From d172780806131fdb85b84300fe33caf7591d87a6 Mon Sep 17 00:00:00 2001
From: Glenn Musa <4622125+glennmusa@users.noreply.github.com>
Date: Wed, 22 Sep 2021 11:57:05 -0400
Subject: [PATCH] add a Bicep implementation and remove bash scripts (#425)
---
.devcontainer/Dockerfile | 11 +-
.devcontainer/README.md | 3 +-
.devcontainer/devcontainer.json | 3 +-
.../workflows/apply-and-destroy-terraform.yml | 52 -
.github/workflows/validate-bicep.yml | 18 +
.github/workflows/validate-build-bicep.yml | 22 +
.github/workflows/validate-terraform.yml | 14 +-
.gitignore | 44 +-
.vscode/extensions.json | 1 +
README.md | 8 +-
docs/command-line-deployment.md | 25 +
docs/getting-started.md | 42 +
...0210419_missionlz_as_of_Aug2021_Policy.png | Bin
docs/images/custom_template_deployment.gif | Bin 0 -> 4878583 bytes
docs/images/deploytoazure.svg | 50 +
docs/images/deploytoazuregov.svg | 50 +
.../mg1-management-groups-list.png | Bin
.../mg2-empty-subscription-list.png | Bin
.../mg3-select-subscription.png | Bin
.../mg4-subscription-in-management-group.png | Bin
.../images/missionlz_as_of_july2021.jpg | Bin
docs/images/missionlz_as_of_may2021.png | Bin 0 -> 124384 bytes
{src/docs => docs}/images/networking.png | Bin
{src/docs => docs}/images/scope.png | Bin
{src/docs => docs}/management-groups.md | 0
{src/docs => docs}/policies.md | 57 +-
{src/docs => docs}/scca.md | 0
.../using-the-devcontainer.md | 44 +-
docs/workload-deployment.md | 21 +
src/bicep/README.md | 195 +
src/bicep/bicepconfig.json | 28 +
src/bicep/examples/README.md | 12 +
src/bicep/examples/newWorkload/README.md | 123 +
.../modules/hubNetworkPeering.bicep | 15 +
.../examples/newWorkload/newWorkload.bicep | 98 +
.../examples/newWorkload/newWorkload.json | 967 +++
src/bicep/examples/remoteAccess/README.md | 121 +
src/bicep/examples/remoteAccess/main.bicep | 103 +
src/bicep/examples/remoteAccess/main.json | 1125 +++
src/bicep/examples/sentinel/README.md | 101 +
src/bicep/examples/sentinel/sentinel.tf | 62 +
src/bicep/marketplace/README.md | 6 +
src/bicep/marketplace/createUiDefinition.json | 1230 ++++
src/bicep/marketplace/mainTemplate.json | 4416 ++++++++++++
src/bicep/mlz.bicep | 600 ++
src/bicep/mlz.json | 6279 +++++++++++++++++
src/bicep/modules/bastionHost.bicep | 61 +
src/bicep/modules/centralLogging.bicep | 48 +
src/bicep/modules/firewall.bicep | 69 +
src/bicep/modules/hubNetwork.bicep | 241 +
src/bicep/modules/hubNetworkPeerings.bicep | 37 +
src/bicep/modules/linuxVirtualMachine.bicep | 80 +
src/bicep/modules/logAnalyticsWorkspace.bicep | 35 +
src/bicep/modules/networkInterface.bicep | 34 +
src/bicep/modules/networkSecurityGroup.bicep | 18 +
.../CMMC-policyAssignmentParameters.json | 410 ++
.../IL5-policyAssignmentParameters.json | 503 ++
.../NIST-policyAssignmentParameters.json | 34 +
src/bicep/modules/policyAssignment.bicep | 40 +
src/bicep/modules/publicIPAddress.bicep | 25 +
src/bicep/modules/remoteAccess.bicep | 144 +
src/bicep/modules/resourceGroup.bicep | 14 +
src/bicep/modules/routeTable.bicep | 30 +
src/bicep/modules/sentinelSolution.bicep | 22 +
src/bicep/modules/spokeNetwork.bicep | 155 +
src/bicep/modules/spokeNetworkPeering.bicep | 16 +
src/bicep/modules/storageAccount.bicep | 16 +
src/bicep/modules/subnet.bicep | 13 +
src/bicep/modules/virtualNetwork.bicep | 42 +
src/bicep/modules/virtualNetworkPeering.bicep | 11 +
src/bicep/modules/windowsVirtualMachine.bicep | 59 +
src/bicep/ui/README.md | 7 +
src/bicep/ui/mlz-portal.json | 1223 ++++
src/build/README.md | 76 -
src/build/apply_tf.sh | 115 -
src/build/check_tf_format.sh | 49 +
src/build/destroy_tf.sh | 111 -
src/build/get_vars.sh | 45 -
src/build/login_azcli.sh | 38 -
src/build/validate_tf.sh | 50 +-
src/docs/command-line-deployment.md | 258 -
src/docs/workload-deployment.md | 92 -
src/mlz.config.sample | 18 -
src/scripts/clean.sh | 147 -
src/scripts/config/append_prereq_endpoints.sh | 86 -
src/scripts/config/config_clean.sh | 87 -
src/scripts/config/config_validate.sh | 58 -
.../config/create_mlz_config_resources.sh | 255 -
.../config/create_required_resources.sh | 48 -
.../create_terraform_backend_resources.sh | 99 -
src/scripts/config/generate_config_file.sh | 140 -
src/scripts/config/generate_names.sh | 81 -
src/scripts/config/generate_vars.sh | 58 -
src/scripts/config/get_sp_identity.sh | 101 -
.../config/validate_minimum_role_for_sp.sh | 81 -
src/scripts/deploy.sh | 275 -
src/scripts/deploy_t3.sh | 118 -
src/scripts/security-center/configure_asc.sh | 170 -
src/scripts/security-center/generate_names.sh | 35 -
src/scripts/terraform/apply_terraform.sh | 51 -
.../terraform/create_tfvars_from_config.sh | 86 -
src/scripts/terraform/destroy_terraform.sh | 46 -
src/scripts/terraform/init_terraform.sh | 70 -
.../terraform/validate_cloud_for_tf_env.sh | 58 -
src/scripts/util/checkforarmcredential.sh | 38 -
src/scripts/util/checkforazcli.sh | 22 -
src/scripts/util/checkforfile.sh | 27 -
src/scripts/util/checkforterraform.sh | 13 -
src/scripts/util/checkforzip.sh | 13 -
src/scripts/util/validateazlocation.sh | 42 -
src/terraform/README.md | 353 +
src/terraform/mlz/main.tf | 124 +-
src/terraform/mlz/minimum.tfvars.sample | 22 -
src/terraform/mlz/mlz.tfvars.sample | 251 -
src/terraform/mlz/outputs.tf | 30 +-
src/terraform/mlz/variables.tf | 172 +-
src/terraform/modules/firewall/variables.tf | 1 -
src/terraform/modules/jumpbox/variables.tf | 1 -
.../modules/policy-assignments/main.tf | 3 +-
.../modules/policy-assignments/variables.tf | 3 +-
src/terraform/modules/subnet/main.tf | 2 +-
.../modules/virtual-network/outputs.tf | 1 +
src/terraform/tier3/main.tf | 42 +-
src/terraform/tier3/minimum.tfvars.sample | 17 -
src/terraform/tier3/tier3.tfvars.sample | 82 -
src/terraform/tier3/variables.tf | 78 +-
126 files changed, 19789 insertions(+), 3883 deletions(-)
delete mode 100644 .github/workflows/apply-and-destroy-terraform.yml
create mode 100644 .github/workflows/validate-bicep.yml
create mode 100644 .github/workflows/validate-build-bicep.yml
create mode 100644 docs/command-line-deployment.md
create mode 100644 docs/getting-started.md
rename {src/docs => docs}/images/20210419_missionlz_as_of_Aug2021_Policy.png (100%)
create mode 100644 docs/images/custom_template_deployment.gif
create mode 100644 docs/images/deploytoazure.svg
create mode 100644 docs/images/deploytoazuregov.svg
rename {src/docs => docs}/images/management-groups/mg1-management-groups-list.png (100%)
rename {src/docs => docs}/images/management-groups/mg2-empty-subscription-list.png (100%)
rename {src/docs => docs}/images/management-groups/mg3-select-subscription.png (100%)
rename {src/docs => docs}/images/management-groups/mg4-subscription-in-management-group.png (100%)
rename {src/docs => docs}/images/missionlz_as_of_july2021.jpg (100%)
create mode 100644 docs/images/missionlz_as_of_may2021.png
rename {src/docs => docs}/images/networking.png (100%)
rename {src/docs => docs}/images/scope.png (100%)
rename {src/docs => docs}/management-groups.md (100%)
rename {src/docs => docs}/policies.md (64%)
rename {src/docs => docs}/scca.md (100%)
rename src/docs/getting-started.md => docs/using-the-devcontainer.md (51%)
create mode 100644 docs/workload-deployment.md
create mode 100644 src/bicep/README.md
create mode 100644 src/bicep/bicepconfig.json
create mode 100644 src/bicep/examples/README.md
create mode 100644 src/bicep/examples/newWorkload/README.md
create mode 100644 src/bicep/examples/newWorkload/modules/hubNetworkPeering.bicep
create mode 100644 src/bicep/examples/newWorkload/newWorkload.bicep
create mode 100644 src/bicep/examples/newWorkload/newWorkload.json
create mode 100644 src/bicep/examples/remoteAccess/README.md
create mode 100644 src/bicep/examples/remoteAccess/main.bicep
create mode 100644 src/bicep/examples/remoteAccess/main.json
create mode 100644 src/bicep/examples/sentinel/README.md
create mode 100644 src/bicep/examples/sentinel/sentinel.tf
create mode 100644 src/bicep/marketplace/README.md
create mode 100644 src/bicep/marketplace/createUiDefinition.json
create mode 100644 src/bicep/marketplace/mainTemplate.json
create mode 100644 src/bicep/mlz.bicep
create mode 100644 src/bicep/mlz.json
create mode 100644 src/bicep/modules/bastionHost.bicep
create mode 100644 src/bicep/modules/centralLogging.bicep
create mode 100644 src/bicep/modules/firewall.bicep
create mode 100644 src/bicep/modules/hubNetwork.bicep
create mode 100644 src/bicep/modules/hubNetworkPeerings.bicep
create mode 100644 src/bicep/modules/linuxVirtualMachine.bicep
create mode 100644 src/bicep/modules/logAnalyticsWorkspace.bicep
create mode 100644 src/bicep/modules/networkInterface.bicep
create mode 100644 src/bicep/modules/networkSecurityGroup.bicep
create mode 100644 src/bicep/modules/policies/CMMC-policyAssignmentParameters.json
create mode 100644 src/bicep/modules/policies/IL5-policyAssignmentParameters.json
create mode 100644 src/bicep/modules/policies/NIST-policyAssignmentParameters.json
create mode 100644 src/bicep/modules/policyAssignment.bicep
create mode 100644 src/bicep/modules/publicIPAddress.bicep
create mode 100644 src/bicep/modules/remoteAccess.bicep
create mode 100644 src/bicep/modules/resourceGroup.bicep
create mode 100644 src/bicep/modules/routeTable.bicep
create mode 100644 src/bicep/modules/sentinelSolution.bicep
create mode 100644 src/bicep/modules/spokeNetwork.bicep
create mode 100644 src/bicep/modules/spokeNetworkPeering.bicep
create mode 100644 src/bicep/modules/storageAccount.bicep
create mode 100644 src/bicep/modules/subnet.bicep
create mode 100644 src/bicep/modules/virtualNetwork.bicep
create mode 100644 src/bicep/modules/virtualNetworkPeering.bicep
create mode 100644 src/bicep/modules/windowsVirtualMachine.bicep
create mode 100644 src/bicep/ui/README.md
create mode 100644 src/bicep/ui/mlz-portal.json
delete mode 100644 src/build/README.md
delete mode 100755 src/build/apply_tf.sh
create mode 100755 src/build/check_tf_format.sh
delete mode 100755 src/build/destroy_tf.sh
delete mode 100755 src/build/get_vars.sh
delete mode 100755 src/build/login_azcli.sh
delete mode 100644 src/docs/command-line-deployment.md
delete mode 100644 src/docs/workload-deployment.md
delete mode 100644 src/mlz.config.sample
delete mode 100755 src/scripts/clean.sh
delete mode 100755 src/scripts/config/append_prereq_endpoints.sh
delete mode 100755 src/scripts/config/config_clean.sh
delete mode 100755 src/scripts/config/config_validate.sh
delete mode 100755 src/scripts/config/create_mlz_config_resources.sh
delete mode 100755 src/scripts/config/create_required_resources.sh
delete mode 100755 src/scripts/config/create_terraform_backend_resources.sh
delete mode 100755 src/scripts/config/generate_config_file.sh
delete mode 100755 src/scripts/config/generate_names.sh
delete mode 100755 src/scripts/config/generate_vars.sh
delete mode 100755 src/scripts/config/get_sp_identity.sh
delete mode 100755 src/scripts/config/validate_minimum_role_for_sp.sh
delete mode 100755 src/scripts/deploy.sh
delete mode 100755 src/scripts/deploy_t3.sh
delete mode 100755 src/scripts/security-center/configure_asc.sh
delete mode 100755 src/scripts/security-center/generate_names.sh
delete mode 100755 src/scripts/terraform/apply_terraform.sh
delete mode 100755 src/scripts/terraform/create_tfvars_from_config.sh
delete mode 100755 src/scripts/terraform/destroy_terraform.sh
delete mode 100755 src/scripts/terraform/init_terraform.sh
delete mode 100755 src/scripts/terraform/validate_cloud_for_tf_env.sh
delete mode 100755 src/scripts/util/checkforarmcredential.sh
delete mode 100755 src/scripts/util/checkforazcli.sh
delete mode 100755 src/scripts/util/checkforfile.sh
delete mode 100755 src/scripts/util/checkforterraform.sh
delete mode 100755 src/scripts/util/checkforzip.sh
delete mode 100755 src/scripts/util/validateazlocation.sh
create mode 100644 src/terraform/README.md
delete mode 100644 src/terraform/mlz/minimum.tfvars.sample
delete mode 100644 src/terraform/mlz/mlz.tfvars.sample
delete mode 100644 src/terraform/tier3/minimum.tfvars.sample
delete mode 100644 src/terraform/tier3/tier3.tfvars.sample
diff --git a/.devcontainer/Dockerfile b/.devcontainer/Dockerfile
index 4131337de..7962d112b 100644
--- a/.devcontainer/Dockerfile
+++ b/.devcontainer/Dockerfile
@@ -35,13 +35,6 @@ RUN add-apt-repository ppa:git-core/ppa \
sudo \
shellcheck
-# Install Python 3
-RUN apt-get update \
- && apt-get install -y \
- python3 \
- python3-pip \
- && ln -s /usr/bin/python3 /usr/bin/python
-
# Install Terraform and tflint
RUN wget -O terraform.zip https://releases.hashicorp.com/terraform/${TERRAFORM_VERSION}/terraform_${TERRAFORM_VERSION}_linux_amd64.zip \
&& wget -O tflint.zip https://github.com/terraform-linters/tflint/releases/download/v${TFLINT_VERSION}/tflint_linux_amd64.zip \
@@ -95,6 +88,10 @@ RUN AZ_REPO=$(lsb_release -cs) \
# Install AZ CLI
RUN apt-get update && apt-get install -y azure-cli=${AZURE_CLI_VERSION}
+# Install Bicep
+RUN curl -Lo /usr/local/bin/bicep https://github.com/Azure/bicep/releases/latest/download/bicep-linux-x64 \
+ && chmod +x /usr/local/bin/bicep
+
# Clean up
RUN apt-get autoremove -y \
&& apt-get clean -y \
diff --git a/.devcontainer/README.md b/.devcontainer/README.md
index e0a33009d..8c37537c8 100644
--- a/.devcontainer/README.md
+++ b/.devcontainer/README.md
@@ -11,7 +11,8 @@ All configuration related to the development container is in the `.devcontainer`
### Step-by-Step
-1. Follow the Mission LZ [Getting Started](https://github.com/Azure/missionlz/blob/main/src/docs/getting-started.md#pre-requisites) pre-requisites and step-by-step guide.
