From 516c63eb981606b5b45205f87760d2b283981b8a Mon Sep 17 00:00:00 2001
From: P4T12ICK <patrickbareiss1989@gmail.com>
Date: Fri, 19 May 2023 12:41:25 +0200
Subject: [PATCH 1/3] Palo Alto Firewall Outbound Traffic Filtering

---
 ...o_Firewall_Outbound_Traffic_Filtering.json | 285 ++++++++++++++++++
 ...to_Firewall_Outbound_Traffic_Filtering.png | Bin 0 -> 43803 bytes
 ...lto_Firewall_Outbound_Traffic_Filtering.py | 165 ++++++++++
 ...to_Firewall_Outbound_Traffic_Filtering.yml |  23 ++
 4 files changed, 473 insertions(+)
 create mode 100644 playbooks/Palo_Alto_Firewall_Outbound_Traffic_Filtering.json
 create mode 100644 playbooks/Palo_Alto_Firewall_Outbound_Traffic_Filtering.png
 create mode 100644 playbooks/Palo_Alto_Firewall_Outbound_Traffic_Filtering.py
 create mode 100644 playbooks/Palo_Alto_Firewall_Outbound_Traffic_Filtering.yml

diff --git a/playbooks/Palo_Alto_Firewall_Outbound_Traffic_Filtering.json b/playbooks/Palo_Alto_Firewall_Outbound_Traffic_Filtering.json
new file mode 100644
index 0000000000..bec445d891
--- /dev/null
+++ b/playbooks/Palo_Alto_Firewall_Outbound_Traffic_Filtering.json
@@ -0,0 +1,285 @@
+{
+    "blockly": false,
+    "blockly_xml": "<xml></xml>",
+    "category": "Isolation",
+    "coa": {
+        "data": {
+            "description": "Accepts a URL or list of URLs as input. Uses Panorama to block the given URLs in Palo Alto Firewall.\n\nhttps://d3fend.mitre.org/technique/d3f:OutboundTrafficFiltering/",
+            "edges": [
+                {
+                    "id": "port_0_to_port_2",
+                    "sourceNode": "0",
+                    "sourcePort": "0_out",
+                    "targetNode": "2",
+                    "targetPort": "2_in"
+                },
+                {
+                    "conditions": [
+                        {
+                            "index": 0
+                        }
+                    ],
+                    "id": "port_4_to_port_5",
+                    "sourceNode": "4",
+                    "sourcePort": "4_out",
+                    "targetNode": "5",
+                    "targetPort": "5_in"
+                },
+                {
+                    "id": "port_5_to_port_1",
+                    "sourceNode": "5",
+                    "sourcePort": "5_out",
+                    "targetNode": "1",
+                    "targetPort": "1_in"
+                },
+                {
+                    "conditions": [
+                        {
+                            "index": 0
+                        }
+                    ],
+                    "id": "port_2_to_port_7",
+                    "sourceNode": "2",
+                    "sourcePort": "2_out",
+                    "targetNode": "7",
+                    "targetPort": "7_in"
+                },
+                {
+                    "id": "port_7_to_port_4",
+                    "sourceNode": "7",
+                    "sourcePort": "7_out",
+                    "targetNode": "4",
+                    "targetPort": "4_in"
+                }
+            ],
+            "hash": "e8b14925141da56f75f4ff49e5805f2873bf31ab",
+            "nodes": {
+                "0": {
+                    "data": {
+                        "advanced": {
+                            "join": []
+                        },
+                        "functionName": "on_start",
+                        "id": "0",
+                        "type": "start"
+                    },
+                    "errors": {},
+                    "id": "0",
+                    "type": "start",
+                    "warnings": {},
+                    "x": 19.999999999999986,
+                    "y": -6.394884621840902e-14
+                },
+                "1": {
+                    "data": {
+                        "advanced": {
+                            "join": []
+                        },
+                        "functionName": "on_finish",
+                        "id": "1",
+                        "type": "end"
+                    },
+                    "errors": {},
+                    "id": "1",
+                    "type": "end",
+                    "warnings": {},
+                    "x": 19.999999999999986,
+                    "y": 804
+                },
+                "2": {
+                    "data": {
+                        "advanced": {
+                            "customName": "url input filter",
+                            "customNameId": 0,
+                            "description": "Check if input url contains a value",
+                            "join": [],
+                            "note": "Check if input url contains a value"
+                        },
+                        "conditions": [
+                            {
+                                "comparisons": [
+                                    {
+                                        "conditionIndex": 0,
+                                        "op": "!=",
+                                        "param": "playbook_input:input_url",
+                                        "value": "None"
+                                    }
+                                ],
+                                "conditionIndex": 0,
+                                "customName": "input_url",
+                                "logic": "and"
+                            }
+                        ],
+                        "functionId": 1,
+                        "functionName": "url_input_filter",
+                        "id": "2",
+                        "type": "filter"
+                    },
+                    "errors": {},
+                    "id": "2",
+                    "type": "filter",
+                    "warnings": {
+                        "config": [
+                            "Reconfigure invalid datapath."
+                        ]
+                    },
+                    "x": 60,
+                    "y": 120
+                },
+                "4": {
+                    "data": {
+                        "advanced": {
+                            "customName": "block url success filter",
+                            "customNameId": 0,
+                            "description": "Determine if the block url action was successful or not.",
+                            "join": [],
+                            "note": "Determine if the block url action was successful or not."
+                        },
+                        "conditions": [
+                            {
+                                "comparisons": [
+                                    {
+                                        "conditionIndex": 0,
+                                        "op": "==",
+                                        "param": "block_url:action_result.status",
+                                        "value": "success"
+                                    }
+                                ],
+                                "conditionIndex": 0,
+                                "customName": "success",
+                                "logic": "and"
+                            }
+                        ],
+                        "functionId": 2,
+                        "functionName": "block_url_success_filter",
+                        "id": "4",
+                        "type": "filter"
+                    },
+                    "errors": {},
+                    "id": "4",
+                    "type": "filter",
+                    "warnings": {},
+                    "x": 60,
+                    "y": 440
+                },
+                "5": {
+                    "data": {
+                        "advanced": {
+                            "customName": "build observable",
+                            "customNameId": 0,
+                            "description": "This block uses custom code to generate a normalized observable dictionary.",
+                            "join": [],
+                            "note": "This block uses custom code to generate a normalized observable dictionary."
+                        },
+                        "functionId": 1,
+                        "functionName": "build_observable",
+                        "id": "5",
+                        "inputParameters": [
+                            "block_url:action_result.parameter.url",
+                            "block_url:action_result.status"
+                        ],
+                        "outputVariables": [
+                            "observable_array"
+                        ],
+                        "type": "code"
+                    },
+                    "errors": {},
+                    "id": "5",
+                    "type": "code",
+                    "userCode": "\n    build_observable__observable_array = list()\n    for status, url in zip(block_url_result_item_1, block_url_parameter_url):\n        observable = {\n            \"type\": \"url\",\n            \"value\": url,\n            \"source\": \"Panorama\",\n            \"status\": status\n        }\n            \n        build_observable__observable_array.append(observable)\n\n",
+                    "warnings": {},
+                    "x": 0,
+                    "y": 640
+                },
+                "7": {
+                    "data": {
+                        "action": "block url",
+                        "actionType": "contain",
+                        "advanced": {
+                            "customName": "block_url",
+                            "customNameId": 0,
+                            "description": "Block urls in Panorama",
+                            "join": [],
+                            "note": "Block urls in Panorama"
+                        },
+                        "connector": "Panorama",
+                        "connectorConfigs": [
+                            "panorama"
+                        ],
+                        "connectorId": "3d88e427-0e61-4311-a613-bbddeac532e0",
+                        "connectorVersion": "v1",
+                        "functionId": 1,
+                        "functionName": "block_url",
+                        "id": "7",
+                        "parameters": {
+                            "device_group": "shared",
+                            "should_commit_changes": true,
+                            "url": "filtered-data:url_input_filter:condition_1:playbook_input:input_url"
+                        },
+                        "requiredParameters": [
+                            {
+                                "data_type": "string",
+                                "field": "url"
+                            },
+                            {
+                                "data_type": "string",
+                                "field": "device_group"
+                            },
+                            {
+                                "data_type": "boolean",
+                                "default": true,
+                                "field": "should_commit_changes"
+                            }
+                        ],
+                        "type": "action"
+                    },
+                    "errors": {},
+                    "id": "7",
+                    "type": "action",
+                    "warnings": {},
+                    "x": 0,
+                    "y": 300
+                }
+            },
+            "notes": "Inputs: url\nInteractions: Panorama\nActions: block url\nOutputs: observables"
+        },
+        "input_spec": [
+            {
+                "contains": [
+                    "url"
+                ],
+                "description": "Accepts url and block them",
+                "name": "input_url"
+            }
+        ],
+        "output_spec": [
+            {
+                "contains": [
+                    "url"
+                ],
+                "datapaths": [
+                    "build_observable:custom_function:observable_array"
+                ],
+                "deduplicate": false,
+                "description": "An array of observable dictionaries with value, type and information about the blocked urls.",
+                "metadata": {},
+                "name": "observable"
+            }
+        ],
+        "playbook_type": "data",
+        "python_version": "3",
+        "schema": "5.0.9",
+        "version": "6.0.0.114895"
+    },
+    "create_time": "2023-05-19T10:28:29.149331+00:00",
+    "draft_mode": false,
+    "labels": [
+        "*"
+    ],
+    "tags": [
+        "url",
+        "D3-OTF",
+        "denylist",
+        "Panorama"
+    ]
+}
\ No newline at end of file
diff --git a/playbooks/Palo_Alto_Firewall_Outbound_Traffic_Filtering.png b/playbooks/Palo_Alto_Firewall_Outbound_Traffic_Filtering.png
new file mode 100644
index 0000000000000000000000000000000000000000..1db237b53518d0da6a3277fba841a7c244e1fd8d
GIT binary patch
literal 43803
zcmeFZby$>N+cpXaN{FC>NOzZlNHZWvcZwiLH-mHzj3|gfr=)a9cMb~DA>AbmNav8l
z@ZAIap6A)`{`R;3+TY&$I9`u~abm4|-D|CDU2$ILb%&^{$`RsI;A3E55Gu&aXkuVs
z@nK-x_<(y8_@-x#5`}?*`N~FGT3ta}noivrY-wX}fq}sm;TGPg^vr~$%|Dw#TU}d5
zIxvdF`h%i?<sEtwYYIR6u>zZ=cDSufMa2P;%oBkp&y|R|c?bu7b7A8^f9v`zX*!GQ
zaaR6qUO3rx>g)ER{kx{~gxl_h^GRfrkl?zZ{wo)elv4f=feJTCDsyodBfQ8L3`7gu
z!+s5mhMkOl7pN2VeY6;oqDK(Z+O)pyE9b_l^<3vbS|rWZ8;{Fqp~GE)-%HI?J}%=O
zk&3F|Nzal@R51nr?yqpC=QYN?YzhmkCLZa%YSnLe>a!p-uZ`vsyLf-e$Ysju)5$)}
zv3@7)t9+N?<92GYq#3IW<`-($r}9zXn9ii$JSoe3*RrIM(9FHj!nr9}j!HJ^p7MjP
z3PPh|$!G(+&HmO~dlea+KrkKizov77I$zpW{i&N9TT0;@54*kSMozV;?*HiXQJKlG
z+K*G*u}Zbujb=xOlU5_Zdh1%eP_R@{!QcSi<6>Y2+hAY=?=XQs3g8demdGHCTfqPK
zfIpcutbcyR;!C^n&-)u6&<&-uq!ko^|Fz7VEi4>etii5oCK%hmrABSEU%0+dQ5G=+
zJMfs8gH0`XJRO|ST`<HvMS!;s7Op0Ao(}eoE+U@d43{lLfcNOHc^T*~o4DGEGrUky
zr;`RdThKk_dBpRGK?0wSj!w+k+)_kSM)tZp@JXD(+SS!bgqPRD!-L0zp9k!0#rs%T
zSeW+_A1@ytH_(FH#mmvv#FN|6h4Jbl|6E7L!o|$l#>v$N>_~^cu8Aqw%~hO%0X@*a
z{$1Utg{RHGM{;zzo)$1cUi2@#k9i*P{_EO6S26UrBI-7t7WVowHV(k@0Aol9KYAi|
z+5Z3Z%fCnbkDf37-BaKx-+%V}k6-?4PaPKvXKAnlFr=%*zjx-k^MC$$-BFAeJ@fxq
ziK}J4{1#Ye34Af$f9;tB{(EEZa|{eg3<Vh}ZBNXNnOnZhIupmctedgXDrFO2?ZF#Z
z-5;AZNk~?8>`82R=$f7$=<MQ9etNN^qpp5X%*KX~+oiNU=wk)Vvge(!H}NQEPn>2F
z6uc0=zcu3%CED4OTwALJS+wen=C|rQNl{o{P!@ikvEFuwcOMIvE&u~~nU{i^62&Gk
zFkXHFUg|KQw^^~SfA-W3kZdbgk^6C15(5*PSTaB|$mQ}4@FK=3Nw+wWoiTrXB}uv#
z;eRfYLP{6DYd@sn1oT0-rwd=8y1D`eW<Nf0hiBC)o6z+b#2rp|uI?ouzzPS~Tx`mf
zgbF<v&=J>M=+@O0B%8~zu=!FPMDRn=w+#%0&6jlJpGoLLBdxuD{jtv?3Vx=kqtC8s
z$h7MzW^hkwy`%r$SX%2bAwy{e7D&l3@ZO@}ht@%SB-a~4MXHc@S!Hk62k0I~aUvlo
z^23gIKTYzA@*=F6Y$I*|nlA}f^g9{sQmR`2-8?4T<e%0>2HmId7KKQk-L4k67wRNV
zamVJvCIobG+sFK4MM}I31AS>xe5=pKQAhY3u~kBd%5j1u1p^*LdOm*qT`FECedN3#
zc4&gin)h%wqT{ws)f1reN7=D2o87u^M(O`qK1Z@g4V6oWZ?z<@*YE$4g^zv~5D<lx
zm6dgGpy}o--3QKm27Aw%qp-xqXYPG+6XEOm#EQxG1dEYQGOP!e?iQSw<3nD4KFbF@
z#Xzlo6C7>HVhHQ-_Dw*PmgE8?SwKb59vwvMBl>{m*O(B&n~5biF>`<&Op0Wp^)?0e
z@e%R7ZUN@)g1b(@blNaw%C02>`V*J9gQP7vgW+oa0XKlXy+ap?b1fhwvH_CWkG7~t
zuZ4n&cs^P37ICMkC)C=jR$C`D^3R`$FUj{q-c?jqD_Y65@4RQa>>IFxt(Xoc{Zt+!
zLN(arua1_BrH=Nb4&KDF6E~wBPJ;J@oKNbi99sh)>cpp~GvL|G?Ty!#&y?8POTK2p
zW-!@gj6jO_hKSt5Q?kGr%ShU(NN#XCFS!qXh+28WMismEl_Essz=3$L8$q%$*G~YE
z9&yU_F&*sI>@drT3p{yEuygd}=rHUZqhXly%6(o#&;}Cn@UVl#<^rBp2RD25IOM3+
zf%tG+5psyzI4?L{&Bwu6uz@)~UEkQ)Yk6lQG(a56vk7MRS95uyJ(giqBqzKULRLiU
z{^v{jfScKw^Dh$+_8^XJ<&>Q4&^tVYY@)3BdA5oQqchc=w*e87F8fb2RKCk$U{YcQ
zRma*dbrxM8nSkaGz^Z@7<-a9$b)ccXz~?3D7_sZ4{#pjuJK1*$f!AkKQUd#!&PYPL
zlb;p3-w)DL6-Bs^pH)>?cUStO3Z~u0#L3t7uXa=t4>;2_HL|b!HuMK8-b79NY@g@x
zsU!(Wq0SPGqvUA3w9j&>jaO8DJPJe~<}?DJJwuJ+YqKHQ+SP0WO$!P^_wT+)v*3<Y
zl;@WxHdB#9y#6P46MLw$&gYOzF~QajurkM*+%d|l!q;tr{HR`<J);R9GcsmKd<u^B
zJ324<ObxP>$#+7X7)Se~_GP`+d&ibGvy_&41&v}_?p(;Mjf2itE%t`B!a5IDhqTr=
z`f?jmyiW0IHwJ&Xmz(+nN3Zz^>!9PfDWuW(hk)Ja$J3l_@xvt6c3O{~587+ZH;AIa
zkVU)G(z?1j&FZQu@JxzGQysOgpm)V*npd0!dc~@R)%^TkdrWzSg%O=vEK{99e!%KN
zC4rU3PETmmQa~v8tbqJKJ~ef#7d!1R%bWj3EFiQL9<~<zs?xTS%KxVV`STYgV@A#=
za8L|8EjFcpBdUK7HCniLY^K%`#(S1W<=pXO?|j>ssdA+9-u7mM$D9GnCo<#gl{e>z
zu{Ds-V&mSC|1=Y8ic^wuGM|nFBB8(Yj}nB=XQQ;f$#3DOAACTLHd4YNH~jfZ67TwG
zVK>_if=d|@+vpaa=YyV}hV1>?f3TV*f*Q|&D_tNEZ)2SHm$^?%b5xTV#tdC58}_>F
z_T~eLI)ex)%}u2nbIbAvDx;#-5;SZ^v|ouU%8re$F+%ioM>;Uic%%3GUNH$G&t(&Y
zOrAND)gGr4XzepIGpDx|<PY4m)6p_EPMw{~SZ)ucmZr;~iwCqn6cg)n<r9o|zov0E
zLMsmnj8TT5V-KE&7l(8HpjzZgoK3NjajHfd-u<?2ymnen<NA4+#j3%!xjm&VeOzfQ
zi#29D_XRTefy`$Wi<zMzMq{yy?!7;scvsg`{Fd>=caDFi?`y6{hGf7s5=5;8g%K56
z2Ydx9J`%ejjL!@G;aMvP^KH9+jPw0i|IUKqCLZ2~owrR}2SaL6+y2`OUMFz9rSIka
z3YP6^VFZsxBikv%|J3US7$_Ave0@!}@t({m(x+mqB&v~rm11*K6n@@oFr){!fDC1;
zIR9Y<amvy9Wp12*!*OoC8?5kzBBtMOi$CyfEEMOs4aYc&7qV;ED92J;_`Tv{tgt+T
zzg7|Dx@o-BMhRBs=D$2ZuT=nr`jsqCPJR9(XVE=Gak!RJ_nlgJtO3IRo4P!aZCe;+
z9ET>u0LT*=&924wHj%&YxPhh>c{X>!`fHLqL(P9JD$j4wD#fn~X2s(7%FxGMR)sK%
zVo;Ai41Gewp9hQ;m#3BBV=_A(49Kk(OBLvSGxmeyh=0&nr}aL*i;zwoEjBK`K<;LN
zA}_>{0fxT27k|4OCvVi*PMY<LFZ~YlS5ECe^lxlDmr^>da$7&$*X|!|IQUcUye;mb
zD1AdprS9%NAb66RfGuJFp{9phQCV4=PL)p#CxxF%*RSdPEi2>GFE!0F^f;eeqP?hj
ztkcF>)S&2dT&<ujnNEXB=C`V9+B||?WK>jCbWG1IfAB7nRVjTDhjOX8@Y$+eS=#d1
z8ruIX!!Rjmn;qi)^aCE+qP#8%SZHZ7DWrTQPDH%E75T!-ekbL@Sa|C563ouVc|9Wy
zfwbZJ2dv7ubCs_j2|7$_ul^3A?`S9Uaq$`-ON)=yEx6?~lp0c6!5`ws{5$T${?U{6
z2VZ1<-oumI=^p4O7$Xwh4KfK+2JD6HroeA&rmu{zmK~SkR!!VG2_U-bPaZX%{(U9!
