From 54c0a520d435c86e53f0870f9eb71e0e46d05da0 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Sat, 29 Jun 2019 17:55:03 -0400
Subject: [PATCH 01/83] test using compose

---
 .circleci/config.yml |  58 ++++
 .gitignore           |   3 +
 .idea/misc.xml       |   7 -
 .idea/modules.xml    |   8 -
 .idea/sc4s.iml       |  13 -
 .idea/vcs.xml        |   9 -
 .idea/workspace.xml  | 612 -------------------------------------------
 docker-compose.yml   |  10 +
 test-with-compose.sh |  26 ++
 tests/Dockerfile     |   6 +-
 10 files changed, 101 insertions(+), 651 deletions(-)
 delete mode 100644 .idea/misc.xml
 delete mode 100644 .idea/modules.xml
 delete mode 100644 .idea/sc4s.iml
 delete mode 100644 .idea/vcs.xml
 delete mode 100644 .idea/workspace.xml
 create mode 100755 test-with-compose.sh

diff --git a/.circleci/config.yml b/.circleci/config.yml
index a616137..b182848 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -60,6 +60,60 @@
                 cat /tmp/goss.tmp | grep "[<\>]" > ~/project/test-results/goss.xml
           - store_test_results:
               path: test-results
+      test:
+        docker:
+          - image: circleci/buildpack-deps:stretch
+          steps:
+            - setup_remote_docker:
+                docker_layer_caching: true
+            - checkout
+            - run:
+                name: Docker Login
+                command: docker login -u $DOCKER_USER -p $DOCKER_PASS
+            - run:
+                name: Docker pull
+                command: docker pull $IMAGE_NAME:$CIRCLE_SHA1
+            - run:
+                name: Setup test volume
+                command: |
+                  mkdir test-results
+                  docker volume create sc4s-tests
+                  docker volume create sc4s-results
+
+                  docker container create --name dummy \
+                          -v sc4s-tests:/work/tests \
+                          -v sc4s-results:/work/test-results \
+                          registry.access.redhat.com/ubi7/ubi
+                  docker cp tests/ dummy:/work/tests/
+                  docker rm dummy
+            - run:
+                name: Docker Compose build
+                command: |
+                  docker-compose build \
+                    --build-arg  RH_ACTIVATION=$RH_ACTIVATION \
+                    --build-arg  RH_ORG=$RH_ORG
+            - run:
+                name: Docker Compose up
+                command: docker-compose up  --abort-on-container-exit
+            - run:
+                name: Collect test results from Docker Compose
+                command: |
+                  docker container create --name dummy \
+                          -v sc4s-tests:/work/tests \
+                          -v sc4s-results:/work/test-results \
+                          registry.access.redhat.com/ubi7/ubi
+
+                  docker cp dummy:/work/test-results/functional test-results
+                  docker rm dummy
+            - run:
+                name: Cleanup volumes
+                command: |
+                  docker volume rm sc4s-tests
+                  docker volume rm sc4s-results
+            - store_test_results:
+                path: test-results
+
+
       publish:
         environment:
           IMAGE_NAME: rfaircloth/scs
@@ -91,9 +145,13 @@
           - dgoss:
               requires:
                 - build
+          - test:
+              - requires:
+                - build
           - publish:
               requires:
                 - dgoss
+                - test
               filters:
                 branches:
                   only:
diff --git a/.gitignore b/.gitignore
index 527731f..d3efeb9 100644
--- a/.gitignore
+++ b/.gitignore
@@ -305,3 +305,6 @@ tags
 # Persistent undo
 [._]*.un~
 
+/.env
+/test-results
+/.idea
\ No newline at end of file
diff --git a/.idea/misc.xml b/.idea/misc.xml
deleted file mode 100644
index 3f7f406..0000000
--- a/.idea/misc.xml
+++ /dev/null
@@ -1,7 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project version="4">
-  <component name="JavaScriptSettings">
-    <option name="languageLevel" value="ES6" />
-  </component>
-  <component name="ProjectRootManager" version="2" project-jdk-name="Remote Python 3.7.3 Docker Compose (test at [/Users/rfaircloth/PycharmProjects/sc4s/docker-compose.yml])" project-jdk-type="Python SDK" />
-</project>
\ No newline at end of file
diff --git a/.idea/modules.xml b/.idea/modules.xml
deleted file mode 100644
index aa62d56..0000000
--- a/.idea/modules.xml
+++ /dev/null
@@ -1,8 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project version="4">
-  <component name="ProjectModuleManager">
-    <modules>
-      <module fileurl="file://$PROJECT_DIR$/.idea/sc4s.iml" filepath="$PROJECT_DIR$/.idea/sc4s.iml" />
-    </modules>
-  </component>
-</project>
\ No newline at end of file
diff --git a/.idea/sc4s.iml b/.idea/sc4s.iml
deleted file mode 100644
index 251be75..0000000
--- a/.idea/sc4s.iml
+++ /dev/null
@@ -1,13 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<module type="PYTHON_MODULE" version="4">
-  <component name="NewModuleRootManager">
-    <content url="file://$MODULE_DIR$">
-      <excludeFolder url="file://$MODULE_DIR$/venv" />
-    </content>
-    <orderEntry type="jdk" jdkName="Remote Python 3.7.3 Docker Compose (test at [/Users/rfaircloth/PycharmProjects/sc4s/docker-compose.yml])" jdkType="Python SDK" />
-    <orderEntry type="sourceFolder" forTests="false" />
-  </component>
-  <component name="TestRunnerService">
-    <option name="PROJECT_TEST_RUNNER" value="Unittests" />
-  </component>
-</module>
\ No newline at end of file
diff --git a/.idea/vcs.xml b/.idea/vcs.xml
deleted file mode 100644
index 53b20c8..0000000
--- a/.idea/vcs.xml
+++ /dev/null
@@ -1,9 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project version="4">
-  <component name="VcsDirectoryMappings">
-    <mapping directory="$PROJECT_DIR$" vcs="Git" />
-    <mapping directory="$PROJECT_DIR$/package/syslog-ng" vcs="Git" />
-    <mapping directory="$PROJECT_DIR$/package/syslog-ng/lib/ivykis" vcs="Git" />
-    <mapping directory="$PROJECT_DIR$/package/syslog-ng/lib/jsonc" vcs="Git" />
-  </component>
-</project>
\ No newline at end of file
diff --git a/.idea/workspace.xml b/.idea/workspace.xml
deleted file mode 100644
index 44b7535..0000000
--- a/.idea/workspace.xml
+++ /dev/null
@@ -1,612 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project version="4">
-  <component name="ChangeListManager">
-    <list default="true" id="5d2eb73b-b080-4040-becf-dac45602ac01" name="Default Changelist" comment="">
-      <change beforePath="$PROJECT_DIR$/.circleci/config.yml" beforeDir="false" afterPath="$PROJECT_DIR$/.circleci/config.yml" afterDir="false" />
-    </list>
-    <option name="EXCLUDED_CONVERTED_TO_IGNORED" value="true" />
-    <option name="SHOW_DIALOG" value="false" />
-    <option name="HIGHLIGHT_CONFLICTS" value="true" />
-    <option name="HIGHLIGHT_NON_ACTIVE_CHANGELIST" value="false" />
-    <option name="LAST_RESOLUTION" value="IGNORE" />
-  </component>
-  <component name="FileEditorManager">
-    <leaf SIDE_TABS_SIZE_LIMIT_KEY="300">
-      <file pinned="false" current-in-tab="false">
-        <entry file="file://$PROJECT_DIR$/package/Dockerfile">
-          <provider selected="true" editor-type-id="text-editor">
-            <state relative-caret-position="1587">
-              <caret line="92" column="85" selection-start-line="92" selection-start-column="81" selection-end-line="92" selection-end-column="85" />
-            </state>
-          </provider>
-        </entry>
-      </file>
-      <file pinned="false" current-in-tab="true">
-        <entry file="file://$PROJECT_DIR$/.circleci/config.yml">
-          <provider selected="true" editor-type-id="text-editor">
-            <state relative-caret-position="229">
-              <caret line="95" column="23" selection-start-line="95" selection-start-column="23" selection-end-line="95" selection-end-column="23" />
-            </state>
-          </provider>
-        </entry>
-      </file>
-    </leaf>
-  </component>
-  <component name="FileTemplateManagerImpl">
-    <option name="RECENT_TEMPLATES">
-      <list>
-        <option value="Python Script" />
-      </list>
-    </option>
-  </component>
-  <component name="FindInProjectRecents">
-    <findStrings>
-      <find>pip</find>
-      <find>yum</find>
-      <find>java</find>
-      <find>goss.y</find>
-      <find>goss</find>
-    </findStrings>
-  </component>
-  <component name="Git.Settings">
-    <option name="RECENT_GIT_ROOT_PATH" value="$PROJECT_DIR$" />
-  </component>
-  <component name="IdeDocumentHistory">
-    <option name="CHANGED_PATHS">
-      <list>
-        <option value="$PROJECT_DIR$/requirements.txt" />
-        <option value="$PROJECT_DIR$/.pytest_cache/Dockerfile" />
-        <option value="$PROJECT_DIR$/Dockerfile" />
-        <option value="$PROJECT_DIR$/package/confluent.repo" />
-        <option value="$PROJECT_DIR$/package/etc/conf.d/sources/s_defaults.conf" />
-        <option value="$PROJECT_DIR$/README.md" />
-        <option value="$PROJECT_DIR$/package/sbin/entrypoint.sh" />
-        <option value="$PROJECT_DIR$/package/etc/syslog-ng.conf" />
-        <option value="$PROJECT_DIR$/package/goss.yml" />
-        <option value="$PROJECT_DIR$/tests/Dockerfile" />
-        <option value="$PROJECT_DIR$/package/etc/conf.d/splunk.conf" />
-        <option value="$PROJECT_DIR$/docker-compose.yml" />
-        <option value="$PROJECT_DIR$/tests/requirements.txt" />
-        <option value="$PROJECT_DIR$/tests/test_poc.py" />
-        <option value="$PROJECT_DIR$/LICENSE" />
-        <option value="$PROJECT_DIR$/.circleci/config.xml" />
-        <option value="$PROJECT_DIR$/package/Dockerfile" />
-        <option value="$PROJECT_DIR$/.circleci/config.yml" />
-      </list>
-    </option>
-  </component>
-  <component name="ProjectFrameBounds" extendedState="6">
-    <option name="y" value="165" />
-    <option name="width" value="1760" />
-    <option name="height" value="825" />
-  </component>
-  <component name="ProjectLevelVcsManager" settingsEditedManually="true" />
-  <component name="ProjectView">
-    <navigator proportions="" version="1">
-      <foldersAlwaysOnTop value="true" />
-    </navigator>
-    <panes>
-      <pane id="ProjectPane">
-        <subPane>
-          <expand>
-            <path>
-              <item name="sc4s" type="b2602c69:ProjectViewProjectNode" />
-              <item name="sc4s" type="462c0819:PsiDirectoryNode" />
-            </path>
-            <path>
-              <item name="sc4s" type="b2602c69:ProjectViewProjectNode" />
-              <item name="sc4s" type="462c0819:PsiDirectoryNode" />
-              <item name=".circleci" type="462c0819:PsiDirectoryNode" />
-            </path>
-            <path>
-              <item name="sc4s" type="b2602c69:ProjectViewProjectNode" />
-              <item name="sc4s" type="462c0819:PsiDirectoryNode" />
-              <item name="package" type="462c0819:PsiDirectoryNode" />
-            </path>
-            <path>
-              <item name="sc4s" type="b2602c69:ProjectViewProjectNode" />
-              <item name="sc4s" type="462c0819:PsiDirectoryNode" />
-              <item name="package" type="462c0819:PsiDirectoryNode" />
-              <item name="etc" type="462c0819:PsiDirectoryNode" />
-            </path>
-            <path>
-              <item name="sc4s" type="b2602c69:ProjectViewProjectNode" />
-              <item name="sc4s" type="462c0819:PsiDirectoryNode" />
-              <item name="package" type="462c0819:PsiDirectoryNode" />
-              <item name="scripts" type="462c0819:PsiDirectoryNode" />
-            </path>
-            <path>
-              <item name="sc4s" type="b2602c69:ProjectViewProjectNode" />
-              <item name="sc4s" type="462c0819:PsiDirectoryNode" />
-              <item name="tests" type="462c0819:PsiDirectoryNode" />
-            </path>
-          </expand>
-          <select />
-        </subPane>
-      </pane>
-      <pane id="Scope" />
-    </panes>
-  </component>
-  <component name="PropertiesComponent">
-    <property name="SHARE_PROJECT_CONFIGURATION_FILES" value="true" />
-    <property name="WebServerToolWindowFactoryState" value="false" />
-    <property name="nodejs_interpreter_path.stuck_in_default_project" value="undefined stuck path" />
-    <property name="nodejs_npm_path_reset_for_default_project" value="true" />
-    <property name="settings.editor.selected.configurable" value="com.jetbrains.python.configuration.PyActiveSdkModuleConfigurable" />
-  </component>
-  <component name="RecentsManager">
-    <key name="MoveFile.RECENT_KEYS">
-      <recent name="$PROJECT_DIR$/package/etc/conf.d/templates" />
-      <recent name="$PROJECT_DIR$/package/etc/conf.d/sources" />
-      <recent name="$PROJECT_DIR$/package/etc/conf.d/blocks" />
-      <recent name="$PROJECT_DIR$/package/etc/conf.d/filters" />
-      <recent name="$PROJECT_DIR$/tests" />
-    </key>
-  </component>
-  <component name="RunDashboard">
-    <option name="ruleStates">
-      <list>
-        <RuleState>
-          <option name="name" value="ConfigurationTypeDashboardGroupingRule" />
-        </RuleState>
-        <RuleState>
-          <option name="name" value="StatusDashboardGroupingRule" />
-        </RuleState>
-      </list>
-    </option>
-  </component>
-  <component name="RunManager" selected="Python tests.pytest in tests docker">
-    <configuration default="true" type="tests" factoryName="py.test">
-      <module name="sc4s" />
-      <option name="INTERPRETER_OPTIONS" value="" />
-      <option name="PARENT_ENVS" value="true" />
-      <option name="SDK_HOME" value="$PROJECT_DIR$/venv/bin/python" />
-      <option name="WORKING_DIRECTORY" value="" />
-      <option name="IS_MODULE_SDK" value="false" />
-      <option name="ADD_CONTENT_ROOTS" value="true" />
-      <option name="ADD_SOURCE_ROOTS" value="true" />
-      <EXTENSION ID="PythonCoverageRunConfigurationExtension" runner="coverage.py" />
-      <option name="_new_keywords" value="&quot;&quot;" />
-      <option name="_new_additionalArguments" value="&quot;&quot;" />
-      <option name="_new_target" value="&quot;tests&quot;" />
-      <option name="_new_targetType" value="&quot;PATH&quot;" />
-      <method v="2" />
-    </configuration>
-    <configuration name="pytest in tests docker" type="tests" factoryName="py.test">
-      <module name="sc4s" />
-      <option name="INTERPRETER_OPTIONS" value="" />
-      <option name="PARENT_ENVS" value="true" />
-      <option name="SDK_HOME" value="docker-compose://[$PROJECT_DIR$/docker-compose.yml]:test/python" />
-      <option name="WORKING_DIRECTORY" value="" />
-      <option name="IS_MODULE_SDK" value="false" />
-      <option name="ADD_CONTENT_ROOTS" value="true" />
-      <option name="ADD_SOURCE_ROOTS" value="true" />
-      <EXTENSION ID="PythonCoverageRunConfigurationExtension" runner="coverage.py" />
-      <option name="_new_keywords" value="&quot;&quot;" />
-      <option name="_new_additionalArguments" value="&quot;&quot;" />
-      <option name="_new_target" value="&quot;tests&quot;" />
-      <option name="_new_targetType" value="&quot;PATH&quot;" />
-      <method v="2" />
-    </configuration>
-    <configuration name="pytest in tests" type="tests" factoryName="py.test" nameIsGenerated="true">
-      <module name="sc4s" />
-      <option name="INTERPRETER_OPTIONS" value="" />
-      <option name="PARENT_ENVS" value="true" />
-      <option name="SDK_HOME" value="$PROJECT_DIR$/venv/bin/python" />
-      <option name="WORKING_DIRECTORY" value="" />
-      <option name="IS_MODULE_SDK" value="false" />
-      <option name="ADD_CONTENT_ROOTS" value="true" />
-      <option name="ADD_SOURCE_ROOTS" value="true" />
-      <EXTENSION ID="PythonCoverageRunConfigurationExtension" runner="coverage.py" />
-      <option name="_new_keywords" value="&quot;&quot;" />
-      <option name="_new_additionalArguments" value="&quot;&quot;" />
-      <option name="_new_target" value="&quot;tests&quot;" />
-      <option name="_new_targetType" value="&quot;PATH&quot;" />
-      <method v="2" />
-    </configuration>
-    <list>
-      <item itemvalue="Python tests.pytest in tests" />
-      <item itemvalue="Python tests.pytest in tests docker" />
-    </list>
-  </component>
-  <component name="SvnConfiguration">
-    <configuration />
-  </component>
-  <component name="TaskManager">
-    <task active="true" id="Default" summary="Default task">
-      <changelist id="5d2eb73b-b080-4040-becf-dac45602ac01" name="Default Changelist" comment="" />
-      <created>1561601135562</created>
-      <option name="number" value="Default" />
-      <option name="presentableId" value="Default" />
-      <updated>1561601135562</updated>
-      <workItem from="1561601137668" duration="2116000" />
-      <workItem from="1561639548755" duration="1822000" />
-      <workItem from="1561641521581" duration="41606000" />
-      <workItem from="1561723177513" duration="18142000" />
-    </task>
-    <task id="LOCAL-00001" summary="Clean build of syslog-docker">
-      <created>1561725354114</created>
-      <option name="number" value="00001" />
-      <option name="presentableId" value="LOCAL-00001" />
-      <option name="project" value="LOCAL" />
-      <updated>1561725354114</updated>
-    </task>
-    <task id="LOCAL-00002" summary="Build with healthcheck">
-      <created>1561727911945</created>
-      <option name="number" value="00002" />
-      <option name="presentableId" value="LOCAL-00002" />
-      <option name="project" value="LOCAL" />
-      <updated>1561727911945</updated>
-    </task>
-    <task id="LOCAL-00003" summary="compose with proper service names">
-      <created>1561728088283</created>
-      <option name="number" value="00003" />
-      <option name="presentableId" value="LOCAL-00003" />
-      <option name="project" value="LOCAL" />
-      <updated>1561728088283</updated>
-    </task>
-    <task id="LOCAL-00004" summary="Correct healthcheck">
-      <created>1561732858768</created>
-      <option name="number" value="00004" />
-      <option name="presentableId" value="LOCAL-00004" />
-      <option name="project" value="LOCAL" />
-      <updated>1561732858768</updated>
-    </task>
-    <task id="LOCAL-00005" summary="Working default route test case">
-      <created>1561742879170</created>
-      <option name="number" value="00005" />
-      <option name="presentableId" value="LOCAL-00005" />
-      <option name="project" value="LOCAL" />
-      <updated>1561742879170</updated>
-    </task>
-    <task id="LOCAL-00006" summary="Working default route test case">
-      <created>1561749672876</created>
-      <option name="number" value="00006" />
-      <option name="presentableId" value="LOCAL-00006" />
-      <option name="project" value="LOCAL" />
-      <updated>1561749672877</updated>
-    </task>
-    <task id="LOCAL-00007" summary="add circleci">
-      <created>1561756254127</created>
-      <option name="number" value="00007" />
-      <option name="presentableId" value="LOCAL-00007" />
-      <option name="project" value="LOCAL" />
-      <updated>1561756254127</updated>
-    </task>
-    <task id="LOCAL-00008" summary="add context flag">
-      <created>1561756480339</created>
-      <option name="number" value="00008" />
-      <option name="presentableId" value="LOCAL-00008" />
-      <option name="project" value="LOCAL" />
-      <updated>1561756480339</updated>
-    </task>
-    <task id="LOCAL-00009" summary="build in sub directory">
-      <created>1561756707590</created>
-      <option name="number" value="00009" />
-      <option name="presentableId" value="LOCAL-00009" />
-      <option name="project" value="LOCAL" />
-      <updated>1561756707590</updated>
-    </task>
-    <task id="LOCAL-00010" summary="build in sub directory">
-      <created>1561756813319</created>
-      <option name="number" value="00010" />
-      <option name="presentableId" value="LOCAL-00010" />
-      <option name="project" value="LOCAL" />
-      <updated>1561756813319</updated>
-    </task>
-    <task id="LOCAL-00011" summary="add submodule config">
-      <created>1561757391279</created>
-      <option name="number" value="00011" />
-      <option name="presentableId" value="LOCAL-00011" />
-      <option name="project" value="LOCAL" />
-      <updated>1561757391279</updated>
-    </task>
-    <task id="LOCAL-00012" summary="add submodule config">
-      <created>1561757671153</created>
-      <option name="number" value="00012" />
-      <option name="presentableId" value="LOCAL-00012" />
-      <option name="project" value="LOCAL" />
-      <updated>1561757671153</updated>
-    </task>
-    <task id="LOCAL-00013" summary="submodules need recursive">
-      <created>1561761791106</created>
-      <option name="number" value="00013" />
-      <option name="presentableId" value="LOCAL-00013" />
-      <option name="project" value="LOCAL" />
-      <updated>1561761791106</updated>
-    </task>
-    <option name="localTasksCounter" value="14" />
-    <servers />
-  </component>
-  <component name="TestHistory">
-    <history-entry file="pytest_in_tests_docker - 2019.06.28 at 15h 40m 27s.xml">
-      <configuration name="pytest in tests docker" configurationId="tests" />
-    </history-entry>
-    <history-entry file="pytest_in_tests_docker - 2019.06.28 at 15h 43m 28s.xml">
-      <configuration name="pytest in tests docker" configurationId="tests" />
-    </history-entry>
-    <history-entry file="pytest_in_tests_docker - 2019.06.28 at 15h 45m 34s.xml">
-      <configuration name="pytest in tests docker" configurationId="tests" />
-    </history-entry>
-    <history-entry file="pytest_in_tests_docker - 2019.06.28 at 15h 47m 23s.xml">
-      <configuration name="pytest in tests docker" configurationId="tests" />
-    </history-entry>
-    <history-entry file="pytest_in_tests_docker - 2019.06.28 at 15h 48m 31s.xml">
-      <configuration name="pytest in tests docker" configurationId="tests" />
-    </history-entry>
-    <history-entry file="pytest_in_tests_docker - 2019.06.28 at 15h 54m 57s.xml">
-      <configuration name="pytest in tests docker" configurationId="tests" />
-    </history-entry>
-    <history-entry file="pytest_in_tests_docker - 2019.06.28 at 15h 55m 29s.xml">
-      <configuration name="pytest in tests docker" configurationId="tests" />
-    </history-entry>
-    <history-entry file="pytest_in_tests_docker - 2019.06.28 at 15h 57m 06s.xml">
-      <configuration name="pytest in tests docker" configurationId="tests" />
-    </history-entry>
-    <history-entry file="pytest_in_tests_docker - 2019.06.28 at 16h 08m 53s.xml">
-      <configuration name="pytest in tests docker" configurationId="tests" />
-    </history-entry>
-    <history-entry file="pytest_in_tests_docker - 2019.06.28 at 16h 09m 43s.xml">
-      <configuration name="pytest in tests docker" configurationId="tests" />
-    </history-entry>
-  </component>
-  <component name="TimeTrackingManager">
-    <option name="totallyTimeSpent" value="76788000" />
-  </component>
-  <component name="TodoView">
-    <todo-panel id="selected-file">
-      <is-autoscroll-to-source value="true" />
-    </todo-panel>
-    <todo-panel id="all">
-      <are-packages-shown value="true" />
-      <is-autoscroll-to-source value="true" />
-    </todo-panel>
-  </component>
-  <component name="ToolWindowManager">
-    <frame x="0" y="23" width="1440" height="814" extended-state="6" />
-    <editor active="true" />
-    <layout>
-      <window_info content_ui="combo" id="Project" order="0" visible="true" weight="0.25178826" />
-      <window_info id="Structure" order="1" side_tool="true" weight="0.25" />
-      <window_info id="Favorites" order="2" side_tool="true" />
-      <window_info anchor="bottom" id="Message" order="0" />
-      <window_info anchor="bottom" id="Find" order="1" />
-      <window_info anchor="bottom" id="Run" order="2" sideWeight="0.49534342" weight="0.46793997" />
-      <window_info anchor="bottom" id="Debug" order="3" weight="0.39972714" />
-      <window_info anchor="bottom" id="Cvs" order="4" weight="0.25" />
-      <window_info anchor="bottom" id="Inspection" order="5" weight="0.4" />
-      <window_info anchor="bottom" id="TODO" order="6" weight="0.32825485" />
-      <window_info anchor="bottom" id="Docker" order="7" weight="0.3287858" />
-      <window_info anchor="bottom" id="Version Control" order="8" sideWeight="0.49941793" weight="0.333795" />
-      <window_info anchor="bottom" id="Database Changes" order="9" />
-      <window_info anchor="bottom" id="Event Log" order="10" sideWeight="0.50465655" side_tool="true" weight="0.46793997" />
-      <window_info active="true" anchor="bottom" id="Terminal" order="11" sideWeight="0.49476135" visible="true" weight="0.30747923" />
-      <window_info anchor="bottom" id="Python Console" order="12" sideWeight="0.49767172" weight="0.3287858" />
-      <window_info anchor="bottom" id="Messages" order="13" />
-      <window_info anchor="right" id="Commander" internal_type="SLIDING" order="0" type="SLIDING" weight="0.4" />
-      <window_info anchor="right" id="Ant Build" order="1" weight="0.25" />
-      <window_info anchor="right" content_ui="combo" id="Hierarchy" order="2" weight="0.25" />
-      <window_info anchor="right" id="SciView" order="3" />
-      <window_info anchor="right" id="Database" order="4" />
-    </layout>
-  </component>
-  <component name="TypeScriptGeneratedFilesManager">
-    <option name="version" value="1" />
-  </component>
-  <component name="VcsManagerConfiguration">
-    <MESSAGE value="Clean build of syslog-docker" />
-    <MESSAGE value="Build with healthcheck" />
-    <MESSAGE value="compose with proper service names" />
-    <MESSAGE value="Correct healthcheck" />
-    <MESSAGE value="Working default route test case" />
-    <MESSAGE value="add circleci" />
-    <MESSAGE value="add context flag" />
-    <MESSAGE value="build in sub directory" />
-    <MESSAGE value="add submodule config" />
-    <MESSAGE value="submodules need recursive" />
-    <option name="LAST_COMMIT_MESSAGE" value="submodules need recursive" />
-  </component>
-  <component name="XDebuggerManager">
-    <breakpoint-manager>
-      <breakpoints>
-        <line-breakpoint enabled="true" suspend="THREAD" type="python-line">
-          <url>file://$PROJECT_DIR$/tests/test_poc.py</url>
-          <line>84</line>
-          <option name="timeStamp" value="8" />
-        </line-breakpoint>
-        <line-breakpoint enabled="true" suspend="THREAD" type="python-line">
-          <url>file://$PROJECT_DIR$/tests/test_poc.py</url>
-          <line>33</line>
-          <option name="timeStamp" value="9" />
-        </line-breakpoint>
-      </breakpoints>
-    </breakpoint-manager>
-  </component>
-  <component name="com.intellij.coverage.CoverageDataManagerImpl">
-    <SUITE FILE_PATH="coverage/sc4s$pytest_in_tests.coverage" NAME="pytest in tests Coverage Results" MODIFIED="1561601401665" SOURCE_PROVIDER="com.intellij.coverage.DefaultCoverageFileProvider" RUNNER="coverage.py" COVERAGE_BY_TEST_ENABLED="true" COVERAGE_TRACING_ENABLED="false" WORKING_DIRECTORY="" />
-    <SUITE FILE_PATH="coverage/sc4s$pytest_in_tests_docker.coverage" NAME="pytest in tests docker Coverage Results" MODIFIED="1561752569703" SOURCE_PROVIDER="com.intellij.coverage.DefaultCoverageFileProvider" RUNNER="coverage.py" COVERAGE_BY_TEST_ENABLED="true" COVERAGE_TRACING_ENABLED="false" WORKING_DIRECTORY="" />
-  </component>
-  <component name="editorHistoryManager">
-    <entry file="file://$PROJECT_DIR$/package/confluent.repo">
-      <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="228">
-          <caret line="12" column="9" selection-start-line="12" selection-start-column="9" selection-end-line="12" selection-end-column="9" />
-        </state>
-      </provider>
-    </entry>
-    <entry file="file://$PROJECT_DIR$/.gitignore">
-      <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="133">
-          <caret line="7" column="55" lean-forward="true" selection-start-line="7" selection-start-column="55" selection-end-line="7" selection-end-column="55" />
-        </state>
-      </provider>
-    </entry>
-    <entry file="file://$PROJECT_DIR$/package/etc/conf.d/sources/s_defaults.conf" />
-    <entry file="file://$PROJECT_DIR$/package/sbin/entrypoint.sh">
-      <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="152">
-          <caret line="8" lean-forward="true" selection-start-line="8" selection-end-line="8" />
-        </state>
-      </provider>
-    </entry>
-    <entry file="file://$PROJECT_DIR$/package/etc/syslog-ng.conf">
-      <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="437">
-          <caret line="23" column="23" selection-start-line="23" selection-start-column="23" selection-end-line="23" selection-end-column="23" />
-        </state>
-      </provider>
-    </entry>
-    <entry file="file://$PROJECT_DIR$/README.md">
-      <provider selected="true" editor-type-id="split-provider[text-editor;markdown-preview-editor]">
-        <state split_layout="SPLIT">
-          <first_editor relative-caret-position="38">
-            <caret line="2" selection-start-line="2" selection-end-line="2" />
-          </first_editor>
-          <second_editor />
-        </state>
-      </provider>
-    </entry>
-    <entry file="file://$PROJECT_DIR$/package/goss.yml">
-      <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="209">
-          <caret line="11" column="13" selection-start-line="11" selection-start-column="13" selection-end-line="11" selection-end-column="13" />
-        </state>
-      </provider>
-    </entry>
-    <entry file="file://$PROJECT_DIR$/tests/Dockerfile">
-      <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="114">
-          <caret line="6" column="17" selection-start-line="6" selection-start-column="17" selection-end-line="6" selection-end-column="17" />
-        </state>
-      </provider>
-    </entry>
-    <entry file="file://$PROJECT_DIR$/package/scripts/splunkmetrics.sh">
-      <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="90">
-          <caret line="16" column="38" selection-start-line="16" selection-start-column="17" selection-end-line="16" selection-end-column="38" />
-        </state>
-      </provider>
-    </entry>
-    <entry file="file://$PROJECT_DIR$/package/etc/conf.d/templates/t_templates.conf">
-      <provider selected="true" editor-type-id="text-editor" />
-    </entry>
-    <entry file="file://$PROJECT_DIR$/package/etc/conf.d/blocks/b_parsers.conf">
-      <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="-124">
-          <caret line="6" column="536" selection-start-line="6" selection-start-column="2" selection-end-line="6" selection-end-column="536" />
-        </state>
-      </provider>
-    </entry>
-    <entry file="file://$PROJECT_DIR$/package/etc/conf.d/filters/f_filter.spec">
-      <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="-3056" />
-      </provider>
-    </entry>
-    <entry file="file://$PROJECT_DIR$/package/etc/conf.d/filters/f_websense.conf">
-      <provider selected="true" editor-type-id="text-editor" />
-    </entry>
-    <entry file="file://$PROJECT_DIR$/package/etc/conf.d/filters/f_palo_alto.conf">
-      <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="-947" />
-      </provider>
-    </entry>
-    <entry file="file://$PROJECT_DIR$/package/etc/conf.d/filters/f_cisco-ios.conf">
-      <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="-890" />
-      </provider>
-    </entry>
-    <entry file="file://$PROJECT_DIR$/package/etc/conf.d/filters/f_catchall.conf">
-      <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="-526" />
-      </provider>
-    </entry>
-    <entry file="file://$PROJECT_DIR$/package/etc/conf.d/blocks/b_destinations.conf">
-      <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="-536" />
-      </provider>
-    </entry>
-    <entry file="file://$PROJECT_DIR$/package/etc/conf.d/splunk.conf">
-      <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="157">
-          <caret line="35" column="23" selection-start-line="35" selection-start-column="23" selection-end-line="35" selection-end-column="23" />
-        </state>
-      </provider>
-    </entry>
-    <entry file="file://$PROJECT_DIR$/package/scripts/switch_transport.sh">
-      <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="100">
-          <caret line="14" column="33" selection-start-line="14" selection-start-column="13" selection-end-line="14" selection-end-column="33" />
-        </state>
-      </provider>
-    </entry>
-    <entry file="file://$PROJECT_DIR$/LICENSE">
-      <provider selected="true" editor-type-id="text-editor">
-        <state>
-          <caret column="26" selection-start-column="26" selection-end-column="26" />
-        </state>
-      </provider>
-    </entry>
-    <entry file="file://$PROJECT_DIR$/tests/test_poc.py">
-      <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="1425">
-          <caret line="75" column="20" selection-start-line="75" selection-start-column="20" selection-end-line="75" selection-end-column="20" />
-          <folding>
-            <element signature="e#0#30#0" expanded="true" />
-          </folding>
-        </state>
-      </provider>
-    </entry>
-    <entry file="file://$PROJECT_DIR$/LICENSE-2.0">
-      <provider selected="true" editor-type-id="text-editor" />
-    </entry>
-    <entry file="file://$USER_HOME$/Library/Caches/PyCharm2019.1/remote_sources/-1691740145/1170049292/_pytest/python.py">
-      <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="-462">
-          <caret line="173" selection-start-line="173" selection-end-line="173" />
-        </state>
-      </provider>
-    </entry>
-    <entry file="file://$PROJECT_DIR$/docker-compose.yml">
-      <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="649">
-          <caret line="44" column="24" selection-start-line="44" selection-start-column="24" selection-end-line="44" selection-end-column="34" />
-        </state>
-      </provider>
-    </entry>
-    <entry file="file://$PROJECT_DIR$/tests/requirements.txt">
-      <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="57">
-          <caret line="3" column="37" selection-start-line="3" selection-start-column="37" selection-end-line="3" selection-end-column="37" />
-        </state>
-      </provider>
-    </entry>
-    <entry file="file://$PROJECT_DIR$/.circleci/config.xml">
-      <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="237">
-          <caret line="21" column="28" lean-forward="true" selection-start-line="21" selection-start-column="28" selection-end-line="21" selection-end-column="28" />
-        </state>
-      </provider>
-    </entry>
-    <entry file="file://$PROJECT_DIR$/package/goss.yaml">
-      <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="209">
-          <caret line="11" column="10" selection-start-line="11" selection-start-column="10" selection-end-line="11" selection-end-column="10" />
-        </state>
-      </provider>
-    </entry>
-    <entry file="file://$PROJECT_DIR$/package/Dockerfile">
-      <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="1587">
-          <caret line="92" column="85" selection-start-line="92" selection-start-column="81" selection-end-line="92" selection-end-column="85" />
-        </state>
-      </provider>
-    </entry>
-    <entry file="file://$PROJECT_DIR$/.circleci/config.yml">
-      <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="229">
-          <caret line="95" column="23" selection-start-line="95" selection-start-column="23" selection-end-line="95" selection-end-column="23" />
-        </state>
-      </provider>
-    </entry>
-  </component>
-</project>
\ No newline at end of file
diff --git a/docker-compose.yml b/docker-compose.yml
index bacc2d6..461faf4 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -5,7 +5,12 @@ services:
     links:
       - splunk
       - sc4s
+    volumes:
+      - sc4s-tests:/work/tests
+      - sc4s-results:/work/test-results
+
   sc4s:
+    image: rfaircloth/scs:master
     build: ./package
     hostname: sc4s
     ports:
@@ -52,3 +57,8 @@ services:
 #        splunk-index: main
 #        splunk-insecureskipverify: true
 #        splunk-verify-connection: false
+volumes:
+  sc4s-tests:
+    external: true
+  sc4s-results:
+    external: true
diff --git a/test-with-compose.sh b/test-with-compose.sh
new file mode 100755
index 0000000..f426220
--- /dev/null
+++ b/test-with-compose.sh
@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+
+mkdir test-results
+docker volume create sc4s-tests
+docker volume create sc4s-results
+
+docker container create --name dummy \
+        -v sc4s-tests:/work/tests \
+        -v sc4s-results:/work/test-results \
+        registry.access.redhat.com/ubi7/ubi
+docker cp tests/ dummy:/work/tests/
+docker rm dummy
+
+docker-compose build --build-arg  RH_ACTIVATION=$RH_ACTIVATION --build-arg  RH_ORG=$RH_ORG
+docker-compose up  --abort-on-container-exit --exit-code-from test
+
+docker container create --name dummy \
+        -v sc4s-tests:/work/tests \
+        -v sc4s-results:/work/test-results \
+        registry.access.redhat.com/ubi7/ubi
+
+docker cp dummy:/work/test-results/functional test-results
+docker rm dummy
+EXIT=$0
+
+
diff --git a/tests/Dockerfile b/tests/Dockerfile
index 695362a..99b98a6 100644
--- a/tests/Dockerfile
+++ b/tests/Dockerfile
@@ -3,5 +3,7 @@ FROM python:3.7
 COPY requirements.txt /
 
 RUN pip3 install -r /requirements.txt
-RUN mkdir /work
-CMD python pytest
+RUN mkdir -p /work/tests
+RUN mkdir -p /work/test-results/functional
+WORKDIR /work
+CMD cd /work;python -m pytest --junitxml=/work/test-results/functional/functional.xml

From f1cfe27d676609c8e8bdaa720606365df803b12f Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Sat, 29 Jun 2019 17:56:20 -0400
Subject: [PATCH 02/83] Update config.yml

---
 .circleci/config.yml | 94 ++++++++++++++++++++++----------------------
 1 file changed, 47 insertions(+), 47 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index b182848..6556f00 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -63,55 +63,55 @@
       test:
         docker:
           - image: circleci/buildpack-deps:stretch
-          steps:
-            - setup_remote_docker:
-                docker_layer_caching: true
-            - checkout
-            - run:
-                name: Docker Login
-                command: docker login -u $DOCKER_USER -p $DOCKER_PASS
-            - run:
-                name: Docker pull
-                command: docker pull $IMAGE_NAME:$CIRCLE_SHA1
-            - run:
-                name: Setup test volume
-                command: |
-                  mkdir test-results
-                  docker volume create sc4s-tests
-                  docker volume create sc4s-results
+        steps:
+          - setup_remote_docker:
+              docker_layer_caching: true
+          - checkout
+          - run:
+              name: Docker Login
+              command: docker login -u $DOCKER_USER -p $DOCKER_PASS
+          - run:
+              name: Docker pull
+              command: docker pull $IMAGE_NAME:$CIRCLE_SHA1
+          - run:
+              name: Setup test volume
+              command: |
+                mkdir test-results
+                docker volume create sc4s-tests
+                docker volume create sc4s-results
 
-                  docker container create --name dummy \
-                          -v sc4s-tests:/work/tests \
-                          -v sc4s-results:/work/test-results \
-                          registry.access.redhat.com/ubi7/ubi
-                  docker cp tests/ dummy:/work/tests/
-                  docker rm dummy
-            - run:
-                name: Docker Compose build
-                command: |
-                  docker-compose build \
-                    --build-arg  RH_ACTIVATION=$RH_ACTIVATION \
-                    --build-arg  RH_ORG=$RH_ORG
-            - run:
-                name: Docker Compose up
-                command: docker-compose up  --abort-on-container-exit
-            - run:
-                name: Collect test results from Docker Compose
-                command: |
-                  docker container create --name dummy \
-                          -v sc4s-tests:/work/tests \
-                          -v sc4s-results:/work/test-results \
-                          registry.access.redhat.com/ubi7/ubi
+                docker container create --name dummy \
+                        -v sc4s-tests:/work/tests \
+                        -v sc4s-results:/work/test-results \
+                        registry.access.redhat.com/ubi7/ubi
+                docker cp tests/ dummy:/work/tests/
+                docker rm dummy
+          - run:
+              name: Docker Compose build
+              command: |
+                docker-compose build \
+                  --build-arg  RH_ACTIVATION=$RH_ACTIVATION \
+                  --build-arg  RH_ORG=$RH_ORG
+          - run:
+              name: Docker Compose up
+              command: docker-compose up  --abort-on-container-exit
+          - run:
+              name: Collect test results from Docker Compose
+              command: |
+                docker container create --name dummy \
+                        -v sc4s-tests:/work/tests \
+                        -v sc4s-results:/work/test-results \
+                        registry.access.redhat.com/ubi7/ubi
 
-                  docker cp dummy:/work/test-results/functional test-results
-                  docker rm dummy
-            - run:
-                name: Cleanup volumes
-                command: |
-                  docker volume rm sc4s-tests
-                  docker volume rm sc4s-results
-            - store_test_results:
-                path: test-results
+                docker cp dummy:/work/test-results/functional test-results
+                docker rm dummy
+          - run:
+              name: Cleanup volumes
+              command: |
+                docker volume rm sc4s-tests
+                docker volume rm sc4s-results
+          - store_test_results:
+              path: test-results
 
 
       publish:

From 670cf1dbc282901184c5eb0ffb105c96c72c0983 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Sat, 29 Jun 2019 17:58:28 -0400
Subject: [PATCH 03/83] Update config.yml

---
 .circleci/config.yml | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 6556f00..b1ca7a2 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -112,8 +112,6 @@
                 docker volume rm sc4s-results
           - store_test_results:
               path: test-results
-
-
       publish:
         environment:
           IMAGE_NAME: rfaircloth/scs
@@ -135,8 +133,6 @@
               name: Docker push tag
               command: docker push $IMAGE_NAME:$CIRCLE_BRANCH
 
-
-
     workflows:
       version: 2
       build-publish:
@@ -149,7 +145,7 @@
               - requires:
                 - build
           - publish:
-              requires:
+              - requires:
                 - dgoss
                 - test
               filters:

From e02c33bd2292939f19bb0b56ab6ce59749c25f1f Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Sat, 29 Jun 2019 18:00:57 -0400
Subject: [PATCH 04/83] Update config.yml

---
 .circleci/config.yml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index b1ca7a2..dfd0bf8 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -148,8 +148,8 @@
               - requires:
                 - dgoss
                 - test
-              filters:
-                branches:
-                  only:
-                    - master
-                    - develop
+              - filters:
+                  branches:
+                    only:
+                      - master
+                      - develop

From 4342bfeb0f1bc60ee97b3e5f808ed19872d36dda Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Sat, 29 Jun 2019 18:01:58 -0400
Subject: [PATCH 05/83] Update config.yml

---
 .circleci/config.yml | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index dfd0bf8..da901e2 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -142,14 +142,14 @@
               requires:
                 - build
           - test:
-              - requires:
+              requires:
                 - build
           - publish:
-              - requires:
+              requires:
                 - dgoss
                 - test
-              - filters:
-                  branches:
-                    only:
-                      - master
-                      - develop
+              filters:
+                branches:
+                  only:
+                    - master
+                    - develop

From d553ddffc83e0268d0bcce63c68acdde3a3c6f77 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Sat, 29 Jun 2019 18:13:30 -0400
Subject: [PATCH 06/83] Update config.yml

---
 .circleci/config.yml | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index da901e2..a2f4d67 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -72,7 +72,7 @@
               command: docker login -u $DOCKER_USER -p $DOCKER_PASS
           - run:
               name: Docker pull
-              command: docker pull $IMAGE_NAME:$CIRCLE_SHA1
+              command: docker-compose pull
           - run:
               name: Setup test volume
               command: |
@@ -141,9 +141,7 @@
           - dgoss:
               requires:
                 - build
-          - test:
-              requires:
-                - build
+          - test
           - publish:
               requires:
                 - dgoss

From 56049fdfc0d053c6e3fc7bd5db7cebe61c664aa0 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Sat, 29 Jun 2019 18:41:21 -0400
Subject: [PATCH 07/83] Update config.yml

---
 .circleci/config.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index a2f4d67..8cc8f3e 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -67,6 +67,8 @@
           - setup_remote_docker:
               docker_layer_caching: true
           - checkout
+          - run: git submodule sync
+          - run: git submodule update --init --recursive
           - run:
               name: Docker Login
               command: docker login -u $DOCKER_USER -p $DOCKER_PASS

From e7dfc3c93cfea194d190b3e51587265d2afa55b4 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Sat, 29 Jun 2019 18:54:05 -0400
Subject: [PATCH 08/83] suppress docker up failures

---
 .circleci/config.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 8cc8f3e..422dc28 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -96,7 +96,7 @@
                   --build-arg  RH_ORG=$RH_ORG
           - run:
               name: Docker Compose up
-              command: docker-compose up  --abort-on-container-exit
+              command: docker-compose up  --abort-on-container-exit || true
           - run:
               name: Collect test results from Docker Compose
               command: |

From eb874c7df1f65d8755dd5282d7d55efa039319b6 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Sat, 29 Jun 2019 19:10:34 -0400
Subject: [PATCH 09/83] don't cleanup volumes

---
 .circleci/config.yml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 422dc28..859f413 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -107,11 +107,6 @@
 
                 docker cp dummy:/work/test-results/functional test-results
                 docker rm dummy
-          - run:
-              name: Cleanup volumes
-              command: |
-                docker volume rm sc4s-tests
-                docker volume rm sc4s-results
           - store_test_results:
               path: test-results
       publish:

From d0029269f5bc5dfed50676dbf231d34135f88e6a Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Sat, 29 Jun 2019 19:14:33 -0400
Subject: [PATCH 10/83] Update config.yml

---
 .circleci/config.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 859f413..cb99b56 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -96,7 +96,7 @@
                   --build-arg  RH_ORG=$RH_ORG
           - run:
               name: Docker Compose up
-              command: docker-compose up  --abort-on-container-exit || true
+              command: docker-compose up  --abort-on-container-exit
           - run:
               name: Collect test results from Docker Compose
               command: |

From 06022f73b74ecbccad3f9e3c9e2e3206de31c25e Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Sat, 29 Jun 2019 19:17:18 -0400
Subject: [PATCH 11/83] Update config.yml

---
 .circleci/config.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index cb99b56..19621a6 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -107,6 +107,7 @@
 
                 docker cp dummy:/work/test-results/functional test-results
                 docker rm dummy
+              when: always
           - store_test_results:
               path: test-results
       publish:

From 515dff331bb8f690ffd75e2338c4ef9ff7ccb141 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Sat, 29 Jun 2019 19:29:41 -0400
Subject: [PATCH 12/83] handle other containers not yet ready

---
 tests/test_poc.py | 21 +++++++++++++++++++--
 1 file changed, 19 insertions(+), 2 deletions(-)

diff --git a/tests/test_poc.py b/tests/test_poc.py
index cafce3e..4e7f486 100644
--- a/tests/test_poc.py
+++ b/tests/test_poc.py
@@ -24,13 +24,30 @@ def setup_wordlist():
 
 @pytest.fixture
 def setup_splunk():
-    return client.connect(username="admin", password="Changed@11", host="splunk", port="8089")
+    tried=0
+    while true:
+        try:
+            c = client.connect(username="admin", password="Changed@11", host="splunk", port="8089")
+        except ConnectionRefusedError:
+            tried +=1
+            if tried>90:
+                raise
+            sleep(1)
+    return c
 
 def sendsingle(message):
     sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
     server_address = ('sc4s', 514)
 
-    sock.connect(server_address)
+    tried = 0
+    try
+
+        sock.connect(server_address)
+    except:
+        if tried > 90:
+            raise
+        sleep(1)
+        
     sock.sendall(str.encode(message))
     sock.close()
 

From 5d57540e45402385cc47c66a1d2fb0789b8c1f55 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Sat, 29 Jun 2019 19:36:46 -0400
Subject: [PATCH 13/83] Update test_poc.py

---
 tests/test_poc.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/test_poc.py b/tests/test_poc.py
index 4e7f486..bb81096 100644
--- a/tests/test_poc.py
+++ b/tests/test_poc.py
@@ -47,7 +47,7 @@ def sendsingle(message):
         if tried > 90:
             raise
         sleep(1)
-        
+
     sock.sendall(str.encode(message))
     sock.close()
 

From fb1e8bc544c5724a2634a364006e656864ca1118 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Sat, 29 Jun 2019 19:41:01 -0400
Subject: [PATCH 14/83] Update test_poc.py

---
 tests/test_poc.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/test_poc.py b/tests/test_poc.py
index bb81096..4eadc5e 100644
--- a/tests/test_poc.py
+++ b/tests/test_poc.py
@@ -40,7 +40,7 @@ def sendsingle(message):
     server_address = ('sc4s', 514)
 
     tried = 0
-    try
+    try:
 
         sock.connect(server_address)
     except:

From 4cb64b1dcc347f8a20e8884160945b67292a674d Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Sat, 29 Jun 2019 19:43:31 -0400
Subject: [PATCH 15/83] Update test_poc.py

---
 tests/test_poc.py | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/tests/test_poc.py b/tests/test_poc.py
index 4eadc5e..2e44ab2 100644
--- a/tests/test_poc.py
+++ b/tests/test_poc.py
@@ -25,7 +25,7 @@ def setup_wordlist():
 @pytest.fixture
 def setup_splunk():
     tried=0
-    while true:
+    while True:
         try:
             c = client.connect(username="admin", password="Changed@11", host="splunk", port="8089")
         except ConnectionRefusedError:
@@ -41,7 +41,6 @@ def sendsingle(message):
 
     tried = 0
     try:
-
         sock.connect(server_address)
     except:
         if tried > 90:

From 4dda2c10bfd441eb4dc5cfe53b68ed766b12793e Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Sat, 29 Jun 2019 19:56:34 -0400
Subject: [PATCH 16/83] Update test_poc.py

---
 tests/test_poc.py | 16 ++++++++++------
 1 file changed, 10 insertions(+), 6 deletions(-)

diff --git a/tests/test_poc.py b/tests/test_poc.py
index 2e44ab2..9e71e4a 100644
--- a/tests/test_poc.py
+++ b/tests/test_poc.py
@@ -28,6 +28,7 @@ def setup_splunk():
     while True:
         try:
             c = client.connect(username="admin", password="Changed@11", host="splunk", port="8089")
+            break
         except ConnectionRefusedError:
             tried +=1
             if tried>90:
@@ -40,12 +41,15 @@ def sendsingle(message):
     server_address = ('sc4s', 514)
 
     tried = 0
-    try:
-        sock.connect(server_address)
-    except:
-        if tried > 90:
-            raise
-        sleep(1)
+    while True:
+        try:
+            sock.connect(server_address)
+            break
+        except:
+            tried +=1
+            if tried > 90:
+                raise
+            sleep(1)
 
     sock.sendall(str.encode(message))
     sock.close()

From 13b93fb12496b054c8e44b48f318de9c09a6e3a4 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Sat, 29 Jun 2019 22:56:10 -0400
Subject: [PATCH 17/83] env shift

---
 .env.template      | 10 ++++++++++
 docker-compose.yml | 28 +++++++++++++++++-----------
 tests/Dockerfile   |  2 +-
 tests/test_poc.py  |  1 -
 4 files changed, 28 insertions(+), 13 deletions(-)
 create mode 100644 .env.template

diff --git a/.env.template b/.env.template
new file mode 100644
index 0000000..dd14966
--- /dev/null
+++ b/.env.template
@@ -0,0 +1,10 @@
+RH_ORG=xxxx
+RH_ACTIVATION=xxxxx
+SPLUNK_HEC_TOKEN=a778f63a-5dff-4e3c-a72c-a03183659e94
+SPLUNK_PASSWORD=Changed@11
+SPLUNK_START_ARGS=--accept-license
+SPLUNK_HEC_URL=https://splunk:8088/services/collector/event
+SPLUNK_HEC_STATSURL=https://splunk:8088/services/collector/event
+SPLUNK_CONNECT_METHOD=hec
+SPLUNK_DEFAULT_INDEX=main
+SPLUNK_METRICS_INDEX=metrics
diff --git a/docker-compose.yml b/docker-compose.yml
index 461faf4..829b864 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -8,10 +8,16 @@ services:
     volumes:
       - sc4s-tests:/work/tests
       - sc4s-results:/work/test-results
+    environment:
+      - SPLUNK_PASSWORD
 
   sc4s:
-    image: rfaircloth/scs:master
-    build: ./package
+#    image: rfaircloth/scs:latest
+    build:
+      context: ./package
+      args:
+        RH_ORG: $RH_ORG
+        RH_ACTIVATION: $RH_ACTIVATION
     hostname: sc4s
     ports:
       - "514"
@@ -24,12 +30,12 @@ services:
     links:
       - splunk
     environment:
-      - SPLUNK_HEC_URL=https://splunk:8088/services/collector/event
-      - SPLUNK_HEC_STATSURL=https://splunk:8088/services/collector/event
-      - SPLUNK_HEC_TOKEN=a778f63a-5dff-4e3c-a72c-a03183659e94
-      - SPLUNK_CONNECT_METHOD=hec
-      - SPLUNK_DEFAULT_INDEX=main
-      - SPLUNK_METRICS_INDEX=metrics
+      - SPLUNK_HEC_URL
+      - SPLUNK_HEC_STATSURL
+      - SPLUNK_HEC_TOKEN
+      - SPLUNK_CONNECT_METHOD
+      - SPLUNK_DEFAULT_INDEX
+      - SPLUNK_METRICS_INDEX
 #    logging:
 #      driver: splunk
 #      options:
@@ -46,9 +52,9 @@ services:
       - "8088:8088"
       - "8089:8089"
     environment:
-      - SPLUNK_HEC_TOKEN=a778f63a-5dff-4e3c-a72c-a03183659e94
-      - SPLUNK_PASSWORD=Changed@11
-      - SPLUNK_START_ARGS=--accept-license
+      - SPLUNK_HEC_TOKEN
+      - SPLUNK_PASSWORD
+      - SPLUNK_START_ARGS
 #    logging:
 #      driver: splunk
 #      options:
diff --git a/tests/Dockerfile b/tests/Dockerfile
index 99b98a6..36fa35e 100644
--- a/tests/Dockerfile
+++ b/tests/Dockerfile
@@ -5,5 +5,5 @@ COPY requirements.txt /
 RUN pip3 install -r /requirements.txt
 RUN mkdir -p /work/tests
 RUN mkdir -p /work/test-results/functional
-WORKDIR /work
+#WORKDIR /work
 CMD cd /work;python -m pytest --junitxml=/work/test-results/functional/functional.xml
diff --git a/tests/test_poc.py b/tests/test_poc.py
index 9e71e4a..986c2a3 100644
--- a/tests/test_poc.py
+++ b/tests/test_poc.py
@@ -50,7 +50,6 @@ def sendsingle(message):
             if tried > 90:
                 raise
             sleep(1)
-
     sock.sendall(str.encode(message))
     sock.close()
 

From 4e164489e00010d0f650135b99d823e9c4a7c743 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Sun, 30 Jun 2019 12:19:12 -0400
Subject: [PATCH 18/83] Code Cleanup

---
 .gitignore        | 14 ++------------
 tests/test_poc.py | 38 +++++++++++++++++---------------------
 2 files changed, 19 insertions(+), 33 deletions(-)

diff --git a/.gitignore b/.gitignore
index d3efeb9..36345c7 100644
--- a/.gitignore
+++ b/.gitignore
@@ -150,7 +150,6 @@ dmypy.json
 *.bak
 *.gho
 *.ori
-*.orig
 *.tmp
 
 ### Windows template
@@ -202,7 +201,6 @@ export_presets.cfg
 *.bz2
 *.xz
 *.lzma
-*.cab
 
 # Packing-only formats
 *.iso
@@ -212,15 +210,10 @@ export_presets.cfg
 *.dmg
 *.xpi
 *.gem
-*.egg
 *.deb
 *.rpm
-*.msi
-*.msm
-*.msp
 
 ### Patch template
-*.orig
 *.rej
 
 ### macOS template
@@ -256,7 +249,6 @@ Temporary Items
 *.exe
 *.exe~
 *.dll
-*.so
 *.dylib
 
 # Test binary, built with `go test -c`
@@ -271,7 +263,6 @@ Temporary Items
 ### VirtualEnv template
 # Virtualenv
 # http://iamzed.com/2009/05/07/a-primer-on-virtualenv/
-.Python
 [Bb]in
 [Ii]nclude
 [Ll]ib
@@ -279,7 +270,6 @@ Temporary Items
 [Ll]ocal
 [Ss]cripts
 pyvenv.cfg
-.venv
 pip-selfcheck.json
 
 ### PuTTY template
@@ -305,6 +295,6 @@ tags
 # Persistent undo
 [._]*.un~
 
-/.env
 /test-results
-/.idea
\ No newline at end of file
+/.idea/workspace.xml
+/.idea/tasks.xml
diff --git a/tests/test_poc.py b/tests/test_poc.py
index 986c2a3..5aa0efe 100644
--- a/tests/test_poc.py
+++ b/tests/test_poc.py
@@ -1,41 +1,38 @@
-from jinja2 import Environment
-import urllib.request
-
 import random
-
 import socket
-
-import sys
-from time import sleep
-import splunklib.results as results
-import splunklib.client as client
+import urllib.request
 from time import sleep
+
 import pytest
+import splunklib.client as client
+from jinja2 import Environment
 
 env = Environment(extensions=['jinja2_time.TimeExtension'])
 
+
 @pytest.fixture
 def setup_wordlist():
-
     word_url = "http://svnweb.freebsd.org/csrg/share/dict/words?view=co&content-type=text/plain"
     response = urllib.request.urlopen(word_url)
     long_txt = response.read().decode()
     return long_txt.splitlines()
 
+
 @pytest.fixture
 def setup_splunk():
-    tried=0
+    tried = 0
     while True:
         try:
             c = client.connect(username="admin", password="Changed@11", host="splunk", port="8089")
             break
         except ConnectionRefusedError:
-            tried +=1
-            if tried>90:
+            tried += 1
+            if tried > 90:
                 raise
             sleep(1)
     return c
 
+
 def sendsingle(message):
     sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
     server_address = ('sc4s', 514)
@@ -46,14 +43,15 @@ def sendsingle(message):
             sock.connect(server_address)
             break
         except:
-            tried +=1
+            tried += 1
             if tried > 90:
                 raise
             sleep(1)
     sock.sendall(str.encode(message))
     sock.close()
 
-def splunk_single(service,search):
+
+def splunk_single(service, search):
     kwargs_normalsearch = {"exec_mode": "normal"}
     tried = 0
     while True:
@@ -76,7 +74,7 @@ def splunk_single(service,search):
         # Get the results and display them
         resultCount = stats["resultCount"]
         eventCount = stats["eventCount"]
-        if resultCount > 0 or tried>15:
+        if resultCount > 0 or tried > 15:
             break
         else:
             tried += 1
@@ -84,7 +82,7 @@ def splunk_single(service,search):
     return resultCount, eventCount
 
 
-def test_defaultroute(record_property,setup_wordlist,setup_splunk):
+def test_defaultroute(record_property, setup_wordlist, setup_splunk):
     host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
 
     mt = env.from_string("{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %}.000z {{ host }} sc4s_default[0]: test\n")
@@ -92,15 +90,13 @@ def test_defaultroute(record_property,setup_wordlist,setup_splunk):
 
     sendsingle(message)
 
-    st= env.from_string("search \"{{ host }}\" | head 2")
+    st = env.from_string("search \"{{ host }}\" | head 2")
     search = st.render(host=host)
 
-    resultCount, eventCount = splunk_single(setup_splunk,search)
+    resultCount, eventCount = splunk_single(setup_splunk, search)
 
     record_property("host", host)
     record_property("resultCount", resultCount)
     record_property("message", message)
 
     assert resultCount == 1
-
-

From f25895cd0bc05f1fa2c06f5e17b3f7010d29bb9b Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Sun, 30 Jun 2019 17:44:45 -0400
Subject: [PATCH 19/83] add flake 8

---
 .circleci/config.yml   |  7 +++++--
 .idea/misc.xml         | 10 ++++++++++
 .idea/sc4s.iml         | 13 +++++++++++++
 requirements.txt       |  2 ++
 tests/requirements.txt |  1 +
 tests/test_poc.py      |  2 +-
 6 files changed, 32 insertions(+), 3 deletions(-)
 create mode 100644 .idea/misc.xml
 create mode 100644 .idea/sc4s.iml
 create mode 100644 requirements.txt

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 19621a6..43f4d1c 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -1,4 +1,6 @@
-    version: 2
+  version: 2
+    orbs:
+      flake8: arrai/flake8@5.0.0
     jobs:
       build:
         environment:
@@ -139,7 +141,8 @@
           - dgoss:
               requires:
                 - build
-          - test
+          - test-unit
+          - flake8/flake8
           - publish:
               requires:
                 - dgoss
diff --git a/.idea/misc.xml b/.idea/misc.xml
new file mode 100644
index 0000000..87f2df8
--- /dev/null
+++ b/.idea/misc.xml
@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="JavaScriptSettings">
+    <option name="languageLevel" value="ES6" />
+  </component>
+  <component name="ProjectRootManager" version="2" project-jdk-name="Python 3.7 (splunk-connect-for-syslog)" project-jdk-type="Python SDK" />
+  <component name="PythonCompatibilityInspectionAdvertiser">
+    <option name="version" value="3" />
+  </component>
+</project>
\ No newline at end of file
diff --git a/.idea/sc4s.iml b/.idea/sc4s.iml
new file mode 100644
index 0000000..bda388e
--- /dev/null
+++ b/.idea/sc4s.iml
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<module type="PYTHON_MODULE" version="4">
+  <component name="NewModuleRootManager">
+    <content url="file://$MODULE_DIR$">
+      <excludeFolder url="file://$MODULE_DIR$/venv" />
+    </content>
+    <orderEntry type="jdk" jdkName="Python 3.7 (splunk-connect-for-syslog)" jdkType="Python SDK" />
+    <orderEntry type="sourceFolder" forTests="false" />
+  </component>
+  <component name="TestRunnerService">
+    <option name="PROJECT_TEST_RUNNER" value="Unittests" />
+  </component>
+</module>
\ No newline at end of file
diff --git a/requirements.txt b/requirements.txt
new file mode 100644
index 0000000..7b11f5e
--- /dev/null
+++ b/requirements.txt
@@ -0,0 +1,2 @@
+-r ./tests/requirements.txt
+
diff --git a/tests/requirements.txt b/tests/requirements.txt
index f5e5e97..199f49b 100644
--- a/tests/requirements.txt
+++ b/tests/requirements.txt
@@ -2,3 +2,4 @@ pytest
 jinja2
 jinja2-time
 http://dev.splunk.com/goto/sdk-python
+flake8
diff --git a/tests/test_poc.py b/tests/test_poc.py
index 5aa0efe..e04aa01 100644
--- a/tests/test_poc.py
+++ b/tests/test_poc.py
@@ -42,7 +42,7 @@ def sendsingle(message):
         try:
             sock.connect(server_address)
             break
-        except:
+        except socket:
             tried += 1
             if tried > 90:
                 raise

From fc6858b98392f7d6476fa348cf1c853aea96a3db Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Sun, 30 Jun 2019 17:47:28 -0400
Subject: [PATCH 20/83] Update config.yml

---
 .circleci/config.yml | 295 +++++++++++++++++++++----------------------
 1 file changed, 147 insertions(+), 148 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 43f4d1c..c37f47b 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -1,154 +1,153 @@
-  version: 2
-    orbs:
-      flake8: arrai/flake8@5.0.0
-    jobs:
-      build:
-        environment:
-          IMAGE_NAME: rfaircloth/scs
-        docker:
-          - image: circleci/buildpack-deps:stretch
-        steps:
-          - checkout
-          - run: git submodule sync
-          - run: git submodule update --init --recursive
-          - setup_remote_docker:
-              docker_layer_caching: true
-          - run:
-                name: Docker Login
-                command: docker login -u $DOCKER_USER -p $DOCKER_PASS
-          - run:
-              name: Build Docker image
-              command: pushd package; docker build -f Dockerfile --build-arg RH_ORG=$RH_ORG --build-arg RH_ACTIVATION=$RH_ACTIVATION -t $IMAGE_NAME:build .
-          - run:
-              name: Tag Docker image
-              command: docker tag $IMAGE_NAME:build $IMAGE_NAME:$CIRCLE_SHA1
-          - run:
-              name: Push Docker image
-              command: docker push $IMAGE_NAME:$CIRCLE_SHA1
-      dgoss:
-        environment:
-          IMAGE_NAME: rfaircloth/scs
-          GOSS_VER: v0.3.7
-          GOSS_OPTS: "--max-concurrent=1 --format junit"
-          GOSS_FILES_STRATEGY: cp
+version: 2.1
+  orbs:
+    flake8: arrai/flake8@5.0.0
+  jobs:
+    build:
+      environment:
+        IMAGE_NAME: rfaircloth/scs
+      docker:
+        - image: circleci/buildpack-deps:stretch
+      steps:
+        - checkout
+        - run: git submodule sync
+        - run: git submodule update --init --recursive
+        - setup_remote_docker:
+            docker_layer_caching: true
+        - run:
+              name: Docker Login
+              command: docker login -u $DOCKER_USER -p $DOCKER_PASS
+        - run:
+            name: Build Docker image
+            command: pushd package; docker build -f Dockerfile --build-arg RH_ORG=$RH_ORG --build-arg RH_ACTIVATION=$RH_ACTIVATION -t $IMAGE_NAME:build .
+        - run:
+            name: Tag Docker image
+            command: docker tag $IMAGE_NAME:build $IMAGE_NAME:$CIRCLE_SHA1
+        - run:
+            name: Push Docker image
+            command: docker push $IMAGE_NAME:$CIRCLE_SHA1
+    dgoss:
+      environment:
+        IMAGE_NAME: rfaircloth/scs
+        GOSS_VER: v0.3.7
+        GOSS_OPTS: "--max-concurrent=1 --format junit"
+        GOSS_FILES_STRATEGY: cp
 
-        docker:
-          - image: circleci/buildpack-deps:stretch
-        steps:
-          - checkout
-          - setup_remote_docker:
-              docker_layer_caching: true
-          - run:
-                name: Docker Login
-                command: docker login -u $DOCKER_USER -p $DOCKER_PASS
-          - run:
-              name: Docker pull
-              command: docker pull $IMAGE_NAME:$CIRCLE_SHA1
-          - run:
-              name: Install goss
-              command: |
-                # rather than give internet scripts SU rights, we install to local user bin and add to path
-                curl -fsSL https://goss.rocks/install | GOSS_VER=v0.3.7 sudo sh
-                goss -version
-          - run:
-              name: Test Docker
-              command: |
-                mkdir -p ~/project/test-results
-                # Don't forget path!
-                export PATH=$PATH:~/bin
-                pushd package
-                GOSS_FMT_OPTIONS="perfdata verbose" GOSS_FILES_STRATEGY=cp GOSS_OPTS="--max-concurrent=1 --format junit" dgoss run -t $IMAGE_NAME:$CIRCLE_SHA1 3>&1 1>&2 2>&3 > /tmp/goss.tmp || true ; cat /tmp/goss.tmp | grep -v "<"
-                popd
-                cat /tmp/goss.tmp | grep "[<\>]" > ~/project/test-results/goss.xml
-          - store_test_results:
-              path: test-results
-      test:
-        docker:
-          - image: circleci/buildpack-deps:stretch
-        steps:
-          - setup_remote_docker:
-              docker_layer_caching: true
-          - checkout
-          - run: git submodule sync
-          - run: git submodule update --init --recursive
-          - run:
+      docker:
+        - image: circleci/buildpack-deps:stretch
+      steps:
+        - checkout
+        - setup_remote_docker:
+            docker_layer_caching: true
+        - run:
               name: Docker Login
               command: docker login -u $DOCKER_USER -p $DOCKER_PASS
-          - run:
-              name: Docker pull
-              command: docker-compose pull
-          - run:
-              name: Setup test volume
-              command: |
-                mkdir test-results
-                docker volume create sc4s-tests
-                docker volume create sc4s-results
+        - run:
+            name: Docker pull
+            command: docker pull $IMAGE_NAME:$CIRCLE_SHA1
+        - run:
+            name: Install goss
+            command: |
+              # rather than give internet scripts SU rights, we install to local user bin and add to path
+              curl -fsSL https://goss.rocks/install | GOSS_VER=v0.3.7 sudo sh
+              goss -version
+        - run:
+            name: Test Docker
+            command: |
+              mkdir -p ~/project/test-results
+              # Don't forget path!
+              export PATH=$PATH:~/bin
+              pushd package
+              GOSS_FMT_OPTIONS="perfdata verbose" GOSS_FILES_STRATEGY=cp GOSS_OPTS="--max-concurrent=1 --format junit" dgoss run -t $IMAGE_NAME:$CIRCLE_SHA1 3>&1 1>&2 2>&3 > /tmp/goss.tmp || true ; cat /tmp/goss.tmp | grep -v "<"
+              popd
+              cat /tmp/goss.tmp | grep "[<\>]" > ~/project/test-results/goss.xml
+        - store_test_results:
+            path: test-results
+    test:
+      docker:
+        - image: circleci/buildpack-deps:stretch
+      steps:
+        - setup_remote_docker:
+            docker_layer_caching: true
+        - checkout
+        - run: git submodule sync
+        - run: git submodule update --init --recursive
+        - run:
+            name: Docker Login
+            command: docker login -u $DOCKER_USER -p $DOCKER_PASS
+        - run:
+            name: Docker pull
+            command: docker-compose pull
+        - run:
+            name: Setup test volume
+            command: |
+              mkdir test-results
+              docker volume create sc4s-tests
+              docker volume create sc4s-results
 
-                docker container create --name dummy \
-                        -v sc4s-tests:/work/tests \
-                        -v sc4s-results:/work/test-results \
-                        registry.access.redhat.com/ubi7/ubi
-                docker cp tests/ dummy:/work/tests/
-                docker rm dummy
-          - run:
-              name: Docker Compose build
-              command: |
-                docker-compose build \
-                  --build-arg  RH_ACTIVATION=$RH_ACTIVATION \
-                  --build-arg  RH_ORG=$RH_ORG
-          - run:
-              name: Docker Compose up
-              command: docker-compose up  --abort-on-container-exit
-          - run:
-              name: Collect test results from Docker Compose
-              command: |
-                docker container create --name dummy \
-                        -v sc4s-tests:/work/tests \
-                        -v sc4s-results:/work/test-results \
-                        registry.access.redhat.com/ubi7/ubi
+              docker container create --name dummy \
+                      -v sc4s-tests:/work/tests \
+                      -v sc4s-results:/work/test-results \
+                      registry.access.redhat.com/ubi7/ubi
+              docker cp tests/ dummy:/work/tests/
+              docker rm dummy
+        - run:
+            name: Docker Compose build
+            command: |
+              docker-compose build \
+                --build-arg  RH_ACTIVATION=$RH_ACTIVATION \
+                --build-arg  RH_ORG=$RH_ORG
+        - run:
+            name: Docker Compose up
+            command: docker-compose up  --abort-on-container-exit
+        - run:
+            name: Collect test results from Docker Compose
+            command: |
+              docker container create --name dummy \
+                      -v sc4s-tests:/work/tests \
+                      -v sc4s-results:/work/test-results \
+                      registry.access.redhat.com/ubi7/ubi
 
-                docker cp dummy:/work/test-results/functional test-results
-                docker rm dummy
-              when: always
-          - store_test_results:
-              path: test-results
-      publish:
-        environment:
-          IMAGE_NAME: rfaircloth/scs
-        docker:
-          - image: circleci/buildpack-deps:stretch
-        steps:
-          - setup_remote_docker:
-              docker_layer_caching: true
-          - run:
-                name: Docker Login
-                command: docker login -u $DOCKER_USER -p $DOCKER_PASS
-          - run:
-              name: Docker pull
-              command: docker pull $IMAGE_NAME:$CIRCLE_SHA1
-          - run:
-              name: Docker tag image
-              command: docker tag $IMAGE_NAME:$CIRCLE_SHA1 $IMAGE_NAME:$CIRCLE_BRANCH
-          - run:
-              name: Docker push tag
-              command: docker push $IMAGE_NAME:$CIRCLE_BRANCH
+              docker cp dummy:/work/test-results/functional test-results
+              docker rm dummy
+            when: always
+        - store_test_results:
+            path: test-results
+    publish:
+      environment:
+        IMAGE_NAME: rfaircloth/scs
+      docker:
+        - image: circleci/buildpack-deps:stretch
+      steps:
+        - setup_remote_docker:
+            docker_layer_caching: true
+        - run:
+              name: Docker Login
+              command: docker login -u $DOCKER_USER -p $DOCKER_PASS
+        - run:
+            name: Docker pull
+            command: docker pull $IMAGE_NAME:$CIRCLE_SHA1
+        - run:
+            name: Docker tag image
+            command: docker tag $IMAGE_NAME:$CIRCLE_SHA1 $IMAGE_NAME:$CIRCLE_BRANCH
+        - run:
+            name: Docker push tag
+            command: docker push $IMAGE_NAME:$CIRCLE_BRANCH
 
-    workflows:
-      version: 2
-      build-publish:
-        jobs:
-          - build
-          - dgoss:
-              requires:
-                - build
-          - test-unit
-          - flake8/flake8
-          - publish:
-              requires:
-                - dgoss
-                - test
-              filters:
-                branches:
-                  only:
-                    - master
-                    - develop
+workflows:
+  build-publish:
+    jobs:
+      - build
+      - dgoss:
+          requires:
+            - build
+      - test-unit
+      - flake8/flake8
+      - publish:
+          requires:
+            - dgoss
+            - test
+          filters:
+            branches:
+              only:
+                - master
+                - develop

From d14b222df3da5f18893db12111d12a509a90fe6d Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Sun, 30 Jun 2019 17:48:40 -0400
Subject: [PATCH 21/83] Update config.yml

---
 .circleci/config.yml | 256 +++++++++++++++++++++----------------------
 1 file changed, 128 insertions(+), 128 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index c37f47b..cd38ab5 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -1,137 +1,137 @@
 version: 2.1
-  orbs:
-    flake8: arrai/flake8@5.0.0
-  jobs:
-    build:
-      environment:
-        IMAGE_NAME: rfaircloth/scs
-      docker:
-        - image: circleci/buildpack-deps:stretch
-      steps:
-        - checkout
-        - run: git submodule sync
-        - run: git submodule update --init --recursive
-        - setup_remote_docker:
-            docker_layer_caching: true
-        - run:
-              name: Docker Login
-              command: docker login -u $DOCKER_USER -p $DOCKER_PASS
-        - run:
-            name: Build Docker image
-            command: pushd package; docker build -f Dockerfile --build-arg RH_ORG=$RH_ORG --build-arg RH_ACTIVATION=$RH_ACTIVATION -t $IMAGE_NAME:build .
-        - run:
-            name: Tag Docker image
-            command: docker tag $IMAGE_NAME:build $IMAGE_NAME:$CIRCLE_SHA1
-        - run:
-            name: Push Docker image
-            command: docker push $IMAGE_NAME:$CIRCLE_SHA1
-    dgoss:
-      environment:
-        IMAGE_NAME: rfaircloth/scs
-        GOSS_VER: v0.3.7
-        GOSS_OPTS: "--max-concurrent=1 --format junit"
-        GOSS_FILES_STRATEGY: cp
+orbs:
+  flake8: arrai/flake8@5.0.0
+jobs:
+  build:
+    environment:
+      IMAGE_NAME: rfaircloth/scs
+    docker:
+      - image: circleci/buildpack-deps:stretch
+    steps:
+      - checkout
+      - run: git submodule sync
+      - run: git submodule update --init --recursive
+      - setup_remote_docker:
+          docker_layer_caching: true
+      - run:
+            name: Docker Login
+            command: docker login -u $DOCKER_USER -p $DOCKER_PASS
+      - run:
+          name: Build Docker image
+          command: pushd package; docker build -f Dockerfile --build-arg RH_ORG=$RH_ORG --build-arg RH_ACTIVATION=$RH_ACTIVATION -t $IMAGE_NAME:build .
+      - run:
+          name: Tag Docker image
+          command: docker tag $IMAGE_NAME:build $IMAGE_NAME:$CIRCLE_SHA1
+      - run:
+          name: Push Docker image
+          command: docker push $IMAGE_NAME:$CIRCLE_SHA1
+  dgoss:
+    environment:
+      IMAGE_NAME: rfaircloth/scs
+      GOSS_VER: v0.3.7
+      GOSS_OPTS: "--max-concurrent=1 --format junit"
+      GOSS_FILES_STRATEGY: cp
 
-      docker:
-        - image: circleci/buildpack-deps:stretch
-      steps:
-        - checkout
-        - setup_remote_docker:
-            docker_layer_caching: true
-        - run:
-              name: Docker Login
-              command: docker login -u $DOCKER_USER -p $DOCKER_PASS
-        - run:
-            name: Docker pull
-            command: docker pull $IMAGE_NAME:$CIRCLE_SHA1
-        - run:
-            name: Install goss
-            command: |
-              # rather than give internet scripts SU rights, we install to local user bin and add to path
-              curl -fsSL https://goss.rocks/install | GOSS_VER=v0.3.7 sudo sh
-              goss -version
-        - run:
-            name: Test Docker
-            command: |
-              mkdir -p ~/project/test-results
-              # Don't forget path!
-              export PATH=$PATH:~/bin
-              pushd package
-              GOSS_FMT_OPTIONS="perfdata verbose" GOSS_FILES_STRATEGY=cp GOSS_OPTS="--max-concurrent=1 --format junit" dgoss run -t $IMAGE_NAME:$CIRCLE_SHA1 3>&1 1>&2 2>&3 > /tmp/goss.tmp || true ; cat /tmp/goss.tmp | grep -v "<"
-              popd
-              cat /tmp/goss.tmp | grep "[<\>]" > ~/project/test-results/goss.xml
-        - store_test_results:
-            path: test-results
-    test:
-      docker:
-        - image: circleci/buildpack-deps:stretch
-      steps:
-        - setup_remote_docker:
-            docker_layer_caching: true
-        - checkout
-        - run: git submodule sync
-        - run: git submodule update --init --recursive
-        - run:
+    docker:
+      - image: circleci/buildpack-deps:stretch
+    steps:
+      - checkout
+      - setup_remote_docker:
+          docker_layer_caching: true
+      - run:
             name: Docker Login
             command: docker login -u $DOCKER_USER -p $DOCKER_PASS
-        - run:
-            name: Docker pull
-            command: docker-compose pull
-        - run:
-            name: Setup test volume
-            command: |
-              mkdir test-results
-              docker volume create sc4s-tests
-              docker volume create sc4s-results
+      - run:
+          name: Docker pull
+          command: docker pull $IMAGE_NAME:$CIRCLE_SHA1
+      - run:
+          name: Install goss
+          command: |
+            # rather than give internet scripts SU rights, we install to local user bin and add to path
+            curl -fsSL https://goss.rocks/install | GOSS_VER=v0.3.7 sudo sh
+            goss -version
+      - run:
+          name: Test Docker
+          command: |
+            mkdir -p ~/project/test-results
+            # Don't forget path!
+            export PATH=$PATH:~/bin
+            pushd package
+            GOSS_FMT_OPTIONS="perfdata verbose" GOSS_FILES_STRATEGY=cp GOSS_OPTS="--max-concurrent=1 --format junit" dgoss run -t $IMAGE_NAME:$CIRCLE_SHA1 3>&1 1>&2 2>&3 > /tmp/goss.tmp || true ; cat /tmp/goss.tmp | grep -v "<"
+            popd
+            cat /tmp/goss.tmp | grep "[<\>]" > ~/project/test-results/goss.xml
+      - store_test_results:
+          path: test-results
+  test:
+    docker:
+      - image: circleci/buildpack-deps:stretch
+    steps:
+      - setup_remote_docker:
+          docker_layer_caching: true
+      - checkout
+      - run: git submodule sync
+      - run: git submodule update --init --recursive
+      - run:
+          name: Docker Login
+          command: docker login -u $DOCKER_USER -p $DOCKER_PASS
+      - run:
+          name: Docker pull
+          command: docker-compose pull
+      - run:
+          name: Setup test volume
+          command: |
+            mkdir test-results
+            docker volume create sc4s-tests
+            docker volume create sc4s-results
 
-              docker container create --name dummy \
-                      -v sc4s-tests:/work/tests \
-                      -v sc4s-results:/work/test-results \
-                      registry.access.redhat.com/ubi7/ubi
-              docker cp tests/ dummy:/work/tests/
-              docker rm dummy
-        - run:
-            name: Docker Compose build
-            command: |
-              docker-compose build \
-                --build-arg  RH_ACTIVATION=$RH_ACTIVATION \
-                --build-arg  RH_ORG=$RH_ORG
-        - run:
-            name: Docker Compose up
-            command: docker-compose up  --abort-on-container-exit
-        - run:
-            name: Collect test results from Docker Compose
-            command: |
-              docker container create --name dummy \
-                      -v sc4s-tests:/work/tests \
-                      -v sc4s-results:/work/test-results \
-                      registry.access.redhat.com/ubi7/ubi
+            docker container create --name dummy \
+                    -v sc4s-tests:/work/tests \
+                    -v sc4s-results:/work/test-results \
+                    registry.access.redhat.com/ubi7/ubi
+            docker cp tests/ dummy:/work/tests/
+            docker rm dummy
+      - run:
+          name: Docker Compose build
+          command: |
+            docker-compose build \
+              --build-arg  RH_ACTIVATION=$RH_ACTIVATION \
+              --build-arg  RH_ORG=$RH_ORG
+      - run:
+          name: Docker Compose up
+          command: docker-compose up  --abort-on-container-exit
+      - run:
+          name: Collect test results from Docker Compose
+          command: |
+            docker container create --name dummy \
+                    -v sc4s-tests:/work/tests \
+                    -v sc4s-results:/work/test-results \
+                    registry.access.redhat.com/ubi7/ubi
 
-              docker cp dummy:/work/test-results/functional test-results
-              docker rm dummy
-            when: always
-        - store_test_results:
-            path: test-results
-    publish:
-      environment:
-        IMAGE_NAME: rfaircloth/scs
-      docker:
-        - image: circleci/buildpack-deps:stretch
-      steps:
-        - setup_remote_docker:
-            docker_layer_caching: true
-        - run:
-              name: Docker Login
-              command: docker login -u $DOCKER_USER -p $DOCKER_PASS
-        - run:
-            name: Docker pull
-            command: docker pull $IMAGE_NAME:$CIRCLE_SHA1
-        - run:
-            name: Docker tag image
-            command: docker tag $IMAGE_NAME:$CIRCLE_SHA1 $IMAGE_NAME:$CIRCLE_BRANCH
-        - run:
-            name: Docker push tag
-            command: docker push $IMAGE_NAME:$CIRCLE_BRANCH
+            docker cp dummy:/work/test-results/functional test-results
+            docker rm dummy
+          when: always
+      - store_test_results:
+          path: test-results
+  publish:
+    environment:
+      IMAGE_NAME: rfaircloth/scs
+    docker:
+      - image: circleci/buildpack-deps:stretch
+    steps:
+      - setup_remote_docker:
+          docker_layer_caching: true
+      - run:
+            name: Docker Login
+            command: docker login -u $DOCKER_USER -p $DOCKER_PASS
+      - run:
+          name: Docker pull
+          command: docker pull $IMAGE_NAME:$CIRCLE_SHA1
+      - run:
+          name: Docker tag image
+          command: docker tag $IMAGE_NAME:$CIRCLE_SHA1 $IMAGE_NAME:$CIRCLE_BRANCH
+      - run:
+          name: Docker push tag
+          command: docker push $IMAGE_NAME:$CIRCLE_BRANCH
 
 workflows:
   build-publish:

From 2fd8cccd68469ca269da35bca006d65539a57228 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Sun, 30 Jun 2019 17:49:59 -0400
Subject: [PATCH 22/83] Update config.yml

---
 .circleci/config.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index cd38ab5..9cf0762 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -62,7 +62,7 @@ jobs:
             cat /tmp/goss.tmp | grep "[<\>]" > ~/project/test-results/goss.xml
       - store_test_results:
           path: test-results
-  test:
+  test-unit:
     docker:
       - image: circleci/buildpack-deps:stretch
     steps:
@@ -145,7 +145,8 @@ workflows:
       - publish:
           requires:
             - dgoss
-            - test
+            - test-unit
+            - flake-flake8
           filters:
             branches:
               only:

From 9a44967c6192af78cdb2b715bdd366ddbf3b6b7a Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Sun, 30 Jun 2019 17:50:42 -0400
Subject: [PATCH 23/83] Update config.yml

---
 .circleci/config.yml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 9cf0762..986d63b 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -146,7 +146,6 @@ workflows:
           requires:
             - dgoss
             - test-unit
-            - flake-flake8
           filters:
             branches:
               only:

From e8e4c804908270e1be8852310d59f1cd3160f5cc Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Sun, 30 Jun 2019 17:53:26 -0400
Subject: [PATCH 24/83] Update config.yml

---
 .circleci/config.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 986d63b..159fe0e 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -142,6 +142,8 @@ workflows:
             - build
       - test-unit
       - flake8/flake8
+          wd: tests
+          executor: python37
       - publish:
           requires:
             - dgoss

From 0f5c56ff1abdaa40a85a940f6e4b534c2b50db9a Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Sun, 30 Jun 2019 17:53:53 -0400
Subject: [PATCH 25/83] Update config.yml

---
 .circleci/config.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 159fe0e..6b143b6 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -142,7 +142,7 @@ workflows:
             - build
       - test-unit
       - flake8/flake8
-          wd: tests
+          wd: ./${CIRCLE_PROJECT_REPONAME}/tests
           executor: python37
       - publish:
           requires:

From 41a6c042ea8dccb3c4a672bea90839920b904a26 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Sun, 30 Jun 2019 18:00:36 -0400
Subject: [PATCH 26/83] remove flake8 will try again later

---
 .circleci/config.yml | 17 ++++++-----------
 1 file changed, 6 insertions(+), 11 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 6b143b6..d6d5b9b 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -1,6 +1,4 @@
 version: 2.1
-orbs:
-  flake8: arrai/flake8@5.0.0
 jobs:
   build:
     environment:
@@ -14,8 +12,8 @@ jobs:
       - setup_remote_docker:
           docker_layer_caching: true
       - run:
-            name: Docker Login
-            command: docker login -u $DOCKER_USER -p $DOCKER_PASS
+          name: Docker Login
+          command: docker login -u $DOCKER_USER -p $DOCKER_PASS
       - run:
           name: Build Docker image
           command: pushd package; docker build -f Dockerfile --build-arg RH_ORG=$RH_ORG --build-arg RH_ACTIVATION=$RH_ACTIVATION -t $IMAGE_NAME:build .
@@ -39,8 +37,8 @@ jobs:
       - setup_remote_docker:
           docker_layer_caching: true
       - run:
-            name: Docker Login
-            command: docker login -u $DOCKER_USER -p $DOCKER_PASS
+          name: Docker Login
+          command: docker login -u $DOCKER_USER -p $DOCKER_PASS
       - run:
           name: Docker pull
           command: docker pull $IMAGE_NAME:$CIRCLE_SHA1
@@ -121,8 +119,8 @@ jobs:
       - setup_remote_docker:
           docker_layer_caching: true
       - run:
-            name: Docker Login
-            command: docker login -u $DOCKER_USER -p $DOCKER_PASS
+          name: Docker Login
+          command: docker login -u $DOCKER_USER -p $DOCKER_PASS
       - run:
           name: Docker pull
           command: docker pull $IMAGE_NAME:$CIRCLE_SHA1
@@ -141,9 +139,6 @@ workflows:
           requires:
             - build
       - test-unit
-      - flake8/flake8
-          wd: ./${CIRCLE_PROJECT_REPONAME}/tests
-          executor: python37
       - publish:
           requires:
             - dgoss

From a6e7be6a0319cf685c794ebca676a39d04b099ca Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <35384120+rfaircloth-splunk@users.noreply.github.com>
Date: Sun, 30 Jun 2019 21:05:57 -0400
Subject: [PATCH 27/83] Cleanup local system Fixes #1 (#5)

---
 .gitignore                 |  2 +-
 .idea/misc.xml             |  2 +-
 package/etc/syslog-ng.conf | 45 --------------------------------------
 3 files changed, 2 insertions(+), 47 deletions(-)

diff --git a/.gitignore b/.gitignore
index 36345c7..959e704 100644
--- a/.gitignore
+++ b/.gitignore
@@ -295,6 +295,6 @@ tags
 # Persistent undo
 [._]*.un~
 
-/test-results
+/test-results/
 /.idea/workspace.xml
 /.idea/tasks.xml
diff --git a/.idea/misc.xml b/.idea/misc.xml
index 87f2df8..92749e9 100644
--- a/.idea/misc.xml
+++ b/.idea/misc.xml
@@ -7,4 +7,4 @@
   <component name="PythonCompatibilityInspectionAdvertiser">
     <option name="version" value="3" />
   </component>
-</project>
\ No newline at end of file
+</project>
diff --git a/package/etc/syslog-ng.conf b/package/etc/syslog-ng.conf
index 68c8b17..be2e87a 100755
--- a/package/etc/syslog-ng.conf
+++ b/package/etc/syslog-ng.conf
@@ -40,48 +40,3 @@ source s_sys {
         internal();
 };
 
-# ===============================================================================================
-# Local System destinations
-# ===============================================================================================
-
-destination d_cons { file("/dev/console"); };
-destination d_mesg { file("/var/log/syslog-ng/messages"); };
-destination d_auth { file("/dev/shm/secure"); };
-destination d_mail { file("/dev/shm/maillog" flush_lines(10)); };
-destination d_spol { file("/dev/shm/spooler"); };
-destination d_boot { file("/dev/shm/boot.log"); };
-destination d_cron { file("/dev/shm/cron"); };
-destination d_kern { file("/dev/shm/kern"); };
-destination d_mlal { usertty("*"); };
-destination d_syslog { file("/var/log/syslog"); };
-
-# ===============================================================================================
-# Local System filters
-# ===============================================================================================
-
-filter f_kernel     { facility(kern); };
-filter f_default    { level(info..emerg) and
-                        not (facility(mail)
-                        or facility(authpriv)
-                        or facility(cron)); };
-filter f_auth       { facility(authpriv); };
-filter f_mail       { facility(mail); };
-filter f_emergency  { level(emerg); };
-filter f_news       { facility(uucp) or
-                        (facility(news)
-                        and level(crit..emerg)); };
-filter f_boot   { facility(local7); };
-filter f_cron   { facility(cron); };
-
-# ===============================================================================================
-# Local System Logging
-# ===============================================================================================
-
-log { source(s_sys); filter(f_kernel); destination(d_kern); };
-log { source(s_sys); filter(f_default); destination(d_mesg); };
-log { source(s_sys); filter(f_auth); destination(d_auth); };
-log { source(s_sys); filter(f_mail); destination(d_mail); };
-log { source(s_sys); filter(f_emergency); destination(d_mlal); };
-log { source(s_sys); filter(f_news); destination(d_spol); };
-log { source(s_sys); filter(f_boot); destination(d_boot); };
-log { source(s_sys); filter(f_cron); destination(d_cron); };

From 0c9b9f93fcd16987a97e6e954043bba9aa2eae46 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <35384120+rfaircloth-splunk@users.noreply.github.com>
Date: Mon, 1 Jul 2019 09:54:51 -0400
Subject: [PATCH 28/83] Feature/#6 add clair scanner to ci (#7)

Fixes #6 adds vuln scanner and current approved vulns to CI
---
 .circleci/config.yml                | 32 +++++++++++-
 .idea/modules.xml                   |  8 +++
 .idea/splunk-connect-for-syslog.iml | 19 ++++++++
 .idea/vcs.xml                       |  9 ++++
 clair-whitelist.yml                 | 12 +++++
 clair_to_junit_parser.py            | 75 +++++++++++++++++++++++++++++
 requirements.txt                    |  3 +-
 7 files changed, 156 insertions(+), 2 deletions(-)
 create mode 100644 .idea/modules.xml
 create mode 100644 .idea/splunk-connect-for-syslog.iml
 create mode 100644 .idea/vcs.xml
 create mode 100644 clair-whitelist.yml
 create mode 100644 clair_to_junit_parser.py

diff --git a/.circleci/config.yml b/.circleci/config.yml
index d6d5b9b..419b1fe 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -1,4 +1,8 @@
 version: 2.1
+
+orbs:
+  clair_scanner: ovotech/clair-scanner@1
+
 jobs:
   build:
     environment:
@@ -110,6 +114,27 @@ jobs:
           when: always
       - store_test_results:
           path: test-results
+  test-scan_images:
+    environment:
+      IMAGE_NAME: rfaircloth/scs
+    executor: clair_scanner/default
+    steps:
+    - clair_scanner/scan:
+        image: $IMAGE_NAME:$CIRCLE_SHA1
+        whitelist: clair-whitelist.yml
+    - run:
+        command: |
+          mkdir -p /root/project/test-results
+          pip install -r requirements.txt
+          python clair_to_junit_parser.py "/clair-reports/$IMAGE_NAME:$CIRCLE_SHA1.json" --output test-results/results.xml
+        when: on_fail
+#    - store_test_results:
+#        path: test-results/results.xml
+    - store_artifacts:
+        path: test-results
+    - store_artifacts:
+        path: /clair-reports
+
   publish:
     environment:
       IMAGE_NAME: rfaircloth/scs
@@ -138,7 +163,12 @@ workflows:
       - dgoss:
           requires:
             - build
-      - test-unit
+      - test-unit:
+          requires:
+            - build
+      - test-scan_images:
+          requires:
+            - build
       - publish:
           requires:
             - dgoss
diff --git a/.idea/modules.xml b/.idea/modules.xml
new file mode 100644
index 0000000..4e16e75
--- /dev/null
+++ b/.idea/modules.xml
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="ProjectModuleManager">
+    <modules>
+      <module fileurl="file://$PROJECT_DIR$/.idea/splunk-connect-for-syslog.iml" filepath="$PROJECT_DIR$/.idea/splunk-connect-for-syslog.iml" />
+    </modules>
+  </component>
+</project>
\ No newline at end of file
diff --git a/.idea/splunk-connect-for-syslog.iml b/.idea/splunk-connect-for-syslog.iml
new file mode 100644
index 0000000..3ce5619
--- /dev/null
+++ b/.idea/splunk-connect-for-syslog.iml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<module type="PYTHON_MODULE" version="4">
+  <component name="NewModuleRootManager">
+    <content url="file://$MODULE_DIR$" />
+    <orderEntry type="inheritedJdk" />
+    <orderEntry type="sourceFolder" forTests="false" />
+  </component>
+  <component name="TemplatesService">
+    <option name="TEMPLATE_FOLDERS">
+      <list>
+        <option value="$MODULE_DIR$/package/etc/conf.d/templates" />
+      </list>
+    </option>
+  </component>
+  <component name="TestRunnerService">
+    <option name="projectConfiguration" value="pytest" />
+    <option name="PROJECT_TEST_RUNNER" value="pytest" />
+  </component>
+</module>
\ No newline at end of file
diff --git a/.idea/vcs.xml b/.idea/vcs.xml
new file mode 100644
index 0000000..53b20c8
--- /dev/null
+++ b/.idea/vcs.xml
@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="VcsDirectoryMappings">
+    <mapping directory="$PROJECT_DIR$" vcs="Git" />
+    <mapping directory="$PROJECT_DIR$/package/syslog-ng" vcs="Git" />
+    <mapping directory="$PROJECT_DIR$/package/syslog-ng/lib/ivykis" vcs="Git" />
+    <mapping directory="$PROJECT_DIR$/package/syslog-ng/lib/jsonc" vcs="Git" />
+  </component>
+</project>
\ No newline at end of file
diff --git a/clair-whitelist.yml b/clair-whitelist.yml
new file mode 100644
index 0000000..036c034
--- /dev/null
+++ b/clair-whitelist.yml
@@ -0,0 +1,12 @@
+generalwhitelist:
+    RHSA-2019:1619: False Positive
+    RHSA-2018:0654: False Positive
+    RHSA-2018:1967: False Positive
+    RHSA-2017:0372: False Positive
+    RHSA-2018:0502: False Positive
+    RHSA-2018:2772: False Positive
+    RHSA-2018:1374: False Positive
+    RHSA-2018:0180: False Positive
+
+images:
+    scs:
diff --git a/clair_to_junit_parser.py b/clair_to_junit_parser.py
new file mode 100644
index 0000000..e7618cd
--- /dev/null
+++ b/clair_to_junit_parser.py
@@ -0,0 +1,75 @@
+import json
+from junit_xml import TestSuite, TestCase
+import os
+import argparse
+import logging
+
+logger = logging.getLogger('clair_scanner_converter')
+logger.setLevel(logging.WARN)
+console_logger = logging.StreamHandler()
+console_logger.setLevel(logging.WARN)
+formatter = logging.Formatter('%(asctime)s - %(name)s - %(levelname)s - %(message)s')
+console_logger.setFormatter(formatter)
+logger.addHandler(console_logger)
+
+def parse_args():
+    parser = argparse.ArgumentParser(description="Process Json File")
+    parser.add_argument("clairfile", type=str, default=None, help="Location of clair scanner ouptut file to convert to cucumber.json")
+    parser.add_argument("--output", type=str, default=None, help="name of output file to store in new format. Defaults to clair inputfile")
+    args = parser.parse_args()
+    if not args.output:
+        logger.warning("No output file specified, replacing input file.")
+        args.output = args.clairfile
+    return args
+
+def main():
+    cwd = os.getcwd()
+    args = parse_args()
+    try:
+        if os.path.exists(args.clairfile):
+            with open(args.clairfile) as clairfile:
+                clair_parsed_file = json.load(clairfile)
+        if os.path.exists(os.path.join("clair-scanner-logs", "/clair_setup_errors.log")):
+            with open(os.path.join("clair-scanner-logs", "/clair_setup_errors.log"), 'r') as clairfile_errors:
+                clair_parsed_error_file = clairfile_errors.readlines()
+        else:
+            clair_parsed_error_file = None
+    except:
+        logger.exception("Failed to parse clair / clair_error file.  Exiting.")
+
+    current_sorted_level = None
+    current_suite = None
+    test_suites = []
+    if clair_parsed_error_file:
+        current_suite = TestSuite("SetupError")
+        new_step = TestCase(name="SetupError", classname="SetupError", status="unapproved", stderr=clair_parsed_error_file)
+        new_step.log = clair_parsed_error_file
+        new_step.category = "SetupError"
+        new_step.failure_type = "unapproved"
+        new_step.failure_message = "Please have the following security issue reviewed by Splunk: {}".format(vuln["link"])
+        new_step.failure_output = clair_parsed_error_file
+        current_suite.test_cases.append(new_step)
+        test_suites.append(current_suite)
+    for vuln in clair_parsed_file["vulnerabilities"]:
+        if current_sorted_level != vuln["severity"]:
+            if current_suite:
+                test_suites.append(current_suite)
+            current_suite = TestSuite(name=vuln["severity"])
+            current_sorted_level = vuln["severity"]
+        new_step = TestCase(name=vuln["vulnerability"], classname=vuln["severity"], status="unapproved", url=vuln["link"], stderr=vuln["description"])
+        new_step.log = vuln
+        new_step.category = vuln["severity"]
+        new_step.failure_type = "unapproved"
+        new_step.failure_message = "Please have the following security issue reviewed by Splunk: {}".format(vuln["link"])
+        new_step.failure_output = vuln["description"]
+        current_suite.test_cases.append(new_step)
+    # try to write new file
+    try:
+        with open(args.output, 'w') as outfile:
+            outfile.write(TestSuite.to_xml_string(test_suites))
+    except:
+        logger.exception("Filed saving file.")
+
+
+if __name__ == "__main__":
+    main()
\ No newline at end of file
diff --git a/requirements.txt b/requirements.txt
index 7b11f5e..866d712 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,2 +1,3 @@
 -r ./tests/requirements.txt
-
+junit_xml
+argparse

From ed42457b9447a2ba78b512418581292a3400a9c2 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Mon, 1 Jul 2019 10:29:45 -0400
Subject: [PATCH 29/83] demo experience

---
 README.md            | 42 +++++++++++++++++++++++++++++++++++++++++-
 demo-with-compose.sh | 17 +++++++++++++++++
 docker-compose.yml   |  2 +-
 3 files changed, 59 insertions(+), 2 deletions(-)
 create mode 100755 demo-with-compose.sh

diff --git a/README.md b/README.md
index 785eacf..e61602c 100644
--- a/README.md
+++ b/README.md
@@ -1,2 +1,42 @@
 # splunk-connect-for-syslog
-Splunk Connect for Syslog
+
+Splunk Connect for Syslog is an open source packaged solution for 
+getting data into Splunk using syslog-ng (OSE) and the Splunk 
+HTTP event Collector. 
+
+# Use the demo
+
+The Splunk Connect for syslog demo uses docker and docker compose
+to configure a instance of Splunk along with syslog-ng and a test
+harness to simulate a mix of events. Ensure git, docker and docker-compose
+are pre-installed and working prior to continuing.
+
+
+- Clone the repository and cd into directory
+
+```bash
+git clone git@github.com:splunk/splunk-connect-for-syslog.git
+cd splunk-connect-for-syslog
+```
+
+- Create a working .env file * Note for demo purposes this file does not need to be modified
+
+```bash
+cp .env.template .env
+```
+
+- Start the demo environment
+
+```bash
+./demo-with-compose.sh
+```
+
+- Login to splunk by browsing to http://127.0.0.1:8000 user name admin password "Changed@11"
+
+- Search the main index to see indexed events
+
+```spl
+index = main
+```
+
+
diff --git a/demo-with-compose.sh b/demo-with-compose.sh
new file mode 100755
index 0000000..a2f3371
--- /dev/null
+++ b/demo-with-compose.sh
@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+
+mkdir test-results
+docker volume create sc4s-tests
+
+docker container create --name dummy \
+        -v sc4s-tests:/work/tests \
+        registry.access.redhat.com/ubi7/ubi
+docker cp tests/ dummy:/work/tests/
+docker rm dummy
+
+docker-compose pull
+docker-compose up
+
+EXIT=$0
+
+
diff --git a/docker-compose.yml b/docker-compose.yml
index 829b864..97ce5e8 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -12,7 +12,7 @@ services:
       - SPLUNK_PASSWORD
 
   sc4s:
-#    image: rfaircloth/scs:latest
+    image: rfaircloth/scs:latest
     build:
       context: ./package
       args:

From 741191e0575ae5cce2c8563cbe4f272026bff406 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <35384120+rfaircloth-splunk@users.noreply.github.com>
Date: Mon, 1 Jul 2019 14:05:53 -0400
Subject: [PATCH 30/83] Adds copyright and license information (#10)

This update Fixes #9 adding copyright and license information
---
 .circleci/config.yml                |   8 ++
 .env.template                       |   8 ++
 .gitignore                          |   8 ++
 LICENSE-2.0                         |  13 ---
 LICENSE-BSD2                        |  25 ++++++
 LICENSE-CC0                         | 121 ++++++++++++++++++++++++++++
 README.md                           |   6 ++
 clair-whitelist.yml                 |   8 ++
 clair_to_junit_parser.py            |   5 ++
 demo-with-compose.sh                |   5 ++
 docker-compose.yml                  |   8 ++
 package/Dockerfile                  |   8 ++
 package/confluent.repo              |   8 ++
 package/etc/syslog-ng.conf          |   8 ++
 package/goss.yaml                   |   8 ++
 package/sbin/entrypoint.sh          |   6 +-
 package/sbin/goss.yaml              |   8 ++
 package/scripts/splunkmetrics.sh    |   5 ++
 package/scripts/switch_transport.sh |   5 ++
 requirements.txt                    |   8 ++
 test-with-compose.sh                |   5 ++
 tests/Dockerfile                    |   8 ++
 tests/requirements.txt              |   8 ++
 tests/test_poc.py                   |   5 ++
 24 files changed, 291 insertions(+), 14 deletions(-)
 delete mode 100644 LICENSE-2.0
 create mode 100644 LICENSE-BSD2
 create mode 100644 LICENSE-CC0

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 419b1fe..4786b41 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -1,3 +1,11 @@
+#Splunk Connect for Syslog (SC4S) by Splunk, Inc.
+#
+#To the extent possible under law, the person who associated CC0 with
+#Splunk Connect for Syslog (SC4S) has waived all copyright and related or neighboring rights
+#to Splunk Connect for Syslog (SC4S).
+#
+#You should have received a copy of the CC0 legalcode along with this
+#work.  If not, see <http://creativecommons.org/publicdomain/zero/1.0/>.
 version: 2.1
 
