Y&?yoC)0qb=hmh8?J`aajI>ZPws?wikH_
z>C%je0qWL=9bmc_0ml$HD3l}swgwzrvK%abfP)v+G&B!dq1zvp!{|t_&A=uvgdEE=
zwt1a@ED`d15v}CWX;~C96fPBJTV}#>EUWMy0nU(r2sb35S_g7Vf{(4eMePWlI%7w$
zq0C2Y3y$p5P!eJFJ(MFv>Ch-{LQd6LrnwU#4mh^cKOcaih9{FlR5$H_R_TLK)^{Qe
z0-Nxs6wFKe;)KJbwn224!iSf8IuR^^jh)Dqz%gi!0D&|*NW{_wIpOF|L{wk{uRdUq
z!c-s)5{D*fdvFw&n#j>x4hY?t6grW5f%Tn8y}-Io|6D*y3Lz&Pg(k`V{@=3_^F1n%
zpfAajue}>^@l!2&`H5qfe&~h6LyxOB(s%>93(;OD2TGE7<*qt+bX&hf@)D0+65vO7
zT&WXjj!@x$*>3f_S00jci@2)TCoOwi{YaIj+NX#)1fUd%_B!Z$Il%Ow$U`OI+14G*
z5o*u8bjFmZoxB}^4hBC7ye8y*6m>nRg{2nU=33Ba^`!J*5@VWCmA{exW69V?zz?ki
z-(scmf)%{8_N3qxM=-0SLp&J~PR$DyzVurDpk9k$Rj;MspkB+b(QElNdM)4RwPHPz
zL|sO&1&WM@*W!-SWAv1q`j90+K>JewG;gxHDaAWdLQMYx!sr_bBb81=(q&g5@RZXl
zdX;4uH#tWsXNJkikRxQ&Ik)7-xcW*ZN>igbKc_=!${HX(jT~WyK^h9sp5aiw5yfmW
z1!|WL>`9p(@ZyK~q?L);$0JKT0CfSay-`gbYMLCqviE`uE`aN2p;T=vApsLePr(&?
z<8Ty&tQndVrj|h-bIT|yEnV1j0X^{PNseCB(Tfzls7{Z)9V7HWLuAf^QWxYIn6?Ov
zijdh+VFMv;K!jOBA)#D2j1aqn<_a-EZKqT?oRD@O5;h^B3_rn(qx*jZZYFsPGS%jI
zU0#>Z|H<3g(k@Jm8hAo4bf-BTs4nDnix$esb1)z?WW(@yiZw)pppSffb?#jv`#`%+
zufR4Y9T0M`9jJgUcJp$s`?_qK=`|mIQYB|VoB)U0@22OqN6b5y>YsWy&1pBgl(uaZ
zLS6YE^M}5o1J$1_<5xW`XkGM647Ny6_>{?H8B`Ezua7wY0>-f@fEN79RCT~)u)$47
zAp$(PEIn!{3awG;(LB=w^DeB|Oqea4rzb$F?_<Z(#M6Uu_H9r73Z@y#KWGP)fS#cJ
z2knT8`zVFgQQO~fY$Ur7m>A5&VkXIB>Ez93gFfa$2^6KeGWC2%x1>G>IhZMH427Zz
zM`~VE&R5cI=EBgCS&@nNBOiU5T>}<?bvW0o1Ii3ko$Zbj{dG(4$T<!AB@sFjpgn`k
zCF!mDF`vZ#>g#uV(0*D&?LqPh_M*)%$wycV#ZRdjT^(K4eL!B5Swh>o(P!>`aRDZ|
zZAcEc4b^*7lvmq_6pa`2*}i32VpUtePuT+%mBdTY!s{riBMU{Fh7^r;H*)_Th+|W>
zWk}fr7j3dd$GwiCa-XEuu%>AITJwcAIhra;j|k#LhntWLVzW#Lm3DL&WS4B@h-kA7
zqV|sXxgDjV2=8#(U^H%|SMR)Nn@R6<SO@bSvw7i&_x2&=_L(DBJdM}3RbU2+N*iM5
z^KO^Y+VP?{A%q4e481ovJY6hsCO8WC2($q3QFZ7I&ROhQfQ*fRv(*v3NPsmjI%<)5
zzZ<?DA|mpTA3|G!zjZwDw;Wk5<Zs42{Fg3IC!B)QEl0S3MR<{rPa7t|%c&MG*BZRc
z*F0zqOAhjzQ*K>CIz3A|y)H(Q&_n%ljTfUnGkYYu?yHYqmoECz=fAc64orU0P5+y`
zcY(9Bs_y>Jex7riGiPSbB$H&4nULq4+$J{?0wy8c<_WiiaI4xDtF~US;0*c_pwtU;
z1_>AxE0oI<5hYlxDdJmd#h{`_MN27YtW={S1d0|b3Mwc?H2?2!?dLh?Ot@9r|J%>|
zc?om&es24+*4k^Yz1G@mUp;X?TT?#$iBI3!<hY#VGhe<i#FqE28-MZlAqvsmpSya?
zd7Qd?!*xIU)!W546>5v4oa0Nsan<g(^1Z@f6)4~{|Ney=-$nt7My>)b`u>N$_jU?U
zH1cA-*%iP4nhWnQpmdLNveBLH#go@Wz+Brjm}9kj!^S+?JB4A^d;udsdQhbKG6~#4
zW=S10MN{Zv%DL$x#fl-4c$RG4XPiS4?0%5;be`UzFu09=25RR)q(Ql1T67UCF^LuU
zm}m3YkMj<D3HGE9pa7DpxRm&<uMF~T@#fGs1-Y82{bGm_GY5&@)oV?r2MaClm9j8R
z3W`#ut^8m|UQ9U<A*!+(CuuSRNk_}kN1{3f^oHs*t)VN`WTWqWgUi09dEZiw(6kro
zte*7F@6zH{gNcX1fy%^=mn&1=H)q&4XOP~}jsf~gQWLOr5D`Gu+&sb+96TqCu~kRt
z1jl*@JPOAkzARa@9WB2#Uv+;kZwHFPelfR&0rU)i4~?tqXUJIo5GMj53jyaB+IroD
zH|LOZ^zL(P>+aa5y(-6!B)$5=8^+D~ORrWN&$s!zX|qF)#gg8wJ@32zRp~K!m4gUg
zU{Cp~9J`<N>frOdO3W}{?67}#_<7#VUX4`fYj{!75?wF~66_@4oeF}Ep|Go7&?pS!
zdB{Ah)w1}AP%733JqEWsIi8M}aMcUP^df?bk9ka!WsomQzAv`rd$O5)uWVbsFLucH
z#SZztnAxo<B{f^0YAi-%xb6{(*x9o>KznG^*E)Ya*PT=dB}Si8k%An4{W71_u#3cq
zgXhE-ywjVbpuM<SFBk~)Qg45*;Qz~~spG)j3h)TK<6aWn9dv+e4)4KBCrVr*q*`S8
zZk6H7A&9iZSys1ZcPdal<~CyJBkCb_Zh)oXogxhb3=Gw~f`23BB7m?c%mk2pOQ_&U
zDuDQN#1IMbo+xU~%vu}%m&4y5n;PyUV~q+Y2Vn9F&S6c)bT+Q21HCkt5fTq?U}?tb
z+!0P8G==59wsX1h_>hfeZ|h-$pyX7*K|2ZZ_T~m52+tUAbj!T2cnyv2m~a=UAmZ|$
z3!dyNZ)#)tX4^u~>5n|oHu3aY+r(vpH@~^;ri2jh|Cip;R`PGQzBt>{ULO$bj<vFy
z{4!VBmUsV2^FLkdS;YDW!q(YxeCRRsS-a{1r&ii@JSv!(GsM^j-$RK<2HPWm7TRSm
ztH{_3(O2XAIo_riH-Q(x3{)=271F^9m_@)h3#q0H*7EU0Fy>DYkfjh4>xtGizAD&r
zHi9TL2FJs90JI|>f{A$hJ|kX(@GttF3}k(nMud?3+QNwL`@j%{T@VNFil3xbg=G>Q
z?F(G!s8!A+%(lyE5{q$P6zi!EC83A=HrmIsNNa!EYPWa{FQ)dh@ilwVwQH~Li|lo~
z)6Ge+eZgLfuNFirS|UJq1&?*1qR@#7f1?9Bx{)^6jyz$s%dX2--I|=^<c`cBub@mQ
zu$bm#D0CjN4zCe^Og&MVq{}FI@YmW~#zD}y6(6F0lWkX^U{ldJ+$48Ad{L8uxys?i
zWARy>-eIEC!luQpn(2aRUw*|n*6TP>D>_T-_2+yWDUexNZ*#KG3-H3Tk&<{Do;E_v
z0%V`(U%Q<x@kJ^}alMdk!UFS(xWXb=P(){}D-C$Uub@j+P?lO$*3EvNaTBYjc}}8J
zHhLC?Z?ga^P2OYEjs<1e>O-!y!>3&4Z{%C?O1AhLVMkCFab|D_!`-K3#^yc+mwYv8
zsZ1c0+w}K*!D&<$d{p)=t8Y>ZdnXlC-nV&*!D&U6pscCJ1bk=N@YLB+g?nNB_fXoP
zc6gVxo3*T*A_!wo8l<IJOHo+5!5X6gi6X9@BzG1$5pp7+IG|#*7@8o5l!s~#H5Nrd
zlDmBX7kP+Ne>#t73{2*N%tt;{OKWz)TV`K&;lr%3-$UkHaanmODOV%cW4S?cT6|-{
zHMnLK%AGBZ*^<^kjq+8?ngn68G5<Mh)S42pX;PW;aqGOH=}n$)lZtGIblKeWQ?Ks@
z&S^IJ(CrScE57lJG8to&%am7L=T~X`8Dh0)0`q`DgOvitqXED)k*Mi~!A*uUO(F78
zQ%-O*K4(u+OBssfrKX&o=DKe#1mXE%>a1MJ7P&|u2u7yZmcSHB>-;3ER_^nu{I1Y0
znU7TywKohdy~-;h!n1mnQUE)K_+__ZiTSs@F2ChGZ(&+@1PkF(AP1K+`|}&+lM#0m
za9L8YHiW=up`$VHh+0u1e~R))aZZ-?nl49GWFv6dy<w=)ohsF#4mOaB!1={mT6?GZ
zt-BH5`M22CE&%|;mvpw+gye+Fo<VuzppMlMeR9&R=hvMdb-g3%x{$U;C0eVx#=DXE
znvwjv%eHFP3Ki8J-IUl4h$DWH<5V-=iT>mhoP)%2BCAPUQ3eLCq?;i@FQ}XOb?=DE
z{NJvyye>FTVVdaA`aG=x#j2{=s*r6hon4(=p~59l6Ce93G+RBRPXa?Xa0r-v1a@NU
zFzP$Nj-;bX=#1FLPy_o#Gnb>gKvjgvZ`xe|?N==_EE(~D^}@%&xS}n9f3qzr+5(d%
z9oA7w=JmAuAKPJHw)n^blK4$!(-CdpM}e(k*PY*titngb;|ZM*gm_u+(yYon(-oI+
z)TR~P2-&EE6sDf_aa=+(<#R=H7W!Vd3%XG7dtJZ<ODu%^MW_pfz}J&N7m9+f3q&U@
zcZ!5B0I-%|-2szg_VRV(Jd0@e|HCp&5XY-ge>H8D#)DVK;$Zt|lS_4-11?k#Wn(G@
z{S7RyI^Zml6wX(mQdDdgwR2}hkUe+g$jTu+8bkg_dd&=%b_K3^*!h@RY%pr$f$gzz
z#4M8g7payw$OIDsRF+#5Yz`!UEaFsLYA3xiV9bzS8$e&AHv}}8^rk?nmPMS)3-(BF
z3(TdB!+g!C#WBBT)#3nPGiz})a2<8WqTr#x3|qk?Y}K5i8;=L(qZT|Jn2%bpIW%{)
z;L_0C;esnebB7DA4b3qvxFIx8x8SDG{MCX_h8RZGfDmV9(%VD4nMv;oac3sIC#=s=
zdT&^dl;-MnCFN$lp|n<?t7Nb~Pf1jtuVkdYK*@^wLM3bJBT7c=i<GRdFIIALeTkA&
z>PwZp2CFQ|>Gl1UoLOJ4<Sq3TN+uk8aY?th`bwqv^&Lps4DbTv<XPKx`x2$w9oun9
z@$Fl!6h}a8O1ACxV5N6xJ1*%iS3gAQZf(aU-J|Weqz`L5F6m>gegwoo?n$EOJSi4-
z#Om-drH8K$A69x8XU6PN=FrvQZl#B;4tFVCYX(<sLJW868fX4nm993+ur?vejI2$F
z;WniQnORqx5M>M2E<{<5wF^;ZW^F^nB&}_TSben(F+81Q+3N5$(tj+K4O;sU!;?uC
z%OtFQh*}jAdH{o(_92EVNEXPHrhSNEL^4lCG)(w@I%&vy2Igcs3&itaQ$ZB12IHi2
zRzm@#`>lo|NN2BxLP&?3t05UOL#rVn(pjq^Dbks%Au-ay)sP(NjMb1J>Gai*B<Zx(
zkSOWEYDkuJ>S{=sbPD0NmG%>6TWO63DD9&GN_%O5QdBRuD{WS3fHK`QKxu^rDD9#F
zO3O4rX^93X<-|3Ps%Cbl0ZLh$OeoEZQRUnEBC?sjNZGc&DBqzk!oQ}y(IMYb7*UqD
z2Q%fPpHj(TyJWIi$;!4%ett{yBt!GV6x@A9e=s9C-~ji5;3AjYeSmwJ()vnwc~@x*
zo(?$E^e3NP>24do*ohlO(#*JVCLfY9Hv3n{Y8SiY@&n!A4BlW*n+Y;JFJ=#SeEvY!
zUErAN<jys24(X16U*p~!9QmyfsmToVD7K38EV@>z#xielre-l|44*Ok==EE>02xVP
zghm<x@Mwfdv&WtIhj=Kt^BRE;i9xAn)6xEx(_FO7a+-*iTFwrMv7A36Mqg<9;nY`h
zn&C#sQAd=#t;fBr$poK&N5sAr1T59D(B3Qa-U7?1j`@~T9rG;bkB(7!s-t1|R7c%%
zsv|;Pv9MeP<eL>7T8i$52x?4ytdK`+Astx^u4Wp9OUvfgQHe-9tTSZ~_*BtNX+E2*
z==T8YjDfCTRR2UnKKz!#yGq`KyiZ`&;vXV^S@;l1E;!`N8=uA?8p(-V!44(1kar4p
zs0ZYO2D>nLTY2JjNXWK4Va0qrK<*bBY|&ulqj!o5J0d4|@+E~CVeP7XS#caCIg;;E
zh!J@fk*^R^q?xPui*AJwk+(MwstRqvs$BUVg%6Qu9{FB{3sJB`@_iQ1Qc5pvGT;_a
zZJ5H}^0ZNE1<O;vEI5{@XqgCXvkv1uZnE13S387%rbgSXGsTu7%$&AcM}a!on8SWQ
z)(lLuT0}7GYGuGAtks+(D&4FAY3i^Dj;<ZV9r;7?;Qccn{*1TsvLHMZo=yJ+crJ(^
zQaRg$o-0C)baN%(b45^+DpvwOR}AX{SLz&BKjH*vu7m=v2q4hQm5{&{(Np@k5*oN7
z&PtIh0fMWa;C9WGg>&bU;4KO%FJy2<yaL6P7hJi5L6x`?LbxKffkMm+C0r3@Mlt4v
z6zeq96b0N!<GO2!EJZ$Dm2!w4NF~CJhjoK45Z_2D74AHuJ8B#^SjZ~4J2%*v1vPrf
zS#jMdV^IzRDgu&nIgF*LP@Kg$Y=z!R9thoklpbfx>6R~-k_Yn0?c1&rg~XdLE=9@x
zCHG@{I>FO#l-&t#ESb~g2D2}Ays_Z!cOw^Eo{#Gqk0bh7$|0gq2_h>7H2utrKg<im
zwMEI9CAVZcPvz{7d`o;Yb|0>$wtJsW{;uSPr&`0Vv}4fyKA$V|$>Ck@^))q-Mr8KC
za&m5;yEuIKYsF-5pZojp=7~~rOU?bQWlrmNXIbXne)qBF*Ls2>HY*0B;b<@l=+LE`
z7ZwDj6&I+82hU(*igZfS@49pG;<6o>E($nX0CI-Ohr9@tpTQOrp^G2X?uu$j|BPMX
z;lX9?eUAM-jS}aIL%;a!4K*7kENfd>D9uUjM2gfBn$kB6NjOa#;I+?as#$%r`sJM-
zZRw>_>Xe)qk>@N^d@yVXo1+YFZL~|$g_;+!M4>rI#HQLGYjhI=ASb@X&J}x;sj5--
zh3S=f3jH7C{MQ3Kf;1VcdbAXsCT02Z;c=*#eKjSfz#_}bVpNmG)O;|aFa;`|6i^{Y
zEt(*|xGCT=x(vX4)d^trPK%$(5X}Isu0;IcE!Bo>nZ+U<#?^ADQPe8L04tcPGU}p-
zrpPy7m$0h{mT7zF@OWqUS?p)sPdisg0ZqdOnUGW16n)RN4)XvOh@f8|h|$Bwl(}#|
zz$PF9LNUj&MpLF3K@p_r%_86{K^=j#y8<2(lfh&P_O}KK;Biq(H08KPVF-t6?nY#a
zKotUo+@f9&!MJ(0wmTWAAQ1@M;=F(p>g*s?><THRW^kPh?l#5pImJV|DO}4@?|6M6
z(6H$BTjK_>b@*#Efb!`dZ&bAP4DiY<2N#P9Ck<&GWVmPyjn#*nG@CF<ydfod_R37Q
zdl2CGjK=J7mPN32bSdM6tr|R|KAjILQB`DwnMN*_)%f%?>iy`kaauLpmZDk5V7+1!
zi4r{47&Iy3S}4N7Sj65<2)bMyp(BR8Yr+g$B@k^q(HC{MPj{!vyWa4luX^-RBkDnl
z2Xlr;Mz{ag52TbL{5Lgi=hPr;_>nXS3DO5ihmFjypc+*KG>)Ut5v=sdx<*W>PRP+C
zD5uKObUz01^m;e2U=tl$F8x45z|eP;+GLr6!0ezUPO4B>rmB&emFdF_-|;3$O?ztq
z8T4Hn^j$Ns4C<>n(V+I9ibygVMrR)NiFAAXlXMu&@ZDs$lU|o33}R$|r0I%rNz2(b
zJO&?;sj=Cp*(jX`f>}wk2WFgwG=LDofd(TOXdoE~+aj}lhzSzs-O1Eb=3PjFZE2B>
zc~2Dbg#%7v4>Q^X(NuTL94dniaH)B?SkHUZb6_`_AW|qo5-o!0^HA&Cmmu`5ANigj
zy8JgOz-mCM3H&C*NE}`Cq1m9K{s*HB`Ci!(8ShF21P$jYwZCxPumHv#3p#i%E@RTY
z=<G1lw0HlcCoDGe=h;DhH&Y%<h+s4rjR~O<<zk$$E-t})bzWWa=sNd?BTzG1;k9{~
zgl&o<*Z=!bE$V;S5c@Ev5;h`zV{Yq>xsCom&>JrwN-jT=#nF>jBtJaTtq%U<ie%1F
zZdp@e4wGH2fwb2X^}G(PUz3qujjFFznf>55s_L%Gu6j=G>EmY4>$y=wdRZLgKMNj6
zbDuR0=n@13u9t+lZVlKNuV+<Kn;#XIu%buEB%RQ<#h&QZ)Yxp-$Yz0dZGEbn+Ip<E
z?na4RU(}a1u{Y|qCiZp%?cS`3cGY)kPnDZ}$uEy`msB2pZzdEammKY0atbDSwxf#m
z!QJa634wyZEEss{=(GGIhQuboP=-^JW4S0`V9?6|Jk)@E?K7l>jX*uzFqF(Z#=UL+
z`y35rj)8wLrg9KzqZH5C6vOp$-LXWW?Z{(0j&Xk;yw4@ek9Dt_CWPZIV2DQ~83pA$
zy6#xFZh8kTm`K*}^zf@=-O0y2wyPLV(_MDU$m1%N&1xo_F~h^pB!_WYyd1Brv#8SL
zE0MK4r<S{oL&;_9-Q13-C%G8%_~Lr^h4Nb*TVrzh(PZ-mH=dVsdh*i^?vm!ERopvp
zO=soH;dLTg{nMN3azTkamtd9%NsJi<$Dt~#IjC(+Po0YcIgY{v%k`ptFMg;w*u_i6
zd&8W|F@!)C4u6q0Wy1u3Dok;{I98F7#GNG!bm&gHNVR|^nAY6^%fDoBqnqP$$(oIB
zHZID!7;&n?J1V7-2Q%^4<eeH7d^8e$I_av^zG^o@5%5*H6a~_h7Hd~HvWP6iov0ub
zct9Zas2O4WATBzXcKgZx8=i}$xc>y)_|ZZncW!izK4K6eO+$up5w&VL`SnJ(%$2UF
zj}B-%G$)BylB14y$5;AkcY1xz@$STaI8Ys0r~ZvSX4y#o<9J8#{z#3Mh?5?Ejw)X+
zDkz~-U3^5Cn+O*|!mL|?Y)QA0`i}0&$3MVeEiW7H0NmCC7k`BZ8jc~cr=uEiG&L&f
zRgHIRLKh+u<0|>}@h%$w&o@F#OW`64Oex(9(m<(2G>HS0$w3?lL1a}^RRM2Mq#Q%d
z!Zmi8D?Ye(Mx{7@4r8^5@RJ;KA^}v>`59v;1`cLntSX2v)DvtFBa5RbIIYqC2)I`w
zk*pSn1@AvqNp3vR?YFW-0e0>^5R>1LA)$!3zFjk#R9L>Vu;i%|-K<km@Edp-1bhZ@
zm7oU<HON^ay(LVa>U~Pv61deyfs>mMRR<|mOp}BHBKeb(+z`qZ|5&BvG|>2zB5P<(
z?Ghu<c<oA=_p;KdQ^2r>*bt)!T8lKmnb?$k!|ACO4dxCgPc*uyaYfq^;!kQ_$F3Pi
zQTa5Y_6X|vA#+A!p0u_A!Ibd0gMlrx|6pO&;umi#t%}jZA(~LQ1}$KfdBJ>pbTTEo
z6($OPw*p6FmNV`WNvB3*a-5Kp^}E)<hf6nu%v(a9=U|+^BW*1O%sI)T5WFmWf(M2Q
zgm&|wqw}f19Nd})DZG-IYc%o*fuaaY3~O@>U^v6R#c+b?4W4Et{y>=w3$zg`7Zew%
zO!#QfLaGsjG1h4fMPA;cB)C<p#e#4J9%c|`Ss@7fYa^;sa{No(V3W-To*)&ef^MZ}
zCIdo&6WSCwS-wirgWG_038+5TY6;M2;TnvoCCmV730&8=gq4kN37?9*{dG*VmMF@d
z)(8#PA#)vrg~kfkw&3uM<IbeU$;X9O0aG<D^Y+gGV@*g&&)QM0+pTA5&bYcF$fWI2
zbHdXaIcrXiN%%k29NMAgn0sv69B3{zD1vD_3gWTk^DlFAT`76+W$tBbV(tC_p%oYg
z3QoiAkeEJQmG2;oLJ0`qC?64=%&-jI<h3t%>)h9q8(!|NA7Tj7d_OTD%&0gUBpS%C
z_<i>WC2341b{BVi>i6AnI3M{i^pgoPrzVrO?d_jKSM)yU$<I%5OAlH@m7#o?p$IZ-
zj8t*W7Exhz6P?=N&&N4rQY0KSJIPC5;YMcSND3^F+kgk!okmeJFu5qX;uY@I;g;RS
z<QKeWnf?CA?H?pAIpL4o!Y1}6y=Oo6ZCOkRt}M?PYP0E`MPe;|Q9ereA@eiHi+W9t
z$lZUHcjeU4ARXH6f!#5#EyRi+m3+w<Y=+tBRF~VMQv**b2KDlJ2B3{Rq>N__z*05<
zjjLCf7gMfY=;Z3Pt|nvH1Pi<dvoXn?Nn~$YSR*izJwvlKCSei)PCVHL0lkBSG$xsv
z#-M)k;=d$F0zo<^QPyN*GJir7%=#O~9vG98_%DOek4fwn*_gz(-C`JwGYtZmlxZdX
zn1o8Q=6JL|Pji}C^|X%BDjxCQ-JEpKP}z^i3yZGORAuT{K1x3SM{b+Da>t*%(j6a=
z-t=ns<<Na#$C<Bn{mxyRyz_PL*eS&N8_DJ5wyrQa@wV?2lkdIGebD_ZdF$)l#(o~h
zg<7H&7<~w9*ChA6-o4(vIazb6J5Ypv#;NX2-Pafkb@2_~D<%(}>gG4^`8Hmp`b;uk
zyqha41V>gYBz^ty`-;Z^lw1_B@QHWo(e>%0D}S3kx+w<lwGZ3<;Ny^^i|_bB`mp$=
zj)yMZa(8;aS^V;(2aiATY^AyQ$?s+N+1ohji-%fO#A=qWp6wk^XEm?e>n@!1Xlqt^
zaoyhL-f;56?X8ECzPUBK9jN}!ini{}Dw=c~?w3MLYz6xU1EBU-Da^LD9wux4)YbZb
zxtoyTwd>NS1anMY@u%*{gKluJ${s_7bO%5e4s@-(r55<dP`yS%ELO?WWY?d%m2-CP
zF4nGMJaSLWc0?T0PUe2(B|%R!Nb0A#X~~+?+~Q>CHOvaHKh6EL<cph`oN~H*vl~eM
z;dJ-f`qR6MUQJI0ePi)^zSF)ekHwoI!3}S8!)`|Mr*Cwxp5CTVd5Vid5!}`$C%lol
zeufAtUxWUp%P2r=Yf;?=qroUmdpy@#5ak#kb$Ud*MR0M8K2<=QJ}D$EZklqwz<Cfx
zUKB9UzBf14dmnB(GzhI18*#)<D0oWey`6fKo2Uh(LRFzG>(Ono=GRY6grBc%bJ7gh
znJFD_4C;*tb%1|EGoo3wJnHjJ;hrT8Tzo10>eBAu$knE(_>o|}evYqQ?$VABm)`e2
zu|a*gtE#;C*OG#(tiN;d6+FoEK@}5AtIVxP*sU_R;x#i8T<ds=SCT1jbtmuGG48H)
zqt<$MBvV<jMp(QNT>HDlh{&CZazkvh-V*?QF>xGdq|PN@Zj{9tdy*^O<mUF_)0**O
zbfkUBSKj1)(!5r#UQB3=eNf*hw{!z7<$#v!b8Tr|nwN`^CB5jVsw9-C>Ks+O{3yRL
zeoAWu5|XrdOJ^?@I0X}u&_5Rtl32B>`Pf5QDEUTlYb-uOTC$cjsr_ye3^a2okeGqW
zWJkn$ZNjm3r|mHTGEhUj)FF9ZZ<S5HrCn-LU~34QvWnIuDVNeV(Hyl2B8WoYB<^UP
z>iku!S<I_y7E_n{o%Yzo!dzV<h!u}mIH|{gS*1J5Pdm(=vAC%o`)O4LvA}+D1);xf
zk7eyL$i{LGL8R64ROB?*Z=6b5+hFiZZax!+kW219(;eDhwIR?Wos@PhR0~&p{iVb8
z9`zVI-j$i=ihyBK;>dw2KndNI{NX0|@2;GzJIfskcWR#HrsYvB7I(b=EcZ({<#W4>
z%X7Iya^h}8KK%kx-Sy|VLkq_Ak_XRm`&U|%VKq7N&)nQ8Eq*Az0zagky1(QZ_tEwO
z(vN$l;i_G_G_F-nuKhFjs-V=J{Pxe>k-f+~Wz6uX_wp?Jk~jRLYfRm;r6g~Eo|w}=
z7;?$xbKQzV>l#^v@W-Y<B7ZSNtC4`v{$(v^JnI@ncS86*me$a-RCSP7sg6QEdF))b
z+|5m*KX=nyn5_D9cdYA6&i`{D)0cdfWNM2?pbJTPM1pGTFyw~Myw%N5#^2&DBLB0u
zxFKAslAgD^oBX5g{_c$AZEtgLs%pt#8a!E4AAOsfpJzS_lfk#UQ<^ZQT->Th0*2@V
zNdX1~h5EIPM!d%ROs)O1UiHQ|{>zR3qPWmeFE$i9*B3CTjQ?Na8bR&d!U(iXArgX%
z%n1^V@DUi%2xG_o(LH0lukCCo0`qlNq+$|mNJ7#vQ|#8O%q$C2WmB#;6WZJQcCf}C
zVXYjr6K5nil#fZ))CmN$EH^3zZkN^>e8YRP2?xp7&O--*d$#yaG1I6px_gb`^kVt)
z-RKvKB2*8~{C+_9*WuBa?1|VARVAglc*dBNa>`93CxUg@LKLV|ITjXW{~pe|6`$+2
zFJNOXCctC*39QNtK-%wxPM?plEokAMLQks$j4UXb0Ae-jt51ms>JDI{BRY$?NUniD
z?I>#cUd$Q&;b_2<sK>PWb)pT~5-*^?(n6v~i;7q#;ZxLMPV(f2MbM;}aWO5EvrEY|
zAl;jmZC4o2Ans5m358;FWMp@eXFXqI?vUkF{MX6AYwxi)9E+|#l!D5&EMpztVLsB@
z!M>9h8JcSkL#%TGWw%_+ROa9~{UJodae|H1A@E*+g9=^n>Ww&JWeg)!8X?(?#27K+
zJ>eK0mQ_##^lBtcP*}v`!<T591;nbXeFUrl_hV2^t=^l0u_nV%57qWg0;BwNfF`aH
zF9wRZmHc;raWeFO2PifTjJ0Qgu}5I+0h)jjTG9}yMn$QLM1a#ofCKeXI0_lkeI{9V
zP9wy{o@<e#Oj43?Or3&BIlzbn&I2aiHn?%?5&S*8SwQlB(Tq*#p&BLIctl-hqBN~v
zMU|;=@FprE0vaO=azT^R2Q?|jn1D>_RG%0KV^lXaDY<bUs8eE%1ROdiL8K|$hTf?$
zRB|S<k>R9lrkh5;W_}1Do0|JiYxEdz=oxDCz~4AsTT`=62`+oifVp}szG<gMv!9z)
z60m#Dl1_U5q9TYM7925;($1*grqigG@u9nnKVXK>IV%O<i=O1CXStb8s5EPH>9mHk
zHoKt)zAiw<gcV00Q*Oqcv3RXU7o*MBW7;@|nZ{ub4q~3wzM4J}hR_R0!K<eT4>+cZ
z-<a6iM1ac0-&bDJ^UlC~%qdWTG)22T6PL2|n*H2VX;CIn@ODc`6c;^@WMoXP(eYwY
zUoKv#v7Cz+Xz=FZMPu@crmiu0NsGNqgW=R?1f%)~fw-y3$c2Oz1@zz^Wu)E3T_gFU
z3*8W6#<>@|k>>PZ)JOo$CO+jvCK8E@G#Y&(lIhIZsYq5mtx+}@;_uOCleTG4${3PU
zttN{G*q%HH21N(}4V$$vR`nPIu4dJdLQEtxZJmxq<vo0JgB1kQ(d6OV56NpjiUPPc
zePMK+z?9Z2bxQjmb=g)O#O{cF#$i66%lrQvJL2;NgpC?P7)d_~63i45CUeFtoq{GG
z$R(fN?0WJ&$M*!u`R{czXKS*i_gh?}OAV;#;!@YB3Ko4=U*r}bge<(s&2>G=#)}-M
zik^V52g8TQhUYL@Fo+~Iqj9c%fYwn)T~;Kq2GJJ%uzrbPBK+v_+*hb1O3=0_@sND&
z{Vu{;=q=!^Tg#Ik>#sxvF3(9p;sH_)lIq2-zu6t{p$wElQBUndd_5AJ&cG&ljmEV~
zJ5?@<__2$$S45>Ar+&dFD3wee0Ah~sQoh`%sIP=v%JANGTBBrm#~-Bv-pvI<!>*c+
z_gQ9<qKqqAi)Sg`;}7gEUVVw1F~zISEFgo*#3LuU|6*k3a&p8aZqZ;l{^I7tIK<$W
z7ZG>{^<P{$1GMte#3d}FL6<=h7O0w~0SzH{pt*oM;3uY2<LXs!y-Na;9DaaooYT%4
z-(dy-FER$*CY?7nFPh3D3X@Z*hNj6ZC=0tiX?Yw`3bdEp^DZ}SwFnlVOtm+Kvt1oH
zlLFS`>=ci)lfjwcD~Yg=AKtAXDxJt#FXSxC9mU%q2Mcintl;l2A|X=q+T8rK%fTpv
zwYkO37%Q1lWFM5VOntE^%P@9b2gXWc@n3t4bqiw*o99QB^tK(Sn%&$N?&?wo^Z5}v
zU5__346@H0WZeY=8j<R`aM7)>Qu_`D#gxLgLj;5>fI-4mT2H@aAY}9##Fa5<+!L@9
z0izwx2pHzyG7oA`5nM&w2Tqt7U?>wV9^cr4Mj-nAL~Ge)lYoX&DVcb;oAJlmpT`$n
zn51kOLw((ntFaD6#c|XPG<GR;NHQXq1gcWhn^HXARAiIzNY~|TW<#&bhF)^OTix{6
zbXiNyHp4EU%npZ;F&5AF(-iJcY7@l6>e7rx0;ODLw3wnm9BMKEv3i(XOP|%!>uafc
zc=RQI@g6t(<sAjmEqRXuDebm1o}yEh=-0567s^C(QC2%_T@S{g9co2$4Ne+W2@kS_
z@4V0rH2qr7R`Mz_UC9eNEWj^mL0`^P@#P)RPiyFyM$}W-U5gT)r=x8`NDg@`I;j`#
zGQ#_$F5@Aqo?1v7WopmeW!%Dkhc5qQa+jajT?Ba^xzF0=ls}c?U!p$@Tn-?B=FKj{
zGt-s{TE-S^+7kHt+7N)3w}yfuTo{d+_*O((Mcg~bOK^1G_6);s<;YE<1G>tn!uGzG
zvjjo6?koiB)Q5gysqk;PC5D&uNR)I|)cRG6Sga__ia3#ITC|~DIgU|JCzj>TlZ6$8
zk{}jzNClE=Jcl-l){vh`j_nDo7?}>q6M4oD`O+1;4jgC(Hc8oj4VZkUf07u^H=k^Q
zT<f#=whoY^FYBOV@jzNs&;~#nHr|*Ln-HE(^^iZ|2jP(H7u6DgIS02=*@-#n+()Uv
zTS{Y)iYE!(sg$iQ;3hPNXQ_3;rd^`5XI!iIv_@dlZs4a~)(IM=Y#+*afmRNwm<{-e
zC8XB(u3BmAfX<k#W$HYGTm{G(;7ZbynFLU7^a^m5B>H<dz1a)gTD8EfJSnIa8roKm
z>9~Tndd#Y{nvs*mhg30rV3BH?S#`6fL6dJ(Fs@o(HSq~D{j{heUe&MF1$u2>%bA}m
zm8xOfPYyT{DS*X=I?swWs`+MdXAHmBiob$0`|g|0Q&32mkjdvYje=eTu~d?+bx1T~
zN$3DndWG^+i#&U-#^S?TBT)n&)qMYebB-&P4va!0XNJHy%wAjzs^HLiadf-{O~@0(
z#VXY^KR?w2<P1#|#`x8=QhT9-Cq@hFqGRS6nzowiTBblvJ@F#nwv=R3j;)mnj8RJp
z^S|g$etEfD6I}V*WW`^)$KB=~^RHkzI)Gklq{FWE0a-1Q^Ak5KIr~aC_1Koy86{9l
z@DrGjVFV`FK|3xHr10y>94nm$!sPBN-I4Q<)igc}etgRBCsXgX44#GLpsU>6vbjJ|
zdh#b%x%sJT^OCFF(kb%6vgrh<I)N)pj!%%l!{o<Txt+yOU@RnmceR`Td!1HZ&*p8J
zhwzXs^Gr=1O`1P#=Z&8~<!M!oSz%+MF-_@?!Nir_u<~0|iy^0(!~8%<5Pw6rlS8*6
z%U+$l0{g=Vb}mLcoXp#;d|WzM12RAkWs;#$UIEF6wz^$YuXkP|5+9Yl3u8=j!TVh^
ze~s(@K*H}Uj`~Yyh7kKy2Crsq-#f+0cj6!Bu&nu)Fga1ub;$>>aSM~LUgKWZY^i^N
znyH0lO|gc>3<3z+ciZ6{*?Iq=)_tjq{rhZ-z#A@mUwUJIAEAnN`iiQip;hDA5);Hv
z9?*Kf1rU3%J7=)Gss&;STf-O%n#t}DxH&jKR9%84XZ|Zuf|`p>7*C9DiYIo4$5PqE
z&EZKpt_3iLgc4*Oeb(CCTDz*A8}HE-+huu1@Q>{A!QxSTI>B*ed-omzeI~ED)*ap;
zK8t46_;ai<C?bAzZ*WL%O?QkN-R(K~NEDLo*Sb@inuoN|Lu`cp;6EK?-WoxjzBb-&
zV~j>4sKsbdJ1i7EVyK~w1*<{=G3<?^<%ki+3n8aNRYk3y*82yFb(U2;n2oRhYQ_2F
zn;&#XKzP+4nf@X7ix3J=s@J(gEwk}D_kQiBN!?n|MnOW0)mC%4xiDF|&ApnDaM?C@
zQ1Q)C9u-uw{CYQ({9v1_$sqsBZSFwq^NX){2fhLWyzIP2Gjx<8Wi-PmW4S)*wv947
z1~9u_ySi=kmx{-jU25;$o!oN0Ti(2MqJ*O+1+yK=XP(S5TQ5lO?0RRK*-S88d-<j;
zb9<J#E6d!IWgf~hk7Sw0v&_?3=F;XxX^9*m=!^bjmbop<+@59dBKGgF(aUEp%`&%T
znR~O$rJV9;ZG9xm-1IJm)9q&PGFu=?O|Wk>+4W&pa@QogKkPRCKL`tk3|xIF$%7DZ
z-wkeA{|W||l<N9Hi(mVz<b)gCaFg>QJvblAsDcwE{T;j#eCCD>t@mabj;Tz)$}${e
z>F;p%rO$9=rqAH??K2#z=`)<N=`*{AvmD2CvK>VniTU$*l7FM&`H#32{crLO$J@s?
z8q)BiKjP-Eyr$b6YW#{I7>&2y1$)S`j4~k=*+S0A*V;{@sKr;_RZ6b?h#Oqad)}9+
z9N%=2>eSI!W(vE^*2Yq|Aljc#m<cK6l6ybmmbnimmA`iDLWnsz>95@ZO^CTJZ)xqw
zliEwpr_70RIK?$rV~+<SP!h=V7=@?1G)+axx)y2M{WKNv>sq5hsfLHWm!{Nd*EFJO
znM>0f8g=$znrd9?S_4(7My^r~Wu+S1N^eTj&1oujp!?zvO2sggii4bWR>KWxCoa=;
zoJ-#PQ8!mR$p7-A?jzao@-H$p{g;+WSxq5MSxq5UW%fw5TSm>XjM`_Jl-2ki*qukR
zM=7f*#3`!*tSPH0DA29{UXZfSQdZ+(X?Gsa9;K{??*Y4iIm@K1#$(J^@2S*qDOO_>
zAJQ!PfY>E-|HfU{O;vbxGfDpFhUD(Qapw+0a1wdLHffrL(P%RHlN;R$O~?<^o(R_n
zQY31QY@%8zHF6MsD$dJp-hFq78?mSNjM|wuWH$*!?O}`B0~KXM-H1~j4=g;)!69$e
znMXt+uK|#(_?TO`80}%8Mdv(<TAHplk#APXKpNlv<6=xG73N}B`(X06kGXedoh!CG
zXHsZhO-KfBawiOTbk2<a>YT)Ld*gze+^hgVeefo?*fo+nZgSsn8<T53?v5b&?#JCJ
z5$MH7V7o(0T+kFL3kPc=Jo?%3QLJs;@zVc|T<SI@ul!s0sso@@Orv-dOyt?%fgu4;
zYn)9o-Vo&^8pW)M@S`IF-H)G09{yW5|41}DZfEU(37f;LjKedC5_kUbs8_i$D8FD9
zG)S_+o8%L&r7%E{Lnx2s-bhkSPPiGH_RpV4Hr?z_?tS!$qEy;>M6vkik0oEf+09(@
z&Yxwz3);;VKlNDVP*vcSc7BRfE*9-Hay>!3`DaP=ckW#S4{c^$$N4&hED0k;^FY=}
zKKpm>derc*{)Bt?w2OXLjHlH8#>E`9Am>8fjBCl$JbJ^vkAP?_(@|_9wJhYhcuL1L
zZtU^Yj%yaP@j%CQ$n~_2Yu2*y^yJ5X?`99oXx#=x2~FCs_BYA!C*514ThhuT>9;HA
zty_3&F>l@SNq2nJzXgt6?PE#LEpAb5kP;=K(k0b1GdboKH>dQ8pBLkPK04zTHy88H
zWw&H?v#XrZ;^L=x0dOQ=yv41GW~o*7L=LLC7zUPJQ&X;XOETkAZqC4P$K80>FN*OT
zzJKj!SSJ4Qr(Dm#?9Rs@f4mq++2hgAU<4WDr}XhB{8yj+6wR8E?EaKn@xqml>~IU*
zoaCe(ZdK`nG<zE5Ub@4rbc4wkcDTa_B2^rw{kk7$)p()*Rz9jHYi@P>EgF<I0jGp!
z6bN<5>v&%&I%8Z&zj~CfhWM&^D;tNR<T}1u^W0w%$I)Q;ZW=SSMN$A2*_1+_xYb=S
z&rsL_(ncqAzMS^rnoqmA19Ll{TnbnhP{ubt?H0Lt$*(^R-sX3{@CjZJ%^2JT*ntI|
zj~{KLr9QB*^U2+9jMN84I-lH?B84LB10p9+3iKy^a`k83A-yT&5g#kvugWFMKIslh
z-tk#i8F*G=wdVcpXKCJ|&H{hZZp1(`^EMt&s_(tDq(wE)eEb)DEt*?<n>%nIqftpD
z!UiMamgIulT=eYly5%-E&)t%I_cnLR@Z!!U?FJW(6p56T+<%*U+3=DVd_%G0TX1@|
zGCW+e;g-IUT=98?q$v5~=iRqv?tK&q4t0X2u!AIoFi{qjCO3b<y;UcwCrfv_p*3W@
zHBy3BxI$vrDn)IGA$*;^i&iCq)!&I%qxdk~k*Of4{ZrE1>8888lB;*RwIMP?^39#@
zsi|qLK+H@@R^Og4x_RB7I}(kg(*e<YlD;pwL!&)87M4sX^s{!ilg##-{HPpUs*ERB
z`&u&oC0Cz!IxKv|f<iD0Dsl+Tm4=PM1&Bx<y04hr{3SOuO-Bj17zqXS#a-Zw4ZPtg
z$(}E{cQwysLk~US_|eMICS-WCCRGyZHyDki?Un=8z<6&y=Yjx!SF9~Dk%Jz)+SjeH
za-D!STKeYWDlK9rS3?x?$%C0WVds6a#0Rza$bl_wcX8F=^EG_dlxMU$r&hDIPsXVF
z^qBBxA%LmfnSAbc_mU~owI@U|5bD@HCED~P`LDR6LY&}|jbCy5!3@W~;uerx{uQ_K
zjmymHgTk9Lb0wn`WCfH}L2#PMC9YcreIAVjM`_E~`r1F)oiz=#R$v?dEqTx)JsOB%
zL!ivRa<X1Q`W^{ho-F$+3eumocE!?SBmr|VxHS#mfz;QE*unItU2x!Afz`WYkD`m<
zO%P@Q62y`Rl@c1JXvOUM*LM8AH1FvJ@0Qvw1e2qClH0#Z*KbXJ{8cySxNlf5ZiB$o
zz+2JO4~evJXYE3jr+*4ZNWZq?-ZhyNx8~KJHZ8vVA6$L@Hf}x#F`BZGQ@0=R#5nyj
zO5B$iFUt$B2PgSE-0}Nu=Ufs~VnUT7v}L)Q^Y~cM&YSWmo8Nqgn?8Gqj*JPR%>n_b
z%)t+13-rnAtoF~z^>?_%y=b3nsn2pDemMEg9qxY{A-ww^-61RR6N-vE@osGN48<BU
zA)AknWgtN6{l}iw$iw6$Y4*hImK}<_k|+Mr%@21%M{%AVXqLItEtx8`5evr9nW8Xh
z-sxr@{OPM(j-)2`F`DIlLnj_Knjmxz9eXTfJanUFNnx(W@4C~?Xxcud_xi{#8snhA
zmNwZK53~l=ZcV@{RtD}43OJ>U15lt;>DdbL7I|LVs1I7BehVAXkCNK|Yo^;_9fbdH
zSo@}t!<IZj0%+mp{DS(R77CubSj`>WWnYA9xB0#Z<v=eG`i^AnUGD9#yvJ41Ng4p+
zEBA;Z|HXMu05_q%qYd1f<m;Fxt^!G}j!X}Mv5f1k58>d(SjVUkS2xw`)P!3P9x>^-
z@4MSgn<;2bqIw+oMD+v7VRyT^hwY}1R0EX6qX)*N+8eKZ%Xy%;e}$2ULcwlC0S6h@
zoLQWF@NS$<Q#V@eENw<Jc}0{Z8k|L|5L1U4NHc4_oD>$DWu*}BrZV`Te7$Nqnf(r~
zRUWHTN*5;_R(-pI`Yhcc;v&}^XdKjMs@t4v2@8+~cNXqFC3Lqu+>^ZhYi^`ENc|Z8
z*Y}j7!5x45HN0wH!YT38aXUjRUpv?eyglFO(>f5=ME9qlUhk@X+t9p==rStpo}|9Z
zHF{=9^31EaVl-pN$-5k9gX=_FUtF=HICI6oYi&KP6WT;(IFHsaCy(OdhCRK}h!sRT
z3Tb;UwV(@?yE2ckvBRwi)75?g23eorAku*WvtHzr2fyKFZjkc=J{?9GHqKRFIqusO
zhti1@;#)&v%hPl>9#wmCvs6rkvR5-!Bwr9{2(u%c&%HI6mb~(x-K?gF4CQg=Q|w*5
zd9529v8fZv05G@O2)!*d8WjY$13`Q0adtBydG#JaEDey`=@j5K2+$aLzj&%Xx`*Rw
z^&@I#P6`MwQzpPAmo*$rIM>b!uCU>O;x>o%xk@L(`aJK*xL?#G)8_2@R4Ke=e7F?Z
z;T}mDHrMY`?hdrm+aD;#Ysv4z)}uA>N1R%46!zOfyi?S#a_?X-0?A!riyQ0=;RXt_
z;NmFSuhVCcRXNtAsgZddOw~!e-0^liZrYl?8qL)aB-LmhDgsCy&p!+Z(SBY9!zvBK
zLLq((viE?k)MiJ^WSB(Qg7BZj)m*J2f~W!UG3`EY$QcEv4VmSt<>YnW#QW_obrPcu
zM-nRcFy8eK(%tFg@7SliMB$6~P@#4AVH;_Ww0Ym2K)vN)iw<_tNeGkXW4*ISbMxyl
z)DaI(q6UA+d}dLeCL-GBR>sSYCTfQ9Yw>5pQ?5l1#M2O)vqb*LBGGzZ^2hhMnNGfI
zgUMz0xL#Jy*WKf$m3stWPLNJ+yT=VKVv<lfsZ2mriA*N2IWTOA3Dc4p|Kk48O;7&U
zzd-Rln%5O;Oh+%!L@9D~Ocv-OCR*(t)=mt~T@Na@LnmYa<*fo`jR>Ql>9!yh6#_;S
z{Q^G6oYm+eNCy{u9d!*6m)TD|TlHPM%@jOG$AB%q;jR*+a>(-Aecn?A(vlZNwgwGs
z=Qi*NR*N1*GC+^E7^$x0gl}=q`8Go>74pw$3QGS*viMtW4q<zkZtrakjNQuJ45i$(
zrx<?|86w`j52=WMY|lvLW+RnPwn=5Xk&4Egd_sYiAN^ji+i6WTsN9}5l`sn3?19SQ
zmn{D_yCY8gwp&*d9ZmR&Jc1QXOSXO6jjX(xDKoHXVH-KXd$SeyNllA3Eo^u2O77p_
z>O@Ky3AQCqeH&Hy{^F+H$O9E|bd5)KjUouRTsuxL?s2ej#CyWa&et{rAs3}FUTEgw
z-zAv}?UCf1U_36I#Kru0CoVy?UPd)KsgGa04og{l#0f+35zGSQP8$07yQ29orCd&(
zxTDqbTYby#u$JGIwjAb3G!`}FHsU^NobSX<Gn!vpDm&x8E#Crc)$$Gc;Icph^`ekH
zD9_dMX4dr5c#J1I2enRa`j%+^g<0#>Vo`w(`tYEB*f;n|Yw**p20xrO_>r{1kNE~K
zCtQc&bK3)6v_`xeZpnJa9xiD|-n;DG`6T*|n;!1nQ%t_`9XHVT&Id9JKBp3J^Htw*
z`~6|MLc=dp(i>ZDB)f5-^i7%M2DfKc5XqU~R%)^838P4K0LWyvVOgis#3i<zJa3JM
zyl{;op<RGx-x_x%Cw$kv6iv>y@1~OT?|sirJzYKDc164Adph&!Vum$f9cOJ(AIv9~
z!iQw{UrHoqFa=PbG(ifQ=vP9|CPv@&J@-lz*cadHuCvTt_qyX<Z}P|YyVc3b-*^4t
z%WJPpPW`@n#Z;X-+Ru#d704R4mnFNt?`Cve=4b)Lb!GC{_uXRm%4Fz1*QlqGdZ*NG
zk^tgJz8j9#n|%KJsCob9J~xm0zILBmU{(F<KDR&D3y9%ZdwFfG=H&JlwCcDcxofjP
zt-Wf?W(8Vjasa0>F)u`BsmP=R%@=b_o{ysB$M?IL7N-D-HtF8uwzzweEBCmyOGhNV
zwic($aw}LIN(j}y5`<8Q9SO{H>5=5AJ+ysUGUow$J(wK#fP1}x@a6~HAx8^^Tdwvf
z>;OetI;9M%DC0ws*6ZoSkS$e>_ODEqKZrllJy0YT1pWX9hC3k`VL*LhD$ch8(EfAz
z*`gPD!Ou^QlKcXX!A1dK1sVVf|Aq_;T8S{j8ARD#?)6CHGE;^F4D#QB+9bvj%}6J3
z;{TQGdXPO+HMl20);$t-TTlZwx_OO)W-1*DMd*6-GQdgFhE+xKBoc_6Sa{Ae6OM4o
zYdO|eyl}*~TBU0H2+PNoQ=am2-6}A5b9_A0EgK_%kNnUIX@`^FKImpF?0r)l=&T13
zFAmOftCL$ABgdaaX58oICz2!o)vYQD=;WLK>gJpzH$7G-=DF5KvF0hS81YQ#^b-C{
zNPIb@as`*MX@W-Dgzq`eq!N;!Q0N?vTcCN79eP!@9R<P$5ejJ`*H_%TX7DJ8PhG|V
zC-XeR3dBBJKNU&1NGm}BCI4IVdE#(hg@WNYF6mf`$-5qMM~ArnCSQNZ4X$Le@=!z=
z^ztQ}M91R&<!;d`&eU2g*deQ6RLz~09QXs*Kef0|JGoXnaRp1;iKmY*)Y?hVJb%?H
zcv3qdC?;Jt5{)-{5tVQ>IvOI*9lObr6LEgFz`zDO8mXlVa~cXK*`SbI&=~kJkUaGR
zS3z~qj=yZE-1&GxT&8uV!o(AHZO@)1e`j*^57|Hp1FwB2x%h|f)kXso@7?jEAG+7M
znOXQ)Y3Npf65L;F3&anSH$Ln>H863RF<aW%X12+JKXPwq1*pC5N07&R+>Seb<bLXg
z?{uOTBAH2y#2HG=P1Yb7^!Jm0{;@l!p1z@_PCivY5v3SKlyv}Rwd1r$++Vvnw>bEH
zEdqTEBxueby>#p1upb>~a9*<Xr|ysgY+BkP;TD#$S@drb{)BRzAM&O9i}63mGkpTF
zO>5<kBwK&#W}{O5)KA^K;BI$CymTOW?5FP7l~xi#;}LLH1&@>Zl87+Oes(0lR#A_!
zPVz;)@liK#(Da~Pi^82Yu~s>Ct&T(4kBiAicsl33dkEU9mC+@ZL4DCBc@jR2R<`!7
z<l#r%LC0Iw536ccWe>Hg-lH6{WxMJ<S=9{fkzl)4I;1xRY?RM{mz@5XyVG}Ow@Rcl
zM7~cuv&(X>qeRy9X=hIT8I1m}9hdyfjX3{3>pc7Z_SW}1m1B-?w}?ey`u)HDT;C_<
zU$|2bTVnD%qr0eB9LRo;=Z>*OFi13IkWqOx3NtlS7(-?7TY)J#^9eV5O5ZH1+Sw8(
zSZgNV{)JoXTgJlLT1LqJv}ZRfhcw)7+0Ct%9r?Jm?DWUo?5PH7{44gYZ+WlklPK!N
zmvn6lUT>AAOK}OhVy#Cq#69%5JAvIo$;v0t-nB|Kl@{lk-fz7aDM?kXreF7jyJZbw
zleLSlF-<!{a&dOqrxW}FJ!##Vsas)oE4lQS?(@NWU9$04?oX6{>{sq=Kt1P4x5Xyo
z8=rKCnLIUlW^Kz>k6r$ZNm^kZaP(w?fys%R1wMQwb_XFP##si8Ei}O(2L~<HzRNg7
zkD7e(DK~rqgvvPyDe$)|hp-txeP7W8X(>7~{Q(3zkrL|WK;b78DN>VNskXnCWrf<3
z<g5ST7Vpo@#I$UR{pX~T$?%<>tbNLLw}5>7Q=JIj_tp1zzWTAJ+*&{Ew$XMCJ5G5>
zd$U!!%Q}bM){K;F*s<5$hTW9`8vE9;JK)#u@C`->m!&0gPDEPb7UhVf*kU1DCKaeN
z!hzCo=fdySU%OM>_mcjn-9j*Z@Y8P2yd|k-{F!4X?JB&+#!i2~XqnA5EmBTyd>SDJ
z2@H4>2dp8%(e^^}o@_ddJXU?Q;Wa%~G+|KvDfL<YxW$H4+BTd;pnkPy2j$EXrVHt6
zFK?^8e7f3`&B(9zX1!GEUy1QJGfa~ZWO?}us<3W)o{I?aFH`<ZaR354+Js{=y+uwC
z(P=-Xh-MbcKddDCc0s%9)P)V|!drSOz6)pW(*@!nv5d4nu<VnszhCyX`>-XNrDdOW
zBkFAW3$$FucUt~$&(d<1u4&7cC+mLWmf5Vil^_J?{)SLp!}X!$`ro((bB3-#s2@5i
zm;U$qp@v=T*}M1AV^58Sk{|xYjaL4?RerMKw`?XK{?r<Lz;VK;M#ITFe(MfA;>pW3
zSsU!yW}IhX3YssVRVL<1gFSilw;0d&Px|({{r${3k<#+hM0fD>;gibY7u}-eCmAVz
zI(+k9x8E~ZVMdh6ZF^m%HB|53>t-yLDEcgovmrJ4{#Cuf(vF32ptb5%8-m%guwM1X
zV5ODI8uzLX2dkdvy@kpCF7W(<my=N!yySV`{-@5jzwd%!v*<qUf>o`K92^9vH#=6H
za)GaQ|M-vHLGsPHIWXrOCcxY8Vj|uH)05@*UR-^>%M_M3h9hcTKl>T~AmnHy1sDQ3
z>me;FH0P9J)DDI;7B7h7wKcVa@zQ7A_(;t$jL1Cfy3Lbkcd{Z3W}Fc+a*)9a@ePj@
zkLhvkBc#!lb=8-0Qan}9Q`Kvtd43{3$ZpmHo1<sOJen8Hj9G;ZlVGGCh-R+aGBGhh
zfZA#_)3$%`Kt`<lmk0GG8Go-NT@s-M>ig4fWy7=T%hPOdR((b6>T~#8<d-pKgIUJ<
zdMW)_RA0tM<hjwD`uy~aYirDO-<avXF&J#snCaG-o%k+R*_a%f5@fnH=hw^9=Ga1V
zUPHYd;{c|7eI8)NI8<N6R-VXeJ|K#CO6UWmZzRoV{z(?tTKPs4%~ufU0;?c^zSOJS
zN9qf7br7v3SyP{yB2f-SV9Mm>nNj#E-(fh@)CeitFgA-BPAx$%xh%KaNs)?LZ7o?V
zgL8ybhMB#w1CcTCbr!J}_5_(EhZTYuhvmhPXQAXqu|8Yv9gc>h*&B!0&sATHEs3N~
zfA=H1m;b_z^@Sl@Td5u^MRIu|nD&N}jMG!2{V*LsLWg1>C0T?0j^t#ulh{oxeo2n<
zRJOie724E+QyN1M7^;04_)+HDJW*{(UxRBXO`C=XA&&~lhLeN2$?{@ATzVj3k!rPm
zCYq&`0-d@845|bMlw(<st;Hp)p=x9Zq`aH%`n5bpDQgJY&|Ij|Vv2OC3$zB#8E%Ob
zU{X{>Lj>0ND1fA6kr`AzGA%bZ^sq)FwUF>wohYiPecbxEu61!}Wijs_gGQbR3rTM&
zn0G=bfMY?TEaKiWEBP_2PgMep-`)tc9_QPW5Fr&oMcr8In`8Gl8wxc+(k$sPD4Nlw
zH`v<Ou<*IqsqW1k!&uTTqXHHo_yLXOT3!`&7D-n4$C{Rl|2>yxIqxLP2Jxd=HjIDj
z4;^Qbr!A_)_928VPG>5UCKsCWU9HPJz>Yv^6l6q6&qbn2Lb_^+U0`vma3=XN!n81o
z<vF1%-c=(iIzB_7&LFK<QUJDIqE9^@A)RmO(1MPV8vDKzvD)`2kGp*2jS8B}qJ72w
zQ`{GU<Va34xJlYNJhWtu(y7@jGA&=Tyn$H<jK&ieymRwgL}8U=xQi3v*xN-!_p!L|
zIH9&e9Px-qk3{IuJ~47=&avL$J1N%OdThi;OHlBi)Kde5$aG^%!DPrbc0lQUG4zR@
zQQfG-m$4=ls>AqaPB7E*r?iRqAjFzDPS=7Ub)D4HkBHiB@9OLD+<3oDe0AA7?R$#?
z8ei@&I6+e#iNEB=<NXNm6ZLs2H_)&jN@X#nt6}jMnyRG|KSsRtJ$5#Wy*#F6IRQ-4
zx4Ad@3yljqszQCS=?udT;iBYG+FZ{7F)vaDji>;HAP&~sh_cWU7`lW*MynB8a%m+P
zY?dUdqF-P^!cq~w+9+@6nWEeZ_z#*&1qy{$fjmTt8VzL)N(Ib076M%E?|MO`su!dm
zvv9vWK&b$(f^m+q2sk$oafd(}JcpR;BaluH`7V8+4?{wC&oYyuYb;4l><(Vr?9s}d
zz$v&L#8na;jw&SO?zo2py?z%-u{$Q%lI(%``XB`dlr;iy_;65JB2q+yL_08fdcb3R
z1xKLRX|bHZlmn*^<k*=69&GPi7=Js*fsj?lRwQd0FMKh30kL%!*Q<E}Q1HJLw_a3V
zmJ1;ZiY_M?92*S2jF0Kt<d1{&V>|KGS43~x<wya<>FkQEG$K>DVjCbe<4L1}yR6`m
zXKPhfu-Ah69whxe!9cO2Nq_h|Hwk)?hV~raDm5$UXjZYazl|3zJlVfD7%XEFY<Fhe
zf3`C%DCIMtlzllx0}9dcWYm3jXiNRe6QLDqNuk{;r;EuF;2K|uD;vaOTLhs{e3T3m
z;bsRB0Pcc_z?e{hlK+T&yJ!tr4>yiOJ?E^m1VMDd<P;YSdSpnjqZSXCfoMtmWDaE=
zwFH{=dJq-9oI8$vB#^QOS}{4IFPPILR<WniCpj`$GaBYvWC{ePC1|SSiQg#CDPrf0
zsWX(~6c>$3RaHUyXd8JN8292(C(>pRW4o7Od4M^k-#Vja@YfoY82d0xg!LwzA2#DQ
zQSXF1(L{|t&m+rOBr`VDwgL%?0b$IA1?o%~^ETH!jRH>7dK91+rYRD&<GmLBM)qg+
z4DQqpLO5Dry9b+R)nOVmaQ|lZ_QcM;drRqdM4FOqN7U!p21GtjOFJUnpom?eqd-F%
z-?sN7+WS+^g%|tU_xb$0E^4L~JbQ`S^srpWD%mDRhdlW?N7KV@9;~3_QiJztS|&2Y
zivSm=(ILiX8yU4DK+uIMHAkZ0W+fpo`<PI|ti(Db3jM%ea*X0`f^dt9mFX50@D_hX
z6XKZF#c9N{!I-JXmf@1fYur;ManlBY|1L0bf-^JIvmlmAP>}LSQj!ER)ykiQOZv<?
z3zkR%V+a4)*aes{<SwEqwi^;GQUP1k`5RD`Hmg0X#ag65_)=g#+;l|hW=L=%-?CgJ
zQIBv-266c$1tGFnd>^|<h_zQc%VKxaA85-0lmziZe_b%)V^2<!M!*o!NSEXlKdx0%
z?M&%8L?sh}LXF+~iS|u3t=eRCD>WRmUo>r&TBWH{uI@BUhyGZ@I^Y{E#J{T!h6bYr
z(PF9kSSvJjgwr6I;G8kJ+Q?LolD?|71y(S|1*RF6vM^f-_!Q8R@1v^bFk5;^zUO%z
zgs`4CeMxYVt%b7_<0Q+&Z+Mu>#{TF%69Nh*vTFn*N@3-ySLj|KDhPp_j?d_#n%Gdw
zil`H{3~TWSVG4rYNH{+)r}9=4?B+o!0w=XHpd}DjRFD^l$vTwL>D?gyd6o_1A7$A*
zVsiRIfrCGwEqI27u7NoU6oh|bVJ+1Cb}w9((m91u_~5XfW;C#=F))O5-5t${$n?{W
z0U9wByR%6;3W#RN8POsYWLYaLThpa0LJKI`^8cAmm;I6&M6oGrdTU{civ?bRg#DMX
zq_v*>Pkp`icdd$wsK+nv)PD@fa+IU1qg-0}hMu^eWiE?s5X@l24F$YvrbAjIcm}f_
z8M$^dG5CSls6ZISq&XBUI4&F~f;t8w;T_86Wer)$c$8p6+-qKUzQ+{Xyf<ePjp#oC
z?xBG*UBJjo8<IRa6wGMe@gABH1^6c0=w6$<OkhNbz?r(1zAsHVTX#`}ZUXr?W0QoZ
zZN)EGBuxP`OFo)IP5EdZ?{ddm15qw?XLocmiY&Lh6RhGiKvIV1l}tPHMDlBM3%N76
zDmOwhyehZUCo6a+9Z>Edu5sF0qjwL<&F6}*FXQV&qr5h+$<w$trW_@sTF!C`SRgMt
zd;fjBe;ALynrm{K0Db=3!~N4sdAgpbIGm^7sE`dzwR1$;Ce73d(`Io3y&pB*E=xCJ
zgNv5=wQ_-XZ2wZBuFsxr40Bd4l|JtvCTgjWj0>7Lw2fi1a^UmRfnUWkGr0ICHay7&
z>7XSWrlXpy&caDQE2Qr>xm_gqT6$ads5D!S|3g{mbB6c{<Gj0D9fai4?)iy?XLNm1
z_XuQUYHVXs5{I(c2M`9lNeP}sg&UjM%oB=?vsnk_pITu`Y2Q7vS@+0h-6NZIk8D1E
z${J6$koJ^pF=b_B5dqRJ)ihfuNGOL35zVckm55oc=^yOYqtD`Wc%dtAsMSPlb1R24
zXmz?kdXd460#Z~sC%#}}qQaUZ$2-{LrLjPPVu>Hm4CZm~0>Bf^=EQ0<;YpI%6b(=X
zZ-c_*D@qWLE(?6qHPo2GxFSxJipF~04j4t8!8}ua7I2aUp*A&y^55P3OIzo|M^J;D
z+qy(wgIikxB|yVMS#tzLE21TVPFhisR3pbPs>WXGO#KF=JU~?8FphWy4Z;C=%<#zK
zQNE9kx*inoGmJ--ljuDB&1UxryN~h&DNDdB#J^=xx7{_pz6W^Ol!d|xunAB)t5L0O
zgNmxS<|N8}AO#m{$+j;9DM}l+d0ve`2m{WOpk?3*+u*79Uh&w#K+}W6hPuGvgJrU)
zEyOEXAg_dSd!r$Qz_D(a8?p76hoexZ{SuBrk)sd_buMr|zW3jqxQ%9Uae4T7rE_>7
zfN$)<<AE5I0s&)!kD^Lb3NK+A>=IFDqeQGYih_MQj;4V3@B_&xq@dHZbU-H`rvW~R
zrh`11M)>iffF!nUj}#e|sG~eS8Lv3IK;aEZ$6*sBQmzH-fDz=NfMR?-pV(U2G$<VO
z)qvL0&8q-mEdKE0;;dd1srW`#2_w92O3I2c1-{DrN;LGdL8z51bqrY@j0gs4Aj%oy
zb&;KKh!lcZB`}o&xU>0HLYehUa#@3-cp$+{(gS;}f}BGFUj{#|#unv($icBiIZ(y|
z7bs(a3zXUQE_T`@nO0+qPGG)T`?tR)>a+h^8T(op`&t>kmI!ViOJ0hXw?EBsI}NXp
zeyTfZ#Dw%y-MOJ*JI`YdTW|ft6rw)THS-9rUa@T>Q6ghb6NeuwL@x}^%te`JY?WCb
z_hEJ77`)`HVM<k<QZ-$v8l+U98PW(TMKjjswj%^Yoa23yQVs+EsM0<J^R>AfB;q!r
zX`G>jXdqvvSw==iqKwT}Ag4x4LYOALl8<KbQCmdt7gFXHSLGmXoPKgF8F1sv4U%-N
z!mI&fU6qpyJc$@9QL!Z`aixLL?AHX3IB=5|&vKVXOz`p{VnZNlf*tN&s0h4>5qN=v
zM6v{RN(!NG%jmI03VU!kcaT_)($%UQ5ZCjMnh0Up8%$ncc5Vp_fe8$g3>V&vBwC!S
z-p^GjW&o13IyIWxmR3!K)KW(dcOrLuL2_p_;28IC)*g11lhr#J9|*K4<AYgXM(Y(;
z>@rX=SY(1>O)EVi(2{v(hLRC&kdPZ5x+29c1fW_U^(z^ugLQ410N8Tp8&OiOFHw@O
zuT+w&A1Ht4^>u7D%W{X+f$6f`y!uNZ1u}<nuomQSE&YmKVwAB>*@G<m0cEwJXKik4
zMlTHLX(E?=eO5N<O?xJ}G-kCSV4NH3lBR-XkYQMqGT<rY55T`j1&R@=AVZ2&Mm(u3
z@uafSlgfc9rEHVOg3%F_LY!WslbWZK84^Aj_sP=>Ij|d)Uptv3AX7*}#Fvu92aF_m
zajP#C0zR1+pxom{I%{(qJw0vUCYJs6;<a=hp@^Vw`!QxQM=5TlUqRa0nkZRi0^0s%
zf=24BggLS46>R7bIXI4@X{U|H2h{#m#-wQ`xG?;P(Faj9>UF`DHAd&H5M5C;P3KO|
zVseJCEN;okY?Qzu^?0ZTIcYsq!_`qx4aq1}Q)mj|Y_bB+btX;G8QV8SXS0<MlT^vl
z`T`{*P!?~_lX^?!Hl$>@ZW~w!rEM0u*<P$#eXg#mb@rNw+!iXy%K{^ELkVRpZdz2<
z6x8UFdm|U)^~Fphy|y6kQfDf3rptFm<f=oBo#Z$Ri=mQ06O%NnU%C&i!hQHT*8F;H
z8Kv3BL??yNFvSf{iV8~T9Tua-$SHt-F+$NanK^h$6=IH&5%p%#H*w~n?=8xLO|lm%
ztG#t=a}$68g^ecGZ1uzui!I(*SL2bnV19IwIi7c0tTCuh>27AXMD`H4$bP;jd+1zL
z4|fyQvtvk9KiyOP!buF$4iSJp@&89Ek7gQwjAnbPhg+`T<^oUk3@JE3n>#j*JtEVj
z>~ZttvA|f-Sl|GJbSzwGV}bq?iHWSyItp~TsdhyTOH8lT>&<DPd#P~l#YEAL2<R=q
z82S|rH^F9oA%EJDJeNPV1DX+GKIssDrlKNUz@Lm4v-!g^Uyu0Pk3YPd{hE!mk3XUq
zYYo7*lD3xLDTcGh;?q)8dfc*`p%gVeMt`Ne$LQnkzlPD@4WZ5F$LQ1SEB+lZx(`C1
z#Ma(1-|dUgX6{$Ka2R!f(Z|WImrOR9r@=m9bQtPkdy4kh)s0A~;{nivilAk2ilQP6
zYb6XzHxy<Cb;&r~hsZ0N3^5hdU(AV2V@QgDmMay8LK8mK3z0NJeZ{H-E~9`;vYTPG
z=e<7e5`{(l)6O441BY^T@-{_`Re4RGQd2dfG9oRnOD>#>X(%qiNQhJ)mCt3!9t~4b
z^w-$$OKmdx13Og!qLF1dD#@vm?&iIJz)o7rOl^iW)9Gv8rf0T~(9SsFE97G}S@vnE
z*S%YSHMvWzpvme<*W^aqvL|`_lAty%jAvpxh*@Z1R+!i}U3$?l*|r2dPN$~;Z=hW?
z$p_O1?Es#}?9>8wQ(L>sv|A_20YEfDTh)B2pc)0k7hC0di>}swz#$h=X;C<Vx99QT
z0v1+@?DPk0A_`C;Z|hpKf}{_(#xo_r-~)0ARi9(VC)b1FW>ySqi)UI6`)PcD<<M%y
z59BN>H|j59KjBSIcaARzEvujr7jT>-cNJRnf~sX%3&$5=IOHx(i7!~Op{GfnwN8A&
z9$y?jaq$H^eR(>s`+^ByAZsJ?zC^6a<b9DGH%;D`sq^YDn4nO~6y07hkrq1DF49s5
z>>@38+8O@J7d+ix_>yP%3t#l0zwl+x^cQL2v;0+B`jEd$i&rEJv<tr7XaX-=9t_v=
z=Kg~}xqOk>4wKxrJeXNA9~+J=OZU;6=aKGBMh@qF(z*Ww$Y~mO{^yX>R6jXTT;TgZ
zgB%9t#Kd_RqvP4Ew~`Mn4|)&usOt5o>Wy*78rB+Io?5*fo?5-$L#p>#{KjCG2s6xE
zU7=WFD(nz}qXwfSslq}@bV$90<zOizL5i`h%@e888>NDrs8BhGAhdYQYg2j-hNj%H
ziUm=V{FINc`1)Voa^4xqt9H4rmrD%;r+{RXj5lV)0UQ$7wN2VaM0)~xmV{&JN3iJH
zxlwpFGm>7X4T0FqB=#~RS@v}|eB3j>*|&@ry4I|Ry0;!&apt3QXTwRkI)|o+?Qw<g
zSayXE!^6`t6=8}{2zuG<!rEGLPvRom#|o@ld-vglZ=p<*^GpLGYpz*HZ7nwmess=Y
z$4r!O%;3s{?CkiHpLzPBx6}K5phlqab4UM+V5|PmfvvX#YzH$xGV_$|(2h>no#|nB
z&Scn4qCxcYqCqBMXfT7}3xIE(sIKx~qPk?^*Ina(gx**~wCRlnneA|rMjus{KSW9K
z9gymYOee{m0NYiPx)1MT4(zN41gug_)FS!EYCcC`!h4nZndSFL@EToc(L?@JEsz22
zqM-T``F~nAzZ#&EL;UbXvDIcC0h~H~Ut1DHa>+}ATiUUdKon<K#ERYYd#i#COKiR=
zcqWF#ASPBYCMF3%{^&Tz=8z>c1$|{zP(M=6uev9W<Nv`ka@tytOK^>tdrtaI7vn^T
zh7{N5EYOHNhU>gl+m$R@9US7mmAqkfuxcp%5b2GrAjh(jwX&3af5)d*2XA!l&LlcG
zn5lgeSy`Rsrh#%5t~Vk`TJ~tiX$J>k=<ZF%4-F1?_wKmy(BNn{czMC~wu1@Avi3$S
z)GA5o@SssHBjiLlc_jxN9xQZS$tw;I=B(?YH{!DCc|a^@6}ke~ilVfs(ukutg%c4x
z1f1H*60mC>m;v^NS$mg~&m10{Fm>~Ng|X!>cU+@e@rF@~N8QP+BXHkM9|+%Je6fGa
zoAklQIq^f=?Yqorq{t>MmeQjDoe<#Y=;HU`;%`2f=QeaM7TW4~;Eed88_}u2&2o*N
z^^JZMwyc*?Y->Kiy%Mok@mge%JPh91Kh!8jp=A3A7f-FE&?<v2N}rgx9lyRNCfEW8
z2E^xYLe)J+b*OB*@d`~wM}vW;J&1Z>)Y5|JnMtZq!5@WSCU+o+tv%$xjWS{Gk=p@J
z4P^vL)iWB7<)rEwvZvuRltwHnA7>IQ)@{)t6O;H&35Nwv>i$sZPwGyd8Vzc0SHkw9
z_YJZU3ymea1wwf>AZJo<f#@~KC*t5>g%_}=8JQ%%j)VQ#fU<a9uzZefaSIoPW$lFW
zan9A6*1K<67c4W^`0eY0t+u;x=X;W4jttfWcf4oE#F0Tc2-!}Qyyxg(;RZbSZ8t2<
z&{+fU1cHW*#qC}0MLG8~)k=3&<Q@8&YV|ov_dYm9739Dgl3yQ<Lp~d<l3B+DjgUt>
zjyNXxuHy*zS?hy&M-q^NP+@foCapk0z|x{r5IBgNTHlB$Ei47vlwlr|4DtwVQaYrP
z3)Tm-nwREXn2wG7yj(iC(bNER2WOJL5Alme;g#WU4F?Pj4SH`jO;<qSGQSFw(}Z+;
z>AMspex)Bo65?q465TAdFxYf-hzoV{fdWArB5lJ(!XU}jy=_rTIB^wkZOE}3Cy(8v
z<JvYTBT$(&0)L=Q^pl0#2F~`(nK?5S6FYAcj%hY>5Mt22ni@#v8>}d93}ncSsA;{y
z1_-5(*B!4rdPE~}u2rk-E@;h^O8_AkrxBKOnF%20tp_<Cr6z!!w;t$@nI7y2fXO$H
zp-Y_XoJJAXce+8;B#kOx;-nj?xxs3Oa{@>Km>+~R0eG>7eBQ=NMAS(`_ml7QTjYLp
zLxHH82Qk)I^nEnM6DEdqg!LhHsD*Ndeh6<ChW={^vIwdvg0$Dlnl>3hc|#C}cX-Vt
z1mVq<e<p(DW&M9Uf}Rg6?-N#p5d**6PJ|i4Gkv(=roFgPlKLmvC<%oG=`|)JA$%?*
zn6Gqul-Oo|rmW{h0-D(IMqV6TO@9%iB=8@a;Vm6Htx+Pu$VQhR6h5}Bjk`%VCXW&=
zCH5I5&xeDrg)OF75K{ydw%aIZq7oCY&3r<{WPRW=+{;j9`H&E7^EAzP8T#cW6RI?!
zHD+5s!U$#uRzWgTfXX!#YjiZs5D1K!qTxQ6`XWWF2u!gw-jlEDBt{-<#pKO|QhGCK
z*&t8NgqGiv2GbGWMP;5=7HG>9%mLjOCJUH^_MX7pQ{FuwGpFrY(G-#L4DDo*hK?lP
z-ISV+b`x>h2ba%htS_IjzI?{|aK7=;w)3ggRY;wD(<9X;G5?uIp~(}zz)3f5zp!Z`
zzO8ojY|lh0?JRiCmj}O-xZOWx!YiI@j(;<b8^TCqiby6HeAGfX5NwwTSwA_!zYtAV
zVuuMgwVRia)$&|`9LD*^l!Fk1q`_RoCN4tm(L)hGMZmss1K}&`LO6~!sghlfn-&u^
z(XYFs`f>VM-{9c!0MN6d*wmPgfyiyjKA1j40qk<p-*H2AT&>Wg>yL}++?2_Kc2B2K
zoC8m@nJ}%=Rx_fC@Q3k43;2p!InI}~Y`m_KM3Rdly%M4;=aq<-(Y53Bvz~S_0YG51
zmwF3Lnj_%|vHcr|2lJX0g=4LaH)gd&2hkV%0(;{gDJ62KeaF%B)ARBAd@i?>E?~}~
zkM-F!oSBt>!G@uFM1KBQy&>R^)fckW3*{#^Q`}WXB7`NJPU3r-lr}|gj7RPy?XaT=
zO))a&uo*FS=h{rKVTR8HB^GL^`x#~Id5OLKC&yh5b(Pi38dtPd=wREEdRXH`fzH7!
z>m208N@PAIsnwS%X%4c153Njulv<W`3<dKdY-Rf^S-~zqo~_Y2va+$E)RD!ls%N8h
zqEE;whakKN8{GktQK{d|p~dI`>1B)fUdqn2p4^Jn3>Jcu*p0);fiNC54<*YYa}CLI
zoitjE_Ft`7yP#Lk=aEA*6_G4k4L2%AOINcZEk;XL2NH@GE7B~`0hbtjGw29Mas$pC
zN4EgtIKh3oVBb2|gpGG5gaP1l<KH&5&kiSbopJ|ErNm_sTvIT^5paM`X}e>uA+V04
zsP{CSpPFZ*)$09teet?neF=X{0r!%1(yu*6S-A_NrP1Pb<o5PmxOsD9@w%Riqs14I
zmbUn`-(P<;n#zHaQIq&6w7mDkp>Z_=eA!9O5gSd)l%rzxU-LrHRTK`FC@F(9k{W0t
z83av)C5gaYQ7B|VBoqQmq3{4b(=p>bI}~h@9H#Seg~FAbh$bAOTow)w1fW{ci<F?f
z6q%*yKp`_TLaisaQpn7FEe<2+@yt0miZio@1pITDsjxmm;&DBX9Lt}G1XL?@<^HQV
z5snnpvXBx^85h(mAJfHjHPuMyU~9}Z;s8=3%!*MLR1G^IEYQncad?Jupqa&{a*F7(
zQkHxhI($jrgj>Gmi1R}2Nksw55r0`<jI+2>T^$d*>_gEG4I}A%rW2BEKtfy{pUl91
zGE1{#F|JB^P&`@!uji_bsq48j9GTmMT3n{BoOKFos$*QDG{bl$isb2C@}reRqm@LX
zl|+M;g=Pebv3Sh`sod0HCDCBz*&0yHvqM2K$zh<DXBw<r$%M|82CHls!f!JN#Iw=r
zZHOJC)tenPTD@D11}iSg&m63NSZlBn1m^h%tLRFIQvKuX6VX7I^+srDba}%Z_PViX
z#yGZ7*R4H-?3cw7CHohx<%bp0e$hgyoq5LI85!RQ3n3`Ncq_o!>!OW!qUAUSmlZ=Z
zql;y<%xFetjS`VLDN<1teCFOPvnR_ulw}^yGLK{#0vY(P9?vr9ZJA#w@agOh7AybG
z<}8Dy%ip<_Ow+2r%={7g?D8ygW%kn6EOTx4Xj^vYhBRZPX|=>ahbKaT`hiK}(V!o=
zCM#zBfEih_$-!Y|-7eC9_yjH!`T?&{j&TTGj_T(qT|yH0Vd&>%P+aIQf`RqS@9gFj
z_=P|pyHn@%YT#+A<iRn*i||^R#Mg9FGvU;+Mia)PiHSs{P9jn#5vfz3NL_6f|MH|x
zB2wp>NL>vUH}j;<Gm*Ml45@P^Qr9q-wRSR3vk40Ro6)@SDlxT;<}>ytre-v6TuV&N
zCMY;vIzhqSJX5m?s^ljqV`k!MnxKFQd}=&4|0#L$8dw5N`OS<Tr$!5mebw=2HWtj7
z5Mr?kcv2$9OO6vv{k@brOEJ{hAo`i!OX;(OwR5bYW97M*Qm8zrIpf{mgGL)QQE3S(
z#XWASznv0lDTYuRgZ^Ghs-+lGZLld`-$1JkZHpuewKk^tEcDu7bA#@t6w7fk+#B+b
zq1i^=KTfF@R>jNEzgc>Ll*pDJIF!hiA0`NqEkBWQJLN|711l8O^20&JqFV7g<950n
z)z4AJ?vy)TKW(a&LvY2DTvbVPNz|isY1F4=StKAqYyuGEHB~qFj|P=2S6Bf2G$QpL
zzN(%>Wz+R+MWl`*7$CyspgCD{TGMArYEz9~)<Y8}3wf7~ru-K&q7$icEW74UlZ9HO
z=BHQ9pG>bn!^=X?Mru~C#2v}Q4Sr1T2v8V}DFNDWCC(9XVZ%|@-%;rV_@QPxKTPp+
zBCKh~AcdyM{IQ{<K)Kh+Aw69dGa4)!4H{j_kH5_&JzcUC6FCAgoyZESY+&G1k)6!a
z(<KoLGj=B$G`cJr4bIf(#xXrP7Gu%iG+$6B*KBCX!<(YPA^*6|Iaz<eNnRA|e9@d!
zG{`h8w%6TMx+F4MT<S@2nPLU!;Clj)NKvos?@4iaBnUv5>U{?(>Xj9?wu2&vbk&~X
z)%oX~;hPz|`){4%|3BW&13rqPef)QO>5TvZLcfF-TIjtVy?2x*5RwZ7(nu~e!3_uq
ziU^7<3Mwelo3zk-7Xb@WL_tACK#GD=<^O$VHxN+Y`uo4|xy<a$?CjL<JTv>uEW-kC
z#zdS|2QHY3gptKu-mIlERg|@L#s)e5UNlY=56iMdz+|#L2F=gcnMZ1hKVI_3PyPhS
zpHTS|CV#@^PZ9a!bmoy!4O^7_sUUwU%b)7<r?&Xkmp={Uk{8v22QFKQO>ZZEJ2`F6
z0_G4wYxrL_3H{M%DiS4AH6%l+zQ35NJ({U8o0Acd3EQ7%YE0i`L{t;D2DG7^Gc`4D
zdupbJ{AEqm%;7AD@Mj9`BK$E`Vk#!WAL9F;g+G8|&D1zF$4RKapQ$+_oD6SHSVQue
zxVm&1m(61$@X#V7MV3H4l{YSCd5EM&cU1x-Jy_;AGO&<C9~o&xJdlnr@_~#;A`%E5
zL?)0?OQtr05D^DtWCPI(Gbns2^5|%cDjcC5>La5hXWT1fv813VhMuUxT0{gUqb=&E
z3VjHmJ~ARll)z+&jwq>g9F&HG{PB}Nl(;lm{)EXNzLq6TmOoBah1fWmUapyoOPl3S
zb@@|U)uQ}qAeW8hPcyk}CAN0*harsy%d}P6Yf1Towzkb#O#T#*KWeyDyi?<{0;3wY
z)i|y|%E%A@6nm9yAg7Y3J&jH!W+={wh?^;iNUYh?AA?6AVzzY@k1utnW-v5A3B@1Y
zrvEF2pwn>)_#YPngS&_k|FIOI%gz6Z7$LfLGJ%m*2PNXlBm}Za17<ypX)5BU^ka;_
zk!)$o70JIe<v)wIO6;vK&00iTT6GT5R?Xf`(e}?`hB;HqA!eAugGd=>7Z)i5iPe-c
zbP=SoC0ete=a{Ddtwihek8lRr0%-$^*}QfVc5&**zsoM2J02}FS@8O2%S?}1oh@TM
zg4jP@Z+aSH@XuOr`gbU%_{Ag?5}WK&>vl8=-XaV(;pOX$94tE}tjVSzOwc6=6J!a(
z1X;Q;OqeAM6J`m+gjvEcVU{pVm?aDoW(mUtS%^vsSx8R`Sx8h0S%NS@7E+f&7Lx&m
zEM^B0MR6B|3A&KpB8oHrdx~MQ(xF)U7i=jmeN6$TsMwySjDW(VjQBo586YFRO5#&9
z6D1nT{wEfVCA0#}zlo0jk{l+<SOix30#bKs;lNs;c|<gpcqD=U1!DdoVe~)ERQ|W6
zK>N?0&Oatv_F{}lGzE6rh1zILM-LDo<)6Y$@#~*Y+jX@>l@o3>`s{i8pW*g@K3muS
zV!EzYq-0f2YwWa&!k1|jc9BT}SYeX&KXXYztuO^R17(HjKM@^e{O7(3@~5)=`PUa>
z{!bbT3g`c-xM4LEnY}2{LkamvYs?*0L!q=--<89&o>+df=9hm{I6Bq+FDz62e=8iF
z>^~C5{&O)TXD>1rHj$OhIkj0hG#sYcevBE#SvB()g%;J5I435%DMk95gC~Xv3>dN$
zh9QDKC#A|#n7_FchNG<dV#wHupDcypCre=%vg(UpW2S^$$x;|sA}`46jVE8x(Eqdh
z)T4Ja|39XLvd9ZxCF@FTu$BNhKJA~9gr#E1HKXT$EG5aFGINKuIot8G*0WnVIWu0Z
z#>lZ%GK)dpek3OOnPQTkxftVT3JQKg2Q}Sc%}S;_e&%$?&jg8|`C^K9H}WonZ>tPr
zG?m3a(M)3rCNe<Y1E{$k&R%?4MRuLYk_>M&d1cihqNubD2_TN#!wX;uLf2|1131#6
zKW{eKz#t;Hgw1|EDc8Ji;I7CpwYozr>W!la2wFsb#WVIL63&^QROJ(PA^*x_SQke#
zMVcs&lkc0ElM98Ir&fPxZA=56T>VkQ_fxAsqO?c2Csu!~l_OdGv57!{{3EMBYPRvz
z>W{T}^u+3q5*^IdA0<kdt3OJ#Fjs%nQl^?0nh%#1$Z+#PvihTB5;dJv-ttF>KL7jG
zA4^Q8S8`5Ld2>Osf-^+=e?=t_$?TYP)9BU8P_(%+RLNW!3NcrP&>EK@HgjdDvQsjO
zOj%H3`Rli_f12WRPLtW_vtP%Gc>LeKjm_pC@<c1qj}&1UL0Pp<OQk@zSWBx6<N2z!
zwp6}_(8&}1U!^;VK9^y)0ZgW{F7-o0fbEjlO>F@$Q(M4WYpkSiRPxaF(4=!Q8rv}B
z(^yJ%z+2P;Xma8#O*I1an#u#t-f~GV&Q=s)9@B=7prI&Ww-g1G?xZLSh-O3K2s`8s
z9GjbyCpFO(IL7v8Z_(Lx?T|Br(fN|MllA4wxYb%4=D*`d>o{M-(?)9&UriK0Q9d!%
zk)sAnKzX2xaBSPEA&NDXK?G_xQQ{_Bq_9^ozxH9zxob)?uCznM@$ud*7bo2sRRXmF
zMzywD`DQgx6y^A~niw1-U5f*Loancr{~*>KXi3OviM8?NfWkT$eu3nQuarB;ltT`g
z(n3Es-fyc_wKp)1x7Fq=&C${Av|dq<bhBj|$YeiIwq<#hb@;J4QjQq2I|G5BtD*5n
zJFRx1dOXQt?i|kf<xK2Gr}o<7?C(>|?4XU#_otXiY9nKM2d!|JDDq?<A0S`fRl21+
zI%vJrH#xJ9va*t6RP3k~%C&<E5xPm4yLQ@)ZXLBoDi<?5YW>Rp=~;i73pAv6*o@+x
zw2_r^-k{OARkrzn72~tYHf>b0U6-;%H?^LzpPO?3xp8#vtkn;Z%11|5NGO`=at?Am
z(M*@5iuN)Z>g}Xy{YaozR-vN$PHrUM>P9lg=ef|q7bV-@J8RWTOA$?*^%we)N|9=V
z>C@Zj+(m1YKl6Y(h)QkH@^x`V<e}A!WnHvG0T&;AxYo$*s=b=$<cY_Mz9=o8IpJdz
z@20)Wr|!3P(-ssd85z*zysZaqH((*Jz;8d~tCYNP_qgU{dK;PDwG?|5<Hobve!_3;
zp|v*b&uW8;l=vq%#rwGEyP-MnOprs%DFC&V&}Du2z}VhXD{b`dsTJ35zhR8-$=5yZ
zykV^CsdbcVpI+v5qh8ujxn6BuU+$%q47vY?SCpy0Y<F=_(cW6P{i;#3x7MGO8ojmW
z$~+mu3LOZB_(%YRqC0aAY3Nm>a3AgUT=Pz=LvECo+q_dgSzG#OFKD?RAAN&Hs2qKh
z)wZ9OV9#^(Qg)f*KG^m7B_Cs7e{F(Bfc7!kY&%K#X@K@z<;O|TNaUj=c)N~YV%?l?
z@PS!cg570r54l25XAO(hO54lO6lgf4bk!w32!kmNg+TJ9NHrMq$18M^u{%zS<xyqa
z+SLM5x@w0dL!%!6$KaE!^^FSgS_EM_#B0$GKA4iF$Mbc-uD$8|kv<}dpsQ|kd4&#T
zUcep+Kd6e~g@(4*lPbGxEFlOrC|d-X;z>K^ot9`G`nsHhLl+oR6SPvk_s7#UNZO_Z
z)WzikEoT$7Dj_Pg&2<w`8=l1mYw3BjOB`i?wFOp6eg0t0p0jj)vr9K?h*`P~6SeOj
zR}1<SR<%@5(Kbq{Urp7bqIj$eZAEmwA{kIzUL6aI6v+U^?$WUV_FzlTJlJSBRBKln
z4FodAM|7MHb(k({LX2~~cBYUkL?Zjk&i_DT)ljVlM@NeoiB__#E^z7#x^8^EN_5ht
zXaZ2T46bMkXZ%MF3L{30P!3;ovQ#Age7CPC`Y>vvECJbaAR)ZWfO5`)A7F}9V=iL^
z$7$8iR-I6ThK~`KrZs-997&Kt4k6NfYB*Q&2A>-m$PFaC8LEFI+w_+kC}PW5^y1Cb
z;DFj%ZiZ{wgGD=N9vot9Pt&4ma86j;;1H+H{Qi{ea}I*#aM4u4lD<6@N7YhTGiBA7
zmyt%1bgg&^B9(n77*2IOWG-rez1?zHv%0}AGRWwgt`+kNY8xD8WTtaeEMdds7GrL@
zR>=O?JFj@>tEmKQKOX31w$LE+xoS4XqV=CWm~e5_#xowRjM34f`2_MLwnM5c8T~z4
z@uEDiljufD4y~e)MS4!nWSQQW<6+bcG>&?-vUY#tjz_D7Q6)pm*O{7Bie~J{Y0Jwl
z5F$|bq5jyTZWWJNF`PN{xJw0?3HD_mr7)!ExL4}k$9N}0t6p|I?G>@h=_At(tY&+a
zLt<s4iP>&NQU0FsTZZ;!_}ois?2)ZOyiB4Cuo&sW(YP>7D_u3)S6b#1-sF@?fE<v|
zRz(@UrZIC+_thV+dFVSI4cAKMQ$00Pd=U5f%Yr3c`_gc&RG4&adaoU={dx>@DknyX
z5n2=9$#&rNvfUUwLhGP*rp$WN*fv7j#Nd*b!Q~l}l6N6m#A<M1@HGdQBO|qNUK+7{
z99lw!lR@aO!<AzYx-*hKDud*#D?UcVC|XJtqy8u@R^!2Q<?@!Xc@&?>8fvtBUTe-+
z@apqwEV%l-HW|keqqVo37UcwQnu)iQZ<-^nM11=-qska9mG2I|KSqmE^!j9sw#Xil
zHS7hgtKG5ah>vkt*D5H>JzXnV5*N`NlD$~;4cRB)P>O(bapt3qIF*cBnr3Pf)GZ%p
za#)7AT+7s|Doe?++S$^w89|}fZng?}4Ph!zf1<uGLOY`|8D+<5y;Pbej?>;GLq%TH
z)?<ABqPEOFG%Itwmdjq=tbA*ODOF5Ebxpdgnu{NW%Pg2GMf$?c*fc?_Sm7VtAT8*L
zJMvD{%H*}$muf-idZ?({Pt;z@^LR)>T~iGy#t##<61h~1qM52E)0V<t$}vndd+G5o
zQNYN2Nej?t*VIbs-Y*F8G*N(H5}q$xi#KdYL<yHYf&(-n3OgDL;`uLHyCt2POB2;z
zT9>Slm%tL180j1wQJUg&4vx&jd0i0^;yr|Eb3_@5oEQ`(Id4i%-!qkVixFP5cA0#K
z{`Qp4uI9{Vl$oSC2ch#qe32r_Mk)=Ia?U(5fh#Zjsj<i^LLTu{$^d-+l?{}v3gtG}
z7xD;JL!G&t0n%{%O$AEoWr!?B$P~zqbiyW-(BF)ele9>^u%NsYXYz>ZtI~WGZDe0(
zX`E1Xjp9`-q2<6`QIA&V_$Y<f0B64c1BKUsz@cD?1A(MajNX&ktX1ww4Ofwa!x%6T
zIYOBNbF@E;17>k}i&2rx$a;}v&Ko^Waf`+#g(tJ$+!TdUBK4M$RDED1$eCNpM!l34
zgSS0w2X%!>PRr?(GcUtr`I6Dp)Gn2hKu;bOQa(*+sg<&s)KV)Ab)kKs$+1RN<;WbF
zp)=j#T-Xo}#a1WJ*<}c0zAH^3SQb{8nyCiJt5uabW^<t|nlj+H^z6(=2GXGdnRId@
zj7SND38G#^^r9T(J23%jrJ1!E-Wtgt7WQm>dH~fYTV!rI;X9WzcU$@y3FUkb8C^sL
zS}iOo6=<nu=Kn(?gVa=;r*V!iXV}SPO*YXvgUJSG=eulyk|$vhpK>%c$b-p{WPyA?
zkqH^~{2o<UB=U|kubBr*^r<}LB~g4Do}NM;82#jrKL<GdDHH7_`~Nf()^-F^t-db6
zgJp$YuE+|a6^o4sre;+j>gLQq;Nx1*gP+Vn2=Z0P-{l~L90Wg|ga0lAItzAGfCykb
zSaKj&Pvjs}8WT&jNOMm%CbQsGW0G8iKCXuxx%hKidLkEyq5l_+iL}$0vddjMgUcql
z@S|6RitHw**pmnJyt12=^bxdwtTvS+FL|HLOMVVP$p3dWlAjvM``^?EAG4sPWOt10
zHsu$gPGaT3W{reCt`X_|(ymmka0X4zb`|otT_K<5tPoDY`0I|LOYfGRp}w+_vuFHw
z?TThaB}lX4!IBBNdQ?H#nFwpI)3(B-ZJG7*sE?bCNwqD>O4#GJl_M*EZd*^}<X>r8
ze82slfr<>|Xj_u>Y|zrOu!aUo4rCG0f|XRwUu8rZR*sCQhNb_1YgvEUutGVno;tA_
z7FTl6u0^ZIl|r4E;QDjtkk6~;$U|Od=wG+1>}JK3(F86pPekec=|Mx6QRCkOu8eZz
zfd@;wvc^0CE@xr*4KsTO-9nW4psvrOn#e(2$%WZjWc59ista|7nKkj}HWfzic$AIo
zapNy~$G<W5@iePR>GBa5NjgKbA78?d3@}Qmv!w%3n+S=ZC#lN#NBMbb7z||?4E?)?
z6-ss<4TBtx`Ipu5@7D@nMUYzI!BQ)7r5e^>WG_d43ef)_S5Se+_(JN=Ij)B|iTUp`
zB;yHtH2z^T``i4qlYKgW*;V|g1Tw^fO$Mtf2~Z#1d8)oxuTUK&z&QA(RzeSHh5X<k
zFU0KRbqIwmOERPn5nL%cJ4?2pE3hKLc6kvX%VGCNfMhGZybK87-5?TqZV@U2#lJj4
zXYQwjPR<1se>Cz0NPdrn&XVQ<4~*v`by{M2u16AikO-bZ#%nXRqI!tA#U;>L*jY?=
zwm^VLzN2UA9q{!kk)a-|90ZdCnyDn6-o`9Lco(3FM20kr%&cfFH5Z^RRnI~R(HY3L
z(7%!@dGnvM>R4E6&ex!xB7~PIR+`5o5&WOiI<S>&V>N+bYX9;^fn*{uw<1I2OTC40
z*#}v9kbOI-l<>kUJ0oVL@Y3dSR=gsM$Q+aeP(_hZ=EApn#i~SPwarBio#H(_6D0G*
z7xg)6Z)cd%corYBD{IaIWX+t^pq(tK3COW4LmQ$>6hS+bqRt+_LtIfvUb4cbj<WJX
z$4Xv`qKXyb3Lm20C`KX_0zx+Nxr(rHR1#P;!k>o(I|HdEghpyWH><$xCMf*Ll97_#
z)eHNaBD`$)%_+iL-NTaPbBOS?F?9k8D3ziNmqOuTG9mQl{7g|k<(yd@3vm{$>@zAT
z@3SRLekn^o4(C)wnpeK(>gS|@IMKwVwV|3t-eeukTc!$Rgi3p~d4=A`u_^Kn*_x4<
zvV$}{bM6)>g%u_XU|y6NhK({q&&zD3swkBntQTr*swg?~RYrkeX^mo$9*av5rO4b&
zEJajtidZXBa&~k6x5|>e%I20(CGY*YFo{?drYaRFId$-npA;1=G{5tRxFKc47E&o(
zieHMF?T8X2kb_Gp%|K_kDn{8&stU?{u^Fk}b4KRWf2SMxNZD$p`n!DeMX6G<GUhZ<
zEM*{YF{g{D^M*#!v79+(iMYuu(V8AQgVi}~Os|+Z%b%R>OMg5^{FfV;nj_MgEwy~R
zsh*CyJmWFT6WQq$@JLDEA*tace=Jf$3X!5N0EW#~4Hh?~gFar>P+Mu(QNt>0%p6YO
zQC-^KnM*n=D9k=Lf-`R&0zE&o-KnEB7_>RpQV1w1qG%rRLoVri&fq`E6e@{)1LiNl
zrwU8|uX-b2j--N^^C<e!OQiB;Af`0|bK0vCC4_Y5ga^%Qj>uD^m&!x1F3Q-F7ZU%d
zoo5%URI{LlU882x|7&FbyDI?-BP3EN?4t(80Hgi85R-44QimptIna?Uer8pIhex9!
zuDq|7ohZD+kbZzVm$U_Tamn4G<}#I4p=_sSVM(o)$?AxDM?!a!aZVnOz{vWWz!&kd
zMX=6M%4XHd^frh1_}9~0t7@N^-l9j_oG&Qm><9mPH_&NsL29i;O>e1MwJ=L<s%qt0
zrQNQol>tmrX%4+|<dl4d<#GCP31$9{lF^@PRR&?HRo1)ATD21Wmun;chLFp%(A1N1
zMGO}S^>GREG-jM?oG`mAHJYQYIT2Fonh}G3i?sUpmCZONu`rU!?IBN8wiH%`bO$Av
zf)W{5L~=pEQsasgCl_YJ6RAcP3gpEGdsn2d`};9Ma~0udl%J;+FDE_Zi8M=%=SX&#
zv`+M`oq3Gc=4<&P)#@K7rOG{go>D^QF;fU_gfIDwrSmwq>=vC;(u$1Z^yv^$SiM`J
z*u;^M&nuJwyxM7pR<$=OD|`bNu$jtNBvwID?NJiRo@0U4<D^&xk&F<GB~qU9nvc|}
zwOyg0XaK3TU0r-d6PiB6s-8LAcuOq2c~!TYiDqY@B-#-XOf%6W!QQBRptL5t_B1)K
zK!ZHq;6`;YZy<tz=tmoTf{SV=RcIvn;1FaPN%frTjaDbhM^^sHip0M!80O>irSu`n
zS@k1Yz4Rle&i4eR$R+iG;v1kAld^l256L%s6{_V7hpJa$6-Y{pP`xULh^ulSYWZqb
z@_0zJCcsajfDimOl4aAU<=elNx#;rjd$y`whHA}ZrK)I)mHD1vWxl`fKI}A-dd_Dy
z&U{aFANg)6#ihm)Q5qBwS*m`#!(bTXN?HK}9m1IL!+bvZm``e)SDVP%G9d^ML5v7Q
z5aWDNX@Fsm8iSJ3lz1j0t&-BhP4P>Lj=-Ujd1%5){3^((j!RHvAti^=c=?~_5y?z!
zv6ULw@@|Hv%(}F{82>tKAF-B*l^n*Zjwx1g$fPA?@ygs3a#@}h#{dzzf@H7|$t%Da
zro>vxOeC-XrxI)P8I2ZbMZK4K+4Jhg&N`eoB@IY5BI(9#Q4Er<;}a1i<1}wzMQEcG
zMW=?sMJB_pNgv`h4P{C<mL~T^my&m*{`4i5&SfYgNRTj243@Z6SCZ)`av5j1>hhPu
zw;|F{K@^p&-G?~UH!Ur}pVnvX;8g^bzAg(Clo6k!Q>XA`Czv%hc{qx3K{N+G!)2yk
zG*Xz|s?^&arCpQuU`$@9g|g|(l*WC;iQOgAMARJ0CVNR#9!WO`Ooc}JQ~5H-ip)<U
za0!YmAlc%v>cM8N?PmUX*^2^!nJ;>?l|A_mQ7$>#@lo~|TBS*u8M6ioGk>&eDncE|
zL-eX8_&5tlHLGJ_kS@$qM}3^RrP3KTrLyJA0tDfdMQInjTa%_EU*I4JM@dMKAYK~V
zJ@RfYEz*ax;LHy7wGV21e%WsbRR{$4G}*UG7b8=mXiFpUYbTl-@&P3dL1ZbYBbBHm
zd?v4Ar*36JB|s4EM;Z!6hMjViKc)_iDp>gw#<I^pK9%9$R(H=<r~b#!&3>%@cc(%8
z+s}QZ_g<JaC(4=@sEP+0U#T!#AaIpNpQC8hp%;HsHrZ+XKTD!?UGwk<sS<i8O4t0Q
zwrI@q=YMeGfYNbS+x+A#Y#%m#hk|5W<vTaD1t;SkeNp!GDkXQs7E$e2J+n6b4nH}4
z2}4d_!mqJ(S5fU}4j`)i^jeiorR0ukw|QWXsnXtxb{S?K*kdXHH=r#$>2_$b%U(dW
zr<cQM%oBU^m?!oyLsm-esDha%4&*jZ><N|Amykuw1A9V5gb__Ige8y6c~#d@ee1Cn
z?^xgL^Z!u6Y!4yr#%p!$a`G6k(1fk#o+~9InHBWEs2?C`YRCVNp9@aa`6(r3r;L0P
z%7FmH;6o=75tMPm1{j544n*H$b?sqlkM#dIl{pKClA=Oj-~XW3WS5St;%1kKVXtQo
z*VU=UIg|B2Ocjk>e;OkH+tScWJSvXI4Me^b68N~Ioi`3GLN92?L0{wQBCVP4vU_qA
z_d%o1VieCR8$%asP5c-kOFHc?e`E7v4yF>FW0#lQgGF1SHMZY1nl91yhgs^XGUE`<
z6{WFi6kDn_e9{LEMA2n6QkQC#LN-41DQmOU;ueQ%^+RL%QY}1m;R0`0138}6l`Fz7
zuE&>ZQ6c*ug|xeNJ~RTCX>RT4LnCdOR<g<2hj2~lL2*w0VAqKpL62tJ`KSk<C@^)6
zLl$yYw^9c~t<_WqJGqQwudB>luJzN-Jv3sLYwnP5ANoYto1mTU`uU;HU}Mz^t$~qy
zh1Nafr-#}4w_dJqA7*)0XnE~^2M$xYYzr_duhNRuFqOJp%r#NUGS3m$M9iW55NX)@
z@3coDVekjF>?pF2l;mZcUa2{aYsc)NM!+hqtM>E5tbVJsU3PtgiW_M}&ASjeI9t)R
zMLEh>RMsjR>Ey%g@>w-G#Zcml&|KW9KE(hmT&t{D<Zwh1s`!D*i))#AyOtY#K$0-f
zj1kH))*8Z$^eKmH`~+X)!`0fzN3~yEG|oi>Tr|$X{UEYMpqg477GgAF)@YFh(Y|uc
zdf+44@gm!b)+1$rQ`Vd{T0eX4lar*-A|0}!*5Nuf$u}!#oz}wcI84*(zFw=}@zLRx
zrW*Q>N+s<VjStY;Wg`V&p=Te3Dr_GYV-k{+YtchyNH)av7n+2jVa2)4VlviwyP}M5
z*K0-ka*XpZr&qf5odegp6F=Q^NQpk-dSThNPf`Bj%exXbRK64-aS;nT$7Ci-{!|EU
zEryeGUddruM|fa_uhBb8>!tfjo0jDGxk5wv*ezXxy2mC9oK%&~W#jt}QYa{vV#xBS
zDt<bfh~MNvrVPHd9P;K<X?pUlQl*edWZY0vKBKnISK~BPDT#AzDY1^Oc1dT}H*5I@
zt8!%k<%<|jo6?#J?Izzl@Nz{B#=$vhA<fa@n*Rs#SLi_*S2-y)%Byh`ErJ<z6RnoR
zCar{t5?lXiGjdoe`y#5-WJxen1+%qKa>gH<wfy>Bsa&0^lz74rJ}~5*bM|*QkvcS&
zmK4b*j|hKx05xQ)a^TFcM)Y=vtafT08Pn*OgDsng&$3?VT48<(7Lg%T$<GAI>Fn*&
zl{;#K@|8>UPX`NyDC9J?2tsf&V0Sr0i;JBANSzT<DIC<!#MmXH#MsQt%n`iY<y2L^
z3@ESus0f~)<1zAVyKBY-UuN2Blh3TNzJUbesci!h=-K^(D8sjmif+{kHE_5%XBf=_
zoH<EJeQuhbCs~zpwR7AsnpBnxndiG><dqciKvoGnTeW6<3KRKQYpEvhzH~-Tj*tvU
zQ28Xi`4KoNpLC}^jSMkcQT}4c?rd1$t8TW-i%`}fP_1R3jn>3g%P~k&LcXcf{!XpQ
z(lxK$pZ>v`>tEr;huE4toWF6BzIXcRakF)4hFX(fe%O5egM|+ke#kYFdy^jzFFf|;
zvCC^Vb4`Mo;ZY2#wQDZEEkM6^(#R<k#dunm*!*hQ_$Ia3LTlOhzLwa+YuS2`7Kfv;
zlohS4@erq~-AG*<$U8Ghy40Q~lAx=2OL8VHL=sPqWQ`+uVXNg4z$m~;;^{E-6|+6T
z!AQF*053WT9mpvki+D7~$VV(hGe7Xn9gf;IS7xSH;M<yeL~2ZOoU>ZhiUYE0Z`bnK
zwQ22)jytr<{$9K7w()km?Ub>jl_SiUvqQ^O=#*x+1=(yijbEQ_cH4Y!yY0dbyKSt)
z*t<ik8=R2rai=B6Bvu-bknT3_@6aj?dE_)OCC)t{V_>??-zz@J(;_hjYeGt;_;lNV
zksf!tEjDdrswbt=qww(wsp(a!SFRL;pI1;<PnylktCRc<ZJx$oKlL}X1)*9e$0fwZ
zcv6gxJGIh}Bk;te4<THq7|$Tvqgbs}*u08#OpO_u;kFr}3FL0tPOWxWSTlFLJFP`p
zOp;sO7ds?ops{zS)>H487{_y)4vI-0=#I0ck4%nLe=70Nq=eYNP5Pjum{^-vShE;U
z3=t~h?{b+wD5h$Snl^WGY)V{0^1w<1V$$6;t6MSWew-<*RE(;-w0C=S9Oh1oPfQu!
zI@#k)iFYQaBv&M(PS40xHx*>FWqH|cB{9?7@rmwOPhDsB4c#S}bw|eITP_m5G~tc?
zyR_O}!l~S9T#e#)bC=zg$+a{9E4IW0k2|^>kD?+{(g@Rw-yAE9A9g#x>_&1NJKLN(
z@79WG%e{@EyR~TTsJAh1w-&F}^fCPRXr;COK1P*2T6NuuKl+)N#0+<|D=scglA4hm
zgUy|u9y1`(?Hne4w)H-C8~x4JBqb%Wi8P|7F{w>cl2Q}hBbq0=lb(#I`Ou7*#Jc94
z=@O$9lhYZK=BD60&RFh?Nh9*|?!UY*A(>|;#5vn0B*)om`r2&~JlGh$M=S4(#bz7q
zYb@SFu4effr}iKv9P>4D@6~?Ow)q+U`?S7VA%7!bpVmQ(^*1)|(;8}v*zvGWdq&G0
zV07M3?i&XfBlnAR5nz0@U;G1%8~cgxT!0aAK&z|Ipa$Xs?Y7%=Nw<`EdbBd=7_=9&
z^fN90oTWbrHz|F&7jmk0TbI&IOo<(0maEv@anAM`9`^{ziOn{Ju*ERbV+Xn8G7{Zs
z&V;CRXIz3R`#77;lagxlvUPBe@Yrmj17lUgwuPp9Vm$Px4F|MR+T}pw+XLh(JSfZm
zpypRtKYGL~(4J{?ofUJg&2>%812)$~G4I-3Q;&KfgUzwI-W5xy-Hd@^DS6Z8+KR=I
zIdhiH^@-S=TejI;UyChj$W@!`XR+PU-sHmx*t{BNHQi)$O*w`&^usSM+FWzQT2B9Q
z{B)aZDR%G7o6aBB*<72&KDWx^e&=njkHzk_{b1p#HrH2T-y6N<{f}&}OW1uH534&Q
z@Ee=!u3TK4>{Vj_%Qn}`pK>u^+1|?|mfKu!ap9Xesz6rh6DMu1#d0-mS#s486JN5q
zHp<o7XZ-^j<sY=z<~sOkR`~bY*)X3z&~;A(<G~%RSoHM<cH1hdHJl=M@RLq+8#giM
z(BTd&x7*mSrK*v8THn<MYvmdm>+WhTw9JOagS#}7RSk`b_h>%n8XE3<TC{g~Bf7p(
z`JPrbtV-3|0}?!)QifNlOyu&fRU_lL1fJB$2)>WGqfu7#`&v=EW9B$-!~H-zuV;?;
z4xH+e7Slh-u6nZAW3UVQ#U6`Y5-Zp7IqV78y)5@6?B3WVTv`tMaO^&o`xxxfgXEs^
z*>;_aSGbUdEFN!Q_qXhGum@n5h!^CrufiT^xo^fU<CHvPe-8WS*n=(ibJ#<$%fqkc
zu;0h7=dwHkgYC9Z%U&3JZtRk%3OVczu;;Pdk(g|Gu}fkH<gjO853}4SW6y_OGVyK>
z`x@-|O?TaPkc$FVpmW%zZAk8J=dg!{*lh(Z_p;avVV7Jt&0&8Idtu9c1ok4>r37Z=
zu&=^i)N=m>dodg3FM%#|Q5;i>DInKlds*yG%e^)B2<%c~gLBwl!5(S3FUMX2yOiXy
z9QI$am$cjqgxYPTEPMU#T*yEq#XTU0eG>LEmitQVQP`#EPvo#a#4dw^xJR+)t{kRR
zNtfJN;dV#W;D+&OZg*X0HqTR282{Wde#yW4oz1#QbH^mY#XkjecFB69yrZ1m__Vsi
znKd}X5tJ)@)?V+xfCuF5A-^4geE$N6TW{F2UM=c48mz~NxZp`ha;L>2KZqp`d4N&G
zo$BUKvIi#!ZV3kI83R0tZubaxEOd`c@uZ|zk_*e%8vO^R#KwT;K{4rrEGuK5$Fd?5
zB*c##m?BPt(^K^10T~I2aj@MJn-o`RU<y7AeCZ5kG3f(SDyfS>9#3l3*u(@<qpV6&
zQ?_(>8WD;$F=j+;3PqJn`jQ8F28mlz#)yF_RjO7Iy9#NA7~*!P4syrDxzp11WVff1
z_$MSYKqMv(Oi4>gA+42EvIeJn7_Jc|R3)Si@+2iz^0;wgC`rml^dvAQdy-;CSdry)
z5}))WinG#VSMv_?5Sz+l<C4>p-MYt(S(!@&-GtcWgv7KARSRjzy)hXSu-hFcb}^Gv
zQj-uDE6H_QdQ6qdRjX4sR^j8|iD9r!cgJR=xl;)jLzN~Bb63LIlbBwmvRPPItHn|H
ziRmOfO;3+WPZ;HvtHdGhBuwHNLTx0bXC$Y`#Jk-?l7=TF)8OI~6OxAvOG(T~a^sLb
zGD)se(nr*&TxW=TWNJ)8TB189-bxI&i$}71V2p<(@Z^M;#46%M^s#9kv1O#Y<74#1
z!~rp}L!{8v9XO_@BqqcrxYMnuB<QFFsh>Y(3};JVuIp6dm=YS1kCn)jn2=84(vzIo
zvVF8G5fMwojns6z5*!EVSf=sY&H!cwi%xgb=n+~(V%%f-Ik5}szu@{Xzbzx|wnhAk
zjI`Tw@ms`iE<cG};<MRI8BnBC4}<AV+&*;JZKg;b-6^|U>+%q%$Mlp3$Y2!3bt;j0
zcz~GBb&RxD<Py;d!qg{BGk)@K2I1tva-W#(Fy+DGpU5v~=FDW70@*Z=U00qtCrz`s
z;R~d>_b??giGVyPY06I~PO%<Y;8S4^;CIe$x0%k-?PEOjdtg-vf3FPFPsSA)4CgOr
z(8Ep4{FYfPL$}*1b5Vxh7Jh5^$wMV#iqM@lfDXWjJ~Si2jWnmZlSRHJa;aQG$beLz
zdzxAINnCev>yJ5zUyj7l_v2LD681D<W{AH|>azu#4GSn{9L4+qQ&PGFQxYVR*=$KN
zXR}cXo^*x_#C>`+mN>-FRC6YhNL`;H>|fP&FJkZ;_GDG-p*Z|qT}wn#*Ch#ahANSN
z{jIu|`|5Hn?(MMW$f=bavl>QNexcA`+SU}VGx^=*cV!s$---wuTaijcG9QZtqgd3#
z=i;`AUnbWlF{Lyl5=qz=OermCxO*%=2`kld%<_});wNqwFvVZoBraQ~?o7(yLh7st
zMHf1pBBv|L<T%<A`K7L^Tkay<h)5?@Qy;fZ{F?KV2<2XytC}v*LIz~pB<_;LorwRV
zxVw6wj?H#jM7c?phvY({s6gOPta*vtG|F;YmNSBGswpT&+_v1M9f`Om_kYg)(rx3&
zjFixE2QgF1r*SWWc^<Pm0<=Di01~hy0VEgl5J_=$A{qTrjucxH8S$%41W)*xa~pNP
zL~fhpOd^<)zIt#irKJ*qn^d<{MIt6`M^`sVqmqcnTMy0AdXrO{rlgL<Pi~q^IDv{J
zRG?$?Vp7ktL=63)V{$AV)2zxk;yH=`Trwr{MYQF48vpy2yU85NUsC4<-K0eZT9lKU
znG~iZOJ651p^u-V5;~d()F*6?gvz1;OA^#6zd@Ftv=?dh*(CMgF1<}kLlIT#Um~*E
z`l*O#V3(rJ5iz33z+{P8axD=6CYvohAvr$9bX$enC|qR>IL5CaRr+YiX{~~(b`mto
z^m7u{o1aXes)pexmMRog*mk>ZCZ=3Z!<3RaMr86}iI_<(gPXCilB2X%c$D#ZB}YT8
z)hHuxWk<9=iFis9u0(uHLZS#_u`%hM3MCrU75igBG2NXQUr}T)XEIUMb*3jEo*>P{
zIh(q=c5}+jNDnPqck1e7b*o}E=i?j1&mC9S`Inx0YD{`Mz9lRf&@yByKO{M2c(Su)
z$7ao&bZ<#~YH)R00UG3pEr}&KXF|FfywfvMQ&Z9;T`9@V;m9bdRVrf86lPU=xykfq
zwT2$Ow`1LhU#<J8_pWE^+{kTQtKhh#cWvdWT9Jh+OLQ<-tsZAyBvPm9E6xNFZ4=@X
z5PQvqy?+o^1SC`NjqcI0i(1L4>x`oaJt-;9^g$%^m(glPLbv@XShgIW!dR9VlNvsT
z-cBt^Ba(mPGL>O_*)%hutk^PNF|Q?@vW>Oe{Z04GmkA{QCYgo}_e_psRkJoMOi#@l
zY_G@#kxb4sO^0P_mT4Nc%mB;6tWRv2*$>P#-7~Wj;%CO28B0;OZO+`Ca;sL?*)=1{
z8555%o966-s7MU{FPKwG)Bo8tmg5NVI6xHsf|SS=Q75EIKXG3xA=O%`Ui&LjwOhWL
zJXWf=_PSQTN);D8=Dq$#?i)R4cPzMa{<uc3hmTD<eY|gxrA;))2eX#=p4^s_+FZBy
zelgFK)fYN!n^2|XcWWOW-#sR%d&=bJfAKuGE$yS3`Ro1h(Knej^6W3Q(C5tT8Ko1B
zdTz|#`B|GA@9s>Pec^nmj<qMY+;(l<@hPwDduL}Z_nc+J56=rKnW2^MnNs1WiZ5PR
zki2BPr_C4lTwBj9Ue#w^*W53jo^)r}(zEebyL4_iE41oby<*b7DvKIL+?#cvjAPY>
zkZara>pi#cdTmjIUjxtWE447-jh53F9#0wPIM+G$kWXrINWj3dWy9`Q`mDu-fUGj5
z50>szJECy(&*k>?x}Q{`{n<5dzLPh&cGquWSH99MJ;1$a_3-+e0|pQKVa3laqYv&H
zTd&5run85?UXOF!XgBZT_V?|T^(I@|#ur*N-MD=$^_8}}DsSuN^Fimt{o!4%eOd70
z>z{@$c6Tr7^VXN;oI{_TP$T5#hEF$FO`SV9^uV#tHss$qzhKv;uFigmwTiuUdFt7A
z!&{YE)N1y(>$a?_9^32S-Zeo*>U{jN>wKFfCp)B{j~(9e(45{MY*_u}uPM=k?ytV~
z+|_ZfdHU;>3N%fL{cuFu((CiWMjRM_rA}NSKW+b%sA91t?mpZ$?We8dzPX&(X@0(u
z`&R${!JTd8yQZE0WyH{Zb7D$gI?}MrA>Um)BKB{X_-V1r=RWyz%;`%bK25%=cN}wT
zQ%ZrfB?GVfESPoR{k>yi16Bmz+2%E?QSQPmi{z~lIJEHiF<vEZ4gV@if1~97#?LQ3
zRCUX?gZTosy<5LsaOj*p1B*6Y-=yKk+rHS_uG|am`*X_bJ+IvTvhLE9kNXwq(X!2y
zg3S^YH)>R=8W){B!Wq%PS(%0@|Blh_Wv!%Ddsown*>GWWvDus>5XF-DGl=OX^NED?
zs#UA&*-P!RvR>Dza5K=I>`r461jgbsWTuTJF2!w9E;TJBE+f_rBokQdw-$fp!J%Ur
zXfYpQ6nkBM)pyx#lkoe9(Lo*(Eh)pj5Wg?RB20^iq+a9@C&S1Y0*iSb^CrJbmRVt(
zIlNT2%*L29{ItQ8;YJ=}v!$d;Uk+lLixHl}60EF5co@CH2v>w(AZzkgBBNWem_X5(
zgQ7gF8}^b`gc8`sWQ@{aqLLJo1{fGlY__uTDQT_RHfw?0#5}ScrD@l^{6d|LGYi*D
zJh`;}+m&KR4}bobAt`$++Xt5a<HXWohsGTobGK*9>&w4*f90I{X*;qWyivMlqu&o#
z*FXIJ#?X^h@_Fqqu{(UG_uIaCGQYcAW_5=DixmnLPVP0gOT91Gls#W*eAiEHKRfS#
z)O+y9+v>Dw*W>81YfJ7mZC`Cd^E;Z}ss4M5I)Bjkwb$RNeQV45(-EN$fBo!}puAW5
z8O;jpS@=SOxaSI{_aEEwOk}xflUiKe5cW;qz^~3#tsBtVr(_>}*XPRyOn>vj$R7{X
zN_zEphsBA{+`Qx-wZd=Hh*Hr-7OdTO@oP`<wp(9$Ikn-s_*RbJLSkw>yK&;qqVIlt
zdsgm*Q&VTmF80z-N4iIyoicB7@b({?4063yG1sbYoAY<^AAG!W%@1pDZ~Vc#V}Cty
zZ}j;(<7QWS_)_($O`Glc=BJOlJwK!Bf?Xx_23Om?8QA3R?hby@^WvjUm0Ufn_xr7r
zUiq|C+U?)sCJvgF|BLy34nOB!|9WC-t4<Go-gvriz823eeD$62(@rk6P1*8!!0#7&
zcyCzK+~-(@Vy_))luO&Wa;w9h_vImVr{{Kc9C+rE@ypR8*Vq1#K69BT^2g;hCVY3N
z*2N+jXOmmrC^WQaS$*&1l&k?EOTxDmzW+?aw);LC>3sXE9e<4Yq}R>jUoWaQ$#;L1
zkMe}}ER%VqU;obf;)3hi1Xuii)O&9noO5mNxq9tal)JU+z~#;LU+nr;Oo8%VFKinA
zW$AAd!eYBe1dXwM7#q89{OHlQ-x@yr>Z{K`|6A}czdYPJWXP8vrKEh*ZSUUcohn!E
zuRH8^ZSlZ?N5+&d|4hL@{`hggi4*I7SV|ijHtb6CLx)~_XWY2rjSn82{L+{)ck|u7
zd+l=1o~sYGY&kXX`t^HPmM?b={Njr>58i*j-=&o+n{S^pr^N5`=Xaf%mUf}{jvcdi
zWo2a)dGO%d6>q%JU~uWu?RwR$ndoZN=mqWf-*0t1eE7va)vN1+ZhrV-=jz{o|Eb@N
z8+YCqI`q5rlP8yUtx{z`qkQ?w1$lY-b=klFO?QbBE&A@>{Z3SPc;$IBXV%K)?H#c0
z?YArW`}&5|%#)|&?99x<4Zi#CZ0XCFKS?N4ro$(zSL^R(WLzrj@1N)07hf#usZgOu
zbfH4kD;6$Xb9Hj^nXA2et-UvQZtvf^=w0TwuUBta%$Hwg9a*zx%=2Z-c4>J2{MSP(
zRqAVuAD{PD*RBf&efsG}>7o^W{&{DAr?YYK`}fZu_~@gNKlkpve%s)|U$pr6<5y2@
z+cvOmojPgXv}rTri+1g1UF^|gRhy$nCk#1uY;(D5*Y<wDWJ$;T_wN0?w`tRfC)&4v
zyL+{2@iQh&$bD3A-u&gzJ9mEa(KN5Iy8g%YPMzj9t6zV_ruW_}b$-#Jw!e1n{Qe&w
zeDK_k#*H&ye(g2y<*&cqXv;hAM6{}1JJsvfts7^zY>C~ue*N%_)2CO)Mnp8J92)8@
z^zh;LA;13mAnCKuwzvD_ld)kzLE$y><}F?6%9Y*U_UpIpeZ#16xLLDFbqW-S)}P(8
z=Z#+$F6=(;g%|F(Y|voTvbeYdKR)-|rt$>~R(&%){fD{z`|p@Fc5J~<J9d0mKXc}T
z_{hj+FO)0SZRxaW^<JDbDezE>7E{Vzy}JMN4I75k4-1PL`OP;Azw6s~OVPl<{KLNb
zYI(hL=e~NTYSp+7b?bVH1q6hB)w=cT0X{xKi6u+6y3nVOzTvrDyWUIw{PV5XmMv?#
zV8DPqi>6PnGylyutJJ!1;qzBUj{K$Sk3Sx7df>n-J!{oU&Pqx;J>}I`?QzGCfAm?0
z4s*^eUfg<ZV&ciW&pflt_vX!COI^Bjbfw#UXzHj@H-B2OqGh<BU+D2on^Go?7;!zN
zRH-&;(b0WM7AaEu#)1XU?q9n$z4JbOpHbrC#g9jS{q?*#9?!*y;>8<&-L~z_Gh4UD
zOnl{);0Z6koNHQY>bWKj8;;(yZr#u&@$rXGwrVxa+u`uB|MuJOc|t;pd=L|}t6z;8
zgYP{1?22O>HzrJ<II%#FojczuQ?zK^jqko&ruMhrp2~as_T@FRW|gm&J9p&fgoMvh
zPn}vkdFoW(h5C#c)z;6RT`{s)vHGvS^in?OPd^=OedNeX54(3?G9oIf)2Op&KYVS<
z6vyp(^Ll1Zp6p*BIJnU1?c3c|e)!?Uz9vn^Zx}S_*lw3=+^V<UDm%Pl#a_8{<tp~^
zs#VY5@78V6mzy^y)y<#30vPxZ42%Z@Z-IeV!9Xw=*a`+d(&0ciIM4|UIKaSSFfaxT
z6a)hUz`ze+;B7F_91Oez1{#Bbm%u<iFmM?R90UV_VBiWE7zhR)fPqV3U^^K29SqC_
z1HHk(E-+9846FbHgTX*AFyI0Mx&{Y2R<Ay&4;Z)!2C9PrKQQnH7)S>LUBN&jFc1U=
zx_|*U80ZTIqQJmBFpvujtOEo7V4x-#m<<LRfPvCrAOQ?~0tVg#1BJoByI{Zr2BN`0
zMKG|sS1*0-RXA|3OPBe-fr0j5AO;K^0Rzv2fremUC>Sunz%4MKhH5ZS0Sxp91I59>
z0Wk107}y2|T7ZF5V4y7+_y!Do0R}FDfi_@Z2pA{_2EGRa`N6<mFmR%pUM;>m9GC$H
zj)H+uFyI3Q#)5(CV4xWo*aQa7gMnYcz#m{>2N-x63@ir&TfjgoFyI9S&VqrRU?2kw
z#Dam!V4x5f2mu30V4xis2m=E(z(6H1@GTg4Uxx#S;XoZQ@GKbk1q_S>11-V8GBEHX
z7$^@0-UI`4!N4pq@F^J3!9YA1cmWJ71p_aFfkR-REExD44Ach$Bf-FTV4x@%7zPIF
zfq`ehKnE~T3=Dh)2J`?pkl3fsh6`ZeIWUk62CjjD1z=zi7?=+RYJq`Qz(7?n&=d^x
z1Or)MU<w$B0|TFdfpcJBEf}~927JLlDKM}S3`_+BKY@X8FmN0UOacQbU?2?)lw7bt
zfA$6(*uQU|(HRVs00X1Jz#K3T0S3MX182a%L@+P`3`_$9O~Ak&Ft7v+oCE{jV89Lr
z@_>O4z(7ARa0d(=0|V2+Ko2lb1`KQj1GT|GUNEo*3{(RHn@{Pd7N^32$zWh17+4Pm
zBEi7xV896mT7!XyU|<9o7zGAi0|U3gKqeR{00vHjfhu5N9~jsG26lsiRbXH^7|0C<
zJ_ZB#!N8Ybpe`7Q1p}kOz;H0|JQ(;zhXX_4KnfVx3kE8K0XrBN2nNc7fj_{&2{5n}
z3=9JUhrqx%Fn~Du(ikvs7Yy_S11-V8buh3T4156w-UkCK!N43aFdq!0fq@-hAPWpU
z00VD;fzn_=uL%bl{eDaP9Sj@>1J%L6hhX4)FmMA53<U!x!9W!-kPi%afr0&CpadA$
z4F<x&z)UdU4F=u@1HND&4;aV<1K)vx%V3}k7+4JkGQfa87<ds3Q~(2o3fI&t7KQ`K
zz1Cjs1qSAVfi7U69vJu%46FeIWx>FCFi;5$j0Xc<!N8{?4}gK6!GIGC+y?_6fq~v&
zU@#c?7z}I!19iYa8!*rg4D<j4N5Q}`FmMeFECB=en(7nxHiZN2!9X=IFaZoS2LpG&
zfCdJ1FwhAM)CU9afq_L}pfecw01Pw+1FwOB*TKL$V4yY_xCI8bfPwX3;4~Ou(?#V_
zFz^rz{0as>0|TFcfgmuD7Ytm{;Xpq)V1R*UV4wgP*aHR@f`J#nKm#xk2L_%40|miA
zIvD5=2F8Mcj$q&n7>EP|<-ou+Ffa)Wv;YHF!N3ME5C#Um0Rw%(Kp+_S3JjbB169F5
zT`-^rz=762K><Espd=XR0|s`1fzQFfGB7Xz3`_?DZ-RjfU|=K|_z?^o00XtaKoS^u
z6$~5)10BG?Vla>h2A%-}H^IOqFyICQqrkulFyIFUHi3Z=V4zfVA3ZG^4is7N?2QFr
zU@aKf2L>*Jfv>@U2MiPk18u>;Rxt1i7<d^Bq=JElU|<~>hzA3$z<>h`{00U>z(5Qb
zr~w9^1p^zwz(g>x6ATmu1Mh-?Z^6KAFfc2(9$76n97q5Ir@+8eFfaoQ%mxF+z`#pj
z;3qI}1PpWs15se$EEt#q2Ihf*$zUKD3~UDjKY)QIU|<j!aDjohz(7SXkP8f~0t4N^
zz-BOz9}L8Tfze=KxDE%NhXcQWfgxZZ1q|#31C_ym9SjTv1LeWMA7J1F7+4AhhJk@Y
zU|<{=I0y#DfPuSUpeGn;2?nl%f#qP}3o!6L7+47g=753uU?2?)>;MB<VBi55(BFUq
zr4yMMfPqF};CC=^7z|Vg10RBc@4>(gFfbGhoCE_^z(77Q-~|TugMkuYU^f^D2Lm&~
zfHxR;8w~h@fjnR!6AXL@1}=kvGGJge7{~wv{$Sw69v;0y1vpTsCNl#tkPHTTfq}VT
zpbHqN2L`?b18cxQSuk)O3{(OG<H0~zFrYX927U$uPB3sE415FzdV_(%VBljguni2<
z0RwHoKszwd0}LDm1INI?wT?P712}LG3^WA;?ZH4bFfaiOGzSBBz<>q@bTH5f4Ach$
z?}33uV4yP?_y7zv1_Q5wf!D#nJ7AzT7`O!nwt#{4VBj<uhyVkjVBjGb_!SI%1_nL>
z13@|*$O{LqfPsEszyJfyz(4^oum=n*1OqRCfd*h84h%d81`2|KbTH5#42%T>9l^jE
zFc1j_%7KAtU|<p$XaNSUf`JWSAPfwA0|xqnfj}_u6&N@N2K1_Mpl%p512E7U4ETV7
zl3<_@7}x~{J_iHKz`y`7FdYoM2?j2JfstU~M=)>z4AcSxNnqerFmN0UbN~a3!9XGy
zcm@pI1Ou1AfEx^q0s||+fFBsxbbXROVgwv0)rXk@7$^b;7Jz}ZU|=5@xCjQm1_K^2
zP#g@j1p`~bz$;+jWiXHm1{#8abzmSK4736R4lwW=7zhCaF<_tu7<d*8Yy<-n!N5*1
zP!tTj3kJTutTQu!1GB(DZZMDl22O#2sbF9R7?=$Pih+Tbz`##n;0PG#4hEvYz*#Ub
z1q{ps1Czl(Fc{bl27UkoO~Ak)FyI0MZ-Ie|U?3M5SOo^Ufq~6nAb+QYH#_TH-L4mQ
z&o5ADX5TV(KOVBQ-i_w(6kpoo?y@%==i7F_TiN+r(y-;zhaH|&s-1T0{)z89p7^-j
z-ppn-O278OfOV~Vee})1!kbFX3c1w$+Z}&Ar)5;yo#%SHu^$*MUfp-+^C3U>d(H9Y
zoY(VR9+kBHbk8ntR(x^W7oSIXdX!B#*Sgt(gHs1j-lb=Z7&-OkkcK_p`g-WbGV42j
zyRE?TN!R0-IS;O_dt^*_o3pXwsucRZf3?m=bG_?;bHn348oy%5<|1>){xPGx-<=+V
zTBR0z(EPQR62F;|b^G})B|cAI`kmG`?b+9gpD(wxd%SPd<<*W|>ngqd{N9Nl`qldU
zmzSa{ul{g*iA{qYTAy+Ge=c7{Kl<|PYez1;{)_Lg^S(>y@X5{7?&I6MeTomL{^`qq
zEZFl-*XZhVyZ`!r)o)++&ba*B{5n@&3|w-pe`BBbhW70on!NSS%MlG5_<TKcg?GcR
zTWtNI{km7XP4|9o&(M@Fe7qj!>(syGy;%i~pSFH^xM}0b!{0qMaBGu`t0uiN*|&D@
zf<JzB^}xuMdcf#;KjmsN`e3o~w?(LUabl)_tDnnPU6z`=SckM;iT56cJb0$|gj~gr
zuV_%FPQ{vWr*Z{EEa)@n({8<I*Nv`O@}q$PLAic>_KnYGUS0d{^x1_w?%k33zVl2>
zLfhfJ@)yceBw*7U-+f<h?vAGCBI_3|P&iLuuz$$%{jdD8anbsU2No9#(<c<X@oYQa
zjFp?ee(UOk{`v>+mA3!B<yKmsz4hXoRe#}L?_p(|zH(+?iH`@}|9O4vjSCwNovCsn
zbV6*C#*s!|XYPID$CPX{;dX<~pXIK4XGPMyvisXsdbjAWl~<p+(q&@svGY5JC+1&M
z{;iFvi|@9YkvlT(r<QxB++S3v(e=3}D~x&O+O%qV<o*t=U)uR;?Nfiee`re0z%OPU
z9eZm*)HkC(EIl>r^!)A18(ny(ZiV32M|7HfxZmIbEneuhEAOknUEFYTTHoL6MBiGu
zd)&6n=iVFr#<7IO6_2N^$y4fRy|<PfSU4s;G&y$8#pgHI`^tYr=}&Hk_e{2Dy?tfT
z+Z|tYC%^f_3qL$u;&*gQ#19wseAiCR{&CZhnkj9*@PF^pm!nseUAcOGl`16~m8(4C
z!+ksA->*??O9#(_L*wqRIyUWGzLN{9wVCC0<M-27Tp^u4(JTEny}+wqwjb7h)wQPG
z+AleL)@$a4^Xoo+xA3IF?KTvzuv72sZsB#Q?>o=cm|{=&ymU9(6?m^#(Sd8aeD>Ar
z)t(9cDX-r0%cLnWC*B?vG_Tgwu-iQ+*Ux+TYMI4HY8;Ho`uY1J-`4-A<*1%#KbzAi
z{g>_|kA#J9ueCq@(kH)n?Y-ndzp#`BXD5EuY{b}KR~~A(XVAt9)l1gy*Z6~7X}gQ&
z4=VNDmRDNWk8-^k{BWp!QJrtr1o_Rmu=eD%ozKL@jQ{xg)b&-5d-^1{(wjWH;TRm~
z1O~c-f!$zWCK&h_4BP+%OToY!V4yn~_zet92Lq+Rz<n@q0t{q=f!Dx5YcMbn49o%p
z-+}=R4CDa=AAo^<VBkkE@Fp0z3<gevfr?<@b1<Nng#*nd@5&eq21bB^Az<KZFt8pB
z6aWM9U|=m62nPe>z(9X6&>Re$0|Vp1KoKx70}S*40|mjrOJE=i43q!^-+_T=!9Y1M
z;0p#EVBl>q@F5uZ1q`en?9jDMaG+0-qc4{S1FwUD>tJ9W82AJX90vo%!NAL4;2kh9
z7YtMd0~uhT4j5Ph27JIkXE1OF3^V`(E5JYtFt82`c!PlyFz^rzlmr6?7&r_DhJ%5v
zU|>>jz2J|v;lNj5pd}di2@D(*4uF9d!9Xi8unY`z00Z~Hz%yW=7#Ju62I9a#1Q_@f
z4Acb!AAx~fVBj+_@GcnW2nOB<0|{UtKNtuA1K)#zreL5b7zhLd%XK)g5e^&x0~5eN
zJ20>r3_Jh>?}33WU|=s8s162(fq^q%U=SFH1p|k`Kqwe!3<jKFU<??z4F+<9fg~`{
z77Y9f2CjgCV_+Z=47>#f?t+0xFt7&<=!M|G$!XOhuYrO6U|=U0_yY{o1OrFGKol4#
z4F=|efeT<D7!1q?0|UUoE--Kr4D<y9x4^(QFfbYnECvH>z(74Pun-I+gMsJ4fIk?x
z2?p$7U=bK_|L{;>@&X+2yO{6V4`ARF7&rn3z5oMXf`OG_pb8kM3<h?9fm&c-0T@^X
z2J(S{Held)Fc1O;DuIDl!9aU3&<zZn1q0{7Kw&Vj0SxG1zzYmK2L{r?Kr|TW^_l+F
z>s{bLH87AD3`_w7qrkvaFfbVmTm=I)z`)O7pgtJr2?iR0fstTfI~ceG26}^mFfcF?
z42%T>4Z%PKFwhSSq=A7TFz^Z(aDjoLVBi}tFb51w0|PNS97u%&9x%`Z3@ii#ZZI$(
z4D<y9L%=|DFwg@GIKaSNFpvZWhJk^0VBiE8_!tZ{0|Os`fnH#sFc=5{13SP#1{k;w
z1`IH82MqKB19QN@C@|0y4CpVyfrxXh%O-$<17Kh>7#Il#8iIkLV4x!ySPll3fq}YU
zpbZ$P0tTvq0UZns2Lmg>z+5m;9t;cu0}sGJA{e+020jM^8W?yD3@il$QD9&f7<e8G
z_(fILe|ZTGeCW_N4F&__z(5f&uoevb0tUVV12@6IHZU*%4EzBGx`Ki3VBlLYa2X6-
z0Rz{-z<XdI6b!r!27JJPHyGFo23`dN&w+t2z(77Qa1RXp1O}Rdfp;(JtF|_Q1FwLA
z-eBM=7zh9Zxxj$z*RX+siD2MoFpvrc(!jt&Fi;x|90vn+z`!XmumB8n0|U`uU?3Ry
z5e&=(1Jl94UNGPU18u=TAuzBB43q-{=fFS#9S#J;f&E}$5g1qu1`2`!Uoh}B80ZfM
zN`rx0V4xltcmWKQ1q1uQz<n@q0}Px20~5eNBpApI21<f~24J8n7?=kJDuIE@V4w>a
zI1dK$gMp1;pcNR<<KV!Q>vIb=0s|Gmz%($>0StT!2Hpn)fnZ=P82APZOa%km!N5CU
z;B_!?7!0%k19`!~1~BkD7+47gGQq$bV4xxx$O8u60s~{fKr9&83<gGkfp9R8)$v7r
z(c5q!`QefmegFeU!N5f@FdGci1OxtHU^Ez54F*bpff-;R9t>;&1BbxCF)(lv49o%p
zr@=rcFz_1~_!11P0t4;AfEO582L>jAf#P7GGZ?r825Nu-PoRD;+64!Sf`QM#z%yW=
zB^ZbS13_RQ3=Gr<17*O#K``(=82AVboCO2vVBiQCs09W-0Rv0GKnfW63Jm-T2KIn~
z>R_NT7}yO4N`ZmaVBk$KU<U(hz`z9^4(x;j<H5jsFwh4KJPQVHf&mv8C;$e^fPtl8
z;2kh<7Yv*S1C_zRFfec!3}|5BdoWNA4AcMv1HiyXU|<s%xC93N00Wi4Kszwd0t|c(
z23`XLuY&<S2@Z7mf|&sr@PL7HVBjDa*aZfrf`J}jU?Uj#77R=R15Pk-1Pq)71BJjq
zXE4we48(zfAz)xE81MrFt-wHYFz^i+cpeO-gMqeSpg0)l4hAlRfprt#)}P-C2WnMj
zW&j4Zg8>H^$PWgNf`O4>z!wZ8fPvFsz#9xy2LlVhKr|Tm6%4!#27UtrFM@&oU|=X1
zNCpEDVBl*o&=3s#00z2&fjwZr2Mlxq1GB)u*2y|E12}LB3|s^QlfghiFmM12j0OWu
zz`%In02s&w1LeU$ZZOab41|Dz31DCa7^nyaa)E(9V4yb`s0juFz`(O$;3^oH4F-0A
zfiqxWI2gzS2HpSzb9Fcn2?q*;0e>*?3K&=q28w}!8(<&<47>#fbTD8C18HC&9t_+A
z15Lp|2{7<87`Olis(^u5FkpazePEys7}yL3?tp=^VBlRauo?_Z1Oq$4z#1^1r^105
zEtwgBf%{<KIv5xO2C9L9)?lDE7&rt5z5oNaz`!UlkOc;ogMqqWU<4TG2L@gM1FwRC
zlVG3@7}yO4o&y8Nz`$`ZPznqz0|Vh;U=A3l2L?(f-_*l<!hyG6WM%*c-UI^=!N3+U
zkPi&}2nJHXz<Xd|6&RQg1{#5Z55d6uV4wpS7zYNXfq{i!zzYmq0Rx|af$3nNJs7wK
z29|(<nPA{kFfbSlQ~(2RFwoboGc$k#FM)wTFfb4dd<6zV!N8Yb-~<?$2L^6~fxKW~
zF&Kye14Y0<OEB;m82AMYgn@zmVBmK!@Bj=n00Ygyz)CPM2n>`210R5aqF~@VFi;;1
z1cQM^Ivfas18c#+GhpCjFi;f?B!YnrmYyH`bssAPqHux+<S4h()x2xPrcIh!VPX^5
z9+LJr*no_9cHTNI9X=ZHr1|D<pqz1{2c$=#6<F3;--$gcJuSAZZ36*|b3@L6*(!m5
zij{EZ2rt``a)yshVMmDdc-c;iw~a5rsl8I{!bwhXCZ}hl?^>6BMBkF0l%Ae6$jjCd
zb#$eZT7Ngn)C8`np{J7`ExV1ITN`4PPU>9CPjr_>QC3t>+v6tY2JXqZxliJ$M3_aG
zq8&7Mr~G9@SGO+xnssT?vZ-#S6lI=_WOi<|Qvm%<Q%l~`5i-?->+fRk92&T1P*yVa
zE~A?z3`8lF$V7X$ndOIil~R;#$MvmDyX_+89ZXSFdVncfyc&8&q9^Nzsf*^4L@c`L
z{V^Bu^TR#}Q~V?%Q9ATke&Qy6!L}|j!@HULlK0>?%?dvWQ)V!8t?OBshqzv4T}%8Q
zbG^g7Zmd!i8<Q+Mb_cKv#oGQt2>u-)P##Q4+<ok#{@ob6sAow+E-tWV-LB|Jvg-q4
z;>_*8>|HT8{-UW%2+;srM%m5f<69f-RA`bXI+dCh?JuvzrrR{^C~?|?xSq5c9juk?
zL&Ls@%8JJ9&#xyxDYL^%O!K5=es7v(Y&R^2`<QE`aF?1%ln2)&@;M~Jxy|TT#o;vE
zl^i8>o0GJdl{+855j-F}f#M;Ry4G^*gI%<rB@Rj87Tn8gW~IK(^Q3a;Vy@!1ke?Kd
z#CI3-4CVzZ9?3jEwNu}CP{rXFFEPoJ8grLCT{QRPCs}QUo0#1#GuASPSZ11Kj<U>g
zmO0rnr(;S=E-W^NRCOfh-@~<3U^CpZD{$2k<62cmmtJehS#3%zy99=(#iV9;x?Y6u
zWBG+*m(2{)*Ah3FeJ#!^X}RC#NB73RF260rIc2FayPBg=lU3IJVNcz^L)@+Vr)1yH
zMipuChq;!%EP2?m)cC!cqnr;`+t*8t64f2^{C1x53G7dq$<D#*M*k3pw~<uCQOe7;
z^R$l<UBfZB?=tIdDMg8K2d31O#3*gVV`CEv=0$#yXa$=4zfEO8d9o-2UdNR15@sK!
zZH0M#d%5vj4aeL5iR5w*Zc~l7YC4MRHrnn~nnn~MvlZrdtfe{PeiirIM6;JfO97s+
z%t<gs9wE_q*wz_E*vkB_<Db2A-s<TpoWvzbtBoo5Nm$8VyOs88s`H3rV=GV}E0A=m
zn6$JQ*%u-H9<DoJCayG!HgFU(Ce?Ce<|(<#?0u3t2^6-<C{)`qOq;mMc)hk`fPXtO
zTY;?xQ;i3;9VIHZ5-XV!UI|xK!pN-LD#4`vdoX2p!c?Pu9Y^7!ov=!SpN1(#?wWSq
zCvbWxxnuN4#)LYKy80}<s&OrCXgm+RFL(14wq7PjtK%HpY=vQCJpT&uo56S?{<0BQ
z#)Ing&?tTv_?_fuTZ0}cX0WY^8Wahl;x0+t-EgnZz3RY>XytD-tn2XCGc6Bkuo9_s
z80q@be5PW~<u`+$BwQk4S8YZ-2uq3QZ)hSL8BC?}^Z4w*{{X+o50br!YP?hTOI*7N
zcMMbFBWxqeKGl=f&OOYX$cAeiuUMXvD_b~zUEQL^t2WGpl0zwDsbh)2w#M+T=XgKg
zXxwXaDZdNYukf2{Y^mocJa`9I89;Ah$}QqG3bPx9;-m^66?l6~?KREBK`+9zv;5_L
zDVywSmoAe^VM^=iZ8ZbuTEkV}QOJKZ@y?L@jJW#1cY_s0HV*{#(oN*nzC<BOlHgu8
zwMkNq`!~7HJ}yNbdxa<)!cW<X)EaXHadgI1MM&7wgbBw_?vV<TpYX4R-CjTix=)}k
zI7SgjZgQ@Zt`P0-A!4(YcWdA%Q+gTRQXJVk4yBaW;wDXDlXdH)b;i5~j(Ghp*9C|w
zGP15}W3AS+;fvp+;!O9XWyE?~B)Ajfz?^z)N&KZ9kG8^PH@PWXkLPzX%Wm7xPt5E5
zB&iZ7eOK)$l&(LE>$&T#tx<AgT^zSy?&0_7;p`pZ*cBB4fz?B66QTGEPb7m<0gZ8!
z_TCaxuDe=he@sDXGN!^Orqumt%Y9r{lo?>EIPiPR@>q*04Q?x@q<+tOV_ic>mzo^)
z;_2m1V^31!gmlxQ8s#!8oWx;kH8g{r*CZP~YmRbprx{}#Ir8VZh@WIo5-4$=%rX`?
za#U>-N98qUWO|h8t|OB@F(a}EGu4vfEdQrRGlBCFyBS~O4OyicJ0@$nZF`CR{wCA)
zCT7-(CXPi~etGEHt!7Ct!@R(+iNi>0?kKH?lc*+8-ANcPeo~s#XfDk#AM$`5J7`Xn
zy0{;)=r8w6RaU@FnyJJu{s%DYTi4<)=M!|pl#FL*UgGVHdmJYBwNxGwa5N6%a|BGp
zE)SWO!%h6<VRJF1+04Q`#?Q=5A-!XUCpE)kiELy-GA69e&R7s`(iiICo}DpC*hDfY
z@k(4?HuFf6U0fF-thi^7#1*)f=a$6m!%yPxr*^N$$Hcm$jbB<g3bvSJd1OQW=@OOe
zEmqY@Bwn_*ZW-zh^P9`HJaE=_qjO6~e3kEP^lzGpB%le2WPTM*=&sDF9yOC62-A!(
z(j@K~ds;e5H1ETu<m*w(>X4B%fUN<e2s#D7E4y>}$zWwgb`k$Q_)F#8GAguk6z_JJ
zOR0)mn%$O=%&v5Ibo<uro3~OM{7I?Ya>2Ug=>vk)aXEy!OCAM*LNN(rj2-C68$xPY
z*zV(eK%C{Eslru)NSF){PscPMCeG{}>WNec;Utl#jG)$tGR>^p@)LPVdNdn8Mzml%
zUHVA&sI#e!C$+J)Bg`>=IYkwd*k%H|;kWiF|1@jfa)k^`!EYAT@IKEV;#iI|h^E+*
zL4s`aET9JS<CI3w4yi+LTjE$T{cIPR(209x<qjsu-*H6K`)WLM*!o!RMd<1hZjKV$
z?6w{X*z821cqIOl>OKY!D}3WXahJJ>ZdzpWArGF!JVG82uB27XmZ(fpuWs~KEnmVd
z@|gEk7$zpwsQe4s{C1kxJ-o$iVXI(W_fd_OQ9@laZ&0Sgc2idoIMjaO;}q4j;bz3L
zCHFYvZZ}l|4x3DAk5d&ggdRtFyr4|YHn)LX(<@YXFSS=);*sM3j<eaO2)i>SL$c3Q
z+`VWtQX(R59fvaUQg4z{sb7gm+V^P!&cT%WmJvvPlC#lF4to)HzU3!FiTFt_Yf^%}
zxLSsv^qp*JQN#t$8lz}iM^T?elY9f`RWcg4b%cjhn%g<mc|q=Gq_|*A9pETbC|F&Y
zL)5fA>{Z2Ee)kV&#kX~w4htD^%3R(kMZg}XvpV#5RMqt7Q_TZuCSwY%WMuv>%}lvO
z_$u!CFyF`Ib66*{d;@dKb60XL6Vi>Cz8r&ud+=F`TXrbzz%9h)nzg|SdxYyi+`Wd%
z2|TVXxCfsy-Slk7GvaswN6Cg2@IG$sZ{U{qksIO)_M8a}AW|vH{FqW~l7a5DV6$*+
zwqm%;!$&HA*O`qxr!00!{K%oSU_YDdHjcUFhH6g+p0mj}FsUJKB5#-xnDefj3Fv~q
zB;fD-`{FN$;bi+iQNprOc`N}W*HbY`%$&`na3=O#xP7SnTpMu9EeTxBwUow}m=y6D
z3A-1&oLOVJ-N&us1>7W2e_)CrD5aLORIcMLGezAD;M%aoH?Xrj;5R&^7_)DbhvmG{
zPTLTFe@v-sX&X69BNTUea2ZU0GP9K`EP`FCz;t^eF_M2~X9SS?sB4)|r?wgHQW{-V
zM6UZ1X<ucx+4foY$dH{gAqluk0<-;}D0bXa@eh{0wPpa<nQgv-uWDm(mF#8Tl`|z$
zJQMJj#fNPFr=L0%f64ye`M-_7)YUpnStQV(Zmvu5kfO*A@U(vx{!$d#4|v-D82+*x
z6$-+n%%9Hoc`JU)U;k6f_?ZCG+|2;4`#We&b|RC9W=EQ{RB*Nxw*1Sfhq`v`^bKq(
zr6vC^O7r^*vvCuNQR@HD+w~-Xtw+n-ieYm%RBpjd?S5eDyJ(khVDpA>MGC92Wj4W-
zSesjBE6cqNraZQ-Wwx_SlS{75-87qfJ|^cXLucaXZ0padda?>p4F>^WK|eF{T3ky@
zXoM;4s4*vWNx^opPVI_=O9gDFW4&a@z0KPziPM$rC;ne=R~{DERmH!<VQXkW0z-f-
z1ehc<KpqSvDdjI40^gT53ro|emFi^XF-({(Zyo_=GQ32kE&*by=BhDGQ*GU?JFaPK
z>#jBFqE=JuzFX`1xztb3xo>fXIP<6fg!|4p_uO;te$Soz%N;K)_mATVgl2JZk|u2i
z32bhW=`#7myv6z$jKuwVt0`5&AO~)7<_MvVZ+1)J>nudUEv9&>#1Y&oQZZ}<kGN+N
zo7PJRK5wlBETqt>iO_BO<1qrIY-5Ry<$L6Tp?!<gxQe!7`&4}*9_(PQTU?mLmJ&KJ
zD3ZUa+{E<jl;v-dCUuG42=3_jts&invvN$KH=Tr3w2N?3y6bJ4Kf#Dn!}0)fD6CKP
z)X04)<8ey3k0C#S|16)2;Im*<+nI*w#H_N{Hxq!Lsaulv#PnNgY>Iqi8x9QWasOT?
zr#3r9L1nUF-&$Lak(jdJ=Jva6hH36@H4u*aBL`}eMvfb%nxX3*>8L(1oc%R8;+W!;
z+S5JyBD=<;YE)%-$6G6H3O^0*={{Ize_MZt7z64i{Whb<W+bSsbSjuy>`+w>F&25r
ze+g3ryyMqiT1w^<?8(cD8AR-Mmo3kwMg580YDCr5mzVO!Fdi5yqreF#?x>&x0zq66
z&P7UnMYE?Z9OH-l+%7gE(x?gA;59)nU%Az~o^aaFitcw>!F*QN>T~=2>+=XI3^s9i
za~^JI(jZU)#nuuiR2)6pb_9cY70Rd5wm#LJuUtO6NU35neq3Bm;D(}5qqvelmm$a1
zMBWmD+ToC6NZ3=Lgw9YP>PQ}O8ro_jMy;G&V>g^^eX8Z2?z)I0DTxe=+S45s#}jyi
z5pyz_J%yFT8*C*eZBUCx4^r=<Lw};4jvt&*!pVV|KxB#`UH8%(_1Mu`Pg_>>PV*`u
zEk3RBm?Dv+LQuBq%m`iXBo$Aa<D=bMR`de%O2?~6><7IgD}&X$^2igG#8loUvU->V
z_c>;D4C5O7+0GR>9MkOuOYc!6nuTTROtx>=n%ZOCRe6<!szvEZ{H#$p19#D!x=0oB
zj-{n{X-|Heou~g^g=)(<z6f$C@)5r;Z3P*3g=2ngwvRyv`qG(nl0eneKEmw{2l}}4
z^mg!a6zo&^HZaq1FlIf;&&hU8rc63JS4NT9Zsw=_W<EDvZpJ6o%p=(b?P4S*4hT5L
zm}Za_nT`<xhtnN~xN?lfnq-h;7WsczaV@DscC-9BoFa4l&M2~c%j~&R(riQf|5s#o
zqZzZ7Jx1P{k7ufwI!)0ej&}r4K%p6j<NOSABirF5bms3@thWDFW5mlqHyp*$X^n`!
z3i3{SoFSlVQgiav(BjMqE5;4W?N_Jirua3`C>t-SB!Wkigq?FhqcEfzyqy|-Y#!DT
zvoS!@$?&+on}CC|*>{3yp20@rwNPNh$(gv{yovTIQwf5zR9^=LCIGTc&dL1*rQucR
zpVvdZ$G$3(@fV`{6C;eS{RUX;Y1?KqiModz^^$8d`YEVcnTwXq1z1iW#q%Xaiy-3D
z*tT;Ce3t(Np}0@gLTZ0BLHFeWt^jk@rCUv|7!IS!;>S*dxMc<#*1wTU=X+1{rvqMP
znqhT#w|EA`9Mz2HE;2$&kd)WF9;Mymo1ij_N?;yu7MDn$@fL7p(J9LwG9jdDXQ3*W
zJ}iJ%1}<6ZB@NUwXhnD{RA-TiH+p#HZMF%CgjexvAv3V|c3YCE6f3)pp#9*Sc=0UO
z8t<@`Gf%E=((UuG##GMaV0?&oLgRNsC7VG>UeIpRLKm{7h$Z*V_hf4%qP0i9xI$KL
zt?%8oLfEQ=cV_#+u1SyIbv8u}aUZN=D`ZS^{C=q5k5Os)_`Ai96t=^Agg=FDc(1rK
zMgOtG`=DM7r?G}n;p5u-VT1e<O=(<(AArrySBZEbg{$#{;C4vW@FC$#;|6#@97tn5
zei&*cuc+%I!boEse$*lq4}Q!{)#Ar(8Q&*3uS-0i#&Y~5Y&5n0JA)Ol%<5dFyW{$&
zYy|_K2A4RQ#@b@-Gn8V3O9uU)HIubPQ=j83btO}g&qIT$>7nCTikED?<W5PMSxpa0
z?Zt!s$U_1$*nkg1om7q5)EAiIDx;FS9&zerlrYvFwF<?7t}lv{8EnQc!6wJ#)%ayP
zE3r|69H_*vK#TKL1z#0ab5zXNV2gNo4mVcNk1!5RP=NL8Bt?V`rN<bO{TpI<9-GA3
zIjm~@Ce%4__VPBAFmJ;IeW*Vs9-PBg{1&v!oK^Compg@A7A}iw13T~vcqLbi8F)QB
zzI?=>K@Lxd@_B0RC#gx<igL1or-rAvSOvZ<PR!$a_>MR~PYwB9*yd;`6IbW)x}vA$
zWN}xCm_3CRP2YocD-2B1xCjT$0rh>hqp6ZlTdJm;w5#IsDRkj8mgR=@*|Gcw(3q=_
zv31SMGq>;A0?h6o7GU=LC@-@$>E8b1yxgRF$4{V5Oe~?>E$`CCep*0w=g)+10oTFL
z#l8g^48IVQ^ws-IsLyqY=7j<CV(VAXkjvstkH!17xWr0+Bd#vsCit!R*8+OscVg=z
zZh_~-{zV$NzZc0xY=!5ASi}zagLrh2ME)qATf`>#lc-#xA^vC4$AA7J#+R@c{wgjk
z;f?fOu3cPQ!p$zzrN4pKn(b+?750k<mT+yE$@;r^dI_6c|A1-^2q+;{@271P{c<d%
u{!^?zjXUv~;@;)K)409Jv%OqlRA$B3yTeZ1xYJ5?cimv8d?IxQANvp2Ce&L1