zHXhne-f8hRK4RGYsPx$9tIt_3-A&l^Ioje3H8BtDef%}y`SIf?rf)MVVQ#;eX7BgM
zwhoHymA4A8m69Qc1=T-icPTE;Qe^lg8P3gar5Na{j(%!rVEmnR&JEwT3Ej*pl4}GE
z(eR}qYNZ4$f-{a8Y#x97JXBc%j_+p2p6bQ`2IK8elY=YCvJjyG3x&+v+R(^r%Pgr5
z_-Ah?_l7C2OffB>$d1$Q=3TpsQh?WoXWOj>zVcdp=>P{YP&O0)%H&|{02`aj4f=`D
zEgmJc<ya~u(6I{r1c(>*bKn;??pO2PRh89ibIcU0rnz*o)QOkd)0~R+8M4{$?)Ius
zL{y|g4dGE!WJrRGzJcZ`Ks|fbpR<Wyc?!@6!1%8FT3%P<H*f>vZyshGT#x?}80B}b
z8vM$@?NnhvKUYun>tt=OuDa`ZvE9aUygTpF!p$uujAR3Pw(D}MC!3b`VNoZvFw8pw
zF3t3eM0DR2;GE1lg7jh}Xu^~X3_k4`rxw{hz}J$*MAWDKheNd8vD7Y5QkxGN-`sS7
z7GB6}`-aV|D0z8hL2?U<Q87IU{8I-eaoh$xWQIG`;(l^+^;~{uDnn<H#K7E~G6DdJ
z5h98Fx@H?9!x$Q!h}?MmC)ijsjd8Q(EvN2x#iFMOesMo<iI&Zt6Tzh4zo&L7C#`A<
zBjn@P2b|=k?T^k*tRDW`p%uXnJ5gD(n&mK1M3&{n8?Ug!LPL}DKF)cq%;b6T^LtEt
z>2c_LOXS7e<cI9>=bE<Jt|k63@%mu{lNb7l=y2xTnEbJN=wtx76vX=cdb^_B8hKhu
z)=|<Z&#?2e`lagbr*XnaXN{@KuvFw9adAyS%g-caaq>z^1+E@P9kV{X<2w3*wd+Oo
zQYn6iIDU2w)pCH+;B0JcyqU+Zch<>UZaEQ`3w9?fw@W^}?<T&cf;+}o&K;i6cRBE7
z<YJ+lzzi%;ee>~~`{rHIt9hm=&Rtd(1L^!)-8ZbXiCxwUtFv^A4XR&01y4l3w7dx{
z=1xAa)p`b@&bN$SkA4@{G|-B3ju&w&OL83y;d5DbJ;!{Fc)i^fQveSY-HNQV8_O9K
z*dAx$)a6pTQm~%-fPU>Rl$*H0t*)ubFqG5ZgKHUdLqn=(ZG=;0PLqNMRD}+p-U9;2
z?n>a~i*1jeJEe>ujLNLY?0LkBP*xral67Py$1lai#BSgKq-!KLV;VOT@16AIdY(Y#
z<dFqOW?h|ZSJ$)CU_67D?jO8GZQ4UESJ$=_rvmlSvQ7)g9m-nH7AmQj)&z-sGOQL$
zsIs1wm-o0bg&f@=3@d0ZV%N+f@1NN2SP8gm<4pyJs|X4=8Uw1F_BFBV>M+mqVq%f|
zSF%=K`G0ik!1bZFjvVL%Nf!_R1H3=vNXjsJ{m?E8;L>5|*XD6uoix-vAimS{(WJaO
zX;{pXboX<Yv&*hd+W+0a*TI?&{{JFaV~~gF=wz5{>r@`NdMH`x-Gael`=U{;QX<CM
zUuKNv<e9i)NC90Y6oYs*J=^5oZ8gq#A3r#&E?YJ|!n(+v{4B!wW-uHF$rWX>LHq=y
zb0W|5a~s^I{~AJXz4B>lof1#3h9&{zcPq=)=WLQY6*z7YqxYlanV7BwnudIj($!J_
zB{Y?}NGc?7DQ+Xe1`Li`j@?9}?ubwZ8Q;y^e{NIL*tFIsnI5-3uw&(TNa6@Ku7`6{
zyb`S9^%>CzmePnMw>XuF5D{e|J>+d;YkOcy%Ek|@;p>;pJEM`SRPrA#mm7E?kq4q2
z$sMW(mkW-Gy#YAI<AO}Lu2z_sEgaZA=)Cat2H=j9(S?_S<?mdrIGs8jCRPI050@9$
z%}aPC>CEQBsjh?PG)Z80ao(<!TsMDh42VV(z3@N2Jrvk&eC&RcYu~@Q2{<r*($4<`
zXjs7Rli;Sb{1c%00itsjwDeE7iUUXkJF!^s^Q%Y#^9&g5kgyXF^~>S$nI!47=sfRS
zNfrjyA<k7)W^w<{`^@|@&CDA4Kf9h)OtGU8mutOCDPwB$JRF&yFWZ@$Z@ap>728*I
z2jb72%zhpc=-QM^QQz1UA^(DdvxWxl#Iasq)9AMu+g~EbLUKpRP34OW<AC8N-ytLH
z_ML8mV||wHae8Y={$7OqyScf~<;}=vzx&9l#{|*wJD>mQ9mUnd!%72*7McWxLROXt
zdHL_0EW0#k;(SYjf2Yf?QG;8Zyc3K=v$HI{+*2p#0JwM?#vs4)Y0$~XZzLHi!#kF-
z&_BJwekqB1PwE`)jSut7fvs#{Q#S@FP^__b2W2A$hll_E;!w8)mZiA@ZCZzf!_mtA
za+&{kZ!m3ZIa+*3v|k^2?PopvBF*1Z;bK+aaNd{Ll4**T(Rpr6Z}Wx`qv!`vDXhXm
z(TW8b?^}gx#^0){t2X70e~F>n5CEcJ{Dd(Ew@h*|2%%|c$j1booE@)$bUd+_0py_p
zZAyRXX7u3RCLXUT9VpS0MYP#Zx5g{o=y(A%NJYC4ne=(GB{)HAG2aAP##e4u$~A8T
zA_M`OtdTv0+BfnYv|(qT<gsBv(GG_Fkk%U*p7}b^xD8yW><4&oX&BHR$-A+4cS-_g
zIfvqY+lBvKoOnni$ow3Le50_gT&KYxY5KhU;U*Q0{~0*Mzy>LFDCEmC`RJ&nt<7aO
zTC{XDHkdG&D#W&;6xp_k0315ayr!5|1lxppETrzgikybhYuS*_e)+a(Z)A@!dDdRN
zu@Fh@?jlRafen9FwIGk5pWh_xopQ36v~h9OR048K@ORMZ9g@<jjS6EXss(TJLOecA
z(HR=YZa|W=<v;lXct&fT>AmgJIYwy+`AW>SE}ORkkv8|lKQ^$nThDB0cy^YpeBqy(
zOOsGihoL>D_-f|i>JTJ#WX#Vc0l5*^8+dA|^%&M?0~)y>^%w4K-h{)aC4wF$j2@qF
zDv=pmj1e$t=||1E7;PKF(+w)R#rk=O$=m15uggy&?f}xsRv~Hgji7n=t|XlxbfVln
zDnEa1xKArvH8M)VE4}Bdfb?=t0(W;TcN{6FZYQ<JEc5#4p+B)2jyN-O*4}Jcwbt2V
zbd&-ZQ5tgIY8nfo?*VnmPb|6)w9nNfPWYYsgsrk-Z}k~^%n&;NPpx;r0zaQoAu(JQ
z5R0`RuK;W6?3=al_949VXqF(ezFsbt$4_oWBf~-vJlDp}0!!r@CW2z%K5VKa38>S0
zjxENnuBFA9m1W^QvC=!`(2){<fS*r88Dpek>mNgeHkb2mfEX87)4_?70=)Uzg{j}P
znsn-Gfrf^1R?KXz?xB%69um6nHzpbCOxQv9aw!BjD)ndh%J{N!it{I9!eYea(dw;6
z0nn=|g;M&&kLZc-JlD))QB4Z}D##y|V&rEQg!X55>M+3EUX3{H{zf<wPwEx>M2d_a
z^iVJlu{baElO2A|R@E;nQ$e|_MRDm5#1^-N^J3v1s{>aJ{-PL@bT=MUuIbp|%A5Bg
zw&Rq0X0WDmD&cddMR;@OWBLR!9;VIYM&~wWa7QAi%Nf>g+Gl+z238YbDt7(uYyB|9
z=BS*9?}E6ZC-XH=4!6g;?-vg$g@4M3@w+o)6^-2MjxzVL3-didl4TX-_>+J+y}|(<
z_LjAopYMmAi>>{$`Hu7T1G?qe6%XRp_#J14PP5{QuJf-)e>E)jN{RMuYwl++K_!U+
zYx4GY*YH4@WXm{e#U#bwCkO5~LGJ-2n_WFhnNUyhVc7`5z=8sH15evUOTQdTbkgS_
zGpa49XX}~BEo>H>{?6PyH>+vrbO#o213(~g|DA4jXe<tmpI3cTf1K(=&iiYpuyi}&
z`|c%7X-WN}j^A7B?(gk<n&R42GQ}pwEdtD?(^Se=BKnerbDootFLnncbD}PPh}kEW
zq9q4UJT6|c8hrJV?qS#4lLF)_3sOvnkfzgv+HKoLtNHsjP*qrE`Py%Dc>NKunl%(b
z?zEVn9=u}I%Zb~b@tBLsN%7|J)1g}ip%xTpyheglHMW$|ev>|C%Rq6<w{UG8-H#+>
z3Sy2I5P_2fhscf9o$f7DcLyE_-sa|9wO(cC%AG{Iv%bRcDH?FBCpdLNnj$+<6kO!$
z;noe{RUaCTX3K_QN7aroME;)OyxiPyxAjr-t?g>U0jE;K{lYxWqI2XRT<JL?NI%)x
zX6{?46hwOUHmnzL*a6>Y^24TKSWtC;?9WTz83^^BEtF`F4a+~d*Sl=$MSX&{i<p-t
zvi7ub&nOW&w`h>*sGaA#+xj>*%&tOO&m+!$wn2DtP81Ad3==<%?@6vtr1IVQAzOdy
z*yya&)TQsW!Uvyhl5J-IF_OEiCm(*YZm|K3s#Pj?%+TgS74jMue|MOg`7d1DxN4{y
zDT3@Vuu!sT-;VKk36E}J?fB^xv-i8ZaBy%oag#WEtT%<<K&{^Q<fGJ?J=igJH1@#+
z80ME%QK9|Re*6*JmsH)JuT&AVsY7Y7ELT*2tYXe#8ki?4`LNerY_B`p6p}my$!BF5
z06=zM0`qLwI`QdPTI0iBdvGjq2Zz&S#Qh~!<FAEZZVl6~ylRp?wVyT-Ijk`|Fq`(+
zKGzS+(*3GnR#Ptbl!P>7dMA*a4{R#~*=dJ6?@K3&X*z!dWY_WDyos@3<xPt>h0P$^
zSteFm35^HVi@ekq5w^8ws}JP5>YNsy>6g4N);3a#ZJ_6EIySYP=;vqkt&k-$o&DXW
zquGQO7)c($($(gcs?B3-6ZJeF<BF>HKQTEuWWQf27(ZD#MStk{m|e!rC(ppgh();Y
zRlS7p`g&>xhvJd}t6I3x7xmi7)rCC)k{D?Ws0k3A2Qf2XVx41c7tXK?iv4E#6j~5R
zpi09Es)b}Yd|h7NOh@53XhLEJOlwgogz1I}Xy@J#=;s_`29v}`E-wo>PfM9CWrhuR
zC97?Q3+lN}I?KZ<D|CF$PY<WIOJY*V+*3fD`Db}yv**jHc8%)hU4ReE^Wc&1`Q$H)
zY-?N+<+R3fJ)U~UEC}+~r?sq186VS;woFIv#)CnnQ&^m_*DqPs*>N2&c0mDlIe6zg
zKyQxUO_OU2r8&E)Ip1Ve-L)!L*@5Y!+npCY()EQ14zXjiu8vg|Z2(jNQTIN$@`JPa
zGr+gl05VDAq~;fr_=X2(7JKtLXB~PH0;;He#YFqrQP9gO{m)KpT#M~tg33iz1!2o4
zHWbB#_$TnFHU&MkXVJ8mn*SZ(>fZmjbXN$9NHp6Eo*L~IR7>WV8@n0PFfX_qOk!>4
z5EoQS==>*y_4aCZ+pE2y%%q<dzxEOn$3E_vp>HFJcs|fml`T?^4o6Yx)6zo0Q4ISc
z<6dvUSl19Z-v7)pcQ&3Wo8o6P@6Znd4)~aHD#LmO#_|UOqtP~S`R;QmSeiN!5Yx&4
zTK=vqA6|Ylrq5`{m$<$-?q2b|1lsS>eMQp}rQ22@0k$OvPy+j+ZTHfF((G_b*u=uh
znx-H&@k0~L*_RY1PIp##G2Jwp)>pYtpL-9yaYN-NNmmN5)I6^1PgZlF|L~?G+8*$i
z;sAe%hhUkwLt%c!|5YJO)^}9H%zUlYN!9DvjTQc8S;MWaUkz2(RXmbugiEI`i4HFQ
zxLEt+<`UJvdNV}9KGGDim%*z{BJhwQ>hGN{>00Dk+eles?_}buhv+E565G?R^Yc9$
z;)k;H+ed<(?7?ckZ^nEN&melpd;}U3>7hA%O6$@yplJ+xyrTTn-a7IYjpw74^WF{5
z9_Ywdx!PPQ`itFw^98CNs;DQpbi`u7EzDO63-kpBNaQYU$8~SU`ODL4?~!j3vasHa
z>Cx3DZ8h}zbzwPWZu2T))Xnwcoan`5yZxV~wD8U!PsvFJzf-LOem5El(0M$__?m8K
z`Qy{t-5)H%i+{aOx~$qd;etyrvOlTSNF@qNN<zgao`_6^sHI^o2|>@m7Q3d?iBe51
zeFnklvDUQkJ5!O=SU}A5@Fw4ax_tUTZfiyHr#6vI|Avo9zJ)@b1uGpc{&V@0^F3O-
zrSZVFE-RwE7||5_SdX#si<!>vA%7d$f@u%&gb&9vEC5`nlN45`Iq7ldf-te`BYy2x
zogHFht9~2WfN1MUeh|@5CHB&Xx$$D+8x*eB%{W3c5$a$`4d>4=Pini=_YqF-)*~LD
zgc~F|5>>;kj!VGT*(up{X{>}9d5C3JSxyUY{ilgaMtB^sf?1y^?1?yRv|&m-wc4}Z
zc6mLiupF+Y13B4FzENZERc3GR%G5~^Z4?EG=7@m`=xm*%MT%Z7U);Hn5#Fs+<PXX@
z*CuX3upK>pgVwIb3Kb2eZ=R;4|6x#Ix_58=qe25~3U^4B+mcm?ow_OVX2gq^k0T-5
zh3nzxN4XJ=mO34w$#3-Qx=xG|wo+)k_BwOmTB#xmM5?Bx@ePNQ>p?6lDfRMw5@*Ub
zHa0QkeG+nC6B7xCCMTTM7Bb*9H|!3i==~urwk_Xf%fxRJJZ`<&1*BF(R8-GG>Sz$o
z;(Su60wI@H=(r3#YH7ucb%@Pk*YZFNIpxPZ%ej~LNv~rx7TMt4@cIYV$x5&P7{OT~
z*k5pcGyNbqP)&SOS-;FYq_K;9Lp-}qd8@%Uo5YSRnXw7Qx5!Q|R7wGyd(uZ65pND3
zEd@!IV85(PiRW|R$`0!(jtJVd06dWsFKUA??G?5ow!&+<jOG{TWL=A4;t2y&d@gOu
zwQKpD%=bb*;Jc<kP7@jgTC<G5$LSN^t(B!z-v35c1>Y1h{|qR`OoE3Jj8Q2c07$ch
z$Eg=KwjRhtbNWrgxjBV&l>bp}u=o3yjg8t`THLUU^O1C#HJzx_yx0-%N^#@jmj!0j
zLa=Ar;v;F{w%SfCK%n_L6P?sk{JMy(npV$BPi8k4t1<N4YFH_k%RdzfDCq8kVE-KD
z1g@MU?=pxoLW{c~*k|O>S0&#FBvxS5Z#1GeatX^mWCzY;MC7s%ltevHarR<bH{nUP
za-W2yvJoMT=gzn9CzOT#Uxk8WY)g~{$`F42juz@2RLF50Kx+eF!uY-!7(0mcc-L6h
zb`B=rQ9H@@8(}8hl6|C!1t__6v$nNjePj0-MPAb6GKPQvHQ=^=2g9{n8nI4;7aWnV
z)jP{wXlXmY2s9iY;GL$0!<xJbQJ7+au@QXq0C)u$G~`Uva33?4|Ip1CUyn`I2@l8j
zRHY?d%voi6pBXEEJl65kZbYFZqZ)h0(P(yu27nIB3Asx*f0P7+Qw<M(1i~)%PrUO!