 orbs:
diff --git a/.env.template b/.env.template
index dd14966..b828de9 100644
--- a/.env.template
+++ b/.env.template
@@ -1,3 +1,11 @@
+#Splunk Connect for Syslog (SC4S) by Splunk, Inc.
+#
+#To the extent possible under law, the person who associated CC0 with
+#Splunk Connect for Syslog (SC4S) has waived all copyright and related or neighboring rights
+#to Splunk Connect for Syslog (SC4S).
+#
+#You should have received a copy of the CC0 legalcode along with this
+#work.  If not, see <http://creativecommons.org/publicdomain/zero/1.0/>.
 RH_ORG=xxxx
 RH_ACTIVATION=xxxxx
 SPLUNK_HEC_TOKEN=a778f63a-5dff-4e3c-a72c-a03183659e94
diff --git a/.gitignore b/.gitignore
index 959e704..e0adc68 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,11 @@
+#Splunk Connect for Syslog (SC4S) by Splunk, Inc.
+#
+#To the extent possible under law, the person who associated CC0 with
+#Splunk Connect for Syslog (SC4S) has waived all copyright and related or neighboring rights
+#to Splunk Connect for Syslog (SC4S).
+#
+#You should have received a copy of the CC0 legalcode along with this
+#work.  If not, see <http://creativecommons.org/publicdomain/zero/1.0/>.
 # Created by .ignore support plugin (hsz.mobi)
 ### GitBook template
 # Node rules:
diff --git a/LICENSE-2.0 b/LICENSE-2.0
deleted file mode 100644
index 913f595..0000000
--- a/LICENSE-2.0
+++ /dev/null
@@ -1,13 +0,0 @@
-Copyright 2019 Splunk Inc.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
\ No newline at end of file
diff --git a/LICENSE-BSD2 b/LICENSE-BSD2
new file mode 100644
index 0000000..904f2fe
--- /dev/null
+++ b/LICENSE-BSD2
@@ -0,0 +1,25 @@
+BSD 2-Clause License
+
+Copyright (c) 2019, Splunk, Inc
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+   list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
diff --git a/LICENSE-CC0 b/LICENSE-CC0
new file mode 100644
index 0000000..1625c17
--- /dev/null
+++ b/LICENSE-CC0
@@ -0,0 +1,121 @@
+Creative Commons Legal Code
+
+CC0 1.0 Universal
+
+    CREATIVE COMMONS CORPORATION IS NOT A LAW FIRM AND DOES NOT PROVIDE
+    LEGAL SERVICES. DISTRIBUTION OF THIS DOCUMENT DOES NOT CREATE AN
+    ATTORNEY-CLIENT RELATIONSHIP. CREATIVE COMMONS PROVIDES THIS
+    INFORMATION ON AN "AS-IS" BASIS. CREATIVE COMMONS MAKES NO WARRANTIES
+    REGARDING THE USE OF THIS DOCUMENT OR THE INFORMATION OR WORKS
+    PROVIDED HEREUNDER, AND DISCLAIMS LIABILITY FOR DAMAGES RESULTING FROM
+    THE USE OF THIS DOCUMENT OR THE INFORMATION OR WORKS PROVIDED
+    HEREUNDER.
+
+Statement of Purpose
+
+The laws of most jurisdictions throughout the world automatically confer
+exclusive Copyright and Related Rights (defined below) upon the creator
+and subsequent owner(s) (each and all, an "owner") of an original work of
+authorship and/or a database (each, a "Work").
+
+Certain owners wish to permanently relinquish those rights to a Work for
+the purpose of contributing to a commons of creative, cultural and
+scientific works ("Commons") that the public can reliably and without fear
+of later claims of infringement build upon, modify, incorporate in other
+works, reuse and redistribute as freely as possible in any form whatsoever
+and for any purposes, including without limitation commercial purposes.
+These owners may contribute to the Commons to promote the ideal of a free
+culture and the further production of creative, cultural and scientific
+works, or to gain reputation or greater distribution for their Work in
+part through the use and efforts of others.
+
+For these and/or other purposes and motivations, and without any
+expectation of additional consideration or compensation, the person
+associating CC0 with a Work (the "Affirmer"), to the extent that he or she
+is an owner of Copyright and Related Rights in the Work, voluntarily
+elects to apply CC0 to the Work and publicly distribute the Work under its
+terms, with knowledge of his or her Copyright and Related Rights in the
+Work and the meaning and intended legal effect of CC0 on those rights.
+
+1. Copyright and Related Rights. A Work made available under CC0 may be
+protected by copyright and related or neighboring rights ("Copyright and
+Related Rights"). Copyright and Related Rights include, but are not
+limited to, the following:
+
+  i. the right to reproduce, adapt, distribute, perform, display,
+     communicate, and translate a Work;
+ ii. moral rights retained by the original author(s) and/or performer(s);
+iii. publicity and privacy rights pertaining to a person's image or
+     likeness depicted in a Work;
+ iv. rights protecting against unfair competition in regards to a Work,
+     subject to the limitations in paragraph 4(a), below;
+  v. rights protecting the extraction, dissemination, use and reuse of data
+     in a Work;
+ vi. database rights (such as those arising under Directive 96/9/EC of the
+     European Parliament and of the Council of 11 March 1996 on the legal
+     protection of databases, and under any national implementation
+     thereof, including any amended or successor version of such
+     directive); and
+vii. other similar, equivalent or corresponding rights throughout the
+     world based on applicable law or treaty, and any national
+     implementations thereof.
+
+2. Waiver. To the greatest extent permitted by, but not in contravention
+of, applicable law, Affirmer hereby overtly, fully, permanently,
+irrevocably and unconditionally waives, abandons, and surrenders all of
+Affirmer's Copyright and Related Rights and associated claims and causes
+of action, whether now known or unknown (including existing as well as
+future claims and causes of action), in the Work (i) in all territories
+worldwide, (ii) for the maximum duration provided by applicable law or
+treaty (including future time extensions), (iii) in any current or future
+medium and for any number of copies, and (iv) for any purpose whatsoever,
+including without limitation commercial, advertising or promotional
+purposes (the "Waiver"). Affirmer makes the Waiver for the benefit of each
+member of the public at large and to the detriment of Affirmer's heirs and
+successors, fully intending that such Waiver shall not be subject to
+revocation, rescission, cancellation, termination, or any other legal or
+equitable action to disrupt the quiet enjoyment of the Work by the public
+as contemplated by Affirmer's express Statement of Purpose.
+
+3. Public License Fallback. Should any part of the Waiver for any reason
+be judged legally invalid or ineffective under applicable law, then the
+Waiver shall be preserved to the maximum extent permitted taking into
+account Affirmer's express Statement of Purpose. In addition, to the
+extent the Waiver is so judged Affirmer hereby grants to each affected
+person a royalty-free, non transferable, non sublicensable, non exclusive,
+irrevocable and unconditional license to exercise Affirmer's Copyright and
+Related Rights in the Work (i) in all territories worldwide, (ii) for the
+maximum duration provided by applicable law or treaty (including future
+time extensions), (iii) in any current or future medium and for any number
+of copies, and (iv) for any purpose whatsoever, including without
+limitation commercial, advertising or promotional purposes (the
+"License"). The License shall be deemed effective as of the date CC0 was
+applied by Affirmer to the Work. Should any part of the License for any
+reason be judged legally invalid or ineffective under applicable law, such
+partial invalidity or ineffectiveness shall not invalidate the remainder
+of the License, and in such case Affirmer hereby affirms that he or she
+will not (i) exercise any of his or her remaining Copyright and Related
+Rights in the Work or (ii) assert any associated claims and causes of
+action with respect to the Work, in either case contrary to Affirmer's
+express Statement of Purpose.
+
+4. Limitations and Disclaimers.
+
+ a. No trademark or patent rights held by Affirmer are waived, abandoned,
+    surrendered, licensed or otherwise affected by this document.
+ b. Affirmer offers the Work as-is and makes no representations or
+    warranties of any kind concerning the Work, express, implied,
+    statutory or otherwise, including without limitation warranties of
+    title, merchantability, fitness for a particular purpose, non
+    infringement, or the absence of latent or other defects, accuracy, or
+    the present or absence of errors, whether or not discoverable, all to
+    the greatest extent permissible under applicable law.
+ c. Affirmer disclaims responsibility for clearing rights of other persons
+    that may apply to the Work or any use thereof, including without
+    limitation any person's Copyright and Related Rights in the Work.
+    Further, Affirmer disclaims responsibility for obtaining any necessary
+    consents, permissions or other rights required for any use of the
+    Work.
+ d. Affirmer understands and acknowledges that Creative Commons is not a
+    party to this document and has no duty or obligation with respect to
+    this CC0 or use of the Work.
\ No newline at end of file
diff --git a/README.md b/README.md
index e61602c..02b59dd 100644
--- a/README.md
+++ b/README.md
@@ -39,4 +39,10 @@ cp .env.template .env
 index = main
 ```
 
+# License
 
+
+
+Configuration and documentation licensed subject to [CC0](LICENSE-CC0)
+
+Code and scripts licensed subject to [BSD-2-Clause](LICENSE-BSD2) 
\ No newline at end of file
diff --git a/clair-whitelist.yml b/clair-whitelist.yml
index 036c034..979a352 100644
--- a/clair-whitelist.yml
+++ b/clair-whitelist.yml
@@ -1,3 +1,11 @@
+#Splunk Connect for Syslog (SC4S) by Splunk, Inc.
+#
+#To the extent possible under law, the person who associated CC0 with
+#Splunk Connect for Syslog (SC4S) has waived all copyright and related or neighboring rights
+#to Splunk Connect for Syslog (SC4S).
+#
+#You should have received a copy of the CC0 legalcode along with this
+#work.  If not, see <http://creativecommons.org/publicdomain/zero/1.0/>.
 generalwhitelist:
     RHSA-2019:1619: False Positive
     RHSA-2018:0654: False Positive
diff --git a/clair_to_junit_parser.py b/clair_to_junit_parser.py
index e7618cd..7dbc220 100644
--- a/clair_to_junit_parser.py
+++ b/clair_to_junit_parser.py
@@ -1,3 +1,8 @@
+#Copyright 2019 Splunk, Inc.
+#
+#Use of this source code is governed by a BSD-2-clause-style
+#license that can be found in the LICENSE-BSD2 file or at
+#https://opensource.org/licenses/BSD-2-Clause
 import json
 from junit_xml import TestSuite, TestCase
 import os
diff --git a/demo-with-compose.sh b/demo-with-compose.sh
index a2f3371..86c0fbf 100755
--- a/demo-with-compose.sh
+++ b/demo-with-compose.sh
@@ -1,4 +1,9 @@
 #!/usr/bin/env bash
+#Copyright 2019 Splunk, Inc.
+#
+#Use of this source code is governed by a BSD-2-clause-style
+#license that can be found in the LICENSE-BSD2 file or at
+#https://opensource.org/licenses/BSD-2-Clause
 
 mkdir test-results
 docker volume create sc4s-tests
diff --git a/docker-compose.yml b/docker-compose.yml
index 97ce5e8..cf96c95 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,3 +1,11 @@
+#Splunk Connect for Syslog (SC4S) by Splunk, Inc.
+#
+#To the extent possible under law, the person who associated CC0 with
+#Splunk Connect for Syslog (SC4S) has waived all copyright and related or neighboring rights
+#to Splunk Connect for Syslog (SC4S).
+#
+#You should have received a copy of the CC0 legalcode along with this
+#work.  If not, see <http://creativecommons.org/publicdomain/zero/1.0/>.
 version: "3"
 services:
   test:
diff --git a/package/Dockerfile b/package/Dockerfile
index 2c622a1..f3b9f96 100644
--- a/package/Dockerfile
+++ b/package/Dockerfile
@@ -1,3 +1,11 @@
+#Splunk Connect for Syslog (SC4S) by Splunk, Inc.
+#
+#To the extent possible under law, the person who associated CC0 with
+#Splunk Connect for Syslog (SC4S) has waived all copyright and related or neighboring rights
+#to Splunk Connect for Syslog (SC4S).
+#
+#You should have received a copy of the CC0 legalcode along with this
+#work.  If not, see <http://creativecommons.org/publicdomain/zero/1.0/>.
 FROM registry.access.redhat.com/rhel7/rhel
 
 ARG RH_ORG
diff --git a/package/confluent.repo b/package/confluent.repo
index 1627e8d..26ecf54 100644
--- a/package/confluent.repo
+++ b/package/confluent.repo
@@ -1,3 +1,11 @@
+#Splunk Connect for Syslog (SC4S) by Splunk, Inc.
+#
+#To the extent possible under law, the person who associated CC0 with
+#Splunk Connect for Syslog (SC4S) has waived all copyright and related or neighboring rights
+#to Splunk Connect for Syslog (SC4S).
+#
+#You should have received a copy of the CC0 legalcode along with this
+#work.  If not, see <http://creativecommons.org/publicdomain/zero/1.0/>.
 [Confluent.dist]
 name=Confluent repository (dist)
 baseurl=https://packages.confluent.io/rpm/5.2/7
diff --git a/package/etc/syslog-ng.conf b/package/etc/syslog-ng.conf
index be2e87a..e96a65c 100755
--- a/package/etc/syslog-ng.conf
+++ b/package/etc/syslog-ng.conf
@@ -1,4 +1,12 @@
 @version:3.22
+#Splunk Connect for Syslog (SC4S) by Splunk, Inc.
+#
+#To the extent possible under law, the person who associated CC0 with
+#Splunk Connect for Syslog (SC4S) has waived all copyright and related or neighboring rights
+#to Splunk Connect for Syslog (SC4S).
+#
+#You should have received a copy of the CC0 legalcode along with this
+#work.  If not, see <http://creativecommons.org/publicdomain/zero/1.0/>.
 
 # syslog-ng configuration file.
 #
diff --git a/package/goss.yaml b/package/goss.yaml
index 5c1893e..83c913b 100644
--- a/package/goss.yaml
+++ b/package/goss.yaml
@@ -1,3 +1,11 @@
+#Splunk Connect for Syslog (SC4S) by Splunk, Inc.
+#
+#To the extent possible under law, the person who associated CC0 with
+#Splunk Connect for Syslog (SC4S) has waived all copyright and related or neighboring rights
+#to Splunk Connect for Syslog (SC4S).
+#
+#You should have received a copy of the CC0 legalcode along with this
+#work.  If not, see <http://creativecommons.org/publicdomain/zero/1.0/>.
 process:
   syslog-ng:
     running: true
diff --git a/package/sbin/entrypoint.sh b/package/sbin/entrypoint.sh
index 7a7b0aa..c9d27f7 100755
--- a/package/sbin/entrypoint.sh
+++ b/package/sbin/entrypoint.sh
@@ -1,5 +1,9 @@
 #!/opt/rh/rh-python36/root/usr/bin/dumb-init /bin/bash
-
+#Copyright 2019 Splunk, Inc.
+#
+#Use of this source code is governed by a BSD-2-clause-style
+#license that can be found in the LICENSE-BSD2 file or at
+#https://opensource.org/licenses/BSD-2-Clause
 #Run syslog
 mkdir /opt/syslog-ng/var
 rm /opt/syslog-ng/var/syslog-ng.ctl || true
diff --git a/package/sbin/goss.yaml b/package/sbin/goss.yaml
index abd12fb..7d1cd7d 100644
--- a/package/sbin/goss.yaml
+++ b/package/sbin/goss.yaml
@@ -1,3 +1,11 @@
+#Splunk Connect for Syslog (SC4S) by Splunk, Inc.
+#
+#To the extent possible under law, the person who associated CC0 with
+#Splunk Connect for Syslog (SC4S) has waived all copyright and related or neighboring rights
+#to Splunk Connect for Syslog (SC4S).
+#
+#You should have received a copy of the CC0 legalcode along with this
+#work.  If not, see <http://creativecommons.org/publicdomain/zero/1.0/>.
 process:
   syslog-ng:
     running: true
diff --git a/package/scripts/splunkmetrics.sh b/package/scripts/splunkmetrics.sh
index d62014d..7017d88 100755
--- a/package/scripts/splunkmetrics.sh
+++ b/package/scripts/splunkmetrics.sh
@@ -1,4 +1,9 @@
 #!/bin/bash
+#Copyright 2019 Splunk, Inc.
+#
+#Use of this source code is governed by a BSD-2-clause-style
+#license that can be found in the LICENSE-BSD2 file or at
+#https://opensource.org/licenses/BSD-2-Clause
 sleep 30
 while sleep 10
 do
diff --git a/package/scripts/switch_transport.sh b/package/scripts/switch_transport.sh
index 15863c3..f942d44 100755
--- a/package/scripts/switch_transport.sh
+++ b/package/scripts/switch_transport.sh
@@ -1,4 +1,9 @@
 #!/bin/bash
+#Copyright 2019 Splunk, Inc.
+#
+#Use of this source code is governed by a BSD-2-clause-style
+#license that can be found in the LICENSE-BSD2 file or at
+#https://opensource.org/licenses/BSD-2-Clause
 
 #  Script to change all filters to use selected transport (UF, HEC, or kafka).
 #  If one or more filters uses a transport different from all the others, they will need to be
diff --git a/requirements.txt b/requirements.txt
index 866d712..345c370 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,3 +1,11 @@
+#Splunk Connect for Syslog (SC4S) by Splunk, Inc.
+#
+#To the extent possible under law, the person who associated CC0 with
+#Splunk Connect for Syslog (SC4S) has waived all copyright and related or neighboring rights
+#to Splunk Connect for Syslog (SC4S).
+#
+#You should have received a copy of the CC0 legalcode along with this
+#work.  If not, see <http://creativecommons.org/publicdomain/zero/1.0/>.
 -r ./tests/requirements.txt
 junit_xml
 argparse
diff --git a/test-with-compose.sh b/test-with-compose.sh
index f426220..b1050aa 100755
--- a/test-with-compose.sh
+++ b/test-with-compose.sh
@@ -1,4 +1,9 @@
 #!/usr/bin/env bash
+#Copyright 2019 Splunk, Inc.
+#
+#Use of this source code is governed by a BSD-2-clause-style
+#license that can be found in the LICENSE-BSD2 file or at
+#https://opensource.org/licenses/BSD-2-Clause
 
 mkdir test-results
 docker volume create sc4s-tests
diff --git a/tests/Dockerfile b/tests/Dockerfile
index 36fa35e..cb630f3 100644
--- a/tests/Dockerfile
+++ b/tests/Dockerfile
@@ -1,3 +1,11 @@
+#Splunk Connect for Syslog (SC4S) by Splunk, Inc.
+#
+#To the extent possible under law, the person who associated CC0 with
+#Splunk Connect for Syslog (SC4S) has waived all copyright and related or neighboring rights
+#to Splunk Connect for Syslog (SC4S).
+#
+#You should have received a copy of the CC0 legalcode along with this
+#work.  If not, see <http://creativecommons.org/publicdomain/zero/1.0/>.
 FROM python:3.7
 
 COPY requirements.txt /
diff --git a/tests/requirements.txt b/tests/requirements.txt
index 199f49b..cc706aa 100644
--- a/tests/requirements.txt
+++ b/tests/requirements.txt
@@ -1,3 +1,11 @@
+#Splunk Connect for Syslog (SC4S) by Splunk, Inc.
+#
+#To the extent possible under law, the person who associated CC0 with
+#Splunk Connect for Syslog (SC4S) has waived all copyright and related or neighboring rights
+#to Splunk Connect for Syslog (SC4S).
+#
+#You should have received a copy of the CC0 legalcode along with this
+#work.  If not, see <http://creativecommons.org/publicdomain/zero/1.0/>.
 pytest
 jinja2
 jinja2-time
diff --git a/tests/test_poc.py b/tests/test_poc.py
index e04aa01..586d6ba 100644
--- a/tests/test_poc.py
+++ b/tests/test_poc.py
@@ -1,3 +1,8 @@
+#Copyright 2019 Splunk, Inc.
+#
+#Use of this source code is governed by a BSD-2-clause-style
+#license that can be found in the LICENSE-BSD2 file or at
+#https://opensource.org/licenses/BSD-2-Clause
 import random
 import socket
 import urllib.request

From 8f20ae01065adf53b2f6c2e69244448f7b7ed6a4 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <35384120+rfaircloth-splunk@users.noreply.github.com>
Date: Thu, 11 Jul 2019 14:22:36 -0700
Subject: [PATCH 31/83] Feature/baseconfig (#13)

This change implements the configuration framework allowing plug of filter modules for the primary deployment type
Fixes #12
Fixes #11
This change adds a filter for Palo Alto networks devices
---
 .gitignore                                    |   3 +
 .idea/misc.xml                                |   4 +-
 .idea/splunk-connect-for-syslog.iml           |   2 +-
 docker-compose.yml                            |   5 +
 package/Dockerfile                            |   4 +-
 package/etc/conf.d/blocks/b_destinations.conf | 251 ------------------
 package/etc/conf.d/blocks/b_parsers.conf      |  78 ++++--
 package/etc/conf.d/blocks/b_sources.conf      |  85 ------
 package/etc/conf.d/blocks/splunk_context.conf |   7 +
 .../conf.d/destinations/d_destinations.conf   |  50 ++++
 package/etc/conf.d/filters/f_catchall.conf    |  80 ------
 package/etc/conf.d/filters/f_cisco-ios.conf   |  64 -----
 package/etc/conf.d/filters/f_palo_alto.conf   |  67 -----
 package/etc/conf.d/filters/f_websense.conf    |  68 -----
 .../etc/conf.d/filters/paloalto_networks.conf |  61 +++++
 package/etc/conf.d/sources/internal.conf      |   7 +
 .../sources/{s_defaults.conf => network.conf} |  14 +-
 package/etc/conf.d/splunk.conf                |  69 -----
 package/etc/conf.d/templates/t_templates.conf |  24 +-
 package/etc/context/splunk_index.csv          |  18 ++
 package/etc/syslog-ng.conf                    |  67 +++--
 package/sbin/entrypoint.sh                    |   1 -
 package/scripts/splunkmetrics.sh              |   4 +-
 package/scripts/switch_transport.sh           |  37 ---
 splunk/SA-syslog-ng/default/indexes.conf      |  21 ++
 tests/requirements.txt                        |   1 +
 tests/test_poc.py                             |  49 +++-
 27 files changed, 370 insertions(+), 771 deletions(-)
 delete mode 100755 package/etc/conf.d/blocks/b_destinations.conf
 mode change 100755 => 100644 package/etc/conf.d/blocks/b_parsers.conf
 delete mode 100755 package/etc/conf.d/blocks/b_sources.conf
 create mode 100644 package/etc/conf.d/blocks/splunk_context.conf
 create mode 100644 package/etc/conf.d/destinations/d_destinations.conf
 delete mode 100755 package/etc/conf.d/filters/f_catchall.conf
 delete mode 100755 package/etc/conf.d/filters/f_cisco-ios.conf
 delete mode 100755 package/etc/conf.d/filters/f_palo_alto.conf
 delete mode 100755 package/etc/conf.d/filters/f_websense.conf
 create mode 100644 package/etc/conf.d/filters/paloalto_networks.conf
 create mode 100644 package/etc/conf.d/sources/internal.conf
 rename package/etc/conf.d/sources/{s_defaults.conf => network.conf} (77%)
 mode change 100755 => 100644
 delete mode 100755 package/etc/conf.d/splunk.conf
 mode change 100755 => 100644 package/etc/conf.d/templates/t_templates.conf
 create mode 100644 package/etc/context/splunk_index.csv
 mode change 100755 => 100644 package/etc/syslog-ng.conf
 delete mode 100755 package/scripts/switch_transport.sh
 create mode 100644 splunk/SA-syslog-ng/default/indexes.conf

diff --git a/.gitignore b/.gitignore
index e0adc68..d96805f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -306,3 +306,6 @@ tags
 /test-results/
 /.idea/workspace.xml
 /.idea/tasks.xml
+!/package/scripts/switch_transport.sh
+!/package/scripts/splunkmetrics.sh
+!/package/scripts/
diff --git a/.idea/misc.xml b/.idea/misc.xml
index 92749e9..a658ea5 100644
--- a/.idea/misc.xml
+++ b/.idea/misc.xml
@@ -3,8 +3,8 @@
   <component name="JavaScriptSettings">
     <option name="languageLevel" value="ES6" />
   </component>
-  <component name="ProjectRootManager" version="2" project-jdk-name="Python 3.7 (splunk-connect-for-syslog)" project-jdk-type="Python SDK" />
+  <component name="ProjectRootManager" version="2" project-jdk-name="Remote Python 3.7.3 Docker Compose (test at [/Users/rfaircloth/Documents/GitHub/splunk-connect-for-syslog/docker-compose.yml])" project-jdk-type="Python SDK" />
   <component name="PythonCompatibilityInspectionAdvertiser">
     <option name="version" value="3" />
   </component>
-</project>
+</project>
\ No newline at end of file
diff --git a/.idea/splunk-connect-for-syslog.iml b/.idea/splunk-connect-for-syslog.iml
index 3ce5619..0ecbb61 100644
--- a/.idea/splunk-connect-for-syslog.iml
+++ b/.idea/splunk-connect-for-syslog.iml
@@ -2,7 +2,7 @@
 <module type="PYTHON_MODULE" version="4">
   <component name="NewModuleRootManager">
     <content url="file://$MODULE_DIR$" />
-    <orderEntry type="inheritedJdk" />
+    <orderEntry type="jdk" jdkName="Remote Python 3.7.3 Docker Compose (test at [/Users/rfaircloth/Documents/GitHub/splunk-connect-for-syslog/docker-compose.yml])" jdkType="Python SDK" />
     <orderEntry type="sourceFolder" forTests="false" />
   </component>
   <component name="TemplatesService">
diff --git a/docker-compose.yml b/docker-compose.yml
index cf96c95..94a8320 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -63,6 +63,11 @@ services:
       - SPLUNK_HEC_TOKEN
       - SPLUNK_PASSWORD
       - SPLUNK_START_ARGS
+      - SPLUNK_APPS_URL
+      - SPLUNKBASE_USERNAME
+      - SPLUNKBASE_PASSWORD
+    volumes:
+      - ./splunk/SA-syslog-ng:/opt/splunk/etc/apps/SA-syslog-ng
 #    logging:
 #      driver: splunk
 #      options:
diff --git a/package/Dockerfile b/package/Dockerfile
index f3b9f96..5ecc921 100644
--- a/package/Dockerfile
+++ b/package/Dockerfile
@@ -76,19 +76,21 @@ RUN cd /tmp ;\
 
 ENV DEBCONF_NONINTERACTIVE_SEEN=true
 ENV SPLUNK_CONNECT_METHOD=hec
+ENV SYSLOGNG_HEC_WORKERS=3
 
 RUN source scl_source enable rh-python36 ; curl -fsSL https://goss.rocks/install | GOSS_VER=v0.3.7 sh
 COPY goss.yaml /etc/goss.yaml
 
 COPY --from=0 /opt/syslog-ng /opt/syslog-ng
 COPY scripts/splunkmetrics.sh /opt/syslog-ng/sbin/splunkmetrics.sh
-COPY scripts/switch_transport.sh /opt/syslog-ng/sbin/switch_transport.sh
 COPY etc/syslog-ng.conf /opt/syslog-ng/etc/syslog-ng.conf
 COPY etc/conf.d /opt/syslog-ng/etc/conf.d
+COPY etc/context /opt/syslog-ng/etc/context
 COPY sbin/entrypoint.sh /sbin/entrypoint.sh
 
 RUN source scl_source enable rh-python36 ;/opt/syslog-ng/sbin/syslog-ng  -V
 RUN source scl_source enable rh-python36 ;/opt/syslog-ng/sbin/syslog-ng -t
+RUN mkdir -p /var/log/syslog-ng/data/disk-buffer
 
 EXPOSE 514
 EXPOSE 601/tcp
diff --git a/package/etc/conf.d/blocks/b_destinations.conf b/package/etc/conf.d/blocks/b_destinations.conf
deleted file mode 100755
index 3e65461..0000000
--- a/package/etc/conf.d/blocks/b_destinations.conf
+++ /dev/null
@@ -1,251 +0,0 @@
-# ===============================================================================================
-# Destination Blocks (functions) for Splunk destinations
-# Block argument defaults are defined in main syslog-ng.conf file
-# Additional indexed fields (based on syslog-ng macros) can be added to the "with_metadata" blocks
-# for both HEC and Kafka.
-# Format is "fields.<splunk_indexed_field>=<syslog-ng macro>"
-# ===============================================================================================
-
-# ===============================================================================================
-# blocks for file destination (for use with the Splunk Universal Forwarder)
-# ===============================================================================================
-
-# ===============================================================================================
-# Logfile Local Defaults:
-# vendor: unassigned
-# message: suffix for log file names; "messages"
-# ===============================================================================================
-
-block destination d_splunk_logfile(category("") 
-                                   vendor("unassigned") 
-                                   filename("messages") 
-                                   use_template(`splunk-default-template`)
-                                   ) {
-    file("`splunk-log-root`/`category`/$(lowercase \"${LOGHOST}\")/`vendor`/$(lowercase \"${HOST}\")/${YEAR}.${MONTH}.${DAY}.${HOUR}-`filename`"
-         template(`use_template`)
-         flush-lines(0)
-         create-dirs(yes)
-         dir_owner(`splunk-user`)
-         dir_group(`splunk-group`)
-         dir_perm(0700)
-         owner(`splunk-user`)
-         group(`splunk-group`)
-         perm(0600)
-         );
-    };
-
-# ===============================================================================================
-# blocks for direct connection to Splunk via Kafka and HEC
-# ===============================================================================================
-# ===============================================================================================
-# Kafka with Metadata (Facility and Priority):
-# ===============================================================================================
-
-block destination d_kafka_with_metadata (kafka-libs(`kafka-lib-dir`) 
-                                         kafka-brokers(`splunk-kafka-brokers`) 
-                                         sourcetype(`splunk-sourcetype`) 
-                                         topic(`splunk-topic`) 
-                                         index(`splunk-index`) 
-                                         use_template(`splunk-default-template`)
-                                        ) {
-    kafka(client-lib-dir("`kafka-libs`")
-          kafka-bootstrap-servers("`kafka-brokers`")
-          persist-name("`kafka_brokers`_`topic`_`sourcetype`_`index`")
-          template('$(format-json
-                      time=$S_UNIXTIME.$S_MSEC
-                      host=$HOST
-                      source=${HOST_FROM}
-                      sourcetype=`sourcetype`
-                      index=`index`
-                      event=$(template `use_template`)
-                      fields.facility=$FACILITY
-                      fields.severity=$LEVEL)')
-          topic("`topic`")
-          );
-    };
-
-# ===============================================================================================
-# Kafka with Full Metadata; additional fields can be added
-# ===============================================================================================
-
-block destination d_kafka_with_full_metadata (kafka-libs(`kafka-lib-dir`)
-                                              kafka-brokers(`splunk-kafka-brokers`)
-                                              sourcetype(`splunk-sourcetype`)
-                                              topic(`splunk-topic`)
-                                              index(`splunk-index`)
-                                              use_template(`splunk-default-template`)
-                                             ) {
-     kafka(client-lib-dir("`kafka-libs`")
-           kafka-bootstrap-servers("`kafka-brokers`")
-           persist-name("`kafka_brokers`_`topic`_`sourcetype`_`index`")
-           template('$(format-json
-                       time=$S_UNIXTIME.$S_MSEC
-                       host=$HOST
-                       source=${HOST_FROM}
-                       sourcetype=`sourcetype`
-                       index=`index`
-                       event=$(template `use_template`)
-                       fields.facility=$FACILITY
-                       fields.severity=$LEVEL
-                       fields.message_header=$MSGHDR
-                       fields.program_name=$PROGRAM
-                       fields.pid=$PID
-                       fields.full_message=$(template t_everything)
-                      )')
-          topic("`topic`")
-          );
-    };
-
-# ===============================================================================================
-# Basic Kafka (no indexed fields)
-# ===============================================================================================
-
-block destination d_kafka_basic (kafka-libs(`kafka-lib-dir`)
-                                 kafka-brokers(`splunk-kafka-brokers`)
-                                 sourcetype(`splunk-sourcetype`)
-                                 topic(`splunk-topic`)
-                                 index(`splunk-index`)
-                                 use_template(`splunk-default-template`)
-                                 ) {
-    kafka(client-lib-dir("`kafka-libs`")
-          kafka-bootstrap-servers("`kafka-brokers`")
-          persist-name("`kafka_brokers`_`topic`_`sourcetype`_`index`")
-          template('$(format-json time=$S_UNIXTIME
-                      host=$HOST
-                      source=$HOST_FROM
-                      sourcetype=`sourcetype`
-                      index=`index`
-                      event=$(template `use_template`))') 
-          topic("`topic`")
-          );
-    };
-
-# ===============================================================================================
-# HEC with Metadata (Facility and Priority):
-# Be sure to adjust batch paramaters below to suit scale/environment
-# If validated certs are used, uncomment relevant lines in the tls() block below
-# and change peer-verify() to "yes"
-# ===============================================================================================
-
-block destination d_hec_with_metadata (hec-url(`splunk-hec-url`) 
-                                       hec-token(`splunk-hec-token`) 
-                                       sourcetype(`splunk-sourcetype`) 
-                                       index(`splunk-index`) 
-                                       use_template(`splunk-default-template`)
-                                      ) {
-    http(url("`hec-url`")
-         method("POST")
-         batch-lines(10)
-         batch-bytes(512Kb)
-         batch-timeout(5000)
-         user_agent("syslog-ng User Agent")
-         user("syslog-ng")
-         password("`hec-token`")
-         persist-name("`hec-url`_`sourcetype`_`hec-token`_`index`")
-         tls(peer-verify(no)
-#            ca-dir("dir")
-#            ca-file("ca")
-#            cert-file("cert")
-#            cipher-suite("cipher") 
-#            key-file("key")
-#            peer-verify(yes|no)
-#            ssl-version(<the permitted SSL/TLS version>)
-            )
-         body('$(format-json
-                 time=$S_UNIXTIME.$S_MSEC
-                 host=$HOST
-                 source=${HOST_FROM}
-                 sourcetype=`sourcetype`
-                 index=`index`
-                 event=$(template `use_template`)
-                 fields.facility=$FACILITY
-                 fields.severity=$LEVEL)')
-        );
-    };
-
-# ===============================================================================================
-# HEC with Full Metadata; additional fields can be added
-# Be sure to adjust batch paramaters below to suit scale/environment
-# If validated certs are used, uncomment relevant lines in the tls() block below
-# and change peer-verify() to "yes"
-# ===============================================================================================
-
-block destination d_hec_with_full_metadata(hec-url(`splunk-hec-url`)
-                                           hec-token(`splunk-hec-token`)
-                                           sourcetype(`splunk-sourcetype`)
-                                           index(`splunk-index`)
-                                           use_template(`splunk-default-template`)
-                                          ) {
-    http(url("`hec-url`")
-         method("POST")
-         batch-lines(10)
-         batch-bytes(512Kb)
-         batch-timeout(5000)
-         user_agent("syslog-ng User Agent")
-         user("syslog-ng")
-         password("`hec-token`")
-         persist-name("`hec-url`_`sourcetype`_`hec-token`_`index`")
-         tls(peer-verify(no)
-#            ca-dir("dir")
-#            ca-file("ca")
-#            cert-file("cert")
-#            cipher-suite("cipher")
-#            key-file("key")
-#            peer-verify(yes|no)
-#            ssl-version(<the permitted SSL/TLS version>)
-             )
-         body('$(format-json
-                 time=$S_UNIXTIME.$S_MSEC
-                 host=$HOST
-                 source=${HOST_FROM}
-                 sourcetype=`sourcetype`
-                 index=`index`
-                 event=$(template `use_template`)
-		 fields.fullhost_from=${FULLHOST_FROM}
-                 fields.facility=$FACILITY
-                 fields.severity=$LEVEL
-                 fields.message_header=$MSGHDR
-                 fields.program_name=$PROGRAM
-                 fields.pid=$PID
-                 fields.full_message=$(template t_everything)
-                )')
-        );
-    };
-
-# ===============================================================================================
-# Basic HEC (no indexed fields)
-# ===============================================================================================
-
-block destination d_hec_basic (hec-url(`splunk-hec-url`)
-                               hec-token(`splunk-hec-token`)
-                               sourcetype(`splunk-sourcetype`)
-                               index(`splunk-index`)
-                               use_template(`splunk-default-template`)
-                              ) {
-    http(url("`hec-url`")
-         method("POST")
-         batch-lines(10)
-         batch-bytes(512Kb)
-         batch-timeout(5000)
-         user_agent("syslog-ng User Agent")
-         user("syslog-ng")
-         password("`hec-token`")
-         persist-name("`hec-url`_`sourcetype`_`hec-token`_`index`")
-         tls(peer-verify(no)
-#            ca-dir("dir")
-#            ca-file("ca")
-#            cert-file("cert")
-#            cipher-suite("cipher")
-#            key-file("key")
-#            peer-verify(yes|no)
-#            ssl-version(<the permitted SSL/TLS version>)
-             )
-         body('$(format-json
-                 time=$S_UNIXTIME.$S_MSEC
-                 host=$HOST
-                 source=${HOST_FROM}
-                 sourcetype=`sourcetype`
-                 index=`index`
-                 event=$(template `use_template`))')
-        );
-    };
diff --git a/package/etc/conf.d/blocks/b_parsers.conf b/package/etc/conf.d/blocks/b_parsers.conf
old mode 100755
new mode 100644
index b68a4e4..407ea8a
--- a/package/etc/conf.d/blocks/b_parsers.conf
+++ b/package/etc/conf.d/blocks/b_parsers.conf
@@ -1,33 +1,69 @@
-# ===============================================================================================
-# ForcePoint (Websense)
-# ===============================================================================================
-
-# ===============================================================================================
-# Log Format:
-# <159>Dec 19 10:48:57 EST 10.203.28.21 vendor=Websense product=Security product_version=7.7.0 action=permitted severity=1 category=153 user=- src_host=10.64.134.74 src_port=62189 dst_host=mail.google.com dst_ip=74.125.224.53 dst_port=443 bytes_out=197 bytes_in=76 http_response=200 http_method=CONNECT http_content_type=- http_user_agent=Mozilla/5.0_(Windows;_U;_Windows_NT_6.1;_enUS;_rv:1.9.2.23)_Gecko/20110920_Firefox/3.6.23 http_proxy_status_code=200 reason=- disposition=1034 policy=- role=8 duration=0 url=https://mail.google.com
-#
-# Primary reason for non-compliance:  %Z (timesone mnemonic) appended after date/time
-# ===============================================================================================
-
-block parser p_websense-parser(prefix(".websense.")) {
+#this parser can be used for "almost compliant" 5424 messages
+block parser p_RFC5424-lite(prefix(".rfc5424-lite.")) {
     channel {
         rewrite {
-            # normal BSD timestamp, plus a timezone code. Remove the
-            # timezone information for now.
-            subst('([A-Za-z]{3} [0-9 ]\d \d{2}:\d{2}:\d{2}) [A-Z]{3,4}' "$1 " flags(global) value("MSG"));
+            # Remove Version Identifier
+              subst('(<\d+>)\d+' "$1" value("MSG"));
 
-            # add a $PROGRAM field, so that syslog-parser() would extract
-            # that properly
-        subst('(vendor=Websense)' "Websense: $1" flags(global) value("MSG"));
         };
-    parser {
-            # by this time this message is a properly formatted syslog
-            # message
+        parser {
+            # by this time this message will parse with the BSD 3164 parser
             syslog-parser(time-zone(`default-timezone`));
             # syslog-parser();
 
         # extract name-value pairs.
         # kv-parser(prefix("`prefix`"));
+        };
     };
+};
+
+block parser p_test-parser(prefix(".testparse.")) {
+    channel {
+        rewrite {
+            # Put your rewrite rule here;use "MSG" as no-parse() puts entire payload there
+            # subst('(>.{12})\s' "${1}T" value("MSG"));
+        };
+        parser {
+            # Don't initially parse so full output can be seen
+            # syslog-parser(time-zone(`default-timezone`) flags(syslog-protocol));
+            # syslog-parser();
+            # syslog-parser(time-zone(`default-timezone`));
+            # date-parser(format("%Y-%m-%d %H:%M:%S") template("$(substr ${MESSAGE} 0 19)") time-zone(`default-timezone`));
+        };
     };
 };
+
+#Used by fallback to log everything we can
+block rewrite r_set_splunk(sourcetype(`splunk-sourcetype`)
+                           index(`splunk-index`)
+                           template(`splunk-default-template`)
+                           vendor("unassigned")
+                           category("")
+                           filename("messages")
+                          ) {
+      set("`index`", value(".splunk.index"));
+      set("`sourcetype`", value(".splunk.sourcetype"));
+      set("`template`", value(".splunk.template"));
+      set("`vendor`", value(".splunk.vendor"));
+      set("`category`", value(".splunk.category"));
+      set("`filename`", value(".splunk.filename"));
+      set($FACILITY, value("fields.facility"));
+      set($LEVEL, value("fields.severity"));
+      set($LOGHOST, value("fields.syslog-server"));
+  };
+
+#Used when for normal filters index and sourcetype must be set in a prior re-write or context
+block rewrite r_set_splunk_basic(
+                           template(`splunk-default-template`)
+                           vendor("unassigned")
+                           category("")
+                           filename("messages")
+                          ) {
+      set("`template`", value(".splunk.template"));
+      set("`vendor`", value(".splunk.vendor"));
+      set("`category`", value(".splunk.category"));
+      set("`filename`", value(".splunk.filename"));
+      set($FACILITY, value("fields.facility"));
+      set($LEVEL, value("fields.severity"));
+      set($LOGHOST, value("fields.syslog-server"));
+  };
diff --git a/package/etc/conf.d/blocks/b_sources.conf b/package/etc/conf.d/blocks/b_sources.conf
deleted file mode 100755
index 5e53849..0000000
--- a/package/etc/conf.d/blocks/b_sources.conf
+++ /dev/null
@@ -1,85 +0,0 @@
-# ===============================================================================================
-# Source block for data arriving on unique ports; parsing defaults to "no-parse"
-# ===============================================================================================
-
-block source s_unique-ports(udp_port() tcp_port() flags("no-parse")) {
-     `splunk-udp-driver` ( 
-           transport("udp") 
-           port(`udp_port`)  
-           ip-protocol(`ip-version`)
-#          hook-commands(
-#          setup("firewall-cmd --permanent --add-port=514/udp")
-#          teardown("firewall-cmd --permanent --remove-port=514/udp")
-#          )
-           so-rcvbuf(`splunk-rcvbuf`)
-           keep-hostname(yes)
-           keep-timestamp(yes)
-           use-dns(no)
-           use-fqdn(no)
-           chain-hostnames(off)
-           time-zone(`default-timezone`)
-           flags(`flags`)
-           );
-
-     `splunk-tcp-driver`  ( 
-           transport("tcp") 
-           port(`tcp_port`)  
-           ip-protocol(`ip-version`)
-#          hook-commands(
-#              setup("firewall-cmd --permanent --add-port=514/tcp")
-#              teardown("firewall-cmd --permanent --remove-port=514/tcp")
-#              )
-           max-connections(`splunk-max-connections`)
-           log-iw-size(`splunk-window-size`)
-           log-fetch-limit(`splunk-fetch-limit`)
-           keep-hostname(yes)
-           keep-timestamp(yes)
-           use-dns(no)
-           use-fqdn(no)
-           chain-hostnames(off)
-           time-zone(`default-timezone`)
-           flags(`flags`)
-           );
-};
-
-block source s_unique-udp-port(udp_port() flags("no-parse")) {
-     `splunk-udp-driver` (
-           transport("udp")
-           port(`udp_port`)
-           ip-protocol(`ip-version`)
-#          hook-commands(
-#          setup("firewall-cmd --permanent --add-port=514/udp")
-#          teardown("firewall-cmd --permanent --remove-port=514/udp")
-#          )
-           so-rcvbuf(`splunk-rcvbuf`)
-           keep-hostname(yes)
-           keep-timestamp(yes)
-           use-dns(no)
-           use-fqdn(no)
-           chain-hostnames(off)
-           time-zone(`default-timezone`)
-           flags(`flags`)
-           );
-};
-
-block source s_unique-tcp-port(tcp_port() flags("no-parse")) {
-     `splunk-tcp-driver`  (
-           transport("tcp")
-           port(`tcp_port`)
-           ip-protocol(`ip-version`)
-#          hook-commands(
-#              setup("firewall-cmd --permanent --add-port=514/tcp")
-#              teardown("firewall-cmd --permanent --remove-port=514/tcp")
-#              )
-           max-connections(`splunk-max-connections`)
-           log-iw-size(`splunk-window-size`)
-           log-fetch-limit(`splunk-fetch-limit`)
-           keep-hostname(yes)
-           keep-timestamp(yes)
-           use-dns(no)
-           use-fqdn(no)
-           chain-hostnames(off)
-           time-zone(`default-timezone`)
-           flags(`flags`)
-           );
-};
diff --git a/package/etc/conf.d/blocks/splunk_context.conf b/package/etc/conf.d/blocks/splunk_context.conf
new file mode 100644
index 0000000..e2e0af9
--- /dev/null
+++ b/package/etc/conf.d/blocks/splunk_context.conf
@@ -0,0 +1,7 @@
+block parser p_add_context_splunk(key("syslogng-fallback")) {
+    add-contextual-data(
+        selector("`key`"),
+        database("context/splunk_index.csv"),
+        prefix(".splunk.")
+    );
+};
\ No newline at end of file
diff --git a/package/etc/conf.d/destinations/d_destinations.conf b/package/etc/conf.d/destinations/d_destinations.conf
new file mode 100644
index 0000000..1d373d4
--- /dev/null
+++ b/package/etc/conf.d/destinations/d_destinations.conf
@@ -0,0 +1,50 @@
+
+
+# ===============================================================================================
+# Direct connection to Splunk via HEC
+# ===============================================================================================
+
+# ===============================================================================================
+# Be sure to adjust batch paramaters below to suit scale/environment
+# Set workers to the number of indexers or HWF HEC endpoints
+# If validated certs are used, uncomment relevant lines in the tls() block below
+# and change peer-verify() to "yes"
+# ===============================================================================================
+
+destination d_hec {
+    http(
+         url("`SPLUNK_HEC_URL`")
+         method("POST")
+         log-fifo-size(`splunk-log-fifo-size`)
+         workers(`SYSLOGNG_HEC_WORKERS`)
+         batch-lines(1000)
+         batch-bytes(512Kb)
+         batch-timeout(1000)
+         timeout(5)
+         user_agent("syslog-ng User Agent")
+         user("syslog-ng")
+         password("`SPLUNK_HEC_TOKEN`")
+#        persist-name("t_standard")
+#         disk-buffer(mem-buf-length(5000)
+#                     disk-buf-size(107374182400)
+#                     reliable(no)
+#                     dir("/var/log/syslog-ng/data/disk-buffer"))
+         tls(peer-verify(no)
+#            ca-dir("dir")
+#            ca-file("ca")
+#            cert-file("cert")
+#            cipher-suite("cipher") 
+#            key-file("key")
+#            peer-verify(yes|no)
+#            ssl-version(<the permitted SSL/TLS version>)
+            )
+         body('$(format-json
+                 time=$S_UNIXTIME.$S_MSEC
+                 host=$HOST
+                 source=${HOST_FROM}
+                 sourcetype=${.splunk.sourcetype}
+                 index=${.splunk.index}
+                 event=$(template ${.splunk.template})
+                 fields.*)')
+        );
+    };
diff --git a/package/etc/conf.d/filters/f_catchall.conf b/package/etc/conf.d/filters/f_catchall.conf
deleted file mode 100755
index aa9abbf..0000000
--- a/package/etc/conf.d/filters/f_catchall.conf
+++ /dev/null
@@ -1,80 +0,0 @@
-# ===============================================================================================
-# "Catch-all" destination; all unfiltered messages end up here
-# ===============================================================================================
-
-log {
-# ===============================================================================================
-# Section 1:  source configuration
-# Defaults: default source and ports as defined in s_sources.conf and syslog-ng.conf.
-#
-# IMPORTANT:  In order to ensure proper startup, select only one source in this section.
-# If a source other than the default is used, ensure that any UDP/TCP protocol/port pairs passed
-# are unique throughout the *entire* sylog-ng config.  If there are any port overlaps with those
-# in source declarations from other filter files, an "Address already in use" error will occur
-# at startup.
-#
-# NOTE:  The "Catchall" should not use any source other than the default.  Be extremely careful
-# when defining an alternate source here.  Default ports can be changed in the global declarations
-# in the main syslog-ng.conf file.
-# ===============================================================================================
-
-source(s_default-ports);
-
-# ===============================================================================================
-# Section 2:  parser configuration
-# Default syslog-parser() should work for most messages
-#
-# If a new data source is not properly parsing using the default, you may wish to comment out 
-# all parsers to see the raw message as it appeared "on the wire".  This can be useful for 
-# creating custom parsers for non-syslog-compliant meessages.
-# ===============================================================================================
-
-# This is "normal" RFC3164-formatted (BSD-syslog) messages. Always try this one first if unsure.
-parser { syslog-parser(time-zone(`default-timezone`)); };
-
-# For RFC5424-formatted messages, use this instead
-# parser { syslog-parser(time-zone(`default-timezone`) flags(syslog-protocol)); };
-
-# ===============================================================================================
-# Section 3:  filter configuration
-# Filter below may be omitted in the log path if a dedicated source is configured above
-# Filter typically not used for a fallback destination
-# ===============================================================================================
-
-# filter { };
-
-# ===============================================================================================
-# Section 4:  destination configuration
-# Select the desired destination to use in the log path from the three choices below,
-# based on the transfer method (UF/HEC/Kafka) desired. Then, provide a unique vendor string
-# for UF transport, and a unique sourcetype argument and optional index, topic, and message 
-# template arguments (as appropriate) for HEC/Kafka transport, paying careful attention to the 
-# note below.
-#
-# IMPORTANT:  If modifications are made in this section, ensure that two or more distinct 
-# destinations do *not* reference the same destination block call with an idential set of 
-# arguments (including no arguments, and arguments passed via destinations declared in other 
-# conf.d include files), or you will see this at startup: "Error checking the uniqueness of 
-# the persist names, please override it with persist-name option. Shutting down."  
-# The easiest way to satisfy this is to always pass a unique sourcetype argument for any new 
-# or changed destination declaration.
-# ===============================================================================================
-
-# ===============================================================================================
-# This catchall file should be the *only* one where the destinations use defaults for all arguments!
-# Full-metadata destinations used here; check indexed event data in Splunk for full message.
-# This can be helpful to determine the compliance of message to standard syslog formats, and as 
-# an aid for custom parser development if needed.
-# ===============================================================================================
-
-destination {
-#   d_splunk_logfile();  #--UF--
-    d_hec_with_full_metadata();  #--HEC--
-#   d_kafka_with_full_metadata();  #--KAFKA--
-    };
-
-# ===============================================================================================
-# Fallback flag set here; will catch all unfiltered traffic
-# ===============================================================================================
-flags(fallback);
-};
diff --git a/package/etc/conf.d/filters/f_cisco-ios.conf b/package/etc/conf.d/filters/f_cisco-ios.conf
deleted file mode 100755
index c224a7a..0000000
--- a/package/etc/conf.d/filters/f_cisco-ios.conf
+++ /dev/null
@@ -1,64 +0,0 @@
-# ===============================================================================================
-# Cisco IOS (Route/Switch)
-# ===============================================================================================
-
-log {
-# ===============================================================================================
-# Section 1:  source configuration
-# Defaults: default source and ports as defined in s_sources.conf and syslog-ng.conf.
-#
-# IMPORTANT:  In order to ensure proper startup, select only one source in this section.
-# If a source other than the default is used, ensure that any UDP/TCP protocol/port pairs passed
-# are unique throughout the *entire* sylog-ng config.  If there are any port overlaps with those
-# in source declarations from other filter files, an "Address already in use" error will occur
-# at startup.
-# ===============================================================================================
-
-source(s_default-ports);
-
-# source { s_unique-ports(udp_port(814) tcp_port(814)); };
-
-# ===============================================================================================
-# Section 2:  parser configuration
-# Default syslog-parser() should work for most messages
-# ===============================================================================================
-
-# This is "normal" RFC3164-formatted (BSD-syslog) messages. Always try this one first if unsure.
-parser { syslog-parser(time-zone(`default-timezone`)); };
-
-# For RFC5424-formatted messages, use this instead
-# parser { syslog-parser(time-zone(`default-timezone`) flags(syslog-protocol)); };
-
-# ===============================================================================================
-# Section 3:  filter configuration
-# Filter below may be omitted in the log path if a dedicated source is configured above
-# ===============================================================================================
-
-filter { match("[%|#][A-Z0-9_]+-[A-Z012_]*-*[0-7]-[A-Z0-9_]+:" value("MESSAGE"))
-      ;};
-
-
-# ===============================================================================================
-# Section 4:  destination configuration
-# Select the desired destination to use in the log path from the three choices below,
-# based on the transfer method (UF/HEC/Kafka) desired. Then, provide a unique vendor string
-# for UF transport, and a unique sourcetype argument and optional index, topic, and message 
-# template  arguments (as appropriate) for HEC/Kafka transport, paying careful attention to the 
-# note below.
-#
-# IMPORTANT:  If modifications are made in this section, ensure that two or more distinct 
-# destinations do *not* reference the same destination block call with an idential set of 
-# arguments (including no arguments, and arguments passed via destinations declared in other 
-# conf.d include files), or you will see this at startup: "Error checking the uniqueness of 
-# the persist names, please override it with persist-name option. Shutting down."  
-# The easiest way to satisfy this is to always pass a unique sourcetype argument for any new 
-# or changed destination declaration.
-# ===============================================================================================
-
-destination {
-#   d_splunk_logfile(vendor("cisco-ios")); #--UF--
-    d_hec_with_metadata(sourcetype("cisco:ios")); #--HEC--
-#   d_kafka_with_metadata(sourcetype("cisco:ios")); #--KAFKA--
-    };
-flags(final);
-};
diff --git a/package/etc/conf.d/filters/f_palo_alto.conf b/package/etc/conf.d/filters/f_palo_alto.conf
deleted file mode 100755
index 868b94c..0000000
--- a/package/etc/conf.d/filters/f_palo_alto.conf
+++ /dev/null
@@ -1,67 +0,0 @@
-# ===============================================================================================
-# Palo Alto Networks Firewalls
-# ===============================================================================================
-
-log {
-# ===============================================================================================
-# Section 1:  source configuration
-# Defaults: default source and ports as defined in s_sources.conf and syslog-ng.conf.
-#
-# IMPORTANT:  In order to ensure proper startup, select only one source in this section.
-# If a source other than the default is used, ensure that any UDP/TCP protocol/port pairs passed
-# are unique throughout the *entire* sylog-ng config.  If there are any port overlaps with those 
-# in source declarations from other filter files, an "Address already in use" error will occur 
-# at startup.
-# ===============================================================================================
-
-source (s_default-ports);
-
-# source { s_unique-ports(udp_port(714) tcp_port(714)); };
-
-# ===============================================================================================
-# Section 2:  parser configuration
-# Default syslog-parser() should work for most messages
-# ===============================================================================================
-
-# This is "normal" RFC3164-formatted (BSD-syslog) messages. Always try this one first if unsure.
-parser { syslog-parser(time-zone(`default-timezone`)); };
-
-# For RFC5424-formatted messages, use this instead
-# parser { syslog-parser(time-zone(`default-timezone`) flags(syslog-protocol)); };
-
-# ===============================================================================================
-# Section 3:  filter configuration
-# Filter below may be omitted in the log path if a dedicated source is configured above
-# ===============================================================================================
-
-filter {    match(",THREAT," value("MESSAGE"))
-         or match(",TRAFFIC," value("MESSAGE"))
-         or match(",SYSTEM," value("MESSAGE"))
-         or match(",CONFIG," value("MESSAGE"))
-         or match(",HIPWATCH," value("MESSAGE"))
-      ;};
-
-# ===============================================================================================
-# Section 4:  destination configuration
-# Select the desired destination to use in the log path from the three choices below,
-# based on the transfer method (UF/HEC/Kafka) desired. Then, provide a unique vendor string
-# for UF transport, and a unique sourcetype argument and optional index, topic, and message 
-# template arguments (as appropriate) for HEC/Kafka transport, paying careful attention to the 
-# note below.
-#
-# IMPORTANT:  If modifications are made in this section, ensure that two or more distinct 
-# destinations do *not* reference the same destination block call with an idential set of 
-# arguments (including no arguments, and arguments passed via destinations declared in other 
-# conf.d include files), or you will see this at startup: "Error checking the uniqueness of 
-# the persist names, please override it with persist-name option. Shutting down."  
-# The easiest way to satisfy this is to always pass a unique sourcetype argument for any new 
-# or changed destination declaration.
-# ===============================================================================================
-
-destination {
-#   d_splunk_logfile(vendor("paloalto"));  #--UF--
-    d_hec_with_metadata(sourcetype("pan:log") use_template("t_everything"));  #--HEC--
-#   d_kafka_with_metadata(sourcetype("pan:log") use_template("t_everything")); #--KAFKA--
-    };
-flags(final);
-};
diff --git a/package/etc/conf.d/filters/f_websense.conf b/package/etc/conf.d/filters/f_websense.conf
deleted file mode 100755
index 16fb2af..0000000
--- a/package/etc/conf.d/filters/f_websense.conf
+++ /dev/null
@@ -1,68 +0,0 @@
-# ===============================================================================================
-# Websense
-# ===============================================================================================
-
-log {
-# ===============================================================================================
-# Section 1:  source configuration
-# Defaults: default source and ports as defined in s_sources.conf and syslog-ng.conf.
-#
-# IMPORTANT:  In order to ensure proper startup, select only one source in this section.
-# If a source other than the default is used, ensure that any UDP/TCP protocol/port pairs passed
-# are unique throughout the *entire* sylog-ng config.  If there are any port overlaps with those 
-# in source declarations from other filter files, an "Address already in use" error will occur 
-# at startup.
-# ===============================================================================================
-
-source (s_default-ports);     # The default port is common in many installations
-
-# The source block (function) call below can be used to specify unique listening ports for this 
-# device type
-
-# source { s_unique-ports(udp_port(714) tcp_port(714)); };  
-
-# ===============================================================================================
-# Section 2:  parser configuration
-# Default syslog-parser() should work for most messages
-# ===============================================================================================
-
-# This is "normal" RFC3164-formatted (BSD-syslog) messages. Always try this one first if unsure.
-# parser { syslog-parser(); };
-
-# For RFC5424-formatted messages, use this instead
-# parser { syslog-parser(flags(syslog-protocol)); };
-
-# For Websense
-parser { p_websense-parser(); };
-
-# ===============================================================================================
-# Section 3:  filter configuration
-# Filter below may be omitted in the log path if a dedicated source is configured above
-# ===============================================================================================
-
-filter { program(Websense); };
-
-# ===============================================================================================
-# Section 4:  destination configuration
-# Select the desired destination to use in the log path from the three choices below,
-# based on the transfer method (UF/HEC/Kafka) desired. Then, provide a unique vendor string
-# for UF transport, and a unique sourcetype argument and optional index, topic, and message 
-# template arguments (as appropriate) for HEC/Kafka transport, paying careful attention to the 
-# note below.
-#
-# IMPORTANT:  If modifications are made in this section, ensure that two or more distinct 
-# destinations do *not* reference the same destination block call with an idential set of 
-# arguments (including no arguments, and arguments passed via destinations declared in other 
-# conf.d include files), or you will see this at startup: "Error checking the uniqueness of 
-# the persist names, please override it with persist-name option. Shutting down."  
-# The easiest way to satisfy this is to always pass a unique sourcetype argument for any new 
-# or changed destination declaration.
-# ===============================================================================================
-
-destination {
-#   d_splunk_logfile(vendor("websense"));  #--UF--
-    d_hec_with_metadata(sourcetype("websense:cg:kv"));  #--HEC--
-#   d_kafka_with_metadata(sourcetype("websense:cg:kv")); #--KAFKA--
-    };
-flags(final);
-};
diff --git a/package/etc/conf.d/filters/paloalto_networks.conf b/package/etc/conf.d/filters/paloalto_networks.conf
new file mode 100644
index 0000000..1fbba7b
--- /dev/null
+++ b/package/etc/conf.d/filters/paloalto_networks.conf
@@ -0,0 +1,61 @@
+
+
+log {
+    source(s_default-ports);
+
+    filter {tags("pan:log")
+            or message(',\d+,(THREAT|TRAFFIC|SYSTEM|CONFIG|HIPWATCH|CORRELATION|USERID),')
+        ;};
+
+    # the palo message does not include a program value in the header unfortunatly
+    # the use of colon in the message tricks the RFC3164 parser we will re-write the message
+    # so the parser will not incorrectly break it apart.
+    # while we are at it we will save the mesage type into the program field so parser can find it
+    rewrite {
+        subst('^([^ ]+ \w+ \d{2} \d{2}:\d{2}:\d{2} [^ ]+)( \d+,[^,]+,[^,]+,)([^,]+)(.*)', '$1 $3:$2$3$4', value("MESSAGE")  );
+    };
+    parser {
+        #basic parsing
+        syslog-parser(time-zone(`default-timezone`));
+        #we need to actual even time from the field GeneratedTime use csv parser to get it out
+        csv-parser(
+            columns('FUTURE_USE', 'ReceiveTime', 'SerialNumber', 'Type', 'Subtype', 'FUTURE_USE2', 'GeneratedTime')
+            prefix(".pan.")
+            delimiters(',')
+            );
+        #2012/04/10 04:39:55
+        #parse the date
+        date-parser(
+                format("%Y/%m/%d %H:%M:%S")
+                template("${.pan.GeneratedTime}")
+                time-zone("Universal")
+        );
+    };
+
+    #set the source type based on program field and lookup index from the splunk context csv
+    if (program('THREAT')) {
+        parser {p_add_context_splunk(key("pan:threat")); };
+    } elif (program('TRAFFIC')) {
+        parser {p_add_context_splunk(key("pan:traffic")); };
+    } elif (program('SYSTEM')) {
+        parser {p_add_context_splunk(key("pan:system")); };
+    } elif (program('CONFIG')) {
+        parser {p_add_context_splunk(key("pan:config")); };
+    } elif (program('HIPWATCH')) {
+        parser {p_add_context_splunk(key("pan:hipwatch")); };
+    } elif (program('CORRELATION')) {
+        parser {p_add_context_splunk(key("pan:correlation")); };
+    } elif (program('USERID')) {
+        parser {p_add_context_splunk(key("pan:userid")); };
+    } else {
+        parser {p_add_context_splunk(key("pan:log")); };
+    };
+
+    #rewrite the final message for splunk json
+    #sourcetype and index are set in the filter defaults won't be used
+    rewrite {r_set_splunk_basic(template("t_msg_only")) }; #--HEC--
+
+    destination(d_hec);  #--HEC--
+
+    #flags(final);
+};
diff --git a/package/etc/conf.d/sources/internal.conf b/package/etc/conf.d/sources/internal.conf
new file mode 100644
index 0000000..5ba19a8
--- /dev/null
+++ b/package/etc/conf.d/sources/internal.conf
@@ -0,0 +1,7 @@
+# ===============================================================================================
+# Internal sources
+# ===============================================================================================
+
+source s_internal {
+        internal();
+};
diff --git a/package/etc/conf.d/sources/s_defaults.conf b/package/etc/conf.d/sources/network.conf
old mode 100755
new mode 100644
similarity index 77%
rename from package/etc/conf.d/sources/s_defaults.conf
rename to package/etc/conf.d/sources/network.conf
index 40425dd..e3ed6a9
--- a/package/etc/conf.d/sources/s_defaults.conf
+++ b/package/etc/conf.d/sources/network.conf
@@ -25,7 +25,6 @@ source s_default-ports {
            use-dns(no)
            use-fqdn(no)
            chain-hostnames(off)
-           time-zone(`default-timezone`)
            flags(no-parse)
            );
 
@@ -45,7 +44,18 @@ source s_default-ports {
            use-dns(no)
            use-fqdn(no)
            chain-hostnames(off)
-           time-zone(`default-timezone`)
            flags(no-parse)
            );
       };
+
+source s_all-ports {
+     `splunk-udp-driver` ( transport("udp") port(514) flags(no-parse) persist-name("example-persist-name1"));
+     `splunk-udp-driver` ( transport("udp") port(919) flags(no-parse));
+     `splunk-udp-driver` ( transport("udp") port(920) flags(no-parse));
+     `splunk-udp-driver` ( transport("udp") port(921) flags(no-parse));
+
+     `splunk-tcp-driver`  ( transport("tcp") port(919) flags(no-parse));
+     `splunk-tcp-driver`  ( transport("tcp") port(920) flags(no-parse));
+     `splunk-tcp-driver`  ( transport("tcp") port(921) flags(no-parse));
+      };
+
diff --git a/package/etc/conf.d/splunk.conf b/package/etc/conf.d/splunk.conf
deleted file mode 100755
index e8e5306..0000000
--- a/package/etc/conf.d/splunk.conf
+++ /dev/null
@@ -1,69 +0,0 @@
-# ===============================================================================================
-# Defaults for remote data collection and transport to Splunk
-# Kafka brokers/topics, HEC URL/token, local log directory for UF, sourcetype, and index
-# These can be overridden in individual filter (f_*.conf) files
-# ===============================================================================================
-
-# ===============================================================================================
-# Source driver defaults (which govern the parser used)
-# ===============================================================================================
-@define splunk-udp-driver "syslog"
-@define splunk-tcp-driver "network"
-
-# ===============================================================================================
-# Listening ports
-# ===============================================================================================
-@define udp-listening-port "514"
-@define tcp-listening-port "514"
-
-# ===============================================================================================
-# UF transport
-# ===============================================================================================
-@define splunk-log-root "/var/log/syslog-ng/data"
-@define splunk-user "root"     # owner of the local disk files
-@define splunk-group "root"    # group of the local disk files
-
-# ===============================================================================================
-# Kafka transport
-# ===============================================================================================
-@define kafka-lib-dir "/opt/kafka_2.11-0.11.0.0/libs"
-@define splunk-kafka-brokers "127.0.0.1:9092"
-@define splunk-topic "syslog"
-
-# ===============================================================================================
-# HEC transport
-# ===============================================================================================
-@define splunk-hec-url __SPLUNK_HEC_URL__
-@define splunk-hec-token "__SPLUNK_HEC_TOKEN__"
-
-# ===============================================================================================
-# Splunk metadata (HEC/Kafka transport only)
-# ===============================================================================================
-@define splunk-sourcetype "syslog:unassigned"
-@define splunk-index "main"
-
-# ===============================================================================================
-# Default message template 
-# ===============================================================================================
-@define splunk-default-template "t_standard"
-
-# ===============================================================================================
-# Data collection parameters, buffers, and Timezone
-# ===============================================================================================
-@define ip-version 4
-@define splunk-max-connections 1000
-@define splunk-fetch-limit 100
-# make sure splunk-window-size >= splunk-max-connections * splunk-fetch-limit
-@define splunk-window-size 100000
-@define splunk-rcvbuf 425984
-@define default-timezone "GMT"
-
-# ===============================================================================================
-# Global modules and includes.  All device-specific filters and destinations exist in conf.d
-# Order is important; templates must be loaded first
-# ===============================================================================================
-@include "scl.conf"
-@include "conf.d/templates/*.conf"
-@include "conf.d/sources/*.conf"
-@include "conf.d/blocks/*.conf"
-@include "conf.d/filters/*.conf"
diff --git a/package/etc/conf.d/templates/t_templates.conf b/package/etc/conf.d/templates/t_templates.conf
old mode 100755
new mode 100644
index b75dbbf..825a705
--- a/package/etc/conf.d/templates/t_templates.conf
+++ b/package/etc/conf.d/templates/t_templates.conf
@@ -8,7 +8,7 @@
 # ===============================================================================================
 
 template t_standard {
-        template("${ISODATE} ${HOST} ${MESSAGE}\n");
+        template("${ISODATE} ${HOST} ${MESSAGE}");
         };
 
 # ===============================================================================================
@@ -16,13 +16,29 @@ template t_standard {
 # ===============================================================================================
 
 template t_msg_only {
-        template("${MESSAGE}\n");
+        template("${MSGONLY}");
         };
 
 # ===============================================================================================
-# Everything; useful for bluecoat proxy, palo alto, and others
+# Everything; useful for bluecoat proxy and others
 # ===============================================================================================
 
 template t_everything {
-        template("${ISODATE} ${HOST} ${MSGHDR}${MESSAGE}\n");
+        template("${ISODATE} ${HOST} ${MSGHDR}${MESSAGE}");
         };
+
+# ===============================================================================================
+# Message Header with Message; for Palo Alto
+# ===============================================================================================
+
+template t_hdr_msg {
+        template("${MSGHDR}${MESSAGE}");
+        };
+
+# ===============================================================================================
+# JSON; for JSON pretty-printing
+# ===============================================================================================
+ 
+template t_JSON {
+	template("$(format-json --scope all-nv-pairs)");
+	};
diff --git a/package/etc/context/splunk_index.csv b/package/etc/context/splunk_index.csv
new file mode 100644
index 0000000..5d33787
--- /dev/null
+++ b/package/etc/context/splunk_index.csv
@@ -0,0 +1,18 @@
+pan:traffic,index,main
+pan:threat,index,main
+pan:system,index,main
+pan:config,index,main
+pan:hipwatch,index,main
+pan:correlation,index,main
+pan:userid,index,main
+pan:unknown,index,main
+pan:traffic,sourcetype,pan:traffic
+pan:threat,sourcetype,pan:threat
+pan:system,sourcetype,pan:system
+pan:config,sourcetype,pan:config
+pan:hipwatch,sourcetype,pan:hipwatch
+pan:correlation,sourcetype,pan:correlation
+pan:userid,sourcetype,pan:userid
+pan:unknown,sourcetype,pan:unknown
+syslogng-fallback,index,syslogng-fallback
+syslogng-fallback,sourcetype,syslogng-fallback
diff --git a/package/etc/syslog-ng.conf b/package/etc/syslog-ng.conf
old mode 100755
new mode 100644
index e96a65c..ab28af9
--- a/package/etc/syslog-ng.conf
+++ b/package/etc/syslog-ng.conf
@@ -1,12 +1,4 @@
 @version:3.22
-#Splunk Connect for Syslog (SC4S) by Splunk, Inc.
-#
-#To the extent possible under law, the person who associated CC0 with
-#Splunk Connect for Syslog (SC4S) has waived all copyright and related or neighboring rights
-#to Splunk Connect for Syslog (SC4S).
-#
-#You should have received a copy of the CC0 legalcode along with this
-#work.  If not, see <http://creativecommons.org/publicdomain/zero/1.0/>.
 
 # syslog-ng configuration file.
 #
@@ -25,26 +17,71 @@ options {
         log_msg_size (65536);
         flush_lines (0);
         time_reopen (10);
-        log_fifo_size (1000);
+        log_fifo_size (10000);
         chain_hostnames (off);
         use_dns (no);
         use_fqdn (no);
-        dns-cache (no);
+        dns-cache(no);
         create_dirs (no);
         keep-hostname (yes);
 };
 
 # ===============================================================================================
-# Remote data sources that will be sent to Splunk
+# Source driver defaults (which govern the parser used)
+# ===============================================================================================
+@define splunk-udp-driver "syslog"
+@define splunk-tcp-driver "network"
+
+# ===============================================================================================
+# Listening ports
 # ===============================================================================================
+@define udp-listening-port "514"
+@define tcp-listening-port "514"
 
-@include "conf.d/splunk.conf"
+# ===============================================================================================
+# Splunk metadata (HEC/Kafka transport only)
+# ===============================================================================================
+@define splunk-sourcetype "syslog:fallback"
+@define splunk-index "main"
 
 # ===============================================================================================
-# Local System sources
+# Default message template
 # ===============================================================================================
+@define splunk-default-template "t_standard"
 
-source s_sys {
-        internal();
+# ===============================================================================================
+# Data collection parameters, buffers, and Timezone
+# ===============================================================================================
+@define ip-version 4
+@define splunk-max-connections 1000
+@define splunk-log-fifo-size 10000
+@define splunk-fetch-limit 100
+# make sure splunk-window-size >= splunk-max-connections * splunk-fetch-limit
+@define splunk-window-size 100000
+@define splunk-rcvbuf 425984
+@define default-timezone "GMT"
+
+# ===============================================================================================
+# Global modules and includes.  All device-specific filters and destinations exist in conf.d
+# Order is important; templates must be loaded first
+# ===============================================================================================
+@include "scl.conf"
+@include "conf.d/templates/*.conf"
+@include "conf.d/sources/*.conf"
+@include "conf.d/blocks/*.conf"
+@include "conf.d/destinations/*.conf"
+@include "conf.d/prefilters/*.conf"
+@include "conf.d/filters/*.conf"
+
+@include "conf.d/plugin/*/blocks/*.conf"
+@include "conf.d/plugin/*/prefilters/*.conf"
+@include "conf.d/plugin/*/filters/*.conf"
+
+log {
+    source(s_default-ports);
+    rewrite { r_set_splunk(template("t_JSON"))}; #--HEC--
+    destination(d_hec);  #--HEC--
+    flags(fallback);
 };
 
+
diff --git a/package/sbin/entrypoint.sh b/package/sbin/entrypoint.sh
index c9d27f7..3578897 100755
--- a/package/sbin/entrypoint.sh
+++ b/package/sbin/entrypoint.sh
@@ -7,6 +7,5 @@
 #Run syslog
 mkdir /opt/syslog-ng/var
 rm /opt/syslog-ng/var/syslog-ng.ctl || true
-/opt/syslog-ng/sbin/switch_transport.sh
 /opt/syslog-ng/sbin/syslog-ng --process-mode=background
 /opt/syslog-ng/sbin/splunkmetrics.sh 
diff --git a/package/scripts/splunkmetrics.sh b/package/scripts/splunkmetrics.sh
index 7017d88..7a497eb 100755
--- a/package/scripts/splunkmetrics.sh
+++ b/package/scripts/splunkmetrics.sh
@@ -15,7 +15,7 @@ do
   while read -r SourceName SourceId SourceInstance State Type Number
   do
      echo	"{
-     \"time\":\"$TS.000\",
+     \"time\":\"$TS\",
      \"event\":\"metric\",
      \"source\":\"syslog-ng\",
      \"host\":\"$HOSTNAME\",
@@ -32,4 +32,6 @@ do
   done < $tmpfilecsv
 
   curl -s -S -k $SPLUNK_HEC_STATSURL -H "Authorization: Splunk $SPLUNK_HEC_TOKEN" -d "@$tmpfilejson"
+  rm $tmpfilejson
+  rm $tmpfilecsv
 done
diff --git a/package/scripts/switch_transport.sh b/package/scripts/switch_transport.sh
deleted file mode 100755
index f942d44..0000000
--- a/package/scripts/switch_transport.sh
+++ /dev/null
@@ -1,37 +0,0 @@
-#!/bin/bash
-#Copyright 2019 Splunk, Inc.
-#
-#Use of this source code is governed by a BSD-2-clause-style
-#license that can be found in the LICENSE-BSD2 file or at
-#https://opensource.org/licenses/BSD-2-Clause
-
-#  Script to change all filters to use selected transport (UF, HEC, or kafka).
-#  If one or more filters uses a transport different from all the others, they will need to be
-#      managed by hand.  Unpredictable results can occur if the script is used and
-#      individual filters are not checked for correctness.
-
-case $SPLUNK_CONNECT_METHOD in
-   hec)
-      echo "Switching transport method for all filters to HEC"
-      sed '/^# / {/#--HEC--/ s/^#/ /}' -i /opt/syslog-ng/etc/conf.d/filters/*.conf;
-      sed '/^#/! {/#--KAFKA--/ s/^ /#/}' -i /opt/syslog-ng/etc/conf.d/filters/*.conf;
-      sed '/^#/! {/#--UF--/ s/^ /#/}' -i /opt/syslog-ng/etc/conf.d/filters/*.conf;
-      sed 's~__SPLUNK_HEC_URL__~"'"$SPLUNK_HEC_URL"'"~' -i /opt/syslog-ng/etc/conf.d/splunk.conf
-      sed 's/__SPLUNK_HEC_TOKEN__/'"$SPLUNK_HEC_TOKEN"'/' -i /opt/syslog-ng/etc/conf.d/splunk.conf
-      ;;
-   kafka)
-      echo "Switching transport method for all filters to Kafka"
-      sed '/^# / {/#--KAFKA--/ s/^#/ /}' -i /opt/syslog-ng/etc/conf.d/filters/*.conf;
-      sed '/^#/! {/#--HEC--/ s/^ /#/}' -i /opt/syslog-ng/etc/conf.d/filters/*.conf;
-      sed '/^#/! {/#--UF--/ s/^ /#/}' -i /opt/syslog-ng/etc/conf.d/filters/*.conf;
-      ;;
-   UF)
-      echo "Switching transport method for all filters to filesystem/UF"
-      sed '/^# / {/#--UF--/ s/^#/ /}' -i /opt/syslog-ng/etc/conf.d/filters/*.conf;
-      sed '/^#/! {/#--HEC--/ s/^ /#/}' -i /opt/syslog-ng/etc/conf.d/filters/*.conf;
-      sed '/^#/! {/#--KAFKA--/ s/^ /#/}' -i /opt/syslog-ng/etc/conf.d/filters/*.conf;
-      ;;
-   *)
-      echo "Usage: $0 hec|kafka|UF"
-      ;;
-esac
diff --git a/splunk/SA-syslog-ng/default/indexes.conf b/splunk/SA-syslog-ng/default/indexes.conf
new file mode 100644
index 0000000..e795078
--- /dev/null
+++ b/splunk/SA-syslog-ng/default/indexes.conf
@@ -0,0 +1,21 @@
+[syslogng_metrics]
+datatype=metric
+homePath   = $SPLUNK_DB/syslogng_metrics/db
+coldPath   = $SPLUNK_DB/syslogng_metrics/colddb
+thawedPath = $SPLUNK_DB/syslogng_metrics/thaweddb
+
+[syslogng_fallback]
+homePath   = $SPLUNK_DB/syslogng_fallback/db
+coldPath   = $SPLUNK_DB/syslogng_fallback/colddb
+thawedPath = $SPLUNK_DB/syslogng_fallback/thaweddb
+
+
+[test]
+homePath   = $SPLUNK_DB/test/db
+coldPath   = $SPLUNK_DB/test/colddb
+thawedPath = $SPLUNK_DB/test/thaweddb
+
+[test2]
+homePath   = $SPLUNK_DB/test2/db
+coldPath   = $SPLUNK_DB/test2/colddb
+thawedPath = $SPLUNK_DB/test2/thaweddb
diff --git a/tests/requirements.txt b/tests/requirements.txt
index cc706aa..0ebc865 100644
--- a/tests/requirements.txt
+++ b/tests/requirements.txt
@@ -11,3 +11,4 @@ jinja2
 jinja2-time
 http://dev.splunk.com/goto/sdk-python
 flake8
+flaky
\ No newline at end of file
diff --git a/tests/test_poc.py b/tests/test_poc.py
index 586d6ba..1128413 100644
--- a/tests/test_poc.py
+++ b/tests/test_poc.py
@@ -9,6 +9,7 @@
 from time import sleep
 
 import pytest
+from flaky import flaky
 import splunklib.client as client
 from jinja2 import Environment
 
@@ -32,7 +33,7 @@ def setup_splunk():
             break
         except ConnectionRefusedError:
             tried += 1
-            if tried > 90:
+            if tried > 180:
                 raise
             sleep(1)
     return c
@@ -87,6 +88,7 @@ def splunk_single(service, search):
     return resultCount, eventCount
 
 
+@flaky(max_runs=3, min_passes=2)
 def test_defaultroute(record_property, setup_wordlist, setup_splunk):
     host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
 
@@ -95,7 +97,28 @@ def test_defaultroute(record_property, setup_wordlist, setup_splunk):
 
     sendsingle(message)
 
-    st = env.from_string("search \"{{ host }}\" | head 2")
+    st = env.from_string("search index=main \"{{ host }}\" sourcetype=\"syslog:fallback\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+
+#<190>Jan 28 01:28:35 PA-VM300-goran1 1,2014/01/28 01:28:35,007200001056,TRAFFIC,end,1,2014/01/28 01:28:34,192.168.41.30,192.168.41.255,10.193.16.193,192.168.41.255,allow-all,,,netbios-ns,vsys1,Trust,Untrust,ethernet1/1,ethernet1/2,To-Panorama,2014/01/28 01:28:34,8720,1,137,137,11637,137,0x400000,udp,allow,276,276,0,3,2014/01/28 01:28:02,2,any,0,2076326,0x0,192.168.0.0-192.168.255.255,192.168.0.0-192.168.255.255,0,3,0
+@flaky(max_runs=3, min_passes=2)
+def test_palo_alto_traffic(record_property, setup_wordlist, setup_splunk):
+    host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
+
+    mt = env.from_string("{{ mark }} {% now 'utc', '%b %d 01:02:03' %} {{ host }} 1,{% now 'utc', '%Y/%m/%d %H:%M:%S' %},007200001056,TRAFFIC,end,1,{% now 'utc', '%Y/%m/%d %H:%M:%S' %},192.168.41.30,192.168.41.255,10.193.16.193,192.168.41.255,allow-all,,,netbios-ns,vsys1,Trust,Untrust,ethernet1/1,ethernet1/2,To-Panorama,2014/01/28 01:28:34,8720,1,137,137,11637,137,0x400000,udp,allow,276,276,0,3,2014/01/28 01:28:02,2,any,0,2076326,0x0,192.168.0.0-192.168.255.255,192.168.0.0-192.168.255.255,0,3,0\n")
+    message = mt.render(mark="<111>", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"pan:traffic\" | head 2")
     search = st.render(host=host)
 
     resultCount, eventCount = splunk_single(setup_splunk, search)
@@ -105,3 +128,25 @@ def test_defaultroute(record_property, setup_wordlist, setup_splunk):
     record_property("message", message)
 
     assert resultCount == 1
+
+#<190>Oct 30 09:46:17 1,2012/10/30 09:46:17,01606001116,THREAT,url,1,2012/04/10 04:39:55,192.168.0.2,204.232.231.46,0.0.0.0,0.0.0.0,rule1,crusher,,web-browsing,vsys1,trust,untrust,ethernet1/2,ethernet1/1,forwardAll,2012/04/10 04:39:57,22860,1,59303,80,0,0,0x208000,tcp,alert,"litetopdetect.cn/index.php",(9999),not-resolved,informational,client-to-server,0,0x0,192.168.0.0-192.168.255.255,United States,0,text/html
+@flaky(max_runs=3, min_passes=2)
+def test_palo_alto_threat(record_property, setup_wordlist, setup_splunk):
+    host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
+
+    mt = env.from_string("{{ mark }} {% now 'utc', '%b %d 01:02:03' %} {{ host }} 1,{% now 'utc', '%Y/%m/%d %H:%M:%S' %},01606001116,THREAT,url,1,{% now 'utc', '%Y/%m/%d %H:%M:%S' %},192.168.0.2,204.232.231.46,0.0.0.0,0.0.0.0,rule1,crusher,,web-browsing,vsys1,trust,untrust,ethernet1/2,ethernet1/1,forwardAll,2012/04/10 04:39:57,22860,1,59303,80,0,0,0x208000,tcp,alert,\"litetopdetect.cn/index.php\",(9999),not-resolved,informational,client-to-server,0,0x0,192.168.0.0-192.168.255.255,United States,0,text/html\n")
+    message = mt.render(mark="<111>", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"pan:threat\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+

From 84b1f8496820857cda8b454654d8cffd724a803b Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <35384120+rfaircloth-splunk@users.noreply.github.com>
Date: Fri, 12 Jul 2019 10:37:08 -0700
Subject: [PATCH 32/83] Support Cisco ASA and misc fixes (#17)

* Support Cisco ASA and misc fixes

Fixes #14
Fixes #15
Fixes #16

* fix typo in rfc number
---
 .../filters/cisco_asa_tradditional.conf       | 24 ++++++++++
 .../etc/conf.d/filters/paloalto_networks.conf |  2 +-
 package/etc/context/splunk_index.csv          |  2 +
 tests/test_poc.py                             | 47 ++++++++++++++++++-
 4 files changed, 72 insertions(+), 3 deletions(-)
 create mode 100644 package/etc/conf.d/filters/cisco_asa_tradditional.conf

diff --git a/package/etc/conf.d/filters/cisco_asa_tradditional.conf b/package/etc/conf.d/filters/cisco_asa_tradditional.conf
new file mode 100644
index 0000000..6ed4f89
--- /dev/null
+++ b/package/etc/conf.d/filters/cisco_asa_tradditional.conf
@@ -0,0 +1,24 @@
+log {
+    source(s_default-ports);
+
+    filter {tags("cisco:asa")
+            or message('^.{10,60} : %ASA-\d+-\d{1,10}: ')
+        ;};
+
+    #Cisco ASA can send 3164 or 5424 either way we are good with basic parsing
+    parser {
+        #basic parsing
+        syslog-parser(time-zone(`default-timezone`));
+    };
+
+    #set the source type based on program field and lookup index from the splunk context csv
+    parser {p_add_context_splunk(key("cisco:asa")); };
+
+    #rewrite the final message for splunk json
+    #sourcetype and index are set in the filter defaults won't be used
+    rewrite {r_set_splunk_basic(template("t_msg_only")) }; #--HEC--
+
+    destination(d_hec);  #--HEC--
+
+    flags(final);
+};
diff --git a/package/etc/conf.d/filters/paloalto_networks.conf b/package/etc/conf.d/filters/paloalto_networks.conf
index 1fbba7b..1ef160c 100644
--- a/package/etc/conf.d/filters/paloalto_networks.conf
+++ b/package/etc/conf.d/filters/paloalto_networks.conf
@@ -57,5 +57,5 @@ log {
 
     destination(d_hec);  #--HEC--
 
-    #flags(final);
+    flags(final);
 };
diff --git a/package/etc/context/splunk_index.csv b/package/etc/context/splunk_index.csv
index 5d33787..cb1760e 100644
--- a/package/etc/context/splunk_index.csv
+++ b/package/etc/context/splunk_index.csv
@@ -1,3 +1,5 @@
+cisco:asa,index,main
+cisco:asa,sourcetype,cisco:asa
 pan:traffic,index,main
 pan:threat,index,main
 pan:system,index,main
diff --git a/tests/test_poc.py b/tests/test_poc.py
index 1128413..1a45e87 100644
--- a/tests/test_poc.py
+++ b/tests/test_poc.py
@@ -113,7 +113,7 @@ def test_defaultroute(record_property, setup_wordlist, setup_splunk):
 def test_palo_alto_traffic(record_property, setup_wordlist, setup_splunk):
     host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
 
-    mt = env.from_string("{{ mark }} {% now 'utc', '%b %d 01:02:03' %} {{ host }} 1,{% now 'utc', '%Y/%m/%d %H:%M:%S' %},007200001056,TRAFFIC,end,1,{% now 'utc', '%Y/%m/%d %H:%M:%S' %},192.168.41.30,192.168.41.255,10.193.16.193,192.168.41.255,allow-all,,,netbios-ns,vsys1,Trust,Untrust,ethernet1/1,ethernet1/2,To-Panorama,2014/01/28 01:28:34,8720,1,137,137,11637,137,0x400000,udp,allow,276,276,0,3,2014/01/28 01:28:02,2,any,0,2076326,0x0,192.168.0.0-192.168.255.255,192.168.0.0-192.168.255.255,0,3,0\n")
+    mt = env.from_string("{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} 1,{% now 'utc', '%Y/%m/%d %H:%M:%S' %},007200001056,TRAFFIC,end,1,{% now 'utc', '%Y/%m/%d %H:%M:%S' %},192.168.41.30,192.168.41.255,10.193.16.193,192.168.41.255,allow-all,,,netbios-ns,vsys1,Trust,Untrust,ethernet1/1,ethernet1/2,To-Panorama,2014/01/28 01:28:34,8720,1,137,137,11637,137,0x400000,udp,allow,276,276,0,3,2014/01/28 01:28:02,2,any,0,2076326,0x0,192.168.0.0-192.168.255.255,192.168.0.0-192.168.255.255,0,3,0\n")
     message = mt.render(mark="<111>", host=host)
 
     sendsingle(message)
@@ -134,7 +134,7 @@ def test_palo_alto_traffic(record_property, setup_wordlist, setup_splunk):
 def test_palo_alto_threat(record_property, setup_wordlist, setup_splunk):
     host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
 
-    mt = env.from_string("{{ mark }} {% now 'utc', '%b %d 01:02:03' %} {{ host }} 1,{% now 'utc', '%Y/%m/%d %H:%M:%S' %},01606001116,THREAT,url,1,{% now 'utc', '%Y/%m/%d %H:%M:%S' %},192.168.0.2,204.232.231.46,0.0.0.0,0.0.0.0,rule1,crusher,,web-browsing,vsys1,trust,untrust,ethernet1/2,ethernet1/1,forwardAll,2012/04/10 04:39:57,22860,1,59303,80,0,0,0x208000,tcp,alert,\"litetopdetect.cn/index.php\",(9999),not-resolved,informational,client-to-server,0,0x0,192.168.0.0-192.168.255.255,United States,0,text/html\n")
+    mt = env.from_string("{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} 1,{% now 'utc', '%Y/%m/%d %H:%M:%S' %},01606001116,THREAT,url,1,{% now 'utc', '%Y/%m/%d %H:%M:%S' %},192.168.0.2,204.232.231.46,0.0.0.0,0.0.0.0,rule1,crusher,,web-browsing,vsys1,trust,untrust,ethernet1/2,ethernet1/1,forwardAll,2012/04/10 04:39:57,22860,1,59303,80,0,0,0x208000,tcp,alert,\"litetopdetect.cn/index.php\",(9999),not-resolved,informational,client-to-server,0,0x0,192.168.0.0-192.168.255.255,United States,0,text/html\n")
     message = mt.render(mark="<111>", host=host)
 
     sendsingle(message)
@@ -150,3 +150,46 @@ def test_palo_alto_threat(record_property, setup_wordlist, setup_splunk):
 
     assert resultCount == 1
 
+#Apr 15 2017 00:21:14 192.168.12.1 : %ASA-5-111010: User 'john', running 'CLI' from IP 0.0.0.0, executed 'dir disk0:/dap.xml'
+#Apr 15 2017 00:22:27 192.168.12.1 : %ASA-4-313005: No matching connection for ICMP error message: icmp src outside:81.24.28.226 dst inside:72.142.17.10 (type 3, code 0) on outside interface. Original IP payload: udp src 72.142.17.10/40998 dst 194.153.237.66/53.
+#Apr 15 2017 00:22:42 192.168.12.1 : %ASA-3-710003: TCP access denied by ACL from 179.236.133.160/8949 to outside:72.142.18.38/23
+@flaky(max_runs=3, min_passes=2)
+def test_cisco_asa_tradditional(record_property, setup_wordlist, setup_splunk):
+    host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
+
+    mt = env.from_string("{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} : %ASA-3-710003: TCP access denied by ACL from 179.236.133.160/3624 to outside:72.142.18.38/23\n")
+    message = mt.render(mark="<111>", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"cisco:asa\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+
+#<166>2018-06-27T12:17:46Z asa : %ASA-3-710003: TCP access denied by ACL from 179.236.133.160/8949 to outside:72.142.18.38/23
+def test_cisco_asa_rfc5424(record_property, setup_wordlist, setup_splunk):
+    host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
+
+    mt = env.from_string("{{ mark }} {% now 'utc', '%Y-%m-%dT%H:%M:%SZ' %} {{ host }} : %ASA-3-710003: TCP access denied by ACL from 179.236.133.160/5424 to outside:72.142.18.38/23\n")
+    message = mt.render(mark="<166>", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"cisco:asa\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+

From 5c885dc7f4521ad47a43a79a01db78027084e184 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <35384120+rfaircloth-splunk@users.noreply.github.com>
Date: Mon, 15 Jul 2019 11:33:51 -0500
Subject: [PATCH 33/83] Feature/filter cisco ios (#21)

* Support Cisco ASA and misc fixes

Fixes #14
Fixes #15
Fixes #16

* Test Refactor

Fixes #18
Fixes #19

* New filter cisco IOS

Fixes #20

* Update .env.template
---
 .env.template                                 |    3 +
 .../filters/cisco_asa_tradditional.conf       |    2 +-
 package/etc/conf.d/filters/cisco_ios.conf     |   16 +
 package/etc/context/splunk_index.csv          |    2 +
 tests/__init__.py                             |    5 +
 tests/conftest.py                             |   45 +
 tests/data/wordlist.txt                       | 1633 +++++++++++++++++
 tests/sendmessage.py                          |   26 +
 tests/splunkutils.py                          |   37 +
 tests/test_cisco_asa.py                       |   61 +
 tests/test_cisco_ios.py                       |   35 +
 tests/test_palo_alto.py                       |   60 +
 tests/test_poc.py                             |  174 +-
 13 files changed, 1931 insertions(+), 168 deletions(-)
 create mode 100644 package/etc/conf.d/filters/cisco_ios.conf
 create mode 100644 tests/__init__.py
 create mode 100644 tests/conftest.py
 create mode 100644 tests/data/wordlist.txt
 create mode 100644 tests/sendmessage.py
 create mode 100644 tests/splunkutils.py
 create mode 100644 tests/test_cisco_asa.py
 create mode 100644 tests/test_cisco_ios.py
 create mode 100644 tests/test_palo_alto.py

diff --git a/.env.template b/.env.template
index b828de9..b7294ec 100644
--- a/.env.template
+++ b/.env.template
@@ -16,3 +16,6 @@ SPLUNK_HEC_STATSURL=https://splunk:8088/services/collector/event
 SPLUNK_CONNECT_METHOD=hec
 SPLUNK_DEFAULT_INDEX=main
 SPLUNK_METRICS_INDEX=metrics
+SPLUNK_APPS_URL=https://splunkbase.splunk.com/app/2757/release/6.1.1/download,https://splunkbase.splunk.com/app/3245/release/1.0/download,https://splunkbase.splunk.com/app/1620/release/3.4.0/download,https://splunkbase.splunk.com/app/1467/release/2.5.8/download
+SPLUNKBASE_USERNAME=username
+SPLUNKBASE_PASSWORD=password
\ No newline at end of file
diff --git a/package/etc/conf.d/filters/cisco_asa_tradditional.conf b/package/etc/conf.d/filters/cisco_asa_tradditional.conf
index 6ed4f89..a912baf 100644
--- a/package/etc/conf.d/filters/cisco_asa_tradditional.conf
+++ b/package/etc/conf.d/filters/cisco_asa_tradditional.conf
@@ -5,7 +5,7 @@ log {
             or message('^.{10,60} : %ASA-\d+-\d{1,10}: ')
         ;};
 
-    #Cisco ASA can send 3164 or 5424 either way we are good with basic parsing
+    #Cisco ASA can send 3264 or 5424 either way we are good with basic parsing
     parser {
         #basic parsing
         syslog-parser(time-zone(`default-timezone`));
diff --git a/package/etc/conf.d/filters/cisco_ios.conf b/package/etc/conf.d/filters/cisco_ios.conf
new file mode 100644
index 0000000..98427f1
--- /dev/null
+++ b/package/etc/conf.d/filters/cisco_ios.conf
@@ -0,0 +1,16 @@
+# ===============================================================================================
+# Cisco IOS (Route/Switch)
+# ===============================================================================================
+
+log {
+
+    source(s_default-ports);
+
+    parser { cisco-parser(); };
+
+    parser {p_add_context_splunk(key("cisco:ios")); };
+    rewrite { r_set_splunk_basic(template("t_msg_only"))}; #--HEC--
+    destination(d_hec);  #--HEC--
+
+    flags(final);
+};
diff --git a/package/etc/context/splunk_index.csv b/package/etc/context/splunk_index.csv
index cb1760e..75b98d6 100644
--- a/package/etc/context/splunk_index.csv
+++ b/package/etc/context/splunk_index.csv
@@ -1,5 +1,7 @@
 cisco:asa,index,main
 cisco:asa,sourcetype,cisco:asa
+cisco:ios,index,main
+cisco:ios,sourcetype,cisco:ios
 pan:traffic,index,main
 pan:threat,index,main
 pan:system,index,main
diff --git a/tests/__init__.py b/tests/__init__.py
new file mode 100644
index 0000000..4913c30
--- /dev/null
+++ b/tests/__init__.py
@@ -0,0 +1,5 @@
+# Copyright 2019 Splunk, Inc.
+#
+# Use of this source code is governed by a BSD-2-clause-style
+# license that can be found in the LICENSE-BSD2 file or at
+# https://opensource.org/licenses/BSD-2-Clause
diff --git a/tests/conftest.py b/tests/conftest.py
new file mode 100644
index 0000000..cc16563
--- /dev/null
+++ b/tests/conftest.py
@@ -0,0 +1,45 @@
+# Copyright 2019 Splunk, Inc.
+#
+# Use of this source code is governed by a BSD-2-clause-style
+# license that can be found in the LICENSE-BSD2 file or at
+# https://opensource.org/licenses/BSD-2-Clause
+import os
+import random
+from time import sleep
+
+import pytest
+import splunklib.client as client
+
+
+@pytest.fixture(scope="module")
+def setup_wordlist():
+    path_to_current_file = os.path.realpath(__file__)
+    current_directory = os.path.split(path_to_current_file)[0]
+    path_to_file = os.path.join(current_directory, "data/wordlist.txt")
+
+    wordlist = [line.rstrip('\n') for line in open(path_to_file)]
+    return wordlist
+
+
+@pytest.fixture
+def get_host_key(setup_wordlist):
+    part1 = random.choice(setup_wordlist)
+    part2 = random.choice(setup_wordlist)
+    host = "{}-{}".format(part1, part2)
+
+    return host
+
+
+@pytest.fixture
+def setup_splunk():
+    tried = 0
+    while True:
+        try:
+            c = client.connect(username="admin", password="Changed@11", host="splunk", port="8089")
+            break
+        except ConnectionRefusedError:
+            tried += 1
+            if tried > 180:
+                raise
+            sleep(1)
+    return c
diff --git a/tests/data/wordlist.txt b/tests/data/wordlist.txt
new file mode 100644
index 0000000..d6a73fe
--- /dev/null
+++ b/tests/data/wordlist.txt
@@ -0,0 +1,1633 @@
+acrobat
+africa
+alaska
+albert
+albino
+album
+alcohol
+alex
+alpha
+amadeus
+amanda
+amazon
+america
+analog
+animal
+antenna
+antonio
+apollo
+april
+aroma
+artist
+aspirin
+athlete
+atlas
+banana
+bandit
+banjo
+bikini
+bingo
+bonus
+camera
+canada
+carbon
+casino
+catalog
+cinema
+citizen
+cobra
+comet
+compact
+complex
+context
+credit
+critic
+crystal
+culture
+david
+delta
+dialog
+diploma
+doctor
+domino
+dragon
+drama
+extra
+fabric
+final
+focus
+forum
+galaxy
+gallery
+global
+harmony
+hotel
+humor
+index
+japan
+kilo
+lemon
+liter
+lotus
+mango
+melon
+menu
+meter
+metro
+mineral
+model
+music
+object
+piano
+pirate
+plastic
+radio
+report
+signal
+sport
+studio
+subject
+super
+tango
+taxi
+tempo
+tennis
+textile
+tokyo
+total
+tourist
+video
+visa
+academy
+alfred
+atlanta
+atomic
+barbara
+bazaar
+brother
+budget
+cabaret
+cadet
+candle
+capsule
+caviar
+channel
+chapter
+circle
+cobalt
+comrade
+condor
+crimson
+cyclone
+darwin
+declare
+denver
+desert
+divide
+dolby
+domain
+double
+eagle
+echo
+eclipse
+editor
+educate
+edward
+effect
+electra
+emerald
+emotion
+empire
+eternal
+evening
+exhibit
+expand
+explore
+extreme
+ferrari
+forget
+freedom
+friday
+fuji
+galileo
+genesis
+gravity
+habitat
+hamlet
+harlem
+helium
+holiday
+hunter
+ibiza
+iceberg
+imagine
+infant
+isotope
+jackson
+jamaica
+jasmine
+java
+jessica
+kitchen
+lazarus
+letter
+license
+lithium
+loyal
+lucky
+magenta
+manual
+marble
+maxwell
+mayor
+monarch
+monday
+money
+morning
+mother
+mystery
+native
+nectar
+nelson
+network
+nikita
+nobel
+nobody
+nominal
+norway
+nothing
+number
+october
+office
+oliver
+opinion
+option
+order
+outside
+package
+pandora
+panther
+papa
+pattern
+pedro
+pencil
+people
+phantom
+philips
+pioneer
+pluto
+podium
+portal
+potato
+process
+proxy
+pupil
+python
+quality
+quarter
+quiet
+rabbit
+radical
+radius
+rainbow
+ramirez
+ravioli
+raymond
+respect
+respond
+result
+resume
+richard
+river
+roger
+roman
+rondo
+sabrina
+salary
+salsa
+sample
+samuel
+saturn
+savage
+scarlet
+scorpio
+sector
+serpent
+shampoo
+sharon
+silence
+simple
+society
+sonar
+sonata
+soprano
+sparta
+spider
+sponsor
+abraham
+action
+active
+actor
+adam
+address
+admiral
+adrian
+agenda
+agent
+airline
+airport
+alabama
+aladdin
+alarm
+algebra
+alibi
+alice
+alien
+almond
+alpine
+amber
+amigo
+ammonia
+analyze
+anatomy
+angel
+annual
+answer
+apple
+archive
+arctic
+arena
+arizona
+armada
+arnold
+arsenal
+arthur
+asia
+aspect
+athena
+audio
+august
+austria
+avenue
+average
+axiom
+aztec
+bagel
+baker
+balance
+ballad
+ballet
+bambino
+bamboo
+baron
+basic
+basket
+battery
+belgium
+benefit
+berlin
+bermuda
+bernard
+bicycle
+binary
+biology
+bishop
+blitz
+block
+blonde
+bonjour
+boris
+boston
+bottle
+boxer
+brandy
+bravo
+brazil
+bridge
+british
+bronze
+brown
+bruce
+bruno
+brush
+burger
+burma
+cabinet
+cactus
+cafe
+cairo
+calypso
+camel
+campus
+canal
+cannon
+canoe
+cantina
+canvas
+canyon
+capital
+caramel
+caravan
+career
+cargo
+carlo
+carol
+carpet
+cartel
+cartoon
+castle
+castro
+cecilia
+cement
+center
+century
+ceramic
+chamber
+chance
+change
+chaos
+charlie
+charm
+charter
+cheese
+chef
+chemist
+cherry
+chess
+chicago
+chicken
+chief
+china
+cigar
+circus
+city
+clara
+classic
+claudia
+clean
+client
+climax
+clinic
+clock
+club
+cockpit
+coconut
+cola
+collect
+colombo
+colony
+color
+combat
+comedy
+command
+company
+concert
+connect
+consul
+contact
+contour
+control
+convert
+copy
+corner
+corona
+correct
+cosmos
+couple
+courage
+cowboy
+craft
+crash
+cricket
+crown
+cuba
+dallas
+dance
+daniel
+decade
+decimal
+degree
+delete
+deliver
+delphi
+deluxe
+demand
+demo
+denmark
+derby
+design
+detect
+develop
+diagram
+diamond
+diana
+diego
+diesel
+diet
+digital
+dilemma
+direct
+disco
+disney
+distant
+dollar
+dolphin
+donald
+drink
+driver
+dublin
+duet
+dynamic
+earth
+east
+ecology
+economy
+edgar
+egypt
+elastic
+elegant
+element
+elite
+elvis
+email
+empty
+energy
+engine
+english
+episode
+equator
+escape
+escort
+ethnic
+europe
+everest
+evident
+exact
+example
+exit
+exotic
+export
+express
+factor
+falcon
+family
+fantasy
+fashion
+fiber
+fiction
+fidel
+fiesta
+figure
+film
+filter
+finance
+finish
+finland
+first
+flag
+flash
+florida
+flower
+fluid
+flute
+folio
+ford
+forest
+formal
+formula
+fortune
+forward
+fragile
+france
+frank
+fresh
+friend
+frozen
+future
+gabriel
+gamma
+garage
+garcia
+garden
+garlic
+gemini
+general
+genetic
+genius
+germany
+gloria
+gold
+golf
+gondola
+gong
+good
+gordon
+gorilla
+grand
+granite
+graph
+green
+group
+guide
+guitar
+guru
+hand
+happy
+harbor
+harvard
+havana
+hawaii
+helena
+hello
+henry
+hilton
+history
+horizon
+house
+human
+icon
+idea
+igloo
+igor
+image
+impact
+import
+india
+indigo
+input
+insect
+instant
+iris
+italian
+jacket
+jacob
+jaguar
+janet
+jargon
+jazz
+jeep
+john
+joker
+jordan
+judo
+jumbo
+june
+jungle
+junior
+jupiter
+karate
+karma
+kayak
+kermit
+king
+koala
+korea
+labor
+lady
+lagoon
+laptop
+laser
+latin
+lava
+lecture
+left
+legal
+level
+lexicon
+liberal
+libra
+lily
+limbo
+limit
+linda
+linear
+lion
+liquid
+little
+llama
+lobby
+lobster
+local
+logic
+logo
+lola
+london
+lucas
+lunar
+machine
+macro
+madam
+madonna
+madrid
+maestro
+magic
+magnet
+magnum
+mailbox
+major
+mama
+mambo
+manager
+manila
+marco
+marina
+market
+mars
+martin
+marvin
+mary
+master
+matrix
+maximum
+media
+medical
+mega
+melody
+memo
+mental
+mentor
+mercury
+message
+metal
+meteor
+method
+mexico
+miami
+micro
+milk
+million
+minimum
+minus
+minute
+miracle
+mirage
+miranda
+mister
+mixer
+mobile
+modem
+modern
+modular
+moment
+monaco
+monica
+monitor
+mono
+monster
+montana
+morgan
+motel
+motif
+motor
+mozart
+multi
+museum
+mustang
+natural
+neon
+nepal
+neptune
+nerve
+neutral
+nevada
+news
+next
+ninja
+nirvana
+normal
+nova
+novel
+nuclear
+numeric
+nylon
+oasis
+observe
+ocean
+octopus
+olivia
+olympic
+omega
+opera
+optic
+optimal
+orange
+orbit
+organic
+orient
+origin
+orlando
+oscar
+oxford
+oxygen
+ozone
+pablo
+pacific
+pagoda
+palace
+pamela
+panama
+pancake
+panda
+panel
+panic
+paradox
+pardon
+paris
+parker
+parking
+parody
+partner
+passage
+passive
+pasta
+pastel
+patent
+patient
+patriot
+patrol
+pegasus
+pelican
+penguin
+pepper
+percent
+perfect
+perfume
+period
+permit
+person
+peru
+phone
+photo
+picasso
+picnic
+picture
+pigment
+pilgrim
+pilot
+pixel
+pizza
+planet
+plasma
+plaza
+pocket
+poem
+poetic
+poker
+polaris
+police
+politic
+polo
+polygon
+pony
+popcorn
+popular
+postage
+precise
+prefix
+premium
+present
+price
+prince
+printer
+prism
+private
+prize
+product
+profile
+program
+project
+protect
+proton
+public
+pulse
+puma
+pump
+pyramid
+queen
+radar
+ralph
+random
+rapid
+rebel
+record
+recycle
+reflex
+reform
+regard
+regular
+relax
+reptile
+reverse
+ricardo
+right
+ringo
+risk
+ritual
+robert
+robot
+rocket
+rodeo
+romeo
+royal
+russian
+safari
+salad
+salami
+salmon
+salon
+salute
+samba
+sandra
+santana
+sardine
+school
+scoop
+scratch
+screen
+script
+scroll
+second
+secret
+section
+segment
+select
+seminar
+senator
+senior
+sensor
+serial
+service
+shadow
+sharp
+sheriff
+shock
+short
+shrink
+sierra
+silicon
+silk
+silver
+similar
+simon
+single
+siren
+slang
+slogan
+smart
+smoke
+snake
+social
+soda
+solar
+solid
+solo
+sonic
+source
+soviet
+special
+speed
+sphere
+spiral
+spirit
+spring
+static
+status
+stereo
+stone
+stop
+street
+strong
+student
+style
+sultan
+susan
+sushi
+suzuki
+switch
+symbol
+system
+tactic
+tahiti
+talent
+tarzan
+telex
+texas
+theory
+thermos
+tiger
+titanic
+tomato
+topic
+tornado
+toronto
+torpedo
+totem
+tractor
+traffic
+transit
+trapeze
+travel
+tribal
+trick
+trident
+trilogy
+tripod
+tropic
+trumpet
+tulip
+tuna
+turbo
+twist
+ultra
+uniform
+union
+uranium
+vacuum
+valid
+vampire
+vanilla
+vatican
+velvet
+ventura
+venus
+vertigo
+veteran
+victor
+vienna
+viking
+village
+vincent
+violet
+violin
+virtual
+virus
+vision
+visitor
+visual
+vitamin
+viva
+vocal
+vodka
+volcano
+voltage
+volume
+voyage
+water
+weekend
+welcome
+western
+window
+winter
+wizard
+wolf
+world
+xray
+yankee
+yoga
+yogurt
+yoyo
+zebra
+zero
+zigzag
+zipper
+zodiac
+zoom
+acid
+adios
+agatha
+alamo
+alert
+almanac
+aloha
+andrea
+anita
+arcade
+aurora
+avalon
+baby
+baggage
+balloon
+bank
+basil
+begin
+biscuit
+blue
+bombay
+botanic
+brain
+brenda
+brigade
+cable
+calibre
+carmen
+cello
+celtic
+chariot
+chrome
+citrus
+civil
+cloud
+combine
+common
+cool
+copper
+coral
+crater
+cubic
+cupid
+cycle
+depend
+door
+dream
+dynasty
+edison
+edition
+enigma
+equal
+eric
+event
+evita
+exodus
+extend
+famous
+farmer
+food
+fossil
+frog
+fruit
+geneva
+gentle
+george
+giant
+gilbert
+gossip
+gram
+greek
+grille
+hammer
+harvest
+hazard
+heaven
+herbert
+heroic
+hexagon
+husband
+immune
+inca
+inch
+initial
+isabel
+ivory
+jason
+jerome
+joel
+joshua
+journal
+judge
+juliet
+jump
+justice
+kimono
+kinetic
+leonid
+leopard
+lima
+maze
+medusa
+member
+memphis
+michael
+miguel
+milan
+mile
+miller
+mimic
+mimosa
+mission
+monkey
+moral
+moses
+mouse
+nancy
+natasha
+nebula
+nickel
+nina
+noise
+orchid
+oregano
+origami
+orinoco
+orion
+othello
+paper
+paprika
+prelude
+prepare
+pretend
+promise
+prosper
+provide
+puzzle
+remote
+repair
+reply
+rival
+riviera
+robin
+rose
+rover
+rudolf
+saga
+sahara
+scholar
+shelter
+ship
+shoe
+sigma
+sister
+sleep
+smile
+spain
+spark
+split
+spray
+square
+stadium
+star
+storm
+story
+strange
+stretch
+stuart
+subway
+sugar
+sulfur
+summer
+survive
+sweet
+swim
+table
+taboo
+target
+teacher
+telecom
+temple
+tibet
+ticket
+tina
+today
+toga
+tommy
+tower
+trivial
+tunnel
+turtle
+twin
+uncle
+unicorn
+unique
+update
+valery
+vega
+version
+voodoo
+warning
+william
+wonder
+year
+yellow
+young
+absent
+absorb
+absurd
+accent
+alfonso
+alias
+ambient
+anagram
+andy
+anvil
+appear
+apropos
+archer
+ariel
+armor
+arrow
+austin
+avatar
+axis
+baboon
+bahama
+bali
+balsa
+barcode
+bazooka
+beach
+beast
+beatles
+beauty
+before
+benny
+betty
+between
+beyond
+billy
+bison
+blast
+bless
+bogart
+bonanza
+book
+border
+brave
+bread
+break
+broken
+bucket
+buenos
+buffalo
+bundle
+button
+buzzer
+byte
+caesar
+camilla
+canary
+candid
+carrot
+cave
+chant
+child
+choice
+chris
+cipher
+clarion
+clark
+clever
+cliff
+clone
+conan
+conduct
+congo
+costume
+cotton
+cover
+crack
+current
+danube
+data
+decide
+deposit
+desire
+detail
+dexter
+dinner
+donor
+druid
+drum
+easy
+eddie
+enjoy
+enrico
+epoxy
+erosion
+except
+exile
+explain
+fame
+fast
+father
+felix
+field
+fiona
+fire
+fish
+flame
+flex
+flipper
+float
+flood
+floor
+forbid
+forever
+fractal
+frame
+freddie
+front
+fuel
+gallop
+game
+garbo
+gate
+gelatin
+gibson
+ginger
+giraffe
+gizmo
+glass
+goblin
+gopher
+grace
+gray
+gregory
+grid
+griffin
+ground
+guest
+gustav
+gyro
+hair
+halt
+harris
+heart
+heavy
+herman
+hippie
+hobby
+honey
+hope
+horse
+hostel
+hydro
+imitate
+info
+ingrid
+inside
+invent
+invest
+invite
+ivan
+james
+jester
+jimmy
+join
+joseph
+juice
+julius
+july
+kansas
+karl
+kevin
+kiwi
+ladder
+lake
+laura
+learn
+legacy
+legend
+lesson
+life
+light
+list
+locate
+lopez
+lorenzo
+love
+lunch
+malta
+mammal
+margin
+margo
+marion
+mask
+match
+mayday
+meaning
+mercy
+middle
+mike
+mirror
+modest
+morph
+morris
+mystic
+nadia
+nato
+navy
+needle
+neuron
+never
+newton
+nice
+night
+nissan
+nitro
+nixon
+north
+oberon
+octavia
+ohio
+olga
+open
+opus
+orca
+oval
+owner
+page
+paint
+palma
+parent
+parlor
+parole
+paul
+peace
+pearl
+perform
+phoenix
+phrase
+pierre
+pinball
+place
+plate
+plato
+plume
+pogo
+point
+polka
+poncho
+powder
+prague
+press
+presto
+pretty
+prime
+promo
+quest
+quick
+quiz
+quota
+race
+rachel
+raja
+ranger
+region
+remark
+rent
+reward
+rhino
+ribbon
+rider
+road
+rodent
+round
+rubber
+ruby
+rufus
+sabine
+saddle
+sailor
+saint
+salt
+scale
+scuba
+season
+secure
+shake
+shallow
+shannon
+shave
+shelf
+sherman
+shine
+shirt
+side
+sinatra
+sincere
+size
+slalom
+slow
+small
+snow
+sofia
+song
+sound
+south
+speech
+spell
+spend
+spoon
+stage
+stamp
+stand
+state
+stella
+stick
+sting
+stock
+store
+sunday
+sunset
+support
+supreme
+sweden
+swing
+tape
+tavern
+think
+thomas
+tictac
+time
+toast
+tobacco
+tonight
+torch
+torso
+touch
+toyota
+trade
+tribune
+trinity
+triton
+truck
+trust
+type
+under
+unit
+urban
+urgent
+user
+value
+vendor
+venice
+verona
+vibrate
+virgo
+visible
+vista
+vital
+voice
+vortex
+waiter
+watch
+wave
+weather
+wedding
+wheel
+whiskey
+wisdom
+android
+annex
+armani
+cake
+confide
+deal
+define
+dispute
+genuine
+idiom
+impress
+include
+ironic
+null
+nurse
+obscure
+prefer
+prodigy
+ego
+fax
+jet
+job
+rio
+ski
+yes
\ No newline at end of file
diff --git a/tests/sendmessage.py b/tests/sendmessage.py
new file mode 100644
index 0000000..6388c78
--- /dev/null
+++ b/tests/sendmessage.py
@@ -0,0 +1,26 @@
+# Copyright 2019 Splunk, Inc.
+#
+# Use of this source code is governed by a BSD-2-clause-style
+# license that can be found in the LICENSE-BSD2 file or at
+# https://opensource.org/licenses/BSD-2-Clause
+
+import socket
+from time import sleep
+
+
+def sendsingle(message):
+    sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+    server_address = ('sc4s', 514)
+
+    tried = 0
+    while True:
+        try:
+            sock.connect(server_address)
+            break
+        except socket:
+            tried += 1
+            if tried > 90:
+                raise
+            sleep(1)
+    sock.sendall(str.encode(message))
+    sock.close()
diff --git a/tests/splunkutils.py b/tests/splunkutils.py
new file mode 100644
index 0000000..7227ae9
--- /dev/null
+++ b/tests/splunkutils.py
@@ -0,0 +1,37 @@
+# Copyright 2019 Splunk, Inc.
+#
+# Use of this source code is governed by a BSD-2-clause-style
+# license that can be found in the LICENSE-BSD2 file or at
+# https://opensource.org/licenses/BSD-2-Clause
+from time import sleep
+
+
+def splunk_single(service, search):
+    kwargs_normalsearch = {"exec_mode": "normal"}
+    tried = 0
+    while True:
+        job = service.jobs.create(search, **kwargs_normalsearch)
+
+        # A normal search returns the job's SID right away, so we need to poll for completion
+        while True:
+            while not job.is_ready():
+                pass
+            stats = {"isDone": job["isDone"],
+                     "doneProgress": float(job["doneProgress"]) * 100,
+                     "scanCount": int(job["scanCount"]),
+                     "eventCount": int(job["eventCount"]),
+                     "resultCount": int(job["resultCount"])}
+
+            if stats["isDone"] == "1":
+                break
+            sleep(2)
+
+        # Get the results and display them
+        resultCount = stats["resultCount"]
+        eventCount = stats["eventCount"]
+        if resultCount > 0 or tried > 15:
+            break
+        else:
+            tried += 1
+            sleep(1)
+    return resultCount, eventCount
diff --git a/tests/test_cisco_asa.py b/tests/test_cisco_asa.py
new file mode 100644
index 0000000..a908fc4
--- /dev/null
+++ b/tests/test_cisco_asa.py
@@ -0,0 +1,61 @@
+# Copyright 2019 Splunk, Inc.
+#
+# Use of this source code is governed by a BSD-2-clause-style
+# license that can be found in the LICENSE-BSD2 file or at
+# https://opensource.org/licenses/BSD-2-Clause
+import random
+
+from flaky import flaky
+from jinja2 import Environment
+
+from .sendmessage import *
+from .splunkutils import *
+
+env = Environment(extensions=['jinja2_time.TimeExtension'])
+
+
+# Apr 15 2017 00:21:14 192.168.12.1 : %ASA-5-111010: User 'john', running 'CLI' from IP 0.0.0.0, executed 'dir disk0:/dap.xml'
+# Apr 15 2017 00:22:27 192.168.12.1 : %ASA-4-313005: No matching connection for ICMP error message: icmp src outside:81.24.28.226 dst inside:72.142.17.10 (type 3, code 0) on outside interface. Original IP payload: udp src 72.142.17.10/40998 dst 194.153.237.66/53.
+# Apr 15 2017 00:22:42 192.168.12.1 : %ASA-3-710003: TCP access denied by ACL from 179.236.133.160/8949 to outside:72.142.18.38/23
+@flaky(max_runs=3, min_passes=2)
+def test_cisco_asa_tradditional(record_property, setup_wordlist, setup_splunk):
+    host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} : %ASA-3-710003: TCP access denied by ACL from 179.236.133.160/3624 to outside:72.142.18.38/23\n")
+    message = mt.render(mark="<111>", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"cisco:asa\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+
+
+# <166>2018-06-27T12:17:46Z asa : %ASA-3-710003: TCP access denied by ACL from 179.236.133.160/8949 to outside:72.142.18.38/23
+def test_cisco_asa_rfc5424(record_property, setup_wordlist, setup_splunk):
+    host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%Y-%m-%dT%H:%M:%SZ' %} {{ host }} : %ASA-3-710003: TCP access denied by ACL from 179.236.133.160/5424 to outside:72.142.18.38/23\n")
+    message = mt.render(mark="<166>", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"cisco:asa\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
diff --git a/tests/test_cisco_ios.py b/tests/test_cisco_ios.py
new file mode 100644
index 0000000..19746af
--- /dev/null
+++ b/tests/test_cisco_ios.py
@@ -0,0 +1,35 @@
+# Copyright 2019 Splunk, Inc.
+#
+# Use of this source code is governed by a BSD-2-clause-style
+# license that can be found in the LICENSE-BSD2 file or at
+# https://opensource.org/licenses/BSD-2-Clause
+
+from jinja2 import Environment
+from jinja2 import Environment
+
+from .sendmessage import *
+from .splunkutils import *
+
+env = Environment(extensions=['jinja2_time.TimeExtension'])
+
+
+# <190>30: foo: *Apr 29 13:58:46.411: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 192.168.1.239 stopped - CLI initiated
+def test_cisco_ios(record_property, setup_wordlist, get_host_key, setup_splunk):
+    host = get_host_key
+
+    mt = env.from_string(
+        "{{ mark }}{{ seq }}: {{ host }}: *{% now 'utc', '%b %d %H:%M:%S' %}.100: CET: %SEC-6-IPACCESSLOGP: list 110 denied tcp 54.122.123.124(8932) -> 10.1.0.1(22), 1 packet\n")
+    message = mt.render(mark="<166>", seq=20, host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"cisco:ios\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
diff --git a/tests/test_palo_alto.py b/tests/test_palo_alto.py
new file mode 100644
index 0000000..ec8744e
--- /dev/null
+++ b/tests/test_palo_alto.py
@@ -0,0 +1,60 @@
+# Copyright 2019 Splunk, Inc.
+#
+# Use of this source code is governed by a BSD-2-clause-style
+# license that can be found in the LICENSE-BSD2 file or at
+# https://opensource.org/licenses/BSD-2-Clause
+import random
+
+from flaky import flaky
+from jinja2 import Environment
+
+from .sendmessage import *
+from .splunkutils import *
+
+env = Environment(extensions=['jinja2_time.TimeExtension'])
+
+
+# <190>Jan 28 01:28:35 PA-VM300-goran1 1,2014/01/28 01:28:35,007200001056,TRAFFIC,end,1,2014/01/28 01:28:34,192.168.41.30,192.168.41.255,10.193.16.193,192.168.41.255,allow-all,,,netbios-ns,vsys1,Trust,Untrust,ethernet1/1,ethernet1/2,To-Panorama,2014/01/28 01:28:34,8720,1,137,137,11637,137,0x400000,udp,allow,276,276,0,3,2014/01/28 01:28:02,2,any,0,2076326,0x0,192.168.0.0-192.168.255.255,192.168.0.0-192.168.255.255,0,3,0
+@flaky(max_runs=3, min_passes=2)
+def test_palo_alto_traffic(record_property, setup_wordlist, setup_splunk):
+    host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} 1,{% now 'utc', '%Y/%m/%d %H:%M:%S' %},007200001056,TRAFFIC,end,1,{% now 'utc', '%Y/%m/%d %H:%M:%S' %},192.168.41.30,192.168.41.255,10.193.16.193,192.168.41.255,allow-all,,,netbios-ns,vsys1,Trust,Untrust,ethernet1/1,ethernet1/2,To-Panorama,2014/01/28 01:28:34,8720,1,137,137,11637,137,0x400000,udp,allow,276,276,0,3,2014/01/28 01:28:02,2,any,0,2076326,0x0,192.168.0.0-192.168.255.255,192.168.0.0-192.168.255.255,0,3,0\n")
+    message = mt.render(mark="<111>", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"pan:traffic\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+
+
+# <190>Oct 30 09:46:17 1,2012/10/30 09:46:17,01606001116,THREAT,url,1,2012/04/10 04:39:55,192.168.0.2,204.232.231.46,0.0.0.0,0.0.0.0,rule1,crusher,,web-browsing,vsys1,trust,untrust,ethernet1/2,ethernet1/1,forwardAll,2012/04/10 04:39:57,22860,1,59303,80,0,0,0x208000,tcp,alert,"litetopdetect.cn/index.php",(9999),not-resolved,informational,client-to-server,0,0x0,192.168.0.0-192.168.255.255,United States,0,text/html
+@flaky(max_runs=3, min_passes=2)
+def test_palo_alto_threat(record_property, setup_wordlist, setup_splunk):
+    host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} 1,{% now 'utc', '%Y/%m/%d %H:%M:%S' %},01606001116,THREAT,url,1,{% now 'utc', '%Y/%m/%d %H:%M:%S' %},192.168.0.2,204.232.231.46,0.0.0.0,0.0.0.0,rule1,crusher,,web-browsing,vsys1,trust,untrust,ethernet1/2,ethernet1/1,forwardAll,2012/04/10 04:39:57,22860,1,59303,80,0,0,0x208000,tcp,alert,\"litetopdetect.cn/index.php\",(9999),not-resolved,informational,client-to-server,0,0x0,192.168.0.0-192.168.255.255,United States,0,text/html\n")
+    message = mt.render(mark="<111>", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"pan:threat\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
diff --git a/tests/test_poc.py b/tests/test_poc.py
index 1a45e87..37dcdef 100644
--- a/tests/test_poc.py
+++ b/tests/test_poc.py
@@ -1,91 +1,17 @@
-#Copyright 2019 Splunk, Inc.
+# Copyright 2019 Splunk, Inc.
 #
-#Use of this source code is governed by a BSD-2-clause-style
-#license that can be found in the LICENSE-BSD2 file or at
-#https://opensource.org/licenses/BSD-2-Clause
+# Use of this source code is governed by a BSD-2-clause-style
+# license that can be found in the LICENSE-BSD2 file or at
+# https://opensource.org/licenses/BSD-2-Clause
 import random
-import socket
-import urllib.request
-from time import sleep
 
-import pytest
 from flaky import flaky
-import splunklib.client as client
 from jinja2 import Environment
 
-env = Environment(extensions=['jinja2_time.TimeExtension'])
-
-
-@pytest.fixture
-def setup_wordlist():
-    word_url = "http://svnweb.freebsd.org/csrg/share/dict/words?view=co&content-type=text/plain"
-    response = urllib.request.urlopen(word_url)
-    long_txt = response.read().decode()
-    return long_txt.splitlines()
-
-
-@pytest.fixture
-def setup_splunk():
-    tried = 0
-    while True:
-        try:
-            c = client.connect(username="admin", password="Changed@11", host="splunk", port="8089")
-            break
-        except ConnectionRefusedError:
-            tried += 1
-            if tried > 180:
-                raise
-            sleep(1)
-    return c
-
-
-def sendsingle(message):
-    sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
-    server_address = ('sc4s', 514)
-
-    tried = 0
-    while True:
-        try:
-            sock.connect(server_address)
-            break
-        except socket:
-            tried += 1
-            if tried > 90:
-                raise
-            sleep(1)
-    sock.sendall(str.encode(message))
-    sock.close()
-
-
-def splunk_single(service, search):
-    kwargs_normalsearch = {"exec_mode": "normal"}
-    tried = 0
-    while True:
-        job = service.jobs.create(search, **kwargs_normalsearch)
+from .sendmessage import *
+from .splunkutils import *
 
-        # A normal search returns the job's SID right away, so we need to poll for completion
-        while True:
-            while not job.is_ready():
-                pass
-            stats = {"isDone": job["isDone"],
-                     "doneProgress": float(job["doneProgress"]) * 100,
-                     "scanCount": int(job["scanCount"]),
-                     "eventCount": int(job["eventCount"]),
-                     "resultCount": int(job["resultCount"])}
-
-            if stats["isDone"] == "1":
-                break
-            sleep(2)
-
-        # Get the results and display them
-        resultCount = stats["resultCount"]
-        eventCount = stats["eventCount"]
-        if resultCount > 0 or tried > 15:
-            break
-        else:
-            tried += 1
-            sleep(1)
-    return resultCount, eventCount
+env = Environment(extensions=['jinja2_time.TimeExtension'])
 
 
 @flaky(max_runs=3, min_passes=2)
@@ -107,89 +33,3 @@ def test_defaultroute(record_property, setup_wordlist, setup_splunk):
     record_property("message", message)
 
     assert resultCount == 1
-
-#<190>Jan 28 01:28:35 PA-VM300-goran1 1,2014/01/28 01:28:35,007200001056,TRAFFIC,end,1,2014/01/28 01:28:34,192.168.41.30,192.168.41.255,10.193.16.193,192.168.41.255,allow-all,,,netbios-ns,vsys1,Trust,Untrust,ethernet1/1,ethernet1/2,To-Panorama,2014/01/28 01:28:34,8720,1,137,137,11637,137,0x400000,udp,allow,276,276,0,3,2014/01/28 01:28:02,2,any,0,2076326,0x0,192.168.0.0-192.168.255.255,192.168.0.0-192.168.255.255,0,3,0
-@flaky(max_runs=3, min_passes=2)
-def test_palo_alto_traffic(record_property, setup_wordlist, setup_splunk):
-    host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
-
-    mt = env.from_string("{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} 1,{% now 'utc', '%Y/%m/%d %H:%M:%S' %},007200001056,TRAFFIC,end,1,{% now 'utc', '%Y/%m/%d %H:%M:%S' %},192.168.41.30,192.168.41.255,10.193.16.193,192.168.41.255,allow-all,,,netbios-ns,vsys1,Trust,Untrust,ethernet1/1,ethernet1/2,To-Panorama,2014/01/28 01:28:34,8720,1,137,137,11637,137,0x400000,udp,allow,276,276,0,3,2014/01/28 01:28:02,2,any,0,2076326,0x0,192.168.0.0-192.168.255.255,192.168.0.0-192.168.255.255,0,3,0\n")
-    message = mt.render(mark="<111>", host=host)
-
-    sendsingle(message)
-
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"pan:traffic\" | head 2")
-    search = st.render(host=host)
-
-    resultCount, eventCount = splunk_single(setup_splunk, search)
-
-    record_property("host", host)
-    record_property("resultCount", resultCount)
-    record_property("message", message)
-
-    assert resultCount == 1
-
-#<190>Oct 30 09:46:17 1,2012/10/30 09:46:17,01606001116,THREAT,url,1,2012/04/10 04:39:55,192.168.0.2,204.232.231.46,0.0.0.0,0.0.0.0,rule1,crusher,,web-browsing,vsys1,trust,untrust,ethernet1/2,ethernet1/1,forwardAll,2012/04/10 04:39:57,22860,1,59303,80,0,0,0x208000,tcp,alert,"litetopdetect.cn/index.php",(9999),not-resolved,informational,client-to-server,0,0x0,192.168.0.0-192.168.255.255,United States,0,text/html
-@flaky(max_runs=3, min_passes=2)
-def test_palo_alto_threat(record_property, setup_wordlist, setup_splunk):
-    host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
-
-    mt = env.from_string("{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} 1,{% now 'utc', '%Y/%m/%d %H:%M:%S' %},01606001116,THREAT,url,1,{% now 'utc', '%Y/%m/%d %H:%M:%S' %},192.168.0.2,204.232.231.46,0.0.0.0,0.0.0.0,rule1,crusher,,web-browsing,vsys1,trust,untrust,ethernet1/2,ethernet1/1,forwardAll,2012/04/10 04:39:57,22860,1,59303,80,0,0,0x208000,tcp,alert,\"litetopdetect.cn/index.php\",(9999),not-resolved,informational,client-to-server,0,0x0,192.168.0.0-192.168.255.255,United States,0,text/html\n")
-    message = mt.render(mark="<111>", host=host)
-
-    sendsingle(message)
-
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"pan:threat\" | head 2")
-    search = st.render(host=host)
-
-    resultCount, eventCount = splunk_single(setup_splunk, search)
-
-    record_property("host", host)
-    record_property("resultCount", resultCount)
-    record_property("message", message)
-
-    assert resultCount == 1
-
-#Apr 15 2017 00:21:14 192.168.12.1 : %ASA-5-111010: User 'john', running 'CLI' from IP 0.0.0.0, executed 'dir disk0:/dap.xml'
-#Apr 15 2017 00:22:27 192.168.12.1 : %ASA-4-313005: No matching connection for ICMP error message: icmp src outside:81.24.28.226 dst inside:72.142.17.10 (type 3, code 0) on outside interface. Original IP payload: udp src 72.142.17.10/40998 dst 194.153.237.66/53.
-#Apr 15 2017 00:22:42 192.168.12.1 : %ASA-3-710003: TCP access denied by ACL from 179.236.133.160/8949 to outside:72.142.18.38/23
-@flaky(max_runs=3, min_passes=2)
-def test_cisco_asa_tradditional(record_property, setup_wordlist, setup_splunk):
-    host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
-
-    mt = env.from_string("{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} : %ASA-3-710003: TCP access denied by ACL from 179.236.133.160/3624 to outside:72.142.18.38/23\n")
-    message = mt.render(mark="<111>", host=host)
-
-    sendsingle(message)
-
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"cisco:asa\" | head 2")
-    search = st.render(host=host)
-
-    resultCount, eventCount = splunk_single(setup_splunk, search)
-
-    record_property("host", host)
-    record_property("resultCount", resultCount)
-    record_property("message", message)
-
-    assert resultCount == 1
-
-#<166>2018-06-27T12:17:46Z asa : %ASA-3-710003: TCP access denied by ACL from 179.236.133.160/8949 to outside:72.142.18.38/23
-def test_cisco_asa_rfc5424(record_property, setup_wordlist, setup_splunk):
-    host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
-
-    mt = env.from_string("{{ mark }} {% now 'utc', '%Y-%m-%dT%H:%M:%SZ' %} {{ host }} : %ASA-3-710003: TCP access denied by ACL from 179.236.133.160/5424 to outside:72.142.18.38/23\n")
-    message = mt.render(mark="<166>", host=host)
-
-    sendsingle(message)
-
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"cisco:asa\" | head 2")
-    search = st.render(host=host)
-
-    resultCount, eventCount = splunk_single(setup_splunk, search)
-
-    record_property("host", host)
-    record_property("resultCount", resultCount)
-    record_property("message", message)
-
-    assert resultCount == 1
-

From b2232c6c73f0b6f40526c65024b3f42935a63b5e Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <35384120+rfaircloth-splunk@users.noreply.github.com>
Date: Wed, 17 Jul 2019 12:04:59 -0400
Subject: [PATCH 34/83] Feature/add fortinet filter (#24)

* Add filter with tests for Fortinet Fortigate

* CI CD CLEANUP
---
 .circleci/config.yml                         |  10 +-
 .env.template                                |   2 +-
 docker-compose.yml                           |  30 +++---
 package/etc/conf.d/filters/fortinet_fgt.conf |  39 +++++++
 package/etc/context/splunk_index.csv         |   8 ++
 test-with-compose.sh                         |   2 +-
 tests/conftest.py                            |   2 +-
 tests/test_cisco_asa.py                      |   1 +
 tests/test_cisco_ios.py                      |   3 +-
 tests/test_fortinet_ngfw.py                  | 103 +++++++++++++++++++
 10 files changed, 174 insertions(+), 26 deletions(-)
 create mode 100644 package/etc/conf.d/filters/fortinet_fgt.conf
 create mode 100644 tests/test_fortinet_ngfw.py

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 4786b41..a811e2a 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -103,9 +103,7 @@ jobs:
       - run:
           name: Docker Compose build
           command: |
-            docker-compose build \
-              --build-arg  RH_ACTIVATION=$RH_ACTIVATION \
-              --build-arg  RH_ORG=$RH_ORG
+            docker-compose build
       - run:
           name: Docker Compose up
           command: docker-compose up  --abort-on-container-exit
@@ -136,10 +134,8 @@ jobs:
           pip install -r requirements.txt
           python clair_to_junit_parser.py "/clair-reports/$IMAGE_NAME:$CIRCLE_SHA1.json" --output test-results/results.xml
         when: on_fail
-#    - store_test_results:
-#        path: test-results/results.xml
-    - store_artifacts:
-        path: test-results
+    - store_test_results:
+        path: test-results/results.xml
     - store_artifacts:
         path: /clair-reports
 
diff --git a/.env.template b/.env.template
index 8950cae..5a9bda1 100644
--- a/.env.template
+++ b/.env.template
@@ -16,6 +16,6 @@ SPLUNK_HEC_STATSURL=https://splunk:8088/services/collector/event
 SPLUNK_CONNECT_METHOD=hec
 SPLUNK_DEFAULT_INDEX=main
 SPLUNK_METRICS_INDEX=metrics
-SPLUNK_APPS_URL=https://splunkbase.splunk.com/app/2757/release/6.1.1/download,https://splunkbase.splunk.com/app/3245/release/1.0/download,https://splunkbase.splunk.com/app/1620/release/3.4.0/download,https://splunkbase.splunk.com/app/1467/release/2.5.8/download
+SPLUNK_APPS_URL=https://splunkbase.splunk.com/app/2757/release/6.1.1/download,https://splunkbase.splunk.com/app/3245/release/1.0/download,https://splunkbase.splunk.com/app/1620/release/3.4.0/download,https://splunkbase.splunk.com/app/1467/release/2.5.8/download,https://splunkbase.splunk.com/app/2846/release/1.6.0/download
 SPLUNKBASE_USERNAME=username
 SPLUNKBASE_PASSWORD=password
diff --git a/docker-compose.yml b/docker-compose.yml
index 94a8320..f13c181 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -17,15 +17,15 @@ services:
       - sc4s-tests:/work/tests
       - sc4s-results:/work/test-results
     environment:
-      - SPLUNK_PASSWORD
+      - SPLUNK_PASSWORD=${SPLUNK_PASSWORD}
 
   sc4s:
     image: rfaircloth/scs:latest
     build:
       context: ./package
       args:
-        RH_ORG: $RH_ORG
-        RH_ACTIVATION: $RH_ACTIVATION
+        RH_ORG: ${RH_ORG}
+        RH_ACTIVATION: ${RH_ACTIVATION}
     hostname: sc4s
     ports:
       - "514"
@@ -38,12 +38,12 @@ services:
     links:
       - splunk
     environment:
-      - SPLUNK_HEC_URL
-      - SPLUNK_HEC_STATSURL
-      - SPLUNK_HEC_TOKEN
-      - SPLUNK_CONNECT_METHOD
-      - SPLUNK_DEFAULT_INDEX
-      - SPLUNK_METRICS_INDEX
+      - SPLUNK_HEC_URL=${SPLUNK_HEC_URL}
+      - SPLUNK_HEC_STATSURL=${SPLUNK_HEC_STATSURL}
+      - SPLUNK_HEC_TOKEN=${SPLUNK_HEC_TOKEN}
+      - SPLUNK_CONNECT_METHOD=${SPLUNK_CONNECT_METHOD}
+      - SPLUNK_DEFAULT_INDEX=${SPLUNK_DEFAULT_INDEX}
+      - SPLUNK_METRICS_INDEX=${SPLUNK_DEFAULT_INDEX}
 #    logging:
 #      driver: splunk
 #      options:
@@ -60,12 +60,12 @@ services:
       - "8088:8088"
       - "8089:8089"
     environment:
-      - SPLUNK_HEC_TOKEN
-      - SPLUNK_PASSWORD
-      - SPLUNK_START_ARGS
-      - SPLUNK_APPS_URL
-      - SPLUNKBASE_USERNAME
-      - SPLUNKBASE_PASSWORD
+      - SPLUNK_HEC_TOKEN=${SPLUNK_HEC_TOKEN}
+      - SPLUNK_PASSWORD=${SPLUNK_PASSWORD}
+      - SPLUNK_START_ARGS=${SPLUNK_START_ARGS}
+      - SPLUNK_APPS_URL=${SPLUNK_APPS_URL}
+      - SPLUNKBASE_USERNAME=${SPLUNKBASE_USERNAME}
+      - SPLUNKBASE_PASSWORD=${SPLUNKBASE_PASSWORD}
     volumes:
       - ./splunk/SA-syslog-ng:/opt/splunk/etc/apps/SA-syslog-ng
 #    logging:
diff --git a/package/etc/conf.d/filters/fortinet_fgt.conf b/package/etc/conf.d/filters/fortinet_fgt.conf
new file mode 100644
index 0000000..94678df
--- /dev/null
+++ b/package/etc/conf.d/filters/fortinet_fgt.conf
@@ -0,0 +1,39 @@
+
+log {
+    source(s_default-ports);
+
+    filter {tags("fgt_log")
+            or message('devid=\"?F[G|W|6K].+type=\"?(traffic|utm|event)')
+        ;};
+
+    # the message does not include a program value in the header unfortunatly
+    # the use of colon in the message tricks the RFC3164 parser we will re-write the message
+    # so the parser will not incorrectly break it apart.
+    # while we are at it we will save the message type into the program field so parser can find it
+    rewrite {
+        subst('([A-Za-z]+ \d\d \d\d:\d\d:\d\d [^ ]+)(.*devid=\"?F[G|W|6K].+type=\"?)(traffic|utm|event)(.*)', '$1 $3:$2$3$4', value("MESSAGE")  );
+    };
+    parser {
+        #basic parsing
+        syslog-parser(time-zone(`default-timezone`));
+    };
+
+    #set the source type based on program field and lookup index from the splunk context csv
+    if (program('traffic')) {
+        parser {p_add_context_splunk(key("fgt_traffic")); };
+    } elif (program('utm')) {
+        parser {p_add_context_splunk(key("fgt_utm")); };
+    } elif (program('event')) {
+        parser {p_add_context_splunk(key("fgt_event")); };
+    } else {
+        parser {p_add_context_splunk(key("fgt_log")); };
+    };
+
+    #rewrite the final message for splunk json
+    #sourcetype and index are set in the filter defaults won't be used
+    rewrite {r_set_splunk_basic(template("t_msg_only")) }; #--HEC--
+#    rewrite { r_set_splunk(template("t_JSON"))}; #--HEC--
+    destination(d_hec);  #--HEC--
+
+    flags(final);
+};
diff --git a/package/etc/context/splunk_index.csv b/package/etc/context/splunk_index.csv
index 75b98d6..eae8cf3 100644
--- a/package/etc/context/splunk_index.csv
+++ b/package/etc/context/splunk_index.csv
@@ -2,6 +2,14 @@ cisco:asa,index,main
 cisco:asa,sourcetype,cisco:asa
 cisco:ios,index,main
 cisco:ios,sourcetype,cisco:ios
+fgt_event,sourcetype,fgt_event
+fgt_event,index,main
+fgt_log,sourcetype,fgt_log
+fgt_log,index,main
+fgt_traffic,sourcetype,fgt_traffic
+fgt_traffic,index,main
+fgt_utm,sourcetype,fgt_utm
+fgt_utm,index,main
 pan:traffic,index,main
 pan:threat,index,main
 pan:system,index,main
diff --git a/test-with-compose.sh b/test-with-compose.sh
index 400c3c8..3f08cbf 100755
--- a/test-with-compose.sh
+++ b/test-with-compose.sh
@@ -16,7 +16,7 @@ docker container create --name dummy \
 docker cp tests/ dummy:/work/tests/
 docker rm dummy
 
-docker-compose build --build-arg  RH_ACTIVATION=$RH_ACTIVATION --build-arg  RH_ORG=$RH_ORG
+docker-compose build
 docker-compose up  --abort-on-container-exit --exit-code-from test
 
 docker container create --name dummy \
diff --git a/tests/conftest.py b/tests/conftest.py
index cc16563..ab4fd96 100644
--- a/tests/conftest.py
+++ b/tests/conftest.py
@@ -39,7 +39,7 @@ def setup_splunk():
             break
         except ConnectionRefusedError:
             tried += 1
-            if tried > 180:
+            if tried > 600:
                 raise
             sleep(1)
     return c
diff --git a/tests/test_cisco_asa.py b/tests/test_cisco_asa.py
index a908fc4..308356a 100644
--- a/tests/test_cisco_asa.py
+++ b/tests/test_cisco_asa.py
@@ -40,6 +40,7 @@ def test_cisco_asa_tradditional(record_property, setup_wordlist, setup_splunk):
 
 
 # <166>2018-06-27T12:17:46Z asa : %ASA-3-710003: TCP access denied by ACL from 179.236.133.160/8949 to outside:72.142.18.38/23
+@flaky(max_runs=3, min_passes=2)
 def test_cisco_asa_rfc5424(record_property, setup_wordlist, setup_splunk):
     host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
 
diff --git a/tests/test_cisco_ios.py b/tests/test_cisco_ios.py
index 19746af..f729df9 100644
--- a/tests/test_cisco_ios.py
+++ b/tests/test_cisco_ios.py
@@ -5,7 +5,7 @@
 # https://opensource.org/licenses/BSD-2-Clause
 
 from jinja2 import Environment
-from jinja2 import Environment
+from flaky import flaky
 
 from .sendmessage import *
 from .splunkutils import *
@@ -14,6 +14,7 @@
 
 
 # <190>30: foo: *Apr 29 13:58:46.411: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 192.168.1.239 stopped - CLI initiated
+@flaky(max_runs=3, min_passes=2)
 def test_cisco_ios(record_property, setup_wordlist, get_host_key, setup_splunk):
     host = get_host_key
 
diff --git a/tests/test_fortinet_ngfw.py b/tests/test_fortinet_ngfw.py
new file mode 100644
index 0000000..fe5873d
--- /dev/null
+++ b/tests/test_fortinet_ngfw.py
@@ -0,0 +1,103 @@
+# Copyright 2019 Splunk, Inc.
+#
+# Use of this source code is governed by a BSD-2-clause-style
+# license that can be found in the LICENSE-BSD2 file or at
+# https://opensource.org/licenses/BSD-2-Clause
+import random
+
+from flaky import flaky
+from jinja2 import Environment
+
+from .sendmessage import *
+from .splunkutils import *
+
+env = Environment(extensions=['jinja2_time.TimeExtension'])
+
+
+@flaky(max_runs=3, min_passes=2)
+#<111> Aug 17 00:00:00 fortigate date=2015-08-11 time=19:19:43 devname=Nosey devid=FG800C3912801080 logid=0004000017 type=traffic subtype=sniffer level=notice vd=root srcip=fe80::20c:29ff:fe77:20d4 srcintf="port3" dstip=ff02::1:ff77:20d4 dstintf="port3" sessionid=408903 proto=58 action=accept policyid=2 dstcountry="Reserved" srccountry="Reserved" trandisp=snat transip=:: transport=0 service="icmp6/131/0" duration=36 sentbyte=0 rcvdbyte=40 sentpkt=0 rcvdpkt=0 appid=16321 app="IPv6.ICMP" appcat="Network.Service" apprisk=elevated applist="sniffer-profile" appact=detected utmaction=allow countapp=1
+def test_fortinet_fgt_traffic(record_property, setup_wordlist, setup_splunk):
+    host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} date=2015-08-11 time=19:19:43 devname={{ host }} devid=FG800C3912801080 logid=0004000017 type=traffic subtype=sniffer level=notice vd=root srcip=fe80::20c:29ff:fe77:20d4 srcintf=\"port3\" dstip=ff02::1:ff77:20d4 dstintf=\"port3\" sessionid=408903 proto=58 action=accept policyid=2 dstcountry=\"Reserved\" srccountry=\"Reserved\" trandisp=snat transip=:: transport=0 service=\"icmp6/131/0\" duration=36 sentbyte=0 rcvdbyte=40 sentpkt=0 rcvdpkt=0 appid=16321 app=\"IPv6.ICMP\" appcat=\"Network.Service\" apprisk=elevated applist=\"sniffer-profile\" appact=detected utmaction=allow countapp=1\n")
+    message = mt.render(mark="<111>", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"fgt_traffic\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+
+@flaky(max_runs=3, min_passes=2)
+#<111> Aug 17 00:00:00 fortigate date=2015-08-11 time=19:19:43 devname=Nosey devid=FG800C3912801080 logid=0004000017 type=traffic subtype=sniffer level=notice vd=root srcip=fe80::20c:29ff:fe77:20d4 srcintf="port3" dstip=ff02::1:ff77:20d4 dstintf="port3" sessionid=408903 proto=58 action=accept policyid=2 dstcountry="Reserved" srccountry="Reserved" trandisp=snat transip=:: transport=0 service="icmp6/131/0" duration=36 sentbyte=0 rcvdbyte=40 sentpkt=0 rcvdpkt=0 appid=16321 app="IPv6.ICMP" appcat="Network.Service" apprisk=elevated applist="sniffer-profile" appact=detected utmaction=allow countapp=1
+def test_fortinet_fgt_event(record_property, setup_wordlist, setup_splunk):
+    host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} date=2015-08-11 time=19:19:43 devname={{ host }} devid=FG800C3912801080 logid=0004000017 type=traffic subtype=sniffer level=notice vd=root srcip=fe80::20c:29ff:fe77:20d4 srcintf=\"port3\" dstip=ff02::1:ff77:20d4 dstintf=\"port3\" sessionid=408903 proto=58 action=accept policyid=2 dstcountry=\"Reserved\" srccountry=\"Reserved\" trandisp=snat transip=:: transport=0 service=\"icmp6/131/0\" duration=36 sentbyte=0 rcvdbyte=40 sentpkt=0 rcvdpkt=0 appid=16321 app=\"IPv6.ICMP\" appcat=\"Network.Service\" apprisk=elevated applist=\"sniffer-profile\" appact=detected utmaction=allow countapp=1\n")
+    message = mt.render(mark="<111>", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"fgt_traffic\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+
+@flaky(max_runs=3, min_passes=2)
+#<111> Aug 17 00:00:00 fortigate date=2015-08-11 time=19:21:40 logver=52 devname=US-Corp_Main1 devid=FGT37D4613800138 logid=0317013312 type=utm subtype=webfilter eventtype=ftgd_allow level=notice vd=root sessionid=1490845588 user="" srcip=172.30.16.119 srcport=53235 srcintf="Internal" dstip=114.112.67.75 dstport=80 dstintf="External-SDC" proto=6 service=HTTP hostname="popo.wan.ijinshan.com" profile="scan" action=passthrough reqtype=direct url="/popo/launch?c=cHA9d29vZHMxOTgyQGhvdG1haWwuY29tJnV1aWQ9NDBiNDkyZDRmNzdhNjFmOTNlMjQwMjhiYjE3ZGRlYTYmY29tcGl" sentbyte=525 rcvdbyte=325 direction=outgoing msg="URL belongs to an allowed category in policy" method=domain cat=52 catdesc="Information Technology"
+def test_fortinet_fgt_utm(record_property, setup_wordlist, setup_splunk):
+    host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} date=2015-08-11 time=19:21:40 logver=52 devname=US-Corp_Main1 devid=FGT37D4613800138 logid=0317013312 type=utm subtype=webfilter eventtype=ftgd_allow level=notice vd=root sessionid=1490845588 user=\"\" srcip=172.30.16.119 srcport=53235 srcintf=\"Internal\" dstip=114.112.67.75 dstport=80 dstintf=\"External-SDC\" proto=6 service=HTTP hostname=\"popo.wan.ijinshan.com\" profile=\"scan\" action=passthrough reqtype=direct url=\"/popo/launch?c=cHA9d29vZHMxOTgyQGhvdG1haWwuY29tJnV1aWQ9NDBiNDkyZDRmNzdhNjFmOTNlMjQwMjhiYjE3ZGRlYTYmY29tcGl\" sentbyte=525 rcvdbyte=325 direction=outgoing msg=\"URL belongs to an allowed category in policy\" method=domain cat=52 catdesc=\"Information Technology\"\n")
+    message = mt.render(mark="<111>", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"fgt_utm\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+
+@flaky(max_runs=3, min_passes=2)
+#<111> Aug 17 00:00:00 fortigate date=2015-08-11 time=17:49:37 clusterid=FGHA001500704701_CID logver=52 devname=FGT-FortiToken1 devid=FGHA001500704701_CID logid=0100044547 type=event subtype=system level=information vd=root logdesc="Object attribute configured" user="charlihchen" ui="GUI(96.45.36.160)" action=Edit cfgtid=2760243 cfgpath="user.local" cfgobj="gzhang" cfgattr="fortitoken[FTKMOB5374362440->FTKMOB47ED6DD69D]" msg="Edit user.local gzhang"
+def test_fortinet_fgt_event(record_property, setup_wordlist, setup_splunk):
+    host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} date=2015-08-11 time=17:49:37 clusterid=FGHA001500704701_CID logver=52 devname=FGT-FortiToken1 devid=FGHA001500704701_CID logid=0100044547 type=event subtype=system level=information vd=root logdesc=\"Object attribute configured\" user=\"charlihchen\" ui=\"GUI(96.45.36.160)\" action=Edit cfgtid=2760243 cfgpath=\"user.local\" cfgobj=\"gzhang\" cfgattr=\"fortitoken[FTKMOB5374362440->FTKMOB47ED6DD69D]\" msg=\"Edit user.local gzhang\"\n")
+    message = mt.render(mark="<111>", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"fgt_event\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1

From 6301769dc32477de4d7538694010773a644d2c17 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <35384120+rfaircloth-splunk@users.noreply.github.com>
Date: Wed, 17 Jul 2019 12:05:23 -0400
Subject: [PATCH 35/83] Feature/gitignore (#26)

* Add filter with tests for Fortinet Fortigate

Fixes #23

* Update fortinet_fgt.conf

remove extra line

* Update config.yml

ci fix

* Update config.yml

update

* fix typo in build and update ci process

* Update docker-compose.yml

fix  app install typo

* Update conftest.py

extend time waiting for splunk start

* some tests not marked flaky

* Update .gitignore

Fixes #25
---
 .gitignore | 71 ++++++++++++++++++++++++++++++++++++++++++++++++++++--
 1 file changed, 69 insertions(+), 2 deletions(-)

diff --git a/.gitignore b/.gitignore
index d96805f..a63f961 100644
--- a/.gitignore
+++ b/.gitignore
@@ -303,9 +303,76 @@ tags
 # Persistent undo
 [._]*.un~
 
+# Covers JetBrains IDEs: IntelliJ, RubyMine, PhpStorm, AppCode, PyCharm, CLion, Android Studio and WebStorm
+# Reference: https://intellij-support.jetbrains.com/hc/en-us/articles/206544839
+
+# User-specific stuff
+.idea/**/workspace.xml
+.idea/**/tasks.xml
+.idea/**/usage.statistics.xml
+.idea/**/dictionaries
+.idea/**/shelf
+
+# Generated files
+.idea/**/contentModel.xml
+
+# Sensitive or high-churn files
+.idea/**/dataSources/
+.idea/**/dataSources.ids
+.idea/**/dataSources.local.xml
+.idea/**/sqlDataSources.xml
+.idea/**/dynamic.xml
+.idea/**/uiDesigner.xml
+.idea/**/dbnavigator.xml
+
+# Gradle
+.idea/**/gradle.xml
+.idea/**/libraries
+
+# Gradle and Maven with auto-import
+# When using Gradle or Maven with auto-import, you should exclude module files,
+# since they will be recreated, and may cause churn.  Uncomment if using
+# auto-import.
+# .idea/modules.xml
+# .idea/*.iml
+# .idea/modules
+# *.iml
+# *.ipr
+
+# CMake
+cmake-build-*/
+
+# Mongo Explorer plugin
+.idea/**/mongoSettings.xml
+
+# File-based project format
+*.iws
+
+# IntelliJ
+out/
+
+# mpeltonen/sbt-idea plugin
+.idea_modules/
+
+# JIRA plugin
+atlassian-ide-plugin.xml
+
+# Cursive Clojure plugin
+.idea/replstate.xml
+
+# Crashlytics plugin (for Android Studio and IntelliJ)
+com_crashlytics_export_strings.xml
+crashlytics.properties
+crashlytics-build.properties
+fabric.properties
+
+# Editor-based Rest Client
+.idea/httpRequests
+
+# Android studio 3.1+ serialized cache file
+.idea/caches/build_file_checksums.ser
+
 /test-results/
-/.idea/workspace.xml
-/.idea/tasks.xml
 !/package/scripts/switch_transport.sh
 !/package/scripts/splunkmetrics.sh
 !/package/scripts/

From 2ffdec5be26b09086c7476ecb644d0b1959ef007 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <35384120+rfaircloth-splunk@users.noreply.github.com>
Date: Thu, 18 Jul 2019 13:15:13 -0400
Subject: [PATCH 36/83] Update filter based on wire samples (#31)

* Add filter with tests for Fortinet Fortigate
---
 package/etc/conf.d/filters/fortinet_fgt.conf | 41 ++++++++++---------
 tests/test_fortinet_ngfw.py                  | 43 ++++----------------
 2 files changed, 30 insertions(+), 54 deletions(-)

diff --git a/package/etc/conf.d/filters/fortinet_fgt.conf b/package/etc/conf.d/filters/fortinet_fgt.conf
index 94678df..5a4afcf 100644
--- a/package/etc/conf.d/filters/fortinet_fgt.conf
+++ b/package/etc/conf.d/filters/fortinet_fgt.conf
@@ -1,38 +1,39 @@
-
 log {
     source(s_default-ports);
 
     filter {tags("fgt_log")
-            or message('devid=\"?F[G|W|6K].+type=\"?(traffic|utm|event)')
-        ;};
-
-    # the message does not include a program value in the header unfortunatly
-    # the use of colon in the message tricks the RFC3164 parser we will re-write the message
-    # so the parser will not incorrectly break it apart.
-    # while we are at it we will save the message type into the program field so parser can find it
-    rewrite {
-        subst('([A-Za-z]+ \d\d \d\d:\d\d:\d\d [^ ]+)(.*devid=\"?F[G|W|6K].+type=\"?)(traffic|utm|event)(.*)', '$1 $3:$2$3$4', value("MESSAGE")  );
+        or message('devid=\"?F[G|W|6K].+type=\"?(traffic|utm|event)');
     };
+
     parser {
-        #basic parsing
-        syslog-parser(time-zone(`default-timezone`));
+        kv-parser(prefix(".kv."));
+        date-parser(format("%Y-%m-%d:%H:%M:%S") template("${.kv.date}:${.kv.time}"));
     };
 
+    rewrite { set("${.kv.devname}", value("HOST")); };
+    rewrite { subst('<\d+>(.*)' "$1" value("MSG")); };
+
     #set the source type based on program field and lookup index from the splunk context csv
-    if (program('traffic')) {
-        parser {p_add_context_splunk(key("fgt_traffic")); };
-    } elif (program('utm')) {
-        parser {p_add_context_splunk(key("fgt_utm")); };
-    } elif (program('event')) {
-        parser {p_add_context_splunk(key("fgt_event")); };
+    if (match("traffic" value(".kv.type"))) {
+       parser {p_add_context_splunk(key("fgt_traffic")); };
+    } elif (match("utm" value(".kv.type"))) {
+       parser {p_add_context_splunk(key("fgt_utm")); };
+    } elif (match("event" value(".kv.type"))) {
+       parser {p_add_context_splunk(key("fgt_event")); };
     } else {
-        parser {p_add_context_splunk(key("fgt_log")); };
+       parser {p_add_context_splunk(key("fgt_log")); };
+    };
+
+    rewrite {
+        #drop the header
+        subst('date=[^ ]+ time=[^ ]+ devname=.+ (devid.*)', '$1', value("MESSAGE"));
+        #Strip empty fields because SEDCMD can't when we use event endpoint
+        subst('([^\= ]+=(?: |\"\"|-|\"-") ?)', '', value("MESSAGE"));
     };
 
     #rewrite the final message for splunk json
     #sourcetype and index are set in the filter defaults won't be used
     rewrite {r_set_splunk_basic(template("t_msg_only")) }; #--HEC--
-#    rewrite { r_set_splunk(template("t_JSON"))}; #--HEC--
     destination(d_hec);  #--HEC--
 
     flags(final);
diff --git a/tests/test_fortinet_ngfw.py b/tests/test_fortinet_ngfw.py
index fe5873d..e7f982d 100644
--- a/tests/test_fortinet_ngfw.py
+++ b/tests/test_fortinet_ngfw.py
@@ -13,19 +13,18 @@
 
 env = Environment(extensions=['jinja2_time.TimeExtension'])
 
-
 @flaky(max_runs=3, min_passes=2)
 #<111> Aug 17 00:00:00 fortigate date=2015-08-11 time=19:19:43 devname=Nosey devid=FG800C3912801080 logid=0004000017 type=traffic subtype=sniffer level=notice vd=root srcip=fe80::20c:29ff:fe77:20d4 srcintf="port3" dstip=ff02::1:ff77:20d4 dstintf="port3" sessionid=408903 proto=58 action=accept policyid=2 dstcountry="Reserved" srccountry="Reserved" trandisp=snat transip=:: transport=0 service="icmp6/131/0" duration=36 sentbyte=0 rcvdbyte=40 sentpkt=0 rcvdpkt=0 appid=16321 app="IPv6.ICMP" appcat="Network.Service" apprisk=elevated applist="sniffer-profile" appact=detected utmaction=allow countapp=1
-def test_fortinet_fgt_traffic(record_property, setup_wordlist, setup_splunk):
+def test_fortinet_fgt_event(record_property, setup_wordlist, setup_splunk):
     host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
 
     mt = env.from_string(
-        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} date=2015-08-11 time=19:19:43 devname={{ host }} devid=FG800C3912801080 logid=0004000017 type=traffic subtype=sniffer level=notice vd=root srcip=fe80::20c:29ff:fe77:20d4 srcintf=\"port3\" dstip=ff02::1:ff77:20d4 dstintf=\"port3\" sessionid=408903 proto=58 action=accept policyid=2 dstcountry=\"Reserved\" srccountry=\"Reserved\" trandisp=snat transip=:: transport=0 service=\"icmp6/131/0\" duration=36 sentbyte=0 rcvdbyte=40 sentpkt=0 rcvdpkt=0 appid=16321 app=\"IPv6.ICMP\" appcat=\"Network.Service\" apprisk=elevated applist=\"sniffer-profile\" appact=detected utmaction=allow countapp=1\n")
-    message = mt.render(mark="<111>", host=host)
+        "{{ mark }}date={% now 'utc', '%Y-%m-%d' %} time={% now 'utc', '%H:%M:%S' %} devname={{ host }} devid=FGT60D4614044725 logid=0100040704 type=event subtype=system level=notice vd=root logdesc=\"System performance statistics\" action=\"perf-stats\" cpu=2 mem=35 totalsession=61 disk=2 bandwidth=158/138 setuprate=2 disklograte=0 fazlograte=0 msg=\"Performance statistics: average CPU: 2, memory:  35, concurrent sessions:  61, setup-rate: 2\"\n")
+    message = mt.render(mark="<13>", host=host)
 
     sendsingle(message)
 
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"fgt_traffic\" | head 2")
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"fgt_event\" | head 2")
     search = st.render(host=host)
 
     resultCount, eventCount = splunk_single(setup_splunk, search)
@@ -38,13 +37,12 @@ def test_fortinet_fgt_traffic(record_property, setup_wordlist, setup_splunk):
 
 @flaky(max_runs=3, min_passes=2)
 #<111> Aug 17 00:00:00 fortigate date=2015-08-11 time=19:19:43 devname=Nosey devid=FG800C3912801080 logid=0004000017 type=traffic subtype=sniffer level=notice vd=root srcip=fe80::20c:29ff:fe77:20d4 srcintf="port3" dstip=ff02::1:ff77:20d4 dstintf="port3" sessionid=408903 proto=58 action=accept policyid=2 dstcountry="Reserved" srccountry="Reserved" trandisp=snat transip=:: transport=0 service="icmp6/131/0" duration=36 sentbyte=0 rcvdbyte=40 sentpkt=0 rcvdpkt=0 appid=16321 app="IPv6.ICMP" appcat="Network.Service" apprisk=elevated applist="sniffer-profile" appact=detected utmaction=allow countapp=1
-def test_fortinet_fgt_event(record_property, setup_wordlist, setup_splunk):
+def test_fortinet_fgt_traffic(record_property, setup_wordlist, setup_splunk):
     host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
 
     mt = env.from_string(
-        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} date=2015-08-11 time=19:19:43 devname={{ host }} devid=FG800C3912801080 logid=0004000017 type=traffic subtype=sniffer level=notice vd=root srcip=fe80::20c:29ff:fe77:20d4 srcintf=\"port3\" dstip=ff02::1:ff77:20d4 dstintf=\"port3\" sessionid=408903 proto=58 action=accept policyid=2 dstcountry=\"Reserved\" srccountry=\"Reserved\" trandisp=snat transip=:: transport=0 service=\"icmp6/131/0\" duration=36 sentbyte=0 rcvdbyte=40 sentpkt=0 rcvdpkt=0 appid=16321 app=\"IPv6.ICMP\" appcat=\"Network.Service\" apprisk=elevated applist=\"sniffer-profile\" appact=detected utmaction=allow countapp=1\n")
-    message = mt.render(mark="<111>", host=host)
-
+        "{{ mark }}date={% now 'utc', '%Y-%m-%d' %} time={% now 'utc', '%H:%M:%S' %} devname={{ host }} devid=FG800C3912801080 logid=0004000017 type=traffic subtype=sniffer level=notice vd=root srcip=fe80::20c:29ff:fe77:20d4 srcintf=\"port3\" dstip=ff02::1:ff77:20d4 dstintf=\"port3\" sessionid=408903 proto=58 action=accept policyid=2 dstcountry=\"Reserved\" srccountry=\"Reserved\" trandisp=snat transip=:: transport=0 service=\"icmp6/131/0\" duration=36 sentbyte=0 rcvdbyte=40 sentpkt=0 rcvdpkt=0 appid=16321 app=\"IPv6.ICMP\" appcat=\"Network.Service\" apprisk=elevated applist=\"sniffer-profile\" appact=detected utmaction=allow countapp=1\n")
+    message = mt.render(mark="<13>", host=host)
     sendsingle(message)
 
     st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"fgt_traffic\" | head 2")
@@ -64,9 +62,8 @@ def test_fortinet_fgt_utm(record_property, setup_wordlist, setup_splunk):
     host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
 
     mt = env.from_string(
-        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} date=2015-08-11 time=19:21:40 logver=52 devname=US-Corp_Main1 devid=FGT37D4613800138 logid=0317013312 type=utm subtype=webfilter eventtype=ftgd_allow level=notice vd=root sessionid=1490845588 user=\"\" srcip=172.30.16.119 srcport=53235 srcintf=\"Internal\" dstip=114.112.67.75 dstport=80 dstintf=\"External-SDC\" proto=6 service=HTTP hostname=\"popo.wan.ijinshan.com\" profile=\"scan\" action=passthrough reqtype=direct url=\"/popo/launch?c=cHA9d29vZHMxOTgyQGhvdG1haWwuY29tJnV1aWQ9NDBiNDkyZDRmNzdhNjFmOTNlMjQwMjhiYjE3ZGRlYTYmY29tcGl\" sentbyte=525 rcvdbyte=325 direction=outgoing msg=\"URL belongs to an allowed category in policy\" method=domain cat=52 catdesc=\"Information Technology\"\n")
-    message = mt.render(mark="<111>", host=host)
-
+        "{{ mark }}date={% now 'utc', '%Y-%m-%d' %} time={% now 'utc', '%H:%M:%S' %} devname={{ host }} devid=FGT37D4613800138 logid=0317013312 type=utm subtype=webfilter eventtype=ftgd_allow level=notice vd=root sessionid=1490845588 user=\"\" srcip=172.30.16.119 srcport=53235 srcintf=\"Internal\" dstip=114.112.67.75 dstport=80 dstintf=\"External-SDC\" proto=6 service=HTTP hostname=\"popo.wan.ijinshan.com\" profile=\"scan\" action=passthrough reqtype=direct url=\"/popo/launch?c=cHA9d29vZHMxOTgyQGhvdG1haWwuY29tJnV1aWQ9NDBiNDkyZDRmNzdhNjFmOTNlMjQwMjhiYjE3ZGRlYTYmY29tcGl\" sentbyte=525 rcvdbyte=325 direction=outgoing msg=\"URL belongs to an allowed category in policy\" method=domain cat=52 catdesc=\"Information Technology\"\n")
+    message = mt.render(mark="<13>", host=host)
     sendsingle(message)
 
     st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"fgt_utm\" | head 2")
@@ -79,25 +76,3 @@ def test_fortinet_fgt_utm(record_property, setup_wordlist, setup_splunk):
     record_property("message", message)
 
     assert resultCount == 1
-
-@flaky(max_runs=3, min_passes=2)
-#<111> Aug 17 00:00:00 fortigate date=2015-08-11 time=17:49:37 clusterid=FGHA001500704701_CID logver=52 devname=FGT-FortiToken1 devid=FGHA001500704701_CID logid=0100044547 type=event subtype=system level=information vd=root logdesc="Object attribute configured" user="charlihchen" ui="GUI(96.45.36.160)" action=Edit cfgtid=2760243 cfgpath="user.local" cfgobj="gzhang" cfgattr="fortitoken[FTKMOB5374362440->FTKMOB47ED6DD69D]" msg="Edit user.local gzhang"
-def test_fortinet_fgt_event(record_property, setup_wordlist, setup_splunk):
-    host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
-
-    mt = env.from_string(
-        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} date=2015-08-11 time=17:49:37 clusterid=FGHA001500704701_CID logver=52 devname=FGT-FortiToken1 devid=FGHA001500704701_CID logid=0100044547 type=event subtype=system level=information vd=root logdesc=\"Object attribute configured\" user=\"charlihchen\" ui=\"GUI(96.45.36.160)\" action=Edit cfgtid=2760243 cfgpath=\"user.local\" cfgobj=\"gzhang\" cfgattr=\"fortitoken[FTKMOB5374362440->FTKMOB47ED6DD69D]\" msg=\"Edit user.local gzhang\"\n")
-    message = mt.render(mark="<111>", host=host)
-
-    sendsingle(message)
-
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"fgt_event\" | head 2")
-    search = st.render(host=host)
-
-    resultCount, eventCount = splunk_single(setup_splunk, search)
-
-    record_property("host", host)
-    record_property("resultCount", resultCount)
-    record_property("message", message)
-
-    assert resultCount == 1

From 422071a93a92b49d289d0a5190452f600d787167 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <35384120+rfaircloth-splunk@users.noreply.github.com>
Date: Thu, 18 Jul 2019 15:28:08 -0400
Subject: [PATCH 37/83] Contributing and owners (#33)

repo only change
---
 .github/CODEOWNERS |   2 +
 CONTRIBUTING.md    | 100 +++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 102 insertions(+)
 create mode 100644 .github/CODEOWNERS
 create mode 100644 CONTRIBUTING.md

diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
new file mode 100644
index 0000000..ef960bb
--- /dev/null
+++ b/.github/CODEOWNERS
@@ -0,0 +1,2 @@
+* @rfaircloth-splunk
+package/etc/ @rfaircloth @mbonsack
\ No newline at end of file
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
new file mode 100644
index 0000000..335ef34
--- /dev/null
+++ b/CONTRIBUTING.md
@@ -0,0 +1,100 @@
+# Contributing
+
+### Past / Active(marked as *) Contributors
+rfaircloth*
+mbonsack*
+rfipro*
+Hurricane Labs*
+
+
+## Code of conduct
+
+###Contributor License Agreement
+
+At the moment, we can only accept pull requests submitted from either:
+* Splunk employees or
+* Individuals that have signed our contribution agreement
+
+If you wish to be a contributing member of our community, please see the agreement [for individuals](https://www.splunk.com/goto/individualcontributions) or [for organizations](https://www.splunk.com/goto/contributions).
+
+### Our Pledge
+
+In the interest of fostering an open and welcoming environment, we as
+contributors and maintainers pledge to making participation in our project and
+our community a harassment-free experience for everyone, regardless of age, body
+size, disability, ethnicity, gender identity and expression, level of experience,
+nationality, personal appearance, race, religion, or sexual identity and
+orientation.
+
+### Our Standards
+
+Examples of behavior that contributes to creating a positive environment
+include:
+
+* Using welcoming and inclusive language
+* Being respectful of differing viewpoints and experiences
+* Gracefully accepting constructive criticism
+* Focusing on what is best for the community
+* Showing empathy towards other community members
+
+Examples of unacceptable behavior by participants include:
+
+* The use of sexualized language or imagery and unwelcome sexual attention or
+advances
+* Trolling, insulting/derogatory comments, and personal or political attacks
+* Public or private harassment
+* Publishing others' private information, such as a physical or electronic
+  address, without explicit permission
+* Other conduct which could reasonably be considered inappropriate in a
+  professional setting
+
+
+### Our Responsibilities
+
+Project maintainers are responsible for clarifying the standards of acceptable
+behavior and are expected to take appropriate and fair corrective action in
+response to any instances of unacceptable behavior.
+
+Project maintainers have the right and responsibility to remove, edit, or
+reject comments, commits, code, wiki edits, issues, and other contributions
+that are not aligned to this Code of Conduct, or to ban temporarily or
+permanently any contributor for other behaviors that they deem inappropriate,
+threatening, offensive, or harmful.
+
+### Scope
+
+This Code of Conduct applies both within project spaces and in public spaces
+when an individual is representing the project or its community. Examples of
+representing a project or community include using an official project e-mail
+address, posting via an official social media account, or acting as an appointed
+representative at an online or offline event. Representation of a project may be
+further defined and clarified by project maintainers.
+
+### Enforcement
+
+Instances of abusive, harassing, or otherwise unacceptable behavior may be
+reported by contacting the project team at tonyl@splunk.com. All
+complaints will be reviewed and investigated and will result in a response that
+is deemed necessary and appropriate to the circumstances. The project team is
+obligated to maintain confidentiality with regard to the reporter of an incident.
+Further details of specific enforcement policies may be posted separately.
+
+Project maintainers who do not follow or enforce the Code of Conduct in good
+faith may face temporary or permanent repercussions as determined by other
+members of the project's leadership.
+
+### Attribution
+
+This Code of Conduct is adapted from the [Contributor Covenant][homepage], version 1.4,
+available at [http://contributor-covenant.org/version/1/4][version]
+
+[homepage]: http://contributor-covenant.org
+[version]: http://contributor-covenant.org/version/1/4/
+
+## Filing issues
+
+Use project issue tracker
+
+## Contributing code
+
+Future Docs
\ No newline at end of file

From 8d73e1d6e3f0916a627f6aec86034b56f89300ac Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <35384120+rfaircloth-splunk@users.noreply.github.com>
Date: Tue, 30 Jul 2019 15:32:36 -0400
Subject: [PATCH 38/83] Feature/perftest (#35)

This merge will restore broken metrics functionality
Define metrics using the a hierarchy syslogng.${SourceName} emulating Splunk Connect for Kafka
Configure persistant queuing
Define a new dest for metrics
Remove early metrics collection scripts
---
 .circleci/config.yml                          | 38 ++++++++-
 .gitignore                                    |  1 +
 .idea/vcs.xml                                 | 10 +++
 docker-compose-perf.yml                       | 77 +++++++++++++++++++
 package/Dockerfile                            |  5 +-
 .../conf.d/destinations/d_destinations.conf   | 42 ++++++++--
 .../filters/cisco_asa_tradditional.conf       |  2 +-
 package/etc/conf.d/filters/cisco_ios.conf     |  2 +-
 package/etc/conf.d/filters/fortinet_fgt.conf  |  2 +-
 .../etc/conf.d/filters/paloalto_networks.conf |  2 +-
 package/etc/context/splunk_index.csv          |  8 +-
 package/etc/syslog-ng.conf                    | 58 ++++++++++++--
 package/sbin/entrypoint.sh                    |  3 +-
 package/scripts/splunkmetrics.sh              | 37 ---------
 perftests/bundlesrv/Dockerfile                | 14 ++++
 perftests/bundlesrv/ngnix.conf                | 10 +++
 perftests/bundlesrv/scenarios/build.sh        |  8 ++
 .../scenarios/test1/default/eventgen.conf     | 14 ++++
 .../scenarios/test1/samples/ciscoasa.sample   |  1 +
 .../scenarios/test2/default/eventgen.conf     | 13 ++++
 .../scenarios/test2/samples/ciscoasa.sample   |  1 +
 tests/test_palo_alto.py                       |  2 +-
 22 files changed, 286 insertions(+), 64 deletions(-)
 create mode 100644 .idea/vcs.xml
 create mode 100644 docker-compose-perf.yml
 delete mode 100755 package/scripts/splunkmetrics.sh
 create mode 100644 perftests/bundlesrv/Dockerfile
 create mode 100644 perftests/bundlesrv/ngnix.conf
 create mode 100755 perftests/bundlesrv/scenarios/build.sh
 create mode 100644 perftests/bundlesrv/scenarios/test1/default/eventgen.conf
 create mode 100644 perftests/bundlesrv/scenarios/test1/samples/ciscoasa.sample
 create mode 100644 perftests/bundlesrv/scenarios/test2/default/eventgen.conf
 create mode 100644 perftests/bundlesrv/scenarios/test2/samples/ciscoasa.sample

diff --git a/.circleci/config.yml b/.circleci/config.yml
index a811e2a..1dedbc9 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -28,13 +28,48 @@ jobs:
           command: docker login -u $DOCKER_USER -p $DOCKER_PASS
       - run:
           name: Build Docker image
-          command: pushd package; docker build -f Dockerfile --build-arg RH_ORG=$RH_ORG --build-arg RH_ACTIVATION=$RH_ACTIVATION -t $IMAGE_NAME:build .
+          command: docker build -f package/Dockerfile --build-arg RH_ORG=$RH_ORG --build-arg RH_ACTIVATION=$RH_ACTIVATION -t $IMAGE_NAME:build package
       - run:
           name: Tag Docker image
           command: docker tag $IMAGE_NAME:build $IMAGE_NAME:$CIRCLE_SHA1
+      - run:
+          name: Tag Docker image
+          command: docker tag $IMAGE_NAME:build $IMAGE_NAME:edge
       - run:
           name: Push Docker image
           command: docker push $IMAGE_NAME:$CIRCLE_SHA1
+      - run:
+          name: Push Docker image
+          command: docker push $IMAGE_NAME:edge
+  build-egb:
+    environment:
+      IMAGE_NAME: rfaircloth/scs
+    docker:
+      - image: circleci/buildpack-deps:stretch
+    steps:
+      - checkout
+      - run: git submodule sync
+      - run: git submodule update --init --recursive
+      - setup_remote_docker:
+          docker_layer_caching: true
+      - run:
+          name: Docker Login
+          command: docker login -u $DOCKER_USER -p $DOCKER_PASS
+      - run:
+          name: Build Docker image
+          command: docker build -f perftests/bundlesrv/Dockerfile  -t $IMAGE_NAME:egb-build perftests/bundlesrv
+      - run:
+          name: Tag Docker image
+          command: docker tag $IMAGE_NAME:egb-build $IMAGE_NAME:egb-$CIRCLE_SHA1
+      - run:
+          name: Tag Docker image
+          command: docker tag $IMAGE_NAME:egb-build $IMAGE_NAME:egb-edge
+      - run:
+          name: Push Docker image
+          command: docker push $IMAGE_NAME:egb-$CIRCLE_SHA1
+      - run:
+          name: Push Docker image
+          command: docker push $IMAGE_NAME:egb-edge
   dgoss:
     environment:
       IMAGE_NAME: rfaircloth/scs
@@ -164,6 +199,7 @@ workflows:
   build-publish:
     jobs:
       - build
+      - build-egb
       - dgoss:
           requires:
             - build
diff --git a/.gitignore b/.gitignore
index a63f961..602ef23 100644
--- a/.gitignore
+++ b/.gitignore
@@ -376,3 +376,4 @@ fabric.properties
 !/package/scripts/switch_transport.sh
 !/package/scripts/splunkmetrics.sh
 !/package/scripts/
+.ecs
diff --git a/.idea/vcs.xml b/.idea/vcs.xml
new file mode 100644
index 0000000..6310177
--- /dev/null
+++ b/.idea/vcs.xml
@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="VcsDirectoryMappings">
+    <mapping directory="$PROJECT_DIR$" vcs="Git" />
+    <mapping directory="$PROJECT_DIR$/package/syslog-ng" vcs="Git" />
+    <mapping directory="$PROJECT_DIR$/package/syslog-ng/lib/ivykis" vcs="Git" />
+    <mapping directory="$PROJECT_DIR$/package/syslog-ng/lib/jsonc" vcs="Git" />
+    <mapping directory="$PROJECT_DIR$/perftests/eventgen" vcs="Git" />
+  </component>
+</project>
\ No newline at end of file
diff --git a/docker-compose-perf.yml b/docker-compose-perf.yml
new file mode 100644
index 0000000..67f3844
--- /dev/null
+++ b/docker-compose-perf.yml
@@ -0,0 +1,77 @@
+#Splunk Connect for Syslog (SC4S) by Splunk, Inc.
+#
+#To the extent possible under law, the person who associated CC0 with
+#Splunk Connect for Syslog (SC4S) has waived all copyright and related or neighboring rights
+#to Splunk Connect for Syslog (SC4S).
+#
+#You should have received a copy of the CC0 legalcode along with this
+#work.  If not, see <http://creativecommons.org/publicdomain/zero/1.0/>.
+version: "3"
+services:
+  sc4s:
+    image: rfaircloth/scs:edge
+    build:
+      context: ./package
+      args:
+        RH_ORG: ${RH_ORG}
+        RH_ACTIVATION: ${RH_ACTIVATION}
+    hostname: sc4s
+    ports:
+      - "514"
+      - "601"
+      - "514/udp"
+      - "5514"
+      - "5514/udp"
+    links:
+      - splunk
+    environment:
+      - SPLUNK_HEC_URL=${SPLUNK_HEC_URL}
+      - SPLUNK_HEC_STATSURL=${SPLUNK_HEC_STATSURL}
+      - SPLUNK_HEC_TOKEN=${SPLUNK_HEC_TOKEN}
+      - SPLUNK_CONNECT_METHOD=${SPLUNK_CONNECT_METHOD}
+      - SPLUNK_DEFAULT_INDEX=${SPLUNK_DEFAULT_INDEX}
+      - SPLUNK_METRICS_INDEX=${SPLUNK_DEFAULT_INDEX}
+#    logging:
+#      driver: splunk
+#      options:
+#        splunk-token: a778f63a-5dff-4e3c-a72c-a03183659e94
+#        splunk-url: https://splunk:8088/services/collector/event
+#        splunk-index: main
+#        splunk-insecureskipverify: true
+#        splunk-verify-connection: false
+  splunk:
+    image: splunk/splunk:latest
+    hostname: splunk
+    ports:
+      - "8000:8000"
+      - "8088:8088"
+      - "8089:8089"
+    environment:
+      - SPLUNK_HEC_TOKEN=${SPLUNK_HEC_TOKEN}
+      - SPLUNK_PASSWORD=${SPLUNK_PASSWORD}
+      - SPLUNK_START_ARGS=${SPLUNK_START_ARGS}
+      - SPLUNK_APPS_URL=${SPLUNK_APPS_URL}
+      - SPLUNKBASE_USERNAME=${SPLUNKBASE_USERNAME}
+      - SPLUNKBASE_PASSWORD=${SPLUNKBASE_PASSWORD}
+#    logging:
+#      driver: splunk
+#      options:
+#        splunk-token: a778f63a-5dff-4e3c-a72c-a03183659e94
+#        splunk-url: https://splunk:8088/services/collector/event
+#        splunk-index: main
+#        splunk-insecureskipverify: true
+#        splunk-verify-connection: false
+  egbundles:
+    image: rfaircloth/scs:egb-edge
+    hostname: egbundles
+    build:
+      context: perftests/bundlesrv
+  eventgen:
+    image: rfaircloth/eventgen:edge
+    command: standalone
+    ports:
+      - "9500:9500"
+    links:
+      - egbundles
+      - sc4s
+
diff --git a/package/Dockerfile b/package/Dockerfile
index 5ecc921..a72311f 100644
--- a/package/Dockerfile
+++ b/package/Dockerfile
@@ -76,21 +76,20 @@ RUN cd /tmp ;\
 
 ENV DEBCONF_NONINTERACTIVE_SEEN=true
 ENV SPLUNK_CONNECT_METHOD=hec
-ENV SYSLOGNG_HEC_WORKERS=3
+ENV SYSLOGNG_HEC_WORKERS=10
 
 RUN source scl_source enable rh-python36 ; curl -fsSL https://goss.rocks/install | GOSS_VER=v0.3.7 sh
 COPY goss.yaml /etc/goss.yaml
 
 COPY --from=0 /opt/syslog-ng /opt/syslog-ng
-COPY scripts/splunkmetrics.sh /opt/syslog-ng/sbin/splunkmetrics.sh
 COPY etc/syslog-ng.conf /opt/syslog-ng/etc/syslog-ng.conf
 COPY etc/conf.d /opt/syslog-ng/etc/conf.d
 COPY etc/context /opt/syslog-ng/etc/context
 COPY sbin/entrypoint.sh /sbin/entrypoint.sh
 
+RUN mkdir -p /opt/syslog-ng/var/data/disk-buffer
 RUN source scl_source enable rh-python36 ;/opt/syslog-ng/sbin/syslog-ng  -V
 RUN source scl_source enable rh-python36 ;/opt/syslog-ng/sbin/syslog-ng -t
-RUN mkdir -p /var/log/syslog-ng/data/disk-buffer
 
 EXPOSE 514
 EXPOSE 601/tcp
diff --git a/package/etc/conf.d/destinations/d_destinations.conf b/package/etc/conf.d/destinations/d_destinations.conf
index 1d373d4..4f03b5f 100644
--- a/package/etc/conf.d/destinations/d_destinations.conf
+++ b/package/etc/conf.d/destinations/d_destinations.conf
@@ -17,18 +17,18 @@ destination d_hec {
          method("POST")
          log-fifo-size(`splunk-log-fifo-size`)
          workers(`SYSLOGNG_HEC_WORKERS`)
-         batch-lines(1000)
+         batch-lines(500)
          batch-bytes(512Kb)
-         batch-timeout(1000)
-         timeout(5)
+         batch-timeout(3)
+         timeout(15)
          user_agent("syslog-ng User Agent")
          user("syslog-ng")
          password("`SPLUNK_HEC_TOKEN`")
-#        persist-name("t_standard")
-#         disk-buffer(mem-buf-length(5000)
-#                     disk-buf-size(107374182400)
-#                     reliable(no)
-#                     dir("/var/log/syslog-ng/data/disk-buffer"))
+         persist-name("splunk")
+         disk-buffer(mem-buf-length(500)
+                     disk-buf-size(20000)
+                     reliable(no)
+                     dir("/opt/syslog-ng/var/data/disk-buffer/"))
          tls(peer-verify(no)
 #            ca-dir("dir")
 #            ca-file("ca")
@@ -48,3 +48,29 @@ destination d_hec {
                  fields.*)')
         );
     };
+
+
+destination d_hecmetrics {
+    http(
+         url("`SPLUNK_HEC_URL`")
+         method("POST")
+         batch-lines(5)
+         batch-bytes(512Kb)
+         batch-timeout(1)
+         timeout(15)
+         user_agent("syslog-ng User Agent")
+         user("syslog-ng")
+         password("`SPLUNK_HEC_TOKEN`")
+         persist-name("splunk_metrics")
+         tls(peer-verify(no)
+#            ca-dir("dir")
+#            ca-file("ca")
+#            cert-file("cert")
+#            cipher-suite("cipher")
+#            key-file("key")
+#            peer-verify(yes|no)
+#            ssl-version(<the permitted SSL/TLS version>)
+            )
+         body('$MESSAGE')
+        );
+    };
diff --git a/package/etc/conf.d/filters/cisco_asa_tradditional.conf b/package/etc/conf.d/filters/cisco_asa_tradditional.conf
index a912baf..57d25ce 100644
--- a/package/etc/conf.d/filters/cisco_asa_tradditional.conf
+++ b/package/etc/conf.d/filters/cisco_asa_tradditional.conf
@@ -20,5 +20,5 @@ log {
 
     destination(d_hec);  #--HEC--
 
-    flags(final);
+    flags(flow-control,final);
 };
diff --git a/package/etc/conf.d/filters/cisco_ios.conf b/package/etc/conf.d/filters/cisco_ios.conf
index 98427f1..cac0bb7 100644
--- a/package/etc/conf.d/filters/cisco_ios.conf
+++ b/package/etc/conf.d/filters/cisco_ios.conf
@@ -12,5 +12,5 @@ log {
     rewrite { r_set_splunk_basic(template("t_msg_only"))}; #--HEC--
     destination(d_hec);  #--HEC--
 
-    flags(final);
+    flags(flow-control,final);
 };
diff --git a/package/etc/conf.d/filters/fortinet_fgt.conf b/package/etc/conf.d/filters/fortinet_fgt.conf
index 5a4afcf..f862fa9 100644
--- a/package/etc/conf.d/filters/fortinet_fgt.conf
+++ b/package/etc/conf.d/filters/fortinet_fgt.conf
@@ -36,5 +36,5 @@ log {
     rewrite {r_set_splunk_basic(template("t_msg_only")) }; #--HEC--
     destination(d_hec);  #--HEC--
 
-    flags(final);
+    flags(flow-control,final);
 };
diff --git a/package/etc/conf.d/filters/paloalto_networks.conf b/package/etc/conf.d/filters/paloalto_networks.conf
index 1ef160c..a3e1016 100644
--- a/package/etc/conf.d/filters/paloalto_networks.conf
+++ b/package/etc/conf.d/filters/paloalto_networks.conf
@@ -57,5 +57,5 @@ log {
 
     destination(d_hec);  #--HEC--
 
-    flags(final);
+    flags(flow-control,final);
 };
diff --git a/package/etc/context/splunk_index.csv b/package/etc/context/splunk_index.csv
index eae8cf3..efa7216 100644
--- a/package/etc/context/splunk_index.csv
+++ b/package/etc/context/splunk_index.csv
@@ -26,5 +26,9 @@ pan:hipwatch,sourcetype,pan:hipwatch
 pan:correlation,sourcetype,pan:correlation
 pan:userid,sourcetype,pan:userid
 pan:unknown,sourcetype,pan:unknown
-syslogng-fallback,index,syslogng-fallback
-syslogng-fallback,sourcetype,syslogng-fallback
+syslog-ng:events,index,main
+syslog-ng:events,sourcetype,syslog-ng:events
+syslog-ng:fallback,index,main
+syslog-ng:fallback,sourcetype,syslog-ng:fallback
+syslog-ng:metrics,index,em_metrics
+syslog-ng:metrics,sourcetype,httpevent
diff --git a/package/etc/syslog-ng.conf b/package/etc/syslog-ng.conf
index ab28af9..ba0768c 100644
--- a/package/etc/syslog-ng.conf
+++ b/package/etc/syslog-ng.conf
@@ -15,15 +15,21 @@
 
 options {
         log_msg_size (65536);
-        flush_lines (0);
+        flush_lines (100);
         time_reopen (10);
         log_fifo_size (10000);
         chain_hostnames (off);
         use_dns (no);
         use_fqdn (no);
-        dns-cache(no);
         create_dirs (no);
         keep-hostname (yes);
+        create_dirs(yes);
+        dir_perm(0750);
+        stats-freq(30);
+        stats-level(1);
+        stats-max-dynamics(2000);
+        normalize-hostnames(yes);
+        on-error(fallback-to-string);
 };
 
 # ===============================================================================================
@@ -54,10 +60,10 @@ options {
 # ===============================================================================================
 @define ip-version 4
 @define splunk-max-connections 1000
-@define splunk-log-fifo-size 10000
-@define splunk-fetch-limit 100
+@define splunk-log-fifo-size 180000000
+@define splunk-fetch-limit 20000
 # make sure splunk-window-size >= splunk-max-connections * splunk-fetch-limit
-@define splunk-window-size 100000
+@define splunk-window-size 20000000
 @define splunk-rcvbuf 425984
 @define default-timezone "GMT"
 
@@ -70,6 +76,45 @@ options {
 @include "conf.d/sources/*.conf"
 @include "conf.d/blocks/*.conf"
 @include "conf.d/destinations/*.conf"
+
+log {
+    source(s_internal);
+
+    if (match("^Log statistics; " value("MESSAGE"))) {
+
+        parser {p_add_context_splunk(key("syslog-ng:metrics")); };
+        rewrite {
+            subst('(?:Log statistics; )?(?<Type>[^= ]+)=\x27(?<SourceName>[^\(]+)\((?<SourceId>[^,\)]+)(?:,(?<SourceInstance>[^,]+),(?<State>[^\)]+))?\)\=(?<Number>\d+)\x27(?:, )?',
+                    '
+                    {"time": "$S_UNIXTIME.$S_MSEC",
+                      "event": "metric",
+                      "host": "$HOST",
+                      "index": "${.splunk.index}",
+                      "source": "internal",
+                      "sourcetype": "${.splunk.sourcetype}",
+                      "fields": {
+                         "source_name": "${SourceName}",
+                         "source_instance": "${SourceInstance}",
+                         "state": "${State}",
+                         "type": "${Type}",
+                         "_value": ${Number},
+                         "metric_name": "syslogng.${SourceId}"
+                       }
+                     }
+                     ',
+                     value("MESSAGE") flags("utf8" "global")
+                  );
+        };
+        destination(d_hecmetrics);  #--HEC--
+    } else {
+        parser {p_add_context_splunk(key("syslog-ng:events")); };
+        rewrite {r_set_splunk_basic(template("t_msg_only")) }; #--HEC--
+        destination(d_hec);  #--HEC--
+    };
+    flags(final);
+};
+
+
 @include "conf.d/prefilters/*.conf"
 @include "conf.d/filters/*.conf"
 
@@ -79,9 +124,10 @@ options {
 
 log {
     source(s_default-ports);
+    parser {p_add_context_splunk(key("syslog-ng:fallback")); };
     rewrite { r_set_splunk(template("t_JSON"))}; #--HEC--
     destination(d_hec);  #--HEC--
-    flags(fallback);
+    flags(flow-control,fallback);
 };
 
 
diff --git a/package/sbin/entrypoint.sh b/package/sbin/entrypoint.sh
index 3578897..5d37dd1 100755
--- a/package/sbin/entrypoint.sh
+++ b/package/sbin/entrypoint.sh
@@ -7,5 +7,4 @@
 #Run syslog
 mkdir /opt/syslog-ng/var
 rm /opt/syslog-ng/var/syslog-ng.ctl || true
-/opt/syslog-ng/sbin/syslog-ng --process-mode=background
-/opt/syslog-ng/sbin/splunkmetrics.sh 
+/opt/syslog-ng/sbin/syslog-ng -F
diff --git a/package/scripts/splunkmetrics.sh b/package/scripts/splunkmetrics.sh
deleted file mode 100755
index 7a497eb..0000000
--- a/package/scripts/splunkmetrics.sh
+++ /dev/null
@@ -1,37 +0,0 @@
-#!/bin/bash
-#Copyright 2019 Splunk, Inc.
-#
-#Use of this source code is governed by a BSD-2-clause-style
-#license that can be found in the LICENSE-BSD2 file or at
-#https://opensource.org/licenses/BSD-2-Clause
-sleep 30
-while sleep 10
-do
-  TS=$(date +"%s")
-  tmpfilecsv=$(mktemp /tmp/syslog-ng-stats-XXXXXXX-csv)
-  tmpfilejson=$(mktemp /tmp/syslog-ng-stats-XXXXXXX-json)
-  /opt/syslog-ng/sbin/syslog-ng-ctl query get "*" --reset | tail -n +2 | grep \^. | grep -v "^The selected counters" >$tmpfilecsv
-  IFS=';'
-  while read -r SourceName SourceId SourceInstance State Type Number
-  do
-     echo	"{
-     \"time\":\"$TS\",
-     \"event\":\"metric\",
-     \"source\":\"syslog-ng\",
-     \"host\":\"$HOSTNAME\",
-     \"index\":\"$SPLUNK_METRICS_INDEX\",
-     \"fields\":{
-        \"SourceId\":\"$SourceId\",
-        \"SourceInstance\":\"$SourceInstance\",
-        \"State\":\"$State\",
-        \"Type\":\"$Type\",
-        \"_value\":$Number,
-        \"metric_name\":\"$SourceName\"
-     }
-  } ">>$tmpfilejson
-  done < $tmpfilecsv
-
-  curl -s -S -k $SPLUNK_HEC_STATSURL -H "Authorization: Splunk $SPLUNK_HEC_TOKEN" -d "@$tmpfilejson"
-  rm $tmpfilejson
-  rm $tmpfilecsv
-done
diff --git a/perftests/bundlesrv/Dockerfile b/perftests/bundlesrv/Dockerfile
new file mode 100644
index 0000000..e5ed403
--- /dev/null
+++ b/perftests/bundlesrv/Dockerfile
@@ -0,0 +1,14 @@
+FROM registry.access.redhat.com/ubi7/ubi as build
+
+COPY scenarios /scenarios
+
+RUN yum install zip -y
+
+RUN mkdir /bundles
+
+RUN cd /scenarios;./build.sh;cp *.zip /bundles
+
+FROM nginx:stable
+
+COPY ./ngnix.conf /etc/nginx/conf.d/default.conf
+COPY --from=build /bundles/ /var/www
diff --git a/perftests/bundlesrv/ngnix.conf b/perftests/bundlesrv/ngnix.conf
new file mode 100644
index 0000000..f0c3ae0
--- /dev/null
+++ b/perftests/bundlesrv/ngnix.conf
@@ -0,0 +1,10 @@
+server {
+    listen 80;
+
+    root /var/www/;
+    autoindex on;
+    # Force all paths to load either itself (js files) or go through index.html.
+    location / {
+        try_files $uri /index.html;
+    }
+}
\ No newline at end of file
diff --git a/perftests/bundlesrv/scenarios/build.sh b/perftests/bundlesrv/scenarios/build.sh
new file mode 100755
index 0000000..8d151e8
--- /dev/null
+++ b/perftests/bundlesrv/scenarios/build.sh
@@ -0,0 +1,8 @@
+  #!/bin/bash
+
+  IFS=$'\n'
+
+  for f in $(find . -mindepth 1 -maxdepth 1 -type d ); do
+    zip -x .* -x dist -r "$f" "$f/"
+  done
+
diff --git a/perftests/bundlesrv/scenarios/test1/default/eventgen.conf b/perftests/bundlesrv/scenarios/test1/default/eventgen.conf
new file mode 100644
index 0000000..6fb3cb7
--- /dev/null
+++ b/perftests/bundlesrv/scenarios/test1/default/eventgen.conf
@@ -0,0 +1,14 @@
+[ciscoasa.sample]
+sampleDir = samples
+sampletype = raw
+outputMode = tcpout
+tcpDestinationHost = sc4s
+tcpDestinationPort = 514
+end = 10
+mode = sample
+interval = 1
+count = 100
+#2018-06-27T12:17:46
+token.0.token = \d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ
+token.0.replacementType = timestamp
+token.0.replacement = %Y-%m-%dT%H:%M:%SZ
diff --git a/perftests/bundlesrv/scenarios/test1/samples/ciscoasa.sample b/perftests/bundlesrv/scenarios/test1/samples/ciscoasa.sample
new file mode 100644
index 0000000..cd37166
--- /dev/null
+++ b/perftests/bundlesrv/scenarios/test1/samples/ciscoasa.sample
@@ -0,0 +1 @@
+<166>2018-06-27T12:17:46Z asa : %ASA-3-710003: TCP access denied by ACL from 179.236.133.160/8949 to outside:72.142.18.38/23
\ No newline at end of file
diff --git a/perftests/bundlesrv/scenarios/test2/default/eventgen.conf b/perftests/bundlesrv/scenarios/test2/default/eventgen.conf
new file mode 100644
index 0000000..98872e2
--- /dev/null
+++ b/perftests/bundlesrv/scenarios/test2/default/eventgen.conf
@@ -0,0 +1,13 @@
+[ciscoasa.sample]
+sampleDir = samples
+sampletype = raw
+outputMode = tcpout
+tcpDestinationHost = sc4s
+tcpDestinationPort = 514
+end = 300
+mode = sample
+interval = 1
+#2018-06-27T12:17:46
+token.0.token = \d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ
+token.0.replacementType = timestamp
+token.0.replacement = %Y-%m-%dT%H:%M:%SZ
diff --git a/perftests/bundlesrv/scenarios/test2/samples/ciscoasa.sample b/perftests/bundlesrv/scenarios/test2/samples/ciscoasa.sample
new file mode 100644
index 0000000..cd37166
--- /dev/null
+++ b/perftests/bundlesrv/scenarios/test2/samples/ciscoasa.sample
@@ -0,0 +1 @@
+<166>2018-06-27T12:17:46Z asa : %ASA-3-710003: TCP access denied by ACL from 179.236.133.160/8949 to outside:72.142.18.38/23
\ No newline at end of file
diff --git a/tests/test_palo_alto.py b/tests/test_palo_alto.py
index ec8744e..5a601f0 100644
--- a/tests/test_palo_alto.py
+++ b/tests/test_palo_alto.py
@@ -14,7 +14,7 @@
 env = Environment(extensions=['jinja2_time.TimeExtension'])
 
 
-# <190>Jan 28 01:28:35 PA-VM300-goran1 1,2014/01/28 01:28:35,007200001056,TRAFFIC,end,1,2014/01/28 01:28:34,192.168.41.30,192.168.41.255,10.193.16.193,192.168.41.255,allow-all,,,netbios-ns,vsys1,Trust,Untrust,ethernet1/1,ethernet1/2,To-Panorama,2014/01/28 01:28:34,8720,1,137,137,11637,137,0x400000,udp,allow,276,276,0,3,2014/01/28 01:28:02,2,any,0,2076326,0x0,192.168.0.0-192.168.255.255,192.168.0.0-192.168.255.255,0,3,0
+#<190>Jan 28 01:28:35 PA-VM300-goran1 1,2014/01/28 01:28:35,007200001056,TRAFFIC,end,1,2014/01/28 01:28:34,192.168.41.30,192.168.41.255,10.193.16.193,192.168.41.255,allow-all,,,netbios-ns,vsys1,Trust,Untrust,ethernet1/1,ethernet1/2,To-Panorama,2014/01/28 01:28:34,8720,1,137,137,11637,137,0x400000,udp,allow,276,276,0,3,2014/01/28 01:28:02,2,any,0,2076326,0x0,192.168.0.0-192.168.255.255,192.168.0.0-192.168.255.255,0,3,0
 @flaky(max_runs=3, min_passes=2)
 def test_palo_alto_traffic(record_property, setup_wordlist, setup_splunk):
     host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))

From 148065628cc9057c586260771b8034aac4f104ec Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Tue, 30 Jul 2019 15:51:03 -0400
Subject: [PATCH 39/83] Update syslog-ng.conf

---
 package/etc/syslog-ng.conf | 10 ----------
 1 file changed, 10 deletions(-)

diff --git a/package/etc/syslog-ng.conf b/package/etc/syslog-ng.conf
index a86a78d..565b79e 100644
--- a/package/etc/syslog-ng.conf
+++ b/package/etc/syslog-ng.conf
@@ -21,10 +21,7 @@ options {
         chain_hostnames (off);
         use_dns (no);
         use_fqdn (no);
-<<<<<<< HEAD
-=======
         dns-cache(no);
->>>>>>> master
         create_dirs (no);
         keep-hostname (yes);
         create_dirs(yes);
@@ -64,17 +61,10 @@ options {
 # ===============================================================================================
 @define ip-version 4
 @define splunk-max-connections 1000
-<<<<<<< HEAD
 @define splunk-log-fifo-size 180000000
 @define splunk-fetch-limit 20000
 # make sure splunk-window-size >= splunk-max-connections * splunk-fetch-limit
 @define splunk-window-size 20000000
-=======
-@define splunk-log-fifo-size 10000
-@define splunk-fetch-limit 100
-# make sure splunk-window-size >= splunk-max-connections * splunk-fetch-limit
-@define splunk-window-size 100000
->>>>>>> master
 @define splunk-rcvbuf 425984
 @define default-timezone "GMT"
 

From b6b0b05b106cc1806933674ea0ae81f3da1b50b2 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <rfaircloth@splunk.com>
Date: Tue, 30 Jul 2019 15:52:25 -0400
Subject: [PATCH 40/83] Update splunk_index.csv

---
 package/etc/context/splunk_index.csv | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/package/etc/context/splunk_index.csv b/package/etc/context/splunk_index.csv
index 4446970..97cf982 100644
--- a/package/etc/context/splunk_index.csv
+++ b/package/etc/context/splunk_index.csv
@@ -2,7 +2,6 @@ cisco:asa,index,main
 cisco:asa,sourcetype,cisco:asa
 cisco:ios,index,main
 cisco:ios,sourcetype,cisco:ios
-<<<<<<< HEAD
 fgt_event,sourcetype,fgt_event
 fgt_event,index,main
 fgt_log,sourcetype,fgt_log
@@ -11,8 +10,6 @@ fgt_traffic,sourcetype,fgt_traffic
 fgt_traffic,index,main
 fgt_utm,sourcetype,fgt_utm
 fgt_utm,index,main
-=======
->>>>>>> master
 pan:traffic,index,main
 pan:threat,index,main
 pan:system,index,main

From f4726083f315526b64c655fd742a2fca73ceae98 Mon Sep 17 00:00:00 2001
From: mbonsack <mbonsack@splunk.com>
Date: Tue, 6 Aug 2019 09:32:41 -0700
Subject: [PATCH 41/83] Filter for Juniper devices (#37)

Also changed:
1.  default standard template to include $MSGHDR
2.  Added template for RFC5424 structured data
3. Added fallback template in hec destination
---
 .env.template                                 |   2 +-
 .idea/misc.xml                                |   4 +-
 .idea/splunk-connect-for-syslog.iml           |   2 +-
 package/etc/conf.d/blocks/b_parsers.conf      |  12 +-
 .../conf.d/destinations/d_destinations.conf   |   2 +-
 package/etc/conf.d/filters/juniper_junos.conf |  65 +++++
 package/etc/conf.d/templates/t_templates.conf |  10 +-
 package/etc/context/splunk_index.csv          |  24 ++
 tests/test_juniper.py                         | 276 ++++++++++++++++++
 9 files changed, 385 insertions(+), 12 deletions(-)
 create mode 100644 package/etc/conf.d/filters/juniper_junos.conf
 create mode 100644 tests/test_juniper.py

diff --git a/.env.template b/.env.template
index 5a9bda1..58e599a 100644
--- a/.env.template
+++ b/.env.template
@@ -16,6 +16,6 @@ SPLUNK_HEC_STATSURL=https://splunk:8088/services/collector/event
 SPLUNK_CONNECT_METHOD=hec
 SPLUNK_DEFAULT_INDEX=main
 SPLUNK_METRICS_INDEX=metrics
-SPLUNK_APPS_URL=https://splunkbase.splunk.com/app/2757/release/6.1.1/download,https://splunkbase.splunk.com/app/3245/release/1.0/download,https://splunkbase.splunk.com/app/1620/release/3.4.0/download,https://splunkbase.splunk.com/app/1467/release/2.5.8/download,https://splunkbase.splunk.com/app/2846/release/1.6.0/download
+SPLUNK_APPS_URL=https://splunkbase.splunk.com/app/2757/release/6.1.1/download,https://splunkbase.splunk.com/app/3245/release/1.0/download,https://splunkbase.splunk.com/app/1620/release/3.4.0/download,https://splunkbase.splunk.com/app/1467/release/2.5.8/download,https://splunkbase.splunk.com/app/2846/release/1.6.0/download,https://splunkbase.splunk.com/app/2847/release/1.2.0/download
 SPLUNKBASE_USERNAME=username
 SPLUNKBASE_PASSWORD=password
diff --git a/.idea/misc.xml b/.idea/misc.xml
index 86b631d..7e25d8b 100644
--- a/.idea/misc.xml
+++ b/.idea/misc.xml
@@ -3,8 +3,8 @@
   <component name="JavaScriptSettings">
     <option name="languageLevel" value="ES6" />
   </component>
-  <component name="ProjectRootManager" version="2" project-jdk-name="Remote Python 3.7.3 Docker Compose (test at [/Users/rfaircloth/Documents/GitHub/splunk-connect-for-syslog/docker-compose.yml])" project-jdk-type="Python SDK" />
+  <component name="ProjectRootManager" version="2" project-jdk-name="Remote Python 3.7.4 Docker Compose (test at [/Users/mbonsack/Splunk/SE_Tools/syslog/SC4S/splunk-connect-for-syslog/docker-compose.yml])" project-jdk-type="Python SDK" />
   <component name="PythonCompatibilityInspectionAdvertiser">
     <option name="version" value="3" />
   </component>
-</project>
+</project>
\ No newline at end of file
diff --git a/.idea/splunk-connect-for-syslog.iml b/.idea/splunk-connect-for-syslog.iml
index 0ecbb61..14d7789 100644
--- a/.idea/splunk-connect-for-syslog.iml
+++ b/.idea/splunk-connect-for-syslog.iml
@@ -2,7 +2,7 @@
 <module type="PYTHON_MODULE" version="4">
   <component name="NewModuleRootManager">
     <content url="file://$MODULE_DIR$" />
-    <orderEntry type="jdk" jdkName="Remote Python 3.7.3 Docker Compose (test at [/Users/rfaircloth/Documents/GitHub/splunk-connect-for-syslog/docker-compose.yml])" jdkType="Python SDK" />
+    <orderEntry type="jdk" jdkName="Remote Python 3.7.4 Docker Compose (test at [/Users/mbonsack/Splunk/SE_Tools/syslog/SC4S/splunk-connect-for-syslog/docker-compose.yml])" jdkType="Python SDK" />
     <orderEntry type="sourceFolder" forTests="false" />
   </component>
   <component name="TemplatesService">
diff --git a/package/etc/conf.d/blocks/b_parsers.conf b/package/etc/conf.d/blocks/b_parsers.conf
index 407ea8a..8aae8e9 100644
--- a/package/etc/conf.d/blocks/b_parsers.conf
+++ b/package/etc/conf.d/blocks/b_parsers.conf
@@ -47,9 +47,9 @@ block rewrite r_set_splunk(sourcetype(`splunk-sourcetype`)
       set("`vendor`", value(".splunk.vendor"));
       set("`category`", value(".splunk.category"));
       set("`filename`", value(".splunk.filename"));
-      set($FACILITY, value("fields.facility"));
-      set($LEVEL, value("fields.severity"));
-      set($LOGHOST, value("fields.syslog-server"));
+      set($FACILITY, value("fields.syslog_facility"));
+      set($LEVEL, value("fields.syslog_severity"));
+      set($LOGHOST, value("fields.syslog_server"));
   };
 
 #Used when for normal filters index and sourcetype must be set in a prior re-write or context
@@ -63,7 +63,7 @@ block rewrite r_set_splunk_basic(
       set("`vendor`", value(".splunk.vendor"));
       set("`category`", value(".splunk.category"));
       set("`filename`", value(".splunk.filename"));
-      set($FACILITY, value("fields.facility"));
-      set($LEVEL, value("fields.severity"));
-      set($LOGHOST, value("fields.syslog-server"));
+      set($FACILITY, value("fields.syslog_facility"));
+      set($LEVEL, value("fields.syslog_severity"));
+      set($LOGHOST, value("fields.syslog_server"));
   };
diff --git a/package/etc/conf.d/destinations/d_destinations.conf b/package/etc/conf.d/destinations/d_destinations.conf
index 6d4f9d4..3f08461 100644
--- a/package/etc/conf.d/destinations/d_destinations.conf
+++ b/package/etc/conf.d/destinations/d_destinations.conf
@@ -44,7 +44,7 @@ destination d_hec {
                  source=${HOST_FROM}
                  sourcetype=${.splunk.sourcetype}
                  index=${.splunk.index}
-                 event=$(template ${.splunk.template})
+                 event=$(template ${.splunk.template} $(template `splunk-default-template`))
                  fields.*)')
         );
     };
diff --git a/package/etc/conf.d/filters/juniper_junos.conf b/package/etc/conf.d/filters/juniper_junos.conf
new file mode 100644
index 0000000..3a205e4
--- /dev/null
+++ b/package/etc/conf.d/filters/juniper_junos.conf
@@ -0,0 +1,65 @@
+# ===============================================================================================
+# Juniper Standard and Structured logging
+# ===============================================================================================
+
+log {
+
+    source(s_default-ports);
+
+# For newer (structured) format; RFC 5424 compliant.  The existing TA will not work for this format; these filters
+# are included for future TA development.  The exception is NSM IDP, for which we're awaiting a data
+# sample to confirm that it follows the RFC 5424 format.
+# If it is determined that NSM IDP ("syslog@juniper.net") messages are indeed 3164 format, remove the check for
+# the "syslog@juniper.net" message below.  It will then be caught by the standard section following.
+
+junction {
+    channel {
+        filter { tags("juniper_structured") or message('junos@2636') or message('syslog@juniper.net'); };
+        parser { syslog-parser(flags(syslog-protocol)); };
+        if (tags("juniper_JunOS_IDP") or program('RT_IDP')) {
+            parser {p_add_context_splunk(key("juniper:junos:idp:structured")); };
+            } elif (tags("juniper_JunOS_Firewall") or program('RT_FLOW|RT_IDS|RT_UTM')) {
+            parser {p_add_context_splunk(key("juniper:junos:firewall:structured")); };
+            }
+            elif (tags("juniper_idp") or program('Jnpr')) {
+            parser {p_add_context_splunk(key("juniper:idp:structured")); };
+            }
+            else {
+            parser {p_add_context_splunk(key("juniper:structured")); };
+            };
+        rewrite { r_set_splunk_basic(template("t_hdr_sdata_msg"))};
+        destination(d_hec);  #--HEC--
+        flags(final);
+        };
+
+# For legacy "standard" format.  The existing Juniper TA will work for these data sources.
+# Remove the message filter below when tag support is implemented.
+
+    channel {
+        filter { tags("juniper_standard") or message('RT_IDP:|RT_FLOW:|RT_IDS:|RT_UTM:|Juniper:|traffic\,\s+traffic\s+log|syslog@juniper.net|predefined\,\s+|NetScreen\s+device_id\=') };
+#        filter { tags("juniper_standard") };
+        parser { syslog-parser(time-zone(`default-timezone`)); };
+        if (program('RT_IDP')) {
+            parser {p_add_context_splunk(key("juniper:junos:idp")); };
+            } elif (program('RT_FLOW|RT_IDS|RT_UTM')) {
+            parser {p_add_context_splunk(key("juniper:junos:firewall")); };
+            } elif (program('Juniper')) {
+            parser {p_add_context_splunk(key("juniper:sslvpn")); };
+            } elif (message('traffic\,\s+traffic\s+log')) {
+            parser {p_add_context_splunk(key("juniper:nsm")); };
+            } elif (message('syslog@juniper.net')) {
+            parser {p_add_context_splunk(key("juniper:idp")); };
+            } elif (message('predefined\,\s+')) {
+            parser {p_add_context_splunk(key("juniper:nsm:idp")); };
+            } elif (message('NetScreen\s+device_id\=')) {
+            parser {p_add_context_splunk(key("juniper:netscreen")); };
+            }
+            else {
+            parser {p_add_context_splunk(key("juniper:legacy")); };
+            };
+        rewrite { r_set_splunk_basic(template("t_standard")) };
+        destination(d_hec);  #--HEC--
+        flags(final);
+        };
+    };
+};
diff --git a/package/etc/conf.d/templates/t_templates.conf b/package/etc/conf.d/templates/t_templates.conf
index 825a705..0190f1f 100644
--- a/package/etc/conf.d/templates/t_templates.conf
+++ b/package/etc/conf.d/templates/t_templates.conf
@@ -8,7 +8,7 @@
 # ===============================================================================================
 
 template t_standard {
-        template("${ISODATE} ${HOST} ${MESSAGE}");
+        template("${DATE} ${HOST} ${MSGHDR}${MESSAGE}");
         };
 
 # ===============================================================================================
@@ -35,6 +35,14 @@ template t_hdr_msg {
         template("${MSGHDR}${MESSAGE}");
         };
 
+# ===============================================================================================
+# Message Header, Structured Data (from RFC5424 parse) and Message; for Juniper
+# ===============================================================================================
+
+template t_hdr_sdata_msg {
+        template("${MSGHDR}${MSGID} ${SDATA} ${MESSAGE}");
+        };
+
 # ===============================================================================================
 # JSON; for JSON pretty-printing
 # ===============================================================================================
diff --git a/package/etc/context/splunk_index.csv b/package/etc/context/splunk_index.csv
index 97cf982..e495491 100644
--- a/package/etc/context/splunk_index.csv
+++ b/package/etc/context/splunk_index.csv
@@ -10,6 +10,30 @@ fgt_traffic,sourcetype,fgt_traffic
 fgt_traffic,index,main
 fgt_utm,sourcetype,fgt_utm
 fgt_utm,index,main
+juniper:structured,index,main
+juniper:structured,sourcetype,juniper:structured
+juniper:junos:firewall:structured,index,main
+juniper:junos:firewall:structured,sourcetype,juniper:junos:firewall:structured
+juniper:junos:idp:structured,index,main
+juniper:junos:idp:structured,sourcetype,juniper:junos:idp:structured
+juniper:junos:firewall,index,main
+juniper:junos:firewall,sourcetype,juniper:junos:firewall
+juniper:junos:idp,index,main
+juniper:junos:idp,sourcetype,juniper:junos:idp
+juniper:nsm:idp,index,main
+juniper:nsm:idp,sourcetype,juniper:nsm:idp
+juniper:sslvpn,index,main
+juniper:sslvpn,sourcetype,juniper:sslvpn
+juniper:netscreen,index,main
+juniper:netscreen,sourcetype,netscreen:firewall
+juniper:idp,index,main
+juniper:idp,sourcetype,juniper:idp
+juniper:idp:structured,index,main
+juniper:idp:structured,sourcetype,juniper:idp:structured
+juniper:nsm,index,main
+juniper:nsm,sourcetype,juniper:nsm
+juniper:legacy,index,main
+juniper:legacy,sourcetype,juniper:legacy
 pan:traffic,index,main
 pan:threat,index,main
 pan:system,index,main
diff --git a/tests/test_juniper.py b/tests/test_juniper.py
new file mode 100644
index 0000000..c69f6c4
--- /dev/null
+++ b/tests/test_juniper.py
@@ -0,0 +1,276 @@
+# Copyright 2019 Splunk, Inc.
+#
+# Use of this source code is governed by a BSD-2-clause-style
+# license that can be found in the LICENSE-BSD2 file or at
+# https://opensource.org/licenses/BSD-2-Clause
+
+from jinja2 import Environment
+from flaky import flaky
+
+from .sendmessage import *
+from .splunkutils import *
+
+env = Environment(extensions=['jinja2_time.TimeExtension'])
+
+
+# <165>1 2007-02-15T09:17:15.719Z router1 mgd 3046 UI_DBASE_LOGOUT_EVENT [junos@2636.1.1.1.2.18 username="user"] User 'user' exiting configuration mode
+@flaky(max_runs=3, min_passes=2)
+# @pytest.mark.xfail
+def test_juniper_junos_structured(record_property, setup_wordlist, get_host_key, setup_splunk):
+    host = get_host_key
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%Y-%m-%dT%H:%M:%S' %}.700Z {{ host }} mgd 3046 UI_DBASE_LOGOUT_EVENT [junos@2636.1.1.1.2.18 username=\"user\"] User 'user' exiting configuration mode\n")
+    message = mt.render(mark="<165>1", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:structured\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+
+# <165>1 2007-02-15T09:17:15.719Z idp1 RT_IDP - IDP_ATTACK_LOG_EVENT [junos@2636.1.1.1.2.135 epoch-time="1507845354" message-type="SIG" source-address="183.78.180.27" source-port="45610" destination-address="118.127.xx.xx" destination-port="80" protocol-name="TCP" service-name="SERVICE_IDP" application-name="HTTP" rule-name="9" rulebase-name="IPS" policy-name="Recommended" export-id="15229" repeat-count="0" action="DROP" threat-severity="HIGH" attack-name="TROJAN:ZMEU-BOT-SCAN" nat-source-address="0.0.0.0" nat-source-port="0" nat-destination-address="172.xx.xx.xx" nat-destination-port="0" elapsed-time="0" inbound-bytes="0" outbound-bytes="0" inbound-packets="0" outbound-packets="0" source-zone-name="sec-zone-name-internet" source-interface-name="reth0.XXX" destination-zone-name="dst-sec-zone1-outside" destination-interface-name="reth1.xxx" packet-log-id="0" alert="no" username="N/A" roles="N/A" message="-"]
+@flaky(max_runs=3, min_passes=2)
+# @pytest.mark.xfail
+def test_juniper_junos_idp_structured(record_property, setup_wordlist, get_host_key, setup_splunk):
+    host = get_host_key
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%Y-%m-%dT%H:%M:%S' %}.700Z {{ host }} RT_IDP - IDP_ATTACK_LOG_EVENT [junos@2636.1.1.1.2.135 epoch-time=\"1507845354\" message-type=\"SIG\" source-address=\"183.78.180.27\" source-port=\"45610\" destination-address=\"118.127.xx.xx\" destination-port=\"80\" protocol-name=\"TCP\" service-name=\"SERVICE_IDP\" application-name=\"HTTP\" rule-name=\"9\" rulebase-name=\"IPS\" policy-name=\"Recommended\" export-id=\"15229\" repeat-count=\"0\" action=\"DROP\" threat-severity=\"HIGH\" attack-name=\"TROJAN:ZMEU-BOT-SCAN\" nat-source-address=\"0.0.0.0\" nat-source-port=\"0\" nat-destination-address=\"172.xx.xx.xx\" nat-destination-port=\"0\" elapsed-time=\"0\" inbound-bytes=\"0\" outbound-bytes=\"0\" inbound-packets=\"0\" outbound-packets=\"0\" source-zone-name=\"sec-zone-name-internet\" source-interface-name=\"reth0.XXX\" destination-zone-name=\"dst-sec-zone1-outside\" destination-interface-name=\"reth1.xxx\" packet-log-id=\"0\" alert=\"no\" username=\"N/A\" roles=\"N/A\" message=\"-\"]")
+    message = mt.render(mark="<165>1", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:junos:idp:structured\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+
+# <165>1 2010-06-23T18:05:55 10.209.83.9 Jnpr Syslog 23414 1 [syslog@juniper.net dayId="20100623" recordId="0" timeRecv="2010/06/23 18:05:55" timeGen="2010/06/23 18:05:51" domain="" devDomVer2="0" device_ip="10.209.83.9" cat="Config" attack="" srcZn="NULL" srcIntf="" srcAddr="0.0.0.0" srcPort="0" natSrcAddr="NULL" natSrcPort="0" dstZn="NULL" dstIntf="NULL" dstAddr="0.0.0.0" dstPort="0" natDstAddr="NULL" natDstPort="0" protocol="IP" ruleDomain="" ruleVer="0" policy="" rulebase="NONE" ruleNo="0" action="NONE" severity="INFO" alert="no" elaspedTime="0" inbytes="0" outbytes="0" totBytes="0" inPak="0" outPak="0" totPak="0" repCount="0" packetData="no" varEnum="0" misc="Interaface  eth2,eth3 is in Normal State" user="NULL" app="NULL" uri="NULL"]
+# <THIS TEST TENTATIVE PENDING A VALID DATA SAMPLE; NEEDED TO OMIT THE "1" IN THIS TEST SAMPLE (BEFORE [] BLOCK) TO GET IT TO PARSE 5424>
+# <VALIDATE BEFORE SHIPPING!>
+# <THIS TEST MAY NEED TO BE REWRITTEN AS A "STANDARD" TEST IF THE DATA IS ACTUALLY SENT IN 3164 FORMAT>
+@flaky(max_runs=3, min_passes=2)
+# @pytest.mark.xfail
+def test_juniper_idp_structured(record_property, setup_wordlist, get_host_key, setup_splunk):
+    host = get_host_key
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%Y-%m-%dT%H:%M:%S' %}.700Z {{ host }} Jnpr Syslog 23414 [syslog@juniper.net dayId=\"20100623\" recordId=\"0\" timeRecv=\"2010/06/23 18:05:55\" timeGen=\"2010/06/23 18:05:51\" domain=\"\" devDomVer2=\"0\" device_ip=\"10.209.83.9\" cat=\"Config\" attack=\"\" srcZn=\"NULL\" srcIntf=\"\" srcAddr=\"0.0.0.0\" srcPort=\"0\" natSrcAddr=\"NULL\" natSrcPort=\"0\" dstZn=\"NULL\" dstIntf=\"NULL\" dstAddr=\"0.0.0.0\" dstPort=\"0\" natDstAddr=\"NULL\" natDstPort=\"0\" protocol=\"IP\" ruleDomain=\"\" ruleVer=\"0\" policy=\"\" rulebase=\"NONE\" ruleNo=\"0\" action=\"NONE\" severity=\"INFO\" alert=\"no\" elaspedTime=\"0\" inbytes=\"0\" outbytes=\"0\" totBytes=\"0\" inPak=\"0\" outPak=\"0\" totPak=\"0\" repCount=\"0\" packetData=\"no\" varEnum=\"0\" misc=\"Interaface  eth2,eth3 is in Normal State\" user=\"NULL\" app=\"NULL\" uri=\"NULL\"]")
+    message = mt.render(mark="<165>1", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:idp:structured\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+
+# <134> Aug 02 14:45:04 10.0.0.1 65.197.254.193 20090320, 17331, 2009/03/20 14:47:45, 2009/03/20 14:47:50, global, 53, [FW NAME], [FW IP], traffic, traffic log, trust, (NULL), 10.1.1.20, 1725, 82.2.19.2, 2383, untrust, (NULL), 84.5.78.4, 80, 84.53.178.64, 80, tcp, global, 53, [FW NAME], fw/vpn, 4, accepted, info, no, Creation, (NULL), (NULL), (NULL), 0, 0, 0, 0, 0, 0, 0, 1, no, 0, Not Set, sos
+@flaky(max_runs=3, min_passes=2)
+# @pytest.mark.xfail
+def test_juniper_junos_fw_structured(record_property, setup_wordlist, get_host_key, setup_splunk):
+    host = get_host_key
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%Y-%m-%dT%H:%M:%S' %}.700Z {{ host }} RT_FLOW - RT_FLOW_SESSION_CREATE_LS [junos@2636.1.1.1.2.26 logical-system-name=\"test-lsys\" source-address=\"10.10.10.100\" source-port=\"4206\" destination-address=\"10.20.20.15\" destination-port=\"445\" service-name=\"junos-smb\" nat-source-address=\"10.10.10.100\" nat-source-port=\"4206\" nat-destination-address=\"10.20.20.15\" nat-destination-port=\"445\" src-nat-rule-name=\"None\" dst-nat-rule-name=\"None\" protocol-id=\"6\" policy-name=\"123\" source-zone-name=\"TEST1\" destination-zone-name=\"TEST2\" session-id-32=\"14285714\" username=\"N/A\" roles=\"N/A\" packet-incoming-interface=\"reth1.100\"]")
+    message = mt.render(mark="<23>1", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:junos:firewall:structured\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+
+
+# <23> Mar 18 17:56:52 RT_UTM: WEBFILTER_URL_PERMITTED: WebFilter: ACTION="URL Permitted" 192.168.32.1(62054)->1.1.1.1(443) CATEGORY="Enhanced_Information_Technology" REASON="BY_PRE_DEFINED" PROFILE="UTM-Wireless-Profile" URL=ent-shasta-rrs.symantec.com OBJ=/ username N/A roles N/A
+@flaky(max_runs=3, min_passes=2)
+# @pytest.mark.xfail
+def test_juniper_utm_standard(record_property, setup_wordlist, get_host_key, setup_splunk):
+    host = get_host_key
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} RT_UTM: WEBFILTER_URL_PERMITTED: WebFilter: ACTION=\"URL Permitted\" 192.168.32.1(62054)->1.1.1.1(443) CATEGORY=\"Enhanced_Information_Technology\" REASON=\"BY_PRE_DEFINED\" PROFILE=\"UTM-Wireless-Profile\" URL=ent-shasta-rrs.symantec.com OBJ=/ username N/A roles N/A")
+    message = mt.render(mark="<23>", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:junos:firewall\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+
+# <134> Aug 02 14:45:04 10.0.0.1 65.197.254.193 20090320, 17331, 2009/03/20 14:47:45, 2009/03/20 14:47:50, global, 53, [FW NAME], [FW IP], traffic, traffic log, trust, (NULL), 10.1.1.20, 1725, 82.2.19.2, 2383, untrust, (NULL), 84.5.78.4, 80, 84.53.178.64, 80, tcp, global, 53, [FW NAME], fw/vpn, 4, accepted, info, no, Creation, (NULL), (NULL), (NULL), 0, 0, 0, 0, 0, 0, 0, 1, no, 0, Not Set, sos
+@flaky(max_runs=3, min_passes=2)
+# @pytest.mark.xfail
+def test_juniper_nsm_standard(record_property, setup_wordlist, get_host_key, setup_splunk):
+    host = get_host_key
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} 65.197.254.193 20090320, 17331, 2009/03/20 14:47:45, 2009/03/20 14:47:50, global, 53, [FW NAME], [FW IP], traffic, traffic log, trust, (NULL), 10.1.1.20, 1725, 82.2.19.2, 2383, untrust, (NULL), 84.5.78.4, 80, 84.53.178.64, 80, tcp, global, 53, [FW NAME], fw/vpn, 4, accepted, info, no, Creation, (NULL), (NULL), (NULL), 0, 0, 0, 0, 0, 0, 0, 1, no, 0, Not Set, sos")
+    message = mt.render(mark="<134>", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:nsm\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+
+# THE LOG SAMPLE BELOW IS IMPLIED FROM THE JUNIPER DOCS; need to obtain a real sample.
+# <134> Aug 02 14:45:04 10.0.0.1 65.197.254.193 20090320, 17331, 2009/03/20 14:47:45, 2009/03/20 14:47:50, global, 53, [IDP NAME], [IDP IP], predefined, rule, trust, (NULL), 10.1.1.20, 1725, 82.2.19.2, 2383, untrust, (NULL), 84.5.78.4, 80, 84.53.178.64, 80, tcp, global, 53, [IDP NAME], fw/vpn, 4, accepted, info, no, Creation, (NULL), (NULL), (NULL), 0, 0, 0, 0, 0, 0, 0, 1, no, 0, Not Set, sos
+@flaky(max_runs=3, min_passes=2)
+# @pytest.mark.xfail
+def test_juniper_nsm_idp_standard(record_property, setup_wordlist, get_host_key, setup_splunk):
+    host = get_host_key
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} 65.197.254.193 20090320, 17331, 2009/03/20 14:47:45, 2009/03/20 14:47:50, global, 53, [IDP NAME], [IDP IP], predefined, rule, trust, (NULL), 10.1.1.20, 1725, 82.2.19.2, 2383, untrust, (NULL), 84.5.78.4, 80, 84.53.178.64, 80, tcp, global, 53, [IDP NAME], fw/vpn, 4, accepted, info, no, Creation, (NULL), (NULL), (NULL), 0, 0, 0, 0, 0, 0, 0, 1, no, 0, Not Set, sos")
+    message = mt.render(mark="<134>", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:nsm:idp\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+
+# <23> Apr 24 12:30:05  cs-loki3 RT_IDP: IDP_ATTACK_LOG_EVENT: IDP: at 1303673404, ANOMALY Attack log <64.1.2.1/48397->198.87.233.110/80> for TCP protocol and service HTTP application NONE by rule 3 of rulebase IPS in policy Recommended. attack: repeat=0, action=DROP, threat-severity=HIGH, name=HTTP:INVALID:MSNG-HTTP-VER, NAT <46.0.3.254:55870->0.0.0.0:0>, time-elapsed=0, inbytes=0, outbytes=0, inpackets=0, outpackets=0, intf:trust:fe-0/0/2.0->untrust:fe-0/0/3.0, packet-log-id: 0 and misc-message -
+@flaky(max_runs=3, min_passes=2)
+# @pytest.mark.xfail
+
+def test_juniper_idp_standard(record_property, setup_wordlist, get_host_key, setup_splunk):
+    host = get_host_key
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} RT_IDP: IDP_ATTACK_LOG_EVENT: IDP: at 1303673404, ANOMALY Attack log <64.1.2.1/48397->198.87.233.110/80> for TCP protocol and service HTTP application NONE by rule 3 of rulebase IPS in policy Recommended. attack: repeat=0, action=DROP, threat-severity=HIGH, name=HTTP:INVALID:MSNG-HTTP-VER, NAT <46.0.3.254:55870->0.0.0.0:0>, time-elapsed=0, inbytes=0, outbytes=0, inpackets=0, outpackets=0, intf:trust:fe-0/0/2.0->untrust:fe-0/0/3.0, packet-log-id: 0 and misc-message -")
+    message = mt.render(mark="<23>", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:junos:idp\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+
+# <23> Nov 18 09:56:58  INTERNET-ROUTER RT_FLOW: RT_FLOW_SESSION_CREATE: session created 192.168.1.102/58662->8.8.8.8/53 junos-dns-udp 68.144.1.1/55893->8.8.8.8/53 TRUST-INET-ACCESS None 17 OUTBOUND-INTERNET-ACCESS TRUST INTERNET 6316 N/A(N/A) vlan.192
+@flaky(max_runs=3, min_passes=2)
+# @pytest.mark.xfail
+
+def test_juniper_firewall_standard(record_property, setup_wordlist, get_host_key, setup_splunk):
+    host = get_host_key
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} RT_FLOW: RT_FLOW_SESSION_CREATE: session created 192.168.1.102/58662->8.8.8.8/53 junos-dns-udp 68.144.1.1/55893->8.8.8.8/53 TRUST-INET-ACCESS None 17 OUTBOUND-INTERNET-ACCESS TRUST INTERNET 6316 N/A(N/A) vlan.192")
+    message = mt.render(mark="<23>", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:junos:firewall\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+
+# <23> Feb 27 15:00:00 vpn-001 Juniper: 2013-02-27 15:00:00 - ive - [000.000.000.000] SAMPLE::xxx@xxx.xxx(Users)[] - Session timed out for xxx@xxx.xxx.xxx/Users (session:00000000) due to inactivity (last access at 13:59:31 2013/02/27). Idle session identified during routine system scan.
+# <23> Feb 27 15:00:00 vpn-001 Juniper: 2013-02-27 15:00:00 - ive - [000.000.000.000] SAMPLE::xxx@xxx.xxx(Users)[User_Role] - Remote address for user xxx@xxx.xxx/Users changed from 000.000.000.000 to 000.000.000.000. Access denied.
+@flaky(max_runs=3, min_passes=2)
+# @pytest.mark.xfail
+
+def test_juniper_sslvpn_standard(record_property, setup_wordlist, get_host_key, setup_splunk):
+    host = get_host_key
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} Juniper: {% now 'utc', '%Y-%m-%d %H:%M:%S' %} - ive - [000.000.000.000] SAMPLE::xxx@xxx.xxx(Users)[User_Role] - Remote address for user xxx@xxx.xxx/Users changed from 000.000.000.000 to 000.000.000.000. Access denied.")
+    message = mt.render(mark="<23>", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:sslvpn\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+
+# <23> Mar 18 17:56:52 [FW IP] [FW Model]: NetScreen device_id=netscreen2  [Root]system-notification-00257(traffic): start_time="2009-03-18 16:07:06" duration=0 policy_id=320001 service=msrpc Endpoint Mapper(tcp) proto=6 src zone=Null dst zone=self action=Deny sent=0 rcvd=16384 src=21.10.90.125 dst=23.16.1.1
+@flaky(max_runs=3, min_passes=2)
+# @pytest.mark.xfail
+def test_juniper_netscreen(record_property, setup_wordlist, get_host_key, setup_splunk):
+    host = get_host_key
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} ns204: NetScreen device_id=netscreen2  [Root]system-notification-00257(traffic): start_time=\"2009-03-18 16:07:06\" duration=0 policy_id=320001 service=msrpc Endpoint Mapper(tcp) proto=6 src zone=Null dst zone=self action=Deny sent=0 rcvd=16384 src=21.10.90.125 dst=23.16.1.1\n")
+    message = mt.render(mark="<23>", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"netscreen:firewall\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
\ No newline at end of file

From e3fbe1fadc9ddd66adbfc155c32ef9f2330a352e Mon Sep 17 00:00:00 2001
From: mbonsack <mbonsack@splunk.com>
Date: Tue, 6 Aug 2019 17:39:04 -0700
Subject: [PATCH 42/83] Refine filter (#40)

Refine filter for performance and simplicity; add full payload to pycharm tests Fixes #38
---
 package/etc/conf.d/filters/fortinet_fgt.conf | 15 ++++-----------
 tests/test_fortinet_ngfw.py                  |  6 +++---
 2 files changed, 7 insertions(+), 14 deletions(-)

diff --git a/package/etc/conf.d/filters/fortinet_fgt.conf b/package/etc/conf.d/filters/fortinet_fgt.conf
index f862fa9..d6205b5 100644
--- a/package/etc/conf.d/filters/fortinet_fgt.conf
+++ b/package/etc/conf.d/filters/fortinet_fgt.conf
@@ -6,12 +6,12 @@ log {
     };
 
     parser {
-        kv-parser(prefix(".kv."));
-        date-parser(format("%Y-%m-%d:%H:%M:%S") template("${.kv.date}:${.kv.time}"));
+        syslog-parser();
+        kv-parser(prefix(".kv.") template("${MSGHDR} ${MSG}"));
+        date-parser(format("%Y-%m-%d:%H:%M:%S") template("${.kv.date}:${.kv.time}") time-zone(`default-timezone`));
     };
 
     rewrite { set("${.kv.devname}", value("HOST")); };
-    rewrite { subst('<\d+>(.*)' "$1" value("MSG")); };
 
     #set the source type based on program field and lookup index from the splunk context csv
     if (match("traffic" value(".kv.type"))) {
@@ -24,16 +24,9 @@ log {
        parser {p_add_context_splunk(key("fgt_log")); };
     };
 
-    rewrite {
-        #drop the header
-        subst('date=[^ ]+ time=[^ ]+ devname=.+ (devid.*)', '$1', value("MESSAGE"));
-        #Strip empty fields because SEDCMD can't when we use event endpoint
-        subst('([^\= ]+=(?: |\"\"|-|\"-") ?)', '', value("MESSAGE"));
-    };
-
     #rewrite the final message for splunk json
     #sourcetype and index are set in the filter defaults won't be used
-    rewrite {r_set_splunk_basic(template("t_msg_only")) }; #--HEC--
+    rewrite {r_set_splunk_basic(template("t_standard")) }; #--HEC--
     destination(d_hec);  #--HEC--
 
     flags(flow-control,final);
diff --git a/tests/test_fortinet_ngfw.py b/tests/test_fortinet_ngfw.py
index e7f982d..60fdae7 100644
--- a/tests/test_fortinet_ngfw.py
+++ b/tests/test_fortinet_ngfw.py
@@ -19,7 +19,7 @@ def test_fortinet_fgt_event(record_property, setup_wordlist, setup_splunk):
     host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
 
     mt = env.from_string(
-        "{{ mark }}date={% now 'utc', '%Y-%m-%d' %} time={% now 'utc', '%H:%M:%S' %} devname={{ host }} devid=FGT60D4614044725 logid=0100040704 type=event subtype=system level=notice vd=root logdesc=\"System performance statistics\" action=\"perf-stats\" cpu=2 mem=35 totalsession=61 disk=2 bandwidth=158/138 setuprate=2 disklograte=0 fazlograte=0 msg=\"Performance statistics: average CPU: 2, memory:  35, concurrent sessions:  61, setup-rate: 2\"\n")
+        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} date={% now 'utc', '%Y-%m-%d' %} time={% now 'utc', '%H:%M:%S' %} devname={{ host }} devid=FGT60D4614044725 logid=0100040704 type=event subtype=system level=notice vd=root logdesc=\"System performance statistics\" action=\"perf-stats\" cpu=2 mem=35 totalsession=61 disk=2 bandwidth=158/138 setuprate=2 disklograte=0 fazlograte=0 msg=\"Performance statistics: average CPU: 2, memory:  35, concurrent sessions:  61, setup-rate: 2\"\n")
     message = mt.render(mark="<13>", host=host)
 
     sendsingle(message)
@@ -41,7 +41,7 @@ def test_fortinet_fgt_traffic(record_property, setup_wordlist, setup_splunk):
     host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
 
     mt = env.from_string(
-        "{{ mark }}date={% now 'utc', '%Y-%m-%d' %} time={% now 'utc', '%H:%M:%S' %} devname={{ host }} devid=FG800C3912801080 logid=0004000017 type=traffic subtype=sniffer level=notice vd=root srcip=fe80::20c:29ff:fe77:20d4 srcintf=\"port3\" dstip=ff02::1:ff77:20d4 dstintf=\"port3\" sessionid=408903 proto=58 action=accept policyid=2 dstcountry=\"Reserved\" srccountry=\"Reserved\" trandisp=snat transip=:: transport=0 service=\"icmp6/131/0\" duration=36 sentbyte=0 rcvdbyte=40 sentpkt=0 rcvdpkt=0 appid=16321 app=\"IPv6.ICMP\" appcat=\"Network.Service\" apprisk=elevated applist=\"sniffer-profile\" appact=detected utmaction=allow countapp=1\n")
+        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} date={% now 'utc', '%Y-%m-%d' %} time={% now 'utc', '%H:%M:%S' %} devname={{ host }} devid=FG800C3912801080 logid=0004000017 type=traffic subtype=sniffer level=notice vd=root srcip=fe80::20c:29ff:fe77:20d4 srcintf=\"port3\" dstip=ff02::1:ff77:20d4 dstintf=\"port3\" sessionid=408903 proto=58 action=accept policyid=2 dstcountry=\"Reserved\" srccountry=\"Reserved\" trandisp=snat transip=:: transport=0 service=\"icmp6/131/0\" duration=36 sentbyte=0 rcvdbyte=40 sentpkt=0 rcvdpkt=0 appid=16321 app=\"IPv6.ICMP\" appcat=\"Network.Service\" apprisk=elevated applist=\"sniffer-profile\" appact=detected utmaction=allow countapp=1\n")
     message = mt.render(mark="<13>", host=host)
     sendsingle(message)
 
@@ -62,7 +62,7 @@ def test_fortinet_fgt_utm(record_property, setup_wordlist, setup_splunk):
     host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
 
     mt = env.from_string(
-        "{{ mark }}date={% now 'utc', '%Y-%m-%d' %} time={% now 'utc', '%H:%M:%S' %} devname={{ host }} devid=FGT37D4613800138 logid=0317013312 type=utm subtype=webfilter eventtype=ftgd_allow level=notice vd=root sessionid=1490845588 user=\"\" srcip=172.30.16.119 srcport=53235 srcintf=\"Internal\" dstip=114.112.67.75 dstport=80 dstintf=\"External-SDC\" proto=6 service=HTTP hostname=\"popo.wan.ijinshan.com\" profile=\"scan\" action=passthrough reqtype=direct url=\"/popo/launch?c=cHA9d29vZHMxOTgyQGhvdG1haWwuY29tJnV1aWQ9NDBiNDkyZDRmNzdhNjFmOTNlMjQwMjhiYjE3ZGRlYTYmY29tcGl\" sentbyte=525 rcvdbyte=325 direction=outgoing msg=\"URL belongs to an allowed category in policy\" method=domain cat=52 catdesc=\"Information Technology\"\n")
+        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} date={% now 'utc', '%Y-%m-%d' %} time={% now 'utc', '%H:%M:%S' %} devname={{ host }} devid=FGT37D4613800138 logid=0317013312 type=utm subtype=webfilter eventtype=ftgd_allow level=notice vd=root sessionid=1490845588 user=\"\" srcip=172.30.16.119 srcport=53235 srcintf=\"Internal\" dstip=114.112.67.75 dstport=80 dstintf=\"External-SDC\" proto=6 service=HTTP hostname=\"popo.wan.ijinshan.com\" profile=\"scan\" action=passthrough reqtype=direct url=\"/popo/launch?c=cHA9d29vZHMxOTgyQGhvdG1haWwuY29tJnV1aWQ9NDBiNDkyZDRmNzdhNjFmOTNlMjQwMjhiYjE3ZGRlYTYmY29tcGl\" sentbyte=525 rcvdbyte=325 direction=outgoing msg=\"URL belongs to an allowed category in policy\" method=domain cat=52 catdesc=\"Information Technology\"\n")
     message = mt.render(mark="<13>", host=host)
     sendsingle(message)
 

From 48b9f4ba7b317d4725934a7a62a9ea32d86bf695 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <35384120+rfaircloth-splunk@users.noreply.github.com>
Date: Tue, 13 Aug 2019 10:33:21 -0400
Subject: [PATCH 43/83] Feature/docs (#43)

* Base docs

* Update d_destinations.conf

* Update d_destinations.conf

* basic docs

* Update index.md

* doc updates

* Update sources.md

Cisco ASA

* include fgt

* add palo

* Update index.md

resolve comment

* Update docs/index.md

Co-Authored-By: mbonsack <mbonsack@splunk.com>

* Update docs/index.md

Co-Authored-By: mbonsack <mbonsack@splunk.com>

* Update docs/gettingstarted.md

Co-Authored-By: mbonsack <mbonsack@splunk.com>

* Update docs/performance.md

Co-Authored-By: mbonsack <mbonsack@splunk.com>

* Update docs/gettingstarted.md

Co-Authored-By: mbonsack <mbonsack@splunk.com>

* remove image placeholder
---
 README.md                                     |   2 -
 docs/FortiGate_event.png                      | Bin 0 -> 128245 bytes
 docs/FortiGate_traffic.png                    | Bin 0 -> 155360 bytes
 docs/FortiGate_utm.png                        | Bin 0 -> 183091 bytes
 docs/gettingstarted.md                        |  58 ++++++
 docs/index.md                                 |  24 +++
 docs/performance.md                           |  27 +++
 docs/sources.md                               | 170 ++++++++++++++++++
 docs/troubleshooting.md                       |   9 +
 mkdocs.yml                                    |   8 +
 .../conf.d/destinations/d_destinations.conf   |   7 +-
 11 files changed, 300 insertions(+), 5 deletions(-)
 create mode 100644 docs/FortiGate_event.png
 create mode 100644 docs/FortiGate_traffic.png
 create mode 100644 docs/FortiGate_utm.png
 create mode 100644 docs/gettingstarted.md
 create mode 100644 docs/index.md
 create mode 100644 docs/performance.md
 create mode 100644 docs/sources.md
 create mode 100644 docs/troubleshooting.md
 create mode 100644 mkdocs.yml

diff --git a/README.md b/README.md
index 02b59dd..e0d3259 100644
--- a/README.md
+++ b/README.md
@@ -41,8 +41,6 @@ index = main
 
 # License
 
-
-
 Configuration and documentation licensed subject to [CC0](LICENSE-CC0)
 
 Code and scripts licensed subject to [BSD-2-Clause](LICENSE-BSD2) 
\ No newline at end of file
diff --git a/docs/FortiGate_event.png b/docs/FortiGate_event.png
new file mode 100644
index 0000000000000000000000000000000000000000..9a0113da9cc5ef4124a6c036d32ec8fb4fcd78e2
GIT binary patch
literal 128245
zcma%jWmH?ywk}rO3N0R_6l-yZprw=+EiLYp5;VBGLyNV=-K}_Wf@^^UcMBA^;2z+m
z=bU@b9pl~c&db<8cJ^Lt?<||&`sSQpzPwjeAi}4?M?*s+diVDA2Q)P79yByeZCq^B
zl^{HE9W*p_A1gVz_wVH77~ebDgRE@L(a_kxo0*urc*n{9+tk#=<Tvak2fma0hlq%%
z4<_y19k7mW#vYSi#>`{`gB2>$mF@s?A4p#ZZZ6MW5LEFL={ZqY=W|aXT$$pe#UkE#
z9*FL)Xzj?4iOG!fEhGIydOE@9EwnlDfk*NzG8cr5`VB4lXgyNspCg~318_gX(W@tz
z_DLAs$dX|_7+U0H>x7?`(B?4Sk=A2JWDuL`2h0vof8mg+$N9}2LE8~9(JkM(*zsZJ
zdjRAec9U2EFHk0@H!hWuhR_Lzbcol3w~?2fH(7v+SBHO_Uo<gaD?Z?f_!gxGg?XVx
zJi91{oUmr6m~=yS?en^~3Y`Kxx@roYzdJ_J@`;~VkmgC_1gcm(0mhOJ8UOAuDS>u$
zEC!P*rS^4H`I2A;_i%(H4@zKT``KWJfw%C<BFR>XEs%Y$B8<~Pwpga8qI|qn%eM~?
zH8hx*x6iS|+Q}at9$L2_9@--VFEH2kWr)$9yIZY9*^rT-#v#*6L&rr&MOoa;9?Wg}
z+5VF`w+Gk(HBM+~5+35HQ?R*<DWeD2*3MbnL-N@_N{FM*|6b;K#`upSE;f?SbX49m
z%Go=aGYWAFa`Qfu!e?Y;lyLeC694e}&A+OnzDYi_ba8PI=iza8cjtB&;I?<N;NcS!
z6XW6K=i%q)LY3fh_Ox>`_29B|X8z|x{_8of&7IAhtQ=gd?Clu;KG*b<y{n7lvuA%_
z^xvO<{!VibtAD@A&iP->LN$=*?;RdKZeE`Mem1JA#NVsp@2xz{ZFOE-fz9olQSXrA
z6A|E-_(z5R>(;+t`9G@a{=2HEkkJ3E`9JRbtEL3c-xmCj7X7ok{&5x6UsCuIJpbMI
zQuyTh4A0TfWYFHdmeue;-_LjypeauqCT$XFmxw@+eWQ57@#u;CV*<>l1ics<gfcR(
zdy!m(@uW}WKQu!ix?WbZhQd1co;btj`}>Qnl(V6R9tug`pH5OT?c2n5`s|{`;Sz$X
zKPHr=pD?agcaE385*PElQFiiDX@47l^`DOpdyHFRy2LZTg+h5UM)d!DybZ=;Cshhg
z>0^&W!~6E1jw`hQ488~5G1mWF^qUOL^KUP(K3R-pCKL>54-RVDJQru}3qD>i`S{E3
z?#*1IRV1h0FX$=dQ`c!T3j{Ls#%p4;-021ydYB;pMjkKIey$m2cK8M&>V^!V6Q}cg
zHy}l4*U;{*mK?yLazZAPV))B8H2q6N<LB7#?T(IL+V9-OuKflACpv|g0_u<6@LP_k
zOaI6Nz#AR{F7`S)<v4<lkk_YVe(RQBuMRxC%6HwI*5wq>n0|je)75V{a3C$%fp2eH
z>ehcsQ2m&y`kUqT@<MWV5@pgFcfn9(gVdb19`tg6TCG-TPsH{Ic%f1SAm+MT8*;Ez
zv}RHmcd4z)C^io=u5L_k-W(bk@;pSy`Ai8xeSefnw~aee_U*izl7{-L>9^Ho#6t`r
zmj(%9bI0UtSa)Qw0&<6~Ea^45nsmeHX5XEX6L{~&nIwm#>ZSC>%rxtC%P4|g!sY5K
zbC+Ym1MWv9<1POvt2nF*V~pj#H#7EME3@JYdYj-vlo9f8-VBnDw6Lc&*d`>D&J6DP
zE+5B7c%D+eYj)XL-!fLf3&Fve`owzwXV{Pw%Ot4Q9qyMR=^iMtu%_u7eK{fl|40z*
zcMXn03RwN@Z>Qb)G_lF`%WWx4N%3R`exEGExFeb=x?wE4Dok{Os4mJ(x(^Q9mF8?o
z2fC|<5#N3=+FR1bCIJ+(1sxJml^vWT7SyC}cl8g5_S>#i{i)B!iuArwGcfSv`9FMI
z_Hqv>(}ftRb!F}^%NcpDaUHn7ex1+eq5LG%@7{dm4o+V57Ji8{*dUE8%K~dy`Cp%l
z)S*q8y)$fFN?8@V;EnJvf-}xF*)*K82Ld^VnU}BjX0IOuMpA0Fc8)qbso$S_?Mccu
zABW4f!O|n8+2Woo_}=axg6+~RJ{GDZ0f6pe4Vm!#6TtZ+tJ~Er<3|7@=vj*M`ggYG
zp@F!fGf67nlj|A&^|%pN!*01WNUu^N!O29KvDw3w602%T;T`{ysR^P=F8Q~GzK4VD
z5Y9o#Ue+}M<zBDwOrC~kiovnVU<2?wJLd1mNznVGHB_&w*ADk*QP%QF$56S--*@os
z0(Y@b{wNat5%lZI$6BV-#@IDhh<SI!*<}CY=Ylp_V&zE+-StX2Nz)IHkz^rlf^TnP
zs7qUA(}a(@)m;3KSNpRJKU^yjoo_FpGwk|NxUz9k>-$#q!lzk1Xq_9Ej4OZ*42{A=
zk=OSh5Mb9n{VX4j`z|}DK60}aS6bm+KN{ci_P#`^iE?RI?6qR*n$2QIxJcpYlct8~
z-Ve{SBQx*Ccikl~ZZ{gnZt(gBs2V;k&e*SzR?6P$Tlj3qIn~09m_3g}rCleJ7(5OS
zMVHcy5mG(chWgDup|)Dieffla$y5Yph@$}u;~l;rSQ~iJyk_e_H^jVUr5>UR3r&yC
zKy2B$gFHL0x>;X4L;CB)+WN7Xq0#T9{Aqo2;085zt(lZ22y^_$?br8govhC!`h5_P
z)pm~{okq(N&}C;hgSYS&lhF~aTj!->ROK&!7QfpGx0HJ`;;+{)28Xiz)dY>%n%)1s
z#=v{}<SacNCc}GCGnorRJKjH>(-B`H_Wn4XEG_5-4lR6cN5U_qcdHLRXd0W+@885{
z0`p?*=IZZ$bgeax#|&v*#FbXogeNy=eqt7$|8+UpvbJT+6J-o_!j=!U5&-Q)gohr)
zjhWr0rClvF6mmbi@5jc+pc2TI;?}8s4XiyczrRfuwk`aeWy`z*w*6d_Mm7R<wJtM_
zdA}ziX>^c5*12=e?F{CS$7tRz5vyoftg<!BE0w&2EH*-x%(u^cvf5Z`dLUVz6-<jA
z*@Zq${A8r0*;!@|0q;yo$XK4UvyYn1_*M%%Ykl2^^Y)-+rwoIl!BClzlGEr}<)x4M
zPwjHf_SjpcRQR~gHQ;%BY416)d;J&zmZ3QOWu3J~9R9|TVwD$8aPQU4`R?z1vD18q
zoL4shig26hGS-9n`b2DznS?+&sqYtqv9!H1R~WK?@K{!GiHQ?`uza=Y9Qc(``rLR~
zA{F44L&^Egm|3?Klo7Hy^m0hMVtPa|ffFJ7C~*D-OTL7|O14IcfqHhe`~Ixs#^t*^
zN;<lHw=Mgm<;vFQ(KL%?cUj`Tg`bB~H8Xv0@CH(aBA;*@ytT9Oiwp@pNC>Cje%`P=
z{`yw>HJ47?)ZWt)-PY9laM_DNA)AeYt*kKuyaxERGQm5z=cy|Ip<2iM%OGWZ{-BEI
zzNq$1{ZOlW!wg1o$;0qBsmjZE{sN^EL7bg8EOKFlKRBM}J>k-ujiYY>3bY7w>05e#
zj5qeblYFPQ=oPs>m>{6;(d4}K1EfOxuI@!b{N^8!)!ZMgxhlsviLrC0f$x%O2)fdr
z?#`O@ElanWR^!Eio2y?!_Assk(Y?l=g|ft+P-0`$c@j{R-XzL8t^cmbl3juL_N$7y
zAsbZ}P|$F`e)q~NxDFryudx^^ymLBv@z(Jg?%utT!p1OxA&%Se^(j|w=+LZ+K19oP
zfQszd$A=6KmamkWuGL?alLh5>7d4cmv|lMV0DCUuM%sT|-d-eTO}%<gWG-UX7Zqe!
z%HVqws_|1twt>13@_|Lk(rpE2*bvdKP*^Gt7La)UJCQ^@hw`D5SUe<y$=B<tTg2yq
zblvF+IODaPT-`S^J!Z?SQT9AKGc?R)UiOET81aC>1$s?kfNFA2E|Ol-OPS|GhyCKh
zu5#2kNM0)MV<3E+v*B>IU=Pb}I&5>Os7`<B7@ES|-}~e_vNIP8JInI&+u?SE^9Gb-
zNApIj#4FH6B~#pR<^K0r-n{)jJ<<$`HJ9hM5?<VF#OPlf!{%50-6Ztq#3K!wV~BPg
zfr)yt3Hkxs_@N#7d%s0jpniQ>>Ojk*NSCEhV534SJ|5mQ?Gt|U;pfL+;Xew7Tz%9<
z-iJ|e8@-UeKS=}qFr31Z5a`BKTPL_Ov#>q>Bu|E+?rz!M;Se)^0bZ`H-f9Ite8Wjg
z_(p?Vr3@*%mOEv^Cpl-*I+%PTrCs)3bu{o$+My%v@GZ`~NLA<qF70*9J@IwW4UWH=
z*_s9*g{dZ<l#cFw_;5yW#?uegK4N&9Zgjzhs}5=Mj)Ol~lydnuW}P4A2j~2z?wc1}
z^q0aw=WYo_dsBZz1dC5M2f$z@-V~!8!D?sFNX1^6ZmjLbL?Q|Msb!IBu~W<mHfB4;
z&jEC-9H2Ww%hyRZqaPvloR^nTHX{%?DIH%UVBJZ-@sw2p89`6k)7PUooGw=8`ou>)
zyc%zFvsq-|<Y}p<XOuQrQ~QqYE_RMJAd;G%0txjBY2L3`C}yA)wwopho^1)f36l_t
zF0V)d<1Ka=HNLR1<iTGbsT4Wq)H*M=PWU>WW2kR90&PPh*Kw!ML*_gzx0t7WqGVE-
z%w^f_#G8_4v>#=)&~)qpJ&XUs@-ym>WS<)Q%;;};@$!b|$S7j=k5wVbK`KNgLjBro
z8mCcKa<LVt9LqHdnw`fgDg&Ak$D8`klT84+1ol#?)p|NPc^oWgdeF_OT1GQ-0P?yD
zNOjfs%N-N86W?P^b`fzfq`)bYOz*(-W%BWB`aHYr<!6=O{6W{R#i9J6QlHn89e>(Q
ze&2+pZnt$S^B`bt{nM<;2DZMjTo0-lQsuV^zkjn^%{S(7dE7yv(lzvfzUkK9>V-3<
z$6BgW3eSi^S)qI>ViW?H^4EN~^fmjzfL$@sN}bj>_&>$JA_co&YS-5;{+#uDSi_a9
z@0{gi6@Fv1eIGAqrvoR{gXh_%xMFWWv+C!{7V7Kg5=lTeq>lyQV1%tJEUHMi;=39M
z?sWsT$^iNI?XU_u(+3^@)SZC}0~`s}*NCGu$8hpmvWeVdPf1m6ZObGUH>8$?8A%rJ
z8puhU7aw_pq_R0v&2VtbK*K4e^ReuPBYc_Nv&3fNR8iie+y_eyYJ&+}%v3KslM&V$
zrK!a&*_AT-F%mtM4fR-Q3QKF=Az%3J?k<<PG+$^=uA0U?Y|D|n1qp@q8H`xPsxMQr
z=TL5ryv6LA%jpYnwVs(oIK=*H2j8mVy}uLhvo^jv#GyV~*4LwDFk?RJEUd1Bfv#)o
zWG!*{u;sj?uJy5n6!`luK@4B+m$T{#9AE49i%u=HtVE=eYiK#AK{OsD45IC6g^IUy
zDIJT(pzY#yHY_v@^Sd;Ix<eGO^I05PU%pM@{`O6eCwu(AjiC!JG#a`*ADchtwxO9%
zXGzV`6)kK&GWNMM47z4KnG-Co0m0*nhl_;)P(J$}2Ba*&A$DT5axV5yiWplTa#~XO
zRa@HXT%YIBP{yHU8myjR6*9w`UWd`>8r5)Ynk%ez&Nhoho73mCH|0TgM?Kg!!EH((
zB*r#foqnVH>os5N_ru^zxR!I$2|u#PSkrjEL)=K9A8lpb#^8%!<B~b-hi1dew!VaV
zVIG$L1om#rEk5EdFT80lB(?T4Uy#(*-moOeK;B?{`9aXbTaiCouw?Kk)0A<#hD}zo
z*(a{el^nTddxs?XGjewAaLv2E8-q<{>htt&&Kat_#-VunhMy6QTRin1cZU#$f{g>%
zxj4<{dwG1yc=?~kj!89Sy<gwO&s*v=YrM;Fg9ewDxavXcOj`=5!P(NjrPMqNjRekb
zL@3L~W;Z1_8+-N%s-!H^NS+b5os2|Tn3!Zw7Hi30qR+1T-<HE%{OvBv3xW2Rn^!aG
z#tXYNNdBc1-{;f3ORlueDrKQ5-~zF%s!)r)IPebN9?gE^Dapn>U1ev?4)H;*m@xk>
zhQ0*Y_a(A@QX-7jIfF(IuEVTbal=*i*!U~o1Wtn;_t+TUmp)IOTfQwxs_v9iS$zqp
zk3#!y=0c_<Z3er<q=hpfTDxy`w<wg3R=(IN?D|J#Qx+Fu=Fgl}U6_;UX9SB2;k3Z#
zw>-Y_thg@-vrRf_Q$kdMVuUpIf~=!QyZ3)yI>9B~cY47A(DD~G0-mFhdpu{8kP*6r
zM1b{Jxkq*GNmq^9&hX=7j-n8E=S{9j%rbwA;b}cHyMx^I2xseaOu$CJB9I_DJFf{d
znspxw8V77>DXk4Q*(~i<Ae5<g5c68}SSm3^M;1M1mV75?o+<%u&eXUU(6vGq6FZ#G
zyEbFwk*)C<SvklY1uU_|Xn3bJR~ptdUldtyD0;~bukG{_xM;A;F%&N$+e?=2whj2M
zy3ib=zLHR6sEeAum*u;X^D(KCLno)Oc<i<{ENLx!<`9%YL!~1p^GCQ4(zBW|Mjk02
zne?tSvB5Jv6_HNqf#5u<wVHa>PmYP$x6Yx)hWx5N-K^nhAJcP=f#mzCZ{~D{HVY{?
z$>GErvXP1hjbRnwh2xP?ygHUpR>?QDy(UJ_jZ?eo%_iuFc9?t$IqQzseD#`8lrH!Y
z3+D+^!1JfV?Vw9|3#OT}mnsJn#vs}t8MclggI~w-APv1yZfB@B=jLozH`WLgC$@-^
zhrgtgDTIkML~bPr9e<EX+?&%N?{u#HA$wUf+|4E=^-K=)DG*pa`iQBI^5NE~!NyKi
zXEBgr7VqnT$UK14Wp)>u9UHb2>PT3@cO2lrKoh-f>4!AWceCi5P{u)2CyOgug~n?~
zJ}Xw3jo`II!e97~&5Qpb4(6}38KD=#(_!_$6VMIPNaYKBW#~Xb&nVHIO=3j_^b2yk
zv_5Rp%MM0|Rp#~WGULL8nH-m5w1L@eiMG~GSizk_gXkgoywXU)S3F%NWU*IrSH}%s
z$qBKqQ~1rtUD2;U*#z^Bc6{QXpxETnDQ0V(ua5PHBIT%WHX&Iq*WF!&<Msq2XVbbZ
zPABx3JV%|_U!gA$!J5lmCR@_jDLUJ)y%VH-#orZSyIfDQVknqIdy<YL_j&;{4&jDo
zYft=@q3zn_I?4es{zu-0d_&Z`<#UA#yTTz%mFK&qC(mVgsMeNkl}5vI4X}U8$BV!Z
zDk&3@99bYb$A=4VhT_md%M>B^Htw2aG}$;>THb8auhF>mQaxn?#c8c@KV!Vnq1{jm
zLI*xE%$I}`51FF6YWNvGT|B$&%8{E5+tGL=k`7sI{co^Z!V_Q2ztc}MAsEq$g?fBK
ziyEMDdz9<<P>4k&Y&I>VuaDtAoAO1N>e|}?>>{H(m`|bLwAIWQQhojiM4y-OTCX~i
z3cPUnQ#Cg$xuQ?<`eb8lewKY}w2<ohR&=StWR)Hp_@HiFWo5Fy?Kmy0rZ0HUw}7SZ
zD{~wC?&W>ky<6i&r!D!>D4p}wMB?mXiYt+)Z67%TdJ<$&m?B^wSTS@;!TkYz;{zi!
z2dsVbwf;_ah~mThao}r<P0YT@`*@ppp<3_cC^0k98lPtXPzr|eIuAwc`#w`%y8s7(
ze{#?44ZZ%2GIzbW*-$%~wNK3PowIdtyolKlYFChR4_>JL=*?#Y)_Db}J=d+TPNuGy
zyWGbkP?{7r6QCco=a~`)NIEI=w9IwM`36rbBNoN#-c#FwMp7#K0jkDUVfLj0_qDM4
zX7Ek4w*Z4J_!}2o#r<fgEU(@pbz^?I;RdLxkZfnRCkJf?*-WhBc*yQy-{D2+&U_QL
zT@UV@1zZZ7#XxMYO=y9HR1z8^aveC>X5>&vRVke-!|BU2b)73mx0LS8onb8_6Z_oM
zq~21;{mY+7Pa7rZvE-&vo`!eO1Yk6)(<JU$E%oD(H0!C+k)siYwTJKC2<xIlzL?IS
zss)q%P(B9XmUwm}<@V+hH=-qC)8H@x1!qWS-JI~kU{N`dQ!Q^Sy<~+D+;+{oCieB*
zQPBZ^e}ZskGNr6eMAPujM3Jkn$V8a8z=Q3YoW5bOKIfA^Ax~|6s;HeM@PSlujCR{L
zd=`Oxw;296pBEbErZ-WhACP?<J9jy|tBfr~3@a8cN8l|K)hQ71oRya|)WN>MeER7I
z>2T(5I8l2ia1yw@BdQeaV`*bn{hd|6-d6AJQ@`~H`e4Wc3slY|(|6agRTjC~Tz4+n
zH#3WSau_w|WeYA9sIuIINUteQEL{MANE+?=`IdM(?c7CE?yx4ic3B21?)#{h;OmuG
zpff!Nmu}6$tLKcb!TxHLOWfOUby3qX`^?(V^=hQuI&H!NHb&47((O^geHf)TAq<Ze
ztM~ex$N^<WwOK$fS>e-TT5Q_UvCOm$sLR@-S@|Qg=k|T@wka2TTK5zK#(cpo$$G~x
zbF3zk3kJ-uu9AVRB{%CzLbHs4aq;PVA?5bx{b~#U#NAX_#+<@4pBfe3rtDb3p-3(X
z{VdzU5v>_0vL<@Q76GmPUd~h1JAs-(9~EG=v(qKj1NdeD1#Z*kV>f%HtbtzP;To7X
z^qR5n#c(=t`wEuXrgyIJ?_Y`Lw3r<{=`U8wAS=s)_0`{{ouwzTY<wT!ij7Ih5)N?5
z=Er@E%haUp$XAz2+@wY=Gmr*Wl{@Xj_uU~3*3ePLz-b-1I!uDi5;poNAhT0R#veHG
zgKm{*q~Uw>$%;o4GDC#HQ^(fmIbL-?y>ckXi)lMeR;IK4Buli5>i6erwAnn5$Diso
z3Mz0RvgP`FNc2=J1+6(cHJ2hGcf5{HYPi+RkLEpRsrk+4Lji%a$I+pt{em{*Z}Ce)
zj}|7mW%o%#I_<~=J(7`kg%oh$PrL;09|Z@+=vX0oqolNaC+@9PkMrEDUmXP>RWaj_
z+xDA$r^GbC^{d+3&ycFL>7>HSqoR5R!P_{SGP1W>r51N<sBRMI?pAdtlxUWk)Me!m
zwv+)QMj5-H=>lpu7k)5u!p2v?iU)}Ou7#YGhZ=!z*aI?cIp?dyvANbuS<SdGqO;*Y
zE7>M2PxM}x55;SJkR1cQtDcSOWW2AM=;o{U>92TZIVOe;(XEPnf)O!%={iZSxRr5B
z33*br64Da>o*0vN0^oL^{sHss(F?zFyLQdPh_HZydzkBFm;N^j!W`~2M7l$^DH=?S
zO5Xz{C5l*VCoPsO%^6k^I{(D7Y})BuK^7*rGF^Xupl5^8rMv$rbOn$>;HLdV3z);p
z-XX)TbwKRq{KB9(z*cjScQ&QqgbJdfRjHd*JiH=Cky}&Jf<}NV@#4jSre(qMczzDW
zg^Wq;QY}bgX{SR-aGiJMPK8Ukp*^o|*akOEC3rxkC<btr{WK2Y2G-ws<YH-`yWCN0
z?N~a!66#Qq^Ob;b(KHWTd^pKyFAwDd*|#HyHb;y5Xy4YKoJOcC3N$n?&ea!C#60}m
zwHaDSwK)*VCouKN-z5sspA{nruBRsVibpk-HstEnM*?g}PF2TFY>JS+6(;0_gkWl$
z?HeVnFnD@@i^t$cF-(BcqRM1#*!?Ix5OfSXw;QMVI?P?pBSl^2j-jS?_k_?bL!rbC
zM=ze2%2JLh81^WpGiHf0^Pn(PT*yXaf?TXdS(bcW5VWwbwp5|p`V$dLE7USKVex01
zw}z{;TGCJhh{t7vTfOQ|v@xxHEw~ophZU?Dj~Ra{a(j_fNVzAVBeO=;!qnk@$z*8;
z6Q9Ue_if$2fRRY=go-tWR#9FDG)GEXBAQO|U7z$l#>lhlHev4UxV-%-AFTT`{W38p
z_=d%rocCMrvn-%QJQHqiy4UB@1=Kuc=qC1@v{%*u_m$abYA)4o0C&S{W^w(0l`KU%
zM2dFI-e6d!H=a@*(Cy=3VQv44xF@&jWJQnqJ}O<I*Q$COeq)^Pz?4!!p)p!$_T7C}
z0rMOZW(^Gp#nzXodo&{rN(*S4E+er_V^dE58M=5x*@uE#=)d9C4eIeHMc3#EDp-&}
zArM2|-9@#l^t~&zpmEUKVtj8_WRKA86mt7n|Gu*v$iUloTx3wB?fKP>;X2%r_K$g~
z0x0E`$87dmJjbFL-9}WoLo{C~%HrQ>#SsW&Hti82>o*wY@sKR$w$~QZc@z!8O6#HJ
zBS9?AoFH+*+f0?80Kp+C)*{j;+4Koq9~Eu#WMB45-pez5X%3fXLAmlHDKtF=tBj4y
zRVLOFmYa#(1~bS>^fNlYd!kSmwA44-CkT?7?Gv!<hWdysbsE>i%>TjjMmV9I#hP(z
z&gsPd%4TWd$*!>J!fpoJ(N~bWt2`2~1342Cg$L7Wy0n*IZ1XWX_mt}ZzY$5d4poq(
z)Ccg(UA&mbI7+tDuYl3_)aTUB-0=!@r^LZ#Dk|>vCm4_nplkdydHfyEa1`ObSj6^y
z`?4U^MK!^YZZAd(jmCva<kcuzj=+rpXH>5L&czk8-PV_i$L`Sc>@kfBWvf=pab>I1
zhx3u=t-NbzFuQQjg6+$!VGcgTaq9xf);t|NPpa|u?d<74Ah_N$kbLt}`tBJ3SbGWu
zrf*%<ZDgTPveZT)77%A)?4v0~bJj*<yrA|YV6(wn;wzt|aBqQHk`b3B&JIy$MED$~
zOz@y~mMv{j8kqBj(Ee0BWRL2M2?RHrre1%l`l@sBIHSR+;iUFFuU?FAHs#umU}V1r
z>eK)32||h*oZqAsKm<W;Qb-O?n>~Dg;`Le0Vug9eQqv=a_lP!WA#MliX<;vm$#n+z
zJj>=Ra)y(y5hIOc2R{}v+Se3oVBK`0DAt^8lULpk`fRKEO8Ri5aXgXazEQtyUhYx?
z>-tl@p+}f!f3mUvs5v!iJ7g1Fb%7o&aOUV<Z&e_iAFIgQ;EJ^JSD=+tbFP1pyg{=@
znjVjuakV)0$2n_Rr;&~YO;z@ZH7wS5qkPFCqJ_>ykn-~>&qL(Ru0FtfxDpk-m>#RQ
z#%vZltd3T4_!Tk7nr!nLm(r$B2hyYwJR!2Xtf3E1)XSX#+xnJD`=zcKFCd#U^eCNT
zd8&j>n@=ecA$HxWA!H%VO|zR2%~B23Cz)U)lQ64N8_@k+pAEbIrpF{5?c5CpbOg24
zY@5mww=R5S)3GUDSF>q0f9`rnLb)J%*iLh4jJxS`6eWJ}J7uDiLUkaJ?{sMzJH^?3
zfeOt=jDfw}zh@-LF*X{Ra(jJpXx)CvK`Iy0yy#z<SSD94A{J_T1mv`>T>idC*BxNE
zIm;3n`b0qp0L)S6HLY6l(;~uHirl>k-D6O;9Tk-geneoq-Dr;$jEx0(Yf>eXA)rm{
zyN`h{i1OLGj9UGnx6lYLk?p0eY_XKbZ0`V&)4R+UC#y-%2?ZJw-V2m;%J^+$nepoM
z#&iPbYc(KnH5)Gat&G#ir7%%Dd?IEy!0W8&u{e3Uq)Eers8kdqS^p6CzF+2>y4pc}
z*Z06F4LKqhK@X9hSi%(A<2b&2g02^YMzF6o&f&7zKncNQOWth52>WxH?BHGl0g3(m
z&d-#3?}i_<%~oS@#Vl90t&0tl9|y|njaA*4{d&3i{$03OK}>QdH>>h}&Owrb%1@xH
zt^Ijl;$eA0BJKU+W*1t0!g!--aozXD!*m<YL}r9&B9WeSqwtdHvv#*7FY0^Pmfl3R
zSvc@~<w>enF=Un{`UKQ0N5vkTJn8y@pq3Zpp(hFdjdK~4>E?3Gu#SF08%Z6(Mln-e
z!z#1H95XA4;c7^=pDN>*W7hQtd$8;ygIDYPT5c?*-?#RJseH^-6lk_M&QOQwR@hp3
zwt0&Hg!g5CZ{ouFta?PyOrRdS;T8T>9bZCmEPq}2K4AKOMi*u<>54N<klWV?{GyI&
zN$97}pzd#yjgBT8Os*DBiQCOM>3dMHRR?ICz%Va}{vl_zWT5k2ah5gNm6jOgRL-Hi
ze1D&PcXq{0vg?IQ#8?FGduAf->cSfG^2%?bpW#CLTs%1a<8hd5i|y)8(k??$rs!px
z9}F4ntBfU0g{(Gu+l6t+&C)2cATeRA{Ni{^SSR0Up4d|5(-<z~;63XxLHR3}6JqB^
z*G9-)r%;S#5GzY<I`0bSd&Wt<LS=XMj|itQ=LMMXl2$|Y=^_XD(ZqD3%<o+v1>9Gx
z7CHaG(_~!$I-dVGH%`CYyMZ4pHAcyuF`wv?2+S^+W(7^Bsjtv;=whaN-NRO}50;nj
zZtECK!s~yR<=qq<lf+QUdPkatkFuHI<j=9rc0m|x?<?u&cI)%*EU{9yr^{@XPXKWx
z`B7XCCh&}YyGvEcplotl0i&JcvT>Q@oP|%b-H&5q0u9gXlQm@HPCuaNjtcKy_qSN-
zq}!<w>bo7eSjqBWp#?0qHr4c_JvIGL&KA=`bR3qEML^C4p=84M2fsV~>}|@4Y^OV)
zDJP5npxD3$^AO$$8N2o+`de--U9Z?Ty-C)&3h5kEEN%cvb^(pe@!cG1ix*^oz5CuM
z?%}%)ROUYF9&oRcZJRwA0VFoq=-;QDvp0y_5#PNeoEN9k&oZZtv>HnEPyZD!qL%p@
zd>SMlnGi`}CfZ-ZB@y*<ce=^pInDg;A8Vi0qu*&F4Vk5)2W4v{egL<|FkepkTkEu(
zF{{#rqi!(NXZu_)_VrH924siWx5=udcfzm&<+MX(I;^<}a4x3#Mt}p+kWeWsJEr{Z
zXZSa+xM*NsT(`uLWJv`h?>Q-wAnDD<q3OQd5vN!H<D|ID6>s|9G1Z@l>Vcx&#>;TX
zVx`E%T!_kOGT%}sNlnYPh2n4Y;74Ts3uLw+0{p>>JsWHx)!<G%9Jud!N$Ot0XrwJE
zzbxdj!X>LYFLCb`pv%!R%`_?miLqy<D1#nN0qs^XtB1M&Y{~_<9M}cF*Iv^AV#N&4
zqTQ#ic}qB7ey<k>xY1=Ek@%&pDN58NQ2Iz?nTh9*fm$}QtY)-k9DIy;gu;8Syc{0f
z&wQp`ENEjtL2Ew1ZW%nQYKAcz|HVs1m!>!8HeEpyFmL?~S>2w-yC#dw$&DG8U~hft
zuO9Q8JqVwMP@D(kfV;C%KvT4Lc}H3m**zp0Y!oggg!Nme!9kcXb+zfvp~CUmquMM$
z+#(9%T0~c~={sgUQo;0Cd>mpGJ#WOQEJs$)2ypGki$>y1Dt3Cb^;@oDxftH7EjeqX
zp_u58$wvO*`Pu`R2MX=*Ot*`SccZaL3Ddye))=OL)0qw7)F|hu)I^g2q|=S#Ij(S4
z8T(XpWJHE^nd+_`?%LC8$$j?d3ATB4AT@jwJUsVid-{A~VUYYKR@83Bz~NV*8J&Mi
zw9+CNV=?(uRw9_;-3G&cGIrE)xGT4hHqlId+fxLu-<z}@Sn^-Aqp@3BBPdfzM!c5-
z`{tM1LH+_=%_das3H=|Fivf>K;reFKCWB7OTHObhulid|cI{wa^yM^E$mQj}p*8)&
zbjfNg?CQnLy+dHT>O+W)!!MZk(Xb>#k9v0faRd<FS|<zgsOLlLIt|aLtbUAqchKkk
z(yj+7drrjj`P&2<btTU&1x8Ykb-?MOQsvGg9J-qD7~JR@athXu#=fV)^y{*_B%Np)
z5=_O;v{O)PS<;x$pd)Tx#`i{-&yE}+5TlCfxTnzqG2rfJUY$YL1+sbK{QHsilQC|t
z*wx~1j;sp6;lqSaEiW@$GxHwhcs3ZSH0EFs=4^pssfvefhc>I^SmL7nlMEAjR)nj?
zGQOMDdZMm}LGCBy_cCVq7re!tF(fWjq+S=EMeRl_VF2Y{N1Y%}J9v2rw<z}GI7KSU
z8yV3@<gUVs401tE>w*|>^J+5DMGAp}q=+Nlu@2P_R4v^Y<uJgqT=tr!=xUpNdtmC0
z_U><d%hr_$Mmj*iz^Zzk$@tcJk}22sz#CyV;Hrc%E}T~;Q`k3g6C;NwBtd`DgbqW}
z^7+avfpRja_|VQ&fiQ-)=T8k6ocvKC{bK1ZY`c0*69-Tf!|TN#_;eCLwIA|e)$<mx
z+`XG-&szvwe~P6iI?WlYryS&f2X_wcjLGiaWyhr(vuf`4=G-+w3mc~GBOFO2na|x|
zu*5#UHHo0`TZJ%@M!cdz+!JGAtBKNM!^OQ050-Bz=b5S^nemw#g;d&Fc10zohGjbP
z!X!_6@<?_7-k^+5tPS6%QrJ&M<K@Kas0A_$GrFyLzcRn59xAn5?P^Y!Tf<fm|Fh^|
zn3%v^`=#>COaE~B;QEvM0a0zR!)Nl^PucGxPe=mM1o7VA(*-Ye6scxSM@Hxr*Vp02
z7;aH2+{jRc$V+qTb(n-dt?kKP!V3nBSUU4E28_~R2YXL)#gotlf0Zq!&a5xKcMNM&
zy>`xAqXa(fFFyIo%<afYh!y{vN8q7KCJ=p@%i0vXFjFsE5alI!`0|yHDxfG2RtR{0
ztTv-SKiVJvh$FCT>ELkGj?bfe%vnxKELYd;N5DPamgm}U9NY+XX$R!96HIvTD~Qd@
zkM-G08&EjPB^d0y46DZ?@Q#>x!ouEZLIXbwKGu{1Uk9AvtqO#|ui6+xn%LPaYaE}y
zq!5Ejt*47y|1J|S!2#(^1~XFHRtH3Rym|@nJpc7#PZd(ZyuZPKOHj2iI~RaP<Yej4
zxPV2cZW)Gi2=)5hH?idIiMM<@YdF(V$FdWT{ncvG6a_SoaZ#Rxi>FeOMuTx|Nq;<c
z|6mt(>p810gg-J*ug~A>HjEGJxc#Av$NxR4LCAhr8x`rp1NnA*_Bo07*G#*HKh{T4
z$cyoRF~+&wRIW@K8M23L<L(fX^<?QYZVw&#v`E7_`{E07^Rw?bhckK$pbS|<=gWb5
z<gF?IUdaEhzhfZ$dG4BLXlUWcl)L^4c9%oERgKRpxhbteiA;~Cs&mPzT~&rYc~;6<
zzP-OVK9W?u!LZo4r+%C(Kh<biMX&v*_%o-}Y?K&9a9^E>GZWiudtv?sP(RU$!Hhuv
zuhUm|uf7qgfTLV_m-_~=XX|1fft3rHZ2Kx<$*$OUrIqzfYliNuKmSH+p*Z@qpNB3V
zDb~#I55dHDxiZ@Zg$83Q9h;-$=E6<rKTQioQNx4*1U|E9=i{epduv8jRpBZQc9>l3
zbTB+3-6&1HpVwHmO)4nIZA*PMcetgJoz>!7qy0H0|2_Ovj#0txSJ-_mqWDz441(Pb
zSj0D~P?0LJZWkPT*vTLK!HGghR?5uq6+S^Wm6GWM)%*u4sJYQcx~gv>ZFG(y^;B42
z?Sj1mZdRzE#<`PW0`b=~UTxWfUi3@hdGNl*4r*rciwxr$aD9TB<?qG?#;C)`Bks2(
z(`hUC1`;%*DEfHlOsk(3a|v27r`2x$yJxGvl?C_{5s5+#A@1JL(+sPA?i(?I2gYsT
z{%{Zg71#-R)iJv|T+i>ZZLvEU7xSg>Z*<l(C{EcSoo=(o{pUw!-Ui`+`gTzms)oW)
z)tlD4`CY<YPT}`4bOKs1hGBx~<SN!x`l7WbgwAv}Y2<0E^IgFiLj&$~aXUsYdAqw>
zQ30fuhPrC1?p5#M*-_eh_jc79Gx!3}^pf&gIf^$DyCWLs`dH>;Y$SH;V|Qb`?ImCy
z1?wm>$)cJe;~D;jF$(4B)t6#aL5TeX8_daMc$f{#K~X{I4xhY_NfrEdlOy6%D6m?d
z&rZ|OmtLP3nYw%fvD&+@m96)wO5j+y8U?T!xchFSx3+CsGGF){>rQ+{<c<2BGYD!_
z(zaeLh7#F{rjppO4>!l|jOxSj-HZ3A6xhrc*SO;dLIz?S2aCW47}0(cv(phrT;@JM
zd&QOpT+ATha8X&jF5IQ%pAjhMN2Bj`ok&5X^+MHH56E`S*x4`IZCp^;y<Td3nzixn
zl_Bp?<ZbKi{C?chp#%6Yi8Mu;#r(tTtIj1PEN~lCFr<~LURCk#`e)u3iKeR#gQ5%2
zh;~zb!N_`$w{v>9XNK4z-&U}tv29<*;qpAAfW*Q)bsw7K)b}q-nI5lS#J{v57_6-R
zK4tpCJK1i3y7&|(cSr7aMSHmuj`3VVSf^R@EgRcZem6rfo}GBXMJzEfrc*Imb310J
zEIMn~H|#YUa@-=OhU?gYpEcWd-u{x(m~8v+U1)JVtG+pLV5hGR&wLjVmIgcW9x#ol
zv@adMzCv`S>@54*pAOwEFVq1g?A^F8#bU}{;rNtbTTJHBcleZ0%<q*NE)`57U^!WS
zIU)3ht=zw^x)-y~f`C|bh_LC+;R~p8skEEzYRbI_L_uQA#Ed^SkSS)TXPp{8792L4
zTQIclCseHfS>;x`?-^nM;xZh&*Zk_8`cia|af-_Hh_{-Y3pti5Lhx8}pe&!CJ-k}!
zkb)~WMx}e$mC9DQ<JgfGA>5I5)=4}bCTe0KMIp|3<`U9>M7}elP(pPO2{fwOQuC<V
ziaqY<@!!89Pb~NOLmdUQxAn{6adzWfz1!#;;H0guB4rbhLe%#-nt6jZ6U;<Pj4y{p
za4&M00`r8}*rQ+hbQ2J8Mv#y1+ig9j$b_JbnlCFP|IZ)4t+Ts&;m&Fcf|1WAkwt6E
z3zhAzutaTPX;{lie@1i@%sx%he~@io6dbh1gA8&U%!<Pq_THNLyf5MIw;C%A{$d8d
zvq_}Xmsq-JHC*^(XA|jL@aR76dW#F1pDD*XxfPx1#WydR$veb0D~60a8MzqFx-nV%
z#DA3NU(X9erES+tF<*h}Sqd4noetIJP($p7{ffHb*kV8YtfTQ1s%5kob!Toegrk20
z^=W8wE*fg8@15{WnmpWynz&P`Nugk)U%~0K8y*Jw`+qmOY}|8N!*Y)ZKi%W<(brqS
z-c%e%zqB;&>{()CmRRhzH<0@s%KXEJnp1F91Is;q@q9MTTmP@e3-ODjebLXG7QQfh
zGvU_huTOV`{1DCcpe#+Qrf-bnji^q50UEPO!Wj2IvIO)OGWoEg!<oH|z;8~H(2>H_
zx7{5Kz<Q7F49H@NTgwt;f!5ynlK`x-A=ILf()1>d-hY4g&mlJfsl?^}ar!bc;?QJu
z0$=+RR5XRK<@#U~4|v~r+BZSi4H}6m+QGi8T0`Y~c&zD2etd5;^ihD&T}t#2>9}R*
zjN(t54dh{`Ha5ZO?g(R%m-=nVKCKBH`9y9@r=0Gh!*wZATTQn!$_(>tRK|XgyN>f*
zmZ3BExD43-=50P=$)IIU>8Amk5JOA4Bi>b4hPR*np8hf5V?JdO1&cY<=j~4thg-8|
zfy34WCig6&2P7BI{UmiwONT!y+~#IGvN8>ZO1QN<S9}K@Iaj)0uQjYK-|eZ*9W@v%
z{4sHoT{KNcc1rGx-W4`nX9I^D>o*|fMEu>s`U0w`{#ic%d;t*Uq!yQi7ugSRQpN<m
ztLQn1dQUKUjQ#;=FWwqC&fq^*C7wZtU(GQpyXt^1Qn6&+BmCg_c`n-8HY2|K;zM#k
z4UEShdDNc)iveb;27fbHokKc?TX_4kjHI7<mH0KTg&3BLj(?68zb8*+W|<Os+(J#O
zHc_!)f12S;f+&<crFR35(4p82YE-(M7jJJ|2XWiJgbF0=l^#kbaH<;sftADKy$!Rx
zsH9S{`)l&Q%a7Jwz=w?<VJz_AVBaj44)qXo<3;OmAE^=z|MiE8?mRpLPzXF-u0FgE
z1@!yV1qRDUcu#$gQ{5tjc%TfC<JOf$%~}g&(%2t)(jOzeIzJw60lKmEO96NMYaQDj
zSBF}7gPd&$y6>O|BrylG01DPqN-p*D^5S_{W9=loE1N#R$fDh9krmE}vYW?dtmBQJ
ze%i|4X~vHV&^aC+%)pyLVH+^%xHxHqNq?f00AZS>fW!n5!n8jM2eCAgF2TD5IY>Tq
zh`p>Ay>h~70C`sTl3(~x>o0arL<M`=pUxywq_yT}nquIB6&8|b589=Vk11lxTaxeR
z8k5}|4rAgPj%-Jkt}RLxjut4?(u|W%_np=b5Cj<xOID7VDeZ4#2SzAx8UX&(9ho~x
zp0QWS5?}<>V{Lge36^;cB^>dwhg^!lmXTrJNW(9(UQ1SOi=tx34t}k@1Bn!k#~Z_G
z{)nx&;XBd@K)Yjx9AI@PwsUMe2H4*wZO-7xyVP_o?w8{BkL8+Xw~{0crre+V6R?$J
zt=uMj8Bx@5)FK%!ZRak!%aB?u%Jj@A`ZPz~-0t4FtDesR>Ab%pQc?x*zMpm67jKVf
zkT#&ZMHst#EN}LJ+Pn!yYQr5C?;+i;#<ynuV0e>T5%oN1Lc>UQ4Rc;dboWd#ikeM-
z-uB)&252v#@&LYo9x017h64od8{MUA<^uH_0E-JzK!)_o`$p#mF$astV3<7{;ns})
zo%1rV-A=3iYBdD~Napw#i+*DFY3-mJ=w+jOc)0h~UM#$7PZ);;phYu&jvVA^02<tq
zXIk~c4nJ%KgRV9uk-~FKK5<V4y;`iM8}DkbH~bC{=3Ok7A=ILN9^Rl6=Y5Dj*ly|2
z5zOBqFkzntSP*D*rJZ271a8qd3LgAxsm22Rhw5NF0+|tzG`@-@L<<aO$+52v<?YY-
z$3is}P(>U8+AA82Ye`Dp$nARt51su-X%DJ^fj7n|sgnOeUMJQ6Pw{UugO3|)V-*Vw
zB(_hVl8Mp+Ugmf@8RhV}sA4>q`45LxWJeBjKg)Ab-hsCt<v8C-SZ%QkmlQDlN6Atk
zZFGP%{|}8ECO1_2gl>~p`Eb^*W@$0WQ_#`+)Q*6~=esbK%v*ydC&j?g_qy%J?G_%o
z5RmH#4lyN{?q+o?3E`imwmY2Xwue$9r)0g6?=0I|GH<W0P^IjGUuQ_ZoGR5y{PvCX
zj+_65qE@95o9?gAiGv9*Jft+-*SFQ5R>D5C=sf1os*UJpFxa1ORXF-CnVc(+uhfZg
z{m9Co*{49GL_?k5VmKe3p=nyKSEFjJQTd`%R`!Pa;XgMIo$Rd<#(x>t<AL41;fOOb
z>Pjqi&xv;~%E~|d<VeqLW3^e>dEXM07v2NqXhg~m9c#?`xvww6vz`mu8;Loyz6uHs
zX0e%u{xV$y`TC0@BYdvg4>vL)3-7`RDY2~nYJ3Lcxl7;*3jN!A10M^AP7+F4^2l5|
zvm~0F-^I|)Nv`_bT+jS+Jf#pLf6UY#L-(>l*ycrbb@lk^xd;op=-Wh2eWo;F`>C$F
zsw&^{B75n9B#~I8uvghS^t;^GC*14DHqgf7UuIj}fGo!~Hulw7CJxPCAufB%a&s{5
zr!V6t+)(_R;||;JIVvv0k-~3C`omMAsV8!_(fNmvbDxrn{N4;fpqzs0@6|lEjjNJ~
z=MSGgtvy#NB<Nb+V>wX9`F|?VI-*rplt0H~HOH4L(-b8bY^T~p$l_||JD7T|ciy@p
zmwk%bDWb}aAgV7C+Zjb)l!v@KIJ9NnnyL=i884W)a3B$IJQ2L(e#ZX+m9)#VvsjWh
z-NAp*ZMT$W{jR1kTEcIIny|K27(DmF*ykk2?-HeK8Tj?|<)bb^OBcx-6N~cI^L#SP
zCHF(alYaQa@3mMdc9EIZcYn1O%U<>Yla<<AK^Bw`;K>ybmxRq+Zj;3HftZ!Mf(?g3
zaW)d@T)#MVPYf8&=Xg*YAnPS>TqD9WAP$Tuw&eIWb1AY;9Kz5}ceoSw9~6P(f`K;N
zq%VzXi)|Ncb??C6YsSX(lnDB1|4?<IQY+qROzP^ky0xC6BvLGm;;baDi04GKlM|yk
zhQeO^StqMFhl+(!)CsIQ9Cs4Wo_$!R<<$WgQn9Mg2z^7TF7mU~P!fY9oYPmAcDs$;
zxi>U4#v4Nk=eUCo(PkuO@oxIpPUf`$%dCW#`g#|L1)fp8y~Q27JBiA1G6HEQ4br5u
zorl}!wEI|(um@3l@qD*(ntARR#WI8HASu?zsn&1J8pj>-m;&RUla@SR!y%@h)ceXo
zO?=1t|27hVlZq>;1U-z;ch7f~_{}a1e6dzlglsH{Dixm&+JHnAkLogc-d_JQU!UBW
zIO!U)e|wj<XSqt=_B3n_=X8Cz{9xHd{pfF;xWH3W86!bvH#F0}c#S0OH@HDKq1n~i
zis?y=bWe3y<(Y>nr2BgWsh=434AZXV8!?{U*&flY>T#;bY4{EP^o5z^h~p|n*s5QD
zh2c%(TgxU{0irG`D$A(5lLe}Q-0`JCa{}u7)5;r9MP$uKyz>hV^vner+%2i)vAdX=
z83uG*YdFJIjz;MRF-_c_3kK2RSaR363caQue{)R`mcHJ(URd5&Mka3^BEI@N#@0}|
zrthG14F!ca_sa?NBD=@&lqgfop^63`50Y2Pm$^q~ibtz(zSOQ9qnWtcEL@n~ZNHVQ
zeD}X<OBoAr_m|08O}#Iz<kLreJn!&9<C8mj^xs}u5V!A7j8Cx~WhqWf5sAoJl75vu
z{j6=}xX1O&uKP{kG*yg3$QKO-rowLj-Qw4lRv9R9pp}`Shse#P^hSjnSkkYPXgN#V
zRnOms&<+Cwqqd45RY$kx^OzeGJJ9<gC;;D1k%EWYCZ2+ZV#9%C)qtg7K(oL}KBc7M
zc>k}0)O^p4LodHdqf$$L6K0%$r-uT9ElUNp*OQOhWG_s%ybDb4y!3dtT3)KRB+~)?
z4C-wcxStLtxzZQ?K5Q2NDIL0Fzm1()p7d|bY<GC~HAG(RBU|8M*hB7+FDmTzK^}{#
z=Z)uUU6*@C6vg(%A;qvyyIw7Vf6f&*ngpw6N)+6Qxri>_CC{Mxw<H}+IMyd`zM$<6
z+w+t72AsNCN{)F^u>Qt=epT{+w^aF9fq@J}6E+lZ<dO4_W$CL~0qdGWy)TiGaU*Rv
zszZ-|xO61VM0E(wkjf4IwUsZm%g6eOr7odydUCeE*|LVXqG=T$vjp61hGz+8*I0}U
z#>GmOg&0tuJ&p_vME`)w@4h2WWeX1Tc@cbbnb1T)F{suaGdZ$1Sy2-E=C7o#<$e?L
zLul_&&aAVVG*e7ktn_|m8{Wk?iStDzvL{cTN7F8s<+riaF_w88=bl_m@L1;PT^7;L
z93D$np<G0XbElg&o%0a;)|_sqd&f5C%|&2)42AB3R)f-Kjrdd1UcapOaItRqsbVR&
zb0U;~B}0nee)ZEeN>?`!XUH(#)i;vBm|G&Q<utu`jd6gI=_Dz>Ea=se!@JAo5HXuJ
z(5*Nr+yKLBg<~3O3v`}sAG183C9l_3%@SiCtx7N4o%$(cW4@j3m$cqLRVCp)=%L1o
z+I&sxrH^9NB#6bzyH?xwzL+wCj&DrdrT-l$t8f{dbD~i{OldOQZl&V9NH*ovpLMM@
z=0h*qqv_f78xBYB$ZkIMXJ=epH;kPuepGw=`g4fS!$jrD8F{QV7s5Z@o33PW6_x%?
zu;|!r{J-m~8x1h7$|lA)UY@7+Ug5>%_t&UdH9dL)294-vKT)ID8(}tu`A;O4pG-uk
zpX@4)43swrCQ5iZ?M!TfV20Uumh+8)iv~sY_h)3&B8my@71E`XRepw6V@Qftij$d;
z0kR)_ua`s;_$kfllW5(WPgNP0X3N#L(!%fEIkVkM@7q)S*k!uRf(!IRU7SwNsN3m2
zG0}Cg_sgW>A8_}}P*Ie{@F^=Yl9$G)2VYPURse|j`bm(VaJ=4VR?)4wVIJ@!o7T|1
z$6nY4zTl3L8FI9_*^p?bX#Z|umM^nxFrB@G!N)1+=9ixqb$_jY-dbOd!EtFJhy7NY
z<;=$Swmc|rJ6l)S9BD~?earC6;h5iQp*hqCrGB9<3yBt8j$u82Jp0(~?S{YVT$@?Z
z8RE80(0=}P;Ycc%u@C?2#oZ>Hu2`jkXE`&R=xcpy-_RNSa)r1u-k$9(C{;y%y6KUg
zbj-~oPiV?|6Ez*V2mmfJxi3$!$co8}g-x>%;eC^tXF|*It<eIUg+*&|*(E>_{yH};
z7eCV9r)FKLvbEve>}^-`dm`DXd9TO~AM_XJHJV*~^%}_g6B1qfaheBvq~9ox7}+bW
z20c3G8!+|-8f>bjF)}gj{x+le_n6~(N%H^Ke*yeYt$iZ~2K*<vou5{g6wUEn()emy
z_(r*i*REQdOy@ce3uCw54ahZj@nClnayiv!%pNaM8SkJ6cWwXh-osdnBf7esP4&BQ
zx!&(tX|}hqTbV!bHwL%Qqfsi%?Q;V5JQ>H8&VESg$L+!0y34E6<MAEDg*NFa?f+rz
zt;3>RxA$>DKv0oV5Rj0RmX-$TR=PVyx;q6yx`(czL+NhmuAxEc9J*)tzMOORIqtLF
z=kxpHcU@fY&M@=5>#4Qwb+7fT7qaDhU>HraDu5p&X|Uwmag^TK>){>;m3<kj`8+T`
zAmE0&^9Yw+{CVK{zD12^&Fg{6AaeXe(<Hrwj3L<2Nk5FSN=LXp6j~~)WC|+PsgUD-
zWy$FwjK02xS1%2mF{u)Kyrk~G%0o)}&YWOSVM*{y)E4W80%^Pk>zP3#aH2EwlOF5=
zdX$&vH3eoMI5%HlY>i*uVg9X^Cdi(iQDy0I$9enW{%PS0J|~$3#SJ2F!0wDaL3p7X
zYK;P9)TgI}Q4LP+7f1q#^dUIvF}iUga6X$F^vcZDdb(EKz|dfA<VVNsK7bV}oz$bB
zTt@#M|3s7C1A~}Xy69v}u*;=WZ4`ksftM>~-Y0G-0s8X!;}GuZmX4MCNCs~l8LSt1
z(@Ze~xz2`)tPAB+cx4}T>iytz{5c;*E`GB0(UgoVM<wjTthYyb!Q2Xl`^~cG5sm~q
z;<r_K0?!k%<;8|s*XE_8E;^=d!)-n1g)4OIvgQO7|7^0ulFH|lsP1qOwNZmcVzH}j
zl!E56KtcRHws!s(2RemeBxHf#ZMr`$)(_TI#@E691*V{xXo1!b8FlNVh(NeowjGbK
zNqsBD?^)hM3DosI&$hxSHyWZ(_k^W#51k7YC>G@|M*fhCBY)$6@A3Wji5?#!(O$a7
zh@GA?7F$XQSId<USeZ8d9xM4uQ+;)~qy^5I2Ecb<L-(4fg2|sc@6VP%nD7b|CqF2a
zkZIOfCd5l&qS$ZR)be`{q7`ezNtKIO9t1T#lhQ193fmr{gYBpc08}MaNiB;<rv!dJ
z|D(xb$!sJi*BB3^G3s>H6PglCv#H7`9g$8(5094b%!XYsO5kWSIdFJ5+Rj)?8WO}U
z9m`#KwD^D|Vbt)pk#>pC{%8A=G_}o*QozMkgM)4i<dY`hz<Nc=09Za<PP0VoTce7o
z*ZOx=<C~=z#y9fLKT-#o_{jmUsR^l2xuDot^<`kV&rRDk^!-xpje4_^I0<)G!7XK+
z;0uDG;ij8<cs%K%aLmmhM0aZGStnM=T~yj(_1g-@-CF!jeT`OK#Ocm2vbB#)<;KJb
z<dP2>oUS6qj@)j3FuJAQGzX<el6b*oJrRHA%x5)Y1<Jy9rmRnp4yVbrS7k(UT6OYg
zC%z1~P0OT=iFKHo5W8hH07WmfxE*)(D!NR2MMx(-gy}(J_8o396P%qguZEmc_+6l~
zrzHhl+r{ISY1S11`71bsD|CmMf?hG-a}w+KF^ITcV!a>bCy(PY{2H*{`(u2usyb2$
z^d&reY6+)t%GT%tuynohqy_a6BOjr|bb}@yK~I<P|HilWEfOLH99{1R3uuo*DDfH6
zJ<Cgs-&oDJe8t0z6tceOB(PC+i!=sEcO#E$se^`~G;nw;6K@4z4IqJxjx{{xgPN`%
z;(Z*nj)S!J*Y6}2s2EV|7(eML7>9pZOn4jZBuQ$CB~iFfPFa0E!fV_RS$zchM)_9=
z?^`KHs@N5Z7OjU9*yd-+K<?Y|g%dtoQMbl=i*`V00I#TL{Fr3`zi1i8&H>wG`fVpG
zLMdFj2>+vye^tW2Uf1fN0u4Z<<yeS-q4__5R1lwjR{wVJ^7p{)Pt-{3>02MfZ#$IK
zpeO&g7^Dbv2wuViA(WQ<^H@%=EX7j3{eFA?Iyk=l6p_pnBYDyfJ3YvxcyOg~(PVj|
zjAeemTz_4|r1+>WPzBb<@rXg2I9LpSlKXE8z2q1JT?ent8_xgV&HEsEU@u1n^J9%7
zqUCrYT5#;ec8JSggqk(abLD)v#OB`v{_($WswEE;pJ_<58;_1pOnk21Y*!^xv_zm>
zByqMoLtib@9`WMYG=tJtpHo;IZ)jLp%%EnC<XXsDStnt=tlzx=ee@5?Qte%zRF4zN
z&dsU844s|d``h<^jODy&aZMO2-V#8Y-$WV`>6YBBbLj=q^iYTN?wm>X_kHr1%|`y4
z`SPul^bx1Z9rQS+n;IP*Jz6##Hq)O-aeV|n&X$)nGRm3Ut3M?)Zp#8sIadcYI0f|{
z=z3K&Nu4~_e{wq`&=CCMxa}Fv=g`pTJsu~WZvwq*ZKI#fTn*=s`p-&df)p9&7>J_p
zq0Ory!PP5Ny;52R%S4>7%`<h+%z}TXfPfh#wZzT{RGS^(Y%w6Jwr(-%i4@{?-hL(I
z>#K2}{?#jqp;R8~iVcRyPj@H$a0kIAr-f)YbKc7tp@afL7BLGm^<X%k<5j2(aFYI@
zRI&T)2qsT%1nU}9sCJ+!a91o5fu{<1>#Q?rkR9XF1LX_|0LP9~HA2wCqp?xoK)65!
zTpmjcatoIVnCd!iVTei<m+PN%R!W%tZZCbYRdF;EDqGHXQ`zXCDO#XTUo%BP$l}-(
z+n21IW~rj%rQN7#V#!Bg9idAJtt=`Pvf_48SZXLZGgnkDd^)t{)oB6PIVF*07o*U}
zpmH6^_2<MluGx;y3Y1<4d9a#(smxb;7qT`)CcrSy=qSA!#ijWKZT7L5jbo{%LVLJq
z&(G8!V=cn6+QX(++^;%JKE`6ZmiILjYWKXjSsKZeD3ys8T_ESZfPLui!!BsQHrqzo
z8m}&-pT#O&8O=0d#z-AEH8h?+kuBdlpfOhlM+P97MDi3qi^5NSvdK{>`rYqH!hh_l
zt{aQ#H}>Ifdg8F2zqT!@EYcC7Eo8^*ew^I=emj1E&T%5CKg=xur4!MHTLJcWFmN*7
zu6rTXcv-x|$az{Pb+!c#q6eJoepY#>xL`$iTv&3o%PT>(shTBHb4Ya+aL`tn|6)@S
zX4Sf!8O<v0bcdpg0X}iI`a|ZTY7~J~qRFxKLZB?mSwzd)j|clP{y|UNZ#KRIe)+<I
zE`>!rz0~KKAKNIq<ZP%-#1?8|#HG3#Znxjw&g~yu%2c7Isi#@%2+ewO2#3?imIpN_
z)7|Hp8tYEnd;euQf}NK9vLe9jM<R|$Ft57NWSSw1+ZH3NMsH4^rZjC7*w{Hbh*46l
z>?cd;M*|FNYnjQ?lKq+E4o0T0eoSR5nx3*F>0ir>&<ITkaoMm)1v-|}MR*9vTQSC|
z&Z;ueV#bSir{bV?20GPC4t1r)kl=lkkK8N?lIxe6<R@)xQTepxJi0wSWlQH|(Wcg*
z&$_xcM<?mKi@)ZB-Ph5`sUP-`N#W6gw`RFw{2q59Y?H^U$|Luu4H>Q26|6#RZcX6#
zdOlJEP3cvn_BKW$1>srx$om)Emi~egf$Y<SlQ%VCS7MYlM0q^g^$tf@{Y*Wq@(yvX
zkMQ~{_;g}OS}wKVAYNH-y4@XUVE<@#cO?~Gfaz;YCn7#4EwNC7Y$&97fwViEB%$g0
zNsr}V^0p~BE*GmAEuNV|<aXu;h&V6o%}M#*WRB(Nd$vV|vC+uuMPR$7@!N~hD!*bH
z&mC5}tWybmvYl{*plg6S8GEKuMaBg-TBJYPUn;6P>)y{c%_+i;Zkt!l3()wwNX}<n
zMjytXNO3B?5z}@)5znjcM=5;e5Y1`vnYwe?=P}Fqsfxnkpa7*5!)K=5NwM-kB)7$5
zKVZo^V&}i7NU(Y!Vn^$%L^b2GoCEpnRIDu17ibcbRmUQI{1Dk_p&93Bqma*z5#C5Y
z?WH!gC%}j$wfXF6q|T%7Uh0+FQnX>rl|+jJmFN#DQPlXV=pN>_es@~KprjY(@jF|$
z0&`WbjnG^Q5j8ybS}*3k-Z6m5mNPt%?{(j^a5+vI{=JD=PQo$M&Cd6@-E?Jmx-<K=
zGE|AsTeaCUD8QuOWpKr*giO$Px{A#ESvxw002z-nGzzE)Ahk1Rt&AA0ZYP4)TBuS0
zFc<UmcQk&5X*P2AtD!U=-R^v&;GYWlf?f;~9sYRrKoOL(*4BH$pFhVAfLMEhN>7#A
zs7-nw;j-ymnohg34Cp(MaYO>ksN0-3zSGlcuGX!3=8KiVGU@D^%@;<WhnAjVTs*wr
z8fCH-ckeuadx~B>msGue=d(kBs+7(AOiWmRUyXfDJ~=L4|I#pfO<=4%gAtQ=MM-DD
z_rrEBR`tC*cp<n==5zJre&*ET3f6W{2R(M;%cd86I3?*Tn{Rbd-ZG$;iaA-3jjU^w
zAAg=NL)vzxLr98F?N2mrsKP_QA46-_MP0ejR7P80y0nP%!gXiVu}J)Z(p|;)UYw=6
zR6)%m_XmFE7-r4O^Qm~3$#c=Jl#XBh*Iyx$#3a&w{RQYVF?qt`LHlc?r^p5c^|d<c
zt3&;+muof5N0T)jl%7{73P37)0f55!uMR58n&aLZ-p1ZL4g0o{=B1S(n+u0Pw;@I3
zOil23qzA}SB}tQD!)u<^f^L#1Rk!oWGeR2u*}a;@tg4}qr!*AKH5PQa-UlnGaQ{jH
z$}f0L<pCpAOGpQ)uTk5sFbK$CS7%XLT(>+VQ`YjO<)WzVdV!11F>Fe+dRvpUPAlb^
z8uqJP;4oV?BExFdo6trZ3uH?s#dkjQ%pcvzemrmH5)nqEh;%|-Zt&IiPGlPAB#zwQ
zCiJ~f!9!AyKu>2fJ~qWM)90Ja(egtQ5`MaFQ1P-xnVz(%yCjlvX(*0QoIEG~iuh$^
z=fMWY^kwY(OWm?tfo-6Y37f=AAOC|QnKD~D=}W}zi|;ObNK35ln+>jG7V}aJH`^Ib
ziVMmW`Pij<(Ovhc>Dt^I;qd23CTxGBl4j8aU!hnsn-XzUb#qd#B>XGIW+j?E^w$I%
z`E*H@mMu`K;OfkCnn=!sQ)35*N~3pvWj;OuNAkQFPo7lQx7Bp&Ee|n|pneHc6jwmj
zQIiP`4u0>2@&N&5clySk$Sh+thu+tFqbwGsiuUrc5&Y=X&cc7feE=`^Nw&cX(p#qP
z<p#l#0UO-*Oj$(BC-iCKcdA|%@j6^wDzD76pVx7oX1lh5U%abxi#x&%TGnP842sJw
zm|LFNVC6IynzrAb3wWKEWk9Lf6(C+n#_OEyZyngC#272g?ZqX{4PhvNOKqA~+nhXt
z1Jm<cIBp}01|U}|(A&m-G9cMN2K}2wlCUa`jrCh5>tQU08q$Gas>+@h`p?rqevHZ9
zxkTMea4G@cm2FLH^98}3j;7aPC$)Hewis<{fhSJ`eUZ`8a+DF<q%szkf1WoDa9dR)
zz;i~Q2DS~dlH>Na#k@Z<gai^Z$>=}VN&F$Syl6Oq{XRr*Ecb)HCsOu`FT;y}QWd{7
z{|cPG0dob4&RY090HS0<I$9fgN$9kDestE-o!LhWuu(u@)dKNiAJQ6LrNBmDB{U62
z3V?oM*q&ThNEu=L8;C4OKq}~~M$khc7KP-2m9GJBx7BIhJ^ULo`QI>m{xj0etzdVU
zM3DLa?OFg{^YLBv$7A&#q<^>YKQ1Ul0c1=i8U&Rf4Z{QoyjNkJv7;2fIxBy@_Fbj?
zhx-!r^z)^N$Rmo#E3{a8?4&F5-sb=c{vS7s6nu#J2GeUGuZ)*vl$uQAS7r5g*Ao4A
z-RZCEuKoX1%#xy&9LJL^3mIDihBWnYmL@17?Ert&qt0Gp@`&<(xCnprvNjF%9jO!F
z8r8U62e!}aVxbZ#{&4~COSg0<Gv7NbUy9<}kvH6zQ+1sqJJ}vhEqySF8m<3#ot|$+
zaxwaeo^mO36(&T=!Xi}-opv>(n2PS3)b9pwY#PUNdWaxW*f5|~!i?%u_zCHLNWC^;
z9pq0ja8EH9CcZEUf5H7M&Hz4c_;<dIg|rWW0VG~PnA-O#B_>dW5sGp14&Y7b!BV;5
zKn;@N^n~UW)&9P(*+*vnV`I%??}K@qb-Z+Hwc%P-;&%{oR+)+Rk@JiA6)a{AccYoo
z?DCCi{5r4)!llbB3KuRG!!Uap>Bi6D{>XwIN;b{UCyh<zMrcnWb#eD11yuK=tYrJ7
zc4$9=Hxj|+cEijxAkLzc(2yuj4b{;Bf%H1bB$`{V#1>gQ(<kwDni!Jjntjqmw4W%>
zv^>bXQ$lAQ4ssg#yyEPOyss+@Xq6vs$Q*=n0!m~N?GAOv7jR_E9Ns7}dUN1sZtqP$
zYgj9wS~L2dmK`kz<CLD1oTzf1RjzTXRG<7V6a$f7EN&ZHsSYVOIA;!i?^vUKN;V6>
z^KT-!7bxa1(xvp6*fhmlPtVsBUb~BdDy`BTlr7~<CY^5TXl261yLtjPlBKU4wu<$S
z{)Q{ad4_nOs&sOP;@PA10}*@+7DwszIBv=#m$U^5ya~*PD7$3yrXQ#toHuyANt9n4
zwx?fC=6G&j!O9O?(JtXpD0T;{$b*r9ti67FKUgl(W{(bA2v^G{^~+C3%o%##b~+Pt
zF-SWRNA+yJ!Oz%r%2!u<xYk3#z@J2mF-1qo`D~c{Q4L9aM6T64uk_e5;zsr6lq&T{
zb%0|gbce+2C+KK&U%i};VjacC$DxK%6-SL-miI+Sk*ZL!6+Nyk%H_QrN1X9I37sT)
zpm*m8#9@C8)2WxfWtetS3n?<aGih*~O|6=o)nV)`WOY_fqF8zOLjKNey=Qlo;Pp2#
z<CAOC<hUBQhnc6T9VR`}475^!2c9zysQ??a?Me|k6jTf7PWGc;%lEia`f%>GA#Qt)
z&V$yzFrMaIe-<69Ou-)bWD?^%H<|HzKq>{}x3F=H!1p0?xikzR=7a$4C%+O6fuMwn
zOiA#3ejwsELiP>N{!Vmj+SjIXuNA7)YV&c^J|J|o2JqT>g_Unzs*Zc`&H0TA1vMWh
zJs)|p1IY}G9ZuK2sw|*t$#=KTmHRfYQDHH)?yq53ELr!i#2Cf$tM!HzkPq8^f_UzW
z^Pa_I#;P}gUBo;bS*kkJ_sC)V=;(BJP~&>XtBRBaKy`OMWy1&DaRQwPj#uQ~Gz?hD
z0&*UH_gQ-8A)1m_r-RutQbk7kWgOA$6eF&KcY!4V)C_nATu5^V13Ze>ra}Y$e(8g)
z)v=sxfIpU}IIH_oWr<WxppZ>;>Bb)HQRu|MpsbNI!-^uAnF6Xjc#)J{R$WZb;Z7Zk
zo2UrIGT~76&eRSuMUI_%{tuh<S1qK4fn>u1Igglvy#1CS#t_#gHLABZ=e&8ExbxC8
zAqIsQ<ia(v8Hl7n^E*V0gp3R>oJJ`U-9WakjK|r&Xh*qECG|xLd5sF3^~G=uINn!%
z{aIxW{oR)zY6pQ_&z>c}LT3+IkLK(uc}GB+6)wp`{hoOvM`+6faS-RiRm?ob_+cOE
z7v~qF8e|8{1-ZuHE*@_Sp{WVt8gqe{u^rB#q!aDT;e47()mJOw_X0llFMXu5-R|jX
z|A3GNWJW9>p-m_`x@L}HHkHYtMNH*0Eq$PEbNP`1GM;CxF)NZI3dAfvC!sUyZ&Mum
z3G%aBHj150<GfY2fBQGM1cHw63bFO%c>zD2z5k<*R$oNscNs5zcLMG;<Dk4$yA=}7
z(Ou$?rrYq|=*W$yC|z*Z@*Flz#isghv4`<OXj<A6QnYh$d4~~Ud|!3b&5B!AKBYdQ
zi_6$eyoy(|IJIPYzA?v-45VEXO)v)0T1O<@1DhW;kG*!+zC2!ycm%%fWXF!=Z}K>{
z@uUHVi>5SMwKN_>KDb^FeYo<_LY)m+t<N9`g+`vj4Z#D`E`lVU)A=9y(FTd5dq_IR
zEkoAiT%cav0N;Xei{?<QtR+@JF42Dq7k;>UAumk#Pv~5K1JgPdNfU~BwDhp(7%reu
z@u-{X?1Q4HhB6~Ph9{@IMNnH5r+YB362^z8gA9WLDP*i}i>2&?ADu2jf6riz5g?#`
z&tO<DF3PRCpf>dw4_hE`Y<4x%vb&-g$3T{F`S{hLC{j)?jX$Q?Yn+wGx2J+xfz+Du
zTAIIUAMJ+68_brk+-u6c!KBMn!;ud#-jiSNp)<ZvT<5^rRyTpLnpum|4l<3W&B@AW
zHS%kqcNcMWojd^IO}1ucCz_r&WpFF3${xLtrmKcs;)(a(s*fKXSQ%ce{9`P9S6^a!
zT@^1U>yBW;v^+Pg<G9aGx=YcK+qYM?T{`l-bzbGJPxUj<Zdu>|scG=~jTbY`N*SMK
zLu_n|hxp$>*hua>^7RhFrpH%9TlGJD28S0L&`T`$p}i3By6NMq3*ny*(6Z8ho`r}I
zKbXdoB!m!**DmY*LP!;W+0w43%#z~IQM|26T!db)PupHw{zqD$Y;kYEMlKSxNNp$d
z(fLCQO85dJ374=5j~x`t5H7I;xSqhOHj0{TZ&sN824e}%l1IKHBHR0(&I|y>cmIa1
zy<|!=4N-&nR<hWXw+-Uk)NWl502QwqaW9<x#qGz6B0N%IvOfUOf8ns&muLVU5;oz%
z@oWMhYjfvmJVkEM@0Y~Cv2=8p;LnP#=s^oN0Nec58~F2^khFWq1`vLX=lA~x<oqg}
z@6$Vsr-->fdFCcQomoUg(E-GY{!8rte(7r=MQSLKF?>LSc^v#|PwkaD1>2rTJo9g2
z7XQ_juMw#Y=}n@%u8UEYyh!Dr1^<2LBIAKEi;uUDu%-U5#(wwm;EtQV`WKEao~cxP
zLc;fhHS5xDBeHN!`l3?&(eLl_Z%J(UurdU9-TGw788(JeV*tjO%0(m3NfzzlLn#1B
znWz7gRX+knUiL$-D`UoR@3=Wio(PGRa#i?X!&gHrJ1TBD+NVAH?6WQ;0OMe1a#c1j
z-d#}tjZZ5nz8`9fhl5v^&Q9aJc6j8{2ZS&Y%8<fEMf$hDt^m&R4U6G80++*fako`6
z?I*xR6r6G9RmioPW-=D8kZg)}z2mQDhZ;+Qz=GkS^*TIWANgGr)<1Gl#64UaaT?E)
zrnWuYFkYMzE*GzQR-;P$DszU#t$i8!Z<cv$*qzU!(|t*Vg-;3fd@TaFlbe@3cqHDU
zG;p)&1iPcv0=gsraO;nV;=>}+WwvzD$cVTt;*2w(9NpXE89ITXrTEsN;GXBMp1XFi
zU0>_<{7)CJxC(JMmYzHRP)F=<1adkhoDlQ<*%vQ0b%;In$Hj(6`zv2t0A|In<vC?%
z;7HM!=8CcD1-`4{?n77GRcv`)6geHbm%jMCUKtGemy1Yu{97ZpNgeO)9CAb01G#7b
z@Sz15uese8?9_MT=={}I|MQ*scSr!eoNDR}2RKC_3m{FYRI5ql=g*(3xf<*z71lww
zWD)!>EkN;n#=ATUAmy(&wM27!i9|d!dcMxC4@gm2t6rA{vT)UMhg0ZGheRaOAv*CV
zc+T7Iyc@`97n1j8)jD#mW5EsKeS{@NX6Q_)ea%Tt>bQHT2^&euk+@RHE0aqJ(rvr=
z#$)xKV^#Y2TMml0C0J)Op<!;LjSkHpxjTuo<NG4rEu`n`j@^7c)i&zgeq3L>&LI)#
zstY5o-nd4+mv-*kG;Ub^aRshwK$B8C+bDd^Rf@aO;#%8$M)+upCn6=j2Aa=U^=0EM
zXR`^d$ataoHXIz#)#tv)G(jFgc{e~8qI#i)K@psc<le>8E8lMIzDOz1TC2Pd(VqRt
z<)E-%sw}f;sjFQblpa49DD!M$4`BUIuY(KW++J+-G4kP_cIikDj7Hvmix<x8HSOC6
z{uqs46H&;=>%lzW)g5-Kg9d4@U4?$Hq#$&@2sjX_hHcRtgSHoG6b7=@rQDzL<br|h
z0?sjH_RiAd`Nb+8nJWzV^sy?bH~-~T1BqiHCy+qea2~L=10;?~HdL2@#i|OA+Qieh
zO>wB@V}NAbf5ZkdJDQ{Wp3zBcDNyDB)ktU_Hw^X5N>N+Gd~vpWI&a3nI+Esxqe?{c
zT8_o)l#_2T_LRhl3Hfy&ea)CrW^*>V%#!BY;x~w@K5xdB`9$<37I1<Rj2j|0P2X_a
z?#Fj%*qqg27g{RJk{TvJqk0nG%(!h<7EgQ1m{{_^B9T*P^5>q4-wR?g<NDdtX(#pd
z)T)8NZ)Ni9COi?lQAls<IwC;hBd~w_H^B|O-k<DE<jiGG(veCv5#`w!i;(6iv2)7$
zYwUA2iwtuPTYEJ&C+n;vXS~T2J~Us~uo1DTdwG_Bs}_($8(p5-d$7%fv{yqXq(%;Y
zb~fqHY0;2f&mL6>V4-a(LiD$XJVki2m{ivPwjY1GSazfI86KD*c`eDY+w!&7d$ST9
z@ufO*)uLNA!H3V<8(g{o1MGSLcjqg3JeVMVv_41<<a|X6+@`&9u4xfgDN&~e>fj_`
zWp|mmTTEF+_Vh@g^*$#%-JTd5E;sF`efhEt`^D2&b#^z@@6TKY9%0uaA+m?8Mt=~s
zqs8L_OOy_1*xz5ex;j}3Q)n_{<jQ5M{yA}&_6B=!biD@`J74&DgGUWLz{Fd4%$Kn7
zWgv{zS)t)qcqF{w#i!Jr*HsmxpM8n>)$>r0ujCU-(2B}#e1dfu1^C!F?m;Z+lOzLm
zzxxi)k%6p8nW}a!$4063K{6=3NkhOM?&~zmK`F6w+%4r=qHMf1l~a5i(sF0HC6=$n
z3G=y$$bgB7?)KIq?TCBb=yb?izO#vcsex7l*CEQSk~$<}HcJRo@?#tay!BXLB8%RD
zNq6I(iPNz{sh3;l!vtH4#f|e?v}F!Jta6N=52U9WyY&G2TW3sS+3n>Bz#Uw|M~^jL
zO;zce!?r+i)=Rd+-iE0_v>fc<E-9XYt@n&Z>vh|lJNG<|z%93iQ_x-<MAu6wJpBy~
zX37tO^-uezl!g)#h@AV$$63`g<B_e;Fk8?4^@hHutIq0RDUiwI*4a-xfG(w^X%dBr
zqH3MWRF{eXhB>LJJ4gKz(N4zm{86rBT>Ft9_x4vor>ewKHu=JHn6yQZ5Yh8)mUboO
z_EKf{@Lrgs)GKGab_mmi06czk(Xw#+lVgDF9e3=3R87QR5+U~~0zZ!Q1>%u8;hFSY
z;iotb^Zez{V}4TZyZwxu(kPBvOaU`i6*_wkZ`~ENt1yu5jiR07Na^JkhUbVGSJEwW
z!)4K9QNYK&>2w{hFzx+U*#EFst+z7`7#I14CqGu?ALd|^VoIQ5l1_}gW%3Kl%2<9_
z{MmS~q5QgL*P?@QN5jSuSyjbY^}FL9@>A6ihwtwKfG0SS5(PveVShk0Z`|N==`c!s
zjes~n(Q<qlFfh+`K5yUbye>A(I$VcJ>T?hAAHSYyv`TW+LRY{FGyeK+S<*wVls6T1
zxgI3co21UeyWPJ$5ZJdKPBO-t>$hhLX9XE{?44;uQ8|{II@jGs<$Xj^OBf<rBZ%Qz
zFJQAEV2a>BEp9x3P=l-MTAm~Oj$`%k+NfEjUNm`}+t>G2elV`6+~0#}l%~F3k_i!)
zs;^5|GdG@Sb+TJYUXm<wV_&oJ%G8=5>)J1CE7KXwqMVkAud&25r~aPGagrtiaj+!w
zhcj!|3-Bn<CNC!{a<hj-dwJiA@i$i(bp<oFtruWEKF(?9K$4Shy-YFRhHFEa;tBMX
zcWYw1ZmPe$U`~hfuUA}7_A!0*xh8=)#SF_*<zFj&nGIwNx|oA(%(#Ev;_K3BXl`i2
zZG2rBQ|Wpn?H-nouQEAr@pW#?F}4X)@E!uvpMMEF8_7sC`NDPl+KW5XZp*1P=d@1z
z`uo#ZX+t@3`!Rn?Rsj*Q>L-z&51w!*UwYyq+dbKk{J1b{>JZT0{<gvU-MbOVIWCWj
z&)WQlIdLwBDGvwaG+s6}RGzvG<g7m3T55=axNQ{rEw0ctZXed(yo`CKFvxJ6UD;d<
z)zsiS-%C3i|M>Jg6z3e~5`GWSR5hbVq{{B-q5K8?2OnwH#>yO!@%!w;PZE=Q!!?2n
z>B-jqA4>Tq^=4k$m;7MeFKjpbuMPn(GYrsjj7=n6%qA5cRFO0IKmMlRNc-c_BBK72
z;6>@spYDh=Gc(N)8YVtF^g#2;a+HqB((C5>68i7sUNW%>qT$@ADcT6I_~^XhES$&V
z**xdhbS2bD`s+GuGvkU4`=@u3{$~~b>+0P%<nTNbrCnPVZY0`DK?kLr9IM$a$57^6
zV&wlG^?%Fk+ealRSX`cJ+okyu85`#(-D>Ugr+;nxj|IQ>a`}?##o8!~<-hm9U*!15
zXP56IB6WH!Q;Z=0`&Pe`!MB3CH9FXII6fZhjVWSsbzXXfp)Kj(f5k(Rl)f?qvX6;*
zEG2@B<e{5kt`!P(jwUAiL&Cp^V}pw{#!}H(-4`9K6P*9IAN!}&!+_K`m%F3Re=ow_