delta 84137
zcmdqK3!EH9x%b~yJ-40N*_}-`$tD|;p2>xUTnHB-h9K!cAPET<@hB=P7ZKS7G!dhy
zFyWpcLST@FBWe(iaLxe<1|%wC6jVH-;tc|#f^rlUB`9i8koWtm>Y1Gl3Fvv>|ND7A
zf5J{xcURZtd7gT1^;GqjzSeW!4PEu%`1hP<f*>#-wYB5IdcAJyE(wmyaG|TbQvM5$
zv-)wjgX6Np_b8KdS3EWDk2`@%o~;+sXKB6WY^ph%3)ORWaQT0%YRok=8mF6S#y0LU
zeT|#VekR{|!c_Uq*(vpW_^5frbYw<niX{`|ikW;VV+y5ADaZvuHkZj76J&e4x=4!M
z-IZ*vV#X9Q1#1JFErms6#&!lKlgW2x%f^iB>l{C!e`1)=Tbs$0I*J`8pD)>t4r6UD
zn+XcVVm6y8gxRdk<;vM|#*Ev=WG0zHn8_9j*>G~ynavk6Ts7kVn$S4%zp{H3I&#@u
zN2a4%%yj5wlg|d3z=Y|41)t_}J-HtG`ff9KZevzBrG9MY9V<^dDR@in#N$sr^<5_h
zZ_BSd$>)wMz3r6KPdVe1<4-;111AN?mzN(ubkafZ<k?B5pL|mAsOf(FNh?oz$C<;o
zerh^SH9>4j`|Z2m8%}=xJ3eX>bG5m~{Hytxxz>E#e8POvtT)%0Pnqk@4d&m>r_D{K
zewF!mv%%bAK4We*H=F-3H=6%6x0%nHjV7vo(|pU^Z@z85W3DjYH4m8YneUq)nje`5
z%|m93dDwKCeTvWhx%h}#ZH=i<3E~BVH8VAcOgwjRVX$AQT;E`P`}cFZ1?gop7~j=)
zIglNU@BMzRaYANb!OiLYO2m7WobE>f@9W(l&}&>)nwM0{WubY=%NzeI^NVoq4d2fV
z*kDm+LCmc<s$}99Ukq2&0&c9=EBo4@6jNy7Iji|^bFiPTZ=wtTU04v^|NUGgtE*V$
z;-DIoqI^^wtY&G8hZ`4lJQfytP805WkMijzuk!qDyrJu06aM6dY~#1xf2wbLC>Qg$
zTNo@f9|9Edlic8sH*1F4x(DNT)2+dpRZClW$RDMn;1(6P3*sjqRN=@j&nyTR92hJJ
z;`$+FtJ?<xhcjxfi@wGvIHDYsN|EU<#j795#^p+RAFhM=BR|f@qbkR2JhkUQW6o{d
zJZe%svhj=E)Cq3vk}_T4#(^v1)n?_qz+dH7#hY~%#FqMAcrmPoc7a}d@t)wYvdXXC
z`eMK<8^S~U<?755Dzw$G)6j`HvwgjxYh~1`c&llgK6-i_XS!7`T*B)?6t>#8?y7TD
z{FrOsUD2CX_u{a-R4E3fM&tXV@7>dNEo&D<!m;mKW@Oj6^j*tTvvjTTsxj-vMOjy0
zePuOImbQ*tSuI4_#y!2qCqLL|Ml}Y;{wUmZP40?uM;*ETvRu4+ZKl!<jXag);`{E)
zwenB;{7(l$`=LtRo*jP?z~?J(WE#vFs^zAFLj42PH~&6+2;}$FgSp0a<HnCB<)#^|
zWxzbSt=#|ixW2(_@5@EH6`T0#`*QrQ-jb^X6ZAa(LjXD$fhyq@J6Oy5m!EksH|U=N
zg}(%cmJL*EV%4P*+tnqYtGOfk#@2mJVXGT|P)&bQJAlR4w38mCwG77p?MfTQQZ=2K
zX6G`k&izqU`a-^Qnc<GrM~<>HEHSRXKwnhH0CoVR!T6VI51`gPXdQ6>5(u_C>8XR=
z<2!_1o#q_y+~a=&c!Tj%?ZXBq0{9N0=?m@{nsrd)5!?djA6xYfV|qJa`XWtC?*z+n
zP^vkyY64%>28O~WhO!{N?&;^*VHEj(hC730rxk{_tjhs!`16S#V-IW-ZAWHv^Tz6@
z{S8=It#@H?v?qLVJ&#_Sf~w90Fuo5^<X}8Ygr_1+bn4-D<f~U5XD%%aqTaKry`?A@
z4-C3n<f1_@baG1i;?dQBKNBwCQQu$`3`V_C@518h+L(pKv(IX*?w_eSK+mcHWk&XH
z#OxgO6_~+UK~T$z1R+4*SNK;pe$lLmi{gYC;caK6*z7ylsRqnLnrO_JSl;U?55b)e
zBr>;Dd)r6TIIaJ{{};Nx@3u=FF}z&Y1)Tp!yT8|(CmgB1T=)MU?Rt3i6WPXTlV6q3
zK)EI^G~U(UU(ZBLiX;20nP^P47xFYiOu71@C<bu1(aTyBQRLpDU=)F2UYp7k%}3Qb
z7-byE=UY<~bs;ZOH&GULAW6JahTfX1p58M~;KjY_ju>7vI5qGb<k8Dhj`DVY{roeY
zfy@Yls)e@(2-M0@E$;<tWFvb5eSQMPCak=X38y>j(NO9rAO{EOe{WwT#Uu((C<p3D
zJNwzGbeZ9Vi;8;zGlCoKOfY}5DO`ejOA2f!on4WZfY}MpZV7?k??4D3q*GSugtRZx
zE>`qZ0%e5W;G}>VY~!&`euB6Z<H(j&1#yDfJq0x{EBjk$1@bV#VThkt{~v%{Oy4>J
z{2zgQ1jJK;=4AT+C6JGRcpX*k|1QXnXCBO`7E_`>Ve5gBy}mUAPF#d0HLF^5Gvr@2
zNroTQOn<F;Id#E1WM7D13?i3?Z(rYD#LZgUm^5{4dAP)<YPJzi9a}H*)}_C@WBp&g
zzWz1q+uw2&kv2PZ!Sz+td)JDav(L+*c=5$ND*Ecx?{78y*jL^`_hQXndwhQ_;~s3L
z;LqZd`lC!l*E4rs*Q%60VA1?zb!A7^l~rA4WL+;?Rd%>rg|@2d^a}%`zn1+c>M9J^
z)zMZLRdqy#{#xmusH*-7b#?v|b-hAW9V4p}*iBp?rWzryt%~x<k(C))JZBJVt3ydg
z)TyL1Dk&+UNRgCbKqOs}l)=gGt(o^k$T7p+;%T*PTs(D1kGr{kA~;RiN>tA%?P)4v
z?~doJtd5Fj#WScOSlnM7ok{@IK{RzpJs)+?3%W^0%?r9nD)WLe$>@1OC*n=^imd*^
zyr4+ZF)!#K>6{l7NJ{g9JV|+8kR$1u7i6P+J)S);$Z**+F9=DB^8yjNY#B>^7FjAW
zTFs<v7san#&}Oz*D6wXn3Z;zJVF|k(e{U+3jR$t^t>^KKAW<_;DAPKYtJBMoe32Qj
z8APSCu&%u(cL<Lky*hWuO47U1^!7BpGEL7<)8`Xk4&&FAzdudyP1C#5w0>=xxiU@9
zPt)hG@-IG{rcb5mqiOoXG`&AfZ%EUvSNiuhHGFz?nm%v^*BBf*sV621Dtksq_d;F2
zoy|e6_JjOkI*9wz^xibRIZba!(`VDZK9Q!6rs*Zk`)Qx<P17en>icwm+Q;*+%+(!q
zo^N%o;yZVex>eCnuj^YpP<b<betSHx^5!O0;=s_q$l$YbmN#S*8;BMBa@{nOva)3d
zV<-DvdCC8ltt8<$LK>xhgI_n*6JHscNnZLu)|<ZWX-nb<v?=XGCAO<emY-|hTeO~w
zOOen!s=AIgmMSUP*eNN#WZr2L-lp7vK_}s)ad@l0ZOCaaU7K^9k^qF-N4#Ap>n%^o
zwwH|9={V_#-BTtdIu6jzRD<Rqc4D=qsuB<>#f54X=3(NAtEzdYKN}~&&Xg~$aoUVR
z>QULwbj-t!7yyz>EaA|youEN`_Rz)=Qbo+E-ud{UV6goiGr@6zc$;(i?Su`)hopvO
z=8P)(xzztGV!Ng8F$P+8I{R*wH*?!%g*+ifmh>DrNaal%=gk~vYVv$Nc9HjdnJT6~
zuE0u<^C@n@&o!=cOyfPXZnK|V+n7H4P<!r0jd#tiO<S`zQ!R9kqHvst(kdOb0%Q??
zcx`4N2=)aCg?P={#^+{Nr(Nbs_H1ABinfxMt!+F%`&C{4x;C>%5bV#(rTD6~jRW_X
z6n<)JwsG7Z2ixn`Ha@+_V*9DJjjekuwKuG7%%8K5{kOG^m2=LJ1F!MxIqwZW_EffU
z{GRi6`!^aab>>mC_b`=OkNm?O)qMPE*N=`;)C0Vb8h5X4+`H#|yXCxw-Rl67jqzR|
z%Y|3HklFaNxmSj||K9ogDEZI%yW3mWHXfRPklnDhG4X)i_SxP)xXt?qfd%ds4~xuT
zynby4Ss>&V;%nD7&OG1}*VV#n-j+`**m(MD_A;Y%u_g633KvhV-T2u9FEf)q=^eU3
z>6(nm$mNb{l$jdD`Dz$nd12#i@k#Z||Cp`XPDlp7ZTztdGhB=>#ThO>;V$}0ah8iu
zxr=fB;zoBd)?eK0F2?wGZgUsC{>dHgVst6aQNb77#VCKV*<JK-QRmUu-BqO&-|sSb
zk$>PaU8VRDmnoM3e;7aRE;>tbk&EBBi;}PJ-alv%#ZuhGlV{zN4&R}3FVct#zJd$g
zMc$9~GIw!6&iC~Sca`-QPd%gRa8U{jiF<-K%mK(<z{)hFPh8Y^ap7cp!$pngpvC#y
zfb}#8{apwBxOn*`&H_XpHePq|Mu)TFqNDA$OB-)nbhx|Ru;^_r9d*cYE`9GIPq_5h
zLr;18<_|aDhWpEzER?SK@Jk)by1!`$_qQjmc1LuYPu~3rGp?~<@m~GV{vdK6T33SO
z4<#b4pz)E#pDS)_^`^0W$@RtOFKc$L@z*8aYm#B(`%7O}eE8z#qm6S8yTlZK(z<SZ
zec5Ys>g~FVH%?mKVd~0n^*yKQ^Nk7RB(rpY|7#&UGDHnQpAVMfJ}^<{2ofF_Y8eXX
zA-*-;$kg;wjU|Iq2WvcdzQ|-jWbsbOozT_kZibP2RmGo&nFXFhrLb+xI(%jE>%;y1
z_rtGr=vZ)spK;$k;-dP0wH`-SXsL_?HSM6*pf;>~DVjQAZOrR^E#^t=Yr$SI%<Opb
z3N*zSI`LJ;FH^LmRkrcdBhM@Tyw#h=&`}Q;w+*A^@YjB=__blA?Q(R|{ry&9M^TOU
zzV&Fk^|Ho)y>-9tXD-tOLC6?!;V`*vi5a*1vzIk_u!$+)`7v@R3N;8ccw_)R3Y5sk
zjc;2$xfYxER5P8d(x5&vlIcfs)z!S3);Q$2+s$r`za95){9bqbLPs=P@5?oQbNuw;
z3&TB~aKib!T-lmAp7x_)4`WLg8deN#y>a=8qxY~waRv>5{%!`-m998E1J~6p7cP_y
zaNzR(_&|C=?uh<dE{e=+8`TpBb{X$s|MlU@9R|;8)jB;t6lbY*VSQw+Ya(-Av*NU}
zz6rjvpKVv!R~vV~{lLbvCmcIv+ee!7AjN7sVJN?4UE@6`u6XtKx9_{u(M|+0%YF#s
zUbPg)e;=+d6ybf6mS#7OJiMdvy0^zu9&2HK=dEpe`={!^e&uqm`Cry-zHZJ&Sgc1W
zz>y|3CSB8$Jx~rTGu7Dynx<tDk5e(Nvk!D{QCXIaCTRsT$W78kyMi*ZL6s>P=kO&l
zDOmd(jMw};n~H1`pZ{~@@4I?;wXR0jj%*EICrUg%0nZmCkw5>J#%tcO|JbLW%T}|o
zh2s2MRF7TKxa=L%BzZsgj`Qj&k&|ZAg;jO#m6<9u8p~!W=hX4knPfE$)27O<8MQVm
zC`i+`YVfKnSQw0ZShqwo(CA!6J<J-$l4Ul;pT43gud`Sj@h7gxupC`rJsJ(`sw*0s
zPaa=cLnWrOj4tD=Z2bD<s6PB&X81k5mQkaANt=AnAdJmAZe|2dRx?}=D`VpusWyka
z!onP|GwC_W06i5<7%gln9a@)%pzMeE>Wi8C@uX^9<@|_Xobe<-A{&n#j6ZX6+I(EW
zRctlLo0_+{WRUCIE~zl>EY+&B#<O0WOP`}HjoWqS{#JLoMLkQ^MHz`6(G{^HsA>Bf
z*KU79=A&LI_jFeD24-aAs8hy;o1V)yhED0PKk!@@CM)&HsN?rNmrZ*ocXhnE?UFZI
zkH!O34`p#Q$O1zy?U;j6j74~8x#Hny7m-72A7t{4643XlImGrsYV+4act&00{v1d6
zeNDorI~&^Cq&qjYUGich9-JIv2RBX}tcDw&&NeO@obtvmKRw({UfI-kNs-nF#<2z!
zWgO@&p#R3xp8gq&3~E1?(daknw8gq^ghRU@`uKC%RP%O-eYn*j8-K4Y->Vg_XPyJO
z{ZUqpfYOY}saQ4ff7A0bhNdk1-E+-ZZFSFg&C{5N-<THs#sI$uSZ_-K_&Vqecpcez
zc<As~H>a+fr=k*h0Q>;@95Ot#dx7>(8Kvp$6UIPL<G53&AOF~Jt#7Y6ivI(JY&?;P
zk#$%(j>fRjngmby$;DfTfdG=u-P#1JgUMf8P_{93HGXyKF7++LtsLuHxpb>k=3e9~
z(~7Yi<67w@dILrgiWEQ5Y9$mYUe#(PjCnalBvr7elFlIr&2w7DC-;X3!gz$@Ij4;-
z-}JW(0F2EU@%?|xG_E_Xul{7fN~ius#i+ROz%@6<L1iy><_rjt<ozW;2NSVztx1za
z+pPXs6KyUQXWLJkeQ^_LYuhEgezNWIv9^4T3A8+&K@J~s)6id>w}wYvCY*27{y24I
zHR6SSyn;}e>Z+2bhqr7jS5FyVax7m@c{~}MJ%={VI&ItzfU(Bx1Q=JUX}WN=ao`B3
z=Klk5jBYU$45%8k3bYzmt=Qe!ruVE^+<hM;gh1)kPoc7B<2x%SHuhb4^pOv?ksAR2
zZrdf3x@}Sw+L%(O04t_6w>78cdx0>w@yN>K95XrKJ(DNBJTqy0;62mBb&&Y=@7Z<I
zCz_1`ANp~1+og&;`JR))Pm>;b#s|Y2NxyT(l=#-Co4nV?+<R$XyWNP@SDdTyf}!U8
zKiKzmL1XXtzS%ysrm^n5Q@ieNlPjOQxbfBZ&K?s1F@$qvtk4&EEKY4?S1qysc}3&M
zRa3iey`t#~urasJT{X~kX-k&cc+C}!O{->2V5uLN_v)vDcaXX!`u6)8FRnVpe&sKX
z!S@|e#X*;e?P*e4n2-fnMo`&Xg)684B)yGC-uL<tX4TmH{WB-vYuv8RPG4uCapwD%
z_Mzld<<xPW6cUt0I9|NI@#FV@d<@f9?qA8QJWhtF7=N1y{gE@L%o*_{OrH#w?HIyO
zzWS>V?Qy!efL?m+%v}y89WIj7OCzeu>!r=-A8<PU@ptoHtwV1PzfsV0ag>8UurgGg
zpZ~zbP}f^Nu)n(=`@!k%`oIr9VQy_q{m|p~8*3W*v;IZNThIDZW0$k5O`9Pno1x&A
zaxuNe1f>qtbV5UpX{<PVe*Q{gnE2ax``K?WX356R)!(#TvaK)^oC*AqM>hWA-1Cfi
z!^V@(e|?6a&%4(w%FFY(qMT_Qv35*j^4eO5yG9V%#${_KG~T|pM!AdD9?b9k?ziV+
z<zIjCA^d*);@>qJZCw80_n8wK9hc1LL1Udqukuhi+DoQ#LSxY-Z&2w=?&o*#BY(?3
zjX!IWV&pEpFzmbX1#}`bbX(~~;myRERdM%<n6VeHm@N>@yW))S>K8JN+pd_Y%b#6w
z{Aj#Gtyf$?8TXHFyhD$_*l=(gb>(Yy^^PltGIwQ6uJNNQ_pMu$a7@Ob*t{1z9U1bs
zQ0oOD4qq%TI&en(=tr_L;G<wkEyGHc8i~l*#kloisoloCr1bCMiV<%dhQ3aG-x+ac
zWm`36YUi~8zhynYw9J}0)!29|YZLBfxT1>wOvf0I>zKu-8$T`gEVa=wI_xCU$FqZb
zm>|k6sj=*3CDFA0l~Knc$uzkZ(>K)*39<AQwH>ZFw7X8wWyl=z*Uqy#0vb004S^wr
z1~sg{z&D!RIW+WAvr4+<!7}{n5+1tF*p+d;SsgKu7ATnb0^FQC?aujT`|dpO;hlGf
zR{RUDwPwlY&>eJO1yvSg!j0X@uk!iJv(}!SuWx+u6IYp|V4EGaA|Um4K{j6fO=emz
z1_$c$zAPtTG3<+E$wtL}Eenq^NrvRszsN{k7%VhV;lik*KoBvUYPs?J`tc!FSEKK`
z4|e_#gRlS9p>viruD|XuyXg~+t=C;)H+-UT(rrsNe*05bh2gdMJKyo?TE=BQ{2w1Q
zwHsc{IA2oHN@cs*Utu8y%M@o3-}GW;<G{^-4wo)9&{SWg15g@iM$9~KFxciOY;zQp
z&?q2kjl%j-*mM+;ZCtQnq3_!p8@1bF`nU0<+h7xylp8~zot%961?JJkpWWRQ8h3p5
zkS->MCb%pp2H5D>ST)7QjEzg=K@3FH?)K`9OTq{Ko@v~_adNng^!FS47L&T!Hnh79
zK3eU7c=dwZ;V>d(gJf=ziI=S$8es~~FBcR}^Mq4BZq7YlV)#)W8fqMV`!1o{KK=Ib
zb%2fC1_mpK2+PGA@1|zDBFLZ^$+&FcH;mVK{IW{o@k<FohBgJ6&_gCnA=8O_^OdUE
z>mR8HbvYA1;O3XDyryyb9plGlbZb+3>p*$e?laYV<GMRu-OVJAQ9vDpACqtWjtB@B
zKX-)s;~}iut2g#HR)21GxbAsa<maZGwE2b1Ab~uesurMkS?mmFP*J~ym`7aT>f!nI
zEE|jfJe)ediH>;4$AbI@Q+EA(3FuAZ)pt$`)%u(6obVFRf0?TP4?!M(!z)2PndN5a
z%VQA!h_H+`BM;v+&CSeJoAy=Doedy6K&yt*IAS+lL?K9|C6J_ShS06V#Q%=m8dV|A
z`;~k3%AGnmKu2-^fhtG7(q|k2f-Lw2S4`AS@UpJJI#FZSH(t50CV|AvsJ%z-!n{m1
z<~#H~J$*3!DDIAH-kp}-ou<2EOZG!iF*)uQGo=x|=`Fq9`-zp?=0a^;{-%?9y{B{J
zgN?;E7fr8sT#tOx7&!K9v!rq3v8(u<^p;62&*VXGd9(e<BaQWMxoXGnEq&|E$ya1-
zhDdI^!2gRZsIb^u{4MRTW*Z;-{Gxv5uEd?^&0&+Pxw+do{R{ntZ#pjAS!hiA!mh7W
zxSkf?@sxIG$iRrAmGR@jkc$eKumr*W${eG^yBX8!S@ux$0U84~vP82dm^i4zjx-5h
z!hjS}D+Yu>5d#`go$r>S33l+}cARU(iv;b0cT-weXW>mGmT~mr+CV|mb`eiwrJEY-
zzc^ujHAE+uB-ueb%?`pS)xm-v@An<-Rd?f8UtIpCrBRkBWEN|i_{_THhDD0hRUsB*
zBW`upaBre(Y&YkSy6K#w{B}(=lDj6q8g7(>K=KREQ3R9ztG^BnYnVmslunNQQvboj
zeXV8|`qxzhJ{)Qc-iT82k5x2%L`90Ia{no~QtP!%F44H|OUG3aPmU3Hi4kYML}UzH
z)3aWAuGejA)b4&~`RZ+i>2J$Kqxy-m+?d=Q8naj9V_$xN-%~f=X_hype&sZNulUL=
zw*d6yUmIWh%070@e{KBRS0<Q=hesu(WVINTb_?fJCqyOegJ>)kR=#q0W6yggn8P<N
zyXRkw-S*9m*WdfF;qt7nm&{DHzx6r4(&D`6fAya8E`qi@;V#kWg~4lAD!Qg}MC0~v
zOr4}cTec0qu%_*0y7cF7Oqy^+REkOicAbgJL;I3w{ZFrLes1IJ`>qeoksH7NtuGii
zhz);jT=DH0jOy-he}VgFe&-?X0|&JB*FSJan%&s*y<IZq=*AvD`djbO0wHt+_n}XS
zvqI(QjjwsIs)03*f9OcN^_z{24{dOjum4-)lr2@e;ZKcAw*1-|S?_<i=8UY5KYWP0
z{^i31?z-oZ-<qQuFFdjrs~mHF{BH8s{rFJx+Ks>d@g4<Nu>XmvuHeEaPQB9}X+B`P
z9%PZSt8xsBS4`}4?!5T5?A1ypz0T~HN1KS(eKVIF`#Q7N#?L%)jXC10NQ|+SH_~rY
zd1K{G?4vO()1j>fOR=#C1&{|E!^A~5Si%()+91KeR8*jVMIHAcqZkcrBf09AllylP
zIHB^52Yy*g<J4;b!3#%Z7C7#ss<87~L9H&zgQzJVezJow5mn~n{*RS@$rT;NzHl9M
zJwws<JE<6qi=jw;#D9reF)~`=+Agfcb@K9G9ocj9eXd3r&SJc)H(<3M_Vhs}T+fQu
z++V+D2ahlMb^7?*zZt)S$A9_FOf!kMWf@i8Dy>S<Ss2M$V04uGa3g+dEe7bfo{|Au
z`Q2Q8m;CNPe%HF+Z@S-(-|Nnj-^cuZ`1iN&pruwnFW-8Ac}wHFTPHRP!SENCGj1@?
zZ%uo<@DF>x^l{_)t$iCm@rPd1p&nygRNmV7;vXlCC>W|93eMix_v{!Cm^pu%=oWpq
zJ)CW>onD<a#WW@%Bqm|q7L;hvdSFoX+uv6I7)6Av!++%r@|Ap*zX@^_h$L2~kKG10
z<!^oj@rTG&;0p!tRBd=7yPMU9KrZVyH81Rf`1~ynhp^=M5|^#w67m`C%YcPbiKHEg
zlNtDQSgoqq31a;P+*Z7aCd*&TEh|=vO(_k)p5cY1*1iIPmJUdM7NUSjf(xk<PN10H
zaJHgFwdFC({9Bkf8Vena-1zC9yA$QA)LbouOfq_su3BkLyOxEzLzF#Qa?8r7eG@S8
zG-v#McbAZBMfx}^-IY$u>ZZc6+KT#;M11RJ*)0xdhS&jT;_Oh>&;za9VFj-~_k372
z`5I2Jpe7&G%6RoT=brz5_WLPewXo!h6E0lG-V%2pK$5OeTL%wWcaE|{C5JG#2My|{
zYIzt6iZI3!7^)SVr@*c7i6uCFc+(>(eC{G6Q#RgAMxcvA?dU1Q!NMn5gru5^nGiql
zNNz@~HOG`Te*c@>evu={DE=WdBeILPq#0hR3?_#zG>b#%4ByZ$$*l{`9=f>m@r7)M
zH8wf_V6*qKHpYUvKg?KAd_jYcfOGql#Cp)xUAUYc?trf(;UaV9bYEjN0AerMVB~6b
zadpY37Ma~0C*4_PzglG0?>=0aW6-K_#P*H03U52)6)ODmA!cs4`kGv_=b>gfkps!<
zL(OZ#A6}hHzH+E}oo<X<Y+gHQhhYPld{8=3mB~em&9soP%H-C?=8%v@nq-^q5Ll^d
z;^g=xX0+;BwdCdNA_CLDu<KI)!u+K#{{o?!$<0eq+8!nI-KFMj;U#4DJj}em_X)o=
zVW4;^sVqZYl}o;Km>Cz|@KiQ==rHrnkO0nP;WD#ZNCancx-x`tCjYt&mkc4C$=%CL
zEuThFB=1^kCePR*7@YhUOJNc_BE^w5I5n9(+kD{82WFb1OylUcz5dR<mz(d}WZAXm
zFU}Ns;J#e4^yB73omXG(Nc?#MMKX8J`K0-o8F=oJOk7p4=zxA^R^Ey3k2jlqq@Str
zzkVbWPprH%+3z|tV=Pa13k%f_G!L019c*Mqv?TAp&P*KTG^jLg#fh7B$@e~Pe(QQb
zxKMJ>C(LqlLeld|)7R?Njn|nID{|1L@k9}UJB6h44Q8czcT#_YIfUfvZ!q)kOpZ0L
zF?RE#cRutMGhph!%-HbkPO<$50zwX_22!^p15*U9??ipi#vNL#`9>gT3EnK`W?|vB
zVBy@zE}VPb!nsHFlR5CbvufeO!iQ>^h4%%ompZ=ieJ;6?R|<o;9v6le)_CDUa;yIy
zp0{w|!t<3)E=|mVb;$#9J$yi!8{_+e%DWWxe4HG91GcY9j3dUh*qt2wc>B@%;aVgG
zG*uFU1C<0sqZ7sRZbX4DC)UbwVHMHl<+yJZk>=&Nva0H$U<d%84Bm+&pG4ACpBL;x
zN+9_}lH9zYpM-5w<4A}jA5B6Wc{d4aj_Ah4kq3$@my3)zh*k4~2`*P5H{Rv?$n}xK
zbxm%p%jxMDm(x>rc}eqJHLo6wa#=m@aXCHKMtaDDoWkil=)3~mmDAHsaz*#F=yH16
z;c|M4SVMK!y9j1-dYW}PJr&J&x~I5I$<5Sb<Fa}zG_(HeG#+da$K6GSn;w;_kWBcL
zxiGx<XW8WXPnnG&i+sr&uQ#{4Oz8%*(q&fPVE(gyPsNU^hp9b|W|A4I72`6ZH#XI7
z{(4}mY%Ck9j#e^Q?X{2|_j1BtQF5jfn^n~gG+OtMk+UL#09si?X+Inh-XYJkr7&<r
zj26&?3B)e5QvtP}9d!gybw@Nc$k<E|GR3UucSfvAb)wis1a}rlC@AoxWt=^^h>#H6
zv+{8E7|^Ilj`sGQx4a_`mcpnAKOwhFf|))JIX`5nP8>uiW~*>jjb~N-cPS(**q5hK
z5X&QJI#}yqbDv^#@^L+mqT<OzXT<gQK+(lps^b?1)d~Fd1D1R=!C9JHsU$cr>W{`R
zl)BP=-udU(#xE>i7>&Pxv}cV^vlrG~=EkVBLPNwE7ej8qt)G=WKc?|5%e8)9mHM#v
zqzTZk4jjX%0!ZQ^c~gtAUF9la4iXc5D%COn==>SV6@-C!FYE(>l?@iEqa3lRK`5l(
zY`ho-ZmqMw))kc_5p@dh+L(T}jHndP*q6b-eB0Bp;LJm+qC|BT_}5-%S3eCh!`t2(
zSMO&#ii+{Dz$0A@H`&+kHnPyuQ4VKR+QGl}O3VGVN;HaUhu<324<At}o^|j<7sF3W
z{qS=e8-@{eM)fiM(b&PLYcL}G13^$8j7AMcCAQ3XXDPgDQ5oQN(y#X6mIkSm0Y|0&
znr3+uNL_5NX-))QVpRT3inVnDB$S=6sl;&;ChDLy#HhO^k&4-?#RdU!v8OuP0lY+h
zLt^SkN*j(crAvxVMeBM|T^p)0ak`@(uik<;7_*y%%nvOmFep{U{L{O`{iic-20>oh
zMcUb+$Ro&xy7fRCu$cqufoqd(RgOq0MDK=TEt~mC=9+*h03}T}aNB~BCa&waD5TyT
z38V@mS*kHm8*Qbv(GHU@%8HZF>zA*R3Y+zb)$p3%3)`hix?-*bT=qj~D0wx+#wNGE
zA}mLv!C0%CeyB1p-2#f(O9mWdJq{R?rj%oac{nEZLk+MQ@u}fTur5jfL95@bim@{&
z;^s(US=}K`@1v;8FVz}CXHW{Ts1}vs$-`X`Rd`BJ(=j~S!xEIJafYE9Bs)@yq<-OM
z_=fl#_6)U%0P0a;vFlH>gf}$Q26z+s@Va^j_uP)~1PJTMQ3$5_fC@*n-NH0)I$nj{
zr#)dbY1BB~Vq;s{QT2;*t}d7~6JiG~dZ6gV6wk#tT!nfe>Vw8aHnk4T8LCwg3g)9+
z<vo53LPPQJYLE9TxdL_fgcnt)!#$0puSk*<;xbfM($s9q#lt-T(Rt>XW46OH0O`i6
z3qu5(cwd85?9rrXv6zaz9CA?oPo*A5Gz_C=SnO%xNMf((OKvCjiu5NPe@o)gs3b0+
z6&Db7A)GMhG@~3t5sC65BXDTTc;Q@!Vr*1Q8H*#z5#)=K=;Bg&n{Kxnb>i4J<!GOZ
z9lv1NMH^Ud9I&J79ZjVI1yNc;s#J^yI->xfL4`cETJI%8U&kmJtd4aPDikfi4LIUO
zx`j62Gx=cXrt)5=jMOserh5aoQ$757f<~cM0KAEEgUgu;E(V?fIeXtXiFXa>Ms-|7
zQmEGZlvb+amGmK7aScR3E;B2bitOR$0792!PIaQ5&1HV@OwL!50}x(3TTtCa=yD1Q
zJ#is~*=U#jtQc9DX*4f5fE<t_H=i6n`?(|&_p|jmr2YG0j)>m$d@4CC`-o)1ezuQf
z{C;jhx^F)#3Ll3Nf}x8>>%fusLq`h;mf`^L%0QG6)*+%%DI{B34MZSqt_EKdK~(Be
zYp_Q^h1YCKsb<q1m2RnyL#yfIZ@e%d$Y!IycJ*d_G;UbE87K8-+y%99Qg2+E_18B>
z-7CNeD<ndqR2y0@EJuuFqk2y1xON=}&D^7lDFSfmfnZz^ZiFd^jXsZ!$YW!wupvx=
z24QNF#}v2`rdUrCrn>ZOL3OgjR6!#~os8=(bWQf?LR6&a!X=)ftL)J=X+JA$fmdP6
zV^i1yo5B{@6t+O7!Uw>e#s|^@SPY?RaMW=O1q2NO{fgJ!LQWJI((-jl${P#Ta^m1v
zI#oHhHSrAP2m*i@OJ03*h-1J)qd1A6<*-9OUs*-3*&i%zqjkR+b@=;T=sqf??a!FA
z6sb4g<-RZDf*PC~tn76VWL{fcP`NMH(GNQrZllbqfor?FA8b%6q5x28E5dDGq=$t*
z4~R}SmHKgD0=4>!zuy-uN@E<p-x-zt{Z46(ZdITkShg48wl9+J$1f-~uh0+I@9K|;
zM(Y@ix(6fT!Ha`YC;SYpxGo_x+yZ<)eI2&k)*m;!(NO)vj=^d%Rr1;kvFExUQ%3SS
z-(Tx-Wtm+?ujxtA>#252nz%b&(PL!*_X(KnmejH$Oa9O;(AYYnZduh%P}7e18neYA
zP>Grb!W|<S+79`dV^&i=vl_|I>T~`4n6LSvX;Sgi#51&lrbugsqztXnnjwC!h@o}1
z7+M=Y^PEpJgy@-_@Uwc#&^p`{k-6eW@6<j-w?LEgg2p)H4OIy*9~F&GHQSzOY&GWu
znvHVIDbJ|V`GBvJ_Z=PpJ_X#|bArk#e@v*lG*+HSvvn|bgvowC&z>B2a)2)IHpr>T
z2=(%Vq`-tGk@z5y_+YJ5Oo=E?F(qya+$0hoJevy+cqXPq0#mB%q2vebpDFFQl3?Iu
zNWsex$TtOfLF;smDPb!K<OOk^IV4VmNY(Hn1X2{p3tog2ya*|X8_6h>2thVMTSN8O
z>FgP=1-l`742%F|#&a7#eWlf<<d|JfFtHdGJgq}{fhvM(V6`m~`?3^S_l$d_h;<x$
zM-(Xl;s0vFrzK<m=OkI*xr}vA0#rs152?efQaI}bdP%JlM^PxF=!yR{z#Q=E4q}pY
zG=o%3;U?EkD*9p~<&{N4i3!bD7D=c;Az&?b&RJ=SJ(UcUcT@!cCu@N&i`IfW(3M3V
z5;Nz@D#qjjW$S?^eoUyh-rEJ@P)8i~Wjys|TGWRbl2TvBQ(wkYU&d1(8f8j-h!#;_
z##3L$Q(wkYU&bpiO_9i^c4!9(dP9vZ!h^M*VMEQ$%xno_HJ(BpxI}%?n5f&&>~!L0
zqVDC`a8Bd%!bI|v!64^%PLB0d<3k_PltrGtRO55n;CyL=nzBHASmW#V^}m!NWjuMU
z&uevJl4y0Q);G)~o&7;caY+`gcETl7CTUO(Y}FZ*Y8T-kCApfFEQ0(pHODoXk1_={
zm!(4tLk!S3h%JJQd6OFA`|8LVRoGstInAvrBs;=QaVDNuTAV$om443#&<~_)BlM0S
zQAMaFY)i<AqQ>DtcWjbGY?4H5QvP-TnwwPz=pDK%K1m`z$-}u&b548`c`l%L>Y3Q2
zgnkKIo8CJj&3hu{@Q@VX92}AoDegxBJnxA#?}^l#wSqTF5by^6o=WqcO7osd(bc55
zW!cZ}%y3a0R0@SDsE~cNUL|T$SgrhWH1={NR!^-8M_ltoTpBJ@`5&M$Kiy<mcxn@k
zF{YQ$m`vQAkyu^2YP)42Wd!Z4*J&OZujPog{50JOWoZds%AW{pScj2=VVJG}oG+sT
zTb#KjvXcJWq^lIj##56cDo0JygI{49ryzz3|3SMA2IwG+{DG!GpQekWsGOrHjMULQ
zXi^ncdrDO~Z@lF^RpmTY<yy8I^r=~#^F)>NM3wUp&N-seI=LGu=E3rET@I$g5il+{
zRHno~FmaeLUccDEykVwj-gNnS!?`HK^9H&6l6g~)nz9p@ZfoK=b#D8K)8y_<Ar0~6
z=8dQ&Rm+?agFfZmLmH$TJrHu_P)CmwuX09F#_<=JJvccWb=aZZ(TYw58Gg4#Zd&*f
zDZx8Mp)}(;l!Gq>CnXLdJA%Z4SEU>!p>&BiWp}IZOoxN3c~aVe4(Iecxd5CFhbre`
ztX{m7lDPRYR8)8R+y8)!un1X^;mBQ_#csIJz9tR?*kZ$}&I;Q7a7m=Gl86<P^i`36
z1R+ReCCWf5D|f|;NyLhICIf+IA}JCX2s{%jmR<P2XCOdP^^`HCHuTQ5F_8#7Nh5X~
znUf_}aSf8eIvRXd9&l(TfIny1E_a60N~<tyXsJ5NyZoeV$ce>M;Iynd3jZ(SEz1gO
zCUy1!&ZfUg&OdxkqD@@D&H*jzsdhPgg9QZL>Vo(>y^E?v+o`(jEzvf08Eb+^DYYx_
z?Qb0wOT{fT5i;&|H#Fy$*Zz>qP3=#L+skTy(iBtePnx3B{(@><N?}X;gNEqHNbRrb
zziO&?^BDoynoHtnx263x-B<W{#2;Qx`)keGxbD#B{r)f@sVrTZFAn5~3IRlP5xw%X
z<p8R@^C$`<XJ7>2?`&z_Vgxu@v&%9t^ehC>?iRrdESHNY$Vs675;#k_NgYiRAE#7M
z_5u*PlWIuDPb#?7a{Qy<><E&PJOlxvwQQ1tx2!8tr8TL#y%%w$G;)UZ9L`W1;YFmo
znp7ZClWLS&YAUVLT^%Y+G)lfHe4UO#A3&}tjaWMpD)21G3^Y+izA3l7;^q~xLqY|X
zvwTw~>XL8DL}i(Q&@U<u_9x*=ZSZuqwukxGjLGYO5lrXhGLOAzCkAl9&IJCbN3mkI
z;jK|fUv-oSd+T8(K|E9LF3Jty3@6shsi!t7$Oi(dIAWbjLqYcKE(D6Ib#^Mzduqi)
zoD<>IBD3B`9hzD!Vv2wJI45bDxImT2cGr8k#k}sSrDx(?0XIZDA5MxN;b8vvC;#yg
zb2Q0|A2FAA;G>*)L2cr~Y;w(|=B^26iX?a&RcQ#$CKVS&vU9L<X0qZk(>LZ!t+1+q
zJX^4N_vp^`mzh%5yf3-sN;BEK@6PXBX->EGr@HJIj)L$?xn1DcNo)vZ66bL&3YWW=
zXL6`=a}Y0g4dx)-5@F?B5aLsg-o!6D<*O77_(7hrgA+nAJGfo>AV&o*_B+Nx`pJ&5
zu<1PkmMo4OF190{q}Sb^Feg1kbxb-$h~@*-o=za91kI<c3H6;QFF{>#H39^EQqJi)
zBy7E|)dhKof~SOv)X+u(MJu2psU(e6<a{344kGlQZf9rB)LlDl64Vz3GEM+=h>^%%
zVb92rM+J1)L`7tW!2m-M8UzErnlOwN@eYp;$lAeOA%vRBFm$0qqZO7i&ZFA84?aML
z+gT`CMJC%qM++0GP}-6ja1`M*89|7-(!vCaA%jB7iR~c0rFH1b3RKGift<|J?*=Ru
zy}F|~of?$lfbZ;r6!`RFWYuVl|6tWSubIIUg8;a(s1Ugtqu?#hDkyeGZZ$T<^Us*N
zm)3G}>~c3ElT8s}nh=m@nspNof1)fHmU_%YP=ZC+LWb50J=BMhQ3o4Re73*OuIDB)
z<U4LhMhC&`)zNOMmQf(-)@Vd~tW24etD$OzXQQDVJl-W8YUeQ4OMiP&pF2;jjgh!2
zs!2S`uxao)mX|Ao)o~Q!B@Gcys5L+)pBB=1)&pzIVQHnxtqe>6;+96_Rm<V2Zu6>1
zONeMF#lQCA)jBoR6o(;MloCOmBA^{vf<~_?*Qql&p;b>NZUSO*c+XwaY3C;3OR6uZ
zdWAW(RiD<5PAJiXvrhq5t=gf`y5=3$yVwcaKak)65}&sRq=3Pm5D^FWQ+OyI7~_cd
zN(v<M^8h}FpT5@RJ>Hl~smB{r9~J~Kn)85oG%g+akD|kMiCF2V4j>Lp%uu(A6!oab
zqoO|b*ctrkoWRF5vYAd?7&~vKOK_2_erYQ`if9_8X1a7%X{#A&o{Uetl%dMCSo49r
zg=nn2{QxK`L0=AFz@}Q%GJy+CaNJsCCXuS7omFT?NQP7#*)%muO=zt~rZ956Kr&S7
zN{ep{g9f!l9(+PKblhr-qc~Eba^D6N<79$o7u(mKk_xrgUjlhG+D<De!%Ag)3X-Bg
zQWUvZX&hR4XR3EAk=P|$`G7)Nn3-YJT{Y2Yb{`|#T%dp!oh9i@o66zzTs{1d)k#bn
zs4@LUhz@!{EpdmOM4|Q^B~x!UCmrDGW-lEa%5SrqUaK5k9z{Eqe<22Kw3qp|GObl$
zTCMWBa*qnUKDqB^qZ7fBU2ZY^*=H_GUVn?3Rqu@1dzIFvC6~^q^8^l-AhhWOR2)`w
zIysV&m8=uFN%D4XRN$1m+sqf4%A~;;<svXM!h){Zxml9?E5?bdS}VKy8qtwyCO0Eo
zZD6J46NsmCmCm3&YUPp$trN<;IU`(SU{Ca-?7Bu&k{**JZ~Kf{+jf9k@`uluSG`#q
zh0O{$l?&G75WwN_Oki2DuxO=!ET<Dwy8{kQZit08hJwKqh{;#_YiNa{HgbG}hNXch
zJS?f-YCd2-nEdTlGtmXba!^4sX@hwm_mU0f*j}M2AA2;RTr2=nA503jnT2E95y+FM
z=COF(ZRW@&Pd}cG$4D7TkAZzBUJszx?ZS3*Qho#N2w`cEbHMzt1mRZy0_|F-+e?za
z-e#tB4M!sL`I5_$8J{&@&b-TH>&YKJYle~&Hkvi{Z+03Nj?2lAol^t5!2c6(hg@d`
zS@C&A!@}k|p*v2<G4Z_uj6h;5%OW^8hwv$41U+0KviY<Mv2@986VDjx3Ih|+Q}8ha
zwPV-=PcahBZtekZo@Qg6s;_B7%N^>0MZruiy&av@B%it6?4r*W#3%wq%IN)C2t$m&
z!%3;Gw=g2TnkNb2QEjaWncS$<N%5~>QxxIc>Zx8RsI4&md4K}W3E^S<D;8&RanEuh
zk<lT~h|gJFT+vSiLUPg_rjG+Eb41>0_eYLR8^z?3JIpLoNG|`r=}o?Khslxu(H&-4
zaTK*PP8eD;<8$Wl9_-4hPX3DWhcWT+eI*xv&eZC7xPWq(M2)N@A_&DZanubWll<0E
zsUsm<qKREng>GLSHFYmy&(42qt7eErRW0Ki@J;Z*#9!k944C1}IW(%QtjRxy4_uIT
zU0^YtR%~*~=S=iZbV8=O6m0ZPm|Rq*DLEc=hFHuoY(U*Q&4Ms69`HycFy|0j7G`Cb
z^R`v^re0zrw~3>OO%>fQn!e;0cbeXVQ+di0f(VeJNDEoXyv2v3TycAHEl=DkLWu}Y
zx35No%0?Z3A{9&F$^M(nq`h*ALT~}T&;uQG2+1#}tgh3xGbh)wt}<+leDdK<X2M}9
zDjcXFeO^n+Dx)AHDWmZW(VTPDIeJ!Pw)!X<Yon~<qU425roZlPa!eMJgy|Hpe~7nL
zPZeZHo^{X$nT!I3AQ<HfwW4~;App&u7EZ2(uBRa(3k(~>$Wg8k=}Ct>gNhfI#^(-v
zz*c3~0jJ(;LpHNR&11k1RaT?jYBsvnj?_YPy>h)^cBh7Kp-NrqVU8Z^oUe$}3IrH8
ze+%3M3&N(q?a-4yxfZy71~5<hnLR?mSDJx2e?+GYn5@X#ol+)xbo;D;q_#)^VfqS9
zH>IIs!tteOTU_b6EVg`d-92VpUDKBKE!st90bLTQh-Tb@%WiHnY8m{}-e(2@&Z*#V
z@aN7<2hi(QyR&Y%{fv<%AL?cKT*y)=zoOPLxVWsHS`k{Cs>y225uTO7XBXEe5eyWs
zJJ(er_Lqq-_ZLxCm+*BIy7;SRD4xVlY<7;xv%~QC{2Fy-)TQ{#buDp)aj2qOkwcHs
z6<5}|a#S|PH_~3dpV0_7b@T++XJJEqFX_BfZ<S$BDDn}i6>o7Q2L>3INQ_`t%?oX0
zW4I)kLxQ7_TY$?LKToovK7Z}7+CERRU=@$QW6~JJQHLi#?&#D9$Fv-d-R?Pm#1W+F
zDKHQ1Isb?<t-b+-)MympxxTqBdct#k%T<GB-$Zdl+_)P}lFK-f!!l)`7et#C#mQWE
zhtxR%Frsg6D><isxqW`_Q-A7|Ca0s-SMJS8BfIl|zBeNOCz21|Wu};1^2xi*(K9uJ
z9BDZUi|53VP+U~RI(!ZX6H|aVNXQ_{C%b>iEHw8dr+vv>XI3ZOcboCa9(S7~^V(do
z=C|29FTC4K3?nBJnKlxMc$t`K(m%fznw)m&%o$3)@f9<(Z-9!~t?mFwW?-;#iq7Ba
zOG;lg{bpja>sQUdcswf1Xmmh_xZWCFbre@g-uYGYmT=u~v&nswbD2MW)yy{aWXe5e
z*ZuYeO`<|a0dPu3&f1*gH4U6|oVMkj!r^stKe0{-wdAv3<HM7y?|jGC%`!{6@ji1;
zXfC|-efOIlV=hY8e%l;6ifvp2{y1?t+~S+q)%Ejl^LfkblGWcahgEnSXK7Mv4|vlr
zNFM!;InkVwEcmY3o9?~$yXLgg1#X4d=*xV`@4joM)gSv!mc4{^ZMF#FC%8}z#3;HN
z(!%M7iQt{+z42x}x+Hy+eie;JH#4=v%17LNdkf~2iPKM{LAPIRd&pKx|D`lu+O1B7
z!|$>4(0>z*S7J5et21%>y)AApe9@dY;!*l7tL@+5J5h4(sSTQFuPgoRl7Hc~!)-uH
z=^H|yBnKV1G#%#?{)1oce)>>S4b=Vpw^>xDi<{-xV7K9W=AeBp!*jQy>;MVJg^z?_
z{vuaOo$-&|DM3;){L^ID@0-2$yYIKz$~o{7?un2Gq@(D7`qBgY*^)oab~8?oj$sW~
z;vsCTh-V~U{=WHL-q$@Y+4uu<y6H)3KQzZrJO8QX>4#Py;B2&AvbFdUf0@kwrRg(c
zlCS*GyrqrUY?IjL{K!n~9V6PvR3IciLI-<fFty~kADQuN8qk;lx{aGuMPb{bD$1vC
zHZ3^boeugl!ZU~GOOmL*Y2eG<!zOFqn;J*lgY1}+!}m6;AUEN59sh#wMHOI+VgF#L
z>8B!c%~U>YbcQqAzebekQ;7&0&X+(5ZO3m$$nQ*!c+gDV^Q^RI6Z`;!_>*p~ou$KX
zgZOVj<wG2`LyklDnN4SPb|lw7XsYI{<lRr0qwgI55MQC4?mEC?5LM+Wqvbt6qgE1M
zC--hlQnBl5CHe6dGu~8^KW#Bnx(NgDvPe#ssGRKju=!p6BEK@L872W<;Nb0eg1qhi
z1n=~eIrtrB5QcVy43Kc_R0G;8;o1o-%r&!sUw!$dsl;+v3Jj~Mm3BHA#J(a<@<znw
z)mOJSAn!ZHt-<&}>1UxF71CJQ4$7=?dzhKQ!UreGI_U#T*MTF_XmmsUAqlh!0hbri
zI0>Xu2y$-X>XFR$x0_;-E^%_3_ByFgbjQm@)F9s_?hI<S`Kwm9+T`N!h%-|30?t_-
zR-H$Tm}LjmZX$F-Umte{<GM!dMYljF2jKsxB79@R{9OCa#m_;gtj1x0BG?5`9Ss3M
zr8G`<+kZ6W(F%k?{t>TARwu4kZL-IsX8z%Lae;1Gz9}icaCHCF(F_z*sxng|ZAhgA
zL5nhVhL6K%63HgF;L73_>`XrYsQHb_CO7=V%s0j4@t>G6Xe1mNcIRJzV*YGKeeJi+
zqgJIB#@|3V+Q-cNtYc-#L64c)9Zlg>Og21bri^MaIk60w95Y7uXT0P-hmJAwTbdjJ
zqfzr2?vqRY{+Ky7mqov`3zB0WHwR&Nt$!T({V$8{=+UiD0TdKvSHrf*B|m@M%$Yw$
z^KG5=>sOa(h+MDXFapH@3n*cw58QCh0X|j$iuNh;%vU*nDmnb;W{+{x<_C}j=wRA7
zU#fd(lPiC24mIWE(VqjPax(rGW`0kTO=uL3O(gI9g*gCu-v8fbTJo)5m<z}s^#p3i
zhmzBuFgN=rH~E|6k{|!KIjzt<mp^&kFU_=!1Wj_*FU>Lav#7FJKV1(*PDt;wB>%-3
z#23cPuxk#g9RKJ)e)J#2ONLr0JGCZ*AKRSYPKe2u;)_$2(?E%aT(0Uw>ln*h*$}fH
zyU8s*&I$%H$u~MezP{w`DR$Y&WR^Cz?s9*AO^42p!&$}BCO#MSsIM|nu%7QhJ{QP#
z%nBCZRK;)SfZ5eFiMvj&S;u@Vq1$v-bnP4q1iv+nE<)}~(Xvo+XR-@HiH+HI;#O9y
z+jy-{r&uu|ov=a<){s{@x-y`RWgVz~>fA*AM3G7E{uS0OF1j6cLlA502HeZ@1gkxL
zFdFru__DolACq*waJ>!XbY^Bda69hJu}3viR}d%Q(kg*gg<-7hc8t2kU)@cug1Iv$
zy5e5KaX=4K8?PEiG=n0T_e$J~wpP*NMt8LwF0kD7Q4tK2uYiC|OK?Pv(wH#{#vzgQ
z?DBOA0W7>xO2xX}*|aDlta6RKr<EHvE(v-WthM2)oY&j!HFq^>8Okq^^k~|oo@f?Q
z+84+IMY+(AItwT{&j#f-65peKtxn=`q8jyA-bgtXl;<JC<(+?~k(aiC3x5c(6kO;7
z5uDnfrM;iv2&b%C>x?Q)CT@0P+Ui4Wm0C$Ft2XNL;Z0o%+FDsFY5Bx040NWj*RB!=
zBt&*6@Gm(`LC^{?!)cX{3waL6@z_x(?K(8T@qOAWW8KX)ubEmLeIwuxOcZFFg2v@l
zovTf2GCgoMRqKM81^9x8za~h{trHZvW#hVrl)~S+T~hdCgthwV@+|JS$X>x;UH)ep
zd1)IWFF?a?C+AeHc=&e;{+%M~!5Xea5C5)sjOgC&opsEKr8dP%C^(I43tfws(Mhe=
zv*;35J^)<88Xk-ms%VNnyWM|~KRDDn2F^<s%6-!SFN2rSErtn@c>SG|$nnFpnUEdI
zB3Asw(p%UFtVFA3!l~P`?)-CTTyjo0{j2EpuWn`~*6vIRa1<7|8L=!qqTcN{Im?k)
zZgb|zNx^ESG?GsEWzln=B8(@#d2;}(^D2p|0$8r9f4-(@UN9TEkH10ehNT`U1~kYl
z)Ll78WSo~UWc)C)$#)(^UCkz^|H+I^{{EmTcjE;2eS;JS<9SK{LuUM5s2WUSw`%TZ
zEEFS9Ij|`xQlS&B+LSF;lK$UeQhdl6v++-)VEbK+aP7_3AFzOF-#TF70WWnfon*RY
z>aT{1%F=x$4?aY)`yfk$LHq)dOdLiLPi2!Ggs<gg{exsU>cB|}4?i#%<(Bp*-};>?
z_ds1>wkW3|1sPWI>)#=<3rY6(W}x0<!K8>q4rta>q3urHD6mKhK6~79fYV<)+Z?@J
zpcBnQ=;ZT>O_vjQWFDaF_X>s)>y;i6U_gjKj}7F{Qc#y(tt<?(`%!Lmvg!BGJbKWh
zzej{+ve_W(|FhXJn>8{+HNF9F*+Y2K{rb?nV0SJ0x`(?;0dfG_-QSq*fzNxp0el*5
zp2av`hYf?TWo4SwKc4+L80xYnknbTm@@bRZrHk8ufmJS+q_oMEi%VGY5>UF51q*Cn
za`Drq%XB5zJZ+|!Qu3vz&60Xa(ULMKh$K7%79$$rho$k#g{j?BR6jwFYW3=uRTxlN
zfp)y=l{lgvD(9Q1JS%uVxGT%T0&x73{=y~fB67ilRD>AeCbbXFN-o)Iimxlj`q~0!
z3?#XhN(SsZQItrI182;NS;5<D9Bwj|JQ!i4PuXa6fzzYNDC8eb+u_N;Ilem^tA8*S
z)wy((9Y2Q0ANy_79@i3id_5ZT9?zI@qnhD3b3EB_hGX)vKbnaqpKSW0*{v@hf93oG
zI1uyC7u0ngW<D;SDpy%P`P?&RYF&XBNMyVULiTjH6i|=p<dAwfinBG)(Wnx|9`_2X
z`so0mZwfNA*rbS-G8MhS9iyNqU|G#hr(!p<hagixpr;ls13UO>OK)y)0b(Pb4U=~C
z37Wgzn?entlQiH_0|!Y_bBssLk)Xz*CAsDghS*0Ppx+Ms#RC4U;9yDv`~kZ_pK{!X
zyrzK=G0pYJIrXKu)3PJuX-X*Rh}XGdw!;ys;|LtN10fq1{Gg`|Q8%_B3V!yP6j3E1
zim4-T?i@oBluZmh_eYlewg<gN(FFUnC=ciy>Y6=wBLoSWh#IWWQN|h6f@PD;`Bn>3
z2iVM!Rt!$Gf!L8`-nxvIHH(Awnj_Q#suR!i&OPo}lR3GTa|$<+Kb)#02`2smuWS0h
zsZ)B%XItQ~qT4UD3_q~pSrw+LSe5+a=|m+&0SXh1)TyIGix+HxU(7;ISsJ*GtH=%E
z)}i|Yo+4%<M6gWQ(8;i;Ij`IZ)By_-AOkEAi^EV*XTfsQOVAohhZ~Ap5k>Wi3U6*o
zCb~XN>>lX*UONv#+G~K_4Jpe6av)4OS*F&hHIMdYF^F2tCQttf=UG=$__Odl3<L&=
z*GZ6MmA*nyfR1G%wn<-S$k72ZQ7wfXKojf~mSJJ4kTtP3ol*;s7R{CrBL#;mwhIea
z=pJ5-v=+{Cr%1cW#h15`C0|T@%}bHhCRapb;_3g#MvdV$V$_`2rNM$KKkCZPN6qfp
z|G}vD^`rjN$Wg!W+tjN<t0|aAjyjqDv>D$fuAFV*_`<Nbn!U|Tp6T2{IkZG#A<k%0
zlJXFRIGy-0niyW9sFa+!&Fsc>hXd^&>`K$ril1X9Ik+de84lVmdZ#7rhBYEdJJy>a
zb3dPpEUYoH5!@eYiC#&634bXvo<)zG@P&93a0J+zCDu=PlYH+5+c(1yFT(UzPYZq^
z+`$Zp?`px0)3pZUd*OCxJ;&;#^FOg#uWtcBBtsnA;xyw_PJ_~}Dub_LKU57$l9d3_
z8Xe#9a=RRz`%jUIe42ohmzruZCy&^aKN(G~qVH`<z3s;1lFsSVifs;o5;TuKsR0nR
z*!1-ojKEYA2F4i35*C<`nol~Uu0%WT^Jfl7x+0Sy%32`}zEvlvG0u|cdDC0hnslof
zBv%to^pb;8TPra-J#yG{=i5}%kXo~8MnRxa0Z*uFl0((hGN&22mFhy(=)PATN@6;l
z`gT2@bBf^*rl*WeJb?QR^LTHa?+d^f35#HWG6sClxHHJ1N+o{<ay<x~N7g|i@HL5b
zcB{Ig3!iX2v-{+laV$mOg{O8zh-z2(Te|#-<7F^Dz_Co6jlODp5*ng&MlfKODgGQd
zx`o!YU@N8rWppq=rvhSSp&UTPGKbvQ`OcdkyAeV}E#m9yoN=<a$<SNQAU+^aJpjI_
z-pL=5Mhak<492^8hR%Qm|C9rR27T#R%Ybg-y_~%Fc{A5;S(n`Uym{7~bLR~&n8@_v
zM;mBcS-W1I*yIIcCnSIPyBWP_E4(7troziP$m+Se;<kx<z$>IB{@X_%w9}JgUo?A9
zb!K0o7K)+^!|wI$$+gxJZ<uU+(M%~2)1Z!Llb^n5rg_)tM+<gl@_Azq`sn-Y#+>X=
zzG^wg*s({2Z35d%Ik!ZN=VExtfRAQl&;`_)3OQO3!X%o}Cva;NQ4ZN#q6Mcr6JrZz
zqVnhAT$LrjH?*WZLVfYWx}AK{+KJ}eWQ(=YG#13f2YKBsYq5l{xCY#*{!QM>SL#U=
z+6P8oV!T!(HmJ2QR&0_mW9yj<(E5`LGxm*#ovr0+otI5xxSHyf?QY~o+=zb}u;k{7
z;H{;WM#-=6MmUI)+g>nZ8>{0&vNUT?sJ9%-p<}xPe#J&D#Sk|X>xa)uPqPQ^{u8bH
zV!N(q4Av4>)hzGUdt5!ZP3W_42<LpWc!lEI_H31RE?`$)54Hpjrsuc=@B&<=nh-Qo
z%_PU>>|{k6<3nI6HlNgUcG^65t#BN^`1`_(3J421ard6!Fyi9Fc=gs715T;k5FX+$
zS7&fxMhXkcm68{8_BFmfx6YfqEpOlc`m9C&6C0uxeQcJz(+S(cn1bN|9Vi_qi71^=
zmtmF=4#vBRz_daUXbm}u3bwylcW+zWeIoz=t-7<x)dhPXB!d_J#|8Vx5Ry#3*J0<o
zOr>bAIoz%OGf9xHyNl;Cm*N8fi{Ufm`Vtah(5nbZ;cBkC%B^ZWezk*dsKxj^SYWaB
zoaEl3eM{zC5R`nlWTz!dONgUWk~fs>92V2pmh9eKeTn24zh0hFucnNn1!j@6tUXb?
z+in)Qvss(8UZH-O%#MudvztWea_{ZQl1{rvol_!N+=Ck2$KjN5pNmt*eLzkbeU#3X
z(bx1`M&A~689s>UGx}VjyTgYVeMTRHba(jHq|fLhl<p2EsQb)a^=3}rv~<t(!AqCn
z$W))<C|93xA0kzUuGAMvmEmIpK66(y<G;Jgqet}}0tEb@14+PH!D=J(MrZqKc}H3N
zW94K`8KvU???7M<<8qrx@|)k18DK&oWT%p_02oEd!(Fz&zNhE}oxpqL4a?J%XUBq-
z!sX^N(iOm2E@O`KO>v^H3<?z-`Rg+r0_-!K51ig<W;jdO-{ExO^iebO?2=}VLyrA3
zqJMpcgOGjZ{$_>)mi-+LR%T}bOC&L3XBo-U%-g%V?VO&I{BT%)kPDgNBrkN^X~%3W
za+JDV(EJzQ_lVSDtQn_pq9MTJ<NMuBR<h!IU5;5RcM*PUsT9tg%?TkKqKz7WrV!uG
z8Oa~0*vZNIiXAX(l5bWxRTm;px_a!M^}7;2$sr~Vi%>P%&xPRA-Y#M_MSDCD-I74H
zhpZ$OJu4M~D;32n)f7;wIiXaOM5$(tQcWYJwCPehah%I&?&*Ohqf*UIrJAlvHGh?A
zLMzn_SE?zmR6Ibbn1WJq38k=&WcDb#7aQVE7-j#hIhEW4p~#nXnUtUSy4;<VpZM0?
zos^&W{<u3SKk+?wcT#==P#BB5!zg{`u49|Il%IIWxI!sE@v!q10Zf+>bX`W^cA1o)
zc)YkfU?zEXwB1mmW)v-=i2wbO<knuhYNDqRefPOZO>SGABcmi9W0$`b`e5y@MKPi(
z7q=-wlPWJID%GU5$*%PE&~3sLkv6Neo<OY#G;9$lhj2fVOP(5I`?^GqE^d`iut0gE
z#@bzz1!L{l^8J6$#uLy-_*YqzoH*8=+w5^}xO&tVA`Mh;V#e9!6We;M9=RUFG6Gj(
zaGafB8U2Oh?Cxf2a@#ojJ+mx1ug@Mxa!;Q<CIUr>?1n*S%Sv*=Z<qji0<dF35i85?
z+<!dkp!t{N;0gBFJ)t2V67WJu#JvwK$q&aLMFG-1h^2DJ8NRpk<u%FoCfI2U@Bo<2
z1k#~g5cv^@r!s)Em&tD_3jiMv+M{iLiIS)dR7v+GN_~}2%1QF-ep|C&Uz5D0-yYd@
z&zhY4yb9Zmzm786Z^!TQ;CZ<{0xWEiF($xw&dco<IHNeLBF|8S4`(Nx6YWL4%%6SP
zZi|Y&TNrVsK7*|!H%_$I;mBXIi@kWv!{_Drs??PxW^=Rl3{W!eNS@@;N!ve?T`$`*
zHohpZj4^{+*C_q5oD9w9Xx%QzqIr$F6yw=%J(up+ojf$j?$TRn-3A`NrAw14S0;tY
z_RMH~+8DyJt#L}NJwF%kPO0lA+hv`;6xcMCtCHs?+uinMdzFh`XGm&?ZBWi_=@#s<
z*s0(}LUkw0v`5*GFT8-w0@QX)WT%+U<U>)jQ+^+?iN8Yu;FR3Lj5vC<y6c{}aB%mT
zcYjS6f{J>h$j^NOi%sVm`h&h7Ao%h;9@BcAr#D=fizid@Gt+Hvvb1W;y<^)SpL0<z
zj+&3_JWj45IwgP38voY%D*de__f~Orzf!LfbkpfX=<i>%`{thkd}FBh{WX|mPx7BN
z`<mYIYB&^f>DNXIR4DKQFD;&+CmEi&iOv`ZZa7SPuq3c6d{G@36In%&x`+Tbd?D_0
zq>)W)yNBBPscmSAolF$#ho{&{b9eq$A${woyfwN-oOCK+vRs)wKE<9h)lp&_4*J`n
zmVhmd?!u{dO7Fz>Cy()DI#0ed)$V3?Nq#jIL{Dlja3S~*^*MY9;JuUEAK%lCu5V4_
zan%0!x^{HA$JO@7>r=G3%H3npX_Iu~=HsWP+5KA>nmyev>K&eUK%q(cu9lBYrw_IE
zTD~&ehidPL`XArvlb@%<n!c;uySF#3O*AaLGON}nr|oK^9YgB6UF}q}KKc5t_L$_~
zr$U@J1LGPXyl%k0xp!)N*G4><w$mrWxMj4>ci7A~3(~n|H~ZlDADk<59#1P$Y9A>H
z&hbK;T)VqHvyO_!jm)gTg#(Q_6y}>{J%JUpEW!BhsSJ=DuEcN-{ukCu21uZPPJEJA
zF+v*LAqS3g=i=R9^VjFNmQyj$MAoXO3!&<)-05y-@J;cQbrD)guAE^9LR6LH%QNg>
zN2i^2bA_c3bvL<xrkz^))dKWeqwRs4lfTWh^CJ#Ya|#(0QQ2gqioKJ@SVY$6hfU@4
z$s1<b>eP253I^OqAP~-MXw-n@Maf8;)_EUKJ(EqYon`ySJVt#+x)k0A`bmwug~uiL
z&$1Uyd_Tcqj5S<QD=u=ng-j8EMw<j>&9)Pc-`(jK2r^Uof_t-4jr6z=Sx3wrAs~og
zc>y8?R)7j*%YDyaC<Cig@d%`Sq-!tN$6krc?YdY{7wd%0VAWQ8aj<64^-blD<kNfD
zSB>gbbiC7fS=$iEyOQ7SVGpjgV&6LCd#!Z24LL4|1szwGcvo`t92j6%@_{*aulj6l
z(4x;3PBu|Qgw6qx@19#gi$fH(Am?zfSfgI1y*@{Z2)J0F4F*uffIV0dwppEw!YJTQ
zAkG&#MnxdI0edXY7Y8sCk5S|yDgkKPmGrw8J0<3Mv=XDxLl;T5A^naAdZ9keksP(B
zonY=rPTkXvuPM@O%b(r%mt5I2?<qu;d@;FkPdj6es|or7-GBiXp@?+|pJrjGMO$~d
zQCtg|se@N1W-mLTx{VDivIe-D65qBExU^B<{Jm^-+Um?s$q!VE{8s<Tli%2_)VMuv
zw}wLQtCOepvddnzh6pO>U(rX3=*z5NU4}z_=+h+`e|EjXu-I#*sJ`AqkS}3n_vEy_
zZNK?avUYE~dl!fJSJLog5SV;rZ~K`LLP%EbWB2budyI0MS#+xv`{PXV#eM9A0y8<{
zDwq6ZA3H7mKG5WBMqi{#c6*hbQ5W3#YKy~1iUZ{xF9bY3cGUS<ZG77mEd=`5QNqmd
zM$`ZM9P01qcUJH~SUFWEAbaDEA$-X&qHsl5Ca~7PhiuuXdWX`1br<`O+-Zi>o@S5R
zgX-p*%t`sk1mfpkW&4g_$9^>rV%wVG>(~K&FuwcB=ZzvCpib}*R_=C4e=_8JYdZKu
zSRE^C!7~!qOdBKF9+RBP^Ab$1F~a0o$&~%<2kT!p3I%t=kFWhBT5V-BOB?V3JQ`5Y
zf|}dGCPQ_ii|69ZCXDw^HincqKtlT(iPa*0Yy}4<8<r0BZ4W=`9UWHynDM6_aAHgG
zCB)ys0aQ>wJF$~p=h`XbHi_~?{#H|Z^boV!4pqLA96#5N>A6>A4G8WEt3YSKZb~ki
zYmcd?{6m`s>(Mxh^wBFFdEZC32r`?%Y#CSS;;S~X!j6FJW7G~8bnIpl*AH+_eUIVp
z1;FBi9JD$s*kW}w>wx{Ct-3>5AF$PN8h01R3~(|Lrh6ZL|2#fa3T;kKdbJ(s983Ew
zvo9{^qp^2h^J;s5dDU1L6GkdiJ5zbJtLTPIty|usY`lT-j*5s{sC?C7c>`NbRom@J
zX@6TQkCEP)QFXa!%$@W0#~bj@F|F!yZPiiGtpn?f>TaE_!}^vMM?-pArcS=5BWEv<
z1`tVYcf$pCfyZnI8E3BexccO0^KJhdw4}{039KxzLb#S&@+s(B>!JHBXMA<Y2hr%G
z8Hzf~d>aRWs`=uDc%=Om9Av_NO4mV7+IO+K#pH+s?38*Dx<Z~eLxx=xH}?vq3a4*7
zmJTScb~EzYP*f?9tpQ~2p-0lXkYzfGU6Mj>4P#TWZQ#_`(NTeB6;}>=5teEB=dE_p
z@!~e^oYfjoEsv^E#DOlK|LObM+oe7@5xqgVoA4iRcs3i)Bfo)FG}*uF9FZRkva|7e
zk*+Gd$#wYVur;sOhs<kjAU3mt<q&2ng*%d22ikG<n^igM6Z_hml-tU};BRPVEcu(Z
zYlaPy@so_pHM7-G>$Ah`<4LP#2%T@2Hf@~H-ET@MS4I*mx#vJT=1uz2sN^+&=uvEP
zMmjecfEM{o+$*-WuU+71C{vv*Qer(+q*JK&dm8F&22XLb;$x@!6+1P(-j7NarmN8C
zU(RpU5l!AV&^ayL`vy#S#qF`ypjA*fr(9u(T*rYHangX}sN$dwA#Qz?hhi@s5-%tj
zp5LIx5Q`<7&E3**gqa04`PKq^6kEi1iS2}Xmvl0Hyh~peVvuS|vCEjaa_oH>eSp>B
zEq~Ik<#t#C{LKP><sJwBd##tkn=$$q(J>%;$jVxWHUzR@@+S_|>@V?zo<JLVPhY|V
zX0;e7>*IF_NTeHizJI5@Cs%~{UCEvc?c|KAO#T)_r#CsAQ!oD<O+$KK6}ZXPSh)5C
zr%eKR$>p*(7(vAQ+PhjLyh*uD(AMpL%*H=JWXGGfBQD4(-q0kjO^&$k^2D`J>gNVW
zT?jqIwJYW4pjVpibKP)YxxdwolJuvP7L%VWv{RDILH0Ej-AQF-WEYi3C$Bxo4(z3`
znOmkkL{E-c<kjfAB#az0-e6dy=l;#6%9)AGvgGE2?8N#Wnpdo`*NWn!TGXV9$Ebp%
zP%4M1;FElhTmyK_R3n<`(w^d|G6TYJCn0QUHGH3Mc#9jxqiMrv1bk#p_1tf0Ls|hL
zf>ba|tBxhUEXm#Bme&CqwY*esT+MD2waoU7ww7nAWdVB)W&M!1`Igr>pkI>8A2?Im
z^7CoStF3E!PIHdm^lY}XrS9m1b;mEVW2ayAY?jbDq(LbrtVRky(`_)m_}S)~aYsy%
z<l~F%B-vY<W^7)Pdcwq%ah8up-@ISwHbNYX_<<$SJ+G_eTRd&6bQM~W9-?z6A_;~#
zU+q-o|3Lc#TEFIdigx_|uiOdYbn^~6u{pW)5c^s)DS7-5`<bR5fX~edcIhVYT9Mn;
zmkob^cuRXeRoMYjmDLF*p;&|SjcK}GDkTxdAT3s&kzsv*N4jRxwb;JN>99kK?I&HP
zyu>bJZ_OtUv-`1|kf=~d50eh52N!um<*muTEwOJ@fu;7aWa(1dW8Rt^yVTb9Zs*!<
zdFN&<!C=aWtR6TERl&41C)X!EOYOLh^+r-|z}}F2Zz;M*Iq5#kP7l@8+{5f_u1`M9
z4$$;GnbC4uy4uvkr3Z1>vHXfys^_0g5y0hmar%mUM>fLVhEuljW_fD3ze_T6nH}$T
zIb-1@%a##O`{m?E%j~?FL;<#$XtRR3QVh}3Sg4hj#tbDW&@<FI$^Of6Ow3M>TaG_C
zN<O^Yp6I~&%yPT`!NTY2D?C2iLE~$umPl1i)l3~gjZInjNU@i!INXk<XKN0(6US}N
z`1ouT`5)znPh?5Hc(|Q#fP-*NJJ*!!M5mITWo7pg970S2W}3riwsJ2NBz29$S2)WP
zmAW&Te1z>EU2xKr6>O&#0kzIr^1u;x-0bpcvDFE+l4A%`;gsN2qLfj&&{l9y_=7Su
z;+uYvbRB8;b)Tswzw}5udBB;{=x3q<0-RjP9h!^cVW<*+N0d1Xy|I*Bexw~UN?tv0
zeK%i8Hc`ty9Fa)h2-T-2rM43Y6xQOeU06$d1V|=%kudt%Iyc2fk)WeGitvH>*lubI
zxvu5@vR`N@B(FWnE?S%$5h&A&DN(P{;$%`1E;Aexf|Go<mh4*%c&&glMt*jbowK0*
z#02%X?Zku;{iSx?KC0bOiSIObk|SP=Bggkv(LY4|Ne?We7T{!9#Iy<yUEz|$31-zt
zp*;i%pb^j!03jsnsNoPoku>gzzT(Z9D*v0@1te%qqLlQ@(oK7D)6f0qn8)lIcqzHf
z-*60T2l?+L|Esrmfv>Zw^8TM&l9T&slD27j$#YKAHZ8qTN?SvLKAlop3T>ejxfKX)
zdP|y=G%c+nCn%0pK?+45yo?k@DPt9wfeE9G*6{);D!v2CAZi^LML{jfjEn;Pe}8*F
z=j1dk7w3IH|H8@M&wlo^FKe&8_F8MNy>_t5n_mL4On);zW0kkY;KH5{4eVd#UFnXS
z=FEiPqZ$`l!e+FFsU$WvEI%_IzuNn!hF3mp2wDm1qXI#Tf4kc2DBL%C(FI5tT?6mC
z!26v$CgG@}l&ArwG9nq;w}5s%65n{C*Oy6hhyvlW18tN-9CR8_Nm6(WWH0hQ?>6sq
z!9H`l9@|1-igl^^^;Uma&b!9FHvZMc-YF~0GO$~C1Kh6HTrf;=zhddl(Rcn(!que2
z`{7%(MDBr46QVEDmCHuqXB2u|)Q65cJrG}Y2}I<<_+yuNm(DU}zv5Fi2=p?cE&H%y
za5IC2qxrCf$1Rt7EsaL^RzBH3Xqca>O0!?|$m=EX6})Z!=pS+Vi?^!iW)ne<E;k$$
zyejkX>+xqV^=6-Ks(xNoqj7((Q1v0j;OhpfK9sN8bYs7y5_)og^Q?nh)c7^tcWh^#
zQi*iti9(5wE4I%qD)I4riE;B~z+zxv(Pa#;{r-{U`)?M$Kd9K_#or$+eE;do^?m$}
z%e{5;rx=zNOTJRMWk7Oz*;y>vj8Qd837An413$0b^dqnidMGHx=Wg-F*41jf2G?^0
zrFicZUYl*$gGs~gFEs34#qKR`7*caGN=L5nT29Q5(tg8})V$4R%zzUtkHmLc-X@XP
z80`m5Ih>U*k8Tr>mJH{<cJCawJN|vUcS5}xRcryQUWa}CKiIy-XI<%4mPv7|UR`>n
z_rN?ZP&KY=hKH3f7*YPQwwL+p=}jSNl#={>QoMAn_f@wyE??(ePOy2Mw~ZnA**b5x
zSqwLIc&A>erQztMZIID<{>Eb#NxTtw3p6gwV<Sn)?t-yfYL;R+KbS=q3T%!<LCDI|
z--=V~y(z1#c&c&e2W78kDjw8Slt`S2!Juk?g0k0p@=m9+Sjm#I@NW(6MLtQ-Fv1Di
zz^f^E8XbUszA5$?@>~Sr7uOd-`1SSP*f$=GWgCjJuG!$V+1a>HD8_93Q~|}%F_cH}
z?t`-twT4A8GaKRH&1}5YLv37;X`bESon}kilazQvp~T&a;j*njwoqFX6^JfgvwKXD
zhy*7e|L}6JKJMS>Ep)#fe`BLJi2;9Mqu1OrB~jfTJGT<(K#I)VikEHjDhBay6AIU^
zc-JOwNM5G;uE3Wcg6U-c!t59;0_j;pGbTMPK4mlc&QiXe_}Vl1wvx{XEPA&2X2vgX
z_NJL7;}9}OYp2)BJy|H(Fa|u*>1CUnJ`pyBO^cl5-`dex^Kj_Mk>8)WE^LZ#>+}{>
zeBlPIMPjMr|LBAT9Q{x8Fnwi3tqMoSGrGK!PCtBOJ_ma`LzV18{HHAUF8X*Jl#cJ{
zV#jhu{Piwx`iW+`_9uh%D!!mC{eMNVuxOA_8YP4!+~SQp2C)(-PbvU7x5XPd<;^DH
z(UUVixW$`VJ1B{HMiToAG|}A2KDyhRWr{}3iqG%%=DcavN%5iX1ih9258d9$Z;}5!
zJw^F%>hZ>yTEEo8u5zAYz0l)rEY_rJ!?>#Q#~tnr*-^-mOKA)IMfCF1Al@r*JlcYL
z83Jll8yPRT<ebT+4Fv;s2lb%TAVLtUfHg`CLrFAl$XCcA>3QjQFel(#uFrXxZxZSE
z<YQf~xrP{xC9E_$N2wPvYPt?98yEYT5_bA$!%oTZ*>tvrAVCu~(dUH|ZChqXPw1Uz
z7OK$^uUf*<5e(WG0=5qu!qE$NH}v=S;{zQ;w5;1`?J?{<?bXZ{LX%{iQ*g~tCc|%v
zZH`fU&p`T`PV1*+W`vEImN1i<gl~On3`~tErd4C3t+CP8*tl>v6&}RXY*omXmYBsx
zQ{&AaZsulL)oBtZX4R$5nVF%VnFug5@MKdsz>qaH&kVD??UIr+3zHR2T47uQE1u1U
zljM7?gh>skr)E$_NDbVoV75$UbwNXYGITOVKvabXbHdT)W)ma-`}i&%os1J26w?xf
z*=f#US8N}KZf!(O8F)Tc8AfAA8AQw&vWgapXk+DM?6tpJj|}MH8QJb6)w3REeeD`G
ziG9t5VW=LA3CD!tGDfN|Gd>)n-~=ErmZ&bq_LpUveTty(V<{M=GZ=>iBwgSPmvg*o
zfzI^RhhuSN18SX*Yh{9!==BLU@*%-G1Sf(^E%sfZvmVQ68GYQEodBY7gdxRqZKA`j
z%?4_0i5kmJwaY7PlL`uNIUHoQWfoYKcM!k44VAZqMPu$Iu~8QG2&lzkEC+i##ZMbi
zk}|YA%pMz4Mx26$iw>G_<+zHc0(5AOui1rpyo|;e9J%~8Siyl8!%l>>PXiJy0+=Z7
z88IfAiXm~SE=VWTrD)nSpqO%Px$9#iSO%snMD)e@&cw}e{B)n!at_lE6E9O%iID*8
z9M`8Rf%U@V@FdXk?TTt{G~fify3uBvW70TgfhA<TY&%v8QvarugWZd)*)>8&%Wd~Y
z<<KzEGfY{86*Vg3H%=0Dqd(@OUiABX)Q^6LOHn$=nITRk(Hd^`1yq8a+Gi{ewN(KF
zYou@;(zCZ<0YGgANL(yIDit8ggU#5wM{dTC!yS0$_tkd;N2Mj8mOj;V?-|u>z+IdR
z3`H!+=gAJu5|(M-+YDd1bq!E~I<1_qxHN;xblxb1){H?c&8eDRVr8bjRG;Doa8cUC
z%T0P?UvJcZ-FvU!Dg3FBfC~X&#Y^FiYjad9&jBRowuSg4<Yo`5p%Tu`k_8Mh=uvnr
znE9p)<twUlZ1T~WRKc?&vqK=UC}n*-Rvhc&k?||L3UAzD`B^l`z>vCDR1b$uG<ceo
z{D^zUqrE$VJ_YZNmGWy>kxM)~Qf-Z`(|`w-N`;~3DEN0&zZ2Jv#hE$JpJe9yqdzdi
zZG6vzJZ5=23?m$24ah-{CDk>w+skdq>O{PzH_R(1cma+%@F?dqX3%8UnrwuX=me=3
zG2o7-Cb=nACJQiF93y3uA0vfq+0tr5nU+9{5bU4<LRm(GqANf$BYk6q?r2&p<$#jO
zA($(N4zpEAKIet%Dc9ZHb!;8T9D*^GErv%aBS9&YSSG)|3*<Ss3HA0g$IT9pNA2?3
zbMRA@5e~1|3d2)Nl?*~E2=L)tO~8Q;-85fX8R1b{is&FSih}7_W~9`?DISUHdd*Rs
z`8Fq|8#JRiCcy35#-<L3@eX5}Kc8=$T?WyQxq~TH<>rKGw2cg3cQ`wav7gTIv9TD<
zB?E^H`Cp1dQ#1|tAr=&Eur8`tO3`J7qD#>VshbqXS@gl;&={1dIAdv8W~#=@(3CvG
z6fK;Hf<8H?8Og3@zAoJB4|c=U6~ykly@t_8HI~wCV?|(t`1W^ujkyy0Wtr)a{c>n4
z8N{PIoi9hI#Tx+#@F)G3x*qjopKYh{qEpn+QZNpn6slVz+{*(zfr{$$hCsy=R7`!|
z(E9Q)DEnW-AZ5QSe-ju$d5#YQv!h{Q07B+rkZ)7DExF`PO6Hp8Hz?Y;)U`!}&-tR6
zemZjofbn+L*W0UDxrxb@I@rww<LZV{Os;S^7iFR(1Jm%jC3m?x>vR_8{!9!zD+B0O
zT>Bn&AA@L~#p+jF(K7g?=y7-$ShnHpibnmfDc-9MQVk$Q;Q>oTJ5YVN>q{oH=Grry
z!qjYms<S5`Q?mxvt2%?#Y70LR1~bv2^e|gNCZ}C~*=JF2zq{P*#*3!0QkCT$N#R4d
z;FVc)jx$>U%#Bt;t2*UML(3k79@<%9XN{Qr=t!;1wItD>o*ZO)2@!!u&MqC)Nv6Xt
zcg3pd=1>?d;Tv--Oqf`7ER08LC5fY9Oz7eg|7c6B+W}oSCFU#0SNR8<fx}bzl$YGd
zOmwL|a`{A)ZSag0L|(6p4q5S)&jxPDTJgVujOBTg^QdL43o;?+%6afY+GVLn1X1gK
zhEWpvCIAB&HU2QYaW1R*fYk-pVGC;H;#V%dPiIc#g+c@$m{*7;nzp!F2mDD>CFBf@
zyhX$_EDDPuJ{5drohtSNR|Xn)Pdpr%ge&4l#Um_3Q9!Ulfj9(is|Hiy5`4bUo>94}
zfOSO`nq`tL<5D?M!=91|Tg~ZB;D3Yo=XqicUDgY)@^meC3v7evg24b|sNzLoXU*lZ
ztKwhbk6ZYsWd6m`WUr~jWQa4b`lEA7G>o<<q!KJlYx+H3F@*bHa$Z5!p=hq~oJ(s$
z?K;tlR(+tp>!Br6qn?0r2Yu$}*A6<%^l-1g0?j{Pvw!7bQc2F48KeLjPIPv*@-%DS
zR2hxI941<4xsjAWtnLJXAMmg6$1nU-GXM5|{pqF>^PU*4aQNp}(sD6Zu;XLI#{u*A
z9x*yZV-FjRO%mT%oH#B?yuLWGIZ1r~V4@EN$@+9!go;+n1vWt^Y{A$t$2B#>0Tw}B
zs7}Bz$dwdPH#3gtD4JFi)`@+qiAFE079TiLL>FAH5u{b2#vozKC`|tLYr^3x2<pO`
zPQzJ}SInaNng2+_1>WSOHx|<jo2-#BVo20vD>83vE!nAp%Q&(CDg2^9p_Wns08@1!
z^VvA@U@{p<a>6-jnP|FNDDgvk8Prr_5Wr{jLHr!7%w~8d(?y3Z&zdOM5e2<s2P1rc
zcV;H5a9N$AsJ#kUL4o<P{~rZQv*SQ>Vz0_$z*PoTtRPgOw$?>^-`Ah&!k4WAQ#Z+j
zk46)m8+<luV0nQW#d5-sRjHko;c#kDq0o}y89cU$a~mw&tPu17Rh>i_?6F|wTsSgS
zN-8UtK8e_*WCa)<j_RVbM3?Cr%dn&?XTRLR0teS4{BS$N$ty6GH{G3<bhjilJ+))U
zr-d$$Go{-eQiL$rNJN9(GTj_}w7o3ABxn4&tNr7S>h&~w&3@|U=vQEv=|h#eU6R1m
zwpy;&hO67d)oqV{hIK-a%5buff}17G#{dC&!`!K43K>aB!Uw>xIj4>b1x5~*B)p&q
zDNy|Ac@;5EMbOjX;Z%^AfazkY-kcduwW6<urfK-dMp75zwQZ33U>b#t49A&uL4#tx
z%Be+ajITz}V+E#3omn#=jKC81%4@=DNamUx<CJ3@ZI~?lNZPur8v7r1gz<JLigv`+
zs*Jw>b~8PrLykzA_(QSFvaXL_{5VT&`g|_Zl{qhT4`23P^u#wzs!4><Q=PfGt%$&j
z2sTQ4GR;X-e?sFU2Sfu`>|zx*qr^CY<*qJl4aXY`oiNHRt`-v&${k5KR=Os+Us#TE
z1+@@c>A;bqL11ZJ$_8~Vzz5E@xu9`j)sV&oTeMV`oMs^?C}{Tn`hxK}UIlmtrSZx{
z?05>7TH#A#`)JkyIi4&N{h%9Sk02=Q>t?h}dRliGF%)V@<TS`GrZQwGT1=rx84sZ4
zGz6i)jNK%wVIUjpsm~&c-hf(RjtrKnAgjn=n+S!fQDhMHqCe!Le)Q{nG(f$Pd{)Ah
zDbP+BGRD$_Mid|xEHL8K>qpp%r}!N*=_?OMfRPPXWvg`QVg;IdA|m60^@PaXRt$0=
z+r$b!!fe{-qo%C9hAvU~8Q&Ut+dQ<GVg*p!GMLy{)`pD*#UU;qTRrrI+6FGD3*Y$b
zqL16&vZ|uYnAs-voX>Qkcj`ZgBV@5pX{mQ=qhTma(V;THus?Y5U|dt8TDne4f({Xx
z-T6|G_!{2|5TiW)-ut|XXTgz|=+L~zojD+Fm!x*(Lg?0fv|B}w?=~B8<ZHf)HVjL6
z<g`&iau+R^(VTichM-UF4k9Ms=nNDG9;VINComG;nS{4{;gk@SGs=rRtIov`g=<Ns
zNC6DH?uQu$&JQP&mlVsgqcg6|r?9@VN9)K&#gpkJ+|V@V&K$gai%`AInM6|E97pH6
z$INl2+5o+?QKCDudB$XOp7NgJOyG&n_wn`o(3g)NZHuNiTW>$QxF8>c7jp{L-A?{f
z$@p#7KuVzzIpsSI5hY_;U6hfT5e$}GmiQVqpkuX@mQe-cQMHh1a6)45HptxuW?(FL
zOQ{|?DZwy#GK@(WTjVM2O~cgchAON{HLGy+>m;f~qHgqCGuMcE$qXdwCsUNDE&@tE
zD;dno49KTyk37kcivCAYaBYOBbs#JWQ&7js9MYt5Z$wuS*=$$M{WElt#=|Z_FvRoA
zyG@pQrBs<HA-{2%N({?%TN2kL3AItAF0*E{OKs2z21Bx7VsOA`3Ng%b+DH~Wm*L+`
zm}wK()(u1CzzXAMr-GXnK`izFRdj_;N+g1yoIi>K%e#a`r=^7}kb(HayKzzINEM9U
zc1Ph6Z8C=~$|9VrmB?tPB9qpDBN>JvRyzgBQ#Eo=v}#OKXX2(4?I-*Jnk|$*G>A(y
zHe0^k+Z?9k-ZzNwYfb1ern(dzdk|u@194aBsKyfDl|`?kT-tAQhpCgS%p-Mp0;p^g
z$U$qF|Ke#2pu(a)fmA&6b$l<q6>Rvv)2w?MGlV-jUkn}tkKh=1Sa1|(w*`ms-y?8X
z5AqQn@}t}=R@zyhaXM^5N-=lQl(#tybr`g1mPa$??aP;AX_^u}^BY$aj?H+uY~0v_
zf5lS;(PLS)&NPtBo`A8NCrx@svm*e}2&<P#preHz9)@xTN4O43O+=SS#<D>aDa)Yb
zEMb_`9E&x$MMC|GvR{vO5tM+q|40cVi$2{BC}hr;kQ`-Y0Vc8<GNlb1kzc@ois){>
z2+R`eYgF-pMY;6bW|Fe~GcSv{NML4C<tt&jXUraoam=UI__h+!f&47waE~f!GL;w=
zk*7ME)FirM8zLSc$|aScK;Rn7`ytlhh&Jb5g)%>HbMEoNVXYpF1dSk)c(K8es<;;8
z5YUQC2BJ*5!kA;6lu&eS@=$9H12ss}?E@k`g8dwa!C<4%;h0X?G{?~z42^Ffz<;;d
zSefGpu`B05piLss3>!p{@k=IhZr5+fyC<qY(*{!s%u?Xlg@HgcpUzFAt6DL<gm8O<
zwA{SC*Q^L8dXFLY_>GmZF~<Y7JqSlG0|1e}{Dz@fUSI`V)L9BHFcF*t3R?zw2*W|Z
zp*j|tIVMGwfiUZu?jG;TGAfU7j~ttTi$wOMaX?9?ZBCYJZF&MoN%CB<+RBEgImOVL
zVP6yTQ5bH5G4MSEjT!o?OZe&(=*D}3DmZt76oLdnkb?mybTYt7_i(d}=&E}eG7@Pq
zC~$zzhyer}_A4q4T$^*3<r=WmG^miu&nj@B;6n_@Ai@DDqVk<H=*|9}ba3#X++<Q^
zho8~Z@K3PA&#-CuN7>;YX@`Hf9sY4z{=IOj9e!|v;pYH^8T=7;@WBZUKDfk2@v(z{
zzz#l`mva`7uY8WPNcm1-4L5_ne{lToO2(f<zeC2qG91gCV<)$0<ChJLN?0fDiYB*%
zgqg^w&CDP}=ztarx&ay#BPSboV;KX%(*C>{8?$B3jKyzfG!eBaS<0e=M@rH)I>q9c
z1hOYlm@t~og=0uTx;%vG1|c(rn8P|y6*V25yGmzoKoX0*&9gF3%E8LBK39jsqE_A!
zr!Z#YhR*ah+s5&>;mxMuiJNY|DDw@aT!DN<kDP2hXu)8!E(&ia$&Ojqxg+AA%IQ0T
z`I#0a&I5f3W`n*2GjrfC;Z&eV(3;6AYl}U)7G_2(aZHA_RoHBfpEYD!^^^wF397(!
zf)toe5HMc|oQ!dD>#^zyR}pli^dR1uIRWa)zA0@_h3u`@gt>Y!+q7G=0c%sU${H<+
znHJy%AO%Q#!h`^D{E;fl)6i>0A`o&TyIX#U4KF!Y)b<xkov!<<3{PMNbBIklmRhl4
zkwZJRZUg^0iDxF%rxYDyqOli_mpL!1NS;~73teGajknW^>Z|FP7dDfZK4@w|A~MaD
z`4se{;b=R(!lS5btDRm|;J?T#a}UCyxhL|<Y|#8-Vj<a1b3P^eF*Ct5&zN8$vP>`$
z*|Bz>Wsf({Sif7yLJ7AG&ZbziNoyoq+cNORkuvCGqA9~4R@fbFhH<LKvQGmdl+d3p
z9zZ<_vf`a5@I#4f#PwD}nQ?{uu!hNCpOVS)8_Tbj-w1wa6*4XS#_+4-H%THcd@RTN
z*oqJv2lweBeI)~Os|Li5)1JYxx#|Du*s!kyjNV{y-g<0q{l6WXoU><eaBkAzNG41O
zAw*c{HA&QwQPL@CA5xK$4jnFuMGXFb7$@N%D8sA=`(fdDh)r@xP*J|Ociz}+)pmHP
z0-O!Q>Kufo4;BYYBX(g_Nj5RMN6zN%&ybCbtFZ5JGHGUD+T>WlSzI(N%qdtQ&#)y9
z$9T;w#{O?Ak_9RcBq0cj$dNX-@ij`$dQv$C%@l^98bwTwlrpP_VZP(MmD@_RFD!A&
zmn}{i)Rp|oT`zHkJ7`OBk{_1sFzBMy(Cdo|ZU8(T-;oeZL9+kSxh$xJwcL4%_KH+!
zm)q=y`QbZ6IamkOpFlK5x24GQn7I#E`%=~d$F$kpKZUuDx{``t|0t)@I<E7k8k;vx
z?VBU0(4|f~YYWuQt1(q#HCMr<vazN;WwgiFcAVKu;B*@N7T;w{%!qR4h+Oa->F;Qt
zg{y>b!>AbOiy(24vmt2)A2=h&IOZY@02~g)Go;lf#+XO!pp(Yo?C3-jL-2@x!9~L)
z>R`p!*+C?VC++Au#1^8Q42rJf?mwcqk&mvcGEp6CxUSJeD-@k+qVmms-630Am7H5&
zchHuH(`V#JTVRce+Y&jVLb@%IE)ch6g0{qMp>-ynlv-~dl2RMYLsIN;`(Vo*!9xzg
z)s{TczOqF(+6P<qDEp8U-ejMW(ns5;r1&w(lPRA#_I3T&$o<+_HuU-sFxc!bGP>dn
z{}K^IKN@G`0^`;Y*@Fa~vago`drMd^TkkP&qRjAyu)fG@4@A)Ptv9|1_WTD2Hf6M@
zG?8O7Eg54oG5x|g`-O4#3*+n;#@QbnXMb><{lRf2njdGP`Ee#Hz~!1EMB~AMCYm2;
zB^Sn-cww9s&yTa>`Egb}KhBEh$64{hIP0M>&e+K?nihYCtG@oE;1TvAKhEY&ew@ui
zew@uiVVuoVVVuoVVVv!g9cMp3&hBD6&{8WfqNt+_W0|&NnYLrex~;KH7mX$4S!0>b
z+kBd#6vwFXV-2*!SR0AG0c9);r=ittA)NFV3B|ffq6hi{D=lz(S^Sj|J)~GpxFW6;
zqDT}b1y!hFNZ~Gxk*Sec{dr<b9Y_zb<1iA@dNEmkwD$+MJaA3dw&?yZzxv#}w;4SJ
z<cPuNU4X~yy_pw=$G?7u*Rc1cUys6fO8Y0hF?%0)-=e*pzd149-{wsh+h!#!4y&{g
z+XKat>*osjB0zn*$AxJjywx>=IAqsK)<$MKs;O$5TA9|`BX#*(G>&7~JEFZ4UKlpm
zz_G_^V7jP*?_jBbjp6##A+6k<wDN`_tz>nz!=hV;-W1UJ)(>rX!*Re`el%Fi-=fuR
zprAQ6W_W1!F$U>=t!Y$d1gpQ0!?y?QLmaA!o5X@v+$6ZD)!!<};Tu7hQfy5&%idb6
z5=%SA&#W>hYoK=O;dF6(JX|CB5M-F_Rmrm0#Dck?4l&Tq7Io0xO*3dZovw&~aJ%=w
zpz9-0e|BhHAI1B;r71%Sv6G0O-$(PHb8+PzUgmE^@UU$*+8iOSkq;al%Ey2_jW<2x
z1jLQl<qh)ZC(K$a`|=FA@PN~Ehj)tm_4o^ScymT4AHq1W^LQpx%ao<yk%3q5@HV+i
zk{lWMV9YxtGZIp~S6qB?JaJYlcex?n&GN4XzW7<s_uYr%`#$fT<~}@d`19TwZsT>O
zZnZ4lanYP=A%H;+AtIIWIh?pp83Q)f_4w-joYAO=Z{P1VFRTbqQ8R&(Gm(L8WH<_r
z&4Bb*QbJm@T0DOsFPTdgkP~#11cwR7z!#=IcDHv<{bN5W**wE_&dQ=tgSDW@viOR-
zSyPf18eTv8zRkr_2A>4q(H9-K!+dA7XAmYlJacV|83sy`FUFfNqbu>GMt67c*w6)+
zc;K_>4{AUM9dVbtkm~4Ol0=qD%<dtXrMSZsF}J*^MWeH&OOo9tHvSpHtcdS7o#o>8
zl)E#!_A0cCo24o%kw%hc+a*@b@)wX?Xp~f}##s1x%@SELjmp_p>6r>~QJz$&Z%uU)
z7k%yXsYVN!!PXzsc+kZ<cvg0MU4iZp(D<=G=5zB!IXX*(VFpKna%z<j6+Nh-<Ul=L
z!LlMJ;=ahdOj^asv)!zj#T=8OAcg%2&Y3^$yD1?P_FO*5$C*Xz7VInWFaF-UsgYB3
zXfe%U(h!w3V~z+er#HL5;Jric63p8?zQ#ZN0tdOj{jmey3{D5lJm8HioVQ+nz?)`{
zbX<GDyUiRAeSCL3=8GN<<aZBT@I^1>`JDHP+wbuv87~3GSO|^;1E+L3E^D#67(AO&
zYR;y7=^k%n6&EUt92q`1{^32G8{xP}eE1$O>+@=0_`TlKuKVTq@O@qj{)FU9ETdgz
z&WRpGn@d0<zJ*8>Q!msvJ~UVc$Jo`dkyoIHIn-mlWaS|Uv;<Gj0`ea{0BOmK7SSME
z5jy995L!^PrJyesBo!+}{~%dLmN8<01W%eJ%?d{Mn1$G-RRwTHT7lX1VOvSNyk#gI
zP_BU<5+<ap2m}7ud6(BzXx9jJ9@K$hmn@FWF8`J1&SKU^Vh;G$2pp)6_&UpJT<MsM
z!h`uL8wX$C`vz_JatV9(g=W*Csi>I?&88cOWKzLX+*#zL=oYC238YEkDlZ`BrgyYi
z2bMxkvZj`11o6t((;je>zq-fKik64~Mu&BRhshJM6wKFC{Hv$E9p#VwS%x_BMZ5kd
z-oo{ht-j0fL?uz{W@QXrIzm3!hLhE~nKTO#u~litLW#y&8&Z4#+Cv^lPIkAuL>5^j
z8goG-mPJ#n74nF<<r#14q7y)NM53t#C={k;0%)%<i)2L)Lf2%LJe{{#fzBXERaz>o
zi6t9&*21sGw?2b!%#-4WpYiTA^P&5v-o>p&48NuzPKFT8g2_INnc-;Muo8cG(d_u}
zPrZ3fCmLE}q=aIpV)C-F@MqrLg%i_%_?dUjqGO7tttXqa7&^RxyRaa@(?S?jbMHX@
z{CD03N;!=dMB;{@dl%OqQ&Rdnaq}Ussd|nE0?N;9h~~yi4tb}Wo_*+$clng#d~}?i
zfv<DohF^HQj;h2134sJx(RvN3nE;e|cw+nz*@hj9A&dXRn_nXg0CmKPX!)1Cb4p&`
z(M}H&_H57!WSHYENg!*KvIZN>hjhev?KAy;@jtxT6E*b@?zIP2@6Mm&D!}S_`=&i!
z{H%BSn8$yF#(-I?qRJwk08MoL-T=p;v*S-b>wTx<+Xer8anEz!jdffU-)is6C`DqA
zp8rirT=Spar|}p3#sBm^KW1XKV&SvSg`jc8U68^3f5BB32b%h#$Nmz;J-_sN+*$FV
z=e>u?zyH_X()jSNyp3Zfyv0ZBOCtw2J;h&c(t$!Kk<l#VkKV>#`VE(Fob?;8**knw
z-1!?$n!j{YeCKbx6?*=!<azoF-c@?O;|2Tv=@-0~nwM`1l5V*X-&DQmHM;*6Pk7P0
zf|ma6i{6@{IbO0kDt_zTQhWDrjWrOgl^5OpV#&Z4e(PQ94a@J@LIUlc?LgaMZ<Aa1
z<Ja;KBz<%Alh;b(2VU~t?>)SGVE!MxPs;W3Q-Ac<j2Uc_N0XA~i9`7*U!420SMPpn
zpyOqnIZk54!4GW59(;`>RD>LfU<1tf)T$H%!k-|$H~xqJ^43!Ni2wF}H&Wm;8Ws3k
z+-iu;#S`7Ec=VsV40%rdlQ-SxbpAm1pS*{>RhO{>WlKe$SzD#?U!8%#>Pt^Sz@md5
zK$v&<!xr=KaYdFgp>PYRMRjuMP^J~D48oPZIeyQdy$NOVMqNtN?*20?pu7Qm|Iglu
zH6}MFS~>fTtLnJ=FW$ELJdk0MupcWkfZqET&n*V1xlCIC{rsyIpwnLS{&R37v|DU;
z&mS1?|FhuyQ`c{8rPfFqWmXWljVM?#TAFK!KOD)|%L}|~m97`5j~96UJ0?oi2l!CS
z!LdO3>)D+&Ya$o-OwD3(APqmhXgvR9?v+5xZd7-S1a^a5{4Q%W8NdRb3Oq7ZaX~VS
z56(`w*;GMV?l5#hnD-oP84J5$Y%9o^vKgfjBqM$^2A59Mmbxr&zIOa{O^#WaOXF4S
z6^x#2mC0fnY^{wl@RBd)^7ydtx1P+Zi>Vt6pYd&?`%Eh#ybv&y(DX&qZ#9W#tVMo9
zuHc1(5B%ow^jR!7L1^sbDMedcX_{j`NM$SIn*x7aP`Rvnczj>rH>Swjpikl-27VJ)
z!RR%?mw2~;COTMgtcEKv2*#rjOg9)F|AiO^icZrg`jC!qF7e04{Uv@WC0<nGPh$Up
z`W9u`+AOC83snGhDg>4n3*zsU__N&7kCpn9-5{P)>d(!I1JL$Vgg`8%r8M!LykkMi
zblj<8nS6w6PYbD@q2TI)g2G<h8oS+tGlas_fiin3h~QXeQ^YfhE~`mmy~swjo1@p_
zr%U~;e*?4ONU1-(8hOdO)d3-2i6@l#KWg0n8Y=>l5JLl74O*ijjYy2^Q~tzR`M1Kf
zqh3=JT4)^*ZUeWNkvQEeGv9Tl{5~ecp_Jb;+|0gyy+J(YZ@;VQI;z~C&@kvcK79%e
zH)s)`SMDz?G1rI3pDg#6TW2aa$G<Q4zs!12&w6kH4XM8igDtZjuuj_b;7Env2<L?p
zo%95gPwU3<^G#vhm{RFyjQiJp>^<t1`Z7$(SsD0`8CbvY^xbzw4y(kLN`LJbU1ctQ
z5c#cwZllHL7jm&~XZq>*x0U{f>Fus6{|u=7*Q$I``LNpmAi>{P`yUSz@+P{5)GWG|
zTr-={xOi=izZDNtPt^FWhHM?F@%Ovq2lm(ct6cy3pO?h1r~RoWGHsaO(n5;tW+c5b
zrG!GhwknafH$w|JN1;!)5A)w|K6!1JpD~e4oj=P&E~xW=K5;diw3!mF#UC$EbD#Q|
zg$LYwdUbqBy??Q3(}VT?N9oY=2LGQ3N{0If+|>jBFx;<oPp}wbI0~R6H0F%q>jtM%
zjDfZa&F!S5#V?NVr%ipc4}@k%eR0M}e^Pydga*wTDNRM?M*1J98(d4w<+Q9Nabu%D
zzSf`}xNK?$;m&IG2iJ!kjm(H-eHfV=oDYx7_hreoqII4mVXqS%bG0N}Cu-=-WSPO(
z^=3v$ga}>!^OlZgJJ*Z6&dhiMq=)7(O9UC7JD6IS)#2vsFnycR>(0<!k(r>vDM41P
zsHWX`?~U%Tk!Y{eKam=Zg@fD6jXDZ#Q+&}VKinwzHE=c*jx<}P3$k0oVG1U*GgVGR
z?xKh3r8es!th}tsOaYBs%^P`cOtS=V#VNBqoUB9!q%)kNm;>S<cc}jO7o+@aZiE^(
zUQOF!F4@DQweE%urD;b!*veUUa_d@6wg;jxtlxm0QEnS*)cP-GS{KqRepBe-<b~4j
zAI9q5d0#jsY+Xp~NbUQszdqZ#u=;Pq*7p+*+ik-V`+OHm8r4ygXls3ZW0T*MYc=Jl
ztlazPmKfXyL`Im5G<pEpCub`xI7$?pKxgu|!*h;kv(ngaHNdm*sj@IA(Yk3o>p?UG
zo6_(EL8LUCD$QI8*Rs>o)*NtV|At*RL%lhiNKb(Ta-gS;a4vi4QcS17+&;x>p%c}f
zMt7FBxE(;lxy`T^^ME>QvWuokHxwI5wFa!Paa|IR7RB@q!L3TPJxt~Dy{)nbkttYR
z&(cB#x=!9y!M%Q=&V+FvD`Y?-Gh-kbSKHJ^Oitumtvlp_ljzJ=hz)aD?I~3_!u9k>
z$_SrUQZDDq9OF?&n8hev5<BY^D}l;DwpM^*Nk!QWHVTk}ifLjxEs96~F?*M;#`rG9
zNRRH~*3;h6JfyqTLwXyQ=G05TobN2f40hBSWKw!HHNDOLn%spxryw^;pBZ9`P@jvt
zjEmjS-066{J|_p)lLn|Lkqb2kj!4v5eP{E~cDc%Sx$5W<KDNt6J+3)Z+qlQ+vJU;e
z{Vpqa(q)bf@n4M{=Hqwys2=Br40FEAwgD<iUA7ezb-7l3mDdEeRSkj@*L2Yyj;3z`
z!E1+%IGAYg+t|{ivkfAKnovM>aNMzX`0Ek80Xw~#uwf{I7Z3Jv@LTrBMF>s-MgwaH
z*EEcYZSkDL1ZgIDtxPMEDei`8JLp4tof^_>+h=1iM4#z$VJ_!tvla9fqAXw0Z-2;@
zI~no@Z2fEV9e*1`e$<HPaI<LLGb9aAQ5tevLD7&Kn)XH$`%OD6B39^dp})`z`kQ;Z
z(^}aJ(^?&V(`kJajvv+G!Ty>CAaqfbI&3Q_>TsQgwyp@ri9`O6#qqi!qn*d`gshqI
z9y-VK^cyppw?n`~tkn7Muf^`8k(=*}klU_S^q-L?Zjjnc>o-E`p;Or+H4CE%+EGYd
zH;B_Z`SWH&%t@8PQbkK@^JCn=IVDbdzim4924k!ekp?Nr;<U;y8sge>a%QzMxD5)t
z8SOf%yGNmPp}Vzz)f85494{oRa~&&m-4e4p|Fv^?5T$JcR1zB_P%6;~)7>oE)*Trr
zn3=#*CbL?hG6{1-mMgnpOT}|EKa$WcbG9$fhuEo{$K<z($aT!OTH2TJA-M&|S(J}M
zr;o;D3P><no+^-%WLA^n@V+|9QqrJ)%fu4KBq7#CeJ<{D4j3GtcqJ>8HjfL$t0s@w
zRe#k;D|bS>YRxKDTfl44zw#kG$=e}bwgD7YE5x=HFw(~XM^XP9?3gzcq4^v4KjA=i
z9W&(*F3#dUCHMj4H=o+YGh4X}9EupxJcrVCT(0cxK)^OYMOo@?#{BpY&=i9xSH?eY
z@yF-t<P3(L|1MbEkdD>CE~B7hAP~{c!ChBb*vPFJAO;?QjL^|aT-VKG;vr3%d`%#+
zY3DLqoyaC(iiqTkyihWQ81LmZi8Z5UP$<dS&C2SqR#HjIig8s1iLF9{3DA~YX^9%!
zWma;epYWTU4B)s#X9nNaBf@byb_AO;GHlifT{?-z5c&aFT>h&<gsrAyRbjPy#L3pq
zY>v$W3=!!PGEgzAW~asA)VBmLS;Q)Z25+>8y`8Ba>c9)S!n1NiB#<Ho4HcOL5cYMo
z(hec%rt=iQ8CeYglb#)8T2;wzlzM$;h(u;xYw)zVTHKWFvFR`>6w$m?cwwRA8oE~G
zNuXsQLDz$<ZgrE4$v|f(+I<rvXdAdx8<?<O;<X|%@!-IY1aK6DaqA?1OwL?(j7-I+
zj7C*tPE1sxZAfCM69oTq=2RUcqhsV6g_@|fGt0qK9dD2h9-DFL<1r+!!B0STjN(>L
zS`#&PX2+^|hBT$1jMWH+Xo4YRP7cRk6#FKUAyOUYpn@ClNxr0|wPtuknAnlE@}b#6
zMFua3hvga_prg?NL<;C>zB~<ZZH^<`ItI=BD8YhT6GDbG0uV+vRbYVuDz<`pH`dzp
zmvG(zs8`CxxqxpjeyR)sC7em*okeBh!z6?Y3urAPTmUGTz_u>8N&wPQ!%t>w^C)hW
z2`LL#tOx{G0>L$p1_tPOU(n037U-jthw;%<l>s}EbQS|*1%@J~)h2phEpQdVJSS*r
z*ZK{BB%mkX(hUqf`A@X)e-CuNH!z3G0l-ifU8#{KFwn2egVw+l308xEm8!C&1aD@w
zj)J46561}JwP>g;L^Zc6&B^@i$jEqX5ac~|mqW{jZ(>1_7Q-$m23VNIX9ToTvJy!{
zye#Y}4OB5pM;QV%dqCDx1b8HUC!=0)5@94V22~9};ZZF;xg05Qeo?v_poI~=MNvT;
zdjx~2SU7qi3i&GGXo8%{C_qopu$lf)fB}~qn$^$^JuQk@gJ}W{D|ALotzg6pX=?Ct
zK}4`KR2|j0l*L9*hq_M0Akow1p!sPUg+hb_gBJhMnhO6R34CtpJ=0&*zd2JUV^v^<
zeG_XEt*jCv*BK`oB^=(z<oXy=ZQ4}MM~3q@rfeXm09=`&|D2$QVZjCcQHUu>9gCL*
z-W$B6z-rJ2qF}ib3t^)iVl%)1x}YP%K1#D63kn5T&Zy~{oX8UtU?5z_3OR^Lc^(Bn
z8gjpHITo|#LY1}KVrekjELE(R7VHKxq@=S+C(YEWq`q4EC{>v0qgzDqa>wapVf4in
z@+BRuF&)*!W5f6;YB#71Gt>@?6!nnW6y#T8gGo#@!-TpalA;Dllsx|9iT<b@6px{{
z>kEu2M_(<%fWrkgfmER_+yt(MgeWX7LKLuEUsvZ5rP8no5t_$pqgvJ?o=MRM@@OVj
zv#_CqVx_MI4zLxAt8+E9#wwnKw!&WpLs2Gy=KmGO3<9#CRxF#AGdi}ni!#C(OTx^-
zp=y?L;A>WI^-!am%EHgA;7B#p$}E?L)*OW<hRUEF7q;X~&r(HrB2D632`a}$le{+V
zuR@dNqwoYBT7oAi3eCvGYo@~~6e9`ZSrL*{9)l!sVHQc)0u+)!7lkC1c_c9!Zh_CJ
zN|{T-5n%{&AVi!uJSUO>`X*6SD7E1St1Me-HCmBd$+^lrlto{dWF-cwhKN~gG6|L%
zS{%m&nUhV*cudP7&Q=XS%(mPdMCITp8>(WLA(F!H`uNrvekS)ctxzX8)e)91H&^b_
z7@NqNAEe0u$8omK;Bki?2E0s9s14{M%Qw+-b52n!tU1?{5O7g;*fanpIAg}5))uID
z9^AundRw7MS;e-N**su&T6hEY0=(H#SEIQQ58U(&eee)3L<2G5kaXnfuwX{Vos~lm
z>|Pp0X`byEGBNpnSZfa4O~kHxk@KNq*IQxmAT@{3)ieB6VSO<zH#2fj-+v6djVGF8
z6#n&w-&QB#vLppCUFjHX40vtlltCRS6N=_$y(KxY0j6hf%m|n*gc6{{h#L>9MC!#6
zXt6qm6Hvbl0e?HZfMEqN(^IeHW{v<{)F>6P0+fi(+zj24obk((Ad=()ZT8Xc{4_9J
zQ!;S0QW%jC`L~+CTKEl-e}nmJ@F`W3sjPA;fw0}3jCalQPh>#_Z?JHn18R)1?5LAT
zhfcK_%Z^3`RUjD*fXOpV{BDCrAV4xCaF8m@5>U%%kU7n%S3@bybtN@`r4|U)58-7E
z%K%LBpc~5Y3ki~MDK-Vh@k536zvpH79$p%;E#%T~@SjOLA8N<$nqWOFY*gwnL7s_i
zua3h}lekx|!&HEi9Wk+ZJyTE_KXj5mHupl{a^;DcseN)Y(+g87dBF!a^Z(ID4{6@Y
z5pXxccHnM~m$4gZ<H)%NzE(yK^Fv}VLhO?e1q#6HbhbhhSQ~@5II;ZL+gXDwMP`zT
zRbk_j|0;@SFv5zqugpY--<1t2>@G)Mh1{68C@A8_G)XJ)pG#rz(b65@)Xa1Yla#PJ
z>6o^OEplPtngXk2<;w-5GVnzRBCyD1I}d}Dg7(T55F9hKl*=)dN61BHfq>@%2-srE
zW0(Pfne6oA4HVyn398#z^B)d^0@i<UC5JB*l4cDkKpS0sl+5!4St%`N=Q|KJ2D(7R
zu&3sL2ZFigr4D}>jMIr?(1^`>;ZK=GF}8A*h0Oq=AIy}paEw%0sxeh@2eHbmrIkM!
z?NwXL-+qWq{HOVTgTLpg(zxbSe^J@t8)Z&+e|*uY{#^IO_~ujnh4y@h%lVF<oQlg3
z>^k@2hCaDwH+!1D!2M~w_B8+DhQv@%i;v6+jD=c!+UfpjN54rtzr=e^_h;0+c5~@u
z$C=9~e)Qir$KN~MZ%qH{CneFT#%X_T##QQno$j~ReE61pPB(i0E%6Bp{0?vLE%7Z2
z{Fa5Ey+wdF6|+c2pDfC{Hy_tcur-NIXU$z4KQT5uSQlCwo>vz5ld#PRBmZ*m&RgQ^
zBEO^NbGMXc+=cQVbKfnco8!k9`loUYqrbZ5i?@`vTI10m`rIu8w=VSS-3qxJz}r2C
z%j5P%{_s<bRSMTw*dde6dUV^PKo=a)71KT?gl?;Y2`{neQ;$li6Fq*@XFs0X79Tvt
z8@2aCFN}=evB*E$yYH5P4=nQk)!q2Ky)Dv<Bo%0FmyhEYO(OFwdd|dXE}mj_+6>cZ
zJ6pVnFOBO0@GLr%l!CDZVy^LeB721B8T+|6EQs%0?2qzq;3AIiE%tZiha5vX8THD@
zR$>7Lyc_8Yx#oE5i12y*!885rC=6htXKpH$EwzY`4Ax+NNE-O&nf~SOhy#zPt65(M
z#Qf+^^A!4f-Ip2$&RObDbNzkT5WnXvfBu|;*{?BII{0T}9`x06ui4(TelPtm;V6zA
zhLlFk6iL=E-W>n#EPs?cFHSA<$6QtxrFVp7+mhpF(E~sJ^<VH{GbHu717H0i7B^UR
zDsNf`%g|in7y<Kk^<kd=%(pi<&cq=B9h>a8R%Tk__b&4<&b0`CRd*^%r+bLeUCxX2
z@cn)`6LU2^1Vv{Cwo<h4v;@yqoc{%k95%ROj%TBj{f%?|eI}LrSmyeewUJ@6zjCg>
zJBcot>-Q(o1#|tKdY_x@&ztLSwOMD*^%)g?)H>I{!p6e6{)INyIM-ikW9hm65*tg+
zHT(@<&?I^a3iD^)=JZw4T#OeNJI%?8>z(FgGSofI2@%=|n&ILJa^pnRr#WL$IuMM3
z)Dw(mbs=bC%Y$H)xJ=oHvQ;z983`FD7y%h47%tV>G^YW&O;8WrCa8lcAQ&cQ8c%|7
z3Iw(CU@^_9kq`4}PBrQ>f~p+)GQvvh5TimqFQz%=ND2h0Of&Od)B$7<F>egP6|C0U
z%-yOS^~5iC$UPOK2+G=Uk%OwK%^696yQC2W2mo>)kDS{;04G#WP~GO#5!AFfy8IxA
zu3T1|kX+qoFs#j~Az+QKCV*6POhya8tWD8#;ipNyfXWF*ibe-vW1EBNWjLzM0Y$<l
zxoHZ*(Q?xiNb7}U5ssCcrXU>G=0J_YW-urkqeYk=PRej22I0g^M!|$kRzXW<d~^`A
zTK@dM@9>cR=Kg=_F#R6ihA*2S%(gk05{H>KM^{3JZ8@hog6+qsFl^B!rA#%Qkz`2`
zMKI>AOt^^a!dftg<`X9KY#ClYScXc{)ft$>P!g}j5x*6&7Fu+Htl&^;41e9wxeH1Q
zz0zXfoEbXCE-Zb%@tT>77Icyl?!Jq%gXsA^Fl6cbUC;0v3xWj;y$riG3%$9%qcJmU
z`bsFT%<MU7b2bYAk}P&fvL=RNi|7#7>OlMXV=g_eO8=Cz9=dP95cR3dGDv(Yvn=I7
z0GMWeoIb}NF$KR@_Ob|<dCe!{6Ite1aZJo`k9074X?MKx9DjK3CF_$7-V@g?LN;#e
z6S9@-#6!>*mf%twAc}dTHIXklg#!!FHQ)kqFhYE!1)Nje{X5z5#Fau5Z`iI9)w35;
zB(<mxPJYFuu;*fUq6fS7mR6FFYNZ+Fu0XgH1sLL*q=hcf;~>tNB)hD7IzD5()df*`
zXJj0?u+9Naofo5F*Ibp6_SU5M3us0aOeL+R%Rp%5a(~gOoQ7tVra+VrWfX}`nL4Gc
z)&sHfGKrjRq1!8pr@ouRS-g*bxE!ES9Rnq6W$tQrxJN$p7JlI$Z+i9S&;H}#pFl^U
z+}^??cmDJ4Z{7U#dq0^o^xIqbhhKi>+0Wkf+FhR`p<g+E_1ImH|LE}-{_!g$?4&>$
zDvL6tSUfxtVv__V=9=fpPHL`mp^fFzbDb+}v~jMp(Z<5LEH9vyzrX`bd@44>__@pa
z8`zi8{;S52^JT!P`Al$4c%e~*2iL@?zH7-BGY~5Dg&->>=yD+!C<+s^t^t@QFP>vt
zoRGN`6<9T$Xx2f4${W7#%^rAth2QFW2hWUK&-G`PzxrX<x!!f1HF5j7{`jUfp6gUO
zj^pv$_W{?L9k@>LA=mkx7k~O(zb$_LTz_&r{ycwVI;dLJ*Xso7GkW=(I-@tf<~)C5
zX^>jk-nTJ+{5=1hc=js)f`&!yeeF(1_u8Iyo4Pm5xUzj)$DG-5)A|0V<58>q8N>Jc
zu5%J~y^G(AG$l=aYvMJl{pN8~6{R^TUb#ihd6IZKh(EE~ALpGK#9v<RPxmel;@_<H
z*L&X%;`1)>Cwhm2_+1zHv*SY-_#@*B-|3&=Z77L9^iFc_DT%-QPH4{~CGj8L>HoL)
zPo?p1F7z++>dNA?F7lUqmz2eyxX3@v+gBDpeUX2GSDuPzT}+AdQt`zX^W7Dx_?C<H
zJ{A9;iz)A^RP0^ix1ISZ8h>fI>pTxEJ9>M2dbdqC0YIYTj&m`s-kH2F?omH!>XE($
zr{jAr@khkZUgA#(9OvWZamA(7{Yd%1tV{jW=-iP<gG#sGiEjE1;XWt2UEw26bdSP6
zJJDAOy#=3gqVFrR@*7U{GeufncB0=B@%uk^n-jgJSoqLao#@8z5^L@JofG|?V*lfP
z)QJud3l<Fg&6l0%Aw|=ld*XQ~dQ8zNxnEs>vlIP<cuD`u;V&O>q8Ak3cjDcbKkGz)
zQ9StCqoY6KL?3>P__wA%^qKpd=o7?C7wl;3to)f1{k<NZ|6nlw;SV{{m-TSvfp5LA
z^NUXOC=X@*?;1HU@yAa&(ZB0y&w=h)JOB0rPV{R%-T%(=iql7IyxWQX=dpokr~mVY
z(%Cn-PTwi<#2fu_)Aya?I`;znM!@Lv6ZY;WP2m#IXyw(eGm%ih=9}Id{mtIfr^G+I
z(O>M%oF7m8h(EpLiutZHKK}Yg{K-{wW?#9fZ)MNbC(hh6KmG_Wy+`K9U;PLp|H}OM
z^^brF^G=QD+(fwb)Pe4s{IRb8?bm|%BYXU3bN3zzDnEak#xq^v8r)TU7;#N2#p{Wy
zk$N6c6dy&Lfj8-6iI)&pzHCu^67kX`eH!sH;`(NGK8_CEIfVzInO^)2@$w{oHt`DL
zD)@q;_!Yz}lk`sFq5-Pp>Z17jh*u}+dx+N%SLL5BiXR}Jt4&^fg@<$!|1R-i#MP*0
zisHW|UYDdFAzn{hjjgL3j87omkfgtZ_;BLt#PXu}TH+&Ydd}I!!^kAl9^%3Y^=^Mr
z{2=jBN&3GNZz8T<|FI~JwXQQdNpB@ShPWWWMe2q46~xCT>F*&v&H?_)^hq9?2?eGv
z7sdabc$lRB5Ah6fL9D5IFn$X0Y?8i)_;})iWPefov&37H^oNO0Na8Q9=3yca0(V`_
zV0<3&NlE(U#9Q^A-v^4~_Yg<sH|b9ipF&(i;?)jBxB9cHb%#SZ@R!f{Rkb4z{Yyz@
z#cMR{2)~1sPV_Pf4@@6u{s;dD)g#yUc679bo4R+jcWqi1ZtdCB-Ph6kjjs6SJD}T#
zx(4pM!=K_dRXgXkUw!_rtsTy~>D@cS%&Fl_XL`5rb)fvazUMZtZSU^x=?kyy2)jEr
zwD)b=(LrnYx1h)1&A^WT_P4n4-LLrLo3CtN7xqyUm4<73wrp+hr2!D(ZlpeE#n$-7
zM_HisZS7U@1CKJ37hDzp*Q5UQT>n)Tl3IisZg8E)d2WDItlu_Ws~Ia?Pp`fc4SzLx
zS4?IqNE4a4U<jE}IWzd?JN(kUmh_|uzsqx&JU8~bIVa#jWZ~e4^w%g$ocliv%_99l
zXxjQMebcvY1x0vwf0DL`xF*3vJg2X5oo9Bs&Qrvnql}*szR2&F{H8+pF6^`6x+J_R
z3EyMF&~<hbnNP-B2}K}PF|P2OJ88ta55ymQ#Sbwzr5VnjNj*Snux+quN`IR41xeba
z#6@8AwVJks^m1Tx;ck$T8Wc`djr>kZYE*eDdn4i2q#Sjd-{P+J4cj!UOw&}DDtj!+
zBx0eT`uPND3V)G=zfZzHCE@EySW2bJSCfRplW=U(7&QRew`twV-i~b@-F*=4t?_sN
z$G>#MN^<OEs2A~m9if0Vzb`)Z&;EJ2hv@D%d7mG#t9#qG=5gm@@;#rtW40IqFO)fW
zon4s@CpGJPCk4`yr;Xn?DYJ3=amw6gv0;Al4)Qqns6x-?#Ug%cpb9XB@{wrdg*<CH
z)Vs5{$7lS-pW<!W9&i7Pe@E$~FP2nZ;l}%3^_%0Fuli%+ue}N{5<U9clDPj>fAeLt
zlkWsRm9>OW<7ogvybna)NVt_>J<Ofug6z<#&hz<ZC!z8y&$kJ8C(r#?$4g%GKT+OC
zr_TnR+u|2q^P6+K6$O1nuY^`+MZeZ{_K@C7dOx3ki&>)dA1C2|k#4$2o<7Luy@U_)
zJH-3mj`dv~Yx|}fvO{^wr?S+vgM@lkUUlz@o$g6yYANxNB-3+ACQZ5a-rn|Iywm$v
zd0tNV^3J#?2*$-vzwY<f9oS{(rdp>=pV}379r1T~HSda_JK|qiem<SO|6TO(qbq{(
z(;iohwriOb4ys+xyvKg2T$&=U5(e+q7q<ta$3DfA=0hVX0(f-Wf0tDL^LSMiy!)d+
z4%%`dZ%*P-_;drcU9WGcWAnD2?&*d#?^xB>-e(AF6L}Uv0`*?2otTe@$bT=tE~fGo
z{C4xZhF`U_aQpi89fmZj>_wFQ4EdV)_R3v-9owdx_j64K6`bNDy#!fJ!J0s#55k`j
zgsuF>@Kf8Ld3XG<8;mPo!t+XgP4VyCVB~qq@(o^Jm}Ju{r(tVf@7WzYI=UR^Vczv6
z@6=wWk$0;)I=V^MYJVGPf}Ms=)$G0|ey10FW_SRM=kcsx7x6xRZE=ksjLs|}Dr$cX
zp+3>8cM)DnclVoYXOZpPClsY~`Gp}razgs4q-*@2O^VQGfn)J6y{%_^@7j*V+q>7A
zVy~yzF<^IF{7-%`KDR*81ZLtEMc$W?rs6`<)gomNoD15!ws)8{>KdN&f}95MIf{H@
zE3GB{=Y+RW#;*wV?Ml*~Cft{NBc#($L~gO`jx?FB=jC}M-b<*D_FpRmpI&|q1smLr
zKOY2>CeF^;w&n#$0eL=Y8sCM4`ZS%3{}=@8bMNI@ELs+YktW)MJReN*93T`zJwy1M
z;`GxX>-tR{UF+;zQ(ocJl79Ps32`llg3C(Mgj??<)brXT+)60Ab#1>p!z_2#lb~_B
zA$f625`LOc!+sZ`8vR@@&Xoq|<*wS^)7L=*7T8%+!2GAkcZgr1q1*a;x3BG6tmZ;<
zO&Ry|UJb6g&gRQc0(G{5w5j|?C*dMO)vGeW$4%S%`0mPG<ImXHzP4|9`xY}*h0gQI
zC@86y`e5pH@r<%yR(Tf#b1U!K;>~5j=!p+13J`~`JffW6ckQRQUN`WCvfzW>z!??6
ze$S5kD}T#(6nmJkl`8J>;@?*XP4U=jytrR#5?m)FL%>fEe}a+TP565XJ@i4>d6iJ<
zuO*nOLNwZ2358*5v)(^K*q=Nr-Aq+N^()^um3uDv_7n2mndXHu9wgzBqKx+vH?+Gb
zP489NbA$%92pedu?a{>bOHAC-ynJU?k|xyMPvi5QQDbH$ozeG!V-y_Dzf$%UJgbiU
za=4Xe)wPjuA3y4PcTF&H@na@FNMDBnPR|b|qoVHuXIaNC%6W|6b3Ch#XLiTGstMLt
z|I%TpWUw`oL40j(F#e2nJgS)mWL&;|%au^+caim0-hC<|?`B5nPr{=-&-=%CFZl0@
ze_0zemp{Rypt&oqNe826K9jr^ZAli<u1$R%)0b`PW>PpTPJy8{A{WXNyR(A&8Y*7w
zyv(N}HAc<U5Pu{cl$8fGM6`HK{OL56Rq?30*Tmn}<Cx@aY5co%Fe<miX(6GXU-1%d
zX`ZclD(}_}dEc7|7cbJX`Mi4u@GYlh+jebR+uqeRovwHH(DEmtMOx;b1O_X?TZOw>
zSf7Nax?V&($AWcD@?z_CHbaY9Luinpimr3mQ1_9}6-hz2CHd!-E5GH`6^b)|5>95G
z2|edd!~1#8D<*_bG2fLKoKr)jf6G0|oM<JYgy&i2p9H99C(oA}WP#^0&n$8#^qqT=
zKc1xF5-Xl`mYB8UNtmI4!BEduo}w^tTFmoE!x*R@K~d!k+NuwXS;Zm|IA<r|%`Xya
zPz%!9#biD|c_-qp_iEf@EHW4KbSdwIj(M&|YvQZd#AntAW2Zjx@zTnV&eT$%x7TqL
zd^Vw^b(f3TQa8HJ28z?K@1q0XtPh@Us5yLxm3AkP>G97D9B2(@c{Qo8y!Urozo437
z2oA)1>Vu}7xJCWbB6v}WW|HH~1Xy}r!?WI>#Iw?emD=>VJgX(A6H2>rn9-{v^eU{z
z<3N{PxDMXQG@CPJf+T9?*H7i@pOG>-A#DnNdjG()Hks8ALaNF-3H8BENw}Y|!ijG9
zPHE-Xx5)DtdHmD|wxQZ4HvIkXca8R76(tC0|4gXO?C<g}_XaPY;-$CrM^5w{k?O^K
zA$>(`N{H@!?AWyDNQ>6qe9`jB`!<skMu1xN&8<o8pG}_MLm5JV4-%G2WcvycEz92`
z^quJ5@0C`b{PsRR=G()3JNawwZ||fy^Y2kARoPb&3gQ)}QpfoR!ZOsC-_HTfx5)JB
z_e(2JOx^vV_h?k~?<ES;qB4y_l=d$?i|_hcQrR}r8L3BpP+B?Rt@7rQ%)1{4d@XBV
zxYeB{O%eD>AyNySOeihQiAiP8Qi;+p<5}Q+gixxXX9=sE=n2X>`LFmkSN!p<Kco>i
zU3u9Z>(6_XBH_G}N+%Ku(I-H5G<H`fjrcc0F$|yKy}<ip+lWJybMo8!77f<XA3uCS
z&@JwzB-qlvsoQ<=+@B9jm>Kl@?zlKQDHvY4>gx8bTRVDNPRtBRn3c`MFU<<ZmM-k+
z=^CFk@v?=IF<R_H>Ef=Q_Pz;mdN#MUObktilBL~!lUhu){BO_)b#?4)9d8~}Rx3X_
zd0M*d;*Q>)DHF}RN|wuWI{G&DtUICABvh~1(b2oUtLJKpn>yJf)#Q^_qt%*bONp;I
zIVkm}=PT&wJG-NMMpERejy_xCOxv6k3HtQJ`00~_lc&$BgI`?R)4gN*`kvk`?R^V3
z^=&(;F`p)obgw(tu%7SS)VFcqyg9+o-T3y|LDTZHhUIguZ13IHp)!}Hk4mD^XV>Rb
zHgt4%^ln<axUZ-EoWhsAyS6Xdw1Fy@$Jfpa8qZoWJfGdRW>Lr5O<UT#RyGVtHs73E
zRY={^cgA_ePm5Q@hvo$h?)mYdQ&_-PH?&SEk_vk#Pv6knbM*!3-tFCeo3?aJ-_o(A
z<EriLUGJ>Pr)+HBw(+D{7mmn3C*jKW?oDf>zKiPf>08-h>7yC!vs_$zRAP76CHaKh
z^sU?b)^2R?y|k3hboH!V6G%gO+3@@as%=aA)<qp%9eo{_mx?{;S$joUZ-<GrS6;rU
zdsE*gl$r19xUx`n^3n2+oqcQT@+Fz}(4>=Qt!pTxRjHBN`5}*X#Jf(xweR|-_`bGa
zc<CAH_J;W0wqUHgG5-1NV7R*}zVDQve$3`k`R{G_7WejSSxxVI)^&8oqoZJy+ZC^j
zf`-vsMz&7Lt2NGP-?|i4>*VQbRre<c?pPk&Tyo_ZT^(Cm(8l(3cJz#GowBxf*VewC
z8QV6t&pLU|^mUsybZqOJJpG-$uyb4MkA8V2aOk`$e4}sHZtPgwxoZ2C-nisUwurV3
z+t$;IwsPH73NK%eSld@soV2~#JZ;;wzHd>_)!jSBv=(*;4M%$AuBF}UI(AN;es;&U
zZC5vK>)NyyO+r%Mir#e{y&dZ=0gh{Sj!xd?i_**T{M%jez6C+kly@by?P5;%Zs>S-
zBVTs(cDHxUK(S~Vl4y#riTlqC8ol?7imy8}sE@yNW>7lu+WOWhi4JnIRYXE#ay3PX
zTie(5$IqM@j9Pu2JG>~Jua;8LhK}C%y0u5ApZh*{*wHDguH1ROn^d)R>*VR}y&Ejc
z{{FaqNl?#9RA)cXOM_fd?}iV!%qKOjkZ5?}-SHhuf`-i>bZhjE&I)D7{-NSBcx7nk
zhl|S~F(HyS49ROq>y1P5Cf)l;+`KdxKIbME1kAT)V|(|yt`18>x9xE&lx}2<^*6hf
zdRS#TvHq5L^U~l1cW?Z$r9q2(Yy6d^Y=3{$ZH%L{f_iq8(Yk-k9jm9Ye(X+Aq_Jj|
zndd8d&)BlHZ`W<{>1PEK-H*rVWx;R^EP|B#iFoDN%&Fxa8$Rhan395-pCWeMvY^5L
zyL{5(PZPUONw+6S-iiBE%2@vn7Ng8L!8rFbwxmTpeV@(eIpfYaw=5Xxf6g6liuM<`
ze?Gp46!$KZIat2EYkz!bSuonaTWcB(F0&2(dt2Dz_O36uBh9xZ#J3$#a-;u6(#~BL
zj0k3asnGpZn>KXclhjjk#>{)&W;LtXzt0U73H^U?Gm2!~e~g>Y30g+q?~XirCavz?
z!lJOTz3YMavU7q~9CT&lE6xeVrr46%-Z9`#HBa$(&k1VBJm`)%`eQ`8O}%JI|Cw6&
zXk2OMrmbIgPq3fNT^`i<Uva0Hr!+cpc4^Lrbo91&J>*U{snwDUd0y4m)7$Yc1Gg^^
z{;tIRYJBSXn5ld%zU=&9l7BGYg3p~F)V|~EZqv~%*xqf_Ee2Enb!hX}_jIk3BIFzH
zG~1+#)j`_-rkjwv_)8bFBmS-U%NH}E-%c7D|LNkOdep;i{n7Po=;+%%`;mOt+Aaxd
z+(+Ymmjt87o%kJh)X{mhy>y0*89I8u8!xyNg8f*0*`>i~_j~cXE)AN-et+l(qWH-N
zKZx(s2am@;xD*)tFg|=~FxmY-anl+w_}}7a4Rhd$c>S7Sy!&MQp*6u&_eb%-8nXO2
z{>7T0*?lT@FJrd+dpwQ6f7+cBKXXaY66Y=p>inO$bK~z{7ECZt?lbYk%Y)|OKXr$R
n%bHIA{stuI>ge9k@w52i%Y!-o1HtTpy_W~GQRlP=-~ayro1|(6