zEFI~oHI}*#N65WkPtU5zN6v}6r8C{?)<#@ve|-AzIav1l+`H{E%~@Es>Ye@)4H~q{
zyPT=yiPf6<Q2LR0McZR61oIq_g6Q8h^Fx#`9(Ye9f6HnhOwr~89{|s^*t|k1<)Ow%
zzc2RS%?PbKg;DxZj9!n`GYksoWE<W6ju+%YPOVd-faAEg6c#qRzS~VXCX^uHg^o;O
zf$4HZmEORrCCKGP8KHhWl!^2GHaj52JT*C~g`<^W!28lQB~PPNOEe*#T!<|*|1#)N
zmxm5Mqe(JjB$k0r(M)mWP)SG~CWtDkie$<<`t&4VQh^&0#_W9uC&P-jEG5oMZ4)Ml
zWA$boVy05Z|44?K1F;3}`2E+v<$WL<UnEtr_$ktz=ZcRaYDT}k`T4xtLN4*l=jm`-
zc=d&SY_#pgiOYsRjG^GE>$0|o`=#L|nIDae`nvQ!Kmn5!8woFx4GH?RG?f!7SgU6e
z<+mRF#@nm7u{?q<yF}&301$ryX)YE*01lPaoUg7fipoB!Uy463sGL%UGkRHfw`;;h
zolPo@jC35)vfj)Mcvg-!cwKjeFa_*?5TS-axl2T_-*gsURN8}giX_-FbtMGy_W0N`
zsZ|aE>?-FUT#DjfxKw=@_yQ$<VxjdEb_cYtJE2)O0^V$k-;ik3JWP4T{%Tjk%THgf
z>JORgO!{Jb2kRjXb6C?P!`N(N0_>J>MUX*1%v@*MsOcK5jNG(9<V;PCIi3KX@xT1>
zO50cgU<`}LjrTx9+WPnFCU}K&mrhteyUnCU+J<+#gi#g{d7lK=PoDUMBQ_`?S&981
z9q;Nm-b)G!>IuK{!v7V7W#t)~Fd2}_&e9^|cxbo&mz13&B5X^CyPWksJjKf3_WI*N
zO2|o!0-u+mJjAct+sj*lz@Nz39z!tIKVQ+2H?@vG9Dog?7gtwK4=a68yQgkNRyWV+
z=hFgCe^1|-TpwSn+#t9pF{1Iw+DSbJ`NBAAkxEerDSEYr9RU+D=3A6W-+{e&jM-wK
z6iN;K4CtU2n11S=cC$l6uUt=M3<4Enb#*$98Se~U<eeC@0H^<bj>-ma*wb-lDP^9I
z8vt~`NdMZ?&W7nu-($4z(%j}SGx&&y;mp<;$<4_fxe~WET{*Cngl~A*uwloyHBY3p
zIqPC^@bjc>6>6ot)yO%4lS;`;u%gpZ7-k=tNHbkycf$o8t94`ljd-IUsGjti0Qm=8
zkoBAr_V<9%nNquKD*)#nwQ<}t<y5soDoa^HORq_j41_b%kn;*Iums=&!Rk8}1WC<@
zRW!AR1T-H%$|TWf58lr9)|I2yyR?@k>hk=ynNk?gXMmqdqM2&O82(&xrq9dFqP{1Q
zB4QDwnauotH{YS3H=?h1N)vBzMT;{yUU)ZS<n#@ovM(U6`#`jcc8_bM1FB=E2kt~;
zL2pB6vUNLVV8{|zTjLAyRUb}SbM?-z`I@z7dlUBtQ~HHZVaAqXS)U)60Ql=Phh*4i
z1A`!EoR{;Bm7?(CBZu%V>r&r+7c;q524S`(<1I_|j=PvEbN~kO0dS2NKbyY|*vHbF
zt&pvH;?cc(YorUQ-{)&Gl^boV-eE?RJ8<iL!&+>mZ08GfVz@>X@LAndo<WKKk^y#r
z2XMXpOm@>x8wfe_ZWd?<>gKZx8@_F7zCf!f8h{42E6J$QI*%`QjMVi)j%@O|`MyvU
z_jNU*Qw5c&vV3753ftdNs;438>;BO}0;pxD7r+1}>SfZ+Hc(pBoA<5=rX`pv73bo5
z7getj{D_&`7@=M&a_7>O7eIqJl@H;BNs>dOJhjVn>r95aTyvmu|8a~QVr_`UWVIQ@
zXZ@u{y9rwTG_U~BWaWd51}Mq#BK0}=9yJj1Q|*1@kh^_nCPz^l0;sAk<E`0w`4scF
zz+^vH0B*DVCl@hnXW|d-XG`fzX^~dS;nw4`#YL0GgsOQgF~wb}mmp7iKqD;3==);}
z+2#za;)XGnYEbF(wvp)0+V*V<HTJl*q>IkSnu7V-jz0F~xxVNq46_)`i>rjQdC=iN
z+|M~|wl`wR!)Q3QSc6>n)B~TTylH*tr!Fs0bpLX$7S~A>Qrv%%D4A}e?d8m+6`_~h
zw$F2P_mnu1e{yDdY=>mqQLRlG7DZ1V49)a!lq{v)%xGA9%g$Got$ktH(>)olXvqRQ
zPRJ`zl=kaYv`||CAjx~NUHC<E6P3Zn>#jaE+#moSR~O<M5fHfdMQH!I#vUcgoRS0Q
z3UW|`2#Qx|&}uvX=y4X_qO%KBOxYQrK;JDJocm(piP-clcI1*(_Tcc?=g2n{Ip+)u
zKxWTu%cNT9Ux4R&$UlB#J0$G(387CBVFCt>-YaP4uOMtJ4!}#olGx6A3!^W5%Jk3r
zdUlA`^QGu@z{(+q^?qAwbCC|*;w^Q|_m6vd^?5T=hsV%RY|i=cB|6XOavG>5d<lCF
z6yK^Awj<to*UY@q7g-*f%vKE=;R2mcwV8DLb_(BzV>?V|uW#8zrW(zG4t|t~MgXEh
z>{N@!>*L}Q|IibALN9!ZWU8u<I&<z6#ncWlNPFi>vFZ?K49=kpSHo>4&^aAXG!m#(
z_+0<)vE*xH4c<L=TJAB>u>aK2;B!LFbiZ$cQ<*p4YX_?4ul5tQW~Dn<<ep!O0SFC<
ze<RJ4PQ(8Btz>viZEzhq=<|FJvSN)kzgl++I@g@m0Bt12D(E)cS<rnJNL>l*3cdyx
zp`XVL!uM{ere$aADk`1b3QOX1i|j!jo6gJwfI+m)jVA7lSlI5w?&+a$un`AG<JVyn
z2koW3T*nGRLzAY_w3smb&y=D@UEQ1qYsr3x<a}1Mv*|N>k)Hbo&P%9~vho78F2?81
zzmXiZ8x1!@-hE`|Ti@4w>isSDyS9<%0<+&-N(#+HX~smc@-P7=HWov(mOrMAb^a<X
zbZ>7@+rqN<>$iS67JuD)GgDdFyHd5s2R$ps&!R#j<y)){TsseJ>BVXN7%zg+3yB6l
z1HZ^d1ahkz75Ob31lsf^O?2wBr+PI-kMzW)#AZc~*BX7~%(m|Ku@--PD|661Q>~jd
zCg3tFY6ds~G<J_Zev$+d?4yZ;v^`t~RfdCsQDt>Eo}cr7)jnOy+`Cc-Jk2dlMqsHf
zS|Mm?XsC9w-uD+Vm)Na@I4%EKBsvr7lmX~SN`v=&^pD<2%C+|mkBV+Lhzfu$mqSIj
z6`7U#St}#|kHZFd53$Wofm8=4E7#$5>yD4!rw<kyOy%b2ob9(ovOfi&<$!J+&+|z*
zq0BDvL$=>jQ=ER20YxJt=W|f~x&!Lfft&6#KHE4qqOxOkuF~7Fl$2u%N_I-N372CP
zVBMxzMdy>DWbp!ap~IuYSyb7o$y}_-uIW8V!ms=>UWkv^JHu^j7eni15YtRK%hXfm
zzdl-AbLmomto5$zzQ!>fL9{jPk3<PSOW8;KNx}H0y2VE9`FdBP6$s3n_GN?!_De}Z
z4E?!B3W`dn!Q34|-%>(sCV#UfR@-+~CAgu@>c2?5&{tTt81e${krZ`lSIO;37yg;S
z!7}OLDTTEkvqf7)uS6fAH~CnmdB<eViH%7oW>T&ipt#V4O%?H+Ofa?*!M<S+7p5nR
zP9XxaUev>%<mbOkoa3Ps1pf{sudj|2x(FJig-}9TC<$X2u4$UzJ_k)MAMN+=AlCm;
zSu(+Uj~l-rm9;EXJ{aph7~%|E&UwucfeV9W_lNhqlM*$a26D;((SdEBq_Se^Ki#Qs
zjep32aMsYLa%f8ia)`a#(*IpjXN0X$F1xW&<*Px}{+Zna9&TzF*yf>dkH}`u)@>&5
zS{nFol2abl>foupMe+p0{@aJrKzM*aL}h-1l-XOq<W*5Qr)_qz(O`c7<R4xepwq#d
zNu6k2bD0k8C<g%S6lf>S^%r}rl5|lZ183Q*7Em!DJ-kF7zj2+hrSk{m{G^=O>i?(R
zuTpen|10|Te=`F9_c8(i*aYAke23w*QSZ<vcy=^t*0<Y-gpzYVXZ~>v4wBg9-%B>A
zR@xtgm+f}OS#<9gpVfcM15hy%Lx9OJuOf+wWKtKm%kMcGWaslnIYRPv``ji_%RYO3
zwBU$XQahKvKx#mIq2GYuK4{Q{66*oBHgAsv2x<G;+qh>i*XS#NA_vWqm%q-G#=um<
z`tf(WO6Hj<_IHBZl!tHQHyqchzLsgoUZ!1!0P$D-6lqL{GrXCZCUz@I=>{jIMJw8Q
z7DCg&D%ehNR3&FL|0KjOB)%eN=e)Fd3V_4ND$vOpj<vSQR6n#FHyd5$rs7`S*^Q!3
ztnLD0-AEY*6H$NG@AhPGZv$bB9#)oYC0_8edtYRkM`xHz`{FhDhSod#pXiLfJ4Q!v
ze5sH%Qo9Uxn)OJP{w5A3h)W|Ca!Sd3csS_0LTc^K3g3B+w8b_7EZ(htBxaq)Q}d}9
z>MfP$$$MQ7>gcB3ft95~&@310^cfj@(TD7+YC*@yIDcmqTVcQK?|dAzCnHCLdaL^i
z1-@0c{EKgv64n3Q+`Jp|j`=batYR)_b-H4+&|Q;ZKE5=d#xw8WJ;Sqf=e|S%yK_=c
zRh6sqcn4TLs2kZT^LS?q`m4XcU@cvKKn|Nj4p%icxo2zlCoza7KJD)NvaMvUTv$=~
zlGp4gnfF^hz751926bB%tXJ*o0FEd<+hDhNsXkBz$=Dc1sR;dTxi>Y+AUbQn4!_^N
zD%EpX9k(tOU6-t7C|0vyS&*f2G5ZOhr;DT8qMJY|)Apr*T2`0(z#}7(ioJ&_F;Oh?
z{e5>DZ{Ha5{Yz>5utw2X^(DMqJPFsF&3JT~zj4q8MA`~un0i5M-!8GeOD4&!k(UM<
z+J>1P%<bred5D#gsSS|e`a==@5GKVGtGhG=p6qP@3*)^(pslUVlu=3d&3D6kBHK^R
zqK%a(uH&z**E*44m%+t0OTy9n{!Di-Bxjs_ZrL-Dxj7!*iw&Z(wa{RTmixRNYg4qb
z6FJnp#pm0VFN-@=$_|^_vvx~YvJ}=G5}bS5%@Nc@op!J$qvaHYjn_qtAiS2=ko{K{
zbJ^BH&T|~`#1t<b%T(X*O+0QTM3!GGC07!*QO{Vorj?#$<S#|+^Ne<h$i5tVvS#t(
zWcya88(f53z^n{nXHz`{VrTwV_Sv3=77}jndrG?M=%7}Z>b}u#akQ_h%5Bwifav^~
zxV5~kbn_$Py>CjtBhrU=%{#NPtsl{GTAO~jb9Q1n&N!6i7E<7^3NQiH?tzX@^LQs>
z!)T)_0~U{_l)NY1E$yc^d!o!IcY`gzQ`R{BhR=<7zi{s;fFYxD!@BbFxb8(Tf@>8i
zF8053oovn>&_qMe^5C6vG+eJlUs_C2Zg&k_oW81J${yW>^sSh;Dadtv^`YfgF2+g=
zdsY5|M&C8U)zL0CNcurnFwCdP#M>f^rO!&5L5uS3a*p>z(q9{;KR0{(w-MCSb4m6#
z0M$Q$9TOo8;nW(5_68KeY<T^!4ft4FrEqMhRrKs4Fx~gh3p_nNo9e{F;V}<KhrW)C
z{<fByi9;PJWovDVw#Q}MxvwoRx={w&YCR|r%Cd?n&rP>bQ<M))NqC40)M7l$v=YDq
z*eU8}_yWFvnlbIZkd3sIb5C+7iZ@wr)^l(djM+6ZhIPl1#r;jt>;KBIxh}Z6-wm#n
zGq{jlOUs&UiJ+cz$S-^e?)y7qrSL{U!PdZ;g|A9A^;LoRL#liVsuB{53D(-}=G3)^
zYjaLfWtXsD5($v<Qc&5$&kUe=_}J@=l`_Cvm&I@L0BN^3`^6)>n8F(scs^2?MS4-E
zMp0>Hl}&qrM_zwKGua${)|qP)bx{4$ds0;MWZ2)=|6F%C${40C^3*}4P%Sm@tC+?b
zsIK_C&tIDfq?A*1)6A-uMJrvTYC$9|7Ve|bdn*`NcW`t2w`pBRi1rTM=B%1rY7cvq
z%c<PYc`JfF>w%nI!6UzqcKyWBvW%+*2d=v>s#|Blv4?G6$ft&%6^;gKN))M<ZHls$
z_LAB*WLd#>@81loSnb%trF--OV7>>cya)`iz!az}2PS8{$o<|nKeM>{0<j5|`pmJ>
zOeb5YwK@!QBa&eLLIldtwNUm!j@fwAMLEoUe)p6tGEkNet4c-QT@C~K9pLzyTbM9o
z)#Bx*kPBoJOFuX`%bQZzM(#fFHgy(F9tR=}WguvZmt?@h(#08;`#ZdHJkq{AEI0p_
zFD-M;PowxnL3Pw{V58W5Gei$PKo))h@Q6w|WWBKsdHxGMYj03f42>P804$9OG)R5r
zjj;g?BW288;U|Ev1|S&#>Iqz6rG575)4vmB*Ud`+XU(iXtnu18OA7$36He>O@9XBT
z)qs#Dh1Tb~=1vk5z;E$C^nbf<-kc(NnM|qT`uT4j0nNX;-j5-H@?3?uk;Z@%O0J{B
zEj}|dI5F~LyEuzK3-l(uk4(o5O>es@S)x+4@FT0PE}q##m$y~?SkAYzWugdKwv8*L
zJ+W|lVbt8ur{8u*YF{fROojo8vP{BRCVT7N1P~i9b4n*e9_ot!^e3?qe;fjsV078i
z_;v(6Oll=Ii}V<+X@%q=oiquDhfi%BC;GOx)5=YbNdc~AbkNj#0pJi<ylJSRA@tv}
zRJwvH+g^5!u6>toZUIU=mKNGF{sKO*KH3L{CyoEZ8$@R{u@dgyTyeTyxA`O>262g9
zLR)q8HZXEY(((VCr$V!o&`xs_uq$u+B9pH6O!D<RU|nS&Cbgi!C!j-s3$P7+`jKe-
z1pUqD5&+M^4RjH@-ZdxH0HQy_Rtl=PBr^Z6km81gUK2e)3xPix1IVDxd)|CaikoM>
zH6qu%0^Gj@_;o%R)io(D=RA)c>tC$<xoc9KN3ZgG04NOrW`{xi;O<V@6)CRZk`%{V
z&1?aX;#{stagqN`iu-R;-2Z1taSpLCfa1e2IhNSn_3WvOsRxjktCmz#t8O(-4!tcJ
zv0WAk!eV3w>QUtt>UV@VK4{F*1EdC%MSzr7hMPO5gAgr%cmOb38o+O6X|{U17J`O$
zw()lA*BhT^w4MM8qBFH{-6fl~4WS}~dAEb3dD~I<f$mLhpnV#lTIH1r-uVaYxYQGL
z#Oi<^3V13uaus|x6Jd#+ZUyW1NK<E1KT<e6L8ja*q?rJJajj}yib<S}6zD$+8%+w%
zk6^x3J7GYYVOPUUL_g*k_Tzjchm&TzB^rMQ%*^Ki6FM{tI=k*AgN7CAQxdZ0N${Jm
zzQ^RWg`l*DwmuToUtD?BCDxzK;w~xC$@`}=Mm!p0q+|umFRi1<#qAsafU<6X4H%cK
z7P*GqdxKLO@0A`&LL(z1p#?8w>A+Z0r)N|HK|{Eje*3#ev;B~u{tj2W)Sr$H4lytE
zdLoQv_R8DiiC}}8{&$p|+E#NqD{O`;`fH9l;ILzzo5)NB!ZIh=xp~{?RZR^Io|%~$
z=icoLHZtGy0`k>Jf@;+IoTk18dpnJft8)y>WwXw0?+7-R+fVDeBL_DN_SM#=8=9D4
z7o73^^yH~yc<EwWS6q{4%E7@w#|3H+Kd-nr?zyp$5{(ZM&uclsihs`x6SLs*rh#%S
zh9Ws#wFvD~UqjHeD~kLk->Xs{jf<qO9sMch63DKMm_vN{&&E%mK2_3L1Oa@l2QRE=
z23{8b38fZ2h|HJ#Gwsq8&f&%o@jEb#fg5nn4*L{H|B~pCD!90m508wjp5&iYRXr6?