z@-0K82W`fEeu#R}+*(+bOldf*Q$`dP9unIb;8J$_KW-ujJW7gGC2EMuu%Hr=;PK7^
zxCC-YO_}FXq6ng+pDP#txg#Q>BqCvKqPL5h;^=$RPIk%bTEr*kGO33@Qr#S&f<`-T
ztLU^J7fa-BERiRsz+P)WSr45}uqYEy_LCxkw2=dKf~(q#;(Pl^Xe}2#->sKQ#sHgm
zwVdOWaxBzxc3am-*Qyx_1xaElz)hjXEq}LXDCz`OH&$mGOQbS7n$6-k$z-P-^d_R?
zrneDDR2zs)liiWJ4y@vxI$R4|DjSZRsBE&6?0;^qT$a1HEiUkpao_H<>n+C4eC-7n
zM);#mcXCVXQnvhOULJ;Ad>Y>vq*Xr7kqd`49dl{LRLh?vTJDI)kH7cG#`nH`d>KgA
z^e3&Li~Y*8>wAKmq%JVhzV@UC+bQhjPLO7M8;U2sf@`=Vg53;Iir(Rdv;NR@CyAzO
zfoJF_u5>}ikBpaV)uSCZKchc%ErQaOox`p<!A@)4doxGNdHuUPhPfpiID2W<_jW2X
z5i*=(IAUkhTAB`~{7%QVdzp+!b7j=^5Cts<RxH(nj8?tz)W580o=XI^cu*>;SaFu+
z_3s=*o?(2;ILMzjSrkv}%ag7FQi}6JP-v|@EPQ2bW`-3#b?43oAOd}-w{Vr}JuV8E
zE^uVA%(L-u5BbbKJDmuf;>zCDbCLVf?t66w3zB2Q?KpUCu^NTKJrqPmH@H!q?Wzkm
z@T;V&F_oNak%_{<wdT%VS-4nt=2&(Y3rjKDP_$fH0%8uC%ap&a(ELtBqtD7eV}?ht
z-smE73tb)!JPj_uqQ!V(X4<09$7-A>bK#VFVy-N2)$;YzD(La&1d|&I_b0?rd?rWN
z`^{)9Rw{)KR!=Fjy~l+XZ}v?`WzbS(S~A5IXRN5+C43x;-3W532HiWJ+K)c8ha`rU
zZ6863cxKOZ;8db#Btx7rpC7DlEjd)Gqi`P<#*CbP2mqZONk_`)G%NEn#}vw;y~cpM
zcZ)t_r2CFf(t`CS0r4Bvinu_(Mo36_pJ{(}4+)bcB{W&mIF*9LRZ_aH+*4THjKw3~
zYLUE`>UDIoDk*U0P(sA)*(iNsjqGdSY}DN96Z^s1dP8y?B`%%wh=l4`sFz#<WwMj>
z@#gkehY^}NOh9YC-DI+uwavOIcXjnypQ5VcS4T0=H2PDEz+MM??a`f)&sMS&Wf?su
z=GiyUZr#;1FElDm8Wo2nJky-SVlZYMw47sI16M_+#@;%d7d9CYZQ<v9erCa7FS9=G
zfzyM}XAI`$fAyYUr(T_(BW9bMqp6hdVn%`RVvAT;e3t!ltl3JrnPF~|7)O!j!qlZr
z@A^*;l*%HeN#O|CMza0F3!~Y3u(SP2WkaWzTgig{m3^}7AkF@YPI~i_4oTU*3w{6g
zVuV-ZH}ZP?2JNHaI*T>Cm~W0nGrHZ!A%|mnt9&L}NhND;VI{cO^pb=uABhH2E=Q5j
z;7+o5n%*}lRptDKExf#6wS#3!2JQ!~4V~llu5ScMuH>W6iJpGEuuvJs>5{JKa$_qo
zEW2#knVG=vLTiCu48L_fz1q)$jbz~ms5*zlL@twFI%(JQa&yfzx6C^a4E6GCEfEZM
z9iOD}&bUi=gPjOjF?wJoyh)?E-W3CLS}X$=1UE$9!p_Ms4(|m<3pU5eaBP_O@=^8C
z>at-v228WS_Z^?Oz6tMD9doaQLG*?cgE5R}XAAn%>e%`G)YZaRxC_D6z$R;#-$kt)
zW34x%GcXG@F<1UXisYEfW)Y+2<bxGI$=sJELUGxRc>$9B^paB9tbq+C(RP_Yv*S&I
zv!*hCTW@IhWa;|haqh-y2W9eVh!grM$FaILOxh{<+)FmbczO*Y)2<Ywe04OSRG?i_
zc+&#6{5X~9?tN0R@AXkWJ^gU~3u}M+^N-g>P)>%cB}`}Su|EE@lL+^Qw64mDS}$|I
z<|{7`=sDhu#pJ7F*Is5w<F{O>Gsxmo8l9&#5z8ELQ#lN6#tdWUl#WH~=ZBy<h*p{P
zl`%;ktPHwGeO2cyAf9)Pf5c`|{qh&%<YSGxd0V!5D_w1?KKS;wMQlUDfjEl=m!*?-
zMcs4&HANgDRjb)!SEjDOlofDM!nKFCAFu`&#V8Ix-lCWrq}b_*iKgsEYB-r&xgD0F
z5=%srYw~GvGL#2hz}$E;-$0NW$98iJFzOtCp4$mk)U$NTe74BglMu=@6a1J0nwSiY
zcE+=++}lC|%cU%N2(h~U?0=@B-y^WmC(2;3D#kim7}Hw{*7nyp0-=R$)#RLt`#U_d
z4Ca6w9zFN9r^$$^A6JEbO&^wAw|4@mbG)baa>RCPm&NNLq{<d&^_$8giL4pi(4h`;
zRH!w~)?k?iitn2tu0N7p-UR>9UW=P4IEn*BI+qkhv~UQ~r&dngo6{ICMRD7|zEGR$
zVYA=mVX`uhpR;&{ag!vO1yT*mD(u~9*`aav{5oxSvmo<!XUuUJV~73`r_pTdr8RIs
z>YB-#{QjWP&1Y{<O~1Xmf+Fx2(5|<~J9k3Nx|J+k1tziylxjA?Xk$Ng>xD6CHr8!Z
zRvJ&|rKz(kN6~APEC@S#;{3;QAGXAtJ&TdWDs&>qQHeUo>rBXCi_StX%2mximrJ`>
z*q|D=m-dI@t(@!Hxrs7!mWgnXnV_`)0|Kp!{#cT=bk38=raIT7`3dDS0`9IvjJ^3D
znfjnqn=n43(wPpOWNHl1@ly-Gkd*;%J&QW0_8KZur8yL$vfFd#v!vY<<E{9Gu~9A4
zRJ}wih_QtuNQ8k^(K*D6`G>1vAucstLS+cex7}QwBKGIGqDv$M6UR!8uo9X*KG*W|
zsdp<GX9So{vo~R*q*-a2==+Pd`u2o+SA9qVmAnS<MfM_1;rZ(_>EI8fYwdWsUz#6~
zup(eG)U8A3zI!L@m(vPFx$|oo)YRSD(|Vio!L%oi^EcjImkFtQ4s(INTz$fZC6`zY
zT?^gs7&1gRal7)U^{yrW2}1NLCe|35k|g^R3BC*4ctb4&$C{d&sLa^5D~yj0Qxg(>
z%$0E{h6R2!mBADZt41C-Xu5M&q*uV#TLda=&&6x%NakS2*|(P828?XNuRK7Vd?z5S
ztFg!KR=N$}f+#wPHOCa@Y?=1=+z7_O>-~Zyq5fWJ7|Enf$M81>S7qr4M8j{6`Qa`6
zXlE_@Y>HD&H{Dt-4qNKlP7^Tu{aLTf;DP$&51RYXwsNn)`Rg|OUk&U5k?+*{t+HDf
z$m&*C*Bz{zGR~y}yG`xW2=@%DE)P$$CHHCN!b>!!dUKk*#(ntn>7ay*jiBar*t%(;
zL#!BvCu4-p=%UwsO{V#Um7OHX3B+Xfj2Jm?{M@x9#;`q+B)Q^K3nDtVvPXlsqrJqb
zE;r_;)teM0IGtm=U!K@j<(My^x*tL$*#-q0GQ}G$<*(N?9HOn@_wTPp<C#t`12tWk
zY&}8UsH8S1h}VOrimcz*=C<bE-?v;|FGRK<*r=#S7u$k)^J`X5nz(AsRRuQ@n|-As
z%L!@fo^b!dF$>!U1z%I6I7WJd9xJBmId6Xu1EIWUBNT2y1226Z+X+^5sN-sqk28t-
zpeOZ3j*92ps8GLrq_VNW#^2-oKrk6OcZMaYAX~ji9!{VH8F<n}wdGk>xrub^NF{Lw
z&ywYc$qTQe)_<qx)AS(TWYNr|pJkjgRcpzN#fFVsrdtUHSurO};&P8d3pn{eY<b_S
z)N*r218&iE8(C+y?I`PASqsf;qdfn~Zw2(kGoGy{Q}@+K>k5yF0pGY0@`5EIBe!c=
z|1oUTsMUcJpEK!Yo;uw=WO{}QM~?M#igltnN`}ed5Ie{uX$@?gj#j$0bZ;X~mtFR?
zFzcWcU4_hRG1g|C3rjrrFi1w8PEBeSev7hq(^8VxXq)1wp2lqR3wIsfrcz)_SGKTQ
zGhEE9xR+O+$A_!?$0X_Juhs7#Qf1hFRBvsN0a|n+X4yE0%f|zZ>EOGG7U`=Mos(u$
zf`iHBvPFCOTe+b+sNI%H^LIRx#Ucjc<d63$N}(2(D@wOR^>FP8xW&j029;W|C~Mt`
zG-X=IvDb+GCNJaO@elaS*kk#oTNNT4dMCKp4)gp{2SKF$ZKF9KdPWTi-**$lC(zl8
z09a)>Zq=p*{93T(B5RF_%3X0d0<dZ9=Y|d5UTp7@t(%Rqb*o3+>$f%xf1VTWx{ku6
z>F&0UqA%e2r?X+IYivDLy@s4iGAJ_5H<v9YwoIwq{w!^F@*XUn{0ZlRFyV6TxpOz`
zbPTPs8e#Ma{OWft+auPy^>xmL&t^>Ttv^btHy8{VRgF{I>e}G;jOP&%+@-%i&Wnf|
z`*d?6zgoTiL!I_MP1)BGdS4YY>UZos(g__>%t8#QNW3vDbnJsN<)3=GseHia*CW9?
z@}krkUk1kHxDoPWMC<8e-Ro+NL+M>TB2(W%(0CsLjYjyO$fQtqr{KCL--~4Qb*lsI
zP7NEoOp>||BgOMRLw`uWRNc+USNn0tDtRATkd|jTdq%xJ8_91KpzXJ7fOEoFvdMy2
zFO!1eK6bt_y9OngDx`|JEsIzXz0X$KMz5V_JN~Gp3c+oVbOzSv_+54<IxJ}|SNiz}
zlOjcjU@k}&&P`HNZd;<efCkxZLtgq$|CucYE1YtDHg~3^K2#&NZrycu*wMUctgA%m
zYj=y9)qUNBTU}2=pOKw~euz^QL;`(w_xkh;s+)~GM6IdXBJy2XK@zA4-^WecQXerK
z$9m85e&D_e!N<{~GHdT@Y4s1SLJ2<_x{w5`%wG4P<!;%-es&PuO42r)v{?K3bqwH<
zS8m#-4zPHZ`toWc%2ib0@_KyIHW*jrTW~73qlHRZigy>oZ2WSPkk5Hyuu7y&xkbB6
z5V{3!uZ%Gl_7}aipQ!nNNrHJap%udB=<D+F$CHHeyGM=-HzZn4el$ZtH>s1=RodG1
z^7mD)(l9s>w9%!^XRP;coy)WOh0}JAe>9h!EmYOE1l@YtGezu~zmuxi^t#=DOW3MR
z4jCQ@Skl%@-ZS%)81lB?bSIk&&Gx;#aiiVuo*GVdf<gjBce2u<^c5aCxO~lC2;EJ!
z=@{ou(u6V9*(J(o-1~b3_nev^=XBptUPnHD4Uue8`7nCC9y`XraaCWfJIiGUbv93b
zx$)*k>{kNn7SpErqKIx?=}a#%?c2)j`6|gqgbtaHPx_<Hnw6j=YwAtT2LHjFxe8$(
zP-v*wx{h`-cxC*S6(`srL3&)jUd{^ThMRn?elT-n_YuQT&ZM!W!I~|O!}WsZBcr)A
zVW&$L&xP^k?7^naS^i6~mJy<^n>>0RdI|I?^-7!TkTnwK8y>`nMB^X(9?ns`0+w;0
z0E}49!7)FLlwq(v(THVz!2BN7o1^K~XJ=jkByix!_pFgMm!tMM&)LPa<J&SkZr9?r
zef_dw)`$pWCUYYBHRg(wOq4R>TZ2zc!_yDEYkN$R9lf0j2Wv-UUY4xHN>as$vo5hs
z3)}!%lyWJ$>|Wtb)DwG9iW$o1j_MGsg`Z#$NH6_xT+V%oIS;*QDG`OA!<0By;N04h
zlgCnP92`uvVl7L$Ic}`E>!^4?$j!UMJCSly>wJ9ezyVE4drVf^e5E-{Tew1N{+xqH
zW@n3C9lDh(ef;d{vzcoNM>DmC3xe$}f+A2oOtzI4{zDSmy4>b8%}~Q(OI*8Lj&+mG
z?A(`2o<MIjOPXNF-OT6aEbKDtTwv^@5Fe9sGWd%3*<Q<{s&v_m8?mEne~s){S?N7@
zf%rk-F>2^PH;=mqmhKIbO?Xwg-8@PjWrf|I)|{&F!3Z0)cg$^JbIXn0DVB?iG4(AK
z5yv%V^NtI<3PHZP5!}S`GrDdOUvF9Q#dPN<#gpG;-d@Wr7c3|$4tSQm{b(b<a3rIW
z87`UdXd(+gia?9-X8T3m)cpPa-UF_MmWt~4#}SMSh4>*?oEog(yshJ56QR}5sP2`t
zWzY>CrD?n%hjb_X$eBq5d-Cswx4^SOuFl?HJH33r_YydGL)||><zkS*(n%j$#h~_Q
zIlc1^OT$|+CITP4Pg=Mh$~x?r+snV-fNjj;dG0O-UT=u+Y{HsQ!jl=;Wv8;M`Sylk
zjui}Ud!xg1V5-*AHmAJWnjLc)H}ox|{is<ebg5_l!Gr0?t!cyZ47Q$Qtu;CVY_)~H
zjvHRCL$)bPV9z1#xpRl`zAJpY@D5;I{)dw}AVEM6F|SVCx$VA`hxXUxA;e5=5bxnB
zzAG&mlEjD~xWUAq;T8nK!D^+J<B6ueDIKoZnl;rMcrzM5kWHvdA{Vu1-H1#T>_SeU
z3%wRi_V0zDJDD*-Lr7V~iY;3@vq-~RCk4fOuG{@vFCshv{?r4h?`mc;J5@^ie9@fh
zlN@mZc$3AKAl5EKuFK*uma7nin?$)b0SSFlQYIb0Wj)Akt4$?0HwDqU?NB<0RHs_x
zSP;sQoYc6t0PE6g(`(<8ey6r+roOq<@XDr_Dp|5-(gREXps2$5TDs#)!?s3^OLqVL
zy%<LC&F!B@M`#!ebK|x}nKdk}^X}$-3*GSv$10Fh$McoC=Jl;_ZmUUPuherN_f+oz
z9YZKap1O;M)J}_uQJqOImm~Yd&v|lLsBrGB;rO@_Ydx;K_go+Mlf4$kovp-ecS%;{
z{wr6mnT?LBh_uBorBMC6(!8_z^V7=oik5Iu|J|XD-kE*)TvgZ@zd(J&^|w?fwrsfs
zUngCInJVqP(i-NvG<WTI1*qx;j9fMLO2>BA(aU{1dxztE#eyXDc(1bUPtzyZntn%s
zQt+NkGcfR;x{GU|;2WgrO$Yi2JTx*jy;iQ_lXZ(XeJ#V>H=CB%eDRDbRW!p7E%vmc
zsDnSQeqY8obshqnzfZU?L<Om4|GK7et9Ed!_O)x=tJE>oX`VV)d(LKi)B4;~8yIS&
zq&3LAw0ig6;MA$(AjLT4i_`T+w=(gjyeJFXlAZbmSFI_2uG57%d!ib}?s4ca+-1vL
z7Kq>uE6$b9vFWXOSut(u4*gLJAO+Yn?p2<K`(f-`5Mxe9cXOCCMxblq^>kb?HPT>Z
zT3(B#F;URjQkDFb4tJdW>Xv7zryWz;tOH-E;*z5K{<Yie@XQh#G54_a_1>(Qc{<4g
z1U4<_?l`FMRc<P)Le{&XdgtRg2NlGg#K5nq-ow<~lFPClel{TvvE1)I2mYM7g#L+b
zS3*Jnyzq8)HbYY3V!xE0@fTfxaKP@}BBD~){|5)`(}EiLa-GRE#EZ-(5HT33Zs=X)
z0@i=_+n=v!%LVmBiC-8B|7y5?-JbvaxR1|s=<f*j|Gek>kO5OGQ@nc_GoRv)X;+Po
zVv+f4Lx0>x>S4eq6`H!X4pu}1;&;;lJ}qc$VP6hw7{_)0{!4wLqztV67CirA$Ny)H
z08TF`IFLR}>?!`oEq~ED{~3b=S|C7hN8I~B9~EmfsI#2yp3aVL=1WM*d_LERc=#*s
z{DnUOW=x3!0ny;u)<>3jDY}fdum4a&-hdK<a4X$4KlDj(wpj}VDpw?!dYB-sIT@4D
z>SJ%K7Vi6}+5TrA-bo^>v3!e8a|sOl$A4Qdv8T(gGuXV0q6efFXmHlcVk{ODy_@UX
zZGShDw88iA4dPZsSY?nrB=uxx`CVO2LOLf<;~qSyjA1u-U%NiVzvBrj3sr@QYa2^|
z6F+^)OECIul<Jt2MnrrbR^_zkDQdi-rp@s8UbD6ypq_YU_Epf!)DYbb1Vq$}Qo$H*
ztaA5V)B-FO(W8eU6hG52z+X3CsT(xA_if_;C7^QwYE3jRTH6k{9n1AHvK{UoRww66
znu^;$bPTCc&V2x|$+;DSYFGyd2*A<&UuY&YKjWUOllv^LmnxUtrwf#T133@-f!)ic
zK&o3ZZ{_aMxtm?q5D!SVHV)Pd@dmK-`V~tAmSAf)GTZZ9<Dcg{#x~a|NF5$G9;1AJ
zSxE;>zEj`W!H~qQ==x(dg|=Gtf-Ir(uJ>`y#Bq<AZ{0A)HIZ&~1QR57Vle+fbP)G9
zJmTzI?tEje)R4sMX6znZcN_B)BIW)%OA}`%@|$kjg~2CY4^bX`SIPdd!g3-6Bo8IM
z{aH3wt8H44z=w>8vq-C7iMM}EKAh%tjv_h8W$r!U(*{`k`q3dqvhnxLqJctfeK=Q!
z-6lK2H#@-`G$hPd4T5=MRcoWY{cD@=qZ-@a_72ij@<6#9I^k2KsxkSf6-EX=Z|0u7
z7&>?H>3%@jhdj6~rHiANP3q(0jkej;;jlG98G#Xf74-u?>FW07udDCExAp5#m?abR
z+Ql4<5lDlCz%1Z0J|>Dp8|@?Kfx*5cXC~kl(j-4!Asn%AZqYWp#c~sNdDOAKaMUHs
zx5xRcy%0%qcq4Dt_^C82>2sB&$8%T*+P*Ud=0|zwc+yHDpS3R99p*+?^Gc&Nekgm^
zjGsLIkKXv>>OlA(FhEUD(1+x#*`q;5u-Jpo9326vkM!VVl1Q|o0VrLt8^H+5$6I@U
ze{N>r^~TS}d6`J)@F3oXj<B&=5-lp}@&iQJTxZ{Cjn$!l8qkBkZ28t(<djR5TasQ-
zn2!(e%%g9di2US{si}Lco;1?pg(wejRW0<&yVwW^9Fvd9+FpzME&Z(q$fFY!+;v!+
z#y}v!{tN`?CS-Y<&R%s*9DmQ6A$$7Qd;g(_hT`ube5;_8Za_^D_U#O~uy<j5^69VB
z@-OWMOyUdOih-6ZS?k|z{a<?cDh6nmh50?&A4B>dE%(b+t1h5wMs<f@z{FZb^~TQ}
z5=?nT{t)e#*8cgGj3ZP)PakrtAsYNkN#1E`nB17~|LC8epoU32L`9utln(3JUz+^W
zy>8Tfd=drH`L2E!asH3KT~_v?#A(8QkASd*r&i@uVYEB5Q<XjXJ}Np96Iw<5KW>sQ
z0fby>$7YP^<5UFw_3r}r+;AXpU*>r8t-YMV{f_u5&}LYTZSc;?cn3ryV*ypov*tO2
zfPf^YOKPcGIv_JcgKqI@Zdmu7Uh5WTSK4nEgbS8luLzT1BVfy$nGS&X*i5ADawT^?
zC$&5=DAq&cI;|x23Jy!Im}J`{TgE}ubRvoEijav`FW@n5zj3r1Bs})a(se-m&D>@D
zd>Hvs#des1T)5Q~c`9cQ2i@TNpOrg@Vv%wa!BOj)CFPq}@9rXO`0QU(fuK~+G^pUH
zbGb7noTe;8Vo|g5eX~}b?0)UnPg)D#qE_*6d%LAM`@01`#?#Gl#x`72^^9hdr6*dZ
zGtQ9#5fHC2jw%c;*H0`fc|^HQZ|W8*HQC<)Az#@T?;&lvgqi}TnlmfLy30>TeZ@+>
z+zul9TM&(hU&7;`8<rdt5}&(XCO@6=exu6)<tLTD&CN!`%;~*3-C}X;lXAV<4zISJ
zonpXgsWG(W<|(!}#2+mQK8{^Ny@>nO+??1G+71Vuu?oj0>ZXcu|5btU)4w*E{lJqx
zb7yLp{{J;K?sQB;7m~P1YZ$r&i^@8nR9anFtu}`Vab&T-_-cu!Td(G$ss7=uYh!r5
z_K`ErXSc(o(sE|QTgl|q2B(CNES5601$mb8_pRuvjeB)-Z(iLtW(MsJ4#sTcmX^ba
z48sK~?a9qC@x9ugOV5e>e;{aVxb!nQ>P(<p4gaDc(e(KpVXZxPu8`kBVcXHx7{l2H
zt6`?E@Iyp6eMZ}BVDNOA{O33^{q*4;99ukpHN;7RJJU&H76T5F3w01D%alu&7L;BB
zapmKx(zFUVCMJ*R#0yjeB&Gk@yr`F{1T)193;b`G<p?HAsUmb{bk>U{$7S=h*wjwv
zN93a4mF4m>=leHWr&+jqA5!6;x|VOk+BuTI&)93vT79a=c<bxurz;8|D`u%(@3D>m
zFwN4tdo4GH(#z{Ijj|ujVKhw|$1&Dq8+*cTIPQ~t4fH)v+h1Y}Q&k$J+JdxUfG=)a
zBw)H#aA7->@(PT=#Xiomm*zFbT<R1IarFaS3$t7>N-X<lS)o6vlYc6kR{{vB?x`-C
zOn_~@jR7A;U$Wc+1R+Sdp}h}E>NSNeO?5Scmfe7Q@o(F@SN;ijOhvRsJo!X<H$8j4
zv48LM2LnI(HX(%Xb59Z}k^2?uK}t(&b7#|}bLAxsmRHa@D!N_93YnjlCh8rUgXR7j
z*o0Hjaa8>~SNn%1!5zG1vQTDx6AcxsVeCEc29&Ct5cRRcHH!wRD0T1m2}<*(`=aYl
z<qaD%)E8p*S9UdLp{+jmKyKFF>Zj7xW|~itZnOoVM7h#=i~##M!KohiJCovj^lW6V
z)T|E35sTx0p8Eu;Q_0uw9^!_KAa(N{!Bh!wwu{ue>M^5W<6jMTU~k}<HEn=0S~TFW
zSM|S&2m42WcFX5(V<;kIb@ZX~XFo_7tEH(H;d0SU;xoJzH$OgG9oor4s8}{hD!|tj
zir^-+a96rp^;#h~hhf$3U~d8wbesHJl>QN@?sggo=Db7}6+K%tAtIQ<Mb|JtWb4v5
zq51y*xO?xYrq=FT_=t$0peQ2JQF=#uFDlZDBE3Th1PCC#7f}!ukQRDTdhfj}E%Y8b
zD7^%vmr%YP%X!Z^a^By)V|-)WJMMoXA<2IBv)7ty&bihThMXO{tV^+(wP`o!MMuzC
z`s^wW-JOLipN#7XqoC^%`)I@v4u4(q?bWg)8C*%1)-_)QU|oNM`r?N;X3Fx#&2g0-
zTNa~dT34b<MEA|=qh8n|594+W;GNe)LUJ#HrhR<p$9Mx>Znp`<(HA;sKIke|Y@QYr
zg1p*U?;l<j4+~XE@!BxHz>pu&V|%GKGHQxT+G|R;;z^k)dFT(Afq1)pI^q6&ohPN^
znxgKmTtGr|w8`z(z$G=K@w;|s_wgtMXzL5wz$vPDY?ZQ>ih4e^e38S<xlrAfZ*?7G
zQ8@)|U#k?W*IS>L3DxViE?I7u1rIZ`2r`W=Dih$R{B~u(kU*RcQ0&NkdMI~Rv>Q}{
z%h{x;*p`ib5G?NKSaxPVyfetdKhyvUgz!eK@|toea>ysH7Wp5|=2oEXUToG&nPzk_
z;ABmdWO12QR{;|}=4X4c{aJpfK)py{>$qsuMxprKMvm5ye*-uT(O1Y4@kD|1xha8a
zCia)%Yxm%OS^_)l6l&yAs9mNMQ~LP4NANp(_+|}MNT(jBOClI*RQK;v0BH6vK;-Wa
zE`wylwxCh!GceaVH~ZI;px5dYFqCypci%aY{QDdH<DL0wFTmu5Y1x>lXJXOiC<@%V
zMELJ-ZL0a*_(lEyp7F~rkGb;z;*V>In9-qx&E5srXKXa2i7e0Eps!7h{r%Ab5DdB~
zu5$%15n)6;G61|v@%_>$0KBMVDVbp6f3x-xtEuj-zbw9S9wK#r06;pWI4nWHO?6YF
zhEc_@{=UAbPEn=v%;77^Eg%b29wpkD07kL3y?8gfM;F0-^(VDxbJ{8I34L_EsP1DW
zP0gC=F<lg>slJYNv-l`-?JL3sxc7DR@8iShfs71yWTDR&PdIUn@DN_v2DzB1W#Qi8
zlM~gfN`2JoL@9jF%hjupOz<gH!iot6zhypNy_<y(%XC%iy4y6pT<X%&6F4(N=y#<#
zb)zTZ{(xEsx*pE&(q>jaH7*lAoPTq(^()Tr`(<VWL+~u5s(23S*aFnFVwO|LjfX<W
zQv!S;sG#GcKLAs0FMK1rwI|{-R!PK2jA1C4uCVl7d^D3q{~r8hEZciNpq9Tx_icA#
zaHv03CR|uFqt>!hn950K@WG1Y%l1hRf;ZR6_30m|S#^Xeb<I_tvP`_ctI){{1VNw-
z55h6`D7CFd&fFl#iK%hV_BhVNdBgW6i!T2xFMVRS@$1(MYxe;%!Z;1ys~DJ~C0*d0
z#kW)H(m%51W?etbTaW-4*erVlX|8&9zh4GJh7onT^d#bm;WY|7g4|9>w$Z5P;!|~{
z<?e;<<2YwN8tyg}=R_z^hF-z4v>g(zTIX)#xWk)8SaAE(l%m@hMiIN6TvnLfVGTKh
z+?5|aE-sIj<n730&=(FpgepyGeJeh$5b02Sk&f(&=z&2av|V|^h&m;Yu5Yk~3f{Q8
zN6)|^zH(X>yng2<8O>FS$_F1iSHFNiy7w9Trns6#Y;y}<0|21uJ$x-%X+H-mmaY}G
zNRoQbARf1pZT&NPz=N#g&VGO2^|FFDbTz@(7WIlX#m$|(GS96BrwAHG>e|#{3fG>i
zl_Z_tU3F`_{FV=%-oe|kyWqg8rF3zdsO&Xt=cM(;wrRiD-Z=rrUDDw7q0wg3xa(-r
z$O)J*KC;tXg!!>P?R}n4?x}AVYbYBRk6)AFU%+H46*u~<wY8((3KJd-SpR(ZYB<?x
z+l<R)a!}EEb<Ppc3r8(rs^dGKtmo6o-RAov!ENj6dD~`0Pz(@U=^E_C$K?J3wTf0j
zOQ1TNzJY!1%6kzyU%3vS&xiC#jSq)9^|rd|E;9qEwgZ>CXg=t55v)i>88`#wb1nFh
zpL#^9wqwVJD{q+Eu6bLc*ij>9?Wg&DqVn({ufuk*e`zMA%L7u&e*{hRk4!P%o|_sS
z9+d34JB=I;R8(nK0N??*XRDeF7h9h6e=UU5J!Da{ujFP8)*01X=Z-e$QPQSu^zqqR
zV66o?t|(RyYFg=iz}*;Y8oruO!lE9SNR5^$J=Tv0_}`e^B){rOJ+q2&q>#c9hBv%@
zn0fPt?bbWRF0AS@ZGwPoT?MRn@wALRxSRaIiK-4^SM{UVeCXcpe1+ZbzncfkP5<sa
z?{c6OALD%;eiVY)C4y0O<F~SjDa9MBnOj@FUS4NZ?oZQq_UC`c1{Q9fA-RNl29Et#
zmeIc1=XA8`(q~igHN!$gggX?XBonsm{_>7dQ`BvYl2XBAES%|i;J0SrXvI(!eDQ|*
zOM8n8a)AY5mzxw#UM|?)tvpP~XHD<F=5St+JeK>B+_Pb0%j6JZ(Cdh-&sVVzqS47+
ze|H4OrqXE)@Ym!o^AYK+u81_fz`*gVtllKM;B||k#~><5zkX@Xwf377!O`Ez;~&qe
zjU#4Ix?x=W9)u7`-9CS&Zt4Gjz1sL16oI{1zX!?x)a~e)%>?9Y^&Z@l2mdu+GY|p!
znuX{wiNwtD70a;%PfwwSzVlY@2ZZ2P!Z7@xT0;@-9i@JciE0Lgp)hOYULUptJbM2E
zGJJ}u-ov8jOI2a=J7{zFzr5_n-+SGrqFU%N4X&g9+r|7dSvnH}Re%1YXW|X}m(+46
zS%}^CT#;sgHJ*m9$t_pvzkCQ&C_vV{vF9b0OC{_z(AZ#u)&_|&3N%~9+vys%C<%cK
zs<BK&*Y<KA-c+yF3OMR0TMIc5ym6E8##199C1AhtUD~?(c5ZtvmsZfpp_Ly8c+y4%
zTsQ$QE*XCuyT{EHnc}J;lc_P?A`368fTMckga$xwwZDOCE|>=6^7L4|QZIGbi{VYn
zJ8IS=V6)cN$GC_A`f1;O8RY?VZxkWk-NcKbA4{j$bXenASbB1!Rum%U=Kx`8^tn)W
zRKD7us&Ep6_IP{boea5t7UbiEUY0TJdxCPWAGNkIdYHLx`%rzqs(Ukj*8EIuqs@_5
z4zGBFYTz-zj9Z|io6cBP0%mkw%Gv~Twx@tzxptT!P&~SB)(M{zneZ7H0a!vS;_L?$
zI2u1-$qlLFRqZ~wJ!0#Jjaw9<APi{ml(%~udVbotiO$TZ;8^992{h<pS!jPjdOET$
zB-m?&Wn7+0XZ7@S@)erP+<P7ppy2`1TfGmC$(cxCB|qDWI1Y`cz8ri@`tr7O<B`3K
z;gNY|7n#&sJqvDUUg+*M$nIR^R_ng3o||55xf%d-rq?13S62&5x+h8@{o9q9A1@S@
z6Xit8>BkuQJ}C=5TwEw8YQsA_?Zz6nAOD84jdme&nkvNDpRS(K<j)-Jw%6tjJBh5X
z`})5X5!I-X0gw>mKbfMy<z(3YZD`5Kb6g&5>GQxhgRVDjVL#LvXv^phZTPAXy|u;1
z$ea9G;3Zb&6dyr@e%=TjH9Le+y~KjS$*bZ~%XIG~*r`*$T(0OEdB|Js7U_s2aUls&
zfK|y<r|y*ZUKHvYnI<6{2mm3rnvxztrVC)JbQFLk&E?i>9%41X)&1eo^}MtFa!$ub
z>Xj#-Zabn*A}KrE1F;465}7yHrx?&m1AvD1b~own)Ex&j_UB2Y)VO*$RU=smN~)Sb
zPZTPaF&H@{%CN4xGgZs`Mcl5vHi(^lFMoPOB}PP0CM{=zEhakcLb*CPwY{r0X4KVH
z<mjjs8Opn-<#y5+NHP**UetM18dU1AL)o=<<r*$aH}AmA&{Kkf@x8A$_hlfQYr8I-
zkVCb~I=5pS2M4eHS@XTfQ?uo>EqND9WjBaXk-k$fxgjdo<8{U2!`N484t~)&6=J$$
z?G$o}K!E=(dP#{dDmqLhE1XE1hArvH2B$fsR%_l(|Eq`A2M|{(U5|BK48*mCGUFX*
z3Xoj@Ay-5PO^k2y{0x$CufMCi7iAfc-}$l>CPhapr&4S`CMCx^zWDG|K%LF}1~uQF
zr8#{PvPJ)_Z=OIsM*h80q*b99U^*R<F+m6dd);T7xxhm|2-gFuw;2rPhfdfj=W#Vs
zckRSjV#si*IJPOV$zfOR9RSW-7OuqYCyDG~75<{d(b^>3`jsLbI;0<=s=5mWcC#5b
ziFJ=&u$3O5-fE4RVDBC}&~5L;kF%A?@vdys*mYs&-lUmKjAz<a5Le)8woingA*4QK
zVL=G(JOuA0i)zymSg%48SH;9)XmNMNn1JjxZ)6wPpTn)>fL69wcv)BFmAy(K7G~)!
zdzDz5C1wi~GkbVzp#ew7lyn5FUjo=uhGz9g)&wWdD=D8PIan$z^MI>TV#e9bh)wHo
zbI{5St+kY~eh$qUz>vx)a({l*ppFSnO@kAHAC#v@a}R&iyr+dmop{cZyNyON<FU+%
ztmEju1^RujqCv3Z{2ZZdYsFYu-qe5;eU$am4eP{x8UBRA52QPyqG<d%7G=_B3-o>f
z091COwROD-aH84hT|z^3z_mlT-&l!&d6x0;r*+VqW2shEI*sI@*xB<Ig?mvi=3{&I
zD{f4tsMf~tCffr(IGRq(qHD28MF9{@+5Uw_H}6U95a#qsw0yBsD6e!HPNxO_iWGr-
z2ag1*G2r<}IZjU@^Q6i0T>||WL{aL)iA@%jS~Uj_L<*cvj%8Ij!QBXEZAnhbNV4Pf
zMz1_88uig7i_~!a`hurU?X)Jj9ea~$ogOVf;MMULq#>941A7#7X}1*;OC|=&OW!Ts
zwqEyF8`ohkZ&OiGYbz1kFVEk+{(Cw{D^=T)Q^~vxj;L2%NGPM)yE<8;&Ntc-rTF;S
zIi`R))g}S+W>?WGB`*g{frq-V&ghEuN#QZfikLTw*sCJmpA>HUDLPxUw0;MotwF5u
zX_LbNcJVpGu2tbNQ%<e5k7C8Ox59jpp%8#-udeR|+_C&U7*#tE?Z|KsWcT}P&$pK5
z=6O|i4h`dxH?v%WS(POBttoUTv66RoZ3vwEQSWt!)9ShyYR56(aYvQ4gR}%1?Q_%j
zF=96dt{paEhQLHcrT1e0Kv4ozotxeE+OD+k5|Z?ByU*uKWwn3ca7YvyxOMfN#DDA{
zwCWKB?RT&<7472>%wyfQYAZqHwtdUmTK|N{>nmR$GOt%2o4M*a@n9eb3tq<|*LsRt
zxEl9x)Xl$Em`f5Cbvhg@>?kr`g7W4LcvIlO9oxl&uU<oa{kI^J^z`b|@hccgRF5e_
z<ZtX<B-bEqr<O3UCU^1b>q`0{n3OzkQ#?>4EvDxd?a#Sv!}Rv*gsV!vw(S#j5IOBK
z_O<raFEc<Dutp>o5{y;{_9NR;Y?ydY9g0T2`@p_IeFDn&V6jtrR6Oe^%36|$_tb!y
zc$t!&wRB+P<n$gfzg5{Fx7-z84j=2T_gTciL|dIAnU%@2fZDp6=PEs4Q}M@x6YlxT
zW2v(e<Q#os@mk9HfCS}OwF@(l#39}lqm9TTm&GE+($)!)q+{|d>C_}NXiUGDiKj6M
zS@+10Bdv3XszZ+2Kw+6A3_z`BG|rr7Mj_83_sLurZ>*Y9z5YXL$LFA$3X|uFrm;C=
zV$l``;c&8QfDA0lM9YW1bOwmo%FL$&J4zjwTV4Q6=RXly#ntb$AopQXQKYxbs$KBj
zTY<V7B^U3`zgvkY6#D&$epre2M{I5NvbJn5-HM7YdEn|KkRYKthW~>ZoRtfYP}|V4
zL|9^VE!nVF)oAjB?W)2;O<zDH7APc+9!mV-^M*QU|8fUU2c9`hRr5_4>x!0oK5dME
z10BL2BkZ}F0jFkZyb5ELegd&?y2V6hi3+R=Ww#Bb%42cJ^!@z`o;~v^>14sV&g#Ji
z`EI5m+@0gfYX_*0c%-^78}wsEP9q1orD~Xu1p342llCtRCKlb+6&$LKYcFl`&|h>Z
zz$v?Y8CFY4ySI)1%}I~FXF4Y0yqJprjm_pOZs@*824G4MrNbvDWXz0pbVaJZ%al3~
zSo}zWNkurob8l%Hx2YzL)-SIJuwnhXektyPT`;BL!qETU3kC0<D**R4s`9Y)x2NQ9
znYaBRpagb24B<t`2XsT{B883fzhn9CU~vsI!u-p0R0}`)Da8jW?o4mci2S?cIm3bt
zbl18-BYrB5|NiCx3QxR*{rYfwG<oBn`|$6ii5^;WMT?=|JbY9w_~cp=YW0LjfaMOr
z+0<JFWX*s35T7?RK>zH$c!idy5WwItTrH=aKdU6GxT&?MqaFo>HsX=I#!69^)`tKP
zV0f>uL6b;t&D!UiEz}|d^mM|z;bGB?Lh}t@+?T_Ym12f++0Z?9x+puj!87P$%Tqwj
zQ?u;g6mtV*xacw0WaSnkO6~&<nn0a#4`2w{eJ)(!gzmBzvGeIa=oF17k(6<de|;0V
zOn_7gJ`e;-lNd4)rjH1EWNQIiAT2*f!|)l<$5oQ4ud<?cy|kyaUdviz@o^fGijhUo
zJaK~$g{NrAFr;g>w4#ULow3zHPOp%Uc7rnw_sBtG(&Ld93cuVkR0EOW@opwV?5(Sg
z7Eh&Oq}17`A}^n}%(TGb7N%V8!55z)yZY{U<D;GXqig;^ji4=lQLMZsj7Dr@O#e99
zC&fg2Px|<C7zk|=S)3wUM)mW3_g!cY-__pO-(U-;<lQI>ek<R!LcOgOe18Bmzh}98
z5Sc$0xke`7oFXn5)p~U}z2oYDdIxlYUu#Dzxv?0M?IfK|Umq@3r@l3|JyuhS_C|o~
zakce>QytJkX+n=e>Hk(4kkppx`asvCakrxSItAO_fdQbf0eyg$qaMm6Vw^JI)b((j
zZ3LVrEm#Y!=az^CeZacFc;3RKUIkE56<$7-cZ244CKhO?YzEu&`}e*J+3&*q7Rg)&
zZ<Et%Cq$C8Pg1glZ1UNckCJaAkfAvbr9hi$lTYixQSyAm#O3-U4<6fF+(UPC;!Njp
z<(ssNcxaEmd;cVnUJhxlDp@RmwiU(mi#=6lus+U9?;7cqS^uj<{6Y0aTwWWO{uzT9
zlD`hq1ZdOQ>U^)*oWBh`-Q7A=!yt{oQw9H<c)DjB)+TGO^Y)5!*(a<;tF`Vu2s&A8
zN4@21&+tLg4C`Dhd6!uH7$$aK1Kt0qp1)yLUTgB=QDhWL77m{-)g`*N;Taz#lSp_$
zKe|>y8<zCy3)8vX>_g=>D|NZK6fRojcgjY@y73h6?zryk29MK1*Gl(}l1X_Ac!ogH
zK%b1o>XKN@liOr>G~%FXjoGPm2Ia`+FGivLppn&WQ2$o0t;hZW!OF_%dh5^{`$=E_
z*?jcYNYY+^6Q~GDA@pfa8-)*O*1T60R&lvBpL<o6M2Nsd)Bhe5zTdGRv`-3IBNclD
zG;Iq-_9sJhm#x&=GT*(zEo^rlCg#Fed_o0K-FXyZ>J)c+hZW7!$@wkaxE#S*IWps>
z^o7$Ln)uV!(tJL7pMie1g5j;U6cEH5rs&28@#RMI!m$m*x|A$s`4Bp3Z979szK_)t
zn~5~B@DICVd>OPrdBMb2cNmYhFbM@5mufy%D1LOxIWKj%h$jNFwn`A@bBKVp9;Tbf
zD;(M{!@ef^m1YUBZ;}GO92o;t9U1Y_Sj|_;E}OB6#Uvfm7g90HJfoPQ;IuW4#^u=#
zj4BGPixVB4rY?hv9W?77dMp=USY7H?J)v*49*t*Jb)qRnTF$DSOS<Np`$VNB9r!ET
ztEaoUHFo2#9N|DSZOPrwSnz6Kq{K?BcMSN=vM9P!;-#v{ZDEA?aYhde4sfxnY-Pu0
zFpj~qj6s7a*jw$Uk=4NTs-r5@bB9=%L-iiqd|()0!;yA)Um<;+m5oT!5n6)XLos<e
ztxp8{(%G%`1)~mCf#;x!j6c<Lo^st@&Te;N4PQ`T*MzwVD_~(8=IW`q0WeX;PY33%
zaD5mbkSDR|W4XbKZr;JF;ckm4<5LG3qEso!dKK5tK$#`h8gjtshg4%7sE|yq<_)c#
zQ$a2JfD(1n{E(nPb2(V_Gj;~1qTQV-AyUq3BS@f;XxhCOXWL1>fMo!4ocp2zmxMjg
z0gB7fB{=@mdxn<+X(0g${dV;vy+;|sLOae2sdo9ScoYyD`ADTf+$?*$jRMVmea}yg
zyLASKhp*`Hrxdh?vLRwU1ohKYhIHfG1*7ZX4;PMRFbm_LM{e0Tbwgay;5}CZjBS#a
zM}3$BwhFzTHb!wvq3@=HNX+)3CryzHrIvtJpIw1-UO58EQ@zyeuv4YlH9^#+GKp<>
z(rz!5H?@%yRJk$ArJo-vm2as}rZIrUldbBzk1j{dc-H`RdBM}Hv}@P)tuT+tD|wWi
z7mDQUoG0d?AP=YhoQS!v5fGIoreH>ZYmO$Zr7*&YDH;F5e;%4X%<_a&^Hih{R&rdx
z>Qq<qydQ-E($=43<_e$Y9l<ZT7jneBc6@Py$h8H#R1l@LF4yq@IvLC;S)3AGj&50f
zO3R?ES67xDzcVajvA<QJsim;GtH56;9OFiw0FWQcSC>qcxrB5({+Fr~Fic|TU4OMg
zgS0OsTRtrUYarg}s}AR9mdc|5oO`Su?(f&c;@G{oJFc0RW#|Rlb}6C!LTqPje4y;&
z81l+2BYMnnygTJs3+1MiMX32$s+uVx1>bda`{}A0$XV6J=?hk@MA~$lZT@)Ipo5sz
z2Z)p}NIxpo_{?MbQnUZSU#b(_@^L<-D3!v;duztJTSNa|o$v=-+V`k=#^lB!KaCCe
zsCHX@8mVp8FMaJgv9ZS~z8$Op6QvumZ<-*G>Y%10{o3tB1m7M|8+F^Nagk$p)2GnY
zdOnAGJO8%&D12<x4OI%WpzkanC0?ehPAS=1Wdeimp+^{299VN%@{SVt63n;n;VF#-
z8jRr3Sc=c&T#>ISEuYxg!^nKT;or|x<wthEF;nTx8IswG?umvsJTFd7(|lSWk!urs
zSCuO#%e?{=HduW|;O5~no0iZlcejjEMDkiRZk`sM#_lW4(_YPo<8Y11a2I86{(NFn
zpqZJW@VX~cslp_4=dJ`-VH{uwwNRkTRN*#oNQcu5rQ-4QPVI!iZyLcgYSJtS#uHSO
zyo4N*6&!O=&v!|+NIFSfo_Bl|?cvod_2NV{FoX#>ez`gTRY6-9E-N(Twc4qqrY$GJ
zuD`o<&Xg1zqVLmbAX^e9>_6Kc?A%=vxBiF@qhN_XyvteS;JqefQy?6Zg2#>_;J-~%
zw!R4$WFK;=e1Y?05KVZ3#5^t^qk!bmzG&T}=;9Oi<KaJxmD2YF<<$r~FHb>Ke7ER&
z>%0Kaz*g@)MahByS$!{8z!8rtboq9+bE8!x7DSEGwXevxX!^iGLyn56OP(%Z+=RU6
z>HUhDE9-pGkZzHd_NR%0zhez?$y?GLouS`)`xiqUQ%nHZaYISiI4cf4h{luWTR+_!
zCHgyQ7scXF6iq4XAEXsyA7qM4+q{PtFuCEk1Eue0w%{J80-Ur<=(6Qn`DD+-hG~~t
zVJ`w)W+jEO-=qVdH!L<QkUNB$zJ+&Z(lO9Rz$!>OVyZRD^*oo%Pk7A~3vll3jxEI2
zuWm`pzs`R@Yoz@9wfw5c!u`b!T(}>Q{`)JwN2i0VKQ7$Y7vb8u`mZ1!{fi_WOaP_o
z+<{=C2|I|}(IN5=seiYo&j{n7eV4AF|Mz^C-43sa#gOlPkR)w+9+l`q0~jnrmuEF;
zrwkBnw1ARnH^~zO;CIs}R9)^1rfF;8ex;x0`_*=77&vBFC<4>YlZBY7#o^J5?Rkv{
zH^gV+&}G0qw@$RK{{~7wbzpN^Wq;^CI&3$^e(g2z&PoOy>%RR5Au^oI4(aky^@@2e
z#;2n~cUaGrdkiq!@Mocb5VWXcu$d;0HZ>BDRX*P=90w5S(#nS-vt$=2_zicqw(k0R
ztnzV{XcRC6Apkd@>9gmgH8Rfw@H@8ObV#@p&VVExW-1J%2b{{<7z!(o+SUuHQyyy&
zqTL9u-9*DbeM|-g91cT1^8L2!W?C^~ylnub2cjZY<a}#(F(-rqn47bIAlN+4G;k4U
z85tM_=U^XrivtcM9TCqwVUDESreWN$l8gS({Dr(pTH=MxE^GGp^|}MiY{?a@tIE%V
z^#R@DG_2$a7JUn$^;^EM6=nssQDE@QNa8C}&PViPKv@AuYb3Y>AAQyV*aXb)I#GFi
z{kQdR2*%WE9S+wsPLo^dt}R2%f>Yo8a2X~)3Aa{<<1_0kX#pK3>_4H>;UqBKL_#hH
ze#MRz&BYSca_GA91j8czoFeduFV9WBA_XN^Mvk1STffh0Y@I#0+bB^q6T+O*6{bIi
zddKQ&`Tp5;5nlNE7#-UB&vyx3XaR=G(8FY`Bk<+rbBsPflmL)JXh1o6sYKy8yCoat
zS%KzvBGdfk;qvS5n(<asSWgYB7MkOzxk3{&kE?zX3SFHCEV5sYKixzDdbWn+@rf3C
zOwt6Z?<PvivdhM0si@2rarv#>;1GRPrxCzlnhfcCQUe@j;x|Fk?<(ESl%ebOM!<nz
zB$sjoW<U44)nmA>MhBGdhRVRTnLRk<d+re%ouc&87O@Xfz1i$WfYC`M&Xz?xGOr`3
z7fvPeBsXx<<mj!sg&Dlor?swhdb~mpeF@f$W{3=oXRNaSs_P*;rJeKqRtHTL$=00<
z`b1GsPRX;KQ=@=4*dbRH9%sPNY?{^rh0l56(r1g{ds@1Lg&D4&>^b)IPyO6te=+5<
z9N6>qJ4<pZ)HN~|L>Z*BSiJj-a6qp1`1V`N+;14gVQSLf<xH;cNojqqbgD8VY5(Tc
z{1pMZd`)B37Z{c4y_Nho$S(d%#QbLWlL0&F7#8a1Y{TE)wv*q#!En2+TeJ+<a1)Et
zOIeFUzM5Q%wyo7oY5!jtqhpx{J6AukK<_%B>GqM7r0hysydJHQ{JD<8pK(7z!P{HI
zL}>P1`GYHfimTrC{653Ku`>Yden?dyO!5Km-(T_l%ekupo~Zl;;-i1($<QCK%mxhp
z(qMbX{i5NJaHK@!<k-<W`P`87U6lq{_fHS9okch=-2bUT$Fwvbc+xN5{f!p=6G)p%
z0LFt3i|qf)Tc{SRJ^|CW+8P}3K!`dW^sZ%+pe0ZTCZI3?Zgaqa41SIfhBAAG0F2NK
z5ymS?DM_(2)b+)VnI^xdwYYquyKjB^WX`)QiMJR8w%5XRQ&fQU4!QLB)G35~3Mj%&
zn#%~R-TA$AtK91>EpRZD#$})J2h!*FXww6FsUwM7(NzrWxS)pLWZR@A`xryY^F9i*
zokrYGBRVSM<sTUHj0MgrX*I_RZ*Y+l6&0h7c=u?lTr*h4%=BWT@1bo>fcgGbecp9C
z&w9OkpR-{jy#E-h1vq74DR{(ar~UY8@Obf@HNrlGuO6i-|KJUXf}aJ=GE7RLo-0ic
z_p?-0y^D>wXQ=9%>SB+VNl8ox<co-1V$}Q>A7qNhXRYSeIKVyTUSuz~x&6oXQoWN7
zjjHdVr^Nj$*YUsID=^uY(5!MPw{&}6ff;qZuK=+Kr`ZPDTZQDRTtCbL9>9Ofp-J+8
z$xaog2Lcu;QUg`}B6W(JW$ioO#1rlIWyH)FqEzq0)Tz{i6Pd5$nlTshe5UEb%qZ#9
zt(N2L1cprN8C=w;diS*~=V7ymCv-~dP^tfMafz1BW*KGY%cG2*uz8>*4dmt+BrMFR
zd5xU$y<vV=n7=%g+&HBv+m=?z$tzMW`QDsL7L7zUXcy&+=hRglz?g#23aufKjX!^7
zsyY{hSmj|}{I^_tD;@2Gsw`ifvyF|p0?nd6MkL8#XisO;Nje=vnwZNgNzBh=WS-Q@
zk9{b;;ALl<ses#_sQmS2)Lqv#)zfplVfg&2|7k9>%b#?JlcDOR(wxmOPak{sDpSc%
z<CQ=JF6M<Z{HTZ+I`tB3Dv>U}8zoIKIUI<s8E;41zN-VN>f2^65NCCuc|;s=AxrSa
zxCJ1+cKvQP0={VL(8~%23clLtq9u^xNQccrMIS2~bwgm<)&_c(CyGOdV%E79lQf!L
zjF4`9TuRGK-viDV<cv0Txc30+ZL!`{jm8?|xgM1+XxyV?f&tdzHsC$;xnK)_%asC{
zFSY<aaLw@)&=rcVKI0mVA|Z2<Rn+^igmxeP8A5*jOZ*TUcX?2nZpv{Guv*E?%u@1p
z05*FW`M`oL0dLB(2YykM3EWlhyv42p>GZOC^cp_vAzgJl4@$Ni?;qK862uAk(>`>J
zwWG<Zo_H_rrPPi*h|Fjqf(<$X$E<`wCyilJ!shf7*DK|#gis<UL$cBC>XgwoDoUBi
zBFyA<0z;UN<&*R(bjc_W%;5<=>U{szAgcJRnbjBspY;W;KfIVCiy!%<_0=?XxT?4q
z(Afu)9sWSQSDYoW0r;6as)Tlb+t>gaXs6=noG1c+h1P<eZVk&);;OLK1?l?n;i&?!
z{umP&sTehnot)Ba9G0r|Acu^RfvN9ciIExE9}vrRy*&|C4#TjU&A)(L=`dEOYd0}A
zeZv-i=f>0d5f6XBF|)rt#zLNWnur;bilCdY_u<acRX8dSia7A6mvNuOhC67k_X_mZ
zo@m9I+*p)b9g&t1b8fO4c8i)kX}lRmd)p||at-h>xYZXiY#;lI>991q{t@{VlvHW?
z6-Wc&PsF)6^Z^os+XGbeG77b!J5U<1!>jq>{Jj5TSn4Ig{XB;0g_Eq(KNU2~CoVgl
zimnBq1^>3T;R{6@4UJo7p}aNNb7b9NBUPofgJ0+0Fme3y)qe~9?yFbSTaABvrAkN3
znNcnUG8_fgyHt7UgY0VL6kkpZe68Oov<5vkZLKIkd!H<{F~1vzWXBUTR7ZHk5jikQ
zcH!H-Nf+$4I0jq}TtvOzPI?lCnTQu$Vi>HyZAKt{KEwI}8*;T)l%2j8p;_11sb)-p
zBD58DcPG*+@;2_kslOVIV5%X1BgbTBQie1v%H-BARtU~QO9(KO0b#72hvFyH@inaK
zQXx-gs|RX{&P&|eoE6~>2hrt<SAT8&pIG6?k7Pvr30I!GlLiBLuLtvE@;zFI0mb~<
zp!>T_u6><F07b3W=MO(PZ)<)3KSc?k6_L^43E>5OLZB?&AIj@v|2@L~Qo*{b#b;bL
zE|C8-0{{B`&ySg50rWJXw-ww!8jAn+h5xd6Hm87ivU!|%(bc<w_$u0W*8=VRw-*DT
z<CFpawpO!6InHYr+K(7Ot6MKOTg$$X%<nb9pWlc7Dh4E4Q%~FEhg0s)|3B{nzL}ys
z2Hf|Se(z-Z%a``{RtL<2-%Wh(`UXQ|U7>}h`G}y$0KhYPP=j#&-hX}mawpwGYnOmy
zr|_B91w22>guYk5W&!M?8$u2M*|%o+0|pT8Y}hb4uaUu)vz^+2*?>>!@6EltCIIB*
zXE;~FMR9h!GsqqPHtpr-Ez77tW4Q0#dP)7*6TocE&^j?hQ2EAmeJ1xTI0^fpxM9Yt
zGvuQGHqe&6jGi4TOWwY^Jq!orn24hzC$aPn{W>j12r5YT;so<)g$ODIS&di(n47;Y
z!S{P4-h7MdVUAIP`r}vLN>_8nOO^EELhd<a`?q;SmWIr07t`byNawBJF-3W7NQt$L
z+?WIzx18SGH8Ot*2eN6ZXBS8G>A*F#W9um^jRw#fs9R*WH3wL2Ij80Gf)k3KIs#t$
zS?eV>v<?W&Swy$^-L@WMeKPa_<dbQqo`{L|c)Qh9S`5r3+9BHKp(`D^wXt$$5meQ+
z1xpzdoSSZNJ`cNgpuyPWQ8`_=iYGvvLa@I}IM8WokK$E$c*HoUxr_xp(Q<EoVbr2=
zP_<q<vgOI%HoukHo0qD1u!TOJ6kXr8n^FT*BW?S)WkL>f=mxXzqK$DxY5A~`m@iMO
zwNxwnL5aX{%>J)?`SZovpMrrR`ybv-<;_cU?9)t%ER#=#d;df|%=&fD=1HG#LeQP=
zan~>4v7LaAbt=!ccsUDnFA{I&Tccf$biT%!NX33XT%eCmJ%~cY^?^w4H>-Xu$SqX`
zy)#{<%2nTHTS&HRKU13D@$QP^7T}_i1-kbttF2$)ye5a`%O}ZqP=|%4YEF_kPT#&i
zWYSsCZM*12)INOHGv(1BrJ5Q@>D7M~ALA|#tNr__*q0xZk}w=|R>#y_&MaK?JF2qR
z#vBoOId2_Ut2NYoE=5G#lYQbE7%omFzH}D{LPK+R*DJx7AdCZ!DPs_N7~ezR*%@!w
zBeLkmg>X)E>6Ym#<7-bmH7~At-hmJ2;F~=Yw0=7&b+);=7iwTf?U{CX-S4!M^K7%C
zVZt7esv1UdCOA`kPjbw~k5Bt1=RO5};T5l?S<k?EX$rsW^r(X<_F5ZGm;~<!rSJ*S
zoMij^iQ8{zYn~*@lk_T<)ULBWoL}LK9JBb8`%tKjdAh0n2>}Q5xM%Z;%Q+Eg(8(tu
zH)aGC6XX^b6Ezdi$RW}LdOfs1?bzb)9gDN1C6-C2y{e?&GLn!x9my2vdz`8oW}q2q
zBd@1>i#b?#SS4<#gG19GrZ!bmOX~r~Ny-N}{s5F!emE-cVTuGxt;}ilbCLNk#H*?5
zt8}4Z`ZOLNW5UPxyO+9o4Q^Xo)ul(xjGmn7S#UK1X9TkWgBB8@`e!bSWgm)|8CB}0
zqiMD&?@)Ur$H3}Z2{7>wOfU==inA;{A;YFG4{LaFzlA+s*v^?xYeXU!U7Q!O?Q+{9
z=^9TLipiIDuJh<`yCBLseNT?lVlCdT=bMD%z$`LH>L%L&FWEn~sJFL2_EO}#ND)rO
z$F(KOSfv(pTy()(??Vzr<uQ!XV+#Nh+5AaTeKc0CLl_q4VmZ-x@)F4dS85$!1C_cF
z8j|-UsBxI12$ktB)2f!tD?Y5UtHnNfXFLP!qJnw;9_1sTc!3}y<1`C5drKt<*s5hU
z@KD|Q4#QC$R!{rwc-!YwzL9OPhs(TgQ`g*trT*}VxzYQsH|vcjuP$M2keNulsH(4-
z6sN7M)AJ!uh-AWV7w`whuCjP!jHZxDO}wGh#w%Cz&501V6=Kr~>^Rd4U32}VpRmqM
z65hE#{~)hTX6k0|(lhLM^a<5z@2|y_Z91LvO{t#OkaHozdd|i*DE_O>*OKP47HVU+
zwvXfiw%ba?)KzpN;p|2!i(&fFjKq?U?E^SQ!BCnn8ZczXH=^5Z*Q<ln%yicTO$1X(
z(W|AGWc-L)vjX{An9Henpv7UbfYFW@?!}iFgE6E@%T7=+y!FZ9V#>yV9dcI^!8G_a
z%R@WB>-Y5G<I0w_TE1$jouE?#Ze4`E3t-84;@d1!7y1;RDy-T?2CU{7Sf*gyeaUuf
zD^-$TrBVQqd8S>jO-$W)QPD&~m1iu1)ObF0DKY(GPL>t4KHVY!@_aY&<;rk}sHPeF
z63I@#hdoI%qJI4D<$lGHHFgoT@zzsnlz!C|$cJ#OA==6=oB(`=MR7`r>3=C0JI><5
ziTsMG8W(3g;fZ_CSb@?4RN&b<G9wKSv=ZnmTfU4U5g&kPut#mZvUIoo2$#kyOFYaP
zV~2YG9vgvu=<t;4KCQxwizm!T)R!jEFn;zke?I&SV~pkHWrwWRJPgC2#%JXTv*UPG
zeo?{Y!8PFFd#IKibzW3@CUI%4Tvd5V7Zxh<Q~~>i;kD-!H~9B4x<$iG+&(032qg=R
zCKin|iz;<?MzkvMM(2_49d-FaIpkL>%<GMWYR=81Ucl7pp)fmHKMfIqkb0Xt+Fx(d
z2=IKKp9(Sj(4TGL7WrRCq3hlNa${Z`<556^=9L|~HV4>?wSS#5pqzNAW_5e!4(T~r
z_OEaVv+3Y}KwcRLjJjP{d)#Y3$*u0{hACf}#oFuk=OLe@(<_*ljw;E>F5Hg<+6aEU
z#HaYi5<Z~|Z*?*IxnD>13Qbyy>S0|SJUoEyf0{Y390^#IhUSZ<rhlVt|MrD+0K8}?
z^FQ=O_*4N?b#mDLoYx>uPAJ{o9=4pl*H*X|W-9VRvQP>HndmFF^2hr93A%u}k`E{_
zM{ZWcKS#z`F>`#`Z4Ql4r(*sZHrE$T%7k3h2F@6YynmU=<IG=IW@~4HlJ-6q0utYK
zc_7<zdRfu5a8rkJgQcoH@0{Q%g>&FKXhzKPbJ^mYd?0U~+WdSoIR$Gg-FIg%1PHvR
z1N!B|Iw#!W>`X8h?Q3xFGDBM_d-~`jXb$EfN;ds9{_-eOiOw_+Ht*r=&{G|qd%Cgy
zZFR<@Tc2L!_J4d{zzv;YSKqN>4er*`A3MeK9g7&B-ZYZY`B+m(quAnT4GBJ6=;yDj
z(kETMGbJ4wwAfxfy%E})zeJmuGiu>$7bfKp!t7cKQ*{e9=}Nez8EYf|;@EvIf)q=2
z)j4Q(3lJ#&d1-@X4RH!6la?coRR2xR9?>edmj@_Uy}Izlz>1xcZOmVL&A);5p`i4(
zpU+lr>g4>-v~BB>uU6C~?^Z!CASYTutyMQ-FRmDcTZH5Bac<9$JXH?V2GPZ{zQquR
zRYCyGck58DJnBld?Yq=9Km37wF2dSqJ_9Ez0(w@0)rp1I0#x2$ms!}|P(ut`ulVw2
z%mIwGQ!Rb2!50eR>!p(8CQ?ReX#2+2UQv9}1gNZ;-UQx>hniC*z#d4NOs6wgSaI$?
zYT*67#7Qc{bS*Q#S1hk=nFh>!4)!DlBw@o9Iq{q_&ki%9pBEW-<s}a;z8Ix-04`1_
zHo>6zof-N-j1$YrSgdkBVm%4Y8oQS%3E%T?e<x;7+{uT9RV3{g4D3r7CAQG76nAT~
zUgZ%ru?dE;7E_ruAM9{3k=aR3)-hq?Y@@Wu)~V>^^EWjD15~^GKvbAM17+Up$mw@W
zEF0|8w6WLI;2w#2Ax-aeqDu{d*<cSg7$B208f?g^Px9kYvs=z4*Sb{Bxw7F)J8~@@
z6vU>%Tp7At(f3`R<x&plUT+8wSpVK;`~8Mf+*5w~^y$3xTiu#`Aq#PZ)zrnfD<8?>
zZH&<3tUVqf1z)@TDUROt#4vr3uXPyEQW1N$>5G^1Dke$CJ{>zYfVWIa4i4m!q89hL
z*&#Q%;3s=Bs;$i0!HfUgPyoKG#J@92`*c{5*xGcY4@H%rCG0ep;MzjW_ha{2(e(C#
z>{urpA0<Rrk3#b8f8|X|`=dImovr@Sd`Z0uEAJf-*F4<Q4&hN3?g1;iq0`cnap_Nm
zEX0Rj9}u5@!Z<WUJgH7pT;$(x_1#*kpxE1`>?AP)PF{Yiv$OS}@+gqDNNo4z<mtc%
zq}@sD(55W&*00_CmjJ@=k5T36_W6&V?vSk*@<eS;x}t)|qeS$Fva%B1^6Lw<(VC+?
zK%c(=Q5(D?^7a>n_<Fe7kJ~VzA)Zc$yR&^`<4s>`;!zH<W^t#M?sgd&6W^P^Wl9UO
zId&rX!w0;g0)2|68Az`>Hi-pm5gje{#PG?pmjaJ{&5xgG#JlFTsN@mUoL9Z_Tlh4E
zbK_jw$uEij90311`lUe@;`~eH=#CIC@EY<8S}KoRf42_u%34t|0_O=^6~Td}MOaf<
z`WkBKkJno`o1#=kPls^)mg|Nx7tMtuc72e)-@ZREO6iq%$uq`;*#0A0@-Tgiy%8_z
z#c<y1v7g;Cz$<)n@7!GbpUcTm2L|S>3@w8=&V7?V@g5<NR#b0&;rT6A{rL*u@5O6x
z0-x#XAV`e+<8|xw1^Wh}D2F!`=M2Td9whZi5*Ld!zDu<b3Y>oO<DG1HF~~pO>j68R
z*N_V^aI(OnmoQBu_@X)cX#b~qLn}o<0;>9-2?jZUhxp%4tr^J}a7`CZk0A;Hn8#L*
zQ~|@@YnDJE*I{Iw%td;jTd&vwr)b-3A$rYm*kRUbBVwYa2AwJ6t~OD?-$$?R%Xk_V
zZeLk^ZUKyuBU6wS4HlW{{pVd6gaTj90d?Hx_G5pqq%^!l5Xq_O`Q*G-3Y9Xo%CN_^
zW}RfzZz0RrIiYl<g%8+yg*SETq&x6Z%I6n(qzkDU&nBK#ORB9a!h9hDLm8}J&B@B^
z_I+u{okX!(FT8mx2U;QBcwHVDX-p8z!|+~RnI=-<M6F*jF8sy4{j0C%7Z*F+&W<av
zq~rk+<?j`YGt4{R6fd&x=Ycs5hqt53oc%5NqnMHhVms8uDBee1gm6}PaKSsfBHamI
zN0raN$2B9Rb9&?ynmOGf`@TNk9#DG{avyX!==vIjiRrPDFszIT1IIyjz=&>JM%)hc
zO@&<as{H6=;bK30)W2taXE1N#^vGx^0Ynfk2ODyGI)^cUE*PYplf`2Xcl$qSYzvE1
zRFzae^23C0oE1OO^23sQye{KnEE9)oNksRVUNUYt&FTQurFXbLR%`3hqh|XAaeKby
z%i^qwo^@p0@jVw?Bgz0SO|br{vvR-PmdX0X<oVG`ZJL&Y2}p~VLp^Wmg@VBQVzQBn
z<g`>&Njp(OH@W7ABn#8Le1M>rP(*!ywq*0*$hpH!Y%R2vZ50xv$&k-F#^x2*TU~<J
z8rIr*Fo;CO%M43!&2ST}BlYnj9{YF}(XjOexmoVR_9o_H{^;+xS}v0X-;(2zNI^+C
zmCmkA)5#}P6$N({9Xan(aFt!O-T&5Yt2)hF<Z4}%qa+;>h*C*adPX2r7xX32lH=Rt
zhLh%XDX*O;T%}B9AyLuPJ)M&*uE&>K?TZ&btcf1!wB8)15{JcluX+$UMRd587D=#)
zu#*_X3unF6>B}w^ISV?SBZ<wac>pnMSuyPt)u7OaOrI@&Wc%1SQtB2QJ>B(~Gv#4L
zu2)Z6w=MLnY<Mny!>K){mT{|L$%+%mP2=gXKwnTJa71I|W<}qz=*oepX0g<1_2GMA
zj<oD|y!Fg64jP+IO0Bnssv>A86he(NA^j{lnN}bFvCF7to*Hzgop65c^!v(i#4{ee
zPI33NE+LYA-i6vR&Vk}5)SaopMspb4)_2S<D(uG^G`=GL3~ew9h~BeNvW2<ZNR_x3
zE_=su5Q7Mg9>I~H1!W`K-VYpQ`DDvn91AEz)S6`IoGd)8Tzau!yV`qgtDUdVb`Z0(
zz06DNBKV>EQ`i!vU;ebP1_{;y9L*kFq*qtezIQzs$rc&yJsh~<Y3+1^XrH{fv`8H$
zrAJk(%@@Kr>n7)&-vj9aM>Px^7xT6)?gxdwr}Bc3&8b_FZI@HP+@u^s0z9-jsJRg1
zqWT6c`)jHvbJfTI-i+N3_xWQqJ<XdY-EOA1m9wR`4j8nLAa28<4~5#39J}O|*+-Y1
zZ53~~>k!xs*!Hg_&pN23#cuAJ4>cV@TE;fmHy9=9Mh;4Gl+Am$mh*W#NXv2WUubkc
zT&-dKh%{dqKa2J@{QQT$i|47D%l7bxtuJq!`xx)*b2b*K()Au}rTA=>Z<KXRbX|s?
ziE?aM*yPC+)Qc#M5kcukFh!Yfn?jErrqqZHUWBN$?1zdlY7#mX<~y*&Q<K8C5qpuq
zz;arYN->m5`Qq!13C9mLwU+64u;oLiokdZC-qrE60C^6dXQr*J+Ukj3&=(qBeD!=J
z25-5Lb&j)CE=$|Hdj}-1R}DSs)2H|~)=v?#jEpz>L`!ijsH~&^m<4cI;qK1<vx`MN
z(Vlr@@%KjQuQrWtBpAP+tac1}c@kkNFSxS#PjK!1Fe&}e>qK)w&ztRrK_m``{^PwS
zgD6*^7&=z__UqM)kEn7Cy}KIva<T!$*)JXrrh-&LY}~@W5Yl`Wl8VYnb|>YAfM1w)
zpDF`i^CncTIL7`>wS8D>3d*9Tn}OiYz|%sH>cUTA1g=stv1xd7o6N58ujBzAEkYqJ
z1BrF-Lh55J%XU#uC4F^x?|?bq#>AfT;O<1+{vh$ya_^He!BXWQ2y@qUg?SXj`5`7+
z)cjlP{UFRR_#SGMbY7d_cr3zx0xPTpN?wjtwsUenpDomgK$1~N<m(sefSXe}nvjk9
zNzX@Yyu^~pY_ChA)nYbNQolOOI@xSKLUBxC`ufFKrq@AZ#;8)j>&v%ZoN+hCg|7*d
zatvnP+r4ha8dHkMl{60fLc})P8KupK1It?|b%lTt`uWSIMf)Tjl&$+AN}U$0e7KgT
z`vVR0>U2>lnieFF2B-|1zvkfKy{|KPVZAS}4}~(XCj(m|CUd9*lWpVOy5+?eKY{hA
z!84=Bd7Wc6OdLx~!Lv@1J&DD$=G8$}M>@W#PZstc`xdJ21{Phb(v>U2xh-mn;Y6Y#
z$94Nvb91Uk|GSF!iJsHx`D3g-`iSZEY)!YA_{BA+jc3{SLT=o!Z91k<{tKM^j&?Hg
zyglL0qtvsO4z(K`##<RH>slKt@u#X2u6&QM0LlJ)YFlSf{<zGgdJ7M?l8Holz*P{L
zgq0WsI<6^;%--Yq<AaIQ)^iBau<}vtGKn@Hgv!p-t#C5WB3=N)(eWYAX|#FKEAH84
zz5(@7gHYhWqXBU^E*GI;{~#%CGw4a6JH!xTA=v&0L7V380U_^I=A*+y$1D*kM;$XW
zV|aTzTkdoZW-diyF&s=ePedq_7yaUiT=V8Z3?m8oxIIgKirMW%Me2hUyo*SF`>IxX
zV_j8Z&<jZHwUn_;9KJO%a5^E2wtn$y9$#bO_gcZgFG{}ZO|vE`$+rpACx;@WjUO6^
z3+$E0GOdGAOZ?V?Cv(ZhZnEflLLp;-XvGD4Z~wkeer-B3n>3Cb0cn=y6*V3%)jq23
z=)4sRjG4{#XUe1<2KnMtm{UDPytmt}b~-+IzC4)uFcrD^ThmuJ=3~cz@KTkQadwB5
zvuQVT0PAI<TS&jdh#4#las?aXFJ;t@3Jj)`eYhzoF<lETAG(-jf_TFG#Qu_BC5P^Y
z93r~^X_<#EqFqzdYWPLW&K@V45T2@oW^@hqze{ZNiZ(5F<tA9d;S$kz=(t~;22%`3
z*R-hay7k_RGg_=ric_}rgV#$v)bP_-;zhIKL`^4)PUh*6<x4!Ia$IlhW!v_;NCdN_
zV>8rjXL`T%BdQWcdBB19yB-ZVd^$BMDlB<M77YG+DO!BIcX1&?2n>0sD!h5LTx)?U
zzfY`+0?oa>3Z3ST%~V=Vo97%MTWky&+ItDFsP2#_I%tZ!Q{6IJzd;O1*Jp`UO<yf`
zIQVQC;9~x9K#$+Tc(3Kek(>?h4@J%kJf@QAu5nwE?^x~=dm-O_dChj?<|x1NI*+DF
zPuKLlx+$=3>A3%>F8Rsx9eqAQp*%(M<&12Hb}=#9dE+ABn2s?pUrli*$n%wK=%GhO
z&eFyZIb~jf$B_7R`u@9uQE<e``to7D^WeAk7~|h`w}>lCEF1}X|6x4+|H^nqTXQ0o
zB+PQ+0MlVz3AU-vt}Vll(kO!fL(n8a@%bWl%Cof+@U|HTH~~jGoK;Xa9&9A=rY`?N
zNeg%~?`oR+UDCujv-EERdt!W=npKYKqaRWGf#yt?2NXwma=F8@EGfB@Qd6_66-9)N
zYsolJk*txie~e913y!nU=xTR7u_p^cm?Wz2pX97ry3AcyY8RVw?kariF<9Efjh`$w
zppMM67jCt?+8F~*H#Ll~=xlyV0LH~@e+QRzKsl<S%wPysaBUH*lD?*i3gLLKWp&Mq
zd+Dn|kcUu8RPdVDva1leadRo0sZ4dqrzgd#*|8g>e?rbWu4G#8Mz1*6c6Pds<Fe6}
zNq1)vTUAY%DgU2D+c)`Nb)o$?e}b_2#cJ*dwb?&CV@Z3M?N}Ib<dVM9PLG|6#JZ=P
zEaf^oOI5H}w3GpOF@p7ZM+7i<e2GT}C+E#>3Ka)Mf|UfclXJ4fqm0iG?U-|9<7B}>
zGm*sz!s!7)lky0U^^y7~pZz!;J0(M-U35tJu06M8L+q>3S>zOL#sReJb?3Ckf~-AF
zibR^=&JilgX_1fiED<7^&N_HHYP)WBGW)PHMpFminn&+DprQwJN4lfev<nlvJ@@x0
z`5EdfXL(;35`Oqi%Ms_f)P|o;7hbJS{jhVg2mj>1%oX<;!_QFki(1S}P$T_X67W0g
z^%u}L;|Nrx6YJr<cYh~W{z7B=#M}bTzYL2h`R_hE;N9x15Y&Rdg8Z(m!A4_>D-Q+M
zIsLd)GkO>jKAvpAxiX#qsV`?NF$Et<CUmW@{XUQsNF3r37y*nB)w+CZPLq#vz=WE=
zS4sc)anJ-^)BVrqf<^+1po5-*``;EJiR~&Nad-SVyGB{+QfToO=qO9XmIXDZ8Eo)m
z?S>|a(@xI#hx6XY=Li^UoO7C>{TLXt0$hpr_!W6)k3!HqVcVMn8W;NoKUvh_aDV)k
zNvDtO^qHZ0sIbVsluT!*gO=%b;||lfQ<Vx2Z;<DFtoh)_^K3)jz}(F$IjN<~KbZq(
zzlM@#A<*Z>XT<SSI(0{z-c4lEVU5UG8L(B|91&qh4XZy$e4L|_x++Zmgjemwu}7-P
zqt`o@gj(06e^iLg&9wccF0a>wV65ycBTTF$m*obqPHiPOhPRe-c2kkl92vTmC%erd
z@5o%h>tHx5Lnu)7gl#yHM`WW)LxA##X4yHf26e(#S>h(=;_xJA((!C5Z)>9zr>GNi
zE8%EG>Tveu)D}FZme-8W<rz`sM|BI$QhH5p<#NZ3`vV)_>mK(4VZC+YQO!K$^j?W*
z!8vy+gVjeM7C2XQ7bP3J|9_Ik^{ek5XSz7{3Ld^$3sRDWapUZjqs(=?6tD6&R_J>b
z=;+mWdg}}qN03Pi-E|6HvP9)K79ws#Bgq4zx4NN3?c*Je?Y0CAZ<X3Z^Z6)4>(NoF
z{c9&Gf0AFC;>f+Wn5_U9-TfQn;z7&2Z7c-0Vj(Y#j*@?1Z43hZ>{5L$l3yB-DTX25
z#ipKC?RyVj(0sxy1*$8VWN|U=T|iz{@Kb+}yFqq0lYR^8ofVCfAb@(<g&3DBVeP_V
z=J4uF1&$=Ist20{a{An7B^)m&?Kn<uEF)U5j&K8<0^l@OyfhD!G_y`Pd-!$rrjA<b
z>bB%r*Y?+dZWt>!n_^;Ckh^FclzX9aKXM}!kR0afln~P2VQIm1Szco?z!+L4t!LFe
z>Ccs%<&>Id{JDw$@<7{IVgBTLuk-%kdIu{73P>qlF%nFEOX;Qku`0qcNhv8Q?O$$J
zJL@|Qd&dmR^#~9?8py;aPX(x6=d%4*tDx~OxRp!uuWZ+>`QW=3$KhRP2aQ-m4_+LD
z`Wwo4Ino;QFN<k2pLrO(ONIoj-!kMHY}qqo1j-(T$I-#=HLljnDB*M3_`Ay++So#h
z9NV2y&AKO{Md`rUz695WKZ#$e-agEf+g3tGh)vsJa$UZ)QzgV$PEG*$=#go2hn#8s
zZI>@q7y9>?D|xqB?r%R6&#^=)>5eXzOqyCxuwN}BhfN&cBRDWOoknDm2^|}jH3{?d
z)eV<^0>Ti@U0Uta{ZK2%SjANS=VL}LF8$(_2vDR5pV!+1SGNwg^6SMLXM?GU35hF-
z;D{&x+(E#Rz1w#I8P*M$v;2z(Ccpi^$^+AX=Yfl!q;Q@Lb!Kal?!kfB(r!s8MEm7g
zF>hq@5+IoVg$912#fMWiK<W8|2wuxDr*x2gIH}Lo0i1xa=4yE42Yx%bHFdpcewkTr
zbrp4l$0Vhkol()GIFNBNZ2M`aP~wkiE~ZPf=gg6`xpwKMN<R&MZ+$;Cg`)iJ^@(Tg
zpMSL)0nVfUkGuDbYBKG@Mh8R`5gUp_N2Q2J?;S)%I*Rlvy@enx(m@myq}R};cck}b
zp+o2)gr;;tkrt!`&YhWY#`o2EzjfC7ew=mI{1~K!kUY=5_rBWZL+9lU^by7Xi4^C>
z#=+S_5hzn6nLBR2Md0_WoeEr?Kde%+7mJiiOh4Z>6FD1BNj*DLCmWT&eA+`;z}l$0
z?cgz&V%5d7j_rTXu|J@7)!9<Ru+;G~#P*r*H>!}*wBQYqprb@3%6{QTBe<uBD881)
zAAaWVtK9D9bWMJC&F79(g<pO7pU?4gf?_hSWc71E-;eKXb1>2AS2g_|scirJ<gY&B
z=WM1j=7-7$olbQ0Z8#O#yT>ie@bew`z1FTVT)4crP)hw*(cHZXSk<MYq>O-HJ@%iU
z8+tBfEFa&c@qZUf&Qf&3Gppl<Mhbe*8MDo+S1j*p<!rBwO`3`SkJdmn1-vZ7*<~GC
zV)*R({u6H1G{>F6B^;Q<pfdnzE;YhDp`5C#;IsLCdNT|(%nu$95|;wd`ORwoqY(3X
z`8X5;5x}S!`|LZj{QaH&2kyVH#=NBfUNB&7dXEWWVk?$<q-aziGS>=gihZ7DTw}3+
zOBc7dr^_@i6<=TBl<h(3m@1;Adg|v#`tvcH{QxiE`nAJi5ooEtv#$;}aW4QW%}8H3
zc|)`QC<zdyMdhOLBrdDE3UhvQ8;`W~uHUG;8`DLMLEU=nuoYywTvf6;t0~zj3hE31
zjc-pJw;)DPI47BK)UoC|=T)*iVK4K7DNUVNAY}lCQ~=7(WxhnO_&RQq&T$$-OAwOU
zWk`eb+alqfrG3Qjk82#N^mbY=!JBr%3d^ijO6!j%&h71-V(ay66TbfQC8R1##FuMy
z5Wd;9vM3(wOwzX8e%iV*f#{?4WE90ksnj#Ry8cdK^JFLH-YV2}B}d(s>yltypOR3V
z6l^KhmuoZo(D>MOMUr|BmA~KdH1b}hB)_hNZh~sjC#I*epAbl0=Iz%J=m6&^?g^dt
zbb$1Uu)$c+qz%PYv7W0YbbdHcrAVGHAqtcZ=AO@An;V-s3B+l-zBJ@3@ds)b4oshv
zbaSV4oh4^<w;dtgJDhxY>C!B;?17<fxxNddd8cTV{!M5?^X}$1#@C=mpV#=<WfHq1
zR+Thw`SZmuMSE#+B(3DEyO*?;s_k+W`ktRD<O9{v+lNE8n%Xi2=6~$r&^s+Oauf(S
z*K+c`G|Fq#*zC@Z_t#O8iA?w-e<~PrE&gPdWb_rXXZ$2sL7T9X@(b-3tonsUz3M&#
zC_H=OrZ>=2F^|TuPOU3O?45rT-uO_7%_atrTfoS2r)OdBQQ3W?;_Su<d`~8K0v#{4
z$FXF@Be#Cw6wGKo+gU(%V21AlpBUBMDn7qpb()6a=c~}3nxLU+^K%jtNUK7ARo>jI
zCBhHYi=Nsl>_i{M{z#`Cmy*i9TMu>8tl_PV9N+kyyM*vBhceqJjjaK(+9-c3pO1z*
zD+g-{RMN#&1-|)-8RfiP{RRi=a;SUe?%Gj*iZh%&U|<eN;^rp*cw^iN4Cy)L#Gek(
zX(7p-qH+b#l~N`(abr#{KYrbxbp39bd|SK}T>0(qE9*DtizhKTy*GZo=6s~C5F)Wq
zn<-BKb<zQu`DsF9^~2Jy6ojXTikgAWphN#yj}-_d%yQwx8?Dl-bF~Bzvw45dfnE6V
zSi%(jgm~J3vL!JJmr}&9ZA`%P78Z55+%UJ<M$(Wp0=+P;z}205mKv|i0pY6*lJu1O
z<6>67Pg{uEcPpmk!HrJd`&5cH4La)Zh;bGfa?dV~S(t}jG=xH35sJlmpFURqGG%1=
z!k-@I0iW!v#i)%MCX?%=HbYOIMiggUCTgFxGl+mk>!*XwZH^!g&%^3sFQ0ucfPO~S
zHCi8R`_OTms&z0a(7QB&Fl%tsmWF!SM8q~}lNZ=_bRcanAi3RpsH`lX>${%3H}Ls9
z*r%3KOp)Y<&uUoXv=^&tF1YG)i(!7TaE5pFSz#zk_ky0^*srwh1Vo7>Ks6(0Z#1|2
z@;nQ3<hA*;A&}EU_k6dvw`)fs8(XaOryb9xiL`JP=C^Q>C6jsDHP-W4F|=@<VhBAw
zMBp3P!nIoJmBmH@2H$(nej#FHu+JjQo^lo$q{s;c2dX~9_1ljt*Tuh-(uZdmc;2QG
zLvL<J?>x19^REk9Qi<^g{%_Zn80;HQy1^jcjdjf%|BWX6b9US75-d1I*Fa!PzyIQD
z`f;AN0HNtC-Ss)Yde+~oC9p%a5ykP8gd}m*2Kn&f>uVy!{C^0db_^J9_95neCwW!F
z2(;j9oPF1B4dDK#7Ch%99tnvp{J%RCE5aA?ba8c4b4)dnoN|vns{hqH)uoAwhOYmq
z1((2U!Bv13{8@ny@rSfi+xEgoK%%EVB7F4<eq?SL`M}c%v#}cCO6`=HzjC>w_Js*g
zDJdpHo#a!(=^<|4v@e%{u<#uXf-Q_>UZ*dIiZo@U<l2D#PlFG5&jc?Sb>0;ep>#S)
zpmH(p>%MUZk6??MqEWZHT#p2+N;hgYZ;Y~`Y0s!uOvLd6<*E#DS><T^%B|myZ1Swq
zr&xawb%Z$51fj1s*x$<koXvlHi@~ujMF}>?bsBxW3{;PXMq^)SOFtXsy-|j8(0-uq
zkj>w1U%*_N4KyeO!XSM!fCun+W3HjY{RzA_SJXWfL^BD>1!F#TfMVwQZD4Jn2@*$E
zprlK~QWqK8HP@gcmzom#0$xzILy}wi)H~0^Y1baW2#>SaQP)-z_)AyCMQj@Wn%q11
zap-my8!TSOWxAQeQAr<i!kV~imA)wKd0Gl|2*?}?$Axl|($9pRX81}<1h`#+lztP3
z=}fsVb4(7PD=@=m;T*P%vYc=y6IXr_%#z6b_3*F|kexS|CV9%Y#Tx`g0rS|vsZ-nU
zmkie5NwXxpy*_=8u<Gm*Lk~4^rwnsyrY}Gf39v`2A7*iL8>MVZ)eR4t+&(ankZs1M
zeMvd-aBSCRQtuWheC>WFwH@lv+u`NpEOQ7$X!yr&8rN2$UI|{`3bKPoOcJaL5?U95
z-*!YznSui4Gde_l>a}uH4nY;*Wg|&N{n5XT*#uQ~g?v;55@OQ1RWngDSC2=mk)c(w
zL<a|*-8%;>h}(`IjzDG4T*s@oyx`6AGE3M{PBMQhN|f*bajr_kmtQTy^DVpbSE=^3
zm5g|j5Wm0b($4^&G~5{icB|}U*Vf=>*GqjX?0@Q`cnAtT5|S!fOdYJItpVlf^!jYL
zmSecVrP!P3<OcZ=v!rtI9trK6fR&rW<BOOCMdpq~rBkz{<QY1+kI(8TP|nQm3Vzl)
zcE67*yH%cvPCUGW2R<rk<zmUR$h-}qOUSHTODw!dd;4fpf1t%QZ(?_eO0K&-8jM$6
zryU(9A5PXla;$iNR8fmeegOl4*ITI*<d!3dtn}I0tFP_S|DG;>=un2<G!Ns(+5=!Q
zqp73%A4E~wwZ_Tumg`+3-4~Y)*v38c+!x-^-B5)RNpNXD*@atO0-O>fEH0O%!g2(u
zwC=?@CC;Nk=;0~fHpbPgS+67_cVD^j1@S@GzGvI4ri|#A6*-bAV>I_1Ij^GvMl{)@
zPQ0JEOCm+A(>$z@cd*=wm6f$5^p6@of}gIboJg_9dvQ9_p~CAe3Z_9Fmi+}h0Om?;
z@KM&RwT1=a>M;wh`*{=d=gSw%pm7vG&N<(aO8Jvcdso@dd)mc>ZG1I~6S;6f?Iiv&
zuKH4U>*&F7j+sEqQ8`F8DU<^eC1GWZaI4Euckh?_=U2+yWyeyZT<n*X{7k=*l72)h
znh61C`Sxq;>!F7I3SPLDGp@$UZ!RY=Ao=GL&g;;qmFSN(yi|mj$$9M@IS7Zj-61X~
zjSRUMYzkNwtd=*|!IY?Hh1mD`+kC$jupVOqG{<~gEkZ!ZO9q6z?!I9RlCC@czMup<
zDo&$yiv%f?s1mb&`Hq3J^pD{6Z|h5+Y+O9-I^x<>vf1-U!hR$UG+dPU<fu7_zDuQR
zjPk0W-c>yJ|2Tyk{}f7labS|V&Va6jSyy4@vH!4e(MS(_pJI{PhKD|{Vvus^GaS0h
zwi3xMGnO(Er5u~%%P!l$G)9Q?kUy4D-SCtZ2SNaVuAd1~V4PBnUH&G9oD8?5{JCkA
zN|hk}qd7?R&Xf^Lj8pX2$`q;hm7*noprTT2A}%qkudlMA80Z!LcBRLWEJvKrB<b?i
zpf~FiI(7m!LBecieoywjPy*Y|pLU)95S?o_BTe1+OI@^9uMdj+qB#3p`6jGScmW*o
zWrP=>ye;)yzZi=P<=a`-?aw`n6yt7eBn#U3)yw<G=Y~>&iizrD1}jl-tkil@Z&_Ne
zrneBsFMiKo6=IFi-W+raYKSFZV*b~M#eZS=0szp-81w$;H=Q2RC&*GPs9Ok0zM*;x
zD7qdkIsVEC@Yk=Jmiq%h4^a3MK)3hyJ@+ttZA#AVJH7t%Q<7po4c?F%+h|sD{r|Us
z_dgBIe|}Vb8B}1r%DNeMvhpL-0|#sWu8{jLUdpc*t?G}Y<2_&h`2&Cdb4Lzj0(gof
zy!m7TLKrE;Qv<p-ipPJ)lqy3s+d*^(m=8@&W6N}RZ2`7UiB30zz+$l=m?D_yTvk#T
zzzoN8WI^5kxh+U7I?ZKftS_v#P44S<JuKeyQF2__Qh}@^Vq4u}f|v}z?+2uRjor;I
z+kXw^yX$<v%&)W;1@-?=l0;0FVfCXNyi!Q{3#i`foEX+%Kiu3Pzxx~z9%#Q1jBV{$
zEMotNR+!CvS#oLe=68Kml0TotpclNv%W%o1EC|&2(;K@?YleaE$%)4AGKjMn8sL~U
zLKd#zC7!PHosIY|A;Wa8gIeJW9!D0lmB6?u#r-3tPS9Rnm|@?0`3Yd>;+s=F0kgi`
z`m4^y3;l|*ND@IxiHU#O*}p%s)}IE5!yF!EZ7{Q3D#>D>ye1>^qH7x4BVXk@K)!a_
zeE^?zQVnk=Tlaw4Jr|5-VZnyu3GNqyXQQeVFRa9MT<-!HZ<ANUy)l3OFt%*=@PIa#
z*e<uqOFb8!YWyfOR%z_Ge(m>p#X!jEL~q~3$d>|Noq>>Q6GJN6N#FFQB&l}3Clkwi
zJRN7}FifqG@x-TCagm&<>OAJA{&ktzvI>&QNjB!V%Igx^$#s=Y1%E0}@|=@|j&Ee2
z`uUn_uDSSQ2|q8igI-OO=4qH(&V6~7TSa{94Ylvq?J$VlD^8U2V}SPBs_-~&&DGJ$
z&Q<|k7OZK?s<ef0ZvGlAP})C~<A<Ai?=Si9?R(}%JSkPUMbV($xDx)9XF2mF&tFpG
zPq*-zPr*xz09@I>%O8I3GubM=iJQ`BN<2FZ&H#@A%IPXfBPGQcEnf25oYd3Fjn-9%
zUk||9x=7EmjaSJFHz>b|_x#2D=fiSFZ=yKZ<C(>4vcL)c`bZCemVy$!=!9ig*#P7|
zt3~|N>(l0h@q7I>+Bf#ThFJC|jA)xLmji(tkZNb(^}|F7yH~}Xa=*nd_3Qklp`i6m
zPcHlXX5|vAP4=5At7efxe9GN&h>rnzeM7x%vu-g7W|ub7kZkp)A?}$}pn`lS*<G~*
z!MN#f-zE#00G*R$S5k|7?LfBii=B!&ZGTMKvb%i?7;&&S?E;XzZg7gq$TaJp+|H_s
zxmrxm5L;i{PW<sb6>&SD$uIX1Q;u<u7cpHP-hRAa)axwzjdP2!57DNa@a^L_HJdlW
z)G67$-k9#^kki#=J~JY!m7!`-D#j0nS`3rspQXs`ZHQ6HQ8Nz5*)~csT2fZ(4a5L>
zI0FZ~zP4^bc#X@OcaFxIyCM(AE~xz6GT^;O(%d~1jxL;8$>(w9pIv)G5bTuX+Rw(Q
zEz16L*7g)oDuMF<X+nB7Xg!jp<4OL_&g{+I^NXJywAch&JDK`%dLyF9E6Q=X15|M<
zVR`bt+T@C)a6@(04LU++L#fCX2huZ4qsI$2&y}-tC{3>f74d6T(ji|5-uab!SWM<m
z;}Dyn#EiW$4_N=bk>7k%T$({#yrK8ppgNc0srw8Cy~ze5A<dK|mV{O)hS;^0+rMX_
z*+ynW-roA<ylz35?L9H3&0YyMR_T)7eetpr+aRll<sKONWuy4#Sv_q97*es-H@uT>
ztbKJh2X6m6npo-dGvwVH<-gj<{6i)1sl!`iki0TYKff_Qp6S+ieOSqDUWDJjAk;+Y
zex5mL>YTmP&u9MkCa^bBN;Ng5>jwFswwrOoRGG&a2e1gbzofJOHQeF<sY;4xl{s|H
z{;Xr)AL*A*E2j&*6w90c$7o`XlW~9Qra@U|e@YUO82`C69ke6^b^j-WmFFeUDx~x>
zn`~$SEA>76<#h-yui64N^cBF6nCidhrbNxf7P`BXzI&jtE*BoeVQGNY&-4Uc&plr-
zNB}VQ-Qr9&9Xk^bV-7{AhNBXT#asvB;QB^`u0okV0YCB`b$OI$sp^@)z)ZP!-kA*m
zl*4;3tcDq@2S9`N^Gj5n{+k+e?Tq$YmD58ezC$aKn;#REnx4I&6yDnmKv8>d9Ib$+
zW5ICx1xbDRG0s-o<T*N}SRw3ODB>c{Rx|r=h+Ewzv-dAubw*sXmOksB0%=5Hd0o2U
zUTdQuwCftY(V=S4Ekxj4MsiqyMG;IVAo%Cw-bWOq@Xq&I1T<b#MV#FB-~3)GJ*;3$
zQv%(SmdT(>yRgv50>y2Flq5a8PgLH#KqU+g=qVscjn2zR5@OX6oE*a8%*65bRRQ-E
zfTs>{*N2Zw*5=>khcE;ghqjAOtphSwr)#x8=_3-|RmlzN_~2UO0M-d33k$vAZP>`B
ziZA2V(ni3b^DPeX*|2EILUJaa$)%g9Ys#QfjjkyzR{RT~L2a2A-#8yI&Ku>8TS?UI
zQ>Oe=&#fq_oW}U48|YnLn~MN*h?X7YfHc0zsUTt99OuWa9))}s!=?oPp(Ji&=>SUN
z3M92B6u6@rID%IvAFXk<b@OW%dLOvdE$%Q6nJPoLJn_7LZH1+t8>D8`v|y6IzHByO
z<(8~|gT@m7{U)L?YwR$l|M8&mvA~nfp=i$)mj;ePRKoT1Z`PPilwuOG`slvqq2C<E
z54VPKwlFq>4<QTlDFSwF)qH*!pmL3k-`jiE6)Q;><wS0OxZlFPiR)#ASDFTtLq{GY
zH{=!5Vt7ox4kfnjz`th!0Op}OnLYDiYB5bmd$`5CU8RY)y`rG7^>eEb0g0oY(`Z5Q
z<Yd`~$@~69oq#}=FA@$l+oc}m=<a9#E<XO}?gX*aVv^qZdc%V9wN+=?#W(SKhX(=n
zl;e%sO9Cox@AVB;M9^=p5D1c2gI;4mpul&L44FTvWegQM-ovm*#97(3##2|Mz`Mf%
z{$PgcO~*@-HwSi3n1zyf33uYVpy!rKa~-ceXXm{S8ANDjiY2u;I1MDFI4~&rb8*z4
zYnvv&d13Rs9L7zZS5$gjRyf3U`NOs6{dW|}FAvf;TvXyJhzejiJrwUl?C$S!Ha6^(
zWTYIFGZGTO%a|v3!nKR2g^w$XptLF8M*4k;ExA)i*!lHWG3jvEfmWhwmhIO(z8fI}
zOgwiJ^-sinq~%A3>A_vPF4W9?xZ?0uxOdnSJ=&~<BCuk9ywHAs^RNOpHyNsdvXSZb
z<)c<~`>>Mm<he4ilihPrv|rtOiJpx=g3L+)ch@ABDjg4jN7BA}F*{YcNL=!bCP8?<
z8OC4m4A%^b_1Iz=*srhPZfy7H26P6neYuydKP07he(Tf{KxMinj&)d>L(HB(mF?l@
zP>|r7!5I${pu8AAEb(`vs%cFIr?s`q9x`jed`kvwQk4U$hiFWIcXnmR0k4<Yebwut
zNc9e{a!@)L?5?f?O3m(gp2k?*`{&9JF_t$tn;y)^|E3FU8*e-z;o}13>1VBx-5!+J
z_R4WIo_LVszs}~~1|KgtY;=os1$R=s*6X3>y2>I>O9i9}yDr23vPe(&O-GrlTmGRh
zR(jezPBh7xpYl5tIbT!ct&0LWUvq6So}z$`(^iaC=T?otE|z1ax)AvXVJQ=mgX8r_
zE(aGAGP%CIJjqj__M%?QDz%~SxOW9zrk;Z<iT2)?h30U&n<l<-vwGX`Rut%7OQBmd
z05Ozn?#eLf-CO-6z{U50s4*Y`F&$!29B~YLsOgF{ReC9SCMrS61^IHGT0teDI}<N4
z#!J<IGo-I;ROcm+8u+cU%*MxMZ=V1HX;wU8X;NG9j-ZOu`?h3Hnt6(WO%b;aV6$!g
z#J~!m=!hhi-DCGcGP+d}H@zc^p_4qLL|^a2AWtyXt<goWEa`OFo{D>ZI>3ovT)sEq
zJ-gB69z7y%``pxRqF++tRMmMwf}A^6kdcXHYXi)7m>b!_0ZcRlnvfM?Zg7?2DjK_^
zGn)1kuN8TcCEOj!*}WZRR{SJd|A0AO>MaGCGHxR%?onBolw`uoYzW1b*!ElG)nhJ<
z`c7l=I6|KyzburS_1aA;`}(Dc^|{DlcZfg&@%E4c+WvCGq=BvCef_UnZeeZ)oofp@
zT|aX<iSE9566^f>?Got{K-8CZX#f#KNpHc70ktt85oMwUz<8MHGikIV0Q<Dl`c7G<
z(rb!)FS>)T4**i|rJf?LL2B!mfS5`1_;Pxs`PQEK`%lMSt6|Op0=p;5FkU$A0240}
z+#PI~G@=MiY-;j|75j$Lsj*UZ=hYwMrhYKUO7)?;$56Z|{d*Ig`@t<e0br>WobM2(
zUJ!{WyFn~H7iC&}ZiX855#pYH#uV>yw9(d{!FFHfC8OtD`E*V1&28>UN=_-W<unXh
z5wO(}AG$;CR1l{^go>y|m}c-wVP5jf1DNJ~!L#LU?c69;_&n8I!Qv1hrl$g^z#q`t
z@Qgc&wDGbcx^WL<j@EcYS7)9B$?$~pD`DkNHgRP(De1nQ-5@?}Z$K)I%*WI2`Ek5&
zzP4R&px2(!Iw=w*_2nKXXOxL|U5Cb?0F5TXi#cq!TKoJXUi4;AV7Jrjdsqe1UaX_b
zS<or|S3@ARN-ETN_7F7rp9cM&<S9uNV7(WFz@Y#5f;~}2)+FBp{{&kOXk=2VZ?42c
zrImf@rX!=5V%#jPlVOdm9+98-eOFBnF;gAWP2Fs;LGA4O^&d?`ETt4r=%-Bb4ix#N
z4~8>kn06f-3@8=x!mrn2wG10N*49msrw0=n%!0Ce;kqL}3#Stm2*?T+<JHf5Hujpc
zSTX2j&kd%f$m%;PAdht$Sne6{3|_IuMwxR}Ku7w_^(T&(bf`z4x{$pKKHLs9m#|_b
zKXJT7TY`F|rpP=TLHl~3w_G$$;YH7x1hb;6Hw^VGL-zp3mx<RIKVJ+XF5*`MmMMQX
zNdE`C5f{tewxeVi<+-+_#zKR3${VGg)Hdg7zr)m_NUp67evKojm1D1Tl~PO6v?a^z
zP;r`#;jYK-ugM&6%eXlQhMgBl6c0nGZAVNKgdimy1vVCi=6Iz~H<c~bY`kevlMW5!
z5Upq7e3o6t?_M#YA$eckL+Qdpq@MzxO{n@fVy*k<qzn5=BEFkhDB}?KOACcJ?Cg#H
z<_^o*f+9VbG8v?pVOtU11t~~OZogljmhhkS;bi%^fWfnnW*D0Zqnp(E*b@dd+!`FO
z*A_}AYYI|PCu_`aaW`DczlS^=NK*^ehmKIxeo{<u=?cTTBowjD=2!@V*Hjq?RwqXZ
z1r{-7Y14%ye6DRM^`t$(%VZV|Krq<8HhZ1R)SUN0Z&5#grEJ&0xg|ajgfV~filJsb
zvCy*m&M3Czxcw-$2<8S6ip2H;Rq#<_M`Lf%6ZKWY{+ty|;K9=4z}m(*<)Foz@zUAI
zfl}mnDMV;_Nypf&&{+?fwED|)gF#gn-{D`PSv0iT0#f0Q|Hxn{Xv?n6mm@cWRxc}|
z0?Z4@^_49=)<<08@3u8}jyT#5ww1PUdFo@ciW)~Ap&GL%=KzHuL{E4{vQ9AGIo~O`
z5PW?VI1%E2P#B%ttHrV8b!&QlWz3#=HA!wF5GNApi6~D|hpUUN<@$^uz&B@m*%W-?
zW~<EI=_KZ5L#tH%ViTJ07W>yNWFZ2kA|ye0`q0=HkZ-8Q-B(?>8%p9Z&a0rA;8%GA
z+qD~z1fBm$UrKXGzN5NCwaI9W$mO<Q2-Ggvp8$GTJNrwEgoGAseRY^z){}@zTI|2a
zC8tW9d4_D0=4Srydi!7Hmj=v4G?&EweZs<@AVUgxa5FYLTG}-ppWTowVA}dik?$X;
zjn9?SXSN+#rT_npZ7vtP$NV#h)vV!Lf6!XyfqN0~juRJd-r~53J4=rzLc#2oo<bop
z5gy0-iHT_--7M#^2Fnc=Ll92F2!x%cwxKa!R_Dx46(VB_0|r(r0X*6%eP}V`MLEz2
z7pl}Or~{@HTk%ALT9sEzh-ZVvogtZ5W<tz6C!=ly-7RJS_v{yhAj5PrA>e_N7hW1%
zQ-z*<RHo8N?kJGd|82W<cRRXH1#Ph@o3DayB?gxuHDTnWHnaDEUES@;@SC_4T=DEx
zimuR8gBfjuh8@{9*fD9L{B(j%2^B>2+=d)J_rYO7Qgf{K_}i1%@$I$UG=d6W@1rpZ
z5ynY9DwfDe19PlgQTbZQiWpufg6p4=+!+pigeoZy2UBj%_VB&U1n)uz8h_beU7msz
z3^LupD(CcNQX5IXW2vDX@1Ffd!kWTu!>xj5Oo7p;re2ecWP6L7lD37}eRgQhx@YpT
z>rR4JO_n!$@Y%fW7$@(@I@?5%@C~2^xpV0G8W)@Pm54y_!YJ&v?nr`d(FsnaOG<0C
z*uqR6w1<~woX@alI>$Tlf`VQW@(a|?(vEn(GPBPVUg2h%MbpzAE$MmjMnZDp&BAyh
zh1mIPn`tC5I84!J2Zq%bhpXt-P0SNo1z7{_i6F%~9S&~aA{OBLLm-)i#5J~Br8hz0
zo%7|MutjH*{hd+q!yRc)?z^x6jn3b{F9+i#4NX_nt(Wn4Ivv|$PC=`3dz=aTv8*@l
zBKWSqdD;1_&Hv_Q=kppj;Wd;EPYm-uf~1KooRz?hnLI0n+3=_0882(DC0P<$n<*eP
zluTo4awP_dK5es1DV9CpDk!*sxM+Xgx5r#Z1~-GrhMzMtU3h@c2Z2tC+^wy&v=!CX
zrtP^--7oxpWMc<g>bnj6v~w99T!UcA$fEK^X7tL?c0fEo79kp-@a{M_wU&73R(}4$
z8s8wpa(NJP+s1}><Q5$p_JRN5JGKt<R2=q8Q7!2&XaIXrU%Pp_u6GMp+g%(vWx5`3
zy?jCzv4o!szDt&R%Y2mo5Rt7>O`^PRd<Ifzv)-%|n=eT$#huLz>v|E+S4x{3Cz378
zTK(gxm#)Gf9PCslW2o=NwqMZ3whPrkRO`%nK)3I(z6Ai$ahX(K66K{RzYu&FR&Ake
zZh>-G2i0)JY1(@y^sY&JJyO+M8D*@=YLJqI?q$QR)p;NCw^yKu1}Hw!#oSh#($;V5
zrHb-C3^WkXT3FGNK9UefS1Oi1*1O0FXU=y9JV@Kxug+P!Yxck{4Fp;rY*kl49@pI5
zOElwr?(0jGmu4w&qV!1&3@#Ew!pwxH9{?ljhQQJ_0NrSq;2KTRq;Dq)Jk`GwI1yu+
zCC#SmR%LfxS8?7yhA<MRj?Jo0pZrVJti4(H^vl8rrryu*ZxF6ArdsXgyJU|R^nHoA
z1P8#j-ax~>8V(JOg@HA8NNU%LdA9tJ&HLXRCl*0kOH3<m1;o;Q#;yDkj(O-<&&k(x
zb{>tnS45KGD))M@wl<v@(fCT3VK-#i82!|x07%%(I=@W{oQ91PeK^xy9t_miww@qB
z^{2^iTy9z?(mqwX1Vz2;?g28s750iv>IUIyoB-E@p5(ibW%duJ>z?IX02)$T^Hwm&
zUsLIReX-%8SMVOQAH_tbXPLi%(a7FwVP=_vmr2;}M(xk^DoH1*2v2Zc1d5=ZMYq3*
zTE^yr4H&N3#U)-wHehGVK%18A1<rld!0PDhS$DE$2bFJKL_PxNv>ozjpr8o&>LIFn
zC)VR1=9xj|E5-f2NISLl3%8cjwBTZ;3QOC8R2Ljw3Ie+019bQXca+M`r5!z$`_&)%
zP-<P*vNCQaxj+=Vp|{iV0}1^41gG+5bky_T;Nv|CJY}UeX>w!s*TN!WIoaPQ)aHCb
z@2F4LMRQ-mGi;v=$A4#wy}RqEy{@Oxmw>K0`7%>5)wzd@U0nBN=MI1-fCQ6Ea<$7@
zE?dX3;MC(aGJGvcx^$BdrM~y_p1M~uTYkD46LI`>Y$!=iEIaUk*>V-GRCXq7R@s@g
z<rU~x{wiA=s4V|V@z_rNuNEvj>yp#1o#EE}qrCw|x%q;qdhfcVGaGLyF?VB6Pyr?G
zxa|nV)_#wZ#qet7aa~4T58vQbm`C+{#fHl4aytxji^JDBxy)i$ynKym+UB`-<CT$f
z`J*2?m-)C*hP{F2G3r&1|9En1PjkQugrDF<kk{FMLG*Yb^}ZX3mJa3`LEZmOWgf};
zzmzX7nky^RTl-%zPUBiWXSoF>gq_HMTWV1$ET37}>R)$Pq$ZO*LzZoD(fq1%{qVU?
zAf;k!Ya#vNQ$HN^e=&Q$`^?iG_xAS%<Xiou#IKIJbLA$7hJF5NZ2SA~p4P)F%=W0w
zDlc7N^J`HfTF#RS$Z4+~bKd`VC0nyLUg%ddp7Q@~>iFCh@B;ZdUVFD?nFZ>DoLl*s
z=(n`*KcTx6Vm>m-4{X#Ad<b11*17XskMosI?TKHoLg0+a!E+95zE61nx>SZje2Cxg
zAMe?qK>HQiGj{X5S7k5VB1qP<4YNh|&!kE2-TPEANTBnp0PC+pfIk*ni{dpR>MfRX
zQ*NxUw@=70Pl*}=Iw-tm3`m1By%V@xmpdgM8QJ-Gmzoy?J-8He=<;>VxU=CP&}vm_
z6C^>%Wxu-5^U*Z&2S-$;la!;tYAhvYH@Xq~-THLtfb-sG5<)u$E_`NFgI6Tcw|$`V
zF;i=b7PO-@cE`4l(&2ILxEI{Na*{Q3UVa9W3TpD8QBF`wow4@-S6yis2G+4?yR8fs
z&_HCA^=MtRKY?d;H}Re|?^u^ue}cxetMh_T+FST!r`ZBAS4h8$yWb&LbsSX{yBY;L
zzDp@lOomViM(-xqcVtnY-~|y#I~qnXy*G}(`jI*gHIKb;mQD5}Dbe^HschM9&f76h
znJ)-@`E)WZ1tz;Ud?5KCq0PLb{pwYDkk4Ym3)F7^4N-t)Bn*APT2F~RB*f#AYngH+
zZk&}6Ek9n%OfPjN292g(mUQV<<<r}IHpELOUF{F-DUs=!<#v~D>-S*JMv7yB?y7Xp
zD1Q7O-4&W!A9%L_Gho!zpE_mRhhvN32)|YeXknKvkP~6rI{WZS{#Po{2HZ`3;*(PU
z4ENh!lR|A*evon@^xNm8{>_wQSP6}XYlM>(-SuOg8nlv|g5WQ1=vt=#tmdl)`rIl?
zQSD)=wftdJE9`2_BMi(+*Fcyk>0MZ07+y19!mJttDeZWU^TbC~<xhP5t7=mVZEanf
zH-re?x(>`S#yx_Ofq@Dc(8p?ka=4A?MH`1UiVElRjnd98m=qH%ywj!m+qd$!aNq(6
zFAAA6cgkW{Iq$#p8oYSLUJW36$XP}zTfy;iaZ0jiCGK;efy4Ut@aFg-`xneA`}%}L
zw+4GzkhbpP(2>NXWYvtN3ca}Vx$#nBG1=y%lk)O+i`;E;^<@;Z?|BR=2ISpS`?h{y
z8vKH24+Uit_n!C-Mn~-V3!Ce>fs~(dJo|k0@iLaS=+im3zbIR+^Z>2ISvJ;_1Uxkf
zv8Lu`NJ})|ydDD!r=iXZLFXe7blUJYx-p~o9o<M4eJu2(^aE8Ke=CT0QuRI=vOqC9
zt%<rwkzlE<>=mwW@@~ZitR?&V@cic^RXE<%LUd|h6I)56tO)vsN3@etsUaj8+1bbv
zI?W0F=TFoRzH$)mNK5gy+@io$K9YI<`HJ?hMb0sV8HR~W40Shvyz;wrN&hw9&aXqK
z{<z?u#e*G5D)^lm24{flrO_ZHNc!JTeN}S8N&f!RkYC&@Ki)snMPQg8-|6oAA7R<}
zBbMr-QRhdhCm9#Pq4q}<W7P>7+Mn99?-#f479-v?wAuduKhuyZ-jSLE@ddV?Jwz)G
z%hht!$WtV%04B=ZktZghrVmzt;Sj_YZtNBszFw2%bz}meC*SrSOBAg{zD)B{dXCGV
zQ@?tPiKZ)tN%RsEBUmjD7`;0^qaY@Y5ngi=jP*?Ebpo+p@B2CkiOYiIL;2&%CoWn5
z2H?TdrK2pJOI%g(DFCNOm@OV#tV>L%=arrcNqHf4hJcXZ4(SD{)9QhjU!NgNdwzwq
zQXhS*DCeN9BK96keWg06w)R#XHZbtyg<RvCcTO|Bl>xEGtWpmccDxZ}<N;6K`!I6N
z!Ei6&^{^?=U9YM7Q;oa}jRL_LHbMJ#m}gt>Q;-(zdF6VPeG>OY_;M}k_BS|lujrrS
zPdUCQuB(37n=nPRT^1gr%g}?7J*<2eILQR<iJ2|bcBm<VB?jaVVqdM5IhN(z8ViE)
z&0rS7U^fT;quu$+?Ay6s{Y;JXZ;jozU>{-;yF+LiNaoheDjdJ2w1!jU`+YW-=H{(%
z($?dfsDtxksbSgslcipLL6VQhqUX>KvyF(D(VdyBLu<S8I`7{K(#gnvYe=YmJAn0o
zd_r%HC<L@M#hgswF-s=-&6#Jt%6vWc;X3;}3WX}ujwKb38<DXPUd-U!j<5}zzn0!3
zX2AqRc-<!IOAl~~tlv9v1qlLsChf<1^*y1w*wFQuu8Lzgn{FAlD=an(y<tON>}`=O
z4&5H_mrCP|MOqX`7e`iUbX^!)okUP*x}vGVRz&RrZ}TodU|TigcF)VZD$NuYSeUy4
zNClJnj*7f7EYx4c-`)=?-PovH$1L<cys7mcW_*I%pmF_;-ornnIrl<4&}d!FDvT<q
z_lq#Iv!3F=Y0!FHE$>$OCZ;4d(XO#4g_ToDCA>0tdDOXt%v#}#|5?{hL;X+_PC>!s
z<hoMLd&r%vw_bjzhhuF+(cXF^A2!&E!A6)&LM5fv(Bv&0d4;aoEvAII5MSEa6OL-y
z(1=i~J_CPe$h9pcf5exe+j2a<;m_Y2qhP68*FRW~-Oht4a?N4PbmvCOlp_`Ds`#X%
zr<NzV-!&YTbLdk*#@JV>kl~HY3J)+-F1=O)`R1!d;@GiBL#^xHb>EzH7koJ*GPE1)
z;nvTcs^SD>v3Be)KV@dAP|u;ke`_rp%(}U`i<Jl!1#WGHw><Op%9qpx>+iT)*fomn
z^*FF{wbZ#2!=m8KTUH??vu~2>73pXvl_aziZ>7W~EQ<&<98K)*8B>2-B1fv$@`XmU
zwtm_X`PQE{6e!TUKA^b#BKmj>;?}9`YO<z7X*X8O{Wj_8nCIw@nxC|&qPLv@hUSy=
zIM@y^|F%P@uH4-<W>}p5_&R6k3S`BlBfo5<T{W`AITB^imX3Tvc7GDmnu*dOH!qB-
z_II9L2hG#i+iP~k!#dvYyZK8cOp3*xNymQRso>eA4MR(6G2|lNglY7LR|YMkzNl&-
zOj;GnTK6lhZbEV8%65y$R_-@944}9vk3D3Cr>&$@ruhYfu^Sq9WUSlAE0#9D#>!#0
z=4#(&H%0PMBPJ|1EmPQOW5*!f<1D-J8<zJIuu~r0Odkpcr`KO#_D5H$gl%BjgX@|r
zLIua(v}4+IO*w~$uX3r)c|ULe{xV@>(bXg({39bmU1xg~GnHAp>bU?bfh&d}x@u_S
zM-f$YyRlvm!W&KnD%wL*#9ZZIXynBF`U1G-!^tQQW=n!<JJ#w?M3gnD`onClDF|4=
zeaw;*ZF*0%Eqrc0TJ7E|Dg09Q&|GA}&8s?D*P=W`V8Jl(MZ(#Bmtf2oqVZhoPFe9W
zu|2GDiF?nopSk9pf@2LTF~7+UA-qy%h%lwZibTm(cbY~w@_9z{<>)IMK_9Rr@XwFY
zizD@SSJw{VT#gmDJy))y4RQ5W{ZiOP0@@XKn0Iw0#!fLP7=vV9%ui|CJ$9;W&=5E3
zjrDNsaYt=?me*)3mJA?9yvkNSKhY0uzwfSEZ20ivB{akPqCsz6;UcI_H-A_E5p4G?
zh4{LDX#cu+z<4m+>_2KNE#dw#+x~GxQlfcT-*IujJEI%@^$Vnw#=g&nz*6FDRfZ|W
z-OQ;o$C8ebTm$1$!=zg_$lb`-lEqbmXO1l!aYY2hq}@s!J(otI%c0L8mE%ymv;6#m
zd2I<nm5x^QYAV~h-61IyJ2s-l^Wuc3pXK^Y4khhl&bh*l?!(KSf)XvVl!mCA+{pKX
zB@<bX1t`ViFP2Mqrqr7hop*E8f}VjvwGBCV1m{x(eRuYleU9F%TeP$BYIF$B``0__
zdmbl|7%wT=ki9G9UbRlO=w_MIzM<CL2$jrkfZG+nJls)ber;}0@urBqc&bn3zISzB
zXM?5P9n6q3;>{xK7T63k*>b(c^!@D`m?evQ64l=P_=guMM@O1VW_DOfk@|eHSL1G2
zs{uxyZsI0BsR+n(GU(K(As?@GQVpvoGBw1(9DU#6338striY^nDZL=zqz8^@bn}bJ
zq2q&0aa$=91&!ot14&(Y$w&HlYec^s@+r((17VsIov;{tp6^*|%S#q!&RET23>$zx
zHn(@#?iNqXyxE%**NsnD`^<yhcCOzTDi9a<kJisG_A)6VDdl@7-DY#V6<N5x*!88S
zF4KK$|4Iv&J{^*4fH-g)x2-NZr?7>3)*81wMIy^~LgXWjz-pFqb}m?Lw7=Jvnq2o~
zX+5J;B2xCiR^RTZ_mMl<D}(*z+tfD)O!8YMbP?7TClsgRrUPOEn3>?5K0{ZKN0`TH
zR1btPsNA%a7FosL?kY$>eVw>9&KIe^mphK@zh2k9bDr$WIZxNx!?%XIOB1zktypBd
zxLY3K>KCuxuY?=T`<XY1xR8xoN$rJNR7SToDpx8kP1Wr07Ge$kEcfA#rX1GOifD%;
zF-xP-4OE{|R^8TzopEa`Lj9}oTn^~Ul*V?@?T|0~lp{VFHtsddmfOt>3bT>uQ*l04
z?BtA`B45giacU+NeP`<uE{%<C*}i((|7DC`f4&xq+*(L2F*N28qW@<6`s3tr%~_8p
z@#2-m`cs-;5@J-Wa#yP<kS-I!R;eV9T)57;NzijiyR|LMq%JijpAbpjn0NG8sM)}3
zS!EU2?4{IrEe(~4tma@`*T%hGzwWM$x7IC6X)zHG&^u^Z|Bu^CoRGHXIDea7aQLXH
z5i8#$l)Y=ba||P_2)jm+BMZ{7?9ZI!BfZ1f?)ilZo{;`YfLaR5yrjf|V?IF56B`}7
z1g{3KQ8L%vX^LL^HuBs&TIecHW0yG6_3Nl+$L91)eOry!TW*s#e0*SMR`>;<@slf*
zCCy9N`;v|8i9xf<xlwPa-V7`pdo-E`^=ww}zZns@A>+p%{+550H*3=HUB4aj<9M~V
z?YE`Ptd6Jw>Xne%_=j22mwQ_Kpm&x8)3$48Zi-AKN@UCPCh~D*-h(oWCU-nWn!dFH
z_b>6@QVXdqMVxupV${p{iT!VHr+v*`7Aq7|+`)H#H8go{N`HIQl-HFi-s1W2>2sxs
z=7DbN9$RhW{VYMGVEkE{p3{Te!@}i~kPkZ|i{t)9$jxNRW84C)lEY1D_)BdPajaet
zrkbBuA*C!s`drV=f#w<Sp5PtD$SY2<B-M*O?n%k(=OPIP+f2tT{S(a#E$uDldTFRn
z4^l6z6%Fs#muWK(DwfrkuW+|i&?|*?ZFCpAF~_}yn@2~}D{<ZDMI<+*#hzUo9U>Oz
z|MvN2JnAu~Z)=1vb*9LYiyflUD9*7qf+<bMC2eEto$VweqdhB~x~UR}&dRVOw_o!T
z1aDdq$R-&1n|~dL9wpc94t^5QRpx!B99jtVULjWYUUWq8P3N~5dd^RJ&ObxY@IH1+
zfNs1@KrCB@dRU!c>`k$m&<p1GQ#e5rk_Pv#ZIGB*rjK=wjoJ0ScHVGwI7EMUD(hhe
zF6H`a6LEtbZ;LT|d`BjM3hdK{YoE#DGegwgXE(bg$Ib0MT{5M2qkGyuMJZ3n+G~=b
zV^_&iVYH$sb3y~>`}sE{4nmIdJ~3>egb&Icf>;!>S#<QsBTG-DXI--7zF6IL^4~_J
z-boB9AwpkELf;jI;A-5RA;^iiz#i8u&jBe@vrJiAKbe%s{VanQI6a(uFO@DXzu#{K
z8?T-JX-5pn$sjxitMYE}Pihx7g>};Z$8F$DDB|AvF`)}k0Tf#&m6A%BT~|H@^f=8p
zCl$?~yLchr+$bKbpqL@=qt=bDcq@2qeeYR#58WU&V*j06&)vR)OUSgrFf0F;lR25d
zDgixhX^-Zfi%V}KVZPv{KPA93G`=!Iy>+p|y8VFp-E5Jis?pNOZPA_S2=+QiZBw1w
zT8tGsCElATE0o?Un?ZD8&uT3XWhN5rqfDOdySLqN(nVgl=Pquu*KyU2tWW4vnUh<q
z62jm~w!`q*h>2o7wf;(FRF1Zt$ji@4<laSEMQYu`SCN?MD%g1!1IW}a|BRvOb1h_o
z6_GPlg(dkj$Eu{QA-CvYT|c8xuZkh!M*m4vH!%aB(Z;~A#i&g&F$5b&Js+|;lgCHi
zemYv^KG_A&tO(*kw{lw}zZbno>jo0<coHGyde#==v-*X6qiJ(JHJFvhF;w<_R^N*F
z2vpgr&N>hcZo_~Wf4}MO0jjT3l1sYfVuQ}oEwswS<U_u&Y_;a4sNgNS`ab27rK03?
zFSFvdE%=Z?x#8G(*|5iD({@~N9TDfO^u=oa>2I+z(zo=B?0RuX3(V40>FxDO8zt3M
zN%PKoJq07ISDoqI^mcx?GEc@-y4|Kba>y-I(|Tl_Ma5nMS&E7mSv3uWn``+&)&eUF
zSC@x8soo7BJYJD3TC2);8EhRkrC&*++q7H=z*LUG7QhjHgrGmDgQ)mDiods;4O>9}
zRzxLyjQ$)<-CN${A}Gxm@Y0Lfp<5_kGeT~y7An4;h@f}w-x5VD(&ygWEk<b+ecE|e
zU8#$TE2o7Nng>tSC!J{ChYzG3j3<{F_6j298Z@l?XXbB4CoR+(po>?2uff)pI<}Y4
z8~o_9ZWbh>F+3cmbR-0usbyEHj@>tdXJk2nV(UCnB6R;GZLRN;Ru%%)PwkZpcioJ=
zMtd(?oyyqmd8@dP+?Q^_(H&udwKFYTuv@ofnyZNDcn0539IX+$ns=UYB$v>d<WVEF
ze)>_E21%-)rPe-S{QO3!2i!I#a=Rb0&<<mE?|O)It=rt4Yq``jGLX==P#zk7u^1t+
z-c=S`9#XgY3cj!Erx_Z5`*8#1(PxMS+O|wW#S_ZQ!Kd~BBh<+l*^v&1QoX2NRyC4^
zCK`%8$?{|#Vn0?YSL0fa^1I>QCZ{_%Umh*G>exmDsWv#}T$3Km=3Y^0QvaUlxrA=1
zcCF-IAsJ0041?NK;mwTS+EL5?Fvxn-SzeGGWD39MVDEN%Dv4g<DinOL7?gu>8qD1b
zR8UxT%ut5*r(QR5G|0}{%ps{B|B4ku#aB!zU(`lb=wvq!vts!Cl>J=j<7YAmDA+|Z
zKd&4hV%d(wWw-Za<JoiC<~VrOQ|i)i$OUU>uS1&z=j=h<Mw90d9jfuI*BKJ9mt<cS
z*F)outSH`M^FO2;qTVFu9t(aP(cPG3a;X^^{POKUc1l#jB*ZLPBC;2~Xra*c&BhI#
zd(N+CU4*Wu*@1ok%{x&g|9;JML`A;dK~o!1a_u3c)OAfgr)NN|>Q1D3j>*6hVTI-W
z3}Ph5K2ot}%v3>?$Agb_)nSWWswedfw{&7Q$NH1drR@1V=Y7|HyXEo>9h#Z)CYpVj
zY>Ht;$OKk?OZXrXj#c9wi%|Ma$4~l0_ja;QVwH0}@+?bFYr)E)P&w&A8r&7;S=~;o
zNvrKwl;R0nov<rS<qLXzLSR3!tW9Y?3*!=UWQ9$~%CgHVI$`9t>P6cY5H+0plNDsh
zEm_RsRs+ZHk}}Ki0$GTAr=kC%vF`R*`T|;t+z4q@m;T3y;6}FeBso*$+b4R{5zhtm
z*=8?<hxh1?+=(eST;Fsa@d&^BfPU_Z7|d>Jg4+RiR>S374VtCvI}(P6$eQa;{wdNr
zhHb4)YCzYYGZ%8+q^5B+ZT<9m#l_t1l_|x`&YTeGQVYY$*L<HU+ir$=r>e#aSlhp;
z$eo80@`4qGZ#6AKKgcV}hhHNR7aI{BzQRYY*z~$k@ahg4MbAEFTE<%$M_qgsXX9_{
z{y9%=;vN>nCk)?A)#i+zSaF_M-57G7(BNg=p5G|BoW!i^_b4PyaHe9hqO-y>>!m>(
z%?^LM3<eVg9PLQ{1*<RR5dDS2^J)v2)XMd7|E(jvgSq-7tW1^T>P$%pI<j!fO$BMa
zP}_@x)gvXAwgY-OLY&tO^wEP)^WSDWG`eC3X6rh$W49h7T^le*iO3rFV!D&&@<weI
z%@w_p76p}vj-lIP?9n@hyrqd{voy~9-@ZJ%A1@K0c-)qi(qZnzv440Q=RR~XXVAG#
z<lJhLGG>Wu7!hH9h7PmmP`>q{CUi|As5j+_tUheD#tvgA+J+UOAS)Hs6&ew45~+HK
z+DqR7^Pi;*@3NCyr-~9b!||ydvSfTPE-|!0Ss@p}cDVPJlnqxPH0E4ii%H+&LE>!a
zY1`2K!~pyF2ln;x;Uvj0Ggr8)wReMke8*i@hnUiM%}C4Nhx5$r?Cdw=stGJ=&;N}%
z%VN3FezUA+Z=3{+AD||W*zF5ixYUJ`Ym2Pg+#C(79La2}iQ$Rpk>(gj+-B-s*LSTG
zF1^mQt3rmSoZ*htAtL+BwS`+QW1&X8xOf}kk*DsZ&IapCI;(of3d#M05^P6Fp^ba*
zjLXo|-Tgh<6W&NAZzQh92JH$bF3<}NHo<kxYeOXCEKHO{_*SzxiVKd5!1?J+PdT#s
zDiuEBcvVkq<f-Lx(m_T_=8W+DHHn2W7UY*Ar3IYGa-9vrSr>*Du7nYtr)|>2E|1?g
zTL`to)Iw$5gS#KU3n{qQ#^dSy{U!9wA;B(hCq-AxSq|<E>(eL2)~ro||Dk8V9Qwn{
zH+>$gAKLrykk16@b5zdFuG6#z^5;f`M`NC1;udc%QPD4y(BVnEf5DQ!UIA>H$J~Q{
z6(VKTRBGuW^2?@<|H_YgQwVLgTs;!gY5iri!{4a>1$%&c6Rw2;j_%)owG_iUqC12(
z)o&;WjxUdvvrkB#YR&ogZ~w}0flgykhU_AtF&$VZ<g-g!{yKQ$NO?f!-+xCQevdTT
zBp+z5!v9{?@WZwD_Y(%6YXnP!x?@A>JpWz5hkp^j-URDV{(1rhT9LOXwQJ}^$Am=W
zYd^KQ7Ra9b_a}1*{JC+Gv`Vd)-hpNH3X8+2nQ!EgkHkiV)vv_Z_C^Q<U(b|Y?F;0X
zrM(@K7V#*T{$ai`B@~=*-Y2WieOoUvGyU<M|MSmi&ZPjvftn}Ls3hTOE#KIz>~{Y*
zo&i=KO~!Tg3Duw9naLiQ?N!p$td}v#<~t~2@Ytu^l&-y^b1n!LRcD!2Li*-WUt#|h
z)A7ttDmZ*s40|`Bec;xr!t#+(2PauLFV)G8miO;(K@wWWNiScCeULQvc}=r)X#J!B
z1kJ>rz>gK`g;>D{vdq*%ck=4q=Oxu__GM&lZtXiQjo+4E_D4p^$?0Y&YrPT^b<Q+h
z=ZqRO!6*PA<8{uJ>#HWqodx_>o0{Y+o!ppOzGBX6{Ljst$LL(Yb!C>`<X3a642(ff
zCU6dFtc8vAhY!@aMxmc5s-ReRy-V(Hp1Z72HA-CBupwC#an(zUmF&g`)14ym&7oa3
zQ&gpGO(it3Kw*mQyjRI%3fu0mBKBnkQ%faOy(nT^QZAy>w5u5HnDHcuD*-icDQdD#
zfNsM9SMW-d;apdy?rgU6(j{b0NMUwMWo&kF1OWi(B#O8XXmFpe@4f$B$m>hOP-I+f
z;-KC6>!i3l(~k{K9TJ8~|8Tc{zw~4;{%*0Ra6bW6O$B$44dHn*Z%uOMOvL=o4Vs|C
zd4A3&DQo|s94E1ZO)NmOqBq|GF;t#R>bvU4{`GwNcJh{N7L^c28G~el66&6>ZbzL4
zo2#3U&7<eRr2u_mg!WWQswf(86dNElfk$%Aiu~Pxi+?=ixUaZy+is$dxL}QHsK3$`
z06$kCB2E2EqjcY{%N==HokzK+KBxpv>3SLInvEL=?S;n*Q3R_A4^EN$42m#inmKg5
z&~{kwQ+AM!o#)x?si~~#GDu)Qp~QvR_kzrRqJLzHOeWl8a;}0L(8unCL4ctxl_YL1
zft9{ZNtZQt*OnEc1lFlpyLw`Es29tc;v~ON-S6b#?L|;PD<uJ-^}wd=&2yioGl`uT
zpQd;oj-PL*X6;myLAL?#@yGp~Og8-)zmY{$1QxC8v8PUMoh|VZ89z(mtH$|tCNGI6
z$3zWGjK8DdEREWBC)D<Xh~sqND@C#aut;x@D!u#IkTT~Zn=Ga7Zczr9XL-AXn(ahU
z!$7gp4Pn8?+>X*)P+2yP(KsvK>g5;1<>;EDjbxJ232!fp$c8Is-Zbb#n^x<k$x>g_
zg{$&fJw{t<GVvp%S9`v7j(Mxn9gCm@Dn^NhDi>A+ware=#Y@b2I-0tAzO#=Uw-_6F
zQw4|seVxhUmtr1IG?z?xki>8==5m|cCM=whu|*Ox%t!SGkB+>w@9o~{5xhDt?)28l
z?a&77Z4N&fdR7qSu-2wpauIsr>l0r!SK6;n1Zsb=HjbvO*-TvLui-VOY^;N&DMNm9
zH0Xqz#w|kQw!@9LAXV=1ODPzy(pzOmEe&RY>dcnR`JJw&=r9|?M>;VHOJ^#Q(=C~`
zm3Z%^5l71R`0u@BDn*(G3XiegW(_ASQ&fNp=*cZnBl{GKtI@=hc#wUuUDb6n!HnnN
zh%`g{akV1O+5J<@SfKKU(f8Y{U80DJu3dNm57}cYdIv>AjO<WEQq7)=KK&rpco0j*
zoD*Am1F2lB)gR}YE?vxquw+LbEwG5Hrzw*!=}{#N&1JN4Mi@s%kGwyx7L(N0=}x3P
z=lmP6YyNkQV^Af!zin$4ATl5MiQvzmGT+S(i^S8<Ui<W_xLfUNEs404M#VJ`L;}tr
zY?=XG2UDCM;#JdlVCNO?!N0F}FwU;e{a#V{+g?PEL$BkYVsp-8y1JZ%vzW0v9D-90
zeJ<Os#wz-gGJH4rA#=*)vpO6moWi(Q7Y+OKqdm;WmX2nt%sbyxZB7<ibcy?kb`C?k
z!$XwP8O7IAC$eO_EGZAaoaezbZb1wW#C95bs0OXb=_x1G@xYFg_ZR8|NMO1690B+0
zOm>hO1TB&%cx0aiVH@r4z}z(H#V|tX;!Te?pWb%#8eS1PL+Hz3f2;U}?{wGiKhBAN
zRsMiK0#Ca4Br;9(QyYktbPQDmgtDsT+r)Xr@A3rQF?-y`fck&fd+VsG*DefD5s;8j
zKm;U|l$Ml6kxuCb;c)1ZlIF-26{Ne7M!Kaj=<W_hy1QZCW8CZad9L5AS+i!XnKl2N
zMVw#0?|$~PpZ)A&mVBwP^t<~=hnF$ZOjD-V%*KZdvg$C}C1fK0(v26uX1RMu)Q4(k
zLwy~hd{1550O|32#Tf<G_QI}{4+h6>xu<i7TKOHil%JtTAF5=#rTmz)NnM`a)Jqgi
zwY)dlv#Ms%mGx9NGDXKd{;AS46KI4XIl#4}9qh-x{3ZDy=xM1G_m{wfSNxMg-KR{8
z8w+Y7JLP^1MU~^FM%-+kIULc3Lp8ghIZwY_Yr3s_70m>;RE@pRpK&6>k|d;ih3q$+
zgCqekfY$8~W-7d2NKJ_#FIC=t#6WhFp`fL0%5ce1LaSuBTH1O^*U96Zg5&C)ASY{{
z?Bp18RvEQ^j5|1rJoJluM{b2IXZ+oT3oq501aC5omoB6En39T9v_BH+*pbdK?>EIh
zceYIQ)sM<^8j4^}EEm){J6gQvJOxPu-mpp9Nxb=&ZXgsrOoKXORIv|E9j!?F3mjbn
zd-sMI<(B5w-C;!;`!IX|z-{%wpChJz29IArz=7`tB7@o|sSC77v~=D66hr73MTkZ)
zf5SOo!u?Ibp(vriutG$^{+}>~oC=Ivy!cnH0PW3htLkqciFOkfR8K@tDGJ~Tm!<Un
z)cd<^|NiFzw*h+FrZaC-yNbIl0hE8$dP%YtulN7lNsa}Ea*vR~JIMq8o;&$3=d=NL
zC$Dwe`Cmi1#X;M|&i510|9P)_8hak~G6{AX{>kTbS{`89lSLD@2rq(eef0<Von%dk
zQDI*S16bfo;Wj20w6z{v*6mHz4(O=VM)sAGn)OR%dcjmv;+g}QB@G)!EydB&C8%Q@
ziKDh87Hv&$=RY1zax_ulkpAhZ`yY>3kP0A8LHmLQdL*<k%&&8Vts<cz0e*&{2!B(}
zou1N5co%);4qXVzc`V(s<7)1~ojXjS!PcDwSP?1?&ZaKD7R|%70Yh)C688{2#cDkO
zNB7AoU0!<Wp?{6iA2igXZp+-i-i&446&e;lt0Yjn+sEr{x5n$dR7C*HPwCg&wO9z{
zqweU@T89_06$&MugwRv!CNg1iuja8jZ}?3i83s^{ScMvG?OR8-kxw0J45qDz&!^{w
z@htZlt$Z~i7|R_gZJKl&BH0K?)GMD?&Y8yo@h4xnkM}X#UPvE<2Z*y_cB4%a9mMaG
z=XXIK8^IE3Rd})JoW?3hS}&ej$z#Hbk8`fCLD7u)ic9Xh;}lUxjiX5<BJNqWSff2q
zep=ZzbZPBeB1O(cu;6s*llCQ5Nh|l47QXxyojn`bKed+28*#an;bNgMPw#8Ii!4{0
zh13~mjB`Txy8I)B5=K;+Z=9#Bj^uDwLCzYlRLtf$Zk?2b&$*{p+YAtG`DPt=Y+14y
zuQEGtzQA`rYh?$s%O`z%OoG}U3F<1Jd3-W2PBX2ssW7$??;-h8p5PwC@#;!w6>0<D
zTPf|25*lT2$JOeQv-YW=Te%(IJi2beEM2!|pV;N`dT_j(z4zkW7)k#zr+Kq;d`wGQ
zpIXaOiNIDPd1shsmj=VOjE$?-o=0>!vq*a0_^td79R}j*gs>77;J~+f)Y*{?IcXMr
zvV4BclJ)fK>z6hEEb_lUO;UCjnhGomS(%9{SeyiAuSCAm5>-2$p|3XX7hgy3!sV;P
zF$WG+#K<n6xPkywkBwN4tylT0W+b<Y$nqJaBl-5%Qxp;~ZH!O?53k<^lw)Y@EOOn?
zhqn2os~R1?!jWMyb*w`urBnj?yR@}Q+Vc3m$vnOkhZ6VPt2e3qWyE|_{_^P$a>mi2
zizhqR#PDrrZy_UMj(PLo{smYlWzzj6KxaKFWbe3QhmYmsPpsg9T_<22@4Ti)N_6`9
zfn*y~P*<cy@bXb(%e-W)5rCl1r=zu7pFhZQ;qD#no<g$F?a$jFkq*`)!bP%TX11mS
z^6wWGX#bOl_`XS&V`vYiq{&oQv;%`M^!s?2Ax*lBcO5>~l(r2_vLG1@$hBjGluSi9
z@nX7YB2kHeab3sYle|8@yf+nD@zftH%Yvx29Hpm#rbqXwY;2E%W#YY-Nxj+{tCYU<
zRqp$&H878Q<g(i$A}e9$yqt!oFEx|<GF2Rdtu2rsl7V^<tEfmxzoV<2I@2K2S1$HK
zt>*}BQ<5|p8b+=kZSL;ucz9_N)Cz{Pt~Fj|S^nt-aK5$4!j*JJi+8ei_KBN|FDKMg
zK0`Im{Tzkn9T~F{j%?wADR~Zp)b`|&{=+U+M|DF%jhh?qS)Wr-%mpSsY5dD85)-n<
zM^S#l{Ro;T7uo|Q7Quq@M2h=3gln}c8^gKaXBv;U02wS%(6T{%)<x7ipS7N5j@iM?
zzyhalyXrg{WIH<6<1UFher}_5Z5!#53&*wlc-pF)3zscK$1dF3i+(UQDKK1^<!(vP
z!SU(^Yy%TXmu4fVf^7T;6^)LL9Z_zzV(q;^e6loER;Y2EDn3?xWJPhcQZC$Om&7jB
zu#ZlXy9+P%?-%-?_y}YC=0}5xje!9{<=ab=T*hogZNgW(^QnCYw}lZS{1K@)q^q|2
zdn)^toGvWgpZJ|#i((yNRB#j{dJV7ZO=AN^-z$;_mcDF(B+4SsNqG+8dCyjHbe;lx
zrMCCu&Z_?Q{85^jwu%MzXJEZ*??nqoE!)4Kv6aETem+<WO(6&mBXjWVwA=#Nq*}Uu
zVmGOXj7)x_byOcwsP<Y%`%Z`DO7T@wGI?JqlyXpqc?F`w$*_lkBC=dja<KGS6HqZ<
zC%)2W1Q;ltIrxX8=a=XAc8Lr)pW$>p>~jHjH5*tLorb(yT|D?57|gwA|G6*!d^)4H
zc^dQF)8D^`0+$uZKP3e+kRDIgL}IuUztqdhrVP|eLs@I6#|U1W?=c090)*X*_60<5
z&oS)%0=NH+0^}4Z4v@=@|D9m^4j`&EL1<DVC*wubT<}kfv`GfdbWf9?Sp<3!qFIba
ztfAB-Vg7S%|NSY>4YpAbL*^tU+)fE5aBg_OxC-x1{@LJ-6aFw<;RbI4|I6U59zMeQ
zaH}WfKZ@x8obAs~WN<5+A16Ryu1HPEFk~oBA}%gjesC}FPqV_kgh2bkc1B8zIuhJy
z{oC8=3Es{o-dcsv`nInahokOX;^WwSyJpok$pVCEt}2NOSCA&@H@;~IF|p7ifQE2n
zihI2?lqkC|RV~|Ov8U+1DCs1Er337)Z^Q5IZ5IpBRhsdTg1b(EEGEoe`<QI!3r>^D
z`MxsQ;hgpz`a7oru|-%&7in!y`L-b-ecq!TKz?7sI2A$Zo_MA^xHd`|S;GsgNZ;L=
z*1o~|ALQltTOz!R7IaHhAg{#t0#Y~{9EnH^rAo}zUMi|9P$wfBRN>|J3n}-|q)jt2
zh!nE9Pw4FVUhL3iM73f!r|)Yo=#Mf_WR?r>im-?vIWEsOIepI(^0k7&b!3WDVsC|@
z2I4e%AMg#tBSD4o@a)a4)IPgiBas=NXw$N+>K5kCbV&CpeJvtmO0!Ji4XG^`o{X#N
z+>^F$^o*}o5yLWJf$!>vB<v7dvj{577PjNXJMtdI+8Dl4UlZPw&b}V(c_MdwBTIvF
zIN<YuhB?G=POxIXTCTSbQn^ruDXTh`+&^(mx7erpse`rY4I;Cug2wTap<15ECLgCz
zz(Mh`d=WtMpvEOr6lv6bQW+M#El8K?W+LxiuHC5DC!V)VLhE#8h2m0TA`SPB`Hb2O
z6v5cr`WD<900r6UajNo0yXJo*l@`a+gLht;FR0@y<U?Mf^nZpHpvAesPP`k~JR0dM
zw#T0y&O}?zKHC%;mFv(fZbS9A;>nKZ7qU!q2AW1~2cK$#C68ja*mjL7X<ZIj$$UP)
z2p4oE_eL|VTwk7hb*39e+131xi1ghLmPuwn(O0p%(w8a;i5lmmt2N-8=f*O7F<Ry@
zvRphQ^)MIL+4+cGBfd<0^5A3i);f<lP={vb%1_a*pH%B|=<o0B*GaM9A-mc?RU<j*
zwIn^R8(*nYvA3)`mzIr?-aGSl)WVvpfgnBpoPLTE&!z{bj*4<e;Ih#@<1?Qtrj`+p
za5s!$NbI|dJYBM(H2WU(PM#&r*badDTbwEjcDKINPxDSEIrs^}Mh#nZdkanZqrh1D
zY{$9LRk+5JLn3{j=~5{!E@nSv*So9to+AkukTfqA?i!iQLuqUX9$%6ljqjn67-XdX
z0DU3g?u_%wT2Y>i#G}$pzo?;ByHfPb#lzTi=v{!eXV~jtemooLi5ht;zKoiV(O!xu
zr~y!xgortO7!No)s<ng^wIH`~6Pe@5)-TJ`c<lk*2K1=R;unllIHv0^X1>_V-wMep
z4L9!4qbRSbO1j-A&9HD*4tP5znqt{HQ(M`@dwu)4j$?k64N?G0JOQ=NkTTjS=02eZ
zvgz&BFPOtj`nq0r<7#X)+hpOX78?ivB1s$;ZRpb)c207ePp?w5R<CeE_cDiijz(ms
zXqOJc8@7qQ@LC<udd=F~VBe!sU6)l7t;LWfBC7Ip(@+rk01d^Q_~p<y6w?eyM^{*x
zVh#%dSTgYmvs<)8l9Vooj)+Q^t(2KoPqgpAVnoxZT|E!?j%xec%gd&a-<0HDniF$L
zMW<UVdCtq3ay=fYM=6Wo8lzgY@KEXbp(Luk$?Zp1OR3)I7#=QncW%wb&$q^1W)4!z
zTXa`vCypB1Ss~au!a9AJNIFMXd9KfX9&7m8k9$30GFKpjf}87oC7eehkk>Zwh6e0C
z6|E;n@$EQ_d7Lim5Xa)ux#Y}WqQnl@3GsckmW7(g<K4?Zv`wA}!r+@~(r{`j6P#qa
zpKxpMSWw&osEKJQlDcrJX6s(D**V0#<|5L5JQuCmIeT?myHM*ak`9ibY722`$R`{F
zkYgExKcC0la!)uqD=;?qUm>LxI6uqf@W+S*@Tn|1QhYC>I5D37)*Q`oc#Y=B{L4j-
zm+({!j-H&=2-cgTjNKaqI9kpck}%2H+}}+=JO$W|p8th>xlN0EuiSyOi?_G#Av{Gu
zc}~q0rP>qZ%sz?S)yZ}|B)DwXz(FFH@yyO*S$pWvJ$vEfCGXDVr-2~e;KwXp+vS1b
zxYd5bUQX^av=qxgjk#RA;T`Xxd}+LRU1%!Nr$hbs>=G9G-3hRdW%IHNdQ3@el7)?o
zZ8&ec3{G%+vI5b-U9dB^W%rhuw$})s!5)~7X2Ooc8FyV_M6X&xy0eR$Y-woHnuGo#
zBU@H6hJ!AylqF+!(WJ=@M=T$nbuD%=v)I=R^T~b0W;SgVE9@}Vp*yIuU!rbua8Hn~
znxjTT{Z9{1QNA2KyxoD!x7}^$7dJMrzjid8nKEL^i#l|+;4<NPzbDw;!J>@;3GJnT
z=gyP?uVtp)h?WAC!^dc@{*k}-{~JKSpMN;!PjtqxBGE<xZ&FdEm^MV>;o%YNnNbME
zO7FXBW{aFnzx)nRNXr$Nf)%JAOA;m_PF8w}BB@>1j!(KSIqcpgbaJ<`$eDU;GeoYF
zf1Ga-Z|DlhEPG&;-#_vUSYM#7BjE6m-#(b$;P88E63m4wJe`Wk5fBif66@$PZv8sT
z>8&4X+W!yN{@(!CzRkIj^AR3RK#EQ%Qqt@X41$ryNcc}Dg%)b<A@B>Nz)b>J>_*b%
zgvXTAt4M9-v(4^_Oj%o2*e;td=&eIhuL@5eAaem+r-~yRLaw$N#yyu4&TuX;e?XkX
zg#dD0Kx(=p>@#fp>=EcOl9Nd)$&pEjs@4uEH)`oXU;T!JQcGk2W|ORyo1{-cEs1=r
zqXmx10$NQ*dTI0C0NyF=O?<3m_JV}7^?R{J^N3T>d9Z~k4H<1EeFCU;K$P@BS|TQj
z?r}<kx>}2Cc>;Cu&`Jn;v8uH8N8YV{FpvhW<d553WOLkNb6!cd5?|@N%eLC(kLL-m
zem31E>M0I?y)sex#R&k^`gKB+306hNI(|iX0rA5Z#aGqGl&+){(kuJ1Mby7v<1{0y
zRcroUt!W1I5rH3VyEc>i7)Q~*Hp6w)ZW6XnNDKPx%E;CCg)=0y;v*RFtfhi<T(O6l
zYxv#6HGUuz>rf^(FxVE<${uxEj7c!BjA}!p>s5~?w<?Lz#-g?KBQ0CUjms8krx>Sb
z)?<Z7j&|I)I=g_I1ZHLP`!Cl>a7l!U%HeG^PV?4bT3v#&F%NyB%VruT1W5&5lmwGi
zU%Hh&Ej~STTfDy5otkIJ2?z-V6i^)QW9x}4CXC*W(^n@*>P7zj>TD!_7Qr-1*@u{k
z&S&U*C^WJcMlYH_6lT=N5x68i-H!%peF};l_NLx?G0ZVc*KgueS$ApCwv`*TE#MGJ
zfyqYhKv~O?herb>wP|wdhq87~H8r(*B%p-bTwul4f}C5T{R3`5W80^qZW#*dFp{wC
zwYqHgv9k3~+FL_L9n0nC-A$4#g<ssLGHIRgPII-mG(S)c1d;T(QKdAp31=S9;Z&JQ
zH?b_D0D2GE9-8-xd%ygCp=*agFTBs@YayYu%!G}2xR<L@>nAV1uUBrslo)U|i+$QX
zpGJL+F~!Aelr2=c1+SJ3?OGa6&66^6jc9N}deSEpp-50ovq7{7(5$m}T6;-!PvzW(
zQ49LaR6vuAtl-F2B?j1cv6*?fok+hu38}0y;B%j`O6(-yP}n~e5P>x8-Hgqes}2C0
zzs(n<qm=@9MLk*kg>-S|OFZi!ghu(;c->9)CPdq>ocU$FE`RKYc}3BKLC({u=qF}K
zGF`FOl=zVmzEHD<Xk&B%j-2fO;x<?;NrvurT^{?EQ{*iSNLiigC6{pbUC#pzS!*}C
z-|y{vZgV%=^?8JYk#&bII~8n0G8rac)XU<Ava<M(W)&+wuR0fTn%C`^ky=JBE5nh2
zDZ8TfewMo}bE$|3nh%fn1{sY0TGV5tLC-V&HxFZTI*JqG&9r2X#u^lbl2r*-VbI^B
z_(f#pZ_T0U=oetRKQvWJ+G*JAeIiuFbjo55S3(4ix89am65FwS7gX``i!{2+MjWNo
zzy1V~gex4nuZ1c?Bp%=d?#hXwbRhe2T%?^Znqusu2ulHWHqucobbWrMwL>y@PkWxM
zdU}N1op&heqcjW3F8VSGl{AgU4-Xr4bRZep4KMxp<X_7R>-Z9F?GY~vTI(!o;GD_b
zb$<ID4A=}|b4v@)nZMlU>wqR%^|fP_@pQtr=cyZV;1xBf*@$^D&@-FYPzu=Q`*S=7
zob+!i^77T+ll<#(>aJ$;=YFvEX%@!a@PvV?L6KRXT;L`DySpc8{2(*+B*K{a?=s}y
z1(QrDph^a=$ZVs<U4dC`+R_?wuUz_<Y6kd{M0`5W8-enU@p1@=>|deDv<6^Hj490!
zt*(E5c2EF3XOA}Cr!1r0Lk9I4r|MaPe?2(N>lzwP_M&YyaCU+79$@puBbhn<<4`(f
zZ(&VnSrdFH9h}|x*V_R9g&X{oS;z&B5Y(*yIc19JN5D7W8}YJEs9s2;!dCP|z_G*@
z6vhD4^yk7@DCp(&<c)bvtq;8LBjAW~la?m!Y0gX=0ldfuO4L~z-e1-91Os+RVXeqz
zM(dHFKEt5Zf%qk(Cz#H&P2<P`C$EPGPqQT_W0-!#;my*uK44*HL%DIZQo7}^rCJ63
z8f%x9nc6SQbRA)(&Bh*xt^(FRY9ixi8o+vs*qjZvo=8qcP;=9kgtobqgoX679qNCk
zaqV;M_u6~%IP&_FA#p#*2M2emdvp?WITO^NClg+5g8b9rMz}bdTw4t)Hg{vC0e8}y
z<{Sp!*~@FVr%)S5Io?vbVqnaIR;yJy-Pjs2)CTVG0NLdc_sM&k^B=A90vAT4#P+Oo
z8Yt6wz@-qtTONP(ol!aL3p#Iwto0VFln4as#g~e4LDxcEyOybTZ=1CokSkGDtG+BT
z*H-H^B{yUj#`Kf!;51Bet8%Lv7q~Z>Fl6qu8a$toCXvGXhON<pM2UOcq5K5Fb4Pyd
zMT4U~Dxk{C>G$@=HYm@eS;vY2u<^K|NZ3WhN1cMyve6eXeQ>c)cHa}DFS6)G=3N)Z
zQh*kRt!=NF#PgognSgQbN%bwAqAl!Z?zXa#T^w1dYgkq~r;XZnebum&)h~Usqvt17
zmwlxmgE2a6o`yc-PgMDi1wSG;{*3dW2T)9x`+mWM^JQwlKqZ`6J+H{pZ7S2CyeDzH
zU3TxAR3(vR;x=ha|1Q$4N-wW-%&+8(*Rk9tTn0_In%Ku$4fSZp?(3b6T9^{(Xsr>A
zKVo)wh<NDZ(=3|N)arjaCUqQDxwV<BthFwRCv)uV?!(WXoB>KecbqT#eFYfl>*SmG
zug{n}MA=&qG^`6#V45fjpW7-K4RmU^v7R-lz@7Q`uVp^JQYb921)TYnsJg2hM4VT$
zAw(y=_7$gbdt8@RR-KnE>dkjvU{W)c3k&KMiLUY0`Hdeh8pNVR=&2hNi$HV7s2x6<
zk0zMU4FzU9j_#*`5*YN+RRYRh#=_?An6kCR%Z+WZc0(~a!K^?^75g!PWv`L^sHJj8
zfX&IWQl`SSz&_AYp$8R+){<OMI8wHEhL7gP153_tw6WhWV$yJ?dFLK8vB~NF#R65`
zJ(PNol}*O%`N<w>0zgPXiDcFFP?&(@Bkn_w2FDgQjnqJLj2x!PIO+--Or}-~X#_q#
zNRNb#=VG4PMPvDzvc3OD-a?85ngD57p~!M?giSh#+0H*d4lzg4M4w5Amr&rWK}9EW
z_D;<teqg4`N7PpPm``<XCw}Mw4rS4|GdOb$+1qw#_66AoG~)|mwtC*YzB+U(JUWZ0
zbR2Zq?mXSndc_(|)7KQ|q|O;1uzBq2)9ky-!<Dj95Pkx*skAD>#qW3G?2(JETTfaR
z@sG8BHPY%R$()@pP7#S2t^0&r1Mk*cbj4h;_hVWbieOpiA5yi|CcnAsjKK2*TqOC`
z6r*-pze`{Y05<X`Wf=S*veRmKZZ009Qg@h{N;R}>u_$M6ZNJVRo6@1^lF_(z>;3z!
zLH|?H$nyc@4`S{G3bn*K9-+s88EwH0)kwcs2sXjPjWWCOy{g>k>$an<@mpWH+l*GI
zGsbvqIbEsB-Ulz%mv+cLjn@r^A5Kl!TQAS(gtKNg$2dc(Ai7sMkuaSILc+e^szc7q
zreW}gU;wUOv104G;MNa`UE;_jpL8sX$E)g6nv#w}uUsy9rTGGU)33n`P5~oVe%Gc<
z)I<pv|HBppxc-N7TQ|H+)^H7F3kP4SPfTWiPPgeivh$}dh2s}pO1BJa2bwMOaR(cg
zf-`-SqI@DzI(Osl1JBP4?2vZncnj2+j4}<N-p)`3GXyYvIh1zF&0$r`&-WC&?B-oW
zsng1~In7VFYQAKVV!0x!eB2{~>k_VARXv<xcT6=3y5-1*jeIOT4M77%nz+{!$|HiH
zGBmnTi2O02G+~D3u$g;as@mBrRjx?_yu<5+-Jk9@9WF2Af`jJS<pLqetwz8?{1W-T
zGvi*__11cIjyfMfNnx7(@AAwsD9@m19@_VN36rqRAb4NC2Va}3pq7X9As_7^Ss2t7
z^j5gse-5wy9pFr-qHP5Ehkj_6`*Y-$3kTW|CF(8@MD)Zz|0?GT&_)72)bW|{E(R#g
z=+^KhIsAUqpV+8cnSwtjy(!`UbJ~z^{z(_DuSJ18-^bBvPF4r*r1t&k{<;tZ;i_W6
zr`-!|-(LgRZJV*G?Mp_PK$7tLZA&5sr6v_hW?4$F`e39qBcrYI{K%FDJZNjAbotA(
zvqAagub|`VYu37|#ADkmnG@$4Z4iv2OKDaMP|r3eo)CdXVc*22IypfLfx2%!X<)cn
z>vo^&Xy+W^^)Wj=Pv>brD(BfIl_zHh<g<MZv8ygk<W<|)t%*YFbjLW?t8ybN*1h1J
z|5i_36Bs8#jJQd*7Y$tfdzM=#$eD`TdV!GS-JQD8<xcbBq2>b5PTV|dY@`2ZVEXp(
z>-CU#&YIrFzYu~Ne`p`rl3ud%B>G|-=<PLZ8(Me~j2nCDCFfbj%cMp#8AegHce6ki
z6e^_WtlNXMI?ZTV&Vp_W<#z=ci|vFRlCaI{+e$X90hfi)u6EfcP4a$6r3{0cr~q(^
zQ%oV3)@qb>I36UStD4$qw^h9&Nj0*!bUyX*U_1Kw+%ftr*y!0~cz~D{(3D#3#x39F
zcsbc>;R+napDbn<Q@NhsABm{Zo6Btr%3^S8Hn$sUjnQ$1DE6xMP{ipvfx1YjQ+w$`
zcA8e;!DWMnPG|35pYZpmevl;Gl)jsK{w|APpT9Ad<(7Gn%z7fS*)5769kss5z%h_6
zt7;pvA>C&=CuXA%wA!*@H<PBJ{8u%fr}yis<ctNBV^BYrG?DQ4O$b<-&`hYTesOyG
z9<!=B^Wy4{>(!&kfnvcKloCs2@g<*ul1udTcfu1q&sFpIQ&bv?KWQ(|Mqe0<$l=FR
z7Lq;s#2IFO^eLKROtm7<I?gSjL<98KKGLl#%XfQc6Y5q*rIN?FTxwDS3O#_>A(jRl
z$b}l6_y5r-`D4!t#MFk?s`GEooq^%D`O%{DDC}DDKyyl+ZuKrOaAn^q(QA0U+)x@B
z_ka}X&79Bv$%_{)uj{bGJv-H@mwWfg2Bm;_0@5<Kwb*HI#y+&QuwlivUHfJWl=8II
zHu;dy4qggN_*1m75ov4gk<#&+<x5MoeSMzY8MHrVT|%V0MlT+da~CUbJ|^o%DdS|d
z7RP~LjyYy@T(wFWbTv{4h)<x;7LVmRlE*neB9N@r=Ogd<H4)>-hLuoHdp~y37dcs4
zV7me8=`JuJS{gRKOb{6%mBRb@+7RnjfuImub@n*Nrm^!*HUwViaeF#8^1|qq>FoVY
zS)4H+Js=h-N8X8*_)K$eay@#TnyrK%FQ@3L3D@ud4If9@eM_G6S#s)G^2mx@-m{p=
zCxgXG)c5X505naR(KHBN!h?Z2OGEU#ZG7B;MbVj7B>K004;9ldkcjd7EbcbR=y=@w
zWJspiow|!+<Zb91=<IEnb?-kUp6lvdZ#vO2e#jl-^cgJHvj1*@nvnn20yV3I?UJM2
zL16F8-m#RKv%v0g+f1dlwrEuyAop6zg7PGZB_DDD3P=8wI}CVt=)R2F@<aO(grXC8
z2gY~xW!UfPOScmJDD1!VqvT2Dc>U_vuVuFCM>z_UOE#CzIFVv-J@^?P{s}B6x?Ve&
zbwZ!6u;L;Ui;K6smE{w_=4|}axE)**cr(iCOLpBl{Dte}^N}+K3W)aL?>_@-Xd4xd
z2M85;zx>zJY>;4D3$X3{t102Pb5D|j537~BVTueGtO8T5qpZ~n2qDGyba@&d{jV1T
zJMWDDKiA{38G!-3NhD*%f_sx3Gt2E?c_4^_KlaE>I8(6zOBq8usHz8*d5B13Eu|07
zLIZh#dLt4tF4`5?^3;(e2r<Zw`a}r0UoYWs3?L~;i{k)oN(snPZLMElwX{(?YekI5
zb;~g?_b5(Am+OLfOp}{TIa`B5l4h+fGS=Qo%99K$1j}|7E|rH%?S8P+Bk@iOG}=Sr
z&%B>OI!ARvYR;1w$4j)5WyMDLm5g^PHsKZ;ipq-g<c#A~aCPLPOQUTCc}(<`@1R3u
zW2y~E+jE7VC*USeoqkUN@>F4*b|D3W&NKye!{~8vmd*BeMpro53PkV@cOp9ohJ0f<
zp8<cLF)G?Rh1x3Pf*koN2H?gMEavdQ2q0K0u$A&}h=#P#=Th4ZrMKz5aEu7_lnnQ7
zpx#<1Ig$h^iwZwR3<A5iYBl|F(9F`iR@j@Rp)5-KgBK4Ge6d!inu8X^4O9ZnFlZFo
zQ@{G1u=t{1;_gIDDKxU>h|cr8uhM=bS}WmVk(*Wkzo!w)q2nQ!^AvKcmB2BF=`|u6
z(ALd;vGCHCe+5t8>>EkR-m*tJ&fK=%ao3f^8~qpVl-F_VfhLm?iqT)BjON}(j+EQt
zh&7SQ`CiKo6lETk&J$q3OLx4UI-|U2`2$6#c~ZyR8~R8PQiG+|DVEh+h+0%Wx?nAg
zR@Z7z<@=j(jd&9}7CO{v71p?1ez^S0g8uP3dPV++2q3}#+&0`KC<mwzSe6%Cma#7u
zh8lMyfIS^fu6Iu^kb(TVhw*C1#@n0)S<4P$*M5kldvJ*;v6zpP|1?GD)oV2SiBk=z
zRe&^M=kAvN3Nqqrs>MF97e-p4PbcDRVz8oWfR+*HWtdWgwCPM~y7vx4m<Xycv9fM$
zlT|7t%T`@|bE{}N_%kF}d0_(;wuEO>gT3H<IuG02nj0_WO4%N*wfrixZAp#g%acdo
zAnOyEFeAJC+z++CNJe#GMvu0wuAMvfdaN<_Tul329ieJ1%thm}RnWIm!hMnBv@sMK
zr1;MU`|}e__*!>#1<mC66l%lTseNHJt7RHhV9ju65uOBgry-DJ8)E_M4&hSFzhX!R
zx5>$9fd5MftCep&{iBQrZEVrE;KBLrg7@U~VDiP>wL&a<pc`e^6qinKxpv&vRM!lQ
zj>?uf>eI)T`%S=<4tJ3%i3e4UPvR>o@|4)-Ko8tYO-^j{j6(E0Y5|X6{Mgr_*LNwg
zwVD8cRuDj1%e&-s#ezj3;bagsBO{PUete*3GAx=r-k|V#3;i)LL$JI|I$v}8T<GT&
z{R*UW0M`T<`<5?WI6hgIF5Xp10wpF%yaR`-Xw)7zk~i;4`k^jBd7!pqMqPf!@@SMh
ziveh?!}(C{3r?Nq=XbZ-!w6`$QzYOy^$Z`V<Y<Eqb~o33{o~h3d_tPag>o5>Tmd48
zF6HfzbARf1+;~liMaIh031&%4bx(b=val|mzQ?&f=D8SL<4QZd#+wAQ?U?Ir&j&oD
z(fh`B$~*!AO|iCVLeC(L{dnv7`nB!;eJ%!>3|TkG)5Gm1ZShCW*l*2cJrHE5C-UEj
zd&iRK$`kAUHF10nQ}_EL(@_Td=AQGt(Tlf2H1O$Dcu`vt+@0%+3Ap&kU?-QJ_m=d0
zCgNx+7I1La(ibx*qS~SF3gI1<_)g&mrl|0kE^}xx^vWnL&>f9a)ZEGw>J*JM$8CSa
zv7n-?XlDKF+^*4VB&J4BxAN#pRpr1Xz2=Dd{E{w;CzE1oYuv}#t0h9>uGP1_>a*Z4
zvGzgh6(T!b+Ss1Og>ZAy`Kevaq=wzf&%+UFzvny`VD-4)Nq)_6Y{ze1!r@DxFOD1!
zaQvHDWPF!DmdxZ`WNgycj$AJGF+(0=?ZS}`CU3X<i-t6YO?DY)vA^AFuF{{G>IT&G
z;L^qXYc{pmuifnOKE=MMS=veOY^Vreb~=j}jw;4SSbPtl0VUHOdp8qOA_E}HfBPnz
zVK7xnOf|15!Z0}{)!Z$v=}&{)>(!8(aks-MMTM^3yAQKMu8>m*>iE|z`b1-T<Hhd5
zwgk~1X4`}9OIR3;{ljej*qQXNUj^QOSp8Kr^td-{ipVEw`h8{g=cG3&5k!X{D`lDv
z>GNaGz@joYf{S<IjTiODD5IYmpL)_RB7mMhli2}^por+zLX{uw6^K^d-#^p44ycJX
z@xa<Ymo}clXW{-h0o5GI@YkRVo7D0qDfPsc8U8=c!abt`&Af>LG=}K#sejZvODnb~
zuO#n~Ek8AXzIcZZuHKp)6*vMaodLQH(cbHzfla}Hq(85*rkmq;bnOLNXIPDrg~)Xp
zeZ0ug$M@FUgov?3z``{ocxt&vT(LA|2bny2Z8-6l%kLotWPvwtfmi1$6(e{OOZaq5
z454t(tgn_DPwXD>E&c)noU*y=E<2jsPCP5BNbUr!d#d(Xpy?Byi`D9usaOdtb5xYL
zO5b5WHzf&;unGp-QBayz@z*z)ZDV~{I{R6xv!G4nuV{0Kd!w%N#xv&LQc-v3<qU`P
zyk^wm9ME0-@rZ-2HtSPAR<?a?yZdFh5PQVK!}Mr#5s2t&&aOf{CaZQWvIssn;nFKS
z#p^~|>umWF0<T7hfiUk_;c8R8z*ElYT35X_Lw{&^UPhn`2R*<cfr`-4l$kr$To^)k
z9+p-A8FY61H^j4%fTNF&nm+Z#e#W;SK=opvw_KKT(GdCt{nLku5n=wN*F-QSx+Ep?
zJh`^;SKQRic><TIe#CvpdD1Y@W#)WTMG#WSw_d>8IpGe-&*-|lO1kfst~eVt(jP((
zxuR>Jktbjus<N03xOvFyoV`u+rBYtU8ED02S@Zt01Q20r44OI)>u$vdEGU6qg@DQq
zCgalVVdKcT-B~+4{Nr{oi6NsPHB4XqIkq(}Zu$IIKcUp-E*i|0=&J%oXFf7Kpz~*_
znn&%-bz9@wqip_#G}y{zLA~3F<ATCKs1V|Q*?0Qk?`aIE7X9eDc$+gCZ9Wvht;ahE
zFW}d^Q=weE%T10CDo3Ed=UcaKHSlhmfLg(&f<id2Bf01EI7e>9e*GTynNUF3UqZfY
z8ld9bvr>@3vVLn*cB#eiqkJSz`?_BAh2a_zKFKk$Z+#dR4R9sGwr&D*%A^)W-f=q%
z$NPMTs;_mgNWKD~R+N#X;GtdGXT^Oq{?t@g=)oFCey2OH30q%4nJg%PiwNKYQ#`e~
zlU=vts<q?3N0;cou`6F++9`Hz!YO=PwH^G^rWmM}2c$@lbNdPKodhVc3_W=@$RPBC
zbAoe({!n44(P9K+7NIVl9D;5BA~zDR^x&u1<FTaSnndOZLYd_IfIaA7RR3&ccDeEP
z91+IrnRdFX8^o~g7*5F9$B$G)$ZxJS$_Brgo7*G3G$tKLTNjSTzB{sWcm7osZ@|SJ
zuElCz>MsC~!v!f^4dwS&HH+#Y{yKfMozQsG3G<F)2A9%nc-F;z6qRe+B|Z)o5t_;m
zog?5ldJnbQPzWx*ok%=LPnPFpip{XRIkvRSvuX(GN%?3g^`wK?ZNGlRXCLhyUlXT}
zXUiNT(PZxPRN!_ByDNaRtNDf~4rMMQwM4lwaK)0n@eGo{ka^z{%K*WQqKn7@_%{G&
zqjT?{mQ`^NF?GP1gKcVg?`DrFj$eoWDiDlP<vmU{sh60~?Et;TVCO1(&osmvz${>p
z!0Fg_er-0GC3Ka&MzC`AW>t+~G2DknvM+PX`rg8J<;|{@Uj1lu*DjqAX`d)YPOO)r
z;y$e}(n;qPrx@3V%7Qx-dIU{3OZ>O@jsz9vzc@HdJ0WYMjO$z`gR}cF2gUqHDn$$U
zX>fLbhy6YqQ!LvyyrPnI^(G@+UVtBMD!~m|32nj=DDNtDM+8uC=?J@%qM&{}T^|TC
zx$cJ!5{6*~+{x?R?E1f;5R89~0qSO=#d$YpKd3>QqqccRUf*qE1NUS0sB+3e@3?!9
zH&+w5vI1R8j5FB?8+*-YRe9X3_C&4IP=XzwxP?N?v#DZPYT3dYFt6)2PI61d$fR9Y
zvad8vIED`xA#Bq)|62%nx$?i;G?WA5y&qFf#W8HoRov%wPqwqoo2k~G;(PY^NH>uo
zRVm}ta*J)zx~LMqZ|S%_v_*UtE*L&{qN-Mrh(q2Zijz<A510f#8miC(0=FFFrxtKU
z_jT61|14OWa+z8n4QTsXg&MCwV)6QSGV=TOJY5IxYuq1ZE4pwE&?AJxU>4GEJNM5Z
zk9IRrcw<u~1F@*=pMR^R2JyE%fUpJuCG<B60As)8KsP489P3-kX@8{HvNTu2@&&x#
z<HpaU4=}?mKxPEdUOH1HBOy()bklG(9`i}!{5$r^M1_^KTLk8^86}I~26yV;?gIQ5
z2StF>(Gzsp`FG=Ocn(nypWf^8{R9dOWZyy{vo0$pGr(*GkV}6yTcHICkTZJ@BI$Yz
z6IMpJ<<Jb^+cwo-{Hez`7EXtZT{YrIJMgMcBJ|vV>Gp~u+Bv`d%=0QRg3$}0nh~xS
zM^1>XRGiC^k1Pz0Y)Sc8)k5p1G#mQO(z@#H+Ie7I@nr_w2kI9;Tye!gfA$P1FZt~4
zy=7+0(!KS}QZwn?(!p2Pja4*rG3oFXd}P9zNN&Bpa1rS*DyoY}lFcWHcBTf`uGPL4
zuAOqzo8OdpQn#Pry2jJBTyyX)aeaP#9naojXwJpN<TZw$@6KT>vaCjxc-@WO`{w)U
zi!Ire5wF)O^0`d<&d4)fSdeR|b?HnML-;@g&omK|R!G3YKt(Kp2Df@(;6gH!<cm@&
zLD4p+^tU22l`a-fjSr6xmrmEqmR|+ygoVfE56v|$Mw?eTH(ppozz0pEA}Mv)4Zg~D
zjNJLu#OUrem4>miU+Z>foy4}q)EGF9zZIFTl^)BoUDc;OC}rnVT5OVA@UB8#@^081
zO>k58D<kVC*)Ct0jXjF0SMy2F9n(sWU8P($4XJ<;o^#~uWw$#Df@OFNZ__n9Ft>A<
z_u^U_d;13cSsI-nkJ6rJ_vE|MM6=5%3vaqq>6ahYg4xOTsP-RL3=z$$yNKMWog`g+
z6l0N)g)b!E!9=$Mh*1Jc3dgzg2?bCQdMljtc$MPt@Q5y1uApy}mceoH)p<_Os}rPE
znU;P}*$XQ@pX2*!k^`*ByN|*s1J=f*JS#p!#D>@NmXhy^j3z3+AOQDy5^4Jj_QF;a
z4RP-+#i4zR&ybg+WO`#vQcT4Cz3cgFZ&9>D#$9oDuzyXRzc1g73m5r54sr+j+qjt3
zMe*CV<KisrK3}}8M5B8{4b1I;vEv?eL!Jwmq)S%QmgTM`6nq*<QS(FX3^Og?@f&<k
z$wN?PkfB+fD*KmD%;hC`w;DezVUG9ww7-;%J(a#ZNqD3JrIVsJAkpS*O@imG>gUo9
zP$Hw(jf@VRcfOR?^v`DV^OF||+7&DEtZ;d~6gk<C`1-n!KIcC7iYiZVZuA%C#P|#K
zXt{C|bLWM5)$*h#v%@3_Btz=v1h=Np>O^aFU)jgLbCuA7ASqW#)*MA*E{f?rB-xJ-
z9K2huEb}^6ZYLCc$?0ks3w7w@n_4*jOT=Zq^Wxm8!7U8*jXtlsPW$vn_Q$ZE`@b*D
zdRdesQEvOb1f6QDtGHE92XCTZL_VX%-5=j=Ww#qZjlDdv+^9Pbd4*s1=`JU`cwKdl
zH~aHZEx$4|cLQE4z;;|hNgy2%;Tr3cdt>G)s9Dw*Ew~9@{J3^jJ@R8;HPcn{{Jx$Q
z{sAoXOc=%$@a?~Bu|J4q1JFBGrQUn<G7OV3C^*;_7O3FRk?3||ZJtA2P?Wo_K;m4x
zQp7W^R`*gz$xD{0{){DT8ENp2s3JAMY{s&nH0JG4?{HnUagAq>8?K!o+Sl)?f$eRc
zzR3gaU9fP<25ZAA?{txPaC$;jB+c#vj?*`9)+S|-Ku@0vqm3x-B)WP-DhHwtKLsf-
zFZDZDu3z0yhFRV1N%-?19TdWinrZRr3qRk2f7#)cQ$XR`?9+VrpZ|_f7f8-ns_%+_
zzi;)~D2~)LuDb_B{0PEQ{c{2|bZi^v3rGgcz>@06k>@G9dFi*@9F2h}?EAO;2mY61
z2nvhw7+rOw1T)~_QRGi2<VA}Kdj7r^i%<P~h=U(P8?XR&l7AYg1V0sdc-q}!{J+xf
zclhAXLjIRuRs!SndP{r;kS2V)@M&ixV1?!4+)0y0%J-&ZhIXgB`-XokVTLZ#2hKg(
ziEuTAOnKFn-Vz5_PN;;d&O~WN#Hvh>(^zQflc8Isph|hFCBE>nVbew5hHqjxJMGCf
z=I;6|AE)K1?gV#cyx6YEo7pPG68c-R=6k7GayDL#Q-kugf`UiTvHNMUGoz=7lv1+S
zqbeN(Y4S#O*dCG>?`*n9(sxfCZ>3dRf1=Ka|7q5hi4DuaJ9KgF;X18j;LCChs?&|y
z^`5MB_o88Zr6vUp(2XU@V3HKyS&NTch_@~?wRJ1{63V_i;NyODoO>E4Jfd2BTH52j
z+f0}pcdHtLWYOlBz665B!tSAMOyRAbk$I86IXud$h3>+e9qNe-{q9d%iA!H)YLSY}
zNB#c%>qQ9`dUI-NVv~lc@bHU;D(3u}CvRLSUO@iDyyWR}^U9AEo+BIyeY`ZBns6j4
zZt`$G-Aq?V`R?5IV=!*#{g>6zps2jdLOO3!KaRvyy99c36-l#;a%QH1y-@~LJ*?QX
zFueoY^~@*1*Hl}+OS?}eF{-O<d^{uEE@vuW;S2JpV>*<cp<H+(Wr=XT6~W7#)QC|M
zn3HWyM)LV}zIC=w%sr@tKWTP0?5<HV!>ylV%fQ9Fv>cNt-?h&DOrzk~4hemZdKA5g
z>l9yx<DNodwmQjS?9wpcip`@$A2InxKHDZOhOuzU?W~53yr*J^CgS%uA4bf?`p!L7
zRnXmkn|kJg(0WJc)@1O|!g)2(&F{-;jY)rMRz=(GtX#W#ttGo^iAB${--xBFXV;p!
zKcQqsZa}dr^C`K|ROl+d(ca;9BuW3w2urES^8E?CvAr;NGBADEuAFLd(4(i}#T?7;
zYjm0b>9jra)oM0Fb;W_qt1f2Z>(P2?sF)$A;W31%cS+stskYVOiX{R}$n4j*k`KLo
zxr?rUe{MMV_pFLOn#IqaXU1D4a?e@!OzzCM?9K_2W!{hc{c0~F)8k1<$*P&y=o`hB
z3f&Q%B*o4N^TGP@-Y85U8IxQY4`;>r=><@Hnro3bG-ow96pLfhn$MiS_Sn`9!CnM2
z!=<25#ag&|?Z^AXoL8R$t$cV4n62Mq$cEg-$y;;r^YM=mB_n?$Yh6l!{LSS!FCmH$
ze{YA?N<aYYl;9-x?-SC%ZVE>GtmAISD0K*bzblz!Fr8N|19tiWpjG&{Wdk0`t@jt1
zn<T#vx&3~uX*Xm|anXdXwH1WJaqCS{LKOStt0t@<tq&vrr^gHg1h@pZz5nGgBMtuS
zmw@ownSS3eTR`5$f4I`)gy7Nqa{D8}pK1Tk=JQaL6M>5DzcUwpC5pBB$2Gj%a#&_4
zOXoU0k{wGg%nm!1i>-=BANKc%h#2AzBt;lw2k0VrnpU@29ahO?wM(l~xdow%Gsny-
zNp<_P(#}&arRCrV{o4g7kRnwaKCk>TP*KTO=Fe=3_l7|?cG-T$n4EdgPiQqaSSQBR
z`e<`$fw&0)17;QmHm_aI5#$D%=%lFAmhTu>APdZ$@An+N0yI1Dh_z1`Md&0f!pGH<
zwtCyaFh2rgV|yT>#L&g<A)(Gu`G|{ok18h?ro%a`8-WdEeFw^@_~5`dlsZzbA|iW}
z{Zogl+viGg;gt^~y+5>8Xv!4bly6~NYi$aTf+58XYypX^U?f<tth=V!IRm#j*jQZ-
zw!;ZlTIdlxDOfSVjd4LmhQwMiOi#WKhXz|CYkEpc+t`IMPiTlPe}7HMZtG7Ga=jG~
zs|<+GL&76)byUVVJU%j6+1Zt9X@B%!>F(*AZvYt^apkMuU+i~v!gUKiYf~+l<041~
zgg2t*e(Vv`%CPyo^(^DORVdQq+Aa3?tXd!@>hU<EbaIFL4#ii}nj-=rxc6Ma`)O?5
zNcQtVq9ENr^T;T<cGG65Qi;A0m<|5^f3RZwX;K4Ybg@6k_~8H5bq#<Ajd{PxKaa1D
zO9ODM7&(Ra_jUXeM}f2RGKO0o<ZO#tBia`KImu4N`g6u*rN8s`dkpZ6!dNA-72(>8
z^B0z|@oHQ8kA>AKp5&nX^>C%L7V-b6QrzJ@Eg4%COP8_#e;R3lEj6_3r!#4N8!{L9
zy&TDGM+WY??l!Sb8$>s!Q{2mI_;8`{XYA7E0F&vF{BLs0FE+{3<%3^}de000eyPG(
zxEuKw4fWA}{A&9CH(a;7+#%J`-m^LGc6zpyw=~Ytj{d~G$RHA=!r369TwcoSD77&5
zRi#cf?MUD-imi<1IebfcGwFhmp8LCdx_yJ|1Mc3VrpkfWHEWlfD(l|m)YOh8<b+pY
zX93TJr77MIS?BfBj+KRK(w2NrAI{7*+yT(TvpTOzX&$7ukNRA0#nhPAt#Mj{WVW^C
z;W4B^&b{JsqK5#Zn22G_z2jOA<Ko*($cw=Ye0PehUS3}8Q~B*J2E(ti%=b-_qb)Pu
z9Yj43T(44wolQov%(_!D3oif6X<%kon|XutZMSE3vfB)Iils;IY3P+v=6Cq_MWj-?
z>~~7<baIcC+!NH;Y>7Uyk*rR*F(QhC?f)q7`mTdz`J9VsCk-B>^gtW;ZqIUhE)mJK
zw*Jy%ccW+Oo^_>(c=}^zqwbdWdIDPw^v3PQ9>e*GI9B<~mE1#yp>lc0CX3jmX!&X7
z>!96JNau6EYXkCH#HWmfeD1y8BGN2g$J_EkM0E;**z2kA4R*(Mig)+mKW0~be{k<o
ze(tX;40Lfr3Q-zP)pu_|yRa_abvj`Q6a3zoqVN&LMT}EnKl6xqvLY*{AJYNpF*)O8
z9@eWxIac~bn=+dG$r(C0D6HhbR7&A}|CSU#si0f<)b&tKz*9uNfg>-&IBzjezTH^M
zcX`x^q`=oqK{{S$ZzPlK5geK7tcLw1(zH``$DD(OS#m5ikazjnrIWaoLawV0@KGEi
zTRlajE}zd`c#Z|_EV<pQm^4hGt&Ku5S{ZdL!^tXDefGnUYT%;x8zOPSHvy#46hGI8
zMa?NyEKWc{IIYZyF5&?S0w0R~Q)ixr;_EGe@?3N@(pI|%%bcOil5%3Ot`v`o4_egx
z;L@qgw7J^igjB?_7<d0@jcI3zZ}$GpC+QCvM-~j;mkDehBU1;GtjdhtJ4oXRUwfRP
zscrd8cPJ{S<ZH^v(g2%w$MR5bzn;$8N@#Rw2Jbm$g32fw$?vBNGsFK8CK?ZW3*51u
zmtRLRm~@#V;{Lt?4$$dOkvpynMVh^jpfaX^7#qKv>Kr-TC8U{G*Eve(si#-tIV7C%
zLeTMvxssbNVf&U+`dZDo=G%<)Jofbsj6q|ZD}!nz`_a5|D)VY1v!Ns>ZtgM>(RC~5
zXp;wfw`pfqngrx@T$W<;DqTNZ6F8l6=yYuqbe~qF9m|>0gSPICK;Mk;0v_hS?=+Y$
zc@)h;=<2!|eJxRkgOROHiu5|wF#{)ygdy+Ig2Y@Q+&+o^dUI=wO6W^e0&57<_e-*(
zDiES<bKV~eq0Lv6(}m%w(@)gQ(0FG@plilU^2Aoojul56aNTpHp=KC@=A5c?ceR&W
z`f+<^FUgE&A`s7NUxB6e+doIWtm=|^DtYH<vqdg#VEFHFp&Tz9)RF_b2S*Kxb6O+W
zv3y2OJJYQWXW~p*+t<{1Z$O3c(26k-U7{UwwNsHq7mxT3{<qi%Bc|>ya17EtF<mF-
zq(Mb+E^zV;40b#|>E`?Wmi_Xs!nQ#&?U>-Tf}rE+Z_NCSiu*tLZ5u*erz0THjSK6m
z85EK1JY)XlYyQ3$-+yMaiSpptC2g`WuPA9ieovnv<)+-8s0-b}MHJz`UpXcPpeNRf
zKpFr4#wZ8M_;7Gte~Q9oC95Dc`Z$u*5}zy`kUPxFpuO<l?jS4%l<{+D;$<7Zlp=B6
zxIR`@+_uT0Q#@is>XctVyBbxrje+0yPB+|v^X}=pWa9p}MSCV_fDHk*)RJJ3uNqV?
z!D?kf@vK&`Q*O#iS~Vkm7yl9MumffPf4}A59@+F2;LWso<xM7#4XV(x?u6&dj}5P`
zduD*OPB3`b$j^A*wIo1b#Wxh5GIgx#jPiWGlJ6J{j^#lcKks2X{W8^7YGWRP$}gnE
zCA|0f%Tt}bt(%sD)4VggH?dooe-E}7kaXb&poEEF(4epbTJ=5G(Arn>gTsr<yDOPw
zF;$0Nlc$cc%<J9i``Bg~qGQ-*qel;oAhS!^Kr;>Xd#(3Qv<GW>p)1|P_6~=9*Exr~
z_aJrpV#07)WvwwLDcA99y#kfZJL0=l!8-k=&hAW8(Qnn}tyE)Q^1^xf6PfF+#q3=7
zG@w9(m?@b1ffHoaNGERLG0`d9gjNHc{W1bBMzp(TM0xvlV|m(mjIkBAi7v5SaH{?t
z=BUfYOZI>e0_f*x^Gcp3rkVgFWL!E1{Y%|?mJ-Un=G<*V^AM=IRc%G5$8g4D(%7)v
zc3K3_8diM$>El5h;sMIm_D^`KMe7GBTK#nne*xB%QDa^f6Y|ozZv>iy_6}C>9$BU|
zGx}c6W(m%~ei1T{qfjysi}2t!@@Hm;6=DZF$Zlk3gqFfHd4G}#H6Ccpr@)9+Mj{wi
zs-+}v4!Tp*(sb}m<I|3H5A$d0SUXM2mCJ*kZu2YK#W;k^4T*b$&CDGoLo)scC++0@
zW619lYSXjv4vP3ZYT4e8ocokt&oX+-G$K5b$xTRqdVn5U^F)D9iEZ}{Pp9Y5nu>N-
zd-#G+X{m>GB~9+=>IvgmaIz|t6a}~}uoU!bGrYg(v9uo<ZFV$FMXSWvJ*B4P=}_?i
z=~S+cT?-M4)5fs3P?W!<7p1esZ#Q0jZ-gS+{cQ0URvVoohx9ANbY%Y$9E}0SL?gbV
z96zC|_61FBz2Yi`=lp%=P?uZubd0@4@poJxU+7m^HT1Z)v)}Dl4k)0%2rwPawlgYj
zD0+ffVsm`|)NT=5z!b?`yvUA|WzEa9&X4(Y%%Y~$Bs<3E`BEOta);Y)#&bGlw#fYs
zbCcZHw%WvYXx50e#CR`@rjqQ1_Uly^$LyIpl<eU%Ez_|&<X_h_8sv4;Z2IIf7x%X^
z@*c%cU#NNof^){zf)V|_%G149!K3@FvPH0UtXD)CBi^!zR*5mCzHxtyO_wk&-Cm}1
z?a@}8tS0v!ujn8aPb}0-Stng4=TS!Jdx~idB(9B;R>-S~yGf;7>q6SlxA(VsZ{c-I
zJ$a_8_nIiVt4=<sgN}juK1~&5WIccIG2Vf%`{M{7C#$!PP)*U;yVtK1XST=j)7~>G
zuJ#aoS0kuit%KuPt4Kb<CsB2_=Q#=qFrHGeU)a@(qp_sul$(HN=#(7ik6IoNh+&pd
z5s(*ssPmW6x9%X%Q>jIt<jg16d`zl(+e=vEBA<#WRIV0pXD>Lg1!LO@31VcviIA&z
zL$+EO=p8u?W>Ix^XKjCgi_4dI9y3e`%0iM9{ro4jRwqcZ9I(7s+1KE#l`N|i9F)fG
zxs;&|6{yt?wohq)M$TJ1&@bFeCv{5aEg@K8c;PV|`6jZxoOlZp)2O&(W#_r0*(U~>
z#waY4k(^w4@*6AFGYk#YB#gIqqde?H#bq^$#f!OD)yi7vs<Px6=ASmyHBR)ZdCPD`
z=P$l?&sPVKu_0FOxZLPoA63Hjm;PvBcqR%A%`F&~TL)B}tV7ExI<eWteyG%?7D2Cn
zg0Wwpt<4z{7ag>?!FOuL<BZA03R6(&OR=Ai=$zUj+P~uqa&j6~ZNE}Z75%eb2jA6+
zk=c!iypbFR1J}wNr#B44S-9I681Y$GR|^Axce#1=mE7J2xyL5OWfoZ`uC^1syS_u=
z`PNfH*Qe)~Wd=-^hqFdkcuArd^xA2R=4aL3<+|wzg08AV^x^i_6UF^!+vff?h!$qG
z3P=Za-n@r}V|#ikVgQr=rGkqWaqya(H{$l!52CLy3hC8d`@Hp@wd&2i8_-CGQLCXb
z#mdPR&Wu4Eu0Am8d~Xbw0Og|vX{@{INLjCC0VvSVvrJpBp`4|yq0CR+W<nU(6$<OK
z7OxTv83K^?uJG?F%ZuQ2GO)?~2Ht)k5o<h<lv^6dZ4OGnD=M5%w67qTOa3D!!rtO;
z<ob%4{K1>x+ku=2z?bG3`*<MiasL~ND8B;rYgKege+q>fq^fJ7*?*pFZFcQjNd@wq
zK?4=lk^o=(^FL1cVD=JLG^=cbI}cF*FXsV%xbpyQ;{S9WPy}Tl9XRW@PdNOJ^Zp&v
z7dnn5kDf+VHax8Q<CG7x5I}6i*mDv24PgxHt6QvhGB?%PcR(W@{w@&xx(dGECSh4T
zFvTOrQH%%&iHrgcJOq*=?SYLnzvT4Zex1@*kA?gan>!*(_1#M_07mDb1vbb5d;N;J
z7h?|~{_(ZCF9PDb55|sKhML5uEch~aW@y8pgGRI0O*+$0L8O&}0}5eJJ*M%PRCuW0
zkdt+Avd}`ge83Y2vZYG%57%Z1@FO-RK_y0P-%@2O8Wc-xgkYAJ0~gYGVhJA6N(5?;
zNSg1bG7M=q?Nye~e(tIpGEX@+Gj8o++r7Q)v+y%*w_L;9BYVWqtk*Y4OHaw5rYFGP
zUXk%`>gD3q-^m}FO=NiOWjiiS>HlEwyTY1Ww{8_tiUKME0s>Z0s?s|s0!o)&r1#!I
zN<c(GK}4mOP^7m|LO?o*fb>oX5I|8{fY4hg=Z(v?_S#$a`p?CGaW2jc4;LXMU%tF^
z%rV9sv%lzl;2XmtX`l;b8@e^VcONeWSV;hiPXVAO9`m#o;e#>c2M0CBKGl9>5gR;Q
zCMske2G~u$fWp9$sQ4UD?4=aYedARmgo9({0YFFN)dh9rmNWA^arE*s-)1mrJ(B*4
zx`@%8xN47ZVP2SC30@R(k~mIZf6%)9!rSc$OV~o60v_!_<A?gEA~c1d`jywDor%cv
zva@F+y~{qy%6n!@KjEl>v>X%Lo+H&CN-Y+?KQx#uyK(*Ev|m;N<8NONNj~CVRee#^
zv^bbafJ=%0!BC&5+RD(qpg-kmd||&%|2ZU^60gR5kY$0XBBwW?`9({QHlPM*@f1YG
z9psRjmS?}ArTst<gjSBP0Uj)_H)r<DUgC-RPcsD}|C2JYotL%f=zN_z#!SXXWO8N2
z;Er2jx$U`jJR|OP59qUJ+#Cj%cn43DsKa+tcg4THHGo#>D8F9#5HioeuVch7HDK{<
zL{&gg5}_CrtB?F_7IsuOPMD7IDeHOe6OssQdx0bKp;*dNhXwZ%IQEI{mCMrwmS9~d
zuwg)SUx)<2CSr4X@#0RptjEZGy&;xNe4&^JiWk718}pqIbt`U}g~*VMP^gRZbfcD4
z8cCvlAM=NwT2MXNNpHj%t+ibQ?}k>4NKJc3s~Q94aLL`Gtiviz{#mg-EyXCe>s6n;
zqsVfyOURDOJg!zr**@JA?pxf32{hhZ=Q004V?cO@HejB*NbQn=fL}m=7)a(E8sm6a
zi7<3~Sbl)83+D9kdLyoVsgQ`%-jVyR?#-_%nWyRmWdjfR^(O2kv{lQWG}KDHG}10U
z<$un}@pwY3`2^JvmWv09@!oq@pcGs<-!~R_b>l8iMlMIxpeuhgZV)d0F{ox0v1w@*
zHTp^R_rts1=cJtq``4z!wfT;sZ*VNn4e=@~Z8N`>8P=Vu%P7Mfue)^py|S|0;TjJU
zcwM{$@)IBPy)ugb*v~dNR<ITWQ?tV|@#M48&-L*oxJxgDtC4AHV(%4l-DG#k6fadv
zthwVKx|zx3SyH#)?6}|J>HWP;iJ6VP!%IMWuJ)3|J1+X|55QvHdA1099^Pc}Gzpey
zU1K`UXq=^dRNON0lNkI#d@t|>8^iiR`h}H&Y*j|!qtGFsrKM%;H^!0Qkua2~u^6XZ
zM|j2bL>?+8SP&UyJ;<jy?<9A-!{ORR3#yyM1DB3#1r&XImt-vloCYR;vU2}c+-`D#
zzOb4&`P{N(fXr9pkWu$~^X_YkVxFwwAhB>!dCp|w%Kf86tUpRz3M+noI)mB%ii#ou
z+QiTIP?OI+pz*&m){|ufS^n0+qaF!we)~56J7Mo+0ce4)j#s+BAM$^HAR{Y&i<I}b
zS$={Hyu%>o;LD$C#1UoR;M&>qmnL2EfAQ5@G*%2$a|i#J#`E|Xo-2vL``+-a|6kSk
zsNbI8eQ(O*K7Xl4N5hEv3{c2_Iu@3=ikxkqsrHdqEm#4chkNKN51oHnQ!xMxV<voa
zcHGp3R7DL%!{bo>H~w?+otzjIeDm+b5>Nq@$|p0KO9MA{kHU(R0U-ZwHh?9J^AELZ
zl7oQ4x3ohqs7>%FaK@PeYVhfo^8FyhD_0UsXc)x9TTyR;Ppr-t(W`S{*2D=CVSK|t
zaREIHTVaX{-u#j_{y1AlV!?HueKhU^UX|?@f2`W)bl3PD9!ks9ZP~YWf7YmyFN6O)
zLRC<ZNxbO_v-XYGWK1-w?hOSnJ{bCy+-vFFPyOJX6DLF`0;zG8(5_<Xq+P#8sg+Zd
z{QxLtyBn5lQ1@0@_{OJvru75Q(T$-G1znICivFPrrt@M)483+q)r%j#6j9ma6WK&z
zwn&1z(lolqqd@9YvV?c|(-so5xL_2|5R34>xG|%uvVN6pu;SZ=SFL#)P2IuS4i8ee
z!IIsPF+tD)fAGXs-^cpG6+@>YsFD+NC}KY2J#=!-i@%B?_ubn#9#knZ)fxSMksa@8
zBT;u_DyrH0LfD}99N9POd8Q{Y8Fq8-NjynVQ|)befpxo7-Ma@=Lsef3q;0G>Ay2er
zS>7i3?L9x=A8xy{d7*Q>)X))9rKm^2*c-{`V;;D2x}0&K>w>Ftg^1>%e$`gw;azqi
z!9Qiizul@&iT>68c9<saoG&4JkD6f_*98VpOq}Hy-e;t3l>+0%63+vRmYs!c&D&#;
zq9;}S*E2;Znj*+8ZCB^Tl)@dC`sMWFUqsFAS9y~6yd{6vRr#wPw%N^`06KG!q|?)6
z&~&NVU!Bi(aC+Kroxm}I={B6tg6Kw9%jf%wC1_LvzG;bJKxzL2{d}}vFY|D%R{2Kw
z(09HnJiyr4EZE=3X}u3E6~0>@zgRZxtvLU}N~KChPCR}pe~RXJq@zMf2oo@5Px{r>
zf<bw69$RE(F%rlZ4-_ws3xzctCT^PG36sf7C-?S!BQ3ZE?26-zn#{*$Yn3vQ`_quS
z9=V@~%fdPu7lyh{IN^#!cze1<2gWrX*K`;fGBI`fZj;)N#iYuQ+>b;x6a55mZA&Mp
zHU^YJcXv4;>%-|9m22<$fdK>?X@gK4imjm-wo{`wGDP6sg5<g8R_guEnTdoHt?VVH
zF$1v!-o{pP%s{D~%6{Z2og;!O2aX-bHJR!$?wCX&i5m04U|pUhn34%)HmVCaYf>V4
zYR^5>h6vhmtQdQ$q(2R%@Rq@X6fW_2RIyQ*zxO}M?(pe2&lgQfX)?F-@6l;qo%A4}
zLKCrK(mPL8RXDQYtt=pWx_^2GR#-IuQE%6#XTqW#sgNcNNUTcPLC<;AB(k1AtON2{
z7OLoB-Cxv0x@CEUJ5+@dl-Ul8P!t#C{~gIqocStGJ8QZSTIU8e@$vK!>dCO>$Ak<g
zabomelgh%^I&hzqPJIpux8!NC%aomS8Ow(^aDoKo0nvbvr4uteZ6B`Q66v;xbm<mk
zlHEK4)r%_r*<E`0{Cju#WjUKMh9U^nh5zAB*qBdnG9dnzN-t#6SH`Ap_Wtb!UqTdM
z3jXs5&#oZweNj1`q$e{iO%V2}@j^M~Y5O_Zc>JD#Be_t}IaVuzUa1`F+^l!)B<OpP
zU!3pU{O^y>y;on(N|#FZ-yiYwAB|~%C#_1N#m`>-Lyc6q0Zx4F8?Sls0Wu463b1i<
zC%6Cp)VU8YUl*+Z@s8wW1>RD(#04yPef$6D4F7nH;9<@jCw{rm|Dy5Z7i~UfXf!oM
zn32xlf$9YSWuBUHvE-lDaArRQu)(GeWyWs6W)x^#Tq9C-=@6hc{h^#CQkK=zrM{NA
zoS2@El~tcsj;eS+FRjf>P@sq2Qnubcn|+HQ81Az1J(7>lT<|sM<a1Swq)dVslS?Z}
z_0n%0bs-(`aX}oG@y=H#nF$KJ(D~4uI3>sT;TGT=bO6qX^`<S7%9TZF-C~SNToUyK
z>bW-*)V4r>jNVfKP7wtLyaC#h#4NUc3(sF;x;1TlRv%?pObaG2B5FO9<9TAo_U_@u
zU}TtKiZy0ac<WUQOJQGK^kUETrQ=ENpXPoEM}NC59=iq5SnQ{KJYjAK=kaTxh9s+O
z?qH;`+I);}pK9}cbG0I@ew1>z;Bw9CMr#iJgh8odYQO>B5@?B*msm`L-jZ!E+TPg}
zbYB4HBahc2qr27P^1ogy^b7K|EB{=O0mlV&QJKRN+jqJ_$iBu#VVi-3(@~&=8E}ur
z#LcN0*5-s8Br|2<yUCuOH<iG(44WV6fS*!0!k7>c%HC7_P>jsi*yEv!-7nJi)YRWe
z+p+OFL}r3rc>b8LqW1Yh9G87o4)d3d;g?-DquGC$wv%dnW{#1~ot?{1-oO~opBtQv
z6voF7cAuX`az6%=_w4gl!qEs11$-m#*GuLuUuWg2Je=pxHIXypIGYpOys_TFhu(O#
zGnTDX1f1vDz%pq`7JZa2gGOg^H;IGyYf^xc%0lm}y!Dcu)s;Ug(HH5ZSGY@Wp2p%5
zPkTRmszpq=i<{3BFL1+1)biYgHItquQ!k(1z!Tm)2kTQ6S%TZU+gA9d4NtFr;WP_M
zB=}59D5{+TT$Kxa4iijP?YZdS0pP~j;A<#G_$VtSfAsFYvf;?^)sCygHUEfFbiBQF
z4Db+?7ZOS=!a-qSkFJxy^Apr+urGg!f?nAFeqn~$F5w`D<gNZ%v+oA3UBMkZdx#vz
zTF;nL6n?}y{)$l`zI1Xx_+}m9KWsA}FaX;Q@HS#{fIV>BpJPx>4H@Uic@hIBI+a&X
z*f?z`oMLHd*E5{##x)MD``b<V7lw`^9!`nvq-NV^&wQWD=ZENy++O%#{BB1>xaVZ+
zfn4Y5zSuY7!tcHE!BV~Akdq}YE`!&fS$}68%Gt4<;nL5-17UJE0E8>AmSwej4{9_h
zrCCkf0x$PCma^!TA<8Rj{KT7ttuWNnC(gxNuO^R49I(JHK0ors$o*jv%s7vWQ2lZ?
zPd%87_(`m!j7$(1BOX{fe@0~RIUk61c&d0YZ<bL7sG%IJxl<f6M+Qtyj-B+|Yul(O
zZ%6|6^Ul8thQa;+Uoie(FBmK7q(J&a0vSs*r+pn{yuOw+xSM(aw@{`HeI)kb0^O78
zL%sL0evcoK*+f|fQXF+-6RR_W{xqt!2&^m`Gcf9CX-C(Fy8+c$iAwN2G^^^MLVc8i
zkz?o9O?F{~Nd=!H*GMM*M7Nc#+bW>cX4A^(3#UKNv%Z}^80BCI5cXeRnLmG%?4%Z4
zD>Omc5y^lN0GfxBVA{tW(oJnc`A8Pu8jY8aZUAl0_Uq8~nhK}9AWxgzD$`L`kwVEr
zzZxA`*VRa;n`+$$>A`>uLWbz)bnVi6BiQGh9sE)cYJ9UY3nub#rx5+wj2xxDT7TM-
zz~Im2EEr_c5BdCtIpc>3s}WjsxyD01(B{-PowHJ9(Khw(tLbP^<#A2K)&EjIXX5=2
zs}@U&OYqcZJJ~DJJ340e^n-(wo9}=bF$$ez%iU$+FqSnw&A2kQAqKVGi=e7XoJ7T5
zS#-zGKl!e*7K|pq@JBQc(wEi~l*#`<K9Zf3c>Qx)$U0J(kBp6W?3ezz=9_MoLBsL(
z%Cs~~Lh98?aspuHoTH+gEorjw8NSuGAT=+cIFTaYh$(DDRe1YN%a}vIcrv~oJ%;S&
zv`(|kEKt*QsFevb%x;l!(*!D@95+R`y%(@2ag4_0#yHNWA!k~wgS@O5|J4X43U9_F
z7lyl51AAHffr3GmECU^q1Jwn_6dsEPe7>er3A(%+68uH>66I$KGlGNN2YxA`l<X2#
zFzf}qk+HJOCvu5ySO!c;&96m~C|NFULT^ob*Zpkwv;cRCK~y-8ymz~g9rt=QzGIO<
z-NJ%NO=WO@m_V#Q7-g-=HLf%L;Lls-udAh^Pr#5c&|gnuA<`{p$JE>z8Ugx2ORjNU
z5Ueo71NO6IGY5>~%7^;Zkn@8HIICwQ+WX53H}{=)y)ziwd!>>K+_*&+cx~`QXrLd=
z@ll5$-efP1<<B(T5Tbw+#X8;@HsMjQD@GYlh~H5S15GqgwiEK<_FaK%3Aj?15hvDt
zEE3;DZhpVE>!DX-vF{!0eV^}UO&pNEKRzG`vn9fC39PdVjgU~D{aKykFMs5~Pduqp
zPL}*=XgBRR%pcU;?~&x=#hu)Z*%uElunqhkIKsyrmnF1owBq49k)8H8*S-Uv`>)#F
z&s_IAQV)n{H?o|IcT#>wd7;WvMGvw9c{UVQqx8;Q%4W4lS%ja!B<qLqHLyqy@f7kF
z5<#Ml-VMj{rc0T=h$9-~w{28{SOl8Akd|hq%$JlcaZwg>1J!(E;q^w>t|*VR?wdHx
z-soBj(o%#^f1-7-CRXTs`o1td>-G=KR9YN`VQLtTJ8?==<%I^ITFwzJ@J&>xx7CWJ
z*N9Uj*iMYoXfBGUi<~O$ea7+7+}jj;4kl+eDpT1>I1vmKS5xLuUfv#MHctlCUfKmr
zuKk}Q1Al$u;G2?k)yR;>wEdc4tk%OPUbj1h&z}A1;rW<N5FYD!LRvzose)wm#Kdsk
zi`L2Ef(EXxM}EesNfl)Yl>&~FqL;YP#XyjUdXgf1Y;rlnt*<6LGHD02`QV@CsR<|I
zKg?6pkbBc8?-v=GZzURvNX@lhfzIP~RYu{defu)s&h^Yq24jAyQnzBAGzv&%pV_OE
zQ3jB<)rje&<+bo=Od*`VZ30<sxd02W>Cb)x(1X#ld3q%;Pt+|k{QB<y{Oq!?{2_lX
z(7dau`PT#i`G1`tAXKZ<$X8oKb{SSG{p=5B|73L|E5^QF)e>~z7P2d9(<la9EtZkZ
zu*>am6}LhQ4sh9eW@qym4d1X)gOS&TBbH9dMegkrlnXW21na{OkCzG_(F3NOBDtQC
z$;K;K)OT)CS?&sc(Fve(jek<PLsM#1KFmPc)RG224ivV^-ERR8Qxd^uyIhq1R9TB9
z-5EIkUnn7A1<FV9u%I2y%G4ehE9T}Vw8{Td#&q%h|1#$P^D?Gr&Zk609AAk%Jap(s
zplk`1fyjg7e%Fx(yl&*rC4~YyiO6l&4jS<Wq?5a@9MMx>!SVBZ&AUM$`Y@L;Xb{{t
z2Lz_#27V196<6*^g)8eWUYdEKBVmO$Kyq1DPeQ*PBYu)23H*aHZxXWbGNzV_cFw2K
z&@$_h%9<#Ly8V4@q%Ut(-=f`7JVv$`kVglrUE5xsb+Qcr-X{-k5g-vdGd`%>TJ+do
zsa(?i$oJ5Zb1e5OG=6?*xU7wzqSkQV8~$ec`z@gHB<(+>!26%5s#KvH0_!$9++CoH
z#oJ#M_3E^?$ZWD6iRoJHz%CTXJ?M`Yv)<jVy?eu5o{N3NTV;yI;gMUT@a|eRV=mSA
zLNGvPhP(J{q8W6)F3*ermzXOLzs;9Rncw!N+{7|hllhYBgQv*`6%~ba@pjyLq@<y4
zKf%i6gw?J@r6ZfANZr|G{s54KGb60@?}qFO8F8KBb`py)+CBp<PkWfTh<|l7ToK)o
z=sQSG?gT@c2vl`jvU$$2M%?k%QJ@S<DA&0XZ~!_^SnKTio#d&=D80!s+cHK`lO?KG
zC6L$^OzQ61>oDDz*i4@eNQ(t@XLtL8K>HDsVD+Xa7h-U-8!uH^);cmi0@oQ{wf!QF
zS#Ji4ra+Q=^J_4G%bQJ=uBDLDPMy$n&W2HUG(YbM_(EXDU%vr7*Ryffn2r;RzF~C0
z>>M_m4<<+>%@{LBSNjqbr&GOh4gS@V|Bc5^6#n54{lfK@>?Pj)#gF-(W-bDiL@pzz
z=ev&E<GW4{0g7)-bR&;qN?-K=i%MJy`ff(7sip@2Jf0X0U=XGFCc#HB8yX5w5Kq^?
zp`h^&L&9pMdV`6n4#Y07h9_c1Eg+~>K&-Re-2c~Tpi7+XPDARQ`Q8t;u*IS3&kIE)
zc4BwD5VhMoXTgZBI^d}FN5$kk$?VcL-?{T)g7<fKCO0c#KCWW?)=_}v(Prq_l?b2D
z*>Qe2{Un(0>ykEusLQIKYTxZ6Ir7uL#N-0OwOtau1)3oHxB0-MM!`6^;|>Kg06WFN
zW1N^#zqqewTN&5ZajKj-_UYh$Oj*A~%#zA{@g=c!lpF{8-8aH8J2?NfJb;R3#Eduh
z_18KYZRum_jB1;lycA6N?x1wbh8K$dom{YM?}X?I*$XnY?U(52@vnV<_bRXS+K=pS
zo!!+RPh_I;qvd_A7m880_^;)As63sIeI5Bt6}19eq|TV$ka9QAVwMwrukjeYgIj{0
zNc30?{yQ^2&fL@g_{8QeBQU3vI0Xv_6j4w+B7;7=;g$9q3|&Lt2YoI@f3vMv-w^yn
z*bC!5z92~1Qwf61+!x#m_-Ir4dEkClDLeEF)u!xUd+zKzw9(BR6pQU-S0wFI*_8;|
ztDsNSE^ZnZc4-(tI)^eI-(<S-TcUQ#snf%8PRwIGJtQGwHc0`scJE06$m;5NO{E$r
z3)xM*WBzRpG7M(YG}zD1V)GIdQs#lD(30SO7?lO%<IywuU<x8af3U^trhOK_h)Icf
zTZ}^|27{u-KnFMX@AAXjqidO)Jbz9?BJh)t)^%M${d*-1e7MQI&^uD=J6j~X;|lJ>
zaOo5Ke)GC<GvC@cZmN{c1#?JyNawh4w!r&~ev$oOUze-9vR|EyA^=ZIO`kX(<2<II
zud7#VPd~>`$y<K6#FROd9q0sv)&3o2>_H_uF=~G96>Ggpk8A?J@{g_`ghvY<_o!+(
z_0f)=vU39}>QK6{{u-<hQX6}|puu3aslSQKgLVuI(^v?#Aau-+0uRi@!^pDX)h{&D
zh}#B?XW$^R9uU>X2|07?uW5Oxu1BaPCKQP+ht=rDD!fJ0?R~rSgNAw@1UTgQtewg-
zvmGXy-V`%gOp2d3bAjH*lEZ)8T02PfIYg){E9%cw<M12}CNB)<R;hIy#SY6-T*lzZ
zNXHT94F@V%rg3UzgRko+i}>w?V`xK#p*X0rXIJJ4=CkDuLPHgd-Ak4ek1PWH!7G1D
znNqoxERQgff4`vqlHV5d(3RtGFYU)JCO>R-Yhw`SN#>RvQfQw1?Ie82!W-o>J50io
z)^V!UGu>>SV)~#MrEqe&CyNc5vIY7<JUyzEnFSBr`BU5H>CEj^L2N;ZBgky9caFSN
zB*Q5ev5FF2GLX#AmNaCc9ff^s|Do<%kMe33OKK{?;_u%+sn;aT=fAj@fw_RULkDo`
z!*#SiZ@TFeR<d3aKwaXu`kp&HM{UplU`Mt0fM4o+5{Z1G-P^tmCi-y{iIPUCGK{1Y
zb>;%jG*m1JqU{K;mWv75<fwsy1}0nE$X_NJD4hk-qFzxEbJm50eLo(<ID86dh+6IR
zG9+RQIK`Fb+%sZA%h!$&86@jn3Bfoe72PFm>)<Vx43NQ^Lr#Bo`F6nT*Jmg&D>-Pf
z2%}hZ-Up*teZ$^^&Eq@Y4Gk;=w6s}AT9h!_m5H4za@ZCigsZa~WwDk5C%>xrMGK^c
zoBqf~7F$N3ahbtfH~8nHH)~+)E-M}fM=ACL>;Y<O>^4K&7s&_=uJqg#RdB8%|9HtZ
zJx3OgM054(YwNJU=nGqNa5`!#_Ba=Qf(_qs4?X^Amh*Ia{pY~-e}Z_B=eBm?rU=)t
z7k~58?;z*zeGKu(1fa5eid<VK`n?(W8*)jJ10M8ZIU(ya0rTgEqhcS65l#O?9*;Ww
z=O`QFukrseLomdaj`Muac+{o&1BE#q$A3urWo?nK{uhT-fj*Cq4ER`A-&{Z<_fTY^
zBn`++102jF=3@WgKTwGvBz`%V4sX@2)~r9(_)|_h0CHMY{?tRNX}gg^Fy!Q=8Z!sh
zBY+Y%)=9)$?b;6?3!OjmYDZE58(j&bFVN5_&R<+xS!G>Z{1Yjb2?1Lj8@l-vXw+}x
z?E?#+cop)FdKv?Kcu}5`K%jKW?n%5GN<@tZ`sO-Q=TLIp*d#j_u*?CaA>FeMl?g`b
z@OJ#TLs)-fvVS3_nX6|+%vz}iz{Q_AA@C@Y8-cBzTm!+OQ&4aI6b<$3fP4ANU7%XH
zelIm=y~P>>g=E6eY1@%$bOMg>13^d)|Dr@bo^hf%G+0`wyLLm3t7|;n@mmDnkX^Zb
z_t?j7Yln>`Uetbjxupb6%uMY_N-q|ox4IT=jR_H0p*dc7p$NGp@5(P^+TGTPG^`z&
zWtUh<=JSRaB+9%_$iipg6brd6JonpaC1sF!R~RynmuiqR3{32t6^5eR&QY%RBR-!C
zCG_S>EwLh89lLk2{^k0P93#1T6R}*dR_+1czumTf7)=A{E*mBLe`dIei-)e9F2l#9
z@EN(y@DqYukm+Uvz!ALp$zg%P3MI4^PYIa6I>MP3WzOhb2S~pq`T-@0s`Rj=J9n?+
zCVdBhAJ6W-C0`EBhwE#{#;9>d5LB0XjjtM0jktso5C3&mkhH_Z`3ebw7SxB;M94;?
z(;MTRJoCvJTOWm<Lb%y)-9+;hh2ckn^O-g=Gl8R+%B9W?ya<l%^RRg=qD?^-<~&jc
zDZ2rX|62HiolQBWQiz$DA~(fWsDC`NP{W(2o%jj#X-%yq$nR-}d?L)VQ$a<CM=z;_
zF6(;Z-W>N{?x*S!#<6u0Hkug5X3%?=sT5p3B*mbYhpr-capI!+X)-kxD)<>pFtS4J
zsN8GEQ!}qO;n1&1Ih#~sQRvF0^Km1^Bi?8$c$#r}0th5KOrPHe;yow-d9OYJ%LJG=
zc$Z(GZgh(_$8lX51=9h3-wNJ(KW{m9><<6K`*+p<m48F>hv>x4Nk0~EM4-8qAlWa`
zDYZOcD&+me%!wV3|K8Yb;m7=dwY$sb6S!(a)gQ0x4<h1DmA>iuaVKmrU8#sC<adGT
zZy4}r=8*+Mf05RVFzt0PRh-L2mmS1BOErtd*x}HTd|h|SS(x}Rf!~4M<mDj){IM(R
zL{ee6^24ZJh~6AmrhnPqQZ6SQPdcQPA1vFOlnnr)2R;r2G;NR2lgBKj0GaK*zazh2
zs@(qG^Ho%#X9wZ%W;#QE4fE4+uF6!0IU4(Cc0TTUhgOOPaJ@~&6}&TJE<`{6FJ}h-
zM{zKraDz#V*2t58`G^4bWv2j4Crv2JFT`ij>xH^bl~3;j1-8~F+h4kBa0fHBY(DrS
z){@I8P*EUGa<JfVTS-coS2LF69`GvOJMLGDPjpan!Y63Rc0}6zkpGidv%$R`Q!22M
zH(WdB3m_jp2?g+K=?Bb4)47CkMA&vee?-JP3m#=Kl`y|xk|kV9fn@PZPWkSfW}anC
zzt@+@-MN!cuN~hiUi`z#BWbPt!=_!Pj<eTpyhE2@a5L{MgC@|ZXx2|)TWoLg%zWol
zr<DONCWE?+@Q56*tX6770CqK_td$OaceZi5));#$&x5It;lxNb2-n&Ti}OG{tWiNb
za*O-ySqD+R#t!i2`%?NIu{*{l@#+4zVvb)%$|11#@Mn&)G}RMeBn<I$32~(?BdRUd
zI<06>qZeqHn6~%no*0<&bax!D_o~;gGz9~hd0OpGcxtZotnF2i!FUd3eYD2bfo)Dw
zd}Wt!;}z{>vD?~)ah|?Wa(%4m*YLf@+B259(mtXI8|I^BwAOekuJsiCn0TL8md;{I
zgbu3*i%3lxBpHR1pudSL2ytg7j`0&k5`K%%`LNl>1d=?x&WZcvJ>6$keMurmv5irP
zs%>Un1;Z!;3GD4Rc?#xUBB!m_T#;Jpic=1Ad3XI2I1DL^%8-SfoQS4Vb*IX#uhV~7
zvV*Mvm`SzNE%zI<Cz--b`iCwkmZqV2X(sM<tEHT;M{m)WJ)Rt&X7_&|Zr~XY51HY7
z8x@hqe2%QE=J@8iRltrs@>ZFrWsIqIr3D=JQcTD_xxH;r<?F}RjuI@9iw0O4#V@E)
zt6o~yxmjuX={!|b-rn$Xmr`>y+5s*fB98}2iyjF%COrKMC%h9LTJWIcu(p`Ui56HI
z@N+g1@Hdt?d<nlh6JiV9(RI}UvdTAHV_f+?#oylyNDcZkeIx@to*a2ENIOH=PO`p{
zkei!ZG`}UwV@u(gu}5JD_yLi|jXoXxh3VReO6B}HYwSGBK!(TKhU-Z2ME1=(v_rNP
z6n+9w*^?Ina?b>zn(Z~M%(sHo$h%07`san`x9@O#$_wf=I+v~UmkxPX`u}+ya;f(V
z?6cX{EOE_mRr2rnkMsRc{C4deh;RBXL<O=+yp=5HZvA%F|BXNc8)APNSB(ExjVu3m
zi6zxiAc!C-w3cOQv{1~4vVCCwV!wf(pI@$8RoPm3hm81TVDbiXf}C(-fyIUtIz_+@
zI6OHcC7Zuq8!2**pyMT0i&0|uf$>=t5zfg8E;Uw59Jybv?v@wb_4V}W(DnU!1YJ*I
z`I^uTJ`GG~tw&v^B3*J{Q+_^sfkD+>_xS<MEttN-sJIdX&e3GAi?FHGF>ksvKB?F5
z6^=aCUw$ikz`kEtcV}mZ>Hw!(rO9ExZ47r=TOG)<q&P`LB!pWW^_QF;%FLdYV03LQ
zp}Jweiz5;=)hqGMNDMg~J>Q>NLl-3AB)(td75e6qkZOr?VG>$Vg0yrcSn&qtQ)A;`
zu~gOjZjUQ|Go1ZM$b4^s{6oDLFJ9=De<d=vw9NA?WF#da_t?zoC{PHTZmd``?5#l9
zYYnulwtVOL{Zn<SCGbmQ@|#vJu%$_I6fxga7F^29zvsX4YPt8-*ckWdwv#d8YKK&@
zFydYtuLD#4qQY>2kSonil&H~}Go)^em;8iW-^>r?<t?AuXdeJ(#=%=oINXFa-gzkE
zaj$N_+Xg+5rQz-oYzoGjPF^SqcsII4dyQUlgt|^GGzQj_QGBA*NBINeKAPzQ>gK(}
z-S4OQvY9fYA9eCM?1^~qYzS<u`S@q<gx2=cJMK3Umd4LPDGufcpVGxksyKu7s;P#1
z)8(Y(q<tk(c^Asf^GNtNdcWuJ@P3`@PV^_5IB1ceq8e1_lsnnaI_lWmfl|87dHwqR
zxRy7!J{U_e2plh8J*?%ozLdj~<fmDs*wfifxMhIDiBx`NK?)}OdmILK)m5M?Jvf&#
zmv}KI3d?O}Uf({GxLYAL*=h|JeakT8PcUNo!cI@GUZoSp?QQ%(LhHPkFItwDzk1{G
z%*C;GE0s=`-(~0|(a9K+^-lew2iV#}uE9dX?mJcK{!D`fda_)#o1XUE$IDDx!bO<1
z!av@tsPLkyL<Kfuhkradb?THLL~wL}QHcsVs>$&|U55#JV&w?bASe}Js)Hh3-pVWW
zm@b~W3M3Q8?uniX)7J~#y=iea$T9?H74HzO`sp>NJNXX!oqEe*E*(-I2W^p<)rP=G
z@0*>Xv16$sjx`TCI;C<?JS5_C-_^>sd}b+8;hnyQT+_H1AVTVka8AxFP*w-7<^#xK
z#yooUd*dR@0bB+j^fPMTiVw$x96+8a#ZF>HJkO|rdCT8sd=jg_QpMW6uVQ9@WY7@a
za6s>a7?`as7<1lUCplh7S#&q)P-#y)mHCSqyZ~0QqA9jB+!!xt9?!Vjw6El}ko&c9
zeH+`7i)cN6n&*(5FXW|DVkSgLzI$)!4#I}kocps0?}|h}?`F<K^u-bOyd-qxJk8cb
z0Z14{du&}qySH#K-$rP8PI%>=((f}gHg-oe?~NjnX0lW<ZJY2>Q=;|$mu$gpEi-1B
zar#=lb%p-^8z(IlJaCm{35gw9j<tHZA`Uw_`ajIVGcvMlXWz<0jV5OgtH!TCr-~}I
zl^A_r<P%<-RIUOQ_UK8#`lS#pRrKo|M%c;-Hx%~mTTPUOwUtk)^Vf;*A+x+^!eSJu
z4InIM1>Kt!(7XNgr9ut~;s=u)GavnZHpp1c#<*TBzgJ%5y-{j1XhT+IS7b9t8bxN2
z)Oj$$Zjk8!6|q_MuM_<-Mo!CH^hsQNubn6)80<CsjVwrMBYYC99regtNs7KxT|GFQ
zF={^{$$8kzYI`*6Fr9pHRB+-$vIF;*1*y*xVuy#LRTSIVxuxM#htJ(|35hw>=gx-k
zlB5tnyPB`9>ACo_t%|iWTBF$0OvBC4OUqMV$LF~7IjVCfAEn>C@l-XP^7+|&q;Cx-
zTsgaLlaQQPl4OpXSc&-FRWp<1)3p`!DjC<|+GXheHT&H>N=&IcRyjiLte_5orKeRs
z`5pK5?H6KE35Mw?W<iT~`q1)hJ$S#H`5}J^t=U%6ga-ex`3WnMSJvL^Q+)B>(h}z1
zzhiQ`hbpVI8WqB+si;59wR;L0@@Ouq2RFNqwV(h~(neDR5{jm|9;aWiBy-DD7^^nV
z<AJ849pRrB23~f?^Y?zlz)GqT`_N`Oklh`cky@Tdu8KWYp>YJga66v3UVVkjt<)mY
zMP#fumUg9)`a485J6%LdZx{Q8*4!#c&Ui(Kbiv*2E?e(CuX5`z@U+2{F(hS0jd+B$
z`lWofur9Y9)tqY4$8?R@3|}6h4Hs**uvGNjCfWZQPror=H^DmCRn;%ir!n1ltIUnB
zA-$)kF;1uZa1mRAve>Ln9D6*oojYjjjx%KJi84KuHS}MD!n^(8I+pzM6Q>&O<_1y&
z%VHI{5*jQ{yn>~~Lp@wDn^0EAJrdiY`GT!Xk$&Y7iZ2SuJ1ZnmNAzf^jWI#IyJ9q|
zcWX!qrES0jC0`@^J2d#?{#h<Q2G&iSDzND!o1KvLh-bmo--g-Jpxj#)A{9OCqX$ae
zYStRgSU#}zf6P@?_CWmtMpy&k^O$N^k4^M*>ynLX`Fd$G{}krg$LWz0>|5{B?7~fE
ztD$oD6B*_|<|df6qu<Bn=}qj913O{qR!Y*v{(iABE!a|_Vk=SNLWvM%P_FF4SNA7l
zRKwsyl%pxanAGf#pAi$7yOYIr&VnPaM2(|rh}zYCGdxCrLE)rbAdh9Nd#N3N6d568
zf6-HEGjd<V9J%Zg^_WtSRG^<_<jn1aecw6hG^j01x29P~&o-DOpKKN>Yiw-%BgwPj
zr7JX_yDACw-drNKE|h8h>nqQyc!~L}&SO5y#aZqX=<+Hgr>n;5W31hLq@_ZAeprP=
zw!_Dr?h;yO4}JK4j<qhB)o+c3&s3CD9r|LP4BoN*AdM_6Jml%W&UriFv$51EOfeBw
zW9AKm+j7s{FkFAK`%ubpC8s-}Fr7U40wzz76t#T))neC7*)-vn15y|sXJd}G(=^y}
zKzHbxR=l~}pBV<7{I-(hh+b5GTNdf*Sm5Oaar2Bn!u?zy3>3(nvv6U)!Ay5HOZzC?
zQYBh6vPz$+RwT?w+r6^EPdNHL<t#GJp5Df+e0q0w`pWM1kZbAc*WQdSa(=Z0h{xz{
zjyOTp8Fzcl`HNg&x9;l6+U<E;OK5(b*j8x-nT5|lm6j(<k$HJc!Y#5Y_c=QO`6!c!
z8#X*`OEs>~C==%fdAj0ERu1aMQt1_#b-I_(9hK^*p~sY)15S)AuUQ}*Q1|3Jy-m_&
z$vp{puLY6yYMrii&g3qgArqO&C+(IWkNGfyuoZz2^BupWWucj)w7>gFNksH(*Q-j*
zW`ew8%d8IaRFWO_=JALe`xB4&)!I)Lf)zP0$~qD^Uco*toM)-(tSy^Dm}AGyD9?%{
z&e@!J=+Oz!&$n}}O{`Do41zCG)6j^_3?mB^J)+5kM@#~PYC12x%SyPM*vSf~wJBTl
znie0<uUZ|mtM7tMQPa{IXU64Y%)Fsrc81V{hpS8W(hxV{4uRi~-TD^%2XL`8mtX7J
zFcrO6wRoHLbOZ7j+@cM-C6@2BHn+jkAyq2h5=kzoK3Lr6cz9tJbyZg?8FvpmE~w2P
ztMSO0q2i;~=}zrpsX&%)ja08=dz0CMERxe+28t107AGtLvA@g}fRHF~Ey-SpkM>md
z9iAJL@0Lhw=d4xP5?g;>ySuCRBR)TUhFNTB>50|s*F$qu4NEIYI;viMEmLu0_QaOp
z@f-B&B{yKUmI(X)wz!ZU3vRUiGd2FFZfFhvf$ua1-2VNa5>tBh%O}1qc<QHoShG7d
zXz!`04iyd#G}#(+&cj5iO00DvV3h~TO2=B2?5*1E1t!uNo%Jb@JXqW0?gT91N^?A-
z!|rJtpT>ty6*#2qE)10nNu6`t$1Dp?<C^@dHL(glO=eEm-cYqe<7ckS^6Zthj6Rdx
zENlxIF%(DyV>#M4&GgRns%@gHolzI8(IU&G6jLU)KYK#yY!|HG0%ya~CFJuqF0%wm
zDaqd5>G64-#?~s-9&^9T-(~dz8I!lii><P1abcQoM{Ks4G!00JOK_D7YQ7Yw+CsC~
ztxWz%?(WBCPtv{sskmCJ_x#nwW;4@y52YrQNh~Go9YXgn2%J1_NIbUF;Bq6=Jj!O?
zH==>hK}E!TnyO7H`N`EA?TMx*48aGKElz;4u)l@$eoPhC2770o^*t|pc*<k3phS(+
z+ZI=zr1eNbbZgWu=ly$=tqFAzY2&v$-Bb%}`IwP1_fLNMQXNT-Cmi|V9dIz#{k+(z
z;PkZDn*y!z*u@D?+z(Q>ijh34J=hd1xy7dzdcN1y_s2$4nNF`Ca%205P`^v^mv7xr
zd~_~YqDRl52K^BCS?&9(+3*bY<+Ib7MvbxrYMfX#V|f-}q#-+ZChu*;31W4f<Bkot
zMT$&MHokEm(;KBiU>2*V8pz4ZgkZAbM&C%?7%-2!g*Sn2c-zMzUB{;r{v^qCD+cL_
z+p4LqTcHY@fJ3Sv)iXY)8W+5NZ2Zv1E#3iBDSvA%f0B%or;j5=y=tvO`F}$&zv2Xb
zeaDtXz*wK3r~K^M-=E}fbmdbnFm1V`8d3JoPq(K8216#$=Y^mD&UF6mB~Ho*oHgW^
z(Tid$ve$C?;qf%@hycrfy{9bg%iLE7FjOQjy>8?RQ-L)`>d>w}wck&Pf4#MOB7%pv
ztPS))e_i-LC4y$RfwM*9N7bMC%-PQfZV(M64Hys&hKb}X_6r_yWh4hd8iVG>60Mlb
z<jnvCeYvfnP4gpM`;yfKePw3`y%=<-?SFrLxd<@ZXyfY>8WK{vj{DI?Y&(>nQ)aK5
zr?jZsa%lx-xM_vts>^o78jzB#9AJvwN6DK$^Qv?7i)XA7+TCV9c+F`bQuO49aG|@B
z$BS?8&)+cro{h48WWa?mk<HZ=$j+G6{c3<w1#LTllo2+SKw9?2%~BZ^qcgFOj?$F2
z??2`H?E7gpIn2y_X7-h35^^cMX4h^hW_Lfz6yenSjZ`GTP$dP&<fR(S4L1w4Zc(#<
zaLYdQi9ndnaMm1b`n0%`x)VIUe1}ioQ%T}d_J+(#-I{>a)cA?<T<1&RRXmuC+i8^>
z2FJ-YizAh=+Ox|^1m8pRdSo(4cpWaKwR6!<J(e){&*iLH_3lhMh_)Hb%>hk=3HKMx
z*}bn)gL$%v22X&I_Ds9_{rey7oE9R446UXzIq1Y(o>zKeK5)%&sfRD22a4{NQfk}!
zd+Tj|%&ggYGi1N5<1z8{0D{J$BvbMw(b>15z1$-xNOv&XV5vj8_@Q+<jA>XYX3IL`
zb1A!G{8}0v@|C)UK>%+3Bz*+0dxH!ac1#`Flng5rSkmzJsD;fUb(vseIm>U2!j>2@
z1BX_FN{}MoVBF&b+12TfcS(8NZvumq1i_q;wD%ImEW?887GIT0`5C)xnmSaLL1)_f
z@^Z6<f9gT88<?Z%7%G?^UM5EjW;mzQ4U+c0XV9_mkM?`ep=oCIHi-ePKxVUA$9LfB
zIY;u_eW{-L6w>T%9Iox|pxccOi%}rBSI18_2w>t?t>nn$oYOJ1J^h#Y{=8tn@oH(f
zM1pOm%vf52W2J#>?Y0~}zeC^28EBpo!>EY+0*1P{lW%E+ZDTC-FzY-|Cwe4#h;6F=
zs~yxGBf!eXfi4i3-}^dm{mfiU(J1U$eK8>j^5XN^;LK{ncN)@eiu?Py2bDjd=3TXS
z)M&sM<wbo|U0Af^1a?9GfkJ;8Q(^A_+wQGvEQZREGEFIA{vlJimThwgL%g7Ch8OxX
z1O@9<>OTVpMjW1*Y_ip5#~Q`z1(Ol($zB$z)Al#4HY}&$SHlJoVd8dt_%_~aE8?zb
z;J8mCtbC${6OIi>o=%txqVR~XlkP+6kqfo(XMMMBo<AeDRb|0^nL6K7lVK;}yTrA0
zmVX^IfBq)<gV@bRRqF&Z1h(PBok(82{KK2&Txy0FBYpOZa8;sVs4@Uk+1WQONt-Mb
z6K0tTYhVKdyc`Cbfih=AWFNhI*R=v#4anZyWB8IbTSkUu_D2v_sp^gydSrJ0`I>u2
z$ff)BQkSom25~Ndlpr;htLninrz7LzX3QWcDC{z_PH~d`29H*GEv|-C!O6CNJkZ-j
zLAl1g@$!bxJP*f5pXXk&e%}}KAqor})wa*Ob}^4PtOq5TUQ4u3<=R~Z%g#vL?9Znv
z-8nZ;si#))qRGZUK%Ig9MZ%=#yVmm@ee$8I18F+xeJ-Ku+ICk>7|qpz6>Z;m(bl%2
z^#b6Re?Pu2QD5wbzsL;ZaDHZjq!87|9v117gum8&9T&%@(*BO+O91QH%Trz5-N-R6
znlA?nJxgv)aktJAwIt^N^b(bjkX2N4dvQGC`_K~%dM<wNd!ul{xV5fDrbcOoOc-4o
zFD4ZA9_qTj%fTP|`dPjIHI-4qrjSnTqs-Q;@Z+$3W@3wWfUa3fWr~vO^2=RCMGlwg
zJj4A<n&WI%UMV95X-$)mjAP<56B14V5$El?GXP6INcqHf+<@a_1ql8i8JwXf*Q`0-
zWBU8SoO1r;<5ptN>N-)dEP9jw?Ag4}hRtfua~l@=g_y$`ewOw;wP26kQCDR)Uf%mL
zj|Jt_40mG0V}<0eF!%6%RTjAUg|l?swqp2F^4{K|a6j{s{6pu>=46ysckOKr4!vfZ
znJ#@{>{u#n-sU`I8aCRmaCq2aiLZT(2%JK%C5vXb^x{mz_h7-5qP+5f3X-<2t9NI%
zR=*i=B<7qWQU>!0_d_-SUbUY{&H-n;_hRL7i^?V}-_BaH8+J!u9zmV$`ZfCA<VgZQ
z&dD9WNpD-H#f010shs|%RS|ci?S^RC^d4`tFU|1%c4&aP3FG7R7vLxp*bGO&!g*d-
zSEbgT*n7!z9sdU0#6d!28_k!lPOXTbjdqDAuWP)#yhtf1xXNX`TI_=2IxoNt%|peg
z&!5koGz$Nsi;}ArzeQlkp`@}$t6yDK1IiUyD0U8EV6OE=pg(i)cAe~IJKQX;qd1;X
z?V2~EDLpWDype1TK(wGy?C>t_&LYb8)ib&6-q9^&3erb>XmrHaGtzIdUd{jXZb4~8
zHc0!0@Nt(EU`%1~^J-Zb2%(BHWyqVow24!?EGCBb4AXFtH@@;iVvqTvW~)F@`!y93
z0)Wl(o^!f9{QcRF1+ZQQ^D`Qg%)Qct)g-(ju&j;I%_n)87uCX#iZ}S<D<hc#!j4au
zigZ26%aDBBGBo&)DNO+Lf@tIySM7g&;p&}F7d0cD)gFP=px=O2y)3~Gu7RnvX6s+M
z+P^>Kmw?|!eOW5M1bYlA3t-Tw#|>NxRs4S!FjD48?#n#)UgSM~2M?9%5Ak~<xBq!h
zB+FfZd^>IPfMF!+f7&sj0n(bZHERFIWQsg6`09NF4E`Q)6?p(mFW<R5(ks)uaRFJ3
zK>pKG&J<yA&GVEzBZ>+0pOOVNCHFRAwrL6<&mhRDz*P)TyYe<VDvPhGZ!kkgtaIY6
z`uuyEEt}NReBVyJa@kJh&^{CcU7n27+p0I1u`3Mpc|{-Z!?jq1TV$G=SlQFvR&f-g
zTbLHZKE7&swWguMIfq8XyCi5~g~VcXjm47(WJm|UqfnJPPe7k?ST1VvBKfZ`-FC8M
z5Xrp_-vvrEAEW}*ON2G{?u>2I8+HAik*oIdt?KPKi~05qpY^s+$?kLQr_q7SqUB!*
z8+9jesW~y}%E-MBYX*CL`rQtDYom(0jS{uJLFp&v_djQKb*oZ!gxYp&z_w?~h2N^F
zY@RJVYREYE9iXBHXDzrd5avFUbbk1XasNr!d5;VmyS+I&aKMv>%B>Ie6~vpDh&Gei
zWu5jZ?dh|}MLKZb=X`0)iF+%0heHk2>fTU8m_Xb$ulU=g5etpWGcyHh3Q%IS*oQou
z7s0cO=A*o9R~}7u+Z4V-$5%bHL)&ISvYve~*{Tf%H1!XNZiOKnL=R-i7=e0UY3wAj
zZ>jM?7lZ-G`XSL3%Z4)t>GV^hIcgD=BN9Jc249`g@G~y9QG9~j*>Zq?7VX~mo-zPK
zz*<~}gA+n^*ob6nbkZ4jYu#?I{T~1GrSo5VZ7fPUMg(AKt;vVk$U>%B#_z#wo~&SN
zZ-F8cfMfqz;3VD8$MVj|t|jtmLj561CM}zNdt~#-%+%d72Nh_L_n7GwsfCX@*)NX~
z)SfL;OR;~@)>Df4hS-vX^`}FKYt3v!lJ+5vHQR&Uod$6Egb0dTSMGEQ)j|%hpsc&?
zm|L%_ZC&L-=)k=n(TSTU!Ima8A-a4$eFZpP^KoyM6W^oqx(C{s^UQju%{*fk1J|>Q
z&MF$#Htxh1+hlpYHE4k(0$NJYoj`!x!SPvd29l@rt}V{swzHW));0c%7VV{2ep~f&
zi=|tXV%>{_CAE~d4U6tPOpe_O8?5R_IBb30xB&0KNhgtHqKslWR<Z>8Y<Q&8^3pA)
z=aOjIc<t?~ZD}NazhMGwt{F)<i5m6I=sJpv+O?l%?yW!7sw=}(lYSpTTN)Dp&M$(`
z#(+90cuHn~uTH7m-4UJCr^!iON*a?Yv$KTb6~c+QW?|)uW!lmij_p=ZQ|>0}gKA{!
zMUgzI*AeCx@P-3~RfJB&O~vwRxWYqPA?64(%Nz@Xipn}Wh~Biq#azbX4S9x{lfYA$
zRPQ5U=lN`u-?T%+E(On43pcnR#k-R?Y=baqdR;?#6AnWq_P6Nz#ASLBpP;N?Q~A_Y
ze6L^QWvP2`E>-rRyrovzO#pkGDUSV4l>v%qdiN+pXC?7)Tt#LW!z5wT(w<R85+Boj
zr6*>karSH_m1kC-w=_h)Vo_)&A-=pkK|CBhAkX|pT}G+)8%t;JGN<BTOZqHKPQg7>
z@NuzgT|^nZ33sJx=fKOdOYD~R$w?gZw%=s)%uH<BxLDsqhV6MIK?l)n&C_odeE-GZ
z%|Q)%U)(~Ou`W)&vdeC?XyA?k05U&FMfrUY<Cg@!ph>DcVxi|Za73IcY7ysbLfKv}
z!OZyWR2I<mL~J`oZ-m7K<u_{@hTzyM_Vh#1P)+9tEzRDht<+(&eI4i^D7U+ocl4Tp
z*$K=1E7Lh`zi$ClCpwPXYm62dH)LFHxQzimI#v}R^+%HISv`B?p<8-y?O3JpBC+LS
z60Y-tHL|W&d&@s^GM~tT$zc>xyTC$oULmE!!tph)S|-XQ5ctiBzSG2kp){ZGrY{DF
zha#987sUI!6dl<I`(1~GF$6W<i%-*rPUTt;(O$baeRh=$5Y$flK4o|FmfzAX`6n0_
zDEB3g8%&$|koiu#W+k(A>KY-d%N_`vvBBownHKh(e-^ger_f{*XjEw6lSz3wPvEPV
zeX{Q>k|MH!+Yw=O)&yXis*H7mq0H>3oYRT?oNL+=J*OrdxH05MOsWUWGaCh(@auJK
zuxC_;VedCn{z62bD1};V(L1eI<Zclox0UV+JKgNJg|O~z5uhq|Z2I2LO&s{N=Au4n
zg;HMdm!T<y8dkeNgPOM1b+PK|MYN9*3QleCVLpGm`ZkS)6H9gxI~rw4n2-B$jzh#H
zm_QVl)~(Suwi4i5m|}DKI~BE10K6paOIJB<s_eLk%jt#nm$KaV?W1#S6-z=!ZjLe^
zeZIeuRF#YWaP<@G!tzo&1P~k9jR050N_u;HN6kBX-R0~C_~`Ziz&)=GQ6f5O7c<4n
z$b*u_kDF`wopfbSJFl`8J^|#CGk6?iku(Uk7&21Sa>S7d_L*u;erd_c!(ODNB^WeF
zdE_QmFj3Zm5j0g0JA#t>^T-WgmXu`gSrVKoh$a9`iB|hRCX)DGaaw<DT5A>cKN4A#
zcp}T?+U%(#5bnR)nflgqz+M_LC6`B>s2X5j^<H^y<KxBu{wD`l&(fZoN3aoouEr-x
z9@1D*(oY@!V{BI<VL*B$Zy`RmOY47%?NT=fuUcbg>3>=vQ;5&b!b7d?y84l@Q3MxX
zqpd8xG*S&<OoM-n-=4?EZwsRpo6i^F<G1lQ<`n+ML<%3M8e7_Ax{!tp6g#7*minsQ
zeR!+o`=?;a0BkQi9v>&#!yOzIjh@0va@*WQqf&33D&W|8?QPc*@yEq$&t-h4=;f8N
z#iPzi*4LeU!nBOVNnwA3vBv^(uS*7L|MAy0msK9Cevp+gNPDiILr3pl*$jfHkks~?
z9)9np4@&iDHeU{IoEWW;tu(`kXITEg3t+m%*EC*P$I<l_ze+kZfs#*CTj36*ycayh
z2J*~Haf$nJUfx!k&ysKu$H6layY@=}jjS(ijk@_EE$D1vRE+1@s~k1&eP~V|G`Lp9
z7gMvex|pL|!J~n=c5kDP3PN@1Li!5{tcI>;l8k4#*tC%28~WLGOTcA$f1es$szrqn
zalKS4p9Z32%V|P_hxJV3L<Fq~#lJy7$w?9gKp(B;BV7Bvmm2DL{R4Lq*4ecM^dGlQ
z_MM_N32-Z?Wh3yrY?Q?}_BJxr8rfuv4S1X-dzyb~uq;x_`^Wr2JXnN1u3I^X?(b|3
zj(i(CU0v2t$W(^a@-Rrv<Q&d+W{!35jI-ZJA@Qq_%LQRx%JFHT3MmEEM%pqSwM%iu
z_plRg(ew9%=H8OzD#n$Mug^WLIEeH1`r55qDx|YnSqLfD*-Aue<iu6P*LcUczQS3+
z)DwabHAz$R%9vA#(vfxl-BpGz<a-X>K-)sv<+EQ1qV~nle%XBe*QS=gdJ6)n6ad-i
zZqK<EOhkM=v;Be#*^WmG$TMf2y2w0~%)fNO10=1tQqK102DHw%4fM>+v|79x&S%qu
zElf05(<1x!uTAl~Ms4Msuj0?kS}M+(6OH%*P}ZA%nY)jQy~Pe*aW0}uJ|RBOOTPf*
zN|$!ItoRUX#J+|AxB8)O=|fwOjJasf=v%k0$@2I?b5}~n3(N{#w_d`Oj@jjrjGz?C
z0G0sn&FzctX^Naw=`Cm>Xs1KCQ8x0}y82c@SB4oDf`FSUDC~&<tFGAJ0MX?l!iA2<
z{mtY~&rCf1iXL}&?LWk`APUeg_0N_sF7~><^15UOPSUf>2+1c_WO&JsR%l0w8R<ls
z2uA)rP$eUTncijDSi4cjD-Cz$_|z_pxZKXF-_hwU|M2a6&35p3rR}bZzCCw~Fh5Ms
zVUUIsn+Cuj+Gyw!ZtELIh(yghJYFFAU>?5!&n}{4mbXv9jg1$4fLfn-^v4oWUc!7^
z*z$OTGlTbLdpy?^=aqYr=?}V`RngD<1jlbpQeaOUC+SZ4{jH@C;>jplECZH{V%sS8
z#pTP?Ds=~EsDbFey%OWLKj=%BTJ%wyOflt)(k-iYjC`5Z>KIehJN*=$@-w{x3GdA#
zT7o=muHs07o_|)SjBFFY`0%;TS8=x|($x8d-fk#s-z`<O+mENa^FzMC$K<t5l#Wyf
zjLQNfZ1JO_A;IfC*@8240yV|z%H2A)1Wpa!8zaY+LhG0dg+@K&B!{=lW9B3>9m~c9
zN)oD}Q|fyg37vj`tg1H-X!B#5{5_Q67(u|*pS3){dL}2pWRlLZr=wHohLkC(ej#Ml
z)z9UnD(NS_TD7<2m)h3x@tbx53uC@~)=#eIO%Ef4bkT&hx``><Jmi*~47PTmTCo12
z?WC4mm$o-31$M2X`S8O%P0z$pR9sSzg+mmFhmEv|MrxiPYKp3+ETHsrX})T3w}2Y^
z8{mOYLV9X^;fAm}qVFJAR{aj5UE6GfA;g3qp3c-YMr??meF=LF=Dh#&xFqJq*Ai*z
z=Nf_wKwtuyFe<@7MY<EPzP`>nXxcp)4ZYe6`=McQyMw&V&$|JButM$@5=U43LDj$q
zFFe^FM!T}kQ{v7M^B(W^4`#tYF83(V{<%=-?|qQu4uNczNu*(T4PdKV2*N&KtpCsc
zZnKT6mPmf}GkNFpJ?sA6(ESCR*I6FW@Vzm(<Lpv&w*tG`48V&r#2U=!Du&xP?&w>)
z`u+k5EawBmS^{=L9Nz-1O|ad}0aF6(sWrp{@5TIl`nJ<@Obd|%tVR_$T(fV|m*%o<
zZ@s=X$6a8>2u*lF1#He<0grm@m5@w|LtOib*)asQ90I1Y0t5b3`T51~1rrx?aX&4q
zny>-Od>}kD85IO%M4psRaS7NX6xz#m@Sr2twC~b!rf$yq7}*XnXT`vHA6Tz0dasj-
z?L>Kmx&!>6xwwbE3%#*B7Z!H=ggHFVtXlZ<<i6|++qRtE5@~*Ed+sGE+-)7Oar<2r
zmc*q1Ge*tsDKmK6wyrx{6}JCrTLEkg1MW!_%Nz1po9t$O&+W{gy~Gq>xC6cM$9aM8
z=`^mBRwXCwtDJ#LArM}}!uqh$Aun&6lb2Ul%^jVy1Ws;!AkTEv_2{qqR_$)!9!UN+
P1|aZs^>bP0l+XkKMwAPo

literal 0
HcmV?d00001

diff --git a/docs/FortiGate_traffic.png b/docs/FortiGate_traffic.png
new file mode 100644
index 0000000000000000000000000000000000000000..5bf29712378fa3940a5d26e2215401a08afe382f
GIT binary patch
literal 155360
zcma&O1yoag{6DUu@F)lfN|z!qsUavGQld11gmiZd#%K^JX`~yG4(T2#!pI?=V@M5<
zQ4<Diz;8a^JpcdqoafoOXXozT`@Wxi_v^h#O?9QacNp$myLRpF>sJbIu3aO>Ub{xr
z@)t4T$|kb>*|lre{q5!DHDAlivuV1!+Sof;U%LkQWNBu`{hAjrU~X<^HZaQb<c_=7
zn~xu3-k5duc8_-VvVAw}W6Mo9GFqXdT<LvJ?GNqm{_6|y*M|{h4Blt5xY7TTMz}h|
zU6(_=<v94dm$Cy$kcfz#Bq1mJO?Eb^73$i&_~0!?ju$6nY=+J4h1b4IU$=_Bf1UX+
zE9CXs$%nfXY!IsS(eF2Osj1e<tW>Ve-*`>gMEo&_+}!Z}+#r4AlNU`S1N<KuyWdat
zD)uaOznT5?9{QTNRjf!r;zfR6QYI|}nL7#Puz<HfivU0%U5HLVUvNuMG__DS`Tc!y
z6s-=8b+K(SK=g*Z@Y^0SndZ+8j~ibp^#}nCG?aP<x_?|NB)@M<Ss+6atY&*(BA#;C
zbfDX;Y^1w;DTGobv%kA0fPyIG`;*Z0AxUE5Ku6+mXVe|4XsVy&w)lRzkEYo+PB+al
zqE7{CmT^~C^$bKrxW~ldUDQ`sR~=hdS6$J;Cq!$zFUYSw_Of4zaipRktV6E7jy_ml
zO;y~|)tTSi%GJV}-`m-Zuuj*mNqUPDPMxj6=4{^1PA(qe-cpbLenOmZ{^v6A5!>I7
zfE}eC>8ok7$-BB+vpwg3#xL+l`VJc#o20vyjrbddm;Xsl_$Bqo4h(h^2Lipky!gF@
z_+8y?fltN6#DD^VKtVx1!V`QRJ}zK$Z$1|f_WyXvf4xV++QZV_-VJQ;>caNtz2+9K
zo?xj*kN!0D-=F{Jr?t2J|Fq=d@t?yY3=sI|4)7_z0Pw%xO(2#0b5&f^-rL$qU%}ql
z+Qoy=hV)YrQ6b5{3I2b#{-??RMQZRrq+-tn|2O6Ty7QlulE6PB_+KOXkLmjRDq+5)
z???jwd+w$0tOKlHU%U3=+G_<_9q;SAIVA6Op3jC;ba*AlmA)^%f3Gj<k^Viu{bSl=
zY8@vtBCQ^Ni{52Fpg!QvBfx~h{X)GWY*Tj~4mFzi(2rBd!%N>PSfp*KwRQ0IQQ>m-
z<K`a&PuJ?K>odB%TXm}64I++|Z#;hSFAmN3f8FPQ0W#Nl_5S9+IT9&9KEc+FUUtmU
zbUtP|{rInlUYX%2Ylfr%Cxr=TT?uCq;s1{6^9w3K)c&pkB3Eno0l$udTOMn%?{w4|
zCy&f(J^KJ#J@dmfIwdN$>;G`f1>TI3%MT?ItFI#+oOs~)n8y*P82&Kn+U<mYaXjX%
zIm_}3dyKMEXBp0*dyw~Uh!VO_I5eMec>|8$xXup?GjzwqkUe=@uCq`J7c?ZA{c4;x
z927~#QD|2?sx^2VDiYV-=K1Tf<7BEN_uIDQ`~2+&BEOgp|IHfKXj2a)y>#B)?;7q7
zmKpfkyp-K!VSjeCarEmW(rUiWIx!>T2^8Iw^~`ZW!Db}=Ni5?&@Bz<ix+a6#3IZ#g
z!0@~rRv9mT^y-OWmD8>?P$q$dl$Jj+{4V2qA0s01U(Aq`?G2wdd(R!_G`W+j6Phe2
z?7ted)-_0MD`Y&gPpmX*RVJ4{Ws5dj_`Ut6(Cyxt{g$Rdhi@#eevKxBa4C?KmM`&b
zh2C&RNgijBN?Pi5BI3ahiljwG^K}!Qh}Ul_y${hb2VJBrOW7HcK2cU9BMHT7nFHs?
zzc!%zxZx*gjkq--M>x|NZoi99`;(meOor`1nkhCZg-2KU)1xr!{SGYTkq^f|Z4<&i
z0<7GOGMfC^wx@YM$1Wmbbti6=EF<XhOi3EQWtkyqUH;5*Mkk6!t%{b{u&uDtB<miP
zH9D2oz#{n#W1;TX%#*-GE#2u#19_X#Ty~tW!{Z1h_ZqTuP))WMTuclk1PivYs%(aR
zXp(8ok^163AN8QlaJu|<@7y@cV@qM*5xO(Xn2hyOi_9)Ecr<Ic#=Q5dyX!>Z;G1G6
z`gyB3^!M5_>AcEHwf?}Q?4_z4UgM@IZcWCiY9NP7s=(Qtlal=R(|=yEZhkek)^NDI
zc7-lq#VZD3JZ*&&hGhdccIUwm<A(NYs00OawHLb~C?ql%lOeQ@3_=Y~1gcnvXesEH
z>-PX|U<a`Wq~+bwz;-s8#z!w(qu5o`cn!FzIaQNS(2IiuS_P}8IwDFwx@AUv=RB?u
zW0$2Ct*8e)G)cXz|3)fFkOvP8b$m!D%zW<fYF^NKqnjv;Ysp-na<!FjRkKCYJXmf_
zBo>QA`ggg7CIhsLlvB7l9!e*1YMgX@545$mg#}_r{snV)$H{(no3gvajCDb5>6Wm#
z&8*Vp#1@|9^$frD)~7PR&{`UsKz%k->@P0UjQxH-!=@3jC6227po9FDt_M7N$_VjB
z>;9OGi58G$)}=rm9~l~m(I7D2hAU>YH<J2lnWN?Dr+*%DO+6*xnfr)neON_;lOS@z
zu*o6ED$|k?(@PNMTAM(VT-GnER!&1BF^hdPC_9pd0icc6sRF2;=#f?O>wlEoW+j}I
zJ}48}FQ4N}cwd2d{sKjQ<BH1qkU-NP{4YeY8EG){o7QHIbG+ie&?ql%K*_IjV<9>1
zHp>6pwf8q6ZZ~xH&@1!<TmMEN?~30P=E2sfMUkS#%l=&hugpju6J#-b{!M9u)}FPk
z%C?}j+q^?PH@miS3V;2yJA~sp&y36CdVl!AF{7|@<Z9oM0e9c0f0TUPK^oU~BrBGL
z%B2{6b#<HW!{Jn3UC*_+bqhZ_jSMX@-21I^!%&0GG3h@1$)+JNn(Ci5teFHAzzVXp
zvAZNBar}9Ect|*k(rHEL${BsqVWD_uusGIW@u?44=1qm6<nL8dsq(3}{z3b(1v6*A
z*V;6P=Dyu?mi{!kg>hp+Z3g(&EZxyAbo-fIAl)oS-0{y+<L~Ks{{rrHEF9zkv_+Y?
zc$&n8{5IbJ+?m8`<o)v||Jxjq4o-I;Gf=MtC-CZ{z(H`~^9OgnAygubpsp@&&B3?9
zum9B+drbL=vSca5Vt<*aS^ep(<;cw5IjLd_<X`oo#*rFOnUt48;oFK&$Y1O8`==TF
zTXW1!-~NtX;%V^AI(dXKg1Y2bRSqW%rSSCOD-G&(XR3^OIFwV9V;M!h?^ftkIR!yc
zP_*t_-Aer@54e+?PZAm-gdO{i17<wJ9`x@_2z3QE_13f;3JL6+!)**+MbKyH*%Q5{
z7%QvFv<TK+&c5geN!Mk_Qi+eTiMFQR)7*Q?sQ`0D#Nx5;6RU<eZxdI7THndqAEJ;C
zAHtdjKCbS%$i*L`6rN~(Y0-JE+zrpEs&~=uGgtEOw4dZG_&t)G$l=jam=%ssOmaDu
zNa`9HQ4OAGZFv$@6!S)0hHO3MiMF_mg4Roxzj#e+<+zi9td24>)uzC#y1GK}6U@DF
zXR9BV5BT1F$M-$&TLgUn-M1-{hcA~n<KPMqG(>smmF>6TotPUxtQnT@C`0e{jW(&8
z%d!#`uGagGGCZ+a82J_!{i@btu?an*qJQ<)nEY^j!_6?2mCw%)#)UX)m%<F&rl$#R
z;#5%BAbMT#LzPWb*HE<;Xr(?UzB}k?xN39kL<2@8E){2rpq)B_HS(of4h{)=@NFVG
zoiYTk9;BkF$T5#taB(JGtJ(^TR09udq;@2Bv_CykY!W9;92`_>Gm_|<zPAv0bN3Y{
z;o&a7h88*GL|P*GGQs$hqqxy5LQ20wSpJf)F`}U=!w<K7U>cM}P(aFut9?1z^hX%C
zGA(E9O5yJnA1W^P&2hZ<c4KqlVovj5B&;z-qwDnDLX-3mcct{{x`!ApMtdV`pCl92
zJk*JMmN2=HcR$Msh7ne3uDjdE8l;{uIa*J`5-4ZlmmkmMH=-rz{+o_5FY|dht_S_B
zt3)-6A9<JVG08J$swZmoHe<C>69sXiylFTqcb1?XG5XUr%B-&RXBFDeRR7=GX-Ahz
zc|+p$lXd179oGFL21iTL)q|&9oI|psS@ZZapVR82`Lv6|PlNS|F9*XSi)l@K<PRov
zn$?{drH{_F*K9V1-cHo?EYDmGS9kHLr1C!ZL1@;++MJ=WGKtllXC^1h6}ibkJ#`vB
zlSjbLqhg)vPN+_~zU+_gu9F$RrWl>FH?JWgP|<?#O2e|D;Ov5d!CMnccnR0ecFZMA
zaH^0n@ew<)*ZccHTcG(06R84C?zCY90xJb@ju#Wx-Mfeohd+cb#A2>gk!eM**DiJo
zOCi*XagZcyIFcDZDM0`1luPX3eX($QNp65_=jpj&!ADk$WUO@&<ZCAXsnKj+;HBb8
zsUcUIao`f03=RJ~-V`;z6xzwgMIu4Vey6kJW-WKS;gI#}$RL$GlxgbqknmUaoH!MO
zddi1dfg2o5=##Hl={mH5=Va=+jp5;8@2lSuQ!WZWlU|uT!hJ21=p4Z(5@qBc)$<)8
z;)CkW_n^bW`_69z<*eD2+rek!ffM$Ajbuv&%blk?S%S{}s`hnPoiER{MXPcs&L$!6
z$Z2S|J8uVq+vLzMUp2WH`ilgqpBm=+pZn1NUegf7&wg?TSM+iyL(A8)dC|UP0`@~X
z)HAMi8olR%I!)(Z$!!J04)?>ayyR`?Yd{5N0{i{6+X}j~UNQFgr?;&(IV!C@4I*yM
zYn^uIxXSs1#ilO&N}Wyx<-6oB{05B6Pm`aoz5nnow^=a|t-2wWjP$8hY3_QZ15DhY
zUEOH5^lgtqxn>>Cpltl#mA$!D)`Z&=MEs`K$O0XH;ZU*adWq|PZ4`9Rfx5ES|CDQr
zvycimh%#No*7nFp%wt*GiMGK-iJ!K70Me01k3Pj*ElA%-wfA2al-mbw7fNYm%m!4k
z!rB|g2G?H{y9D9gnl`-x-Cmvs2EFU>eZK9xe*vjI*%iB*^LdYM{4w6h*A>TPjU=l5
z>mo*b!TD~T^JbdQCr0PMRG+Ruj`HDFc_hS3YvMtln)p*Za5C3)Lo5dzj#r3`XR(Y}
zUnlH>jWFa%8@3pHE}B!7QlYDYOfwZiZ`uiYK}(XK<kX8@C*^Q~)<ZLXxl)UyMN?y?
z@xMuh(j>Z_7Rq=wMkVd+a%s%Z+~wBVG~2*Thz>{8p?Y52?UY!&86AV|mza*r6I`8n
zFR=tyuDU<<+2LZW0w!U>6@Xrd?WEX9gVZ--2PQ3JTuMFC{MOg0<5ix(HT;xexgk3H
zw7HXC&ojtvna!3&unj~@1>X?hMPo<=)t=1du8IUDT-hTF$=nQ1!~mf$)kV=pVwi>#
zNZPVR!AjY?#;CV;Rv8FEk<0^M8O#TxfD1L72XC8NP~M+{A5j#C&d=-30`iu9_vI^g
zgWphs5cGGG-wCAGcn}*U(gQU1+AcPY)aBg$Nj$F3^lG%Jf+AQKCe%;A>bJh}U7G9z
ztZ~j+Y9n!5LT9ECJVk|CC+equbtCD|4T&k3`E7Foqh5&pg;B^up`~^Y{nxi@KlDhf
z3R$e%WogXao8CUZO473IpSRS7;V&b2O*`LIU3KxqSZr|cpwjNKTW^%VtsBDky!aFf
zMnER7)*D5T^$@Mqf{oBsCdIhBKX4>N713~+;rhX|+loc5pVvnW?xj0FNcM(kq#4E>
zJ!?K9wPr1L`*|A2b>DVWY@PV18y)K<T?6{7HS&=X)S$*K|7+S-a(3%s5Obkkyq^=w
zq!(aCogsp}U>h$;@38quQZ^*XS$cIgTgk8a5{I#_e%G<E*S718n0D`N)HBSJkGOCc
z`k8W6I{$X}zH2`IP0vkN<6L4^29-*OiNi%*f653=fBb<b^j=CluvepEY@u00$BSz4
z@Z#Ks@Qr{XJ7wm!Tf&AklKp4hjlIjN_<?fA2<$J|<Q00!4hq<Sg`urlDpEIgLDSYm
zkin%jpHh7HvTdsRA}M{RtfatTWM{tjp@pCe-n6H45KDc|oJhTsCAWR2kx@J*fiX{U
z?Sf%m`1iSERb8~@ip*OmLzG8pP6V$M@ry1nG9-RTwVn=;aXW=pX8B=Pep|uCRvp7?
zfwf+hzLxTRp!sDJuPA9sZ$b`hXVt#1>IXM@^X=1><wKC?JVK&boOdqbG<0>>YNh;a
z%e@pMr6cU`6B!tBj!jt9IefCU;p2!I25PL-*QeN~p~Q1)X045oN@!riu4ac@opE5R
zcWZ?U?6<e)<%h77j<u64iJ`20f4h#K%+&jWm`%Qf$fV+%xM<C+m2bbRBX_>K?q7u?
zHM2e=PR&=aEr&tMSg1=HZm(1R1ljy4bfV~@1*cOde|URC@l_mLp0*eoj&HFYta?|K
zN*(3#D)$71<YJHypI}KuFNO`Z?|B4ZKSr=LpN?H1ABt6(h<deMfKD!_HK4B5LAYIN
z&<VosD&Mb5W^^Ih8X3g01+j%c`f2*|d%In$c#c~s;&EN{ZM7}iVLy@n`=Zb99ID#L
z9R}k{opN?d_bwU)flM9Qj$Z`#>yLvZkkZ<7+vg9;hx7d@1|jAxjstn*ro*q3`MIcP
z6<qucE?rT25ntD6mHl4DB{e^vE!_~iA6O0!#fR?ti$$)kO_ajs;L_k}qYF2GY`$nK
zD!<)r4Da}89v+K45r+Z-nAUer&#>tsuAr6c?#fW=k>Z#-^#%lB;=Gi7w<9;C&ptqn
zao<(sx7j2~48)ReRA$a?b$tuOyc9aIfj`$vqmArOfPc*sz7ole7<&0J|AeG#@JK0M
zC|@AVVt-FUT;*%#^A)Ll(6&3d+)q0RgiGk=!yHMkyG6#so-T;z$)<Z5oyCboh_&S+
zW}kP@1kxCe3MO;exv<$CCuutua!@ZUf8ZX=tfqJXloF-sb7Z}P`~(;JwkP%&*T1;e
zP%&^Qh{TPPOiG7S-eFVC)LRS?sdxBwU2L<Iebk};r@LxJ_RG(x0Ix;j8$2z(zkNrT
zpl4~u=G(cr$d;?+s-uf;)?2U}`Q~LUXA=IMS<DyMUz=OwuQ%zmcikk84&<%oj~=`{
zoYx~5X-|%^%PI>wZk3Yf>p~Eb_2jZi>yZ|j^{FI{WYoxEu_p2I(&4-47sJ<^Z&P#i
z9T<VOZ=C?{R8j@YMhH6WirTwA`>DV2V<VOEt5m16=oTy=B6zT#6xVzff>75k8LNSP
z{Wk7S4MW7#(J*X1(JnFQTLwADH(l;Sq0w(meu~|H8chRCmE+8f9*N`G-RkwCs~x2w
z-tJyc5rSnhI|J73K7Rfk5=q6%M*^Av#XW-cvClsMIsoeJ$l8{C3&ebd<#T=aI1EkQ
zmPk0AYqd8J6f(6wy1kVq*&;!~k_$M4Nzn(wPz}ySL~M2Yp*k<!t_7b{?zX5S{NOX<
zbGuoiYsIL9sJwkVK@N&_qMy3MGfEcV{4`n^BE$Ai`v94TAvw=6o4|%UOT)m<7l8s%
zu$}4h4DaR|33HYfta|HFoBEqcH`%5AttBn)Oj^FK5msbzqn&hP>=)KMf#A@&>0rfc
zb86zdX~>ap!9x??T>%>jA%+7atU)$j{-5`<o$pToyH1+$&YY0*PJEk@-|>bZWXT(P
z?in_3?(4reGtq89?YEDjotVSTcMALbnsrU6;>^3q8TEcIiN-8N+jt(koNS2#$oD(0
z9##OZF5+eQ*jxNAi)IV6=_$>zI~%llu3jw8q|&3A!g0|WC5CP9OzJmB8j}>~@=F(E
z0sh_e74N!N!yT)s{JD<n99<GRu$8tuJueHU_L;Ut&G}G^mojvhvFOLTV@iI*e4BID
z>$T*hOgTMpGh^YX%;0r4p%=V1Rem#z@>MPCHze{`XSI3B#y3cK{NHT&b?p;Bj-}8o
z-9Dj*mT6C8spDN4VU(nfcv1FI3aOK1K2th?seg|cXamOTB=K@Cr(uYUC5_*ZGc7|<
z4_VnXdG>r03$iIWrI=C4n)&L4I2<M>X4f-Xe5xmv<8;o7C^5SiZrTOD3KOSmME9A|
zR+J&Ika47%&;_}Ee*Cvkt{w9f<&<6WWe%0J{>BJ8(X(v_=YHn0b+fXty{s=&q}`Y`
zCI>@sh8L2qe|$~<a4W_|PrFYn86rje-iZtxFIrh7^<ge-!&Dxf?xHsi{B=TEA$rj!
z^kY|H%2N}2Yd~d6Z1&{K#Sc$<pI8vdf=>)qZlk8bK&<>%Se%Dc{X3mmuWY)N_}AS%
z6vL?1z+at=CvAZb_rdyY&OL+o*_C1&Eyle}AmctD`)V7AH_rcu$hLba4y)Pmf-Uf@
zHaIf~Ul#>>T^fW%gbvlm#U~jj4Amn~9tCc%&%%vzk6RR*wHSq+Vi;BI!b|f4gRaAU
zonpew+thv>%gt76Ud0K^{;^bj2W0tfLInka*Ev-L)D`>|zxZe`x~A~xaaMKx)p+|=
zv=BksS&||0b~+`VE&uQrP@lSZ(h0meZoWXbP+8jelfNh#?i)3}m&$_O39NA-2$03n
zTcosojTOFRkzoSja2X2LhuS5hHT&+f8GTuz;;*r^1^xKk3R9PvLQvJytBjJSct+RC
zr@Ub3&ctq2n{nSG=}~%*dkX}u3BxyMDk`Msd7obTp;zB#(|rIX@?+Y@?sj<n0!7D>
z?lop>c2(lERX;nxSp$z0tDdd{yJG9sz}es*=->!6oigglk+H|j#S@yE^L>!9xK~}C
zCdj@=qH+(45NaQr6-M9Mye79Mk7)V~Ki?0blixWd`0aulP@;vW2-+9p(TL5BQ7#55
zdgeU98cLo*`lF9I4f|u?coh*KI0J@@bMeb(I#^_FsAxluA3Nq`G>>~4pm26VGN}$D
zG#ed^8>-D?`QYs%I`<^?1<y7xl6hxMZr}F-kIumJa0P$)HB}jA(Xz*H7pXFv$DQvl
zum&xC@DaWU%!K>N4%3XT_5aLo6_rstWp>Cr7F8Zg0`GZuWYGFO-7u=!gL<0MXR?wu
zc9fmBV8*0-M~pk|XfyU2Q7ks&@~_LZ3f@%-#$SRLerHS!WS@UHyBU*arfK7LXEBKa
z>AHW+#Jh=QOcxXNcOg}#r$ZA%-o>%ZqV1R0CVZ48JwWM78gIR75|q>4jtU^2CbHOG
zO4-**1#B%|hOF1flM_dYQWwR<GSebwwjo3xE_?=};Sz>>d*ed0bHw|F;^;O>%Yrx-
zT-cEcmjV{yEB%wR-oCI|>;XBK^cSh%IQg-B+06#}`odu;tid63HT31n_zS7o^g>%K
zba(L6C7zoGd}<k~;K?<OyET+A+-7_?)(|XF40|W~^-Z&-ch@WHM^CV9H<ip7zDA82
z0Zu+!tHVBDe|gJ(xw0%L;rqSJAdOrLz4<)Q&Y<q&JI@(B=v2upqk+0Vp{SFd%^){k
z>fQSK`t`($sx-`)*kn+9?^XYI0o~-)TQ`7UJISu|O$k3$w&d%s9k~3Q-R~kK`N_Dz
z6^c#3B;+J)KS~97pQ-OJ>co)!XhJ$es{bz{C#S1hj(}TQ8ROn7MHJMY@)1`S$rQA6
zw3cKJ0)N4VdkK*nbSU???x&0y8DbTOpLv77Js8t6bJQ8TJ#6}XJm`m+AD$EPij}~V
zM+a*GG42}_25n#iUXx3TW{-P702fo1&|zfotGd(A9tXXllFYU(ua)9hMezMJ>pyLd
zR$7<i^*P3&to{~UVdEgPA7UOeOi)7#iIbNZ;jpjwadk+qiJ#>v)_KIo8==~SP>7_A
z>*u9R2To1_P)>}{>Izi0?T4FePqgdXZ(9u!N2GfM`)a8>N0|L(ERAY9mtbiDA%c>k
zK6{bp`Qd?>6sylfyV;(3JV4RlTFLCWv@<7P@$Dl9qC0?GqYRm<(ec(H{!_DvYYQnS
zT+CcmheQ>Yanchm)8TLEsB=V#>7Y8xBFddYYKx#&t>2Z%nq}@2%7?1yEKbB=+FY+x
z<M-E~1#yzRdV%@5KLKw5qFTB=%8UTyY}IfL@}9GKTy<Da;d8Pb`s7Z5^lsSa&CSLA
zCLicmg4G=&j$db|NY82RwQ9&P>bdsARfMuj$N%&9{;D4pz^=K5w@DkYhcb)P`aC1U
z&vluD#V+4uBxE<))ZHZdwD8<9Q`RK445s+O{H*Tj!Hg$KR9q?vvmNdZxY#y(fxjyE
zOWf8`5;v0c0e7~b^cIgNj;W}VT}@hk_w$T1>5`E{@-;yHED{WDaP?|O6J4C&5?M&*
zHy+~e?uMU9?W_ZSUev6xB%O}Q9G4ou3U>eS`umbKyF^tki}Oy$7)wADzfArmkHaFg
zt85JbgX>fojRT6B$jUV-K9Q5j`JJ>FN?#pi8KLKj)eJz}A1Za+1zg4hlGOD|5$~O3
z;0tP{BWrf<>E<>MaA7Ey`3F^t(>kCTd)NnhsnqTd+4C=JDHJDWU%qA*%!kM~R{+M^
zq^3McNNe!of8Bz*{CdV3vyVRtg|PJJEWbzE(Sn15-9Ho5me9guW8}jz)})nX3R3LC
zR$C0JE${)4?lXSgQIez+{dUhbEfZv*o|nYTr2VWvWh#F}TM&%y#VqOR<OT^O(4a41
z;MC>Ici12Rup!oU<Y>z`*47!ZP-;1PsuJ%kXT7`+q>7F8%px=fC#a~Z#iz+WzojlE
z{u+8n6ZTsq={27)D|^tlTG)V;l<y#wP<Zd78BIhFG{lA4C<ETwj|~yc>EG9o4`^m_
z4Lvn`19K%xC|+A=63$ba8}^_0lE>W4@}m%B)aDM;*p*WWT8h3UNa&$01=z0?b7Nnq
z&3M}KRl~SAT#4DI#kl(fc6!?e^vx|xBrqsgQBPdjH`^_fp8XeuCEGLGbHNiTJ_?{e
z79HYye|)ji@aw6}CWl)C{rxFA8B_P3R*>c6-(r8Os)z+!8UBZ2ZMok%_B0M7Z{`WD
zZ#Ar0QN_5LeHM)v_ld&Z7&X9_0M;)3j6Qu)bWaJ<MBWX1a=M~#&ubEh&u7tnjq3W9
zU%At?(Gf2_cr5*wh`4mRt@82Sd*A&oFLt#4)CU;=J2gEsYYXO=#Ga?m%tnOICtS``
zMEehG6V$DKpSFvhGSk2=kLCFi*!1KnHs=(?EG%BgP#?BqUmAFZ7TV;H+m>7Kr*>aU
z>jl`uM2*sHWArXM7gaC&8$0s7q`r@`vaU)$gNJqqZNnGs!qa6&q&OqvJ;e8K<$F;|
z(MBAG=UPsku`nq8G}b_+<?{U4pu`YtnehN?yFjw`W2kDmG`T0$@lD1jaM2AbpUto|
zw0<uTqn{AGHaeWl&#n*naN09g-4**xxh!P&wjY1>vFA*-Sd+{|UfdDl%$+Ls7r4#;
z>hvotp@wv{Z@c{mns`$MEK^EfEb&q<8xP{7A>}h}T7uISm<CkN2Dl{-D?G6*8o?(a
zXTp}D52x}XB(ar~tNp@sT&MOFDX4`;hm9Rftv%N>^0Ab^JPL3w>uEABJuSww(VDq7
zHZI8#tXnoTK((5-g!(a2j@k5^=zJHU{00n+F~5!a_(HBkrMV&>6isl_^?9Ck1%q6<
zsY{krgh`@blc>r`+*0BGnUDH0W9ol7Kap=~EAjLF0}uV$FrMySGsOW6u!G-vD4E7i
zo+mSn{7P&|R82<rw%o7i58<!LcdyN5kfm1&B}ogMIxnbAeoU?7Vfif3&3Z(nWML5|
z!3jLpiicOH)+0M{115eh8FYP*pPA?<z~H-+X0G%&n77zMd$wAx_%!*Y%o(1?r_q(w
zZ;D;la^I4;NB{O&D1G{sy$LvqhR;dQuIZ_A@}LduVXmdXts-V(fw{<t{o4FV1^JNa
zi>|EcTc<Y6ap2#2uiCs%_56w4Mi&}qfV<j#N?vUT1#4s?+XKP8NVcGZQCT`KE4oh0
z(6u0ek3FPj19SeuQEaw9@>xBmXl@w{CKlZUs+5WLcJ14YE<A7YH#>$Yc!chtOplWS
zMw=D=Me^|z?o_Ry!{chAQS3=o*QPR(d)BoEE;!_ETeCpQ!(bwy%mfHAuc@1D>-{_k
zaMTp89fGC!Bx{e7T>c0(ySBpURmn-W=EoB~%5C#(g+AOXJi|>LW_B$pBf~?7f1xBn
z)}Wi*8j$-m`1g@VhvkqFcnSX5rF(^FZ$678a`6Mj{XubQJK*@4g_&^B^bOh~N#h<S
z7zgag2BWl9>&6ZYP<%yxe|4b1*2KGy+d|$2Y$fk$yH#Vldy{tQQAfUSlx;%wFvV`p
z_*q<>NHPSqZ2Y%k=&c?T(8>mdQj#q&w~QYTOY2-Q%@#K{`fS|AjA{$LhpmWu=>w3(
zl5(G)o<l#+OyCQC*_Uec98z_Td(vA!c3AYQ5j*b{u@gB!ktMfuummW#EklxG4NG$<
zig;3(2I40~S_!MeY<p$!<tWC|Q~>lb&B+!F&E$rI>_yO}EJS8X9K=nUa7#rdPR-*u
z$NSe2E^O+7P=YTKUEgWZEKRn<rdnRdP(D0UaITalFFA930}_}Gs{Z9?r+UL{Fs5qQ
zjj`NRyfQ(x{bP?+CWvXrqcooM41-=hLi}!SGwJT&m#I<F)jee5jLKq4GrZ(`wIL>h
zakS+n2zV?Sqi@7Y%b*fEgiob1n+@-ejXg9H`hBs|Opx+f*TO!zzz%YMc7?3i`L+jr
zuI|0#tXgSq4!9IBXfiDb7er<=tj5QVODoz_%b_*)E}va?uyHvX_A{<jA(`bao^VQa
zlOZkoEVu!R;I?PIKUzelC|=qZfT88E1aWv@6ipJNIMO^mwaTz0l@P-f_QhAOQ8RFb
ziYi6cBdct(p5|^=`h@Mt2P_%b)KN$<3LLlxMDNe08XsR)ow4QQpNOR}8EYH{=Hs-P
zZB^}d8rBSzhEsvfYbMz(HwrNKArImFqpwN=<4LEr2gZq&8%RcOt1^#%kw{L_?EKZl
zu}<uMar#0wZ3pr5B3?ShbJ?#s&hU%hACJOzQ}GDf0>;Rt`K)IkPb^$&Fw9;khaiFe
zV_c4=)ZL8^xL3>JV(O1{zA3$(^9K%j^4k-jJFSC`3k08vr;vBt*|n58gjY(MELP|z
zT%>Fvm6CN-vpE7NjZs*_J^40uLA#5G5McxT<<RN5(el!E1%$CH^~C3yw#<6ms+r_`
zYnovfs5(53ZHxW3bZv8il#$Jww(mhd5c58a`X;$}O@@!_;C=sv+e42>CYNocQON^l
zxkYjF92cL(63-YgcaM|eTp7VT!`E%4sz`m`q!Qddn2TkY3@r+!NU%p_x|~*|t-$n?
z*3Wgkev8%z8+3=MT@(HEWL(lZS+E$@Nr}{i=A$0UTQbU^Pnk1uN1k`AM<t!7@JGKs
z^GAHFucFPD<a6k!sDZUF`Sz;Ezm~I~wT#q6L>>iRpI_L5yp0HJ1sV&p^`c_@5GUXG
zQ|1Ld8s<6fs0b#d4K66SAH2DBSCj!zS@>QMRTmA97lVz1(@eap5RDNxO7ePtlDKZ{
zz6ue%2K|zde|E1~|M8sx3NWw!?GOZK>5AR6ct?*!$;0266F)D_by@S9eI&Z&KlNql
z>_YN{kzadjUtf@1*m=>}i=~Ug@?1aLV@F$Ub6n!p|D@Uq8hE(%5kBwdIox4VQoB*q
zOwAFpRGdMs=mj;nV5U1A;GL=95QD$cJ=PW{i#Ub$>e+&mkKd;^i=Z$m<Bj>w>U6kS
z5`y{Eta)ws6I1$kSXDWkxf)Yoek8(WG8acKGB-{Xc00~GmWq{YWKh;0oQ-(|8|*!N
ze@ZE#d#C;Ae9=8+z9aPY2WT6%0eSoTW1%<(c}pSNy)KB#ftm=o1}dPGjz}QnDTS20
zAa%-L`8Ru4?P7ks$OrX;;yQ2l8F+;I$rx*XvEUIRgP7;K=pxOUi}s1f-VDB8CqC(v
zHC7b$u2r`Bq1hw(`&3)kK4yAQ^s-`&&uhU|@DX}zOEb4d`vJ;8PZ+klEm(c_f-~-M
zz)7E8QEG-{i$TgmNf;==GN$e>^@bh3fMGZD7()sp@W)lJjmWR+rk`jF-8U__9l1Q<
zORb!FBy+O&#68kOV%%>iA<ce-PAl7e$I;J=mXmA{lQLuvx=M?}wP3I?YmyR9f??a+
z`WmbVeGfS;nq96VtMMj6E0>>$>Uhby!=GN<(p`}VUl?sa!>sL?5psKnN)pAtp5*>I
z3W=908S-LgMHI_bx#a!idK(ZSlV=Wqm-2`P))=+A3ro4J#h3<WGglp8ax<o0Tt(v{
z(X#lOA9*HraW*Z3yPS#{-(OVAUUYaIKM@s|ot@OoTaAcC(j9EIF%d#hdw8XoZ%d6p
zQ7R%>WowG62m;cKc=*2V<9QhV_aY%f_M@aYvA(OUEApH(M>?Q-ZC8en6{*2B#?FIw
zRZET49@yrb{Luf>A+}5vr0+Ao4-E!INrkdHz>M0Lo=>q@$VQraWgA{G?2zJ7cG}w0
z)-AIelxzJ8$KTSbe?bXOhYR(^j3<4GTIfz1xk@u%LVTDy(TF|qR@c(7`WH9q`H248
zZ6;>T?ffzcX_b|22VYu1E{I096cm00m?rIopdYHQ+Rqoh0|n!26-qU3$8v!4qWdxy
zwrW%1z|f+_P)&l9-T=+=`h;WkUE)^;QzxA2l0ibu6ThU2F`G4)zx6n#{b-m>h(F03
zps*$Ros2Hvtj}km=aaLewhTr=?_CQlNy^k|t#B{n{iu&a#H9(Mi9AgKUCt=KBf5qt
zaW9I3z?L2A{o1n)RH=4=zrE$-soivRKGw(8$42CNV-{WYK%rkYnHZvX-07m~9Sdqt
zA8_hy7PNa2OmQAJj7)x~;jFgkG+F}y7e|*Ou~}=15oF9RNZ5s&aqc&Dj}t^I^3soK
zD7~r#Zd_FXiU?$Z-f|1&R*yV_MbPF2sT&1Fo&SQqZm<)cCU_r)0-VJ0R-98aJsqY<
z`QvDxPk1T*oc3#8#+y&`R#1xf>PyxB3^q&iV#1Ri{fT9EGy|tm)zsHW(zy%RN3;cm
zUum}aw?;0lKS$>uRZixnc}e{((>=xCH1a)^Ru6Y9kVEJ10Ve{0KhXMiG3eE`Dskz2
z(EW2|nXVPRu?Ji2-S%2#=gJL)^gqAJ<@2|!UNhV108}k9FevKG^!sfk9m^8>PLh}c
zUC_wmiIUi?kQ`yla500u2laD>3cL4(Q8TT#2gldMQC#!Sr<%4}MNhGqM_SPQVTZt&
zPn1n8widMuv&i4g9_R=rf41!J831cucv9^T=jiPZYnu-dMum)vFXGfCTFx<n`p@z)
zk~#Q0$0=<lp-1<v%Lu94(K4N3G%B9bHc0h@Uk*eHPBxtb*r!cEXK6w+ot9P?o(>#{
zAy2!=dqCB!x(C=laBT!q?;^s=i!sG|wZW59#>&Z<3?hx(yv5J2WkdA@&Yz<AN}XHA
z+vWbl)@<20ANyfzTezx*Z+yfi;G2=l2zk2^)&^w`Y1>wQkY{w=xpN#8mspj+<cuo$
zS-U)D!^q*-WbiPNVCU`+2m>h>T07!1A<VV`6y^^lm`foA`||E`E)7ei*tp*HvdOy9
zYXZ0&3h5@3(I|%D+de;+L^GuIY)h&;S&cbYXspGosy7r`XE(&wxpcf5B<g*24ErW>
zk^W%+)f?)QH<q-*b6%&_rmn4@%>rEfv4mXUP?BjN)!F13A@BWV3QO5r3Q|uYHzt=e
zmwow2Y;ec^kxOTXx>9nJ$bA&RIT2DY8P?z^5@>WNp&V#0(=rPpZ<Y1Ow^6$npuc>l
zC*UEv#hBMh*mZQ-v}dDBe?I26)WUP|M074G5YlyQk_3N^CgKznJvKb}!(7bIXtZ{I
ze$!B3e)A(0QXGvGM>c-eJR^vFT=eQoT%<c|l*T}wx}Nxkm`<AfwsNXzev23se9;pm
z3mE$tu^IeqTUZ%7j!h_tb-^BEegpuz<n|hJ_;~=9ZSA3}l@}b2)KnXKr5(46jMGvQ
z7<2ezXammj!S*t*O7=;{?lqB{A|1uxrUTL$Ih*9oZC!u$!46-2r*}{66Vrn3tbYqK
ziHWYCzm*nSdzOP>QJuGmn8-~N$XQIt);yb*G|J9l%7N5O2NGo64s_i5byvyh<;2<7
zH9F;z{g*H<t@KwR$he}#rmfS^Z%X>oLf<2OYB_9=cz|r<D5jxkO~gD^Qnu-*C2tS&
z$ORfcT5MaporpI}RC69b8iv5R$O#^0@^j4^CpC7!W1&0XN78LFo-P-TL(d+stPOX&
z(gxOvmfRtA_ZMlQ$N+4+AA&9)&bkK4ooy^}LgnJ(3Xm+En5>-)mjc344@rK5*gr*{
zjtWD20$h8LAA{;@s0Jgy8I#aCpgcR=4zU*wBHqQVxIM%^z$M$z>u#)2LE-ba^d3jY
zZ(-x3@|=u|b}}v4;d*i+Y}o|mDtXZ05OFREW~zajUwW|ru{iVgRF2NJ9FymAH@~tz
zf8Zd2os_Nq1FEh5tJ&8%9B=4AVQ)NH3TpmFmdj<xXUX#c`J`jVSoT$6*ASb-7kT$D
zr_+~i@zeI5J<24=EkDW0iq(U!w~#Mv{_qd03=`H6_Efno8)>B{b9e6e>1Flp59~i`
z#P30W$Z<L>tgU5dNmx0G<R3IJ2CyblyHh7J_rafLKJ$q}pd;eHNJubU|4}1*G1rlV
z%7x;7OnVg!-&~3~5`D}SmBT;wP==6UM})1nfY(J>nOT|B!29=1^O~<DfP#(L2}pp8
z++{<K<?dp{E*^FI6~mKrs!+E7Fg*WMu@N(wKP>yDMy@U=Tj6+0N&_<OE`R){StMVS
z&>Mk9#!y1@1jc!%o{XOebgN!tat~<<J&jl*<c2}vhB;M$Ly-BY9@6wn%Z~3)oW{xG
zShUq1m6VDOc|dFA>Mk_cUyAef{bE;&`FC++!>!XU*-}*lT$T9#y$iemfo(?qFSa=x
zjK|;U8=dDEwncHyd-|o>epmBQ%<LW&A;4O&h&JSQ&Fzh}q_o}gVP$ptVKJ(?Gg1QY
zsZ4W*9;wvJdFMAcN(Ah$Zkvw7&yVD{j}U7j6Wh38=5G@}xBXfsIincST;C0_v}LQ*
zt1)hgeI!2g4thyv;~?z5arR+OI_qepFk0O%%RS8#fbJYA?IOrBh`2L9oS*4}X+v&N
ztoicK3cT5p>ceKuA_Mggvbb}^r6a$E7$Kdf8XSGZr8`woH0Il20U%ROw(l<wLdt`{
zJG;Z+{B6AZ$>sBE7pg|SPF1W#ijyQo-=aoZQc-nhRzi%9xx5LtNaTVEGc6y<;rK<_
zNeB*L|5uUP@KLYEeUuIXC9x&26p#!)I|R93fKR(}mH>K%JsJ^7%zduhB5kop2rh2S
z$7mJO&gYwPK_?eG$b%%_N(J{XZnNeOT{6?)jI=?>YDkFfySV-3i@4SPR?pcVqC(2=
zJelr60DSyRUeh43&nG9Rf(wP)JZ~AO`lkC}eR`(U8)ZppPO4PO5vh4Q(r?>VOi_1t
z!E-f}{a#6>%#(q5oZMU^ikAQ;=P%%HPTb>j@9J(vX;mYXY)g`ZzlBg3ueEC-S6c4*
zbB$yiZ4ALWB|<#5K{G%&-!w5RJJ2c4<@?zo{Kd@BTb_``q}bv)7RyN4E{gF0&4sk2
z0lsermT~lh`gxeI&j8MvrEco{6DW;|%IC<BLVoWo4CRcO{#6METX5;kL{@&5x5_Mt
zpIO&~@M2oZ$pHShJbI}FxN5Y01}JskwV?ldXIaSp{@cX>uhxsIy*K^YvQUR<2YaVZ
zSyU&VEyRDAUE}1_Em9f-4l`?v>~H?&B|^&e;;aAhD0Wlg&hzh1=oFYQByD1IElz+?
zfI{Vw93F5o)`eN`+4IT}fFy}5pS^e)e}-ritMSop#jlc5wKc|#$N<~V!$-2k47oF1
znSZwb99H$8tu$e8&Nw}}+OfpNinny+d(hTX+q*J~phR{&i(c1D!-UI`&f9P&+UH2c
zkp^4NUv76CvOOh16t})gn2P@PSE}z7Tk9JcS|%h=zTaQFC3W|f6dZsuFeq-%ausY5
z%DUny-qgR=(=2fK_4@~hCayfnB=7=j{oUoJTYYL>p{@dWJ<hI0R{w5MN9|POtyNut
z4ZU|q^|@b+Tm_?@@O|R?h1&W4XLH_cU8~HB>HulD=~UgPJb$CP#nsHp{bib;_8Di!
zn~ivMK=m)PsiXRiwb6tB6S)uJy#a!`!+D(JHY#g9C9sLi!;!Ze{=fKCC?9szOD2K)
z<+unoFQ~|~f_*)`z%XNtKdw=U&LRSthV<u(m!2~wcNsTY_PMeYJ6@;0#p=>`Y=?RJ
zi#pzs-8r@$hLZ%A<W0c2uO05D7sMssV^<n>*$ml!UanW)iuth?P&ny%#buj2W0Lu7
zStB>#@a??cnAAE>R%U3e!*}2{=aPo>)w`XHc=^tQp)8QgJy+YnGw0;&fc_`$mtwX<
zxyL60Alxg4DWu^+u!|GS$zfe1L)iE{K%^T$T`~MAf_10;W#_W@V$KH&@$*fj4<>dM
zRC}RWLjWRO{ufSmT>9=K=T9dWFVAAZ0U~AzOg|c4XJbCl+4_S6t9_40)(=w=IUi36
z=vBKR_&A7qNRx>|7*<8bfKOubexaT95^$FQfXKw3FWO;x=A^#nQOI1#9cWGa`b{-b
z?*ysg4Nd%y)iQ)Fi=WL0nXXl9W;5|PF<xMTM8K(c8ATT2-DbXO8;&&Z?nZppqDat_
zS8J`Y7r>_LN8FIK(hM{S!UaI7AF#rvZQx5mMPnYop>Ec2LfsVOZp3?Y>=2{t@PVn)
z0>w_?^uC`qaOV$z*_rvh#qMPUOA>21*@Ko_@_;i!E<k_roP{-@A7)0KVH(J2f8?M1
z+vk!)thWJ}m(@pP!(O#w`HeN`q-d(jc(_;|7ym}1ku~6IJ`FkGP*785`R$dJfPpJq
zj@F-zo_bjSRYFz9bH6xA+_wt%se2KMH2G%=C+Wq#3ZC<kq>VCr248rN?gWtTC{?f@
zEvw_)F^T(;3#_IlCV@e-K?#!h?~}#VVhRUZHt7H#1`hc4jCPKx9Xn3)s*a5AnL_6C
zd1QaRV>5|Wf6RPS?$3~KS4Fq`VDTP=Ezh5aS9UCijD#gs?uTcUx@Suo6(qBwq^qr^
zb52`o@D-`lMJA`01(!3P0uE=9+%hst8ysCnR4g=;9d`Yr(-r$HhD)imS74R@t44t`
z=fx7NO~AZ^Pwh`-UsXn7;I9sfSUIcD7rj>957LYP1nkkUYPv1sEriF>Zwzo~p4Rxu
zoIwP;VE#vmpA8-x_~EKg5-!_T1#_5As0Uj0TOn_<0HLz$Bggf+t5c5;884ie>a)Zg
z)puk3nTEw?0rZ=rrfiLl(=n~V-_}emY26t;8qQ!V`Mv0yR|Oi<e9kd%s5T4N7Kh%m
z5@#W#4UW$AkOOD7dA0MN%fQRpd^nbXU9Wdq>ga?MfSZ)n^&?&*e{ka$qI)b$7>m!U
z?+@2DhY!#>OZb?2R+{x+xCDfhvCGptiF`g}A_J`H-@-`eE3U>qgppbwCKhe_`A}QV
z0Gj#8C10r9dwoEtMIv<mV9)NimkgD>{1oNgezC0NzNmI3bm!~ez(uM=YU<L!E%26~
zD8>Al1-D)$fFmkRAgJ%_u_7vmk5R<w8T6&Zyr`udHT2Du*J#R1pNsI8_TSboB5(IC
zBfP-srFbG0e|bt}=VULsso>}_nZ<=J0z(P@+<#q+58@Ghg#E;o_f)yO5z>qbLF}ix
zZwx741<U9MiNj|E58~CKoe^mXIW$EGGmxwxQ7VVpVwm?g)hyxOsR~<XeFCEEqfeOJ
zoJiSFyGO+uk)J6I#GF&8D~8T~c(KFS^#Mj}DP7z2<;Vp7uP{`u{GiV)S_HZns%P4?
znKYmcFmf*0&*4Q%8yJV<G;wR|rv%&5?g}V=#d}qIfrdu<wakBuXRMSvV@XV^ya1Wo
z&!4mG`9le10FTwOc2Vt%jsOkgIXEFgvzGx4-ziHaY8L-0-W5)cd;144JNhBVr3n}=
z#{lJ!F!5?!azjt^w}^^8oPP?-3OeP*+je$b5yB7tW+<4L!~9=|!Mx7kQ$h=kIi0hD
zpuBSC5XRYMoTmax?^PUx$e{CfN?ro1o{3yQ6>#k8>)P6S8_!a4FP9Eb&K>WD_de?i
z2x=qe<d*4VHPtl<Qc5AXW67ou#TL|&zgoTk-?ciVh*?{v1b+WN3u=P>IctpLHroFa
zu{Y|HcdYyRO|6`dA1~(wvEp|z+gzIz$~p850Vx0#+CxxCe`+@Mfdd*ghbPB69tW`O
zr>JO!+&-Z-36y6EDpex8$4LfV_Un?mGnx15!yEJ1`MV!2#Sw>^ryUDSCEH~9)TfY#
z%>?g;Mi@EI<B%+gO^-a58r|dDJ^2>#ltOIl#ou`P!~H?woJkuetsA0UTGg6yf1;t`
zqh*k^`}YepUsy!ws?=v4rid&@MlQ_mPVqQNKZ-+8tPo0Z8s>y9)(F@!0VvHc`mo`b
zLitF8e!Mh%w|`ixrNJICv|E_XHJbH2^#besSc(<R*PPC-LjX)`*9(C%d7nlBcgfFI
zlE$ppOKWwXaSjW}lGgLBl3Anw#>o}Q()(|gp*Nx&C6v|bc{~URMt3Dt+|lAzE$FZ(
zDuC&10S#Z=C07S{u%a(2??2DJ%oH^^_^LR1pioeA!&UWzn2__is{K?=r`QM23`7Po
zj+m20bDai(mt7~|W_$N^Dl9sCJ|a^1GDV`3*4A4c#kbpbzhFLqq~~{!6y{%aDBBQ<
zo47WHQX64|(zcN552ODHmUI&9uj+Lj<^SAEE+(3hJ}0y;veUB%Mcbg;mVJ|!Jdq(b
zv;%HJhnXDHqvOr+&(d;(S2)(7cNIDy^$3cghevSW7yuS{CbkIZsvUM;#)m=lSdw$o
zv$F+2iP7bMAeXv_rZY9%u5n~wV(3YDdV^Sqaot>Pv~i4xkzY#6_N+G3*JxWiMuvUl
zK$9M=sau@n?>TMAryI%NTOzW}yYQTED|Ce=5^6C*u$7k8d+e}*D{-R-B{5YlLoy30
z{%QBEX<oueBnmFhms{74IY)t;LteX(K=|%L@As=w=ITcGXY#zsTNkRPn2X6oh%7Ok
z#nC%VZEi<UO@&*zR@4{gj=ig@8VQRF2+=kn=oMut1Gg*amYucUWm9bJjj+veA8-vS
z9!r0aRw6@wCZ-n{950;tv-u+Eqay_g1#pz+zy1p#J*OhDjZkB1NBgzqgkGYfG5hYz
z`MqWtaigUY!_CG@PkMTg&z(MrxR#d^;RS^~L%@oB>09XhsuDt>NH3wZ_#@xi0F;Nn
zwR`Ud2IIKfaya7>X73U2y0~!Q^yqJ#rIdZtycWJq%AL`<mEW?>B-@{0%Jk8{@_2|D
zMF2KPB%H5K2^9nbpNGGSEHK+{vEom+F6D&!I^f#LtfNXe6%h?jL=XAa^4Lk^>Uc5u
z`F6KOj1HQPhT$y0>tnqOMLyY-PyS+P`P=e!Zkg>=pWToB-Zuj@nn_q_eiw;Le<WRP
z@b6O|6pr@zli7=5k>J;3j`>F79Om+?MgRt6)Sp{RL)DKw5|UEywjiJzxBMv(ziLeU
zei;jOp68L_JVT{MZ;<{Z7p@Bk@h!((^lEetJh08?%%_L66;&`(k7NqX3L4kAX&D7>
z3x-pZzG)mw8ugaNrfkXo=%4&QYweu;ZY(OcM(j^y6980@Z>&m=tFKfliTkm^Zbr$A
z#<#+fY7@mgE}trGPB+0O-U>;e_gYFKq_`=Q)(=8%r<=Sy{H<S&vruxiNQ4rie?`41
zX$%~C(MFGJp{{>&rY<jx^8M}ggMizYE9|=bOqTA<5~Ol29=C-=2<VG+L`M-?!`|yl
zwoi|>eSqy)TH}%`7_tS9MkwA=q*BG$sEumnz~+s$R}3bZ&bCz*>!Eh#KR*^w&Q=-P
z#wnHCc)d8iqmF`vWw7<`@nW4hRVk&frV378X{qATlb<_tj4F)li*sJ}i6nAnzMhNN
z@0w+~{&CQpDeDdgYn*&v^F3O=cf5<-aLv*N=YZsqXV9@fV5P}X{s*dnt{JSoHl+AA
zXB$LB`7tx=`gmz=7YxGZKff=r?KWK`9Ke<B8}~NcAw2F=P>!@^vDSI&J=M?oBTdil
zEE#xg4!9Liy2I!`NVHhgwcEx+1NLtRl_c@kQ1s2q2n%byp9}t2;4mg6p?ps`uK#;n
z=l-aA+vGyCkOcWvgR;z2Uv9jl{V&}|2Jpc7qm7q?+P#Q(x9;E1B~0)-jy1q0?*B3N
z)^Sm8UD&W9s30LCA|)Ww5`uIp0!nvxcMS|Ngn){YD%~jE-7%na4BcHr&44nJ!@zf=
zp65Bo=e+Ox`N#a2apK-<?^V}Y>$)5Ir{;ojTV){PW-*V}Q{3y_(^z4f-*l`Qx!k>q
z&6~qF<I;E(gkK$4jU(y~jtrh%T{zvVTlO@d+6)zEhNaZO^Ltm%3?rvjM7}F9_*9^_
zdO7*_&B`TQUd<)@iAptjp05nxSXi&+S8E2mk-D*X1*dbLe~tq=L+!MUcqBu^qHLHR
z=6gD&wKt`OLGT~$G&IO1n-YD`bBf?^+A9z3dvJP#Pb|*B&5ujW&sQd8;y7YXO-tYV
zlgP-SMUwoh5^_I_i02(Hk?5Tf<$3QzNr=47+sKvGVwr@Ms50&4$nPX!u2!DubK1AH
z;>zUoI&~&2n8_y+=RyeNDI=<>q-(_GVpogVo@+5f_4QraJ+P~isx4cuL=zN?wqZ9a
zl7SP@KtxetzFDr1jHD?>rzj@KkV`flgu~QC*bM5UEnd~`sN_Uwgq*k#?z4Q$+0KjQ
zvDs6fVf^eL{Pc2<Xo?Z@wtyk}3knv(zEw9{s|PjlMd;Ok;(pWIS3<UOo@hLy-Nt4$
zv2dRCP@GM(xYA)C)I>wfOs;aC-ZuVy$VK{YGwvG8Rs(zm-MZ_BQjdF7`QmO8)xyDD
z9owE;C&_^IxZP8~OXxE0T51O?+1&uSC%puZaf;K4sq~x*@x)5#;RWIFa|wyrjTcw-
z^od!1Ad3(U<`$(EdylMfKbogMaRDl?o@PJ37mJuJy;|TmF3dvR_6>ou-CD9H!MoA3
z31o~3YHWtpOrlgS+H%PLg8{$h48;wBmB)DfH_hspXuMjI;aq)wS`;DP;?SG#E$@mK
zhdQN2I=VmOxW^p#_+KZ9&#42DpJypiXd3XCFyl+EJgq8Oi%k>8?y@V`!kfj=@8CTB
zx{n%M?$B*8dM-j0K4Uxqt{-DvD6ZSPC7j?s{#vVxl2epk%W$T<SoRJ6T?Bqxz7w<W
z{Nt#BqpuuH@*F0vyR$q>JRwksDM^r$h#PdS-6JM}D!7~&F3ZzukS)KNuD5NB5`W!y
zIJz8G7N~kF<O4mC@UsZJnP~)JJlXogd>qZZw6UGr#~UM@Yl;=J)K~ZBh~?rZMSyV%
z(`DJ%hYV67cgi{?#Z185XExDkbnW*<MhjI$`G{ZRI?3ZL;RQL3m<)4#MU?u$Uu*So
z)I}BDx=G^9rA%lKwgrEWE(a$h^*xH~@Y8E2XG4=E%|SY=1a-OlUWqNg(KvZd<7wP^
zKP)1$>c`oWS<K1}Nqo`uvNYw}G;YQ`-Lug)P$I9vfPSFFUiHJcMtF?^RU}NMgxl^~
zB9m4wjCZq!nK8vJ27eV2UAhSWcmo!LIhbRDQ+3vu%6wsr@@KBGn<%PsCurzy5eT^$
zJp_}A_uOPW=EA)JYWu{FeD?Tu372x_0(gYrz+=>Zcqzy=w-@w0f?e3s>J!gm`9!Mw
zToH!D1kr(3X+`+Fa$RjsjZB=&pSWvbp;4e87?{@w_u*H0JEq2LP#Oh>N)sSevSez6
z^v`&OKe)^?;qQ%%G06{p5y%q0ZF2-)=+mi?pWRwg;RvFBGFcQ*O@w!#VM*r74CsCE
zrIg*eSB}j?_}^2cA970weUG!fPiZ<h?$NyB_;c{gF-7;_xyh)Cfs&-VPNz;Mai4P|
zJ$QF^BqOfzRDZYjfGIkMPORB}H3b|r7v~4LD@$g61SmGDc?yH55%;Uz@yIQFb7cJn
z=3l<;;-EXzc_hYoBE_6_Dj?%PR7G|Db@>%bJH``|m`6~<bcZi#JOVq9+B!MKnb~r!
zxOOH@*Tp#}lvAa@rzxgdCZ0hH@`azPSz5w|CP@`&2%^fVdGHM8JmMaK>pAQMKQ#_I
zV0}64ReGxw%^gWUS@s;;SFjoPTE<FH)Gg&|pxw%LM&{d)gWPQ~&Duky&*e*T>&i{n
z*I42ics`XL@M8$0vyc29gZn=@j5At=RWmG<&8Ww%-;@k1YsJ421uxMxZa+CDwe9>|
zIq(Ur(V1}guNpWL(E?W4S%O#~6$Qo>`)c2rP%UZoQAJ^ctb56@W!{<GZzuPW!|U`k
ztw}|p&L}x`#OZ?xonfY0h0WtvNu&kt-Hf7&zcg+_Yq&FG5-$+g`s_tlQ4}(w7<5=$
z%~z0+(rRlHzqdw_*%U-18&IL>#3_J<tg4x>XrOamg;&6t+jT8J?!qG`rVNxh<n@!{
zS5DKD8>;O11-HYFUff?FFKZLMjSF=6R?oVj=QPXS(dU-hVyG(UFL!1MS`40{dCP%;
zgzoV5#dl^CSAmp(m`47MLxI3bZto+@TmI>Scutr%1bpO^7J+W2Oq9)0ubc?BjuyM}
zh@s(pGVeH|IBLM<otfZAGS!-e%B}LZ?o{9@cqC_<k<^>!U`Kb!#j%qyr@D-8@%S2*
zEqIA6P4bQRD%7m`DD7Od3N#$+LP93q%TH!SaqthNJkPH1Z;z&IFk5+-gLI^u6wdkp
z3c@u+ysSOg>MbG#2LfZG{ta>m?}LckU<l%Ok^7AU@JHaOr+g8C1*Xy8k6<?=Vj3|!
z_YP`DR`^jbt>nS=TsIQvX;8MqOIO;%fXauU;$`&Uic<HGr3ZNg-RoOS2`uK(-CV%_
zDT;A-o|5wRxK+}0fkv<Sc--W66J>V*Cs2dCo@hS8XD}%EN>tV9y8Kq18IvwgL@pwH
z{K{-iGou!C>Y|^876sr%hso_e#RyjT+s2+4R_v9P36ED9C~9GmRKGKZhJw8FbQ&a#
zw*Mv`H5IW)D-}P!6xZ$cJbB^_w-Wul&vRup(+?M!t-xok8{YZb+_M`3+w~$=JNgx&
zo-dI%^eIVg{oPWxP80e4e-5Z0P!=&yXeAiLPZO9QA?a?*0<#am^rrJ}jkt1bt=Ki2
zH@Gnx{Y<0dpVICMo_I7UU)?80CZ^?diBlDYaeY|mlDtd3t`2;VK$kFrX-s;ZECNf>
zVwlD3eco{kj8i<<C|AzIeb)wx`-YxcQo55oB%9fS{y}ez9Fr1oGJ%%lC4mvhuD|xT
z6q8D$qg2~yu>9d1V18MO|I*No%k`(3YH+%14WEMJ#i(S3?^4rD)-_{8KOy9TmFO#s
zzm$+|%(zdrJbk>7?l7@`KRTzL@aY>4aiNEmbCbx(M(Rhdl^V7uCMzDy3sqE=^ogIM
zu1MttSUF)%zkI&Ye=`DzuC0mO8@9fDQG7=6Z_F714sz)ibYy+H2UI-%-(ATKvSQqX
zxz^Vfrq=hTech_voXXs}_bA}S%lCwrxmvMT&K0Bm3cJ9vBkw8Y2Tw>W6gi4HlHWrK
zq|4r9v>2y5x2dQIeCg5Z67u&G!7S|5HD`zLH1lZNqw;;_i#_W16<Z0V+Q|I#mRG(6
zmGiUNsm*5ALsB<FUbwtksijjW{YvbsXST;?pht2IskM%?tUb#-8AZN|dsbO~KOv2I
zV0bO)G{9wTDsCm1GRyvCM-obRB`Oho%e~@?QE`FO&X)PB*;*^0qD0nn18VpsEh3U|
zA}$5NzuF@3=7?JLd8=5$_mv!=t&u}gb5tPMvjsYUf7m?ab85BYahu<--p5~zlbuNx
zy%IMDG_Vc6re331jtSGapFjspAi&4wInDBVp1dXc0`wfN!Fd&%At^a$70;j}{Ugfc
zUjv!ub~AgvzE8eM#4gj&3c731vEQ_CPnreQC9|5qd2MOqs0GIV$t~-vOwI@q{g9Km
z5=kBI)OM-9j{C%Wn#oN!8^L#XZM_on29#^q-)+UkcK<s*a~>h_i{Aq0zXes$_H9tm
zdcvHY9?RGEcN4SNrv}&0c4v#LXH7cgxmRwhH&b>gFwCTRO5UB6dSl>Bx6-@kA3Xbo
zLnE2En#PHllaeo&CKQx^RO?JfFYA*G@pw%m?lZd{e4h<EytbS`qm@GD*Ua=Wjbq~3
zUb1h!&wFt{F*`xU=G~5|wS7Etzp0o0M#T_#v7%pBI0SCw>jC&7u#lLLz7e>5;r&W5
zLCuL+g8yM(q)~3_Rz1GI$_k<vytI_~Fx4|w*6%j|r&9M?UBWM8j;Ee0{HrJ5M|_^*
zSA{)0R9Q~$DsiIuxFWugxFAN8CV4+0k!bey>9H$GcZg{T>TyV#8|rbJ;OK6qtlo3Q
zuE^>ebHNCotDZZkPA6oiN94l0*~~pMSuG(S)z=v-p}>~W@dJGov1V(<bmFBWn|R$r
zU^<=Y@ByyT>Q`G@&pD9)O8#?3iRB`ED6QdGHP*0G3*tQI2F!mrd`6<%Lw3!`I{Mka
zLCt><`zhbN{$QAxVPRb3rfG9%=jBfAAt32pr3v7LCpig7hyTCm_VBm^o(X;aj3YQ4
zMtQ-SWls=Lhl;x^WoRjn-TdfB*NRe?i^ELMQgC(j^jJY#>i7Q_w-(|$cJAy9vFkgR
z2bXU>55067!V50AjY0#Q9hoYarnP92nVv?eUeklqC;yM-3F8ISnhD+@omTnWyxk7^
z`i7v~d~;ae-)^FKZeN0{{lU!-Ez9k4<_F1j<L*!=bZ>Iq`Saic&d3c&r*pO2)SkY>
z7l0_v0vIzdx82_|#^UB4@9l{xa24(C>#O8;)!F+?IJX0;w#VD|$=Eatqhkt|(aFmG
z8ExNV|D?y-dwof)HOLFp82s#!z?>aGqN0*KOn`e^8_T7q$=+|dsKs(Texb8BflQx{
zDHWWG`MP^3c2d~V0ni!*AQg<;dq`c;26L;(L$T;c@pIK3q<7M77FBbI44ctc@ug9a
zDf064t508Ly3_`mX@QcZ0ar5cKH2(Nh<~va36nw@_pOwL<laY4zm5}F2TSq|VGXAJ
z2RRS>6`#(7$pfoy2#w#Z&Ih9lZGxY1{-i-$y%OLdel*!!@WZ>%L)8WVCLQjapR+~f
z$Vb@;&r#@*$E!2bd~5+<@GGsrnvl^X#DSuf7B|TEFl4S%QtK}=-Vh*mSv6Q^-dvx5
z^u+(fD{dM$wx9(1f}^o9C>h8ZE{1v8FaTsq%#6iRx8>~;#Z4TTMRIG>1Q*dXVK|H)
zGUT@H+uf6>X~>jM;1;&m{U~)Bt2iMCRa&U>@1$~n1xyp^0#rsE+uYo%#XF*F8zhQ6
zvap@N7ur_oUE4$3kI;zMTJz51jlWr|B%WdwDbQR&&Ap^SxOWYFMY=EeQgp>kfXi3<
zE~=B|O=E#-*@`tQDnEqpMw$BHp-`Okh+0y!F`&#<1wIY_pIw%{v`azbdlEzCXDxRO
zM+cNeNjV3S!Mh%D9ssjz*t@K0zEcB}bIb)3g}_Wp=nJ59W&z+n$Oc?^zc@hbLwSlJ
z0-EF+X6=yQiz~X42@f33pSWJ6e*`HFT|oVMl{e8%3F}z#g5hbGPI-}!VX#~ZL@o+W
zo|6{Y=%iDv0kcn;Q&h5ySa!w489Z>eortcPM?XJH;WxUNnw}lm*R+{77xzMAB5Q0K
znUk^c@B+5R!2Ed4sj3B*;eofZd?Gtnd{d*$6h-FFFx;k@4-M-3sCw(9ubw}a&sI$0
zh&-%Ua`ssV%0;FoK=D(d`2-Hx^h9c8r{t1WtP}lq?a!a3t9O5NJ=n~NpIchMizqvu
zrt+EtCbaV`Pp0AhiLw(jj^zVq$=^KW+unpznlF8pf{W>mmn_hp$3J3;_P=Q8hY2+`
z>4Vl74y0zZu6Kz1FE?K%Ef;u}<{%|w8-O5jcH`-Ty)ei_<UVjJUS!FVu0?~HCebLE
zm}JNu7F&$Dg+;fd^mmWa1hZg_SyNif8k^>1T@}F7s3oNDo)C6!_c`pYpsu(0h!&yv
zs<GfXVkGO?yIY!f&glY>FVb@fXZ5TLXudaJx|OSwQD132FMpNbo-NasQ{8v(5ia%*
zn8P`l2vJ}ZQknF_OkYF_J)!7i$C+P+8q-(#!j{>QwL2_rMTxOE=Tly|g}N1v>k6~*
z=oF``G%{4+w@r2c>UaFCxf<$EaS$rczaG3WhIvvjJ5yv!I^_@bMOKJ+D7~+Dx9y#>
zO18bm0u)ZyENvQpqm&Y+SWIbdje=VzY{ENKg5HHcYI8#Sl4@F}!_VykeG^jo{ryZY
z!@GZwS0F-v04z*q9*Jg`dqy{TGF#^%4EvqIe`ZbTxEHuxo_(~3r+8~eoDy_{$tu~q
z9RKt?QyuysX|1-p2;>!Tzr=az>9}J@VX{Y*U2*NR{6wz`par5O`4S&YO!)gzwd==Y
z2mp(j&(-7Gczh`Xf9;F2EIS1%YJCh*{0~Y+ueY%rR?9rN3m+%8c4E}o**?xCy(sU_
zbdw@RzmA*9@0dxsuV6roKWMhcBxU1R84{AX^CoA65I>r(++;Q^%)MaK3}Z<}KFmIw
zhu}pZ$FjXf7`c5<<h_6yF>a?btUM=11vF5g7Ya(70>O3L=NI75jsA*2-#$(M?iX%e
z;tlBv0`S9>m0XzPq4<LfXyR;Qi4|fW&e`d^eK3Gag6!o>HF3d>c;DPw>om9JoM3Z8
z-<3)C2Rmp$<4x^4+bYoz62EW9<W|}7QH6wpxpgU&B{ebzpujE>)XoP~Lcp<QM4|V-
z?YPa{wBRnI`00-d4g6w*2F(MzQRR~aHQ8hqRe|+yl6@uqKMo4^Ce;RdX5g8P^!%Ka
z9y^{40q2Plvt`M%UHe8>t>eKSl?k^4T8E?=<ly$WhBb~Uv(r^c_&f_db*q7(pL4CB
zQLt(&tc!>@!9-Jj<b4ZFF&(_mTCSC1+bS+HlRz--S|~rA;piZ^a@v~-RQ#t5ZaoK?
z@G#q$UVY%8TT{O9{A38<*!p)ULdzP!(;rWARmN>O7k0puLVLyUu4#;qCpq{kMgh}w
zP}$QMQ8UXDl`UTt8Ipj*=i#<v9oa32UM?`NB`*<TNJsUu{pnva?|=Kcm{u4yAnvIq
zO-M~EPINlW@c?m%ymZk;vzi8QiN4lydtU~PtVz2gP`LKQHAisCcIl~)kVIQkQsXf!
zczA988sbs101HvaMATvhcAC#wRWj&%4EU1>-^?Jutjnluy&CT_#c>No#u=v)qxa(Q
zj^K=Him%~CFOySMSmT?zih85CvR3)T+e+~wK547KWJ(lMs-K}Da;8&pas}f3)gPmf
z>a|RVRv_^&H~-oZejsmBvoG+;SPWo+owT`LXap5o(pdy321;p&=522EzWSx0_GDPy
zCnRB7{E3g4#WZ&*eU9$sytvJ&*;fO1`ZE{m;>S8MV4yeiwGRrrfxR$4Q_0fHicU7z
zz=O7jl2zPTmmIK>!I}w_xKFJzTj$m+?XCCh6*nsG5_kh+E4JY^L7h@$N;G_!uQgHp
zti{&GLBQ+tyKkx3U_Y#GvAqH&T@ODBdAgtSZ>gqzUnt(npDH;}Hd*Lt!g^3G<)_T}
z&%Kc#yo}*kR%}Kc8{ZRs9JkZZy8GS;`R4G!HzVS=YC9OM%RI@abT4;fMD{m=>RwR;
zuCJAb;Gf^|ubh}IFezF`yEsAK|KG&Umu@Y>ny}(ogk(q79}a3ZGX0@_|Mqn99q#C4
zkt&zF`VLOn?T5WhTk34u#HRND8dm@DVl_*EJ2_?G-b%z8e*I^QfcvH3IiUoAFvZ-0
zK}^yeIbBt5Gm`BS>0xP^Ex|{Ci^#<uFVtb9<a3-=$)E{4{Gvhr1fu&p+Gwf1&js0}
z=$3U!J%7{pP^X#i^wvjKLvl*~?m~tF3u1JwdhSv3pCQF_W3mT8NX4dZO_o`Dh2eM;
z;FfFH-DdDjg{U}g_yiZ~R|(xkiw!^@pvWHLi`~#^J|D6wcQLcvP~m6*h-7+`cKzae
zBlsUEE8~V8`F_Nw;^RA*@ZYfBbY7v}`?5`gcVRlmBp0${q9bJnK0d05&0LF1{T(G5
zU>*94Dhf3VKNX`97QVWKG|K5^lgw$``EJ%0CN;bkHB^WAJX>g(#?oK!Z?ih^fu8@+
zWuggFAfH@wKg6T{PxA<DP(VuRh4Es!v$*p^0?!qzLIFTd7q4x4Ef@?JcAu5yau}AY
z*NY#$E!1t&CA9N;e?j!}BF#j`sH8LXW7$ea?>uCOt|(GSHP!#vog9E2M8>zpypG=G
zSPVz!sXEl;4`X(OGo3$uk^VHPcITn~1NZIGSfMJrj#VIlxNVMA(8tk4uWO&jHt@su
zMI!%{QgQPt6*=EYNg&m}NV@~_jl9j_s06vVN5ZU&DoNcZ1^Q#lQ~kQ-F%wOgZw@u>
zMD@H3hyT76IS(Z7Hm9ogiN5Dseajs=Qnvf_J3=}K^F_(-=!k^m6dSOt07xRG$JKRY
zdM8%vr=ABGB)0_9Tgldxbi4@4UwdF?7K`*BBr*Vvim8tN;8gCTMjsvS4U|_6r|Wvz
zSf716oo$x17uU#fB|lyoCs`d##jH*UE5$BL-O$4^-uBJ!eHU)0Q?I<y&n0}NH+FI_
zKahlNvHEKg^g5UzBB?^1Vl0;yAUsZ<{RVq0(D2l<eOYjTs5(^JR)dv&Va_et2h*wV
zg`TkC6AN+@b|D*h!I<{v5&TGUmlyPIh~O<%txQb(SGuS>&-d{dEYh|}O~I#SzSjYI
z(;2ZL<6M>N#vhkcIclCq8b)^OkQve~_=pdB16JQ@buV-v4&XvySN_4STPeWE@dIDB
z=_7+|my8qi{zV-=*%|T3Rbr%LxS&(?f|;zmL1nAy`!bK_CcpjBb#mSVk37Aa>c-=}
zis7wqlBVUyLD+ag0c*W+y$C^&!(+7Xj1jyKBO~P5vm1Etys>S!U5+TuWlkw3=c;1q
zyyLlbCI0rbV#lF?g10Y^A-tsTy@?uG&jw_=S1yj4BN$ng<n~y$MT<lHe)eQgrx)9J
z_gq?dIHss?vMz$F|At!qFBb5(OwK#4`>VMp4ZZJYlpcpPhO0K4KPo8vx*N02_gp+f
z!p_`q&r;kqB6;p}Dyj1D!v~wrZjuSk=bOWgjuyuU1OBU}O&&GE=gyVu5PHk!Nz%Ng
z0Zrb=ORkQgqO19u1g79nO{=aB1)V@P#JY%gL^Ow?x?f@=t@Xrti9dEon@(ghJ6Ywd
zn%G@IdMzKbKtK+En5^ft&o8CPS);ViC%cWr&qR$BA@FOhOn0rT#RJ%TO=|r0?*?7R
zCUls3D(1JYk#KZqUblW0j8LoxXcl{aBvh=0mO!f-w$F~(tXyf9pAMX*ifBw%Ix@Vz
zK^B`GUW2d=L<7xy3@hi!v;ghJ2ls96On@O%wbGh6V^ml@U4J&ikvhR9b?ALdgoN?_
zmc~Wanu&SA)Ro>U-p!*V@=z+|_7w5w)Eog**NW<?m`iGtqazk@v~*IRxeaCx1YW7i
z)snL0Fl0a`jeVe~@nO!PR@OQ(bhYLR(^Hx>VmxioH>Bj#@J{x7nR1grD3js0r@4zI
zb61My<et^Z`F=^VQ?yN~t!l&P(?=e8Dkl!nFq*K(hcSqu#QwhGZ+7A3yOw5JWo|Bl
zt%ylVUc0h67sEcp83dJ2pHjP6<x&))+V+q}bUodh+xQD~JiJ=3-ZBV3rMv}kAK?_^
zO;Dimo}LnMk8HvCQY8RY{Bb9N(p_aEcUv=39|7{h88T?El1H-j0`jdDnk3!T3BCSg
z^{%<4<<FkVcbzpCg(?}{YHN-H&7zN2h^$$WiXxf^Hp)f-;vm=kk-;3`K-6^HAdjZJ
zU~a(x4EeG>aRVxs%;l;d&zF2qFH+Tk32(bS@l@U*0Alk5KHoQwoyMPOmKab9HoHB?
znn{vCPP=CwW;CsS>h$itGPm=Q+oH#Qml?yfq{U5=m0;;{MROvWtLGScro*9Nt5Gh@
za!;(_b@JX1T7Xz2UP0$On?q^E?&y`RuFd}KGp6qrw7+r%VWNPb{=knza7eL$DX31z
z9_tE@{*13({A-5bZu$j`4KjTr$q5{KcnT-l1hvu)kIpK2f5S&V96L0QE7ozE3s0=m
zj<8WTVC2+hnRZ0JQBW-~wb=yQ@-*b%?vZ|||LK3d$6Lj8jUd}Si%vdQI7nQ#{oeeX
zHQrT#HXKh{>{*DEC7h955boi%yE2do+y+23&lJZ7C>yF)NV|IhWekK$lJe}FAE-0F
zkw-~baA)e%H5&8gx(PkUW{e|?UUk^4iyYGwq{Q1*>o9c~1DnY_tl+$0)zDd+=hZT_
zg{}k}1PYW_$R`Y|mSGKygkOe7VkxD2SIvb7mRJQuu8%(}<syX6+t2Rq<lLiWr$JbG
zsOh_y`|6lAdyIacBOV|7IJTYjT96Ggl#gGx|5Zgb<EafuWZF^j)f~Z-c0>GYzbT#{
z(3WN$61zYL9(UTL9<5$#c$?{yXIc)a`{=3~HSM|(x3ap$|K>*X)JvzYUlu+4bFL{=
zhKPz^f5;(cc|w@_P{5Bu#`}OfRCAthA#@D<-dS;>6})~gBFt+mFt$v9F{<C{&xB6`
zs}7fHtTgeV=dy^fRXiGZx0)&7DSc;HFPJzUxIIW%@vv+?b^Ph;={hAhq?nLiea)m0
z`8)Gn+k<UxzUO%#+d&MFk!*!P=yE$~#%Z#Y4hHkW7aaj_Pn5*ng6sKko#@;b-i|+i
zFL9ZH%Xw1UW}2%Jjfm{7Sev9zBpZxhSE}T*ut-Yrno@1th#e>>2BHcJIeVRnvX0rf
z?>i_abJ<@90$|iG<PDW|wy)%oCSuy=gI71Kqsml^eDdPU2kI2S?Y2XyR`;0q^P@?9
zdWjg#*UdLP1t5n1(wc58Lwj?Wm~LKgzLq}+i*x=lPSPdt`s-%O>=<7^)~5rNDQbw;
zG{4v`7*P=PMS40hQ1eNA`i_j-v$}%PC-S;~^LJ86X^!bY&ew%s@;sJm(Ly|7<Xbrg
zD-p)ilFE_}M41w~MsUk~iRRRKm^~?HehqS0ypM|V?BBY9g~b8{*5)J99%TO{=XbqM
z<=P_l>_2Fy@+I6^pIJYf_O0xf(Dw$qUpC+UkNpRj@o!@3!E9%q-0!pg9eVz2`2C+3
zTZ(00_B0vrt|vJDY0CbvY!^=hs3R^#uFWo$hY>SgzV%kt_#_!eC1sfU{}J%tX2!Yz
zbHkL9U5RKKaxQi<ASIy1&^;fC-)&6srx*L@y$Qfiuz)j$tw!zf&<YG5q-MX^OXD2c
zQp<i_fUI~$@xvX)z~7RnCJUI7n|MCX=jZa$^VO9K^L=lfN>(!nL)_B8NJApv{>>Ut
zi9~zEho6^JM9Z~&_@car8I|1K)ANyk!P9_Ha8=pH>)R98uFL3JnMUac&YhhZYfBY+
z&)gJ#YmqR002+FaDZ`TELoeZi9!$hJvi1SvHX9>Mj}F?eZI9{jQoqwFI%Kq^$wA+_
zYovDX<Unb2GW&zi8QT6h-%M}qW6l5S<AYK=V!&fe^f+b5VuM+*lo8ZJrsvv;X`ASe
zkDbcX^nJSpx$S=#Jwj7sI@e0h9-3Kl#w<(W^}f`Lh$FS*?|Pv`P$^8MXs<6f-&`N#
z=7}QP94>x`(5Wg+KKydiYv;4%8ceCP>ojKD{5+8~>+2A~THCy!AD0SxIV<=@iBpH%
zLTgm!^QEVIQ|HrNAn`MH&a=ll+<cB7KdIg6D)C5t*dBT(mLn~!nmd(3K!wk~=i`*z
zc$c0Q4NK1B0{S3ESQMKPrKN|5h;v6k9V2Mr*uB0_zg+0e`Aeagwbkq@v%}v=zVf&0
zJ_4@UZfM)&$GN&N<~iFJz1L2<8%gc5T#96eO(R*WcU^qj)yOKt<XYY-5x)1byms#-
z5{T~JmotQPhj;F<(PwkU^1o4v!OIHiMN>z_PP|d5^6kpIHu`~b9^-$ogDuvxHGh7@
zkCwiESyJM97X?nh&70U**3Oq--%ocP)6K6XZ6B94*uv6%Qu<bI&ap^tuDD8<wDkUc
z=A@Ue6u?ttFK8ubadn=55nX@BV^02_oskD6c&-(nfGS)UJ>1<Cfue-1K81ut=4$vj
zklu+ASWm8Y&3V(rH?f(~L8v&cAgZfbe~0us?aND8|9!~eFuvxV*cm9x2i@0SOL8Z-
zy-8BscJ)y)t6{;5^x?|nF*h3hJD0I<3anu1=;%yW`v!yN2gK5fk;34u13f=TM~PYr
zQ{Ur}=>C~fJ)6iM69r%E3nILjg<MWp!|Mx+{E|J3z=(mdk42CwCMF{ssdiYAW&BIS
z58bAf?tGW{VIsGEy-#d0--r2Nk0dz-WUiqIw=*h>roXKkD>OAkc3?bSpG{z&>W)Xo
z`fAS<N%{JgyCsoSqM@&o#;SCZ30Fyl4j-+bHG8iDWa?G-POaZH^Bh*g-#zhmfls@t
zHxRCFE=9)GpA*7)3~U8y#V*#*tGuW?BJ;ym$7o@8LMtlHL93yoZ2Dl7m%=*GIU(DK
zWk$=h9>edXI8?+^<Yo|O2{V2VHCPzi4E3&xnD{7jZKIp6+j|QCq1VYY%+?{$D{Vd|
zzs%CPizG;B>kHh4@qPSy@_|^?3$gV8KV3e!maP?5=xywq5|;o;{(cDHVKcsVl%tru
zBcfMnm0HDTaK$Ko^PZcRWl6`BqUOuKrYKS~f9#vzC<2m`?dJ{$t@n35>Y7iys}18H
zKLP$3g3g&-Gpxq&)ci@(?L2p{!CP%fnp{_2Cz{@?7PH8PRq7B=xZ4yDG;<O-dkY!K
z7Mv*VkFLo?Zh{OYeXX$|d<Dg6-S7&FkyQKjvHbyR#*y7rf8QLT51;C1&9A+Qx0@ms
zrelN*ifzm}V7-ONFS>j`XsSQktw{N5pYD<&s1#ajy^hN5ow41I)KLU?tY|R^5_ub}
zuajP^G97+n5`nN2;@5ad-aS>VLd`zYyqoDLBqZ`|o%bO%^0=^jS=hcDiWGvBWjhHP
zPC0RpBAfY+tmH5o-&T+?zW+$-r_2J>Zk7%Z<jkgQVISS2jL#fO;~25$$z2dbXQ)FZ
zvKCV@E{ab8@%lVTcUi#}MNcsC`T@6RF#RDJ5)!ia+ET;z>&9j3$0pC22##j7VAm6O
z7&A<}$9>DGztvEBZ1Y<xWX1?rR8C;e*q7;ek%o%G8`u-JrdSOd`rT~i^x6c86s+QH
z#2mU=m{~pEBHKn34qo+dK+fumVSGttCUUV}8x*8>3I#|!<qM5wx=(Kq;kv?9dPn2f
z0rXF?4rmQxv?%b3ywJTx94s<EaXAz};zJ77^Z_oDZivEx=agxXyIsGoPf`bw3)U;M
zoMPsNx?u?ADI0gIsBp+Aq4`vrUaoicz^8vI@bzS!%jiPqy)JbEKbu&RNjoLu-9D_e
zj;S7T3tp!33=0-O*<Y4ifBd$@3Cm~2CrdD9+T@B0eZTIr>dD0vgWX&|r1RV!+$X2_
zMH90@^kmBvctsp8uubYP9c5PjuqSdAAc|YJJ4!+&n{il!V-3&tUo*C788tD=gSH$u
z$7G?K<4@ZeWZXJu783DW9VzB3V$Kf6D5eyBL6#9bP1DYxIUPF>n=tZzv)&BGZ`K3E
zB;=p@2(|^(yoD(JPCAR%WsFM-ukR8Aim^*vYFA0<?GpR(Uea<QI&rqL7=*GwhlCWB
zjR?;moEu>I1(U`p)Q?@i7F47J(1Ho3(%2#i5V<h_1Xf|sRoEy<2eiB1G8yrABX>Rd
z^GgG1I<sMAtA3Q42u`p@fJBRjTx`QvugwG<UHzJz4mZ~G!9(*BVMb(^P1=fi$z}n1
zeT|Iu{^^k#$+7K>4H;Gr8<*L<YLydGklw!i#GyV@rgNm}S-9Z5<+w&)NH4EDUl2?K
zVTHaqdUZ5HgOKzN3-^zWN8l7O;W5iarPh}FB(rRf{Q1<DKPbhrHiKX7a1&`bI1gMU
zM?O#eygZC7wwruHe;{%&{mV`)5Kq>fzrW)+pV2$RH%!y7-VYAx7mwf9b1?egP~Nud
z?erw8L(CV6lTS^oT3q6SR4-d_9i!Q<YIEZvMJJmf<wXBx=6@Red1mLryF)`vweyp#
zJLDHOJwn1wJ=6Z?fLhs%Po6qHVyZfZ0O56l$irA%fq)^}&c`qHO9}83p;pcMMe%Qy
znM$n=D<*2l1NpAsrO+4iv|b6sJ}A6}1ANyv_RGTBtMpN?4-s*8ZZDGFC|*r*_=IFL
z&3L-MQ`DrG-%5%uN)w(`OGAM=OR0bA^xqzgZqnAS-&nZs033oyEQ6?9qT^~_Cs>E^
zePQJc976gT98P-GA%{QLA;vLC%eb6*#Zyf2De5nC`qy_INn!i>Jqa~h<*U8^rvU!z
z_I~|!nhY3@d8J-f%&d#O%-?MDUtjjyRR4S$V5EKF4=oM6WeG?oD@8Nj%n{cF{o|PZ
zp_#PGF<1mErlP6Ms?Gx|hU%IH5~x>4woPJW|M%ZIvcTEfyCG`$elb-hHc>CZeeq>T
zXy_cjHWQ;XVE1<h8ZQjp?}abM-Dc(x{9GvcI-i7mt8u)56fDhYq^<s0^0gG~cwpn5
zAo-tSFl3c*9_VeZo!PC|a)8OXE$qM5b5hlx)!7+fLRoggXsS$BEDc5rI=iVlny-6?
zw|ueKj!uDetze{Or1I^Cht8p^E=)A}r(6yNiD?>gkKnD_wFAu)c2MMwWKqV2!MTJr
z#!~8FR4m<GqwL?%T!0eV-x0I=0lqlT9%S~zZ2Vy1jP*71KX=5l;8Lq7=P6wJ{8(wH
zA$7lBpSlk=-g1VCj!G&hBVpWpH{?J5>V^MEJq;i8JoZ_Kh!1o)_Tj{j5=$E;xFOEf
ztG2^O(2Y->9W0`vlC7;zWH$kdu;j)kEn3+2#w9X2)%TKkI30i?YNtY<qm`_a^;3e7
zch|?zHHYKJ;aeM=YH{0j<aW17DGGCf4bx3Z1~i^Me=k<YrXk~}tG^Fj*d0_T82}}o
zPPROlb5Z$RFY-MB7D703D15Np$~JA+)-H1;{h)O#wn@<ObLOl1`f^{hL#z3p2jeJM
zqTP>)wQx@<q?3_zV!^W5<s>yyTECDQ4XUzHijX##*My#RQq3g~tLClqxt*lc5gm*S
zYBdi5vC|kcpX$h&bKdbn!R7kZP0mWtIbBsqNzphwGVq^g@LMnL!+BFv+{>!2Bi=iq
zeia;&1g2kNCTTkiI+M1DuNQhwT|!x?*cMBCNcf2ASfZcxXV(Sdw{yRx*>8xt1y;el
zpjdyX?7o8XZkoS;tNB`%H8AYd(>tK{_3C%;wc~d}(Ehp;zkQ1E6HE$)NU3;0QzF_O
zWOY6Hy+q0Qcip{>OQM1gbU6K+U<tR7MaPs?o85GYBIS|wHE&0{MnMYIhD5yiBzbdF
z$1ty5v_~Rb)bn+-zfXGV>Fyyb_elO!a7oEoc0+9VSqw_K8bN>%de4NGnArE=I(MGx
zZ~Un|-$(*NFpBM#yZmZy%@ygDG$#|(P3{Z9p)td(hP#~84~1W^^KTFDmq_VVx+qoO
z{~Gw%Y(G*qmolqJ$)ISv{_zO3d8Tkc6ERo^?_93VDIOY2f#rGPiqZcgJie}8CULf8
zngv8@_-&POiNB&WmIgPhtP>nof(i`Fr;L-`Fkyl07CTPy?fE+t6#3Ft{G+i&GrSHb
zTHdEa*M96k#fA^rwCuL4kv+Y=S}W34NqHiA+sWAq$t(8nId_#)zkG!uyqR~BmI<(~
zpMJ&~fN2+fZD(MlR|?@BafE4C$Z1vD6;2b=ZN0y_{oN1|G+_#o=sg*N9Vo7kjx4h$
zgb)(BlrxG@n^&-Fp2uhL!yN{H#$v{zNEzx2?SJWXLmlD4T0MSs`vfye<nE+mv^_$^
zTC7=%r(m>y+>=tDWo74EW}B1EvG9qmTVcO@7@3HYeA7LeRGb|6l~ImUn(j%!2@T0c
z#TB9%-r@{W;RB6E{Im;~{g)vE{>oRT&C>8ys1qK;{WhfomG-Zfuh`wS^ULt^o7a9_
z^CeI8x;oyD*JN-$#e<tvw;xarvgw@|xzx>jqD7^~LR3@Y?=tc17J9q$x^-!=va)g$
zNn!mMo2cl$x9qo@m^xt4N(nd`*2|QcdJWqz`NC;FTg)8VAVx{I#zhoKpxT?2^fTrY
zudl{2+K|OjQEQk5y_AB}6;KC|SZ2cws(9p(6d0e*)2-5-6AjhC;w^0<?UsVlTAhm}
z1dQDIHoB`WV#7}|2=Vsb{4qg(4dqtdO;Pito^6_Ucz6CxGcC!6-@}sH^(6n8F-U}u
zwXgdj4W@t)c3rt)*AC>ToS2YZv3nez9QGq*Vv*;cW>;eD#*fDprSkU@@>@CkU9liY
zT!e<`39ezl;ymutvCO%hT1Ye+j5vX$e4O51dStey8@l`DhLE7$j_BS|l%n%)b&`L^
zCDgfo`&Bd|t$z{i3g@>4E2<gzb+;GyH{O5wk_>l}HieoU1cXKk)si2cDr5&4l;q0v
zdNPReNwr#<BD5S4aO@pv-%@RolBSlq`bSV%)wr^>gu03=Zc#euuHppq2?5s_TC`i$
zQ(W#D-~uI<=z(P{%3!6QP-{6Yc{|vj&`~bR`T2zKtfADjJX~L0O?ud*)oi$1NC0uq
z$v&Aa#MtJnP?=v1(?|78D8f@y=GW@B>#a+t<_{A%Q*4av8ND$Z&f==sdH=Be68*%b
zay;hp6s&0d_o^UltY*FPS@~5>-C>@J%34RI@J%;wqv7~U`W#=v3DIM;ouS{S`(Jvk
zwo-Cmn3$MkJ%omIrgn*uMlSJS&ENkkQv3QlQj>AA=^2=}D#k@jE$UC1R_uL|44l<S
zJt(uInG)9mr$K(3Xj*5g%Syho?Q=vI;ajE8g1Spud73D4H?J7+=$GO7+lg<9!-*iJ
z7y52A(_FZc0W`z==Hyrc7m*r~L3r8e=G%ynXo6)gR&Ww$Oh|y}Om%sHD0*r{4BSSL
z;aEs`5j06Gnq!OXvyeuLC$yxBj*pzBZm}8$5Bx(ifOS7gx=3(>btX^yUmXA&9eLeN
zLH5Uo*g^ciDc>J~kSq=s+fynRrC}YH8-MEQA8!S6H6a{UoWri!0$53q-5(b4&!EQH
zK0tQF^&Uj4`r?1)8A@#+Z#?F>JVO8JhW=(oTa<o=LArqMKVr|3VPYkgXt{xt$kYZ|
zG641dx!C{y-gB?x*Z0U-6?!*aIDyan-PF*(_oE$fne@+97CxYHJ@a#Xxj3JUg@nOM
zR;>n9wAGi3#nrVh61r&r+R40%G=m8cGTI_yDo!u`7D#1c-+}t4`2YTu{=~V_b)AWj
zv%RqqMQk4<<E3)<9+>EA*{30u4_k@R8!nVFzpoV#0ihWq+e*Tx`t3O!-Tjrz?NY%k
zE5^+ogj>0nsc*4TA8j!8{_qdw+f1&o-CS;abApON&Y~wlv&qA<zA(F7rtIRuZIHh*
z06U!cb^6VLY$(Sfu8%nxr4`VmHER->-A`WmNR#$ClhJ+u%f7+b>A<;4THDoW|6B<m
z;h)Iy$YN#YYVq~^6<PdOWVDN+STTVRasI7wGGc2I;OJz(BtYzMjE<YFz_W_>w0FZ}
zi2NJX&y%4~9>Fhf0C5jr2_40c<%gtq;;d)p^_zU<LQthuy(DP~!I^Zr)xK$t+he*b
zSD6};&^v(&)8+h~7(td##l`julb8hlUjp&G<q6;*ipGvRL=6`{nD=DFLigJ`8z}`<
z?lm!4wTg<*yuSO2?B2Cd!gz!b<swRb{t;#{(LiVVvEN%rMSmXzJ)@AX#U{_$r*9S*
z+^t(FsCErS)Np7sLMxqizI1E70=bSjaAaSeo$>l3=61Hl3avrJPzxu_R;Hq{7Ycio
zgW{bT5*JLPw@7mzvoj??#?Y^w-G6Eu&foEy<860VR>99#yk5&fGNJI<1+B>VFkHP0
zv?_@|$NFn+E8JvLdMXd5ZxNSZ+J6<-z~6!<x&C13C%$nhAOx#goE$xchk;iKp6tJ7
zmp3kI7SpNkPv9OQq{^ed_t`+lYfJD9wC`t|_$J|@h>`{D1m9r1TBS}QKpewW*K7wc
z9tZlgXZu6EPgpT$A5pXDsb+^S>ul~bdJDD%<e9@&$2vO>e-HOBPOO0Y<p%wyTWy=V
z<?bb*k2-cEyx(3Yti@^y>{ozRH}TYaW`*ZSTtzM%Pzxv9H$>Q&kbU_Nd$_y3c`nFB
z*qiYI^I*cX{b8#J(;}I}y;8o2aJTB5%8-dK3JLW`vsYp3DseSqTQn6vIvNSQPxBub
zOk_=Q&Rj2kbD`slF<4Im0`P7S4*TykYV&Q+6vrI~1Dsb8n~@w2plTrD>o<yzO?<*!
z{rG4F+IKtg_0Cz(*v8Q`abguX?v1<CQobwnO)z%eg{x!{hVmqMc^nEV$<-i1PBkOW
z)AmhP=j&KJ`Oz$bb6kI{T~YGC5r!xqS9e05MfHmZrE)CF`9|rg&XG2P1?O^0gctst
zgtV0C`NWRUqP&@9&J2~^I9oXb57UBIKle<=mq1ecdp^@cd<O$!5311BC4<CJp~42g
znCSEZAwHLgHJV?B)lYHpq_{uXM$iDAvXC1AwpzEF_1Cgq<|Pvtao*_>%53~9Wtk77
zwGtH(K59FIGgAgP90Y<!-Dj;R#51E3mKmPT9IkDN%T)_Lc?xk%Dw;SLQtDM;aoDEp
zl<p=}{vRyID<GBeiSchR2S`|!QEfc_QZUcY7h28aO^c?xu&e6Om;Iv^85WM7?$xe%
zeL-rdmeD&6<MZG6*M)U%n)P*2=-Go8a{W2Swd}xxM5agzX^YT)AKFqa%~!ut=uVRB
z%#<l?6)WGOH4~58W!=Sc+zj4)U>w;&K+chcxONK@+(C-Po{n$sZA`$hk7Rj}_R8O~
zC^^*kR@B_UDbJ~OTmIq#cy1A2h??-5k=%rj?F_*YLR;qJUbSO|<P97ciG+gh7wGZd
zjCVRK4&tK(dDI)BAl`yKp=9*xFJ~W?#LoU7G)Aat)4n5<S`Z1U-RWL1LhaokB{mf5
zPlf6Y`e7?-8h12i*)B|j?o5a5&$zvaj9`NFP&D{o_;-9!Jw7YA^(y2>iVCk(yNrDH
zGn*F9@1G*891*l02ZrGe`24?)F$n9m6oX=RYX5XaR(kGa0&GN0QdD7P(?)#j@7H^w
zao^kn%-Y{}&7$_5QV-}BJFx(lQ2s<jsofEkwTy?D;+qP48+waUV4LvuRT}ETN9mG*
zBj&>FOuw8=fRSno?_is|LWAN$S%@8G(##>}-amzM>9Rjr?(JFO4usIz&NK8+2U*X^
z;Jsv!cE;W*6%5h$w_dJFQ955uzWnDW|B`OHE{^Pad)~O-;`0C5r~Yyk&i60QlgupJ
zx0J3W#2*IrZ=U<NONT~FWZ4M%=iLBN13#9YkHhCMkh>-4?DyAC|J{%NdM*E1x`}>a
zC+gNLs_Q8O;D-VM?8DQ@`sxM1^Y0(~CK=Fp`ZThr_%VA<XH)L8f4q<NI-;LN*<F4+
zO-(uT^lLlm&YQ?TR|zE8S$$0}FP&Qp6ak-JAk(h3PbmixdD&Y7FxQ1RXQeH?0*FSc
z^N)3^qGu}&j|qI9{@h<kfZqUYP%DE&&CT;ULueFId>kQ^E|tW?TL=l2UC-Bkw1nCn
zD|=x;py;UULh?TW)i<vI+1945yI$L<p2s(VOh~Hb>VdbL?e_O+)Uc*k;bBKlu()Bq
zKWrf#fYF-#Ax<cY&rdjEswOV)s*(L;Gc}pk62aK+UdudVd^52Q3pq31RpYg--T9t~
z|1&OeN6altw@s>`&F!|5f?nS8M|#KNfENnpky$^t`KY-Ca)aNlP58#BP;+(lPQMF9
zqpwkMvCkPBwSYQ+`%-KckD_|^Y4o^3ZYWArve@doC*6vdoThtHC=RCead56$7j8y%
z_|(fcl%p=3`N_~y%z;rIk6fHW;tuvLdU+a)AjqF}jeKJ5MvIcZfhyN4XHcEEPgfr;
z$=csk<0V@wWO}H~QtR<Wru-tScqtKnb7M@%5DHxtVV|s&0RRI<0Ol(I{IM=3uAp+<
z{K>5Kz2xb|`3Ov%uA7zr7~T!dhM}~rr8A_)_sKG#)bbl#n6|&y)*%&aW4=|lHU7Do
zWU_*Q@G;AL#dx;eNj^==!8L50jYQbG!0z$2i?i2qhy$di>b;%#gF01T#!dqwldmeB
zn#S;0ui}wRQXYMg&naP<@z+0uR_xEwV@PcRUGw}gUvPKk4owo_B7;iq_a#$WnVsg7
z?<XNWE~-N>qeIZ*s5M*6ej==X=?ff2duJgo`}IE#sKh?*WY*1-q$kNd{r2ntNQV{~
zWW3#12X)$?yR8MjadQ@=_U$Tgecu!VtgH&hO`@`_cuLIruc+!FHWJ>aOH|oW70g{j
zshgK05YaZ_X7njYmZIe<XSHnBd%|Y@90o(hWl>8LbadlW6C>g@zzuMP!V(Gz8Y*~E
zk#T}kl&J?mT5_@c8f*jw#H96!t!_!|2-n26f2{r3q443h4#~?39Uq>F9anxIXg6H1
z(YK`d9BrQiBjnR5cSsxYm_mr_*=MI>K3Rw6VEA{s$HT_Nx3Y{p+z;sVW=$4<JI&w5
zGrb2}Rd;M6x<M^Q$ff>g$;PreW{R=YDve(?-{|F{;lBU1*~`E|aPGl6xSZP$n*oAB
zo;mnr9$PZV0=_C-qGJh(?jF6tC-?(g8IHNZuLj(_RxoKaJm1Z}2JUj<x7H^Sr(a>C
z)(4U<FW#xGpLALp_W6IqD^d_oPi0ho{u3wtMik&(^~D^0O*prW@P1jsa`g{I`*dP5
zru>HPA21eXSMI}mN6h`3;)s^0wv#Ge0I5`@S)DdChnb)mgbCKqW`|LeXK-!w%!kjt
zHM?4ImR8*dPXBZ2NlOPXjFIwVi*c5M0Zj+k2l;nSAHaaT{XyyEMZlPAbFs=_>3K?U
z-Y58z0(Njw(~=X6U*~4S<BqVxvUahz)cd>bCq3rt`+_B(bVnnL-R$Y3rY15h8ZQbW
z*w{vOWl7V#A!E5jcM448GZRvIV1jWNCYZU-q&VJ%PQCQUo!m^D5!ri}FkKgL0KX#;
z4lUU|h6(wACEgiG?gj~Suuk}k2&D&kE5v8VcipVA(Uuu7m}n0>{aHlW!am)3tR`V(
zdcr8oZl(Ivz-#(ERc=NAW57hRs+Z)aOqMp&0$sFWzxc8LWPHj5SYVyBuosdk3*KYS
zUL0Qd0WWuBAM%sb#l-&Tdzdx0oj25N8PhhxY&INWEuS+Y+-ajfpF`N+%c=g%bMrAo
zY>bN{sD+dESK>a`wi2URxR5R9?e?R#pOOuv5c|qE-8R&K&FMdWeRj&@9g%OLyV<q6
zibH+mLr7r(EM{r_1Ytun!Dsk0TRc@tHx*yHC7`aoT3E1tqF;SpIwC`MJI3;TLv>ty
zPr0wg)JkL(l)BI~=jtzu`L`u4Zew+Z5Nq_zR)~N8SwiEy{!B)y=jwM6(uV%H5VlgQ
z8TDT5V-D_-44kXj@h$U10e7wlJrGc+9&wFjw}^BfOY0IV_Vtqb>0iVFwDOf)i{gxa
zbu`jUzGl^YGiJ`Ptb`SET6Vw$#AWY)#by5$>KU{0*+h*v-k>F55p)8IU%V5Wsb1mj
zQ;f06kuT6@G@Pk3CH)^i^dINiD4*`;!pPZR<4AU)^Z)Rr|9t9y8>qZQE(keD|6kq&
zT!ZZ8?6n^~CE-cZKx|D66hKy<fzAG@^8fe(+hmEawc3$~>MXTZWW_lbqHU%f6rr0Z
zOMF84&rA5*1)eI?azY2q3fL5Sy;k3LV*UsNqWx%<Ec|)Qsae%cR9?h%-;SdiYMu>T
zN%c24xjcnV|Jw%sJe`X~STWp(r=Nx@i7#WHO8zIOFZ*v!zlI|wKa&r)8oR*D*Z9BT
z{<M*tI4~Map0vJO@jWPOx6OIK6Ktd@u1X^^cAw3waLQdGl+Vgm`|wUob&7R+wQn88
z@%&SuT|p^JGS+FKq`)XOOY?hG)wurlj@bGpQCxLi<-&l*=}rm`tZbb(?6}Tg>Yo)#
zz#CQpE}-C`<RvALyyV|14QRTTGVLvbX{^+^x7}2>2Q)EkrJ?wl8Sks_0#g}{Z>$GH
zE7Z01KRZA``v>eS6oYh63{sEetNN<}RCKf2u!z^uxjegQHqWG_UqjjWWk=$Gs9yVa
zKAGi~vdITfUy&vBcYWhOaYUw_2(LqyJ>%;Fe0kf?D9SMx-_@VVZc8VQW#O^P1#~h0
zP9~>i-Z9WwOYA&`Fdo1DB94fmY{=W?F|ySHH^(M5uOoy$P`G>PVNPg3ZXj8?tkjvo
z&7?abZm-X{Enc7Tfx<@?d>${G@`k+|96ZNJqx<XT$>&Fkj$34GfGSr0wUa8)Rx|hE
zP^BSz6U2_QJ<(gsYY)1x9aAzPh?(j1$j*0E&qe!ClWYlHZsF*M4f{hEKGlgMG~aEG
zJPo>1<?a-5A|@;e=@TVVbj*jIXD6|y7DxuJ?-S}zz<*`$e`&=xoPc({gB}s?hy07@
z|LK3h4=dc+t-WY}@s-r4xp?p5D)!&8gDH`&hulQWM60B%$PZ_UAb%s#y>9OHSHcJD
zTm4CDl_s;sO&Fv!(@T$qV4Fmggg84Timl4-c0t!5?YarVyJ7%H&GJ<2Go`ar3xMS5
zE0DU7;3T%|SQRP65wK1}Wf(a@_ui(?8dUKAwCgo^*a?1%3m*FBfo>HkwDACe7*u-=
zpK40P<Sp2edN{U^DrcdNH!J2|?dOzvqsl4ryL<ihZWz0vI}Wo^MO~$|BUaSo!Z-MA
zN1`Nuln8roHxrQw`%b|y!IfS35A*cc`s&(3E5>`yY8wHEQ7qR(`1Bo@uT~ReeqxRB
zy>-PYVIs=cyd1_aA~@N7KzX=8x(4H~l;gqd@^7br8Xw!G6mLyFgShUwPvVDoU9|KJ
znV(?<zUvY+EmB3UyBa0`MvH#y=u4s-t27*%zhR6KS+t0A`U||=9t(1xcvKjFcwZBb
zVh=80$ODWt7pKSzQm%ajW9YTU1F1zxZr#oWhnrQQjZ;y|JU~N9xI!r`_IA`KezSd!
z_1bYuRvx`AnP9tv6MO>xk%B1}fsuZfYyTf<?;THd|NjA(P%5buWw$6o*_(DU%SvWh
zajYDBpHz}ih>U~mz4w-oJr0g@I4I*7$H+Q3IQRQdSLOO%zx#1N?tglmBhLAZ_xm-T
z<MmN^*P*hu+UDEyxW&+-51tX`Q7)eebwr1XZO5M>+H5cBdYZ}6jcng6=5GS?plhEZ
zzzNH^&@`jGRpU%dg0aah@qTkw1O6sy;nO2UOXeB8>NDNlW8wl|3>#V>ZpJk(L2!nl
z4m<RU7-StK)v}@!CQ6}bk1^r07uhQ={`HF*ZspQBf(T?`(`f1-2VtXKqYz0K1VgqP
z4x@4#$&Xn)gM+7e*O&IoFPb8M<Uy8Ehov;aN?psMN=t+IpVk?(qf=5O;mrloS--Od
zDf4F?jL%Qay5x`~wzsl@lHGJEsac@^{PDga_24N|bIG-+RkA+kFTR}&L^3_$nJt-D
z^G!F7nv}NYjMpS`hq3Rg3Avmn$$9x<4ZHWCe_@WtH{&-7;)2*iNC&m|P90{`I8{Re
z^w4rh<3xl$iy1oQE02?NDf9?I36x)i3OCx*4C!k$x}OThKPAJPg0`8-VGlB4?LO@}
zk0Q<J%b0QbB9wRz?6!8~MaG!sOBWw-BZz(P;h9pS2l>^o+awF|+XId~tMBw&@XGVm
z8+)7p8Don&ZLIGDugv>ybv#0I>pQii;L-=H{E2T|@XIz_miyeX;dTqS{LU)j>6y(2
z@)5u^LMh=b#dtofTn_$863X_Z_{rt0z~i=<A(QDumJIElHi$!><*<VmAH33{NVFbN
z(!^Z7|Bplj>SS*U9JH$OoQmLTf~KN=mL#l#VbMb4;4G?zW~bJ2IM63ADgJ2um4=Bp
z&4U{Xg;BpMIvO>S;6>BG7j9|ZT}3aBut1x?a5fIlYoN4O#a7ANk-0mBPYPR2bv`(!
zAXK}gCM~vC#w8M-2?omewyxiKKV{7FvGiVK<L7LTol28<(y=++8@Z}PwBLiX4Ldie
zIeeHiXKy}DOE;W*`i?ltO4b-IE^a*vVx%}EUl)^-A|*VHxzO!r<3D3e_PjAb=^0<E
z#rQzyfQ0Cr#qAPmcK0&V0FquVk3G6|Vj8`1d6|h=qPckHdI|e$;U56dweFxi<)ZL$
zJdzNio6(*2StfW$Cpft<z&*9-RZ=ivVas-HO_8!JqrBR1sbXXL5M18~1>H>4^0jH0
z{~M;5H`-fvUb#O0Q(O3W<$$6UMC)Jr8v=BFG(uoUe>0jj6>(>jq`#5q7G}JYb~O13
z?DS$ts@pU>OIGfaO(C7GxVQ$3!H1@-PthdACqmHQ+_TL;^%AGlcU_v_a8Fbk{DQIS
z9WZ#R9JTT(eG~d27wgdT<IQ&E>d65EA_>J;MG&pJ_RRG+SsbO&l5HzG#y*-H{22Gb
zuqnG1&(Pd$a45DEClF;+#5(6z=OPM+GS7*b-}tNC0U5&aXT>N!DBDMZm>h%tl-CrK
zxfCkcGvxcWfOh4v@zeRvJs8g;REj|}`H@C)b(^>o@RM?=MU8=albvPQbg(ZaqB-PE
zbh9NFVe2M7uK|odXgL*p4<=cr1f)4zZN2cPDUQ5J&`jD2_8nyKkNU?tmTb(!DSF~Q
z&YN^BFd1b0P2S>Weh**!)E0p6X4pOvS3CVL8syg&s4k=6OfqqFa4B~A^`l+q`|GW%
zIzV3ATdZ&Vp-TDne}C0^FouiDrjHc!gd|DdI!^^t=;wEhWfma&m5X<msntYshWa{Z
zb6dcE{X~Sym1CT)m(vdl7QOwa`}p05?7Z>}4%M4@{|RJo7JTe+(uY@Dk*|!OczxNj
zYOU1tBB|xPM+WHKfd*#I%cRVSHz61+*;m@*q*XI#t)KbyCa@~YhAGzfqTIcA$t%ED
zaPY{C5Bg~3aDdAiwj++w+Nz07qxxA?u1^$Y0d*V#M<9eiJgQ7gCerSQUJ{dt*Op}6
zxggoF@}Y7ejUWx2^0(%yUhL3ZH^6RFbVeTb_#H%O)vDOyiQHYE6<k!gF5eWT@D?Q2
zaJ69NF-!H@@ct{eAr8zPWko9wYCj&(5i>14&iLi&6vnN3yVdyf8p3EnZSU}083$J5
zAcy`w7fG>#Wyg{K8<G0d_^Pi^Si@>4Fcwf*-D5uOs{Q6#zlk8O`J{~*Je_6lYX`by
zJ68(}jFuGP31EJfTi0!c72sc$F-|{9eu<RkSz+=)M##C1+w0Ccrd9L(NUYgR-?jCt
z)9=txIt?(#H6*=Q764+!uv;|nmhwTLA0$plg}Ah&wyyt!PG@k%-0#X}BdC_vXxO;_
zKE?8z`aeP{4jz6N7|{zI`XM~c*UiR0a5{c6b5x<=fNFRMf3>UTPWYTVMuM8;SeRot
zyw6XMWg%0NM_&W&@OJfPkh{RLW*CO}2$VR><E@v_S1hv!x9sE0SL!m;yG(n2p+)J^
zI=U&}t|ihJ?Y)WA3!m)UkveT%>WH@teuXz56L2Sfx<2-?GM*4b?C~Rhj2owM9bLL+
zAJ;l~sBFYS2eZZ`_{PuH;ADi<)FiLEsF(bDI2(8h;xeY+aTf}!3?*Nnq35#uZp)2&
zw0_yT7i~-J`Zy6Mqj+!m5MWY2Xp)Tt&-w59b_wx}jkKb>wsj-ZdhiUaaeC)$bgxXV
zO5{s&3Nb`HN{n$n4`D7OMDx&MT<2bzqsbcqm#byH_a9on3-3)!NY2*B7T^?YA;*&N
zmeXUZ%K{A*V(BjbXl+zr$sPJ*Cr^qaEYa84Wfi8vO~o8U7?kw-HMv+>lLJD{)z)EM
zu=4=UfatEFsaD}8iP-o*Vi9Ryc5B0e)t3dwW>q<=O`^roVV`jeQudmZ;B>BVoBV+V
z2|+$*>KG=8<smHm;iaENHH?AzJKU(S-%}^Mu`(~t0;lJA_g$V9AzJJ^0Cs}m9uK`+
z1)_x5p5|?Fh5%`g3N!yq5?sC2c;Wueb~`|Qq+2xSep_&4j`8qo<_c3nq=#G4Euc1U
z0E!KiX6K_EgQ`51Xy$Jy37$vodPoY1T``aMX!gEMj%{@3-aeO1tdFksw3LT0IUZoC
zi7>#4HIuD8P6gnOSK|Pws!675Lp?#F8Mnq=TOXCl8Bnr|+6g%dPYwCP3;fn2k;+2J
zSWXhyDHPxutDC|2)XEZ;RyqKwviECp8{fBG@e>b{Zwjb+w~o*9t?<K{X+J>~ga&VA
zFittlxk3_cbiW(EjE1Un>!8QYF@ze2aG>_jYj;YlnjEUk*>YAeAyUMT{aqo39_YIO
z<71~bs`j8JRFWhX8?UFM{!mzGo(|v^jqPkqa`;1Jabpt>TR8_JCjU6M8lhJ~f~D+_
z3>*dlLUOIoA+2Geq#oErRpI`RW2lycTE|(}A5PaFu`!tw{b029%xL*T%J-kBku;Zn
z(sI#saq0RQ7f<++(hhmlY172n-75yLmnl?CT(`eu&8RGnUIZzF3^tK`7sVEp^rUF*
z!6kxBK?v0XkSxo<*wfAmtWL=If`}E#-ft=@`N5#a<yU1-u1zN7lVvV#I6Y(AQA56>
zeG{l<{>~oOw<!+H!tX08f=DSS8v}XpM4=R}htvHYTWgerN(XRD^ODI)h1LH`I*t)C
zliC)8_Q(NV(!Klp!~c5gei4W-X{v0)|Ldc6{(2ZrCf_^>A7XUy0||!>h%D-<aCJQY
z{n_0TuvgD=SghUv(I_2BVL?w06c&W*{7<)6)BidmPu7E=#&R|nMA$eRej+7G0F_Fj
z*0ws8ANi2}K-q$<OhGS5OL<h=V|p-BZ&V5=h##X9L2?4cX@zLQoX2}#=&@Z}g*^2k
z@GfvtjxT`^a3ebunxSGpdnQ2mDD%k_fMT%}t*IC_t+tcsxaIIG3P2#Hl`_eiXrZ>4
zXLhN?wBlZW@=gvLen?j3Vgj3;g+}o~7wp;zLz7c&3d=L~l5hMD_ssE{#`!Buu}pU$
zGNXZ14caQsbFVuz&7*tu3|wHL;$^tALo`B4nB&icNU8;5*be}lg=&Zl5AKWF*<V?4
z*2y$YqSwV>td^CxM;dFTEPpe3u&ScSiMlg}-XtZv_-6mg_|%Nn0|7wpkz}7{5f;sb
za|nxyN05PGLkH+SkEW5WnQ3T&VZYQ%N{Xqq=`ypAYfQ(E$G@b}Nuhhz*|s&u(-+Te
z#K#+Wd}^v`#Seoe3I0ImW_2idhO4q1&nG$mINV*r`fi%Naf(axx-&K;it{SUM##l-
zc*vMj<YF}yPC>U&hlofBYfC+uxMILQUH$3$G6Z=yYoJe|sA@T*iw4Z!N7*$kD@Cnm
z<`U3b=|fO{L;g-e)X-fe?VkJlqIfHer&rM+T9}mZj-&~ek(eJ<o6*-%r-IWTW3+<%
z+x~8Y_P`#H5E9NSGGmmR9{;FGDHF};*ork;_4b641euB&F&fj3K@`uT=*-b^p;fv`
zBnbhm{CdV#v)Ut|*0XfA$fO<U&ym*foyBE6dR${BysjcSP*p+bD$8Avx4#7&x9FQ;
zD(aGmDY#blJ_Vbq<-0x$R8jg!m;}l*Hm%%2ix;W2gY3F$$2`%y-*EUc${=^q5;Rd>
zK@q7v(Zo0=eu|_F(7tEx&lJ(~Gl*N7J`}+P$lql!)qZu8$ZbRBr~$CrYI<WcIb;94
zD(2TVa_#D4<dVxeD+8Hsb9|?r;&>owjAaEKM(y$riQjE?5R?Z!S~#O?h{Jc}mPm9E
z=yAKN+^<<@MGE~a=YB3RSRC1!w{H(|ElU8}ZKUXF1#&jWCw+f!RFywVU76lJAX4JJ
z&}s*g5{&b>qkX*@vyi4UJ5^2CY>RHae-zbKl*0@|gIQ7Ii;H}xPjr4eGrkuR52fE>
zd5lZMbHh$-wtDrv!n?-+nopj+?&VlvnN;8Kw?CyCCb?HGZik7jGuG*qv3^wXs6b`m
zrt~a_)#6h`&0Mvixq&Q`D(#FJf{h?_hR1{m(lUGtw{b_>PRhf&;Z_5#3|Cnwe--7a
zq=S+DR0B(tHUlQ2p>InbZS@C<IN`A8zD09A%O24)<~guhKbPEQYW)=J1FU~bw5m>K
zSCu6Wz*D<@5X(R=?YCtcmX{vjHh4G1eeZLZ9wM{#esG-Cmk#yq{~#o8g;+h)W*Y%~
zFV<~FNRiwN&E^4oVa~sSh;RTzn7Gg|{~+0TYSI-1hOP7({p)iQisQdHaTD5s?`&E_
zmZ~(>ASk!zr$~4oQ1jI_3Y0lK+2>a*av!5$T->^lcX~`k181%Hcz<GFfxgZdcAZC@
zdLl4`VCZ4%UiPfW-5?RAonNvsd=goLbN29AhKNJvP?a5a7D)S@<@dX*X#%27DzczE
ziDvV1d6CsoNm!q;fMEph1sUtP(7<sqaDp-?4}cT2&u^j5YO`l~fG$`t&w<QPdq69x
zI%c{~@#oglMPNvkff15%3OKWR_`{rye03O2<HH79LMn{kv?(e~i$YHMt?TD7)ZYxB
z6df5T+aIQX1|})I-->i7RmbMLHG(Z%^<_NCTB4JVKc$CU8LO<sl9=Df8jeEgoYT$?
zoYF`K%+Q=G=E=IaR(Q8>*DZGIheE~J0j01YX*0^4B@m0RzCUAz$o7va%ajYtDF3_G
zKAL<{Ka{-bqk!rPo-twk0J&?CVM*B6jQn^LW7B7tC<esjQe}KY2vg_8C_>zOI%;E6
zkhe<t*tbtxZ8C&oA{TZVcu0Gg5m&Dj;)0}DRF@Ov`?V7G#Tw%YR4yuA$I#2xe!F}y
zN#)bBLW<?0j%MN{wXi9wEru6eER_f<q)wI%07@qbZ&Z$L^Ez%0<pxUmb7EnYO^OCO
z%Btaw?&Xj?>RlZrY>G}q{q5_Pim5H*Vksb?3Hx_v?#v%iqMvv2x>vxF{8Re9h`c(*
zTlVEo0(iBWqRPxAx9v&f8yX<+JmWn6{?izNQ3)&3SvhUE&KdD=73%gW$>q~Fzxqe-
z3kyFxzgU$FX@c9ZlGeKHK_J|eXgud?fG?h~_A4#7NT`=DFN7wDaqg_C<VLb39l^E!
zZ-c+r*!HVbIl$*6PL+xwciooV=?#!GATB$6R>i&kUpfEx&t#SllIretC{V^FUnlkA
zsq?r<hFw?g_gh#h?bB2A(?3SZ@e;Yppg#Ejz~+R7AkH1yQBU%~fK>&^?!K>o<=QEg
zK9H{%Vl`6JQr}dFQixqIQdKLD+(lYdA0j_6>r@l^h5Ib2CcLa&s0fPD<yDiS`(Ou#
zU&(N-Q;N29heiqEq<-r(AHsrvL`Tzo@ix^eFq|Hw6}tm^@ry~r^Hej<irXRbkAGHU
z_aJQ6zZcz$0C2&vuWgd?B>JWMV`yQML4~lo)W(koo6s%Fx|=ViHv3&7kVmP3OYNYq
zT)u@>=3wQ8TY&pZ2CB)FLR6tSK?>8GR!~o^*!yxsN+l!vC`sFQVijQ>FjOg}Ay+t~
z@>Ds7l<$Qb0d-V5^)f7ctD)IeJ>$xUkNG}Hi5aTT!qO{2h_`i*6Pq>IX$^;6$n-K$
z2@yjdu}k}u4&Up|p5-3!OE2aIlKahXo43OGas%=LnC~v&h}tnEbiw<eZ{*gbI)a0m
z-%Sa)SV$~Sq2aiy7;%>>L@(fPWFC}7=dvA}ft%)Tqr!9v?|f_NVZql_8c)1VIWSwL
z-T~#^)H7@<X+fW+-PKl$syt=+%B6}vw<-9KC-)CQr8A-5ukD5!;|8IBSqJW&22y{p
zX`)y}(c>a0ZreFbbqbv;U8L;B?*0u2+2>M7PD%b0<Wbac?52z10^dtYM23jS2B}$I
z&93%h<?eJy4A5Ns!d4*ywI~TuALu>HgEsUqffR)mLR&NUwN+9-IlI*4hshsYx+8R|
z57=nVskHY1tJ0Y=k2+|d*Pp%pth4K`?Uc*_17f3la1o4T^BcD#A{~b}crSCNgdei$
z4LZ&Sor^E-BN^$Eopwwc>~igy(kB=-8Q$i_nOv72*CE-8-LAA#t={tXPR?=iG?N3}
zH}^pBB`pWt+PHHT=EIp)jSD36Zmy<d)_~)uJfdfnTLRFM0p0$3n+fuljsquA3^(Ol
zH@{7>jo4K?P^?7QJ*2l9N}DE1^_#{si{t{E%i`9<e)GartwmuoP&I*+*Ez}mD&kV~
z%tX5_;tsRGz6aWM2+^(<Tli1;M_$BqkKN(FiG)35Cc4#aU--5=bv(%2{1Y}|#t}Ek
z2<7h|Y?6`VQ;Fik+Y(C^x@?+j$Z+}B3M1YkySnu|FDbbCMmzd}#*%kH-o-d++}z`>
zzvGhUk?<?=LFO{;{$F$IdMm`R`+)-m)LbrwDkemq!_>VS`?EUGOZ%ow$zJV1H$!yU
zUU!dABYV5c2qK%Zir3zU4VEl%)a4YSOvPtxBY~ydxl5i(@;ini+}e%<D6~@LqM~Lg
zxp*!;qfBuW^RVA~Y{KTtT>K;tu>;ur-u7y|`q6lWe>@ot&QTAS9X_ArJP2BZi=RnA
zY_%^r&P#O%<ZqVJFPI)hJppo3(Ad*P_9t95HuU2bDzhSC{3<ad(Z<xKKt*ESk0cLV
zzUjFktqE5&Byj?_gos3khI<ZH`zzRf>ub-qUD{KJ^tWcEqi5zJ-1#L_xzp-N!<g>t
zbNGJ5E4!ruJDmY)e13+d>c`_#w?z?F=*b8`7<5fSaGuA+`@V$O`#lky@~SgCMSDpJ
zdkXNa1x};1%VroE7wDk@<j8h!@khMxIk?mPtG(0l40vGh9~KJ(Isd1&3zP6#JEg6y
z@KC+v*YjPbD;t>S00PMU4FMGHh5&A~lOTY$8!F<diOH+4U6{+icuVz`=6DUDTpA!I
zDEYS|GYvbQZsLh-m23U-5)st8IZRd&5WTY7UYm~}t~5MGRkk2RwNcni===^u|NHPg
zvkn0$;O2N#md9c~&0cA`KkOAJHT2sH8x;eLkqw6qAGiXmh}*|a`LSTh{KpboFG_iw
z6?p<;l<K(SQ1H~Mw!PYbQ}QorwIhqD(Z~s&X_kPG++5FkgB{&v+5t(9)UMN4si9x&
zA@e6e=vBelDu(FEX3h{Fq<!YYx}RYEu5?X$%S)RqVc6TuP(8C7ZTJfi00j*%*i;*1
z5sC2M3-f=y(&eqrkJKfe?Aik~;33tCGp8HSH~;1G{r#7MkG3_KgmcB%_b=~(?w$fR
zPW7X*<1l*H0sMYD>`g{8U1+re>|AqOdr^KzA0XrSfy)ltcLdm)3W>l2Z&Sp9EFUW7
z=>NwA@CWLlEJ$WJtLDdLa%&Hafi2q_C1!+WS#ad|CAx?xQcHYG)CTB~*sMj?Z!tv!
zCctm!@FQP)&S;>4iYbaIFdfJN5W!>pcF3|rJ(n{>psVzF?bPhy7+TSjgg?G@=PW>t
zb#y>n_KH2|N`aevM@3Qo?Pqsy1k8LS$UMZdKS|t~V=6H?WWAQ)D_~^Enj}iX?8jTo
zjYdyg6cACq#63OTgstiV9MKdq^Sv%mUg>@;QMYRAXN!3Gqw}?I&swB&TMkLzona+h
zs!4VtrtCqx+RW>tAW3d7hYh(H05WG12<E`j*@T&o82p&DBzxl|)2SGc<GcCwGVPzc
z&ob{ueuvez4Gn8PNu!Ag?Nl?Zznkv*H1v00VYz=+r27Ty;^LcD1HrMNp`N;8oV(>}
zB%Yxpos3~uE<%zok+qVySW(ZV0LklADNpMXfv6S#%qz(5B^8bYCWC5VB5V8_F4j8>
z$Z32&-|#nnbTbT!-k-lBQ79mu7IIr>R#bmVV?uzW;hr~u?U#~AfH@*lU*Df=;^pkE
z93Z>(l2RNd+1!=uo)5f(-x{t9{B7-?ci$VK+%a_iKns&y80~NbFi?8wMka{j@ylEF
zYchu(LfiLO-V6u#Zj1XUuuRnFyeBC@qB2HE!bZzE%p<E-pk!}Zt1(2wHI7UGQr@g<
zNv+hpD^&5Q^*CCG!NZQDfK^gcxLmA(YQE%1GULg_5}G9y8D-C@o`VRGO{{Z?+WkLu
zSiCSbY2(Q?O^98`<q1i<x+9wob&4F*;zjclXctX(eu?@e*<H%My>ln;nyTrk%qpq@
zt%9><Jp)I!a6kD9TF`%a@b+2<Jg5YFLyuhn1aT19;+`IqAAh0K|Fq73)67b&?+8^+
zF5($Fy^@OETG+(x)f>5cOfiE#)B@kX-z3>EMJaA6)(^QavIzk<5d(1zub4Ra1tMN{
zwO!D3MUG`Q3&@3o>{-8MVt1e-B31WQx0-m!J;LkP9c&a~qK{%fUq1n|h`5n2ymt*w
z5n<b&V6j2tP4~BrONzZCPp$l?KCzK<1qZ!zuN8RiHTWy{&yol@5hK`fer|LH>*Zb~
zyWk+@tobWAx1YR_UfL?UO~BOtjlhl`5QD_K`Z=1woK7*~B!V}G{e72)@0cpav@2rQ
zx&`5!7+*>M9m>peMhk~dD?AZVfL}O5FNzu=p6b<ci{9)Ci$Y{JSQ`=Q^|##&zqjzJ
zrwlK@%EMQh2ACtW@!d=SCJ@Ay4J!iB?jU(?US8U8y5MwhKhfC_dc(UV`00D&)^l3&
z<x2Y(4hnvcy@`ch$6T~<nKHxMgP9AcO_Er0QS|KjhkKV0{-=rC-@~Lgj1OgkuatoD
z3cc7u{HoY)iuByA{#*6m15C|$orUJIaW{^EV`K*+&yb+!jE7aNBPg7Z9#>{{lm#*y
ziJkIE3+w@&hgstgj3t-HY#u@8rzgvrjLhEp0IY)6^9lWKh*VJpKtZNtHX_@!NTzIp
zCPWZ_ByF~BkRj@U9S64McM#w8s)zmPLko@Z&%1v7uea6@Ku%G7;|u>Al-YeCN0X(1
ztS?>4B@@8WYL@}beEXyx4Dt8c`SZg;Xx|=b@bUi_%*;Z9nFpbH1DCe(&-Md-TO3I-
zUolbIi|!*)=D!^CzgGr;QF;!%E71_lj0Ey6GtYlU62O5dGZpe67Kj1V!}zwK8I0l+
z#YGjy$i3X?$P|EQGC5R@Sh$+hu%Be&>79?t@GoNQ--*sL)hk>UENeHFj>z`z+eDi-
zEzAHr-%B$(jb_u$ofN|+{VvAm&(kO6n2iN+Y2BTmnV`Y0diT>_H`4RVUbn_RY(E)4
z`KZ()dUgVy9P!}M6wMrOSMYnc$Z-<L62YJM;k`;s$FNL7etH&HH1Xd4BPUZq4dgsl
zZ|VGa{85Fdm6thP{hf0>>R9NMTI_+t2b8UqV+OT~HM80`uZia!x%9Q0+i~Jv&q1yk
z#lpGf9<3ouTUN%HJ(v&9nPzuh6i@%`7%^nGz+4uR<YhcK&P&qL*&wQmgIdj6-!m$_
z@Ikw437Tr%$w98<Z-&3xgM!Wq#kEMQ)Tj_3#j#<m^NQii3$C1NZ;79~--YmVn^3Qv
zEv5!bX;_uw2z}^;U&MoLy_*FY1Q-|dr8Z;iBV^#M=?4Ue2_6tfC5#!%XI*4M7`uDU
zJ>VpSEWS9S=xGV?*DW)aFYYS@sc?dfv|tAP*bjA^gGZ+Ibw7nYpUDQs21u)3<^vkq
zi;=)L=0dzkJDNvh%ev*5vWO25oj%EOef$;UYf|g#NpnB~Am=0?c!r_p*`qw(BANT2
zY83U`)$`L?XO?bAb*Pe3%pZ4hHN#Wk;$66ij$Gla-C^Sl1th?PQ?rx5SSgr2sHK|i
ziMR4{A=TxI*Vsq`GlO$#9DJ&hS`CnIiSn4ivVy_zs{6!`i(ZY9;#mWl#5}_^b_KnJ
zW_Gtp30Ju3bLdFcZ2U?b$Mh==Y^3sjw=E?a+lUCZp_=mA*+rz^K`7aaz1Q}VERTz<
z<)0hrZ0D+hw;fcCS#%GV4ML)#3)J_wJ|6@?Wrv3b&NjCadMF^XBGibl)<8b`<}Rhh
zyzXym6+iG+kmToVt*pxWCq?mdC(*ct34qpdL#5h37K|{m?-e4Ep6G}pg*UFJ<7^{^
z(yX3S4YX=TfBGKSbziW8mhtJAI-jY**viJwTsDc_16C|wj3xM0N2G~^jpY%J7Fd;f
z31s{juTyc=le5<q!ri}IiuT^O9d68`WSAF+R%DUEE60v~x^|Ecnt$`<%Zp%)i+vNF
zct)O1+%nLVcb7+C{kON`?|&5U#h9cy?lfc{{&$uNJa@--ZoltxfvjH<Og!SMiQKuM
zRwQR-A-_U6{On9^e#X6f$!Uc3sH|gim#@$mc)`7MSqGlIXW6*eO0|TVl!z`(3~F$>
zs$wo)w`?Z;@dCa@4;9|!hO^s&%_}+d33O#4soZtOGZnz!r?|2z{mM>b$fU|P5t~1K
zRU1{AGbb2D_jm4czu3{-aw6n$@53T5@k@etfW4u0ji;CvU;|_@91h1R0%;W+TdC3=
z8R$5}f8kNQ=Hgd6+BwADJgGro9fP-1*~R70q@-c`XVA_@cn=T@+OV(R>0_5k;<APh
zo7hPRZ*s7Y$-b9A^<XDfH!s{taw~*n&pM5J7$#xUjVJ?@e_zV&SFU$Ft94rmJZob*
zi<Pvq2lkS;y(2-NKwUrn!`wb1YrA!V^i4yTzo<2uLG76x_?s<@J~XVG^REw96oe8)
zex<XsWJ2#Fst0}U=Ft4Pkw`H*i37mhOB*5pJT%J&O;T5S0fVcrnmxpdS}7$L3Vrgg
zwDS{YflbjKNUxNG8vWNV{DL1vPJ>#2Bd)IUk1hOXcKEfoRpS7Pr+!W<6o}MQPm-qe
znDJJl{yPUIpWS9n+vTm>w*kuGLu9SA-`zf)&i`A#_6ICfO|w0nr!X9_%-cBV0mp#q
zD4gqDiRSDH((zVvklP%3Lz+6Gl>hSf?xP&G0KJh@zi|B~fHJ8Lk)TXeiMPZo>o0oL
zN$V#)8Z$Du60Wm9|0y&Pm}Z|1Y_@gR6Qt!4FVe)}DTrq*q-zFaIDf@x%^tHndtJ~s
zZET?DXKTb@>pifoQT%mbNQY6$4SLz4D!oVEo_dG+s&xYtEhHIQ<g~_e1{t{)Y3QfB
zWDy0n{Zg1t@%zFF`Q5C8dhsNwYU`xn<8UDpW3F>aGJp=cXR4{Ut^H==R0Vnk61cYX
zxuw7vI!KASTumBi(}wL%y9r$Qv1z)IljKzGDH?K!mfC^x&u2*_kZx6qcjZuyp4CTa
zpSgckyDqPb9?5|s+CIQ)KOM0=IScLeIot!MkDlIY*$Iks$BHNYobE*nsMf&tI-8;I
zNdmK#WJeYpFW@P@3lLw`+!l0i;8bi7aqU#U9cYVr4S6?uNT7Gmx{W=!dNECZr7s}Y
zCJEBlm%PvxWOhOZyd4{%TN&RZ?I8EKfC2i?^o0(yy9-QnOB##TD|tis&Vl{wDW(+{
z1MnMQmI|0Br1r`whL9FdzG=|reDVX+vrGe;i&tu@<Y{F#hK6ia!0Z;lY+~pPw?eA{
z-E2op2qQj|*+GG%U~VN8Zw^x1lew(S&UnmOMDNzsktS_fOaBxGF_B0{QZHvtwg-%)
zIWVh6bf{+D-jo-9_EWhi>%a3>C;6~@hfWIigE*07{feJVvqi=8!uRI_>sOZ}|4U;+
zXOLZO8q^<kt>3iI-R&`yL)pR030`jQQnJW0ccX~zne$wsZW|BDPSEoh6Hp|+Q&O2F
zd(J>@6nYEO48tzZpF$A-6^`Woux|?+_)%7f$N>RB8W3~4rG3&xGXRT87q5Rm$%>*)
zW`9EA+Wnlo!OnyHg2pb08vDDiKfwJF#>=RJx$*RN<!7>!$>D$YQpN{cK_85^Vrl!8
zsls$EfNfSM$)O4z6G_da3t~6FVA7^}l3{a8qr*yLn>20^iC~NneAr;PwXFEof$T-p
z$_|YaV|?fZIRz&vX*tu0zgz^;`AJgN!bObF?uxRCvei<=2njwlFFj6b9180n9DYW|
zI?LFVW`F|3O5kt1aL0dQkcMs=62xG&&tci@r6|_SFn8@y9nzl6+8&(`8gx!DRbh78
zrSf)pp3HsrWRs-kjX#>J3^1G$E-~0VJj!0WK9<$9#;XD^Ab>g~6kvms%AXWEiJ!~q
zO0fMrLI}ITA1g&|&hAD^#>myU?EvIhR4pyPV)rwNL3sPFvF>hjhfYiw86V7RUh2cX
z4h}zebRH8pc1OD?C@L(W&d$XQn6?OkELt`<<ARjtm@-`!@JQg+z4d~>=Y17%Xzz@)
z;6Dmo8r>ZC2%gE#&JiK2jQpB{yLm?fx!DJkES207kskdwEZQ<hx<7z+Ny5$l0G0ie
zl?$X2Dv$Drs$3z<)3<zKqfi)4eK>?$2-2?DGtOzxT?rnU!q9?i=b_!^U-gb>Z@z^`
zA&fm#cHIcDr_IR0OqTCR#~w$hI!L~I|FCKokgVGF)GltBQN^4n=Ds{TlAt$_dY}T5
zyWp?J3F-}ZF!ydH51y&=c0A_<=?YbIP>{8Fj8oy(Mm6N(c70vBjOTC^y{qiNS<oPc
zgT(hmMZ9Cbzca+~4Nd-Y_T8cXp9)m<gnniIo3pO}x8q7C<`oHs{-k%f=;fbb{NE{1
z<`$`m+s3QsPj9Pg6S)P*f91|Ua@RIBSzWcGs=ZPp8E{z@jFaI#AfWUb|I)aFl9W>Z
z=buTR_}a|7)Mp0v=eC{u_o*?-**31;`85lGZA5=CN9g|cn9F}om-NeOmu1FvPws;{
zgL@(cd)eH3NgV&Kff0bXssL0C=-()@0c;Iv?niBD(Yy&IdfOgleVC-sUT=j!1)b`S
zoUGiKHo)By++BVgP)*oVQ<2&|HUJby8Dv7)$T$_P0Q{AobKbVc;D+tbxCYzHATFXQ
zY-^FZotGxtNO@_tL=~a2nfyHV38p(PK{v8M9mqz4wUpzL*sU12ruT^xM`I{}fTyzE
zHAM%tc98mrs^Qb@S!V|rm?5;(SM6U~3E|)NZTlbS%$*_FYGw5@m}Fv8+Qvli-k5b`
zx6<jjshh8++I-vXJjQoW90w}H@e|2IYko`1rEx?Hd?uZB(XQLdah62Eg*EuyvwYNE
zLD<o@YWq+>8L%r)VIkdb7Kcm{BpZ1ZMgXu}<o<P2)JMG(ow$c?me1X;9{WV%>Z|VE
z>yRE#*HEl^JT}U@1?CX%D^ERZF}%un{5t0+_N60xVMq5~OFeq@K;84c-a>n69b3$;
znjXRIkb;<Gh|YBB6gu1UVpjsygMAMYkmLsh;pbf!6^oG(*4OVhaTA@QMhE$^15jgk
zr1w><<lNhe@tVl*_(#ZM=lpbM9N%QudG*As!Ao<PE;Y+Jv})!|hq9T*n|CR->rJk-
zOD;B_`3NWrLN4y=bQIHN;^wo8r<C3*@H8lcwd-i}h1uv^;~ocpmgQW^S@+@x&>1On
z_MRcT0E)<9nb~jGWf>%8>8yAvqlMk<!nM~I1R8lSilwweJHk!^M%>s<RGbuyZ&R!o
zVVl2wK5I&+asNqNZM>UTDxZ{HnzqN|a}kXWa3|&>TS%D2Q?;@{4Du`an!p5BGcgl=
z30eNbYh!5tqM?;~6y_we`k>+Ft-izMnF=F@TdyR)t765JlInZL;>1h)TP?>|fwu#P
zuKP)G@4B}K98+YFi8*{*gXbBCU7j^@mTY{O<byg&o9ZOxh8Bushu7st!j|0-S^#zB
zhcy|8H<Qs0AUI5IIa}Q{*J7^;P?u8QO*Tjx@18jtbgc*@pO82vqgc7dY&s;q$$6R6
zeSKVw-wnHPKlGmJ!`EM=HxeXOv*M)1)RGii!}KYkNn-7bW_0=&f@B@<yGBxrIM0s!
z2an*G<T<FpBrG6HS@npi58(nkF-Mxz$vm_#gA^*<^E@-Xky|-d=G8M%@#B2)I&P;I
z(1*2>_ErU0&hd=NThD#wVE<Z9T{afF<i&nb<5o*BYW7LUKoHwvnyh)gYvt3t^Sv2o
zZ@3h^<I;`bp-#Kizr41j-+G*B1$DhMy;7Ik>|RguL4UhhT2{B9fl~WP&cf|--u0mj
z((GTjU6l;p_?i70tB$+(cS!)#lw-?cE`Xa(Nq&S`%$BlkN+)UKM#C!`1#e1ruesN)
zgNR-?4`Q7V8@=W?q{n!XgiAsgZJF}f>mC`<<<T1V3~ei;X8s!k4I6p^j+dnFaFppK
z4ZE(<Fk?_Ik0w>IQm21H{SVmOT6)}3ykfgTwRJi`5)BmE>{@di9NX=DN$L|e>u~be
zbLR|EXl{QKgxi*CQ`q4*9q$5_+8rrZ^0UMQO<v#7&&u~Qna^4hr7TE+&>+DCn!1#>
zf&h*GiqJ3w7pVtxwgD8|{8^a4&kx;h2IAAEi8M4T;#g9t!I9Yiv{?-29|#8E?zi*1
zm+9{)zw^qvo}`j}_JrrJ(Ejhgs-8Ti|ELWy@>LTg&_fhL<_h@F>YeBR>(~Lva#=ag
z*{H$mz^v$YOSQ$;k!%?$ZR;hq`w;&5X7U&rMaxQqEFdk}Cbwj&g(>*>7DvAx8!{Kq
z*v_o;%rI`3y!fw&Mb;>8<u1zjTR5ug!qSJ_l5cVxp{HvM&)>JwcU=6QMLg?eDQ^?I
zNr-uWD0h@JA$L*EeEQUcW>e`(=8ckAX~heOr89WzPcES=Rt;O`c%hw}{ztL|gB$qp
z<=?bos7Voqe4JP3oOf=d)z@2hZr^SAvdV9RfjV`K(kFiHe(ZK$EPaD2BF7B7cg=K!
zr6dJ9Ld(*;cjqb=ld}-m)#xmn-a*6!f<4|Uec(}elAxD{UO+0*-L0Lvzmh#SSM_i_
zW9Xc470_`Z-@flLZdsdOne9q>W`{JzLG0aO1FI|Mr;E%ZMyu>AT=XU(ww6o~GAGRk
zJQu&R@c+QhEDWg47%eox?On$FH*K!fnk}pmm$Un&(`6mXSG=Nm17*4F`wX0mk}t)z
zib^yihPXo)r`6uqSWNd%F%Cvuh~^%=e9LNJ!s*nGDC&>vAd&<&UE3vTFyR))e<=o5
z!87wnO!rA!>`DLS%7<&68-6zU{fqIM+P6@V?@i0Hdkj?%JDR34UD2d&%z!jc3)=>U
zCS`=+$J2u_>{^d;7|F3W8cEHHi&6sdk=hW;4zo3D&}P~$F_pp}7QH!qH#yGgC#U~4
z>5!1@8>$Jx3_9*C1-)|+d*<LWo;RUoTZFiHNsodT!G{7(*uhf@*t3F<HD(yqs%Shc
zz_Mq&Q=+%bt*I!bab=(05`7phvGh{jBPQ#7MD_4nz`=-M@ZIn1{gIA@0Qk&RXzxs}
z0ZMN@|HNje&9@-h(Lr7A(GQbpMj$C{xamh2WHPHu^+|N+YK0^o&W)bj95}C8E?WE6
ztELOPCc9GealYdy;{alx6#oo2r`TDw&o^d%Y;2F9`KRzAla*ne67cvg+rO@c!SwFG
z1o`qp*42+By=n6U=tdOd&%7@L3(g9?JN5P23T4W4d|Z{@8KonZT#V6`*9#*izX;7V
z2Aj0D_EO=O15xJ!6Wn|5I?aV-+PEMSLGS6Vo}})wongI7ymgXxOx}C;mP|dT?7|pM
zZO-dUJK;lk_^QdrEhoC~o>fqm-{<lu{LAfTbiS8m#&udYm$tWZ4z^at)9m5tl?T~l
z60;PZa5ZIM!b<~sN~gty#Ksx$%a-4yj7N(T0&Qd&@%B?-*g7wlUa7Ee5QOLH#Ucl;
zN`IDNry0F2n(+OP-8c7j7b3b%*%nY-{mtPVJfW|8-tf~P{QbS>!gB)uc43jndh%$#
z6DVE%ba#fh)MIKh*^Iy~9EMGNvv6ZC###&=nAyQ@Wsvk;jPc89w`C1q9wnr*5<knI
zSt)M}oLJm2bn&u7Pr-#~&z>=g)CMb#Z~wQ)Zdy&PI^lhE8zZ@2j>D={p3-@5llSEB
zJQXS6Mu|w<51Z@|3HDf#eg))M*~0Q^zIeBNrjHY`-Ceor3CFYSM<#fYQte{x_-T9Q
zTou<N^2yVgEQ0PS5@N|BeHwzP&z;@~49s%5&D={=Ajqpnr%i;rU1jI8YHDImbgM&H
z7pCeA6!s5AbNQv-X+Fe0@6eH6i_dIy-5#LuJJiC?cNCbWzpWB(q+HdF%)Q6sVFVtN
zJE-&snZk7Uux`HwsMOI}uU?T*N)Eb?h>za#_83s~Tw>K$JTf}kPor}}@5b!xY2MP?
z_Y+Gloi-x#aHi!4Icy<VQ|WHr3ER@v&#|!vJPYFr@Ug%zr8cOwWq;HiQacMiF@eH%
zBZY<882Jq{6qD+zpXgXg{Jx0uI=`-(MA@iYTIfYEU?1ctwT+tYsi-Y~mby4VEY_T}
zx=HL^S$tIGrdQaa9l;Zg>8V}3(g1O|0$I>mUZ;tj-Y{L;!ZO>V&EQXN=MinIDA@}p
zym)}8z7N07#lG<cf-0riDWU&qh=w`HFyZx$#h+yP`YzAK!79kfTyz&(!Q83vtmm&t
z2V12elQ+{wAZQqi<uU|56FBz`<aL~wYj`WYd7><#dtk}+Def%e1R|v?sw5XKASA3M
z4gB+&X$~3zj`+G|M=}@7BReQ)<cn&p@tSw;yz+$zs9Cl=E8FRn$?IXOi}t3Ld@GMW
zJ~N9+K}_<d4H0v2r`$etGpwYz^%UrN38GEjK%x;B?6@nkLd-u1TjE9sH}k`6*0YQ;
zlFViKPZKdLK|Ps!C6XZ1wo%mH0R;_GVi&J*Mwm-c-_*sA%bS{@E6{J>OGY5y)mZrQ
zuPs$Kv@m!@^{>?KjvhB<LS^m>L(<E(W)Hrzba4~*qPwgp*xp7LnlDK(di=qXFIVRW
zYeVL`iW_sm>g)LYO*gDa4`hA%hiJ*#aTaxnjQ3S5@7>Q>Cz2<&Xr85Njm&Eg$-tbg
zD2wz+<Z<h5PlM`vf1r^XFLj3Ue@^!r<t$~^mHGnzq3m2WE%H+zEuyx!wG=TaDyX&L
zcp)pML-Ep#^Rh&5N*k2uGdQgpY3w77U-wXKz|x;E$$%(#sx3joDY8^_{?*UV)4_6|
z+-x8=_iH^;5(kL}HpF(6`SclvFHp|X_UJb%`bq@s=|1r=3lF|eyxVKjL_;QMPVqz^
zg06(@X{JWIx>%3XtaK;ACh^#vpw%XcZvJGf*j;J7OV*4S{ch#kfk;yTG@Cs7xOmR9
zT9kI;<Lb0(5H|go_No8b7LzI(7~<mmw6;LfkNC)g|M^Ql|3k3~G^z-zrqln8NN?u>
zk#oTP<8=F>DBwpOy{cbjOb-5EsvVMuzB^qP^@E=r&$KPu@i_WaRk)3{^xEGJg+Gsv
zOqq>Ccqj)6Y(_gR{cr@?=`bhY1aT<P>CZE=3ULs8)4N@NMXJF3T=>TH+rB~3lsvl!
zmw>?o?@F*~LrgQI$uI|7^h$3ZF)|Wop$GSgnRbL3zh+~!a7e{)DqHF}v-;Kx%)^33
z&yD<N0R!D7IU_klFov?ENaK*{eg5%}o6%r&w_oZlQt}HxX_S8dj^&W8;C#;~QS#vn
zQe;ItA;5%@bQZuGtUYp@pa00x)sgErpT3S~{`wx2N@ISE;%j=|lYp`RyK*#928{dZ
zFJs-HKC`3{$VMjU$Ti$<(aisxGf2-R4amG%Ay~2Tvy(>9+le!u)q^ex4=1G9u!-vh
zY9T|ARukuWm9)6$S~WS!XvUiQ%3PXGW+{fk$K9UZ6)h>eQEO1Dt7`jYwrp{e)u;hx
zu9@RjWh*57_|EyFkch!B?r&pWMq9P}MiCSdqsylu=Zm%9xjHEYs`?!MkT$e>Z6yqX
zf17niMPnwozf72)&@7vFrz!-uL3X-3F|*v!Vt@ajJ3Cv71;apLWx4a_OPetWzu}MZ
z!zntV*V(t$o}`@8WlHXrsvwRyJBWLozq=LOJy0=J;kBddHBpVJ9ihclRmc_1eh_b|
znj_T-5%TQ13%+&4C_F?>OR6{{Vq*2Z{gpeQAs&s37AkG<E1_8~n$fBvyjyZK{(jnm
zi(}VA3sx=24hb8*F2QJg|F*^28!zYg@e0c@(IP%+Sp`TBxHvdS2Kly1nI@#%dAm`z
z6uOh_ez)HiP@me|Jm`{FP(_8)0X@14Vj1Nl-K-RF_}#|yvsC=B61?RkXSnP)u!Dne
zZ7m;aU*1|-9_LXopU(i!#&?wL23E;bsdi>eTs^IV4dKvq0#<+R!e-1{hG<SDolX)V
z9uiG_meR`BJv>;YpkD94i4ywi_;_S0P{byZdP`E+G+|@x`=b1cK5f{tT&et{9G$7~
z%T>H{lb49$rT3&XvpXp%3nbs4yl&Vs`XN>&z|8b1`f7R>biS9Rns<B4^PdF|Hwf9V
zZI|)kBk~j}u03Ko{gEw>Bjep;w?|FXa0a>Pt3kLM3}XHhwM<2J5Kgr?&c0`H&z7I|
zCw{p<a-oNO|MHN_E`r7rPc_QI6AWW_(hm>2Aa61kUMZ%qo!1!#+X)Pep4?}P={@zt
zbU<@MJk}wj@$#L1ik@JTebe%K-S^g9SAvvN4SB7=hy^HX7C_M&_>QklN^`MFyfpgw
zXQu*A)QI4G$Ors1gKUuc>^lW^E#;(rJ-Ic8kDmhEVd1KZS7yK6T}wAB|IO&Vt)n6z
zgLsGHEkBsZmkGFJYxsuScsDL|u<6ZV*<}+;6!VHtIap`iGo%QUJgeEpFC3Wm!uyS}
z`vi6et^rXv$vx8`H?6?df`NndsGA>h9-H_L^btS9&kGiJ@C|5WSJk*w@Z~%Y)P*9V
zNv5{Fdqr0nY8NId(m<vYQQx%c5_H~l>HKLs)7W^|3RUCq>Zn0{T%-#K*4Qoa7z(i4
ztF7od<X_(?@wRxSvo>sFQ%&BIuWguETV7^TZYzYc3v;3nD!ZQ4D9;KlkXXjpMC=u2
z`{aLu?&Rh;WZFbL;<5z%h;5S|p>J`b!1j$oQml%Zlm(fS*k&T-T>gYW^dX^{_m<=1
z^E`_sv#sCb?Gp~jmc;wDUOCK{LX1i%(M&V_ac<v*dUCwkmlrOx0DT}GljiY`B;n;d
zdDV7iZRCsI@GX~0$3<OQobLx#<Xj+Qt8=DYA&$HAEVHm}OP9CEdQs*%$(Dx+h#Mwh
zIXCk1cFUCqFT~(+_0$T1HO5Y?)VRqZ4*<suXFZ);WqC>}&E_L0Y|WY$x3)e|z3qAT
zHvRi0E>;|}DYG_7Sk8{STxo9V42_?T;XXGA;z$#}Mj<VnK_O{OK3(h9?9?%j2S{F%
zSc_}pNp>?$d^p6*g>N$$i#<66L>+`3(_4{ZE9_ON(wQRZ?Jh7RUr|y!c(~VqWum{y
zcyW?&h(SH5Q=>4HOE3Ddmxq{Ja%QuGdj)4{zfOL|Hq!uua>S?z(Gbi(>8PmXWiDR}
z`qr2+T8JM<-|k6cFx}@++MAYET<?d>oI9_i_>jkg@WiK;+{0Fe3?@l`{O>&NNq=yn
zc6G8{&tmSX^W#ObLfLDF=#p5TElXLnyK6p7h<IzR!KwDyu3EOz|B>s>2k5OzXyj<Z
z##VOZfGZWvp=E-5*ERCC7uCU{a_2vVEvo7@_gcOm)M=BZ4VC1;+8QYbS2}`5`sRzR
zbtZ31?@*endrQBcvm^M{X^ob}A(Bd@vQD4EFPYDxZC#gJ^1pIjJkiS3Jv{W|4JA&X
zFIhUOE(IPnvmz0K-%dkVb+)Z<yhg3Gp=Eh^39S)PA;;cnmv*;xU4G)dfc**5wL-h|
z73{LI`r8SlcqOpQ3;{PUF9kr1ZhAQ?-ome`bTY;(CfItmm=e|xG5Typn*E5pu7KPW
z4|~wd;G{Ss7Pk28@b>aU(Vqedq#_y72fj1dG7Kx#j!y_M*v_DT0sa2G06kij!T~Oo
zm2Tprqm7Efx;4G2*v?^@=;$x0&9tuzmay$U&I22q%CpF#^4-Hw{`zzhKwt%2N!Zq*
zBNqQJzgd056A<fHNMh}+3)zn$r5<*#e@YPk!G3<HcJj9}ty3SE3HPkqcO=gHVYlr@
zHa;;f{U?9Vwui#TW|7$iNSysi^atR@FTHyo#&O4gqq1;LDwse}tWMgl&o&;h&B*uz
zOlW3HRQuuR?A-WUc~m|JqGHB5&k}j&hlJv^aQH~>!a;5CJ`Id+6+ziY40G|a*x59D
zmUk7JPP1+liI#R~m_b{bMSrx;LO}GAm*{M}DZxSXt(~Gp_sBigG=mIXE#E?jpQ%@+
zGo3|kO=NA9T49!=8`ra=jJryh1CcNGgt>6QzMKJ)@d&cT(9HKYG*SM30se2_0ld$j
z;9A1B_VN;+-9uKNBU~PzEhnh!IXEtd77_bOzU1gcuPgRSJah696WYORtf}%(iz=df
zv!>9&$jmC`1qIJJ8e-I?PiMx?pB4B*`K_LM<^n<fN+!`)C0=c&Dc7dK-O0vU>vUIT
z<q|VL%H4frR^DlnhIy>(ODPFJ-<Ygj>&kWx#^5(M>E%Fj3d=T+*jO8hj+ZsRg)$|B
zazpCAdTl;xRLdf=0g}b2Ze?@fh3H%ly}(iC{RK~DW@lM`*cf2zZAL)(87X>aHVxVM
z4r%-~<n87DHioO;7V0pPMr(y`4f#Jx4>30WLaG**E$^$`*6Y!Y3R}%PEWDh?Qq@wJ
z(Y_cIe}DNYO259_C$Zw$$=X{Do%fE7`CY5Dwba(pt@@-A=9b5SrQf}vlYroV?nI3U
z6L^%|9hrSDI_Lsh^ZCeITujq$ISX-XjAOGj<Fa|hZ(>i=J_0j!1NZVOeAvehJyT+5
z;Z!|9-oqF-((0$qjfswWYE{o78b0n2P!hJ@_}s56LDt;o@awaAdRB(c#^<%eAGQy~
zXBf8E?$i|3Cst?ME97j;XZJ-nwtQ>s%6{}rzpVf|_zKg7ddtl^^z41PAS6RxFNnP#
zZz5NvUSM?71|nYhWpj+S#IQxsX0Z%<er7H0LcI1nW|w+--AhROrx$NXhg-3Vfv#U-
z^0mLh*z@NDG_mD^)AWol(&*H#eZJv^G0@rEFCFUpedIh!8}h0o)BU!W(<58$H0Pm)
zKvO;nWIU@xq93*=^}Mvj0Joe9C29mbUZBx@?pVbN1$8Q_w4cbYAyu*n8ffiOyR3or
zL8i5(Ocr(nUOnT0yCKYp(fj1}ReV*3@`-;l&ed8J0O!2oaYxq2TioMe5Rc%K&*v*|
zzbz6H*GJ#7=GCt>69fF#7U#Q#<>Ru<qIXkoy_AhRW?&(F$D``A@tq}MScRNk6noA1
zt3*ZN#IVC+@Q)#{51z5tnodj~I1>@Ya<(6D)F?xH!uDjvF)=_1i9^p^6uAqYTu@yQ
zu??id_MGg{k4lr@l4Au_5qLZY^|)J^c^RfB%Z~f>Kw(rlKY^aAa@sA0<^DBwDf_U)
ztYu#*@k=rKi=j_$1zA+K8CKp3e=ALmGc|p}w@@jIVFyzo?{WlfjvvHLN-;;|Pk3F<
zP^p)-zxFA8y&>U2tzoOqV!gbR-8#dX5%L=9$;xz2kv+sL%T(HS2}yKEKP7YSxzP0X
zrJ_Y-sacZK({ZG<dVyp(JZZ0}2GLebu@#Nz>MPF_9x*q!{W#E{_ENPRe@;u<>ZV6T
z-9)#r%bu#8z5NSJ<URRSQv2x~ts;Nki%A@}bHMz9Mq+dNH!xJP4%Tz|xywH!(_ZTC
z$zY@9G&+-e#ky4w%Qe9mOAg+T>H90zL@kyTOX6Jkojhip#S>5%Ne_6S?W@xt_n+_1
z5f)iaVMHpZ(D#JmmrlT+D|mS!TBx;KkM7L!AkUQf)Tp}{St*+CnvH8~qt$8VDR+JC
z^oD=HUtH`~lA=P&^r!_t%{z%Snkd&Y?I)ja$ff%@T)}5|^F=o{5$!f5b@+MN&vuhH
zf1Y7|r--)Wywg;ll=TjP#DN@@n(T7}19e;P*V-cOx^f;1GO~4>^2yP=tuNKI)1l>W
zVDK{wGY$DUR?Uy>@7+h5;7wiR%Org*S+8h1e~=e1sJPF5H)SN(xSZEz>9}TuyUeU3
z@s8&F*F6oDPEo!)x%*cT_AH_Tl`PlDoI+rHXOLlcf=}SW@`FVO)os$QNKlZiUqzxw
zLB<}gNFpaId6j$Qui1YcI3a1?E7lb&e7ZmzAZ{#G8?IpsNU7Y3&TBSu$V8hUO@|3d
zXf1T0i<@2UQ>CP$M*&1xZRvIron)w@=(wisOgyO(^Kzhp>TdT7GWv&}3KjcPXR^9o
zjQ40pFO)mQ#4BK$VrkyxCu>G73t4SilDfw3)Dw^Ss-`2%%QFJI%U`)(v8uSGZO*rt
zdRzV7-Jok47{iK^`Z$_#i|huSj_g!JEd3kfF4NA#HTOpzSlk{;g%c8TsnVAPk-8SS
z6Zs!eLPjk;^sg1uQk25XhFkL{YI#C8AgLszoO)|gDoM!xN=;28mqR#&zAt*tWAF@p
z_~GmAfrh=`5Qk;B#cma5HWz(P=Sqg`n_BAG)Iz>D5??`GMW<LrVRuU9-+-RqFF<dh
zPdH^|P#+Y4S!>~7`2KG|PygXih|S<oRp4x^+1*!-{v8W3ng&Y9Z-|Hlv9Yksy{dHs
z5*b<-9++wPA8k#%7}cHb$eHu#!{-Y%hS(1$%MlTQ>pxXh)v_{q<FCraZhU9m>Qela
zf^yZ{ywq4u6Ufr;Zq;jtIUhE@H}ERbHXBk?X^}Y9E%-w~Yc9<t5O-;)G$n7z<#8@N
zN+rp)Gu?)oY08TexkcFTBNcwyp{(&HGDjf^-Ye#IWo(&I%ttC>q1&O^s4|Q}71@o*
zX;%|qOPQWt=2MC^tH&4_bDrj=ZAHUwxClxo`Z1i42d#wwldc42InL|2Ia{Zll$)EO
z{&U+kY|%oY=Au$F(<0kj#pcr|>CSSu6i1po_w|@YqA9Pz*NvsWZ0D1Ipq}bx3KHaQ
zn<rJe#eDk*3oM4hSEV(&rtZQ&#WJ2y8Gqk5;O@QtA%`Ox5oDW!9Kw2^Ywt-tW13)J
zVub~r{K#kGb6y|~>$sX*pcU^Bx(HC6Cke(J6Mo%YxA>0;<b5}6N?~&0!;YNVZjh^K
zJ92J%nXg;>m~`%mr2H=7OWAMBEk^4ArQb}a+_2>??*eerV@44$bRIofZsg~a(5~U!
zKdBvlDft%bn@iwXN<7U=3Jpf>((VDsqTDuxUHmlI2EpLjODkF9)%LMqr-DaRb-q6q
zdrcxKmavf`La~zX!NJ%k-ea)Y=wG=5VoAYr>)~B6$%<H&JxcrB6qlV{>*fP%u4O>Q
ztTYW`Sv<<W+h&eXENf%`AL8CKs>!bF8dU@p6;Tltl%fa<f+)R%qVy(Jx(bBedk0am
z(0d1|(tAs27CHf`p$4Rd4iZR!P|gmhw|YO%`<^krZ=CZ-DIv+Vv#-6@nrqIvY__y!
z$I_`?t7<CS|J}mBK?gDf{V*Qj)$XR4r1z{!zARSkFG9jU87i$pgvbE8HEf-D?tcOO
zM8@KPGY$WZ1+9G=>Ax~){KD>ks@_T$L3>q+dx8vHHyy#{vUHq;v@yfqnat0V>kt7w
zk%?-)R?+y(g^z*<=0G%rl)e6FUyHAQdA<DFHHW+poo{M}J1zioAie{d>qfeW7$o5e
z?|7_vM(_TU*IW&9pcOA$Y<1YXa+?{r#slokY%p{d=}@g+J|E;now0ryZmsT2lqb57
zZIO>}yvAFczd#kN!cW?S%n`uW5Ga-NE!N#d^_DGm+}>=I-}-n3iz?ZHot}c0Yg@(*
zerOCAQf<_zF1uikpzJ>CzRo=O%7@oiFxyNweoJ+n_D3%JGu{Ci6ESGS$`QN~1rQ-O
z(Lo=!i0U%Uf5ak@k+6G1`=3hH<0N>Kbyt~(isMOL*zWyi?!z_0+pg&^UWJ9e1}(c6
zm$^$K7uY{m?6S%QtCrqsZK1+VHGecWkiczqIkxHJHvM7jQ)$9>VbWytEgL<#s~Myy
zY0$5A7{y|BnaS@zH~3U!zKRO;3}GlFH^?AvE6pLNBgL4~t5xs%a0K{AkPl&7$)>B+
zbiaz&UFk_aTnTgi(&`_7xz*pYBf@(6N@c#z4N;xgtD0;@X8fQf*m}_s3q+9^s_usQ
z+h*5EJ!&Kva{HflAYcz=Dcn_Dogw2LY{NbIF57HFWkMbDA!5BL20p|RavY2P*_UqP
z%K@f`VcbVIyDF{iop)Zz8DQWEak~F(nuD+6k^y3^L^xpuXa!V<Nfzvl5nY8JZ7<|n
z<zVYu0;es*V8T&1;NwhhAu>h-P;Tj?RU9g(quO3h_LWW@wk1=x^b6qT)+n{}bV;6p
z_s5RL>y<lFH$@aqA2kebI$<-=+I^kBRs^sdZn5eN-CJ_o6CZfi9tko@t<Jm}=E1nD
zL$YF@a?Um@0`|`~dT45O%a8M%)@_NJsvDAnJuC^wpiQY~=42H*%wB<|kG@<LzQDP;
zPr?|35sdCsI=*Q@xR0?%^9ra_s@^)?R_V|V29@)1zX=aqu8=^+lmdd1WauKU7~f@Q
zyH;6BMK`{?`bLXwnv$O(4c|A8`u?CX@NTGDODPp)%h$l^{pRHA$NJEKnGJkTy>HeY
z8MFS5<de#~EZT4HKQ0yK?fN9PKKyPSVwT7GSxZeg<)Z)#AD2q?vR*Ss^mEfLQtIvo
zw24YcBG*zx8l%s`_v*x0{W9!p9o+Myy=Ehed(pQNhn<5->~3@FP3A7cg8^{!lnt|L
zP)0%L80B&Lj<+leA2MPo7L)jAU(_kP?vpIV^zu!{?^Y;M)2=iznW!&_*Wddf$7Eo~
zmx$WbWW@oPpi87!qjN2j?wDlhhdag`&vF*0XO`9a7hdl&6gXxQ_YuWjj^P`Lg0Ril
zJ=3_x^rGpo?U7ZKr<Mu(iCx@;i}MFh)7Yn0@0&R!IHD<VGFDcOki21oA{suf9EM!Q
znh3Z&=~=;A2)kBqjklk6iF)6TZNc_4i+}*iL=#K9xy^M3kOUYn<@hFz(N=a{kw0KQ
zyB{W*u56jCT?+<4@a6vQC&=>FvLWpq4MYf_9yIe8dj^lekdbp|$@Qo7BAZtV-<es-
zlXe{wWr{IF+cTh9y7ae=pU6v-g$83~=eTepk~i2HDhXVn@{Jc+wrHj2!>mKJ6>es?
zJy!iI5yw4wOYLe}o{ovZh>CmeENA#LB&lg9w>_TeX~@iWi1CGZ?C7Zsr3^Sz2HCF5
zXH4|u2(tLY=Uv#_8^nB@tE)96>RpA4*3n{X<?4QN?#0JePX2R}g0EH-y@x-)WczxZ
zROUw}p1AyfBNKm@aoyacXlLz}@n@6HRh4$t%ZGZ}j!+eJw{1O$aZjSJ5qtP1_Yy-d
zT((uhmQFc?t@ZAJ`w#H<D<??|a$}8I7ul_3x5Y)mEXU66$q5VE-%(>j1TPs}W!Y!7
z=zq`Lzh8Pk5g^x@siZW==RDNrbG2j6=LW+NKZ8KYml&sGwxrT5?0Ndp*7YiO@G78O
zC1XBW?kNJD6V#no4hZv?*S!k5DD?7f#WKjs%6B_-=y=}wg(HlVLEZmj-oF0yqItPt
zr@6aCdWdmG8FvdIqrFyN&S!%_oolAuq)k)|IQNfqN3P(eoo^%mjKoNWAANGk5Hb0X
zN0AItpdA4peYBHmA3v@RtIDnR?n@Z2G$+VKtl>>(z+BlZ$cZA+>GYYW#eKmSs+&Jd
zC2vr!ZcL$C!$4#7Vc_WyO(<7*Y#UT`Ir?(KM1;j%^%Luh)@h#AmPObE>aKRkD1Be9
zq6_x!5Hup_=)xM`R<T)68ht>gedM%I&*<rGL7CVeoJQ89fw8S+*t~f0#8!C@OGoT6
zDLWI0yI1N%_;^ma^StAbae}GJ+dBh8>%jX_RnkO9R4A$(d7qg}Nl=Yb>HfSA-PWNu
zN0B8Uz4sAZdj3iUuH5-DIoeKxL)5CLLOHgx+yv#3X+~h`4lh-UW#(gnl*v-qt`jA9
zo6IStQ#zrUDebBzb(IXZj<}mUBrVyR=p75q6>^@E<CiU!Q`y<+;D1m&C@3AG?kmrJ
zsC4H10QC0giQ>GZJdzJe3Rp{R@rcEK!$zZw|4=Y-pRhBfyfN{Lp;>P<br9!DOo*wP
zHoa!sVOn#762Hr~xxDd&3un(gDJXaLRSE|F`>j3@e?e_udCQ2oFhl6kpu7w<L{6|8
z%;v>G8ov?4_c?lZcsT8i_K-xzaL>Ar)Wz!e^Gx@qtC2a2!#sU?-+;5Ey(JU3gUJHl
zmzp^e*`0$SYa97q5IBjm{VO~h5`G+ER+GOQrjI-(8E9A=DSyE%L<W7QCCZc!Sb~jm
zDcR4(IK|{*!`1UuS~a=tBYt%Jk8XOs;Bz=3=k7E)=($JRDb7A&!5uxrS2kPHt&u@m
zS>+*m<1X>bzcPKh?XLB8m*^XEoD)lI?BRY9Zy<|x@2g{Iy2VINq-%AFQJ!W^Sla5m
zN6Zy8!<Sei#CGQ%bQ`VdJe0GUVG!UP^)O?~@5IUA3lOb#_K)?o>!#*DN#K;B8UGW#
z8k-^*iLIA}s?%uiolbEI6#4qRK6AQbY&@jQu$DQeOIEB5=dRoJp<euY+Tt?5Z?>%W
zZcJz_>$j)$i9Dz6$hHFOnor0?7e6=`(`zf>2Iz@hu+~k0D;6pildXxF%q9;UjZwE|
zdRTnTu0SaKFn>pmV`{f6wC^5Y_`EeUKL7OEJ3dp9a*xZs;!Cm7A-N;g2@ieDp%>yC
zZRs$@lq=n(D^igle={Fzv(2%_r`^wH(cwr3zQ}+#8g_3xi{5slieyIZv@lnsd((1i
z!tE{o&YB4{lfV%BLQl?PWn|T$B`JLFb%5U)l5t-05tMvAV?o9ae=p!SO*?Vlv9DF?
zwBI|p)sBa8E`^<5$PD`*a{o{YvUnjizKTqQpw4Ij;x^__i60=BYXDiF@mWAX1%}dm
z3=KG0-I@Pk$UKt*W}9u}w^HCg0N7y3)QHavqqFjT8vd6@DwF~CSA_XzApBaf_9oHn
zcCR|du|J#QKa~o!3izadq2K<w>pslwC48JC>oSUTB#HFz9Piib9=;hA8oS(Ynm%Rs
z!w*!}+pkT4*X9fNkX-hDqU<L60~2SNJ!aeP>_dTV-&7Mh^0PGg5%t==0aA@R6fX@l
zZUbkdYVG{5w6r)>J+{+-VJG9~IE-oyZ)TMV1~hO9yT_a7MmF3!A;!uqQUHzCNZ!R-
z<P18CcnnsETg(k_U=!YU?4RiyuSH^mCl;JS!qsS_oqY`eIWX-#g<ktZM$=*bi{{^A
z{=Tj_7Ce_jI%Xc<h`ac;PAAfVg({!lu=7Nti*C-g(XLn}&d0fnIWO6)y{Sao$$8Mk
z*|ME)!2PBgAOcknuOhDyv(hl5X{c#yQ)$9tkqImxr=Cx~`Di``4e*~VQcEA8)%MAH
z#P)snok7=Ist`4Wo7|4Z*Yag_SpZP=7Wu{95W`yJ?pa27jHp?_HqS$kp;gY-|7(y9
zo1T44YBY0zM))-uG4TjLn!(nxG+Z~C!SL7Xndi?kX<{MGIN>};_G6Mk+l-l&%BNT<
z{Oo9cYJ~TpVsn_7zjU~xVSXs!4218)&;y$x!_YGPDfIoyJB~w9kMrMZZ4RCS6hu(~
zg#^9vta)6cUM34-h)xmu<RqxTqp{_O9b_o(Is~u1&c8b4)7s3k+#Y-_G-7vS%6#$j
zb-9TIwQHTgd-tCb3qKeEAh&01aRm>G>VC^Iza?yncM~sdHew}M&xp`^{heioJ2{MZ
ztaj5Kxn7$j@kvGj^zoDMeSH6H@z$w)nMifI5c2|aX|V`5EZX4>F=_Z3DnH@|19NCO
zBsZKXnEd*()qBB6q#68_Fthq}L$-$pXxBEyFYn##R$C6+rwx!hnftz49rz^6_CZ#=
zGFMaSjpv5+fWdPQK5Y$N_QNHBU;RM!creK32VF+`WCEYM#~&$x9%RwLa<@ZP<0`Ib
z)%=iUgO9tx8ur$tB)U$*ldK=MHf3C7ET0}m{SH)Fx9zhZv;e>}%u`mIK9RZqCSRx>
zz=L<;)z$hl;=;|q;;ktNvp)6N`SK)9WCAO`*t)Rop7h|wD~Yb+(V?+~?g~`ARLP%w
zp%ra!En7>gB<I(*`~CkTu@=+|<ydlGEP6z4^HD2U+0IBwHL$WPgd9$)SFb;wi}mAY
z$wOqkDhYiNW{qKt*&FE`At~<AR|e&Hk-CQl#bqjn{5?beU)qN1Z@KEL;-Q5oWsTlE
z{p`!pw24P|l9|HVD&_|{`j%?Z$&l6E;q{{KoYu9B)C)^W#$T<<h?x^2S4)-e9<Ikj
zkrb3mM}GJVkP$#@=406rEuNP1OmFP7n=ZcNZe3l(O%kCG`9h54*-5>?g4JjgsX%r@
zZsUub47AyWi*$SzcE;yS6ONLE?9HEL_1xXKffH$}NA(twhBFVxT=m?*%9tjre|sm>
zmk1V$%!p&(#Q)bRw{rFHj;r~0wPXl~ONbwo;}NK4nAl~X<lD!$2=$!YGiUlJxVK|5
zOF?j)5co!XIAL=WTR_r3+hcIdX4O0&SDM8#tCts%QKM<WK6U@OPinyj38vUn(0z@C
zr5%$j96Hm-AvbN=Pj}?pTz@97J^z=<VM}grQI>j?U&(U3$E>sTMUvBVc5##vZi9rB
zg3`93Wwjf@-dvgmVlow|A4%xOYcGiQjVR%nSMFtBA?CXJ>0b}X2<qd}5K7d|(9B%Y
zFsFcr_@HghZg1N{Z*B&ue1mF+K~5N}bsm%8n8!6+MmEpfVlB{9bu)Vy+nb?2lZWQ>
zcm20Pmem&Fn$Y{(<?I{1vs?ukp2rlcM1eZZ(T%hOPyFA26S(-SSJisbkHqdX1H6Vs
zA-UJ8iJ@GJN$R%w@n)luET4t6Z*uBgYYXK<N#h!83W1VPFMa+>S6<DjyQZ|p@kh6X
zpw+NwDRzn5ZqJ^#4HXRKbw(;=yj7=KMkI6V`?TdV6m~jjfHuVnbIkjUc}7mo`9mg2
z1$K<?ZnHaP`=_{5tw>@->GdVt9T@dI=mrj~>)LM_Xm_u7!(1e03uizDJlTRU>~9l{
z=h~__<qx~0S<+bUU~ZDWv8_JH{lVlgHC0c85c4^*M>_4<>dhVv#=~e27L7mMF2UGq
zp%0m@n=_*>=a<hO*C^moiG&vXuZZVcMAiwrlOPYu{FMi7_y2)-jvK4`7&dd6PQC=B
zfO{3=gUn<L-LZKZZ`<5Vh+c|I$-J4Z)D2|3$@h%y)`>+vaj3Rx=lqO@M8ZQr?Of|1
zUTp_GB<Iq%8LMl<9S6P}d*^QoGJyM}1d$fV8~h@G(HSDJdIc5NP)!!^yYqKY+lUcS
zzndK5sOO%mR)ViscmhN~ST#D+kvSve$&|n?puNLHWo1i*v8&B9KToN+di7Mtj*A~;
z_+{9ML1Xt>#VtPQUb-Wsbt1BqzCexgojEw%>pF;}0*TYgOL21cje4EF%2I*0Y2|@f
z=YQouW0rv7zrA=lO&EZWfGTil*`p)2_}0p9u6D-~Q6=SnK_So35=;@KCfbqx$Pj*y
zC%<lN5MvTA0-69?_bSzI@#gp6{|H3K&jSVAsW8hJk85YV@CfL!C;78%|K+v4K<<O5
zM;2cGzd?^|nl*+c7`7sFx^3Co58xLs-?|3DXq!8z0&x<{f1$i%`b15`{OXJWfccO}
z_A?nWbNqji3^9Q&@=bPM?5)Dl(qPbT+8pxgQv?V9Z4Zx-p6qjspF=hA(g4KOABOfo
zX`E;MA(}#dE9yJ_HI4^erza&M846b${Nv>|-Q50ONN*89%DC7xD&#H>Hoy;3q)z+q
zq{!VT2^{aTZ^p8-nP1dNDAPd37Rx!%w1gYxnX#5vaf^RyJ=VJIdrYD-g?EUGI+3<F
z`Bu}aId1a(F7Y|lnm7T>A{(9tfbV_bMRetkmeZ#f;JXHq+XY;3S!Kp+%1g5Y!`1M8
zoxgY8nXlhdo;f+I<2%Vu8{XVFRvs?PK*qXR&*(5bi^wW-v(n_Q1RP8H#U}w@0Q4d*
zY;G4QYD+U``Mz&i=(=D+^rcHiYk!4{yWTHj*+5skU;nUL_m58VF!rSOdR2luK0_Rh
zyM?ELWT?<i&C`eQ*#s%SI}s{I*Dz=+%>UhRb2j*Jh^~VEbBB*?9GR7NKN6Pq9bQZn
zkS<QPy1ESRfHBQ-s)7#DMhaF9K0DX5?!R^mg{tf>2Fso`6GMyFXpLLofUuxq6pf$o
zDne^TXt%vFo8aw`V-&wyDgX*TF?o%vpSMcFF7t6l2<b62kHaa7_}SI)z~~PGVMXKB
zaH%VtI*PJZ3XNC)3waQb5sV=bcj8IRw&pnYWrf*(6d$YdkL`|J>l;QdFGnJ;dU++D
zoS}5(dkNXedUOuhP;F&RWnNvpexQS3zC338>}w{!saik*w^lqRGH<@80_tWb?x;DE
zYaCbQtc2?FEdWyqj?<nwM8N0Kb9cfQV&%v=@o}5PRe!rH*T%f@)j3K<IUx3wU|=4F
z&_lWW?axQ!6pGw{)Xrvf&%<U|9*l(kRd#@{>MF^<)}k6lW3Nl5+-QEMq&iTSaC^NQ
zDmP_2bSKXO$j-jg5P&}!`%Dl+Yz@LWKEbKx2@18;wU;VcyQ?O>_hOI@vMQyi_E_1i
z?G4m*vMHF26fko|H!(Fxkf9@!qumaOXrMQR=j6S^OCfg)=FR%rHLINSb8*%?w_y<p
zBP$ze6F~v$qcL@fd6kIIGKZ_XWoY8V)yAyP|9x*)Jrto?p#kDZyl9I91l_$yAm|$N
zR!_Jlk>jt*^1`LQ^0YWCHb2$1m@*_d+^_@vwf|v=u|-6lEWc6Tu;~rJQD`lYzbFNd
zI*zq(aVA7P_j!B7o=*hJCO?7iuHq`XECB`iws!qKM@-}p@yrqW&qA6;2*_e@aytAF
zO~SC0g{x(r$_F*huA@tKS%zxH+OQ%jUmaLYr~vQN%I(E>^b8*yA5&8WJz?+AZu~L*
z>Ys+I_C9Q|g;ql+)jGPfoGW=^oyGr<?zi?}(OoeXp=*rho};`~ZL@KlH}?C3_d5pG
zEAJ50FyAp~KPPFV+EIA&2agU^c<;hv?!7micgC}rK^1jPe8Pc?{eH%hz@yGnZ$o*P
z9-y8I<M)7<=LtL_ljA&Y6I-q3vcQYHG+rq`I&auafbG~5n<4*eqs*SYc}vW099ETq
z+KR(_;quJ?-uVlwsmyZkX6z7XZ9cjnhvDh4MemPV2X`D^Ny$IYfw^LN>iaNiQ^;y^
zX5W77*FxaW0P&>B_|a}#x&4#f>7_{H7pHuqWBv!xs4kHZ@Qjd&P*L5#<JStWw~Y|u
z8Rh>x)x%4~3rPA;eq~Lt_!Fl5<7NPFXd?mdMvZh7dv{i3>^fdSDcnrQd+NUj&*gI;
z)T@j1{{L1`Ry@dj_|psE|1&kE+Zza8N6e9Rf!=&xEqqB{J}mk(F1)|v=)vB(acc!I
z35u+gUTJl|f4{BgmIca>TRR%P5w#vgB9y9uMH!pBpoB+m2?7#Tahfyyl6p1T%gxEv
zaki(z<xMLfM>OrX;abZicTEv6Y<P_rs-ch}D3Ts9suu2&c_MFjX!q(c<PRH{t1b1j
zUgXGONZivUh3$Nfv1>FH-q^erUGmIVFx~N84BKGb=VF1K5gXoG9df`js>!YSwy3^3
zFb-E-Yw%C-{l33ne+$*#woIVm9Jgv~4K{ly0cHPuS6<o#{WP=2x5vwXNDLpn>F9Y!
zKBitJ3{DYUcJh}{K^F1}aC{>*k+F0?^arWKopFn&1LcF>ew#9w?W?vC$3j*o$I6zL
zI(~%YYVE&6^7#$Bj|`G`4_Bx6CQp^ln(D*zd~6U8zuO=@J;O>sg&t&cZ?)}9q5&Yw
z<NIf3PID(tt`Db@ug-pw<*HD_dUxoL2p^LU^{ok-C0z^GC%Y6^nC{fp=`K%VjB@e^
z^u&P#({`w~gBwmdF(O%5<F=d4b3D1Jip{-r0p1c?OKN7@R{FV(XQR7eq=>^HXh#N+
z(D4!S9OXG?_k=`!8b4xElEROIf@AF6$mC=?MS6iA>W)8o5VS#rYwzXIHxgtoSgmW)
zq~@F@WBAVbOiQIIfes{-0^%!Lc$ZTiZ30GJ*5ICCp9K;{1aBfIx9W{ygfyPZmO9O;
zZ=`7Jj0@CG1yufl%37y6cDR=lkX05fHGf<kr9r%d$X7@eP*l=v+PuLT22-^CU~p^M
z-#apE!M5(<RFGKZDt(dS34txQoyqlJhMVc$f-JJnQVh%o?{TZXCk_(C?wr8UzEPFq
zP<JPn5s}r6{h}JC3FEY<$+kz>o7uH-F3pd8a&K$0mZqNy;aXbk0h23qRcq`lFWf+A
zeO0hn?rW>=Ko0`Qii7mi_SUfv<{6pYB9q0__o6uEwQiHhM!+IC*n2+&_$<d*|KAc;
zB655I1Yt80TikNR%6_h$FP!c{@hXV?p_`X675O>c>FywdfQ`TxT+!*{X2jUTRR<<^
zV;{T%Zm3g}zFy!q{Z=1U`0yQIj!(_A>r3E{c72lR$V@ZHm7>>KZ0OX@b5F2OSVk=J
z>1S+QiBdpl3z}>zI@>8&7v!5L6QR!=SB$7_4e}uu+11_il1(x7Q8`tNw;ZD|<no^f
zvK*|3EId8)IM_(PR6QZ^JO<};TaGbv`ZJF@Bk@yiVCJ=4&zL<4x^zQn9=}wT&s}wJ
zy<hKu6mIMbfeRU0Vd*KL2J4dw?Pns3DL*n1F1mZSPQH5^Sa>W-cWcdm*Qhg-mrRPJ
z4G~isR#Tl{-kdYT64QL(`z=x@ndD~0dmyLm-l1t5dQ#kgKKWL^?wwK^MCL`6o%u1W
zxNKF&1w^*1uk(a5s&db|7&-cSH+O2L%eCl0Olg7GLkqOe4pOznxIx7dAzAYsSmEWM
zlkm^XQ0iRBo^fYgYD6rIBls|}{lbwuP%6Fj!t~!WutNmi3`wLrftO>hLvL@jecK7B
z^t@z5jqK3{X=A#jPZ|EfwfBB9uh_bS0gRABK@9W+*P|J_MKT_`PPaH<rcof78N8g6
zCv7BR)o*yxU@j}ZEBm2rr^wS;fKC3gZ#csvHpUYAZDjdnvxAEqNrdqena21x!j_TK
z40`!5DKd`6@Wt;IZSBys26U=P<~~gvL;%?IoEwJ*YS6KbNakf;8n!ni7hl;7!xFi=
z74~{_U?`X457`$nQ8^AINM3DC05<Ws<?L(&3RP-R^E3=dRAtg}KeUvwf^fS&pP>te
ztFzvL(VRyG%SSFAc<lbl2S9oYCA<#>ZnW!;YKQCwZa^=A)M&2L&=5X&&K1-8iD^V%
zA2u5K{;tXQvy#R*T>CdN7sL0#KZTT?>J?WaMe6c@2r1`yF~-05RM=NOwH%8yf+G7*
zvC@pUTQsqK6pDv-tKgYvd90Ib>WI5P%eo?h82gNFTQO%pPPs(*t(zrEQZOCCK)kNj
zGa1WAo}oV8QN5ek{XM2P<Dt*nyyV1gUmd$F(?2&i_yCdD_GJaIDrA@9pf|YEI0o;T
zrsJKo2}+&7h(hWZro{5>d-}aM*i#F$yZ6lBB5v7i<t+UWA6qdI#JD*o*Cix$kc-$>
zyXbsAP;^GJ`}1_lbS2yqL~O3v)?x?qZ2wL&z3QSb+;m1^Wpw?4v=WRMcm$YJ+v-&@
z%i1PDTi~AGS@Pc`mdCBUby3O0R>z_LwiWs#Z}KV!6V%Zd%h&$`Ex-%@{zxljkfd+Q
z1Bt-4>XXlXcD0L_ss5`hVa3urruP=VL(o{lfkhxGf&W~?rYQH!e;uqQa_Ge5<TO79
zSOiiXxTw1+(bBQY2VD6MFY7kh$1q0E_E+3cIz4^mcIOyKkq7kW{ucWHr6L5692D2Y
z0Z;Ar_jTK8rjrV)WqK!p6eJb!&L)I(^JF}pzLlZs6Hor!l4!&I%CklSw4mhxz<&>T
zF5~6+39Gyt`&aMfc~XCxTp|$&D*x0=HaoVKx8hkQefCV!fRnQdpqw<fI~`}Yu%0Bq
zA?OF>a*zU#X@PDPzuKx6fS%ebypCd^C8o1Z@x1R;dHQhAro_?QEh98-p$9@r>xM6Q
zbe?XjJmOVv^5h)1N03@ROko#O|4foUijKupCB)|5z176Z`Rfb<%0e~hYnzB3mDS~F
zQ+fp9Iv-co?W@zT%slP|YhhYA@Mamt3Y=05NYBE_s2smrI`L1V9q?2lK!iF?l0C4P
z>smayLxX@3A1ENTm|i8iBz3x<JCKh!g^MV^JOj#5&!O~n7%AxcG7Mrp-3-feJjQJX
z3WbLP*mZi1DDjg;emfTdq5@QoQLeAAfz;C86XVM{t4PNnGj93?xa`_m5IV(ShAV7U
z@ByKO7)a9|D2ksB0cnnXqAeiBOp>1;T(l$mdg~_Bx!lWul`Ftok&6%1?`Wv5?^Pw|
zR&nY1!=Xm!F0<g-Pi*MZv6+3VQ?SJHp)p-hkhRjkv7gFSH-$R~G#xIsY!_|D^zXS4
zqOZY8M)8a!I^Ela!Y*!)H=j7h{=npg3EreM>?d2EJMU8#TH7OK&@197Pmf#NRh-h4
z{+CP}PwvgK2p&Y=pJ^t6yh!LFJVT;BmfZ}MkuMhtsPzys0s{HZI2T}!iK`*g022_7
z$CY^H6{_vG9@_Xw@@D71O93Mz2kc2D)fO6L93!ioIz3Egr6bc%euN33+b{7PPRECc
zMp#Ri4}Ok`Idw1IB=>2l5!npRzM4M%l{x0MKJkguAz6>e%^>1N$3Odpve<*=2g4rP
zI7yw|EZLyTxKa6Y#_2O{cS*yH#1e&gLO@e1I^8xl-!T~TXAyOnB?)`BaWq!{h?@)P
zcRarags}yiQ-?_==;Kj&*^zE%IgWtsyum_1`G7yn^)WDk83;60jlV!rV>~9`dN1%$
zoQ3JD`nmXH`m4HIO~5<HG+b}?pcSBpo$ZN(x+ixHr%tkZ=qEAX5e9+<c{?85L0?ox
zq%qD?c1#X2JbzYK)PcICR8PUDCD=hqZZSY^K8G~!UtWlsBFo1DK)4Nb4>dXBN(_m&
zf9rUBMXmfd$o}(ISr}f;7j07fN?)J+*xIX-Y|9L>Ze|z>jGewIrx3*yPIrHij0+Ln
zR^3)bK+Nea!txT*0>_)4l<@NfV#dnW^_xuDQ+M=6Uqi;+?OYuZj0@QbT@xis?x17y
z6OaO)aBELPfLe%qzT$Q;GrK=J<p|&%FT-Q`q<wENNU)%vh@)ffcCpu_d)mkSrN=tV
zl+=owDH7y^U95K{d=C5u1jkL}1`~FQ3Z%Fx29~hyk|`Hxg2T#cfpH)g(UvJN?s?(+
z@+jYt9q}=4;-8Fz?S<cw_I7V=7k3ylSw%Or=%~)fa<uyU`C0Pl#4aV{2%+|i?ne8g
zI_hT0ttj;ZqH39n;DfFSdabk7Ooo3S<+KHaEpN{TS6+O)NA*>ckU)x-kL^CkYm~BG
zqHs7M1TPM~vB--+(j?1|@(6e<ZSi>8q#Sq&)XLTwn|(F2$k-ZnAQJk^+6e>|18^AL
zl70nD?N*%eo=ZZb$N2t=HNSo9l_B!|zH|a-)n7{Le?#5*U~V%iT=%5^pVlycgAO8N
zkMWgD-wVop;u4?)?4;hX!*B6_KPC7X?N`EmN`S%t2_@jyGq;@UFXEPd8*qiu6f22H
z%tObm5%He+`?ZD7(Asv8);xfMb!h*kS>sRn5y5Ii^0a<)1Ng0sC(%E*weK{bAT?HK
zsc7&m{nRYLyS}{e9lV>;bJYR;VB+<>0N?Z}3(eXui~@}*=lJ`7y|-W2f3>2~lMuj$
z<v+@1y}h4hGhS=2iHz4{ze!zNmAm*Up-pSkG%=!x`<DD|S7)e<Yf}DyYMmpacix$e
zCbE3IcaLrP+u<(DHvIwTn`&U}X48l7ndfwb9=kLkg22R*5D=1@%UjEv<LqJj9q$D?
z&EECoy5g|~Jk~%DgoXRYM@{XKc&02+2vqWx$LNjjSy#LAOFW;HmxQMQApGYjkt*FW
zU>$J1-j7r^`(bMri|b<4Spcy@a^ym(juqjRbX}E_IerorEZo)XLjiPX_(oTSi`|=c
z=Y$OT*1@iC--(O5-D-f0ud7`^c~zGkGUJqrssY9Y=MoM6+Aw1a#8$e?3+jn2;lS<d
z?S)1>IIeSZ<!gU^(b)14d|x3XVMnJ1XKPux(oD=%f&ErR(v@Mr0w4}pPwqKJJfm=z
z(>~m-=t;_qzKKh*{a<~06Lt(W$43E@Qw}CqOkKAdNKMVHmU{uTFiHPrb+Wv5vd=<x
zY85@-oW?328g1HbFx-`khbg*72{9!W-3c<rPuTW;Hu9waDSgDkXwG-t{&dygk&OfH
zZ#aRP_E!;|_(Bb#nu%+j3w-eQ?y(`mlibaCf1guT>7KYxyEx$<fiLeTBxdUp9NN$V
zd>$ovO6nZPH^3Xx&vdr>!byF$AKkKd%IN&>IRRnNA?$h;x)lN!T;A3(!UL3G+5%1{
zV)#=o#j3Ao2M2{qxBgHK^FU%KtG~?G+xGK9&aN1~N;u&+d@mfJL{~vC{5nnhC~dLF
zfI-J-mIFO5tC6OScfkqnO>D3Kb~EQF4&TpMynJ51J2R2w_QmUJWtLAmc7V=*bvu<D
zm`ODkfyS*2`^Wogndj8+;o%8Drp=^OxrgT%Li8#y=!1DZI095J6SWdJ-E#y`ck44F
zW4t{Ka9htpn$o5^t(#|g=6>BQ2ggQx4Y<7an$2dd;I`_}N8@-wN1ZegllTiM(1PBa
zM(Uh{q<?K|yA^aZls-dAM`&a7e&+c{IzaX=4b1lxVTvzO0jF*C<l6<39!FG;?SjhF
zN5L?iQPV?~3eU7F`v}i)D$FoZE_4@JbyLp{RJ|f*hO~|dPNWq#cUhHww$G{I%0El@
zj)uYrVc5lWFv8nSx6ZcBY7YJeGjDj?Oj&k1Z-@l|cx6fguy$LvM0={%znm89z_6Jb
zWOVUPt|3DOR&#3O3iz1D=m`Q(o6zB#YIhle9ChGQtK+3qZ9P%;lW!58L8O+8CYqVu
zhB}*Dr(!EJ0G!ltU83S0M4B*K7a%l?=S@MxlrSw`>ihxNSI#Fp8H4`K_HqC~(5i&=
zas@U9uEF|7h4YOJg)|>6f$mxSbEPBC6Op~2k5Z1%+_7A%I#5CGomsiUF5s%%?stPP
z-6?=Bo>C1fkopA&n9loL7`#gaM@3vou5Q{FCp)#kjdP8~_<HU4)D%Nhk?)9s2Rhc{
zB|Y{7^qO6mg~*pG(B>wGgmO1+SNUE0o^iU6E(|t)VlsbvRD61JTH5LH2T#Wk<W;Lz
zzv|Ki_uuN$)z_Pm0>HBevP_k~Gq6eIU|tg{$k3`!FjqBL>>(M6_fVVg#T3y{ZO_@k
zYIFbrs!<EApJ!b)UrdTW{_7kG<<=}~0_fyr9y5T(p|ssxnFZXeuUr*yB}dWROA$3J
zrmea{>a;8-4NZxxLh^EUOXqIr|8)!jYTtPP^@E9DG#&$X#D@vr{vm;H<ByL(KcK(1
z_GNFul^XayfpcO?*cQ>+=%_U*<c>|ZR=k^2HNhz;yu5qpr%B`3gT3i_9{f?#xCn!|
z1_ExnPE?hYOQM?6(p@EKQ{K+XKvzYFeao-kR(h<F;6_dBd}DluDcD4#1XN_v4fA$x
zpP@R5yG|G2ACe9pYsE)sN7YAaxo1C!>b8~xB)C65FVKcQ8HPr+cXA)xXn);z|9rbG
z>D4Caxy3bm^0&V?6akg$8oQOM-2Q0p-_nXh1dU{P@PESMM_m8sWxb@69*u-_v%}^N
z<{$kYAiddd;MsmoHow?@zkd6#(0*n4`Jha7Km;HI0(KnM$rpw-Kut>M=p?wta)X{p
z!OZIgIA0$pH@Ccvjr<afSCHi!^Y44r%WD}lKF}k}0l!<fTJ;g(J7=#vICSy7<z041
z_h`f(-~s}|T1wka9@?!`zx8e-U;~ah#t)%iToe|T6!WN77TPsVS#z-n@zaE=9NjU^
zLR}459^F~q(-)6%loj9lSVgjm$<e(sG_TCNjeaQCTU)vGV6?S4?(vaa?ixW{lxX>4
z|J7yBjpn=S%D;Wg_%*$93(Qz+j8XWb3_MMcc)R~P<AhS0ajB6y)F6L>L){AK<n<fo
zI0md~HC4?<S>t2Bw7j0|v+3q9rmu1<X!CUP;>e@c9yd!s&2|@+**UpAU*JfzRDl(h
zWb3NnWfa)T{Kc;YUkp9D5Gw*$d&~B)4=1LkYLF~=KUs#G6>>lgJ2k=28UhZ{P#{BS
z!54$_47BPBP7h)lRKkEt!c~ssP7RMi_=8uknh>I)*9$GkH9c3xt`3x$!#HwuJ1l5!
zGlzTxMn%AFBmy#x9z`OCJeG93RR@Fus$m&+MvvhbI)>yb=DS>YFTW#i$UnEX4*PDk
zg0kI+{kRhF3%WJf8~Ko7r4kP_QU>q4wKx;Kw6Tq3SZ!JBRm`wS)t@47!izJ2hK8Q!
zro=Qwqs=tu^@=#2QbWL?lUm!+RZ?rNHOvdgOCWMAr72drlzD^VS$`NlGCkb_wvdfl
zrismYw|1fdM{;QSAx<G%@rB^>x+NUXwhso#yZIhUa9Ef6a;=Pjxk<x|)?UkPT3p+@
za7Ae>Zji3wc8Jv3_n6v927k(y+R@!WeTadivVJP=(jT=7XfyYlP=9qD-S(emx_9on
zr<BR<t@6`T!+21`5u=5l<@xh2NIX{o+z?mi{CZcvQ(b%mu{L%{I65k%S<!qn{b+eE
ztLz?TZ(-z^TW{~q-gigLHIYliP3K;`AV2Q?{Jsc@sK}Xn*}Y{NAB0U!3stOpy+1rD
z?RivMS{hK>ds;mA)WdYzM?q&W%3KlzFT$zVc2RB<{*qNsMVFl7g)Ek;QLZ&8*LL*0
zkL5BJEr{AyyU3N9@qM}xNq@24gSEhrU#pawKje0yfgc&+_WUPV4PydvOF!w%92kQF
z;sQx_Z#6r=Jeoo4y&U}VO=g}Z;#HObsIKRxU8v5MH4Xf6sWi<lpNgk;#Q^bJ?cuyk
z;_DY?3WzzXjm4-f+*c{h`Gd04JD-O84%XOaXp~hXt>SLX*H{yHsds4Q6EOrix5=<<
z_JzE4M|jvuU~3}t<d-St2ybTi)4Z=_NZRN~(=5dlK7u;6$SgLs_wEkgA8}BBz7<9L
z1o4K(q)`dca&!_B3tc>)@sQ!TVRz?qy%v9-^s4c5jTTEIqH%R&&;4D)HSO9M)rtkz
zKZ$bC3gu~x?zwc+$5>*VcV8j5;I%b9VRxG;EeKpwbmH<C(`zwTDnoJ+N1tR<n=Wlt
zj}A53>nzbEeE8M@?~V82#}DmkOqZQ-d3)+)*V*pf7_R(4S!;smz6q~r%3g-cUt~rT
zat9nq95_W;G|RrW$HRInmF^o*|KXmNWI>et>G}FX+<H6Pu`+sdxFs>}(A7*lIiWXK
zSp2u54om>y)BXB&Ry<qGp=Y2lbSacd9s60wT>ofV<~!oyfiYxesu5W~FdT?Yh=n1E
z#|G>%&)QxWOweEUx}4D8<vdv8njK~Gki8g_X`S-+k(+}Li3qX>dyR<bsF4C{TJDZ*
ze>o1rdAJQ8Ep8A<VJvoti#??Wcz1<=%}JJZc%k{R+#B`+vQDlkJWP1*vw<h=P!SQs
z>x&RE9;h@|kg*a!nN#sSVYRFQ>R8XJnmukk-@XOjR8$+O4X!7bWXoTAb}XyiIp3Mt
z5m&-V$7No$bBim5LRbeTUcMHHxG|53qMftQ)_V@KMR@9o9aF7PEiF8(<(g+^)e)c^
zSLsq-<6+~+PT85+vu)f{@SY932!>D+eEWSiAn6&S^W^FEkcQy)>8tf(kcjjA>~G>f
zzEmzJi1UW7qh@}KA5OU<#_IKJ5vBHH4~7;!E|!}nchn-6m4l7NdMdl#U~($~L$;#R
zk0H($aYnW}FETquW0dtS-A05(Hjjnedy2D$>GgJLQBjwucwKtdRT!zB#WV7nHwdwl
zXHo@kOqJsxR4i8MA4)zpcguccFq)z4bVyCwc+uNq*70V`!}vbC;9aOMJDcSu9bN6k
zep|=7L5y|f&?B$f?Z%7k=TjW`dNUJqdV2*m62oNmje?NSwAwsR=lAR;o%U{~)OrMN
zf0!SyFnb3~f2;TN6*G!<9`HRcY0p~MR1FnAR`L^%!=FO=WJWZX7iHpSH8R?J55sP2
zc{$U^cy+vR?CPz$mrA_BVQ;>RgvGbmu1TK^<1mKahr8G`n^R_*j5sj0#(@9w%pFn_
zsDMl7SS#mz?*KF)Qsc{mEL|KAs)DNmf_Oh~|5VQ~GU6f!qJ)A*ZOLND$saI55fkij
zoa4yKMa3Jh!?*kG!lM|0CZ#MxiR)|6#O>a;Qq!5rkW$K?O#*EJ=kx`;WL*O)mGTJx
zHl_=s^qRvFwo{d+fv}p$n6eQFffe@jVwP@o=@$wXBXOD<+aUu;{HJA)6VSO*aXYHk
z5h0b1cjlj46D_#ruXFX3LP$OaA{HX3N{vHFJXA|FRci+l%=%Qezt=CWy_{V>vTQh$
zX}RODyeY<V+i1GyBh5d@H9$a^y<=*31hVaS5iwo{6xnTrY~+mSx~FN}bNS+~symxg
zgD$Jfp=>RjcQ@PScs5fu9h#qidiL-Iji=Pr(F;kA|7^GfrXb7ouo9(5eG#iNLFTJ%
zz3nl!Dy{vQS6G)HpZzjmdvlcHp5w#F3($Gt);LBkPt!h|V*C8P>DTH*Pqlls$@S7-
zIDc;tg3NWCyYX1XJY`c+(*tgkw+yhkHY@J#XGm-8k(kwf(X5LqXA6p^Oflutj%x84
zXbYbg^^mo(?*gWMn&=HqoW(pdJ1ZiLm$Ma-(=mdL!S!q}S<u8f7ENj4XyDDgp92Lm
zQG0g=!t3$g_WvY>V_1UH`qyA)`i3WEX*>_9B^UfRRBSAja6viFv9`D^hbVG6#}He$
z^5A9Mlb#Vt6}ML}RdX~_T-K9&z9l;tJ|=@D`qeeSbu%j}9*;mBc%#R|{zQ(q?<bXA
zdbAigutjt-{=ski*Bg4iV4kyT$MeWs5wS(!NQ!InkQ-ZvzewZ8X;k_%lRwAyxG9Wn
zoP4zL#CP`G9~bh^CH?#g$yC=QXenr00$i-*ZWh?9^%1u!{Pw!Ph4B5|A%ETo$<bh5
ze0-_W;3}Y>y4_3C&gRjbIqLp1(*M4R_J6h_dKfmH0Q*uBx1`*JU$-imC#a7C;o*^q
zcG=RcE#dK+c3o49e^QQrUwsM!zhSf=TI3dJ3tTzQtX(O|>%3`U8UUtUB&HIU4^^?C
zzf)v~)d*^GW2+_fLWZuCZ)##tMlEfeE=CWy{r6Ccf}Wz5C|tJid^QfLnU|5b=sdhL
z@Lyk1p&YPs=lT*;@V2Gr!PHw1L0E<0{lQgx3v@LLI^JN2(|U`^-soJe1<U2kc{&=V
z+KLBsuyPv$NB$yP&b7+Q!9=AQ!d+^vd)2E<bldlR2;!G(ozN$D%sV0E)VF#Kbq$Q0
zm-Cd3tdf>IJu7cZ8>PS3*5si(l9*7c>d*u1ilt0)^H?aMHLLrm-PkdL$epJVLe+*J
zy1RQa6ODFX+*&I}T)3r&x;HT25(o3WS-ujLx7{s3)y&#g@a2NbW=3R_jwxH<g%7Pn
zB%B5^MKltf5C8aR>RgEyo;<HR#8@di(IUq@9F_(l`2-@~JrJnp#6U}Lz9BvZU%MGT
z9D~wmeK@?RSGt0H|MnD#jYWb*0-G3`YoYh5t>}7SF=9UNWBfY2XWp)wQS%vrElwt>
zBV21g$1nkhE+HXn<xSN+&BAWt=^fKqt~3X;rSqhxj(>gbAMG;ZL*73B&G=UQp``5F
z$bIyGTlC5Dx92SZOT1zEM<6k%l6<W3=4ZOK7Px!woomWU!s;l(l`=tlf6SG31m*}>
zY|R+~xBE}>LjwO)V|g{6=)ZR;Q_1j_o_JZen5(W;&pWh=mg01wIVR)P*<o}>v8*nT
zpJfo$AR|)>^I7`>b=4>R{CG4JawxJLW-}tSCJDbCb;vs26@UC&ne;^bBR5;baxXdL
zO9ItLloZXdM<p3y$tY@+^TBuPb?sQE{j_C8$(v#Q6UQgNOO_s3ei!RqF*L1Y^logS
zXh)k)#?_9t&gr(4m|E-nl+doLee&TmfBMypX%k?uLu>qs@rOpyw%kS_AeGG2yq7Yg
zn9!#B-r2{-k`b8j7z&WN-5V>@7d7KJ(F;&lpIx4z!!xF0>nuYaB0KzFR4x}f3Q)Ov
zw+kpHG1BDrC0fiV<r;xuD?*-6D!3rj)^j;!!3Vg!$JHl^$P&6*X{pw@N64~nGI0ll
z5@M~V>EbkRN);=o65rn3D&ab3%17IGQp&8%kJ(k1F(+yG{w$q0-g;GM@R+-0HEdU2
zD?s?yB{arqJa?tGWirC6`m7)Xdbm==hUe|x1^ZE>sXQM!1FTl3im)dgd~@5UOxAAn
zYhJq{yS78ABd$I#&2dP$#ws1N?Ywu|<tg%Lalj}x@ryAf81Q~=Ur4x-QP-5JI=A!X
zRDExtRk~hbx8TrxpzHwTZF>Sl@D+sQ+FEvb#LX7M_2+HZNS22kqKo4J$^PfLxBnHA
z{tm5>9LU0#x69CZ5jY3aBM}BUOpf+<e+4?I1rAykH;7C1vyqh%D&~`0d|jgnO)7YN
z_S^fKp?fZ`zyT2zTXuhBToWevX%5cM`9YTy97(+0?at<w$%AUWVY*t+`X>2z(N`SK
zi-82in1^O}^aLt>F<*&aHTPA=!F%E%;C<P6o{Cyg_A}@Ge3R*BEzhh7)V~I(A9uT<
zpy@ZW;pkF3lqe7W)C)ljX12B*{XR?&gI`qYUH_hiS$^OxsL9oTln_2Yz&qbddrg@T
zlXYTszZ^@-5`lwZX^;$LPPE+gmXa+^&7W;Q@SJtuiE8#vZf{Ht;6YC(e-UuX<{M|<
z;9P6}7%!N~TY@Kw{>S4!>8;3<@D8`%1J{3iC@J2)@Z$~N^uINse|$VZBB}z;p=^^C
z@Yda=p3LVlC(e<^{~0lVdm}3}-qW&r!wwN+37Qw!z<qs@aIo|(`sM%N%YsM6ZZbOz
z;YFIQ_wlAL;O^rmozBdu8irBInjUl`?<bYyXbn_8w5i5D$e1DgJET%GgBVIG#LGbf
zy7)3rW?N)inp+(;CBbCKt?Tp^Bh%*5fgO+2))ogS`!g#kAH0~GuDMvb_{p`^@q>1#
zi<Cuo{~{)|Id0>d)Xq}NgGHgRd`5P}OmE`4VD!k%ee47<wK0c7zwc>fU9?!3sOqTD
zOCrTa<o&&T3RryL+P(6X08sD5@w1!q4KJ3LX0Yg@xJHNAM%Bx-$uja4eHl76D$z-p
z>GMorG<%{&TMxJRYN<uX({*#2Y@9Fs+%yO+*RD%Q(^M&5<n-UwQKQ*<@^W_+rOSW#
zljq*JqP=;i0+-ds_Am*Ut=HEdhH=?W>5Tz}icrOlO}Hn&qE%Okip$g8qZvzBPkZol
z^JJuan{w#Po!kL;3DQ%`>AKoFXC+EgPJ)2fM=|ovr0zp%Uwfg}sPn-IYUUk-c=w@T
zc`x;Yvw6S!O?gc$%H$Kd_F8DIXS(%tOvqqirET@&)iEogql8Wl8OBt9d?;gv1P*uZ
zC2eM^+9v@I4|S71S}kHY<wo=?lzk*H#9WU1dJSyhu~ecw+{c%cPo6uTT&Bw6Zb+Ni
zQ{<a@g)}b}E?2-GSAC<pDQTM6`TOk8EZt1R*}L)*hw2gp$GkRp3<TH|<#j@HYTclc
zzUX)B(<sf7^=4BJ^KFq4K3W|~mS=03ysB@apPMHVU#Dg>Kx!yHniekC&T<`<b{w>@
z9Ivra(#?%?3MbpJwQoXJX+I$d#55GR3ksO0k@?w~qxQ?YIy8}q4y#F7|48Z8G|{--
zohdHVw*a8PSWjdvH*MX$^6(YW+5T+eCdWT+$+{ziCj!Hn?B~o37MdJ1^p<D+U94-~
zO1B6k*>ilu1r9trFs2|Qh-WpLSxZq#xj98n#s4%BRM0w&Qmt*T1sECFlx?{edRM+g
zWYL^WUdnwoyd><n!%c}XkFL2`Z(=+B$Z&6F<xJ`8H+HZ<s&&Lpr}37HZou?GFdT`X
z+gB&mu^(JO*GTDm<7zANSktyfQ|wH{?)NSI5o&;)Xd<qcXIAn9Th>3)P5}|xG|`;&
z(cn444F-Ry5bZp}PIuAp{;nPO`=mxix}4s@t{(Q#Ss;|(fQlFod{2zaG>1_c6k0Ez
zh2Q;HmWf!miMnl!P?j!VbQD6Jr&f9-nTa0Yq{`T_c|$zozG)tvlR^YddYUT7QLK>~
zJ&r~nd&R$JI9BumA{W2Cf5@zyKJ18i7sHajICw{(@TJFQAgi5h2N#5I`jYI9es11U
zCv<wr?Kh|be+4UNymuiNB8(@L;?rEsp5$Nl79{0mKSzfZm{$IJ2EXgt2nQR*=Buap
z!+NqFmA+k2jygOYZe)=v=X66Ge)&O6l2*5g!GeS!t_KeCk<{Vjb1#n)@zE`Bl?Ezx
zrOuw<A~UPq?v{=_xgo-SWmN94iIOxsUkCDwtcMwtT?N&Rz}T%GS$r`(noi5zS(D!R
zt%!BM4DfO!u7K%O?AAM0BOJ^x>50u&Z_h#u<9khkS?L5P%s@Oc^ta;_|9J?g)!l{%
zt+%b8$g-*Ju+^LwW;yvdqOe7#P8A43uBf`C?7Ea>%x6@Zwq{n#x7<X0nPktN=n0sC
zrJX$Sj{Ge39E>W}@OYf4cct;I9v0-zYp>o|M-zowYShY%y^_6$^_zvJib2H$;$hi@
zN)3=bXOkByrD`J!qoZqzA3S>6i!Dc+`uY;8L^!HVKWNMyjy_27gszS)X($xyX<asX
z3#^p>*!+jQmB>D@h$-)!Udrs1GzPz`OCd^5xn|(wv=lNj{chIDTX0DCaz!i~LuFqc
z;?%;xa}_YC5C&tr!Iw7@h-c=|j`0&L<q>hZHkQ6mKmPaLJj26}AIuX#R|*2~u@h^O
zQY&@;^F$_H+Lbj&1NlGS=3nm`e9M!Ff8GqP#{Z3}aEdT00)1+wAB=Ao(8LGE4h!1c
z-)ho7ZY40s@xp#&w76P<ig+ml_9&6JL+-fS|77e72J@ac@oogqx*I79!l!y*Fz;^M
zCw3DvokwqM;P3XA>92Ub|Lxc&zFyn5eQ*+}EjWlG@`h96s@%$5#ldWOdBx{L=E#WX
zRa{`H@#;*s1!hRPJZt80W&`Ph-JpE|-N7-=NyOk$p;!xJdj#eKnBwcWbwhX43*Y`M
z%ki%k_X<A)LPYN(xTw>IFZa(Qir)=2r0)m3Say_of3|gg28iZb@_up-P#fBE1xM1^
zWFO~;(5-r+7|#y!t#7(QDh&Z<;27)489lwL6X{6R)*Y*Bmf1$C;N=lN_-LK(J`;N5
z;L>UdsuQC!89JY86yt)ZFCk@Xp#t}4atCq?^V4{5hKkWMf`A(6S)#$Nw%m8DTsP0g
z*1TvIRHth{Vx{kdQZEmajM}boLcruj)5p(FR^xAFn}Y-ApCj;trZ>nJPMit~8REz@
zYx*aKDNlcYZvj62VvAv3Ca_xgu8)(jXe%}KdlGrSK4~<!$%FC;m(6b3c59?gk%}l(
zD`{XJ^8uXji%we_BVS>;yTxWh*uk^p7jg_yIS5gj94j5qJ+opkfw4v{;MD#e-8+vD
zy7|LBYPW9aq+Oi0v^ulo?pWDHeJPJK(7!8`Cbv`8edt!^LqDNv#}861Eu|eYSKa#w
zSCHFo@5+Rn{nPzvKJ?F6fnzd0-A}TwEF-To;q&I82Q5PQ(Jbem!TKq|OGtWtPiAra
zJ%TdhlUxv!A7$E8mi3P5J2oA{9sJe6$)1LcN8chUeYvI2-&1pPtqtiUsHKqOAe&NZ
zg1A}@-7saBvJ9fWtCZ@FQHeOZV_l|hxEwV;L3uMx)Qr<#4067H9Os*f{zBS&^O|yE
zY;36m;Ze{D#UFXMz;xenzg-98ep7`^ifDuo*I@IU^HaSvOX0CWtxX|>-yIqNB~uV1
zt5y6$_eTAwG>TC{3GAfd{lODx?wCh2j8sh6Z+~%EMMjSIyT0mPmar#qb9i+Dw)QC*
z_ll{|pnka$YD_L}5Bemwk}LQM->FbUM*qXPXY-~FR7c_;IaEHR&oUGn8<^!-c4yTl
zp%ZNj+B{D3I#B7|tKb+X6-N|f>>>7&-Sv|ES_C=(V&vW+O4n0Ih+Xjb0galF6(EvA
zy4VIX_&z`PDFL}1eas_QuFCX@l0;TxM2}yOrl~Mf#!3`=tSJqQr7;%7>6|yE=F6;b
z;3eAlqhANoa1;TkD5Im*6gj6mPR7;ga1*%Nd&p^#fGj>_41fBr*m#SJIUu|;Aer98
zllB%!g^tm$Lljr7;jJgvF&#>ANdKiy4Pm!UCBw-Cs{59$Q5y+EAp8Xb5bL1k*QEV=
z8@ghCqDcNt)Y^=S<eZ>$x_aPM5j~~BR=MwHo@*o=N)=Ui^TsLl5iW}eAvwv=^jrNs
zPZ0>1qmkOqTrR!bCT%FT-8_<)G{a3((DI<J`c?4RGe0?YQeV)vdcl$_1a+K{x%IJ1
zA+*|9Y1;d<lx2@@AV#1#l!Gxvi!8Jw=XA%_tf7eW=Rp=MP-1cUW9M1mIkq3cYD$Ot
z@{v_aK3nTnFnBCGJjaNMiBa$yrSoPz{o7Mho2M;>5GDId!r`r0T$bRj65qnx;nz^?
zU6a)uu##OFaSM@_b^l+}YLoVnzjfU~BYaXXbo~q!IpgIowvh{5x-t%j9>OoDFKtOa
z>4-n!ynkVa*PbMf=WJd#1l3&b=!pH>`L5`uV%9%yEHAHGu*1;h>~fxGSLnQjB#AwG
zG@<)Mmi^Q0uYbl!3A}f|N^bpESnS~OV8AVS(wD^&f3$P{3OL}~?fam1+ZpHRmL%L(
z!iT861s?oe{GVgsipze4!g&85)oy|WINK8)6@}pTVG>YvX;@b{j9(Ei&*PKP^9>O@
zyrc6AWk)KDhO*KJTP{R~&BlJ-RCzb2j1e9v!cZFOf*QO8r{FPli@*HCVBzM09vz<!
z{J8Y;<KQ&XY(KyF0OS}K9z$(HZC0~JIqX!<fqC;_ee?2lb`pNXw$P=|tfLyq{6`%W
zGp0$Hu+DQ6oO7Mf;0BQHwoUvvDV7M+^9R#(Ypa#bWBY8mJZ(@<P&;o8Q9R2-7}T6R
zH>UGLs;Z3|7ic;%V!PFZyI~ak${0kfva(`U=*Z}jTakhAP?h{=-KY#<ogpQXYohD<
zX+v>(06Z`7_*(V`iJLNLcijDT7yP)AF<FpjRLz=of}zel^gqL<dsjrhZR|2U`e#7X
zj^bdFEZ2@m>V=USf2bUwq@qr)*gA^`Rl~!>Z-G!}ioMboWC-COx^~|uek>t-4|aNb
z7S38$QNvWXy^P4DQW3tE%Ju`6+hx3iS?4eivaNo8<jC4uPN|DSy9=n_jEoQ$pq`JD
zrQr4qOL==US%#k19seKd-aH=a_k9~KsYpdhLa3BAlzpcKWzU*j*>~BEy*^P1m3=4K
z8T)RS7EAV>u}h3)80*-1t{GbRem}qad7k_J=l-YH(3p8I*ZVxr<2aAwybLWPoH~jH
zdlDtiC7k^Mc(CZ@ofO+lpX8lg&`!HNmMqQo!5v}05FF9`f~}eS@F}{<UvYOWTF+v*
zQEaMJYB`#GliQpG`j64@8OqdwI^QK`AWT4pM7_X1Y)HA0A*V2wS?^JerCvti^)||o
z@Td&WXqa4!*6uN51Klym6C;g0eZVuO>L(dCH}#5c<%H#DSq8mnBZqd2zdSD3j|Ir6
z8FZYbs`G>D2SjQV`&6d<h@Q^-kB!H!^5hsRZT6a2HVdUUsY^B?H{^8QAykKfe6TR0
zs6!jkNO!y$C>NhG$+>JI!Ga9Q!`ulYqLfgksr7hVIP>o8IGMSakol78i_yP@EFd_G
z!`ViI1RRPu91R3Z_p_&A*yAf*Fi;x(YJ>6Vd*55HW@cq~vdRNf7Bi49{X;6Zy+pXl
z2iv}9#cY%pnLM851O3NDb5|9auj+Q1iK(|(D?P*Up5qz3cpeuOpFlk;i7QLzt&a+x
z7s_5M=UzD*H4_*!m*-7!)mXH={ZW49;PErp212*1ctzF9liMK8Z`TCPy1%#z&(0|I
z?J5V1o5^>rKI~ANe*b<j!)W1efdB{#@jhZwzK><A=(-5!5eQX@ssb^;IjZz;p|`oE
z77N+%OO!Opr!QksC0_&H?TH$**A)K7ajCa&i)3*sS<x50de#j#5y<*66$vx?bid2M
zx3j;E2n-6nI>X%2b~?Mo+2o(l2sKW-7omH#tJnjD_{d1#2dL$nJg`E83`Id6I~{A*
zwD4wxNEf14==xJh?{XHwB3)N)L{<`Iq<NU^na1FjqJW^mUFCX#lc|fwEeUR{ebGs@
zD^{8}!UBKAiT#K%hri+Us-s{b4dPbA%z&dr1(OB7>o>s!o*?7Fo8bs@=jHV4E3rZy
z>Z>LeQm)A4>3>+t_-3dPR4IUOqKxhRxCnPTJC{jYmG?kc_MLTNgyO8NoqnN_lv!7*
z(ZxMrvZXbG=3VV-MNaT3S@oS1w}@{}RwMUJ;#sXkzU|%|o=uaBEzfgo5>kV>Z7};k
zv`XYyGN}JPXT2&Mk_XjCtfn+ldV{j~nxF&Yem(RnNCRJ<<HHv>^XCMr66Gu$M5M8K
z)3C-_`BURD-;klyDw<grBT+{N!(j8LixFL;W<ga|<k+-X@gvR1vp9a2AUYjBP(U_)
zQTO%@!zOn%>!Gwe+mOyi%mzBiC`NeGRyJXMJ=EPu`;%C8ZI@a-TC}^$idw;PvH})i
z)-y~*WF#z{ExK-x%^Q4yc#gp(F|qlv6ftVt<B_I3vjVOvKb)Fh**Y0!%po`2m^b63
z)YY~t4pW*S-hl>Q`Yz>aG7UE7iH+dz?_}@v-D;`YATB;_<AVPgl<?Xe9~74v@oD+Y
zi@o{V#fc0AsP!M7gv;2=!dHyP<E+M+V;nfimR*!Lr{RqII;YxeIHBI(navt(k&VnU
z4sZkwB*No>1dPskn@v7BSoC^gfcsld`NQ2qIQ#dHRp$tnqhi}1{kj2vf9hYqtIz_|
zh{EE;BL8O-*N7<C`EE)S85w(R#0gK+$#7jeZtB+WeD)`^;a+)J6L48mjup}2uMXfK
zU*(lns7f^Z|Fm)NT7uY}C%OGPoUAE0&h^OAVRF7`-OLYpw!>&fVH^_-W(v57-{{K|
z1!zP1<)McJAeg5|CFWv!U!4c2I|)x(%}P;Dr?S8MH(cELz(42DB});M8PG&|xwwH;
zR4Z**J0dk_Bz`PZABPx0f|t=Pl&<n{P3z;yLfWqd37)j`pAS@$XFp6U-3J%WH<}<4
z$O(;g;U_Q~E2tkuKMKZY1}0qfjnE86=^poAsm=+cYM%Tic(j~Yt&b{O`U1`QPY)9z
zlQkli+~%`1gIm*2vEq?D!s*iX<`*siORh({_mE_9IJ|WgmNgt7hdi~<lWM46UX#q=
zwp+1kDs_D&0lTH^8hEJ(lMB(;dZYA`brWR3WRz3l5y=~csz7F>?Tag=!9Y0tn#h^^
z6P!IPy;}09s@;}m_3TYK-SFyPvjBW=Y$y;<9kL^eZD1@S;@kn7TykFjSH2@XeKB>w
zn;0nr_Uq$MOnQo4`db7jk>C_|YuW_Jlh0DoYY8-zZL+MC5@tjHuylUX2|ppk4W^?F
zZVuVHJMP}%etWvB86|{xPwu<;hI>(dDOxOsbrZfxp@Eqv5cfI3vO*j;+29KWkd1e`
z!`0W!hiUjKv~u0;B_SS7I!a4V%<G~>V<+hO@VOklb9CcLHW5ql5^g^sAZ<N6LB>?C
zMQ5Scl8ni1o7l+dcM^CY|NCj!Tk)5@zvw4XKAEFxj=S{@q=rq;L|u*emN}|7?@kir
zOvIjy#*f4nXwk35?44g})Z7=iQyzTwnMT=)*90H{Xtx~_Jl4C<BdBtH8#f?;-MnD^
z+%C6mblTxbH7PG0sGa7rDEa9YEFzY*5oHV3e$nsUcuXEU2q&?W7j_1qw79Egs9ATI
zGc<xk0l$qrk=+z+Epeo8>>chv-Q?jqc8hPMnFWn{tS$9uD6bx(<<~;@^O_21Mb503
zQboguu95aigNB|a^-B8?s41o8FE?RpV=X)k6Xj-}l1*P4e|ZEEszpaLlRHQvO~*Os
zJk6FENP6b43Fi>D37@^2UkR7*etSQ-QV;6Z#5o`PQZd5Z74ESBZ#ivH|2CV5X+j5N
zU=(^1lT92m%+$AeZ3RWQL<b?JZsU~Fj-Q5+#HV{|8tJC3@!sx%#^DPDgr}61mfpRJ
ziLDl4T<rdkRc2>nJdC;tJIF_EX~Bn(Q9L3l`a2b3ps+y;eh|WrM>CE-se!Y>7I{&>
z=N%oiH!c{0%QbcN%4G9<=rL$7g&jBRzpmjz|G+p%+ZCscfe+56QO8t#rjO@Mmo&#}
zU{qx;r%B4>w8)Jiu5jFsiQ?^C;$3!R>pRv&DxlOT;LgrI@DtTjt{qelj}3aV(;EfD
zi0{=Umflsv18Vo;qQ+!eOnY>4=*k}+3O1EYxQ3t6;7Yu8nDKm*4n#K_57+YJ7X01v
zQ_V~mtrrD#3dMM2xSNqf^z?1_LN^fQu6>D^u2XAa-xeswv+Gbz)pRp2KB*3KNjb4H
zGwK*sY}ohSC5k=}dKrc^t2#3+9^tT-p3K3Cm;I?=fC8q*T{Ug2bYJ`i8QoFsb(NWP
zfsZYPF?+QA?)jXaQ-Z=N+USt~q}7lTKofGVs;0%Cx9}R^8wvh2{M6d(=CY!py`V{!
z9O*4w&e|%IMM3Gd<;yN}&e&ep(%~6har)^vYz*AJ0KNixa>r%v5dGpMHVBNq8Jl)u
zL?Ad^CIoCIpCq@dYN1m0%((iQkKBi@;h!IoGFRrKyJV{W{N}&EvQfoubgv@E{O<%M
zF3pV$5Z+=%mgXlJ;gh85duNsBO_v<Me0YGz9{}myL5dZl%m(~ll&|b8FVA=0WG%B!
zonb-aE|&=XE%z?A?Ty(av;KnEj(qvK%WmyG1hk3qf`>0>=W9^W@70brBKV-UpxeS`
zMI2J(7Sr!$-H6)$Cesy2&{nT~(qYESnL%%LRLXVC;Wgm(xJ;Fa2YXYpjIst3qja@1
z<KahSdF}|S^|{=VSF7UF%|}yyR7no_LzSwUsz=c5niLvAhqCych}%-hC(P03#`;85
zfiCu$%A;A~`TpCZMcT3-zZMv+UKPGo5#`~q?)15{ILx98gBqyc{-D9#9x|w*>Vd>T
zT`%ORx7<Ci8;zlAIi;~e!sc1AG5I>H#L~+HCptL(s%$_=1<?Aza4hRmzB~}%sm+z!
zD1}CH6R3S5JVB&92lut3$6~j)p>M#l_FkgP*;I%nHQ9vJU)mn?W36XrdxYi4ct=mM
zy3b3=MwIrM*1^!MV7nsXj(W*##ixF6UOpxUU}~gOe))^PJ2vATCQ!AcPTq*fiyIPD
zjtd{r^DWuv<8mqR;7qm4is^SPfg_CiSL$Wm3vGX3dz?OI<Eu1Gt$;>Nb)#k#QneJ^
z8)qb>goAzn7sF#MpX@=u=?MQMl|y$mg;l{hQ+Z#cqErhsF_eZU2rh&L$2i8IoH6*9
zN}Vt_)360-DycWN-}d&keLzh6RXOQmn%1!Xvy-9?Mf{)nT<I|H)OFF1O(TBD+B7Ev
z?iK0&lW56a{Vu2R^;p)RN)}Dt9n1ImO(&4)&=dp7?(OaT?9MHy({k%8D=aUe1T7LR
z(q^r+RBPfOg-(848NS>-W2!ron-OGx4_(CVx7TKYA3Kh!nsu4DdR{GWrkLl|X$SZ5
zL;V-HB)+1+H?s}uG&wKp_SEZ$Bv+K8&}&wf6KB>Q@WP6~;J^w@XB*fALoEI-Ttr-7
z7YqRx<TmED^WH|7`xP3sGj<UXtA2Sw%UCnu%zFE?uqGSe8XUjH%3`G{EcAN3u7kXk
z?c;bizIFG!6+9u}Fn%#4Rp)WF;l}})4hj;Icy%M~B)SO+E2QskiYB|iXd-v0PHAa2
zRLU$V!?gf9N#KdA3x#y9TxV2}Z8~<%5fZ9H&eN@F6ge(<vPUGce@yWHu|u_^8QG-u
ziSsg4ap|``bw=<pD0j&Z##l0JPn!nzuD+N<w@6<R1$CjqnCYcVm{}zETo%m<g045<
z6<VIp5+ePS{~ZeJnOUHa8=1p&2FMNRk+xD9J~t<qk4+;Zm7G3DilPGXf%6pI@67l7
z<*_D`EheLw$}n;(Tg=QL^gH1(S8qqfIcueNgr~b@9A`!GT)9=&a6ED)e7NZ=#qS)b
z*QDGcYFu#8NXn<}eRSbjJ;w~R-__-M%Q*tj(MuobivA1IF_<b!l+x43sZ&FF);C>$
zCBNZa!T8-2hFiRrFUzXSX~~KpOLAwXd&ZWTF*z_)olyDNSo7uB3>ThM@|D>-K{cHS
z3U4(<jk&i&cH>=cyyAeix_!R2Fw0CEdd|IS)7r<;09p2i4~>;Uk5fmfG>qZ64KFld
zuldWE*beS5{i~1%frsirl2ljkzNh!!Vw2Xry`=R&rNp=KL}x^HzLGn>8(f&S9jq&)
zTYrFi26veBvdN$`-kzsg%@0PPqxjQuU^w|8!p;ETzFIu@59gZ~&Iu)MfUff5Tc6fb
zhu{9|2)*stNSvDk;YWY{;!n0Z_-Z5*yE_rfTjj$X;~`82FU9UoWM|!Y4m>OY_(gN|
z>4|i9kN@rau>zEMmyS!tWT3Tx6SS;77b{nNR@r)HV~@i;^!eByM||;)zpS>x?%`>r
zUWbKjZn`5j9=V{c<6f1xj9WY-nM6OyLQEQVqVsjw$qrk(yx^~ogE;k+P708%VW)mc
zG&O1WXi=-;b?J!`-gYjaLlodKw;5oQ-?B;aa54lAfENLpbIQE284&qG>R?<eosZjl
z3W)D|tl3q-Y>8-U(Nep4^(u*I4L?TQoW#G*!^;y(aAz;cTA!O|`9))j?8#lII9)|=
zD}m-+fo;znpvV{^>~$|`A9B|IIREa7EM?a{UW{pmI*=kvsFAZU-VzG}yWWI2(lmB-
zu{Zai%6&{i()0&rOqp5Odq@+5R5VnRYehA(A~KxJn+NZ4O}||4bNyCQ6xc;Irl_T&
z?7C~xWaaP9+VnkYpEGUPxg{Mp#M${>I%eawhwZcSdPoN?&FIg5eG!oT_$Qna3HO0t
zMpp}HUxH*-Ms~>@N*V!NA$oSgxw}@Pg2u2p+R(?v{y+ZK?_=3qV-+mF+1Mh2<u}#Q
zzxsm=mu@PQ9;0oJ00Zx0IW?HEm;x-vxqB{h@v}2b`pbdrMT|hKx)1jXmOry_8%~&|
zTwSd!)`}Yxm0_WUNxf!ezW7u)SS{0=z8CX%ij>K*{7Ra*(!S+S8P<O1VKORZ^=uad
zJzp;Xd_1x=S;MENwak%+8imi2cLrQb;`6p*@2z)DJ6IAN5`L0VHX7ECf5o<TM+osw
zF1@)xMv215Shxa_ggFqI$eU1F{^^V2Uh(<iy{wfA+2=e9`!*dD8;^MZ_>h<Hd?8&x
z8%rlZFK=Q|7|k`%*!viI`@NhwNJ*ws-N!a;`;TrLBX}4t8C!p&;h34BW?@yTAZ$il
zprW3u2y}ZA3)Hw1Z@=XmwmTWl)KszB79rxFbgcwKQQeB3yC@bc7!>CE7zHV?`Wc+D
zQQQ5<3^eMZU_2`oIl1k{w5b|DOX9FN(ZSO`600j+H@cpX0jnK+?T?E(NLeggY`k|J
zY5?FO3B~kA{h_wDS0KSB`&V5!1!!DMOaohPK2HCse%k~tSvFNT2*{<vlmH(r%SHD8
z5->V)MN{V*cVO}28^YcuomKzCfH9q1^;rZX@6qxjoOxEE>S|N3O5gXdkM2%&OOI6*
z*C=+4^>S}?&+?<*o-e3nz1?Bi$J0B-tNp!OlUqEp?MhtKBTp*Mz|<;2<qx>vCnWuM
zZk;$9P#kIj+(YKHO|$A*DTh%-$~8T7i|qgL)Y_F;$QCQ4#6lm?Nk`wyJCdeubV1^k
z0Izi_(t2_hpXg-d)wKhl5`7#KeP*I1QSC-raaxO9K0i+q?4yjAje#P|ipNu*AJdY`
zX9vLs>+tUKkyw^!4(Rr*tp2_v)j1hHY(1Be(9-lQ8ChV?-ur&=fKdgk-Qf$DNN7_4
zp9*=W?G^a*Hr~+&4po)2QFTH#kEi@MX4+zn9Y4_jVpDJ5br^VuGgWYQJ)({~aTcBQ
z8+c~v9t56_)IvRz!fKnA3N0tP)9D4xpq~o1O3V?6&-Qzeb5k{|f%_xcX}75rP#S9I
zklR3mRaT+T84~#jf>Cj3s)+ugpVv{UBC9f!71?5pOEE1M_kgMSKgGtyq1}gwjVoZt
zKbBV=UI7;OHtZxOc$OGYJz9{oXy^62-S9^Z)la>N3C%Z4r|8Y^N12qhj*N-AJ$b{I
zxM`Nr;6T?C@H2xI!Qf&h(xe24)m4X{n!f4lxLr8lcKE2mFAl=<(W-6d52w2=EZg82
zZ47zsrHhl__<6_!pOWr!klcTyre6s!{LbYohx=fEr4roRyqvJ*T)@(OmP4iA;dD;Y
zVY^5RdW&nB@NR8&k$zqQpI_f|_&dPnPfbxZC9_vP3m4xs005qypun6AN%TK$9pb^L
zpzs(~)C0&{oL)x^zKVYqNuKd3bL*{OsHXBqK!_P@5tHG*%Q;(Y;yvDM1Jm-**;d=b
zm#X5i*LznTw?z{HV8_+{Ely<=U{(ZG&4ATXSK~A5Pp0+Z2Ew9FFXk@wK8%Uv<$I#$
z2^@*&5cfY#Oa9TF3%KYz&+47GXsf*$CSM3_k${N;>dL#j+g;<8T@N9LlmlK~zSt>Z
z^Q8Be0J*Syd>^y2JkYFcwyfke!gxGQo|gOvD+e!g5UU`C_j_DX`x+aUv2CPW-3n!0
z?q=O)DOWX;KqIK~_PiBuICvC5O_|)!Car)jl3i|#9F*FG#AzA!%<*RealI<w0Qb9*
zU#fLyJH9kUK(oy*QKa_+x6yjco_ws5j^q-F0!1SWcTZ4F)p{}N)g0u>R_1(6zRV%^
zkqM+(yknn!^7ymxgMB(Uh+TYG5)iLXo>89r=4*Ei3q}74k-|Yy1}qdEx)k;?JLPSg
zXl3umtsm!QV_<TmKK5<AO4&h!vAJ~Rd3QGLh#VU67kBtvVRMuN2qwF2Vz$mynyi(c
zmr*gco;o=X6I~15XQ1-!x@U+*QAx5vk{OmkkPrt1@tq0g-PV&V%(@LtFXQ%fYMXew
z8@5p!Mb=V!Evxd}dyM<9d?|V%r(yAvT#UAh?z7J|GW#0PErqX3Wnc`|QZpedmN}Dq
z2oFd$ry!kr8!kOXl9HrJY_d_WU6vrPY5dR78Cbt*GR12(POQyU6!!C4N+Y23xIb!2
zH)-$s1OC<&h)`F`=F3xTEp`fF%*msuzK>4|)7eT>({@~Djxc0b@$azku4Wa*u;cPy
zC4*kvNX6=){q~fPNM#Q{<PhT(AAB}9(nB(xbR@rF>#c{W_r*b8<=3qGtqVuMcySt=
z^CsBQ)i(5diSN5y6QW5=Z?h<nTfXbE{bFTrp8R&>YUKA&^`dRBAXtmcu&LyTzl>QD
z)lSia;$^f#RtdF76%Y(Dplv*!6<T5%z!^>_4xet%6g<hl;+B1c0(Y1qbhkXmbhKB#
z2(gwRPZb9GV<J4-&K-QZyr=OncXoi%b7k$Vikx1{kkfS+pCf+y&NVK36RS;$dYO0_
z!rMrJS0;qoyQf4ae2%JHrMP0D6fnUxkIHT)MCe3U<@Vj4EB%<^u_F-~w0bPRc}Um8
zHrJ}0>&|OZ(ax$$>etA=Q8`X`BvuU?OJ7%fdnuI--P>50w&?!&sb77I+un02d$hcA
zNQ{$J`o${+ZOhoc0@H5mlWDSJ(@H#>M(C-7v!6#i@s9l%3kK3op;q*hlvvOei6Myu
zkFT-X6$S<*N_En^5Mj!%Tag>c31JtyUT6A5F+)Pi)A^spM%mufoHw4+yPFveF_utZ
z*9gruUl#XK4dxHl{d8_nGyReB<H9`Zrfa2+Fkz|(r-`6^K1yKQ0BpGOxS`OZrBuJ`
zk*~WF(R?sk@383^Z(VZ<J@Q$&MS!*d40mt-h|MRe)<aW866H<%bY}^ktIFp1DU?c6
z#yWzmSF?a$dKbOKy0MxS)_wDb8*mm~$w8|60G;En=itDrku9u0-Lv~L;8dFPfw|$I
zCAV*7`~#gckeHBT{Z}#jeDZ($<9RJ_u@*~8*8c^QdBi&%2rSZZ#)bcW5IDl~$Wh{p
zdKz+ntOGO9OwJ51*uN*AR63kYh9=@~natB|K3%@RWn52X|8xI7;dx1KP(u_C((j8u
z#o(U!wti9<E?<fVNN9J8OBiP!<g@e!8U$u0mh1shs7J}&=gm77yDk$O27%}GbTBZT
zOQPD$ZR>|J=133T)?Lg@hdlD!yrp*%3ojD``>-WLV&b(f2By!mJf011e`Sy~=<w>0
zt+0b-OAxd4RopQSlTPkTa$!LXBDZSm=hMOE>8F4lH8C7Qtj%NEvzP@`({C-!zjmh;
z&FMg-h6)_MobwP66?8mLO@aK|Nw0UzbsOUNteoF+U7&b<C>*i*Is&U+4=F!8-F<W+
zl7n6y>%%joVO0R)3TB`%uc-{3u(t#(71mVWeJF(tiH2EWb>lS{^X#yT7Rn9bjA!I6
z5&-=Z&t8O5bJKFa@r}EcD$X<Ou3gZ|Iu%6FVNM`Cg}16#@gcch&EqYB!o-f`dKnR1
zqFxJz*H%$0XNh_bpB*R%c7Dz;Z1<}uIv>8D*x;C3;R24xnb&RKCn8BRvo`IxN8hk*
zd><C=C<(?$&Gu?x1bB91uWq#IlAAWo-81WAlp+E_Lu1?RkROJx3U8`E-;jPY9b<$1
zg$tV~qlas33eaHXZ_*HABODNe@3#R*Wz<6X7Vcp&4F-A9%wScuEXnhvgZs~WNy4`V
z2#dBy7AVT9@sGp-!q#)`3H$ci4@b)FcD$6YrQ)^G@6TZx_D2rLce^Jt+S&2UM9dWG
z=_j+z^vd{EHKzl8b>1VRNG?rXN2~YS=|!^B{Jd5%?0bsW`G?-Bs}-7v>?C5HG?*_@
zG+Ho!iOc#6*>q=xH)(+;XfiU?g>CrCbB*yH15lN6kiR4!<Y9X#yCr3hlELG5N)zN^
zHG-cjH-~khf!(OI%(%T2kBc_Ae~`Lxkpa;k@=IKvUq~3>#^^JBo3G+x#?>{OJzLzy
zUg590jS00A0TrYEQNazUq0A?`cYFNm8pba3>^ONw=i6|sd;I4<#A_W`8J=trof`WI
zj4-V(POHX!AYZ1T#ZPerPMw|}7|=e){pM5$R&AP3c$4Q1K^Kz#-6cvlOplJOtIeL^
zvANs}2DOM3DqAdZ{3n(LVgBI^3Na(U0ks%hD;962-@GCvH+q{aEOctD(6#X^!vfej
zT{tq=tQdN`<8HsN)Z9i3$Bm-5Z9Xu`PM8XvTF7D1L#MYFcHau>G^rQ?O-G)b*R)Xk
zQ2m^${s#{1^MmXQW!6NjxDdy8=IG`HfA^PB+^<oc(Szw)divMysXVp%)HnO&^BoQ2
z<S`kGb7Ml5`5<YoSoPocZ94Nf>bdL@>z3j~bijq)3PxiodBGb<U=-;KQ^Kl#Q!JW9
zshbqGfF(cGn{W;&uO8WP?rBxr9$aC(0;e!_s$c_Wd)LCf30Rrz-0NAHpGk!GPsMry
zkHzwW^-1%VQ8%o|Vo9Oy@>1(}P;#s+%Con1<ag6#n-v|xA<+!La&hG|P}(%-2|LED
zq_0x9D3S8Xu;QK0N<Hpl0U`}t6F(qgWbhxSj;^WEU4C8(sve?@?q$hrDMj>m&aScC
zDN6Hh-n<TzKBhL0t@>;Em2G$3F<l}lTk*~0lOf_!4%PW~%guSSr*83D*M_%U(6thb
z*D(^17u@&(6ked$?+{gbTa)uf#G{K~O69)oT6F{nowxz&q_pUEcAu}JIQs?${dpm@
zE`YMC$e4<u1)9s-D0DxsS1ZtJ-7~HMdel5fz3=lw=&E(q;vqy~Lv#GZw_1K_3`wtG
z;3UJdRIDq%UVHqv4Fegm{ZDN0Bk1ez#;Ra9%AFk@g~yq%<`q1Ru`-;{JsHk$-)v<D
zFS;|{Lm1TlMUDTQ6tzi~wDTXb>+zs^m!F;9VHg@=+GU~F8Zc>>bY3aB<kPY%9mk@d
zH1m>0L>{F>DQ3@@giUc1iiy|kv~v?1<by2`&-I73t>u(sXa78Sd#`{!$MW{I<niSd
zPI)k>OW%7k^#S5aY`H=4x)db>7Sa(iHpo|KK7ml{x?mzPp#q)*OGmTj5oU9S(t0&*
z`R}2R{L8e)_q?@Y@#$WrozcpAEpz$}s<0vDEZ>&HUwCCc2K33$H`hRADMH^05>YMW
zXQd#vpXqU|^grJHE2W7rz$0BnoTR2m{!JjWhY_=}vzNL!rK=97qJss4n;g);y3Yl-
zgG6UTXfYTvzEO9G==mEm>fC6pFn!yPIsgBix0SVNVI_(H=LPl){dqBjk?)q+=+!$r
z9i|YR*4L&F@1(7tvU6sE?Ji)#nvv~!w(c-=YF}-)+PhNdo`~V^a~T=Ha?`xfPVnb6
zS90vf>BoPLms|evGg?Q;yH`jEYw)&*|KwrlTKVOvS2UDQY5hy|DrfA3!DS~vp@#_z
zOM`CVg>#AvN<XmWHU_12#>J?pkK4bydz(Mf0jZ~LAadA$1VAGS07${j<W3+<rn$DC
z-}@u~yI{v0z}W2{P3*xg1!CH4CaC~QP;P2Ob`(BL{9xa2NT^Yc%&{Zo5fHk6F5$DB
z4LVM`I4$*)GS=xQO~jLKC==|%P}CYO%HB$@iD40eR-XSsIqBb0<tSkx<arNmrZqmU
z*ixHfe#pE3E?&$ZtNTfY1E$!)ZrBeiOHC)g_z@7IpH{=r3N_6yPH~S<3<%#hH2Uc~
z=(*{wb;i{Lia}m51KL-}Oz2LYrJLn~TAv-C?wzAYH5Nxgl4IXUBYtFKOh+dg>v^y$
zoY^p^%&q2=*s{qxpJ5)Y$=)ThgtjXVC9~Vz9p2s4+Fh?s!kS4-X|}igx!fTwt@%!3
zW(TDkBz)Pp@_@lGw`xht^p{S^NGKT1k(RLvFB7;`yH^eh;sNi?l>alPjX$l`HZXh$
zOX?6V4{pxcg7QGioQ5iiK~y90JgJZ?Q1fn&`oaoK7flK+6<bUnShd|Azer;zLd%-E
zw)MTt`hwwePwdR2T8Wib7SS2=WKBO+tQ-0Jw?6yt;<+2cZ(`)Gpl5Grh5&o#p{A_B
z3c9hmgNPUNtUkpZCg0G6QL~!M@Hv+t*B=-XYC4T_h`ja5uQCD>V?oR5XwXp97J!eK
zU+bFg5m6=LnRA%V_e5Q=A$HICxL7!_MN5K<&_IC6$W3g%93j-<Vw3n4y)&~FRmHUQ
ziqouxrfEkIW~keY5WU5H5Ty`A1CsRez3EOwvoODF>v1Yh?&<1vW;P~4Ys(R_Ladl#
z(1#WKII0o!wmCV%=mZs6fp;_1N_eE8KcH7ISofwYY4?erV8T$>(w7>kVGpt2!dpb4
z_*ache#>#TK?8|C1RN3H+!Rx|ZpLcCv(^6g)K>q;rsN$M<-j`Lc!Ze#ezj26r?qAI
z&dM(W+Ej#)D@TBqwnX?9gQfD}Hb44#HAT$eE`PXHfcw3;qGrZQDoAlhBX@bsz4AWu
z6p#En57f$jeoWp#W*v*p-u8cS=HecI+gu43;;i3bSrU6#=5j0X1x1(TZj-ehO*5aO
zLT=sa6T8_o<DD3WL#fy~+Y46Aw;iC&0AB@`Cv2UF6+4`-iuqja>N-Ki%20x&LcZ4l
zSBI9UH^l_iKrhIhV*Z9}Q@93yORABPuY6E0s<c_AHlp`h4TT&QscYWH&}V`{LS9Z+
zitE-<Wp~Wke}Ehtg<3Xekm8v)YLHzwDfBQ*{#H;c|0*k+!s&FUmK~>aekp~P-I?Uq
zbmeLR&H3_2N)>fEIoS1U?;vNu)6Gw}qSbHaT9x3Wi71RS8sx7de9)~L;D&p=I>>W6
zuAJ;ERhP+=x9CetP!i<ssj3{9_=#W&J{f^N%<7^q<`B2a1M<4oIMWt@Q?ww&simT7
zC9@Q{jeJJ~&NU7Y0XG@;JHzp%5q-UHeKI0xV9XC;P0Oa<MnjFcOtWN$-Kph3aJ9V_
zB0g<8(Kr<Dq8#RAVI(o39q%VwdIR{7GcptDAM`%ZhZJ;k8#Tdn0$Xe(PJlr`NzB|G
zkRc4Hoj{e81_`fk5tW~c2UC<(*g2(IlO<*5t>8-eoqK|+OrE5aGxz~uEJ}(N*p9Rh
zQ_}AKwQM?+SH!8Z$m;TV=CGPWB(LBZ6R&M0x-*<J`1=bY1`fnbTXRmK{E17bJ}8(Q
zH7)ZUf&L!2JPjmhCyP4n91h<Vx_V-6(fI~}F$lk({5Y~ZBKPuNbA)0M4<rBolq}uN
z`H4$F*fPK~eBvjHg=?++C>Vys7<cBh&vDP<K<&Wnl26L-jbdQw-=Sm3`g}v%M*Hxp
z9pr~}@#q%Min)_Uj|N|%$NL|>5KkWJ>k9*vDujM=l5IS~lIP09JvrIsqpq^KJu#8H
zBFOMU&DqX|!?zu@hV8J8=mAz?J54i?{fWt51-uD9^P^PSF)I7hd!r_SC^MpHgeB&C
zWTbpg?|V03GcAgaiR3Ji&}*3}$8&{p+<ue*+1zFBF3xvhkaF}IT<BBN)N29bifR^K
z2UI)aR-+xeUN+O*jyrvh)7&gSmi_uwvfy6fudZ1G*zcwq58Rb4m@Ko}WSyRjX*H3<
zD(K&TwUz^STFPIyVVL^24JLoRwepIXO$&MRwSS-PgDZOGiNNISWxoy?hI8}sSmD-I
z{@60*!H)MIW&%EQJd)S{S^vrBu6zAvT@sTX=4SG;JO6Ge+ER#*&*`<yCfuJp^rv1K
zAiP}1syLe4UN6h4e=Vj3=sOGO1m$P-6IqHE{*w~{19?Bg@~x%(LA&wlAGI+M5bT*#
zciycJEmE8He2N9mON{SayX0QNWwb$b<ab^dkU4jiO!S7xM$;7-%szu=%i0GFr^EVS
z+6TZCo&@z5`OeDehjK2sMqz-{3d2W(FSYwMmSJ1!zmwotza;z6*4+q6qR#381KBB(
z46M6U8#I=`y9IVMWwY||8ot1`ZVQ=~9u&?NYh$!qmq6Am6c#N0a3f8H4%ih8$DQ^`
zhZJ~~HB5Qa_EcAvVfDbSACK|WDChz%1)tq$8@_0^GItN`K)NJ)26CXeE^_T1n5X1@
zG@XY}Z?8ybMhg@3)#9%Tja+ZV2iIgo1|Mu)*%4M8r~u2+yCJuwK<q!6yj}VdThm)j
z4d2nGT~{zAKJA3(CF<<vQ?w<bGo~as{lV|4!=nxpf5;OLaOmMjp5(x6qY73Zc++g?
zi5o5f%Gm2Sp(*d(zG%A=A*3Xm_|@T4{9_=l>_%rlR88^SNzokMxO-1fH{Kjlv><=^
z;K37sy@Is^o_vd&Fx~m*Di9%Ixo^NEi<DcZ1}?Xjm!F#)Y)V<dJw0usSMz45L4D;Q
zG0r*&f#1oc!vM(NF!WF13~hB}RE{vaMdtD>S-)ihsb!pvIJy69&rlkAUlrACyt7B`
zWP@ZmKB1;m!?-<qZkj|*7ds~?u|su=Ax!JjpuBblupCFi=BRd$e?%U5e!Yl+N7N5^
zL{&gR0r8kS!H`p2hmXM}%#&r4UD}}8+m#YngMFAkxWB2Xw8&GkD@%TmKddhU2g=e$
zgw<0wjbdcZc}-=R1XT@H$AMW#&nT?g2|J8KSm>jx_=!EW)0T$bg4*VVwOIo6j}IKi
z25U%NbO)IEsX)&4wlfFHy3!UY>|uEyd60h8C7HAiU5x;0Uogbv232ncWVnrd1KH#b
zm`iIBSDe@J7G5pLFki~2B8#77pKvsT)~tL<FBO8Qe1Jqvb>JPt<HEL4QOhy(aNf}v
zdv0qICa3-kRT2X$AhJnx=(@QVtJZRVWtg;B3Vy2|M_7rrk}<3YtKbeY&X&&i5UdM)
zISD#he?>sx)ZZtv^HvES#?q1G+|&=DXn6EzJ^?Z!=F=}RZ%N-zG#aQ~-VhM4IGxxC
zgqspJ%4#N9EzG@8+{eXo89MU)OrxKPqgMh@lQ6)M7B{i5vV^(6JmJZ!Czzf3jc^%3
zJz(jic@7J@0EoME)O9eYhk6tKpetC(S;i4;L2}>_vG0j41t|FAG?4Lb@pWQ<;r#YL
zTBTB!K*QT6qOP<w6`9U!Flf0-M!SKVdu)R_j&ewxcKGIikLSupxMwc=69Y;3oUnrf
zVpzH9yu_%9fP^=7>|%7>SI`vgS?4F&-x}*r1pfUh)y^9|VVtp)+<F8X=Kd{WWB-FM
z76i_*sT?rm=6`%A@p&wzEkMBqrUW%ZvF%ag;=5-5PMD7f5n^2@m<Rt`D&Ad^UNCaa
zzH?=c7M2`_yDi4|;5veU=w{BS=Zq^xwWRHXrvt~&#|wrP{7+a{K7y%g7aMs(XSSW)
zhjUh6RSr0cfkAVV&egp*ie}^_9wxFCtCaX|{=s24=f3P;R+Qx(U`1g8_D$mJlh+O}
z3ZyQuWvufeUx9vB>@PiUVCcS{w*oN4T|`7})+Zbkfm6-O!y)%M-m&Fx;RY~1>ldM0
zb5bu)oSfcS4VwWYOD0aBtgy0{6?57Q;8BzdBMJ;Lo9E0ge2Tm?=xF-9Cb^);dUrc1
zIgobJf)+>&!BE=7%z<ku&<pwK5YNaIy7g+x(B8Z3yUQP>%J%!FA;VM>KGT>6!QU!g
zC!*lskQtvU*7lO%vmw+Jn~+G3xKf?Z6B|qWeolr-HFXfv{(3;cV%NC=vdQLdz7y@d
zin7aYZPlmucL@@%Uy(H<!N2?b3iY*X1c1(R=uzp>UJ3j-lW2}m`K<Ct>!P@JPwh^x
zp(RVaBL4A@S4bcsI;2-f9uPC_+MPgizrGjr;pb2bqNgc_U#Z2_?HQ)o+QZnu;|EiM
zDK*-~vz$$KCGjqqnrOXd?fq(kTQ`lXOYD@fsjGm{Lb|1UsmGzKHNf9tSkjMs)%%Wy
zzyybb$t5t;@98q)gCziTZRJb6X|S}YQb<_Q+j2#D-H1v2qqDDjuMAW1u5|k3eqF(=
zQgvNnmYGo^HVve(Z89>(4<GuG73Df5KOr$!s2yp#RiHv?{@gdJ*1xs+?PW_u*tlij
znVTZZQ|Hmfx$B~Md-Lmu&pE@Fxp`MiOgDlx<PtH)NHBh>ju3@-gOx7P{t#qMzH#7^
zdhHVS8hCwL=m^PMse{1~=1LChMES}J&ezr9yZ4#Z{JsxlX!X3v$FeVS8do^D9wWJ5
zwI2-<H-2HCrEe~<`Res)6)=4;$lEv{$!6sm@PQZAHgeWqCRz90(m%3d+)HczOpdhv
zAHT*->162_>UD?=_N5dKZCE8b(l&NcKSc632ziP;M5L1m5>KiJMdZ4B76EnnY}3eO
z_s7_w@}y!Yr#dxEqk1}os?3#V42+iq0>(E)nSCJ%NTckouP^!=L~>0%JI~B?-bWl4
zt#W1mx-9u9c{t(V${|qJ_KwYZ%C+8n9U#id@de85;iO2rU9m#z3)&7;<M)i^Y+8KT
z=w-o~?p}Pw!>dRH=rG_+@f{U<ryai}tNOC3l4`Ts*1u{RPh9e!$(QQp)TxaXU*#m?
zVsiU`l3(OUOKMb(c?pEemFbU}AV&Et;Wp9V7o*BWWW}o`V;iUReO50c*yRRgjr3GK
z5=d{}%(BkkG<*3nRbDHTS1@PUHW`;N)04fni`~Dd#KZ&<6A{|)_y^v)cdv(&IJoz!
zra+vgBsyGXp`6`Hlbfne{ZM7@d>r*+GcHi7eV*J{&|BEG<((owKEa$yzzkd+dpT0X
zN7@<$)0Xs=qTj;$gZlWsCJ$Qpv|kprOtSmhMe{RS<H_``2|MJrYwU}@CxYmRf(OIl
z%MhxP45h@f{M3Z+6Xu2-M`s0tQMb%#S%=csY6=~O;Y-|$G3#$`QFu9CYJOO}vMuh_
zQt21CHy271uSmD#>oR-Mg$O6~I1QUUN0lzOdf&0Qn9<WMro***`QHw2u%@CLUraI1
z(o~^8ICSijGL5$xky2=gvmAqiuFu7;xun~#QykyZ$TGD}{-f0Ii;Ujd7Uazqdy;V4
z{3jahB($T;aEsIBwLpQ@kFtfumHy5uNroOn6<GU;=~I4E(I{AA;f>nUaTl$I0+lO+
zp}ggfiWyR-SEyW5XZa<EGL#{ugGF0z>)W?+j!0m9EE>-FYS)(#clbC#tewV_^gFlE
zu-R#e0OkZ`Men*-Hh_`V%x!Qh>|LFFiBG+Gl&BaUyTYjL`E_P#d5w&42(Gg}4hZvr
zz3UT)hvA0eW44z1_BWvWofEzDS-}3XD2N>wNSS_k+GAtQKib^T3f6-I9jlb$e*cm?
zy_wla6slX|Iu1>fI-HZ?)?i_*Hzg$}9Eb;hGs(FBP|@~!!k@80_Hzpi;Yr1dDoUYt
zpa5Fwe@pSHjd;MZR31z7Sy=5NGj4WXByYgVOQY5kzfbKz;sl>0dZDg~#m18Rt8H1H
z0(L^snlF5)u_BR&i!Md%W%Uh7?Pf5C4!m)ftge~8vj!HiLnPL4u(|}U2C<_YtIQ;E
z_kdS6g6wgQeGEswofh$VigQrt!ZT>YR$3lXN!M(U^s83XmM?D*x1;m(zRti!wyNF4
zYD%CXc8Vq3`xesh3XAeNXD6`3V8$qyN8ccM21Fr#_f9L;_ITjLnI8ak_wmnI9W~z)
z7LU>8#>{wsAkVhV%6=0<9uSjG+4aIfZFdRVB&X7eN`ZTsK?d+Abk-pL6T1#Mcc0@e
z!)yJzc%hZ_?EMME<W{PIp|=IJlu=xz4P#0woHrj!7o&SvVVZ(>gafOKwh?7NUaFf7
zGiq477e8|G_2XLTV{85~YlP4owqDLmH=FQux?cDUGoEFDhrP=16nrZPoq8H6^wGO1
z^Vl7;q}YgD4dT;gXeG-}w-4NTuPUOOeIM9>S%y${#+j*7J1lwQQNkORkkcdDb>Gy<
z^d2|o*Ef9z7r?uNJ%?3TvqiT@<(?o<w>y2l)!eZc1@?`G)2+8O1~tA-=HKX7)>8cF
zgtS(4RpPZ<VY8%gN{Z#7aONQ}X$UxmfGiOU7d}DRz$~9T@E?CEx9yF>)8_Js%-`MR
zY|yN^4>{)Q`0~~Coo3lVUlHwVn=TG>ke4TdV51`oC&6jW-vR!P^*02BfFmn%Dbjr$
z2dO)$DRqc6+683V8iRivG&pPO>^D?lTG_z$BNr~vJiIt>9rMOoIKq|8^9<iHaFs@a
z@vq%`;h^(^k@^<8E<eH<m)ZPYpLW2r^xPRa*>#Gzt=h8X(V~wq<v_yw@5@BCu{ngP
zj@L_!SKAl`1`tr=jK{3K1uYRY8(TecMR84wb}WT->E^M7^hMO$x?N|9+MI}WrVR+o
zvZQeX2F1F_bGF4X^2A=f-My>%5)mRkhxGd+ns~yR)h3HE59PejZ4G1G8&%TW$Q|$I
zNuA2B_H+a#$7=e7!&oMG3cPg*?ngysyreHNj!VytfJ~{c3sgN}o&Da}(aRocZcxP|
zB~%<>Aq8WNaPf^<K@|+vcv$4#vva(4&!&$9Vj`I(FZc;4<@uMaJW+z{iZqlTUrs2A
zGB;Y1?d?M3b{~FrSF1%x=*N`w&~5e6hnCZu4`xjE_woL<io{I4b?6C4mL5HXSk!Yc
z<RD9pA48~<StPs~VQ-!xQ^EV-6z80m7v-k6dM_~OqaBy#%7Oa1vq@MJls6&M7T|71
zE3wE>*SO6Y{B)7~Vzf2587IC0X|mF`*E!ae_GnPu{#m)5y-Nyx+5GD?4Gu`^n>W(-
z{r$r;Ni*dxJPws(R6T5*EvK>dG1%Iq0&>sk3>cWiDU{;A`n-u?f4@{LXu=f-Ysq5h
z?p!HOwDxMnP%W>f`ih2%<&*ln^DU++a}BK@`(Rx33w5_FV>g1fJ-CwYCz8rp(lWTp
z=xU4ZWgLf}89iZ+G3wqC-=#Yf97ua!+|;d--FCIN)mH6dvFz4)^62|*-`WCnClN1N
zW-+*=%01md{<K}*YQRc!#a+??7M{3wSI$=nJGx;r`3|FA8KtqaoM0p8e@;eiehY7V
zdVh;jlye9LrnND9iy7Q60Rq{qUc*Wal<V@{=K<SZ;$Y7#hf96AxnG}U!eh0sGQv?k
z9*nrN^<dT0MF4GI_AY7s!ruA+u8_zW#cZ<i7WlaUyj1rF(b5=mM5JJKLCp!1(A~OM
zS{@F4Ah<XkzogdWl+F6TP%+Kl2Fe-{$2+EH595{thXHQbt(z%m9Zd}%uVEsKzSxP?
z6Gwg@;(@n<8>lSnePZRKwtO^DPZNazI*bUfiK=$vE~g33Civ?X|NZw~w5NVfkd+ig
zKH=Bi-~Uxo&)R5+iI-lOMfb*ylnN?G+}aqS!%I79SBT_VW*7N#hx1U(C*jM$GXOSJ
ztFr*L87t|1Zg;3}Y<?ze0PaUwO>HULQel0pyn7nB(SoB!D>SPi69b|-jT<jwW74wG
z)bVw#BOEJ@dkZj3EZ3!dtlrZz(Q*oLitv=ecIqv6j=VU}tF0P`FF5mKY_8EgauyUO
z#&Tfd0OWd+ov_&A4;AQ&O77y9TqTu6NY31}XY3BYdr0Ma!+W?^`<iK_1Nz1gy*tdP
zcxPTB59N=j^}R9aGsjxdASF-y&U)h4ECBqi;EwH~=S`IB&2EJOS!r2Q>Pc#C6|}39
z{VQohWg4Sb%V4@xXdzPEov36YQOJtq4Odgv`Y7P!9-p~&w}W^g{|j$6U)BNA(v$3Q
z!42)BU7!9*cBsG~hDvh+;VU!LBe*!=^_z1bsr(8JrldIt(qB1c?yVNu!-<A5s&H+j
zmPuo6o+Qh~EqsUDJj)5TNE++@b_ac)m5Nh2e|OQ&t2N&$ehNXmVgGtHzt<kKw_JD6
zJMa27O%LVKcnj~Ap$f2@$p6mWTlcS^ZQg&Vkyoqlrd!=M%9iaKXKz#l?zA`p<vFAC
z0~rH7zWG?HA%I2Cw_Ygwb8cKH|2w64@%|2n!3I0~ms9^ZU9Rf}m5AhEv3sq~O1v0%
zmeRd*^i*Fx!q^5iIy+p8mmSj~g>Sl8c<tF?;n?AkVDKDyj=as#YMeM^t`90Qq!{UY
zV4bd|h_$HRj&w8rKspk|XXo#;ZC<p*9Eb7$xJ~-$Lt*5C9W&zis6F^3Z>4iN@|_nV
zpR}LydlNItE4=xJ=c`dob!TU=AiJW8&B!xf1#HdEv2=DO2O)2x=XG}CqO;@pc4d(?
zXV)pBM{y;O5i%mU$q!)WMWaT!W|gZUGzc-sLEkP)DSJq^4&=YYE1n|E55MXPo$s9y
z)5~t(QUf8QUF(z_KDe-a4&Dh1{$1k>OmDI%Fn$--C4C%~(a&_5n1vo&Qgya}GcUiq
z<h82P4&vvI3{0~}4dPfiQ}&{d*FG!dJg!jTJ&xL3VdMCkcR#{c5PD1AvTv~~ZgcnA
z*M442`HVle4*P1CbaGHY)sz%EI=Um}IF-RFqptdcKc&;1LPNPctmb;G#)+ClrW=$o
zHfEdi(O}Xqa)ONUCfB!N3KLPhDk(jq#q$m(gWnwb$7hPuJOkyR4e5}irjq=74rL+d
zm)Jc#p1co&tu}ATZrD}_aAY`GQzZ6p7A|xnWW=JT{+$EkE62it_oYsb*~cXBf!;bJ
z3B@@!Fnf)~F(NxO@i?#|Wkev^gg%!IYXcdcUFHw<)yFeAr~h7=f1fDW@ewE%T=(>)
zd15_lCHZdm&mLSdf5$ga^%C&qmm7oT!0#0IUtigjf!aTY?IGr{$o{};#HQ<u-~r`4
z-8gqnEdB>RkEMJ@$qTHL@%Mvt=#|`^_&YF@o-EK@!4>jg?n}k9Om?mpJpc7Luty2z
zzF6san`cmjc7(i?0v`=Tr68#nhzbsSQp!l<ihMcsD}q%DRI5g@iypnWL2L&OG`iwQ
zge!w}%|+}CEBuQ$wNn~VmwWR4-x8?xtnu|2?kKLe{m3%YDfamYYO+pOBChdfzW~HC
zcRBI2Z_}pzz154gT7i4>WGY#2xgZ<|7v}J|Gt|DCP8O82tAdAn*ox~vrlQ852e&8V
zKKTo!JD?<H0g4jg^ZliBTrLaDJsatdUB+gXg7Yk^?&2Ne8jC$zUoV*Xxy3!}1^;o%
z&dLOxvdSnc_Zin&f$&5XLC#K?;ai$ZojSbXvtOPcTUn^9)PS+vTL_fv4s}<DAmw4f
zu_4*+>Mmu*VuB1A)@y$Gg)Y{ij>Z#A*BQlbzfaisO7$JfGmU*cUyr{v6jSw3vpv5e
zc){P?+{Ra8$b}wvqtc7uvJ=C*orFD%jPa5CXrOOOE!{DL&-LJ4^=`-WEBe&1g;KiP
zAuu#;-IJ8&p_~d_OD;3vsh5uWjAveQ3c#v@qAz;8(-VYMJPEugDs(@4pjEr@%Uyt(
znEk0^<D14LOpGN0NOStl@f-jvl_o3i-}+qE)dBjwmnx)FB73m+o~&7qLi|)3xd_+e
zC7Mg0Bt<koUZuaZ+Ri%@ZCCKQ?5HKxbd%_EXB?!c9q?dNp97T&S})r*jeT9tRyS`b
zFkJntC5&akknae26mh5Nb`O4b?DDzuKY{tr4@_|}bDzFCY;rm4(5jt3^^=-Sv3+ey
z3K2Qi*`yPd-k=+v1QgC_0U70Jz)`=+N7jKy3C={+ne|Bfo&b;P3s?H7<D>>GH`%%w
zm^8VcY%re*zxB0rRKR@J3dv{Lk~Z$f3#Cp#ZRH*1-7JvJ`MxEHEyTGIE{{g9g7Mpm
z4MnuARNtwVYlpHbkPx^5K3iWbbVesOkwwP0a!kxIVwG*s^`RicI}_fuO|k{KTdn1{
z_Y$rOj(kHLe>ucs5H9i=Lvgq&8$LgYV3r6%%h=+%ks3qWay*;5qc=~cyC<3qo0*VV
zp80C4+D24siY+v0yxZ;xnhm_Vf5v^s9Km3+@vW<;&g0qi&@~D5^_S_7gdZq{qUSSp
zCd%vZk6GqMTq-h%yjeaU$H5_iF;CnS(f9;0B9Ie2okCsL38l5P`T;VJ{ZJdZna|4d
z<*$g(@}3qKM-3PJ9mG@UlQJT3!x~e60FMJnKYQ<}`W}mgn!~bK)tc2)hghr<!eukE
zj26io-z)QKPhbQ{dhPVn-w8Z-CHvBR2a9()=yGZe5dIKr?|jb9*oym{CmccD<nLx&
zc}+&4<!mwkR8ghj*^8h+Nso}<^l2+|YQN@RwSi|m*&H>z)r^1A$$Z&xp?Sm6q&Z_}
zRdXBJEz(>;4Vg`>)-)VWSbasvhyhjG_ih5!{u6~*gl!n`Bv4u}`!pdZSPxz;1Qlj9
zBbU}tr$Md0Id^<0W12H8)aPJ`t0KYWs0r8%#)CF#kw959JTLQ`oj}?qM?tD1yZ=L>
zLce7bsn-$=(S0I9$e-xpQkUbWhzwKdJa^Gvm|cNAOi}1M(Yr@trRWxqNtJ|XVzdG%
zc$$nxsWS|s8bzq^3zAAc-G3>5;}oF)$J2ajv#hc3mYCIL7XftpCRYYaRn7w**L^Zh
z7q5sI%VnW#4vl=mKF1W^iPf*xxIK(25G<g)#`}xQN-G)E64udcDH<m2&F|nzWWPRH
z_kx1wv9tg8zRihBZ^PJnCYXG_fVVIaE<0{1z%fUy+yiM9TmK_jG?!u9=5ozP0i9$)
zXzw2=sOh^{I@U{7)G=4ti|iABaVV$!`q4X`&Bg##m_Br>8RzRez{C7{(_ShCyIYqa
zPm)K_AJSVLyh8+QK1aUVZqzt@A_MT@T8^n}q%^C_zvoV6k3Gck;eQ8lkn~1HoZMGl
zK=BakFZ)V(I~*tgfH{=1ZH$iB4G88}qQFcHW`*A%;{{+C9sC3Bv?tg@ung>kgE=E;
zQuNTTx=l-GxjuayVYup9@OTU=b5p5y4+nb^%IFknJ5`j6HBEQfP>RgX`KbsqwpNjt
zupY)^2XG+P2LHaddF9G?Kef_swd#5*-MExs%T2QLm*Oc_Pb;VnJvrksXHMP7)EbXD
zv(mmYXg{MlY~J(va#mkN!W^sqGCUqr_Su5`;^owqxd-iW!@GBmi&yuB#%2}o_9_AD
z2&3qh`_xw_yinCYk#2c0dZk`a>(lEV$7i7}o6iC(wd1C>i&dRpS)qGs1Y2;sWq^SW
z1IrS5iVRwb@qkI&$OwTL)tIH|F2F+Du^Tb`Srl;3;}<O-hOHyi=x>koJD8@^lBJhy
zJlY{rdZ;01ll?)9Kn}aJ?HV`UX5L~5NMEX=jxSXs;o4a_B>wAYMQr+#meoTqk{g*e
zRNkCzs_&2$)-ZFvt5mo#!ywROfC5`9C4v@DXO3zKD6aW7AD3^&Lp?2Hc}v3bxV3lD
zv+Ekm^CVq<r@Jx>%VB_xuk=p#^_=XuF{D&nySF#(8Wg^RaufdtpC1g8uLmuf$UF;Q
zG*5WwK{1>MvmWg{?bGuFMuUQILNIMAD*efBWLD`a@v_qU`Ywy1Qnga(Nn>m^7ac4%
zNZG~x%>cn&V*DXUTkWw{ro3X2*_UM%%3Du-x>IOu@oXJau&D}F{%n@O5J}5scX=;Y
znFCtU_3U_hPRacU`eXBVIk}Mc?g{XD!#Jq6xH_`Lg<($8)?n^V#$%Z6J*VQXR9r81
z{+xGRtDYhG1&C(Qle}+<GTl6f$P0KeKBVYP+fTuuU@ng``ev;$e9S~RJQn8pAk7)e
z+3rx<oWLbo!nZVikH#dfn@uk1Hi+EmV1QOiVEmMvf<nSVbW;J9%4JyUsw)1T@I+r;
zivb4l)Vf_Fd}UU_T$~=him0pH7>gRFCcGl?l7A+6*UmD`NUlZ?ARUIF>@C{~Tq)@$
z2^S%F%2_%)e>0{fE757fx_ywmcqQgU`(bZzwwHVOE+DfgcYatP;5sMqTy>(}#9k>;
zYg6+Y!)C0MD>)3D@`*#5BdDu`r`sZW3j!!s1!U-kBhdI$sGNu(s~OD+f}>sOX_4y%
z)|awe8Ccszq0^`ebF>lZw<t@W!OM0o75N^PL1fORn-UwvF2=(nuQ?0XMib=V=%V5(
zr=c-5ND5}qV;|9yICmMC665$R<L6UOC!9=v(w<2<7&-vQv1~=1!L>Bx;2QT{(FH$!
z4;;n(0Y`n}kY8L@tli=&dY}UD<x7sv_f@-2Vw;{Z@W!7vrd!Ki&(t*ZSS#()#At=7
zR7=VG=uFwQ-2R&UGHUhOUh0weY882@^jP`hyZFSwUJKuun>=y)S$3IYxi~}v=f#(5
zWG4_5N@+TKn0Nz4Rm3?yjkm9K$Bb*DVAs6FZjiisOArPWZ)D|-VQ>1Iy2b!p+MFec
z=05ejv*+}<Ddz^3;L`J<hIV95O55*k9W<gw5YF}jK9p^vPkP|#2XR2o7bKdFggOz>
zE>t`P5=}-hQUxJbUnw{>B;BV{)bYdZ?|AVia)4J__yHoA$cB35gU{iA1Zgj^YAgoe
za}9WV0FfLH=3elJgtu-YA3n?F0IBtcw`_k$di#_u^gloF*T*;ml;DSv3&SorjTeAD
zm}l~y@Yi=w7v=(P#{YicSUcX*DJ`mooM`Ax<-c<u96?gY#MlY2gyC6-D=BczFh|Co
za*KR*w8GpIbVUp!%x!E)#&CjKy%H>G%)LWSFfn)!e%-)QA&ZnNz-KHudQ$?1Mo4F*
zwETUEe=^M7w5FJ=Vv2b0*2-xo^jM+hicfG|#vbIzx8sn&O)0xMTIU~Bm-U<2)li*H
z*7O;mB<%`Fg%(@QrH#Okz&MOy0zBziuDkgU;@F21wp(^2j?v4gIX`%(NIa1)*>FjC
zDT-)$vuA?8foNx25XrbIr}4>Yw^Mr6z2I?&+N|yLMqH2BSoWOT|HIy!$3wZs|HCCq
zB{?NIlC)~El{LF^N@XoucG<>0c3CH>q(UWR8zlQ~80(;fEMx4<j3s0rhA@LM{H{@*
zQ_lB%pV#yHJ%2v`ctx|^bKi4cpZDjze6AM=(*xUUnzk~a&AQ8t<3P2Gd-Q;XuzbUQ
zqWs!V+N{2J;=Co^|MA<{B#}AJME>xCiz{V$?rj#b`)r3agp7t%ORAPpcT~q~C5t~6
zk18N}!^%I~WTLK6h(ku{uU{X8Y!sYt7Ihv!a_wzw+9r3z`=xAO>Trk!d+b;kt8yF5
zfWiIXacZg3P_FuNYcEg|W~sRQ6VY3xYF;(qK|=k;itU)%faycKfSuh-pXTYcS@(7+
z4`sWqMe7uZSyCPo#R=`q)hLZUs<w80)mB-F>38uRh-DIwkF9k>eW70;?(7pA-Rq&a
zc+F;JaUX}w+_J=I#`qzPp=@RCkm)OHb03uB$4E(Us?=dA)httAj2t=oUZ9S<3eMbN
zoeDzx6uT{HK&Ts=aWtvqmbHFE^aShgrxEPrwN*`nwZ}`kN@hB=<S%GBFDHjq@9Mdn
zOmhsK6OyJ0j;+}>a%{fJ;u31Qv~oJvqVcnwib?1Ri3OlQi#4{-4k^KhDGOd}FwSus
ztWA)teS@uu7Z@IYlEIDSuchBL1l$4QvXWOl`Vii)y4{;M{qi2OvN{W&dA)Hd2jtBM
zTl{EclyR^tImI*PyJ$DW-WTs|@m3|4TLM@x)c(LQ67C>VvJ^+H&t?gc=2(}}e!JX{
zpEbd#nB?r|6(O2B26UR_4ESmE#wMC#bPAe;6<s`F-<TgWFiBC{)(UEi@$_p)dP6lj
zr4E#1mkh|T%D(5Eo0Ap-_$rfx!9jJ^7O9jd*y}=7U3WQM`Bd&ZGkpm#YvhaIE^kdG
zCrtC_-?#U2G7PA!y>{eB5nq+H<oQ^{>d-2ydaCRwnf~tZTe?bD;#(Ph+SH^AB|nO|
zoG2*bG<@{9u5RtLWfrfBiRBZa*ra7%pL;#H0ku=0t~ysirv`9)Mo>~@r4RynvF*J`
zFF}0ghwGV~hqFV+$L-%X4jL568ug-Nlyu)7PeQLCum|BCKg&5Xs_Y7-iDlo+RKYOK
zTQTpxlcH8x%gdZs+}H*rFzpG~FpIjnXfFe^<c}7CwgqCfZ|wa4z?mfwiWD7jCoYrU
z+PlO~MH$@vYVkEiMp$csw}RNrF1<AOP<3tKF*@F%X>)b%!<85ha$Wfhm8VI_Wv#k-
zgiHEE{VuH1G1CG*tZRrcYqiF<HBAkS233v&R48C+J+H5UO_?dr7%8!#cNPHouDvey
zWgmD#fabwJWs8#QLvD1nO;ktvJxo<M^gC<ai@Nrr@Edb{QcLPvGP~C^ZvD>v4bf1?
zbU7R0b&r^Rdko6O^3oPMb)-5ytP%4s73zKvr|FI9^Mq!-;WYVP51VldW>WBT_a~No
zs2AVq+adO+;);%kW4^%sUW)+Yg{hD^6yN8^`@H{f?D=E&3hN!@T^-#XiJVRwFacb$
zCX`Z0VL}Qa<ncmi>Ls+-?v%W#36Izpi}sxjSZbfkIdXodE_NeR8Bt!omI941FQjvb
zM!H0a{8cPc``aeE;G?nuIdci-XgnaYUUw=$R{8>SiVKKWWgYDeK+qNw|A+_NYOa9Y
zigTE~7#lq9cXe46`RTLgxU_`KY}*zZu^IxRq;ze(*o*z1j-O+a5b<UcK1DAgxWBbj
zAwE}S5f89kE()kgpEoUb&`@T}o4sRY;!$7K`=fn?(S;cg-i+so9ii`bRJT2)4jXxu
zt}}ZBt!~m<L2~q8lwLgE<QP&WGpL8Q^7HgE%WS>mryI+7+xB)|YAc|};SPjb0ao=^
zdqU&OufnJn!F#5;drk#P-v@H<s?zh4%Ze_z<=Kjj>n1(7(Q})9tua;Ef%fw+w@IT;
z-{?>V4Hq0fipliBzPUl%o_}|UguW~nQhaVp?s)s@n><?9F0POKlLfw9aB6i!f2+eD
zvwB1{vC+TJOK-(1bUUa=)zA~=OBG)xwl})#X=l4NXCgS6hpnv9;R52!wN`TXZv{`C
zv5z#FlEMgAZDGiDgTy|!gP`SZtv%WBI-lrL%$nSHR<1b@O5wyqu>3Ok1gyef`$K1O
z0}M%tG#t@!X4y1%`fXC?Y<>dVOk^iuR32}qZ|F1M(e%Buu-=jjNVqGYOsWt40*P*g
zBs@98H;`%qI&gdx>j;(*{LMWjtQIJCfRWhTOaE5w<mq(#M6_xxNz>!9YRR&L{3xe!
zXO27{N*?2#GD9dr>kFCeo{r$Sw`~w=jV{dz(iHKYd-w5qW}5m}ou0hq9-uAgRSKxj
z8i13kK)_5xx9{ljfOYT1>mjVhS~1&ZZ)|I3zr=zX;k#Jgap6Cp3wS5m{m*mA^sX9D
zWx6Pss1UjvNPvtCzt^Fk@Q4PmwC`+@&5K|hLDSVUfJuI+uvlME)wU0}?cM+R6%42Y
z-+|m5tGjAj<`nR@YEd++NoO(NcQRZfn4VBg1SHs?NRxOcpq#xYWZAe#7Sm3*3m`qK
zgU-j5I3+D%iKPzEnVvN63kU%kCG_iI?Ov$>bo9oC$&Oj2njnUsboAltTTm%(Mi`du
z3)$cu;}PsYqx7lM<9M!e^R(PHI|&aVMA#4EknczHuF!q>E`pMXlUt95AAOa`#8}+>
z)e`UCP{G`lZOoE(4{#=TfoE{4BUr@Uzt%cuFe0g-md$OMVZyczArkLSdi&+e=PKuN
zv~NFh6Z0;|+y0xdSRO}4gfy#lz3i^8RDZ4RC!>U|uk|kr@MRWoz0`J{tN`my)A=9F
zHr#MKW};`jEFp*Zw%=~v)nq2I@#&vGh;3TMg7QLNq6=5<TgZ=b9G;qEJ#0(<a8y>f
zDEVY26W?chXmfIcQ0F3|=N$j#HocN7T5qpcu7n_3a-k)}j_h0!leI8e|C=|1HQg)9
zK2U}~qNm%1$2qV^h%pKykxTr<)NRx@D4F-1gLD17LO0qLCz!7ObiHUOh{;mBZ^??7
z7wgw|X?b?C`Z_7|prkxeR(Z<W@khGZ4<Af#Ocr!Gf?cW#Tf#HPHaqxmiLS@%Sye<1
zRj%h8hTc3|s#~_%`GxSy38KwbKO8+|I(`;@Fs5e#IsJoSxO}W~DMqV{9&oL1WVZ5;
zYJoLX*}i9>eaUsKtnEMy)TJS!1Y}cVXrGMZBM+;u)_`81*7jS+d-q<8A=exi%VA6E
z9p6az5wb}W3uDy;76q%j#kEpz3=((o9$#r)55X;c-R*bZfM<Z*ei9p7%7iZb%EV+d
zQf#yYY@|k*{#*#+A^|c!ZG;n^yCv&q`HpUOllh!B&2XuhAh_VaKic&4R*#-Iy<29!
z-E08hD4az07}y!*CmUhV4urr)92dOpujuiil^Xn@%LbZ9;^b}M#I&7Tll68cNexhk
zuR7opa>Ob`3`<HVYfi(5wRu)Ub!J<f3ODSzx3K_UTA05^->&*Dy1Gr6B6?G&0lAWq
zm`||dXkCwXqL%<R0mlnnw4O`*uf*KO2Y+@H6ddUnX>4rW&bXJ+7<XCAhxXjpVYx$9
z!o5=uh*hOI$2RPP4{pj~Er?^@26lliKw!Ls&Np?39vHQUity^!^=Rccw%F-NbkMJb
za=)O|yDf>c<y~JsK5-uYz}7O*M?Bpcx)=YA%s1i=*n`1QkuB4_Mj3-n^srb$EJ`P+
zg&CE`Ka?aCNpvgxh+y{jC&T@sjJ57Rt-4#FDL!9PD?@OOZ>#}M(Y@j4kG%&RO;?!D
z{*0_fx{?3|d<j@L&g81tXQIu6vVy%Xj*ZqC@JZ~4{4VOPy!^KgJpOjbb(ZTIMT0NP
zQ4?4?2kaW6X)Hu&jkQSjc<zF(T|<EV4=R7OR>~&TOQL;5>4{WrDvL~YQU|>3dX$It
z<i3cWbdN`i$12ItsT}E{%@2H7H2so)UuAE!y7ZeYSKG%~hW4!$bM3qbF*&DVk<jPp
zzH=Kk>8%|zc>Y>-C^0Q4$c^6!y;XJ;&T!;&j<DrUXHU+bs<p$N5T9*pT|TLZ+9cu0
zrM$%%d8=Gx+jOrTb)+-8?v9z~$5Fn>w|{|6;?WGYK5AfI+m%_QBOV4gKo^y^{CjSt
zA}xy_6V@VcsePLIz4MkkWvXPd>Z|qoSZra-9)kPvd|jJd0b+laXw*ZtEpM`M&Hez%
zX%s{2lPRmGtu#r%Z!xs;6|u#$@D$<YTR_HSG07X-KN;kA6JCH<UARpY=(BioP1*Iy
za8a}?yubYVIAbQu{F%2e<fL0txpg`bEyq4Fu7w^ZEN1t<Gk#z8iYs-$xty*Eo3$Gs
zsWNx6>yyI)_pP-*;%*HiZtjNdXxzP5Q)gXRIhsh^c`-rajB?VopafTieXw%ElMy6p
zgDAvWl_J*%@$anjf(>e#<kG}2%aRhmHv*3MYATht*l$H-5niP+apjc|ahjOjyd4E1
z&YGG`g<B047;kh-Lx}q>zm8QXetf>U1%XhyHC?q&Aag+3{Ge=!wXCw*9Hsru!4S2}
z#eQ-92mCx|4Mo1*zH9xIDE>0?gcBpfcla~6^ZgGM95O!%@$40Mf&_iwH?l`6mU=P0
zPU~CE|8gAa)H<kDTzg-Kb?;L42vx8;$Mb_a8;pATnn5R`No%t}*KS!P`Uu>m((iuH
zcZW7$f9&5Oxs4INFbhQKDaF8M(GDxZW5%din3@$uSlawwECvrdAcQ6-DyrmgPBFAS
z$@%_K&xInsN!)S3-(n*5kI#0B2kf+jW_znNL1!|^zG2+(FVQm7<OPy*7mMCjDb_f{
zU~g4o0MnAohj8hFA2VuJJ{5A?7Ni|JVYJ;<@^s-Ir$F=q7;M)QBSa7UC%ckBPq&^?
zPz1bJzZQZY$mQ?91!VFAW5fj$+172tthYU|CXfEl$j&@LiI8hG)ih~+F^{qHU!I@8
z-znjMwT2L`Sb&~vxMf`eNyov<JsdGtxc+{~--qzy0M|8+OXSrQckgSS+QLVGbjv#c
z<Oi~yxH%W?!2uV}nQo#nO+rg>FJ$x}5F&u%yD$H&X3+CzvWQl4=q|~o&*v$->KuFw
zO5|oWq8+0DMGOrAm12>+Ne7G-a{NDtp;F{U;gg2od>TfrnvY2@N}S(xdgVCRJ^d&K
z3LT_jf1vxKTGnI}*6z%}|I|qh<=i^<A-4Yw>lFOoW1Tm|d)rh38UVZlvNJay7Jx9A
z7WYrh<5Bnz3$H|#oceh@iSP8qnzDuH2+zBL2^4)M)$5;rNFGZc!R})sUV-+Jbq%K|
z=YiVh3Cq{0U>%=)mBh_{TlVf1D<6YnRNrWLLh<!`V6%;KmUkaTN9v$)mL7f;s2slY
z=bfh=B_v$s4NLW8_3PJ9ii{euiT1ySk7YwPKS|`~eBeIf^@A=-_of4G=yKAS<eDNT
zfoFHwRER~2TIuyGfHzvw<y&rf(QV7AsX3rJH2*=sZ)v)JIR+)D?QW~3d-q1-7H@UG
zlOopv6|xsBnRRHJ_q2+h1#R2668*|E@qi?wU>=KXX|+Felz<Bt@;|RLipVd#X)6jX
zVF2zeO=`ME-NKiY-uLf#|BOVu`zk325W3S5dXnWBpI7ZM0ss3?jmwfMK&-(UL{`*1
zK8-t{DiS%RWI(c<;u*g_(^VnZQOU%ZVH3X_B~DhNsogYdmv>31SZyYEPf|Y}_r;wb
z059K_dRA$&7QZ%G6?V9B@RO`{<Qe(PH$YSRuB3WsvJ3lynG*d^o+e!ZKN@ubocHM@
z^{D&uK`LKfZFP+r#SF(*tP8+k`a82+JuXKI<)uvyoVWsJ?CBJN`S*pSCuc=(r>=U+
z&m&9X{7r!*z6`YIvKjJZ9d^cz9K>Ag07Lc=TAc<4=Vodj8)*4`mDUH{dE*+weOn6`
zAR_b<avhAKkvBST&>0{2kE5V4&*<_Z<l}*U&}fxqXwZti)`5U>-d$!l8tQGGFsIK-
z=jE5)O?YqL{b(vn)b!)NiScP58ZE!sQ|bOEwalN=WSF+AiZX)qUO}9>wN9}JM@7vz
z<gj$H*bdzgt9{rF2oD4b{nnb@K=T7HB2RDN2HPY>Qh^*Y)#boz3^>46HtC(+O^jsw
z9qofVkYhyMPct|{bY+9tR->0Vy(e3^)=o~sCue^&hqt<3m7)p%(3Hhv2*>*RoGe8U
zl|KK6Ux8Vg{TFDE*N(4J;Q<n)=j^<iGB;d_Jn1~-qj!3(+~XAzXASz1B~rS);@#r~
zwcVd&-hNvc$<bzg@!QvGCw*r6e*zrc_QR_^Hf;TiIWsry0Nc#Ua6R^(m}f|}zVv>J
zADYlHo}QZ`=!)RO^1@x5;tpR{St3X+V&z4Oijef8>&2(yJV#M5W$3`_2CH$gBX1(P
zb{y5}i%T+$*W@!C8*v|WpZ#m3%-uqB$)NztStrlZJ*Bn2)L?bU-`huCR_49=l<kiw
zPT~Xf9|=y{kZVCappx$|unF?W<=~v2WhM9+hU2<=*F${7x?~=hQC??BNpv4tG?p_^
zxmpS@8>cIlO^YOiCwdr^%vRqmP?Y4g?z<?}&$;F`tWH&Bw-|l%ThA46;r#yqa87Ll
zIM25O9J!wW=OT^Y`EP)Ob%Xm>`~q-}rg7W;061|N^)ws}-`M=bH(CJS9Q_sFXsi6h
zH}1dS8z#wL@Qu6YrD!j|%}Z!b{mv>@QuL6U^I!tGD~hkkw9^<n>%e3A98ZG6s&4}S
zUrS}0P?y*Jugw)}(lg&^e*PcJ4eejR^VX-k_CDG(I|{~)!AkE6{mQEWJlVpF1j4J=
zfAc#XB`&hc>g)dioRxN8AM_7^1C@B)bHeG#4}NFvO3F`wGx-?;E1?0L`t1OR7mmuX
z4O+-Pc4$(sj$-6*Kzx|25=U55!m@O4VLa`-HM~&#uvjx$NgN?9ELy74Y+r9|?S$Q!
zumB97h}Ewjf>!G1Z`1q~{#7$G$t-Dlz+g~K_v*lK;T4$@v#8ZO=V7P1kvVRr7>7YQ
z2ev;oNcEWw@7Iy=wPe2p@UD2)<?rvRTVv%>v8*%(#yvcy{g|^rmdt4W>%DYA=d|HH
zW+Or8f4oghu9a2)Cfje{uU}8{`px4t2}hI-{__FfUp~DFZ~&R#x<~u}_Xn=u0s$fF
zv`gn*`gLW~PLk-R?Zup}$v?kb*1y5eJm;2)0)N#Bvt{=K8;H|ntt8H(e@|HW@iD;?
zK$Eo$(EpOPexqH!voIQ~K&i^|?R_M275Ics|3oBn0zVPS?eh-(u^9!Lx|79R6*C)Q
zhwb_!g7d#W+35~l@@9n=jJw}hdjHq^lsDnHoqXHONq}w30wWlHW}CnqVkI-_-qh1V
z#$);>?0isPKlmNwtnLld2Uh(e3VL2aVl+AFVwwWzMY~KG;d%0~`M|AOYzz#tQ$S!|
zBTLLIy<Vkf)apztIh*0}*VEk9A*g$eJ$XX_rG4klJ20WZSO}w+SEN{W3)8w;CujRO
zD7`P63`)MXmf^@)g-lg&EA(#j-yVtGZeG5b)7N!+pK&uSeM#XKEi{P(?Wv*!3QiFH
z2Erul2M;ASRNc+ZX!d+7mzvO-*7rC}RWCJIr1#v((>FH7{BFlTowi)dj>;vDOKTL-
zEWZC-%=C|2*1&#oEt)k@$M=6p$L=OHH|c`ZjQ;xkA2iPZa2~g>*kp-<<dt|BS5iEu
z<lbx@RY0%Vs$0Q(2y&B0C2G3-D(`2B%Sak(&Q;zpN3--@WsAex6!Q76;7zYZQ~Q=T
z$>f19Vct8?jifZ-XZSXEs%GgJ*gWj{KraaScmrjqbz&G3B_-h=|M<sjNXY<hro!bW
zVujt*Wb@K`wivK&Q7~p_<nL$btb^GGt95&+RX)mf5-)lr$SiJa9QZVgw?Rs@lq%4n
zKFV0QyfQnf2y2JXa<{I=qPu@TA<yVQ5{u?-xPwfUPJ<FRjW#~=vmZLFTQ|PaFBx7o
z;TrXZ@x+4%@_T+U5;j^jqui*EX|j$EK_(Fb$?hRhu`$ISC5}MPDN8D+nC6DxyW|JL
zQ#Uak;QyrzV_Po9A&a1ga)99i>?N@3VwaFWc2?@}vOJ8>ei3Re=lSp{VgvF(zoCa8
z5%&XBAIPWvRXgbf4YaTKeAPIDWDV?leczE=05~Wr`b93ef^ZG4>Xq#ihAfa;O~d72
z0JhYDtFHVC1i{BmKmJdA7NTTbkZ1fBgl8u<?lHt43=%j4dY(g!;b75H&_48wB;z4G
z3A}}#boU1gKAq#M))32NvZ?00Lz81n?!G^(sxwrTEpv8<MCZOyo99N*yvEGSI%Ne)
z$`BsVgTNN{S2>AP;yiiH%^jw%0AS{mJ@DNwUDH7SPL<a)X^M-W8Q&d9S8NM;f{V?T
zH6Z+f0os<AY<NaVM>JYg@diFgdSHzov$hqm*;-V;|Io^QfWkmbh(Jxjs+r~m-rSd{
zwI3{_5u;L0z(@>wrGxpkaa$fkhw?_GvZ%RfZ`j^Wpr`PCq+cdbmUstxdMnlQ%7I4c
zBrHHccLDOGnQ_y;1`{bya!eUadFWzw*#TNW?5LQXC93L}N<b(&ynI5R_m>*wc8Szx
zVOh5t(wY(mx?9UTJtiRr^@fM@1l3jCpV(GqK$O#13+2}Yg%wNtlHvhQ@dw?(g^l(`
zHF+~i1f|92UNc#blyqpDlTTsnyYG-K*LhAvCsbsFKYNQGs0`~&{X5bWCE=j{Wae*j
zpk=|=YhcR-a?C3)LZ~DhdBW*G)R85N$p|@e+{3Hb7v<*cv5g!@|NPSbLKf#uGV-k(
zH}9Pxebqwwo3jG+)6=e#wxu-Gs5201kCV)KPA<H$59f5`5kGHa|HQ=F$#m*M{EY-{
zt6l#tp1WwpvuUG)v}<<^5FIv7{lW#Xm+%LDcZbZ|H1MfK!W%nQsCHZ7T6$6_Q$1~R
zJ$O%hWGVHHASjw1daGb-bLm%d&AI=BcR%>cu}v`k{sD$&5n03{wg0LeEMNVcZ_Dm%
zA4<!jZe#a<REod8Ok8sPV|zRNcbWUyK;04mH^v>4V`}?<TQUAwOn*Kwf#J`{MF?{$
zIP``sHlW~e`_W%l-QS)9`_2Yr{9myFKR?@1Ra5+iJ$uxfqYee)gvPGncO$~hWQ*}e
z|4?m$IIsw8m<^pR%z;#sip1y8T54C4(wbJ~-uT?bqrIX8J*u&*N<H`(xVHDJZ~HmU
z&uTbEOG#^jiJ{y~E|m#JoRUo~(uDYu<_^TSX8S11&;l<LEEUfl+AUZSBFm&+(9oyr
zSPi$_et)h+(Nq+7l#KwG^!>ApBPIVX<3BHr632azHWa|U&gCjEX`6qPYN=ybF#13+
z{<7u-Sk9-7IFCrnT&YIom(5YE3&1AnW7+u4O2#8F_X%M<HX0b)r&1-xGgJf5(aZqE
zjf|4=;&jiecyAA@KxYp1w@Gh5Ys`vXDKYRV=}8cB%%Zut;+Adp<{e9CyglrVA@~eF
z5gnj@xN3wg%cvRx_An5X%7PiV+ukt{&yQRoH%|AaRvE9%KHj@GeO&U94zaZ@kSFc(
zqWDw5sl0?&<USuX$;W0OW~&nQjQo~1*Q6FV<Em~6`61NMGuLd>_N=3QOkdhYn{#6<
z`lI;bTnp;OKXZ^v)Vs_5Rs9yD0$Tl7x8*nh)&!%N$hb}ydSBxoK`{r&zttO>1hn*^
zEFi|#(Ge+~7U?+KsSlF*87N+n4}(X2SIGl$yttOfB~?R{4vu2lo!mDav_$y(3>tn|
z8^#!T1^VB$heu^-58N<1JoH!XhL{29eY-D88JbX6&2mHna%n!$U&sgtRoD{f#`LAU
z(-9TGaWZGWxY9LNj;9}tjD7G0$Pb|X0yS6cqh15!Ctd;EyS6V1y$&;7>BgxrF3Yw2
z3b~alh&j|>%?*a*gj&WUc^gB}<+E&GeB9^4n(lAtr)@BHLaSa?UfEn6zRJL$<4Wg~
zAT*FW<Ytpf6rXE<GlpMY7;(VauQgFxbL<|5X3&xoYU0BnI1!gP9tE2t66}^>QML*d
zu1ge0fw-`oN+*KWfLFU0%?Ai#r2DMTQVPaK_H@RNc8BeCb<hP9RT$s8gZwa1lD^WD
z2_BwRn}K_-!tJt2c)j0OXQz4wf?_;LvVoR`Yba#3><QbeZAd)_<z{0)1r`dke#r|o
zHbtMFFmKq%MY3Kt*R>vN-A98>gV{1Hvwe4Agzly?&K3Fb`YGTnvYiXF88pAH#o8ev
zqT>_9Vy9E`WDfO7_K)d-r{8Tc)f}a34_%i>B<$k93@m9&cY`6(awt>+eA7Eb4p2@K
zu~iexUh)?J{h=jPS>7p63kvEtY^>Mjf$`Phv!t*rsjOFf_97iLvReLtU#mN_Hc_O#
zhNGXhf6(fHCsyIJI;eOr-Ulnd4s~~Y?FGd)<vJ-Oe0H%_jM~48M@Xkuf7pA7{+!Uo
zD-}$FvO`DZuU3mhKNjbkqZ)WiQ{QnPadV<vk1<`liH8e@sds-23Od(Mj|Wa4G}xbZ
z7j{^3Q_Lr)M^3KAr{5CKI;r3h0JtJ|Iylk~ZWbhLR4Qo{6$cBI(=X~SHWJYxM!FYZ
zL&cqJpQG>hJ0HhqR8t35;R6f5%_Q3$cYCMw!_O}#s>E4u?{}i}1zMC;wdVLB#`+}W
z&<4F{t29~dk7wNg^aeDY)9AGj+;=IUl98;^!Hnq1%wPFT385Kp)I6ICXUhjI*dEa{
zOr8|k7n9Z%nm)IWSqE*w-$w`{9;@uqYe2+7zc1sVXXml6XJZPyqwIMHE11QjgKm%}
zpR-HH^H*|@=61RBDu@9}rS*?DOe$9Jw4<NTYrOILGvzU7YGHY!7J~W`ZGot(Y9MAt
zRXG=SwTb{6|1jSGQedbWdrw4JUUF@O;NF^_D1I5zTvS1k{!kY8@TAdDaT)o3>&H8=
zTM5r|kQ3$BKIOSSUZJ`7??tj%Ac%{IF*H$p@(vq)kzYZYjFeZ#F-}~2^l}lVwQpEj
z=!m>(-cZ+o%&Puu`fQAi%<RP^WZY1G<gFI+#qgchcq@F7-118TtL?ULc`5^eTG!~w
zd){W<O*O8peh&eCDF6jhjF_b)?B*WYOyHfTb!fHo0;0y+mCd<#B`cmQbPT$JO=>^v
zh@FVrI3^+rnd+$TKd0hl{q%55*hH%B)R@ZmR?LZiXKXwvmN^D&Cvwoc)h}=f7cw9=
zR9Vq#6_#Kw{54nj$_1`RGiHPG5Rnd-y?f&^MG+NlNnTO#;L(Wl;%tudpYq~8M`S%6
zI3U<|r2EW}48^B|{*VbAVGP);uk=fVQ2Up28&@Xmx~@6IxlY@*PW|=FkJZFbMOC$I
z@nl;3Ov8T9hp#>G4K4HUVO;%#6<icKS&Ff|bY+?Vd=YzZnyrOGAyAlPiRWbWD+o>!
z;uK8eKG#;{3$9m_M@581Z+x)Y?HC(;<9Gbf`a~g5r(g}JT!e~V2h+S=0Vu==|EmpO
zqK5ZeDxggQ(~xAauW_V#e8LfWJA+f|YmgDJvah}a>sEz`bvoBmi1n8sc4H^qyz;#y
z)HLqhH`Dd0u@DjMBYsh$o&Kx+e0CmZ`8P$8B}-u72hK`CwMg7#vs5OQ$|D_g-@=*+
zn}|(egG>ipnT;nCvG-CP=80Jm(%tnIgn05i<VZ)-E0IGfc;pyGLVA514fRi}HaU=2
z?f?26uT^PVYnb|N)RClC);1y4>q*>FUHi*cpGtB_$5~GuG&MPWuL)swPR&Q~)WI+d
z3|1;OxYws&_t{=nk0*Z=&&HMe2I;>YzNQRe#@$nxtyrdm;d;MJgcd=+N-q{uO+$}e
zB2FL@8geJ!^Px8eaF#<?R`9yxm#M4z;VHd&s(uskr6d_0VpH3?s!zOWM*KG0F__~e
z*B325e1r&%M>wm5I{R*omhno6Rvm~+x>oFCqcZY}r=(%1-!DW-^OmU8a2IK~3bL7n
zM)PR^;cQbZ?(iu<b^r7Yk&Axu4Yf20X@!`}G(w?oah?pfzxT_R2k0FAR8sd4u03Il
zl6=Fm17{ZW40)zH|1*d??ys{kMx2!{8gIX~>L5E4A%}#(;Fe?64yKs>!BcyxB1{}7
z!aM}UnK5(nqL<qoM0(3d<HH6%=NOTW63TEVl(!G0*${9l`tyLNH<eP&tRMD3of)`u
zn;94SpBarSkKF|c12sCIDz{=A+SZsFW%T`PZ@+<5LOnbYK0%QEz{lkzecceFhXOQ|
z-<zKYGy5{Kflo=A!}Zx&_C7>|<lt(bdq2(+GyE5_7{8r}TGyoQre*A@AM(ItHw{id
z_vpCspCESgz~zn6tPS%k-$S0iFbuz8UC?@V0XTDEd2IOWe?MmHDJyz_ih?0c_ktm&
zDl{sJ$L;|7_j~M@SD5G6qM~AN{a;a0>qi1)qrIA1h1SJl3t4FG!ULW?_JdI=ie*96
z^g7Y)a$!K{S%vYzDTIYOxCo8^q*b5&omSN;bB3nY|FBZymMHT2+0MGW<$`=hlH`WJ
zp(aR+RxO?UPE)TNegV<7?n+0N;#{7ToouOmGN*5V2?pKCmM=B{Te5B#G`^k2a&n<r
zd|ICugJ|#GJ$*IC{@*fqe$E02`{a=eiL1OHVdtlvUAeIAbqk9$IT5fk#u>9i*7Tus
zMvzPQT%3M+vAP|YuaQcMc~L&RM|HWdnMJF@2)K5TL`=_9j%w%Kz;e<Kbg`-8GWqE-
z$(abx(i^lC_?C#~x>q#aPZ8zjCxI$4MGQt)-=-iIi#^CE0Br00LJC=GOH*Eg4LN9N
z-F+%oS{w!_F6Eyr)yMueDlz?ZcX0Z~bE?<+#1DUUOXlx!Az;s^QDK1Gu$v-L%Tqk<
zXt5pvUN&gkr&CmP%_7%yygb+(2I@y#QUWnrZ(<O7FZ2Gcht(`Sw1F*gm42n~iJd0e
zhKiSgbN|;?u;w<+5v{8rwlyP8>Zddo%_MQ29Sm;DGown<#!EWg`Ym4s4ABB?D)`ul
zv?Ok>nJ|?8R4W<QwrSX}BjE-;AFDT^v-i2OMNnta5R)r&(Klk0-M7M7Zwe(uO}q{W
zLSi6`Sl&!%9;`ui(USyW_aa?SN$_pv+dg5mYl`QXn#$A3yzTY~C-JPuF+9W>%pDSi
zbsAGCvF_exch91h2d+DKyF4Oj*e{>VvIETotf1OeRVPRwV0=@uZ%0yEKQID8UT*=G
zfW3$NoR1sG_sjhSNSh4m<mPnJ32ssUwF?8%iSfC_o~ygy(KNrf<yx|oSZ0>N^FNEz
zIi}+L)|11FTj-hOQ799Jk|(v>zIUa2`huuIZ<(l&?NKH-gZOd;e~mP`RrqocEm@?N
zreNfXaC^GvD=o?dJY_xflh5J@$oA}`zUr5*Nckj-0S_)meD9aiAjd7?EBw3g#YYi*
zPs=<#Ec22ET3U{}>}jqgMBV<3!y0Irdd*B3Y1iUhAIng{5j9vGXf;IO=^3~rqmOZO
zDb2*`4@==T2#%l$Od~r^%@PW>;!c5-mq{u68&A`|12uXFpNg`&i$2@$S(xb)154(x
z$E7tYm(1XD(QzB&KvolTuiHOiFGIb(s!91_eQpgrH5T=Kq}V@hL5&4E61o3JF3L3w
z!?+cT^2<;7e=s?_O*zs*nM(-aEHAMH8EH{mo`B!TG#K=A*<B)<1DF@p>Ys2IB77xH
zpUfJ9R2r?H;w+pEKHuC8s4-wZ>(CPuA?CX-_By~)$TX*u8n4;+oYa!=_a)_mT8$ja
zMn1{vt*W#rglVz1l_YWAfZV*XLh&Cx2FOxoflG?lqXe&w?>vNO>Qix{)F_#B<`KmG
zG?7!9Cshs~-{!VRblKDA^DH5@cV-`K;f5(@V<Q>xZT{DEf6k_>zE#6WxQ;5R!HUz;
zRCjIn*&D1zDYy25#E5jWkhPBP=ElI|R<|j6c$_q*#K?+mL8kHkHLKEA{NRQ$nMKBg
zmb~hJP+V)JR-Ti03p$F06nV+R{T@z~@Va6c!Pq+Lk(hm9#{|qRgYGd4<8kEWvRTaj
z1)cIfPs;a#eIcr5_?_9-&>@_KB|h6p`s+9~u(g*5q=qHidEHOO)x@LEk>8M5lHG~#
zuch)#r_z*!yafJBS5URy7ET}~cI@<bm+;R@6L9NXTZMae2d`mmEjfaK`w;|I`#T8i
zR$(-wH?uMnmiorp?PJF5=!()pm>7^e4jn!+!V{7bu{+M{?*T(7!M_I#vGd7ByD3T2
z*tm$duvw_r%;%8ajv4CWG;_;yr`lV(5z$EE2%k8QbWxgshsp2>%Rnbf@fDkT0k+!k
zsoUOEwgHnVhqvFu*_Q);%qCj2B1XuumB1*n&B{U`?7N7O<G=dv8tO?S=t5zhJ$|q*
zTGA-O_&A_u#Gg*+5QI%GjEM|3m7v*P_>k3=2F-Q-R}01+Qsccc;GXQ5s!DdHXeTZ+
z^x$U!6E!#3Sc&--O_*p#|0Ko}g&QG3%YhdPj^IaSFBL%~hkjdjX{42t8Lf1+1Q&y3
z*WRsU*Fy;U{P%?hSoP{n2FhF#j&JkSfw~;Ve3a81-N1Eo@#nSq4^nQP0T97ePV6@S
zIZ9}YI|CpG3@kD+v^o;}0JfJluqc5g?Yms~uVV(MNZWYJuPpvYzpG^u7<%G+CDCj2
zu8B3{_Fakpfj{$#0f3k7)e+%O+ZuB8&(h%}8sI=dXdB*fDXPPLx9l|Y4~0jcrAX=&
z;IoxwSDyPNd`7~lxK5BT)&xV=;1?z+AnoNKF=15RN41*Z(SzD~>r7pvWp078WI0Vx
z0htAlqn{W2JuJVT1M7q5prA5v2O*3iCF{riEXh#a%Q_VVanezlx?|=hWmNCTZEf}O
zFD4+IvD&+wTD*HDqUK@B%$w-=QQY|7nPq4MiE*+ogOAp+QFEq>IA|9Dg!p8{Eu%p-
z?FE#E_5G`z!ajHZe+uvaD+<rQ{jUn6;G3@b*nKp5j)B+C%)lEtxM8ji_@q9)AuEUs
zFi5krZ^orKd-<}tE+Tt`NJ?A2doYnpMZfe~@>wCxtnydoElazQLpQK7xlh`M*QPNX
zcJX`MXtQxx9jB6YCvtlU?isdrYsoy~#O{uEMeeu%Z|OZS5X94OKG15wCpa>!tOXmy
zB5F*n9-3AM;oj+fo`{9@Vl^sD>X7d#ufUCoT0p2~lQyvxtSc9?C}E>RD#E*cnqG5S
zFuqIVw}jq4lvCUzl}XK-&wKXFfjy(=aNU(+TZgQk>SX=1imwFzpbxnC=Dc+Fj(b+&
z3-S{+ED{ThC;1vt35(um$b*YA7_U|@6O*Hh>+m5jLsMwSv(waUO>=?%B3(_LGgG6M
z_~N>j=YSKarROG3k|fv+#fLR}J>0IKg<$xGVlmPp`*iQxN$R&}sdEiF#v4moA=7@r
zPpX9*LWm#yb1Y%@Q<QZ#&nl^iQ+}a*GNOM`TjVYsxc6)ytNRC8pZ;`mwb+%<&qKO*
zQoj3`{=W0$Ja_tNrlBwe=E>6x6NM6%JsC%n`lKS5r|)Y@f$z+%hIj;RL7w=lMi3K`
z@0`~o;}udh<aI;)WNopKSSQ2S9AU8EXrFJ5;bl~@vIu(f1a?BwRi&m?klD(F6=G3=
zw6Fgpu&J-{M?dray&ZAxK6?uVAGXxB9T-1(YOAOp&!=}RC77XvJ>!`NRZUQuEScA4
zI(>YmQ}pbXKfD$wuWgZq@~>PuQSD_QmVBX9(h_9VY;RM(^7x}|>q_lQAWDXrYrN<B
zG94qXD&NO(-GozYi>;y+;#t~Or96f|`h9~B30~UyNf+kql_X?dS$2L5o@K^vbV7@x
zH$D9lkB}zn!tE_mQRGU+r9j-<MWq=IUPPN!9SWw)S`wFP1V}~vnzw)b5ec}Ox@!09
zh9~Em=<(jNlnCZIEE{%Aa#I`<-vc&~{NSa_%iZ;%$bQ-SHl9Idc15O6(6Zb@`Po`Y
z*$p0nfpJ$uksiWtq~b+%_Yh_7q`GV6uMt~t#<gp5j|+dzL$s*Ap&CBG7;_cD(pq4T
zy8mkB^WDQW5$$v4k(mTo@Dlm=c3q5SR#fpY8eo#|YDV-%?-*E^;BvP!Zg%%<YC1h&
zR=DS*VqiC(KhUGxj99)$B-+<uMz`BIoC?|H4>uDU#4#5lTl^Cf%FgLEB7${kJ$As3
zLo4=PudTANXJUiNb0g?+-q)zLk&1XhW@y98%(5$6qW9W!V*kN6OsX`3Q3a!8=_+zd
z6QN?s5T0R$n78MR6%g0-{bc8A6p1@y<)v2Po04b#ycOz!RUt|%nM5N71(<CELy*4i
zFdmLLWlU?gKz!_>IE=&6+SmYxfdi#n^!zn>m>)dX%L~a|h#kvz@Uk1e&LVt8L7Ky-
zskD)AX{C)cmkjYG1sYW$$dB@t>K%+);`6T5h1#Vq6g5A>nIT4J`F(R5cNCc;%yIb>
zPb;wXvo%7r&-Zt&{vxxtZ{~Tp((;|WJ)L6C<N6$Zu@E{RQu&FLC5GK|5gVQgthDoi
zIQXZX;K{idr@)FY*2KgGK@XcEu=P#Fh1ht{^1>ktD%Rz*VM|f;{z1&2g`CXHJlv<H
zgH6~CCfrmDw!FJF7zTR}97fPCJKE~zq!%lz8^+Pd0&WC}a;y4m@j2w;7SCt_r}2y(
z2-kj$?hvtKY+TQqH&i#hPo?w&8>9>}LS0T(b2M;nSc@5wnWbU@&zMm1p<h+1jbX`N
zQTzt^bB*{BY(>h9CZsd%^&!g9sy_V)QA;hTL@SFrtLK%QK7?>9uZ|&BM}xK(esH*7
zZi3NZ=V5i2$J@2g@l`+4Y9JhP=&*!fMSlo-15wvnhkQ{jI2bR&d$Mcbf%ybv8##M|
zzFZ<N=jJJ&Mme7WV>WvwQ{vV9sL7-2mUmC`deBDqHKjga=?n3N7R<z<_dX@-@51ZI
zbybJV-RJw@P~BqqnZMj3dcZWYRqz~1&&RW}xXprr(8E?cvUge*YFq!;=Zzmx&QheJ
zVw5FBgluo>_-@Z<>=&%I)l?H}OGi{jbi>j|j8qwaae;1$?x>QShjkdM!&xp-E>Y*y
z`hE5@@M=g@H1b2W%@9#bIlREL(LBNCM#Y-r`CBFphvSC`-(o#B)<(sg*9Oi8+ge95
zqn0wxXX;)0NZq-X(s-^&IS6+~f=9xypgGt(%9L_^kEXGxvNNvAkOL;;(+bA8RUR8n
z%W%<pYjCwI)O9+O+t#)ai$XBW3MZ1V-Y3rDj;!~Nj#f;>U%Mq0m)n3|TqR(_d)?ZW
zQ~gXv3o*wlS9uoueXCk6rk3sXl*rK&dvJwTy(a{4l^6zPBZlAi^9x`;ZVDx+_;1ud
ztacZyIWKu_5B<Z))4BYm5D(0TqP~7k1^g+ws>|S^&NG6r;3X4tX}A&BwU~W<VVu!e
zKnt<<Er>YLw_Z23`sh+@*WLzU%M!QOO~~c;b>s_+$k3C_y#Gvkb(TRh_KH(4o*5=u
zIpJ8^BA|}6gk>@x!c{oCxGWCbfy?8f_kO>Rp6%|Fthe&?iAv_p=U_W9ZZt;s0Qpgn
z-9cGLE!QBjQ?SlPH-OZ7*i-sGweW+YflPz9xK{$c6Am$G*X8O%D4TgdgkCGbW9pXc
zT9c5}r}=-F1g&OE8^H)ys_HE%rWD&K{*+(I5&)O!kqXY2-hG5UW<nlF22pW&wx_|N
zuUSS`FL=btM`$vT2$y9!jE1Q0VP-)N`21!E9CN~OQh(xY{zKm_?tAy#AODls^bYK7
zkz;Mz%2rvp*cxmhLFC<w67tT5B$LZzXT6Z@e#MwKvPS1~g;Jl(pU;P2T+285{Cq>2
zNlB+0aHHEP(}42|PC^%}J+Fr-DC~9%ea`aK8J=|oHzuw`hWh2kBy<0^^8B*~?Fd*r
z?zD#2#nj%k*_vPY%YXg7Q2qRyKW*euf@A%G|EVkZ<!^7E?Pzw1+$(+d+KvF`6Zw+o
zSFgrBaou(vfBDs^m0`Lkdm5n%rmJp+0$_hwcO)X^_XS@1<xzhlhpoTSCn{XGLSk+s
z_|w#B<GH~xwrYLR@J70P`-WMXe>h6wM)TjtY~=&~^+9N>>L|b%D?-4mx2|Kl@N79I
zI=_D+Y~Z@&`T5UE&1(Lan>|aaBN9V=!dC1p2@`y8BEn}}4ceO=VXKAK+8-vsjmKU&
zvBi`A^dJ0ktbg2~<8S7?F(ht&?RX7+Xle==E@79DtacZPgZO!6uXl4XzbU0Y0Q+@`
zjehVyVovAo6KavZd`;Vp93de3r7pTq&#6{gykn-iazsh7k}?ZjTB~Gfl8K!0muc{D
zyrW4*Ropmm@5B*_>_Gp)vH~etF>Nuk3zHSxOv{sr9_49}>}T*H*M}J0)9g}mi+4le
z>t+$Dxwxd1FqZa&>J_y-v{By6FUS47p+dz_4Q+B&#a$kL?7LjF?bKaIcv=PziZP*7
ztd5j+$KtKdY3?>7S^deWVQyxUpJ%(3gX&Fzm7~3hF^nZyCiBq}TbCZf+x8`C({?l=
zC<~jMP};jU=>(+b52fGZPrKjf1*8~gS_tAZXt2+3-P^BlS}Rn;KE8>;z4AOa7^3qJ
z?lXniMjjNO>lS9?r!?dkX`K-^q}&k^EArdLG3o8Nc0{(VB*H_r^ooSBM*+rlV}O1=
zru$j@r&uX=DWq}4IrNbMljkt`yXxvjW1$1i7gaY`EID%i^eHxuLFrVr5+!f8k3xw(
zhR(~GwsW<++)j_al`}@7jSj(uGfUv&z-qy}L(&y3=)es_!OP?Z8K^Q2?0y4&=aLiU
zp#y`eTnWc=Hz`)(pknUz81TES2wQRU`ha=WV$OiSzol9^jnj3`5&5{<7AxUi%13`X
zJ$~FN8afR2Clx^Hk0=$Wb9ZhnmpwxIW^Xxh2&U+-$NgNM^t?qDwywj;2G*Px3L($f
zML*Gho0eNidQvCWWmjT2S3j8JB|w(4w0zC{=5Y{X7Ws_3^4Aeb4**gHpXYkb-jaG5
zITjicyjv5Md7EMOkf(n|VBV-KlUm6YnQ(21HVbxKq1VuDwAf~#smRO)o!#!9oAgZ4
z27zjt_OR)MN%fNP;^O;@{-8EAaEq10>~gT~H=w-sT|9ZgovQIi5>my)x5$b&f7Mt$
z!H;+eG+rWXb8u)>(G$czHYR(Q?HDS(=Uf<uk0yWKQJiB^?91{=-ACC8qh5XY2}nr=
zoVw^??GsWhXsl=wbH;}$#B<6lvc#~^y}CTMCJOx`i=Ay4wfcq#(3{#&2v_Q}1H64C
ziu&_`lF~&EPhWrks&dhsjKjRvmpl1S*(%%WguX`Kc_)N1o{-}a)AR7Ms_taR+<E6Q
zrBNXYsW`dmdJn;w7iyPiCnYLlq-npk$-ud!2h<7dAZ*x6VE7(k+it@et>BZ?0lZ<e
z!slvenm1Wo;v#;udRp*<Z1tKHCm2yiAM*omaCtn_dnYnz#{!5yjZN|L(H!~`YGJ+D
z(zH-0gjBXS&!o(2bq&4gH>!Oqgy0vP>*F4Jr1$CVm_1e4gZ3Oax!YG;A_g?$hk6%C
zupQp9ZX1%U%Mv@Q^rtWR$Joub9z!oT^TkZRyYR}E{OPn2yN?W|)irm-c-D3G`le?_
z^TDF%;BHmkWX}T3;;H-zfseGAm|qACwu75ICH;%nlI7j<#HHi5O(Xb{Kqsr;rSol3
z0{-oQ)Q04@LfOp3Gr@e!cTSNA^6yi+%V&aD!a1Or_mt6ti(<%8Y_T)%#BzhVurPw1
z^T1q~qPfcMIM0CSJ<Z*@kBKjGw7HO3>b?6XP^=u&^x}(XL5QAV0p=Zo^ROohHLp}5
z<5_E&c~5xlo63W{Nd|qcuIF-KzlHi|($#sRsF^|+7hpuOKi2Bw(wgrVvR7U%((|xG
zPt?%td|W*WXaC8^2kAz1xIVllZ^Re-0fHcZ9}f=pHs8QIB$Q2f$!<cv?)#-IeXkp-
zwDLWYN6(bXmJBFE`Gfy1-yaG+VFSr4_k1kJygV-41UoAm^soAH6OAB3`#A*QRk$@1
z!@*C~Ljw(qUg=(gi30Q_nUh;h6nOJRXvxI#dcrG_U&_Jv()FMO_^qKVgQp%mFxdlY
z^m5k1#kV}nDy736Ji2$b-8g?&yOn|+te@vcg`$$SEv4IDANb5Z$ZoF5asF3L`f(6E
z%=!FjJg~BTECC7}eQ|G&PSU^l&pCvNaeKRR^tvIKJ#(uTG_G&`O5)8x+{VRy^?x7W
zw&OVd#{)Wm_vDnot}|z81I_<=;1^|6%<w+2buu6S=^Mp-*Vb@j54%&|TV?3GF)%O~
z<!ie9KKc&S^jk(?=urlY!HrhmqiROjXWT^v1|W-<+HX%E<(P5hia5iuVvQ9S%eZ};
zn@d}0^$KBYnbpW;z{y`~q*f$EMkIG-o3E|F;kNeU4?E87GKtI3OQxLXJ((@4hLPN!
z2{^|NDASaWtvA6~$E&-6oY=e4Bc~pbZ(odA`*wFVOXBc3XUfjULG*U@fmG4)WJ{du
zX~i6&%y$)e_DMU(KTcF7M;{q1c(vi-3Sog+hE`#V)CFvHJ2*D+O3V_o-44*xrAc92
zhtq}(*|RE!Hm;j97Q1uULDwn0-ecp<%N6Pei)Wn5b%-+W1<|%PEj7sU?l@^-{=X6i
zdX-th-Mv2*lBF1EyXG*YGu>7Cq-w=6h*l&Ma%U%TCiAt%eyDruJ6$8vod)m-%MXyj
zt@HneHGoFvxV!bgkMMT=aGhGN<jS%!!_O_gSW|;sUcw3JPL5$`mUKQ|mtex~Fg2{T
zJ+d%uc*arrHmDsjBz#p&p>5EhUeV1dtfbUyXO-vv5_gA_J{(zG5H?~rXs}>noB`a?
zo2Z1mv=&1byQoxe=)&QF#nzJ&VGhbS1$a!Cen*$*Aau$lsptB#Uyt}{ZuZWEYp1z9
zGMmv7gd{Ii&mHVvtR}uWaN>c&jy(j4=2xKQiaDFtPUfA|`3D3HU{Ph)QJXo(E(RbC
zDnvWid0sDfPa8ek&#Dd9Fk4VhGp&WWk8Kcz&&WvKh&Wm6h7H$rgM=N<4atr(JR5CK
z_gK=)D|Zf=i#B|jze<#Auj5rVx5$eue`h1mopmrJo~d)0$`fRRv>_8spiUo9y5rfs
zY`P8XzNb!%Z|>fhpZfL?gOuIsOBGhx?mMp8a;r3Z?5r$fCHFqc)0qK)Net{<_yi?m
zU_efr#@Y<c;N|z}c&NcowuBt-)Fo;K+P1GP4Z^)`di4GBEuMcvxA8@nSvRE*9$6hM
zS+igDFoM~fLRDBJHZEremQ%-+1-$H^zH904p26lBIzb5&&Bfn>lQM5#x~f|5Yq&8#
zdFeNCS7SfDaM+mb)3RV!q@F+>;|ihplijAc(jpJ1#(r;L@83t-JRy7)R0l9+(pD=w
z@dWQnUGfLk0R|neM~D=IMg2K<8ja&}O*4w2o$|Uors(9&YEeB_@y|VJ+D6=HnN-7Y
zmiBC&7q)eOo!c0h)-QLjmhS1z)8XZ6JM7~uj^?i$H^TMgO-Eki>d39K%EhMaveCm8
z5z__59K4&@Rqdux72c&`1F^k5@{Y43*iT?&EAZY+9=xa-v~dX<xIt`nd?vz)PdM$^
zxybvam$=GFV^hl7%}X|1{3>xF@$X|dFAXuQ$Qi)jb6WXNF7~^jD!@+1Qx<t#&br|&
z$Lx>AkmY$@*WEkE!5+`uCEeF<iC}$|!|yCD_D)P4VY}E5pkcF0kICb<Kg2SPZ@05w
z9k7!$OV0Xr<$9n{b|Al(<80V;iZNTN-AGHZV7>%~o<tB+xHZN6vP^evXs7H}4|2<t
z&_+4}Gpc-2CE7f2Wpv=Jk(_Jro*t|M&KMz@7XN1UbzC5>$1}k}LFlZ6I!W!QPeGSp
z85U`*U9wOAS>xWKI>B&{%-23A6DP3^jQfM?#oAQI&9c$Q`1Kv9yZS8uH0CtGGjKk4
zoDkVMRalNc2day4(ejhmW6wl8AXg%+_Mm;d>ocD>j;o1bMzXBwpdK0HUpXAROsdw^
zgj((<9}}>xP$2@!!t;Y18>TbX3ah4WqnY<CHWt2N7Qy?XR7D%zfi5V%P?jwhyE<Xh
zJNVY6rNzjjv9*>H3$OLs7K#FU*^^>M-oHZioBP`XL6rN(c`ndgHPw?9glL_X$ie)b
z6|aZ_9t}8C!^)el$bziP&}8XBsSO!abBoA4oZC4gR|L~v(ZyeFli*1nhUU68TY0Q?
zYDI}T8<bcHvW={*TrVF>SnTeXiGnUxX)$2=@{Q}P?)FJ>?LJB!zN1<?ES#6q0nL4(
zjW0-;p|a_DKNgQ+C3&fAMOy>D3AE)cU(2LwKN`F{A9(CoTfHn3#;Ow=D<ij#*7oj_
zk-#v1wdWlYIW^*rtrHU+DJ~Oq#RzswE~Khmkg2%g>1O8`xw2k$e1_uex=T51p;Jrp
zf=bS`j&nm_jagQMoXCfdQnxPYjciZSE}k`ob`^!K6u@R~H-##+z5WzIy3LVGz`|}Q
zXSw&XEkMX;LX=y2`$8eTPtw!_Hey~y=X`!TuK+P!-yQd=rsdI?ZST7zjJd8uU#^^y
z^h&?ZF+N%BzPe@E0e%Oo1l_NIsGJxdYu<Pi1UJl)1S?r_^ue^)(pi6!SuVhTWS@E&
zJDYEx2M4<=w=nL!Yrwn3=hUN|hix5qOG?haqr~-(P~wf~y5yL8T5p1>POT_;pXu$_
zSfM6?{@L>b>{Ul*)K6LQ?>_#=JRPXPAO>hs=eU?=79}sOy|ABvr9SgV?yP)wrSjd*
ziV>Vp`A{WG;~M#+>KevK_ps;g?`c5)3mR_z=hv|N@wx*Um+ejSt&itTPH1vt#J95)
z>#AS6bOWglMK3_SlI~WbtD(I@NJ;j-p44eP&+mlbKQQA#O&Q1KvJG4rH1_cJ^8O3`
zy2WaIIl33PID_7bf)?br8-ClbHLHhA^;#D*l<~mrlt~vG{#to?J#K3_<kstK{}CX<
zo^F81#3=p>oOZz}<E%rc%(oxJ&nMH}K7L9BKasB&+4&PW`Gi?r5a46l{r$wWmeoX3
zGeG?%#FZ!qZa-f7hahPXFfSl-ot{pM#%V~!M9#S`{e()f^14+BYeZq_*mUR|8YbFO
zT){en7ofO<Y8|twSU9(dIY=uvA)I|ACCZ(xfiVwi)DQfGR|3;oI@J?td>3T2eD*`q
z?GXBF6rsG8^Qr|x+fUt2A;3m`*<{;6+vzMn0F}Ft<G26fJ*;iQ@>sz)T`0fC2x-?|
z);&Ehm?$<aO3g(RH=gL5XkGI(!Cu{E9GBt8%M88WaJ~EjGW06i|0Yw1+W?>IfRiVW
zT5kh+sq3lkgl!3y=yV-<Y}5WRR_I0`zQ>dDb!=iL+GdDPLa6$I^<6{7;tbuCFCx$_
z#+^<vu~So1`@FCU-|PL8xyJ;SmgYlow!#aHYBF*|`>Zw9iTzk3&uVH&Y#1nIlPGA(
zIe@un^Z}sLzb1;$N@r%lqYwXS{o;SbF_&*l_oaJZ!BiV3WCJDakey@y`!~6OE$djG
zAb{&sqqm2kj=uA;9;LtdRcy_F;)HhazTT=X6&8mf1<x2l<!vG?i)jrhjJ=OG6o;c;
z+KP}}R9?0+E>vxfUQ{)Xeotc>2Fp>g_EvT2gHh*XrInVmu4g$=M_KJzzN=fJAYs=#
zbewI4%Xz8}((So_%MfucflhjV>J;85DBbL_Mlm;~Y~$klcrbr4r=6-l6Ui5oImAq3
zAX3_VwNPdZM(stBF+DGw14Fqa^!QYr=7Ag*sZPIrH|a8k)Uqd+fkY(g<0jAX1<}ix
zN5vmS!z>;ogjM?P3xmu>gb{;{X}XdegYDbrDT*q`^X3A1rUA%QX%ocE_HI!Zb@X$D
z$363Hrps0D9h1akdUM}j46o}gz5Zg)Qv61l5{b?pq2D0X)Cv?L{kK0z&w#UkupO{+
z+!1^SfLtIo89bLD_I_o*S)So)E-}>Kl@XlkUsC(w{&@1cTj1iQ=gkqbHpL{8whv}(
zf<K`8IDShvo))`D8|FMi=d-9{iupg(y?H#8ZTLQ1qC`?5Axp`YQ1+ctsjOL&owDy4
z`!1CtscbQ}vach%VNjCnyTRCHH+Cb&@LofUJkRs}zVGMv{`32%&ybn9?(4qpb32aX
zJVTBtW8BW(mpETceSc6W0r)y8$}?j52z;eUFy!;V)lpseJ5w629{8X-T0qVwHv4-l
z@$rq`W=Y0c?j#eoN2O(KyXfL&qS<~Zrsgy#IEaOeSx-Q}SRc{p7lLBorc)*4dKI&0
zA^gkl$}js$iKTRxeBnM46CO5NKyACvX4M5qJ40k9fPY>29vU_m6_3LPs|XU_56`pm
zAYZ|^JrHI-NS8ymKJdWV>fZ|w9Ulz^)&?#`=qfh^Ky#%8Ih(obX^=xdB#Fda5NYPI
zP$Tc%<k^?g?vjuaUOSxEHRq%`>{Qz*d$_PQ#+J*0oh(DPbeA<$2r6bP{&K6+JlQSn
zsuk_?lA1P;-D*~T3^@e|*1PWxuh@C+cK)eLmJU8$5VpA)MDme*C?S-_7hhIbmO%96
zZNCn`H<Qga(mW?e8}SbIk-j;bOeu~4C&0|74OHg7O_e`R3N!DP6mG}>#&mCvt|#1S
zp(IQEUUF3C5$tTjNPy?F*v7ZQx*StpDVF}|9jgd>?qIP>1zSo;_$=ai&g*N33N&4+
ziDt@*de$)aw}dZ!sX4OW*N_~gq-GYyg$-P5T)=C%*`@Y+IQ#U<SbEdj1nyGCQr@`_
zfd>R<TS~zo)wL^w>jqG?XBSuMwOXh2f=l@a%gA>G;CWQGRj0wHP7uV5KB!+Oo|N3R
zn#M{7pUEP^5sIzM`&UG8i%Hn$Yn}4G1Mz2PcVDq1@zK^QQg+{*@_&5XZ69NiLsKY|
zOk%=!mE(!u571qy+84|HaZP|#3>V1QI7{+LA`ah#*++_)-&`5R`0Ue}{R{a0CIaOh
z2bQ|Wf&Fw+%F&gWL*{k$%{(@Ff^!n-4@+F17S2mVabO|o4}vu-CKiHwxobbhI$0Ot
zZSBhJS*0*{36N;sP97YnE`)|VdQ@0*qzynrT`y_W%JPzQ_K^38xb{A}j2JRSzIOnr
z$i0Og8@bz!7aercMQXxvPf<l;(H1(GGbo_Vo9Nb0)NK~j+qaVhay|`+%8hawE`ozB
zIWE<1^a^roBIEBS*&RW7rlc{Bb5Jv1Q*-><FnvE1yL_334u8)oT`67c>+W#%M|}W!
zXXnDJAd;9VP<a<H8<7W2N8QqizOB7VY<j#NIyoF1ZoV<CYcnVr(b4&Yj+@IN8n>{z
zVbqTSoi#GGHD{a{yGkqO-g8EEU26Rp`_<}l_WUxR8Yk;DF@+ZN9B@>q@+|(1s-&o*
zbDDRluBjE-hYs*r^K`$<1k<ChBlUZ44Fc9?`rYA;LCLI+_l5#Jm0FvOY#FBYqHgQs
z^;EQHzl%Htiu6QTDMg1k>l3yzODA!w6EQ1WBV5@{udw*CWb3xhn52}DXMrBHR8PU;
zs~OPhah>5)R&OX#H09l@pV!gP{7AM`y|txUkg9qc!bm&RJ4XGt)0Z9sffQ-qeC!+M
zp*8#fQGxP;=0~iTw9$Fx;`g?ugNW|*c}WkS`xLckAQg0lT6yhVAoO?Lgr})PG9=P~
z=eQn~w(NToDQJludT^W_Wpv9*>2~{ee~*F;O31FNDDq6RJXWv7m5q-VRKfYFEiyu7
z88&u$mfIaClGMpnf5-+?Tc*7N?`<G+;=bJ%{=rQ>fgfGuSuj8dhx2D7ZTC4QZHajM
zjb{!f+%u8faH^NgIwRJxn%E3!@4up?pqqqM7_tsKO3ZMpzU`q*ujR6SHU!)4)9o);
zbn*P9FB2a-Iq$LaR|L&=s%&H9Yz5pMytCX!ERfI0_y-o&V5^oCL)eK;Mu*8Hs17d6
zWWa;ZFoEHR!HY-=zyG4&g#F)0znPxn?{URE7&<imc`6Ic_1+?{wTa|~mP9-xaQ5fR
z?SCXFHWKd5#ZEj&bcDzpRAY!}PG1G}F=EKopG=@ivIyNwjqz;Ar_!km=k%)uW&n;-
zLhxH=N#4(`Hhxy|ap=g?&2j6_m+3>}k(!py88^@&-aiB~s77=9@k!$}=y;t0S0~{b
zHn-(=oy+KqGA3{ol%AOBeoDGV6}5+YV^&sj_y0=j4bT5Zz4`i^dK3R&)SGeLS$aW3
z)<BpwF1^>17YCI6s<ThE+!s5;d&pP#sF^rj1sCxnumH7`;{ONgjr;#Xy_wd0wvmCw
z77yvTIc3{S^(78@#7esAA+Qf-tn?#TlO`u%&Fum_%}!SZvEowN16sv*{p3%yG*!p)
z+ANVsNaiE3lQeNSgNXTAiD6E}BW-HPgr)MwQM|H`_kCgaOII;IeM{a0=<eBfg0mtc
zHkFUW7D)dBfrWz!FdHM^?;<)ZKjWo+T|}7iNHEAF{1%5NzWxiwZ|}_0%_RI975KcA
zwQq=9xL3@qEKrx$y0#0KZ2{AaYA>A?qVXy`%S+8|ea~-g`H7X&=g+c7Y8AVkIFx?o
zrZ@HxZ#pWxI&TCv<ju_THd99)D>=z}3y_&(8kQ%lZfdzXy~3_fV|C$u;&RPj7D=d}
zM}=HQF0ILzRSb00T650b*I$OFAf%u^BQwi_?@DhUf&0W-e>*(IK+}Db*}cfYbJ}V{
z?d^lODr)VFx5+Q3(O*l3r-r%N&4WGLE-7tbKUtGTeQa*eYhKN(ckdmUYCf(y*eYJp
zEa}~{{POe2SL2A%k3HUn-RnK!i^%Fy$k*#n;86S7X#6PoJ;4O`6X~__0s(U)o*q*e
zYUT-=cvhDfb1KHK;+Wi*FN)w8N%v6xEcwI$dEcU*r2(qWf1{|C-j<~p9T7<yNl$kV
zGLPoLW+KD}w9I%9IL*8;d_=SwD<tsn{I6J)_{XXLFU*@pamoA`s}`%4FOjr-Ia%&o
zvAQO`hqseGD^$4@z7DVidnTVlPnRaKd(vw=c;(gG_KKi`kzb~q<1VDX*W_MlOG!>O
zsU}`KG8w^|(85h`5z*(-w^Gf`Hm&;@?RP=mwe?c9Io4ixb8%Kg+mvt7?PXkY-CaYQ
zqj$xc(lVS<(`xP3noj4}`}CU5JdHN9T+j~=o{x1t%`s&MXAo+h$dgjiYrl$wVmyQD
zCH)r0y&E9Q>!LvKmuF1hZyL*HRv)G7pKrD-NqxzYYV)trqlDZ(K8TNe>+5u+TU{jw
zQod8NoFLYETbw%-+arM`H#aYsb34EFgRzK3cwmD27dSVZH+&$o;akH!qw6jQUPYf{
zw!;wcQG{pc20oLd(<(45-Ecq;L9|^n<s0knR;%{a+VZ^XwGvnA$(8CPB0|RqiIl9{
z^eFz0ntpH)+?Y7yK6{s<JMaZDXU9vt3NQkw06E!^T=nJ=Bl(;%?xwFx>C3#RB)aly
zv3;=^aa2HgFPPtZs-41v6W;H|oy`MefQ5`FPmj!8j&n?z36}VVEVg2_(nr5d+Fv}Y
zJk8F1(_!h3tpWD38)!r&;|l^aFqIzmplDrHMBSkIRl8V@sT2x_wufTQo4T+IJ-kn`
z^WarR9;J+VXvK+-%bO@V^5(4<31PE34(EH&KMpfi1TxI@RR3PyL_=&gC6c<mI*zhC
zZ$bo+e<bnbALX|X(To3B5+zeH^}9i_gquuEgrYUohrb9n8@+ZaX>7%5$JM?+`(Gd)
zlX3t-N`+?urC3ecz8Lf$!Sqlfs2hZwF54MO^gFcv$DhT^10c^da?5S<ESLupgpcR*
zM4})5_ouT9>;&}ULjNZLy^r_Nvv->BDe9GblLfTyVoRjH2wA=`kh^ZcxmXHxRw5Pu
z=97YoSvcsf$yq;m+!H@d^wj;b2MEB4!CEo1irxX)kf+UZO&x0RP78>d(~SWYqzbzS
z(n}rviD*t-8}c5|OuUQWY2E6O@86DNfp4|l+%RdER1YFSZez@oj+14?1h%*Ao9BIi
z;2@qI#Z=*RI7r&y7p8Xv`rnuyEnjLDEwr*f$a`B0*5^?|*X23S-36Y{4gk8l%{{Ak
z$PnQM^`YQnRtZD#OcLF&g5!zCcwzvhc4=-Q<E{3(#6uREMY-kh3fSWYNoKv6j4#$4
z=^6re+PzR30E^N=-8LC4s_0Rxq)ue&M`jp*!aOD`+p)9kYXs%vF}nWk1#T1P9L?{^
z;Y(AltlE7hvt;h(h1X;r|A`|zQ}16z$G%IfV$JX{K)Jc0!#N$+P=jX8Z;llRLP8NV
zPxpcR%5XgH_RjLz#n3bOJfstluJ6MLAGe{6hhk$udbn0<`W-ZRJ3@d}%?kyr>u?Fd
z>)XWzf$7(uS;p1A{Z?1&m>?%eeFw6%)Q81mn2Dyc?7ZS%j8$Ipe=73ErDxd8_v!$8
z(LBZ#P=!`4)td_*$*zstY^N?LH=<r={tWf3-N)Vfjkue<a*X7B4IG{-BQ8G-0+5>h
z+H&(c9i<_G|L(K5eTv;?pd`zZ&w8ugQLD@~PNnfwv=eu_F30CStG1gwTbUt}6|e}c
zj_ky>`RVsZ^|Jr~$2AITZ<3kng-dm!r2t=uz<p~qjx=Gf8}qfl^ctj+2v&J#p$(K_
zgJzLzm0oPtZ1gCSwtlf?^TQ12JThWwbOMyRQwapIhR;jRXaQ(!b!pa-$X8sS!FpQ#
z?(>rV@vrr?mS3ZEiAvRktohSu9_FqbpKg2-1kaO&6gB2;KbPZi!g?2q*CH^kHt+%6
zGR<Z0Zta$v1(PINmrddy%R4=@wjECJqhzR~R6Xzo&sVEdA`E~!Tiq+>!mz&1&wQA2
z7R~kowX(U=IlZ=d%(@$LJr9X?!a7^(&4ku`+}G!K==0I;idNR(>9L*ZnVkjR&;-}u
zW6G!vbsilyVbza-n5KD&3{OS$T{^dib2By<f0VBtk_`GrYriszE~|9=cFEhM{w)_4
zH08AB>WAx>u;p&dP4%ddd*`bGKdn~3+5I45GQWBb@4}KyC(;4wDhL5bl*-g(wrQqz
zPpq?S89u)Vo&5w#qNLWNJ0c{XZDPt8XRqmR*)Ova@GzBJyB2pn>_hEVY_3I(lJzs(
zJ`2{A_bb|1JHtrVZ3%e3;(-xmu8-YWiXJF|?TT+W+C4$D!}E<Go2(W}&ju*fE?RWS
zyU<lX-Thu{|0ffS#O9zecj>&+xa&<#)&eh3z)}av^t1d7*vavAk8K3D?(vm!L1#ad
z6pxg?x8Nrkx_Y|BUY(u>38<G80D`7la<o2eVH9-yKF5(-f8V(p=@RM%fq575I?1X|
z$%IagqlM&_m&b+=T01n01sX*-6w-__ZjE2mX#Sh|eZV)Dt)=S1(F;=E30Q2_>?*gN
zJ7xZbN5<u*Kin~lZEY6)tJllsrM^jEW9A%n9+ZD|5-$~0bbck>6Z;b&qTwFBJ`_#T
zAb&sGiHml_3ex!uJ>6d5*K9rZu}yOD8-CtL)Vfuit0_;ETLh@5^q5Y%2J|=U=@e*s
zqT}9ukBu-2rrD}HyVjQwn4z)RnztNKIBXucOTn)^$u2q{UHdIksp)#q!+pMo;C6iR
znbum)GT+2c_fJX#Px#<Nf{~v~c|iZTQZ;bNHO7aW$^)DYn)Bii((Vbhy-@6e&tn4v
z@(_D{j`Op!z7p>8t%4pg{-Qfk<@V{FFEjhsFFWztLmzho-(-8?kZ;qYk6xDpmZb>Y
zeK8<|I4#<0i!Hpk5=jnX&V7K*&mWCtn2N0&{Ph0o|9`!)atc35TJiaA`S90o|M{7r
zCl7{?U1HWJ><7;ega^-U?Gw5a_}_2PIk4+>N&k<$?l#Hy@i9&ofqL&F-@fhKj=GnX
zO@33N;ZO~e4H?;ecj&~z5x}I}9M(1h{HGz+-&l~gyhA96S~mK|=fhCsiRRzk0|fv>
z-<$E`=uWi3e#6(har>(Cmiv3W-NzGZs$=ae_Qd`>U$hA(k;Qs@#=Qi$rHl}Cjs)aZ
zSX78DMR=Cv`upe#>>qmT>PD6>KW2F>N_@#>D7)r|`37#N&}}x4s@GFk7jWfal3Cmr
z&ny<-=3H%?EeJS9+6n+3wG>d4!U#e6rxCWDADmc>$G=ZQWsh*cKQB&=7`PQaL-3;t
zItw(p5RUFbjbP+^QAK2Y*`^1O!N~UaCZ%zEyQKp<qbka6&2zo{S1$l{wF<3#hFPT6
zk+xii#(D@p_Wjm>lU$;(EeDVl7bu?OdoG4D5lxlraRK<KLA839puj=w(k#ZuFq^_m
z(?h#3B99h}N*ku9n_AV^dk^ZAQI|an;6hU6*9&3m36$_Aj(tY$4ttJ+Wx!)UwMmmk
z7?LeRag4aSD^2I~y>7Gz7{n*0pPL^D4j(u?I1^XkP23B{Yb{rBO)>$N%An2U*;YM>
zZznf`#_F{GmO<^kpt(UUzurz{lb<;eB9~grTH1O!4%WU_dVCrbAmNq0At4&mrH?c+
z0MSZ-X89v&uj}!RX>5#z&0{YJ;~XsP_7UCH1V%QC7qxZINyyb<rWN*|5NHnbC;@l{
zz{85A<H+XlG?a~k@>_V`${~sc>`&fGdj(gW5SMxYF=wcP*`WZyFHp^SVm3-k)h{gW
zIlR*~V(2p|u=yZ@fI{!woAfQuYN*(5<lpu;60&{ivTBJ~n_<8UAhJWs$Ad`+-JAAJ
z=TTPiZFpEhyM)w?l7PpNE;IsPjoh++H7;ep`E~PcVU^c}tdHqj45Nk?zM9Sbe1|NX
z=y|Bqb3q0n?j8du;doy43I^cNDVoR8<$4j5UXV|#ADhEDw}L|yzUtn*T7l=L_*&1D
z$`^AhSeC>OZ6#=?pP(IiY%5sYmFjk5Ei<uu(EB2`y~U%j=Zquc4`tE@A{{y=ov6?c
zaTSuyMq`a#$0@}70JY_TeEi&7c$j+s3hZ{{8EWE9<YN#HxI;V(#c%U9lwie$bmzGT
zthfp19X)d+eLh_scZ#Q|K1@yhk|s6&H50PwTFBKi40ZWqi#yxLPIgd#xhXX4Hhc_d
z@CGLbKqZ+I(q-vwkqjV^S%K2yQw1=gRBx!;)A8W8NwEq1<h4BpfxSc;5PA7s)p%B;
zF6)Ac+K#>mSJoV4p;zZyq0g}s3ZMqQd{eFp*s#i{C(l@h_nzIQugGDJN9j9SvzDHn
z_}C{NR3WJ+%NJ~pi_3PbH`uDX6t}+aiO{LZzI+fd(eT#1@B(9P%MJApYRt)xQG?vU
zG=|~R`P8OW4fb&u7j2b1dw%p*xv14+w=4#%ymO@V1FNh%+@no%wnZA^AD^U%Rc_|W
znfGQ^Uc76_YAvOLr=m(gvhlhaz?ZTTp9fDtY(FWYke_4gh4+~cb*y|}7<Q2sc27WQ
zP^5-HzP`=E_MeItg!FMQZu-=A7gi618uI1IG-z?(m>_rOJGx)WKTFar%Oy|SBUhy#
z$-EO=z#2R>0hrRDaTRY<edD+dcs{%W5+bn{?kbwWRJgWcyJUS6cN~occXGLD-l*W&
z=G@XW)rZU9;iF0AfUxsJH0ot}beV_5LjvEzO~YGa1+JTrP8h9qY)FKs#{@-%#ye9i
zLKqT+?MS;#7BOZTH)`tlB1~Z+TfP5cl#6Q0wVGqRJ-$c;reFY(0L`cX;-erJ>+Jfz
zyiXFP6)8$jkBcvU;ug5Gn=8=abA{fp^NuyzN3;DRA}a?nDvJAvepppg529O|#e}*p
z=7mC9*AuK>KHu*IqwiD>q{abQZZ5e|6<t$E%6S6BAW5DbZ#aJkA)9I3d2Sf)t=~aN
zfUQJMp^=dZC+~UjoWqS~CxvByR~59i_f!>Dn%>n5ZKvxmPNcbwYUp-?%*jT$gw@3~
zVs<5r#V~JWc6mvBEaZ#zbaxKCJ~hzWKA^c4h4sJ)yEg%TUIco=e8K^CquCvf>v@HD
z#L7;D0ZoSrO<C5R`;m`~P1RQZZs!YbS1yaP&dbT~oqf5T`fm7KJi0&{xIC*9%^Dw3
zn`tgQPhDr|NLM-p=t&9OouZvY@?RSa*2lRX!OWJ+@<CSWy}4dDZb8L!i<(RA%bHDt
zKgwD58jE<};cy#>v%iGh$!kNirCVJqG07LUv$3Mt4zizn_8IpR?A~}lZqWH=Fz8A1
z1dsR06{mQkF_;%)Jk1VjMNZ}yvHuuN`um|}cPIE{43k^=yEpH@6aw&`Vmav={og>$
zKVlYRWdQrt4@F#y03`4}Vk^Zvl0syy|4E)XKtO#z-lj2Kvia6e0`CwxfdXv@#^3Pr
z;k|Zc?}~tC^V_!ujEF_}*h(#ahS~oZZy75Alasp^(*h7raC`zaGLfzM4slu4*JaZn
zI+-AZ&9VoQo0ZZ}*6Qc@6U!W9wstEDc3%l3zACks$sP`!{1F^(tr|j0)%o%6>M3+H
zzU=tdrH2}WLay;T>b)&!v~ceiA|-e#JPV_#KX7pn5W#+mVurcx1{Qje8#Xmp1yWCE
z0j|BqJ;hkO#@2~ZQ3L9xPG!q&A?av+M5rP0khvQcsz4-jT;=uLOs5LS<VmJ?#U4J=
zcYT4(uOn+)D;_9oaON(u{e2}bve!{oo~6bW+}V0}ffytMq`#nv&`iOoK@^_uaPjW2
zR`Da4UirE`S)gS+(D<s4rC#P5^pbX7HG6-X^KIW|-a_kDI8Xrbn<#4w2!1N2+ukbB
zyHaz^<59B37d1ObUxHunRBY@=63LH;Z?|qa*y?E`%fz(-QJ1#2+}F#xw_-Jj2p?IE
z43c+s;nLu^M#8bN38=`&1RHc){^W`EeKUXUuK8F#H(r(^0{ge@{$2y@tn>>)8z7Yd
za*C7^a&qM-C1$R`p>|{#>jtg6L;?<SN?WddN1>Ox^Ofa!eHbzz@emRErUr2*DPI>m
z2wOXQ0#iYzbNt!qvpXs70bd_#mmdknQBo%Hq}|p4<BMSJ))3*<scjxil>#7~chg|J
zMJrWD_EmM~(c5UOl-+X2r<F^H%br0%_zYEK4LbWF($aYbQ4Pg&bf=b5QY^IZq+^my
zqM)kwF_5J<c%FF)({Rcf#sQ*Rw5Sgs8km!zv5EVDdjV$G0{zVUdT5tgA4SN@mmJ|B
zej%97F7>5V!8<O6C7A54noDZw!DmBymD_A&f1Rvo{Qjg=a#SmbLtvDPA_CyJ+i?@U
zGCJFSi1AV@*LKuAclaC#2sOt)Og)#Q<6ysKp$oh7zP*POM%qx_1AM$X?EY0j?epTH
z=I>9OV%%}oBu9agxeGYjg3CQF1rN?UOjUOZxEjCpdgMwGQR|%N3K$H9U!pv%(sV^s
zfc!kwDe0E+SuuwEJl_J*<blGI+9|oH`41QG5}|aTB4O{IU+&DH9UJF_S*%Yte?`bT
zqM)P>%TnX!!AFlX)C#XJJSyF8OQghYuDWuUHk+Kb>2>ZXy$!?(e_gA~Q9H6$(u89O
z76|N^CyfK%g9@wqdgSGIzZ59#0F+>E?P0*WDoy6LRjIn<SEzKTx1&9_s)p}uS#xWf
zj<UjL)rp8lhCI1HSs}t<(&~9-Ca;dp8Amb2AkKX^&?=neeTV1p3^}d#w?$)?dqQ(w
z4?WJbcOR`w3xI8Pv!vAMGr~Z0odz&k(&NnnG(Jw-KgGonMDHwk`#7WIo%R_t=|ut^
znM(u7`GpG+R_3)3Jz%<q&K}L@tGB_#Ue*n1d|LM?<lc0XH%~`f7RTJWE9Ub!zE)EF
zD1^#}JKV`i4J~ULWVtX3XGCBBIlPgL@GIF&yj)!L$m54=QDfY&VB5qQ{g|0)tIBzV
z{+gXow2L2652d}TV%fWiG5YOUL@>(6s|RDVKH;&JS>A|MX}ogvDTaKJ-+pB10}fx+
z!j~=F=i*F7rVGbQ@)D$U(&1qVcy&2m>f=7H58zFHP<yyh`pNWf+v|HCe|-chb&P&M
zgWIsSV)#dci>oO#t!PKQ`bjMPI@NTN9mTh!(qUk)GL9yWR{c$>vEECm0nkOyDolYO
zPP6S&jfCvCR}UvXIdBc+D&e$|5IHA3m7-iPRFS&t+4G*e<T4ooSCh}RwT(Ra(Rrra
zqSXEQ);*@R&nPJfFS)(?fU9k)h19q)&i8|1HN6uXJ&^qztP|`R1l85gL2)=^@C*)2
zI><Y{M~*`UG`iKSeBBdgTmulP>x;S8ZjZidt(vQA2v$AbEo@fykPt$TvWe#}G<w9A
zOj@A|YqmQI128p6J|hGwf0@M>0a;XN-B%HoHYbiQBhaBWoruOqy{?p#XQ|y8w0Rg6
zP!p2~%W&C*ea__1k3amSbG(oF-Tm{Me|<Hyjc*{c?c6}TCpZx1^liLdYw9R|WZzQ;
z)}Tba!x!}f6HIr6Hh%(m@g475HnzV3AINlG?`UB8KK{|b{(M_}J`pg;p%z}dw649r
z(Qao<6zRZTHBqI=sWaGh663M&vFer}H^~&D-n6@CZFhOUBi~}J%#Gf{1o1NLIgL#T
z(kUs)={MzxJc~x-8R$C{*H&J3f-Y~4Sm;qe`9XqyB5F2zvA;B^K-V%w9U;_eOpR0y
z9Q6J$_7K+fDgRRc_NP+{XC9>;Rs;l4Sw4Yy1qlSi)EQCa68KYivf(<xYIC8+ewlxv
zI+E7i(cRIu>D2p)#hIktvBtmF6#rVf&6gj6YfOF&|DC#L#=jDx)&nE5o(fI8+_NE}
z+F+(a`^pqTg6iby4>qF}4xbQ!E7O5*wE?KEh*;d6!7alay;y`IgpnbhgEM5MX9-OL
zIG3Q#7*+0;f?=rbNTSw2f{8~0aD7X>SYp-P5PqsC>7B7~aGJ{XcL0jb@@|rfEpV=~
z)X%WZ2qc~jLv3433h&+CPz~QnlJ{<gUul6Ns^lDh_T9S)*dlIN)gsgjOc8>@-umu2
zX?9yg59Eik^g2@?Q_usy@zauLHyz#v{3)#*Pf+l6GwEHMTduG{e^5GAG~-j-=f3r|
zzGHix#%+AV1qeoGk`)#BS4-(ZEnP)dp)ii@a4!JZ@2qVsN@$d5c<ntPz$fSk`vQlY
zZ_prJK#MI&zwyixRIU34?WnVlMAzcAXZpJnFMn+<2pQ6EKIJUD#}Z*~nzs%TK(*Gs
z9&@>J&E$6O&Qr8!GkMBUX;P6aV%wsYS=!I?0Ptf|+XOh09e^9^nP(33>PboiTrrw6
z`PM6DcePj3ubaQDJ)Z9?z0cHFKBda>uGp<L59!6!y`jc@k8Vr>OWGl>{qbi$JibFi
zqco0A+TUKx!fX5sHU2R9@w(wOU0nLKgdu!fyhC53MxX_NIJu?zAS^f@X(gqNN7<dr
z3tAAi_a(G6s=HcQVMDPJs!FPBQWDx1=U&{NhTPU&we)<0iqrqK2|vG^T9GOHY5}P;
zZ<B-8Px7NX`nLvvZQEeY3d;fe1>7#GHcd2RO?GmuzBvDH-G6MsrgY_nDGmU*N(46Z
zMe~PLo5nTU!ByIDipb-rJ(gxCHeX=#9eHs5(-!}&uYaLHNz4X$OS8Gr14$P^4+8Jo
zYs)s!wS6llCQJt?q%>}vMriLL-E#tW;{@pv3Z`O>xpH37eL>{kVFVsSN%1~#GrsP!
z4d6ho;R*EhxHD(|+?#!`qz!h2hZB{1`SbrTg@=u~(YtK~2nm#!1UO|QYwQo%4!u0{
zS5@Rs_QEa;Om$cSPhj?WV1_Avfs^9wzraaOFwk5||NS7DO$J`n-nqJ{@09|eMh*!v
z4NcZ>&H&vq?PU0A(}%e1vd1~+1zm&pUl9|YAos;K<_hx(reEnu>n=gAOuZa%oxt>#
ziwe30GI0YaRiQ1MCH}dtu$@mv4a#5kg`dS!#VKs36Y-+K(&H(Xt4%V~ZJFT%C3&Ug
zLi1P&DcxUvmk<DxeEN)#({NM|kCOIUzjF03b0-5VcYN6_7qXl$!J@G3Y$}8-6sQOG
znXkQE!$!~R;BZdyGYeJNonNZKAO4lFf&1}a&_^h3#sg@`G41by!*OO_>mE1W&bd3k
zIsf?@zs>z4AvCe7m-V?kt)6>JU;f#e<L8mB3?>S<QMhaOx&vfskMDXRBsCo`%CZ+K
zjy)C~2z`Yo$UmCM1ZS^O<YX~I8-lOajZ2D4V_%tAfY8HpyT(v7%2giLZ~v6rR!jAf
zlDz%F3eU7iI0&7{=DTk-dau2h<&DORn()1tpgguC1kQ!3X_}y`{y@d}c09o4EtN|*
zlKc6`-c|MwzqHD7U82oGdEPJDw7h!NuK6(GL?$W$BxNO!h@KLfe@UV)UE3vJEHL`w
z(lqDB$;GI<>8^v~Wj%6J1$HOYBxnvsOU0QAYS}h6OAQ)Z37>BLc|h^6faD=~p5}MC
zvd7XJ^L2YY_}IeW)rf>Qiwy|-72{TQ;H-um2tYR^M@<*HH3lFI<!))*ewQL4%j@uk
zaLmfwv2{@%ez@~Pn8{-oKIClMYJ{LYD!`<tf3PTw0c%w<vMmhe0~;56&gzO7vZ_|a
zn!?PHhd0HmO^yo!ik##QX}%--`%g`sPaJW#LH~)6lX`f8Un2|9KH3=Fn1}$px*1be
z=q4Uo2iiO@Ubknv(vM%~m+;lU)(=f#q$+pxfjW1}`^XBucp+>F(t=CL&aNOqruFtL
zlPt#GsTN2bN2Im5L+@4aPQ_=48HF#eaIY#Hume@ZPOS543+NB#2*p5WrL<?uf%1;Z
z0<x?W%AS`wvBRWV0%mqmZFz^AHe^chuu-KEaIxa)Su;=rB~uw?yfsE)Qv8*T=bXwH
zLO(2rrNr*QSAQOKJkEx2wN?NnJ|#uXsqFOv<{S-^^288t^N2|9)|2>%!8h)_0bA$5
z`0=Qs1_%bU&8iStLR8yCHc;I@BHl>^bE0WvT7H<fY~`e1c62EV1-UMv-Svh|XKi4l
zF{<KR57(5dYRcES`#;G{+~adQO@w-v%hG5l&iyR(EGYRROpcm~Rdm075I&i|?C-qT
zz{BjW|6xWiCgH2V1Nmf^SEy<}{YKZ+iqflJu)_Nju}}qHAlu^v93ZL@#}MzHS#yKc
zi)Ob+>K;1;|K<P<K+M+~E`Mbix3sFsvm9+`n)Q}7-t{Bfhrd2QQGDQct*$xWqRMG?
zs`t}G;nIC`o@h7Io84E8Ccc;4UUQ(Zjji1f3x}ovb0<aXmaXa3&Rt?sWZe@t%{|#$
z>InMqP%+$DS_`gB#hX!r>y?s41s^nS#=;D-QBaT0b<yx$Wbao%hCd#!fqd*uNsTu>
zK%|QHGV4|N0b+QsZ3x<!y8v2qTX$C)+*(+Sk3&4Sj6mgM{r&9^`LDjmdmi75cJRtr
z$3+35^>k7-nXiA(LI6f25-;Xb6?p|%CcHc?BHV=yYahiOTeyov;NCM!9mX5GEXQ9b
z`;RyK5p%#YeZ60!&gbt(dG7__FLhHLAYT<;c`yH_6aH}~yRRzefjpyqzFg(-lLG_{
z_@F<wXkU}Hz5Z4?n{cQ9O$FhaN3Jr^uWvE6Bwn@lK6Cg#rD7+DrF~yESj8onXe#cD
za{hUBOv)HAOpeoi@Tdexu^<<IG2MH#e&K=l1}@fkm0zo%>$^vFO{NJxGk>W!GxK2y
zJi&cA&nEEjf9^^X0@!efEgk_?zWEahj6>Ys?Q@gi@$eJ5+ftx<6x_mJ5>b?5161y!
z?_#sO2L}}Jm>qzn{|B#z54mkwtU7?A9xvYqA-9Uzt(*bvvKz2wZ5TkO>Kf~jef~#M
z9|Z-xVgsN(;D!%$x|acFxEiS1i8Jns7#AM;9wx_W&~1zBG&116AYucda+~i0_q9_P
zQ!$w8qJ(5A?+CfJe+jv?Q|zzO+uo4{B~-cJ4GD)ZHjPvouyoS$v3E>;0EXSbtof-|
zScK}8j*(cqxD}gZ^`i;AK(iW0ZKO%>X2eXs%d%vW$=IYOMIv;g0#N{>Xn}M<A$c`*
z>t><5_1)53)LN0J_Ecxd4C#jDAs<K=x|LB<cg~9entyHhy*wL{^bR>_Q^%ke=c!v*
zJki<gU%&9zZSnP?{KlW*jt6;Opj7&PpjRsmd76RRTu<69wBRa4pfJ;uc?CbFQkc}Y
za5dv1>v{Qojz_1mNf0&tVYJ5)bVB58BwYHbu{Od$w-a8JpkK(B(Qza018;P(gA>Zq
z4TRqrP@J?>L8@+Ai<9Ke^YjBIJwpL`G12KQTek~U|5~MQCDmkCS@=J=DX$S*`)RjC
zON}a#17m1gLG!YseV%q}VF37SbXR@92FgpSOQb>;%B5}~SBkoZ0>rD*<`*bc2O!)f
zu?{35?*y)+<R~t^Tl8t+;?6L}$_gTJ)mIap6|(h{zZSFOBk(I4C@W+QnoVL$$#g&-
zM4jyB<lDZo(174wR&T+(hoJ_-*~DH{;<pOp*t`i2r}ajlWbRt&EX_YZ<&y#*>g3L%
zG4f)-xkPHmLaJh!-At~RdEJs!$!XTeaJCqGb!d*plW}vr?y*}lH0sL9T&W#elW*mz
zRM&0qe9O;daI+Qvxv-?jLo-;@{JmD;#Qk6WST25%^a)lm+3mJ=Ypwg=WK%)B%xZP?
zwYzjrj<v__%*v8rGWsQr($i#~PF{Q1A-s*^Qatc$!&rgY4Wv_>ME@6PY)rzp9A%1G
zF_9(Ygtc<GrUo{fQ@eQLVocv>u^k^NO^s)MLHs5JS|rX$?N13N<Nzb&?l9-4iJ93Q
z;5zj2UfhL}Y_{iP7=OrT?vI-J{4n*~AcZHMrFuHNt6=}sr+ki|kZixLJ;6@o%c$SV
z^;FUB4*o`X;QN|MFg6~(4wcYeI*ai6@quQikNH0hUZ|MwkUjF@|B{pVNc-SJ@)n+0
z!++Fc{`$;NDLm=Jdyq!r<^kVRBmhC-9**7LA81d)Bi(aqr<im6WZ&`*8uG(WI^=Kx
z&hX63{~Qj=bbtu-(eZp0Wh~;k;{*O2g^4=`ptKFzOf{)P^7k`LrKLgp0qPcgDL+|o
z%umDa!xGG=B#+Qg&?f=5jAT(*QQgNlSj+t3BK4;&uT^F?m>Id+f6R=^p*N#<G9o}2
zTR9`8u*^WC{DFd@zOlWM+I0HX*DLBTi97vpT9$UD8$>mGgu|de>;5$yAV@jQRP1cQ
zSa=?^ZaDo@@cW8sSMZy)6htI7S<7?J95g7zce{Wu&g;(r8poEWyHNj@$>aLBX8=&a
zI?!<&FTi!8S42+7_;(}$dI!Gz12TevJKd?EBDA_FAyIH{{kdLTkseC5Efg97!-Elk
zY9L_Kb_c=lo^`(JTA!CAr|jwIjP~js3Q4FrcT?|j_ge?1#!gppKgvX`TY*~Ax64XY
zu$>JaQ)Bw^rI#@#HfnlHSO1Lz9(EZfaHzmF7exUWkS>yp;JAghk_PB4B?cGJ7)!NN
z7mylY5oW*j{#*^62atgQ^}xN>;rAOJMm+ti^R^9F47JK}F4&NJ7fP17JRDv_+Y6y3
zCP^aB_3*IOPMjx|(+7IMjog<W+L`S1L;0yAKBNy*x))P-G61)YnIkMqAKBXe!N#dc
zeBwOeF+-(mH<&Jv<X${^^6HI)fn8bL);RNm0<Fx>)1mOY9a=(KYpeP*UAgQ8xqeJf
z)Ctc&5qK?qU*`0+TU&fbLRg1$SbY2Xuncj~KCy{t5k6Q|$YSh#WTXjM{gR8S7=e7f
zrr2CGzSfv}(ihd(*!Jb!EjD5eqsNbE+?Q9-%zmBcdF4lK=icYD`A^RXh(-GhX8RGr
zvoze3q$K16+nlF{-k--g);ULQLgfVJ$u&~d)rxDyGJi}yYm%%$%!(sKEn^_FSW+Q&
zT$<s=WOksyQV7dM?`-F}$t;Wla~*+uq2cf<!RluI{OaUHeKc|g(oXq+!0*D29fI@Z
zJk&35e{Ss#SuJ#ZXM~ut9N;5&?LH#aHQ&&xxLo-yiXI!|*)?C+T0w2wwz?giRV?KN
z2IFlhAFRZP9a$nRXa>W)=N>0`HWE^twW2-wfqvXKbZu@jp+a|1LD1(%|EP?bj>>tl
z>J)VQtXV~tH$u^n^^7nZSH`sxk9~n&YOIgvYboPCHLm_L6o=V(uRNKn`7@HhfDDbx
zvdHHkG@><3JOLJ7$ww$!@LcWst=AB+?xOLjugG!sW$ALrXh+vV8H7%RD#-e5whlyQ
z)toQPWa2JGgBPS;bX@U@?ArPiQI-G>i*A|;P~?hkJtct>P}dqi80nsIQ6fUSp3WZ$
zA$aC>&?_KaU&$%-h8>gcD=3vKINZ{@R5`dH&v%J$Xo8Sp+`Zz$Z_zJ@@~*;>3Mc00
zypCEJU})M3l1^_u$~hhBuk<y_|ITTv?zAVelE`)MEnCg@6zGw=hjHCVhZjK|B|)E~
z<8}EcF6aA}x20UO_9|b0Y~H?}TtRX<_>G?FMuvHE#rb^|!;Wa_`Qqd#7yST=p}f3I
z9qf|4>5IeeO0U(h1byaNI7?|V;EloPqR?(L?GmGu+I-6)&y|e8ursLQzVHCsBe9GL
znG>>R$`fZy6Jz?}Y(*_S=2PMQ@D}-!o+`qX^8Vub+In8!Ywiy_8$LL-b$mM3tiLfC
zre&pv8NYNC@8K&;31?NKF~%YEn#dlHPo)K>Vy5tkqxD5*W-6Q%E0*c=yckjPr`@Y-
z*BaTyu<_sEY}t-CN5TSD%uv?@y=E=#NsiAbx3=2L6_w%!LfpUA>g951_xDDR7Lwxk
zc(0r2JTdu@;d`_}xI#`ndv^g6y(anAlsIQR)>P++1wN%#)2wt#kBB<A<YbZGW|T5m
zwpMi`3hq`4sVd;FSSivS{nlK@u*KgQ8QcEqE1kP;Zr=ESMh0L00~CX)wWJtX3VoR2
zA&=X^N)E}RXDuH;3w!A9<XK)ifc+XtlD~2mv-W}@aBOW<0`Hxr`zdlh!H-DkjmU3%
zOesZ)F&9{K&Q30zX?N~EiPB&z?68D*DL43SJ0+WXjU@+O<j>ES`iNb#V9feb!+Nph
z<<~q_IV`H0UPr}z?uVv1?fRp1KJ^LJs<*nB3;U9vcsPOQXhPU(AF=6p=yZ7Xq5#`a
zk;_y-?l41S4>mvX5o3@dH?B^nfI^}$|9ZmPbd8&xO|zb|W7L!v`7d;1X>SICkd&Z(
zf=6}YM|ifWR%GD~oV%lA|2=9xNaKd9Q%vbnZIick3TGaSBB|{2`KO18L=zUbMA#Jk
z8`xj!>z#$U`BEXj<zagqgZkd;`oX%(-nq3a_>1FDfEdwiN0bv`EIq<G*HIlU3R~q|
zRkgX8q7p7)Gs(%f`n}~s!K-xdHb`mA&KvN#>hH&V`f=srgX?q7<}=p<Q<=fW+MV)!
zzHk|cP_%PVWgP0D<4IwRMSPY=C3m*@p`JHq!hqtWYzf=bJQhN4{62*6Wc_?IzWW|v
zf%4d?N8C?2$woTc6QjtIW4b05mOJa^+1PQ}Nuolve~>}uZ_y7}yEY-fNn`3n@32{V
zBqhZu7K-7EyuN(rTO_UwzYLvee2STAX@EjyQ9DbvP&VjO;z|9~rU*+N)N>k`qOTm-
zcSwm{-uP5d7d%b=`|R%jE2g1NKw&A{SZWjAvm1Z*<@YPwQ^F=%inbPKtpOit@bs<0
zs4>)m{GB-%e{JN?H^euQ@Y|l6(sF+6o_)y(h{}bC^Misg&rDkWlUj0+k@6c4yMwhr
zyFEPj^<O<SJE^)ORpa|)ZYW-vaUM@CPE3T~uovGSoJ#Ukev^pXW;<|zV1P5nY+ZEh
z`*?}q<@4h5{S*{BMV$o=cei!3rH;=fy7?Y-%$n}l8RigwoFv+!f^W?q;8L(^TCb~|
zo_U55Q3Ay3z=&rnzEmG{xrs!6l2Z!XS9TY_4oU?6I>hPVkr&`GIOL9aD+WI;F6CHY
z>7`rm0U02tU9P^PpjV<0qkVlkTkcdxR-?$qgHFLl{R-9gd-KYEElga4aM_AkIvATj
ztNBc<4%rqK*&C;k$|+iHw%I6A7bP+89}^W5u8AqRdp~Dx3i*EaXP*-f?Rbxh<#h=h
z{|IAV0dj?HzHb1qV+HhGpWc9{%Vo}0%!=!-uF;SjTL1$^DZ*_#SNnU}S$XBRyu3s`
z67S3CM^0G<2HV8*c(v;nHlN#P(OsTZzEvn~Tod9*Q&-b`Y67cQ$$NJ0j#*dErC^}~
z=F0r&g3%^T{1K%E<y`0JQxDGzSbmo#o9b2Beit(yimhvKgcn+JTBD#DMU7<0Ri)#d
z?t@l#Ht<)VaX!U&)Q^VC#<TV9$+LdOjz=#`U=reZINg(?6r({M1#i{Tq}RPtQj4$u
zibXyXqGzkl1K+dm)_7ci-xn@*OjO^yv>dvHouTYGFtCj^)<;Xa+#>Q1p3LY(Q8AoN
z&78P7xp+=jeemTZ^Zv_w<%63G=e0=>w~=)7w)^AGB~so>>QI30#2$<0U>KH5L}gfv
zw%NuSs(@|nwcu=BD^XTL^i=aKnT8nc2WOr9(@CZ?c}dXKzK%}Xg+BfyV}_QO1!8qf
zZuyoU$Qv6qpd0US`oJ0W2=2D$V^Y?P51|pTN$Jg>nd--MiTD5LJ!{PH4e9H#MpPje
zT*SO?Gu5MrdH;56LO>(l^K9tue*AVnLstk8qfr(ko*ark^G~NN9nkfB0u%3ja|aLI
