From edcc89a752232f817712cbeb30610da76304edbd Mon Sep 17 00:00:00 2001
From: Sangbum Kim <sangbumkim@amuz.es>
Date: Sun, 21 Jan 2024 20:40:19 +0900
Subject: [PATCH] =?UTF-8?q?rust=20=EB=B2=84=EC=A0=84=EC=9C=BC=EB=A1=9C=20?=
 =?UTF-8?q?=EB=B3=80=EA=B2=BD.?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .dockerignore                          |   6 +-
 .gitignore                             | 210 ++++++++++++++++++++++++-
 Cargo.toml                             |  27 ++++
 Dockerfile                             |  36 +++--
 Dockerfile.debian                      |  38 +++++
 c/.dockerignore                        |   2 +
 c/.gitignore                           |   2 +
 c/Dockerfile                           |  16 ++
 CMakeLists.txt => c/src/CMakeLists.txt |   0
 LICENSE => c/src/LICENSE               |   0
 README.md => c/src/README.md           |   0
 config.h.in => c/src/config.h.in       |   0
 lgtm.yml => c/src/lgtm.yml             |   0
 setcap.c => c/src/setcap.c             |   0
 setcap-static                          | Bin 0 -> 62312 bytes
 src/args.rs                            | 133 ++++++++++++++++
 src/caps.rs                            | 129 +++++++++++++++
 src/link.rs                            |  17 ++
 src/link_gcc.rs                        |  26 +++
 src/main.rs                            | 104 ++++++++++++
 20 files changed, 732 insertions(+), 14 deletions(-)
 create mode 100644 Cargo.toml
 create mode 100644 Dockerfile.debian
 create mode 100644 c/.dockerignore
 create mode 100644 c/.gitignore
 create mode 100644 c/Dockerfile
 rename CMakeLists.txt => c/src/CMakeLists.txt (100%)
 rename LICENSE => c/src/LICENSE (100%)
 rename README.md => c/src/README.md (100%)
 rename config.h.in => c/src/config.h.in (100%)
 rename lgtm.yml => c/src/lgtm.yml (100%)
 rename setcap.c => c/src/setcap.c (100%)
 create mode 100755 setcap-static
 create mode 100644 src/args.rs
 create mode 100644 src/caps.rs
 create mode 100644 src/link.rs
 create mode 100644 src/link_gcc.rs
 create mode 100644 src/main.rs

diff --git a/.dockerignore b/.dockerignore
index ce1b641..fc71d7d 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -1,4 +1,4 @@
 *
-!CMakeLists.txt
-!setcap.c
-!config.h.in
+!src
+!Cargo.toml
+!Cargo.lock
\ No newline at end of file
diff --git a/.gitignore b/.gitignore
index 00a6291..b6a8ccb 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,208 @@
-/.vscode
-/build
+# Created by https://www.toptal.com/developers/gitignore/api/visualstudiocode,intellij+all,windows,linux,macos,rust,rust-analyzer
+# Edit at https://www.toptal.com/developers/gitignore?templates=visualstudiocode,intellij+all,windows,linux,macos,rust,rust-analyzer
+
+### Intellij+all ###
+# Covers JetBrains IDEs: IntelliJ, RubyMine, PhpStorm, AppCode, PyCharm, CLion, Android Studio, WebStorm and Rider
+# Reference: https://intellij-support.jetbrains.com/hc/en-us/articles/206544839
+
+# User-specific stuff
+.idea/**/workspace.xml
+.idea/**/tasks.xml
+.idea/**/usage.statistics.xml
+.idea/**/dictionaries
+.idea/**/shelf
+
+# AWS User-specific
+.idea/**/aws.xml
+
+# Generated files
+.idea/**/contentModel.xml
+
+# Sensitive or high-churn files
+.idea/**/dataSources/
+.idea/**/dataSources.ids
+.idea/**/dataSources.local.xml
+.idea/**/sqlDataSources.xml
+.idea/**/dynamic.xml
+.idea/**/uiDesigner.xml
+.idea/**/dbnavigator.xml
+
+# Gradle
+.idea/**/gradle.xml
+.idea/**/libraries
+
+# Gradle and Maven with auto-import
+# When using Gradle or Maven with auto-import, you should exclude module files,
+# since they will be recreated, and may cause churn.  Uncomment if using
+# auto-import.
+# .idea/artifacts
+# .idea/compiler.xml
+# .idea/jarRepositories.xml
+# .idea/modules.xml
+# .idea/*.iml
+# .idea/modules
+# *.iml
+# *.ipr
+
+# CMake
+cmake-build-*/
+
+# Mongo Explorer plugin
+.idea/**/mongoSettings.xml
+
+# File-based project format
+*.iws
+
+# IntelliJ
+out/
+
+# mpeltonen/sbt-idea plugin
+.idea_modules/
+
+# JIRA plugin
+atlassian-ide-plugin.xml
+
+# Cursive Clojure plugin
+.idea/replstate.xml
+
+# SonarLint plugin
+.idea/sonarlint/
+
+# Crashlytics plugin (for Android Studio and IntelliJ)
+com_crashlytics_export_strings.xml
+crashlytics.properties
+crashlytics-build.properties
+fabric.properties
+
+# Editor-based Rest Client
+.idea/httpRequests
+
+# Android studio 3.1+ serialized cache file
+.idea/caches/build_file_checksums.ser
+
+### Intellij+all Patch ###
+# Ignore everything but code style settings and run configurations
+# that are supposed to be shared within teams.
+
+.idea/*
+
+!.idea/codeStyles
+!.idea/runConfigurations
+
+### Linux ###
+*~
+
+# temporary files which can be created if a process still has a handle open of a deleted file
+.fuse_hidden*
+
+# KDE directory preferences
+.directory
+
+# Linux trash folder which might appear on any partition or disk
+.Trash-*
+
+# .nfs files are created when an open file is removed but is still being accessed
+.nfs*
+
+### macOS ###
+# General
+.DS_Store
+.AppleDouble
+.LSOverride
+
+# Icon must end with two \r
+Icon
+
+
+# Thumbnails
+._*
+
+# Files that might appear in the root of a volume
+.DocumentRevisions-V100
+.fseventsd
+.Spotlight-V100
+.TemporaryItems
+.Trashes
+.VolumeIcon.icns
+.com.apple.timemachine.donotpresent
+
+# Directories potentially created on remote AFP share
+.AppleDB
+.AppleDesktop
+Network Trash Folder
+Temporary Items
+.apdisk
+
+### macOS Patch ###
+# iCloud generated files
+*.icloud
+
+### Rust ###
+# Generated by Cargo
+# will have compiled files and executables
+debug/
+target/
+
+# Remove Cargo.lock from gitignore if creating an executable, leave it for libraries
+# More information here https://doc.rust-lang.org/cargo/guide/cargo-toml-vs-cargo-lock.html
+Cargo.lock
+
+# These are backup files generated by rustfmt
+**/*.rs.bk
+
+# MSVC Windows builds of rustc generate these, which store debugging information
+*.pdb
+
+### rust-analyzer ###
+# Can be generated by other build systems other than cargo (ex: bazelbuild/rust_rules) 
+rust-project.json
+
+
+### VisualStudioCode ###
+.vscode/*
+!.vscode/settings.json
+!.vscode/tasks.json
+!.vscode/launch.json
+!.vscode/extensions.json
+!.vscode/*.code-snippets
+
+# Local History for Visual Studio Code
+.history/
+
+# Built Visual Studio Code Extensions
+*.vsix
+
+### VisualStudioCode Patch ###
+# Ignore all local history of files
+.history
+.ionide
+
+### Windows ###
+# Windows thumbnail cache files
+Thumbs.db
+Thumbs.db:encryptable
+ehthumbs.db
+ehthumbs_vista.db
+
+# Dump file
+*.stackdump
+
+# Folder config file
+[Dd]esktop.ini
+
+# Recycle Bin used on file shares
+$RECYCLE.BIN/
+
+# Windows Installer files
+*.cab
+*.msi
+*.msix
+*.msm
+*.msp
+
+# Windows shortcuts
+*.lnk
+
+# End of https://www.toptal.com/developers/gitignore/api/visualstudiocode,intellij+all,windows,linux,macos,rust,rust-analyzer
+
+/target
\ No newline at end of file
diff --git a/Cargo.toml b/Cargo.toml
new file mode 100644
index 0000000..0144999
--- /dev/null
+++ b/Cargo.toml
@@ -0,0 +1,27 @@
+[package]
+name = "setcap-static"
+version = "0.1.0"
+edition = "2018"
+
+# See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
+
+[dependencies]
+libc = { version = "0.2", default-features = false }
+libc-print = "0.1.22"
+
+[profile.dev]
+# This isn't required for development builds, but makes development
+# build behavior match release builds. To enable unwinding panics
+# during development, simply remove this line.
+panic = "abort"
+
+[profile.release]
+#opt-level = 'z'     # Optimize for size.
+lto = true          # Enable Link Time Optimization
+codegen-units = 1   # Reduce number of codegen units to increase optimizations.
+panic = 'abort'     # Abort on panic
+strip = true        # Strip symbols from binary*
+debug-assertions = false
+debug = false
+rpath = false
+incremental = false
diff --git a/Dockerfile b/Dockerfile
index 0defbac..2976b95 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,11 +1,29 @@
-FROM harbor.repository.lb.home.dc.internal.amuz.es/infrastructure/alpine-base:3.19-latest AS build
-RUN apk add --no-cache cmake make musl-dev gcc libcap-static libcap-dev
-WORKDIR /build
-COPY . .
-RUN \
-    cmake -S . -B build -DCMAKE_BUILD_TYPE=MinSizeRel && \
-    cmake --build build --config MinSizeRel && \
-    strip build/setcap-static
+#syntax=docker/dockerfile:1
+
+##
+## Build
+##
+FROM rust:1-alpine3.19 AS build
+LABEL org.opencontainers.image.authors="Sangbum Kim <sangbumkim@amuz.es>"
+
+# set the workdir and copy the source into it
+WORKDIR /app
+COPY . /app
+
+ENV RUSTFLAGS='-C link-arg=-s -C link-arg=-fuse-ld=lld'
+
+RUN set -x && \
+    apk add --no-cache \
+        libcap-static \
+        libcap-dev \
+        lld \
+        musl-dev &&\
+    cargo build --release && \
+    ldd target/release/setcap-static
+
+# RUN --mount=type=bind,rw,source=.,target=/host \
+#     cp -avf target/release/setcap-static /host/setcap-static
+
 
 FROM scratch
-COPY --from=build /build/build/setcap-static /setcap-static
+COPY --from=build /app/target/release/setcap-static /setcap-static
diff --git a/Dockerfile.debian b/Dockerfile.debian
new file mode 100644
index 0000000..e7903e7
--- /dev/null
+++ b/Dockerfile.debian
@@ -0,0 +1,38 @@
+#syntax=docker/dockerfile:1
+
+##
+## Build
+##
+FROM rust:1-slim AS build
+LABEL org.opencontainers.image.authors="Sangbum Kim <sangbumkim@amuz.es>"
+
+# set the workdir and copy the source into it
+WORKDIR /app
+COPY . /app
+
+# ENV RUSTFLAGS='-C link-arg=-s -C linker=rust-lld  -C link-arg=-fuse-ld=lld'
+# ENV RUSTFLAGS='-C link-arg=-s -C link-arg=-fuse-ld=lld'
+# ENV RUSTFLAGS='-C target-feature=+crt-static -C link-arg=-s -C link-args=-nostartfiles -C link-arg=-nostdlib'
+# ENV RUSTFLAGS='-C target-feature=+crt-static -C link-arg=-s'
+# ENV RUSTFLAGS='-C target-feature=+crt-static -C link-arg=-s'
+# ENV RUSTFLAGS='-C target-feature=+crt-static -C link-arg=-static -C link-arg=-s'
+# ENV RUSTFLAGS='-C target-feature=+crt-static -C link-arg=-static -C link-arg=-s -C link-arg=-fuse-ld=lld'
+ENV RUSTFLAGS='-C target-feature=+crt-static -C link-arg=-s -C link-arg=-fuse-ld=lld'
+
+# do a release build
+RUN set -x && \
+    apt update && \
+    apt install -y \
+        # libcap2 \
+        lld \
+        libcap-dev \
+        &&\
+    cargo build --release && \
+    ldd target/release/rsetcap
+
+RUN --mount=type=bind,rw,source=.,target=/host \
+    cp -avf target/release/rsetcap /host/rsetcap
+
+
+# FROM scratch
+# COPY --from=build /build/build/setcap-static /setcap-static
diff --git a/c/.dockerignore b/c/.dockerignore
new file mode 100644
index 0000000..cfa9dff
--- /dev/null
+++ b/c/.dockerignore
@@ -0,0 +1,2 @@
+*
+!src
\ No newline at end of file
diff --git a/c/.gitignore b/c/.gitignore
new file mode 100644
index 0000000..00a6291
--- /dev/null
+++ b/c/.gitignore
@@ -0,0 +1,2 @@
+/.vscode
+/build
diff --git a/c/Dockerfile b/c/Dockerfile
new file mode 100644
index 0000000..79c3a98
--- /dev/null
+++ b/c/Dockerfile
@@ -0,0 +1,16 @@
+FROM harbor.repository.lb.home.dc.internal.amuz.es/infrastructure/alpine-base:3.19-latest AS build
+RUN apk add --no-cache cmake make musl-dev gcc libcap-static libcap-dev
+WORKDIR /build
+
+COPY src/ ./
+
+RUN \
+    cmake -S . -B build -DCMAKE_BUILD_TYPE=MinSizeRel && \
+    cmake --build build --config MinSizeRel && \
+    strip build/setcap-static
+
+RUN --mount=type=bind,rw,source=.,target=/host \
+   cp -avf build/setcap-static /host/setcap-static
+
+FROM scratch
+COPY --from=build /build/build/setcap-static /setcap-static
diff --git a/CMakeLists.txt b/c/src/CMakeLists.txt
similarity index 100%
rename from CMakeLists.txt
rename to c/src/CMakeLists.txt
diff --git a/LICENSE b/c/src/LICENSE
similarity index 100%
rename from LICENSE
rename to c/src/LICENSE
diff --git a/README.md b/c/src/README.md
similarity index 100%
rename from README.md
rename to c/src/README.md
diff --git a/config.h.in b/c/src/config.h.in
similarity index 100%
rename from config.h.in
rename to c/src/config.h.in
diff --git a/lgtm.yml b/c/src/lgtm.yml
similarity index 100%
rename from lgtm.yml
rename to c/src/lgtm.yml
diff --git a/setcap.c b/c/src/setcap.c
similarity index 100%
rename from setcap.c
rename to c/src/setcap.c
diff --git a/setcap-static b/setcap-static
new file mode 100755
index 0000000000000000000000000000000000000000..d1c7ddf229491654b16b574f02543d7a3fc0262c
GIT binary patch
literal 62312
zcmce<3w#tswg=qvN+vL*10)(0WFo;0f|7v*5=|gYW}rtV5FjXuiXo373nbZ04}k?C
zaT25%M%i8WUiPlub$8u+admyHt|BVt0SO>#03RSKk%!DUyc8tiIp6<O_au`MclW!$
z-}jBCtNYZcQ>RXyI(6z)b+g9in5xxixbRQMP2%XO)22Z3)C~VA^#(~Em&NtN^#(49
zi@~#=!Ib<wB|)z8OV{>IjVhe#pmIO;`yx}x38!3w@=WCn`0G^j!+eI*r(RX?!f9kV
z;&u56C4YIW(&lj5sWKBzqsu*VQYrVyP^DZr%~QZ!X{>sq@=496`trV2;CcO&a^W;x
zdE~-rST3`VOQpohzv6S9T0kYk6{_X*DN23OX^u{Thtsg^XQ3SN`TzDu<>{|l?ceA$
zStS@w!}U>0tP?xaX3XUtJw5%vP4yd|QPF>tQ2WAvH~lCVa#H&-EWcIj6{NZ-c-=Gw
zzAg%WR)uejf^S)<;6ED$&nr~mTcY5FD!eHQo<38--x&>8@jIg69VP|8GYbBt3O^eK
zzpBDHqoN66Ib2iW2~lv<0ENCe3VxFcPmh9Us_?uh_*4~M7zM9Z;g3YY*Q@aADEQMV
zye<m<XLTH{i-Ny9Na25D6#Op(75Jtoc(RKBY!v)SUcuiS1^-aRe<cdOLFH#l6#Ow2
zzbOj-smjmJD0sdK?}&oGsnS0X1>d8>JEPzs74DCM->1?)8wD>>;oVX2uT(l*Twncp
zR&AFt3O-b&lMn?Tpu&@*;69a(ISPJ<T5nnuyheqmN5TI~?XRpTc(qz@UKIRpm5vw%
ze@mrP7zH1p@;NUG{x_A*BT?|%)p{32!OK-T)lu*xD*o~)_<0px7X_c7(peV;Kd$n>
zF$(^uN@r6P+@bRSY!tjLtp8E)vnu{8QSdqyz9kC2QLVQr3O--O-x&qZ8?NYCXB50?