+1. Follow the Mission LZ [Getting Started](../docs/getting-started.md) pre-requisites and step-by-step guide.
+
1. Open a command line (e.g. `wsl.exe` or `bash.exe`), change to the root folder of the local workspace for the cloned Mission LZ project, and start VS Code from this root folder (not a sub folder or a parent folder).
> **NOTE:** If you are using WSL or BASH on Linux or Mac, you can navigate to the root folder of the project (for example, in the path `$HOME/missionlz` assuming you cloned the project to $HOME) and enter the command below to launch VS Code in correct directory. Be sure to include the trailing "." in the second command.
diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index 68915ad56..b5e255671 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -22,7 +22,8 @@
"ms-vscode-remote.vscode-remote-extensionpack",
"davidanson.vscode-markdownlint",
"github.vscode-pull-request-github",
- "timonwong.shellcheck"
+ "timonwong.shellcheck",
+ "ms-azuretools.vscode-bicep"
],
// Additional args to pass to the 'docker run' command
diff --git a/.github/workflows/apply-and-destroy-terraform.yml b/.github/workflows/apply-and-destroy-terraform.yml
deleted file mode 100644
index 8014424a6..000000000
--- a/.github/workflows/apply-and-destroy-terraform.yml
+++ /dev/null
@@ -1,52 +0,0 @@
-# Copyright (c) Microsoft Corporation.
-# Licensed under the MIT License.
-
-name: apply-and-destroy-terraform
-on: [workflow_dispatch]
-jobs:
- apply-and-destroy-terraform:
- runs-on: ubuntu-latest
-
- container:
- image: acrmlzcicd.azurecr.io/missionlzdev
- credentials:
- username: ${{ secrets.acr_username }}
- password: ${{ secrets.acr_password }}
-
- steps:
- - uses: actions/checkout@v2
-
- - uses: azure/login@v1
- with:
- creds: ${{ secrets.AZURE_CREDENTIALS }}
-
- - uses: Azure/get-keyvault-secrets@v1
- with:
- keyvault: ${{ secrets.KEY_VAULT_NAME }}
- secrets: '*'
-
- - name: get vars
- run : |
- cd src/build
- ./get_vars.sh "$STORAGEACCOUNT" "$STORAGETOKEN" "$STORAGECONTAINER"
-
- - name: login
- run : |
- cd src/build
- ./login_azcli.sh "$MLZTENANTID" "$MLZCLIENTID" "$MLZCLIENTSECRET"
-
- - name: apply terraform
- run : |
- cd src/build
- ./apply_tf.sh \
- vars/mlz.config \
- vars/mlz.tfvars \
- n
-
- - name: destroy terraform
- run : |
- cd src/build
- ./destroy_tf.sh \
- vars/mlz.config \
- vars/mlz.tfvars \
- n
diff --git a/.github/workflows/validate-bicep.yml b/.github/workflows/validate-bicep.yml
new file mode 100644
index 000000000..451b9d651
--- /dev/null
+++ b/.github/workflows/validate-bicep.yml
@@ -0,0 +1,18 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
+name: validate-bicep
+on:
+ pull_request:
+ paths:
+ - '**.bicep'
+ workflow_dispatch:
+ paths:
+ - '**.bicep'
+jobs:
+ validate-bicep:
+ runs-on: ubuntu-latest
+ steps:
+ - uses: actions/checkout@v2
+ - run: |
+ az bicep build --file src/bicep/mlz.bicep
diff --git a/.github/workflows/validate-build-bicep.yml b/.github/workflows/validate-build-bicep.yml
new file mode 100644
index 000000000..d9004c80e
--- /dev/null
+++ b/.github/workflows/validate-build-bicep.yml
@@ -0,0 +1,22 @@
+# Copyright (c) Microsoft Corporation.
+# Licensed under the MIT License.
+
+name: validate-build-bicep
+on:
+ push:
+ paths:
+ - '**.bicep'
+ branches:
+ - bicep
+jobs:
+ validate-build:
+ runs-on: ubuntu-latest
+ steps:
+ - uses: actions/checkout@v2
+ - run: |
+ git config user.name github-actions
+ git config user.email github-actions@github.com
+ az bicep build --file src/bicep/mlz.bicep --outfile src/bicep/mlz.json
+ git add src/bicep/mlz.json
+ git commit -m "GitHub Action: Build Bicep to JSON"
+ git push
diff --git a/.github/workflows/validate-terraform.yml b/.github/workflows/validate-terraform.yml
index da4c96cf9..d4a5b0c68 100644
--- a/.github/workflows/validate-terraform.yml
+++ b/.github/workflows/validate-terraform.yml
@@ -2,14 +2,18 @@
# Licensed under the MIT License.
name: validate-terraform
-on: [pull_request, workflow_dispatch]
+on:
+ pull_request:
+ paths:
+ - 'src/terraform/**'
+ workflow_dispatch:
jobs:
validate-terraform:
runs-on: ubuntu-latest
steps:
- uses: hashicorp/setup-terraform@v1
with:
- terraform_version: 0.13.4
+ terraform_version: 1.0.3
- shell: bash
name: check tooling versions
run: |
@@ -18,4 +22,8 @@ jobs:
- shell: bash
name: validate and lint terraform
run: |
- src/build/validate_tf.sh
+ src/build/validate_tf.sh src/terraform/mlz src/terraform/tier3
+ - shell: bash
+ name: check terraform formatting
+ run: |
+ src/build/check_tf_format.sh src/terraform
diff --git a/.gitignore b/.gitignore
index 495708425..ecfd17ea9 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,5 +1,6 @@
# Copyright (c) Microsoft Corporation.
# Licensed under the MIT License.
+
# Terraform artifacts
*.tfvars
*.terraform
@@ -17,48 +18,5 @@ crash.log
*plan*
*.plan*
-# Setup config variables file
-mlz.config
-saca-hub.tfvars.json
-tier-0.tfvars.json
-tier-1.tfvars.json
-tier-2.tfvars.json
-globals.tfvars.json
-*.tfvars.json
-!*.orig.tfvars.json
-
-# Bash artifacts
-*.vars
-
# Mac files
.DS_Store
-
-# .NET Core
-project.lock.json
-project.fragment.lock.json
-artifacts/
-**/Properties/launchSettings.json
-
-# NuGet Packages
-*.nupkg
-# The packages folder can be ignored because of Package Restore
-**/[Pp]ackages/*
-# except build/, which is used as an MSBuild target.
-!**/[Pp]ackages/build/
-# Uncomment if necessary however generally it will be regenerated when needed
-#!**/[Pp]ackages/repositories.config
-# NuGet v3's project.json files produces more ignorable files
-*.nuget.props
-*.nuget.targets
-
-# Python Tools for Visual Studio (PTVS)
-__pycache__/
-*.pyc
-**/.idea/
-**/config_output/
-**/exec_output
-
-# ignore generated output
-**/generated-configurations/*
-mlz.zip
-mlz.tar
diff --git a/.vscode/extensions.json b/.vscode/extensions.json
index 847713352..8c5c3526f 100644
--- a/.vscode/extensions.json
+++ b/.vscode/extensions.json
@@ -9,6 +9,7 @@
"ms-vscode-remote.vscode-remote-extensionpack",
"davidanson.vscode-markdownlint",
"github.vscode-pull-request-github",
+ "ms-azuretools.vscode-bicep",
],
// List of extensions recommended by VS Code that should not be recommended for users of this workspace.
"unwantedRecommendations": [
diff --git a/README.md b/README.md
index 33a9ccdf3..e3f053b02 100644
--- a/README.md
+++ b/README.md
@@ -45,7 +45,7 @@ Mission LZ has the following scope:
-
+
## Networking
@@ -53,12 +53,12 @@ Mission LZ has the following scope:
Networking is set up in a hub and spoke design, separated by tiers: T0 (Identity and Authorization), T1 (Infrastructure Operations), T2 (DevSecOps and Shared Services), and multiple T3s (Workloads). Security can be configured to allow separation of duties between all tiers. Most customers will deploy each tier to a separate Azure subscription, but multiple subscriptions are not required.
-
+
## Getting Started using Mission LZ
-See our [Getting Started Guide](src/docs/getting-started.md) in the docs.
+See our [Getting Started Guide](docs/getting-started.md) in the docs.
## Product Roadmap
@@ -67,7 +67,7 @@ See the [Projects](https://github.com/Azure/missionlz/projects) page for the rel
Here's what the repo consists of as of May 2021:
-
+
## Contributing
diff --git a/docs/command-line-deployment.md b/docs/command-line-deployment.md
new file mode 100644
index 000000000..10611c4e9
--- /dev/null
+++ b/docs/command-line-deployment.md
@@ -0,0 +1,25 @@
+# Command-Line Deployment
+
+The steps in this article assume the following pre-requisites for command-line deployments:
+
+* Follow the Mission LZ [Getting Started](./getting-started.md) steps.
+
+## Step-by-step
+
+1. Follow the [steps to open the `.devcontainer`](../.devcontainer/README.md) as recommended (or start a local BASH shell with the prerequisites installed)
+
+ > `vscode@missionlz-dev:/workspaces/missionlz$` is the root working directory for the BASH shell in the `.devcontainer`
+
+1. Deploy with Bicep (recommended)
+ 1. [Deploy](../src/bicep/README.md#Azure-CLI)
+ 1. [Customize deployment](../src/bicep/README.md#Deploying-to-Other-Clouds)
+
+1. Or, deploy with Terraform
+ 1. [Apply](../src/terraform/README.md)
+ 1. [Customize deployment](../src/terraform/README.md#Deploying-to-Other-Clouds)
+
+See the development container [README](../.devcontainer/README.md) for more details on building and running the container.
+
+## Helpful Links
+
+For more endpoint mappings between AzureCloud and AzureUsGovernment:
diff --git a/docs/getting-started.md b/docs/getting-started.md
new file mode 100644
index 000000000..3f358085e
--- /dev/null
+++ b/docs/getting-started.md
@@ -0,0 +1,42 @@
+# Getting Started
+
+## Prerequisites
+
+* Current version of the [Azure CLI](https://docs.microsoft.com/en-us/cli/azure/install-azure-cli)
+* An Azure Subscription where you have ['Owner' RBAC permissions](https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#owner)
+
+## Concepts
+
+### Command Line Deployments
+
+You can deploy Mission LZ from your workstation using the command line. Some other configurations are possible, but this is the simplest path.
+
+We highly recommend deploying from the Development Container since it comes packaged with all the right versions of the dependencies you'll need.
+
+### Use the Development Container for Command Line Deployments
+
+If you are planning to deploy from your local workstation, we recommend using the VS Code development container specified in this repository. The container includes all the tools and pre-requisites, but you have to build and run the container. If you have Docker Desktop installed, then VS Code makes the rest of it easy. See the [README](../.devcontainer/README.md) document in the `.devcontainer` folder for details.
+
+See [Using the devcontainer](./using-the-devcontainer.md) for configuring your workstation with the development container.
+
+If you want to deploy from the command line on your workstation but do not want to use the development container, take a look at the [`Dockerfile`](../.devcontainer/Dockerfile) and the [`devcontainer.json`](../.devcontainer/Dockerfile) file for examples on how to configure your environment.
+
+## Next steps
+
+### 1. Deploy the Hub and Spoke
+
+With the environment pre-requisites out of the way, deploy the hub and spoke using the [Command Line Deployment](./command-line-deployment.md) for step-by-step instructions:
+
+* [Command Line Deployment](./command-line-deployment.md)
+
+### 2. Deploy Your Workloads
+
+Now that you have the core hub and spoke tiers deployed (Hub, Tier 0, Tier 1, Tier 2), the next step is to deploy one or more workload tiers. Misson LZ supports multiple workload tiers. See [Workload Deployment](./workload-deployment.md) for details and step-by-step instructions:
+
+* [Workload Deployment](./workload-deployment.md)
+
+### 3. Manage Your Deployment
+
+Once you have a lab deployment of Mission Landing Zone established and have decided to move forward, you will want to start planning your production deployment. We recommend reviewing the following pages during your planning phase.