diff --git a/embed/embed.go b/embed/embed.go
index 4bf457c..934cc1e 100644
--- a/embed/embed.go
+++ b/embed/embed.go
@@ -1,15 +1,59 @@
 package embed
 
-import "embed"
+import (
+	"embed"
+	"errors"
+	"io/fs"
+	"os"
+)
 
 //go:embed assets
-var AssetsFs embed.FS
+var assetsFs embed.FS
 
 //go:embed challenge
-var ChallengeFs embed.FS
+var challengeFs embed.FS
 
 //go:embed templates
-var TemplatesFs embed.FS
+var templatesFs embed.FS
 
-//go:embed poison/*.poison
-var PoisonFs embed.FS
+type FSInterface interface {
+	fs.FS
+	fs.ReadDirFS
+	fs.ReadFileFS
+}
+
+func trimPrefix(embedFS embed.FS, prefix string) FSInterface {
+	subFS, err := fs.Sub(embedFS, prefix)
+	if err != nil {
+		panic(err)
+	}
+	if properFS, ok := subFS.(FSInterface); ok {
+		return properFS
+	} else {
+		panic("unsupported")
+	}
+}
+
+var ChallengeFs = trimPrefix(challengeFs, "challenge")
+
+var TemplatesFs = trimPrefix(templatesFs, "templates")
+var AssetsFs = trimPrefix(assetsFs, "assets")
+
+func GetFallbackFS(embedFS FSInterface, prefix string) (FSInterface, error) {
+	var outFs fs.FS
+	if stat, err := os.Stat(prefix); err == nil && stat.IsDir() {
+		outFs = embedFS
+	} else if _, err := embedFS.ReadDir(prefix); err == nil {
+		outFs, err = fs.Sub(embedFS, prefix)
+		if err != nil {
+			return nil, err
+		}
+	} else {
+		return nil, err
+	}
+	if properFS, ok := outFs.(FSInterface); ok {
+		return properFS, nil
+	} else {
+		return nil, errors.New("unsupported FS")
+	}
+}
diff --git a/embed/poison/text_html.br.poison b/embed/poison/text_html.br.poison
deleted file mode 100644
index c2550ac3fef1a23da9688fe74613f32a357dc35a..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 198389
zcmeI*@2}Q%9mny{fy2>A4(7Dt*Epj=dUlM165`mAgXy%itdWMB&ErO97Ai0|EPq^!
zqp}D&&V->gomv{GKsifoc{CS@*|5^t4-27YEHyheg+_im`~ja^-F!Xn9j}|$=OJwR
ze!k9gO|x*u=DCxGZynfo?7OG`YW<<FY+U)D$+vIWHSx0@9e2z*;a@-5H)j9JZ*RY5
z!sUA}`dPXCQ-4@@=?_2s;?xs2^uIl4;pM#@Qy>3c-z}}*ZR)&sT5Egn;zf_nT6O(t
zFRWj8-o!J0`lWf@XMbqfSt}N-diK9-?^*WH&Od&+=f(-^Mqd2JxP!-zEcohoAA9H2
z8y-9Jxqse2__x8G$2>phPtV`9spHDmM!tF9to6J1-_!T4UvFNt;nJa1zd3$j-gl1w
z`pEPJ$9=B-nzfs^-n@V58v}Rm-Sb-4BfBmeS@7eJ+_|;=^@|_gxAx@q-2*E+E?f4*
z9gj@z{BzH(tCqZX*Dsg<VE=_*Y<qd)d98V;b#I+{)0~%II=i#A;m%jT(6?jv>IrLx
z{yKfpzjs{mLQn6()2B>(bmec)xaBi%-Z$@+k3Kp7u7{`ny?^}fUH9(3de@rq7kqy8
z?`Ld(qpy8(`PwJ8e1GPFlNX=(X7|q*escN7gNqk;zkc1^DNkIx^??)aT`{TWFIT?*
z)xOTVcbsz8*w#CP4_!64e0=r0+vb0)^b8KYJ?^Ucy`{|FapTU%+q#Y_tp}&Hp6OrL
zHhj_SolDCRPnR<K`S9jaPMTEwgYSR?|1S9Rz@Lf#@81jWHO*7A+m62Z%)@`H{OF4E
z;P^87_l=)@4-7ECK#qY!O|$yqF<qT&%V1ks`bt@HTp4=S&%Or+7+@gCz=5VY;>q^@
zsUK`Ra_r&%?6j@Bblv7>-va{-Fc4(mt)`iH{rg(;d&V5yQHHJ_J8*vKpEcIcz6S;v
zU?9i9o~D_8=$Nv6N&D#kobLKZ$LRlxZk^lVXWs(@3^0&mV0iRE?7+;jciWNuA1?hb
zO=z9pRyG~wXWs(@3^0&mpw%=tymd}_=8_MzdJiA0mMvpO&l3IYdtiV8267CPrfK$U
zENgx-qg+zTg{PDY#+9Wf`Puit00RsJ84wf*D1;;oFpzFQP#~ZXk}$wPx&c9ffI>*Z
z00Zd;1O);LAqfKvq#F<v2q=Uk3^0&xKu{o{5Rx#!K)L}zfq+6t!T<y51_T8H3Lyyt
z48$7{6r>*#TcOWcq4(C_x@JI7kbX$)H&ghn91JiZC`dmf_M0jERt^Rj5EP^z5?i6q
zS)upV-nwQ$P>_B|Y=u5&h2C3x>zV;ULHZ%F75bbNdT;HmYX$@b>4(Ht=yO)+y|uTl
z84wi29}@e`6n-lQ0}KcX1O?XV8DJpYfS^E7V4a=;2GR`(3Iqk#=^0=k-GHD#P+*;&
z0S3|y2nqxR*6A5wAl-nVKu}<vo&g5Z4G0PZ1=i^qU?AOqpg>Syot^;(;tdE2(hrGi
zi{(DIX3s#50YO3fA+dFO>+}pTASg&bB(_d(ot^;(1O@4b#I?n8pIftMAjg29ApMZI
zwpi|SYxWG}7!VYs9}?FV%YAOmo`D<#f`arz;@V=l&#l=rkYhkl5PwK)o!&Y<0}KcX
z1O?XV8DJpYfS^E7V4a=;2GR`(3Iqk#=^0=k-GHD#P+*;&0S3|y2nqxR*6A5wAl-nV
zKu}<vo&g5Z4G0PZ1=i^qU?AOqpg>Syot^;(;tdE2(hrHP(C4hsduwl9Gax8PKP0wJ
zZ=Ie21_TA^hs4(Dt<y8WfS@4#kk|@+&I-M^_SQ86f`arzVk`7HEA-ylTh|N-3epdW
zt<dMJ(0gldT{9pkNIxXDLZ7oj@2$Oc&48dF{*c%@y>)s97!VW)3aryJz(BeIL4lya
zIz0mnq#F<v2nwvzGr&N)0YQPFz&bqx45S+n6bK5e(=)(8x&c9fpujpk0}P}a5EKXs
ztkW~VK)L}zfuO)TJp&BH8xRzv9}?FV%YAOmo`D<#f`arzV(awQ=^0=^P>_B|Y@OaZ
zJp&8~3epdWYm4PRw`R{kjsZbI`XO;`vE1j@>>0>0ASg&bB(5!%``ns6133l+1?h*x
zwZ(FuTeD{%$AF+9{*c%@y>)s97!VW)3aryJz(BeIL4lyaIz0mnq#F<v2nwvzGr&N)
z0YQPFz&bqx45S+n6bK5e(=)(8x&c9fpujpk0}P}a5EKXstkW~VK)L}zfuO)TJp&BH
z8xRzv9}-)k&sm}O*50~iKv0l=NNk<nIz0mn2nx~<iLKLHr)PixK|%T<u@(B96?$*&
zt!oAZ1?h*xR_Jq9=)JYKt{D&%q#qJnq0d>N_txIJW<XGoen@PEK4*pATYKx80YO3h
zA+dFO>+}pTASe(NSf^)zfpi0c0zrXwdIlIsHy|hw6j-NcfPr)af&xK-b$SLENH-uT
z5ENLaXMllp1A+oUfpvNY7)UoDC=e7_r)PkHbOV9{L4kF81{jDpASg&bB(5!%``ns6
z133l+1?h*x*6FR&Gr)kLApMZoI=yvz1{e?&q#qL37R!BZ&7OfA1A>C|L*m+ExzDZH
zGmv9IP>_B|Tw5&nxixzRatsIx(hrGii{(DIX3s#50YO3hA+dFO>+}pTASe(NSf^)z
zfpi0c0zrXwdIlIsHy|hw6j-NcfPr)af&xK-b$SLENH-uT5ENLaXMllp1A+oUfpvNY
z7)UoDC=e7_r)PkHbOV9{L4kF81{jDpASg&bB(_4IvqJB!y>-oipdkH_*gCy+dIlH}
z6r>*#Tc@{9&j160g7iaTEA%-l^xoQA*9-^>(hrHP(C4hsduwl9Gax8PKP0w7pR+>m
zt-W>4fS@4#kk|@+&I-M^_SQ86f`a%%V(awQ=^0=^P#`F<PR{@X=>`M^f&%OG3^0&x
zKu{nkuujha1L+0?1%d+W^b9bNZa`2VD6me?00Zd;1O<Wu>+}pTkZwRwASkd-&j17I
H28RC!5?F(!