zureO~KLJ1c6Y%bzfOG168@7jG`o^DtC;S9FISQVoKAWT9Vftx50Z)&DhvgEc7v?iz
zgd(5n{(Z+|*l$=K1^-2tBDcCIc%=$o7X^Q%P_=te@H`d&l_+@YQwsi;DEQgq3cM)_
z{!*y|-x&qZepG>XM8Qj+RNx1q;KpJF-Wdh|L{i}XDEN4%0zVrCfA$Fl-W>(MQ*AG2
z>MQ3>!_?;}c)F^$2~qGY6`mXg5BnMBDEKCI{!WX6C#&_QN5R8%vZCN&zbEX6hV>`>
zT&?=4VfaHOiX4_l!RM;*x+r)Ue_a$jjK3)gUiY0s|0k|>x;!OE6a7=bb(7Wn_uf+g
z;j7XciVsMz{}DKDFaEy3AKmwJaNMxz9Cr<Wl$I1%FL0Jg3#x0XO8U`5c}>;Q1yb2^
z=`M45amA9dQnOTLt}d=|m6>n7l@MIOE=R^)=I|4h?R_d=QtV927YY~5u@y~4I;uCT
z(p6PkSypqGxuUY9YH9V7GO5h$mdfwQGA~?#TUXgH++~#|WoF_5IHhIFaa~rtq@q+s
z>%pihH?uOXNZh%uVkg)FgW!y~D_&T!q(Z7F0~Q#rEM8j1rKhJ`(#NHbPtQotOrMZG
zF+D3i+mddvSjJh#TQV$}mI;=LmMly5xb$(BapT5~AD1yMbKHb+6USwZ%O0OT-ZFmN
z`0?X2#%GS7Fn;3rtnt|y=^2)caT((?GBPqVCS**^$jZphOwY7rj>{aMnUR^9IU#dm
zW>#kQg!BoP3F9V=pO7&jbHaoP6DMR%$ex%!(K2z|#PJg|CT32YFmd9<tclrK=~<Sn
zaarTDGO{wWCS*;_%F4>l28-FKJ{zR7Q7jvvXtntN`#G#{|Myh;Pk*|opPqgZl@-pN
zZL`>z`j(@^D@xg|YlUmU!m28XyJNK3Y)+q-zMQMz#*%*aWJ?v$0@B=tOR7p1FL1eC
z)n%2e^c_oz-IXPa%4%5l(&CZ@#idItD!FQI!GdL_uBrtktOQ02qcO5%q>KLJ?ns|E
zI(;5$yCZ%1==9}gR63U9%D6jw>Z~p<DUo`fYRX(y?wS&Xi`wGFWebXz6xS?e`KZ2R
zadlNirL+KOQdNzDMeS0UA<nDIYRZ>ZRVoC_BqthQQCZH7R{0^6l0_J43}NZw$|^-T
zl^D1SF{&_vYnD~0^)p~iRdH!au}fjGqPk=O8>XCn##Bb4*j-vd{1o@n>1BpkD_K-S
zLZ^!9v8K4TqKZ8&DJyoBak(mE;{8)*+pS7QMWuWBf{LX}-BR(wB}yZS6%=Lp!~{vZ
zhh}A%VN|fB%E{Gm_R2+f#j*T_)#cnsH<w>r%?V2vs=!k8AF+(q7T1(4;_gtHm^)+o
zjG6b%;6}Q}jw~JPl8Pm_OR1$yszwXgz0%^6s!FM*YDqY^oO0*R$hXZd66`a$DV3$D
zYKB0h#xR_6MQmX)NYaW0AW>f7WVxhJRm;k1YAQ<0I9FMTyQV@~aVL-!E46~FEUx5c
z%q*O3zc+%1T40rNincGX&#)JTxp7CRe6>_ljQ%WMqVkG9SXx!;hFoiEi#dmV#@u-e
z#@#uA6(za!utBUYu0XM|rDe;;R=RPQM%Pi?G#AHB#NU1Rn~cAi_+vlKjoM+!gLSvu
zJfwf3Q9oe#4MPXr)GyYQG%zkE!NA84O-?kcm@K*FmRpANd}6<T!}-`DrkJFDhCxO>
z?uW)-KZ>H^w1{=+5wnWnViEa>L*&fF@!TLTksHDd=Tf=bxpCZNPUMQXa&8UxYwoYy
z9xlYCYKk<!(}Xml_OIG;x{&Ty`XWPFOei)r?yvp!m_ocbs3>XEkkIfjZ=q0V%@th2
zzwIw_+?OvPMuU{@!+&YGpMgIY{+^D2hx5bfN#xz|H;%iziR0Y(`vmhcrSu&BqvwD3
z@4Q+*62I-;e_cLYzku?dZM}7e;RK7MxeR!Ppqmc(%MtV+SL<(&z^D4xzr%6ws(=55
z^acD`-s**=TgHvg$eb`SD_fY7Z?#S3qJBfrpF@TWAt;3<@r$ENf4b0b2sf}F@^$@U
zInB*+{Sgj}i$P|8E{4jeB^joAi4Q-3@&L+5fJDp15jc*+wI@G}*OQuh?l^8R-Lp%a
z0>(8mKLQoE>ROEfX<evii^DhtjB8|m-;(Mol>ymGkX_;wFs}HYqINgkbiLS}LaI+b
z6JFmce)N<W0lAUx*(FW^;~JSCfr{H3A|8|Io?YS;Fs{lCyvnA@99M@F1Cy&;iN6B;
zEl68jIU|CCdb^Zs<o>`7(Dc_PY5$^qOgl_x(T&u6$Ia)a=*DV8+{@e?jZIsmE!94y
z{aPE+&f;9!8M=eqR85)YAzer_8qxGMx{tI=bf4>1YTiLS^_(s~(lz*Tm4Kw^GxgK-
z_o{eRYTBspk2v&G`nQ4cY#$n|rGUPx->pBPzo<_(j5SO(JYuLcY%rYF{KN3R;gI2s
zp?}Pinp<MBVjMBWFlU=J?`S^Ke4+8g{4wUu9`m*<=JS|9%*B{?-7T@%vG&-9V_(xf
zqehp1%<7CPGp2~D8aTe?RW(bCr3y^+_9aWooW)D}ddZx%YH4vrrGn1QE_1n;Nao5a
z$y`%b4d0=xQkhw208(tmT*MWY)hw-Wxj@idT2@(6R?5wUC&6l9<?yhyLXrRn6E1hj
zBIY%l!AogHO<4(?krh2T<WiNnT-;Rn)#kG06)wre-CMlGU53>{l^O1g6J9)(ES6CD
zis~{}5`Ivbc}ZEhWM(`tCuF7@Pvz#NWlM=Zn!$V{^Fp_41*Uij!f;oECo|@Kscfma
zgeJKjEI_KOYKm(rmaH(lD~p$5!NS}LySi#{m6a{#@@uMGt~)Tn!G$m{si<6x^2Mch
zR8^u7tqWAroHg7^CJj)A%<`)$E75e48Oc;a7nrNd;3D>lj-0_#bCp}_i(Kw@L6TyX
zOEOou%%$Xxg&*9Na7;=TF;0cjQV@2byUi%TO{u9`TvlnWu7JesV`r+J8}1La4UlWG
zQjD8IP7=D4wXFv0C$yor{}ebxPb$#ciFQ|?$098D6hSbd+m@G=P~SoK)at|1M6bG+
zLa#VMy@52*Jl5k?l}>KXilqyymQ<85A)A*}RaG<npmkR-QW5lHX>sKWa~1q<RxNA1
z(!Hc5tV>GETqQLX)zCTc+S9F5ic6!jsYJ=5iY2Ayuu2kASUgNUdo+^kshhOGMMX(`
zku~&aRw-13$+ou24dPWL@YlFG@D|I|F;+rO6zjsm8i>Ej?J_g>4|47^vPz1vqQx?r
zn~KE+QzROr6}0*#St`A?6e@tVD-8s+ocd51G<FPBsiM51tOn}06g8G|R;90rNU_-^
zL6eqJL)bv;m6VD_x=EU;4l)JZMXJn3nTvBk5avb2F7v`N^oFYpZ9*M|HC0koN!1dy
z|4E`MhsuEO?H$tFg~%p9n#MR|3NkH|z^F^As8r00+8?M`)zAX9!M%OcQ)g`rbcr>e
zSrC^(ttXo`yhkJYfL-otSOXI299BpnLIrwrh{fKgp5o=jOUZ`x#SM?m>t!-Spo)nL
zBlhKOMwwJwRkOHf_=le(hyV5L3)VqYF4CM7FI3uvj$Y_4FNZp~m@Vz?aJ9uSHCS?x
z$?BB?an%dVFRo;*#G=<+Tn_tcRwQh8EpkiDO!b<!;w7|#T0xy$T~p;GLlt58BB2-=
zFr;kgE-J1p#mZwg^c91p*NDw>S79zFTV7IDRto0O6xhuQ_fqt-8w>FJShuSnHe(cE
zLaSI*Rc$WDqy%e>LbFx<F)uDtI;&Rz(*YqxE?ZvBY+(4ADK<tZ>}n}Tz*->Hl>MBE
zh<Y)+8s;=weXK4<^-6y{Gb@nrdg0$rK~|?X#Kaoo)FS=*n+C-52?GZWPE5Mt#^fP4
z-8^*IEyK+zw~kN{{#E|JUGx7ph!BJ3X5HOcIu7eEj$3sb#}(oJBvJ|Kn4fXn21@Vb
zxU-ZZ6p{wdDhFu}QU}sPq)#K=i1bCI&mkR}$#KV!<{<4x>Og8jUpOXkTq@ERvp8-Y
z(kn=tkeaeN?qj4mcXON>zE(~yaFISZiR0cuT7t9#>6b{mk;cL^O@OcW1kxO&`;jg}
zs?X!N2Bce&zJk;OFZKY^*O5vnH){%T5EQ;2X)@Acq+^i&6=@;Te)*6A(p5+|BW*<b
z4&@{5Kza!2Nu-ypSYyFkA3GJeNGBoPi1g1$cOv}(X*bdbrva}Y$5kS=B7F?$JfyE9
zm5>e;Ic^Kmt#-5r3!~xFk&ko{(p5+$q#KboB7F|&CZt=CK8th@(l(@iq#q-_g0#hf
zda%;zKspcUF{De7`ryHDM%sz=W2Co}Cy%Ao3Z!F@b|PJbbnHy{&q!ZDx(8`&A><X$
zake?o3#5CIZbbU4BFGi#*GRFP=Q8Jl4pRNSs2Az)kUoX<Ii#DBX59xqk*3eXAJ$VN
z@5k8%q+cO@4yon=v<qn-Qrh!fi?kc*#QDI-qN*P0JfxWqf-cg)0@RN*@e$x5{R`4m
zthTO};!Fn8{4(eP(%t3g52Sx{LcUlK?m;>R>GBGc1N=XcN_fusIrJRqV~c^0)U*Wp
zj&u{!WUQzTA<aYj^itp>eWViYLW=*{PxH&!oMw4~=4Ml@aia$M4=DYaM{o#P;`eZT
zLUFvYI6lD|5A|W?a*$Rd-$ME7?-8U$_}c_{R}5~1_=G9($y4IZQ{vO6#HS1KSweiC
zCw4=O&+vr)N!?nl?yeYurL%ls0XIR2H%^Jq)BgT?861}ZvRm+%aXa=6ka8%Y)FH&D
zfs)6tLH~sANv-xYJ*p(9#2e8a+*$lxK{*Un_9K`c?d=8(3HwpIlJRgJFsM1lO%2lr
zk3>IagUWj~wW*iq);%A7)TS)A=b^lQw7T4f42b3ussOOXRC$kF!1J{DS2UimI0_9B
zTtg57G8LLHB27<ci*gW9U`>GK07iX6G^sy71}qCOCL3#fy7pqc@e#mJ0&YfU&C)8k
zQT<|#FO2LLt^az`pAuiFvuduFqx4H5Xb&B)%1!APbb*KUhs6389RZo;hws4(^}#xn
z%RsqsJ78A0rvXa`Y|KybTc?R+ST|UEeZJB_%MTifu;J$*16B4aU(mpyCaiUc=K)U#
zeAs!jife_!YIQ?2OfQj7KbTLB&SGW3-akVCwDn0XB>IF7t@G)jDH{yXm9;U@cu#CT
zw7HRShwkoC8C546KxflL*earfAMvmWFfU-gBmnw#tyYLn_UOQ~7GeYdnn8Wt1iUYS
z2UTTyT7uC@?L7ea8NeSWIC$GY<=0Yqk6ycmQ9$jO3z4nYbKE_c$80^gcEYt2?$TaV
zE*bghz%2nT8}nepqpf20fao}ow;XwI5S@Y^o^9aynJ~{nYa46da^Pw)XVwxfYv1&6
z`<!81qDfJZS-|rUUUWNF_A*C0v<JAhyHp**Gr>9m%Z`AV0Xq-a9e`oV;<!1~hK2FQ
z*4cCesVXu_#u%LqoJR;pq^$X*Bj)>AmG}3HH%{$O$i$-+xNCu1L%7jA{=6@b)xg~Y
z+&IF;k9ceVtQoM83<BGObQ56v0E?D$9`asC-U;L}{X~6Fkly)pkn;w;H9l=E>76HL
zT6~_4)5NFeN0<}V<%m_o-hoCdbT@-^95kNP+DLan!>6~A?!s=Ux;qU+z8{8sK3VTR
z%8R1JzZG`=1sFI?kL*YGc^+W@16UbBK;K6^ZXo?zs|OX20ds-&Ud9>}69`~!3{W?s
z+<ugst(J?_TQX(n0&7^JR8JG|e*iwF#p~AtS!nO?TMzL}K3FPzG)$rFM=%ox;H`ks
zxS}8RgIR@*BLLI)YNqdbcqG3q3-}LFUT+(%)JF6JYhy)xRzZATVR-1H{XNZP^JE=p
z%mR()d-{Rd5Y`XOhD7$mBf1fq_(fCVtEa~=65=1x7G1wntYC+H#y`Q=EK}+FsDC%;
z7;jAew)k|N0ln&o&zs7)bH%6SM{<X@gN_;F;XU}KY^<P-<?+cg<IOXA>?P}e;2Z;v
z3HbCQ*gU|#0Bj(GD6l1f9Rv(+3HuRV9bg9lL&AO}^QZ8z2e8`+g5E}-FCd{4{wqj7
zMIKx?_M^6L2do3I(*yyJ|HKZ%_s|{)cSf`wHepaM%j>00^_c;y1}v--FmGIj3VR;+
zRG&KjKyCx+wmSZ_zl$DtX+W<=*)Q{8cGR+w`mKctgo^dp<)?wG7hs#OhYK}{#3i5o
zR^ZOO9`3YWT;l&caBaYKs<=PF|9#ivpVk7^|3*DDHXj7;Z-Bc>t>;HJfX3$H_%tYG
z&!C`kPodmrDEHt$D>tL>n05en56WFexk;G&{)HY`<EwSI>f*C7x_)fas9KWK(Ejk#
zp<o*b@YDUgDq2pYle7lPw!uEBW&epzlBfIp^>i{7WuFC|S3#$c=&*SbqEh^Tdswex
z5+c3Y3A}^AD<VAb+DES(z5P$P=Ygx4%5fj{#YH#3H`v~bOENHHP(KIU->SGjp(~Bi
zGN7^ZAj)1vSyab<Fw<N$VCMmQiXfPBe}djG`qG2fu;+shNv^M;yf_W^o67(5u?~M$
zd-!^CB|6=p(+xU5{A)VYKZmZTDkRH1tTF#0a@<=goj!7ZwO5uTk0rnzXXm&Pgo_`+
z>Hre}gZW}VqDkx5C4fOpk$uVfC&J}n>!2p!t_AL^DsJQ$V{;IkS9o7ow)BoM(yMNi
z3!&USRF3Ht46R3p89;Fk$+uzs4?~**q}NsYYJV|bgV{QG1)dn~ANuwe<O2K$QTBIK
zRvnMm?`w3E?rB|oI=BUsFl*>l#ZMUu8qb18+zhsCQs>`k@n)<=X%$McYC?V@@_&VU
zYKKRQe5oJvkEiz6+QaKrbP;zFxD+p#r^mxT*Bz|L2IzA1*V7)Q-?HHBG{Q+?eFSoO
z_;UdECSZ?i6#74EFRTsuWt}G75;$fMU*86gL9vaXaS4;dQQSw5WAcCYNBBR9KxqR0
za>OWx6Fz+ILdYc<w+8_KEsOz!Gr2rOQz%=voJZa!<k5PP>UctnzW33(C360n7T=`N
zJqbR4+%YIdb>~2VZ${mJ!98b-Pk<H}NoR@x-wgQF9{T9jAJNxM&_oG<^l~H0{{24e
z>l01z#>SHeeoLWtReZ9QsRrRutR-<?uWgRNTOEnl3B2XN%O`q$?B}Cl^U0+n%Lqs1
zH^6Hqyl}m1$zSs5?eU!&?Tc&xfr6r&R3-;y%!vPNzfPHZsLV@!%aFd(dG}XPhV(I_
z9w-8AZ(gsxplteymQ$j9LiA<MK`o-^*jYb=)}N#xjW^aVcZZt9O?I!N$tcP#A|4ud
zxzE~tMI8y2Cb8YReI3IG+|zA#pBBAZv9U=?!qf2DIMI6#N;$T#6Fn^n!J}e(gMv==
zswIM=d{*=(h>iQCWYKeJc&$nFiYT<<V<Ieini7JYqIXp)>J7PXr@L1~Z&B)I(Q8e8
z7BJ}sG4zoqOY4pkM^`6^a#zqGYC3|)MekFo321`oZAhh9i>SFIYFb43Q*l%qaX4J`
z&M?-0jhOKo(R0y=;@)^sb5Yb}iynVM@Ke#dA+?D(K>3}NQeLwt?-ob3Q2A8RTVt&M
zMk#;I=#F=I?@187<LsJ?4%svbM3RGhMV|rF0Oyd~#QN<d&`_u7yVodsC)g~z9A3kX
zBy;b8WR~O(K@!M>J=+uUtIK`$6OeE(5Iwn}R@}82o&`W7-6?ubf>Q3=A0wD>@0L&q
z2;UHbG)DC0Hhw{X?Z!Y3a`@qSkYw&omU{zooyZN`ik$L|gw)Cp=UUY|>vCmQ-_KCs
z4@!N@S$!y%ITm*)o<_xwzDb08%7s~;E8HjCE6f#&<`g=-6GiU=@E8MGqib5kxZQk1
zzZlSH+{HKKKpqb7)MUFa=N5aY2?CM758mYPJ)jXs?R97lI^@rV`itb@^9|IK_Rvng
z;n!%On0<+FpxBd@f1{tRVb_ZHZSroxb7VN4f2k2XCngJZ7Y{GP)6ca+^NASG@yXV>
ztAL%Y$p`Qr9dKiX<|BiekH-j}uO|y}0bAVOp1Pg`WpJSnxY4<|0gWRuwzx|+d2e8$
z0@49wvc`QP$brC2fWVPd&A)M1UPEX_eqLRuvnChUvo#Y@-4t-tIhpF!Qf2%bvvr;m