+
+* [Using Management Groups with Mission Landing Zone](./management-groups.md)
diff --git a/src/docs/images/20210419_missionlz_as_of_Aug2021_Policy.png b/docs/images/20210419_missionlz_as_of_Aug2021_Policy.png
similarity index 100%
rename from src/docs/images/20210419_missionlz_as_of_Aug2021_Policy.png
rename to docs/images/20210419_missionlz_as_of_Aug2021_Policy.png
diff --git a/docs/images/custom_template_deployment.gif b/docs/images/custom_template_deployment.gif
new file mode 100644
index 0000000000000000000000000000000000000000..11c6594f2964fa6e98926b4a27a46c6d479af27c
GIT binary patch
literal 4878583
zcmce+IXf?A_sp5uRZ>wD5w(UvCc$t3fc_tWrh=ZXoQ$>t9~Tc6
z5b)p9Z)|L)|7MQ=1n@tz3PE8}5fM?b{}-=ci%CdIOG~RM%BiTRsQw?+)Ya70)iwTu
z)*B5SQw;-0YdcS;|AV8WqrJVIowb>hv5J?rgr6M0zYvcZKes#|k02i}A1^Nt4=*PN
z2R%JK0|NsqD=Qlt8#_Duf5OSD{F2**MZktd#G6$LNv{+~rLs
zk9De#O-c`}OLyD~Rs+(9-e)&`$S=;w%1KC0LdC{JMMe6DL^{FWxd%qP^><75)-7=s
z{rXmT2qiv|sIdA$V?SMVC*$RGJ?XEJCzy#Rm?6qP1M)ZAR((A3cKwV|`8sbje9%WPN6C>q`SKlc6)1ARkNBa`2!rcc(!ejoKd{u;vE
zPhx(}W3IkqZnrRhb}{$+n7bp)pL5K^4F+?M!TiBs9x#|k%>OU=&&^*9=JzA!{t`p@64o4=h`4}BMyp|d}OyT5xk@6c;E=;h0vh4Z$B
zgNB8J`h~O43zrRx{~vz4s$2S1xpDt-=dtJjlXr;8+J8*i_?5<5=rmt#KHgHh+Um74mao=Y
zxBeA=eY`&2`gyYlfki;84nOU~qDcUW#MamE45z$OD^PE5*c;F0ciot1Z#w}q(
zYK59z!A4P__gwW;U0?5hZuMi{z0m6J{C$16&Bbyk*7f)9VrRTitEc<%@BL;tPeD)5
zzkdK6mMsJ}r4t>3rYUd>Nhox<6-lDVvK>X9sgFQXI8<)OPzM}tqv&Fca)GdTryp@F
z<&{6;Ia(^WWw?e|b`k`>Iqf8h{P<>)Bz}9ilPrzHx|?E{p}d=_%v80TrYAaugR9?jtZ&$~v51NqKc*?;gZ!RabZTr>NdO0Kmx?K4fY}LlRYr
zi+;_st>b_ZO)$EC+2PY!%UZz6S?g8|`+3=rfh$-1ghhsj^;9*Rev@Mt{t2Kl$@OQ~
z{r;z)-4C}XpX=xdz0T3}b*34;QO(aOIxlt9cywuY)%tqK4c#sWVUDL~19t%z7sJnA
zif4>OvYwLn6Ge6|K%TXpUXAk%b6ihshZXtw;!s~mgUQmjeW}RwF3`X^F2;*Vw^Ztk
zIb=>J`55abGww+}L-${cMvm(&!#hZXpAUhNwj#_XmUL*vzJgPcijwZa-&9?SBG8IS
zj^;B+*tPZ!vk`iCb~kR8{8z|}K+o#-yZygY-|zO+9ufVK9|Qw+-(!8NTMs;VyxY$U
zJpX;rjl<=!+et+yw31-z)qDI&YX%OJ>i3YDmCJPrsY=%GPCpN)@)A08;Y75K6+t~8
zE=QPOR32`p)vW@brmVNExHWoofhiL5+g6?eem)p>UY|ohO*b%h?vGV`#{4;TofL1|
z+-yNF&+C5f_;p`6C35O9OpIyBh|8Rx^XYy;Qv@UuLFoM%&b$@9h#*NQ>e;yC{5R_m
zR>}V1^kTS|z-Y_MIg)0V16R5x){~p?xz+wT5&(fSMP%}>FRKm;f%yhOR#rtO9E>qs
zuo42y)083-l=8sKt2ksr2W8n0AAva$v_C~Xy(yb^L>mkpk};ce!n7qD;H>4|@YNDx
z43!|!A%4doZiM#=OOPV74B;<>UJ=KN;W@nEg%nA{>H;#3C$TcM{tvBeWj&%#eAyEFpN_1!k)6*Z3
z6Y|oDu!@0FYa_AX#pFRnr6R*BQ{Bd7Z=Q_oLfcqb+pxE=Sz?*-HMQ%?$N^wB%!nht
z4o}XT_z0(H4mnfV-;^dXGJN
zy7%vc3B+~jw1Nug0AOVxfl)oOy3VSanJxiD5{u?T$ix%xxtQR7&$QJ^EuXBGrt77P
z!LRXS#Ro)6W9?}3%r%rqemy+ateEZJp8WVCTJ@feU#C3%hTSWHK>g=3l_;_o6x~}4
zo57`UT%0XmO3;IlR>)
zi!mdD6=5Rhq+K}Z<1hd92k=%*C^3zb@Dm}2vc`ROpU_^txyq?&>8R1PNB}5O24U7k
zkb#ALRqK?KPOq9;p#zg`Dm8a+9lD4n+&aQ0-$1lzfBFuoMmGoa)l(hbSQE@wHGj^i
zjptS{m9@Sy0Z6-)et)S?asREV*Swdqdv-)81q+8wS;pWWvY+qaGI>V4!K7c>s!rRG
za~PWkD3+s+hG&2@Eb#qEYoKRot({Zih-_nK2STd_(5x>vhEt2pvSRIgva?i;szH6u
zpeuFK?P%9d!`7Jf?%ZuU9p8{NR&JtBp_g#zeI&ivcgbEWYTq_p{Hs|f^?Y=5eb+on
zDWM9QvhyVJM}5>vmi6mqN-RHQFH|7ZM*Z{s;(M1bMQ*0dYYo?L+*r|i##TGe58wo4
z^-(Wc&|sf*n`b;*wG|IP^lSBeJ1)(~Y2D%Lkxvx$jGO^5762@+Iw%qfYdq$WZu%9h
z?SJO~({}ZN_OWgdV6lGf%JKT3hx%!QK5J7|n_H$*&^$?uRZJvM^8(C|wG~niC{;8)
zk~sTFp4#%XU&*`*8VX#5m(<5`Ge+wy(=Sw&!T(^iYmV^eoeA?i{Nt@BeUwJUw7Kha
z69n;CTZ*ifIx+5E`T#6TWm|&Zgj`Tn(kIV}+qoyF#u~@3?3(1;S@pVa%|6co#COU7
z-~R^u>U#_LVvbnb-#7u!oo(=KrL7-&2bvse9894<)ViYxR_bg3jJl+oIp*nD*c&_D
zfAdo%-4_P_-dw~kIbUS;T~u>FfO+h4cW5C&sMU(&#ERg{mqN{-Os9ery4JMJ|H*D0
zMVUJO2rAG>3l!@MAmH
zKXvlmcHe9f`i!mi+ZI^OuQn~LF&9X?U`Y8d`uRgMG+Iv;xy@2WLKI0x6vqT7rNr8t
zAt)okb4_vnxfK|IFnP<2=cEma4g{G>6D2I*x}=1&X+J@ul~bi5&jOsS&@KTb-cSP<
zMmiUx%IGv{R3I{Du_!uy1{Y)Q#2j4#+Mgjv;CT|ZWbFidVq%1!loIQw6CRWXGS!YP
zlg5ip@u9g3Oi#gKLlc$F-~_%5_rHpEzW{A(nXO~mb`-xUMm0U%$tLCss0^pt@71D+P%NHd^0fxVrklM$>+L~0%x$g4WrLjF-t
ziD4yeA}Z4R3&u{)$-<#LGz1()tEV)bm8Kx_)WV^gZb3`h_;2C}yJoEC
zal`$5oLL>2&$8mG%D`QKco&v;WG$ddBm4<3+?GRcI7_CTF@6F7cVZ^Nc*XkT2w|*t
zc1%Sa{3<#fO<15D<5z-h`8&hJ3G&=4zN#%gRf*ZM4JTs78u2@BR+^|-G${ZHid)Il
z3j+N{E5E_}5Fdo&-)DU%jhBS}5Jv)Bqstp$^$ETIU(Nd>1~{2xJt@k}(vsx1h{y~K
z&%u-?;^BthwI(?>CQ?gVZ?C|ASGcUUCpNGq56UGoS^;zX0AOtvu$7f%kylI~B_+&`
zH6?`u@MHuX@pnKEO^F<9hVnu;xiEJ-!*O*N%wqnrUKIg9%IBInYl$QSVUOLgEk
z#@XJN304Sj*>~h1Pg9Ek5F-@Cu-;1?L6t-(UBQk5Y-~JmXqDbaF&B3@@U?Y>YET8s
zJ0=!&=deL(ye>rMZuW|2xtD8
z#T*=)l`f5Efsf@%<=w>ku3Lqf*NRBbIi?JOn}Wbe9*z$v!S<{7Hrk5ycFDm6>JYmt
zGkdx~+KoWE074D6#LCL}fW8XGi)a)Y*V_c-$rj6a0osuM@1`*`BZ%X3e0WK`BiQgz
zY>9TFK{l~fRV|rFwu(M!JQq6WS*I)}Ll6t<6JDD)d8SW1Goa(e|7gLPGYfB~X-t}?C0z=#kCL?>^k<<^q#{`E074w6wTmWb4J-=&qBLbkfw_5a
z4JGVvv(ySq#tc&
z%{Yy}P@1L%^QJ++ev#@|3QqlOSsdb=njWcBYG8!#e*tIrA}TY&Fl(`Szd3GjGmi1+
zt7ajn%EM!cZ!HM8hua*M`OQ@(S7Rrsddq$_Ar{8#5vi(ZXJ(rr;#@`1Ls;bhRvrfu
zsjAtey5wFPR+U}g=9qxw*>eNh20%s1KOE3RO0itIkDOpAH8p?EVNsI>mU}PgIZjw
zy1FIMTs=WUtJY^j{4lhh5(?@)Sgbdz!sUV#|4p%6L8XDKfxIDSY$Jd98ai?p>NDv7
zQq{rwKwnNI5H7J*)D1&H`89-+L9JAOgykbev+q$n
zpDWz2A&eN+;xF42Uj$@D+e)u82db2Z|NYQc-x9DwWMYy5|J3~Euh)A+=JXEcAMDNl
zR+&$fk^)c4N?EG_YfYAwl>s`$Wjw7YLqY@gvfb4RPgWnBxU6~;W_4|Rs2Rv`rfD}D
zk-U@#;K4b<1)SjK14wu+a}hgjjm)i|=oR~!6Z-iH+vg5lE=`#opS2h56!^)uw+=Cb
zw*WD=K>VWGs6I--OySmX`$h*i+L$Qp0y4T~C6oyo&xC$=NYk@UFCzciKoF=`41lT)
z1@I2FjK6PJ1FSrUcKvnldG0}2udqYuLF5I*ROxk!yFeoZM*PIt#0HA=_d7$20W;6L
zE)9zF=(`lC95uE-qQ0@njp@eJ>%wgsHq=b4PnroI8YtGh0#qSzKDdJ^e&P)HB*$C)
zp=~GD+-WpfD~Q4ludv%k9|FS8<41LF95@_Bb2b7
zkw_qfC3RZ5h(G@}47J!R(zgcCy>7^@N%!{wBrX^Sg2vwYpt0O4sNA~$vbXU*$J#(E
zzeiVWDyrfldUez%(zu$v8K60(zMv0Z>jW?W_Wq0tNTPN9||c6NF<9mLPp
zoXxt@t%uaC=i1)Qb-0e&V7809SJlUb>ra{i6E~qXf9JoEF37qoHKazpjgWhnM{!44
z8rLxDPXdfrlFpypjru}`Jtia
z^NG5xEB@1^a?*#|{)UNG$%hsGJez9D+VZ#JmHFTCvzcpaH5ZJ4xhIsuC|~v&P>K=0
zCE8SYNN=4|*`U{~6uDqJJ8M3x!lX*IKS@624v74w@^nmpu4K-W9ysXwQKnMN+Ry=l
z0K~jv+oaszFsH$6JyOd5ewO6F0rxgv&!?#Sv=Q64;co-9Kosh(cj?nKl1p~qNw^&R
z4ZmtF@Xg)IJ?kGohC8zpzA)=`{eXu1{J7Pa^uL;{Hfyvq-hNpz&bU#PMmzb^aG9})
z_=(x3-`qIW1ao&Cvub@WJnaXE1v=d%D5%7xULoteE$C8wYu#vCd}`;OdO(J2H{s=s
zjyv;3&Mu?Z?z&`(=j?7DIIhF0=u)6aPZDabWt}~Q&=z9Ho>49KnIFP{
zyMAf%(_(w=&6~ggB?XpXsDZPeV$U5jE)2N02r7h_d;^k(X>?YxwH~67x-L1k9
z<7v~x(pTOLGOzaz?<%tybCFv+I$@2e7Rxf#{^a=yB%X=ODO2K&k%RkKAJ5t?Oj3kj+)OEgRZ7uc`WU_V))@WJ5Bq{V%`JNmidxmkz*
zWLka5g&M2@T!4ABDUO1nE%wNy^NcQSh7xJG6?>7<@w_(LW<#N(;P~NuiEs=~R~upW
zOdLDHSzF968oyfK6mY%8>&DaUzVu|rq}3H{?ef$KQ2y)3e3iocjr=@sAg^^Oic~j3
z1_)RLl6wIndV%Nbc;q|?y3h#X7x;P?L_@7Gtg-bT)C)^Y=$~I_o5O{c;XYve+t-R{
z;T6oQ`Y(_LxgzO3CK63yd~`Mf-3enGOlc)#weO3Gx3*)-B{OlVw9$+&e-d-S8cn8D
zUNyoXU-#xqu7zfGWfX;?9S*6BL!R8Ls%{uNOW{bG%SfS>j(pyG5}BAHTB_jfXUJ^P
zQWez#jwocSc
zt0)T8_F?O@)3#0u0*D*S!SDHIS$)+l@cCr(k7HY+9>`-z4KQ%??H$5f>a`V;58;|3
zvH)Wbv>3D^h$MtmeyRf?KZl?}kY{aMNH8JKGU9@e<+BYold`8sxbS|PZL$=OsNKV#
zRS|TkLgvq29y0lMUaSGcg&@!Jd+mOF?unVD=dT~|l}rj^Cbf==O45AJNfZ+~
zscEl+Iq9QAD(Pd%d7PViijLnkh}tTYq_|GZAAw^&C%@`cjctrMpo?YC6^8o@2?gOyn+bv8Q&|9ro0fE+OPAH>XIV#_F9&
zG8B;_7FpZ>VjG_ppd}v1NGm;vjSB!u1
zO_`!)#I1n5=~h9}q=eS^zS-X9+#xx5&^t<4-s-|WqN3`@#Hp_2UunqOkD@Es&>hL4
zJhdcBmmPhB_Cmn%Pe+nQf0!;K7HR2f~sNy1>p9;q-wV?kIWxibzqm^>!3hnkq(7-C_Y0CMx6AGExf&~)a44JpS|
zo3>AyB$F6@^WB}6
z*4p5rIXF%FpalzcfrG9VzdA66mSqB5yzWP8RB0S&Tu8R>C9JK_ej2MrspiKTvCzTO
zsqg8%mAB#=Fedb~senvDtIkuNLj1+5%ocH4T(qJ7SCeo1jh||xYkjD-Bb+mfK~J_|
zmMFocokjiD9`UY
zqYtsaaM8wiCx|jxV*sIa;pAMk(e|CTw4ax{ByjlNs*BsbgszMzG4aLQQ`s>IuSj4S