zF5to67jLrEgJ27lt$p9VJvDK7O5KD$fo@Ag)*15xQkSpP-3{iy`tS*)#K4zFo|wQ(
z^&h(xTBiH?2dGu(Rc8+!=CjsHXfeps&sQ}m;FLYMV=(mC46rdvQ@VVjn~}q{v{4;*
zaB(qOULiB?SeDl8Dxp+WQgj1{a{KcWNZhx5tkhJAgV=@bC+@1z##Eqb*nsv0*JlTq
z*ThFfl}UlgiLWClR7G?gd(#Y5Yo*+ZEoyw7J=Ta`v9TV3Acjqs7hX##+mmf^{2FRF
zH(HSekDyIq^#~~`1u1%|`lAc#k|nx<JPq;@H+OAne6F;4MTovjqE!gmd5hOPY0hn)
zZo=?wE}2yMB8;CGOjWArf0sr2RlcpcL59PrLu4m>_+!E<mkBq%%8JQdJkh<JX*s&%
z-fC?4^42&6(t~fZsM~5qx2Cbs#^@k;#RJnY79sk|sV%REdNU4~-i$v^Dj!!NA2X^A
zFElXjJ-s^L+3BdQ+mP>zu;U}Jog>$z6&n*%C|grWp*b4tk?p9Yqb=wL^FS?;1QHL0
z9U0#7=#?C#p%}3-@|+p&ZgWBOj2eY!YucTUjDMRuA0CpkJU74O9Mj)KN<&XBoZRcK
zdMXE^^DiOt4E(lM>jUefoPa}`K*WUS**`GSGd?M~lLbeo`=FgKrVLfK$5B2hPt83a
zx6i<x5H6|wI9R9Tb<7>_L>#ZhyFa)VlWMA<-gf*=5p2mE_#pP}H~&Bse|sE9ouL&*
zSk@?6^2R^>&R-D~afdqK@Hwv5-QAhww%0NLc0fDsDUQNGOEIqWJO7!3gD3GmNGvER
z=|4YPkENyTcA}*_@m$G{Lm6Od5iA_pfDE*-_Wu3-zn2VZ)^r5xL{GEHjI|UsPV?^F
zl6X;qQhSngh;Yq**`rV8Bf>K!&S%f$0v_lb=_RdlMUfKMY_b=`<f?052$9yn1Mb?j
zRU$VjTvC_BBkNVt4}|}4xv5NG5Ff!2KoqNl;)|>r_OeLUMkQTzls+{d&-x5y;|5MT
zWtwBOyzS)?9%S=ibV`yohF!Q)zn$SsydROjz>j%-OK-jR*^`tBi$ZHHumRl7$RkUg
zi+wlU?9JXnHp>{DES$7VXk-#{4Eoz)GCe;VhcXRy%{yT0jbbS7DrFR+JFEOeXXd=N
z-F?Ob)ln;LFALyPADrBPQ>*KaNI4)S#pPj?)2^huymZX7^on*?!n9=_E@Eo&1!qIK
zwWHw-gmU|vsg~fh1-elp5kC+zb-}H-TuLc}50hq!O?KOElGMTHOMf0b5bZGK7`5B1
zV{hNi`cQW#4#6$gNc)Way=GOe_&~?21MT)*uf$C8#D5EUgPQWq++1GFI0ts<9NwR%
zdBas;{k^I|*Zc%Pe+b0`wxfJi(a>~gF1ZEr6M=3gOW~y)Q__EPHLkvOxL5s!*0$Mt
zrAaB_Q0cxvzOGPoxx=yzZqS`{wF!-ITxc;Yusro%;9>S%9*TF+5-0!iO>P-71u1+m
ztQ&JC138hLW?IU+(VWY5N1(=LFb<ZM!N>19CaBvYS~pc{Gt;Rzr9|HTVMRB&;X^KD
z5wCOFbMf)xge1oq@75Kk<qpnRMU@Du%IHPC|NLPjO6(|$x+VbM!lr~zfcGrO`$DFX
z?P08D$W32wF=m#4fWXzBwnjIbX$vwJo2WKka<gY8?=4h8LPkZ~TGgkFTZr(CDU*EE
zs%V$<`S{Pow(<tk`3twMyfF;m^;9;myOQvghgTIM>1J#y@PhbJZga5t_e~qi#~w$P
z$Sp?#vYOZ>uy(aUCiw$T#<T^1wO6=uRSM;dFl10!x0*Vwa2c!HUXTQtbv5}?qVO@O
zD$J7L*-je&=PG@psB_lH*ajj-2!H6kE5C^>7gvQa(55PKowwXF3U%oP1qs()qqF$u
z#3kIvGawmw{~NLaU|`sYnoWng?n*<Bk?!gUvPo5dnvEZld~2pBJB_dIy%$1Sfj5Dv
zuZ^s~S2zL3t@zyO=28h-h5>Ic!91wqRWTb{S^2@0xKbX_--^eMLG%%-M)FoJyM(r%
zSdm@wczzt+lfxV>gZlcJbuAP~)+s=2ZOx7*a5U(p7P_{y_dbC`%4$%NpinGyLq=bO
zwtGh2VE(0MoXsaN-c94>j-rvAqPR}}VHcVwgtDKhgXVNad*1;BNB|YNoS__|A&q6-
z;8ah~tx;d>BV3)GeC|EySbJ345IOcUNEu>PE*boY{egOV#!KEwLIO$)z3bsbIgnuz
zgZ#uJkJOFWw569U4UAjA!q0K9N<StEI5QQy_zKC*>ekj#r+_9Z?X`EFi45bPLOo3y
zyX$HPt@4du|8*6h#d5Ut;14rX4kCA@H{V4FyaFS#g+&{xIym^;<5Uth%+yp?x!Wc?
zP6a7u>(Ru@sFe!T^02F!-Lga9dz{CtEK8K!te@PpD4Vj7-uEQTT)U$}16kMOh{=oD
zXi$7{PqN4H`7AMFi365%%kUG`a-HqOj&B16#Ph(=MAtp4L9roMG%*J$@l&GzHpZJu
zLoQd&mtWm(e(ntHu`$8PVMEY=vdE~&RW<!A01h+2KdywBOoAQX4YE=joT6jhg&Ylf
ziC6pDTrCIy$5QT8ZO%g=d7(vO(YxJyT{+ME;y=Fh=Nf#dNq@LMLYdM2*B|_h#PnFC
z?V2;V*@E^;jsKkXU#}KS4knMSjAzK9PAoj~UCGjv<d$CE>r?jFzk`I+>C(%rZ?e_d
ziYMx>v4ZEoPa4&2X8S+R+q>$!`S==`x5owM?M3e0NxO>#vH^1Wz&?g;NrpY_#^XVI
zEDreMbZ+2mrk(KP3K+QY`I16hMZ>Cbkt>9Db#P2n%^~q-)P1e4XSyQrQ8bZ&3hUFI
zO>zmY43{W@uQs|~#Gxg)5?J<r>(1kw3~aUAxa0eKAPhZ306gJzSYK;F;(A(!?()oo
zaTf2G51JK>lWG#ieHy^66#mMSD(G77j+$n*7a~dm0&U`N8h+Bs@k-HyFP<m6{jw9J
z2<>8|T^WXEIa{k4fsS7C%t4X)*LdXh6BdS~`@2d#H8tY~+m%>YSejfJpgGrgn(imG
z#2@f<bCz<nguH^|jB}e_q^78&Fw?_VV;r3;2u%kcKpMI^21S@f?|AxOD0FC2--z5D
z-{>eCZ$EfaZ@wEw8HPQIB2StZO+CUhp9<BB%Rnh?zioS8((Zi8!|3%UZgcwh0fE2I
zorknRZF2v3X;f&(#q`XAJfv}&X4MH6e#`seHPGIZ2H*A2#gKd8hQxm*begT_;pBX1
z8(U&Xn*xfkjkF@lN66{#O?2PFS6b_fW?LsSC{|l_sb_Gug2FW`LBU;ZQu;|L&se6^
zDG2)_G*X?Zt&}%ZtN4cp<W}p;7mbanBF&Lb<CJEwo(bGj*|m?xL7PS|RKpREu)SOo
z1s)xpibJq`70feqLqVh>Q|rKqt@bBlB*zo69IL~49+)zc@ZuVM*vx#F(#osAu8Q*h
zN%6@m?z+jKk5<U+^MxF@gM^rihn8smI#de>d>>cIhVJB51L%&g1A}x+ZO5oiQ@Kl{
zQ$K$U?s>37Pa9GvIBN1GR-u(lrnB7qNhC;!*OMWIQ?~6D$YJJclk2gR<~LUr^z&r=
zL<{g)vg4JjSBv;TX%s$E<B88!@*55{EuK7gHQ>cDh}d<f4*iH$ihM8AS0<Y_J|o_l
zAu~<80hdd@^jLX<y>b7>3)WQ`HM0#UPepx8jOPgGAAU?h>!U)|TP=0T=;nPVn1QK9
zEIW;L$5%1Xy=5<TXpZ(joUTf`=KhR9**GqpK!(j@+P?ih@W(d~Vkv{@)lI!o9GB%(
zrzoS6;yAYpnK`@Wx?$$5-GXx|)WT5reCrQ4=$u97Atc8mvQQf3nGCG)Yv^FC5&btL
zsJJ@h_H=x1po}ABVEDdCUdeK_@uJ4l-BmeWugscH)ma@~rSKE2p4=Y5-mH479hnx%
z4C0)52L)t!82N64=-)Y_kB>j`%9Xqv`C_4J&960wF`^XR%da_^uh=&~<R+rRTdZ_e
zyD&{L7)qa&1Af)4C&vZVs%P=6aj-2<_vtm9*UQg6`c8?lo^9ixeEn`pERgc-(EQ7?
znNCTq7r_c@@sVoopga++hzeiDpb;^-TJKt2F<-6QMk!+AN4ke=70WAPo?vSzhfbj_
zPn|rE-7Oe*=pHO8PgsF@PtAj?k!fT{EatUE3uyR54-7_R6mk?ka_O&*AOGuS_>dEK
zC(-1_(!KYwU)%DC?_n6cUQsQl5lXiFtzjUgBUO?%Ol_mH%wm->M(aasZ6{}fg(;>y
zVTqK4iuTm3Ct1P`;%Fk@spW_?NE!CI&resCryK}|xro&@DF$jvjz#(Cx*$TNs)h^W
z=!wppqEx;Yjgka~lw9VeTRW>MXB+C`QM(r(mwM^*K6*Zw`n=<==IUZ&ncbOvr0GvR
zCngUe8!2HaZG@_fRmNJQ(g-oHiuBhj2Np5sa!if!pXp;u5`BkJMrs(kEog?<mF#hW
zm66l{WE&3>0i6dr-b$~1d7>rCm-4rP*=x#&8i;?yMLyv8CvSZ3U*Y3sEf7d51gh+W
zMt_dWKVF&M@-Y`_K5?lUpnPc3MBB!6+#O|no2<XQ)t?{Jnechm%w57Y9Zh`tZ+pUw
zjt))M7*F=sb?yBgN%q(J%9Fho$zu-2=O};`Svc<d`NIQrJ!JksS;EtNe7Dno`?>|L
zgE!~ayH@e@T0<*8jLn3GKqq>~L8;bJN#3r1Tp==0aIWnLX}iGIIKx24rQRKjqg+EM
zdAmQeaH2y)B_mbz9wZ$vy576zJ`;G2U76*zAYhZ9{Yt&s##6GL8ex`^^Ow5gXZ?uW
z45VezwGxSzdQoXSUMPKB9PSRNP*GC%OD~SAM-|T1c9srWvE$gKmIq;~qN!KSlr<T4
z8xx-pep7ivN%0=e?dpcYb{u=<pi&V+WUvSK@!Sje%v(awj~3cb%LX2`;vFjq8A;0r
z*~1ySA<rqO{?RO({KWlS^P&cgauRa$CcTIx6Ed05mdy7@I$DY{Kn1AW6K4*Bt&T^&
zoMJ^SKQw2e?{%MaJ0u#LQOjAB<~L<f^b(<16{4+SX6S;DmXJcbOKhz3PONV9@jrbB
z&H5R)E2<mR&*>n3<jvvBi8sBX)7Qz#+tO?NC)0TDrKJ{se^++Ak#1UVnW>geYW{}7
zyxN-{^1p6cs_|dm!02a{ZI)L$u@@Y04J^`!7Jm!WPd^8UmUScXa}c;r2f5BTn#Kt$
z=puBH&X&wl%SH+*r-Lqr_6wKAj^l<&)`@=9GL%;Ky(T-J$eHT%Wv9EVF9pf<CxlaM
ztOiBM%qiX+Ii>>#=#JjLepSsaG4VPYdNbAh`t!HivgYHx^flkPdO|%vFLmz|pAWhI
zdu46h>tW)Ade;%lFZ8;MWt05C<(0`*DrSfPG}D6ew9&I_|LJQGh`?$Mn*}D44i*+d
z-&wTM%307|HoNt6Gt<wXpgEoSfw?+Y2@-WC?w;waYO|9<aP15wWF>I$&4bvv%mBWc
zz31@&K><rk&857{!vmBc%K3bB){!+wLpx&R-E!{uz?BO|_&;`(Gf+-BO)KbCC|R6P
zq`LUNHj95@-P~m5dU9TPEWN^A5tgrl+0oTMO_rjz!Aj?gY0MX+yyJeF?l5Qfo~gM0
zB`cr#Pu@Itm!BC<w`SLx$N3-H_vBf~#@l-20~<V?S)wN<FqCPtlP_Fu?qN^>xKAi;
zr)<L81|6HuTM4Ri{Gugp#%iN0dX8pZSKoskMu>C;{=>d`ESEjEcpYEaPPxH%ZLkK?
zdf;uO#{I+`gV^DP@R{3U|4(aY9uD>1{&9&)C!A6_$Z}dJQHe1ap@dT!+lZ{A945Q$
z`_?IyvOKozYcsa&M)sxTgt5(7#*&e2W5j9f49{mqohP2>{Pp|!Z?4N_%zVG!dwIRz
z_x+*2t>!VAd%eVxg0Fb_s_}6FQKumP<N*%y?xpPk7&bcnGC^uq=@39=Ykf-yV196z
zcML_^L6c>vnsyMc03ryGW0^N-p`Jl_@s3dPZVU`K^CIiYV-sKHo8YZEk4+`NB&9(z
z40l9^9f3j@USDS&{NU)$;IZRZ7*{dT4zwL8qeSX1@VxU9gE~tE^apt-PXzxO5HLxP
zv|l%F>L~y3&_@r4#w_vBr!F6&e<WJc1AOsU>1%#=Jbiz^^wAQkOYJP{`5v5EeAH75
zv+jWO2JT*p5j&=g@o_QY;T4KVm8LTm%_`6X+FDE{wAjG;U6=y2zhX*`bBFdKfcQd4
z{vLk~>FjYk{)YS*e{1`F2DVqW@-myKYHESlTYSp2X8L5A0>+PsDu-rlRvG)B7`idI
zG%@|*L+-+RFa$n35x?9ilI>;bQ9L8PgTK)~;JgaGpY!Okl4Mpm`Au`dy7`f<`!*_L
zR@;NvTNLi3?%(G^NFGwIoOl%%|JQn}>u_#KDWEw`*B@K8I9$YMMh`AbR0~EGUDVv;
z=V!R`rx_-j5y>Z1ZH!&^HYLRJH@M?kB^PGj+XBU~;M_72?IW4)@J`Xv#=$gg;`xaz
z;lsa*UO3kUT8HW1DkAulj~J0RUaGpj2w!7>KHaON){&(GM*?>)b{Y$vgn5Rs-yoR8
zo}Nk<5y|zd5ptC;k1$Ov(~E>77l4SPdv7iLwYL+55^d1F30s<+##gOp8znd|fIlGR
z*DJ@mvL5G)SZHZ0TboRjI(9-Ko!fp&Z!~eYO+m()SzUTIX4P76bhMo~Q%uOa`{YPG
zMBZ5h{TXq@Y%>vY@16+bv0%-o3^i7;S=*r0KC(}F<fHT3wQR>6?F3-PP#2qwu;UJd
z2Ib(M{2PDtJ_m>I3_yF@%3z5JdHlE3sx2t4yvaiYR;1Vwi!9KM(W|puE^~SUL6ISR
zOdGu{EOurc!v0)BiGXB<`PH_0(ySVtSoe3ol9Ab<-<dv2LQBhnxeH~(@-mmdj_Kn3
zJ;L>_D7<3>!auB>(%uuIIP-;NoGvT1$_w42x=$RHsau}pjyKPD#MUk2_VNFzn5T(=
z+RzZnkm*|W#n0U57sHIavV8Fen7tL|9i9pQ$Y=vlZ2iGvi1%>UeLwfd6TJfgT^l{b
zF`pN|W@-0J#biQXk{&p$EB3(ko&pS3_<s4l8PggGhZ>$&ePBTpA_YhLRUIfEWR}HG
z8GJeJ#`t1wS2us}y{?a^!waAdid+~3NK&Ovg932lqT5gtLNAZRgN#*Q>WnkwQ=_z{
zcjn1!L84j2E^aq#>>|urYRr9aVub%OHxgsHRDk}$6B4K9=v3HXkRwieM7m?&sO?RA
z{#R!bij(}tL~vnSQW$=SeIMDzS>un*$hzBzx{-W%6({*w9o)U;#z^$o#>D=eL8+by
zfE(8~aHAX&cdK|L%gOHYg)5mh;P}1;h`ypB^Yr#D%bdARV>&e=MNB)RP)JftK^JKJ
z$M9!wW#oVPB!9#Fp}PYP>3=Ktf)o^qz!8%6c7$~)NRFf7zMs;|=nM__L<t7L(0r<o
z9zT)AY8mx@pp7OnH0RMA$*?|YL0Ksa?O4vU@VgB<T@m+C<TfC`8YUHKCbj)m)AB*1
z*)yF`V!}0fHDa3ckfR&SBWvn<RSEmfXhu5pQ@{5^t}pPePJK(cz?ybTCZ-RPEH9OD
zlKFef=(kjk*d+iaakpB#uh8UVEQ|+%<Hc@h{P|Ex#&WGB)Bx^NAVxGxp<}a(Xh~Y!
zFh*(xDm6V-#Qi)jle^9|V@uLTI9d^#7cMx`ZzZRBlqs)Taa$6pMto14uD(9$_A|q#
zql=r|8ztgcBojEGyy7#rzyqe1WpTCjGt<UYvzs8d_bkVqYo|+tNxrjd`R+B#FR00a
zyYdQ3zn<fCq58_t{jjPpBCv#!Pp{6m2&Ccu?rSz@mOea_aa;e+;hJN}39>+(ILIy$
zrW^^JlBM4;oVZDt(RVM!gm@f??Z;I0P868fuaC!f9f@{m6PWY(x{aL*nWYb)kj+L9
z7j@TTlvUIcr{%yuC{1)-d#0(CU&5uhJCV#^3mj{DBC4P>^N1aD1Ms-2A9$R%sG`Nd
z(*ZJ8FtCQ}X%XY1)x(AAM>-5jdh8N#u%6l`jadT))_5li<Srr%F0dom#q}2_uu4|z
z0c|O$5BuWrKPJo-G?UGj)d^Qj&#td=*GpF|(B$w}-`CyACjQQc-#%YGl=Wo{9$El<
zty(X_(p_%3dL3r<4=z*Ct}V0C?F<8F|1Wlil^CVF+C@v_74AoC&s??nCk)te-0X8Q
z3MptE%*5RD^PN(kBrt|ytPZ-$Z7r$xWySrm3%-SyOn^J@!TWeca$W0Ub3;<8okMbR
zV)adjjp|7r7&j|J<Rh2_c5kMenkfz2u|OE-0{!qskPgwuC?38!3g#=y&VS3MdiVaH
zvZ-+YaYkQcp*FuuCOTJF_}i&X2_tXZpS7~5_UGKV{u?V=zJ!JuL)r9TYn}mzT-?Nl
zG`p__x|UejdTtptJZRm<eI7z2j8VPUvNJQ^5hsh-&M$m=4xzV7824oa^>G^SQi~XB
zFqG!0VOlOdDU%X{lQ75lU`{oug_Xs9OVRCae%l2af1sKo677CGPycPF8Er<N8|EL}
ze9JJ68(pC7;h4JV?eOg6+aSoi1HSA$MoBr+a5|-Yp%a13>joXwQPLc0E$AqOgR{5n
zVu$W%#63G=Qtt8>$}9yrfD~KBN24%T6L&2kBK;D0Cc&-M#}`4bgY5o`2^zK!Y>&t(
zy*OY@ta#*{K{#&tcXoCRvQ22_=mR3hR7MlukAhUe5**?@%OTR)+u-uf=)Eas^uz0<
zHJ??J$Id0vGZlv`<s|e9I^c*1HZ+lmR4y!ZN45~fc~By-0%>xhU=B_+F_P}(&b<t_
zPR_Qon;Nx`DOb|%Dp9|1Wg7^~+;1JUvR@i78{OsPY{$}8AH{FYAM+Z0Z0|Lfz^+k4
z;q>Q<qNn^NbTMc`85#dY^d5%TC8JLFj+HHR=uc<gz2Viv0u1EsbMe7&$_SNh*)#_|
z@oP8=<5w_Z;+BjJThCTC?l%PL(+r+~Gu$F*!7Jx<u2>1I6w(4|2`Sb=9^h<(EJYfs
z!hVilzZaSKYQm9sSJ}+{z5SF7sJF*1k3X)KddqWyR17mf83aUlqj(bW^k4%y_w((#
z<bn9q;b*VC7vEPeT1J`r(}=hHWq~DV(cdkHivWBwSsx$3TUFl>X|wQN9<*}pN0zNy
zZMTvPrMg?}yrmvA=?%MR8=-WYUQ8_G3OXQAi@}$(5zh{=IlZnFpK%uycUv+jF|Vt9
zC+()XIow^6gwWWc##aeI=}<Er@e||#yAH@2(J`L&&!-|KpItgzkF;xl+UftbTu-Jq
zbZzFcR}kIz`h0}lQI%D%Kai6V^-#tnIyAj2Incg|!=73|7ZB5~DsEnxJHj`e=>M;2
z&G#IdZUT*O7DRB1PuVDT1HM}NFS~rCU(K~V@EgQjnH}*N?4Zbp&#`PIvNH;^AEJNO
z?LFR#54N2q08$jIpKX)iv>cdo*xA1K99eO_xgSL^`c^%-U01o4ap^^6WeD~33-*sS
z5PzD)<eNg*D4p%%;eo12KmXc06&r0Y?7oD<fo|3s>#M(8#j|x2`O4jD6kv8}IF?$D
za2iOcaf?dkZ@P<^c1c|F<>c!0b|ZI9YnQaK4?Dw?>`XMH8rxhP05i=ji(A*swigi%
zv15EKn2Tm=CIt{qr%VPv|I)=3sh6WRD9pRu(^a=6%Nm>%V5%v3)8{XA2JOl0en6Bz
z$%jkO0{67v-~=rvnpBEVAN*Zy>rvlNx~WOjrp&LjN0AMjJMXW+k_%>Y>>8KUFZPeS
z1F2pzu%^V1J=FbLkau(Buk?dffsar+K)Nl@bGd=PCW#jbDw2FY#a5mQR9|Na-Y6z4
zj>r_hU61TjP{i@*IH+|HnT9$uV|eX*XR6HFPESryg6pQdby#6*?fFUWldzwDpZtVv
zP_3%%zJ#A1bmEQE=HHUW+YhvF=}1Ox%?^h3mOL`x?A*8VFM*V)=Y+yj@}aLMi!kMg
zhm~+nFG})fM(`t)2JmO2Qo5`EDwDNz@rVe*Wx=XyZ3>pUZu;1!b0wB=dT(rgrMfl`
zQj_q=`@I^zi|CL<?E&AExKE#liO_b>-`?hzxi=5~lsKKPmLPJ~PIUGng*RWCq_)f1
z2+TjQ@cIii=6#wXo}mHs3a9N4IW>gklEN$1#jdPOvPtH5JI&3R&ogz@ZEibrs8lde
zl<m8lMxg4lUC7!pnOuo8x=cM7^1E7Pl32xTtc`tt<**iQ45eO1yp^k`FiaFNjXf=e
z*c>(Q(66v9cRD|ZsI}dmu=GF&430Qg2|P3jF7wIRfNpAa9Y*nLRE3h?Qyx|Vfwmoy
zs-kvNG%tg!=eO##+qWMOaPa^@4lZA-YHL%K`3@`9pJzSU_!ewKwf|sGU2+i(ykbMb
zrWk=Ugx7)7biEZ)5si@Tcs<mz{^qy_5c5D0p~m)xcBKG_m&fuqptYu?tswtJT$cR0
z;}iA;*8O@umpWhjgfXXH-c`{YAfy9>x#7D>0<fi8vQ~-+Cla}|fIW?IF@f1wqiBOP
z&Y$ZezyHUkhfXC(xy+lj1C9f`2Pk(D3ndf!aDQL^FN^<7nHk-;0bR}nBeri3&->Bk
z%#S0#8Sdg}{{h*gXl7i(^-63ADVd>7lGvH;%rk1zcuN0qIHrC-D<JnKM!3>MhHaFI
zx%Q0K9o;-%&oBIs9By<P(x1UV#Nj`$=w`B4IcZqvFa4JQ8^{X^C{y-_I$&M8N9f;-
zBJF=Oirdzk$|;#-U~9WAhZW{91W~#c7{rXcvAIt_o!v|CLP#vkT>7>>1&VhvrQu|l
zx3BA#MGp5bjzOpTce(Qz=>&+X!jN;oIxT;*e&3SU8F!c0_zgl&{;I1uHHnok%C}I7
z^Uze*m5N{&oVp}rY&mwOQXgeCJuwXAEPT|6Df-6w@@br>;#qTKGV{hp>3l?k24Y=t
zJ(})!xlkGS3D+7*s+t(*(MZj6)%Ar-Ky9f%g=`x^pHmVfol@hk|DkKP23Yh|igUNF
z<I0oDa=Y|pZhNg{*@;CX@3^%#$B)RKGkO<?I^k|3v+LASIr9`RtV7Q793>;xGOuTl
z+GnG$5vWj8m0~JsVMmP21#C7;nfkaG`a=DtOQRRRm`q;Y!{DPQrV98f%N~%S-;Any
zeL%IX#2|x<JGPgcXT{gsIpFjsoKGE{n!^+!YVlNjZJ%KNlx|t0%)y;aUi~T77~27H
zYMCb80Yrv+o5aLJ4ryO2d2HcXoy|{2W&G~#^wD0z6NWK!BhOXC!0q#JK<K13nS7{8
znxk)`=xvfxpIQi%OiFue-FNz$&3oevQ{gOWP$I#l_tbHqPkjWV0PLFfvr&JIyYpE8
z!kZ`Nj9((ZyHle8g#!Sl!8C8g^>ZG0O!w2qVg#&5q#D^i5~)%L*yx@s{X32Ul1DDh
zen?vbPE-+@H?1ru9e!~4n5wMhR!GRNLSwBz3g&C&W;qglzf5sqz<5b})Zr{yD+4)$
z8nEy&%&!ZU4=hPD$ILe8#=1IUqib|<TjAS2jT{j(!P9I|{{%WlSzlHZrz$NT9KXLa
z0qqInD&+i%d7eN%BvcrkK=%x_J=}0}WXfIwhmiGbLQ?mE2%!|snojOR7;%*v6}c9C
zd|7Vl9-rFpA7j^3I#-^%Rf1S-NO!?OPW9W$DWW5&gJ1lGwhGyp?fXC-l)&>RMngQ*
zz69}_UfzgYa?4n~a(7j4@+ENX9J?FjhWVH6eCNo~N+7-3d)p-2``CqE=KP%CEMS74
zt9A}cZrvy348JsQC7Fc!HtMoDS>M~UZ!*6swG1DVLjWhu39r!&N}|h8Lwaq>m*k_#
zC7krgR?o&_iww6>Ma2qNnc65zUXI`OtdUIqf!8bC%XEj7hGHjPTFK55P(AP^RSAYs
zghV;8A@}N`s$cQ-7mYz}g)3T%FT(V`6)Rj~CH|2km+_{08r;}Wot(HzXVR)fF%)H2
ze6>(zn#gOb$}#|<P$qNG?sY^`-dm_tb~M+0c~jY?4TFxbPCPQ-3GD_Z6C!?<1_Hxt
zKmPc0nAEAvML8WG3PKs!a#Sr(e`;du(kSda7qyK7ZXZ8zaNb?@!QiyPg-f(Q*DVPv
zwAdv5@vjW4*AI<ay)!GNrh#o4eShk_+FtJ@Hi~CklbrCINeM{CNk$sLoTk$cc0NTT
z!J)1};?_XExa;tWfrb)}BeL9PINE=rao_qzTi7>=pgnwTU)oh`>)vj@c!JJboR=@4
zAfNM)%cB=VLw#TdDxoj4VROJbdnPvF;h;vH=Ui||;^ClHFr)$WjbYTxU-Ovk_Ju?@
z!}6lOGc&+2C4qQ>w))(hEh?><C=U@M=2hrBHF^=PM(M)ayZ-k;<ND(u2GqK@9(8PE
z%dF)38OzfP^>uJ(^kk{c#s2-*w$;|{yhcxMAJ3WXKhl53hazTly5sP?QMHQ-@lH(}
z#n-U=O_-{P{@ls$gC>tBf9|n|GgRM3U9~drV=~?*$6hM<$H_I9yS(0PDHSJ=<mS#u
zJA7!9#G{Fj8I72srB;Z|=%YT^Qoo`fRyV<2Fi-0<@CNiWyL@dDuID~+=K&VQXI#p^
z^+C?xD7Z6K3H3~C{d8xfawI`6r}kP9vuNUs$6_(8qAa7a;oE1D*aI63PD(DRRYz)@
zi=+wddSqFAjDfc)-F$9nP39;L^y71f|DzTU;(<_{7dYr=54QCbuvhX!E97esvi<JW
z=B<5c1w3Cy>hq>`LGu=N#k7Wk{c6$Q!9Xg3k|Jhmfn5DC=h~><%X#XbvTQ24_;NhS
TX|9N40zWrYG_L1gGYk4Rj2|~e

literal 0
HcmV?d00001

diff --git a/docs/FortiGate_utm.png b/docs/FortiGate_utm.png
new file mode 100644
index 0000000000000000000000000000000000000000..dc36625e0427e4299853aa48d8e01e1a86b3f550
GIT binary patch
literal 183091
zcmb5WWk6e9vp)(g*5c6O5L}7`cY?LJ724wN#ob+79Ey9fQYh{cJi)ca-2%l47WC$M
z&pCg&_sethW$(Rw%~~^S&CGA|MMF&<_a((k6ciL(MTNJTC@2_*C@9Z=U|}FrMCGSz
zP*70)ZDnOO6lG;;HC&ynZ0#*kP*{`9O-$Y>a<C4Xnwpplj<K`7boJ7Vj*itd>FVnq
z>+YlNHyNPK%P=rlCnH$z3nun&hje3o2OfluD#7o4W=b3VA4vqOGhIJ1iMCvZpn55N
zcHw>goB=a2H%Buk2ipRMvLHHy{*FoN3Wrv|xuY1RAB1WV^9q$3%VG_+c82Z{pVpHo
zW32z#Ct{*)91CTXg=dNcO&HO+c&7Tn^F!oc*rb{;2f3mtyMt%?-t{bZYtAJFw<}__
zij;7RNfi#HWRX(fxMC8FaC>vNaI<n}@R4!r@b2*nrxkzt7W_&SM*4xovefz;tMD^f
z!H+#6lFbDTjExHNJ$yi2b@`sb?n#tlyjRu)MUt2ys@AW>5(q|&2fIzmN4vY1!w8hK
zAl)?q_|L=o*}^l1#W64f?Jy!8U@wVch&J%7?;$eL#yM8@Xr^#s9`2geyQimmis#So
z7%?Kdh@YOGI`^KQx?)1Eo^KsW;h`{k*{;Xh5#b}(A<y=Mj=PSkim17h1DC0VlbI!#
zw}UfsolsE3y+x6)4wmkwwB8Q(j&7pf67>HmA&PweCmBdj`=282b`tbDsv5MiPOg@;
z0$luD-1MNAw6wJ1t`=6Jns4R)yE^hqg5Jj6-B}a}^z!oJ^5Wxia<vBXh=_;)xp{%S
zyqw4qoNhjj?xx<Hj&2P9)yV&}^VZVM+|}0E-PXyG_Mdi5&73^kCFtq@>F9s`{%f3;
z-nRd{Cr7vco)&U~z<+XpJY3ws|J63Ks`x*tq8hf|mi9VtZ5=Ef-H?5Nc!Y#_#s5>`
z|C9B<yZk?@>i+MlB7B1XXU+d3=f7);1OJ)9|1qQgBG-RXk@Nz+6bJq<+JjyibZMNR
zph%%8zLoyqje2N^nek14n8w%X*)(AiGxd8Zf_ECV456K&kDsJU7^q8LyoqLw)~OAB
zU90hpo^@KfSV-FU<l)iB&0=WG%Bf52+D0wU`r2-Y(I-V^*n+v-vEu>UVh)X;d7^Pp
zBImUz=r?#27qQ)%%_Z#Q(5(yiJXw`ZH}ot&<MUkh{t3Ab8qH8FQBM61pO{c)06m6h
ziQmwU8P^2YSq!OU@>v%)+RbT>Wu?#bMg+b8%Wu24$y>qzacK%rz^OOwTPwWSpN^<=
zKj3Vhyq3I|x?b^1=-Hgyko_j4zRK+%y=gO&#_4W(w8-x>{Hm>B5B*#Gex+XH*Ux``
zl7BA~`Wj4MfW`XkUp%Zq&urO0{gBcsdysQ+abe3^q!Ovqg2a-u>CaYv6ExHt{w6|9
zE#Vvc>6g*FgE^;yBlD)2jXrrc?QtsDw{9+qAJ_HH<8A!5Gn(T$BDPCSM;CL(F?+k&
zPQ~PW){z@2T~dL=0Y;9*9DY|+?%RWe3^n!c7eD{q;E>~YzM@UMa%X8Y33>KSK>1VK
zcJdqd`<t_w+#D^6puZo=U&x5gr2@6%1M@+-jnp$*r7D?&Q4`4}$}6;mcUx>6?zr!Y
z|9_B!N0wHAzhxcb{}g}|UHVe0@2szRfQwa*Qpn-^2_&{~YAvpiTFeuzz~$H*aZx`p
z^yqoCs`@VGmDNmIMY%uXoH-@XU(L+s_y*{Ab=Z)hn#`rwaI=gm@Amy)PPsb>CFDa9
zR1MD_o39o=|H%0X8c%~eBY4-$KM{Uf+slCklD^M*kzqse3iX{7p$6K&c&O1Q-fkc5
zcczrmsXKih@0br;C+?rfOy^Tg`nUV!$pLMgEMz69os9qbUu>)YF7osd?Ssj+F{jU1
z^S|xrYd3jF@XN#TXtT+;|7r*Sr>lEyLJj2T8n*@3{{85z(Vp2_?||t)%V^dn!1)MQ
z{CSRlv;7;c`JX<dDhU*pE|X1UT4?IG%wCsGzyCMO@jojTLX3qb_@#VP^cUa%H25$0
zR_c&Yf%2P$0m_$^$LE-P>mgz8t3ItV7S~5h>UY;CWjN$~(@6|bvL|l&UU{v}Yw+DM
z*>=yPQY2qzUl%k6J)sV#h^-p47Oehz^0GdI5j+b)_bmUeGwy#hX4>Gs@Nzg!0GnFe
zJNowOP-%arq{u~5y*Qca>&$xL37M$@1cw~Q-%zxn^n=Q)wHQN<@KwaR`K{0NtK0ph
zq>I&Pb(_ch7*^THi*Hfrew_N^w)c6mEm3u@hx0rn7BnTX<XbK;0u(k?EB6?A7Tu=r
zri$cWgl=CLJn_~Rh>+l2Af+f3wx$w81OdvLQnn!O)3f@4S4xWF3;omeZgX72NfPbp
zz~hDX^mu@n+CsfGJWze=ZGK@tKDFpuXgr{7H1mdgma(Py^dn#``lD`+t$Q+x>1YRY
z35OZUKDmm*-8a4#XMWqSQfO#I2kkth!htz3G;xfvEGA{Nmu1I|)oTmwPJogv9?ieM
zZCMT5`k_k0MQW<Lx!A(_!;cU4PGPk_KPuXe)PB|4N0UYA5JHO69`Sr;W4$1?XF+Wv
z>?I@gJbC++EIDtP&kdDI5Gs`N@8oE&j5UAK(156_ol`&oxAQEwuQbH9pbFB9YG#+@
zTc!NA)BRLETOCGeq8^{mf7uPZsZ;Q{JWXPd3w%}KovZ}=5dSVExru*eegP#VFjo%!
zJom(~Ca)#$hg#2|X1nQ0pn_q(lkA+aeggP@SL~-YOo<`<_AsWp+@(){|1KW_zn*n>
z*-!qxzDp^CJ#=Gq{d2LjckBrcY>VsaoWFkU>$PX+KK4g@I##z{)%PXIpi_#Enqm4c
z9Yx9bY^hZCPgvio1%j#tdMDWJ4D-5!%-oG=ZZP7WEQt#Jd3v}sTL|Lr&-HKJx6|E&
z1?YJYG^e*3YS0OO%fC(yrZdcKKW-u}5b0~qt#RfdpWoNtNIIWt-0rpmbOuF-a2Vek
z0fHXUA0DA9TWiz?V9>V1PYrNo;ln}0nl9EITgZm-hYm7_g|@g=ibvF)i6GF<aAsJ6
zD%+M`qc3jf*=&1*$p(E}gA$XLu@tPr393O}B}=ZG7>U|Hxp6`nso9`lYP1(!^d+Ti
zI{Zt@e)8~ZToBgNl^=r*@?0~xR?75Z0Ff&iyMbJHhNThXl9H(L-a1{T3;`GWtXaKh
zf2uw*9Qv67jrQQYuYsRpBiI&*ybpeNvixbk{i)IEB{}Rr#D90rH1gfKFqCm0tw%(`
z0GpJvw0RW~{Han;_4Tl!eMU=mpr0gSZf!60`@2K)uSQz*Rrsw&1zRH%;*%b1gz3tX
z(*ea7?t8cNzw|DfZM_738Y(5T+zWd?y9}@-FnnJxYPo~^%K67kcC&p6+;u1R)e2j{
ziL$!VM(pj~Vz$#v%ZrpBnh~xTDFrS}5N#$C5O{+fo1AM9o+*cEn?^S5OU7udc$V_5
z4ohiH8$T>k^=H@iX3B5Sz?|`X!(yNaC%ly~KfZWs?aAVH`*5Ky;<5~jxV*Z-{R%Gk
z?YQ$U)1|Msi$tqY8CVDeKaR(8GOJ}O!RmL=?is0#pB!gyoT`U<bgxo_T#byVFPK$t
zEO}M$0x%3ewlkyeV_F7%?HCNy-JQ@jYQH`#p>ygQ5f4lw*S8#^0x!syF34LmT`z=r
zb2M2l3BJ)UZHT>X5LX7%5z`&u-*St9zFE2?3Rx&fCgc4ztu#m!-QD7>J4xF|93_yK
z8bdJ#Bb%2M?B;%z&8>RJK;Rj7lZAaB&cAQ+M*Cb1>|AE_r-K7wL1TJE%)fQ)`&z_!
z(&t;|(sva)xHPH2qQIpH+;)ovSI3bcjeSj~!-`1(ENYd_wTDw;zVxwNvGff)x@Y6K
zi|t}-XK{b1Pj)}u_82Ige<X(lsJ$6?oG-WrpC_9#<)^#x@2>^K&vq$;U4AaE&%fxJ
zyaNQtrT93;@|&ndk3pu<d*mZuoFCeS@h;y>l4iAuq~86UW>TIkW}E5V-CbwuTLYNh
z@{RV@($TUx=t9Vkbknr?pKiF8)DpReE{TgD-xkGrgy)F3W{9BAlGnMmqj!1EX<Civ
zS<m)ER5J#*ir30Ne2Lk6XT;Kt;qmRotX_?XVVfXz+cfTFby9T^sO*Ep#k-v3ODL%^
z$0}l&y5oW8c+RnN-<LRILcO6SMc-&@591*(*^&;*Nt913KAfKLO{tzr9<hmct9H(l
zd0pVHIh=2Q!uAm#%KNlfV@hnOQ)%<n;@u|Ifx<G6rY1BqX__d8AJbMW=`SCek3-%G
z#5KJwDLLctTIT?&L%|!iT@@uCV=()%61$_{E`7#&^n0qmafv2(Yjmvq)yV7N)Sbqa
z-=z}~_s>HIg#{_u=A<~N#Yo->i|pd_mL0EF03LYvwPmtHmd!UdnO;C%AkKFM&dFl`
zRNfcSk0^g{{hcV<7kB$tUyBvWFb}?nRVSWwocoEs@-S)sp{pm?-7hRVPH^QDN%Hnk
z$`Xzv-LHUBRe1(7--~kVIOl;t=v#_jkrtfF5bbZM52q;;WBpj6pbuGYQ>KY1QN!lc
z%<*4Du-=L`1#pFs0;uQu+Ja_@`6<pSbc?bw8;%z{vwhtiC!W=I>DZ*Ew|RZGW?Ved
zYbx+Nv9~y8PXk(q|1z#i#5v9^1C*^wh!T?|ysW9gjXU@v4=9anUbUdej3a)=r{dhL
zQga$UWLM_NS+3FZ3^L+0V|{uj(GV5nyst~F1-Tp=tlry)W^2l=j-AbImNa}GTjNh+
zp^I~DkDv_>_uFX{8sl5tx+@*ae&O*l#%fl&sB}Q<i2*0e)YW6FbgUHA7*Hh=a5@E>
z)emJ4H@;q3VeJtUF9>PJ6T{#10`(_xhK(QT*Ge@M9K;>my1;WpJ#H8$(t(*)#^B!J
z-Y|87oT35C3<~VJMe#fS67~G}T~3`0TBqYaOhC{s$oGUP^7PfO@jI-c77kp$%ZM)t
z>|hT1fT(V@=|mSqFXW9euVW_7p+d;4HJk-dVx=zrIho$)nc&+Gm5GT6^TNORmy|?|
zh7e21+jFz74GJ~`eo04RV_(ge)+)*Qx5iq3p?Yhd$k?~e8!eYg4IdA839q?6{g=p7
zo4$~c|Gs7R7dy(UDqq3f-*m<K=6Lt@1d*&R{st7rXqXQ`a4G20#ujtVaO4MEYCx#f
zh3M82&u$(Vakl#8OIh;NdIOou1HM*wp%^wB=Sg^hj+R@qm);SRSmF1<Y99GDjrXT}
zLhbjHNi)yFcI4qC_lhf`O#&ywh6a!&*zn^DV>jITP7N^>m3>M4%K8AHy`Y^2)Q7}+
z<oO;F*3)5~nevG0NwVH)89yCEV*HGKOz-tClZV|$;x5_z1fRJ4GOYmA_WixWFNu%d
zDW?tnkewLnArG+>8MLMhxidP)J%AcnJ|u0)8tW=Z7BKDW+@5FUblm+V+iUZeJ|{6=
z<D5wjfwtGkxEhV$#0iiouP*#R1tuFv2^nYuL$3QblWkp|w^?q$VS(3|qzd|x7vwjj
z;K4(Pxl7}g(VhK+g8%6%^kDg7zUJz01-#C%8wlB7@w+Pe)3GrH3!Ow=lWh&d?6~V;
z0r9RP;;Aa`o+(L!!2i&kWUhGqu<!RZmmam-%=Q6rn`-RxWcBXWD;s#Aejcaw2ZQc|
z?d^Jil`QY>WD+C{e0#WQ4G*d4*SmG=x?3zz#=frZ<cZC*yFy#>9KkK^x*Qw3>lBSX
z?rN{yU?Je@L3bE&^i`31ROT2vWf;Le@pnI^8E^hX@Wga)Jd2x2LP=kHL;nXrIcvl)
z1-X9B{)v1w^bR2|#MKk3(V8~B9pd+6U-p`C7xN}k1ncJggkvr%<@J#{^eJ}Tbo{gG
z;EiP-BMI0SYjbM9KO!{&hk<y%LXtNCi(zfZIv+ruezG9XqL&r0gIBp0XfDP2G9Tdo
zt-<gxEG<1jjdk;_qlHlt$#rfuhyV66_f`97`T<nPG3n;*=KJKTxCx^GTTh<G$L&9=
z`477gCg}UwgpS)i<jIyW)X~?K5T8w>I0G7SJ|}-<q&e4Zx>mR(XfU`vmH;D`L&7k}
z>?#wwLp&4xd#aV!Nac2AH*qMYTltTK01kI!Mh*s^vD=i^z17N+SSz%)O}2^Jl-k8j
zTek@x@(ZK2V8eQJ)oE6H=xc*s=j4GqVzJPg{q6I==~;p7gT5`4Wq$c&@pV<ZW)Y!y
z4tacaU&-rtTP%{@fp?Zz2kW%yH|D$cZYTQBdoaB?{!+p*Gqq%Wa04V}KNl7=&$#WK
z(*2!q#c8N^l6#Vxr={vI2`C+dTU~RL2w+|ukWZl%Bz_E^iX=eC{!Z}dzIRS<7_jrY
zgVKS*&`=D_d-->Dh(o-4*&t!{VPShmCbW1u(CY<wvgG*#|0C(@d*4A0oo#WKs@wyZ
zeOJ`N1e3kYt1RQm@P%48Qf$5`jZziza<r50ok?DwF8wY&_!M=T{F%n`gw_rpeZo{@
z%z94^;4C<3$#~9pc2mg&;;J+q(2TjBDgt45K|a`MQFe9LESBa{voG`ZT&J{%sSr>l
z%}faF!95d2O<iD4UEEJ_VMg%Puz7yL;4U0veUnK!?$a!O<)xd?<%kNwp;<3&x2Um!
zaJzFaP-_(Ju9UKh?-G6S?TB_2Z>ct+CyRMnI(o0dMBNViUYoD>40ZF`XSC!rK~EwX
zjatitPf7zVg{acL@rs?VY4y6k7}n}UiN=UGIX&QH2S_M9_en<c<u(nEkWfi3aEXTK
z(FTDQYg~vgDY-Mwl*iiP>C?w6e%?`A@`W~&iCS=>Or)fqOh!B-Z04xJ{xJO_)UBbV
zCgrz^l(!4BSCxUBGW$1F7zTwmrJ$o=Oc(xI5dOnx3?%}-v&H|B>2Tb)b_D+WVu<8J
zB0RKhwaU_McnDk4F}JJAF_+sPPlg@dYgUTq5l~yL7!!-l-)-SlCnXpkQAE8cZg=XH
zY(4x;3@`!9#hvE~9oXRlUhv2qw8EeGJ+L0vsIICq-%3-$H||aZvm)4%s#`mLto$69
z;lI4zmkT4Kd_DW?F3P9ZwLS&BK%9`VJ#x|UaEzrlid`+c8aRP9(sRnB?hKFfbH|v!
z3BHZbJ)5UORsAT$mBV&BX+DNCD?hIeZQ|@3y};ObZxiO2DQJc27xRf)W!Y}Fif^ac
z7M@mfF~}SD@nHy>VtyF9IN)&7=Ib#UPfb1-Pc7EFc#c#Mh)%7)u;q2#nR0N#UWj=w
zq;T9|xvsuBUoCr*(!#7&EPRD6Rv?lTFU0u`s2v#zegHN4?y?!XzgT5z<{%>2z%&k;
zDv{4e+llC@%HF*@X=SK1EKnWtjsAj$5#a1`@Z0JLa&GF;=kNX~S7YUts<iVWG|%V(
z!<o`28Dy&J++2N8Lf)QP`gn!uL?D_loZgwiRiVekF_s)<&X8zNs-`*0>D{tTS$9MQ
z@@E{yC+WXBwMsoQXr?g(g*LIACGGdfrMwVFkvHsqCPCt>;gzyjW-x($SJx#K;BvRa
zS?Lhd76p$yD&<_r|J2p+S;v@dzo5&w^>f^mPS@u7-%{N5L(>M_Q@zt5<9zlzuP<VG
zOp#39EN$EG>tW-{8qlA{p9E0HGdTEtzWam*TC*jTZIdZpr3y;SqbIDyNZ&~><eM4L
z-&raz83jDteNC+>$FX}>_!wL|fz*@sg4e>DwSQ?&ZIheh?I(xv-OR^ko)N!^MXwEc
zJ8M0PZsB7ZdT>=n7By6tcqt!`A7DxMK%0;pKPr@$lH#Qcm10o<u-rKU0Da%N8u;t#
zTMrbt6bzE(5x3V()a^{`@aU8J_r{q#;=8na?E!dOE~oVha9)vPblfj|kgDWsB_qrO
zc1LQzJ#c$3Bno82vV^`V-&x_|BVbNKIWdh`j4yV>)gSEc#ULTC*_ed+!>MoFpnt*6
z)A;-fOvb4j$T3$gC<JC?3YiQ)QeQ%k)MIK>UpIIBba{FM<IPwbYE3=V;<6B(9uldn
zo=7zpT=Qm7XjgEg?8nf?de3JyXd}pF#x=cJ4ps3hpLlo<apnR^L+6KV!+wN$q7vzR
z2Yr_?3#qV*``ZCZ{0haL!5J-4A04|sT#>i+F$e)6wc7*hF#$dOGzS8IqgmWF9p$t+
z)TZxSvpfx)x<T9|A?T!Dzq%Qx5%528HXT)#@G@_s+fTn6zu9bkT)TgzDBC%h#u<~T
zFQORd8{^u$>pm(O;CMHl`}=xl&W6*e<#;&Mtg^O+%#4aAyn5I(q{RRf^umtE<cuKZ
zd;r+d{o5s0cf}_Mc(UH<_;422$mrC1T?GlbN$4+{7<t~eJCf}UZxnla7Vmn`v468W
zk^wN!iDC#a3Mxs^eVc0T@rAA?8U9SyNZdvxxZa5?_L6<yLZV+UT>n_W&Vb~T(S)F%
zxU{Z9mbaRtewz49RAH?8xO&)cz+~cOt8-5%zsV_qERA^6^Xg7%J0`tWOmg`lgcyIk
zrGbW^GqeI6C?D^)BVI+wUZY^t90SEap2zV2Sc-YTT^FzD@4v;Wi;uLO5ewo)g~qq%
zA(jC4Oh>)p2ln%Wt?75TmDS(JcQ!9YZMdWr!q22;Fi!+_=%2PTo}y~Eh${t5!8n|6
zbjG{IVGpKZx-t7(Xu{CX4`rGI=PzbWl0J!y_qW^Fjwg%wuADklezS|!nM-#W+Nud1
z$L@AArGxze1Ig$<H@FyTdIPybQ{RqO_^ZwSF%HV6`4q%B5&j2j0qpPb`b^r$RA^2)
z5DP>Li}m)L%aW448mXA86i7qe!2hZY79bEIxr{^X<oJ?|Xl-Y`o^`Vx&9mdkGUbG(
z)98>=4Sm9~9?w$F<i!;G$#OI%j_8#l?iD@6i{EZJ`LZ|ZW9ns?s`PqHhH+Gz%cyPC
zW=rbsB_1)kiu*=)bU_Ka1NGgCzwlYqJKBzf7%??`@$*+J0nnpkSp6f-o5cB}<?9Hp
zNJaDaRu|Wj6c~}?h`t0#p<QPaX4Kc$EUO`ZkVdAlUTtElWNvwMSW%eUua_jFfL^RH
zpC1;_?67WYT0*6r@|IiUT1(hw0?m8+CFD+DzjWWU8e44Sk0bqH0MDMW9{(=dsIGM3
zKxVUiw2iuZAR9$#N<YpR9!3s667!_^Rc{3BRC@69YL+H4ur$aBE}$#ef*$XWWjCL{
zW$PSr3naOvlJH$t`9Ry!&E@W&uszw+w@vz&+nv<42F05Lo4z8CJDZ#>Cm<mbpK6ut
zlxQroIT-YKh+RMbVi%hkS1ver@@6cDPl&Pb$#XQ};)VgAf|%*jsk09Ywp<s|{aFMX
zf5kuKg*oj>=|ZWj(Mnz7jgBa9Y(M#0(Llt7v>2iPckKkV<YFH=N<;Xy=;yQTr%^u7
zfPxO-<_nb3uxEbj7srXx;^oHD`9Wv6uUQj;(z#tt#~)w(<vI-^_<ejF(oL)eX>@uD
z<V)=1()#f_jMNkr;z1C8BI!JtQ>L4$TG=Zd{XFUl6_taE#F{75zsi9{YtF);c3Au8
zhjQH`KW1DrtvD|s$H9&>qQ66>!GM69z+GJBIMGI+1U{S|<Y_Hc{~9l5gG-$oH~?sP
z*PZPI-q4eQp%(IaX0^EV*z*jNW!2~q45+su4FNDrhnqj?Mi#gW<@_;XJSrE<7qofb
zddc5h>S(lFSIJrNeF1W1pn5Lxjv6XHa@2OiQ?-Bd_pTtYA9=AECpi*!yTxd>Bjk$@
z%B`0)aaVgT`qYU>cT-pV{*u#B$6<i)oYNj6CK6VrEVfQBN$Wa-BeId+rVg&k4ylP>
zQ92)bEns6I4><W4W3>C_&`=4EE0gb$@7Qw0SVwx(tu7+8jXls;`YGQN2zg4k+ExV&
z?3jvEWgA&YG_=fDY*T`p+;HKXL;AdM6r7mUAH<}u*vugBxIjs_uQI;%&trxeVjWg(
zBRx{;wYFZ>I{wmu4qdUnQ3C}c9fUS_SJYPB32k(DS_|4rq6BE&1{SERIcMTdquvLX
z+Ix$>9`lD<E`rYmAg4cvUk^uJw$=rC&3r~`!QLn5tl}f0B;)v7y|=j)-uIhVeRZnA
zRUTSC^v`0RJ4@e6-?-h)6g=?uw&G<ka4Yt|rMM)&q!+1r6wua!(RA8Urt^5Z-Ws?%
zKl)x=TNN!h*f$ZzjL%E6LKS{EIr<c;C;6|=rCC0-ennJLHQx-&+@4J(A=K4Y`wqx5
zT|PH})UH;*9p=lS`RX;FXSfjchw1_1!*gACdnU<voDJ%_&R$}0x_rT;#z?anhHBU4
zm=hvv4u8c}b{}fAs`*iy1F~I3$M%66?&v<|t}dT?0<^%j2VpJ+f@(kvI;85dy8Pgh
z*cQAM|ECibQE~u<YFoB!ug8Ku#`jI7ErW?3+7H#IJXg+psaCW}9D_ncqN~+i;2YU}
z!ywW}rnPRdX32s2YEZjvWd3%Ow0(4cC=<jXL((Md(}-v8m>i>B>1-T3(-LjvrU@4Y
zrV-lFXuP=NQ?k%-lg&zxy(=$3{od5^QK)&pH{xZuk-ln}je~BJG>7X@8y!>+e713V
zEywu7oUCH#mbm;VoM=p_&Jk@uH$ILDAD`Fga!fr*kg6|<&)Spk#C;}fUP2J}lJc~T
zuweDio?x|hj_hhyqff2(SJm11A8bpu1mM4Rq+I#c-IUAR;BMw{q~WpOPS`0b?hnJx
z$}dT2?~%AUW8&zi?$I9y+y3O)K-$=G$N|vvG2)%3NT8?fx>1_gs%c;>VAtFkBuOM2
zo4=D`oJPvOX_zyWuOzzHZV0Q0I;kbMYF-{OGI)dB{C%9*>7||O|8){3#Pu2N7yuO>
zq;+)jT^RA>n|tI;MztojhkTl=m&0O<7^yEl@>bbAs3rPP392g@HHXaoSgysr`Kf|0
z*g7oAe0COB<bOFy9c2#xLRBFvOh30ktI|i|5yb_Zl;{9sN<&{SA9I%t-18^9ZHf9`
z=*;U8&%z26LUBjpjvdSf6>`iQ$9E|ihFqA52sp>)-%=JkDyaC|#X1^*J(>#Op=(bW
zru^#~Pv&EOwJ%C1Vhk-jWhUyXWTKf561F{}ymLRA?NwAnqnUrrTM^4@t<Kp3>b8kX
z`}MXM+-44tTv~L+@+{{z3vp8x@C2sX(SmD#IE?~fzX`0`?LM*MSF)Lp!j<xA=teDk
zxdHjyE?;Y7gU4P;8|bM-)<`)Jldus~lfQLO?Ct&CyEUdy5&1Q@F+z7ewBlDHSwV-$
zp~P@96Q60ip;{VO+nV(9XIJTugs(Bec-%>(`AO-Sk8$o%RPatMUg2GL3t|ILP1h5K
zPy$);GlKfZW6i~#Q>;iFbQH@D2TFX>e-9bP67<Rlf8}keavzGZ8NWvlk4P*TNv9kG
zw$5Ot{G#tzYPOz(#W^_H#ba9AieKtzDGwVIt~7WYcn%NB5EfI4ZIf^sDH$iwn1?s~
z=r9=<w(f`dy9AtF+W1-z+CgGTJtb3jb2sLPLNQKR?C6VCvlnfee(#`T9LDx~<;(W<
z_p&s++8w`}u~{@Fi0Hxf6g8n^$dW~@kBST1VPL^bg3C<`uDd0?d=)cXt>}_G$o34z
zLOBk2tw!J4PM_<_sDZhYl5OMN<MZ@MhyY@A^)4HK`;hL7r6#Ac)dviUF@ZywbCG_p
z9Q4Ck)9$!;QH32hcp-17dMSbkl<KVL{+8;)-m5c#qWv(jLz6rYFG5mWN_GXqdq{2)
zcZ48C@F?DJ4DRr5o$hc1cExS%m+u}XP0sS(#4=RVnKFpQVe6NLDIviGpXW?gxpD26
zf=D1Q9i&R3rF`Yuk%K1D&MoOK8xn$gjI;QI=jUgv`G8ZWZ}=nyLdOf?KU63*N@q)6
zji-VAQeB3c4!0&8y_bueJ}*?I=yI^>6>DU)zDFA5BZv5ePhT|<a<HaxYJElQ;LF`?
z+{U?|^yyxaf+Umks=H28)3dD_n7$Mi$5`X6bE8ItO@b7Bxu;|#L*f7#>$k(m1E$~9
z%R-kXk#@{rjuBs;tl4l~S9C}yvSU`V@+de#Vb#@PMKto&cx*_`TeVW@xpbN({G!gA
zoE`?HeEL4==O3;{@K^oPc@WXmS@V~X=i!pglIX^+cS<%y3Zev7hI%D+goCEMxE$Q9
z@*vv5zTM|KgwFc~6R8jF)qpG0y>r&zoVrkp)iaK}T!l;d$OsYToT&&!9)rX{jjJ;0
zTT60aUSX#9K2z%6UTqOt%I?tXdFh)Nz%9ioS-vvYc&3{Dso3z=jPS9R|K$QFu%8nV
zS<PXAyuIsN=-%8bh}Mp_7w>FkPI<=wPm-%nMDz@#@4OT-+sm5kW_d{F@OTqY0T>f%
zKU2hCZUlI6P=K&tvpm0nBB1bm8$9fl`LQ@vrJ7IE!7!Psh(w!>l@sARO3HrjveVY&
zj`ux6YcBt2P~Nax=>-Mwo4fGsO%4RzrrM--9$DJZ<8Myjnt_$LQ|LE;qbs)P5f5g3
zGcJxhgV;YzYtFXwe!BT*tE%;vFr%=h9x)0*lV71JpDZV@P4L20MP^%FHb8@9`lTWY
zl>G)2l5<Dvs<mEgQ;9!6R7n--woBkn^lcn2-<yHDE<Ua{ggp{nVtEKp8;qC4_%-8F
zNFj17DeE3@hDR>LeB$g!kQR}PCTbyxI>#G``6=*@T13#(cF|8HE%86P6QyrWWaMS$
zKHsLQgRU>qPE%MuRzF4rH=FGo?f5b`%8eQ6#)C#8ee=0N)N^mpwEim6haV!^f-%$%
zJd^fTCXh__6fv4}g^e_?x<8kAFvv!O15Yn(wyYI}_UijJW@S%*B<2(E?AVRaNsb%n
zluFOa`ls*2H)=L_FvclN4B3t(*)Uy!S})~iVK+R1_fyh3d{<-bDO$%M(RFeH?jAZW
zVE}*+pmtwKa|7vgl(@J|%^+>HbomBTrSA6)tw!oV+|}-P)Qs#Opj6<Eb6Ml8dicFT
zRei{K0bO703(Jd{vj(^93aXflbe6~E76O&4uoJjJe_JOD$1g>s_z%S5?0r7&zW`yc
zo|?vq>nfhb?cdNhci&3h?{=Hyc>(#pBG!zbgw?AZcGE*)JMeOcKK>!V0n=epJ4oee
z=T!7dVRhB_u{G#9<0-)!)ml_Sf_2*i?`~8gI~_=;vWJ<>ei}+>?1|eiM1tPp`j7B;
z9eZhN!uB%M*Cs<BR*HE-01#{llSCt#r!z5&X}H1j`rZkV^nR>ee>Nl*+}DdM<&9MC
zWkIG!$31>07Lk7a95N#(r#A~xXIbVt>zEmX8i@@N^dicR8d5ttlVOH0GhUhV>@Kzm
zO|plr^1~WUPci8T!pZ03Od4%zYiasF4^N(lHjuTeF;d(3EB-Oa2z6h{?I^;wQl>kL
zNPPY?bNZJ~<5vMhq?`3Ox`ymmmKaCkA2fvdONCZ_p@+U<FCy%9>xo9CdwbR#I`pwa
z2T#BN<s;E+ZoRj=TVEs(vqIqmA2Ypp>2W+6y2SyaQXIEUyI~oW0<l7Wo|_(XlVEM+
zytVmsvurZ{TvWEW%zDl)E{g+?YQSvU(qAriqUQrG-a^h3%vet85z9`(w6?;$*=ToJ
z0tptabxmFP6AZ_V?7XAvVMP5MUiQQjL(1w^voJ~`r|~DxtE>R7m@SywGm^zvduHa9
zJ({jke|cbJse7}h^Ymqdim}Risefrv9#rV?Wd%50$PgU1{}L<Ilm-*0!lwc@mKpPd
zU1#(y!nBOvULhaKENGdVepBGk(ar4c5-mDRs0NAf@{|hk%hzvrq)wj@=A%RHi)#Ni
z0w{H;DTwzEfyQm{hAW8<Q)XjV#(03G0PPm0rG%K3rRw?Pze!DE)$k~3{r5!<IS6PS
zKzS(jFZguEC`yk_1kuF^P178>oBzm&vj$WlQcPV!tlw@ml5q^5CnNP0s9Cgh=FqFI
z#Qh{oii%tFEzfFRE}Wk=vO^9d$<=KeF8JB=u-Z<C44TCeVe2h)X~0^drHl5~Qmjvk
zedSq<D9UPfrjTg&Ct;G^7-Jor?Y^AiE#%p#t04M=vaYKpY3cmDWZ|~<=)20krfC4N
z3b*)3)=wLGZtP9v`jRc9ll59O{!V+bRLhNnt>x2}bX$m7_V&gp%R%7~A1KE;*{Ptb
z|EAxeY`%8yoa9tA<E&o?>xlTFwK{kB!bFPA(Dn9}V&5FlT%INT`(&x@&^?OURT<2!
z>+e-6NR;3+F4a8=cAndNOF_wJtLXJaO+mexlH3l*)6xcYK~S+d1b4qzx_k(1MD$Z#
z|GO7|=~VOv16gWs&F_@@(fKMobcvA$Ye_6E+L|v;Jl`JJNSH03@O<Yves^hKPd-aQ
zUNm`{!uGv&Sh{_Joq4$q=2YtgtgD5w@hJo{_({!vecVru;oCDI{w>^O6bwS&Rk93-
z1T=S?a`*smI<_T|A{7!<$MLfEDw?WVNi=%RV`!|s(wvq3fMcS+ew%YPp_BO&{x3iV
zS-+ZUhNTRpTO%WJjPf~aKhsDr#B{%V8)2VUDeD}*QsWGM?2U|Zf46+xLh1$@!YBN+
z8Mbn9d_x|%ENT^j<_+jy@I+<jy^*%_7){uc?QOGhnEa;&etd7{hVI&ZY<Z#XR`*G~
zZGY&wjF^)Q*+N<g0AT!1c#a9v+QwWl5Q_#q#qKzxKMuM&a-MANVK12S&pDKq)_J?z
zTQ?D5JS615g{wR>Yb`#)uP=E;QH=XNKg5Uo)Ma@K$H%7Z`eY$auFjTcw1|f#*(LX<
zVDuTg3i}3*a4cQE&n-`1`bw(^caK4VLmAC(bmT!*Ic3wAK{NVlN6H55sVacTtm_={
z;f=;^Pj9BXE^kyb^}amPs^>ilJ=mU~7otfqf3fEMaTf6*V}{ZBT%-p&8D@}zL{V+a
znPH{$hedYen&f<0ucOgRZZf>N>9{nnmOgiUXq%($V2TDzx+C5|NRIuHH~@ZAI8ccC
zxKkObeOzU{%(4qLV?8J=4uSPMH@UA*9AW#L>**fXkfa)<=QQDn8^HSH<B5~Cg8a95
zSaIEb3W2JbSMB@H7eR9z&aLgXY1d$c*sR%d%VP6q!XIl%TSg)YeK`u}xW!OTY}V?*
zOEg`m|4p!3@m0LjY^%BCsdc8+>3gqS+-G>Bg!QLw7~iZ-s)T>IZJnRNkiKsP>h^11
zSecpOE48bWTD_+vbH>r3LbknlKA!5hv|U<{=eB8TRXm&Rl%#o<ON#cY7>^q!5YkYV
z3y)d!jSA`eZUf%&q<Xa~yPmp`$_lWD9_8wJ+krPjfxYo;g5S#MCEkJLJle)qRP@N0
zQ138U|7t|zJcOCb;=`R!y(SCj3jN^em?GNgAK%v9?(buyUCq$t8=-|xms+;tsLII2
zsmza|y4Ol=2=$A+Oexwq4`%(zPo!FC-gNA-H0q9htMB|aiikOJ!0=-6_fDhBoAVz`
z-b!{1j>$)&SCHB_3)55kpAJO$E8Zr@`(M55ZGS=BfibpivYV#*gc`P`<4ge^Wjfx6
zEoNS@L~r*$x08poZukeDs_n{_if9TWjHZ*;0)$zFxD+WT3h<lV5nqK@2MDgGtcynZ
z)ZgH$b+6p=0B(TDs~LMAZRJUB3Hkn;gN|yN)A*d4b-^l~-H}-bzjwvam>v)h@I}j7
z*y@tF&J!<}5cO=r3B|7t0_JEyCQW$#iP;yvz1y5Pc1?ZH1B|~e*G3OAU0rjJ<_c|r
z{w{BQt+yavG3}jlFSq;vXfWD9|Arkgp|Pv%liY_$cCfPKkfJ(&4udHvqvJkQwW~AT
z|GBA!SZd&QeaVhdO4z$e&_Ep2>!gU`4u72j&2Oma^f2v90^T07aocZXxA#RH^r@z1
z5Ai^7F<92ug8cSY>r2IGI?!m+1AY)QLaGMFCQ859g4pf13fJ5I5eD%w$B#wNPwc*_
zJ)H`HD(qN(8M=M`^d;^cr|Q1^bnV58ohJM^GR_mgnLpLbveO=mJ;9am^#h3`RX2UK
zq)_b1Dpa3w9E)Y<aQf>9sDb3u?rM78_9T2N>Bw*z9a8rTc|Qifd0>1E>%S?~CrSDn
zd>~(nK7qw@7h|JCn}cJ%>a$xmwJ9&WpG+(_jdjbh)eA5G9OfwTR^(=wU<dGPwbkdc
zQ5s+vp5$}g2}ihW^#v5%(*Konbxu3mBzL!<NC{0(u&P`ex@g^T+)55S^z(a{p|E4~
zu%7j;19O8@`hNb#5^V2#^!m}?zb~>`TM-I|zDAha;k)ozPsDAFVH}r9U4NOv2%!~b
zkR-A;mWcgSIz@EvwB*Wv3qIjB21%ah;%kXiVQU^E@AeDw@{kDUsT%dqpa9DdZ~y%y
z??D*tzS|Pcecup&k;9_DnIRleC9yS6^nnU{cnd^%>EU01@&s;?nmfWgYAN}6$Mxc-
zGfpz?KvJ-(KbeMc3@bmUjc(*OskWIdJYcELL!Zj7Ap-OtwhX4N!QZq1FW;u<cmpD*
zyDGPSkTy9gbX|!=0}kel0z71QM{Yf;c>|7{zjdh3#2J1k>LdoRIMV*q;+{V)q`ml!
zwC_w2VX_6JuLVrZ_asq~a#Br)QWGUn6|dc(yUb4|XTXsr*Z<<G0o1#`s^?=iK3)$?
ze$DnK-%+h!bT5zR#!;NcKYzk|)xQ&2-?04=$x*tu2^Spu3PGTp6w37CIP2^=CgpVU
zUvg9p_G>-Ma^=ZPG82Lw503de0z{Ehy^5mVX**o`8&GYSgF)>$>89I(@TN;XLkZ?d
z%3pgLdtvhQ*ty#jZAJM&sGIA<ymM{;LOMt&E@`n&U+B#@b~}~(o>4&HyaO)mmIwIk
zalya0ePG4tc{2B^foM`M`WZ1><=v`0^ja-43CSu4NI2j>OvJL4JP|!{tyU@vN#N#H
z+m{C^XGw3RZ4fvm@*`0K$fdjjoDy>aP8ocd^UhX90o0Qo4?11PA0bC@d=8>M2F<Q5
zNXoKbu{`AHK%J?I*BE>wJvUYj<T4gUf?y1$6DX@oV4Jb`Qd^370t`qFLY3H`fS6X-
zJ$83hn$K2u-XfL5*=j%4&#NmnQ^!R+e0n#<{z$ESVPLH@;Vr2S+8HTZM*uzruLP0x
zO=_UMw*kW+p1Fyx*6R`$kqdu!3%_*tfSa59w-s=ZC{pYQ%Wp;@VL2Y%mkcv8*5N5<
z@_o-XEHV^Mz7HfgPcyN^7873RLL#h5m9IfWswRZ}`8X$L(Wf8^Z<ZO>{gw%^;9gM-
zH>mAA*WYui?s}*kSa47}(%I}DW*{wJ`W}Q?n35c5;k)eGe5NFM)!B*h%Y152$M=dN
zyczB6xi7DAlgiN_7__vnQ%Uq#Xz~`8k9&a+Xby2}E3iy@l}_d``685Wn$`tUe`2UP
z&HV7V)Worm?vv(&MFfc|Kg0|O44q61M9#|q3rY7Wa1`_aAbB^91c&^GhhkM@RO<Ed
zO&>}1RBG(ev8^V#;RANIt#b-4ttSo!!bC_YENQrRv#J)yT#&tiBgIZ<w%{GEZPH1K
zmJp+3a%mipO*_ZZMzwa)8L34QNY-o<_9M<MM}W1bAe@pQMN0RgDZEX2$W{d<uOm6e
zg!KJQ@57Q;IV~=ZOz~2s@ZV3D+s|TwICw{WJ*CsjsG|XgOI^TMjDAgrFUHZOS@sui
z8)$T=hnR7^vg?nRy|{_Dvq)>#bX*-&6wK&)IG0!2ugQQlGj@iIT{n2CkgzB`ifV%X
z0u2`~)N>e@hE!v+hpEipj<hDD*Z(?F;Z;Zh*4t0{FO@dJC38r5o+jS;gA9F#-Bx{m
z*A1l5?ep7TZsy>#TlD#OMl1-rH0J>`Cu_do=+|FXw~D?xh+S|)sC;c6+vxFLDAMxF
z5`4gSYtktUMYlnG{rDReG49VLk4kI>Pvh)=)3J*{g2#SXH^<9OMukDFc{p2?e|{*A
zI_Zj{M+oHIIPHm@%>4ZmlpQ8dN7aw8zq>jv5~OaQnx86?u?7p+E#wJAa(%!0l~*f0
z@s&M1!CBajJ30(yMq+}!mRs0@N-*S4t`C+J3f>Z8KLWCmnW(7`9dEb|yP%Tv%%MF@
z7#PneHp%_%ne}S1_S{eO?8`?QozzwPX@!Y^^cB-DVIBzpNjdqO?8a)EiW^4i`Pb_E
z!WKDY=b5TZ8GXHk)_SY&NiCxOl&j<exw5TtHhvzDN~1V1QQMuAsO2&@?6Z@UV^3pD
zpc|2*u>&MyJysh75X$tQgv&lWrT*smLOq9YqkIyK&hPJingf@-T|x-?d%&s;?OkZ^
z*Z_e1pRVekbDQ@?XO`+z%l=<0IBtMuW=2FD8ccczmN~%-7^AWfH=nhyXT9!$=ATLL
z!!pAX4}Mp@(>DINMAeV^tI-FWWP13I-4A_e(=Ih$1^98X?f1nQiJbSf{Zc%?*-dtM
zpYrwjcaaYkPAye=2+u#S1#Hm)w0R<0yOXG!0XGDDB<hb7RBv<&{dFnsXT{tJD;6L5
zH%NV3z3|&Y@KNqJ4^DpQOwseZ-(Z>sR=3^`Yp^|BK~+94pOUm?f7}Lgc%ovzkSD^+
zf^NiUL{tu5xRBjv0HC$O+>%Jhv>dCws}uJNO0h>$iiZcCaV=A`r5^tE%fj8@Q8ulh
zBHV02!qK{SZW%wi;63seM;U-PLE7+Q0u%5Rgqz`%!|*4g>cbKKKQLF=FB^W>UB9wp
ziSpGy+Ec!Ql<U(&-*{3)oc((Hhujr+zCxU`@eFZildyp6eE^pqj3g_(7J~{!U<y@k
zMbfc=b40qF8*#4`Rp?7qXxCg-5fUBV{X6324woP?gwWtqQP<Oce@M<5MXG<A-j6(5
z8Y;#wVW2ZGy?GX!Rw>#PKFrB-<eQ*}_jL7)j)_}r{P_uIl@J1+4<MRv3-L$18Ss!x
zL&pO{rKj{;{0X6RYY$SBE(4~kMK>t$4j*_%Q#fywl?^#pHLwd24_;rh2*eD!T6b#5
z+#L8y4)>Sd^S?a0F6Dg9W-zGg8|p_DEPnrxpwjwyI^*3Ii+^*t+74*lN4OlKQ9#HZ
z1OqU3*2Ag`r{3hMsGG(U_ueav&(=0gcqwZH(N9VH`BdsEw_TPV_!M=^kR0O+Vft@6
zZ?adnh;wAo9@!226nHWG%=Xc8`qkgNVOqznKWyxP?ik-_&*!E>i;{T35I-Rauple(
ztMKvp7sQ=Mzd5~(+odR7X86*4Xa%_n9t+0jsy_Bn>BR`vI4pU#wYamnoi^$pH`*Dh
zWeYkfPOg?Y>*yZ;z$OCN=pgg0CyZv~Tqdh`%!9ZLsAkhP);z%eOwFC`?k+&Y2G{K7
z<KE2sT@yQ#=hsUBzP)Qnt7$tYydtD?$7XflFTTG!Jnh%+x{-~q<Xjcsiu*(3`ypiz
z2`9?A<<hYXsF*D3lFOh$7<J+;LP2tBkNHyUb{GIvH6iYeQF+?mBIQyg1zZQ1T^Ah9
zTK|6XlDzMy`j9W?#Ra+$OW1#sq((5Q=J5Uz-!f#ho-t@OL)U{}>rsebP`4#7^>?{|
z{aYOnYm<0Hg5{T({N}0GwENhbu%J;mK0ri9#{?q1XPodDGMvgOTeBJb=)jrqf-#|2
zr$+D38^R$>hp^<icZ_63_(N>fI&b5A-ylpY;m1wY+ocHijj)T-5ACNLIXNw63qh^I
z@)Rj=-^hwpDcjd;5lANOm09QpH)VSnQ*f8L-@VEpPDb9z4HCV;kIy#DraUd~xr{mW
zin-4+J1<^bry_ye^cNvXkYnmLutLSB2M34}GKAsH5cAza`gPEfcGc!(<o0NJiXP0N
zG{9jYP<dD&%|V3i?5FYn73~%>lOVN;8H2839En5zgB9o)bTb6A3W>!pX9T@U$`W@5
zrndYL28KeXMv&-_uvPyUinY1l92x(Z_HPQbdkaXg2ZA{DWW;o`e`#N<xg$}D^;nKa
z;ky%<g)?#~6j-mSoSa#Hnc=qRrE6oCIA3Np()FN{pw0c#cN(7zWzP4Qgy?s<5F_sO
zB(Fr19Ij=8r%(P!e@I7<b0#2*zw@EDGope;d_UPghT#6X4hk43Hd%_NzOYHTE7!U<
zlGB*))DkPg{ZnO$-F7`L$BcIv7{4Y#X-%?Y*{?$u!Cet>VEse=DFp2)KsN*N+gw$o
zvw6l#GFCu3m^0slJuFIsq1w4ztL$Y_y)E2|gu_t?yH>D(lTUF;&nN=dFy{e7dUW_t
zMcm|Ur0StwmA!2qS<pKIydrxI$UiYG4tW7t5iI+$DBf4ghz2*9qwn7!)lr%D63m|3
zgU_=+tk7bS{#rYdheM%kE3Co-!k1CEFM4ppwU9v>g%bB}hGvNKRCMN8b;;G=SY{-g
zx^nC~S{FMZVXBn6VAoVOt(=5EC9-x|0@itia-8OpgIe`0G=+41YxwWhS_9bMXbOV^
zF$=?jCsh<i4PAUZWIDr0>_3rwm#TR)Qy)qC?rClt)%ScV%64$+Bw`R%GA2qzeJ}+E
z`DI@B`1bqrAg3;#ZjB{yKpA1y^Ln)-y+||X8RFsq#O7ybIPQnqUPWnyaZGx~J2MV~
zu8Y41a(vi?ZTn}beys0V9788--5oj`_?KPNk9t4zwD0SVbkyvJUB91$EoJzkyY*!1
zDy(dlKk?w_$rBt7x<*+gAz=Zo={JKHQVNWSj0^Lb!?g4ZxYJ_$z?hLGcv61Z%S$|{
zF_5=LN|52&4z@FDYwT0qble88^x4S1!=uEY<!|6}kTT*xWE9)&FR*)p)2(ow*Vhie
z$g3`W6W6+}HDxe#xQo9q1V^pojA#9j>vXS8d_3bg>uI+!wFrPPCu4iN;oU}gN#39_
zwj|ul*b_XX+2P_cUqw7xWJ#BqFTr{{hWUrA$-C2m&7AsApxC0RtBBf*!;iCoH65Ah
z7s*}#YRa<C#fv5O)sZIRaJ)tHf1upyd3XTP(XDO)=C4K2cp^ZWDu@Q%)PtY29Jg&h
zwPSqxTgFBw<v0@1@1;D_IegwLWNhG=p%A!yq42~Tn*d;DI!Ok{>Nf%RC8z60+wlS9
zb4c_tuE@6#k7T^n5$9Q_V!K4o4eW!Mr2tr;h^7JP_R8?|@nAb+EHYI`Atyk5d8|)S
zlm&)&mD{oC8H_;BDK?)ms|HCXox1dqZK6I}-1D9!haYPBKg8n@@9QG96QI9?{O*hy
z1slzpUwZZCU4WNBDMM63&1DA3E(awgBo3RxqDEozen@`oruQ}p(d{Rc)7h-;pKj{!
z^VA%`B)B$Q%eooqHbeBpywO!Xe%ITIIBm2HcX?P}fEJyuwiP%m+|E_}UjeJ#tzlB5
zDrWz|8TV6|5&Y=xuv8=Q-4>IqmVO!bB<AR3g7G-1)U)Z6f_YpR^58ptW6Z3D3=;Y$
z)QTBrysod<0+?OUfCpRKNPO3l^#@p_zUmia1Q5+>q_xV5u<DqAU|Jk+!Qlj}SvozP
z%9zABRHgfHY>F!7G1zR0<xEJfE|&8K`nx#Dd(ptEaqLNA;jtJJpa8<4_H!yF$D{=F
z2Sek-5$xRrq@4%+{kBq9I9~t{&~d_5l<E5Z4BHml&O~Zy*kj&SEKy*GTQRh?37Q4!
zf0lFo;{@B#22v>^XZJiShTyncopbi3-mqSXuFmtl4g--f{FbL~8CI-O$P@3EuP&>{
z;37I~W@91j+mW>D;sy9Fr9)`oa}2FT{&HP*b2jV>GBIgP+xD$1{jp~is<5kEu`!va
z#h_U&ZAko|RTY|A2AbX_%Bo-1;kg7^y`xrgvu%Ij=Te{lY}#hs-nke3!9YE=nI$-!
zYLytveJYzeY_EM3u-dqsd2g&0mR&8h=x%jBfbG?)YfenTo^jsymd$gu2(MfExl<ox
zOfDGH?T4_!$HVw=uK)QjfHsm}qGVb>bq=48ReYZNF66BpxTEwscJd`NW8qN5tvNN?
zG;4c5GA!>|%*7;L@T~1e!HJi20#y9F%(cw<2i(&3-Uq631YfQXW~+tt(7f@Za=W+%
zu<2r7d%rD8NfMygppDG|nKzY78X6tu7Ca)cfW%5RnxGR7&5?^>ywSJcxy%b+g(`4-
z-9XW$Oi;n+r*=Nx8r5|xcNp1)EdSDnO7T@bo{A~L)Qy54G6mMsxb&r~yQVRFRQ#mx
z1_!X)Ce@B4{~ylYGAxd6Sp!W71Oh=4f_n%g!3hpwfDqi>-5r7jcL>3QySuv#4uRk@
zI1KI%0}RgX?EUO>?zhj${?5IB=9!-9p6OoQtLm+)x88LehPd-s=lfJEKaiAhF7wOV
zFk~ohXjqGRK=g{<iP{LicuK*2DRTA2$aH)Dh$w8x)B&q}UOE}{)kd{Zg-(Y-0L+h{
zNZLGK>&B6e+%yn_?r(>O!)WX;tWoy`toN8SMdPsb0(9nIF%!qruaU%YmfMTve4j&R
zn%aNrS~t7)>@<Mny3g#$6#V2VCUYg(D$>1i1mEh0f%NGhJ#HyQ#qe-m+G{RT2LVAV
z9-A8PS;LyW$K{xMVbIXPX|~n_+#k(I>LD|uzC)DDNRH)AzHI)}vNyv}Db}HM_fRB&
zATRg{R3ukQqlfIq$bR&3ABu^6%zPGQtvNkeYQWw)Q=_ff^akg>{5RzfRudE`hM8CI
zm_KVpdeWi8e{;H34O;MRaJf1=i{n_`4nJn!q4WKwP}5(dE9T0(P@?Qj+B|~6-VR~h
zQ7s5({(Oe6)W8wcVsWiw>Zq?dS}0PEc#9lT&Hx&94-#gpnU}gc$wNX(q(4F&qQ+dr
zR!%S13$vXtIWC31Wmj8v*RoXQ;<M5Aqwf?)hAdhqRVG|KwU`!Iz69C_LY;Gv)puP^
zQ$#ifv<HcTir&6Mi{Zf~&QwB0c0XMoCW&M0>yqQB=zE&1J}P|JwiRA+?I-pA!_iWu
zGN>lBG76c<k%{4xn!q0M+VhykePn0bRL9<zGQ1ZkWK1Bo$0RlOiOy>29V1jE;NWh<
zv<KI-Lz^B4&Ir!%n-HKQgKe(QdcLCvD}LAyzGzkRfgXKgYtN-?LW)DvWDcVzKA0<B
zglcodGujGE9b$d+DN!6Rr`i4Tmi2xM(LEb60-h7S;pjag6Xz%x7-jI1>_Omxnq&@9
za?rpX_9lX4gJ5EuFU@F?`S8<?!%agTCKN9)(^3aCS9QSOa2Q@2$rv259(4TVz%=wB
zvs9tF$4Ie!I93n8zb+Icb*f!RvbpxGN=r0_0?YIiF~VhL6)F6YY3~}@piEY5AtOWZ
zh;-gt2yyAd>3QRJmtkr=XLj>?0%9`1=Di<tCQq4PE{bJ;4Te?YZ!Ycaa&nH}$<zMH
z4WgOu%_*fpima1&YPjDd^zn1T^&n~MEmbln=RDs=0OH+7xEMFnNKeYl&~%Sfa@RH5
ztdnenp-UgL*orR_c6Y##FPZ1Z4>2hj?l`csXCHMw-vlnB!G6^*kqCsiKq%M`csr8e
zZ)Er%sOIsm%T0}T2i(3~i|aH7eehiE3Cb)XItH@nmPZA!vAHTtvcBw!lXrzyYMWx|
ze@%Z3lOW3X($HdQ^0#{<Jpkb)2lbl+=?@9V-rmnJ&^((j%!$kM$0$D*GIoY!C+r&_
zSm4bv&1hGCsXc+ix^>hBa)}vV4x1c+yM)P~p!1@{m-vYZCusV0)tbkOD;9mW%O*e~
zI=j@1LN`YB@T4bk3s7sBR|P-q<er9pSvx;-uTM)E*;|+vYwBGk!xdJqdS3&`m&l6Y
z8VbNhq?vyAbW7@rXQ_S*T1G`ErirCF?Jj)R;r?vUM{4~i`#M2L_Uw!#88Kp>g$o56
z8KW%1v<fnMrp?zA+(XnUX;y?v7qrkibjdXSWuKopNt49{(Mb_}r{paY)kJ8Z@KI&$
z8Tc4;cM4w$d@`w)kdUn*(fD+o(53T}ST5>DSfMzbv7mS0$A~pC8r(94T=5}<oWv5J
ztGcm|wB1)rKcn3_W9B=s!8y#2Z*N0vP^jfrbmOq*1XPy;-h&Az8I3x2%Y`2`c-&yD
zAsb84!d4#*=3e_d9{Y<Wi@~fol3^H8#&o{?8DGw0YoC)`;l0tRqPsX=eKBmdzmUxl
zcIgl^_8JM=OX~6sq#GSz`lL*dSJmrN^(&+2VG}S|4`V~7r+(D)Xq`RZ(JS*ad<6`d
z>gCshfew1-$Tj4;2yt~F^=oU_MY5CkP)`}`?BMwCLb;<kG$Ux;aHyk5!D0W|$07AJ
zQ#Y(P*=3!U#Tva>5hZ+I-|obiV4J>^k^E7rG31EnTP3AY$3)%RHU1AwTXlATlZ20T
zE3oV$c;~uVD;YrtPvNr1?_j|tsl@lbAoIug20nN-0$|jGPkG2Iy13YzCVDT&xanSY
z<m7MkS~rTAA6Yj_=%wb;LJXF`D$^0=&CAp0ep~A`&c`ehTq!JbDYb*-4bMA!$q{??
z<1A<h%xp>6qcZNG!_9}juZ0@4?o8)c{W&QUWmb~c>E96@TchaETOCigGCCR2xA8oG
zDDC>VHDDu5M8R64QK<_6-O!NpHwEO$CUtEobPa)zPKxH(3SYtIw$zT1-!h+F*}+VY
zI!rQKzJs24{B&EmuT*<9vV3r^`Yzxa$;&jp_YxU>b+LpwVhCfZW1o#ZVQ?)BUxah1
z>fy&FKMIn4S^KN64?usfy>|G}+cGC?KaKRUo@3HGB-X-}vQm{^l*+uSxYh-7pQ9VK
zcdsF#VT@7@B@07@$IfhM>T>x^i%~{CLSDfUgLtdaR#$5ytxU~G9*3;j#DU&gQ)DSP
z>zgEN43|Rq$5f-7?Y?3;k1;|vY^&~nRer9sRO{TnJY|4T?uhD<tS<I`;zi-nW5DQ?
zp!?Ndhb^2h+JSiW*&|ReSpZy<tT-rfg6A(1Ol};yRwtmAXU%8P_4Ivtg*y%dew?$!
z2mq;1e{Nj&wh%{WkN|uHy<>N(h<t#Nq{|+wJBZ!gccvTtie07ABc&TF@4)Ehhn-#u
z&3rhc&Py@^ynZxTP~1>Dt1`mjid}{z%UrzW0BDgGf}f-Hi>aBUNA+TRwlvxdZCRrA
z>=#g)Cj+&zitM$ydz4`c2D6NBg^PJ-uJe7-j8EdYYy602r3Ns9PfpO)RH#6rIyKx!
zT}+}R(am^wA-~Z##`ron7qvh-9gOM*O=oGHma$L8NRyzEFWShbMrf^g<~WcUbbZ71
z5i`gwA;75u^jME1r5rSHfs-R?v?##C<w4acWdBl7X9=CqI<>dD#GtjgD}B%1^G$@f
zw1(5#sM}xTdwVpW1hW}|gg~f+s%{rQDcGU1nvh2;^WbcP#VRZVJ(@U0BS;K_r_;+w
zZeUlgaPw8ci7D}F7P$+B5Z8*wkpnFwS0XN>D3+Gsale5~J*&w#lC5LjuUni>$ObPi
zhUbZ72QE^>j-LvhiKpX*KEguiKqhtRk0HbrtE7Z%P17r*karTdb#}7j=46z52hUxj
z6LkU)iO;RUYqSn5V%Fz+*H|HPqu;^s;rT960qhq^k_n?9ZAVf!c@PbrEPX}WWo~9U
za-XuLF_x6pk8<rB-#FWcL?jEn>JAcOF|}N#Bi+9Yst!pFYe=a;!^L)4e-YA+j6uxm
zc^pIno)Ov`_vypjkv+_Kmf~DdN8&_nZDdtrv8OGBoVX~EcBvQ7i)gubuVynCr}r{g
zh>&ixGw1oZKHjekE)x<&#rEDjm-&l>3GfnswE-V38fe88zHP}mwvVBlFvm4KCp)F*
zOj{#fVKJSyf+udjNmpYxLcNBw<7PkOb~b5pG@tRTOyCr$<ISMgT$QOU1U+w`d`8%l
z!r?v|$&O3a)K}=?u;se)(O#zPN379~{k@4L6a1mibl>$%-VR1yJ9UU;`<?MuBbnHj
zYFGD6;HY_3w1@nR=_tQI&+S^AIioWi;@|IiD$Jym%ppTc>Fuj*&OL?Efio;MV&81b
z9u&|OJ(Kc&jxVLe;42<Y2=+Ph(HoNH=)<ZarBJ3<M-;z;_y?tAA}<0e1Xhb2J9B7o
zq3+Uk0x>-P1n+E88WAZ_YpSxw9$U>ydz|z+t-$O>x}KIuX}mdmhIThYg-$=z2)k#!
z?FI6MZoOCO){Q~mf|JR2qC5><d~(jBQ!X$(9nVagWr=(hOotIy3|>nt_FC*sF&_oB
zjhH+>efoGmyhj)jCHtgnRjUBR(~LCK#nutSZp973t!NKNe?QvePj2<j0$EUl1du}@
zz+>%&4j~a-xsMGtbFGfk#13&qtG+^%`Po@8z@m2nBmizFKfAADcDk-3Gmt{EH@};p
z;Mg<QEgy`!x20Yso6Xa4`gZZ+`Pq%81@d$v<Z@1NN8KVXX}a4+RBzJd%`79R+;&D2
znRy44j4Vr0w%tylgvgGpv<Fo(g<RB|_Q}JB??PgXrz2WKbkKsBs_4A2aqqpciI08k
zVMf|t?`27Cx3OPnPNi4j#Y;!RSuI!bJy&$O(J<zWw%z1<Gqe!j?nMww@XsrZGe7>B
z4v@snelZ85=wCAJzCyfhN0Y82NhCcRs{%<hsZ|@Xof8~!Sk3ACf1Sa?^%oISU$J6x
zQ`LymJ0>m#fab4e4IskRiHm1snC3h5FnFn^{o#4f9{s#ymPwjtO2Ae?=v3_)_Rj1O
z&n1qeE7(Jm&>H#KCB^h(l;{=BH1eH+y0wA$?%wIAQE&mlz%ig`>%W_tY&;OX0FZlI
zK6tclnQ~G-?<t^$E-)}(1i^B9-9^`BR-brM-h_Pi4FdInrh_uO34EZ;&zNG|yN=~d
z4j*MESq^ObL9YTLFnVklmb@MP$Q{`L64!IT3FbaGpZIc_s5@ztV{DEuk}rYe$X!5(
zVofStvk#TP&8jQ83((&>QblKY{hBxX$R8GlX^F4n;WV!@`oR%qZ8lIGN-NqZK?q2Q
z>^<#la0K07b$^^DnC?6K)o@IACrTQtdA}ASvGiB%sgygEZb{vs03lN^J$*gA3+@`v
zDZ1q+d4!XJgc=74&1%!TiTR;w6=#;lT}?7eWX8Bo{V_CR*&x?mQxd(Crx@UoW4}av
ziLIV%rWNM}$=9}du{Y>?kqjxk$R=!`Dl#@;79UU2**uKW?MfAHa`GmN8Gl;P8jdKB
z?^ikBAvN}Pz8{v`U8*JuTem-@mQFJtM_~y~pwqP*XRvHKW3R#`#dWl!#*xesC@^~~
zsJ!=F{e7vbZ7?)rL$xBPd2zCVf_E&7&4L#<-<)pdm`n1u0tP*dL$p2sH|yd?R3-#`
zK>s8%9@yAFTVlp>za?hOOt=)qfFi5=x=M8AlkpaB&3aj}N-y!3a3Nm_#zM<M7d;AM
z1mT9uCY-kApe>VmhYy>R-blAG;D#DCrocKJC*>|R0n$Nh1WH}LL^gh(4XrS17SDaM
z)eX@>N?gYW_2!8b3e&bVfI8kle&zd2ww_Kl!fu#y&`1A86IODuSODj2CTTW<?u!2K
z0@9iOl1gZwC<-@4#U6)k1@jiF!l#6F0a@O=2(=QqM!%tqT9nUQ$w!{7XyzPtJXX+3
zqVuCk-jaLwi=WfN?ctYl(}yk9cB-!A6@Icrn_fw^mNtmA)Y!x6gLqDJpsAAFv5NMU
z6D1lYCM!s(LBY+q822gI1*B%VIP&!wDOM?v&h!n=B(UtnPR1CmE9v@7c0RUcNc6c;
z@aq>Y3;Iu@=su)~wYI@y%%t7vbZ~$=8d!_=qT4-ahorbPp!)tPCV}<f7wcuG(dxb0
zHv@NLL1ZWvM<>Q6GI2bt&+W=`LNM7?emT)V03diNChdkSvvc}MC+Wk1a~GN|b;!B_
zQ~l*wezs~P91nf#)N_61#zRc{7z0fwJ@j_`*kZq~hdO8=!KCHGwp16#u_cERdB%W-
zxgt15mlQXtTlJmDo#|{Vn$6;jnNvj<pCmem&AI#bK5JiZ1=HI#-$IdTfohNC<@)Dd
z0ddT@b8i9zP;pRTYvUF0I+<RU{zGkclPk-4X=8(@{?;=dULsu@VJ>uZmYqH$27Zqb
zT`tqutq2Lb+|lx?D=Q+TNG>~O@6q54Agr@&MuZ5F>mxu0Vs@RPHW%O<Qq%eejo$hR
zvq(C1<>0ehW(;Seiv}?VNV4=hVbzmZvU|tvI-Zxsbqu~Pq(dVEeb8BYU}boW*;agF
z)l-7Yy6%JNpD{Ii?dLww+-1{i-7<Jp#KaM7H;mS-hMG)S@eBPepg$x4kiQ*X4uGX1
zY$Wv|``TLCI~F`3?kW)Y%r?S~QgT+$0Kdm$bUCokvEBwD0;t|_L(*SA?}?bPrAoE*
zTQ07WG}6J!X*O(4bGfc$YNdeqny6_9|1|2l>3MUJOwV{@S#G9ki)g<yS~5T2p~=2D
zy1W)7aLRDQX?h|4+~}rir$U9y=43-+mGX*$^-fQj)OevX3M)C)SNEHP=%NM0xLjZ^
z03hvF7G^jGl^IuK46k+KlNp~aTrk)P6Gh(k_G)D1&Ps{oxCK*OGX_^bM<b=WdV1Ti
z#$Dq)8@F+ba4tRW62|em$^A(ushUc(0&ZWaK|IXv`44zMAP{vVI=G&Yb6`Kzc^be}
z)fQ>B1yH5mnCif*16zrs+g-zmAAVIu?sT#A2#f|E02Mt0q^>QIR<ya+tl0P4{mpOl
z%VTz6yf?eemO8Dr7pWV?t<3{<ba%Sp3@)#FMk-AQ*gag8{vxr*34S5^Gx|O5i_gwb
z<DYW%MfXU%+nJLhvWOM)FV)3C@DJ$&N)b|@Izr#nRBEpa{i1i*o^~ViG-rKPiiItN
zYM(rc(400B+LeQV=3pCq5FTTv9|V$2R2O*L`Zfr|>1ZvK&^e2G?NibTRQrTvlPQzn
z$Ez&~mQG42`;ox7ACu~+176X|u%p2CWk14-CPl3THvE@gB1%7|n7ec+#&LUM1W;+j
z0E9u3y0=B!#5}?kwWGHA3y`IlQXG-6!<iuQui{m2#8FB1IOJUo8|^1CikIS^mPKth
zc=|594Z!d(z{02A`~g|S&c@rbiQ0{rUwrXalDjdPTtAjkM?;vP;Ugs8BoQ<!mK<2C
zkf<U!S{GHTH+>JoL>nZcLSg6<3PC%^%5$QK{I>3U9d*lt5(px-u1&F%)_-$P2@5u{
zj1vuId|Ej2jfk4pNL$m=-OQ=&38T(eHC&LpVXJ1-1?V3HETe^OaHRD7mYP>w9kImn
zN4?8f2g?T0X;FvQSI$ddtGCJyn%812&hr`QM2MInh3ISAlp6y>;60s1iMdm?Yh<XY
z0X@J&8QX1Ue7@MYQ+d#-ZG|7K7ump%H$1f@di7;3$cqSX80NQWGJq>{oY-PNnCLTF
z<7eOXtA@JAO={WjK9jf3^zNg^{kGnzA&d%w9n%~lQv$JMc7UwvZ?@LMKS<_y&R+LU
zZi$TB-Ob;SpZ8u%?eFTNcnRz!<PhY@MCl#V^}cC!7hCY~d}9n+e7$y>`&RjAffWc-
z-ec&r{x`!)TOXy#)|$uhPNWI*2Px33n5~<{IX=TEpK`7J7tzh-1tESUClk5ZRricO
zchHhH2o2pNw8Q<WQ;d#s?FT)Rv^{p4*-x}8cT$s#;BIik_VwgVjL@<qJ=(r>xT2Rl
zZq&L$FT$f5w)$%Jmo-|N^fBuSQl7uM$D?Du$b?GE%j3~<iv=s(_253<9}g;=1t_ri
zO2>Hf2{QDx)lm;A>i+T!?11GlIe!{<C7F%Q3eE4=DLLj++To2~O=Pyf07Pda8Jdp~
zvXux7VJhM$+Ghi6o@v{Yqj&WQ`HD#oR!ywUK(XUZxc9mor_*v9(}e^v&fQ-nT6F<=
z%~YY)SK64Qt1$f!DXdRiQM0EC{-tF3_xv7dY=kJo&nL)VQu99FsbmMZ5Ig2SeVoGk
z6q|YX|N1MOP?XO<UR+^H@IVVEFL8Vf$t$ea*l~wR&;z>F9y7MwqNZ=CL;%%G;Q-hc
zh6jY`FA?Q`ILF~vfJ~`#UW|X<nhxb7JuRQ+#!n8~WFJENV;a6$H@1>m%~VmIY1{mt
zPc#}!Haa1{krjgsBnh<0$sEtOc|Dj(PtFqDO_k1XAJy(juJ+zC#Z8sn1d)23tt1#3
z--M?=>)#p86s)m>7|&HZmve;sA!CjKaxE|2d0fv5GNYDrLGKXqQGD)@G5janw7^b~
zL*5m~85J)XxesiFe{-#z5--|cC`G#HdN6<U%WYOFo<=-z9lnwCftoR_&f4RR9>7^M
z_lOpZJR2Si*H!YlluS&{z)nY5fK<l#HyKdAoQ{_Spy!$STY{2~1!!=mR1|)f{~nSD
zY3~r+0Z`Cc5A*Kc*hK39+Ot-A^{T;9PS1}F9c~`7h|)+1(Rq@<F&jmb)Z8g2Ux$Xm
zwxdVdP(l_}yt+Q_p#9Cc%OVmZg6=J2)cp3LUfwYF+d7rD$0ZKcX}=34GBu_os_l5v
zI}0w^2w;e299xl6t{9((ASToqFZR9C_`=q(M_OTqC?Vp<dgytEnyeR~;I^|EM3$dy
z-4?$&sG%zl0vIePzBxer|9$`Ut=aInS;&3X>Q6KNwnbL^3r*Kb3lX3lRALY^Ui4Fe
zb#owM=xCSLLT+;~@jXyQby!{&*qtfG(^6`CjD`+=fk-hWz&V}m>;<#hK87Dyw9p{r
z6Z>#$nyh#d!>b#muN{*bf0r`YJhB2-s2DFi0#;Y0QDfrib<DnE>@r_se8pNQZ<FF^
zes;UPC8jXQbEohZm-jy;e|;Vp5L5+;uQp7J)UpXZ9w3*IMvSUme(q29wmft^!z!L$
zP1YM+LRo5@mq376DhZ&&mX;@Z2QA_Hw0Sa%r$a=p14vfZS}y%;?j_vBt*e1|%{-gf
zUZkEVF><>$*xa{&dfbixRxBJ&{Fr`1P^essI+VmRQs5(fY4j3@Uh`YHosdqQJ`S75
zHi$;Pf!yP=PgEVy#YA_x;oV)xWK$}UjT3g~-VGhm5P!?$)e2KHoen|8p^JPi*K#{Y
z<ZymopST1_*Nt8r@XWl~1SN60(9r8t{?I;zrs{Iruf`N+UIH4U0s!|ZIEn8BC0;9Y
z)U8DhQJM`Q@q=+rPd&6#J(CYhaj4AzQVHPc4EF`=BE=%n-#SCBcURM^vf~(JT#|qy
z=E@c)x5GBmU6(sDLJQEiDxW=Xod?uGb-C44e&L~({GC+vak_x+aPyTheI+2R5?Y0}
zPGox&b~&M`QTz1=APOp0zo5GGaS4cga;2iD{JA`DInVX<7LDl0I&SWtJcSHvfd>h1
z`5sF0d&ykB;nHb-{;g{WRLL@bSA@YtOTvJ#I8)7VKwFIf%gQ@VMD(otAHn<`2v>zb
za-UUi^%do|+4-P?re3{VV~7NVO+}{<hZDV4kG@Quje&)^xqVIp*@c3n%>G6>W|xmn
z3tD~T-9eFie`qW$w|BZ5=wA5p=MLKS@PbU*HBqS{510ge&WZqTcKM>vScR8t1H-!&
z0@SSYdeCjyo*PZ5EafSl#+1Fr!tqJAZU~p^31@FM0!qab+4gP#+b!CqUUx+&j}ls8
zXOQKfT&8ZoJyyST^UE~hlW2?k1`Umi+{x#z9g)A8-<-}bE&=Tf2U4{4ibE8k9L6>R
zL3EpzV4&cf$X)9Z4kUEn3T#rONThOWYgkSuU9$D|CVk|0`RZ|Z7XdP`aD|0F?3EXb
za2y{2MdC4^C&)WJ*VFh&c{XZtc_#H+*rOkl$q>-?@4G%^K;&CFU|Fs}tAgZ$%2bgV
zE+kV9c~TA~C<8~KRkNAD!0U)KhD(8(+jW22OI<Y{q@_Lwe#ij&mFRKHx`psw4kn1J
z<O0;I#xHCw3;D=aGY!Gw70dcSLs2M)|CQSTH)V;&Ahq=5dxU&!AApW4d!mmgI})$W
z*5{o#SjKpk`8$Ot!*~Bpj@}t!GU9U!D;LVk{>g!op@&gNa8s@TrY_yQMo;=XuejV6
z+<wUG7DgbsPAc+Qtv-|<qSRLNJ<8%0IOCnh@m#yb_Y)Dg<$CSe?G=omTnMeVoa_GM
zl?o-m^7Z121!zz`6|qcv<2m6RgwJMw{d#dE`{3hehNwZ=yz2iW?A*Cd`$=-QB05+>
zqg&<VH7Bv;u+boX`MAq+`(txxCau&)bv9|kmNbo46(ZDG#lRrHR%ma_49BA7HePGx
zwz2Rlpf^F*nj7QCM8xxi;hlN{;o==u3qY96_VB-yXL(ZCKA3HtI=2~Gp_4FMpnxdN
zfl$w)<KyQdnb6mK6?n~hxFsfR8x%guJ+buiCnGCD(`IQ}KGi^6vdoU^qu*j<+5L-`
z_adf*us5_b)q3ZDMJ)eQ|Neml(KC&6*6?C)1e8Ib&@)!P*2a>25BTA5($)vkYm>XD
zP4#_itR{yD_L?IblMK0Av-;4@A<poiUu9gLfCwhw+(LQ~sY_mTHliAF?rw#Yw`KDj
z+L*@}X52cIH7L3t%4$XqIwa$WK#O{csh^&dd%mWucxb1X`W9lTf+KXg1ITg43fPSE
z2x_w+kfq3Q9KiXu&sDAyVA%^lPk=Tme4cV;N7gTc*HpPLI32cSKPNW^VUn>Uo8&nV
z#<aeUBu0E$oW3k3k}$HotTMfVrDl4OClf#HQTq3y?EVzw)8v?>A79C<R;Ag+K`RY<
z!yb*a!n9tndt5sRoAto&Bt7xOgkKTy_?Ubd9_g$Rh(2@%aaJ0D<Aha%=w2}@Pl%>w
zp1e+Fh?Dp%y=1SCtSPS7yCad?Q-b188L4{L-I&mNH1j4BRExUTIX3Zkwv_xuq($gd
zQ^p?V2ds4B?sGpk9o3yJOE+b7Fho{ADkndm;yq#RUuZc0NgloZ{U`Dtq3<-c_Fhqm
zX8(T@Vt@RaE!ZW=yraK1Sz2L`u=M}_pF8~IUTG<drb@b70aP10xQss-Hz>#O|F1w%
z77*1()O`urns}3k84EeKe(-rxqqj!Q4L~RT{oiWtz=9J(w`mKQA`zriqaZwJtH;d_
zp!dx@Ft^EzY#=Q046rk3KJ@AlGI(c%<$rtP+5phq3fP!vB|h7npD1**aXkpDFHjqB
zs&O09wn5N#v&XkusF}SPf}cX7bjG46MLg19HfsPHi5|x%ThA6#!!RLR44EeiTmGH~
z`GZ-#>1HB=OE)RMt)o*q*$*M(i4rzex1l=2fJy%E{3S0MUPrkuSWnPlL%%Jlj32)r
z&?l)K{~J8>8>t_YXHYZqW~B710IO1*tu>?<s=&h)3qLi=PH5Cy<y-UWWbwMe$A8b#
zx1=7NV>YABdr&X(-|9>ZO~(jD_8U0B6&{V95mW;v{cr*vD^LSSH}}VLU;?a=aQS@k
zp--LKHD)ke8i1P$keQi2KUlWRcFj4|7NvC`pHp-dhzC@iZ9j1yolrwF_)&Tn6fqw5
zq!;4r$Ws7C$0<;QemJ}Hb(~mFEe!O8KaJf9=FZ(&arVre^|Hx7Gn0o{z?JiZF1Zw%
zSXo=vq#WcHEqjhc=&;mU4svYkzC^*c^S%cd{E()~LO~SBfT-AS-<b`(7s)$2+gVc?
z%Xk*DUD_wHvm9lh*z#3deBd0uwo|;FsuMrP#{*YLQY_qdF6&ZbN!jOKXabc@I!>e^
zc^=r5@Z)Xvi94gGezsXq@k@L7!hYA{K{liTPVIm7OMs8pnLbxv-MN`-45bQfqhFE_
z<VNqo;YAX5>4B7)DrIT!5lL4-_BY;I7V(=9J!{G|Gg)KSn{wWsCtucQ?5>aNaVBDx
zQqiT^_NDFL>y0%52xJ1lz~&A%*w^>@C)7eqq4#Nkowas#{zdM4Y&{THni+H5Dj*xr
zEcld=OP>?!HA15JkW^gw<>%=HSi~f$UY8<u#J35)<O)SO&67@+2J|;`vxLwf$TpaH
zb8N*yrs+c*JkEzX085@l4IkE}st!IRb6t4h&_iQm!>by-=?IQ}8vZa4Y02{iSL(o)
zl74&4+tsVhoBa?Zst|9Jr<Q7yr-wP2GoW@nmV)HgMOKFMa*AR(PzxCa0sCg&gUKn6
z#~@ZE*WQ}a)~L{(6+A#c0Uo0|+w7)dJ?j`K?7o^cUFMxMJ<6o4xoOw44~TRbL#vl7
zeYpi;4B_zSpKXH6`ZlFSBYA0Dkmd-AtVzMG=RCZ_N%^c7dF8=xN)Mcojil4#s2QQ3
z4e;&-g@y+{S!kO}!WF@hpybN_?pR&}?(0U!J6U4a?7v$-gr5~Lyt?~vVAf(gt)7}-
zg~Z>H<2k-e^jG>*OS`v|Z-(PurTgua00gVB>unPCny>F2Ju@T5z9w@T5teG+ad^O>
zn8Ik*_nlu?u&R!3>b~xLDbmPi2bxKeXyW(^jh;TV-7!bw-d^FAUb)eeaN0(q;?anj
zLGttjw9vCRz6gxHu1RW3J+MAn<ejK9P-*(@!}V4TUGHLBW2mK)5{%J013OF55#y5r
zN_j5G@(c!1$k)A#)#*4&7n_2t%M|@lYpzoW6&b_@NelE^``V_?2gY>voX5cm@d^?1
zG(?#JXW1j)`Ndx|c?S${H&oobQQ16ukxirXF8@k71<4tVNz9yNZ?ER}%8^r4OGI~6
zG&-qvmw{e*?Ot7G9!`??et><9jWL4Fw@Lo$%P0=j2*)RZ8hXdSU3>#k=#fQ4cJg#~
zvQDzDzmqJxw^2DfS^Gsyw;4SDchHFlnCILRKAEiFFw}^VL29x{Ig{7zVw5VDb{r6T
z68v3?2EutcU}2r#R7>jGRvRoydO%apf4;>H(`ba0k^g%(Cyh?s^Nl_aQYauP^~rs7
zm*`=@P`&aCj#8nb&&A=ASCZT}sj~nyyv)aUt_tb*Pqu%Sk-V3PqpPGyLBT=c3a@H^
zLXF5$f#tBm$5Z$zQ&W-J3uAY_fCl=(6v5(+73-_;%DgCt(ROg{mlsW?;&N92H_7Lf
z(4)@HpF~b${h%;YhUB9CE9h<eiAT>SOX+-{!$MP9_>igf+AtPIC+}X}QHU3Z{kd{e
zlcXoRn@cF_#-OB@P3h;L2vQF7T`cY5zqRb-TqyXNS|P3uXlMt+?0O`p#R%Z_7}w`r
z#6}Q17UPjz8DS5h*(&2)O)h)c-)ji?BAr5rx)#}t87M+6ZZu)CCG{K)@Aoyr1{gM2
z_MeX0Tk*(Em8cbH72`U{o#;<gYB26zxDydFeSPP6I5v;6Pik?U!G(u8=gt(LNF`z1
zpGYb44d|+j=3Ba=tJ#ayR}&qQcir3fsMnxXs7*5n?a_*+6(0qGyo#@SAz>US3`N?J
z$#wf&qNRN4Vn|;M^9C6EEyVD{C~>9&mPeBnzCH3E!a?22x(SprMz7D_Y!>?Lwf~iv
z_hiK;Z*ld?Fl@`s)4P4CX-Ko&NNee*F)P_uH`Lg{_*7-<S)x-u!&Q0TE7gKLxUn94
z!2+{k)>wsKJBBf*jC>vQw$fixjsMGPKR(MSIU8)Z%p((PwLR4~waiMyU~;tscG~bJ
zCElA4_-}0T=SJ?I1iiD*d;Tno*J&SrB_8DQsoDWRl^AX&Pp(`0oP#h(vYxxwk)+(>
z?xdc$<KBm*a|hAHomvzP>0EPYDHMx;-$4C@aXX&R>q7U&pB(TyF~LV`TXe(r->HP3
z(ISZP^G^+AYeqzbG!ciTl$V)E#`mD)ytugF@XXY%*ZK7GiwRY;Gt?8;wriq<`)}RL
zJsQfT;pboVWk1p=axv+-ms~95y|<{R;Zm*Do!tJ>ORrn(*Eo|8t1I)!5$!=iHh?Ov
zc}V)6rXI;+amBEZ$kE6vM8lSDj91EdQu3!+ljpP&o7wvWkbq}<Siz`!KM-qOmH#HA
zV*lzf&P-}H(v8lb@_B#mL&)sZM_L4vj|d~$8W*85+0?RsxiiZT`%q+e9HsmFleejF
z{0YDF^P5K!`uRG%_?+Zhuot0)gEUVj1f4WG&}FokR#Ki0gyNums}NQCq|kJ>_>4Cv
zD)N-i<XD?g&l~YaWU~8k>!-uiFPnorEPbtqYw+g?DCFLc{`F$Zj&z^Uc4QguYe4zm
zpZ;&}WQCDX_WQRn(;&i+9wTD$|LNr&0fJ<(+6PaJ&@3!Oc1tNbf9-9A|9AkQPtsVd
zCJ%Lmy^&rfA1dp&!j*_FW5A&QZ>RB(&t!!W$H!STM`GSHYpJQKsw2uPKw@0hMa{TK
zhM)L+!k($(Q{rlD445J#q4?8}q_jT5amu&pO{0?3U0j_MXMdcUzp=h<Iv7M&pal+@
zxadTiU|^W4?q_U$SSv<yJ=|sYWLAE<qk|yh-uAi8dM>|%gwR~qy=CpG&ZvdW#_*e=
zrH1L9qlRJCKm8@St@vXEu)@nqpEi`4iZX-b&Bc{g=4+DFrK&{h)_X!KI@LohPijVM
zcbhm|>)G<r4F0>XHZoMXMn&*qg_^fl6|S`fr4crVCG$OlV|O0vMV<~WS~o|Dt}sTt
zosM!m^XW_nwsIx0dPl1)?Q&vhZy=S;(x~>xZG~jENr|$ou6JwW+RGL$kJ!a~voH*@
zzNrxlY&LjDD=Iq1#GL^ir$;llQSOIo`x+yiB2ZIfG=mLEb|I~^`LCO2(vuU>Dm`S_
zY3?7K{n!sAPSRX8C2`KJlzMN{@Qg&32XxrY)-S2diAi$PhAfH?qOogO-b>M&t0*VC
zDy3S?+8?xV7aZ6zr4P>+gqB!BCn}@vjmjY0v6PO}`LG(u!jlU^50_I^rBIZy*Y@cP
zbGgAi^ovEPD-=n0{ON1g`j7wh%>LW(%Hkt9eW-LcDV-dZ4#UB+t?8xQWI2o2ESbit
z9wZ}F(7*1I31;4uSYGb%o2zn6u08<dwrd^douE#zu&X%^KB5DuKH1JDsQR%eUkgiv
zA5B2eZb09Fqt3|Y+(~D8%>jQAuJvL*@B5%s{;rEe(@#xw3Ogq8v$6*}J}0hYh=g9?
zn#AgnTD-Jk!5tA+rw-#%H{*=fwqkJFy<XwH)u(3R$!x<X(HH2&d-FmXDddMN*l{(*
zI#OagiNl<p_acnErw95bmzbei1v-N>${?5Adp4^{=6qlPwJ^P^f8984GeP`GpC|?{
z-u7wQYY{3<558zgVJbCB?VmfnW!ojg%Wm1^K5w~LP?i4>{%!*fEYtwLI7b%b-ob^5
z*vQUbOJBmrMu%ND9_GwXrtYo}PVR?m!Lx6foc7|4{xH$ncTi_~AKY7PtDm;;DzG<K
z>uK32aI)A-t?oFf?cd1hsqC*4R}>)1%l}|o&5YWezWE@PdJ?_(b%zTH2?=LzC2Jt4
zF#Q>HxDhUaZ9Or$y~jBIRe|@cIk9eB85iAro*z4o1pPS_W3JH7(c}a!aX*uP<Fd6)
zi#;{F%W*T%Rfq2OBlRfF%bEkn#p`YrPw6|#q*2~?#%^NTI%A=L1R6e~x_$P{Wm0VF
z`zFWq``ZhdVQcn}nl{&Fs`ULXUQ0$pwfemRE$J1~5t!fXeQ{(S+!?_Lbu_Rfv|X-;
zpJK4N*c9&rNw(LY{FJKo8;V3??aLJAbxOrwh;vM4vHroxWxPY&-*;RKa#m@Z&g0HZ
zrEf3P;`&6Er2oXrOmXIFK<2w$ntX<IDt^o9h{@Sr=TFx!>w@1yLqBeSkf6Hj8>KCi
z4iJ?Cd1Qsc8e5oWelpjdb8)tdjbDw&X1tG89m0E?>YLjtv-0Y%^@+k2f?ek3^4Y$5
z3GdktrpJ4)$*M!pH=Ghtxinmyx2U929qV59*ZCQX5C5vrRbtW8w>(Fc4oEvN7=k=$
z(Mzq)yy{g(^0XJ>;2kfoHF>c#(9kY~p2g+{B^Bw=Hn=kD*u+e~GcZXmJv*zhR1gyv
z{DWN|j`PNzOH|wcF}QVlk2|HtLbE?S729PO@;L+045zMfYZAS#TbZ+kl`za(lAEN%
zm0CV=L2o-OP1K-8QB9n6dDVy454R;f)c*4oZ+|K>-huSWs$<XK1L~&R$j^qsXnP`i
zrF#q?GPN8XU95jp?{6}MISSqc_7C?>9*_+&$GRV|)z}-ffE;tx6OXOe7GG`6ItmWi
z<(JPD%H6G{+>x^BWgT>Z_)2EEVpDclz4&rqL-$pLww_u`Ld^_o2p0t3RqidCR!NDD
zKE^Y*YU7A>!{-JhCbHG&waz9GhoBWA7TB1H7FFL_Jc>(S)s6^1XPr*eu-DnGqZ;^w
zzw?1$S0Eu{A0C!Hg7JA-JZ{X}Fd5CpT{l-Gdf@4}P0_HkiH=Ll{B~Ti3bHKZTa57+
zGN0_`jZ|+k24L&QHreO$AF31=6>G2R6srf7n_QASbQs=<vcKVxlNcEMkqR1xe5k5Q
z-ED4PdeTaVJ+qO($OGM^Tw;(9LtT*$NJZbbwB@wEr0VYnH7!DdT9U2!E@oH}rKu|J
z_>(rR7P1GDrl*z$Yl^p073AOvTeNc)jI*~Y@0>lk;SCJhw~&DE><}&Eq`g7-^^hAc
zSv@7%AFlK<qC-~bc0|piH;A{I<TM{Xu_xGDIBDtCHtVGxOmmdjyB#@ME>(1uVWNT9
z4XYohya%TT_{wB|9?Kp%BwSq9{TO-bmf6w!)R%pavcw)@oS5v59@CrD-=N~DSx7oG
zJVw$c(`a7a(jS$1y&lJ44dxo~_2@JPlOLVCcao_2{1;^TH}h|s0{HRXs8@Hs*tz*a
zUWVcS_Wi$Y+SVaT$GkvFD}8LI`G*PqUo(IS`_Sj#4*#E<CNkb8GpSTJ=o;7~<5666
zfACWOJg|KhtAIeO@4N!hsf<pjtwKODEQ=3C<d0zLA78v<2A*9f>#+7=soaEk5=n7+
zC#O1iK`f23qO5EroR<-}Wj<N2egPAuqec?2l8&t^^km8fK?8&Ra_Yu$5U)%pNs~WV
zdH(k=$SY_c^ZlAXY*rZ>4ml4uoT29^RIfEXy76tEsq+Y$DqSiF0XxwBvd-0?cL`CU
z<zgE;*UWlNIl*v<X)qmzYPO<+#$GJo;G)F3(hI?k+kq1CypkVr@Z%ptv7AjWT1g*<
z?0H#lxj)>O9R|2&xDdg&qZ^4>udgox<``4|gwS$@yxYtCZ{LW3E}f4=^F~r~1^fDT
zm&)tq<rU5+>=}3ZqA+(G<F%)EYxfkp{9Uq1?}LCUSXQ4xzQxF*2kP_Z6A~k!%pg)X
zb+8i^4JW5)D!1nPK{Z`-g`QR~`;e9ln_kD4=?x^U%VUm^vz2|vB7D-K5u3dt+*;b5
z;G_6$Kp_B!fUpFwyhYY;DLMBzlH9{>i>iNU$PweDtIDcrrv-8A+~97_;pS(h`OP|_
zkVt^pY~2&r3>jMVy$g{H)2=Y78~Nt0kdVTx*3#XtOE3f<mKVR=NJIij9`ctf?Ig~w
zYhs6MKRT&$Sn)&_p}WaD08Yyh>g72VDIMk@2C+}s`#SZc#qnS}QN6(>-CQMnG{=pB
ztt}d1V(sUH*^Lh?TbZ1I)F2-E9}xCC)W<h+x8Uk2bJP4DR1{8Ef67^|Ytvy@n40lg
z7N=n*oIrJ(cU;d0scO(6VH%TU^Ui#xqP6GYm@hv)-FQgOUDJYItxj`NN*2B{Z<Daw
zC@r4AE3*>>ag-h+B)pqLGaoA{j4M?wyg6(Yd~yS)wFf8<V>0$Z3{vK%E7|dTiN&ku
zQ=yZ?XFdkT<<o&CW#bJi(8)|aHuScf!os4xg1Ok&H9S`p_Bk&ev@-mWuT5vy?#>4>
z2V#u!$ZH<|;^A-@U5!%V?D%#R=|r775J;0&E*KPXS+>cBVDcss&OJOo`<R7yv)4XC
zds=5<QHiqkS}B!qdUOlM(J!6OWq;1#!R!@1btI<zSv4}RWF|9#CTi~Xc9L+SuC?{j
zD4UuNnwQ5$Yd!#*-ri;3+T=w%dhx$cNFcHRh|17uG!Bc=c@`;(FvG5<#d689LAKxk
zr_ij!?aQj~S)kW<VASTDDcZ%2%*@OptvzC^xn`wkYMIHkh{bZ5R{Ub4w$jl}dX3mL
zPgO_r=?@T7_OZtEUGAINWd>e)t&L7p_^iUBz)9zeuSWf-Tf+4m?nW#d8!@pwllev@
zN+_6edkOtz;_SD-*m+osNH<Ds?5&mVn#{_x`U5y8MXh;eY4UJ*Fm~_!9bMh|Q?Pv-
zta?8nN{f&mIi}QO61AV--!&bMRy0lRbLW_E47`WjMkQYYXn3J9_`cp9+^SP0rSfwc
zQXf*cyHy*Umt|cAV9EsZrthfFP$wP|kB9H4>FD<q$H%R1V5EWYKiQQ`6vRY=ww~my
zB+qgw$4}sv_XNXRM`Rc~itq05MBXAg{mgX#Zh(l4)EDT`TB?&iaCR?}PE+NcL!(r(
ztvD*AQkrE^PMA?rLI<Px>YX=y+2@RRWHG`Tx`@>L?$u+W=F+*u9P|<G+@Bioy~3mT
zA`d@v*A=feuDiF%G!3K6*+Rv$TwIF=bGnQJh$KM~hO~o{N=@!J0<|Rvq=zof9~c)2
z76eqff10*mi3qAKIW`L~J0LBTtu=epa!^1+q9dd!lfS;xs+FuQKwrGBDJgw`j}c3;
zDrj5tC2VTmR7-7`Zv0}(&vIDDDUD5xU9-G79I>cvmyDV%7P88J$#%s2HR2CW>s1~A
zrl6Br@yVmZpr+pRPVPN^U6lltE`l@18!fmCyl$l00()8<Gs0Co&17E7L62yQz$xP6
zeJJ(}lzaUtQo@5v68iCed}+;%-JIkkUws<G-q=ue(oq1pu3vqeBh4P;(XC<8x2jj>
zG~f26mMZ1YfAX?xcTjhbd3d<J4Fw+!=$v<^Gn|n+PT<&?-%KDPC8du^ZO-akB<fud
z=%nEqLLxs7-G8Ad8Sv|zXTh}vhx4kWZ@H1!Yt4@`+@G8bpOud2Kzq0j`4yx%Tzd$&
zX2VqK3-g0FXG5K625F@V+=sRa{((@mNhXw^3|(t8J{0T}J8|I@OlJ23ODOI9mz({!
z$;O%JeV5|d357=V$w=3Eh^gc07F7<ed*)mJ6IhM(Hs&v;(M!`s{sUP-lAAuTu)rG3
zo0~=YN7!B9@6nI)-_XeyQy)&6N=#eIMTBqR^_%4-RSZA1ZXHq{iA8&M%J5~r2Xr&w
z=~8suOaxfvYVu{LuuT$Sz+1ll6wxvTvtGMdv~sIAYP~ro{F7;wKzQ5#?esy+Qf-{3
zV=KvdSF%2H(}bx0?$$$1(a_(LX=`e~sngu0i+jG@M%4tMH5$-v?&G2R{P^d;sR(p(
zgUjbHtOrg>gZ?;=)bIfRyr;tdp8LVct}=Jqk`w1Y;Ffo^2tGy|pSfiI!#=;qTRiKL
zkCxbNArtj~+|lO)WqVA5(WZ#jwTwg8RQI^oj}(gkfN(BL`G>Z}%M9NB|IOum^9Hx4
zt#=*Ls($xQe?~0Mmvw+V-kdGn_iLOTwg`)jiapS(x3l>!KjcdIr}F?{hpe6oYuTAA
zF5)J=cIo;A9|Fn}#b+Vm0xivwqb!IkbZ0hL{ca-mE!6p+c^ef!9@dXLP9>k0EuSr1
zF4EC2RO!Ta3dY7I=BmNrQ`t)l<K0VjdkaM(0`>_1(gN5>)#LSYBw{O66NqoQ&4zid
zrM+so*m45Gar?T!A-g|$5qVl*vYUI=7#($6s!mr**-vB3s8%dEx(MKrf_{`r=p>a0
zQSUdjSd>`rPKd(YK{`ON>D;t?y70zoA-SYG=6S$V<RXRa-QAlx#ox&x=YcswU|P2@
zTg8GzRo`lqasYrr%hp=SWU2H<fz5c>^(YeIRR#~E+3$49qERz{1{31Tse`F*HwLAl
z?<?kPr#w`-CfraE5F@JhDk`t-;-u`suf*C4RYK;P+MFefw$_V!mRd(~7$4FR5Ks+X
zo&5=qzY6EKE;~CcsU@5%tc1e`e#4Dl?wg=)I#`gf?iMB=RgbDZ;y(KQy;Q0qh)%Us
zBn;x`p<zB$COBu+S?@uegT@*?7)~&!rb9ndB4D+*cQ~@S2P9f{4LY0dZ6qPoEVavg
zQYarDR$BW3eA^gFe$*(G1k$;;3xGsusq!^7AA$#Yz0VH2(GaBtm!mbB3i>FQINe$u
z&XJ1bC^R>Z5(7OxstlPcO?)R2OS+LID;4{=j_BmnmC^o4=^b8{M<Ky?2C~il0lq)E
zHZiP!!GQknB-i^>W&Qnqaz`q81x_0%2;d*bPxPOoysG1mc}BOJK(tUd3?QM!z?P;`
z3+%AO7HyvBaVen%mtNxWdtcSMJ8x}fft1pW<T~^GG&TkFIzle#N;cXg9b&EKd6nSj
z_IcEn#x!X~35BR8e51XEUrw#t(GXF^bSn~H!uIAFmHo`+c8&6yi2-tc8oq5S>F#|0
zvo-DXCi$b=8fBaz$FHM`L9TO|T_P!?!?3iYKVK6N$U0Fsdm8tE1#Ctpv=wv>x|%S9
z9B7_(4NT(~R1Dx@6H(YIwo3;mM#Yv^ER)kio%l<46`k_1Y83S5cEMYc_;6U#XBH3L
z@M^*7nIys~dSwzqWfgJZIE6&#c0}@EMxA1lw+!|)yV{o!B<;mK>TZooTfVpNDj_)I
zSnn(!Ys@ynbemX&id(|>l*1-0S%i!~n^p|-<Y(D8IM}Dot1*JvN(;U2k2nCZQu#Y4
zS46E?r_eI~hnUsp2lcYQle6RW26YXrzG7JY<xFf1?e~)y)5jXhZb$KL<~>DPReG9}
zOZiW0IK0*fab8)<-vY_Hl=sYQ`bDOn%W;QU{hXR4ZU$B*6eiEwXON`7n&gkW-zTy6
zrj|n^0{P{h&9omJwIuB|2em0BB>t$ijuq81PE+8pKEeIT2htvs+W;VZCzN+kF>xcs
zC4DdKQoJxx?fN2I;=8%(S;!v%LQ19gUFdHgC?()aFLqpx8)>2L8Tip$piH>-qz!v;
zq!9<sZni`49c7C^HsAn6r5B~nR=78JFwUkik-c_RwkK_(m-LL$Qs{@(1%~;<AYzNN
zfe7rjTzvS$(z%n*{LOKs?ok(GYU(AjkN)q_(XmK~ce-+Gw9j}>g6F*0rg}0nYSR^S
zS;m_Yt^7}x3;`|W9c5N$S$oXBtUMAB5*qq()f-Ra7{k!H_F?U5#8^k@d;50o(_32}
zdf{QMSid5?OD_lAQs?eY109{zTofq&m~g^+$Nd--K+mn=%3$mRc)p+R-Pu7zEE8U&
z>MqLOobUc*{eclpQ6xXku}};C!{Gi`T|tNjFvK~{4&ncK$M!y?gqN^&P{}!^4-n<w
znbthV`2!~S?OOYj{^0}jC3Uy@J3o27GR0EpA`2Qy_`@Ln{-umil$>0XhP3xSskCTl
zFKqE<qTN*|v-%s$4c{YpzNr8lUXgHM;is?PoF~9P#&PiRGj`i_*4`7SaVNy>Xz9??
zNa}S6EW(@r4NCp@<~w4b^3Z9Q6aSK&$>zkIDnG9={0)%BIat-#n#M8I%Qtyzey*UB
z<`5st6V2+irj33$dYm(#YPr#C&+%?ev@X!e+P!K>HHhB_$r5E6mfQCo1w9UZo149;
ztiG&GRHcngP~#$(hLuy6jW%#^PY-&wT_3`FQh&f*Z|<_i31CHGAZTDXW}bcgr?FdJ
zM?iFX3)d?pd-l)jNExN{zx*OQ#au4+zG{t8oAnW4aWXgCIB)vM^yLaPwXEqQhZqr@
znwFWW>luhUktyfMLLt_$D8{wEq;zb$ewqlPyyNHZST*TtAocD`N25{%k+3emx33?<
z`A&0~tId?U6<<Ogd9~%CpobD@f7=S|=vCA+sCES9;D6i%`;phHDCwedir}+^w13WW
z;{zH7pS%5VJb^_UmU9q|&c>xi7Z*8uF%a#~UWm3$nUg4}g%zvVmYJDQJp9+A_HSmF
zN|c;K#dX>}4pgIHkQl*}>hy+3ge-AnG$_I7eiUW@b|t?XUn11IrDLhBFd93lmXu8z
z^TMi-4UAz{|7__ZF_M8vmXM{Ux>dbG&2MgM8k#;d4SBLQ+3W9kx0H}4WlY%VC4DUg
zBReb}EFq3XvrE@zqFVc=poeEX#ZiKr`yPHVVP&vsdR>&-)a)3#_QK3JKHf`ng?O5w
zfJ{ppuC+<38i&vSR9+tuNSKyW0WnrGPxw>EG#?LkuWWACqD{@UO`DYemnWrWI?M*b
zXjk?Po<B@Y+1H3)B=zCvokK}gKwlKNwz%rcmx-I$_eEM<zU^h7Z~gHR5d!G2lo&oc
z4x(FYY*DkZ+H`3{r)q<H2DQsmja@r<7`cuTDCcyr2I|O0X{lAKaqJ+H%NHey$`zBp
z?7p*g^qSN=aT&YSa{z^>FSr~`9nj1(%0;Q7gsq67rndT|uv=-RPQlco_dKZ-=sve7
zgPs}n#--3w4Nywy<E?2&rz=MYDD3j6{CbD1B^567oKpw$+$wkbRL|98SG)xVQE$1-
zM>~b^&j0Dw{-nlwg}*%LKRq(|m1FxLan1tO(oz+^5-I(YJ&=VL3&+WX=GVQE_`f;Q
zL0I#?gO3x9q=pAP<=L92cC=|8&Y+!UQ_s{yg>~gF5U{iS%t#GC_D&>aIoYr{-|se(
z4p=}l!SbFl&kw+aD+poF%x;B`VR6RtpRQ0|yI5rvUYBHt44pSZ6oc}Tb{MySeDL1l
zl^W#1Gm%g!;!D%j&yOJ|&GzBS6S>J24{-5Q1rp!$e|u8@waH(J#+eD#f;u)nJGiAU
zsa6F7c+WmtelOe#qguG<Rk3l&92HTI5?icD-E4B3T^K4V`}<aOp8c2vJ7y);EEO~p
zaRDBW+&iO_jRU+rpGvfp<6-ICt6MfJO|Fj}-?qTeU&COc<wW;s6Gk^;LWC=vijLFY
z*+ihOnV50-jg$??!D)BkkWtdfcj@s%(xC&}P8un-=CJJT+8Pdt(r{zl+XX0PTaX^l
zA3~ap8KixaGay-S{T<VtPmA$FFJ<cSlP^*OBWeFz%062_#*PfkN@gS8`MTEpi-UPv
z^Z&!yo5w@F_x<A~WJxMX$WomMp{&`pDr;rm$uf4r*q5XzYbCou!q~??F$SfQb!=md
zVI*0{KA0FYexEs~b6wZ{y>jly{rj&+Ce8MFzn-t>_L*()?K!nM7Z8U345g@wOKTl}
zt3mV#K3o^>_ymurdKWm1>7N%1#o!{}BiY%R{Zb|r9k(7$1+3|DJ-FhZ#lp&>-)e-$
zf-a5<ZX5I%O=IV6od14<|7!+;guL?Np0gmNeH>O!{Bewv`z&vFgDj%ra;9)uP3X}u
z&y-*D6`1J4!Jc9(stwaasH&RKzGD})4+bwy!;cS78^<i|2aX0gzU~RvLosT>XYaYu
z0fQiR$)x!(&z}=^UdhAiAN&C79mkk1aktr=-1o`<^@BG$z|^VU_L(jFhv7%tMxP(h
zf0*)8fWGaj4{gMvnmB^~J-dGMr<gmrj=mQ#+02U;rY3WVbZie@eoj?#OYd{?(8%{U
z$0KStj$ouO&{os4bjx(Xuh~n@3=~Momu|J{(Qg&n&#k_4TX7;7BzRdt?d?0PrZ(So
zDXmD?c-P{ZNVP1}*A31pe<G&r2cZwpJ^KT|6L((v`fM@$wRg&3B7SY1gvKYA7B?1e
zmWM5L0>u;Fpw}~=W2JzDAln!5(QG>rc51Gn6nE0de?y;<ULq{)b>6#=C;7cM^jg{d
zNqt&s5|}yeQgp7_n|gsegJtAk*X1ac#$`1%!bhKXe8~g}m)w>#$^AFtNtR<HoE5@I
z$gP9C!(g|;F)%$dYYIX_a_+i$vhTcBQk_#**f?I+NFMBxAFP@KTWdooS<-Ykxn&)r
zykZ-`AYcH!jYgB|iZwO63|3O=WC8j<$Zk|L^krplu|1DcS*FBQ_`;*M%4D5GRM{S8
zYHzujRT4F*ctE;FW*zZ4Xr(a0tbXY+UOqHGBc=!*ZZ>701y};g2T^5p2w9&V3D2D5
zbJxKd@Io4pX=Mosb2WwrRTx4#kA6j}WOjvN9bsz<1ky!8^#xo>LiQQ2=8rcbIW1MY
zO;P)=YA3$-B;z4<MmLmX{Zuivc1o`y@BZZth=8c=zBz68;&`R}PqIAt!FHw1e@t57
zrYEW#0}PCsc2R!AfW+Yn=;)2)n(d$<o2H$#%8EVS!CGg}7^=d&d{6j$nA=5Ti9fz>
zjtNogEjin6B>x<!3v&7RfHFHP+qm^{2S3j&-QDbG)^_EFlJjT@Wc?|)z6Mx1Rd##M
zdA7)d-F}4ju+o>Q*KZTh%f-yS8x?>(Ko{+lt23*O1N<y4Ze!3cv!Q{#Fx*>I7&ae`
zcwOt^Uv1U6b$z_AIY3kc@?n*IpYQ)m_J}jY^jR8l-N`~sFBCEQ`fFpY4?J@$!cz4B
zmi}Nk$8#yv>bmkusZSD52HY0rK^VPB<LrC$ea8bk0^74*Qy8k;$On<@K<R<(wdZV@
zY}rBM|5#WPuy~^5?(6dELH5zr9^GpJ$n=yxM!#+6C0?UJXyJrf3nfWWzT&MvqyJZw
zhns#BeIXt<Xwa4HQ=(38QvAGo99Il@M>?W<$E|<n6n|e7<o$+qAoQH9ykdCH0UCsy
zDd(p5bC^?{H2Cd#vdVRkY}yE6hUKKMc>oMO<Ovt=aOl<iq?W8FMU})%0nS6>%yfR5
z-GKk(8N*@c;`EdOUEvYM!s<nXwECT1RjuV&*%zI1^GJ6~J69JIxCz+F#8Sj@N7Ecw
zV6_v|f3DXB`F)o{x;<&)qWXS#1a*v*<7FJ3XIdhzE|P7CtRT-$TM+IC5Wc{*`$v>7
zm)eVN02AEnx*CmNZq?0Htkh9C{Lv`Lh>5*ljyTqsfZF|Lk$7k-u>$8OXozDkREU5e
zmk;&G-q}xx*UbAjcRT?Q$9HXvPryXK7(8TfGhISjQ%kr3l9jg8=FB^IQoqQGUVUr!
zZsC6KzveI-IiTX4&OK1LX-FXXbCAs<op4i)zO!n$4ll-s@3ghCai&WlYxYlk@spj6
z6bW6Y*D2}cTG|W-8G+f5^1d2zC1GQDxJ-MXYPKh6D?Lz#evCd0TZ^%1Zz*ajKJ9K*
z`dY%}o{l&_Mb|uOV52BdH;)qZQ5jxwYe|!5clnYJB`R(90>8pCj}IYpU-Jp}MCCKd
z|D&*;UqJ|zu&lYIqL{tXxa@mswDr=t4JW+&O70d)yDwPY&p?_ZY-9#Oy}8nM;|bs{
z=99)@+etZGd%ka7jE=~ky_>?ZwOvtz2K%|_>UBv)SSD<<u*tFay*v9-?;!8SXv}?H
zp`4Ow<cw~e3gNe3LE5YuV*nIp$WD?OiE0v~{(|FqOx#PhnXwE@<Fp>Y+oF27MP5tq
z=yMXV0jIC*Bq8Cp9m0h{%Qt((wby`kIc%%t^kw!lO82=gX|x))8ih1kT6^%$B4@_x
zZMpZkz#q5HvmP6PH1h?gT&69{AcvcFQ9Gy`Vknklhi?JTX+IE<#Bw<re>c$Nf7zAQ
z`)LEDToU;YpnwKoydE4Z{G=?xE=IX)(>8oFoJYd$pZ<3#p?lJeuL;~7BMsG+eF6+T
zpN3Z3ZKWOed%D2uxOkop;5{lpntyKBwB31wWl^W2Z}L1A&rznY@G%hb`c;8SN3<cp
z1p4#QwDI4+`WP!fUY?6rxPFDX+q}uFqu9AZBQ_@P9^$<T2K)@UTFQ`#Zl&j6+blWd
zhuMf$f6HXCyZZ+q@ro$_n9F%Au)O>>HO!)-U)rejTHQr=wU>neQ*2c5yzjaKKV-k<
zfGNx3aqIG*RKnkb_|vaJ{PAv!JLa1|NaW&Wbv?E?<Jm8=GT-8zHM_b8rpxVowNiz6
zcJY@up3*zxZ-k=zo(cd4$DptQPrx6u$zKs}VOdwSq^ei$f8I*)-c!1qiBUs@j;v*=
zVlw327_O#aG1Wb_S;o|7c;!AYydk9B$o~SIzc8EqLE@FBUnA2<y|w=pe@Ab>hR?9;
zbJH1iz=R+WrWsfDi7D=<OGFqIx$e}}Y;fx-qw~h*68L_bOAN29?z^3K=bsmJ(9O1B
z0ID8hmucZEgpC$-bopPMJ$~$DuB*gVOkj^1Qx;o<8xd1FuFqj0UXt~CK)P<HSPTLr
zY8<+#29)YYITEh-32sN??auwT?c&cT%W$glnY6X!Seb~J-<-65*~{dlcYq*!-<^0h
z_W{>P;E4`8v8qFK1vkH`n-#j9o5;V-FdJ8rSvdujeZjMH?TIvHy5h#XqWwp9_*M_!
z_|PbQ5W!E_b#x*qi0p++abP-G*E$p&EZP{NK%?AIrTX0hRgeX2Q_5C42nP<I3<prn
zQTzc|QTz41eXwwAI?IUZ+86ef3P1-%=fXiQu<f$JC@`Re`W9Mp;iwUx{r))m^l=WW
zfgFn1DHSmee3g4;Qsu@@+jTnUAR6PF-<Owue^?TLx{S*wHH)8<F{u%ldzVA)*Wzj)
z-mv`aN*`lsGdw!ZA`{-~M)Q0;TRrA3jVg}~4{6Gl(?=eSgBdT{eSf^~6J+{xv+F5)
zsIe<iRx{i4CJnSc2%3-*UNzYxf<JIflx79q9_Mph=*m=-8(7twRT#9Cz&B2;Ihi7=
zm&xnK5dAA3wc|~DT<xI(wbnB9z4fh<nOh5Z$?*Hz-e+C@pNTN%9}9sAGiJd`amU6W
zOF5kF8o#|pBX(KoGp|2m_V+h_yq(ih_t;`^U3#wl)QpRL(;mbothf9<{H_-2-pv4$
zM*{UjzZSIzm`&x>3Tz%fAIjg-xbK;t#8}y)1xWE40#<&nx&ujBuN{iJbSvsrbg=SI
zt9ANnA8&}u{ffcYq#E0szkiGF1<_9QR~O&la{|+qYKp!xVQqTLvEXNDx}HOPHzN0#
zW*2>0*X6FiY&zE@=}aeQGovW(tj76epKHv)5IB0us6VtO1L3i;;?F>zMfNkn08dEW
znd@q^Oi^vlmD%WhuGwG5jXLuQKr6hab|mV_KR)o@7Jb@@nng;t))KepNQQ|EDxPCM
zxIsHV_qhHvE&ajtf8VwoG_{RSojP~#CvDy03WIJuZ*^u`)YMd)2fXi4QDJ#fJ}xUh
zS)<wqu-T4Yu`cE|g`SBS7rG#TYXH9in6*%m<#6@!deDB8&r6ZcU<8uDLw<87;+HuI
z>~{avaThKwLSscGS6H1*4bRO~;}B#?yYJt+U;CvgHagIa+|8m#njza}m>X(qloNo3
zB8So6sVHJ?(*mwA{%j98;Ie_sPc<8Hja#D{Fdt6Qf$M<H%}s#dCoo`J6COL7you4u
zECvzHgqLP(wt17ie?DKnf;&}<UG@G6C2mkG$5|W2aQh9-?Nfr4UGki~DZYOXgS7wC
zFnAXI=P=kD_`$jJJvDw|q^Qvi{L)?DczNh0i6e`pP#6~H|Kt^Kk18vC(b(x;Zdel>
zdb9vkf)UfVFI{(YTHj(@f`q!G2Z>2xN##3hwbVyo9j{5%*>VtX^Z9Q=Ubr-c(N}K@
zr*Z5hkqx(Dmockf*R+PNDt0z3^Yg-Q!t~7NEl_sR;6Vk>Ht<plXaP890b;Lf1yiNX
zFluWVY#SO17>KDb_fQr0<@o3p(|mRiOdl`>hK89N)4ZHCBRWTIo$EcF4>M+{?#}+l
z;W~r6@xfpZ^m@hyMl0E4xu6uEHF?Az%AKj=f!pctB^!Z7UB9cSY|#7`ww~45Qlvy=
z&O-dpg*39rN~nu}{n^Qup0!9iI+@uIsyr?BnfS~)BO12un#mxe@!^5(Q)hmX!q<aF
z9+|dP%``2kgbB(HGM^>!BnAh|VW>k#*g||79e0tbp7Kq<Pdh|hKUK*Qg>+S2;RSTg
zZjHyfH8~yOG9Y9WjlfMiG5GhCyo^>+o0u?<)v$b<QrIYbPUg-#m?unDkKOl4<Y@AF
zncdfgL8LDUF``^~zz}m9^f4v`>KoeMP{r||M%-&r9?%oZX?n1iQLh=?;~UIO@N<nY
z-Rk{zw8Wk+flH^4B(Kj_JM~O0UGRqmNR6zQyR9P~ik1*QQWf#_{M0EinKax8>!(;c
z=EW-?26Xs%o!e@Ro$*mB3xg#IjcMPUXP#T>UL>uJZH}&X8}5AHs^D2e!#bs|t@%k`
zm=59azzRx?8#G`E^{#F@=u)2fvBO*Jx$c%3Lwz4LBr(#)p9$sMrJJ4{it;7=1;&T#
zWC!*6A6=h+A#?yv`J>slyyAIme|VVH)S2@g^ux^T8-Deh8~%A5UBPPDrFA^i&(vaE
z)NK3H0kDh3c!TlMX&$3k?-XpMJHShO^CpgC<ai&<Y~E3RQ^8&8?@U}Fy=Oa3=5Fhs
z32`TXdiqo)6YXb3+-K`O33)8;SH-{(iO&|{#bYZg;36^U4MJ6ON6o&f5buVcjU2F?
z=d2VM!DTkxjb|z0H`L|IGDmCoq?Tpka|&9Th)I6w>?`gLS<s%#AIz+Ylc4}V@Oijw
z?x}lyqBVSZFlU0=QQS>i+~l(6K%$v6r#sS?uBj~ROlXUJX$6qIV4iBs@lSwi&64H)
zeSMy=lN|wYp*W@BcnB|e??8lOU4jwli@^(n66Px9o~RzA`7mvI)7DN`KR$12U!9Dh
zhg@8J52Kab^9s|mV-`t(Mroz-lwW)-3~+~0uwz^>UDM+68N8S4R1Y|8{1#i5D)nJ=
zqInY<TUOQ3eqFoHJXC)^^$oQ>ZGCIfPYtVyZXy+r!#=OfI+K;{3)_8DC|2pCty%47
zeX=;>+dT*~S3(W*e1O)wu_?o@=#DM8J>ekDL@)2Zmbe$xesEIYxA=V5pfyZaAuPau
zmUxqQ6kFMQY9s{My(hAcM?fZai%!pBPZgaxUIMt7u^<q(HY}$&j@Pc_#iDdW^JRVN
z=g$UfN3Y<Xdbn%nf^rxf&8wN27FFvLO*q^}W^Hw@=v$9=D)R=#H8s`g>wpd^n_mM#
zg?AkWtw0mwj%L~uj)z`h**E(2_T~y=bsRX@BJz$od0uba<|SRV#A#NWC7)|5_yJYS
zW*aa{pY5SI(M{7fcxHLHerGSvYeNw}_;8fO;Os%tZz|633eK5<qmts=d)`?_I`vq!
z;O6m0ouk3P1~#6d$oT@TUFq2tx)0rU5=nE)qwwy>AGbUM8%2XgI4QCpk88eawWFXg
z40<6j?-_2ee_FBRlJAo?H3$^I#ZEvdqc?rDSZW18Q=#5kTpZp{OVLG-+UZ>rGrTIg
ze3A^VoV(f6Tbv)gQ|G-?sf0ULse>#ju@y~;3VZo&!~bod?yxz=@<-Fwu3h8-@~s=W
zmGq0gr3bS+AUaTRcX;T-8zn#6+m!|lMx8Cgb9S%_`74AbyUJ@B<)3Pjp@5RuTQj*R
zw}p+Rt@aIHmdFunVDP57bXIVu?$S<i11KbuF9G$ksT8;|JThnTO=jSV{zO#}a2NRQ
zY;x<*G>!z|%>v>`btU?@;stii>P7no7i-fnX&?#(L%+RGnBt=9K_%9arwBwQN-9+C
z;HBoNoQ_v?041+?I8nSC{WV~J7ybWO_A7E(-8prP{3=M;N9m>ty>G&@K|@&T1D!jz
z(2g2$ap^84o!pw%UAvV=fcp{tNxW3^Aqt{82ya*-AhIzuoS$wH*-VPygN8C%C2V(+
z$38dVI5)D!mZ41~=W9F4*nkifw*%W%fx3`TDn3!D7Oroj+XRh1n!(aGEK~$XF>X+h
z_g-G96#xB-{zf-~!{KIo;h_TJm_n%((1P<fpI@0#ev^fbdcLWbS9N46;G-gWl&CF9
z9vyT`PAnfFx&!_(M6bK`L});~`hC`{4%xY2fssd}dySu!yVu^IogH6(&!$_|x)jzK
zoRggwYiE?>rrgXgchaJPm`hdhsneJJ3Cs)KTa$H#jUHc~TRjE07XhWizrBWah18#o
zclgFQjlUQeJg0bOe80`>FQEM90PRIZT(EIFvahQ97qpL%qM4o?!#A?7{{H>>8^Yc_
z_Kn-`!X&iyG|Mf3LilujK3aF*9Uk}raGle@X`MNp5&$%J-l<2X@ldb2eTn-A1nh9L
zRkf|R{P;*iape&jr|=nY?F;}Bpr6brFJSdV7oU0C`uH)2hmV}mnU3E3-`}>ipK0{I
zS#+*VmkPZkdtR%-5w;E;Sx!p`4^IL>YNT^|iJ5A*yX?L>k?Y5=ZbP%4c{3?q%MJMD
zN|V7v-ulavMrizK^%MQ1$K{x%)qfBUwSejim}Us07>)_aepu#~vsZK!&uMEEICIeQ
z=P%7*ZmNOz&7(ieZz#!2+%p#Q7wXum@*th%lOw~6EKS3awdp}}Fz`T_YG%uQk?6!Z
z{u=jdnQW5L;fi__6KG^EqFQC2PvoU1px%V&SJ~d>`sJ99POr3SAgn);$lAd9v4#1k
zJfS<ZG1M9W_OQ5d2%lD1+kMFruXr2o>zwytrRPDwotHBzL&nzB>bpSv(64@PCP8Zm
zU|Ruk9fnYaz=UK)=e&&SXO#Oiq%n&FIx82hwgr}jXL+<-HG;>dzq5=UFf4uWw4Uz{
z`sbv^p-2go4qzTnEqYyiY1HK-JuU~za8cdgYQTW=;|=B5p9!tZ42!b$=S6h7-~tBG
zx6$Bd4N)2i)_Gt0@9Ub7M&4ft3LVv)4dMs1iry=Rff#CV;nB318kEOU-q{u5uP1Yz
ztvmmZnDtr&U_#puv&IGPk69a~tN@&DfIM!U{^-ZTT_T<_9yn1EHEhg#?g;|+C5*Gm
zBN|hwZiB&qcc1)0286ZnX^G0XGR>Fh^KD|UgJ9e4z}B8YTz1+$n(wH1_J`HfBTpc(
zn3M4~!c!L$*Fsufio)!(&wizwnY#8jcva?z#&RQ6rE+rEuXOFcW!PyG<UUV#;g-$Q
z;^pmaD&9<afu&9ct#bVBHJZz?JTNGi<IIrUAk$I#2rL31RqNKLWrhuKw9unIgt)=3
z1sM$ZNPn)2A90-~HJ|7idMf91dToM16OiMp+sTA<ffSLhe8J%EXsR522%#~y))8}d
zNmuofx$Q}(Wi#GktRs{zWV@YH_v*t#ulIJFZcl5Q+_@pBMz_U-D7HKA9<U|agR9gC
zHACO$;!y56)8EBB4XkNayx9$!zajwW1_?MImHi9CiU;K908G3AvgB27sLkGi(cyx-
zY~mps-YPzZO?audn=PJBFu?k?v5;G@*>N@R#(a8)6P*`M@4FUeA?E$**_}E}*lW|&
zRdr90xn8)iV$R_&5<`-XM}EQcPV6OM_2Bw~F3(HWJ8}>D1q}&CC%m<-y9i2W!vXZy
zydpp9k^7x=%=v!$1!<#|ftlHgVPc_oA7dOP?k(H=-+*?@_k;g$&*ozn&mANyAjB`8
z-q_N{uJ%TOk=E%CV;oMz&OLuNA<pUd%u_S5003b&o}S+3+#vJKBJZ7!vBeu|cf1N)
zYSCVDPgiR@Xgfyp$=TE=mi4xJ)x|eE@0obLd{}Z*F%vCqcx!9h1Un=DoK4!z6$lkb
zUzoI-tz+YIL;Pi3#M9Hw7d}~52BlM=n)Ydq=?AK?Usnu1(+kw-%yIE(A6;Si{#k?}
z16}gN%?{RK!0|9}^rR1E%fqz2cz6+TFmUkT)O^KtlFbbojxEVzs@a;{>YRI6CTDia
zb8U!<=QieYl8p<?yq38TiJ`q&=Dai%jVOv3Y`5+v5%!2R`o)-$F}t&cqvg%T8)UiA
zQd~u^RIuK^;-A6hFB*Xpd}?_RNClMs3*y$6-&%S%iw7_+;0DR?_$Uuw8*v|3E`(_s
zSabAYzbONG(%JOzEmQycmJ8<Wb3k-L7o9tv6ZQKca!c4o4O&|>v>EJP!ZC_PNxDb$
zMBh;49KXie0HQ-&XDmPrh}qnT{sndKb?b(Mpzmr?KdMnX3v1u)S2{qmKZ<~0r|x_C
zX?%9?`kS~*$?^h=!kLw=x^JDuCKrbS>&<!xVQj?3ji>cNDEPQjNiLvK$z85(C%WtC
z+^bxj4AU)mpd;-7xL7{^iFCPy1t6NkMz68OrYZo^U6^2WF4dMTDj%z{#p+K8luPs=
zav%@<03)jIoCEZ8?F#F_q6)X`lk4OVg<!S7<tr%4j|M#=Znopg)J%WHwOXrm@1d_$
zfdgdgwGp{8bA9N!sto2$_e#CrQ$-PZTwd3eh^CXj%$5s)VDLY2@5<9d{}c6I{qR)9
zkhgxEG!3Ig{)B2vm+9U8wtFmj2vJ*Xn_ewOE^BlCCHe{j%2NwYx9~+`--ot}nRTD_
z>OgoDIF<Ya^lFlQx47cUm8%W41I;b8lbd1#64fK<>2!Fwz9oGH?g^gBR{UK+U`6|x
zGc;raxgKIYtMZa<!0iIw8o%Aa+`m{e>DC2AAo0}xGj+wr=s>m0%@q}4u2DXESg$30
zAJk7dr87Ba1C6&Of;ZNOdsU47!r?!(-=&jOH~C6I6HQ%<4eW7=3X=h2$_pB)#-)me
zLq9*jAi;yu>Pq4>vNNXPd$OqIcfY6j)Yq6tP$<B;G9HpLPiD4R<J;3tI7zd6Dh9aO
zR^0wVo?xDt9g7Lh1l$X^o<?($Y_%wBg?|Pdz?LYV`3&)e{<RPcn8DJi)Tz4K2dS^;
z=s0~<e+RpPAAF!A3xNos>H*LT3R2^JKH@mr9}hD}GoKqxTSck1bS=BK9U)K46%-(~
zaB9-mR?<OJfrXcS6{iH~V@z6&B7+JWF3r6SSviD&g{oR6bjfD>BcAZL;{~=<iJ@V3
zcyg^^Xf_RRZiP`sl%c(<;VT*(qd1Yv!uY|q^qG2qVbgu~c4g(+leh@?-z#RhzAS&a
zNPVeIT|Z0#Nc5G_$D^l0tjsYI-uF%IqXPUfO*gX}b(RP<U!S}*zPfw~`mndRn6Rxr
z5k_j-8pk*D1KNm+f?#%~gyfNxSc`AIZHh{lC&;bM{v|g;pSUBs>zi<VmKl5D?x&W4
z`JzI^L$_C!eoU=xR=)k#2|2vEl3ofa`2Z->UZN~8Su|Ms_J-ml#o}evzJQ+XAP|B6
zh}yn6KW}=PCHm%XIqbh-_C+BYQq~Z-WS|}S?eg!(^1nq6ud)LX<5m1kzrWJ{{+;T%
zCJX^lmQ~(9m3b#eDrKuKBA}kXA02;*VBg~CU2YqDkLR@ZCO>;dz1SyM7^QYJ^U8kw
zB#nILK3<8c^l_#4^ANpsLr{Q@{6Na!f|T~bgWDr%I>#>B(!Bsc+PmxTr9~$&ejkA7
z1`9iz(RQU8^=7`ky#j93p&6EFKkL+%ZBI)oMo7p<BK4|$d<<1evZQFvnvEsrh#7pb
zp~!XI(fq(u3KOnIM=(H)l~48clBE^Y`zc9wKMgNpKxnlcT2-*reKki)_%B;4Klww;
z;j@1kTU9(+r-K1ozSBae3a6pOk2jR^vGja^5pV%uG;}P5?bt=l2mrFuzEAPyjXH;|
zDQYW(Zg_>yQCAq+F)^eRR1t%rAk7uKfY@NMDohU@YYguXoHbZ)_ArFTcm#!~WMu2#
zFYOM?85_6-m>h^l_xe4#2mll8>){&+j#Z&Sl;J~mT#5wumvEuAms{yq#uOdvwF_r!
zX>#8e5bOa^A|R?Lsy%sDV^5pn<<I`{5$w`FuQ<1s`PfKueU1~is=!}19z(&uBdmax
zm1k?sLiP&!W+tiND#CL-r=(fP;*J#OHGotao+IE0@y?|iK;#Jez<IIKqj8~Ue$-hs
z_Il(Y*&_E)P>bG-M_=Itxsnx-nu<J26?+w_*K&*Kw=#0e{9{Kms)ABOtZ`Eg(?4AL
zaB9wXpkLb0gpDuXXq+YiA2H&~a33Q_1$OKEkLjItj1IolV>=--qv;`HMr{n$An)b`
z!hH%3x;mi|1~*a3#5{N@Qd47_<qq(fN~Aat4&}MDVDJOr4zT-sc^+pz7H10ZA2wr?
z&9Ms-qN}Ni43z;<9_9EqE?J*QVMuv;?J^_%?k$@i{;{?8L(>^lQdiTBu*vYQ&5hOo
z_mE{#n$K4!Sbqa`x5XLo*2@y8_!48;2Leatf6()1SN1M9{kw2u^|)sakdrB*Uod(x
z)Yq$VNMQoA6+jBFQwOX%`6+dYp>y*~T<safVu`vr^W;(KFK!$gNT=mUbA-&=r2!U>
zktOA{ie8ki0cKX%c{RAEiLf}7wwKYYNwOI2Mszoymi4H*ZPh<&>Im(3BMs5B1*%=6
z5hn`SCz|ZGzOn7IlnKrf+hANCatzGU5Nwm12?*4Y*&x*K8Su;CqJpFIV`%~6862&A
z<tNue;4Sni?rOO}$o{OkySzJESH-pPsGF>J)<ajLA;2vAh;Jt}Ro4G{JW1yQe(KQo
zreyyL-kM_(=T22}K7yqmTYA+jF6#r%BQ`YvvaK;&=`F~{SGhX~$BiSF?)54t?f7|T
zzmk#88Scbbe&m>`0nyWX?s4(;a)9b%cZBKZq<~KX7Ok3w;U!(aLi8d=^oyz7CO+FS
zQ~@el2Pmrc(CJ!Ez(n%<C0`Ks7}DXoySm)_&JXw!fw)Tl>e}E5cc%BFt|vXr0$Jvk
zFmt`u;mp#Rx$%T9`AznGTrt2_vk^{}9%U;PyKr7>y6p+X=G-sSY!H?{(66LxF)M4T
zcM|e}&-a!^9AlO>={@+8dhS&QTKP+XtAy84ZhoF0+J?@DT+ByiM9!j=_{~Kyd-2XL
zHrJ6D#=6alda{L=M{RMXmj2GGOB{`SODMd2y~>ra7lmo+y>fbcdSNX$NhIfam0_B_
z4Y2)yc!RT8CZS<Q`88MeF@~$BpY*zpKr|A(iA-YQtb|4OxYi17tNN@Bpo^vCJ?%&W
zV%09zE>VL$&#lC>W=C&j<n~gp|6JdS-TX710;Dg_ssK(NsOCIiV1UdHVMQ2JdOY+@
zX8XSdKVqTZ&iC4?qa5<1HHVxX5s`53GitvS+dS*D6fmh*aRV`7F`E>It0*k2URL(8
z-jM#Vp{6ruyadxAapNh<=tfdYiPJ|p@@N#6BgI3%ZQ;J|=6tpLVVR9cETGo#@A&l_
zQOHqS_$gX}$ueb~D_K4{sK?cC;1*j+AZBg9A}B8oCb^sjT)QEVY~40z{VFT278&*%
z__KF~)8dgpOD+FjrrhsV#r3}&xo@*}0Nq@a>x8d`wR5^@3=`%2Avn$EgXFvsh!MaX
zWIc8<f{xo1+iOtCz@4$8TCdpa7@57$*hKm1k?9X%JGw-1Z1dWO(-pkOL#vHg6LE6>
zIq!WmLH$4SogP2|22Q@L3q}6O!%h*r_lC~Ttow=FMCkR%MBT{1Jk=0*4<f!?{X$t+
z>Br#Tf6p(*1JQ?qHK^HbRI%llfWA)3eL7v<e+~Noh8DZ`zWpd*4-2?{g!>;JMZ2cL
z0Zo_)%{lc?MjYT*Tm;i<yB5Oo9Y{}Utz8IVRQf;Rf){^k!r(Ysk;SDAjR?jovb&E)
z;{NH`bUs%%3yLD7OI;|WrChGowKl&wGCh+Wg!n%8F#*&?9r~{PNBjB>AecHo>L=Jk
z2LGW1HR*k*w{DA>8mU^mnl@uO%RNCgAgNhw;msSQ?<!naV%*3+xX-ve5CPnk$=3L?
zWWB@(I^rpqk@tdtzz+GS>|gL8lnb&(pvCux$U&kd7GFik)sr6q<x%$ijT;#Ey@_@o
zurZ0~i&x-GG~fF-ImZu|Sb0LrXf_(2+f2lZpEM`_Y+m<3k*h`ef`;DPRY2hth&!_x
zuHA6RLdNE}TnkJ|Md^NNPU8R~5HRL1P(RuOA^v_Vj*qfMMpoAB1R>N<x67$nk8Z-K
z*5;dTR$71v&a-~)Ns5P3ZWKDN7U(bv4bcJtqR==_c)!<rF#II&Ik)HV*!gk(V(T!p
zKC#B8Tvjy*{C=DE`(eQT;*L-KzSxX5sND>8FL^y6g+@5I$2T`4@oDv%0)Lbxm0#p>
zrF#wtt`(3Ou#;CVV_kXpn5~buHv~*$<oND7n>AB%f&51WIT$|ljpQhz{Kp+4|3ax`
zI5r>fLWu$HrHQdeFG_AkEsTbvh7S5HdQ{2Ef~R%I2MS)83KX4641@ln31LTF2yyUK
zX6~gl#xIz`OriV+z~K2GJs03797<P%b?s)#ND0z^WpVJEc+RF(^N1Iujn#xuO13@C
zqwE;>zT3ju^$l?JTY$1%>ysKz5v``S%*MeNErGM=HQR6q3`eU?TRG*4hU9b`D)=m^
z4)29f8phW!l$p@t(Mow!z*93drjI|E&Xv99kRJT*`>I~u>Z`Dz@8p7o!RiE>38$u5
zypok^bv$-IUhNbRFnG4oYgYOe!V|0}T`L_MYOgxW|1f3y#`#KObj}I8OIPU5x0vT&
zcqd`(yY21bwPymdklgib$mT!o`Q+*7!rm7d_tDI}|H$qLSN^oQBaGEl00NAD)xy)2
zi<0bQN?}5LmU{VGq_vWvUYpLnVZ6aHL+SQ2t~(~AZuN2<<^1+9lKnNtb^U(QkZ+!e
zB!5wgn+=I3_s=u9dj-&pTGD6(xxU~>>nxO|0ms5l*sCzB%%YAixY!qisZgLWil)xf
z`Y|}RuxmG?7zon>##gV!g<4M-SdaUs2cLGq4DM<P;&wM<w#nhh$a-5ZK%D2H&WFr4
znn*3MSPtc8kTQ^fU%K5A_$=ydS9>75uDQ(lp)lM@eP(0CgQvyn$nG&QTiw%hr$*|E
zEdQ*nD@+V4b(9rd*i?h-!wY4RQ`M4BbgquW4EcJbIZM=FcZYmtGDtEX6%*+ve!EXz
z#L;c7Dg12;t1(B2iV17@r6`-1UAHl=hq3iGpJW*k%>xh;x-`glK^^5!*0RBF9SZtP
zZ&5Gh4mh)ewie`E0E8qhJ`DgQk(aln^{ebN*#;l<_&&~-!|vu`?MrqRCAo2OX(bnN
zX2ZoHW3^c{-&j$)VxR6i=hEDx=`lbfg&UgaXi?t@qm`N&>7R9oMDR=M8pSB+a&V-L
zEGXlEYs7h&f<(Lh@Gm*RzhIz_r8pI6wEDYrKJT+pQ5DpE)u!4X&glO#bOkq7@d(kZ
zKc!Zf*Bv}Qx;hfo8m}W;vQjhW2%9L+#B1HVb1#=eMh)!HblZv_it4E!x6Urx2&a4|
z_4T@%Gq~(^rSWin+)Qe4)H@lnf6Y^_Hq(gd{GVnuN4X{-2kguLfffVSxf0(}Yp0gH
znR;JZm%jIjx}m;^eNKae*reNt4V106yfi(=8}LidDwx$*11@0Q8cz3r#eLB`87yzz
zlIC(eYRG<<(cXTdy+HiTx3Q|ddeFR4RtYlgBa~GG2)qDpQu;gtILAtSrg%o(w}2Z8
zMCmiguEz}PUa-Nt6co;I2e1k(Lt}(0OHHqgEnU7u)Q=D(w)OIMs;Jne1A6;CROUh-
zVN~9$x7(+u(Q;}+a@=pACfsL7R6Mw>r8AY)Xz|8G0K5*BNqqVYcpiX>KFe7G)>8DA
zN}YxYSy0dC*ALo`zTQ;n;MTnw5E;n$qpR@2#)8~tR<KuR45WH*Ixe)C@2|EUIKO1*
z-(3LzHH16s|A$SRoOHfY42O{fS*ssZ61T6>XqL4#)>+c(@!I0=FMUR|P*RG|r#xHz
zm5tIyo2AhDS!Q9*?|>1IHO~O#k>|Ez?TFwZb&eAHG+0WV7(tc8J_OK;g-_O^cxsk_
zzBKgbr=A`?x_Vc42Lm00+W5?xz%4Z$6Oyiz2IE+Hu8eth>-RHsmeN5{9CO%Wr6r%`
zUYPlG+VWz6bAkRhWgoua42a`;v;%IVG*EXebI_RJX}#-`oip+=nD%aFhZ4g`7VtJi
z4zv`X;Zdj`FO{5U8Yu6B2c@r)t$f@Qf3DC8Gqv<vz=80p0%7r|o1i7sJD=#L!h3nt
zW{fdp^L9wVLg8rd@?IpW=BEYw$LssxA!)j;<4S=2TY@;>I05lduW;Vx-n3)&k(I*l
z>0VZwH5$VKiP?+il*`_;n=d5F{|Z0{W&djYKvam$eQeXHhRhC3k4uV66Vgg9kX4oc
z7$HB_B2x*^%w_uN&jW2B&Ex&$#VdJJR=CzS#wYa-_6|zuTXLrrOl!_&u^n4V_4MHd
z;a$WgmI5vP7<xC%){q{0g-&ftt1ok>D$pEDcBKn$6ZfaD>((-N{q{Hl6v`7Kv>;dO
z@}=GPx*Kg*S#O9KMrXkT>R#&)TA)P!1S9Ll*qPCTto!_iKfhcN(kHLpzx@gDW-@gx
zU(k50Uh!l1(rM;>)<hbY^ut>4@?K{3g@1U+pQ`K0dY}u$Hg-VZe|aFoF&oWpI-4rz
zj#D(Y$)5dX|L-}?KUs72^izMj26z8|WVC*{2EAM&LPfYcdsH_4+#=NPp1k@d>?V#q
zpHI4WG0UPHpZo_IvJXSgBzP|b@C9<_$ZCi_{L2@(Idb5m&sV^^Sr;3-*(CmE1yE1&
zib<OW1`RLux8VPg$nwVRdfYo1Izt+9o1LJOZ<g1h+2;yY?-e*W(hlr8fF)1?03aiP
z%>WHWh_d-WRtC0zknffxAboFqIrBD+{#W0}yZ?dARI^I~CDe)7d=f+g`Z|7}vC;+n
zldk{bZLFdh54!+yq;|fo`YS%QpEqjk31PA-&^#*W;|X)h5E(6^D}Xc`8g7^OPf?+^
z`(TvLc70J1Y2V!L7-JjVAirO{_7~5y2UMj!)-aq7J+oJEd|>Xvu^?8<BP<W-kLSlQ
z+)oV^7aKO_!WbG@Tq`SU+`@pxW07Sh>c<`C1q~JNtjPK@<-dHnp6%lmbvI4@<pJ(>
z73HJ`(wGlQg(U6&l{gkooi$Qg4lp?B8Nu!9KMy@zanEg@NmgJ70$@+ySq<sU>2bc~
zdo@j`(g~|u>>#Jkw((f`lc0TylMbG>0k!d}hQ@n%T3cVcrV$<ThnRUzw;7aLC~=JC
zAVU2okmh=I{PfQFb@8xjxaiGP1IV?B_m7Yp6AnDX!q-%EDwh}Jg`KCe?J0JPupI|4
zNe6q!QhSr<s*4j=)~Jae@+Kf9EF{DPZf$0bu`+4fyyCv88*lO6^bkU>zsG%{gitzF
zYcptd0V;4`B&na&MuEtJ(Y;eUwWbduH6%8ILc@#?uSl^n1<<P^Y9e`#aL*fA&j-H}
zO^xvaS~3<D&D|Ww8!e;9q||;-cmRe5iI?u@{3awu@|nBfgjj^4sI-!~UrN*a>Q@Ij
zDyO*pZc#+-LT=q|RjrXwmboe0r6DG&JcPu3!0ypoal^Z{g|Awb`kxufPks^9?5UO1
zuz{q`B6BSJDg=f5Wh&yXKZ*3E+^Uno??R=5`cG}TT9V;qO^Q4<zNLghOQa^t*6s`S
z?1aO9u6ejov`?L$_29XQ1Gd@YCgP5C@C=bFEy!6Zah?Hl$&7F7VM%;uquPni(o1d%
zHpA~&FQZ+r*iHHV{vgYJ&N32Acz4)Wj&wD#Xab>+{Lq-FEv1utQfiTI8sKtfEpkJA
z-yh{uJ(qc#_tc3+HV@ypL^Kle9bNBnA?aXhu@gsk&B2!t7`|vW+^od7UDAK>fn)k}
z>Wj|iH@@&d{1=slq07VC4e1Z77q*H+DViB|9;qHzP%Y+}!h{a%oR#rWBjdWF3RmrV
zeuju9Iyr*$ntDcNGnz5i^-bb{w)Cx;>G+blSZg__dx?%73up;P$bMdG`k2S8qv_cB
zpiB)DY<HtN%dn{(onM4^!Ij=~XKkcMc-XlMj<P+hBf$^g&W~p{&W>Wsl*j@fnSf7Z
zM4o85+Uq!m3<%Yd2V&hP237T!v%9`ivb%8lMub<enXbZRpr<XRdXNLZHmQvnW;B$L
zj<`1A%tA1Xd8GevW@#`X!UkgfP&EE=Xu|il@yw$BZ}(Z`2kV9}aus;YaKGTfROI@F
z@7-?;x0=dwR37G#{Qam^7tE!<-a}ct5<XuhNR;f;yq6%tz`dc*>MbL4c2&1haMrIL
zmtR;QCUtJtO<=1@4gZvz72OoES5|$YRK8RT!OHsi+v=-JB#Xu-NP(lhX!WP6)9)=4
znOHYfzYSD`BW!BIcHCXGP*nGxlc^lWe>Bd1LrV?1kAm>qDJPTaK#>ttO}yQX>kU3S
zDm@@zy~$2bCS=qtxt(%8GHAPV{@v040#|=sI#=Bzb|2oPzB>R7y{f4GZISiU&0C#}
zGrOFK@=8to;|!?vgbk#e2oD>)0JgUd>^d&3V=Kb(#~Q{z?1N%>`&XPKf$4{^jr0|w
z)w_D}4~@H@ihdtNI7r`{b>JXE8l;5+ndX97_w;qLr)_sD+El!5O-<AZDE-qI{KiUu
zm@4AM_`hgA^cBGW&`Mc6t?-XixHV7^DCC;`5dBr;45vwpgYZ8_u+?92J}<xbWo3kE
zWZU7b)G>wy1K648|4X;JHvNOa0ZO(AP@L`X_C!Py>!OaXv2Je%4pQ`a`9`!}ZMr)X
z;OPXYfYC-ZG+FU=@{&q#A+lriy)YKh+yjM-gRDFIt%XG9)6I~?T==+zk2rZN-K~B_
zug43#6+qRz?N|@Qn0x9v_|;_351ND89a~)M?Hy;GrW5|yPQVP~ruem$9&#Z+CwKx1
z10Ia}2nd3HnV#6d)sdfz{sUXH=8J2?%ZkmC6LOdKBdMV0)uYDe=c+tkok**3N<Lcf
zqq%>X+eX_U-wghoRCcN}I1wY{^u4trMugjMfa><mW+bhEhYGE47_ASd3YP~hk6M7s
z1icCwBm&lhFAQB;QR!~+XuQcSbaAuYA6g7F6P?p~+Soc)q-I@#P|GgJuRYR(Ytn;E
z*`XWmbAC=q=#zfORjT{>G^NqK<%`;oA#f$yrLezOg_dKBF&<4O`bJBA)k}9pIk*dZ
zg7tkTrr9>{VTABgc;#JCXq`<`^+dyGhRH?$PDXs5R#c;(PDx5XCoE1s#Lbz4)O)f+
zb&Xjtis_f~$(rrnk>whGNjZw8k_zmL+{a^r$TM<0$beYtF7^z%;`CC&=0uCtBp!iO
z#3MaNAZ7B@5i_77Ezdkk4@1(b7oD<}pAT1qlmlJVVv5Sz9YBvcu_}8fh$^H)U80kf
zv#Xj_{E$`3$Ih_N#Ryam(D^+pzH2>e(8@>{ty4aAWR<TwZo4bQIGnUT>mxU3<)hzn
zZTdlVx_Z4EHZ{-6Q`_KmhtNX*C0%xZ&yvGbV(e}9xy5?_0NXM*^*?6ezD;Cp!O5-$
z-k}Ps0*mzPSVwZKUASRN$GP=4rRGET2CwcBu|cD&39T!~f6hlpH29TLSB*2aoY>J7
zUNT>&u}(O5IZQxKxNgdds=Vccc84_T<alvL%Oe=|5#^Q#S0>Vk*bhU)z<gYl!P`->
z7B5jAi|gxGlM^n!Rgx%&!DieI>Klf;(!u8Vj3!NY?bfBOtxZG4>ZhF<m=SCEJYJVg
z_R+1p3_~#jo5voG{&2fEuA)MxB;$Z}R3ZDqq|{~*QuV_o7<X8@b}E^dljqEjW_?(K
zb;Y+_L9ize^qNXW!-~oD;g+G@vq*H?5Vkc>d@I-`wr980q4$I1mX0}6|3;AYw=WJT
zaK|u(elhFB?@_}=MY^pm^6I?nSg5j(SRbd7&#-XKaB)k+>}jTFk1Yj5fW+QcrXv)O
zx2M#w=A3z2CB3<xWACkYR;1XZv8umdk;tcAPa7zzMxQ>Ya6R@2aBr)6kB{q1qd%`(
zyW?{5#B_2|`flpB>z#ZO$7~5tu0Nr{2<6N`jof<-ZjXEQzo?C%8H(L1J?c9ylOJ`+
z!Ha`yN`zd?UqekRNRqQ2Lp>{c#)py|Nb`KDL2#rBIC-b8#JzebVQ=#xK{)f<NODi9
z^Xk`U8GAQ9xlY$8Ny=hf)quYaAW|wPa=0p7i*Y(OFbjkCtRq-CxvO}$Ig(~i_dpC3
zW>k>&y0OLQd~)NS55lzO@TPBi#C@R~eT)RRVvy8&m`Ri22gh;7MK|UvT?N{XZg05X
zseE}i(e1yv)lRYA&D+a-fBlel%Oi*Lo4a6U7ny)J%R9a)jq(*G1he6ddWU_?tuaxL
zb)Ihzch5Miw1hu0)*uEz+_2opMU`fC=8?4{h`dMQS7HtvtNZ|8?K_6PB(UVMf%7+C
z45x#|nHN^T;xG$*hh?1|@|G9+)CEu$!kNszo=`jeN4i%IHdqOn*hX^unW^yR6UEQ3
z5Pr}dsrPuzoHwGa%0l-{{G~%!Ahy^<1;$uaP^%<sxn=5e-1e<UXV>(L!!pjF`@5yX
z+gDuajCrFr@5is--}$1=>m1v2G;|GWy;;=pkZ63$9SiL&IOjXtE<Ns>0ZZ?OM+%)^
ziR5;*Jh0><{dsz^Wpf~_J-DI!eN(7`7;gcaqy_XWGGo3$Am#nz_dS}H>z@pFc9s(w
zyR;{qp+!1tfsFWrN!u>cTW*dymRoNkqZ8lT1r4jL$emv`<~VZ3xfwG&)v>}wD3k-&
zq3N+pM6#Qsz&@u*Ov+=*`A{W-<?Fy7x@yw;DZ(bC`+HlrTyup_vmHcme5+(WXdSWM
zKdET%v5u25Ghg&Uy3IRf6E+v?xEev`*toO2<t=sYmZ45hj!j68mZ>tgOL?0Oi^2jO
zcht?@tmPI~%ol6g7JX_8RYomS)5AoVvX~EMGPuBGQC*A)!E!GK#e^RFUE8dd_&Qdk
zNkuu6AI%#TWaOq%2q%^52xAi!^T!=Cx_~57QARP!d~xVCu!cw~CC|7oEi|-(xjF9C
z6!_ju8^yqWWFH5$oY+!2W&35;JSC&}qH&sF9z?Vzlbg`VcXwtx;IQ^%#G6dHdQgpv
zS#@X&4xZQ1L<~WxLXcLe@^N689th@RDKS!OJgqa69cq>1S!Eh&d-g*$s<+hg>=&JI
zfXtQ{4|pVQD9+(rh$<@-NagQQ-55`F_&wgcN}`i+^55&vg&_U8?|e`!O(iGHHIVG-
znNB)KM2u$?t-ZXz&?jgVtWzH^o|pz2#sa`~eseLL>HKm-x6YI?(&7!P(@5@P;lzrH
zbk$0ibSByGb#lldZ@Cd0>yz}og{@?Go&E&8@FI2Xm4uU_)TNv6s38r!PiA*E<3Oah
zz9f~4o`q3$*Jg951E1Z4))BXM7JH9oJF-Ycv}W#6YRFb2iwL-9^G&Ydi?deQw^4Cc
zi%&+=9m&Ci!xufiF=6dmHgUus%1drWHaYUbh$D);i($aLn+Y~C?Z0pX{WU~*FwuVA
zb3C&_@JEZMd+9PPJ{7_v{njy%>r5?WM4`-8b-k{ul@~nG?^ClW_t^Q+v!w2tb;d-C
zZ&J>#>GRiMm-TH%*Q5OlGp3$4*nAsNMp1p(e(qCwdFy(sswk-2S}`+tJ#fY4)Qd@o
z*Rg8~g;|xKJ$ZA?UcP(F9O3_jK>=PfE+i{%`Re#2h+H{KSrh6uDVkw(`Kf~Xg`+7R
zO6bluq02UhSOQ~vu2yqvF^E71>IEtNj1eDCRALG#<u-@<gvI2%9HF_Fx?j5$e%&DL
zDxt3I@=1SQv};L{vso6|Is@1Y0?E}BoO<?){%vtNuQc22SE(e#;>!ClrQ8$yjPI)v
z>S0&%k|tiMT!Xq@&%Ma}A6Po3#RjsZw8BQ^;9D^m%`OtCKYMS44(jcG%CE9FTMK`{
z98V<rYlnZh#ru+oNo`S_up4P<W!~fnAo*KNP)vTGpgRauQa^tD3!yoUpKHDoAN^t9
z+&t|E49A%y?wlX}$HxFDyEXl|ppCzy#r!{&^Z^@01Re9`3yu+KPA8e@2=K)tPi>`c
z|NfHs(>-;ukgkfe^QVdronM$~(UF@GifFOJ-~YLD=p;wPP_1tZsPj!4@NaGc1$V(o
zgULxg>wdL>wS;-`j^^Mnr5KNSRpz#GOnymc_=`#he$!obX;GE@Ab~1%_bzH^0dg3*
z<j1GDxP+?LlEaapj_(zNmBTNbmo^8uu$fW&#GH&*^W`;mH50Ptv|IOhYrGC=cO@*X
z9WCUmip4){hXZkdl}3<lq=G!62fnBr;1+@iS7M)7+6r*>=bK3N<W2egzJ4HL@VH>x
zvhT(S{0?)sX{~1T1Mi7l(vizTq7TZ=KLs1HP9xi0Ib<H$7=M0qMC=W9jy|I1g4c(n
z2{GVWTbZPS2QPG9zE-T(tfX_{dL*amxgmy`+mvnZamv~ypt#lvKNGreMxeAezT{%P
z@6&8<qzPE`%N)j?EK7Y`!9ykT)P%HdD!BLPBK@X5XH>gHr?~4qNdJ1-9iN#;mhdc!
zZj@W&C(TT%5dgEp8%nRZ1QV!5UvBl3rPNTJ>w~(uiU5bK?{->*mCzGIBx`*G_=C8V
z^eJV~Fsz|6YE*46i4bnB88tdwUIh2_c-J2bpF`#J++T|6UpCpJ5IC2SxYDU{a@2T7
z&{SeM_|}wYqr*>MTDDJ$3QnSu2C*46Veq`RHtp86=Z>nw`T&KL-`--G`^E9nmW6Pd
zPu<kp{l2cxMATa=F3ZjnvRFoJED<T~PYyOmre6t9Us+hOqK5P`j=Op+$QM~?%5i*6
z5hp(wBE-MYl)~Or$@n}!xvaC<8Xnd^cMvkZbyPAgneF-5)`uhT?6fx}p36)5-uEXP
zXL{~RWEPPa(3?RmMiN)6u^aG!E>%lRb>WQXs95IY1~Hev<i3Pv_}-&pe0H_w*$>xv
z0w<;$bAwDVp!&O;!H*V!ASm~pY;SNZj|<OixP*lsFFqF53Pe{s!0TuMs^%d7(%Vta
z1jYtsUU#KnovrOz`|V{PVB5Bcnis%BN&u_ff&j+)hhG)eRaSsvMlr)YI*3U1eE*eU
zd-02eWTO83^An9z13Nn|_}dPdgt{zK_;h(k>ChMYF&e{Ha9*pZEHIt|&Rkv^x(84P
zC8l-NW}9Pm6-zBTUS4C>OADj<CCsZ1PL11PBicwSn4TAI$=|(QOkQ*-L~oJw9lh4Y
zdFEvPvd)xDk%lx$rFi#SYKB@qJSa_(*QEAyn4Wu8dU##8!bo?sbE&_}ofX!x_lpe@
z*v6d45dH6mf4hp`(rE3Ck`LM8@fSdivG{)O&D!iJ121?kD==QS)$IO%I7lJ2u^y$u
zR4PKdO}icy#Z@sV$05UXWsi4cp1622LhMA61>)=Kz0?AksVaVn%b>la=a-IuuZ}Qc
zCrr_u@Y`t}?}!GY9M;TMZ+eEVbuq?=SC*1dpBRPRX8PrYaG<3L@?11o$#o=A3yAZ5
zc-|rA?*w4zW!WF(TN3)6xW^3i>r5jDAhUG?7Erl64w2v*9l*Tv?o<P&8;n?A1iNhl
zD;8(i3RD8O6cy_lDBtuSz&!Yvxo4!EUyOEed01Zy(!ZrZDA@h!{2=4!g}o*7)GE*+
zx1|Nc_4=w0Yf^`r`;a-P{=QO)d;bB)WkVjmp)sLdN8+TopU9bjv{aH_!Gqeb$%lfF
zngtdRwt!Tr^s4)gaq!G<Z#^6KVy#bxp@bKL?~8v<jvpdoF1$a2cp0oZ3^W*92#&*5
zx_(cjcr7!yJ?Mfv%E7{BsCjI7tPKRx?^?1QxvMTh|2MnX>WF(99aZGG?d1P%q8aya
zk0ZcgObQ(8(8PK~+bq2Zp(xYWE{*AMq#MW0&lzNG>KIv>+^J-a`IPo;{5aPTVkvTd
zCx=w%932>y(sQ!<f@=L6(PYu$7@^a)hgke}KFAQYVUN1tuJ1Y)YW6xtazBo-1zQB8
z5?_(P-XE9|svYz@Zl?qp4u;d2&d8_q7!jLz(p)|KT^d>QZ$0Hh&ZG$Q_vLeHNTYT)
z`!V*9JuZKk;hBDCA&9N7;?9<&Zj|!Nnz~Ut&m}3CH5fcy-VG?s)FsL$ZTt1v{|LQo
zSI(Mi>0bCgivqXGAO=XLa;L%*T^!z7*o54HIR-69UywM|>)0nA_+2zK)L&!Vp>U;E
zf2i=M@}ZT-%ujJ~Dw$YNs>*aOb2B#A68}(|E<AL{C0=I2mDeO>o&346SjW;m^ev2)
zarB$Q|AO2hNRmgS-<E14C2}`0<TYc=@bg3g0J=}<6kThDsc+ADrP|t^C)SV524M&K
zl`#aYtE4ZgKEqRL$}MQA+?}v+gX8JXuzttQyG8S()0DNUj_TmIo?4;KbZp`!sa=Te
z_h52}1n<)tR9`jhf}SO$G(L1WEp%qMRs%thk``j2+h!iQbT1gV;j!F}8c@<z<U=|q
zzYIfOdk=#Pd$YBa_r9f>ooMRE8g4Hipz)+W?((2TeTn`xw00=|Av9&zemDqQEaT~F
ztcT1nmPTbODe^haKfhcDv+hti-%G?u9(N3Bb|?mP?`MFUzE}#8UR5#n%04?0sJbrJ
zYACi2mMbm1fFmJVvZ_8T2e!n|4`K=6z%~=oj_;NtW|~eK?G`9~q5K!3mn-tffq)JX
z{C2w10j1=2(lwJh?fi7rnv5`u#vXsJeMWTdbEfyXkaS2d;}V^?35eNe;<)&^q9cbQ
z@<cCJnsdnVOKI})d~)&BY~-CeKa&pLYVece?WIOv{+``6Mw~DC|2TW^s3y~`Z+N6A
zpdg5#fD{`DNS9vi(vjYKk=`V9kRrV)0@6XGL+HJWfb>oXC7_hhgOmWlz<0%&^FHT&
z&M;?v?^^sZYa}FhlKa|w|JqKr7=WK%wNaX{VRhE?q@;W24bSNKgRd&Rf3hs`xqCQi
zftyT>R`t1nY8Uoy3Ch8EQIRni2lH-M&7{;@@0a94YJLay*1660@-Kfa+}0Z^09*>L
z!o&K@*nhq%X}Fx-fO>ee^1eKOSrWUnvb&x3%kEur{D`xS=PcqEDt-3gi}_rW_wL>L
z(r3a4JC*L{d&bws1|Ce$C09Rl#DD&c;kbA%jRk3GQGs{dC=53ng6Ff&HP=NRF{rD*
z?pEUGo$KDat%cD!Fy|yXLg`Ew99u7#<#x*DX(0$N*h)gk){~;WHhH(7C0a;%gkhm@
zsqc4oiyGT*U#pdy(l+-PVyD$`kw4iUP<2k>zIN$GG7|2aCgJw?K(L=Pmmy;u-!fNf
zzxYw3EB_#NQbE8!<A#dD#5X%%tA|lR%mfHx>cyD>NHS>ro<0jq-)v7i=t|}`$xIT=
z`+gvnP=qMr+~nMA*i>b|oZR|`^xh&zzBw&e(EOUMLqf3c{Lw~X#$9o~UP4tH^{a$_
zU#LrAW&f@3Z=SpDNd~d%YxIVn*fMdolth!>F#m|sM4-xB7Cbt?o*Brigago7T5jtM
z-5w(IbG}bbNySR{aaUub`U~5Mze_c$QSk7hQ)8pb4wWh6@eOejJPVn5Rp`POvI)3z
z51nDJXWB{BDp&0*e5Vu4jt0{6((yH+OdmYdNz{4+;~6J4$SNZuFBPR1M{_9Sfj075
z{!i}f|Im0#Wia8j5n4W>`={T*DI|sX@CY^rBG{Y$*|f~0!~{ahz_mu=Jv79|r}}Zr
zb%y-C(d&1q=}={=enit^q0l<OburHGo>H#IlGF_Wle5Me+-PBZD<&y^>p(8?$|!gY
zNc}RjcdB=CQb0se|9$!T)BDjHN<cK3`Xbo&++A*qVK(`XWkaZ5JNAu{g(_kh1<6mR
z*w@wScbKuzEk>+I^EB!;=1}i~IST;^6Zc-jQ<=d&HmP0{d67nL^dyPwnNLJ`1;^v_
z4BsOsAj|$-px4Xn6D(qK!rQW+t9^8oLRt?aSOJ@}v*kTwXSd*RVKxfdA{@X?e_?d&
zvlR^%W%hGzzw^o6Z1cS56+%tk&UCQm2I8GfiPxImSFG5+ZD6-5$3?vE$fijMY)Pv}
z!=kHK5f2p75svvAJag&I&w$f|?asXy6^y9tmF+BpS<v0?{VZ}pj1uuSogD21u~AVh
z7n_^|{G24`Y{4`l{d+-ref`@l9#~<M&xL)PoGGeLE(@Y6<52y(;=2o1BDKoZc7t?R
zt9>gBV+-ff-)CAzLlRni{C$u4V$=ttUcUY4z%g5I5WQ~$^%U)Bu--oz^mUv|Z)YYK
zS}#ir!)$5~h(4P*YY6funS^f#B_FTU)Rb^J)6K@+)`DZc&Pbx{*YGl9jII&kbbY*d
zk6U!|Iuy|pi@^=<UAT=_8`tKV51KRTgZ8C|WKZ>$5rT~lsTV8ZQZu~^@#}5uwARP6
zf-9Zj)~l&HQ+fK?*P9R}anmsL&yiX)+R3U=>k1d&Flw8r_430t^@!mx3#en;`)+p1
zrmpI?D8PNf=HFeMU7wRIQSUA#M?t8`w^_EoY3%a16ZFPQcvqdAEGU~LWmGizh{Iot
z%Fn~~vp9bASoPeVHG}0AO=Ze+?Tv?f>#*^#j=QXvq<_V?v`cRCnQO={rY3EYITf^g
zTj&W+V-D{%wgW6Y@k5Ty@`wF{pGs$hQ03k;MDhDrUm?RZiH?i+^dRhODi-DSns%>x
zin#U@Po|1`M%^&PLnpd?&%9ZnB{5}22tR1d1{^K4=cH>pjJO%shpD54@}!x+q1%6O
z)Yr-DB}BsNUdA;x)b9_6SLXpIJXF3#-Q_{2=_B|Ept3znOz>PUj7HU(9cKYt7+~(1
z88J+8(PS_=%D^(X&sBmQ%1QfjiHbfhF1q{Bt18MI)^V`LNY5SXtu^o-<m>kr)~!oO
zR9E`<r{|><rGI>H6vj@s3YDD>MINg(>8du*rBjmmN1kynNlD=0#wPKMiuZk3XS&LY
zHW5$Xovf41U3k`tnzKdAiZ^pa9$>xSOyb&CfmC{9W$kCpw>Pgd7FvL<a+C~f1xJc|
z5Y`&NjRrXTUX0k_9W}<VSNHqNAJ61ytwZV}M0_{B)@hUe=<#pUu!6b+UTJ&wD=%Ib
z@rTI!nR1{%hOnt8&sW<_pX29Cd<}p>&OCG1ZBi2C$7jV>8bfl<;#1{a1kg=`!bMoL
z^&&DDc^nG>1N58;FXrA^*JVUpn=y-h9su#9E~+>$)($O&5@1-V@$eh?UoPCt8q0iG
zgwFYl^c;wOZNHZ0Vv$=^c`6-Ii{urbDbBY$-Cl8S=M*>><2(C0w7gF>@W6|=cX}{O
zJZUZJvPJzqXlY+368|cmcKOyYJJ3Y8nD_>!!(NrAKVT90ltAJB_M#fc*jgPAr^;3}
zdSACwXD*)KWw*sw-Fw%obH5>W)@7nmTg%1AG9~#-xqFpU!D)^CEJP7?g86B4Q2^GI
zJ88i+#e3MZY=!yiTA(f<bKK{=efG7I1STE7H#r&6dbn(m5yuoOZsc@dK|k$Z$Q_Gh
zMaA5$zmU7rR^$-{%fFDj-hV^xWReqAhmc?4HlMy-sayEb?1F|H!I$G)X?s8H$z6LQ
zJYF`;;0KNp!!qw9eNS|K1+1Es*E1}43)dE^g|E@J*fdCdEK`>hAL`)$35y2CQWP-O
z1kx_eJ~q&i*bRU*JDEUDmTU(_{&p+{;hW9Gi`Q-gP+4ehAZeFX9gpYbyK+Ba-wr$W
zBIO~&RB?TTA&6(7+Z41^=pyYmUk2@4ES|tUB;Ch~t{vA|xXAIF398Twdjn%?R$3K}
zh=!_S*H_?8wd<>JSaHa)qmh{Hr?*AM4tV|&>(@Ff*fT8h4;lz^K5Kx>!-Fj7%gr;6
z)xUtqf%iDzalYcU7ugwUdH?er^#RrK=wT+w85riDCdWSj1l1Z)J`n$)OLzeX?1?RO
z&HwQ~f8;;^s}=PpOAaO2_*Je%6N2Ybph5Qazr>I-<92eMkN}cgC6mk#kLWi^u5gZ)
zIwN$`Vz>DNUgc+Eyj-qQkVc_%kn3Uayu4hoWfX6(^mxdqrFcUV5a9cEyAk#VVW$SV
z=!TkGJks#D`-FQ8iG*kLIrB3_F-ER-Gs0^$<bN{SHyTz^o*^IeUR2pppmbcOdd2mV
zGeYqj*m6uYq0P-{Ez&M*PjFD23*b}%(IF0l4E7A6s8{Wql30OsNTZQgfxqYJ>M(;m
z6{F77XrL>>Ku9a0q7MqHsE9nRU%fKU3oEiOJ6C2PurUmVGK_lqgwrw7cccIb-A6mF
zY*XNFLYb$5meIst#`CWi+oLw`05^l-mJ)`d=_FVkhtDXF@Qt6g(`c8wwBX9v&gO-^
z)zpLn+gTZegw|i5*?)YZcrV`o-qOb^0$%clbfU@{{uNbCvzu^KEIHmYh_nGn!+?4~
zPd3QkE}zEsOSA8PkEkk#KjzZ+eRuKRlfbvH1{RvG{?Z|{F0|;%dn8vIpCr|8BAyJS
zUZrVAj-j3R;RR7Y%aUquy>x}VnkSu*H>i+R(LimJmB^VA&%*LET~i4O6g1{@FVwp=
zXx1FZT;x=A|C|hfGHq!~nq}{}EB*X>Ac=ExT}`<}keQ8@|1l1j+f1Hb*^0KX>}q?!
zpRfH)ptM??Rjs$0UP)&ZJu1pM?iyZ=Ll^~M9wBM<m`B($7hBX%v5U#*oLAVi$4N(;
ziU+AXW7DpKhXBb{^=L(Eb1%w>@3vprw^5fjK+F#FR}n)VK5X_ZJ0stw<7F#?{l=dP
zxjE0lp@IA8-{2JJRLDy&27*QC)HHsXa~xwoSUd|Ky_O!Q*^8uuNp_wT7@R*)2EvSs
z3YTgdGp9aAFeab-;KtNn1+SNUisK)vYka@66uT|c!lmXuJg)~T0aeNSh)=HemJ8y8
zG4o8M40S^dJ~|B^2s3JOAw9qQyVHf3b_4f@vbH7lD)v{c$d*?#<+jVTEiwsX`S+4J
zrb^Uou}k3w4~i81iQ_v~{}Seb9FQW!HB}gW!h}Y84Rf!47HBF9PUf1`%DV%@*(oh~
zl^POJGPM`aV=hkeN3v%%hzcmRvpmapTpGc&NLH)o29+Tk;cu08^=ixA`TKd`K9VJf
zd_W(s&MK4+$hP7A?eW>6-6|o0oF+_uU~~lW24t?8xkc~5`)e8k@89T^HS-D`?JBpL
zQ@~f*t>Yy{Tr!Z@qh^kAuayH%(Ji3SI}~>nwavjsXJ%x}&xT=U_HY`J)e%hGKBCwb
zWI%3`--~&J8vF3>?xX!ZevYdyC<{zY9oP?OU)Hh`Z#P{6>*Rt_?-q4Pvs2D4qxYlb
zpTZ|ir{K!7a+^uUIc1evSq1~M85m}|@dK^be6Y<CThyQuz@~fvL?iBM>mP)+%RK#9
zooYazTj_fez20@u<uC6!YtX66NtJ174XJ1Pgo2y}BDh_gyz_AwUu0c|PerrEHMjox
z_N3<y<Gwv3H+LPX=X_r&%{@E|gN(-RtL1|;<(8Fz>I16(Y|l}lO`z!(KOI$WvcjXy
zy!o()clg-<!;R$JWW};Xd9zzGA6fa>drvGLKLmkfkL0Yh5g9Y3JhCp%$@Lz?rV)s-
zoG8%`NRjH%YQ!`vLY#fTe6X%ai7$0Mv_~ga!)jGUgT3A~4<tCO+FGRxB8jP|@`W@u
zUpS5GBD|#a#Knx$0L$^Sx(bN)KkUy2kC+7n)O<v)Hi_8PVXBK(n*%80S$a->i}ue#
ztZIOaZ+1?rNq&fP$lnDWd)rW>vBY5D<SOBLAc5?B{4D=*faa#Ww5z8iy5CEXa2~Ms
z{d^nRR?{b{q!0Xp*|MX}#t4rIW^78o#xIZe6zs|_JUIGpXE!@{`M8lA%*>B6-ql5k
zcPQ{3EsPW=S)@@OOf0H-Z1=j;j%DR1U#WPy@8t2>Q{`Zz^B!0|j?ESX;EY%U!vTX0
z6veblJ5=`$dJHoihmxD{Zt+H2Td?!WZy(>>)pK7gJmMrjVc{z_@A&v0T1=nr&1qUy
z{?dGH(vGwBRX~tHtH$oT618sAX*kw*&z(AbE<ovwr0))(CpE^gn7uREmuj8Kcxfb#
zat{wv2L2@k970|V>oc~}uD^BrOL(8#K!Ts#$1<gUy0L9f5m|M6^#sT@%q*lJ4s2Sj
zvlu?wN=SN_A5yA>YQJy$=F53O1$C0CEmLeMy&vCA!xHN`xyHtI7E$wuCHBcx*C?o!
z=jD`>)hv#yRr;0xRQLTyW$=@_@{Q}+>z$BCOsRKGI41tD_GW~DdWU*0BWPAV#&9;j
zve#2=f<lN6&%I<FJPqCBhb<Q%Vf`ws0^!l%pF@VJ|D)jie$ue|*8JJK9BUTshhbGx
z>(oCxFu#P|&#1>Z$bm@CZ@%@0K-NEC0k~(H|3wZcNguDM6vDqfeE!vwNWCEel;j&9
zhfBw9e)~EQ1_SA{eBi$U1EnVf#_S({ieCAD;3Q>!!x?`;6FpDgvfo=-w6*k;dPzCy
z&MhA&`?S{Rh;uq@Hkge4)04bU?a|n<7Yc)~ZEaIgJAkh&p7VaO&z_)Mn$8sfY<NqH
zdCGFqKum3&usW^c-|w1hmH5JTHhnGM300PT`!y3k*x79AzFrs?xyM=YC))9!m`jR1
zUe{J9SS!$ZbXC+(I9z>INoI@glp*l19!HDg!vRBy{LoiFJt`I6`x?GDzD<Pc6HY-6
zP!DxLNTpeevJ<7q`i(`%&GLHHgKfrY7xYg9T!n$ct<I?Ug`6^&U-k~xuiywF4M8LK
zPaY?8Pnu?GvT4;=7xe7(i&N~54eM#uS&QS$TL!l_G6Y=MJrq%)FT?jbxYpHry%<G0
zG+quaJ9=y+6WTS9E*2x)l|1{eZ(-bW<m3k9%3AD3gODYoaX{Y&a0dYEWBK<N4C={m
z9Q2f*apA~hApYFlq~z#CngqCPY76{i=l*v<1`v%_hUK9GoAQu`7GcY5iIlPlv%5`h
z*r#i!-!D;`5)A{X4y(}N3Wc_~=(FrwUn*bqN`NKXegJydX7Ioy=_S>B1iLo<TW>?6
zVi-;QVgD6vE^8s=n=72*HlOHoEFv}MWOE%UvN)x8!3AmW(%ehGz;4|{42AFP08oO*
zK1<NB2CM*y)M=J)xzwyI&8!2EXPYA+zuWQ#x!z+{(rRx%J`kmgs4(lC(%bS}v^-94
z5UG!71P5dN=CA*_ssFkUe-TdxzWF{1TY)$;j`C4_Or_t5)mo2gm|L|!{iJlDBb0gX
z(pw%Tr9HwRpBkm`^o`=~%dWd*Xhsv?@sBO9C-xqSzXs4cDQI1SPV-YipZW5K-vgN4
z`pH%A$(E)Gvh{_NfKn}mG-G^foJ_wNY~NXj17P$mr&5;g2fLQNS5gDuO?Wi~+jRjw
zj1_glac1s;F139QR7}J>2UTw2pv63Nu;ZIhXIPnQS4TVvUq2l|`YLx_>sp&Q$n_Mc
z%jY>2cF$(0{Zv*nz$tcwy+zuzhNocx(jBlf*Y{5igK(6YnWyr$(`FmV8OH#V>*+S=
zLF68NQ58&1Af13~?c_iaG~8l<!dlKU&OmCnDty1jK>I0aDT~T1ZNY5L)*T^7ISKj@
zz)Sf+{D^!PDo4$yEF9n)b?AL|>j8{7!W=@<Hi%lApWx!3{yo#tT_j53IG0Ru5Jdcm
zUMwY(vF~-FBquz_Wf}e&$V*}%*lCrqgHPJ#^?f6VWpomkb=uF`z5K$epKqIK8(t@)
zljTIg!n8Vd@nkiXw<`|z$5jnvb(Z`kHu|&U@?Lp`6CeLLXuPRWk6eIT3bX#}bo*cT
z`y0t~$=CTjq%7`c(>p#Cr7H^OJ6M$D4SnFJOf*T@!_px%SSRI9sVnsQFvP|b5&yX|
zt1Wm7EP(^^|CO}C{k6j-I~{fOuz+31FCnixy-geSsnmR^tG-z6amXlM6xRBh;L{8X
zNd$$E4j$-4R;c*0t>G_rXKJt9+%m%-W0A4x{nn>m0%IwVS$)woToUJ+2T2dNQsbt9
z<jaV@XHDj?@HGm0djlJ{+qcr;(FhwxF1TZS(ZL<GV-<;ldb0{tbT;U+4u&oTR@sOD
z>CyjPQg$dE9yT0D|4GjbhFVN69ds*4zhV5pq*f{;df{Eoi6x7Ba>WQoB`*Cr<!N-T
z)qIFMXUO-}FXxZW`|vB`_;2Sdw(_=?#_Z=6wT)^;w;ehO9*I#3C*PhlJHEIvXfC3m
zvvD;+V931U5xdwnqpk1id5!dgE+*&AXh5RVCiT@nTlRD`+qJ?36JykVtq*&je{J`<
z;Ieo22=k<QLYBPw+V$8b4WN<$q6zEO32Z&KJ+a(x?d8Rq6@XE?UFLCJU=V*`4E-dZ
zqaRyf_F6hM3}Ji!EQ!Mj!6W%AZ@dH5Vver8x_htdga0K=KA|ve61f|TW{k7wv@KAY
zQ_(njwJzI4FL;Um=`46i+LBvkx^M1c>6$rbo2zYEu_P1pc5$j-B9`;k{jp^F55{<I
zkSRIEP+zal>f)}&z2&_PCAp+1qN`8+_WJG%Qf=f%^t&=9(_5GXq;22=9;*8r`p=VX
z9`qkHe5fH^KjRB2#e~C8M5td9eXcMnB08i92@U%|+IPeb(J`X(Jy!#8ofa8){7X$-
zLKt06-(%{D+La5qb|$w&Z2U)qV(1W9T(&VSfO51U@kF4M5duYLiPMn*Qd{@hj~t$*
zJT9ZciJ!iu0W4To)wHX#^^ErCcONlBk|MPKeI_b0>#V>0*R?qyE&`4PC26cc{?`%v
z_kT9y-bK)HygYe*eVUcHXs&$s!_?^Ye|m&a@}DxO8|Oq@?yH{vB$c`rhyP!KAHqVV
zK;JmW2W)-dF}EC?{F=H~d%A_)MYWlft`dR{ez+Q&Ul$Y)c9p1!zBipa>&W;6&qDFd
zrG^TN{&xeVttn3nU*EgyinI0o_x`{Oit&f0Y@HB_lWm5Tw5B7{p@hi?`EpN)foH`E
zlffV(C!+$>=*$O#eOzy2a_aGREy?VxgBqyJu7Q?rIa2tG)|Jw>dI(4Iq4*S#yZ@R<
zw_3u<-4Tiwg+T5;RVfJHJX!u6hjHlC#!)0Vhyvp)^q9ivCXS=u_q0gD0Vu=q-t~o#
z@k!TXGa^0Tk1y;KL%k1j95H)QvMvW*6_pEyNo*Y-#*i&G+gtYd%y8yNR7Y9Ma*s!S
z{Zmr@$X&_7&HOaV&G7Wrh^mIYQG5-YqAKY!Rsp~j^}AV#n4PUC&LNu;*mS>(*wXi{
zj?2M(f8VwGy`e0v_)ZFV8o+myWMpKuOTLdQRx~eG@m0C@Pjd1TBY(@5OIz6yeKv6q
z{OZpo2&yL6$LT^wCa|oSrDk?2dWHgXW^NoX>tQ*=OS&=jM6f2m5Lyy73P#l`z?gU#
zDCxQCY8xzNwKpA4;}ayG>M@thWIFa%H!KjoC0NCTTh*EQFl~GOA9EeVI~(=1K$q={
z{9DV4b(=E3A1<I2f!{f!(|W4c%G~VLU>M7Me-6sEwU*bnVFQZnkDh1e<yxaaRQG;i
z#7`=kbH{!4e`>ai?@_*~Kvj#))ns=oWAsmV5rdqskfMg7dglDQjE@q(U9mD~DPJy{
z1M0Eg3<ZuY^C@0?)i+XXmjFue(N>bR`=WQMYRSm3VbA9a4fU5=bV)TI&R-?4<5w~E
z@f<YMe(<@b7cm2(TSv@2<dQ8dde2obq=GdKDl2I@XB<|oT2w^DWFtTU)-OJAd+lIL
z)xLBKFb{)kLJCMjf(?b|(ca;4Z~DDNapjY?m?LdID0RXKStwXwu`ARh;!_9q+k85x
zz9I2`Ngo1N;F|=HdR4JTx9Rw1g&NK_H<h^G*iq4vD^dO=52tMd%{8?5hl%)j<86l?
zJfLC%&N+_<;m$A<ATUp|%=y;X_>#)oD95C#LjgP0QKa(sC(a*!QWSrcL>qHGCc^b1
z9u?#BJ#n2v;eoBKcJgCx-|o4*A}?%WUA2>o_U1F_#`%aAGTejoWPuH#!0+~QKB(8%
zX6O#b#pHG0<qa_ZVI1HSjeb=iDv`2^u4=nN_oia7ZTEw@qgm5&O}@^sN^#io5d{78
z;rwd?8*}9UG0Umc{x-`ouXs6bl2{!aF!KLG@<Weln5E>-D(868Ok<`~kw>x?go(a>
z>i$l0tlu(#$X8xt<=4Nm0RDdoer1yREz;GHI?8;!R20-}-XG1vi09#!d<%?>`D%lD
z>*X6eTML#8)6o`3Po~9e-JXMM_|qhJH@Rt5$A&sTwI}W@iy{-)yK>YK;xw1f@oQn^
zHlBq%6Oe8Sa3f15ZQrWxoJZKSxCb!cL|Led1r4sg$8J-#=iPl$Ug@Oe6y4fxAh7Xp
zL#$6go|JC6I+jzO(X={f1KwRBJUTV}J#J=xYAIxQpKI3P<vTh`{6}ZBMc}*P_vtRV
zZe>vWt24eQ|Efaw^ueDGgCYCj|IF)O<-yVV#*9SmM_3&0{|hTx!E(k+{(U+)1QFt<
zXHSCvhw1q*MK8Fz0eipxV`Z?a#(9cGOB0)dmRdRMnu!e00i)|-yU9u&;qra$?8mJ6
zb?m-6;h|xw;C=I{NiFQ53YEr~wKL34RYU&=zdv&3zY(PqL6CN2RJLq8gVW3Ay?#RM
zN{SK1#_A=c`E2mduw<G;IlW3yx^$XneRs))6oBB`@s27%!M`x|ZGiYJ*PN)bvp`>{
zo?bSu?fYy|BJa?El9ng};@V;0s@2<FHkJ3NO@^Mru5thu0x-$&qy5<T+TRy@_+n^n
zMPmwLGMM^(8WZYUMD#<0$*hrW55)OB%5HsmG{!2Sjx%=w{CA}*TZi9dlXFw}17~ta
zC6J=>7b$DwM7FpEGdMGtvQ-c`PDZCeIB!}H^(cBl3t%@7Nk-DS?DLc<j1VH!pl*lM
z(eaPz+V8V}eKox7y+wN;oVKh$^605t5N|7*QN7P*35>h-``Fd3`V<o=te(omDf0+D
zS|y!=8;wKFPjej2#zzR!Bza&NP0hA*U|1Na;$lDRluf*HXoL2!ok`x<Yz8ph+IVA<
zYf~O4c`18A`lSW7_ju9X6;jT@y7}L(WY+&;JRJw>*x|eFowaXLv5Fbiu?4g>HpvAE
z;UnLUMOIIlp+gDIg5MOxUg0y~xL=&A0ucK9MyF`biY*GtjEc5q05{Y*`&g`50aKdw
z4x6~U+C|c1$56YL%4TR&X%N)M`F&0?A|G|lcDPi6c+C>XbnJkieVmuZqxuO5uLF|T
zD#4=_vDzwmY^&V~exlt4pR4SCbez!anw+9B->tQK$%GaaD>hP_h3<5?VV6?{3gC4Y
z*ytaWD^)NvgkdV-?q-*Mbbmoy9O*_ApGzEd;(R$0!>p-M#L1=bx7eAVGiS`JEBe4f
zu|nU4bamP0ytYJ`W~A{!lD<>@GXXl;rrKQxy%vp903>y6B@i}{eKyOBBL2#OC^u-&
zEg7e0E)}r)P915`tfz-duvspG4O&C$c3;tIbT&<+0m*+TUc)Z`!Pg%SJHI`#De*bn
ziazz$=oa0T8=u#?3YIV@kT&KfUc1ElX5Qca_dAq-?0o=A=p>1}U|?2Ll@QV8V_aV?
zPZ67Tf6gT7*Qpk*pCvG#@_y@-cE6^iU##imQxb1?metO*%T@`!%b8yZ>QdtS0>W+a
zxh0kq+<b4|8M)?^T*64&6ZAZbSMthM#(X~+V6)6Aky98{t?V|h7?qdU*%yloy`%!N
z4_sa;X*rtR;@>N{_~BjRrvG)uKFxL5O?J^~9s2}ZC8%ro+M0#GzrZ1qRp5<9FVHHC
z<r@_dQ|GK96n<J+m#2#@Y*$vHNWpy8HqSo0+r9De9&j<wdy-<Toy#{N>9T98Lw!{Z
z<4u4ahmMabK1A<VF46z%F#TTu%)R@52X?lFg?&wE>%Kmh|1)`mQcT&zr4)Rvv!IfA
zfFG*-tmMGjEGN4tXC0ANFlc9w>U@<8Z9Lgz<!m1SzB;;Cw?z(ti>%*%<!P{X%0GXF
z9JDo0JLY%zDyGItpYJKsSqL9O?Y&h@+WO1i-e7^m0)M;toN_%tx9l*obc=M3gJzs=
zE8-zqrC4Qhp?7ak{43L(le+0>+WjWZ>9OLK={qo|^uVNgbb9RgkNjaaiYrBdNlQ+8
za{#GHFBCufF1}iN(2vimX~BUj*hD?QG3_?N4W*c-R||?ve{%aL0xw-@@hHvjtL~mZ
z$y)jg(@uMa>Vj0weFTGLf|+X(`Y;<Hiw8vw3pF<if7-?x^P)F)kv{qrDqK-mH4tq8
zAw6#7hl`g$)sI#dqE;JD%k;G#Wz6HTGz4w99L;>ZJGHnQqdt91pCI4>PlLE8cORxy
z7}eDChmHmq45($XW$(9AMY@zXZ#G{&19;95!p*6-+Mz;vgvg`1&i`?}hxNx)s2Hae
zJ&6}Og7wx!0$vkXNE!Qeb5Cc+ho`-RF>z`IrXS}_Fk7fuKR|FkoHvEVG;s#+OA8rA
zqf6A96I-N9A`LP*BMVm~_~eT?Sk{jNQ_CsN`uaS>Go4HgxGdVTvMT&vGmwR3am|ST
z;K)zmOaD}tamD!%?8`{;_JMr*P4+XD5=_{`X*BW8E6=(s-S3g>WJb(Y+%iNayp{Ql
zxnIdsY1%n*d6aS%hEDzlECZJFeap&&&HpWHN<rd*@Z5W%EXc~i@=}cOrr*%HGhQiq
zE9gpo*K+WRfCJfW8Nfo@M>m>q@N7~Y=Nu=leqR*W?00R*O@Db&kP&A7)OdvWSi<gt
zievf0(R8rL8K3XG7cOXL_q)pC4P2XqM-uU|;pOA!T<Ta79_>o^^edO?)kB92<+bV_
zPsb`(0p$<q+oc0M9*h<PgY6T|kYzE1tP6YRqKLn}q+asZ{P7Bt53kVnv>NIh*6}dl
z40b=>f)zlZ-kUwMjDsT?Y5l4Vk1FlFEDFx+BJRO{Vw(8mvv0Ro4n_Qgl9BFVKXCv>
zUQS~4z8I8??W}Gsy49irX1#zg9W2mR<;n%hDtB1;8s52vPnd3QPTU7_iD<^bk)w&<
zEc?V+<2n4kQ1ZArzLi1$bRNhVQ33ZgPRFCxOE3ang_7->x(KJHMex#eG-(chq51?N
z8j)Bp6JEVB8jPLxJVv|HHpE_L2TEDnDZp3kvv)0m<xVHwlJhe1n(y)kkwvf)MT275
zpvYn7-SBE4`S;aRK0~@j^zp0z0~~+N{_{wWzOnbIyB{l0_)c#7B<}sMxHnX5MdMnz
zw)E-4d!Ns(&(mJ{Tfq!eRUST6j;+n|zUqebqJ0)mqy|oRwJ_HF!^sh-+Bok!8BwPP
z-x3DxRR12Tk>a^_eX=-IR-yC~NLcxD_dWq0F%86To0SLWLYu!tY-(naUW$yhtr0a)
z&h<Bk&K3h3OJzIA+sjRPHCGyAxGAsTDt|eL{vui0D@MhZ#=n1_Kk!(txS=Mh>kFQ`
z=s6ojQu4DaPZLd2<wpnnw%b`KW&r7-plx<)JG_P<S+$O7*UCKYx!|8iw`ERe5$@P6
zPkpvK<*T3`p8KpYkoYTzLtvR}M%CSy(C};+sWFqE1zPTY)sNYgKCU~CT^Gp&Ry};e
zPPHXT^Z$MV@H1v7H{RkpuUtCdqXf*7R~IQgf9t0m3M-k^S*&A|;-TL{wqyBCaN=c$
zPC_srndPSUm3;ne0hD2~GZhP7(=(2i_%2r0*9)pQ6~|LZ8^(*JQy6|ZK>?Ffd;$9E
z{xsNuBJJVwi+4^>O@K|;{-mrb5yGc(xBZc+ue(QBaX87KuUH!7%s0;OUW`FR$eUT=
z!w0*^+yiY&LU(X4W(p5N+ZX(-Z#>>Re{G~TjA0!v2kDVL6DpFj!^x~a^DIJ)e+S3S
zUnMk_eZEp5Dw^^`|H0oY&B1}YO%#Lo{oVXorTec+?&r(|axR3WkTJM(2u=+$L6C5X
zJ6&f+$A7yG4obPSq^!c<awi-eoMM2JJV~@DgjAe0JK!ndRwfx3f#Z^G3>SBTtZQBN
zW(CWKg*Pki7x^d%!~mx7*tWcP3?(a!xyZ>b`rI=Xds@ER;GEVoR{0=1_p}*%`Lp@G
z(HoNX!d^mpmciI)aeJLJRJR$2B%sG`P8YX``U9^+bv}`i+PW3#yoUqQUM<&qQJs0Z
z2FI!b0YvVC_OC|sT#sgfhagF*h;A;CjZUl)j0MoyEQ3KwD7KqT;&Abz?cC4f9I{P7
zq7~1&Y}Y=vnQhi%^hGZ@?yH`KAT@)W+||N1Ufee!?c)DFn&pGE|MqBhZYv2XCGU4{
zOaR<e_uYkQMHsWA)&9oyyGhvO&N#K+q$Qk-4AFdCRgh{umwI9Jb=Pw~e!z}kkCFUS
z#(1`hdb5vQeZ^!?flk7#8^<U0{^5n5BEXG`WQ^S-AQ@!z5#KUswbr9#*9#BmVz1I(
z`FuW3)^ej{y0NPi+bC*VHH}=N<C@q%P5OZs{cnRD&XIzHK|%V~tj~qZ3?mc8)2a>T
zq%}U>r97CUVFqoWfZ94Tjki7k`fzibV3+>4{C^q}wOszvJ=J>SvPL-Oe54`^<A*0(
z^fQNW5t}MHD6-QR-K?x(QDHk#@6Hgn0qK5vzkW%iXKYhyO`g62u-xoIuZ<J(ZiKC|
zwAbQ}VLm2@_KvEtHiE?*i4i?Uw0()_G%SHMZ&SbzS3gEEfOAdRZ%`|IREet}?Wbc~
zwT7wm@%EA+0N|7Pc#qX?IBb25dc3M@Z)w^UF`B2#_K02nyuOEdd~;IGOGyrKTAPZ8
zHRjCo2a|#qAGm&t)Bd?pg~{#4t6X}aUM*2u{F_Jg_luK>8_P(O-=AXC&JQJy0js~)
z#QQ{RDql9q@OU&Cut(}t%a8XywHyuio^|&Tb`5wx8l9)w%`Hzm+21hO*`KV&0WENC
za*X3mDuX06r?$We1P&UQKG9o?njDPyCRl2w6WF?a7qR8*nyp2yaGiQ`hQs20bxT67
z+)S#s3a%-!8vjx0zN?NBx%l_(ki#;;mDrI7Zi|ml>+|1lTWlG=o#dl|ybY1o01uF2
zx;WX#tz+|sy@Q~NM4K7<Vr>7~xT;dj*d1sD$c1nn(er#zxQyq57WQyqdzRcf1-Z6Y
z(ISSlg%<)VZ~uN77~guG!g<bBTQNT#h?k{P6?oVoZg*rV`HW-cmZ*z)LPA%alpfIM
zjW_$;z2<hY8vmqtW3o<msW)!7s6eqd2}IKrQYSmR14mavoJ9hq9D07-USVX!_IQ8l
zaEVjYVWj6tje&~u)=lQZEufIM{<X8YHj@`t$fc1J0oj<!?u`7=ggr|~VDZe*u!h-=
zx#+Ta(fBB=(!uweuX&VeZPS%fc3nje+|h_9!^AFn9JnA3hcxWobzyt8JT<!pObViX
z1|@Diq3EUwId=En?eu*^7&E7oTZ8-gnNgT-UirJbR}Jz%_|&#k$Rw=_#g6g;P<t(>
zrjo`TsM>K7$E4(lW??#rCs`cI^8)1z5Uk~AYUpJEO#GT^WlP>}e7RY#RePt&;E#1<
zf7=6Z5uN_RgmD*UH`vbVu$4;9r|Du7uc9q}71!!woo-PH(f;Lgd{1*YoCP-=A3m)y
z_PIkZmd6}P=b`TY_m#ts@BTK>oVmm$lJ-d;n3Zs`ct@YF<B%|=Z+MWYZzV|k_qbX=
z*;m1|TRy5nc7sPzP3E~rfLimWST7LUf#Bvp3;mN9rQMI%kvX6D_H1**`gCmKX9RZd
zi_+B=lB+1gP>SPmE&aE#Pf!=fzP~MFqo-jO<<Cx?8ZrMNZrW*_US)xA4uE`Tm(|V<
zmDsq{g*5Sl9nxhQh`pjC4Mf1u;#eeJ!__9(O096^n9*lPebO+q|3PE@Tbgv?`2Ot*
zq-8INO<U8a><j1hdy@PTr;5_WCYxgho;N3z$Wan_56C61vg*{>YUqw@4zi)nxEF#5
zH@q8g>1<KJs73N)XUzWwsr<HUas`v;Xs5=X!(W}fz_FbLF1#FY#rZUeVfWvi&e?tb
zc&P^2d4HHWJ-BkJZ1#7z;r4*2s-Ixmrdp?l*%4^C>a0|=D{-X1&0KE{%PK%$oKh9w
zc@9lST@!U{JJ88FIf1N!^8;SJ-JR=}$(DE!__7*Ubd{xjv3w4DSv<!`@v{1B)epJJ
zl+DNMeD<?#kGpAi_U866l4+tw1~z}cR>tqg&40Bfzy7W@;U9FCRZHkp+tVC0C*ezk
z_^DHK>KCl6+#4^^$sG!6cG{;kGd0a~A7y?!!9tI#=l}WUNzIes#!N$3GKtY&5)sba
zSIN%Mj{Wsmhj@aWa0)_wlCN5L3;%7$O$w>sFGk(h0#O4z<oBN7#7@-4_OIXm-3$5G
z|GNs6vU$tvBYFon;`K;f1>>C)(|=iC!$VODB--qtWGlWEAy8l{bvFnD8{ZX%ZXM(l
zZQR(DN1qb*&A#V9V-&+7x%Z;LkW1C2h!qn@{wYZ+n5+07%vNTJPxAf*z-e5pr|Z{Z
zm39Lgpwr$j+B@%$&$B20Zd!l=-_H9meQIsE1iAjUnM1KwlI|Z=@fmKwAIHv+?p!7$
zOIKtKD-WG>P6fdLa~PHU8$7OAK~efe7%JnjMr~n!?;oO|a2EiZzaF>UD8kgm*VZ4x
zD6--2{#Y)9vx|kY1l+_rEyoL59<EbXV5v@aI&5PMg!?FiHiZ;p-pm;utp<2T&Hx;p
z*kg`#?-}Q?%Ck&4t+N#eYy<G#C16d8a>Qn4`I~-apIVKy+F?eIN2?5XCE)9?e?8WV
z^EwRiXySP(olk?y^0J?sd4`^vb>x=E#gzesl2G`n?HMzpA0MZoeaGehVH$%)|D9=M
z<-z~1VjS`G(LC^_=Ra<eNy5BveHu^XcrIeR9rNl(*pp4chmi?g9Iyb52NUQ7yP?P&
z+Z^KRP2M(9#h*nj&a!mlg;y8+y}&FvlJ_=Q@6A@YFdfhdu|eHSj~LBBkQJ?%Q>G{B
zk<Yt}YwnmI^dRrzg;>n;tT&K$Zt|#94`?>X?gDTZhmrA8+}#7kxh`V{XX3BM&j)#T
zT3`fi_=CSqgp2WvN~}acuwhcvtXC=xv{hDDEbh=1ts7mj0iqr)f@d0~H^B$}k+PWl
z+uc$K?B*=G?KO7Lb5yr;xUKRMw$v@$&Q1kJI3Xe^LhIIB6`LOCDFRR<2+*_^BzG58
zBtp`7cbXMAOD$k5;*)BmYzaFy;36JT<&o1v+2wOy#RWfG0pfW1QsHT=ljmPn_um#P
zpfcu}hLx!1b>;A#@!g+)O$eewAN;#Ohn+4z8dD=V3mu#~>H36ku^DrN$glO<;pFGx
zDT^U*ch~1Q6Hls=POP^eP>R%SBx|{Ts<2frE`r?2wgeFcd&pk8Wh+{(TdDwx%?B<$
zR~576sc$5Bxj;o>Qbm)Fo;_I#<#_CAFkk+-W=qi#o=V@pS2U>anaTWdl?N#~ENVE?
zsTlB9@9*y)rZ<GTLt7_V4;!Q|PG~{WjIOm_V|*;>idR!rn0pSS6V#ebR{?FDU`%iW
z|M({3fI}}XC-ZrOpi6Iyd;<GmLviI`P6IMl%TBw0nya`3B!hhsyH-+UjXKUUmXn5G
z1D4#YE3=>KwZ)GEK&Yz{kjy97kLwRsZ}5+rR2OOK<J69*+zKix2DamHyRYI2b!W@o
z!V0AF>Jo%;eqyZKoaoL|m&&>>st+bITWqJ+iX7jDhXPwgAD&t`+gYpNlrj`Pb{8BO
z7`(qkytP7P1kLg3lzUXvS2hfxs^@ep@#zI(j0~EWPT``L581+?k?B|Qq>1<+Jmxy*
zC$%!t#?(X<;<I9nf1e9|-uUt7d@gj*Jv8*q$lD>}rUS$y6bG^29WP{}>B6!(*Bzpp
zf?{2B{adN2sXKG<CZWMJzA_}`>&OOK>+jokG9#BC88%~(GPhG|JtpD3ixR}Tws;l;
zdNCPdbt6|j1tcEs6i8XrL_}D4`fSDiK^$}TPc6&5!fhE*zV#C?hMRsiicDaI1XG_d
zO_ZK(MTwvV*Rhi^{m!GMYuH9X?|{XF1KDe2qxuX7((~Hn4pi$(!G)T^mEd_6v)-Nk
z9N_77h0l>dGzOw9%=z$0zpz_WQ0p}d56-CX?<9T<Ab9cSAAgvhQ*I9oH<=*+%kTa9
zSD2D1GYk{@xyX~B<K2<^Z$B{=#N2nx2b!A&RZ);9jP;oq;5+!oO95BoM(y{bjqnDY
zT-yM}MN08^Qb)=iVr6g}zJGeBaUVh}=_4iqPDEMmrO?%ox1o3D(^{cf7I!6X4x5IA
zD#lb`>f#|{%=%Z}bL#i9X`)GA7#_dlb6TExYdx|{S%xG$=zhnCgnAqW)AxK84>|co
z_c*!un0D!FnqthT<LS1r>&@XZNl(SEJ<{T^?x@trgmBgx&Z%0J#M-I&$GJ;hkKS85
ztsMm9{vdGCWE^{24KLAquZ}k{d5f_+K6Ca$WrQrvR5b)e{7}Ca4PSeb=tgEX#(9Ui
z8-rz`ACw-mfOq2O64=~#uFsj^$>nf^CyK^}?vkY{Y`H#5%Y;0eKiA1!TFJ;4ns69k
zQDyBrr12rR*Wb}9&Xy{`k=k3V6SG$Plx8Kj@aC+9o#PFY^P8<MrOwp@9jJJ3n`xBF
z%mpE`hB23~A4?7J$1Ld}%h#cln6Sp{is(5W>!KeYT~dqCM&Y{~OSey7ZWdz23R5TC
z(LS1%=whtySoq~mF-(N_UYi~I7rJ_Kw|1++y2e@phN@MVM?O#=mN;$-71=mw>6l!L
z9p!f|zC4!-<+`r3WEfuNn=hf&*G6`9|FMBX^XSKpeZ=eS4+}i&Ue?xn_%<BQU=Jh0
zSzUjo7YegG?e?8Ai?iRS=`y@t`0DocHl^ISuBoZ%%Hv6`-DC^ib;e`<GAO;~{8X*=
zXyzz#Wb7RJn|*3@`7kHU(Q4d1zj39@d^5VKU+A*8<B~}n(hh8xE;@8AZK&o>{ol8N
z)2(wJlS^L<Jp#~{KMVSun3>(nJE$Hi8NPWyRI-tjvWj}l41GuC86}N%YJ1-WdyeOH
zEYqm4C`RGvoYPxBLySGu<g}lC`JCa%F0&DFSGQnxaf8{j&dDu>AcaWmbei|*XJ(E<
z@QKURHRqZa0ZvaBzoV$XEobVTy11k9lA49@$|ss=Y*5dzn~@;nyhY&kJ5>trSrVeL
zA1-Z5o-Ev29sm6P$&BuoMaBl>=%OiS-DfjeFfU&PcW(jLiWKaM9r5-qKV{t}BKkoW
zx7JL}Q!{r}Nl5!on!%d*mpvwn8~w`7FJdS-ms=(WLN2>{3FydBUy3Pao5CI{@#X7O
zmttR6obJ@d8Oz@qob*y+7!~;<OU3IyIgRmpLq8FUm_W%V<SW*^SLXV~DJeN4cT(ab
z?0jkS#Jo))^k|V`cXofUcR~HzV7RMHRSaG^GbXTcsJed7R!a-x)gYzNk(yxE!}Q6?
zv3==CU|d&G@qiw-kZ2GuquK4BV?fG&^&J=EtNYCeeO}9ceRoX4UFCdDiP2@JHuohK
z+ro8zd5t{TFF#VBFLpf@HC=2XrSJW<<M(XjIGK=Fe_iwx?#sJ($@V8&^=P4mL#|=C
z)Bl{$P78y}U8`v$_br%N`C=RyXR*UcQU>M1{&~d@jC%+x?fj1vE3~A^Hl1y=27R%g
z9=i7ld4JZ*6Z6(lYx5Rz?Y)WR`1$V25&j|z{RMK8_zf|(1HpnAZQ{<6l4yZz+!fP9
z($;tEw{&+pH@`E};K{sA=<H!@x;*7e&KehvObAtcHmUedOC(AnsqE#6&$7U6aw_j-
zjnJb#20rL?qo^LDt`JJ`CKbBylu99`(|g~~cU4^JZWVn~bLe}dwnnUN@Zh&MJiVka
zdNy@|0!>wkCL}dqb&s_uPc@SSy~;zkiCtUMp}_H-&nIc0PA_}6D50CYgRj0cCvQL<
z8ABsBr<IF#nVhIe`Z(s$cE+_29Nh&zuU7i_W&DhZvc4V|Zn=KYyO^upeL1{(9s62_
zgkbT#c$e{FnNH!y>c`j1)<h`ixQ?(`)A!3=nh=W?uIbImt*2ai9=|jPNpj~r#gdu!
zIByI+Y^+>EUEAUwB$#=Aco19?U1OxHl76wYv*$1_ihqWG_;W*p;#^X>`oyLvs|sv0
zwtD>WX9vWLlg@bZ47%GmYJINGob_m}tuyD>&%&%FbhJfJ_4irRuXF4D{2Xfclul5)
z!q4uo#dAd)ig{rTDJ_-r^QNnR(CV%wPHYtC^Vaz4bXgEZMb@`uK7egv+G=D=(M!m?
zqD%C)gIv)M628a6dJLQFi>xD_5v;YWo`)2$x(R69qrI~p*D+*Qb@#K>8;}N-YRR%y
zw$u>aP2-*O1MYQ@SN8+CZo9=u1YJlEiJ_sp{8^up$e!LR@I`t~=FV5e@P7L+m1J#o
z*0d;bpXg_U(`>t#8a~*G5q(R??r|@-ZET@moeDx={Lx}t2~sxh%8^-Y^L-=igwSjk
z{;Bp|E*GNM84OBCqrLa8f_G{o1jT>sT53&q_#cOp9Rc3e4ZFZXuYf%YW4#5D0m`12
zy|7bjk`|8HyCw3PcjNp6`o5khq}r5UvKK!XB2J?c38nl*xvi4kEWdMvEGNsg<7u1R
zkJWP0XK~@-IrL6v9+76L(;t>TvUgFYr}Y2$;)^L8^HH&2A&+099*YFeQDirD@3Ou4
zedp>MmCb8`S?OXE<uYroTQP4a&&kD@jL=X{_Ddut*@=<SwrB$;@Z~SHL)t9LMe@A$
z%Za9)dj%^CJEdWyAGyCinGG;_n#guOKhK6(y+VNg!?h_@#o{R!FC@$ppEBU%%v%c>
z?B(<#4HZ|tugG+Y^So+NevSI-qmj)~t#XHB3gYo@OF3w}^SMU^1M72~atyHUeY>jO
zZwyT}Odncf4Xa7697LyaNlbMK+Lf3wr>oFqiIP_$#zI#w-x8F`2($MUcPzv@)O)*e
zW6Nw3#3oBWDQuy*v0Z^hE$Pv6L)}`Mi9WvH#A`kz5EmZE%rR0YqQ6j{JO3Szancqj
zIk0VkZs|F3a>q9hA69;OB6{6laPr3qL-7wv8#vUYd=I;7&U;j%Hq6|=dYO50F15Oi
z2=eOSD#ryF1?5Stdc|?oyLS~e*V`7EQv)R&coiUxaPg`<>eFO4qnm_gVPU?8Q}XE=
zlLlFh_8wb;#67XHVN1IS32NkT$nkID#g22W`A|^>Gcj#?6*jm%)>5Jquq@VJj|-xy
zHN=xlAh`r_Zpz79Sb;kS(J;5#pSs1%O$bzaAnk9vJ<4l!`@<lYcX$iJCSZ6&a~X5V
zg+8_h##Y>SKx1S%+f13inVtu$u-+VT>MfNvAGvXZQSGKB`l9U;3zbN;rD#{)i%=AI
zgnWny#qE>$IDAoQ9V+FPt#Qo)_EG*4R{?i!2uk()kDE==&12n%v5fl<Ru6pn4VYK=
zJ>-Pxhj`9G#Z>||VjrGL4Z%weE(8*U7(9OM1*7ME>2P}P2vowJfJpYF^;r$yi`)ur
z2Ltb%`^52w31GXN#f+cE$6SuHD|7nCJgeiv@YgS=JosW%Qj&F}<o1&nxsK83r*<>;
zfwRkTqd~bRitQxEp}pkd3`0IXLlw=c<3IhYTe-Ic7{xfGF*;#B?N%$YY==#Onnr@h
z?rsd@v=45^-Q4+(IC5KNW`!<{`A9zWs#^1Oo$^>noaDU!l?Z~$<F*goFGeJq`-D%g
z^LXlA#}D7r+QWX?Tt;XXySSF9bcP6SGo|D{66?#KCBJZU;?0o{l|z*8wlA;wQQGT4
zk`$DP`n&kgQTip(24+yc=5~i@_uP<RNT*OxS!e<QIxU0;Px!>PRO<M&EG(N}Rjx~x
zOyPj_iIwK|Xv^nv45SUxC6O3WExB9Gz>6?(SKITy7i2+k33iq1rPwDfhhNXr-%a!q
zY(FU6{&8LF(CLEv8nR<qEA05(slpexPR*7qI~tX!Q9e>L&s;GX-SnG>daXQSvD<Wi
z{M=5~m+#|m^(L|x3>oA;<`*Ewba@ODY_?S$D?BwKvMLquP`r%N*Lmw?;G8}<{&SV>
z^X+sOd8LF?6UjAiE#hvw=|Ch;-vGlLOCGtP>4;Un>Vx$AqrN6+SOOc<GZDS%Pi%ox
zyU-B}^3Krx2;b*jSbL04Py&xG$|Rz{Ef)4MfhoRe>g9Pw-PC2l^3h;E)f+Bb>{HUW
z&s|~q_aDCvsXtB&1wBsGSBtrpa^>U`>mL1T5z`+#AdnTcUMA)+r<0x+p{T9U*Rsr^
z{OpXW;=kFhuof6>HadZ#lndNaxBo+~^rZfEuFJiC>Msn;GV$xC-^9Gxe~n9OBrfzn
z3hyS_4{5zKWFgXxKJq5b{?t4hDJ_4U;EG&r>v}6g&n15X=CtBLr_{0BcdbiAt)4~C
zXUmxz<JaAu9P+!RY+Ogoy6x>9n<TQ5#Rh!bo)IWYPAu&tuxy!2kR5x2E=NalcIup4
zpo=Z8y;j8dG-X4i`Q0Fi5p{{tE_qOYz2K+wm3#{flAnFopRf{CJw_q!+P}`f>#p|A
zFS5SmUD1Rz3>;z~QQK~>#JtKQyo<6aK44Z&A21JUSTeX}wOJD*0w*rqY-}Eteziw|
zAm8@zcbSl$HD0p~R4lowc;oYFxoHB0?Y#RoVsBC8rf%P~lcq#!l~&r3OMYT&a19}l
zO_aF4*W#*d%eTDrXk;X{>$CiR@@Ls%WwxT?1XN{u(>R@FN!s+&r&%D7fCrhO8}fp?
zvS#-=pJ|`34(&?@%iB36ini>HI``SNxQFDTZg1Ra9P$vjXF;Z>gpwfgQ~Xu=<hWEn
z&B~=BvDN+^FR^W^uXWs&a)&OXb?Y^1$|e*-ZBWkC<dy{UiGQ<{lIn?WT~`SC_DBHI
zC}8KQatCKhgtQ&eUD<s&fg){)%eIrde7g6cCL#cBJyrHh`nJHl*IuSeRdU}QUgo)j
z#@WYPc`DSwGx5Yc^)+Fc5NGe8`Y7qr&aXmHibnpQI|N@Jxe-E$x$dgTUggGKFTB-T
zAkGpoiEU8udTjc3#gZm4d2Owj=yL9R?CDT-@QdTp_Y+1H-m*{G-AunE=N5VNJ>2*z
zODnl9d$VCI_R<0TF(&$jMj06k<4Zqs{~JD+sZm0=+C(5X^%dqy=RRP|NH({X0$i_7
zo#!)_-c^EU=szQGyE!nfI(+`twm~5}FJx4TIgjX)V#_i{r_vndSOXiLtvwi~J2`l+
z^Ub$8W&OIy#DgcNQbiBNxry|*(@0c#@Gm6?QS)OfzK|md@QgQk-$p8#DL5Pk98bf#
z*!gW(^^=ZJ2jPo4W-A_&F2!n{AO2{2{n0}Mn|Tl$>(_7>{i80p?9_njr69c!N6m^X
zU+sBvyr0RDWnx(P#4;n69Ac=j*?B#PXwN{rBsk1#+tBHt$br7_p7RTsHm?GzN;o+d
zesi-35n!S6g|?++;lll&ei|H6<M-5tA}HNRS`flBVuQXz$bOl~EAv|tPwNzx$5=ci
zbWe}z)IOB#`-X7`{Vb<AA;rh%Y7~2OjVr0}dA1pO<9r818O7)3bMx|6J}X;F`?fOv
zmb>fVgT=BrPqak{cJj6e`X`>+O5ws{?=c;5AkVRV3_n>L*{A!LT1*Jj4z(}^-$Y8C
z<zs^+$shhqhPT*iT1{$%xP<TNSEgBBtY(pvL>9gYEyJg1$wp`#9weD5*p^4t*|n_C
zs!EK`1w41rZPyWa=Ic4Drvq!82&cS9`Q>JyY6MsA@pXTf+Gb5|ozuv0?nLz5izgqX
zLUdfcU2OSU{x|H?x_|3U0tJOy4l+;Je3iJ5hw00=ln-?w>*LVAG1<!veM83jR~#PC
z55^7q*Yy50mtgLB6uu;gpj3cUe7Y1nK}6%K33F=uI(*C~Hh<2)<`43){_%pG!1h3L
z|8Ck|&&v$1M6AKwPd~mndc>0T>W+gj-r;wQnz%4UL9dJ0qdV5Qc=(-~x2a64^I#V{
z?>459H&aYJ>C#>d!hfH4p-37oLOb9Hhh~|7qSL<$X_z^z-udE8a_~%e-x$lssohx^
z;*cIh`1OfJVL^8$+f5R!%~IyuHx+K$&=HUjMb#!S8Ml(;ZR2r?H_T3#Hd4GC>PiyH
zw}lJsGgmg+%u5G{dS7SOV^lu(3i+<WNv1bg<8mNg$d<uV+tKaxwjlhes8BZ|32y6f
zZ#TX#>uZG<=x81mnk`+~3H4}brCV85SCbc#AyQLZBj5?VRU}B@M;bKrX&X`D$th0v
zay+oF!%_FS9ElEk&sLDmh$8lz%Gh-8m2(sVJf)~;^AXw`-y_eJBp;9A_wb5!r38M0
zv+YETTq8Cl|7;k&_C)Bbj2o)*rC;8YbG|AJQAT|cI(0fM%_fo085&dP-H8K&@BV+R
zy=7Eg*}5%C2nmwlL4yW&hu|7q65L&bySux)yL)hVhv4o3f;$9%bJeb@eQKX7_I>ZZ
z*79Su7G$o)oa5`G+vsfMwK!C)&Oy9An0@Dk*Xdt2gOHlNW6qGtg^2l18{TKFA_}ur
z=2Na%tdV1J0?cLjKEsr)I5R1(N#}T|4BdP1Md+5-Cq;hfA=XWW{ouzU;ztCsrvfNv
z74W<R0|>+zG`h`C?w1o-eh5vxv)9#%j}PK!mw}w=q}R-(=Jh$O9qVFAtv`=Ps`pxM
zGGUlc5_sE6E6r1b;yKc$_kC8emMEZ7p~__);6Gp)_hIIS^ckC7dhxOGeb!cOR|UY4
z;H)KlxEOl#(CUG@P$SPTNf8D}6ZiJFTU`j-7@30Wr@_`I;+8dtd#7?+v6j7WzF(rZ
z@+-Et$dP^@i?I%NDss!BY0QATdw>`d_DS(2o%+J*i?=}_kQKfDSX;;a$QR|pWgdKh
zzCgu<rN6atGyLG~)DE%9D(RkVy?g$8d&=zF3$LeMd^L&WWlo9-RSha+KZCW8uJ|w3
z<#59bv?mVS5y<Tef}Ci%U0=KAb}DVf7--U&zE7KU4s#Yufib$;H;#P~Ij~|tvD|9A
z7ya<7>z2bK{{#-@AZ-c_91mxa>Z3Uh$|0bM`5933zUMpQv*|U5^I^LWm%I7k7^?8T
zx0uMP!8uQ9i~WIGv9F@18g)!~p9t!X&KT>%ND=%8d=7+h|4d96?3FbK;<mFLQ6-jw
zU`M$1>&*Z^(NA-dPpShtn%j9Vd->lz$@6QhF$LYZHnn1TMU2=r$tEA%;F)}&WIIxG
z=;~ZjQ^{}c53jvIXI0@u9U2_L#6;dc;_9swz8vnc{(c+UeRFghw2FxNpM<3@8u+g#
zHi53rr#t>{-qB#&6err{`RJSn99yE5sq;x-%}kHw>a2k-Wi`WxvyvsWc9Nlj1uW>q
zm~`X*1ES4pVRaX!msKgF*71G=wmvW^MaXS4y3tL|;v_G`SGqQPm3M#y9P^iP<G?b+
z*X%i7^blYHgeM6VeBZSB-fy7K?DHj!ZY3hPLghkzdA(7ohwxpskA)+n#EI^48H1y0
zE%rq<$63l*7MDYQC!T}KVJ9KMpud9G!(@&&T?d;XEmj{P*W2sx2k&o}Z1X`UHNn$O
zm+xU!-rx_MRmqg9t;m!!h*x;O49nyg;)hB@uV~q`mAeatCJrHmKtx~g6Il*FGSl?=
z;E<JhG`cr3E%VBO!Ua<x8-=Y97QfpJ%GaP~+E${JdOde!Q2>GNBphi7A?-}vheQ^h
z<^m(_t2^bYset4UPlW+2*sj0<YlY(c4gBVpS_n{D37`9PFKJ=3{Sa&}2VWP@73{AR
z?!>)LiDn@wk4BqvKA^soEK?|}@Y5G(#K)vVd@GghwZLWXceb`1XxoG5HziZ~YG1J9
z<iJO-R@^%3vBTC9I~u`#ef=`3Y<E_$B@>T_>-vt~s8|b83kof;q5z=>;q@s~YJDAq
zoT_uPgC|v4vEIqOSAa3b%rIYpj*o*+J6PAlc$=E78e~lnjN!Q8{U@iaULJvdo(jQ4
zs3#>p){jaGmvBBG?}}=nH&Tl`?%?<sXWYH*ao%noU|)Xgp6huCy~Dy`LTI42#kMTl
zulLt9#_-XDDm!VmVS<u}@?9(zv3g%|h53<(wCGD!gbAn1!sR;xxBHu4rDxya-%Mh6
zee__VYM#Y&>+t?L)=DLgz2<k9Ei?Gwb5dQ==ca0M8)lvIcEw$hVAN?BtP_^QIQ@$!
zmKHO^SEzj>a~8i>o%%X0oB`yTKQ2n@Wp7TRTqRms)&{n|q8n%ihVP%ZGnGHwZlI^V
z%ATs86)C7o-(MiPqdVx5!N9Rb-?T5H{qgnW%2zY=)J1r9xg>Y2JBlq2pHJ&8fi7tp
zEJEy>ZOGj)JuvF`e{I#ek<rL}+^X)ypVPwP6<;dI)H+r1x?HWuBTU=<mEJPmh(nSl
zM9aajuzzYV=hG96t9Unw)Me4EWN1k+j5cM9N);}VqheRctmIfiwcvY?K{wlc60(2N
z@fLaSsw<`dmb7o#HRN+9?6l0n<NLrzjiPc4BeZjnZ16w-@yH{#yR<{3zTwEV&PXGk
z@kHc2sQQ{yk%lGG4rAdnK-}E&7M@)^3@?U=FPs&F_{rJ5n#VWv<#wr&IE>cDT^h}H
z611|h^y}zwMT!CC?ALlqIG@V4w6Sq8p>=)Qafj>^EfVC_XHTJ|NPO6Q+941-m7QUb
z?Z%2dJeewKZ^EGse3Xj0ZK5#Z;r9sd=`Kadi&yjzz$mRTR}qTvR+frz44_J(X}A~3
zwq0UgSQa-q^-WLL?Bc=PUm2c%yY_wr>%zm+uCjL<#FX}CbRiz~B)v(1;f@p5s)6R7
z36=ZyX11oBwt@3(#ZNiE<<$Ud<V9wgwf~9VSe*zeA70iw=PQL9Sx)8(IGj$T4fTh^
zanx<XAH}zO>H1Zu9GZ%Kl*+T%&JsN^F0c2KMC*R~7^a(NhvZ9W9;p`MGve#YIUmwg
z>m!YRYFisH^ldrF+b?W5<Kt>t$0de0bYO!@qxC6PDa^uczNuhFBpykBuuXJIWu(m%
zEH-k+7stC_rNLyILh?Hh_+AcatH$8a*O3jq@7#glgtU%TNsVeUA%nP`q~(IA;UUS`
zl?@r)?~u7J=_<LQyn)`isg=b(!a%*1q`lGFRMvEr4TDANQ13|qq2=JpgH<n^_!08K
zFPBVX65(iKH!*nUV<(Ib-%3)95awGQ=uOnl7aY}VmR|$Q5q$UH6AgVxIG(7g_xkL8
zuAPkzU<f2NM;botnKCMHGOo)(05&PS-V8W&A6W~pK3pH3C5^a#Gy0#n_c)qM8%_jp
z?42Jrdf*kj!Gdkc?hF$Y0tylM*M0qKVA%_JAiK<=I6O<-nwr88(o%X`S|ok8C<@nK
zY1Kod4=?0A%$2SLor2Sp<WFV4qj^~}@6Km7Q;Al5{jRq^nY?lHMmyCYlslxf<F<si
zUpm1SrxU+(e@c0_CPE!8Bzf$@?I>eKc1YteM?E8!NSwb{ds);+1H05Xs$=o(Whb7G
z_j-%QC<B%yO?dM)>iM0iukoi=mZ`475WkO~?hf_adPyN4Y`<PRnBI}Ay+6HdlTU_M
z$Fp#fuMd-((sO6l3SH1(5-4B(oL}5PtfYrW(;I2)+JXJx!sDyjbgi`D#(F(aBkAH_
zN6QghY72GfxMm9jKV<dLC+vp3NF+zt+X7`=M8kPFN#}V7i(}7uK?E7lS5KoUImT#>
zw<U#XMmC0UcPe(MvI*^Y;?i}@%c91DeEm^C&gDr?BV{gcABw<*imL+Smcx5z89RM6
zZjdINVS{6iufR7y)fV;ym83VjrZ<!I2Fd;4Ahk+qOS$i0c1E<?d|Vw_U6ym7_Ne3X
zkbRGBrLTVWgP=G=n^0L>BrvaSrH%em(2Q7y(rkr)Ixc?7Pg_p1o4<0{O^$hLhI0!%
z@RnDN@vPx2_m2NLVaxvReSUPp<7j3=nM$@5Pfz3*id;d%vmZsq_A@5)1f`fH{=rt9
zc1&&jF6}A{wBn<k6rE<+j2ClK!S+8JmFkMnzV|RjD=X&1;Mm9UQi@E3Pj<)0`l}%I
zQ@(Hz;1%~2>Xn35d(GQ##Ievvzt`?VIHT$1pos=Y+Yt)iOV&*(Ucr}R%`|%&x|#5{
zC+FwZa1E8@%{meIi#~b>%lZ|a89L+r1vDU0pps9YGO-k!nAm(YSdY02)uklN$-9KX
zw|(Q}{5~^3(60q(svLi#u67dP1*Oa4z|CvH_w$9ryZOGiVOpG>Lyq9{L)BNyp}rJk
zlSbmom%4Vz<CO=p)JGTr<_JWT)whA}nOY``H%gB5)t^``(H?JH2Y)skmFd`F)Wz>Z
z@-=s6zgwrR%2p#2au6jbp_t+M=KpQP1b2NMI&yG%h$oS1jEQ?;{_0`3QC;)RW>4Ve
zuR4k5$FQ|k_L-#ovK_S}_9J*I!M&fsM8DJqLoy{!Qv4$B`P1{vq(+80L$B6ws-NDE
zns&_p^qBlr&5f2C=KNKo8qto~_dmtIw=e85$GP{wcq2Xhk)dGTB0yP7`spZX#VPtX
z`q_%XjT@As?c=YT+KGqV+&nU{26L1lbL!JCGJ6`+_}>v)<U&xwW2V64=lVLavW5!X
zDGIJgGKpzLOMdj|*Mx>89ZPKpGygFZpy=;XX3CpXJm15HWxW@@&-x?}!Rsig_c6C&
z#?*C8Tzx;qxUwZi(f<~2rln;41O5e^A+CNmo6l=s{}4d`zem{Dl-&1G>J#@9f3##l
zEz1$lr%N2z&e0$HsVK?WQL6)=Y(%8;@Qov@<bq;33#)i|I7Z9Twk2#{Z%Ms~2Fm=V
z)bHkgYkfO@&`vEJ_~4<oAg2iqMJ|=^Shg>$dfLdw+^D-(oQ1|@%r~_QwXwrCSD9PM
z+EC(z3Llz74$SA=MPG-gQF~9F(^WG|cGWyq=^A`R*R$U-*iLJWavoA^QA#{wd^{NY
zl)sq<sI5N+8~@Wvu(pbj;lJFLY45w!C?i!~@i9&CzgY(WZ^7CNh$SNd43&<hmu&sS
z|J64D8sr`%NEw<tfeN9f#Q&2~{D;^5bP!84A7gYH`@@z<AwUL&FO7q4|MeF+;QeM$
zP?7lmU{C-vo@2$}*Jk^og$b?d)t<IV7iDw0L1cA;0KMb@0hi8dKf>nvn@Pc8OpT$P
zGT}e(+kbzwYmLajhicmfVbVVRp~7KWpA{K-Us3gU`PzY!A<&zoEKaW}Or(2+h_J0K
zeQCA8YjYO>(NtUB=b`|EgdJ``Xt@ToC+EUxRb2~|yiNWlFUb9!lpvoD9$FV@iuh=L
zyZvsS<J&${;a%i0>fnB8H{04DT>xsGxeF4bWgD|O(x{@({W+C{J-pOVJN4ye<G{Kb
zdu@wY<&kP!T6CQBk=#`p#a>G)QUPL??sVFw6%S|7y-SPURi1a%lWa-Js=YL(93?qT
z?VISkwj`Rz1{dAaA?zH!$PAn5W_q(+pzR_V@xje8r$H8;3=iQYcfb;<r(5fpW^@p}
z!x?7cH~sPu=aO7i@zbC08Qp4J7_GC(oW)n;q}x<0rf}&+yu7W37FtMjdG0WQq)!zs
zG);S5ep$3YvVnB`$wXe64Xk!2>?bfC;&gXvB@|ax95Yn%uEy!OHu+COo7~h<9BgKg
zwuMCYETkmxKR>Ex>MW1-spN6bDyQA(iR@j&ADcz!r}P2-kt<w*B+EICW6wVG(hqfS
zlL;NIccSu@mnkXiaHUx6RPN1-hTSqtwcPgu+Vr;1O@B1`E^ZB^#|ax&x>!-;e?f&a
zG!Nr0wKeB<5yX@y{lLvNb>P>ien9zG`1(JgY<n)WCXDOFed$D#2+`@8=%_P3ok;8K
zO|N>=Hnd>JC~_InVgeP^l2Unz3!8KF{h5XJyu(^ddsBhIgVotxmD-u+X3#{b9Y*2B
zgd$mSnyplU;&=t$7okeHR3lX7;Q;htJFLhtee<|XHRA#MH?>1y>&tpO<JHmvuj)_9
zGlq|5<--bS11!8rw8w_vgQLz%7Tx)7A1a3fumKYd`WJXUvFN(I92mQmTiK*s?Tv4j
zcd*<vxHP+8>PqH!(%&b8^$th%u@xn3Q)s<>ic(;kiHHDyLC^oHdab!3cV0y%7a)KM
z0j+<Y_LrSfzP1hDMi1j^ml%pD%c#)utT6b!OHRjk5y6T@Ys%gjC62Z>j=OznhSo!!
z>-K^AsW+8UoFZD@a_=<Q3##7%a`~19Ry3v?YUhVunxo1|OSF)+1Sfj?e?M>k%SL5p
z2yUT?(WG4`U^Yj?y^rO_Cmr?8nOm9<=Jn@_rc9yN?CxEN1xZLn<+7PPfq`un^N($~
z4ZImg{FgN7Yb25H;Xy>RpihBPQO4$t!}o7u1Czo%?NpFb$>-i@Kj`7H^P|^N70xeD
zt0Xw1^|=-o9H>~gbQVH^J2Efl@pDI#EIDzoJyt9cd-!0vn7t^`rAb$kCBhNg3?&g!
z+MUE&BJ0_T%7km3%$v_+pNqu<dT6Jttpo1`r|dABuFfmn4@{bWTwNkA302Vho+nW~
z<}~z8CBx%*G5%GM`Rnot_5#<OCh<hT$L8L`?*fZSC~Qxapu5rBnduarX9Z_cnmGod
z3d2)C?kA1jQCOFZS+vtn356G?-Kn+`h_FLwkv;6;2@ecA)WXev;66&3w3YDTEktCF
zaH(O@$x{S_R);;7B;Em4Jp3@DhpY0+0J@0rHDbZ@v_?aEg^S*)JwvMW8PGEZ984bX
zEf}C>$JpoEC7JY|0@!V_d(byacW<#BmqM+vs)v{7KD|d`)TO9(c$rrb<b(bMRUUXO
zG?rE!v=;Zz3#$hNwMct_os?idS?KpIBW-N9-iU<w=4K9I@KFeIR9Jd^Iz-g(W+#+q
z6H<!8ypE4`deR@<J(R46(jakcwa6ou&U;i@-=}NNKz4OyTlQ!paT$93+Dir_I5ssD
zhzUTP{E-~P0=Cuyv7UYP9yz4{^a|TnymBRJl^z%JRk`qI9N5alzQIl^X!PUJ9d`|4
zhN)_Xjcp`BQs)mF`n!+wlw|qFjJ-eW1<+?m+>}iWJI+hR*LfU&-1!!+?#Gasbk-<u
zE^)yf-hJ#?o;!S}E;_53LfUh7Gj!vl`vPm7wYcpnJ`K4b&22}*_38{b{n^^X{h9k*
zxLpwJd_OuZ2qCqwF4w8IEZ*tF@N?_XVg?GDo~G&8{@Rvv+$F2_<_1waxBZMlN|$j+
zh%y-ypBVd<)kqxYM3E&`pN>Kj6b+t3MFT?s4nIk0<Z|C=-oQk@QNgzo>7{@VaU{{P
zFVX}RgGcFO){}OuE|qtz#K4cBWZfK7OmG&a9ctCgnt5e=mF?pi-0U&4fjxBT<eaY%
zHlKmA-^a-sF*N3tY+JzO1E^_wOY^0hOV5pQ4-#aHe8dNaH~RxEI*TGa&=9X)L;0|h
zbX69c#v|>2M)RrFTK?KpIwKdrFWBVZbu8&ftw1xH9oe1>WiwH;tBHYOZdVDnQxCe7
z{vBOOomuLc^%RC3B;X|O^UxtSZON|C)MqgcYbqG$L0K1yU4ELne_n;?b5Gpw>Zm8>
z2f$8xHkx&-1pCkH{{Nf-9xnl7DBR}+f#=5apSvEVPaei|dMHLS)+5jd0bDjC`<k!*
z{Lg=U0U+TZNHhzMSg%w9RAQ$Oo@cp1j@s4p`v2`6dA|1no2js-_v^OF>SP3|BPWU0
zW?{665W;xu2*Toxq<y1oPiuPqSCz2;_}f7+QNRPoPEs~uI}!r5e1XzHTN`^3=N&p8
z;Dlwz84}l?WXT74?ij3t2JZUKmZiBqmQPX3e4N}lgFvbuhq|vY^zYUXjzN_R0_+gR
zTL2c)XTS9njQ>=5EfB(S`|u(0%%*r~TkrLAZ>XOdf^<$Vo}$C<-WVKVA9J>FTTycA
z>@sXOQ6hvh9q*7kAg0DyO8Ci6>+DylobK5|%h{U3m%IXAwa%?^)YvW0^6jA@&b}T1
zKyWoTc`lW&K3L!MZ^W|;kB#k!T6{K>>Gil`$}t}rJR7W!Jv;O=japrm0zn@$YmxYH
zgCMpyg>~Oq8;aFgK_ls2<H3r)M8!0*^3>zvmQ6HVBL-j1c<3RNJjZTJ2!-7an?3oK
zvso5@_j9%`$l}BEfFDhm9#$zg-nX@`pQ$f?$mS%!usg?<rJiG2?B5UXnlwnTN)^M|
zr=wf5T`c{f?fzldG>c!->`6C|a^6vP5OtJ7h6!Nl%~);NBtiZ^Vh%)njnPH&aVMN3
z$e2?QDAV1*WY`u%fr$ac=g8Ig!?^No^H^6Bou0lSG1T3bNEZ7usi-=)>uG1m>#<Lz
z-xsomkJ3k((N5Y66)`63a%IWmq#9iqWlmZwd$RIIVeh11ZUerp;+WzyiJ`=>3yls~
zJfI;(=Pc$|>#koBAQf#%xfR7y&bfVDb~W3XY>~uJYQ0N1U`M1lS2rQatx11o(s`EP
zdpHh_v#rhn0BU^qlTO0Uo!h$IZmv<9Cg3oJRtPj5mWL1okcNEQiV|1AlIFtn@%0uG
zQ$|aPYj*J4^k#XuG%k`ai*Q3{3haYu*DO(fTfzOv<OiW{8I`i6NQ5U~w|qm2Ocm9?
z0n=<HLpr5XWfF{)mRc8P=W4<NX|#MCLDFo;tqtisiwqNtnGp_Ei%t(Z3f)4S#g93~
zF7(#XWL>v_c`5}F3?F>M`gZBnK0+O#CY0t|x5?r_6EO@Kge)O(6`HZSGU7X-C8OS-
zFevF^1&T{eMnnJ!3J>^4V;fZ924ZaQLMmK-E;r>^JCLF5)F#je19l_{NJ$YFzN{e2
zCf&gWS7O(q?egrj+;B$tSXgiKc;(zTh5ap3qrDom*Ij}V-rt#xCq1W%y>;?8N0aZs
zv<xk|6&GcaaF{YuT>yJd1McI@8U8}Y`DGy>_hGoTuFz|IV)$_*=^k-jpqQ3;`=s8c
z0bbMgbMw90SCJKthVDx)q2zW*aL%LU^!S6A-LYC`?#Iasm;WWJ{F}k$nL+fhev_i^
z6qclu0*5zK1E8_(pDB6&)>yp21cIYpy%bkjdu8+Cs+n-lJ41UMFIqm|L~GvmBE+Ud
zNmP{MI@t!A1~{3#g-Bx2+vbd$F!$|#`yKh?I!Kv?dHpL<H^7-|MO|9eHzMfMd0_cb
zw%b$#<!!<e=hw0U$WuMQRxWtY(|K-M1kDlB8n!@ezJx=~IZY8R2yO?C?mhF-Ou8_E
za>Y`XxFjg9?zn&ep~-26h9-K-`kg#yjt7Q6=U!aw?)$5uFKW0)+;uT5M%O>DR%mtx
zg7-{ejM3yLplp9xQfd&E^VGvoD1Fx6K>jhW5uXG++<Viq<x=Q_ezCKaZfw*#o%G!e
zs(X$K)E|W(LxO<`dGeFu^uYW~v=38Ip!>ng4R0*b+F5))vCzG_s$Qx^-twuYNV)Tr
zOQUwbz{nZU`Em?fIiv|m!y$_NHBav!k@CSwL;o2$;q60dQp1n8vAKQh3b0G)>*lzx
z+pAwA6NG1%YLGTDs3iomq~i6hwcdk;tTcUSjYdM1{tQ?%6ZZ-kjVF00uex&x`?z>K
zybX|=twCOAx^PZJTX}h2?Tu(eq#IS^O-D$}F|(6{_t%PIjx{<G&h*zJ?Fj7-J&=AC
z2~4uG#yRR{z?O=|=nd07LGy}cpU%bzD!3fr-=1Lnw8sCTQ+uOHPt7<s4!}*6hjR5z
z{I6P9Rt2E>KJonwu5a)OnMR0%XD&0;Ya>^oK^aAiLtb%)YI0OR7E%~8d5|DSVOppC
z0>^Q;v<#dQa>D-4Q@H(-KvRG{m4!QZ^aV&qzyyZ<>YUaHj&Qq*oYPRr!z{bM*h6MC
z1dhF8F@<1@F`jaJSYc4Og@+>A!Od!%NZ|bo?Nt9w#ilpfV9h{4UAxQ=TAX&@_5mpP
z$*r4}MKHOVksZK|5G#r!)#Q7cw_fkCX$m3%=I947a}a9OpW*X~kXM||*k3JcytvW#
z98g#0uc-b0xdhj^ei|?*CRjwAB)wm02~(0e3LDcGTkb#(MO&1DXNtbgH>XXrFW*nH
zy|bZWhqCY3vz+0dwcan-C%G*)_?dB9Jc4OIWQWaQ%)QW8zw#PWVS%Cs%g3W8Id*no
zL-CB2{NtW-<jH5>X&PM023OZ%u17rhw`uN)g-<<KT8;86l#_knPVSFahSruXW9t$I
zEK5UinKaL?#UviWwjc;f^Ds6!yq~2kh{<W#^9e(7@tiFovQ^JEZLZz{`eZD1dV2fU
z?T2i6(a_HZkzfCXK1+>z@xIJfcS36YqV)b1H_KcYUg1#|eJ`(WLSw&_hIUtPU8#;f
zvy&CcqyHP?R62)Mw=3K1<AQ4{G-LwCD4EK~W1@53;mLLL&e}#}$X??mUkK!xX*C>Y
zR;b7Zb^azddgJK(@A-vIGSZW3$8}RL$=DN1ar3oIxqUKghIhH@!Ysv}Ltz;B0Jgg|
zAf_kCr3J_r9dKUH7vNgJJUdXv<XAYVOjax5zs>D#48f|44|V-`S|3DJ<_Oq^Qvg89
zgsLS8T&!fWQT>oh<I3{ZSx3{9-mm;()XiyXx7?u&=qsz<(j|g6%K1Wd*P7I-JTdE*
zRaFMvTDO$r1@-*9r5YSJlE3cq{_4o1z~_N)qR70W8MDk!dmPesWc%k^|4#tQ!%Pf%
zPb6*{%w`<P&!XW!@f~X{*sG=#C%t)^=g`(47Z;A#&UC=BL0=h(fnPyz`&qCGAg=yB
z4*tB7zrIjK1Ml&E^KnM(|B}C}$G7-3%*rBE#l=d@#XGu3!eGaRFCy8SHa1K)oZJPC
z#r~cKjb{5qvda0-_xCq1B1WJ;R}5{V1&j=R^z12S7So*)?Sl_fgEhY0j<M-^dv6@u
zO+q*bgoA!8zFM5bZd(8aPt1bu9S0<Dtd8QuQQ91K5FIVW&u$XgA``7CJ?)N#icXw)
zAMd(8F!+_{WX~itM_D_<J^RUcK=Er^z59U<4&dip%ha!74}r?9D|DRIfj~Ac=K(UZ
z3P>*P0#0mzR?$8A!32tIux72;Ltbp|>{C^<VE={;Z7(bfe}{%qLnJL+kCPjz^j25;
z^Ufax$x((#UV-21cGPyAopRO*$Dc^kyPPRoFZC^o^>W%3yRaEYhe$^rE%^#S15?dS
z@f$yoFXB>HuR6)Sidvi%`U}#m0T6;q&NRFGP%Cm}UfAc-zA8f7QYYs<HWBgLzMdj6
z2ctrq4J`gyws4g(Vh_t%g;#7LzQC?CX_Rmmy?xFVpxCTVY*J*K3O(+D;LPsH`dijq
z^~A$YK2X#|;<1+eOsm<xSWU3`!o*k{WH2`H*4h{OUo6m{8)uFvu&jX4v^F^>mO?@{
zHM0Xg?I@Qvi>8YSMyZMm7%!4<Nv4FJ`@))2uA#b@`>9*r{jl4D@bF}$fLlD)+=(gD
z|DyL;sVxPI)mhSsrIc{|X+JY7t$cXds=u=5#H8p;QO1EobrUEDq<)M=-Nv<`>h|5g
zf4BY(U_LgRXKqdwccJI=E2RAeGPMG*rqU<!WWrZ>b8RtKBsYs*XY)m3m03EFGmHj#
zPE+Mh?yOc&35bC-gT~drJe155?9G=0OkzDf3caO_=?Z=2^jQ)~;`dRTP{4hd8@4V<
zzwgUj=-QRg1CL&t`ZX>J*e4GKw9O_Tj@C5}wMJJ~?f+DAG+21;cvV|e<=&lYrO;Bf
z+pGK4a|!>s1%~ni*iK9(g`L>g7wcgpo`ih?n@U!*?d|FUrNkmXFSR@iy7N#;unm;~
zuNTs!v~@fOjWHc!uxXaRL#3t>W!9d}Qbjj+f?kxN9U99$UKWY5`P>yLhXRh9b0noA
zb?Y*DwU!LcEidmM7Y%RdwQRrL@5G(utvK7TyUBeMS83CDl=>vV$Wo%~G}d4lUc-2q
zm68a6PIZO3{4H^C#cH^;1ih)3477FS^Nm;Uz-ixdTO3QO(3GyGQmeqF#U&=g^$TF@
zTr-zw`YZ<|i`AzM9{<hb{%2@1Vhe&6je9*1iZwTk7U7V#94E{AX0<3gG#{N`+i5UX
zo4uOJGx(%VPE1@>)O6=G!J)d%WcG`ZQm(^SCqa8mIa2NJ>i!+&WSP-k64k4zyx5?D
z4Q!!Y{?I65O5)b|H=`6o_PC(n&5s;EW*eq}h&Qjl0hnG2`fSpQ*|XEpdI$r>{?re;
z^IKYw7&kE`_y`4Bd@B`&ST@Wj+tenAfnxAg@ymYIA{|VftqQ*$O3awP!BMK`mJwAJ
zaKUerhPJ6TiMUe8`(UA7%eL>?O6HKE9g0QG6Kgd1XQP7A=_Fc@CuJYMBgC!e!X#1>
z7??-8wb7u}Z@?X^_pwopT%}J$MYl*dUsW^|@^~PMCbck4V;xMEL@ni~Nhq2hjUS_l
zwp4W#>M4!7Eq{%VW9LeyvW1jl#QDt4IVBD*t7~+(VuO5353u$^p1A=*)W5!)y#*hu
zD<qcFc#ui*MUB@X>#UL)yQ?WRn`!hW!ErlqbN=Sr{5`Mn;*oezw_Jf*k?U@Zs!#{X
zcxn942mEhdtT`c`Ogj#XNPP;3f7~(J&Q0STDC3Pcy7`kD(`&R<gX`<<5%X|A+LyMM
zEMuhqnmYwWbvW0<q;e%(+*^Yct`^#je#zxkfauKCQKB>pL}2s}%d0T$Xr-ueJ5K%E
zR3d;<oud+x9;SEOxs*Vj)qzh5|0A+&h1f)Rdih;It-SNWma=JezU5Odk%eSenYM|3
zcS>&<Cl!GXJ;5b_C!U#!KWxB{7(W0($O{VhmzOkuCX~gz6(RW@L=+id(GqB+%4B&V
z`rKvB>nP|-SoB$%@iX51oR6M3R5`4~tys{P+I$QZ!^_sjhGGrHc2*Yb{Shjb#Q7|w
z7y^RC_Kt$X>-Z3uJ_@7ERIazRMe})7CQ#2^E$EH#ToJEv<*8qpv8eo?gphf_S-k*I
zfn|v?5B+}vDx`?oBNEb_w&sp(K$@Uvd@sa*|2BaC0kL2vFt6B!D8(-Xz_-Lu&b#%i
zN1j^&ep?DypgaNS+LuO8m<RA@Q63DQT?V79xSHh9KX|}}KCW1=$?3)a&8_#xAgUq&
zIKKJQq6!HG0ZkyriiA-!aq6w3&;`nus?mW`XQ$ACRj2J_H+CIYHhtEjd{5kQJ27Py
zxEO@ryS17PPGt4}GlKEgrMe&Dg<tnD1f~AS3dCr4x9BF@G}e2Je@S@AI%6clckmzd
z4p)#T+SC#te%<u14H)ZAB(;E>=e)c<J->{bPlg)=l+G%)+j?2DNDWXda$qZ39rwxT
zRFdF|bFMzi1whX+l<1@#z@o&^Mj87uUwf-Yl4&bbKNExzFj$?de>pf0)c2Xi@_D*h
z&F)zL5IAs5Tr4kr2V|%6C=7Q}33d|f;>h2TR;wFkUlI<KKHV+GsBq?FOp(bb`q`9j
zDcW6286=;5_oH)F8T{#}qBpffWp%`t1>z=Hncerb605f~zqSAf<ws?loOGKt$sLm6
zX<H%voo{WPXI<DY6@9K%LBJVA*umQ{l7R8O)ei`|vevweo;`{UH!zEOT9W2%O=^?7
zN)185rJ+%}u!20Dv~;~AVbB{G&6cjUP){t<c?g9rW-@myRA5%*)4-vifV7K4raL_w
zE*HzS&@`Jb-~0;fiYE%RzuaU>O-?!0^FOy|P~cnJ_!K$LW<L*Ns0zh&0O|`60Ty%P
z^Blc$6%aTwr%ec;RfWK_kBkY6HI6B91<Yt!oa%!#s^u8(@)VFAh0X8NE{6spt9Nqj
zCq<DS+HlDCZU&dA{IOJAm><1TIPE*I*s<fA;Vln<1h4L9MA-!8w*)-b;j`r`QwNsB
zU%EbTWjtx|ce6m8nwTuDB~V+Sn5N2gCJe+L09~$7t}#Mfy-BLKJSeUr>XqKuB4>`6
z0~u?Psg1%_Vf{J4mZc)@obcS;xB5v}8h$QP^k>7vX{9&Q+cUT+(-F>d1oM1JvMH?+
zXbG_hfXLSGl`Wz@HR1YZ;+(D8*L45NJYcV)m!kwh3<zQ?gvyyD*X(+TE7eJz-Q5jj
z+8;-avX!-_)O`X5<_Gt(C4!;LrHA|t-Gy6M!KpGJ1Kq%a_xTvWRRAF)FeENq8qEIO
zGiyNv5hYvs9-vr3(ih$eZ;A1>TMk?5$FUI&5$xGpEEv1lB-){|FA#XGv6Sc;IA#q!
zi&4AF7ZpyzF9^O~7O2SQna>>)E8PAtFe@f6e{7K6Yo_CES(iQdZf%dvZj3`M_1G*B
zS44vRc0=WJn(FSG@9&^2$BI}cTe5dVe)PWVy)*YSbDpBoS)ne-GxctuXp*jU=_RO8
zwTMWWs7fix45H`eTpGp#Wu09t-3jtd#Lp4H(Z%rDYTp$5=j$2Bino61(r%ro6fB|*
zv4o{4@5Jt%_n98=O@;$M;@p#i)T(z?6iF=N!*RnC+OJ0kvgaYQE<l3NbhOk-#tP%)
zG2{zk#IyUkCqJ-l5)uwXt?g?31>TY_7ZNN)jvjQRNtv>Di;1Pssy@2qaS1Uo3!|Hu
z;0U#Uz?w$aJ_Xzlcca8R-U`XW88NbmI_KZZz{m0+Tf?G2LG;fk-#?@qn@ai$A$6Lo
z58@#RE~)Yft}K3DNoyR{ZOL`1pq#T4SdfR0^d^VsT!W6CuNny?b6=BC<Y_5RQlQrF
z7P+H4GSC2rGKHZTfp8syFi)$m78p4<SVf)KNq#j^sZZ8tf?$kx{E-~{YYd|n-6<!4
zB2F)_nA1}En`YwR4NMqyYDG`)!}Mq)|CtE$fOw>OL9k#H(<q5Mdh)Rn&NW~2+FS^1
ztSuADp}1WigoHSk0sC3>u`N{@H=~W7Lm?mWQ2)G2&g$_{C?0*YGxq*B#zlEK^C%TR
z$*515m=^n)lhWC`_%}wUaEbY5jf&}TUUL$!z-1LF$VXO^zK$LO0EtoN%Ma-pNzRnl
zp&C@Kt!f!w>vWFyGvpv0fA@BP5*nAWql8_)Nj!5X4wi&(C=y{~Bzu*H@k2(-k)0O)
zRr%627<ejhIS=^Axr$uwtmVe<J4;T144M=qMb3)dN!*>d?<!oQ-DWn`qtYz3qlv?A
zJvkAmSzr&SYMn8^-_6u57xU@s#tiG9{oHpff<0FDnntcXrcpKg^clVk3|co1EJc@?
z69u2`JYim@+}Vxh@~zdex|Z?EA6P1*^v%3J3p2Gk`27<!d%P*;_Bw3fZ$e`<|51aT
z-tSW5?2qCrPQjKHaO*qKgByryeYH9%gMkXOnp~6hW_?apEcahcuXgvGcSfC%uwsNh
zMGIJ`#lF~3^m5wYy1J~4B2+*Bads++7IdClNugWkH~dWn2!BriH3orA5lc8&UCMgF
z_BfG1##_98I9cpRd_L1X@vz$bw&ozNgD%l--&lO4&7mrXE$%w?vaf7Q6qnL<du+;(
z^)o|Ucuf$*|77_uhth+adAPm)Lyt5z0{mZ!n{cn;>s=a&ft7W@>wVZ$!iJ+Ref|BZ
z1nZcn-+o#6HMchQ#NkG2EW8So_tEfI_^|9@y1f^_9xp;CioQZSinkn5S}WArVyQGI
zW_-=$47|e;U;7$l+pf9%5+}q*;#r`!F9_&svoBiMFE7{_edV6hRsY~wbP)k}9iq;n
z-uNp`rsr1EKQ}{wi074xjFR_!(arBLmIoDa4bx5uB57LH8Js-}UhPg)@#TL*jX+Hf
z{%^jmu^i1EpdKboIK!n-J8jOS77!f&08@YeV(m4)2h%}H2tHkE0c|J*J@4AwyhDQn
z9Wn_m1@saR1c-nyaWj1WjUGXN?;7QNk8?^39;{#*$3RyZRtg96HsbYqEOxjaaV21A
z(KCChHIg&}=E<-_YYoKKKrHd{?hruy=mG%3$~_xK(mzoUd_JhXy-j{V47-!Cu6zuo
zZojXGo$!$_3#cVIM~Ux1euknD#>)rQ_e_?bz)o=o*oN-QS|3>cu2Nn|o{BsGfNU3F
zji9OGr0j6nje|f@=^Ns&$ylt`lD!wEWVS=7k_s-1*Lg!PI9m<-5DOI<h0~1HB*OZ-
z#XwJ4*9iGgK|`|MSS7j$AmD<C4WP|K@7IqS5DRpAdKG0EzDy2ib&OlYg(|CyGP8-z
z@}JZ?#l$WVc7D~#<CuwLJVuBB&!x)D5hwo3h1m#TLpl@^3Yi1+1$bF9<rte{D~SAI
z?qUQAG9InP{tBnq%+i6NYsk+p3Jb0XM!l|!d-!L7L)7bT)Bn>V(UptW(sD-g3pc<G
zg=YqTpemCjul-9ojPIW@zGtxz*q0N*u~qVxWLYGd@*h@oBsV}Nd_ruJqXU>}zd5N)
zp|Cz;7%b4Al*d-xUjB<FF}+I<G5|>Hh#Q*PXnNn5GLwhws~2BC!0&cx^&i%RK>6!%
zQ!n6`7W)~_wZ9<;+m6RJw~Nm=FD6ef6t-tO@(NLERjGwNCPq#ViO?d?P~0w+N>u{D
zG{vTT(pd4PLLhK}h*2<n-4XNwCnABy5+Fquo?ML&hZ1jsRKne2Y&`(7odpJs{X%>L
zPiE+|DTor(pH6Yzf41DG`&9TbvDPge@eEHiJfT)SO<~;;@X);4D*MiXK6Ep+X|sL)
zw1jIPmO@Y`*Al3mdN<Tb@XS4~APg1;1=QKZrDbm?5S36uda<g&sc8i&xnmk!SEsQW
zUs!-h6nyZZccT=Z4Xz`oYEI{2Y|=Vw4h=iOj#gawyHPEaDJ*p{G)RQS*;4(pd$F_m
zN>!b>aU0n72Fq1Q4O(sDlVjAEYu*ME(cCnVxtNlZW}7(1MjV$B%;)nny_;ihDR+P&
z0Bl`_ALcbwFa80rOHe{}6+gmZQZRdR$U|JI#bu3l`U?22=xvv|&b?V~9|aqi2{sjk
zh7M~)hkWG5C#rc_2~e*~G}MVpmyJh_OVk|^Vzs=9OX3_=;0NBArgCaZ5I;UkW>FA&
zK-nUv1w_c~LA)G?v))U1`5>Qa$k9VO=lC111N$NX3uqKWAib!NvD_I!T?d12v5)^&
zj`-nNVpVe@<q>ZRuf%+aeBwA<52U`mn}$Dd5VumIxWZyshg_fcsYs3-t6@%O@@`CU
znMnuZ)=;9&Xi-uq|FpFsPhUqEK?eTn<$aFTxJz#^vX1Fcg_$((E4{f-t_(yVG&Ai`
z0c={LoAzR(vB|ehIc=1S-i?`e>Xps8F8xref2iOou&&Y1?8yN+0kfP=pQk{S5oohg
z1&h25cL1xDg9U7pF&(+0ei+G#OY&Fg%W3XhAfv;YXYAPVIz*`~6AW2*sAKZXE}Sjw
zZH3t~F6IV3;6iXLP%60i<q~%PD11KE>~37pG3^{abn8m8H7k@n1fZOpFTPn5K<^7N
zJjdygu_8Vbw;kTEb$$ZR5TuitItj{iky9_{QW*(`(KE;&QAI>B{g9mdVxdv5h_t&I
zk#B1NS^E--(`<vAWs1&Gy5&ssVNougYn77rE|=*YrO)P}|I_IxzXTQ2VH^2p|28gl
z<z-bqWre1JA3M1JyfVB%s!xJ&u{}Z-Q*hjMPt#Z5<IEI0Ra<#oT2K1Y*jXKtX0^Ix
z4Dmf0&5Or@%%4@QS1Bqw0KH#`sJu|=ZCra0DIaRgiqkaF4S3s#q^Q#w^8vRg!jo#N
z*J0NxQ84<|+v6prF$anc1~@Mv2^882ee9U0FF=`8bKH%^`DbLSNjG&sp$Fj=SUN-Q
zURR`gWr!1Fk4k;qSvqn)f{Xnv%Iq6z1-S74Of3H~s(&L?Btb$=<2|K`WL{_M7U{pW
zr?1IsQx$`L2$0_Gr<?pEB|mIb95$A7S8Rcmok<&;UUnkF2dX;o@>F$%Y=jBEExNsp
z2+V+e)-n~b67Eu;akb5qVC-3Rks=I27wbhJUpT*vBGG>z;}O942i#kZ245aZ{QleM
z{?}k{_XK;z4oNEh;jg^LA2QNk|G=Il9{^RUDu{8vVf!~z__l2Y_+P)|?|w|Z^lz$C
zn&|(%s`LY-D$&PbA*bURT=GB9&HVNrf&niXCDM`;2S`5}N=#7fa|0Z0!rmu?VSV(`
zb3aDNsvHexhf|`6kHdrQh3|a@96xMqGw$B=fzL<&fhKg10~IlVnwb!{j4yU3#EZ|G
z#&Dznyw<0|XV?A#tg;Nyi)LmS7YnxbCtaTEH1th4@LGT!TTU>Vp788KUVXN~*no9u
z@c_VKH#}@A(VzP=Pi$7tR{<M%Xfkv>pt6Wct!BJW2V{GenQZA6!)dDt`f)xMo79Vq
zRKEc6JL>}CnCLTHVRsj+ssK_!0q354P?o7ctp3-H)6nmv6a7(ToYj{;Hj|U?=`-FR
zg3uS|v2AJfaxjqFad5b!5i*rKxoV05A<cD}1AW}jj5ERrIS5);R!|Gca!!<kBhjqW
zzYNsZAOkhv2u-tyo$ECb(riyask)dBtFjbUxY6Av-c`)b2}x<0|8@?vmgN8zWf0RK
zUGzEQ!0irh7m#=E8*L04-5|EFVz2YeBYx9aXm(5^0Xb`8O9vcURRSEaNB5&$Geyb0
zWFHb@U`filduUY!N<-pn%xxk;#a6DN<f0D3yot-@rG$iPF<qE&S2;met5kE;?0)v~
zr&0pK;~5<E8^@O*3)uXPy#2gAy}TVZr!!OXVAbDa+<!eNYgG_ystk5LX1lCk!`N^G
zcz$CyhUcw*R_*A=zrCm!qE_%aJV6I1k^QFluemz=4P&Ekp#B`xG*=SFl}Y}{e3@rV
zRBrUK0~nYh#rAo-jkain-xS?|3NOPXH&p5491tEV0zBP(k8V{wuaF&>$A#CFk)Q^n
zha6m$Z8gP7_R1A|vUrILCFeV<0CHg8VvkvxQ*6;cmJufdgdTT)A*wbV`!tt#GH?hQ
zm`NYYz&q*?)#yAYGMyNL1Ew8%-qg2jUm0lw?1aX8lUcumY|9C5Un<TM#CrVn(f*j5
z^rr(*o3Qr3m3`)8@hM#aZ7=Vj`iX#+FR|+H+DOuPJg@D_$aavULf#(%O;!`O*#Id}
zwGkT@rSXbAMTo$&gxG^FHN!k5W%3fm`tG(L7-mG`E&H1Cq~ZrGlo|q@dox-JqbW_A
z-CNtS!O0Oxq2%x6wAgOcX)%8JKewz^MR*_{+N`uj2iYm+4MumfX=Z80`+EDzZDE0z
z+ZK@lWB~b%TuQNWmIsL2JmuKqvI@JOV^^v?RxbVqgw_`w=6Eak(_+3i?DF`;lgChp
zLK9k)LOJX&635--K-jpoSl3VCvWYZb-g!%q!*tew4A&s8!d!ZVuOnP_GpL8q<vYab
zG<}7-T3hXO?lF9@xZ6D*;OBTlpsBKD{jAYJ=@Zy_8~}>HH~ezn=BX|^a#snDcakz>
z9Q%K5C=OsJ;le+yG9K*#A{JoWUpEy76L<8mJq6T?;c%T5XV5Q`yd4Z!95x!tYWgkB
zNV;90TgELwLr|3c&Atn@j7U2H)c^1VTZmhsP^Ii;DDDXO8qG(7ar^)b89+EoM{+Z5
zb4fDv?%8#O6=-s!?+b3Irt<_gd)1cvbI&+k{unL5)f}b_%RYC({~lkSC3rj?)D)!E
zaQ{bNZ^7?@Pq*x$RkedShv?dWjyZz*96b09DlF0dCU6{3{Qn?u5P$@Zeu2IDUl2g4
zDjl)`u#HxA1*c<!s{_z^o@S0IU?G*j?4{uHw>>!KL`=Tr#iXR$%`)L~7&IwGrU5!r
zE2{^%*`S?VqH%<PMi-+iYijj(lRz)&fUV-r^F|xMVZwP}wHMp+;;!cR(A3;{Mmv}h
zg8KZaqCQe`GwUa2_`{@i8IXU%k$ywJp+Vqr%6bJTGyED$O$Z2%A`+W$(7HsP&_HqF
zDK45=!v{x+8h38%<oi~Wy0>W+%7bXoQMPxI{TDmRLo1t=6OY*#XQSA*x?`v465K{-
zW6Ms$D{aMT--?`~fm4N&SPlGx++}L80M(#DVv-zfjHat;`ZrY*CFu2l6Q_NFTe(t|
zX5%+vl;FHH2Ed%$$gLLidMgre&Td8OXP#Y{%2gx5?>`4`JSj<lTVyD*y3_a*7^qNi
z8Y?&)<nVY9MJ6d<rhs=t(UZiTB2vXM{h~B;z=?0VnoP~>XeCnV@(A(^M&+!00z8|7
zKRqfubspVX1uLre!sPKm6T7s0Bln5Z%@}21C!K;Rl%3Fm37X@VZ48#nHHbNl0!6Ao
zqYiD+cfj3@jON7buI-DpE<o=C<-4yO3q*)yE}xvHm{c6rV|SnYFHAnGgZ66ox5Czi
zYIzkUL0r@=ZGrS#fZXy41TD14N0q>@<Iigcfyj^qc9{{N8U@?J9i@WW>1<1<o%cq^
zc7Oy<5?Z?6Kk`XDaD*O?Bje|FqUNb%vgzPD0ehD%qb=8>iJQYm%Xymd%jF1*@l?<k
zcdiWru!iOWHBR0nqPUmfP6i83jtVVdpe|Gpr3y>nz#EprX~6e_55aTIG92c^NBz3?
zrB*@ON<OGKK!hKwvqZ%?+_6lDDD!Ct5D>KNIJ!1=NtRQaglfy|!BeA6{L<aD3$z?f
z6YecztSZ+Ez0Cxs_3$l&)u{e%p$<oRn2JxQj}T6YmsuSy7XjeL7S3#660G27gV?R`
z+$3Vg|H9ll{z_zb!lLW}D_Z2KIaga-1EuSK<(dCv+kh7qWZ)u2bD?ULDj!%5;?r@>
zsG&tfCXOD20YJ7!=Y>66(KLm!O^0NGXYrd)b_722rPkeE3>76{{EGz?J<-{P+!2gv
zewZ9qWcWb#J!1cM8_w66+K<79-9vq1Fva=f;3(khvA`%a<^@wvqpPi1m)vt0#a%Nf
zYRs0zm}f0Xj-kdP)rmWnRN$N`c6J_Q+bv&lsJMT0vm!rgo)=<utT9ml3dTO$wN9(4
zA0iO*lMn~HOB$8!xUv~no6NaOJF!Syomg{@KI^m4L_GNd=?g6-@Y7}M)ovkTH)Z9~
zqPj#0<-D7i9NwbF2WHwPMACu{L9fP%w5ABdPDpLjvWf^V>2lQy%4Nr4#_RUNdd3mK
z{`To{5^+o)ScT%Oeb-Wl+-%BeDZmq3=6{n4QHJ@#VFcw%remUCv(Ez%DOgg@t;ZWS
zE`f1$*vzRcBdcTFs&Cm?jXR9G-SW=O+4fv^vWC6^EL_!3fJbUVv~3X<pNa+NBU!z{
zg6x|}iM`037=3QYyDpOQSYX4~4;)BI$kX!T`M)VE;J$FCSNhh)kxvq6`}4g4AC0}Q
zV+sToRPzd}>K=S5;R@#4>keX+S6Wnvy-3F1TeCGg2rE^tio$z|Kw-EX$Y(nBW!-GD
zV{$_J6_Uam8o7R^z*Uj8B!pjQkAf3GFq@c>xcdhjljv8<9c<9{etL)@yxrAhP^NTZ
z`r#G`llJ*1<>u+6_V#v>3>m7W!}-xx+If?FtqV6uta)FFv(oSU9`jgsmhp}i)C(Km
zTNW|l3!Zxv5hyLN$N<#3I-@?@s_sGXg7OvPZXwj^#1qFzGj)+(&iJ2ce2iTc`JKSf
z;CQg7B_%b}uyUH;+!hjWBD)Lozxypzqo1bjeIUF0U^E&u@3hp=hE;$ru4rO&$?=a3
zBZMWo9aC(0UYe0ZORZdmMoajf`=7w1+<bbwm2K?2EBq=F6Dx;OH*J>4s2FVNX`b7!
zI(z_V@GlFA%2Edyi{jv95MJOfAv#l{*XO30>t{D~FuEJ#`$`dfu&};!QHCn|bDZ>M
zD;kV%Tsa|sUr&%MxpTiddf7U-_qh3sC7BQcNpOx|e$EHKA3?yP0>Uy@{!@FFJ5^Xv
zF<iIjr_$ou8s!pX6;(NbFL9(={V|-n$DCEyPbn{1{2X4sh>A#d2`f)_K4us@Z<R80
z;nZ;3sdQzVtSH0VcUa7;Gum17dHAPO_IAWPV4BYH(lwl%a2h+Q|NeXeu-^~T3=+X>
z3+Zo5xEeG2hqEz$|3U<w_Fyp2RJ3=*e}72JA7`WBeO3iu>ME<xnU{)uW3td%*MHps
z_uP;6tVStNCz{wVg0NFpO86NJ4!b9N-eWdt@DHa!fUcaB0Q?HaZUqx?Udd=-f`7uR
zpyApIsdJ*mmz$qAXvU<#`>gq5v=UsV67O%$lL1}oXI*dzyHA2ce!(i59aXkTICWF|
zU8C%{hnqbrHM;w}b^F0j_m>#<nPWqfu@Ombz5A8m;IB|fhpi8uR?^Fvn!-_SW-0&a
z7)Lw{J^-_^qKJm_xM)W;)|#(hI&7eppRqlNli0a91(Ex`GTN=>$DD5oY*nmPL*esg
zyk2iza3lTlpq`qUEn>7cSrqqZVZ;FIY8=Mr4gPH{(oIx!=<}*Vo^elDms5ol1w&h5
zt8yiO*GiD}GCDi0e4PeTcHkT4eK=$n#zJ{s6?o#5sUFt%S4LO2oUD@{y1Z-+#`0K?
z9X)w?A(~TlRNx2;!dbbmlSRK%sLV{<)v1>(uB7IhZZ|&~-QlZEwx*#bpE&NU6F!`L
z#?95!HTrJMu<Xd0A%WdOpOalxRfU4}^LS>_mQkeG4(Cg};JBH}t6j9Ae>$tqfIw5I
zD4Ev4ThPXslDlnFMR;s@!ug!}YklJOn@|{bjbAZ8bpjFRO!)$?1yxJp-6y{ci3e1k
z4R{XHuR<^@I<F_oVY1YxGKaSbvWF8Ex(H_oCVn>Sq*9x%`0B&%$6|Jrm7Z2FS}v|}
zxWauhuHBPZVeUIWTCGv~*$<kd*QIrel7XlCsBJ@`4}0x6Ux-^J>0GgS%i(gR990(_
zJRjl2F0AF`kUX@t+1IYcqQwqN(k3?Z4p~|?p!vt?i`$dFk)*4>p=I1UbA>}`MGFu0
zw!-R}@b@Jc#&-J^&_#!5SK%41I5Rbo%nvu1!13g(vVr<3SuDeUf9fP~TDwHMdj6Bm
zfIO_DPHodjOpBzE5L$AJ+i`<wJ^E~3XBm3seC+WXpI4AYPCcJL3B|~WUj`j{d=>N~
zW96K5#VDC`RHTtoIV?H^4&-#5c(G_}Eacl@^hmr>_d+P|2Fd81E61?0MqAYzE<W&=
zvgMR@liGiD0a!WKrR>aCXO6-af8FRmx;=cqy1&soeX;$WI!%d#;4|I}=P@?(ojF|@
zs@tWSLp9%}h%i{j9$EJVRGAj9EQ%NzIqOmXWQ2vZr-3}>iyhZf%u~CRh3VoF&b}yH
zO4h@i2bOY--IdwGcVz+$CB?86M*sU%r{5L~o-a^y+VKO~PK9k4ug3iBAct+gD{nj9
zvv)P2^c)50CadyNA;~i<qrP(LmYv1s)S1fF`c_O@^`eJAol;(3K29Nwlp#gWPvk~M
ze9qwIJ9ZaM76unh7tzLIX&9K3*>Mj1faUKIVQ8fEjEbDvMFVco;|L#-JqNe=o6~gc
zehw0;z!$1)8jdX1OR?A+{q%DiF<(4Rl0G{nUVFb(mge-dwRn%J!}d?B2qif6x2EFw
z*9qT8XFJ*62xux$=0mfSQGq|+K<F|vJFgAK9j#c`!VI|4i8nqV)fA!Rjz^;w3ii-$
zsn4F@1{P~ipC*!3q1bmdGFhRBXO|mhZihceEho#)c67^@+g#x|GD3{Xw=c3@X{N_D
zULH1>McY#N?;|1ev@u(oj#7hjyyQ+MbGve3;#Ut#s^_tD5NGEwaT`fnv~$G#r>mX<
z_uO8%k7;rqP>rSBQ$xAEdZ?11=$G%Krn{c`y5kI~7@<RPq!$$>gMx}Fz0^c?d6$e+
zCtI34b?KBcG;1z%T=xHP_T}+VE^PlLDkK$B2}xN)*_SLOsjOuyyUK1*!%TKg;Y5~G
z_MPkuvW#VHk(6cZ#uzh5#xi3pgRu?2dpe!-Jn#GDyubJT=X_2zpIPqZy1v(Uxo%Jc
zQk3}mu3e3q(oRm^<)m#W`h-MNoFmE1p7&!=)7XQ4V{9xl(-$|6Tz+>X-Dc{OJS8je
zqP!S?XYhcbH{N(sW}j~t-K6G!_WrK$&0Wmn<8+rFT)22$TQ-3_OsxOrRNJbE=rIWP
zgfy}!tsLfg<!KyZ9P`(kQ-q;kQhXFk_icDc?Z9SISN+2}dS;KX2;q+n@16I#EPq^^
zfzTkU&l6;o^n!nS)sJTKiq=ei@66rzqyKDx@~H>ZAE)X5zNx}r=D2N{J}1hp@mC}M
z&lVX}E~wvdFB|nzpp4wna?6U{K|e1^0+Ot<U*iY9rrOz)ckbz~d1nKW$JpT4w7;3-
z7y(OfX1`R5Nho|%?82>kZy>VuF6och)P=YY0}H-xV%KEU8S&5R;vC`6u72E>)vb2D
zo4lxC*8{ep0J%CX&8`{!IMe%&;x4O4a{P@3{`I|^DGd2#WNJ?|zdT==HCnMvP{3>L
z_oJ)^c_U{^$qB!!Jz{epf8rdaep_3ikinrUvsI70skz~+T`|+9RfPP)+piobe>_!|
zs!4S+JT~<1T|j?4bZv`c;0Uv<u#B?7dvBTTq53g4IQPB5{MXF&uKbkeGb>vkqd1*+
zsup@|*%(Yw;4Z!!2N@LC=|Iw`o6NF{s3T;##Gd!yl7hT|&E;<}C;gmypg#F-1vA^c
zCQaqdZyzbW@=EM3&p`gt346tF-#!PITgd+Q<Gla3{{%`fo*3Ee&(pBd6Si)xD_Jmm
zVIknUEK)kq<MFsXFE9V`!{|6yrR+bj$+O|M7$ZLEJ78W?5z4M)2=h$UIlwnerS^SZ
z(r|vhR{Gv;M3g{*Elj9Nj<Y|#u?~irhOk-JE4e*ElBnPFRLw^RL8A5-B~Hk*(goBu
zzVwzU%B<z0%%!n%&R30lD%wimlB@5QA|LXbX~;cU<)~|Zb-TyE>Sk#`weG=P|1Ba?
zOHZ-1-GBMrt|B<%rp|<IfS#hIzQ#JGFpQDWgeYGex(y!&%IMf)y9HZ-;X5aen74lv
zc;TT$BrD$e^(L12_!6peTinF(VHp7fT0{<TjhC8)F|sZ;6xVLmOJb=!mgw?0T+`aO
zlwH9b+u1FYJ%Tz2)cHpgtIVj=pdmA`EU;Gg5<|iP@Gd{qQ04nZ`faz)85iOwX0wxW
zvu;vrQ}{!LR<-qjl|PYL-mN}ANW9oeLx*S6P^;ZMr#1K9GHy?NP)p7npiz*$_YE{q
zc}8NKU1*UuT)^gSB^}QvPr&u-3E=7iQK-}GD+T00NIs`rN$!o(?wEz~Kv~aKAF_q?
zDog?C5j3}#9c-q%;$|RtZ+Q0IWwW8G`;~KANz9nPpcCTUpU`P44p=+#NQS>vJI6Ll
zAWD&Ea1?k(+x>Wvl~=WUueW^N(o^#mA?dQkQ~(`O{5B#!d}vP?pLufVyBZmtYj5Yc
zG;Z&R`%FcC17gnD4>+h7v&n+vj2|>$@>OtJ<I0==c2Uv(IDw&qG?y{r6~}*fjquFU
z{b*tD-D4ig>zccH^T{3UpOC0*663=!KHS+fmv4)|xY{9jq~kbu&6@RZY3X$j3`nFL
z1=h9u4IPu>UCu^I_b_P)-9t|ZvuZc*A)mcUR-4FiELxkj*TPO&sTP|kuvzz>kRPXG
z<8&ELZ?c@E%i>EFmj^)~6O8*qp1t&pFDTy*Wt@w=oJU|YSXd)hytL53)|AH0xU?Rx
z-Q3-Y7+odGY%MM*uQs=bk6q_F*5C!^6qEWG$3k}T=`dV_o$-lf9$HW0yAC?RLm{h(
z`4>0g&W~#Rk=YIuZlbCisrYu^NpIUbnm?eH>_=n?X9+ZD;4SRP!o?Ew_y>%)bl-g5
z;R4tk#Y7a6#HTz!gLlITj<Q`zRgh}?XB4GG=w?cyprtRUr7|p6!pExqhDqW$cpEX6
zV`D^ho0Aoj-NxB&?Jg9iCYAe!Dh`$wb2dK8c_!e2xxRaj^OUPX^aNf8X4&UwVvcF_
z$61`oYuozhTYAOkn@E-9WB`Edn74+xC;+T0GB!-Oo!A@zfJ~z*-&(89MVW(RP{O(c
zVZ(VXrQl}e_!GGD52$&;BY2aig0F~s*Q04Ot(<Q{)wTW(fpUI8WvbDRavvRtWE)0%
zf*5i^I29$i)}1m;`OtGrdJ}S0L4Uk-+^3_b-T!p^+kw^YLJKCjPO|~QBk-Y#^)>SY
zj@8aZtP*aPofXV!zick<bnA-LJUnkPps2uIUfA#5e~})a=M1kEm=>ks>dov~``0JR
zI8%#~`RLyBcL;wrx32Cs&bpM`k*1o=JPB*}oy-l8FGnDv{VhVh#k<|^i}o}4roGI6
z8scB^(UN>Ez36T2h@0r@Z->72D63rOgaxvcxWpPwukg8QuJd?KcQQ;9SBs{Vh6-*N
znZWEs+jWOb6TukxxJSL3pN?%ZECKVF&Sks37p}8Cg{`1o^IH=)Ffzs%jd?nrS)k+F
zZkK8yVnTG&>=vP%r_Nk3W3V?<HmJ4R9v!E@D?>_tO1D(!dbH<)K}2k|j;v9sY)pBR
zp1PuJFS~&T{;WWM$m;-UBUjlw)qIA@im_w!VtVJ*53!A*ZLf<pO)HZZ$luf9oyG%b
zr<U==ndIHIm$^7_Vw%*!Mi85J&BokYP>Cc_!@vTHwrU&-OATEsXC#7h7PQ$;e5Tfq
zZ=wS>2MQtCaf|ZbhpSXwzBum9v>15WH~F|M$$VRohnmCBAw$g5)?wF>ggtCs!#t`E
zPE=(t8#jZ$?RJ$Ln80KVz}E$|%`2xj?6I(CmC1Ik9ncw9>4R3~1qaquh>o}(BrJgt
zT2&>B^2{%F%yq-5q&sok1jG0!QQWSi{$3ag;l(1?<1ecUQY{Wh7O^vHyF+_&@P8nN
z3)O)Qhix^(=iP2smuF%Rf+PAY!M^q{s>i}(XHiX!qmQx>S~DkvYUv;w4Gj|5j7FGq
z?R;(cIm144Fdq)CjQ<UavlDfSyFO~g+}#=yC`})xWv!2?vlIFv<_eX4^IGq&36^bg
z#7)NtD+o2esC4W-%t^^Y>G{PgrsWG61s96G6?VGRNMnyZa^&r7Ki-ADWzW`6bs+WG
zCBwGLZL0IGE8FvtTSCBaJ;)c$ZHXt>hYFq?uKZe%l3WGRBN;ungkCdxt_9~|t;Z+Y
zD1(Ml^3cs+j#D-Z&W3>>qHd>s-BjUx>ZNpj`Zt~Sm*QNmqZCNOn3};`JJAi-nk70;
zQ`Zq6?R99QrnaY?bV=2tos9z~kpY>Eoh~wIAWiM)I0V{8RZ831K6JbCv}{*p>)hz}
z8kGX)2~$3)IO-``QC`1=IWctnnNu>AmjjVHhLLfra+*150zB7Aae3<Wlc%AZ)c#j*
z*HaXL6KRccIpeVXtgxrO!jJ3B=;T#U1&2Qz+gDLg^rhH|PK(R5|36L=?ZkZ%ow$iW
zc+cf;YHl{39!5XOY!P1+?C_!2<(qJO;O*9}>$mZ)&F)3RF%y~9G0z2T8?e+;R_ntP
zL4=QMRS~p4NszKtD*>NLLpsxkJ($py^8F@;PqT+SH0HvMEVauvvCSp2Xz-9Q_W}}X
z)Ycnq#*=I~la<$1tGnJ)O%eAbtLrzHs~B@!rr$N}rEuf>L)_usNF2EfZibLEhO#|I
z8)J6DPjih{`8+S@^6xWlLC0-VI&hjuxaM}Xac8@#907O;L!~q)kIK&6DY>2y<Mp)Y
z+T?~%+`?k_z)L^V`QhrBx<{Vfy_N9^fn5VGp6S59!4|t@4)))Gj(-_z>Vu$o4k3^Q
zag<`Y8Vd`H?Wo1U$pQ%rqw!DUP$;6J^~tDDH5xSfWS#yQt2z1sv|e@G2!Y-UO7Pge
z?E0l$)GEm?WNK`xrLjI}@S)U|Y-}U!O=Ws23zueM58h15Bbz%3C97nJpS>Ht8iWq8
z+)M6Oo-jp~WPc9W8pQJVz^whRKQk&;RFP^k8e<_0e_8t~)uV#BXT7Z|yWZ#>wCPLn
z+9p1Cn_62OMr6t@c&!s<7HmbQSNv7DDBPtjJ8hL|CD$kg740selPOP;MZ38-m+AtL
z!<quw*}vq-qSFH#B5mC)rtNphRrq+2=?z6?$X)p7N^--YD_=fvP$chuEns3+R$;ez
zwuq2kbn_m2Q04lqf$8by7HA$@1^R=x5q6Y`g~@|+4$7n3PiLUxp%HHCdZy7%Mr1y%
zGl|oScjO?zQr(e0Sivo@Y@Q6;?eJm!JorW%%_q9B6z-KwRsPW0nO2Bi&czJDi2m`T
z$rGP(Jza;*W!WVbb9&Zyogd*R&zj0MJ*fy-emkJo6reZGROjozO?DAntdKk8HgKJQ
zZWiSy$4_Z>etFI_{Au7hg|E7aMQU7*;$Ok{O`2^5ZF9M)F|XRJ8(F~`m27Xej^^>1
zvCo?o1H0AZWuk!9G(Nj?maMXw$qiOkep1<vI5I!fij2{9W#xJS_xi>R+9J!4YRG1x
zbH5zCVmyL&B(n^xu8GZQYU}||tUYm(M}Vu#%Nb(%ta6O+RYUad*KaVqrIGW~#nz{y
zPaKZMTncJAN+2$OXL&-D_F=8tF(r+^+lhOv_qDg14PV0~p|oBpn6LueiJ%&$GV@6z
z|8_fa>u<#Ifzsc^)5mwOW4>+^VXU}Zui=W1_U;oBlPT4KVo=`a+n6%9ZW9024AHYh
za#;s#rL0#`!eiDW-9y$l2;N-HfY@^YZ#vS^!Gzy^g+oS-`K=Kp7Ax9YLn`GG=Ia)D
zY9z-S@fPuvU;fgKqyrp~nMt-z31wwg3!C^~zUXhtt?g2@)$Q+A+S~SW|NKG#dTInV
zBbk}r{jxf#{oPxH#1E2eOw9X<d0!Z0LE~oMx2=!-(_1&AnG8!$&3PKpDU|}TI*p*i
zo`su_tLLQl8TDyT`;Iwz(1%sYEutBj%rtO9=wi^T!D9?t+Xd$OY9|+hx-YtW2Ptd5
ziv`Bj3hOGSX?Aw~4gO1lNn|Xkt>-!sym?~x`}Yho-7nhVk4k&Fd1%1=O#Lb-h@o>>
zSmoMR!i`(6LJJIB-k`kN6rSy%L<ixnmswm*O4Sg4OH*y<0zlhzVx2dSvKwY}vsvX^
zG;}D0?@fIU_aMJg*xLOl3eM&D9L{>$<$;rT?oDkqP`c)tlku5kTdsW$j9LNPg)&i3
zUPrX@1+HOF(0Gfe+SoTE%e?ftPmy|h_k(*ch++Ki@FV2<YCbM_U=ZZWnTO@3gKrG0
zKlhzmH%`G2M}j`oQQw|{jd|UQZ`y!e>|hX<mhWYN05IOz>2_|2Cn&qA+q7u({^UHS
zFz)c4UmPAZRw^(gB9v>Y(V$GR&q>Ibisj?R%2xB<8$^(0@gA6-L2>FNurpInfeoO9
z57IX_=27lyZKeyAAsoio4H!AI5k7JT2?|!BdrG>G&}i?ic?kae@xfdw<2gSKX6!~O
zuXMc`zr|=}2ywBkYg+>4w!7J23{04cu`M!$T~Xap6}NpZub`|`SL3hB*dPx_%nm>F
zhkTJ3=$EQkO{+~)8Pg^Q-?pA%PCw;$<r<yRal!d^rENqe)ih$$JZjwyMr9N}*P9#Z
z+EDYsRAsmJ8xM&<SIL~d^`JUQe~~up?09moBErwj&Np>GZ+{z|L=uT4CO`Q)ckieU
zO0EbZJVt+sHZxQVllm^}6geY%e84S=2$!0(4|-h}ty`9_xk}_ezy%9Jcvym@PUeI6
zG!?=nUSy|3c<(|MtGTrY-}IT}KZ*zw|J`ikVF2ft#nz78)(Xk;oSbbi37C=XN-<MN
zly_{W=#@*&Vqmi<0r6&^*>`PQPHo7Pg?+D6p?e3-JeKC(!jc-j<5kY1TgOfbY57^E
zm6+bQ0jMR$9{5RlD?0eS68I)VHOy?v$+T>)`8BFfF(oEfo1D`tq}ZZEBYRJS6eb!k
z?D{_ul!MvA?ofye?VO!(0$!Yj!<zJr1|;3W^B=tU9e;gLvs>rkLt*KMU>*50=O1oR
zc*u2Nfw*%AebP#N@bf8CA7VYy?0TMY4Wr3ked{l2Br)QVY;h!j0h2aOgsn=)9O>o-
z1fJpwBmzb=ox4ty%D&j03g9d>S`dPv{R~0#hAS>__fv5)?l2HN*J#A=UXhga_XxD2
zb(p2gLke=qRikdaWo$#j#E}_X<iZ^EK*TyUuQKX6KFu8RuxnT#WvMd1%-S~LYAceJ
z@mQ~j6uVuK>3x!=4GkVgavJuXWczL8G_VK>l9vBgDaj=-7%?fm;GW=THZ<J0!45F#
z;7&ZXuhLsX%&W3VB&oT?yREmr!YiuTk%3NI=LIPmiD6pzjeK2_A+b0=jidkt$>fn!
zs4KOJf}bP!hz}t7?|M%r$BN6R+3il>E47nZ-O@>28yk$p$$pjoPgwq=oMwEXH+Qfv
zu|Iw_Gqp6>^K@`?$roJ~S@UxY#Dwbis;1e%z=?3rdcGO`?l}1;ExaNZ^yMlzKtkzN
z4!6n@)Xl$ieNDu9A??Y$V@MqlTc0Z~+1Wi_X~nh9BlXb=C}L(Ns05!8&#UT=x0A}A
z_Ae;MB*wxpI`WUzqsPSJ=5xl**Na~aYClqWpR#OVbnVKWZs%KdlaG!hJJq3@%p}aj
zyg}RETi$KQp*?j%22_Rh@N^G?5?IG}?grGYjZIx6SxM~Ih*s@DP!?xdo1{S(%x}kc
zsW96L?#RG*4sprs$>=k5)dk}`GXY@*Bb!XYBg%PZp__S}2|o$tx`~xF%pk(qtdxv=
z`nZcfy*86x*$9FguHsAf`_5C?ADQmls$%9f<9OCCvGPrqm677*9NX{O6`fC~(Q)>E
zX(xq_AKd1=2#gBw!c~uM@#K`<&P|`X>BOjCa4tVOjtqbwE{YI4MiceJqU8Rjms=bT
zjSfCbRxo;D)9Jdv53S&U0(`Slj{r5Omc)&Jq(adThMYAhnMrJuqH7bk*2U5Vd%~YU
z&|@=hAE0sE7in+)cQ^jm|EY+mS<k%ZJ&)b3Qp+1ju+qEoU0A|=JTtob3x1ypN$X}A
z#mpP=o(Cd%_i1fE+jJ0FSj`%$vWAxX<%j?EHPjM0t?zV61~A3&1nOWYacM6n@BGt;
z4>Hm^`C7tJVtx75K2C;ng9Z3-Y;MnA@Ar$Js(+gvPz)M)go9E|P77Srm!@MZILow3
zF{sT5%t9YD)5thLcjVNA*tcnk6;BuPuTm7HM9owem2z+Qaj;t>4fc~O0@ap}o*3bX
zlJXHg{C5{myV%k?C@lM#Q2#AOewV=EWLEw5aCMPM23BQb`Ef)O+%G6jIXQTDk-Aw|
zWFjR~bbr~!*q)o0qvm^ULE)*BS-lxk0d$RZh-&zG?cQk#|DwZ2{FROYKWNEwNvQqq
zW7>5N^mFeg>-ySsvc-ha#$Z%Ko0#Ra=T@RFabuO;=qO8n`9i34xer?e*O+c~gOZ+4
z<mDob?mM2&=V3N(ZMEHz+-Hg~60iF@QZ>y_oVqW5C-Y;Fcv*6db;ScINtt42eky3#
zbSRR^WZbw)dSkId+HJ~T2GDe`4T;Pz)T$!x<(q_fTrVg>qaSSN2{`YjZwbryTCw_-
zKaBrmXrdq36hiCSc0qZiu6daj=jOAX85pWux&x)S=IWhx8+r>0Wp{~7hKx^lNOBlK
zsA5M>4bH^Qjq;{v{gi^QVA`wkF1<jVV_G5)>}YN!E}Y-%NT{$$w<{fgH<0(G%o>ZX
za76l8#`p&9y&-1$;mNKRN*$i-l*O*005?J=WK9G?_W6W)wnf?%)!Gf}RsVHe6e82D
zCvDP$m3?kif0m4|u+aK9UATLkQ}HhENg?4MKwx1KyGpM4Na9o$7E=d=S!qCv=EVIV
z;FQNqMAOda+c%kJ9%K8xK^jz*)>QIxSQ%U;4m5M_dpDixPCe+y5}tf*w+g6mif_@$
zsHU`Wt$uHYdz0hD?HpQ;PO}h*_tu&7z^x867LgO_cQxRhILK6;HK6<!GcTc3M$Zb?
z)NM|HH!WCa?QQ|n%4SVE#qmSp9-x|r9b<v`Ra==#_#*DTmvGCpkT93<c?0kmF$?cu
zWv1l83!Wf$*du2sVgbzysrmGm{A`W9PCJC!WK_|Bl!18-W<xK%4(xzUdtXwAT*vv7
zxF~J$JBKnu_qpu?PnKz1Nf$>K^0{@zu`Cij7gZ$m<bnl#{62>^Bkfg06irXjyTqn6
zjK{--2*Wi=r(F~$>TE>`#|3k~9_EvM8XhT>x4tIo+!uF<hCE6Z+<lLB#Z_G-E5DJ5
z1EIQeFCs&18j?}&l)6r+jnveh_8JaQ1mrN|u+AiuVHP7RCrCAaym7hVaD(gsgBw?O
zZwR~x@}*N`T77VwJ{;ihvQgRz@qfg|R&0K?8&_Afm?&Hb@o>oy7KPM!rR|Q|oC1~2
zI;L_N4}JOri^YUTykt4x*vNmi)zHNCY9{$28%|bsC}sV8p#$C6`>&3q3y}%n+Ij^y
zhy4zT#L*GL{5#DxNtFD6g@b)-ohjaQS1I>EyUDqr)KcFEs};A7W@p>i@ri)!iDe0C
zlk^MQLTuk`69#eOPuO;h?1Z|EtFp#Uyae!s3+Ep!H(i*et$2XKg>}}u^H^O~>3l8-
zlHW2Q!<CDk{_Iy}4o#R8TG)M(B|6)Q@OG?Yd^()0Ca|dd<?}IzcLo}A&I=OirjTnK
z9>C@B9FbD}EWIdS3A-B#(4*@(dxOP=g`1xT#Cmq#@>_>WugT41fE>?0a!o*KB@gw6
zs=7i3i0=6f-9GzO#|cqDf|f$HgB)g@ZBk|MJdnocxqUsS_^dk}Gy^K{NDUK>CD<Gc
zWsRI`F>EGnh40Tg^^U)Jq)=?eADrydi1m2{rjoiBhj3$DE;MX`uB<D_C@Ki=dQO&G
zK!r54YcHAHeTf+!qP;hF+E%~Ol1^PisAP9^QgxG@Ug`Lt0>$;YC1&}B)rMV;VuF(j
zhDR>Q{9gzoO*$o)g>qZRd?HTCq2(rqSI?(RPYb)XZcc%_PP;=@>&MhDj`GP<uOHg;
zHkR!1>++*GGzymW8v5hp95aiuDkzrq`8SN@&fB5voBChz%GMkzS4ZpzL=IY=q5%;S
z>9Q&rFzPh93^4W2eb6eG$xU74w!RSwtBJpRPuJ+-?AIH5&nTJFq(5nv2Pi_Om{pTb
z0|LILxTr1g`T9yCf-@DCCCbS@;c3KGj@ASQe}-bnjyczQF#T?MWJ8mM>FwN>E<eI^
zIUlR*J<<s6`c2e<fCPC}%0<$eRY{ZnkZ8!RQyn!zR|eBv8UVCI5x3uNxrz04Rq*k{
zR+&e@gK6zvs*5kcZW>B&L|FFg^chPGE1kdBNLp<SyDVR41P0izhXIFks>vBpVC|6<
z&}Og=Buxxa6*bmvJT`rtK)jy3dIZl%AbRLMoOvW5a{VFi&h7^F8?kag#_TAxaCe$>
z7`=dJanr4qz;BlXDr+|Q;a+(*ZYTDGe_f}SEDq8sjZ=xUUOYj%AFg@jvhQLzOBVGv
zxNO7sxe;jyK|hzl|7=C6wv_wQKfH>Dn^JfW(jmxGNXuWU9RH#u-06<J{`y+qiJrzs
zI7J2@y74z#@vj&C1&#WD3g{RA?*ck|Ni#4saNoPWtCawN>6eVS06u1Dsms3S3ivv{
zHv)e;nu6$0Uop$u_;jhX^Y&k?gNE{QD2tEhV!-M7b*;zJpfz#oX43jOnP)+b^+hK4
z7n2tLLEjH#1)$JobLcHjW`V!NX!(B^qi;Gy$AMI7Vzk591f*^O>op1pn_^D43jvo4
zi;pN01R*v*v;Z{R!}W>=K?nVv9>9LfEgAFb7f+`;1zYa9rqb<DSJA2Qg*vJEDVw}q
z<Jn?I*q-CshYPa(Va_x4GYoY0qVAn$;L4{MK87P3&ZB<ugon?QN_@TQ)&V=&$A$U1
z>2dRXf>k<<L+N;tZjO6*-5!%)r9%-esp1CU-V$!^(IfND<*o4TFe+er0@r>GL^GD?
z%PVpi@mte?K58p&RTr0*m_xyX2HmB)InSAx`Ar&RMP0sa-9CAX`ocbd)3EX!xt3>P
z-1H|nz<NJ>Qsuh?Zc`pZ1$%R<tmU}MWa8BQ%nBifHO#A!#In`_n$-EO&5R~>R@p3G
zi%8vhx9elZ+T*gIl2rVoOZx)`DTPw6Ab{ICf3@`kAPVUfrJu`=Rf?inik_%g<*Hf^
zo2w(F-@=ZHak6L7B+MKg=h;lX(}W@pCBQpa5@N(JjivXM%}xU}Or^yhIB)TO#zFQt
zwYa-P6^nACfo>rvZzM7EP4ShrYZ^>dSuID2Ow5T37xdrK0}N2&l314~;9U9#B0yyv
zbIsSeQQn0imD*nh8ra=<cbW^}ZeTdiTYHh)kMxd*4FS%m6zO!iqbU(;u`7J@Zglu_
z6rKL&k-8rSjcGm18sPr|tbV1I-A=Q=E5z?@j0ZabI<qr`S0*++cC5s7ILxDmMcdu}
zko|rgO8*o+Q3wKb<Oh2u_6}dTDr}iK|D5zMXZkSAzYGY9d(20F!ktcdF0q^y1N3B=
zPR69;eVdORS1-dMjbcp}wuSMgLtD0u_6j|~!!(VsR}<lnzpBJVanB~kl6L?AW|!ZU
z<_(BrDUS7O6Xpy+>wQndU}o18ofmjK9ob>Qf-Td2b`Q0EN;SB~{Jb^wSO}xD=Fs-7
zed?0hAIvqqq!LR-r!W>@vEmB(W3L~5&pWClq(cYk!u0Wq^}mrpSY+Hs8;VZ5>X~yC
zMfPa_(RB6_^kMaFrXFyVgc9}BQf=Ycv$^6d?}z+$469!Q(#mjmDi<D?f~dx3z&-Vn
zK6B9{HJT4Ue=i{Jo-FUM8+&)#JJtwxGyitI-wrOE6L4<ySfOq_Y1+73-6(}Je9be+
zD-KEm<3>3a&h+}H1!eT)NEL_wViu#7RQ4>jjDpJK=THf-@&Nd9;|V#-PsuBtvak!=
zXMPOko4A9gzmJ6ZBxZj%3=U2^zse5fy*IU++b(8A5Wuy<rU}&rP!xQ|cjQ`>Z?0#L
z`9k3=(XX+-s;k%q9m;K4c0o*r-{8i<UGeXtUskTXRI@pHDci2b=NcYo{J=D%<+rFk
zrQ_T2d<xWfN^Shqeul5WW;EmX_>=c-ppdj;BRU3PvU~bc!L1u9`bM^SY`YV_(*jK4
zaoADK8)kPhC=;a_go^WY_Wb%PdTV*u5W(V#QqVyQ5(RQ@-=du1K!21N_Bj@oc7)cx
zG#XK~=Jh|&+4^vLCRsZxwB)42|In0#WP#@O_`RLxJ{QwpCuqkMa0Lf|TG)9xMk@VE
zqt;Vg|Do2aJv#Bj7;STE#LLzuOM*!{-=Lclp_Bd(-zMYD(My-}yp<n>d|CxOV>BAU
zgZWa9twU$ftA4-e^W6K81QYyph9jF_j%di~N&MyEvbYLRBdL#{)FVabU-L@f3J)7~
z6ajp=MuR9kN-c=K(ei@<KQ7V$Af5}^d9t9I9tQdc_Wa+gy}0t~uV4J%=n(dx13?xi
zGs?e``G0mVtk?gZ49EM){F^V@w0dUtF4?W=d;E#zmz&9z(-RULdLKMR3akjD_M;kc
zniG|D)d}F|3sNS|s6Q@2acK~S)Bk}LenPK%Woi((^k2-hf4frBzxSM=R0-dEs~<ic
zCCaDd^DYugSNMXQWbk0+(Wa_(!E6V$WW~C*Z=anuH)g_oYD$^c#C_+rKs#Wzh`P!G
zMY%V|t%WDgZJ-hbyPJky`3LQ`Hz`ASb%x)ki*+juzvf5G)Z-cGf-k$v3+pi2$#;qO
z_)q`#ogYu#diD~GY;753#q5W6!n7`QUV_jj!MP&nT<agoF@MD70JES8EdOdcBk{~3
zSPk;@x`7C-brb*`a?~+q$Pk!WmfO7@m<C-=ymf43Kc}H7q?na5iYhJEFpKP|W=?h8
zofS280Caa(pP$X52DPJ>ah0Lv<)PS=KMHCE9$Kz!9B3PcWtW-|g}N-t#C{DQ)iNFe
z+^S92_xlYV(h3&pxP(-;;RdOCvk&W2=8)UgP;u{KGd%r+ekogCINIi#S+Y-{muU>+
zvZVHFSgKnm;JLn@Wn2~6(<AM;TY&e0F9S6naJ$iJK3C5rfCDrPnotWEieiGc+KjT~
z**+B>GkmlEgmBtD6Km0~u4MLTM$0DEb4COvk?yzJF!FC?Y>`RDxk7W5@7XFpRbq`@
zyXY|+?77+tpF$w-1;rjjgxRdfs!|RUIXi%A4%Yi7Ll-P={nExKZMgVMVXllwp}ls*
z&G92#xAuXkVP?&^-<&$I4d4F<L0Dl{n4}W(nW__IRyeFvA8PT_gWI!N_Jn6sn~+vJ
zYSag~ZI|jAew1d|)0N6kgKttq1l-8Voy%|3o-vNN?Op;)C>0XIv{I=5?XLX$kN7$l
zm9r-~ASv8AxBq3k{mF}dl_;)|0>!5IeRr)@Kj}sWOLPL}1NCP1pi{#fN2Is+yQP>e
zs9BpFxO94%<wxno_5J^qUfSH?!Y!w{Uw8ZYrPW@a0O+`ryoXZv`}{w_rBD$tI6N{|
z-F)z3EE&Ei7OdIE_e+ufPZC$n@#K%%n|b2@UVE9WtO4^UCV!@OiPC)fq)<&W{t%;L
zT#A1`lTW08^Z0A>Ao9+g?q0x+s}ME#rt4kY49h;{IZ$o#sJ@Mfe56Yb{n0BA;kwJO
z?^^ntI?0m@bTi8t4%8>tfL&AIIxtO}F<5|hliqJVBOhd0=wC7nzs4FQb-IjijK*=6
zO{k#*OPt?3P^WUkJr-0O2jDMXGaX+wSqsbDT8&Ke-U-lJTkA-r`7<#+U=-X0DDL+4
zddB-6T=}X4LD&Mn1cLfsY$#9rPd2n35E5fq8T+vf$-+X-R_cOX_XC^K(|E>oOS>Pw
z-wc?ap^FMtc~q?RxX^h;Pib{LIN3r7Acv<R@o&=#I<>9KJurM&9RF>=8{e<Iw|O6c
zkk848sPw|_Bj2jz_=Z45$&7|u4T|cT@A?M;lW2p#!Ay#454udR0=4+ni}&p5VkIBh
zZm%9@`W2=aR>r}x(CxafT$Fag+nL;s@tz(A56ELXW4OpTmDj|=eq439DPnZ+^@FKd
zCXz3(7kQs<u6Fm-7i6437dqo4_FShq$)nryU4R?zHjCVVZ|2F7&6d1dyjpJpVQNX&
zwwM6o`93Ut<EAPgxXE6s7*LXXGrSk)I#9(uKL>Ox>G^)Uy6slpD%+i^Q7`%XRGnG7
zWa`@uN|~#`2D2eoMTF{_bIzJiWNqeA)}(0U_%Xw6((mDGfTj6d|1w>5#4~{tMCX>e
zpwjNa(^4@uRFQVkG?#}PfaMeH3kbt8<Rs3cDfccwh)=1N)Myn%#mwDszl|w7Pe;R{
z)O5UC3h6~aV-l)3e+Uujw9D@|RO#LJ4;P|)BSX3NW6HmTO7*jk9?g?iJch!U_{)^W
zd5>>vW(d)`Ol=vdtN>E+(G2hykGW>?cL0ihU{OrPL7Z*3vj}O%kLHwPR(Y)b#il61
zr2>-=YP{rvsJSa6HsYaHz2=YwnB)dsrEX2~YWKz?&=QFpO00xw$D%5#eio2;NhLE3
z)Y=&7oJU(U`Azv)jMXFoPSeYj!us16tb%G;DSyCvcc@BWnS78%^;nkJk+o*c@Kx$d
zzp?GS!&O84RMVn+n<uD4hS80i)Wg*2t>c@n@6PUX#+x@!l(mUL*p<xWrT&yEpZqz%
z%)D2!uhJ7CBEuqLJL=S87^fv^-m>aS%8p`6LM}k0TEvb423kTeLEO;rMVV!C?eP7!
zyzEYa9XQ$(VEZ{voynL6hUBVR!36H-y~l$c)ti^`DmJRc<IW)h*HvEGu}W3qX}Om+
z!zJ`~6uP4x;CLoALJk*cYRkx7w<mc4Ke#kdnKNLd3}xst3~7avBK7WPDU_ae!Ig52
z@7w@FPd6j7_{W@>yZzWfG6kTo_<H60cS$(%p?&x!p}YSj)k1i&61(^Il9ts8p-H+Y
zN8m=Gd5s>io>0qCLx}u6B^46$c(GyVR;<OM^X-tjOsNGb@p|`RC`HFKdvTa_jnB-}
zNOnjIj+Ti2ocma!cSq|0SHcM2wI>9_{zE2kkJeKm$r(uhNgyBd)+!jXj)O?kGhMV+
zpL}LuJgb*3E_1`8jz^BeL-rnNt);rq;kWS{0m;*{Qfp~AK>aR+=;<1B7~F8`=@f=i
z#J`9?JiO1Zl9!-sFMYBu*><GS#D9Y3z8d^2{&hG3(g+P?P=J54{8ON8S5NwegF52I
zS8H;du-`X&{k@{VKmAv@uQNNi5Vy05=#mccrU*cX6uPp3Lcbu*tyh<kD-2eL#Voq1
zEf=x5&wHxbRvLTU0<<+VF3`aXk;kW;)F%M;E!IBtdCtC#CnXukzVwwEyaHobo%!8y
z^#7WL!t55cIM2VBZ*DbvXuti|XREgwKRb70;dx74J-MNw8YovOut3<z6$ju!&H3z|
z`+bJJp#G95+`igx_-4iky<*#Ec1$CakLF_JQYx3#>Gcm4%KJb#0K|0E1qM7iGO_Uw
z0|*W3$fpBwm>Gj~zke8RfB_-K3)oYAg`B50cMzC{+~yR{MAGkb?r81jUaH!f$RCzb
zubYvg%xr%5Gj60hHI9I`er2uyvxy&|v%PgeSYe3p2e7T1CP@N+ZL2<EeY3E<qVw~I
z=P~=-?rL{AGFnQq{UuikZy5d}@CX|JM&JP<(V>icUR6aVwfWGt^^@{Xf&j3MdeawA
z2#Vq)lvs8T7T<1@!hL>ehh0X&Rj1Y-9^CJzP1GC+;<mq8aI(zC0<|ty&!hL(L=^s6
z=l*8&1uPbk*z(&UnVs=x9g@>`^{lYE0NpeQ@ZhtJcf$vT6mPzEJiF!o6#8>08kEYd
zBQ=%h(1IUUu#rqarkYdpEu_U~^f0Ui1&sF^YblbOo11fW0ls-a0Im=)y3<V2BCihD
zmbl7wHUfDR-ReK{DAM-+$Ya0*<(YzL;nGOTOwrvcrcv*!AH@=5V_^X1#;%jDFDS$n
zpO)cY3yA-eKVBr|AuX)qXFAkRkn@CeS~=cqq%I4e1HyC)hjQc^tx987wSf%jl<<1T
zm3=NXU|c5(J!S(WNPzk4mRX<L{t*|&dvE=q{?s3D{n=xi0rav(a8q&w1~2c8cb828
zOAgFy%ZUoYo1)qU1^2RJ^^OlhS<UC@BJeU7Wjg4c*j(odxs>DvRqacmom9VJMGGuE
zjW)Y|YKy3%ZW7E7Y*4ovwje{gLqMnn)?-n`$1Twt!0C!q*j<WNqiKsgRF?vu9YW}u
zh<%INIXe4`SMlVWt-03+lRWo06pGN`zTJZrJ?lF>Kwi~y!!Fhb2P6*`uD=C%)KjbR
zZYG4Nco`HBd_b{q4x@lf1d-0ErSAMa%fDgxf4MBxt}&0aB<aPw3`NV?A<Pb-ol_wm
zAJF(DM5(k0(Rcb?R{G_e7qZNwxg?j$3gk^IsTuy;pD86)fO*OZmrD&}V!aPC;IKFA
z{xa1=irDOH@&sW4vibPsT&Jns7oPb6zQ5BHKaL5v!g<9(ROJw&Ye$+|W>X4eAI&aj
z=O&Bfhi&;$1YD(JyVhrDzM*#Cl6#pSleXQhOgN^|M|zH?=r-dj#4lY1ZqRsWxOW=3
z6a_fleVq52VYHNLa`cEX6lsnyv)Zk+=t-QE0LfSau9@ehpPl!)04C~>jyMx(lwp9>
z;{=w4;|YWe2t5KC0#%ZrDkP_#8cB^fM~LwX0-Qi?w@iA0yx4ONSDM{GPW>s5^w8b2
zb`Bp87=WEaPp(#W6<^`(VEG;Pr14543YJ@l9B>J=#{iIEu)@(3sNscijN6~hhi(J1
zo5D0AZ93VwH2-qcx`_tch*9a8`NS?MI)+pE<|?<Ah386=!~rO)`7S^~kL;QediL{L
zWZJd){;Q*}+Rxg_kEpSYF7(|5mskRDWIfU58W6acwutz(xf6)yeE>K{q<ICe^-U!!
zX2O-zK^7m<C5dH~N3W}7MAQL5H_YZnxw_RT-@(Oe>I||zt5R(BLsxIysZ$yRBueSg
zF;oeVB&9)Qn6_t1Lv?Ci!!FjFCW%8O>g`J%7fFl|EMdHsNr`I&y#R-qeXXeRiG+by
zw%^&U91a>d`lc}}I7xL~)zj^P#SuOF&p2bR<}q*|j(|Mg=Cn7W14LG_0UBBnFO-mC
z{+YGBQ?y`9qCj>dwZV(T1I58x_wz|)$kWqxdv*amSrUcT8~ais4>7&7y+mUlF@M^E
z{ww<!!cKA3qW<I_JsWst{^bg?&7v;c?f!CoPUX4qT>E&n|2Jka$yj&DZ1XL%Ap4uF
zN`up21CzRbbHw<^fb?n7N#pTjdI=OukGqa%NsW-1e$`=(3#tcuypqOu#s(Tv!)x=<
zh5c8^WiyKV5{4H7{`3f~$UTXS`ZvLiz59*tW)a{FtzQEfY3&MhS9gbajwdIZHA+F>
z?@E<x>YCIg+c1bGY=83_{+eiG`6`i5*6}ENY+yB5yvff?i4&|>vFD^Ah+Nx&fArYr
z@;?x?14Jr2$8*2nzsIMYMjuCC-ET1bL9{h{aek5Df4oyp-tFt%uh0BRLIjmx0mkt-
zRli8?e|+IYJ+u3}V)E|E-k_FKwDxQR3S0Pfh5E_$1&jYktAhS_Y~_g0h?g@x1ZS8K
zqIQz;shuss;dzosa435p&&U<JJWl!O=)#!Qt`r7Zx*Y}F;WV2Hb72g0aX_-XvZtO>
z$u#|&A)oXYa@>Aa!vjIUw%{_+OLt_!yMMQH?$>_>RKuQpYY(q33}U>IrL8aL^o`EX
z%cRtR1o^iiI;Qg)TTsQx|F8~OroivfqL(a%w;h003Ef`#QFyn}Qm(zVmq4bmZ2|uo
zaH2x-H-4Gcp`8yQbAUK*S$pa{bH6#n(*jeyH2Sipt*BmCb>MY%y^N+7ocn=$U{fv@
zS_>Fhh8Bm;DkjC`s=%D)){+$oaOjL9s_znP)a#bTISoRl3QT&inDZQah90TrRuPo@
zK5^vh=<^FV7WZ}^b4w5D0v-mB@o6y+p_T)u`2X4kaLwrDo{Cm7MbM$Tz=cKyc-&H8
z*@LE(mshN<4lU?1EvqCn-8DNd@csO4m(+W})CK{3KNq6Yn*(mIyAOe3&YHCv#7%o%
zxW)Rn>ZIytO*=c^k$HJXs*D`mGYVt!BnJ;J?=xxKiwUgtEnx%_qk#K|RF}J8?rj$b
zBwX*ec1v41&_f!Rg!|e7CqwATH``w6#;P)RM0L(^o;_DA2*_^FUSbML83~6QWe0-Y
zw{<pT0pk?l<JODVTP>JR?x?#TFKaXt(pP9!P!A}Yl}mm808^acnzr;Zm%9AiLfSQq
zS<B@B)QfCthb}BP@={l{%m578eJ$-<qFwX?@hW@WcZ0B`_g}qND{>T6*fb$MUflqb
z!1hHtpg~btO2bI!j7zA41*L0frFt&K5p(>q(<J_7U6!qmU&Zry74w?5lp@VFa^s7J
z7p=i{wNgguo3)br+;zyPK(QB_z%~dSD^Q7J(&J#7?C0fG=ah&!cyc5)z2{ZKMPOwK
zye>Z=S+Vfh_$8J%Fz3QK@#j_tL?JxGodd?s2u4L<E?!t4ueZzgDKQW>e_b#qxF($I
zt-+AU)BtpNEVTvLJA$w|8ZherkR|{cEH-o*&7fnCCwDYxU|8p?-Fz3}AEw;1WJysb
z>QXM5AYdQCq{uqa8(@Du52h!7WCapRfHNo5Sl9|_<i74_Tery%H;b>%pDR@MX;_ND
zof~drcmWx`&4x#lM~)A8V^tdgS|C`o;@1-I#Lm%?n~8s}e>mv|NQ2$^kOJ{yA0V?v
z9>}a15#@l`2YnW?HL>mrlsy-q<HNE+IM!{7&;(XF5NMtEapBCV2U38$P2Wm<e3C<G
z;L;YrA4`D3<ysv_3v1QL8qYO*a=j;}G)lgGJs#wEWT~=KGx4f~K;3VM84Cre>|A?Z
z*F%E-^$L~YC1J4lH$Vh@T9-5Z3J1;YcDTB91`m+Q1%Rp!N!T9t^jjBgaQ8c6!tG=~
z8u$W;IdhKW*gfqSPbu2B4_;#Wp(CCHdi<Yk^V+2{(bx7Iej<O+ZFeb8(|j>oc8f}=
zMoU`&ZWJm3+hyF@2GJ5P?^atqe=xpq^`$?)uh2N=ww~$JmS|>dSt36!&6%zVdk$<=
zY}VLRyEx{#mja7&B~0Sv!Xn+(ACLO<E4$uo0b=fjKsG%I_4}Zxx?)--E5fR!?%kai
z;B!I2X2*fqf!V0hJlZtDsTW898UdLu6a>83*4}-!bbUFd)-4rA$E|1+snGP&JSV?F
zlYhTnDO5lQSF;0H?58DN@q^-cj09l0SxHTH{ycISeQp3rIerzz7n2bGBiqCxe2pqB
z#+~@X{QII*(yY-x*&7Nn6AGP&b%+UzwHkG%IvshPOV@MQ2aaC$kdmyxM!#C8o|Ia(
zO%`nI%~iFU`b||yj3T?>RseG^H=>aR>K6bbDIgvz%zQ6^I~LvG*RIjrx8%yp{n^=(
z-LX|#(Q3C|B)D9ifuX&EhlpkIUdh~}D<0iIT6fxI+QNNe`M}uWz`uezfY8|a9hdtk
zr3{(X%cRq6Y=>77)T^>-sWX_n%DPWCl?UR@dB<iNS>XWOJ4#zS5l3ZT*L69t(cKWw
z0X%Av=N~%z#_xemQLFD<_j4Bi92E3L7>*L}O}BU4*l+0n^MxB>!1{@;4nYl7JyBr)
z1a3gQ^&dX`LSXaesUIYG3FH6S1Pn~vIVRRUeNTZ)I|&>Z`mUe-^!bd9m}5EF_IPd9
zC5nN5;9hC2QIWnbBJvVqx+9ccMDmKfJ@-D-5P&sOY5~SMG5N!7MvjMNE~($x-qo**
z|E*LaUjzKE^H>Z=lDk&?w=uEpn-iCUWc7SAfxK(96lm}hLtQOcUB|3JOBBk}HyEqr
zY1?TE=sdS%w9De5qcqC<rK(?{<+UMCd0``?j`)F@fEq*DiTC>++JE~#KPUKg@t=;I
zZ(?rUeLw8Bg^~Z>!<|H8wkivAP;T=-mM#HHbBv@UwP^#}O1`D59JXC=hz7LLXf%mx
zV6~fVl3RNJg?okyuV=w=fo!LZrl}ZPysDq462S0Z&GP}v5(kKDKF@KOu-v~0ZzlDL
zO@d-gw_)v!>ef~oP7owXskG31J6P}CmSU@@qO76ns*(XL07|PozHd(F+ljJxtl&?g
zd-0aVjbFBB_hx#hXR3<>Kybe{?ERNsYvtulNt*ZBPv@cBQdJ@ig8Z8$N5+R3Fv^+!
ztwrAFgpJ*X+V<}6j2pOA#Qo&7hTF;Aibni5rB_nDXtTVOv`vP%-){0dIwiB(RT`&#
z{%=k@LaoYYFS%mW-{7*nC=r>BzUmExxonGWSMzA==N&deKJ|>-Z@CI^^PX<;t$SLO
zn|%Khkhb|RB(|uut?Vl`#*_JvLyi#LeyjOuh{;VNU8FFSJ)W^?xDKj<13{{;Dujg_
zLM9T@1BADpeH?QI_mnAl?@C^pS(QQPd@(Tt)_M)*>c*TkzN!-r=N)t#-@w7_TTgJk
zk}f_siNkc{0Fp0aleW7;E>to*_vK{!BWB`G=i16KYcKLEUZj(f>>c<FzO$)Te>W`v
z{@mE?@#TFch6y4AvFe`Es6~L(MI1mBbe^6VDI=v$Vv+vu+v){4AZ^ExBww@tXro=q
z^)4q+z)mGv7sVO&`qlbsB5#b^h%M+R6r4@;9ya{8Ag#_gI$V3hs9~x59z_v%tmrIo
z3n$DnZLO48ig2<=SBO<Nzvczt(*?636o2kH3R5RbE1}}l(Js#>g{F$57$?nO=T#0|
zXohmp@eil=DLL-PfB0BOj{Lbw$!7$h5SJz^oY1Gr)E@zxjheYDfrlW|{4ouW^J$_*
zi;lj1(=h?8|JS=hu`TL`c@Ju~pC3KG+Ed_AZgtv%%g6wLzvUlaH&C!s0>>&RE!)a2
z$dsNepn2yV&DJ9t^ni$0)`>3`e4G=Po5`{;p{<Xy`!Jipj=C}wCT|SeX&z2_BLRV%
ziR`ZJ&~_%dw*P`d=4)%fJZNf~d!{v1ch{n{z1Ej1yG9xvCe%x%&K6{MHdq4o7zD+f
z<jCNa`ZjG&Wd3^R==g232>T-9eyS5~%F?f+2YjIUWug}8;6#<A-<PhUt&wIGWTqkj
z^N`_X6IObih&R;~ua^pDBQemV>a~QBpVQfY;go*<U5@4i@j*yGc<20G;Zw8hTn1s0
zA?o`%3;+NZRDN;7%J_K9)P92YPmq^!iRr{h>?gfom3@omk4ZA-ER6t`;`N+U?WJW>
zc3*x!y3Yxqb=PKlhC-9qtE15WRk}0?FgKNIc0?xt%LRWAbYmh$=`D9h4iFx5j`&>J
z%=Q}v3-ZbE+mC+u?g3JbNg(6MkI6ywm+_`Z-Re%#^_1_AF3l*YT(&rJDspf60|sXk
zw|pHCZerv9h$Z86t1-)!^@|IuJL^-ALiZa$n@wm7l7{pm{rB$CmJNpK?RYv^bH4d8
zfhJhNz$yaussZmF3`ofUi-_zSwj;KuWL!I#bZT-s?_y@xXG*I`iA6u`V$W%2o>@F2
zc(rYX``&hYgzIn;R&!|Q!`>X)d32680($pf^lS1jZMjKj`2KN%z-}X=UsB4mO>1Cm
z1(@<?hsGg*zfZAl8m0j3Y>2+7{?fKuc_vc@xRW#3!IABN?K#P?G-Hv}^dM@_t)S7e
z)?iIE9*TKE8eJdtx^!1=mvF@5VN+N#WJ-fYx(sB2Cd*4+xf6P709egtM3Z2BDO1MZ
zkL+`sPfP*YfXeQ{eySC{%R^L^U$~XPcW;jB7e*ye`@McPUHU&ArJ^4VPptWPhC~YF
z6zCP1ia&e-aJmiLlnR%&enIGJ4D3=JMU}Z~+u<z_Z}06%z8g%^1dJ>YSX)IUI<q^`
z9Y?rCgk{#@7sqS8AYMwaDTemeV{*%%SP^?fq6>wDWIa9G#4J|?XyG~bcGH&Hyb12^
zogZJNIR3N_0jm=4uhYA<nWe{7tzzqxNfT1#<uczR7G>%&%LmZLJyb#{i{c83&vjRy
z?TgN%59+|g-4|=8%r$G9<XK2vZmOHl85aVCPN4mE8e&rrz^auJAi*F|#yn)fyPNN<
zG>BT^4t*ZYOBlZmn!i=>%!7g9$QGg*nHHtT>QvM_p=Kn^o8^b6;1kdxEW40IwbF6X
z0qoZ1f}s6W{jU}IAW2bciFmz)iW~f0p1Q!I#bfK<o4}q$y!rN(IeB`>Whz@%z~$S`
zhq+~?A5sS|0GZ-XM(qE+VLuLG_Vu5?N8NBxl^aV3E-6|t8gP!T$$b2TY<-;s5{Y*S
z#@ev0G^hr=msR$OFeWJ$A5pQ)4qzqV>7r<)JFs*GA;IPrl*;nRrObwRz+|yMZW&bv
zqR36!kl@=6<p7KBh|K=e^rV4i&o>huGlHsYe0_XmDOy1_)D!fbZi1anJT#QP&_8y?
z`%70T$Jty~PS<A~?gR=CI4IRZxOrTUql012`f;Jk)gh=3&vqAx(B`a^ZyK!chj5BN
zJ1=>kW}k%mUmfqRSYF{?>@guHap-J74FUJD^SW>~)zc?(9@t*!y&S^q37!d|CB=+t
zoU_c_cGdl`71h+5vpf48XNhQAaan%=Lm(`7C%^D?eCc=qEZ(8*4C<kW01HsN(mx+y
zH*7ZETXi$g1Y$6k%rxu+CKouH!^cbdrzLa;wv^kY!3(Zb^szORcNgatHdz&z6mgwN
zglkggt+xdQlSL3#Brdy`aDeYA0w&P2>k^|dw?l6}1HtYuhP@X0ms?&zo5lt@%~YGr
z5bZ`?v2uJ`z>>%n%FaL#8#5*Ycz7yYSwYAcXwB}AkLw-1Q=~mKR#Y)O|L|T?qqO={
z|0>@+qI=Q!7{<&d_Zu*M8OV7$O%%?EB=Jc^B}AhKA`|ByaE+pw>h;{3Zgui-Wz1+l
z1ciR6-&(8~+uWc$B8+({cc$d&C5qIgr*jtrs=G|-lQler%fl-?Y1ARaJ#{b7e{1ri
ziZ_W6tLX6CGeqiilvPd?5D@!g5eY_gA$Yl74E&lJIB-zZI{cVG)ckZw0kGQ$qWdEo
zta9j<^^6oR2e%j_-IFe0or`4+&WII#A`4jfqU`5srX$z-MBLvuP-}jnEXc>I?xW%0
z5b)qH<03eK3MjGLy@u6j8#-lJ1>>CmSp9ed)(6=7r6XgIR^MIW(Acv;Fc}7f0qo8T
zwv3Sgjp*tIfENHv6To45B~AaFd1M>e;7~Y`)pD~dI_4nh<f$_gg{r(n;7O0(GDGpX
z{T1)d#;x_|4q0gATLgR^epz^)=bP->9ua%Qm&0guV_7g&`sfM8%uq|Z`+r;%yQ9gj
zZv{m$73~@|b1>J5Tr{?{@-#8AfIeHO`915wt)n`O+}Uj2f*wb+PxSB3C`^7%PUgBJ
z{b}qwbmI~f-<6mMZiKp$W~5kq5?@IbKom#do}yX}g&)g3P}jUXA6812oEFLC@C7YB
zs#rH(P~bbundhP-b2c|Aw&c-^BVAFaQx%6Xz6DMvKD<tptnf^|`mWa0L^gqFz`~AK
ziuwx4*^lr&evqq@E0wKspi5DYX?X5T!l{8}-IcIrTY8VJulLhS%V5&XLUsN|$zIt5
zJC15M_s(d`B;M9bDxiPY1#Xs}a_#T#TiFc5uDnY;Y#{ZUbnC*m)!GNBosYd47DwKB
z<r$dkN+x<mg1k?$;5gWu!Ic9UcNVUaiDfg5?|1}W%$7Jbxw=^OU<KwoJ_JV9)~sp~
zGA+Adzp2EF%P6;6#-DTWciuJL*8XJg<{)@dV73_Kd3<&&O7Gow=Cdo^FB^#9SsnuF
zp6PXJ1bxDsm1ms}%fsy?XWeiWit8q6YF*(?QbZxj`-KAo!f!YM2iZa?2}*qE@zmDU
zs_qFS4p)Y}N>H;3w{QGl(5^C68u5x@Go0YHl|<Ix?_#z;*dV9ito^1IMXCuW)mM2)
z_}C^tND$Y3m@GD>^a6K)SqlEv_1)Vffg3>zXyMC#q;lWJk(%@zkO3vAfCWR*S`=Rh
zx7|4RW<XddRV$3qdY1jS$SgvTe`D=IIhK%F_N1hS@22JyPweg>%Gq}OYxeaa{!(WV
zWu4FO-kX!oL_+E>>OVZ_ccDo4L*YTInJiR5S?zG@%dg&k&LJse`(`iR8QX4p78wIa
zMNX*aSN!#@V|QlAoYU8l?e=H)VK;=t=os35_kVpgCN8a?mEJ!`&A~m|!5V4N2Wm4i
zf9dIMj#3LI)E(ybttTHLj4cpGd*VYN?y!z(l6RvoOTJph?{r(|HK1+SwNez+rt}8N
zIyJ4;BGnF77nhaN?rAl=4;~EazY@I{>EK8b^HZNVMaTU<$>OnS@_q-OHZ%qG3s0y7
zXL+p0TK+RCy`Yb$KROayTOD)opI`Xm?E!<w-u(y-D+%GU?dCo$S9|__P|puP!jccu
z;4xOPk2f8}6?lHyt)SZ{Wv+j~tnPPk{~u>>9Ts)kw+~ASC>DZCiXsC@Nq31f3@sf>
zNlVSpAu0k&!_XiSqI8Wgq(~0kFm%Jv-Mrs%*ZbM~eq`_W_x!WR>M^@aFxTh&oONL)
zPivsKyj46ZoRdCNkL=-1##8L3&LsBJr1XG{r<04reZpS7XeK6BI{2E6RRtA)bRuF+
zd&ud&Ttw1{WmTDovtUE_gZ<snLuY~TsO`B=O`<PG_`Q2LIp-crKV7RBKs!)1xEP?X
z2!@*6y)b#DOiEkdp*|sSl%#CjP+{xHCg9U0PWcx9vRu<=^TWMEk%yuN)p|XEclU=&
z_#45~yqSgB3>`|dErX=(lJ%q3{i4-|gsr~9SG9AvYHX&>)RC}eDCM=*H_&s_1bZdf
zsF+SqI`->m+L<GGxJ*`F%w721=+sMhvo)DyMbDl1%ERKAye48TQ0oH84}8ugWyo)l
z-h+A-JQ-LMqkraimeyp*nOCE+u^qlWPhr0|xYSc(E~T@hE#|hDkTQ3y6p${_f5YRw
zT>YoHuDIKWy)`}&UnyUsfJ-@0vTsZB8Qg6H@D5wDXRq{>JMg%z?}71>o7S4yFW9te
z>+uMN+zu#Z_kC`585_VBpVnybvo_=ouaxYe?@-qf`rNgT<0}h&5O+1r&nJaFkm*i3
zz}fQ_Z0x;qJ$z)B^`fyy>-x^^_6JAEJ6|8%<B&?G9tFR`Ir%ZTl5h4Mik{2G)1&Xg
z<u9?#mG|RZNs@vjltKH<EG$qJm&Nq%og0+ORB&grEyd}Sb!?)!NC-wfI9m!Is@~Kz
zHAYpGqgiNEvEw%fYFwywN><<DwKTWJpvKQt*OuZ*#0OT&ea=fHJ1Sig#=Nr#o7+cR
zRm!MD=}z0cDY}r{$9=A|HIDU^=X4Ih@xOoFh@Gds6a_hfN5s0<;jUnt?L<X$o_xVC
znwn(tpgP@cONI2Xr4>DSn$LJvJ<e;KHMn?%uM8&cV?=nJFwA7$$!P%S;`0em61Sh6
zc)ogum&C9?$@2T5B3@3~rMDOfTM4^4FPa6@y5>JFd2TwKH|mj+K^@?0VCfUEXq0`k
zOFRIdxJ<E9m6ux3gexfd7?M=UUE+WBQC-D7d-kv@^NQN@q++?Jq9R@3{VZVSDC*IL
z?%C4gC>l?9Et%@raKgCj*GdStyed3lE8cFgHiDkIG%01eXHHNp%8j9&lN)h`XTGN<
zTe2xndEb5Xdq2b)V7C6Xe$@d#PW+>joUCGWR@Ql<-tJ-5m?KO_y!M_-zI;LZn&<Ra
zo-(V%a?$m*o+sRlp5wSMe;m&Y3D<Y;xlriWcr8(y9=7<Sd!H<9Yr)Vh;BM6*(vw+J
z$9PZkqV;%Dt}z<)?v$3?haf*r==L+NezT&J^>(cm{}fg@ihK5?HVc_ywki)gfH5M^
z1#1)4S2p3)a#2Z59W7|MAuH6`ish4uu53eh3hFc_l+xH}EUC$E^3LziqbLtQ7N_D(
zbm{Sm$PUv!1O}*0OXub}ec4pA99Tlh&$QOqO)e2Jrw)txk4VYp7OG1XFYe&v`&=?i
zLFgP+iYf#5axz~5?$IUX>Ni4dPPE)T-;E?50c?~pTkqqpJvurh2O-yB3vVqqa(xmi
z)Hu326_2&X*7C95H&c){bec}`T)oayhcHTBDrG!-*B*O?11s8`hdB^FQ$wgv<%^HU
zvynD;Ncm~D%$mY*^!pX;H9X#gobnp>_pssx_GU#csreP+fG1hTr&H`z^v$M~8T!pp
zC?VdWVW;S}D42y}*sy9x{E8a!h$a5`;QoG?OXt-XIgoa4ulD#($77EV)x|Fps`Bo{
zTSL=Y(olz6Dmq8Amx`(A&yO4eb}TjZAaRxkFfkq#Z}+qs#Ut;?L~cI^k&d?(_F<O$
zE-()<Lv!UNcN$_>^^0Z>Y1adP@=woKM0Qc*Mv0U;$BW5%G&oOcJ50ubR6Yf6V*(TF
z^%_WUJ53MmlYMiZxi<+T3OR8!PVL41w&{jh#KK37xu8#ZA(b5V!F@dBN=G^6OrRO1
zEJEifFh~~e*y(_9-?919$2+XZ#=$S6eoQfz`Xy)F0|;_*)!jP1i<38J1ck&bUEeEF
zzg}TyLXD+`<+V1723^T>RPl|A=xI8`JvbU#>0~&9$Eb3&n`O4_tPDNUcjw8s<a)gO
zhxL9^)R#J}y_bX*YOBr#w&<rZ?wbB)OL-<+%LOki^;tC@Garmh7Mri;jyOH$WCPE{
zTX8D#FdGzaT#LQSD(I2}KUC|deNMt<W{wto268IRvw1X}MZwqxrHNdXzldj|!sdO!
zC&=(3E6yePc1|zHBl^slq*+owB*9`-)F)A+XL^=oD$b{0c(-M<4tsrHpK-)maeheV
zRwo3-E%;hCj-@Ajn%gEt%rS5gXPV<$4xk#AoHFtb{Xa?|u7S3}DRjIort<=2OLE*m
zXq0VF0f)A<zRl@-@-f&wR{SF(&FfpCmk2cBvm|Zk|3FLIs{eqNiT`iV60PzVv~>JH
zcwou<#SlI9k#uEG$HX1AWVD`G`9pM&Lx6Qm6sJh9m*UoQY%kX2!$vUmu|^H=EwWkm
zyoDv}jti-|M7*8x*&Ggzc|*kZ7-WGg13HWphBNxaha{Z+3tx_1orC7f%PB>s)+Vk*
zO;mB2ea0zt5K};9uK8<HmaW6a4My%DU-0~q)vG25yG>Ht#e_>OHHdTS>BKe9{YRSm
z3#+{dYlpEx7X;c}6@^&q6vTdWv+Huva>-W;TnL-{>E#4#1OJwgv_ZIevw#mi6-wWT
zM~J&mF=I)8w4Xj<dy$JasnaNGoBwW#*#*NjwS?gIZMq}+?<%_P@?tj*qOm{LNu>D+
zK&9ZMS`NemOAZD&q<Lrx=Z(#dyE#tq^|_-Z_Z4KRg%Ea)w0O#=#k_Bbv)v=M6_+K7
zoL;AIUwd;j2i2mszpWt!e}5Fxs>I`MP26N{ugb6|(0`n2qEW11V@7hpgMZ>U6+yhw
zES0E^>K^6`UdEqR8vwl}Ucy3f?#FP_{__KsZyC!gD!aoM(e!wbyZr7gt2X~gv3e`}
z#ZNu6Q&z6+V7(HZ%-F@4_Lkwl6vGSLl$BF*5>m_j;f#Dt|4*+Ec#-sU;%^OF_?=>I
z-Ow(yOGs1zJ9uPvP0}v?(ciXOHi2*)+;rON$@#!}nAfrOql9N`d1G+`p#X&VnID~@
zT(<gZc^x;L<=1$KE>5&;Ub#`g?5!ShAVm10AWy-W8Ez4(S3GR%rOLd1WE_|?<|BXN
zRcSUpBpTr?YJh*{RsA4SKkUqQx!L4Y7g=wV6NNcmKO(9GWvVIr6~+xpl*YNlFn30t
z))}hN4;k5=E<6{o-Aiz^=WFTch&dKD1g)QcGYCmmijHitJPf%Be6e&g$I=B79&j-W
z!O@aw%W`PJwS~%d+aK82VC=!lM+)C1aZG1`3y^1h%eKTj%{e`0B+8Hd`B7Hi!x%UB
zcVhyJ`I>WxFSqlcdJR8SI83+gZo!9gZ>_8|PsCdztX_&Ich-8qp^kzi7u6)xM&Ee^
z?=ahnpyo`oPIq;iOJo<}QV`WCQ&{70Nmc={=63{;CwWsFn9d!Da#Q>Z`_KWvcPp_)
z+}-lUWpd+JE|TMhw4(FubsZ)PvqR<Ejy)xV)3(diy2Z+nYGDlsl?XG5c@9kLtrYTJ
zWNFFL;k~q`{yi?4rsh`%xQ83bc|9xny-uN1wxGOz<D?nwD>I?ZqwN8!6|hj)sHY|l
zqKzGwi23D)a}n`(O#o@<<$K%XKtg@WrKgjrXi0HSXO{!H%m$h3XIJqyixxM%9Y^(3
z+&?69V9kfZ)*{B(uSbe7M5M<P0^ZuwOyLy2s?2H$SJ`KX$3ho;H75D4yeL8rTJOuP
z#MFc2G7+YxW^(6zCK=#4T5L#-4h)A@r4{$PB(|vvf*_j*^5w--ln30%`uviOu(R%X
zB3$ZPqI?+^+ylW=D)Hg<4-HC!IO{X<6_Gg8bN<CJNCMNN(voaF9bkwJ`zGbSJaRGG
zHwxKQ$tMHr{lM295!p{7zRKpB9?G4o%FzjVdgEK7uOakEYK}2}DbBLGD_-Mzsb)9v
zm)7Mf2C4)nBNI3%cGB5^vd{XC>hJ&>mWsBhRX=NzU#r#rJ%xxBO4c>J>O7B-Fqf_b
zFoMlG0xi-Ns`%=C)@{xe;kl%=l#Iv5CzFt^FD)UICj*|{itx2|tC3Xwg~on*pabbK
zw&z?_T!&iLcSU4#6ijJvEHHhW_cNJwW>;U@D!0j!+FTx+(h3K++2C#*M8f>x_Y4rp
z!!y}5{X04{Y5~tEvESVKY{SXV)m91-6;a3b^fE1Op|w?KV4%(FEfti{lJ1`^y~{h?
z?_@5hoy6NaW>MRntaZW1m70zV6h^g~@(tmx3bSfwN#m}_FUwB})3B$iV}~4hzM&2P
zL&*(lzVzkXX1wlMq5n!L6%5cqRW$)_q6WTCGziOlZg8in3bDv?r)EhAv(h1?<oUA1
zf$8nM%In2DcACP%HSCeJauyEq=oq9LEY-M@Yn(}!GpXAS45C{bkcv!a3N6;ou^aS*
zmHbHXlsj|~v=?t@T_kQ|m|&e{+0T1KKbRp$92oxyV2Iq4MD3DMi$~;LwLEwiu^X0H
zRVktXY2zB_ll-(&aqkEF5(#Ya^mXYlXSM$V@y0F5qcPr$^h`Mw<Jxt|S&{qnPsXO#
z-7WzB?AUv0ETal#E0ybP+9R+IbG#?Xy}ha?#kF?gS!pYto(drc8N<xHOANAL7A=>d
zF5xky^+Z-+5$uMCsaPhb-QvZc9wfY1A(j=o)BdA(VL|}*-4j0%ReVw4Axg&Y)$=EA
z>)&H!$Q$*|aUc8pKf!TY3$kO*n`ZM^bgUB;frEKm%byo7wVhx3X0mn5ZL0AaE}HFf
z<KA=9E*8~O2e!OA!LfN@bXEXAs)YKYH%6Sc1{iE7pgz~n;s6IgGqQa$cINteL70Hc
zXFdBOWQQSP(g;pC*L76)(pdk?1R}T{4E%`a&t_?Vr(FK+?@k1<GJl-7*sW+1VP>Z;
zk%tuQB213?-SwmTIXjsMhRV%8_K@IFNcC;}_%FAOF<>)gTiVIAM#Tce&Ckia@x%{E
z+6u(Yo?YoAX_CAklAr2H5cW(<bbP^)qm>k0)>1xu8*V~Od@UkGwSCm?m^J!*y?2gN
zF!PO#sHZf=n*iB>BTXOV)X*I)-1or32UXB@&)j)osBRcvs+vqO)L0F!{<>}EbuAej
zb1bIAHX$~8Tx4tc6O{bsA5mmj*pQ65q}01LI^zB=25EZbBH+>Zb~|*iuG`>c1=H0t
z_38B)*6qf<aF)pS;(gPIQOjij@R>FkU2g5u^q2!&fj^p13YlU<3L{b)9U|=(pc@}o
zsp%i41zok#8!T*P#-_jjvi(YN`t#J39HE!;YpVkqh7=<bd&#m9XFkEvGYcIGH3KfQ
zz2So`UU%6ePqQM-sw@X9pVA*ru@5Rh%9=l%Ytu6CCx+o`N}7gbUjb-?PZsKCvoZ>1
zji3KG+*cNw^&PechONhY1cEpGj=5dfhs(+ePoj-=4z!I99d|_!ja#k>ID@1-D=SUQ
z4_98}&U(_jCAb)EllOM&lnH#C(F_#;NR$CafN80APtAHV@R?C^T$i?DJVVaKqk|RX
zn`hEjk-fiPkW!~NuBX4aon>L((gh`JEi!1z$QC$T;i$qaJ&yaA9ri{A^Nu~ZkuzK@
z71cSzP_=7G;P8~jU6{Lh;_crbjEv-1RrUhIqxMwYJZf#LQhGb06AVa5i%4b%2@yaa
z{x#eQx!Mg!J4}k^<0Q87g@hEeQ){S{1=)#}%*Q?(wgXg}LAtIi-l0{y=rFLW#t8^Y
z8^%}NQ=TBXr9QW`B(`vtD3X$FA;e4&_1f3`qnE3)*6?AE%JG|M;M6fpK<Ln{_R3!a
zw#~)8QqV#A;Ql-G{khunaTbZQ>aCf*Pg|#%l4>pb$1+AWns)Dk9@UkvmLYi_;>&wJ
zPD?j4jW-@OJoKKqrzh4_63QEwweMp8P!BZDxQf;cA2!!h)2+ZL4SGsR_#<SE471k^
z;7LkVwB#UK?>5{UNk$|}UZatxbM|lpljAdgfolBKvMSfe_e*0vH1!jMdNHx7ab<@?
zp7*pK)$ODuo(HrC&=0-WYC1Rx+q<P!r%ZG1_(5R(((u8_4L7$vX%xe5ckS4S#bsnv
zw1??9o!1KNT)$ZCg0o5<OpAQ7Qf-J(w)5~QR1yRzI{-wO6_#f$F}?9k%Bob~*@oWf
zVo8%&y`MfXl)VM8bWZi6%tk5mb^<nBi#ylr7MYmMqFWw2vSD~6DAe-#*W?-wc{@br
z$8GbNn~XR8R7iZk=n2Sve|3^!ZAz?Dc>KCe8!B#x9#Y{RazXKYFdb<0FJsR|zaF;f
zPRO^S-EP|zF*(IL>@EFZGj_Kf4K){&S(?bqBko&*nS8Rkm*)4C7Z7qBb>9kaO=vnE
z&!#+pSifqY?)BOk(xr&29UJcZj+f8FzhJ?+PVqKCK5bZrOJhGSr(ZWzF`8b;vD!01
zBmYIyN866L)NeEh#)UzSvF`FhYLoSt(iINQ_E-SBL@$3NeNZ8xsZ+(bP&}4nE|qOq
z_)3Fow+<v(V4fi^$AhIp^!p<^D$%#YHLKWXNko!(WJ%;maGqvS2INquPJ|_-?3T4?
zk$vM2v2O-;_&whb=-iH?EU{gaD7A{!7aQW2ICm}TU*B^ZSqw5?Q1U6r66X4BP;IM0
zt8xo_p?!O5M<y5?JUoEgFPOjrFFghiSD2X}$+WxoIzAL=ueS1Cj(<DlIM#3}<>_)s
zY{eQQUuixAKndK#QJl2<M!50e;1SsQi!AX@L&;})qXZ@vYAov}(VE?U<SZOrk{Dl=
z)oW+?=-jEX^!DzF0o_;B(xYAe_$jSnTwbm=hkiwMG~Zo8I@{$F&i-8Vp|;GgHSXWW
ziC@H>0tq3m?Iir4I7e5wK5sUkykqerw)>2s|4m(R{1S&tyqHXP!hR^&fHmc`Jb`dT
z6K0p+QJ5eN362sH<biM(=O4+;NRteu(r$PVz7Rb4WRw?k2tq00SZXTmEs~t-A)Bwm
zM%enlQm}}`_m{+_ud|NWW%>8zl*0m~P!_GkKG1M|9*4~K=f|V^+x8u(`+{aGPV>Wd
z0d2)A+%NCgadz18b~;g-a!z8m??jMP>)EF`z}?s7+?o~dc{os5dWa^e>*Cml%=Gas
zK-ogdLbS$WibDzc<1OT?$q@~_HJPg40Cs40?Tc;6i+Ll}4lz4%%IzHBZp8QTZ}@l5
z*0x58RUO-di=U+AXLZi@+6XSBbxt|mroM8~_t3C*aMUM-2h=#~vs3BeY&e{G`>oCQ
z5gYP}x@~;zSfFh>A*zp?kmxGoQg6)Rc0=PSi)}*1_1CsT)kf}6OCuJ1Idk`#8?c03
zcjKhJP6raBl$ng)y`^?9BJ2#M)M2A6ltr~=W31>zdpW;RlcZADa>hq$fcg(pDC;#&
zb{kDxggujxs<8xYHY>#&L{>ANR7s7F+f!Uyp>H;~mYUH-BlPfUpi$|QglcF0@lr9+
zg60(xVTqqDCTPoe!OOaF!1Gf9D<?U$4rvu7h`R3wtjXQAiHI~*(ARHQ29^q`>jVuT
z9b4Tl!1I(dE^s6JL<Xo_0|G`(V{Ohb()R5&wm~pXFYI0a(lcA>M5hhp(~1*E(T<&z
zedHbH{n(u9Yizlr`D8og&LsmwZmJ#m$K_>%E83?Ye@~=e!fs#%ws(hMvT0X5Ddj7L
z%u4_E3;e&puCPXG>K`|^-Q5-`<>43TZGZhot#1KPR<tR~N%Z?^_iNL+PC7{rp*d>o
zUOmA^T&HR`lDm)x_~~nt$F+JJP`*ltB?M>Da8DEe^o}C=zeIcIo`|PBTgU_GK_Sv*
z46fs3dkN5?`pwM|{#ojdKG#y@3O{vpkPW+>B&O>(zx-OT@FXHpNvX4#Re-gAEi$Vo
zCmk5{E$K$pzRrih%AD8!pk*arOg9nc;&t3zT$W#<coC9qO}j)6G21j?%`(ybNsn|8
z@_)Pa`cFkHuRn)QWet~`0NON5zcu#Ozi2BPYim}^I@b@shx<|4Y6Iom(cpsIZWobb
zGw#M3dO(Awx;n%5lV6EwerGhTkC8w`>_dZi4Vce(x14#780~ehvd0upuN1C&A0T&c
zO`_>Ml#JKid#iQY<vE?4-wPkN3&s^W!np~qhbOmNwW#BuhV}~eZkg8VZO@&*l~D-R
zeO8V<MfF8bt+Pc`MEjctETJrX)<9Z3pRM+%F3<>QRbntQXa=-6F;wbL^r-pn_xuc}
z-3W!ibIxep{%euP6@1a&_KmF$ks{nBl3s2TxSS<`F3ED29Tn~IkbN^Ez?}yc<mX-P
z!a}Q}hRvX8oaciUEP8>u85s2WK7eRZKnV#Pov!?KMD5e_R2$bdd_DN)q-FVBO0W|S
z<Q`Ua(M}5%B*A=gH<r7JZQ?YAUtsGfcN)D)A31Lm!8dOk?r@5dJqdr}mTKV?SHmO0
z3tYnP1gDCKR=ytbBkBt83kxW34TMIB*=LQyQY#5I5nrPzZFt90j6FUYI>tPa;5)4p
zGUj@bcR0tlgM!zs<r?|3H7<9zxzxoKqm)>W?S1{qeeIEK;2qn8zB`Miz#?}3u__G0
zprnLrN#O<JJ_5<khWPN{0*N=>>Q7tgKqN~Y9ZIuV)G|)T)HbiEC~99SUK#2#y(2O*
z=w-|SWgxrp?J@T57hEI(39bhqE|pt!WpkVtJ~Es(YNovE(T_VpvluSM#bfpTs*cZO
zlp-)r6Xn5?#*q$Lb%Lx)Ujka&b}z3wijn-0bBoFt2coA~%QmI>g}5R~D1}WVelRL@
zZOIBXX5X<nokM&W6HvmJk_!x-$vxQD{nol*b;!uulZ!5|Wg{|;dpGtMIm0<Oz7`Q4
zO@FHNN{O1w1D1um;`){v#)bXnHUWU=B|!XI)+-ur9uk$Owdg#|+@)*d?!_J-&n`ST
zc2`gg)-9Lm_ic!9IBfuKqW=<a^5Sho*+*IxU0hN93U&NgAjL!hje?Tdkq{SIzU(Yz
z@hYlWEP<IQh6$FuN_ik8f?j*ylKl1d?0QA8t=6z7887&c`yNKrY)-s15xtqK8A0HL
z!%#6p=C6B+VF4cSsFxR_#Tze4H#i9KxTG6opIcRo?ww7K8Yj_N)|Pr%>N8lWP)v{>
zX;|SkUbkZiFhWRS_OLgbGFv;v#cs)iU#b{vlE4!S`tb=CuDLwwSb3acJj{54_Rq=v
zCJc<H-|ub>26smGc2o*`e5yR3fgCOcp6$80=w>m^#gp>^%%a}lCmkiZM}y_&3z}S=
z2)(NPblym1*m{g1$ODWLf_<fUop2R#TTZDnOtDzCM*Os`uPARdaliYVl;jyF_Qa8-
zOhW%iFBR;!_gDf4?KhGF2}HMmgiw3VcDiv=NB|SZSk>3Qdy~@Q{x31w3Vd-VrhE76
zyydR;!~o}XJ-;5*rT(SczVhJwa9-z?PnZwIlMOs8Y+Wy5X_HxKWB#gDciu+ufwEWC
zQ|INjuZFQq{f{3uhbr$xTKOD4=8aqV1~a$iM)}0dmN>gXjP<&ijLy9*EVfS?-5^$N
z*XEr#01GMk!M^q}6@tiHbnjby72m_mH+?k685*3O_I+kvAj5-tqaoUFwzFHz_c%1A
zy>DA&MG{}zh<p>e>tb2=@b@T{b|ctVw8CN__K!`@bKzW9jM)aP{2Q~4;_B1UwLgWB
z-BB7y{oZL0Lcs%$3et^>ig|`ZjJFDVo_YByXXj2D=12s*6ZExw3<ohbqBs=qdd~}|
z8IP3G)J?2zfP<YpWGKD*-wS^rwSpwYyc!w)aK|S}xwB-!DbM60lLtT~0Hn<mQsK?9
z^iDgxzjHPOvbUXuU%BA5sI0eOhX5a!MDenIF#c4c7-h$55~@P9rZ5%Kam-(|lZe)q
z{w-JqB!~#{Gen-5rStm?eM0B=R!{R9k;eZp<Wp@3X4~YR@-}{F{Abi~V}l={7ijil
zx}W_c7Vs;2P#YC%wlv1FU^47A`9k21@xkBdoBzZxfE@D^3efyNK>=ENp7vGQxLdt|
z96}J~?Pmh;4vxCgOY4jxEH2nGx6~DKl-)mo9Fk&U`4}!Z)H-j|8ZX4HQ&vIf3Z9Sg
z27WjmUJbQlCN=}K4&bYhfd`ojw6rD~ov)k%4sEmAgu<<XSGgViEOaW2evnQtEn~#y
zL|!CtMFlqej!V4-GX&`qv%<J+SMvKs0{CpA0RvIYS2)7v`kuaHkaM8j93;%anirAF
zZZ&6cmnFRPSUIpJ6y8ROl4*>)gbFXt?)d`TcQ;s-y~8C@G6UMSeGzc9bw-`EMQyl`
z1T+pDfL|FB3SQZJ{p0rGvR^XiVHWk)Stx4G(>+so1Rj0$<k(YAv78nF1L6C2>km@$
zhv-t+Cg`&wdLM{R<s2Njw$$>vU>F6Yi~>|XL)_<Zx_Ygr0vxNDSZ;VmhR}R<>NST_
ztx5-^jp`WzLAYrXhfd|`I}=S{`<<&xZg(2gVMJi>dsQl4OF-Lif8^>ZmvdR_ugp|T
ztdcOd<!AhwLjHigbDR;_Xh8o<tjR+HZiGk=F<o;9s=)$74|pY9o0mqI^`_=4vndlV
zBpVIg?}L4QYIMeS2&8Ew|D!)u6ldoDuA;<Ul8Ge@qXu{uf0R^nGx|Qp-?G)b%Q^>4
z<|kZ}qtU>9$=%s3yF47buWa1C-?eG`)Sh)8WD#z#zEcjX8H0Ry&(ZXE1;#`9L7XLC
zZ^m;xF$_loY9D^!!hBgFp(2{TPSKt}6M99b`uJO=^($uf@jgRQ!wLmRjj-Zg?CF;`
z_|0D@>|3Fg_*3`Ff+^m2r>1-w9m@zb2_NKSOC8Lwo}e%e@m#j1{KFd<q%7{0DFBv*
z<qxbxCb3_Srk3e!eNB#@i+<Maxab^IWw*OM=}wF;{pyD{Y`1RtmOs$E@*$x08*Tjs
zZ(k2>nAv@ZQT`Z1q29FwQ~$Mj8qb&=K0;oXhnH^_FcaI~@Dfku$HT}iVT2w16hfMB
zpY(IpeXw4gLP$S_=W{7d+V*U`z(``TWTk8#%YWKDMgf~gw7uH(S<8GM;DZ!o1y<GP
z#hct=SsB4CueKm3`@X>*mE;Ji9Ur2_bK1`~MKjL<9Yx&8Ap4I+hSmEIQBT)G77mQ?
zk|?wyJC(}%?gCDxyx^RB=M}}<4RqUTG`PC)D=Mt<H(@rfzK3uQdKRt%0#8j}i5)zy
zLo*mZP*Q198wZj%Sb%>>bGZHxWp4dAt^DlEkk`SR3z9MVa#%`=aU2h&@#Esq7}BW9
zC%di!088%l%6d6Xp!z&*0Re5DI{?X%RB2W89>0dih^+CP^Fw-wUe;~>(*4)O?v`W*
z0KBh>|Kw2|kI@YQXPHZ+4(uKPUm+EWgE-55uQx%DijJe76|L1WxjD?^FZF$nuiUE#
zp>_bX9;LW5RCvK;45B2Nz%f*%Lo9Uqaho>=nc@pZjSS;DCd8*Y=ENOo1{($lj-fMJ
zg-K?6jZ48(UvyG0pdrQo(q~lump+3B4m|kP1;Cyv@eSkNo#D4E3Qj|7wR2@Q9hJr0
zyxTZj@s;u|65-R@QtM>r?69owP`S*j6zlY$-7G$vbN$>jPIx@ORCr^_k&xF<@RW{g
z_l(AE&w)yvYngjyDfIlP8((9G-0djfvqB`rEuLp@58}OeT&LGuDR7<Hj&g+M4@tY)
zl-Rd>2lSOW^4m*0Q+j<J;93jXQQ>3vGZI>Aoo_=2U;0E23rrz)Ik!G#6k*7W&st9K
z!Q7cYDlZDiHZY~`|FHNF$gxkKv~EncK%O^RSg8nl6DPaAW%i4Fa6Jr<_6+`ud^jY5
zZE`jKBp(Kxgj)YH-j3NZTV>GA<ffhi2F9T!ru9=-%WBX$6xpv<tY%#8F7rkd#fCgt
zEQ#0M(Uv%K!?6x2>&R~b9n1N9bYKo&z@6xj_i$%(YvqT0ImyfFWB^C3_T}cO7m~eB
zn_$dddV{dLB8b0x!DJNIA!THgj@rNGqeCq+^YG5U*&^B%oka5JYWIdy5ao6iD;3h`
z?UKumD1ne@J=NM*)&<~%a(r}2UO`iDS=1Kuq^Ahp!94MiAy}$ds=R|O>j&h5`AwS-
zEc=x-Ic^0%MV?WQijWJwGMFJgr%7uuUbQ9Y-uU4k9tFI<+I1H3+BK**4!_6+(Ctqx
zL;R4;SiWuR^bD5Wy)OE)MDasF-G8Emzo{PL!?!+@)67G}aaTr*RF(p<Kis!+{cm><
zlK251JDiT*cp>JEJn%N8t`H^4%13T5#g*ga=m|8l-4%lx_HY*cD9non+GNspiR&dD
zQ49$ck``*|mLG!3T>`*avU?4smyGPQ$#m~QDX(1c30}g6k<l7ME$^1Oht&qTpk{%A
zkD>|qlQOV_yFH#euph*%?y|o5p$yJ2(HKWRn#g%s*B8FHM{}NdZ8W`lGzT{2IYVCh
zkFie_!`KXBL<PjpfPHXWuSAJL^9m_(Gb{O^k+~f|BZ);0+yz)WW86%RWh0kK>7S2s
zFQL-PsNH}`WY)8>sFo+be*wJn>!A~`&D*KGvop&_^p`P1Ch&hR{<f*lM@x7dXKlWe
ze4z$m6oJ$6_oc(Kl0tp3{q@DD^^MD5dZg01Hsc-6V$<^$(?e5JE%H&e#~@F*;ka%=
zKdy@B?AOcgtvtl_b0aYG;mJUn<6NmtP9(1UQ!%b)8uifa%_4*Hru|#&m@hgo5MX*u
z*x0aJ2h-zgj%}tLr95>!tm|h>y2tKyrb9fg&*KxhbzDu3ONzuQrT~ToBjC&_5Aqg?
z4TF-_e8!DftoM>jun_V0NN17fgOVW+GUInuJXpLhvU$_rOWkK?U?09mS0Nn))9N7a
zZTC7*Zu8plP)uUDjSWfOVC!yDyO-Ka(D=Vr{c-$JfK*`ml$8@DlV{Hah1lH}TjgIa
z>m=71#<*!|=tS?S+ND%JsgNEB19rTh773*QW#mlnQ)F7x(Xj9MiOjKlux|9qCYi`M
z`+jU4R`ph6B`fdev}i$tsZU;GmzkZQ&$0Z1vE$}ZUuS}gS4yJYMeIB_L7Ti2&)tb@
zcznLT53;=H!Um4aMy&8*O>269<tGLN$ejTXv6dZQ9Xb=Vy#`2ga%BRBuL%2Gyxqz$
z7MpQaYve3KaOR@#anw8Um~xrJ-4U-_h`9nqjus-I1GH!2!O)@?SebCh4fgIfgGB08
zg4Y4K&9srke_Q?wDgdnTDWUw#cNDYyCoDh#re1UMT|$4(18<O|GGKZ%FWUAV^3*<p
zXImG~2=e8zp+XaRux^BR5qa}!FRY1czQS4Ac@01(wf-H2EcU)_wHu7@YdyI>%!R<-
zj=XP|-KMG-VkLyY&k=JEhcRwmyXqlsb#SoxNJHhGzvoM+1!Z4v#Z>pMS?F+$VZSj(
zQ}Ym6cQcE{a81M8%a0BrW8TLrLbeJQ(SLa*zM*hf+aIJRx6FHhCQ7bYI_>>#5rh1l
z?BLad(J6Lb`D+?9xc^BLTrGEsTrRR&C)CSQCnnPX$L0vLS}1}d%v)V}j&nzyMhB>Q
zuqsEMNt81o%C@H2+n+nKwJS~9ulD+zMjvMDFm<_+APMx<j9WrXrfsWhOBQd(3Pyi1
zZ?~k?$uhS6gXSUSwPfBww;*R%@3$CJ^dfh@uDQK1Bhwwum2<_V=lO?`Y1wmM_mfIc
zTuNlwF*(8ckT*sb99XraWdBAM^gN=UC#@Fe_Z+_2MLYVrQ)>vzazGU@V!Gk)|BEar
zb;D1Zi8FSih$HoajJ>-Ki}y8pCCv9gemP!@DoN2i318Z|wGD9M8$b&?$%EZ&^H@A{
z@`<+uD4s}ZIIwI5iGRf7E)a$+KP2SPNu)?c4;93pShRrM+>dk#H+IAE&4c>U?Ikg`
zjXunmZ>i4?+Yb(>1Ok@x*^;Z4hi!bI;^J2?;t%&t+!ZiZqvA(~$%pe6atfVMO~<A4
zZb5In`Ch#H{dj7ipR~S3YW^YcCi`}0ZxF0yq$QzDy_Nu!(;l-)Eo|?LcXa`p3;t=K
z^qnZZZnio5i#51r`*+sB6r1cGh$}A@Q00!YEB0qH4&wo-Q!P2A&=BKO<K!&fRy4^z
z#yh;@sZSjBLYfB8Z~8`;;<s(kw|P$`%i4p-()0BBl1=5ENy_lvGQoje&HQIRBpbc#
zQWq$4K$Dy|hD8`X?X;Kr5I_VF(Si8$qoiX`_2<+8*GB-|A_g4H3C%e~W?(p`W0prg
z6O|IgP2Pu)3hgN>ZKlt}y9BqNiucwV<TDYM92(w#vEpgt)tF{oKFYH)lI(H;L;&0r
z012Q^XeNy@PO6E;SbZd&?XJ$1_Yzy8{fFreXo%33q#&+~PTpU?lfGXsVF_v7yeI|q
zOUhuB06ZWp5;kBLv!DJ+Gv(Uuf8aPS`AyKOa0$1qj{hI9f|<M`pi$gcDZ*~*NCJNE
z-baWqSun$Yk_<L0?gk7Fwy=LB8R|QLyRzL^rT@y(G_;e2|I1m)ta-S!H5L(*%tV(L
z+y)KGB@8Tb>?ABNb}~7%Y*IZ05+kMun!9HD=e&m_YJTDlS4uqAgaiPmxZQQ3zl@iF
zKrjRGP-Pa=3*Q#_gS0p8Gopv)*E{t~p!w_bWaPufU1@FCGuXTQrLKalJ9qRNw_UqA
zd{-*B675f41UYBg+~35&h~{sW*0asS8kU+uifia`pmv*_xk;&PwCmb#hD>q%wDkxz
z!1C9R>zFD>hsEAE66sR6^M-~$h=l}Z-vPd-191>T&H^O^6o^?!53?7?=?s^TQQp#2
z)*W;Z%eS?oBfG(vR*Nx-)X&F{dM>_qwo@|zyy#3MfahKZhzl)S;I|-)`C2`K%L0Mp
z7vQ^L8iac=z4LNyaF%}9FXEtc@mt<5Mb%tYLlGbw1b)870^HuG_k*UJ>Z13c!nZt^
z?Pu`BfUW__Y;nHR#&T#n%vRpi=l1xX@dDvGa2YWvHbX?u1G@!|Va`qIVN+}>z<=o|
zyi|GB?#?|rC9*NVBrq3_){D<62k~0l0hAGMJzG8QIQJts;I-rg)c)hk)Ab$|ttC9i
zrX?+c^5tRo{$d7J`K#KEA^{%RbZx#KGKR$6wyXXkk^Lx@#7qH5d?OItg;?{=S=BKZ
z!p5Hc9ZV{8Ke9M`X)C&18u}mJ&X2uJd%6Ri{%Ds|I4ZC3-?x9VKR*3_qWP&Yr3OCw
z+w%X5%};8Tpdl%kA%|pa^`xn1sL~2Q5XX<3)CU3~wknch8@iZz4($Gq*7m?38UQQD
zbKSlomk^_Ho`*pxEoIh!&{(~qS_)alHp&tkQpY$ZQFnxUWa8sbnF#a={bE2u8o}m2
z=(A28Z9903Y&?`f!|Xi7()pa~->kZ89be#yA%Jg`b=Z3Nd0qsH;rv0N9*Ip^w(W)C
ztVtrGMV4m(eLr-(4zH@==hNN~mrLG^di?gM)1z2};QifEupy6*wEslBeeq<XP=-2D
z-iXIz45!cp$gwcyxH~xBYa@7v$E`gKmoYk$hcMLkv*e^ap=rYT2TVkak}-rwy~avT
z9{J7Yl3g<4mSur1*RHd!)<wrNpmSj|4bs5P+|_?F?-T&1lFj^P+qKdce@fb``g_Ps
zIuM(w@a`8janG^0Cf|IPn2V@*_RaaTRs)++A{(E@aL(dMdAvxL`g3Wi*^(Bg)L`cR
z$IS1}RBkX5VkHIjBTq_r$esV(ozbJ;Dx5uBLPSoR?ZSK7aX(QvjJb?W2nRR-`Ldtp
zs@?I(EtUNF>Cuit_WWO`?SBl$+UOe_JaLfX#vifA5y?=C9;B&StjwlCwc;-ton5Rb
z!an?GW)+LxXPVQy@t6Nmru=XI$3DeRVZN_S#*P#P+rtq0Og0E4b-*gYZMb+*d80qO
z;fy7D97Iryc#$-7kx$;reM%JPjR1}9MGH#N0~M9`i(9I1iqdPfTTA{PIb|aST>rO0
z+FDVNhJO1H;6@@msyad2yOU`3p)nhw4`|XoE|qkg-ajrn3+gfF;YNbq_}c-FFFJ0N
zoHG~cfIlT?+DQZa#@ZVfJkwu4WJ4RnlphatJ6tqIe?HQ$h!(??PZ^kAeQLb#_eu62
zwq2lB>uIXFYb>hzW`Ps(aRvhschKjl!2fbVFBn%%t#>pe3Xpw@R04sIJIdA%u-gG)
z&=@M=q=;ju1H~X}XTX&QL^vPJJ$|eA8Zd3o+E}?K+qPJeLsEpJ&FKMJ6%0Dv!b?X2
z^ABnZk~8-??Vhg8L8C&GOTGHdF8mUZ;WZa92d`TRQ1|}1|AK4lqG`GLWd)^qoN}wv
z&;Sw5YPl50IbG4r>`rqnL|pYZBKqnYg=}x_P}v>(DByxQhJH!r=6fWyh<rVDw}YdY
zvJdz@Ks-(B)rr@f?DH?qmTCrPZZZs*M4#}^Fp;G;>yNTyjPnp!vR8Qgs?bWuK<cce
zt(#+Og%54o+B()lEBwTr_ba_Jv5g6;$xbc|%f20UPD#VcYV~H0ZQov9>un7}cKPYG
z2<l9GjJZd@KlRI4z(pupT;~=oP`5hX?kGw|Jm3N_{7>)w!+?F)q5<5l_O}7M*Y)oM
zmhaT$qyD2f>0@OOl7SA<ItjVC*QW!Dw(Ln%iik5)i)V|ur@EW&LcQ-aBsj7WRGUxA
z{|wvdRBtd`3Kb%&@r3m7Y-)T@Wv0e}0jTJXp&-REt9RlXssLP-NY-=xM9P9Igd5Qr
z%GU}|+&KA7=>m|$weue>;e+<1M)vF;A~ir7?LAOfG9CJ$6-Oiid6G+5bhtqthnNe?
z@pKOZ_D8@Sg(yBO-5%08bQ(;oE!*DG+lIHwl5BVbTYSR*RbppB(f|LF*vIiFxIaH~
zZ<TlZVS0aTxIFNrWae`cjSANar{W_vfX5$W$1L7_!%88(N$^8t;iI#6ZDXE8A-#b1
z{B!V<b5S#SV1##6PA5aPZln-@62<o2D>L+GZz}5ww3Hql`q3P6seb~sh3#Gjx9nW@
zXw9DGCgdfD0>0^<bob9~`aWH3`&@o?59_dajo}TrE4Mn*gYd^Xl9XXI?bfX_`_84S
zYkUi?4g+sJk&+`a&4AfUzCm0Ju(KKpxH`0gQDGPTKGjNLDTN%muZjkaIcjH)qQ*vH
zoe^iCy3CNcDx^9#M7TZ#N$&TU=+E7o{BOJWZ-sZakT2@kM{za?z;B4;hztje_cGn7
z0r&zXEPo~+x(frfaOIy&)@KNr`Nnyx<vYl@SxoVE(<UI83}B+eM$RKh4v;LhZk=*O
zQnCxQ(X>;OXbVaO+Sf#B^41|fki2ak*9t%;eh8Q?vGmAJ>oq@{2_0<xBEm2`HO@*u
zx}yAhOoD~0kLRiQxbD3w2gnU%0Pye*b_E^b+>;~K+<7Dg%pcZ?ydIWf&s>H_*5{Ai
zzpTuFYU5uBf$(;2>jD&fuAq5lgEJe0A}E=R*c>;(5|4UVRyV5?r`HnS$1^P@Nm?Dv
zND!4?`vXu-^6#WDWG#3B-cq;orq!)plGD}QY?pYoyf}wqKAI92!8z+!<sCdi`SEV!
zV?f-aG;Xn&(j#s~z;<0f&+3L9=Ze|`9uY~-cIi{>e%dl?p#`rUpN1!~?`z>_UESuT
zd)!SIHfgK@u?ah8a2J>hEzG2yHS<hf5xV}+h2Yz-Et{30eJA#RYw}A#>Ua$TEZGEH
zr4!!|aNX==HSDTPByebsBqac{|9@0^PGO!a8puSYfZ6Q)!60ywTmKcV48TlGshGD1
zV>gX#3GuKTkS;#8kOM2gEH0OoVlDbi3=a#}I3y=g6#F0Q16FS>{4<dO(WbmtDWM{H
z=Ib8-TB)?jn<={OHmoA2^T!pRgDaG{@DKXl^bayyn?t9ch}qX+c^7RIR<p5cUo=6z
zZ+4l+>6kqKfjrqRnU1!Ve<mpM%(m?P`lK5UOWTlqg%VJGfQ!djs^@@c`iqhG82TF{
zZw9oe5p&-zF$#*KQ7N9MGV2U{K)HBqr@`LR+*YP;E?Bl1<eNnR7?|aK?ZF$Y!=Cuu
zH?q!68dP@@o@6!l(I%2D?1k_ieIa+FVD4KHWW_5jrer@8v`@xcA~+EkyfA6u8ZR!v
zk!F-el+1hoDA+gn?+}CvEAUmw0#!~g?}%a6^&MVSBA*E(Y%07}WfANQ)!Lgmz12%4
zd3jR)FFR6*7xp@AcgaILG5{gpmS8}@y5NFvhnXtvxxru&zkH(x8!j*~nWJa=vf1vg
zqP}SCeE|Q%8eO~29>&){wZDE{<Ue-5|NLXBJ|Pgu)3WFDzvu(|6Xr15Vk-vfjEvtr
z+Wv~!wvWE<o5}nWu$h#<^0W7X=>O1raSMZPFlj{<2p;%BM$6$&+bGsRE|n=PG)0IV
zXzZWX9&Al7x!Qg7cIsaFYNXQGM=qwG66uD~3dt<>2glR8zWHz<DHMkIfOpYz^iu$m
zh=`KwdLpvFc5>TLNq_%z6AdmnN?z}8%)GKCn&Om+4qF7&9=_3aiEsybNE9oQ2^ZcN
zb_9Ii-(KS$#L*g5uy{H8o|rtVtc1Tv;Qm7PkRnVEXsBo#eW?QK(6&bd)dfF87odJ-
z`5)gbd*D*G%zc@5W^vrY74KhgT)p6lPPSs6=T>9l$Je;r+Jp2J(Wqif??hSk=jdN`
z7-yp6yeb?RKb|A6=HL8yBR1(Dsh1T(ft>m2U3kk`WJ^R`G;1);x<zr+zX*ASe<$R{
z18EliB;=(qggj)uHrw>j6=-D0a}R_G_kAtbxVnSPHNo;rBl2{xhYFZ;E{w!a#>YU<
zopZgaj5${*ggKPJ@hp{vUb@3~$6lVIoy>;wX121dDTh;RBEkD&>+CT+9?B!W2JK-)
zTXW~=dw^4;-Tku&S<MBA+Arcp*Kzd!?CJ~eff|ghz;d{EX!iE&$F&_K<Mc<`4{@C-
z>b@m4nIeBsn)QC<x<$6g-W1t^1i%vKR)s9Nh*^fPqn84}s*qq<6^uhPj<X<w#XTnl
z6Sl9k=8R6J>XHUpO@7Mrywswsp~`x;aBCI&vrk?bQn~UFBjPmy`Io-=V@5cPy3SVL
zWsWPZD+=ySk@_hRn#SAbhp=}P^*#k<8iv`jk3Sfn*Hg@&g3sGWt8%cWcQjaX?(!ci
zb-DH@NA|#7!1!Z6TC340rHzX0mda!2S(gag5STHxOOjDCE2cgKiX6cNZDGsUsEgj0
z=OoRX`;0X}%;7nlDuxN9bB~T$;V1!@vZ`~52}@}GdGDk+L6n2vM%X2C(^pQVjo@hb
zogb*{mDkFxO<jbx;?UQdSCc4$YuvoG07G6`o>J1IV|Sz`@ycDIQ<Lr*C4&U&K|sVF
z_MXilguHwGbfdUV5H&QX6+L-Li1Z_n64l`G>dGeCrMivlo%=67o~7e2K7LOH5KA?S
zFkHx(XQ5?gA{p`RrVIJ_O)l~*4?}VgWimoyuToI4+5kQwdJIOXUG(yqStn;!>3`Yw
z%+2wgaM7X_S?Fj{mqO~AF6b%GXK{(t$}5=d9}|NCwjCBA;yOFEIGSFOGve`mU`fMY
z7ff$dkZ--85(U)5C@_$u>y<Bj%N4T9?8%`fi%LkgW@bO@c~8I4Q)y1GbG$>VW9Du3
zl*oDf2Pd`^nRd}ktZM@MBUVAYOmO}e9VZIcUP~Ryw*jqh{j=I#lJ8R|r`%&FUZoXm
z{~9w)d0oEs&DCQu^@<_uv-B5Mhs$0JtB|BKO@)C5EyVYWx@RVdt_-D)EheTWnGd+B
z6@V>cZ*3D9(Na~f5WKiy*SEmD;>(Q&dbj$8{XPE0B8&*b^1P}ZZq?6A7M)Ep4claP
zovfdZ0hI`JA0>o{Uzx`GHl|N?yM=sYK2j`<9h`3k8t{X_0ZWWPr3_VY<^7EW++Uo0
zT+;72`H_F-<Wc{`$&&}yEKxtdpg9vT*H?p7pZ&|k7pIt9nJtX>ezKfrcuT)zfw;hT
z>Ljlp2<P3p{l^Ak?;}gHFz=d$C8{JD_3^LZz&b=vl{r$e_Wlp1u=$D_^Sc;o=UB`R
zUKi|v;4785u>c9-?QrQpQrvd9HXvYcLjE^8KFRXN;bZB{DsOgZh|@yvszzSN>Q2QT
zAC}muTKa|S`RpA)tlv>M0-t$(mZ<&o_aLTYHc)US>F=U@|EpGsI-XS{P^nPjkPFQb
zx~xj&0yK0bV#m|0xhGksw(n2xdXzgYIo&Zp&gEGT?&Vx~o7ODBje;3@MlMVZR`i#`
z9UH@9jopBb3!fjL7cAZ0U`rZH)4G8A`Naf9T?d$pxfw6>i>}K0>wy^>zDyhnOO%rE
zAT~@DR@(Xxnt%FVixU$5gan}f10?vX3JU{Yg6_Xu89hwnW>-V0w^#zKr9ryaiwh7G
z0Z`XP4oTjz>mF1f%F%`^b<k&hvn8RRdH}p@<zst#53_QI89scMOqV?Ua(Jzn=bq}*
zHGzA8aGPjPNlFlfhqZt{uh6Q70SCIX6maQF6LPlvo@&pRvSW=+W=FMaLBHO#|9Ib{
zQUM#qtsnCmT2FtaFy(%e!o(C?mG|acK00hpYdUTL=ypu;z%5mJZ8FgTt)nUq<y(pa
z;WhbimLReFGx#OpZ$aOnXt6s;A)m^pnK`3$cN<ruW-{A>ZmFoR6tlReF)RF_VEEmZ
zRbB0{8sVX0w>7~l1Se1ZtPNx7fxy1$n4h|%Jv?)(r|a6*Y6Z?#mjyE8Re3VQRZDiC
z#UYi%{Cy1VZ&a<lw0C5*Ip`MwL<#XvSO>iElNTqXX_ou-^Smr$0L0T0JI-plTCI+;
zL+)*-4ITrEen!)IN4QkzZgKt6?#T6`$?obcK+NYn+KvXmnUp|EI1@6N$`~$Y(@}*U
z5?Jc{7Vo*YU{@3Ed-{9bCiN;nzY<n}{zr_j?cpk(C2^|Rq)}fW1d@CVl?pqB8Uz^o
z#@|Ojsj8H8Tq=O}`!mdP<sFUoGkd<ev6AoiQ^ZwmhIs-($?mJ^s60zXqr7ouOVB~;
z+~TkXSCvuB$$Fwv(bkfm<2^bgz8sbR4$#;H6hEzKM+1y}i-9>7a7^&K3hF!+<!{FA
z^~`8Lu%BC!u+0E#hqdux6$68IX>XZosrL&c87)G`CDd85y*u$u_w(w&G1NJR*5~fh
z!88kH0m_GSn5Gy=+_}xxd^O!i)|>WD^==)M^z*8~UV?a_`~lzv(<X3Yp&>8$o5UB~
z%d(#wjO1dxd*jpm8ZcqPaAhx63-w;xS`MfM+3)9Ls{WNluOIn?Ymt~PtJbQqRgr@;
z`$qYH(fe~px6C)BfNrhERLD)Wf0^}#_69G#!hc|wauWH&PN_i0Da019s+v<+cO>K-
ze0GqZ0wn&s!Cdb|Yxo%a7b}`6Fws>Z-pwH3rUL*WL{`iP%NO$@;;n5O)<`%f^x@|w
zMPla@SxBiA@&)%QpmmMZ_0&2GAnR5+c)I4jHfstN-E?D(%e>|G?9~VHhXoTZ?eEc9
z%sr=K>vRRjr@8{PUAr1FZ{3e0O-V;Mypo?f)4TwbU?X}F>o|F%>q#uo6Y`*Y^lQ!P
zX~Q(ZfS2hlYvGI=1=~^3AnzC=zfFHs%haIV&2|;t7n$XK5tc=B^KrgU02H)U8n@gj
zKnI3fZgK(jH;*0%<L{U3SR2TMR6BgV`a(};JQm(CAmDBJbQ}{B?l5u>KKlp+7ZR}-
zdby;0N)}6EF|A2ZvPM)6oC&0zQ^(1gH;6!2lsV|nROqX8v-CxKgrM5vpXs7Zw=ETw
zkHf;FZH;z)YBhKyHZk*NC%(e_{*tFeK>9@rUNfDsKjf3sD@eS~f?S;-HG%r`c{d>)
ziBw}hlX)E{jH#dU#Re;;i&JiYv9Et?T?p|`)WZ&wum(f`h+r+KUvf1nR?uZ~WAVuG
z7%0b+-PX?=Yl>7X_^trdDp`Os%!X_}$??f72sxbdx@`5U0=gr?;%IxQcln5Uzh$Zp
zj@hT@y3Ga9JMjxFZ{>^1*$ndck2L+~s+D7gdl81`r4R7};p)c2ZaUB|8&TpB7r>uD
z+@-`hoS};^Bh}2q-WCP$kWR&lF76!zo!-`aguHRycWi_fW(11%SMV?N=YX-R=SAm$
z;-hJ^GdJDMR^E(9N#1r!Wx{t>|BXSwkJ_<Bo*X`(@s24|LYGr7yj?xcfWr3d;H0H$
z{x(M|>@wYxZ_OVpF)#t`p<v?0p_u2HYrWanr7tj<1UJrkXOGkr`!&f&)W@4awb8d<
z040N%QbQZ_1jERX>2ERA=%Z!#DnuRv)#T>0V7Acd|H+VR*?Cz}rrRx3sPC(l7)dvY
zMQit<efxHtL&*&3FKOUEmheB*05wmjg&hF9Bo@Qp!-V{o(L1prOE@k;Vlpo~9M~3I
zWQ3Y{y<EoE^gB7RwbcHM7A_bk<slH#2KmrI7wGX~;V3C|5aCn+-WPz1O0LBMMN?Ow
zE+m@EYeOUYeoq^S>yXgauR&d9t^_5YT{D>aFQcCxqsBBN3Kj-e?p^dP{FhDdcE0#W
z97uzQZpc6N(*Hyb4{NzrzFlj5U%Q4QgKX3OgW#X+1R_5>9WG1#KlLGXSqzmkD+Vrs
z-w5J*``5-rT>%ipDP>4)9zhh1pQ00MihRd8UW6^%=Bi9*P_>mD7#a3p`@$Bk8;lhI
zz>wlI2~~TD2@nXt5~s_cKz~&a$Co&iZG(YZXMh7{+5-DS#;BySUa|6Dl@Cs6ZSh(X
z+`Sa}7{GlS7Wc_y%XuF#u*q-hM*nC+D%h>}X#-uCOn^AjgD|tzDPMR!I$Z9MyqEJI
zP~(68cpLCo<{49#xyJh9qbr`k9Z~3SJPBh1cS^VNuE)gI{`kADZ#wGB+tY<RgDFgM
zTR1O<-rZ2uu%@h?aE`b^z+=34L)=}}oh0m<+FZRg-pX?+8^)J~`w-HqwENSguX@sP
z38--&%eY_pDCryaI&811laPcDX(P)`IJ`mS(_(Ism3Y`0rz5alX>r#7J!dPN>8lxP
zic4*w!q{zLfO3w_pkty*A$iGAS(vAGQv+53vd%td2u^=0>mZ?GYSL#(aw+ckNBi{0
z?W;%JkMCbkjOe<B#ksJVkP%xGssoMcIBsthA=li$aosK5Wc7U~m+0i(+XXjcDcr>O
zlKI)`5ChSu8tsRYsJ^g}QlvsLP_|OEP=TBz4CX2o%E7iR@BT(!bUy2LxHn!_^x{}m
zXJg@J_EV5-kTqgwZ>xDo4Zc5*3?I4zL=2hC{DYdi@?#XfWKLC$<_8i^kDa&63%IjM
zEH9V))$(4!V-&|CQt`#UoqFlt|JBdup>KFChz&(wKl0l0-2G@ILQT!AXfNY>zvY?=
z|AR~+D*Ay!ae_qQ6h<WUF3g2}FXDW>Umg>;_;Gk8A~x~)GE~w3MoV_~{Q70VzKG9o
z{J@%gSYn@>^b2v@>9Jh17wAWEHwx?9xXk(um(&>ga!j;QkGOmQ{)=VUO>y4#Lrf4o
z&RlH*j+t!nm#zAEFLHc8@A0ki6I)LA5%=xwhMpv~C;omcx0^%66AEq|o`rh7`p9-?
z{r_X`tD~yix2^#<-O>%Bba$tO5~4_VmvnatNJxluN-Eu*BHb;qY1qJ~k*@FIoO91T
z=f0Qoeq((9eE%^V8`;k<)|zXrIp@R2AbMS{cbfVk4n~v}dC}!(4cOh?qbGS(*kq;>
zyq>E!ZH0A-@Qvt=yhv+hE<!qMAN*iZW#6>qTu<{Q{0En-dDfT;>EQ%Xy*=7HjXLl^
zfMcF(M;O|ahQ3$se=O6Vi+5WN^9dokh;8k-bAw$3Y0BAGR2$#Qx3LiyVP}3_wme-;
zC)4S*=vJ<O@X@OqItr_Uc9fwRl_Fj9GRhwI^R5C8y+BG;`dp}(>e#)Jh~<S1(E^Kb
zh3%l|W-x>4t=_au()7^&KrB5Vb{x~`E>@B46%)nbI~*yZDYET!6qe^v?n1i`gwsHx
zgzjefXxy|s(+sXHrccQ>GT!Kt<j8zsVn4ZOxphz?lB^Qu;vrE9sW^`4BJ_@5o&Bop
zFb9##+3!YOSCUUfM$59a{@!Q$TGHqFpU?N7=Y-M>ZZj%_Ju5a<L6$>Y5CmoO06$e=
zvrG6+#SXrIUU&(8`TgLdF2B67t892vbukdTqQwSTAAd8J`g#Ncqteu7Wz*~w+P!AT
zQd-&L6fDU*8UI?eG>(IqPy7J1?xcMwz_zGR-T&gc6BijBBbwctxUX|<A_7;Jv-0-)
z@!=Dhv$16)?_6zrUn>qh`e<f<@)ODR_Fl$yS29cPOZlcIVb^fv>-Z7<GRH<iT%3$i
z5hK>8$Q5GEC;hC20X4c$+SDxLm`&5YL(oQ!Lwn!6t(4UG&*%L2)mRJiL!K3$ec|C-
z*R~tre4xK?p<9JgQmKSOIz5nuy;#h16-=o!-j~az>HB(b1mYL8b>Qd5LYOWb5`fn9
zTC|u`!>x4FvEi|EPg{&=N!(HAqa3wB6b{)8*R%1P-NB}FZYsn4BnpehQVTIGD<Uo`
ziD-imKQN+X@{84%&p0=_DLyio`ebZLwtNx8hr8iU!LY_4a(tAc8o$U(!69jIYNfqZ
z;S$nDlCHzM1H~iG5y=u?ldiF<k#OVgL+BlbVkDkkd_t(3Yi5@TLp+yFJ8I7(n`0RW
z{U4YA&s}#Ahv`MAB!}jB@2EzZuoQ7+s4mCkJrkTGCP<<&O0HYPFg05|@=QN}{~Y<?
ztbczH|8h5oRgV?jQndm+tRRT_5;FDCTC{)bIYj;o-yo?30(RC}<g;7DieBl8JOdFS
zUyK=7^lrt3=2A?y{$F>-G4APVac`tpJ@M0y1&W*x<KW!s^{4l+<P{ZP^iLfWM)t3g
zAPl>&IpQB5eXs{V^v(Smk?O****k`GA}OKnQvR83Fyi_{B}<j_3_~54R7hrOY)+X*
z?OsTy=u<llA6|nw;JkLfOXR3yQ_T4V9}AF9cem0<tHHVK4k=g4csFw*=IU54+PgnZ
z<4}jZ3>&9^AZo&*<e;*3>@ie<)JDe(mGEpn{m;ny=i>f$)F?AR+MOSSjxDa{(f%HR
z|Ngl@&Y?ban_n6_3hnEEpUeLiy@B7QYz1+M8Z)-m^zAB9VuDVk$@&AU9pWBZu|MJ(
zr7Ixv!>G~0e&kZal)4!SH^~rOXH>0W_Ft34pI@;A8&;@esKicIUJy?)TZ{!cCnvA>
z+wm!_9*cEA;TN%Vl;_<)<lelrOt%SS%zr3`(%BW?ub!qYY>@e#n(a@ja{I#?Ph4C=
z%0ZIJiW??YT5=&WTIv=pW=@LT&j~5Z4fN5pa5#Wn-*T*KPXmGHi`c&0BV!V6`hQr-
z4{Z9~s!HY{tRgFLRmtuxlV0tli-#iZ!p%BIsF0hcSF_OiaieB$;^I_)1ol>Yor~>2
z41vc~0)a1>Qf8>DU#^+tB}8D_<elOCua8Hg-$gqCG~naDNn@c}UFB8j5G8a8rg+1d
zlc+7L7!x;q5-ryHYn+4THf#Q9RHCwEio5T(R1+W?^;>4P)J$#yGV}aoK|__Bb3E?J
zam?kH_BUUQGleE|OHw1{KDSV?ehPZ!8YiA1ExYEg{8;me*oKf#<-oj?YzyG6y~0W(
z_hTF^f0M;k_Mt(&Q&MOxCbIe-YjB5_2FbRSlMVY8gr~~Y(Sa8*6L87_ckkG~ql+}=
z^|o)vN2g82V?0dWUo{#})j!DAF+OxY{76vE6YAx)Yvh8fk#R7iev!5J7{pdDdVW=O
z4EgSt_AfXv@r5~IUxa0@>nx6W)GX(9=ckI}O@96oaSSxit#6M8Zp%ztBX%^^Jh;A6
zj<VYmok*8G60c}3MUQ3<F*2SQwo)j2cOCJu!d;t!o@kSHGX16#v{DqbVG|n9hQ1~h
zvCTk|Z8)$7@d^FRoxF>?1Z5@zj4R<>5MOon2E^#(zEi@+X_9QS=__a+%iVM4u(hgs
zJ3+Zn6=M4-3jg}s$sDZ*_>-ZO7l+9WmFziyC5Sp)Rhe}rc0yDLTJXtXAugml`-T1x
z^rN*w=PKdJ=-kH0Bp1HT@y;V~^X}Tkw-{5%?yS-B>*e$ZE}kFU9+ThGgl{p3Prc?0
zE*8CapYe06G+2Ftd#o}4Ourid@s6m*;A55F@W5nQ)@R>snG3gN7sv05i!FIxm4;DX
zUnCJl#tuE)B?8G=ZyR)zZ#{!eyPg?OU=oDxoiHXwRI5(*CyOoi{(OFTe98gK4H{rb
zV6aTbQ-uau1Z2FtB-c<}&$xaaZ-E6b-dg=Sf30RX!TfYyf<FhgU6|JJnQWl#bOI|&
zZk5kuA1G;Q;fG11iQ638g|qkPfoW@3AG36Mjb^n#_HKo==yHe!*fdiai%t9Vo$KMj
z5gSzFOOj8^LX(g&X`95a5FNqvdiIxl<{DtqW5wx&gje{x(XoK#HPc|%yvuonyn2&z
z!xZY^1UV`;vTM*o@zBl@mh}}TC-K6}`=>-l7b_9^;HPBuLpms&zr!a0PDEfhUi<+k
z?qP3zqceKDQlf0Jw~@YbXmj*aLESC0;LIkikdo`&n8>^ZW^UQDNDS5w4m;Wb+61JO
zxq;UM*M!LxA24D=VM3!YszcXb57E-}r_$QQR}z0MJYFev$Us1}0w4j$Dx0VXtB1w8
ze5K#*ceePR1yqcK7>CZAT%AEI<Vov~TjNSBH2KMImrCRJYfOiKX*O!xhmwNj!mPUR
z;!WtA;D&bV;t=encSJ3MTc3B)1zUN);pBdeRVO7)({hkHM-4Z`^w3p<fkz4WH`Fkm
zs#h+<@Im{D_g?jfKph|gB?2O#^>!E)TZ$@+3CDQ!oA57;&D@!XWEDSM^2|EWEmT!9
zKnc1Gn?gvl+@k}HYZF}V%7LDA*`D0d9;`PscrQWQju4i-VXv(-1aH-atL3?YM$^fc
zDer`Y2ryy4uMkHUDvPL#5RNg8a|m;V+qS*$<S<dc)OmD6toBJ9=ZSnU8JtVvVu5lV
zJZp11TLx2*R$B>K2<~x$fgUTbpiedeRHV5%2zl1v`_5p<TFr)vNi0VH_B=UiE$&(5
zgC~F&_Sg8ZM^Wr)pxGpjF56ijwSt^W0S^m@LKl~PE7`zM%letnA#&*BrTv7(6y{%Z
zsCq5B#1lovjTtE}<e!I%N#=aw$3r8Ntob}OTX^JJni{Jo>REmkF-SdfAf%XPxk8$8
za=T4cVav0LeVHr2p*4QUx&E^;P=O})gkP7eHstK5si8wyZ(qmN4lZQZ)Qo6Ixeh*c
z4)2slaQBBz{deZh=IjTPSF|TwiQ#i!DGUc&Eo~h5k}xqPeLqSzGqnQ^8@z4<y8TOs
zq^9}W7t&=Ib7Hf_3Hdil{*mnh10<eQ8hfdA138c(!qKe?eX<SvdGdwTQAfhZoV1<p
zjr<z%$M}jsU<zs;P!ufJDzQVcFZ~CYngPSPb2KbqBv+D^PsDkE`Ole~PRw6|c8NiH
zO=I))v*5#c|4+QZ`&hqi=pzPx;mbd>{{vq}=^S*9*7)63zH~--mc)4{8SJ{p_YavF
zh^O#+nc7?Wb1ymc&HBHG?$Id~8-5T}O>xe9aMkaD*b*@|(0kcI3Hec_yv+66^RnF=
zU^)m4-J-sK{_s7cixz|%DC;MaDanOFDq1L$G+bS=wgN_Te*g|zobKxy@$`KSz3ZlC
zhYCVSuHPIA>Ax|^TFq5knDU=X^PekCw+RPa+h5c_E={yx+8d@6ptD1*USQR^E&inQ
zbzr*Sb4rs`y%o*mo|iH&U{L-}1eY354xukAzwxD^LxGc*RS79S3G0c3oGegQtgZWe
z9HhzO+C02(AEX@r);_SN-`J03|LChkDGJJyCXa5W9qR8Xab7=Vjqe-b;RgB(M`Jtd
z8WlVBdmQR>&VPXq-^OY>%yRzHN*F5?54!%!P%Hl6zEWzzSy(*5smAnGPhmSekkxxi
z|4fC(s`XkaZ381n(y*c9wILbmdl<!SY2pvzgp&$k=We|>yH<TQhu*pNxt};Z9joLQ
zv7VhUevS^b#rUK}tnwMi6vh*RBg0w?DXj|9ue5A^TGSiHi>QqdZpHn*9-HIfKUush
zf5kSjzCtFm9wK_$pN>=hcnR`sc@855=9fP&VqdhW%6bU*m3(oNkg)OKW_rcW%-+#h
zDfIYT-alY!{~hEU%O4oMD3T(2Oh^k<>eDwjb{b8`>ZhtoFdK$#B`~BQ)%F|E(6gt#
zv7$vWf;22~2LNUZ{fSy3riTbtnt8qt4Ms4V{r1V<hvw(<@;X&+*kx}R#N$IL@2ggM
zS+7`Dxcl~t)J?^uw_FvPt(GzmU|&7(F~nF50ASEdx};L^#=n&G3Tc*cj4UF$>B;=W
z?`AzJ5U$i8xLLrV$Hj$xN;W_^`eMj(Q8>T_Y03b%{DtHk?q>$wa&pqg$6?P?{o#_}
z$GC)|GNtpO{r&F+HTzN=YZ8ex-!d{Yx@1J#oJatpqxS=-TaB~Czdqb2udAz<^((gt
z-b2W^J*<DJrjI!ORZTxh7y)Dsc774}32+;$RF+H>7l$=}^|8XFA?wo@K<~y4nn3Xn
zZKZ&x`T;IcE}s@CSnL}0$w-q{l%q9qpl_Doi8rGY(iYNbcP-;%O_II2yv9&2Y@9F4
z{BO7==_Nu4e^j<CBpclgG)d#hy__7ALcR8>;6R1i|H}&?AV>?wn)_6uqBoJ`XH~_F
zhERC9-s;N=k45BIgAk@h0FM5$2siw_I3BaxadK}l3;h1E<Kd7#uljrS`&4gnRV2w7
zzb3>K)x_#urG1PAM;>w|15=&v5phN|9qg^ooiU#Flr*K+g@=Vw<)=Z~Cx6XI_MyE2
zW@F0(FJxcx5Xq>^RGB`Z`Z-!{^OcC@`0}W8{V)Z(=5&&p0jH)zdAp*wJ6nL(<p&hJ
zt4byKNO}*~n%C&CYV1!iLN9pP>Sfz;kx<as{P`Pamw_r5Y3hr9ofsOXIbP1(ZN;8n
zljz;6E$#d!q51Nf6Kp;DB~`dc;P2Gs^SJ5RE>sz~AH+SBmovp|P_FT;dj_i=ba3lX
z;DB1J0Y&S^D%On!{MmEvhTGrwf2l_O-yt0kxy*>I`~&3q*GcbTghkjndKnLWu+#Rh
zPiBhofcT!8@<j86dm`<81YAAwOqd^Dtb4RxM+1Lf-GXfqcHU|5jgr9^sG!+*TUHMJ
zLy7?Inl?2Y06S_t`>5EhHTYs4T&O>j)CF}LTI03-hU$^H{z)*|V-f<}#$2EWVX^Qv
ze%FjYiEpD8{m5(has{#*7u(6l3XjqRGw0$j`n-tpq5P=y0iLjo@dx6W<{UQ&s>xey
z)i~EbZC#y~9vi9$bZJ-3Y(HtFV7v%KdA8<{QJtePImY36Om*+xGO+0JJnZ7CC;02Q
zgI;6uk>wrDV`l+H51%@*p)S48dnb}6-^rLcdFtOy+XDg6yz6QSM$i2`Z<c8P0ulb`
zWoCz#<I|Nb8`BfA#dOBn+OP4WH5of^)M%dXL`$;UKgNF}Kf<DBesz1U$GjFVjdxt|
zQk(Um=MeL6WsZ)g;dp&@5b}E=Ir%g<r*92##{I351iFXIbmfuo5-_yR*&~l1vlpby
zkJWwhs&UKzHccDuBHP*(r{K2={bFr=R(LZgMG5qhfIeR#^8Bu+k>B%-(1aV>VY8j^
zg#3_*^cs;>Gw`i4QN|%A%35w)3@0*CVN_%&ub#T<oJdCEQ*?&-XrS{HjSgrDeu{it
z3qhRiuf6Q-l6Wu$W>TU6S;NM14HhU;48;#H+8g%vL#)OI$^+DO<^<S(!!5Wynwdan
z?{Uj+*?s*E6kO}U47pFgeu#QYhpo@?Y4&|k55USEgkJ%>YvuMg9-BZ$9V_gvVj}Qr
zi*%)18cWmM7gZs5`#QxOBC8a*b;)qmT$LEla_U+q=t!PYbzVQCqF=XE4V`-!7cISk
zLFV9;cKTF_{DQ_jL|^CY>GZ3yrzEcQq>smSB5|P_`k?#d5ZhXdfyuXa{EVZ?+CyL$
z9^HH?|3g#)5k5|bX-%n$B6-8N_^JY3RiIFkd)+#aKM!QvXFnI!AgJt6CN{y|FkDO6
zs&Syicrn!|ZwCog8L9b)9%^0oAB7Fns9>I19dUnP^pUF&ToEVy(Q6p-Iz`*zSSg^>
zfjB$;>C(t2_D-kolVsR#PsUUq&@Pb$(wN-0EFX>nEn)Y~IhDs>{ROm{e7rI{OvD9+
z<|2dOF6jOA9f5gC@<4rf?>EzN)wz~Rl@ocD!#b{|O71<!Jj{#W2XC(!?BjzepL2~U
z=f{{g!{D$G)3?TqxrW-t$q^PSK7#64n6iMmH0b;a??*wsbK3WW(gXx<#+kj2yfnmI
zM`%|~#=4VXs%ak;Ozr*KEFFjNV@<=ICp-+2cieLIq~p_8Jr0E$Vf4DX$rR4dCh<Nr
zM;iy*I~N5_){x~N+Wsea{L4V5NBBO@OJg|<Ct5Z1!HN6B2DGK>w42qdU=?X)VHTuT
z0WAYxy{m}HQycZs>yK3IX{dqDLr=VXtKkm@q#yw`gAbo*Ke!9l`)I{W@c%>0^1LnU
z`qPHXk+#0=M7hu+0`EP(e-K~;Yjj&8RzKEW6aN2HF<dM71AVdEjZfMUaJW6__Z}<!
z&I`Awth`eh<IY8*ZUXt?#-2V!SMt|VFQ&YQ1|KIRGC@wd>vsg*7hD>Sy-F7H^KwIv
zxsL!qC0|J)m_QlYOP`dNCMWyp>$rVVo`x;ZEg*i>^y=k{d+RHdnpJg-&L3t2t9;<g
zD<|zNeR3$Gb5B7DyJaLrcYw*#MnUFFPsJamvr)0LipAC|Cm&*i3Y|5^%LjKGTFsA#
z;GqjH=kmcpg+|*=sjHr;GLfGV71I)KW)VnHXOVp>Dt!h5jV$oGYhZ?pu8T~HraR15
zI49Aa%Oa6)rL~+{1fzg=p%SRUL$GH99NV3`8&;0b!+VL2SNMM7b+3jB7!cuBF?SDZ
zlgYdz*qsqTP$!2ps+5tFnl)+e_RL^G5>ALV9GTqqwOygYOy#M^7fETWJKJ6r+sg%!
zQ#E8z^D|e~lbV#pWK$i+ofc~C8O{Ec$<fDG0Z;{(u;W81tum$}HBzgh#Y3!RbuH&E
z$k*)S!!{uoYkcRq0!S;^%*DCuux5w?>NqiXsBYrCQz<}EE>bA0afSK_H&rds6wl14
z`!sUbHdG{bOQ>QB!bfr2k_ox6&%dMSKG}IE;n7$V-vKRmB;ZI>`-*znz1I-7s$Z*1
zN<u2Ay?R({)VqDvZ!gl_ns$bl!LJuc3V|&C4FiZRKh_V{Sr$m2{<ZLXVR(BP(n>82
zl=NJ-Z~N`vq+f$KP8LnN8E=k^!9c^g1kc|V;6(q(!QE17Ol=adsuWtRY;jL>b1h_i
zOd1v%i%3)YX^~>ztJD410|7MQqg$&-tj3T8O_4BLK^=dR3k2P!+1Ahr7B!*in!{Gn
z)7}fz7f0uV&I1CY7V{Tr?knGF&q;;w^1HMB(QHZLS9iZ~)^sDH8h0cv5cTtr3hG2Q
zc^0~PxFs%0*3<faCh+9`?0aTyyg_uas;N<NoCrF1e{rz_d*8-<ZZ=2<xN1bx&*}zq
z71Eq}Rm)of?Lfe}B#vHS5nbiwi?g$i!KO`P@2`@~?qa^FsPP%i{Il{4kIAT|!q0mG
z@*C=kpw!B$y;-|5>j#3h$tGA_;?1=4qi^<X^~T*#j`F9>4$Q)HjWbKNM_fL7-(0j~
z+z)Q^9(fGKn{TPIzI};z5^Eb$+x*TQg1otNE2={wkRlm|7t=iZ;(AipI!8fWW4ztx
zETP{x++}K-j>MP=c&l;lP<Fd&2yo^V8_&wL*eb%2S-__kj}K2yKLdV7IG{w4tXK`#
zs3`m%!AB`!t%|K<mjt_f3>3`g${Ql~l^QZLv_8>wuWn7IW=_BtM?*^_Io9f@96+no
z;Nt{3I*&E{ZslR!R+q2jgat5~mMn-v{$zfl0rWk`OAvgBsesN|4-5LNhV^Pv#&j=<
zrfXpl@Fuy1v{sco5vN%0-X_D=0->w$R5#nQZ;UjCS6>=hKE7t>@E)hCKi}F-if>QB
zupMIWuJ;Lgd~|;1D;o;nEUOXp3a>MJ_wA7Cii52ZmZ;TNR%iX^NhvuF-^BPGXv8;!
z-75!vy2<XPHNDANB&9P62usXdYrSp!F;P2vtemS{>_9`Q%`x(d2HlEUMUDV3RZoE-
zVJy?9V27XFDx$!uvCY}JDc$G`weKe>%_xiprk8>2<Lilgw6o_^9cIt?+PYJZF<pz8
zUpaqcR94N`OObJESQxN9>z}-E$`!~%eE(^U;6w(jgQqQ{JvleYk!YjCm=1k?SF!&g
zV~V`2TIa;;mBm>Xsm76fEt;GaNyfs0M1k?^S89+gA9Sw{^W2(ROOvo|{vB4mg>lX8
zs0)SC*VUXQ-jc1lHUo=EwUgSbYWu?Ue6{vqdcFC@x7od|X0p^bKH`nv**jg=CVCzn
z{W!A%?PBaUn*dg7o#5imx$))i7P~)kr;AD~08YTh72&cj#Bu(zB)xUFZ1>{)7@&uK
zt%*x8v*Ft9E#NKbsM{-E@RSI<yf7aTeW5BeE!jFgm7-5nP%TzUfC=^5M{jvO9Q5&M
zvI1<HVdqVew<rqWTpHDsu+UeZS8iK4pyfkwwZH)SWd<feU+q~9_cShOOtV=)tEIIy
zt%={Pa7V;vNIM)F6d&!cz}SDROl<-^Z+W9x+J1iPX||`T!PzkVEUi`d6E~K}>UmN^
zF~M~2+->9AzHN7+;`WxSxk;|Y43|Z{y55y2Z`$<|)yX@}@(w+hD**uPEVr_fMxWFE
z6;h+r!#r{cx`xq{YXq<zG|$=E)%~KOxMti@p!{EOy*$!(I4+2~@nyK0SrSG_w}9S)
ze~==P(~x>DFqRps6o-d0>(Se(fRdYq<bVPJNuYLrJn|XHE1G}&CeY52fHwdUiFE#+
zF!D7?fy7w^Br!4?+1PV+YxZT!uHa3<*MU)s&9(2~^A6hLXrkGeyUsD4yj8b(=8ppc
zdlt%)f;&9D8<OmA%8fI(D5Vj%68c?|hL~B=^@}{d<fqGQ>AgTQck^@)E4|IxLMT=<
z)<8dh`aO}1pTt(cr9&dDmzjcjA~PWUj=K+~CUoG*4t3tmxfr5_dii^xTV`KV8@2QP
zHiL<Stbp73rm`Bxt}}hrVK||Gu%;Z{iBI4XZA7uv8BsBbvi%ME<F{issZ9=1^ZBr;
zJ08BZ9vNOOfU7vAj2MgITV8-&P<A4XXyGcXh!l{yGc|M$%-pzK&(3VrUjuFMfr)*M
z-Bf7^FPwD7bzu;)ejLUTC;sq>IVC3e^Mbv{^beDjT(X8zb1gA(nH@7Z7nI1sK8R-`
zhLybUj<0Vb40c6vgM}EP>&=<%8x5PWrES((ek(kAE1hilJohe3T1(aS<4!?%e?Qjv
zJ+5x-BouQwGZA7#{6;y!LNjX-;{epO#U!gD`)m7%*=dxR`(gR<m%u9-bT`VB?~Bv@
zRWH1h+$V;|Ud|!GrJ3i`ZAN5>WM$9T6d{;e3h}B0>J<-~Y1}k?wKhJCG%{_>U|ui?
zuui-a5jMNzDxl-FfXQh_c=w(AV0s<wZuxT@6u~w;dy}6NRWnn~n&*m?;B$Qy0mC^v
z!8*GfSwo8BItl`hOeL!@7mIgF()<i`#7mpJn=WEdHRG5suoAO~+Piy1JhBB)s%g=Y
z1mc@%T}%Y>Hc7kBh~OS0{SdzD7g+Vsti2eiEsUU#WPeF}Q=)Ywf7TyB$H^<*+iZP{
zGA~d|WL&~m^8(a8f)PW-ZPst#7|ArzW(ENoSyR+zYu(&eox^i-HbrkVEnC=BrlPj8
z5kimNBXp0XN4vYff)XEPNX_MDv`}2E5<9c7>M<`en;)k+37?DWBd?p*St)`1VL^!$
zqnS8xwbmzH#GtPt)2AO{7>4k=4PDc=au?_LM9axRNVL$4@|78Khctv3YL>LXZ0?_I
z7M(UYeCM~fr(?DD&v1~Wmq7md+S5v=mP^HYu`fM*O6=T8^)9UguTN!V97)T-<>S0B
zmC>8H>sZt;Z_HwtCRdl$x6RuY8eYIopLDI78mID3If0z;_k|dyq1B|*D!3r_{Yfa#
z?4tlb`h>jIN>`iacDEH<&<-|MIZ8<k(k4%-s^+6npDxlF?K+#4yBIri!Hick-vBK6
z3S@fV9oWWb)7HjMUerE>N4$BhUTVN=Nx7iX?78Vm2p8K^;ju}B&f!vA=sfII+$O^3
zE2E#xs5SppAFqGRBg)Ft9^G<f1I;TzaS_X;MQb@}^04zF+z}R5K)bQ%@h!x_Xpe93
z60H<z+qdc9m3yup&M}#nVyOn*l<QLtIqVM$XI*{~r@^Zt8?`4DOT*N8U`n?jC@2zV
zcIw;l7PVwuL*5s#$F}REme|x`duXFa76QmBD&1w~;)5eGZ(Jr{4Q*4aRB0?7Uq*q@
zab<5rtxaD$x5MDovB^E1=%Y{66InBz#X*TnR1LdGYm__I$V@?$5^AJ{<=JXoTdb|q
z1+NQBbE}(l23sGR?X$jx*zzvyV`@i?>4MUbniznm6R!Z63?8fPL=}TQu+KX<=+5uo
zj{I|>aJPN$3Tn{YLOu$`DrrPo5%f7*5&UVRHyCyi{<pHRCm!ZjL-6$#Nr;7SXRdE>
z3ig{38QzI6nABQ~jW0R*uQ`7)O!}qd`jH?nDY_Oe?Rn!Gr+PVQIgT5cdz&^J{$zAo
z(GXRIgq`pM0hk*!f*cn44P1K4EB*{5y)Z@DExWrZa(!By7t8e~@D*(pHKuEYOfz?n
zaXjVtmh0}dboXw#D`H9;D1ec!=dqX!j=*FL+0j*Q#51S(>};YWnYmvWF2*TTDafu9
zYST=KqRzwtIN>!Ey_vuj;`(WbF1mgmMmcZ<X-H9Y@tPT$Jjs?MNGgtURvbo>lp*A>
z8o`bl5^*BjFuroEC65;yB>XONdllbBvuZi<3hLA-Y<%2m8#8Tc%i|n~89*Pydcxzn
zKI~f&esPqM-=D27%VFGNGEH)&!<kdJmH6CcE`Qcww~vIZShWpd4rQbbm!rvLn_a4#
zDVS37rfB&Ywvtpl`u5SHpq53v7R80EpwDY*3q;m{2$HIf@)j4NEJ~|K-3S_5>J)w9
zttGs$svsr+Hz=e}2xK**wUmd=dr0C9YFnlp23iaq>yshf2AiA4oviXT{mjRn<2EYr
zuNsNK0_8`~_@m*2VxyBzM0c;H$}Hnex!O;bQUbXIvrtr1UXOf>*g<kir`EFC8d^Q-
z%_5`O3|y+rs6hwumg^X|e4!-tbI3<vwinWR%V@M<rZU}KUEItKP|WnRkIza}xd%9U
zG$lfI*anZp>=4OjH>0Kf+8KJT=W?t&>X!(q&K;LN`XA*X)MDASNCk>ySWx1?UyYX9
zo8Y{+^rfdp8OPp~o|;e`oL4V^(81~VNO){bqi-Nu!*?DgvP>Koo19btLxVsXzu*)(
z0ZTI;fm7bdUF(2tbp!~>c2wp*!(edvR45EjQ3<Nz@GpB^(b)*c6#0=QbxCyHFPyiv
z=!o3sW7?+XevhW(PPruqoMBGHm#)gDd>5w79gCKO93RaH(-9hCB(d}yLBERgPpm5p
zvN<sEO<A3$eJVLAQSJykD$!lEV{WtO&mp_%5qOS}<yeLRZ9D0@5C~ko`BEc}tG%cn
zK>};%UG-8BjHr#OOEU5!wGrv(;7BIT_8Sdbn>J@0apo#L5F?hnlQZd+Im}}X_gK}P
z82fQva~_?d8F?8n3&%#+HkTSaFM_+Ld*XmBXo*4OCYFCu`js9lW>smNy-w#*ZWw-y
zD|g@)KDsL3k8KvM6D)KLE&mr@A4n)|N*vR4A8jYM5$AnDcm9SGCaPdBl2Nqf=3GR*
zK;090_ex^Q;w~?4;Ls+s1!?Tvi2lz%JAWQ%ueB#hc-4x=jr{ig=Co8D-HYvRBijUY
zW(011DVT~WKoNG4isVzO3wN!i8wiQamp6WXTmfJWGQD@h^-CKcGJYY%0^Hpdhx3lP
zWHsf$W*RpHPN+0HRM6q3U77efb1ZgI2ag>me1!n?GbT@|@-*4oaY7tQNv*Ck*04gW
z<kfnJ8+tpxjknsWrnRexfDhubDM>$uh96zjHaevbrhL5r<&A%Y3a+u{>F5AhkG!c@
zJ0)RPfJJ9Jua*%+VUPYDU5xHrB(NjUV-W1KmU^+rMzLAyk?b$1+4_pXoDHl0?Cbue
zDgX5ytc_v8#R}KON{On64yv8|yTC9vv-$<zjd!DB@0b%7_0D}+=QsTv`z{)J3%#pP
z!%P2OAy2`b^Ag<-vfnda7wf0c^TVt6+jUSLx$HUQs1L(2V&!z?FGo5za=h8!la_`-
z33lrc9nqk(tA-yj#TFCG%=(DH%{GBAFciX7YAGPV-bBffq%;Ef3b!Cygb-IWjKF@}
zfswyTXnB&|#sIFCMDrK$;y3)t3Mz@#3Bce(qjK&3k^8tL&1<Ssz03v|O%HPZj?v27
zr4(uC!hAz#a!h>oTe>la>L|aaZpc&Z8pfOcTIm@>Q&Bd|3Zb&S)OQqDPWc#WLEbyS
zTtov=pk=f@imEi(62@TnHa5?rx(_e5LV$^?LV3hOLotLwZUlx7F1-g=qBqp_Mvex_
zFR1ZA8nW{Oy~`j)RU8XNQo`^<Q#SFrc-weMCd($FR2~8foacE4f$=wkMJ!VBZ}~|=
zbZk{NTy5o2N?5l&B@Njo&Z`kcG-z=l7#dK-{WM7X<p?=jPRdE3b=G@ZNx$wnH1-df
zECPG4H$+Bf<fB>>pSYTvaeIxHU={sHdvn5=GmUec1x8QCG7#{!SLixaFOZzs9a|nw
zwhAVWq=4&3+VIZy$1)bB?7)Ke$F8DA%QeMQbMAx?nqqVedKVL^^vqUPNS6Dg5|~4f
z%<(3Nz&HZhDXWz^JQfJj?8PaLp(7E(#`@U{)m)UJ`V<_EBN$~u97c9tFRh|YauL2M
zMGyL$RTfWXN?TO_I8E4e_p3o=B=pWAvY;F4{v}>aQ8Az&wS+o^XPie__g-KLZx{YV
z24-ZDw%OZu{9Rp;Z=RV;GM?V$dXrBhPpCY<abkOkT3{H!z0OV|Zu{=!^p(0T>aINf
zYubh~HD;fawHcDv3|>{NE<p1IYuOHP%~PbS1Pvs!?pv6k#RQ#E3=U{!cZ^Wcz1HOX
zzVk9U$1H7`69PqxJkt<X!&<wcyncoA)j_u#AiOxKH$B@pUiH9ua)mZLpPYB)?+w*F
z6Nr`i0M#QCZmkfAL<;KwbrU4{6Jks;*jm{==4E_t?vkY=?m~pd24Y09F%>&qUnMK$
zb#~N6m<g>jHN^uxpCX^d@2evsG5J<gp5HjhJ&mp1%Fac{K^9Ughp9iC_9}ADxg<Ni
z;YiOqJT|13y<KQPORn?<9o1}Pu_J-FUSVAUFURv3lTZ=~Z5_tcR_Y>WQ<Lz07<Eli
zr0u2TpkuUY_S8zc#7GYTay|L(6J*G@RcDfMGSrg6QcUx04!^LJSJALhJ5E(*pcyjM
zsgLr{aT8axzaND2x!iE0l6Dk4QIC43mg-tZ4-2c0t2WJbyqv2y1gTp!D;bipBA*{I
zn9+c6RqSD{rRJUd;6_*%85HW|p6KIX%6G1{*`&{&Sw8UDJsX^|bgmnEdm(R2`dz7i
zsKe*Ucx7T~6vA8EfyBj0iaP0uvE#M^E!FO+Ne_Ev_zK=)u@>-ILbZ3}{sQA}VKvi#
z3^k|WHZj}3zTD(|K7x_mv9zce`)h;Wl^*S9eSeIhFu*7X9+oiU*B!n1ly;=I>y~<Y
zps=AKIFpodtVCG~KjL#37!dgrf%v)j2-Q)W1t)qt479|Pal{V>FL+&Y>M@)b-6oQg
z*T!4XUG;9eH=C(lWXC<G?Mg97zo@<jnn`NFzN-w-K41TWjf~bGx+6UA9A(f9yh6M-
zs))l_CX*5ewL_IE8_|?+x7L!jDK2!Qi5V&!JkTh~DWv4Ekw$JFJ|T|`y54DuabHVi
z_S>Oy`hJ@!c}V365AV<IG@o6E@<Cvaq{L$C+LS6^58$rmq>XH~V^k4<w3PIn@)7nA
z>Q4gC0OX<z`f?!pY6>&&%hHTN+%I<>B)?rg4@Ff=9s&;ak#86BXC4ASbggk<o-d(G
zu27+(!js+6^}s>D4R=fGuS$kcVVpQvr~AK$L5_SBFyZDhGEJ<VSfZhe6sAwek9HD@
zhCMONP_k|59Z7W->{C4t@-MP*O9!7_qCIu;q4x84o-az<MvBmYPtrv46C_C0>%o_7
z_plRMn$W5&58mWlD}o?ADT|CW@QO5`C4o8?F__cx1RF@Dc)qHnD9=EWezLSvK&c;T
zbhf>tV0tbFvd6BHgdu>}F#YO_IjHEa_ULO5U59`UICG_m47l>k5{sioA6H>5LA+Q(
zQu>dHSQZ3sDLL#A7u6@xn#0=2E9ghDF>wlYr)seDe;r>yeN7IvMTMqOJFZuLX0;(p
z9zMY#hvhOR<;MpJy^iixQFt^_f@0GqK1EVdP^2Hg%{oiZ5fNi@Rf9mKq(5C_s^P91
zqAyieQi!0LerZwcG)_tVQned<mzYMKpyC}FG-9Vr&$({EvsK4pYV{nopUNsf+y;}U
zXI5ef7S<#+N-#3lEKYzWu=P-g2Q;8K2fB=b<=3ceu**h3;Xt-O9<6MBo_xlKDSgv4
z1<Jyzb8r?(N;*k!Bx5J5iFGD473yH3?W|uw8lloRG|`&VVXV;fRjrACCUoeSyW-}>
z&KitXQgkQ#Tx+0!Qa#8KdnV5XUc;HtgFuo+fWXU4UtP<%{0Yp><qq>vl_?$dDv`z)
zQ7dV(VC1f|Be`Vuk5-XJ<&Am#K0djvX~Qzz7ufHrcI<4fGl|B}BMS<r;pPbgNQl_p
zo93j4AZcovjG)J@(^gB0VO~YJY&u$`j-fn*8|1Xf*nBG!f}+sM-mW?1Ayq?P<Cq&@
zAocog2Oo0s<d}Tg9Zk)u8nbbqwMbN|61>~uSvfnsGZlXPcN&1<<r`CT3cLW9J^Z4M
z!^WdlKKIY`V*Y5bPN_Ve?s@fEL}Wi^=r`@E_kIozU8jb?xikA=T*S=UM^F`G$x1>f
z1D<rW>KgETY(q{ze2-Cvj4cS?A)YmU#l8EyqcZBgAIlq&VNp@o(pa0;RGN0NDNj+T
zK{cAJ5zt0f;f-Jc;TK4|sdmH}ruojfHxlz9BBu5G6GMSLY`4lOWsTZ>^&<CTHLtwN
z6bh#b>Pq<BB-1KBmpTJ-T;tny<14qlIT&wzoKtN7C<<pf9<<&m`3#G|NNJ&1Od{Dx
z__TV}_Lj`?pM7;bCA=J;HZ0j}R=<qX(0!m<ihj1TBdjT?$qq^}5~sv%f8(T1jTFwI
zBxtgKZuqSif7WxQ$s<=Zyhn4W;Fyo>6z3`oV=}}#@*}q>$5Zy_bOEnlxfYwjRh;ig
z@BWhNu6MLgN9@p<#WN-~Fb}At0LRBr9ah!6LPHLN7#Z-%6Sm~c*lzAf=OLxPsFLN3
zz*-ZJhUqYUB8WQN(s0|Ur_ku>xP*SxU}{)2wL}rz_v0Atb(vxj;@x;Kh6maSQK@A8
zN|G6!o6Qn$hxVd7ybNw4HC;#%uW@=-+m$3b+VZu9kWE9cb_bTZ+t8EXyyvISDm+K>
ziVVpR(FA8QC0-zV`V{b+PC*E}%5D=E*L=^aIb);2{sV~x!`E5E!$)x_ntIR+Lq4B5
z?xj%32^ArN7Dxi?ydq3encJwLwOG<qGbs)!b>ela3wM7n{ouCb#hZ*RUZqM}t7f)A
zC$H=@O8qtUTg#g*$TN{jtJt2kU(@TwX7w)9OLzdb7|f*14DpsEV>iyni{33F@?-vW
z-BFhMlYkGv3gL9<UzdsO&WRRl%ZXN;&U4mj2+1}f)ZyuSmiSUBZIw-SI71T6_*nx0
zM}Dxn*XyY(^so!d2Pr}jpH$STg_;_Ns06~DO_+8^SBGCRZbg1NJS!tF*}Kj6B>b?w
zw@|)OCKDZ&10=?5HgC+XTlzw^an6aatI88?@q_*fZZnG(JVdf!k9z2fE%0!fApp_T
zUij+b3&z-G_2Qs$m3@`T^&M&|&HU(hG_wd2-UF{LL~hw>^BpG~(06X1Xpu@NZL<bU
z=j6p_6|!>DfCwtb@WdT<h=3*})o8AhW9Y=kt&c&TXE^Hlfl*llzaC?evw?_}w_A11
z*1PZvZ9Jj5!4my~)x%C#riwi~WigjNUV#Bqcru^ya&_nDWh5Q))Na+1A??mge7t7D
zQ@vik1}Sy0)M9~3Jxv{Eb$j43+188`PUB%saqIpcd&#E7i}tTL=Zi2)4=k%`wM&(x
z&n)TWoX!_Vi3hq|0g>e?Re$Y#tY{*HZfYD#_R`mTiaLEd1X9W~aT;8thZY$6C4{WM
z_2f>N0XmZ4W?JM}UQ!x4UVJI2=y)qwXcX>FHXXj74#}5JPNA_G@umJe%Cz|`8T_%x
z39`@1bXAE!X>auL*p>CVw5n7+{qKbGx(XPZ>(16FA&%Q>*L4$=K2q}8i-NNZz50l7
z`B-)Z(z|+>brZgjW-+gT+efpa!gB3C7>YN7aLfJEa)HTPWClb1wzKX^0<|_fLKn8p
zG6--20_t>2C2*T=-6L;%_#|l4joJ_5RM`qz5sIU~y^#{^tw_df7up>kM5^H{8NMW0
z<U)SYOXQlaHBP2SHXRtjCiG}eR3LS+me{WDjW}&RH`5nz6F*pF%HQlt!?kZ!SfJ!E
zkn)u({9M@74jZ)IWagv`d=cs)KeDw+==P(AGzv96H0T`zBp?MTm2<j`G?FaOOhrE<
z_0vhqvb)>Ri33l?oV3eExz<o}u-GHG+@Y&z@X2hoqZRn#B8+D{dxm@{Se0y~re$(K
z9#p(xwS?E+1`HzK1ygt_XN13}A|pkGQ!r=c)61?>;4|IR*CFh~_0LJgSJOR^o~tRr
zoY5%NNf{V&a5>iZWwj)65~AJRaO56zZ!Hr6RoID`)iT#>)^dXng{t#(wzvydH?<**
z#ZXJH$V`R+dbfqtV}1|rZKK-3R!6V$2p&v}0-}`jmg`3NZeHDC?|JQLg3d|TXOXBj
zeC>l==Qd8a7{iJ>Wj6Czfqujld5&+&-qoH#`iC)H*myC2GN+6?62r=Zo`Apo^!DYi
zkx^T0-m5F!bJA8<`zucX7X&aSvIgkk;J@S*J%Yc@`zse40qP+430kiS=XQ!2rh}Mn
zWacGEc3Y8%kYCD05kRl@0WnEFn9;dPu*57G12OmuydKHOQ!RN7cxV~i{OgR^T_YmM
zMOvUiVt0wYmTDPBhS{{BJZI@hy&1uXy%38_yTH3{mgvno(hYkR{e5Vfv(j*h?vS(#
zba+U}rC(!Q8{I7aeuwn#cgQ1`CoFPKl)G}fvQtnV0X<l`%kI4!`OmYn>eixyI<0}L
zH+lI+Wf+`U#kXntWbw}HaXPj|9SknkW0y?%rKY}>?6_YFPXzV}rp$EeZiiZCtZ5q|
zDXSG4WHJx|K^8TvTWKthGSg{5I-{x|=xlc>*zG#ETzND<;hYQ~$DhKOzsJ|&j#nh9
zqwTHsL_Ne1-RRxI+5thuvqSj_8SX+}TKIMeV`HQ9x5k$Z4E)0RU}p7@o0_Xzhj&pW
zEuLU|JsmPL#lLI19B2SWNvivL-#oxUudi?@dH=We>0hWV|N1dg3<VJEnFyDt`Oo92
zhW&3J_k#<P@q=yr?#NV6`?s#dpA@{m{HqOJ8=$#a7B`C9g$HDCm3My1|4b9i6obX0
zQxo`EgOB!erot{u5an$l;Y#GBY1%*kUY#`P08OwFP{8iK<@@;CGps$|foJ#!0*jak
z5?cogMKoahiml#k5b~p|bIyi|j!i6?x4`6zi1v*i+$o&3?wyWH)7bE>q~brYBK@^-
z^xIgb>FToznf-pB2^N<B&Nff`xm?Wu_|S>BQoXwt()T?^XMK+~;l*0}_zHBL{y1a%
z2?QYT4r3DZ%$$dhHT!&(uglK;ZSZ%m6xStSDm}F|jMuAy)-f%(b7iC4zuDzLp_+5y
z7~s{#`RNGSoE|aJldaLFV0QL63KRE8^4{Prr8i$hdo|fL&M#y&c-6m40LXa+teBV@
zClas5_wI*?*X8>;Z|POuZV1^|UVC;)r`0CUtLIitco`HFQH;wNt~_23rI?caCML@7
z#iLszoe`r7i05iM<~Am69Gd^K!+-m+jr+;(1Vfg4g5hoh*Ry+;dg(m1q;s<1y&C&B
zexdYIPtyB{20)hB-+LT-KY^d&X(@d-3iG_IwKU?!IuN<<WJDj#Ou_mYAQbk89s{m+
z9bp_zyLto&fKZ7@*xI}6a?e7Cdes&nsyE@<*>wM$`jW_(1k|Q)ess&tHXV9Ox3L@n
zFH5sKV$irUWKF8M&3wy>^K_Xw5x9|~r_`Sc^xk(?gDE^+%bGZ>V!g_p@&Truw9llw
z@JY(y!3-#=mRmD2qmh#LExiexr#bW{<!yW!B){+ChcW$jcWG9W(1JGaU#G%<Qey!L
zQKMLa^v=B`;J`X$9l&G>YZGs`Zhh+B$0OOL_>pB8sQuKUKVy9b|B~P&R+sn#<K09Q
z%_C$2SZ&;ev|5#hCP6(Ha$#Cj?yvr1G)3?78mcBTyIcWmH$EF2)Z@Ev8MoyK2$6kI
zKzN7jdb+t)3R=%pE2XqH%M$N}MjYZ&18W{%+Bd3`5%%sm^bsFl)1+VkR;?DQ;9uyk
z$FhCklPaIhrlR6h>%96XL^tl-((;ip$pmViNB^?(lRrSQGQQnl{cBYJ`#thigSm<Q
zjo~<J#t$?hiP{?g0{k^tW#h^L?dQ56Kkw!c9KokITpSrRZc;zU@8?Gj=et@8!D9ex
zCD*&y;mD!2iw4yKEZ1Bav49E4rc6brG(xa<nCddi?gbS)v*lnH<*MSlOC?02Y>jLg
zF6E&T%AZZZo7|4EgFAm*8QzMl>~7Il^2+otkrehV;FMPY=1|{sO6tH2e*}QPY{{QL
zwu$1ii8soO2fFkWIp*t=xumZ~->lNK;c3gkHIt}(Hf0_D9Bp{(z|OA{*{vIWFD(b<
zJGl+y#mT(@`1wb`;Pk0d$VCVIN;jf_@r(D6`Euav0zxJBn%yldwyxtXrI(g9WEJZo
zlMuGkYf5eM&4X#jUAFL$+wH}iEVOGb2^&IDWv^!8^+wO}O6jZ3`U>{#Dk9bfV8-Ae
zow2p4&1Ot9)&4MPkdhbFRGr~CWt8^ZlibnB`Jw?Mii>$>W~Hu&i)j4EjSHLLRs7=d
z589_M{qFQShStwcQK6^5Qzpkl<{cNh|Imh~(cTrG5z=6FAPV3&LhL&A<l_N`<PWm6
zbJuq4GOO;p92fgbCIQg5e;}1AwN?8S5@LI*>7*Ru@Ztb8cr4Jy4vI*B@d{~Che!A<
zh=H)EpV_{ImKE62L(v(GK<B&XQT;${{afJpGj~ik0OX2k4^+D6SBp)fdL1WtS>TnD
zzn{MU{7t1Ecp=n_Tl=#=clpo%?tgqV^Pb8*5)u;ku$b%*+9TZ#9O>iAGKys@^E)7Q
zH3px?H~zEk%C8amGb7nMEtCH@iaS3+U1BPO*$V51mpIGAilF-yY~yAIvc1*i0YOQc
z-XAG!@9iH%xzoz|<T^lskyK$>3M3U1o8nK<FJk`K=k8$GZ>kMnxxQ%^v`vKKeR+7b
z)Iq>%G0A+oG6--kPMNBXQ*W^;-2Ig*e@}Z&74j8N-+rT}*!}F~ViZB|PPd>O#C7AP
zlYG<rAl%sGOQSe|fO!NcrlzzGNAAeC)U^Pni?RGYtC|>&SvT#O)Q#6#`Ox$|VSN60
z-9h=IeJ$6gd&82M6ik!kDH^8ddw_87{K~C&o517c35U2^_Ut^(15p>)d@cVfu9(n%
zm)<fSgO%kN5kU1`AU`E?`9)xm?0z_6_gTFgj%uV(99}&05v-u`nDaN!w1HVCS<3`Q
z7RC%HeTMW-v_goY*#!3=swl;@R}@h-1*WtgcPuHC2Gl<QYA*^9MtWE*JYcAQvK}ti
zoZu6?K77LFzedtM{CRoTvhQoglu2?8<RqCxB5;toFu|mZg(4D@_raZ9lc!Xnb^*HV
zvgb7&N3B=0at@XSPJoArgdC_&p)GQ_tbc|bGCy4=1`x2{C~$`JNOzj&_|yVSM4ICo
z^7uO|)yd~OP&K5X9A$ut7B4)fBh(}W>Mt3|yq81O19B)w6;MFfd7{2fgoq=%RBMmr
zXY@}M;!-&lac=-QZ%lt)G1&L0U?P^}VT=<^1{?8|$LKjNe@gUIK)02OU6jIArQm|k
zignE9p+t%Ch;f+(j&RHY(2)bYHkm%Wvjh_EwsPQ=rOG#)#MgE#JuTsY&}nKDbHnV5
znD}El>?OwDWPBegdZ}oR7VgW4sxc-3h{cJdT%u+ErVjl-2v$(C?y2m_<W-WUX@c<3
zrCus_RKr5UG?XH-s7pNK-!-!yZ(DrF`^I*gFOuV&CeY|VFad6?UkzVCUU<Fohofez
zc|~n;+Q)P_;h(k-5T@8Z7lOG!yVAFHs(l2QBVXA2aT6~qpZsS4`8Ow;33%B<RmzDv
zEpWEyi`{Z8dKGiKrSf_cY4&OZXJ%@z(`kX12f$t59C=m-`FQ?b<;J}`a~vNE9IJOW
znj3a7GQ93IMm{jP7UX5BkGv+3eW8GJ&4)2#$;-^bJ_Gu7)EYeh<iX?a|D6gDkN!ZC
zT;^+;N5%Vh?Ct-qucN!|00x?RZ|$%7@Ea|9T8tjP<zoKx1p50{dnpbd)m~(}XKSii
z^v^Rr_-B77g`Z!+rThB6W_j_yaK!IJ^0hLcE4uwgneg{Y<-bMiHc_ml=)^misBnBH
z|K``-D5^o~BoE_|-*#t-QmMqLtfR5@*0^nt74>#~<2UDw3-Yqdhj;J(kK>y91Li4n
zV57F7_#hnmXjeFbSmk?z6cFP123Wez6vddz?$^73r}=p%1K4khKAgMRzh6Vcx_$5}
zD^X?u`K8~?&W2?lr22=81_`h;(HkEvXMExpan$w&sgzZB<B(me2KE&kJ#pFK?mbv&
z;^a)sy*xZozrATN@A7OE?fOIf3Q*Pi3oCj0e>7^%44Mk={ziU%lrrnn^$*rDbd=xy
z$h5@2V2hQNIFC2fTvh&|eC4y~B<FX(4fwyYw*c%WvW9<zCxnFDQwC?`??ZbPg5Y<F
zuont9;(0oYcTAr}Pt!g#<c9U#%lJWqO(fSdhM}RYbaK+pu>c5t%FV2>kXkAAhLj`A
z#^UXZ?V#Bx$COy_m8R*Ew*4sAp{nCbUW!kiE!sAD9~*OHghsx^|I3G?VH&<)27AsV
zzGl|~bMdLgEKRmzcdy^8Cj-~_Mj))1;HQHH@$mo;CLU-`|L7l=gzVB~FwL@Lu+Go}
z$a5`_YLLS^*7m<0vfuOFTCkssM&I+@1d1sd`6{i2&pDspCIK`>w0n~+!ZOE@>>mR7
zNdCI$42duZa4tR3&^KoS_hkV?JQ|mH1mI{vFIqH1OK4u^kwl3Mv@q|BHjS#A4;cPQ
zPpbRz5&-{^&#$->%eO`>E&vfK?%7$K(LP4JnyK|CfNS`<omZ7xyqWo~Me05@-<(bq
z_5;}1Su14F6O$E_$Vn3KnAi99(mu*tugm-hDK#sAX7~zfeBmgZ1Ne)~^ZDeV*{Ui3
zB^C7p)>Ka=0()o;S$phn+M|=ra9B`gw*m0K5sqnno#2dUd}eiHGF|S-Vbdjjv3z@4
zp)?GO0OhCyq-GDSQ*=L^tXC4?j`qElEdCBWt$W3)oO^Y(Ofwn`+o;{Ov3<`exaX5w
z5`UN@#LJGk1Scy@Yv_&{z+v}nUJnWJXC&q%Id<kMsLw>~@DBL0P`!ABFSCA^tim00
zbBPzA(1sx%Ij8lOGfDPtY+A5I-4f0P&?xsHO=(=+59p2RuH1^4yeh(bM=C{D8Q~om
zqO<gL0lSHWa`h}zPeaX*72>9v;|#gR_sjvZC+d&_N-f;smO@PdSs#TDpWH7^>h31o
zkEK4CoTh(puBOX>STo+k4I6RJ4WziOlV!MjjTsp;>nI3HgKiybHP-{hWA9)o4XVGD
zcy=J$J<G8TseVklM7<t%B?r7E_AxOjrO_o9m!$TS$<xC1M%Fn92{%lIV#weQz_=gU
zv`e6~?vOABTr|g&InUUbXcih7U|SX{Bmj~Vg>cHcS4lj?355?u|Ep>heIe*P?5ULp
zUvTlS<I_*YfR~GpIWlxLLJch_NyS2?IRcr6x)FEX%g{l!@|g4C@K{gthv1jEs)M>{
zo?adCeXGa2QZa`hpIJtx!6<qqK9I*mDdi&?rg-{}vFxLNn@ps?2r;;0L65R>A%qpe
zyqRpZFuAAqaaKJGCS@ud&Vw%Id_tRmEP^vTFfTnk`&`dz`X3_?S9V~c!XHWKzsryw
z+lkW%pi;ljt#CISzQSB11H<<svr<-YjDx!%LA_$&ba6pK9N_W8u0p!NBER=e11#iw
z=-<nDuZcX)+SdLX?fUO0^#8E-7C>=z>k??NAi)X2f@^Rm5G+7&2@u>pxVyW%dmy;G
zySu~SE`eci7@Rjb_n!04{m;!`_f@^BT?I9>YtNq9OZw~8-HUv)9J1ROBpvJNDvB@V
z#CInL4@<33T5~zN8aQKUp$J~-_H)7A#=@lR+NdN^9xn&J?eJ)4FH#$JBIX3~(qw9I
zH9XOCQ4Q!wPb5_Dnq@j&_M5(ov$yG+zsQh<kP70{2QypnP=>8>YYl0TM7^L9kux;7
z$yTXx{dT97?f;58_$P(-KdPBP`7Wgh8hfNKdaL#)vmE5;kW2%Fu_bJeq~v~Em+rC#
z11@5JN43!N+Q+woBOkpq6OS8|kV_9$ZB)VwPPk>a|EC@1f1>kEk}jW2nAa~3*1nJ_
zr5TJ`b@TU=oMt@q%}$n9{M%L2KR1+rUShWsQhnW7PcZzkKKtjHUrB_0g!PTTo}oG8
zED|`5tvUN%|NZp-1O3hK>ZsNE|1+@%d5V_c1Y!N<8XGdW3)xLbK0`)mXNohyX4(fE
zY*<L0K2%$t1#x@s&eid12&hQ^5tD41y<ygMu8)4zm~9SS%5@xbwg<HIK2!S)N%qT(
zG4WPQE}X}^TzM@aEgK85jv6fj=q?;IH1F!^&LFl1OxMi>sP7N=r>?JUU%2Ru2B&LX
z8@wt~{!q$7%Cq@*5HzFmfMD~`OodK>!}Pm`(%QIi)UYf(Fx<|=cHiB-dvgJavGj|8
z2&VrPHI?$?%lFV%sh79otoE~{cXmsRq5N1(+C)S(M}b+!Y!E>@-89SjZ}YF&5gIG#
z{x5tUg{E{;cQ!*3?s%65Ye{+nB5ho8*!lfkIo7+;|MmpX&wzgZj(jUyweKkdH|)<F
zJ|4@kN&#6wTj>-G418>+e+k%vxI=VadtmA%3D|M2OPfRDwp_DIMj`Ht@Vt+P9A&e9
z+yBf0Seq$|n|o7FtO20!)3G9-f<#~_jBSW<iex4|EYByXJaENsaEc5=983}zmc%<&
zru2;*m9);@&C+COS?_e1<WgV0;ka%;2(YeuyJ*-qO9_a%tCw58x2zq6-zu==pKb5p
zovCj4Cs2S`D=H6$4y8e8mgWELz8EOqS+O_T8mjnRdtUr<_D*T=`0PIcDe(08y)_%#
z4_wOXAYNa{j#v|xWoq(&>J}uYa8oG!@(+9e;4+iA{=sFMd++=saRcw)tI1UK*sNl%
ze?)2i10pQLPN24Ne}(wFXn#Y51FZNw2u8TG_s}ub`dLQ5?9~T5`MczV-*`^}$q;0D
zxO_<Z{^8`5Zg8ED-V>6{@!N~g`%GE{4t_0|;qR!5(4FwG0!XlIIT=Wl9627JW_1SY
zAzoc`0`D4Ms}ueDDuoYmzaXI8>fwGyRtkBw*;slrv<`SZgoaj^49Rum$j+2$q8ZHw
zG7=-38Z&AZ=--bjR(^-bk`t#PW}IxCLThv#Yi&k)VrOr@w^-CVXqM!yIw0$)Pkxp;
z-B2}xFvbWS?L6l3uM4q^?oM`UPWrVkHd@ss>?G9-zzn5{u^9LX=`POZv+H`0c(ZcD
zokjkO&$pby4rkvoJo0?oIrT`B>jlPacBTDN(K@G2<Oe1fY0?L;S-O82m|($n8@z>m
z2kzkSf^C|lq)0V={PM>x{0jP)SOx@;1bK9*#;b~;mjNNfDufyzv-DYnIpquv!){-O
zhNOW=aG>;AMubg^KS9DgIi<a{h$$~280OzIKRC*z*~g+cdw5Ywp0ZzGp)XbHkn%}c
z4h+yVw}0U{zqpF=J_I_9+XxlwKz7lAP_5pdUV2)xAcnP77Te;07grJ4@64#9YfB|9
zYH|lWd;J=K1I?cLs5PJpvzpTHxh+#{GBx~N&65Yadx_a02{-U9>}MzK-;hP=P4=-q
zYgPte6nyf*=SJx>n~*<@hYYhN1R>N2uFSreIvx0LRIuXZ<=3}^%~a(_1g?MnX7ne3
z@rRyvW@ZJMXj4B}7Svd$CSg6!NgM1v@3yx~o{ZFeJGk>d3kg^=VZowZT_%mBxtb;N
z0P?fBhUg<_Uy=Vg9|TJ3)zdMA)Mb5IMOY?P4VFKrGTrw3SBNSk7NGZ$^b<;VxE)WP
zAq4VVcylQy+7L3@3>TfGS<a0#WN|5fpae4V0f7<5tvPk`W#q7uUw=a#onn%Yi--3Y
ztV+RkZH0~~Z0_k*HO3#M+dgw<DwX9hpLgWHK75`sImmervF`#*ITI7#Sx_xM3cWH8
zL=|h=O|_cIQRYtP{y3}!$4HTn;03v=F$@Z(cg^=!ysQfd!;S?z`gP#SiY9oYLn$UU
zI6~?GoI>6I!6w*rqF?Djm@oz|Ol1|y|A)(QAO%|+)w%(K`nx~%dmrc}jQ{3{f6Hf{
z&ms94+#?W?Ofsz7_oU@lo<XY#dWZ6NUXgUeKM*mfdQm6ydZ*%|?ko|)Tz^$Q%g{+d
zQh?Kcz-JLED`(39IwdIaiY7Z-^&X|!R(GA3To`d`cF*Wreg`K)tUhD*J@;J2Ws|uY
zh70}?#l((7Qn0!_?R=BS?ja@Qmx!O^sa~@5ped|TEzA@rN72}V_UZ`IE-$#b`!iu<
zQ28$k>#0gnp>$zKL>*eRUwgC+8EOnrQl)R6hMX#=uL<pI>?!!#z3e99o&F=Vj8_ao
zabySMl4PN#W=44%K(*ckAGSNvEdDq3y`LJD!r7t%Qw*N5Zjt_Be4h{BNC*htQvVwo
zco9(-wguwepLw<h1I4bU=rgY1VV6Luy><UYW1oYyXqdeRev{IjI=;nndd1?m7uPdC
zj44;vmg+8lI9RPMLI}&05ECC#a*$-d6+f(4Sp?PKUUoMA2Z+DgIU}#vW`TXl3Q;22
zdeU{x3Fw$bJv(x@pN3I%-NU|gE-4Vd6m&qQ-d{1E0k~1SQWzlIxA(GcjHu^7P=S2K
z2%bSwU6u)l-|1tozbm2`@8Cr@u?7844a2|VIYB*i8*K6xyMP?#V?OX!8v4HxEOC(K
z;09~1Y^^HP%Z}wvL~V=kHMfkyrE-8P(MqDdeh$vB^2q{WTjYhUcCB>CA3dT2u+yk6
zf2%&=`8{Mnr-EeVta96?;_2WU$g-)LP!F5_3t9aSF!}a}pdOZP(3;Z6T*!K^N)GKR
z#h+@me^OI|{D_eCT-W{Cn`XQ}xAA{{T$iX1)F*<svbp~gX#VqR|Mse&7a}A}=8ke4
zwA<XZUS#0ffnxQSoBg-5|LfmJEnmBQe@h&re{d{o@;}u3(VfdUfq%wm|HW&Q`Isy&
zVWWnc7WSCF9TN71WJ=gkJ?j%$`IZ)RCBmU*Ma9q6)zMA5m_}tZtTgo*a#sp0m^X0s
z;r)4?SkoVpIM(_a%}sA@Z=S$O+(NSrbOHzWTKrP9-a=sXH1r?7?9!VNNM6%ExPWP8
z9g^ECUO)3CUt&*z_5aO{aa{7q_}T<JFu6(t*#Ii;ckm*_r)sBCdZe=24Y?Z#n3U94
z2)n&=Nd;hJR&;K2euVksL-RFPf~=;SUk~B*Jc<4nUE|*H{}WyFFDBkUBEREBjmG=<
z(+4F<>_l$4ReD66cq52SoKlqSEGgoM3gT?mRPO&bI;DVbRUU%bI?A*aPb}&91T;xZ
z9QoFO!D*YDPa9<ky(T+G=2v*8N<YhZSK2#PulHEb0X`#;{4=BfLXuHsrAm|Fw>s8x
zt~be!zsGM^h^GdE1P3jE9Znp3^UpFAl5BMuje1H>kd5AITn^-c<q+a+q?c=c!evsR
zBC9Lf{AM%-kASkwA;#jPi+WU_HuGT1iDUO~P8aiApO{eC-RLiE6zNa4R*g;^(EulR
zU_gJ(-Pee3^msJkS8X<oPM~(k$W?QddQx*BQpU^dnlHk;CexwOE+>2FI`AsHmSp3P
zbU+0xbIRf$=%IgPu;;&6pYm>&(zMWcA^OG${!(%ibBm2~$oFT*#x5qCv7qrIQxf6t
zTaO{5ArVhpcRwX*2jdG#2_3YW^zd_yb_B@!9bC9uZ>(fyUTiG6>P@VFDl@1f`O4<a
zL!OYsdKTl(KdH!SK8iv9_5Ck^AU^ge{ZEzCS!N#<O7k$mr3E0|hw`4qN6=sddJ>%@
z8TVpk4m(ZUaGlA$fLMg{Y$z0y1jz5uXlgst4m2P`epIdyJ1JB4iP%YLpjc(~WD+=>
zfSQ;W9cE#5eI#HXjxm4ZDZhab{2-^3ph)Y-PM0Zjb5qVl2hNI<K2ig8=riK2*41I0
zA{EGxz4=B#pUROh4cWXF!TIMm-r^Lx$oHtIu^Va0v1^`3sZglUks5dfdiSqc&f^h*
ze3kV_<6pvwV72MfBu30SHH!fFfGd=zYN3rMyM=dnXA1I5=W1FKNnMjy1_(_PUciMg
z7ux#{HO63zd43%lVTII&yCKWr)qD37_E4k4lXzAy&}VEkf2E>UdhhZj>yz{q)=gAQ
z5~x2OXF{){Xm$XEF`_UyNPV9|9OpZ-enwGJw`E{FIVo0!djSGC!U|wX^bO@nA!<@x
zr6XslQIp!zDo1f+Yd+e<&J0Qfs3ujuQC-(rDo%~O;2}=)QF&LjFBmircQb*+>22pR
zZOUZf7>(NVpbY}lRQrp3DgCyLF`U5_dIodvsV{6(4!HG_%B2u_T01i{%2%lUJE&Tt
zgY!#Pxi7-1R@b?H-EU|`0>5yXm-mczefeZGv0$J;X|2BF30GO_aP%2Lu9<a7v3S#Y
z8QIIqh-5NOO>t;Q*+}MQ((GO*J;9DH>>(G!7j7k5YOM!PI<o8;xM00j62bqx{%d~5
z<xD@d7L<~qP{~)=d<}N{!aA}W87%YinEM%HC$mMKPZT3JQ52d&@Q;VH<SSW<_!X5n
zdma_UX;gi}+-(%a!oU=L<WM}tinl;K2824r=sL8)3i&PCs65$SCL{a2xVli7JPi;u
zRUaj6bB>hrhB6>GHEviPC0$JkuBsNl0P{8Jn;sRE>s4V@X^-d;$zt>%n>71%?{$iH
zm%Fqj9-xwJuWCbajG|<5<NFzkvr7*B5RGSm_3GJiM{zWfATzHQ<Cx2-=Soo%x03{b
ztoKdUH-zp~o!O?utzmJ2E_1r-ifCm<6Iyb~<>+(!D^gvpm)z9&(pT^E{46B73jm!l
z%G2c=E%WblITm_*TOyu}A9s@a>N`~y?3bUbg)R!^$gY*z=w|F|Fx<7+Hf8_Vz#wfe
zB)|s)#LlY4pv6dA5bF5-9bBt8BO_X@PrTr@$6;Pa#XLvumnK@B#;>nUZ!e*D^ny8B
zI!wPwTLlhs6bf~P=Ubmq^xW%S&W9tKcjwR5A08ERDZ*&IoTO?iM&PUrarN-cWEd@X
z3gmB-h&0vcj4`)rB#kpxCXdlhxOu8_RMyFpQgk3W;^qz1F<MWGdeq4lsqmxtFWHXa
zOT^Q3h1ewCPqG4|>%X3MpYB_+J=l<~27h|47u_!bzYV~1xo%E`(wnkU6^MT4iD)Q=
zM`OUzXV!fsG0qb-9>h4$Ty87<edNduw0d8zVP10RIlXflIb*lTs`hhBj+8_L>|5^$
zJVp1}0;v`1zLu!)M9RvzMlx}r^Lr5Yf&Jq_A_?8WL(G2-lH?IE9hVk$m8_FMm*O*H
zPcxZY@C3;mYE$fUFdrrH-M`JzONP*Sr_(r(0m&at4&8>c$$9g#Ym0ve{*B~sv0d39
zo43IAMbaoYC+;ROitufclyR4j-a6U|_UbH`@6~eW302J5-7PzYVyz4!Sl{eSOj_-6
z&n}KO@;hfXX)91(arL~JIe2vOQ(GCksHr`$r8Ziey|lj~)79!Ua+eLOjE+9vq@Q(e
ziI|BgIBN({Go2DpN6~T8fa&n4E;?k=Q~B9}R>tq7LACn%k6j7U%U+<M*V%Jdl>A;^
zA#<J&Q=sDt2$GC7<3;gFw_;VJ?zQIIV*z6t<l1`{o6@qaEdWmwng4aCg9nwy)=EsJ
zO+?kGhvwMg*0TO$39~18$OqhyM4kw$05tuzL97Kl(kA<B56C$j^)o-bBSQMH<|J{{
zfX7b^H4eOg+tFVrp|7gkkyTdG-R^NqddMXH=Gp!8Eg}pkYy8+ra@y?vm{*AZm!k>&
zhwcG%VCx^7#Xm3o`-Dw-j7@x}=rHzC*I%$VL_FtHqq<OkGgkfgTQ-%j3e<APZnSWp
zROnanun-L;vS}f~B92slo+tim3b~C&@4|Po8i+};`qmT;OGM^N2e2AinxaF?4*+sm
zNltwMr$6Pq9g;Sn_vI^O914_DA(njdulGI`@RXO;YP#yW6gZ4K=pO~Zf|`kiGnsT+
zPlm~^MmV^MZ<w;BR4Q8=4s2|S01tTJ?eX+2wcMzOgwR<h$PP5PSZzz^_IiG-WjF(<
zbK_nhtM8<`kqk3>=6FY*(w8A)UmM4R{oza*KIzk8xn?0YU)t^+T@%#o{Za$iGmBb&
za$@ZHxaTBO?$%_PX;7q*_3^at?#$`u37~FuXlw$3w+r`m(v3mvp05GT;1bal%x>_g
zpO@L5<zAqd(=X|e>v_j;-YMBaz0UTH?T`1!N4`Lx9oaY2H%ku<PyGF!K08%I73B8;
zPtM3j%PpDQLBN0pGKTy3Cwx^;?7=diVI}oM?LqWaVLijmWtp4$!P1HzsMZ>EkgM4?
zbuex0Axdy;EN5LA&KG%E+vxUbmb-I@$2VI;=gZSEm};bI<K>+}sf-n1RgI{lRZEAt
z;iCJUr$7y-+E_R0A-%AMO@~Hy|Mj}pV+N1~=wWWI1!KWrPcWMS&PaR*uDM($<a@Ag
zFMBNK+`&cm#CC)w#~rDgQPptIM1|F2?{uZA?pUe}bp&-m0|qoQWivY8<{(#zxdA<P
zBi*<kij|BFO{b#>mx<gnZHbn*cMbLqEP)nuC&G21|Ji5GbP=X{Pr7Xk8K-@^Mo>QO
z3W?tuhS&1=p2Ot1bZ1PgMejX~corJ=g|%PU@5G_CJ^J$;u6XTArq1Ndz)Ys&@vFh|
zM5&RJue;pjupa@we9Cv(e>-D#%L)NQYw+p=wVs7yL-vm?Ff*pdkWCTjecw+HFI;CY
z#JSk&Z#brcM9X6KjcTOw3uja82P;3(5TItoJ~QzfbaYm>d8yY4GkSr;VEe8)u$m!Y
z#~@0trb*^5V@6%asrS5@Fgw|IWaj|x6NOZmAh{;}T~QhaG5%wn;0z^Vj27*3qzeSt
z$A3tDa=5(PK?L@viDb3zG}X<sA{EG)!B%^rgr%@kJLZD#Dvd`YoN1-*(VpYv%ST2=
z`&rWsion*RPEtc?mFr1dP9D5^nGx#Eau<0r^y#Q@qwq?XlIcj?`FmAHc8teiW%92R
z?Fu+Gd6b8D(t<syD+XJ=E0R18<5HXw$I^seb1*P;@K+li74%+AWS3I7mjw9nn8;=c
zikfL<0_L)^S4<vokCG046y)diTaWHqGn|gdRSu{3CQE^N;3y{*PjX&=6}|IfGd$MV
zlYuA-D4=Zjyiu}a^IPRc9)1FbO61I%l=d1t0S@|Y-zz^{1g~pM8p|2MwkUWOq<Wo=
zREAR;>GICXZP2F+ue&lfZt`o^T|zdp>`!73g*ME)fkA*Py~#|X%CB*|5Yxe5Yst{t
zUn(Z%Pj8XHyzP(8VtUKoO8UbP#H!8t%k%3~I(HnKWA2I<+P=BKz10b4>fMRGD2e3V
z$#=xNbEVnJQsfi{osO#r44<`%9T{xd)qBr%tN1ITp}k_U%Z;RwhslH3HEJgD16y+x
zKs&8+(nykmmq&fTp@v#r)-Mh8Y`<^cGB>Kju2S0MdA_+V*S$n;B#*{=p-=>}`Y%2m
zRfZdSq$BBP!pE|idI;bx<VI{M46tx6a&NK0Msn5Z^pa?fE!%x7XxCDER;?C0EwqpO
zND}oP87Z~_+dj2L7`J)^3ALR*^l@k8n@n`a@%Xd4z2NFmd#=>((;z<G>OJiM6+-*y
zCqRs<`qk+uIE@7gJZ*#>=V9=GI{@dP>655DkUckcS{`QH+4yi3ewe<OO>SZ|ARv}!
zwq6%U@0-n={P3aDvL<Ec9>5p_$w;HKym)cnA$8q)aIJZ`ber+se`hZ<OC8C?^inew
zB2tVwfOQp|Gd?1odi<e%0UJP4!%}{X!)7R7SW;nt5QSo)pfGaiBvpw+(cEA(SK@h*
zzi=?gH9CAS%PGawZe3;`A=wAMOth*;LKxUD`v7AUUUOTfttXNGQSg5Jc5n_0ytoYW
z+3xe;w}|mdWK9ZNPtUO@nC|P-n?%Et27@ef=&f?m=en7TrT6=%Y>x#^^TiO5(O5lr
zI=$K7YG_+%w!hps^PJ8T+j%w3!;LbwHlsWoubhUWMb<n+5eK@j3b@wTaUyn3ulw9G
zH$?5#(fAUyy@lD>AiLtRc-4F3wlVXcv*bzkE4bDNlcD#yh)^Mp`Qc4+G)!8pdmZN7
z7E45#hMk5~7t9|nd%%}Q>+ni>IkLxPv%~3iJm>s7nFoepvY2RUHKWoa0}D&_*u=qd
zb4t&41*v6&6dI_W-4C0A#QUkC!_u^zV^hPk%$`C|l$ldKSl8kFWoA^gAnZX{N~&+n
zA6`eNKp_2SE6<^M=A~G82sAPkCCjj(_ei^JH*%Z`^?~V&7IX^9U>+M))#x*`a7EFO
zPw3HxMpCRg&*3rzJ6^1{S#DSM06u1tFePy}zXkFsVcrkMq6ANf(_s@Z>xG227z-!i
z$MAhauZAtXTZx8@9T#q|ymNDBnXx08w<1GlMAD))1S(#3pzSBB?Q;rNh4A7e+ldcG
zFZc?_`22?*T^I#J1Yb_SF=W@x4qv+kvLW@EAyA%CsQ&O1iSL%8XlSTDcoR6bTU*F_
z59Oz<lbP~tJi!@SxxJEigAEF{en3Vms5ZZms*PK6u=B1o6`(SF+8Ib1=HY%bdb_3S
zS}*c0we7sB?#>{vn28rd7oG9UkB>_?$rO#MPlG>wZI0NFScFcx&Y#r99~7rWZB!K|
zSH<z*Z+H!;9XGtlLkS+^Z{(7$LQAQiM{p_vJB-5vFt8v5?Hm5G-0dw{@)X|u_^H8(
zpyBn7Yd*Eamks3MWQbp1<s3~K_{6;7v7XnK?dBZ;I}lD@jCnsgNQ)pC;*0J(d=!0U
z&xjpNLIQfo?YI?G`wC=ptkniy2jMm8LJLG8Av@V?D<*8cH!n2x%rKz2ZP^QTQ&Fsj
zdg@{gv2p*#>*o`KXl|12k@NMnkyjsr)XRIsn>p_=?a7uvHt|q?#qm7uj}6MCrrq#L
zMtMk?pYPL|Wxq&z1m{=_%@xmi7nGeUOO=$w@YK1Q657WP6`a(|;9srbIA(YYpZ@&J
zgXewIDr)Q<Pby_tqFvcAa+q?1Xk+Oh<-&n@h2l3M-!4ExA^3Py{`8Q#t_TYzj(KVM
zo(!QR#x+klvF-4-UU}#|y5=;Skfd!cZ*#$PqOm=5)8aX7@V1-Km42++TT~-|&q>@e
zcg-Ud-~a>{ZDd%AMOJArn)IE`RVI$nCN)KD{47|Wu*S!ZUtQMuii3N<7PWJ*7vzSX
zvsU#;TeUF%3}4-2b#uu~gnh)a)Qf&-bLt^r-I}-HW!9NZ(xJYGl2YIALZv*Kynx`O
zQxc*ddJQ27j0Q@M+{U!u-FG1ohI{FB46YIo)F0n}VZ}dxO%xEW6cXG#Pq0lwQ~-7P
zlXf%XZr=#6@n+M~0B*whM(MaUCrW$mWnH&|t)tf_`fe2y4HRLE?1_bj2q9Nkpk4K`
ze<YhebgERdcZMCh40VI}1I1CKo+q-2ly6rC%Vnr?K$hnfSOc@PzG2$v{mk#WZDh{T
z`_u1V4Vv?as-t0b(a{0Lb_|=JBd>0X5{>EmpL{y)r?RI31ibOnyE~i(q}JIQ!lCxa
z-KWq|deS}Culjl+oDK`%6`1sy%I_ArR>z=Lc%uwn<}0yg>lQ7N@K=AOY4`if`#>cc
zFbDXK43zD1+hw}I@mcNJQtX#!>KetlGIhit^Cx$Y>@p$E(_#Wj_mO}a(U*neJTxW2
z2#3~&4@wC2g=;?y(C<Sz2E2=(yds{Hw)Bt>JR>@m%$KPyb^FsQIPw7rkr-a&=ANHa
z`sKk5xmoOgt;9o6Vb65hyLp&4gosBvIXH~=k<Ptcd5eg#=(o$%q>EU9;?U8dg5!^e
zW3aek!4So<Yt~F?2Du;N6wDEvPw4z~Dflp8UTL@_i+$xP)JnQ*a>Hv(+DA8TU$--8
z=7%`dtluGz9vak6pHFh0Q}-2*ZR>2nr=GqI+RQFL72jEO$c6?_4r*`$0hK-cz>K^`
zs-dz=W_g%%*!Wo&$9Y5nbJjV@UXXY6tF}RW{`lc5Lh04=`QhgNqx>ny?bqb*dUp&@
z53VD{CW8$CxPmF~`vMM5_^-zTIH<%09?i??L7G~e;4*_Y>?s_Ur7-uNd-=ZM-z1CU
z(Ye3GM79Iwl7@h&R+3YNG1cX{Fpna&Bx%tW(V<#l48>Pcc+RtHg&KKkt<Kcid5_>h
z;ls(o;oAo6h#yxuvZ4kT9{vTsT=;ECn=;?q(R<9BWQBf4o(1^;u*w=_j|vp5$=lL4
zF8aEk1yn#>xhTA79chHxQ~}}rpX5fOFP(>4f2yP-dbnr^W-KqZCylAFY?z|QDWATH
zqjk-W;|ZK8t!nrZWd2E`h-*fVuQ4i2w3B|-R93hHJyy5K8g#lp($q*>g!5Iiw({ke
zA*-dQwZFzeVmp1<HXyU_<9v~eu|0wTW<b{sxr!-4!_Z1%HYe8Yp0$jS#(~OMqG-}7
zpQ-1y1<UlO&HP+rG6Jk~Ql1G2d{m&S5cn>F;Bwe~S>=-SmZ<s-wLu(#(6AZy`z;BW
zYE*5;Y%`tS(F>wF9mU4#cUcY-EOQ!J=sz`zaLu?v#!~8n4)A+E^E^<f8tA_VAgrh1
zrl0G+9x4C1V-F!BWj+m*4%KYwR$;Wh%!FD;oTKwG^r}X{lWlG#RLrVAWs1|yU*^}M
zrh{;3)w{{D)_GGMa*6e+dDlhD*R6Yww)owJUqT$h96#PAAO)cBP9-I}%SqUQT3ucl
z-Yop2Iz3hT9vqC{_VX)O3Wn6kUQGFYIxNQfZA~a_OA=_gWt*>GGPYUOzUaE#C(gP%
z&Tg@3SN?4DiVjwMHq+A9Ca4?Ya40Jd>G)jsnVT6w`z$N0QvWqBe>!=-X*PCHRW4FU
zAR85%P$GBt9tyb8`dBrqD&NIrzkEYwh}q~@TlUerk?(dsy31nir2|J#yT+SVq3yWf
zDe#5@hT}u^rGgNgjwTF(FYfGAvPmbn?d~UW59(O?`mH+@*_4KxwlMbHX7{dTnaz#T
z?oz82Y3dK~au4CwaTS`kxn>*o!mT+-KsOYp&CHhG`<|j8yGyaj9pq=s`yxD;ehu&6
zrmeFJG`6y=DeS$rR-jEso_~1@Qn3~fupKKPGGjjL>4kAQ%gu26rvAG7jkbl!HNXD>
z&dg?3T15{xG8)Hb78o*|MLw<9Mw8wcSetDO_EK@T$i{q@kwgq&d9aR|N9#t-rAO{G
z2wjPe<D{)|D%I*b?j;cU`Y7vIk~WETgRQ@Y)Q(fmV!4!cc5WYvl=ABn`Z?V%&p>!_
zdi&CN$FXL@3N-zvyiWM?dL42%p^)brNc8bU-GV>X5LORqz_%-=#s^$K$IqTsy1xAM
zLCmQ)8$&M3I_EK|jSW1&vD3dY7-vlgn|dN5iKgr}Icjdu_Q)a3HD?Q&eLE$9wFIf|
z6RYnmAn&wSRK*xGRzHIx3EB)B&!bYCo?}vJ`myfFl}{4;k1$|rc^6}d;(JqudPOKj
zB0LUz+E<vlBMQe^LSZH|I;~yDNfO@kN}mjneKPS2!(HfG;>}d;+hqiG%DfWLL=V+N
zNQK9M^Zb=p!2laumWG6!vPqxsHzs@S);;^-S3JT7LU&O_n38=1Q9RJ?mFF8j6%3Sv
zCgT@Vd*UBDD<E_11?_1Yr?c<Ec<adPg+)^PyS_Xh+~!xYD$P{|SIHCY3t6;%(F4Dt
z1@zQXk(0`jS`fe@xfE^>;y%5<_TxfqyV`6wX*VvJLdAfyr2i4WoMh4qdrifAzZbrL
zUCLm{K&6EtYr9b#ZYO&gtb*3}E+nH>HVbf;J&XcBM~HQf?qTy@V{~&Ip|X^8Tr$;7
zWhhnD>#KG0JS|DPB6lMN;6|`0?Pt%M0J1VJSYMQ&sa#z0<1DFDr4djuFvw~vOG8=h
zlowow@vc*O9YOIsUJuptNAFgTysXeo1Z!lMwM7(d)+8U(jZVQYL@sIFW#{GfvH|3)
z)b~Qz*da3%H{ji1et)mmzQ{zbXHJkt%Iu;_Rz^T%(}gcNVSdE9&=Q#wyJw12)4tb%
zjf$nuO4XL>S>uwlOZ9#Y7Q1$utE8xlRTPdrr2AuIRv7(RRz@M3u18Le_?ARus275y
zRnVCY;?6*9r4A$h7IVO2c}qt&CC!9KV~wfzuSDQXlgqna${s{U9kRMFfvMm*_e%|I
z3mec>a;5>Vm;bt=eDnEc{}G(?SRJBv@fnfG$Az@J+0q}7N)hqlyeed#DFXl@#CPs{
zHjUOBy)cS@_Ha$uvoY5aiFWhBVVGCCX;Fm|1FpyqxS!^C-fZ*TXQzKw?P^c_HW_?i
zgLwTdP&JJ87>vbBj$!vM_p8kHTfdNK^iZpyhZQrdD4h;BVXtX;NM5I5VDDI}`XElb
z_gB=E9|FC?>#U7#KT**ixAuZ~+zIH&G&eL{^^yCm@4^L`rh=WUh=nm|ap=#5UIO;o
zt~IhHfkC$TmPm@E<6fTS_d<p>jZ4ec8!h$2UTuj{@Mji}q7VA;o+MqS!&rTa(~KT%
zzTd;p!x5U_OyhNOqaU3Sm(qX0OzBKLOE(PFTpwUBMLxjQ2Q@a}n%kEIr(L55Km=^1
z#C~f+*rmGYh+DpkO2jj_79&)(Xa*P5Sb)*K2JG<-yW6La`8f(04YLBWF2su^L?xFE
zfncRNIPITJ8w_$5@zdpvLq~>k@OoIJp6Q9h#%+4GV=MKJQsGxcQo^85C|92|3pv=0
z4Z$ok1{qZ^qWe?NL~0tgsF8oA%X49%9tAL8;CtK1L?DY-DV1IR?JWH?i~R|7{cfUf
zpb=_eqale^{)jv-rfr(+wPUU?t|)qHGG%9u6C>~DLxsv*p?hJ;k>x&CuDUOK4CHZk
zh#95OixhptrJ_FVV~(wtZvRm=A?3O<3v#w&oaJ?eWp+i2CNR(BDiz4l(Z{Te2-7Zg
z$o#U12&u4N34RY6gw<x2{x1B!*G+3Nc-S@ImoUwj5Z0RxWGIw%tTUnN1^?DrFXU)?
z7o#rvNrlV)^Pr2(cKF_91LbyRiO>gFZNwXuR13G$H8b)k15Dx|V#kL!4-LNz>3RYy
z=G?EiP=JUS>lZbO!Ekqy?Gw!1sHh)<9_i6YUG%$1B(YDpmjW;XNuY(-NQgYalD6b;
zyRlG=gvBlM%*oWYW=ZhNXC*8VNS%afcuOmiLUakm7BxbQ&{@vJLX8mQmT<Qa=X>8+
z1~r~8*26~(g|eT~suiIT>Rzmxeo^8La3(=EXYFRri5foQ#}`F0FqoDeR<f9LJe{+b
zf|-!mFnt+<KjOPln3h&xw`WB$aa#-c-Y3G$8%Z+b!ginv<P2K3%u-fsVw~VdJjWr@
z)^d;$2ysLw*?2LJ{5D?|!W<ATqWUc$Rv5QW&T)Gk^P4SbtJ<HTqSWZ@(J#atZ(+=@
zD-=B%H(9SqfJbSR4n()700oM{@UDJo84wg1608!<LU>6P^|oIvt8jzw=`Ac>K-|up
z-SmV%#VdPxeaee_zm$Ar8rl*5Kmg|EH6yY6;zVd$QM;j`o&E8(9-bc^FH`30ZloNW
z^wP6ez02mCuX1R-Tk=F7ow8t}&q6`8BLv>`&P1%8`DX=zVEjHN7jzj5#q|Uzt0n=n
zwU%sjuXhVheUh_I89T;j&%OAz3&QZ|R-0-M6-c}2KTqZ|u0<OKZ!O9i;pO2XRtLg{
zE`pPf3y(l>a*TyJ*}jz86X#v23tpbK$Ohel*T;^Rzv{Aq7V%HG{KCJ22jAb{hSMT*
zqpWwJmrZBO{lZTQbdZ)V^u#Asn-0cceQN+CLg_-d!(ThLl4494ZAJiI=zVK-SmuS`
z^h*pKtFibjXalqCC5VHPr9k)>VHwbN+gbp3AmYf)!zZlD<qXE$TL`(f%pz*;2t`|A
zkXs;nu)q;{<#$&No-D$d*$CyH?P04J;Ifw~TCwJMTW+*|Vi17DP@FY$vmst5P}899
zYA5yA^_^+oSNkwjKur>n))cA*U!B_sc?XhVo)|%75})C``<8c82$>H4dU1$y486Um
z@novW2OB@c^r?gl4)ajk*s78+`jB}OBSXvGj>=~Qsn4>e9UGZ3f~cQ=vPz#B%(UjZ
z9g$Fww*4eaIG}{#m5;`WgdM0@v+mJTryvonzqL%g88_Jf;N?<DI!6ji6@tF7te8>-
zEP{T$VAZ=TK$X#Io>H%$EyID8>~b$4&ezLYtbzyoYLxj9QSU(My2}5Ruf!nDLv>a(
zFNxLsi)}}<7zt8@sn$fTG1f)nf;EH@7+$ArT!=Z!*<!QR`J7-;DilYlpz7EY?P!V(
zLONPjNm+eXYd^Hf=0R!gP-5b6Id&++WDNL$QoK&UAW$;+dZAlbRR{sjKs}kOkX-Ae
z0!wL3&eBDf`s7Kt<z%stR(W$?3h<3K2P>B$n1LgU^ZaSsMd-WG(8%Q>MXfRB#Fy61
z;qQU%eN9_!r?C@Ox4n7AL52RCh>&FCYubA~OQtfJ0EtVmXr(+_=Qh>cccOBp0K|Zo
z2Swpv^`4kagynf@0EfTx`!@fo4jkkxeS`x9Inl+rM!Hn<pl4qPD4ywvYWVmemntYC
zp{AsdL1!*0zZxpYCmQ)b4XQV?u-EX$;w+=oUa)6768C69%7Q38UY$~Xa;n{O3D;x)
z9HyKNp^rW$?|5Yy&ard9R<A2YoCRz^jh0=U6K*}VMCh3GA(n9`3$;g{p~JO>b)kWA
z`fwAV{9}-0&u;zELmoykmt>$l{dIl3!hw+=j}gKV^j1yLb*mYTq);xASg`eJ+RmyP
z^iZ&W>8g&RWC<#_wrhzY$XPwDYg6@H<j<b@F>Cq}&z0KyAq^EWYQA&PYcD6tcfr-2
zoz`_#f6y*kSNuipspK$ttDk9dEpSz?&9l%&M`)ZGY!h<E)1MZ=91tMdc_(ptfR7(!
zV+l~7Y0;D&E+jRmwxaB*L|xz*-n0y|(?jp+t~&qGA4Gn#mran&oFiOrQ!Wlr<jY_+
z3sIcgu(~mi@R-tWbbBdx-1uQm?v!0O-FEiMcSUvUxRhp;pR<165mC%MM7uRdx{%vh
z&6R}VKGxB*n-FACB2=;VK(F7ry0S};wXwy3JgNUEv%~I^+0)BvUuYXA{@}!e9cs(e
zlQkcl9rZoC>*;lLYtVfROrOCj4s#>R`1_{ocfRTCXwC-8-aXv78)xoc<p4ATe5mr+
z8)86zEXc;S(gBtIZ#Y#3*~+L_1=}0#y?DDrE_L7d;$<}{Gn~DpzW-T2ki*R#$Mwm*
z(NMW#f#spT{${DMs1lK>M4#-Quj$78ECT2m;a;xrqP7nnx+6F&FIT1hPx-`j<g5LM
zGjE-zY&VBe^@Qutd^v^ZhmS54!>yI=AJ)SA+Fpy!<PAE}uuD_3Jgo_{@HI&CLBUO`
zwP;@)AY^Mga+*NAq6*Cpqz5PPH-y`GSrbtst226@v@V?7DDkalB~==uCiW>DIn1FB
zje2aLyR%F0<X4c$=7KJAgX{_p*w4RCZ?Na-K*j+Q$|gGf0Te<(pLwg^z^7~uyuqqN
zuVwB=ik&dEdU}+7sIFz4Xgep=CPTNO_s0pYm04gh2U>*JzgRU`xi*0=lMdGMu9F7+
z7o(Xo5ZI2!(OD+}gM$csM(oEVu;?M$XGea)Z$(I2yA81XuojjA#A4egH*pupBSx@>
zva+w2G<2GhdDrgqlqS}!PV1Oj_rl#@Zxe_hj+QxXGqGP;eiEP?U$cmnTb%#&kXds8
z1o4O_dzn|3u9yTM28tDHhzm7dMZ0aZ+XWP|_q6Dv^a1A0Z?sW}ve1hm-twTFETzt@
zav)q1IDlxtpCtL(8P*%DYM!-jxzr@UPVgZYEosyF&<fen?|?mES3sQ~cs<wJTqsYx
zYGCC(>dHWZ|K0}ZePcTfa*?()XYU%P{p%{WAnboH*&`I5zd`JK4-Hx8gYC&k-&*Xg
z`-B1f+M&T?jm7JE6c~JKU&__b!$rI5ObttqhMyN0<HuZ_QWgm$u<cn`QZdIy(7BxW
z@LtfcD&Y0*!T9R^UFMB}iPq{!Rk-8FlLe{+*NKLY(Hq0gjl8QjuA@M!8Mo1$&&Scy
zWx~(sK>h`rSai2fDw8ICJOQr*gCi8ngxx|MnHwE@$_%KwwK`mZZ@_Vd8rf~5M=o(2
zraCtnx(~W&>87BDWm8uXwTDy3aE~(HQ!2FZ(#zjJGJ%=~`np|8(A{ILQu9z8-+}>n
z1ViY~_F5eHL)#o|V1=f#D(7`$PkN)jCK7<!xPaJii*Vi1=tV~#t?=OLeBlb5wx4l*
zR6oqgigq@~V%G#_m)^Mc(71nku{t?)Z*FW$e4qihUJE=l{c_?hXt<WQGgA9&@oOUh
z`%BMR;OgXD)B5O;&v<b5KNmgz^A-J95aGczC|tVFXP_$Vuh;xv)l6r35a|IpPgA17
z|F0<fKd&!NB8qv|vH3N^LUye9YF(IGU)D%X@vqe5|DrqdeV~fran%R#(kwRXyWW1P
z&6B%6d!vW=f4Rl!pjQi3_H03Y4nHptz*?PNT7DB5p=T`~OHcZIJ!aK3m?XZ`8C^^E
z2fL4VZ!pwdcLq?n-Hw}d&G80`-rz8)>x`>n<KrLQojm&RX5NvFSMN~6x;Ce3G@DGo
zx)1bU;`EF*p7u7mvQYFHIv>s$al0OU3n;5bV`^QRY`o|@pQ>W!CUh9cn!8*oxB5O9
z`*X0Z0p8IzYUkE#+pv!(7rn7AtH+Xfb*6cK+$pRXb;2BDp8E!}6V;!8(9LO#AHi!s
z4M6HMTjXMUjRMaJ!oktMU{A4!lQ?SIzLvI>sn&~{ee;x^$@d(&<~@nvhi#ErCebq6
zjqmNwnK3yshR6@UT@}AK7lKBG=CWE%@Y3<5qn6Ex`)KPyX*xr3G5ugouvH}0I7tCg
zG>yQ$Rs%=(Q!CRSu9i0%j>TxVc$`H!yp&}RGu$3?7b~@geJj=^6*}n^jYz5oa;A6&
zzS&DIsN{%)fkzvr=HurwSXqC9&+7+PN-nWd@*R8*u}ezlRZ}QlDJuR(uQHG~n!w`E
zZgrLG0lp+bl#jLA*=JBF5n=fdBT(5l^ESS4oc)^Lkw^R<e8|`eK8Z(baY$}l>G&{T
z`i;|7(9nK=X?H%^;gOIs{dtMX%gdJ1btdmZJGhY|sexc$xlt;aaoFUkgVo?N%kv@s
z4p=GP%(?}BoG%6J&aQioH>2~fv@Z#Tz575>nm7zr2N%xdaSpn9UBoW6<o82Kk)TM&
z2)6AVDmQ-npqS!uzVF14%QI-tD)84)?cdZoymruUkBPW1Lg4ht+BA~U3@0AH*gf`1
zxPtaxQ+3bm(K)j6MLmAB3DL!L8=P2!1nN~fgVxEZWiuBf4vFH}CG_v~yPRtb09F!-
zWX%pQdGU}9`^4ydHi&3_Nu``5DoxXWFXOZ3Si&{CUKYIP!6I|)$fhm{7oX~vx=@%N
zWA$2ta&1;MK2)r%8e4OcPD9fw8MKx>Z3)bmC@#z5iBhdrxq*KIj(=nJR49%W$UOKc
z5YzR9d3GLZ1k1AvV_oV-8_|sgYR!I)C(kIgFI{um_4)2TSZBB2%`s1Q+^j}#R)E&b
zQb~SPj{oo~t5_&r85D80Pt25c*CE&61p4GW+^FMa)!_`fYd%)`{6^d8?s6|F%DOR;
z`|{n$K7$51f|J$W&2wFCo|0|ptUDpa?Xj9fJP&UG^MGVTu;(}CUX#(UVvB|C_eU;G
zVu1~_3YD@lwbu7#&35PdAzqcX8d+y<=^tHNq~G(c<~@n7v^hPA5=P@lX5!Bq?xxr_
zvfQ-|QnQ{tKvD4xfUXHR-C<jc*^DKod*Ec2bXU&m-?2LNp&zci5a3-tkc1L`YDnUe
zfg8Zv-r3nnd#Ar;Yy{fD(vW;hN49?9u(Qze1q<)vuCwXVl@h?5<q9lc0b+^VBKWgF
ztIL2=u=}KX8?1eM_XcNox!&B5fmdYRYDH4L?K&#r{e7);2J4zjieQygu@E7zPQiEv
zxm0p_!U1g}IO{_+uMPD0sA2Nyfn_orv2vm!4&$(dr<P(q<MEN>U7;AEDXU?qq4YZ)
zr<-Ex)K8Hdep&~%Kto4B8YVhGh4$In7`FRlv6=bKu*Xe~Ppp9!csGVdarOg|Ub{gE
z31^JyeEV+r877#*u_U1Y!2*q#pEeL_Hy##oo1mM~x#IoI&&e0VAS7L}Id=<S10m*n
z59LQ|*GSUc{55jiEH^Pno#O3&!v-YBz0wYn;&~X0DLEan??D>P;#KC8+J}qz>F1pO
z2n!XCqX-Awoq|LDMT<{6vb0Y9an)GQoDw4mv?qvKhe;+u4yJoxc>{`6H-O&z@mRie
zcJs$De)QPBL`2pvw_{0`>#@uz`P?2;(OD%V(o`-zBtw*vxJ79C8LY^p3*8EZl9Z)@
z3NA;70u+9CZQ>bRdTOQJfFA<R-DDEDxHOY*8FeS>FWP=U=Rq<_tsji-`JAS%)tfR6
zSoi<-*-`&~b~=7VbUw^xh%i`^VY|Z-!BTO3p}QlAbTyj2#ywatqz64cjH!s~NKW#X
z9&bO?6d)ul(&FdI{$g5Epn9wGgzU@s@hYs0`z-}T>tI-7`|+d5O-2ieI2uruGTMUA
zO*x2hje$>xh9+{3E?N{C&Hq)8=rim06py9G!eM@9X5WB-APGT1pP)?S#M^TivbS$e
zTdbeKspqdJQpwZb4ke30D~*}YGp_DbXoJ!Q;>URq^$2&&wSk-#?B>NXxArO0x9%lK
zrtwN=ND9_l?K4$YmbP>_+Y5E)KPdwFV|>uFP;|^Iv<)I7tG@49Z{(IuWZ$r6`J)4m
zgR0_^n)jBZ+V6}fQmq#<gi|K_LNUXz)o04BhUij*FbG+8O~}t8@wg<GJFyw5@SR4c
zYV2FGbY>_*$!ri2QRD}nMW<k_M`JkkbUk*un=JZi`G`*R;443xw7hz8(Qe)XLlXs^
z(bkQ%yjx#3$lpo&oB8e><IL6LOYQChWek@yBNi1F)`X|K<Fz#YhII$;%LyXM+x<+{
zIG?6CMYy&PgtWsM;B2le=Ok5=%op=`1*$e<K-!iz$AXuY#O7y=#WtgKkLB9RtCzN5
z>Q#!i_IFHLR$*NY;yEi1#4WDjRF#r$*SkGw>Apu#foCx;i42NDNtK$GL{wcca8k*Y
zaqpLE(qh^XKnT&gF0G{F@TYZb2b)kZjds=R?_s|zj;C{t-3*kM-|4%*;jtH8ZU@Jz
zNuln!uvxom&vBd|EmY_&AZxWb1R4T(G{ChQYiB-vTjYZgKh&xOwY9vjsy<*I>`tby
zxb*A6_xK7e`cH)hGu#}nS<j4XREY=&?Ayu!f$k4%>{hO1nHp<fUmeAgYrF%PZ-L$`
zvUJ4$+a&at`H5E<x^WVff8prS`3=A*JeNH{xE2}sK9NSfuS_qvJ{O(8R_PKzX<rbb
zjA=!T;rn<PC!YUYyW6;LBpoWRH6mw@9Rm?c$B01LQaGpeUC8{@$1p>hY{Nk^3aN_L
z5r_P?U2cx!8qVkeWyg1}-ti0~-eoG_buq0-0In12uN69>SaiPunGAZ32Fqk%3;zl=
zaiIHxTIi<MYnDpea86^DOMnhbuJU-vq*P%ApHcU=5hgx9t#$kK7*D^&+DN<Gb((Z4
zzeZ3bt|e^OKqS7~!a?7nNn-^qFWKDAS**cW>2N8N#PIePK8XV9Y|4X)?Bsh#v*vwn
z6+n*v0r7~%a#JjYT+*D4>6s9N3f1TC?wL|K0ZR>!YZ2sFRLgZ{?TL-Y+fp?RhnqGy
zzw4*Xt%X(%9K~qo<@OK6UNgM`17pRcT;Xq#afH`qwgXJU-o~lkqbU~&dZB!9bI-C`
zC85eCf|)a)0sS6fkp6ylphlOX);k^ID0)~<pJ^BG3!NF%e!x}tovIq;xjP1TnW0%H
zHQDa)S3Rc0e)1JiK2AJL?`=0Ndz)XApU{A9Co!~Vj=6C<ac#Zom|Urq>|)yksIR$z
zbR;4!-zur(J^^js%K0X{>yo}mtU;hHFYhaRx9~5Cl`FOpmI%?N<uCj7Q{t#3c~osz
zWxT5w0bs%aL0}F-h_mhXqq{)s{CM-E7pjQ7KxY$`T&dY@ai9v>!kfBu4fO|GU~QvA
z?EH>)WuOvO<KMt=v@9R4$Pm9Ze-lEZsC7os1Zq~OKhK!|YPy0El$$c-_gn+|5tjIL
zvVSE9|JM&>Nrs5HQrtnR_WzfPg4(C6GyIAdDl$|;X3_nZh;#`fQ1buqIX2n<kU^)x
z{FXtZd7C6%6%%=p()<2-@cNhbnq>JOI%v`EiO3Q1b?2K^?q;v2mfO2K3BTL(pY%_V
z@*|D2LV{Rnn}EwoT>N_xER{IO>MZWnD|itJk<Z`Il@y4)ePI0<wUhGBpD2{e;8Q--
zlKH}mZ0<M9pwSeDEcHny2yCNzk^ikCyNMivOivJIdu6VSTfvmzS?;|IB-<R?iuP+!
zwhu8((dIcT4W|jd!a<|8`BLKTJRDlHi_Tf7NO3x^(UL2O+nIXBqLKhQuESopq4#Ze
zy{OITm`BS6UAIsQZMw1m1LxY>|CS8OXDNVy+^mf|mzcOrvI(ZCKCt@Gz5)wbv7-Ph
z$?)xAeIZ9RvA=s<A@Z;^i(leL=gUXo3#iWOO4q8YAMbl#g%WU8{H{MVn_T22-?@t(
zl?noyHLQPwxVIm^35rG#(Xkni$9HwX&NT0=Y@ePo{Tzr$zOk-P_+62#!iDD>*B?lC
z2%x?v6ZR&iRH@WVd?%w5PF3zzHSeRU(h|}-)$9ODf>%h1mUH3kcauxp_4TT`v#D~Z
z$kJK<HuQm9<s_cdyDa8?G3JQxk8rB395zygot0)g#;dSzqshu0?)gm#&mJw(7Al`1
z8g}~3!OBEaYn7Wk!VZt<!mMhFq`J}+Da?Dtt4qPHV0cm8-4@+DqdQY>kDD+<xh?9@
zCr_iLj_?bu_NxocC_&dluxHKPBBez3$EY!Py4KsG)}qQA?+h*nrI`2J&Pw_~@E)O^
zBy^_+*8of@AsgA>Gy&gF)Has|Lz|SXd0$eGvxb~iDmP*_94FeFPr?yJyBX88C_`-b
zMw8+)TfswFd=Ght=1fvsesFn{FCDBLo==H5lxj73aV)}a-0mlBb0ykJPRGj(v&Iv#
zE%l|q4tuJ#dUF6=4jY5{Y)Nz3O4VT~Hn7Zz{}@zVt5*=x+fDkrXbHukZb-P(Z^1Zj
zkx^$NXa&UWB5q40MGvGpJegR<@?RrKIbs8kJOt#TV1s{GExU<2IK!sc$Il+M8HFR~
zPab=vOB!%n?0Tv3)G<*?t8n6z5|4t=VDZiEL|~jiWGB5vx|V|T3jO7ZVe)1b@Z!2B
zUV%=I%v6c2`P&!~O=clcqUp-So0;C;iAk;`Lz#W*S`Cx<1#iN*yH=)@E3hg`)_=;>
z|BVCz%WMYGI{kLRace}66e;iRrZM6KiMyD_!+x!5wQhOYLUuY{Wtdc=XL|FFDZc#y
zZ6xo*>|WonVvXtO0>Zbd7f3~5r}#-9x<Veucf9x6?`v|?G=u-p{sDmoE7cnvx~XM-
zpG6M})edD+)ODxJ24Xh<Ua_48$*j6i%E}J<-ZW<^{t~L@R++fGXImq+gCk5FMj3WY
z7jam-yel^DLZk@trMQRT&({raTAhR^bXpisUpz%FihneM`Y4BA61)TOcO|eUJti~g
zD>6Dg$a`44NdK<gh{=#N$kC^+cEruig*ZpPW=xpnF^T4W)Egh=Jt|qXcfG1=HE}?D
z776IpY%)yEK;<ECw%_|Y+488+Ze}!`%9pO$;-I$Oe;I!sUy$M_%>KCZ3<Ga8G`TUt
zzZL~Sk{%xVqukdm{((V(?tZCE9`3(j<0#MK-y~NcX<F=j&*-w(Q;|;HgDBkBo%3r7
z62g-!O@9gMs8#JWosX^LZLv2J3s5&JP+!cUWdl4F6fui+lX>JtV*BDlh{ZQau~OPE
z{k|!jwq)byC3{`U@$Sx~@crFvv?>5azU){;QU9$j+*F@XU9S7&`JoGDIL9$K%I?S^
zCQl|_z2gY5Ql_I)DT{J<4#>froSZDv0B^N|_>B6aiAmII4U?cYo+$M6lKTJvl{oXF
zF{xyx(ZRKcA)~bdIdDRS-@8%!2^2@DC)X+KnHD3(Nq(;;E@=Le1&wzafEzzj4<pFZ
zPCjIH4f8D~(ZWS<iR*Za6M}PSxBmB9))|jq3Of?P9LL%a0jI?;<<T-U<2@BfK@TKv
zq&S;G2#7|(U%X3NI~p(^D@vlvxyo?-f97*fqB!814A<0csX=$7yz{EIS@1spQ>`9h
zS%@(Shg{G0w>PXmci6vn_ocO!XO0KASL>QiYYYBUe#~rA%r5W<d_k6(kV|=uhRK^v
zEI-=Y7ww)rd0ouTBo>?PTLhl{3AwO2`o>c4NAmhMDRXP>ZGIH&RD5UKX$IMO)|`DA
zbdc0kZ}B4AZwlpcyQ=P1oVWbUv$x2X>5<*cJ9BfNet+Q)s^|j4g!c0!hUaJO-}`yP
tnvFtF`;Fq&u#6eP6LRB!Bhawse@3$xlG#5wwVyEnfv2mV%Q~loCIE0T?2Z5c

literal 0
HcmV?d00001

diff --git a/docs/gettingstarted.md b/docs/gettingstarted.md
new file mode 100644
index 0000000..2d7c971
--- /dev/null
+++ b/docs/gettingstarted.md
@@ -0,0 +1,58 @@
+
+# Pre-req
+
+* Linux host with Docker 19.x or newer with Docker Swarm enabled
+    * [Getting Started](https://docs.docker.com/get-started/)
+* A Splunk index for metrics typically "em_metrics"
+* One or more Splunk indexes for events collected by SC4S
+* Splunk HTTP event collector enabled with a token dedicated for SC4S
+    * [Splunk Enterprise](http://dev.splunk.com/view/event-collector/SP-CAAAE6Q)
+    * [Splunk Enterprise Cloud](http://docs.splunk.com/Documentation/Splunk/7.3.1/Data/UsetheHTTPEventCollector#Configure_HTTP_Event_Collector_on_managed_Splunk_Cloud)
+* A network load balancer (NLB) configured for round robin. Note: Special consideration may be required when more advanced products are used. The optimal configuration of the load balancer will round robin each http POST request (not each connection)
+
+# Setup
+
+* Create a directory on the server for configuration
+* Create a docker-compose.yml file based on the following template
+
+```yaml
+version: "3"
+services:
+  sc4s:
+    image: rfaircloth/scs:latest
+    hostname: sc4s
+    ports:
+      - "514"
+      - "601"
+      - "514/udp"
+      - "5514"
+      - "5514/udp"
+    stdin_open: true
+    tty: true
+    environment:
+      - SPLUNK_HEC_URL=https://foo:8088/services/collector/event
+      - SPLUNK_HEC_TOKEN=<token>
+      - SPLUNK_CONNECT_METHOD=hec
+      - SPLUNK_DEFAULT_INDEX=<defaultindex>
+      - SPLUNK_METRICS_INDEX=em_metrics
+    volumes:
+    - splunk_index.csv:/opt/syslog-ng/etc/context/splunk_index.csv
+```
+
+* Download the latest context.csv file to the current directory
+```bash
+wget https://raw.githubusercontent.com/splunk/splunk-connect-for-syslog/master/package/etc/context/splunk_index.csv
+```
+
+* Edit splunk_index.csv review the index configuration and revise as required for sourcertypes utilized in your environment.
+
+* Start SC4S
+
+```bash
+docker stack deploy --compose-file docker-compose.yml sc4s
+```
+
+
+## Scale out
+
+Additional hosts can be deployed for syslog collection from additional network zones and locations
diff --git a/docs/index.md b/docs/index.md
new file mode 100644
index 0000000..19dfcad
--- /dev/null
+++ b/docs/index.md
@@ -0,0 +1,24 @@
+# Welcome to Splunk Connect for Syslog
+
+Splunk Connect for Syslog is an open source packaged solution for 
+getting data into Splunk using syslog-ng Open Source Edition (Syslog-NG OSE) and the Splunk 
+HTTP event Collector. 
+
+## Project Goals
+
+* Bring a tested configuration and build of syslog-ng OSE to the market that will function consistently regardless of the underlying host's linux distribution
+* Provide a container with the tested configuration for Docker/K8s that can be more easily deployed than upstream packages directly on a customer OS
+* Provide validated (testable and tested) implementations of filter and parse functions for common vendor products
+* Reduce latency and improve scale by balancing event distribution across Splunk Indexers
+
+
+
+## License
+
+* Configuration and documentation licensed subject to [CC0](LICENSE-CC0)
+
+* Code and scripts licensed subject to [BSD-2-Clause](LICENSE-BSD2) 
+
+* Third Party Red Hat Universal Base Image see [License](https://www.redhat.com/licenses/EULA_Red_Hat_Universal_Base_Image_English_20190422.pdf)
+
+* Third Party Syslog-NG (OSE) [License](https://github.com/balabit/syslog-ng)
diff --git a/docs/performance.md b/docs/performance.md
new file mode 100644
index 0000000..3eba88d
--- /dev/null
+++ b/docs/performance.md
@@ -0,0 +1,27 @@
+# Performance
+
+## Tested Configuration
+
+* SC4S instance requesting 8 cores and 4 GB of memory with K8S scheduler. 
+* 6 Splunk Indexers clustered in Single site
+* 1 loggen test client using the following command 
+* AWS instance type c5n.4xlarge
+
+```bash
+/opt/syslog-ng/bin/loggen -i --rate=1000 --interval=180 -P -F --sdata="[test name=\"stress17\"]" -s 800 --active-connections=10 sc4s 514
+```
+
+## Result  
+
+The single syslog-ng container in this test is able to provided effective balancing and routing of events equivalent 632 GB per day 
+
+```
+average rate = 9717.58 msg/sec, count=1749420, time=180.026, (average) msg size=800, bandwidth=7591.86 kB/sec
+
+```
+
+
+## Limitations
+
+* Splunk Enterprise's implementation of the http event collection server will respond to the client with a status code 200 and fail to commit the events to disk during a rolling restart in our testing 20-30 events per indexer may be lost
+
diff --git a/docs/sources.md b/docs/sources.md
new file mode 100644
index 0000000..3fd78da
--- /dev/null
+++ b/docs/sources.md
@@ -0,0 +1,170 @@
+# Vendor - Cisco
+
+## Product - ASA (Pre Firepower)
+
+| Ref            | Link                                                                                                    |
+|----------------|---------------------------------------------------------------------------------------------------------|
+| Splunk Add-on  | https://splunkbase.splunk.com/app/1620/                                                                 |
+| Product Manual | https://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/monitor_syslog.html |
+
+
+## Sourcetypes
+
+| sourcetype     | notes                                                                                                   |
+|----------------|---------------------------------------------------------------------------------------------------------|
+| cisco:asa      | None                                                                                                    |
+| cisco:pix      | Not supported                                                                                           |
+| cisco:fwsm     | Not supported                                                                                           |
+
+## Filter type
+
+MSG Parse: This filter parses message content
+
+## Setup and Configuration
+
+* Install the Splunk Add-on on the search head(s) for the user communities interested in this data source. If SC4S is exclusively used the addon is not required on the indexer.
+* Review and update the splunk_index.csv file and set the index as required.
+* Follow vendor configuration steps per Product Manual above ensure:
+    * Log Level is 6 "Informational"
+    * Protocol is TCP/IP
+    * permit-hostdown is on
+    * device-id is hostname and included
+    * timestamp is included
+
+## Verification
+
+Use the following search to validate events are present
+
+```
+index=<asconfigured> sourcetype=cisco:asa
+```
+
+Verify timestamp, and host values match as expected    
+
+# Vendor - Fortinet
+
+## Product - Fortigate
+
+| Ref            | Link                                                                                                    |
+|----------------|---------------------------------------------------------------------------------------------------------|
+| Splunk Add-on  | https://splunkbase.splunk.com/app/2846/                                                                 |
+| Product Manual | https://docs.fortinet.com/product/fortigate/6.2                                                         |
+
+
+## Sourcetypes
+
+| sourcetype     | notes                                                                                                   |
+|----------------|---------------------------------------------------------------------------------------------------------|
+| fgt_log        | The catch all sourcetype is not used                                                                                                    |
+| fgt_traffic    | None                                                                                         |
+| fgt_utm        | None                                                                                          |
+| fgt_event      | None 
+
+## Filter type
+
+MSG Parse: This filter parses message content
+
+## Setup and Configuration
+
+* Install the Splunk Add-on on the search head(s) for the user communities interested in this data source. If SC4S is exclusively used the addon is not required on the indexer.
+* Review and update the splunk_index.csv file and set the index as required.
+* Refer to the admin manual for specific details of configuration to send Reliable syslog using RFC 3195 format, a typical logging configuration will include the following features.
+
+```
+config log memory filter
+
+set forward-traffic enable
+
+set local-traffic enable
+
+set sniffer-traffic disable
+
+set anomaly enable
+
+set voip disable
+
+set multicast-traffic enable
+
+set dns enable
+
+end
+
+config system global
+
+set cli-audit-log enable
+
+end
+
+config log setting
+
+set neighbor-event enable
+
+end
+
+```
+
+## Verification
+
+An active firewall will generate frequent events, in addition fortigate has the ability to test logging functionality using a build in command
+
+```
+diag log test
+```
+
+Verify timestamp, and host values match as expected    
+
+```
+index=<asconfigured> (sourcetype=fgt_log OR sourcetype=fgt_traffic OR sourcetype=fgt_utm) 
+```
+
+###UTM Message type
+
+![FortiGate UTM message](FortiGate_utm.png)
+
+### Traffic Message Type
+
+![FortiGate Traffic message](FortiGate_traffic.png)
+
+###Event Message Type
+![FortiGate Event message](FortiGate_event.png)
+
+Verify timestamp, and host values match as expected    
+
+# Vendor - PaloAlto
+
+## Product - NGFW
+
+| Ref            | Link                                                                                                    |
+|----------------|---------------------------------------------------------------------------------------------------------|
+| Splunk Add-on  | https://splunkbase.splunk.com/app/2757/                                                                 |
+| Product Manual | https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/monitoring/use-syslog-for-monitoring/configure-syslog-monitoring.html                                                         |
+
+
+## Sourcetypes
+
+| sourcetype     | notes                                                                                                   |
+|----------------|---------------------------------------------------------------------------------------------------------|
+| pan:log        | None                                                                                                    |
+| pan:traffic    | None                                                                                         |
+| pan:threat     | None                                                                                          |
+
+## Filter type
+
+MSG Parse: This filter parses message content
+
+## Setup and Configuration
+
+* Install the Splunk Add-on on the search head(s) for the user communities interested in this data source. If SC4S is exclusively used the addon is not required on the indexer.
+* Review and update the splunk_index.csv file and set the index as required.
+* Refer to the admin manual for specific details of configuration
+    * Select TCP or SSL transport option
+    * Select IETF Format
+    * Ensure the format of the event is not customized
+
+## Verification
+
+An active firewall will generate frequent events use the following search to validate events are present per source device
+
+```
+index=<asconfigured> sourcetype=pan:*| stats count by host
+```
\ No newline at end of file
diff --git a/docs/troubleshooting.md b/docs/troubleshooting.md
new file mode 100644
index 0000000..ff2258a
--- /dev/null
+++ b/docs/troubleshooting.md
@@ -0,0 +1,9 @@
+#Troubleshooting 
+
+## Syslog-ng Metrics 
+
+## Syslog-NG Events
+
+## Container Events
+
+# Monitoring
diff --git a/mkdocs.yml b/mkdocs.yml
new file mode 100644
index 0000000..38dddfb
--- /dev/null
+++ b/mkdocs.yml
@@ -0,0 +1,8 @@
+site_name: Splunk Connect for Syslog
+theme: readthedocs
+nav:
+  - Home: 'index.md'
+  - Performance: 'performance.md'
+  - Getting Started: 'gettingstarted.md'
+  - Sources: 'sources.md'
+  - Troubleshooting: 'troubleshooting.md'
\ No newline at end of file
diff --git a/package/etc/conf.d/destinations/d_destinations.conf b/package/etc/conf.d/destinations/d_destinations.conf
index 3f08461..5c59aee 100644
--- a/package/etc/conf.d/destinations/d_destinations.conf
+++ b/package/etc/conf.d/destinations/d_destinations.conf
@@ -17,15 +17,16 @@ destination d_hec {
          method("POST")
          log-fifo-size(`splunk-log-fifo-size`)
          workers(`SYSLOGNG_HEC_WORKERS`)
-         batch-lines(500)
-         batch-bytes(512Kb)
+         batch-lines(1000)
+         batch-bytes(2048Kb)
          batch-timeout(3)
          timeout(15)
          user_agent("syslog-ng User Agent")
          user("syslog-ng")
+         headers("Connection: close")
          password("`SPLUNK_HEC_TOKEN`")
          persist-name("splunk")
-         disk-buffer(mem-buf-length(500)
+         disk-buffer(mem-buf-length(15000)
                      disk-buf-size(20000)
                      reliable(no)
                      dir("/opt/syslog-ng/var/data/disk-buffer/"))

From a069ff80fa259d6717c11fd10d67bc73c2a37fa4 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <35384120+rfaircloth-splunk@users.noreply.github.com>
Date: Fri, 16 Aug 2019 12:53:36 -0400
Subject: [PATCH 44/83] Update Dockerfile (#48)

* Update Dockerfile

Remove wild card enable of repo which was not required fixes #47

* Update clair-whitelist.yml

Fixes #49
---
 clair-whitelist.yml | 4 ++++
 package/Dockerfile  | 3 +--
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/clair-whitelist.yml b/clair-whitelist.yml
index 979a352..586bcb7 100644
--- a/clair-whitelist.yml
+++ b/clair-whitelist.yml
@@ -15,6 +15,10 @@ generalwhitelist:
     RHSA-2018:2772: False Positive
     RHSA-2018:1374: False Positive
     RHSA-2018:0180: False Positive
+    RHSA-2019:2029: False Positive
+    RHSA-2019:1873: False Positive
+
+
 
 images:
     scs:
diff --git a/package/Dockerfile b/package/Dockerfile
index 7c47a5a..cba55f8 100644
--- a/package/Dockerfile
+++ b/package/Dockerfile
@@ -17,8 +17,7 @@ ENV DISTCHECK_CONFIGURE_FLAGS="--prefix=/opt/syslog-ng --with-ivykis=system --wi
 COPY confluent.repo /etc/yum.repos.d/confluent.repo
 RUN subscription-manager register --org=$RH_ORG --activationkey=$RH_ACTIVATION --force
 RUN subscription-manager repos --enable=rhel-7-server-extras-rpms --enable=rhel-7-server-optional-rpms --enable=rhel-server-rhscl-7-rpms
-RUN subscription-manager repos --enable "rhel-*-optional-rpms" --enable "rhel-*-extras-rpms"  --enable "rhel-ha-for-rhel-*-server-rpms"
-RUN yum install wget -y
+RUN yum update -y; yum install wget -y
 RUN rpm --import https://packages.confluent.io/rpm/5.2/archive.key
 RUN cd /tmp ;\
     wget https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm ;\

From a477e96aed9d7e4b239e1112d5b98ff52e7ab143 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <35384120+rfaircloth-splunk@users.noreply.github.com>
Date: Sun, 18 Aug 2019 18:37:06 -0400
Subject: [PATCH 45/83] Feature/releaseimages (#54)

Revise CI process to release builds will publish as splunk/scs:latest
---
 .circleci/config.yml   | 90 +++++++++++++++++++++++++++++++-----------
 docker-compose-ci.yml  | 78 ++++++++++++++++++++++++++++++++++++
 docker-compose.yml     |  8 +++-
 docs/gettingstarted.md |  2 +-
 4 files changed, 153 insertions(+), 25 deletions(-)
 create mode 100644 docker-compose-ci.yml

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 1dedbc9..3db7ee2 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -28,19 +28,10 @@ jobs:
           command: docker login -u $DOCKER_USER -p $DOCKER_PASS
       - run:
           name: Build Docker image
-          command: docker build -f package/Dockerfile --build-arg RH_ORG=$RH_ORG --build-arg RH_ACTIVATION=$RH_ACTIVATION -t $IMAGE_NAME:build package
-      - run:
-          name: Tag Docker image
-          command: docker tag $IMAGE_NAME:build $IMAGE_NAME:$CIRCLE_SHA1
-      - run:
-          name: Tag Docker image
-          command: docker tag $IMAGE_NAME:build $IMAGE_NAME:edge
+          command: docker build -f package/Dockerfile --build-arg RH_ORG=$RH_ORG --build-arg RH_ACTIVATION=$RH_ACTIVATION -t $IMAGE_NAME:$CIRCLE_SHA1 package
       - run:
           name: Push Docker image
           command: docker push $IMAGE_NAME:$CIRCLE_SHA1
-      - run:
-          name: Push Docker image
-          command: docker push $IMAGE_NAME:edge
   build-egb:
     environment:
       IMAGE_NAME: rfaircloth/scs
@@ -57,13 +48,10 @@ jobs:
           command: docker login -u $DOCKER_USER -p $DOCKER_PASS
       - run:
           name: Build Docker image
-          command: docker build -f perftests/bundlesrv/Dockerfile  -t $IMAGE_NAME:egb-build perftests/bundlesrv
-      - run:
-          name: Tag Docker image
-          command: docker tag $IMAGE_NAME:egb-build $IMAGE_NAME:egb-$CIRCLE_SHA1
+          command: docker build -f perftests/bundlesrv/Dockerfile  -t $IMAGE_NAME:egb-$CIRCLE_SHA1 perftests/bundlesrv
       - run:
           name: Tag Docker image
-          command: docker tag $IMAGE_NAME:egb-build $IMAGE_NAME:egb-edge
+          command: docker tag $IMAGE_NAME:egb-$CIRCLE_SHA1 $IMAGE_NAME:egb-build
       - run:
           name: Push Docker image
           command: docker push $IMAGE_NAME:egb-$CIRCLE_SHA1
@@ -135,13 +123,13 @@ jobs:
                     registry.access.redhat.com/ubi7/ubi
             docker cp tests/ dummy:/work/tests/
             docker rm dummy
-      - run:
-          name: Docker Compose build
-          command: |
-            docker-compose build
+#      - run:
+#          name: Docker Compose build
+#          command: |
+#            docker-compose build
       - run:
           name: Docker Compose up
-          command: docker-compose up  --abort-on-container-exit
+          command: docker-compose  -f ./docker-compose-ci.yml up --abort-on-container-exit
       - run:
           name: Collect test results from Docker Compose
           command: |
@@ -174,7 +162,7 @@ jobs:
     - store_artifacts:
         path: /clair-reports
 
-  publish:
+  publish-common:
     environment:
       IMAGE_NAME: rfaircloth/scs
     docker:
@@ -195,6 +183,48 @@ jobs:
           name: Docker push tag
           command: docker push $IMAGE_NAME:$CIRCLE_BRANCH
 
+  publish-edge:
+    environment:
+      IMAGE_NAME: rfaircloth/scs
+    docker:
+      - image: circleci/buildpack-deps:stretch
+    steps:
+      - setup_remote_docker:
+          docker_layer_caching: true
+      - run:
+          name: Docker Login
+          command: docker login -u $DOCKER_USER -p $DOCKER_PASS
+      - run:
+          name: Docker pull
+          command: docker pull $IMAGE_NAME:$CIRCLE_SHA1
+      - run:
+          name: Docker tag image
+          command: docker tag $IMAGE_NAME:$CIRCLE_SHA1 $IMAGE_NAME:edge
+      - run:
+          name: Docker push tag
+          command: docker push $IMAGE_NAME:edge
+
+  publish-latest:
+    environment:
+      IMAGE_NAME: rfaircloth/scs
+    docker:
+      - image: circleci/buildpack-deps:stretch
+    steps:
+      - setup_remote_docker:
+          docker_layer_caching: true
+      - run:
+          name: Docker Login
+          command: docker login -u $DOCKER_USER -p $DOCKER_PASS
+      - run:
+          name: Docker pull
+          command: docker pull $IMAGE_NAME:$CIRCLE_SHA1
+      - run:
+          name: Docker tag image
+          command: docker tag $IMAGE_NAME:$CIRCLE_SHA1 splunk/scs:latest
+      - run:
+          name: Docker push tag
+          command: docker push splunk/scs:latest
+
 workflows:
   build-publish:
     jobs:
@@ -209,7 +239,7 @@ workflows:
       - test-scan_images:
           requires:
             - build
-      - publish:
+      - publish-common:
           requires:
             - dgoss
             - test-unit
@@ -218,3 +248,19 @@ workflows:
               only:
                 - master
                 - develop
+      - publish-edge:
+          requires:
+            - dgoss
+            - test-unit
+          filters:
+            branches:
+              only:
+                - develop
+      - publish-latest:
+          requires:
+            - dgoss
+            - test-unit
+          filters:
+            branches:
+              only:
+                - master
\ No newline at end of file
diff --git a/docker-compose-ci.yml b/docker-compose-ci.yml
new file mode 100644
index 0000000..b7dbd53
--- /dev/null
+++ b/docker-compose-ci.yml
@@ -0,0 +1,78 @@
+#Splunk Connect for Syslog (SC4S) by Splunk, Inc.
+#
+#To the extent possible under law, the person who associated CC0 with
+#Splunk Connect for Syslog (SC4S) has waived all copyright and related or neighboring rights
+#to Splunk Connect for Syslog (SC4S).
+#
+#You should have received a copy of the CC0 legalcode along with this
+#work.  If not, see <http://creativecommons.org/publicdomain/zero/1.0/>.
+version: "3.2"
+services:
+  test:
+    build: ./tests
+    links:
+      - splunk
+      - sc4s
+    volumes:
+      - sc4s-tests:/work/tests
+      - sc4s-results:/work/test-results
+    environment:
+      - SPLUNK_PASSWORD=${SPLUNK_PASSWORD}
+
+  sc4s:
+    image: rfaircloth/scs:${CIRCLE_SHA1}
+    hostname: sc4s
+    ports:
+      - "514"
+      - "601"
+      - "514/udp"
+      - "5514"
+      - "5514/udp"
+    stdin_open: true
+    tty: true
+    links:
+      - splunk
+    environment:
+      - SPLUNK_HEC_URL=${SPLUNK_HEC_URL}
+      - SPLUNK_HEC_STATSURL=${SPLUNK_HEC_STATSURL}
+      - SPLUNK_HEC_TOKEN=${SPLUNK_HEC_TOKEN}
+      - SPLUNK_CONNECT_METHOD=${SPLUNK_CONNECT_METHOD}
+      - SPLUNK_DEFAULT_INDEX=${SPLUNK_DEFAULT_INDEX}
+      - SPLUNK_METRICS_INDEX=${SPLUNK_DEFAULT_INDEX}
+#    logging:
+#      driver: splunk
+#      options:
+#        splunk-token: a778f63a-5dff-4e3c-a72c-a03183659e94
+#        splunk-url: https://splunk:8088/services/collector/event
+#        splunk-index: main
+#        splunk-insecureskipverify: true
+#        splunk-verify-connection: false
+  splunk:
+    image: splunk/splunk:latest
+    hostname: splunk
+    ports:
+      - "8000:8000"
+      - "8088:8088"
+      - "8089:8089"
+    environment:
+      - SPLUNK_HEC_TOKEN=${SPLUNK_HEC_TOKEN}
+      - SPLUNK_PASSWORD=${SPLUNK_PASSWORD}
+      - SPLUNK_START_ARGS=${SPLUNK_START_ARGS}
+      - SPLUNK_APPS_URL=${SPLUNK_APPS_URL}
+      - SPLUNKBASE_USERNAME=${SPLUNKBASE_USERNAME}
+      - SPLUNKBASE_PASSWORD=${SPLUNKBASE_PASSWORD}
+    volumes:
+      - ./splunk/SA-syslog-ng:/opt/splunk/etc/apps/SA-syslog-ng
+#    logging:
+#      driver: splunk
+#      options:
+#        splunk-token: a778f63a-5dff-4e3c-a72c-a03183659e94
+#        splunk-url: https://splunk:8088/services/collector/event
+#        splunk-index: main
+#        splunk-insecureskipverify: true
+#        splunk-verify-connection: false
+volumes:
+  sc4s-tests:
+    external: true
+  sc4s-results:
+    external: true
diff --git a/docker-compose.yml b/docker-compose.yml
index f13c181..9581236 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -6,7 +6,7 @@
 #
 #You should have received a copy of the CC0 legalcode along with this
 #work.  If not, see <http://creativecommons.org/publicdomain/zero/1.0/>.
-version: "3"
+version: "3.2"
 services:
   test:
     build: ./tests
@@ -20,9 +20,13 @@ services:
       - SPLUNK_PASSWORD=${SPLUNK_PASSWORD}
 
   sc4s:
-    image: rfaircloth/scs:latest
+    image: splunk/scs:latest
     build:
       context: ./package
+      cache_from:
+        - registry.access.redhat.com/ubi7/ubi
+        - registry.access.redhat.com/rhel7/rhel
+        - rfaircloth/scs:edge
       args:
         RH_ORG: ${RH_ORG}
         RH_ACTIVATION: ${RH_ACTIVATION}
diff --git a/docs/gettingstarted.md b/docs/gettingstarted.md
index 2d7c971..d1e71cc 100644
--- a/docs/gettingstarted.md
+++ b/docs/gettingstarted.md
@@ -19,7 +19,7 @@
 version: "3"
 services:
   sc4s:
-    image: rfaircloth/scs:latest
+    image: splunk/scs:latest
     hostname: sc4s
     ports:
       - "514"

From 89f475044eda4d9dcf58c64d3b11ff911991109b Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <35384120+rfaircloth-splunk@users.noreply.github.com>
Date: Mon, 19 Aug 2019 09:12:15 -0400
Subject: [PATCH 46/83] Update config.yml (#56)

---
 .circleci/config.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 3db7ee2..aa9293b 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -51,7 +51,7 @@ jobs:
           command: docker build -f perftests/bundlesrv/Dockerfile  -t $IMAGE_NAME:egb-$CIRCLE_SHA1 perftests/bundlesrv
       - run:
           name: Tag Docker image
-          command: docker tag $IMAGE_NAME:egb-$CIRCLE_SHA1 $IMAGE_NAME:egb-build
+          command: docker tag $IMAGE_NAME:egb-$CIRCLE_SHA1 $IMAGE_NAME:egb-edge
       - run:
           name: Push Docker image
           command: docker push $IMAGE_NAME:egb-$CIRCLE_SHA1

From 11d445c1266a11a88692f7fb3d66b4864815b426 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <35384120+rfaircloth-splunk@users.noreply.github.com>
Date: Wed, 21 Aug 2019 20:32:41 -0400
Subject: [PATCH 47/83] fix invalid build cache (#59)

---
 docker-compose.yml | 4 ----
 package/Dockerfile | 2 +-
 2 files changed, 1 insertion(+), 5 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 9581236..fd562ee 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -23,10 +23,6 @@ services:
     image: splunk/scs:latest
     build:
       context: ./package
-      cache_from:
-        - registry.access.redhat.com/ubi7/ubi
-        - registry.access.redhat.com/rhel7/rhel
-        - rfaircloth/scs:edge
       args:
         RH_ORG: ${RH_ORG}
         RH_ACTIVATION: ${RH_ACTIVATION}
diff --git a/package/Dockerfile b/package/Dockerfile
index cba55f8..2f8698e 100644
--- a/package/Dockerfile
+++ b/package/Dockerfile
@@ -11,7 +11,7 @@ FROM registry.access.redhat.com/rhel7/rhel
 ARG RH_ORG
 ARG RH_ACTIVATION
 
-ENV           CONFIGURE_FLAGS="--prefix=/opt/syslog-ng --with-ivykis=system --with-jsonc=system --disable-env-wrapper --disable-memtrace --enable-tcp-wrapper --disable-linux-caps --disable-man-pages --enable-all-modules --enable-force-gnu99 --enable-json --enable-native --enable-python --enable-http --enable-kafka --disable-java --disable-java-modules --disable-spoof_source --disable-sun_streams --disable-sql --disable-pacct --disable-mongodb --disable-amqp --disable-stomp --disable-redis --disable-systemd --disable-geoip --disable-geoip2 --disable-riemann --disable-smtp --disable-snmp_dest --with-python=3 --enable-dynamic-linking"
+ENV CONFIGURE_FLAGS="--prefix=/opt/syslog-ng --with-ivykis=system --with-jsonc=system --disable-env-wrapper --disable-memtrace --enable-tcp-wrapper --disable-linux-caps --disable-man-pages --enable-all-modules --enable-force-gnu99 --enable-json --enable-native --enable-python --enable-http --enable-kafka --disable-java --disable-java-modules --disable-spoof_source --disable-sun_streams --disable-sql --disable-pacct --disable-mongodb --disable-amqp --disable-stomp --disable-redis --disable-systemd --disable-geoip --disable-geoip2 --disable-riemann --disable-smtp --disable-snmp_dest --with-python=3 --enable-dynamic-linking"
 
 ENV DISTCHECK_CONFIGURE_FLAGS="--prefix=/opt/syslog-ng --with-ivykis=system --with-jsonc=system --disable-env-wrapper --disable-memtrace --enable-tcp-wrapper --disable-linux-caps --disable-man-pages --enable-all-modules --enable-force-gnu99 --enable-json --enable-native --enable-python --enable-http --enable-kafka --disable-java --disable-java-modules --disable-spoof_source --disable-sun_streams --disable-sql --disable-pacct --disable-mongodb --disable-amqp --disable-stomp --disable-redis --disable-systemd --disable-geoip --disable-geoip2 --disable-riemann --disable-smtp --disable-snmp_dest --with-python=3 --enable-dynamic-linking"
 COPY confluent.repo /etc/yum.repos.d/confluent.repo

From f3285e57fab0c38ea3ddc2ee93c2d5abab5b15ee Mon Sep 17 00:00:00 2001
From: mkarlstrand-splunk
 <49571555+mkarlstrand-splunk@users.noreply.github.com>
Date: Wed, 21 Aug 2019 17:42:52 -0700
Subject: [PATCH 48/83] Update CONTRIBUTING.md (#58)

---
 CONTRIBUTING.md | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 335ef34..85546be 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -95,6 +95,16 @@ available at [http://contributor-covenant.org/version/1/4][version]
 
 Use project issue tracker
 
-## Contributing code
+## Contributing code or data
 
-Future Docs
\ No newline at end of file
+Future Docs covering the contribution process and requirements
+
+By submitting a Contribution to this Work, You agree that Your Contribution is made subject to the license files applicable to this Work. Contributions comprising code shall be made pursuant the BSD2 license; Contributions consisting of configuration information or data shall be made pursuant to the CCO license. In addition, You represent that:  You are the copyright owner of the Contribution or (ii) You have the requisite rights to make the Contribution.
+
+Definitions:
+
+“You” shall mean:  yourself if you are making a Contribution on your own behalf; or (ii) your company, if you are making a Contribution on behalf of your company. If you are making a Contribution on behalf of your company, you represent that you have the requisite authority to do so.
+
+"Contribution" shall mean any original work of authorship, including any modifications or additions to an existing work, that is intentionally submitted by You for inclusion in, or documentation of, this project/repository. For the purposes of this definition, "submitted" means any form of electronic, verbal, or written communication submitted for inclusion in this project/repository, including but not limited to communication on electronic mailing lists, source code control systems, and issue tracking systems that are managed by, or on behalf of, the maintainers of the project/repository.
+
+“Work” shall mean the collective software, data, content, and documentation in this project/repository.

From 2c160e810b7a6a05e0466b845303f6a600fec942 Mon Sep 17 00:00:00 2001
From: themrkeys <ryan@dss-i.com>
Date: Fri, 23 Aug 2019 12:59:44 -0400
Subject: [PATCH 49/83] Feature/hostcontext (#61)

RHINO-221 Remove use of FLAKY
RHINO-228 Allow explicit mapping to log-path by hostname (parsed) or IP Fixes #45
---
 .circleci/config.yml                          |  13 +-
 .idea/misc.xml                                |   2 +-
 .idea/splunk-connect-for-syslog.iml           |   2 +-
 .idea/vcs.xml                                 |   1 -
 docker-compose-ci.yml                         |  17 ++
 docker-compose-debug.yml                      |  56 +++++
 docker-compose.yml                            |  27 +++
 docs/gettingstarted.md                        |  58 ++++-
 package/Dockerfile                            |   2 +-
 package/etc/conf.d/blocks/b_parsers.conf      |  69 ------
 .../conf.d/conflib/_common/rfc_syslog.conf    |  27 +++
 .../_common/templates.conf}                   |   6 +-
 .../etc/conf.d/conflib/_common/utility.conf   |   4 +
 .../vendor_product_by_source_context.conf     |   9 +
 .../_splunk}/splunk_context.conf              |   2 +-
 .../conf.d/conflib/_splunk/splunkfields.conf  |  23 ++
 .../etc/conf.d/conflib/vendor_cisco/asa.conf  |   3 +
 .../etc/conf.d/conflib/vendor_cisco/ios.conf  |   8 +
 .../conflib/vendor_fortinet/fortios.conf      |   3 +
 .../conf.d/conflib/vendor_juniper/junos.conf  |   8 +
 .../conf.d/conflib/vendor_juniper/legacy.conf |  19 ++
 .../etc/conf.d/conflib/vendor_pan/panos.conf  |   3 +
 .../{d_destinations.conf => splunk_hec.conf}  |   8 +-
 .../filters/cisco_asa_tradditional.conf       |  24 ---
 package/etc/conf.d/filters/juniper_junos.conf |  65 ------
 .../log_paths/P_rfc3164-juniper_nsm_idp.conf  |  15 ++
 package/etc/conf.d/log_paths/internal.conf    |  35 ++++
 .../conf.d/log_paths/p_rfc3164-cisco_asa.conf |  21 ++
 .../p_rfc3164-cisco_ios.conf}                 |  13 +-
 .../p_rfc3164-fortinet_fortios.conf}          |  13 +-
 .../log_paths/p_rfc3164-juniper-idp.conf      |  15 ++
 .../log_paths/p_rfc3164-juniper-junos.conf    |  24 +++
 .../p_rfc3164-juniper_netscreen.conf          |  14 ++
 .../log_paths/p_rfc3164-juniper_nsm.conf      |  19 ++
 .../p_rfc3164-paloalto-panos.conf}            |  37 ++--
 .../p_rfc5424_noversion-cisco_asa.conf        |  16 ++
 .../p_rfc_5424_strict-juniper-junos.conf      |  27 +++
 package/etc/conf.d/log_paths/zfallback.conf   |  11 +
 package/etc/conf.d/sources/network.conf       | 104 +++++----
 .../splunk_index.csv                          |   0
 .../vendor_product_by_source.conf             |  25 +++
 .../vendor_product_by_source.csv              |   5 +
 package/etc/syslog-ng.conf                    |  61 +-----
 tests/Dockerfile                              |   4 +-
 tests/entrypoint.sh                           |  23 ++
 tests/requirements.txt                        |   1 -
 tests/sendmessage.py                          |   4 +-
 tests/splunkutils.py                          |   2 +-
 tests/test_cisco_asa.py                       |  11 +-
 tests/test_cisco_ios.py                       |   2 -
 tests/test_common.py                          |  51 +++++
 tests/test_fortinet_ngfw.py                   |   4 -
 tests/test_juniper.py                         | 198 +-----------------
 tests/test_juniper_junos_rfc3164.py           |  97 +++++++++
 tests/test_juniper_junos_rfc5124.py           | 105 ++++++++++
 tests/test_palo_alto.py                       |   4 -
 tests/test_poc.py                             |  35 ----
 tests/wait-for                                |  79 +++++++
 58 files changed, 979 insertions(+), 555 deletions(-)
 create mode 100644 docker-compose-debug.yml
 delete mode 100644 package/etc/conf.d/blocks/b_parsers.conf
 create mode 100644 package/etc/conf.d/conflib/_common/rfc_syslog.conf
 rename package/etc/conf.d/{templates/t_templates.conf => conflib/_common/templates.conf} (92%)
 create mode 100644 package/etc/conf.d/conflib/_common/utility.conf
 create mode 100644 package/etc/conf.d/conflib/_common/vendor_product_by_source_context.conf
 rename package/etc/conf.d/{blocks => conflib/_splunk}/splunk_context.conf (74%)
 create mode 100644 package/etc/conf.d/conflib/_splunk/splunkfields.conf
 create mode 100644 package/etc/conf.d/conflib/vendor_cisco/asa.conf
 create mode 100644 package/etc/conf.d/conflib/vendor_cisco/ios.conf
 create mode 100644 package/etc/conf.d/conflib/vendor_fortinet/fortios.conf
 create mode 100644 package/etc/conf.d/conflib/vendor_juniper/junos.conf
 create mode 100644 package/etc/conf.d/conflib/vendor_juniper/legacy.conf
 create mode 100644 package/etc/conf.d/conflib/vendor_pan/panos.conf
 rename package/etc/conf.d/destinations/{d_destinations.conf => splunk_hec.conf} (92%)
 delete mode 100644 package/etc/conf.d/filters/cisco_asa_tradditional.conf
 delete mode 100644 package/etc/conf.d/filters/juniper_junos.conf
 create mode 100644 package/etc/conf.d/log_paths/P_rfc3164-juniper_nsm_idp.conf
 create mode 100644 package/etc/conf.d/log_paths/internal.conf
 create mode 100644 package/etc/conf.d/log_paths/p_rfc3164-cisco_asa.conf
 rename package/etc/conf.d/{filters/cisco_ios.conf => log_paths/p_rfc3164-cisco_ios.conf} (60%)
 rename package/etc/conf.d/{filters/fortinet_fgt.conf => log_paths/p_rfc3164-fortinet_fortios.conf} (79%)
 create mode 100644 package/etc/conf.d/log_paths/p_rfc3164-juniper-idp.conf
 create mode 100644 package/etc/conf.d/log_paths/p_rfc3164-juniper-junos.conf
 create mode 100644 package/etc/conf.d/log_paths/p_rfc3164-juniper_netscreen.conf
 create mode 100644 package/etc/conf.d/log_paths/p_rfc3164-juniper_nsm.conf
 rename package/etc/conf.d/{filters/paloalto_networks.conf => log_paths/p_rfc3164-paloalto-panos.conf} (68%)
 create mode 100644 package/etc/conf.d/log_paths/p_rfc5424_noversion-cisco_asa.conf
 create mode 100644 package/etc/conf.d/log_paths/p_rfc_5424_strict-juniper-junos.conf
 create mode 100644 package/etc/conf.d/log_paths/zfallback.conf
 rename package/etc/{context => context-local}/splunk_index.csv (100%)
 create mode 100644 package/etc/context-local/vendor_product_by_source.conf
 create mode 100644 package/etc/context-local/vendor_product_by_source.csv
 create mode 100755 tests/entrypoint.sh
 create mode 100644 tests/test_common.py
 create mode 100644 tests/test_juniper_junos_rfc3164.py
 create mode 100644 tests/test_juniper_junos_rfc5124.py
 delete mode 100644 tests/test_poc.py
 create mode 100755 tests/wait-for

diff --git a/.circleci/config.yml b/.circleci/config.yml
index aa9293b..69f02a8 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -123,13 +123,16 @@ jobs:
                     registry.access.redhat.com/ubi7/ubi
             docker cp tests/ dummy:/work/tests/
             docker rm dummy
-#      - run:
-#          name: Docker Compose build
-#          command: |
-#            docker-compose build
+      - run:
+          name: Docker Compose build
+          command: |
+            docker-compose build test
       - run:
           name: Docker Compose up
-          command: docker-compose  -f ./docker-compose-ci.yml up --abort-on-container-exit
+          command: |
+            docker-compose  -f ./docker-compose-ci.yml up -d splunk
+            sleep 70
+            docker-compose  -f ./docker-compose-ci.yml up --abort-on-container-exit
       - run:
           name: Collect test results from Docker Compose
           command: |
diff --git a/.idea/misc.xml b/.idea/misc.xml
index 7e25d8b..0c225df 100644
--- a/.idea/misc.xml
+++ b/.idea/misc.xml
@@ -3,7 +3,7 @@
   <component name="JavaScriptSettings">
     <option name="languageLevel" value="ES6" />
   </component>
-  <component name="ProjectRootManager" version="2" project-jdk-name="Remote Python 3.7.4 Docker Compose (test at [/Users/mbonsack/Splunk/SE_Tools/syslog/SC4S/splunk-connect-for-syslog/docker-compose.yml])" project-jdk-type="Python SDK" />
+  <component name="ProjectRootManager" version="2" project-jdk-name="Remote Python 3.7.4 Docker Compose (test at [/Users/rfaircloth/Documents/GitHub/splunk-connect-for-syslog/docker-compose.yml])" project-jdk-type="Python SDK" />
   <component name="PythonCompatibilityInspectionAdvertiser">
     <option name="version" value="3" />
   </component>
diff --git a/.idea/splunk-connect-for-syslog.iml b/.idea/splunk-connect-for-syslog.iml
index 14d7789..a304766 100644
--- a/.idea/splunk-connect-for-syslog.iml
+++ b/.idea/splunk-connect-for-syslog.iml
@@ -2,7 +2,7 @@
 <module type="PYTHON_MODULE" version="4">
   <component name="NewModuleRootManager">
     <content url="file://$MODULE_DIR$" />
-    <orderEntry type="jdk" jdkName="Remote Python 3.7.4 Docker Compose (test at [/Users/mbonsack/Splunk/SE_Tools/syslog/SC4S/splunk-connect-for-syslog/docker-compose.yml])" jdkType="Python SDK" />
+    <orderEntry type="jdk" jdkName="Remote Python 3.7.4 Docker Compose (test at [/Users/rfaircloth/Documents/GitHub/splunk-connect-for-syslog/docker-compose.yml])" jdkType="Python SDK" />
     <orderEntry type="sourceFolder" forTests="false" />
   </component>
   <component name="TemplatesService">
diff --git a/.idea/vcs.xml b/.idea/vcs.xml
index 6310177..53b20c8 100644
--- a/.idea/vcs.xml
+++ b/.idea/vcs.xml
@@ -5,6 +5,5 @@
     <mapping directory="$PROJECT_DIR$/package/syslog-ng" vcs="Git" />
     <mapping directory="$PROJECT_DIR$/package/syslog-ng/lib/ivykis" vcs="Git" />
     <mapping directory="$PROJECT_DIR$/package/syslog-ng/lib/jsonc" vcs="Git" />
-    <mapping directory="$PROJECT_DIR$/perftests/eventgen" vcs="Git" />
   </component>
 </project>
\ No newline at end of file
diff --git a/docker-compose-ci.yml b/docker-compose-ci.yml
index b7dbd53..fec924c 100644
--- a/docker-compose-ci.yml
+++ b/docker-compose-ci.yml
@@ -39,6 +39,23 @@ services:
       - SPLUNK_CONNECT_METHOD=${SPLUNK_CONNECT_METHOD}
       - SPLUNK_DEFAULT_INDEX=${SPLUNK_DEFAULT_INDEX}
       - SPLUNK_METRICS_INDEX=${SPLUNK_DEFAULT_INDEX}
+  sc4s-juniper:
+    image: rfaircloth/scs:${CIRCLE_SHA1}
+    hostname: sc4s-juniper
+    ports:
+      - "514"
+    stdin_open: true
+    tty: true
+    links:
+      - splunk
+    environment:
+      - SPLUNK_HEC_URL=${SPLUNK_HEC_URL}
+      - SPLUNK_HEC_STATSURL=${SPLUNK_HEC_STATSURL}
+      - SPLUNK_HEC_TOKEN=${SPLUNK_HEC_TOKEN}
+      - SPLUNK_CONNECT_METHOD=${SPLUNK_CONNECT_METHOD}
+      - SPLUNK_DEFAULT_INDEX=${SPLUNK_DEFAULT_INDEX}
+      - SPLUNK_METRICS_INDEX=${SPLUNK_DEFAULT_INDEX}
+      - SYSLOG_PRESUME_FILTER=juniper_netscreen
 #    logging:
 #      driver: splunk
 #      options:
diff --git a/docker-compose-debug.yml b/docker-compose-debug.yml
new file mode 100644
index 0000000..55cb296
--- /dev/null
+++ b/docker-compose-debug.yml
@@ -0,0 +1,56 @@
+#Splunk Connect for Syslog (SC4S) by Splunk, Inc.
+#
+#To the extent possible under law, the person who associated CC0 with
+#Splunk Connect for Syslog (SC4S) has waived all copyright and related or neighboring rights
+#to Splunk Connect for Syslog (SC4S).
+#
+#You should have received a copy of the CC0 legalcode along with this
+#work.  If not, see <http://creativecommons.org/publicdomain/zero/1.0/>.
+version: "3.2"
+services:
+
+  sc4s:
+    image: splunk/scs:latest
+    build:
+      context: ./package
+      args:
+        RH_ORG: ${RH_ORG}
+        RH_ACTIVATION: ${RH_ACTIVATION}
+    entrypoint:
+      - "tail"
+      - "-f"
+      - "/dev/null"
+    hostname: sc4s
+    ports:
+      - "514"
+      - "601"
+      - "514/udp"
+      - "5514"
+      - "5514/udp"
+    stdin_open: true
+    tty: true
+    links:
+      - splunk
+    environment:
+      - SPLUNK_HEC_URL=${SPLUNK_HEC_URL}
+      - SPLUNK_HEC_STATSURL=${SPLUNK_HEC_STATSURL}
+      - SPLUNK_HEC_TOKEN=${SPLUNK_HEC_TOKEN}
+      - SPLUNK_CONNECT_METHOD=${SPLUNK_CONNECT_METHOD}
+      - SPLUNK_DEFAULT_INDEX=${SPLUNK_DEFAULT_INDEX}
+      - SPLUNK_METRICS_INDEX=${SPLUNK_DEFAULT_INDEX}
+  splunk:
+    image: splunk/splunk:latest
+    hostname: splunk
+    ports:
+      - "8000:8000"
+      - "8088:8088"
+      - "8089:8089"
+    environment:
+      - SPLUNK_HEC_TOKEN=${SPLUNK_HEC_TOKEN}
+      - SPLUNK_PASSWORD=${SPLUNK_PASSWORD}
+      - SPLUNK_START_ARGS=${SPLUNK_START_ARGS}
+      - SPLUNK_APPS_URL=${SPLUNK_APPS_URL}
+      - SPLUNKBASE_USERNAME=${SPLUNKBASE_USERNAME}
+      - SPLUNKBASE_PASSWORD=${SPLUNKBASE_PASSWORD}
+    volumes:
+      - ./splunk/SA-syslog-ng:/opt/splunk/etc/apps/SA-syslog-ng
diff --git a/docker-compose.yml b/docker-compose.yml
index fd562ee..9edcf82 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -13,6 +13,7 @@ services:
     links:
       - splunk
       - sc4s
+      - sc4s-juniper
     volumes:
       - sc4s-tests:/work/tests
       - sc4s-results:/work/test-results
@@ -44,6 +45,32 @@ services:
       - SPLUNK_CONNECT_METHOD=${SPLUNK_CONNECT_METHOD}
       - SPLUNK_DEFAULT_INDEX=${SPLUNK_DEFAULT_INDEX}
       - SPLUNK_METRICS_INDEX=${SPLUNK_DEFAULT_INDEX}
+  sc4s-juniper:
+    image: splunk/scs:latest
+    build:
+      context: ./package
+#      cache_from:
+#        - registry.access.redhat.com/ubi7/ubi
+#        - registry.access.redhat.com/rhel7/rhel
+#        - rfaircloth/scs:edge
+      args:
+        RH_ORG: ${RH_ORG}
+        RH_ACTIVATION: ${RH_ACTIVATION}
+    hostname: sc4s-juniper
+    ports:
+      - "514"
+    stdin_open: true
+    tty: true
+    links:
+      - splunk
+    environment:
+      - SPLUNK_HEC_URL=${SPLUNK_HEC_URL}
+      - SPLUNK_HEC_STATSURL=${SPLUNK_HEC_STATSURL}
+      - SPLUNK_HEC_TOKEN=${SPLUNK_HEC_TOKEN}
+      - SPLUNK_CONNECT_METHOD=${SPLUNK_CONNECT_METHOD}
+      - SPLUNK_DEFAULT_INDEX=${SPLUNK_DEFAULT_INDEX}
+      - SPLUNK_METRICS_INDEX=${SPLUNK_DEFAULT_INDEX}
+      - SYSLOG_PRESUME_FILTER=juniper_netscreen
 #    logging:
 #      driver: splunk
 #      options:
diff --git a/docs/gettingstarted.md b/docs/gettingstarted.md
index d1e71cc..8abfe3b 100644
--- a/docs/gettingstarted.md
+++ b/docs/gettingstarted.md
@@ -22,11 +22,11 @@ services:
     image: splunk/scs:latest
     hostname: sc4s
     ports:
-      - "514"
-      - "601"
-      - "514/udp"
-      - "5514"
-      - "5514/udp"
+      - "514:514"
+      - "601:601"
+      - "514:514/udp"
+      - "5514:5514"
+      - "5514:5514/udp"
     stdin_open: true
     tty: true
     environment:
@@ -36,16 +36,25 @@ services:
       - SPLUNK_DEFAULT_INDEX=<defaultindex>
       - SPLUNK_METRICS_INDEX=em_metrics
     volumes:
-    - splunk_index.csv:/opt/syslog-ng/etc/context/splunk_index.csv
+    - ./sc4s/splunk_index.csv:/opt/syslog-ng/etc/context-local/splunk_index.csv
+    - ./sc4s/splunk_index.csv:/opt/syslog-ng/etc/context-local/splunk_index.csv
 ```
 