zvCSt23C*1*q4{f&ZuT4jhr8o0)nB6KN+Tg3X^@zG(A8h4%ZYD#G{&+oXmDSGfG|!(
z-geNz+i=^&H@u@KAwFyrJ(ta{n??Dc*m#I<XaE!tja#tnvNQ!A!DE5%-dMZmNVh}Y
z>lpQ&C?60<?Ub86U&lJ+eU4GzyJIb(Ko<$ub4l;2u!L+V*Fn#~^mJY;=g**r%K54R
zD_fv8d{vSMDf(aF-%N}z=PN%i=SvTk^N$?*p07Uiak+9i1n9@DqNiCaX76+pbmwV6
zc9x6$>Ro|@I#^8p&DB~IZzs}bM!K{aWST&xi3-rAD(ME6bEpOAlYo6VqO$i1YZoqu
zb~Dm^bu-n`Om(yiThMe)N-4jSAKrjFOe2<E`E@xlO#=T+vqSR{6wi^};toLK4tZ!Q
z-|!@G>~fRc)7fp=2TW}f|4fVLqDETDO0Lps)S|mR7qwEk3e@%jb<!*qsOtslr5qKg
z?*$s9pQ%7YFEB<LL>#Wt#-QS6QL{U!wd^C~)$G^Vw}f!=kNy+i)o{vx<@~ZHlHK;E
zP$-yLzR|L8rZ4fJW7GkweAshBXO}-NNZBqne`|E4v^X?JME>PZ@RSb1FrIwlTVxvL
zy-b&$!+innbDJOo;cdD)_$deMp3C~0&35^W4Fj_ITdlYi8c)AiyKl@OG367!;T%xK
z&<;^PBYI9;v&&cQ&BqN;nL`eFw_UzcUfwJJb9~hx{QcYvrjL~KOO7Kw57e{eyzA3g
zTt1E|=Y!v%JHJLR9tG+H3Aogxm-9<M0d5dw(7#K+!u|J=<@QmzPf>0!a(;-+`Gj&%
z=1>3>zs284VC)A*2ddjgb?zq&=;|S8@W)?bvdXi2wqN5LX>3Eg_LD;GCxzN4W?yyl
z4*6=}KdyyBmVE{C2SHtd<^w?N%|{Fcn%(CFzG^N<*M|~N4VrkS6Dim}<3~-OuqO7@
z`6Y2cm6QIWa$+7e@ztMGm7i0Uhtc_V&kl1z_9yN?1%{(qhj(ad;EyEoE#Xt}LjBPz
z08ICq4%#8|u6_3AZ)3&gK#U`9ub9&832CI<nckv<#sc{>d)H_7<}<Oth$)D>WGA)Q
z>j`P4q0_yq4kp;;i}tR)_T~VJpF#1D#FTc-eN?9??{uUzfhu$fn%N9p`T$SRrM<x<
z%RZPY(%BX~(&V1q>JHjRy}xW2|HjlT(Kn!E8|-9>zFySq40Y02vsq3Bb4BlJv*?|g
zCVKOd9r6WH{+uSH`ND(3L&C$tf`>w#1@f10G-Q2hFafvry{GJ<R{P!{QE;HJ!&{!_
ztxUIvc9iqOt<YFGWDk8H@$zXQRFrCNXp&C7q6yAYXcH(|Zhl46u**Hk;mt_3cYP(c
zw~{i4?StK?zXi@qNE!@EDiJZ%3OdJwdXc1XH_XJZoBFaDo;~;MVbdQbzjkXXnI5kG
zS{<&gguHc9s$STJA;txMgNuB&{u%|PT(>m)V@yr!fSy<P&E&kg59<ikAZ*hDE4Ua~
z80oIj&3==qld$BoD3ChYREGycWRVzQ8w@HJ%xd-zN{uz04I`Vv$dM&uB1^^!+lW{1
zaGM3nHS*QBvDF=x2j(2ds7v?wGIB&un_fOFgg%C`SZ%ax+6%I~YC6$3YKNh_Acnx9
zxIPX{uVfStfgHWbijz<@N0j&5<qO`iO1;^rcOx_a^-cF>Op?z;)Md{;Tyu=nf|SD2
z)JwJSJ(5!>iH<b#{rBu)r00nBC&_(;-owu@(2dSL(Jpt1jTiWaTmbCe;i7yvl=R6~
z3?tvFRCt_U!9(#EAeJC{@XSe0%z&?h2zqiJ)d6R2!J9~AE3g41pM-$_^$rvpz-0cu
zCVrqb)lBr}i9RXS=>HHs43`y8nNPkQ3T>q#p`=1o3Ih&J_!H!ACm)G;u}AUJ+z-nT
zRtaOseLFDWMgenp6y|>tCgV|IeK7w96us_}mT#mv+yNF6LP_5thQJK{-$2wZx7odG
zjG?5XVdx8higK$cw_7fRl0F6)jao%c#_b@D24^W!0FauCHW`Lfumtyy;9iGanJC$y
zOd6_(kO-YbL~=8;CP7B93M8YyB9aUS@szn3Q;RC2F{t0+&7Dh$+$DrQL&I?mY=;5l
z-*BW3A$o-uS~PBFBx{8PCf1(9SfG1iZTUa`kF4=3Yk?fpiiJ#S7V2_@#gG-QE3LOK
zM=CgQq%NYYYE(U-Pt~mCPe?_fx+>M7NaZQG$&iX8(0nx%LXofv=0GI_%M}>yh4!jX
zzb(|t2Ng-9*{aMTSA+AsqM~`Y?+*gRoub1(;)pe>Z$A|(9BCDf@RZq#rGwf}4Hy#W
zpit5axCz`wj5VazfiDUSh`tT%o+&%9EEiZQfoXLpsSZWthSUaNVnua(Z$B!quz25s
zMWK7@O5ba+aCfl^@1fG@4${yKAkkYKz;M||BgzUW+uL%cg+I|3Q5tH5!B91H7gjxL
z%hyBUp`ou)5~-mdf)~c%?~sErh9Ub^DCs#ofZIYebWJ3uJqo)YrXt+R$N&C+<n&?K
z6P459y_|M3C4}9G1rtFFGa*+13md@>%J+0@mL=BRJ=V?Ft<<DoJxqq?0&*;;WIvX#
zWKZWa^V{k_0fi@Hi=XI?g?rcQ-vzHJc0PP9^gnP3BUV8se9uWt_WYKgfgF~S4}nXu
z{$c_i`N#eOnD7?m*tbl-e{I&MJC<g^>9BWo!e#AW(Lz`PmU^RFY!#ocOvFQTaImnr
zwUi+IoBQlO;mTD0&7lj*r^*kSuHrWFKHL_WLUy?swS+o<Fu>WZeF2M{l4Ya#H+MG&
zv=zIEQgdLSb#Zg4byN%JuyS&d9xLdkYqaF|T<Yh#p{^x;U7}tL?F=R>u#(z$gU9$c
zP4|_{4i(o&2raA$;wVH5y4Zy8kEO<Xwx?m*>Rlg063KS?15y6OE{7T~NH+`KX&JO6
z(`=(v;MUP7#9KdgXad0jc3**pvbWv=pv`h@vmT=`<qi0PyzLviXEG;E66GbSM!UDl
zD31DI*@K&n4m>CDjZdI}Tm;vHe`5ief|IX9;3cL_@ZUmTi*nF%DsU7i1>Rb7fp<+B
z6xShNbI4!&U&A1HP1DfCH_EuPd#Axa>k{SD!7)F^rGO;iie4CWzLCzRs0AGIw`h2B
zq(g^xq+=xLh4yK5*n|UT)3V^K=!CXuS(*ZG6&R@nBWK{V5hJ(vFak%2mKlBYO$>d&
zH^8J}$er27$c64DukS=)AAo3}xHm{klf9?Hlx^NM>G0_I;dMZuVq)lhX^>UECMYFO
zy`~BL2g|vDK$D(W_+LCKvUpT2LJg%jR00YmH#E5y+2xb=t}j$)GGaWypB&2k$z0T=
zRuc9n@1V+~Dcyp=mR^vjrSor)Ox8`yvK$IxGzP`&Aph%DT8>A`v)2<+MjZK{@T=a3
zvtyU9sR4z7=sNjRA#|Tvb$)L`m_Qob)2Uxs_OYQIf;-1<dZ`xr@46B>e*5UJNb`A?
z88T_JrsnDB304eZ$4xT3kyoXrLF?}Q8})@XH68A{xuEfwC}&`;O|OVE=budY3OqQx
zcZ%N11T1%qj>Tuua5#q4+mZ70&V>`RPZ~m@Kv)vcw0qs%p+fWm-{=Mr=#zD5Iut6;
z?zIk0qiVAdzZ{xCkI58T8G-e@dyv@NiBUA*?#mbu*$#tI(pz=~2Y{jhOmVa@2Fnie
z4B_k9y{4g5-uR>Pmto%iS$P->_&ikB%xd(m0)29PLPZ86@!X7x(BcHq)0$-uwcE45
z;u~+kiX^yH^gaxJ4@uRKT7uYoRPWFng@`PtAeOLyZub`50jBmL4jLg4=?;!b#O*Bb
zWsI?VC$So#tEkaEM?`IQPg{agoBN%h4g^K7KGkvea$^l2M0B#}(KU)PAP{@=39NsZ
z%pIxe_joh1?(r678AG!mcu9{nmX<9A#NMIKlxQy0(XvaFI}j1&MLvHgc;y@ZN}cVS
ziilKaw|&%EOOwNwbkpBMA^Y2P>Mxk2tmo{ZHU}ca*&V!xI+uTAXiUSQ<@ej<W?@vb
zaG^O?8i>_q@T;&qC}NCYlMC@!M~u<Y-xO2Ocu)#}fNLwoL9s~XmcPOls4edA11X@{
zN57`<Z;Tl%ysGhB)k}AHuIi+FJy+pI)7Lp1zG{s<`%~W2jUJm)mowqL*EIYS^U+m-
z?*Qq^K1kUhGeNAsd=~eTP=EP6Qn#2_clF8Dg@Jb?v0sS5?!>(`xBl`er0)BH{fE_y
z0~C?UtJ_hH$Ml-PfjT_aweoeBwYAFuYI?Lr^vy$jZNICuF6Wl_*31AOI<V=Q%UI-}
z*b3h@I4iI2cqh=Gm2L_OR-bFQP<PE#W2`%Rt?u$^_gF?~6iRBT<jrcyI+T1(8@y4J
zYcUG$L%=_HGa^>OnAgzTujxd2n$fy$X2QA!1C?cp91G*|P_OMEiv(pmneHe-%w(t7
zb)cYemkm(_UTnhLsQLf{?td8_U*E0x0579?!dCJD#BE_8AaeXW<R-D}n_hpwCbtTs
zT7`;3Y!(j=X5K(6yn#b@-;^tG2JSDPB0rdDAiv;#@(U8Nr_qAy$QiK99knlooq_M0
zPireKFfym%47Bw+1GCEE48$tV!1v4<xRIQJBE6A$0}e#C;ZW4R6FdrU0LTs%nY;l{
zOI+9;5W4mX&4J-o`9uGOE*K5Z_VoF!Uc)Vz?px>1nMIo!14a3&)4zNzTAvHOn!GH*
z>F=Kj-<G|4h>74Hbavd9MG((>&`5;BTSbKE;9)xbw@$=!W0O1H=|7M`MQH0G_`W<3
zR&E~p?{quY@!Q?7X@{NudmDi(A9!H?L#^A0*epiP>Hlg1qk-V_))#)Yo1-i=8-)wI
zA7~Yd=FTA|P4#QKDOZ#)OQ>uytLz4<Y@pNsH?S?dt`X%O#ETv=o@rLObFB_W!szsm
zp9!opV)mD=IMHVt3ig90%xkXxqAwp$J6u}6KcAqpG|4UeKpV#=OgHfZ3ruSVueG5%
z|NMu92f+qHij3d6qWlA6p8^R^e~QZdE#g}*s?0m&M+%h&h~1*R2+sDrd5p*$Rt_yt
z8-5%@2E(wTTf=363!AJoets)OOB?=5@{lh<4Dw~65W5KOYVWk}Tq+@rsU4X24^3{z
zM%*Xll6-=OToSnSK=2;f&m>Uj^jok$9K?>-v@DWOlI4QvU707!t}Oq5L2|@FkY9_9
zq%~Q7Spj_E*%=CsB^x?DF9>;G9v9XJ>~i_$bbF^?p#a%u=l+Td)CE$oG*QnYOfr`>
zleKZqET=z&u2NOxAB+l95fQ6?@UewhXFV?KMBhr2=v!=T&o|v_Fq)ly?RYFK@=dw7
zCB&MgA-M#U2IZ#fHVu*bBkb$+e*s%TTZw+EIZ{)Is;VhMFXzydM}DL!`4O5DR}iTw
zX?-*WPfSxN-YkFh7J?t#xxdIe*Xq_5pej{M)NQD_b6(TTcKX{a*e>#>+vV-@fwhL0
z5kFBB@=p#_bJ9EPcYrh=a?h|_u!Mwn^FUExfhDKE0po0nPe1y1LRU!MA-6mIb}R=Q
zn^weFeM>_@o$n!ykp1POUtpd#crNFyHoQFwrR8DMK+)2)){u|X26u<)of6eV&jgN6
zL$C|!Axb^D?0knPLrLLde=3cDhF!DldhZ#K3U#1=P+yAEPp37z4#~-+5rbffu}Oms
zo_!#*6*(K{w|a8lL==ESX_XRIDh|2105;d_NKKG3gxSKZ0=d}^Ym7)g_LJmmN+pFx
zVg3V3MafS8f5MXvR}=@IFz|pvU+LHj(xCd)-Acz^73Fgn?-Dw6Aqpvmiue;EIx}ZF
zb*3lxCSp$XVl4aSK)+V%rFf;Ct64kA&HWS-2OZ14wS(C}g()x`!%Ck9pnD)zJ?HQs
z`c`)bjzE7ligNDf1duZi5z-u|KMo-X8p*eyF`};;)hyRL{Zl{_K<Fy0UphQm%OTjm
z`K@fPQvQM2l(};}@53seOelrRGct`>h3jUtG{KwI$KuiHe;RdyIN$Id<@y}()YYkP
zhZ@^J_zY+~Er4=TS)^c_5xD*#EP`~}A)oNSiCgMX_aslQ5nOZ9?N<3Tb>w>$coIU1
zsdi`@_4!bz-!vAWt}nrwRZa``x6)v{v=JKC>hzzzQ>n+Yk5$4He24!fNC4xR5Jx0X
zBUr5hV*s#maCmL98~uRBm5QU4rb;nR{~tgOvr+;C14B!?+KS}_VjK6`<qw6qcKMS&
za!S6QoDd{}oFuA@<g^Qqm<zy8udtX@n4F~e9`^nOraieA5pO`tBpakN3ace1l%K0Y
zVKN)c_K6+x>Gz~w@Szo%PXEz6h**n!0HW$TAZvpuATrD<hn)VcPZCu;#<MjggpduX
zk_2BuAtozDc256yy)5yhNhC!MF8=i;wv_6`daPGs2!cbU5!uK`Qv!RSX|x$WcaBhq
z*mKXg5#%d0ZvMf>&Fvu4J8tf<%BS+yj?Qa1MH8l0#K<{il}n7G&&7s})4z;(-X%{r
z0u9!ddP=dlP+hFIOisUn)+A8(JK(RIXdK9G=o4i+x!LJ|YYa*1u+?iu*I?ef7=mt<
zaTpTld>R&Pnq_RmEBOhoB@pT5I=v6q4j8p)u3w@`+w=7_bwn^OmUKbyZ$w|hik%0}
zMzQ2G9Ba_O&T-pl4H-C$#>@eb89NqFc@Lcjbf<qi@Yy&S;Pf9uyo8yo_d{%8gM9=_
z;38aw?4AA{$hLaZAPlQ~!s&kj!oV(%JJu?XhFg1^5ZVrT9h<d{NTbtXTz`&03(V_Q
z+8Xiy8B9F9phw!6T(G*Pp0&&8!*(Oh>0d>QNz(fo%o-4`0IRF_<|XvEB?^cZB!Y5R
zhtR($)nxTPYL*KUQ+8VWKRT4qj6&CEaUFz}KnTe~%13g6S%~{gh=WD>Yd3sk=2P(v
z^g59Z*6>D*0xazPPVh!j;2XaMtHCtIB(YIOs@;x7?tlNCMx~*@A}*;d&;(2>`-y6c
z_(lr8IsHq2fG+r!hr~^AZJGHKJXroWJdRv}k+jMeZSa2f9}$`_8?16i{s`;SCU@Ml
z5k*fYN=3mO2SU)v%G|V-qRUo9pAwl^QD5QDVRjs;$^JRexd-lVY_gJ699|TW-VKhR
zhzep@lUT?5zd@TZW(SBNl1}KOz%S5gq|6wSn=r5tJ#qR=FQ|ibKHVV3)@LZ9ha!zT
zDZ)Y2%)01qrHhz|R4eWq;C>aa8X^Ot_>6^)$#%-EejQ51wepR}Ne;9u%&Q$H_-xQ2
z4gYvEfNZ;tvGy|jkzfjt^nBz0B8Mgd7-%|d=pT$G$*qAu;NAkeG!ho3v1xe{%?i_T
zzx50<s4Jz|;OecUid0xBdH_oXA@qUV>Mq63DVqkGAOsY@fspJapD?Kjp&kCe0X6s~
z8!C*WVc=-nZJ>sF&@(unKzdEB{5j{}1>}bp1bL_bPnhyxJJq#@GJza{5Kszph@S)R
zAQuO#c?SCl4}=BXD$Ih7ND6%@!EtyPG<vPVn5_sD!w+VPaIaYM5o)IML$6TH;Do7#
ze;PPgAk2FJ({=6uWCiljE_gK;-n$v4VHUmw(T(yYScTIsqa`HCz%Fz*vRWvM=IkH2
zH6YdmY=1z}i{w^jmH!4%;2VgV?b9kI&gp*=iY3U~*<le|<1xOW301&<>FU@#R*FS6
z;0hX1|1%1{Ua)$zFchtF7qk!KUEV>4B+({6icxt%N)+m^oB_IfXE3hul)FU;wFR*_
zS%^l$`*iv%AUhOC5Dcf}(9;PH`5W4EJLUB6GE(m|wf3DO{f41xz)j;RzOfc8ZXs!2
zXw|z@Jx6uY0Jh^7OvVuTA=FBK%_}ej#LFq>lc>guLiS4AUwsK}?+-o{*N@5L8G_x2
zo>dNQ&4mLM{EiI}=_c4p7#=ph*kWz~bDqw9PtH?t$y;peNN!OTAJvn2fr2QT+)n>)
zAUgd+K~3J#cuKlE^nndyQ9daLfYW@%AnZTx^k2oeLIaHUlI_;GC7whY(ma|G+Ub73
zpyb%pxFvr!1rbP(@JQ5EDBrsZRsGK+BO`Thq*XrNJCAP7qZx@dd40Lh{|#!9jY^QM