zF(>U+*)kihjJrR0DEIc?HMYGjxt;Kg@g1S8M~Ey1
z@!Aae7X0dTlyr@qsBiKu3R2$@{LosBRP-x3<9Af(Z=X(%@hfG_Kagr{n9VY{01UD3
z5&!o(uQT9Rsc=T6nEZW=F59nKzstp7vvsZ-JEF?I)`S(GZqluV7XT`<)t>&ol*RSy
zbHqc$*Y1wRVa0%k4D&u>+|`xon1H5VRBp~8ZCK+&0WHm4?%aVz-#2jr+Xg3jU6NPP
zKxx6&#V(HkOsi=tT~R~(o`h%c(uW1Vmb;L`6OXXF)y;oX+r`%sUPx%?_dOvIS73?<
zLU?VP7$ssZO?MGxxb_38B+$p(y$FDBVG$<7M-(Kl!Xu03FE`+0`rSUXu6cXhsGtdZ
zN#ES1wSD2h$NFpZQ#VDLhjq<^*H`my1(
z@WPjF|GL2S6H7?QGEt5Hm#p*s+zA2RFDdu
z%ff8jR4BbY*6#`Kc%Kg_UwVCFFBS5AY2&ta`0crWPsqmI#$692>>^q!^aphFepsn{
z)BK+j9&YdNX;j!vnbg~3!_7ZS!(q40J#WtgH~(%z!tV#A!mhG59}bkl|19=|-L`H%
z{zQd8>`8_HS=z+h4TocX^@L;YHvj#DpaJA)AOjjCfc|MJDdp0QWrxP`Lqnp_xanxT
zQZ#-OnqUA;xPT_wML)Sg6Jz(1koVrJp(Rbwr1HJwdc72Oy_9~v(5PNmdM{OJ@3W@f
z=L5YY95Rw(z0^0oFR=UQ$ouFS`d$k3y^`-^(CcHQ?xR`zNNd-}lHSK!+Q-&}>0=-0
z<5=k9-0kD)lw@9b#d6cf%h1m!(9bX5FQC^iXxA^)DZ@klir24Sw6tHWssHsrzxYDG
z#BM*6-`Co-eo68H8HNE_fdM)B0eL-n@u+@0`~iii0p;`omC^y#rUA8qfk)Q?oZtcV
zn*lBCL2Ysc%qL_B0Ae=-HkZcnYD2NX1`VSW2-f6rjt7jI22BSB&BzBiNT}o3qFqKn
z=Hx@x13kuOMJ5bGc6vkhc0>GjAg_zTSP+ECX~+e8@Ks6#3=zS*HRM5!1&akziGZ&7
z6~VHKt^@sS^^gFo;Q+tkz^Gw(`fyO`aB$Ob$iQ&u!tmSO;jo+kB7r@EARmcf7(oh*
zM9Pmu=_!XaK@8=G5Bovpv5IkXU=H}myD0fru|Ut=k)+)r7!UG-eHdFzDZ#Iw&1fWD
zZ#2VhG}CW1D{3@5eKe<3CDU)@-2gH!Px+m|XaV`at7YY6a@C}S2=ANjRQaN`8x=vb
z;atD5im0*5^s%bavFfI=%qB>J9Vl)=#c~1cVm4Oa)L%qB)^IZf6B(0QU@Ie6Exc>)V|-;LFhQD1~e&;lsHtk
z>>S-)m|`H*+@_xTp*LP5J9U;Wdnhn{EkAvuH~n3HIAlgekt8y>E%GG2GK6mWFGt_3
zfLit?lIvpn-wlX|ZgT#=FC7EbmjhaiX47E%861D@{ZQqu1VwIXq)ztqI`#ziqV@}p
ziN^;d*K(x9RwU_OB*__w^7X_(ljM#(752LJtI!!(#w=CY?59#$_O{77d1@@TG^d)#
zsm>WE`Iz60NZGm^d9^1Z2
z<(=06_X*iA8u%|74yrwl>(UJNgtCDBy}G?vz;a!ZNSO40N7FM_vAaeaiK`d?pQEan
zx5`MDN*o4hkfR3jEp9G7jkI-b4C7l#>ih-JsloZYzJ7k+tC2Y_z@qP7e2Z-`xYI>>E`QSzLHV+P-6@csxG13Cba1vL11wgV2<^GvjYwQ#Jk?8D(BV>8
z;#!a75}DA+kPHMH}Dz)}j0RAy~Y1gDWj
zvt-nx6q_`T9j+qY;;3zg;yphe1qH~T4%f`T8=r9*Ffi{}*6qX@%}ODiu_#&PzVb={
z)Q^otl5ebi1_BCBq_`Pkb+Hv>$kHCh>HwnfPl3TAILKHWKEe@BFCc6g8M=&Qty~L1
zOiFkG)7?yR79yc35ttPY2yZqpct&X&ygpMqTEQswHL-`oYfeQ_&%F8jasPLW8nV_L
zbl|H+12&D7HNG`PCN)d4OK$)K;-*WxC)QBFhxPOK>t7lBvi3%}Q&zee-|$fAHVzmc
z&aWi%njM&e)D<>wY8Q^)N)IUHDQhE-PauOipo1Nt8y&8E5t>%n3>k}k`8Ohn4p;3y
zQvXqDavd2c0GZrd3%`lvh5r|W2v!kPj-B~Z;^-`=`HJ}Zg8BM%*{B2@$N^W9S_Z)o
zM&s^V;ip?%UJ-9oG?o)hG-{>H6{wMe>yc&F|K{~?^EJ22renvZu20r|mr;z;3(aMc
zrp-vkWemz!8mE0-s*!OutxKP%#^Qvcum1sbPPE8{8_7$v#-|}ApRXS`wvOYs3FO*3
z+KF&4vOM@3@n0%b*#hC`ZR%7;dDo-7y}Fr}A)X@G=dMW7QA@0Ir7`pEz=gHaydCS~{~@oK#XzQjvlK8NG(*-!4P5?O;y8IHD0rIFL=moT}1lIo+DR
z4R!ddn&mkh21@FEW2nFm3cOavpzSD5Ht
z!5FjS5Kv54-k(WnS_A~i5_LFk`?xO2qMWA!FnRGXj8~xK>jmUIRDv2HjT}%uTcFT-
zE0U?*ne|;_kM%486!(Qy00)ZK3&`lC8X$m@$VMU(?2;Vp*<&Y-DZd4KIh;Oqy!&WE
zKeBC!k$Mksq#seYjbS;^kaDB|G1MbNy&M=)el&GK*p=1G1Ef37dc<;KJW29=x16nL
z9qAXe8gD>;nvQ5eHBe&rU>-tZB(g2@q`my49fQQyeG(cbbJrYY#S*Qu3_98Y2F>hP
zi{K%Kq`N(K4qhLgJ#~_x%p3GS44Z&JjqKnICSd|79xq^0lByQw5K~5Uq=^>Po0@`9##
z1+HP~WnN}$x^vZgL$i@&O3qILl?)V-0SUWr53$I*|5GsDgiEM}Cy@jdR)J<$ur0fg
znoGSfAhnV+jj#!1(~j8ih=KU(za8nhw@Dp+m{C`F+$iRsKA|-i1k)EpTI;WvF9W0O
z$oDUU0arn%k))^y4uE^&#w9IknAP(tA;6a~&N7;Ur)G~QUd=ll5%9oGFKB`~=4?%?ZY
z>`N*J1`=+
z<}@ty=3T)sSL_x{WIIFiEOQe{I(_qGA4!0+))~6UK>=a6YpgIVs_fsm7Vggifvis6
z`VNrH%^>muKji>m@ju1q%I+CcS2^KEYP9YF0>1wRinHy40re+e%9{58E632;$U%uX
zFbKEBE;uT<3I(iIa?bGhtBSd#YWs}>|Al%ED?u*nrVo{wLSQ^0P04?Z9QN{2R+^~)
z^sQVa^US~?@}x6J(x2i&Aguld6L^Z$^Y}|Cz5Pw&==ty;sHS^g;O_=U)L>7@@C$q1
zqL6@Pw}pzEso`th*fSqGU*lW9qt`Aw-IAvcJ-T;$kcl68@-78tJrN_{4t=#;gz#J_
zK_2EFKyeGZr1Q0c?jKD4wl8Go7A)*HvB)WQTA0>$XCk?jlki8d%5#%l9eeM;AtPw-
z4*u)nB*XxgejYr%8^pn-y;ddVFd9oCp?}1EhEz(KqokLhe#QaERq1>27^>fN!(1#M
zPoZW`-iNiSoQ$QU2s)Z$Bz7-j@!qCSrdLmY`8;HjU<
z|6`!CSsh~5maTI)NEmDd>5sKecKP1yzB#1vE~~n*#TuVLu?Ft;quM!D`z?X3>K2#%
ziV3H%1CC^M^{0AYqUZc4^`{($lM_>GrW`4j%OfW?+~%wCtKA0TCb!3*T5PrQA4B-1
zs`qG5GM_J>?|readY5b(!tXxGCHql9J)fo!$~Bj@>Xv;>JH7bPP!MJQI?(X~Eg|_Gb-nk_GR=rF$38cRDc8BWo#}&n$L~3q_n7EGo|WGh$cv!kcIHBJgbZ_$
zuTV1@gbfR3DT!n2aH2Igx?m|yRb_Lg3X1*0Ql7)cCX=fc`zw56VS0^(iIFw2!t6z`mY$XuIgz4F1{qN;-laCU>z7UxuA&4zI9;2L
zLhw}16!zBxBdLG!l(6YrCVob=-pWoNWyheGWxq$W_BUhwu8eiBEET0ZZ`IiHP5nqt
zmJP{wq_?!MpC>0QS%EDw47?43fQIfi^7na`TniIx?uJzkw7!EGa(vOetq0!ItnZll
z^o5_gXHAG}WzkLHJgdF-A$kY)nKITAT(%c56|{IF6
z3A6O;#W3FlpU)0njT4(xmankqLhjZ>{z=@gTUJZ_j`fLWqA31kiT{4o6<)0+VW&IB
zU@~%|{Wv{k;@XEN8d1*(*iJ8*nGVBy1AS}*kR_6ohRJ$CKT$4sKz!`T@F$etP&<+7
zt&cG($jHZp)stDN*oD!!;ggHJ#KSs1VTPO<)<1KS#_v|clQxE)#w)e4qOI7?MpY&8
z4^X^j>U_;X8m?#|3MnsZLY@>Yr-6QObPh+C(eEg<6A`b+F*!LblQ3bI#J#d1xL0}Aon?31v~mZ7T7RCZr-wRMm3sI@iB
zmpCo6X~z*hg#vxvq__Oq-*Mj4@|%DYqj%$9QdRMlToQ^!Mc5(dzJ2(L%b5}#!pQN-
zr*nYU-n(phcqfJY>*$x*w|KoYd_E)T!82*_{6?~!0KG&GnkRS%()q^>hWI*o#pG%}
zo4Q3&3Afgb_+>LFREe=DMaGY33j<7I^Ho#+4fE=YSn05HatTR|p9DX#7k-Tyc3;F5
z7h)cmrF*Pc-yUCwo{6(4Z=uplQZ9^9UIsO{StO>$u8eflR#@gNvUzBErdHV^9P@_R
z$W8{P$JH&BM}?Gkie-3%MTG>M$LWsxveuk_abIIfQWCgQN<>+=E^!@``tIv7Y1b|0O(oD&jhl;0XbX?0P>M5goiIlK=Ej=2K6W{#RKzWk-m8?em#ftYOzzM;^<~M&9q*_qUgzl7-T
zX7*AM?CO3l*LjCEIDEOFj@#7AynO|h&>i;8-$UmGem=AX`#BX7p)!P+TMBYrTm|j3
zXstp@*de0XQTtE1ZZT<)0fSo`Nv^b>!6g||Yuj+Xf}9a~CA%17*+3R`1JK6~QWSN&
z-`0s*W_)FFiDx^aQ|Sk*pva?FR-JegRBUI-%@M8Xny3AAcw~6s)f#0IRwU>B1+A{M
zi--QJhNcNC0)y^`jHB(sz8i(+)PxyF_pkcW0nLrx>qIv73443#kp$N3HrcCeMl)&c
z30(ChW&|G{*c*qaLl8h~mY5=;o_0sQ^~QO&Pf7u6lMR1+8;wfDq9r`(h2=Vp2tiLX
zIaj|3rR#s(_(5%?^iEX5Tan+HjVe=3*kC?DlhYVG3wnDG98bgi*OkoB<@<8fvPAKN
zQ#XBFeS63QPmj()!o;yXiUBB}?yGWKAJw@p32txs>mlfJkoNNj8G`}fT&)J(=2`z#
z{^wx1q$)58FSs?3i#}D9isNU{{MQYEKc4x!R9(S;pqt)fj!1s}tt%RMC~$fKdFCz-
z`LN4Go4Waxr=*9#v2B>kPW4UhplzX5-p8lBv5fes-0uSON?8&wHPv`+D=wrNc**G0
z4akTnJl94<^{YmOyI;K`_ViM5xO$(DkHvZa$4OCcq8d__uXUIB{;Q<#xY_TU&$R}!
z<}=Cjs8Or3WYG_`Dk&-K>=4vvdQgB||ex7Ja816wL!?3T-(F1AK8dg}f2*<=|#
zc@<;ctXuJ8W0r%j%%8cz@8>DGXTZHE0q1!@gn-}J>B%Sxyu8XaD5N2Orqi57$8HiJ
z+pY0Bi!Q?ZWo`=>>5};>P24&c{l4f`YVywl45KN&huG(+kbv(W$$LbGC62v2yz=;|
zFAYSl-hU4Ljae%621P>8n@~quJp|^5KVbuam@o`<3$jUjPnfXvlbdaOe3QE0ITqK@
z*!9Q5*9;ZbgxS0gcF+0Si{1rtL@~|mz*c`mJdRpoa;P7Q)*#j+jaE;-HpSy_XRD-8
z_W-D-oXsA+*TjM*r$yBz-Fi>oY&b+G){L%L%cquLimB$&`jjf>RrF~DQAL|ugq{PF
zHmM4
z#Nd9{s6-Uj4u`I{%2U4j)zr{_IF;_P{_64IRIC5$F#>o0tUzrm>BRae?>fDZwG1Bx
zHur8nY3B#Vf)^|?B`n=|gloF6P??)Yl{|rDXj2I^R0cMpa&5E;b=!R1i?~bOEGDG>
zO`gYJYheDGJY#^EML&5l}q4f|2w>K&urn+a8ZOX=*d;9{TVgf0
z>)q8J%6E}2bsK@aO;J#+2Gi{^P@Kz&=Iv5`qls9~4E6g?Mx(q_wM*(V_^hwk*e9C$
z$q)FMbtR!GZ6>~V1g&xkE`0#rz6QqTvU5+(=);+woZv(;#cn^GzL$ZkSHcLWs3-T5
zDcRyBF(qN4#A$z19@dU}f8$#l9*1%VkMg(y^p$ksFBMBDJc9F&F3f8amREA4LCksk
zyl6n03-glOC7ByzQ<80&0gtad-S@C57b~+IBOQ=qe8s1^pi(uaF0zH)jqPJH1M-K}
zJ|KA7$@zqsF}yQh2h@c54ywsts%NJNkG*@$$xG7MiBH8=7KqTq&f#}R@nK4iUfz*N
z%XF1UBlKG_75GM(5D{tz@xp!*}N)nJG@KOoS{P--ZO#5ia`t)8LACJBsKP*VWiL`JAeC4pCID91`zhcvusTVD3f
z#yW%To5f{)NSvh8i&Sv(n9>*_F4?V8n5GQkNhPjgaU?ChQ31X61C8F!cb(YlUcV!_`T
zXW5HAt_;~c{OUmDz$xy#rrPBPX>N3e_LhShb-KBzy=i(7e
zH|mAZftN)i(r(8;+#IyrzwZ}sF=doa|FL=^JP7q-DgtyAdIx9+W%dbN#D7j95$KDG
zvwtVSF|HyZ!Bq;M|s-&B>$7jskfcX(pzVD7>6|-#7^AF);__Mx+eN|
z(CUKDA%$bGMG>a%M(LN6s7SLQWBtLL!!qG?z#&1jDYHit=vw1ugk3}6)QhIH&vrQ_
zug9aXzv!hrEOPbAeBK3E`EvAp
ztoZ%?QSLJ4sK#O{9#`uMTdO9x;8MU;WH*u`bhS}%FmMlx!cInVp+Ic3_H3EVqGRCb
zexyv3YftBx6fjmkrTeSv2h`8wMx!uHBiVIKg&7BSTklfsGFIKd25fWL6Tr$Cr~%0J{Yf5I+J9U9*oZ|
z(fR5p5?kyXd-~T}lz2{2d+mJ^_wP(@*TMYX4Xm4`+<%{Fns8WnNYEO~;y!Qr$=>V!