zB_GP^X1#O%f}`L13C9Z8>09K+$_1yb5xk&l;J12ljz;&Ir!ww1srt${EiDODlaSZ>
z2e&qva~E4@A3yfg%Gjs3&A(en+hR}CKXRNF5+9e3wOsBY-|ONmUi*YDzeH&vVyC^v
zX3E^wtIYXMb}c~nNwLr8&&XESi|S5=Kev)#Tt5qd0$@BuG&M=+ms=L5w0rO(V`-9*
zD59~oMsbb>)Ge;zAz0HAVeQfE8GLH)H0UX=l?*_^W!@C^SerU<B_Qh};BAV(Dt(b`
zCWmfZkgqAvF1>C3KmZgS8Gx3D`o(fCl3*(|r)nbv>2Ik7#1F^slS_SmnS&KOJ8L9R
zp!R0dJ^ZEM^b=H|Se!LfS&SymW7bb??m1#MQ>}hmLT#NoU-gOr9`H}K_In@f!>@A}
zYlj594RmXx1H*Y*2Pv`Yxm+V!<?wUvP|}+G{EI`wjliiAYU*U~*_as8JhLYP4#QpQ
zOt+|<ByFkrFU@ivVEcp?<#~9Bacxp>=N3>F#x1?OA3BB=hZ^$vdAvJ$qk2~xul>vB
zc7j4-$>X8fQU5dfMw<NWy*<?3U+9E)ZPR&QeVLz6IZz{`TxfP#!O~0)g!)!goxgCf
zqF7ZFV@!e4<UE>q;riYIAFIel=3rZ*l~D31uXWbSj9&@n+kJ0wd=zYK@_G{M6H{8M
z9O_eG8sgIZ5=RZck`ykVK=2x<N^b)gPC=x&ak5LIXMV<gQ|p{9*}Zyiz3Tf%$|15o
z63ZVs{TV%`-^4W~HO#nf`yH)!uaRyPL*THbU{K8qpPHjTCZG5{whT`u^<dvYe+%yU
zBRE&Ob5u_=o96cWk3h|5^xWYms3Vk||8G6<m*u`EU7vm9cwT)i?YXSE3*bk)G(tBe
z;`~^*cn1b^mA~i4b!KEgXf^BGK;812^R>&XsNRnDm|OSXsj8}y-RAZ>+w@q9H2_C_
zp%k<s+RMM?`+Pf(yr^WcV*3XZSU;~~EoN(NP2<#&Q?D?RHO2R3w_LY!B2ePIRJVTd
z)w@8UP^;Lfz{+~Gc$*fa$jyK0TnRC%ql+Fcj9**rF_IDC4UbaH83`|fS@rWf-=CdJ
zK6SSbU(K-WDyK}1lp7VZwz+_YT)a7?zM)qO(f1?fJ?~{5Ba6rKewkM5HMXgwruXhA
z<7=&e?T&G5bB_q|cAoGL?slsoh%iNaQ)ME{w|}1z-*45;=>xcF)_`t)RvjQ0=09GM
zaWEyHe|*1d-D0tiMSreNw@ptu+AMpMKI7-e;N%E{8E0F!#!#rrh_jhblvvrQ5m<$T
z-}2I3#Nq`=&QK7}#tr*5>qt?(*=(x{`!mtge&LLjRS-ycpP#R^!DLM8SmXlDoI|^t
z_5{Bf%@QBQlRp%{k>PFP?kdn-p)q8!-}lA4xObBi#SCtQF~zG715_bmNxEWSr@Y{V
zmdjwUztWwro+Yk_?uuMAQSjb#FcFSc;LFQsU`Y!wM5%R{y*?9%9tg?h7PF%mIZE1C
z9`1PZkURiHx3r`EIaTu}!+yMkelfh$p)+PJ&<$N`&a;ekse5`_NuiflTB`BXVKUl9
zLf738C?40$_WSihrE&6DwYU*g7c--PW~v`60^+OJyBgY+8w?rQ%#v5oo}K1%CYu05
z_Sc=eI#XjP!KXRMgB(zQvk;oUw95>VFZ5X&XkS`4zOb|v9!mg9@_mI-HD++$v2&fG
znm=Q;mS*0tprD(zC(E#$!2<ew4``g!uaXpW*1+_o>~`<wZ-b2+P2Yu9tUqG@)z)7G
z+V3gfYX=!|o^9-#OnA)sxo<9&)^7GrA-t87gfvvec0I#lQvRShg?$7MQE(!=S7QPr
zBlkjNsf0OBCd_)!)~?oLdofh}CAxawYxl$o&I&pyHBxsgSj{i+w-Q>`(5BqjC4(K;
ziXn#0%9apu@a04lkIM>z$SaLc2r;a+WL!PV)i1ICPV53X<UHdxb_Xl|k;&U>pZ?^%
z4o0FbvL>g)w9Qq{Y~_UX94(s>S9A?@_r*35Eb734NZd0u$!nSXv{c7Wb}SU2<`nxM
z!I)!HSoeS2!yTNn5@53nUrP*w9YGHHHzM%fw`dmneQeCF)G<vyOnpNK^6@v{U$82c
z*_tsRqz_M$IL}k-vfP}AnL}+Ib?WH*8=WU|!Wn5N+&;+?0!%f~IY{_Vu9-P1#iuI_
za@_d&{AQ>*H3w(Z-1(s(pWo>d{VMy~rzAfM$yaaj<Q8M74P&J)k$kaj5w-4~s&*g~
z_~>z3^@+FcQG)U?L>ZS2N_XxT`i>Er50*g9o}KtU-iTP;T8-5uZFQX>G9BinK4E`9
zo#T59H=^*^o*1ssPz9aadoBEmJ9tY2JbXa<!3#timFsV)_gCO~3cSt>9=wAqa$!Xy
zV+B^PhY$Khx4TwUB~%V4wlRcPhf;^em@l?__|@WOJW^TL=>P0D9W$?P{8e@=L%RI>
zNP7A>Qncv;b>>Z1^*3qXVy4cma|C(2Mlu{F(Oy?yLo*>XxBuqcY3Kwf_Z!M0bk0Eu
z3q+)fclsX3$Z>9xc4hg1PL{Mz6UC0^F48t&P9TkpS42r4hf;D9zBPJjYY$&!HTh3_
zX4ucvsWka4R9kF}m!><CQ9CuGPPd4}k+eX{Z4;_*!39H|Ql6s7IbB}J6TSPV-oEdv
zQpAG)M{|`vMOwTkf`X#DiM~j`H+!eww(y1CSkd7vAD(J9nJXonb*4(WsAlekH*fiD
z@Z`r?z|K!;*Jet-vFn_M5_u~gPTDo4$U2OdW-wQt0}qlIb|gZ;Gz)bdha3_17xQnw
zVNt|@tAGkn>eIEBJEGb^U243&!tJrV#ZBNj0YOu#eupPgfUTQExRH{QmIdn?qw#FI
zT&y5~_lWatc9v}14wbUkrBu&@>WA%^=4*Dx75`pYmkk@Gxe1XqGTsY1e6&esK9WDe
zXV&I=@(T`9$=cl5h+e6nGu=uOPT$jR6y+5=s%U_@71&!((^)0^sd8*OTzCZcd==J`
zI4li>5B>t(8{y~QF?gESI{EoDNJUBMleQhv@SIOS^=jhHUMtGa&J$%8r}9&43FHW3
z=fzua@;vawZ4M?*Kz%~7@P0F*s{#{2(B)<7NTBYr$d60ak9S!QR>$X7vXbJXT6D2a
znEsYTfcv+%<?sPO&eWS7dV50vfk1R-_a?#(=1yq2$H(bmwQIJUF)N_%s?8~cf%=-%
z^vlf?asfBD!#T+2-@oCXcu>&M`f};6?rwMvZ3A}}E8j5;WZS=(d)AZxof32$Z}hzz
zxjB7N``71`Uzp>!Ms+{%zyvENCS9~nMv=0i3p)E@BN>*`fMpvcca#7u8@VH82;qg0
z&tIdDzA^M(>ul%bF@~X8d&2vl`7>*T&e#&dBu;A%-L?GZqm@t_f#^rE5EDyE-k%@6
zmm{SM?Td|<DM&sEQXjo>yHu09UOj3CgGGO<Gm52K5Vl*n^d~LVph7SL*ZgK_2~Yz=
zT*3uVc`W!YHXdn*^;Fzo>6A#Fb7>7ECv9zT9x^CfK9TL0E+CpBSJ?*p&5d$S%AS--
z2m#m`c1~g5>Tf{%N}nBjud72p7jvq@iFcp?ltM%i!6C!|WW7TlMdDq9A|%g%<PGr}
z)%|Nsh3YPVsl1C&zQ$D2h=D7;S6_+0f>8cV8oGvL-UA#T_ID!f=+ZxQ7dareLuJBr
z|MCM+O9rs*mFb6tS*}MDVgPb8xQq!`aaMpN{q+NTsD-HT6?81JK0N)KO!0jDGVi*-
zp!WcOijxF@%_M(dGc2gTMoGvqnB;w*_l{ogj15~4PW*G@KUgX<E|uNmVMsn9F5ab<
zerI~Il9uD$Mdm3G5lJ!w!)t}hXbR0kQL>V={Bs>%ghFO!hPVq03-7HvTQZsMb&HjL
z=Yh8rS7@K{iqNVA(?a5vQzgXhzRda^iF>W(<&-&^F#}b;fSzA@;SopjM!f6fNpCx%
zMP-FHP<GkZ*3(}O_CMHr@1Ur*^=(iP6v2pOlpsm6fPf%Tl#JvoK}nJYBtrwDaFCpH
zP;$;7p#eq7L7@T3AW51Wn%ppJx9GX|-20oUshat!zNz^Ws(0_*d%bJD>3N>_5{2us
zU8}TKo!-uJd9TUco}abfHot{>Jj65Q*3w%4aK=~CtsaZH!3f&E7?2#9I8gm*9OJW{
zNV0oaIo3bG?hpH+<S8u7LoUPyy{z9odzW%-R*fP=WS(JGe!iT($Ht@bx(G}?tmzB3
z-<8AK4_!o;e3Ed~?v%eX_YES~jqN{P#?;TIL;$;UY=|+c4a?^Z$QeMun`y68HhanK
zsR~6GbdO`O^c#x0Dv@`6<~lW{t9R<<?RDy$JndsrF{>{Ek-(LWRHF5;ySqmpp)qjS
ztLxRkvKmMEODg36ZNza&qXxZmAKOy=3zS-mf)?gpjpNxT)!VvqqgDMp*QZo{^60$1
zdqJtrW1>mCkg7W7RAAy2fM;E=AlY^G9EkNC(2|pk94Qh>X#Mr@S3o%LRY6zz6=y_e
zH1nyAZ<5Q83jl}n4j)pC!NNJBZPJoEe%_j7F<o66WB<UA2}g(p{EN!^-rJQAXAE{6
zlcFx3)?5F8qED^Rdj{BeNMr=<?>ZqM&Vz!3!;MoTe(@xYUPr(5o^BC<{^zl<KEmJ?