zOm!;BK_E$MIV@MOvQ(*V=tFf#gjZWmG_e9%Y+Q>KYadDjdnxr0%I`x6VSt`h@i0b6
zUYyvT&o-5N$+44k%BnlLmn7LV`D0Q3KzM^W5P{UlhNoHOv*Go2>ttflDlZ-i7s3oy
z)7tZsY2b&eP@Fuq{nz8#*N1i_*G@)TUYyaMpB_oFRdIM&Jmb0&y$d8UH7jN!I3+?5
ziHxMfTapD<vuKFug|+%r_(>v$QVf<;x*#I;enbPXd^-!DZxY&f`T>XB8TNz1UP}nR
zR!?tYl2(1KZ6hK@1s#d-wf=*MonoVI>1i4z`FYR~ww6|Wtezz$3{F-b=Qj;@4Uv&P
zRdyj9K=G03JyixX)i?kgyHQlxS<$o7$hmRWa;3;gh%l`z<lIA?{^Xt_)MUZ)VJPrh
z3^zJhVBW@YM%bc(4VZ{9u$tUoIQ>uDO%K}za`V2pm3bas+HFiEW7gP>-hm@%hMn_}
z<k^}LE2)dmghKD}PzG|PR-j5O2vSiBCvfu-Qiiw8_(G5(6nF_Va3Chs0gDv~RN%?8
zGJ$g&Ju8zrDLa_#btPhCP5vuJ*7F$mz&akt2bSoao+g&eF(dO<WO`jg{m+v{gR_##
zh@^AUjb2v<^0icWI-B$P##mO?g&+wmDl(5hkIY8cqOhCe@Gj0PfLZw^7H2~Tp%I8~
zz|_FRvdO(25L$8!Rc3ZJ$vb?x{|z$g^iEQN=|!Xbx1k_p2d49^-lbR%FdaAniK_?(
zATZd4Q{*ZyB}4CairzW%M6at55ggI!zmSa%o#V-!fGRjCl~yjaO8Fz6LP@s)$ZA+|
zW7h%dPua!=f5R;O=@gbl6dyxF|Nb;t&5!FDFt8MskS&+tAfacH$)9HqDU0|$i|(XA
zgy&JNzjTc9oc<S4QjKZRKk;B)I~wp*r~fIyp$*F?i@pa_6G<I<=~O?)7RRY7r6aUi
zkZjopN10f4`e#7BAm&845vn3h1vO|(BAP+V$h1Do$a!YS-m^Umc1RhOYzhibFtmZ<
zBnyl2vH(Mr!U*nr1^K+^+T_|9v>8ff4MF!>L=Z0ItsS4&aDi4r-FMOGgt4&7U$ZW3
z?l$Z{0zcKK&l5HN5k(#o|Jx@1jV1w1p%}b+_%t65j~MS^ZfI4jT2_I~6yLBBEmL^`
zYkXrJo_$lG6d!xKC)K*;ABdkyux69ngg0@bw_8)Yz$$l#?d*JF?hHH@4GO}W{|D!}
zIJx!?d8Z(EgHK_9r?|<AJ!tUSwHMra!EMT3Yg~)qxu)T5du2R}p*A7={F-JO@(S|<
zBbkq!&edpfW-rUIHSXJbt;_qQjAtpzVrhDdmgE#4d?8Htty?050=hl%x`|3d(|hS+
z5_G3TSm+uee8#d*E_%U)KfJ}Quv#8TGCUR1+KamRrf@eSyiG^2q&PKvMCNf!Psw0{
z)87)rmV-ta#cl(<(cl^c?3lTS4xG=T+PwvdmP10eBQ=r#ZL7DygrkSpL``l!swJSw
zTadv2wk2-AWnZ>CnR3kPBjqO0QfnvxntcieWi}ttvWJ3j1}bF3J@#8TFY0nQJQXXN
zdwaM^DUdANkF5WtqRI)14C4fOkKnnYU53DzeOQFNg92<c=t9Yr1)cP5#DqPFwJ_gX
z^cNDZiEfe=IWuFiEI?jwj~-J9?^2)`Mq(pV<8|n1Fh;@Wu!2LKv9Z|{bPCu2mVa>i
zy(eJ8vd^v#+T`<A`8#$r2fUC+w*PnpC+jAXtl3&8i54@`4VEUPTKAACBbNMGA2d;7
z3K}RuN6^R%2kn?sf#`GZFvEn2olFGqoc<iR@5<C4*wV``Li+Bb@=p1Ky?*y0c|U?q
zPXE_<yCVC*>OJy7#ibPFFNOWz2+dawR{31l{=aL4wTY<>`^Y#PLeM*S8cS83Gy+#W
z0-ZS0>Yg&)r+;z8JbmLSfw!HG3#QC7VLK!!DqvF>95+ud&oc!r`6C{DF)<9xm+=rB
zwyr1@X5?|KL=>ji<C*HE5GO)|<esp7&*X5Yz}xO^H${E+NvW!CFu(FMH{AY1QbPSo
z)=%zO`2$FGSrRsIdMXh-AB6%>lPQ6x_l5@H3V(QNla5C8(J|~=1kYfL_eG@}X<<5q
zbrz(6t{NqHr<zi%FBoP03&H;M5T}1Z#xpi}gNQmzHFb61F(C-A`?;G?9qLt@iTDEl
zR8#1KcQFZa{C~G#yVzvza6hwF#|Fk}bj<^>f02zQCsG+4G~P)E5wGnX?*yRno`ZT+
z*ALpT`8Y;G&vp@B$Ji4JmPgndEo-5&FtZ%<N(Li_wWKp*)ZzhQu;wGW><k_5G3c9{
zzt+a>w(J4|Jz?`k-~6>cZnqHkF^*uE+)ZR!*^2m1@Q+%Up$hH78xSSU(22aMUj16U
zJtTB>SW~Qzn=n(+nSdj$^7rz0Y)#dC$pBMcvJbn@*oR#Fy-Czu8!-bDPqTHz)CB&G
zU6RhTODitkXBuI>F_9kh@=h|ZSWl32to*hz>|x(+Yd9ti##%5DGjw*R`zD+S!6B7k
zC++@C01*4J3nV=p60H)a?g_{-lS+fhJGqYo3RM*4oK${WtjC}3>5i*4<E;Vt8>~<t
zp~<*=@-hQy>~ztah;!U?IkH0aM-g!th5mJTQ&SzjJASnRuM~I4`}wH{JV8y(NAdx?
zSK5IMqYDzw;+*hj!p_i&^@xZW7UxhXSc8c_k%h`Be!L)=P5kOmXl1cC`5bm%Zls!M
zYP5vtfYWes|B=vc-}Dg1fw}pp0ZvBt0argy&@5leZsn(ZFTfJKKSh=rx!}QhG(W-k
z+A$Q0=E|QiB_s1Ny8^Y*TM=@br(4TESqJ)f(F(^z<?a4D@QPiVAK*?>EPRvQ=P+=X
zURTevz<~1G60>poqwdn!)fsh{ve(4;tO*^#Tk0;AuSu=D^vG&@em)p)^-XzCsOvV=
z@_61QhT26>$mnjNlMe7awOt)4`qxBH0K33#!9SCDkr5sd%FY6f3C~F^yl|oz{iTRX
zL_`ek70rwjoc{Zd(NY838%=lz=TKmd4xUw>UfF0Hscf{}qHMHbM+2*D7i0-<6Z@^|
zDB8`&XwaY>vh<av(u;X4kS3FD!fQ#StMaG5X<dSR)zhu#|D(whGV@P0<EWZ(r~4}#
z)>1eZC#4!~4X5~qy%_R{B@Bc)AT2afII|J5g@$;af**_-6^F}M<Z%Q7DWnleFb_Jm
z&EOz1el4Pk!IA7-wciFDbb2?utQ>R(ydkCu;->va;))uu(}`V(x~wsxuTbNj#J{l|
zTgOER_sQ4b8h{6g#fP&B3#7*bS3y<qoEk0E9ly#qoT11iMd$oap#~d55;4Ntq+^Vt
zbv**+g(|JOi@EO6>kBo$dp@cA`l@@3joy)Z8RcOiv~`z83nUBL>Y3(q*b9Ot!6$sO
z`6}PI0Vp>3!Pw_x0$s1&d|1llx9#)<;yf4i%Wj7N8MiqV(x9AbDKV#vZ@iCjxmy#w
zQSj{62M6M+h3y3o(w%|3D6{V39ehIzI9)^F(ULWw1K+5$b@LgiA3%kC<9Eo0mla^a
zp~L=p6lV%B!TBA^JsD<y9_~?~Kw2hrwNT^T{c%HCQcBQb#o@b>-8ez%b!<q$=?hP%
zDbArYVMh8KFO(evrXHAhT?|*Os)IM-B9`nF7w<Jui8#mL1a$5Jcn^WT;6#9D6IiVk
zuUiCYxr0E~VgHMWtb~~uq%y5${YuHAS|!RNM%Aok$YMRWK0)oK(X5+{q+&i%!*9z&
zZz2%v*=hFpi#^>#_{UEoPAJHG(M7Bzzm3~`7;gpw>hZ^sqCakfyaT5IAO!4JMQnEc
zeK0dt7@G%r#w={hISMAS@v5lrTH*_KDh7d8EjGrnL(<$me10qKNDykY74}?8tG$h}
z(^H#!E>6H@JWiUK(?JC02L^n__AcqY+wmL8rL!Dz`a9A|-B;fTG%VP@{gSxOfwe{y
zZUTmTU!r7h&tTn4^r#6DP6u9oSPq|`<^vklk=t|)sf&=K1S{fH7nZhe{}+@La}t;V
zHKH{lOvhV@M}o}Zb1yjkMPLUJTM8;bl!-!iv&0z1X%->W?EjpC!<$0ZhSXr^7Fuu!
z@5JJ2FZtLjJ(ZfB;j!`soj3xfah=3=#790-k?qv|+fsq;@C|qzAcxN|i4xwr3%R5v
z5ZrTs5I<JYm-Oc+SZ*_N*+`cU<7LR56u!v70u1B5{t}T}hEpWsrgw<};azHj!<VD8
zW*_Gp>ZoxgJ3OlzQla;>Nh7qynhSij8uEy4#|{M>=;)SY#Ds}(83@y{HzVc{4Z<tu
zAqOGUuE?NWDyA;NMy3BC;;Pwx_c6BLc$k!y42ojan*tlqR7S<=|NTPJ`R_&F>#5b?
zRUC!e2JINS&22JZIIdkr^DI>vco_`BO)2oL4q>wKOAqtg2G?E6b(?TR+w6|Pi9s!b
z>!X>V2K;hED70CNcm|}IjeAJ*tXGjHJ1(3<Fy7j{Sp%ugz(ZJek6}$mt!u~d?>b;j
z>6C1c_2^!5hHpU!-S$U?Tni)jH1!K_-Ob2_2!XeCki^D^$%($ARI39g5k_^WO?#4*
z3%e$mJ^KmrDS1br90SyWa6>B7HQ8^)@+=YEaP9?xR?v|uR!fm+Ma7OPee2123B5@F
zaFf!DRT?YAmKeMZYbA$_Fh=HVFiAZ90m~{(71T;>c&2~B`VdQm$+h=|J1`mK(Save
z2i^jc5e_Bgf<?Al{q-Y6<lCR@xn=8^Z@ljiCci~^2@OL0W_>8swS)8=z406#AjSDe
zh(X@k(zQcX^7kkU!tC0C#&9G_Fh3MRCFYM{C8o%-q`N?ami0<>HO6ibJJ#*ottc1x
zHR&A=L^pm-JmXy;1n2rQ(`O%b*dZgT3J2m>2a$)j<H-{Aao?V$t?&BnWIMtZk#@6v
zhPS{77FD&`Xwk<|3z=Tz+X_dSUS~Iut`XJ)2oF-a8`zXyLz^f~r+jre%G}rblj*E#
zuX6H0#48|a0Kh6?nB%NQ-~brJo<{@y({1&SDre0oi*M{gD-rd4O%o9mIGjd{AOw_I
z@P*NE_%gph?KZj7hEe~-J1B*y5%b{pcgoEeQgA~kbYyMhyoGviHMV2LM7bmGtTk?D
zBVIFqjCw&nfE8;@n{EtFi>B;O`B0#@)@fDN#-)h9c^de|1KM;CD<_3Rt-*op4zsJV
zEl&gQXC4+K(%p8?m9$#CJZ~6RPc#qX<ZP$Y|H(sOdZ1NqVJ{{grf$BBr4H+$6%Ui6
zENWWqq3wYza$uVfkZ99E309GOIzCf6kc8ITfr(E4VG~hkwd?|C4J<5x?j%`<yR+w*
zfJhE04mL1J!@qkAt-|Ro_V$<qE~F7;_=dlb6v#hYk8nHR@E>^083|A4VJR*r#m##@
zNC=jCJ}?Crcs|evA3%iO@Gj{y`D8N@<Yiu;gwv6|OD9F)r5Jf{oYkxE+Cj!yeKL8D
zCrJ7@>u(Z!s+4|~GsbNKUm@@is3EgR3j7Oj4MU9GCS}U%dv0Nl=pFXiQ(zqK^#G^;
z&!18$!w!P5Y4TqAqOw7OX_CTzqBm(XG9%{khSYU{(<Hgi9SfCzaV>R$@|BD?)=}NJ
zVb#>ww1)ikG0;&qP5UzMXL;Y=sQ}n!-)amg+Qz`Crl-J&<rJJ~8_-mTe<a#NGyfmZ
zqk)5{l<k*>&!~L&APdWy$v&E3&$g`u25h6#{{u`uO)VXP-xCP={8mgIP>|eDA1CW_
z!RddEl}4}uxrm^z)LZuXUq@)()2R;@Gi*{lU+zf8b)$lv9L7#md`%B4kPu9dC?KN-
z_yeo}-?)H!MXdsnIR7kG!Wg$BU_*}Q>QKJ%M%*yVxCSFt#P>8vygl9#IWo5)vJ6#a
z-4WrAVZ(R8Z>Xi%S;5Zz3X&jJwMpH-#`lR^aS)&z@fEqt>NQ&BUG-msYKT4<!D$h3
zq*N!}$Wo1ajOSYu+Yb*8_I#TdjKgU6e48xKNL6+(eKSqi7QyEkG#I@&bH!6lq2MGt
zEg?M3CS?;L`+L{0Dc+(cqddzv6{+4T&(hlvBsgG=+b0hU?hSqD?vJ=XcFt!e%e7|k
zheNaBxFN=5QlC?Ecr_of9SVtziVLf9@Gk6;TGx)oLX5&%`cznnQ{MdRE(g<a{tM$r
z83QPT1!&-Xw0bMz2OQg-rTCgQ$Zv&NP~K-CfJTrJy;_-y6+-<=eF{$FEGrh;_3V8O
zZ+<E(DBBVVRp)h?@Rb9%p}#9RIEc1-+!H)2&73>kvvMehudz^kIb`)tfh4R~^;UfC
z#VR|l8qw4dwz!>EZ$BJ)wly|O2yWSWSfwBg`)Y>6Hx1HlF)2aw?433LKtY{nrv~8#
zB?um2w`d)m1*>I>7^v8IAj5g%C*c7l<&p79fD>SPD;W*IB<g7-<vW7CF9=y~@pS9f
z&^|Vex=|lvqQ(KlugGA%%v`osvORrwGuFe6q}>d%9_;in<AfQ|AG5LnB$cr(35*ry
z$Ax+6YEXIk4#Mcm%QO2Ucwx(Ggam%X%Qe{Y2wv1}0NM#xPubFzBV2+5!1L@@LwUiZ
z-hF}BQlL<0y>n96>f{bJ@=u{D#O>-&HbG($O=?Ib9iUlRN`<a{ilQ(%L%~$uNczli
zE>{QRjoN;W+7vCM7>J#=YU!Y699m1}x*ClQj#s1sj}Yh4*sA>~TrAMrBbFd$kI{!t
zf;;ca+~*<lLf?`iCxuw(o#S9CF2l~jR5Srj+7S_3`<E@4k1fvYw_r1f_O@U;wO|lf
znFdzajPrZwKrrJ+O)x7>ct4^EKu5uN)`oGUIoE5$#2>eT?UT^{yV{Wmb}5Hy2lQbr
z8Lmrs&*=nqhk|G1#pp}*^nu)s#j&sO4{W~mTpF^hzvoQ41;L&;gnU|k_q_*%OG9cg
z#LQT~%9pUhb3l#|Tp`V3w7Y!n1<`9TuELYd!bqkTdQ}FWd^#`s^ayqso<fjN^s?8I
z@R6s>Bk3bgg>V;&zAz)2LLYg8fq#~$%7#vc+rZxVrZ7<~VDB&(UWCPcHQi(16R$44
zo|?>9FucA7GH<*9XBda%4QnywVS;{~5;<Lz$E}Y+unqC5n4GchbHUS$XMYMDY|;Bp
zsvp(*e~$nf@lZ!RWLs00yNA&un_IG#xyRjK^t_XL00^A)i>=UJrseR6*asAFI>zCH
z!*T8f?0F`DD{c#|Bpq@)o|91(SlP`Ru<@!n&mtI@ME_PF3T@NY!8yHPJrHB2bH*LK
z0c{2j#dbZHb?#$rhC(mwFSM7$jSzx=KsoU`?3G_4xqH~FNL<FyU@Ys5!82IVv*U#y
zv#@%hSc1^z4u@|^i_zbT36)kj-y(Jr+Ap{JZ$g`exj@0ER}gGi)q)P$0fUJ!@i-Qs
z@(-W|fzR+fmBjGFYljH3!IUIFB;XqxN=$XKf6W4NubVK8aR7JuY<Fy%;rHvoa(jLj
zwR_9w)OcU+S-^OMoSzPguj5{nJ)2pMXB{Q7l6VarEN?#I6Z4aCn!*e<MWY<PDkF=C
zU&T8wUc($9;iD5pgzFuaONp-`mfT*vPie=uYY=?F+n}A|=zP5H=R)Z5gq>|W&tdNg
zilbMi`K2N%d~<L==nZC-(gt3qonDDm_f1>pB1~l2HRo--J;lv-co!f7>+sG@vw98B
z%hbE{Zj$tfH{EkB#%*xO2ZJ|zu4$!M&$U=-QZPyMW-eTgN-#r>7v=B7(PBdI_WEnH
zj!UKPTSad*4&Ce!vrjL(L8K3M)N#V!H6lOloLxQ}#EwIYJ+w>IO*037Z^M2S&YT)D
zQ73H;*+lOYv#7(T!{h<kjB~?XOcGPl#CAhIut)(hR>mk$i~++ay7d{f3VMH{<Q-sQ
z`Gz0ZQ&J2)Y3PkB(N_}^Q_j+ZY&b!=vf(Txo=dT{{ZYqfc!045jie5O`*H&;X-GKC
zYEIgUPQ@pnx>4|d=@v2eTvFg=w+LHr1&W>21#VAhOB|k<2Mg7QRt{7a&i?<#)XGKz
zh4SIdk%#_4ErkGaQhF<^8)3s&X2YEI6DwMm&S(=vS=WZ+BcgXOn~*>k^%kbhZ$01I
z3-B~$w8D;ghphuKj2{`vvVNk6_T@r@gQuWwftMB%^Cy$ZbMSuzrSiXzi>1l0#biK!