diff --git a/embed/poison/text_html.gzip.poison b/embed/poison/text_html.gzip.poison
deleted file mode 100644
index 14e457ebe507d4874dd78be0a54799e8a0c91da7..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 5723373
zcmeF)eT<!Fdf)dWaX^kLmK20i<g_tG0c!P61*f9w^&3SU0fAJciO>R#nX0jwKowQM
zj$qUwLq;}-9H<84)H8$t231U%gn$?Yf+VovOi@R>5Vl637V1)PlPwcNmb0;QVA^Zh
zrcIW%xjoO}bD!&a&dYONv>R*JpZ)8`;LK>|+WY?Azu)h=o`;YA#A>Jd-~C_v&42M<
zz4p?s`+o6vZvEKb{_}7D-~-?FL+||LfAPbA=R5w=+u!}&KXiHJtv~qq-~94_yzBZ8
z|HyCM_uv1^Q_ug!U%L3?@BJqq-}is~_Iumk_vN!c@VTG;<6rvAcmMU9U;e`B-}~_|
zegB@%{rGRa^7F5M=TF}F2bX^Q;CFoGH-7UMuV4SAy=Q;_kG{D7#h*U<x6b^*d%M2$
z{r~BUzjEZ~zxPM?fB#p1_vFw2mtXslvj_g+cii~nyZ`#%y!`Y3^z@JY;7|VeA3pKz
zKl9Ju{I$D({YQV{%y)it<fp#(yWYP1`CmBszklJaGpCL{`P%<|aM!KR-Tu}8=4U?l
zrH_8)=7+!Y{_ozr{mWnc%CBGljd%WsKl9O7KmTq2;)}ob)lY7m`bWR<2X_v9{_M~F
zv#)*cKmEN^fA4qx>_7PNpZKdMzvu4h+kgBs|LF4ve&!#3?vHPL=Lh@$@YcV5?c@*q
znZN(h_kZbUf8ox_@A>H9um9UG{`0S%{KCKbJ3sNkSI_*Dw|{!?Kl_jV%AWmS{JTH>
zh5z=y`wL&W^JhQ*`9J!~-~1c5fA{yk@7ArmfAi;l;irD|=kK0*=IEo(y!H2g|6l#$
z=YHw0|KS(EZU2|Q@~gl0%J;tg)uTW5hp+tTAOFJdpZuxIKk~PJ^r@fz_RnAc3*Y|b
z@B7@({pIa1|K6|uwg3F}FaOr>|Fxrk<=@}`#b5jXZvEcx{pu56{U876|NV=<{sTw;
z_{<M~?teb@l^=TL*4O^m7r+1Po$F`*<>oK_;4?q)%is2;AN!u)`X_tO{^p&(`^ESF
z>L2}Izk2ibpZl)=<x5}s!q@(A*B>1ILg#0H`uBh0_G|y!oj1Sme}3)4$Itg}zxe%k
z{<Ht-?yvp%%|E*H{N~x;_z!Ph*>$AX-FxQR#=#lOch+WnVCGL4`M~ps^MCmLmS5zz
zf8`5*`@8?2t9$;&AAH-_`FCji@o(iiyts4Dx{Ul))ldBGuYKE*WAFWYf9W6p?6sD^
zYF5!d+@1elc`6qx|Dv;gOni3w-}ml+@W2bt-v97#9{Lpjk*9MZ-fsNvvo}}%-g+Z$
zzLLM~&G<8V-EaSM_dmR~zVbb*xj^~T6Mo!inLfz>&pa{5H_X_1&ExTM{%!vJ#r2iP
z552eN{H!B3{kNF^tc?DhQ-1AN8{4~awEyeJ58d~`3;%c{7pQSgW^WQ(H~n8}>!!2Y
zhIw0e!DH61E9xdpp>Dc%2!>Dx1jFKFNn5E}5)7#zsEfK~JJ7ncZV|X_TGH^11VzHI
zy!o&1ZV5v<X8nSoF6x%;fV!wV^fz+d6wk_aBmUNsNH>O-M7cbM;E0_vpHkCJOBF+1
z)GgaVI3^qujt%yJ8HRMdvT1DEa61qT1Ove^*aLFi<i+H=$)%edOFP5lSlk%8Y4c??
zQL(XMZq!X@3w2SqYzH=tO=HvU?EyoNCCKa3L9Q#;E!%-$AQ%XSdwW15xCD89I>>dC
z=QMs3JHz-*x-pF3l*?o2G-9XB7ww>Ksu=2`ZrKiO8k@$Z8NVrepxm@_UAgX1Z4nFv
z1HmxZ0~*2QhUn8luA5xC@td?WjNinKVf<#kj3z2({HCp9s5>WhZ+-6MjjjIsYS+8R
zudm(Nf9&F|-qGat=U%ql`RO-VVA&G7JUDo@=Iaj?xi#v`hMIi(2c~D8W9MqF-?_yK
zZuj4-*?(8%u0;Mtmx`Mz*0?qmx8+8#bEgAfa@k-ZD%NZ-Vs4w<NO+pMbfHBBU1({W
zxX|LYqK!A4kz&;=<mudWRu)`hF6P!fDh@44UOJb~ty2<GEZr%j7%5h(PWCrtzm0ze
zVy;+eEQ2M*NHJ1uyj4Mpkz%A+b*FG>99m%kwLmRU3)Dg)Vzq<?SbzmsfQ9-LjKwV1
z<hk<P65`4hil4Z)A<vcPmWxxHrx2poHE~mRMgQI~<rw}#o5$FGU}CD?oW4!uxyh!G
zVx*Whk2X)7g27D-3sDdbjYBJ1oI?xg#i5m5!J!$%i-&?d`<wj5QcDgkm5mf5#W*w$
zElvT4X5uDEPp$QITlP3K4$Y%d)vSq$8xuE$1x!T9CwZ<sx5y`Ip%B8v&F(0LiJNjj
z(iOVk(lZe;vqXxe&GW6q+!Nb-E_6Db11py<Up;$n-|5Y}J2FM)J4G#V_xK$B^tq<^
zY|B4p`^dx9YhQ04%9c6(e>2ar<zUbE_r@<e5F(qe<Zo-div6|6?(4r(_x#@Tag^ry
z`;)$DdwO@|_n32(OmU;tW#^{tXy;DzSowUXg0(MUA(aht(}mUe$5vfvfnygMwGa$m
zLNj45<`&S>xdB!>H)%CGHyGROB_w#vzr@^BD>}E}x1V9qxe>`ULPI*2&J70Bx$@j}
zg)F+HbLrd~A*5J3Jfs*YR_ibJm;Ehz3l?Aj7AglyEl>-E1xy4J!9?V_t9uz8wNMBl
z&pn(<(R@r#o-5BS{vv6L`In?vsukuY(CDG*q1D%mxrJb?xrL-vjgW?UBgIIuz=YPi
z)_PKwi!P;N0aiUUJ+uN=4vj<8L#w2w;3nOvumB6N01N39R7+S$1(D~<bLF|Pa8tG*
zTQG5xx)}A6TA&t~2qq$(0&0O;s5Nty!RtimMCe2eUen1$FcIJSCgRk|8(XWL&U*Lw
z^|d?uk6pagJ38(gQXgW{vZYZIfz&*2k1ap^!^Z2jpUQIO$;S`%U;Fw=w|sPwA6tL6
z<zO%Trw{(V5AwG?kuH#pkDj}~dZ+HAD{++4WjohWaZ{NTH=Tt>+?}^zD%gyrof`#$
zg~U|Mjq%3DY`6=}g_an+#1eBcx7LVsZv2B7bZ#7rD|BuGE1esngZ&L+L{%0E0Wdcz
zh`E?sK+FEJzq8|R%w>NIF+`3!5s{MRw#S@bCB;aw(ioG9g%l;lNHJ1uAT?nD7KG(x
zB5#OA!A%?sVR_L|)ix29M?@hk4}TF=5tc7k70kul5`A%KLn*TNj9IbByUdD(RyF**
zTtXfdJjnjWorAfUD;1N9rBhHXVIdWS6eGoIr*DL`m^G;wEWiRRPzya1H<A6ybHiKf
zq3NLwuSjZPSc+@%+(;wkx$@kSHE6AekkDH9Ohn2WmRM@@gcOzM7RL4mbx1K%OmHK(
z5!@t^CAf*(Qg9=<8D5dp!mt#An<&M%z*|U9Z11_y>2waPT)KSq?74lXH}CFP)PGO+
zSgBGAEZ=E7Y4LIr?blv<;o1IcUq9aX6md~Yqh^u${rK!#vFvqU+?lBP?i(xBJ9VE~
zU9_T+47SWEE>O|*1i9iWZrP4@ZfIXvNKD1tpm<~23v*p)S&yWPb<QQ`Vs0HWkYc15
zDK^ecQj8QU`b)M@2q9aT{!bU>1SaIgtgn({Q7g>FT+AKVdsu)44sCqajua!sYO_Wy
zPz%%owUAChwS<LK5IwX)h?~t(Iz2Q!G(EI|zBbO3IzUS;_0Uq;I5ZB8L#twcSb&AX
z0(q`HSDq`+O+>7gumB6N01L2Cp8|t;BLhQBL^>O?h2kd+;u*vXWNPzh^VA(J&;F*i
zPUDRUBNywq(wO)G4vj<O&^WZDLIpRWJWSkZ^W<3?4vj<8{nh=AQ!tQ^un+~|&^WZB
zrv*2H8^H||!9*|-!<<dzI4p&yd2;SVE&NHUg;OVQY^`=W>)qqm*Y4~;cJWs4XnN9W
zp5^p|9e-CdTASFCDB|(T^M{Aa{<poKe}(O>_5N#L-`myx16u!MEt3ax_D=F|*Z)PH
z&foTSqksG01JyfqUw<g?_Wb9x{-XDOtl~!T6gO?21~u~*%#tH&H|eW(Zd3&p5>qjE
zO0MNXbD<>$FR{d2%&mPOotu<2of}$>&P`yYb3=5nzlj)2EipHh4RbNKj-c3I_P2Om
zSbzmss3KKrfm$dm5ZnlE1UG5Mv0hROg%H;^1UG`4azgabik}#Hs6XPYImRD``hyf3
zmZI(bN{XvNnHapplFp@b>D+RQM=D6?(z#MGsaTwX!94*BQ4sbw=`C{$;YG|XB=fe^
zlKo9(!(7ZI#YnL@1*Dkg(6VJW&J@9gCn)2&>u%#MH6c)SB9gpXWJ!v}CB*)+zvU9r
z{nh=guNPQ=1z6zFIJ9yKDsRG}acD&%FcD0IJXf9@r+`|Z7N~_`5U2Y)EQR6c>YgZh
zwQONnii0;z+(bje#7!c`QcKKDW&0C%XeYM!T<CN<2Uad!zIyiDzSEm`cNF)Se$DC2
zmZuuB&d6*{m>pkkzLLM~&E(~~uRV5O|Fy5@_nsgBuGENZUAFAKLjJ{m_^Ueu4ZDu4
z#RYQk<|7YR@6^40XnO7PUplcsikph3xUsbxT`)Tr7BYB}a+`07xrxM>i@7yusfDCU
zNU>mSGaX3qn16}6saBYaxtLq&cvygi!UEYsWGkc?DOU6swNMDrxA#&psaPEVa%hDR
zqc03hnqvMXDVA!5xtPnLacJojR7+S$1tG;qF;WZ`ZVGM$H}x116Tw6ji2w_*01M+I
zNlZi`ggp0fDn;}CO0}|1ZIF4En2WiXi@8aKR!dlb1z3OuSg21yB)8>>D-$<KUuvyu
zt(V6lwRr*-o<l3UqUZ6{C`D|La+}QM-i75!k4VK*6ok2Pq%b!?<COr37)vcNH<b-@
zF}DUS`^)|o&kGB%01Jkn(<!Kyu#gJEp>b%2pJ733Jw=^N1QWqT4B|QyHzsbDp13)6
z^2XL`r?cKYetqrE{$m$!^^T6uuB04qWZAO!7Wpyp*$-lQ^U4#6aT^~!cYpQT*GE_4
z|Lt@i%(ZMuWJ6*u(pUR%cLe5p&peexd+*7|5B1-v`$>1CVENCR^*bwWDxTuTJW*q2
z#?FO>44y^!b?>v78zjbD%$+T!Fc)(%ci_M2+-w07Jm+3A5m7-7Eu;who1K263$}=h
zj?dD$vAO8n#An%pY@wF)BFCg_F*l4Jof|4Gs<KGfMCV2Y>D-VabS|Ac)E}hSuoTy{
zdCG*xHQnDRMQo7V9-sYH_BZYv_Lu#wPYfv*$AT0i#fBFNDK;zxDHf$5#YnMXkRcTt
zmST}8EPYlg78NALNU_p>;LtcU4sFnB5!?h8VF4Ck0T$9JsFtvh3L?0Pv_cOp(h5&d
z#w=)5CHBf3?KD!16sxz1;6`v$x<#-63$QSDr^<8VSZJ*mSXSG_WO>X`>!F2^h^nL(
z*~}#=78S%?%+*61ND)|og(5mQw7{aUTv)D$riYeJfgW0qTA&uFg>kR_Sx^fnw)b4<
zbUFuCE?vHQ_T0YHn|F7_W}TH8v>fd5zjmGu;amCJUffwWP2Y38`^HN3+Sg}R=l|{U
z&zf;1E!3$ThOzH7vbL8q^j~`6+5S6qKi-(<k1n2a<g<#K3Zl4i78);7v2$S|gJ+IO
ziy^=6eHL@$n!{YoEufvAYhf<tV(vh;(zzqI=@c<P=0%3z#zYKDv2hS{!``yLiLs5r
z`{{?NP5sijbZ*_L!(7ZQpoIlkfQ50{N{SUi^tz-NDOOI1PDBaFM*bB^shCtOVPc6T
zDMpHsV&$TVP7EnVip_ooQYvQRCZt)+qz6Y*=rd_46-!mYT+GGX>P~?LSST#u&^R;>
zjYCUBtd_6<3$OqSurSqjn=DT`gdSQ1HJ;`PZhFXXxezxhNQ$KjVlL(u(8_a5hGU#*
zca&o98I$EPxZ`P_5eJhl*7=sg@>D_04bT`NO#@+=i@9}T%Kpa1!u}@nw%k%DLMK8e
zB9OxV4sKdlfCX59g=9{vB`m-KEWiRRe75HnPMy55wc6>dcaL9RyR-k;#aq3jsk7C-
zY)NF>-WD@{D9R>zI)B^Sjb6fo4^*#xef^>G(G+>jyPSR{6)C^i4}bn}{!8A^wc6fV
z@4r*`y<N*W?ZJ;#+*CZpof3E3xv-GIGxf4bhpD;5+-MkJZrU4|i@EjnLW(8EHYRMd
zU=5DU`YPr|tuPmJ3urmCaG;orxh2^k#R?%tCT!VX_BUZ-i6tpUiq)Mud2Y(HNikAv
zcK>#k(JcZdS)Be7b1@fl$Ik}lVlL)ZcM2&+iWL@63)BL&KrJL9R!dlb1z3OuSg23I
z_~@6`ddi*j(DcxZGgSuy7GR;UK;&3rhHD!pZc_i;lw-`6c$#NKWRJU!86S}6rUGFu
z=4$h3^Ta6_Bzdq91tG;qu_7`AH^r<Oe)dX$NO?Il4y|qhHr{|6Rf)ZlZj&iX4vj-A
z`b%qFYh7!-=+9^taA<`P!t%8!#lf4TScnc`c@h#!ElIIdHp~ssNX3$Q!CcH`e=C^|
z3$Rek%C~4(eqwvig-)k)VCB-~t7p&cJH2^#M}*>2=U->E7#E4h;<K;r4DRka(y#%K
zJY2o@_4c78Ulv`qL@(w4;_#z${P4|J^0&R2zxTDr?(4r(_x#@T5q2#4ICqOuje@1a
zIdiGFvAGmCZAUwInhnV3I~A;b2@9!gn42yV7h1@PhM01pQ47J~B{UP}Vr~H~olED|
z2!RDyfQ1lUC8A(|lZ9h{LwYsi?gWqdmzbMs#r_uj_Tx$RH%QF>Mvp;Qo`|v35_418
zFc))c(9*edZV|Vz01L2Cby}zeYN4<|SS~CVmXFU)Q456-f}8386ur3xa|^{^Buz2@
zk`zm|!d%Sd&^WYo3aTY6q=M+7>7muC)7(NxFLMjY!g^FHG93<$LkmopEcXOuGMtMp
zh2;TOt#z&S0#*)<LlfKxZqg|b+}xxVs0FR{luOi0Y9Vn_o-5Cl=TZyQLP~073$g{-
z!r%cpCW47zBAAGgRs}4;!k;QEoH}`9Yqir^?;gLtc4z;wi?@15$DuHCNCqEhnXnD#
zS>B71H0adjhmC(H?WyGDdrv-osQ=p6Pr8$Sk2(KiEeCtPzjyS%^FjW$Cz7t*_~^O&
zt9R-?x)Mie>K{F&K#H3xrnu=WG;*!H1yjLhEbZJV5G*97Vs6YaHHJV(*<U<#s@;U8
z3oTwn<3bDOTydef&<a8@7jx_D1r}fd7OH!aTA&sR3pli7EvN-*fm)~z1T4V9>_&~?
zMkk^O31PV&TBwKIu$%L%@?3dtY3b^rg+nF9NHJ1uAT?nD7HVZdEl>;8!uWg}wLmRU
z3)Dh71=SK3QbDwNB9bwPS7rjPnJkY|#0FU`$>Y#CG!AX-9GSR@V_`nG_||Hhc;F<O
z$eu%sOed-`?(wI$TBTx9LCnS6GMvEvvcFO>saQG%Qn4PjKrIw6BDe{)L@gvv3d<u4
z6_!V`<uxqRZTOs)9dj{PSRP2>&^WZDJUBECEydvS+_)|E(28%>Lp#HvacDIsz2l~I
ze6-dVz`}{`Jr_Ei&ViLnm#>~Zx9{}k-5rsPrYm@KIo-g<iCkoU?48Cm#LHO=zVyPg
z{nx&JyzwbacT3zor(qwlDsSa)dvRyFlHPq|rFy6CGplozapcF=TUc?Uc#50OLgQfP
zEjW5SC-1B3t9EYG3KkMmF*hjQ5K}HR7g}QQ5=+d*+&aObbCWcobLrgKT`)SA{S9fB
zlJI$#n2Wguw4@j*MvA4VT;wPfYhI*MF{xP5TO3*u4!y2UM2fz2A|e*npiKT^sU?S&
z%7(d^D;29!KUjc;!UDmK;6`vGxJg8;maqT|umB6N&<t@?(_Ee_&z0v6;yP-9TA&uF
z1!{p>nEZ5_$T6J_orsb?>i+JIQtWL$cb=@q0!vbi6eGn*v2@*3OIUyfSbzms;Ltd<
zky8K*BL$%rs0C^P7GQx|pcY0>0W6FZgj%2$s0CPn1!{p>7&!%>Wh|UJd1Gs}(^>Bx
zzrJ>7|FMg=dPmbp-_+&w`@W3B&8$J=1J57MMS4H~cel6J`>%a{Z`T41(EPKiZ)=%6
zn7mnMef8=5fwvp|+Xo-0-l_ZgLybRgDikLEQHmSIQ`~eG8t)O!TQDA&p7m8bH);h7
z2|t({Q#g&+QMk}tXo<l~EHM{z>v)LHP1>B!rE_P8hO-oHdUH}*VlL)lZaNV45_2&Z
zbE`Xr6eGn73#bKZfm)yz5)rE<EWiRRzyd7Pr(nE~t%s(ERvKrrh2kf!ZJ1j~jWTl!
z(L^@RG;*7c%ZnKw5Zt5!VJ_y%bLF{l3I>)P7NQ`e7%5gnhAGEl)<#~t76NtL<4>Q!
zAjL?r0$O3Yuv}PPE}BRMNwGo*sn}YS;^0lGScnd(SP~LTElIIdHp~ssu)pkYQ6=mz
z`&(bSumB6NAS^fKSWZD@*^M(raM7a{s0C^P7Cb5yK~>v7qme(A!iX75!A&ZV;6`v`
zoXI#-oB|GwL*vkfS0uGCECnf+2eZDV^V}2LdoFZ3odYYEE?+%+Zr|z6yF0>~PkT14
zWgsa7B^NO!cqV*x^OgK<Z>FH6``Tmo^<VpXe((9#A296~9sJmqgT2T^UVQe|o!O5x
zCJ!EYxO%7V?L+A(ExJ_PR58Vkt=$L>V>hN|%gm*n8z&bQ5{WT4d{Ohh&o@&lSo_k2
zmdfTrbD`C@80IE!U@qnsuSMt5xwWK+1z3QE>Yk()sD;7;CW47zA}Wa>TaYaj7RYnu
zxpiX<7GMDuB1I@oWF~@%U?K*A0<}ObPz&Qj60(IN9Qw7<i3km0;-&=AJ%e~rir64U
zWX?5>#i4O%1+=6XDMpHsVu^^=5*A<q7GMDu>QgW-wdJ|;TzRfMH=TlN2@9zpMo0@G
zMqi9Qa<PspjY%I6+@z`q%S(nMEI*t|(R`=fT!HAAxMP3WU-ozWQo`H>8V$<erUqqn
z<-92*skEh*bZ#me=3;IQTG@hZp#%!B01L3-Ika>NswFI>f^cXYS{(rDL=@qm69Egb
zupAanoxHKN+Ucx!k6&NAv;Ww|TfL*>A!+jN)v~3RF!OsSe&B=r)hCi8+W6?X`>WT!
zKDrX={i6Mkmgprm%_7t0AMTE1Z10(;((T-P^6^9ccj|u99VuA;^Je|}ikph3xG}8N
zxbN*;Sjga6gkSeQi@8B!%*EW<&2h}dT+AJqZaOzxfCSIEmrO)dkV6Y8a)td(jBVsv
zi@50cES(#hi_T4amMzE@YDtf|m|L1jumB6NP~DT%0<|C&8?b<hU?S?awBSZ?Q-%>>
z0Ty7PIH#dnlIO;;kmnXyR@+3L8%<<Av=9<el|=?wNU^9O=3;IMaRoO+DPlf1mExKa
z($K0V%cDmgRf+6BPvKAbD*GFE4(2A%=%K}l!Q7w==3;Ka1p6E2jr}!QUd-EagdoL8
zF`bA|8s-+vEfl3uN6H*pDhP+hq1CF>@N<%08kFHhI5ZBeZr%%Sma}C^kaB1o8i$q+
z#J#1tg*X;w#mtHgZ3%}qEQPs+D1|rTja?z(SmqoaB*o&+k%~#hYPyhOaV$u&&y*B9
zvAyR)r_(vGa_REbv*-4m-n_eGMmEzj8$RbPF>=qmmA~!9ovA$UzOhoh_Vt<78NX8g
z0i$=;^eZV{{R=GLX#|-sC&pcS>4j(e@6`Qx<5MIWikph3xN#O5y@Um}YZ^ASa}#)A
zA()D}iQ<iPpzUHwn`va}LW@h-h2}ylw;1MP?(9Yl<}wk57$X;J8YgL4(z&T@n2WiX
zTiq$J01Jf$92$pKw<KTz7GNR8#MA<{P!2@xvY3b{h_GB(Ucv_r$_Q#SD9f(6vdi4U
zav^S1@Cb*-p>b&GK-5c8j1=S0IJ7tggL?uNq97a^hgL354vj;rr)6OQ7GQx|*d<#?
z>5TbY^SMPLFcD0IY(cgVr+`|Z7K&!B?n!EaTA&sNfr1952BijNz8vnkN+u%YlgLrz
zSWbveL=g@*o38-!G7ImxNtjq-Ns5tTq*%FV!l9C4q?kNco*Sn?o-5DI_k=t*Zp)h-
z8i!_9?6cVBId$^J)@rA--aUSO?auyV7jN~BrgJ-C+44|-Er`+x%sk7d^S8adJKv}e
zK2W{(_4S9+WAuwIryJNfk+s3ezsJ<%<oUxH^6%#YZEvmj->LiFu6h3GDOOx@Q}Glx
z&O#&ZwsT=2gJ%(b-TN%&2H-Ila|>vxh0s@|SYm9$z|JKU$DoY4m|HiKn22PeFc))c
zSdwC-7%4We_tXNlKrM{Nq|^enKrK`bl!;&>3Ja(OYJpmy77`JwB`m-KEWiRR)Tdyq
zDbw~(7isetXDVsr$O#%p%A^l)XsIfKn_||kZD_4)trvutaty|raxA-|Z{7?)hj}B#
zNU^}gR53q&n~-9pSkYfnu>h-y8xuDLtQ=Y)1c$a3r8wApdUyIAJ07mZXE7IZbt00x
ztCyG?pplA6#mWhhiWODX>q^DSu8@j(4lN#j_r8Uc=`6LBilwrVVx*YK^2)Nq0xT33
z2yO&7f}3PO1UD5NVF4Ck0Tz-_f`#T>iq^W;dI@o53&l??*IGZZz2`!w(>btm>GIXH
z=k}f6yt|{6c7#9!B)1sYwkGvB&dU#fb!WtmyN)!P<BvRCz4rC?q4Lqx!<l#4BBrMQ
zN-aNp^OgK<Z>D3|eeJRP`tQ^|zxRB|muS-G@0$Kq#Z9$Q+-V1UzRfgp9PQjxHdshZ
z#oSPrjpq2s35ri;?2mobg%%gO3(bXAZZXWo+!~g!01L1%u-ViCwNM8J92$pKBmykJ
z0xXONu}nlEM87tIn+RV7H_^4xiAX|XsU<0v%7(d^E4Zne0k8lIg#{cMhsL3CXo-l`
z5*A<q7GMDu>QfLAO_`d}{nh=|{nh<Vr=VKGLMn*i=R%0lry52s)^VjV=>vkBR26w{
z$#C@04yRJ|^w9LsYWLoJVPJyC{7cMDwZhy48gmO_iZK^+F?Wy^!2&GQkKD1p>~Faj
zU;!3jp_0!`1QSuSKv*s;FA@P3U;!4)=cZFYEf~bBHM7>bvHfDDVF4Ckp*RN(N)5`Q
znT+j!rpNYAoxHKN+Ucx!k6&NAv;Ww|TfL(#gI_HNJEGJwjhuKmb@}1$e1kq!Hcj;_
zJo)&c{%c=9>87K!=(1(+wfvDSf5`{=+ny-6tG?l*=kBlGsr%?k{J%Z*kDgK>#Z47c
z+;kQijheg#Q^95|?c693EF_R(ZahxYXpXmB10^3$Wh_e<T3qNZv|!E^7n%#La07EO
zx4vFr0Ty7Px+kdxYN4=zLo0rwpA}IH)B?3o9SB%}g_;G_0<}Ob44i|=QRG;<j@mqd
zMQVXspcV$s0Ty7Po>rk2s0C_ad<2VHpcbeFY9XD1Y6%OeAUY8`5jqjD&|@N)2quDw
z7<m=}7GMDuU;!4&DJY|zLlb3gA(D8{MC5JaA-~#M_BV)Ue?v$_RmLxt5zwX&kYZ6m
z%*9-@VrIqCDX5mPkP6~Cv_gpfol1&@=pe;HNJLeV(wey>#iD|ki@61~TI<79$U}aq
z6xY0lC1OMG6`P)M%)EK;eZcT@+&P$=Kx3TAI8!a@+25kd*k4%q%wgfg_MQu!PUpbN
zrOQ{(p4)eN^X`uDl%uYE`h6dNSAKQttgpV)h=X2E7s$1jUU;_u+SiXaK7~eUNeAZC
zHz5`Wf5}_<+g{w6T8!_$u~NNL_nFn{wHx_a2@3U6aie&Oo6bUmnt2P39?$7p%+8Hk
z!9rpx<_5(ZN_E!NHTjxzp(O^n&|GM<AB}dQ(Ye9k$kWm#)xN}B%q^g$bLrd~A+P`o
zurO{@*xw{4*x!&|>~CbU^4#TYSyb={DMpHsV(CC=^HhQq7GMDuU?G`PSZJo692$pK
zY?&Tf$#8mILm`Gj%Ec+TDTKJ$eAkD$1%r4A6H6>PG!BhJD;G^jQBsT)GtN}?1+>;v
zdI1Zt01L1Xr(hr-VIc}4xJfq5(>xJTc*rjaiKUjLSSlOlVlF90ip41)#Z27fBu{HS
z^30ohXnJV17U$47w8BYPfCX5n?n!EaS|}`#ErhG07N`YkLAD@UD5rp0FccDPt&M}!
z0=1wM@pbD&oH}`9Yqir^?;gLtc4z;wi?@15lQU^9r;jfeDW5uqb1a`foFV^y{*P^M
zt@mI1`rfYU@2vmdUUb>gzg_MpKApeq?cMnod+>qkow~0-G{+y^d>}3UD8-H9DQ-Fo
zjnFV}!F(%5?IwNI&W)<TLNKR?xk2$p^x{Hup(O?{vBX@=t;H*yn{+;%8(NLdO<<*S
zLv*mei5N>QF*lVBb1`@JbLX-Jkz?55C4yJX#oPi~_Lu!-f5&@Qq*x)uwGH-{{VgX%
zCnBVmPDI%i{Z^IMdI$*)jYA7eaA+oOlHpu*$)N>U4TTsADPZN$I5c5-B{k)_=}v_O
zSbzmsh*L0-kFXF0k>|>DOL8aAEq-F;U)PBtuW3&LCDAcll48SBv^^TFxW@JqgO^xJ
z#iU~97RoIisUV$8=d!=-Z=3@5ckdZ$fm)yzsD)%st0gSJ0xZA+EKHqIGjS8%+G|+S
zHZlC1xM}z~goNQ|!_U!EOT?IWsfU*Ih&(rvEOQH~QRX!)(M0wdmPCxDmR~34p4i@V
zq0{LcSh;lh>e+MqPH*1bG36>~iC&Vfnt!?ZO8)GdNwjxgd+fgcYhTarJ-@t0X(`Vl
z(;@NMS9iwl-F0Lw7<cgIBM(>a)V+OZssA7E{TCEB6;E+Pcr~WIVmGF1W#-b(jgt!t
z$?RcnP`s&B^UahB*1mM1rLwuuTxj(zhPjCwn2Wi^V9~jBZY}9y0Ty7Px+kdxYN4=z
ziC`j_h)N>J7Gw*B1@c^ZZrvDz1z3QEND)dCnTcQ`n2153KrK)U)WZ0XglwS*hkk8z
zB0@u$xG6z&&mdluA~r}7nR88JacCS`0WB#;ijiWZSR!JzgaufD1z3QE`V@>yZF#Od
zSDq`+O{bt*!a^#D5z<14(SQGR<YFCH8k0UCxJgwJmX{1iSbjK_qWONMxdPEKamW6$
zzwGb$rG&W&G#Zq_O%2NE%6U^rQfW&q>D*K{%*EUqw6X=+LJ1UL0Ty7vb7<)lR7+S$
z1>w**v^oIPi73KBCju5=;ZtMb)X5uLtDVkz_xSa-JNu7aywy88o|jfOzNMEi`5R_^
z^@IF@Cz2!D_~^O&tJl6hx)SOAqWzDS=p{DIBGcv{?v7+^@0q94?c96v@k9N0>VDEq
zVaK9N#Z47c+!)qs-1l}aEM)L3!moRu#oV|^Fc))YH^(s-b1`>dy6N0(0TMjtUNR9;
zK@KgX$QAZCF}9Iw<&Yp1Y{rt#jRMiRiO;eH*+MPpF&A@7GYJ-80T!xzl3Jh^q+$aW
zFcC~d-If;I2yV(S0xZA+EEMN7R7>*QI2Q8U0?TTf$aABKtcMmtBC4{;APXrL6~tW3
zEg`PpW++9>=cZCzGeR0#)nxf{{q(5dLH0N99L!Ci(L>Wi(?hEc1T4UU9-1CnIt8%M
z6Wj=HN-WGoFcEra$yMK5%5&pb=%E!@R(nGaExJW|Xdxt`Dtc(kRRwb~R}XEVKRC2N
z2rR$?EWkoK1=SK3Qb9aHSqQ<Q>Hg~e>i%l;X!E2<hFbVKsf82UdoFZ3odYYEE?+%+
zZr|z6yF0?FMZsGP>>}}4eD<wa_PQ_bOo{BfZ>&_WeSKzi((jSKD}KANuTJlR#a&W&
zNyfhSUc;dI!{2G7#4qRe^Gh#0+kdC-#~Ytw{7-RH@f0`CLc<2wxv-GIvk1TLeHL?r
z>X?hU1+>&cNG(z<F}4xC%q0}Zpp3bgTU#|IB3UcU#oQW}q!=kiiVf^NwLmRU3#s>8
zFR2A;fm)~>C=<a%6c$hm)B?3YEhHjVOIUyfSbzmss87LIQ>JZ{PMgO#Q%NI7PS7|~
zCVhZIOH~ov6tiZ^ad(tr<UOL8i@BIvb$|>%FUNv(HM76$FZ-JgM7<=%LVuWYH04-M
zhzCwWdU@ca><UuM@N+zI<srY6=`6LBilwrVVx*XHCgV(T3I>)P7NQ^=8i!W2IETie
z)mj`DU;!4W1yhdY6jaX+dV<multm&i5ln<^LADU5fLfpysD)wtt`jjV#YW4&IUUWf
z@$vcTGg^wPxaH>g`VHcpI(cJjwbNPe9>2bJXaBK_w|YmD;4jOTy|>5~j?X?F%WE5N
zH^!GAe4u*m>+27t|F;)iPA^Z9@{9e%=MQJdzhA0S{SDh&>-~4?zPD@oxy^s+#FMYM
zsd$Q8&iKev4R$UpWbjOV052V;<`Q!QznGi$2IgXJeZ7!kiLs65_)Hl$@dKEPx%D$c
zOhhtK99lR~%*EU?dP0hkVx(B*O*k|Tt+0SvpcZC7cRta8m5VhUrsk4E<Ip&?@neFy
zn2Wj9og%mq+!Pj23)BL&KrJL9R!dlb1z3OuSg23I_;ivyH|0*+JSEyS<!JahU}54W
z#(YhdkKCr?@?ypZ1UIQb^4yZ)c;I9$N^$Te=3;K`-W#s~imJr@oCdX~EHM{z3tgmQ
zQZcF6xNIfG3L!`_QY;cfshCvE@N*Rt3(JM&g$2|CwO|m>AYPn;fvbdtD2OL0QyM4F
zjpR}fEv1o5E#<kXY?zC=q!=j{r+^eQ{G0=R!HwWXa5E6#U(fFEiS0cXI-Smel}nee
zo;|nk^yb|irOHEj)}mAw8DNOdzPdAv#I7TaM$ID+SFe4&eQ5X}kMBxOtaaH^o(z<^
zA8OxxC4bwS=@@ojd+fgcJ9W?RJs<7pxqs~J{_Wy_di9GcZfq_)H*H5dH`HY_*UINR
z6|8*;3#n|Fn=ULD+LXxy7aFw?3|>MrVJ_wt(9*edZjBIFfCX3x(N!V}_BUBL_BW&#
z`<oI(kz)u64vj+#OmJvA5lLAty5!ITtfUwzR=_GOFJ`T;!i44F+ZvDQkz%A+A;zLN
z@4($i#ZuWY7jsSARCfw2z(QdGhsL4lp`|RiUQ!E%5FFa!REi#l7SrK|pOcVSYDtQv
zvSDrljZ{o3RtJFQ79s^Rw~(}|xrH!q!g67GV8YyjxrL-G7hOul0<7j1%q<kKa%dcy
z9-1CnItA4d7E(b3H-a0%4J>#KONwNe2quDw7<5i$3$g_hH>rzZ;--oxVF4Ck0TxDD
z6|evcuyEzn$s1d%oz8mq`1Q3r`;T3`)jK+hik4Bj2&Bq;QIa*Cy8Li=Ogip8^HhrX
zdQU!nsQ=p6Pr4(Ab@W$i`|q|K>_vV|eD;G_-n{ZevYQ(pJ$HZgPTfaW;wVl1qo))|
zaZ|+<H=Tt>+?}^zD%gyrof`#$g~U|MjX9>q5NO-QGW`s?(BeXOp#^iOg)EF*Xh9b`
zH;55cnWB*=egJc$f|!fB#W~Qqbnfh2Ya&u-;umu<w<tQ<Lfko+i@BIPxKm&O7U~uW
zwLmRU3*(}iTA&uF1!^Ikf@%p1sURAZ8kBWLWhkUXyZr{V9$F-qdT8M<qAKHh)7(OF
zA>~1-bkPi#dT0?`m|Ms@26KZhn2Wjf*)aS({bHT-5*C)nox}bPrHE%DQYo&P&kfm%
zxtLqd1}R30kz#|GltbgtY9&c6Pz&W=fCX59g=!j04^0oP+zVRkTI=<_01L1H3zbCB
z{f#7^TG0I+UXj$ouoOBGQ3|iVD)(lI<L7Morf<{zjXOv8H|-<L4baGQgBZHMy1xYz
zy1ymmPZoZmrN>jFf}eH!dt!Ufg-)k)VCB-~t7p&cJH2^#NBr`GFl)M)in}Dgx^>o9
z-)S_DUM|P3Qh6`E@NECJuODxG3K+HQy~TB8bwRw9zwO1H$-ut*#!B^0-Dg%u3KrMO
ztWs<oRNN?@;-<6EP^x(gM&ohTSMA)W6)YsCVs22p(Wsft>q%^Pp{1(0&|GM<-%>N{
z>Y8jfTxc$|I@rWq%q^gW1z3QE@hg)QD}?BEWec)}azfZ&_P2KWumB6NFp!Vb0<|Ex
zse&olf^4C%K(-)TkS!F66g@<0p%6m0F#X@0*5)zJ6j?*eqz6Zm(wMX)#Zpx;7jro@
z4lPcB;KqDz*5;-hld{m}3F&3ZF^-9`{pD;~RM0aKse+h`xdpTwT4+<Pb*=SsWsqWp
z5F;-P^uUQHC=(`@SZYveP-;+?izcKfDMpG3%Z24}3WVjt@_bJSZsNAQ$)Ry*o{6Xq
z1T4TpVF42n@=2bX(iv}OisaHu+tQ5QQcF{gsce{wxq=(PO`HP3&7bz*=G4g>TdSSU
zdiVJCwLANdUA)yhnoLT6IlT*3q<p$z=2$*|I44E#=l|ID)_VW7ukY<jBS4ETTkiXs
zd<*`>r}MYH-FP17!3U~$>c0Na9Dnq*=Q9*Hil?~gEHpyHyamG?%=)UG8?}Okggwj+
z0n~_ITxc$|#NZ{Cn2Wjf&=j4UbUvL+=guCbo26(|mmn=M7jrQ;9f*2~xtNQ&)ty3$
zkz$1f)B?3YEl>-Ih}9AnU;!3j0T$|0Fy67&L(@YmjWgLo@e|iJ%q^rwnYo2%A{%EK
zxlPCA#f%RKZc>3T7jxyg^4vHD1IrEzQ4ms$6e}Xblw&b#Bmay>2-I<pKYap&6eGn7
zXocm%a$$M7Xd)FP#R?&$Vrx-~gUwd}O}}H??qkfwT+GGXq(ZADEWiRRzyd6oTbL{#
z1vlwzaA;vmgyq8Wa&ZdFh2?c$02W{Y7PQu73*{740l(qrXmj+a1!{p>fCUd$=UE!r
zf^5Nj?l)#W_r&&|3!P5qz{;h|SI?f?cY5>gj<|wbm1-7ob9df1U&-J0W|BVL*B-mC
z|Jv8{d(TJTY3?68yHPVa!kzWiS9fL(H6{-pdANF~?(IV<16_34(qhb2n!5^$o64rR
zX*=4v(Zp(atXTj^iB(#{LSV6_3#Pa(v{0@~T<b107h1W+Fc))cguntUz(Oe6;-X2h
zWR+zLA-$TD2MHeYFEKaOO14n&+c(9sg&?tPA;M#MZX(7~OUzAW!(7bO=BXl8Sb&AX
z0;!l(Oe&UIbM=y1D1_k9rvJ0Z8k8E8k&<ap8fQw%a?vFzMv9SQq}T{IU;!3j0Ty6k
zs=hY2U~Zw<Fu{%BMw>^QC!K<72@9zpCT>jJ)X}vm$08g?UyMDXx5o|0qz`DVr>bBs
z=8|HhSULry*iCt^JXfAOE~lu4#7Pc~L*vk>1!|!_1yzGXn@5|cq&3t6wIExNEu>RG
zEl>;8LXikM5jqhCj(_SS$5SV7Y^`=W>)qqm*Y4~;cJWs4XbPZO%9B2|!19Cq*(b`0
ztmMi^&)r|W_Vv+~$Uqaa=32HK?8r>Y8-3>ai68EccP{Kb^HkY1)!*>s<A?h1)cvHJ
zj?$t_#Z47c+?e5POdi;|u#myC2*2)q7ITC3n2WiyTa1{CxtKc$l<C}T0TMjtUNR9;
zK@KgX$QAZCF}5+*kwb!1uo+7_Hwr}OCO*p+WDB*V$6U-UgA%X+3$Re#lhgvWAQc<1
zfQeut>bA7tMsQPx5nurpV4*mtp<0sX#<7s+7Fbr>M4lT>WIePH5>b^!23bh4s37KI
zZV7P(H$y36J~x%(ni0~_swT^q>!(Kr53;{;=U{FEjUJjFnjTtpAYcI&^w9Ls(kXz2
zp5R7sQ(|Ezf{D;WORoCfQl1;fLJzILvf3MZXwfawLkl4hRnbFRt}2*|xq4^={lTFH
zLSO+FU;!4=DX5mPkP6}n%0dVZP4`##SNB(&N1G=_GStG?UoD*2-gBYT=^R+ObouJp
zbNfzj-rX^DZ7l|Nk$5aV`&KM_-4}PJME2b`R;t&&KC?RfkLQo3J<zh8-UW-hr0$Z;
z^~2w3q{J`h_VY_GJllV#?#COSV*F2WQ}Glx&O*Zm*txKf!Ltaz?tK<><I2EX%q^g$
z7D8%~Vu`Vh=w&XUI0j|R#oXGeF%kD>u?8Cgb1}DuB`HRVkzxaTPc2Xj)I#e0)=O%E
zTA&sx2g*b+5rqZR0<}ObPz#BO)e;t90Ty5Z7V1+l)|6=*rPJmy&Q#LKkrOnIlt~}p
z&{9<dH^r=(a@-xI7<rE<=3*}9RvjS2&&#nOUCrz-`^)~O15qzYvCto;98Ecv6XJoB
zkX{}*DZ7FcGyEJ+TzSYZWjaeOrDCaUq!=k?oXI#-oPvR6hlMBzhsL25EzY5FXtfrH
z1z3OuYQdCaIR(|TgPx%D1Z9y3Oav1lTaYcpDWDdp1!`d!zw1N{OR>@NZ%#+^YkYiu
z`iz$1DsH)Xz9EBnr%vA3TJ3b!yT`Au-PwQa;;r7%qWxR;-XdE#KKpbmuWh{D7+-$y
zf$FuduRoOj-(GY%y*x$AFZL6kKb#@|eyK|JH*9aM_ur}e-mdBAHvgp)Prl-&;wf%9
z<0DTs*txKf!87#%ymXkFOUw=YVs6?Sn2Wjf^+Jjz#x|PcGiBVw4`43l*3S$v5y?bx
zXyHIH7jw(#2`NU3kz$oM;m|m=!UAf6TA2OZ`9uR&F4lCInoACiL*vlKj|t{tF6LHu
zir_|YQ&>PPPz%%owUCHdEnxu`U;!3jp*{uU(@FB&lsjqjlxWwKqv7X(g^8OO^EFvM
za+{9Jiy0pf+@u1@b4!Nffs?f;#lf4Hi@CLXZ@dC1suK5e8q}Jy#9YiRbdicl#iU~6
zvXvAogdoL8u}BQ1Vp1`~&s9t;EEkp+7ElY+f<ZikcyS5_t`ZiaAfBL1X`DPal1n|b
zltwPKl;@_hVJ_y9Vx(A{0#eNIa}M|gH-a0%%|L*EgSx*bw)b4<bUFuCE?vHQ_T0YH
zn|F8ID|m}iU1WeEKKts<FcQ0tG#WLJJY2o@_4c8p4HsRulqUma?uXhpU&-J0W;%x5
z*B-mC|4!ZWd(THZdhQ=PyMG%6OD1&YQgLH**|}*u+PR@Fo4Hm#->G2jOIS!{!`yUB
zxzMIe9=On`g<$X!nhA3;w}6(;rE_b9zyd75LWr&sQLw+s!m+<0z1ZIrqlp|tNN{Kz
zT3~`h(}_sRa?vG+7GNdCNU;J|VR<oYeHA7w58u{!Opg>J#R@SNy?F=jMk<!dhPjw)
z;-<P&U;!2i3pg|mO%E+)!S#|_D1_k94yRJ|IJ7c@-!uFir3edOTCa1tcT$WLD|8{n
zNHJ236iY;`maqT|umB6NFm)J3Yh7!-G|B`w#ZL%s1UG?9!_S2fqc6rDxmd@Q#-tAj
zZc<e+7jw1Nwbs)qsFtvh3S!DJS|oaC(Kzw~p(G@hT9RU^Y?zC=q!=ldP5~*Vhn9v>
zgyq8W5`|F<iIW`KH-$qxb@Im6YNxZ_J$`-d&i-Q;Z}pB2BHI=l5P#Pq!+9U>4wts~
z%u{Kn^qzeDQ2({BpLCP(UUb<q)-hiKJ^Dv|kiYGT#JG)*p1Z$#r|zRGF-Vc_gSnQ9
zo64lP=`1v;nYUmn*o>u}8wG-e1X9eM(!U*Lf6;TPb`zE^w7Ae+Xu+H-E;JWfK?vqz
zZhgJL0xZBnbx%?Y)IwnahnB1bwLmRU3)O*u1z4zAKrK)U)WX0yh#W<ZrR%886Ii4c
zs0C_a;2dB97V2pgYJpmy7RG1Ps0C_)TA&uvDX5mPkP4y`p%bAK0Si4Qf{9=vn23>Q
z5nurpU;!3jp`3y;+Bq~)<`yD}_e@0ICLZ#ut!00Mc=k7hL{w$`Vi^H#`T!{w6~tW3
zH7jOTES-XC2@9zpo<l2y=-;WNScnc%EQCZ<B`K|$OHwQ<h`E?sK&!PrOohDqDwX0|
z<Db#MT<;Yt#F!p;v|Yl6pX1KK+yolqOvah&>xKPIjAegAbg;i+-l8gP*X?M_^BZS>
zPi*hG(CKsztX#T$_3XKQr#J8JsD9b$_kG|lzq)nSSKn!zhnLd@a_yxTp6$Q(_2Z4@
zgvqQ#c9AN_XWxotulwT8)M9-1jg{)1y3eeBivLR$H;SjY=`1wFRNjK~Q^U@UTD4G9
zaWOYheetCWEol@NnhS0AqtTd)xr>7~xeUz3+yYuUm(Hytd02o2SV;FIDOO2MSbzms
zfQ1p;2@9|Q3$OqS<rJi;g?cH^joN5XYEYIFVs0Vw+s3rltnrWW>xM%M#0-)=%#DIz
zF6Lq`EbKa>&7;ku%~MzyBeK*2wV=(zM8qke7N~`MPZ)lV+w!L1MsQPSRI&xxLg6GV
zzyd5(_awDIEff~W7Q$6g3)BL&AX|_vlv6-0m@LoZ9@GN0pcA1J5vPD!pcbfw;ZqhK
zI2o40d&Tlo2eJj(LgA!NL`ffSHvdJlY&8-`W-Ku`6^KI%ZHl>=i@D!y4(-&*8(XWL
z&U*Lw^|d?uk6pagJKB#Sr_YART@r6?PyM|q%jXZ5ol$+@{rsuzt@ZwEU*Fr6<=dc$
z39~bnEmzXyr=w<l_38Y9w|58Q_MUn0f$E*QuRk>7SIR$N^qy7RD4yb`v(QkgZ96C*
zrslb^bK|tZLfRXc8x(ISRTr8IEirhBCFWvotyt;YBu(gCI(PO1rgSd*8`5k+=U;6e
z%*EUST2hP@BgIl5qF$0>g%H;^M2^YhiX0>V(TPYxVyPu5mdb{?n9KfhXmJV#+8h?5
zAfy;6R?Lb9Wu#yllx0`+JJ=>}BGVC;3(Er&!g7On$#5>Z6qW~A&5D^7D`4f&I5feH
z;3iIi;AZa`YJpnNT2Hxz)_P?)U;!3j0TxEW2UvgwSbzmsm>SZH97T>I$HDj|wLmRU
z3)BL&KrPgrmyt;qljZ4bXi!FL#t5kq(sFScAuWEQ*EK>~c7+jA5BYh>uQr&l01HJ)
z!U8OOlVIV*_MQu!PUpbNrOQ{(p4)eN^X`te$%Ayp=U;BVl0W-q3a7iTJ$7IJwXf&*
zo{yMr#Gg)ft?8>R1~z?af#s_^WB2YlvKEf$;LS%KuHLD8`%pRP$sx?UY)NEumFBL3
z;-<1GZrYi4Ze)H91G@kV(y4}pz#`@*KD*H3ifo34iOlmaU1+IRE;JX~?Eb9_jfn^b
zFJYxH7jp|}>0COuMhGmx0xU#|P?Agbm;Ehzi$g1f=x1dj$AE>%F=l48d6JM=YDtQv
zvSBXfO2w+w4;Emdut0DlxDni>j(xqP778IawCVp^x*nPyTFG>hrkH<8iltg%F6MG*
z99lXB)e;s`L4@VP@>+EoAr0wegfv-L51d4%!=Z6#feBNNo<mE9bJ3-+Jiuz4$v9I1
zD~HCR32p>8=@bZVZc+=>g4TM<CA8Kn!vPDh01L1%5<b8JEWiRRz{1p!UgRip6gdta
zkfRo;1!{p>pcba8g;OVQY^`=W>)qqm*Y4~;cJWs4XbUyRx6(*yCw}0A{M9GY?Y!~P
zbN5%TeSLH#IJM{~O3Q3`%)phmOU(1bKinM;SMNRZR8H%keEd-Vow}cN=lP?{6+H4;
z#Z3iK+&GtwIYm1c7BYAi;n%&-Vs5Y=b1`?e4ZvK?#oU2xrE{|dNbsC{$wWj2Ikb=>
zSJ>ag*v4aeIV4C0o3W&Gqd;_S;<Ic)woprY%*EUi$HD?Ez(RFTQVZ0ARBXTkCW48m
z+tPv?!A%)PfCX59h2orsYDu0O$3mW4U|DSwd2Te3_0U2{L{%0UWFf_(f|!fBCBzln
z45f(q+*FEdMo2@enk-+gpB@!F$o|HigSiPbdT4rRdT7;wfCX64L(@Y`rvMguf*Zk2
ziG`U6CPEJ_x$1jMd2SpFJ+uPLYH#SFMYl)~Erdi=MGtMcs$eeW>Y)wv2Zt62fdyEA
z1z1R@pjyI0Du^d23n4f(-Cx~b-Cu1UZJrd#Pz&EswQyp4&xKB>b71At<*R4U?K{1B
zcSjhwks;7U;<5PbTe0kQU)-4z*>~Sqsb2f~%xeBGjx>B{&Du@xg2i1@cS-W^kv3R!
z`A#DxemVa(FTL<=|DC!YZ_N6Y?)4#>KX!JbX0G3E>@QK=sB=s7qPTW$0?*=0SV&aE
z+_<n@Xz7Y<7+B23+{Hng6b|NMZUHTwOXt=;7#3gw7ScT_Td1TaEWiRRz`}^_gaufD
z1z3QEathMCO}&)oMs4J|^4xMlbblkiZOkcZt(#j&m{?*d&z0xObIU~&6GfyLDJIXA
z=f)`*+!L@61>w+=-ZF6$Uc`KEih7q?3d>X3Fc))4F;Xl}0V%fYh~P$WBe)UVB%xF-
zVF4Ck0Ty7PJ_ROjOx%n(hjcb%3sD<+t~|F~oF;Be+|+?SEWiRRh#X}L<rGv?Lf&x`
zvr;#y1!{p>fCbO~#t_U#%RergKb69W8B0SUsX&4o!HuC1Lm_brIJ9rPLpycy#@1@5
zv)(;^eeKTvV;67rj!v@y<9(NrKE%WiJe|M#_U`=u?t>3huYG;}p>zo>x}4q|5B)y1
zZ8YK6fBtZ`gzu+PT-n}Q@4r*`y<HQ&Yu^7t%YC1#G{2Zo+^Ch}rk!c$251^_H!NUo
zruw|-4nAWp=GGHw)Iw5Aq*#boIyW)4(Mt%9rXK9fCFWu-=8hi|%*EVV!Lq;XZ}Gga
z01L2CNlgxoLn|y`BA5s!f{92(td_6<3$OqSuuz|Z@s^luLAD@U7>o{33)BL&KrK)U
z)WWz>5;>NzttNy{L=?nOh@p^jahlI9exlbkpIdfC-(`9xBK(C}F%O&sCZ_7m>Dxs2
zH`x?Yj1)5z!lA_}7~Hh55C!4TIJBb0Ikb>o99r2G9Ga(j;t^u61W5j3sU?S&%0`Nj
zVjLQW7N>wiGoPEJXWQEtr>CHk+tl~IYMd$B4W=ATITp`Lip3=)6_bjUOGqkK2w`r)
zyBtGVNyVgMwUQK;m&@Yo7nYyc-gBYT=^R+ObouJpbNfzj-rX_eaN|mf6PfPpnafvq
z#_rv9WG$r6!JCgfT)p=7_MsHhExK&+SgBI;FE?MwpM5il_U>zs-PeDo?)kmv!__S6
z3tJLd#Z}yVHfEly(GS?U>Eyyf0x9Okc%ut#c(=RIq7<<~@{K?9tC)+q1+;W-=zKai
zIRhplbZs;4PVkt2iMgp(bZ)_K-wx5aAz0|#5O;!`M2w}Dn48LmxtLpnmd>Sfi@1da
zSb&A9jYTa`3xx$zF{xPHFNXzKfQ5)?N~ej5U?P}^L0m^IPz%(;=ww&xV|qzb%)cbX
zQmq6xMV0BH9Zsd_>7nVN)%UTvg>)$y+YgmyY~R>^F>gsz%)cbXQmsg_q(6)^MOH?N
zkz%CSAR2)MSg2K}$?}k192$pKlq9u4El>;8!WFG`t@R=iWDBwd^SS18(<!Kyu#gHO
zTaYct7GU9~LA+@3G7(G!6Jb6#oq}o!3#lMF5rq)fHgqDs0iB3bCvR-6b~@|b<JZ^j
z>_2w#R_|!}uQc{v==bt?%{&uYA2wdM{Zw*9y(b?()PL>kC*9IpSmejnpKTFS<!?ww
zX^!Ow`P-hz-|*3M_gC-KeRL({%RGO7{-at3k`z~Q^V!JTX1={)=f-h_g~U|Mt)F}9
zpCcDqh$$CZzUu=X3w#xGqimRqxix6%+&C6jn24ln8(pvkKpVH#LClTKg}IoExdVR;
z3$Refbt1=@Q6|OWSdd~lx+cXUSJjCKVnkII$)GVeDu}t5TRbm^#-VX&99lXB)e;s`
zK{O~eC~MUzEHA>LAC7Zq;YB#K@E1`P4sE%raA+J_0WB#;ig9QhS~>+BT2G!E%7R*;
z7N~{62o@~BLTMtKxCtyW5lKGDbLF}6Tqc5vNJ%Xd5x1p5yrQ8hQLW7r$3&Ya{6$nn
zn`gPIU@qngZUi^!6jV!CNCh!*QwTwd32p>8f*Zk&;3j!5YJplP5<#0so5!r!0FJu9
zfkjyO#$(~c_MQu!PUpbNrOQ{(p4)eN^X`s&p<u(nhJMelZk_ejcN!7=%ju7~_R<T_
z_Fwz@@y2rRDw-9&EE4R-XWxotulwT8)Ju5xjg{)1y3edGmzT~s*t5zwx#WsF*ai3g
zKbuZX#kF%YcqSjFwy(lMxVDx##SG8*hFM=#+^Ch}CN)4Ug#IAKN>FfR7b!LisZp!g
zLE)+TM+|c@x84v;1QSs_EiAwSER5ftvV}qjso3;?bZa?PhPjxFxtN<&Xtjg|Sbzms
zfQ9-LjQ3}R<-+okZ*piHT1^O8fCX3>481TBOav3bL@*Id#JGQ|@@n1RbT*g>CW488
zg*XKR`3MV95YI%UN%F=+{kp%N<|(m5(iHPANwHKb%*9+%j1-GgK#Ca($w{6zk2X)y
zThu~ul0)Or3MV~5SqO2n`C@FZ1n^3Lgo!1VTI*WtTI=Pa2`Ng7kz#@y!A+b3!HwW1
z-xGqHxGisTXdGH?Mg=#?hH0%wMBzo5sWH6NQfobx?VHn~ojQ4AYqir^?;gLtc4z;w
zi?@152iItWnsJv*o%fwErt|#aEKlA~xAT?lt@ZwEU*Fp`;k)MjFSP8v$s@V5zWQ|j
zz}t=2Q9SrS^-kT_A4>mkFS?wbYbmbc=Cd*H0f_Bt=f<TD3yG<i8*zyXE!hAUS`Z^R
znhG>?iMdfh%*EUSS~@qJ0TYpQZ6lGzT=usRBZmZuqwP!CLMj{PV(#pj8O+68%pIhy
z>~EMiSbzmsfQ5t2nHgAs1z3OuSV$R`xrOD16;exEa3i=WX^kFQ*f2e`6!@B32<c^R
zA@$+~H$e;zjYA7e#8bnGqwPylj1(iqk~h&qtL_w7fCX59g%N!T3$OqSumB6?6r^0D
zUK+%U+8BOLjU&U)(Kzz#ZxRwqElIIdHq6Cb!HwW1PQjo>0t-<PQj8QUW<_f~dS+Vd
zWmohYg<9)c>va>ELreZ*sU?S&%0`NjVjLQW7N>wi+k3|FbLcI@&uLPRL*vluZi(Qg
z4sK3t@43+FbPlXsx_tHQxqYWM@9yYtl4g05mz{sP`AYumo9P&KUwiDn{%c>)?>!%!
z8tHwH4+D&Rpv4Bv{N9Nlcy(v=(RLkK%QxyH4_EKhy?rPN??sm_S5mIh$R9cJ7ajcn
zrnsqWikr5hog4G|jr)H3VTy0akh=F(SO_d)ZsM~GEv`svA$7s1g&+pz(z$_&CDcBh
zOXn7GONs?pNikBafR+6%gy^d<_BY%t`x|k$$T10trIw^vDjVivZVg&ej1(iq1~)B-
z#-Y_A54Auo6o~)}umB6GMN}`Dh(ZX#&GdiJTMtbSt@w+iDdu02VyRY`i@AcE>P~?L
zSST#u&^R;>jYCUBtd_6<3$OqSuuz|Zn5`*Kis=68{+4t`wov?pJXf9@$n>aGA%q93
z&F6-OFrRBaw>FrbpiC~y6O<7<=>F>dhI$B1m0VZ*Qky5G7aSUgru(b=n@&NsgoRWP
z4vj;rRj1%4q!)+Ap%o=5xDnh4ZU$zQTA&ub@oM4J$s1d%oz8mq`1Q3r`;T3`)jK-c
zVobNw0?QBbXP?MP%16)LU%mGA(Us-1xR&T8Hcc5Mm?!A_aCdNb@0q8PXzxAw_@Vwg
zbwBBrD{7G+TYt7?+ACLSo?rCdPgLBfmExwIY3D|e+wfShfVr9Ki&GqPF}Id6)Iz8w
zQY?<e6*@ODwqaoDTqYu<S+;|7eid^uw*&^HSll`6FZ){~loX3&L5dYvR*hCtEb<?D
zZU~8}$|89PDHavPT+A(=mlPw#NU_14!l4BgVF4Ck0T$9JsFtvh3Sw>{VsLW{F&l1H
zY`Ml+RPZ1vMv9qRNC)EHQg9Q;LRc;=AL<WMY*>nGq*!p16eGooW79*64v-$2$@0<x
zT8<DLT1Zi;SYd3xBTtHvV)gZ6vOF=?I8%rYQj8R<(+du5IsFwLS6H4ZNQ#kSwf+*8
zheHvT3(JSLghLyaLRcQ9*dWD{kXUXh6^lEE6eGn*F(ahu6jV!CNChFqLVuWBh)jnR
zTTXvP1*KxCf|!fBq}ab>DRyFe&xKB>b71At<*R4U?K{1BcSo~1zR2V2@!7Xx+3UWz
zGv!+EzOhoh_Vt<7PtjbOZeZi0UgSkc?=;$;FQ;R8?WGr<?Y~p^<Bi0rMVBoP_2()@
z<8jtk6*p?7xM@4uxdEESSO+X%Zl?Mom&3i!VlL*^sWG)Mmx0Ax%*EWnY$X$sh_TcX
zb5q&a-^dPR3yHCfM$N1gAx(X!C7ny>(z)qC)Jx38+&VQ7If@)h&Ik*z01K7W<j^>@
z!U86OiC`j_h(yF{2@9|Q3$OqS^(h!1Ly#@V7Gw*9(E)0KTA&uF1!{p>7#B(+#}c+_
zP|6mXgkU0=2quDwNT;A$!a^#DN2LlOZZ==LW^CWsei|uVVkx*0+z4(2H-ej{ElUIW
zq!=ky^p_FRNU}W5lk}FSdBTf$f^y_G9hVm~K43mK6$o=N*Vw)uTAYG`Wru|*2q{L2
z6_Ft<FJ?_x?p=;CjKZODXm!@_b%W)yxU%c({)*RACvR-6b~@|b<JZ^j>_2w#R_|!z
zN{SPi?(CV%r}MYHy*s4O-ZKwAP`&o`^@oyWTy#0T3l?|D)O<Ka#bx>Y;VAHt-uo#(
zy|TTv-hZd=d%Ma<7x}TX8#TE~aolHpRdJ(MEz!%YGEUyaimSNwy#osgi<ld?lnX6g
zk<>zn4r(D0W2q(Prm|r!<}wkLj)w(UC@kR6I5ZAzJiVY63L&m-aA+J_IU(}gh~FEN
z2jN>6NwrBaQmlZM6eGn*v2xKwkB}5AgdoMH|NEyJlv?W{&1#O4Vo6>tvcz1>6_yLj
z;}i_EIV?m$q+(LBVpgPLA-$wxWmohqtohu?bT~8)Eil2M8QWjPk&b*;SRP<CwjW`!
z2Tl@LNikBaaMNUYbm&c%mtB!8{6b4}3#o!qF{zlaTv#5bKv=%_42Q;{8D~lcq+U`B
z!AU)|q`EmY4z0d21UHGBdT1de^w9Ls^w0+P1T4Tp?JwlHDUDoeDbG!1<Ip%Xd9FM+
zPQl=&g@q`H;O3h*xH&oglG^mgEV+C&zi#_T<1xKQ9<E;ddizkiVHaJt^b%4~F#mG%
zmHgQ^)A&&Lwa4!3zf<@8-t)_=>lQJ!$OCEdS;dWHP;pZRWam!1lJfaZ1#4fzLMj{P
zrd!H|7GtH2hn?b*T0}Uw&|GM>zQSD0Eue)3Sb&A`i<A^Agy`3X6eGoI)ye*{zhxQ%
z7GMDus(X@JpcZNt2+LF8OD#|f)IxP2U;!2i3#bKZfm*1XgHD7_L}7tWgieG`gib^v
zVzq<?SbzmsfQ9-LM9-njP|Fr%3$lel&PXj#3)BL&KrK)U<3dT~Si-iN5IPa5AjX;E
z#CYJOw5@v{PmNN<1}WaNp8rY)Y{F8TC+QK)#oYQF32qWB%!-u^XY}8kPVkt2iMgp(
zn2WiX%l@WQP%U906@>i_cf<aM=ks=^BqWwvl47ZBn2Wij7%7%c0V!t6G3CfoF{xOI
z!l;GB$#1knJF&gzLZ{O?uyX10)wAdJo!-2=BWysJqeWUjAMVaS;i>e;^qzeDQ2({B
zpLCNpTy)to?KM6EGtUqIAb;Bv=@@Q&^xXZ`J9QsjiTSF8thtsgHb8L|H=m6~j@Z4=
z+PQHCVIi>&b7K;&(PG40%*EV+&?d#QN=@*bdr9X;1?k+7B3GD*#Mp*`%~mTFY{rt#
zjRMiRiO+N{om)$K%*EUiAj1MIz(RFTQVY~V%>oWBL^Ow%J6arC#KKas$aJDAi?pVs
zVo^cN#oS`cNHJ236dT+r^4!28EWiRRz(P6&)e;s`LFBpe+}ez4^AtbPZ>0-vBBBu7
zMC=e%5!@_S6~Rq76k)lre5gN2v0*8$nJg~@7uP&06{Uy`lAk4;{Z*-0+&Szo`&*wF
zQY?-IDMpG7FA`F0SPD`sN<oT|V#ClwDmE;|B2ifStZ}BOASp(QmG%RN#-VX&<`&W^
zsFtvh3c{g<EfJQ7E%9El<=z7j6+9>`4=IYdm`jS0V(Ao+Vm-mlw@z?#>g0{B)lO%<
zd;I#^o&Coy-s&CwlnUaV#_Z(F`RKg#!n6I?zJ9#%DgFyBdoM+c3oPHtpM7y>>Vm!d
z#!B^0-Dg(g|Lujx|E7zn(C>@PGAQm`N>y>~+zg&Yj@Z4=!a}ePbJK<8LW?W1@yH0~
zVlL(mns{_>QfW&q>D*K{CL$adhn5)I=z?V*8`^EwSLxiS6`f1x7IBNYm|Ld?umB6N
zFtGR30<}<2M{sByT9F8_01L2C=J!J_F%g9jy{_O!a8pi*9$N7eH=EC$>!InPB}^=_
zB*jQEQmkAwq*#p*SbzmsfQ6J<RZCca1z3OuSg23I_@KD%Z;0rdf*Zk2ol(hiQ#xZ1
zFOo~c&m*_#xV)J00j>2^AU!laG=q567&k1yLScd6MsOpz8CO=+LLr2So83{0y=OQy
z4z0d2JhdL&^p2ZZ4@gF>BKm8D#iST1Mv9Fe6H+Ynhp=2&UQUP}T3n>0SlJa<c9CMF
zSZTHEp{1yIsim+ymF=5eik;ZrbD`7e99X$@`Rdto`%Z7(-4Ws{?8n>ydH!&4_ek&k
za_p);)ArVS|Fy60?V9^%HO%1P$F}Uf@%f^8{yR_SZ+p9uYd!ct^-kT_A4>mkFS?v=
zVB?}5|0DCS6wy-kRmDx4OL1d6+PMid4I421Ftr^#SP1Z7Zn{WZXrT@o(TfX>T1X6D
zVu`t!TN@5Km(DHX78YOu7E+UE=5yzy7%8@d{z_X6b1@fl(}BR;N|3?=EWiRRBy$Q2
z^?{f@r>GO5`y1hTbKA_dH>6?-Ji5OnAiK7q`<v{p?r-EjCT<cjmRe$NDjVivE}d%-
zFHXTA4}pa!2q{L2m4L{sSlC^&Vr5tKb99sCk)zL*e2k6i>O@2Z&F7lWEubaENHGqL
zLyJ?up_yAq(zESVm!y~mWf2l7^__nyEKju}#o`i@ib=)FB_tIK#!AJ?u8@kETQIj!
zhkCF83q?u70xZBnH7(0TFcIZmU?P}^`d)wqSbzm>9&Mg-3aW7kLm`GjibVM4??jwB
zd1Gs}(^>BxzrJ>7|FMg=dPmcxxA1cFm3&m*Ogp9f+GF?iU;BD~@A=wueSII(8=GUx
zzsJ<}>#IA%0`EGq7HyS-Hy?SpdZ+H~LnSR(xD>6_oa?t6{ZA@xDqG8(V*1qlOT|sK
zQrvXxVIff6NCz<2g_f_((fca4P1XVFtC)+q1+=7CNYR#QFU-YU%pLe|4lRfQ3$OqS
zurTuPLcszozyd75LQWubB2w(I)KYMh$|fu?8BRX{6qZN6DJ(C2@}BN*lp;1rzLaKu
z6>~ASfL2%@(U-71jklP%3A@`IUrz9te~G!NR&;K`FP%I6pQ0BziX4N%OU!y=F6I`{
z(z$eQjSyIX1y~qQiP&HEx9BYntq_7k<Iuu;NW}^vM&I?3G{yW&QY_U9b1}D8WuzD>
zRzM32umB5HGk{v4777dGx$<0j?)Y=k)IuSI;6`vGxTy&N3$VaMFcIk#R7+S$1@XX1
z^n^Wd5>Hup$S=hXODzRAsce{wxun>iloUI$z2`!w(>btm>GIXH=k}f6yt^YvANSv!
z&(nR71DGdL&uZhN=kBjw`}*ig#B__!v$s%l;a_ynO!{zl{!^by$FTS0<A?h1)cvHJ
zIJM}qC6Ucln!gH)8?{p0v>ol-DY+IbU~Z=RoVQq+H0U2O%*EVV#!w5PmPoNU7FX!p
z#Mnk?Nar#UA<eQKob#)gi@7B*AjRU&VSm}*8lj|E91Bvcz_PNiq*&xX^4t&-QI$pV
z5K=5Eh`E?sJTECmijiW2JB33FEW!dTzyd6!Q&25oAr-{jLd4*W7pZV)<`#;-&_mNh
z3ry&t86k}vYT<i=L*vklGo|^ydrNt491A@(J+z_T;LwJpxW=IcH$Ba>oGptAnk-Kh
zl!{5kYS5Bmq*#f*U;!3jK@TmRf@%p1sURF0hgQeHo<l3b!SFLIzyd5#3q51|(JqxO
z$QFu3U?P|Z*@A2#odRlsTBtR1bx%?Y)B?3I=vXrmOhlQA`jZ$TJ$3TN)@rA--aUSO
z?auyV7jN~Brs;tNmv7~#-e25V{;vK;fA@`*>b0-Wtj7P_={}fmIlVj)NG&qN{Z8X8
z4lif9^3n^>_TQ=d@y3FGe_>knZ7l~oS82XKy+VcJMy(V#?Myp2K+|Z{zyjuGsxNXm
z-1{u%Vs35KsD-&EY%v#eF?V1Dn21D-rIwhR%Etaib|70wjBN}g$rc1RVTV(jVcsR?
zVr~H~`^)~azd6;vcfFEgg%G_iDMpHw6QUCl(n}|z><Zmq4lQC~saWzCOD#FHR5ntK
z6s!BXhC&R56#WGYumB5HT0t#P3xx&pTzRfMH*yJTVc^SQ0Ty5Z7Lrh^maqT|umB6N
zP@jVF=SM`2B1a~IiAblQTEapqh@p@|h?~uS0493k;}^^HF>ZNo(j(eDCE7KJw>wI)
z_l${~po@u{M2w}Dn48Lmxd9r(&xW5%Kt$)#x%H(B3$OqSgYF5nKrI-=Gl&<b02Z{?
z%jGC6H=i3p)yC9+x%b5Oo(r8$=fKLP%U92y+jn~N?v4?lq=2G*`E(B3-)@A44?a-6
z_Vx9L+J8Wjw&Tm`Gc#e1rgoDjg#OPT&PV0_)K<B&y|vzdr|x^ZCVbbt|Am%ZD_1H1
zKh$0u#f@4iZrYi4Zt$v+4!{EDW~$GN?%*@#Vs1UCN-ZR{M2dx0qjM8u8;zRa=(w0q
zn`vZ;xtNQ&<0l4lF}GH*>@WLUJTEN30xVQglS4~N8Wvyy7GNPx!N66*LKH-BBe*Fx
zTMw=HiIIn$^w9Ls5+;^d%5&wp^4xOKL~uolkzyPghZd)RL)&|XTA&uF1!^Hh+0_yj
zU;!3j0T$|0P&<b-VrM8Myme2WE6=T?Yi*ts+M3UehK7gyMsCw_c`@SyCT>!J<hhY#
zVJ_wtnvi0o7%5hH6Aq0-D=eTEs0H0$-QPF`y1&{yMKe<ip5}?5s_mV2`BN#3n6VVx
zqymv*aR~`-1UKap65JHC=9viZa*T$%9$JVFJ+vewmRgcxscciF*r}5@wpKfx_3rWO
zYj^e^yLhX2G+oq-EMMIjyLZ=-wU9msZ$9#H_1f3lhte;!=(1%_v0SSu1D(Cxd?kO|
zoB11Fd+fgcJ9W?RJs*>SX&Pv*Wy{_R+$nC}F!OH+#Z7zA&JEBsJyt&7sbK9(SV(2V
z+yo^TS`5fG46F-{S_lR&p_woja|>vhh|t7zZqjOWZZMY4P1aeq5X2zGNU^{KDJF7E
z%5u>qDHdQQ#YnLNR;gGqYkd_a6_bk9s*^)2gt)fBp>b$MZwbp|+DmJ_?20^a5Ld|T
zuL{dk1xYbdtUf#(8i!W&7c9U6EL66PTA&sR3*@=-+`1(M3$OqS<F=cLU?P}^L0m^I
zPz%&T>SEMO*+LNxy1$20DVi_FHi%~suLy}`HRfM(XsK41n?PgYCVZRLy4HFv(@oqY
zt?HSGFmI$7DMpG7?g?0cg*wwQh?o4uQcDgkm5oE=&`jKzxJjp=TEapqh~P$WQ=3tb
zN`)g6+z4)pl9cDlb0_AxC${%o=yW;<RxVw>diLDD)0=m9M5W?dnfdtChmF^5Kb3Ch
z-jk0X>c95&lWy6IGk@0j2U=!k(ivZ1`9c2d6KOVU<D=*9uimNq=*semMvH-6prWY?
ziW_@UaZ~PY=O)lJY(PHWsbDjfun+~p+;m~N(Bhp}4UgqQqZSf_msnyh=GFq7&ZTpU
z?SchZfQ3kNXFoDRijiVV=&!WJFc)(%Hywz3OOaz7iz_0>#8{DIhz@O@FmF+n)Ww;(
zWPhWAn2Wguv^o(w5$x~aPT|l3i?9F-umB6`6jV!CNCh#sU~Zu{qk@~_C;GEtf}4ma
z1UC^oL{(;{HR%I_o2a1RCLD^eyi9XcjTFocx?pY)BdU^+I&+D+Q9;bb+#+t-U-nlj
zHn>xS<$*<5fCX59g>(w4B`l<Z2+M`#wHXzb7e67mfdyEA1!|!uauhk1hK6iGw%}1I
zk4gm*WedqlQw!8Wt(mKPLW44HOG6<=Lm3J=BU_Ly$QEX)g;OVQY^`=W>)qqm*Y4~;
zcJWs4=rZqje5Wyi_HvdhFTL<=|Fy3lZ!Gg;XWM|8!%P!D@K*lni#roF-+g1HdZ+F)
zt0U@jOpd23cyu}4z{ZKJ|FZmhjQ*J6e^POWrPw&AxUn<s+yt7&eLvT^8asoq5DaQb
zWEIzimafdjmo79HTDiqA7jx?b2Nqxf7RFR*Tii{Gkz$MMue8N57jrQ;9f*3#{-(TE
zo*Rs9j4#V`h2<%NTw=-ovcK$adLp7;YV#CT*6V8XB(Q4pgy_&(Pv&i@CHtGohPjx_
z{#KDHEWkox0f)w+acCS`B4V|K1z3OuSb&B46zHLi3}Y}6>1@aril30@?v7IIZ9b+q
za)QQ@GVueX7%4`Ikz(n(;n13@%s7*ArZU4siiQ5rTGv`H7pE!5LWrBq7pcU+!JLA8
zP*L_b=@HDuT&;Dj^*99s%MJ@s5K@d3BgJ4rYrUL;DzXsV2yTikqZX(ICW48GQ$Q_H
z3)I3eXA?ONOYyDsqRbQ9doFZ3odYYEE?+%+Zr|z6yE{f8nEvo-%jXa0qw;>zl~=a6
z*88u0eQ(#q@sj*q(?8I%_ZCUb<Fil4^4iARjhUGTAE@4``}#xE{?caecjE6neP*Vp
z&BcDW;-+n)xUqTc+yt6Ni!q<?`CDwT5VgYG#C8{2NP<Q$!G%UGBnB_B#9Yj+N37{w
zI=6^hSbzmsNK*^-lKm}&5Zp}vccIu{kz+Wvnxk_hmqYzQiVaKA)&*mK+218RZ@Sj$
zTsoJ|O$UO`t!^GzfCX59g``4Zq3L5ZC^aaH$CZjn#p-wi7GMDu2Eh~)!9*|-Oav3r
zbPlOIMlDba)B?4TPC>PVg;Ws3&xH^puNT(+)&14|9q4Nh`HhI|an~{9114@#f#kXJ
zTzPKgQ(*xX3Jc`9@?3fDxU!-a3L!ib;hBiYx&=3an>wTNrjQiWcvDCumx7z*FP2(z
zXsK+Z7%3*W5!}Qn7+7{#h=Pz}q*%!?I5ZB8Lz`pb=G4g>TdSSUdiVJCwLANdUA)yh
znkX{ga`TmP?5h9Zn`y$O``Tmo^<VpXe((7RnA4EpT+0?4u*i!S;<K;r441a+NF&#J
z<l*X_y0;G{;l1dxrI(PaG}oVA{mzP;%BHw!JKDKZ64^NF^YQE6kAa22BIYJOyU?b2
ztVHJdmoBtaD;Jszt-i%D7jp|}VF4Ckf&ERVpjyI0DhT__{?<;PLo32zbWSl@jro@x
zTB;T1VlF90iltLPiro~J3(M=4F10`{6ga{HEWpBe*O`eZgy`2sa3i=8+%OSLM12aX
zzNhZ5?r#ZksRe35<S24Xr+`|Z7N~_H5k!t6#{x%@qsUR@C~{0htd_6<3$OqSuuz|Z
z=sA?<vqg@@PxNbJgtVlOMo2X%0~U=JsiXvAfh8$MijiWZ7%4`I#l=!os5VbYGHXKU
z{-%PEVsT<fv3RGQ_lk|&rsMKr#s~D!Qh_iRb8FB_#iU{-3WEh$fQ8S1Lp!m(=R&8`
zIk0l+^3}8F_MP6myCbw<DCF!ZN5A?(R!C1I#%+A`-2K&SUmsnGm~Me|bMRwZ#MJ2T
zQP`5y$AsmFyYt`oR62&eCm%o5f2Zyz-3i~-_V?%iZc8GYt2BQV6gO(6xM^qFxsmxb
zT8yxOxtZ$oqC5DExtLqa7-}KZ5-AqP;tHLc7~AM21V^(lp7mACjm<^p(z&z8I_O+F
zH!*mLCFWu-ojayd=-fCKbZ(BW>D&+<!t!v&QI$o)CfPz%5OXoNC|LHF{bhd#cM69V
zScC;wfCX4cr=VKGLMn)%5JMrg8P%XHexl!c6x>8aA-IXyA*v#{S*|LAn{X(?a$)&U
ze~@CsQZ!!ygt_Jxk~CXlDHV%5hy7)LrDB6S1r}hzIFoUv5hDu=umB6N01Ndg7>_!c
z2quDwU?S2fsFtvh3L?*y=ho4+)_MwUwbrAdp|w6Dvd3IU)M{LXR*#5#CL$`RwI0ER
z*1FdEP=AnO!%}FiM=88+aN+BA>=G81$DPCevcEN5NU=B;e*#kM)X5uLtDVkz_xSa-
zJNu7aywy88>wQuqD10lE?!}!+OuhTYO7+^;XI4Xa&oU|bXAM3(oto)(T44E3!&JYV
zj^VYJUU;_uPTh|;7X15@VQ=$TV}IF58S{^c&nj;0m=*&Y1)E&P$zN4m#jW8B3kgS<
z8yA)fEnSg~bO3Xyg(UVCUt%ui7SNJnq!=kSZc|9HLWo|M6eGpT2@%|c-fGOuED(jI
znN?DZ6f2-5#YizytXwqF3?Rh{AxN?5|IndSOez-AEVXv$U6Nv?SOG05Mv9SQq*x+i
zwS)y&fCX59g{h+2tXKpWH-+Wl$b{v=P4l_Sr8QAOQY=*vb1}DoR#;v#9AUYzJY*^<
zRtRyk`LL6@1&>Ol@unq~QZcERR4jRudP$0rVzXb;nta>>OU%Vw%*9-th_HAm1ge%&
zu~ZQDm;J4szNdMT$Ms-!<Ud}+GIE=a%ZnKwFhZIN#Qw6s>~H1iVF4Bj3j{ZU8^O)E
zvZ59WA<Qk9TZm9ga3i?+6AW%nZ11_y>2waPT)KSq?74lXH}CEUPQ^_=wR81!de_Cq
z+l_<$-~-ibUtfPHX~RXA)5TP5nm9@+4xO@m{&2pS-p`-f-dgX!Q}?}HQ~%NwDot6o
z*nnK62xMk`RdJ(Miko((og0v9#NDufxtZ#VTn_g>i@BIv>mF($sU=b@#4DYf7~3$g
zvlQ)Q<&3$Qi@D=x19LIAR<P_Z`&&FOEWiRRR8o^e<IoBVm<T3<iC`iU5vwIEzyd75
z0xZ<0V7w(JTaYct76zjO)B?3YEl>;80<|zMlthjtY^w>O6A=Y56k;f(T%6`}i=P;I
z*vWjZ`P_twC6*i-hsL3mizb3AQj8Qc6vCm!DHz-nun+~|(30LVwjW-^v%e#G=eWF>
z@d1N)sX&;Exuh5=7N>v|Gl-Y(R1-H5T=azH!tz>+b7&k|;Up};0xVSbB(*>-6c)%9
z!c|cV)B?32TaYc3Q}8XS7EYbKv9;Ritap!JU%Rva*u`7DqltVom#^-OR?n^@YjJ@b
zy!pt()oWjGA4=){qRW<nr2KzN6^BlqC?5Ih<}3Nz-b~V```Tmo_1~#`e((8tf7bXA
zcT1yY<o6i=-iaSj+}K=-n|8UK8wb9rRP*^x1#4fzLMj{Prd!H|7FSgxG@N)}&AfzN
zXfCu`Utuoh7SO^1EWpC}?MaFiLiB4xijiWq>STY}-_o>$1z3QE>Yk()sD+vZ!txaO
zQVY}qwNM=hSb&AX0&0O;pcX3UpcA1JQCOf8p%bAKp%amaSS?`z7GMDuV4*$*(Q_y>
z)UpNHf^1=sGg1rG0<}ObPz%(;xKI)~mawfRgib^%h;gPkF&;Q6ZR?)LQ==5IL5laR
z=f9Exo3Pa8NqPixF}FTPf|~>jvtlK~xwhfK>SSTP%px+Kxvtx>TUsg>6~tW3EubaE
zNHJ1ODwa+`wS<LK5UE(mDXCaQL0;OHGM%NCQn6Gv%*9+%j1)_!fE4>o3_qXP-gBYT
z=^R+ObouJpbNfzj-rW%@AhglshR}z*^JkyR|L;Ee_@Vx5Uq9)lOJLDuORkmj!v&Tf
z<j+2lf|8Aop1Z$#r|zRGkt8je#kJh`v&yKrc^ggICW@Q3qn(>T(=f34e5ZoVSi(XS
z2y+vDTxc<7*y!K7(5QvP;3bxri@CJ`XCgxV(z$UguF$y&taNUO4%tEwBdRhvMVS0m
z%#8|SF6I`{vcK%_><3ISm;Eio5IJh|L`s%>N^^dd6eGn-*HJ1KQj`=U#YnM%)Px0C
z5SEw6dWKjO+{CdEmKP0GZ4+U6L=?jE@E1{)$+7t4uX1QnLCnS65`A%KLn*TNj9IbB
zyUdD(RyA3^TtXfdJjnjWorAfUD;1N9rBhHXVIdWS6eGoIr*DL`m^G;wEWiRRPzybI
zt~|GNi)0J31+DcIw%uE5^Te^xS}(Ay_J-DaG?BH|Lr6qbCO6S1f0Y!A3Sutimb6Bm
zE6>&D8QduxT3`_tU;!3jA)Nwwt~@t+uWwBgaq8rat<_Fvy?gxn+MWH!F5c=LoqMY6
zokn8uay~jQz3^=RwXYv<%>A>*AMb53u#+9{tgpV6Kk(wt6urFr#!B^0-Dg(AGN%9I
z=UYw}Q_&k7|0DCS)co%#Zi-G7H+H6-n?Tc;JeYo%+72Ep1b8qvU05!(xFQ?VUM@6h
zAu)J~CFWvooxRbybZ!y1umB6NP&$<%McLm%h+dcdO?r#{4KE^cOhRI*B`KE5hPjwK
zdwf~ssLc~8S&Wl}c1uW^w8Y$070kt4%&qPeSb&AX0;!l(Oe!W7OGK=eumB6N01L1%
z)pi?aN;!marU+_`GX*ydKQ9;JMg>W+R6)$e+yYv8Zpm=WE$og`jJ(o4!DE3X`^)~a
zze$ADOUw<>m=!ZCR!#`}TU6Q2=4;ntg0Af;xl+a=ZZ#-V?uNOTYi^+u@2~(1g#{cM
zhsL3e3a5>he{_o!^I&yyY)dRL7jrQebCU|KmaqT|umB6NP@jVFsMFj+iFW(75ta+f
zYcr~cmTZ{!Eks1|@A7>MC${%o=yW;<RxVw>diLDD)0=m9l$3G&Qg2*x&mYboct0`j
z%J$ZJ|Fy60?OI^yB>$`#argKQGtYnL>HKYPH)duYe4u)#?&}XV{=BKz*~I_YbQ=)3
zTjVDyZrTuv8#~j^O`vIrseHbJrL(>Y3sI|<7UQfkrkgx16<2ZVc*uq3LMyizEWiRR
zq<gYn(z%5Y*EZ-}I=7q<*+N7zjnGiGAh=1GSYk<vkz%A+xo9HVCB;aw*<&42F>RiZ
zW-$mA97&<iq@`3WRRwb~7jvsS1r}hTuz*A3&^R;>EfKL=!U8P70xZD7RNHNwDdiA)
zXc5%tp(Sn_ehwia&z0u}CZ=92)3=G>Cg~A*Zpm<rGp$7_MxKG3ewf;xmtlY7)}nLi
z+;VGSZh*!JX&MOgs8kF~dOS6$w567GZYmq*Vy?Lba|>|_2HG4Jq9CLgDONIPorq%A
zM*iud5U6d*M=4|RyrdW@RzNEilZqJ%86{-fOIk746O>7sEwRL0%*9;HO)9in!U8P7
z0xZD7)G@00=N3+#ys@>~>8y8;Uthbk|JcP_y`%Ffwar)Z4t%p@CRM)j+GF?iU;BD~
z@A=@=qN6A+(aRzUPJH&&o!O5xW@a9FxO%7V?L#B`DgSx1e*Km!X^|f@{H)>*OVN7Y
zr%%nlRNPc6J2xGBScn^?(Mt%9&UZQ7`!Sdsca94!-J#S%X)BD5FDEk3zjUFcTDj0%
zXtUD+7aE5a3|_*gVlL(u(9*edZjBIFfCX5H6rsez>@WLU^cII!2+<GIM2-Oqkz<T6
z>!BqfvDA_jOJ&1c%$15&sUIxBLScd6MsOpz8E@%R3xyCI+Vp>lUJp$Vtz<e$Q_R04
z#Zs*>7jro@4lSL6Y6%OeAi{ECd96B)kcRYXz5*y|iusqMSgIA~VlF90iltLPiro~J
z3(JM&!tx}PswFJI0xZA+EYznUA{xWbgJU6ENM}Q~kX)5KH(+7-+3<6%B;~nDPI)_1
z_zM#^CT^nbGgWU+-zKCODOU8C;3mN8@l=ne7O-+?g%Eue#-VX&pMi;+6We<(bUK{_
zE0-=`J$r87>CL-4!Y#)CLnUw<3ZM^?k+||iV%)|@&)r|W_Vv+~xCDmZRY;Ju!lY%3
zm}>czT7LM4yYnCQR62&eCm%o5f2Zyz-ATX4od2<w`#x7`{wgSL)Jk#F&a`vGnl<JW
z=RBz+#}O6+i<leCaiQhAyP;G^PSBVxn0yJl&|-7B&|GM<$2weSOhmRRbAmSE7jrSU
z_T_Xgom&(gEWiRRq<iw-lKqWi!TuIlR(pf}4KE@r4<Qj%Swx$YVo^cN#oXd?rD9Ss
zso3C7;m`t$umB6N01N39R7+S$1u+z2D5N%{2JwoY5Zu55EWiS_&=Wa|97{t(wjf*3
z{nh;qBFYw$m8KS`g<3OL_k;#z+?IwyiiR>2az?fwTaYbK3)BL&Fq8<gg<&Z)D6_$&
z7N`Ykfm)yzsD<GbNi7UZK`l@VbyG&<m|rkroXI#->D4h2Oav3bL@*Id#85di5yMh^
zE1QT@CvR-6b~@|b<JZ^j>_2w#R_|z*iBW^*SKrDHX1};I^>5#OW2JiS>ocp_cvNg{
z{(z*u#+TFg-a<cS_@8{I@uGp3^KbLg3(xl7sr&K90>9nx$IhPi%2i5inXy#dC{W9U
zt>W6b2|SB0VIiRmbK}Btp`|Obkq%%k<}MD}r2a4$a|>wcTspTln6Ll~u#oOa*+L~X
zVF4Ck0TxDVCoI4MEWiRRlvALGmWWs_Wec(e*#a!U!n6^NwrQ`Ci*;OSO#A@mVlL)l
zF6LtH<SRpPlg@^Tn{cltZcN;ii_?5=OxQFY(=+^RvOHm8i6w`|p>b&CqKRidNHJ2Z
zb}Sw^iDPk-6eGoI)ybhHz2%vR@FJd|OqtG7OQ~2Y8!1MLkz!SU6&7Hjut0DlxDnh4
zZW0lzB`m-KEWiRRn7A=<Gja-GVWc3`0<}Obzyd5#3)I5MDS(BMf_#?L!inuY7doBJ
zft5>_ubw@(@AT%~9VHnZ|NpK09Z%;y{`T(t4G%t0z4rC>hssA&Yj@t|^zy{Wz*Njk
zczo*l!}%|HKMi4A+1^_3zf<?UT@$`*-v2^NFCkYcy1KKzs<=@r#Z5cY&JEBsW@cak
zb2HWFMR$-Gb1}D0FsOy3mPoPCv2<=?Y-4;mI6AMyueKQGVlL*6pBT)=+*-l1zwB@E
zys!WZuuw@&4vj-AEMOv-2quDwNJNw^#4J`NpP2|If{7UP2&n~Xfm)yzsD-9PNDUln
zfm)yzsD*S2m<W+$9<kGjDCy(14MQP@LW-U?pId}OuWLTH?27*F>6wU#9g@{pU@5qX
z3UX*kn_@2J*4mU5BgM+43k$FS3xXTLjo@aeoSBGWDGY_=79h1iEl>;80<}Ob46jIP
zVOR=kfm#?24C(&r{(270b7*l22KNLkL_u^SbRu*jV8J_X$|;a7$QC|Dws7j?jjh#A
zXT5v;`r4iS$1dLL9ZfgP<mIb7^M7zHZs&tHA9=WX?d$DB+0~_)l6jUb=|JA|bB{P}
zzLLM~&HO98_Sk*>cj}(sdp`X5+&^~q!%mC8E3x`T6*o3l%j+l<*Uru0nM|sdufjsY
zBIc$G%Y`;fBzukiE#_h_<_;SAbZ)3LSbzmsfQ2K}LI|g>Y$5rJrIs98DjSE!p@|$T
zsR;|PP*@-=4;v;dPrVy$o^WK%nVAHS`InfRYDJ0_{Px=`!t(HZ!t!|7iTzE)SZay6
zsce{wx$H0dn@&NsgoRWPQj8R<d$H^<`&+a)EWiRRPzxr@>r+t0#KLl6d65WA1QQ`!
zkS(NBKrK)U)IyO6IuSY%1&$_eOx)B@OTz*zz(RzJ<;?=Jg(4jKwb6+vF~jJ;XqMnH
z{}OXktpqm(zXtIRr&4$hEnP|m@e(nXT4HW08|Eg^Xsrim3_q8Fi=JnHqZF}0iakoX
z>hvY%Vr~Jg$Wi1davXn^9Vu1_!Tx@W+usx0doFZ3odYYEE?+%+Zr|z6yE|q`j1PC`
z4?LB2O7F?X5A|RB`bjt4u!}BRuB7pEI?oUPAb;BvDL>u#=(+o=cj`X65|_Yq*)&;g
zwTP+7-!SW|iW{3tanp9Ra}#J9=|Dc;sbDjfun+~p+;ow+(BhTtjTYmqt7~!!;X-qv
z6@7)dm|F{QSbzms7{4+}F;Z-HB1?)1Zjv2dVo8dTVx(9MkYeuOPJsnjfCX3xa|#Q|
zkW@<!EfqvqE-bIjs0L-SVH%VXQ5XstxlPC9Mbv6M5Uje}!t$t~p^$JWS1=cI3r$Ed
zQj8Si(5QtZr>F&Lp-2S5jo?O`X8=cSp1>k3zyd75LOKOZ1QWqT46jIPVOR>?-$>&3
zo)I~U9BWSMM3k7J->}pDjoVZAHxqM2WX|>IvhHtGP@Wr7MEAEmKvuOtF&A^|v*D@r
zG81skJ8q&Bq1EdN_sPRnV_#)|<IWM5Ck4m;#*xC@0FC#G&E;#xKpPc2h`E^SIka>j
z?k(BhI2P<L`#aPhq}Z?&&3_jvLV>pHb`&(9waD?*$s1d%oz8mq`1Q3r`;T3`)jQfQ
zG2Us!K`$rKe(j|fp6$Q(_2Z59AJA$MTgtOYmE*H-#j@9Zac4T%@4m58y;Jv@)yO~>
z{=am(n2Jr)`uFDFuK!<G+;m<PH+H6-n?TdJl15I@oTm*If_0diE-V*XT#=2*0~Z>#
zkQltg5_2)P4jJfNI=6^hSbzmsNHdQ0lKm}&5Zp}vccIu{kz+Wv)Wex~Ns5tT1+=6X
zDMpHsVu^^=5*A<q7GMDuriyAkG(EIp!vr_QPY7-VH-Sv8^+Jf7%?Vqrb*=R!`sqoK
za%dbHhn5aRy(Gm*vDpth>7nVNg)|Gnnk;SmQV%UfLzs)Xm|NW`umB5%1socO#-VX&
ziHOw_7GMDuU;!4U+HS4&|DV142eIq?);xb~RZC?oBx8`Jnn0EtgCi%FqXt_pHy1l|
z)(9M21-_OuCo>Y#7*tZ>21QlEpun_@gwwvvWEBjCal^nkFv!V(f;J91IG_m}6vzlh
zJ!c>7b=KPF|2e<kz5V<1$zIB*%BrRPe&6SL*4nR1_@IZDL5<f_lbbHHSTDrQ3X)=_
zf|!fB0a|%(WH`o|j5DQ7CB=de#+lqJmiI2Xohj$}+=w?8Y!tn{+)@v%RFD)S#kAJ7
z)^isOyC;A9Sh##};&!jsJF{{3-h&%APhH!4c4Vvug_4K&KRRCzm!FE4zkjg5Gr0Ek
z$73bzSamt)NJ<s7$~^bG_1nJdc&wLSYVOqi>Xpu~mmZ}4X0yIJyTzFLeb)EZGDevc
zw^T)O^U3t&mhIR{2kQP#bFk>Eu#mOF+`#Vu)ef{g{5uz8JJ6_w!r(QQn2WjXL>iq-
z=Z3h21z3QE$xMU&4MIHJWq*s_Vt><%h#ZTMSZhg&m9k+j=C*mgR7@%sQ5Y=10xUE=
z6>5Q62o?x#1UG^k!A&7zvxEg$fCX59g?1NA4gks)WDBx|VTw;JPz%%owLmRU3zI@g
z<QQRFO9-8aEQp~HLm_c+8ru&)F?Nwkj>=4@>-4W`^AtUTxtQB-6Tyw(CO``dumB4j
zTJC~jk_QV}5Dtw)<IrHiP)O{8Mm{qUOav35`&)JaESM~>Ni7q>M93Co3%LuJ2quDw
z7<J_|C`YB3_YWObO;NsK!SXM#xL2<{-rwx?cD64)+Io8W;+-e`3nf|`U+#Tgx5_tF
zXn*;}3xjK4Z=JlAW0%b_GrbKy{i}1zGyNMDef5j_PaM3rRsS@vz1rNV`^UKje`E9h
z4|67LYn7I+g5s94DQ<Z(J-Io<*%?Thw>`_lG`56=Jiaiu@Y#WuM`X9fIJSe9JJua&
zrECr~2ioHIaU5t&L^60q|I|D@n2WgqS~{1`Z4m+sumB60B1Ce@{<6QJw>Y#Q#K7K*
z91|8I$C#??Z)@`uA+gqy6f0%JT+Ee<32w?RXqK>03POsJVr^eQgEGw8_&;4#G{y2u
zQmoVpb1|0`BgM)tAjJ;#(Dcys&?e`-sD;8w4vj<O(5MA!q1^>dQ(0?WYdz8$YJpmi
zEyxziE}#~u1!^HAf=+}^M8HwxC~_1ziX00On<Xs30xZA+EVR2Idk)^_8Ey+EqU;Tk
zWB7@|v!Owmu<$mIw|QD6>5iKsr`(8_{-OkvD=ay*tf201M7x8N$Jl-}f{pEyVrxjT
z%LgZJ_j<iE8+Y$LxN-B;wY_IYQpDuXd+q~&E{EFvx5_r${q@5an`>WR-$+iafcHfn
zYy8iV&-_foI{3f;a=iW~?-bGAfBVgIgFAJ9-!86Z)#aQcsa9$EDkyH&N^#5M=*i7p
z-Z}4K0dp(WBdko0EFv-HX00$6a~F5PFc)(%cW6MEi0ZEjJeOW_Xj#EIEk?}6T+GGX
zvA7!+U;!3j0Ty&3GWzOt!4~CT(;F#LF{xO)r8qPWEn2#;01L1%abyZ^a$6V*30O9d
z2`QElg|Iw@L{=qb`(h(cie&{c7jt9Bm|H0QHnU=8#oFV=d~Ohe6oUm=fQ9Cqq!y?J
zQ;tIx$aB*~!2&G60xXnWKrMKKvenGZIU#b)(^8v9n`dOGWecNHbg!c*@K|A~&7;i|
zbm7qQ%;C_AHpN`bZO;^K9&MhONrMGgfCa&g;HDTZ!A**2!A)2z^SRfl1!{p>pcbeF
zYGEW1{vspCt5+WHZ}xgS+m{|~Jw1K#&XfLynQu0KTi>bp<Y+nXfB1T%x%Tz_%?y~!
zU;J{*+2zTzq`r;5=&Rp%-Vyq&M0^iF{rH2yow~p6&iqYF?lEIIr<YKxwA`=WC?>_t
zS}AUMGCjEonoc6S2msSz0Sggn4v2`kd0;uv$`RQyunsh8AsIZ<vxOrImY7=#gt?fz
z_^uDk#azs7B))86Jr<PULbf1VXk{BIMv8_0f(2NBg>p`|OAajv(chMeNyTD^=tQI=
z(}{?uf<qIQXDd!?z4(i@mK<6s8!1ML3Co)R5Eft|SRl9&+z4*cfP^ih7J?9ho8wuE
zlil}m)@!F>F6Lq`<`xy&EMWl_U;!3jq1^?OZ(Vqs$J;y{+OS1JEl>;80<}ObPz#en
zNt>r;c3w}V7N`Ykfm)yzs0C_aY!|@7SV5=-YJpmS1z4aKsD-gz01IOUp%$nGY5^Ah
zI<Rp0;Kc1-uXkqS?!5;$Zl1cf_w2}6R2;v@yY=Y%t}_Js@=MLNuV1|qA1yETF1wsf
z&1i71_QO9qU!TCA%ACOcgZ-Vsow`3BTW?x*_+#h1GE%FQFYhh-s^Vs?6t_H?p4`My
z=f(tBz}!mpnbx#yrtT7RF}JlU)Iw29q*zK#I=3*kb4$%4MLS*iV=m@m?&RLUT+Ce@
z8e*>CChc&>>|I|oNtcnhqjN{4nD>IIY(chAbnhBVI+xC+b0<$CI+xC+a~mB`ijiW$
z0&0O;pcbfwLd0eX3$OqSumB4)qfWD8CHplimf^TrvBFLBxhW*{(Dcv}6EhE%*^i0f
zrsxrQZe%zQcg>2GMwwZ$Y$AK%q!44RCFYj0VJ_zCq3NOJE*QESSjd8qVx(B)A5yWj
zyHc@uDh9EsR7@(?=06--@fT|?IkZwXQj8Si&^WZ*1ss}jrXoG({hQOXJ5McArhdSz
zSc+LgA%;T2^O9nD2ua1HVsQvb#exuH|DboaZRZ`gQN{o*`^)|YXh|_r%-H@oA^(*7
z7Oq}-yuaD&?QCCqwDt7##XC>>7s^RqmR}sL_}+>g+5A~vd$qat^^bFfQ>!lLZ0yP3
zc8MRp_j&!cZ{jRz&Ydsccwum-?yZxzaw|=>ef0;7ePGU!w93hrpH<v^xD>ZMZJyi&
zP1j@1*`B$t3crR+SSV$~+;WgO&~jeCV_;`*ru>F_ygvV`1I>Zf>MP8}+yE^szyd6c
ztJ1ms+X9c}mzY~>Mdt>72M->do3fS8%|?w>tPo?ZCFYj0VJ_yjpq1y!b0frs1z3QE
zCQ_vqsD)sGR7@%+6_bh;A~s7{fCX591z2czK_<5`a3EWdEyxyzDL%D8El>;80<}Ob
zObR8DV}xxjA#@^2K@5fDjxiKsD5O=AUN|Xo%1eIfFT4}s4a$fe#`JdCF>{u>zol%X
z7%65bghMO4pjpB~DF}zgp|z^hl>jNdIJ6=%IW!Kf&Az?OQ~bqROAf7+jT9rrI5ZBe
z>;ewWd~S)s4dNNZ3tL7l6iy0m1UG`4KUFPUJ~(l^*Xy0xxO?xxjhm;g?L9k^QwsTj
z{c^m1^_{W}`)|K_ZgB1E@7u-Ith$^tVOvs|6_!8O&%RX-klkNDe6hJx_w|kS6OB0r
zHVYPW^yMU<xm4VIxD>ZMCZ5~^n$CG&_jf7Sf+Z|ufiSn6QVz5n?e28J9B9-+VelGD
z%*EVRfYZ5jZrCnZfCX5HV0R=%+27n2_u1c~x7gqGA|l5W5?K|I<9b!WT+9v7O2tM}
z<m7d!m{hDiUP!SZ#Gvy)ilyiv#nuxYSwX2-R*)1U#R9aX7%A53FIa#DSQv)I)B?4j
zhc+2?QVY}qwJ>y*TI;EnU;!3j0T#+GXqK>03Zl)U&C|xw+B^|6X!F1VEWiS_&=)z1
z97T>I$FX;AVF4Ck0Ty5(c7eBfl87S5lCUumOhjv?o7R+Zrfkr8$*-OsCd+f1m@FSV
zO(*0<)@o9PHmZz6%L-yH=0<Nv_qS+MZ60l&_8`&y4MOPt{zYNo>Xpa)o4wx7_N7N#
zPfuUG^Q3=aEOlxG(Dxnn{8?e#!%si{U~uj0Z@W{zt6mP9B$)i_95FRreJ%RxxAg;`
z94$8Bhp#u9J9XdRO!=}%>eZh${Os%@(0RY)#E%(iPQ@LSV)v}#=9B5kEuiU8bM|JM
zq)UDl7Ls+CTMjG-S{{)drRqSV77BycSYj^bw(%I9OXr5Tg#}oEg_4Q2OZGPi(cfl&
zi{4^?(~F24i;!4rNs5)SVJ_yjv7uB<Di%=~EWiRRG~E+wfm#R_2yO&7f*Zk2A!4(H
z1z3OuSb&9g7fj9}$rfY_vV~!aPc2Xj)B?3YEl>-SLP_KpVVj{4*+Q2POav3bL@*I$
z7c@&)C<XC0PY~j;dj(KV&`lRz)4!_wTWpG<kkqE;bIs>QhJm@5+a52l01L1%4EU)9
zYM~X?92$of5&;%q0T#4*au-kwMo2?5%X7VOQj=P0Avq~qkSzo!MULSo{`T8Emk&<d
z?)7?SHtybgaO38wYkSX*Box|N%8$;+lhK@@KNY)q|6qS-aP8}l$MP!3`q8DnI;RUZ
zy=}JWtMAqie0RM5IxoM}+^PH3E2ZzW>T>pkZ9X*J$&&e1P~7swC~iKEp4<YO&XH92
zchz%QyJ=sAg{%tZ7AQN=@`&u%00$biP#C<%5_2(^i73fJyQFhdtI@dytaNUQ4%tF+
z#%nEQ3#DwBi@9wu$NsXv;dx;J7GR-?RH+4OAy^=|5!?uF1UH3<%@P)10Ty5Z7TR4f
zIq4%?kS)j-hABR^KrK)U)B?3YEldg}kz<5yhC*ZuT|zJsOav3bM3i07EMcJ(#Mpii
zV(cIE&I!8dqHFqBb$^RZF%**8)O@b_+{iF67jxU=1r}fd7KQ;owLmSjqMAeF&_W`>
z0xZCSHc##XYQYF;Xl8k?7fxzYOD!ZPWec)};H1bg{Dd}-yBxE3=cbT6J>3*idY5Z0
z|FXNkSFb$Y-|Y2vwl6)}dV2ceohSVZ<$xS6_dbsUqY>8MloV?F%Qs#aT>E<K<gJ{>
zUiAjaIpxV6IsQlLj&ybZmtP#sr}x-<TPc0c9=`T!bEobf=hpgreEz4IGk9OC)cqsP
z`Qs~YDVyS!C)1OgyS$@RVF7b1)#uPPpP+hbVJ_wdXsLx%OQcwlZFFujwi_B2cr3rf
z+)^t#H}E?+yXo9iDRgcova*FjjJ1}STgryHnA?Ju&ZToh+`<AZz(NzLQVY~Vus|v%
z6>D3%umB6NkP%HZl9&i4f{7T$b<_g2KrKv;A;=a&IB4^nFQw>f^Jw$5M~2pV;imcA
z6cVN!O*w|YC<(;!OTkU46)9Hqhl!hvb4W2#j1(KXcUXXhR&^SFPU*#=acH3=sRe3*
zTA&u@-LE9L5!|GDX!~NREMtCP_G2QriQ{%qE5VK6rrkUyZcN++SYZJcV4=|v)B?2-
zEHH?d{c~!8TA&up=aya2EMcJ(M4KlF@o-n0N1G><q&ClASexha!HL_wUhmAt-Fpvi
z+&pz{@7a<36Apdg&*ka8|5jn#?yn!d*j)Si`bKKQ+1cy#oOX`Kn*I%ozWPh&y6tyD
zzc;_b+i#v5+^PHfc07xV^WusB*&G{CtF(L-6gO+7xaG<8<Ys@TBc>+y<Wd_C7Lw|i
zo6K>b)w8=Zr?}L<nm9upX!&qC&>U#(DTcYZEie~zN8*mo9hIW{55Um5vW1#nOen1k
zSn~<0>C9PDEYBQLj1(iqhGz;az(RXYNX4XL;YDBp7GPmQR10o$TL^9fmd#@#EYFBS
zYdwWTR%I2-PKsp(F&A?q`V!m-ZUi@io3aa<B`lPJ=%Hl?#H?6aSo68-%`jyJ_0UQM
zF&A@5F;cAT0#d9mxDnh$EUbr?!4<VoILV=LXl-A>8<Y|4>Y>2`EWiR2!9=vXpplQd
zzbT?k+=R6<adVwopcbeFYJpmy7Df_5<TxsYp^!}CPf`ozU06dQInrP#q>MDIx5Qk`
z^{P}N#Zbslkir5iz{0--7Oq}-yuaD&?QCCqwDt7##XC>>7rH0+xAj%4PmY$*@Q1HA
znrmO*->llWbmo^?&feG=NENlYaQS`b)xpo|AK}xFKN#Gp``d2!*DD><#mhMZNwrGF
zLoZk=ZWc&!%aiHJP0)14I$!~FE7cdC2ooQ`T+D6NG__D9B`KCVmd-7V?KH>fTqYu=
zS*8+2yUt%?F6IVkNikB46r0SQNU<P9f14B|#bSp@#Zr1n#p0>Be@rK0JzJI)e2)|(
z#YnNTA=)J=MvAp91P#iP?2uxlSlf%`&^WX>IAH-6V4*oDsRe2wSinRu5llprQR)8b
z{ss#~jv_~qV>qW&OVmOTLihK0mSXI^^YuDDn2WiXi@8OGHcME51z3OuSZH^_#9L$X
z-1=;2^F*|J*u6*8>#1H(E#2TXmZTUdMv9SQ^|<BG^0*!B4XyPIiw{Y$d^Wrjk=*o7
z#Ci#NR!}NdDu}t58=%#o%&wf_=i+hQ6q5Om>juXhOgUJWTbdOs6~tW3{repuy?k)u
zcCXhvvvK#{gBv$bUE6zhBp-*9*Waz}n(sO@GcUi?T>JXfD`hLKx}2TJh9Fw)Cw_Fk
z^6#gjEAJod?+otL{qa~4-m5O>P_tGk52{69RotwV;+DtJlba0c*Z^3-+)DMCGX-Tc
zb(ffnxosPiS}1CX6icZ|=N86xx?qbGZAq-k5_2&ZbIXQkmzayWiwBZ0S8$VdI7j%p
zzGjjxBXLLPj!H4_eH__>Y@z7hHI{TPolECVo<wvmolEC7I-V3G#exOY0<}ObPz!~K
z%@P)10Ty5Z7G_4BX2nYOYgR17akFBDo91&<Na&&Ip(Q3}9xSsT6TwZ<Bl6tHa31cO
z6)TN0vtrpq_QFXa##&3vEoH-8%+*8FL(5$-bT_b&1tG;qvB*E9Vrh4!V)0ZAVpFM@
zRIJT^IJDv~)>?9CrEH`aDaN63Xt@hGG~-M~dd~YNI%jvDTBJ<<fLXB=vxY(pg@orN
z#qto6ib=)d5R!@oA;$jw(`?($J8q+l0b2H#{SDBPVx*X{{c%G6neJP-dgbx{X0Nxi
zed*EG)6*C4Jn3I3hx!*sE55g4M>c<!*IsR|ef{HH;nb?jIU9TOw_W0g?|ojs?VC7D
znsevNH(nUrse9|>t=vjeZD0KXV;`7vB&~9?<!2Q)A1=i$Pn#z<LDThEbGB#htHQ70
z5*A9?Ft;2e4z!%t?-<zGn<>Ac9<R^8>Oga#wfYKkF*iU93$OqS<EnIS|F*zm`6cF-
zTG6?I-@$`N=ca6>bF)z+6)VJ8Yl*p~Y?zC=EokMr^4th<VF4Ckp@~$f1!^H!AQh8}
zNyVgMg^0}(7GMDuU;!4|U69Fb3>?T7WDBx|VTw;JPz%%owLmRU3zI@g<QQRFO9-8a
zQV>HSxnm547z$~Xq!&(#obr-i`U~$wc!M%xhcUffcFdfm?r$j@DMpGJ3gOVoE@+mp
zPzu7KacHgTbR|GaFAlAUOb(4hYqM`}^Avxv){;XjWh2E%F%FGGE4zS0GoM>xaD#XT
z@xqo-3x$({8^Mj>=Fg}WE+3q@-Rt$vY}~!~;Kt2U*Y=(r84WD_a(uKL1jz4{ZP<VN
z&2ximUw_{&u4dKcoC({K!mP0TxqkMoa)9jq`r(Vsow~1Yte<GiF|fHKV~)O@<TICw
zn-7=bmdC`CTR_t}@9X|91zWI$g)9)}mQ%`smZROBE|>$2S||)&V~M$#+X`?xm(C5_
z1q-kM3lZ#&q$vBF+u}a^Tl5zDn_fiZm_j0}B63`>DwvD80a~fpNQ!9llu|sDiltW7
zLtC%?kQF@3{^ps3xdk*j5jqjAq-TFal?`yq{-)7mf7dg5SwWqMtRVZFQbgn!{h3Cq
zVr~)xbCVcZ6_Mk5Rl!`$4ROo<vcIk8g#}oEg<(v}p{25b1z3OuSSY)oS;9goh_E~e
zA-K^)(?e@BDp-Jp7`uQ4Sb&8lY!f+(97T>p78t}!69o&f01L2Cb^*1}*NM=Hh^Z)Q
zfm-m^dITz?b3!K~w}lbXfMxTT7$I#Fr@;eagfxXjR>cVEdR6&5W$x80kM}owy`Ak#
zkG7tkzIf+J|H1$>!zRb~9oT#}I-Lg3+NU3XFu3;hx83+?dxrm+p1oCmOn&y;T=us=
zIa;Xs!`B<lox1ODuJ>dtFtFJKSfvVzTU5_%8=$zJ+zOsmw%GH}!a{0;InhgnXMV$?
zuPScVN^y%CpcYbpbY^B8Xbv<7+R$Gx5k&&8wPYen*_ep5x9o3WY-dh!k)kc*on=Yq
z(z#NxvLV_f=3;Ie$*{ldZ+Ko<fCX4+q$Y>Pp#=+=2quDwU?K_;n<Xs30xZA+EVR2|
za>hfpAX|_v3`Ym31!{p>pcbeFYGG0+i5w$r)1Z_sbP2&kFcC}y6H#_SvxJ3G5M%p6
zh{NuC=f?Jp?U#|#HI{-K!HwWXa3i?s+Ojf`Pl}OZp}&lfW|HM?o}#zB&68fl8<b<G
z>7=|^@B#C=r9haAxyJVO&~g_HEjuh^K}a!DEJTK|Jj|M~+;xLFjKZODXl>T->Z>>`
z?jLgtX^DDQTwXpnal6;+o!Pj1@4=0mr>^ZiJMvtUeRMtx{9ga3lAqo`*xwmk`}*Ut
z75`U7-^_b^H*r_LVbNFLtsnUAc<RcN*I$0Axl{M6SBf8Bbve7mm<RRD@O?^|6t_HF
zikpw4C%1s6V*~2`P8G1|tFVx@nv=*bD&uq#E3V?Ua@2w5K#Nlh7GMDuCXY-yHwf`?
zm(HbgV~5BVGOg%z!DI`9n}UfomZTUdMvBEjlR+#gMv5(dWkf2b&6Cos<)}7KNxD{9
zVlL)lZgZvx%L_MP0Ty5Z7IGI1Ejuh^L4@Tc`Z5%fv9LkBA|%#Yl47N7n2Wij7%7&!
zfD}7<T@OtUO%F{Etq7%N2@9|Q3$OqSGaI8`ILV0<Z%~%U#FS&<rq@$bNSL@Wabx0U
z81TaaEVM_aHqV&IE~n>mOKqM~L2aH4xV6@`)&n8lLrdw!p~X`%u<)c9DMpGllL4>*
z3!x+p;u*wi&jnb31y~rmN+yDdXwL=N!k;T!xO(OB{${VYvwi8&*3;7$?>y;W82;$J
z&kJ`Sep9-w+h4x%!r<E1TPJU=Z(ZhuhV7K>itVZ|>RsmVZDk5|_VBe=n>%&?I2RNx
zm0NZ>XCSFoY3V<+;+C>0Zh102xjD<wIqzWsb1T)CMfV6am^&)P+zH$AspXf7TWaM%
zbD*`S7@b=*F%yvoSl7T7cr3rf+)^vd#azs7OcE@>La;z8mVHE0j1&v~MJ)s&1~H1r
zQRLXBs~lPoV*H=cD4JsVB`H>Fg}Io^p>b$s7c@&)C<P(KNHJ0j77hhBf}3`_j)`C*
zLL$HdEWpC#=ob?agplW+FQw?-4Av^^(gs;(iMg1IxtLp2XtRU`SbzmsfQ5D!WO5tt
z3Yxen`ci9MYdv1y*5*lAc*!rGioO@CvlRJ&#A&jWdl!}$Jt7q=Q4r?lmcrZwjms<w
zG1gjQZYdk)Vr~ms_Luz)&kGB%01Jkn%Pwe^uuuxZp>b%2pJ733y+oZ%1QWqTT)%v9
z;&!jsJF{{3-h&%APhH!4cBF~$ey;NeZ<Qxy_ty_!Y_5HMeIut-%C1^!IVac3gL;+j
z#4pD)c076gog#huZ@+nNaHsC?+a*a_bvb7ssa9#JUw!!dDQ?zEam(ZA$<2|M&R7R5
zU~Z-QDu=`K&tfj-wlaoVNVP<Y<+iv_=N86xLPI*2iAZTy?ckDM#azsdz<?CXGl%_U
ze_Mo-V!16yv4CY0QIles|HyMwNMu!3$wNr7tRUuMZg^f&j1(iqG$_k1XqK>03Zg-o
zd6x!djL$qY6q2RL2V}LFR4SHI6mv0`6eGpTE+EDFf*Zk2#KP19wP2iSLUqe?b6e=4
z1uXT@yc1E(xZoza>203%MjNw&UX>~p6x<ZcDlE?|6mydpm|KXk-je-IosYSgD=Zh5
zmt7z%7nYadP^nm+mQpdP*vOV}Xrod*<j^>@=&yR=Bu`H-oWxTRgYv6dc5@3^K~jtq
zi+v=xDVCKKBgNW7*EK9bh`~uqijiXNk;$QPXrUzkzOZoh%H#dbUT<gn(xa`Xr!U@l
z(!Vf3<G1y#_fL+NT<eFgH=1i--`|XK6`(G=oZVu~gSreAEnI%z`78UZNS}wFe*D4U
zPTk*jS2b4U_n+gj%BNOXDsG-Tid&vcPi}&yqf}u5b1T&so(K~kz+B92wLZ0wT7S-j
zE#_h_<_;|l6H$n<))I3|+1TIA4rB|3v7JWE3V}k&UFcjom(DF4qFrJx=C+}L$Wi1N
zIU_8<0xUFAlSAXsf(1+j6Tw6<5rv4&5*A<q7GMDu+FdX)Wiap6XnC$dyoepfcF-hJ
zrhR}zD^(HPgjwrv>!InP1wxFFCS#3|##3?sn6dr!^jB7p{Vf&LL(@YG(2`=Lm>!xQ
zTJC~jObQEG5Dtw)3nj^+g>X3RUKr?w6EB<;Osuigpwyt$pp1hi9V#hCig9QhTJ8c4
z%{Ws%C*-+#S{`y}99nBe1vkZpc|A2F3ReP@VVt#=#+gdlIJDHJn2WigO-V6Qj1+6U
z$=|m_yL@oscCXhvvvK#{gBv$bUE6zh<odgH{QkS+d4Qa}{_;!BwXa{jQcl=am$Q2b
zxg%%322duYV)@beU|RFH`BSl*_Yd}W26yWIcq~4;%8zY7J4Z~_Dy4p1^i{>pS}AUM
zGCjEonvPP11<b8fU!CHZi@9wBpIRtti4;rmO6L~FcG7`GinfF*Wr?|%i@9Y(v`fsz
zT-ic%rjTN!Sg?RvpcbeFYM~IZS;7J=zyd75Lc0qlvu`~#J+x??$ri#-JlvJ%%5&r3
z)LIWhjNNIcwXU^ZFtNsxL*vjmv^Z!|ijrcam^P0#Pws-@IROh<5Du;AEfY8CMU3r_
z<(-rAV!;Qr)=Pmf7jsE5QY?1?DW<hv&s06M3@*GuSz4{$Lo3_FyT2LrdMCn*)!9=k
z#8`I8p>b#-NcGSXtfUwz7GM?J1R;zwZDlFWcJC1-#YnLrM$r_@FG;adE6h#MXi#cU
zM*d-hG#M)ui>G3s)um!--bgW0EHSZc6jt78BE?9t&|gxq1nb{<Dt7hC<NeKEZ)f|`
zqphc>FW!05zwpJ;oEJOxUMC%R?bYVm*FVmct+eWL&a+pJ{^gf@pV!ZRQzE|YFW-1!
zaHsCAlehA3d(~rf4mAr~S6C`;K3s}h9!F1ZoKEA3Y~A0bVDp!-P|Ak6<&<)urF-Z^
zFDsm4CA@N=InY{tg}Im;poIlkfQ52Swo6hh2r(!KDMpI5s+0X?f1|$v3$OqS%{fUe
zPzx;!gykjhr530KYN6Q>umB6e0&0O;pcWeEpcA1J5iHP&(23BA(1|ESY?iP93$OqS
zu+Z*;>^Z~?wQNDQAX^ybjMM_PKrK)U)B?3IDU?Kx5w^92(1|DoG0v1b#tSFWw(fg9
zHA|5XNO;e7{;L?UDNAjhqDL?nbK89+xGAtOD;61!7pqCJJZVX>)E{mNDMDhcB`H?Q
zMv9SQq?lB!?1E+q3#A~W7%A3<JRBN_7Frw@U;!4W1@pP31M+vD=UzTIal6;+o!Pj1
z@4=0mr>^ZiI}!&*vsK<Hy0ZWFo971CzW%;l{P?QNIn!Q~BQVSS@Sp3qy;Z{L-CsX^
zvAI+C^^KgbDu3}yE$2ipd6ulwSNr9-;>O>R;+AL7lUqR3QL1%+mx3)=!a^1ZbIU>E
zK+7@1PCDQ~qZSH-*H~gM=C<OF&P|<9=jOJ!Pv;h}(zz)*WD7}*tcq-5y{cd?<_2il
zU-ozL3#ORM{su8bj@mq#l10B_1wydDDceXfQY^qqijiWZ*zh0`mM0cr0Ty5Z7RoMY
zmatF?Vs0TFnYo30tHG4xdTC8o@GL1tikVv|8{+v=aFg4@+(I3qH@A>ku(^eddb29#
z7S^i@=3=g}e5gP4&=MiA01L1H3uPBHOIRocF<Bmj7zAP*T6z%<Ermo@g+p7fDwvD8
z0a^`84N7wh!!tz>EwKm-umB6NP<BDHgoRQN<4nexS~DuR2|ppYfdyEA1!|$M`<wBk
z$nolx$NQVT-p=-=M_W%%U%d0Af1ynMepYnl!%si{U~uj0Z@cBcuezM`?5&cT=V!mo
zWq<pVqh*xthp#u9J9XdR%)jjxe;Fq%`s2@zUh*ti<sIhlJIy1-&A+aWQdL|}ZUxUO
zTkQE~VIf(Exdro>i@ELbLM;@=cG7{Wsgfg$zKXe7E6l~*04)=d4h(ZKHzIjbEC_Mf
zeFu{LWq%7M)>x8aq*$ABiX6+^_oNsp)`p238iyA83l?Aj7MgsITA&t!1xy4J!9+w_
zm1>Dv2tt^+nf-50FY1;}K3C1jgSnWCxs!VXb1|1g<Ir*!49^Kz$bx9CmqwX!rfeb`
z+b@~UT1%-|DI4ZuE-6Ne<t`w_1UJ>PYprKkd}zusy6mPLy`I_%hr#K|p>b$!*6-cl
zJUzX&zFy-jE2xK7DoBcvVxhkTH)&ag<-+nfGB~s#1c%0<acHf4f(2M`Q%ED9nFuB#
zSinRu5xT#PL@*R$C?r^5Y`=~2|E1Kz<%1Kqd%fP7jl1_A+_-t_+TODxQTzT+<#fJ(
zu)j07_VveOB?Db`IcH<1IV$nV!sWa5+rI0(GV=0E&7Hbmy;8Q)s>|8WUYyyh{lt&X
zM=;XVRdGkpS@(Kj#r5P?@U(C3)UBQk-l<=Og)9)}mQxCIF}FQlsD;AVP9i%MsiasU
zbzy-p7jpx&OhlR_%*EU|NJz0D#MoUQ>@WLUFtNsx{Y|Y#ijiUgT2hP@Yr{lXfCX3>
zN=<5kT4;OB8kD6$OD#|f)IyVW!vZV>3#bKZfm(<VJ53a|5QKQRtIbnFTdnnMXc!?a
zLSn5YDOSpcxtPnLacH><hT0q!vLK`wDHdkM#7%U3Ox$=?D&H#M&^WX<)azVcl~u`S
zrJN=+mK+*~7WzwAE-V+8hyE0nw?_snzyd75LJ>;M5*A<q7GMDu+FdYdyN&Iqh<1Tc
zc}xU1g`2LvN+GfEu7;@}AjPtRn2Wj5IMZ5>XxEhER+i#y_ut~1iqvvGO<!Uz=CZ$&
zdjoS1?_a(0cz?6k+u6SKXzS_ei+7&%FGTzGn{qmDfBD7>gKJ-JoxGJ>X;m1_>EBNJ
z(Pe)47xiC0d9Opw*IsSz)cxb!nB$*(24;U?4mDT#F{97!eLh+aHlyO^A=e$Ht5sU&
zDHuMkid)L&$t}AY7BbA~%qe2711%Z6#<7mMm>Zxa#d4;R&MmTy&P~SBxnV5_4+w{r
z#302;vBU%^Cb%iea@8d%mS82tNU;E`R4mNeK!r)gq++e=<j{f;<C6!gp1e8{dGbDg
zxG)!U7f&9rzwB=^nEhpc*E)HhgNFUhLzw+#e*>(f7%4`IHB!^uLOEVx0Ty5Z7RoMY
zmatF?A}ntSG1w+XNaKyYzIP(B6#0PEmqr$Tl@uez0<?k~!A+a}!U8P7!sO{G&z0xO
zbBC&vTA&uFh4MZ{yA<4na4_X~zLY|6Q{<G(EQ-HaYssONvSDrkjj%jHBP`E^7;_6T
z)>>k2DI4ZuZVOtem{d$ECKW5YpjpB~DTtT+f)HNv<Ip&?_LaN87A#yoIB~nz>z&!S
zd+))Go2RbrJv;K;S-w>mxBKgdFE-b{zP^#Ik@okjpPKuA*&L6R56vngPQP^iJ>YkW
zXz#!M=DES0y1#E1SF`GJP8V#lHL%PN|G9pf;+DUz4mE3)mVd+)H*4j|E!z<m63U$;
z33DB2g~4kqF&A@N^+$?jH-^s5ZE>H@EnuZ{Q*>}>NsO!t`@3FMFc)(JwCpeYyLfyV
zbJ^b@hR9J^o+;VV4UI$y`<t?j6eGm~tfUwzMv4v331N9+5f)$p7GR<5f@TQ|r6A@O
z(vg{4$O&76c<ZG#S;4cU7%66Mp=^lfOTkTU3v&x~&fDBVM!n`1GV0B$m|Iw{DwvD8
z!t$a1&_hdvzyd750xXnW&@5r06vSkC5MmIBacJp9IJ6WJSrra#y{cd?<_2grC^aa}
zEey{TJ+#CkEWiRRz(Uyt%@P($L5wpQXKKx;;3oWp;06|80T!r*zV2_vlOo6T)&}tm
z;th_-t5+WHZ}xgS+m{|~Jw1K#&XfLy;TZTQM@xBr_<Ezc_VxYE+)C})Ql6&;%h|bB
z9@MM6ApU))Gxu3>L=Qjx_=CZny1(uI3G?i8sJTkNCqMgbF8kYxTmHH_O0`yL`A1A~
zvsRwmvh86ZDc(s3FxP=r7`(<3b1}D-e56=;<%`ZulR)Pdu+q6HIykgKjJ1}STgryH
zn7jDBbJ>DaEbZ`uxU$e?w8Y#|DR$@F^^wQCJhv2Vm8ApCf#yJK4s6UV+<*mGfCX5{
zT`<g`VId15auhkn6tM1Z+Fjk>cq;B6GtRVL6qXfyPxn{%SNFGUh;~VekzyPghnBm5
zLpw$-6uo6W*L-f+GHM|?DYy~bgq{}M1R)N)ujy&68{03KSYs);5!?uF;-E<>N{W$U
zf*Zk2?gGJ$;HI7vf}1=o4>>drtu>>9n_|Pf<d+eJm;B1;?pjO3&!ub}T540w#oW-Q
zq!=kiiZ$MZL*vkb1=IqyAkUTO<}Q%u{`Ka$mk&<d?)7?SHtybgaO38wYkSX*4E|!j
zJ6`{GUw)~%_Vue*ie+4NIlDO?$I5Cy@uTx0(wl?%r*b;qKiJ<H+^PHHu`(IB>T*sx
z(2{S(pZIS5HpMM}T^)~AtCVTiqOU4$*2<Gxb|x$&#XGqc<~q;{gV$JMF6Or5exz8D
zqI7QRcsjR$mCjAk!J!pmthL14QZ~%R+{J_Ui&BKr_AX00m(Hbg%Z6x|n2WiX+ngz+
z7%3JkpcbeFYJplPL~NF@01L1H3$W1cg4Q{dNXFcPxrG>3kS&CtFo-w%pQ11DSYb(u
zkz%A6DMpHsVv{OVo}0>JcutUFSrFq)#+l;aG+7>It-o!uJf4byh4-pd`im88S*ak0
zmKBtWNyP%Rq!=k?;)X-ZUBIDftry`m?;rFg#asyxLSiiXtWVJF$HbIlDH|!4hmcfE
zDi#QliX~&EV)0Z+#k~9L-QPCUg9TU!B?$|#01M3=3KPLZ#JRvkFcIy!01L1%#KP4p
zkM}owy`Ak#kG7tkzIf+J|H7a$o!Ri$UTv;@{o`DSt5UgTmvbf$0#2nJy?D9zdHuF;
z>NkA(#tVZxb#I-#mA(Gi+3U)4iqpSg(O17XnsQ8W>vPmOk`|S5`qQSk`EbqYB`7W|
zWN%>&IAU%&a~x=e;?zRE@!>#Ak41_VVyv~q+)_5o#oWa&n9{j)E}c6(gatS0j9~#5
zU;!4!{zWrbfCX591z6BS8?~3Z&GC{zEWZ@olv)XH1UG`4Mry(WECdV8Eo3@lZlTO5
z8D~mIMv9G8>DfbhZW2RqBe+RS7-uq{Ta@LhOHwSsN{W$U0an3Hn6-flGv#Q?u~nTM
zS`cFV1=Cee-l4mZij}fqF6Ii$h2>=zG)q`01tG;qF;WZ`4h1)Yn>PDpBAAGf2(SPP
zuuwY3?UIQILdbK^ms0e-weGF;_Q)`CQ@Cm3CWVBF8xuF#_Azl|;-(nRRhJxEg4M*0
ziJJf`hgNKfHjg&XbJcnI;Kc1-uXkqS?!5;$Zl1cf_w2~^cgmB}fBVgIgKJ-Z-(K|`
zDq4TekyJjl!t&?(*|!Sgc7Ofw#pX`k*EjMISXEumiM#WmsqgeI`sy#o(*mDV-167e
znf6*##_1(j+<dq^xn-}zLZNu)ysz*q1zWJh+$@j-t*8NNArl)1TG*|Jq*#_BACMw`
zmRMpg=C+RsolED2r-cPrfQ5<UmHo|aai9HVe`AMmXeq!sw0J5wG^to-?%F)*FS07r
zdk)jT%AsWiNik9^^p~()Sl;R{Sbzms7z%J|fm)E~PAX|?fm)yzh7MGlC)E-xzyd75
zLfHk)5*A89w0X37+UQ#MH)4jtu(LK#HZ-((GIq$SOxn=dGxCC)te`wM9g2yYh_jk}
z6LXU;n484Ns$lMVRl!`$4ROo<vcFQX;h7>VPb|U$EWiRRlwHs)VWAX6SS~DY&8V<E
z{Dj~J7GMDusD-{ZPsWoX$Mn|PJlZ^?Ba&JemExfntG!qqN5-GK`+N1u<NeKEZ)f|`
zqphc>FW!05zwlY{@((}#_=CZ<ufOfip4wR0ZJcx7FZ|xAANaO@^^>E8nm>HK(cG!~
z{$`Y`*so=mv*YgEk?j>R_0Q2t+j5+>%kMjXWr~}BU7d75aXq;eJgaQ6=bwdzWDw?-
z0}FF8w>@5{g~Hg5$689uOh6fPF_+Grv=&T6Ixx(|+}I(c7%4`IHQt0n<IsWy)B?58
zS}Rz91y~qL1lfXYLADUiDX~Z`Pz%&TlUHl4=U~iPSbzmsfQ8%zL-_~`SrDBForuuW
zIuQ{w9Cioq4dNNZE0|bgDYy~b2yWt_5!|#0fdyEA1z0GVRkMTzSbzmsfQ5D!ObpqZ
z6|2vN;6`v`gtT#$X2sH5AHo7Gzyd573aJeo-Cx~bLm`Gjau*m15jobdiHTq$!Z}b2
z$w{+fW%9#KAt|ceh*#6t0?(zF#`a4EF&A?=G!89y0f#p3(5_5gQd<w3gZ-VswXZ)O
zYaXJ>=IK&jopU6u_Y>c(-}c?{`UiXYrRGlEuU;vKz^cpHGczIOSNn+{ov)VgC&e8-
zM;#lWxSrg)H)alO%w!HMq>;kh@|a+59+8+kI(|-GrxubJRZ}hhRm{y=VJ_wdXqkvK
zNgP_ywVhEq%#|$!F=|LqI68kRTPS72T+ChkvJ>WFF6Iu?R`xf|8!W&AEWpCq?#oWF
z01L1H3$Rc!tow#SO6;)KQgBnsCb$vY2yPmw2@9|gEYModbVh5v^nr{sr6V)WWSl9E
z46XH?q2|!ysi?knm6>8vtW=Og3sv@T*EmzzQkaXmtxPAyNU=CFU;!3jp?PJNTA&u<
zToBv{ZrXDJ7GMDuh7v)xAY0J=)&0#~01GFt>;AU>abTi!e|3MuIZzA9NhX4cU?Qjm
zY9V$(b52qV)B?3I%o&*oCZfH!^{;%K>GHve+r3`z%*Ne&4{qE%b#3q2k=Wz??JwVW
zVQ}s1t&_L%Z+q4EHs_RQm7%fx>=#F~1AOegtrYEN4_|w=xl{L#bI~j>B6iv3oQ++N
z!lkRQ_j&!cZ^{9pxcQv5TPgpNm;38d-12aFa?7@dh1^n|=J={x?D>zu+&ps}Xyx#8
zpr!ukhK7aA%P$>hrB)6!2ijtf<v`=mlEG{ERLsTP04<$M=e7ue1z3QEOc5fvWPjP;
z&|4f@5Mq#5iyRXcBFF4)=%E!MvDT6lD`mr6%$15YsUIxBLa;z^Be)UVOis;E3qc4D
zZT7#Gu7{?F7MV`b6w5D3u~I9{#as@JLo2(WS;9goh_GB(-l|R`q$$0OkQNK;ZJx|@
zI5Z9|F=5KlOMb<0uDTSKCs>U$8D|Qxa%dcy;6`v$c7fpLkXoP?wAM>5(JrZl!by3q
zJXfAeEl>+3sg*6r7Gw*<H({6vCW47zBF0)3umB6N01Jz-aP`XL{mou)XZzBlt*56i
z-g(l$Fe=)wAHLXJ`}+DuZl$8Zms-vlUrt*e7a%P26Ms3L@Bf~>{!R%>`ftB^Zg8jW
z@7rU)^61xDqPIVXnydVn{Or%UJiPx_5$(H*TT8RdU;V^mqPST$Pj1=vu#l|l41r><
z1FasJ6G)9vrEI3|5_2)Pl`*7PN>MsDw*{SB{ZglYyPo95+<ds`+;Se%xpZzT>17K=
z*J5rOJ*il#w5-Z1#)r<$3eveLMd(~Qccec^u~8`=iX1aW)8<*v^JWFlvcGxeu)pkY
z3tCbvw*@IiijDLKDK;tvDVC)$aZ@zanoCkF&m2;W6eGokkt!^}f}xO!GnGTjZNZ^&
zXd^Aop^Zwxp=BvJw232R<&HHemS+x!#-VX&99r20%@P($K}fOGALbTPf0$b^w-A^x
zLYf1RD+}`BmNG(`6_kplLy?L}#YXyr6dRR7Dwd^?ilr(oRat2%70WY+{S93^cnJt|
zb04w42^#j7{S8d8ziHmsUl$0K7p>P=l47KoS+P_at^SgV<+hNDNySFCWa!W?ADp<|
z>-ElT+`aeU#?4dL_MRPSHOUWOZ#37wzQ6e=Xq4GU(&$eST5zd*Bfjt4Kk`}q-cLXN
zU~s4IZ@Yhjx}MWZSn5yL!Z$zrZ7%!UpBydEp5oThtfhSwH_PV9E!!Rz5;UF5t1#Dr
zR*%ey^J<~##9Yj6-2^FCoF<){CV|c^jO}#6)|0%Li@BIPDNQgJa~H?mm@5@aJ6w|R
zWtVg=og1Jf#Yizyj1((GY?iP93$OqSurO0pYfx%Xh7A+kgr6`JGW*}07TgGKf*4~5
z>!i|{_5s07sS4&|uCTm0Q(yrWf(3#b!HwW%Qch6|K?n|wL(5RhWO+I=ljX@xZ}Y5|
z)?@|s&`Je`<-+m+Eh$Ed32p>8xeJDt9Tu`6UO4f>NhnDUEri2i_pT4`{(ASfU}BA>
zuv}O!ERTaG9V#hCig9QhTJ8c4%{vkGoRH_{X?e(@acHd>72FgX=BAL0DBR^(X7tut
znsO{<<Iqx@{#7#f>Xpa)o4wx7_N7N#PfuUG^Q3>FRTMA3)Li@e)hp$1d)4LaTq_Ui
z904jyX2$ZP^Hux(R6ljFzcaW~_s3(U*T3p=&c<#{=!!q_-TH0cb*8-(H;<%RrRBe>
zxLGStZrPczFylzVTnAb`GFLfypMMr}F}Lm1kzz%P(z)pj=-k5CP9jU^a%d^da^j(A
z*ZE7##oPcbDMpHsVx`H`E=jQ<#KT=uj1-F<A{9&N)oIj7#iU{d6KgC<F;a{ai-RUD
zEGb5cEq<#(Dkc?6X(kmjaZ^IRRhOg~DMpHsVq@HZ1z3OuSb&9@`q~I-1{Zx{c{(y-
zdEut9{S*>{8^KLtV&=gz`!O-jRP>0jTv#qFZ(sonun;T|+@#*(&^WZvThu}j!j$7y
zmf~#p3ZU82d)}*mn2Wi>@)G*AOUzBsm@F@IqF(aL8EV(C6!W&$lKm}Z!(7ajib=(C
z7YwyIEM!4QF;Xndin)ad$j1J0*%YYrl8-23<cy>kDHfoWib=(!V&jCI_m2_$IhlL;
z;Kc1-uXkqS?!5;$Zl1cf_w2}!^sl|zT>JXRxx%Scmvc7u<Zrvg58wN|e%m*3mNe(i
zmv6i<xKsDm$y>RVR*mTA97(I3Z28$Qj@G}YPA@@mYiXAFtDl&GQrxVdC%5c%SO{G;
z-oLHzECrjt#N1Lg2U<b311%4wPCAeZpu{H&mku-sS}R^L7jpx&umB6NFnM~CVnK*O
zZAdXvtW}-tFZ&yvI#_@OSZK~kYJpm4Ss*MgfiJZ{El>;1hJXcF2o_Ka)B?58I0u~w
zorqw8PJ~W`PJ~WGA!4(H1z3OuSb&9g7i7;N2GnH>vIW_~FlVF|s0C_)TA&uFg-M|#
za*VL8C4^2yDTr~V+%aA_iMF+Oe~)J=@&O6&+0K6z12$!;%~SLU=3;KUj|4Xb7G}jF
z!|`G@DV8TKDVF-fH7rF)thFS?O4&#;Qj8Rnij`f^EMcJ(gcKvi+K`7s<IqBj!vZY8
z0=4kBF`s+&%H#dbUT<gn(xa`Xr!U@l(!bDjNZ)?*+~C^R-?xipTy;5TAZc<+W0@cR
zbN#lrN`AWg>xVBkcj~^rkt0Cu4y~V>ITz4;c1}8wxLc+5^Gm0B^iI*0io0G#OZ62u
z)QBe+7Ls+CTMiP;%@eO<VAsPh=3;K>E6l~*R$9XXEWkqXChd|GBgGcKk3)(HZfZ0%
z$&ng*rRd17l44mE%*9;H9iAz$01F&iPA$L!ER@5sSyBt7Ai{ECd22?s){7(SOnas4
znmAbI7<p2R6eGnZc8rOe+!psS7jt8WkYc15DaN7owbr%PwbmzFVuBmNjXYPLTXq4p
zKrNIAPPQOhh(Li_D4din$QEP^)B?3YEsP|B2IZ&}hC(uOJ9(X2pcbeFYJpmy7Dh)T
zwJ<6LwLmSjlU*(ls>6}SnIe50RK*Bso}TU%tHdn9?9xj^Az49fo|Ga+NMlr{nWMy9
z%x(9EtFL0P_@Rq3vlN-^g@Vr=GdXgW;+Fl*Gv{BewSM{F#O+?McV^@6y$3gLp1QX8
z?8x<ppMLzo;M&*UcJuFM<-grIVrt$qF#G@WZT+@Sj+P_ohp#u9J9XdRO!>0h16TfM
zv!A{7p62g6$K+>KgDP&R`&vuIEoJlM=C+500-8>XvBGnCIAU(r%7IqYfCDY{M<<b`
z7D%ze;5C+*i@B{2q;u)q5Vx=Z3$RdnzwMI!4MOy{+25kK*x&RbBF7>m)>@KcrEHjs
zxr?t|6FKUkWlEN<%@QNdUt%ui258w|_Lu!-e+v<tB`m-KEWiRR%+%NB7K+O-w~&s^
z+(L5G2<duhO;(T;D;30C%ni^A%Ok_lpgf+X7`p<fz+;6a`^)~azeR+!OUzBs7z!~I
z5<7(b4OMp7eW^c3Wmb7*RfDqRZkUU?hC&+g4hyglEa1>MG!8BFXQqPGLJ&eKCKb!(
zEr-UTwPsXsBe;o!6Bb|r78?1ewVopS5Efto7GOc-SQ|L91=)g5#NSdU;_8*h`<uPq
z&i188TTf44yz``g;r_w?&fwbDACIjtE){Mn6x5tX%_?o+{Or5Ae7O5vC)axUrRGlE
zuU;vwkyV$odkLw6GD(VGvi^}OB@gd^biNkkr}_<wTT8RfBc`~ef}Y&m>#$Hj(=o8K
zNi~mZn4460pcPa*&}P^GYJn6h3|?c2xtQC|_0YL=Ziri0fCX46Qw!~q{S87$#b*Dz
zQ0%WfHyvA!O&3c$e@TjwVgXuGj1(iqNU=i1W(f<h01L1H3p4e#9$Il3dT8m$I`8A?
zq3NNm(Kst74=F~9kz!>-v`b-mWH`cdVR_0_Qj8R9Ri_csBE5`|rWY}`KNf6E%8Lab
z&_gQ)BE?9tcJy8<CKU_)1q-kM3(dF|wLmQd3*@=-TzT%K;i49T5b|7kt~^(pr_oH*
z0<}ObPz%LB!9pI6P1q)K6gi3<hs`}|fm)yzs0C`FD-p^o)6@dBKrK)UWf%Nwn~2K?
zCvNw8y)zqk|F8di<L0Srd(Xaq<AuSsueVO#O8HWdwbXJ>i*eqqh?8e!oE={r&3Un7
z?{yN{|LN7{PTfDw#YfAO-LlI$N_F-hY0eMd`@DYJH}!A#e^cD0o}k%}iQ<-r%adES
zJuIZq><r$|-c0!o6;jW?in)2_IM52U9cZ(f<Au!2FCA#5Rt_`=T6-vAF6IVkVF4Ck
zq0#Zw0<{n<;Ltd<Hl&3GSb&AeIE#s3BAAF_kC|Ga7N~{EwykU-gu|dVdT6O3^w459
zslRP*q4<lnmK<6s8|GrJJXfAuc0sd*g;Eewj1+4pw@lnbhBJO0MbQ+?FG;adE6l}Q
zQj8QUyMPos6qXCih2_HXB9xjXEWiRRzyd6^yC5T)c!A8sjftB`Yh(+>RmpP`7Fz3C
z>#dUP{<~0P2kWHLnDzmAZmA09Vy-+_o?CW-JXdhjc9I)!!l7|!9GZ6`$}WHfFIJ}`
zHHhcB!I6BV778Z~;)QT9h$qke*UEGM-T(2we7w=?{h#Ol_y70!|M&8L{=fg%!`J`1
zu2FsMuj-E4FBP{Sf1Tx=Kw5E2R=w6zaZB0$71MrCZmIiPOHXbon<sZ<vBqAzrxtR^
zu*B9YEa!}ADz4(Tvuh5tg5$N84zyA>2bu%zf56~{1I>ZvKx;PMzw9I-wNTEwwU*RE
zDI2vwEl>*!#xyav5M!++=9aQyF6Lq`=9XR1EMcJ(q%+kbTaYct7Gw(=l!cJ}f7zFp
zF&A?&7jrQeb4SDWo%ar;VkOgAYbg~gWn+H}XxQI2ARDAabZ)*9iMfRsYb`Oilnrw+
zS0_RzqU?fZ2@9nlq!=mI5ModT_IH#7m~zZgoIMnl3(JM&%{gKCx!e^C3$OqSu%L%l
z{FFR5{nWNRx1^D4E#<kTY=WBt8o^D1Mh{I7t<~Zj8iy7~1}wk=EDS9=wLmTW4YYaw
zpGW`v@BeMD*E@RipDy?R@zOv1`u%_Z;Kk<J*Vi}J&*J8ItbAzVA6{&WIQPENUydht
zPhNkgi1z;5Z=QSMrH_B#jw5Q7AKQL*&b4dh=wD&^bN%dF^*8(VL&aVHxf(t^ikmye
zlUueuEVR9Y!8Ykk9$>Bmtsa@HACZ`gxvh*L#ZrpWxw$Rw)47GQophkOfl{yqOU%sz
z(YbVPD{e72w*}_bECF-V=t;#=rDauCF+Ox|RuFSBH^eO|Mv9SQ!!w0LODw_yEWiRR
zlwHs)VWAX6gHnUCHKW4v@Dqb@TyT>Sh2SP*hpdX=X1%HiZqlI$%Z245{XvS2N?}$k
zOR;M{cfDbSa=DFEEYBSFm;G(&LW<?KAjL?r(V<I<jY>g^WhqFpqN&zgl45!0kYc15
zDW*YLc0sd*g;EewEcJ&sC{uJu#iU|^2@T5iT5;LTG+CY%l!~Q8k%~#hM*4#k8<j#T
zmZgx2r7A5|S!pR1%QJ`l4P84JF~i*4N9=EchW%xK0~73TnzyvH=5yDp3j3Q<g#BfI
zNBUz-iv6em`tRO+vDdrw%Ec@H@!7xm5C84Grze|hU*F$cZ`&>Cf{p$Z0sW=$_I>9y
zme1<<e)@59r|xgNf5I_3Cp28@PggIY9sYjb)^GddXnFR2_<BQe>tEkQ?aI4L)0c{y
z+Q5@rwmmE)XgcpeVlL)l?(j6B7BYH)1z3OuSUBva1F!%KumB6NAh^kNrV|?0cq_w*
zMPC)%WUT}@f}2QdX3xx!Vx$-;Mv9SQq!=mI>Pu~&5Du^a3$OqS&7ckwk>g4xZi;CT
z+@y=v{nh<#F<}sIQCvH;-6<~$Qre|FSDxFBn48ZnU?s&!v6h?KJlZ^w*1!TRz(S)s
zsRe2wSinRu5lqCS*QOSN5dCd=ZV6xHx$@lh$ncV1a#Nlw&yB1>o2U4TwU!)ODH|z9
ziV1E6H@ORj`U@7aARHQp7FyhVZghOi=bF#W0UE)L;6`xMWc}0vwLmQ}5y#%s{cTT#
z0T#`QMSeTbOyefvzdZWqfB$cLz24EA|8%+kkC*=8*YE%P;M&)(UMVr%s>|8WUh4O@
zGo2!?fO~xT(fMFn^LzYMewq6R`#XbcUw=IICq(pf64|BxbQ8bHyY<_?JDy(t<n@<d
zYVOok-1Yyu6gRcLC$~IDu#lkX*Z|DM+<IhAoLA$=?ZgK#7js)RO^OvMO6R6CpmPgj
zJ07dLf#k@duVQZ2iq55TL)>C6=C%SA7GMDuhW4IXpcXi^$smJTpcbfw#%l_01UJC~
zYJpmy7N~_n#AXQ#umB6N01NFdm}rF0yI*NhLuc~2!rX41<+<`)d9FOS?1E+q3#A~Y
z9D@*JFFToXH04+(aMoC|zw9sjJ84t&&>}Z~xNFL>fYp>^iVp9gjipAD99i%I4a!m=
z%*9-D3+5Jb7YwyIEM!4QF;Xl<hEz-{)@pHBfCX5f7K}5+F3>|W{G376yqm%5r%D*H
zU@5pM1>(>+G{KGFCU*fTMv9SQqa%`97?pw)t25Jr8^KL*ax%~TPyhAbz4>CVcj=Xj
zSN`L(fAb&y+j~z>zWK+wvXxd{&YAX#KSde4T)f=-ynfp^^&7r?<AuSsueVO#%K57L
z;4kylIn<ndNnx2E{zd)wBi`Gpa^<yGn>%$CcbPJlEnAj~n@NHvw>(F%kf7<F_Z6O{
zVDp!lTgv7@D-ytgmao=z#1yqaiY0@Wk)C5u4CZ2PfR@gsb6bSK0xZBnimu3i*xzE|
z*x!_1>~9IoM2;yW#`N|iQl@@@6w3-?F6IVkrDCDV2Dp`qB~7Jb`O1g}WifASE!p2v
zHq6D`7PO=oDMpG7Pg)L*Llc&l(5GEe3)BL&(1dzS1QQV~pcbeFYJplPL~NF@01L1H
z3$W1cf^6uRxEXE>CZg;O*+Te<!Ly<Jo3POR)%|Uiq(QtQrwrnyznD5_S86qV$)RNh
zb$@k#b$@k#%Pwe^uuux(oroaB_`j}GeBAO&_P5lE{bhf(*0t8lE@+mpPzoXylZv%Y
zpA;j-A{K=OSbzm;!Ng68!38(-gPZ^I=%4@nzwPyUM{oYq<^Dfj`iEb?|L?zV7eBu0
za!xN{dh=n?SAVV_c&q#}yT5+;Vsq{5>l>Ngm%sR>mUE()JWFCqW0{}$%kemk8xFlw
zM0@}3H_r|3)K%PN$~e8`iklCYC$~IDuuwqLu>lpHrC<w|n41N1pcM(=K+74<PV_=8
zkYa_wYb-Grb6a;q=hC_1X<-2tU?H14i{B(8#YnL=^jCSrFc)(%w`_>#OOa!4i~AzS
z!dQ`GiVkg_G;djz=?$IfUuA!@f|!fB0a~31oe1`Kc&2b@iA7j|1z3QEvJ09eER=$n
zTQIlKno+?`_=&-6nBXQO3c*dr4q27y5zX|k3U0E3f}3<G!t$8rXc{S)n{>h4Bt}+c
zI$fuK6?3zKn2Wg~ZrNY<S1L9<Q-tM-MOc6ZSb&AH3z{V?l!6G$h2^ao6_$se5Zu55
zEWiS_&=)z19HXHjTaYbyRm!VUNkrK~vC`B6wa{wj=A6)=%+u0PNN6ZSAuh^nHB>X>
z;a;(nQ*p)X|9s`~{${VYvwi8&*3;7$?>y;WSnp=T;g6nUV5bk+Ec)uV^#h+AEgSoX
zuQ!@&U*F#x6G-_hW~fx2fzEQa$6EZo)BZo-cP7w2t8(Sjk3SgPsr%cm;?}Bk{x+sn
zw0uBuOMyJOx$R-0Y^hE!p~AC><poR3%>p^l%7NuTOa0O5-%<;tSYhxQOU%XGHo>8D
z>D&;vumB6NP$tFNCHotM=x?*XMQ^dc=|x12MM$i*B*jYEFc)*%I9@6y6^keg7GMDu
znobL~KrI9d1UG^k!HwXi5V2Xp0xZA+EWkp$3(9;S6Tw7;eAecn7P^EGIf@)bj>G02
z6Tw6<5ljRV(Ul10Z3k+BTA&uFg|Z8pB`lPJc$+5(aoD{vAt&f2)2VXCj4gG4iyko)
zl1Y~NT=ThMRxlTH+v5cmU;!3}NglO8E$II0{^l-#1+!vtI0|k|me)vzT1ZYZ5llpI
zQnnylkS$OPe~W72^1+GQy<YFk#@%}lZrnU|ZSUEUJOpzZXsjhOy?ryMQ8WD;7Jc>I
z`ho9`*FV_HFE!V`e)URejjXzyJ?)jan>hzDr63=jj{~FGDnFHm;QfRBoxz>DKOUR%
zUCaI-6t@&ladR(pl&U8e7Akm_rAvYqbJG%IF6IVksfE;6q*!5WCml$RmiT1h5_2)P
z^;%3sF;SR{xvhdF#YizyY-sPP1!{p>m=x920<}ObG!B%BU?PGA)B?3YEl>-Eh|Llf
zU;!3j0T$X_Fxe>=If@)bjv~jh3z{V?l!6$<3qp+jb8!ao4C0j`ku{ba8i&TAacCSG
zhc;<WwRxh!(Go)UHw$7ux9BbNx#>l`hc<SaPRfe~AJAGa1;Sj+HE~0V<t`Xnc38-Q
zkYc1*hzw!5u)NjcumB6NKrI-=i(R0#Zfrk;s(F{R)=!l%V!={yQwqePacF`Y!A<T0
zQj8QM#YRUYwJ<6LDb}15F@Yht8I|Jf;lEaE{pyv+`<uPq&i188TTf44yz``gq5LUU
zTF%+n@mE~_wwG9bakTo8t$b3>9=`T!bM5ON=gL-Ebvb7Uw9>jhp>zMtd!N^D`=(5C
zZ-4p53xhj#Z=Jj~_Xo_J#abYy6jyQU-dJhVHV=;{x9nV4C?Lh$gmS0Fh`E@Hxx=0_
zDOOc#f#=doIyWoGL=?lpL?mOo=|B-|%P;BNQY$*Q@R`n~b6ZJ|xtJTXl&}B`u+W^7
z)B?58vVcS5&_W`>0xZCS9$MK2)WV@WSDxEWdWalFjsZtlfCX5XoK9jQf)In+h#W<Z
zB1a~IiD-9$;b-%?(T{@#Sb&9SKgbqj3*j7O3$g{-f^4A>v01_bEWiRRz(TtVGF*)J
zvyC%_pBU7}@N-NyJ>2!eN#UlK{8C7i1Y(6HDV7z)T+9v7>i$NCqx*Zll%nsxg=~Ac
zKxoXt6lt>DQdnLph`9wcCT`LcV=m^lGM)V`2Mha~=4}PfTPn!@W(C<__Luz~p0rD1
z;qt+W+r3`z%*Ne&4{qE%b#3q2kvynVzC@-!8&Pv?z$!l`Kl{t^`UiQZ=*s@vZ=M@m
z`}+HK5#FmV=ai?gb%o{6^|No4ZMggEhc7mF>b|~_oSI$6{QYam6}MDOam!xlc&z#e
zmVzx<dUCTsuuwpXx!K$9^lzs_deK)MXnCMJ(2_a#9cT`;a4ndNx$Qv$3$OqS%{fUe
zPz%8V4vj-wJb1szi`8%~Kg*$UXc5v%#q!L-T+GGX;W+^du+TR5s0C_)T9{PQ)B?3Y
zEl>+(7c@&)C<W2x(dKD$CvBdHb_e52#+fpWH07B7BC9f~H)l`1acEgVJ+uriOx%QT
zZTicYn{>h4Bt}*RbJwd1=3;J$TlSazm5L3|6g{-WA}qiHEWkq91<eu`N<oC>!t&OP
z3d_S!2yS2j7GQx|=xg(2JSlQaZ>`Ov%`-Y8sfAG~y8jqKdxVy4v&<56F*oQU&&?ep
zxDnj6pe4m}TaaP_OA|NONikAPa3i=`I=H!d<?;SzueY;(>Cx8H(--eN>0g*V^gC}@
zZMIU)9a*n#UG&xOJF}CY73uTv(~mzGT>JXl?s|XF;k`d|Jl4ElGVTnjf12mN)VKB9
zJ~>*Bq#wTCXztW~e=}Xp%Dzx>vv`VIp1#g`UmwBcA2CmE)(RF1Q!zIw-f506I=ZGG
za}Km}dOFY?Xzez^T+9v7!U8P7LZjoU1!^H!z@c$yZNCQ=U;!2;4K@?OL@*J<V2WCx
z7N~{tE>F9ZErf9BZ|kAyp~Vi-<_Y0&*d3+Q<}tTWFtNsx6eGn*u{dbbp^{>xm^P0#
zPws-@IROh<5Du;AEmMx^MGQZe4$xXlJ+x9b%*9+%j1<dVK#CoEPjDl+5!?uFico5n
zumB6N01L3t?gE2&WAEI`7Rug`Eu^cG=gM>A;52b#;-(GsVF4CkLF6b~h+WW333;0*
zXQd9Q1!{p>fCX0q<Pgm6S=oYY!Q6tmh1>;9#NV!oxO{NpcCXhvvvK#{gBv$bUE6zh
zWb7}##Llyqv-`IxF=uu*#*+R9J|CU0uH~m9+V3Ci?+mVe{qfk8?^^c%FsGL=*>_py
z|MPDBw(pMD3cmbObEocCugtDp{Y|I-&lER{r?_P=bPQ~L1goCQ+D-eaCpW7C3k5%z
zn-uT#5*%m_w8G#umY9pV?YJMEThuR|n_7*|EnuZ{Q*^Mug&1osF}IWrb1}D#&DdY|
zH#{#azyd7jMC2|QT6S2-f^cXYT8vl=%R@Mf-GH0Eb=lr5<|bk=_vCe9xv*SV9tTZ2
zR8lNCNs5tTu|r5PQmj>-umB6Nz(g<+u?rgcsLhiix=$@o3)BKEc;TcbwXy}-g6^+Q
zMD7A6f{9=vMst%!NJpiZ_iA+26y+NhEETsDh!o31NS-UtjYCLqBe)UV2yO&7Rb){M
z)PmqfaFe@0a3i=0%}gy&3)I4BoZ4jhs1$}mO5|oJq@A~Kl%%V#%IWDY$0SB0vR8Sh
z>-lFfH_K)aZ`nb-t5+WHZ}xgS+m{|~Jw1K#&XfLyKku_w_W1J4z0d1szbU`W_LpzG
zFu3;h*2!D>x4r6qnbQSZecLsE&@YZw?YC8T?`y9%ck2Fet{#H**D2@0tmT}IU8}To
z6%@CWO>xVU>B-GK*y)170_Ik#uY5#eF6IVksfAQaq*#${bZ#=XJCIc1vHTKqORebK
z!0+JfrgQ1sR?=fG=Ek@mEWiRRH0LC>KrOT^;Ltd<kO;5<3$V~g1lfXYAy^>KmFKp@
z2(SPPu#hQ2Ou8@;Oav1#%o(W#YJpmq9H5acgmBQHJYP!DePzTTo<Y1262)pPzvR$L
ztuVKMM)x;;o8jk}3Fv#_BukMGNErL2&ST8Q+yE{6%l@*z>~A4rvxEg$fCX59g?1NA
zN^LzfJ+z3v1UKO)gyq8WM5ecSf)EdPy+K*zlxtYhUo4f`P3R8}Eh|WhkzxT_Qj8R9
zVF?Sc01KuZ%Pwe^uuuxZp#>p0G!r-JvP|6Mn91Z7ua^%_-0t;yXEyHMdvN3CscU=B
zj^xL)h;ye><`~!#6s)lPxqkMo!noaEKYX#d_Vx9Rw2Z5o?m06vOa8v~PdE6#|8l%m
z?42Uo`)|K_Zg8jW@7rU|m$4t9xU&nQxcP8-a?4(ag#wz+c|UtI%>xbQ=ELPcD+iVX
zZAKT2S|G&=gV$JMF6OrGhR&sP!_&e7EWkphxvl<Ue{);hXMc;{Vt><%h#XT$WL4%R
zALF1Q#j=8!i@5<>shCuZ6dRr?99m)#7GMDuV4>`SW(f<WAbMzeXssC)+=QPP%qa+N
zGNKUNWbBYt5!|d-6~Rq96k&OE7MrLObCWKZyB=M#g2M8wAm(Cjh+FoT{gsLh&k139
zVi6W#0Ty7P?1E+q3#A~!a$$LEFooseCj>XJ01L1{Ex2!?-35)S6gj51*5=XX86A<-
z!l)DvJ2!(Bc&xD0=F#Q}y2x|$%n{rOZd%ZiV!16yv4EwCo9m<)DJHlP+z4)p;i48+
zPzzVDJl@~z^>(%|J=%JD`r@4@{R^vJayZApt}<etpZzwM{q0YVmh=9HuQ!@&U*F$M
z%UJ&6ms`&ESb3JTSH#pm$IKu8eP`<Tvm)9be){nTgFAJ9+g-Jy<^QX=rFe>)d!f_6
z_2j}r1<xw{dj46=O~7L=<_2h~g_K&PSYd1@dMSc!g(c=<Zfn(;h;mgN=3;KEU`a7j
zj1(K%duoANpccx|e!HX=s0C`Fv7Jl=6A>(+7N`Ykfm$d;Y?iP93$OqSu+Z*;$xgY*
zQRFCc6gie%&@5r06vQB25aO`=K8`^=gLq{~WQ`?<#-VX&92$qlp-q}oZJuaw=>E!c
zyM*A-IJB^3hC-5)#`cR1Gq#@*h1XNZME0cXSnvT8H>E(Bi@65zIJDda!z2$DvLK`w
zDHb9_4=v1^9-2FDGV0{eIJC9}=#HB>Ebbq3_0<YDD`eU7j4}LNt0F8HmdD=U&^R=~
zjo>DCf#8N(_)Ag?mk&<d?)7?SHtybgaO38wYkSX*j6JNS4>4^yr%{v6vt&~Xm+#hZ
z`|f!C)4cprbM5O_uT1-M)bC20H}TckL!fbHulB<~I$!@be=5@F{=xpv;7;8ikNpYi
zT5(J96gT%mC+_y-!a@a4cX+GppqWd|%_9SI%VUDMnA;vNq*!5Wr^PrSGOHvko2k3R
zT+D5|F-%0+F&tVtP|U^L2uw&ZQj8R9G!%zclq4*`0xZD7eI|m52<ISMkS)j-!a1c{
zk}U)w9`4E(WDBuFm<T3<iC`j_h;|nY<s-E~EiAq;Q1{oAW2%SNb*(ajCAbmX1ZV{}
zf*Zk2*iykw8&SXlEWiRR6rt2CVF4Ck0Ty6krtLN>mLj^Z&67cmHz*4?y;z+>LY^zn
zO-#%@SY|&a^4y|F^w1*OHF2|*r8s-&4a#gayD6j)W346Tma<`Pg2t4iDaSB6>~HE?
z_BWo2K|aF%vcIj-BgKl4SZhg&m9mjyq?i%XCM$ylSO^xZI=683%H#dbUT<gn(xa`X
zr!U@l(!Wq#&En;pXK$53-Tdqq^`Dh_uaj%N_G)wO>mTRJ-}b7@Ipry$b@}Dq=k>GS
zl!oB;mv6i<xKsDm$y@6SK*cSs0L6_xJ|1`1N3axZ{?e0M$_5Jsq?ntX$xg17ht%S8
zF+b}-%WjMVtw7m<=0J<o7;`bVJu+Yc7GR+{C#eN$Ay~knacHeXfCX59g`q@{Eyxzy
z_JTZDo*NPY7GMDuCPR8AA_y_4jmS~tC~|Bz1T4UUY@uNR6Tw6T3z!Hdf{9=v3K5$n
zEWiRRzyd6^yC749nEuzG)S%R$)SxW8pjpB~DTpb@AcVJhbRtqic;O^wU;Eym%u?h7
z5+XBSFq-rtBW*6v9hE|x$BWewZIfbUTRbGiNU=C+NU=O=NwIh;NU`HtihMvwv309r
z;$|d84C0kibpIKRr7X_GcGRHMpwyt83<WT^fQHUZZqm6aV_e!+lY!E&S$ZjQEEU9D
z%xyud`&$qqauhknp}UL}yL@oscCXhvvvK#{gBv$bUE6zhB)+`>X4Z1fk(4TEl`!X*
zP8{@3{r|rG=DESOufK1XLtxeA90NP4>X-T9Ki6-2t8ByFUq5`Yxl{M`jkJubnr_7{
z6;s@@7djieK7yrS3znYTED$Ud)?sc=A9uu*1I>X}7`(<3b1}Eoh;(kc3_3Tr#eF)r
zfR)Zo(ZT*EF|sPMh4rd}xtJTEWq;Y<#bX_q%l-y2M2<QUnUdAE$C6)Ve^a)RVx(Ar
zl@uezNU@>R6qY9zVF4Ck0T#+GXqK>03Sw>{y_dO#90E0nw_aM46+BCdkz(c+%7%Ep
z6x`&tFt<?Wyv;3Sx5(T=M!i`Ta|`QL1#>Z1SU%JrdT5CdSbzmsfQ7OPnk6ihf|x81
zLJR^i4lTV1hn7MjtHPnJR~5{~+yJcxr3R(Bh2fc^hn84`1z3OuSSY)oS;9goh;b(4
zOsyFe+=QPH+`s}Xzyh_<*Zs|SQskK4`fqX&@9LGu`<uPq&i188TTf44yz``gVTGaQ
z+0jd$C9Ax{{C%f+^jQ(@4?q3*gTb}0zwNH@ryCzDowKo5X-VW~zs+TT`;+=l75?z`
zMsug``<uCy+OwrRPYafco5fSyvKKl^wLXH&KVqKTtQ9O2rebbRn|IOy2bu$|FnEn6
z=3;Iu`RLrD&FNe^ckw%rbT0dw(rkfsE_4|!F?Upo-8t`_)46o+8sfI}5$Rkym(DF4
zqFvItbS|CS=y+0$6blwm3)BL&KrIv^HcME51z3OuSeO}gnp-fp5Q(^KA^e0vyyIDl
zlh@6PWkbUV>DXyHDK8d$KyXtEgt-YC^SPyGhPjyAx_2X_dB%7rV!aurte{k^RFM5;
zf7##RNh>TDmJ7?vIoU2bG!D(gjftDw1;cX!7P26M8^KK+oZkHnKXKT->m%bVmsykm
ze3d2UVlF90isddK#Y{Pd@@SGwd9FM+^cS^|oaE3rwBRI%7KGr?TsN3z+{8^r6s8<k
z$t9+J)|6wZ%3p*OyL@oscCXhvvvK#{gBv$bUE6zhBn49Te#>-7E@wB#^DLS9jz#{M
zID+qgbbhoPeA`b&wBJA2-x*x{`s1-F-?i-jVa~IcxGREa;qu-3ZQpff!(V=>xl{M6
zSIXb^s!PSqiYac{3mv6eAHh7R7Jb!|o3(<4!c@%7!>^MLIM5tug~4kqF&A@NJx%8p
zolob|xvhmG#YnNxU$6iRu+SKJYJpk^7BCS^1QRit%u@?Nh=;qv@{-O7%QLyuLn}gJ
zttBZ|%7(d^%b{^-xeJEc92T-5q!=j{W<_f~qTR83L{p$HJIRH)i5Sd1d0i?d6_bj^
zL6bd1QY<-1ijiWmLr5`FtW}+`01L3dL@*Jt3mW-o5HCfv_t08v)uc1ti74B|OMV$U
zEPCUtl&vfUH(5c<#oVxEf*Zk&*19%N?g9>tLo33GLo0)592$ofqXY6>d2Vo0n<xB)
z;KuDtLCCX*-igSOGw(!HAypEXrI+4`C>0dkq-7<=NHJ1Oa3i>hUC^AV+B`*BEbGv&
zUU|H~+3W3WUwX9l^z_9$Px==MTjwt4v>5AO%hLVJz0d2neN%p!?JwVWVQ}s1t&_L1
zskiixZ4;b1Vk-6f+~2qU=?4GzFX~<9?``GjeD?6QSDQO^|2S9V%c@JoEfrJTj3GN4
z+mj0m6+El(Yxr5rEmX%`%%v8ZGX)l4Ay`1?W~R+V6x+q2rS$41vIQQ?FEO{&iWCd{
z4rDs}%l@`bA9FD`Mo(Y?7GR+{C#eN$L2x6uDZ2m`G$`A{v571MH-ejR4%9;7Boo0z
zFcH)OwLmR|M9_)Qi3o|H`>Xrg4&A~6EWkqAg&0tmErf6w)JB6cVuta5F0R01`6cF-
zS_y6fzlK82mr`_ZsVP2gg(aO!=hC^8?~h<^0gbRc)vx!^Vh*eC_0%jyJ|JO_mO6y#
zTsk*EONx<Vq!=kyh}bM)0Ty5Z7GR;>1(Q-+CqgG8+7E)8@DsvvVR<4`gE9!AK`GBo
z4I$6X5Yu&oV<LOfbu9RRJhv2x6eGo2&~j*NIkd|MCvNw8y)zqk?>)G2^VGGyXGfCO
zd4^54oaTgvD>H5Q|M|Io+gs(A+5Ppy7n^HeU*E`>ZmHH+`Qy)_X8F_#%U?SGILA9>
z8}{FR^W5N0-QTwhr&e7mZmF2!&hS_(Jg#N`dU6wRuuwpXxrO2#16xm~Qm_R}2U-@$
zf#yJ4++uW~(Yb}eYb-Grb6e|3=hC?m7{CH7z(TesNwJ~SgaufD1z1R-1PdjnXqJMT
zQV^X8orpH05|)>AMp&N7rS9+8X*wY<vR0)lS(bvEte^&EI+XjEi@8A)Qj8QM#W=J+
zwLmRs^A!2qE(JG&8*QGUM9}6*69o&f01L2Cb^#N?M3hWc<d~<W$T6%{le=m2<Tlaf
z$=D&QGHF9+zd9qh$qHgF=0<OaLo3=;n@5|cJzjKwgAk+`EWiRR2yO&7#d|RkOhiZo
zCW493<{83K_cyT!3$OqSuuygZ6Tw6<5u+oLS{Rk$FX!Fgt5+WHZ}xgS+m{|~Jw1K#
z&XfLy*?q;*gPhZ1ET39o`EC8|Cr3+j{D-eMnrmO*-^`|7*;UIeXFq$H_O;g))IZ0}
zAO3x(VgFf${-+;*Ft}6qx80@6IQ@U7xTScCn|q<tsPW{&LIuw%{CfUb%uT>!F6IVk
zsfCnUq*!5Wr#U`dyDj=E=3;K^1DS}pa$vB<Fc))M1xt#NVx-v6-ct+I0<{pMH;F}R
zfm)yz8n4MjFcHB5YJpmy7N~_n#AXQ#umB6N01NFdnCz5`9MfALnz)Jd@vwVKjfoo*
zH>DfA#*!2x#Yizyj1(iqCRM0BH<HYj5ZXLh5QBI{ZyCf(FXDxhvD0)?UM%>49$G07
z=3=haIw_XBU})K4Aqzr^kzye-gyq8WR*S;|EWiS_VB#irLDN*$TGv_+iNHiK5wZo@
zLhb@;fm)yzM)A8&#HbXm1Zd8Q7!r^zj7o9xy6&&;Z@V|#h?l3Qi!v)Q3p|%!n$OKz
z{RIU#mk&<d?)7?SHtybgaO38wYkSX*<k6Ua;<3N}Ibte~)tTQr^#kwLuYPyD{t;e&
zsk!#`t5=GAS#>%4*^BsOwV(LW`9#Be{hvw-b^l<0XK<(PkH^LeR)4)bVWxjoaZB+O
zH}^tEsd{o@p@L`T)OXoT-6iHGi7~f48<>l^?eRj26~=Z3lBR37MPJ2S%x#?!6H!bQ
zhn5Z$b1^p}c~XoNBgGnT!l7|!!2)W5T3CG7$09ElXKdM5gC&Q?p>b%FdjoSZ7jv64
zMQ|gy2^LTb)B?3YEfgX)OIUyfSbzmsXm`Qnbdo%`<WAZ=5$*Q3O*s~B8h%b8A<s2g
zo|u?<u*`l;1UE&G$a5pZdAMuh#>7n=x};b#mK2MpVxZMYF;c7*9bWP)LSn5YDOSox
zijiVk>ssr%3x+2xEM!4AG!8AaIETiec_*Uj9_gX!p#=-51!{qbU?OrCFcAjvLNikf
z#`f!tVbnr$Qnnyl2u{it!cQ2)a|>xs?f#Fw`s(VH$NQVT-p=-=M_W%%U%d0Af1x02
z#&S-JF@LWa-#hgKUmUF`=vE#eXAfU{wYm27k8`D|x9W1vD<c7?5_T+J?tNar?VI`y
zU%v6e;7;9JCvUCa&{y0tW~jKi7rJ7qK7yrS^Ov67QZ`s9AjRCAdhRIIspr+gv(15)
z2f72TK-q!jKnov;xtQA?FR%a$u+W^7)B?2-Ea1>Mv{oX(0xZD7P$I|{WD9M3L7pqm
z4T%5?umB5_$vhJggc#ID<S23!IW`*t7GOcP(6E4sU?PGAOav3bL@*JBh|LlfU;!3j
z0T$X_kSRh;|7%ccP-;+WP?lZLEMcJ(#FS$YV*Fz4v4eF|X-xZo;HFeXo*NmCHqZG|
zioUmbVz9Ws?e)|`jJ1}STgryH1vFagX^JrybKAt!TkA#4yUZeUbT3xBDJ1Ri%v^Q$
zV?v6NVxhk@C=;wAN0DQIl|u_cNX4XLDKc~-f)F|pf*Zk&cOsf|l3Jh^{vzLrxO{Np
zcCXhvvvK#{gBv$bUE6zhBm>r@SIlB9c&lOhH!S+<FP%$^-ziT@|Lr%=4X%CteY^Pa
zRhM%NY{?H-SpHl;`&My8yT5+;VsoeN>l<kqXNN4)t1>5gnf?unzN)zSJS%Q_96h-O
zG##Z{_jf7Sf+Z|ufiSn6QVz5k>A<3+tBQ{NtOLz~7WxWvF}D@qumB6NFnMH>Vx(BB
zzu4bAE$_3x>~D1HI5ZBeHJGpf3$W0flhgvW5G-IKm<T3fC=o=CiA7j|1z3QEvJ09e
zER=%C7Gw*u1z6~7P-;+WP-;+)O&7ufEWiRRz(VYTXuph1lukrOZsr#1V`6N-wU&bi
z#H&&%B(f@#2g?{}%LhoYtRUuMuI}$piogOagy_)yO)P5jj2z0z>)JfpJlZ_kJlZ_P
zdodAtS_*DLLp7pWaFg3aaFhNbt5R~Ag-Z@CD~P$6E4UHdlwHs)VWAYnOMXEJQcQ3o
zxDnh4ZUi^Qd;Nu}g{xN{?{D^cJKL8YZ9P4G@y?U}h1p&F=WcO!qb6}zuWnuR)$cor
z#b+h?fB5Og9}KR2{cU&AA8BH)DGNTwz%DeuQ$O%+{pu%2OZ4)?*Bi~9y6<nMWz0WE
z{jND*RopC|;+DP85mQS(Ok>-^lbah4779}_H!0pRu#1ka>BpP{t$@dY=0IC~kEjEU
z&P@iFJaO42=3;Jumd>SfTW-JtEWpB~O<{l8-_TneS`ebYEpik&Mgw0e7KAwLPS{Gt
zw0R09)>v|A92$of2Te**Qj8Q6mN(4+!HwW1SU@dM3)BL&P>9$pVF4Ck0Ty7P-38h_
zV`D^2MA;j%h42&FJjb&XWA`hK?Vw4dO#J{UMv9SQq*ys_IJB-RGjWq`jzg_=t@U<_
zz{E}IpL@wKXG^^MJ9e5*%8LabV1G-2*x&Sgn2WhV6H<&6BgGnT!l7|!!2)W5S}=%b
z5HEMZFyM!UEC>_9L@*JsU=S~M0TW?tKlAI|v(y5$z(o8xOvL4b6SsT4-kFWN_a5B1
zdFtBUvm^Ov<>*b$Ce0p53Wr}>14}GFI$t6GQwd7$AMEc8u6_OSSpLuJN0<8QoJP%(
z16X7K%XjOyeb<@xdika1PTj9wS>l)O4lv|zqPST+#VvcG(@Ut2U_BMHcGJG<$<3<3
zLNce1xq0Gsq8A661FbN4jV0z{ZY!ec+@hrE+|+7xZUHNuo1%mLEyP%BiMge0n2WiK
z-z1YQh#b=nPYZwxQl>32w^RjlF&A^2GX)l4Ay^<4lZr{j%8X;Xq!xk@4|k<vQnA<}
z8kFhCG$`Y#7<8~r+@z2Y+z4(G6M`Fqc*St8y5!IjtY*c`iUn9XG!9LkE6>ecFgzz<
zAqyh75!{4D7u<w!7`qrdhrDLJ2{cWy>!FpZU@qp8Vx(B^0#fYcb-|6`Mr%FvX9ic)
zLUNKr<IrM<aA+J_Yer!K7GQyiU?O4{H1bjRH$}9YLdsZ;LA<g}4B}<%U=YtBUYd$R
zjAfVFJlZ^w*2r@ctfUwz7GRa<1|j|)UX{9f<?;SzueY;(>Cx8H(--eN>0c;W&E#?p
zHH&Cne!2H~{p>eo8*YF3#tVaMUvHhfm7H2t0M0q@SD6mU&wg>V&X;WElXCX(wO5-v
zb^kb5PS{nKid!nCxT$J8y@Y%kC%0$aOx?}m$<3V$3+36s+@yH7Q8Rlp&DnSkv{E()
znggvp#V{9h1GKOJ3$W1Wcxr)K2o`W?99kQ7!2&G6Lgrr)3o{W+1QRjr)KLr60<|z1
z#L5;zI1Fl|hn5;b4=pA<`daH*ihMvqWG>ZT<<K~^04*s-ijiWZSRrDwgaufD1z3QE
zb{9-aZF#OdSDq`+ExVvu!a^yC`P?AH`1?3x2kWHLnDzm|O{t2oJTe?%`T0_c?sXJP
z1)>w;j{RkS+26@S33Cf*G$@ms8kE_U^X_j^X=^R%+)_5o#oQLOvIW^f1PZVK3$Wll
zw6Y7DB`lPJaA+J_8vyD=gmBP_fCX591!}>RW9g2`7Gw({5ts-jLbmW{$`&pkoVeZV
z_0DYEz4ze8%~RL*o*l_vQ3|p44X!zp2b1mC(j}O={JDPHTZM7Ezkc{)bM5Qv8`<kG
z=fP6TIgOf$->m*QX8!PBj@R0}Q?_CM?KjU2?$rH#d**K%^qTzv#Vxf_+#K!hqywH@
zSg7Dx>D}7l!-KgAc+ADz#iMkXi@BIPRIqezwEzX4OD~y-tRRP$Qsh4STNvBvf-Pmv
zCxkGan-3SATlg$nkS(;59&<4_l37@Q1z2d#Nos*wkctV*%PxS0zTif16T=9y1=&J7
ztpW?M01Ff8D-)61;^cMNf^0#yz(g<+?Jj8Kqwa5tXx-n?P)!`K`<vUu#7z}aW0BNS
zlK~uBRuFSBH(I{hJcTA48i&TAacCS`N>2{0>Pxd?Asjd~YJpmy7N`Ykfm#>^3Wh>P
zrO^G&$W8aR#4Hb8W)bfjJaorRmLlb3y##3SS1}iJ4dPAgBW<4C7Fz3C>!X82a5E|e
zDVC)m#U_rBV(gb&l45!0Xss8|hq(zF_BTPZ^cAmHuRPx0?DclGFFo3Ndivs>C;bbx
zF_+t}`Rbf$ugRAbX8)M{?6<k>Z+~*Mh^ZgG-e|6UeSfotJ>|h)W;vUh`OvIliNEj6
zPJUMZ2%moZ!Qf8a-*%VzrAw=?E)};FPjPcEbeiLyTv({!S%qKEKa07kxiJ@W1GLma
zN-a{XFt+2ds$flyEcz<uX00$6b1`?Q<6!|7+Jr^6km1!?Qj8Q^JbAE4bk%SzKa07T
zi@B3~19LGKbDML56eGog1=IqyKrK)Ug^0}(7GMDuU;!4|T`)O@pv|Mrqs^nuQ+7eK
zgoRQNQ;tE1!|t18rW{Q<mI<6SmK+*~#-VX&92$o<X->6yqQTJ;LiaZdV)(h}EyK_0
zMZDxUcA8Ggiv=IhS}z5{T+B6bLyF}t7+Q8%$byh!q*#ayVY#rp)#9)K3$Q>f7{rTR
zptWvnKZB}WZ%}6U)4gKpr^fEf&$l8gM;3imYds$><4nex!j=hc5;PndhZbjw;3f!R
z%5lvrUN0Y<xZUgZ&TQPh_u$6OQ`h#M9ZA;YX}qA9FntbW(O2KCANcNg{r|rFQgiL=
zSFe<&-m1&lVk#e+nG-xyl-ft<W7{<c^H1e;zJIX4Gq_Xt$755zYuW$9oc?XCQgtHp
z3!=DLE5$8OrYAQ+(-Bj!fVq|G%c48^jJcTGY9?x-s3lS?wHlpU7~3(h$<gBQ7cMau
zb1`>vn_w>HwhEU0Wq-r-!U8P7LL)UfG!89Tz(g<+Oav2Ah}bM)0Ty5Z7GR;>1(Pi?
z*@A3AwlEwWpcbeFYJpmy7N~_up(JvQu&pJ8PDB>OP>7+BI5^GchM(wnUobVFYd*JN
zVvQw-#-VX&anNLNMT(JPhC(>B+y%pP0v56$99q#^#`e>Tc=vZK@0^qu3qD{FuM`M#
zF_#o0#c~&rVg~W*nQG!DgA3QNlvb<DEXp=<flx-h&1pKlAwBP_!tyK|=3;JiB{{UD
ziBznBRVpSGYmW?4j1-Gd4;Ekn78;+rwpzG)<?;SzueY;(>Cx8H(--eN>0c=4Ze7ml
zCCu|Wg;rzBFY3Lz?`@^@IeYlptIf5qf1HbrUjH0R{?F!ktg%1GazA|U^ZISy6w$u@
z<r^;y?$o_?@>aT<Reho2mWnBE?uG8gu8&|T*!-m@x0DSQ3R5vRGv3Z@_>yN#d9IqJ
z11;sK1Fb;Wf#yJqj1zM)w>@590Ty7PIVY(FY9Uy_p>b%fM1TcYfQ6w%kS)j-+V+Ax
zx8!cr0<}ObG=Tyvz(TNqTA&uFg~`DVY9R<QsEtm9PJ~WGvmsys7MKVoqU-`#FwWE-
zjvAD*g=o{m0xZBnbR|WOBFE57B1e&<$Wi22h}bM)0Ty5Z7GR;>1=(|mSBOnHhMySJ
z#yb%)@HqZb|JV+iM9Q=eaA>6}+B{*_bbrs6QgpAnEb-0?OFEa%rE@0_CCn|LF>#aX
z*L@4wQ*wb&QE6)}>D*E_%*9;eOpSPl1y~3caA+JFhsL25A~s7{_$$D|<%1Kqd%fP7
zjl1_A+_-t_+TODx>7LS4&O7hRr&d`0a=iY3-ifoM*+p-^d2Vp+>+joR&(q`voBe?~
z&)zCOCO`XgE)Va&RoW`Mzkc{)bEod>8~L}rLb^Hpv2(=K3Kfm6*WmxIxcP7?Zh0I%
zxdk+x(6H|BQm_R}SjYllZaI$}XgQV9nLKcyQ458^Yb-Grb6WvU=hC@hyI=tpU?FE5
z7bmi$7%8@f{wj|c=3*}9mJRWIDRRthAuJDp+B_Q~#}pmfJZavtDy56FaLN8=1u++M
zL(J+#=tQu;!!w0LODw_yEWiRRlwHs)VWAYn+=97<){L4J3qK*afdyEA1!}=$dAkc5
zS1EE#Z>`Ov%`-Y8sfAG~y4S81c&xD0=F#Q}y2x|$%n{rOZd%ZiV!16yv4EwCo9m<)
zDJHlP+z4)p;i49(h3M@t5ljRVF@&RRA+ZPxumB6NP<8<m!9*|-qa%`97?r{ZX*TFi
ziX7WFqMO(ETz!=<N4qF<y*mc8f@l9unS1rh<NeKEZ)f|`qphc>FW!05zc96wv&)lB
zfU-FkF2C=*uKiinf}ei;!Qk50-*%_|Im+MIoaLOcj)iajPW`~Q^{by8EnTo5zTRl=
z)O~-ma=QLH3rn#(=h;(S#a;1X8rv40+%y)jP?(CjN%7A6IGBsMm^*CZkz!+~X|y&A
zN9Ql;+)_a%B25AlQ5f49rK?sewcDbv(z#hHI=4WX&ZTo(Nsqah8ww5<U;!4IbCO!1
z7J>yF8i&?4tY85aU|}c`WDBx|b|OulE6)vy01L1H3lXTKT4ExC5dCeDqsTFKh{!Sg
z#9{X$6%#imZVD#WSdwC-7%3J94Jp<l1QuWc7GR-dR?QL?U;!3j0T$X_F!_$6?r)0d
zL&1&U#;jPgAz%R(f(6<<+B{~(n)i|ng%l+X3$OqSu#mf87&gH|7Q|3UY4LjZH^(2`
zw@`${T1!%_lnrw+mlPw#au<+dy1%vWC(o7V{uSi8mk&<d?)7?SHtybgaO38wYkSX*
zj4`cIJ+sF;;#Vx%Xo=-V=j&GasXQt75B7Hk*S`LEY|*Vm^#_c7c8*e=Y{!m$@6->x
zTfh3<@miplUuy2u{pyt^e(6~qVa3hjDQ?*do#uFb1k=_o`l=^4YXu91b(otJ?}Ua9
zGzVH?@ES|Z#oTrZn9eOSozA6m7te+-QnaPNRhF2GxtLovM7zXX%*EX1Od-Wcv0wqU
zKrK)U)IuR*vxEg$fCX59g?1NAcC7W#^w6SlCR+$U@o?ANLTQwlTgWD|ai+1;bW&a{
z_<-Q16bN%MSDq`+&0R3G?68mpA;n0s5E-T%!>o<nm!AT4(&Nvbz#zp)u>h^GTv#qF
zkAo&tK~gLTAr;%oQk?BxbvgTtop&B%F6Lq`<`xy&EMWl_U;!3j!Q8@h`6#$4dxJwu
zTOuqMmdC*<EEkryeF0d21z6Bpmo3CDXaau2&)MeaQw!7rwEzoVtgf>(vIW_K`P@JE
zeD2jNkM}owy`Ak#kG7tkzIf+J|3dL+?Q%{Rtctj$JMVj+*Khl#NT2O5-*{ng?dz?R
zx3cfF^p9QKsF@z&F8b;hM=OUqlLxQ8+T5x8$GMV$uDVp*QZdENK1;_2EP6&KH*K@U
zJh{1Z=QL^*7jsiwt#R@=(8_`CKy#pxV$GQX3$PF@AjL?rR$0ITEWkn<-N=79v=Vhm
z#nO>=XJ!gKmS19SsTGG7_#MP%BF7}L$T24mbRr5d)>>k2DI4Zuu2f7aR(3(NgoRQN
zQj8R9d$H^<`x{yu7GMDus0HIp?Jj6yVqv+kJR|}W!9>UwWD8{%Pz%%owGa|PCqgG8
z;AjxfAf7?I$@hhrh#-Wakn^P!-RmfdrdVN#xtNQ&m|Ik6vxEg$fCX59g?1NYpVvDP
z!)+nBDSLxME4IW?NW#L{evAtBT_BXD$Oj}&lcg*>=3;JumP6yvI5ZBe5V2Xp0xZA+
zEWm=`X1dGx^O}gu2Pba#dc89nckey8ar4x*y=O<pZO)t{X>y;AJ-1Uo@N@m@TQN!0
z{I<V-_+oSI>+2hN2rOl+N~PwMr+jLK<uAu;LEZ`d-uw=4zj<zOr|$3D%ly(YQ9Slp
z#VrL<+=O1|HN6!c*Ahs0a&zaxLIEk}7K(S`?s_tnf-P7&(6T@dGzZ#Z1M5Jea|?sl
zSYj^bw$_o(rE?=NfCX59g^93<{mpH0pZzU*i~UV6BF{}BkyR;);=&~<mKDTY%ni^=
z#iU|VvEiA*p(Pe!0Ty5Z7RoMYmatF?VkpE=NNYv~H{mA+a|(i+j3@**89QWE7N#}j
z1A?2Zpx`DQim*I7i%m}jbCWKZo5aYf6r?U(Vs2Itb1^r>E&I#<O2vj}im*Jf2n+u|
zd-v~SRoVUj|0oj}BLQQAFb!g2Vr8SYisQG?&X&Z6!ib$61Y*L##DZ#um{6EtApQ|k
zSy)<_U`b;vPeNlc35J4v&pzxmYwh#<?E8JcKllCi(OntOjLc$R&+GMit+g*;0Ty7P
z?1E+q3#A~!a$$LEMup|!Cj>XJ01L1{Eeu7DBFAWG$QEP^UX}8yR1#6PP^>hyKrOVI
zxj82^DD$*56cQTBP{<A0f^0#yKrK)U)WVTO_@B)du3deyzd0D}Y+ru7_3Z4WyHAG~
zCobw+kZUa+!<+emAL>^>KVHuJpTFB^u6_MzbHX=G8OicEOfKh_C(n}Bn%6(a<c~S}
zU;fk?O#QODm@hv2cyy=kpSu$UTj|FxPY2fdG5J}=&A&-cZh102xe1z1{}vW7w^Dtb
z!{NneF&A@Nc}6W938&rjq*&@$I=3*klWV1REki|1mzayWm^-~qFc))W3(c8AijiW$
z0&0O;pcbfwLd0eX3$OqSumB6~E||`~_0aUtqH!i$2tP60mgmZI<KWa<4?-Mv$CtI%
zwblzJdMr6K4vj;LgC?aYDMpHE^Jw$rE*PH^u#g4e(2CwNag$!e*#1P`IV~@id_Zfx
z6bN%MmlPw#au<+dTI=;p)kDkR;!s#FEN`_qhsL1=Ct(2=V4*oDsRe2wSRh+SS4AyQ
z3)F&aLADUPfLid9U$(W}w@_~qpcbfw;G}FJ{Dk>j*A3=7K88Z_^fVMwMjCo84TY4l
z32y#JgPSV{r|t{}gL51A?mxVF>&*4N=g0Erk1X+mXD@MA1kuvv2ld;2JX!x|ufEb;
z`}*x`<!^i4<@~oA@}QpkMrKvH<22y#!Kd$s)M+f?uO&ZyaIn8Kx>NU;6EnVR)&GOy
zmf|UH?uCxW^5nuo1<$H<Nzh_$%2CY4+yE`Lkot-gD~#>rTFKF+;<kJMb1|2RC>x?(
zVlL*k3YHWj#YnNSy{8ta1!{p>sA==)aDW9^fCX59g?1NAXWvW&6Tw6<5oH%NOIRoc
z(OM5eOk6LlwXU^Z+CDv&92$qlp>b#&8izJ*PMgsIBcx?-=>F>d>i)t)?t-y=goP}K
zLA+wa4B}-(;f0eTBzi4Lu~Ih7#avR16w6&eikY~nNuC~>9$GZcsD<PthsL1=C$-jt
z5L)Xlv&asJ;6`xMP6oKlA`Xj@oOH)c`&7(r7cYC=+Qdy(kVE6pLVs~+9GW~=o}0Ts
zo-5BS($hN;rTghF$0EQvw6aY&wDcFtyjUq)S^keZv};$N>~9VRJKL8ZZ#_GE>F(3v
z#gafTny}44s(!<=uYO(cGXHR^o~UoU-dy|o_l1g*;z3qfE+|ha;_A!2uj*&NuYZJZ
z-g;?tr|#|3xBLH<E|{5FR>s*SSKLen6}J$^lbfLFwixUFE(Ke>goRQz%q<6&11+_0
zr+@1}qZX3EJv0;MVs3zz&ZTo(guntUz(R_yh$z_KV&T}|lwRy_$<9QMDI_>F4lOak
zq3J{vWx4K>LrbudVx(ArRahQoZKT44<>}jm<uPnK+}2uO_qZ*VX1tV&l?q}m=C+_E
z#YizyY<$vkXdIdz+N5w=_*O&F6ss>uu~I8ij1(iqnobKWz(TNq6eGn*F;c7$v01_b
zEWiRRz{1>N6nU;ZSDq`+ExVvu!a^yC;pZU4qg}(#MNS!hPJdze+3<5>Vy@nt|Cq>g
zi%rqyiD-9(TT_mv99wRXV#!!ij1-F_!|=1==T?iu0xZD7SUyq<)IyvKOav404>l23
z4o=+}3<l>m?%jWQ^VXT`d(V%>&R94~mk&+ci!wjK$<O}Y`PZi2D_(y1?%Nke*S`L>
z9Y@qUKeqksg0YTr^slk}t$y~MlKk)f@yW~0ow{#s^ba~0<XTy<b*iAap4@mGJ-LY^
zSSU=z+-yN~Yyjpu(5fC;=j46yS<J=URwI&Pq!=kSjZjjI6l?Vt`<tib1KC26UY$g?
zCNQO7OO~Wq76@}O7jwt<9u{DML(ASTEWkoJ9GfMzPzoX}7nZku0S=8ri-QvuU;!4W
zg`qZ&Hjg%sHqS&z4GXXU3$OqSu?xaE9c3%JznR4A{?^At_qVl{qX)!05h*0HD$@tc
z1Zc|#NU^LS=3;JyxY|5NQsndvd9FNHo-5Cl=N6GgEl>;8!Z^5KBAAGXD2$LM7MTbp
z!U*YDGr<BZm@L=kNudM_<#3cO$QEP^M@J;Ja8wE}oYW&jCqgHp<)jx*B7Gcn_YH;Q
z>1imW5_3Xi&YuJ^6f(1H{}pYXYgeD_Zw>}K+m|12Jv)2p?$hDL{EMD1rt&Olt$BF{
z<}ZKhz~;;PfPL}V$D?as|J=?0`IO_$eLDO9u%MSP`x};h^@sX_&yPn=J^F+F{M|-#
zr|w6aGyme3{Xt*+SjElaDQ?*d9i>_y!PTCtX5V;nvsSQBn2Nbc@s15}pgGVAgL^D7
z7jxU}jm|CNozA6mm-lb!T=qAmS@tlBc3r&0T+9v7l47J7DOQ?1?UED=LJYS>j>Y4O
z95esXi6}y%*OC+~Wy4&|Wq%uc4-2pmEa1>MG!BhJD@1ITumB6N01L1%w*z9Fsq}%2
zGiA@rI8$=dd~UyfdRCAWD;30C%ni`Wb0fpiLpzzJn7Hb)z+;Ui`^)~azeR+!OUzBs
zm|HNn5IcnZ4OMp7{g)ncn#1d<6Ioh3J4MmYTw*Tfnp<eZySase5Lkc(Sb&Ax1!Kz&
z3t12jjYA8S&7pB<tr>*{Sbzm;!IWd{f+ly;S}*AvwLmRU3$P$^tPLF5!aqJ+xN>mn
z&R{S&w{h?O!<)CxT;F?sENU`;W+u;)xx>^mW^+D$zsi$e%jx{!V1H+H?dvZmW_;JG
z|Az&=gmpTV`PmP0`DpjY&Op+uuQYe+e*0QU@7G-_ZdOcj%U<Xx)%pllaA)miebtkj
zRe^=VRLqUDZDPXKf#yIf4DPYST+D4ptm)jM^Xc5wYIJS^E1jF7gZ(YU=(WV$QZ~%R
z+~qGj$reP8X@^_wx@y|mJUp0-xdB@Cm;Ggb%NSm}B*lUddT8_iiB3|C6eGpPd5G3}
z3JF+%1z3QE^M}H6VR?HlbY6DKst9gM7_-ijL*vkd<?`Iz1!K^{LKei_g1Lo=HjR*`
zBO}G)sTj=|3vL8AZ3oCW(>exZ)@QZWOI1iQQjA06&~g`WXs2(OxJkX`B|k6ug)O5N
zl9PfP!A)3n!A%gtyT2~8$abmLdNz>-HzjuHwG`ZxvXNq>nBYcmle<80Be)4e(nJ=5
z8^KN3GHM|?DYy~b1SbVIK?uRkKQy?xcJ;~r=3ub1efja$v$L1(J{?|c`LLi17W=21
zu*;WwU)68>zJ9|uZ@o0S_VxDZ+u3(o_XVv5=|Bcjg?vkwUmwr#=ER4c7fj!Hy}48O
z?+e9`ue(&-QZdEND?&O)k|!4yQn~hkBj%Pf2XirZ`9&(2i@BIP_JwqAwEzX4D=(Rd
ztRRP0JT3d1jO`|}MX;^Dq;pHH=-k3**@A4LmGqd4xzX={1z3QE=A5J!s0FE5!vZFP
zi3k=5ZUi@NzYP{(0T$9O#NduRSDqVz0uvF07|oT*77`Z5nIdr-Zkuu}LZa7_6f0%J
zT+9{R2yV(QXqK>03POsJV%j{ga464}=gM=ZUwWe!s0Aj1i72~(TA&tM&AjA(rShpY
zmZTUdMv9SQCCYA=umB6N01L3t?t)BiP27yPh3;?J8-kl+S+#i*7A9^?+_Xy4i`7L=
zxy&N{#Tsc%sUU}z6*T;8_}TFD_@speSon7bH&+f$-5Cr9=Qi%$e|YoOnd^Jck1c!l
z%E7h9^0)fgcM9Wn|M=wP=GxacH}Y?L-D7ltfld7$W`C6*{(I-r;`fRp8ovAXh0&e5
ze{C1bxbAYn#;#Rb<q!Jemr~rUmExAi(UY5*U+0z@Sisy$^>q#h%*`O^#XiDZ%w4Wj
zF&A?&cN}go5tB#Ay2gh?%L=l;Y5yL`77AlK{o8f77@eD2jLscxG0e>e0&_7pK+FEJ
zzwGb$h}4NlEW!dTzyd6kUC=CHp%g@eQiHPX3kYt)PmF>Z!A<*AjO3KCJY$Ef$~qlu
z!A(|BaFY&2SYBriF*oUgxk-$y3g-5!3g%*Nh+FoT{gsN1&lF*KVi6W#0Ty7P?1E+q
z3#A~!a$$LEMup|!Cxqp&01L1{Ett=3cR}MSMULsMwRyC8j*dub;iwdkTnP|YEj@A#
zOO_%Zka|ze@~_Hs^UM+42yWUPLyG0LAjL?rql1JLJ1PY!mZc!YNU@_iD}#7PrC4YB
zu6)+;b5@WPBgLX|_TS^su3deyzd0D}Y+ru7_3Z4WyHAG~o4ZUFZ0xfA*I52gKl}Od
zqEvtWZlk&O^`p()N+oMvZ8<+3C`bPq%bz;)>R%SS`RI$!J|5kv`{!=I8(+q!ui}>C
zDQ@nC&g8)wk86q2Jh?^S!a_0?a|^{g=|DZ1Ry%H*N6dkiwQ`_2(Bc%sT+D6t2rR$?
zER1zLwLmSj@fe53p@l?%1z3QENX=6%F%dzC;kMvLa1%R3SRQ`jusiJ~EZ0LTnCP)2
z#YizyEDjn{tVIYczyd75LdmRjf7=bA&C`qy$aBly5ZnlEU;!3#7mVd2EM!6Cxh0)3
zh?mKw$?_s3dM!z@QZ~%RTvCh_%UwW<8QZT(p84Eta~x`|Ypu6hoI~T#f|IZS3$W0f
zlhgvW5G;@_q^qJ9s0C_4wjf)GT|g}u3dy$C?s;l~TF{BmiO5|*El>;8!cnu{+`>^Q
zsD<X7XirP;{$?po-!LndqWT{;D|Y4J)Sba#aBkz?{f9Siow>gE{Mf?5``ABaE3L5n
zpnltrC+oBK>MPB)uiw5_IJNF_{+ncxs;>7FKYhQRpud)I`oY2e&gf3vUrtn%tnm9E
zVQ2K&1xHe?Qa+K(zN)xcE5$8OrYAQ+)9EF^0_Ik#ci*}zJ813_b1}C)_o;=VmPoOb
znsjbqY-ieQnWC+7IX{cJn2Wj7djoSZclkvs$<gU2s2t!EOU%Vw%$?pbn2WiX+ng!v
zZ#gny0Ty5Z7IGJi<s&R)L8M|*vCz{Rlp2(6FBTSH0T!r*(>FwpB1e&9urMc3m<T39
zwjf)`T|g~R3-z2Z{G6xdP_`gjkS#PD0v2E)SinT2d=fc|978@)3qgp9e-_!RQeKrR
znCP*T=gM>CxpB~>6eYz-F?p^$H+O+NSDstX3BgUCmh#+ILp4W+%Ph(^ae+|!i{><K
zHN_fB4lT=uxtJSK7>AZL5tbLQy38VDVK?HH_y2k=y+K*ZhPjw46_bkPE*NR^YgeD_
zZw>}K+m|12Jv)2p?$hDLMem)j?|>RR`StNU)J}Z3RsR5Qyxv^<`uByxsdbkNJXZ0t
zt1tJys-OM7i1zJo-g;?tr|#|3x6{?EVFt%PcEORPxQbi%Mv=v<Ej_tq=fXk(DduLz
z+Zjm0T+GGXaV$rQRh3%cx$=_E%?i@F#ThUW$=Gh(T?E_eOFFmIiq0*3rgQ1sR?=fG
z=0>|27GMDunsbs`pcYydaA+J_NCa4b1z2b#f^0#y5G;`A%5&RE4_JT&SjZG1rlOb#
zCW46==Zw?>wLmRQPb$h5LO6_SqZ5%D!XRGsr-mlWvlRJ&gveZJNRvb3&;qoi7%4`I
zkz$32%@P)10Ty5Z7TR4fEw$yj@?3eYJh$wEW(f<WASTO$5RZ1f%~Rx*Hz?Cztd!YJ
z=?@MqD~P$68=%!gi)dF5?fp`U?%mCp>oSWV#ze+ZRLX*-9$G0I<`&SHTS%>HZXuiX
zZp16Z=(WV$QZ~%R+!nO#FZ&x}_R7JjJA=XC+{V584{zQ&bA9jm?)*zy^Ppa5e(d*?
zd8nPf@m|@6!*}1lFuL~jukFIAb(afrtp##?!Ef?g{kC_?ld}8ACoea5>b|*=Nz%H$
zaKVwZ;Exo4Su<**xcP7?Zh0I%xdk*Gk5%_~DcF)FEM$Q&w~*L@mLo5n{;dOzS||+e
zvBX@=Z3Q@;OXr5|f(2NBg{e@0{mpIhfc-6ci~UV6B63V2kyVlB_Nxl!Vs3y|Dkc?M
z{thJOO2vX0IuW|R8J^cx^NL@UiluBL#YnLLD=9{bkz!-1DJ)Mc!U8P70xXnW&@5r0
z6vQ}FdN1Ql*<>{Q+%K)k3Z5s$NHKE@WkbAJ3T|>+m|KV;ujbh>w~*Z;a|;>uW>w5B
z^s5TyVy>`!tUvV75+Sev3$OqSWfwF{SSSTCSssMo(1hi}^45&P0xZ19Gu?4h+KG?!
z(Bi3h<N~2AMV=e$jlJrjr4%){P(VY9<(9(S1dX``a|?k9J+zE^_0YVBRvcT8B`HRV
z{qKx3UA_8be{(R{*}nXE>)F{$cb^U~)<dlmy`&0S$5{N-88!Jb4vc2J;ET^b9$owT
z=WhK!=3o3uUtQ2*TxWnGKl?*2hufbYFEcYgf49-xsr%99zd-u=8(VP|x9*K~w%Ci$
zdU8{E!9t-Y<|f4*Xemb>X!Wd5c&zbN%+0c4F6IVk>D)94OhnPOonFEkpv_b3L(Ik8
zHYJcPWH)BPJCL#k*+OA(k0s_}F6I^y(k|&-I(K=ahR)UI31?gc+v-a?x6}%AF&A^2
zGX)l4Ay~knacCSGhgOK#EMWl_U;!3jq1^@3b9Lqx%q>JZBU=bRVfguEmSW<)b9t^j
zH;6HDuudzDSsxJGl&WBEg2t>^8BQ=OmV-N9l`6#OwZz;~Hq6CbJv2SE+y&#96c(}|
zq!=j{Zq6H&X?MLr8BfK76W*Zg7lma7H7H93bs}^k0<@$UDaN63Xt@hGG~-M~I1Q-<
zYJpl9w@6GmnsPMdSPzF6u9AsJ`6SPk=f)0^=Z0`N?EbUJIdCvNCtHH5iRHh&wSMK`
z)Sba#aBkz?{f9Siow>gE{Mek0oxj)IdEbdYeDjNb`hGkajimgw=*kBN`#Ym+Uw=6<
z<GWV<KP)KEI#tfkevr#YyFYg36kmO%xl{Ms*GjK{-Q|2SrMQY)_r|IlARkvxZW0z2
z3R5xHfz}=`4z$A9j#5pI7Ae1UiMg2D#zS;&(fM?4Is?qb+&D-`F;a{aYrF}E#-RlZ
zs0C`F&AVU$7GPm45o8Op1=&J4r^F()KrK)UO<pZ>6gdV9s0C_)TA&sR5t}6}zyd75
z0xYz<V0x}j<e1*td~SJ6I&U?Y&o!T0<`{Y`NikB46eGn*v2w<Cm!uderu(b=TXsRS
zgoRQNBcwryiGN0eL*vkT*s>x>IW!K9Ln|AiU7EOwF1srMwz3rG54}N|qQhkt6T!wb
zN0xlRI8!MQ<|b&oL0NPy=3;Iu(={l|8RK@QG;c1maIaXVWZfRiO3wx<Mv8_0l8Pl*
zbs}^k0<0Wb5JD;@6-$xv?`Tk7yZU5*b1>N1zWjLW+1X2XpAIh`S>kRwP#nSP%e}Aa
zXTL9u+y3UQmqypV-adUh4}p~wRGBkgAg0Qv)>wXhJT35v4?EA^8?QHa>i&J9$d`4O
z3(osmrIo9oxTS20TOLPG?i^~a!Ga?Uo<D?z#3JSvK0DCnDb+&e)t3&mQY#0V18w=t
zj025{NCx+?QkaXm0a`kj&TSC_3$OqSnIc4T$^Npxp|?1+AjBvu6FDX<I*l3*jYA7!
z6iu=Ek`ybo!d%RiiZy2nEWkprKyV|t5!{rHeY>O<f)E_q{C_Q-L*vjmwDI({DaRBN
zumB6N01F>>?{0<#SbzmsfQ9IZH$?O{Pe~(tE#<kTY=RrXjW$mMR#<?AV1YJIrZWcd
z4B~|iqZWb?+C17k`4W)VQ-ctb7pW9YvHFq}E49L0%;nHHw6Y7DB`lPJcqhU;5pBDW
z6eGprenVJ*1z4aK+$+}Zf+oq7=gM<KA}|q5L?>Iga&YR-U@$nhaqs@ao43wf-+O*+
zrkI+31EeHYbC<u>Z+oX~!`(kVdAYgv_05g!I~8QDv|JDxrV6T)G|RsF`^os#n}_7R
z@}vykefz@bPTjw@=l-U#!RCKpL5s0gX{BF%{F^9l)=F{9gXhVe)2LYnfZ4Esg~TG}
zCUYJ*(8>|niC!FN)Iu`2>b@1fin*8@&VbI%Gl$Nlb6bRxV!16yv4CZhLy%%=^aM94
zB(f^AjqdEPl44mw%*EXByrdW@MvCb~lwHs)VWAX6CnEE%&YU7Cru!R0LRc;=PfQ5Q
z4TYrPT>G35mZw7{#Yiy@jYBKDfI}O~bMttW=jLgtho*;iWJ3fuN2PcqxXIymWBdKm
znylb?4lU0d4y|ZY%*EU`?=e|k!g1qFnF1PTO7oUgnLW5P`>X74R*?NoDZ>7;zeoCm
z6gw&f`<tck)_U==J(uino;mC<``glm6w7TvijiVRhb}30R0>ioOF@eD)L-S>NU=O~
zNHJ236f-MUc0sd*g;EewEcJ(>kQ5SzLJWljCNwCsy{19=KlGB{wX09|HwS~A?aPn1
zo}ImP_v!FryW=`X((H!svakM7Kk)hS621KV-9~fm>qnda!e8lpkCkW1I<I{F)R~6(
zGPYgwJACok$D=!S|J?l-V6>n)UaPeFgRQt(E5$8OrYAQ+)0y^y1<b8fU*~Xm@mb8p
z+&0*x7Sg3I7`(?^%*EXC$TbsDh|z0_xutCEZ)OLwg~C|DO^Oc8EyU=x#N1Lg%*EU`
zH4r(993y9h1z3QErj11{Pz%8VVY#qeSYB>hXqVJN5MsD3xDnjM4l%b7e&VqEnqJ0P
z>vXJ1F;Xl*ONx<Vq*xp@8C;QKK?qXpWR~Le4L!6J9eQX*Nc38gVx?@Do1kHT+22ql
z>@WM<9=fmq3$QS@?9>9aptY{Gp1S}RPJAfOmFLQHLn6s@Te%DiumB6NP}0_B2@9|Q
z3$OqS?Jk%eqw+RSis(a~2%QL>h-O2;0xSdzbRsf?)u7a%3_VRP1R;#=|GTbuy>f8s
z&R{S&w{h?O!<)CxT;F?sYz(8$vp22kSGidAgZgbhc7{M-eWkhf_1o7bd{aF5<!GF{
zoFBd9Lo?Tu%=qJf`hNYt|62dQ2m3ptJ9U3KG2^>d{XZ<2Q><0W(a>dIRotwV;+7}V
zlRHOD!2;%1s;`RfBr)b<Zrksm7K&OT#Zt%8xrMPzM2Ze3q7b9k5_3!0Fc))M1<U@j
zzu|dd0Ty7PvFy|WwGb>2+z4(2H>I(@^sR>Ut?R_3n2WiXJH2B#G!BhJ8=onp7%4`I
zkzz$CHA`541z3OuSZH?v6OnUQ<82{ZD0@SjCt`+2yC!Z-+{D3Y_&H*RiCf3zxrUz$
zCVDJ6G!BhJi-RWfY*LIAGjU_$CU?R3oPdQa2!~emmUkl3i+CrZWIDZ;Qn6At%*9+%
zj1<dVK#FOtSIce?FN2Gruv}Q)YH<#YLkmvA0xZBnb52qV)IzX8wveuhTA&uF1=+&?
zTDEZQ>XZG=!C+_m^5d;%XD{7-I=tBIz>ZR#9+;gNAf5Svuj{?KA8sY%&L6(<dUNgT
z-xo^2yzX+r%uMW`a>6cO?tN9i?fd!--@NtG=uX|+r*G$!$|}Eq0okG(6K2+~e(%f=
zC~mg87Bp&R)=qJ=c1sJSxMi=yLQ=e|R4Y77!4@wux0KC+RwMwmknbvyVi6P!w@I-=
zj9yF3EoH-8%w0Zszf>d7`~ZiRE`y0ELYRqQB0|y7xpZ!OdcXoKz(R9QQVY~Vuz*A3
z&^WY4A_#5-H^Bngf^4B3Mt}uafQ3vEVsM9vU?P}^aiBmgPz%(;^wghhA%w%IHaZch
zAxzvv5N+b-WR@ZykPw+O8~>A_;m|m=04*s-ijiWIgk1QtQ-R0oOUx~`qH_bkbng45
z6khTxiq2$tAx5ty=9aQyZUK#KAweTsNJEXeg&4h-m|Mz*xtQC6R`*x;SNB)<x9oyu
z2@9nlUN{LtO#VZMMN_Q4B*jXtNHJ236f?G8c0sd*g;Efym{iQWzp!v<D8x{Rp^$|`
zAy*Dg-5Cr9=Qi%$e|YoOnd^JckKK6GF|c`-tTUYVduP1wy>dDa-+lYS=-Su6wu`G-
zce!9=Pye>7{P5rEx4l!m{O%v0yxiQW`{qV&rIm&gOW76}*z&10mWrFLF2ya6qbIk3
zreg!@{w@VuvV?^!5ayPH#DUi8s?n)MEo9tHE%XCzR`5LLVs0zI>0CNDY!@uR0xXns
z^2L(<&2903{bhe+hj3^dS{tdt0xZBnb52qV)IzX8o-5B?-W*?}D_PpZf*Zk&;HGSd
zc8R%|i@D=7MV^~d6c%6s7GR<5f@TQ|r6BTLd9FMc7KX9~*@A3AwlFbh2n(<P3$OqS
zu?wQ*ePp6^e=~A3D^?#9uS#W~)9a}zB(f^g2g?L#%LhoYtRUuMu8Etm6oCa;2+^VY
zn^@H5IdUkcZ)o#q^Jw#E^Jw!F@5MyqX(_k~4b_Nh!A))x!A<&$tV+pcmM%H8tRUuM
zuHZ&+Q+7eKgoRQNFIER3NU?usaC7bIll{%XU}yXC<E>|BFWr4Qyx6q?nVHn9TbF(H
zr;d95vZPRtzWD6p(Y3FC?#^#={VQT>>G#h3zz_ASpC2za;OFl)nmctr+D!Sfwg8-;
z$Sy16?2;>PnZHond@?<`1vDLM*8RQu{)L6C)dB;nxDK>(WUjw-pgGXu6vJH1ZGA8-
zzyd5xdq7gGWCyZ^)LWg<P_`hrDR#KWk`yDwNU_p~XqO_#P-Vkykz)a?$T3BSHcv5c
zy_W26DI4ZuZtH~EU-maVFD$?UEHn*RYJpk^76@(xH-a0%O(9~lgaufD1z3QEb{A-^
zPmFFd5oK@47Q#<x^PJ35OkAWgv4f_OGV=qZ7%4`Ikz(bz;n2FOOq)lWN1JCnP(dwF
z3)BL&KrM77La|oV0<}ObPzz-jG)q`01@Wp>5aQ4sH(81k?zkyJqTiB3<Ip%X4vj<O
z&}O#)wbskt&|1%avNtHbK^X@phnBX)Wft*NJov{uv?~Xv?hFQla~t>WKfHPC%=NwJ
z|6jeNH6NO}>SKnj`}F-R@Q1@+OHlIQV1H+H?dvZmW_;JG|Az(V{cM4-?5iKt5B%5}
zNP6{^=1$#jUn?i<y36?nR&f=#?u}J9Kt8UX+`JY6779}_ca9CfT+GGXu`eXWs!A>J
zTzN_7mI~6j=?s{N!q`sqlG?RoQ%je0E}h%9K`|F|1GKOJ3$QSKdXi#6h)27m7%3Jz
zL@Fi~YXd-7fCX4s@>YYeTv%Q((PPP>acCS`95mTj;Ltd<cHG0<LT(GQV)?R9_aA^E
z#YnLp`m3Bgq!=kiij@t~E=e&`j1+6;GPKsU)`JDq0<}ObPz!~K%@P)10Ty5Z7D`ap
zUCMLixiMxVTL?d45N|6>asJRd5!ul29@@ldIxR1jd_Zth3WT`{8dHv?XNI|$+q(D8
z&0txTbuQq*T+9v7O2wpNQn6{-N{R&`*kATHV?yttML;(3@1K%lrW}i7>#-!oNHJ3E
z|Ckh;zNGe89w2$FmcG;S<=$7dNZ;3Q_~xybM%TXHK7Bj4(z@3cEl3B}2^sRUUw3Zh
z?TD#2UT^Ny{rf`k<LfRLP_tHP<tiv{DVyS!$I+9Uyz1D1-0JJ79#}}rfVqXw4zzjE
zOCj^>O9xu1l>^Ozw%lVm(3ps1a1SemxtJTErE}@r79p?z3$TzWLL`^$FZ&yMi$e=S
zjKVaLW5Pn@n2jTCo+2cAElIIbHq6CbsaTWx!2&D<3j{ZU8^O(VOP^W@LU3sF|Fv{I
zG(EJ)bc&`}eMyRyT465ca%db{*#*rK7D_>c<-+n-bs8Z}>D9eRrD%%Pm!w#!73N|t
zDMpHwT|kN*3d@D%!g67G5lYPx7GMDuU;!4|U62ut;pg$TkS&zGAzLV}N}ijrF#K%z
zxmA+#+#;u3Ae8>X#EprYZ2QdBoAVzNQj8P}{Ux|buzEe!>!|@&4lM{VQehk#hi2mD
zzrXu??dp^L&B0)2`|{(hXJ;?neLB2YJXXKuZ}r>WDF?{zAD_J3T>JXwMxL<qHEC|J
z$V;2gE>NnozhT)|e?OV|!s#3D6~+zUefz@bPTjw@i#A+$xj;<SDy?1x#m!nNZh0I%
zx#@d5L!iq5Q0bDNg@wc-<|cC<IMB)w*|7l*G-@FkTy@`yU&UO^4QD{-=9xq1(zz`{
zNwM4(q*%bRiKt1jG;e~N6cSmL*+zHvS4pv~Am(CjcwSPB6eGpPX9|awScC;wfCX46
zyP#RZLMey_WyatdlrdHJ$WTa@A|H_Tx+kO<Db_wQf*Zk2#KN!u3$QSCyvlQPTj-$$
zEcMU~KNr=_p(Qts?e`mP%nF_-#q!LNib=(U<-+o^3xwrE!HwW1ya=^GEeLLke15SM
z+~l?p+ypF}XT$Jwj`<pXP9c$1nLXw_`>Ui_RuFSB*YNXLf4~APgy`VV5{vTOl4O~3
z%po>Cw6w5#XnJUY2@WlV1c&BEyzm$O2tkUGV#4xN8d~dG>!CE-eDlBEp<OvRb!RXb
zoZGl}|KZJBXRhx(KlU#wh#zY5`}y&(^`l+%^LHD~wXYv-{tN$y`A1TkqcUr_boo=K
zzwu@L+x_CRk4Jav{<+)l>|B;>)hey7)D$;swIDQ9Tu*KR&-zPPD5?i@^T2YTl_Ro~
z$YL($t`FKG&@dNs1GIE5o!e$_umB6NP|nGA$^MpLMsSnTtMkujNX0~s#j*8Rl47J7
zDK_0mmx_fd8*WR*3RtCLDLVAfih1j`WPeN9Fc)*#-=@<73$PF@;LtcU4vj-AL~NF@
z01L1H3$W1c0zI^e87(HF><!sM_z8LL$t=a`?%mB3J7^jyGe1Czkz%A6DOQdf4y~)o
zj58T$iWw$SEcJ)hy4HFeoTeOu5Qp7MT65rFML|BUDEnLV2<Bq0*1Fbu?t-yphlMN%
zDMpHsVz8jK9=o84ECe@#o3Lfn0=2+IFcG;6s0C_)S~$wtM2<(L*j?~1_sVm<wO+D@
z9!nE9|A!`Su3deyzd0D}Y+ru7_3Z4WyHAG~i|6XG{Ghgpe(X$pz4}UX?d!L%6;7?Y
zod4{FPg?IMe)@hrL4U2k@4^1g=uX{VPRyJ-tKT*M0}GC%TBX&IthiY##Vrq>CpUdj
zr<VW=m|Lmdos26xXzmhoF}D?b)I!lcq*zK#I=3*kGfGG2G7%}w(m2mOZYKi?%*EUQ
zEh$Edkz$jCT+{_)f7#z6&3Y^`7jrQebBhXXmaqT|umB6NFgMfCpe!Me24$vT8kB{b
zhC)(E2+M`#iHW%f%lyYgSYGsq24&>tk9IXEOZ25dnX#}b$3l!=OUx~0!(7Z=ejDR_
z0kdd4Pvn?RLAD@U2&aI#n2Wj1nL>(@V!;Axfm+a@EJ1s_q!xk@Qn9Tp#rZ?2m{hDi
zGBhX)H#I0zNC<8;C?j?#R%7)ghgNDuilzS0pwys@L)WZWGL{sJr(zWNlVYS;o9UQa
zC_<vwk`yatBgIHDJv2SE+y&#478bG~92$ofTAV}U(AsXv{|Xka9Gto{7!1yB+`Iqq
z=B+c=_nsfizkv1Mllc00wt7x{*y)13@p^OZ>)#iOHe7ePVDcdLPZ?fYzTEq&e%tr;
z8@_q#rO}<bw@=^h?+X{$fJMWY^^er;3Mg(qT#8$s4NvYoF*ScP70EHVgoRQz%q^#s
z11%*%N2xl{sD)&356y(Rm>Zy_bLrd`A+P`ou#loFA`14G{SCdvp#>pEMxH}USa4_=
zWy^Dmkm$7}#Y)*Q7js+Cl47J7DK<W71vi2l!Odhlap9HjMN_Q4B*jXtNHJ236l)r=
zumB6e0#b|=BgIIuLd0eX3$OqSumB6~F34_~*7|r`FcD>M$QHs+jGhgx^@N4iy4HHD
zB)hNa6?m+^#N1LV%*9-Jt~|Hwf@TQ|r68mjDb~Jn=iT2JzL~sryl9Hmm!w#!73N|t
zDMpHwT|kQIp|#4R8T&Q-Z1_3!7qw70$)Ry*92&JiEl>*~5o8Opg^&ma@eJY_#9MI?
z@7mQT`<sKo&i3WUThGp3y8Co^ar!$8TNW>WKbf-&r*FI$JF@wS@4kIubnWY3+lzld
zOp2A0Etd;6cE3OKZ}r>WiL<0p*MEHSa&xEdn;W^6^3PGfYyMXk97(C)7yiBz{~yK8
zhf8tGgXhUDpy{Lo6FX?d-3AN!aA9saupDSP+TCf6JJ6_w!r&fD%*EVRfYZ5jZrCnZ
zfCX5HHt>-YWq)&9JYau|-eP~#i-;UkNMu!33_-@sA;q$Sn2WgqTB+EP6w&4>rFbM2
zORcJh*024L6+F-W=9z=J1vEMlIuWg;XMaPLjd08UrqN@6)4XL>*x!CtVSiJKh#aFo
z(`Z%9O}b!iKe}WEMUGiP%*EUgx9l(byZo(&<S3n+99^d>n2WiXtNUAaL9>K~QV@}2
z5Q6>HiO`8?^%X3@LNu>o0Ty7Pi7W&+f*Zljm<7g}(nP@mEWiRRlwCkA40V6AYaw#X
z)6&F^iJK!sEn7G$g%?h;6fSLx@NGg<tnnHOhn8m!hgO~=%uUdE$uB|UCBHT3nq|v}
zY1d1BrGj&qd*$HNoxxymZsXqlhc|DXxxV-OSo);4&5+<OKX1nJr_Q|kmxXbUzWD6p
z(Y3FC?#}qGdO2+U%bWZwU0`6>naIn}{*cSz_UFfo4fy%Hjpk0>k2ZUkV$rj==$EX2
zq;B;Uw>%K@#gyWDaw~XNrAux+SV-_-ZaJ_VXn90-29hurb1`>3p+@HxmDX!X=a#b3
zx#_?-w8Gd<XqeiyOvx@?(z$eQo9tjN<_2hC0Ty6k`t&5lf)K*;`TrIlDW=VnDcP!x
zvl3F1Vx(ArmJ}n!NHJ2Z5V2Xp0xZA+EWpBCeQj>R+(Ote!A<xH!HwW1k!hSM2yxhb
z2huo`ai-F0@3G|2I5ZB8L*vj=ZWKe(EIG7N5K@d3YgMNy$D+4PIi?peSw3-^PRolW
zAJAGa1(J$M#oDnGQj8P}{RIoK01M3&C$&H=1PkQ3@?3fDwBe!_f)HBkTI-p0%X7m|
zXsx?fEZ=UC=gM<iCFug8lvA!7?DyJaR?s^UrGoNYd2Z;h{~HeN+SMofn}fm5_T|T0
z&(2=D`*e7*{1vaY{Pg`ojp48Ldk^+^M%TXna-wXdb(af5!&E_~!M$|(LH)KLJ09!R
zSDHI@zkRL5bn7nX=UVantoIWYw>(^mn-7mCw}7UT4%Gdf=3v=ZVIgaUx#g5{pv_5S
z9ca`-VQ`Nn=3;IeUeUR9Ziri0fCX5X4l>x^AjG3x_P6LQ_BXwV$gv2CUQ1G}lnrw+
zcln&+vT$+wEN>n$I+xC+bEo$P=3*}9HfIVcMv4Uss0C_)TA&sR5t)c~Lr@FULY$K=
zA()6Ph_GB(9tWp!CgV(Pw*(eo0T#xtl3Jh^m<T2!cL6MDP{!fdyba);2=7FMbD$QI
zlS~8?5uB7Q1R*9augdYnR%EU;Fr@oidL5XHxf~jYmb-vM<IqBRaA;=5s>q@il9L=7
zhZdaV&^R>RUuuC`pcanCsZEw2l|q}RL~ibKEaSzUe?_vwqZX{R$Yw0%xusSd8i%$t
z&%JVR>ds&=IJa@{{==KM&RpMnek}ES*_=z4dtZeEYWC&#b#s36)=Q&nUvHnjorl0m
z-I>zKS+KFor`A}0UH^%L54ZA3Ie+-Z>&>0Ie_tqDY2D?5^S)MT<tiv{DVyS!$I+9U
zWa>mOYp|e%SFn)63v&yf9cXz(cH{0s=GB)Dv{EYvnggvp#V{9h1GKOJ3$W1Wcxr)K
z2o`W?99o+r!U8P7LgrtQxib+=1QRiCV^Is#0<};Y9PLuJ5W-<p5IwZi5PE1i{$OsQ
z_={dk4y}|8b1_$*E6**vpjpB~DF`V>inWtlCT=3bnf$l-il$h7Ns5(PVJ_y9Vx(Bv
z1*F)auv}O!EEkp+q0}s40Ty5Z7GR;>1sTzpxEXH?*+SVHvW4QR<hcn8t#z&SR!Mq;
zvdAg-Eu_C_dmm+fb(JNDmK8MoT%H&`G(EI9bV)H%Olw`6N1j_m7PUYvghUYB2yP68
z7z!!7fLfpysD+RS|IgYy*RDR<-y95fwl6>4dUp2G-KWEgB|lta`CI+$JMnup(EsC;
zmz!%}-`vO~sr<#Sv|Lc0be_>MT;(VJelom!!=d*om)?E*!st%jzqU)?Y2D?5(6Cl%
zl|Sf<UrKSaR*G95M^A1J4s;S(Sisy$^>q#h%&muGLmSM++~sqMn2WiXJI*|rh{+>l
zUE{-{Wd+&aw0{p|3x%<r$%A#b7@eD2?1grrbLm_<cf1!wj(O(50xZA+ER<c)EMcJ(
zL?=Qgq748!G!88$|6l<YV1Zf~%5yVplINzkmgm;7IC*Y+Sd1PJJ+vf7R%M+*7R=2G
zVlL)}Efd@bZsfV+Gew&xu?P#W01L2Cc7fnVa8tY&6OpH-;6`wB)Z5VJIV!~?@1aHW
z&%3|!+&n$yxtT_0Rphz-szQp9V)ESaNvqA12!RDyfCX46yP#RZLMe#(+#tm0jY$qI
zy$FYvLL#feq4lc@=3;JuR%^X96@}%(^7eQk#exu|7%a@i!j*$lcLsyOxs7}GAKtum
z=K9|AV|_Hq4^_&2e!TQ=fBtTxx%Ty=%|1W2eT3(a(&g_}@5NpA)t@@n<jZn^Jo@6Z
zk4Jav{<+)l#+PO3K&{g1GFWl5RtpkY#r5PC@T|Xtg&Z$9kGXkZInc@x*%4Eii@EEA
zwrDlX#oPcbolEDo!7ePo0xXnsvR$&jC72Q1r1a{<-OKW?>F27^@tBLbm^-~UFc)(J
zv{JDk#Bf_GCKZbwGbt8?IPAW?ON#0K7EJV5O2wpNQn5H_Qi_sdq?lApaFe@Wd``eZ
z7KB49ddu8GdJ$8OCF<?96qc8=VJ_y9Vx(B^0#fY6hk_fyjo?ObQ-o5pgaufD1z3QE
zb{CkqnRtsvwovwlY$08hJXf9@2d9Y}6E|(34-2pW3nE9^LhOQOO32uL&Pp9p3)BL&
z01IC7%ORLucidzW?`@upSx(<DE0){DtXN4SdoAU;rEK!t1dZTEa1)l5L!0l=u3dey
zzd0D}Y+ru7_3Z4WyHAG~i?>~M`9W<o{&+IC;prQ%zS3O#`t56lQ|m70k9FklHMik8
z(Ex1zpr5`UPe$|m{aSy?gZ-V+ow~oAnDJe!{vQ?`NwrF;0+xMMakEy6Tb@i$Zi1$B
z-opasR;sUx?j$khVs4w@PzyyZkzy%c>D<EDj>k%l78AO3iMg1IxzpPOb1}D7u<S4U
z8=e;yU;!2ysmY;nXu$#|f{9=vn218eW(f<h01L1H3+*nLZi&ejWDBx|@#p}xKrK)U
z)B?3YEldj~kz<5yEg^IwvLJ>+428tOX+Agn#Kga7W<J+^Zox#4C5OhLacFVSWN<}_
zkz$5IIJDda<8uNQvLGB<(Obs$(~EfbcOvhcmKRGtU=Xhq2y-!)6eGoQ7m#8G@#>js
z;wFO&*RYgUtII6PHgSPaM!n5xI=dmg=&Qo=EF0!xZgeF%w4{kttbkQ2CKYRs3{s2~
zi%<_1U;!2ypZdS87Ootex-%FI&TZVg|M2FmGuQW?9}5u|o3k9>vzK2V&!_jqhg&Iq
z&L6(<dUNgT-xpT?S=0ZA1s<yaboJ%lSM{^s7ty}`&08;x?$o_~`gXdSb$#K2M$IB4
zS^r4g|E1#Q!=<?8+3@5hXu8y#znP}#a`ahPI4Z@$UPAfQ>Py8fwQ`^pH9#$7ccSxF
z1GPYk<pI}2kYX<8256ZGCZa_MEWiRRr09zLN46ka2))Ij1tCU(35S-j;Lx%;AS^FJ
zqSulXD`mr6%xytSijiWZ*!ZLs+z4(2H`8rfYJpmy7MdO*6Tw6T3#bKZfm)yz3K5$n
zEWiRRzyd6^yC54ny1(OX!9<k3AzKJPF?u$1e-jqEzq-GzlJvq!kyBpsOMhW(-`IZi
zE{mpEeMyRyT9IO;m^P0#PuT^{5*A89I5ZBeRh_N`Na@9)acH3=1vi2l!Ogh&K`l@V
z)B+P>D5NB{UO4f>NjL}Df^0$LC~_>jfLi!}tQM|aeX_qf80>6ce!TVU?4`R;hZjq@
zvC{JQlWBoZ-*~V7?Y{f=h0(RIe{Dxv5Hn##AS_!hn6O>xPdD|y{H=c5JLPoV{o|9D
zn>%&i-00tPUeIDpb2RlwiUV>+nG`o4F2yaI#gkh=(}`Z{{w@VuvV?^!5at#VJJ52p
zyVC`8piv8j!9A9ki@B`;r*rAtuwAeK3$QR13b4PqEgrDHMQ^dc=|x12DI~HgBFBDJ
z!CcG@&`QOmV$1LPz+9<V5JM+I_cz1y+G<|$t5UI)ZKN0}7GNdCNHJ1uEH#DYiA7j|
z1z3QEvJ09eER=#6XG-s7oGF`(hM)VTHCe&)q!=k?ZlP?57fZoSZVPh@G33=e8|D_W
zTV!q_qu#8FxrKgJ!CcH0mXGy^9$F#<7GMDuV4>`SW(f<WASTO$5FDDYTv*<kQCNV5
z7kQ>TZc01xksew+6^~pXl%>dXW4*CgJ+zdf<`xQQNU_{fn46$6w_t7|FrkN*QLi4F
z_t1)C>#-!oNU{Hrai%K=r|t{}gL51A?mxVF>&*4N=f~C~-A|oSlP}}IXvPb^`0V4+
zwXc8f{tL(Gf)?XC0}T1uA96X|{``2Enfdv<jpk0>k2cr){W~UX{>Dy;+4+W4TQfhP
zxTQdfn@^@Ew}7T&VC()~U8%uB)(UgWf#pEUBeK(|nR#9<J=+{;4zxJMFc))M9|#Mu
z01MNnCn-jXh5llHgAjt7`Ts5y`zvw`ViZlW`jQkYwZdG?ZB-d5Mv4VkVF4Ckp^=)@
z0<{n<kmt&C<+;=2VAMhoLU1Fv$;m&h_3#si-OH=A)(zs7@unV2Qj8QM#YnMYPMakx
zzyd750xYBpDP4_bsm)Ug!l7|!tr_*gNwHyGILU~@OMVll>9o99@&P@xQXpZuuv}|h
zYdv?t*s{Yy7K9Wd#X@9oXdD`cCb%((myUFI!9N#QKUG}Ek|l>$3Pg&LVjLQWmb-vM
z(^?NhLW+@MRb){M$w|SD;3haJxDnh4ZdOza*RDR<-y95fwl6>4dUp2G-KWEgWlClF
z^3(TY+cls4wSL3F{?6#y*I!QbyEkL}V;7_YtxsC>hksDN?Z?h5Bd@;F+^PHRYsHVR
zyPQ7+nmcmtc+`yFL~+Z*rMUSxdU6YBI_G`e-&HJU?Ph%y7P2asTS)9co8z$@Xw*Vs
zaE~SCVs87+5S>fshCqV_Sb&9+=C(`rHwf`)m;Ehzi~UV6B62K3qSulXD`mr6%x&{}
zshCtOqA*y11z2c0Ez|<F5G)Yf2yO&7f}29bW(f<h01L1H3+*nL9srar$QEP^;}oA-
zpcbeFYJpmy7N&)g$T7k;Lm{$-E+Lo*CW47zBFZjkmatF?;%%NF#Kb=rmlJfeMc3@F
z>i!m+VkjiFsrg*<xshRDF6Oq!3oO6_EQ|wwYJpm4MKy=Up@l?%1z3OuZJyi()PfPx
z(9H5&FPzk*mRd+o$`)h`!AX&0_=*23ZJsL!r|t{}gL51A?mxVF>&*4N=g0C_?9M^V
zxBznRt9UY+6ZHFHH@Cle>!s1PueVR%&aulGKVaeiVL=yccH3;(SHC`9A-|Q3JAe4b
z>&>0Ie_tqlr*)SLCTwe!R<45Lma-{sc^o~t$&JpDv<v{{Bri)?NGxJ*;j;rRkI1eK
zC}duJ=|C&Ba-ccT+EWa3F*iU93$OqSjgF@lsD)qwhsL3`IU+2;0xV?y6`4B|!9*|-
z<K7juKrK)UrNPlIWeXu3Mg`GBOAVoimNO6L7K*><wdBxB*)SJ#<+<|QvJ09eER=$f
zVx(9*xn<%eGMveOi?3*k)t97LsTJm8E-6Nem0duJ9SX~Z<-&4dc@av@5*A<q7GMDu
z+Fg(ljftD_wva89y&+pDu1cPpu+Uo9T5px4Hz<poa^FJwi?;Vs=2ur)a%fpW!_Vc3
z(L>Wii$j+bBgM4VwRz;ZMPyM6)IvxE!HwX?P>7+BvJ0pMYJpk^iSVD$=DBwD$^PbG
zu(N&n@z%4mm+n3tUMx}KvgL2}1MkG|)j<D`PhM`WeSLEylce$&ztVC+dD3}C$8eRO
z`1{H5?hS|Dt6X~b?F*wjb^qEfeW!Jo3qr$MrB(i*FMcV-%~~mLc^o~tIXKWsWMKhw
zE7jLI95A;Yjty-v7ju`-DPk_>V(vKeWFjVykadj@hn5v&f7AXwkS!F(b|w$j-C}fZ
zZm}2Ih0djO>D=*N5IN?V0}HSK3$RdjL9>K~QV^X8orpF7<j^>@nEZnUSbzm;VJOed
zut}bq-ddhp$KvF<?O`!`K=ja(7+IBd23asSD~P$68@5bvBe;?0j?WZrp2Q+7zyd75
zLfHj^8^KNSUQ9%umVz6>%~5Ydo9Cz$kGzK#%|Gw{%5(Gdl;>s|nN^YJ_NxjhMvBRE
z$0w~ePa*^sU;!3jq3nWY2@9nl=5vD(qc<iwwDckzS_+A*3WwIODwvD80a~r~(o__d
z3(MQ%g%k@ykYcc~3Kp&$oVqg@49;!byZ`X!tuxp6o*!FTp8Qay+~>zj|MutaHkxZ+
zKiXXRXO-u+UCtk+%ipWsi@WTrKXt6hm*oI?^u=c%kM7j{bGP4(FU!(_TBX%xu;ON|
z79_HY>&Y$PS$_!&IbLucbMwG*pp_%CBc?DHbJquL(Q25BxdB=_m(Fd2U08qxSSaUY
zyJUY$FeA80>D7t5m*rp6&sC%2F&A?&cY1GNF6IVkrD8#d;kHyvDi*yuQY;8@*nNAK
z6x01JnCP*Tib=(!VsX%<6eYz-F{zl~CU?R3oPdQa2!~emmbr!WBBmTm)Z1$*EH7ol
zT+AiKNU_`nq}YiM1vi2l!HwXi2&HBT3$OqSumB6~E--O3@fMA2q3jLWLb@t>t~@sm
zP7^mKZrVT}7GMDuM2@nB*agj$kg@%ol{%yrs0C^P7QEz_LomDUxXC2m+dLVwoW5aJ
zEVqeSv64piTFP@v+2pwi8o`a=CM+w5wvt1;cJ;~r=3ub1efja$v$L1(J{?{xHh1Cj
zgW72P@nmkp(>GpyrMdR?+t&)G)?LmY>&V}0Zo_k;0oeROKYc%*jOLg6wf<%Y`#YmM
zb$>ZA<GWV<KP)(sYL!w2Ec>eBW~~&rJei){1Wo6>hXu^7R9_X{Nn*^!+&00X7K&OT
z#ZtV|xrMPEkChxPCUof%b1@flr?&~_Vs5Ko*<bcIJTEN30xUFAlSAXsf(1+j6Tw6<
z5rv4&5*A<q7GMDu+FdZ+5|b^+7Gw+K(E)0KTA&uF1!{p>m=;PR#|Yb6Lg++fK@5c$
z3W<Z$d~W!OiGR_|e6IQ2f{7kW4vj<O(Bh!U;EEI@#SDdTXt@i<=L9TdK{&Lcw~Xzl
z7xC`zMBX_qFP413AYLgD=3*`>MvCPwAjJ&g)ic$^O$HaPVJWRvmsyl;;sT+JdYjX9
zc0+p6SB2$SHq6D`=t^>ENfW790jpF@D%Ktuq!=j{p&l&20xUE>_5Yz-xN>mn&R{S&
zw{h?O!<)CxT;F?sEc9IL({hrR<=4ma={@n`R!X1qhi|;zT>JX>g~dOh{H*Ea0*_Sy
zy83eOtNPjRi)i2e=B<}Tck13geLG#vy1sBhqh^tjtbe5L|59=D;Zof4Y<O}LG+k=W
z-%QhVIr=Ot9F<~WFQI&D^`+vLS~<{)8lV=kJJETofm$HN@__3hNHG_41GG#86VW0B
z7GMDuQglWBBU_Lygx=!Nf)Jy?ghNYMaA?^P5SAAq(Q8SHm9k+j=C+_E#YizyY<$uR
zZUi@io9VVKwLmRU3r&xZiC`jv1=IqyKrK)Ug^0}(7GMDuU;!4|U62hO-QV%HU?R%i
zkS&Ct7(E-hzX=Q7U)|qUNqXU=$SE)RrN1z?Z)`t$mqk;oz9hv;tw=FaOq)lWr|g1e
z2@9nl92$q#s!mq|r1av@IJ8ibf*Zk&;AY(XpcbeFYJrI`6jG8}FPwPcB%Fh6LAD@r
z6gie%KrQ^|sD*1+pX_fA20PoAA8$Q7d+F}e;l+}3%wPU~GA;1w8}HS>-FM%<FuL~j
zukA<+VkWEzgk{SG6SnjJNQ?eIztwMhr<~5ae|++CbEoc`8~uCE3tEh6ju!pt;;f8{
zDQ-Soid!~|C%1s66TQ^^T?)2j2@6>u%nkgGQ0+j=(e6$c%z;KN6bAQLVlL*k0-VmJ
zbHjGQ0xZD7WD>CGIto&Z6zieC$|Hukn2Wh(L%dju9CKSd5IGjciX2mPX!E3b%c^Me
z^s5TyVs3y|CqgG;`Ta_m%l-y2bbn3UWW%zK_pJC;orsieq!=j{U?s&!F;Z+SHHGDg
zMOc6ZSb&AH3z{V?l!6!`P48udG@FcGIO&(xWChQYVx*Y4g|Z>cEi~~JEWiRRz(PjZ
z99l6X9NJKuC-;UnPo9>h9OE^d=JYV-n6o9O9FrJX6;qD=s)D(gtF=CMD5O{-1QuWc
z7GR<5f@TQ|r6Arz3qo*cTI*Wttr>*{Scr}XEc{=^!j*$lcLsyOxs7}GAKtum=K9|A
zW9gpe#!^3Zg3K>#E98sMJ|12B`sePyFp9Fkz^)UI<!67$<#7A+<0X;(`MZtgPTh|-
zSNNspz5Fu2Ii3&Ayzh+-Rx7Bur7DV>Po^igY?IEBRQLB>Xie=wSjbvoZaJ_VXn90-
zY=8reS||+evBX@=ZL>!@m(C4w3k$FS3ng%Dm+Ws4LU1$x--Tj-MULs%N^5u3B`HRV
z1!zezQj8QM#R?IdB`m-KEWiRR%oWvoXnJU2!vr_sCj>Wwn?$D8dJy8U`)ah-y4HG+
zetHq492$qlp_L8ME=e&`Z29F?dT4rRDa}%_7E8N$sfSjgA<V^G%x%sTSb&9K0f)w+
zacCS`A!4(H1z3OuSb&AOwp(kxgb#XX8Ps?^HM!|Bi+&+)R*)1c6~tW34baMSBf~My
zWSl8wDk&C(FwW#&vAki)?Myk(=SIAVV58{m)s}i_rGlgwDW<iqwVu0R+&%ffjD>4g
zpX_fA20PoAA8$Q7d+F}e;l*Oj=PW;czaB2X)=wSm?~JZ}{pCanJJww;IFeEYtuxR4
zLH)KLJ09!RSDHI@zkRJ70_!g4w-{5ur>m*8n*CM9Ef1IC=HuweEt{v44%Gdf=3v=Z
zVIgaUx#g5{prrunT#W5NqZSH-dn_>*bK8kDI+xB3aSIEu01MNZ2KyU?c(lv@7QMy(
zrWX-879r7VNs5)SVJ_yj$-GodDi%=~EWiRRG(8n+fm#R_2yO&7f*Zk2A!4(H1z3Ou
zSb&9g7fg@($rfY_vW0PqPc2Xj)B?3YEl>;7LP_KpVOvWGoro-mp%6nMac~;j4?i(+
zkxGur%%<z?uWIuYJ%YKI+inxVjo>Cg3k$FS3mjVRf^m`u3t12jjYH$mV8KvG?1Dx<
zGZ9P#6QTQCb^$DyEU!r|6Tw8t7Gw*#3z!Hdf{8fl%4tv@m15C9bXYY-`GzIS|E%I(
zIXHD^Fc_TMxOe~I&0A-#?>#>j?rGldvG-NoD&JS3{mol1jjnyYefoBeT{g$e>^Au9
zuP!Lh>~C21)vxP6aq!_*{nNbhdUL1l-xucnrgMkJ@|RjLVOy(|->~GXidzb#xaG<8
z<mPtl3?wZBz-;`$LLOh3Tlnli%OkSeVk~4{ed$0ewQ`_2(ArZBb1^qS3k$FS3yqGa
z7N~__0f)w+wc#Nwzyd5}{uP-!6Tw6<5#xpxwLmRU3)8(0*+K}1QEl|lQbXvW<)DMP
zh2k%IEjhGOHq6Cbd9FOS?1E+q3#A~W7%A3HZkf1=3}^D+;wzeB^(84*YK6I&ONx<V
zWfzcQhr)7Uxv*SVUW8J!gaufD1z3QEb{AwsW8!AKEo2L2Z^#yktCHs?EVS0O)>|d%
z4ay>?+_#YaqV0W@`PEgH99mY;@N;=$^w9Ls;?O0<NHMK-Z60}U5n0p%wGa|Pa3i=e
z6k;f(>;h_mTA&s}BK(K7d9Gc3vcEYP>}+3ty!GttrMpju7fY%*bNO5S>O1j!HPHX#
zlb4%oU*FuwB&qzxue4lHo^+nkF<j**{(dsNd&8mkDwp1U`@-l>-M_X=-)Y_Dg3z#5
zX_Y_di(g7{vsQ{*9!F1Z4i0n@Sy;f_O7(RP2h6R9V?!Iv#oXm{ikOSJm^;oqnTW|F
zWL@LKp=AZx-?V=ZWDA9{oymiBw-}w9TkM5)p>ye6I(NJmM2>mpzyd750xXnW&@5r0
z6htRNC!!4iIW!I}CjVdo7GQx|7|L@qY?9}ux0dJDu{e2ddsvJf5IwXcMpk8=K^Dx-
z3SutihAk7^2yW!L<1<B@C$R_%umB6NP<DafMsQQS7ZZ`ErQk+zbJW|=<~b_GBk!R_
z^Uu4#^4vT<<++(gW>w_5{i;HWkz(@P@ky)AlL&zYSbzmsD7&Cp!a^yC`P?AH=#5DZ
zExibbmO>({!lCu63g%*NfL3e0G!=#A!t(ZbA;p3aq!=u$iG?c%r|t{}gL51A?mxVF
z>&*4N=f@T+l^?2<`}}z6-~RmFMsw}!N1Ka(KzUfFm-9#I^7pFu;x7B@PaSLWWjR0|
zeev1HqdRr~-0gSc%d&K!R%vw^thiaL1&OTUdU6YR)?dOxju)KA+&r)xXyu6Ph$+m)
z-1R|Qv>N7OZh)4~rE}Y07ZzXv7Rou<F4^A_%m{8$dUfLNW%<|ibJgg0%*9;Ho!%Rm
zi@5<>saOzVxGfcvibb!E6bnKecHiD5#dLoQCVDKTVp1`wSR6DdMM*JIOe!Y0$z3o$
zCtx89!l4ztWo{w8h$+Vs_4Zl{%S+iX7jsE5QY?1?DR$yR!HwWXa3i=WLaAB80xZA+
zEWkp$3ryThyhS5hD0@S;kgiIeE6<IC)5ML5n>Nsg1z3Ouk)v!Oc0n^GWNbfYr4FeD
zYJpmS1uyyK5X`PSZZe7YHc!SZr*D`Q%WYy-tfY~>mh#+EHhFG>MsOpz3Cqf%t?SUP
zU462@IT-A0Uw*vx?ChnxPlp$a<DFi9P#cXup3H4{`o^oTG}pd<`&!}Dy36@v9r=6B
zZFo*J0GmJPr|-v;(flUA)?epfe`j>3?k^{1eAlY~hXqGctx~FhWnWd?td-)HC)1Og
zpy{0Vuz<Oh>Z_tVNsPIe+a@^FLQzYkSc+FVw=lNjv67?3gf3lTF6LtH^ftj<%xx7c
z`^)}@=Y<7WfQ3eCa%db{uz-nRBA5s!q7boJ!U8P70xZBny9=gUVzLF<f^1<tIzTN@
z3)BL&KrK)U(?Ut)7-3sW2%U&5h@lWeA#re;&ka8@@h_U0&o!T0FwtYlp>b#&S{yVP
zT#;g=n4u63EqB5AoPdQa2!~emma+ZxBHsO-$UCRy#gY#g#482DT+AiKNU_`nq?kdx
zdZwDV$>72@ETz@zGK;cJTp*NDZ*!W?Zb&css<1rEhPjv<T}citX(AOXV3mqV#o8l-
z6eGnV)Pn_BfQ81V{%5F#D+j0U3<iU98~5%%ym{-)^}XlELfXZaEr<Ho$Mfku@!?iV
zpYw-ryxv^<`uBwy-&KCV!sP;wRRFsBa__79+3$;J-~Q&UmqvH$-adUhUCp|_a6zMH
zk&&!_r0)Mxar5C)-12OAauYONYR=zG3qS)4rEHj64lD;+2I!r^dj}e|kPPmjnJ^b~
z1GIE5o!cS=7GMDuQglT`!Tz$pp|?1+AjHVib7%<*4lR>vd2SIBy_Td{DI4ZuZVOsc
zj1(iq#wV@dMsOpzneHr73)BL&(DVqI2qq#}KrK)U)B?3oh}bM)0Ty5Z7GR;>1=-Ni
z{T*)$CZg;O*+Te<(X*lZo3POR)%|Uiq<12Uobn!8`U_+G#`dFkSv1A!OH!=ViWDQo
zw0X37$}VV@uuuxZp>b%f>h#unN-qwLLklG-xDnh4ZpO_IYJpmy7MKV_AtkBx!ig77
z!a2wmWD6okkz?5f)B?5ePg4umu0Gk{91M20FF)RTcJ|WUr^AaSPnuZ%elqig(>LC$
zTj$-kFO05z{cAg-m>9S#^<1`GFupwT=UDNF|5m^4og#g9|M=wP=1$!=H~Kg97xZt_
zd9L^e9cvQB&4){I%VzQ97SMEZt-8NU!ImsxAq#}L<-l^F<=lLy#ppnz77BxVEHM{z
zTLDhz(z#)~U;!3jAzBhgQk4D8ZSjEpEqaUnO)nyHOd*j~5jpm&3g%*NfL1DYBt^7&
zN+}*m#Zs&4q4jG&WChQ&zj@|hZUK!>gib^&>Dk{<Wh30OziIT?-+o3fE2tBZ6=Z)?
ziijMeKhtPc%uQloZW1G_B693k70kul5V!0v``db6Sbzms7{{a>S}F@zfCX59g|Z8p
zB`lPJ2+M;If*U<FJ+wBXf(2NJu?tv$1z2dpHj$&qQRFygfkC`9QLq3DumB5X7f=gB
zod}(Xn2Mqns0DAWN1$?aPUuABwlG2(uxuU^BcyHOG<rackfxBxsu&^dSCxMVbFUnn
zx-%FI&TZVg|M2FmGuQW?ADdUNpE|Jl^5}FLJ!@Zl_VMW2*FSehL@ND|wU!HPz&ej`
ze)fl44!1u)UjAS|f49-xsr%99yx+8yAoT}KZm9W6HJbn{{FtMoUU82~vAf{yUB&g}
zR`9H|#a?_C77}HcTMjG-S{{*|u@20|T+AJdSvt3<v|dX(x0H>ENC(ED6~=Z(=@!}0
z@-R&->0COuO=B>(><!Gt+%`2}f7##gys!WZu+T_NYJpk^7BCS^1QRjc$EFs75L)Z=
z|K(o6jiHe67e!O7z9hv;tuPmJIW!I}cfnYj!$KBB4^0m(%!+ZQlwQV};;DFW!tirH
zTb334P%0)BlZurM(Jo0bQjA06&~g`WXeX$JqPI-kn79dBMlB>K1vi45(9?pOAjDz!
zt`F~_c@M2%qQ_EjBe)UV#6go%loTVy1UG`4+y#Og!A(6U1UGqF9&%_LT5CoHH^qi|
zYds?hH-(hZ-Cj$>&!ub}T540w#oW-Qq}V?}ie0<<WPfuo*xA1Pc<b5OOLw0RFBUmo
zm!G~LPe$|AU+aH5*xwml`})g?(vDttx!_1@<C8Ui;s^EHe(bzS_UbFmox0z?Rt|x6
zm-FN9d}!J@wEj6##7uluam&M{xcNAGatmlWN7BR&T5-3*LNW+*%bDUpn_~kUXw*Vs
zaE~SCVs1MfLFdxBA#Py-7GR+Sj_s2D4MIHHWq*s_Vt><%h#ZTM=(QxpO4%?MbC-`V
ziyXCiG9}A_{}LlEUSclh258w|_Lu!-e+v<tB`m-KEWiRR%+=TC7K+O-w~&skGrpWz
z;fkX{W9D#Z1w2x*Fl#yyTUm<p-PiP_Vp6eW@Z3{-{$ql<m>YCqf7xI5m;Eh7Y?iP9
z3$OqSurOC&OU0yOVZ#JB;U@$)f}2F9usjGc@sG<2%e~}RCe3>+IW!K9L*vjmw3Hjg
zkTgpUtrUb5BgI<P=_S9Sx4h(+Uc^g&6Q}94yjb!9t@TnMshCvEOMcB94lKYzut0Dl
zxcN^HZmt}hx-%FI&TZVg|M2FmGuQW?A4~UC{Px~gRUv&}?B@12Z@o0S_VxDZ+xfRW
ze<E@A#P|Yg&i;mFU;X-cYTXkbb{aKryx!cY`}c*ysdbkNHg>Jj%2iO@QZ~gckE16y
z8Pv(OmI0vn{<4IH#3JSvK0DAtv`&t76f&>AbfA@5InW$v%WZ%IjfqGG_pnl!i@5<>
zI+xCE5dsUa01KHSL~_agvcI9XIJ6+dC@T{=CM-mb*$mR=DMF&xk`yat!(7ajiZ!Vp
zEWkprKyV|t5!{rHeY>O<f)E_q{C_Q74^0m(GM%C+R$r20rB;}Wxf~jYR(3(NgoRQN
zVY#rpRh>piQ+jpZJ1?4I^(84*YK6I&ONx<VWfzcQhr)7Uxv*SVUW8J!gaufD1z3QE
zb{AwsWB7TzEo2L2Z^#yktCHs?EDS#zer}bdJh#Xx7YL=lFmYqzCfh!9_2&G?gcKvi
zLVpQv60BZN^?GW6l|u_cj8qth#-W+G`Db;1uU&nzzd0D}Y+ru7_3Z4WyHAG~iyzD7
zZ@D~t@J=~EcK`U~<>uPgH#hQxov%rAgGFB2e0G6So&62VzWV#g%ok4Ic&{*S`0m>m
zMtAD|wOzE~y2}M(s#a<BDkyH&N^#5M=*dmr+Zh5~27pSJ{46Xa7BM%O<3OutcgF@e
z(5QuEaMgV)eid^uH|Rp==9xq1(zz`{NwM4(q*%bRiKt1jG;e~N6cSmL*+zHvS4pv~
zAm(Cj#KNQ)DMpHo&lC<Vu?P#W01L2Cc0sd*g;Ed=%8bD^C}XPbk)e<*MLr<wbx%k!
zQmlPq1UG`4h=pMR7GPoOc$Meow$MWhSn8n}elDt;LrZQN+wV8pm=!!vishLj6_bhy
z%Z24-7YNITf*Zk2coAxWS`ge6`TSxjxXEoHxCvM`&xYaW9P>5&oI)b2GJDK<_E$-<
ztRUuMuHomg{(uEo2+_fzB^KqmCCM`7m_uxOXlY^f(Dcv(6C7F!2@cJTc;PSl5rPyW
z#f0UlG_=;W)<bEu`Q|^#p<OvRb!RXboZGl}|KZJBXRhx(KQ=>c{7{qM&yR<#AMK)_
zzuRc8ef?;2#&@lHP|ZJ*(j1jp!==lgI{l3=>)-AdpM5;KQ}@r^erM;hT&q@Tb)}}b
zS*r!1q2hXS3wYLF!a`9!n41Td1Fam9okSLMF?W5?7J-Jjm>Zy_bLreRdxHg7fQ52S
zwoCT61T%u0lwO^G7fLE7ax9Lm$C4By#YnN~{)AL4RM~J_DptTM6-&{fhgQs6uO<6i
z%7(d^%l<Z<7Fd9VU;&55p>b#&S|MVygaufD1z3QEb{FWOP0VO95oK@47Q#=+b5CX|
zPIvEap4dUtNSXNoQj8QM#YnMo+;C`JRc4&YI8)3pkz%PowAQuO<KQ&q7=$?NUecNa
z2P+ElaYfnRqDL?nbG6pB)^it(Ejuh^K}a!Dj1+?ft@YRiO=Kas5!{3=qZX(ICW48`
zT|g~R3)I3<&L(m^D#h-Cf4Ntl>#g;YHS}1TxcP@p++4f*WPfuo*xA1Pc<b5OOLw0R
zFBX5+E<dPkq8~fcUa!8=T>JX%YlTzmF6Tdc;gi<;iJ!h-PtafMuXC`!GrCjvmlHFm
z&gyr~|G<JHsa9!qBr9&#N^#4B=gCc9)afO_0_Ik#cPHb@4w}2fT+D3+AGJ_)4=I*X
zlg=%S?TpgVxlBY#voy|gkK4&W0&_7pKud~|Vx-t4As2PQ*kAUyNV6VG%*9;H#oVGo
zn<Xs30xZA+EX>U`G$>2Rqd}P|m<DCxrlF7&62fv}d17Mj!7~3b5tbJ{qCpwC`J-J8
z$`XBPP-ZM_%CQim*AjC}*)SJ#m*2)XU%)IH&l5SOQ;;pl7Q!iDF6LrxbEc4Dq*$<k
zTA&s*C`-`ZE~$kegj8%ROL6{CDkc?cj|>gU!c7gz6cU0P4a$feiq%+s$)S~6kz%Po
zG$=JF<IpuLmW(CE;;9$~{-hWw)@C~97K)JQwIsz#*+?-`Ob<;DEqB5Aq=khn2#3a@
zg%;<~IJCA~@*jtVD+j0U3<iU98~5%%ym{-)^}XlE@-OR!d-(czwt7x{*y)13@p^OZ
z>)#iOHe7ePVDcdLPZ?fYzTEq&e%tr;8@_q#rO}<bw@=^h?+X{$fJMWY^^er;3Mg(q
zT#8$s4NvYoF*ScP70EHVgoRQz%q^#s11(>j>?l<S8nuuN?xC457jpx&bS|CSA_Nv-
z0TxnpMMS~=vcI9XIJ6+d$jEbO2@4J_<7s(r5fZ(Yq*y5%=3;IOT2hP@BgMuit>8v*
zBe<DtCoa6wy=aQnm!w#!6)8rFkz!2)78YP3SU`%AVx$-;R*2XvVF4Ck0Ty7P-38e#
z(^?;I3nrrM4cS8YiP5v6wVtrhTGv`{m1Ordy#kNbmzY~>g}In3&z0wvUC=CHp%jD^
zBgNWR?!5aO!#9(+ju%a_`jQkYwZdG?CB;awvI|HtJ+xMNG-JPppAA2U{-PENCpk0@
zjYFdrs0C^vB!X-~wh$7*Af7=ygLwajLA+~MpX_fA20PoAA8$Q7d+F}e;l+vn%kL+1
zcH#7m_hLsjpL+N03!`ga|Jp8`T6ei%V^91!V&JSCkh7M*)o*(z&XPu5|MAJo&7Hb$
zZsb;)^#j76&H7Ci97(C)SNwyH|38YG50~PW$I+8pK+{PF>i#YTTe5_OED+`vwmZ;r
zw7b(Bcc4)Vg~2_Rn2Wis0H<^5+^}7+01L1%6*I8Exh)>BzeR7czv)FpjwvLvDk8^z
zRl!`$4bV!(q+-ikjF>AG3u5R*=>BGSUR%v8epM=#vW*lY#R9CP7%4`IjisirJh2E1
zumB6NP<BDHgoRQN<4ozjj5B4E(eQJ>v?eQfo)ja+%q^4+@nR{s$!%e7A%?t~XT#h=
zc8km{WYn8gF}KjKDwvD8!t$~H&_hdvzyd750xXnW&@5r06vSkC5Q0M!mJ7>UGYSi^
z@FLH2$4zM`KGH*rr@{q7^4v@=<+&L<WL4z3{i?#DacH5xj58Je!J%<z9GWS|p*Bw{
zi+`S4xN>mn&R{S&w{h?O!<)CxT;F?sEXy(C!%rP+@?|+d9)0oI$D?as|J?l-#{U*P
zd+P|^{Ok|89BzMpyv)q}{M|-#r|w6aonLRgR}1IQDdt(S&QDa_i~tr4fhw*iw}NM#
zE%xHGu#iat=9UA?ftE*Pr%{8sn2WjN<cQ8KDy`R&&MjqQBGQ3zXoazzM7H|a)NaeZ
zO6O*+=v+EC#4YAxZkrmw0xZD7*xpkM)IvKQ!l7|!ArW8!7GNQU#!@XY5kUy8_4)sD
z@3M$y`nhUO9?ZpD%$?pFn2WiBo90a6&^WYU0kuFaPz%&TAtDpeZU}0DT8MM9B?J?Z
z1u=1B;wBDG!_UzOKI~pEZ1~ymbHPN9C5OhLacFVS=%KX;fdyEA1y~T=bkmyBG&i4{
zr{y7s#-X)lRB%&lm{+ATqVRg^#A!M$FP3~jYrPamSS~ErL(@acT`;!nu#g2I#YnLb
z85|mi#-TNlh2TbT6D*(>sD=MQ6LIb8ll{%XU}yXC<E>|BFWr4Qyjb?ygHPX&)42KS
zuk}A2?C*@Oef{M`37FSiE=UL3UvbT!_(A=)A3JZ7z4}UXr|!3}6+gc2a(;_3Hs^Xj
zQE|(|rMUU<cybG9IyRv0@62hJeH9k6R+wAP6bITIG37v`77BxVEHM{z+le$fm(C4w
z3k$FS3#G}kbbOf<BgJ~?ukwgtF6Lrx*$|l92vS&p1z3QEVoqV9-4M&)BwN;Vn0~Gl
zS8>a`SyHhA9^Kyv$R6$L{uaBd`<wZXiJL-<UQ5g^Wy4&|rE?n{4-2pmERc#x#iU}>
z=>@eAgy7J&vJ~gL7pX|ayc3ZlrQN)5rDuZ_BgKL)q!=kiijiW4h|LlfU;!3j0T$-!
zYcKhE$uDe};3oWp;6`wh$n@@S5MturoX&xRGOe_9DYz+m1amQ0Yh7zScfr`Q!$KCs
zl%pxf$S_DTQmj>-umB6NKrLwV#4c!(OnI(6HzdM8(L`K1ICW<*7@XU<cmLtdTW7BC
zJwF!Z7;f)<RkzCb<w@E8=B<}T*S_99eLFj*D@`Glv}-}GRX(-G^6TR@VCy8ZZ@k{z
zsr&bZk|eFWT+ke^Ra&_Uid)L2xaD#5<j(0Otigh!^<g2gh`EK&4zzipVIlMCO9xu1
zl>^Oz)}CURi@5<>SbzmsXmmWaKrI9dI5ZBe%@JV%7GNRsugKh)2quDw7`LXV1!{p>
zC=HHwDO(8PFe->1T55>S5U3uSxrGoC#cHg+<j_j3Fc)*>x$@ky3z{V?l!B0Aq*$vu
zP28mP>b{RtG{x#mQmoVpb1|0`BgM)tAjJ-a<-&4dxv;zlrDh2WumB6N01NFd$cV<o
z&3IeL7Rug`EfiNJ&rMipt><k4t^_E==(WV$QZ~%RTzRfMx9kFWuHdHaBsXsZcqhU;
z5z$Yl778ahG!D(g4YfcmPzxauWDBx|kO;cJy1)NT-QR0hpX_fA20PoAA8$Q7d+F}e
z;l*s-{+7$b2k!*#8UgsnCoebGzP`DUf7|6eSZTR{nkg}(W4Ovs{QYDG=BIDG7dx`~
z9o~KW!st%jzqSjf)?F^x*tJTl{6Sy*Qi_|kQrz-5dUA7cpz~G(EMRV>`Z|XL=GMcp
zp$+C@?sBDyxtNQ&<5mb0F?ocnYkWAgtRVZF_D{A@W0X#daosIO=jIlBp<U=)I+xBJ
z?*)-#o;k1p3$OqSWfwF{SSSV2iO`8?13=y1l7ew)?Nc$5Q&O=>!?~_ymx^TtrDEw&
zq+(LBBmF^&9hKsdp^$hr#~>alMvApZCM>{0C`nj=1z2b%_60YBn>ZJk2qr?FtIabM
zIfhVN_^+j>hFa%U1I1O`NG?s>WS*_HuC?CkFKwRO793i@vau<Gn-m>d>nS9%Dx_Gy
zs$eeWMifShkz%CS_)Ou@5{s|^3$OqSWfwF{SSSV2L(@ZR&8XIT_zA%cEWiRRPzze?
z?Jj6s<^NdZc;(>KoxxymZsXqlhc|DXxxV-OScITI)I9j}<E5AI^LHD~wXYv-#z)I(
zwd!(yI*_<)rtH!~FJAuC>2G{lbmgNjKKpodr|zG-i+{kv|Jj1cgIcBXH?(A_xLF{@
zEl;K=H$l^}0c)_JY-Ly|2*unyupDURi0pVQ2O71I3|>`#VQv9!Sz<2cwtIulrE>$U
zumB6N&`3=Vjamp6NX4XLt>J(LSb&A%s;LEPAvQ$YWMd+-Ao5&!ZuFk@&?07-xTQu9
z&D=u4M2{th#-VX&anNL*O^T6X92$p~yI_1yz(N*;Lo0gA#7%k;^SLGJ?X?t^m$G3l
z=8|HhSndK+?8JwH8^Mj>MsQPvQnQ2wSbzmsfQ5D!n7C=2L#cvnq3jLWLOvVv+_FvN
zx$@kWo8DSaIpwC1iPN+ktSc@#wA3Tspv;MrLsO2X9NR;e6eGpr(1it9fQ9Cqq!y@!
zV1eL9aMKztSbzms7)ylzl5FAH)hGL#gTc=B<;Ppk&R)9vba=6Sgg>Yu%8w_Lai?#*
z`bu-{>$k6!^nTst{PM)}v))hq^!*U&%^&~QvJD>`?C*^3)cxhezYrHKXw=jyWlp>7
ztBRYoQrz-ndU6vqo#+J?Ft<{D?o2`1Ox-2sVs6{-pcaZ+BE?c_(z%7Pow$3MqAgv5
zvcz1>#oV$X+9l><ZmVF~-y+l5U-q|k`lJ{s76&IRzyd5Z=Ond2Ed&dg2quDwXo4wu
zt~@tbAaWEriX6i^rCOpEf)I~(Wec)}*delo@Dsyr6F2cxjJRpaF@=QguMyJ3L@Te>
z8NuSvIJD4T99n`^o|_KE*nR;kDMpILkzo)or~kdp6Hi64@M|qeu~I>)Sg10o*jAR}
zeD?|<_Lu!-f5(TgR4mOKEWiRRzyh^U4G4!;{6()NhgQnQp`|S`w@^SM6_bj!T3lEz
zERQ1t7GMDunoc6MKrO_%V9GIr8fqb)3R8~M0<}Ob{HLphD+j0U3<iU98~5%%ym{-)
z^}XlE#yJ1_cs{)+KJ4^w-*~;b_Vw=zVGD{BSarEzPO$)V_2u4I^|RlX!ME*i-g;?t
zr|#|3xBEAj7KDcD4C>}*6*nI)#Vx%~Pwu=#w(jpzu*FMQC}qRka$q^oav-{6VDpe#
z^(=25F$bCht<_hUi@5<>Sbzmsm_A5Ju^_~#Hl!FS)~ZhSm;H@q5-h+1EHvjNwLmSj
zED)BLz?WK}7N~`0L%;$o1PiDIYJpm4oP$n;PDHRkCqgGeCqgHp5YgO1yCJ9rY9Y?a
zmJm!tDTq#lPJ~WGvmsys7N`Ykq3i-!F#Oyejye${$LPnw0xZBnbR~5nO76x)6!|1u
zkS)j-s0C_)TA&tUhKX7TiC}KQ+=96Ua|?xt<`&E?q-hd4iX4xQNNVAz6yAxbM}}9W
z(pq%yZmv}d16JrddnwN?Ws~QIS#z1i`=u1!e{;ITJ8LW*Xb!ZI+P`-7$^PbGu(N&n
z@z%4mm+n3tUTiGk?<cGFd#^rw@4kIubnWY3+l5o>E*Cs|(|&Z7AO2hYws-1b^T#JI
zH+Sm3xsiX{YiyG7k6myi%|64HeN}Pu;Zof4IC^pmXgdAdy1z@omMmc*3xv7lAaS5&
z(AP1r%Z{#k{d<1af#yI9eTBK0+X`@4fCX5XJ~Bx$Qf&F;LCUM?CuqJM!d%S7-02;I
zxtNQ&<1>Xr<Ip&?oLYbdSSW{Mv!oVEL4@VP^45%MP-;-d!3hhn01MQDS+RB(G_KM(
zQ+n$M)B?3YEx^L=d68pcQMMpk5IKq*%PwFdm<T4~=!m2ij!K~uk>fn4Z-^X4jv_~D
zfm)yzj*dub;iweU0<{n?zw1Qgw$O=)k?<yt_hNOPo-VVf#GHtv=D%f9=Igz1k`=^U
z%#D_>Hcz36;6`vGxDnh4Zc=)h6|4HvtXK#K4vku%7N`Ykfm)yzUIYqP4o=+}3<l>m
z?%jWQ^VXT`d(V&Ec=S^z$o#U{%|~B+_VMW2*FSfw!YI+iD$51AR!P6sSpHBy`}y&b
z$o~A@Msug`N1K@>mB0Aamh-z{d6q<LV3nV!xG}jtdae{VpG;3~0Zm7#*8RQ87JIQB
zVIgaUx#hrepyd(SNe3Kg)Iwo!k0s_}ZtDT)Tsk+zEiAwSER;S(yJUZZ5W{Wux9BbQ
zH@%3+u?UG?OH!<q4RbNK&FiINQn84_U;!3jq3N_x3)DieKyV|t5!?uF3K5$nEWiRR
zzyd6^yI^_%P_`gjkS&Z;d}@JOpcbeFYJpmq7D^(=2-^&W$QHVUU?P|ZCW475yP#RZ
zLMe#1d4dp!-P;&*f^N3xn*CMX-(ph?g`_q$pKCrhG7QYc-1c~Z1z3QEallV4Pz$Z7
z=Fm8_kO;5<3$UQgle>UgFhUxdS)S{KlbY003&}~@f@~o;DRK-y@y~1XT)X;Ye{(R{
z*}nXE>)F{$cb^U~KKS(gcruz3^w(lH9~|uOjIMqC<wU=0Bga2>K^JUx+iclaKd2x0
z@nkaY^o>_vY3|hh_O;S?T6Z~r!Zsh8?qtd0+9+;$xD+=ZM^A16P3K6e`@8D7tlg}y
z!a`OBa|@ImXn90-Y=8reS||+evBX@=ZC}WubLrd=Xs`eauuuZWcFFz*As+3rzeR7c
zzv)FpjzviHT9RU=Y?zC=ZC)=GlZr(Y1`DtN3r(kmTA&t!1%eyFjo?ObQ;66sVF4Ck
z0Ty7P-38MFfU*VIf^1=&;!_LM0<}ObPz%(;v``W`M%ZR3M7Gc+1QWqTFcC~d*#*rK
z7D_?9%@c$eZhM=jxGeAfX6)b%N^h+vCb}YXrDwxXNJ%fuilt>Wwr^}d4qZ|#8B2=A
zQ!&!&q!=mIiVkn{6d}=TNs5)Skz%Bnv3)(X+y&#478bG~92$ofTAV}U(AqcaVF4EY
zYp`(T;MASLU~q2Z-u;I+Z=Jcm_k8!O_`^57!0$^#aQmCLUK(Bddi(V4{-%3@$C^FC
zwCt;2AI}RdPJFnPr}O#4H(qb<)cyNHaW(5M7fjgJDy@|CH^0fA;%2QBw>*xX+-#n8
z#MCkXl*6VhVIi@Ixyc*{S~<JBO4WfzEhK}h?pyJzn2WhBUFh6GQ#zN<Z4pX}kzx^1
zzyd75f>f;Rf@TQ|r65wV^j=c2Y%%IY6o1ic$)T09VJ_y9Vx(Bv1*F)aJXfA8&n->m
zc1bN1PI71*T05d)RxG03$$xaKSdG<}99pRr=3*{~#-Wv6z@c$yt@3D^%3AAM>!H7>
zg~CY=jYH$ms0C_)S_p|CTaYb;M9}8Z=F#TS<|#yMmaqT|umB6N(C&gv5#rrQkz@FY
zQEha8BYo8U6*(p>jO`oSZ<VC`7K)s5J5&0L5=^eK<j}H$q!=j{`b+mWqTLa0NikAP
z_gD8<o?Da^weVl17Oq}>vcEYP>}+3ty!GttrMpju7mJa2@J{(<cK`U~<>uPgH#brn
zmcRIwmJ6EWd6q;5xXMrb{bX9;(>LBLr}OaLw=azD)ctFFB4w?=-m?G00voW-kIB#e
zmdiuMt<O<MOw}qa`#Z|dDsI-wlUueuEM%Xh(@Vfy2U<Nc*ExA#d=_&tx7CQGSV~bk
zH@5|yOXnWx4^r%?6y327Qj8QM#m0Rm!A%MYSbzmsfQ5-6P*{KkSbzms(4frFRu3)D
zMJ9rYXmdAn3)v%&LC(@0U1h1wlX<q*dU;~xx$@lh&^0So92qG_inT|EiJKH1q!=j{
z>VZS!&^WZQe54kr1!|#*a+wGwBIKfMLAD@UXymfUF-*g#*#!%*01L1%^ukF72wphJ
z1|1XOg_ENrl3F+_g%?h;6fUy}mtB<gnoC0=dFF6v<>A5H1dZ-*f=2gO_ct)1`<v!1
zn_oH0UD^P1mh5j<ko`?5!v3<qNBV;lJ1PbHo26iXQ<avgthHo+^UPs?L)U6hepO2G
zKg8TC2dC}~27_}O_wGNudF#yez30bL`+a`AocBL}x6xet`q5_o_qEma{EfX9AC3s~
zQ)j&I%UYf<KKpodr|zG-|AH@EU<1~16ZzR6ayi^q-167e5mU8Ft3P6jo3--fmTeCU
zN%77QDCRoQ3WIwrF&A@Nt3rw$snXr^bZ(jiI=6t8&P~z5p%r5ET4HV~8|Gr}^84~-
z3sSMP!x^)eykPMXb1^qS%l@*z?C<mt6)6^k(B_%{uSk+&q!=mI<RMz?{a8>=9#V`H
zBgM*wXqTiIDJB(bju*j=;3il=El>;80<}<x*eqcI7GMDuV4>Xwt#c^pjLGuS9yVE?
z`K`(F<fc5g5ToCc6eGn*u|!IMR-PLfj@G)?ddgH%EC@02FFoYE{j`{$e>4lriwDG9
z%+*6{U;zuT5G>%(I5ZB8Ln}mVmaqT|umB6Nkl{pW88u5iv{Dekjo_xusN59drjR%|
zVF4Ckfm#?xj@Pa}+20%tcD64+-g<WS(%q-Si$@CL$4(dQ)mNHpU%!2ALVX5Rj=pO_
zS7g3{%^f*c+Rf;weENR<zyDhQ2nYK+qdRqfIWgnAR{cLLNMzUP_vB|k$mOG5#Vvnb
zog=AMX~Dx(|LRA7%Zi(|^5m9n4-3&&m>BE8TnAcVaE~SCVs0DBlVU}W(79<6=-dKU
zIyXfJhgOKuYl*p~Y?zC=ZL-7uvcKVZVF4Ckp@~$f1!^H!Ah;3S2yV(qNV}vKf)E;%
z^Z)%*4N9%`@E1i>tiB}0O06&#b2&5)EqB3Ko5MmDL=R05EzF8>rj%Ztw;Hmuxaxo>
z<|bk=*9d7Krs*E(q3NLoXi2f;Bq>IU1t&?dAcV<suS%urHszRJ#FS%+dV4K}<)v(-
z7%3(!7u@775ZnlE!jK4VOgX0XTy$Yz{Zx?`OO~WqDG(`^hmcfEDi(*3R7@(?9xt!}
z3$VbUacHp%I5ZBedM_q|iIC^Yb8{C^3)BL&aFnyXh#apRoVqg@49;!byZ`X!tuxp6
zo*xU7-FZ##jn|uNU;n;v^zAv6P@LGp<$_nE>t9QQtd)NF-dFY8zAsaS+uywP(&$dz
z+ox}@`m^$%KZzf+Ady|^PdD`wzdl~&iQ;B~I=PnOdU96;Kt4gSX`6=!777+Iw;WiQ
zn>z+`L*@*rg)BurAQh=gzlyn-8=$3gQ|B`g#m#YOscXCa+X9c(mzY~>Mdt>7N7)IT
zn}UVTO>rj`E5zuv#N1Lg%*EUmv~(_=8{!rgU;!3%BFZjkmatF?!l7|!ZKGQ%7Q$ij
zV(elyR$p>xrB;}Wxuh5=R(1g?cBnzALD|lQQVY~Vz!4T;0T!l5@0o}ogx31|r4&Q0
zb*=UG$S}@Sxan1?6cTO7S-PXEEJ?Afpw@bMVua<w@;G$$(Dcys(B!%D+#<551!^HA
zg5aj471RQ?KrK)U)B?2-5<&M@_ctVh$Wi2|`&+sg?UIQILg@bL{^oUpIuQ{w7~7XE
z$QEP^|Hf?L+SMofn}fm5_T|T0&(2=D`*e7*l_&3&(|P#r+ZRUHzW%jcT+O=61vX$>
z8?Exgf2-g2PB_nIzx?sZ%gvp-Z*HXUF4lad<pKknJ93?i+<x!;W6O#==e$>3Pi_Uz
zI$P|;XJH`$hq>h-!CcI3j~8m8Ft+2ds-{YgEc+_vX00$6bC<{6bS|A+7~ErtxtQCA
z9<qg)TwnNalwdCA_5f{mW6onP=3;Ky5HFU(^4t~=WDA9{vV{~KdT6QAvMTEY{B&+s
z5OXm%Kr3<-If@*|X9|awScC;wfCX46yP#RZLMe!$5JMrY85P`wpBRmM2yQZ>5Zq+!
zkW~@f^s9>CCLM~fyuP7;xk(qy?MIiaps+kEh`E>>;+Fkof2CsMb3$02ScC;wfCX46
zyP#RZLMe!_Tv*;3OksKW31K-bzyd5#3qz5k$T1okvIW_KSEalvl|+;+6e~?FPz$YQ
zZq5k}$~-L%g@lG`P7gyNxlIg(Oq`}u@*-<Bdpz&I)S+EDICW<*7@XU<cmLtdTW7BC
zJwG<C#FzC%{o=EaN7ugoxx4JLvIRw3P@dWKT=vx;>IXhQUN-j6-)%H^>VCBOFZ`9x
z_gEQ7wHmzsIp#hjKXqWExcS%BiMtiolUu>F&K7&|Sy)I0VQx9FFc)*%<Aqu%jP0}-
zSJE<5P{v%$Z9@h+w|F2XA{`j!Vs6a!kYc15Db{!s4vj+#7ElY+LTjyH0Ty6kED>Z2
zvIW^fIH$xSwLmRU3r$`vauhiR3#bKZfm)yz3K5$nEWiRRzyd6^yI^XBLnop>8yb|6
zJ|1>o88M%0KDW#<^jMN&q!=kiiq+$mL(AiKv^R8rv(0fxisiH6RjK5rm;Cz8>SqO|
zVx@wZi@5<>t@UW94Y!T$7mw>zsmy;|2{7Sc%E7wY(%eF+Am(DOaVFzTxeLZIDJ*0`
zNHJ0@l!a6*%$f$JtFLmJfkWfa+WxArJPwNoCxqoC>g~5Qw_t9;+(IHH^cRQ5q5a!~
zn`>8}>~9VRJKL8ZZ#_GE>F(3v#im{LYw1}%IN0AAUHkgWiGFw=KiCTr*_4>Ygf3lv
zP`~ZRlli2azVYfS&7Hd6zE(2Ob(iyxq}ZJ6{lrh-uiIO3^RKHDy(q3Hw}Pit1$C>Z
z37h#<SjYllZaJ_p7jxU=g<2?#?Zn+PkxGgsQkND8b1^qS%S5C}!d%RagM<_dLQD*S
zvcK$a!9<TG`<q&g6eGm~w4@j*w!Fo-)ZNYe0On$D+rZc6DQzyy#azs7jtp3Ug<t`-
zKrK)U5e240r51t^k9LLSCHm5!%vjhUUJ(+#mZVrI8|GpzhsL4hE*NWbSjd8qVx(A@
z6>|&GPBXXQg_E4k=g>H`Hq`SrPaGDbWXpSK8THQWoR?b7UJA>zg2tILEcSY8-Wbrm
zM>J2OJfDk#pR<&TNyWnRVlL)tP)_R+saOy~gK{fNalZS{XwbQC3dxkLsI*m=q!=j{
zbRoq^F;a{aD@1ITumB6N01L1%S5ynjh2>$x1UKO)1UG`4MCO0fIMbDbQ+Eb~!MTll
z_aEN8b>{ls^J6z2eP0;2{mol1jjnyYefoB4!*#Q`1<}ho&9waN*Y)3z_^|Wrz43Z;
zr|#buCeH9_Q8WJo3v9qTKj!GOdtV(bM-PeO&ZB0n(#nsR;+C>`a?7rUg*iu3a&*qr
z!psj~ZjOLB&<dX&Xb!ZngqVxD?dbsvumB6qIY}*03&8>ojYDfC0xZA+EQ}?BY(cir
zwio2N^4yRJumB6NFdfn}5kZJiZA6YDN0DQ*Az%R(WD5-om<T2!SinRu5ljRVQHa<q
zVF4Ck0Ty7P-36H<#Pq)gr3R%2r3Pi$1<eu`N<mCH1|cTjft)y4r<KO64+w5bRphym
z;b`-`UrN!vq;=-YI!kvO`^)~azth_Ua|>v+*3%SsUh2nOR|2H&og1Lce@y6HIyXQ|
zijiWZ7%5hW*eqcI7GMDuU}3Jl)``%G2pcB22|qDHrr<_!(}oWkltBm$N?3q}|3)la
zyZU5*b1>N1zWjLW+1X2XpAIiRc&A98-9J8gxw-cB&5g8-^Rw4{24c{y`Rsy3cJ?<c
z`|9tVf64m2ayk#+efz@bPTjw@C#3zf*O~u;1?j*#KPEr>TP_b3w?0Q5YSt>P{)j1V
z*2<Gxb~P-dx$h{|Wpu6R&d*|Q+_>jJ!(7a5H6kp)LMS>|fCX5{Ol*0JG3C{4(KY+4
zn2WiXJH0p9U-lPs$7c#DMv9SQq*w|iSSW{Mv!oVEL4@VP^45&%{+52S24zMRTI&<1
z>6E<4T1}hNrn@b;$qE_@Nrz%6B;u@QOJQzu1ap%ZS(Vvzo&8nJ%?e^J=7zXsf7xGQ
z`S?r`mM0cr0Ty5Z7RoMYmatF?A}kk{w`NpW9)3b_0}HSK3)F%(PrC~mS1EE#Z>`Ov
z&2w}_QVU0=c;xle93^nyLce<evV!O3x&MEA_YY&$nci{y8fF2@h#{6RkOJcsk}Eg1
ztCcW}H!IV*vxq2`!fV{Q1A#2@XJkjD0c457S}YLtDn$yKSc$i@5=Y~b!pMb-kx&vB
zL|7C!_gv0<p6AS+d+t5Qu~)1<-RsfZ0iHSU_x=5T&vRbKnIpIn+|-~Y#bR5KVx(B3
zKS;5r6r@;`!qrzvQw>~_VsYk>Vx$-;rnR1Sfv{XyE-Y`3NNS-eg^8OOTVFnR>dvmq
zqtR&J()Am+&R^Vf_R8bmZc7IC^N*IQYhT~kkw3Emv-48L+0R~b1U;6wTd%RaoBuW^
zjvXD}sr&8fyuVV1=I(f_Ve{7@=6&_k{0(m_Zhd*exGJr5AXh1Yd(KjEqd=bAwC!Ob
zDBc>S>jB!>scV><jtmD{r~wCB(jN}ApbIIMh%so1xv6ZJi@CKPp>yfnB5q*;7GR;u
zPN)THp|C(ICKapu9k2iku#l2WYJplP8=`*0nu&;l$aCen<>CQ7v=TFH_@B#0$~}Fs
z%<f~8Vx(9BEr-UTacJeBi9DMWD}-2IA;n0svO`EQQmj^;umB6NFp-bc0<|E|mFLDT
zfQ9XcWec(e*+P*>vV~eM!vZY80xYB^OtpjsSbzmsfQ5P&Ot<vCa1tW=flh=@gib`Y
zAz%R(3JY{1B7@bS)SxVSnp!A?Fhc6;tFRVs3W*tNH-&8Q-UXgXUUe@`mZu7mVx*X%
z5JMrc3k-!k<!zqnOKP{~-|lnIR@c6MxH}yJeV4PlV4>e<=EIx3^7Ynh`4ImyAK!Pb
zUKro0`^EN6KDFqd&~e^}#7ri1?(+5gvCnoYZu47j8Q5H<(695ps<=@rPj1@wun?eW
zg@(=U%iNp`N6bxUjsq<ufCDY<BL`a0g%nG~7_`LPR5r}T+*+m3xpZz3x3B;Uuu!EW
z)B?3oSRfUXiq&skzyd75!gRjLL@*Id#3Zhx7N`YkVY-hmTPVU|ZB?5`o2Tp$t@R=t
zHryi`&97;_IeU<WL*vj2Xh|_rj1(&eO*m9itPp|}+aIMk(7rKY_8HrC9%C-%VlL(;
z6<RG}0Ty5Z7GR;?1=AWz4=o(Zx>QUmRtJE>a$$KnIAH-6V4*rEsRe4Gut1(0Attpz
zEl>-Sun87mp^h1-1!{p>FrS-t0TbaRzdT|`El>;8f_Hyo7cdd#7K)Xo7N`Ykp_$=%
zy2qK$oW6f`$7pn6<>cM{kM<tF_Hg}33JqU)zPk4Hhl3kNH8Kh2jfQrVr_YaRzW2&|
z&2rrO_$0fS4_<m^e5dZE<x9=)CV%U^zv$$9J6;)?p3+$4C%&Km{}G2<6Sj(*DKg{{
zQ{1SaCpT?JSP1Ff?t=9uVud}-O=WYSB~&}mVurIdkVGwzV!_}6f)sNxw}6(;rE_b9
zzyd75LWr)C|FFO8Z_!&ES|P+Z%H_}k793g`{90cTmM0-GXi18tvSBXf)}STDNHJ1u
za?%QJ1UG`4G*D76sRe3*TF_cgyP#UaLMn*hMsQP45g2DGeq!S#tto+6d?~m|wZdG?
zCB;awv<pbF2Z9^Hjo?OblY~;WgaufD1z3QEdKW}QV-Rn$Eo2L6Z^#ystCHsiEDYiq
z#H*F0*He?6awS0c3vW<*gEHDaGxg@|$AlCk#fttC+yq$7=bFzgVCB#XA;v0<L*vj)
z-01#l^CVGCEl>;8g133nE~u8UkP2cxw-DlIn$JCTXV>M?XtZzX`i)!XFYY;e<?+@g
zK!4@X!SS`P->;;wqwlgK9Z2D9kL6eSdtXjZ%Idv0w^VoPzPJ>AJRP<REjx0p(C?)k
zyU0)cdS_G2@yA|Gj%ZzRb7}fMSJhLXxKTk*ZrYBpkU-OlUNSsW!R9P6HwxrHOQ?3B
zMf0qsRH+40EHQY%5_2)Pb~kh`om)IDEWiRRL?%}2FZMUK#ZC4%=`Hp*yoks#ghW(D
zo;$26n2Wguv{Est7%4V6Q#iE1A}qiHEWkqA1=SK3QbF|4^w4TED!3_rVmzlHxQU2D
za5F5ThzjbVMFj;n;ZTI-rL$P|R4_M)fw@79sEV+BSXD3=bBnlTf7xHD*yKzRmIoGL
z0Ty5Z7Sb-LmavctA}kk{*Je~$Ui^gM1{Poe7N`YR0@S;pa+M;-@YdQq+C0q>Ni8&`
zSo79;yi4W+p<&m9L<JAXbK}er+z4)J(2`=YEl4p^tkEB&SW^m8EK1=n$E2wSE=jRC
zb4anLTZ)}IegEo?(dfd;$-Da>?LB_&;rfwcRZbi`I==Sx+tu>l_2nr4PjiZWeoTDt
zr?FgLd3#$r??3-&sk&45jUB_L2<J4%6F_?`Z?~p?-%U@-n&J+GZ}Tz5ZA!7)kq-2D
zT+;?uT*WOQ#oTE9biC}8Pp0_5yss*5)Jk!a)S?zb+_eUh9B6cIR?<neEV#s6%&ij)
zI+xC+bEmmUijiVPf6b1&NikB46q~#(AkR%gV$hNlOJ&2{qRO;+X8(^4=Y@;uHKw#=
zf7xI5H*JV|iMg0tJ7M;h{bheA_MTdx7N`YkA(_)^2@9|Q3$OqS^)Apu+mJ@dbJO0C
zEyxyR3l$+?0Tv1im<T3<iC`iU5vwIEzyd750xZZDrehT*qR8i(5VD0Rh${ioJZ|d>
zpbhEV=KE^utE3nyMv9SQq!=kSbvR76g*-Ry4N{C0tG9^}QX`~BNR5!DT~IAyAr-_O
zH-!)n+IKg5vD%B(DaaYH6x;}I{(6F&Q+IY<9*su(magBpb^hX>vsWH(ePT53T)i;9
z_VtVH!_v)p26l7DJMXKn=WqC|_4e*_&sKNpez-eX#=gth8#~UDnOVgqWqRwioNj%Y
zPUoA7n@h7v?dH~5aZ?37xv|$_A%Ui412Q}pm%*4DwdzP@6_;9wgf<lN!e^TU&4E@<
zG0er>8X>R%3$QS42T8G{EMyBIy;^gMf*Yw=vcm(Gq!=kiicPo4M2<z3t*we26Iex#
zAv&~ql6f1nWPelHFc)*@Pafz*=tP7a)`>6_l8%tROZJ!jWq;Y<4cveQSbzmsfQ6a*
zT7y!9ve+=ejo?ObQw3A<+;n8Z0xZA+EW|FDxJp=vf@rO4trweZ%CY!~4gcrf7&w@o
zlbziSB*jRv0$O>lJXfAu4w?wANU=f)Q;z$i6bBxdatzU7$}tIvK}%9Bl?`(PH0&??
zTT}`A%l_7fE-b(TEC|b&&k1e>H-ekOLcvXaF2VvV{1sv0%<21AcZ^0CR!-jC|7h>=
zYY*3tOdj+PUV3JH?dzrGOYz&D-S67GH`WooZ2p0HUwwaDBxBnTw?e}gp0DoI{o!B=
zJNhm=Huf|G7x>{<-pe2RBmla;qPV#<eV?o9F;U!9K~HYlj<67O^Q~NK9$k~~PfN^=
zGsl6JQ0+jQ)k{cZUVQ05OSN*KInd^NEC(8g77QNXQ!y8F3ux(FI=4m$EWiRRM2b+7
zOZJ!jEqaSXD})$lWg^Fbg~%~R>9l#0kQlTi#ZuWY7jvazy1!``R7+S$1tG;qvAQpy
zL0Qb&#urSJrdWJQiltg%F6NSAq*&Soq}T&JG(9vuv@|?fFR6vZNe+!e<It!DYN6f*
zRa04OU2DChHPiyNAX|_vq+LKQPz%&Tkq9~wIuQkqB1e&<$Wi2&h*&LQ0Ty5Z7GR;?
z1<`ZxHqT^RFcE2Qh#ZTb7(W{tlmQEG^LU%5R+8<Du@gKNUt(^m73N~DHjg$>+6C1T
z7E(bPDR%14uFIp*Xy4NH8@JA1+;jHI<E`U^`QDpbs%u|gT#B$Gbx9Ulb{t8ef{JBY
z<R^Z;GZe$}xmVLaX8n~z2gi5ne!r3qfxgR*Tx;6wFY?2`${%~VbXcl?y5i>2Eb^<L
zdQ22I%I3*U+YuHbmTJAGhq(^4d}K}`wG7Fn&D36EF6P!Uh7=1aO6SJ5xJl<G#x@?S
z&C$7_P2YgI@o>?(={cfv>D*e<V=m^FBLfy-0T!xrl3Jh^Y8G&4A)-07+|lCDA{N#|
zi%ch~(kCXBibVx67jug(BgIHDQfzXj$a4dWumB6N01IgsR7+S$1(D~<b89oI%~Slu
z#y81^O_P#hq?mE0(l~6+9KlU&3t_piywM+|SW}8MljXrpZ}SY(Us1sWq*$Ce>~AAQ
zyyTZkfw^(~c!M&*bKnwlF_-<F+C1!UYzy|6{cR3i_O~eoDHf$5#iovs-ot~WSe!ZR
zZ}NPY8=w(6253Z%BFBOWWBW05-uvX8Y$;>=Q9<@MqzL=V{x<r96l+Ss{zfU--%zEg
zD!rEMZ=5;oZ_%~m7cYakXHMV0x??oDuyXS5{zrR{UwgQI<mUFzKU%7;eSKp`$d}#%
zaQ3s;>k)1?!R^)?#qXwn%-V@#N5^;Se!Kb;tV@Sd?em^$eD9~RTwi&6TRQI*H<zaO
zb5%VMiW_C~<fd&83jvzeTMd}&K+8vFJ)h8n#F&e@wVEcy8dbX5F=30jn2WiSR|`3`
zM2ta8%uQvJEkrOQTS$zJTq}aVWDgfv(z$dlotrKMsF#?Fx%1y@=n*KSM+|c@7jx5w
zz}!mh!vZY80xTrw4-0K$tNWWgz3#8>Z{2i}ib=)F!3hhn01MSQNi9$dg$43ld9FOS
z%B!{3lfi}sSbzmsh+QzrpkW~jB3qCx$QEEhgR<-b*#Z-h-*%uDs0Aj1iHKc5El>;8
zLX)$J9Gg;jgEG%d%NAq{g_GtMO0V)k`@+C%H4;bWEHO6~h(il)in*AJxf~jYR(63r
zSDu?i7PUYv$aCenu?v1-wQ%aruFIp*Xy4NH8@JA1+;jHI<E`hOd$zjv^~2rC)%0D?
ze!(=HXZwAtoYhQf(E20adM%%zU#4N>n|H2W7~iS;#rEzW(D{dT7}$Dq_Wa?m=Z}51
zGyirKH=lp4UvlT~C@QMBQ9(~`+L^ErplL-fnCn2xN9KZ{P2m;hVs5R<NU<bE>D*9o
zbZ%m7tHl`FH6eBG5_2&ZbEmfn=3;KGVA)^xw|HJyfCX5nq$Y>Pp%oS|5ljRV!9*k?
zR!dlb1z3OuSg3cwbW2ROAX|_vOhyN&1!{p>pcbeFYGGO^i5yGVRue)eA_`(C#85~%
zIL+r4Ke4`IKDRs-W0&cji0~I?#k|cEn3$<IXFn#ozsaVMVx*X%5DqPN!Q`Zcg(wJz
z#-SB0&Y^|$;?T-d!J&DZCte|T-$L>igO(gxDjO+Aig9QhTI>Q2&3tZ>o?RCP&Q3u$
zZ&N?{s&S@hH<)rX<ybr~DHey2R7@&X4k4*nA%wXFcR7Z#l8Q;iY9;yehUI5Y-@m$J
zG`g^I^6&rS(ca_N9<Cqx+vlrmUw=55lBB-N4jWL&pS0op<(2pH$3Dp)_@|ei8Q-aU
zY57tJ@4nWhBQ%U1na=FF%lEg%)4Tof{*XQg9w=@uP2cCLdI}UbD(J~gdmR=6G;NQS
z;h757y~Ny9HV0ZlwF50?M_UG#S|G)O!2<*-=3;IEEuBl})(C+GSb&8PT_yivf0Kn{
ze?xk)zbT^>Ifjtn&^WZf1c#>0layuOC5IMZCB;aw0#;#pF>7NLCM*x%CM=I>FLMih
zkK1HvCQGSUsvzcKZVg&ej1(iqCMPY2#-Zt<Z4^$O??5I^vG|e{OSK}!NHJ2Z>a@TD
zEEE=yVx$-;Mv5gOR!dlb1z3OuSeQACBF~lQ%5&wpX%|#WSV#pi{9FjJwrcn}$tlCn
z;V%q78-5N<%+#B+9}{_QvMJg;CE6Y1)|8_u$C?|YSTL3pBgM**VffkbbFIZ;0Ty6k
zA|I&*YN4D9Oav3LsfqaK6aVmcqtR&RmVf`xwSWD$fBcuXe*BxK>W<nEo~}D;Ur^i>
zZ46m<OtmQP&lpH6uHx3YHs%(GQEtnco$H6}$lu$M_A9R9mU9tvF&A?yg#Ns-9_C^$
z=1$VGpSP9bKy#ou&>UzRrdnVD7GMDuV4<kcs)<jEmG0&G3Wvs_mAyeNPz%%owLmQt
zB2o)$tzkE6fm$eggIb^#s0C_)S|~)M7N~`qh_C<)u+Y3F!bCKsFmV&5IPidpU?P|Z
zYJpmy7MgQ`T4+i^Ekr4(g>(bKz@?Y`LT~+&mr>HWQTM*@bXDr8^U`(2Ra_>5iC`j_
zh(<0l5ltzWh$saUG0-`rk1-LUx0r}oH`<#OGb>i~2!|HLV1J*c8|^*0o?O|2Y(chA
z&hp9#c!Sa#l=Zpb0-@xLpE9*@<D1_c+A<oQ+<pA?$B%#Y&Uc3&Egw4g%(KV7U-=2v
zr6V0kmFltlDu3_G$!@ORdvi;5?dyw6!!=6Bg@I4{PWcaCM7n>yGtjVn?$u1qR}}Xr
zJXh5(LUH5a^5mxN2nz``tvl)a^6SZMs+b!Omjf+P+kqBu__SJ#)B-7%7(8H!xtLqK
z8#<THEuIz@U;!5L1kc3Mu)nb_ZnD2gZ?V7OMMRDvB%&(${}?mxtE5;|5OXoNfL1Cd
z6|18#Sbzmsm^c(_fm#sUOzUfEfm)yzCSFsX8)^v_U;!3jA?<={2@9zpCT>jJ)FHJt
zPl*}EEkJFaXkBRYMC=e%nYN*`hhYUbQ9*fbI25h*5@%KUCguiRFgJ)1Rl(e0Rl!`$
zE#j8_Wq+k&lQTtF9$170SbzmsNV}j~!a^#Duv}PPn^9qT@e_g@SbzmspcY&pRPTby
zRf-(LTWj-Z^E5{!wa}EJ{Xg_h@aVDBT91|x=3;KKWr7>QO$}ODn2m)$-~H2Xe?1zF
zwq5+gsrBEV{N26VKOP-l`}*zb>|w6CLkJy5(%jE(`VF7vufDx4iK)*&TB@#nePc%)
z0zJ;oCqH&}7c36y`ihwR_n7(T+-}YByqmV++KFR|o1Vo1OT|rh^>}h)+rvTvP0M2~
z1g$B+VQv84ftJ*O11<DNs|!XgkYb6!1D2SJxwR&ybLre7ZealyV4(!NAw}8WLWuPh
z_BZJ*_BXtU$T10tK}%9Bl?`(-x6TTsVj)EyNX4XL^`T3Okz&QHzyd75LUm433)Dhk
z0TaPQFcH;UhHOE$P*|YNqs^nuQ=C(%C2FA%LYrr2lw$duHjg$>ePkHK3vPNRV%WrU
zRPZn<Mv9SQX+zXYQY`d`Hjg$>*&*6ICE9(^zUw0d>eLHHrFLQTnkYyr)|6uP0On$@
zuv}OkyI`WtVIc}aijiVPPLN`xn28$`H(Kl2dr=G20u#YR#4cbWwrlgGMw$8C6htx+
zOav3bL@*IdL^BCtD5NRHFa0*pAHVs{p)I4)$=%0KfBg7Y?|gUo(ej~#Uu;kErSGz%
z#n`7)8Q=SQEZ0^)Yt1P>_iT0T>xa8jQ?KuG_OllUbv>|>{~meww*JVsUMqQN1^F+N
z^tpNG>V@&0x{5oqc5~~jxar~Y<i^H>g#?<G$65$lQyUL+15ysOBmo>~5%jg1<J1Bv
zmKZ!>iMg0t`#?IE&Mo2=7GMDu(imR7WPb}Gq++xGzfkP2$T1vS#O%q^b}vaWQmlZM
z6eGn*F;XlMv0B0cEWiRRz`{&@t%sIeh8|itGCj1!P2)@<Bm_5to4~}(gJt$(BDhI<
zL|9%j9AUYzJZM6S1!GAuQmh;qMo43x&)9x>Dh3R-O|}#%mMTb!kz)0{y;MvpR`eGv
zzyd5(aSpXWEff}Ltw$nGEl>;8!o-)u0xX!gNpWSpWFm@i(B{$R(dL1L%1TiS)B?3Y
zEu>fl7UFQMT(xXLwjf)OEu>ul3px=o1k-h;d;YEsXY91-Xud(4rzwTv<}vQ+yBz;~
z_fNn5^=LHOcJU9V)_;HUclU1pc=XcprEoR*<BNQ?<Jp_K3bEr6j_-YcTiyh%=;ejy
zt7~6>IGBFheU}{ucA>xB#<{I4@8yqulA-^>OV5n&)K%R4>+JXIQrz@#d2-Xk0}Ej~
zTZ8w((T${v4`fI^`6}iHq#S5T0yxlSb-@yu7hgKiQmq_l4z&7E!d%QPpoIlkfQ3rO
zQw!8WVF8E6q1ACLEWiRROvhPF1QWqTOh!+r1!{p>nC^hc7K(5f*G3O5G=v^n8ChIk
zF}INX#h@jJmdb{?m@Chf=cZjyEny)QgcKvi>d7q=HzmW__}+Qa6pJrOu~aL}#avR1
z6id5+6nh{n7nTdlh2=>oRZCca1z3OuSg3bFL^S0EG7~o@Zc17sTS%@-o*S^xTGv{y
zm1O%miVX+rw9?q@8|1mEDwvD8@?3dt+6D4l!A;#suDl6{#-VX&-ib)N02aJh9gfr>
zp6do1`A97!P8!53!oeV(JolH)bN~3wZw_r4jZW@9e){9bzk27p!;h9<T#9ydGB^t@
zJ3_<wca^5rB0ur#o%sZPwE^h(v#%UFIKKAv`;`>a^<8#M9xN7;Zv01ml|S}!V%+Mz
zH@8%G>MCyE-%(Ulabw4La?^7J3o$s*5>p%T6gne5kRkQttC$;Sjsq>2bJKyA^hZmn
z#v!%X7JDLr9BA=yInW$v^`V5hu`Mt+n^DXSMaTYzN{gz<7KT*?b1}DwTT+Y^BgH0X
z3WpY0gaufD1z1SCpjyI0Du_-*O^ER}(TRvGSoe2WLLL=7K#GxKb+1x`GD04~O>7Hc
zxv;#^AEa1Q3Q{aeVGu8As)0*VEY2MEm;J5jLW;$<AjL?r=Fla@no^KrQ3_IQp#Dl9
zBgNv(A;m~BQcQy~?Sg6v3#lNaSm+N8$`BG7lp2%;6DG@}y*4>bW19p#reB*(qvslw
zQ9-F#I25UvRIEV=Db|!iDi)=XiuFEj)5+__>Nt6yXczXk=-TnKfw=)1_BTMo{<6OX
z6YTHCBc$)M!Tv@C*<be8i`A2p78YQk<Ui&X0*f44kzTVL+NnFcE{{f|eM{GG+&X`8
z&)F-Fx5ifL9nsHz_QD)>#`_!chTE-ciQY~Bn6(qfj*hQ={dTplf=Yiv2Q|}o^;mwI
zzxVBYDf{OiEme2wzOh4b3#Y;&F7|9FZfr+SZrb*+5L>EskLY6isz~TkQOr$ba-hY5
z<v>gNqZN1OV?Q80@2d{9sFee);CC#K9cT`;`s~JB%q;>97GMDus&kTBpcV=XI5ZBe
zj+9{m7GPl_5o8Opg}MzY&z0vEi2w_*01G8h3AMyT6hf@8h#W<ZWrv6yi=TMVe!*00
z-8fUi#DFC!Mv9SQ<)9(OYJ|W7EWiRRq|B;X!U8P70xZBny$hz_BGUa05p9GtJtp3X
z2yS{0ZQfLV)GDIC^e~ZPxj>kUxn-N^q3NL+#H)@M6F14Gzyd750xZNXm?U|y5Ct)D
zlltdgtd7|dcibc)F=$DOrLtiz=8|HhSnL8)Or9&xZH`E4p((}c0cs&Q$)Ry*g_GWi
zC>@_)?45`+r|)0gF&bT1IeB;gqrJzkJzPJM`ffd!vq$OT-_>gPmS6mgKj*F2@;7{$
zzw6G`3*&2Fzu5j0dd?k3()0+-B7e^7`D35$48|>=d+yolPTdc8r$eCcQgNeViktRA
zi<<cnjI?XsS3S8=D_BUZ!`z^FOQ|~09B7Hb1D2SJx%HbDbZ*l5bS|A+n?zEK6f61*
z7GMDuDkD!VPz!|xOav3bM5GSd+`B#mH-ei1X-#^>Fc)(%H*E;atpq77zyd75LNceY
zP;Usqjo_w47SsYPz(N{>l;@@+Q=2C^Y05DLHKrURxitKoh%so1xv6ZJi@6*chZehF
zlH|cc6oeEb#Y(j4orp4%x8eV276LW7+qp|pj1()N)kD)m(?cr<O$>jNVucWEtE3ny
zR(1#}MvB#{6Bb|r76dm2@yaf!<fAtzLqxAr3)BL&01Mur%t@_mLAId#tNR<ffQeut
zn24q;r$O12qU%cctSQn5<}4R0?x{PwE{{f|eM{GG+&X`8&)F-Fw}zEz50h6Q@9H^s
zv>5X<Kkvsh-+Se~W;y<ge3I<u$_Fn!Grsoq((<J_f2I5bHvG9A<>~rI&i;w-Z_B@@
z{kc{zJYU_Z`@_LGzp<`AS8-GE6gPHeD|+dAf;_p4zycN$CowlD-tL0U-b@`wqysIL
z&4K1Xt4}e^#oPi~SbzmssB}EFKrIv&$QB}7p%$nGYGD%6!U8PRp%%43El>*)i<fQ@
zwLmRU3)Di|1=SK3QbDwN3L!SW1DQ0%;!9F2)k>aQRN1&OXl@|{nz@CTvog+<h%so1
zxv6ZJi@ADedT41ER7+S$1tG;qv3gpT{bhfP7Ka5`fCXydf!4a#y4L#i%M45e6CqoW
zEu>vQEl>-!X4YCawqL9?EWiRRlrb9(N)5`QnPdyH1=)gZArY}!!U8P70xZBny$hlh
z>203LwqPRC-q49Ceq#J=m|F-~m@JP7&SZHa#-JtUrn3Eon0w~*{i{1hqYEo1@9uxJ
z_xQDk>qn+#V)|>&UUqn_VL$P!{IQoy+E>Bo-kV#hYhPbn3Rjcj(1n&A&tBlJXro1b
z;@3L^4a?_VO$W&OD~Aq_@6`Q%Wp?fIzjV_-OmS236gO0SYr@u(3kw-Mefag{doefg
zi@BIPKQzQ#%*EWvYc6zdwg3s93on_7s33<HQsgH4n;6?lWanDvO}~N8jfacQO?;Lu
z$QEizkGYszUf+fVSb&A<oTL`01*zDC1xy4JQMaW9H-eioi~tL;01L%AHEKzo8{0yj
zTVPo|Ci2{9BI}`rkcg`E8Dt^FqJo%<xh2FE+%!_ed~Pbmni0~_swT@fZI?%Zq79G-
z^7B{O-#BwHH-SbEEw%~f22wB=a|<Te-!O0NugUUa-i8r^6eGoSB0_1HTQIj!ltvvX
zb7-j`92$pKt4_nuNqT8eh8N+`IJCNXFSr?I%aS1F&^R;>Ep3P=OLGgcEzF9U6>Dq>
zht`zB+(MMXjd)W>NH~@ShX+ZqICG?8Qn8vYq*!bVQtU4z#ZKMXb$K)z?OVEj<JS3$
zd(K{Yyme3t(=i*q;3=`;ocT0=?Cou-JfDBGR9*Y}#*RUM(I-E4_K}p1{vONQtswK=
m#JIH+$BvHg)ctn#CnOrbWO4s@{51Ud<A444|9mrE9Q{At?txSQ