zp2s8C43BS3PBOdT6zr9GLALQyi!y4g?d|9h3sa@~@nvaJi|Amh!iCHk{m;uI-HRvf
zU0e`M;KkLf%KkC*g`TAovJN-79-43t6NyHA@i=xEJ8q~x39gR=FoOqSb>BS_E&)C{=5W%*L%$UexEzVIf0_4(EZOKG`pj1k+vdgrl5
zukI9EO|bX1owtBf@8lo}c;DzBMHIJQzXbX5ekgbP%4eEQUfMuZxR*7p)&}hzFP$ma
ztH^UZeQ%-@umHaDpdv0Rh{cqT77Zz*NG|AY<}hR>Re2ZNTup
z;Q!sBxcZWRn}whM?n|nUg$eahP5XELSGbPg+YrVQECrQb5tMNzwC$<^ZD8!Rg}d7dSDuQB5rS=1PWBCht4FY=rWE
zRVmp$BU!qIAVaStk7lsGfNp)ik3Fv6k$^VjS90eSjHF5CMRNf>B5%uwE4)yS9bf*W
zM4muUAFEl}QqaJ$*}zlK@Wu6|HqZ#wY?Lf$ob^k^5IdBycc)sH?7>rp2ZL8*qAOYB
zFJ@dXR-6^5XQTg9&@ysh&tdbLPEaRMrYFNg_r;nnv#Q?vO})EjTP$Bgr4~CaA$!9X
z`;U9JO3@n*Ev;4k=j)MT+B~6euloe9j@MWnD{iGi%JXq=t^PuFUj(2Tg-SSX?*v<1
z4sOdVggozBJpT!KwSM*>7WRg=dVjiwi6pzeXfCYb(QD%Q6d-e-p;e{_IB7ZdcD(a|
z2nPnX28Ij6BclV7g@dwMgLJvbSnhnFH@})2Nu*odV|x8uld(=CXklpo=lC9l!r}df
z@PEPxNE^b{KOEW?@j?XI`krj$D)`+6?aZ1ky478^^{%ZX+7f<)@lN(X2s~kGLk%w>
zP;IfvB5|ufQH3J$6>af`qvQf2oJyCnzHpc}{5~p~79N4+)fV%9*Y0A9{kkRwHw#Me~<}c-Vo^sGtHbV3cia)CbWbtdIG`VtNdGc`w9D
znE&WoLW_kvK1y}4c*tZAyT&{O6@
zpE`UYfut|@7PvQ=V>+yNII7P&t=GD(-#V`6x~{v#5llgz7c>`4f&O9Fh^5E6nWOox
zC%dvQJF_>tvp@SpBf+GtI-gkC6u7#dGqkY>I)%N4?Zf
zJ=K#p(Hn}<2Y}XZJ=b@=*MB|OhyBqLlmwKt*`Gbyr@h**{yp2bz1zP%+{eA#&pqAO
zz1`nE-sipE?>*o5z2E;m;0M0o4?f`+zTqD};wQf1FFxZpzT-bW_JMzVFXI<_EvF_RFqArAKmY(8JRE4S
zm1|e8U%`eIyVZaP4+RfOW$5r|TeolF#+5slZe6=~@#fXLmv3Lce*p&;JQ$`^!-tbX
zRjZJyRjdleMwUF8D+03xsV;6vm~&^(pFxKfJ(_fB)2C6VR=t{aU&ODUMqS+a>Ibcq
zap(4WU?66Mi`ljoKAd=QW2c`@l)>5`{4d>so~uVP{08REYQFM5lm3Q1y_UbHTf30
z?kW%r$j`#D0s!GG@BCW`Kn6h!QN$5REYZXhQB1Ko2N8piG5P@T0EF8vtg$NsO4zVJ
z@Ko&4#~*1`p?KKvCLA-ExGK{%P)OG(l8|@
z+>eAOp}dfQ5vcsmLonftQ_eZ*tkcdr1Dvjl2W5*8#{EV>GtK
z(MKVTlqc!BsIdKKnIO-1PuW|tHaGCE!EUhQB76VRk4Jv(pQtjbjhkhm66j<
z)f53#Q4?j=*I$7RR@h;QZ4j|nk^UW1Rsvv*5rkWDB~;h5cwMX5Yq8B%+ikh+Hl|~d
zO|~gAHFb7`3MFep-F4Yr7Xb#`h*#cu<&}(pX+!m{S8w_4*WZ5u4p`E|!Yz2*Wt+7X
z-N@Q)SlxH&jW}L=r#-aFHwDgE%rYcwA$sBGNVu|UcSVN0PCE&x4
zX|CDkn{m!LG%=kb*D7a4Sa__I+g+LEdLz5{=Z{79R
z3+y~GgiThQ>$*!n`t;PBhTZqyfe&8z)MTfQ_N;BE8~3|Sk9_ir`yO8U>8Y>Y`nZb!
zT&Y+Q{PWQ_Df{CSpPS*v5m?~yyq!l~e3{eFU;q92FMoZk+sD1H
zcu#(h3m@fr*FOa=kbw;hTv7-TK?zQff)$jY_L3Kw18k6k9poSbKo~+1j_`oc8=nJF
zm_ik<&|?s^;0s@fLHCX20X4MY4QWoCOP{du$9KN<~6aI&66OrmdhMVGo6r1RkHGg
z+BD}m(V0$ej?$ZA0jD@INlyHwlb-dor!dzU$##b2oxFUeJcD^pfew_QV9aM9_X(DM
zK6917q-Op(3mQ?0PSk-1J!3+@vQUNsl%gH==tt3KQAz$WgWqf>JPXNDkgk-aErp#(
z(MZx6MoT+mo2Cip=~A8Ul&61#DGV`6)5+Krkr3_aQIVQdn*G#|w*;h6w?kB5DwV2L
zwJN}vYQdmFHJZ;8;#I*KR1tX`p~w<
zm9KsE>z3v^!LthLuF+hYUIY49#V(eyA_}Z6;Z{4l7IrcLsMu7|CkbFQmb0B*+hZem
zRsc|zG9LI8wGf*iMQFe*9>Bta*1!P|Y+qtTou40
zy6tuEzjR9`TGi%RBv^oU!y>m5^aisAQmzM7kO8wyK|yoazzOv6UIi~$Tk%EMpJYUW
z?h=-?2q=LFPD_yf7HAG;iNPAo!UAkCn8YPUr-SEXvJX5<1S0T20Vpg~1e7HN7~bzq
z-Bis1J%YR**oPf9U>1Csn8-ygCW_(KEUbV4yCMj|lc5}CDNmWoRkrezG3;IbBC3u9
z0y1;o!DA2e!pLPd^CyuU*`Hx$#Z7kdmEjy`E4O$ATDG64zG@&fm<0yJCJ|dC`Fkk>H1sH=l$h?t8bm0QB^?(D$
z0FH@hn$s`-bf_OPX<}6R(u7ulpe3>h0ec_@!jSbuB!LG@o5j=in8+Q>Z~(I)Ak`EZ
zb*asQYE_?^+SO)Hn*CHRHZyqyBWUrr-z;ZwLmAu{t}_Uhh8CReH9)#HOBNpTWgic^
z$A)fg3r4)?Lnk^SkM=;MW8GsIBx2VdfOjb-p$1bIItIwaNWvFh-h)2`;`VO1qyM
zFQ~V{5w34nmqFPBhIvKS(DDb6;R4E@_$1WsX|}iar4JD9Z3H2n}7SSN5tJ8ATaqOUyA;xn|BMwcnBr#z=g#h
zJ_YEFHSPh7y|B-?whtl_q5C>70TnQmri;1+YguN+Al8h{Mi1RA5Zzuc12u31IdB6n
z@B=?U_B2cabFB8*!{1&DBIGRvEy50#3kGyg_`vQV#17+H3kKP5*JzIX-mfC$Z3lDE
z@~E!I-jC2c00$-F`8=TO9^&b$&+j6S(4Md&{)_7zZMop>2N!S)xzJb~kghc2I)3IV
zS}O$2@B`5>4b>0?%~1AGN5k+;Gs4R}It~TmAtD%|$BxS)2yF$rAtGe(3L(t~&1?K1
zf)23a)+XZcM9d=mjRpRYA`lVrB!Uq~ObQK=_y#N@4*qWs;cxNkz|^$hA^^=3A!59w
z?hzxAPC}pyUGbbg??sp-R6?%P`va|_Z|Y!PT&qH0`JVi
z3ITEbH1XdEarhW-7oCwJD&g?XVhqTk@OF0>_XRd+{FuG9U$VApemT4e}RbCK%IW@OH5WlTZ{V
zA`qX^_!Lhf)J_+rks^%HEK(pJVD2Jw@f#~r5@l-&pRV_yaPcHkBhM}uQ*I-f%Om3i
z%J8u!he;o0u>y2bCoP~Seex%PGAM;|D2Z|>{wttA5>g@21JJ0k5hcO}`HUDJVkK#?
z_y{rnrg9m@01UXYE4z{lq;euE;SMmM&>%4@&1);Y(ksF86DuMQH?b5BF9u+Z1b22GYCni-TI6G-E{RA`laXFc@Ii2%4nG-XC5jec;*<`bG@Y-tKCU7T4>UP~JvmZ5
zy`&W%qA(BBI1x0DkaIqyvq2s7K_N6kAyhM{Q$P;yyxy|M6tM|SZ3^b`AvzB2wo~oO
z^9axLAqEc#J)#k;VIn$C9aFS7htNDNVmGzm@K_K(2hR^JV*dKhB3RT#15`L6f;bcO
zNbP7rDO5t4v`HP5LZOu1)T90Gb0U}$(@FsH!tG=umT3Ga!?a*bzQilK0>N8$*)c
zj@8g!zz}ZLEt|C^%PR(abv$u#3WA~E__ekCm02aiPCZ~huku7!?iO$GJncYNT@F$M
zc3{CZA~2O)IkuuW^$V3GT}5_eL3Lf7;}OZxBA7A@K+@i%QA}G60z9$?5%wX*GTAQU
z0pt-QZkATfLT8mvEdG(L?EpY$x3OU{V*XxJUo&mfup(HwphY8M5`@jv3IGDUAZYz^
zXp0MI<%B>dLR>p`Z28ArN%m|<)?~>xCct(gHg;{{)_lwsZRvJY)i!QhqHV)gZ}GNo
zhi7i31!r?RH+4hxb4|A+MAvd(w{>MVYEV~oZI?n>cXl%(b~QEx_CR-mcWP?)
zc8Ry?g7+kNH(ZnVc$qh2hPQa3H+P%Yay_Cje|LJZw_~0cdWlzhv$qtMS9!m8d34c#7XaX_ee?H#
zgC&0d7jgr*d1JQ=;tYW$xN!EDy83s4yLW;)f^S2>0>agUH8_NaMS(Fma2uF;^|mnE
z_HsqIg;j-w1GfzF00LF_gpYTHLm&`B0M_y#1a`rNf%t_hIGHZ^cEunMEZ}@?IC#O<
zdQ0I04ipncz<`6eiXjDt>-LC~n0uEPcnMToks$;M0V0wi1P;N9(fCoYm~ORLiPJb-
zOTmeY6oiM90^azJ@nntBwvD+MkHMFP9iVLuz<&L>kcC8#&z6s)*N>l!ic3L^
z_1Qq$c~ql$e)l<`1^U{snVqy*b^p0@b9tZ{x}gc9pG7sHId`EQx}q&wFCaQpB^sYE
zx}!ZhItp5!4mx!=`f(}xqft7gg(9OtwWJ02q*XemWx8rY8lgtIb6whmXL_f38l(Pe
z`l4={b91_GVY;V{`lw5Sr9XA3>9(km`l+FMBa}KynHp`KI;ycct0Q8nq4bCyz>T#!
zti`%8ep-@(8gdO_i~D%2*}AQ_sjSiHtV>v@-MX&r+9SAnu6g9H`MR$wBCqw@c>Q{?
z>l&~FTgM1HvD@0P4_itV`?0f{u@C#IA-l4TS+WD0vMqbFNg1>CTC+JjvY*O!;Tx*qPLLrS!r>n7fx3}_NUFgaxVyW(+ZwX_7ruMEx%(lIf&RR`JG<*i
zwK15ryMzjG00*dmOL##LmRTi|!4N+5N(8h{?4Y;-oVe|PPJp2vs-OuFJi!sX3hLqQ
zy5t-7VF``^2`Ie6k>Ci9fC}~jxKjilu;9Z%Jj6e|9ZJC(MEt}*{2|%_#YLRM&56Ai
z*uA*~zU6yM453n1nI!h0QhZrUj=>-Nk52wOzyo~1%Co@KM`YE_eAU(5)z>@LwQAOB{aoW*OK!bL1VLnY{3P^T-(7h~
z;Nc&H{R#-a0Keqeo4^Vp{n4YHA1a>UC!N6!{zvLz%D0^f^5GkJ
z;oHGI+ywl~B
z;UcKU=GYX;}r=E;2S-5lP{O5W#PU2Q$S={!h&K3w#m7g!4<_W|*_MCq4)B9^_lonA%oLBW;W3bsD~Nz`v5%I;|;*w{voCz!k56@)f+@yz8cuQ6j~k4^i4-eZyofQQ
z#*G{+V)+O%B*=E9tcg7N(O^52BJ*{82{We5nKWzKyoocX&Yc^XF(U*tsL-KAgDy}&
zAgR)&Oq)7=3N@3-n}?~{rd~p-<83H>G3^`c&D9#jN!ns6HyW4$&eFUzD)5-6Dx!}d;SbM^yem5
zFq`I!1xb=6OsYYg6UVV*ITGbeE_kpSlm3NBvYh_Sm8D3M--L%$Y5b#0;LMvle-0g@
z&!W_;AEk;tyY}r*tw#S2o~Ku^;mh+pd$$Wmw{Y9b)wt&_Ui0*4$^#r2G|Bq>aV{Px
zn{07ZR*GbkQPy9A8EM9uXbwIIniZreNMR}YsJ4VduLbB>917-;|@37bi<81^Wej#o4Y1fO%kiM
zW~Z%lD58iRxDMoJH3~WF+Om2XTFN(wBBZFd=AMfgq>);Ol%?*z3naSocJ-B!^8)v2
zs2PoFYQLyvG$mTA-pf}uufhr%H3a`AiEXz&EMS?EEX-H04$d=d#u{f#4}{86tW_3B
zD72qJb3pv?Z4jNKP;Ve#bwz_Q6DBiB)66`W%rYmcGtGl7`f|`hbENLNMNJBC(v)I4
zG`gHNeOSI5Nz-q?(nzWPD%4w9b1=f6?bD0adM$=B%4PZ~_D&31!FJniUqR2ta&O$R
z+jf7PHci!FxR0J?r_7kH2kpaKw|Q&zP2!3#uK3}OKYmcrMh}Iw(w1|_G~|vxt$9{b
zYt+jhTZ~Tn=zoNrDwUnv1Wean)66zLt6wF@-)0|3+w3&0eYX|-2s?N1!*atCh;DMm+1>TbFBA09-w7iAX@qxn7MrpQ91F+5Gv$jVSmnN!}ZBWUm4K@
z7`RY6E`T8q9Esoia#)J`*$;m?GhWG%SdrRIkb(z-qC_-Pg}Yq=cnB08H)3YDDlo8t
zB4Z6OAY!d43J4AeItVga<{JST&u;ts#vI*d5PjT{Z9uc4AAjRQ@5OM2gpAi8`Gdnl
zN<@7a$pfg|LaIL;B0fi~h!OwD4f|>7j#a1vmlPQ-HA*iIxjQ5l?Y6}(cJYg09HRi8
zwS*XzVo#!s*gyn#!G$cLfqP_I9eZhoJod7Wpe&|d0y()s7P62vG$xVi<;+FyP$P#x
z3+kkUmj3r#Q#K)sZhMCp-$4(4@Pi)j;G*2#(aJY9
z@Egn{Cqx)=PFu#o5fS+YZ~QqwaVm77Rj4CFADYL9E|i$jtSDBHX*6XnbB4{dsA&@E
zOhy(ISy#vh7rYP+ibMk~`QXPD@PSZ?a1)8w_$D}e_s}aS%$O$&s4YvWPIj`*fWeyw
z7~OUSj0I1DY!jnC1-OrqF@YDg@##Q-Y7k!R1_^!RpF|hx(65TqAo~z&C%fv=wCV(-
z>(b~(#n(}_CI+O&6zM_0aW`!)@@}7$Y1WV!44dB6ZDP#=Rf{F0p%QKC55l6BqK8bZPuUm;Mi>)|;v}lv_#sZXfdd>J
ztL{=2npyN6VKwNW2qQlGKY>VhBIsDi5d=tu_{w*_@~tC%?;GDd;+MX|#jSrcB3ns;
zueQwm??<7TR^FE4p(?D1Js>)f;;!(x-;_t)tbp1oFo6m8aHewu8eL~nx07*`8$HDN
zTZD+S#B>AiQ|E^a48=4e=dERkDPqth9N{7J+b?}p_zfS=*MvfjZ+{JpWQhd+7)P`v
zaMEs@QJP~az0SOxHagnJ28Igd>A_ey(yInazyrGm8epR)%$}
zjrn2Fu2;lOU_vLYFt-y|!P2EDYZX|mF<$@q#po0C5`J-!8mD*I6!}HV8jU_lNBYr3
zzVANxA>TN9dflbSGqh<|3JK;#tUz$q
z7%n2SE?-Swb?aP9JRWHFSg)^q>OTfMdWep*v8!-}xnb9n76C^mt*fysbaL7&ya)4q
zfe~&0t>Y8%Maw$u=pv81$mN!AQq62sDyW;@nEuHNi30CLK?