zf}hbY32ixn8{V)rhgF5a8@yP!Wi^9QTas}1Kx^TaM|&U`a)9g+>qFexP^cERt((51
z#zq~juKaUQ5u5(I4rArrj_)(!86yr<{@6q1T>x?L(Q|U1@Rk`+u>`}EK6OAJo1hR<
z0zH~VoE<<YFU_IBYd}SKjTSk1P&>SXT$teS7Gik8Hf^ETMc{!UKJV2ieejS{>AY6Y
zngnjSZSEEcC^Xz>V+V<b6QSW05#EWV^E|^WA^#tTV5I*HXuM$?^(dOZWfFUo7bj2`
z61!>40fMqTM-_lI@QKJjSx8b?|E0Oq76c&thgc{A@4n;1L|fitbU=}P#{&?wcS~~*
zkYe%x78aB=ZFwgQ_5Tjg2dFrVV2HA|^<=GPS%q76^gxy{2oMXmwD$lhCXc?NAA5rV
ziw0O#jAbmVI`KLoU-t%Z9sJ8D$Q7i87}-zS_;>;LUc-pB%yYmXJ>xebZcK-eeuW%+
z{gn_7P%ZoUJ-$^Vxwp9lDtM{>2m#gi%f(TjSuXeug+Rv9B)Q!_>SVYS4n3_S-GOH*
zj_MBMduzMJ{<UXCUt+8q?-icG+pHJeh^`0!!PEDR=2Kux#!(YEKY^EKLexQcA(m6h
z>we+4pIB4bB``qW=X*SX1;nIhH9l~IsmU{mCEi$?o^KH4sZc01Ax4x*weTdTW0|!K
z=>$=p*qV2toky|tGq3V*-ggbVblA%iJe|Yq)?C48hB*VtlKZ;r5i`f`hUUE7LGM^^
z5=XV;g*P+_&C0G$09M}mYP08?;n^QPsyXkiPPX!YZgbJyQ1y<Cj5oIvVi)VbVKT~|
zgks+1*dZ)$J{{wsFC|?YTRRpSxb>G<XMQu8e>0<&fBC!YPgfHmbEsLxQ{W$F?_I+O
zP383`n)veiP!lx+ADT3aUCl%uXUwpEq`qhl;0q4B#O&S6H0N6{OfwI6BL+FmEI!ZB
z`ipRVX&CzxS_$e)%0cbr_#zX&@yEZZpTgP;r&Rt<V9}tt!v3!j^b!iK-f2Ve4TbeH
z&G^!S5ZA;G@8V+?#O40Zd|x6C6&)Ea$mc>k(HOyVbaHkJ-*^p!sqSkt-|z!&MDI+a
z=i1mczx0=4(2+Woe2RHs>k1sue^Xz`s<vlu=O2s3WG!}0GZU+P!$m5Z{Sn`I7B{}B
z7d`kgr+_%*V~v1ss(VLM4O3RK>`o!nVlQcdn}=_AHSFyGGXK~cxC)+2gZU@vTdpwA
z6asq^nvZ_Qn~QU?$!55V==f&zLlk7EnEi=#gTrfsvKL~e#%sxEaEee)+!@5@X7oEz
z5buD{Qjn#TfVDGjn6jd??5M;9?-U$pW}P!7VZCT%Vq!5nUtXx|ptokI{837meD*B=
z>Mw_8x4BPSQ`+R3Wba&aIlgCx?<jgMja_r|dK<bX^N$UnUa}kdDRy;;nuZUlO%5Cn
z61!|nHqt}u4W@NK!nuFo=7ikCu~{bieqnB_D<u2QUK4L~f7fO>_BdwZpfS|6&hR;I
zJ>SOCw@MS%8}{G{2LjeL45SheiCL^aLV^#DbjTn1cVlp3)QetQg0TJ<SH*VLW~jdZ
z0A@vemIOX{KdOmdWjqb<+n0OEgF*cO%HfsiU;!L4cN%&fS`Ar$h&+;f_L8%O(m)&k
z2Hs*j4dZj5(4U492wxTq#b(mJU=qqnAHqSV4*Lq`FEAaK`)S358JKU_OdWe4KK9lV
zpTH#P9|{__^#b1M+X05Gaud$1L3|kHm|paLWh2dva}IljCcgpSf9r7gR^0&8Uws8%
zUFg8KE+%5XT)!-tcFk$L7G8m$p|91PuUmeZSsJ<BG3p~R`!kGoS|^X%Uw1db>$2!7
zur2Jj$<?&`?hE07`1%5~Xz38zgsY))p<RG$wf`v24alZcydOOrmUr3(n|V0a+6YN^
z9j-q?hF2VgFA!c+?S^z4+t~KEVS9#sYGb-DXCm`C*xOI7{uq?7$|JmUhk9+vc>ktx
z2N;1R8)en_@7AYEDeDbSuYs(5jwA#@-3GZ}XmEkt0sSi&n%#mIUUsZEtONqqBzQe5
z_Xphi58Z=F1D|`N>Eb)=&;tG?;Ot8;+x=D3af=<0A$|)n#a6@0n@N5TV`emY3E|KO
zBJh}R|8M5{-!NZ~;v=U&GGBIiub<o%yeRJ&g*QhR(8(5uFYgMiF!+}dvu?o)_<Fm~
zs!OO_ewCZyD@wQ`#qn>7*Fw!ety_-iKy%(va?qZ=e_58j*>AANbri_0_U53rAg;9l
zCrg_B`hqxYHsK)6PJ4F8GMtxV=WaC3IEzC7^ujJFsazJX;S7&hva2ocYA3wdw!AA4
zWQ#cZK73NI`l{&p7GK8rR$nd`;;S|L@Nr)2sNK?Vd2iQ2lo8tW{WvJ#>Ug1T%4IBV
zW?x}}%=O|`e60~`t=YY<@M`ON!&~s{)E*oUr!O$Xj+aT-8_r<3!7AK}kyliQUh@_9
zu?!t#8Fm9l(@KV+8F%Qbb~yaqIGCb`YxoDK@-i33hekdtf4|p{&u7N9U{>_2iC%d!
zDoH{d%&%d+D-`nGqv_h0vb$p6sBad>Hh+6FzfF%(mh=&2=^HUhL)a2W1M$6qd&KPT
zTsj<Nz!p6|T!hE(Jsn(YV`v4vxRL@?seilSesWy#!-h=mEZheIB9vM=o|53neH7}+
zx#x>MESL~Zuh^kD;aCM@S@1^+2YB`PW=xZGE6x%Pp#{5i6P$uGiudkmGy1=q3M5Z!
zLh!?O!x&J5eL*22ARChLj3r(Q5(<V-!pBhXnpgIADb>!7BTWHPg5&Oy_~*?z<%@MF
zbdLIAJ5gyj9K}8T*!TG8JIC~l^BK6}sgs_V>EIilS3n;ygob;;1=a_I(ACPEvWEX8
zkk7+hwa|e7K@RGAj}oup6-vnKdybG~d^Evpc#vTX`z<A&*5vm5?lP)E&i8|_`G6{q
z!yLFp8*PLa8ZZ?Jh6g@SBOAuiJse{;>)8=$MR_hzps@DadZK$77I`Xqiq^XQ#rjs_
z4n};;786k6l9H3&svMi?I)r0eWaTt)%!b`d#er{z%TBlmKLIzp6|WYx8#0jzq9G=l
zz&Eh}uxtNMd*=ckRdp}=nJ^)f7}!x!qM{5swnPvU1<eRZ1}3maClCY#6)QBt0Y#)_
zCIMeboFLhZ(|XRat+sk<ZBLJV+@tn*Fi?d&FbRm3M|qj5@r8RB(I_>9hs^!`*Pac5
zwx>Pcz2A4gd%rtM_S$>BU;p)guc6>o9wMOF{19$MJJwxIz70~Nna4>)p-xq3QZ)jT
znTvnQdZD-~9!}CGo~9%y&gHx-SPfk*1fUeB@BDC`(1c=W)4V^|6aqqdKbo&+T0{PZ
zp2{qi0*%a|dR%-dkHjs~Iz)c+c`6c8wTSMRH_#}VlPSa~75`}QH?(>mZ@7*yF8&jX
zGcl7lfF`C?T^3VtcBlf2reJ(pj(=7e=-13p{PKSyrBcVrXVq<0#{v|%R{sp0Qdoz!
z>Mj)=BCfqTb|<ivKn!EoEB_}kS)~|$xwa<V%;HvhiNDqG@p8R=Vj7{5gG*Qhk?e#{
zNkL=u)-_W-3WW*8CJ))!mFn>Onj+`azV8X+XsF74lR<uo!VPMk;w7z_=HB^%(GkB9
zISt6jmw{Eyk;QrppW(jU;jEjCna9hMx5o7h;TpupY`m`z^d3Fg=xE;W(q3qT4;P5%
z_Aib5Q-PwU@v>ZMvQmgWJCdKQndqV9RFkhmo7PNipquY^@g=*XVT$`NBVTb{?5W#g
z_Yd(K-Tq;{MsIgOduiejUwb5JbnregKf+mmBPdv+fAswc(L`4C$k6Hw1pu#kIakn2
z(c#ZYz2$GPUXA9%`-U|abdVDuKU8q8^Zt1$qVm1NIu<u6m}d&i%Sb#&W<7rKZX)sE
zGWr2i7mX*n35vpcD+3pjW%B^ZZi+p2TrfN|U)?nb0y4itCXV|Wc+1XqZS8f<`+<?*
zPH$D=A9IScxhn(G#MgX5)8TD^Ph5`H=ud{6ZQ^1mIaXAm;$tqMh-g<o`P9>j&#1WT
z88yd}uhO;sm?%cIawNhM0o8U?$)|(jc>A1Sd~%*XUN|di{?VxnRkW6oG8ivOM`(|}
zD9w$R9x3V(q<pgeWKoZQ&8sdMF>t%bT!K>KNW7v%`(c|1n!MWD^KNImaK=TCX4jk-
zpY2r9ulzupw8!7@gvx0Ku&ML+yzYz)Vkm~z45S7pnh*UR+a$x&rwbibGgz$C=qi1T
z_Bta2@r&cEO*c6?617U}Qwg7FiX(Xe+hQn*93-kfTT*+7$|Opgv^SagJ4vKh?1b9^
z2ApDGaJRqha#?_(_}q*<YAcT(%c?;Q6%GlhK9yAQTk`Y~z(<u1c1PAAyfrN!%8*Xr
z^c)%=bP)))?%OWTs1<9QCwtInRqB2r<6Rq;r4;N@;6tpC-R1;ZCdS2ZI(xyi+QPWh
zn&pAlXOVFhp{{3d6RBdUr?H!M1`qe7GAm*Ar8<0jAM6*O1nX)&y>e)Ji;}hmqfKxP
z+Lb9Uj{S{xP-C~bhGi)%RdjEzSR(8$qiyA7e~#N<Lc!*hJuE7Ob!}>}T4DoSd=)?H
z{$T9EP36rWxS|KZcy^d!66$peJPO_$ZEH%t=JtSGHfyw_sbTWhaJib=G8`f2m%i4A
z{zOX|`J0?is7;`NiP3EAA+<mH@dVw7<n8>#kH>rC2nx?-`C!qphw@Wz?EGNORCn~l
zp@;WG-|zqmoJTQC4`e5^JB(RF8Ya8JiXoaE-PxE#j=CxSAn?xkEY-2lxWi+V=9}}e
z7e_>NI>M?qp7>l2o>YzBmVWx$SuQv|s7obNPDk~532ZPOW+C%$F)k9nU}=Wp)q~P=
z*>@&!$zn!WSz<1s^hoa~EiAlJhR2*Of38u8v@%j10)n#)CYR|hk)sn+uFuVpF3yNj
zslZs2hXJqfkAv}g@43PXQ3QQ^=@8oE&<Av}1epIS!mNn)(tP=xc!xjcrPPG@{wCtk
zv1l^e=(_Cw*pk;FT@OZXgUSE!tmv_!HFKlK`iEx=z_>XWef4$Ob&kjsV_$SLINSDM
ztbUh#!gJd$Me`1fEzf6XoE5uy2pR{tjB4sfKXbLops-f)j4%X4Hgl20qmp<>I{fyq
zmhhzo+n57m8(?!A5On(DRO%%3MALk9M)I3T2slGO?FAx;f!oS~g8x<0o5T%l=h1pa
zC+&ZSGw8~i2z`!^A1#qvi4;Z?23P?j0iFllC`KKL4-TbLw-+^~Ur+LbX2TDfa>CdR
z2LsYpaf8mbsQ3!pBiYO#)bj<A*C7Do(~$1ebn9cM2{#C)2)MX!i*RnH<!e9tLU=*b
zhFAgJI0Ey17gK7pXnaNFfs0~%kv?#0k0?&im=_nZvAAO4mE5V?3tN00!d#l>NwuVt
zS>Lz&wmqmgLHmUhbRx|OnhhtYMaXvH1S$Gms0ux`1yBSjLNN;R^r_HmK7*<QR|QZb
zSo>(|h6|%y{5=`;HQ^#0ix^>*&Jl7zn76_q1^B?Z^*4H05{kzQRV4BRVd@6q(IX(8
z=STh%f{Uwz6@YW#5Tc9=QYZm&&U7Sz0?%SqdH(3JtJp8bzET5|!e%^jcPQR(64!U|
zjmzS?DkV=;>fB{9-~=ezk*lgQ#RCIO<7~ky+s(0<6tREjv;uL;8)X|<-!J3)ZLO#D
z7sST?aI=7-aGqIh%EmpP#EH1{q!9#6ZFscwbzfW60CSc~AvkFgySd}WE`wV-+IpJv
z!kYBWZ9YeOaZ2RYD|Uq{c9vDNDft1|F3RPq39{KE9w>&$MbQrngJ}+WdlLrqDXzN+
zYNbuWS^@8~iRHvnYLyQ<@YVjv_#V*(gvoZ@QI7f^-V-^sz$;l&7I(4Wgw^R$<iAY}
z7rtWR7;{c3^N1jqa$d=`(oCAwII~~6sypE4k0rt?;2_pjj2hawn9`htes!NdNeUBN
z7kB|n;FSZEW`ZpS){LKUA7_1i>fswm52ADLT++QJLldu<V?IN{daR!w!wxnT&NLsn
zo_AJ9(D%p4CuA_sX9+6r1xQ5(T}~aePfnrO-T8`*Ev67}h^<Sk5DJ2NwC{eGL>Pi9
z0bpcg5Qg1Ae|u>mRi?^f_vT|HAIofCKttKU11xq`dkFxPc7201_?{p)rnIfM%c1qe
z>v*CtzbBTrF&L%SD_tEDgtN@mG&b44Jxj6%qwQ`s$tUCq`FbNe&EFF#Id{n5@|-6i
z9jW6-CE641=Bs=qys}@wxCU{l3?71SdqRaJ0wQm@c-M`OCI6=+kpcOTCIZE(meSmr
zK4zJJYHDz*5xJ#NPV$pO#f-H-B4x|Zm{{1Jc`n)Hw<h!Xdl}01M;^D{8P%Jaw43wW
zGan;DesBwrj@I%f_4Swfen4GC*tDoF+$Ig7VXH~2R~$3{z~s}F23|!9#_9^91dMim
z#bM<NLuo+l*f^ee^QROfTk~1T!_mqLlXJ*gVKF`;F*1(&E#f;qrT}&@(zk&s$!RfJ
zXT+Sa@~EVE-4S|4%M@0D1{KrJA(}Erri=e_oub#`V=kKq^N@sa3ovF48efP!dMBg*
zBHv^+d(g4sAdM_pm0Gc=_67&^3PK&h3DsWli=xY6i&$^e`Kt7==nF($!-Y({f4yXH
z>`yRcyrmllv`m%fKxD3HTwv^n2hdMUv5`=AV7w$R_eXo54)^!h`mTz2l)gEQAVD}A
zRRt}b?Dwkv<hj9$-cZH%Gb<>C_FMHM+Jg_9bwZOvY>M`SlD4ts6!DH7JOTF3BxR_A
zL~c?(A4(8rON7q*a0!$XD3k!eep0an<`F27z#;-ba&ZT5Oe&Ya3IcOPC!to=I%%GS
zWnu7rk%VQ{5ndLoIBGu4ie}x&U@Ovg{asg~fI4NM!{7KO0v^5bs%6XXtGKFifo^0O
z-3yJ`x$9*iv`=v_S$Ne#L|osp{HStHwO~Ne3{K7!9wshuv#XP^+}24cZMZi}%b%d|
zpgOUACSkK;^qH5%b89&}3bq7{?a}7Ki4D0~#upe}QNs4t#zJaaXiOQ%!eh-a2MBdH
zKFv}}ya9)sb+T9WhVxCGck298ryD!yI<0`Q(+Wb~d0N3t?=r36X>TpbwSu3kLC^|*
z<9$}WzwDI}&<bAlHu2Qs_1-S^1lS2{B~M;BSz(efe|*W6W+|blc{O005tL>Cm&FwC
z>lv}tkMUa6iIzi_310w=&W1ufftsmV`Tp!puwyuYKR0vfR!^zJ841bTE3!{k2xlW!