-* Download the latest context.csv file to the current directory
+## Configure index destinations for Splunk 
+* Download the latest context.csv file to a subdirectory sc4s below the docker-compose.yml file created above
 ```bash
-wget https://raw.githubusercontent.com/splunk/splunk-connect-for-syslog/master/package/etc/context/splunk_index.csv
+wget https://raw.githubusercontent.com/splunk/splunk-connect-for-syslog/master/package/etc/context-local/splunk_index.csv
 ```
-
 * Edit splunk_index.csv review the index configuration and revise as required for sourcertypes utilized in your environment.
 
+## Configure sources by source IP or host name
+* This step is required even if not used
+* Download the latest vendor_product_by_source.conf file to a subdirectory sc4s below the docker-compose.yml file created above
+```bash
+wget https://raw.githubusercontent.com/splunk/splunk-connect-for-syslog/master/package/etc/context-local/vendor_product_by_source.conf
+```
+* Edit the file to identify appropriate vendor products by host glob or network mask using syslog-ng filter syntax.
+
 * Start SC4S
 
 ```bash
@@ -56,3 +65,34 @@ docker stack deploy --compose-file docker-compose.yml sc4s
 ## Scale out
 
 Additional hosts can be deployed for syslog collection from additional network zones and locations
+
+
+## Single Source Technology instance - Alpha
+
+For certain source technologies message categorization by content is impossible to support collection 
+of such legacy nonstandard sources we provide a means of dedicating a container to a specific source using
+an alternate port. In the following configration example a dedicated port is opened (6514) for legacy juniper netscreen devices
+
+This approach is "alpha" and subject to change
+
+```yaml
+version: "3"
+services:
+  sc4s-juniper-netscreen:
+    image: splunk/scs:latest
+    hostname: sc4s-juniper-netscreen
+    ports:
+      - "6514:514"
+      - "6514:514/udp"
+    stdin_open: true
+    tty: true
+    environment:
+      - SPLUNK_HEC_URL=https://foo:8088/services/collector/event
+      - SPLUNK_HEC_TOKEN=<token>
+      - SPLUNK_CONNECT_METHOD=hec
+      - SPLUNK_DEFAULT_INDEX=<defaultindex>
+      - SPLUNK_METRICS_INDEX=em_metrics
+      - SYSLOG_PRESUME_FILTER=f_juniper_netscreen
+    volumes:
+    - ./sc4s-juniper/splunk_index.csv:/opt/syslog-ng/etc/context-local/splunk_index.csv
+```
\ No newline at end of file
diff --git a/package/Dockerfile b/package/Dockerfile
index 2f8698e..4e3b4c4 100644
--- a/package/Dockerfile
+++ b/package/Dockerfile
@@ -83,7 +83,7 @@ COPY goss.yaml /etc/goss.yaml
 COPY --from=0 /opt/syslog-ng /opt/syslog-ng
 COPY etc/syslog-ng.conf /opt/syslog-ng/etc/syslog-ng.conf
 COPY etc/conf.d /opt/syslog-ng/etc/conf.d
-COPY etc/context /opt/syslog-ng/etc/context
+COPY etc/context-local /opt/syslog-ng/etc/context-local
 COPY sbin/entrypoint.sh /sbin/entrypoint.sh
 
 RUN mkdir -p /opt/syslog-ng/var/data/disk-buffer
diff --git a/package/etc/conf.d/blocks/b_parsers.conf b/package/etc/conf.d/blocks/b_parsers.conf
deleted file mode 100644
index 8aae8e9..0000000
--- a/package/etc/conf.d/blocks/b_parsers.conf
+++ /dev/null
@@ -1,69 +0,0 @@
-#this parser can be used for "almost compliant" 5424 messages
-block parser p_RFC5424-lite(prefix(".rfc5424-lite.")) {
-    channel {
-        rewrite {
-            # Remove Version Identifier
-              subst('(<\d+>)\d+' "$1" value("MSG"));
-
-        };
-        parser {
-            # by this time this message will parse with the BSD 3164 parser
-            syslog-parser(time-zone(`default-timezone`));
-            # syslog-parser();
-
-        # extract name-value pairs.
-        # kv-parser(prefix("`prefix`"));
-        };
-    };
-};
-
-block parser p_test-parser(prefix(".testparse.")) {
-    channel {
-        rewrite {
-            # Put your rewrite rule here;use "MSG" as no-parse() puts entire payload there
-            # subst('(>.{12})\s' "${1}T" value("MSG"));
-        };
-        parser {
-            # Don't initially parse so full output can be seen
-            # syslog-parser(time-zone(`default-timezone`) flags(syslog-protocol));
-            # syslog-parser();
-            # syslog-parser(time-zone(`default-timezone`));
-            # date-parser(format("%Y-%m-%d %H:%M:%S") template("$(substr ${MESSAGE} 0 19)") time-zone(`default-timezone`));
-        };
-    };
-};
-
-#Used by fallback to log everything we can
-block rewrite r_set_splunk(sourcetype(`splunk-sourcetype`)
-                           index(`splunk-index`)
-                           template(`splunk-default-template`)
-                           vendor("unassigned")
-                           category("")
-                           filename("messages")
-                          ) {
-      set("`index`", value(".splunk.index"));
-      set("`sourcetype`", value(".splunk.sourcetype"));
-      set("`template`", value(".splunk.template"));
-      set("`vendor`", value(".splunk.vendor"));
-      set("`category`", value(".splunk.category"));
-      set("`filename`", value(".splunk.filename"));
-      set($FACILITY, value("fields.syslog_facility"));
-      set($LEVEL, value("fields.syslog_severity"));
-      set($LOGHOST, value("fields.syslog_server"));
-  };
-
-#Used when for normal filters index and sourcetype must be set in a prior re-write or context
-block rewrite r_set_splunk_basic(
-                           template(`splunk-default-template`)
-                           vendor("unassigned")
-                           category("")
-                           filename("messages")
-                          ) {
-      set("`template`", value(".splunk.template"));
-      set("`vendor`", value(".splunk.vendor"));
-      set("`category`", value(".splunk.category"));
-      set("`filename`", value(".splunk.filename"));
-      set($FACILITY, value("fields.syslog_facility"));
-      set($LEVEL, value("fields.syslog_severity"));
-      set($LOGHOST, value("fields.syslog_server"));
-  };
diff --git a/package/etc/conf.d/conflib/_common/rfc_syslog.conf b/package/etc/conf.d/conflib/_common/rfc_syslog.conf
new file mode 100644
index 0000000..1809034
--- /dev/null
+++ b/package/etc/conf.d/conflib/_common/rfc_syslog.conf
@@ -0,0 +1,27 @@
+filter f_rfc5424_strict{
+    message('^(?<SYSLOGMSG>(?<HEADER>(?<PRI><\d{1,3}>)(?<VERSION>[1-9][0-9]?) (?<TIMESTAMP>(?<FULLDATE>(?<FULLDATEYEAR>\d{4})-(?<FULLDATEMONTH>\d\d)-(?<FULLDATEDAY>\d\d))T(?<FULLTIME>(?<PARTIALTIME>(?<TIMEHOUR>[0-2]\d):(?<TIMEMINUTE>[0-5]\d):(?<TIMESECOND>[0-5]\d)(?:.(?<TIMESECFRAC>\d{1,6}))?)(?<TIMEOFFSET>Z|(?<TIMENUMOFFSET>[+\-][0-2]\d:[0-5]\d))))))');
+};
+filter f_rfc5424_noversion{
+    message('^(?<SYSLOGMSG>(?<HEADER>(?<PRI><\d{1,3}>) ?(?<TIMESTAMP>(?<FULLDATE>(?<FULLDATEYEAR>\d{4})-(?<FULLDATEMONTH>\d\d)-(?<FULLDATEDAY>\d\d))T(?<FULLTIME>(?<PARTIALTIME>(?<TIMEHOUR>[0-2]\d):(?<TIMEMINUTE>[0-5]\d):(?<TIMESECOND>[0-5]\d)(?:.(?<TIMESECFRAC>\d{1,6}))?)(?<TIMEOFFSET>Z|(?<TIMENUMOFFSET>[+\-][0-2]\d:[0-5]\d))))))');
+};
+rewrite set_rfcnonconformant{
+    set("rfc5424_nonconform" value("fields.sc4s_syslog_format"));
+};
+rewrite set_rfc5424_strict{
+    set("rfc5424_strict" value("fields.sc4s_syslog_format"));
+};
+filter f_is_rfc5424_strict{
+    match("rfc5424_strict" value("fields.sc4s_syslog_format"))
+};
+rewrite set_rfc5424_noversion{
+    set("rfc5424_noversion" value("fields.sc4s_syslog_format"));
+};
+filter f_is_rfc5424_noversion{
+    match("rfc5424_noversion" value("fields.sc4s_syslog_format"))
+};
+rewrite set_rfc3164{
+    set("rfc3164" value("fields.sc4s_syslog_format"));
+};
+filter f_is_rfc3164{
+    match("rfc3164" value("fields.sc4s_syslog_format"))
+};
\ No newline at end of file
diff --git a/package/etc/conf.d/templates/t_templates.conf b/package/etc/conf.d/conflib/_common/templates.conf
similarity index 92%
rename from package/etc/conf.d/templates/t_templates.conf
rename to package/etc/conf.d/conflib/_common/templates.conf
index 0190f1f..b07a8a5 100644
--- a/package/etc/conf.d/templates/t_templates.conf
+++ b/package/etc/conf.d/conflib/_common/templates.conf
@@ -48,5 +48,9 @@ template t_hdr_sdata_msg {
 # ===============================================================================================
  
 template t_JSON {
-	template("$(format-json --scope all-nv-pairs)");
+	template("$(format-json --scope all-nv-pairs
+	            --exclude fields.*
+	            --exclude .splunk.*
+	            --exclude HOST --exclude HOSTFROMgit m
+	            )");
 	};
diff --git a/package/etc/conf.d/conflib/_common/utility.conf b/package/etc/conf.d/conflib/_common/utility.conf
new file mode 100644
index 0000000..8b986c3
--- /dev/null
+++ b/package/etc/conf.d/conflib/_common/utility.conf
@@ -0,0 +1,4 @@
+
+rewrite set_metadata_presume {
+    set("$(env SYSLOG_PRESUME_FILTER)" value("fields.sc4s_presume"));
+};
\ No newline at end of file
diff --git a/package/etc/conf.d/conflib/_common/vendor_product_by_source_context.conf b/package/etc/conf.d/conflib/_common/vendor_product_by_source_context.conf
new file mode 100644
index 0000000..cb238de
--- /dev/null
+++ b/package/etc/conf.d/conflib/_common/vendor_product_by_source_context.conf
@@ -0,0 +1,9 @@
+block parser vendor_product_by_source() {
+    add-contextual-data(
+        selector(filters("/opt/syslog-ng/etc/context-local/vendor_product_by_source.conf")),
+        database("context-local/vendor_product_by_source.csv")
+        ignore-case(yes)
+        prefix("fields.")
+    );
+};
+
diff --git a/package/etc/conf.d/blocks/splunk_context.conf b/package/etc/conf.d/conflib/_splunk/splunk_context.conf
similarity index 74%
rename from package/etc/conf.d/blocks/splunk_context.conf
rename to package/etc/conf.d/conflib/_splunk/splunk_context.conf
index e2e0af9..e2d1fbb 100644
--- a/package/etc/conf.d/blocks/splunk_context.conf
+++ b/package/etc/conf.d/conflib/_splunk/splunk_context.conf
@@ -1,7 +1,7 @@
 block parser p_add_context_splunk(key("syslogng-fallback")) {
     add-contextual-data(
         selector("`key`"),
-        database("context/splunk_index.csv"),
+        database("context-local/splunk_index.csv"),
         prefix(".splunk.")
     );
 };
\ No newline at end of file
diff --git a/package/etc/conf.d/conflib/_splunk/splunkfields.conf b/package/etc/conf.d/conflib/_splunk/splunkfields.conf
new file mode 100644
index 0000000..7d96599
--- /dev/null
+++ b/package/etc/conf.d/conflib/_splunk/splunkfields.conf
@@ -0,0 +1,23 @@
+#Used to set index fields we will always use
+rewrite r_set_splunk_basic {
+      set("`index`", value(".splunk.index"));
+
+      set("`sourcetype`", value(".splunk.sourcetype"));
+      set("`source`", value(".splunk.source"));
+      set($FACILITY, value("fields.sc4s_syslog_facility"));
+      set($LEVEL, value("fields.sc4s_syslog_severity"));
+      set($LOGHOST, value("fields.sc4s_syslog_server"));
+      set($SOURCEIP, value("fields.sc4s_fromhostip"));
+};
+
+#rewrite
+
+#Used by fallback to log everything we can
+block rewrite r_set_splunk(
+                              template(`splunk-default-template`)
+                           ) {
+      set("`template`", value("fields.sc4s_template"));
+  };
+
+
+
diff --git a/package/etc/conf.d/conflib/vendor_cisco/asa.conf b/package/etc/conf.d/conflib/vendor_cisco/asa.conf
new file mode 100644
index 0000000..bbd3157
--- /dev/null
+++ b/package/etc/conf.d/conflib/vendor_cisco/asa.conf
@@ -0,0 +1,3 @@
+filter f_cisco_asa {
+    message('^%ASA-\d+-\d{1,10}: ');
+};
\ No newline at end of file
diff --git a/package/etc/conf.d/conflib/vendor_cisco/ios.conf b/package/etc/conf.d/conflib/vendor_cisco/ios.conf
new file mode 100644
index 0000000..09a37ed
--- /dev/null
+++ b/package/etc/conf.d/conflib/vendor_cisco/ios.conf
@@ -0,0 +1,8 @@
+rewrite set_metadata_vendor_product_cisco_ios{
+    set("cisco_ios" value(".metadata.vendor_product"));
+};
+
+filter f_cisco_ios{
+    match("cisco_ios", value(".metadata.vendor_product") type(glob));
+};
+
diff --git a/package/etc/conf.d/conflib/vendor_fortinet/fortios.conf b/package/etc/conf.d/conflib/vendor_fortinet/fortios.conf
new file mode 100644
index 0000000..6c08a87
--- /dev/null
+++ b/package/etc/conf.d/conflib/vendor_fortinet/fortios.conf
@@ -0,0 +1,3 @@
+filter f_fortinet_fortios {
+    message('devid=\"?F[G|W|6K].+type=\"?(traffic|utm|event)');
+};
diff --git a/package/etc/conf.d/conflib/vendor_juniper/junos.conf b/package/etc/conf.d/conflib/vendor_juniper/junos.conf
new file mode 100644
index 0000000..49ae1de
--- /dev/null
+++ b/package/etc/conf.d/conflib/vendor_juniper/junos.conf
@@ -0,0 +1,8 @@
+filter f_juniper_junos {
+    match('^\[junos@2636' value("SDATA"))
+        or match('syslog@juniper.net' value("SDATA"))
+};
+
+filter f_juniper_junos_legacy {
+    program("RT_IDP|RT_FLOW|RT_IDS|RT_UTM|Juniper");
+};
\ No newline at end of file
diff --git a/package/etc/conf.d/conflib/vendor_juniper/legacy.conf b/package/etc/conf.d/conflib/vendor_juniper/legacy.conf
new file mode 100644
index 0000000..8ec73a3
--- /dev/null
+++ b/package/etc/conf.d/conflib/vendor_juniper/legacy.conf
@@ -0,0 +1,19 @@
+
+
+filter f_juniper_nsm {
+    match("^juniper_nsm$", value("fields.sc4s_vendor_product"));
+
+};
+filter f_juniper_nsm_idp {
+    match("juniper_nsm_idp", value("fields.sc4s_vendor_product") type(glob) );
+
+};
+
+filter f_juniper_netscreen {
+    match("juniper_netscreen", value("fields.sc4s_vendor_product") type(glob) );
+
+};
+
+filter f_juniper_idp {
+    match("juniper_idp", value("fields.sc4s_vendor_product") type(glob) );
+};
diff --git a/package/etc/conf.d/conflib/vendor_pan/panos.conf b/package/etc/conf.d/conflib/vendor_pan/panos.conf
new file mode 100644
index 0000000..da0cb04
--- /dev/null
+++ b/package/etc/conf.d/conflib/vendor_pan/panos.conf
@@ -0,0 +1,3 @@
+filter f_paloalto_panos {
+    message(',\d+,(THREAT|TRAFFIC|SYSTEM|CONFIG|HIPWATCH|CORRELATION|USERID),');
+};
\ No newline at end of file
diff --git a/package/etc/conf.d/destinations/d_destinations.conf b/package/etc/conf.d/destinations/splunk_hec.conf
similarity index 92%
rename from package/etc/conf.d/destinations/d_destinations.conf
rename to package/etc/conf.d/destinations/splunk_hec.conf
index 5c59aee..81f3187 100644
--- a/package/etc/conf.d/destinations/d_destinations.conf
+++ b/package/etc/conf.d/destinations/splunk_hec.conf
@@ -27,7 +27,7 @@ destination d_hec {
          password("`SPLUNK_HEC_TOKEN`")
          persist-name("splunk")
          disk-buffer(mem-buf-length(15000)
-                     disk-buf-size(20000)
+                     disk-buf-size(200000)
                      reliable(no)
                      dir("/opt/syslog-ng/var/data/disk-buffer/"))
          tls(peer-verify(no)
@@ -41,11 +41,11 @@ destination d_hec {
             )
          body('$(format-json
                  time=$S_UNIXTIME.$S_MSEC
-                 host=$HOST
-                 source=${HOST_FROM}
+                 host=${HOST}
+                 source=${.splunk.source}
                  sourcetype=${.splunk.sourcetype}
                  index=${.splunk.index}
-                 event=$(template ${.splunk.template} $(template `splunk-default-template`))
+                 event=$(template ${fields.sc4s_template} $(template `splunk-default-template`))
                  fields.*)')
         );
     };
diff --git a/package/etc/conf.d/filters/cisco_asa_tradditional.conf b/package/etc/conf.d/filters/cisco_asa_tradditional.conf
deleted file mode 100644
index 57d25ce..0000000
--- a/package/etc/conf.d/filters/cisco_asa_tradditional.conf
+++ /dev/null
@@ -1,24 +0,0 @@
-log {
-    source(s_default-ports);
-
-    filter {tags("cisco:asa")
-            or message('^.{10,60} : %ASA-\d+-\d{1,10}: ')
-        ;};
-
-    #Cisco ASA can send 3264 or 5424 either way we are good with basic parsing
-    parser {
-        #basic parsing
-        syslog-parser(time-zone(`default-timezone`));
-    };
-
-    #set the source type based on program field and lookup index from the splunk context csv
-    parser {p_add_context_splunk(key("cisco:asa")); };
-
-    #rewrite the final message for splunk json
-    #sourcetype and index are set in the filter defaults won't be used
-    rewrite {r_set_splunk_basic(template("t_msg_only")) }; #--HEC--
-
-    destination(d_hec);  #--HEC--
-
-    flags(flow-control,final);
-};
diff --git a/package/etc/conf.d/filters/juniper_junos.conf b/package/etc/conf.d/filters/juniper_junos.conf
deleted file mode 100644
index 3a205e4..0000000
--- a/package/etc/conf.d/filters/juniper_junos.conf
+++ /dev/null
@@ -1,65 +0,0 @@
-# ===============================================================================================
-# Juniper Standard and Structured logging
-# ===============================================================================================
-
-log {
-
-    source(s_default-ports);
-
-# For newer (structured) format; RFC 5424 compliant.  The existing TA will not work for this format; these filters
-# are included for future TA development.  The exception is NSM IDP, for which we're awaiting a data
-# sample to confirm that it follows the RFC 5424 format.
-# If it is determined that NSM IDP ("syslog@juniper.net") messages are indeed 3164 format, remove the check for
-# the "syslog@juniper.net" message below.  It will then be caught by the standard section following.
-
-junction {
-    channel {
-        filter { tags("juniper_structured") or message('junos@2636') or message('syslog@juniper.net'); };
-        parser { syslog-parser(flags(syslog-protocol)); };
-        if (tags("juniper_JunOS_IDP") or program('RT_IDP')) {
-            parser {p_add_context_splunk(key("juniper:junos:idp:structured")); };
-            } elif (tags("juniper_JunOS_Firewall") or program('RT_FLOW|RT_IDS|RT_UTM')) {
-            parser {p_add_context_splunk(key("juniper:junos:firewall:structured")); };
-            }
-            elif (tags("juniper_idp") or program('Jnpr')) {
-            parser {p_add_context_splunk(key("juniper:idp:structured")); };
-            }
-            else {
-            parser {p_add_context_splunk(key("juniper:structured")); };
-            };
-        rewrite { r_set_splunk_basic(template("t_hdr_sdata_msg"))};
-        destination(d_hec);  #--HEC--
-        flags(final);
-        };
-
-# For legacy "standard" format.  The existing Juniper TA will work for these data sources.
-# Remove the message filter below when tag support is implemented.
-
-    channel {
-        filter { tags("juniper_standard") or message('RT_IDP:|RT_FLOW:|RT_IDS:|RT_UTM:|Juniper:|traffic\,\s+traffic\s+log|syslog@juniper.net|predefined\,\s+|NetScreen\s+device_id\=') };
-#        filter { tags("juniper_standard") };
-        parser { syslog-parser(time-zone(`default-timezone`)); };
-        if (program('RT_IDP')) {
-            parser {p_add_context_splunk(key("juniper:junos:idp")); };
-            } elif (program('RT_FLOW|RT_IDS|RT_UTM')) {
-            parser {p_add_context_splunk(key("juniper:junos:firewall")); };
-            } elif (program('Juniper')) {
-            parser {p_add_context_splunk(key("juniper:sslvpn")); };
-            } elif (message('traffic\,\s+traffic\s+log')) {
-            parser {p_add_context_splunk(key("juniper:nsm")); };
-            } elif (message('syslog@juniper.net')) {
-            parser {p_add_context_splunk(key("juniper:idp")); };
-            } elif (message('predefined\,\s+')) {
-            parser {p_add_context_splunk(key("juniper:nsm:idp")); };
-            } elif (message('NetScreen\s+device_id\=')) {
-            parser {p_add_context_splunk(key("juniper:netscreen")); };
-            }
-            else {
-            parser {p_add_context_splunk(key("juniper:legacy")); };
-            };
-        rewrite { r_set_splunk_basic(template("t_standard")) };
-        destination(d_hec);  #--HEC--
-        flags(final);
-        };
-    };
-};
diff --git a/package/etc/conf.d/log_paths/P_rfc3164-juniper_nsm_idp.conf b/package/etc/conf.d/log_paths/P_rfc3164-juniper_nsm_idp.conf
new file mode 100644
index 0000000..377820c
--- /dev/null
+++ b/package/etc/conf.d/log_paths/P_rfc3164-juniper_nsm_idp.conf
@@ -0,0 +1,15 @@
+log {
+
+    source(s_default-ports);
+    filter(f_is_rfc3164);
+    filter(f_juniper_nsm_idp);
+
+    parser {
+                p_add_context_splunk(key("juniper:nsm:idp"));
+    };
+    rewrite {
+        r_set_splunk(template("t_standard"))
+    };
+    destination(d_hec);  #--HEC--
+    flags(flow-control);
+};
diff --git a/package/etc/conf.d/log_paths/internal.conf b/package/etc/conf.d/log_paths/internal.conf
new file mode 100644
index 0000000..879925f
--- /dev/null
+++ b/package/etc/conf.d/log_paths/internal.conf
@@ -0,0 +1,35 @@
+log {
+    source(s_internal);
+
+    if (match("^Log statistics; " value("MESSAGE"))) {
+
+        parser {p_add_context_splunk(key("syslog-ng:metrics")); };
+        rewrite {
+            subst('(?:Log statistics; )?(?<Type>[^= ]+)=\x27(?<SourceName>[^\(]+)\((?<SourceId>[^,\)]+)(?:,(?<SourceInstance>[^,]+),(?<State>[^\)]+))?\)\=(?<Number>\d+)\x27(?:, )?',
+                    '
+                    {"time": "$S_UNIXTIME.$S_MSEC",
+                      "event": "metric",
+                      "host": "$HOST",
+                      "index": "${.splunk.index}",
+                      "source": "internal",
+                      "sourcetype": "${.splunk.sourcetype}",
+                      "fields": {
+                         "source_name": "${SourceName}",
+                         "source_instance": "${SourceInstance}",
+                         "state": "${State}",
+                         "type": "${Type}",
+                         "_value": ${Number},
+                         "metric_name": "syslogng.${SourceId}"
+                       }
+                     }
+                     ',
+                     value("MESSAGE") flags("utf8" "global")
+                  );
+        };
+        destination(d_hecmetrics);  #--HEC--
+    } else {
+        parser {p_add_context_splunk(key("syslog-ng:events")); };
+        rewrite {r_set_splunk(template("t_msg_only")) }; #--HEC--
+        destination(d_hec);  #--HEC--
+    };
+};
\ No newline at end of file
diff --git a/package/etc/conf.d/log_paths/p_rfc3164-cisco_asa.conf b/package/etc/conf.d/log_paths/p_rfc3164-cisco_asa.conf
new file mode 100644
index 0000000..428cb0f
--- /dev/null
+++ b/package/etc/conf.d/log_paths/p_rfc3164-cisco_asa.conf
@@ -0,0 +1,21 @@
+
+# ===============================================================================================
+# Cisco ASA (Firewall)
+# ===============================================================================================
+
+log {
+    source(s_default-ports);
+
+    filter(f_is_rfc3164);
+    filter(f_cisco_asa);
+    #set the source type based on program field and lookup index from the splunk context csv
+
+    parser {p_add_context_splunk(key("cisco:asa")); };
+
+    #Using the 5424 parser the message content is all we need
+    rewrite {r_set_splunk(template("t_msg_only")) }; #--HEC--
+
+    destination(d_hec);  #--HEC--
+
+    flags(flow-control);
+};
\ No newline at end of file
diff --git a/package/etc/conf.d/filters/cisco_ios.conf b/package/etc/conf.d/log_paths/p_rfc3164-cisco_ios.conf
similarity index 60%
rename from package/etc/conf.d/filters/cisco_ios.conf
rename to package/etc/conf.d/log_paths/p_rfc3164-cisco_ios.conf
index cac0bb7..780130e 100644
--- a/package/etc/conf.d/filters/cisco_ios.conf
+++ b/package/etc/conf.d/log_paths/p_rfc3164-cisco_ios.conf
@@ -1,3 +1,4 @@
+
 # ===============================================================================================
 # Cisco IOS (Route/Switch)
 # ===============================================================================================
@@ -5,12 +6,16 @@
 log {
 
     source(s_default-ports);
+    filter(f_cisco_ios);
 
-    parser { cisco-parser(); };
 
-    parser {p_add_context_splunk(key("cisco:ios")); };
-    rewrite { r_set_splunk_basic(template("t_msg_only"))}; #--HEC--
+    parser {
+        p_add_context_splunk(key("cisco:ios"));
+    };
+    rewrite {
+        r_set_splunk(template("t_msg_only")) #--HEC--
+    };
     destination(d_hec);  #--HEC--
 
-    flags(flow-control,final);
+    flags(flow-control);
 };
diff --git a/package/etc/conf.d/filters/fortinet_fgt.conf b/package/etc/conf.d/log_paths/p_rfc3164-fortinet_fortios.conf
similarity index 79%
rename from package/etc/conf.d/filters/fortinet_fgt.conf
rename to package/etc/conf.d/log_paths/p_rfc3164-fortinet_fortios.conf
index d6205b5..0707aaf 100644
--- a/package/etc/conf.d/filters/fortinet_fgt.conf
+++ b/package/etc/conf.d/log_paths/p_rfc3164-fortinet_fortios.conf
@@ -1,12 +1,9 @@
 log {
     source(s_default-ports);
-
-    filter {tags("fgt_log")
-        or message('devid=\"?F[G|W|6K].+type=\"?(traffic|utm|event)');
-    };
+    filter(f_is_rfc3164);
+    filter(f_fortinet_fortios);
 
     parser {
-        syslog-parser();
         kv-parser(prefix(".kv.") template("${MSGHDR} ${MSG}"));
         date-parser(format("%Y-%m-%d:%H:%M:%S") template("${.kv.date}:${.kv.time}") time-zone(`default-timezone`));
     };
@@ -26,8 +23,8 @@ log {
 
     #rewrite the final message for splunk json
     #sourcetype and index are set in the filter defaults won't be used
-    rewrite {r_set_splunk_basic(template("t_standard")) }; #--HEC--
+    rewrite {r_set_splunk(template("t_standard")) }; #--HEC--
     destination(d_hec);  #--HEC--
 
-    flags(flow-control,final);
-};
+    flags(flow-control);
+};
\ No newline at end of file
diff --git a/package/etc/conf.d/log_paths/p_rfc3164-juniper-idp.conf b/package/etc/conf.d/log_paths/p_rfc3164-juniper-idp.conf
new file mode 100644
index 0000000..4b84403
--- /dev/null
+++ b/package/etc/conf.d/log_paths/p_rfc3164-juniper-idp.conf
@@ -0,0 +1,15 @@
+log {
+
+    source(s_default-ports);
+    filter(f_is_rfc3164);
+    filter(f_juniper_idp);
+
+    parser {
+                p_add_context_splunk(key("juniper:idp"));
+    };
+    rewrite {
+        r_set_splunk(template("t_standard"))
+    };
+    destination(d_hec);  #--HEC--
+    flags(flow-control);
+};
\ No newline at end of file
diff --git a/package/etc/conf.d/log_paths/p_rfc3164-juniper-junos.conf b/package/etc/conf.d/log_paths/p_rfc3164-juniper-junos.conf
new file mode 100644
index 0000000..e689cf6
--- /dev/null
+++ b/package/etc/conf.d/log_paths/p_rfc3164-juniper-junos.conf
@@ -0,0 +1,24 @@
+# ===============================================================================================
+# Juniper Standard and Structured logging
+# ===============================================================================================
+
+log {
+
+    source(s_default-ports);
+    filter(f_is_rfc3164);
+    filter(f_juniper_junos_legacy);
+
+    if (program('RT_IDP')) {
+        parser {p_add_context_splunk(key("juniper:junos:idp")); };
+    } elif (program('RT_FLOW|RT_IDS|RT_UTM')) {
+        parser {p_add_context_splunk(key("juniper:junos:firewall")); };
+    } elif (program('Juniper')) {
+        parser {p_add_context_splunk(key("juniper:sslvpn")); };
+    } else {
+        parser {p_add_context_splunk(key("juniper:legacy")); };
+    };
+
+    rewrite { r_set_splunk(template("t_standard")) };
+    destination(d_hec);  #--HEC--
+    flags(flow-control);
+};
diff --git a/package/etc/conf.d/log_paths/p_rfc3164-juniper_netscreen.conf b/package/etc/conf.d/log_paths/p_rfc3164-juniper_netscreen.conf
new file mode 100644
index 0000000..efd046c
--- /dev/null
+++ b/package/etc/conf.d/log_paths/p_rfc3164-juniper_netscreen.conf
@@ -0,0 +1,14 @@
+log {
+
+    source(s_default-ports);
+    filter(f_juniper_netscreen);
+
+    parser {
+            p_add_context_splunk(key("juniper:netscreen"));
+    };
+    rewrite {
+        r_set_splunk(template("t_standard"))
+    };
+    destination(d_hec);  #--HEC--
+    flags(flow-control);
+};
diff --git a/package/etc/conf.d/log_paths/p_rfc3164-juniper_nsm.conf b/package/etc/conf.d/log_paths/p_rfc3164-juniper_nsm.conf
new file mode 100644
index 0000000..04810cc
--- /dev/null
+++ b/package/etc/conf.d/log_paths/p_rfc3164-juniper_nsm.conf
@@ -0,0 +1,19 @@
+# ===============================================================================================
+# Juniper NSM
+# ===============================================================================================
+
+log {
+
+    source(s_default-ports);
+    filter(f_is_rfc3164);
+    filter(f_juniper_nsm);
+
+    parser {
+                p_add_context_splunk(key("juniper:nsm"));
+    };
+    rewrite {
+        r_set_splunk(template("t_standard"))
+    };
+    destination(d_hec);  #--HEC--
+    flags(flow-control);
+};
diff --git a/package/etc/conf.d/filters/paloalto_networks.conf b/package/etc/conf.d/log_paths/p_rfc3164-paloalto-panos.conf
similarity index 68%
rename from package/etc/conf.d/filters/paloalto_networks.conf
rename to package/etc/conf.d/log_paths/p_rfc3164-paloalto-panos.conf
index a3e1016..84a60d2 100644
--- a/package/etc/conf.d/filters/paloalto_networks.conf
+++ b/package/etc/conf.d/log_paths/p_rfc3164-paloalto-panos.conf
@@ -1,22 +1,21 @@
-
-
 log {
     source(s_default-ports);
+    filter(f_is_rfc3164);
+    filter(f_paloalto_panos);
 
-    filter {tags("pan:log")
-            or message(',\d+,(THREAT|TRAFFIC|SYSTEM|CONFIG|HIPWATCH|CORRELATION|USERID),')
-        ;};
-
-    # the palo message does not include a program value in the header unfortunatly
+     # the palo message does not include a program value in the header unfortunatly
     # the use of colon in the message tricks the RFC3164 parser we will re-write the message
     # so the parser will not incorrectly break it apart.
     # while we are at it we will save the mesage type into the program field so parser can find it
     rewrite {
-        subst('^([^ ]+ \w+ \d{2} \d{2}:\d{2}:\d{2} [^ ]+)( \d+,[^,]+,[^,]+,)([^,]+)(.*)', '$1 $3:$2$3$4', value("MESSAGE")  );
+        set("${LEGACY_MSGHDR}${MESSAGE}" value("MESSAGE"));
+        unset(value("LEGACY_MSGHDR"));
+        unset(value("PROGRAM"));
+
     };
     parser {
         #basic parsing
-        syslog-parser(time-zone(`default-timezone`));
+
         #we need to actual even time from the field GeneratedTime use csv parser to get it out
         csv-parser(
             columns('FUTURE_USE', 'ReceiveTime', 'SerialNumber', 'Type', 'Subtype', 'FUTURE_USE2', 'GeneratedTime')
@@ -33,19 +32,19 @@ log {
     };
 
     #set the source type based on program field and lookup index from the splunk context csv
-    if (program('THREAT')) {
+    if (message(',\d+,THREAT')) {
         parser {p_add_context_splunk(key("pan:threat")); };
-    } elif (program('TRAFFIC')) {
+    } elif (message(',\d+,TRAFFIC')) {
         parser {p_add_context_splunk(key("pan:traffic")); };
-    } elif (program('SYSTEM')) {
+    } elif (message(',\d+,SYSTEM')) {
         parser {p_add_context_splunk(key("pan:system")); };
-    } elif (program('CONFIG')) {
+    } elif (message(',\d+,CONFIG')) {
         parser {p_add_context_splunk(key("pan:config")); };
-    } elif (program('HIPWATCH')) {
+    } elif (message(',\d+,HIPWATCH')) {
         parser {p_add_context_splunk(key("pan:hipwatch")); };
-    } elif (program('CORRELATION')) {
+    } elif (message(',\d+,CORRELATION')) {
         parser {p_add_context_splunk(key("pan:correlation")); };
-    } elif (program('USERID')) {
+    } elif (message(',\d+,USERID')) {
         parser {p_add_context_splunk(key("pan:userid")); };
     } else {
         parser {p_add_context_splunk(key("pan:log")); };
@@ -53,9 +52,9 @@ log {
 
     #rewrite the final message for splunk json
     #sourcetype and index are set in the filter defaults won't be used
-    rewrite {r_set_splunk_basic(template("t_msg_only")) }; #--HEC--
+    rewrite {r_set_splunk(template("t_msg_only")) }; #--HEC--
 
     destination(d_hec);  #--HEC--
 
-    flags(flow-control,final);
-};
+    flags(flow-control);
+};
\ No newline at end of file
diff --git a/package/etc/conf.d/log_paths/p_rfc5424_noversion-cisco_asa.conf b/package/etc/conf.d/log_paths/p_rfc5424_noversion-cisco_asa.conf
new file mode 100644
index 0000000..295669a
--- /dev/null
+++ b/package/etc/conf.d/log_paths/p_rfc5424_noversion-cisco_asa.conf
@@ -0,0 +1,16 @@
+log {
+    source(s_default-ports);
+    filter(f_is_rfc5424_noversion);
+    filter(f_cisco_asa);
+
+    #set the source type based on program field and lookup index from the splunk context csv
+
+    parser {p_add_context_splunk(key("cisco:asa")); };
+
+    #Using the 5424 parser the message content is all we need
+    rewrite {r_set_splunk(template("t_msg_only")) }; #--HEC--
+
+    destination(d_hec);  #--HEC--
+
+    flags(flow-control);
+};
\ No newline at end of file
diff --git a/package/etc/conf.d/log_paths/p_rfc_5424_strict-juniper-junos.conf b/package/etc/conf.d/log_paths/p_rfc_5424_strict-juniper-junos.conf
new file mode 100644
index 0000000..c49854b
--- /dev/null
+++ b/package/etc/conf.d/log_paths/p_rfc_5424_strict-juniper-junos.conf
@@ -0,0 +1,27 @@
+# ===============================================================================================
+# Juniper Structured logging
+# ===============================================================================================
+
+log {
+
+    source(s_default-ports);
+    filter(f_is_rfc5424_strict);
+    filter(f_juniper_junos);
+
+    if (program('RT_IDP')) {
+        parser {p_add_context_splunk(key("juniper:junos:idp:structured")); };
+    } elif (program('RT_FLOW|RT_IDS|RT_UTM')) {
+        parser {p_add_context_splunk(key("juniper:junos:firewall:structured")); };
+        }
+    elif (program('Jnpr')) {
+        parser {p_add_context_splunk(key("juniper:idp:structured")); };
+        }
+    else {
+        parser {p_add_context_splunk(key("juniper:structured")); };
+    };
+
+    rewrite { r_set_splunk(template("t_hdr_sdata_msg"))};
+    destination(d_hec);  #--HEC--
+
+
+};
diff --git a/package/etc/conf.d/log_paths/zfallback.conf b/package/etc/conf.d/log_paths/zfallback.conf
new file mode 100644
index 0000000..4b1b5d5
--- /dev/null
+++ b/package/etc/conf.d/log_paths/zfallback.conf
@@ -0,0 +1,11 @@
+log {
+    source(s_default-ports);
+
+    parser {
+        p_add_context_splunk(key("syslog-ng:fallback"));
+    };
+
+    rewrite { r_set_splunk(template("t_JSON"))}; #--HEC--
+    destination(d_hec);  #--HEC--
+    flags(flow-control,fallback);
+};
diff --git a/package/etc/conf.d/sources/network.conf b/package/etc/conf.d/sources/network.conf
index e3ed6a9..70a5f7b 100644
--- a/package/etc/conf.d/sources/network.conf
+++ b/package/etc/conf.d/sources/network.conf
@@ -11,51 +11,65 @@
 
 # source s_network-defaults { default-network-drivers() };
 source s_default-ports {
-     `splunk-udp-driver` ( 
-           transport("udp") 
-           port(`udp-listening-port`)  
-           ip-protocol(`ip-version`)
-#          hook-commands(
-#          setup("firewall-cmd --permanent --add-port=`udp-listening-port`/udp")
-#          teardown("firewall-cmd --permanent --remove-port=`udp-listening-port`/udp")
-#          )
-           so-rcvbuf(`splunk-rcvbuf`)
-           keep-hostname(yes)
-           keep-timestamp(yes)
-           use-dns(no)
-           use-fqdn(no)
-           chain-hostnames(off)
-           flags(no-parse)
-           );
+    channel {
+        source {
+            `splunk-udp-driver` (
+                transport("udp")
+                port(`udp-listening-port`)
+                ip-protocol(`ip-version`)
+                so-rcvbuf(`splunk-rcvbuf`)
+                keep-hostname(yes)
+                keep-timestamp(yes)
+                use-dns(no)
+                use-fqdn(no)
+                chain-hostnames(off)
+                flags(no-parse)
+            );
 
-     `splunk-tcp-driver`  ( 
-           transport("tcp") 
-           port(`tcp-listening-port`)  
-           ip-protocol(`ip-version`)
-#          hook-commands(
-#              setup("firewall-cmd --permanent --add-port=`tcp-listening-port`/tcp")
-#              teardown("firewall-cmd --permanent --remove-port=`tcp-listening-port`/tcp")
-#              )
-           max-connections(`splunk-max-connections`)
-           log-iw-size(`splunk-window-size`)
-           log-fetch-limit(`splunk-fetch-limit`)
-           keep-hostname(yes)
-           keep-timestamp(yes)
-           use-dns(no)
-           use-fqdn(no)
-           chain-hostnames(off)
-           flags(no-parse)
-           );
-      };
+            `splunk-tcp-driver`  (
+                transport("tcp")
+                port(`tcp-listening-port`)
+                ip-protocol(`ip-version`)
+                max-connections(`splunk-max-connections`)
+                log-iw-size(`splunk-window-size`)
+                log-fetch-limit(`splunk-fetch-limit`)
+                keep-hostname(yes)
+                keep-timestamp(yes)
+                use-dns(no)
+                use-fqdn(no)
+                chain-hostnames(off)
+                flags(no-parse)
+            );
+        };
+        #TODO: #60 Remove this function with enhancement
+        rewrite(set_metadata_presume);
+        rewrite(set_rfcnonconformant);
+        rewrite(r_set_splunk_basic);
 
-source s_all-ports {
-     `splunk-udp-driver` ( transport("udp") port(514) flags(no-parse) persist-name("example-persist-name1"));
-     `splunk-udp-driver` ( transport("udp") port(919) flags(no-parse));
-     `splunk-udp-driver` ( transport("udp") port(920) flags(no-parse));
-     `splunk-udp-driver` ( transport("udp") port(921) flags(no-parse));
-
-     `splunk-tcp-driver`  ( transport("tcp") port(919) flags(no-parse));
-     `splunk-tcp-driver`  ( transport("tcp") port(920) flags(no-parse));
-     `splunk-tcp-driver`  ( transport("tcp") port(921) flags(no-parse));
-      };
+        if {
+            filter(f_rfc5424_strict);
+            parser {
+                    syslog-parser(flags(syslog-protocol  store-raw-message));
+                };
+            rewrite(set_rfc5424_strict);
+        } elif {
+            filter(f_rfc5424_noversion);
+            parser {
+                    syslog-parser(flags(syslog-protocol  store-raw-message));
+                };
+            rewrite(set_rfc5424_noversion);
+        } elif {
+            parser {cisco-parser()};
+            rewrite(set_metadata_vendor_product_cisco_ios);
+        } else {
+            parser {
+                syslog-parser(time-zone(`default-timezone`) flags(store-raw-message));
+            };
+            rewrite(set_rfc3164);
+        };
 
+        parser {
+            vendor_product_by_source();
+        };
+   };
+};
diff --git a/package/etc/context/splunk_index.csv b/package/etc/context-local/splunk_index.csv
similarity index 100%
rename from package/etc/context/splunk_index.csv
rename to package/etc/context-local/splunk_index.csv
diff --git a/package/etc/context-local/vendor_product_by_source.conf b/package/etc/context-local/vendor_product_by_source.conf
new file mode 100644
index 0000000..2830c3b
--- /dev/null
+++ b/package/etc/context-local/vendor_product_by_source.conf
@@ -0,0 +1,25 @@
+@version: 3.22
+#TODO: #60 The syntax below uses regex and an indirect reference to a variable due to a
+#bug/limitation of selector files. The better syntax should be as follows
+#filter {match("f5_test" template("$(env PRESUME_SYSLOG)")); };
+
+filter f_test_test {
+    host("testvp-*" type(glob))
+    or match("test_test" value("fields.sc4s_presume"))
+};
+filter f_juniper_nsm {
+    host("jnpnsm-*" type(glob))
+    or match("juniper_nsm" value("fields.sc4s_presume"))
+};
+filter f_juniper_nsm_idp {
+    host("jnpnsmidp-*" type(glob))
+    or match("juniper_nsm_idp" value("fields.sc4s_presume"))
+};
+filter f_juniper_idp {
+    host("jnpidp-*" type(glob))
+    or match("juniper_idp" value("fields.sc4s_presume"))
+};
+filter f_juniper_netscreen {
+    host("jnpns-*" type(glob) )
+    or match("juniper_netscreen" value("fields.sc4s_presume"))
+};
\ No newline at end of file
diff --git a/package/etc/context-local/vendor_product_by_source.csv b/package/etc/context-local/vendor_product_by_source.csv
new file mode 100644
index 0000000..0d9e6c0
--- /dev/null
+++ b/package/etc/context-local/vendor_product_by_source.csv
@@ -0,0 +1,5 @@
+f_test_test,sc4s_vendor_product,"test_test"
+f_juniper_nsm,sc4s_vendor_product,"juniper_nsm"
+f_juniper_nsm_idp,sc4s_vendor_product,"juniper_nsm_idp"
+f_juniper_idp,sc4s_vendor_product,"juniper_idp"
+f_juniper_netscreen,sc4s_vendor_product,"juniper_netscreen"
\ No newline at end of file
diff --git a/package/etc/syslog-ng.conf b/package/etc/syslog-ng.conf
index 565b79e..27e1a6e 100644
--- a/package/etc/syslog-ng.conf
+++ b/package/etc/syslog-ng.conf
@@ -48,7 +48,7 @@ options {
 # ===============================================================================================
 # Splunk metadata (HEC/Kafka transport only)
 # ===============================================================================================
-@define splunk-sourcetype "syslog:fallback"
+@define splunk-sourcetype "syslog-ng:fallback"
 @define splunk-index "main"
 
 # ===============================================================================================
@@ -74,61 +74,16 @@ options {
 # ===============================================================================================
 @include "scl.conf"
 @include "conf.d/templates/*.conf"
+@include "conf.d/conflib/*.conf"
+@include "conf.d/conflib/*/*.conf"
+@include "conf.d/conflib/blocks/*.conf"
+@include "conf.d/conflib/blocks/*/*.conf"
+
 @include "conf.d/sources/*.conf"
-@include "conf.d/blocks/*.conf"
 @include "conf.d/destinations/*.conf"
 
-log {
-    source(s_internal);
-
-    if (match("^Log statistics; " value("MESSAGE"))) {
-
-        parser {p_add_context_splunk(key("syslog-ng:metrics")); };
-        rewrite {
-            subst('(?:Log statistics; )?(?<Type>[^= ]+)=\x27(?<SourceName>[^\(]+)\((?<SourceId>[^,\)]+)(?:,(?<SourceInstance>[^,]+),(?<State>[^\)]+))?\)\=(?<Number>\d+)\x27(?:, )?',
-                    '
-                    {"time": "$S_UNIXTIME.$S_MSEC",
-                      "event": "metric",
-                      "host": "$HOST",
-                      "index": "${.splunk.index}",
-                      "source": "internal",
-                      "sourcetype": "${.splunk.sourcetype}",
-                      "fields": {
-                         "source_name": "${SourceName}",
-                         "source_instance": "${SourceInstance}",
-                         "state": "${State}",
-                         "type": "${Type}",
-                         "_value": ${Number},
-                         "metric_name": "syslogng.${SourceId}"
-                       }
-                     }
-                     ',
-                     value("MESSAGE") flags("utf8" "global")
-                  );
-        };
-        destination(d_hecmetrics);  #--HEC--
-    } else {
-        parser {p_add_context_splunk(key("syslog-ng:events")); };
-        rewrite {r_set_splunk_basic(template("t_msg_only")) }; #--HEC--
-        destination(d_hec);  #--HEC--
-    };
-    flags(final);
-};
-
-
-@include "conf.d/prefilters/*.conf"
-@include "conf.d/filters/*.conf"
+@include "conf.d/log_paths/*.conf"
+@include "conf.d/plugin/*/log_paths/*.conf"
 
-@include "conf.d/plugin/*/blocks/*.conf"
-@include "conf.d/plugin/*/prefilters/*.conf"
-@include "conf.d/plugin/*/filters/*.conf"
-
-log {
-    source(s_default-ports);
-    parser {p_add_context_splunk(key("syslog-ng:fallback")); };
-    rewrite { r_set_splunk(template("t_JSON"))}; #--HEC--
-    destination(d_hec);  #--HEC--
-    flags(flow-control,fallback);
-};
 
 
diff --git a/tests/Dockerfile b/tests/Dockerfile
index cb630f3..ddb8c55 100644
--- a/tests/Dockerfile
+++ b/tests/Dockerfile
@@ -13,5 +13,7 @@ COPY requirements.txt /
 RUN pip3 install -r /requirements.txt
 RUN mkdir -p /work/tests
 RUN mkdir -p /work/test-results/functional
+COPY entrypoint.sh /
+COPY wait-for /bin/
 #WORKDIR /work
-CMD cd /work;python -m pytest --junitxml=/work/test-results/functional/functional.xml
+CMD /entrypoint.sh
\ No newline at end of file
diff --git a/tests/entrypoint.sh b/tests/entrypoint.sh
new file mode 100755
index 0000000..646dd56
--- /dev/null
+++ b/tests/entrypoint.sh
@@ -0,0 +1,23 @@
+#!/bin/sh
+echo Check for sc4s
+wait-for sc4s:514 -t 0 -- echo scs is up
+echo check for splunk web
+wait-for splunk:8000 -t 0 -- echo splunkweb is up
+echo check for splunk mgmt
+wait-for splunk:8089 -t 0 -- echo splunkmgmt is up
+echo check for splunk hec
+wait-for splunk:8088 -t 0 -- echo splunkhec is up
+
+sleep 30
+
+echo Check for sc4s
+wait-for sc4s:514 -t 0 -- echo scs is up
+echo check for splunk web
+wait-for splunk:8000 -t 0 -- echo splunkweb is up
+echo check for splunk mgmt
+wait-for splunk:8089 -t 0 -- echo splunkmgmt is up
+echo check for splunk hec
+wait-for splunk:8088 -t 0 -- echo splunkhec is up
+
+
+cd /work;python -m pytest --junitxml=/work/test-results/functional/functional.xml
diff --git a/tests/requirements.txt b/tests/requirements.txt
index 149b7a8..cc706aa 100644
--- a/tests/requirements.txt
+++ b/tests/requirements.txt
@@ -11,4 +11,3 @@ jinja2
 jinja2-time
 http://dev.splunk.com/goto/sdk-python
 flake8
-flaky
diff --git a/tests/sendmessage.py b/tests/sendmessage.py
index 6388c78..6b591ad 100644
--- a/tests/sendmessage.py
+++ b/tests/sendmessage.py
@@ -8,9 +8,9 @@
 from time import sleep
 
 
-def sendsingle(message):
+def sendsingle(message, host="sc4s", port=514):
     sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
-    server_address = ('sc4s', 514)
+    server_address = (host, port)
 
     tried = 0
     while True:
diff --git a/tests/splunkutils.py b/tests/splunkutils.py
index 7227ae9..bb77a58 100644
--- a/tests/splunkutils.py
+++ b/tests/splunkutils.py
@@ -33,5 +33,5 @@ def splunk_single(service, search):
             break
         else:
             tried += 1
-            sleep(1)
+            sleep(5)
     return resultCount, eventCount
diff --git a/tests/test_cisco_asa.py b/tests/test_cisco_asa.py
index 308356a..65d122e 100644
--- a/tests/test_cisco_asa.py
+++ b/tests/test_cisco_asa.py
@@ -5,7 +5,6 @@
 # https://opensource.org/licenses/BSD-2-Clause
 import random
 
-from flaky import flaky
 from jinja2 import Environment
 
 from .sendmessage import *
@@ -17,17 +16,16 @@
 # Apr 15 2017 00:21:14 192.168.12.1 : %ASA-5-111010: User 'john', running 'CLI' from IP 0.0.0.0, executed 'dir disk0:/dap.xml'
 # Apr 15 2017 00:22:27 192.168.12.1 : %ASA-4-313005: No matching connection for ICMP error message: icmp src outside:81.24.28.226 dst inside:72.142.17.10 (type 3, code 0) on outside interface. Original IP payload: udp src 72.142.17.10/40998 dst 194.153.237.66/53.
 # Apr 15 2017 00:22:42 192.168.12.1 : %ASA-3-710003: TCP access denied by ACL from 179.236.133.160/8949 to outside:72.142.18.38/23
-@flaky(max_runs=3, min_passes=2)
 def test_cisco_asa_tradditional(record_property, setup_wordlist, setup_splunk):
     host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
 
     mt = env.from_string(
-        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} : %ASA-3-710003: TCP access denied by ACL from 179.236.133.160/3624 to outside:72.142.18.38/23\n")
+        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} : %ASA-3-003164: TCP access denied by ACL from 179.236.133.160/3624 to outside:72.142.18.38/23\n")
     message = mt.render(mark="<111>", host=host)
 
     sendsingle(message)
 
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"cisco:asa\" | head 2")
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"cisco:asa\" \"%ASA-3-003164\" | head 2")
     search = st.render(host=host)
 
     resultCount, eventCount = splunk_single(setup_splunk, search)
@@ -40,17 +38,16 @@ def test_cisco_asa_tradditional(record_property, setup_wordlist, setup_splunk):
 
 
 # <166>2018-06-27T12:17:46Z asa : %ASA-3-710003: TCP access denied by ACL from 179.236.133.160/8949 to outside:72.142.18.38/23
-@flaky(max_runs=3, min_passes=2)
 def test_cisco_asa_rfc5424(record_property, setup_wordlist, setup_splunk):
     host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
 
     mt = env.from_string(
-        "{{ mark }} {% now 'utc', '%Y-%m-%dT%H:%M:%SZ' %} {{ host }} : %ASA-3-710003: TCP access denied by ACL from 179.236.133.160/5424 to outside:72.142.18.38/23\n")
+        "{{ mark }} {% now 'utc', '%Y-%m-%dT%H:%M:%SZ' %} {{ host }} : %ASA-3-005424: TCP access denied by ACL from 179.236.133.160/5424 to outside:72.142.18.38/23\n")
     message = mt.render(mark="<166>", host=host)
 
     sendsingle(message)
 
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"cisco:asa\" | head 2")
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"cisco:asa\" \"%ASA-3-005424\"| head 2")
     search = st.render(host=host)
 
     resultCount, eventCount = splunk_single(setup_splunk, search)
diff --git a/tests/test_cisco_ios.py b/tests/test_cisco_ios.py
index f729df9..ca60605 100644
--- a/tests/test_cisco_ios.py
+++ b/tests/test_cisco_ios.py
@@ -5,7 +5,6 @@
 # https://opensource.org/licenses/BSD-2-Clause
 
 from jinja2 import Environment
-from flaky import flaky
 
 from .sendmessage import *
 from .splunkutils import *
@@ -14,7 +13,6 @@
 
 
 # <190>30: foo: *Apr 29 13:58:46.411: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 192.168.1.239 stopped - CLI initiated
-@flaky(max_runs=3, min_passes=2)
 def test_cisco_ios(record_property, setup_wordlist, get_host_key, setup_splunk):
     host = get_host_key
 
diff --git a/tests/test_common.py b/tests/test_common.py
new file mode 100644
index 0000000..24cb44a
--- /dev/null
+++ b/tests/test_common.py
@@ -0,0 +1,51 @@
+# Copyright 2019 Splunk, Inc.
+#
+# Use of this source code is governed by a BSD-2-clause-style
+# license that can be found in the LICENSE-BSD2 file or at
+# https://opensource.org/licenses/BSD-2-Clause
+import random
+
+from jinja2 import Environment
+
+from .sendmessage import *
+from .splunkutils import *
+
+env = Environment(extensions=['jinja2_time.TimeExtension'])
+
+def test_defaultroute(record_property, setup_wordlist, setup_splunk):
+    host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
+
+    mt = env.from_string("{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} sc4sdefault[0]: test\n")
+    message = mt.render(mark="<111>", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"syslog-ng:fallback\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+
+def test_tag(record_property, setup_wordlist, setup_splunk):
+    host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
+
+    mt = env.from_string("{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} testvp-{{ host }} sc4sdefault[0]: test\n")
+    message = mt.render(mark="<111>", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"testvp-{{ host }}\" sourcetype=\"syslog-ng:fallback\" sc4s_vendor_product=test_test | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
\ No newline at end of file
diff --git a/tests/test_fortinet_ngfw.py b/tests/test_fortinet_ngfw.py
index 60fdae7..df3aa36 100644
--- a/tests/test_fortinet_ngfw.py
+++ b/tests/test_fortinet_ngfw.py
@@ -5,7 +5,6 @@
 # https://opensource.org/licenses/BSD-2-Clause
 import random
 
-from flaky import flaky
 from jinja2 import Environment
 
 from .sendmessage import *
@@ -13,7 +12,6 @@
 
 env = Environment(extensions=['jinja2_time.TimeExtension'])
 
-@flaky(max_runs=3, min_passes=2)
 #<111> Aug 17 00:00:00 fortigate date=2015-08-11 time=19:19:43 devname=Nosey devid=FG800C3912801080 logid=0004000017 type=traffic subtype=sniffer level=notice vd=root srcip=fe80::20c:29ff:fe77:20d4 srcintf="port3" dstip=ff02::1:ff77:20d4 dstintf="port3" sessionid=408903 proto=58 action=accept policyid=2 dstcountry="Reserved" srccountry="Reserved" trandisp=snat transip=:: transport=0 service="icmp6/131/0" duration=36 sentbyte=0 rcvdbyte=40 sentpkt=0 rcvdpkt=0 appid=16321 app="IPv6.ICMP" appcat="Network.Service" apprisk=elevated applist="sniffer-profile" appact=detected utmaction=allow countapp=1
 def test_fortinet_fgt_event(record_property, setup_wordlist, setup_splunk):
     host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
@@ -35,7 +33,6 @@ def test_fortinet_fgt_event(record_property, setup_wordlist, setup_splunk):
 
     assert resultCount == 1
 
-@flaky(max_runs=3, min_passes=2)
 #<111> Aug 17 00:00:00 fortigate date=2015-08-11 time=19:19:43 devname=Nosey devid=FG800C3912801080 logid=0004000017 type=traffic subtype=sniffer level=notice vd=root srcip=fe80::20c:29ff:fe77:20d4 srcintf="port3" dstip=ff02::1:ff77:20d4 dstintf="port3" sessionid=408903 proto=58 action=accept policyid=2 dstcountry="Reserved" srccountry="Reserved" trandisp=snat transip=:: transport=0 service="icmp6/131/0" duration=36 sentbyte=0 rcvdbyte=40 sentpkt=0 rcvdpkt=0 appid=16321 app="IPv6.ICMP" appcat="Network.Service" apprisk=elevated applist="sniffer-profile" appact=detected utmaction=allow countapp=1
 def test_fortinet_fgt_traffic(record_property, setup_wordlist, setup_splunk):
     host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
@@ -56,7 +53,6 @@ def test_fortinet_fgt_traffic(record_property, setup_wordlist, setup_splunk):
 
     assert resultCount == 1
 
-@flaky(max_runs=3, min_passes=2)
 #<111> Aug 17 00:00:00 fortigate date=2015-08-11 time=19:21:40 logver=52 devname=US-Corp_Main1 devid=FGT37D4613800138 logid=0317013312 type=utm subtype=webfilter eventtype=ftgd_allow level=notice vd=root sessionid=1490845588 user="" srcip=172.30.16.119 srcport=53235 srcintf="Internal" dstip=114.112.67.75 dstport=80 dstintf="External-SDC" proto=6 service=HTTP hostname="popo.wan.ijinshan.com" profile="scan" action=passthrough reqtype=direct url="/popo/launch?c=cHA9d29vZHMxOTgyQGhvdG1haWwuY29tJnV1aWQ9NDBiNDkyZDRmNzdhNjFmOTNlMjQwMjhiYjE3ZGRlYTYmY29tcGl" sentbyte=525 rcvdbyte=325 direction=outgoing msg="URL belongs to an allowed category in policy" method=domain cat=52 catdesc="Information Technology"
 def test_fortinet_fgt_utm(record_property, setup_wordlist, setup_splunk):
     host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
diff --git a/tests/test_juniper.py b/tests/test_juniper.py
index c69f6c4..102dca3 100644
--- a/tests/test_juniper.py
+++ b/tests/test_juniper.py
@@ -5,7 +5,6 @@
 # https://opensource.org/licenses/BSD-2-Clause
 
 from jinja2 import Environment
-from flaky import flaky
 
 from .sendmessage import *
 from .splunkutils import *
@@ -13,138 +12,17 @@
 env = Environment(extensions=['jinja2_time.TimeExtension'])
 
 
-# <165>1 2007-02-15T09:17:15.719Z router1 mgd 3046 UI_DBASE_LOGOUT_EVENT [junos@2636.1.1.1.2.18 username="user"] User 'user' exiting configuration mode
-@flaky(max_runs=3, min_passes=2)
-# @pytest.mark.xfail
-def test_juniper_junos_structured(record_property, setup_wordlist, get_host_key, setup_splunk):
-    host = get_host_key
-
-    mt = env.from_string(
-        "{{ mark }} {% now 'utc', '%Y-%m-%dT%H:%M:%S' %}.700Z {{ host }} mgd 3046 UI_DBASE_LOGOUT_EVENT [junos@2636.1.1.1.2.18 username=\"user\"] User 'user' exiting configuration mode\n")
-    message = mt.render(mark="<165>1", host=host)
-
-    sendsingle(message)
-
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:structured\" | head 2")
-    search = st.render(host=host)
-
-    resultCount, eventCount = splunk_single(setup_splunk, search)
-
-    record_property("host", host)
-    record_property("resultCount", resultCount)
-    record_property("message", message)
-
-    assert resultCount == 1
-
-# <165>1 2007-02-15T09:17:15.719Z idp1 RT_IDP - IDP_ATTACK_LOG_EVENT [junos@2636.1.1.1.2.135 epoch-time="1507845354" message-type="SIG" source-address="183.78.180.27" source-port="45610" destination-address="118.127.xx.xx" destination-port="80" protocol-name="TCP" service-name="SERVICE_IDP" application-name="HTTP" rule-name="9" rulebase-name="IPS" policy-name="Recommended" export-id="15229" repeat-count="0" action="DROP" threat-severity="HIGH" attack-name="TROJAN:ZMEU-BOT-SCAN" nat-source-address="0.0.0.0" nat-source-port="0" nat-destination-address="172.xx.xx.xx" nat-destination-port="0" elapsed-time="0" inbound-bytes="0" outbound-bytes="0" inbound-packets="0" outbound-packets="0" source-zone-name="sec-zone-name-internet" source-interface-name="reth0.XXX" destination-zone-name="dst-sec-zone1-outside" destination-interface-name="reth1.xxx" packet-log-id="0" alert="no" username="N/A" roles="N/A" message="-"]
-@flaky(max_runs=3, min_passes=2)
-# @pytest.mark.xfail
-def test_juniper_junos_idp_structured(record_property, setup_wordlist, get_host_key, setup_splunk):
-    host = get_host_key
-
-    mt = env.from_string(
-        "{{ mark }} {% now 'utc', '%Y-%m-%dT%H:%M:%S' %}.700Z {{ host }} RT_IDP - IDP_ATTACK_LOG_EVENT [junos@2636.1.1.1.2.135 epoch-time=\"1507845354\" message-type=\"SIG\" source-address=\"183.78.180.27\" source-port=\"45610\" destination-address=\"118.127.xx.xx\" destination-port=\"80\" protocol-name=\"TCP\" service-name=\"SERVICE_IDP\" application-name=\"HTTP\" rule-name=\"9\" rulebase-name=\"IPS\" policy-name=\"Recommended\" export-id=\"15229\" repeat-count=\"0\" action=\"DROP\" threat-severity=\"HIGH\" attack-name=\"TROJAN:ZMEU-BOT-SCAN\" nat-source-address=\"0.0.0.0\" nat-source-port=\"0\" nat-destination-address=\"172.xx.xx.xx\" nat-destination-port=\"0\" elapsed-time=\"0\" inbound-bytes=\"0\" outbound-bytes=\"0\" inbound-packets=\"0\" outbound-packets=\"0\" source-zone-name=\"sec-zone-name-internet\" source-interface-name=\"reth0.XXX\" destination-zone-name=\"dst-sec-zone1-outside\" destination-interface-name=\"reth1.xxx\" packet-log-id=\"0\" alert=\"no\" username=\"N/A\" roles=\"N/A\" message=\"-\"]")
-    message = mt.render(mark="<165>1", host=host)
-
-    sendsingle(message)
-
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:junos:idp:structured\" | head 2")
-    search = st.render(host=host)
-
-    resultCount, eventCount = splunk_single(setup_splunk, search)
-
-    record_property("host", host)
-    record_property("resultCount", resultCount)
-    record_property("message", message)
-
-    assert resultCount == 1
-
-# <165>1 2010-06-23T18:05:55 10.209.83.9 Jnpr Syslog 23414 1 [syslog@juniper.net dayId="20100623" recordId="0" timeRecv="2010/06/23 18:05:55" timeGen="2010/06/23 18:05:51" domain="" devDomVer2="0" device_ip="10.209.83.9" cat="Config" attack="" srcZn="NULL" srcIntf="" srcAddr="0.0.0.0" srcPort="0" natSrcAddr="NULL" natSrcPort="0" dstZn="NULL" dstIntf="NULL" dstAddr="0.0.0.0" dstPort="0" natDstAddr="NULL" natDstPort="0" protocol="IP" ruleDomain="" ruleVer="0" policy="" rulebase="NONE" ruleNo="0" action="NONE" severity="INFO" alert="no" elaspedTime="0" inbytes="0" outbytes="0" totBytes="0" inPak="0" outPak="0" totPak="0" repCount="0" packetData="no" varEnum="0" misc="Interaface  eth2,eth3 is in Normal State" user="NULL" app="NULL" uri="NULL"]
-# <THIS TEST TENTATIVE PENDING A VALID DATA SAMPLE; NEEDED TO OMIT THE "1" IN THIS TEST SAMPLE (BEFORE [] BLOCK) TO GET IT TO PARSE 5424>
-# <VALIDATE BEFORE SHIPPING!>
-# <THIS TEST MAY NEED TO BE REWRITTEN AS A "STANDARD" TEST IF THE DATA IS ACTUALLY SENT IN 3164 FORMAT>
-@flaky(max_runs=3, min_passes=2)
-# @pytest.mark.xfail
-def test_juniper_idp_structured(record_property, setup_wordlist, get_host_key, setup_splunk):
-    host = get_host_key
-
-    mt = env.from_string(
-        "{{ mark }} {% now 'utc', '%Y-%m-%dT%H:%M:%S' %}.700Z {{ host }} Jnpr Syslog 23414 [syslog@juniper.net dayId=\"20100623\" recordId=\"0\" timeRecv=\"2010/06/23 18:05:55\" timeGen=\"2010/06/23 18:05:51\" domain=\"\" devDomVer2=\"0\" device_ip=\"10.209.83.9\" cat=\"Config\" attack=\"\" srcZn=\"NULL\" srcIntf=\"\" srcAddr=\"0.0.0.0\" srcPort=\"0\" natSrcAddr=\"NULL\" natSrcPort=\"0\" dstZn=\"NULL\" dstIntf=\"NULL\" dstAddr=\"0.0.0.0\" dstPort=\"0\" natDstAddr=\"NULL\" natDstPort=\"0\" protocol=\"IP\" ruleDomain=\"\" ruleVer=\"0\" policy=\"\" rulebase=\"NONE\" ruleNo=\"0\" action=\"NONE\" severity=\"INFO\" alert=\"no\" elaspedTime=\"0\" inbytes=\"0\" outbytes=\"0\" totBytes=\"0\" inPak=\"0\" outPak=\"0\" totPak=\"0\" repCount=\"0\" packetData=\"no\" varEnum=\"0\" misc=\"Interaface  eth2,eth3 is in Normal State\" user=\"NULL\" app=\"NULL\" uri=\"NULL\"]")
-    message = mt.render(mark="<165>1", host=host)
-
-    sendsingle(message)
-
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:idp:structured\" | head 2")
-    search = st.render(host=host)
-
-    resultCount, eventCount = splunk_single(setup_splunk, search)
-
-    record_property("host", host)
-    record_property("resultCount", resultCount)
-    record_property("message", message)
-
-    assert resultCount == 1
-
 # <134> Aug 02 14:45:04 10.0.0.1 65.197.254.193 20090320, 17331, 2009/03/20 14:47:45, 2009/03/20 14:47:50, global, 53, [FW NAME], [FW IP], traffic, traffic log, trust, (NULL), 10.1.1.20, 1725, 82.2.19.2, 2383, untrust, (NULL), 84.5.78.4, 80, 84.53.178.64, 80, tcp, global, 53, [FW NAME], fw/vpn, 4, accepted, info, no, Creation, (NULL), (NULL), (NULL), 0, 0, 0, 0, 0, 0, 0, 1, no, 0, Not Set, sos
-@flaky(max_runs=3, min_passes=2)
-# @pytest.mark.xfail
-def test_juniper_junos_fw_structured(record_property, setup_wordlist, get_host_key, setup_splunk):
-    host = get_host_key
-
-    mt = env.from_string(
-        "{{ mark }} {% now 'utc', '%Y-%m-%dT%H:%M:%S' %}.700Z {{ host }} RT_FLOW - RT_FLOW_SESSION_CREATE_LS [junos@2636.1.1.1.2.26 logical-system-name=\"test-lsys\" source-address=\"10.10.10.100\" source-port=\"4206\" destination-address=\"10.20.20.15\" destination-port=\"445\" service-name=\"junos-smb\" nat-source-address=\"10.10.10.100\" nat-source-port=\"4206\" nat-destination-address=\"10.20.20.15\" nat-destination-port=\"445\" src-nat-rule-name=\"None\" dst-nat-rule-name=\"None\" protocol-id=\"6\" policy-name=\"123\" source-zone-name=\"TEST1\" destination-zone-name=\"TEST2\" session-id-32=\"14285714\" username=\"N/A\" roles=\"N/A\" packet-incoming-interface=\"reth1.100\"]")
-    message = mt.render(mark="<23>1", host=host)
-
-    sendsingle(message)
-
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:junos:firewall:structured\" | head 2")
-    search = st.render(host=host)
-
-    resultCount, eventCount = splunk_single(setup_splunk, search)
-
-    record_property("host", host)
-    record_property("resultCount", resultCount)
-    record_property("message", message)
-
-    assert resultCount == 1
-
-
-# <23> Mar 18 17:56:52 RT_UTM: WEBFILTER_URL_PERMITTED: WebFilter: ACTION="URL Permitted" 192.168.32.1(62054)->1.1.1.1(443) CATEGORY="Enhanced_Information_Technology" REASON="BY_PRE_DEFINED" PROFILE="UTM-Wireless-Profile" URL=ent-shasta-rrs.symantec.com OBJ=/ username N/A roles N/A
-@flaky(max_runs=3, min_passes=2)
-# @pytest.mark.xfail
-def test_juniper_utm_standard(record_property, setup_wordlist, get_host_key, setup_splunk):
-    host = get_host_key
-
-    mt = env.from_string(
-        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} RT_UTM: WEBFILTER_URL_PERMITTED: WebFilter: ACTION=\"URL Permitted\" 192.168.32.1(62054)->1.1.1.1(443) CATEGORY=\"Enhanced_Information_Technology\" REASON=\"BY_PRE_DEFINED\" PROFILE=\"UTM-Wireless-Profile\" URL=ent-shasta-rrs.symantec.com OBJ=/ username N/A roles N/A")
-    message = mt.render(mark="<23>", host=host)
-
-    sendsingle(message)
-
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:junos:firewall\" | head 2")
-    search = st.render(host=host)
-
-    resultCount, eventCount = splunk_single(setup_splunk, search)
-
-    record_property("host", host)
-    record_property("resultCount", resultCount)
-    record_property("message", message)
-
-    assert resultCount == 1
-
-# <134> Aug 02 14:45:04 10.0.0.1 65.197.254.193 20090320, 17331, 2009/03/20 14:47:45, 2009/03/20 14:47:50, global, 53, [FW NAME], [FW IP], traffic, traffic log, trust, (NULL), 10.1.1.20, 1725, 82.2.19.2, 2383, untrust, (NULL), 84.5.78.4, 80, 84.53.178.64, 80, tcp, global, 53, [FW NAME], fw/vpn, 4, accepted, info, no, Creation, (NULL), (NULL), (NULL), 0, 0, 0, 0, 0, 0, 0, 1, no, 0, Not Set, sos
-@flaky(max_runs=3, min_passes=2)
-# @pytest.mark.xfail
 def test_juniper_nsm_standard(record_property, setup_wordlist, get_host_key, setup_splunk):
     host = get_host_key
 
     mt = env.from_string(
-        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} 65.197.254.193 20090320, 17331, 2009/03/20 14:47:45, 2009/03/20 14:47:50, global, 53, [FW NAME], [FW IP], traffic, traffic log, trust, (NULL), 10.1.1.20, 1725, 82.2.19.2, 2383, untrust, (NULL), 84.5.78.4, 80, 84.53.178.64, 80, tcp, global, 53, [FW NAME], fw/vpn, 4, accepted, info, no, Creation, (NULL), (NULL), (NULL), 0, 0, 0, 0, 0, 0, 0, 1, no, 0, Not Set, sos")
+        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} jnpnsm-{{ host }} 65.197.254.193 20090320, 17331, 2009/03/20 14:47:45, 2009/03/20 14:47:50, global, 53, [FW NAME], [FW IP], traffic, traffic log, trust, (NULL), 10.1.1.20, 1725, 82.2.19.2, 2383, untrust, (NULL), 84.5.78.4, 80, 84.53.178.64, 80, tcp, global, 53, [FW NAME], fw/vpn, 4, accepted, info, no, Creation, (NULL), (NULL), (NULL), 0, 0, 0, 0, 0, 0, 0, 1, no, 0, Not Set, sos")
     message = mt.render(mark="<134>", host=host)
 
     sendsingle(message)
 
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:nsm\" | head 2")
+    st = env.from_string("search index=main host=\"jnpnsm-{{ host }}\" sourcetype=\"juniper:nsm\" | head 2")
     search = st.render(host=host)
 
     resultCount, eventCount = splunk_single(setup_splunk, search)
@@ -157,18 +35,16 @@ def test_juniper_nsm_standard(record_property, setup_wordlist, get_host_key, set
 
 # THE LOG SAMPLE BELOW IS IMPLIED FROM THE JUNIPER DOCS; need to obtain a real sample.
 # <134> Aug 02 14:45:04 10.0.0.1 65.197.254.193 20090320, 17331, 2009/03/20 14:47:45, 2009/03/20 14:47:50, global, 53, [IDP NAME], [IDP IP], predefined, rule, trust, (NULL), 10.1.1.20, 1725, 82.2.19.2, 2383, untrust, (NULL), 84.5.78.4, 80, 84.53.178.64, 80, tcp, global, 53, [IDP NAME], fw/vpn, 4, accepted, info, no, Creation, (NULL), (NULL), (NULL), 0, 0, 0, 0, 0, 0, 0, 1, no, 0, Not Set, sos
-@flaky(max_runs=3, min_passes=2)
-# @pytest.mark.xfail
 def test_juniper_nsm_idp_standard(record_property, setup_wordlist, get_host_key, setup_splunk):
     host = get_host_key
 
     mt = env.from_string(
-        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} 65.197.254.193 20090320, 17331, 2009/03/20 14:47:45, 2009/03/20 14:47:50, global, 53, [IDP NAME], [IDP IP], predefined, rule, trust, (NULL), 10.1.1.20, 1725, 82.2.19.2, 2383, untrust, (NULL), 84.5.78.4, 80, 84.53.178.64, 80, tcp, global, 53, [IDP NAME], fw/vpn, 4, accepted, info, no, Creation, (NULL), (NULL), (NULL), 0, 0, 0, 0, 0, 0, 0, 1, no, 0, Not Set, sos")
+        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} jnpnsmidp-{{ host }} 65.197.254.193 20090320, 17331, 2009/03/20 14:47:45, 2009/03/20 14:47:50, global, 53, [IDP NAME], [IDP IP], predefined, rule, trust, (NULL), 10.1.1.20, 1725, 82.2.19.2, 2383, untrust, (NULL), 84.5.78.4, 80, 84.53.178.64, 80, tcp, global, 53, [IDP NAME], fw/vpn, 4, accepted, info, no, Creation, (NULL), (NULL), (NULL), 0, 0, 0, 0, 0, 0, 0, 1, no, 0, Not Set, sos")
     message = mt.render(mark="<134>", host=host)
 
     sendsingle(message)
 
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:nsm:idp\" | head 2")
+    st = env.from_string("search index=main host=\"jnpnsmidp-{{ host }}\" sourcetype=\"juniper:nsm:idp\" | head 2")
     search = st.render(host=host)
 
     resultCount, eventCount = splunk_single(setup_splunk, search)
@@ -180,68 +56,17 @@ def test_juniper_nsm_idp_standard(record_property, setup_wordlist, get_host_key,
     assert resultCount == 1
 
 # <23> Apr 24 12:30:05  cs-loki3 RT_IDP: IDP_ATTACK_LOG_EVENT: IDP: at 1303673404, ANOMALY Attack log <64.1.2.1/48397->198.87.233.110/80> for TCP protocol and service HTTP application NONE by rule 3 of rulebase IPS in policy Recommended. attack: repeat=0, action=DROP, threat-severity=HIGH, name=HTTP:INVALID:MSNG-HTTP-VER, NAT <46.0.3.254:55870->0.0.0.0:0>, time-elapsed=0, inbytes=0, outbytes=0, inpackets=0, outpackets=0, intf:trust:fe-0/0/2.0->untrust:fe-0/0/3.0, packet-log-id: 0 and misc-message -
-@flaky(max_runs=3, min_passes=2)
-# @pytest.mark.xfail
-
-def test_juniper_idp_standard(record_property, setup_wordlist, get_host_key, setup_splunk):
-    host = get_host_key
-
-    mt = env.from_string(
-        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} RT_IDP: IDP_ATTACK_LOG_EVENT: IDP: at 1303673404, ANOMALY Attack log <64.1.2.1/48397->198.87.233.110/80> for TCP protocol and service HTTP application NONE by rule 3 of rulebase IPS in policy Recommended. attack: repeat=0, action=DROP, threat-severity=HIGH, name=HTTP:INVALID:MSNG-HTTP-VER, NAT <46.0.3.254:55870->0.0.0.0:0>, time-elapsed=0, inbytes=0, outbytes=0, inpackets=0, outpackets=0, intf:trust:fe-0/0/2.0->untrust:fe-0/0/3.0, packet-log-id: 0 and misc-message -")
-    message = mt.render(mark="<23>", host=host)
-
-    sendsingle(message)
-
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:junos:idp\" | head 2")
-    search = st.render(host=host)
-
-    resultCount, eventCount = splunk_single(setup_splunk, search)
-
-    record_property("host", host)
-    record_property("resultCount", resultCount)
-    record_property("message", message)
-
-    assert resultCount == 1
-
-# <23> Nov 18 09:56:58  INTERNET-ROUTER RT_FLOW: RT_FLOW_SESSION_CREATE: session created 192.168.1.102/58662->8.8.8.8/53 junos-dns-udp 68.144.1.1/55893->8.8.8.8/53 TRUST-INET-ACCESS None 17 OUTBOUND-INTERNET-ACCESS TRUST INTERNET 6316 N/A(N/A) vlan.192
-@flaky(max_runs=3, min_passes=2)
-# @pytest.mark.xfail
-
-def test_juniper_firewall_standard(record_property, setup_wordlist, get_host_key, setup_splunk):
-    host = get_host_key
-
-    mt = env.from_string(
-        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} RT_FLOW: RT_FLOW_SESSION_CREATE: session created 192.168.1.102/58662->8.8.8.8/53 junos-dns-udp 68.144.1.1/55893->8.8.8.8/53 TRUST-INET-ACCESS None 17 OUTBOUND-INTERNET-ACCESS TRUST INTERNET 6316 N/A(N/A) vlan.192")
-    message = mt.render(mark="<23>", host=host)
-
-    sendsingle(message)
-
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:junos:firewall\" | head 2")
-    search = st.render(host=host)
-
-    resultCount, eventCount = splunk_single(setup_splunk, search)
-
-    record_property("host", host)
-    record_property("resultCount", resultCount)
-    record_property("message", message)
-
-    assert resultCount == 1
-
-# <23> Feb 27 15:00:00 vpn-001 Juniper: 2013-02-27 15:00:00 - ive - [000.000.000.000] SAMPLE::xxx@xxx.xxx(Users)[] - Session timed out for xxx@xxx.xxx.xxx/Users (session:00000000) due to inactivity (last access at 13:59:31 2013/02/27). Idle session identified during routine system scan.
-# <23> Feb 27 15:00:00 vpn-001 Juniper: 2013-02-27 15:00:00 - ive - [000.000.000.000] SAMPLE::xxx@xxx.xxx(Users)[User_Role] - Remote address for user xxx@xxx.xxx/Users changed from 000.000.000.000 to 000.000.000.000. Access denied.
-@flaky(max_runs=3, min_passes=2)
-# @pytest.mark.xfail
-
-def test_juniper_sslvpn_standard(record_property, setup_wordlist, get_host_key, setup_splunk):
+# <23> Mar 18 17:56:52 [FW IP] [FW Model]: NetScreen device_id=netscreen2  [Root]system-notification-00257(traffic): start_time="2009-03-18 16:07:06" duration=0 policy_id=320001 service=msrpc Endpoint Mapper(tcp) proto=6 src zone=Null dst zone=self action=Deny sent=0 rcvd=16384 src=21.10.90.125 dst=23.16.1.1
+def test_juniper_netscreen(record_property, setup_wordlist, get_host_key, setup_splunk):
     host = get_host_key
 
     mt = env.from_string(
-        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} Juniper: {% now 'utc', '%Y-%m-%d %H:%M:%S' %} - ive - [000.000.000.000] SAMPLE::xxx@xxx.xxx(Users)[User_Role] - Remote address for user xxx@xxx.xxx/Users changed from 000.000.000.000 to 000.000.000.000. Access denied.")
+        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} jnpns-{{ host }} ns204: NetScreen device_id=netscreen2  [Root]system-notification-00257(traffic): start_time=\"2009-03-18 16:07:06\" duration=0 policy_id=320001 service=msrpc Endpoint Mapper(tcp) proto=6 src zone=Null dst zone=self action=Deny sent=0 rcvd=16384 src=21.10.90.125 dst=23.16.1.1\n")
     message = mt.render(mark="<23>", host=host)
 
     sendsingle(message)
 
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:sslvpn\" | head 2")
+    st = env.from_string("search index=main host=\"jnpns-{{ host }}\" sourcetype=\"netscreen:firewall\" | head 2")
     search = st.render(host=host)
 
     resultCount, eventCount = splunk_single(setup_splunk, search)
@@ -252,17 +77,16 @@ def test_juniper_sslvpn_standard(record_property, setup_wordlist, get_host_key,
 
     assert resultCount == 1
 
+# <23> Apr 24 12:30:05  cs-loki3 RT_IDP: IDP_ATTACK_LOG_EVENT: IDP: at 1303673404, ANOMALY Attack log <64.1.2.1/48397->198.87.233.110/80> for TCP protocol and service HTTP application NONE by rule 3 of rulebase IPS in policy Recommended. attack: repeat=0, action=DROP, threat-severity=HIGH, name=HTTP:INVALID:MSNG-HTTP-VER, NAT <46.0.3.254:55870->0.0.0.0:0>, time-elapsed=0, inbytes=0, outbytes=0, inpackets=0, outpackets=0, intf:trust:fe-0/0/2.0->untrust:fe-0/0/3.0, packet-log-id: 0 and misc-message -
 # <23> Mar 18 17:56:52 [FW IP] [FW Model]: NetScreen device_id=netscreen2  [Root]system-notification-00257(traffic): start_time="2009-03-18 16:07:06" duration=0 policy_id=320001 service=msrpc Endpoint Mapper(tcp) proto=6 src zone=Null dst zone=self action=Deny sent=0 rcvd=16384 src=21.10.90.125 dst=23.16.1.1
-@flaky(max_runs=3, min_passes=2)
-# @pytest.mark.xfail
-def test_juniper_netscreen(record_property, setup_wordlist, get_host_key, setup_splunk):
+def test_juniper_netscreen_singleport(record_property, setup_wordlist, get_host_key, setup_splunk):
     host = get_host_key
 
     mt = env.from_string(
         "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} ns204: NetScreen device_id=netscreen2  [Root]system-notification-00257(traffic): start_time=\"2009-03-18 16:07:06\" duration=0 policy_id=320001 service=msrpc Endpoint Mapper(tcp) proto=6 src zone=Null dst zone=self action=Deny sent=0 rcvd=16384 src=21.10.90.125 dst=23.16.1.1\n")
     message = mt.render(mark="<23>", host=host)
 
-    sendsingle(message)
+    sendsingle(message, host="sc4s-juniper")
 
     st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"netscreen:firewall\" | head 2")
     search = st.render(host=host)
diff --git a/tests/test_juniper_junos_rfc3164.py b/tests/test_juniper_junos_rfc3164.py
new file mode 100644
index 0000000..5af94b7
--- /dev/null
+++ b/tests/test_juniper_junos_rfc3164.py
@@ -0,0 +1,97 @@
+# Copyright 2019 Splunk, Inc.
+#
+# Use of this source code is governed by a BSD-2-clause-style
+# license that can be found in the LICENSE-BSD2 file or at
+# https://opensource.org/licenses/BSD-2-Clause
+
+from jinja2 import Environment
+
+from .sendmessage import *
+from .splunkutils import *
+
+env = Environment(extensions=['jinja2_time.TimeExtension'])
+# <23> Mar 18 17:56:52 RT_UTM: WEBFILTER_URL_PERMITTED: WebFilter: ACTION="URL Permitted" 192.168.32.1(62054)->1.1.1.1(443) CATEGORY="Enhanced_Information_Technology" REASON="BY_PRE_DEFINED" PROFILE="UTM-Wireless-Profile" URL=ent-shasta-rrs.symantec.com OBJ=/ username N/A roles N/A
+def test_juniper_utm_standard(record_property, setup_wordlist, get_host_key, setup_splunk):
+    host = get_host_key
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} RT_UTM: WEBFILTER_URL_PERMITTED: WebFilter: ACTION=\"URL Permitted\" 192.168.32.1(62054)->1.1.1.1(443) CATEGORY=\"Enhanced_Information_Technology\" REASON=\"BY_PRE_DEFINED\" PROFILE=\"UTM-Wireless-Profile\" URL=ent-shasta-rrs.symantec.com OBJ=/ username N/A roles N/A")
+    message = mt.render(mark="<23>", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:junos:firewall\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+
+# <23> Nov 18 09:56:58  INTERNET-ROUTER RT_FLOW: RT_FLOW_SESSION_CREATE: session created 192.168.1.102/58662->8.8.8.8/53 junos-dns-udp 68.144.1.1/55893->8.8.8.8/53 TRUST-INET-ACCESS None 17 OUTBOUND-INTERNET-ACCESS TRUST INTERNET 6316 N/A(N/A) vlan.192
+def test_juniper_firewall_standard(record_property, setup_wordlist, get_host_key, setup_splunk):
+    host = get_host_key
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} RT_FLOW: RT_FLOW_SESSION_CREATE: session created 192.168.1.102/58662->8.8.8.8/53 junos-dns-udp 68.144.1.1/55893->8.8.8.8/53 TRUST-INET-ACCESS None 17 OUTBOUND-INTERNET-ACCESS TRUST INTERNET 6316 N/A(N/A) vlan.192")
+    message = mt.render(mark="<23>", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:junos:firewall\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+
+# <23> Feb 27 15:00:00 vpn-001 Juniper: 2013-02-27 15:00:00 - ive - [000.000.000.000] SAMPLE::xxx@xxx.xxx(Users)[] - Session timed out for xxx@xxx.xxx.xxx/Users (session:00000000) due to inactivity (last access at 13:59:31 2013/02/27). Idle session identified during routine system scan.
+# <23> Feb 27 15:00:00 vpn-001 Juniper: 2013-02-27 15:00:00 - ive - [000.000.000.000] SAMPLE::xxx@xxx.xxx(Users)[User_Role] - Remote address for user xxx@xxx.xxx/Users changed from 000.000.000.000 to 000.000.000.000. Access denied.
+def test_juniper_sslvpn_standard(record_property, setup_wordlist, get_host_key, setup_splunk):
+    host = get_host_key
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} Juniper: {% now 'utc', '%Y-%m-%d %H:%M:%S' %} - ive - [000.000.000.000] SAMPLE::xxx@xxx.xxx(Users)[User_Role] - Remote address for user xxx@xxx.xxx/Users changed from 000.000.000.000 to 000.000.000.000. Access denied.")
+    message = mt.render(mark="<23>", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:sslvpn\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+
+
+
+def test_juniper_idp_standard(record_property, setup_wordlist, get_host_key, setup_splunk):
+    host = get_host_key
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} RT_IDP: IDP_ATTACK_LOG_EVENT: IDP: at 1303673404, ANOMALY Attack log <64.1.2.1/48397->198.87.233.110/80> for TCP protocol and service HTTP application NONE by rule 3 of rulebase IPS in policy Recommended. attack: repeat=0, action=DROP, threat-severity=HIGH, name=HTTP:INVALID:MSNG-HTTP-VER, NAT <46.0.3.254:55870->0.0.0.0:0>, time-elapsed=0, inbytes=0, outbytes=0, inpackets=0, outpackets=0, intf:trust:fe-0/0/2.0->untrust:fe-0/0/3.0, packet-log-id: 0 and misc-message -")
+    message = mt.render(mark="<23>", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:junos:idp\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
diff --git a/tests/test_juniper_junos_rfc5124.py b/tests/test_juniper_junos_rfc5124.py
new file mode 100644
index 0000000..9ad8b22
--- /dev/null
+++ b/tests/test_juniper_junos_rfc5124.py
@@ -0,0 +1,105 @@
+# Copyright 2019 Splunk, Inc.
+#
+# Use of this source code is governed by a BSD-2-clause-style
+# license that can be found in the LICENSE-BSD2 file or at
+# https://opensource.org/licenses/BSD-2-Clause
+
+from jinja2 import Environment
+
+from .sendmessage import *
+from .splunkutils import *
+
+env = Environment(extensions=['jinja2_time.TimeExtension'])
+
+# <165>1 2007-02-15T09:17:15.719Z router1 mgd 3046 UI_DBASE_LOGOUT_EVENT [junos@2636.1.1.1.2.18 username="user"] User 'user' exiting configuration mode
+# @pytest.mark.xfail
+def test_juniper_junos_structured(record_property, setup_wordlist, get_host_key, setup_splunk):
+    host = get_host_key
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%Y-%m-%dT%H:%M:%S' %}.700Z {{ host }} mgd 3046 UI_DBASE_LOGOUT_EVENT [junos@2636.1.1.1.2.18 username=\"user\"] User 'user' exiting configuration mode\n")
+    message = mt.render(mark="<165>1", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:structured\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+
+# <165>1 2007-02-15T09:17:15.719Z idp1 RT_IDP - IDP_ATTACK_LOG_EVENT [junos@2636.1.1.1.2.135 epoch-time="1507845354" message-type="SIG" source-address="183.78.180.27" source-port="45610" destination-address="118.127.xx.xx" destination-port="80" protocol-name="TCP" service-name="SERVICE_IDP" application-name="HTTP" rule-name="9" rulebase-name="IPS" policy-name="Recommended" export-id="15229" repeat-count="0" action="DROP" threat-severity="HIGH" attack-name="TROJAN:ZMEU-BOT-SCAN" nat-source-address="0.0.0.0" nat-source-port="0" nat-destination-address="172.xx.xx.xx" nat-destination-port="0" elapsed-time="0" inbound-bytes="0" outbound-bytes="0" inbound-packets="0" outbound-packets="0" source-zone-name="sec-zone-name-internet" source-interface-name="reth0.XXX" destination-zone-name="dst-sec-zone1-outside" destination-interface-name="reth1.xxx" packet-log-id="0" alert="no" username="N/A" roles="N/A" message="-"]
+# @pytest.mark.xfail
+def test_juniper_junos_idp_structured(record_property, setup_wordlist, get_host_key, setup_splunk):
+    host = get_host_key
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%Y-%m-%dT%H:%M:%S' %}.700Z {{ host }} RT_IDP - IDP_ATTACK_LOG_EVENT [junos@2636.1.1.1.2.135 epoch-time=\"1507845354\" message-type=\"SIG\" source-address=\"183.78.180.27\" source-port=\"45610\" destination-address=\"118.127.xx.xx\" destination-port=\"80\" protocol-name=\"TCP\" service-name=\"SERVICE_IDP\" application-name=\"HTTP\" rule-name=\"9\" rulebase-name=\"IPS\" policy-name=\"Recommended\" export-id=\"15229\" repeat-count=\"0\" action=\"DROP\" threat-severity=\"HIGH\" attack-name=\"TROJAN:ZMEU-BOT-SCAN\" nat-source-address=\"0.0.0.0\" nat-source-port=\"0\" nat-destination-address=\"172.xx.xx.xx\" nat-destination-port=\"0\" elapsed-time=\"0\" inbound-bytes=\"0\" outbound-bytes=\"0\" inbound-packets=\"0\" outbound-packets=\"0\" source-zone-name=\"sec-zone-name-internet\" source-interface-name=\"reth0.XXX\" destination-zone-name=\"dst-sec-zone1-outside\" destination-interface-name=\"reth1.xxx\" packet-log-id=\"0\" alert=\"no\" username=\"N/A\" roles=\"N/A\" message=\"-\"]")
+    message = mt.render(mark="<165>1", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:junos:idp:structured\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+
+# <165>1 2010-06-23T18:05:55 10.209.83.9 Jnpr Syslog 23414 1 [syslog@juniper.net dayId="20100623" recordId="0" timeRecv="2010/06/23 18:05:55" timeGen="2010/06/23 18:05:51" domain="" devDomVer2="0" device_ip="10.209.83.9" cat="Config" attack="" srcZn="NULL" srcIntf="" srcAddr="0.0.0.0" srcPort="0" natSrcAddr="NULL" natSrcPort="0" dstZn="NULL" dstIntf="NULL" dstAddr="0.0.0.0" dstPort="0" natDstAddr="NULL" natDstPort="0" protocol="IP" ruleDomain="" ruleVer="0" policy="" rulebase="NONE" ruleNo="0" action="NONE" severity="INFO" alert="no" elaspedTime="0" inbytes="0" outbytes="0" totBytes="0" inPak="0" outPak="0" totPak="0" repCount="0" packetData="no" varEnum="0" misc="Interaface  eth2,eth3 is in Normal State" user="NULL" app="NULL" uri="NULL"]
+# <THIS TEST TENTATIVE PENDING A VALID DATA SAMPLE; NEEDED TO OMIT THE "1" IN THIS TEST SAMPLE (BEFORE [] BLOCK) TO GET IT TO PARSE 5424>
+# <VALIDATE BEFORE SHIPPING!>
+# <THIS TEST MAY NEED TO BE REWRITTEN AS A "STANDARD" TEST IF THE DATA IS ACTUALLY SENT IN 3164 FORMAT>
+# @pytest.mark.xfail
+def test_juniper_idp_structured(record_property, setup_wordlist, get_host_key, setup_splunk):
+    host = get_host_key
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%Y-%m-%dT%H:%M:%S' %}.700Z {{ host }} Jnpr Syslog 23414 [syslog@juniper.net dayId=\"20100623\" recordId=\"0\" timeRecv=\"2010/06/23 18:05:55\" timeGen=\"2010/06/23 18:05:51\" domain=\"\" devDomVer2=\"0\" device_ip=\"10.209.83.9\" cat=\"Config\" attack=\"\" srcZn=\"NULL\" srcIntf=\"\" srcAddr=\"0.0.0.0\" srcPort=\"0\" natSrcAddr=\"NULL\" natSrcPort=\"0\" dstZn=\"NULL\" dstIntf=\"NULL\" dstAddr=\"0.0.0.0\" dstPort=\"0\" natDstAddr=\"NULL\" natDstPort=\"0\" protocol=\"IP\" ruleDomain=\"\" ruleVer=\"0\" policy=\"\" rulebase=\"NONE\" ruleNo=\"0\" action=\"NONE\" severity=\"INFO\" alert=\"no\" elaspedTime=\"0\" inbytes=\"0\" outbytes=\"0\" totBytes=\"0\" inPak=\"0\" outPak=\"0\" totPak=\"0\" repCount=\"0\" packetData=\"no\" varEnum=\"0\" misc=\"Interaface  eth2,eth3 is in Normal State\" user=\"NULL\" app=\"NULL\" uri=\"NULL\"]")
+    message = mt.render(mark="<165>1", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:idp:structured\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+
+# <134> Aug 02 14:45:04 10.0.0.1 65.197.254.193 20090320, 17331, 2009/03/20 14:47:45, 2009/03/20 14:47:50, global, 53, [FW NAME], [FW IP], traffic, traffic log, trust, (NULL), 10.1.1.20, 1725, 82.2.19.2, 2383, untrust, (NULL), 84.5.78.4, 80, 84.53.178.64, 80, tcp, global, 53, [FW NAME], fw/vpn, 4, accepted, info, no, Creation, (NULL), (NULL), (NULL), 0, 0, 0, 0, 0, 0, 0, 1, no, 0, Not Set, sos
+# @pytest.mark.xfail
+def test_juniper_junos_fw_structured(record_property, setup_wordlist, get_host_key, setup_splunk):
+    host = get_host_key
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%Y-%m-%dT%H:%M:%S' %}.700Z {{ host }} RT_FLOW - RT_FLOW_SESSION_CREATE_LS [junos@2636.1.1.1.2.26 logical-system-name=\"test-lsys\" source-address=\"10.10.10.100\" source-port=\"4206\" destination-address=\"10.20.20.15\" destination-port=\"445\" service-name=\"junos-smb\" nat-source-address=\"10.10.10.100\" nat-source-port=\"4206\" nat-destination-address=\"10.20.20.15\" nat-destination-port=\"445\" src-nat-rule-name=\"None\" dst-nat-rule-name=\"None\" protocol-id=\"6\" policy-name=\"123\" source-zone-name=\"TEST1\" destination-zone-name=\"TEST2\" session-id-32=\"14285714\" username=\"N/A\" roles=\"N/A\" packet-incoming-interface=\"reth1.100\"]")
+    message = mt.render(mark="<23>1", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:junos:firewall:structured\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+
+
diff --git a/tests/test_palo_alto.py b/tests/test_palo_alto.py
index 5a601f0..62470b7 100644
--- a/tests/test_palo_alto.py
+++ b/tests/test_palo_alto.py
@@ -5,7 +5,6 @@
 # https://opensource.org/licenses/BSD-2-Clause
 import random
 
-from flaky import flaky
 from jinja2 import Environment
 
 from .sendmessage import *
@@ -13,9 +12,7 @@
 
 env = Environment(extensions=['jinja2_time.TimeExtension'])
 
-
 #<190>Jan 28 01:28:35 PA-VM300-goran1 1,2014/01/28 01:28:35,007200001056,TRAFFIC,end,1,2014/01/28 01:28:34,192.168.41.30,192.168.41.255,10.193.16.193,192.168.41.255,allow-all,,,netbios-ns,vsys1,Trust,Untrust,ethernet1/1,ethernet1/2,To-Panorama,2014/01/28 01:28:34,8720,1,137,137,11637,137,0x400000,udp,allow,276,276,0,3,2014/01/28 01:28:02,2,any,0,2076326,0x0,192.168.0.0-192.168.255.255,192.168.0.0-192.168.255.255,0,3,0
-@flaky(max_runs=3, min_passes=2)
 def test_palo_alto_traffic(record_property, setup_wordlist, setup_splunk):
     host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
 
@@ -38,7 +35,6 @@ def test_palo_alto_traffic(record_property, setup_wordlist, setup_splunk):
 
 
 # <190>Oct 30 09:46:17 1,2012/10/30 09:46:17,01606001116,THREAT,url,1,2012/04/10 04:39:55,192.168.0.2,204.232.231.46,0.0.0.0,0.0.0.0,rule1,crusher,,web-browsing,vsys1,trust,untrust,ethernet1/2,ethernet1/1,forwardAll,2012/04/10 04:39:57,22860,1,59303,80,0,0,0x208000,tcp,alert,"litetopdetect.cn/index.php",(9999),not-resolved,informational,client-to-server,0,0x0,192.168.0.0-192.168.255.255,United States,0,text/html
-@flaky(max_runs=3, min_passes=2)
 def test_palo_alto_threat(record_property, setup_wordlist, setup_splunk):
     host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
 
diff --git a/tests/test_poc.py b/tests/test_poc.py
deleted file mode 100644
index 37dcdef..0000000
--- a/tests/test_poc.py
+++ /dev/null
@@ -1,35 +0,0 @@
-# Copyright 2019 Splunk, Inc.
-#
-# Use of this source code is governed by a BSD-2-clause-style
-# license that can be found in the LICENSE-BSD2 file or at
-# https://opensource.org/licenses/BSD-2-Clause
-import random
-
-from flaky import flaky
-from jinja2 import Environment
-
-from .sendmessage import *
-from .splunkutils import *
-
-env = Environment(extensions=['jinja2_time.TimeExtension'])
-
-
-@flaky(max_runs=3, min_passes=2)
-def test_defaultroute(record_property, setup_wordlist, setup_splunk):
-    host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
-
-    mt = env.from_string("{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %}.000z {{ host }} sc4s_default[0]: test\n")
-    message = mt.render(mark="<111>1", host=host)
-
-    sendsingle(message)
-
-    st = env.from_string("search index=main \"{{ host }}\" sourcetype=\"syslog:fallback\" | head 2")
-    search = st.render(host=host)
-
-    resultCount, eventCount = splunk_single(setup_splunk, search)
-
-    record_property("host", host)
-    record_property("resultCount", resultCount)
-    record_property("message", message)
-
-    assert resultCount == 1
diff --git a/tests/wait-for b/tests/wait-for
new file mode 100755
index 0000000..bf6a071
--- /dev/null
+++ b/tests/wait-for
@@ -0,0 +1,79 @@
+#!/bin/sh
+
+TIMEOUT=15
+QUIET=0
+
+echoerr() {
+  if [ "$QUIET" -ne 1 ]; then printf "%s\n" "$*" 1>&2; fi
+}
+
+usage() {
+  exitcode="$1"
+  cat << USAGE >&2
+Usage:
+  $cmdname host:port [-t timeout] [-- command args]
+  -q | --quiet                        Do not output any status messages
+  -t TIMEOUT | --timeout=timeout      Timeout in seconds, zero for no timeout
+  -- COMMAND ARGS                     Execute command with args after the test finishes
+USAGE
+  exit "$exitcode"
+}
+
+wait_for() {
+  for i in `seq $TIMEOUT` ; do
+    nc -z "$HOST" "$PORT" > /dev/null 2>&1
+
+    result=$?
+    if [ $result -eq 0 ] ; then
+      if [ $# -gt 0 ] ; then
+        exec "$@"
+      fi
+      exit 0
+    fi
+    sleep 1
+  done
+  echo "Operation timed out" >&2
+  exit 1
+}
+
+while [ $# -gt 0 ]
+do
+  case "$1" in
+    *:* )
+    HOST=$(printf "%s\n" "$1"| cut -d : -f 1)
+    PORT=$(printf "%s\n" "$1"| cut -d : -f 2)
+    shift 1
+    ;;
+    -q | --quiet)
+    QUIET=1
+    shift 1
+    ;;
+    -t)
+    TIMEOUT="$2"
+    if [ "$TIMEOUT" = "" ]; then break; fi
+    shift 2
+    ;;
+    --timeout=*)
+    TIMEOUT="${1#*=}"
+    shift 1
+    ;;
+    --)
+    shift
+    break
+    ;;
+    --help)
+    usage 0
+    ;;
+    *)
+    echoerr "Unknown argument: $1"
+    usage 1
+    ;;
+  esac
+done
+
+if [ "$HOST" = "" -o "$PORT" = "" ]; then
+  echoerr "Error: you need to provide a host and port to test."
+  usage 2
+fi
+
+wait_for "$@"
\ No newline at end of file

From 31990cbbf1e76b31c009427ec0e21c428d7e6ded Mon Sep 17 00:00:00 2001
From: jstebbins-splunk <53191633+jstebbins-splunk@users.noreply.github.com>
Date: Fri, 23 Aug 2019 13:42:00 -0700
Subject: [PATCH 50/83] Filter dev (#57)

This change adds support for Symantec Bluecoat Proxy SG and ASG
---
 .idea/encodings.xml                           |  4 +++
 .idea/misc.xml                                |  2 +-
 .idea/splunk-connect-for-syslog.iml           |  2 +-
 docs/sources.md                               | 36 +++++++++++++++++++
 .../vendor_symantec/bluecoat_proxy.conf       |  3 ++
 .../log_paths/p_rfc3164-fortinet_fortios.conf |  3 +-
 .../log_paths/p_rfc3164-paloalto-panos.conf   |  3 +-
 .../p_rfc_5424_noversion-symantec-proxy.conf  | 16 +++++++++
 package/etc/context-local/splunk_index.csv    |  2 ++
 tests/test_fortinet_ngfw.py                   |  6 ++--
 tests/test_symantec_proxy.py                  | 34 ++++++++++++++++++
 11 files changed, 104 insertions(+), 7 deletions(-)
 create mode 100644 .idea/encodings.xml
 create mode 100644 package/etc/conf.d/conflib/vendor_symantec/bluecoat_proxy.conf
 create mode 100644 package/etc/conf.d/log_paths/p_rfc_5424_noversion-symantec-proxy.conf
 create mode 100644 tests/test_symantec_proxy.py

diff --git a/.idea/encodings.xml b/.idea/encodings.xml
new file mode 100644
index 0000000..15a15b2
--- /dev/null
+++ b/.idea/encodings.xml
@@ -0,0 +1,4 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="Encoding" addBOMForNewFiles="with NO BOM" />
+</project>
\ No newline at end of file
diff --git a/.idea/misc.xml b/.idea/misc.xml
index 0c225df..10f4f51 100644
--- a/.idea/misc.xml
+++ b/.idea/misc.xml
@@ -7,4 +7,4 @@
   <component name="PythonCompatibilityInspectionAdvertiser">
     <option name="version" value="3" />
   </component>
-</project>
\ No newline at end of file
+</project>
diff --git a/.idea/splunk-connect-for-syslog.iml b/.idea/splunk-connect-for-syslog.iml
index a304766..3b1d69b 100644
--- a/.idea/splunk-connect-for-syslog.iml
+++ b/.idea/splunk-connect-for-syslog.iml
@@ -16,4 +16,4 @@
     <option name="projectConfiguration" value="pytest" />
     <option name="PROJECT_TEST_RUNNER" value="pytest" />
   </component>
-</module>
\ No newline at end of file
+</module>
diff --git a/docs/sources.md b/docs/sources.md
index 3fd78da..d4167ef 100644
--- a/docs/sources.md
+++ b/docs/sources.md
@@ -167,4 +167,40 @@ An active firewall will generate frequent events use the following search to val
 