diff --git a/embed/poison/text_html.zstd.poison b/embed/poison/text_html.zstd.poison
deleted file mode 100644
index c550f32e139255c55cee2987d651f8968263096f..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 1786199
zcmeI*Yit$t9mnC8N?`<0suAXBD5PL%Vc-C5aCC=BrUFGg2m?v9l*<_m2|CQQh!n$c
z8;TR93PU(kN>j#^ixNRJC14cfG65N4jiX2=GSFtsn8{`M=KN;%!p-c}^29g1+(pm+
z`#s;!IYlq^IhXZxuMSzsni~tV9-s2po35Vo=#(e&=GJW(_0+aG-A*^AE<0SBGi$`=
z8GCClJkasJ4Lf`McKU{$pRHb$`orqU?e>+oO3c1<Lgi2Ee|~n|grkeot3G_<!j7VX
z%YT0&b?^5_jv81t<v?=LgHPUZAX)ot>yo)8hi~8W;)}P==(>IW)4Q`jyM1Tb(pT@?
z_PtL(NUwaU=+E;XnlWfyY2w3=uKeTc{mwkLyD97KCl~x<+{iuSm;PyC?RUNyH}0O<
z9bUL?)UzwQd^dOF-(MSCvg(sdYku*|y)$nfP&*;@Lg&Y>>)rd!j?)fzyzapH+&+1)
z)^EPCaN39u?^yBCjg3bpR^=^UH+$>Dg^$lJzhPUaLx(%vw&khEJ5GCk^UXsN4fBQ+
z{^ncrCRJxOm0tdr`}g#J<?7$P^5eS}ZP{NiZ}7{7Sua<n*DuN*p1AC?bUIm)m1vQ8
zq{F&aUzC<LmTx(JX8NFB?NW)MgS(FyJuv@@n;M2rt8Te=+1i{ljZN2_-B&%b&6JYS
zYjz%7dE|}eqk9W`*VP@GIJGn<*{1mJHTzGb6O}`6yL#-{rT1Nb;@zsT9rji~`B0DL
z#RI<Gbye}t9@wyQ`de?m`@rp2E&tWTkFP4a|NX)Dc6<LvslQE~G&6U{iybHAJ$G#T
zYZw1DblEem!$(uoWu;xa4V(Pn6>ruRKR;{as&47Gp1UhC?kCr7d;eU`lFF?IPbKP)
zKRWw|FI3h4V8zhY(~l4PZ1=A>SAVd7d8>27rcHlj(wMIIbr|y6CpYYxw{Gd~ys;PB
zr-rq9y>Hvrr*FOa+WM`zS(jw@ne^4ahJX4$`cI+7m}KtQhFv?ZPwcz$((M=8wyv$%
zl&oDg{9OH<&RtITc<-L7O)F{^^ed=M=hYQI)4ok%MfU*>Eyk1|%C4Hx-06HOQPgtd
zlHzwJeSFKQW1r7VEv`8*>g4+V%d>m7Tv9sv#H^78*(E)5dR0tr%1@^jK74d;?)+rm
z@%72_)n)mW{+)fZzjOU}=I=)TocRR#=KtI06T~NoPY|CVK0*Hd{}=dd^x5dM(PyL2
zMxTxDATB&^R~K)O?u}o2Pxfx~ZuD;SZuD;SZuD;SZuD;SZv0Pn2;Pm}joyvkjoyvk
zjoyvkjoyvkjoytmsn)i3#1_&P(qF9>Tnk(aTnk(aTnk(aTnk(aTnk(aTnk(aTnk(a
zTnk(aTnl_}fp28+T@$_^<m<lw#U<4x)g{#>)g{#>)g{#>)g{#>)g{#>)g{#>)g{#>
z)g{#>)g{#>)g{#>)wg5&-f!P%?px^p`(GKLOq7W-Q6|bnnJ5!wqD+*DGEpYVM42cP
zWui=!i84_p%0!tc6J?@Il!-FMuXOV>e#X!E89(D^{EVORGk(U;_!&RrXZ(zx@iTtL
z&-fWX<7fPgpYbz(#?Sa!kN57W+O(o(LB9fi#?SZ}KjUZojGyr{e#X!E89(D^{EVOR
zGk(U;_!&RrXZ(zx@iTtL&-fWXduP(ex12im`OMT}e#X!E89(D^{EVORGk(U;_!&Rr
zXZ(zx@iTtL&-fWX<7fPgpYbz(#?SZ}KRY@%cYd<(`1)iyKjUZojGyr{e#X!E89(D^
z{EVORGk(U;_!&RrXZ(zx@iTtL&-fWX<7fPgpEZ_mIeupPpkD1#{EVORGk(U;_!&Rr
zXZ(zx@iTtL&-fWX<7fPgpYbz(#?SZ}KjUZojGyr{el~i|&VwtDywQAgFF)gF{EVOR
zGk(U;_!&RrXZ(zx@iTtL&-fWX<7fPgpYbz(#?SZ}KjUZojGtY){X*N;wH2F^wfu~q
z@iTtL&-fWX<7fPgpYbz(#?SZ}KjUZojGyr{e#X!E89(D^{EVORGk(_4Vodp=?5Y{f
zo%k6)<7fPgpYbz(#?SZ}KjUZojGyr{e#X!E89(D^{EVORGk(U;_!&RrXZ&pRiCH5H
zvP*jA^x|jyjGyr{e#X!E89(D^{EVORGk(U;_!&RrXZ(zx@iTtL&-fWX<7fPgpYgMc
zY8HPDcP(%&a4m2xa4m2xa4m2xa4m2xa4m2xa4m2xa4m2x_?KHjpGmF-)vg7u1+E3I
z1+E3I1+E3I1+E3I1+E3I1+E3I1+E3I1=Ffqu3fe^=S*XhHdmXg&DG{=bG5nJTy3s4
zSDR~X%g^{3KjUZojGyr{e#X!E89(D^{EVORGk(U;?q0M1L^{!8Ofr|B@iTtL&-fWX
z<7fPgpYbz(#?SZ}KjUZojGyr{e#X!E89(D^{EVORGk(U;Hm#^x(6692oma=t_!&Rr
zXZ(zx@iTtL&-fWX<7fPgpYbz(#?SZ}KjUZojGyr{e#X!E89(D^r;dF-Gqt$pz^Ie_
zjGyr{e#X!E89(D^{EVORGk(U;_!&RrXZ(zx@iTtL&-fWX<7fPgpYbz(mh3yeK3TrH
zEWeVU@iTtL&-fWX<7fPgpYbz(#?SZ}KjUZojGyr{e#X!E89(D^{EVORGk(U;&P*TF
zt6eHFbZ~cm#?SZ}KjUZojGyr{e#X!E89(D^{EVORGk(U;_!&RrXZ(zx@iTtL&-fWX
zTY2P-=A(NHd)L+RGk(U;_!&RrXZ(zx@iTtL&-fWX<7fPgpYbz(#?SZ}KjUZojGyr{
ze#X!ES?k)0P08A2!_U?8Gk(U;_!&RrXZ(zx@iTtL&-fWX<7fPgpYbz(#?SZ}KjUZo
zjGyr{e#X!E*`e&J8O@!}rxHc{jGyr{e#X!E89(D^{EVORGk(U;_!&RrXZ(zx@iTtL
z&-fWX<7fPgpYbz(R*+rNGpAR@<feRn#?SZ}KjUZojGyr{e#X!E89(D^{EVORGk(U;
z_!&RrXZ(zx@iTtL&-fWX%e;z*^D}<N&-fWX<7fPgpYbz(#?SZ}KjUZojGtvL1${35
z$+e)`wZOH&wZOH&wZOH&wZOH&wZOH&wZOH&wZOH&wZOH&+Sc0E+Sc0E+Sc0E+Sc0E
z+Sb}O^D5?N{A>q5<7fPgpYbz(#?SZ}KjUZojGyr{ewMiuSlc#Tb9SF=fonk<*8<l9
z*8<l9*8<l9*8<l9*8<l9*8<l9*8<l9Yg=nuYg=nuYg=nuYg=nuYg=pE%&XYimY?x6
zewNM8_!&RrXZ(zx@iTtL&-fWX<7b&mfwir*ZSL5HU9JVL1+E2`xE8n;xE8n;xE8n;
zxE8n;xE8n;xE8n;Sle3LTH9LNTH9LNTH9LNTH9LNW?seCw$`@%jGyr{ewNSA_!&Rr
zXZ(zx@iTtL&-hv9QebUsZEI~?SNu$S*8<l9*8<mqQr8040@ni90@ni90@ni90@ni9
z0&81qTWecuTWecuTWecuTWecu+sv!j+Sc0E+LoX3Gk(U;_}OWG#?SZ}KjUZojGytd
z%%#BE*4ozE*4p;u`u@vZ3tS6a3tS6a3yNI}Tnk(aTnk(aTnk(aTnnsit!=Gst!=Gs
zt!=Gst!=Gst!*=}VryG#TWecuTYkpR_!&RrXZ-A8e#X!E89(D^{48@Ru(q|fwYIgk
zwYII?nw#ZX;9B5X;9B5X;95}TTHspXTHspXTHsn>ZEJ07ZEJ07ZEJ07ZEJ07ZEJ0t
zc@<mRTH9LNTH9LN@-u$M&-fWX<7fP=grD&<e#Xx-mjY{BYg=nuYg=nuYuoN4Mh|o?
za4m2xa4m2xa4m2xxYD)2wZOH&wZPie+Sc0E+Sc0E+Sc0E+Sc0E+BWklwzjplwYIgk
zwYIgk<!AhipYbz(#?SZ}KO4Z$_*v#sU~Ow{Yi(<7Yi(<7Yi(P1XyR1Y0@ni90@ni9
z0@ni90@s34*8<l9Yg=nuYg=nuYg=nuYg=nuYg=pE%&XYi*4ozE*4ozE*4ozEmY?x6
ze#X!E89(D^{EVM{xv`DETnk(aTnk(aTnk(aTnk(aTnk(aTnk(aTnk(aTnk(a;!^PC
zpIi%E3tS6a3tS6a3tS6a3tS6a3tS6a3tS6a3tS6a3tS6^YIC)@+FWg}HdmXg&DG{=
zbG5mdy)8fEXZ(zx@iTtL&-fWX<7fPgpYbz(#?SZ}KjUY`{EVORGk(U;_!&RrXZ(zx
zEnAy&rqORh`fW(R4e7Tb{WhfEhV<Kz^>aFR;b;7epYbz(#?SZ}KjUZojGtBUGk(U;
z_!&RrXZ(zx@iTswPP7=4<Y)YhpYbz(#?Sa!QOk`>_!&RrXZ(zx@iTtL&-fWX<7c<<
zGk(U;_!&RrXZ(zx@iTtbub?)a$Iti~KjUZojGytd{B&v|KjUZojGyr{e#X!E89(D^
z{A@ly<7fPgpYbz(#?SZ}KjUYq#We>;@iTtL&-fWX<7fQLF9Q2TV800L7lHjEuwMlB
zi@<&n*f*N{Mh1&Ai!zHci!zHci!zHci!zHci!zHci?ZVuWfo-?Wfo-?Wfo-?Wfo-?
zWfo=0^3`Se7G)M?7G)M?7G)M?7G)M?7G)M?7G)M?7G)M?7G)M?7G)M?7G)M?7G)M?
z7G)M?7G)M?7G)M?7G(!5$}Gw($}Gw($}Gw($}Gw($}Gy-r4mC2Ta;OpS(I6nS(I6n
zS(I6nS(I6nS(I6nS(I6nS(I6nS(I6nS(I6nS(I6nS(I6nS(I6nS(I6nS(LT4D6=TD
zD6=TDD6=TDD6=TDD6=R#y0@@*okf{NnMIjJnMIjJnMIjJnMIjJnMIjJnMIjJnMIjJ
znMIjJnMIjJnMIjJnMIjJnMIjJnMIjJnMGN-MVUpJMVUpJMVUpJMVUpJMVUoevUb_<
za~5S5Wfo-?Wfo-?Wfo-?Wfo-?Wfo-?Wfo-?Wfo-?Wfo-?Wfo-?Wfo-?Wfo-?Wfo-?
zWfo-?Wfo;4Ey^s)EXpj(EXpj(EXpj(EXpj(nme6OB`nG;$}Gw($}Gw($}Gw($}Gw(
z$}Gw($}Gw($}Gw($}Gw($}Gw($}Gw($}Gw($}Gw($}Gw($}Gy_Rm{)$89(D^{EVOR
zGk(U;_!&RrXZ(zx@iTrFmx3?<<XYfb;9B5X;9B5X;9B5X;9B5X;9B5X;9B5X;9B5X
z;96j9Yi(<7Yi(<7Yi(<7Yi(<7Yi%2^Vt&TY_!&RrXZ(zx@iTtL&-fWX<7fPgpYgM}
z6j<9fU2}GyYk_NlYk_NlYk_NlYk_NlYk_NlYk_NlYk_NlYk_NlwXL<SwXL<SwXL<S
zwXL<SwXL;nyo#-D`58asXZ(zx@iTtL&-fWX<7fPgpYbz(7MB8RTWj0gu?@Ri3tS6a
z3tS6a3tS6a3tS6a3tS6a3tS6a3tS6a3#@IeZLMvsZLMvsZLMvsZLMvsZR1sJZEJ1I
z&-fWX<7fPgpYbz(#?SZ}KjUZojGx7&z}nW@*4nnN_?h;u1+E3I1+E3I1+E3I1+E3I
z1+E3I1+E3I1+E3ww$`@Rw$`@Rw$`@Rw$`@Rw$`@sDz>(@wzan9XZ(zx@iTtL&-fWX
z<7fPgpYbz(7MB8RTWecuTWi~s>-#TvEpRPxEpRPxEpRPxEpRPxEpRPxEpRPxEwHw=
zwzamkwzamkwzamkwzamkwvAV@wXL<SwXL-+KjUZojGyr{e#X!E89(D^{EVN)rNG+O
z+Sc0E+Sb~(a%*muYk_NlYk_NlYk_NlYk_NlYk_NlYk_NlwXL<SwXL<SwXL<SwXL<S
zwXL;nyo#-Dt!=Gst!=Gs`58asXZ(zx@iTtL&-fWX<7aUxu(q|fwYIgkwYIgk?LK1k
zK-U7-0@ni90@ni90@ni90@ni90@ng-TWecuTWecuTWecuTWecuTWi~R6<ga{+gjUN
z+gjUN+wwDh#?SZ}KjUZojGyr{eioMkYg=nuYg=nuYg=nuYuma*6Q{ZsxE8n;xE8n;
zxE8n;xE8n;xE5I3TH9LNTH9LNTH9LNTH9LNTHD5}*xJ_G*4ozE*4ozE*4mbz@iTtL
z&-fWX<7fPgpT(uX+Sc0E+Sc0E+Sc0E+Sb~(eop5ut_7|It_7|It_7|It_7|It_9Y%
z*0$ER*0$ER*0$ER*0$ER*0%8~wzjplwYIgkwYIgkwYIgk<!AhipYbz(#?SZ}KZ{F&
zwXL<SwXL<SwXL<SwXL<SwQW($jZ0h$Tnk(aTnk(aTnk(aTnnsit!=Gst!=Gst!=Gs
zt!=Gst!?8~Y;9|8Yi(<7Yi(<7Yi(<7Yi-NV_!&RrXZ(zx@w2!TSle3LTH9LNTH9LN
zTH9LNTH9LN=BHB&T?<?bTnk(aTnk(aTnnsit!=Gst!=Gst!=Gst!=Gst!?8~Y;9|8
zYi(<7Yi(<7Yi(<7Yi(<7%g^{3KjUZojGx7&z}nW@*4ozE*4ozE*4ozE*4ozE*4mbz
z@iTtL&-fWX<7fPgpYbz(#?SZ}KjUZojGyVx^k@1r{h9tuf2KdvpXtx^XYnfLXZ(zx
z@iTtL&-fWX<7fPgpYbz(#?SZ}KZ{F&{!D+SKhvM-&-7>dGyR$VOn;_7<7fPgpYbz(
z#?SZ}KjUZojGyr{e#X!E89(D^`ZN8R{!D+SKhvM-&-7>dGyPe-iuoBo<7fPgpYbz(
z#?SZ}KjUZojGyr{e#Xz@QlLN6pXtx^XZkb!nf^?Fra#l4>CgBXKjUZojGyr{e#X!E
z89(D^{EVORGk(U;_?iApf2KdvpXtx^XZkb!nf^?F7O!G{#?SZ}KjUZojGyr{e#X!E
z89(D^{EVORv$z!K&-7>dGyR$VOn;_7)1T?j^k@1re#X!E89(D^{EVORGk(U;_!&Rr
zXZ(zx@iTs=KhvM-&-7>dGyR$VOn;_7)1Sqwn4j@8e#X!E89(D^{EVORGk(U;_!&Rr
zXZ$QK1^P4nnf^?Fra#l4>Cg0M`ZN8R{*0gTGk(U;_!&RrXZ(zx@iTtL&-fWX<7fPg
zpXtx^XZkb!nf^?Fra#l4>Cg0M@hawL{EVORGk(U;_!&RrXZ(zx@iTtL&-fWXi%Wt2
zOn;_7)1T?j^k@1r{h9tuf2Kd<XZ(zx@iTtL&-fWX<7fPgpYbz(#?SZ}KjUZmGyR$V
zOn;_7)1T?j^k@1r{aL(<`58asXZ(zx@iTtL&-fWX<7fPgpYbz(#?RtXpg+@}>Cg0M
z`ZN8R{!D+SKhvM-&-fWX<7fPgpYbz(#?SZ}KjUZojGyr{e#X!Enf^?Fra#l4>Cg0M
z`ZN8R{!D)suVQ}2&-fWX<7fPgpYbz(#?SZ}KjUZojGytdxD@Em^k@1r{h9tuf2Kdv
zpXtx^XZkaK#?SZ}KjUZojGyr{e#X!E89(D^{EVORGk&H&)1T?j^k@1r{h9tuf2Kdv
zpT(<~pYbz(#?SZ}KjUZojGyr{e#X!E89(D^{46d7`ZN8R{!D+SKhvM-&-7>dGyR$V
zjGyr{e#X!E89(D^{EVORGk(U;_!&RrXZ(zx>Cg0M`ZN8R{!D+SKhvM-&-7>UD&}YW
zjGyr{e#X!E89(D^{EVORGk(U;_!&QoOM(7Of2KdvpXtx^XZkb!nf^?Fra$9n{EVOR
zGk(U;_!&RrXZ(zx@iTtL&-fWX<7fIa{h9tuf2KdvpXtx^XZkb!S-gt*89(D^{EVOR
zGk(U;_!&RrXZ(zx@iTtL&*D;`KhvM-&-7>dGyR$VOn;_7)1T?j_!&RrXZ(zx@iTtL
z&-fWX<7fPgpYbz(#?Sbf{!D+SKhvM-&-7>dGyR$VOn(-yVt&TY_!&RrXZ(zx@iTtL
z&-fWX<7fPgpYgM}6zI?NXZkb!nf^?Fra#l4>Cg0M`ZIpU&-fWX<7fPgpYbz(#?SZ}
zKjUZojGyr{ex^UupXtx^XZkb!nf^?Fra#l4#jBW~@iTtL&-fWX<7fPgpYbz(#?SZ}
zKjUZoEG`B5GyR$VOn;_7)1T?j^k@1r{h9uZpYbz(#?SZ}KjUZojGyr{e#X!E89(D^
z{EVOJ&-7>dGyR$VOn;_7)1T?j^k?xZ=4bqjpYbz(#?SZ}KjUZojGyr{e#X!E89$3l
zf&NT?ra#l4>Cg0M`ZN8R{!D+SKjUZojGyr{e#X!E89(D^{EVORGk(U;_!&RrXZkb!
znf^?Fra#l4>Cg0M`ZN7myo&i5KjUZojGyr{e#X!E89(D^{EVORGk(U;;!>bL)1T?j
z^k@1r{h9tuf2KdvpXtx|89(D^{EVORGk(U;_!&RrXZ(zx@iTtL&-j`COn;_7)1T?j
z^k@1r{h9tue-^J|e#X!E89(D^{EVORGk(U;_!&RrXZ(zx@w2!T=+E?L`ZN8R{!D+S
zKhvM-&-7>dGk(U;_!&RrXZ(zx@iTtL&-fWX<7fPgpYbz(ra#l4>Cg0M`ZN8R{!D+S
zKhvMZtC*khGk(U;_!&RrXZ(zx@iTtL&-fWX<7fOVE(Q8C{h9tuf2KdvpXtx^XZkb!
znf{EQ@iTtL&-fWX<7fPgpYbz(#?SZ}KjUZojGyVx^k@1r{h9tuf2KdvpXtx^XYnfL
zXZ(zx@iTtL&-fWX<7fPgpYbz(#?SZ}KZ{F&{!D+SKhvM-&-7>dGyR$VOn;_7<7fPg
zpYbz(#?SZ}KjUZojGyr{e#X!E89(D^`ZN8R{!D+SKhvM-&-7>dGyPe-iuoBo<7fPg
zpYbz(#?SZ}KjUZojGyr{e#Xz@QlLN6pXtx^XZkb!nf^?Fra#l4>CgBXKjUZojGyr{
ze#X!E89(D^{EVORGk(U;_?iApf2KdvpXtx^XZkb!nf^?F7O!G{#?SZ}KjUZojGyr{
ze#X!E89(D^{EVORv$z!K&-7>dGyR$VOn;_7)1T?j^k@1re#X!E89(D^{EVORGk(U;
z_!&RrXZ(zx@iTs=KhvM-&-7>dGyR$VOn;_7)1Sqwn4j@8e#X!E89(D^{EVORGk(U;
z_!&RrXZ$QK1^P4nnf^?Fra#l4>Cg0M`ZN8R{*0gTGk(U;_!&RrXZ(zx@iTtL&-fWX
z<7fPgpXtx^XZkb!nf^?Fra#l4>Cg0M@hawL{EVORGk(U;_!&RrXZ(zx@iTtL&-fWX
zi%Wt2On;_7)1T?j^k@1r{h9tuf2Kd<XZ(zx@iTtL&-fWX<7fPgpYbz(#?SZ}KjUZm
zGyR$VOn;_7)1T?j^k@1r{aL(<`58asXZ(zx@iTtL&-fWX<7fPgpYbz(#?RtXpg+@}
z>Cg0M`ZN8R{!D+SKhvM-&-fWX<7fPgpYbz(#?SZ}KjUZojGyr{e#X!Enf^?Fra#l4
z>Cg0M`ZN8R{!D)suVQ}2&-fWX<7fPgpYbz(#?SZ}KjUZojGytdxD@Em^k@1r{h9tu
zf2KdvpXtx^XZkaK#?SZ}KjUZojGyr{e#X!E89(D^{EVORGk&H&)1T?j^k@1r{h9tu
zf2KdvpT(<~pYbz(#?SZ}KjUZojGyr{e#X!E89(D^{46d7`ZN8R{!D+SKhvM-&-7>d
zGyR$VjGyr{e#X!E89(D^{EVORGk(U;_!&RrXZ(zx>Cg0M`ZN8R{!D+SKhvM-&-7>U
zD&}YWjGyr{e#X!E89(D^{EVORGk(U;_!&QoOM(7Of2KdvpXtx^XZkb!nf^?Fra$9n
z{EVORGk(U;_!&RrXZ(zx@iTtL&-fWX<7fIa{h9tuf2KdvpXtx^XZkb!S-gt*89(D^
z{EVORGk(U;_!&RrXZ(zx@iTtL&*D;`KhvM-&-7>dGyR$VOn;_7)1T?j_!&RrXZ(zx
z@iTtL&-fWX<7fPgpYbz(#?Sbf{!D+SKhvM-&-7>dGyR$VOn(-yVt&TY_!&RrXZ(zx
z@iTtL&-fWX<7fPgpYgM}6zI?NXZkb!nf^?Fra#l4>Cg0M`ZIpU&-fWX<7fPgpYbz(
z#?SZ}KjUZojGyr{ex^UupXtx^XZkb!nf^?Fra#l4#jBW~@iTtL&-fWX<7fPgpYbz(
z#?SZ}KjUZoEG`B5GyR$VOn;_7)1T?j^k@1r{h9uZpYbz(#?SZ}KjUZojGyr{e#X!E
z89(D^{EVOJ&-7>dGyR$VOn;_7)1T?j^k?xZ=4bqjpYbz(#?SZ}KjUZojGyr{e#X!E
z89$3lf&NT?ra#l4>Cg0M`ZN8R{!D+SKjUZojGyr{e#X!E89(D^{EVORGk(U;_!&Rr
zXZkb!nf^?Fra#l4>Cg0M`ZN7myo&i5KjUZojGyr{e#X!E89(D^{EVORGk(U;;!>bL
z)1T?j^k@1r{h9tuf2KdvpXtx|89(D^{EVORGk(U;_!&RrXZ(zx@iTtL&-j`COn;_7
z)1T?j^k@1r{h9tue-^J|e#X!E89(D^{EVORGk(U;_!&RrXZ(zx@w2!T=+E?L`ZN8R
z{!D+SKhvM-&-7>dGk(U;_!&RrXZ(zx@iTtL&-fWX<7fPgpYbz(ra#l4>Cg0M`ZN8R
z{!D+SKhvMZtC*khGk(U;_!&RrXZ(zx@iTtL&-fWX<7fOVE(Q8C{h9tuf2KdvpXtx^
zXZkb!nf{EQ@iTtL&-fWX<7fPgpYbz(#?SZ}KjUZojGyVx^k@1r{h9tuf2KdvpXtx^
zXYnfLXZ(zx@iTtL&-fWX<7fPgpYbz(#?SZ}KZ{F&{!D+SKhvM-&-7>dGyR$VOn;_7
z<7fPgpYbz(#?SZ}KjUZojGyr{e#X!E89(D^`ZN8R{!D+SKhvM-&-7>dGyPe-iuoBo
z<7fPgpYbz(#?SZ}KjUZojGyr{e#Xz@QlLN6pXtx^XZkb!nf^?Fra#l4>CgBXKjUZo
zjGyr{e#X!E89(D^{EVORGk(U;_?iApf2KdvpXtx^XZkb!nf^?F7O!G{#?SZ}KjUZo
zjGyr{e#X!E89(D^{EVORv$z!K&-7>dGyR$VOn;_7)1T?j^k@1re#X!E89(D^{EVOR
zGk(U;_!&RrXZ(zx@iTs=KhvM-&-7>dGyR$VOn;_7)1Sqwn4j@8e#X!E89(D^{EVOR
zGk(U;_!&RrXZ$QK1^P4nnf^?Fra#l4>Cg0M`ZN8R{*0gTGk(U;_!&RrXZ(zx@iTtL
z&-fWX<7fPgpXtx^XZkb!nf^?Fra#l4>Cg0M@hawL{EVORGk(U;_!&RrXZ(zx@iTtL
z&-fWXi%Wt2On;_7)1T?j^k@1r{h9tuf2Kd<XZ(zx@iTtL&-fWX<7fPgpYbz(#?SZ}
zKjUZmGyR$VOn;_7)1T?j^k@1r{aL(<`58asXZ(zx@iTtL&-fWX<7fPgpYbz(#?RtX
zpg+@}>Cg0M`ZN8R{!D+SKhvM-&-fWX<7fPgpYbz(#?SZ}KjUZojGyr{e#X!Enf^?F
zra#l4>Cg0M`ZN8R{!D)suVQ}2&-fWX<7fPgpYbz(#?SZ}KjUZojGytdxD@Em^k@1r
z{h9tuf2KdvpXtx^XZkaK#?SZ}KjUZojGyr{e#X!E89(D^{EVORGk&H&)1T?j^k@1r
z{h9tuf2KdvpT(<~pYbz(#?SZ}KjUZojGyr{e#X!E89(D^{46d7`ZN8R{!D+SKhvM-
z&-7>dGyR$VjGyr{e#X!E89(D^{EVORGk(U;_!&RrXZ(zx>Cg0M`ZN8R{!D+SKhvM-
z&-7>UD&}YWjGyr{e#X!E89(D^{EVORGk(U;_!&QoOM(7Of2KdvpXtx^XZkb!nf^?F
zra$9n{EVORGk(U;_!&RrXZ(zx@iTtL&-fWX<7fIa{h9tuf2KdvpXtx^XZkb!S-gt*
z89(D^{EVORGk(U;_!&RrXZ(zx@iTtL&*D;`KhvM-&-7>dGyR$VOn;_7)1T?j_!&Rr
zXZ(zx@iTtL&-fWX<7fPgpYbz(#?Sbf{!D+SKhvM-&-7>dGyR$VOn(-yVt&TY_!&Rr
zXZ(zx@iTtL&-fWX<7fPgpYgM}6zI?NXZkb!nf^?Fra#l4>Cg0M`ZIpU&-fWX<7fPg
zpYbz(#?SZ}KjUZojGyr{ex^UupXtx^XZkb!nf^?Fra#l4#jBW~@iTtL&-fWX<7fPg
zpYbz(#?SZ}KjUZoEG`B5GyR$VOn;_7)1T?j^k@1r{h9uZpYbz(#?SZ}KjUZojGyr{
ze#X!E89(D^{EVOJ&-7>dGyR$VOn;_7)1T?j^k?xZ=4bqjpYbz(#?SZ}KjUZojGyr{
ze#X!E89$3lf&NT?ra#l4>Cg0M`ZN8R{!D+SKjUZojGyr{e#X!E89(D^{EVORGk(U;
z_!&RrXZkb!nf^?Fra#l4>Cg0M`ZN7myo&i5KjUZojGyr{e#X!E89(D^{EVORGk(U;
z;!>bL)1T?j^k@1r{h9tuf2KdvpXtx|89(D^{EVORGk(U;_!&RrXZ(zx@iTtL&-j`C
zOn;_7)1T?j^k@1r{h9tue-^J|e#X!E89(D^{EVORGk(U;_!&RrXZ(zx@w2!T=+E?L
z`ZN8R{!D+SKhvM-&-7>dGk(U;_!&RrXZ(zx@iTtL&-fWX<7fPgpYbz(ra#l4>Cg0M
z`ZN8R{!D+SKhvMZtC*khGk(U;_!&RrXZ(zx@iTtL&-fWX<7fOVE(Q8C{h9tuf2Kdv
zpXtx^XZkb!nf{EQ@iTtL&-fWX<7fPgpYbz(#?SZ}KjUZojGyVx^k@1r{h9tuf2Kdv
zpXtx^XYnfLXZ(zx@iTtL&-fWX<7fPgpYbz(#?SZ}KZ{F&{!D+SKhvM-&-7>dGyR$V
zOn;_7<7fPgpYbz(#?SZ}KjUZojGyr{e#X!E89(D^`ZN8R{!D+SKhvM-&-7>dGyPe-
ziuoBo<7fPgpYbz(#?SZ}KjUZojGyr{e#Xz@QlLN6pXtx^XZkb!nf^?Fra#l4>CgBX
zKjUZojGyr{e#X!E89(D^{EVORGk(U;_?iApf2KdvpXtx^XZkb!nf^?F7O!G{#?SZ}
zKjUZojGyr{e#X!E89(D^{EVORv$z!K&-7>dGyR$VOn;_7)1T?j^k@1re#X!E89(D^
z{EVORGk(U;_!&RrXZ(zx@iTs=KhvM-&-7>dGyR$VOn;_7)1Sqwn4j@8e#X!E89(D^
z{EVORGk(U;_!&RrXZ$QK1^P4nnf^?Fra#l4>Cg0M`ZN8R{*0gTGk(U;_!&RrXZ(zx
z@iTtL&-fWX<7fPgpXtx^XZkb!nf^?Fra#l4>Cg0M@hawL{EVORGk(U;_!&RrXZ(zx
z@iTtL&-fWXi%Wt2On;_7)1T?j^k@1r{h9tuf2Kd<XZ(zx@iTtL&-fWX<7fPgpYbz(
z#?SZ}KjUZmGyR$VOn;_7)1T?j^k@1r{aL(<`58asXZ(zx@iTtL&-fWX<7fPgpYbz(
z#?RtXpg+@}>Cg0M`ZN8R{!D+SKhvM-&-fWX<7fPgpYbz(#?SZ}KjUZojGyr{e#X!E
znf^?Fra#l4>Cg0M`ZN8R{!D)suVQ}2&-fWX<7fPgpYbz(#?SZ}KjUZojGytdxD@Em
z^k@1r{h9tuf2KdvpXtx^XZkaK#?SZ}KjUZojGyr{e#X!E89(D^{EVORGk&H&)1T?j
z^k@1r{h9tuf2KdvpT(<~pYbz(#?SZ}KjUZojGyr{e#X!E89(D^{46d7`ZN8R{!D+S
zKhvM-&-7>dGyR$VjGyr{e#X!E89(D^{EVORGk(U;_!&RrXZ(zx>Cg0M`ZN8R{!D+S
zKhvM-&-7>UD&}YWjGyr{e#X!E89(D^{EVORGk(U;_!&QoOM(7Of2KdvpXtx^XZkb!
znf^?Fra$9n{EVORGk(U;_!&RrXZ(zx@iTtL&-fWX<7fIa{h9tuf2KdvpXtx^XZkb!
zS-gt*89(D^{EVORGk(U;_!&RrXZ(zx@iTtL&*D;`KhvM-&-7>dGyR$VOn;_7)1T?j
z_!&RrXZ(zx@iTtL&-fWX<7fPgpYbz(#?Sbf{!D+SKhvM-&-7>dGyR$VOn(-yVt&TY
z_!&RrXZ(zx@iTtL&-fWX<7fPgpYgM}6zI?NXZkb!nf^?Fra#l4>Cg0M`ZIpU&-fWX
z<7fPgpYbz(#?SZ}KjUZojGyr{ex^UupXtx^XZkb!nf^?Fra#l4#jBW~@iTtL&-fWX
z<7fPgpYbz(#?SZ}KjUZoEG`B5GyR$VOn;_7)1T?j^k@1r{h9uZpYbz(#?SZ}KjUZo
zjGyr{e#X!E89(D^{EVOJ&-7>dGyR$VOn;_7)1T?j^k?xZ=4bqjpYbz(#?SZ}KjUZo
zjGyr{e#X!E89$3lf&NT?ra#l4>Cg0M`ZN8R{!D+SKjUZojGyr{e#X!E89(D^{EVOR
zGk(U;_!&RrXZkb!nf^?Fra#l4>Cg0M`ZN7myo&i5KjUZojGyr{e#X!E89(D^{EVOR
zGk(U;;!>bL)1T?j^k@1r{h9tuf2KdvpXtx|89(D^{EVORGk(U;_!&RrXZ(zx@iTtL
z&-j`COn;_7)1T?j^k@1r{h9tue-^J|e#X!E89(D^{EVORGk(U;_!&RrXZ(zx@w2!T
z=+E?L`ZN8R{!D+SKhvM-&-7>dGk(U;_!&RrXZ(zx@iTtL&-fWX<7fPgpYbz(ra#l4
z>Cg0M`ZN8R{!D+SKhvMZtC*khGk(U;_!&RrXZ(zx@iTtL&-fWX<7fOVE(Q8C{h9tu
zf2KdvpXtx^XZkb!nf{EQ@iTtL&-fWX<7fPgpYbz(#?SZ}KjUZojGyVx^k@1r{h9tu
zf2KdvpXtx^XYnfLXZ(zx@iTtL&-fWX<7fPgpYbz(#?SZ}KZ{F&{!D+SKhvM-&-7>d
zGyR$VOn;_7<7fPgpYbz(#?SZ}KjUZojGyr{e#X!E89(D^`ZN8R{!D+SKhvM-&-7>d
zGyPe-iuoBo<7fPgpYbz(#?SZ}KjUZojGyr{e#Xz@QlLN6pXtx^XZkb!nf^?Fra#l4
z>CgBXKjUZojGyr{e#X!E89(D^{EVORGk(U;_?iApf2KdvpXtx^XZkb!nf^?F7O!G{
z#?SZ}KjUZojGyr{e#X!E89(D^{EVORv$z!K&-7>dGyR$VOn;_7)1T?j^k@1re#X!E
z89(D^{EVORGk(U;_!&RrXZ(zx@iTs=KhvM-&-7>dGyR$VOn;_7)1Sqwn4j@8e#X!E
z89(D^{EVORGk(U;_!&RrXZ$QK1^P4nnf^?Fra#l4>Cg0M`ZN8R{*0gTGk(U;_!&Rr
zXZ(zx@iTtL&-fWX<7fPgpXtx^XZkb!nf^?Fra#l4>Cg0M@hawL{EVORGk(U;_!&Rr
zXZ(zx@iTtL&-fWXi%Wt2On;_7)1T?j^k@1r{h9tuf2Kd<XZ(zx@iTtL&-fWX<7fPg
zpYbz(#?SZ}KjUZmGyR$VOn;_7)1T?j^k@1r{aL(<`58asXZ(zx@iTtL&-fWX<7fPg
zpYbz(#?RtXpg+@}>Cg0M`ZN8R{!D+SKhvM-&-fWX<7fPgpYbz(#?SZ}KjUZojGyr{
ze#X!Enf^?Fra#l4>Cg0M`ZN8R{!D)suVQ}2&-fWX<7fPgpYbz(#?SZ}KjUZojGytd
zxD@Em^k@1r{h9tuf2KdvpXtx^XZkaK#?SZ}KjUZojGyr{e#X!E89(D^{EVORGk&H&
z)1T?j^k@1r{h9tuf2KdvpT(<~pYbz(#?SZ}KjUZojGyr{e#X!E89(D^{46d7`ZN8R
z{!D+SKhvM-&-7>dGyR$VjGyr{e#X!E89(D^{EVORGk(U;_!&RrXZ(zx>Cg0M`ZN8R
z{!D+SKhvM-&-7>UD&}YWjGyr{e#X!E89(D^{EVORGk(U;_!&QoOM(7Of2KdvpXtx^
zXZkb!nf^?Fra$9n{EVORGk(U;_!&RrXZ(zx@iTtL&-fWX<7fIa{h9tuf2KdvpXtx^
zXZkb!S-gt*89(D^{EVORGk(U;_!&RrXZ(zx@iTtL&*D;`KhvM-&-7>dGyR$VOn;_7
z)1T?j_!&RrXZ(zx@iTtL&-fWX<7fPgpYbz(#?Sbf{!D+SKhvM-&-7>dGyR$VOn(-y
zVt&TY_!&RrXZ(zx@iTtL&-fWX<7fPgpYgM}6zI?NXZkb!nf^?Fra#l4>Cg0M`ZIpU
z&-fWX<7fPgpYbz(#?SZ}KjUZojGyr{ex^UupXtx^XZkb!nf^?Fra#l4#jBW~@iTtL
z&-fWX<7fPgpYbz(#?SZ}KjUZoEG`B5GyR$VOn;_7)1T?j^k@1r{h9uZpYbz(#?SZ}
zKjUZojGyr{e#X!E89(D^{EVOJ&-7>dGyR$VOn;_7)1T?j^k?xZ=4bqjpYbz(#?SZ}
zKjUZojGyr{e#X!E89$3lf&NT?ra#l4>Cg0M`ZN8R{!D+SKjUZojGyr{e#X!E89(D^
z{EVORGk(U;_!&RrXZkb!nf^?Fra#l4>Cg0M`ZN7myo&i5KjUZojGyr{e#X!E89(D^
z{EVORGk(U;;!>bL)1T?j^k@1r{h9tuf2KdvpXtx|89(D^{EVORGk(U;_!&RrXZ(zx
z@iTtL&-j`COn;_7)1T?j^k@1r{h9tue-^J|e#X!E89(D^{EVORGk(U;_!&RrXZ(zx
z@w2!T=+E?L`ZN8R{!D+SKhvM-&-7>dGk(U;_!&RrXZ(zx@iTtL&-fWX<7fPgpYbz(
zra#l4>Cg0M`ZN8R{!D+SKhvMZtC*khGk(U;_!&RrXZ(zx@iTtL&-fWX<7fOVE(Q8C
z{h9tuf2KdvpXtx^XZkb!nf{EQ@iTtL&-fWX<7fPgpYbz(#?SZ}KjUZojGyVx^k@1r
z{h9tuf2KdvpXtx^XYnfLXZ(zx@iTtL&-fWX<7fPgpYbz(#?SZ}KZ{F&{!D+SKhvM-
z&-7>dGyR$VOn;_7<7fPgpYbz(#?SZ}KjUZojGyr{e#X!E89(D^`ZN8R{!D+SKhvM-
z&-7>dGyPe-iuoBo<7fPgpYbz(#?SZ}KjUZojGyr{e#Xz@QlLN6pXtx^XZkb!nf^?F
zra#l4>CgBXKjUZojGyr{e#X!E89(D^{EVORGk(U;_?iApf2KdvpXtx^XZkb!nf^?F
z7O!G{#?SZ}KjUZojGyr{e#X!E89(D^{EVORv$z!K&-7>dGyR$VOn;_7)1T?j^k@1r
ze#X!E89(D^{EVORGk(U;_!&RrXZ(zx@iTs=KhvM-&-7>dGyR$VOn;_7)1Sqwn4j@8
ze#X!E89(D^{EVORGk(U;_!&RrXZ$QK1^P4nnf^?Fra#l4>Cg0M`ZN8R{*0gTGk(U;
z_!&RrXZ(zx@iTtL&-fWX<7fPgpXtx^XZkb!nf^?Fra#l4>Cg0M@hawL{EVORGk(U;
z_!&RrXZ(zx@iTtL&-fWXi%Wt2On;_7)1T?j^k@1r{h9tuf2Kd<XZ(zx@iTtL&-fWX
z<7fPgpYbz(#?SZ}KjUZmGyR$VOn;_7)1T?j^k@1r{aL(<`58asXZ(zx@iTtL&-fWX
z<7fPgpYbz(#?RtXpg+@}>Cg0M`ZN8R{!D+SKhvM-&-fWX<7fPgpYbz(#?SZ}KjUZo
zjGyr{e#X!Enf^?Fra#l4>Cg0M`ZN8R{!D)suVQ}2&-fWX<7fPgpYbz(#?SZ}KjUZo
zjGytdxD@Em^k@1r{h9tuf2KdvpXtx^XZkaK#?SZ}KjUZojGyr{e#X!E89(D^{EVOR
zGk&H&)1T?j^k@1r{h9tuf2KdvpT(<~pYbz(#?SZ}KjUZojGyr{e#X!E89(D^{46d7
z`ZN8R{!D+SKhvM-&-7>dGyR$VjGyr{e#X!E89(D^{EVORGk(U;_!&RrXZ(zx>Cg0M
z`ZN8R{!D+SKhvM-&-7>UD&}YWjGyr{e#X!E89(D^{EVORGk(U;_!&QoOM(7Of2Kdv
zpXtx^XZkb!nf^?Fra$9n{EVORGk(U;_!&RrXZ(zx@iTtL&-fWX<7fIa{h9tuf2Kdv
zpXtx^XZkb!S-gt*89(D^{EVORGk(U;_!&RrXZ(zx@iTtL&*D;`KhvM-&-7>dGyR$V
zOn;_7)1T?j_!&RrXZ(zx@iTtL&-fWX<7fPgpYbz(#?Sbf{!D+SKhvM-&-7>dGyR$V
zOn(-yVt&TY_!&RrXZ(zx@iTtL&-fWX<7fPgpYgM}6zI?NXZkb!nf^?Fra#l4>Cg0M
z`ZIpU&-fWX<7fPgpYbz(#?SZ}KjUZojGyr{ex^UupXtx^XZkb!nf^?Fra#l4#jBW~
z@iTtL&-fWX<7fPgpYbz(#?SZ}KjUZoEG`B5GyR$VOn;_7)1T?j^k@1r{h9uZpYbz(
h#?SZ}KjUZojGyr{e#X!E89(D^{OteG&$6?!{s|Pkd?^3`