zpMp!lg(+k~3tQ0ZL=Le9Eo5N|e6ZwS1vm`+M110GuQ;1xX5}gn8k8G9G`F3Jk76Ht
z&wcLXF)V_NIoH|GO^{s!UCtVq$K23iqIu14&OdR7OVT}m_QdPK?54}r-A5a+(rv4G
zjRd*W`xP|~NKJbDW?Xj)Ug?rtj}f~tqZG3L^4aINi?y?T_x`$md;X~1TsK3^@x`P^
z6N+l0P{IE756R5xs-p2zQ
zx(L02IgfPDe_m-!cfU-gtVjjx!3%PUPf9CNO?qGu)kH)Qc6;*!4C<$VZs&W0kp&Ca
zW_G7m-*9~7w`$g45!PUV($@s5r#%m}8gq9MY4k8>auJHgX#BGqE65rxxPmJ5d@d-1
zD`-MLr-1N)f%XSm@JBiFH-GR_e>(UQ_;*OW#SC7c9s}qF0%&&s*9%B^O%Ty=*wcKa
zunlFVfD^}nzBeca;SJH`S;Mz|6;**7xM6HI5nE=4{(r^;fcs#H^x!+uG>45hh849BWw?P=0EiNC3>Qa!
z$Cr88GhRzjUK=4n($W#_rDOl)3*CT<6W0xjhltKJh~Hy~pcjohL4<$ANbV2?-53S)
za1hksjZx4K2jL6j7zOQT5cx2UvLcGAgFdzP5AqNU2ayd}*oUh4cHky1O+|ghRE)NQ
zRcQqdwzz>;P=yBp3|Fv*f7S$j)j+y5bQlr-kYOSRlfV(Al?0|$J_+ZM2?t~!`H}t5
zjBE!F(0GlCG>t%!bk(>WL70*kk&S-DNd170iZ>7F_=TmwjpJAj1|g2)7$Z}-I@s_k
zrg#wWfQtGEAt%BMOtoUhRFQOuTVhmfSILH0S!`C&4u{1H?I0mpDVA4xd|qZlQNfJ}w30AXh%WgfFd3K>F_TtQ
zljw*lIq8!I0h!+T4qk|k<@k;QgFa#gal>#B*MN__$CRRh1qkI1V8l>Ti86I)QSESi
zuL+y6`I=0?HV!G9w|RUi#y|W7hs6E}F$0NXEfa^jgO>?sm&K_NfI*3<2oLiB1`I;9ZFLS?iB38|pB
zG9Vg(3|lpk<%6MPYN2CFq5iMp4;-q6e(9mmiK0+6q9yt+CyJsfnnNN54Bp@k&I6R*
zkcZ*u4I)?y$e^cw1&{p0H3tI^yKoSE$aeHe7+qKr#luimV5I>0n;3~({6M9hdYiyk
zeGsG({W(1v@t{ZWeduGR6k4XM>MUKeoVaFGZQ7|YC~6t6+4@}>zV}i!=d~@tF&sXw~9Wws;f&wuQ1`OECj4qA*|R_3|$is(8vv;NuLPi
z4XCM5Rxq50^sJ9z{$NsCtyFrcHdGD4D3`SYU6WA<7(qA;0fFeVt|Kcu;4rf2s!3@Y
zukxC&B5HI;M~L^jbS>Kv`?^B?$`k*JJ-XndS>leR@C&)dlsIP)l*&+O=ur>brT=Ao
z6HA~-3q@F}n~@<9e8LzVYY{B7XkjX{Cws0X>$T=;KV^15EBm1|+d%dzvpvGA*=e&4
zgtI%Lv)L1{2O|%bc!lwxiVt`YrS;O9#xA@i<`}=NX??HAxpJj;;knb
zC`sVB<#Pm=i@BMLxh???n(Mhp&^7oN7-l=KXq!B0ySA8Py7WRG2{uh-F}K>2Ne7b+
z5CIP^C8@#wV6+SMkFUj+xFcHsr5T7Dn^thGRwO6S!l#dGwE}Sw)x!`_J3pRFy_`$E
znG3pEGNcr5B28dR{n2cf^|BoQQHA~|%unrpoee7V{?aR
z!4_e@{F5Yg;dNJm2z9}}RwR#Ef|R+jyDL`(Gn&6uyRnSXSV;y9|BJW+98Ib5ER~zU
z3Y;5(;xaje1wdfLM~uWq>=NOS#7%qzfH9=F);0ccwjG>38oa@mV#SK7h!%Agbx{|4
zkPQA=!3=u<#%jTye$@@xA`OaL3z@@od`QSZ1sJjfRmZ$D
zd{q*04nnLUIfM-LkPnUQ$d8;4Aq2^joDX`*drS0}TZ}zeoW)Vmw$k~*^K%Gi48{eh
z6TKh^q%6Y5l*0INSqw#+FpOkB48%xwxYUY}X@v|ttPuOar{`5Bq}0FDKsdaS1%H}k
zS(vi$smb8`vM|e%B-+VN@yUr9%A%~wtBez)oXwCJO~LTK{t(AZzz>XiX|y~Ug$rBt
zK&^7ANCd19Opp(MY8(3-yvTq-+kylM8fD!O#Zo-QvfRwh49zh+&Dl}SfqBjRQ~n6u
zJi;)+&8nOSY8g$fEY2%On+;pXkZaHE)(*BgpuHs7I*EQ-n(5L&%&|IC-8)gMCN^fDk(oF{pw;Y?foMhFoJgQ;ROE3j%AP{RX
z1s=%|NPq=uO?04{Yxv<0+z{8=!^sET6nA}%c@4K}!9zE}*M&gQumueA{@@QxAky@v
z(uo~<-~iH1Fw_4P4q33-6RHGjum(!75YAGrNstAp8i+NGCGcC?89diVSJzpr+R@0`
z4a5tDkkmL44S_JmQHBkn7<#*XRs9=!z`&`S5xDI34f{X^M{u%7Kn447)$XU1|A5og
zeZ|-PLfO5++l`3dAP(ZN-vG|wAfw*=8;##EwM2&u;Sdh@a1R!a%pqC~@!jCFbK0nF
zNFPq(B@Q(z4dEuP;w#SLYbD@y6
zMQ-FT(c>}>W
z@aLX<=#B2^j}GaPeo-$zIWVB;i{2fQuIZc3>7BmmiH_-+?&+gW>ZNY#We)10p4z9*
z>aFhTuO8&7uIeKW>$Ps{w~p%_EbFsAwzxp$ByjDuI!IP?6Yp{
z%MR_)F74AkE6uLz&ra>xuI<~-?L1EDMq}x`PV3!H?&WUo=RPFX9_rYR?(OdG?+))B
zq3)Q@?(uH#_m1!AKJSZO@A>ZU{|@lUzVCnD?*VV{2ao>ntUmBQUhoO;@DC61hraM?
z9`TMo2OKa3vpp|qkOGy-6?MP?F+dD6Aqi-30u2_Ti*N=Vj}sj4@lfRQ74K;iU+4Bm
z35K8rN+1M6umt-6q@c709)JSzP!W}Y1|9$dBd>Xqa0VVQuFkOt8Q=lT1rrya@m(?r
zcyIw6-~j*t0YsY-G5_%)uk`L!1XcU#vDNh7ybbDgrW!--~k2T01j{f9gy@JLHNKi
z2Ndw~vvT^W&m5DW1|8r5x!(XBaQ8Mb`lXK*zYiXJ-}eVG326}c8Xp~bAN#YPJ*@8m
zu8;UMA?I}NXrKB?_^zkal
zh|55TX;Qp%*>j;zo<4;Rji`~MN1{FFbckWB;3PcXgifrOv>;HcSq(lqvmzV8NohPx
z0jAX~R)T9(nq}K|=*W^M-Oi<3*X~`s{(1EtWX6opU%-I{4+i`|0RhB`6)$Go*zse?
zktHvdu-EeCwveX$Kxy}okbam&LsToK1D1qTGgKYjS|UZ9t`{!Kz~at^7&K)QOr#;k
zQq&gJuH3D4Vhmv{(H37`+%0X}xOI<)3(qXo*jAf6N66J{TBgCcGh9A={CSAIf1gI*
z-u-*{c#1ak~Axg!&~h0GJOtFKA{
z3eQX9B#03-dITT>a0~*~M+hn;Q;9V>5a?Mu-vJg=u@L>Pxkl9Z(o#$b`n6IRYAvNp
zBf)hIP(fWSG%Z9C^+;EOh9v0GNGBDEj&y-sXwY{Rx>ndl&$RL$n)XE0PkT?*(qKyw
zK4{=-0kjuT7>YrNSSS9WbgC3JIy&gMCO~&|(S%r94QIEr6&3Z6$V?Cub`1_LH$#9jv@8fxOTnnp
zW-?(o!}QzTIU@zkon(}tIXE~0^e@R0H-#<^7$fu!2<80r4S)wDAM{3&OVi;?QRH;+
z%h*7AR2#K<(f%`h^s|)Wk4Ihke^mx~EiTnK@_8^WxaSVrJ;2`^hi!>AuQCXk^hG<~
zalmHI;mQe!lMs4wj#ta;f(A?{zOlr~4jOPB2Z%EX`&}-7_bA1)LiQtKP>X^V#9W({
zM+Y!u-~`X(g2t9}2Mu^20;kKskG$q9<~a{~(vx8A#J4`tXb&aaQx^D6XNJ@zCxQ(_
zpZZE62{agS0}jkp1{cyk91S>e?KvZA?
z06ipxE2yYMJy@h8>R}K9t*sQFk!C3zF$E_mi4xINh$Qau!$v5fL9iUoL|*Vi_65La
zIV!~>xbU$-azI~>WI-z(3AsB2i6Ah+-3IDe5IxFHBx#U|p>lL6_^qJ>3wS{*$uznW
z?y-+y;i9kH1f#HcKnt&7&3V+5oZg&sAt6Ib`6}kH2*ALY5#=LT2wF;n5K>=+L>ciq
z(9*`0vV4y-h#F2nkAW6+Ozd>d27k0tgG_OP77f4y6(K{QDzPSgTnbJLxB&B`h
zAx=+SK`XnHJ{6e5kd?$KMTwK80AxWofWj-~>a|qJO7>nHz-#U%`ckpR$2)k?z&}Tp
zfx?om16vYhL103_#z78bKjmB(lw{Y6G^~;YL@wyqqO1pJvNkW>>q3+2wSH`x$-+Q$+6~oZJjTO@)B1Am}Z~9~5U0&5Y9_
z)vJu9$np#;5QCx?Ii?J@8ID;+cv>6}69mKs
zHb^CW`aq?^?8NUfCy+G-)2*P%Qf5tYXDqC*EWO~iT(KE{-KghX*^I(=UU6vQ)4&7l
z7+$iajh7`^=!DdmAU95ky>uH<-Ug)<^fG6Cy=xU0A30z|HW`&22GL2==+moa_0Fnm
zUHV{myR*J!cU$dB@QT+7zL*^_529W%i{lSzOM(#O%ib$)p=$=A@BTufL5{y=hzHsr
z=UUV=Sq^N8!-?2K{+#q3K5H7&%*MkP%5Z=V$PPL{8yce`xaqars$`Swl~@;XS9DTN
zETyz8hq=>Qo3ePUrVZdh9F@B1+#9czBkIWTZQ$V*SH|>f_lp+^D0fpl$mgj~#WKZe0Z-Y>dkSj=*YykdNfu{<7@D{n6
z5e`uHm`tDx!4pmup6?uGiN$E~GiIf1KAt>1=Q+9~dIkl>pAs*th#l#Ge^S2X`@RyRyV-l0Uim<*
z;6UR0zOFluAxR(iqmAw}71@J{mOF^_BO)wHHw4)JAq}F+5*>eC0#L~h|(9z0WrK|INcjN6=J!bgE!;rKY$V_
zvA`cE0t0*SLF5xFGBKS;1cMr4Lg?!#?qI)o$ui=RrvxLx^Vz>jyhKd&v@7y4;(IbI
z6ELM4o@=8Glxaj%jKueFgqQ#-AQU_L+cC@PxJroujd{gLvn2mx!VqLathhH+t2<33
zs%~)-6@U@U@I*ubMaQB+jdP>!Q42?OBJBQoh)Ph4Njb$!%tTTQimEd@_rnTwe8fyl
z!SNW9r`o@Jvz|*drls%*G7-Oon8gf08MWAgj|sO)^uh8VIZ7y!blU<2%)*6$iS9$Y
z`U5=oQ$~s0NR9-FD3rp#U_2`v$;ZILjzo`1;DR5J2Lq|RGz=z%$h9;)HqlGAWqXLN
z;X>EKLuz|H`k^_JC=|*enb#P^dUH9A;6-@RHYC))jDxdeOh~NYJB4^YcJjC4up9^2
zO0GNrRhhS+DYE?=iBjwys(c7CDFCkQ$^dhi?c>Jt8y=dY19gH%r76D%Y899vC_;;<
zni`h$L5(bV%cxYy6X;6@6hNN%IsVe2t!U)LNno8B%nPktO9${uTnV_v%1f*3o-6^#
zkHC(zM2K|+z}WCcgEN)UOigif4}005>$|l6@(o^C0~A9&m7z02&X&*C3;zk3PKsmIX*x!%BxzR<)BE`Is+A(ge+nd
zm0LMvlu8(Mm!J5gP0SAGSPFsTip_xu$215+LZWsetDq>c*LqKeFvhJTps<7>jVrO9
zNdr_%(48qiBh(QM*h>!p{>?DMK-f4@{^L-EtkHwGQD(Fm5(P|%vPw=|MZ&ua3O%gN
z>5XS39v_uacRa$(1PSa2(S<0@WkkNx#L}uv(t5-!1v0Bp8>v@0gDM5Tj$lzw;ji9k
zP!te1P02L7Bu!K6PIv)DhTF0z)jv7PGjyseJRMZ&v`#6+PVLlA?j+RF*d`%B0yHd$
zN;m{u{K7fB0)vQzZvsOmP?613Lof`lfVD9
zZ6(_APybVk;VB-0s;VF2RYqx`Qc8p^;5`w{zElw;u)u?!Gg6#zMs_O>4DCxO)fa^#
zOb4@>j4I11Q`U3-Vb;7-vYN9wIXXEhp#xkT(h{SJ3lp;IyP0CO6)vcToXddCc_@2I
z9~xaNgGwz)IE3lo!}*DUbB)B~>rs9ks?-t}v;)C6wMGzHI%h2fM1Uu~Jj%S7)`ZZM
zMj}vZjVRM{q$!nDvCynxxrs{q0&4Jgjkpon$_Oq;(#Zu}Ihws@0*<
z65Y_ncV$$weL_Q3JVZ@Yl3diYy^OMvkj_&Ax^>AfRMjmw5iv}H9x%@m5rQQ^o3jDc
zYw8;n}NpD~!xulUXNF)HLq0VoRA
zEOMV6?1H7UgC4R(Bhi=RyEL=_p$^EI77{cFWv7v-op>z{mQzJ1#Rk}fB=8wWg+g83
z;nw=8-RBV>!lMJGSS;iE$|6GD4j>LEBZDyDi4q$L08p_KYTeU$-SIdS#z6Aml9pWJ|ddz`X0|0=e
zFS**g_}zdkEo@LIOLU@eI4d_<-_9JFFR{cbInp8m0IqZrWu;x)wO{Nzsogc5Vnt14
zMgHODt)2PrakRk7m*oz?Krv8o+2FaV;B+K4)y?VSh^
z<^Tw!PU!v1f}pA7&Y)|bs}F?UBTZ#y{$b_u
zkc2Ma5g$PSWo9-ud6F$?7@**nS*evum;+hP86bn^bd%=`+G026W5_EeKfi@&$p5;T-()q+?