 ```
 index=<asconfigured> sourcetype=pan:*| stats count by host
+```
+
+# Vendor - Symantec
+
+## Product - ProxySG/ASG (Bluecoat)
+
+| Ref            | Link                                                                                                    |
+|----------------|---------------------------------------------------------------------------------------------------------|
+| Splunk Add-on  | https://splunkbase.splunk.com/app/2758/                                                                 |
+| Product Manual | https://support.symantec.com/us/en/article.tech242216.html                                                        |
+
+
+## Sourcetypes
+
+| sourcetype     | notes                                                                                                   |
+|----------------|---------------------------------------------------------------------------------------------------------|
+| bluecoat:proxysg:access:kv        | Requires version 3.6                                                                                                    |
+
+## Filter type
+
+MSG Parse: This filter parses message content
+
+## Setup and Configuration
+
+* Install the Splunk Add-on on the search head(s) for the user communities interested in this data source. If SC4S is exclusively used the addon is not required on the indexer.
+* Review and update the splunk_index.csv file and set the index as required.
+* Refer to the Splunk TA documentation for the specific customer format required for proxy configuration
+    * Select TCP or SSL transport option
+    * Ensure the format of the event is customized per Splunk documentation
+
+## Verification
+
+An active proxy will generate frequent events use the following search to validate events are present per source device
+
+```
+index=<asconfigured> sourcetype=bluecoat:proxysg:access:kv | stats count by host
 ```
\ No newline at end of file
diff --git a/package/etc/conf.d/conflib/vendor_symantec/bluecoat_proxy.conf b/package/etc/conf.d/conflib/vendor_symantec/bluecoat_proxy.conf
new file mode 100644
index 0000000..afaff11
--- /dev/null
+++ b/package/etc/conf.d/conflib/vendor_symantec/bluecoat_proxy.conf
@@ -0,0 +1,3 @@
+filter f_symantec_bluecoat_proxy {
+    program("bluecoat")
+};
\ No newline at end of file
diff --git a/package/etc/conf.d/log_paths/p_rfc3164-fortinet_fortios.conf b/package/etc/conf.d/log_paths/p_rfc3164-fortinet_fortios.conf
index 0707aaf..d81c565 100644
--- a/package/etc/conf.d/log_paths/p_rfc3164-fortinet_fortios.conf
+++ b/package/etc/conf.d/log_paths/p_rfc3164-fortinet_fortios.conf
@@ -27,4 +27,5 @@ log {
     destination(d_hec);  #--HEC--
 
     flags(flow-control);
-};
\ No newline at end of file
+};
+
diff --git a/package/etc/conf.d/log_paths/p_rfc3164-paloalto-panos.conf b/package/etc/conf.d/log_paths/p_rfc3164-paloalto-panos.conf
index 84a60d2..956f747 100644
--- a/package/etc/conf.d/log_paths/p_rfc3164-paloalto-panos.conf
+++ b/package/etc/conf.d/log_paths/p_rfc3164-paloalto-panos.conf
@@ -57,4 +57,5 @@ log {
     destination(d_hec);  #--HEC--
 
     flags(flow-control);
-};
\ No newline at end of file
+};
+
diff --git a/package/etc/conf.d/log_paths/p_rfc_5424_noversion-symantec-proxy.conf b/package/etc/conf.d/log_paths/p_rfc_5424_noversion-symantec-proxy.conf
new file mode 100644
index 0000000..4d2b8e4
--- /dev/null
+++ b/package/etc/conf.d/log_paths/p_rfc_5424_noversion-symantec-proxy.conf
@@ -0,0 +1,16 @@
+log {
+    source(s_default-ports);
+    filter(f_is_rfc5424_noversion);
+    filter(f_symantec_bluecoat_proxy);
+
+    #set the source type based on program field and lookup index from the splunk context csv
+
+    parser {p_add_context_splunk(key("bluecoat:proxysg:access:kv")); };
+
+    #Using the 5424 parser the message content is all we need
+    rewrite {r_set_splunk(template("t_msg_only")) }; #--HEC--
+
+    destination(d_hec);  #--HEC--
+
+    flags(flow-control);
+};
\ No newline at end of file
diff --git a/package/etc/context-local/splunk_index.csv b/package/etc/context-local/splunk_index.csv
index e495491..c1167c5 100644
--- a/package/etc/context-local/splunk_index.csv
+++ b/package/etc/context-local/splunk_index.csv
@@ -1,3 +1,5 @@
+bluecoat:proxysg:access:kv,index,main
+bluecoat:proxysg:access:kv,sourcetype,bluecoat:proxysg:access:kv
 cisco:asa,index,main
 cisco:asa,sourcetype,cisco:asa
 cisco:ios,index,main
diff --git a/tests/test_fortinet_ngfw.py b/tests/test_fortinet_ngfw.py
index df3aa36..3437f9e 100644
--- a/tests/test_fortinet_ngfw.py
+++ b/tests/test_fortinet_ngfw.py
@@ -17,7 +17,7 @@ def test_fortinet_fgt_event(record_property, setup_wordlist, setup_splunk):
     host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
 
     mt = env.from_string(
-        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} date={% now 'utc', '%Y-%m-%d' %} time={% now 'utc', '%H:%M:%S' %} devname={{ host }} devid=FGT60D4614044725 logid=0100040704 type=event subtype=system level=notice vd=root logdesc=\"System performance statistics\" action=\"perf-stats\" cpu=2 mem=35 totalsession=61 disk=2 bandwidth=158/138 setuprate=2 disklograte=0 fazlograte=0 msg=\"Performance statistics: average CPU: 2, memory:  35, concurrent sessions:  61, setup-rate: 2\"\n")
+        "{{ mark }}date={% now 'utc', '%Y-%m-%d' %} time={% now 'utc', '%H:%M:%S' %} devname={{ host }} devid=FGT60D4614044725 logid=0100040704 type=event subtype=system level=notice vd=root logdesc=\"System performance statistics\" action=\"perf-stats\" cpu=2 mem=35 totalsession=61 disk=2 bandwidth=158/138 setuprate=2 disklograte=0 fazlograte=0 msg=\"Performance statistics: average CPU: 2, memory:  35, concurrent sessions:  61, setup-rate: 2\"\n")
     message = mt.render(mark="<13>", host=host)
 
     sendsingle(message)
@@ -38,7 +38,7 @@ def test_fortinet_fgt_traffic(record_property, setup_wordlist, setup_splunk):
     host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
 
     mt = env.from_string(
-        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} date={% now 'utc', '%Y-%m-%d' %} time={% now 'utc', '%H:%M:%S' %} devname={{ host }} devid=FG800C3912801080 logid=0004000017 type=traffic subtype=sniffer level=notice vd=root srcip=fe80::20c:29ff:fe77:20d4 srcintf=\"port3\" dstip=ff02::1:ff77:20d4 dstintf=\"port3\" sessionid=408903 proto=58 action=accept policyid=2 dstcountry=\"Reserved\" srccountry=\"Reserved\" trandisp=snat transip=:: transport=0 service=\"icmp6/131/0\" duration=36 sentbyte=0 rcvdbyte=40 sentpkt=0 rcvdpkt=0 appid=16321 app=\"IPv6.ICMP\" appcat=\"Network.Service\" apprisk=elevated applist=\"sniffer-profile\" appact=detected utmaction=allow countapp=1\n")
+        "{{ mark }}date={% now 'utc', '%Y-%m-%d' %} time={% now 'utc', '%H:%M:%S' %} devname={{ host }} devid=FG800C3912801080 logid=0004000017 type=traffic subtype=sniffer level=notice vd=root srcip=fe80::20c:29ff:fe77:20d4 srcintf=\"port3\" dstip=ff02::1:ff77:20d4 dstintf=\"port3\" sessionid=408903 proto=58 action=accept policyid=2 dstcountry=\"Reserved\" srccountry=\"Reserved\" trandisp=snat transip=:: transport=0 service=\"icmp6/131/0\" duration=36 sentbyte=0 rcvdbyte=40 sentpkt=0 rcvdpkt=0 appid=16321 app=\"IPv6.ICMP\" appcat=\"Network.Service\" apprisk=elevated applist=\"sniffer-profile\" appact=detected utmaction=allow countapp=1\n")
     message = mt.render(mark="<13>", host=host)
     sendsingle(message)
 
@@ -58,7 +58,7 @@ def test_fortinet_fgt_utm(record_property, setup_wordlist, setup_splunk):
     host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
 
     mt = env.from_string(
-        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} date={% now 'utc', '%Y-%m-%d' %} time={% now 'utc', '%H:%M:%S' %} devname={{ host }} devid=FGT37D4613800138 logid=0317013312 type=utm subtype=webfilter eventtype=ftgd_allow level=notice vd=root sessionid=1490845588 user=\"\" srcip=172.30.16.119 srcport=53235 srcintf=\"Internal\" dstip=114.112.67.75 dstport=80 dstintf=\"External-SDC\" proto=6 service=HTTP hostname=\"popo.wan.ijinshan.com\" profile=\"scan\" action=passthrough reqtype=direct url=\"/popo/launch?c=cHA9d29vZHMxOTgyQGhvdG1haWwuY29tJnV1aWQ9NDBiNDkyZDRmNzdhNjFmOTNlMjQwMjhiYjE3ZGRlYTYmY29tcGl\" sentbyte=525 rcvdbyte=325 direction=outgoing msg=\"URL belongs to an allowed category in policy\" method=domain cat=52 catdesc=\"Information Technology\"\n")
+        "{{ mark }}date={% now 'utc', '%Y-%m-%d' %} time={% now 'utc', '%H:%M:%S' %} devname={{ host }} devid=FGT37D4613800138 logid=0317013312 type=utm subtype=webfilter eventtype=ftgd_allow level=notice vd=root sessionid=1490845588 user=\"\" srcip=172.30.16.119 srcport=53235 srcintf=\"Internal\" dstip=114.112.67.75 dstport=80 dstintf=\"External-SDC\" proto=6 service=HTTP hostname=\"popo.wan.ijinshan.com\" profile=\"scan\" action=passthrough reqtype=direct url=\"/popo/launch?c=cHA9d29vZHMxOTgyQGhvdG1haWwuY29tJnV1aWQ9NDBiNDkyZDRmNzdhNjFmOTNlMjQwMjhiYjE3ZGRlYTYmY29tcGl\" sentbyte=525 rcvdbyte=325 direction=outgoing msg=\"URL belongs to an allowed category in policy\" method=domain cat=52 catdesc=\"Information Technology\"\n")
     message = mt.render(mark="<13>", host=host)
     sendsingle(message)
 
diff --git a/tests/test_symantec_proxy.py b/tests/test_symantec_proxy.py
new file mode 100644
index 0000000..8d84736
--- /dev/null
+++ b/tests/test_symantec_proxy.py
@@ -0,0 +1,34 @@
+# Copyright 2019 Splunk, Inc.
+#
+# Use of this source code is governed by a BSD-2-clause-style
+# license that can be found in the LICENSE-BSD2 file or at
+# https://opensource.org/licenses/BSD-2-Clause
+import random
+
+from jinja2 import Environment
+
+from .sendmessage import *
+from .splunkutils import *
+
+env = Environment(extensions=['jinja2_time.TimeExtension'])
+# <134>1 2019-08-21T17:42:08.000z "sample_logs bluecoat[0]:SPLV5.1 c-ip=192.0.0.6 cs-bytes=6269 cs-categories="unavailable" cs-host=gg.hhh.iii.com cs-ip=192.0.0.6 cs-method=GET cs-uri-path=/Sample/abc-xyz-01.pqr_sample_Internal.crt/MFAwTqADAgEAMEcwRTBDMAkGBSsOAwIaBQAEFOoaVMtyzC9gObESY9g1eXf1VM8VBBTl1mBq2WFf4cYqBI6c08kr4S302gIKUCIZdgAAAAAnQA%3D%3D cs-uri-port=8000 cs-uri-scheme=http cs-User-Agent="ocspd/1.0.3" cs-username=user4 clientduration=0 rs-status=0 s-action=TCP_HIT s-ip=10.0.0.6 serveripservice.name="Explicit HTTP" service.group="Standard" s-supplier-ip=10.0.0.6 s-supplier-name=gg.hhh.iii.com sc-bytes=9469 sc-filter-result=OBSERVED sc-status=200 time-taken=20 x-bluecoat-appliance-name="10.0.0.6-sample_logs" x-bluecoat-appliance-primary-address=10.0.0.6 x-bluecoat-proxy-primary-address=10.0.0.6 x-bluecoat-transaction-uuid=35d24c931c0erecta-0003000012161a77e70-00042100041002145cc859ed c-url="http://randomserver:8000/en-US/app/examples/"
+def test_bluecoatproxySG_kv(record_property, setup_wordlist, setup_splunk):
+    host = "{}-{}".format(random.choice(setup_wordlist), random.choice(setup_wordlist))
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%Y-%m-%dT%H:%M:%SZ' %} {{host}} bluecoat[0]: SPLV5.1 c-ip=192.0.0.6 cs-bytes=6269 cs-categories=\"unavailable\" cs-host=gg.hhh.iii.com cs-ip=192.0.0.6 cs-method=GET cs-uri-path=/Sample/abc-xyz-01.pqr_sample_Internal.crt/MFAwTqADAgEAMEcwRTBDMAkGBSsOAwIaBQAEFOoaVMtyzC9gObESY9g1eXf1VM8VBBTl1mBq2WFf4cYqBI6c08kr4S302gIKUCIZdgAAAAAnQA%3D%3D cs-uri-port=8000 cs-uri-scheme=http cs-User-Agent=\"ocspd/1.0.3\" cs-username=user4 clientduration=0 rs-status=0 s-action=TCP_HIT s-ip=10.0.0.6 serveripservice.name=\"Explicit HTTP\" service.group=\"Standard\" s-supplier-ip=10.0.0.6 s-supplier-name=gg.hhh.iii.com sc-bytes=9469 sc-filter-result=OBSERVED sc-status=200 time-taken=20 x-bluecoat-appliance-name=\"10.0.0.6-sample_logs\" x-bluecoat-appliance-primary-address=10.0.0.6 x-bluecoat-proxy-primary-address=10.0.0.6 x-bluecoat-transaction-uuid=35d24c931c0erecta-0003000012161a77e70-00042100041002145cc859ed c-url=\"http://randomserver:8000/en-US/app/examples/\"")
+    message = mt.render(mark="<134>", host=host)
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"bluecoat:proxysg:access:kv\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+
+#

From baae02e72d18c802930cdf8df23de79cd204c25a Mon Sep 17 00:00:00 2001
From: mbonsack <mbonsack@splunk.com>
Date: Mon, 26 Aug 2019 14:23:43 -0700
Subject: [PATCH 51/83] add cisco nx-os filter (#62)

---
 .idea/misc.xml                                |  4 +-
 .idea/splunk-connect-for-syslog.iml           |  4 +-
 .../conf.d/conflib/vendor_cisco/nx-os.conf    |  3 +
 .../log_paths/p_rfc3164-cisco-nx-os.conf      | 14 +++++
 package/etc/context-local/splunk_index.csv    |  2 +
 .../vendor_product_by_source.conf             |  4 ++
 .../vendor_product_by_source.csv              |  3 +-
 tests/test_cisco_nx_os.py                     | 55 +++++++++++++++++++
 8 files changed, 84 insertions(+), 5 deletions(-)
 create mode 100644 package/etc/conf.d/conflib/vendor_cisco/nx-os.conf
 create mode 100644 package/etc/conf.d/log_paths/p_rfc3164-cisco-nx-os.conf
 create mode 100644 tests/test_cisco_nx_os.py

diff --git a/.idea/misc.xml b/.idea/misc.xml
index 10f4f51..7e25d8b 100644
--- a/.idea/misc.xml
+++ b/.idea/misc.xml
@@ -3,8 +3,8 @@
   <component name="JavaScriptSettings">
     <option name="languageLevel" value="ES6" />
   </component>
-  <component name="ProjectRootManager" version="2" project-jdk-name="Remote Python 3.7.4 Docker Compose (test at [/Users/rfaircloth/Documents/GitHub/splunk-connect-for-syslog/docker-compose.yml])" project-jdk-type="Python SDK" />
+  <component name="ProjectRootManager" version="2" project-jdk-name="Remote Python 3.7.4 Docker Compose (test at [/Users/mbonsack/Splunk/SE_Tools/syslog/SC4S/splunk-connect-for-syslog/docker-compose.yml])" project-jdk-type="Python SDK" />
   <component name="PythonCompatibilityInspectionAdvertiser">
     <option name="version" value="3" />
   </component>
-</project>
+</project>
\ No newline at end of file
diff --git a/.idea/splunk-connect-for-syslog.iml b/.idea/splunk-connect-for-syslog.iml
index 3b1d69b..14d7789 100644
--- a/.idea/splunk-connect-for-syslog.iml
+++ b/.idea/splunk-connect-for-syslog.iml
@@ -2,7 +2,7 @@
 <module type="PYTHON_MODULE" version="4">
   <component name="NewModuleRootManager">
     <content url="file://$MODULE_DIR$" />
-    <orderEntry type="jdk" jdkName="Remote Python 3.7.4 Docker Compose (test at [/Users/rfaircloth/Documents/GitHub/splunk-connect-for-syslog/docker-compose.yml])" jdkType="Python SDK" />
+    <orderEntry type="jdk" jdkName="Remote Python 3.7.4 Docker Compose (test at [/Users/mbonsack/Splunk/SE_Tools/syslog/SC4S/splunk-connect-for-syslog/docker-compose.yml])" jdkType="Python SDK" />
     <orderEntry type="sourceFolder" forTests="false" />
   </component>
   <component name="TemplatesService">
@@ -16,4 +16,4 @@
     <option name="projectConfiguration" value="pytest" />
     <option name="PROJECT_TEST_RUNNER" value="pytest" />
   </component>
-</module>
+</module>
\ No newline at end of file
diff --git a/package/etc/conf.d/conflib/vendor_cisco/nx-os.conf b/package/etc/conf.d/conflib/vendor_cisco/nx-os.conf
new file mode 100644
index 0000000..3c8192b
--- /dev/null
+++ b/package/etc/conf.d/conflib/vendor_cisco/nx-os.conf
@@ -0,0 +1,3 @@
+filter f_cisco_nx-os {
+    match("cisco_nx-os", value("fields.sc4s_vendor_product") type(glob) );
+};
\ No newline at end of file
diff --git a/package/etc/conf.d/log_paths/p_rfc3164-cisco-nx-os.conf b/package/etc/conf.d/log_paths/p_rfc3164-cisco-nx-os.conf
new file mode 100644
index 0000000..025ba55
--- /dev/null
+++ b/package/etc/conf.d/log_paths/p_rfc3164-cisco-nx-os.conf
@@ -0,0 +1,14 @@
+log {
+
+    source(s_default-ports);
+    filter(f_cisco_nx-os);
+
+    parser {
+            p_add_context_splunk(key("cisco:nx-os"));
+    };
+    rewrite {
+        r_set_splunk(template("t_standard"))
+    };
+    destination(d_hec);  #--HEC--
+    flags(flow-control);
+};
\ No newline at end of file
diff --git a/package/etc/context-local/splunk_index.csv b/package/etc/context-local/splunk_index.csv
index c1167c5..58a2010 100644
--- a/package/etc/context-local/splunk_index.csv
+++ b/package/etc/context-local/splunk_index.csv
@@ -4,6 +4,8 @@ cisco:asa,index,main
 cisco:asa,sourcetype,cisco:asa
 cisco:ios,index,main
 cisco:ios,sourcetype,cisco:ios
+cisco:nx-os,index,main
+cisco:nx-os,sourcetype,cisco:nx-os
 fgt_event,sourcetype,fgt_event
 fgt_event,index,main
 fgt_log,sourcetype,fgt_log
diff --git a/package/etc/context-local/vendor_product_by_source.conf b/package/etc/context-local/vendor_product_by_source.conf
index 2830c3b..215d5f6 100644
--- a/package/etc/context-local/vendor_product_by_source.conf
+++ b/package/etc/context-local/vendor_product_by_source.conf
@@ -22,4 +22,8 @@ filter f_juniper_idp {
 filter f_juniper_netscreen {
     host("jnpns-*" type(glob) )
     or match("juniper_netscreen" value("fields.sc4s_presume"))
+};
+filter f_cisco_nx-os {
+    host("csconx-*" type(glob) )
+    or match("cisco_nx-os" value("fields.sc4s_presume"))
 };
\ No newline at end of file
diff --git a/package/etc/context-local/vendor_product_by_source.csv b/package/etc/context-local/vendor_product_by_source.csv
index 0d9e6c0..e04b149 100644
--- a/package/etc/context-local/vendor_product_by_source.csv
+++ b/package/etc/context-local/vendor_product_by_source.csv
@@ -2,4 +2,5 @@ f_test_test,sc4s_vendor_product,"test_test"
 f_juniper_nsm,sc4s_vendor_product,"juniper_nsm"
 f_juniper_nsm_idp,sc4s_vendor_product,"juniper_nsm_idp"
 f_juniper_idp,sc4s_vendor_product,"juniper_idp"
-f_juniper_netscreen,sc4s_vendor_product,"juniper_netscreen"
\ No newline at end of file
+f_juniper_netscreen,sc4s_vendor_product,"juniper_netscreen"
+f_cisco_nx-os,sc4s_vendor_product,"cisco_nx-os"
\ No newline at end of file
diff --git a/tests/test_cisco_nx_os.py b/tests/test_cisco_nx_os.py
new file mode 100644
index 0000000..d44e009
--- /dev/null
+++ b/tests/test_cisco_nx_os.py
@@ -0,0 +1,55 @@
+# Copyright 2019 Splunk, Inc.
+#
+# Use of this source code is governed by a BSD-2-clause-style
+# license that can be found in the LICENSE-BSD2 file or at
+# https://opensource.org/licenses/BSD-2-Clause
+
+from jinja2 import Environment
+
+from .sendmessage import *
+from .splunkutils import *
+
+env = Environment(extensions=['jinja2_time.TimeExtension'])
+
+# Nov 1 14:07:58 excal-113 %MODULE-5-MOD_OK: Module 1 is online
+def test_cisco_nx_os(record_property, setup_wordlist, get_host_key, setup_splunk):
+    host = get_host_key
+
+    mt = env.from_string(
+        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} csconx-{{ host }} %MODULE-5-MOD_OK: Module 1 is online")
+    message = mt.render(mark="<111>", host=host)
+
+    sendsingle(message)
+
+    st = env.from_string("search index=main host=\"csconx-{{ host }}\" sourcetype=\"cisco:nx-os\" | head 2")
+    search = st.render(host=host)
+
+    resultCount, eventCount = splunk_single(setup_splunk, search)
+
+    record_property("host", host)
+    record_property("resultCount", resultCount)
+    record_property("message", message)
+
+    assert resultCount == 1
+
+# Nov 1 14:07:58 excal-113 %MODULE-5-MOD_OK: Module 1 is online
+# @pytest.mark.xfail
+#def test_cisco_nx_os_singleport(record_property, setup_wordlist, get_host_key, setup_splunk):
+#    host = get_host_key
+#
+#    mt = env.from_string(
+#        "{{ mark }} {% now 'utc', '%b %d %H:%M:%S' %} {{ host }} %MODULE-5-MOD_OK: Module 1 is online")
+#    message = mt.render(mark="<23>", host=host)
+#
+#    sendsingle(message, host="sc4s-nx-os")
+#
+#    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"cisco:nx-o\" | head 2")
+#    search = st.render(host=host)
+#
+#    resultCount, eventCount = splunk_single(setup_splunk, search)
+#
+#    record_property("host", host)
+#    record_property("resultCount", resultCount)
+#    record_property("message", message)
+#
+#    assert resultCount == 1
\ No newline at end of file

From 18f3bd2447962047c245a2a588aa2667ec354534 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <35384120+rfaircloth-splunk@users.noreply.github.com>
Date: Mon, 26 Aug 2019 19:16:39 -0400
Subject: [PATCH 52/83] Feature/testmultiindex (#63)

* Update CI to support index specific tests
---
 .circleci/config.yml                          |  3 ++
 docker-compose-ci.yml                         |  4 +-
 package/etc/context-local/splunk_index.csv    | 46 +++++++++----------
 .../apps}/SA-syslog-ng/default/indexes.conf   | 21 +++++++++
 test-with-compose.sh                          |  5 +-
 tests/test_cisco_asa.py                       |  4 +-
 tests/test_cisco_ios.py                       |  2 +-
 tests/test_fortinet_ngfw.py                   |  6 +--
 tests/test_juniper.py                         |  8 ++--
 tests/test_juniper_junos_rfc3164.py           |  8 ++--
 tests/test_juniper_junos_rfc5124.py           |  6 +--
 tests/test_palo_alto.py                       |  4 +-
 tests/test_symantec_proxy.py                  |  2 +-
 13 files changed, 74 insertions(+), 45 deletions(-)
 rename splunk/{ => etc/apps}/SA-syslog-ng/default/indexes.conf (53%)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 69f02a8..89d1e1f 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -120,9 +120,12 @@ jobs:
             docker container create --name dummy \
                     -v sc4s-tests:/work/tests \
                     -v sc4s-results:/work/test-results \
+                    -v splunk-etc:/work/splunk-etc \
                     registry.access.redhat.com/ubi7/ubi
             docker cp tests/ dummy:/work/tests/
+            docker cp ./splunk/etc/* dummy:/work/splunk-etc/
             docker rm dummy
+
       - run:
           name: Docker Compose build
           command: |
diff --git a/docker-compose-ci.yml b/docker-compose-ci.yml
index fec924c..26eced6 100644
--- a/docker-compose-ci.yml
+++ b/docker-compose-ci.yml
@@ -79,7 +79,7 @@ services:
       - SPLUNKBASE_USERNAME=${SPLUNKBASE_USERNAME}
       - SPLUNKBASE_PASSWORD=${SPLUNKBASE_PASSWORD}
     volumes:
-      - ./splunk/SA-syslog-ng:/opt/splunk/etc/apps/SA-syslog-ng
+      - splunk-etc:/opt/splunk/etc
 #    logging:
 #      driver: splunk
 #      options:
@@ -93,3 +93,5 @@ volumes:
     external: true
   sc4s-results:
     external: true
+  splunk-etc:
+    external: true
\ No newline at end of file
diff --git a/package/etc/context-local/splunk_index.csv b/package/etc/context-local/splunk_index.csv
index 58a2010..4f98d23 100644
--- a/package/etc/context-local/splunk_index.csv
+++ b/package/etc/context-local/splunk_index.csv
@@ -1,50 +1,50 @@
-bluecoat:proxysg:access:kv,index,main
+bluecoat:proxysg:access:kv,index,netproxy
 bluecoat:proxysg:access:kv,sourcetype,bluecoat:proxysg:access:kv
-cisco:asa,index,main
+cisco:asa,index,netfw
 cisco:asa,sourcetype,cisco:asa
-cisco:ios,index,main
+cisco:ios,index,netops
 cisco:ios,sourcetype,cisco:ios
 cisco:nx-os,index,main
 cisco:nx-os,sourcetype,cisco:nx-os
 fgt_event,sourcetype,fgt_event
-fgt_event,index,main
+fgt_event,index,netops
 fgt_log,sourcetype,fgt_log
-fgt_log,index,main
+fgt_log,index,netops
 fgt_traffic,sourcetype,fgt_traffic
-fgt_traffic,index,main
+fgt_traffic,index,netfw
 fgt_utm,sourcetype,fgt_utm
-fgt_utm,index,main
+fgt_utm,index,netids
 juniper:structured,index,main
 juniper:structured,sourcetype,juniper:structured
-juniper:junos:firewall:structured,index,main
+juniper:junos:firewall:structured,index,netfw
 juniper:junos:firewall:structured,sourcetype,juniper:junos:firewall:structured
-juniper:junos:idp:structured,index,main
+juniper:junos:idp:structured,index,netids
 juniper:junos:idp:structured,sourcetype,juniper:junos:idp:structured
-juniper:junos:firewall,index,main
+juniper:junos:firewall,index,netfw
 juniper:junos:firewall,sourcetype,juniper:junos:firewall
-juniper:junos:idp,index,main
+juniper:junos:idp,index,netids
 juniper:junos:idp,sourcetype,juniper:junos:idp
-juniper:nsm:idp,index,main
+juniper:nsm:idp,index,netids
 juniper:nsm:idp,sourcetype,juniper:nsm:idp
-juniper:sslvpn,index,main
+juniper:sslvpn,index,netfw
 juniper:sslvpn,sourcetype,juniper:sslvpn
-juniper:netscreen,index,main
+juniper:netscreen,index,netfw
 juniper:netscreen,sourcetype,netscreen:firewall
-juniper:idp,index,main
+juniper:idp,index,netids
 juniper:idp,sourcetype,juniper:idp
-juniper:idp:structured,index,main
+juniper:idp:structured,index,netids
 juniper:idp:structured,sourcetype,juniper:idp:structured
-juniper:nsm,index,main
+juniper:nsm,index,netids
 juniper:nsm,sourcetype,juniper:nsm
-juniper:legacy,index,main
+juniper:legacy,index,netfw
 juniper:legacy,sourcetype,juniper:legacy
-pan:traffic,index,main
-pan:threat,index,main
-pan:system,index,main
-pan:config,index,main
+pan:traffic,index,netfw
+pan:threat,index,netproxy
+pan:system,index,netops
+pan:config,index,netops
 pan:hipwatch,index,main
 pan:correlation,index,main
-pan:userid,index,main
+pan:userid,index,netops
 pan:unknown,index,main
 pan:traffic,sourcetype,pan:traffic
 pan:threat,sourcetype,pan:threat
diff --git a/splunk/SA-syslog-ng/default/indexes.conf b/splunk/etc/apps/SA-syslog-ng/default/indexes.conf
similarity index 53%
rename from splunk/SA-syslog-ng/default/indexes.conf
rename to splunk/etc/apps/SA-syslog-ng/default/indexes.conf
index e795078..f8dbfb2 100644
--- a/splunk/SA-syslog-ng/default/indexes.conf
+++ b/splunk/etc/apps/SA-syslog-ng/default/indexes.conf
@@ -19,3 +19,24 @@ thawedPath = $SPLUNK_DB/test/thaweddb
 homePath   = $SPLUNK_DB/test2/db
 coldPath   = $SPLUNK_DB/test2/colddb
 thawedPath = $SPLUNK_DB/test2/thaweddb
+
+
+[netfw]
+homePath   = $SPLUNK_DB/netfw/db
+coldPath   = $SPLUNK_DB/netfw/colddb
+thawedPath = $SPLUNK_DB/netfw/thaweddb
+
+[netids]
+homePath   = $SPLUNK_DB/netids/db
+coldPath   = $SPLUNK_DB/netids/colddb
+thawedPath = $SPLUNK_DB/netids/thaweddb
+
+[netops]
+homePath   = $SPLUNK_DB/netops/db
+coldPath   = $SPLUNK_DB/netops/colddb
+thawedPath = $SPLUNK_DB/netops/thaweddb
+
+[netproxy]
+homePath   = $SPLUNK_DB/netproxy/db
+coldPath   = $SPLUNK_DB/netproxy/colddb
+thawedPath = $SPLUNK_DB/netproxy/thaweddb
\ No newline at end of file
diff --git a/test-with-compose.sh b/test-with-compose.sh
index 3f08cbf..b569b7f 100755
--- a/test-with-compose.sh
+++ b/test-with-compose.sh
@@ -8,16 +8,19 @@
 mkdir test-results
 docker volume create sc4s-tests
 docker volume create sc4s-results
+docker volume create splunk-etc
 
 docker container create --name dummy \
         -v sc4s-tests:/work/tests \
         -v sc4s-results:/work/test-results \
+        -v splunk-etc:/work/splunk-etc \
         registry.access.redhat.com/ubi7/ubi
 docker cp tests/ dummy:/work/tests/
+docker cp ./splunk/etc/* dummy:/work/splunk-etc/
 docker rm dummy
 
 docker-compose build
-docker-compose up  --abort-on-container-exit --exit-code-from test
+docker-compose up --abort-on-container-exit --exit-code-from test
 
 docker container create --name dummy \
         -v sc4s-tests:/work/tests \
diff --git a/tests/test_cisco_asa.py b/tests/test_cisco_asa.py
index 65d122e..7203f32 100644
--- a/tests/test_cisco_asa.py
+++ b/tests/test_cisco_asa.py
@@ -25,7 +25,7 @@ def test_cisco_asa_tradditional(record_property, setup_wordlist, setup_splunk):
 
     sendsingle(message)
 
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"cisco:asa\" \"%ASA-3-003164\" | head 2")
+    st = env.from_string("search index=netfw host=\"{{ host }}\" sourcetype=\"cisco:asa\" \"%ASA-3-003164\" | head 2")
     search = st.render(host=host)
 
     resultCount, eventCount = splunk_single(setup_splunk, search)
@@ -47,7 +47,7 @@ def test_cisco_asa_rfc5424(record_property, setup_wordlist, setup_splunk):
 
     sendsingle(message)
 
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"cisco:asa\" \"%ASA-3-005424\"| head 2")
+    st = env.from_string("search index=netfw host=\"{{ host }}\" sourcetype=\"cisco:asa\" \"%ASA-3-005424\"| head 2")
     search = st.render(host=host)
 
     resultCount, eventCount = splunk_single(setup_splunk, search)
diff --git a/tests/test_cisco_ios.py b/tests/test_cisco_ios.py
index ca60605..13ec3f5 100644
--- a/tests/test_cisco_ios.py
+++ b/tests/test_cisco_ios.py
@@ -22,7 +22,7 @@ def test_cisco_ios(record_property, setup_wordlist, get_host_key, setup_splunk):
 
     sendsingle(message)
 
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"cisco:ios\" | head 2")
+    st = env.from_string("search index=netops host=\"{{ host }}\" sourcetype=\"cisco:ios\" | head 2")
     search = st.render(host=host)
 
     resultCount, eventCount = splunk_single(setup_splunk, search)
diff --git a/tests/test_fortinet_ngfw.py b/tests/test_fortinet_ngfw.py
index 3437f9e..f68f13a 100644
--- a/tests/test_fortinet_ngfw.py
+++ b/tests/test_fortinet_ngfw.py
@@ -22,7 +22,7 @@ def test_fortinet_fgt_event(record_property, setup_wordlist, setup_splunk):
 
     sendsingle(message)
 
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"fgt_event\" | head 2")
+    st = env.from_string("search index=netops host=\"{{ host }}\" sourcetype=\"fgt_event\" | head 2")
     search = st.render(host=host)
 
     resultCount, eventCount = splunk_single(setup_splunk, search)
@@ -42,7 +42,7 @@ def test_fortinet_fgt_traffic(record_property, setup_wordlist, setup_splunk):
     message = mt.render(mark="<13>", host=host)
     sendsingle(message)
 
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"fgt_traffic\" | head 2")
+    st = env.from_string("search index=netfw host=\"{{ host }}\" sourcetype=\"fgt_traffic\" | head 2")
     search = st.render(host=host)
 
     resultCount, eventCount = splunk_single(setup_splunk, search)
@@ -62,7 +62,7 @@ def test_fortinet_fgt_utm(record_property, setup_wordlist, setup_splunk):
     message = mt.render(mark="<13>", host=host)
     sendsingle(message)
 
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"fgt_utm\" | head 2")
+    st = env.from_string("search index=netids host=\"{{ host }}\" sourcetype=\"fgt_utm\" | head 2")
     search = st.render(host=host)
 
     resultCount, eventCount = splunk_single(setup_splunk, search)
diff --git a/tests/test_juniper.py b/tests/test_juniper.py
index 102dca3..c4bdb81 100644
--- a/tests/test_juniper.py
+++ b/tests/test_juniper.py
@@ -22,7 +22,7 @@ def test_juniper_nsm_standard(record_property, setup_wordlist, get_host_key, set
 
     sendsingle(message)
 
-    st = env.from_string("search index=main host=\"jnpnsm-{{ host }}\" sourcetype=\"juniper:nsm\" | head 2")
+    st = env.from_string("search index=netids host=\"jnpnsm-{{ host }}\" sourcetype=\"juniper:nsm\" | head 2")
     search = st.render(host=host)
 
     resultCount, eventCount = splunk_single(setup_splunk, search)
@@ -44,7 +44,7 @@ def test_juniper_nsm_idp_standard(record_property, setup_wordlist, get_host_key,
 
     sendsingle(message)
 
-    st = env.from_string("search index=main host=\"jnpnsmidp-{{ host }}\" sourcetype=\"juniper:nsm:idp\" | head 2")
+    st = env.from_string("search index=netids host=\"jnpnsmidp-{{ host }}\" sourcetype=\"juniper:nsm:idp\" | head 2")
     search = st.render(host=host)
 
     resultCount, eventCount = splunk_single(setup_splunk, search)
@@ -66,7 +66,7 @@ def test_juniper_netscreen(record_property, setup_wordlist, get_host_key, setup_
 
     sendsingle(message)
 
-    st = env.from_string("search index=main host=\"jnpns-{{ host }}\" sourcetype=\"netscreen:firewall\" | head 2")
+    st = env.from_string("search index=netfw host=\"jnpns-{{ host }}\" sourcetype=\"netscreen:firewall\" | head 2")
     search = st.render(host=host)
 
     resultCount, eventCount = splunk_single(setup_splunk, search)
@@ -88,7 +88,7 @@ def test_juniper_netscreen_singleport(record_property, setup_wordlist, get_host_
 
     sendsingle(message, host="sc4s-juniper")
 
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"netscreen:firewall\" | head 2")
+    st = env.from_string("search index=netfw host=\"{{ host }}\" sourcetype=\"netscreen:firewall\" | head 2")
     search = st.render(host=host)
 
     resultCount, eventCount = splunk_single(setup_splunk, search)
diff --git a/tests/test_juniper_junos_rfc3164.py b/tests/test_juniper_junos_rfc3164.py
index 5af94b7..3ec13ff 100644
--- a/tests/test_juniper_junos_rfc3164.py
+++ b/tests/test_juniper_junos_rfc3164.py
@@ -20,7 +20,7 @@ def test_juniper_utm_standard(record_property, setup_wordlist, get_host_key, set
 
     sendsingle(message)
 
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:junos:firewall\" | head 2")
+    st = env.from_string("search index=netfw host=\"{{ host }}\" sourcetype=\"juniper:junos:firewall\" | head 2")
     search = st.render(host=host)
 
     resultCount, eventCount = splunk_single(setup_splunk, search)
@@ -41,7 +41,7 @@ def test_juniper_firewall_standard(record_property, setup_wordlist, get_host_key
 
     sendsingle(message)
 
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:junos:firewall\" | head 2")
+    st = env.from_string("search index=netfw host=\"{{ host }}\" sourcetype=\"juniper:junos:firewall\" | head 2")
     search = st.render(host=host)
 
     resultCount, eventCount = splunk_single(setup_splunk, search)
@@ -63,7 +63,7 @@ def test_juniper_sslvpn_standard(record_property, setup_wordlist, get_host_key,
 
     sendsingle(message)
 
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:sslvpn\" | head 2")
+    st = env.from_string("search index=netfw host=\"{{ host }}\" sourcetype=\"juniper:sslvpn\" | head 2")
     search = st.render(host=host)
 
     resultCount, eventCount = splunk_single(setup_splunk, search)
@@ -85,7 +85,7 @@ def test_juniper_idp_standard(record_property, setup_wordlist, get_host_key, set
 
     sendsingle(message)
 
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:junos:idp\" | head 2")
+    st = env.from_string("search index=netids host=\"{{ host }}\" sourcetype=\"juniper:junos:idp\" | head 2")
     search = st.render(host=host)
 
     resultCount, eventCount = splunk_single(setup_splunk, search)
diff --git a/tests/test_juniper_junos_rfc5124.py b/tests/test_juniper_junos_rfc5124.py
index 9ad8b22..b9ff921 100644
--- a/tests/test_juniper_junos_rfc5124.py
+++ b/tests/test_juniper_junos_rfc5124.py
@@ -44,7 +44,7 @@ def test_juniper_junos_idp_structured(record_property, setup_wordlist, get_host_
 
     sendsingle(message)
 
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:junos:idp:structured\" | head 2")
+    st = env.from_string("search index=netids host=\"{{ host }}\" sourcetype=\"juniper:junos:idp:structured\" | head 2")
     search = st.render(host=host)
 
     resultCount, eventCount = splunk_single(setup_splunk, search)
@@ -69,7 +69,7 @@ def test_juniper_idp_structured(record_property, setup_wordlist, get_host_key, s
 
     sendsingle(message)
 
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:idp:structured\" | head 2")
+    st = env.from_string("search index=netids host=\"{{ host }}\" sourcetype=\"juniper:idp:structured\" | head 2")
     search = st.render(host=host)
 
     resultCount, eventCount = splunk_single(setup_splunk, search)
@@ -91,7 +91,7 @@ def test_juniper_junos_fw_structured(record_property, setup_wordlist, get_host_k
 
     sendsingle(message)
 
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"juniper:junos:firewall:structured\" | head 2")
+    st = env.from_string("search index=netfw host=\"{{ host }}\" sourcetype=\"juniper:junos:firewall:structured\" | head 2")
     search = st.render(host=host)
 
     resultCount, eventCount = splunk_single(setup_splunk, search)
diff --git a/tests/test_palo_alto.py b/tests/test_palo_alto.py
index 62470b7..2d40c8f 100644
--- a/tests/test_palo_alto.py
+++ b/tests/test_palo_alto.py
@@ -22,7 +22,7 @@ def test_palo_alto_traffic(record_property, setup_wordlist, setup_splunk):
 
     sendsingle(message)
 
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"pan:traffic\" | head 2")
+    st = env.from_string("search index=netfw host=\"{{ host }}\" sourcetype=\"pan:traffic\" | head 2")
     search = st.render(host=host)
 
     resultCount, eventCount = splunk_single(setup_splunk, search)
@@ -44,7 +44,7 @@ def test_palo_alto_threat(record_property, setup_wordlist, setup_splunk):
 
     sendsingle(message)
 
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"pan:threat\" | head 2")
+    st = env.from_string("search index=netproxy host=\"{{ host }}\" sourcetype=\"pan:threat\" | head 2")
     search = st.render(host=host)
 
     resultCount, eventCount = splunk_single(setup_splunk, search)
diff --git a/tests/test_symantec_proxy.py b/tests/test_symantec_proxy.py
index 8d84736..0dddfac 100644
--- a/tests/test_symantec_proxy.py
+++ b/tests/test_symantec_proxy.py
@@ -20,7 +20,7 @@ def test_bluecoatproxySG_kv(record_property, setup_wordlist, setup_splunk):
     message = mt.render(mark="<134>", host=host)
     sendsingle(message)
 
-    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"bluecoat:proxysg:access:kv\" | head 2")
+    st = env.from_string("search index=netproxy host=\"{{ host }}\" sourcetype=\"bluecoat:proxysg:access:kv\" | head 2")
     search = st.render(host=host)
 
     resultCount, eventCount = splunk_single(setup_splunk, search)

From c6a16fcaa97f1940d37c48347d4f7874d3ab8175 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <35384120+rfaircloth-splunk@users.noreply.github.com>
Date: Mon, 26 Aug 2019 21:29:37 -0400
Subject: [PATCH 53/83] Ensure idea files are not in repo (#65)

---
 .gitignore                          |  8 +-------
 .idea/encodings.xml                 |  4 ----
 .idea/misc.xml                      | 10 ----------
 .idea/modules.xml                   |  8 --------
 .idea/sc4s.iml                      | 13 -------------
 .idea/splunk-connect-for-syslog.iml | 19 -------------------
 .idea/vcs.xml                       |  9 ---------
 7 files changed, 1 insertion(+), 70 deletions(-)
 delete mode 100644 .idea/encodings.xml
 delete mode 100644 .idea/misc.xml
 delete mode 100644 .idea/modules.xml
 delete mode 100644 .idea/sc4s.iml
 delete mode 100644 .idea/splunk-connect-for-syslog.iml
 delete mode 100644 .idea/vcs.xml

diff --git a/.gitignore b/.gitignore
index 68dbac4..59343f4 100644
--- a/.gitignore
+++ b/.gitignore
@@ -378,11 +378,5 @@ fabric.properties
 !/package/scripts/splunkmetrics.sh
 !/package/scripts/
 .ecs
-=======
 /test-results/
-/.idea/workspace.xml
-/.idea/tasks.xml
-!/package/scripts/switch_transport.sh
-!/package/scripts/splunkmetrics.sh
-!/package/scripts/
->>>>>>> master
+/.idea/
\ No newline at end of file
diff --git a/.idea/encodings.xml b/.idea/encodings.xml
deleted file mode 100644
index 15a15b2..0000000
--- a/.idea/encodings.xml
+++ /dev/null
@@ -1,4 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project version="4">
-  <component name="Encoding" addBOMForNewFiles="with NO BOM" />
-</project>
\ No newline at end of file
diff --git a/.idea/misc.xml b/.idea/misc.xml
deleted file mode 100644
index 7e25d8b..0000000
--- a/.idea/misc.xml
+++ /dev/null
@@ -1,10 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project version="4">
-  <component name="JavaScriptSettings">
-    <option name="languageLevel" value="ES6" />
-  </component>
-  <component name="ProjectRootManager" version="2" project-jdk-name="Remote Python 3.7.4 Docker Compose (test at [/Users/mbonsack/Splunk/SE_Tools/syslog/SC4S/splunk-connect-for-syslog/docker-compose.yml])" project-jdk-type="Python SDK" />
-  <component name="PythonCompatibilityInspectionAdvertiser">
-    <option name="version" value="3" />
-  </component>
-</project>
\ No newline at end of file
diff --git a/.idea/modules.xml b/.idea/modules.xml
deleted file mode 100644
index 4e16e75..0000000
--- a/.idea/modules.xml
+++ /dev/null
@@ -1,8 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project version="4">
-  <component name="ProjectModuleManager">
-    <modules>
-      <module fileurl="file://$PROJECT_DIR$/.idea/splunk-connect-for-syslog.iml" filepath="$PROJECT_DIR$/.idea/splunk-connect-for-syslog.iml" />
-    </modules>
-  </component>
-</project>
\ No newline at end of file
diff --git a/.idea/sc4s.iml b/.idea/sc4s.iml
deleted file mode 100644
index bda388e..0000000
--- a/.idea/sc4s.iml
+++ /dev/null
@@ -1,13 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<module type="PYTHON_MODULE" version="4">
-  <component name="NewModuleRootManager">
-    <content url="file://$MODULE_DIR$">
-      <excludeFolder url="file://$MODULE_DIR$/venv" />
-    </content>
-    <orderEntry type="jdk" jdkName="Python 3.7 (splunk-connect-for-syslog)" jdkType="Python SDK" />
-    <orderEntry type="sourceFolder" forTests="false" />
-  </component>
-  <component name="TestRunnerService">
-    <option name="PROJECT_TEST_RUNNER" value="Unittests" />
-  </component>
-</module>
\ No newline at end of file
diff --git a/.idea/splunk-connect-for-syslog.iml b/.idea/splunk-connect-for-syslog.iml
deleted file mode 100644
index 14d7789..0000000
--- a/.idea/splunk-connect-for-syslog.iml
+++ /dev/null
@@ -1,19 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<module type="PYTHON_MODULE" version="4">
-  <component name="NewModuleRootManager">
-    <content url="file://$MODULE_DIR$" />
-    <orderEntry type="jdk" jdkName="Remote Python 3.7.4 Docker Compose (test at [/Users/mbonsack/Splunk/SE_Tools/syslog/SC4S/splunk-connect-for-syslog/docker-compose.yml])" jdkType="Python SDK" />
-    <orderEntry type="sourceFolder" forTests="false" />
-  </component>
-  <component name="TemplatesService">
-    <option name="TEMPLATE_FOLDERS">
-      <list>
-        <option value="$MODULE_DIR$/package/etc/conf.d/templates" />
-      </list>
-    </option>
-  </component>
-  <component name="TestRunnerService">
-    <option name="projectConfiguration" value="pytest" />
-    <option name="PROJECT_TEST_RUNNER" value="pytest" />
-  </component>
-</module>
\ No newline at end of file
diff --git a/.idea/vcs.xml b/.idea/vcs.xml
deleted file mode 100644
index 53b20c8..0000000
--- a/.idea/vcs.xml
+++ /dev/null
@@ -1,9 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project version="4">
-  <component name="VcsDirectoryMappings">
-    <mapping directory="$PROJECT_DIR$" vcs="Git" />
-    <mapping directory="$PROJECT_DIR$/package/syslog-ng" vcs="Git" />
-    <mapping directory="$PROJECT_DIR$/package/syslog-ng/lib/ivykis" vcs="Git" />
-    <mapping directory="$PROJECT_DIR$/package/syslog-ng/lib/jsonc" vcs="Git" />
-  </component>
-</project>
\ No newline at end of file

From ef63b1b43ba178a917eaddba47d22376cc383576 Mon Sep 17 00:00:00 2001
From: Ryan Faircloth <35384120+rfaircloth-splunk@users.noreply.github.com>
Date: Mon, 26 Aug 2019 21:37:18 -0400
Subject: [PATCH 54/83] Feature/testmultiindex (#66)

Update docker-compose to use volume
---
 docker-compose.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 9edcf82..b0135dc 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -94,7 +94,7 @@ services:
       - SPLUNKBASE_USERNAME=${SPLUNKBASE_USERNAME}
       - SPLUNKBASE_PASSWORD=${SPLUNKBASE_PASSWORD}
     volumes:
-      - ./splunk/SA-syslog-ng:/opt/splunk/etc/apps/SA-syslog-ng
+      - splunk-etc:/opt/splunk/etc
 #    logging:
 #      driver: splunk
 #      options:
@@ -108,3 +108,5 @@ volumes:
     external: true
   sc4s-results:
     external: true
+  splunk-etc:
+    external: true
\ No newline at end of file

From c1c84fe7d9a2b86a01009e1518ac6ed70795ac23 Mon Sep 17 00:00:00 2001
From: mbonsack <mbonsack@splunk.com>
Date: Tue, 27 Aug 2019 05:19:49 -0700
Subject: [PATCH 55/83] Fix/change sourcetype for NX-OS to cisco:ios (#64)

Completes support with docs
---
 docs/sources.md                               | 91 +++++++++++++++----
 .../conf.d/conflib/vendor_cisco/nx-os.conf    |  4 +-
 .../log_paths/p_rfc3164-cisco-nx-os.conf      |  4 +-
 package/etc/context-local/splunk_index.csv    |  4 +-
 .../vendor_product_by_source.conf             |  4 +-
 .../vendor_product_by_source.csv              |  2 +-
 tests/test_cisco_nx_os.py                     |  4 +-
 7 files changed, 85 insertions(+), 28 deletions(-)

diff --git a/docs/sources.md b/docs/sources.md
index d4167ef..24e9d72 100644
--- a/docs/sources.md
+++ b/docs/sources.md
@@ -8,7 +8,7 @@
 | Product Manual | https://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/monitor_syslog.html |
 
 
-## Sourcetypes
+### Sourcetypes
 
 | sourcetype     | notes                                                                                                   |
 |----------------|---------------------------------------------------------------------------------------------------------|
@@ -16,11 +16,11 @@
 | cisco:pix      | Not supported                                                                                           |
 | cisco:fwsm     | Not supported                                                                                           |
 
-## Filter type
+### Filter type
 
 MSG Parse: This filter parses message content
 
-## Setup and Configuration
+### Setup and Configuration
 
 * Install the Splunk Add-on on the search head(s) for the user communities interested in this data source. If SC4S is exclusively used the addon is not required on the indexer.
 * Review and update the splunk_index.csv file and set the index as required.
@@ -31,7 +31,7 @@ MSG Parse: This filter parses message content
     * device-id is hostname and included
     * timestamp is included
 
-## Verification
+### Verification
 
 Use the following search to validate events are present
 
@@ -39,6 +39,63 @@ Use the following search to validate events are present
 index=<asconfigured> sourcetype=cisco:asa
 ```
 