diff --git a/embed/templates/challenge-anubis.gohtml b/embed/templates/challenge-anubis.gohtml
index 63e6ec2..cb82718 100644
--- a/embed/templates/challenge-anubis.gohtml
+++ b/embed/templates/challenge-anubis.gohtml
@@ -11,7 +11,7 @@
         <meta name="{{ $key }}" content="{{ $value }}"/>
         {{end}}
     {{ end }}
-    {{ range .Tags }}
+    {{ range .HeaderTags }}
         {{ . }}
     {{ end }}
     <style>
@@ -155,7 +155,6 @@
         />
         {{if .Challenge }}
         <p id="status">Loading challenge <em>{{ .Challenge }}</em>...</p>
-        <script async type="module" src="{{ .Path }}/challenge/{{ .Challenge }}/challenge.mjs?cacheBust={{ .Random }}"></script>
         {{else if .Error}}
         <p id="status">Error: {{ .Error }}</p>
         {{else}}
@@ -202,6 +201,11 @@
             </p>
         </center>
     </footer>
+
+
+    {{ range .EndTags }}
+        {{ . }}
+    {{ end }}
 </main>
 </body>
 </html>
\ No newline at end of file
diff --git a/embed/templates/challenge-forgejo.gohtml b/embed/templates/challenge-forgejo.gohtml
index a483cd7..4b587f3 100644
--- a/embed/templates/challenge-forgejo.gohtml
+++ b/embed/templates/challenge-forgejo.gohtml
@@ -17,7 +17,7 @@
             <meta name="{{ $key }}" content="{{ $value }}"/>
         {{end}}
     {{ end }}
-    {{ range .Tags }}
+    {{ range .HeaderTags }}
         {{ . }}
     {{ end }}
 