zF5SN$?C6}SWg9MzOUtN+B8X+l8O7qp3na~(%8qva5-6dD-_bN+xd(gxBs!pGZdj9a
zc>s$Z)ZJ}n36hI@UgucsY3X%iss1!Hwk|bZW5;XbsorX?W{95YYOp?AdJJo_R+^+N
z>i`++B}8ksW}K?7B`U;fMQv-k?rI6EYrJ;CvCeD0ZjIIKYuQk1k_K%4!ak3;hMKFE
z>siz4!fxzUs{@b&3x!f0$FA&N+H1?s?5xNrrPge`5NrtcY|*BR!@jP#R_u{v?9pCr
zrOA>MZj+W~ZP|_w%${xA&J;2*k~F>Txd3h6{%xWtZTmQF)UHC+25#hb4XBW10JxHf
zOm67Ti`tIv+dkeXp>DSDZS3A|hY;>qBktmEyyNC>@-A=lK5z6+Z}nbp>hx~HNbK;&
zrSWEO`mS&LzHj`_Z~fkHt8nkd1Mm3WuKDI~0xxg_KX3$3a0PE{{}v4R4)CfO@CBc6
z3a@YrziaDTHw2)^HFHaSPtb
zz(p(HaxT}3McC=Rz;Z3`^1_R99G~*3L2@!*bG=X)K5>9C80dXMgDhurJHPXb`0|uC
z3o*y@Rx@)n*Df{pb3)IG%G^p-R)I*Ji$_3%7?99HkMtgI^hbAzIiP^nlys_g8jy7G
zGY|AD)O1m&%!cch4%l;_z{*iybrVBhjub}P(pCwifpASp+OPvAtQ-(LyjEGP%hn4cZd>{bY`Ve&YfA-6^gl(QKXVR
zu(-R>YNYBAvg8v
zX&p@wGH>D`A^avv+R~#~`0*7ZY3X5@yAUe`yZ4(oi3<;H1RDwY0q5!rWs)!yMb#7jVe7TDL4zql_z)c&Bn8q71s+%;Mn6SH5sE2!
zR?-ReOjO}SI{{S{Y(7C|lLrb;#0W$GaTvpd8J?8c8HJgcq>@WA*`$+CLK&r$6Rnn%
zj#KHB0Z<7p7?@;8!Ud#?Ii6-EMo|q!kV>Gb=^2+j{^%fU1kurfl`>A5r=EM>wwrK&
z0!mzTgA!V(q0CLkr=o0OXC6WG)h8c)+EDU`5LX;SQ6oyYM-e1b^e{{*@JSkJDfl_z
z%R`$!VG*SE6*cLiZfT~%eiN0{;6f)XM%A1T)d8Y|NJhBfQEAEqnIvd<;MAnE9-`@4_3eyz|n#)~>w{i($Up
zQk3hL>yaCSG2W(lZ$*;e@kJR2bl^cwZL-NCOW{^T?m!E9mSKazt`JkbAA=mFpMaA5
zo1llHoU+QuB^t8J6=9d^fI`q*GtECN7ReSu0D*-=?|FAHfujl$U#zC$*D25fQWT!e
zHsk#AS3a(QO}`pSrh>R?AXJgR*cSWQm_R9lfd>GL@r~49MSFFF)Rt0Gky(0Bx7~HG
zM77m8e!CM3d&gL=n!I*7)f|Mcow(wQGv2u48-@AMPIup(_mO~W{O@TVjKR)CZAU)Q
z92|I100dx|;jq|Z`~HnNRDy$@IaH)Wa1St#{$j`sqtNc4U;?
zfkDGt++O}gZHvAm#IoyTFJKrT0SD-fMQGq}`y&$q6-Xh$#qV<(ILSh+rN0YeFoPQ0
zpjcvuz!Vg)fZjNt``&k$JD7oVF(47>w1uk;yuf3nh|0qv_`e3aZicXPA^c9I2GXgZ
zFB}|V;&|7)Kov)LN?an#h`6WYZI2^5E83}!ptOgerwP`hVo|n$wDwG-dlh+=6E6}w
z*_{zjFHFiA{{1yLd=aTK1WAP1(4|5CWl3xQiyPLi#lyF#i(pw37gX8@w}&7`YbD`P
z85`-yM?w;0u{&e7h?PD{mcmCKz=B@BWx^S@?{zgiWc)%Gqpr2FkMdaq2P_!LSMte-
zM-M=}-VD5GqVDha|h7+vH|f_&XLGkFFFl9Emw(8n5V
zrOST;G@t^#%^BZ`5o!j`nwFeMB68Hig&tBfs@vlp_E5Pa(*sdH|$G0ck!$XeLE0RRvKI
z1Q7{w=|f_gkTM1hVi4pEtsSShfQ6(vcmjbTU2#|9x{U>Ch+WNVuik&bjY
zNjxcU3zbsau7#!VNdge4u)ORfBs@uAo)UceC@u&A30PQO5`2KKO6BLcRq!JBz$pHy
z{7iRxMmq#?jjILZHnI{oK^y8$;DtU?vTPnW9T@Cq*U-!tbq08^u|OCAGN6tFCrA@W
z=$pd(ZV)5@Z~%iHK)MrXA%ABKFDmJd~L}lz{ui!SfgeYlm%iNsbet9gyB}g>3pah;#p&bON)D)J3FQ*f5?t>hasy|d3PdvuCox9u#cUVqRnqEuACi-SN{8X00!r9
zBPJ!W224X>3$hh#3g>$dx~_>1W<#6WGNT4eKS0z@1j*e100AzHdamu9YN-n_26ML%i9*u(8rXFr~
z*AvHQ>G6-7Ipj0nd0Ffr>${Hb1?FDM$$5^J55+*jMqfJ9HSY6K{)fAjLvK3OtyA+O
z-W=z>)p^ys&XJOA*=#{zsjz~`FrlGn=JeYab^gM9Lu-#q6#@A=Pzp6Zn+
zS>7>kOTLFb^{QVz>s#;o*XM5ZNHqP&Q4jmu<39Jg-#zbpZx-4Asr0m0qV0We{Np1(
z`O07Z;(<@g%MYKo#b-YCt8e}5V?X;Zc7AY#AAMYEKm6h!Kl#gV{tI%Sq|pEVEvJ9}
z_rpK_@}EEb*OGpdt)Kl&bbtN(@BjY;U;vum{ppteNuL1zB47e4-~uwB@eyEec%K2H
zR0C3A1zO+*Vj$Z+;F#r~1O^ZPWnc)3;0Tgn2@cc-MxX~03J98D3%cM7!e9(a4GMOk
z3aShX%3u!a;12R&4_X~>h*|g5pber74*K8`B4H9L;Sz2H4HDrJ86gu&;S^F~6_TJ6
zKB4eLp%rpr7kc3r#vc}DA^3q|8Jgi4qT%_8;TYav8oJ>d!eJcl-WsxD5z65m;$a@@
zq2keD9U96O?qMJb;vf>@_5ooK;-4S3VIeYNBRb+E+EyPb;-CN`BwFGnVqzw`j3iFt
z@Mz*Ef?_C&;wByf=80BktW}FZN?V3gkdq
z-#?~eJ`!X?D&#^|ok4aYLNa7TO5{XpoI_3`L{el%YUDf}!HWEr_68^UBy3gu7|rIP&Q7zSlg
zD&JaB{3p&T-tLl!K-(>%=*WWhPa
zC0#;hWQv7dsvurA9XIghUux!G&O@e*96MkE5Y&ul(hOu1!a1m
zWf~ne^uuP_re?+iVM5$FP=R9l=5GoC75tlP5@&G|1Z+y6Z0;O9+-7tBr9YTu!hM4k
zlqPCc=XIVYc3MH=8E1D&CUP2}a=sie%!6~9XJ7V14o%xV0B3u;=RJ65d_pF8>YsSJ
zTxOozRAwzFsr+}vDfDR}XWN6pD=!VLuJ=$at;^af>9x#aL
zj>?0yQK*FiX?s?I+1-NGE}G^nIwt$-|EBsAqavf39ei0w{~7Xn``_J>UQi
z5l%AjIpN>3_;DjDb2*Go5E?G%Bh{w>7CLHd^VjubZM7<
zshA4tnAWJ6-RMQ;-jk+jU(SO!IO;pxW{F1DHw;0gx~ZjB>YHZjrD`gsdTOVFDyIqo
zn9kfZB*CA0DX9+XsuU4wB?rN`A>JczO
z6&UNWB5M^efw2B+r4DJ+O~VqPYM`=ewYHwCnjWl99GcE5tv-aU+NO&|);SOX5g0+a
znk%}VYq_p#x+cLqz-zq9>%6k7x}xiF@*FZq>z`7qwfZaQVJqfoE5x-!w|Xl&s5@w(Z+e
zuIRGgV!A`+g5JuTCOQ3;>kKk
z-3A=z@@?oo!OuoP-tunWj&5yb!RZ<<*d~GMhOOypsnJGm4ot4>N^i?Gt=8c#!09gV
zdT!oMMD_+R-%6@VDS_!K!Q-9-*}`k`p6%i;uiDr0M|F1t^!*G13R$SLh$J(tVz^KcLIa5an^3
zi?O+3ffS%I8V_(9AKOEmu^N9X8?!MG+m=0?uoHtV6BO_wP5bu_UMQFI%z{P%$R6awmWC
zL})S}U+l$7K{9i)E2|VTh{H8wb2e-9Hgj_~dowqqgAPoqEYos1N0u#bT_W!?8Jk-a
zNP!c)GbKL+FvGJjxp6)Jay`fMCD*YuZ?ZWN1Tttc6Fl?99)Uk=@*g*rIG}1nJM=?C
zbVN(EMCSlGoAX736gnTE=IQb}H*zUlffI
z)@3d{Zk{)Iv=|HS6*R$DgLPPo^;na2Sl3f+fx}U&^;-M$4FA(oKXqKoHAP$WRNHkV
zY4qM@wH5GnU;A}mcXe3{_F#uK37hCq7r_)LwqhIgCM&^WFE(3u^5YH^T+j7oUpDmK
z^=9LBRpZ@N`&Wc2_4sb36BQLw9sbcM@d5YC~2QAoMangeKSZLx_WI
z+d%W0-Rq|6aGSRi6?glIwsHeDNKf~B!*>$Qc8rxn4cPa6<97{cH$nc`cXtznIOKPL
z3wRBbL*0?Lk)C&gb5MGp-sXKnvO>7As?8O|cZECmK3uJY4)}fVcPaF@MF9AQZ#ZRF
zU9_UA4$!fJt2p|3w&mIG?K*gbL->SSID9L?KD_XYO@WAa_=i_Sh>LiD19aC_!>Rsh
z5~TQwE4l74`2KBPHS9x_OZk*bIS@-hjXyUUXTd$>c#M$)k6(n3Qv{F)IeyDV+Z8#g
zBKeZDIg__I>47#tO5~0Yc#qeBf0qK8mw62gIn`BzI3Ib2xA~wqPLo67=KaDqDEgu^
z`lA0rDNsYBOZqn?xyF?P4cs@T+cymiIWpMye3ybfWcsLY`u?aFINN;#pm*sKOar02
zI^!5R@x{1|Bdglf1FawHS!di7&_J*Iy01^cPV2N5$bhduHe@TouPghq_j;c*9XR9w
zsxASEzk0RTORQ_5gBRzJGEPTyvGZ+
zf1tKA!M)>qzTZ2z>wCY8cgEd=x(ockFFU9+-8e-1pHhK!%X`Dm3cZuze9LG2u6O**E4#BB-8qQ7
zs+j!F!wbqUqQtkn%ZGZ<-+S7+95TcJ&C~o8!28bm{wbC0R>Bz@k;z^T{W
zG<10E8~=gK{vSHHh2wsO^Zv|{1K!X47M%IM0sW672^
z`?MxcwQGGYb^8`>T%%3T*0p;VZ(hB7`S$hu7jR&~g9#Tl{59=b#W~x`b^I8zP`ZaH
zSGIf^b7sw(Id}H_8FXmTE)y?a+&FS-)k-IicKsT5Y}vDE*S38dcW&J(OPglDRY^zo7Z^J%O+H54S!11RRjS0u4M6!2}gV%clLP>+in^lL~Ob3N5@4!wfat
zki+Ekb1*##MP#bO5=}f2#S~Rsk;SP#+%LotWu&mh8g0B0#~gLsvA`G4i%~`qY2=Z}
zB8@x}$t0Du%*W|~3^KwYmz=1gbth3@jjU8#ef<^K
zV1>;MSM>DU)w*7XU6$Eqoqg7?Vi`LYS>cq07TavK-IiOKq~)*L^{(xf+;Yu57u|-w
zy-C+_;~IC&G*Wn{qB%I2f|uOv*gy$J4@trbU(y|zU_aL-q+NI4f)_bOG=PB^mgex_
zgpS=DJxZs?1KJ(y&
z6<&(r;~a)~B}vZk;DmZEp4TBdF1QD3qjT7iOLvfD!Zs_m8_N|zpIZl|M>w)&o+G~}SW4Q+{
zcmUZTLw3-@^2~)FKHJSXC)M+Z>o#Z-JTBnCg9665#-KaQfF6Q-=oon+#48qgpTYT^
zWQ`4?*8&)V5;5Zd4?KY39D@2*!vlQ^aySN&-FKhq?MWV}64rwr0ASz^fvgXD(xcv0
z9&rYy2}Eiuz{9-=0=|K)uYDfK-rh>lz!hYJ4jY&k;{?(`4@@C_lb8brI-tRP2qa}H
z#DE6?FotjbY)ydC8-q0p@`x_5FnU|iS}7_)2Oz?aATn$r1YT$r+!aCy{4hu)w9o@U
z1g{j5_`}SEu!MaCgCKwSK|BxvJbDO(5{8%=5U9Wng;?ScQ%Hgkl5ho>l_C;%#((#J~v7{uakPYH}5|rXG
z-tn-LJfaz-5l4dn7{I{72MS~j9H=1}%pia=a8Ds~=l~WW
zVY4g)2T%}?f%L5o9MD_qJg|>D(9#2AV5I^5HxLt^fDEjp0KMqI0dRuh0FeMbBnZ6`eytRfNJBpNsX;IlQ)RPD!#Q1g8;IvmJkORE!hLIwe$#%lvxj`aNzasZXmexBv=Pxwkiz6Ab?z;
zQPDODE=*2*|`
z25Ir>M8@4-YQVFlO)M^bSy3TtAf8-7+y@1s2Bu96xOC{i$)uLF`$5@a{wCZpQnHf+HzhiaoQm!aK0Er>QDw|CSilsV3HmQ4B5>>y^d7
zEXc%+%vlN|Zm=>7V1INqD+x+{(n5yD#RJ;%XlZEy!>@MEQ-Ibi6C<0}RXC
zqhs$L`aE}c0e6Rt0^k8;FoOsB6?VdwY=41w-!WsU!MJ0k;3WU*rdx_O2^$2^e-QP<
z&sO=$N17mr*yBF@7&gmSo~VlN>xV&xyFPc?Y&yR<7e6nAj^nXqK)}L}WnO#RV}|B6
zU)aqHg6((ri`%+h?3B7%%(Qbrc`g^wn%Kwh-H3&12-@W
zC<%}t4{bDU&`__d4r0$r(5Cdkk1F91wBQKX>h^Y!2MHthbPs5F55{V(uucZIW^MSk
zW@;RO37gOXIAG1@4#uhmf6Na0+V6Bq0e^U54WjV+mh69eO(7CthKR5#8p|B`sr^bJ
znzUeI{s#b~41&;L&Dd|}>_7ujpxHJqmbNW#IQ}U6oJrbDt6#>h-#ozj6oPy>Kn|s%
z;1ucqebtS$im4#xg1`JAn5lCPYik08|GW6nSqrw*59
z$LtcKoObLgM1~98iGzlQ`Od1#Jg^G)>DTb@qVmw83PRlIMa|T%6mX5Oo{fG~hMfxH
z{1{>#ooMAetdI_l5)VnxHcqA5PZI}1(k-=i$7s9@g6IGo9$_3>rvqlPD)z+!XiEuE-~ys7nhq<`&LIBC
zaSf%goKoQaWNNbnBJ4bAUkECo2I_xIMxW}yd{oAlQXqc*Xb*^?64;W17=a5S1`)~<
z?9@;nTk#Nb5YZa%kS6B`5N^I!F#|C$ptt~wBEby9&7vOAnHKEF;3(o8(gKeF2S=^b
zTrR*2fowF-2`7dNV#_Z7jY)87Zat+|Km8S9iz%!#@61)t`3{C(H`0ghSs+fqT
zH_7vQh$cV7X+NP7DjreNUhp3WLi4&PsdVr$&5hJF6skN@{y-E5t)Q*`g^f0}GfA-^
zsOSh<@v9u|y;=qdl8UH|>Ij_5riRLySO%$fRN-V(NQcx#Sgq9%=51=zHj~HrVn-6z
z0Ei%93jk9fWQc}rXxAjG5or>+c%eA~hkVSZ0JPu=Wo$h~1{)JAqgKF;vebuW$nbbU
z64U^Q9$-qlf_@q?E$99XL$61N*nuGE(;TbxKD)sV{1gBppf1m?5zqj8@&Wu5!A~LJ
z9Q;px{8W0hu7l{*eWbK34|RYP74cTCrC`+J@`#f>upl)_kIrTZ^dY|vVv}5T4@)5$
zE{ToWA<L;bUy`s%-BgOVbu^<2Gj3mXzAoKHgSt^Hy&ImTr&7ZtDYY_f~KRS6cg)
zbN-e-0+(Vs;I@
zwyR24Xo;H0f96z7cPNRRCxJ%xS2@)K9^mT&YK5*;Q+YQ^5zumnmv|ioa}`E&U&CPp
zFwVSi{#&zXY6>8nuBR){jeg#T7~sr={)eREQ)T?efmmsV&QoN_bB1C-?i7nW%ix%j
zZk4X*fw~u=ikE)tH&Bk(U6S`TPDg6kj=PM8%0wo)EGr7{CIVWso2boR$*W483)%vp
zvevRa1>z1C6R
z&>(z?XjTW@{71TOm<>6g-QH}12?7mXNfPkj3-GOlNCqAcqUusd;F4I5=eSCi7+ISB
zSTsC{u+*Sp=74FskZcA~7_;~f0WNn<7u;Y8?$XydPsd)O=Y6>cB?sbqn=}j;nT|7A
zlXt|9cLk3{WBlUbYPxO%_Mw3sw3?obkn?YQrgJ?hQUMvTC=H@-R;M*ZhGeMmAO?y6
z4G;|M!60LKEH{~$iy1{a`BgqSH1;J6_9ffSKnWb?>$Gfl2VxwL(SOQGmYJsyEoOVF
zIk-UPd5=z#!OV?^Eg=?hOO2VG+gWUlwAFluX9Wat@<#yGfCcb?{9bt0s8R~CPp}p?