+Verify timestamp, and host values match as expected    
+
+## Product - IOS and NX-OS based equipment
+
+| Ref            | Link                                                                                                    |
+|----------------|---------------------------------------------------------------------------------------------------------|
+| Splunk Add-on  | https://splunkbase.splunk.com/app/1467/                                                                 |
+| IOS Manual     | https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960/software/release/12-2_55_se/configuration/guide/scg_2960/swlog.html |
+| NX-OS Manual   | https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/6-x/system_management/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_System_Management_Configuration_Guide/sm_5syslog.html|
+| Cisco ACI      | https://community.cisco.com/legacyfs/online/attachments/document/technote-aci-syslog_external-v1.pdf |
+| Cisco WLC & AP | https://www.cisco.com/c/en/us/support/docs/wireless/4100-series-wireless-lan-controllers/107252-WLC-Syslog-Server.html#anc8 |
+### Sourcetypes
+
+| sourcetype     | notes                                                                                                   |
+|----------------|---------------------------------------------------------------------------------------------------------|
+| cisco:ios      | This source type is also used for NX-OS, ACI and WLC product lines                                                                                                    |
+
+### Filter type
+
+* Cisco IOS products can be identified by message parsing alone
+* Cisco NX OS, WLC, and ACI products must be identified by host or ip assignment update the filter `f_cisco_nx_os` as required
+
+### Setup and Configuration
+
+* Install the Splunk Add-on on the search head(s) for the user communities interested in this data source. If SC4S is exclusively used the addon is not required on the indexer.
+* Review and update the splunk_index.csv file and set the index as required.
+* IOS Follow vendor configuration steps per Product Manual above ensure:
+    * Ensure a reliable NTP server is set and synced
+    * Log Level is 6 "Informational"
+    * Protocol is TCP/IP
+    * permit-hostdown is on
+    * device-id is hostname and included
+    * timestamp is included
+* NX-OS Follow vendor configuration steps per Product Manual above ensure:
+    * Ensure a reliable NTP server is set and synced
+    * Log Level is 6 "Informational" user may select alternate levels by module based on use cases
+    * Protocol is TCP/IP
+    * device-id is hostname and included
+    * timestamp is included and milisecond accuracy selected
+* ACI Logging configuration of the ACI product often varies by use case. 
+    * Ensure NTP sync is configured and active
+    * Ensure proper host names are configured
+* WLC 
+    * Ensure NTP sync is configured and active
+    * Ensure proper host names are configured
+    * For security use cases per AP logging is required
+
+
+### Verification
+
+Use the following search to validate events are present, for NX-OS, WLC and ACI products ensure each host filter condition is verified
+
+```
+index=<asconfigured> sourcetype=cisco:ios | stats count by host
+```
+
+
 Verify timestamp, and host values match as expected    
 