@@ -62,7 +62,6 @@
 
                     {{if .Challenge }}
                     <h3 id="status">Loading challenge <em>{{ .Challenge }}</em>...</h3>
-                    <script async type="module" src="{{ .Path }}/challenge/{{ .Challenge }}/challenge.mjs?cacheBust={{ .Random }}"></script>
                     {{else if .Error}}
                     <h3 id="status">Error: {{ .Error }}</h3>
                     {{else}}
@@ -110,5 +109,9 @@
     </div>
 </footer>
 
+{{ range .EndTags }}
+    {{ . }}
+{{ end }}
+
 </body>
 </html>
diff --git a/examples/forgejo.yml b/examples/forgejo.yml
index 3cc2808..0c78257 100644
--- a/examples/forgejo.yml
+++ b/examples/forgejo.yml
@@ -19,42 +19,42 @@ networks:
     # AS21859
     - url: https://raw.githubusercontent.com/ipverse/asn-ip/refs/heads/master/as/21859/aggregated.json
       jq-path: '.subnets.ipv4[], .subnets.ipv6[]'
-  aws-cloud:
-    - url: https://ip-ranges.amazonaws.com/ip-ranges.json
-      jq-path: '(.prefixes[] | select(has("ip_prefix")) | .ip_prefix), (.prefixes[] | select(has("ipv6_prefix")) | .ipv6_prefix)'
-  google-cloud:
-    - url: https://www.gstatic.com/ipranges/cloud.json
-      jq-path: '(.prefixes[] | select(has("ipv4Prefix")) | .ipv4Prefix), (.prefixes[] | select(has("ipv6Prefix")) | .ipv6Prefix)'
-  oracle-cloud:
-    - url: https://docs.oracle.com/en-us/iaas/tools/public_ip_ranges.json
-      jq-path: '.regions[] | .cidrs[] | .cidr'
-  azure-cloud:
-    # todo: https://www.microsoft.com/en-us/download/details.aspx?id=56519 does not provide direct JSON
-    - url: https://raw.githubusercontent.com/femueller/cloud-ip-ranges/refs/heads/master/microsoft-azure-ip-ranges.json
-      jq-path: '.values[] | .properties.addressPrefixes[]'
-
-  digitalocean:
-    - url: https://www.digitalocean.com/geo/google.csv
-      regex: "(?P<prefix>(([0-9]+\\.[0-9]+\\.[0-9]+\\.[0-9]+)|([0-9a-f:]+::))/[0-9]+),"
-  linode:
-    - url: https://geoip.linode.com/
-      regex: "(?P<prefix>(([0-9]+\\.[0-9]+\\.[0-9]+\\.[0-9]+)|([0-9a-f:]+::))/[0-9]+),"
-  vultr:
-    - url: "https://geofeed.constant.com/?json"
-      jq-path: '.subnets[] | .ip_prefix'
-  cloudflare:
-    - url: https://www.cloudflare.com/ips-v4
-      regex: "(?P<prefix>[0-9]+\\.[0-9]+\\.[0-9]+\\.[0-9]+/[0-9]+)"
-    - url: https://www.cloudflare.com/ips-v6
-      regex: "(?P<prefix>[0-9a-f:]+::/[0-9]+)"
-
-  icloud-private-relay:
-    - url: https://mask-api.icloud.com/egress-ip-ranges.csv
-      regex: "(?P<prefix>(([0-9]+\\.[0-9]+\\.[0-9]+\\.[0-9]+)|([0-9a-f:]+::))/[0-9]+),"
-  tunnelbroker-relay:
-    # HE Tunnelbroker
-    - url: https://tunnelbroker.net/export/google
-      regex: "(?P<prefix>([0-9a-f:]+::)/[0-9]+),"
+#  aws-cloud:
+#    - url: https://ip-ranges.amazonaws.com/ip-ranges.json
+#      jq-path: '(.prefixes[] | select(has("ip_prefix")) | .ip_prefix), (.prefixes[] | select(has("ipv6_prefix")) | .ipv6_prefix)'
+#  google-cloud:
+#    - url: https://www.gstatic.com/ipranges/cloud.json
+#      jq-path: '(.prefixes[] | select(has("ipv4Prefix")) | .ipv4Prefix), (.prefixes[] | select(has("ipv6Prefix")) | .ipv6Prefix)'
+#  oracle-cloud:
+#    - url: https://docs.oracle.com/en-us/iaas/tools/public_ip_ranges.json
+#      jq-path: '.regions[] | .cidrs[] | .cidr'
+#  azure-cloud:
+#    # todo: https://www.microsoft.com/en-us/download/details.aspx?id=56519 does not provide direct JSON
+#    - url: https://raw.githubusercontent.com/femueller/cloud-ip-ranges/refs/heads/master/microsoft-azure-ip-ranges.json
+#      jq-path: '.values[] | .properties.addressPrefixes[]'
+#
+#  digitalocean:
+#    - url: https://www.digitalocean.com/geo/google.csv
+#      regex: "(?P<prefix>(([0-9]+\\.[0-9]+\\.[0-9]+\\.[0-9]+)|([0-9a-f:]+::))/[0-9]+),"
+#  linode:
+#    - url: https://geoip.linode.com/
+#      regex: "(?P<prefix>(([0-9]+\\.[0-9]+\\.[0-9]+\\.[0-9]+)|([0-9a-f:]+::))/[0-9]+),"
+#  vultr:
+#    - url: "https://geofeed.constant.com/?json"
+#      jq-path: '.subnets[] | .ip_prefix'
+#  cloudflare:
+#    - url: https://www.cloudflare.com/ips-v4
+#      regex: "(?P<prefix>[0-9]+\\.[0-9]+\\.[0-9]+\\.[0-9]+/[0-9]+)"
+#    - url: https://www.cloudflare.com/ips-v6
+#      regex: "(?P<prefix>[0-9a-f:]+::/[0-9]+)"
+#
+#  icloud-private-relay:
+#    - url: https://mask-api.icloud.com/egress-ip-ranges.csv
+#      regex: "(?P<prefix>(([0-9]+\\.[0-9]+\\.[0-9]+\\.[0-9]+)|([0-9a-f:]+::))/[0-9]+),"
+#  tunnelbroker-relay:
+#    # HE Tunnelbroker
+#    - url: https://tunnelbroker.net/export/google
+#      regex: "(?P<prefix>([0-9a-f:]+::)/[0-9]+),"
 
 
   googlebot:
@@ -95,77 +95,65 @@ networks:
 
 challenges:
   js-pow-sha256:
-    # Asset must be under challenges/{name}/static/{asset}
-    # Other files here will be available under that path
-    mode: js
-    asset: load.mjs
+    runtime: js
     parameters:
-      difficulty: 20
-    runtime:
-      mode: wasm
-      # Verify must be under challenges/{name}/runtime/{asset}
-      asset: runtime.wasm
-      probability: 0.02
+      # specifies the folder path that assets are under
+      # can be either embedded or external path
+      # defaults to name of challenge
+      path: "js-pow-sha256"
+      # needs to be under static folder
+      js-loader: load.mjs
+      # needs to be under runtime folder
+      wasm-runtime: runtime.wasm
+      wasm-runtime-settings:
+        difficulty: 20
+      verify-probability: 0.02
 
   # Challenges with a cookie, self redirect (non-JS, requires HTTP parsing)
   self-cookie:
-    mode: "cookie"
-
+    runtime: "cookie"
 
   # Challenges with a redirect via Link header with rel=preload and early hints (non-JS, requires HTTP parsing, fetching and logic)
   # Works on HTTP/2 and above!
   self-preload-link:
     condition: '"Sec-Fetch-Mode" in headers && headers["Sec-Fetch-Mode"] == "navigate"'
-    mode: "preload-link"
-    runtime:
-      # verifies that result = key
-      mode: "key"
-      probability: 0.1
+    runtime: "preload-link"
     parameters:
       preload-early-hint-deadline: 3s
-      key-code: 200
-      key-mime: text/css
-      key-content: ""
 
   # Challenges with a redirect via Refresh header (non-JS, requires HTTP parsing and logic)
   self-header-refresh:
-    mode: "header-refresh"
-    runtime:
-      # verifies that result = key
-      mode: "key"
-      probability: 0.1
+    runtime: "refresh"
+    parameters:
+      refresh-via: "header"
 
   # Challenges with a redirect via Refresh meta (non-JS, requires HTML parsing and logic)
   self-meta-refresh:
-    mode: "meta-refresh"
-    runtime:
-      # verifies that result = key
-      mode: "key"
-      probability: 0.1
+    runtime: "refresh"
+    parameters:
+      refresh-via: "meta"
 
   # Challenges with loading a random CSS or image document (non-JS, requires HTML parsing and logic)
   self-resource-load:
-    mode: "resource-load"
-    runtime:
-      # verifies that result = key
-      mode: "key"
-      probability: 0.1
-    parameters:
-      key-code: 200
-      key-mime: text/css
-      key-content: ""
-
+    runtime: "resource-load"
 
   # Verifies the existence of a cookie and confirms it against some backend request, passing the entire client cookie contents
   http-cookie-check:
-    mode: http
-    url: http://forgejo:3000/user/stopwatches
-    # url: http://forgejo:3000/repo/search
-    # url: http://forgejo:3000/notifications/new
+    runtime: http
     parameters:
+      http-url: http://forgejo:3000/user/stopwatches
+      # http-url: http://forgejo:3000/repo/search
+      # http-url: http://forgejo:3000/notifications/new
       http-method: GET
       http-cookie: i_like_gitea
       http-code: 200
+      verify-probability: 0.1
+
+  dnsbl:
+    runtime: dnsbl
+    parameters:
+      dnsbl-decay: 1h
+      dnsbl-timeout: 1s
 
 conditions:
   # Conditions will get replaced on rules AST when found as ($condition-name)
@@ -228,7 +216,7 @@ conditions:
 
   is-suspicious-crawler:
     # TLS Fingerprint for specific agent without ALPN
-    - '(userAgent.startsWith("Mozilla/") || userAgent.startsWith("Opera/")) && fpJA4.matches("^t[0-9a-z]+00_")'
+    - '(userAgent.startsWith("Mozilla/") || userAgent.startsWith("Opera/")) && ("ja4" in fp && fp.ja4.matches("^t[0-9a-z]+00_"))'
     # Old engines
     - 'userAgent.contains("Presto/") || userAgent.contains("Trident/")'
     # Old IE browsers
@@ -243,6 +231,7 @@ conditions:
     - 'userAgent.startsWith("Opera/")'
     #- 'userAgent.matches("Gecko/(201[0-9]|200[0-9])")'
     - 'userAgent.matches("^Mozilla/[1-4]")'
+
   is-heavy-resource:
     - 'path.startsWith("/explore/")'
     - 'path.matches("^/[^/]+/[^/]+/src/commit/")'
@@ -271,8 +260,8 @@ rules:
 
   - name: undesired-networks
     conditions:
-      - 'inNetwork("huawei-cloud", remoteAddress) || inNetwork("alibaba-cloud", remoteAddress) || inNetwork("zenlayer-inc", remoteAddress)'
-    action: poison
+      - 'remoteAddress.network("huawei-cloud") || remoteAddress.network("alibaba-cloud") || remoteAddress.network("zenlayer-inc")'
+    action: drop
 
   - name: undesired-crawlers
     conditions:
@@ -296,7 +285,7 @@ rules:
       - 'userAgent.contains("Amazonbot") || userAgent.contains("Google-Extended") || userAgent.contains("PanguBot") || userAgent.contains("AI2Bot") || userAgent.contains("Diffbot") || userAgent.contains("cohere-training-data-crawler") || userAgent.contains("Applebot-Extended")'
       # SEO / Ads and marketing
       - 'userAgent.contains("BLEXBot")'
-    action: poison
+    action: drop
 
   - name: unknown-crawlers
     conditions:
@@ -305,22 +294,22 @@ rules:
     action: deny
 
   # check a sequence of challenges for non logged in
-  - name: suspicious-crawlers/0
+  - name: suspicious-crawlers
     conditions: ['($is-suspicious-crawler)']
-    action: check
-    challenges: [js-pow-sha256, http-cookie-check]
-  - name: suspicious-crawlers/1
-    conditions: ['($is-suspicious-crawler)']
-    action: check
-    challenges: [self-preload-link]
-  - name: suspicious-crawlers/2
-    conditions: ['($is-suspicious-crawler)']
-    action: check
-    challenges: [self-header-refresh]
-  - name: suspicious-crawlers/3
-    conditions: ['($is-suspicious-crawler)']
-    action: check
-    challenges: [self-resource-load]
+    action: none
+    children:
+      - name: 0
+        action: check
+        settings:
+          challenges: [js-pow-sha256, http-cookie-check]
+      - name: 1
+        action: check
+        settings:
+          challenges: [self-preload-link, self-resource-load]
+      - name: 2
+        action: check
+        settings:
+          challenges: [self-header-refresh]
 
   - name: always-pow-challenge
     conditions:
@@ -337,7 +326,8 @@ rules:
       # Match archive downloads from browsers and not tools
       - 'path.matches("^/[^/]+/[^/]+/archive/.*\\.(bundle|zip|tar\\.gz)") && ($is-generic-browser)'
     action: challenge
-    challenges: [ js-pow-sha256 ]
+    settings:
+      challenges: [ js-pow-sha256 ]
 
   - name: allow-git-operations
     conditions:
@@ -398,27 +388,34 @@ rules:
 
   - name: desired-crawlers
     conditions:
-      - 'userAgent.contains("+https://kagi.com/bot") && inNetwork("kagibot", remoteAddress)'
-      - '(userAgent.contains("+http://www.google.com/bot.html") || userAgent.contains("Google-PageRenderer") || userAgent.contains("Google-InspectionTool") || userAgent.contains("Googlebot")) && inNetwork("googlebot", remoteAddress)'
-      - 'userAgent.contains("+http://www.bing.com/bingbot.htm") && inNetwork("bingbot", remoteAddress)'
-      - 'userAgent.contains("+http://duckduckgo.com/duckduckbot.html") && inNetwork("duckduckbot", remoteAddress)'
-      - 'userAgent.contains("+https://help.qwant.com/bot/") && inNetwork("qwantbot", remoteAddress)'
-      - 'userAgent.contains("+http://yandex.com/bots") && inNetwork("yandexbot", remoteAddress)'
+      - 'userAgent.contains("+https://kagi.com/bot") && remoteAddress.network("kagibot")'
+      - '(userAgent.contains("+http://www.google.com/bot.html") || userAgent.contains("Google-PageRenderer") || userAgent.contains("Google-InspectionTool") || userAgent.contains("Googlebot")) && remoteAddress.network("googlebot")'
+      - 'userAgent.contains("+http://www.bing.com/bingbot.htm") && remoteAddress.network("bingbot")'
+      - 'userAgent.contains("+http://duckduckgo.com/duckduckbot.html") && remoteAddress.network("duckduckbot")'
+      - 'userAgent.contains("+https://help.qwant.com/bot/") && remoteAddress.network("qwantbot")'
+      - 'userAgent.contains("+http://yandex.com/bots") && remoteAddress.network("yandexbot")'
     action: pass
 
   # check a sequence of challenges
-  - name: heavy-operations/0
-    action: check
-    challenges: [self-preload-link, self-header-refresh, js-pow-sha256, http-cookie-check]
-    conditions: ['($is-heavy-resource)']
-  - name: heavy-operations/1
-    action: check
-    challenges: [self-resource-load, js-pow-sha256, http-cookie-check]
+  - name: heavy-operations
     conditions: ['($is-heavy-resource)']
+    action: none
+    children:
+      - name: 0
+        action: check
+        settings:
+          challenges: [self-preload-link, self-header-refresh, js-pow-sha256, http-cookie-check]
+      - name: 1
+        action: check
+        settings:
+          challenges: [ self-resource-load, js-pow-sha256, http-cookie-check ]
+    settings:
+      challenges: [self-preload-link, self-header-refresh, js-pow-sha256, http-cookie-check]
 
   - name: standard-bots
     action: check
-    challenges: [self-meta-refresh, self-resource-load]
+    settings:
+      challenges: [self-meta-refresh, self-resource-load]
     conditions:
       - '($is-generic-robot-ua)'
 
@@ -433,15 +430,20 @@ rules:
     action: pass
 
   # check DNSBL and serve harder challenges
+  # todo: make this specific to score
   - name: undesired-dnsbl
-    conditions:
-      - 'inDNSBL(remoteAddress)'
     action: check
-    challenges: [js-pow-sha256, http-cookie-check]
+    settings:
+      challenges: [dnsbl]
+      # if DNSBL fails, check additional challenges
+      fail: check
+      fail-settings:
+        challenges: [js-pow-sha256, http-cookie-check]
 
   - name: suspicious-fetchers
     action: check
-    challenges: [js-pow-sha256]
+    settings:
+      challenges: [js-pow-sha256]
     conditions:
       - 'userAgent.contains("facebookexternalhit/") || userAgent.contains("facebookcatalog/")'
 
@@ -453,19 +455,22 @@ rules:
 
   - name: plaintext-browser
     action: challenge
-    challenges: [http-cookie-check, self-meta-refresh, self-cookie]
+    settings:
+      challenges: [http-cookie-check, self-meta-refresh, self-cookie]
     conditions:
       - 'userAgent.startsWith("Lynx/")'
 
   - name: standard-tools
     action: challenge
-    challenges: [self-cookie]
+    settings:
+      challenges: [self-cookie]
     conditions:
       - '($is-tool-ua)'
       - '!($is-generic-browser)'
 
   - name: standard-browser
     action: challenge
-    challenges: [http-cookie-check, self-preload-link, self-meta-refresh, self-resource-load, js-pow-sha256]
+    settings:
+      challenges: [http-cookie-check, self-preload-link, self-meta-refresh, self-resource-load, js-pow-sha256]
     conditions:
       - '($is-generic-browser)'
diff --git a/examples/generic.yml b/examples/generic.yml
index 94c3801..5523bab 100644
--- a/examples/generic.yml
+++ b/examples/generic.yml
@@ -44,65 +44,50 @@ networks:
 
 challenges:
   js-pow-sha256:
-    # Asset must be under challenges/{name}/static/{asset}
-    # Other files here will be available under that path
-    mode: js
-    asset: load.mjs
+    runtime: js
     parameters:
-      difficulty: 15
-    runtime:
-      mode: wasm
-      # Verify must be under challenges/{name}/runtime/{asset}
-      asset: runtime.wasm
-      probability: 0.02
+      # needs to be under static folder
+      js-loader: load.mjs
+      # needs to be under runtime folder
+      wasm-runtime: runtime.wasm
+      wasm-runtime-settings:
+        difficulty: 15
+      verify-probability: 0.02
 
   # Challenges with a cookie, self redirect (non-JS, requires HTTP parsing)
   self-cookie:
-    mode: "cookie"
+    runtime: "cookie"
 
 
   # Challenges with a redirect via Link header with rel=preload and early hints (non-JS, requires HTTP parsing, fetching and logic)
   # Works on HTTP/2 and above!
   self-preload-link:
     condition: '"Sec-Fetch-Mode" in headers && headers["Sec-Fetch-Mode"] == "navigate"'
-    mode: "preload-link"
-    runtime:
-      # verifies that result = key
-      mode: "key"
-      probability: 0.1
+    runtime: "preload-link"
     parameters:
       preload-early-hint-deadline: 3s
-      key-code: 200
-      key-mime: text/css
-      key-content: ""
 
   # Challenges with a redirect via Refresh header (non-JS, requires HTTP parsing and logic)
   self-header-refresh:
-    mode: "header-refresh"
-    runtime:
-      # verifies that result = key
-      mode: "key"
-      probability: 0.1
+    runtime: "refresh"
+    parameters:
+      refresh-via: "header"
 
   # Challenges with a redirect via Refresh meta (non-JS, requires HTML parsing and logic)
   self-meta-refresh:
-    mode: "meta-refresh"
-    runtime:
-      # verifies that result = key
-      mode: "key"
-      probability: 0.1
+    runtime: "refresh"
+    parameters:
+      refresh-via: "meta"
 
   # Challenges with loading a random CSS or image document (non-JS, requires HTML parsing and logic)
   self-resource-load:
-    mode: "resource-load"
-    runtime:
-      # verifies that result = key
-      mode: "key"
-      probability: 0.1
+    runtime: "resource-load"
+
+  dnsbl:
+    runtime: dnsbl
     parameters:
-      key-code: 200
-      key-mime: text/css
-      key-content: ""
+      dnsbl-decay: 1h
+      dnsbl-timeout: 1s
 
 conditions:
   # Conditions will get replaced on rules AST when found as ($condition-name)
@@ -198,7 +183,7 @@ rules:
       - 'userAgent.contains("Amazonbot") || userAgent.contains("Google-Extended") || userAgent.contains("PanguBot") || userAgent.contains("AI2Bot") || userAgent.contains("Diffbot") || userAgent.contains("cohere-training-data-crawler") || userAgent.contains("Applebot-Extended")'
       # SEO / Ads and marketing
       - 'userAgent.contains("BLEXBot")'
-    action: deny
+    action: drop
 
   - name: unknown-crawlers
     conditions:
@@ -207,31 +192,31 @@ rules:
     action: deny
 
   # check a sequence of challenges
-  - name: suspicious-crawlers/0
+  - name: suspicious-crawlers
     conditions: ['($is-suspicious-crawler)']
-    action: check
-    challenges: [js-pow-sha256]
-  - name: suspicious-crawlers/1
-    conditions: ['($is-suspicious-crawler)']
-    action: check
-    challenges: [self-preload-link]
-  - name: suspicious-crawlers/2
-    conditions: ['($is-suspicious-crawler)']
-    action: check
-    challenges: [self-header-refresh]
-  - name: suspicious-crawlers/3
-    conditions: ['($is-suspicious-crawler)']
-    action: check
-    challenges: [self-resource-load]
+    action: none
+    children:
+      - name: 0
+        action: check
+        settings:
+          challenges: [js-pow-sha256]
+      - name: 1
+        action: check
+        settings:
+          challenges: [self-preload-link, self-resource-load]
+      - name: 2
+        action: check
+        settings:
+          challenges: [self-header-refresh]
 
   - name: desired-crawlers
     conditions:
-      - 'userAgent.contains("+https://kagi.com/bot") && inNetwork("kagibot", remoteAddress)'
-      - '(userAgent.contains("+http://www.google.com/bot.html") || userAgent.contains("Google-InspectionTool") || userAgent.contains("Googlebot")) && inNetwork("googlebot", remoteAddress)'
-      - 'userAgent.contains("+http://www.bing.com/bingbot.htm") && inNetwork("bingbot", remoteAddress)'
-      - 'userAgent.contains("+http://duckduckgo.com/duckduckbot.html") && inNetwork("duckduckbot", remoteAddress)'
-      - 'userAgent.contains("+https://help.qwant.com/bot/") && inNetwork("qwantbot", remoteAddress)'
-      - 'userAgent.contains("+http://yandex.com/bots") && inNetwork("yandexbot", remoteAddress)'
+      - 'userAgent.contains("+https://kagi.com/bot") && remoteAddress.network("kagibot")'
+      - '(userAgent.contains("+http://www.google.com/bot.html") || userAgent.contains("Google-PageRenderer") || userAgent.contains("Google-InspectionTool") || userAgent.contains("Googlebot")) && remoteAddress.network("googlebot")'
+      - 'userAgent.contains("+http://www.bing.com/bingbot.htm") && remoteAddress.network("bingbot")'
+      - 'userAgent.contains("+http://duckduckgo.com/duckduckbot.html") && remoteAddress.network("duckduckbot")'
+      - 'userAgent.contains("+https://help.qwant.com/bot/") && remoteAddress.network("qwantbot")'
+      - 'userAgent.contains("+http://yandex.com/bots") && remoteAddress.network("yandexbot")'
     action: pass
 
   - name: homesite
@@ -240,15 +225,20 @@ rules:
     action: pass
 
   # check DNSBL and serve harder challenges
+  # todo: make this specific to score
   - name: undesired-dnsbl
-    conditions:
-      - 'inDNSBL(remoteAddress)'
     action: check
-    challenges: [js-pow-sha256]
+    settings:
+      challenges: [dnsbl]
+      # if DNSBL fails, check additional challenges
+      fail: check
+      fail-settings:
+        challenges: [js-pow-sha256]
 
   - name: suspicious-fetchers
     action: check
-    challenges: [js-pow-sha256]
+    settings:
+      challenges: [js-pow-sha256]
     conditions:
       - 'userAgent.contains("facebookexternalhit/") || userAgent.contains("facebookcatalog/")'
 
@@ -260,13 +250,15 @@ rules:
 
   - name: plaintext-browser
     action: challenge
-    challenges: [self-meta-refresh, self-cookie]
+    settings:
+      challenges: [self-meta-refresh, self-cookie]
     conditions:
       - 'userAgent.startsWith("Lynx/")'
 
   - name: standard-tools
     action: challenge
-    challenges: [self-cookie]
+    settings:
+      challenges: [self-cookie]
     conditions:
       - '($is-generic-robot-ua)'
       - '($is-tool-ua)'
@@ -274,6 +266,7 @@ rules:
 
   - name: standard-browser
     action: challenge
-    challenges: [self-preload-link, self-meta-refresh, self-resource-load, js-pow-sha256]
+    settings:
+      challenges: [self-preload-link, self-meta-refresh, self-resource-load, js-pow-sha256]
     conditions:
       - '($is-generic-browser)'
diff --git a/go.mod b/go.mod
index 09e24fe..a408d47 100644
--- a/go.mod
+++ b/go.mod
@@ -6,16 +6,15 @@ toolchain go1.24.2
 
 require (
 	codeberg.org/meta/gzipped/v2 v2.0.0-20231111234332-aa70c3194756
-	github.com/andybalholm/brotli v1.1.1
+	github.com/alphadose/haxmap v1.4.1
 	github.com/go-jose/go-jose/v4 v4.1.0
+	github.com/goccy/go-yaml v1.17.1
 	github.com/google/cel-go v0.24.1
 	github.com/itchyny/gojq v0.12.17
-	github.com/klauspost/compress v1.18.0
 	github.com/pires/go-proxyproto v0.8.0
 	github.com/tetratelabs/wazero v1.9.0
 	github.com/yl2chen/cidranger v1.0.2
 	golang.org/x/crypto v0.37.0
-	gopkg.in/yaml.v3 v3.0.1
 )
 
 require (
diff --git a/go.sum b/go.sum
index 3f15d63..f1c1884 100644
--- a/go.sum
+++ b/go.sum
@@ -2,8 +2,8 @@ cel.dev/expr v0.23.1 h1:K4KOtPCJQjVggkARsjG9RWXP6O4R73aHeJMa/dmCQQg=
 cel.dev/expr v0.23.1/go.mod h1:hLPLo1W4QUmuYdA72RBX06QTs6MXw941piREPl3Yfiw=
 codeberg.org/meta/gzipped/v2 v2.0.0-20231111234332-aa70c3194756 h1:bDqEUEYt4UJy8mfLCZeJuXx+xNJvdqTbkE4Ci11NQYU=
 codeberg.org/meta/gzipped/v2 v2.0.0-20231111234332-aa70c3194756/go.mod h1:aJ/ghJW7viYfwZ6OizDst+uJgbb6r/Hvoqhmi1OPTTw=
-github.com/andybalholm/brotli v1.1.1 h1:PR2pgnyFznKEugtsUo0xLdDop5SKXd5Qf5ysW+7XdTA=
-github.com/andybalholm/brotli v1.1.1/go.mod h1:05ib4cKhjx3OQYUY22hTVd34Bc8upXjOLL2rKwwZBoA=
+github.com/alphadose/haxmap v1.4.1 h1:VtD6VCxUkjNIfJk/aWdYFfOzrRddDFjmvmRmILg7x8Q=
+github.com/alphadose/haxmap v1.4.1/go.mod h1:rjHw1IAqbxm0S3U5tD16GoKsiAd8FWx5BJ2IYqXwgmM=
 github.com/antlr4-go/antlr/v4 v4.13.1 h1:SqQKkuVZ+zWkMMNkjy5FZe5mr5WURWnlpmOuzYWrPrQ=
 github.com/antlr4-go/antlr/v4 v4.13.1/go.mod h1:GKmUxMtwp6ZgGwZSva4eWPC5mS6vUAmOABFgjdkM7Nw=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
@@ -11,6 +11,8 @@ github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/go-jose/go-jose/v4 v4.1.0 h1:cYSYxd3pw5zd2FSXk2vGdn9igQU2PS8MuxrCOCl0FdY=
 github.com/go-jose/go-jose/v4 v4.1.0/go.mod h1:GG/vqmYm3Von2nYiB2vGTXzdoNKE5tix5tuc6iAd+sw=
+github.com/goccy/go-yaml v1.17.1 h1:LI34wktB2xEE3ONG/2Ar54+/HJVBriAGJ55PHls4YuY=
+github.com/goccy/go-yaml v1.17.1/go.mod h1:XBurs7gK8ATbW4ZPGKgcbrY1Br56PdM69F7LkFRi1kA=
 github.com/google/cel-go v0.24.1 h1:jsBCtxG8mM5wiUJDSGUqU0K7Mtr3w7Eyv00rw4DiZxI=
 github.com/google/cel-go v0.24.1/go.mod h1:Hdf9TqOaTNSFQA1ybQaRqATVoK7m/zcf7IMhGXP5zI8=
 github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
@@ -21,8 +23,6 @@ github.com/itchyny/timefmt-go v0.1.6 h1:ia3s54iciXDdzWzwaVKXZPbiXzxxnv1SPGFfM/my
 github.com/itchyny/timefmt-go v0.1.6/go.mod h1:RRDZYC5s9ErkjQvTvvU7keJjxUYzIISJGxm9/mAERQg=
 github.com/kevinpollet/nego v0.0.0-20211010160919-a65cd48cee43 h1:Pdirg1gwhEcGjMLyuSxGn9664p+P8J9SrfMgpFwrDyg=
 github.com/kevinpollet/nego v0.0.0-20211010160919-a65cd48cee43/go.mod h1:ahLMuLCUyDdXqtqGyuwGev7/PGtO7r7ocvdwDuEN/3E=
-github.com/klauspost/compress v1.18.0 h1:c/Cqfb0r+Yi+JtIEq73FWXVkRonBlf0CRNYc8Zttxdo=
-github.com/klauspost/compress v1.18.0/go.mod h1:2Pp+KzxcywXVXMr50+X0Q/Lsb43OQHYWRCY2AiWywWQ=
 github.com/pires/go-proxyproto v0.8.0 h1:5unRmEAPbHXHuLjDg01CxJWf91cw3lKHc/0xzKpXEe0=
 github.com/pires/go-proxyproto v0.8.0/go.mod h1:iknsfgnH8EkjrMeMyvfKByp9TiBZCKZM0jx2xmKqnVY=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
@@ -40,8 +40,6 @@ github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOf
 github.com/stretchr/testify v1.10.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
 github.com/tetratelabs/wazero v1.9.0 h1:IcZ56OuxrtaEz8UYNRHBrUa9bYeX9oVY93KspZZBf/I=
 github.com/tetratelabs/wazero v1.9.0/go.mod h1:TSbcXCfFP0L2FGkRPxHphadXPjo1T6W+CseNNY7EkjM=
-github.com/xyproto/randomstring v1.0.5 h1:YtlWPoRdgMu3NZtP45drfy1GKoojuR7hmRcnhZqKjWU=
-github.com/xyproto/randomstring v1.0.5/go.mod h1:rgmS5DeNXLivK7YprL0pY+lTuhNQW3iGxZ18UQApw/E=
 github.com/yl2chen/cidranger v1.0.2 h1:lbOWZVCG1tCRX4u24kuM1Tb4nHqWkDxwLdoS+SevawU=
 github.com/yl2chen/cidranger v1.0.2/go.mod h1:9U1yz7WPYDwf0vpNWFaeRh0bjwz5RVgRy/9UEQfHl0g=
 golang.org/x/crypto v0.37.0 h1:kJNSjF/Xp7kU0iB2Z+9viTPMW4EqqsrywMXLJOOsXSE=
@@ -58,7 +56,6 @@ google.golang.org/genproto/googleapis/rpc v0.0.0-20250414145226-207652e42e2e h1:
 google.golang.org/genproto/googleapis/rpc v0.0.0-20250414145226-207652e42e2e/go.mod h1:qQ0YXyHHx3XkvlzUtpXDkS29lDSafHMZBAZDc03LQ3A=
 google.golang.org/protobuf v1.36.6 h1:z1NpPI8ku2WgiWnf+t9wTPsn6eP1L7ksHUlkfLvd9xY=
 google.golang.org/protobuf v1.36.6/go.mod h1:jduwjTPXsFjZGTmRluh+L6NjiWu7pchiJ2/5YcXBHnY=
-gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
diff --git a/lib/action/backend.go b/lib/action/backend.go
new file mode 100644
index 0000000..680c272
--- /dev/null
+++ b/lib/action/backend.go
@@ -0,0 +1,80 @@
+package action
+
+import (
+	"fmt"
+	"git.gammaspectra.live/git/go-away/lib/challenge"
+	"git.gammaspectra.live/git/go-away/lib/policy"
+	"github.com/goccy/go-yaml"
+	"github.com/goccy/go-yaml/ast"
+	"log/slog"
+	"net/http"
+	"regexp"
+)
+
+func init() {
+	Register[policy.RuleActionPROXY] = func(state challenge.StateInterface, ruleName, ruleHash string, settings ast.Node) (Handler, error) {
+		params := ProxyDefaultSettings
+
+		if settings != nil {
+			ymlData, err := settings.MarshalYAML()
+			if err != nil {
+				return nil, err
+			}
+			err = yaml.Unmarshal(ymlData, &params)
+			if err != nil {
+				return nil, err
+			}
+		}
+
+		if params.Match != "" {
+			expr, err := regexp.Compile(params.Match)
+			if err != nil {
+				return nil, err
+			}
+
+			return Proxy{
+				Match:   expr,
+				Rewrite: params.Rewrite,
+				Backend: params.Backend,
+			}, nil
+		}
+
+		return Proxy{
+			Backend: params.Backend,
+		}, nil
+	}
+}
+
+var ProxyDefaultSettings = ProxySettings{}
+
+type ProxySettings struct {
+	Match   string `yaml:"proxy-match"`
+	Rewrite string `yaml:"proxy-rewrite"`
+	Backend string `yaml:"proxy-backend"`
+}
+
+type Proxy struct {
+	Match   *regexp.Regexp
+	Rewrite string
+	Backend string
+}
+
+func (a Proxy) Handle(logger *slog.Logger, w http.ResponseWriter, r *http.Request, done func() (backend http.Handler)) (next bool, err error) {
+	data := challenge.RequestDataFromContext(r.Context())
+
+	backend := data.State.GetBackend(a.Backend)
+	if backend == nil {
+		return false, fmt.Errorf("backend for %s not found", a.Backend)
+	}
+
+	if a.Match != nil {
+		// rewrite query
+		r.URL.Path = a.Match.ReplaceAllString(r.URL.Path, a.Rewrite)
+	}
+
+	// set headers, ignore reply
+	_ = done()
+	backend.ServeHTTP(w, r)
+
+	return false, nil
+}
diff --git a/lib/action/block.go b/lib/action/block.go
new file mode 100644
index 0000000..ed12397
--- /dev/null
+++ b/lib/action/block.go
@@ -0,0 +1,36 @@
+package action
+
+import (
+	"fmt"
+	"git.gammaspectra.live/git/go-away/lib/challenge"
+	"git.gammaspectra.live/git/go-away/lib/policy"
+	"github.com/goccy/go-yaml/ast"
+	"log/slog"
+	"net/http"
+)
+
+func init() {
+	Register[policy.RuleActionBLOCK] = func(state challenge.StateInterface, ruleName, ruleHash string, settings ast.Node) (Handler, error) {
+		return Block{
+			Code:     http.StatusForbidden,
+			RuleHash: ruleHash,
+		}, nil
+	}
+}
+
+type Block struct {
+	Code     int
+	RuleHash string
+}
+
+func (a Block) Handle(logger *slog.Logger, w http.ResponseWriter, r *http.Request, done func() (backend http.Handler)) (next bool, err error) {
+	logger.Info("request blocked")
+	data := challenge.RequestDataFromContext(r.Context())
+
+	w.Header().Set("Content-Type", "text/plain")
+	w.Header().Set("Connection", "close")
+	w.WriteHeader(a.Code)
+	_, _ = w.Write([]byte(fmt.Errorf("access blocked: blocked by administrative rule %s/%s", data.Id.String(), a.RuleHash).Error()))
+
+	return false, nil
+}
diff --git a/lib/action/challenge.go b/lib/action/challenge.go
new file mode 100644
index 0000000..fe7c7b6
--- /dev/null
+++ b/lib/action/challenge.go
@@ -0,0 +1,178 @@
+package action
+
+import (
+	"fmt"
+	"git.gammaspectra.live/git/go-away/lib/challenge"
+	"git.gammaspectra.live/git/go-away/lib/policy"
+	"github.com/goccy/go-yaml"
+	"github.com/goccy/go-yaml/ast"
+	"log/slog"
+	"net/http"
+	"strings"
+)
+
+func init() {
+	i := func(state challenge.StateInterface, ruleName, ruleHash string, settings ast.Node, cont bool) (Handler, error) {
+		params := ChallengeDefaultSettings
+
+		if settings != nil {
+			ymlData, err := settings.MarshalYAML()
+			if err != nil {
+				return nil, err
+			}
+			err = yaml.Unmarshal(ymlData, &params)
+			if err != nil {
+				return nil, err
+			}
+		}
+
+		if params.Code == 0 {
+			params.Code = state.Settings().ChallengeResponseCode
+		}
+
+		var regs []*challenge.Registration
+		for _, regName := range params.Challenges {
+			if reg, ok := state.GetChallengeByName(regName); ok {
+				regs = append(regs, reg)
+			} else {
+				return nil, fmt.Errorf("challenge %s not found", regName)
+			}
+		}
+
+		if len(regs) == 0 {
+			return nil, fmt.Errorf("no registered challenges found in rule %s", ruleName)
+		}
+
+		passHandler, ok := Register[policy.RuleAction(strings.ToUpper(params.PassAction))]
+		if !ok {
+			return nil, fmt.Errorf("unknown pass action %s", params.PassAction)
+		}
+
+		passActionHandler, err := passHandler(state, ruleName, ruleHash, params.PassSettings)
+		if err != nil {
+			return nil, err
+		}
+
+		failHandler, ok := Register[policy.RuleAction(strings.ToUpper(params.FailAction))]
+		if !ok {
+			return nil, fmt.Errorf("unknown pass action %s", params.FailAction)
+		}
+
+		failActionHandler, err := failHandler(state, ruleName, ruleHash, params.FailSettings)
+		if err != nil {
+			return nil, err
+		}
+
+		return Challenge{
+			RuleHash:   ruleHash,
+			Code:       params.Code,
+			Continue:   cont,
+			Challenges: regs,
+
+			PassAction: passActionHandler,
+			FailAction: failActionHandler,
+		}, nil
+	}
+	Register[policy.RuleActionCHALLENGE] = func(state challenge.StateInterface, ruleName, ruleHash string, settings ast.Node) (Handler, error) {
+		return i(state, ruleName, ruleHash, settings, false)
+	}
+	Register[policy.RuleActionCHECK] = func(state challenge.StateInterface, ruleName, ruleHash string, settings ast.Node) (Handler, error) {
+		return i(state, ruleName, ruleHash, settings, true)
+	}
+}
+
+var ChallengeDefaultSettings = ChallengeSettings{
+	PassAction: string(policy.RuleActionPASS),
+	FailAction: string(policy.RuleActionDENY),
+}
+
+type ChallengeSettings struct {
+	Code       int      `yaml:"http-code"`
+	Challenges []string `yaml:"challenges"`
+
+	PassAction   string   `yaml:"pass"`
+	PassSettings ast.Node `yaml:"pass-settings"`
+
+	// FailAction Executed in case no challenges match or
+	FailAction   string   `yaml:"fail"`
+	FailSettings ast.Node `yaml:"fail-settings"`
+}
+
+type Challenge struct {
+	RuleHash   string
+	Code       int
+	Continue   bool
+	Challenges []*challenge.Registration
+
+	PassAction Handler
+	FailAction Handler
+}
+
+func (a Challenge) Handle(logger *slog.Logger, w http.ResponseWriter, r *http.Request, done func() (backend http.Handler)) (next bool, err error) {
+	data := challenge.RequestDataFromContext(r.Context())
+	for _, reg := range a.Challenges {
+		if data.HasValidChallenge(reg.Id()) {
+			if a.Continue {
+				return true, nil
+			}
+
+			// we passed!
+			return a.PassAction.Handle(logger.With("challenge", reg.Name), w, r, done)
+		}
+	}
+	// none matched, issue challenges in sequential priority
+	for _, reg := range a.Challenges {
+		result := data.ChallengeVerify[reg.Id()]
+		state := data.ChallengeState[reg.Id()]
+		if result.Ok() || result == challenge.VerifyResultSkip || state == challenge.VerifyStatePass {
+			// skip already ok'd challenges for some reason (TODO: why)
+			// also skip skipped challenges due to preconditions
+			continue
+		}
+
+		expiry := data.Expiration(reg.Duration)
+		key := challenge.GetChallengeKeyForRequest(data.State, reg, expiry, r)
+		data.State.ChallengeIssued(r, reg, r.URL.String(), logger)
+		result = reg.IssueChallenge(w, r, key, expiry)
+		data.ChallengeVerify[reg.Id()] = result
+		data.ChallengeState[reg.Id()] = challenge.VerifyStatePass
+		switch result {
+		case challenge.VerifyResultOK:
+			data.State.ChallengePassed(r, reg, r.URL.String(), logger)
+			if a.Continue {
+				return true, nil
+			}
+
+			return a.PassAction.Handle(logger.With("challenge", reg.Name), w, r, done)
+		case challenge.VerifyResultNotOK:
+			// we have had the challenge checked, but it's not ok!
+			// safe to continue
+			continue
+		case challenge.VerifyResultFail:
+			err := fmt.Errorf("challenge %s failed on issuance", reg.Name)
+			data.State.ChallengeFailed(r, reg, err, r.URL.String(), logger)
+
+			if reg.Class == challenge.ClassTransparent {
+				// allow continuing transparent challenges
+				continue
+			}
+
+			return a.FailAction.Handle(logger, w, r, done)
+		case challenge.VerifyResultNone:
+			// challenge was issued
+			if reg.Class == challenge.ClassTransparent {
+				// allow continuing transparent challenges
+				continue
+			}
+			// we cannot continue after issuance
+			return false, nil
+
+		case challenge.VerifyResultSkip:
+			// continue onto next one due to precondition
+			continue
+		}
+	}
+
+	// nothing matched, execute default action
+	return a.FailAction.Handle(logger, w, r, done)
+}
diff --git a/lib/action/code.go b/lib/action/code.go
new file mode 100644
index 0000000..7abf89f
--- /dev/null
+++ b/lib/action/code.go
@@ -0,0 +1,47 @@
+package action
+
+import (
+	"errors"
+	"git.gammaspectra.live/git/go-away/lib/challenge"
+	"git.gammaspectra.live/git/go-away/lib/policy"
+	"github.com/goccy/go-yaml"
+	"github.com/goccy/go-yaml/ast"
+	"log/slog"
+	"net/http"
+)
+
+func init() {
+	Register[policy.RuleActionCODE] = func(state challenge.StateInterface, ruleName, ruleHash string, settings ast.Node) (Handler, error) {
+		params := CodeDefaultSettings
+
+		if settings != nil {
+			ymlData, err := settings.MarshalYAML()
+			if err != nil {
+				return nil, err
+			}
+			err = yaml.Unmarshal(ymlData, &params)
+			if err != nil {
+				return nil, err
+			}
+		}
+
+		if params.Code == 0 {
+			return nil, errors.New("http-code not set")
+		}
+
+		return Code(params.Code), nil
+	}
+}
+
+var CodeDefaultSettings = CodeSettings{}
+
+type CodeSettings struct {
+	Code int `yaml:"http-code"`
+}
+
+type Code int
+
+func (a Code) Handle(logger *slog.Logger, w http.ResponseWriter, r *http.Request, done func() (backend http.Handler)) (next bool, err error) {
+	w.WriteHeader(int(a))
+	return false, nil
+}
diff --git a/lib/action/deny.go b/lib/action/deny.go
new file mode 100644
index 0000000..910c33c
--- /dev/null
+++ b/lib/action/deny.go
@@ -0,0 +1,31 @@
+package action
+
+import (
+	"fmt"
+	"git.gammaspectra.live/git/go-away/lib/challenge"
+	"git.gammaspectra.live/git/go-away/lib/policy"
+	"github.com/goccy/go-yaml/ast"
+	"log/slog"
+	"net/http"
+)
+
+func init() {
+	Register[policy.RuleActionDENY] = func(state challenge.StateInterface, ruleName, ruleHash string, settings ast.Node) (Handler, error) {
+		return Deny{
+			Code:     http.StatusForbidden,
+			RuleHash: ruleHash,
+		}, nil
+	}
+}
+
+type Deny struct {
+	Code     int
+	RuleHash string
+}
+
+func (a Deny) Handle(logger *slog.Logger, w http.ResponseWriter, r *http.Request, done func() (backend http.Handler)) (next bool, err error) {
+	logger.Info("request denied")
+	data := challenge.RequestDataFromContext(r.Context())
+	data.State.ErrorPage(w, r, a.Code, fmt.Errorf("access denied: denied by administrative rule %s/%s", data.Id.String(), a.RuleHash), "")
+	return false, nil
+}
diff --git a/lib/action/drop.go b/lib/action/drop.go
new file mode 100644
index 0000000..c92a497
--- /dev/null
+++ b/lib/action/drop.go
@@ -0,0 +1,39 @@
+package action
+
+import (
+	"git.gammaspectra.live/git/go-away/lib/challenge"
+	"git.gammaspectra.live/git/go-away/lib/policy"
+	"github.com/goccy/go-yaml/ast"
+	"log/slog"
+	"net/http"
+)
+
+func init() {
+	Register[policy.RuleActionDROP] = func(state challenge.StateInterface, ruleName, ruleHash string, settings ast.Node) (Handler, error) {
+		return Drop{}, nil
+	}
+}
+
+type Drop struct {
+}
+
+func (a Drop) Handle(logger *slog.Logger, w http.ResponseWriter, r *http.Request, done func() (backend http.Handler)) (next bool, err error) {
+	logger.Info("request dropped")
+
+	if hj, ok := w.(http.Hijacker); ok {
+		if conn, _, err := hj.Hijack(); err == nil {
+			// drop without sending data
+			_ = conn.Close()
+			return false, nil
+		}
+	}
+
+	// fallback
+
+	w.Header().Set("Content-Type", "text/plain")
+	w.Header().Set("Content-Length", "0")
+	w.Header().Set("Connection", "close")
+	w.WriteHeader(http.StatusForbidden)
+
+	return false, nil
+}
diff --git a/lib/action/none.go b/lib/action/none.go
new file mode 100644
index 0000000..cf38322
--- /dev/null
+++ b/lib/action/none.go
@@ -0,0 +1,21 @@
+package action
+
+import (
+	"git.gammaspectra.live/git/go-away/lib/challenge"
+	"git.gammaspectra.live/git/go-away/lib/policy"
+	"github.com/goccy/go-yaml/ast"
+	"log/slog"
+	"net/http"
+)
+
+func init() {
+	Register[policy.RuleActionNONE] = func(state challenge.StateInterface, ruleName, ruleHash string, settings ast.Node) (Handler, error) {
+		return None{}, nil
+	}
+}
+
+type None struct{}
+
+func (a None) Handle(logger *slog.Logger, w http.ResponseWriter, r *http.Request, done func() (backend http.Handler)) (next bool, err error) {
+	return true, nil
+}
diff --git a/lib/action/pass.go b/lib/action/pass.go
new file mode 100644
index 0000000..f9c6cb3
--- /dev/null
+++ b/lib/action/pass.go
@@ -0,0 +1,23 @@
+package action
+
+import (
+	"git.gammaspectra.live/git/go-away/lib/challenge"
+	"git.gammaspectra.live/git/go-away/lib/policy"
+	"github.com/goccy/go-yaml/ast"
+	"log/slog"
+	"net/http"
+)
+
+func init() {
+	Register[policy.RuleActionPASS] = func(state challenge.StateInterface, ruleName, ruleHash string, settings ast.Node) (Handler, error) {
+		return Pass{}, nil
+	}
+}
+
+type Pass struct{}
+
+func (a Pass) Handle(logger *slog.Logger, w http.ResponseWriter, r *http.Request, done func() (backend http.Handler)) (next bool, err error) {
+	logger.Debug("request passed")
+	done().ServeHTTP(w, r)
+	return false, nil
+}
diff --git a/lib/action/register.go b/lib/action/register.go
new file mode 100644
index 0000000..40e07aa
--- /dev/null
+++ b/lib/action/register.go
@@ -0,0 +1,20 @@
+package action
+
+import (
+	"git.gammaspectra.live/git/go-away/lib/challenge"
+	"git.gammaspectra.live/git/go-away/lib/policy"
+	"github.com/goccy/go-yaml/ast"
+	"log/slog"
+	"net/http"
+)
+
+type Handler interface {
+	// Handle An incoming request.
+	// If next is true, continue processing
+	// If next is false, stop processing. If passing to a backend, done() must be called beforehand to set headers.
+	Handle(logger *slog.Logger, w http.ResponseWriter, r *http.Request, done func() (backend http.Handler)) (next bool, err error)
+}
+
+type NewFunc func(state challenge.StateInterface, ruleName, ruleHash string, settings ast.Node) (Handler, error)
+
+var Register = make(map[policy.RuleAction]NewFunc)
diff --git a/lib/challenge.go b/lib/challenge.go
index 4dbad49..e4830a3 100644
--- a/lib/challenge.go
+++ b/lib/challenge.go
@@ -1,125 +1,13 @@
 package lib
 
 import (
-	"crypto/sha256"
-	"encoding/binary"
-	"encoding/hex"
-	"errors"
-	"github.com/go-jose/go-jose/v4/jwt"
-	"net"
-	"net/http"
-	"strings"
-	"time"
+	_ "git.gammaspectra.live/git/go-away/lib/challenge/cookie"
+	_ "git.gammaspectra.live/git/go-away/lib/challenge/dnsbl"
+	_ "git.gammaspectra.live/git/go-away/lib/challenge/http"
+	_ "git.gammaspectra.live/git/go-away/lib/challenge/preload-link"
+	_ "git.gammaspectra.live/git/go-away/lib/challenge/refresh"
+	_ "git.gammaspectra.live/git/go-away/lib/challenge/resource-load"
+	_ "git.gammaspectra.live/git/go-away/lib/challenge/wasm"
 )
 
-type ChallengeInformation struct {
-	Name   string `json:"name"`
-	Key    []byte `json:"key"`
-	Result []byte `json:"result"`
-
-	Expiry    *jwt.NumericDate `json:"exp,omitempty"`
-	NotBefore *jwt.NumericDate `json:"nbf,omitempty"`
-	IssuedAt  *jwt.NumericDate `json:"iat,omitempty"`
-}
-
-func getRequestScheme(r *http.Request) string {
-	if proto := r.Header.Get("X-Forwarded-Proto"); proto == "http" || proto == "https" {
-		return proto
-	}
-
-	if r.TLS != nil {
-		return "https"
-	}
-
-	return "http"
-}
-
-func getRequestAddress(r *http.Request, clientHeader string) net.IP {
-	var ipStr string
-	if clientHeader != "" {
-		ipStr = r.Header.Get(clientHeader)
-	}
-	if ipStr != "" {
-		// handle X-Forwarded-For
-		ipStr = strings.Split(ipStr, ",")[0]
-	}
-
-	// fallback
-	if ipStr == "" {
-		parts := strings.Split(r.RemoteAddr, ":")
-		// drop port
-		ipStr = strings.Join(parts[:len(parts)-1], ":")
-	}
-	ipStr = strings.Trim(ipStr, "[]")
-	return net.ParseIP(ipStr)
-}
-
-type ChallengeKey []byte
-
-const ChallengeKeySize = sha256.Size
-
-func (k *ChallengeKey) Set(flags ChallengeKeyFlags) {
-	(*k)[0] |= uint8(flags)
-}
-func (k *ChallengeKey) Get(flags ChallengeKeyFlags) ChallengeKeyFlags {
-	return ChallengeKeyFlags((*k)[0] & uint8(flags))
-}
-func (k *ChallengeKey) Unset(flags ChallengeKeyFlags) {
-	(*k)[0] = (*k)[0] & ^(uint8(flags))
-}
-
-type ChallengeKeyFlags uint8
-
-const (
-	ChallengeKeyFlagIsIPv4 = ChallengeKeyFlags(1 << iota)
-)
-
-func ChallengeKeyFromString(s string) (ChallengeKey, error) {
-	b, err := hex.DecodeString(s)
-	if err != nil {
-		return nil, err
-	}
-	if len(b) != ChallengeKeySize {
-		return nil, errors.New("invalid challenge key")
-	}
-	return ChallengeKey(b), nil
-}
-
-func (state *State) GetChallengeKeyForRequest(challengeName string, until time.Time, r *http.Request) ChallengeKey {
-	data := RequestDataFromContext(r.Context())
-	address := data.RemoteAddress
-	hasher := sha256.New()
-	hasher.Write([]byte("challenge\x00"))
-	hasher.Write([]byte(challengeName))
-	hasher.Write([]byte{0})
-	hasher.Write(address.To16())
-	hasher.Write([]byte{0})
-
-	// specific headers
-	for _, k := range []string{
-		"Accept-Language",
-		// General browser information
-		"User-Agent",
-		// TODO: not sent in preload
-		//"Sec-Ch-Ua",
-		//"Sec-Ch-Ua-Platform",
-	} {
-		hasher.Write([]byte(r.Header.Get(k)))
-		hasher.Write([]byte{0})
-	}
-	hasher.Write([]byte{0})
-	_ = binary.Write(hasher, binary.LittleEndian, until.UTC().Unix())
-	hasher.Write([]byte{0})
-	hasher.Write(state.publicKey)
-	hasher.Write([]byte{0})
-
-	sum := ChallengeKey(hasher.Sum(nil))
-
-	sum[0] = 0
-
-	if address.To4() != nil {
-		// Is IPv4, mark
-		sum.Set(ChallengeKeyFlagIsIPv4)
-	}
-	return ChallengeKey(sum)
-}
+// This file loads embedded challenge runtimes so their init() is called
diff --git a/lib/challenge/awaiter.go b/lib/challenge/awaiter.go
new file mode 100644
index 0000000..0aa936a
--- /dev/null
+++ b/lib/challenge/awaiter.go
@@ -0,0 +1,47 @@
+package challenge
+
+import (
+	"context"
+	"github.com/alphadose/haxmap"
+	"sync/atomic"
+)
+
+type awaiterCallback func(result VerifyResult)
+
+type Awaiter[K ~string | ~int64 | ~uint64] haxmap.Map[K, awaiterCallback]
+
+func NewAwaiter[T ~string | ~int64 | ~uint64]() *Awaiter[T] {
+	return (*Awaiter[T])(haxmap.New[T, awaiterCallback]())
+}
+
+func (a *Awaiter[T]) Await(key T, ctx context.Context) VerifyResult {
+	ctx, cancel := context.WithCancel(ctx)
+	defer cancel()
+
+	var result atomic.Int64
+
+	a.m().Set(key, func(receivedResult VerifyResult) {
+		result.Store(int64(receivedResult))
+		cancel()
+	})
+	// cleanup
+	defer a.m().Del(key)
+
+	<-ctx.Done()
+
+	return VerifyResult(result.Load())
+}
+
+func (a *Awaiter[T]) Solve(key T, result VerifyResult) {
+	if f, ok := a.m().GetAndDel(key); ok && f != nil {
+		f(result)
+	}
+}
+
+func (a *Awaiter[T]) m() *haxmap.Map[T, awaiterCallback] {
+	return (*haxmap.Map[T, awaiterCallback])(a)
+}
+
+func (a *Awaiter[T]) Close() error {
+	return nil
+}
diff --git a/lib/challenge/cookie/cookie.go b/lib/challenge/cookie/cookie.go
new file mode 100644
index 0000000..16f0ab0
--- /dev/null
+++ b/lib/challenge/cookie/cookie.go
@@ -0,0 +1,38 @@
+package cookie
+
+import (
+	"git.gammaspectra.live/git/go-away/lib/challenge"
+	"git.gammaspectra.live/git/go-away/utils"
+	"github.com/goccy/go-yaml/ast"
+	"net/http"
+	"time"
+)
+
+func init() {
+	challenge.Runtimes[Key] = FillRegistration
+}
+
+const Key = "cookie"
+
+func FillRegistration(state challenge.StateInterface, reg *challenge.Registration, parameters ast.Node) error {
+	reg.Class = challenge.ClassBlocking
+
+	reg.IssueChallenge = func(w http.ResponseWriter, r *http.Request, key challenge.Key, expiry time.Time) challenge.VerifyResult {
+		token, err := reg.IssueChallengeToken(state.PrivateKey(), key, nil, expiry, true)
+		if err != nil {
+			return challenge.VerifyResultFail
+		}
+
+		utils.SetCookie(utils.CookiePrefix+reg.Name, token, expiry, w, r)
+
+		uri, err := challenge.RedirectUrl(r, reg)
+		if err != nil {
+			return challenge.VerifyResultFail
+		}
+
+		http.Redirect(w, r, uri.String(), http.StatusTemporaryRedirect)
+		return challenge.VerifyResultNone
+	}
+
+	return nil
+}
diff --git a/lib/challenge/data.go b/lib/challenge/data.go
new file mode 100644
index 0000000..6c34375
--- /dev/null
+++ b/lib/challenge/data.go
@@ -0,0 +1,171 @@
+package challenge
+
+import (
+	"context"
+	"crypto/rand"
+	"encoding/hex"
+	"errors"
+	"fmt"
+	"git.gammaspectra.live/git/go-away/lib/condition"
+	"git.gammaspectra.live/git/go-away/utils"
+	"github.com/google/cel-go/cel"
+	"github.com/google/cel-go/common/types"
+	"github.com/google/cel-go/common/types/traits"
+	"net"
+	"net/http"
+	"net/textproto"
+	"time"
+)
+
+type requestDataContextKey struct {
+}
+
+func RequestDataFromContext(ctx context.Context) *RequestData {
+	return ctx.Value(requestDataContextKey{}).(*RequestData)
+}
+
+type RequestId [16]byte
+
+func (id RequestId) String() string {
+	return hex.EncodeToString(id[:])
+}
+
+type RequestData struct {
+	Id              RequestId
+	Time            time.Time
+	ChallengeVerify map[Id]VerifyResult
+	ChallengeState  map[Id]VerifyState
+	RemoteAddress   net.IP
+	State           StateInterface
+
+	r *http.Request
+
+	fp     map[string]string
+	header traits.Mapper
+	query  traits.Mapper
+}
+
+func CreateRequestData(r *http.Request, state StateInterface) (*http.Request, *RequestData) {
+
+	var data RequestData
+	// generate random id, todo: is this fast?
+	_, _ = rand.Read(data.Id[:])
+	data.RemoteAddress = utils.GetRequestAddress(r, state.Settings().ClientIpHeader)
+	data.ChallengeVerify = make(map[Id]VerifyResult, len(state.GetChallenges()))
+	data.ChallengeState = make(map[Id]VerifyState, len(state.GetChallenges()))
+	data.Time = time.Now().UTC()
+	data.State = state
+	data.r = r
+
+	data.fp = make(map[string]string, 2)
+
+	if fp := utils.GetTLSFingerprint(r); fp != nil {
+		if ja3nPtr := fp.JA3N(); ja3nPtr != nil {
+			ja3n := ja3nPtr.String()
+			data.fp["ja3n"] = ja3n
+			r.Header.Set("X-TLS-Fingerprint-JA3N", ja3n)
+		}
+		if ja4Ptr := fp.JA4(); ja4Ptr != nil {
+			ja4 := ja4Ptr.String()
+			data.fp["ja4"] = ja4
+			r.Header.Set("X-TLS-Fingerprint-JA4", ja4)
+		}
+	}
+
+	data.query = condition.NewValuesMap(r.URL.Query())
+	data.header = condition.NewMIMEMap(textproto.MIMEHeader(r.Header))
+
+	r = r.WithContext(context.WithValue(r.Context(), requestDataContextKey{}, &data))
+
+	return r, &data
+}
+
+func (d *RequestData) ResolveName(name string) (any, bool) {
+	switch name {
+	case "host":
+		return d.r.Host, true
+	case "method":
+		return d.r.Method, true
+	case "remoteAddress":
+		return d.RemoteAddress, true
+	case "userAgent":
+		return d.r.UserAgent(), true
+	case "path":
+		return d.r.URL.Path, true
+	case "query":
+		return d.query, true
+	case "headers":
+		return d.header, true
+	case "fp":
+		return d.fp, true
+	default:
+		return nil, false
+	}
+}
+
+func (d *RequestData) Parent() cel.Activation {
+	return nil
+}
+
+func (d *RequestData) EvaluateChallenges(w http.ResponseWriter, r *http.Request) {
+	for _, reg := range d.State.GetChallenges() {
+		key := GetChallengeKeyForRequest(d.State, reg, d.Expiration(reg.Duration), r)
+		verifyResult, verifyState, err := reg.VerifyChallengeToken(d.State.PublicKey(), key, r)
+		if err != nil && !errors.Is(err, http.ErrNoCookie) {
+			// clear invalid cookie
+			utils.ClearCookie(utils.CookiePrefix+reg.Name, w, r)
+		}
+
+		// prevent evaluating the challenge if not solved
+		if !verifyResult.Ok() && reg.Condition != nil {
+			out, _, err := reg.Condition.Eval(d)
+			// verify eligibility
+			if err != nil {
+				d.State.Logger(r).Error(err.Error(), "challenge", reg.Name)
+			} else if out != nil && out.Type() == types.BoolType {
+				if out.Equal(types.True) != types.True {
+					// skip challenge match due to precondition!
+					verifyResult = VerifyResultSkip
+					continue
+				}
+			}
+		}
+		d.ChallengeVerify[reg.Id()] = verifyResult
+		d.ChallengeState[reg.Id()] = verifyState
+	}
+
+	if d.State.Settings().BackendIpHeader != "" {
+		if d.State.Settings().ClientIpHeader != "" {
+			r.Header.Del(d.State.Settings().ClientIpHeader)
+		}
+		r.Header.Set(d.State.Settings().BackendIpHeader, d.RemoteAddress.String())
+	}
+
+	// send these to client so we consistently get the headers
+	//w.Header().Set("Accept-CH", "Sec-CH-UA, Sec-CH-UA-Platform")
+	//w.Header().Set("Critical-CH", "Sec-CH-UA, Sec-CH-UA-Platform")
+}
+
+func (d *RequestData) Expiration(duration time.Duration) time.Time {
+	return d.Time.Add(duration).Round(duration)
+}
+
+func (d *RequestData) HasValidChallenge(id Id) bool {
+	return d.ChallengeVerify[id].Ok()
+}
+
+func (d *RequestData) Headers(headers http.Header) {
+	headers.Set("X-Away-Id", d.Id.String())
+
+	for id, result := range d.ChallengeVerify {
+		if result.Ok() {
+			c, ok := d.State.GetChallenge(id)
+			if !ok {
+				panic("challenge not found")
+			}
+
+			headers.Set(fmt.Sprintf("X-Away-Challenge-%s-Result", c.Name), result.String())
+			headers.Set(fmt.Sprintf("X-Away-Challenge-%s-State", c.Name), d.ChallengeState[id].String())
+		}
+	}
+}
diff --git a/lib/challenge/dnsbl/dnsbl.go b/lib/challenge/dnsbl/dnsbl.go
new file mode 100644
index 0000000..df6c80c
--- /dev/null
+++ b/lib/challenge/dnsbl/dnsbl.go
@@ -0,0 +1,149 @@
+package http
+
+import (
+	"context"
+	"errors"
+	"git.gammaspectra.live/git/go-away/lib/challenge"
+	"git.gammaspectra.live/git/go-away/utils"
+	"github.com/goccy/go-yaml"
+	"github.com/goccy/go-yaml/ast"
+	"net"
+	"net/http"
+	"time"
+)
+
+func init() {
+	challenge.Runtimes[Key] = FillRegistration
+}
+
+const Key = "dnsbl"
+
+type Parameters struct {
+	VerifyProbability float64       `yaml:"verify-probability"`
+	Host              string        `yaml:"dnsbl-host"`
+	Timeout           time.Duration `yaml:"dnsbl-timeout"`
+	Decay             time.Duration `yaml:"dnsbl-decay"`
+}
+
+var DefaultParameters = Parameters{
+	VerifyProbability: 0.10,
+	Timeout:           time.Second * 1,
+	Decay:             time.Hour * 1,
+	Host:              "dnsbl.dronebl.org",
+}
+
+func lookup(ctx context.Context, decay, timeout time.Duration, dnsbl *utils.DNSBL, decayMap *utils.DecayMap[[net.IPv6len]byte, utils.DNSBLResponse], ip net.IP) (utils.DNSBLResponse, error) {
+	var key [net.IPv6len]byte
+	copy(key[:], ip.To16())
+
+	result, ok := decayMap.Get(key)
+	if ok {
+		return result, nil
+	}
+
+	ctx, cancel := context.WithTimeout(context.Background(), timeout)
+	defer cancel()
+	result, err := dnsbl.Lookup(ctx, ip)
+	if err != nil {
+
+	}
+	decayMap.Set(key, result, decay)
+
+	return result, err
+}
+
+type closer chan struct{}
+
+func (c closer) Close() error {
+	select {
+	case <-c:
+	default:
+		close(c)
+	}
+	return nil
+}
+
+func FillRegistration(state challenge.StateInterface, reg *challenge.Registration, parameters ast.Node) error {
+	params := DefaultParameters
+
+	if parameters != nil {
+		ymlData, err := parameters.MarshalYAML()
+		if err != nil {
+			return err
+		}
+		err = yaml.Unmarshal(ymlData, &params)
+		if err != nil {
+			return err
+		}
+	}
+
+	if params.Host == "" {
+		return errors.New("empty host")
+	}
+
+	reg.Class = challenge.ClassTransparent
+
+	if params.VerifyProbability <= 0 {
+		//20% default
+		params.VerifyProbability = 0.20
+	} else if params.VerifyProbability > 1.0 {
+		params.VerifyProbability = 1.0
+	}
+	reg.VerifyProbability = params.VerifyProbability
+
+	decayMap := utils.NewDecayMap[[net.IPv6len]byte, utils.DNSBLResponse]()
+
+	dnsbl := utils.NewDNSBL(params.Host, &net.Resolver{
+		PreferGo: true,
+	})
+
+	ob := make(closer)
+
+	go func() {
+		ticker := time.NewTicker(params.Timeout / 3)
+		defer ticker.Stop()
+		for {
+			select {
+			case <-ticker.C:
+				decayMap.Decay()
+			case <-ob:
+				return
+			}
+		}
+	}()
+
+	// allow freeing the ticker/decay map
+	reg.Object = ob
+
+	reg.IssueChallenge = func(w http.ResponseWriter, r *http.Request, key challenge.Key, expiry time.Time) challenge.VerifyResult {
+
+		data := challenge.RequestDataFromContext(r.Context())
+
+		result, err := lookup(r.Context(), params.Decay, params.Timeout, dnsbl, decayMap, data.RemoteAddress)
+		if err != nil {
+			data.State.Logger(r).Debug("dnsbl lookup failed", "address", data.RemoteAddress.String(), "result", result, "err", err)
+		}
+
+		if err != nil {
+			return challenge.VerifyResultFail
+		}
+
+		if result.Bad() {
+			token, err := reg.IssueChallengeToken(state.PrivateKey(), key, nil, expiry, false)
+			if err != nil {
+				return challenge.VerifyResultFail
+			}
+			utils.SetCookie(utils.CookiePrefix+reg.Name, token, expiry, w, r)
+			return challenge.VerifyResultNotOK
+		} else {
+			token, err := reg.IssueChallengeToken(state.PrivateKey(), key, nil, expiry, true)
+			if err != nil {
+				return challenge.VerifyResultFail
+			}
+			utils.SetCookie(utils.CookiePrefix+reg.Name, token, expiry, w, r)
+			return challenge.VerifyResultOK
+		}
+	}
+
+	return nil
+}
diff --git a/lib/challenge/helper.go b/lib/challenge/helper.go
new file mode 100644
index 0000000..44f7906
--- /dev/null
+++ b/lib/challenge/helper.go
@@ -0,0 +1,164 @@
+package challenge
+
+import (
+	"crypto/subtle"
+	"encoding/hex"
+	"errors"
+	"fmt"
+	"git.gammaspectra.live/git/go-away/utils"
+	"net/http"
+	"net/url"
+)
+
+func NewKeyVerifier() (verify VerifyFunc, issue func(key Key) string) {
+	return func(key Key, token []byte, r *http.Request) (VerifyResult, error) {
+			expectedKey, err := hex.DecodeString(string(token))
+			if err != nil {
+				return VerifyResultFail, err
+			}
+			if subtle.ConstantTimeCompare(key[:], expectedKey) == 1 {
+				return VerifyResultOK, nil
+			}
+			return VerifyResultFail, errors.New("invalid token")
+		}, func(key Key) string {
+			return hex.EncodeToString(key[:])
+		}
+}
+
+const (
+	QueryArgPrefix    = "__goaway"
+	QueryArgReferer   = QueryArgPrefix + "_referer"
+	QueryArgRedirect  = QueryArgPrefix + "_redirect"
+	QueryArgRequestId = QueryArgPrefix + "_id"
+	QueryArgChallenge = QueryArgPrefix + "_challenge"
+	QueryArgToken     = QueryArgPrefix + "_token"
+)
+
+const MakeChallengeUrlSuffix = "/make-challenge"
+const VerifyChallengeUrlSuffix = "/verify-challenge"
+
+func GetVerifyInformation(r *http.Request, reg *Registration) (requestId RequestId, redirect, token string, err error) {
+
+	if r.FormValue(QueryArgChallenge) != reg.Name {
+		return RequestId{}, "", "", fmt.Errorf("unexpected challenge: got %s", r.FormValue(QueryArgChallenge))
+	}
+
+	requestIdHex := r.FormValue(QueryArgRequestId)
+
+	if len(requestId) != hex.DecodedLen(len(requestIdHex)) {
+		return RequestId{}, "", "", errors.New("invalid request id")
+	}
+	n, err := hex.Decode(requestId[:], []byte(requestIdHex))
+	if err != nil {
+		return RequestId{}, "", "", err
+	} else if n != len(requestId) {
+		return RequestId{}, "", "", errors.New("invalid request id")
+	}
+
+	token = r.FormValue(QueryArgToken)
+	redirect, err = utils.EnsureNoOpenRedirect(r.FormValue(QueryArgRedirect))
+	if err != nil {
+		return RequestId{}, "", "", err
+	}
+	return
+}
+
+func VerifyUrl(r *http.Request, reg *Registration, token string) (*url.URL, error) {
+
+	redirectUrl, err := RedirectUrl(r, reg)
+	if err != nil {
+		return nil, err
+	}
+
+	uri := new(url.URL)
+	uri.Path = reg.Path + VerifyChallengeUrlSuffix
+
+	data := RequestDataFromContext(r.Context())
+	values := uri.Query()
+	values.Set(QueryArgRequestId, data.Id.String())
+	values.Set(QueryArgRedirect, redirectUrl.String())
+	values.Set(QueryArgToken, token)
+	values.Set(QueryArgChallenge, reg.Name)
+	uri.RawQuery = values.Encode()
+
+	return uri, nil
+}
+
+func RedirectUrl(r *http.Request, reg *Registration) (*url.URL, error) {
+	uri, err := url.ParseRequestURI(r.URL.String())
+	if err != nil {
+		return nil, err
+	}
+
+	data := RequestDataFromContext(r.Context())
+	values := uri.Query()
+	values.Set(QueryArgRequestId, data.Id.String())
+	values.Set(QueryArgReferer, r.Referer())
+	values.Set(QueryArgChallenge, reg.Name)
+	uri.RawQuery = values.Encode()
+
+	return uri, nil
+}
+
+func VerifyHandlerChallengeResponseFunc(state StateInterface, data *RequestData, w http.ResponseWriter, r *http.Request, verifyResult VerifyResult, err error, redirect string) {
+	if err != nil {
+		state.ErrorPage(w, r, http.StatusBadRequest, err, redirect)
+		return
+	} else if !verifyResult.Ok() {
+		state.ErrorPage(w, r, http.StatusForbidden, fmt.Errorf("access denied: failed challenge"), redirect)
+		return
+	}
+	http.Redirect(w, r, redirect, http.StatusTemporaryRedirect)
+}
+
+func VerifyHandlerFunc(state StateInterface, reg *Registration, verify VerifyFunc, responseFunc func(state StateInterface, data *RequestData, w http.ResponseWriter, r *http.Request, verifyResult VerifyResult, err error, redirect string)) http.HandlerFunc {
+	if verify == nil {
+		verify = reg.Verify
+	}
+	if responseFunc == nil {
+		responseFunc = VerifyHandlerChallengeResponseFunc
+	}
+	return func(w http.ResponseWriter, r *http.Request) {
+		data := RequestDataFromContext(r.Context())
+		requestId, redirect, token, err := GetVerifyInformation(r, reg)
+		if err != nil {
+			state.ChallengeFailed(r, reg, err, "", nil)
+			responseFunc(state, data, w, r, VerifyResultFail, fmt.Errorf("internal error: %w", err), "")
+			return
+		}
+		data.Id = requestId
+
+		err = func() (err error) {
+			expiration := data.Expiration(reg.Duration)
+			key := GetChallengeKeyForRequest(state, reg, expiration, r)
+
+			verifyResult, err := verify(key, []byte(token), r)
+			if err != nil {
+				return err
+			} else if !verifyResult.Ok() {
+				utils.ClearCookie(utils.CookiePrefix+reg.Name, w, r)
+				state.ChallengeFailed(r, reg, nil, redirect, nil)
+				responseFunc(state, data, w, r, verifyResult, nil, redirect)
+				return nil
+			}
+
+			challengeToken, err := reg.IssueChallengeToken(state.PrivateKey(), key, []byte(token), expiration, true)
+			if err != nil {
+				utils.ClearCookie(utils.CookiePrefix+reg.Name, w, r)
+			} else {
+				utils.SetCookie(utils.CookiePrefix+reg.Name, challengeToken, expiration, w, r)
+			}
+			data.ChallengeVerify[reg.id] = verifyResult
+			state.ChallengePassed(r, reg, redirect, nil)
+
+			responseFunc(state, data, w, r, verifyResult, nil, redirect)
+			return nil
+		}()
+		if err != nil {
+			utils.ClearCookie(utils.CookiePrefix+reg.Name, w, r)
+			state.ChallengeFailed(r, reg, err, redirect, nil)
+			responseFunc(state, data, w, r, VerifyResultFail, fmt.Errorf("access denied: error in challenge %s: %w", reg.Name, err), redirect)
+			return
+		}
+	}
+}
diff --git a/lib/challenge/http/http.go b/lib/challenge/http/http.go
new file mode 100644
index 0000000..78472ca
--- /dev/null
+++ b/lib/challenge/http/http.go
@@ -0,0 +1,158 @@
+package http
+
+import (
+	"crypto/sha256"
+	"crypto/subtle"
+	"errors"
+	"git.gammaspectra.live/git/go-away/lib/challenge"
+	"git.gammaspectra.live/git/go-away/utils"
+	"github.com/goccy/go-yaml"
+	"github.com/goccy/go-yaml/ast"
+	"io"
+	"net/http"
+	"slices"
+	"time"
+)
+
+func init() {
+	challenge.Runtimes[Key] = FillRegistration
+}
+
+const Key = "http"
+
+type Parameters struct {
+	VerifyProbability float64 `yaml:"verify-probability"`
+
+	HttpMethod string `yaml:"http-method"`
+	HttpCode   int    `yaml:"http-code"`
+	HttpCookie string `yaml:"http-cookie"`
+	Url        string `yaml:"http-url"`
+}
+
+var DefaultParameters = Parameters{
+	VerifyProbability: 0.20,
+	HttpMethod:        http.MethodGet,
+	HttpCode:          http.StatusOK,
+}
+
+func FillRegistration(state challenge.StateInterface, reg *challenge.Registration, parameters ast.Node) error {
+	params := DefaultParameters
+
+	if parameters != nil {
+		ymlData, err := parameters.MarshalYAML()
+		if err != nil {
+			return err
+		}
+		err = yaml.Unmarshal(ymlData, &params)
+		if err != nil {
+			return err
+		}
+	}
+
+	if params.Url == "" {
+		return errors.New("empty url")
+	}
+
+	reg.Class = challenge.ClassTransparent
+
+	bindAuthValue := func(key challenge.Key, r *http.Request) ([]byte, error) {
+		var cookieValue string
+		if cookie, err := r.Cookie(params.HttpCookie); err != nil || cookie == nil {
+			// skip check if we don't have cookie or it's expired
+			return nil, http.ErrNoCookie
+		} else {
+			cookieValue = cookie.Value
+		}
+
+		// bind hash of cookie contents
+		sum := sha256.New()
+		sum.Write([]byte(cookieValue))
+		sum.Write([]byte{0})
+		sum.Write(key[:])
+		return sum.Sum(nil), nil
+	}
+
+	if params.VerifyProbability <= 0 {
+		//20% default
+		params.VerifyProbability = 0.20
+	} else if params.VerifyProbability > 1.0 {
+		params.VerifyProbability = 1.0
+	}
+	reg.VerifyProbability = params.VerifyProbability
+
+	if params.HttpCookie != "" {
+		// re-verify the cookie value
+		// TODO: configure to verify with backend
+		reg.Verify = func(key challenge.Key, token []byte, r *http.Request) (challenge.VerifyResult, error) {
+			sum, err := bindAuthValue(key, r)
+			if err != nil {
+				return challenge.VerifyResultFail, err
+			}
+			if subtle.ConstantTimeCompare(sum, token) == 1 {
+				return challenge.VerifyResultOK, nil
+			}
+			return challenge.VerifyResultFail, errors.New("invalid cookie value")
+		}
+	}
+
+	reg.IssueChallenge = func(w http.ResponseWriter, r *http.Request, key challenge.Key, expiry time.Time) challenge.VerifyResult {
+		var sum []byte
+		if params.HttpCookie != "" {
+			if c, err := r.Cookie(params.HttpCookie); err != nil || c == nil {
+				// skip check if we don't have cookie or it's expired
+				return challenge.VerifyResultSkip
+			} else {
+				sum, err = bindAuthValue(key, r)
+				if err != nil {
+					return challenge.VerifyResultFail
+				}
+			}
+		}
+
+		request, err := http.NewRequest(params.HttpMethod, params.Url, nil)
+		if err != nil {
+			return challenge.VerifyResultFail
+		}
+
+		var excludeHeaders = []string{"Host", "Content-Length"}
+		for k, v := range r.Header {
+			if slices.Contains(excludeHeaders, k) {
+				// skip these parameters
+				continue
+			}
+			request.Header[k] = v
+		}
+		// set id
+		request.Header.Set("X-Away-Id", challenge.RequestDataFromContext(r.Context()).Id.String())
+
+		// set request info in X headers
+		request.Header.Set("X-Away-Host", r.Host)
+		request.Header.Set("X-Away-Path", r.URL.Path)
+		request.Header.Set("X-Away-Query", r.URL.RawQuery)
+
+		response, err := state.Client().Do(request)
+		if err != nil {
+			return challenge.VerifyResultFail
+		}
+		defer response.Body.Close()
+		defer io.Copy(io.Discard, response.Body)
+
+		if response.StatusCode != params.HttpCode {
+			token, err := reg.IssueChallengeToken(state.PrivateKey(), key, sum, expiry, false)
+			if err != nil {
+				return challenge.VerifyResultFail
+			}
+			utils.SetCookie(utils.CookiePrefix+reg.Name, token, expiry, w, r)
+			return challenge.VerifyResultNotOK
+		} else {
+			token, err := reg.IssueChallengeToken(state.PrivateKey(), key, sum, expiry, true)
+			if err != nil {
+				return challenge.VerifyResultFail
+			}
+			utils.SetCookie(utils.CookiePrefix+reg.Name, token, expiry, w, r)
+			return challenge.VerifyResultOK
+		}
+	}
+
+	return nil
+}
diff --git a/lib/challenge/key.go b/lib/challenge/key.go
new file mode 100644
index 0000000..710c2c5
--- /dev/null
+++ b/lib/challenge/key.go
@@ -0,0 +1,80 @@
+package challenge
+
+import (
+	"crypto/sha256"
+	"encoding/binary"
+	"encoding/hex"
+	"errors"
+	"net/http"
+	"time"
+)
+
+type Key [KeySize]byte
+
+const KeySize = sha256.Size
+
+func (k *Key) Set(flags KeyFlags) {
+	(*k)[0] |= uint8(flags)
+}
+func (k *Key) Get(flags KeyFlags) KeyFlags {
+	return KeyFlags((*k)[0] & uint8(flags))
+}
+func (k *Key) Unset(flags KeyFlags) {
+	(*k)[0] = (*k)[0] & ^(uint8(flags))
+}
+
+type KeyFlags uint8
+
+const (
+	KeyFlagIsIPv4 = KeyFlags(1 << iota)
+)
+
+func KeyFromString(s string) (Key, error) {
+	b, err := hex.DecodeString(s)
+	if err != nil {
+		return Key{}, err
+	}
+	if len(b) != KeySize {
+		return Key{}, errors.New("invalid challenge key")
+	}
+	return Key(b), nil
+}
+
+func GetChallengeKeyForRequest(state StateInterface, reg *Registration, until time.Time, r *http.Request) Key {
+	data := RequestDataFromContext(r.Context())
+	address := data.RemoteAddress
+	hasher := sha256.New()
+	hasher.Write([]byte("challenge\x00"))
+	hasher.Write([]byte(reg.Name))
+	hasher.Write([]byte{0})
+	hasher.Write(address.To16())
+	hasher.Write([]byte{0})
+
+	// specific headers
+	for _, k := range []string{
+		"Accept-Language",
+		// General browser information
+		"User-Agent",
+		// TODO: not sent in preload
+		//"Sec-Ch-Ua",
+		//"Sec-Ch-Ua-Platform",
+	} {
+		hasher.Write([]byte(r.Header.Get(k)))
+		hasher.Write([]byte{0})
+	}
+	hasher.Write([]byte{0})
+	_ = binary.Write(hasher, binary.LittleEndian, until.UTC().Unix())
+	hasher.Write([]byte{0})
+	hasher.Write(state.PublicKey())
+	hasher.Write([]byte{0})
+
+	sum := Key(hasher.Sum(nil))
+
+	sum[0] = 0
+
+	if address.To4() != nil {
+		// Is IPv4, mark
+		sum.Set(KeyFlagIsIPv4)
+	}
+	return Key(sum)
+}
diff --git a/lib/challenge/preload-link/preload-link.go b/lib/challenge/preload-link/preload-link.go
new file mode 100644
index 0000000..b638de8
--- /dev/null
+++ b/lib/challenge/preload-link/preload-link.go
@@ -0,0 +1,128 @@
+package preload_link
+
+import (
+	"context"
+	"fmt"
+	"git.gammaspectra.live/git/go-away/lib/challenge"
+	"git.gammaspectra.live/git/go-away/utils"
+	"github.com/goccy/go-yaml"
+	"github.com/goccy/go-yaml/ast"
+	"net/http"
+	"time"
+)
+
+func init() {
+	challenge.Runtimes[Key] = FillRegistration
+}
+
+const Key = "preload-link"
+
+type Parameters struct {
+	Deadline time.Duration `yaml:"preload-early-hint-deadline"`
+}
+
+var DefaultParameters = Parameters{
+	Deadline: time.Second * 3,
+}
+
+func FillRegistration(state challenge.StateInterface, reg *challenge.Registration, parameters ast.Node) error {
+	params := DefaultParameters
+
+	if parameters != nil {
+		ymlData, err := parameters.MarshalYAML()
+		if err != nil {
+			return err
+		}
+		err = yaml.Unmarshal(ymlData, &params)
+		if err != nil {
+			return err
+		}
+	}
+
+	verifier, issuer := challenge.NewKeyVerifier()
+	reg.Verify = verifier
+
+	reg.Class = challenge.ClassTransparent
+
+	ob := challenge.NewAwaiter[string]()
+
+	reg.Object = ob
+
+	reg.IssueChallenge = func(w http.ResponseWriter, r *http.Request, key challenge.Key, expiry time.Time) challenge.VerifyResult {
+		// this only works on HTTP/2 and HTTP/3
+
+		if r.ProtoMajor < 2 {
+			// this can happen if we are an upgraded request from HTTP/1.1 to HTTP/2 in H2C
+			if _, ok := w.(http.Pusher); !ok {
+				return challenge.VerifyResultSkip
+			}
+		}
+
+		issuerKey := issuer(key)
+
+		uri, err := challenge.VerifyUrl(r, reg, issuerKey)
+		if err != nil {
+			return challenge.VerifyResultFail
+		}
+
+		// remove redirect args
+		values := uri.Query()
+		values.Del(challenge.QueryArgRedirect)
+		uri.RawQuery = values.Encode()
+
+		// Redirect URI must be absolute to work
+		uri.Scheme = utils.GetRequestScheme(r)
+		uri.Host = r.Host
+
+		w.Header().Set("Link", fmt.Sprintf("<%s>; rel=\"preload\"; as=\"style\"; fetchpriority=high", uri.String()))
+		defer func() {
+			// remove old header so it won't show on response!
+			w.Header().Del("Link")
+		}()
+		w.WriteHeader(http.StatusEarlyHints)
+
+		ctx, cancel := context.WithTimeout(r.Context(), params.Deadline)
+		defer cancel()
+		if result := ob.Await(issuerKey, ctx); result.Ok() {
+			// this should serve!
+			return challenge.VerifyResultOK
+		} else if result == challenge.VerifyResultNone {
+			// we hit timeout
+			return challenge.VerifyResultFail
+		} else {
+			return result
+		}
+	}
+
+	mux := http.NewServeMux()
+
+	mux.HandleFunc("GET "+reg.Path+challenge.VerifyChallengeUrlSuffix, func(w http.ResponseWriter, r *http.Request) {
+		w.Header().Set("Content-Type", "text/css; charset=utf-8")
+		w.Header().Set("Content-Length", "0")
+
+		data := challenge.RequestDataFromContext(r.Context())
+		key := challenge.GetChallengeKeyForRequest(state, reg, data.Expiration(reg.Duration), r)
+		issuerKey := issuer(key)
+
+		_, _, token, err := challenge.GetVerifyInformation(r, reg)
+		if err != nil {
+			w.WriteHeader(http.StatusBadRequest)
+		}
+
+		verifyResult, _ := verifier(key, []byte(token), r)
+		if !verifyResult.Ok() {
+			w.WriteHeader(http.StatusUnauthorized)
+		} else {
+			w.WriteHeader(http.StatusOK)
+		}
+
+		ob.Solve(issuerKey, verifyResult)
+		if !verifyResult.Ok() {
+			// also give data on other failure when mismatched
+			ob.Solve(token, verifyResult)
+		}
+	})
+	reg.Handler = mux
+
+	return nil
+}
diff --git a/lib/challenge/refresh/refresh.go b/lib/challenge/refresh/refresh.go
new file mode 100644
index 0000000..2feca9a
--- /dev/null
+++ b/lib/challenge/refresh/refresh.go
@@ -0,0 +1,64 @@
+package refresh
+
+import (
+	"git.gammaspectra.live/git/go-away/lib/challenge"
+	"github.com/goccy/go-yaml"
+	"github.com/goccy/go-yaml/ast"
+	"net/http"
+	"time"
+)
+
+func init() {
+	challenge.Runtimes["refresh"] = FillRegistration
+}
+
+type Parameters struct {
+	Mode string `yaml:"refresh-mode"`
+}
+
+var DefaultParameters = Parameters{
+	Mode: "header",
+}
+
+func FillRegistration(state challenge.StateInterface, reg *challenge.Registration, parameters ast.Node) error {
+	params := DefaultParameters
+
+	if parameters != nil {
+		ymlData, err := parameters.MarshalYAML()
+		if err != nil {
+			return err
+		}
+		err = yaml.Unmarshal(ymlData, &params)
+		if err != nil {
+			return err
+		}
+	}
+
+	reg.Class = challenge.ClassBlocking
+
+	verifier, issuer := challenge.NewKeyVerifier()
+	reg.Verify = verifier
+
+	reg.IssueChallenge = func(w http.ResponseWriter, r *http.Request, key challenge.Key, expiry time.Time) challenge.VerifyResult {
+		uri, err := challenge.VerifyUrl(r, reg, issuer(key))
+		if err != nil {
+			return challenge.VerifyResultFail
+		}
+
+		if params.Mode == "meta" {
+			state.ChallengePage(w, r, state.Settings().ChallengeResponseCode, reg, map[string]any{
+				"Meta": map[string]string{
+					"refresh": "0; url=" + uri.String(),
+				},
+			})
+		} else {
+			// self redirect!
+			w.Header().Set("Refresh", "0; url="+uri.String())
+
+			state.ChallengePage(w, r, state.Settings().ChallengeResponseCode, reg, nil)
+		}
+		return challenge.VerifyResultNone
+	}
+
+	return nil
+}
diff --git a/lib/challenge/register.go b/lib/challenge/register.go
new file mode 100644
index 0000000..9aebece
--- /dev/null
+++ b/lib/challenge/register.go
@@ -0,0 +1,252 @@
+package challenge
+
+import (
+	"bytes"
+	"crypto/ed25519"
+	"errors"
+	"fmt"
+	"git.gammaspectra.live/git/go-away/lib/condition"
+	"git.gammaspectra.live/git/go-away/lib/policy"
+	"git.gammaspectra.live/git/go-away/utils"
+	"github.com/go-jose/go-jose/v4"
+	"github.com/go-jose/go-jose/v4/jwt"
+	"github.com/goccy/go-yaml/ast"
+	"github.com/google/cel-go/cel"
+	"io"
+	"math/rand/v2"
+	"net/http"
+	"path"
+	"strings"
+	"time"
+)
+
+type Register map[Id]*Registration
+
+func (r Register) Get(id Id) (*Registration, bool) {
+	c, ok := r[id]
+	return c, ok
+}
+
+func (r Register) GetByName(name string) (*Registration, Id, bool) {
+	for id, c := range r {
+		if c.Name == name {
+			return c, id, true
+		}
+	}
+
+	return nil, 0, false
+}
+
+var idCounter Id
+
+// DefaultDuration TODO: adjust
+const DefaultDuration = time.Hour * 24 * 7
+
+func (r Register) Create(state StateInterface, name string, pol policy.Challenge, replacer *strings.Replacer) (*Registration, Id, error) {
+	runtime, ok := Runtimes[pol.Runtime]
+	if !ok {
+		return nil, 0, fmt.Errorf("unknown challenge runtime %s", pol.Runtime)
+	}
+
+	reg := &Registration{
+		Name:     name,
+		Path:     path.Join(state.UrlPath(), "challenge", name),
+		Duration: pol.Duration,
+	}
+
+	if reg.Duration == 0 {
+		reg.Duration = DefaultDuration
+	}
+
+	// allow nesting
+	var conditions []string
+	for _, cond := range pol.Conditions {
+		if replacer != nil {
+			cond = replacer.Replace(cond)
+		}
+		conditions = append(conditions, cond)
+	}
+
+	if len(conditions) > 0 {
+		ast, err := condition.FromStrings(state.ProgramEnv(), condition.OperatorOr, conditions...)
+		if err != nil {
+			return nil, 0, fmt.Errorf("error compiling conditions: %v", err)
+		}
+		reg.Condition, err = condition.Program(state.ProgramEnv(), ast)
+		if err != nil {
+			return nil, 0, fmt.Errorf("error compiling program: %v", err)
+		}
+	}
+
+	if _, oldId, ok := r.GetByName(reg.Name); ok {
+		reg.id = oldId
+	} else {
+		idCounter++
+		reg.id = idCounter
+	}
+
+	err := runtime(state, reg, pol.Parameters)
+	if err != nil {
+		return nil, 0, fmt.Errorf("error filling registration: %v", err)
+	}
+	r[reg.id] = reg
+	return reg, reg.id, nil
+}
+
+func (r Register) Add(c *Registration) Id {
+	if _, oldId, ok := r.GetByName(c.Name); ok {
+		c.id = oldId
+		r[oldId] = c
+		return oldId
+	} else {
+		idCounter++
+		c.id = idCounter
+		r[idCounter] = c
+		return idCounter
+	}
+}
+
+type Registration struct {
+	// id The assigned internal identifier
+	id Id
+
+	// Name The unique name for this challenge
+	Name string
+
+	// Class whether this challenge is transparent or otherwise
+	Class Class
+
+	// Condition A CEL condition which is passed the same environment as general rules.
+	// If nil, always true
+	// If non-nil, must return true for this challenge to be allowed to be executed
+	Condition cel.Program
+
+	// Path The url path that this challenge is hosted under for the Handler to be called.
+	Path string
+
+	// Duration How long this challenge will be valid when passed
+	Duration time.Duration
+
+	// Handler An HTTP handler for all requests coming on the Path
+	// This handler will need to handle MakeChallengeUrlSuffix and VerifyChallengeUrlSuffix as well if needed
+	// Recommended to use http.ServeMux
+	Handler http.Handler
+
+	// Verify Verify an issued token
+	Verify            VerifyFunc
+	VerifyProbability float64
+
+	// IssueChallenge Issues a challenge to a request.
+	// If Class is ClassTransparent and VerifyResult is !VerifyResult.Ok(), continue with other challenges
+	// TODO: have this return error as well
+	IssueChallenge func(w http.ResponseWriter, r *http.Request, key Key, expiry time.Time) VerifyResult
+
+	// Object used to handle state or similar
+	// Can be nil if no state is needed
+	// If non-nil must implement io.Closer even if there's nothing to do
+	Object io.Closer
+}
+
+type VerifyFunc func(key Key, token []byte, r *http.Request) (VerifyResult, error)
+
+type Token struct {
+	Name   string `json:"name"`
+	Key    []byte `json:"key"`
+	Result []byte `json:"result,omitempty"`
+	Ok     bool   `json:"ok"`
+
+	Expiry    jwt.NumericDate `json:"exp,omitempty"`
+	NotBefore jwt.NumericDate `json:"nbf,omitempty"`
+	IssuedAt  jwt.NumericDate `json:"iat,omitempty"`
+}
+
+func (reg Registration) Id() Id {
+	return reg.id
+}
+
+func (reg Registration) IssueChallengeToken(privateKey ed25519.PrivateKey, key Key, result []byte, until time.Time, ok bool) (token string, err error) {
+	signer, err := jose.NewSigner(jose.SigningKey{
+		Algorithm: jose.EdDSA,
+		Key:       privateKey,
+	}, nil)
+	if err != nil {
+		return "", err
+	}
+
+	token, err = jwt.Signed(signer).Claims(Token{
+		Name:      reg.Name,
+		Key:       key[:],
+		Result:    result,
+		Ok:        ok,
+		Expiry:    jwt.NumericDate(until.Unix()),
+		NotBefore: jwt.NumericDate(time.Now().UTC().AddDate(0, 0, -1).Unix()),
+		IssuedAt:  jwt.NumericDate(time.Now().UTC().Unix()),
+	}).Serialize()
+	if err != nil {
+		return "", err
+	}
+	return token, nil
+}
+
+var ErrVerifyKeyMismatch = errors.New("verify: key mismatch")
+var ErrVerifyVerifyMismatch = errors.New("verify: verification mismatch")
+var ErrTokenExpired = errors.New("token: expired")
+
+func (reg Registration) VerifyChallengeToken(publicKey ed25519.PublicKey, expectedKey Key, r *http.Request) (VerifyResult, VerifyState, error) {
+	cookie, err := r.Cookie(utils.CookiePrefix + reg.Name)
+	if err != nil {
+		return VerifyResultNone, VerifyStateNone, err
+	}
+	if cookie == nil {
+		return VerifyResultNone, VerifyStateNone, http.ErrNoCookie
+	}
+
+	token, err := jwt.ParseSigned(cookie.Value, []jose.SignatureAlgorithm{jose.EdDSA})
+	if err != nil {
+		return VerifyResultFail, VerifyStateNone, err
+	}
+
+	var i Token
+	err = token.Claims(publicKey, &i)
+	if err != nil {
+		return VerifyResultFail, VerifyStateNone, err
+	}
+
+	if i.Name != reg.Name {
+		return VerifyResultFail, VerifyStateNone, errors.New("token invalid name")
+	}
+	if i.Expiry.Time().Compare(time.Now()) < 0 {
+		return VerifyResultFail, VerifyStateNone, ErrTokenExpired
+	}
+	if i.NotBefore.Time().Compare(time.Now()) > 0 {
+		return VerifyResultFail, VerifyStateNone, errors.New("token not valid yet")
+	}
+
+	if bytes.Compare(expectedKey[:], i.Key) != 0 {
+		return VerifyResultFail, VerifyStateNone, ErrVerifyKeyMismatch
+	}
+
+	if reg.Verify != nil {
+		if rand.Float64() < reg.VerifyProbability {
+			// random spot check
+			if ok, err := reg.Verify(expectedKey, i.Result, r); err != nil {
+				return VerifyResultFail, VerifyStateFull, err
+			} else if ok == VerifyResultNotOK {
+				return VerifyResultNotOK, VerifyStateFull, nil
+			} else if !ok.Ok() {
+				return ok, VerifyStateFull, ErrVerifyVerifyMismatch
+			} else {
+				return ok, VerifyStateFull, nil
+			}
+		}
+	}
+
+	if !i.Ok {
+		return VerifyResultNotOK, VerifyStateBrief, nil
+	}
+	return VerifyResultOK, VerifyStateBrief, nil
+}
+
+type FillRegistration func(state StateInterface, reg *Registration, parameters ast.Node) error
+
+var Runtimes = make(map[string]FillRegistration)
diff --git a/lib/challenge/resource-load/resource-load.go b/lib/challenge/resource-load/resource-load.go
new file mode 100644
index 0000000..0fb632a
--- /dev/null
+++ b/lib/challenge/resource-load/resource-load.go
@@ -0,0 +1,55 @@
+package resource_load
+
+import (
+	"fmt"
+	"git.gammaspectra.live/git/go-away/lib/challenge"
+	"github.com/goccy/go-yaml/ast"
+	"html/template"
+	"net/http"
+	"time"
+)
+
+func init() {
+	challenge.Runtimes["resource-load"] = FillRegistrationHeader
+}
+
+func FillRegistrationHeader(state challenge.StateInterface, reg *challenge.Registration, parameters ast.Node) error {
+	reg.Class = challenge.ClassBlocking
+
+	verifier, issuer := challenge.NewKeyVerifier()
+	reg.Verify = verifier
+
+	reg.IssueChallenge = func(w http.ResponseWriter, r *http.Request, key challenge.Key, expiry time.Time) challenge.VerifyResult {
+		uri, err := challenge.VerifyUrl(r, reg, issuer(key))
+		if err != nil {
+			return challenge.VerifyResultFail
+		}
+
+		// self redirect!
+		//TODO: adjust deadline
+		w.Header().Set("Refresh", "2; url="+r.URL.String())
+
+		state.ChallengePage(w, r, state.Settings().ChallengeResponseCode, reg, map[string]any{
+			"HeaderTags": []template.HTML{
+				template.HTML(fmt.Sprintf("<link href=\"%s\" rel=\"stylesheet\" crossorigin=\"use-credentials\">", uri.String())),
+			},
+		})
+		return challenge.VerifyResultNone
+	}
+
+	mux := http.NewServeMux()
+
+	mux.HandleFunc("GET "+reg.Path+challenge.VerifyChallengeUrlSuffix, challenge.VerifyHandlerFunc(state, reg, nil, func(state challenge.StateInterface, data *challenge.RequestData, w http.ResponseWriter, r *http.Request, verifyResult challenge.VerifyResult, err error, redirect string) {
+		//TODO: add other types inside css that need to be loaded!
+		w.Header().Set("Content-Type", "text/css; charset=utf-8")
+		w.Header().Set("Content-Length", "0")
+		if !verifyResult.Ok() {
+			w.WriteHeader(http.StatusForbidden)
+		} else {
+			w.WriteHeader(http.StatusOK)
+		}
+	}))
+	reg.Handler = mux
+
+	return nil
+}
diff --git a/lib/challenge/script.go b/lib/challenge/script.go
new file mode 100644
index 0000000..14849c5
--- /dev/null
+++ b/lib/challenge/script.go
@@ -0,0 +1,41 @@
+package challenge
+
+import (
+	_ "embed"
+	"encoding/json"
+	"git.gammaspectra.live/git/go-away/utils"
+	"net/http"
+	"text/template"
+)
+
+//go:embed script.mjs
+var scriptData []byte
+
+var scriptTemplate = template.Must(template.New("script.mjs").Parse(string(scriptData)))
+
+func ServeChallengeScript(w http.ResponseWriter, r *http.Request, reg *Registration, params any, script string) {
+	data := RequestDataFromContext(r.Context())
+	w.Header().Set("Cache-Control", "no-cache, no-store, must-revalidate")
+	w.Header().Set("Content-Type", "text/javascript; charset=utf-8")
+
+	paramData, err := json.Marshal(params)
+	if err != nil {
+		//TODO: log
+		panic(err)
+	}
+
+	w.WriteHeader(http.StatusOK)
+
+	err = scriptTemplate.Execute(w, map[string]any{
+		"Id":              data.Id.String(),
+		"Path":            reg.Path,
+		"Parameters":      paramData,
+		"Random":          utils.CacheBust(),
+		"Challenge":       reg.Name,
+		"ChallengeScript": script,
+	})
+	if err != nil {
+		//TODO: log
+		panic(err)
+	}
+}
diff --git a/embed/templates/challenge.mjs b/lib/challenge/script.mjs
similarity index 89%
rename from embed/templates/challenge.mjs
rename to lib/challenge/script.mjs
index 7c1e649..3c74ff2 100644
--- a/embed/templates/challenge.mjs
+++ b/lib/challenge/script.mjs
@@ -54,10 +54,11 @@ const u = (url = "", params = {}) => {
         setTimeout(() => {
             const redir = window.location.href;
             window.location.href = u("{{ .Path }}/verify-challenge", {
-                result: result,
-                redirect: redir,
-                requestId: "{{ .Id }}",
-                elapsedTime: t1 - t0,
+                __goaway_token: result,
+                __goaway_challenge: "{{ .Challenge }}",
+                __goaway_redirect: redir,
+                __goaway_id: "{{ .Id }}",
+                __goaway_elapsedTime: t1 - t0,
             });
         }, 500);
     } catch (err) {
diff --git a/lib/challenge/state.go b/lib/challenge/state.go
deleted file mode 100644
index e319c81..0000000
--- a/lib/challenge/state.go
+++ /dev/null
@@ -1,176 +0,0 @@
-package challenge
-
-import (
-	"bytes"
-	"crypto/ed25519"
-	"errors"
-	"git.gammaspectra.live/git/go-away/utils"
-	"github.com/go-jose/go-jose/v4"
-	"github.com/go-jose/go-jose/v4/jwt"
-	"github.com/google/cel-go/cel"
-	"math/rand/v2"
-	"net/http"
-	"time"
-)
-
-type Result int
-
-const (
-	// ResultStop Stop testing other challenges and return
-	ResultStop = Result(iota)
-	// ResultContinue Test next
-	ResultContinue
-	// ResultPass  passed, return and proxy
-	ResultPass
-)
-
-type Id int
-
-type Challenge struct {
-	Id      Id
-	Program cel.Program
-	Name    string
-	Path    string
-
-	Verify            func(key []byte, result string, r *http.Request) (bool, error)
-	VerifyProbability float64
-
-	ServeStatic http.Handler
-
-	ServeChallenge func(w http.ResponseWriter, r *http.Request, key []byte, expiry time.Time) Result
-
-	ServeScript     http.Handler
-	ServeScriptPath string
-
-	ServeMakeChallenge   http.Handler
-	ServeVerifyChallenge http.Handler
-}
-
-type Token struct {
-	Name   string `json:"name"`
-	Key    []byte `json:"key"`
-	Result []byte `json:"result,omitempty"`
-
-	Expiry    *jwt.NumericDate `json:"exp,omitempty"`
-	NotBefore *jwt.NumericDate `json:"nbf,omitempty"`
-	IssuedAt  *jwt.NumericDate `json:"iat,omitempty"`
-}
-
-func (c Challenge) IssueChallengeToken(privateKey ed25519.PrivateKey, key, result []byte, until time.Time) (token string, err error) {
-	signer, err := jose.NewSigner(jose.SigningKey{
-		Algorithm: jose.EdDSA,
-		Key:       privateKey,
-	}, nil)
-	if err != nil {
-		return "", err
-	}
-
-	expiry := jwt.NumericDate(until.Unix())
-	notBefore := jwt.NumericDate(time.Now().UTC().AddDate(0, 0, -1).Unix())
-	issuedAt := jwt.NumericDate(time.Now().UTC().Unix())
-
-	token, err = jwt.Signed(signer).Claims(Token{
-		Name:      c.Name,
-		Key:       key,
-		Result:    result,
-		Expiry:    &expiry,
-		NotBefore: &notBefore,
-		IssuedAt:  &issuedAt,
-	}).Serialize()
-	if err != nil {
-		return "", err
-	}
-	return token, nil
-}
-
-type VerifyResult int
-
-const (
-	VerifyResultNONE = VerifyResult(iota)
-	VerifyResultFAIL
-	VerifyResultSKIP
-
-	// VerifyResultPASS Client just passed this challenge
-	VerifyResultPASS
-	VerifyResultOK
-	VerifyResultBRIEF
-	VerifyResultFULL
-)
-
-func (r VerifyResult) Ok() bool {
-	return r >= VerifyResultPASS
-}
-
-func (r VerifyResult) String() string {
-	switch r {
-	case VerifyResultNONE:
-		return "NONE"
-	case VerifyResultFAIL:
-		return "FAIL"
-	case VerifyResultSKIP:
-		return "SKIP"
-	case VerifyResultPASS:
-		return "PASS"
-	case VerifyResultOK:
-		return "OK"
-	case VerifyResultBRIEF:
-		return "BRIEF"
-	case VerifyResultFULL:
-		return "FULL"
-	default:
-		panic("unsupported")
-	}
-}
-
-var ErrVerifyKeyMismatch = errors.New("verify: key mismatch")
-var ErrVerifyVerifyMismatch = errors.New("verify: verification mismatch")
-
-func (c Challenge) VerifyChallengeToken(publicKey ed25519.PublicKey, expectedKey []byte, r *http.Request) (VerifyResult, error) {
-	cookie, err := r.Cookie(utils.CookiePrefix + c.Name)
-	if err != nil {
-		return VerifyResultNONE, err
-	}
-	if cookie == nil {
-		return VerifyResultNONE, http.ErrNoCookie
-	}
-
-	token, err := jwt.ParseSigned(cookie.Value, []jose.SignatureAlgorithm{jose.EdDSA})
-	if err != nil {
-		return VerifyResultFAIL, err
-	}
-
-	var i Token
-	err = token.Claims(publicKey, &i)
-	if err != nil {
-		return VerifyResultFAIL, err
-	}
-
-	if i.Name != c.Name {
-		return VerifyResultFAIL, errors.New("token invalid name")
-	}
-	if i.Expiry == nil && i.Expiry.Time().Compare(time.Now()) < 0 {
-		return VerifyResultFAIL, errors.New("token expired")
-	}
-	if i.NotBefore == nil && i.NotBefore.Time().Compare(time.Now()) > 0 {
-		return VerifyResultFAIL, errors.New("token not valid yet")
-	}
-
-	if bytes.Compare(expectedKey, i.Key) != 0 {
-		return VerifyResultFAIL, ErrVerifyKeyMismatch
-	}
-
-	if c.Verify != nil {
-		if rand.Float64() < c.VerifyProbability {
-			// random spot check
-			if ok, err := c.Verify(expectedKey, string(i.Result), r); err != nil {
-				return VerifyResultFAIL, err
-			} else if !ok {
-				return VerifyResultFAIL, ErrVerifyVerifyMismatch
-			}
-			return VerifyResultFULL, nil
-		} else {
-			return VerifyResultBRIEF, nil
-		}
-	}
-	return VerifyResultOK, nil
-}
diff --git a/lib/challenge/types.go b/lib/challenge/types.go
new file mode 100644
index 0000000..c5e343d
--- /dev/null
+++ b/lib/challenge/types.go
@@ -0,0 +1,112 @@
+package challenge
+
+import (
+	"crypto/ed25519"
+	"git.gammaspectra.live/git/go-away/lib/policy"
+	"github.com/google/cel-go/cel"
+	"log/slog"
+	"net/http"
+)
+
+type Id int64
+
+type Class uint8
+
+const (
+	// ClassTransparent Transparent challenges work inline in the execution process.
+	// These can pass or continue, so more challenges or requests can ve served afterward.
+	ClassTransparent = Class(iota)
+
+	// ClassBlocking Blocking challenges must serve a different response to challenge the requester.
+	// These can pass or stop, for example, due to serving a challenge
+	ClassBlocking
+)
+
+type VerifyState uint8
+
+const (
+	VerifyStateNone = VerifyState(iota)
+	// VerifyStatePass Challenge was just passed on this request
+	VerifyStatePass
+	// VerifyStateBrief Challenge token was verified but didn't check the challenge
+	VerifyStateBrief
+	// VerifyStateFull Challenge token was verified and challenge verification was done
+	VerifyStateFull
+)
+
+func (r VerifyState) String() string {
+	switch r {
+	case VerifyStatePass:
+		return "PASS"
+	case VerifyStateBrief:
+		return "BRIEF"
+	case VerifyStateFull:
+		return "FULL"
+	default:
+		panic("unsupported")
+	}
+}
+
+type VerifyResult uint8
+
+const (
+	// VerifyResultNone A negative pass result, without a token
+	VerifyResultNone = VerifyResult(iota)
+	// VerifyResultFail A negative pass result, with an invalid token
+	VerifyResultFail
+	// VerifyResultSkip Challenge was skipped due to precondition
+	VerifyResultSkip
+	// VerifyResultNotOK A negative pass result, with a valid token
+	VerifyResultNotOK
+
+	// VerifyResultOK A positive pass result, with a valid token
+	VerifyResultOK
+)
+
+func (r VerifyResult) Ok() bool {
+	return r >= VerifyResultOK
+}
+
+func (r VerifyResult) String() string {
+	switch r {
+	case VerifyResultNone:
+		return "None"
+	case VerifyResultFail:
+		return "Fail"
+	case VerifyResultSkip:
+		return "Skip"
+	case VerifyResultNotOK:
+		return "NotOK"
+	case VerifyResultOK:
+		return "OK"
+	default:
+		panic("unsupported")
+	}
+}
+
+type StateInterface interface {
+	ProgramEnv() *cel.Env
+
+	Client() *http.Client
+	PrivateKey() ed25519.PrivateKey
+	PublicKey() ed25519.PublicKey
+
+	UrlPath() string
+
+	ChallengeFailed(r *http.Request, reg *Registration, err error, redirect string, logger *slog.Logger)
+	ChallengePassed(r *http.Request, reg *Registration, redirect string, logger *slog.Logger)
+	ChallengeIssued(r *http.Request, reg *Registration, redirect string, logger *slog.Logger)
+
+	Logger(r *http.Request) *slog.Logger
+
+	ChallengePage(w http.ResponseWriter, r *http.Request, status int, reg *Registration, params map[string]any)
+	ErrorPage(w http.ResponseWriter, r *http.Request, status int, err error, redirect string)
+
+	GetChallenge(id Id) (*Registration, bool)
+	GetChallengeByName(name string) (*Registration, bool)
+	GetChallenges() Register
+
+	Settings() policy.Settings
+
+	GetBackend(host string) http.Handler
+}
diff --git a/lib/challenge/wasm/interface/interface.go b/lib/challenge/wasm/interface/interface.go
index 4630ca6..edd4648 100644
--- a/lib/challenge/wasm/interface/interface.go
+++ b/lib/challenge/wasm/interface/interface.go
@@ -111,6 +111,7 @@ type VerifyChallengeInput struct {
 