z{%$(mqXtN`{5H^+oKo<SzDE?-*!!EU?3Oh@b1<E?*Yw}X%KPi(Pw<?;^AF+SEUr0V
zXrVJ*ofvcaZv^#nI}(e!`R3vRd0?Hu1FUC=#qLxK-1bU6B_%&mL_mg3M7@3!!XQvD
zw>lepeEmy}wglTlim^mN@ymHUGQb=O3wcD1zrFqPutY=c0@euusF$4ZW%<p6Rq4{*
z=P+R#T&xpRrUgtqP%pWv6EBzmD(GCSbImW2))iG%B-4$n9^XHxwZ~#3oz>Ajf*Xvv
zoIW{fG`M7Uxx=~}^81iip1He^77=&V=o?~WFlu&K^7!;TQN_jp&6CwxZ#8URGxcii
z=i+_A5tGGH+k}bO*TBlWDRBWt(<onw5y$VU^f@k;fM^<1!-H)Pzk4?lp_SGI7WJXl
z_4W;HUtBdsS$h>>HjS+9?ZthqcHau<3lhNzG=`vv!o|9dee>qcTs25MqdPHPMlm%d
zG~QDN>H~cM;O~~;!UyqJ$sVMo8<|-wB|A?f1MH7OYqE1@MCL-IPWwe*4O3je>_U0T
zzC1Dn;tT=1J3p^l4i&`$MT?I_Z)K}(tkY98R*HYai45;O^ciB6+`qP-4<O~m+vd&w
zYMMhx^(O$;vqF6EVHv)Q-OQ3tGe4+nD`#zM^@NGNkUiG~laCbR-+Acse<oRB&G@%u
z1>t~0WKx2&RU|QM3<K#tV5i}^0I`#n{%)yhU$%cytk_b*C{{c|A%RNU8EhB?$dq7J
z@fRZqqUIMzQZmYz%f!F)bz{sjmq@poC~LoSi4uCroDejzbO0z9oW+3B5D0+1E&Q62
zoEu(N7ACU&5U33)+cM>zcdx6hJGcDh7WA$lk$|;oT3#_4iGLTYIAPBW!oi$kB7{>Y
zOKM(5^-~Rs=h%M52L2eD_PH!p4twJa_04i;i)sH<ZJ)e6Wp04|ajUJ%EYJ6yG$?;z
zzPRTp*WC7W@E79|QiFJo?@5|H+HAf5uUdWy`Fbs|*;pWEf+gB%Onx7yTTxwvFkt;K
z(T*g}0B>af$IgM|r)x!0^NN$=%;TqG5~>-f&-4|cHeWzXc}S$n#QBz}`>VZaGYy)5
z5dz>Ph>Z!EtiBs`!!&tE)%hGDB(L-5AvQ{Ee}Sb{u&8z%&6}0jKs_@M00}eeZv@Mq
zo<3)=&VyZc<1;<$>G49Q4N)sl^Ur^~SkQY4@{KcobLwL0fbJqs*~E=Yzdba>OTHQj
zP}UfqYiJC<PI53Y{dd>H7o297pG6S=KFtciY1ZcEaQF9V2I1?(<;#9mB+vMSgPl#T
zZ5!fudb`VD?eG01qjCB)cgn!m(Jgg<JH1_#I9TTMT<!R$Pa_EwBTbFr0u-mWy9e?A
zX&ALnpQfn|Kk8v8D~Z{CV<2vm*C8AJ<5ocH%y5L3jub5B!#Rc)+p7VY#NwOzc@zxk
zd3l-Hb-IFef_v!7ms#6Pm;3hLTP%asI(7Taxdm%Keq*)%K)wF<`%`A|Y)1ZR`?(!b
zx30mwczUq62>yn8wH+<qzn%FTj{hI}jcE>@zjY$%8;wKd-Q5%KR$DFXI)5F$bM%%b
znNzlT1*QIL&HY3j%Cj-Z3xjVzYfC+c^Luo_ar|D)6HRZPlgdV!Fes<0nogQ877s0Z
zKP1K{zaaMDbPdG*SL<_lT<wL_Ka`Yw#uvI{@p&(I-|6p3UfJBaZ+kiNZ8vmoRzp>5
z4R>W7oO2f{s#d@HU0=LeA>#RFWMZU>&XX9D>hk7<XgS}4)NZw52U8Bp+1a&+;aIpE
z%^cA7ms|q|vHl*IE~#!XH{BgE!<iPzW_|Jj%5uBwMjV%DjKBvxpztr!FN5ME30a<|
z-$a~YDkXvns}YJ4;BRsb3~|a(9bYN0$IWNI$HM`Zg>hME#;`*0VY0?bZWKV*`v8MH
z`$$U?^b*~Q<qaMbi@y&wGZGq$BDx70!>8sZM+tE{R1Wzb*@b_e*|3sfE2R5d4)kr>
zUS(BfM}{ABt%9<0X@PcK#H4|onXK23v?NX$ieKH-%mWR=p>*R&?SnspA%9Gc-G`ik
z5krFB;8`$^>R5wKD`~ZaCerk0cSlW3eAq^z%ufip9XBs}!bfb(HtQzED3SM-K97|3
z!!T{uO2#(nmESn)TkM+(ryM#A7TP39Glq1%Tt24MHx;dRhR3MI3MdLjZf@eQByyuq
zJm0$+e?np_>9IOG8f7RRdTJQ#cAIRL8}MC0CMtY65(G>=MR}l66TVN<CclWei{I@w
zhzq?QBqk#hFmW~=o2*<FBq-W&)679jp6yug?s+LeV4Z1Su`}OroM{D(_%R&Q-Vueo
zygb$Wit&Onj}K-8xGe`S#sk$g2vVz2pv3@0q+$znM^D6sh_|DnqB`6=Cmye~Vmzk_
zq$M)u7A0JQjdbdZV(wQ(flR%(O<*A@T8HYM!?+`VTVeG?j1Jsp++w)iMD-826*Mbc
zDj!5q0<*|D?>xZ6)xHt!NAN7F6$na&t*%l*AlYQ8;F$4xPs-}JBUqV|C=ND_;ohLi
z8RTQ)Yak|4P$-OwiCHvB<+rV-1?rrvIc`>JZoIi@brB4BYzUl~^%Jk6L|<SdyEA5A
z0vSFAGX=Cf6d~j$%Rmw52k4Z16Z|0jDw%AW1tJGw>e$)V5tY)AXQ3&gu}Q-Yc|1mN
z6hf46@ut^e_lRUN6YkkPu$btQcXLAplb=GYfvzixB;&}HSgDu=97@d0?9mZFBI>DF
z+v0Z_-7+;P@fk>#X0c{zQt=QseQx0Fg~(rizD#%#i}-WS=)FfHCvlssX|Fy<C<R1C
zzsXRb<dnTs-UK~i+%-U^B4_9W%)Xo)Y0A5mZ)r?l>+08NYHTj|;FW_ew-5w`Tbxf{
z-zQWOKKqC|NIR<7D9qN$=b81B<T9n(hmwO(ne8mt)aSfQ{_-Z2zFhy8<Wn3Ms$7iv
z>hCDPVFLHy;9wJW@$wxln%s$4>7GlEn<;>?(CC33s^{y9BXafU;%dwLGuX&d3*v`P
zts9(YMExHEX<4A)YsH73Z0qyT;DO-%`<tF*o4vQv^gpi3(U)00g<KRsj|>%`hqPn$
z#PpOTM$QC7;*d5k@1Y2Hrv0fI`?J?5Y6O!H|5bw_vH?hl9aI}*E1R=`;3otRuyUWS
z6#9ThPU$K~fMbglb<olBwI7;fjmbAxKol`D@$vlfO?-c2pm(_mrDRs*di**f2jQVV
zmtK)|<-BEGd%_44#YmZrqHl$lJgneUb`TyJFx8m<B{t<^$^2VvNSRgN&%C`itOarI
zNS=$Fv135d)4B>|V{5^7n;ZQcE23ASJZ@txxq33ZmC93ozGqzFvdErcbM2nBL>a%N
z0JvM$lhL7{TC-;KMmF$%7|UNk52i;%mjx5cL}MIgzDxKHyZ>vaR6$6eO3}vaN#7Pj
z<I77+TYK94a+A#=20{~b2Ol1ew2mZwfZuiRv4TGbMIUL-_acq(8f_h29pgsyPPB@(
z*6T}@d>3VBI*CWlHms}^3TSpeJ~X|58?f9kLNUr1nb~<=8lFrH#E#68xg4(jfF|Gj
zfHUmvW=FwjL6Hz7mY}y<w+n05>(1aB8}_9{uxHv7N?|lkN>~i{f`SHuq(i+^aS@OB
z-Uka7o(q+qz_)wfKtRe7g-fs_Yf@?4P6>%{X2qa|B44UiN8&v@8tX$`@;L$l$Lvt-
zm?wRj=-&Ojmhe$I8Ipe&KsZcoAAMOPGPUGR!ve?_S-@iDxx(?VzDXLd4p1EhFZOoQ
zyI)_fy~}S)isF2(+Q&IKkXv`I@EAe*H%bJXCQT$F``leN4sMU>-iQYWg$yX!ot5gz
zr{-S8j2dt*WV&x@&*NeZAA69X%7J@4>AOnQOo@%$+E2dkEc?hL`nVv7#c`8FhJzQ9
zNU*LuaW_>{3`&TKw>Oq&P4+zjuvJQ6^L*>ydE>ChfvobNeme&{yBsdi@Wj~|jKF_}
zU|s15ho~DRAgVLc3`3t~E^)}-`C_p0(coJHdt@ikpq~htD6D?E$f6DqK&hDq2-1%*
zIW7};q9i5y(54GNsRI!$&)!OQvJb%vEA=Sm`Pu@QQtr$)Sd1|=DjcvgbSvz0K>^rf
zymfIQCZcw_672Lm%Z!Zg2Wb%!s1|yzfve|WiEh{7Be8+bdxbiP^MIBL0ykALkIO5b
zSiC`E(apZHZU$dIoU^uOAKBvC@fYF}!PW&^{yBC}y#&QwUSwd?d2HnSvGHz+eACBx
zsA<txWIQT>{f5N~-hf7hbf6fCPe{-4&|i_oBxW*%Kh--P2~UlFE9LomSq*^PH|YSr
zom$iWQkYok&Q#uklD^Fv=RUQpSCi(}bRyTWt)<0ZpgiPanG1?j{m$5E3DVb@8J~y6
z8G_S71m>UT7N<V1aQ%*=<h$E`_KMIwE5Z90BATxP8G&C4KVhI^5bu!_VMc>1Siw1<
z5t7&AJ`VU4bHpc>hu~c0f3ezlf;GBNW|HRiOzlo{TA1VmNH_WPEnmU8>*G?qGgS=U
z!{zgby}HK?!NI}J406_~cg-V`+&UIiI`>nQsVqtqFqK#XY(F1)ElM&@ieOoJ_kJ3X
zqv*yRE%VaCCf57UN3#)tVCgs|PWiv708~z-O=ta90WjVj-xbq$H$sR5B5eoV=;!?;
z;L>Z;_8;AP8UV>kcctDUXGX&s$V8SY|LEVHlP)5djm>{@0^4(KRuuj^k_-P5m9&Xs
z>}QC5!eR@rRGaUeR3$MuNS~edJ91sjjQzPd0JAvpkY7ZtEZ>1O#cmC!z`h>+V)#3>
ztS!i$^80VCG~Pz_mRRaF1C2E5l3R^d9rHuekgjA$__k`bN=HXWg?>CC{PzCOM9@YE
zXG-<Z5kcifZcovZ1h!ii!&3^82el5pdh}+go>@SswL{x1m9D$H+s}N(MhT_v`+x$~
zl5-?gCTyR3Wv=s)^^nLfMn5Bc3+g#(*&6}OnYdwMK)`fX=Gq-rr6*6=1_mlkBNviv
zKEA@;>`go=T08j<CcjKiE2T~AY@#eXdv{Rw-5VsM*TkBxVKq~cOW8AB$H8Vvv*F71
zDV3A!++;~>G17tLmmLw;%1(|6<~CYWx_(;63m9cRaU6&y40!kuS5Q$DEwA61?q&qs
zSZ20=@y!L|gf2i)W&lT@JPR)9Wrsz2*QVu*6AnZjFH1j;zf>COwx{{ux%#QaI!uAt
zNXkGHuO|L@Kd8J0l-U8I-6Db%_+vq*swK<KjU@SlcO39-ZuImdvnpdJb9PFBt%~SC
zncD|VYw7@I?aA<aB&|>q2<lZA7qGBhiGEV6mC1=d5OFs_U}0GKyj(h|ympsaBT>%)
z9e*97<6D7X`#U53SsXu-pLk98B#`km>WYvJ8)iU>q)yTd0M1jZskqzFPgcj`<Bpzq
z7w>eFS+C3g`-fE0<PLk}iuqpqBt%p{JHmd4{E`+1Ggm<Rc<+Lfs(#2c>U%oGj}K2k
zP|8W&bbY9QB^#R?WlO&lJ%k@F0BROM`L`vqTk;+JcG|gUHDS{IhA$cC{M3wCa;FIp
zu^wwR3nHyGYG=}s?*Mb|H+kOh-gD!3_@C{rt(S|Pq(#tL@4Y%g^FOqIX^9#^y??Y2
zPodP8SA+kI@B(iU(Um=&N;&`ly~i2`m_I!+kz-fa-$0k`*X&hSqP)r_#dE(EZV`W`
zr+i;tuBYaS(Vu>R4_Xz{o*_4-u~6{n621gmfDAYe3Q(<1uz?uzy}uap5!F!#jiJqV
za4v^I+V$Uw05d+(dpQJ1{4k8PeFrD*jZ4P%%>DzO5kB&kogs*I0*x&i@H8}28E2|v
zk`VNqAYa)Il|kf+-dT!H<Y}j2BpK!Pi)u$kTm&wnEfEyYC!V*H`MkqL_?BH*p|gKH
zu0wI~e5ZOxbSiNQ%iu5y(q#OTv1<{pkI)3_vlb8RK(}#GJgr-n{?eziXqF`ja4YHk
z#cJBhPDO?@f1^5JXJ)or+2U^3mG#uQaNQGrB-}QwHoMDzzM?`8ghFZ>FN9_3O7AWK
zg4M4oChEj??eWyu?WNXGuW~8w;qhhDI^k;4H&t!c0<tyY53dn#?5eJdT(i9<P_LBl
zP5Rf{w_aj_F5a8haX$x2s1b!paOkF05RI%<;f}6QjRXG0@QF}4y#n8mylF(2vB;L2
zHBT!~uTbw{ym5o){98$ef;a3w#Io|RH^yDvt-VRA@6>E|C|wr=8f}EXM6qbn_qD8v
zzq?uR*@J)0EAJ;@v1d)rwQl5meym|!iplr!ciM2aQ^-(_U*g>C7vj)B?31-DHeL&w
z(Qr#<Y&qLa5K;I&PqU@4`KQ*C7F3Eh>`I3vE%bGg;Ohi=!fq_Ms7*{P9Pd=to!A{Z
z*0`TrqMa%cb9YCmXUC~zM<L{B&!0QES;RgJIo=+;bul3TKf%Qs#jf-7&k*i=dOtNw
zI{#(iy|y;9Lv*Ojv#%4KEUwHMD~z;fajxd1oe}0H{>)&BQ-EJlRY5+)n&Bo<P*nUX
z4$XNG_u9;nJU_&0lp_?jNvTmTW8iXQDD^>CvTV%0768xY-BwzEHpvp>qX0%R$YD3r
z)mgzCrBR<VUXewc%zq#@cJwLU(9e154j0g<k^yxJv9ue&Iocz%&imkB$k1nruT{-?
zkjNFiQbP54T}4_|jsC$I9|{nbA+Dw>(1j_|6iqVctX@^|75rjsqBQh5r(Y(Q)<KB3
z_`8{fdnD(ZAX2#wZt%5D#Mn>hX5N~nUBxpd$k8nw(32maQW=_GS8228EEfjtAWd(o
zc>6i6D?a%6L7}06ZUX5PDsXz@u_tc#kx?X^Zwe~z?t|d#&slgGpNum)DQ7~C0nlx!
zUgcJGf|rZu0`#L>SlJ&5cru5%`N>tfnILc*E<%TBEOhc9bfN~Fv5kz<-ya8!zGHoI
zh^S(zCocoe9p?rpcG*Qmc3pj;FNW$+JK%dB?UlFNx=#^C2eze>0C+7O!x20nrJzSG
z86$8%M0->Pbr@LtLm1`t1W?@=(h1r;P-*%QDcu+;bLp`GXQZot6sKJ-K#KpV!J_HY
z^Z_3}+s#x3OPR$$R9i(8EHO3s@&j`@3zY?Iq<JHfA;dx&m)0q-0Q-GcHr{A^pd+Xh
z`RD+#6ohQb$}J_oroSZCL{)s0knqPQM84`!{cQ;EuAi=s<~*yyZL%n7-9%{#F@(G3
z@@2s8xGH+2f_=UH!Ug1{;(cFaF!><0N32`6YHt1a6WI&I1|bG^sVZ{3?DW=!H$r6v
zh;{VW4h=q1#T(wHzxgfab>$0MO1Z7}UP8^s&yMV+*}8L>8uxy##>(nE_<BA2u}tn6
zQ#CJv%;9$_M_q{cg9K$3AVeg}o?$1%(xqqrOLyn@Ci}1%cWe|(Ru1V{GVE5qzp&2Q
zp=$pWzR%Edoe<$QR;a(1C@XsRuHoYFUDUj$h5x&T%-3%@oktXt$)!UagjkC7U2-w0
zh|8hlbd}i!>>`rq19c<5AH(Lj^9Vd#iG57?G{EbK#U~P~obB6G0d-av8N;1rfxhpE
z=j{@isXTR~eS-85d~*z7#%JaS-&x@iU5(>)sFGhw;^?n4%}~uK@{;LoBa>lIoZwZ>
zQb^>m@H_`?4Ju$lNWjPTEyj6pu$ZyB>MEH`XT8F0J2C4*ivzN9OCyriQl-Z0T+irL
zm-0QxpoJ+0PSpj7JT|W3y#MwX=>GB{;fB*f+NhcQ;0?r^dR1|iEiaF5_4j@G;)S4L
z0D0|t4)A19ZJ^=$b8~Zrq5TT}Bo?3<Bi*w<JG|(+FWDo!dt+E)EnIm~Rl-yx*VO~c
z*7X6TbwejmS$~oM1XCH8NH{0@$xePsiPGD89gg;G@kk+#u6X@qGtvN5@3t-`9^si^
z8zZ4!O{?SW8Elp_-%?*3^p(6^j6mdgxXzIRX7Jo5z$CPfn5BfnV>zOmuZYU)qw^yB
z%(?r`<|7|B;Xy9z?^cMG7l9KCo_5_1dHco3`VO1<kI=*vY6pn4-@mIVmjTk&+)Zv;
zUw={Cvot82NX5?+5ii0+&9n3mUbWIgnyuXW>aoqbTg(om;~t%bi}CUM8D`v&0)vY@
z*yu)=B<-$&DJ_bGGe+k=Z}r+nsOQ5h@E>K4?s<fUYyAB>mDV%E^^3{oq|)?pTUuL9
z9(cX8lxm%IFw`i9skCg9)^X@MDSd<*FkqB|Ea%$d@NM*2^rE>WW(D!r`=pDjZp`h#
zn|^$e%j6k}cGCLrq9Ms?B)4oxKQM^Ed*BUxX~;G#(Y8TdtyjU~=V*=IV4-ee!YtG~
zUk73lLD`9+pANOt03M5keT0=Yj(P6gtGG*)gMr8a%#tI;L9?9-kgE4|#NcPj+*gIn
zEs{K}#YHYUD#)+RQw{HY8uSQ^$I#&aOk(=Zo~C~$cOp4M|Nhr+*P`d=(_rIWIorEy
zM2^l8wI%!_6q9glBe2L~$#_Kd-}#9yB5gYcQfWr6h5<5TUG1z{C^#J6UdT~>ROfVw
z981m@){!gR_bzlTjD3`k@?+4rs?4(2mu)#t(Dqg?B}yQPsL}|L`V#b(J%1NnJhd|P
zQAt|xz48Ui>1QHYvEixadG!}IIy;}aWlbIt1!b9gcqy#W4qrf5H3AZej`WO66g*HT
z!5-ozLMM#(#Pvvo?MBcSqlmAzD;4*{Qia8j)_GX322@ZAb4y70_6;@qt`%#42zu!;
z$$h7T%<<1bkj@;WjuAL(<>j7RB`@&zmcy;BTWB9!-7l+gj@;gPEOMqd^HHW2Wa8F7
zud-vT7Ua)?KY;Ck_wfb<v@93pcTWHD_woMgA8J5rB<oX?F=pZgxFi~Et=uGbf!{Qp
z|IIFcezCfus4Ld<k81#lO9Oq(JS4K6^m%VCOe<lUsZlyZZ-nk9H=iI2-Nw^~#+aR`
z_Rp{pjK;cw0)dP!Yil~UlZg>Ah5|$k;A?&l`mP1bY7xX*##U18o7ickKn$Wmd>CL5
z4c!f1vmMkognhC-1QP4{Z|;Uj%{xyfMg7u62MX<9-JeCYXMFy_B@;9Z5r~pJJNqsI
z!IC-pok)W`DbwfAl@1P^*U{a>l(N0+{m1X`j_DgXn$igLY~*aGB#OSlgm2jWwWjj3
z#exnXhYQ3WAKx;z+4UG6tCMkacdysN?SPci;z(}0ShT;qO#d5-f@1;ckkh&F{jEce
zXS_@qaTc--Z~+1mV3%CC`X2<?bHYLN9XvJsKMAnY0e4REv0NMY3~-oV{iguCBuM9Y
zUzwGk+TK3}*n@$WvB2pyJ#7m9Q-GZU3Ip&`x}g&ve1rEt1lV~25+nDTP~zVL?7`D9
zgVFnC7jS(E%`LB+<4NBNZ;SohCj^FtL`RY}-XN6YIhrL6sE~8dkZ6&VGNBjg0&>?W
z-0|NP4+HZ`!P=SAnp@7fsI?SX6<}Iy4X=c`|7?8wm9jy)Mz+hH*CBm%osYIaUp*mf
z1KmAB(51L%?PcfgSsB){(RQ?&7}>Y7Vp;8h>u!wgrYO%HAEhP47{CR|tH+kxY9~PQ
z`bnQ*n{r?r+NDdf1}B#r8U@@X7RiATV#s4X7wKCCsG=tvwoV&thB`w*0Y~a)93aIa
zj;r}G$Gz}fBGaLffiOix0XrD?zW9nwUe=Q0&-3x&C#zu%1HElAjiU6NV<*oQI-6U7
z$%ulrI5xMm(0Sw&@`b=8^-2nD|K;y>Z*?7evz&xBDui4IiZi^%w^o^n7(j!m7BpCM
zJ54iHDv6Zfcl<r3(;Y_-pABlD`h+~bUHO^JMIZ@UCAa0$L=I~@-y1Rj>3$4BT}H~0
zLP7iXbxatc0`3_d!C+v3529t1+f8|aOL=Tj7a-$Pg0%Ex+arqCa1hK4jr!MB3reE{
z$}k>+g%;TC1@+DCOz+zJ0kn;0`1bYUfC2B|CM=tYUk0<Ya1iW+Z~Pvzap<n0tA%!w
zE$8CaJY_~md)T88s4aiDstyU#6B=8A#L-Xo2$R%KZH+EQCN3VxN(sO-k(5Zk730D}
zCB=C(KeT^fBfJk^d~`j)&ZypNTrvQK>MUr!EX^s0?5q+!&Y-_86Th+PnMwPdUU$v?