 # Vendor - Fortinet
@@ -51,7 +108,7 @@ Verify timestamp, and host values match as expected
 | Product Manual | https://docs.fortinet.com/product/fortigate/6.2                                                         |
 
 
-## Sourcetypes
+### Sourcetypes
 
 | sourcetype     | notes                                                                                                   |
 |----------------|---------------------------------------------------------------------------------------------------------|
@@ -60,11 +117,11 @@ Verify timestamp, and host values match as expected
 | fgt_utm        | None                                                                                          |
 | fgt_event      | None 
 
-## Filter type
+### Filter type
 
 MSG Parse: This filter parses message content
 
-## Setup and Configuration
+### Setup and Configuration
 
 * Install the Splunk Add-on on the search head(s) for the user communities interested in this data source. If SC4S is exclusively used the addon is not required on the indexer.
 * Review and update the splunk_index.csv file and set the index as required.
@@ -103,7 +160,7 @@ end
 
 ```
 
-## Verification
+### Verification
 
 An active firewall will generate frequent events, in addition fortigate has the ability to test logging functionality using a build in command
 
@@ -117,7 +174,7 @@ Verify timestamp, and host values match as expected
 index=<asconfigured> (sourcetype=fgt_log OR sourcetype=fgt_traffic OR sourcetype=fgt_utm) 
 ```
 
-###UTM Message type
+### UTM Message type
 
 ![FortiGate UTM message](FortiGate_utm.png)
 
@@ -140,7 +197,7 @@ Verify timestamp, and host values match as expected
 | Product Manual | https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/monitoring/use-syslog-for-monitoring/configure-syslog-monitoring.html                                                         |
 
 
-## Sourcetypes
+### Sourcetypes
 
 | sourcetype     | notes                                                                                                   |
 |----------------|---------------------------------------------------------------------------------------------------------|
@@ -148,11 +205,11 @@ Verify timestamp, and host values match as expected
 | pan:traffic    | None                                                                                         |
 | pan:threat     | None                                                                                          |
 
-## Filter type
+### Filter type
 
 MSG Parse: This filter parses message content
 
-## Setup and Configuration
+### Setup and Configuration
 
 * Install the Splunk Add-on on the search head(s) for the user communities interested in this data source. If SC4S is exclusively used the addon is not required on the indexer.
 * Review and update the splunk_index.csv file and set the index as required.
@@ -161,7 +218,7 @@ MSG Parse: This filter parses message content
     * Select IETF Format
     * Ensure the format of the event is not customized
 
-## Verification
+### Verification
 
 An active firewall will generate frequent events use the following search to validate events are present per source device
 
@@ -179,17 +236,17 @@ index=<asconfigured> sourcetype=pan:*| stats count by host
 | Product Manual | https://support.symantec.com/us/en/article.tech242216.html                                                        |
 
 
-## Sourcetypes
+### Sourcetypes
 
 | sourcetype     | notes                                                                                                   |
 |----------------|---------------------------------------------------------------------------------------------------------|
 | bluecoat:proxysg:access:kv        | Requires version 3.6                                                                                                    |
 
-## Filter type
+### Filter type
 
 MSG Parse: This filter parses message content
 
-## Setup and Configuration
+### Setup and Configuration
 
 * Install the Splunk Add-on on the search head(s) for the user communities interested in this data source. If SC4S is exclusively used the addon is not required on the indexer.
 * Review and update the splunk_index.csv file and set the index as required.
@@ -197,7 +254,7 @@ MSG Parse: This filter parses message content
     * Select TCP or SSL transport option
     * Ensure the format of the event is customized per Splunk documentation
 
-## Verification
+### Verification
 
 An active proxy will generate frequent events use the following search to validate events are present per source device
 
diff --git a/package/etc/conf.d/conflib/vendor_cisco/nx-os.conf b/package/etc/conf.d/conflib/vendor_cisco/nx-os.conf
index 3c8192b..2f9cacc 100644
--- a/package/etc/conf.d/conflib/vendor_cisco/nx-os.conf
+++ b/package/etc/conf.d/conflib/vendor_cisco/nx-os.conf
@@ -1,3 +1,3 @@
-filter f_cisco_nx-os {
-    match("cisco_nx-os", value("fields.sc4s_vendor_product") type(glob) );
+filter f_cisco_nx_os {
+    match("cisco_nx_os", value("fields.sc4s_vendor_product") type(glob) );
 };
\ No newline at end of file
diff --git a/package/etc/conf.d/log_paths/p_rfc3164-cisco-nx-os.conf b/package/etc/conf.d/log_paths/p_rfc3164-cisco-nx-os.conf
index 025ba55..e9f018c 100644
--- a/package/etc/conf.d/log_paths/p_rfc3164-cisco-nx-os.conf
+++ b/package/etc/conf.d/log_paths/p_rfc3164-cisco-nx-os.conf
@@ -1,13 +1,13 @@
 log {
 
     source(s_default-ports);
-    filter(f_cisco_nx-os);
+    filter(f_cisco_nx_os);
 
     parser {
             p_add_context_splunk(key("cisco:nx-os"));
     };
     rewrite {
-        r_set_splunk(template("t_standard"))
+        r_set_splunk(template("t_hdr_msg"))
     };
     destination(d_hec);  #--HEC--
     flags(flow-control);
diff --git a/package/etc/context-local/splunk_index.csv b/package/etc/context-local/splunk_index.csv
index 4f98d23..e3d7f9d 100644
--- a/package/etc/context-local/splunk_index.csv
+++ b/package/etc/context-local/splunk_index.csv
@@ -4,8 +4,8 @@ cisco:asa,index,netfw
 cisco:asa,sourcetype,cisco:asa
 cisco:ios,index,netops
 cisco:ios,sourcetype,cisco:ios
-cisco:nx-os,index,main
-cisco:nx-os,sourcetype,cisco:nx-os
+cisco:nx-os,index,netops
+cisco:nx-os,sourcetype,cisco:ios
 fgt_event,sourcetype,fgt_event
 fgt_event,index,netops
 fgt_log,sourcetype,fgt_log
diff --git a/package/etc/context-local/vendor_product_by_source.conf b/package/etc/context-local/vendor_product_by_source.conf
index 215d5f6..4da1866 100644
--- a/package/etc/context-local/vendor_product_by_source.conf
+++ b/package/etc/context-local/vendor_product_by_source.conf
@@ -23,7 +23,7 @@ filter f_juniper_netscreen {
     host("jnpns-*" type(glob) )
     or match("juniper_netscreen" value("fields.sc4s_presume"))
 };
-filter f_cisco_nx-os {
+filter f_cisco_nx_os {
     host("csconx-*" type(glob) )
-    or match("cisco_nx-os" value("fields.sc4s_presume"))
+    or match("cisco_nx_os" value("fields.sc4s_presume"))
 };
\ No newline at end of file
diff --git a/package/etc/context-local/vendor_product_by_source.csv b/package/etc/context-local/vendor_product_by_source.csv
index e04b149..5193616 100644
--- a/package/etc/context-local/vendor_product_by_source.csv
+++ b/package/etc/context-local/vendor_product_by_source.csv
@@ -3,4 +3,4 @@ f_juniper_nsm,sc4s_vendor_product,"juniper_nsm"
 f_juniper_nsm_idp,sc4s_vendor_product,"juniper_nsm_idp"
 f_juniper_idp,sc4s_vendor_product,"juniper_idp"
 f_juniper_netscreen,sc4s_vendor_product,"juniper_netscreen"
-f_cisco_nx-os,sc4s_vendor_product,"cisco_nx-os"
\ No newline at end of file
+f_cisco_nx_os,sc4s_vendor_product,"cisco_nx_os"
\ No newline at end of file
diff --git a/tests/test_cisco_nx_os.py b/tests/test_cisco_nx_os.py
index d44e009..27b1155 100644
--- a/tests/test_cisco_nx_os.py
+++ b/tests/test_cisco_nx_os.py
@@ -21,7 +21,7 @@ def test_cisco_nx_os(record_property, setup_wordlist, get_host_key, setup_splunk
 
     sendsingle(message)
 
-    st = env.from_string("search index=main host=\"csconx-{{ host }}\" sourcetype=\"cisco:nx-os\" | head 2")
+    st = env.from_string("search index=netops host=\"csconx-{{ host }}\" sourcetype=\"cisco:ios\" | head 2")
     search = st.render(host=host)
 
     resultCount, eventCount = splunk_single(setup_splunk, search)
@@ -43,7 +43,7 @@ def test_cisco_nx_os(record_property, setup_wordlist, get_host_key, setup_splunk
 #
 #    sendsingle(message, host="sc4s-nx-os")
 #
-#    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"cisco:nx-o\" | head 2")
+#    st = env.from_string("search index=main host=\"{{ host }}\" sourcetype=\"cisco:ios\" | head 2")
 #    search = st.render(host=host)
 #
 #    resultCount, eventCount = splunk_single(setup_splunk, search)

From a5424cea56f88cc5564d49bad354c074df338842 Mon Sep 17 00:00:00 2001
From: ryan faircloth <rfaircloth@splunk.com>
Date: Tue, 27 Aug 2019 09:09:48 -0400
Subject: [PATCH 56/83] Update config.yml

---
 .circleci/config.yml | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 89d1e1f..c2c4ea4 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -210,6 +210,28 @@ jobs:
           name: Docker push tag
           command: docker push $IMAGE_NAME:edge
 
+  publish-version:
+    environment:
+      IMAGE_NAME: rfaircloth/scs
+    docker:
+      - image: circleci/buildpack-deps:stretch
+    steps:
+      - setup_remote_docker:
+          docker_layer_caching: true
+      - run:
+          name: Docker Login
+          command: docker login -u $DOCKER_USER -p $DOCKER_PASS
+      - run:
+          name: Docker pull
+          command: docker pull $IMAGE_NAME:$CIRCLE_SHA1
+      - run:
+          name: Docker tag image
+          command: |
+            SEMVER=$(docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo | jq '.["SemVer"]' | sed s/\"//g)
+            docker tag $IMAGE_NAME:$CIRCLE_SHA1 splunk/scs:$SEMVER
+      - run:
+          name: Docker push tag
+          command: docker push splunk/scs:$SEMVER
   publish-latest:
     environment:
       IMAGE_NAME: rfaircloth/scs
@@ -262,6 +284,14 @@ workflows:
             branches:
               only:
                 - develop
+      - publish-version:
+          requires:
+            - dgoss
+            - test-unit
+          filters:
+            branches:
+              only:
+                - master
       - publish-latest:
           requires:
             - dgoss

From 715556601a35bdba88c60690357c9cc541ec6caf Mon Sep 17 00:00:00 2001
From: ryan faircloth <rfaircloth@splunk.com>
Date: Tue, 27 Aug 2019 09:12:47 -0400
Subject: [PATCH 57/83] Add change log

---
 .circleci/config.yml | 1 +
 CHANGELOG            | 6 ++++++
 2 files changed, 7 insertions(+)
 create mode 100644 CHANGELOG

diff --git a/.circleci/config.yml b/.circleci/config.yml
index c2c4ea4..878541d 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -292,6 +292,7 @@ workflows:
             branches:
               only:
                 - master
+                - release/*
       - publish-latest:
           requires:
             - dgoss
diff --git a/CHANGELOG b/CHANGELOG
new file mode 100644
index 0000000..4b84880
--- /dev/null
+++ b/CHANGELOG
@@ -0,0 +1,6 @@
+0.4.0
+    - Add source support for Cisco NX
+    - Add source support for Symantec Proxy SG and ASG (Formerly bluecoat)
+    - Add support for mapping network source IP OR parsed host to specific vendor product where MSG parsing is impossible
+    - Code cleanup and simplification
+    - Begin using SEMVER for releases
\ No newline at end of file

From c4aff3a8a05141f561ebb256b1d25f24945ef55c Mon Sep 17 00:00:00 2001
From: ryan faircloth <rfaircloth@splunk.com>
Date: Tue, 27 Aug 2019 09:21:09 -0400
Subject: [PATCH 58/83] Update config.yml

---
 .circleci/config.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 878541d..f1e8489 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -292,7 +292,7 @@ workflows:
             branches:
               only:
                 - master
-                - release/*
+                - release/\d+\.\d+\.\d+
       - publish-latest:
           requires:
             - dgoss

From 7fd7e03862c4a6fec4edeb2b72329c8ebb02c745 Mon Sep 17 00:00:00 2001
From: ryan faircloth <rfaircloth@splunk.com>
Date: Tue, 27 Aug 2019 09:23:55 -0400
Subject: [PATCH 59/83] Update config.yml

---
 .circleci/config.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index f1e8489..21efba2 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -292,7 +292,7 @@ workflows:
             branches:
               only:
                 - master
-                - release/\d+\.\d+\.\d+
+                - release\/.*
       - publish-latest:
           requires:
             - dgoss

From 22ed2658f31f22129bc615634e0069ed313568b2 Mon Sep 17 00:00:00 2001
From: ryan faircloth <rfaircloth@splunk.com>
Date: Tue, 27 Aug 2019 09:27:38 -0400
Subject: [PATCH 60/83] Update config.yml

---
 .circleci/config.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 21efba2..85289b8 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -292,7 +292,7 @@ workflows:
             branches:
               only:
                 - master
-                - release\/.*
+                - /^release\/.*/
       - publish-latest:
           requires:
             - dgoss

From 2e3d912d8424871bf3279a35f5611a7346803a74 Mon Sep 17 00:00:00 2001
From: ryan faircloth <rfaircloth@splunk.com>
Date: Tue, 27 Aug 2019 09:37:14 -0400
Subject: [PATCH 61/83] Update config.yml

---
 .circleci/config.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 85289b8..b027082 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -228,6 +228,8 @@ jobs:
           name: Docker tag image
           command: |
             SEMVER=$(docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo | jq '.["SemVer"]' | sed s/\"//g)
+            echo $SEMVER
+            docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo             
             docker tag $IMAGE_NAME:$CIRCLE_SHA1 splunk/scs:$SEMVER
       - run:
           name: Docker push tag
@@ -291,8 +293,8 @@ workflows:
           filters:
             branches:
               only:
-                - master
-                - /^release\/.*/
+#                - master
+#                - /^release\/.*/
       - publish-latest:
           requires:
             - dgoss

From 36b52e97356de4fb45bf4fb914da7abb04b440d3 Mon Sep 17 00:00:00 2001
From: ryan faircloth <rfaircloth@splunk.com>
Date: Tue, 27 Aug 2019 09:40:54 -0400
Subject: [PATCH 62/83] Update config.yml

---
 .circleci/config.yml | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index b027082..e602483 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -229,7 +229,7 @@ jobs:
           command: |
             SEMVER=$(docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo | jq '.["SemVer"]' | sed s/\"//g)
             echo $SEMVER
-            docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo             
+            docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo | jq '.["SemVer"]' | sed s/\"//g
             docker tag $IMAGE_NAME:$CIRCLE_SHA1 splunk/scs:$SEMVER
       - run:
           name: Docker push tag
@@ -288,13 +288,14 @@ workflows:
                 - develop
       - publish-version:
           requires:
-            - dgoss
-            - test-unit
+            - build
+#            - dgoss
+#            - test-unit
           filters:
             branches:
               only:
-#                - master
-#                - /^release\/.*/
+                - master
+                - /^release\/.*/
       - publish-latest:
           requires:
             - dgoss

From 4931972535e80995d12bcdcd5fb39471b9ca8f6d Mon Sep 17 00:00:00 2001
From: ryan faircloth <rfaircloth@splunk.com>
Date: Tue, 27 Aug 2019 09:44:24 -0400
Subject: [PATCH 63/83] Update config.yml

---
 .circleci/config.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index e602483..32271e7 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -217,6 +217,7 @@ jobs:
       - image: circleci/buildpack-deps:stretch
     steps:
       - setup_remote_docker:
+          version: 18.09.3
           docker_layer_caching: true
       - run:
           name: Docker Login

From 6d0586e6b8bad1e97f0288a085d59fd52e728dfc Mon Sep 17 00:00:00 2001
From: ryan faircloth <rfaircloth@splunk.com>
Date: Tue, 27 Aug 2019 09:53:42 -0400
Subject: [PATCH 64/83] Update config.yml

---
 .circleci/config.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 32271e7..7b34003 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -228,9 +228,9 @@ jobs:
       - run:
           name: Docker tag image
           command: |
-            SEMVER=$(docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo | jq '.["SemVer"]' | sed s/\"//g)
+            SEMVER=$(docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer)
             echo $SEMVER
-            docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo | jq '.["SemVer"]' | sed s/\"//g
+            docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer
             docker tag $IMAGE_NAME:$CIRCLE_SHA1 splunk/scs:$SEMVER
       - run:
           name: Docker push tag

From 829526223092db36d5f7fa22b80dca8be7a2a202 Mon Sep 17 00:00:00 2001
From: ryan faircloth <rfaircloth@splunk.com>
Date: Tue, 27 Aug 2019 09:56:09 -0400
Subject: [PATCH 65/83] Update config.yml

---
 .circleci/config.yml | 2 --
 1 file changed, 2 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 7b34003..fcbfc4a 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -229,8 +229,6 @@ jobs:
           name: Docker tag image
           command: |
             SEMVER=$(docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer)
-            echo $SEMVER
-            docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer
             docker tag $IMAGE_NAME:$CIRCLE_SHA1 splunk/scs:$SEMVER
       - run:
           name: Docker push tag

From 4e0f4a25cc198a492288ee25ba98251edb49a5d2 Mon Sep 17 00:00:00 2001
From: ryan faircloth <rfaircloth@splunk.com>
Date: Tue, 27 Aug 2019 10:01:12 -0400
Subject: [PATCH 66/83] Update config.yml

---
 .circleci/config.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index fcbfc4a..ad816ca 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -216,6 +216,7 @@ jobs:
     docker:
       - image: circleci/buildpack-deps:stretch
     steps:
+      - checkout
       - setup_remote_docker:
           version: 18.09.3
           docker_layer_caching: true
@@ -228,11 +229,10 @@ jobs:
       - run:
           name: Docker tag image
           command: |
-            SEMVER=$(docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer)
-            docker tag $IMAGE_NAME:$CIRCLE_SHA1 splunk/scs:$SEMVER
+            docker tag $IMAGE_NAME:$CIRCLE_SHA1 splunk/scs:$(docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer)
       - run:
           name: Docker push tag
-          command: docker push splunk/scs:$SEMVER
+          command: docker push splunk/scs:$(docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer)
   publish-latest:
     environment:
       IMAGE_NAME: rfaircloth/scs

From b7e14069ee8618e9bf07fecb0991c41fa5f5ae5e Mon Sep 17 00:00:00 2001
From: ryan faircloth <rfaircloth@splunk.com>
Date: Tue, 27 Aug 2019 10:07:16 -0400
Subject: [PATCH 67/83] Update config.yml

---
 .circleci/config.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index ad816ca..fd5c4f9 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -229,10 +229,12 @@ jobs:
       - run:
           name: Docker tag image
           command: |
-            docker tag $IMAGE_NAME:$CIRCLE_SHA1 splunk/scs:$(docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer)
+            SEMVER=$(docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer)
+            echo $SEMVER
+            docker tag $IMAGE_NAME:$CIRCLE_SHA1 splunk/scs:$SEMVER
       - run:
           name: Docker push tag
-          command: docker push splunk/scs:$(docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer)
+          command: docker push splunk/scs:
   publish-latest:
     environment:
       IMAGE_NAME: rfaircloth/scs

From db9724c95f68d2314768f16e6fca47f81787381d Mon Sep 17 00:00:00 2001
From: ryan faircloth <rfaircloth@splunk.com>
Date: Tue, 27 Aug 2019 10:11:14 -0400
Subject: [PATCH 68/83] Update config.yml

---
 .circleci/config.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index fd5c4f9..1764e47 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -234,7 +234,10 @@ jobs:
             docker tag $IMAGE_NAME:$CIRCLE_SHA1 splunk/scs:$SEMVER
       - run:
           name: Docker push tag
-          command: docker push splunk/scs:
+          command: |
+            SEMVER=$(docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer)
+            echo $SEMVER
+            docker push splunk/scs:$SEMVER
   publish-latest:
     environment:
       IMAGE_NAME: rfaircloth/scs

From 389558e4c7eb3b93a9c9a7263486fc547ee30f01 Mon Sep 17 00:00:00 2001
From: ryan faircloth <rfaircloth@splunk.com>
Date: Tue, 27 Aug 2019 10:17:31 -0400
Subject: [PATCH 69/83] Update config.yml

---
 .circleci/config.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 1764e47..41584a3 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -226,6 +226,7 @@ jobs:
       - run:
           name: Docker pull
           command: docker pull $IMAGE_NAME:$CIRCLE_SHA1
+      - run: docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer
       - run:
           name: Docker tag image
           command: |

From 0ebd8e0f1f7e11e45e497e082858901bc9f1def5 Mon Sep 17 00:00:00 2001
From: ryan faircloth <rfaircloth@splunk.com>
Date: Tue, 27 Aug 2019 10:30:08 -0400
Subject: [PATCH 70/83] Update config.yml

---
 .circleci/config.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 41584a3..4c73cf7 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -226,7 +226,7 @@ jobs:
       - run:
           name: Docker pull
           command: docker pull $IMAGE_NAME:$CIRCLE_SHA1
-      - run: docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer
+      - run: docker run --rm -v ".:/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer
       - run:
           name: Docker tag image
           command: |

From a007f060343e19579235b6f50c4aa67ed23496b4 Mon Sep 17 00:00:00 2001
From: ryan faircloth <rfaircloth@splunk.com>
Date: Tue, 27 Aug 2019 10:32:25 -0400
Subject: [PATCH 71/83] Update config.yml

---
 .circleci/config.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 4c73cf7..cc76af7 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -226,7 +226,11 @@ jobs:
       - run:
           name: Docker pull
           command: docker pull $IMAGE_NAME:$CIRCLE_SHA1
-      - run: docker run --rm -v ".:/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer
+      - run:
+          command: |
+            ls -la
+            pwd
+            docker run --rm -v ".:/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer
       - run:
           name: Docker tag image
           command: |

From 352e2f019c642afeed19ce3c1d68a74267629588 Mon Sep 17 00:00:00 2001
From: ryan faircloth <rfaircloth@splunk.com>
Date: Tue, 27 Aug 2019 10:37:28 -0400
Subject: [PATCH 72/83] Update config.yml

---
 .circleci/config.yml | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index cc76af7..b53ed43 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -228,9 +228,7 @@ jobs:
           command: docker pull $IMAGE_NAME:$CIRCLE_SHA1
       - run:
           command: |
-            ls -la
-            pwd
-            docker run --rm -v ".:/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer
+            docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer
       - run:
           name: Docker tag image
           command: |

From eb426dbf5fbc574ab65e1be0b69a247463156a62 Mon Sep 17 00:00:00 2001
From: ryan faircloth <rfaircloth@splunk.com>
Date: Tue, 27 Aug 2019 10:39:25 -0400
Subject: [PATCH 73/83] Update config.yml

---
 .circleci/config.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index b53ed43..cec5c93 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -228,6 +228,8 @@ jobs:
           command: docker pull $IMAGE_NAME:$CIRCLE_SHA1
       - run:
           command: |
+            git fetch --tags --prune --progress --no-recurse-submodules origin
+            git checkout --progress --force $CIRCLE_SHA1
             docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer
       - run:
           name: Docker tag image

From 42728da1e0ec8e02f56ec6deb85b215f97ed2889 Mon Sep 17 00:00:00 2001
From: ryan faircloth <rfaircloth@splunk.com>
Date: Tue, 27 Aug 2019 10:53:30 -0400
Subject: [PATCH 74/83] Update config.yml

---
 .circleci/config.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index cec5c93..44eb3d3 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -229,7 +229,7 @@ jobs:
       - run:
           command: |
             git fetch --tags --prune --progress --no-recurse-submodules origin
-            git checkout --progress --force $CIRCLE_SHA1
+            #git checkout --progress --force $CIRCLE_SHA1
             docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer
       - run:
           name: Docker tag image

From e5c4a7c5b57e4e06a2e7f6f3595e6fde117a43b0 Mon Sep 17 00:00:00 2001
From: ryan faircloth <rfaircloth@splunk.com>
Date: Tue, 27 Aug 2019 10:56:57 -0400
Subject: [PATCH 75/83] Update config.yml

---
 .circleci/config.yml | 13 +++++++++++--
 1 file changed, 11 insertions(+), 2 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 44eb3d3..326d2b2 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -227,9 +227,18 @@ jobs:
           name: Docker pull
           command: docker pull $IMAGE_NAME:$CIRCLE_SHA1
       - run:
+          name: Checkout with tags
           command: |
-            git fetch --tags --prune --progress --no-recurse-submodules origin
-            #git checkout --progress --force $CIRCLE_SHA1
+            git fetch --force origin "refs/tags/${CIRCLE_TAG}:refs/tags/${CIRCLE_TAG}"
+            if [ -n "$CIRCLE_BRANCH" ]
+            then
+            git reset --hard $CIRCLE_SHA1
+            git checkout -q -B $CIRCLE_BRANCH
+            fi
+            git reset --hard $CIRCLE_SHA1
+      - run:
+          command: |
+
             docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer
       - run:
           name: Docker tag image

From a6da2d2ec0cd8ca1b9a1e5307b8fb0830a76bdce Mon Sep 17 00:00:00 2001
From: ryan faircloth <rfaircloth@splunk.com>
Date: Tue, 27 Aug 2019 11:08:53 -0400
Subject: [PATCH 76/83] Update config.yml

---
 .circleci/config.yml | 13 +------------
 1 file changed, 1 insertion(+), 12 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 326d2b2..af28d99 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -227,19 +227,8 @@ jobs:
           name: Docker pull
           command: docker pull $IMAGE_NAME:$CIRCLE_SHA1
       - run:
-          name: Checkout with tags
           command: |
-            git fetch --force origin "refs/tags/${CIRCLE_TAG}:refs/tags/${CIRCLE_TAG}"
-            if [ -n "$CIRCLE_BRANCH" ]
-            then
-            git reset --hard $CIRCLE_SHA1
-            git checkout -q -B $CIRCLE_BRANCH
-            fi
-            git reset --hard $CIRCLE_SHA1
-      - run:
-          command: |
-
-            docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer
+            docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer /nofetch
       - run:
           name: Docker tag image
           command: |

From aca03370f518c170403500f675d3bdfded6ac48e Mon Sep 17 00:00:00 2001
From: ryan faircloth <rfaircloth@splunk.com>
Date: Tue, 27 Aug 2019 11:11:22 -0400
Subject: [PATCH 77/83] Update config.yml

---
 .circleci/config.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index af28d99..d0239a5 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -228,7 +228,8 @@ jobs:
           command: docker pull $IMAGE_NAME:$CIRCLE_SHA1
       - run:
           command: |
-            docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer /nofetch
+            ls -la
+            docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer /nofetch\;ls -la
       - run:
           name: Docker tag image
           command: |

From 84b59b97fd077851d1dad1da6add8630d9eded75 Mon Sep 17 00:00:00 2001
From: ryan faircloth <rfaircloth@splunk.com>
Date: Tue, 27 Aug 2019 11:11:39 -0400
Subject: [PATCH 78/83] Update config.yml

---
 .circleci/config.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index d0239a5..4f140dc 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -229,6 +229,7 @@ jobs:
       - run:
           command: |
             ls -la
+            git status
             docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer /nofetch\;ls -la
       - run:
           name: Docker tag image

From 63b2b26b217ad00cf0b2718c2d209567cb19e476 Mon Sep 17 00:00:00 2001
From: ryan faircloth <rfaircloth@splunk.com>
Date: Tue, 27 Aug 2019 11:18:55 -0400
Subject: [PATCH 79/83] Update config.yml

---
 .circleci/config.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 4f140dc..d328f84 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -214,7 +214,7 @@ jobs:
     environment:
       IMAGE_NAME: rfaircloth/scs
     docker:
-      - image: circleci/buildpack-deps:stretch
+      - image: circleci/buildpack-deps:latest
     steps:
       - checkout
       - setup_remote_docker:
@@ -230,7 +230,7 @@ jobs:
           command: |
             ls -la
             git status
-            docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer /nofetch\;ls -la
+            docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable /nofetch SemVer
       - run:
           name: Docker tag image
           command: |

From f3250fcefad3b4e211ca5b6e606fadb0e482e71e Mon Sep 17 00:00:00 2001
From: ryan faircloth <rfaircloth@splunk.com>
Date: Tue, 27 Aug 2019 11:23:08 -0400
Subject: [PATCH 80/83] Update config.yml

---
 .circleci/config.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index d328f84..e4c45c5 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -230,17 +230,17 @@ jobs:
           command: |
             ls -la
             git status
-            docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable /nofetch SemVer
+            docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer /nofetch
       - run:
           name: Docker tag image
           command: |
-            SEMVER=$(docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer)
+            SEMVER=$(docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer /nofetch)
             echo $SEMVER
             docker tag $IMAGE_NAME:$CIRCLE_SHA1 splunk/scs:$SEMVER
       - run:
           name: Docker push tag
           command: |
-            SEMVER=$(docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer)
+            SEMVER=$(docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer /nofetch)
             echo $SEMVER
             docker push splunk/scs:$SEMVER
   publish-latest:

From baf2dbdb9173d5c98281465f230a23c080d1585d Mon Sep 17 00:00:00 2001
From: ryan faircloth <rfaircloth@splunk.com>
Date: Tue, 27 Aug 2019 11:31:12 -0400
Subject: [PATCH 81/83] Update config.yml

---
 .circleci/config.yml | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index e4c45c5..4ef85f8 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -211,15 +211,14 @@ jobs:
           command: docker push $IMAGE_NAME:edge
 
   publish-version:
+    machine:
+      image: ubuntu-1604:201903-01
+      docker_layer_caching: true    # default - false
     environment:
       IMAGE_NAME: rfaircloth/scs
-    docker:
-      - image: circleci/buildpack-deps:latest
     steps:
       - checkout
-      - setup_remote_docker:
-          version: 18.09.3
-          docker_layer_caching: true
+
       - run:
           name: Docker Login
           command: docker login -u $DOCKER_USER -p $DOCKER_PASS

From 364d946c636bb1917853f4ae110253ba3c0b7935 Mon Sep 17 00:00:00 2001
From: ryan faircloth <rfaircloth@splunk.com>
Date: Tue, 27 Aug 2019 11:36:23 -0400
Subject: [PATCH 82/83] Update config.yml

---
 .circleci/config.yml | 10 ++--------
 1 file changed, 2 insertions(+), 8 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 4ef85f8..80a453b 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -212,7 +212,8 @@ jobs:
 
   publish-version:
     machine:
-      image: ubuntu-1604:201903-01
+      #image: ubuntu-1604:201903-01
+      image: buildpack-deps:latest
       docker_layer_caching: true    # default - false
     environment:
       IMAGE_NAME: rfaircloth/scs
@@ -225,22 +226,15 @@ jobs:
       - run:
           name: Docker pull
           command: docker pull $IMAGE_NAME:$CIRCLE_SHA1
-      - run:
-          command: |
-            ls -la
-            git status
-            docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer /nofetch
       - run:
           name: Docker tag image
           command: |
             SEMVER=$(docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer /nofetch)
-            echo $SEMVER
             docker tag $IMAGE_NAME:$CIRCLE_SHA1 splunk/scs:$SEMVER
       - run:
           name: Docker push tag
           command: |
             SEMVER=$(docker run --rm -v "$(pwd):/repo" gittools/gitversion:latest-linux-netcoreapp2.1 /repo /showvariable SemVer /nofetch)
-            echo $SEMVER
             docker push splunk/scs:$SEMVER
   publish-latest:
     environment:

From 0d0bc647c540768214bbfd7a8a27a603bc61bc28 Mon Sep 17 00:00:00 2001
From: ryan faircloth <rfaircloth@splunk.com>
Date: Tue, 27 Aug 2019 11:44:04 -0400
Subject: [PATCH 83/83] Update config.yml

---
 .circleci/config.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 80a453b..4e5fae6 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -212,8 +212,7 @@ jobs:
 
   publish-version:
     machine:
-      #image: ubuntu-1604:201903-01
-      image: buildpack-deps:latest
+      image: ubuntu-1604:201903-01
       docker_layer_caching: true    # default - false
     environment:
       IMAGE_NAME: rfaircloth/scs