zCHseB!0r69@F+!FU;w+(UWcJ3lx)PUZQYHn0-FQn8xL}{Ex0kj6r2%uLB^s!Mnm&+uRFpY1
zCZ+?7%wfj3prp4v#j-wy?|=MC-5ykYajBIx0Ho9s4?Q59Fu_yKhC~$%5hzYC6?$Oc
z8)AAOa!7$x8VxcC0{)<_2s=?T7_K*)v!6q*6NRn~WO6&3v`ZU9K6_6>yFfkwF$(wa~rsW`#W~~OL}`iep|ScTmHG3gSer@xR)Ec
zqnoapJ4l{ey006%*@n7jB)hxYy8(8)FXg+(o4gB`qCq4{XS-a>o4wl`B*R-s+*`iq
z+xFlaR_GhQ^LxbXJ4*E1zyEu9`1?Ps8^8@dfu+K)gTOP~!$15+HauBCoWx69WzQQ%(p$Yd+{9bl#Vtg{73IZeoW|=U#yh9R
zb6m&C-8#djRYgM7GA{6|!Lwtrm6lU&J}o5-ES$mMm(qg={sq{oqG%C8*DJEY20
z1Ie@8%fGxcwtU6FoXpD{Kg66@%v{aaJU-AI*4P}*`^yX46U
zHqZYY(4%9|*QC!eHqZ|p(Pe|q9mCEO-O(RCB^I4MAf3`Hok<2gPt+SJ8r{-6-P0{X
z(rxb3N1fDZ5z`N)&{?+BSDn?xBGdt-)ni@OXY#~s_l
z9oNYn-J9Lqmo(km-PqTiD2mb)M&ce!+bn=!d@GYdus_oo0z%=^I?=
zm)_|i-soNB*4h2(t3JP*-s-a+yRlyDyMDR3-s{62xWQiR%igug-t5!9v(aAd+up6&
z-tFT)qTycd>)x2@-tO~0lkr~f`yPq;-tPn7egR+b3x9YC-|!QkaS>nf8-H&Z-|-_K
zZXsXtD?e;0-|{mbYcXH*JO61p-}6J?XhC1}OFw5x-}F--W>H`DTmNKP-}Pf3yrVu>
zkba(JANMz(_ET)?<30C(KWbqg_=jIeg`fWTkN>@QU$%Sy-jUz=Z`SyqU;67?`CX0q
z1Ah9mKV_p|`@5gSxZnH3Ka{{<{L5c>$R99Fs7W7Sbj{!W)1>;@#r7{6In=*Nk1vtm
zU;jA-{r|%L?;jvMz#vwtpuvL(6DnNDu%SbQl@N6qlkK6!ix@L%+{m$`$B!UGiX2I@
zq{)*gQ>t9avZc$HFk{M`NwcQSn>cgo+{v@2&!0dQGGj)lsL`WHlNwc^fPmAdP@_tn
zO0}xht5~B-2+DQiqca{ntf*M9ks1zRJ?QIdF-_R9Y~#wEOSi7wyLj{J-OIPH-@kwZ
z3m!~3)y^C
zEAQ$Vf5SbfXgF}ap2ve<&%V9;_weJ(pHII&*X!67H|@^9|8DyUi3eIK<%PvUaR)up
z#RX^q0Kp%@EF=jYW}xLk0b|&c&>dzR5EcSsfP;`78-$fbDQ1=E0R;E(Vh|l^#TeE=
z4W*aOBWHOqMS=@9_+W$xQNp2z7ec@VXTkLt)&paFlTc$`fOOVr=bd=wspp=2nuK3|N@?fcpxb>%
zr+_1>7(<%{(V?P@D!7x7qcYA&P(hBMk!Gb+0Amn|Cf;FQjGZ=GXZ?
zF-Cfj9T=Rd-j$l3>Ol;}90aA5RI+Mim5F4K)`Z6#2Y5P_Ikhqz62T@Rsr-Lz=3+d
zrKNC;F!Wl`uTv)eDD0)by|Apn1=%rbSO%cg>?EG4Sq70hdP?x92mq{bs^CT~_0&{X
zZS~dOiaYL7`YMR%|Qn~wZZig016&9-?vmICDo`Yd@A0SrzuLQcu3I$0JNHP4YI=WR~1#_#Vcp7-9E0)iyg%s21+^Uy~x
zePLQ}O-Q+4XJ1v=^|h?)6l9h%ddvtx30J$tD@6GT_#jlE>IE}=&>|+UfM7w3x0Tik
zBpWoo%$WW;PW}{9F!GVdWCvPZlv)QnOEqvt090Vo7D7K01w;jK;tY_nBuc2&n^FT(m5kb_#f4OYh=O!r!LV?}1s?G@`ttw^
z7zo5frloy8ON)`_W{^V~=zgJ}2kM8d^mVfj%VXGzOi+VYmT
zB>v4E0hLERYLAceK~yBxV4;!0%aWHg-gy+_$5YX$U;_)FBMpMY8bR_!$P7#SIwrBO
zG^vzaB%q3rMal>E%aqvErZtf{9%9A_0AnCyF6T+ldfM}z_*BU*^V3UTehrxNSr<1e
zw>%hm6ATDVs6xY`%v9PeZwiel7`DI}Xg0E0_`7BjHQKSXj6tFcHHcZdsk#g%#G;yG
z-4@Ro&SR>RA)Yyb7(j|pE&wnQ0rP+x^U2em`t+wjt>r$k(@%e%3!w24DAA5(kQ#bm
zo9jd)LwZQM9g5R}!PVn%-&5R{!SJ|I!Uv-w
z5{A}|E=u=MTHOfJG8lN{Ad#TM7Ctr3i!v~ZS(u`#xQgHuD7ce|XfXc%XctPim0}Wz
zEL}mqgx8%C$UG;|f{TPFG4(o8Vq2(2nN;ja(wVLxVig00&#(nR8e|R@T4H~vOyw$D
z`O5kviuIBL+yL`u!0suoDxJI3v;Y8ND#NS_3&5{SWil-YKy#}&Y+LFw(2Qn20BaFa
z%@-HV17~(Xnw#aBrgbPS7*#~-0G(#09^}DcN%IR#=Hn;ni_t=>nWAG<06B;AHx3}f
z1(23NESvh&s7^Ji|BIL|dzm|6ZjYG7mzGjJ>(Vh=Zl-XJPCG1GMwwIPeN&2Aw!&<^
zeCFzl)xc}5{yEp@Ku9BY7NZ`FOT)#y&Qy4T%T
zRtJi(uRiKwQ8}Q3Y+9#KHB-n!4I%ZNDNSN>vOy+6Aqy1%0$$La;OeZv?Mgxocr5@$
z*Gbo8{W~oDCX*wS6sLYCKzyxR}k%Li<
z;5dlp#O|K^{O3TYqr15b?|2g`)m;up{OzX<;Bg=fs+8&CPlTmJHxcgf=kAO88RnI!+S~s2J%@el3x)gM`~LU9U$^depPShS|Mux6l3Vd!KpD&pz0`PyX_o|NM3ezxXAO{`R~7{qS#&`q%HB
z_}l;f_|HFK=1+gC7+?PY7=QvefPP|q*JpQ}*MC#-e+1Zo4)}l&Xb}9TfD0Ib7I=Xe
zn1Kf|ffT3}8u)=A7=rl6fgSi13@Cyqn1U);dIorakf(qrxPme`gERIEj>4iOX?_#FvPcxQU$Di8z6YyQhhs
zIEtiLiYEbzu_ubAxQeXUiWY&2r>BapIE%E{im=#uvRI3{xQm;3i;JUPjvp9~
zMmLV;xQ^`Dfan-+>e!C*IFI)Cj;|K}kMx+2`bd8E=wwo5DGqhS8h6^qWCQoXWYJrg59N5uD5!oznS=#>r2}nS|4s
zo!Y4v&iQ=X`JLd&7Tt+1;aQ&M$rIz5cjvjD>^T$ZIezUKpYmCp2Z(*8>3{Q?pZXaR
z@7Wm8xt{>qnElCq0a~C2x)1}J75{ml3~HANT7L~1p#l1!SFxZHdZA%Sq4X1Wfn*K++q?(zeMara5nvYHzrBo`Q)k##>8HH84rG`1BT>7PZ>7`&g
zrf(^xWO}A$X{Knprdg?`Z2G26>85Zxr$s5Jbb6;bX{UI)r!1+beEO#&>8F4?s1_-x
zgnFn6X{d<0r~s*`jQXha=%|o7spcrDlzOS%XsMXGsnDpYocgK5I258fs-#+~rMi}Q
z2&$?|j;7kGt~wN`3W%#ZtJwIewo0n8iiotjtDSnQzM89<$g9GNjK2D-S(=5znykB6
zthWlRp{T6TN{h^DtInE=(R!_{IIXW*t+9x$-b#wv>Z;s|i{DzVoEWaHIx%*sr4+ugxg12s?)aE2;)djS2g(
zYq+qm`mbyWu@)2$gOZ%iwJGFlY
zwM8qnRGYPPXSF|zwOaeNZpXDb>$PB8wqz%^GfTE+yS7<}w)d&FY#X;*$+9Oat8#m{
z-siTZ3AcFLx4B2ROIxFUJGjfIx4=obh?{(do1BT;xWBi!*y*^EdwYMeTLdhx2fV<3mB0tfzz`f%4(zZIT){mx!5nMB8eEnC+qE0~!SsZ|A`8MK
z%zPa@wk4dxiFv|ltHLfUM<#owaD1u4Z=9Gdi7yi9w=T-+yA%#d9i#(MI_6Dh`KoPJNt
zxM#e^^g+fN$;NOjA8s6yaa_mlF~=xr$9im=X&kwG{KwFN$1e%Uge-r3Y`KM;$jAY*
z2%yErtH_Yt8jS47<{QbD{1B6@#g%-?oGcV9+sK;S$)c=FpG?W4e9DuN$;G?LsLaW#
zT)nLv%YgC90cah5g%*((W8>Jk|!CcH;;maOu%*y-|$c)0v{LDMi
z%q-JH(uJpK~qtj6y=
z&m9rZeoW8!oDuen$obsQn9R+v?9T$-5c|Bj1AWjN2+*~R&&3RqS
zcU{JP?bmya&4CTffBnXVZPk)&0lQU6|QT$lJY`-3`d!9hu?1
z$K!pOAP0{Hc$LHOd?QO^J&6@G;-s_Fg^}WXPEt~nx#`}$%{q5iP&Cvla#{d1C
z1+L!%4$=wU#Ru-44Iai1PM#4i;R{aE6>h~7uAUjr#TknL>>SV?uHh03;-);}B)+gF
zPRuAC#UCEx3*F*P{Ng7r<4jEBENUt}
zkG{Z>j^UGjz?F{Dmrm(bp5vQtz?lxypAPDs-s7V#z@bjlryjtmj?=5&zpc*Gug<@*
z4%D-bzqL-(w|>95j?}v@zrD`XzaGEA4%NfnzQs<}$IiaVj@8SKzRk|n&wjqq4%X97
z?WJzy*WSI=j@H{AzTFPj-_GsXuH@r>z2T16=Z^lp=?>WIj_&2|pbO
z&GR`g^J)(CnCtV@P4t{=^xTc~MKAPj&h(C}^xzHklPmS)P4!Xl^m2~%glqNa&Gn7z
z_3#b$i7WQ>P4-={^>&W-cx(3j&Gvrl_5cp|aj*7zPWN#u_Xv*neXI8n&i8Wb_Y@BJ
zfp7PIPWWXj_#BS-Y^(V2$@pvQ`2Gp`js9==f=>BaEBOS9`CzO03d;G3Z~2A}`cCWl
z5K8))FZzm(`bcZ~70UXlpYc`>`>n6~j!x9Q1x(ys*XTP8Fu1!FifeHxQfzRC!J)<7
zi@Q4%DDF^naCaZvol;b-PAln8>O+!G-IfpSUDY=+7)UAujJUJ;YSdt
zZr$tAT-|Sa^`?Ens8o7q2F=#9g>reBR+{b3ez;MT`rl2uRm!2GdHO$I_Xj<}QK=0s
z%!Z?IXyrNA&Miv7-(E#i|32P^WpKS2%QyUKGglxH0-`Z$H6JU_8Oq2v5`;{BFdc}d
zF}`uyY;*oHR$$y=KUSsx2jtS)=CU`MM5|C}^4sHZwt)7qZ^Os!v^qv|ywLQ)`}=lZ
z2pa9Px1Jr#HAM{prjPzN=i37@v~S>n=lh>>6^e=kgWyk3f6#cOkkA<2SRTTMH6&5b
z*&C(NXd`)KFj&e`I*|!HouqLnY8z$oBvE+51PY9o