zq0T~gOxuyb=45MXgd`e8o6I??s>s7}U!ypBF9d5*rz-UMHz&H((sz2BKhoW5=NT6T
zf131Vh)(ETvT#2Oc*zx>yAgw{+I9WM?!m9koMc|EJtD;Wd4;M|^&H)X+)2fv3Hc~5
zn{Q&3aSvaM0c^+Jem<A{jnyWjDFh%h1m3d+n?&Z?Z7DI~%FP@(QMwaP<6t3Abm1af
z%Km_L*+z(0+sP5i%}C$=F0FIJf`{;(MgA<HIv}uUHW}eA>YiJ_eA70}vsXxh3hohI
z(Un5W%5fZZG@}|z<`XPCR?rwS^_p7mmQNPr{*rcT>|Rq?xYR<#Bm1!{jkhde9_a<}
zY3Dv}qlAl%A0#w9=5CnlerI=XIP|#S?9}!bl@hzl0GIu`D|H)tGb&b2!YDo50GT=i
zD^WS#`4+AHv5PAE2B&+&hI%eNCYDnNfU8`59?A`0Z?`h*&VohPe8HuXvnEzAGzZJz
zldcKN8@1Q_w$#?Tl-Bs--MgN0JM4=`+@Opsou1y_><TAErAecDmQOxbchqa%V7>yI
z!-q31m@8*{g1IQ4PU^I-{N>c4I)s*V64^?+_PI-|s+i4lDR=X8v?wX@Lv}ZGfMg7T
zf%_|*^lKNYDk+2?3Yd^l#Dr0)nOy$3^H+}He9<mUQnG5deatAf^CM|ebUeM~li@qi
z=@|{6B)P9yTn|*lgi{)oXd<uBm!;_<3@o0<4`iOFD2`R|I;gX1SP)N-HR%cOR0%8>
z@vm-pF5i34#mh5M&;IieXV^KkS|8nH{fL%gvYSeF1)`F9Bl)c4h!2W#PE_>hjom?x
z%-Y9zhpu<rYYojN=;9N4qtdvXi9}o`>O@_?^vl=c3EOfms^4+gd$iEzP>s%f4kVda
zC^6fQ5PPgr?bkkXYYmHjx4^mEj<keD>zh0jo#QE6X|!)@on$!gF?&<;1=sqM;@2ai
z#-oi?v6rgH%%9A>*ZBF}(x-G{Bz4lNt8oQI9cJd`UbnF>KpZ8sADKA2v8Kn==+%6l
zq15s-p3N=yu1H@|w0L~hd48l@+)c|t%HDc`gZrc%^)r`a8_f8mPYx7nOum1O<d{K(
zn;&v;kbll`EEtg=zuXTFcQIPfD#dTVLyZ-PjeHb<yeaV}g(00Iqx(kH#K~V)^=Rs{
z$@7fVWTaqrj=9B!&a(#lDd7dWYZu}(Q=jR)-|ahE$fGp=>93pNIC#-09-l^kC!{}U
zf@r{<XX)!%livQveUs0|43nOz_ykeJq-^M*e@uL_Z(9&y3-xr59z(w)2wpP2jQ-TR
zZTS41P+_W@%9dJ5#^%y@OV|WAS$y<<DEBl&gvpOm0P%<-n$nYF2$1&ncEv*7JEm)N
ze^;1&m=_2eNL$sCy)?7&0fxMtbDm}RW0;_4Mhx$pN;Q=k)oxYN<HvAm&2ekQ*hoY)
z9~WVyB)TW7ON`Zkyi9{z;N3*^%e7(Btxf4jeR|MCSpw(OV7Jy;pZD1HckLtmV<kz(
z6|_L(=Q41M_i$wR0DT&8!%-pc9%RRJ_Ycl|5KP{lRd0OHlto1uD@Y5b*tNWnTk7yI
z!C$;G{<flW5j~0}L(f=OyOqgvKlG?ec23dX07hEwkiU|hg4^%VDjMwnRe?UT#gPfQ
z-HQO}R_EHz%e-Ba*)J=bpU#H1k1W~5WEaDk(LzZcCdE$fv#b)Ou2IEtj~7iIADSQJ
z_CgVJ<{WTYkT&k*YUH{qlKSGC3_6PFrY7&t+YUdS&Tp18{guj(Mm#Dq<#-wV@D{iA
z$X)WUjkaJ=L>0^ExUk~9Q*W$Z-8qxa!S1Rp)i-u!9xS3eW|>OIQ~bX&Z7=8C!!_NH
zROBep){JA(_CKE0%!m`A`Q?geId-^oU4@jO@$aw-;FZEd)^yKFlBYjD%;h;N10M>V
zQ6>+5SNsD53n&U_wrw<I$9cjUh7A7|P!WipZK)(qGlaqpTr8@;%&-D8PJ@^!4$$y+
zt~{Ul3%>QYL%{?oXRud6SYoH?t_1alF)<O)@i+S4_wuh~Hs*Tqod1774Xq`#p#O^l
z>ZY?Bm~fq!_`7rJ*$j2Kf7a&`%b~CW*UbRJTrDW*caZ}#MxfDkk7%R}4Gpu81;aOz
z_TzaFn?4_t<IBmQnjaEExN{_g%kF8XnQbweKYz|9n-;UXZN-w{_Xe_ZQV0(6-6D$I
zhZ$S9YMW>|S{crzTeaDf$!sit3red&FfJpZa><K;2s4Fd@(_%yNt*zdApvSB)fQ(H
zLM_cCLa3!ZC~vO@K-(n+8iV4Ca4ytf2h?880_9YB;-?f?R|v@9+}CB&&$VAD3f_33
zs`3)&>K*1&TeF6ex5Q(sw|?IAgaIBhY~2uQNg!aOleYA3Gbik<?^$l!RqSTQtIxw0
zQVe=eV|dO(xwl|s%|Jz1MXnixoscYVe5T@mWN^CJtWj}C`0a6tp{WAd4|0*?oJ1Gf
z3*yU7zEQci@3}l+WMtfK%wS7u%;qv+ujWD2O{xLZlKSV7ihdZB*MpHYWxqz&6dQ)h
zi-meb{%dMifbQ7DfyK0!Y2-j7YnE#k2p5-^BVuAS(DB@nC!)&2+_a8oe*TOqDq7@z
z2O!J+o}J{#Vb0X^sP61%uoTP$2axwc6CARCO>ii_-DYE(1)-KeHTN3^wIpFM=`_4P
z<^~_i+Kc>yS{lSwsN^^^3Q$X%I5BJ!y0^kZwmS$&dLsKLUgWXq*Jrco)jk|7@{}Ab
zbl0$Hn9~^EJDNSaq4u@^`*(W9V!cTH&}+cPn>wKZgEgqzb+)*O#SB~mlFTKqgT)ip
zHTTK7zJ66HjlzT6F_#&I#bHW*n=ormD+NU!Orc6WZHo8T%o<=9h&Oe}ggC@uv@9-H
zhtY7Eukp*5@}LOSH>GUbxjI^!tSXOcC<m}54;rQQA_i(iGRv(g8K37BstE}R!DVaZ
zy%UezpK+hUmU2+)BADX#Z`jhLGd8j(1M#9yhAB%@!P7LWx2qM=0c!SGI8Pw-<tNE^
z(s)GI|Ej3YCe2rs)bQ)t4sToaD3}$8YX40Nz`NR5T<Un`eZfabNiI8q$IQuXtV`O|
z4HZNV1y4;&Ab0|(r3&ritSrWF+u8j5{O7IbKO;fvV(tTqTLE7rZ@8{J%<Pms#!~}3
zFy2C@?!|q;&hP!h&fmn#S<5@<$y?(98IL@${XG{&C1Eb`JEnxO8tNu2d1Rmbs<zjP
zn7KWBGWn3`s!u((hx1n1o&Id_gd)~1dBGUJA|?#&KLA@k9gXGzjnnJ*%O3gVl@PvX
zVjG4eST)ivcTaoLBivryy<4S5v-?S#vDKfUVabM^GTwtpX*!DSm)8<|O+~)*svf%%
z@0pso+EhkW_i2tz?(@pF@iH!Iffxh~QZe3iR}5~6@^mZTQ(!nsKvmx+rKo7Ldqbk`
z0ZV(Qy%t?l{bTg$Suo{Dj9~Ff>2~{Cc^1HDc^TCiAaw&K58XskNdHt%zP~dI4oiin
zcFFDyvxYkl**t$9CPp(gj;~~o^AbxGEn<1FboWSYQub(KsNCSArLiPR>gkn>7p2*#
z9A>3_!6-<LPsO>pA_j6V*2`i$CpbrSNmfezj}bo@_j{4N_WcTt11C~LENigc`z8n5
z9Px2iwF`SsR=TUnE^XEH!bbLP+zjqKFyn7iRTR$TOs#*s5T*J!#y6I|)4ZwJ6P?H{
zB9g+BN{*){(WKbe%Y}9)pK?*#u~840@lV`od<7WcB&4VXgcxjxo^^VNaInr|$?D#G
zT>2a_)3OMA7IrXVW^D50cvo6&%|y)?88+;7;%Raiaud=8pbHL;Opcs>0mk>*8q5^K
z(Hu2v4TqU}UZXE9YD&3JXr{1z0QtRDRykmjlqr<DG(0XxH2YljQ0%6*<>D)!ph_$0
zV6hckFr=YhysP;H_HgyMbJBQdog>|l#ajlKE7t3<uIyzyq3ih4<8ZoAt*1ELxqSu>
z-7EsLUwu(jaj~8Gj|G*fT&6xEZq-c3o-hFn|LMM^QF8ZrHPnV^cph~I%MwIS^zctN
zoyX!YKSOkdgg6-ugI@8)%a_{|vQzl726D6g{3MN@ptn8+a(1Micu2X`rl->h!`f&&
zXTKYTavkqXxUX${VCu;@7EEHH@+-^3WzE<LS>ytYkum|TQswrx=J6g>kMsN)x%guA
zCvJ2dQv`){PHfemIm2{Q=ApP+2y&=_KDb}zTacLPV#F6W#hzzI!j9wJ{fdg`Bo>3n
zFh-nHE4IVwGQi(^?%IpTh7a^U=3hY;WrV>jEllt5aC1Lnv$Qtn6-i7;3|2(-et&*T
zxJdHVLHc=>q0h_9Yl@ui>+k#l)e_b6(yQg@CHAl9%>(TSRY!X-s~0U@e8ap%vD4Gz
z!qm}4u3jfS+l-F|7o)X@+Lp%z$ipg}AJP+=^Av?E2efXd#2ef1CQIq*>DhmO>YuUI
zeo+ey`xHP^#GCbXo<1!cRMJ*P(>UZ_Oyf#*rct#$`LMZ~H^7-SX|ntIdj6dE*_}v<
z%lf8AxvCHINatc3Yn2ZU&j(qWh&c8PFLIB&Pd4_=Sj<XL3-Jh}7e?2*YT*Y#{U`iz
zdB<Z9G-d2t!AoB-n^@^S7ROFuGJK(WtgnwPzerGB#B)Mf+Y$J4*30p9S43(D;)-Lu
z7Wy;;Wepa^g-Pc*olg{;R>$HSdKgdzvD9dn=xx->YNhtptZK_mIb@U?w}7jTEH0zP
zaWQJ4XUxmXDJ)Xk$??$1==#Z(w!2SnfY2!CjTls;YByNdu}ZccR7)!_&!5^EHA~if
z5wDZ>Dq_v+khg5Ik7NI{*;<s>cq4Q2@uln)y43sbZ|YZrP9jMS$Re6GyJA@zc4W2T
zPIVs3NumjY<9AC|%3i`Ahvry5S6h#$&1zXZYQN%RfwzsaE^aaXeh#~cG))S~n#?v}
zo1WuJt=qHJ23lJyl#1H76h+F%@tz?n@a@$EiMMm6vMGdlEb88zbJV;pE>C-N9;$Fp
zKx{4z_nP+=)F*BBbhnj1w(B_yC#o|#>X@f8=xvUQ8XFMh_hr5!uM{~gnLdW38s7aZ
z7jkp+#~<8lqg$ZtT!lOD=4Ryv1Qv?&vP0=CIJ1eaPg#6<Cdk&wx*oVh9qBr5y*WS-
z8ri$Z%<XQHm7*bQ^5RE;JH?{c)?wxQK{HIQAl7sNq`^r_+fS(`KP;!de?>^#l|%FB
z(woPuCg->;gdxWS99$A1_|42R)br`DB0hdpju*DvyeS1flRGzr-W0W;Q?D~<(z;L-
z5|YFA&49MVq?2U0-qk@nF;3XMsvfD%)c&=Ic0U+KP(^WBa9zxNFm)&2Z{y(uD%Wjg
zBcVyr$5G;Q?myr8Qw)o4f0fwho5^$i(oy^T+b!iQ<novDhYDiCr`xmHvgbD-(#>~J
zzbQ>`t=0b6{**J7eOI)e!LwTBZMIH!gvfq-XeW7gql~B{O0H%$qBxV!c5&<Tb;Yn=
zj{~8_mGNgd+ztyp(UdlO+Jd3)KI)Zud<kD%%%vlJ@}j7Iqe69#X$URfu;0CDLz^lB
zmxH;DhXxm15wLobf8{8%!)+zc(io_Xm}m7*?3qr`qzoG3fR_V`GIkHbg)aJ7h<xFv
zc1=I_AggOm7*OoUvn-CZ9@W27Hu9}nqNo;00Z`l_Np8p`S<_;wsMZqQsfET5`Z_2u
z>&bC2p74wr|3%PInu-(qD8`uKoax{EG$6Qzfse2pF1}eVrFB8noxy%>q*!>)SYVEq
zNzOsFd<?dbY(M?R0DwJ7+A4?ijff6DUpHW9N<Fd=I5|>m=Q*g06xp5*T@<FtH(sr;
zS(LRN`yd0`DNm(@(@w&F9NM?ho+rI%%uzFYOJMQybrYfZuLeF}!+X*ZZGD+?b4Ob}
z;l8LL<{+jB`!)1#du+o?<w1*~lONe-F2(R5XCb|v!nHQf-SKQ&Iu?WDP10G=(hS>?