 type VerifyChallengeOutput uint64
 
+// TODO: expand allowed values
 const (
 	VerifyChallengeOutputOK = VerifyChallengeOutput(iota)
 	VerifyChallengeOutputFailed
diff --git a/lib/challenge/wasm/registration.go b/lib/challenge/wasm/registration.go
new file mode 100644
index 0000000..0aff07f
--- /dev/null
+++ b/lib/challenge/wasm/registration.go
@@ -0,0 +1,186 @@
+package wasm
+
+import (
+	"codeberg.org/meta/gzipped/v2"
+	"context"
+	"errors"
+	"fmt"
+	"git.gammaspectra.live/git/go-away/embed"
+	"git.gammaspectra.live/git/go-away/lib/challenge"
+	_interface "git.gammaspectra.live/git/go-away/lib/challenge/wasm/interface"
+	"git.gammaspectra.live/git/go-away/utils"
+	"git.gammaspectra.live/git/go-away/utils/inline"
+	"github.com/goccy/go-yaml"
+	"github.com/goccy/go-yaml/ast"
+	"github.com/tetratelabs/wazero/api"
+	"html/template"
+	"io"
+	"io/fs"
+	"net/http"
+	"path"
+	"time"
+)
+
+func init() {
+	challenge.Runtimes["js"] = FillJavaScriptRegistration
+}
+
+type Parameters struct {
+	Path string `yaml:"path"`
+	// Loader path to js/mjs file to use as challenge issuer
+	Loader string `yaml:"js-loader"`
+
+	// Runtime path to WASM wasip1 runtime
+	Runtime string `yaml:"wasm-runtime"`
+
+	Settings map[string]string `yaml:"wasm-runtime-settings"`
+
+	NativeCompiler bool `yaml:"wasm-native-compiler"`
+
+	VerifyProbability float64 `yaml:"verify-probability"`
+}
+
+var DefaultParameters = Parameters{
+	VerifyProbability: 0.1,
+	NativeCompiler:    true,
+}
+
+func FillJavaScriptRegistration(state challenge.StateInterface, reg *challenge.Registration, parameters ast.Node) error {
+	params := DefaultParameters
+
+	if parameters != nil {
+		ymlData, err := parameters.MarshalYAML()
+		if err != nil {
+			return err
+		}
+		err = yaml.Unmarshal(ymlData, &params)
+		if err != nil {
+			return err
+		}
+	}
+
+	reg.Class = challenge.ClassBlocking
+
+	mux := http.NewServeMux()
+
+	if params.Path == "" {
+		params.Path = reg.Name
+	}
+
+	assetsFs, err := embed.GetFallbackFS(embed.ChallengeFs, params.Path)
+	if err != nil {
+		return err
+	}
+
+	if params.VerifyProbability <= 0 {
+		//10% default
+		params.VerifyProbability = 0.1
+	} else if params.VerifyProbability > 1.0 {
+		params.VerifyProbability = 1.0
+	}
+
+	reg.VerifyProbability = params.VerifyProbability
+
+	ob := NewRunner(params.NativeCompiler)
+	reg.Object = ob
+
+	wasmData, err := assetsFs.ReadFile(path.Join("runtime", params.Runtime))
+	if err != nil {
+		return fmt.Errorf("could not load runtime: %w", err)
+	}
+
+	err = ob.Compile("runtime", wasmData)
+	if err != nil {
+		return fmt.Errorf("compiling runtime: %w", err)
+	}
+
+	reg.IssueChallenge = func(w http.ResponseWriter, r *http.Request, key challenge.Key, expiry time.Time) challenge.VerifyResult {
+		state.ChallengePage(w, r, state.Settings().ChallengeResponseCode, reg, map[string]any{
+			"EndTags": []template.HTML{
+				template.HTML(fmt.Sprintf("<script async type=\"module\" src=\"%s?cacheBust=%s\"></script>", reg.Path+"/script.mjs", utils.CacheBust())),
+			},
+		})
+		return challenge.VerifyResultNone
+	}
+
+	reg.Verify = func(key challenge.Key, token []byte, r *http.Request) (challenge.VerifyResult, error) {
+		var ok bool
+		err = ob.Instantiate("runtime", func(ctx context.Context, mod api.Module) (err error) {
+			in := _interface.VerifyChallengeInput{
+				Key:        key[:],
+				Parameters: params.Settings,
+				Result:     token,
+			}
+
+			out, err := VerifyChallengeCall(ctx, mod, in)
+			if err != nil {
+				return err
+			}
+
+			if out == _interface.VerifyChallengeOutputError {
+				return errors.New("error checking challenge")
+			}
+			ok = out == _interface.VerifyChallengeOutputOK
+			return nil
+		})
+		if err != nil {
+			return challenge.VerifyResultFail, err
+		}
+		if ok {
+			return challenge.VerifyResultOK, nil
+		}
+		return challenge.VerifyResultFail, nil
+	}
+
+	// serve assets if existent
+	if staticFs, err := fs.Sub(assetsFs, "static"); err != nil {
+		return fmt.Errorf("no static assets: %w", err)
+	} else {
+		mux.Handle("GET "+reg.Path+"/static/", http.StripPrefix(reg.Path+"/static/", gzipped.FileServer(gzipped.FS(staticFs))))
+	}
+
+	mux.HandleFunc(reg.Path+challenge.MakeChallengeUrlSuffix, func(w http.ResponseWriter, r *http.Request) {
+		data := challenge.RequestDataFromContext(r.Context())
+		err := ob.Instantiate("runtime", func(ctx context.Context, mod api.Module) (err error) {
+			key := challenge.GetChallengeKeyForRequest(state, reg, data.Expiration(reg.Duration), r)
+
+			in := _interface.MakeChallengeInput{
+				Key:        key[:],
+				Parameters: params.Settings,
+				Headers:    inline.MIMEHeader(r.Header),
+			}
+			in.Data, err = io.ReadAll(r.Body)
+			if err != nil {
+				return err
+			}
+
+			out, err := MakeChallengeCall(ctx, mod, in)
+			if err != nil {
+				return err
+			}
+
+			// set output headers
+			for k, v := range out.Headers {
+				w.Header()[k] = v
+			}
+			w.Header().Set("Content-Length", fmt.Sprintf("%d", len(out.Data)))
+			w.WriteHeader(out.Code)
+			_, _ = w.Write(out.Data)
+			return nil
+		})
+		if err != nil {
+			state.ErrorPage(w, r, http.StatusInternalServerError, err, "")
+			return
+		}
+	})
+
+	mux.HandleFunc(reg.Path+challenge.VerifyChallengeUrlSuffix, challenge.VerifyHandlerFunc(state, reg, nil, nil))
+
+	mux.HandleFunc("GET "+reg.Path+"/script.mjs", func(w http.ResponseWriter, r *http.Request) {
+		challenge.ServeChallengeScript(w, r, reg, params.Settings, path.Join(reg.Path, "static", params.Loader))
+	})
+
+	reg.Handler = mux
+
+	return nil
+}
diff --git a/lib/challenge/wasm/runner.go b/lib/challenge/wasm/runner.go
index 7c74fae..33a43c0 100644
--- a/lib/challenge/wasm/runner.go
+++ b/lib/challenge/wasm/runner.go
@@ -94,11 +94,13 @@ func (r *Runner) Compile(key string, binary []byte) error {
 	return nil
 }
 
-func (r *Runner) Close() {
+func (r *Runner) Close() error {
 	for _, module := range r.modules {
-		module.Close(r.context)
+		if err := module.Close(r.context); err != nil {
+			return err
+		}
 	}
-	r.runtime.Close(r.context)
+	return r.runtime.Close(r.context)
 }
 
 var ErrModuleNotFound = errors.New("module not found")
diff --git a/lib/condition/condition.go b/lib/condition/condition.go
index afcd21a..44f38c5 100644
--- a/lib/condition/condition.go
+++ b/lib/condition/condition.go
@@ -3,6 +3,12 @@ package condition
 import (
 	"fmt"
 	"github.com/google/cel-go/cel"
+	"github.com/google/cel-go/common/types"
+	"github.com/google/cel-go/common/types/ref"
+	"github.com/google/cel-go/ext"
+	"github.com/yl2chen/cidranger"
+	"log/slog"
+	"net"
 	"strings"
 )
 
@@ -15,6 +21,124 @@ const (
 	OperatorAnd = "&&"
 )
 
+func NewRulesEnvironment(networks map[string]cidranger.Ranger) (*cel.Env, error) {
+
+	return cel.NewEnv(
+		ext.Strings(
+			ext.StringsLocale("en_US"),
+			ext.StringsValidateFormatCalls(true),
+		),
+		cel.DefaultUTCTimeZone(true),
+		//TODO: custom type for remoteAddress
+		cel.Variable("remoteAddress", cel.BytesType),
+		cel.Variable("host", cel.StringType),
+		cel.Variable("method", cel.StringType),
+		cel.Variable("userAgent", cel.StringType),
+		cel.Variable("path", cel.StringType),
+		cel.Variable("query", cel.MapType(cel.StringType, cel.StringType)),
+		cel.Variable("fp", cel.MapType(cel.StringType, cel.StringType)),
+		// http.Header
+		cel.Variable("headers", cel.MapType(cel.StringType, cel.StringType)),
+		//TODO: dynamic type?
+		cel.Function("inDNSBL",
+			cel.Overload("inDNSBL_ip",
+				[]*cel.Type{cel.AnyType},
+				cel.BoolType,
+				cel.UnaryBinding(func(val ref.Val) ref.Val {
+					slog.Error("inDNSBL function has been deprecated, replace with dnsbl challenge")
+					return types.Bool(false)
+				}),
+			),
+		),
+		cel.Function("network",
+			cel.MemberOverload("netIP_network_string",
+				[]*cel.Type{cel.BytesType, cel.StringType},
+				cel.BoolType,
+				cel.BinaryBinding(func(lhs ref.Val, rhs ref.Val) ref.Val {
+					var ip net.IP
+					switch v := lhs.Value().(type) {
+					case []byte:
+						ip = v
+					case net.IP:
+						ip = v
+					}
+
+					if ip == nil {
+						panic(fmt.Errorf("invalid ip %v", lhs.Value()))
+					}
+
+					val, ok := rhs.Value().(string)
+					if !ok {
+						panic(fmt.Errorf("invalid network value %v", rhs.Value()))
+					}
+
+					network, ok := networks[val]
+					if !ok {
+						_, ipNet, err := net.ParseCIDR(val)
+						if err != nil {
+							panic("network not found")
+						}
+						return types.Bool(ipNet.Contains(ip))
+					} else {
+						ok, err := network.Contains(ip)
+						if err != nil {
+							panic(err)
+						}
+						return types.Bool(ok)
+					}
+				}),
+			),
+		),
+
+		cel.Function("inNetwork",
+			cel.Overload("inNetwork_string_ip",
+				[]*cel.Type{cel.StringType, cel.BytesType},
+				cel.BoolType,
+				cel.BinaryBinding(func(lhs ref.Val, rhs ref.Val) ref.Val {
+					var ip net.IP
+					switch v := rhs.Value().(type) {
+					case []byte:
+						ip = v
+					case net.IP:
+						ip = v
+					}
+
+					if ip == nil {
+						panic(fmt.Errorf("invalid ip %v", rhs.Value()))
+					}
+
+					val, ok := lhs.Value().(string)
+					if !ok {
+						panic(fmt.Errorf("invalid value %v", lhs.Value()))
+					}
+					slog.Debug(fmt.Sprintf("inNetwork function has been deprecated and will be removed in a future release, use remoteAddress.network(\"%s\") instead", val))
+
+					network, ok := networks[val]
+					if !ok {
+						_, ipNet, err := net.ParseCIDR(val)
+						if err != nil {
+							panic("network not found")
+						}
+						return types.Bool(ipNet.Contains(ip))
+					} else {
+						ok, err := network.Contains(ip)
+						if err != nil {
+							panic(err)
+						}
+						return types.Bool(ok)
+					}
+				}),
+			),
+		),
+	)
+}
+
+func Program(env *cel.Env, ast *cel.Ast) (cel.Program, error) {
+	return env.Program(ast,
+		cel.EvalOptions(cel.OptOptimize),
+	)
+}
+
 func FromStrings(env *cel.Env, operator string, conditions ...string) (*cel.Ast, error) {
 	var asts []*cel.Ast
 	for _, c := range conditions {
diff --git a/lib/condition/map.go b/lib/condition/map.go
new file mode 100644
index 0000000..cf94931
--- /dev/null
+++ b/lib/condition/map.go
@@ -0,0 +1,158 @@
+package condition
+
+import (
+	"fmt"
+	"github.com/google/cel-go/common/types"
+	"github.com/google/cel-go/common/types/ref"
+	"github.com/google/cel-go/common/types/traits"
+	"net/textproto"
+	"reflect"
+	"strings"
+)
+
+type mimeLike struct {
+	m textproto.MIMEHeader
+}
+
+func (a mimeLike) ConvertToNative(typeDesc reflect.Type) (any, error) {
+	return nil, fmt.Errorf("type conversion error from map to '%v'", typeDesc)
+}
+
+func (a mimeLike) ConvertToType(typeVal ref.Type) ref.Val {
+	switch typeVal {
+	case types.MapType:
+		return a
+	case types.TypeType:
+		return types.MapType
+	}
+	return types.NewErr("type conversion error from '%s' to '%s'", types.MapType, typeVal)
+}
+
+func (a mimeLike) Equal(other ref.Val) ref.Val {
+	return types.Bool(false)
+}
+
+func (a mimeLike) Type() ref.Type {
+	return types.MapType
+}
+
+func (a mimeLike) Value() any {
+	return a.m
+}
+
+func (a mimeLike) Contains(key ref.Val) ref.Val {
+	_, found := a.Find(key)
+	return types.Bool(found)
+}
+
+func (a mimeLike) Get(key ref.Val) ref.Val {
+	v, found := a.Find(key)
+	if !found {
+		return types.ValOrErr(v, "no such key: %v", key)
+	}
+	return v
+}
+
+func (a mimeLike) Iterator() traits.Iterator {
+	panic("implement me")
+}
+
+func (a mimeLike) IsZeroValue() bool {
+	return len(a.m) == 0
+}
+
+func (a mimeLike) Size() ref.Val {
+	return types.Int(len(a.m))
+}
+
+func (a mimeLike) Find(key ref.Val) (ref.Val, bool) {
+	k, ok := key.(types.String)
+	if !ok {
+		return nil, false
+	}
+
+	return singleVal(a.m.Values(string(k)), true)
+}
+
+type valuesLike struct {
+	m map[string][]string
+}
+
+func (a valuesLike) ConvertToNative(typeDesc reflect.Type) (any, error) {
+	return nil, fmt.Errorf("type conversion error from map to '%v'", typeDesc)
+}
+
+func (a valuesLike) ConvertToType(typeVal ref.Type) ref.Val {
+	switch typeVal {
+	case types.MapType:
+		return a
+	case types.TypeType:
+		return types.MapType
+	}
+	return types.NewErr("type conversion error from '%s' to '%s'", types.MapType, typeVal)
+}
+
+func (a valuesLike) Equal(other ref.Val) ref.Val {
+	return types.Bool(false)
+}
+
+func (a valuesLike) Type() ref.Type {
+	return types.MapType
+}
+
+func (a valuesLike) Value() any {
+	return a.m
+}
+
+func (a valuesLike) Contains(key ref.Val) ref.Val {
+	_, found := a.Find(key)
+	return types.Bool(found)
+}
+
+func (a valuesLike) Get(key ref.Val) ref.Val {
+	v, found := a.Find(key)
+	if !found {
+		return types.ValOrErr(v, "no such key: %v", key)
+	}
+	return v
+}
+
+func (a valuesLike) Iterator() traits.Iterator {
+	panic("implement me")
+}
+
+func (a valuesLike) IsZeroValue() bool {
+	return len(a.m) == 0
+}
+
+func (a valuesLike) Size() ref.Val {
+	return types.Int(len(a.m))
+}
+
+func (a valuesLike) Find(key ref.Val) (ref.Val, bool) {
+	k, ok := key.(types.String)
+	if !ok {
+		return nil, false
+	}
+
+	val, ok := a.m[string(k)]
+	return singleVal(val, ok)
+}
+
+func singleVal(values []string, ok bool) (ref.Val, bool) {
+	if len(values) == 0 || !ok {
+		return nil, false
+	}
+	if len(values) > 1 {
+		return types.String(strings.Join(values, ",")), true
+	}
+	return types.String(values[0]), true
+}
+
+func NewMIMEMap(m textproto.MIMEHeader) traits.Mapper {
+	return mimeLike{m: m}
+}
+
+func NewValuesMap(m map[string][]string) traits.Mapper {
+	return mimeLike{m: m}
+}
diff --git a/lib/conditions.go b/lib/conditions.go
index 26a37b2..7916832 100644
--- a/lib/conditions.go
+++ b/lib/conditions.go
@@ -1,118 +1,11 @@
 package lib
 
 import (
-	"context"
-	"fmt"
-	"github.com/google/cel-go/cel"
-	"github.com/google/cel-go/common/types"
-	"github.com/google/cel-go/common/types/ref"
-	"log/slog"
-	"net"
-	"time"
+	"git.gammaspectra.live/git/go-away/lib/condition"
 )
 
 func (state *State) initConditions() (err error) {
-	state.RulesEnv, err = cel.NewEnv(
-		cel.DefaultUTCTimeZone(true),
-		cel.Variable("remoteAddress", cel.BytesType),
-		cel.Variable("host", cel.StringType),
-		cel.Variable("method", cel.StringType),
-		cel.Variable("userAgent", cel.StringType),
-		cel.Variable("path", cel.StringType),
-		cel.Variable("query", cel.MapType(cel.StringType, cel.StringType)),
-		cel.Variable("fpJA3N", cel.StringType),
-		cel.Variable("fpJA4", cel.StringType),
-		// http.Header
-		cel.Variable("headers", cel.MapType(cel.StringType, cel.StringType)),
-		//TODO: dynamic type?
-		cel.Function("inDNSBL",
-			cel.Overload("inDNSBL_ip",
-				[]*cel.Type{cel.AnyType},
-				cel.BoolType,
-				cel.UnaryBinding(func(val ref.Val) ref.Val {
-					if state.Settings.DNSBL == nil {
-						return types.Bool(false)
-					}
-
-					var ip net.IP
-					switch v := val.Value().(type) {
-					case []byte:
-						ip = v
-					case net.IP:
-						ip = v
-					case string:
-						ip = net.ParseIP(v)
-					}
-
-					if ip == nil {
-						panic(fmt.Errorf("invalid ip %v", val.Value()))
-					}
-
-					var key [net.IPv6len]byte
-					copy(key[:], ip.To16())
-
-					result, ok := state.DecayMap.Get(key)
-					if ok {
-						return types.Bool(result.Bad())
-					}
-
-					ctx, cancel := context.WithTimeout(context.Background(), time.Second)
-					defer cancel()
-					result, err := state.Settings.DNSBL.Lookup(ctx, ip)
-					if err != nil {
-						slog.Debug("dnsbl lookup failed", "address", ip.String(), "result", result, "err", err)
-					} else {
-						slog.Debug("dnsbl lookup", "address", ip.String(), "result", result)
-					}
-					//TODO: configure decay
-					state.DecayMap.Set(key, result, time.Hour)
-
-					return types.Bool(result.Bad())
-				}),
-			),
-		),
-		cel.Function("inNetwork",
-			cel.Overload("inNetwork_string_ip",
-				[]*cel.Type{cel.StringType, cel.AnyType},
-				cel.BoolType,
-				cel.BinaryBinding(func(lhs ref.Val, rhs ref.Val) ref.Val {
-					var ip net.IP
-					switch v := rhs.Value().(type) {
-					case []byte:
-						ip = v
-					case net.IP:
-						ip = v
-					case string:
-						ip = net.ParseIP(v)
-					}
-
-					if ip == nil {
-						panic(fmt.Errorf("invalid ip %v", rhs.Value()))
-					}
-
-					val, ok := lhs.Value().(string)
-					if !ok {
-						panic(fmt.Errorf("invalid value %v", lhs.Value()))
-					}
-
-					network, ok := state.Networks[val]
-					if !ok {
-						_, ipNet, err := net.ParseCIDR(val)
-						if err != nil {
-							panic("network not found")
-						}
-						return types.Bool(ipNet.Contains(ip))
-					} else {
-						ok, err := network.Contains(ip)
-						if err != nil {
-							panic(err)
-						}
-						return types.Bool(ok)
-					}
-				}),
-			),
-		),
-	)
+	state.programEnv, err = condition.NewRulesEnvironment(state.networks)
 	if err != nil {
 		return err
 	}
diff --git a/lib/http.go b/lib/http.go
index db14f07..9625bb3 100644
--- a/lib/http.go
+++ b/lib/http.go
@@ -1,28 +1,16 @@
 package lib
 
 import (
-	"bytes"
 	"codeberg.org/meta/gzipped/v2"
-	"context"
-	"crypto/rand"
-	"encoding/base64"
-	"encoding/hex"
-	"errors"
 	"fmt"
 	"git.gammaspectra.live/git/go-away/embed"
+	"git.gammaspectra.live/git/go-away/lib/action"
 	"git.gammaspectra.live/git/go-away/lib/challenge"
-	"git.gammaspectra.live/git/go-away/lib/policy"
 	"git.gammaspectra.live/git/go-away/utils"
-	"github.com/google/cel-go/common/types"
 	"html/template"
-	"io"
 	"log/slog"
-	"maps"
-	"net"
 	"net/http"
 	"net/http/pprof"
-	"path"
-	"path/filepath"
 	"strconv"
 	"strings"
 	"time"
@@ -30,20 +18,11 @@ import (
 
 var templates map[string]*template.Template
 
-var cacheBust string
-
-// DefaultValidity TODO: adjust
-const DefaultValidity = time.Hour * 24 * 7
-
 func init() {
 
-	buf := make([]byte, 16)
-	_, _ = rand.Read(buf)
-	cacheBust = base64.RawURLEncoding.EncodeToString(buf)
-
 	templates = make(map[string]*template.Template)
 
-	dir, err := embed.TemplatesFs.ReadDir("templates")
+	dir, err := embed.TemplatesFs.ReadDir(".")
 	if err != nil {
 		panic(err)
 	}
@@ -51,7 +30,7 @@ func init() {
 		if e.IsDir() {
 			continue
 		}
-		data, err := embed.TemplatesFs.ReadFile(filepath.Join("templates", e.Name()))
+		data, err := embed.TemplatesFs.ReadFile(e.Name())
 		if err != nil {
 			panic(err)
 		}
@@ -72,69 +51,16 @@ func initTemplate(name, data string) error {
 	return nil
 }
 
-func (state *State) challengePage(w http.ResponseWriter, id string, status int, challenge string, params map[string]any) error {
-	input := make(map[string]any)
-	input["Id"] = id
-	input["Random"] = cacheBust
-	input["Challenge"] = challenge
-	input["Path"] = state.UrlPath
-	input["Theme"] = state.Settings.ChallengeTemplateTheme
-
-	maps.Copy(input, params)
-
-	if _, ok := input["Title"]; !ok {
-		input["Title"] = "Checking you are not a bot"
-	}
-
-	w.Header().Set("Content-Type", "text/html; charset=utf-8")
-
-	buf := bytes.NewBuffer(make([]byte, 0, 8192))
-
-	err := templates["challenge-"+state.Settings.ChallengeTemplate+".gohtml"].Execute(buf, input)
-	if err != nil {
-		_ = state.errorPage(w, id, http.StatusInternalServerError, err, "")
-	} else {
-		w.WriteHeader(status)
-		_, _ = w.Write(buf.Bytes())
-	}
-	return nil
-}
-
-func (state *State) errorPage(w http.ResponseWriter, id string, status int, err error, redirect string) error {
-	w.Header().Set("Content-Type", "text/html; charset=utf-8")
-
-	buf := bytes.NewBuffer(make([]byte, 0, 8192))
-
-	err2 := templates["challenge-"+state.Settings.ChallengeTemplate+".gohtml"].Execute(buf, map[string]any{
-		"Id":          id,
-		"Random":      cacheBust,
-		"Error":       err.Error(),
-		"Path":        state.UrlPath,
-		"Theme":       state.Settings.ChallengeTemplateTheme,
-		"Title":       "Oh no! " + http.StatusText(status),
-		"HideSpinner": true,
-		"Challenge":   "",
-		"Redirect":    redirect,
-	})
-	if err2 != nil {
-		panic(err2)
-	} else {
-		w.WriteHeader(status)
-		_, _ = w.Write(buf.Bytes())
-	}
-	return nil
-}
-
 func (state *State) addTiming(w http.ResponseWriter, name, desc string, duration time.Duration) {
-	if state.Settings.Debug {
+	if state.Settings().Debug {
 		w.Header().Add("Server-Timing", fmt.Sprintf("%s;desc=%s;dur=%d", name, strconv.Quote(desc), duration.Milliseconds()))
 	}
 }
 
 func GetLoggerForRequest(r *http.Request) *slog.Logger {
-	data := RequestDataFromContext(r.Context())
+	data := challenge.RequestDataFromContext(r.Context())
 	args := []any{
-		"request_id", hex.EncodeToString(data.Id[:]),
+		"request_id", data.Id.String(),
 		"remote_address", data.RemoteAddress.String(),
 		"user_agent", r.UserAgent(),
 		"host", r.Host,
@@ -153,272 +79,95 @@ func GetLoggerForRequest(r *http.Request) *slog.Logger {
 	return slog.With(args...)
 }
 
-func (state *State) logger(r *http.Request) *slog.Logger {
-	return GetLoggerForRequest(r)
-}
-
 func (state *State) handleRequest(w http.ResponseWriter, r *http.Request) {
 	host := r.Host
 
-	data := RequestDataFromContext(r.Context())
+	data := challenge.RequestDataFromContext(r.Context())
 
-	backend, ok := state.Settings.Backends[host]
-	if !ok {
+	backend := state.GetBackend(host)
+	if backend == nil {
 		http.Error(w, http.StatusText(http.StatusServiceUnavailable), http.StatusServiceUnavailable)
 		return
 	}
 
-	lg := state.logger(r)
+	lg := state.Logger(r)
 
-	start := time.Now()
-
-	state.addTiming(w, "rule-env", "Setup the rule environment", time.Since(start))
-
-	var (
-		ruleEvalDuration time.Duration
-	)
-
-	serve := func() {
-		state.addTiming(w, "rule-eval", "Evaluate access rules", ruleEvalDuration)
-		backend.ServeHTTP(w, r)
-	}
-
-	fail := func(code int, err error) {
-		state.addTiming(w, "rule-eval", "Evaluate access rules", ruleEvalDuration)
-		_ = state.errorPage(w, r.Header.Get("X-Away-Id"), code, err, "")
-	}
-
-	setAwayState := func(rule RuleState) {
-		r.Header.Set("X-Away-Rule", rule.Name)
-		r.Header.Set("X-Away-Hash", rule.Hash)
-		r.Header.Set("X-Away-Action", string(rule.Action))
-		data.Headers(state, r.Header)
-	}
-
-	for _, rule := range state.Rules {
-		// skip rules that have host match
-		if rule.Host != nil && *rule.Host != host {
-			continue
+	cleanupRequest := func(r *http.Request, fromChallenge bool) {
+		if fromChallenge {
+			r.Header.Del("Referer")
+		}
+		if ref := r.FormValue(challenge.QueryArgReferer); ref != "" {
+			r.Header.Set("Referer", ref)
 		}
-		start = time.Now()
-		out, _, err := rule.Program.Eval(data.ProgramEnv)
-		ruleEvalDuration += time.Since(start)
 
-		if err != nil {
-			fail(http.StatusInternalServerError, err)
-			lg.Error(err.Error(), "rule", rule.Name, "rule_hash", rule.Hash)
-			panic(err)
-			return
-		} else if out != nil && out.Type() == types.BoolType {
-			if out.Equal(types.True) == types.True {
-				switch rule.Action {
-				default:
-					panic(fmt.Errorf("unknown action %s", rule.Action))
-				case policy.RuleActionPASS:
-					lg.Debug("request passed", "rule", rule.Name, "rule_hash", rule.Hash)
-					setAwayState(rule)
-					serve()
-					return
-				case policy.RuleActionCHALLENGE, policy.RuleActionCHECK:
-					for _, challengeId := range rule.Challenges {
-						if result := data.Challenges[challengeId]; !result.Ok() {
-							continue
-						} else {
-							if rule.Action == policy.RuleActionCHECK {
-								goto nextRule
-							}
-
-							// we passed the challenge!
-							lg.Debug("request passed", "rule", rule.Name, "rule_hash", rule.Hash, "challenge", state.Challenges[challengeId].Name)
-							setAwayState(rule)
-							serve()
-							return
-						}
-					}
-
-					// none matched, issue first challenge in priority
-					for _, challengeId := range rule.Challenges {
-						result := data.Challenges[challengeId]
-						if result.Ok() || result == challenge.VerifyResultSKIP {
-							// skip already ok'd challenges for some reason, and also skip skipped challenges
-							continue
-						}
-						c := state.Challenges[challengeId]
-						if c.ServeChallenge != nil {
-							result := c.ServeChallenge(w, r, state.GetChallengeKeyForRequest(c.Name, data.Expires, r), data.Expires)
-							switch result {
-							case challenge.ResultStop:
-								lg.Info("request challenged", "rule", rule.Name, "rule_hash", rule.Hash, "challenge", c.Name)
-								return
-							case challenge.ResultContinue:
-								continue
-							case challenge.ResultPass:
-								if rule.Action == policy.RuleActionCHECK {
-									goto nextRule
-								}
-								state.logger(r).Warn("challenge passed", "rule", rule.Name, "rule_hash", rule.Hash, "challenge", c.Name)
-
-								// set pass if caller didn't set one
-								if !data.Challenges[c.Id].Ok() {
-									data.Challenges[c.Id] = challenge.VerifyResultPASS
-								}
-
-								// we pass the challenge early!
-								lg.Debug("request passed", "rule", rule.Name, "rule_hash", rule.Hash, "challenge", c.Name)
-								setAwayState(rule)
-								serve()
-								return
-							}
-						} else {
-							panic("challenge not found")
-						}
-					}
-				case policy.RuleActionDENY:
-					lg.Info("request denied", "rule", rule.Name, "rule_hash", rule.Hash)
-					//TODO: config error code
-					fail(http.StatusForbidden, fmt.Errorf("access denied: denied by administrative rule %s/%s", r.Header.Get("X-Away-Id"), rule.Hash))
-					return
-				case policy.RuleActionBLOCK:
-					lg.Info("request blocked", "rule", rule.Name, "rule_hash", rule.Hash)
-					//TODO: config error code
-					//TODO: configure block
-					fail(http.StatusForbidden, fmt.Errorf("access denied: blocked by administrative rule %s/%s", r.Header.Get("X-Away-Id"), rule.Hash))
-					return
-				case policy.RuleActionPOISON:
-					lg.Info("request poisoned", "rule", rule.Name, "rule_hash", rule.Hash)
-
-					mime := "text/html"
-					switch path.Ext(r.URL.Path) {
-					case ".css":
-					case ".json", ".js", ".mjs":
-
-					}
-
-					encodings := strings.Split(r.Header.Get("Accept-Encoding"), ",")
-					for i, encoding := range encodings {
-						encodings[i] = strings.TrimSpace(strings.ToLower(encoding))
-					}
-
-					reader, encoding := state.getPoison(mime, encodings)
-					if reader == nil {
-						mime = "application/octet-stream"
-						reader, encoding = state.getPoison(mime, encodings)
-					}
-
-					if reader != nil {
-						defer reader.Close()
-
-						w.Header().Set("Cache-Control", "max-age=0, private, must-revalidate, no-transform")
-						w.Header().Set("Vary", "Accept-Encoding")
-						w.Header().Set("Content-Type", mime)
-						w.Header().Set("X-Content-Type-Options", "nosniff")
-						if encoding != "" {
-							w.Header().Set("Content-Encoding", encoding)
-						}
-						w.WriteHeader(http.StatusOK)
-						if flusher, ok := w.(http.Flusher); ok {
-							// trigger chunked encoding
-							flusher.Flush()
-						}
-						if r != nil {
-							_, _ = io.Copy(w, reader)
-						}
-					} else {
-						http.Error(w, http.StatusText(http.StatusForbidden), http.StatusForbidden)
-					}
-					return
-				}
+		q := r.URL.Query()
+		// delete query parameters that were set by go-away
+		for k := range q {
+			if strings.HasPrefix(k, challenge.QueryArgPrefix) {
+				q.Del(k)
 			}
 		}
+		r.URL.RawQuery = q.Encode()
 
-	nextRule:
+		data.Headers(r.Header)
+
+		// delete cookies set by go-away to prevent user tracking that way
+		cookies := r.Cookies()
+		r.Header.Del("Cookie")
+		for _, c := range cookies {
+			if !strings.HasPrefix(c.Name, utils.CookiePrefix) {
+				r.AddCookie(c)
+			}
+		}
 	}
 
-	serve()
-	return
+	for _, rule := range state.rules {
+		next, err := rule.Evaluate(lg, w, r, func() http.Handler {
+			cleanupRequest(r, true)
+			return backend
+		})
+		if err != nil {
+			state.ErrorPage(w, r, http.StatusInternalServerError, err, "")
+			panic(err)
+			return
+		}
+
+		if !next {
+			return
+		}
+	}
+
+	// default pass
+	_, _ = action.Pass{}.Handle(lg, w, r, func() http.Handler {
+		r.Header.Set("X-Away-Rule", "DEFAULT")
+		r.Header.Set("X-Away-Action", "PASS")
+
+		cleanupRequest(r, false)
+		return backend
+	})
 }
 
 func (state *State) setupRoutes() error {
 
 	state.Mux.HandleFunc("/", state.handleRequest)
 
-	if state.Settings.Debug {
-		http.HandleFunc(state.UrlPath+"/debug/pprof/", pprof.Index)
-		http.HandleFunc(state.UrlPath+"/debug/pprof/profile", pprof.Profile)
-		http.HandleFunc(state.UrlPath+"/debug/pprof/symbol", pprof.Symbol)
-		http.HandleFunc(state.UrlPath+"/debug/pprof/trace", pprof.Trace)
+	if state.Settings().Debug {
+		//TODO: split this to a different listener, metrics listener
+		http.HandleFunc(state.urlPath+"/debug/pprof/", pprof.Index)
+		http.HandleFunc(state.urlPath+"/debug/pprof/profile", pprof.Profile)
+		http.HandleFunc(state.urlPath+"/debug/pprof/symbol", pprof.Symbol)
+		http.HandleFunc(state.urlPath+"/debug/pprof/trace", pprof.Trace)
 	}
 
-	state.Mux.Handle("GET "+state.UrlPath+"/assets/", http.StripPrefix(state.UrlPath, gzipped.FileServer(gzipped.FS(embed.AssetsFs))))
+	state.Mux.Handle("GET "+state.urlPath+"/assets/", http.StripPrefix(state.UrlPath()+"/assets/", gzipped.FileServer(gzipped.FS(embed.AssetsFs))))
 
-	for _, c := range state.Challenges {
-		if c.ServeStatic != nil {
-			state.Mux.Handle("GET "+c.Path+"/static/", c.ServeStatic)
-		}
+	for _, reg := range state.challenges {
 
-		if c.ServeScript != nil {
-			state.Mux.Handle("GET "+c.ServeScriptPath, c.ServeScript)
-		}
-
-		if c.ServeMakeChallenge != nil {
-			state.Mux.Handle(fmt.Sprintf("POST %s/make-challenge", c.Path), c.ServeMakeChallenge)
-		}
-
-		if c.ServeVerifyChallenge != nil {
-			state.Mux.Handle(fmt.Sprintf("GET %s/verify-challenge", c.Path), c.ServeVerifyChallenge)
-		} else if c.Verify != nil {
-			state.Mux.HandleFunc(fmt.Sprintf("GET %s/verify-challenge", c.Path), func(w http.ResponseWriter, r *http.Request) {
-				redirect, err := utils.EnsureNoOpenRedirect(r.FormValue("redirect"))
-				if redirect == "" {
-					_ = state.errorPage(w, r.Header.Get("X-Away-Id"), http.StatusInternalServerError, err, "")
-					return
-				}
-
-				err = func() (err error) {
-
-					data := RequestDataFromContext(r.Context())
-
-					key := state.GetChallengeKeyForRequest(c.Name, data.Expires, r)
-					result := r.FormValue("result")
-
-					requestId, err := hex.DecodeString(r.FormValue("requestId"))
-					if err == nil {
-						// override
-						r.Header.Set("X-Away-Id", hex.EncodeToString(requestId))
-					}
-
-					start := time.Now()
-					ok, err := c.Verify(key, result, r)
-					state.addTiming(w, "challenge-verify", "Verify client challenge", time.Since(start))
-
-					if err != nil {
-						state.logger(r).Error(fmt.Errorf("challenge error: %w", err).Error(), "challenge", c.Name, "redirect", redirect)
-						return err
-					} else if !ok {
-						state.logger(r).Warn("challenge failed", "challenge", c.Name, "redirect", redirect)
-						utils.ClearCookie(utils.CookiePrefix+c.Name, w)
-						_ = state.errorPage(w, r.Header.Get("X-Away-Id"), http.StatusForbidden, fmt.Errorf("access denied: failed challenge %s", c.Name), redirect)
-						return nil
-					}
-					state.logger(r).Info("challenge passed", "challenge", c.Name, "redirect", redirect)
-
-					token, err := c.IssueChallengeToken(state.privateKey, key, []byte(result), data.Expires)
-					if err != nil {
-						utils.ClearCookie(utils.CookiePrefix+c.Name, w)
-					} else {
-						utils.SetCookie(utils.CookiePrefix+c.Name, token, data.Expires, w)
-					}
-					data.Challenges[c.Id] = challenge.VerifyResultPASS
-
-					http.Redirect(w, r, redirect, http.StatusTemporaryRedirect)
-					return nil
-				}()
-				if err != nil {
-					utils.ClearCookie(utils.CookiePrefix+c.Name, w)
-					_ = state.errorPage(w, r.Header.Get("X-Away-Id"), http.StatusInternalServerError, err, redirect)
-					return
-				}
-			})
+		if reg.Handler != nil {
+			state.Mux.Handle(reg.Path+"/", reg.Handler)
+		} else if reg.Verify != nil {
+			// default verify
+			state.Mux.HandleFunc(reg.Path+challenge.VerifyChallengeUrlSuffix, challenge.VerifyHandlerFunc(state, reg, nil, nil))
 		}
 	}
 
@@ -426,116 +175,12 @@ func (state *State) setupRoutes() error {
 }
 
 func (state *State) ServeHTTP(w http.ResponseWriter, r *http.Request) {
+	r, data := challenge.CreateRequestData(r, state)
 
-	var data RequestData
-	// generate random id, todo: is this fast?
-	_, _ = rand.Read(data.Id[:])
-	data.RemoteAddress = getRequestAddress(r, state.Settings.ClientIpHeader)
-	data.Challenges = make(map[challenge.Id]challenge.VerifyResult, len(state.Challenges))
-	data.Expires = time.Now().UTC().Add(DefaultValidity).Round(DefaultValidity)
+	data.EvaluateChallenges(w, r)
 
-	var ja3n, ja4 string
-	if fp := utils.GetTLSFingerprint(r); fp != nil {
-		if ja3nPtr := fp.JA3N(); ja3nPtr != nil {
-			ja3n = ja3nPtr.String()
-			r.Header.Set("X-TLS-Fingerprint-JA3N", ja3n)
-		}
-		if ja4Ptr := fp.JA4(); ja4Ptr != nil {
-			ja4 = ja4Ptr.String()
-			r.Header.Set("X-TLS-Fingerprint-JA4", ja4)
-		}
-	}
-
-	data.ProgramEnv = map[string]any{
-		"host":          r.Host,
-		"method":        r.Method,
-		"remoteAddress": data.RemoteAddress,
-		"userAgent":     r.UserAgent(),
-		"path":          r.URL.Path,
-		"fpJA3N":        ja3n,
-		"fpJA4":         ja4,
-		"query": func() map[string]string {
-			result := make(map[string]string)
-			for k, v := range r.URL.Query() {
-				result[k] = strings.Join(v, ",")
-			}
-			return result
-		}(),
-		"headers": func() map[string]string {
-			result := make(map[string]string)
-			for k, v := range r.Header {
-				result[k] = strings.Join(v, ",")
-			}
-			return result
-		}(),
-	}
-
-	r = r.WithContext(context.WithValue(r.Context(), "_goaway_data", &data))
-
-	for _, c := range state.Challenges {
-		key := state.GetChallengeKeyForRequest(c.Name, data.Expires, r)
-		result, err := c.VerifyChallengeToken(state.publicKey, key, r)
-		if err != nil && !errors.Is(err, http.ErrNoCookie) {
-			// clear invalid cookie
-			utils.ClearCookie(utils.CookiePrefix+c.Name, w)
-		}
-
-		// prevent the challenge if not solved
-		if !result.Ok() && c.Program != nil {
-			out, _, err := c.Program.Eval(data.ProgramEnv)
-			// verify eligibility
-			if err != nil {
-				state.logger(r).Error(err.Error(), "challenge", c.Name)
-			} else if out != nil && out.Type() == types.BoolType {
-				if out.Equal(types.True) != types.True {
-					// skip challenge match!
-					result = challenge.VerifyResultSKIP
-					continue
-				}
-			}
-		}
-		data.Challenges[c.Id] = result
-	}
-
-	r.Header.Set("X-Away-Id", hex.EncodeToString(data.Id[:]))
-	if state.Settings.BackendIpHeader != "" {
-		r.Header.Del(state.Settings.ClientIpHeader)
-		r.Header.Set(state.Settings.BackendIpHeader, data.RemoteAddress.String())
-	}
+	// TODO: make this configurable!
 	w.Header().Add("Via", fmt.Sprintf("%s %s", r.Proto, "go-away"))
 
-	// send these to client so we consistently get the headers
-	//w.Header().Set("Accept-CH", "Sec-CH-UA, Sec-CH-UA-Platform")
-	//w.Header().Set("Critical-CH", "Sec-CH-UA, Sec-CH-UA-Platform")
-
 	state.Mux.ServeHTTP(w, r)
 }
-
-func RequestDataFromContext(ctx context.Context) *RequestData {
-	return ctx.Value("_goaway_data").(*RequestData)
-}
-
-type RequestData struct {
-	Id            [16]byte
-	ProgramEnv    map[string]any
-	Expires       time.Time
-	Challenges    map[challenge.Id]challenge.VerifyResult
-	RemoteAddress net.IP
-}
-
-func (d *RequestData) HasValidChallenge(id challenge.Id) bool {
-	return d.Challenges[id].Ok()
-}
-
-func (d *RequestData) Headers(state *State, headers http.Header) {
-	for id, result := range d.Challenges {
-		if result.Ok() {
-			c, ok := state.Challenges[id]
-			if !ok {
-				panic("challenge not found")
-			}
-
-			headers.Set(fmt.Sprintf("X-Away-Challenge-%s-Result", c.Name), result.String())
-		}
-	}
-}
diff --git a/lib/interface.go b/lib/interface.go
new file mode 100644
index 0000000..cf5e76e
--- /dev/null
+++ b/lib/interface.go
@@ -0,0 +1,158 @@
+package lib
+
+import (
+	"bytes"
+	"crypto/ed25519"
+	"git.gammaspectra.live/git/go-away/lib/challenge"
+	"git.gammaspectra.live/git/go-away/lib/policy"
+	"git.gammaspectra.live/git/go-away/utils"
+	"github.com/google/cel-go/cel"
+	"log/slog"
+	"maps"
+	"net/http"
+	"strings"
+)
+
+// Defines challenge.StateInterface
+
+var _ challenge.StateInterface
+
+func (state *State) ProgramEnv() *cel.Env {
+	return state.programEnv
+}
+
+func (state *State) Client() *http.Client {
+	return state.client
+}
+
+func (state *State) PrivateKey() ed25519.PrivateKey {
+	return state.privateKey
+}
+
+func (state *State) PublicKey() ed25519.PublicKey {
+	return state.publicKey
+}
+
+func (state *State) UrlPath() string {
+	return state.urlPath
+}
+
+func (state *State) ChallengeFailed(r *http.Request, reg *challenge.Registration, err error, redirect string, logger *slog.Logger) {
+	if logger == nil {
+		logger = state.Logger(r)
+	}
+	logger.Warn("challenge failed", "challenge", reg.Name, "err", err, "redirect", redirect)
+
+	//TODO: metrics
+}
+
+func (state *State) ChallengePassed(r *http.Request, reg *challenge.Registration, redirect string, logger *slog.Logger) {
+	if logger == nil {
+		logger = state.Logger(r)
+	}
+	logger.Warn("challenge passed", "challenge", reg.Name, "redirect", redirect)
+
+	//TODO: metrics
+}
+
+func (state *State) ChallengeIssued(r *http.Request, reg *challenge.Registration, redirect string, logger *slog.Logger) {
+	if logger == nil {
+		logger = state.Logger(r)
+	}
+	logger.Info("challenge issued", "challenge", reg.Name, "redirect", redirect)
+
+	//TODO: metrics
+}
+
+func (state *State) Logger(r *http.Request) *slog.Logger {
+	return GetLoggerForRequest(r)
+}
+
+func (state *State) ChallengePage(w http.ResponseWriter, r *http.Request, status int, reg *challenge.Registration, params map[string]any) {
+	data := challenge.RequestDataFromContext(r.Context())
+	input := make(map[string]any)
+	input["Id"] = data.Id.String()
+	input["Random"] = utils.CacheBust()
+	if reg != nil {
+		input["Challenge"] = reg.Name
+		input["Path"] = state.UrlPath()
+	}
+	input["Theme"] = state.Settings().ChallengeTemplateTheme
+
+	maps.Copy(input, params)
+
+	if _, ok := input["Title"]; !ok {
+		input["Title"] = "Checking you are not a bot"
+	}
+
+	w.Header().Set("Content-Type", "text/html; charset=utf-8")
+
+	buf := bytes.NewBuffer(make([]byte, 0, 8192))
+
+	err := templates["challenge-"+state.Settings().ChallengeTemplate+".gohtml"].Execute(buf, input)
+	if err != nil {
+		state.ErrorPage(w, r, http.StatusInternalServerError, err, "")
+	} else {
+		w.WriteHeader(status)
+		_, _ = w.Write(buf.Bytes())
+	}
+}
+
+func (state *State) ErrorPage(w http.ResponseWriter, r *http.Request, status int, err error, redirect string) {
+	data := challenge.RequestDataFromContext(r.Context())
+	w.Header().Set("Content-Type", "text/html; charset=utf-8")
+
+	buf := bytes.NewBuffer(make([]byte, 0, 8192))
+
+	err2 := templates["challenge-"+state.Settings().ChallengeTemplate+".gohtml"].Execute(buf, map[string]any{
+		"Id":          data.Id.String(),
+		"Random":      utils.CacheBust(),
+		"Error":       err.Error(),
+		"Path":        state.UrlPath(),
+		"Theme":       state.Settings().ChallengeTemplateTheme,
+		"Title":       "Oh no! " + http.StatusText(status),
+		"HideSpinner": true,
+		"Challenge":   "",
+		"Redirect":    redirect,
+	})
+	if err2 != nil {
+		// nested errors!
+		panic(err2)
+	} else {
+		w.WriteHeader(status)
+		_, _ = w.Write(buf.Bytes())
+	}
+}
+
+func (state *State) GetChallenge(id challenge.Id) (*challenge.Registration, bool) {
+	reg, ok := state.challenges.Get(id)
+	return reg, ok
+}
+
+func (state *State) GetChallenges() challenge.Register {
+	return state.challenges
+}
+
+func (state *State) GetChallengeByName(name string) (*challenge.Registration, bool) {
+	reg, _, ok := state.challenges.GetByName(name)
+	return reg, ok
+}
+func (state *State) Settings() policy.Settings {
+	return state.settings
+}
+
+func (state *State) GetBackend(host string) http.Handler {
+	backend, ok := state.Settings().Backends[host]
+	if !ok {
+		// do wildcard match
+		wildcard := "*." + strings.Join(strings.Split(host, ".")[1:], ".")
+		backend, ok = state.Settings().Backends[wildcard]
+
+		if !ok {
+			// return fallback
+			backend = state.Settings().Backends["*"]
+		}
+	}
+	//TODO: dynamic
+	return backend
+}
diff --git a/lib/poison.go b/lib/poison.go
deleted file mode 100644
index f57be01..0000000
--- a/lib/poison.go
+++ /dev/null
@@ -1,26 +0,0 @@
-package lib
-
-import (
-	"git.gammaspectra.live/git/go-away/embed"
-	"io"
-	"path"
-	"slices"
-	"strings"
-)
-
-var poisonEncodings = []string{"br", "zstd", "gzip"}
-
-func (state *State) getPoison(mime string, encodings []string) (r io.ReadCloser, encoding string) {
-	for _, encoding = range poisonEncodings {
-		if !slices.Contains(encodings, encoding) {
-			continue
-		}
-
-		p := path.Join("poison", strings.ReplaceAll(mime, "/", "_")+"."+encoding+".poison")
-		f, err := embed.PoisonFs.Open(p)
-		if err == nil {
-			return f, encoding
-		}
-	}
-	return nil, ""
-}
diff --git a/lib/policy/challenge.go b/lib/policy/challenge.go
index cac0892..cad651f 100644
--- a/lib/policy/challenge.go
+++ b/lib/policy/challenge.go
@@ -1,15 +1,15 @@
 package policy
 
+import (
+	"github.com/goccy/go-yaml/ast"
+	"time"
+)
+
 type Challenge struct {
 	Conditions []string `yaml:"conditions"`
-	Mode       string   `yaml:"mode"`
-	Asset      *string  `yaml:"asset,omitempty"`
-	Url        *string  `yaml:"url,omitempty"`
+	Runtime    string   `yaml:"runtime"`
 
-	Parameters map[string]string `json:"parameters,omitempty"`
-	Runtime    struct {
-		Mode        string  `yaml:"mode,omitempty"`
-		Asset       string  `yaml:"asset,omitempty"`
-		Probability float64 `yaml:"probability,omitempty"`
-	} `yaml:"runtime"`
+	Duration time.Duration `yaml:"duration"`
+
+	Parameters ast.Node `yaml:"parameters,omitempty"`
 }
diff --git a/lib/policy/options.go b/lib/policy/options.go
new file mode 100644
index 0000000..3bc4d36
--- /dev/null
+++ b/lib/policy/options.go
@@ -0,0 +1,18 @@
+package policy
+
+import (
+	"net/http"
+)
+
+type Settings struct {
+	Backends               map[string]http.Handler
+	PrivateKeySeed         []byte
+	Debug                  bool
+	PackageName            string
+	ChallengeTemplate      string
+	ChallengeTemplateTheme string
+	ClientIpHeader         string
+	BackendIpHeader        string
+
+	ChallengeResponseCode int
+}
diff --git a/lib/policy/rule.go b/lib/policy/rule.go
index 7ec3bd7..d7a44a1 100644
--- a/lib/policy/rule.go
+++ b/lib/policy/rule.go
@@ -1,22 +1,40 @@
 package policy
 
+import "github.com/goccy/go-yaml/ast"
+
 type RuleAction string
 
 const (
-	RuleActionPASS      RuleAction = "PASS"
-	RuleActionDENY      RuleAction = "DENY"
-	RuleActionBLOCK     RuleAction = "BLOCK"
+	// RuleActionNONE Does nothing. Useful for parent rules when children want to be specified
+	RuleActionNONE RuleAction = "NONE"
+	// RuleActionPASS Passes the connection immediately
+	RuleActionPASS RuleAction = "PASS"
+	// RuleActionDENY Denies the connection with a fancy page
+	RuleActionDENY RuleAction = "DENY"
+	// RuleActionBLOCK Denies the connection with a response code
+	RuleActionBLOCK RuleAction = "BLOCK"
+	// RuleActionCODE Returns a specified HTTP code
+	RuleActionCODE RuleAction = "CODE"
+
+	// RuleActionDROP Drops the connection without sending a reply
+	RuleActionDROP RuleAction = "DROP"
+
+	// RuleActionCHALLENGE Issues a challenge that when passed, passes the connection
 	RuleActionCHALLENGE RuleAction = "CHALLENGE"
-	RuleActionCHECK     RuleAction = "CHECK"
-	RuleActionPOISON    RuleAction = "POISON"
+	// RuleActionCHECK Issues a challenge that when passed, continues checking rules
+	RuleActionCHECK RuleAction = "CHECK"
+
+	// RuleActionPROXY Proxies request to a backend, with optional path replacements
+	RuleActionPROXY RuleAction = "PROXY"
 )
 
 type Rule struct {
 	Name       string   `yaml:"name"`
-	Host       *string  `yaml:"host"`
 	Conditions []string `yaml:"conditions"`
 
 	Action string `yaml:"action"`
 
-	Challenges []string `yaml:"challenges"`
+	Settings ast.Node `yaml:"settings"`
+
+	Children []Rule `yaml:"children"`
 }
diff --git a/lib/rule.go b/lib/rule.go
new file mode 100644
index 0000000..7467aad
--- /dev/null
+++ b/lib/rule.go
@@ -0,0 +1,141 @@
+package lib
+
+import (
+	"crypto/sha256"
+	"encoding/hex"
+	"fmt"
+	"git.gammaspectra.live/git/go-away/lib/action"
+	"git.gammaspectra.live/git/go-away/lib/challenge"
+	"git.gammaspectra.live/git/go-away/lib/condition"
+	"git.gammaspectra.live/git/go-away/lib/policy"
+	"github.com/google/cel-go/cel"
+	"github.com/google/cel-go/common/types"
+	"github.com/google/cel-go/common/types/ref"
+	"log/slog"
+	"net/http"
+	"strings"
+)
+
+type RuleState struct {
+	Name string
+	Hash string
+
+	Condition cel.Program
+
+	Action  policy.RuleAction
+	Handler action.Handler
+
+	Children []RuleState
+}
+
+func NewRuleState(state challenge.StateInterface, r policy.Rule, replacer *strings.Replacer, parent *RuleState) (RuleState, error) {
+	fp := sha256.Sum256(state.PrivateKey())
+	hasher := sha256.New()
+	if parent != nil {
+		hasher.Write([]byte(parent.Name))
+		hasher.Write([]byte{0})
+		r.Name = fmt.Sprintf("%s/%s", parent.Name, r.Name)
+	}
+	hasher.Write([]byte(r.Name))
+	hasher.Write([]byte{0})
+	hasher.Write(fp[:])
+	sum := hasher.Sum(nil)
+
+	rule := RuleState{
+		Name:   r.Name,
+		Hash:   hex.EncodeToString(sum[:10]),
+		Action: policy.RuleAction(strings.ToUpper(r.Action)),
+	}
+
+	newHandler, ok := action.Register[rule.Action]
+	if !ok {
+		return RuleState{}, fmt.Errorf("unknown action %s", r.Action)
+	}
+
+	actionHandler, err := newHandler(state, rule.Name, rule.Hash, r.Settings)
+	if err != nil {
+		return RuleState{}, err
+	}
+	rule.Handler = actionHandler
+
+	if len(r.Conditions) > 0 {
+		// allow nesting
+		var conditions []string
+		for _, cond := range r.Conditions {
+			cond = replacer.Replace(cond)
+			conditions = append(conditions, cond)
+		}
+
+		ast, err := condition.FromStrings(state.ProgramEnv(), condition.OperatorOr, conditions...)
+		if err != nil {
+			return RuleState{}, fmt.Errorf("error compiling conditions: %w", err)
+		}
+
+		program, err := condition.Program(state.ProgramEnv(), ast)
+		if err != nil {
+			return RuleState{}, fmt.Errorf("error compiling program: %w", err)
+		}
+		rule.Condition = program
+	}
+
+	if len(r.Children) > 0 {
+		for _, child := range r.Children {
+			childRule, err := NewRuleState(state, child, replacer, &rule)
+			if err != nil {
+				return RuleState{}, fmt.Errorf("child %s: %w", child.Name, err)
+			}
+			rule.Children = append(rule.Children, childRule)
+		}
+	}
+
+	return rule, nil
+}
+
+func (rule RuleState) Evaluate(logger *slog.Logger, w http.ResponseWriter, r *http.Request, done func() http.Handler) (next bool, err error) {
+	data := challenge.RequestDataFromContext(r.Context())
+	var out ref.Val
+
+	lg := logger.With("rule", rule.Name, "rule_hash", rule.Hash, "action", string(rule.Action))
+	if rule.Condition != nil {
+		out, _, err = rule.Condition.Eval(data)
+	} else {
+		// default true
+		out = types.Bool(true)
+	}
+	if err != nil {
+		lg.Error(err.Error())
+		return false, fmt.Errorf("error: evaluating administrative rule %s/%s: %w", data.Id.String(), rule.Hash, err)
+	} else if out != nil && out.Type() == types.BoolType {
+		if out.Equal(types.True) == types.True {
+			next, err = rule.Handler.Handle(lg, w, r, func() http.Handler {
+				r.Header.Set("X-Away-Rule", rule.Name)
+				r.Header.Set("X-Away-Hash", rule.Hash)
+				r.Header.Set("X-Away-Action", string(rule.Action))
+
+				return done()
+			})
+			if err != nil {
+				lg.Error(err.Error())
+				return false, fmt.Errorf("error: executing administrative rule %s/%s: %w", data.Id.String(), rule.Hash, err)
+			}
+
+			if !next {
+				return next, nil
+			}
+
+			for _, child := range rule.Children {
+				next, err = child.Evaluate(logger, w, r, done)
+				if err != nil {
+					lg.Error(err.Error())
+					return false, fmt.Errorf("error: executing administrative rule %s/%s: %w", data.Id.String(), rule.Hash, err)
+				}
+
+				if !next {
+					return next, nil
+				}
+			}
+		}
+	}
+
+	return true, nil
+}
diff --git a/lib/state.go b/lib/state.go
index 8577b67..e1a5c62 100644
--- a/lib/state.go
+++ b/lib/state.go
@@ -1,157 +1,76 @@
 package lib
 
 import (
-	"codeberg.org/meta/gzipped/v2"
-	"context"
 	"crypto/ed25519"
 	"crypto/rand"
-	"crypto/sha256"
-	"crypto/subtle"
-	"encoding/hex"
-	"encoding/json"
-	"errors"
 	"fmt"
-	"git.gammaspectra.live/git/go-away/embed"
 	"git.gammaspectra.live/git/go-away/lib/challenge"
-	"git.gammaspectra.live/git/go-away/lib/challenge/wasm"
-	"git.gammaspectra.live/git/go-away/lib/challenge/wasm/interface"
 	"git.gammaspectra.live/git/go-away/lib/condition"
 	"git.gammaspectra.live/git/go-away/lib/policy"
-	"git.gammaspectra.live/git/go-away/utils"
-	"git.gammaspectra.live/git/go-away/utils/inline"
 	"github.com/google/cel-go/cel"
-	"github.com/tetratelabs/wazero/api"
 	"github.com/yl2chen/cidranger"
-	"html/template"
-	"io"
-	"io/fs"
 	"log/slog"
-	"net"
 	"net/http"
 	"net/http/httputil"
-	"net/url"
 	"os"
 	"path"
-	"strconv"
 	"strings"
-	"sync"
-	"sync/atomic"
-	"time"
 )
 
 type State struct {
-	Client   *http.Client
-	Settings StateSettings
-	UrlPath  string
-	Mux      *http.ServeMux
+	client  *http.Client
+	urlPath string
 
-	Networks map[string]cidranger.Ranger
-
-	Wasm *wasm.Runner
-
-	Challenges map[challenge.Id]challenge.Challenge
-
-	RulesEnv *cel.Env
-
-	Rules []RuleState
+	programEnv *cel.Env
 
 	publicKey  ed25519.PublicKey
 	privateKey ed25519.PrivateKey
 
-	Poison map[string][]byte
+	settings policy.Settings
 
-	ChallengeSolve sync.Map
+	networks map[string]cidranger.Ranger
 
-	DecayMap *utils.DecayMap[[net.IPv6len]byte, utils.DNSBLResponse]
+	challenges challenge.Register
+
+	rules []RuleState
 
 	close chan struct{}
+
+	Mux *http.ServeMux
 }
 
-func (state *State) AwaitChallenge(key []byte, ctx context.Context) challenge.VerifyResult {
-	ctx, cancel := context.WithCancel(ctx)
-	defer cancel()
-
-	var result atomic.Int64
-
-	state.ChallengeSolve.Store(string(key), ChallengeCallback(func(receivedResult challenge.VerifyResult) {
-		result.Store(int64(receivedResult))
-		cancel()
-	}))
-
-	<-ctx.Done()
-
-	return challenge.VerifyResult(result.Load())
-}
-
-func (state *State) SolveChallenge(key []byte, result challenge.VerifyResult) {
-	if f, ok := state.ChallengeSolve.LoadAndDelete(string(key)); ok && f != nil {
-		if cb, ok := f.(ChallengeCallback); ok {
-			cb(result)
-		}
-	}
-}
-
-type ChallengeCallback func(result challenge.VerifyResult)
-
-type RuleState struct {
-	Name string
-	Hash string
-
-	Host *string
-
-	Program    cel.Program
-	Action     policy.RuleAction
-	Challenges []challenge.Id
-}
-
-type StateSettings struct {
-	Backends               map[string]http.Handler
-	PrivateKeySeed         []byte
-	Debug                  bool
-	PackageName            string
-	ChallengeTemplate      string
-	ChallengeTemplateTheme string
-	ClientIpHeader         string
-	BackendIpHeader        string
-	DNSBL                  *utils.DNSBL
-}
-
-func NewState(p policy.Policy, settings StateSettings) (handler http.Handler, err error) {
+func NewState(p policy.Policy, settings policy.Settings) (handler http.Handler, err error) {
 	state := new(State)
 	state.close = make(chan struct{})
-	state.Settings = settings
-	state.Client = &http.Client{
+	state.settings = settings
+	state.client = &http.Client{
 		CheckRedirect: func(req *http.Request, via []*http.Request) error {
 			return http.ErrUseLastResponse
 		},
 	}
-	state.UrlPath = "/.well-known/." + state.Settings.PackageName
-
-	if state.Settings.DNSBL != nil {
-		state.DecayMap = utils.NewDecayMap[[net.IPv6len]byte, utils.DNSBLResponse]()
-	}
+	state.urlPath = "/.well-known/." + state.Settings().PackageName
 
 	// set a reasonable configuration for default http proxy if there is none
-	for _, backend := range state.Settings.Backends {
+	for _, backend := range state.Settings().Backends {
 		if proxy, ok := backend.(*httputil.ReverseProxy); ok {
 			if proxy.ErrorHandler == nil {
 				proxy.ErrorHandler = func(w http.ResponseWriter, r *http.Request, err error) {
-					state.logger(r).Error(err.Error())
-					_ = state.errorPage(w, r.Header.Get("X-Away-Id"), http.StatusBadGateway, err, "")
+					state.Logger(r).Error(err.Error())
+					state.ErrorPage(w, r, http.StatusBadGateway, err, "")
 				}
 			}
 		}
 	}
 
-	if len(state.Settings.PrivateKeySeed) > 0 {
-		if len(state.Settings.PrivateKeySeed) != ed25519.SeedSize {
-			return nil, fmt.Errorf("invalid private key seed length: %d", len(state.Settings.PrivateKeySeed))
+	if len(state.Settings().PrivateKeySeed) > 0 {
+		if len(state.Settings().PrivateKeySeed) != ed25519.SeedSize {
+			return nil, fmt.Errorf("invalid private key seed length: %d", len(state.Settings().PrivateKeySeed))
 		}
 
-		state.privateKey = ed25519.NewKeyFromSeed(state.Settings.PrivateKeySeed)
+		state.privateKey = ed25519.NewKeyFromSeed(state.Settings().PrivateKeySeed)
 		state.publicKey = state.privateKey.Public().(ed25519.PublicKey)
 
-		clear(state.Settings.PrivateKeySeed)
+		clear(state.settings.PrivateKeySeed)
 
 	} else {
 		state.publicKey, state.privateKey, err = ed25519.GenerateKey(rand.Reader)
@@ -160,34 +79,32 @@ func NewState(p policy.Policy, settings StateSettings) (handler http.Handler, er
 		}
 	}
 
-	privateKeyFingerprint := sha256.Sum256(state.privateKey)
-
-	if state.Settings.ChallengeTemplate == "" {
-		state.Settings.ChallengeTemplate = "anubis"
+	if state.Settings().ChallengeTemplate == "" {
+		state.settings.ChallengeTemplate = "anubis"
 	}
 
-	if templates["challenge-"+state.Settings.ChallengeTemplate+".gohtml"] == nil {
+	if templates["challenge-"+state.Settings().ChallengeTemplate+".gohtml"] == nil {
 
-		if data, err := os.ReadFile(state.Settings.ChallengeTemplate); err == nil && len(data) > 0 {
-			name := path.Base(state.Settings.ChallengeTemplate)
+		if data, err := os.ReadFile(state.Settings().ChallengeTemplate); err == nil && len(data) > 0 {
+			name := path.Base(state.Settings().ChallengeTemplate)
 			err := initTemplate(name, string(data))
 			if err != nil {
 				return nil, fmt.Errorf("error loading template %s: %w", settings.ChallengeTemplate, err)
 			}
-			state.Settings.ChallengeTemplate = name
+			state.settings.ChallengeTemplate = name
 		}
 
 		return nil, fmt.Errorf("no template defined for %s", settings.ChallengeTemplate)
 	}
 
-	state.Networks = make(map[string]cidranger.Ranger)
+	state.networks = make(map[string]cidranger.Ranger)
 	for k, network := range p.Networks {
 		ranger := cidranger.NewPCTrieRanger()
 		for _, e := range network {
 			if e.Url != nil {
 				slog.Debug("loading network url list", "network", k, "url", *e.Url)
 			}
-			prefixes, err := e.FetchPrefixes(state.Client)
+			prefixes, err := e.FetchPrefixes(state.client)
 			if err != nil {
 				slog.Error("error fetching network url list", "network", k, "url", *e.Url)
 				continue
@@ -202,11 +119,9 @@ func NewState(p policy.Policy, settings StateSettings) (handler http.Handler, er
 
 		slog.Warn("loaded network prefixes", "network", k, "count", ranger.Len())
 
-		state.Networks[k] = ranger
+		state.networks[k] = ranger
 	}
 
-	state.Wasm = wasm.NewRunner(true)
-
 	err = state.initConditions()
 	if err != nil {
 		return nil, err
@@ -214,7 +129,7 @@ func NewState(p policy.Policy, settings StateSettings) (handler http.Handler, er
 
 	var replacements []string
 	for k, entries := range p.Conditions {
-		ast, err := condition.FromStrings(state.RulesEnv, condition.OperatorOr, entries...)
+		ast, err := condition.FromStrings(state.programEnv, condition.OperatorOr, entries...)
 		if err != nil {
 			return nil, fmt.Errorf("conditions %s: error compiling conditions: %v", k, err)
 		}
@@ -229,563 +144,26 @@ func NewState(p policy.Policy, settings StateSettings) (handler http.Handler, er
 	}
 	conditionReplacer := strings.NewReplacer(replacements...)
 
-	state.Challenges = make(map[challenge.Id]challenge.Challenge)
-
-	idCounter := challenge.Id(1)
+	state.challenges = make(challenge.Register)
 
 	//TODO: move this to self-contained challenge files
-	for challengeName, p := range p.Challenges {
-
-		// allow nesting
-		var conditions []string
-		for _, cond := range p.Conditions {
-			cond = conditionReplacer.Replace(cond)
-			conditions = append(conditions, cond)
+	for challengeName, pol := range p.Challenges {
+		_, _, err := state.challenges.Create(state, challengeName, pol, conditionReplacer)
+		if err != nil {
+			return nil, fmt.Errorf("challenge %s: %w", challengeName, err)
 		}
-
-		var program cel.Program
-		if len(conditions) > 0 {
-			ast, err := condition.FromStrings(state.RulesEnv, condition.OperatorOr, conditions...)
-			if err != nil {
-				return nil, fmt.Errorf("challenge %s: error compiling conditions: %v", challengeName, err)
-			}
-			program, err = state.RulesEnv.Program(ast)
-			if err != nil {
-				return nil, fmt.Errorf("challenge %s: error compiling program: %v", challengeName, err)
-			}
-		}
-
-		c := challenge.Challenge{
-			Id:                idCounter,
-			Program:           program,
-			Name:              challengeName,
-			Path:              fmt.Sprintf("%s/challenge/%s", state.UrlPath, challengeName),
-			VerifyProbability: p.Runtime.Probability,
-		}
-		idCounter++
-
-		if c.VerifyProbability <= 0 {
-			//10% default
-			c.VerifyProbability = 0.1
-		} else if c.VerifyProbability > 1.0 {
-			c.VerifyProbability = 1.0
-		}
-
-		assetPath := c.Path + "/static/"
-		subFs, err := fs.Sub(embed.ChallengeFs, fmt.Sprintf("challenge/%s/static", challengeName))
-		if err == nil {
-			c.ServeStatic = http.StripPrefix(
-				assetPath,
-				gzipped.FileServer(gzipped.FS(subFs)),
-			)
-		}
-
-		switch p.Mode {
-		default:
-			return nil, fmt.Errorf("unknown challenge mode: %s", p.Mode)
-		case "http":
-			if p.Url == nil {
-				return nil, fmt.Errorf("challenge %s: missing url", challengeName)
-			}
-			method := p.Parameters["http-method"]
-			if method == "" {
-				method = "GET"
-			}
-
-			httpCode, _ := strconv.Atoi(p.Parameters["http-code"])
-			if httpCode == 0 {
-				httpCode = http.StatusOK
-			}
-
-			expectedCookie := p.Parameters["http-cookie"]
-
-			c.Verify = func(key []byte, result string, r *http.Request) (bool, error) {
-				var cookieValue string
-				if expectedCookie != "" {
-					if cookie, err := r.Cookie(expectedCookie); err != nil || cookie == nil {
-						// skip check if we don't have cookie or it's expired
-						return false, nil
-					} else {
-						cookieValue = cookie.Value
-					}
-				}
-				// bind hash of cookie contents
-				sum := sha256.New()
-				sum.Write([]byte(cookieValue))
-				sum.Write([]byte{0})
-				sum.Write(key)
-				sum.Write([]byte{0})
-				sum.Write(state.publicKey)
-
-				if subtle.ConstantTimeCompare(sum.Sum(nil), []byte(result)) == 1 {
-					return true, nil
-				}
-				return false, nil
-			}
-
-			c.ServeChallenge = func(w http.ResponseWriter, r *http.Request, key []byte, expiry time.Time) challenge.Result {
-
-				data := RequestDataFromContext(r.Context())
-
-				if result := data.Challenges[c.Id]; result.Ok() {
-					return challenge.ResultPass
-				}
-
-				var cookieValue string
-				if expectedCookie != "" {
-					if cookie, err := r.Cookie(expectedCookie); err != nil || cookie == nil {
-						// skip check if we don't have cookie or it's expired
-						return challenge.ResultContinue
-					} else {
-						cookieValue = cookie.Value
-					}
-				}
-
-				request, err := http.NewRequest(method, *p.Url, nil)
-				if err != nil {
-					return challenge.ResultContinue
-				}
-
-				request.Header = r.Header
-				response, err := state.Client.Do(request)
-				if err != nil {
-					return challenge.ResultContinue
-				}
-				defer response.Body.Close()
-				defer io.Copy(io.Discard, response.Body)
-
-				if response.StatusCode != httpCode {
-					utils.ClearCookie(utils.CookiePrefix+c.Name, w)
-					// continue other challenges!
-
-					//TODO: negatively cache failure
-
-					return challenge.ResultContinue
-				} else {
-					// bind hash of cookie contents
-					sum := sha256.New()
-					sum.Write([]byte(cookieValue))
-					sum.Write([]byte{0})
-					sum.Write(key)
-					sum.Write([]byte{0})
-					sum.Write(state.publicKey)
-					token, err := c.IssueChallengeToken(state.privateKey, key, sum.Sum(nil), expiry)
-					if err != nil {
-						utils.ClearCookie(utils.CookiePrefix+c.Name, w)
-					} else {
-						utils.SetCookie(utils.CookiePrefix+challengeName, token, expiry, w)
-					}
-
-					data.Challenges[c.Id] = challenge.VerifyResultPASS
-
-					// we passed it!
-					return challenge.ResultPass
-				}
-			}
-
-		case "cookie":
-			c.ServeChallenge = func(w http.ResponseWriter, r *http.Request, key []byte, expiry time.Time) challenge.Result {
-				if chall := r.URL.Query().Get("__goaway_challenge"); chall == challengeName {
-					state.logger(r).Warn("challenge failed", "challenge", c.Name)
-					utils.ClearCookie(utils.CookiePrefix+c.Name, w)
-					_ = state.errorPage(w, r.Header.Get("X-Away-Id"), http.StatusForbidden, fmt.Errorf("access denied: failed challenge %s", c.Name), "")
-					return challenge.ResultStop
-				}
-
-				token, err := c.IssueChallengeToken(state.privateKey, key, nil, expiry)
-				if err != nil {
-					utils.ClearCookie(utils.CookiePrefix+challengeName, w)
-				} else {
-					utils.SetCookie(utils.CookiePrefix+challengeName, token, expiry, w)
-				}
-
-				// self redirect!
-				uri, err := url.ParseRequestURI(r.URL.String())
-				values := uri.Query()
-				values.Set("__goaway_challenge", challengeName)
-				uri.RawQuery = values.Encode()
-
-				http.Redirect(w, r, uri.String(), http.StatusTemporaryRedirect)
-				return challenge.ResultStop
-			}
-		case "meta-refresh":
-			c.ServeChallenge = func(w http.ResponseWriter, r *http.Request, key []byte, expiry time.Time) challenge.Result {
-				redirectUri := new(url.URL)
-				redirectUri.Path = c.Path + "/verify-challenge"
-
-				values := make(url.Values)
-				values.Set("result", hex.EncodeToString(key))
-				values.Set("redirect", r.URL.String())
-				values.Set("requestId", r.Header.Get("X-Away-Id"))
-
-				redirectUri.RawQuery = values.Encode()
-
-				_ = state.challengePage(w, r.Header.Get("X-Away-Id"), http.StatusTeapot, "", map[string]any{
-					"Meta": map[string]string{
-						"refresh": "0; url=" + redirectUri.String(),
-					},
-				})
-
-				return challenge.ResultStop
-			}
-		case "header-refresh":
-			c.ServeChallenge = func(w http.ResponseWriter, r *http.Request, key []byte, expiry time.Time) challenge.Result {
-				redirectUri := new(url.URL)
-				redirectUri.Path = c.Path + "/verify-challenge"
-
-				values := make(url.Values)
-				values.Set("result", hex.EncodeToString(key))
-				values.Set("redirect", r.URL.String())
-				values.Set("requestId", r.Header.Get("X-Away-Id"))
-
-				redirectUri.RawQuery = values.Encode()
-
-				// self redirect!
-				w.Header().Set("Refresh", "0; url="+redirectUri.String())
-
-				_ = state.challengePage(w, r.Header.Get("X-Away-Id"), http.StatusTeapot, "", nil)
-
-				return challenge.ResultStop
-			}
-		case "preload-link":
-			deadline, _ := time.ParseDuration(p.Parameters["preload-early-hint-deadline"])
-			if deadline == 0 {
-				deadline = time.Second * 3
-			}
-
-			c.ServeChallenge = func(w http.ResponseWriter, r *http.Request, key []byte, expiry time.Time) challenge.Result {
-				// this only works on HTTP/2 and HTTP/3
-
-				if r.ProtoMajor < 2 {
-					// this can happen if we are an upgraded request from HTTP/1.1 to HTTP/2 in H2C
-					if _, ok := w.(http.Pusher); !ok {
-						return challenge.ResultContinue
-					}
-				}
-
-				data := RequestDataFromContext(r.Context())
-				redirectUri := new(url.URL)
-				redirectUri.Scheme = getRequestScheme(r)
-				redirectUri.Host = r.Host
-				redirectUri.Path = c.Path + "/verify-challenge"
-
-				values := make(url.Values)
-				values.Set("result", hex.EncodeToString(key))
-				values.Set("requestId", r.Header.Get("X-Away-Id"))
-
-				redirectUri.RawQuery = values.Encode()
-
-				w.Header().Set("Link", fmt.Sprintf("<%s>; rel=\"preload\"; as=\"style\"; fetchpriority=high", redirectUri.String()))
-				defer func() {
-					// remove old header so it won't show on response!
-					w.Header().Del("Link")
-				}()
-				w.WriteHeader(http.StatusEarlyHints)
-
-				ctx, cancel := context.WithTimeout(r.Context(), deadline)
-				defer cancel()
-				if result := state.AwaitChallenge(key, ctx); result.Ok() {
-					data.Challenges[c.Id] = challenge.VerifyResultPASS
-
-					// this should serve!
-					return challenge.ResultPass
-				}
-
-				data.Challenges[c.Id] = challenge.VerifyResultFAIL
-				// we failed, continue
-				return challenge.ResultContinue
-			}
-		case "resource-load":
-			c.ServeChallenge = func(w http.ResponseWriter, r *http.Request, key []byte, expiry time.Time) challenge.Result {
-				redirectUri := new(url.URL)
-				redirectUri.Path = c.Path + "/verify-challenge"
-
-				values := make(url.Values)
-				values.Set("result", hex.EncodeToString(key))
-				values.Set("requestId", r.Header.Get("X-Away-Id"))
-
-				redirectUri.RawQuery = values.Encode()
-
-				// self redirect!
-				w.Header().Set("Refresh", "2; url="+r.URL.String())
-
-				_ = state.challengePage(w, r.Header.Get("X-Away-Id"), http.StatusTeapot, "", map[string]any{
-					"Tags": []template.HTML{
-						template.HTML(fmt.Sprintf("<link href=\"%s\" rel=\"stylesheet\" crossorigin=\"use-credentials\">", redirectUri.String())),
-					},
-				})
-
-				return challenge.ResultStop
-			}
-		case "js":
-			c.ServeChallenge = func(w http.ResponseWriter, r *http.Request, key []byte, expiry time.Time) challenge.Result {
-				_ = state.challengePage(w, r.Header.Get("X-Away-Id"), http.StatusTeapot, challengeName, nil)
-
-				return challenge.ResultStop
-			}
-			c.ServeScriptPath = c.Path + "/challenge.mjs"
-			c.ServeScript = http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-				params, _ := json.Marshal(p.Parameters)
-
-				//TODO: move this to http.go as a template
-				w.Header().Set("Cache-Control", "no-cache, no-store, must-revalidate")
-				w.Header().Set("Content-Type", "text/javascript; charset=utf-8")
-				w.WriteHeader(http.StatusOK)
-
-				err := templates["challenge.mjs"].Execute(w, map[string]any{
-					"Path":       c.Path,
-					"Parameters": string(params),
-					"Random":     cacheBust,
-					"Challenge":  challengeName,
-					"ChallengeScript": func() string {
-						if p.Asset != nil {
-							return assetPath + *p.Asset
-						} else if p.Url != nil {
-							return *p.Url
-						} else {
-							panic("not implemented")
-						}
-					}(),
-				})
-				if err != nil {
-					//TODO: log
-				}
-			})
-		}
-
-		// how to runtime
-		switch p.Runtime.Mode {
-		default:
-			return nil, fmt.Errorf("unknown challenge runtime mode: %s", p.Runtime.Mode)
-		case "":
-		case "http":
-		case "key":
-			mimeType := p.Parameters["key-mime"]
-			if mimeType == "" {
-				mimeType = "text/html; charset=utf-8"
-			}
-
-			httpCode, _ := strconv.Atoi(p.Parameters["key-code"])
-			if httpCode == 0 {
-				httpCode = http.StatusTemporaryRedirect
-			}
-
-			var content []byte
-			if data, ok := p.Parameters["key-content"]; ok {
-				content = []byte(data)
-			}
-
-			c.Verify = func(key []byte, result string, r *http.Request) (bool, error) {
-				resultBytes, err := hex.DecodeString(result)
-				if err != nil {
-					return false, err
-				}
-
-				if subtle.ConstantTimeCompare(resultBytes, key) != 1 {
-					return false, nil
-				}
-				return true, nil
-			}
-
-			c.ServeVerifyChallenge = http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-
-				redirect, err := utils.EnsureNoOpenRedirect(r.FormValue("redirect"))
-				if err != nil {
-					_ = state.errorPage(w, r.Header.Get("X-Away-Id"), http.StatusBadRequest, err, "")
-					return
-				}
-
-				err = func() (err error) {
-
-					data := RequestDataFromContext(r.Context())
-
-					key := state.GetChallengeKeyForRequest(challengeName, data.Expires, r)
-					result := r.FormValue("result")
-
-					requestId, err := hex.DecodeString(r.FormValue("requestId"))
-					if err == nil {
-						r.Header.Set("X-Away-Id", hex.EncodeToString(requestId))
-					}
-
-					if ok, err := c.Verify(key, result, r); err != nil {
-						return err
-					} else if !ok {
-						utils.ClearCookie(utils.CookiePrefix+challengeName, w)
-						data.Challenges[c.Id] = challenge.VerifyResultFAIL
-						state.SolveChallenge(key, challenge.VerifyResultFAIL)
-						state.logger(r).Warn("challenge failed", "challenge", challengeName, "redirect", redirect)
-
-						// catch happy eyeballs IPv4 -> IPv6 migration, re-direct to try again
-						if resultKey, err := ChallengeKeyFromString(result); err == nil && resultKey.Get(ChallengeKeyFlagIsIPv4) > 0 && key.Get(ChallengeKeyFlagIsIPv4) == 0 {
-
-						} else {
-							_ = state.errorPage(w, r.Header.Get("X-Away-Id"), http.StatusForbidden, fmt.Errorf("access denied: failed challenge %s", challengeName), redirect)
-							return nil
-						}
-					} else {
-						state.logger(r).Warn("challenge passed", "challenge", challengeName, "redirect", redirect)
-
-						token, err := c.IssueChallengeToken(state.privateKey, key, []byte(result), data.Expires)
-						if err != nil {
-							utils.ClearCookie(utils.CookiePrefix+challengeName, w)
-						} else {
-							utils.SetCookie(utils.CookiePrefix+challengeName, token, data.Expires, w)
-						}
-						data.Challenges[c.Id] = challenge.VerifyResultPASS
-						state.SolveChallenge(key, challenge.VerifyResultPASS)
-					}
-
-					switch httpCode {
-					case http.StatusMovedPermanently, http.StatusFound, http.StatusSeeOther, http.StatusTemporaryRedirect, http.StatusPermanentRedirect:
-						if redirect == "" {
-							_ = state.errorPage(w, r.Header.Get("X-Away-Id"), http.StatusBadRequest, errors.New("no redirect found"), "")
-							return nil
-						}
-						http.Redirect(w, r, redirect, httpCode)
-					default:
-						w.Header().Set("Content-Type", mimeType)
-						w.WriteHeader(httpCode)
-						if content != nil {
-							_, _ = w.Write(content)
-						}
-					}
-
-					return nil
-				}()
-				if err != nil {
-					utils.ClearCookie(utils.CookiePrefix+challengeName, w)
-					_ = state.errorPage(w, r.Header.Get("X-Away-Id"), http.StatusInternalServerError, err, redirect)
-					return
-				}
-			})
-
-		case "wasm":
-			wasmData, err := embed.ChallengeFs.ReadFile(fmt.Sprintf("challenge/%s/runtime/%s", challengeName, p.Runtime.Asset))
-			if err != nil {
-				return nil, fmt.Errorf("c %s: could not load runtime: %w", challengeName, err)
-			}
-			err = state.Wasm.Compile(challengeName, wasmData)
-			if err != nil {
-				return nil, fmt.Errorf("c %s: compiling runtime: %w", challengeName, err)
-			}
-
-			c.ServeMakeChallenge = http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-				err := state.Wasm.Instantiate(challengeName, func(ctx context.Context, mod api.Module) (err error) {
-
-					data := RequestDataFromContext(r.Context())
-
-					in := _interface.MakeChallengeInput{
-						Key:        state.GetChallengeKeyForRequest(challengeName, data.Expires, r),
-						Parameters: p.Parameters,
-						Headers:    inline.MIMEHeader(r.Header),
-					}
-					in.Data, err = io.ReadAll(r.Body)
-					if err != nil {
-						return err
-					}
-
-					out, err := wasm.MakeChallengeCall(ctx, mod, in)
-					if err != nil {
-						return err
-					}
-
-					// set output headers
-					for k, v := range out.Headers {
-						w.Header()[k] = v
-					}
-					w.Header().Set("Content-Length", fmt.Sprintf("%d", len(out.Data)))
-					w.WriteHeader(out.Code)
-					_, _ = w.Write(out.Data)
-					return nil
-				})
-				if err != nil {
-					_ = state.errorPage(w, r.Header.Get("X-Away-Id"), http.StatusInternalServerError, err, "")
-					return
-				}
-			})
-
-			c.Verify = func(key []byte, result string, r *http.Request) (ok bool, err error) {
-				err = state.Wasm.Instantiate(challengeName, func(ctx context.Context, mod api.Module) (err error) {
-					in := _interface.VerifyChallengeInput{
-						Key:        key,
-						Parameters: p.Parameters,
-						Result:     []byte(result),
-					}
-
-					out, err := wasm.VerifyChallengeCall(ctx, mod, in)
-					if err != nil {
-						return err
-					}
-
-					if out == _interface.VerifyChallengeOutputError {
-						return errors.New("error checking challenge")
-					}
-					ok = out == _interface.VerifyChallengeOutputOK
-					return nil
-				})
-				if err != nil {
-					return false, err
-				}
-				return ok, nil
-			}
-		}
-
-		state.Challenges[c.Id] = c
 	}
 
-	for _, rule := range p.Rules {
-		hasher := sha256.New()
-		hasher.Write([]byte(rule.Name))
-		hasher.Write([]byte{0})
-		if rule.Host != nil {
-			hasher.Write([]byte(*rule.Host))
-		}
-		hasher.Write([]byte{0})
-		hasher.Write(privateKeyFingerprint[:])
-		sum := hasher.Sum(nil)
+	for _, r := range p.Rules {
 
-		challenges := make([]challenge.Id, 0, len(rule.Challenges))
-
-		for _, challengeName := range rule.Challenges {
-			c, ok := state.GetChallengeByName(challengeName)
-			if !ok {
-				return nil, fmt.Errorf("challenge %s not found", challengeName)
-			}
-			challenges = append(challenges, c.Id)
-		}
-
-		r := RuleState{
-			Name:       rule.Name,
-			Hash:       hex.EncodeToString(sum[:8]),
-			Host:       rule.Host,
-			Action:     policy.RuleAction(strings.ToUpper(rule.Action)),
-			Challenges: challenges,
-		}
-
-		if (r.Action == policy.RuleActionCHALLENGE || r.Action == policy.RuleActionCHECK) && len(r.Challenges) == 0 {
-			return nil, fmt.Errorf("no challenges found in rule %s", rule.Name)
-		}
-
-		// allow nesting
-		var conditions []string
-		for _, cond := range rule.Conditions {
-			cond = conditionReplacer.Replace(cond)
-			conditions = append(conditions, cond)
-		}
-
-		ast, err := condition.FromStrings(state.RulesEnv, condition.OperatorOr, conditions...)
+		rule, err := NewRuleState(state, r, conditionReplacer, nil)
 		if err != nil {
-			return nil, fmt.Errorf("rules %s: error compiling conditions: %v", rule.Name, err)
+			return nil, fmt.Errorf("rule %s: %w", r.Name, err)
 		}
-		program, err := state.RulesEnv.Program(ast)
-		if err != nil {
-			return nil, fmt.Errorf("rules %s: error compiling program: %v", rule.Name, err)
-		}
-		r.Program = program
 
-		slog.Warn("loaded rule", "rule", r.Name, "hash", r.Hash, "action", rule.Action)
+		slog.Warn("loaded rule", "rule", rule.Name, "hash", rule.Hash, "action", rule.Action, "children", len(rule.Children))
 
-		state.Rules = append(state.Rules, r)
+		state.rules = append(state.rules, rule)
 	}
 
 	state.Mux = http.NewServeMux()
@@ -794,28 +172,5 @@ func NewState(p policy.Policy, settings StateSettings) (handler http.Handler, er
 		return nil, err
 	}
 
-	if state.DecayMap != nil {
-		go func() {
-			ticker := time.NewTicker(17 * time.Minute)
-			for {
-				select {
-				case <-ticker.C:
-					state.DecayMap.Decay()
-				case <-state.close:
-					return
-				}
-			}
-		}()
-	}
-
 	return state, nil
 }
-
-func (state *State) GetChallengeByName(name string) (challenge.Challenge, bool) {
-	for _, c := range state.Challenges {
-		if c.Name == name {
-			return c, true
-		}
-	}
-	return challenge.Challenge{}, false
-}
diff --git a/utils/cookie.go b/utils/cookie.go
index 3fed756..48587a2 100644
--- a/utils/cookie.go
+++ b/utils/cookie.go
@@ -1,27 +1,41 @@
 package utils
 
 import (
+	"net"
 	"net/http"
 	"time"
 )
 
 var CookiePrefix = ".go-away-"
 
-func SetCookie(name, value string, expiry time.Time, w http.ResponseWriter) {
+// getValidHost Gets a valid host for an http.Cookie Domain field
+// TODO: bug: does not work with IPv6, see https://github.com/golang/go/issues/65521
+func getValidHost(host string) string {
+	ipStr, _, err := net.SplitHostPort(host)
+	if err != nil {
+		return host
+	}
+	return ipStr
+}
+
+func SetCookie(name, value string, expiry time.Time, w http.ResponseWriter, r *http.Request) {
 	http.SetCookie(w, &http.Cookie{
 		Name:     name,
 		Value:    value,
 		Expires:  expiry,
 		SameSite: http.SameSiteLaxMode,
 		Path:     "/",
+		Domain:   getValidHost(r.Host),
 	})
 }
-func ClearCookie(name string, w http.ResponseWriter) {
+
+func ClearCookie(name string, w http.ResponseWriter, r *http.Request) {
 	http.SetCookie(w, &http.Cookie{
 		Name:     name,
 		Value:    "",
 		Expires:  time.Now().Add(-1 * time.Hour),
 		MaxAge:   -1,
 		SameSite: http.SameSiteLaxMode,
+		Domain:   getValidHost(r.Host),
 	})
 }
diff --git a/utils/fingerprint.go b/utils/fingerprint.go
index edef9c9..c717664 100644
--- a/utils/fingerprint.go
+++ b/utils/fingerprint.go
@@ -16,31 +16,27 @@ import (
 )
 
 func applyTLSFingerprinter(server *http.Server) {
+	if server.TLSConfig == nil {
+		return
+	}
 	server.TLSConfig = server.TLSConfig.Clone()
 
-	getCertificate := server.TLSConfig.GetCertificate
-	if getCertificate == nil {
-		server.TLSConfig.GetCertificate = func(clientHello *tls.ClientHelloInfo) (*tls.Certificate, error) {
-			ja3n, ja4 := buildTLSFingerprint(clientHello)
-			ptr := clientHello.Context().Value(tlsFingerprintKey{})
-			if fpPtr, ok := ptr.(*TLSFingerprint); ok && ptr != nil && fpPtr != nil {
-				fpPtr.ja3n.Store(&ja3n)
-				fpPtr.ja4.Store(&ja4)
-			}
+	getConfigForClient := server.TLSConfig.GetConfigForClient
 
+	if getConfigForClient == nil {
+		getConfigForClient = func(info *tls.ClientHelloInfo) (*tls.Config, error) {
 			return nil, nil
 		}
-	} else {
-		server.TLSConfig.GetCertificate = func(clientHello *tls.ClientHelloInfo) (*tls.Certificate, error) {
-			ja3n, ja4 := buildTLSFingerprint(clientHello)
-			ptr := clientHello.Context().Value(tlsFingerprintKey{})
-			if fpPtr, ok := ptr.(*TLSFingerprint); ok && ptr != nil && fpPtr != nil {
-				fpPtr.ja3n.Store(&ja3n)
-				fpPtr.ja4.Store(&ja4)
-			}
+	}
 
-			return getCertificate(clientHello)
+	server.TLSConfig.GetConfigForClient = func(clientHello *tls.ClientHelloInfo) (*tls.Config, error) {
+		ja3n, ja4 := buildTLSFingerprint(clientHello)
+		ptr := clientHello.Context().Value(tlsFingerprintKey{})
+		if fpPtr, ok := ptr.(*TLSFingerprint); ok && ptr != nil && fpPtr != nil {
+			fpPtr.ja3n.Store(&ja3n)
+			fpPtr.ja4.Store(&ja4)
 		}
+		return getConfigForClient(clientHello)
 	}
 	server.ConnContext = func(ctx context.Context, c net.Conn) context.Context {
 		return context.WithValue(ctx, tlsFingerprintKey{}, &TLSFingerprint{})
diff --git a/utils/http.go b/utils/http.go
index f2be9c2..cc5de44 100644
--- a/utils/http.go
+++ b/utils/http.go
@@ -2,7 +2,9 @@ package utils
 
 import (
 	"context"
+	"crypto/rand"
 	"crypto/tls"
+	"encoding/base64"
 	"errors"
 	"fmt"
 	"net"
@@ -79,3 +81,46 @@ func MakeReverseProxy(target string) (*httputil.ReverseProxy, error) {
 
 	return rp, nil
 }
+
+func GetRequestScheme(r *http.Request) string {
+	if proto := r.Header.Get("X-Forwarded-Proto"); proto == "http" || proto == "https" {
+		return proto
+	}
+
+	if r.TLS != nil {
+		return "https"
+	}
+
+	return "http"
+}
+
+func GetRequestAddress(r *http.Request, clientHeader string) net.IP {
+	var ipStr string
+	if clientHeader != "" {
+		ipStr = r.Header.Get(clientHeader)
+	}
+	if ipStr != "" {
+		// handle X-Forwarded-For
+		ipStr = strings.Split(ipStr, ",")[0]
+	}
+
+	// fallback
+	if ipStr == "" {
+		ipStr, _, _ = net.SplitHostPort(r.RemoteAddr)
+	}
+	ipStr = strings.Trim(ipStr, "[]")
+	return net.ParseIP(ipStr)
+}
+
+func CacheBust() string {
+	return cacheBust
+}
+
+var cacheBust string
+
+func init() {
+
+	buf := make([]byte, 16)
+	_, _ = rand.Read(buf)
+	cacheBust = base64.RawURLEncoding.EncodeToString(buf)
+}