zwg?70X=1aO-RaBJ6DAAP>5YqY-|$F37+YqAO8VOKRAb)z5o1Cb3wWkMTC3F<z*4S)
z;IUxg<<zhd3cbFbJW5eVk8hL~!**UHPhj(R>NXQ7L9Jo)Yqf-Cz)1bw76Op@LZ4?D
z&49eL>f-Hpz|3zow$w?25^eqamsEN<48?K=Vn`in(cZTsn?y$f^~Jr2zZ)q=ducHD
zHvN0@4?ri(s}u?(1@&#x>PMtO+WM|bDlhXlO8JUWwV{p>&RW^%QZlGW6E<i-8^v@)
z1hGmX4zbK113FROmg7c)H}#l6QWSi_S2uAIJ;bXW^&N?lvyquGdpTEh{CR;FkB=!%
zpqkAb8QfoUe2Ds7X|e7r9WKf^pPQ?!eD;i9&#NB0cUf|Sxrve#WoOL;%Y){yFx+MZ
z<)~()3&N&SM(6X?EM1R2G~5x<<fOY(ia$Wo<SacFVJ(y*vTeh&VL_W336%l(TIyj$
zMEq5pehyDRW%0^)w>+gp%w|QO-Tb~3>Jpn+d#U(mW2XXIVf0waLC0CmyF?)|Kc=RE
zX4Bg}<}cZLextoKz7%7Xw?f8;HTT56FCd1EoxROiB|%Jlt<^n>YD&e&(C2)GW$tw(
zOhS6>Az9dTW>4fgdga!~mgZ^oDCDyL#I$afTU$$ThO?m`j;S~l#^qSTK?;jBCss+q
zf}<M*&oVQw<OL-LK`JoV42{6$Pkgd7c~&SEfo<2Vk0^DQReYre5EVMX5QDz9kT#`T
zE}(H9DlPcR{4RT1a94N8$uI-xzoA+^pQ%h<B$E)JCQcP&5nn>S55sxv*}QO$@SNSK
z&x@PukEGWFByllAq`t@rn`RsejRSU})S)<`%>q>*em&7^yim}0Ej^>}rDl}iAT6?A
zoV06#apKAMhcc>?*Ba#2@~RxY`lbxWixg`og|!J@(kFR{Va6w=SHh&>^8UOloP%bb
zfqGsl35R{gJiXtHIn7;kZHCyK@o+0Yv|)YL$)(DKXPUng8I!%*bNVdOKFjeOx%W`?
zzDmngAJF<jlVgVYqDva7^!X6fzGr#3jNQIW@WAm|_b_!BQc(K%Lw6H?*b09__;%%v
zEsf%e4ym>Q9f4yYLo2|2lsi6VI|7=s$<+U7lM6}UBp#v!^Dx=Yj`bp8Hrlc2U=h^)
z-cd_yDsX`+Y;4vqo8ZUf1$U*RWBl6skI$_<N3ZBrT~OErB)%m5jHdsD@~BN}%>m_7
z94jpoI=0KESN$_Lj3AN!RjFTQYPva&4=M+B)s9{6*S^1L!wO<$EId{mPKau^)^1pk
z{+g5in&q$CDyma!`i)y2zGPf=IA`4au*PmJN#+q%LLEs-BgixR_clv=SZE7Tw}lM9
zm5#B>7&mk66;><GmC?Ge(;ltFO^nXQZVE61?+USLIky?ZR{=!r>t&ys&$G8wzhqf2
zNtZOJsHyfL$8wDL5g1Vb!Y`LM-G|T3$yO?eUB*c#R?UbSRV|Zz^CLxm^__U76saIN
zKt5-AUhP(wx-Lqu*rvYv>vFxd6d@dyZk~P!)D=Mv<2gYN;&~1#_j4!A<3zD~;7q!_
z?#Sg7EX1x`?pbwgICrLCqB0M;cG?`iLo%R8<ft8g{<nEZnI(McO^0>Dn;8oE4q2Dk
zkq+lug~+ia6$<kBsfyYp8}+1&0N0IwC~BI;{SL}1Nm+h+^w{iqx-r_T$ExQb9S~|N
zU$3ZHfrAU7!1L6t9zwJl9Rf!7H=+&XP|P;9V9kSKT!m@KAWl8!1x+lfXjgZ%$&-!0
zAAqRjgmcV2rnBbg1s#}BagfYov7t#}l;$xX@rgjzQumsSi4B3v08ldL(M_-oY{`b@
zmsst)*9K9!C^T6*qAaH20&hZGpJ6ptXd{<5C_A5iDBJ9ybGKgcz=~kSo)8>vo0z?p
zW&>{{+^Qg`DWJ!RvM-pdf$Ju4+~m!4YUMYhXL<e_^b&s?;eybJ1@0u~ue01zDXfzm
zG5+Ja0o*t0PMif5l)4iSGARrU-5P#6+>O<&NO+-r(4;FTYzm>zW>0Tqp@_Z<W`G(V
zyC=MmmA_oJVmxyhVdXvWP67#Sq%|nVO_cG0TtFaDOHsDuE{|_73K<@AyIK}qq6}f<
zr>NWgZ$?d-Ye7x(nWMjknm*35v{BQOE%`r(DgWx?Q_V>`T(H*`_GqjwEiXfyYPsc_
zGjM~6dEop4hyv*OZK9v75p`C2<BM3u@C9TyU^ESvhJ*iOwwl;a;!E;}GAPWyMbg7$
z;u^TV4u<vEPo9({v1*8^`&iWwVg+!PUPr0c6rArIJvJ6n(Y&9dQ+JNg3+{1;eEc&G
z>e}Rczzz-~0#!*kAk3MkQgHyocNYmXs*D0T5a~hcu^G}HkC_Lzf)@DJ*&>SI=*D4|
z!bQlkKE%%kuej8oOwSa-fs!MPe)t&<QQyfFP72`e=e!eAiRKAaf=->#fP~ycKYud1
zUQsrv4U@R0D$g8(HA}nWCgKGTINMKag)BxnKi?cTSWS?$uQmEvcJ##A+UohThT;Q8
z&Xm34dI=SYR97qqMql*+^z)kCdcTQzMh>!45n#d-gfxNW#*)lx{aeXmj^y6Il}6V#
zI+DNrTdA~H9Lf0KN~B}JpMYbL`dbM>I}_vnj&$fUCI(5m8(norUSLG42g;D-sUf)$
z7e;-@<Q+%n1ZV~ZDcS@^*VWBnvA%C~cMg{bVSRL4s#+}NyrLaJ{No<}BHB{uZ^%n>
z9c2?T0WP-EHk=(jP>6J{`Wxe+taGae-P7Gu*Cvze`?4nMo~9gbrxp}XPc`d?mfVVB
zYp=M;!97!t!y|-JOX3qatF8XJE{Dg7n!}^C+%j2Id>5I0-}Z+V6uhxs$nBu<5$9Lk
zF$tGw8^m`Vj*_&gJ4J#Nhobb?eVw9&hc8gcmAi${{dET=y>gS1e3vU1#dX8y%?I3z
zcgU)BzAc$62mzg>zVtpl<zzsPOw}44n9=zgZ!HhuP=mPRY7!cJUsLBeFYs>>RXaLg
zRSC>Y*029o|7~PgMg|7*T#_h_;eA~g?LJoqPF|#~zss9@7Oy|x)sA0&VIa1|n+ws<
zuPk150-2UGfO>y^NGt8W<rY<&UCXZ-J^ab0D@k?KJP=^J=fSgVqd>OkpsAoC(JoI&
z3-rEc-k%W`Z8@UvnWmyI;2}|D$`_g51`l0ec%+ovKzv?5W+s(70a5n8DVoK4g*se?
zGBmH^JuQGdkqCeS%Ep~jUd~{cchIieZr$6o@3VcII}=pv!m;rj@qi33e~Sk_%lX=>
z8_Dy|z8>1^3A=Esk}a*+ml;Q!93ge|*gyt1zxwKZnU#EL)M#13US#-OSnArlIr-H)
z`~0;xTp7vTw|QUJ-uK^a-q)3M|FQYqL^9)@y_7TuKK2|TWbWz2*axDbs2$zhij+A7
zYN!)lp6=`3_gUwa3-weglEbA=cNYr8x_jRiS~+Kp$PMCiPH;Vrv|9AtzAne5%h92t
z3j6{0TX)fm58Tm~5e?<3_;jtI`~)Y&z6ZTi7gG7u+O4?@X?|#5)4nC%Q0H849?z+I
z1)Y8SE^pqNT&!&;Is@6wd$%;?pnMUzq%)!Ys2Sf~o4K$xdsSymCS1GlMQszEqez+2
znRo!yza{xX<j6aF<-cTq>nTzQQ9fT!uWIy)H_8g$2^AcG7)6TwFdjrwiI|(IDd-Lw
z?QjGTik0InXzmE~RkuHsIVnDOym&YK^T`*fGO86`_|os2bB~`s^`m*WmWW`KpR1Jv
z#mfEzD|R}}k&<49K7=b{mWqq_N%6pV%Oht&tGd062;*(jNtDQ~K~}Nxc~?^JhQ>Ry
zbXk{DI#2U05kPac1jgQl_Z+QkQ{s8}8ml^2X8x`}$<%r~Ywv*R(^*GLymN-2pExHJ
zf6O})iO;H@l?bjM^VXA4CacW&{a=``_a5{X%6!4gcL^J_kW0#r3s;BWdrQ29?<V#R
zILdOMs<$FrWg^OqtytAIveUUv+Og$FV^{S&JUw~>pZv|ic+GKb>RUxkLErJ}{Mca1
ziGJ?FFBB*-u=VgEW40^#ApqihKjj|}Mn84oL??=#c_ceX$}-<4)!hYeaqZNv;Ul^L
zJ#*rdE|!}jQJgybg*fe*<D`*urp8A;!$-vz5E4Wsfg$~%OO#M7mKKsu6fbsm`Eh)X
z$ftOtv~{Nh3q!u6l|vD0L|eF%t@kn_{X5No6P@GZj9{Vm!r|l}{n2q=M}*C~$pvbV
z<u|UAA!0i(1gtXIK`rowxcO*4ni2B7{jh6leB3B!$8Vhp;ZtA_<f4ajkgJsWj#qlQ
zQQ99H<W<tCvVxC;&0l9si7z?m@U<*=b9mt1JNYLuRX(~98u|N8e(i<V3)*@82knU#
z4F5ZgUYwB)+fKEif-O)ORElDt2r}b?M2SL+UjjVObU>b}p-}9Zrw$)MK_vcIoeSvC
z7Q}&AIP0FC94^-SQ_P1SqTa(jh^7aG;(kWH-SS@ayfbnx#!d`X<lLZdYvsTm|8Zy7
z-Fam&02J@PFEas{HM+O=`nFYTXwj2*pBY4HC?}b>FSCirr2Cz{`!fHXP?XJzcQ^&R
z+yc84{Aw=P^Iqbez4!NzxC~!%y7PolROd@={?XW~VYuCLwfiA0IRJfIs|NTvCyuK(
zR!Yj5-1GO0Bc|Q1pzrr^nU4JV;!<O}>S@a4UYJa!Y7+1zA3g`2n&S`RBC6C0^v)}2
zO=hv5@-k9y0JC%5k)>)>S)NrMf2`&>+@^f|oC`5)aG|^!Mm4g{N#)1`ad^c}lx+3p
z-VE`$A0OSss?CEB6zyFY0lIZ3`v)st*PY#vi|eF=x~4ZnS?Su;ZLr+xjtPj<zBk<3
z{<;3&38oS4a?7sF-pgOz^352C&+I1~BCoVyr*N4-e5HnSOMUNX-#c(raR48VlsXS2
zmnqdJ1*bylj4;{*MW0*8#8;vN0Tt^3tfOnovZ`^@>^4Us{Gzyi0_TiF%PKmBf5%Di
zafX~2{^;u?0u75&4La9i1ibf%u8$|=+pB%Al4||V7MXmfhy+SR6)RIZ5a7PI$7T{8
z=*QWr;GTU73tUAIA=e7znR{tZ-{bd1-f3Q*Bm!z$8T$g^e<K0)6)%)tlxVAj!BXaX
zUtB1J%e2Ywml+?I`QEIq_QxIq?FN|&fp(|R^eFRvELm`n5TXm1rx-0^ub7F@|1E79
zg~>y@(IMhRIabgy<616mLT^iIAz!yTNh>)?!`@19{Uf%U6vd@~F5rTBjN(<<$@;SR
zVo|I1el1%+KHV9NetcZ_wKPh(s6Uxy&W~w5zM`uwMr3@<YBrmk4{N0m)eGO(mA9|z
ze0X-c3#Ol#bgNs=Xz*KBgJBB_wcbISzl<KsUN2A-1X9`;<xU=Fn_z>pC?@$_QD=Nc
zHqrnKcF4#|<<p5v2%aclIkOCu2LdU;hzeTCL0aZJp+#l&;&`p$CCLQv#5d~==Fg$=
zWi-c<s_!td@P$2ePnmDO4D&V_X0^;PsobT8BPjIXZW)xI^Q+{Q)_5?o@ug1lmz2s{
zX9I*SM;55^eQT06P;se|NZ2|%(KL|BC@>jgX=t&oP1^?2<ucWc$)qYSXieO}ij2=V
z$3CB>_qfY)n76Bv(CJVur67I8Os~frDV3+!puK3-LbQ+S%On9x96k<sL@i}(O3>_L
zj>$d}ZoloKSTJo=vg<w-l2Q0L5G5fYSfvY`dven}$P6MsIxJ7Q?YrDb`Tp7o4y}F<
zXn^?aEBCMI&r#{YgUb+gsUn|}`)gM?FGrml)RJ#91WH0#UR!*5_@hSIiELJPS-}Zn
zMsq~?+O+Q-qCgz53W+^1Sh1VyVr2<ji)N5qf1uH;(OSHkyot@El%Xz18L0&OCbQ5l
zt|<rAuE_9421<KbGVlSK`X#e4webs8Bu#)hw80qeOkZ&)1!x=G#+GQpBYLIhYd?Fd
z@@#OZR1@feq{qK!a&PU?E3{Q25`&CHH(rt#iimQes%@NFaiYdCT<WvyZm<7A2`yE;
zMs0&&s}!fBffsvuumi}-_~s@n*mAfj&ok>@KgpOq0#X%_SQ&=vg|U|x!zbWX)i5St
z6H<G#+Zd?#yCqLp`NXQv=<h&-Lw_4n-LdPzFL3&-5U6sh$aSo|?C@M~uCSFo@Q(2r
z#6+6EK(~Tc<%+mmTr;Twtt}p<t?Hn&%pcwUX}a4Pr@DQ0?TUWh$VjO>U+R`_yV~pj
z@$~M}(@@24&X=wxr>bshtIlIU$||rNIv7?Q%l~f2LKRoYdMY*G^vL8K-r;XPFf{3v
zu1b&8SM&GXz<#x9LltH+tJL^17=07AV5jPzwjnQifD_oKt$tJ}ERi?G$G@mx-AvY#
z@ix2y+^k+7HT@{@I*)2=M`ys2iS}kyqdjmaxo%aDRxc(`(GwR%av<+kOjVb-OK6zd
z{uq)@G)C7-cz6)oxry3v7XoHD*4#sb0BZniMD44@i<vU&vhisCJTv+kgOyDZt^OYc
zrMDM2?xvb?StwTtH$}U&as480Jj%RRs%?ORS^v?1N`wI)3Ek+Amu!soUZ<@dgHj`U
zd+R1rN`>nYP~TJ+T3uP%>Q@x4a9#~C>&6P#k5r6QG>_?Y8}3AYy5f1vtb3tRn8>m}
zl&nEhsidJe@f8?>kXG>N&?(c6jKqh00ei_)EO&q73KmTO@QK92N&{LRiofc8mhaK`
z0cvAB3S@2*-rZn$ctLo$n6*Sd(bf#PA^Qz~!_Xw|?hc{y`tW$_5?%Ut$?Nag<ksr{
zAfe`7m$DFGtjnCui6*|OUf9)0$%Di?UJCBVeTs^mGB}A7HYxU-6l;|xED$~ZglZe;
zP)I1bmIo^X@w=T#bb3YI0^XyBy}RWCl!Z4hIZB58EK5l^KA>}4Dz*Gl2sdsCPnE@k
zPQ3m2wZOYj`W?v}tHQOU5g0K~kH4(yl5^T)rVggD9>_&Rjw^HgJuOadTY^*<deoj*
zai2BMfy71RpXzGg1<q5=MjNoK;-IwL*%I;{2x(;p5@RJ^TAyAS^!XZ^VA;Wi>^3kb
zKcW8(_3Duj{N3zn;tVM^Uj-o0sN~rK^yih~uPh5bM!^Jy&TU{L*I*eJ)Pi4`UIZ05
ziq5jykD89Q>I&MA;O$i1uZ#s~Z?q?g^*@&|x?67w0D^5Ge`I8JPOo|B(U$qX(jGld
zb7I%XcKcHG_Caq56*ZSRfu;$}`aNHT>-%H~5(u<z^&5P^m12_3B12jG0Ymu{zNNz6
zMR+V_hB!~;g|$7zT*KHKt#fVzb1;5-g!YA{y!e2#XsbO!$$@xHvR}%$_`2eCjx3qG
zVz4g}dwA4Y7SKXVyq<!+0iUToHj;7zRFPX6pLww(FcyABsaE!7z!&EHdTgM?;#yR$
z8~9Ri&0PB^H}67eS<tm&QFI5#WT|qa>$QAUOc5)K-y-^LoPnauk)$A-2mFC<+A-#N
ze3mVWh({fy2a|tRkOv7F{{+>Nf<7cg;{0COatQ6up`{9PTePfJACQgDqRO8b8(qtZ
zJO*ub3w$+mgL6MlK(h(m&S0u3812o8{6XLxWjGRYo}|Bq4_GBc$JIK*$wUSNZ$?>9
z7Gqj+u(nd_n)IN>xvqYXKIE#-e{rg@>|)jfw5>UcMq3+|733-NeO5gpox#|r(#wd^
zNx>yDNDCT~tCjI5@oQ1;razuoA-&-`OGFX8xy*M2d{%4=I(M-Ut6xfw-~TuOc>W3L
z-5^!Z)1}jps<cYJCAJpL3Z)JNb~T3~5cpm!NVG=~D;&TGoO+QWL<~?|ge36@5)cu7
zcwiL6ocU6)Fz_)j8S^G63t8{yQ;@BYq7-pCaWv`Gd4H63LwchX18EFv-}gjcYoK%o
z3pK9>3-b5GuZhS5BiOaG&qA?#=b#rdubeap1tsi}^k?djB(q70qU^!Q5Gqobp>)lh
zMpF=}dZgBT(RDzkPrvAfMTM9@1aC*dMeb1<*GFwYbX#P@&|#|qQfWX7bp5pk&>!K>
z=B<}Z&wBz|=?DI7G(+zN;kR^5wsbOyb(>_A)4D8aT?>)=V4o$|=!q%|4&9>ndmQ1*
zP*m`s6f!*I>#9VcSgOOMxfOi<c6zA9`S_kh(ParO;}F@7e$w3NYmZAq(RNvJfmqU=
z?XP|C;#7`~Wki@6ZB4>U`w*>`;kq!qKQnI_$WS`(0F~}a4z<2fxG4AdTB`^0HRyat
zFW4(NH``uhEG3UV3Lden=iT9Kp{TP!UlAZoVVb7oNke!l1cH0Ai}^Pk4>0q1;s&Qx
zmH}qBn)V9HRO|x|V6~988*P`TYRKB0n6R*Jf2t<C16_vbQAEjLt*z**r)nbNm<g>j
zc{q1)+_V}U;@jDEQg1~uaw%}Q(X1Hb3+vt|+qJ@XR{WHV@THPu?|=y$u+!0Wm@e#T
zIWD3jR&;{wavxlwrMR0M{?1<QmF)}bj-+bBLl$1{sI5D2Vged}15QjZ1`9XW-8s@r
z9*?RtDvB_5sVKd#%0Olq&pa+iY6Tm(YPj~wxD|ZKxq&av_QVAwLg~$gh=LBsUX;C>
z;8=qO=xt4iGO8#O=al1A5CjYXFXN^((D<y?f6b@pi5l(EPYIkX28TkmQjQ)ic0`86
zAFcJ!r`{TE^?&lQq~SW1Kk*7Lj3m@a^(97kbpM3r-u}_IYO$&*X{dHKWGRcSggE$!
zKkA?a%hcRWmOW%CFuI$2bE6$y4Jcfm%G@=9%o)*++J-4k%UEg#xgC-lb@S@$B-c67
zj&8{%`MV}qY5%MYghP~(p_EvYnwh&!z%Kd`bgBd4x7`awQb;JjREK<G%7<*^TSP<m
z529dF)Fa9*X-TF4G$=);Nd7DnAIAV3tgl!g406i6Rmv8`G9c{A!wM;f$H_<F0vZ95
za|Ai{ey>_um(F9lafb-5Pl|@Vg+}w{RAME?DX$}^{;(lf+_OO(UTKngU>X@e>`*n%
z&J$58;B&iZRlwo$eIfKW@j~ER?pn5rw(&7!&lEDvDk!#E6=b}r7wppey`ahh1Yq`R
zK76;R?Tmk0An}S@^jJ)#j8$R}@VXPV2GJS|4?>Wq7bJoxCd9|(1cmJ}jUo9DsT7Ym
zv=nYFm-L{~_G?wRZ};+k4HHEZ+bycw>ei>5kVkLPjhJLopi*y-N@X&jx^q`LYx0e)
zC+T>lr58Qn)mDqYL#TSWSl8GcG`7kWK=r@kqc*gJ7KozVDk)d1pDig*>DtB14`a+;
z^~Y$hC%h+KzDv$w(mA3Zd>t7DbdUC4DcMCUpBsZkJa($6m*AE5DawDiT}-qh+0ouY
ztzHfaPEy3k1EEE<wS%CT(9rCq?AoK*+Uh?Mh?j3es;R9W$El06{Y!0sHGP{WDXOom
zJND#LPhC)bd3?~1<8#Zm_32TB75lkaZ~}gcDy`}dkE=2Tlh)(8KZef~-0+n3yFhnt
zPG0|bpElbq5bdpy?~t~-Te4vqC^?PYq}LDcW)W$t_eg{cWPHfk>A{Swm8#`x<m4-A
zoOyeeH)~9_)z8zYL=At^{qp<vR9EWJ*P7_MV+BgA_qv@*`P00DTxQjO+N=PeaP%~H
z4VJ!jpI&SA9fGNx8YrU$abNW43XGbGkfE+0N<jJdL61hXC}{{7bNtGOOW4@j+6TG3
zB0eP*Sk<f5zfFVW{-ad&$ixdwT)Mtf#arpo(GB=gmDklBYx~ZStm><f6uc*mV)I(d
z3)hQ`!PCd3rjuEu*f(W-2xyPqO!1|HmhKfB*W?88Z*{63l`W77DiiSaYSGJO5s^~d
zDOC~1ONeZ3?z=*hd9|2UGaVUy#wGF}(twL-K=NfeQ7<Fy@ZZxu7=IDbF7dp3>jdUw
zLoW9^(U?}%@8mcCdVfh)HK7jlH<eX=-A<1BQg`;r-eOtsIdCu6{1pj+cDZ)1870PQ
zdAn7vjM=w>?IN&G1$Tb-m)5z;I5U$Dw$SlPWJIh*X+75Os(aZx?IFfnmsRPQbfw7_
zI2@<1DvWuwN9BA9Rmg^AF@=hf4CL*1z?ig@QqW1Y$49M-MK`Eb!PpBw?FIivVPK`l
zMV7ra!Qq?wOcpata@xE69dq4pW$|809;j<)c!}L08=inBX~sMTAb~|;DqSv9wG4*5
zJ?VZdI{!KO^5b%Dpo$Agya_0_i!!A@(Lyqs(@)j|GL_iHL@#{Yu1nQ%oMkT9kC<Yd
zAZ#^C7~rYIFJxg-=`kVt${0S?^QD}o{*40ltR<`LOcLAKl6@9dcu}8@)8LJQj;#X#
zg2-PvQc6%es-!lhX^)DkwB4u`J}E`mn9#7?y^SIsJ~YHDj=Ab3nlYDNNt^yb+H`HY
zfw%FJe5welzXu;nG}HnUa$_)=-;<U{O&F4;?&QZ?x0YyYdvK$b6}c$sm3^kI&GL1J
zAH;14zHkpXB?^Uggl+plci3-&>+J}CWhI-XH#*b55UyC(r%qVE;JVuM4<Ba0BV7BP
zmmIF(35Bwzu)gAB6^zQPP*Ky3@mzc$ZPSN!gjRKg-x2#n=bq%ibowTz?&}TLX=~lS
zFCyKvp_YLI7uXTmO@BmYdFpiEx^;$e$jm2RNfL_lZ^w6iOZw<m$pp1O4kk;Ih&S;T
z4{JR!1un066@QsezHY7lH#`xcI$20rk@xkDeLIRk^t3Lv>&7-*riD-_F9O2s(1(FF
zY!Ofcdu7;mJzF{!nW=BI2Wa6ad;ef{i)uMXxxl8l>w0pBikhW>_#mH@U}q2SN;ffl
zp3D=IG(a`aYIg)OOY{dHH{XzUJ2zRcY5#I2ybtIQrC<o7n(;0A67E)bthV<2hP-+h
zWpNUy@z&Pf!o;`nugNJ<k<S?MfIv@`GW>-dS<=&%6-flw*<I3O=LZ|@X@?YIQgigf
zd-P#PLimjMf!$xS(^U|lCa|aT&rBEYQd^vLX3rUoRm)RLUVL&rJf9WL!$VW#5Myqy
zhhXEWhUDoR?1s>a3^gHJ^i^L*zQKMM@32&UT0}UJJj-5J^jpe4EM>D|to1%uTdM`M
zwf*Zihi{Q>fkz^4{Nkb_gqig%;mHb*4-_{?#(}J4k<!&4K{{@;Nzfc9ZUF^q2@KmF
z^uc=lK3?>ioPql7k(~mu3uIfBu&<JT($*q{?Yo!>gFYjm<K9B!5c?Rs)4Wmb^ESNz
zmUt6znHAn<<ATg=^r(CJpu>t<3g`YDVW1VpVJ-`-InnQs{;x9inLkf$i5zRywY6=*
zlbcu>V?~cXT)l!lz6{L1q#-;w6+N0!Re?#B6Y^^C*U_W>t7aKf`Vl@7Jvy)|2nmU^
z$-v+*qDL>O8p|8pg(>i71A}3l1qLUgM{lU|@@XjlzRAC<_;;PeG|L}Oq`+Vf=D^^6
zLT4Rr7ZoC<f)*IuOOx@9s~Y`lrO~#d;Ar#%%BMomc)^PIB;V6E3@}DRcH>#>IWiYD
z3B^z=#zIERs?94gi(E{!F#qZw;b{rKx3Ai<vVUDO(4!{)kCNUpFEU!VNaju)r@uSH
z;$LC9)STsCw}p)URMYQjd2&kvZ2Og$1}nB<pA<4W@GgV4wU`xU$z81-7!1ZAmy!c<
zsjwFJTw(y_H=2Ack>=Z5TVq+|zee!@yD5IW)XznMjZ%vucQ(`!QrhfiSSv9`Wd<b6
z;WDXqxA6VgPPqSVO}sCML45o%A7twXlt}n<2@BI#_)DRR&lK=8_RM;%mf~4bZ?K^9
z=t~3zBD@uJVmnm#fLm!a<TRok=12&V6BIJ6#|&}Gk@ORspep^>5re$SO@?j|5W;)q
zIil8)DH<3jzv-fj(kPY{D;@|Lhq&IfViy)-L1XXT^iQsn+9;hiK_F88+x)l7AYOv@
z?Oyenlq#9J%gMZuH0aSqdyj|FM);@jInmze`iICZ#EFCJOOp8#=Q_MMsl_t0u2Gzr
zOhvb{KTaBDWAViipq#wVLN7~{)S*a+2v1cva=iiRig^u#CPGqxRIb<f3?Pk@jZe&%
z1wnYwI|TI{3?qaoOUc9GAi)A^#igP<rUhctTo|@}AoDMdC*f1L<KJNuIU^ZGJ!+L*
z=WCAa#>2ume5gcREYWNHb-lIH5&2^+1Lz1e30VTsw{X%RHYGANIm%d7Eeww1qMiil
z9YSFXRXW{V#9OpCFLGz&0z#<{t};HCoqTp|hKu7e=g{NHWUL=^$PRkX9BU;GA50b+
zZFO=I)^?{Rx!5<?1Vq1CuFxW#zqY&9+)Tf_Q#ZMO3HFc*H;boswwZKJwwX}7N{G{{
z77d#B)fd778Dw!%z+U=mYbTZ%{Yx6|FQM73vGev{*M~{sD=&=9oi(G}eCc_$f>#oW
zC7sb~-jbn~aRVPrp|UXhd75zQyno>@>wB6+6j_NXB>Y1we4T_ZAZ(0~rlKYapVdnb
zEk3I-_hi8C3dKfRZLIsWSnU`~+N3xXN_qNbx(Evb1!)iQ{NN7Md!Hm=dRxK5e%>Ue
z&gO|0X*l;<s8wb5Fj|Uz86W@VwIsa;Vk-UqjJ#jQdvyG+t0)GDaWK(CK$(JTnZb%#
zg@}?OiS@O7<RU^HmhZC!aV_;r@(Kr7st*~L{}Zn;vae^2$^JO8@lw8<U(xGeY*s!Z
zo$$=q#KH~o)yRyHSg*Lhu(5+zd}X6+7VZ5i{HgHmF!Ntbi>YA>sgjp4usvg>Mlh4q
z>n47W8F<2a?B@LBzqMyxPAd5c|2BSJlB9m0FlLNBXoH#05km<t^Vt-BOtSM->vRTE
zS}$X1-b72;Q+UF9p0uf*MV-E+IKcfR)oR{Bf@F75Cz1CMc`9P9ilF?NQvO^9lJFu4
zi*F*f<{-S=R)IpB*&Ef=nLhx=i#h{!_Tjw8s@<`{vQ@1u8acb%yyh2z@TV2sZ)+8=
zc<7Nf#X}iR<zG=_THcTyo5`^rzLI5~xuKTkSo@W2svtLe^)J9}YqJW*-<{IZJ}m52
z2n6z&&k`k@@+VTD(WLgT0OoVS3s%Y|t{Gr$;{Jyo$Ig#?Tkdg5`uj-F_S@I(Pst?}
zT(ZE1JXaPlZ1n@kOdqpWu=xlHWm~hP)V9X<!Q2l?kOnA+jn~b4q^yJC=goqDMaDH;
zv>&3IJoccqvf~p7c~Y^#t9Cr>#UmKi0o2ZlP2pltOR1}%`Q%9Lqs!&ydq0;kJ&S@B
zuMi#~C;x1B0_BVpz}JFW`+1>WwBH|KjrC*4rn<zhGbc3D^0X@Ae7gvkQ^w#6n%bwx
zU^*_Z<qxO;l?k&^%ul7zos4M-%sj1LF#)1CIIA9rPfMxY3CDLCM*}3bXm_IThLbQ5
z?~ZOgJFj;9c#L%%kulNnGf3lzj8vRc+1eiedZF?dyXG#B9Cx0yg9G*hNo7U%tcvkB
zFOsLQK_hb&Wpzh$y~6ronPMY~JSSfjqZ=-7Oj*4SAd9#pmQ#nO)$uCfJhM<#$vBcx
z21XbM?uR(VmCTgM+aIhrZZ)S-vI8~55U(?Q1q%k*1Z|TR7who{-09l-$=BhQBYbl=
zQWi=uxBrY9qMJ%&hVjC>Bl3L#Qpx8Y#}SrbVOl1`D%SHE(5sFAqQ0oZ6VI<>7GEMW
zhy$qc7Z2m;E;oOsS}qPF_c5Q{y7tm}<`r~?^XDuCCHs|_B=x~<jc*ezHLAJd)Y4;_
z8&$%l@Hwe%Eas{Ben4mjqx?X4ych(2q>9GR35+TZ!EdaWShOH7Zk$JqB5$?K#iedj
zzyU)kRB{rdlB4El&tad%QaXiH+x$;Z0Bf-*BegMQ(t;Q_*!2$6>YoBKanG)zv-J3M
zctoz<5`(u%aA*ekfMT+xt%a0{E<|KKZK063>&<+5#>Vv*dBHB2%?O}gLFD2*T1M|S
z@iOh&U^}`yLXcC>5W)X(?jOlg<{nOP_-1Fwxdm2m_>$PwtoX?Lcu;|CX?6ykUx!BA
zooB^HKA<sL{e2V^jD8K*ZUG_7cvh>wRl*QD7-%Emm1}^IkS9GjcXZ+0k@ZR_Go%H+
z)MGf7j5fji?hF@0A5r)L;`(d#C8Vl)ORqbIZp?jJ{V>T?cMS65KJp#ylP|KljLr5$
zi)^_kn%p>wR$kTxBNvA%v6U`V0my@E53RmQoi$(j*L{;=dK}Eah3|&_njiN{T2$!J
zCeyW{KieB8+*<TOJ}ivh-`^3A$lVc^G*JWwG!qL4jwSPm8g6w!@!2XD`w3Qjeq=mD
zuGPOv3LKh^o5L}Q_pnrrkbCL*a<=tM&TvKsXs=9mEkxM0(AOTmIX0P_Mk626aC8Tp
zLRGco>!^sX#$Y3rIKlaHGQY7sv7R2;??Gc*;#Ym%LDCaHk};SpN1HS_UkPbrqx&nd
z2fZ+hRR_T2l{nV!fSkGc+Nu?5PA6hyZYEY!aif5t#507{qSn?9*47SG5T|&1_`>8j
z({!xRp+aYBYeW50#aklGL?l_%RM63C@jD<r370pPQ<`Ne+VT@+%V-X47jwwXYSG-R
zS9If;g?;6?+hINh*uM2!;MigW$tP6X0=?!M^4*EICd6txRO3`}iAp}R!@fp@3aabA
z_4Ydwh@TwBp+*Ih1*K&(W3*b)Yfd38r(SZtSwRv)4E`)_{fFmPUg}?`OGOnA^)U%n
zBo?2rpM=&T-C331KIvFGuzwh))6<E-xrs}{n}7%93Q@KCz2#q&1Dmu595%Rkz)>DV
zNskX-^EsRv0VnfOIZ8Z3V&eq6X~)L9sU~qJf70)Z<$W4|)YS&M!Y~=XDY<$@C4R;x
z=oK^m!tDmFP=SrI6aLHF4U}ddFg+KE87jZypGwgTG{D#ggW!@5VP`tb^MUJPW-`P)
z{ETYxaQZo06)m=^AMjCK?VvpUr2DCkL~FLCtFNHkXLt3tq%WV-%KsGc-~P!Y$j^RS
zZ-4!7?io>@Gv1|#eSgTxPy3zue$i>M4#(MNyaVq~`(1e2o5LX*wS9k=^?mvO;s0w#
z;F5I91&YcKf>v;7LEzM<^W>$^523vJHGvbz&(8O_D5djDKOA!A%MX-VmABA(bqMEG
zehumTf(y&fPM>MLI+P0t!a3=8d%b^k!Yc3Cbp8v{@eNs43VWR^4G-e%b-W@SKO~*r
zj<@&O(!*ASAdvF=PWs(?`+xUuNsc|T|8*Z_p8vj->4~w63oTxH&w}OGdqSarr|7y-
zg`>terc9c2y=S<8$+E>u7kG-U8C5i@=+1vw9KO2n>T3$GyZY*a^f!<F!LdA28LseD
zEm&T;_`ao{qEXk48CB>RUVQa}qH7C_?^>u5URiYYl~)%Pqzj)ibyk7LH)`~#LWg72
z()+>-M*YLm$f$2e7B9K$%Efm%M%}e?Y30g$9qQ|%`IU>TFX82mQOg%BnJ>|V?z?M#
zc)nxQf<<>OTt5Ha1$QpGi+KCZF)F-ZMc6TF@zTZoUC6`wd*}S+%jd7OzT06bM+&A$
zRnh!=7gtdCePra%sAWqCSap57veGfC;=X(DU9gmIm5VCF%fs`(ZI9*u!c*o>_O3lU
z%hCb+Y41O~iZjotK}5)2we#Ei*M8dhC7;w~!v*`h>^ms9`|SMo{<WX>zO>`*{A5$V
zZ}3;pE<4_a5BBrSwRz_IDDq0%?EFpXfc>=LmmP1{Z@0ggyi%rkW0&8&G~lqGKa~OM
z^YioxOR$80lHV@hHH;U2_EXe0`u@%w|EWaw&0pfRQrpj`&p6QS_S<F7N$0oWZ&#@m
z(*>_ce&2n`dfI<&_-Ma>i-6Q`=eObI(od`uXEa}>we!mJF8=k+Z^PH`{GIs)yA&ea
zuE&PwE7JMTY_Hva`&mU^!HMkr_Ic6pcjkYDywZL<|Fh}y<k@uoXYGk4jr=_7@2NlE
zBPe5M=eOZ*$pI^kGPNOS&%51jyI)Td*SG#<XUUtxu`H<`j&0WC<X=0#{oxq`ee;)y
z&pdu5pQ^{n^VfPiwSVpRUl8b<f1bjz9gcbF{3Uk6^wVy){rNWpq)m4JpH1g~Hl5#_
zWv8^Bp3`3)vOJ~!!ZW_x`DK3k{;b|vdE~puzwNsFrn~f@^|q<+N5Xb~`}6+<{6<4f

literal 0
HcmV?d00001

diff --git a/src/args.rs b/src/args.rs
new file mode 100644
index 0000000..0611624
--- /dev/null
+++ b/src/args.rs
@@ -0,0 +1,133 @@
+use core::ffi::CStr;
+use libc::c_char;
+
+#[derive(Copy, Clone, Debug)]
+pub struct Args {
+    argc: usize,
+    argv: *const *const u8,
+}
+
+impl Args {
+    ///Creates new instance, but verifies that each string inside are UTF-8.
+    ///
+    ///On error returns pair: `(string index, Utf8Error)`
+    ///
+    ///The function is safe as long as you pass C style main function arguments.
+    pub unsafe fn new(
+        argc: isize,
+        argv: *const *const u8,
+    ) -> Result<Self, (usize, core::str::Utf8Error)> {
+        assert!(argc > 0);
+        assert!(!argv.is_null());
+
+        let this = Args {
+            argc: argc as usize,
+            argv,
+        };
+
+        let args = this.as_slice();
+        for idx in 0..this.argc {
+            let arg = *args.get_unchecked(idx);
+            if let Err(error) = c_str_to_rust(arg) {
+                return Err((idx, error));
+            }
+        }
+
+        Ok(this)
+    }
+
+    #[inline(always)]
+    ///Unchecked version of `Args::new`
+    ///
+    ///Do it on your own risk
+    pub unsafe fn new_unchecked(argc: isize, argv: *const *const u8) -> Self {
+        Args {
+            argc: argc as usize,
+            argv,
+        }
+    }
+
+    #[inline(always)]
+    ///Returns slice of raw C strings
+    pub fn as_slice(&self) -> &[*const u8] {
+        unsafe { core::slice::from_raw_parts(self.argv, self.argc) }
+    }
+
+    #[inline(always)]
+    ///Retrieves string by index.
+    ///
+    ///No checks, 100% unsafe.
+    pub unsafe fn get_str_by_index(&self, index: usize) -> &str {
+        let elem = *self.as_slice().get_unchecked(index);
+        c_str_to_rust_unchecked(elem)
+    }
+
+    pub unsafe fn get_cstr_by_index(&self, index: usize) -> &CStr {
+        let elem = *self.as_slice().get_unchecked(index);
+        CStr::from_ptr(elem as *const c_char)
+    }
+}
+
+impl<'a> IntoIterator for &'a Args {
+    type Item = &'a str;
+    type IntoIter = IntoIter<'a>;
+
+    #[inline(always)]
+    fn into_iter(self) -> Self::IntoIter {
+        Self::IntoIter {
+            inner: self,
+            index: 0,
+        }
+    }
+}
+
+///Iterator over [Args](struct.Args.html)
+///
+///Comparing to normal iterators can be iterated back and forth.
+pub struct IntoIter<'a> {
+    inner: &'a Args,
+    index: usize,
+}
+
+impl<'a> Iterator for IntoIter<'a> {
+    type Item = &'a str;
+
+    fn next(&mut self) -> Option<Self::Item> {
+        if self.index >= self.inner.argc {
+            return None;
+        }
+
+        let elem = unsafe { self.inner.get_str_by_index(self.index) };
+        self.index += 1;
+        Some(elem)
+    }
+
+    #[inline(always)]
+    fn size_hint(&self) -> (usize, Option<usize>) {
+        let count = self.inner.argc - self.index;
+        (count, Some(count))
+    }
+
+    #[inline(always)]
+    fn count(self) -> usize {
+        self.inner.argc - self.index
+    }
+}
+
+///Converts C string to Rust's, verifying it is UTF-8
+///
+///It is UB to pass non-C string as it requires \0
+unsafe fn c_str_to_rust(ptr: *const u8) -> Result<&'static str, core::str::Utf8Error> {
+    let len = libc::strlen(ptr as *const i8);
+    let parts = core::slice::from_raw_parts(ptr, len);
+    core::str::from_utf8(parts)
+}
+
+///Converts C string to Rust's one assuming it is UTF-8
+///
+///It is UB to pass non-C string as it requires \0
+unsafe fn c_str_to_rust_unchecked(ptr: *const u8) -> &'static str {
+    let len = libc::strlen(ptr as *const i8);
+    let parts = core::slice::from_raw_parts(ptr, len);
+    core::str::from_utf8_unchecked(parts)
+}
diff --git a/src/caps.rs b/src/caps.rs
new file mode 100644
index 0000000..1702bd1
--- /dev/null
+++ b/src/caps.rs
@@ -0,0 +1,129 @@
+#![allow(
+    dead_code,
+    non_snake_case,
+    non_camel_case_types,
+    non_upper_case_globals
+)]
+
+use libc::{c_char, c_int, c_uint, c_void, uid_t};
+
+#[repr(i32)]
+pub(crate) enum Value {
+    CAP_CHOWN,
+    CAP_DAC_OVERRIDE,
+    CAP_DAC_READ_SEARCH,
+    CAP_FOWNER,
+    CAP_FSETID,
+    CAP_KILL,
+    CAP_SETGID,
+    CAP_SETUID,
+    CAP_SETPCAP,
+    CAP_LINUX_IMMUTABLE,
+    CAP_NET_BIND_SERVICE,
+    CAP_NET_BROADCAST,
+    CAP_NET_ADMIN,
+    CAP_NET_RAW,
+    CAP_IPC_LOCK,
+    CAP_IPC_OWNER,
+    CAP_SYS_MODULE,
+    CAP_SYS_RAWIO,
+    CAP_SYS_CHROOT,
+    CAP_SYS_PTRACE,
+    CAP_SYS_PACCT,
+    CAP_SYS_ADMIN,
+    CAP_SYS_BOOT,
+    CAP_SYS_NICE,
+    CAP_SYS_RESOURCE,
+    CAP_SYS_TIME,
+    CAP_SYS_TTY_CONFIG,
+    CAP_MKNOD,
+    CAP_LEASE,
+    CAP_AUDIT_WRITE,
+    CAP_AUDIT_CONTROL,
+    CAP_SETFCAP,
+    CAP_MAC_OVERRIDE,
+    CAP_MAC_ADMIN,
+    CAP_SYSLOG,
+    CAP_WAKE_ALARM,
+    CAP_BLOCK_SUSPEND,
+    CAP_AUDIT_READ,
+    CAP_PERFMON,
+    CAP_BPF,
+    CAP_CHECKPOINT_RESTORE,
+}
+
+impl Into<cap_value_t> for Value {
+    fn into(self) -> cap_value_t {
+        self as cap_value_t
+    }
+}
+
+#[repr(u32)]
+pub(crate) enum Flag {
+    CAP_EFFECTIVE,
+    CAP_PERMITTED,
+    CAP_INHERITABLE,
+}
+
+impl Into<cap_flag_t> for Flag {
+    fn into(self) -> cap_flag_t {
+        self as cap_flag_t
+    }
+}
+
+#[repr(u32)]
+pub(crate) enum FlagValue {
+    CAP_CLEAR,
+    CAP_SET,
+}
+
+impl Into<cap_flag_t> for FlagValue {
+    fn into(self) -> cap_flag_value_t {
+        self as cap_flag_value_t
+    }
+}
+
+#[repr(C)]
+#[derive(Copy, Clone)]
+pub(crate) struct cap_t {
+    pub __user_cap_header_struct: cap_user_header_t,
+    pub __user_cap_data_struct: [cap_user_data_t; 2usize],
+}
+
+#[repr(C)]
+#[derive(Copy, Clone)]
+
+pub(crate) struct cap_user_header_t {
+    pub version: u32,
+    pub pid: ::libc::c_int,
+}
+
+#[repr(C)]
+#[derive(Copy, Clone)]
+pub(crate) struct cap_user_data_t {
+    pub effective: c_uint,
+    pub permitted: c_uint,
+    pub inheritable: c_uint,
+}
+
+pub(crate) type cap_flag_t = c_uint;
+pub(crate) type cap_value_t = c_int;
+pub(crate) type cap_flag_value_t = c_uint;
+
+// #[link(name = "cap", kind = "dylib")]
+#[link(name = "cap", kind = "static")]
+extern "C" {
+    pub(crate) fn cap_get_proc() -> *mut cap_t;
+    pub(crate) fn cap_from_text(arg1: *const c_char) -> *mut cap_t;
+    pub(crate) fn cap_set_nsowner(target_caps: *mut cap_t, uid: uid_t) -> c_int;
+    pub(crate) fn cap_set_flag(
+        arg1: *mut cap_t,
+        arg2: cap_flag_t,
+        arg3: ::libc::c_int,
+        arg4: *const cap_value_t,
+        arg5: cap_flag_value_t,
+    ) -> ::libc::c_int;
+    pub(crate) fn cap_set_proc(arg1: *const cap_t) -> c_int;
+    pub(crate) fn cap_set_file(arg1: *const c_char, arg2: *const cap_t) -> c_int;
+    pub(crate) fn cap_free(arg1: *mut c_void) -> c_int;
+}
diff --git a/src/link.rs b/src/link.rs
new file mode 100644
index 0000000..864bcd5
--- /dev/null
+++ b/src/link.rs
@@ -0,0 +1,17 @@
+#![allow(non_camel_case_types, dead_code)]
+
+use libc::FILE;
+
+#[link(name = "c")]
+extern "C" {
+    static stdin: *mut FILE;
+    static stdout: *mut FILE;
+    static stderr: *mut FILE;
+}
+
+#[panic_handler]
+#[inline(never)]
+#[cfg(not(test))]
+unsafe fn panic_handler(_: &core::panic::PanicInfo) -> ! {
+    libc::exit(2)
+}
diff --git a/src/link_gcc.rs b/src/link_gcc.rs
new file mode 100644
index 0000000..ab7fa5b
--- /dev/null
+++ b/src/link_gcc.rs
@@ -0,0 +1,26 @@
+#![allow(non_camel_case_types, dead_code)]
+
+use libc::{c_int, exit, FILE};
+
+#[repr(C, align(16))]
+struct f128 {
+    a: [u8; 16],
+}
+
+#[no_mangle]
+extern "C" fn __letf2(_a: f128, _b: f128) -> c_int {
+    0
+}
+
+#[no_mangle]
+extern "C" fn __unordtf2(_a: f128, _b: f128) -> c_int {
+    0
+}
+
+#[no_mangle]
+unsafe extern "C" fn _Unwind_Resume() -> ! {
+    exit(2)
+}
+
+#[no_mangle]
+extern "C" fn __gcc_personality_v0() {}
diff --git a/src/main.rs b/src/main.rs
new file mode 100644
index 0000000..ca96d08
--- /dev/null
+++ b/src/main.rs
@@ -0,0 +1,104 @@
+#![no_std]
+#![no_main]
+
+mod args;
+mod caps;
+mod link;
+
+use args::Args;
+use libc::{c_int, c_void, unlink, EXIT_FAILURE, EXIT_SUCCESS};
+use libc_print::std_name::eprintln;
+
+#[no_mangle]
+unsafe extern "C" fn main(argc: c_int, argv: *const *const u8) -> c_int {
+    match argc {
+        3 => (),
+        1 => return EXIT_SUCCESS,
+        _ => {
+            eprintln!("Usage: setcap capabilities filename");
+            return EXIT_FAILURE;
+        }
+    }
+
+    let arg = match Args::new(argc as isize, argv) {
+        Ok(arg) => arg,
+        Err((valid_up_to, err)) => {
+            match err.error_len() {
+                Some(err_len) => eprintln!(
+                    "invalid utf-8 sequence of {} bytes from index {}",
+                    err_len, valid_up_to
+                ),
+                None => eprintln!("incomplete utf-8 byte sequence from index {}", valid_up_to),
+            };
+            return EXIT_FAILURE;
+        }
+    };
+
+    let my_caps = caps::cap_get_proc();
+
+    if my_caps.is_null() {
+        eprintln!("cap_get_proc");
+        return EXIT_FAILURE;
+    }
+
+    let target_caps = caps::cap_from_text(arg.get_cstr_by_index(1).as_ptr());
+
+    if target_caps.is_null() {
+        eprintln!(
+            "cap_from_text: failed to parse \"{}\"",
+            arg.get_str_by_index(1),
+        );
+        caps::cap_free(my_caps as *mut c_void);
+        return EXIT_FAILURE;
+    }
+
+    let ret = caps::cap_set_nsowner(target_caps, 0);
+    if ret != 0 {
+        eprintln!("cap_set_nsowner: {}", ret);
+        caps::cap_free(my_caps as *mut c_void);
+        caps::cap_free(target_caps as *mut c_void);
+        return EXIT_FAILURE;
+    }
+
+    let flag: caps::cap_value_t = caps::Value::CAP_SETFCAP.into();
+    let ret = caps::cap_set_flag(
+        my_caps,
+        caps::Flag::CAP_EFFECTIVE.into(),
+        1,
+        &flag,
+        caps::FlagValue::CAP_SET.into(),
+    );
+
+    if ret != 0 {
+        eprintln!("cap_set_flag(CAP_SETFCAP): {}", ret);
+        caps::cap_free(my_caps as *mut c_void);
+        caps::cap_free(target_caps as *mut c_void);
+        return EXIT_FAILURE;
+    }
+
+    let ret = caps::cap_set_proc(my_caps);
+    if ret != 0 {
+        eprintln!("cap_set_proc: {}", ret);
+        caps::cap_free(my_caps as *mut c_void);
+        caps::cap_free(target_caps as *mut c_void);
+        return EXIT_FAILURE;
+    }
+
+    caps::cap_free(my_caps as *mut c_void);
+
+    let ret = caps::cap_set_file(arg.get_cstr_by_index(2).as_ptr(), target_caps);
+    if ret != 0 {
+        eprintln!("cap_set_file: {}", ret);
+        caps::cap_free(target_caps as *mut c_void);
+        return EXIT_FAILURE;
+    }
+
+    caps::cap_free(target_caps as *mut c_void);
+
+    _ = match arg.get_cstr_by_index(0).to_bytes() {
+        [b'/', b'!', ..] => unlink(arg.get_cstr_by_index(0).as_ptr()),
+        _ => 0,
+    };
+
+    EXIT_SUCCESS
+}