zeuyC8^4i&=oJHm{EjhQ4+s5=y9x-ays(Gb^9!LFP^>T?mLKS=UZvj<K_vLSr$6yxQ
zO>SqKYP*r;HLpe~$!A=ybF2omiF`Y4?h}Ww3)QdZs&rARmTv1Cxeh(CA<z9ij<-_7
zdqN(|1ckP%Di%javvT%P+k9ZvoA59}e+$(h?-X74*<H9~j4;m)g>6gNLq2@adUQ4`
z(dO|GT{0J)D=s2&7`=H|U{3q(L4xg{0OE+#>JCw#SN(g!!B4J@4>impQq@bBx1-lP
zCmx{XAED4y<vc9b;Trp?{0-tF$EBe^ZOd(<1P)M~NX1J?xxyCJAzO&P3V+f)se1*x
z>mp!ThuE>mSa-@^O~-y?S=68sB8ZeuXR|<SE^^k^Zzmdbk1S8Pm85qx^onps+8P`y
z(EX)+9v1DiQ=l#RBF#ME*t;>KG{sGO9w_>}3)dI^=yHPIjqGf6%%!U6iZ<^T?059&
zt(#<Kf^R;YsZg}E%ojS|n`tSV>%78SWw*CEC&`KEBIhw)sWsbnUEwY)SM_3-@Vz}r
z?9Um?GkG!*VbU#o$K*luV#k^Rtv{!zJP5tQdsF!pMO=4UXTeIXL`BKZUtjNEE60EK
zcgQ4W`qE16+_`h~B-N9Y=?$-EW7o3Vj_PIi;wNjtRF);(iQ^sT&PJ-Z`VV`+RWob*
zsOr1tE!Rzo+s|uLbHwxUe6-`7D|F+XI2d%!Qj{^tYUgiwa)rqBr}!(kPwUw|aIqqE
zyJE1h6t!p6weJ~&H9y=%!?rm0g1Ck!COFRDeChoy^1Z3h?%395Ww8N^t><XnY=R|Y
zajpQ+fX;3N`W(gu)t;@Fl}{3d4}Q|kEtiWj<ZI}~cId2r*y7mVHWT55;+TWO++!AG
zW}?Nt<2|EUGWZRPy#@F#Ib5ajaC~j<`;1}~Pw!FK(Q1__S!aldDR(f}yOYS`f?Sh*
z5ygAcE_C13Izd;0V9w_}Bd3+f@rRjB2D1qwD8$T9VG<pvCT!eAEo-hLRGyqDt9m`Y
z1dt<TgfRALKKD2Fiz6&KO3ozcjZiPX<7!dPnJDGlTTCr2Zy7JhUqF+xk2Fi4)Q!S8
zLl@x`CkI1kaTUeMFBlw{ZRopG7zrPYt9u>vr<!ypFwMc&Tw}Rx0Ul#9gMTb-Vg#<r
zaqr{_-FkeZVZ$})q!&kaWvx^MU|Su(57$U`(y2u1XxF=N8o3=G?b{D$PD(GNXARuh
zQ9(llXSxy@rms@RuwG$F#olXDH)uO!ZW^;4%ut^gd!(QPLIVVaGu&KNB(|brP3KuH
zS*#m+GY@W>=1yB0!0++qrJhS-vvfNL_83HB=;1UoWq=tZ3BhtYDU&{YrZt&?BplR$
zgaaE{TbypP8r}y*L!hj|TeNX+xkMu9ll8<{qPn!B9N4sqR5|4&MDb)dk~|Vh1uvDS
zrko%LEQ1ip_fxB@0&YzeV?PJ(O?jgOXUp7`Q;(f&cys!-kVKu}p;Pofcpk3CV&!?i
z&o*;7Ac~_nNrb`Wdb6m|f~lJArL8xtaX4+i6$dK&1i3BketJU?v}DS$*R^15^^*IJ
zDx5#Q8Nf0k1k8g@rmuK$W0N}uhYKcWzDgNg`_Qko6XIOojrR<OUYeBlZIDkcOB9?1
zZz8xhL~1yfDjQ5Vrzm$`{_aVmA<Ui2AGy1>tXSB>1ht|71T%~N+J$<?7im=TLPt~R
z#b;omPXth#5nmhr$zNo&kGAH|j*Y*me139c!*1rxi5LHbAr9%9+wS4)JAW!ZH^YhT
ztdnafGp7%`sk<PDs^yyv8D&x&$Z=HnzI&(SPz*MArAXQ=_mz(nwW~bP66rqRGqCMS
z<+D!MAn)fKRBsmEJyI1#zf7}pLna!W<khc#3Y3ITZVoz=b*i4sx|`2K7=0Wu<N+=3
z5jw>y!xl|7WKfaohu*fdK~xIt`+1lsWa`#AC4cL5n5apO+J*0qZ$<}lgnJ!r>7#A3
zb}3~zYW7&mYN|B}jV=f*`BKaL{`H2=qIT^W^kPi_<?pqFyfkzHJ?-d>p0lZ0F6#__
zW#EVk4c=O|7>+5_4R$U4u-~7ZI_Q2+%{Bo4IbtzSo5!ppma|stxbQqFiz2URv@LUP
z;la)TiWx~kLadh4*qXW*n&du_Z8Ef85}w*2fzrt_VVMM{MuA<zqKP}_z}lvObmPo(
zubKDr3c|wn8w`=X-8Gy3C%qr$=Z4MrrIi}Dlu$i6{x}IY5tZDzw2nG53I?uo>XKp^
zRmp<FnMJwG>Vs<fq_AnZvg2X1V7J`B5cL{F^KsAplYYrNIepzLt9*}H6?$E~^({O_
zAcWZiY#(zy9!7k2W0)twOQ%)X4<sU?s#nk!S&;Ymid9`f-e~?@3*x4{#qI6Sx|Q``
z%PeB+)U;*Ui=AATT-`lA>lDQY9fWf!u`_Y*RjSFhWp_r-G#^x6W#`R>k5r}lsff$w
z&J9$ssK=;u=4)$I0Uqn|)hR@T=*X}=`%K+xj1CTwMWV$hRMP-KR2(!4GAQCoe^9Ux
zGcptc+JQiiA80N8f^A_wM56=*`?79dA^6=d?}myPHa9zdvsNF0V%*!!lHb#{|3-cN
zKXiE-*H~XIx53-6<M}ZR@UF=v@I}L24S=p7E*z_fUbnpLXV3o`NCvFG_9nqUnBUdz
zf6zDBv5_-&vz)N?3jde$pd<e3UD(Tq>4bxflU=$Th8Dt`axzi7+7}u(Wq+(zf*~0U
z`^RH?7P9`{j+mkVZSYJuN{=2c$q+(qGjf98U}^r_%Y|lgEeD0A-V_F9O<vx`ll1)b
z>F8o1fIHHOs+Lp~MpcYC^a_Jh_&OkS?=9{M@KMB`X-zM4?w7qGI#zLlo8{OYcU#w=
zSeX6m@bKK?rXu?hbFpXe>+OD%-3fPt!T08R{j)#QLkM5Rvym_gaeN)B9-rY&+rtCW
zUnNp4@yqSFK1lq}sFND&(JFS!bPG2&5f-NUA2>!L!aUkS^3Z$#7txBP!D9Z1JVQpR
z&`!YCFmzJygJ80FAGFe@zBF)f@H~=8W5XiuvRWNy>o-FTF;|w|(Sm3)IoCl}fQ06S
zS2b<Ub<U;vUY76mST1c{d?RCd2P(ZGLP2(ku3+G8zv?m{@5r48Aej^?UNBWK))z7*
zA3+E#k=~NQQU^SM(_aThn0zD07J_5i7)%awY$5u*P7V$BS8Q!}3UP@sHDhgHZYjD$
zt&W{Sl@*@ng?U6Kh;szN-D<$ylKD#v@>_Em8moj*0Att)x>9?EUzX|{knIgfJ-IjM
zDxV17{bk8%A`qMqNV~q_xO49gy@LUt=3`+L>X9%aA0LAp#6e1UJF^c+-H%ZZbaNk4
z(Z(xy?Jb4tG87?28S?BtM^mKdO(q73U)j&qoEUKX%8cR55Gn-x_<InB@E$YyDNaPJ
z65K71q1y?QD}hR$-DxAN#_yGQKt*N1T^#yw=~*C`P6g!BJ7k_*Xf#D@7=zquJ?kG<
zD_r>>R{Lpg#H3IPrhOxZiDlZX=4t_Wf}(3sBu3JAk81e)7K`1{i~eIxfD%vJ{Y(!E
z9su(73kJ%!^T2ZeSStV0NjmiY6@leUnl>JZ<nx?uw+oS)Tg{2S2m8P*G9>^3y&OxZ
zdc$*lB{T3Fh{1mvtld~d9;Hp?W->3v6-a;*<Tt?rV)X}U$GCf|gI<)X5?kOnm@h;E
z;R-$#XUF#s@b<*L*NUkB2v?~4FCxaD`}(3kovb2D>~dA~@G<pCK|3aMJ#1xW0|@<R
zz<0PRn@|1u-Mf$DJY){=CfFer4LkcmVa~yeFT}C!APtd^bzK=To4uZTuUA@BNQgdv
zNa(4X9wGGlZ6JMbjHblxTVeRm)CgI{yAa#)`$WSx0-@#jTezYIJCBKhH;0OZRl@Y3
z>%Z1zr>Cc1<~c5<D1;`Gx67x-hsHbpL%8Dhtvf>Xtnlp^U05stSK4o}S7$|<%txlQ
z{{yYL&?5p86Y{IQqKz_8`I?z1+Gb`;SW>65q2m{<xmN6>CXov?2gt{bn2ee__5#3m
z0L?~8Vod;?Y<wdEMO<nn9V~y<Y_ufyb-KIp$)1RLxg}sq=K0w5@0;@3rD{AmOI$Wo
z7K5BJZ<25%ab_nw<t<kZ-I}psbbPvYfTEn8PqZZl$`up`PByV%wl%<5Kv1neEL9lE
zb1SQ;M}a#X_@=V1IW(rteyI0uj?gagaf9Fn{u&vV8%Q7!@5|m~CWYW`+?xnqE_kB5
z@hE{VK^72?1}W<!(4yq5qA-y(d@FXFECSTjy}+n9*owSbLZWX=KGVUW^V{0{GJ4-B
zse=`@17*O*YB~hgGhr)X;Vl*;=DaHuKPqg%w`&tIG0|QZRYrIR8heNcKT~Zm1jKKM
zf9=F0My2(gC8ayJ!}-u(US7hIny8S4?KrWY0vrDgX2teIQn106oXjK$42wC1SxKsr
z<zr@HL7kL4L=hp+)jsKbcv4q@YU2!SKJBBdC#L4rL-@+_9qg^^uu(9x#sGp`b2lE&
zXT1D3d?j@)abPR`J5j67RZyh;HM8bl;C27(14Dbx<nEi&w-}i9hws&6!oH}hFLKY2
z9@bVoy$wdxs6B-C+gq#uS+^nw8oBNWAO0VdAH*DiOU_&B9{hb4{X;k+4-g<#^=zwt
zd+<LjmQ#<d2hL}tTRHFP$@k(PvK2_sQ&1a9EX24G(8T+P>V=vnIKXQsto{eljI>&?
z<O3*E%U{PR%~Tpd@BWMC#sKjzG-Y)=w8T|>;s3QCrwBW3w_Ckbll;-_;l;kf92tPF
zXw0FggEySwXib(oT3G(zA%9^4N=P_{I4p%XJAaf2`J|eZ6%ZfIXR{QWQ%p`4z?+U<
zPwtRb4`~vZ-w5qmYY_M)QS#r8Re{5pOmZN{-XXKh)Cgq4zJ5*HMy*X9CYJL@rA%j|
zADIJ0F0xC^K50gIQJCKgAJY@W`2IEn$9XVqf%M<;v^y@P_)+A*@7`foT1P}I-jIf7
zn_*Vu|5I>D9PXV<?WdvUe`#w|G_x17Zkb%iKgZBF$k+z~slzz~GF`!JV^$_Em;il@
z>0Uc0p?U0%w0}@=NQbmX98lvIHsLN!-NC5wYn}#wL3+blUw-2ue@B1+;zuEohssxz
zM{0At3Nwd^m85a0>!Zg&pT+`;{r1QCnSSY&{GwLG8FMq2y2uk6?YM&pFJ_Zvch6$F
z!|2&qWH>nmMO4G_O%E@J9lt)Fql(7cmw*kOGAiH;^NJWD{)VQCBJ%6|`8`j7&wu~#
zryUiih7UJX8qUJSPtoB{K6~Lb+6H8x|GRk9|BDy=|0)o-Nsev>g881}1}ZBHjme!>
zC?a?jMU=U3UVzRcP9R1&lR5al0B`mh8QFK{_F0z{hB~v{xwF3aoqG)-_8o{kvEv2J
zrSql@d{Vj-Gv2)`z3r_t(O;hXoPq?y!~ihSjc57FrZ`!6R>OU&C7P0`7OUYA9+OLq
zP@;8k_177q8U4#m)VoWF{U;<_dF`~R|EiwRN6Z%}mLlsryLt+o8*?usob&#wG|xug
z1*{#U;GGbuL5d%l2+WKzR)DSkbCwX;AZ2IyL7)CEY_L8nYsc51K|g->H4mH%w%$2r
zmSdachqB8?S3n3|H=c|k3`hwB&8OOj`ci+wv_;Rnf@?<|&*X|{&o_F&xgT%0+<qv!
zm+4G`Oq5X`{Lp_GhzyW{C_4FE9wnj<zj<&Ed|VwCItzx!57uD5ITLXpC3q2DOfVX7
z3rxFnz{XW%7pT5q4@hMe7s#CNEQ$wFP+*Vcs<As)0X445>(BGXvxd1rG|O-m-;bVR
z1&DWOkW(v?RU0Y(%=RN)DUH2&Wi2B4{vo{xg|mgjEJngh(py!o$Q&R4m6$7bxoJ-f
zAnNoX5J^3T&z^x4SIkW?oGfx;0z;|T7J^z_{}MzHfk@-7+Y`b2b@D@v#kO@;E;jH9
zOVuNprYs(MNCr;H2<tKXzz3}FLfCWoY})nJ4{zOE93W*&V#<b3tASdTqIT`efC9b4
zpaR|9f-%5aDcjg@KmQ{)ExWW-CPlxF5l%%1&Q0%FAZNB=zohIm3E_YVNZ4eDPPY3`
zG$(c&oHMhtLke_Is+g#%oZn`w$vms#9Jp-C#OGBnxGeMbeQXq48prauLodVPE^9RY
zv#2j+Cg<CK{){WoM`wtqPsEH@8{N;2L%K@6vjJ1}yhn>Y`@X7`!*CGeGPwlqyTfK{
z?}fSID>a1qSl|?h0~YGj4nGbzH2QGuK9*ykqs6_&jO(iDSt2}u?_*?P0%jDR!R7$w
zZTB=CDDA(!@Ni_bKX8DV4hmSMjh+9i0Lty0Ox5mqp8LW!ru00X(q7l7p{~)CBi5?U
zrW-+R!I6T3!uv&Ad0U&ywFSmR=Y5a_LBYYYY<#x@UZY9ZG#a<9u3_2Yfqfb5wE2)3
z@cmLOA6%UYn13IpepP7_7nQ6uc?mpxP7nw?OrChg=L4~Su&Ph68YpWRyTqFSs+v5T
zzTH2CYzL?r;C+?TKI1oxcMo9DX3pHw{uNbti&^8~iwyG<A$nJ;pmgX)jZ!e6>6eg#
z7C%!DH$Y>;u-G#U&h)OC!;%OcAimr|f6fLgmbzgnX$ZB`kKn&y@%LYjpWP?^-Ynm<
z^D4DHFYF=~NF&^JVC9wv>DcS6lf4A3SMIOqLg~;+FKxU$r2hOl4y}8>z4$0usc;cj
zwCHTfP)mW{B(@#8I%=|?dsORYXbS+p=PrQ8d$Nn~LR(awS&4p#n3<VoPdy^&g<K#k
zuT0PD+tZJao77aKL<eGxUOX3*^z*;j9ou!agayjdkt`V?g}shFAe<L>`>G65HH}0(
zC_>FAa)b}l#}o5}n4M;IwM7~Os{!peIdfG!ogeQ(ZXQem2J+&G5p<_MUkwa3&653U
zg^^T;x^JYwCMKe8oce_{S@3c7SEhjc4h#k?c0Guqwz6h_#|-LF=1q7v@i$y>0XHG3
zH{!;%+lo^K<rAE?o}G#18dMY%5tgv+>ouss(Xx3SDA)!M0<L^2`Xacgk0CJAxl>~w
zy>=4E(VrwxK9{5jlV7b};w-ZyRa{VL#?%043_)kIgzkf^q1+lt&GCUjX6IdpmWvp%
zYGgi)27XY6c(Ir{8AGb?!Nt3H&<i!GfHuAfDq-MYiBR&1fj&O;(5J-GxqkaR!?~H%
zy{H?mv-lEXsIT>_mBr!Y<yo3SVFEw?q6<1>!Gcz3ta+qSbhL>Wew3|=-m_R-O`)Sc
z{>e0J>xI_+R>6khq1@pF5XgzQQM`mMt2GOc(78_=(YsvO@fJjn;CA(;rCesJ!9HR=
z^(s6aTA6AwY*6vx>Q@jsf4}sEA<gZ{#7-5@HowM|c7xU0QR1O57cZ?w%&~@a*(X3v
zK~(;d$t?j|P9$9NaIG;_Xm3hlbD-E$70}X{%FTLX0yz)L*bHDfR>QUGU}8XIrO0*6
zQvKH4zkDI5pOgCD7F^P%`2L*n{*=GSs#4FKS^66Z`*sG>Or8%&&}V%4Qf>a{$F~$}
z@dG8#zD#cxIXCDv>}7IxIyY?nAJet`(D1kS=jZ2VjqQE{m$?CZQ<cDc_}us8#kK>$
z5o@LAbN@$L{`qhic#8P$6EEhTJd^kBP2|kUp_2JoS(D7?m1R{$@BjN&_tNFdljrUG
zbNl{O;3WtrZ{PnW_BU#t@{+~Mv-pyL^Of$Oj@18C22Kx^UwSDCPEG}W3le~L-m$65
z@OkH$=m8gvyw#mF-_}Y0$IaD=-);ftCz^|9*GZSHDpxChdEtUyW#R35<MhxH8{i1k
z_kI5le=(a^o!4w)YPx)Rec@kT;KA1I5{*4vRo^0ZDC~U$ntTQJ6#eGKRjp)K-#bAt
zp3}wJ>W8iF=A*zOA<E<MdLMgz8T&U!q*<AvTWDF>*kphg@2x*$`(f$TJrB~?x9!ZX
ze;s{a^lSKQVCFxyD)f4qsB<jyWJ?wGNiR?4>hGB#XAhd>S=jzhck`F%^^$*d54_L(
z`F4Gi#Gg~&KOg#d*zdO(Pm0@dw^RpK!@}Qt4ZG(5Idz|N@1yHiM7D%`PG7h7-|`J<
zUz1;60!`UW^VZ*OV{2QQvbwHtePQEzxi>X$SBv|{p4sBh3Uv7XhgWAZKDNIq(|^io
z&G*Ooz=>VC?(Sd3S-|tiC&hip=G=aB^^$$x9z0m^)@IHr1-aAmN8FWmewFF%Ps;_J
zVtciE@;=4S&(2Mabv`^vLVog!dxuXxhzBp+(R$x{pBcDt=hY`Rb-h9l(}w$hUhUln
z9%T;dJ+01E#saKpxz^cLmz5t(UCCPgW@A9x*Xsfyk2?28Z~wN;EcojA0`D2>Kf^-r
z?3I4~`u4kfhXRdQY;-{5jE74Xy^s_2u>Epw@zL|qIdSe2rnk-n6%ffxynRny+@K{-
zgTqu%Z<FWTGgxmExVTL6xz0(@7$RuAZxwJGaBymY8E9)IsIWQ*T1gJN`Uz5U1*8HS
zds@w#En&S)&^_mt-oPdcSbw7yaDQ)z<el}igWqefx*Bjg_xh@HIl!}p1U_^Fi@f-#
zUB|x4$Vg2<8QK1-2^_n7y*V~EeD%bKiGKtC9$u#{&I&g1!#3b{|9g4%UXZPa4eNo9
zuetjNbS@6awfUgk#Jm4$fR2g)x^*AuzTVQ$!Icol?a_rS7G2M^Fd;xGH&=-lxVByB
z=cI^Ppc55~gsKm&kG!Am!ep76&c;+HE+Oyl5pfxq0*c))0N00ZEwa&??7yer&j#Uq
z5!eE?SMmD_c9uoHo)|CI{*+T6bU5CtLY~H+r^ixR<2gWensGL;LlXG2=20uKVtVfm
z+19yu-a$d&sDokJe)qONId58jt&00Fxsy{;R@(I2>|@8=szuXsSzb9L`24ry;pg`(
zQabs5<=k%}#}|V}{Di6={zz26$KmsOmSLbC-)m?`9@rif0dC}5IjuG6HY{=*B!Q7>
z>;*bp2pk0AzzS@~rbrDDNcaG!5P*l%E_Q(}J1<xYj1%qItxmA9fuW_{A$iBr($syE
zTCon<_QdmbLi_wkOyI%+(C)n{%*jP=d*9b1O*I@+TiK<qy#JBi(rJ&vy;l4v`qTA$
zN>o?8=E6s(KWe`V&RPi?yq)T#wQ0}2@B4v`8^*orYVfuS>Ny!7w40KX1nbl$bg3L%
z&(Sy2^;LxlaJ?>1=suIL`yf*aC&CM#!DBK{9JD3#E$i|cSWE&Bs`(AgfgBa^9nPQ(
wD&WxI&{hkLU=|zT;Lzin%N9R?YW(n@@sZ^WFFO%;Wd<PdboFyt=akR{0JYeewg3PC

literal 0
HcmV?d00001

diff --git a/playbooks/Palo_Alto_Firewall_Outbound_Traffic_Filtering.py b/playbooks/Palo_Alto_Firewall_Outbound_Traffic_Filtering.py
new file mode 100644
index 0000000000..00c9cb0837
--- /dev/null
+++ b/playbooks/Palo_Alto_Firewall_Outbound_Traffic_Filtering.py
@@ -0,0 +1,165 @@
+"""
+Accepts a URL or list of URLs as input. Uses Panorama to block the given URLs in Palo Alto Firewall.\n\nhttps://d3fend.mitre.org/technique/d3f:OutboundTrafficFiltering/
+"""
+
+
+import phantom.rules as phantom
+import json
+from datetime import datetime, timedelta
+
+
+@phantom.playbook_block()
+def on_start(container):
+    phantom.debug('on_start() called')
+
+    # call 'url_input_filter' block
+    url_input_filter(container=container)
+
+    return
+
+@phantom.playbook_block()
+def url_input_filter(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs):
+    phantom.debug("url_input_filter() called")
+
+    ################################################################################
+    # Check if input url contains a value
+    ################################################################################
+
+    # collect filtered artifact ids and results for 'if' condition 1
+    matched_artifacts_1, matched_results_1 = phantom.condition(
+        container=container,
+        conditions=[
+            ["playbook_input:input_url", "!=", None]
+        ],
+        name="url_input_filter:condition_1")
+
+    # call connected blocks if filtered artifacts or results
+    if matched_artifacts_1 or matched_results_1:
+        block_url(action=action, success=success, container=container, results=results, handle=handle, filtered_artifacts=matched_artifacts_1, filtered_results=matched_results_1)
+
+    return
+
+
+@phantom.playbook_block()
+def block_url_success_filter(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs):
+    phantom.debug("block_url_success_filter() called")
+
+    ################################################################################
+    # Determine if the block url action was successful or not.
+    ################################################################################
+
+    # collect filtered artifact ids and results for 'if' condition 1
+    matched_artifacts_1, matched_results_1 = phantom.condition(
+        container=container,
+        conditions=[
+            ["block_url:action_result.status", "==", "success"]
+        ],
+        name="block_url_success_filter:condition_1")
+
+    # call connected blocks if filtered artifacts or results
+    if matched_artifacts_1 or matched_results_1:
+        build_observable(action=action, success=success, container=container, results=results, handle=handle, filtered_artifacts=matched_artifacts_1, filtered_results=matched_results_1)
+
+    return
+
+
+@phantom.playbook_block()
+def build_observable(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs):
+    phantom.debug("build_observable() called")
+
+    ################################################################################
+    # This block uses custom code to generate a normalized observable dictionary.
+    ################################################################################
+
+    block_url_result_data = phantom.collect2(container=container, datapath=["block_url:action_result.parameter.url","block_url:action_result.status"], action_results=results)
+
+    block_url_parameter_url = [item[0] for item in block_url_result_data]
+    block_url_result_item_1 = [item[1] for item in block_url_result_data]
+
+    build_observable__observable_array = None
+
+    ################################################################################
+    ## Custom Code Start
+    ################################################################################
+
+    build_observable__observable_array = list()
+    for status, url in zip(block_url_result_item_1, block_url_parameter_url):
+        observable = {
+            "type": "url",
+            "value": url,
+            "source": "Panorama",
+            "status": status
+        }
+            
+        build_observable__observable_array.append(observable)
+
+    ################################################################################
+    ## Custom Code End
+    ################################################################################
+
+    phantom.save_run_data(key="build_observable:observable_array", value=json.dumps(build_observable__observable_array))
+
+    return
+
+
+@phantom.playbook_block()
+def block_url(action=None, success=None, container=None, results=None, handle=None, filtered_artifacts=None, filtered_results=None, custom_function=None, **kwargs):
+    phantom.debug("block_url() called")
+
+    # phantom.debug('Action: {0} {1}'.format(action['name'], ('SUCCEEDED' if success else 'FAILED')))
+
+    ################################################################################
+    # Block urls in Panorama
+    ################################################################################
+
+    filtered_input_0_input_url = phantom.collect2(container=container, datapath=["filtered-data:url_input_filter:condition_1:playbook_input:input_url"])
+
+    parameters = []
+
+    # build parameters list for 'block_url' call
+    for filtered_input_0_input_url_item in filtered_input_0_input_url:
+        if filtered_input_0_input_url_item[0] is not None:
+            parameters.append({
+                "url": filtered_input_0_input_url_item[0],
+                "device_group": "shared",
+                "should_commit_changes": True,
+            })
+
+    ################################################################################
+    ## Custom Code Start
+    ################################################################################
+
+    # Write your custom code here...
+
+    ################################################################################
+    ## Custom Code End
+    ################################################################################
+
+    phantom.act("block url", parameters=parameters, name="block_url", assets=["panorama"], callback=block_url_success_filter)
+
+    return
+
+
+@phantom.playbook_block()
+def on_finish(container, summary):
+    phantom.debug("on_finish() called")
+
+    build_observable__observable_array = json.loads(_ if (_ := phantom.get_run_data(key="build_observable:observable_array")) != "" else "null")  # pylint: disable=used-before-assignment
+
+    output = {
+        "observable": build_observable__observable_array,
+    }
+
+    ################################################################################
+    ## Custom Code Start
+    ################################################################################
+
+    # Write your custom code here...
+
+    ################################################################################
+    ## Custom Code End
+    ################################################################################
+
+    phantom.save_playbook_output_data(output=output)
+
+    return
\ No newline at end of file
diff --git a/playbooks/Palo_Alto_Firewall_Outbound_Traffic_Filtering.yml b/playbooks/Palo_Alto_Firewall_Outbound_Traffic_Filtering.yml
new file mode 100644
index 0000000000..a74915690b
--- /dev/null
+++ b/playbooks/Palo_Alto_Firewall_Outbound_Traffic_Filtering.yml
@@ -0,0 +1,23 @@
+name: Palo Alto Firewall Outbound Traffic Filtering
+id: 5e3e061f-5206-49ac-88f4-4e818a20b2a9
+version: 1
+date: '2023-05-19'
+author: Patrick Bareiss, Splunk
+type: Investigation
+description: Accepts a URL or list of URLs as input. Uses Panorama to block the given URLs in Palo Alto Firewall.
+playbook: Palo_Alto_Firewall_Outbound_Traffic_Filtering
+how_to_implement: This input playbook requires the Panorama connector to be configured. It is designed to work in conjunction with the Dispatch Block Known Phishing URLs or other playbooks in the same style. 
+references: 
+- https://d3fend.mitre.org/technique/d3f:OutboundTrafficFiltering/
+app_list: 
+  - Panorama
+tags:
+  platform_tags:
+    - denylist
+    - url
+    - Panorama
+  playbook_type: Input
+  vpe_type: Modern
+  playbook_fields: []
+  product:
+  - Splunk SOAR

From e0a9df1796882cb01eddbd1e94a7215ab6ca8636 Mon Sep 17 00:00:00 2001
From: P4T12ICK <patrickbareiss1989@gmail.com>
Date: Wed, 21 Jun 2023 11:59:22 +0200
Subject: [PATCH 2/3] Fixed based on the given feedback

---
 ...son => Panorama_Outbound_Traffic_Filtering.json} |   8 ++++----
 ....png => Panorama_Outbound_Traffic_Filtering.png} | Bin
 ...ng.py => Panorama_Outbound_Traffic_Filtering.py} |   9 +++++----
 ....yml => Panorama_Outbound_Traffic_Filtering.yml} |   4 ++--
 4 files changed, 11 insertions(+), 10 deletions(-)
 rename playbooks/{Palo_Alto_Firewall_Outbound_Traffic_Filtering.json => Panorama_Outbound_Traffic_Filtering.json} (95%)
 rename playbooks/{Palo_Alto_Firewall_Outbound_Traffic_Filtering.png => Panorama_Outbound_Traffic_Filtering.png} (100%)
 rename playbooks/{Palo_Alto_Firewall_Outbound_Traffic_Filtering.py => Panorama_Outbound_Traffic_Filtering.py} (93%)
 rename playbooks/{Palo_Alto_Firewall_Outbound_Traffic_Filtering.yml => Panorama_Outbound_Traffic_Filtering.yml} (86%)

diff --git a/playbooks/Palo_Alto_Firewall_Outbound_Traffic_Filtering.json b/playbooks/Panorama_Outbound_Traffic_Filtering.json
similarity index 95%
rename from playbooks/Palo_Alto_Firewall_Outbound_Traffic_Filtering.json
rename to playbooks/Panorama_Outbound_Traffic_Filtering.json
index bec445d891..42e6d83e02 100644
--- a/playbooks/Palo_Alto_Firewall_Outbound_Traffic_Filtering.json
+++ b/playbooks/Panorama_Outbound_Traffic_Filtering.json
@@ -68,7 +68,7 @@
                     "type": "start",
                     "warnings": {},
                     "x": 19.999999999999986,
-                    "y": -6.394884621840902e-14
+                    "y": -1.2789769243681803e-13
                 },
                 "1": {
                     "data": {
@@ -175,7 +175,7 @@
                         "functionName": "build_observable",
                         "id": "5",
                         "inputParameters": [
-                            "block_url:action_result.parameter.url",
+                            "filtered-data:url_input_filter:condition_1:playbook_input:input_url",
                             "block_url:action_result.status"
                         ],
                         "outputVariables": [
@@ -186,7 +186,7 @@
                     "errors": {},
                     "id": "5",
                     "type": "code",
-                    "userCode": "\n    build_observable__observable_array = list()\n    for status, url in zip(block_url_result_item_1, block_url_parameter_url):\n        observable = {\n            \"type\": \"url\",\n            \"value\": url,\n            \"source\": \"Panorama\",\n            \"status\": status\n        }\n            \n        build_observable__observable_array.append(observable)\n\n",
+                    "userCode": "\n    build_observable__observable_array = list()\n    for status, url in zip(block_url_result_item_0, filtered_input_0_input_url_values):\n        observable = {\n            \"type\": \"url\",\n            \"value\": url,\n            \"source\": \"Panorama\",\n            \"status\": status\n        }\n            \n        build_observable__observable_array.append(observable)\n\n",
                     "warnings": {},
                     "x": 0,
                     "y": 640
@@ -271,7 +271,7 @@
         "schema": "5.0.9",
         "version": "6.0.0.114895"
     },
-    "create_time": "2023-05-19T10:28:29.149331+00:00",
+    "create_time": "2023-06-21T09:55:36.545195+00:00",
     "draft_mode": false,
     "labels": [
         "*"
diff --git a/playbooks/Palo_Alto_Firewall_Outbound_Traffic_Filtering.png b/playbooks/Panorama_Outbound_Traffic_Filtering.png
similarity index 100%
rename from playbooks/Palo_Alto_Firewall_Outbound_Traffic_Filtering.png
rename to playbooks/Panorama_Outbound_Traffic_Filtering.png
diff --git a/playbooks/Palo_Alto_Firewall_Outbound_Traffic_Filtering.py b/playbooks/Panorama_Outbound_Traffic_Filtering.py
similarity index 93%
rename from playbooks/Palo_Alto_Firewall_Outbound_Traffic_Filtering.py
rename to playbooks/Panorama_Outbound_Traffic_Filtering.py
index 00c9cb0837..0fbbe34703 100644
--- a/playbooks/Palo_Alto_Firewall_Outbound_Traffic_Filtering.py
+++ b/playbooks/Panorama_Outbound_Traffic_Filtering.py
@@ -71,10 +71,11 @@ def build_observable(action=None, success=None, container=None, results=None, ha
     # This block uses custom code to generate a normalized observable dictionary.
     ################################################################################
 
-    block_url_result_data = phantom.collect2(container=container, datapath=["block_url:action_result.parameter.url","block_url:action_result.status"], action_results=results)
+    filtered_input_0_input_url = phantom.collect2(container=container, datapath=["filtered-data:url_input_filter:condition_1:playbook_input:input_url"])
+    block_url_result_data = phantom.collect2(container=container, datapath=["block_url:action_result.status"], action_results=results)
 
-    block_url_parameter_url = [item[0] for item in block_url_result_data]
-    block_url_result_item_1 = [item[1] for item in block_url_result_data]
+    filtered_input_0_input_url_values = [item[0] for item in filtered_input_0_input_url]
+    block_url_result_item_0 = [item[0] for item in block_url_result_data]
 
     build_observable__observable_array = None
 
@@ -83,7 +84,7 @@ def build_observable(action=None, success=None, container=None, results=None, ha
     ################################################################################
 
     build_observable__observable_array = list()
-    for status, url in zip(block_url_result_item_1, block_url_parameter_url):
+    for status, url in zip(block_url_result_item_0, filtered_input_0_input_url_values):
         observable = {
             "type": "url",
             "value": url,
diff --git a/playbooks/Palo_Alto_Firewall_Outbound_Traffic_Filtering.yml b/playbooks/Panorama_Outbound_Traffic_Filtering.yml
similarity index 86%
rename from playbooks/Palo_Alto_Firewall_Outbound_Traffic_Filtering.yml
rename to playbooks/Panorama_Outbound_Traffic_Filtering.yml
index a74915690b..2fb4aa1a44 100644
--- a/playbooks/Palo_Alto_Firewall_Outbound_Traffic_Filtering.yml
+++ b/playbooks/Panorama_Outbound_Traffic_Filtering.yml
@@ -1,11 +1,11 @@
-name: Palo Alto Firewall Outbound Traffic Filtering
+name: Panorama Outbound Traffic Filtering
 id: 5e3e061f-5206-49ac-88f4-4e818a20b2a9
 version: 1
 date: '2023-05-19'
 author: Patrick Bareiss, Splunk
 type: Investigation
 description: Accepts a URL or list of URLs as input. Uses Panorama to block the given URLs in Palo Alto Firewall.
-playbook: Palo_Alto_Firewall_Outbound_Traffic_Filtering
+playbook: Panorama_Outbound_Traffic_Filtering
 how_to_implement: This input playbook requires the Panorama connector to be configured. It is designed to work in conjunction with the Dispatch Block Known Phishing URLs or other playbooks in the same style. 
 references: 
 - https://d3fend.mitre.org/technique/d3f:OutboundTrafficFiltering/

From 106098d07c4b50eff3061863b5e1eb1f926bd581 Mon Sep 17 00:00:00 2001
From: P4T12ICK <patrickbareiss1989@gmail.com>
Date: Wed, 21 Jun 2023 16:25:04 +0200
Subject: [PATCH 3/3] Improvements

---
 playbooks/Panorama_Outbound_Traffic_Filtering.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/playbooks/Panorama_Outbound_Traffic_Filtering.yml b/playbooks/Panorama_Outbound_Traffic_Filtering.yml
index 2fb4aa1a44..0d11b42dd0 100644
--- a/playbooks/Panorama_Outbound_Traffic_Filtering.yml
+++ b/playbooks/Panorama_Outbound_Traffic_Filtering.yml
@@ -3,10 +3,10 @@ id: 5e3e061f-5206-49ac-88f4-4e818a20b2a9
 version: 1
 date: '2023-05-19'
 author: Patrick Bareiss, Splunk
-type: Investigation
+type: Response
 description: Accepts a URL or list of URLs as input. Uses Panorama to block the given URLs in Palo Alto Firewall.
 playbook: Panorama_Outbound_Traffic_Filtering
-how_to_implement: This input playbook requires the Panorama connector to be configured. It is designed to work in conjunction with the Dispatch Block Known Phishing URLs or other playbooks in the same style. 
+how_to_implement: This input playbook requires the Panorama connector to be configured. It is designed to work in conjunction with the Dynamic URL Outbound Traffic Filtering Analysis playbook or other playbooks in the same style.
 references: 
 - https://d3fend.mitre.org/technique/d3f:OutboundTrafficFiltering/
 app_list: