From df24445ac691a5da195f18a3ca3f214e5928e38a Mon Sep 17 00:00:00 2001 From: Alicia Sykes Date: Sat, 29 Jul 2023 09:38:25 +0100 Subject: [PATCH 01/13] Re-wrote sitemap lambda function --- api/sitemap.js | 66 ++++++++++++++++++++++++++++++++------------------ 1 file changed, 43 insertions(+), 23 deletions(-) diff --git a/api/sitemap.js b/api/sitemap.js index 8b57f01..ba2453a 100644 --- a/api/sitemap.js +++ b/api/sitemap.js @@ -2,40 +2,60 @@ const axios = require('axios'); const xml2js = require('xml2js'); exports.handler = async (event) => { - const baseUrl = event.queryStringParameters.url.replace(/^(?:https?:\/\/)?/i, ""); - const url = baseUrl.startsWith('http') ? baseUrl : `http://${baseUrl}`; - let sitemapUrl; + const url = event.queryStringParameters.url; + let sitemapUrl = `${url}/sitemap.xml`; try { - // Fetch robots.txt - const robotsRes = await axios.get(`${url}/robots.txt`); - const robotsTxt = robotsRes.data.split('\n'); + // Try to fetch sitemap directly + let sitemapRes; + try { + sitemapRes = await axios.get(sitemapUrl, { timeout: 5000 }); + } catch (error) { + if (error.response && error.response.status === 404) { + // If sitemap not found, try to fetch it from robots.txt + const robotsRes = await axios.get(`${url}/robots.txt`, { timeout: 5000 }); + const robotsTxt = robotsRes.data.split('\n'); - for (let line of robotsTxt) { - if (line.startsWith('Sitemap:')) { - sitemapUrl = line.split(' ')[1]; + for (let line of robotsTxt) { + if (line.toLowerCase().startsWith('sitemap:')) { + sitemapUrl = line.split(' ')[1].trim(); + break; + } + } + + if (!sitemapUrl) { + return { + statusCode: 404, + body: JSON.stringify({ skipped: 'No sitemap found' }), + }; + } + + sitemapRes = await axios.get(sitemapUrl, { timeout: 5000 }); + } else { + throw error; // If other error, throw it } } - if (!sitemapUrl) { - return { - statusCode: 404, - body: JSON.stringify({ error: 'Sitemap not found in robots.txt' }), - }; - } - - // Fetch sitemap - const sitemapRes = await axios.get(sitemapUrl); - const sitemap = await xml2js.parseStringPromise(sitemapRes.data); + const parser = new xml2js.Parser(); + const sitemap = await parser.parseStringPromise(sitemapRes.data); return { statusCode: 200, body: JSON.stringify(sitemap), }; } catch (error) { - return { - statusCode: 500, - body: JSON.stringify({ error: error.message }), - }; + // If error occurs + console.log(error.message); + if (error.code === 'ECONNABORTED') { + return { + statusCode: 500, + body: JSON.stringify({ error: 'Request timed out' }), + }; + } else { + return { + statusCode: 500, + body: JSON.stringify({ error: error.message }), + }; + } } }; From 017a1f86a68f50fbab4e6c87783a67627596fa47 Mon Sep 17 00:00:00 2001 From: Alicia Sykes Date: Sat, 29 Jul 2023 09:40:21 +0100 Subject: [PATCH 02/13] Fixed link to license --- src/components/misc/Footer.tsx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/components/misc/Footer.tsx b/src/components/misc/Footer.tsx index 432d31a..dcf61f4 100644 --- a/src/components/misc/Footer.tsx +++ b/src/components/misc/Footer.tsx @@ -41,7 +41,7 @@ const Link = styled.a` `; const Footer = (props: { isFixed?: boolean }): JSX.Element => { - const licenseUrl = 'https://github.com/lissy93/web-check/blob/main/LICENSE'; + const licenseUrl = 'https://github.com/lissy93/web-check/blob/master/LICENSE'; const authorUrl = 'https://aliciasykes.com'; const githubUrl = 'https://github.com/lissy93/web-check'; return ( From dc651a7b1e90d825f422811967e6f6f11be1f913 Mon Sep 17 00:00:00 2001 From: Alicia Sykes Date: Sat, 29 Jul 2023 11:38:12 +0100 Subject: [PATCH 03/13] Adds card for fetching displaying social meta tags --- api/social-tags.js | 68 +++++++++++++++++++++++++++ src/components/Results/SocialTags.tsx | 44 +++++++++++++++++ src/pages/Results.tsx | 10 ++++ 3 files changed, 122 insertions(+) create mode 100644 api/social-tags.js create mode 100644 src/components/Results/SocialTags.tsx diff --git a/api/social-tags.js b/api/social-tags.js new file mode 100644 index 0000000..9b0af39 --- /dev/null +++ b/api/social-tags.js @@ -0,0 +1,68 @@ +const axios = require('axios'); +const cheerio = require('cheerio'); + +exports.handler = async (event, context) => { + let url = event.queryStringParameters.url; + + // Check if url includes protocol + if (!url.startsWith('http://') && !url.startsWith('https://')) { + url = 'http://' + url; + } + + try { + const response = await axios.get(url); + const html = response.data; + const $ = cheerio.load(html); + + const metadata = { + // Basic meta tags + title: $('head title').text(), + description: $('meta[name="description"]').attr('content'), + keywords: $('meta[name="keywords"]').attr('content'), + canonicalUrl: $('link[rel="canonical"]').attr('href'), + + // OpenGraph Protocol + ogTitle: $('meta[property="og:title"]').attr('content'), + ogType: $('meta[property="og:type"]').attr('content'), + ogImage: $('meta[property="og:image"]').attr('content'), + ogUrl: $('meta[property="og:url"]').attr('content'), + ogDescription: $('meta[property="og:description"]').attr('content'), + ogSiteName: $('meta[property="og:site_name"]').attr('content'), + + // Twitter Cards + twitterCard: $('meta[name="twitter:card"]').attr('content'), + twitterSite: $('meta[name="twitter:site"]').attr('content'), + twitterCreator: $('meta[name="twitter:creator"]').attr('content'), + twitterTitle: $('meta[name="twitter:title"]').attr('content'), + twitterDescription: $('meta[name="twitter:description"]').attr('content'), + twitterImage: $('meta[name="twitter:image"]').attr('content'), + + // Misc + themeColor: $('meta[name="theme-color"]').attr('content'), + robots: $('meta[name="robots"]').attr('content'), + googlebot: $('meta[name="googlebot"]').attr('content'), + generator: $('meta[name="generator"]').attr('content'), + viewport: $('meta[name="viewport"]').attr('content'), + author: $('meta[name="author"]').attr('content'), + publisher: $('link[rel="publisher"]').attr('href'), + favicon: $('link[rel="icon"]').attr('href') + }; + + if (Object.keys(metadata).length === 0) { + return { + statusCode: 200, + body: JSON.stringify({ skipped: 'No metadata found' }), + }; + } + + return { + statusCode: 200, + body: JSON.stringify(metadata), + }; + } catch (error) { + return { + statusCode: 500, + body: JSON.stringify({ error: 'Failed fetching data' }), + }; + } +}; diff --git a/src/components/Results/SocialTags.tsx b/src/components/Results/SocialTags.tsx new file mode 100644 index 0000000..d22dc0c --- /dev/null +++ b/src/components/Results/SocialTags.tsx @@ -0,0 +1,44 @@ + +import { Card } from 'components/Form/Card'; +import Row from 'components/Form/Row'; +import colors from 'styles/colors'; + +const cardStyles = ` + .banner-image img { + width: 100%; + border-radius: 4px; + margin: 0.5rem 0; + } + .color-field { + border-radius: 4px; + &:hover { + color: ${colors.primary}; + } + } +`; + +const SocialTagsCard = (props: {data: any, title: string, actionButtons: any }): JSX.Element => { + const tags = props.data; + return ( + + { tags.title && } + { tags.description && } + { tags.keywords && } + { tags.canonicalUrl && } + { tags.themeColor && + Theme Color + {tags.themeColor} + } + { tags.twitterSite && + Twitter Site + {tags.twitterSite} + } + { tags.author && } + { tags.publisher && } + { tags.generator && } + { tags.ogImage &&
Banner
} + + ); +} + +export default SocialTagsCard; diff --git a/src/pages/Results.tsx b/src/pages/Results.tsx index 0886a2c..4ba37c2 100644 --- a/src/pages/Results.tsx +++ b/src/pages/Results.tsx @@ -46,6 +46,7 @@ import DnsServerCard from 'components/Results/DnsServer'; import TechStackCard from 'components/Results/TechStack'; import SecurityTxtCard from 'components/Results/SecurityTxt'; import ContentLinksCard from 'components/Results/ContentLinks'; +import SocialTagsCard from 'components/Results/SocialTags'; import keys from 'utils/get-keys'; import { determineAddressType, AddressType } from 'utils/address-type-checker'; @@ -341,6 +342,14 @@ const Results = (): JSX.Element => { fetchRequest: () => fetch(`${api}/security-txt?url=${address}`).then(res => parseJson(res)), }); + // Get social media previews, from a sites social meta tags + const [socialTagResults, updateSocialTagResults] = useMotherHook({ + jobId: 'social-tags', + updateLoadingJobs, + addressInfo: { address, addressType, expectedAddressTypes: urlTypeOnly }, + fetchRequest: () => fetch(`${api}/social-tags?url=${address}`).then(res => parseJson(res)), + }); + // Get site features from BuiltWith const [siteFeaturesResults, updateSiteFeaturesResults] = useMotherHook({ jobId: 'features', @@ -435,6 +444,7 @@ const Results = (): JSX.Element => { { id: 'hsts', title: 'HSTS Check', result: hstsResults, Component: HstsCard, refresh: updateHstsResults }, { id: 'whois', title: 'Domain Info', result: whoIsResults, Component: WhoIsCard, refresh: updateWhoIsResults }, { id: 'dns-server', title: 'DNS Server', result: dnsServerResults, Component: DnsServerCard, refresh: updateDnsServerResults }, + { id: 'social-tags', title: 'Social Tags', result: socialTagResults, Component: SocialTagsCard, refresh: updateSocialTagResults }, { id: 'linked-pages', title: 'Linked Pages', result: linkedPagesResults, Component: ContentLinksCard, refresh: updateLinkedPagesResults }, { id: 'features', title: 'Site Features', result: siteFeaturesResults, Component: SiteFeaturesCard, refresh: updateSiteFeaturesResults }, { id: 'sitemap', title: 'Pages', result: sitemapResults, Component: SitemapCard, refresh: updateSitemapResults }, From 7422d22538c5ab57ae314dc0a38788517f7413e1 Mon Sep 17 00:00:00 2001 From: Alicia Sykes Date: Sat, 29 Jul 2023 11:40:03 +0100 Subject: [PATCH 04/13] Adds compatibility for skipped checks for server host reasons --- src/components/misc/ProgressBar.tsx | 11 +++++++++-- src/hooks/motherOfAllHooks.ts | 22 +++++++++++----------- 2 files changed, 20 insertions(+), 13 deletions(-) diff --git a/src/components/misc/ProgressBar.tsx b/src/components/misc/ProgressBar.tsx index 1d2be06..90d1a9f 100644 --- a/src/components/misc/ProgressBar.tsx +++ b/src/components/misc/ProgressBar.tsx @@ -167,6 +167,9 @@ p { } pre { color: ${colors.danger}; + &.info { + color: ${colors.warning}; + } } `; @@ -202,7 +205,9 @@ const jobNames = [ 'sitemap', 'hsts', 'security-txt', + 'social-tags', 'linked-pages', + 'mail-server', // 'whois', 'features', 'carbon', @@ -360,7 +365,7 @@ const ProgressLoader = (props: { loadStatus: LoadingJob[], showModal: (err: Reac } }; - const showErrorModal = (name: string, state: LoadingState, timeTaken: number | undefined, error: string) => { + const showErrorModal = (name: string, state: LoadingState, timeTaken: number | undefined, error: string, isInfo?: boolean) => { const errorContent = ( Error Details for {name} @@ -368,7 +373,8 @@ const ProgressLoader = (props: { loadStatus: LoadingJob[], showModal: (err: Reac The {name} job failed with an {state} state after {timeTaken} ms. The server responded with the following error:

- 
{error}
+ { /* If isInfo == true, then add .info className to pre */} + 
{error}
 ); props.showModal(errorContent); @@ -409,6 +415,7 @@ const ProgressLoader = (props: { loadStatus: LoadingJob[], showModal: (err: Reac {(timeTaken && state !== 'loading') ? ` Took ${timeTaken} ms` : '' } { (retry && state !== 'success' && state !== 'loading') && ↻ Retry } { (error && state === 'error') && showErrorModal(name, state, timeTaken, error)}>■ Show Error } + { (error && state === 'skipped') && showErrorModal(name, state, timeTaken, error, true)}>■ Show Reason } ); }) diff --git a/src/hooks/motherOfAllHooks.ts b/src/hooks/motherOfAllHooks.ts index 8ff5ff0..fae8b16 100644 --- a/src/hooks/motherOfAllHooks.ts +++ b/src/hooks/motherOfAllHooks.ts @@ -38,21 +38,20 @@ const useMotherOfAllHooks = (params: UseIpAddressProps { return fetchRequest() .then((res: any) => { - if (!res) { + if (!res) { // No response :( + updateLoadingJobs(jobId, 'error', res.error || 'No response', reset); + } else if (res.error) { // Response returned an error message updateLoadingJobs(jobId, 'error', res.error, reset); - throw new Error('No response'); + } else if (res.skipped) { // Response returned a skipped message + updateLoadingJobs(jobId, 'skipped', res.skipped, reset); + } else { // Yay, everything went to plan :) + setResult(res); + updateLoadingJobs(jobId, 'success', '', undefined, res); } - if (res.error) { - updateLoadingJobs(jobId, 'error', res.error, reset); - throw new Error(res.error); - } - // All went to plan, set results and mark as done - setResult(res); - updateLoadingJobs(jobId, 'success', '', undefined, res); }) .catch((err) => { - // Something fucked up, log the error - updateLoadingJobs(jobId, 'error', err.error || err.message, reset); + // Something fucked up + updateLoadingJobs(jobId, 'error', err.error || err.message || 'Unknown error', reset); throw err; }) } @@ -69,6 +68,7 @@ const useMotherOfAllHooks = (params: UseIpAddressProps {}); From e3541679c2e3ae634d65f7ccdd380e279dc4f3e0 Mon Sep 17 00:00:00 2001 From: Alicia Sykes Date: Sat, 29 Jul 2023 11:47:03 +0100 Subject: [PATCH 05/13] Skip check if no data returned from host --- api/get-carbon.js | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/api/get-carbon.js b/api/get-carbon.js index c11605b..2dc6d7c 100644 --- a/api/get-carbon.js +++ b/api/get-carbon.js @@ -41,6 +41,13 @@ exports.handler = async (event, context) => { }).on('error', reject); }); + if (!carbonData.statistics || (carbonData.statistics.adjustedBytes === 0 && carbonData.statistics.energy === 0)) { + return { + statusCode: 200, + body: JSON.stringify({ skipped: 'Not enough info to get carbon data' }), + }; + } + carbonData.scanUrl = url; return { statusCode: 200, From ae00af2e2430eabe25bc970298c364d8f11c0975 Mon Sep 17 00:00:00 2001 From: Alicia Sykes Date: Sat, 29 Jul 2023 19:18:10 +0100 Subject: [PATCH 06/13] Adds mail security config section --- api/mail-config.js | 79 +++++++++++++++++++++++++++ src/components/Results/MailConfig.tsx | 45 +++++++++++++++ src/components/misc/ProgressBar.tsx | 3 +- src/pages/Results.tsx | 10 ++++ 4 files changed, 136 insertions(+), 1 deletion(-) create mode 100644 api/mail-config.js create mode 100644 src/components/Results/MailConfig.tsx diff --git a/api/mail-config.js b/api/mail-config.js new file mode 100644 index 0000000..f575d40 --- /dev/null +++ b/api/mail-config.js @@ -0,0 +1,79 @@ +const dns = require('dns').promises; +const URL = require('url-parse'); + +exports.handler = async (event, context) => { + try { + let domain = event.queryStringParameters.url; + const parsedUrl = new URL(domain); + domain = parsedUrl.hostname || parsedUrl.pathname; + + // Get MX records + const mxRecords = await dns.resolveMx(domain); + + // Get TXT records + const txtRecords = await dns.resolveTxt(domain); + + // Filter for only email related TXT records (SPF, DKIM, DMARC, and certain provider verifications) + const emailTxtRecords = txtRecords.filter(record => { + const recordString = record.join(''); + return ( + recordString.startsWith('v=spf1') || + recordString.startsWith('v=DKIM1') || + recordString.startsWith('v=DMARC1') || + recordString.startsWith('protonmail-verification=') || + recordString.startsWith('google-site-verification=') || // Google Workspace + recordString.startsWith('MS=') || // Microsoft 365 + recordString.startsWith('zoho-verification=') || // Zoho + recordString.startsWith('titan-verification=') || // Titan + recordString.includes('bluehost.com') // BlueHost + ); + }); + + // Identify specific mail services + const mailServices = emailTxtRecords.map(record => { + const recordString = record.join(''); + if (recordString.startsWith('protonmail-verification=')) { + return { provider: 'ProtonMail', value: recordString.split('=')[1] }; + } else if (recordString.startsWith('google-site-verification=')) { + return { provider: 'Google Workspace', value: recordString.split('=')[1] }; + } else if (recordString.startsWith('MS=')) { + return { provider: 'Microsoft 365', value: recordString.split('=')[1] }; + } else if (recordString.startsWith('zoho-verification=')) { + return { provider: 'Zoho', value: recordString.split('=')[1] }; + } else if (recordString.startsWith('titan-verification=')) { + return { provider: 'Titan', value: recordString.split('=')[1] }; + } else if (recordString.includes('bluehost.com')) { + return { provider: 'BlueHost', value: recordString }; + } else { + return null; + } + }).filter(record => record !== null); + + // Check MX records for Yahoo + const yahooMx = mxRecords.filter(record => record.exchange.includes('yahoodns.net')); + if (yahooMx.length > 0) { + mailServices.push({ provider: 'Yahoo', value: yahooMx[0].exchange }); + } + + return { + statusCode: 200, + body: JSON.stringify({ + mxRecords, + txtRecords: emailTxtRecords, + mailServices, + }), + }; + } catch (error) { + if (error.code === 'ENOTFOUND' || error.code === 'ENODATA') { + return { + statusCode: 200, + body: JSON.stringify({ skipped: 'No mail server in use on this domain' }), + }; + } else { + return { + statusCode: 500, + body: JSON.stringify({ error: error.message }), + }; + } + } +}; diff --git a/src/components/Results/MailConfig.tsx b/src/components/Results/MailConfig.tsx new file mode 100644 index 0000000..b69c16d --- /dev/null +++ b/src/components/Results/MailConfig.tsx @@ -0,0 +1,45 @@ + +import { Card } from 'components/Form/Card'; +import Row from 'components/Form/Row'; +import Heading from 'components/Form/Heading'; +import colors from 'styles/colors'; + +const cardStyles = ``; + +const MailConfigCard = (props: {data: any, title: string, actionButtons: any }): JSX.Element => { + const mailServer = props.data; + const txtRecords = (mailServer.txtRecords || []).join('').toLowerCase() || ''; + return ( + + Mail Security Checklist + + + + + + { mailServer.mxRecords && MX Records} + { mailServer.mxRecords && mailServer.mxRecords.map((record: any) => ( + + {record.exchange} + {record.priority ? `Priority: ${record.priority}` : ''} + + )) + } + { mailServer.mailServices.length > 0 && External Mail Services} + { mailServer.mailServices && mailServer.mailServices.map((service: any) => ( + + )) + } + + { mailServer.txtRecords && Mail-related TXT Records} + { mailServer.txtRecords && mailServer.txtRecords.map((record: any) => ( + + {record} + + )) + } + + ); +} + +export default MailConfigCard; diff --git a/src/components/misc/ProgressBar.tsx b/src/components/misc/ProgressBar.tsx index 90d1a9f..9803205 100644 --- a/src/components/misc/ProgressBar.tsx +++ b/src/components/misc/ProgressBar.tsx @@ -194,6 +194,7 @@ const jobNames = [ 'hosts', 'quality', 'cookies', + 'ssl', // 'server-info', 'redirects', 'robots-txt', @@ -207,7 +208,7 @@ const jobNames = [ 'security-txt', 'social-tags', 'linked-pages', - 'mail-server', + 'mail-config', // 'whois', 'features', 'carbon', diff --git a/src/pages/Results.tsx b/src/pages/Results.tsx index 4ba37c2..5042b91 100644 --- a/src/pages/Results.tsx +++ b/src/pages/Results.tsx @@ -47,6 +47,7 @@ import TechStackCard from 'components/Results/TechStack'; import SecurityTxtCard from 'components/Results/SecurityTxt'; import ContentLinksCard from 'components/Results/ContentLinks'; import SocialTagsCard from 'components/Results/SocialTags'; +import MailConfigCard from 'components/Results/MailConfig'; import keys from 'utils/get-keys'; import { determineAddressType, AddressType } from 'utils/address-type-checker'; @@ -397,6 +398,14 @@ const Results = (): JSX.Element => { fetchRequest: () => fetch(`${api}/content-links?url=${address}`).then(res => parseJson(res)), }); + // Get mail config for server, based on DNS records + const [mailConfigResults, updateMailConfigResults] = useMotherHook({ + jobId: 'mail-config', + updateLoadingJobs, + addressInfo: { address, addressType, expectedAddressTypes: urlTypeOnly }, + fetchRequest: () => fetch(`${api}/mail-config?url=${address}`).then(res => parseJson(res)), + }); + /* Cancel remaining jobs after 10 second timeout */ useEffect(() => { const checkJobs = () => { @@ -443,6 +452,7 @@ const Results = (): JSX.Element => { { id: 'txt-records', title: 'TXT Records', result: txtRecordResults, Component: TxtRecordCard, refresh: updateTxtRecordResults }, { id: 'hsts', title: 'HSTS Check', result: hstsResults, Component: HstsCard, refresh: updateHstsResults }, { id: 'whois', title: 'Domain Info', result: whoIsResults, Component: WhoIsCard, refresh: updateWhoIsResults }, + { id: 'mail-config', title: 'Email Configuration', result: mailConfigResults, Component: MailConfigCard, refresh: updateMailConfigResults }, { id: 'dns-server', title: 'DNS Server', result: dnsServerResults, Component: DnsServerCard, refresh: updateDnsServerResults }, { id: 'social-tags', title: 'Social Tags', result: socialTagResults, Component: SocialTagsCard, refresh: updateSocialTagResults }, { id: 'linked-pages', title: 'Linked Pages', result: linkedPagesResults, Component: ContentLinksCard, refresh: updateLinkedPagesResults }, From f41951a73426067a8a175f6dc925c5d53f3b280e Mon Sep 17 00:00:00 2001 From: Alicia Sykes Date: Sat, 29 Jul 2023 19:18:28 +0100 Subject: [PATCH 07/13] Updates docs and about page --- src/pages/About.tsx | 15 ++++++-- src/utils/docs.ts | 84 +++++++++++++++++++++++++++++++++++++++------ 2 files changed, 87 insertions(+), 12 deletions(-) diff --git a/src/pages/About.tsx b/src/pages/About.tsx index 622b3f3..384770f 100644 --- a/src/pages/About.tsx +++ b/src/pages/About.tsx @@ -6,7 +6,7 @@ import Footer from 'components/misc/Footer'; import Nav from 'components/Form/Nav'; import Button from 'components/Form/Button'; import { StyledCard } from 'components/Form/Card'; -import docs, { about, license, fairUse } from 'utils/docs'; +import docs, { about, license, fairUse, supportUs } from 'utils/docs'; const AboutContainer = styled.div` @@ -16,6 +16,7 @@ margin: 2rem auto; padding-bottom: 1rem; header { margin 1rem 0; + width: auto; } `; @@ -75,7 +76,7 @@ const Section = styled(StyledCard)` float: right; break-inside: avoid; max-width: 300px; - max-height: 28rem; + // max-height: 28rem; border-radius: 6px; clear: both; } @@ -147,6 +148,11 @@ const About = (): JSX.Element => { ))} + Support Us +
+ {supportUs.map((para, index: number) => (

))} +

+ Terms & Info
License @@ -166,6 +172,11 @@ const About = (): JSX.Element => { Privacy

Analytics are used on the demo instance (via a self-hosted Plausible instance), this only records the URL you visited but no personal data. + There's also some basic error logging (via a self-hosted GlitchTip instance), this is only used to help me fix bugs. +
+
+ Neither your IP address, browser/OS/hardware info, nor any other data will ever be collected or logged. + (You may verify this yourself, either by inspecting the source code or the using developer tools)

Support diff --git a/src/utils/docs.ts b/src/utils/docs.ts index 9b6ca99..e56127f 100644 --- a/src/utils/docs.ts +++ b/src/utils/docs.ts @@ -210,12 +210,13 @@ const docs: Doc[] = [ "This task calculates the estimated carbon footprint of a website. It's based on the amount of data being transferred and processed, and the energy usage of the servers that host and deliver the website. The larger the website and the more complex its features, the higher its carbon footprint is likely to be.", use: "From an OSINT perspective, understanding a website's carbon footprint doesn't directly provide insights into its internal workings or the organization behind it. However, it can still be valuable data in broader analyses, especially in contexts where environmental impact is a consideration. For example, it can be useful for activists, researchers, or ethical hackers who are interested in the sustainability of digital infrastructure, and who want to hold organizations accountable for their environmental impact.", resources: [ - "https://www.websitecarbon.com/", - "https://www.thegreenwebfoundation.org/", - "https://www.nature.com/articles/s41598-020-76164-y", - "https://www.sciencedirect.com/science/article/pii/S0959652620307817", + { title: 'WebsiteCarbon - Carbon Calculator', link: 'https://www.websitecarbon.com/' }, + { title: 'The Green Web Foundation', link: 'https://www.thegreenwebfoundation.org/' }, + { title: 'The Eco Friendly Web Alliance', link: 'https://ecofriendlyweb.org/' }, + { title: 'Reset.org', link: 'https://en.reset.org/' }, + { title: 'Your website is killing the planet - via Wired', link: 'https://www.wired.co.uk/article/internet-carbon-footprint' }, ], - screenshot: 'https://i.ibb.co/dmbFxjN/wc-carbon.png', + screenshot: 'https://i.ibb.co/5v6fSyw/Screenshot-from-2023-07-29-19-07-50.png', }, { id: "server-info", @@ -261,7 +262,7 @@ const docs: Doc[] = [ id: "dnssec", title: "DNS Security Extensions", description: - "Without DNSSEC, it\'s possible for MITM attackers to spoof records and lead users to phishing sites. This is because the DNS system includes no built-in methods to verify that the response to the request was not forged, or that any other part of the process wasn’t interrupted by an attacker. The DNS Security Extensions (DNSSEC) secures DNS lookups by signing your DNS records using public keys, so browsers can detect if the response has been tampered with. Another solution to this issue is DoH (DNS over HTTPS) and DoT (DNS over TLD).", + "Without DNSSEC, it's possible for MITM attackers to spoof records and lead users to phishing sites. This is because the DNS system includes no built-in methods to verify that the response to the request was not forged, or that any other part of the process wasn’t interrupted by an attacker. The DNS Security Extensions (DNSSEC) secures DNS lookups by signing your DNS records using public keys, so browsers can detect if the response has been tampered with. Another solution to this issue is DoH (DNS over HTTPS) and DoT (DNS over TLD).", use: "DNSSEC information provides insight into an organization's level of cybersecurity maturity and potential vulnerabilities, particularly around DNS spoofing and cache poisoning. If no DNS secururity (DNSSEC, DoH, DoT, etc) is implemented, this may provide an entry point for an attacker.", resources: [ "https://dnssec-analyzer.verisignlabs.com/", @@ -288,7 +289,7 @@ const docs: Doc[] = [ +'mechanism that helps protect websites against protocol downgrade attacks and ' + 'cookie hijacking. A website can be included in the HSTS preload list by ' + 'conforming to a set of requirements and then submitting itself to the list.', - use: `There are several reasons why it\'s important for a site to be HSTS enabled: + use: `There are several reasons why it's important for a site to be HSTS enabled: 1. User bookmarks or manually types http://example.com and is subject to a man-in-the-middle attacker HSTS automatically redirects HTTP requests to HTTPS for the target domain 2. Web application that is intended to be purely HTTPS inadvertently contains HTTP links or serves content over HTTP @@ -309,6 +310,7 @@ const docs: Doc[] = [ description: 'This check takes a screenshot of webpage that the requested URL / IP resolves to, and displays it.', use: 'This may be useful to see what a given website looks like, free of the constraints of your browser, IP, or location.', resources: [], + screenshot: 'https://i.ibb.co/2F0x8kP/Screenshot-from-2023-07-29-18-34-48.png', }, { id: 'dns-server', @@ -362,6 +364,60 @@ const docs: Doc[] = [ ], screenshot: 'https://i.ibb.co/tq1FT5r/Screenshot-from-2023-07-24-20-31-21.png', }, + { + id: 'linked-pages', + title: 'Linked Pages', + description: 'Displays all internal and external links found on a site, identified by the href attributes attached to anchor elements.', + use: "For site owners, this is useful for diagnosing SEO issues, improving the site structure, understanding how content is inter-connected. External links can show partnerships, dependencies, and potential reputation risks. " + + "From a security standpoint, the outbound links can help identify any potential malicious or compromised sites the website is unknowingly linking to. Analyzing internal links can aid in understanding the site's structure and potentially uncover hidden or vulnerable pages which are not intended to be public. " + + "And for an OSINT investigator, it can aid in building a comprehensive understanding of the target, uncovering related entities, resources, or even potential hidden parts of the site.", + resources: [ + { title: 'W3C Link Checker', link: 'https://validator.w3.org/checklink'}, + ], + screenshot: 'https://i.ibb.co/LtK14XR/Screenshot-from-2023-07-29-11-16-44.png', + }, + { + id: 'social-tags', + title: 'Social Tags', + description: 'Websites can include certain meta tags, that tell search engines and social media platforms what info to display. This usually includes a title, description, thumbnail, keywords, author, social accounts, etc.', + use: 'Adding this data to your site will boost SEO, and as an OSINT researcher it can be useful to understand how a given web app describes itself', + resources: [ + { title: 'SocialSharePreview.com', link: 'https://socialsharepreview.com/'}, + { title: 'The guide to social meta tags', link: 'https://css-tricks.com/essential-meta-tags-social-media/'}, + { title: 'Web.dev metadata tags', link: 'https://web.dev/learn/html/metadata/'}, + { title: 'Open Graph Protocol', link: 'https://ogp.me/'}, + { title: 'Twitter Cards', link: 'https://developer.twitter.com/en/docs/twitter-for-websites/cards/overview/abouts-cards'}, + { title: 'Facebook Open Graph', link: 'https://developers.facebook.com/docs/sharing/webmasters'}, + ], + screenshot: 'https://i.ibb.co/4srTT1w/Screenshot-from-2023-07-29-11-15-27.png', + }, + { + id: 'mail-config', + title: 'Email Configuration', + description: "DMARC (Domain-based Message Authentication, Reporting & Conformance): DMARC is an email authentication protocol that works with SPF and DKIM to prevent email spoofing and phishing. It allows domain owners to specify how to handle unauthenticated mail via a published policy in DNS, and provides a way for receiving mail servers to send feedback about emails' compliance to the sender. " + + "BIMI (Brand Indicators for Message Identification): BIMI is an emerging email standard that enables organizations to display a logo in their customers' email clients automatically. BIMI ties the logo to the domain's DMARC record, providing another level of visual assurance to recipients that the email is legitimate. " + + "DKIM (DomainKeys Identified Mail): DKIM is an email security standard designed to make sure that messages were not altered in transit between the sending and recipient servers. It uses digital signatures linked to the domain of the sender to verify the sender and ensure message integrity. " + + "SPF (Sender Policy Framework): SPF is an email authentication method designed to prevent email spoofing. It specifies which mail servers are authorized to send email on behalf of a domain by creating a DNS record. This helps protect against spam by providing a way for receiving mail servers to check that incoming mail from a domain comes from a host authorized by that domain's administrators.", + use: "This information is helpful for researchers as it helps assess a domain's email security posture, uncover potential vulnerabilities, and verify the legitimacy of emails for phishing detection. These details can also provide insight into the hosting environment, potential service providers, and the configuration patterns of a target organization, assisting in investigative efforts.", + resources: [ + { title: 'Intro to DMARC, DKIM, and SPF (via Cloudflare)', link: 'https://www.cloudflare.com/learning/email-security/dmarc-dkim-spf/' }, + { title: 'EasyDMARC Domain Scanner', link: 'https://easydmarc.com/tools/domain-scanner' }, + { title: 'MX Toolbox', link: 'https://mxtoolbox.com/' }, + { title: 'RFC-7208 - SPF', link: 'https://datatracker.ietf.org/doc/html/rfc7208' }, + { title: 'RFC-6376 - DKIM', link: 'https://datatracker.ietf.org/doc/html/rfc6376' }, + { title: 'RFC-7489 - DMARC', link: 'https://datatracker.ietf.org/doc/html/rfc7489' }, + { title: 'BIMI Group', link: 'https://bimigroup.org/' }, + ], + screenshot: 'https://i.ibb.co/yqhwx5G/Screenshot-from-2023-07-29-18-22-20.png', + }, + // { + // id: '', + // title: '', + // description: '', + // use: '', + // resources: [], + // screenshot: '', + // }, ]; export const about = [ @@ -409,10 +465,18 @@ OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. `; +export const supportUs = [ + "The hosted app is free to use without restriction. All the code is open source, so you're also free to deploy your own instance, or make any modifications.", + "Running web-check does cost me a small amount of money each month, so if you're finding the app useful, consider sponsoring me on GitHub if you're able to. Even just $1 or $2/month would be a huge help in supporting the ongoing project running costs.", + "Otherwise, there are other ways you can help out, like submitting or reviewing a pull request to the GitHub repo, upvoting us on Product Hunt, or by sharing with your network.", + "But don't feel obliged to do anything, as this app (and all my other projects) will always remain 100% free and open source, and I will do my best to ensure the managed instances remain up and available for as long as possible :)", +]; + export const fairUse = [ - 'Please use this tool responsibly. Do not use it for hosts you do not have permission to scan. Do not use it to attack or disrupt services.', - 'Requests are rate-limited to prevent abuse. If you need to make more bandwidth, please deploy your own instance.', - 'The hosted instance is only for demo use, as excessive use will quickly deplete my lambda function credits, making it unavailable for others and/or costing me money.', + 'Please use this tool responsibly. Do not use it for hosts you do not have permission to scan. Do not use it as part of a scheme to attack or disrupt services.', + 'Requests may be rate-limited to prevent abuse. If you need to make more bandwidth, please deploy your own instance.', + 'There is no guarantee of uptime or availability. If you need to make sure the service is available, please deploy your own instance.', + 'Please use fairly, as excessive use will quickly deplete the lambda function credits, making the service unavailable for others (and/or empty my bank account!).', ]; export default docs; From d6da8e123ea22d51019f5d737d4b796c076998b0 Mon Sep 17 00:00:00 2001 From: Alicia Sykes Date: Sat, 29 Jul 2023 19:18:57 +0100 Subject: [PATCH 08/13] Updates the internal/external content links section --- api/content-links.js | 12 ++++++++++++ src/components/Results/ContentLinks.tsx | 16 ++-------------- 2 files changed, 14 insertions(+), 14 deletions(-) diff --git a/api/content-links.js b/api/content-links.js index 34e4205..f125131 100644 --- a/api/content-links.js +++ b/api/content-links.js @@ -34,6 +34,18 @@ exports.handler = async (event, context) => { const internalLinks = [...internalLinksMap.entries()].sort((a, b) => b[1] - a[1]).map(entry => entry[0]); const externalLinks = [...externalLinksMap.entries()].sort((a, b) => b[1] - a[1]).map(entry => entry[0]); + if (internalLinks.length === 0 && externalLinks.length === 0) { + return { + statusCode: 400, + body: JSON.stringify({ + skipped: 'No internal or external links found. ' + + 'This may be due to the website being dynamically rendered, using a client-side framework (like React), and without SSR enabled. ' + + 'That would mean that the static HTML returned from the HTTP request doesn\'t contain any meaningful content for Web-Check to analyze. ' + + 'You can rectify this by using a headless browser to render the page instead.', + }), + }; + } + return { statusCode: 200, body: JSON.stringify({ internal: internalLinks, external: externalLinks }), diff --git a/src/components/Results/ContentLinks.tsx b/src/components/Results/ContentLinks.tsx index d2ea0a5..87df6c1 100644 --- a/src/components/Results/ContentLinks.tsx +++ b/src/components/Results/ContentLinks.tsx @@ -43,9 +43,8 @@ const getPathName = (link: string) => { }; const ContentLinksCard = (props: { data: any, title: string, actionButtons: any }): JSX.Element => { - const { internal, external} = props.data; - console.log('Internal Links', internal); - console.log('External Links', external); + const internal = props.data.internal || []; + const external = props.data.external || []; return ( Summary @@ -71,17 +70,6 @@ const ContentLinksCard = (props: { data: any, title: string, actionButtons: any ))} )} - {/* {portData.openPorts.map((port: any) => ( - - {port} - - ) - )} -
- - Unable to establish connections to:
- {portData.failedPorts.join(', ')} - */} ); } From db3322856b5baacc2869b9957ccc8903d8596fe7 Mon Sep 17 00:00:00 2001 From: Alicia Sykes Date: Sat, 29 Jul 2023 19:42:20 +0100 Subject: [PATCH 09/13] Update homepage and about page --- src/components/Form/Card.tsx | 2 +- src/components/Form/Heading.tsx | 9 +++++++-- src/components/misc/AdditionalResources.tsx | 4 ++-- src/pages/About.tsx | 14 +++++++++++++- src/pages/Home.tsx | 11 +++++++++-- 5 files changed, 32 insertions(+), 8 deletions(-) diff --git a/src/components/Form/Card.tsx b/src/components/Form/Card.tsx index c178d92..1721e97 100644 --- a/src/components/Form/Card.tsx +++ b/src/components/Form/Card.tsx @@ -30,7 +30,7 @@ export const Card = (props: CardProps): JSX.Element => { { actionButtons && actionButtons } - { heading && {heading} } + { heading && {heading} } {children} diff --git a/src/components/Form/Heading.tsx b/src/components/Form/Heading.tsx index 49dd715..0dd18a5 100644 --- a/src/components/Form/Heading.tsx +++ b/src/components/Form/Heading.tsx @@ -10,6 +10,7 @@ interface HeadingProps { inline?: boolean; children: React.ReactNode; id?: string; + className?: string; }; const StyledHeading = styled.h1` @@ -47,10 +48,14 @@ const StyledHeading = styled.h1` ${props => props.inline ? 'display: inline;' : '' } `; +const makeAnchor = (title: string): string => { + return title.toLowerCase().replace(/[^\w\s]|_/g, "").replace(/\s+/g, "-"); +}; + const Heading = (props: HeadingProps): JSX.Element => { - const { children, as, size, align, color, inline, id } = props; + const { children, as, size, align, color, inline, id, className } = props; return ( - + {children} ); diff --git a/src/components/misc/AdditionalResources.tsx b/src/components/misc/AdditionalResources.tsx index 663fc8f..577b790 100644 --- a/src/components/misc/AdditionalResources.tsx +++ b/src/components/misc/AdditionalResources.tsx @@ -8,7 +8,7 @@ margin: 0; padding: 1rem; display: grid; gap: 0.5rem; -grid-template-columns: repeat(auto-fit, minmax(20rem, 1fr)); +grid-template-columns: repeat(auto-fit, minmax(19rem, 1fr)); li a.resource-wrap { display: flex; align-items: start; @@ -192,7 +192,7 @@ const resources = [ ]; const makeLink = (resource: any, scanUrl: string | undefined): string => { - return (scanUrl && resource.searchLink) ? resource.searchLink.replaceAll('{URL}', scanUrl.replace('https://', '')) : '#'; + return (scanUrl && resource.searchLink) ? resource.searchLink.replaceAll('{URL}', scanUrl.replace('https://', '')) : resource.link; }; const AdditionalResources = (props: { url?: string }): JSX.Element => { diff --git a/src/pages/About.tsx b/src/pages/About.tsx index 384770f..58938e0 100644 --- a/src/pages/About.tsx +++ b/src/pages/About.tsx @@ -5,6 +5,7 @@ import Heading from 'components/Form/Heading'; import Footer from 'components/misc/Footer'; import Nav from 'components/Form/Nav'; import Button from 'components/Form/Button'; +import AdditionalResources from 'components/misc/AdditionalResources'; import { StyledCard } from 'components/Form/Card'; import docs, { about, license, fairUse, supportUs } from 'utils/docs'; @@ -18,6 +19,10 @@ header { margin 1rem 0; width: auto; } +section { + width: auto; + .inner-heading { display: none; } +} `; const HeaderLinkContainer = styled.nav` @@ -86,7 +91,6 @@ const makeAnchor = (title: string): string => { return title.toLowerCase().replace(/[^\w\s]|_/g, "").replace(/\s+/g, "-"); }; - const About = (): JSX.Element => { return (
@@ -148,6 +152,14 @@ const About = (): JSX.Element => { ))}
+ API Documentation +
+

// Coming soon...

+
+ + Additional Resources + + Support Us
{supportUs.map((para, index: number) => (

))} diff --git a/src/pages/Home.tsx b/src/pages/Home.tsx index 33be540..bf2afba 100644 --- a/src/pages/Home.tsx +++ b/src/pages/Home.tsx @@ -179,8 +179,15 @@ const Home = (): JSX.Element => {

From 507fade2f820646b1dfb93bcd2f64195e5190ac8 Mon Sep 17 00:00:00 2001 From: Alicia Sykes Date: Sun, 30 Jul 2023 01:41:49 +0100 Subject: [PATCH 10/13] Improves layout for additional resources section --- src/components/misc/AdditionalResources.tsx | 51 +++++++++++++-------- src/utils/docs.ts | 12 ++--- 2 files changed, 39 insertions(+), 24 deletions(-) diff --git a/src/components/misc/AdditionalResources.tsx b/src/components/misc/AdditionalResources.tsx index 577b790..4f3b50c 100644 --- a/src/components/misc/AdditionalResources.tsx +++ b/src/components/misc/AdditionalResources.tsx @@ -11,9 +11,10 @@ gap: 0.5rem; grid-template-columns: repeat(auto-fit, minmax(19rem, 1fr)); li a.resource-wrap { display: flex; + flex-direction: column; align-items: start; gap: 0.25rem; - padding: 0.25rem; + padding: 0.25rem 0.5rem; background: ${colors.background}; border-radius: 8px; text-decoration: none; @@ -37,27 +38,32 @@ li a.resource-wrap { } } img { - width: 4rem; + width: 2.5rem; border-radius: 4px; margin: 0.25rem 0.1rem 0.1rem 0.1rem; } +p, a { + margin: 0; +} +a.resource-link { + color: ${colors.primary}; + opacity: 0.75; + font-size: 0.9rem; + transition: all 0.2s ease-in-out; +} +.resource-title { + font-weight: bold; +} +.resource-lower { + display: flex; + align-items: center; + gap: 0.5rem; +} .resource-details { max-width: 20rem; display: flex; flex-direction: column; gap: 0.1rem; - p, a { - margin: 0; - } - a.resource-link { - color: ${colors.primary}; - opacity: 0.75; - font-size: 0.9rem; - transition: all 0.2s ease-in-out; - } - .resource-title { - font-weight: bold; - } .resource-description { color: ${colors.textColorSecondary}; font-size: 0.9rem; @@ -155,6 +161,13 @@ const resources = [ description: 'Checks the performance, accessibility and SEO of a page on mobile + desktop.', searchLink: 'https://developers.google.com/speed/pagespeed/insights/?url={URL}', }, + { + title: 'Built With', + link: 'https://builtwith.com/', + icon: 'https://i.ibb.co/5LXBDfD/Built-with.png', + description: 'View the tech stack of a website', + searchLink: 'https://builtwith.com/{URL}', + }, { title: 'DNS Dumpster', link: 'https://dnsdumpster.com/', @@ -203,12 +216,14 @@ const AdditionalResources = (props: { url?: string }): JSX.Element => { return (
  • - - +
    + +
    +

    {resource.description}

    +
    +
    • ); diff --git a/src/utils/docs.ts b/src/utils/docs.ts index e56127f..fc735b2 100644 --- a/src/utils/docs.ts +++ b/src/utils/docs.ts @@ -322,14 +322,14 @@ const docs: Doc[] = [ { id: 'tech-stack', title: 'Tech Stack', - description: 'Checks what technologies a site is built with.' + description: 'Checks what technologies a site is built with. ' + 'This is done by fetching and parsing the site, then comparing it against a bit list of RegEx maintained by Wappalyzer to identify the unique fingerprints that different technologies leave.', use: 'Identifying a website\'s tech stack aids in evaluating its security by exposing potential vulnerabilities, ' + 'informs competitive analyses and development decisions, and can guide tailored marketing strategies. ' + 'Ethical application of this knowledge is crucial to avoid harmful activities like data theft or unauthorized intrusion.', resources: [ - 'https://builtwith.com/', - 'https://github.com/wappalyzer/wappalyzer/tree/master/src/technologies' + { title: 'Wappalyzer fingerprints', link: 'https://github.com/wappalyzer/wappalyzer/tree/master/src/technologies'}, + { title: 'BuiltWith - Check what tech a site is using', link: 'https://builtwith.com/'}, ], }, { @@ -338,9 +338,9 @@ const docs: Doc[] = [ description: 'This job finds and parses a site\'s listed sitemap. This file lists public sub-pages on the site, which the author wishes to be crawled by search engines. Sitemaps help with SEO, but are also useful for seeing all a sites public content at a glance.', use: 'Understand the structure of a site\'s public-facing content, and for site-owners, check that you\'re site\'s sitemap is accessible, parsable and contains everything you wish it to.', resources: [ - 'https://developers.google.com/search/docs/crawling-indexing/sitemaps/overview', - 'https://www.sitemaps.org/protocol.html', - 'https://www.conductor.com/academy/xml-sitemap/', + { title: 'Learn about Sitemaps', link: 'https://developers.google.com/search/docs/crawling-indexing/sitemaps/overview'}, + { title: 'Sitemap XML spec', link: 'https://www.sitemaps.org/protocol.html'}, + { title: 'Sitemap tutorial', link: 'https://www.conductor.com/academy/xml-sitemap/'}, ], screenshot: 'https://i.ibb.co/GtrCQYq/Screenshot-from-2023-07-21-12-28-38.png', }, From 57fadde151fea6c74c97a16c08969a1d4cfc7ed6 Mon Sep 17 00:00:00 2001 From: Alicia Sykes Date: Sat, 5 Aug 2023 10:32:53 +0100 Subject: [PATCH 11/13] Adds smoothe scroll --- src/index.css | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/index.css b/src/index.css index 5ab1c57..e0502ea 100644 --- a/src/index.css +++ b/src/index.css @@ -5,6 +5,10 @@ font-style: normal; } +html { + scroll-behavior: smooth; +} + body { margin: 0; font-family: 'PTMono', -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Roboto', 'Oxygen', From c46fed5ebba6ed521560d49a1852bda5be270235 Mon Sep 17 00:00:00 2001 From: Alicia Sykes Date: Sat, 5 Aug 2023 10:33:05 +0100 Subject: [PATCH 12/13] Updates docs --- src/pages/About.tsx | 38 +++++++++---- src/utils/docs.ts | 136 +++++++++++++++++++++----------------------- 2 files changed, 92 insertions(+), 82 deletions(-) diff --git a/src/pages/About.tsx b/src/pages/About.tsx index 58938e0..922e00a 100644 --- a/src/pages/About.tsx +++ b/src/pages/About.tsx @@ -9,7 +9,6 @@ import AdditionalResources from 'components/misc/AdditionalResources'; import { StyledCard } from 'components/Form/Card'; import docs, { about, license, fairUse, supportUs } from 'utils/docs'; - const AboutContainer = styled.div` width: 95vw; max-width: 1000px; @@ -38,6 +37,9 @@ const Section = styled(StyledCard)` margin-bottom: 2rem; overflow: clip; max-height: 100%; + section { + clear: both; + } h3 { font-size: 1.5rem; } @@ -77,13 +79,25 @@ const Section = styled(StyledCard)` } } } - .screenshot { - float: right; - break-inside: avoid; - max-width: 300px; - // max-height: 28rem; - border-radius: 6px; + .example-screenshot { + float: right; + display: inline-flex; + flex-direction: column; clear: both; + max-width: 300px; + img { + float: right; + break-inside: avoid; + max-width: 300px; + // max-height: 30rem; + border-radius: 6px; + clear: both; + } + figcaption { + font-size: 0.8rem; + text-align: center; + opacity: 0.7; + } } `; @@ -123,9 +137,13 @@ const About = (): JSX.Element => { {docs.map((section, sectionIndex: number) => (
    + { sectionIndex > 0 &&
    } {section.title} - {section.screenshot && - {`Example + {section.screenshot && +
    + {`Example +
    Fig.{sectionIndex + 1} - Example of {section.title}
    +
    } {section.description && <> Description @@ -147,7 +165,7 @@ const About = (): JSX.Element => { ))} } - { sectionIndex < docs.length - 1 &&
    } + {/* { sectionIndex < docs.length - 1 &&
    } */}
    ))}
    diff --git a/src/utils/docs.ts b/src/utils/docs.ts index fc735b2..0913217 100644 --- a/src/utils/docs.ts +++ b/src/utils/docs.ts @@ -12,26 +12,26 @@ const docs: Doc[] = [ id: "get-ip", title: "IP Info", description: - "The IP Address task involves mapping the user provided URL to its corresponding IP address through a process known as Domain Name System (DNS) resolution. An IP address is a unique identifier given to every device on the Internet, and when paired with a domain name, it allows for accurate routing of online requests and responses.", - use: "Identifying the IP address of a domain can be incredibly valuable for OSINT purposes. This information can aid in creating a detailed map of a target's network infrastructure, pinpointing the physical location of a server, identifying the hosting service, and even discovering other domains that are hosted on the same IP address. In cybersecurity, it's also useful for tracking the sources of attacks or malicious activities.", + "An IP address (Internet Protocol address) is a numerical label assigned to each device connected to a network / the internet. The IP associated with a given domain can be found by querying the Domain Name System (DNS) for the domain's A (address) record.", + use: "Finding the IP of a given server is the first step to conducting further investigations, as it allows us to probe the server for additional info. Including creating a detailed map of a target's network infrastructure, pinpointing the physical location of a server, identifying the hosting service, and even discovering other domains that are hosted on the same IP address.", resources: [ - "https://en.wikipedia.org/wiki/IP_address", - "https://tools.ietf.org/html/rfc791", - "https://www.cloudflare.com/learning/dns/what-is-dns/", - "https://www.whois.com/whois-lookup", + { title: 'Understanding IP Addresses', link: 'https://www.digitalocean.com/community/tutorials/understanding-ip-addresses-subnets-and-cidr-notation-for-networking'}, + { title: 'IP Addresses - Wiki', link: 'https://en.wikipedia.org/wiki/IP_address'}, + { title: 'RFC-791 Internet Protocol', link: 'https://tools.ietf.org/html/rfc791'}, + { title: 'whatismyipaddress.com', link: 'https://whatismyipaddress.com/'}, ], }, { id: "ssl", title: "SSL Chain", description: - "The SSL task involves checking if the site has a valid Secure Sockets Layer (SSL) certificate. SSL is a protocol for establishing authenticated and encrypted links between networked computers. It's commonly used for securing communications over the internet, such as web browsing sessions, email transmissions, and more. In this task, we reach out to the server and initiate a SSL handshake. If successful, we gather details about the SSL certificate presented by the server.", + "SSL certificates are digital certificates that authenticate the identity of a website or server, enable secure encrypted communication (HTTPS), and establish trust between clients and servers. A valid SSL certificate is required for a website to be able to use the HTTPS protocol, and encrypt user + site data in transit. SSL certificates are issued by Certificate Authorities (CAs), which are trusted third parties that verify the identity and legitimacy of the certificate holder.", use: "SSL certificates not only provide the assurance that data transmission to and from the website is secure, but they also provide valuable OSINT data. Information from an SSL certificate can include the issuing authority, the domain name, its validity period, and sometimes even organization details. This can be useful for verifying the authenticity of a website, understanding its security setup, or even for discovering associated subdomains or other services.", resources: [ - "https://en.wikipedia.org/wiki/Transport_Layer_Security", - "https://tools.ietf.org/html/rfc8446", - "https://letsencrypt.org/docs/", - "https://www.sslshopper.com/ssl-checker.html", + { title: 'TLS - Wiki', link: 'https://en.wikipedia.org/wiki/Transport_Layer_Security'}, + { title: 'What is SSL (via Cloudflare learning)', link: 'https://www.cloudflare.com/learning/ssl/what-is-ssl/'}, + { title: 'RFC-8446 - TLS', link: 'https://tools.ietf.org/html/rfc8446'}, + { title: 'SSL Checker', link: 'https://www.sslshopper.com/ssl-checker.html'}, ], screenshot: 'https://i.ibb.co/kB7LsV1/wc-ssl.png', }, @@ -39,13 +39,13 @@ const docs: Doc[] = [ id: "dns", title: "DNS Records", description: - "The DNS Records task involves querying the Domain Name System (DNS) for records associated with the target domain. DNS is a system that translates human-readable domain names into IP addresses that computers use to communicate. Various types of DNS records exist, including A (address), MX (mail exchange), NS (name server), CNAME (canonical name), and TXT (text), among others.", + "This task involves looking up the DNS records associated with a specific domain. DNS is a system that translates human-readable domain names into IP addresses that computers use to communicate. Various types of DNS records exist, including A (address), MX (mail exchange), NS (name server), CNAME (canonical name), and TXT (text), among others.", use: "Extracting DNS records can provide a wealth of information in an OSINT investigation. For example, A and AAAA records can disclose IP addresses associated with a domain, potentially revealing the location of servers. MX records can give clues about a domain's email provider. TXT records are often used for various administrative purposes and can sometimes inadvertently leak internal information. Understanding a domain's DNS setup can also be useful in understanding how its online infrastructure is built and managed.", resources: [ - "https://en.wikipedia.org/wiki/List_of_DNS_record_types", - "https://tools.ietf.org/html/rfc1035", - "https://mxtoolbox.com/DNSLookup.aspx", - "https://www.dnswatch.info/", + { title: 'What are DNS records? (via Cloudflare learning)', link: 'https://www.cloudflare.com/learning/dns/dns-records/'}, + { title: 'DNS Record Types', link: 'https://en.wikipedia.org/wiki/List_of_DNS_record_types'}, + { title: 'RFC-1035 - DNS', link: 'https://tools.ietf.org/html/rfc1035'}, + { title: 'DNS Lookup (via MxToolbox)', link: 'https://mxtoolbox.com/DNSLookup.aspx'}, ], screenshot: 'https://i.ibb.co/7Q1kMwM/wc-dns.png', }, @@ -54,12 +54,12 @@ const docs: Doc[] = [ title: "Cookies", description: "The Cookies task involves examining the HTTP cookies set by the target website. Cookies are small pieces of data stored on the user's computer by the web browser while browsing a website. They hold a modest amount of data specific to a particular client and website, such as site preferences, the state of the user's session, or tracking information.", - use: "Cookies provide a wealth of information in an OSINT investigation. They can disclose information about how the website tracks and interacts with its users. For instance, session cookies can reveal how user sessions are managed, and tracking cookies can hint at what kind of tracking or analytics frameworks are being used. Additionally, examining cookie policies and practices can offer insights into the site's security settings and compliance with privacy regulations.", + use: "Cookies can disclose information about how the website tracks and interacts with its users. For instance, session cookies can reveal how user sessions are managed, and tracking cookies can hint at what kind of tracking or analytics frameworks are being used. Additionally, examining cookie policies and practices can offer insights into the site's security settings and compliance with privacy regulations.", resources: [ - "https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies", - "https://www.cookiepro.com/knowledge/what-is-a-cookie/", - "https://owasp.org/www-community/controls/SecureFlag", - "https://tools.ietf.org/html/rfc6265", + { title: 'HTTP Cookie Docs (Mozilla)', link: 'https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies' }, + { title: 'What are Cookies (via Cloudflare Learning)', link: 'https://www.cloudflare.com/learning/privacy/what-are-cookies/' }, + { title: 'Testing for Cookie Attributes (OWASP)', link: 'https://owasp.org/www-project-web-security-testing-guide/v42/4-Web_Application_Security_Testing/06-Session_Management_Testing/02-Testing_for_Cookies_Attributes' }, + { title: 'RFC-6265 - Coolies', link: 'https://tools.ietf.org/html/rfc6265' }, ], screenshot: 'https://i.ibb.co/TTQ6DtP/wc-cookies.png', }, @@ -67,13 +67,13 @@ const docs: Doc[] = [ id: "robots-txt", title: "Crawl Rules", description: - "The Crawl Rules task is focused on retrieving and interpreting the 'robots.txt' file from the target website. This text file is part of the Robots Exclusion Protocol (REP), a group of web standards that regulate how robots crawl the web, access and index content, and serve that content up to users. The file indicates which parts of the site the website owner doesn't want to be accessed by web crawler bots.", - use: "The 'robots.txt' file can provide valuable information for an OSINT investigation. It often discloses the directories and pages that the site owner doesn't want to be indexed, potentially because they contain sensitive information. Moreover, it might reveal the existence of otherwise hidden or unlinked directories. Additionally, understanding crawl rules may offer insights into a website's SEO strategies.", + "Robots.txt is a file found (usually) at the root of a domain, and is used to implement the Robots Exclusion Protocol (REP) to indicate which pages should be ignored by which crawlers and bots. It's good practice to avoid search engine crawlers from over-loading your site, but should not be used to keep pages out of search results (use the noindex meta tag or header instead).", + use: "It's often useful to check the robots.txt file during an investigation, as it can sometimes disclose the directories and pages that the site owner doesn't want to be indexed, potentially because they contain sensitive information, or reveal the existence of otherwise hidden or unlinked directories. Additionally, understanding crawl rules may offer insights into a website's SEO strategies.", resources: [ - "https://developers.google.com/search/docs/advanced/robots/intro", - "https://www.robotstxt.org/robotstxt.html", - "https://moz.com/learn/seo/robotstxt", - "https://en.wikipedia.org/wiki/Robots_exclusion_standard", + { title: 'Google Search Docs - Robots.txt', link: 'https://developers.google.com/search/docs/advanced/robots/intro' }, + { title: 'Learn about robots.txt (via Moz.com)', link: 'https://moz.com/learn/seo/robotstxt' }, + { title: 'RFC-9309 - Robots Exclusion Protocol', link: 'https://datatracker.ietf.org/doc/rfc9309/' }, + { title: 'Robots.txt - wiki', link: 'https://en.wikipedia.org/wiki/Robots_exclusion_standard' }, ], screenshot: 'https://i.ibb.co/KwQCjPf/wc-robots.png', }, @@ -84,10 +84,10 @@ const docs: Doc[] = [ "The Headers task involves extracting and interpreting the HTTP headers sent by the target website during the request-response cycle. HTTP headers are key-value pairs sent at the start of an HTTP response, or before the actual data. Headers contain important directives for how to handle the data being transferred, including cache policies, content types, encoding, server information, security policies, and more.", use: "Analyzing HTTP headers can provide significant insights in an OSINT investigation. Headers can reveal specific server configurations, chosen technologies, caching directives, and various security settings. This information can help to determine a website's underlying technology stack, server-side security measures, potential vulnerabilities, and general operational practices.", resources: [ - "https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers", - "https://tools.ietf.org/html/rfc7231#section-3.2", - "https://www.w3schools.com/tags/ref_httpheaders.asp", - "https://owasp.org/www-project-secure-headers/", + { title: 'HTTP Headers - Docs', link: 'https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers' }, + { title: 'RFC-7231 Section 7 - Headers', link: 'https://datatracker.ietf.org/doc/html/rfc7231#section-7' }, + { title: 'List of header response fields', link: 'https://en.wikipedia.org/wiki/List_of_HTTP_header_fields' }, + { title: 'OWASP Secure Headers Project', link: 'https://owasp.org/www-project-secure-headers/' }, ], screenshot: 'https://i.ibb.co/t3xcwP1/wc-headers.png', }, @@ -95,13 +95,15 @@ const docs: Doc[] = [ id: "quality", title: "Quality Metrics", description: - "The Headers task involves extracting and interpreting the HTTP headers sent by the target website during the request-response cycle. HTTP headers are key-value pairs sent at the start of an HTTP response, or before the actual data. Headers contain important directives for how to handle the data being transferred, including cache policies, content types, encoding, server information, security policies, and more.", - use: "Analyzing HTTP headers can provide significant insights in an OSINT investigation. Headers can reveal specific server configurations, chosen technologies, caching directives, and various security settings. This information can help to determine a website's underlying technology stack, server-side security measures, potential vulnerabilities, and general operational practices.", + "Using Lighthouse, the Quality Metrics task measures the performance, accessibility, best practices, and SEO of the target website. This returns a simple checklist of 100 core metrics, along with a score for each category, to gauge the overall quality of a given site.", + use: "Useful for assessing a site's technical health, SEO issues, identify vulnerabilities, and ensure compliance with standards.", resources: [ - "https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers", - "https://tools.ietf.org/html/rfc7231#section-3.2", - "https://www.w3schools.com/tags/ref_httpheaders.asp", - "https://owasp.org/www-project-secure-headers/", + { title: 'Lighthouse Docs', link: 'https://developer.chrome.com/docs/lighthouse/' }, + { title: 'Google Page Speed Tools', link: 'https://developers.google.com/speed' }, + { title: 'W3 Accessibility Tools', link: 'https://www.w3.org/WAI/test-evaluate/' }, + { title: 'Google Search Console', link: 'https://search.google.com/search-console' }, + { title: 'SEO Checker', link: 'https://www.seobility.net/en/seocheck/' }, + { title: 'PWA Builder', link: 'https://www.pwabuilder.com/' }, ], screenshot: 'https://i.ibb.co/Kqg8rx7/wc-quality.png', }, @@ -109,13 +111,11 @@ const docs: Doc[] = [ id: "location", title: "Server Location", description: - "The Server Location task determines the physical location of a server hosting a website based on its IP address. The geolocation data typically includes the country, region, and often city where the server is located. The task also provides additional contextual information such as the official language, currency, and flag of the server's location country.", - use: "In the realm of OSINT, server location information can be very valuable. It can give an indication of the possible jurisdiction that laws the data on the server falls under, which can be important in legal or investigative contexts. The server location can also hint at the target audience of a website and reveal inconsistencies that could suggest the use of hosting or proxy services to disguise the actual location.", + "The Server Location task determines the physical location of the server hosting a given website based on its IP address. This is done by looking up the IP in a location database, which maps the IP to a lat + long of known data centers and ISPs. From the latitude and longitude, it's then possible to show additional contextual info, like a pin on the map, along with address, flag, time zone, currency, etc.", + use: "Knowing the server location is a good first step in better understanding a website. For site owners this aids in optimizing content delivery, ensuring compliance with data residency requirements, and identifying potential latency issues that may impact user experience in specific geographical regions. And for security researcher, assess the risk posed by specific regions or jurisdictions regarding cyber threats and regulations.", resources: [ - "https://en.wikipedia.org/wiki/Geolocation_software", - "https://www.iplocation.net/", - "https://www.cloudflare.com/learning/cdn/glossary/geolocation/", - "https://developers.google.com/maps/documentation/geolocation/intro", + { title: 'IP Locator', link: 'https://geobytes.com/iplocator/' }, + { title: 'Internet Geolocation - Wiki', link: 'https://en.wikipedia.org/wiki/Internet_geolocation' }, ], screenshot: 'https://i.ibb.co/cXH2hfR/wc-location.png', }, @@ -123,13 +123,13 @@ const docs: Doc[] = [ id: "hosts", title: "Associated Hosts", description: - "This task involves identifying and listing all domains and subdomains (hostnames) that are associated with the website's primary domain. This process often involves DNS enumeration to discover any linked domains and hostnames.", - use: "In OSINT investigations, understanding the full scope of a target's web presence is critical. Associated domains could lead to uncovering related projects, backup sites, development/test sites, or services linked to the main site. These can sometimes provide additional information or potential security vulnerabilities. A comprehensive list of associated domains and hostnames can also give an overview of the organization's structure and online footprint.", + "This task involves identifying and listing all domains and subdomains (hostnames) that are associated with the website's primary domain. This process often involves DNS enumeration to discover any linked domains and hostnames, as well as looking at known DNS records.", + use: "During an investigation, understanding the full scope of a target's web presence is critical. Associated domains could lead to uncovering related projects, backup sites, development/test sites, or services linked to the main site. These can sometimes provide additional information or potential security vulnerabilities. A comprehensive list of associated domains and hostnames can also give an overview of the organization's structure and online footprint.", resources: [ - "https://en.wikipedia.org/wiki/Domain_Name_System", - "https://resources.infosecinstitute.com/topic/dns-enumeration-pentest/", - "https://subdomainfinder.c99.nl/", - "https://securitytrails.com/blog/top-dns-enumeration-tools", + { title: 'DNS Enumeration - Wiki', link: 'https://en.wikipedia.org/wiki/DNS_enumeration' }, + { title: 'OWASP - Enumerate Applications on Webserver', link: 'https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/01-Information_Gathering/04-Enumerate_Applications_on_Webserver' }, + { title: 'DNS Enumeration - DNS Dumpster', link: 'https://dnsdumpster.com/' }, + { title: 'Subdomain Finder', link: 'https://subdomainfinder.c99.nl/' }, ], screenshot: 'https://i.ibb.co/25j1sT7/wc-hosts.png', }, @@ -138,12 +138,11 @@ const docs: Doc[] = [ title: "Redirect Chain", description: "This task traces the sequence of HTTP redirects that occur from the original URL to the final destination URL. An HTTP redirect is a response with a status code that advises the client to go to another URL. Redirects can occur for several reasons, such as URL normalization (directing to the www version of the site), enforcing HTTPS, URL shorteners, or forwarding users to a new site location.", - use: "Understanding the redirect chain can be crucial for several reasons. From a security perspective, long or complicated redirect chains can be a sign of potential security risks, such as unencrypted redirects in the chain. Additionally, redirects can impact website performance and SEO, as each redirect introduces additional round-trip-time (RTT). For OSINT, understanding the redirect chain can help identify relationships between different domains or reveal the use of certain technologies or hosting providers.", + use: "Understanding the redirect chain can be useful for several reasons. From a security perspective, long or complicated redirect chains can be a sign of potential security risks, such as unencrypted redirects in the chain. Additionally, redirects can impact website performance and SEO, as each redirect introduces additional round-trip-time (RTT). For OSINT, understanding the redirect chain can help identify relationships between different domains or reveal the use of certain technologies or hosting providers.", resources: [ - "https://developer.mozilla.org/en-US/docs/Web/HTTP/Redirections", - "https://en.wikipedia.org/wiki/URL_redirection", - "https://www.screamingfrog.co.uk/server-response-codes/", - "https://ahrefs.com/blog/301-redirects/", + { title: 'HTTP Redirects - MDN', link: 'https://developer.mozilla.org/en-US/docs/Web/HTTP/Redirections' }, + { title: 'URL Redirection - Wiki', link: 'https://en.wikipedia.org/wiki/URL_redirection' }, + { title: '301 Redirects explained', link: 'https://ahrefs.com/blog/301-redirects/' }, ], screenshot: 'https://i.ibb.co/hVVrmwh/wc-redirects.png', }, @@ -151,27 +150,22 @@ const docs: Doc[] = [ id: "txt-records", title: "TXT Records", description: - "TXT records are a type of Domain Name Service (DNS) record that provides text information to sources outside your domain. They can be used for a variety of purposes, such as verifying domain ownership, ensuring email security, and even preventing unauthorized changes to your website.", - use: "In the context of OSINT, TXT records can be a valuable source of information. They may reveal details about the domain's email configuration, the use of specific services like Google Workspace or Microsoft 365, or security measures in place such as SPF and DKIM. Understanding these details can give an insight into the technologies used by the organization, their email security practices, and potential vulnerabilities.", + "TXT records are a type of DNS record that provides text information to sources outside your domain. They can be used for a variety of purposes, such as verifying domain ownership, ensuring email security, and even preventing unauthorized changes to your website.", + use: "The TXT records often reveal which external services and technologies are being used with a given domain. They may reveal details about the domain's email configuration, the use of specific services like Google Workspace or Microsoft 365, or security measures in place such as SPF and DKIM. Understanding these details can give an insight into the technologies used by the organization, their email security practices, and potential vulnerabilities.", resources: [ - "https://www.cloudflare.com/learning/dns/dns-records/dns-txt-record/", - "https://en.wikipedia.org/wiki/TXT_record", - "https://tools.ietf.org/html/rfc7208", - "https://dmarc.org/wiki/FAQ", + { title: 'TXT Records (via Cloudflare Learning)', link: 'https://www.cloudflare.com/learning/dns/dns-records/dns-txt-record/' }, + { title: 'TXT Records - Wiki', link: 'https://en.wikipedia.org/wiki/TXT_record' }, + { title: 'RFC-1464 - TXT Records', link: 'https://datatracker.ietf.org/doc/html/rfc1464' }, + { title: 'TXT Record Lookup (via MxToolbox)', link: 'https://mxtoolbox.com/TXTLookup.aspx' }, ], screenshot: 'https://i.ibb.co/wyt21QN/wc-txt-records.png', }, { id: "status", title: "Server Status", - description: - "TXT records are a type of Domain Name Service (DNS) record that provides text information to sources outside your domain. They can be used for a variety of purposes, such as verifying domain ownership, ensuring email security, and even preventing unauthorized changes to your website.", - use: "In the context of OSINT, TXT records can be a valuable source of information. They may reveal details about the domain's email configuration, the use of specific services like Google Workspace or Microsoft 365, or security measures in place such as SPF and DKIM. Understanding these details can give an insight into the technologies used by the organization, their email security practices, and potential vulnerabilities.", + description: "Checks if a server is online and responding to requests.", + use: "", resources: [ - "https://www.cloudflare.com/learning/dns/dns-records/dns-txt-record/", - "https://en.wikipedia.org/wiki/TXT_record", - "https://tools.ietf.org/html/rfc7208", - "https://dmarc.org/wiki/FAQ", ], screenshot: 'https://i.ibb.co/V9CNLBK/wc-status.png', }, @@ -180,12 +174,10 @@ const docs: Doc[] = [ title: "Open Ports", description: "Open ports on a server are endpoints of communication which are available for establishing connections with clients. Each port corresponds to a specific service or protocol, such as HTTP (port 80), HTTPS (port 443), FTP (port 21), etc. The open ports on a server can be determined using techniques such as port scanning.", - use: "In the context of OSINT, knowing which ports are open on a server can provide valuable information about the services running on that server. This information can be useful for understanding the potential vulnerabilities of the system, or for understanding the nature of the services the server is providing. For example, a server with port 22 open (SSH) might be used for remote administration, while a server with port 443 open is serving HTTPS traffic.", + use: "Knowing which ports are open on a server can provide information about the services running on that server, useful for understanding the potential vulnerabilities of the system, or for understanding the nature of the services the server is providing.", resources: [ - "https://www.netwrix.com/port_scanning.html", - "https://nmap.org/book/man-port-scanning-basics.html", - "https://www.cloudflare.com/learning/ddos/glossary/open-port/", - "https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers", + { title: 'List of TCP & UDP Port Numbers', link: 'https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers' }, + { title: 'NMAP - Port Scanning Basics', link: 'https://nmap.org/book/man-port-scanning-basics.html' }, ], screenshot: 'https://i.ibb.co/F8D1hmf/wc-ports.png', }, From 42eea33809ce832856e1ef1bf92e9f40f7621116 Mon Sep 17 00:00:00 2001 From: Mounir Date: Sun, 6 Aug 2023 16:36:26 +0200 Subject: [PATCH 13/13] fix ip adress docs --- .github/README.md | 2 +- .github/screenshots/wc_ip-adress.png | Bin 0 -> 74616 bytes 2 files changed, 1 insertion(+), 1 deletion(-) create mode 100644 .github/screenshots/wc_ip-adress.png diff --git a/.github/README.md b/.github/README.md index 279685d..89165be 100644 --- a/.github/README.md +++ b/.github/README.md @@ -42,7 +42,7 @@ None of this is hard to find with a series of basic curl commands, or a combinat
    IP Address - + ###### Description The IP Address task involves mapping the user provided URL to its corresponding IP address through a process known as Domain Name System (DNS) resolution. An IP address is a unique identifier given to every device on the Internet, and when paired with a domain name, it allows for accurate routing of online requests and responses. diff --git a/.github/screenshots/wc_ip-adress.png b/.github/screenshots/wc_ip-adress.png new file mode 100644 index 0000000000000000000000000000000000000000..24104e54cc1c8b315c37c89311eb35a2b65a66e5 GIT binary patch literal 74616 zcmbrlbx>Pv`2Km&QXEQgE$;3P#a)WKJH>)ak>XI?-Q8VV++BkdF9dgIdB4Av+1Z`_ zXJ?X0<|HTQ$#d?L+@I^Zo^WMFDHKF}L;wI#WTd~U0svGW06k3g5<;bn_XLa$8|7AJi0U#rdUm!0UYdM z7y^RyCs8cr!h*1X2t>LGcmxCl=m?I(E;wkYS??ab(I)$=&enNy5wTt=*X|teIJ=In zF7W2WGeU1XdJ%>T@ig1DPmFW+ovZ zQZgsC896dM-mL#GO%wqNkWmdJ&DK=N;BZ*@BEZY}qM`1Z%|yb|+RDR;gm!ar+xh)) zH9DikUem(@y^NX?VY^Ly?)qO`km(MlVorw{KN>)GEf&gk^L+H$YM(+A(cF;3B_0>E z$m6;E-$3p^h$AQv-i>Y*P&=-7+w#|_t2&n(7_!)Xf2&w>T$%J<^_ct`pGX>ZFrEwL z%VZcGB`00Z<22a#Q4|IGi{m{cvx~}too>oqn~|!(Z%>dZ?|LF zFwJ9v@p;lxj|rHt7Xo!lHpEdgOhjO%oXf|1R&x7d7!il;$&r~2kPWRUdj9DexP51d z)0R7Z+ydyu)zr)NoSUZOwhf|qe{~8ada!yFa^0htl|WG!)A2utrJ-XhRhI>qB}J34 zs}9y5Fd6)i6-BhyZTYv*r6#Q$B&$Xu@;_5G*k>caIw-)rj72^6@A4)F6^$_&Iv}G$ z&Z^+=CK`$G`H)K4rKI0-eZtN|brx7N^PV)m@V!8|anqBDXNA?VD8VvCuqtM$QccxQ zi#PBA87eb%PT}xDdE1rwCgNgZ^^W>E5uZr@*NOSrojbi@V9Ve1bpcM*!$W2fK7>Xl zp6<4wUJNTRG!ZoRi{ihsh^t}#?gXmOdcQsp$RLd8XwJ@!%nS_mSvsPs&WJ#8C?{;d zcx7fp!|_Sed$mwe6siB8<6;>k9HRY<2*v}jB)+8;+9ZvddC9*`A7^&Hk4&(`4YBk< z*NIQeY8Fy}`;*t}*>&I$?aLhx#`|d)nLFf{Yz*%vP;)W?YfONf><@RXa%z~R6~;<= zY>nOwsFia3UDL3D)1g84C@XN43+&X@3U6CJ&0@^~x9MsyRUXP4&-2nu4{=hVfaMp# ztB-*mlTn^-|7Lbd>@gc;-F!Rwx~6Z3sygf})dz;aF7LJ3Eo5M>=3%hh@isjv_(ZZu z-#e;YNG|hUS1v!zS7<*;z1KQ5H}fXQ0M4O$k~|buujAD_8^`WI5LS$)(n(s`C_s#C zYIL;Chx77x2SEJ4COTfV4EO1%)&-|#Ev)iUN;-oZ#dfZIWuK&3_e{^LSUUc_>^j8| zBpMwTXeem7n6^N!QB1-lKqes(0VlE@`d@#@?K=Abli*|dvo+cOjAp8)+Fe=M7oso! z@bKt;w}Y9WW{=~Q{NG23&SO6?(gc!*mHbt?%U{i>2>rX={@cR)LpXL^Q5d82w?e71 zYe_KNM*!$m#8}xP!^Ennv0pkO@lrbPfrY5y5*zR56Bansf7`@SKz}n>kXJp%jhk__ z0OiJ-xqO1+8a?wNuJw)G-Xz9S`co$kN)Z*9bX8b>$fTrIy(G@-+=?jA_3DUjeEdPM zlfeUn?c!4$OxP-0?H2ZyY(rVrZh8r!za+#1qT~-Fj*(>xCHT2F>SBh=dAQL~P2tp? zGO&#)5wSlpvqeSuGNHzo>uzVrx#CY+%c1o^Pl6nher1eI5CgzWW=D=_XJN55W^up2 zG-rGwS5sP{io1>p*R34R-qo^yc@b@yLjd zWXHmMwe?Iw4uI*6r;rV^Abx@)9pKLqC_UR8`?Eex_!!MifTW$&73FvA1$)7)5>1hm zw(iRcjBf0?-Xl9!L5pK4%!JYLtJTtI?=%r=EOOq5q-ADGn3*B5?H+Q^dk%b7Vmw|H zq@VAxV@!1G7o>x#a~KTJfY;>4fF$0~intf4ZVF#A(-=A0m+O;|{8rUNjRoUsh-*!WK{> zj<{KQt$t^ghVzxNJ^OO{YY{2yG0&Tw(aaE5DJc&bs(cn~GzwdIh3`>LC}>Dmq~_h>mjD$Q(r_XV35zCvYj5&C3-)TD|3@1I)+>;eg7#nTqgg%!y&M zq5-)??>~%}e%i)rmq!Ui$NG;BX1sd$*$4Hh41$1kd{|yNMbUhw=9P((qd^%US1qv9 zPQ@F-R3oO0-zSC5GY0_Af+g(Kd+||sHY&S^LuFR&G!jYQRk9rU|KW)~zkMT@fm_u= z{u_KkfW0z@pVdE_Xp>wF6c#decc97qq>0L#9q6jet{z&uPF84(2*I;cT{Af7aPL@E zcRn({b4b%~PtN*EqcCFA*p~H(d%PSkv;MQq|E^s#9^<=^^J&V;;HOA;l|TRZR+8w? z%&O|26h{`IU9JR|E_tyG&lcvpYYx{NTYZ>W=we*gTY4diUWXj3m>hHkZY!y9@p=id zecon`c9ThZ5vEudx?OH#$I;CXFW0PYSKfZVR?BG(FIvMrkLYcWh#&Q>Kb1uMZ1deO z4h==%@}&Hic-MS?{4g@9*WPCrP<=2SWx>dJ86jaJzejxgU|r|pa0rUCG!DJsU9Hbd z)J<2Ydw?Ty&sn>PVF#OU% zM^PDugE*26<-~{d430jDIz_mU#VJ;{VmkIydbT-U44C{q25~4rP1yVTahJs(18QRG81sxZ@TdFt?RD_K^@c2m4SL=@>mmxX(gep*_KCpI6syfbQkK*bq$DS5qHPmV z-B?Y&jAg4(-H*ta=5XbK*o+>lD}QpDA}0$E>n~X_#i>d-YM8fNOMJ&Z^J0raM-&(R zy)%*Q(x^-#7q6t+52QMcVAG9l$_~s*$x|Vq-OAONO0f(0R*?TxzMJ7(&^0iiavni* ze(~$xY+^lOb^gom1vT{tmv&!N>%q$}9-O=qX598PqIKJsv9d%KxGO=2sxg<71a)L( z)&bJt@{{II|E`W2Ib=^KD~LSKV!Y18o^)HrcEmR*UT)m1MYA#ChBNbI+pA@}nCThB zD!WRj5hp9RXGQttR%UNQ^o#fSRU2Qcscr-HpHU>bC0wu3IiVzoLvFbpk`ga4qW4lK zT8relFS9o=zaO9Eoa8&ws5+D-IMP+c246)KB15S~xhd;PhPSDIyHt>vRVd2dTGMCU ztzbT@=T=5m&{XuGc(Px6ldzRgA;jV1;rzoL&2_=F9wwue`P;H{dSaFaT+}jdoljarPG`4HPY(?r2jVj zFVX7fC>yoHj$@xgoD|!VBuNYaol$L!l{5k#$YrRqD0u=0Jy>KhvS*!{r+Pqs0c`dS zv20Q|pYfw)E|wt~KXGAcOna6@djn-^2rcY3B0hx6uAFw>xNv99{E3XX-OPY*8FYB{ zid3OjE33cj=<{FR(Y%e-61J_A(brq)gp7q-76ni zpCJe1_wbG5`(n9%Re71;AIYvBL&dL__RoHd5>V2YrH)+%0S6IC1T`}so}jrJmV}(a z9h<-HSTAHb_RSPqN00Zljbs<-K2KGSAYA0l%?0YSVA;edUI{r5{0YYl_~~2+d9qhL z7!>QB4=x^pVLq5f0JKc|y|uIHdP9!pkOba%zN81o*SCU$qj=A>L^#qSkQkzLs7%oV z5_db#^eMZ^hvH>pvRB(I?c8u9K=hXDSQ{YJh4)U!4+>2*>mb%7pG!qlBMd z$ecYm0*)P+P7KTg0u(n+l91z#W_4kYxjSeY^ANPqc|L_Eap)du&HUDWkxJJR@qBvW zVlrt!raTK9I$z_)#wB`oeu`G}?_Skra9tLj6kTKoZPbem%1np39>bscZqm-VS;S$B z@0&$?Cz-C_F|p(aj_S%1a|jxezwUj z^82sDWCQpuj<2D&_X2v5&6h6(YK#*zo*^*Isd;C>lmTAZogUG>SqlaVAoSjaqk+oc zz_}&G0BCsoq<=8)fz?RAwr6&m{90n=S=iHm$yEgEnVnmGk_QoA`#yj&N=$cFEsB8DyD#{^A5yAa^na6ZmN8z(2)a0?BcShw(UPWg#i76>yjQ~%MI zgG9szD?;aTRqZK24Gqju)MyJvu@E&3nr@P9;1`6MSV?Las1N0nCSrqG68tnW;y&b) znuvs1;7O(t)20A4%o{3f&Uzsc-}>2-($}qZijC-nQ)P4Tzp^4~6dP5B)|BV0!u7g6 z9qHlq!l8x=6|+U~euPm*o}hEN^C0GtH3fz?JcX8xe5Lxor1t^1<}bVL7ixT*Qw%1+ zkG7UY)>R;&R_a&TC0Gjm&2oV@0U8MCFMc_CyK(4}O8L_q6w#-9g*cVZb++j^Uod&w zMjT!wUPvR3%!CDO>r{r>s#w3M##^0Hg*#cqebZ*Xq}8A_t@Qtb3-?(Y7chSIn+C1ngb93ly7&v4z}mP9q=>5mgtN0=Zhe6RAF86tKNq zN;zJ&$KmwGdT^Xth;VTF&c7Adohil10ljttjsoQ|v+oCTIwctOXQY4%rtSA$n_wHG zb2BIk?PI(jLqJ#(?TMBxSCQ(>#Y6UwR>jni{U`y`gV|v#DX8z|y8eh?;6;!tY7HXpK4|3QZ4$?%j}c)hK6H>AJDRD_>m7S0Sh222T1%#F)O-|8L7;m8~NH_ zdl~P3M20?4ZWbVS+dR7Q9qRz^j~ejDeqdeTy{r}$^L}aLM8C<6-3+JLGIn?G^VhK@ zWx~Z_Ly0KsE$6eyVFLN)Hfi#b#u6YME?DEDpkNm2uyPw$deX2SafLvr8HSTYU-gSI z(WfrI!CSSPb;Df_Ms~?6kxluk1bS#dgBS4|j_fEIEP%-@qwE$dPLV)sh9xqiFl5Uu z%5h-Y3*Z9%Rw;7aE{_~ZogZ)(UPO~(%r6Jq&mVEaFCqL|FxXIa4014(nLWlCZ_GqR6ED#k$S^&V7vwQ#o;>%=% zK8hqBHUQ8+Kv+p(%;;Z}3Ic%I@Y&A*kiSRCiU{~Lv+)v8R4WHxdVOuLcKCa=``!QW zw>vyiA_6eW&a^?MQUwS6b*cLZLyAYw9IgWVWj7zd-IcC)fgN`-(Kcj_@<0Lr%DLga z#oW9^fvO9BzKz%a} ztq9ppXKq^(gjMZ9ez^S*0!!+Y7!38RpNClZNN_k^w*)jU^P% zpbobx#z6UJ4tQH;&e1iHigRlZtU!kA@Zr8WR}Xpv{_m=e>MJAxt-mYZwABN?5(5Dm z5m>xoM2W&U2*UntPVzy{#2al|)}K_Qn)KXu}4jW-mTXthJ}t zTVoB-?a@iCdwOTViiF=zQbmq1Kw*`P@*s!p`49+ZDe>l;Bhxciw6SNqMvs3L2{#sx z2GQxyF$shmE*s9L2>{c`^x^>N=;bU1077oEB7S=;FKA@CKeVfYW{}M%HAYw4^ZFRD zee_cnp%P`MNXv!D5CGH=|0_WV<{mUW1v{r5J(;?vG5yy$4skUsfOINQk___?jd|8) z`%1Yff2ys2Esi@Kvq3%!kc#ovOF)T;00bmqq0!bXrP7QkNZyk!X$gJ8_ps)P`0_V@TdTo1!J%b>2Mgq(od~lfC$GM zi@X$7sumYj+fm{e2WEtq&@xVZ>ZU=_*ZbM;-xxqCx3m(-m$wpGLwg^^o<8tmJWo0ed`vL%Lh9GGUC}oqmyGxyWSuRhp4xDBpWd>$n zV`)Y@8X(u%)FUz&iYEQrXrsIbPBt_U#S);v9!II*@C&Hh|GSt(4~v!D{`>h85i8$T zCQ7{%~s|Iom|OB0AY{NwN;k} znlzoU=QFjbW)>LclUP=WhAkUm3sTC|^1)HupM~RvdeX|+jiJx8o)aw@N$)e0Y%O8C z3DtHJ18Au7M+lIYV?i6CBO_~eR7Xlvd2q1H;f`Ucju5M62Gw7RWv;iKaVl)mt1mKp z_(G|TBMJrN(+oQabPINDXnoqT$9=Fh8Qav)uPM78 zAa!Z>;9BB7)UcbPAxsGL?@@g39@KYrdKD;tMvXb*Rw&F@WD(%$C@9))s*3^3imJ3M z6W=13FOugbcGpn-Os*(bB=DCARM=uL_5R$PP?^C6L4Ix-j1=h?;5L!cw?#wK@4gEF z$%!%f_>rEFq>YeRN4oZX`O1Jjzc%WLbV))gx9??c$gsdhs>AxWPUV;=7+C8d61z zbIk|3K>dlEJFva3llrcC*CgR>eB`cEZ8}+N!z(QRO6VX_^!8l-IcKOjt;PjWAO)mQ zA6*b30JM4>th;c~5~7LBAj1TxE-r!hu(;1D8}tS~piUwX>KR){MK~-|nAqce(dq?6Qf|oJbzm9Jc#d_?CsOYz(8})KBc$RQ$Mt8h^f1{q}9#556R9j_}1vh z*&w4kIRGa&PQ%#hwsBD-09JvqeB7^2HS-hy>Nlk^VfSpiwBqWq5U#y(c{N+l| zX(q^?xd^?$wbF~ZT$BSMch_K(xMo00KSn9jh^541fk&#M7&X~SecEo zieIZ9E1mAPms$HKe4Uva#ayW@9gnQhj2TxNvCk9+WlGt65z5h`cP1UP3PwEr@%&yL zy*2}t_@SWoXO+e^MW%{rQFRtv1#INXHAS^HaA`lmO(sIvLMc`fD3$b;8Cjy;W(bBd zr9xZdFYFH-2@KPZrXpctSmNx?Kg~&6X|pV_bRz1`1*pUGgWq{K-zvfaPs6~EelkIv zgTBC{0X6_Pqr+j8Os7n_0ooE9Ry3Xh8G$S!A1@-V;q&9-bAocCUWFNhfF;IQEVvJq zZGfhcW9&kJIwFw57zn0`$k$GfW2bZ{(k7Fw{-#P5vqK^C2SEi(u0b|=pAo*mzB^g0 zQMD}JbMgy9V6f8&c!JKx?H^5>-oSLH_FvDBx-GIQN#0iPN_5Gp`MbA+kWXj!Rp39F zH{d_x;j4YzyILPu%J`olfZinW?k6DRH~;T?@PA%V*y@*eVIsNn2?2xBTQ#xjN*Xcx(JA)o)s;!Npd)rXOvqv)rW*&l{q_ohCX)D*7^H$R4y2SaO z%XE7050V%%;cIP9a^cuO^CEA$3NhZ=%$_9>yd>lo{yb~p^SLda+Bh`B>9SwwpDF0L z$!L9y__uqaayV_|yY@mT?)PWiRj%j@?TN7G)6CVFfwE?%G`dnkzQLKcx8IYQ8BEd1 z0(Sk?xy#hOr{q#KOh-4{8-zdGROrpwk3VTbRS9SV>9dp+utNhPidh@})PKsjWK<$P z5?xH-6o|bQ*Y?6aS#aC1x;tLXbw?EX8tPsx1TH>+H*zkwb6b)LQ&6;CZ&rUBaE@mo z*7_|aR#)K|?AlpA=dAc`5Qkq9@!i}QVKv=WZRKpT!T`fZdkFdEyZ_W2$g=v@v|$IH zG`pHKaooUq?fI1sSIsE;of)lTcvP*rcP8ZT#u@9=V>tf`=Io;5%3!Qwn->{h&vA6& z5y#VW`YBw2r8o21<~oQA;4&+sD7KLKm0WAqW|*PC ze21XzaawNFp%rb^*M;kHrtNZPnBgnyWjv^>@0`EW*o-6y)$A}=ZJd^oElHypIgA&L zy=DEOEdPYw@tyHl%w`^GPyvTc&!xZ3E-&+2jJMU@{a_|Ng}?!`ZDOwa`!@xJ_(W&O zqM*71U(ZG8zuBl=RK>IJwXQ;QX7lZCU9zJkYY*<^8*9m-PykKnB)f*sd@>wxj(@SY zL|!>&x|8>jasTDF@kZ0wY!fpZBs4{917cX~v=t&m(oCCGhKR@V(B-7B zyWnD?z&mq*>Q`rTwPhA#&2=?DRdA#eGmiV9IepC+yqRMKac(T3wk zs2U0lEPLN2#Vdr@<)GlU(dn4sD+$(n>ye_E>}MY~n1VZ53pLr9lTK$ZFB-ZdF#w

    523!zS-7*`SX5&2ziF{2*AGsROOM?w=~KRJ@0WAoS9qW$=p#2o z0DyX1HlK}cC;bdBI(fVqDgQ_35j1YsMO7U0P1pNfZF2tRb9a#tZB|YHx9dKIA$Hk6 zIMzX-3OO9rmL9&`pV{`PH@lp6pPI(dD3{nWY*j~#JD+{6SPwz!#tWNzYZn6weP5va z_)u0e)epT5MpyW{U5px>Y)vIjckB0!F@7vcK?Xv30bs63kpFDw5#~d)T5{!Y4y&aR z-A=D#J%b-$J3 zrFF$h!gH}D?7pQ9q_p#u>wRb7^|FL0{cG@qkg@DKYp3Vo2&RzNgdheG%n$Jnm4a>7 z_4;Go8{rvk!rk*`vNS{gDI?00_FYC?bst~a9ItYJnv)^dZ9ZLxRGq9~Tygb$ruqN? zdV0T{UEYQoim#978*a{C&VJNGy<+PvvN{?6Fs#lekQT%->L_FJO9`w^r zkJ6`Z?QgPK<_*O+nvPAlP#+tlmW`eL#Li+TleP;njL<&(u zWds_Vb+DsjN3x#Lc(hQhg?E(PRq-oF!0@{iR3On$nujQm^&C`vwaWo>+>2wUa zWqv%{`{B=s*8RhgtatB_ZB63ji@q-F(X!T#m_eth{`fknPD?|vVaN1l;6086)tfw) zGyeE^{-WpWx4M^;!puwKio3j$0X+@M6j(j%oh{0k8npa}@;Gn1>3e?i@YwbAVHU_e zDn4h9M=pnopE}^XoJJ-aoYisPz;4y6f%jI z4(p=~jKMO8*4kR8ZzBFFQs@#h_$sq6D4+PD0A;rzf>s;+Dn8%Ggv$Y3Ubn?)xW7<| zP(hYmoMoD&u|(gg5=v+DgE(pB7O?imv7-`YDFf?SB%Irz8K|!MB1|>Zv!r^^0anf< zFOarSYJtPx4rs#wtMCa94&1i*^7wCTk6x86jch0l8rYQlQQl9EGa4izyMFUqZck3A zEuEq))s=cs%-wF~cWgVcW<9;^RPLY~L*3G+F>nMis;LNo03}e%vY7K~?Jv0*2NMc^ z`pQu9ErsgeB2I~#%r8u|-r~;tCnuSr92Ci9!?xIA)2(Myf}XYpx7G1%{*u>h{RTG@ zRGeb-WySYyFDYI&p7_-@o&qYwF0cx|?Y~ULkJM+#Zn*B5X65d$C|)YyS5x}K;i$vR zRSD|48~czL814DF<&Nic%Uj)BPsfJoNPQ_KuwE8t6+DE*hFTI1AOyj>?vbk>#W5Em zvf;r58okVl`CPX25iDz3z1?~@#@)s;B2&A4Q!PZmFlX*fh zXoQrEoRq6g1l)LfgF)KJ0*1P{onrPPBxX|U8C*i9svxT5mrKa``sgdaJNT4f; z$*(>R{NA2)>|A;LVW2#(#y|Dlc>F}&4RVVzR(>l&yp~Vqdk4~U)2RyCHc41qXtK~Z zD2nP}^|}ja_t7y?m3<(moC<)VS)wwoKJ<406Q`LD22iGr#%#ACejd=mqSRpWH}hIL zzDH=8GGsnKoEPpqHmA{XwcSYsJ;=wy21G_g<<8j1afJ~=Kd;jS1H@Ni#9w(^Yz;S^ zpA@4IOt!l^GTn16Ra6H)C(K=q1Ef?N?Yg_0<|10wLF033K?TqOH&WetK0H!jzs1*} zO`qEh0>>_1b7xCig7=Q+TZznD$|JH@nfrkVXTDzg&5_{0A|V+5`y^M=B~&_{b=7{9YLQ9VteUcHv_f*z;bx1>db@E}=majN8Nm*xu+YyrU2e&??q=tU z{ut347<>>xkJ*Cqp5f**CM^(<2)c@4sy+C3ON^gns(fd?*$F26h#37dZ~A}Q1m#=5 z331;wLJq}^XoK{Zi_T;jNY9I0EEG=mqlK-;!9xxc!6IKjc%7QG@}LxN^F(iY>778aH*02^?|5|{hX}yyktNX-B|Zi4E52olq#&KwUF&Tna={05 z93tF(e_2}n%r7~*@pd(`a^mHN@afFomn%6@Iy^nT$-v`$?l(R}ipAs3a7T1}nZu?x za14!OMlP+#ryFu}Qq%pk{e#=D0kjAML_o(m+k(r;x|l2YobIetkE-uNQ>iDj?zeJC zc*f*c+$Z0Jb`});69vKKTY(8Aofi*(?goARt+IcPg?E3y4y|#a0E)Nzg+Z}Mg-}4d zgCHvuP}s@1W02`GsNokkC15Oz7ZGDBI9?VSf*%^;RF?>yT)NuY3HRQ$n9gXY<)&R+}x6U;U-mRd`?HIlEI3mFn*xe$`{4`11FA_F!K%DQC;A zzULe7y8wWnER%y*ytN$d0zJE}av!;Ft|_$c9NABE(W1uTbp=Ty1}9gQ8p}Ux&TrqR zPF8z+??};Wo_4&!g<13eywmc0r3Gc(f4C1#l!+4$Eh9)lwLWDkGFayIKW(9=Ywp14 z-walv`)&4Ra~n+!ywg{zFF;iGT$%Z$Tjv|$6q0z{Darrv`4s*8(;s~1|6%;k|2IgF zJ%qd2O0sQEc#nL(F6=jzI`IowcTm3r{^wbc5<2V!)_>u={}cCbQn9Ju5#JvlkxV#p zCX~D565Cxy^^y>%&8e)NoR~XALPU(Fa#3+|%2q@J9v%b#{Mp_%5g&*y{rX#UcinR` zhy77|ykhNzZnBE@e;)S9ZP*{CL>F`{!GAGy3>mYhj*cJ z=R(Z4N+XKiKUW-2!5ffu@}6hOrTMC&g_VQ|M<{?`VBpXfn$k}nz-c_DI>l$B>U7xC zq_RU{zNVw3%jfQFNx~1wh0_`pYH!_~hgrZ^$>X94$%tfN?)debC?q;em z(jNbwXZZfl_`f;f$+Ry1#}R*)n#bLjZoUfz=Cs5vTaTeV%L?}5ZxeZc#CSl+-A|~` zFAwM62RBJZ_5c96pi%N@PNT2c+wJ~XA*X9@gvkqB9$p~j4&ipX`8+cME^zISv;29R z)A{o6!JIh}`J)7Se}Z^=vYP)&n^o9V)){se``;o>!-s27)~P*o1$*_Ln$d%=M#^AA zj4*g}JY~#yg{{>cO)(PrPLg#7meCjL}3NX8IhE@4?u}Vz4 zb`%1?SoaAjKL2bG0tWzQnmr0vk09yUq3rHV8))UnU@2IBW!0Ikt0l~F#XKVME?hly z_Xn{r9?W_{C?&Ld2umGUFzHd*^?!oPp!Y=>4<#gcP1nf1rz4_!`Pbs4F24eK( z#0pSH_dWGOET3bU-~2Y(>BLB8sD9sUM^rh|<#Y+s&{j!ywwuojxBQ*86Sq?6A@__^ zCz^m0ec91ge72lp>Inewm^Wg*n;H_-I`Z&i4ZIJ?@W5X+RV^i@X^1F#ZZ7b84^ubw ztea0IBirT%A*SQb+PoKcJ-qwq{@p7y$Q)_d$I#$>W|mA8l>-_WH_uwH-JRgXsgGOg zeW165oqb-I;)_|1r%++iFR6OVrKMjpc->B|QN@pbb6qe(QGB!A{9HrqOHfJ+8^Czc zfrIS(W(CjVnq9YD(98e?EQK-m5F7i_*$Hsu4Ri|gn;qWSoAhv!B+B)4t?ma= zNbRrlm&DWe6je)Br(Zef2@aXOk=&Q$vrfM zZ@P5}{FCa!k24AOndGaa+}kien*XRzz`Cb#Izw`>+2~M3Xse_jZ-HC~lX2GI z#A{XS!*1+S)Omh?>ePo=Ed!xHS&5HxjZ7r^^t^;?hiO$(mF?u7prcK?ozNvO&_^5I z+kJ#Uz;{dEv-7ZCkX-D?n5tF& zY(0){@s1ykB&?6Fr|9yL?(S#Z!)><&8#85vuRok^H@jK;iG;GR?YcjG+$KTgg@yG9 zbFcZT;p-V4iKOaq`sT5in4RU-Ox(?tx1LGK-0>b9XyRmc)%N`1&|^0TaiG>f^~kf0 z+_F6jk-xX|a@?Nwo+DmGx&)jus{ae6zqQOaDEvgJM$_c#>Np+mIu7idAGSwI_RT4^ z;V#tl)!Ck~P-HMfiOdYAueckCH=Dme?NldVM=#-JA;+2GD;d5|ma`=W;iIL$3RQ25VEALDHWVi24odXb-022+YvXJc z^2?$Ipg|yIWuV2eugjbA(u-9h20}!92{&IXIE#jU+?Q0es#s>d@_5( zQxihvaz8t=A0x(bzcTNeF|ZrO^%I4!G-Fn4rDFzNq6u|;`Q zGWm(_5DkmN74o7IbK~f)uA4wK>x>vL$cqXQeg{3pq#bk)hAr6;DV)1A1x0x zhZ6%`mYt$7cty4ulWp7&e6PKqxJ~$Z67}Yhit=2ZKqDk?i51?ghl)`lx7I7aYkU}s zES1MB{9+IS4m^=%lj{FqTc<@qXYa5AMl#U-)2^Io=!3Wb9YYi=DWE>FK+j^h(y&7e z+bvL=1g*}<-}tSVMDVfIh&s%lu`)JtDnCd!I7u&2lggI!YA$I#YEy}5wb1&YHVi{f zF@q9y9V$PM#^+he9WhpNRC3P;K?GJ)_*ySpom4FB$Qv94Mg@6jR=lnC7{j_mNt zzyMzYC_1cE2}VKl>Y+|ZiCLxl^|i>{>YZ*&EfgYfdrY6cMOwzHWa*{5*;(f}J)YaY zJ7WGR->-&$V;w*xeE5)@C0ZX-p=6&;EC#c;N-@s)GGz}YcNxd6rBGW@5zx%K3b}Ng zRdzZ1+v4B9>x5fdsthKJX=x4#vo5oC4LZ-Qhj$(An~N4rY|;oowIdvqbXfmR)vXNs ziy}k^Mc{5)vPdeQ2A2!jViI=$M}<8zGcGH%x_JwypgEerW`WU595W6H>RaPM<;w?t zVjgF~IxXz!HdMF~05ExOu0f4{z8qloE95@z%#0BLqv3J&k{S1Lhc>VPxYY*j^scAu z?uwU-{4}LY!%i4<7`!2Fhgb&Rwi6)hmE4*p&bwe(rDeVpY(olFZ=-0-O9 z4kvvjYSpzBUIY7{=<@rWKby?OjnTpnk~2)pBq+d0Kgg6x#)8)QJ^Br{1XpAI?yB~Y z6Ut3!DWqeWC}iN2qV?xFNkzaaZ;@@z+OXtm6m&d?)%5xEJ!SpJ8h zA8k+R2f*7qmG={s0(28TlGsFz9Z8L(3?iw;aW*TL%XM&B(CQ8Gf;!pflFgoazu$M3 za6m6_XbMXDuj|vqSJMO6B@va&iBDsL)$1N3s|-|>cDi*eW*fTV7QV6s@#L}0-qeo0 zM<2U3wCy6!_)fI;EXx8DJAGeq7slKA9;XZ{_Zv)^pDzYdq}*@=E>49U_gY0DExIkV zw(U>>iLY~of^d<2HDReW08p_ z#ujTKB-|&FDL~Ya2J=dz&wjgU-|j&80mw1+s_Li%&v5-hYu4vkDC-17_h;ovqX(zm zXmUS@o!0ldOrIX-RJ(ouCI|--W#9D|!QKC4{%-GzifQfjNi&M<@Nwp*LAb>(vtxgo zs|Si)Q{v3$tl%+6e%)sWhL!!O|0kMe->O7p?8z-YtJOu*5mqS4-(zI`4lyelEF5t^ zAqpz7EIyCb#&~dMcJ$liKk|s?D|b8pi${n)Hc^#t%7=HL@qdl#*uVShdzX*!U-C=l z`wd;qjP&8*W&c+o;MpgYbF3W;8#W{6(GySs$Zg|-e}2(N87rJ38MW-6om$0~%6Rs^ zaqqaBh)JN3{J6atou6wihYdtTkaA$@GzVuAg3Ys={e9!>Cqej2AblN{HqDj^e{X$` zGIGi=|AcyW9hM9z5z#r3xv>0zd#qnABF&87OioVfSBbR6tbH=Ke_)ZZ7-8BzgA z0Y!hhWF&#i%yAZEVAz}u`1S6HPbyOtU;tQbX`BXfOF*|Pc^e>Ut68mczeN4+#=eP- zU?q{NQL$e7q}M4orioqe+XJKtb+SdOgR}V2gEAFPv#TqcoqPX`rdXmljTs3o?LF9_ zacSv7EKJQJ%p~mnEn@y>Jy{w%NHN@5B2YeQVDy^9wh#{pF!XPkY-&)mZ2|#*{~4Vf z@8;GusL_6A!?Uenv@TFx=7kawn!sX_N2OOX{v7W7ZG|yjX}@Rgf3Q&=H^Q~4iiq?b zEB|lU=_MaI7phskqWEq;-)m+p&;O~QVPjj@s@Q}jMc5{ZFt!pUHO)$?5RIqPiG2aN zmC#9w#a%W>c{@#}%^Ks8*5!pY5Q83N^ukHNi5qi??7O+OzGoHwB@3Cn4S^Y|sgB>D4lcqst+<80}=) zWw=yU&hvLLa}l~Ns%DZUzv&{9L-lm3CG-eI$|B;|qYBg(IXjZVxA zUB6-4cOQO7#65{pn3s!*tj85u*^FeZyDX>Pj`e+LVviFp+zn%cXi2;uU_(5tm7Vt2 z!56&P0I-XWKJ!NkZoiNo=PW%lPz>Tt$8dOex;9aVr$66bomDy&7AZ5z757Y?P24WJ znQgH2uDP-LIQ2L<=r)@PjSTm3{)|+t3bShe1G-cbZMz`>bGi=&H%J1#`_JQ8Otf4~ z7)X4P{g63K(;b$a#N^_aw}lh3&_N=d`Pj02s>_u!(RlnAhDaW0AV~u=p9|%ve&mt+ ze_6E0m4>kYyGLs&m@40gfyCXiU^#zrRct+o?sn{#rMRUtK6?Fh;Oc$QiV8E!LD*q7 z)8Tt$Z4C>gPVrt1WPaTIifs(EztWRb5guqifIk!5$)7&%tDpk^_%P1=Z+}A=^|W9C zt?Bhw>)%h2XhmCIFTw`=qbYPkJ&@9T-Jb7K_)tbdkn{YJPwo`jFnSp0+uKR(p`m5qi0g(tcyUXT{HK~ zRWG&S<{^u`#Lo*H3 zUCVWKDdhB67L@BeSK#y{ekKSjKrn4N%3srHy=^!&A!;GrUh6qi&&;$hocdG#d~8Ro z#-E+v02V-Js`R;`1c1_Cx~j9y+F5dM#%sDtUhdoHIDuU!h0le${tntLCc5fE@J3)C z=f^QkJsNb=?)1xV#x-^1{2#p8w4ZPkv+9_|z5Ye0_Y!Q9__xHlIxPG>JE4;IEi8~k9A5NQ&zKW%wo`~TAyVKq?B}n}E?&Drn z_7yR|Pb4Rnb(ft7|KM%CrzW=^h6I)BL(l;dbO3f&!+6YN}qX#FPi! z9lK`hB~p@M_I*>fpH|D2ihr{Fhl8E9&m4|RAZ1JACGU0c*I?I-8?}73yOtqPee(CD zi32}=|6kkJ-sJGX+}?RIXYSmTkI{xgT@}TDVm|dJnBw0ZsouRFnjWrAm|D6SuX}qY zWjo0iEWta|8ywBNc^fZZQVKdU{#$c86%BnQ2Uh?A&Sy;);14IWe%X)CJ+;k2QvOao zGsjcd?u(?r*5u>H7RHa0 zJEkt6?e^a2u3eN#lUsq9tyCe!SbUSe%)?1U3Jt;(F45-XZ~y4AHvOA%6)nqE`D!rY zqRO007XUgYYi=}8HbJ$8zpi=8EzaI*AHQ{cx{~a~+Hm-{?1+iq({&okjb97&8b0P; zA^q4APuaZ8s5j|6*sB@3CF0qYGChma_brvGq#39pne!M_$vfQ5*@u(z6Ke9UAnwA^ zbM|)o{Yob>)^37U&JJY&lWl zwzRN_P(A)FXn8epc*s}T+#nv1$sc`uSjq3dYu26RC|z(4zglTZ{l&9Jk?5srv#N8% zjO9Pn9cY^i%~3*DSm$#Zz2lAo0Qn#xa@}E5KdslTGxxb0xI-0xCSS`d6u$5GxytYq zd8Nw%lrM2ggZ|D8d`nuX9!HR@7Kx|c>2@rjbQKL(HKoVvUkz59<#($cbnczBz9p6v zi=zJ{3xJdb2BB2E{Gdbts0tm?VpDfY62AWZqLf8rx7;G7ortK}?AW12N-JAgO|VaH=ac-u^oO}*h&iWwY;dMm6#k))%}6FA z^^Wt+V-&%YhSJNWK_4smmqdWni7Mf@)&5sj=e|F1{55M+2 zTIjGJ0Xf`vZ+vi37y}wu9b1YmTJ!4eDzY5lEOdQ}chan+SwbD-nmn`SW%1m`vAp@; z2z$$@xT0=bupl@=g1fuBySuwP!QC|^xVuxqfGFToVDBB~g{WJUQk1<(3Hl1lVjSd8Z6h6J=UOf}wU14(~VE}b%# z%j|FahEKy6v8#jJ>g~Zi;_7M~pT>LQ(W(tQM5_*rnSZiWdI|)4B16P~1yL*%rI5jP z;01oA^_vZUU2v0K+(x7oe{f9K1(|TaU$2-hErO+ zO0KW<{H?g|K@F~(K)g+=8nViw*uba-i3@@8!UHTA6aY(E{@p=hC37j~wbEAiiuNaw zmY6M|i3;F0*<4KuRUXY7T2p~xn*v-Iud}`8gNpu9#8okX4roaFr%-g|lW70pTZ~@r zIT#E#^x*%hc~q>t6gT7eYO?+0b`z?D$z`*(sDh|{f+2>?978N~k?C6})fg2~exIU~ zL;)xr#IkKDpperD{gy%8gfs74zW{1M{nUqpZ+60*{!u0NF|-*lB(2)u0tmA51o@5? zYs(#XdKG!8L?QJ{p+ohA6p%$l5#mRMgcQ)o!D34KqMxAJq9uv=b{jQMyh@9~k)}99 z6khoYKhvyqcD8SD^FzKub$GcnH2Y{ zQ@t@C*1FW-(KQz8?8S)mLmXDKwU42{68!INm!K6YM|#_#=?G&fK*d#Hgj zR{UEV?dQ2_M03A&5t(*|YCy%j6aZZQCV8+$vY%| zcVt?6M^%|ItVV;861VElOy@CtaPShBl?@sJvZr!Fq;tobigHfc>V>l(`LVW*T##1$ zLVU8Bf%bFC;ZbsV&~e{+8_YRid8&V4?Idu0fqgb4!3J*BF}L@2YV1G1j@6*SbXX_fm0GWl@RAeh>nk`f|7{lXDURNqS8lIF@{PAusf*2UabDXI(4E}s z*e-z$^gj;;VlV1-k#7*sn#~t_4IRAS^p{6-6C^NDy}g}O_Yf-?J=wi6M38?!;JeikJ$AmV2--ToZ85msC1FA?fC4S4Vo4A(+k_Xlx0sdACu zN-@8RRmxQ@IRAYifdlG zn~h$F0z`P6-5w-kb=}`!tYzCF?~7WjeX9|iWAj=0)oBFyhtQa0u7Ln!s#Lu2-GU@( z8w7tF%hmCX*9#Oke?%PMYuoz(A-DjK?5928SnW^aA=yvY~-Cb76bbBcpOjSE~i{~R6jQsE_aIbjE_PZ$8h`>g+lPCaG7MG`XDz(s%j=^~y-<4*PVW6^`3!Wr{i&;-N63C2 z${iEK|2f`8xp&08=E)uq?Rr^WLhW0kl+9+pJQpyZ#4dbtT-{8~^!a0u1`~XQ@ym#3 zd}VBZvm0p+>U&)O77)gOU*U0M1rRe=41eb6JaZ! z&olCNCT>=vL9U$J3vP8=bHMjDlZE5iaPUGm73oEsZS=H`&K&fql4I2L2l(Q)(*V+@ zKm`2r$Y{Q+4;Nzrh*YFTvO|c-={?DO#-k6MIeDAA&L-)qbFc$}po0@hW5=5CNg*-S`B)YYpk8CcT^8)nhemaLNZYUf{<;?Fb&IgWe1w@pswQ%=2t#rM zRjnemE6G%UUUOYZUUN;BHtI!KqGK}~Kj!l@DsMv_LlQcQidIrphEfFPU)EKKQ2Sj)4LGoyhU9e^f!Ktw?f80S%oB2lyYs3d{eGf~K4r#{A#C zU?E0x`pov!0-DoL?bM`{vY;z^;~=iqlCs^DpBR!0I5Jz`x1)i9^`Py|Xj#}P;?1Wq z=|a5pR|Mp>r$`4`X|=T2uQjKyIJo>VK+suru8nNC8cLOStGP#thQ0UFknzXP($-Wi zZ%UviXhspy>Vby)6OHZbtG%_>EOSkB&29e)O~X}5yXQqvx08;h*Ik+hE%>3!cM`hZ z=NBptH?jR6*IL=bx9+aRiE|^5m&$q$NX+n%j}1#&{w*|Z1z(qUzGD(n1w0xQx?L%s z&*wWGy;=nY@on?+XB@u@8#b9q(GLNQg&vmszFYzuSLYl>vZw1xLSu5nJxHGiM8Ci^ zmfG5rkGtZqGw8D=USD|rbc)u>C8MFL*3ytk=uHlMvCmQjZ=O99ejM>uk%AA`KcZ1r z{<{2RSvZU=mGKi(5A2GeyJ z3>qSD(v9a7-t)f{#0R{eM#35sFLIxU6W=<%K*#<(TSA#!u6>(IfrS5eS=!PysxrKd zTl0AH$>Gu~??(s)5OJZ?KBi9>)U{}R5 z#m$NyRJ3upFV9}}VS_d}Pymv4wC*fE%S~hCUas8h88DbfVSO}6KJy;FxMT(;@@8Xa z-1&LnP^|7eMA4w2pai&E$-#^YFc`o^F3^S zLC2z!1^kX8zI}n65?B_9kOYWGtYsEY39>siOTqv|+OSXpx=iG@GQh0s^U2Nn{a9*Y zVcU{)8|KdR61C(_57a5w}u>r8uJl5n5_tTz=ORbv~!Ww%6GWrZEryaZ-%pSJU6 z=mWb1?oJxZ!aITv=Y-?{!A;r8;4^7N$tD4dqiWkYS9Y7nf0jrYpR+&R39~1WuP{xK zi#o`i>^rSaQ^sCeHW>3x-rN_p(7;bkv_il?r>sr$xdVJ0KNQ=mt=HSfT+?vlOpeO; zp`eTQOd3o6aii|T8yfIi^R;j1iz3PaVdMNw7UHn^_9|=SN}lIpo?Ks#-j{O@lKHy> z@7tyx2FtZJje$9SwtHU0ig@oL>64vVpu8@Qip{5zut76G;1xTe^pr5Y^g~Cx_@!4o z^6|#s_b*e9b@ONy&okj5=^TBI`XJC|?CRqg-$x0>G!!mR!eo%^)v=dS z%Eh0YMt{Al=J-_p8j?kJu&U$!HlQ!8*=DJ|?`O197)oHEec^08TvJanu=8CaIfU3s zXtgY0YLGAt`F+2rk}FFC%ocHc-QDFa)bKOL6YS8;Zr4Nh4LliGMc>Taltuvnc-}sA z)%^+s>WN!Qd@Ay)UwevzcZ^bL7nRbP*$O@$6kwm_J%7K=cqD{H%DHh91+8q2 zf6s^FeW)1966{p87qomnmx2c>T&(7Q{?a=K(g33BqBOK~zHnmtNHVQTU}&kN(GnagMiyWzQeDznoZpebFOp4`oIpcWVi zauPH>7cPx$+f}5aB=Y&}l45M*{_YXfx(@c@-Yv#l+#EiR9Tnyo=Mixfx}(jDY|OiK z=&HQ{$3A&3r==DujG2dBNH>1&*$%J)L@Z`5+|g;R`|9V?FJ?K^n^b6Ed^%GJcA__P&_Hea9WsM)K&8qzts2!0 zXHxn`oT0@yCL3%sedK_@wAp{38o9ahCL8z&)7I}Y7wcj<4a2vvsR=eZ*wt|tN`2}F zP4fcu1PK{l#&oPBk0s1-A1I5V0FzU~i0HC-K-QMz8Vr;9XvF+O!CH(o|ho@=cJ z(Q}!}*JnAPCfqP2#~}#R6>Be_j7q1H?)!sH_vp36x`Q((WcoD^hRp0|z67ZX(T=ge zs@Yfvfrg;{XF|U@%5C(=b5{=B)z8BMja@;an)Gy0tPZ01wLKTVce9afH7tLl__Z;4 zwaIw5O`SS^-gXiXP?tr);wA|wQK|$Yyw4+c6bc%2x+W>maF77I-)qP}mFWvQ^LJCF zLllZ1+Iuue1jiDTxb=Cywd~vny*OzcZWZDC+poiME!d(CVNv|i^9FFWU3Ey-#Ml%K zNu)ur;*31+&sGor3eHJ)nejUT?G}*X+BM>R6%jMDvynYKp*Z72KK01oc2rLv4{8a3 z6Q_X0F_-W!k(J#nGdCkk@R&LQhk3$At{^Pz%W|9(zSIh2y}^B;oIvNLHv(?mZ_qL` z>GJBkT2bb$H(Ty$Z(YfBEduij9Q7m$U-Do6+<`6wK5yByB0mxK08jw3vCS0pBj!~3 z{>Rl@L_Rwm1YJeL@?ijsq_yL^k18a< zxOcI89fWkL>9+#1N$nIYS4xsgmRI`lRhya(UHo#CSzUU7*Vl;pVssvea5c@%9aoGWa zB3V14JRVBK*?AVOms5^@v(4+`1i$+k|7n?5_=ABn==eZ(;cm3>BZw4AZSaLQIZ%P= zQ!hy{G+izh!9sShrNJLVT`R8JdaT$p2tc+{C$D54$;inFJejKwbycM7WH&ey?KEpG zEwg)61gpaP|1zBLw>+W%(}Ui%*?F(hmtcuo-Yi5ttHe%rOO0Ea_`C@26=gZir!14VkZ=PCi4Ee=`;2@)V<8mv=c zO&Ch)sMeTi?Cp6zyE>a%fdUNTsE8pKixuQ?4_3rKcI%njb+f)Cs<$BXmyekF(pej3Vr1*S_t6#n!UdNA6T9y?Ig|87Q z2AS=Kq*#f+gy-rCI1IkX&n?ogc3i(Bio?u*+(zGO(puq?ZH~V_9!4~sQ|J$bg4?*x zV=kZfPD*&;Js#UD-FBfS`Kvxz^Jju=s9FM8{a|a$oARwXs#x?zlvJ zP>8|KAhSC`EY@?e??LrmOodeKS*Z7wuDn62BCDL57JcPzM>_U0$v9=gmQ|(B+;yf^ z0@2rbdK?$`jLoC!lIYHv9c%3jbh%Y$A}{v%@X7R6yMWJrMa*rpg8gE-Hv7KgK#aE} z89(~ba#gTz-)ew4l1TlI6#WXmCqdP<+pKpAc!~G6vme?$ z_*r-39H&e?*XCCfsE8;`z;`)@$i}wL={NHF#Q>JuaW#mnZ{!yzv5!{@x9P#mY(Pn= z{t)q-&rF$`x~qaT-XA+(JH84|35n8)-*^M#}u$!~WtwRwBS>?bO<(DV4A4 zY6}fB4h|_%1tmh!J;jU$7%xj9DAZyJ=1G;RNDLl^ylO8HtaB|g*|R2Ie}Aw8GI9pI zPsIC8V#9^SO%#k1ggbxl7Ol$B2O0-eSMs9H2EJT8k)wxu%)Qq>tEH5$O}rn}4{7jQ zufL8C$^(%B!Mv$aeQ*^RUwd=ps%C~I4&Q}DVNjFffqPa0EFC8|#_aP*(&IUTRJ~(1 zjRaD=2Q%8uyI4sap4%xUFlqWER4H#;pG!maTZn;yy?e}F$x%uU#t-Yg)x=6?Z|D9W zW+m23n;S^x+44hHkB<_b_JWp=N65t9t2*vM~pgEN)LX@WxKJoD!ZE5cE9Tr6DCn(}ttPXS3!YRboT%zxQp-pCki3g`-dUas4!K4yKm*!nBz zB>^Nw>XH@E#w*4V*)8z%EE_l%G+ex^BI3DnKcOj23nBnQsW@V2B+CX>5^B$4FCGmU zqC7~-A4}9Q7dF|oM#p*kV_d8OZ0%kut zW$`}(({yG*HToPMbKmTa0^ON*H&#(Pc|`(2|O^@1W6_Ji1;-}dU4EdH0EvyH%0t(vMp zwxf{|W9zqMC+p@pwTGcBx)$K%zVqrw}LV3MGoB?y)q*9uSz?a+1Va&VD3J9m8 zEVbnF-B$rlk8wdm{QeA#0`jZ%AHvu{w-ZifOL!*!cNrO%D8lS6GFMovJ+{sVC4?_- z3(~+(*Q7xC$O5`Tl?sZQE92Raf%1jz2biaeBHL|GJzKf|fD-TWGp&+fn4ug(Q4I_| zh|EwF(?lU){C8o)1Y=%bI!@C-LKWiy$klF``nqGYCHNnt;`@JHIDgB^sbXN#WP#xj z)gJ}_??Nel40R_=C33}FL*TDS^ov%Tl4Qir`%yVC91^2R7x78O)JzP}Dux8stkw`~ z9%Q8;oju*}Hc~%Utv_vqT&4Nf?lf=5JjCzTy&NJ@tb+?0R?(d}Ql2HB-JU_(O z7-ubWimBd6rJ81U*IhV!j?P5W4=t8Ig-H%30u5w%vvND$``Sk*h<%1i3;cvWc5fB+ zr#@~a?#AX8NCOIgFbBR&Z2t6PrXmyw^4?=6j-OF*{O*UR&)@!*4C0^z*W7tliK~7b} zLp(<>9HmRR$?p?3T=@AUtYDBmjmem=Z83I=X@LC->5O+f*)28Iyua%v^v{LS`nB@7 z$mHPttI0+bbe~30(Br*fA9fy1l}zIQgr|tM=4dyattlHD1oI)CX)(z;Is3n@8R0Dk zy!8^gHn&!2y|c82=4aKN4Gwh^7@U2S?cwLoAzBMOjpz~sf(sn;X>8yC2#)KmhB1(` zlJM=yM{>bmJ=z*-iiccxGP~ms;nD-46E2P(iKisKDP}Ffr`{G!v4=dOZVmc)qxJoo2`)PYuuMig0pCA&cAXZ5gae+^GVP*jfIsWDAACdY z42+Dx20*v>JAVsOLiGl{{9yzC?P>6m=RsP~mnE&CQGI$Jy6+U)*MgQvd3LsG%b?TCdl)6Jzd; zr}3wDuI|ROS%!<|N;+#0Pn!}0c`=aJ@Z&iJ?QsgS~;H)HM#rU>}s zZ>C0C1HV@pJb1h~28pqfS{7PsGJPuIdlCQUx5a|06vLK!Z?(02_ z^lOQ+Ut22VQ|FXBf#7E)!NT1oa_g2L-*2zJM-+kf5jDI126#ptfJhiq4RfH4#PKs_ zJr(GJvqc=ps;+gAg}(ql1R$ZTHuOtCA$&AJakB}H?`!jPfGN}WESd{Rd1)p|o9~DG zqvVhA1(3zX90c0wYcs5u-kK{Pdyi*sn?7G*?(!=L{Othjx0L1Ydb>!!Boru8+_I7H z{BksPUIrWN>U3dvxN|k(m~}fbCjKID+cS_BzcF_`Xo)xXygW4GkW`wB_g=&T_4k*b=KHhpdkl?Wq>*9z6of37Cx_b05*4@T~ zO~$tLz4SdA@wgo{w-UMov_nug>ZJ*>A{g3o9mx*ty**!M32i*nIV~?{C$LF6bmvH* zhUcy41;14bZ~6yrw)Gvc-PO-c5%UK=DySKaSpUemI|A|NyyTIGOPhlwG3T50v`QQ8 zoSfHYz=BJRT@OFeDlG^Sx6fMh5Ksr}S@=eoB$xhWWGu1LJ44xsd0~46y`u(ae}LKC z%N7cyA;VvNx2eh%f31xc)r%wxI=?$PUg1ff;hUcc|BDM?K61H#9x}i2niQ$$SM{C# zXJ1xh?5LoB<#jm-fA%|PgxAVDrnW)Br9f%>$MR(^7G!mwK1zPIc$;B)c(v>ElZHg4 z^kc4iv%TigV15v}W-IKjYYPB6a{_LbzPbWZ4X@vIbXK-1-Ke#?uF>ATYLx&P|N0!| z%jlNMBx@Q6``CYB1vj(n%dRe}i7}0ONH7HI)LNv50-mEjv~LHMoHbvK)L#%$hng_6 z>tW;Y*y}byh)I%$?LrqVh{Bgj1(>uC%pn|nj4e4t0IDuoL8gO}Uv*3T!z-}y201I8 zx*VH{u9`+00v6u|JqO3k+c^=nM>?hu^+Gu>%IOr^IL6v?-X4nbw5uyHkP%U&2Yf=c z)2;gVZqPy}OQC3tfvGbM#EbHNW;-8XE)RiU6VSxyVu{;(ZnU7{s{HMyHOhWuBweg; zLi<8KRg+S-_`d$=T_OH)!**{ky`0NKqtEKwN6H>{6_f=Tgqbc3ghrEav%*(0McMKVfmR9~2} zvM6X06|n7wvX`7I{6vmb^#nVTlYo_GT4UaH?+tXyUEb#w5c920V%^7M#JCDNdoMed z;YxD)&v&Xp8lSa-;;Z-HoyIrX4-|@Fa|&#!JSxJk?5@^d$F__BvkftmuyxffDJY`#7EISkP>P(9ue3~9?%G-_1G@{@S96AzI z!^gIB|0&)op^UB zyH+4}qshr)U#25ho#dDLu3(61F9Kiedaq69A@woevqZ~>A0>wm_^4eweuxG~Pa6FT zPDaK`Zx6kS0xS5XFPwKP*VXX~Ieg{v*{eNtE2+u;=kb_Z{!Je_iZCK!$jL?lM>k3j zF($3f_ItC8-m?{Zd#Z=c=zfmpFGH&?NYyk22mkG2&|u(BD41;o0A#k_Hb(!hs^7z{g9) z(ABP9uTv=3Py!U{usOJ`3FNizd}A#-z8}rfjF)70or&KI>->8aR?H;%?$+W+{P{le zP9c$xS9dlvuvIPhH`NjXebw{LO*!UbgG0%f4Z(Kim0nH`4Sd)$m+tsDJU5LU z_y35zs1VNR-n|-o7aU&xxPiVSx+EG}QA4gWyk8m0W=i2=qO*tHfD zY(o`#bsB+B8SKZ?N#E4xcGfRz)SaD>d(Sv}z$nGoT_zfoUeBhXVy$rY>h zk+kR)lDDHrF;XS>#6^RKpzLS1M($DN8+fa_={$0*s5H$gC|&zu$9A)nih|L_ANUr3 z;??p?^ib(e%YWMCEG3^fuj|mHB74tM52us2Zg=;SoX7LN!->kne$#DS9ke*1_xQN> z8b$Z~y@=-YF#%DTxPcSM=I8I^@KMH&9sLHe5XOyIX4WqFbQyx(Rvf@~87ufBC|7m6 z^M@zw`bDc48vb%v!U_e&)%Iet39E)rAP*&pAYKs_Nmhx3{aH_gaUQd81Sh z5lv!(&7i|9hoJK}6F~QAtLfYlu;!0k#(x~*n&>Qps}rl7R#Q&AS>K!!y$Q>okOjq~ zkcs8#tGn7Fo09*_Pd+)Tpo*c1^#AmlUlW!z#}QPtM1Z~B!VaG8bReP`B5JVB8a(}9 zm;bZZ{D1bR|DS3+e$oqS%av)+@Wh#BMA3tz#(hvy$nHY-T-D^+WL2aU;h0xRDYB;& zlm_vKna+PL+~#Q>q91b|SkTmHtoOq!1RL7vEME&3O6i%Z+UO|C)XILd%Bju=eeGkB zD=yfbr7IUpqT{LFB?G@tQ1`#SDg;?MM6f~rkqn8_Oh*AG5nyQ2{*PAn|7?H%|JOWB ziQwFu3Z;scwuHQ3m#?0agUxcKVr)&Tbkg3zzdZb;<-4}0#t~o=!v-${wOt><@4AYH z;Uv6Mx>>D`0pVW<7E-k4N>(@_xR77tS$PoM(Sqtrs&e$yvb}rydS)XctKiO8kR~Es*S&jxMts~#bP?SPzGeg&$VIVsos_$IJxiPi~MHg z*N_rLLrvm^4E`Ie3#mgPG02cefeKCL9kCVvMx=@*dTpv3cKo6QU6N!8#WsuvN#Vz+ zr@I^R6)k9>II%Db%g0CA6YY3hhB%xuv1PqrDAWUn0OJRx(TFn{3H&#yYg_M<(W9^T zcn_RNV7#NPlc%u=vH2z`e&GdLI-){^-do;WrVLwyZ$$Ms1zK-qCE_9c9yAF~VW|}s z(D1~I_F^E5{t5*EfeMbjOuD5pArrhK0;4U3*5}LyNP?n(m%$K0Lj^zv%YQ-#kFn!X z5<@8+^nEo^K>dP)UbRw%C?z3g%SheQP#FT~BmW8&{bI6`SM&EMeFNnSU;wNVC<~B) zlof-c$X&65gH|WRVuwNv?jP=ux~26e(z=H7-FXQ@jf!$ocUj@ghzW~|rip4}3e}q( zw9FMA?&qMWqmS{T*9{#9C;c!=k?1*dD_=Lk$7^BY=2OaXykr zi_e&T!7|MFNg_c}IV+1R-PfTN%i0^xlK7^B@t1;hQ?pu3?6*oZ-Opj$^;KuPQPRmI zkF)x2QiXXKUArUmLF$^ITq`DGGa3Z5>4|EYEP$Gc(-&`_u zodkHWFzCrHJb!i>uQ0MVR9$8i-S`|?Bw{!i z@Wmt@+9DD{0Y||C6(>!m?z|S=FY&yIC4)5Sm&9i=Aw>kL%6E%c)mdm#b2xeb)wiOo zSzCWZ@G3Qbfo4#1y|1K;mOzPLfsaYMz{B`WU@^*xkBnUHQoB)=4J!GXFJ_yi6(MHT zBv11hA`%Wgb7>eY$#TEZ4S-7EB%ZToL%Aq0sX5F-&@&_ELRB*DjS8bHCRc@lb@bR8 z!4AAzrWd+oCtUg9R2Iod* zMY$P|^A!$VR}3d5N%_Kyp7E$+r}e%5Du!V@}vmLZ(??9y>{frE;_PFW>OgMm0HY+G_-9* zEMGIoYwNo*-158$Ge9KW@;k$@>KcuW!na1_e$3dDyTw5kl)DjpN^XL{eQi0S#$j{W z{-oeHro}5Whz7b&mD#a=8VfRVF~I(;RLmy~c$L#sWPy*GqMf`6mvAXC4v*1=sqa04 z>W+q>IazCEjsJ36@1O6oc@I^5M}ZK9#^F0&E^?hTjl0ulchW zt$2xM5t(ec&9h=yNs1ON63NPgkOGeGkV;jNlFFxwexCC0s&>RNeBaHy8y`Zn?rR8m zj`t;Ax1p7Y=~_FL+g8(skuyj`5si?|W=e|lz$2@}DODAUNEe+3wdiA+#G`{(sB$IS z`Z;EvZ)AVq61)$4aeIzR^Vo$$_0&%GuV2(ua4_;>Tgyl@BT660SfDH@Zgld$)g}!Q z#N#GV_R{#ID|)UJ@lCXZxb1+aS+6~CTRafucDekBS9_FTq8X25pCG>WsEn@q^=O)+ zxHOBbD36hT!e+t>;L{VPF@K3ufd zGr{Qn7msQtb4**=d`v;EPzExFLd)qE^mEe)J?+94k=5A8CXF}&nTq>yczNo^d1+3-gc1Qywf=VO)mPtsqJ zi{tVnuY$+7>7nJ!QWG=&8Ujc3ajyC)m`jG~G$u2?(U`!kk(XSCiiDpbQ5I_NqNHQX zmOV^}7)2whvA17me5ISpc4I#TzbneAHY=5(bBY>8y6D_R)Z=u-+43VUWw5l^~D|AFsh8?s!EY-qkef|j5y+Z+bd{}t!3x4N4qHEY&yDP8$Mht^OOC{O8L*; zity_ns{a1NQ&fFqMb_j+iXJUb*!S27bpV=2T`2{dtA1<68uyhzT5_syqN*QHF7=I* z>+>2oX-Z`p2Hx0n)CAF5uFy)!f40^vrtyhWg0dmXE0C5I*ZtqiddQ?QB;4L_Y|?RG*)pIc@{(*^e~8V zv~kpNNHf4Uuwq_Ii|&VN@KR(a@}N0vH*91eR76H^Vo!`9v{kpd;Z2V%jus;;!%h2g zU9dIJ3aZ1%)IEl^VZBu)794s&1O`DY2cFVB&IXp`a|PUK?;BdYhE+w?@=&=%HzK@I z7^;K?*_cilrB(fABD%)qM>X|-cb#GUAO+4IgWONp1QYsy&quuSo~eF)n!c*$Xg|p) z)qj15vqC@@Hw@+LK62$+u)s?m!Z6m1M;VaFs<9hN|0M#H!(vZxw04 zr`OXa6?|w#okXf}MqkoTNd1h_o95LCGz?PdMQe+0IcGZoPID69)Y8}xx=NK|ivT69 zdwK(CzEG|C0jpAvm}4z03j`uq)-dxJSyMiqX!^WJZSqtjgeZzb6=)~!)+qU*U!mM1 zf}rMo5KE;Rmy}HY3`2AZoJJCbSur+!2M*~>#e-f9LKQy6q`BsukyIJF`Pw1&pHrXo zQ9E_0jG~xL0$rCI&Qc9c{4pujPoo#-c4fLrnG{xX{wS44-9`+N#)ZH2-@9>k8o!TL zr+r?Lz2E{hts@$Y19AhxrZ&N{fdVI>*Q7c-JDKW9fTk|bcmP_TNn;kFjKlZq%s^yNp)KyRGhqg) z=!}^Kp_VgFZYZ93sWE1jm)RI5G*FD(P5~V2*b0~O=1hW!)}2W6uX+{vC8T(u8Y&tZFgP&7A=q;)E< zd@W1VahJGWjby52MpVDkZ(3zwKJ($98C4aq2>dtVcREL+Tei{JJttMaz-|&}ifr{CtBNvVH0V|e31FsTNIBrrdnF~q1S`YY>z(n zG~%8@Gf*CI8^vzELUnRQJjF^oOfjLKFn^}Fbzwn5v1V2zUv&iXg^GQ(!Bh_ zWmAu6EC@p}v5h8F|K-sJZ@26Y`zkrPBn*{b>+~(a^uTOJaaSQ^70q90Y%GZ*{1PKC zQzVL&9Tv3HvX#{QYlwb6AMSIfhOu%qUwwM!GKfH1-Kx?IEw_qmXitq0YmA*~oG?PK zIjn<7s!RH;fsngpH`g9bCyenMc0PGVWVgnq5aJ!(6^!yF0^iBk(TS( zIlc1>fe;~1*H0kD%2gjVJMmM@Kjf5BwpYJinE(f>4B15xRpUi$Y(5z~_sXE`!yr<` zuvN=An-Vlu7m}`_f~UC>u$%EExApsJTjoIhg${T^Lvz|Rogq+r!H_BalfJrTFJ!OE zr3w)aE8=%TKwAb^D;W=_-bmI@W+H9lE;u7j_;~ETf)r@koupt&i0}nB-0@`sN}g!> zBN{6V*9$8IKfM$&@)0yPi5G@}v;u-noP$9L(wom8yD-m$wwn{b7Q9w&WmhWIIg=?& z{75}@e4v{1oFK2>QQlTcvt;mlshy(BTka=&8ElsM`|@h!RtPJQAL06qQYMTQ)JPO^ zLVtLTYWJ5N_&SI@hUv`Cw>gJ%^;04oj~iubqPk&lTv1YgP-cP?Oh{SE!n5}4Y$&A* zrKy%hW-erly&?QuQg>XP3?kQ}l_g`cfz!f|oTGX&SUTUTA;kl^mk?|FoX7C}jeefV zN@-&hNIUbm+QgOXoJus`7nIZd?qU>1%^bQTm;qvIHqRlqlG&>c{vnCbPK$xPuYb!F zTqWa)SzGrjq|jofWFCLKV61fB&%@NHq|aeO{43Sh?+&^>U#&EKe`w0IvBV#1%JgT&PO6?2|1nS=T&J zG|d8>`b+Jh#2ViG7fE!fD)x#4^$|*Psc#0N8Gk=as43XSx-~iU=$oHrGy+!alFuj2_sKI=+>x5Ie;x$$j8MOa)J>l|nqe z#4VBFmJ7}RYXiyi9gi0(!402COl?j0|2zqmcu{A|a-K`p%`%Q__8^`{9mlj2M^HYU8&73A4!lU-R_;7nC z`Ve$-H6L0jw$x958N(r-7pDq7l)D*MTTI_|rxYDlTYgZ;X0Eg{Px{bvGIs99+J=!N zyFC53Pm&e1)-ah;#COUfn5 zr0A()wG`~DXm@=B=%gB>@6I3BZma9fa#E&~oAK~AiTk=Vjn~oX>v1HC=70MUylox) zJ4>bbRQxUCu2wG6M6@`y@mtflx?Ct84(Tt|c82G!UHi~24?mPAhvLQc7ZtPSxm#wt zICz3SmT2Lit0{+eUz9ed>FZjecy0!cqW`pzkziZptB*}pOGa|ZR4SuEwwn>C}tK?R2PL zN$2fFoGM^ClR~P8{yv1p=$i-Jw?@%AY!W-Hp|u4$t+R3V76duOZ)tsc$vOtd4J)^1 zdPjfda8Z9PGFznh>k#U?;%bO0xpfK@Op<4N8RB zvZFm0k&Dd=S<1A)`1HXCQ!=Vm#8fYd;cl`1Ce8GcQa}$1usFgvm?t9yXH^6&xAB zKw;{|e+E3RY7A}{*7h2eJ8wp(FuA+bG4y~;OwtZv^{+gBO!^ml;`EqXo7Qk@n3lW> ziT*Mfo91`Egam-&kbw*-oJhQxl7j^0GB*svdHI4Z)I(2<;|9?VKDMzvNrY6fd^M9| z?hYR;C+)Lde@R-=RTW|7^Izzb=bB~Uv_)__oRhp)4Tt7cBO5K&U7VcjnKiqgkv6$? z@sek~>y7xn5&ZxviTyfsCSXw;LaGW*ImfAOBZHiBX=@qU#;>6q91LhW#z6+v(*0eA z&?!ZCs;*tdiqgZ&JBOrn?SHS&;2HY)*1AvZS=6|837%C(I^w6d536;*T(Q^)dTCn8aPS zWCP6okXV|$NR=D7K`*hM3YfaM`HH)2z38Uy!FREC#fZacCIcSZKy4?3>w($2@UGRE zGW0`c9sgu-3N~=3`J60xtvh;MLbnSj$3EXIB`dHL z8}$?uM!*r#^v7x}f8K5y-uEs!IX#Wvhc8$$cb`tONbv{MNmh{$ah1L0@h9d}&c@Nq zOQ|}Lz{G1M_=f-?f)n)2oFg{#tkg;=4S#V`Z}c6GAf%>h%F3}oK&W2-jQMF^+&f1a z)5Nn^S*ecKsny9zzKmgAi{T5M_^_|icWl?7TQ{U$F|LRlFXVP6}# zBz!&Tf%zSx+6zGeN>YWei;9{y(K0@iag^cg7MwYLAVFuw5~)G+WwP_u7EX9dIqOku z%V^_s`FbyaJbYK4G3;U2uKVsq-fipUuk@$tRQKEA`pQ)1PX&PURfeoNQTA%5UHJZ; zO+dIni`~@6r6E6oVBoA(J?M0%*kX0}p!tL`k()U>Z<`n0*2o1+rqv|KMSW=K7dPey_ufij9d>^J(joYe*>RkZ{%rs)fVOy!JfE<|e&3e==iNR$3bS#YNXY`=--bAh{rbJN?9oW3 z+lb#I;qh{p#|l-e4|KQvsuL#ET-}w;C<%{l(2r zN%WflbJXrpbXQdZ^BLENs)~+%?JCz>TkG2`!s${)c3z&Y+O?K5X!^sisha*7_wHXr zQfQ~2`$i`SOuDeJ^6TufQp8JRsBu?z>fzq{T>l$r7&F~O=r@K{t{B2PtIwvnGBOv5 zbUI|bxg9qxx!l=N>}mIzAFBtXpUx^M$G}_puEpbezlcbhV=q=Ph|~YPLD#6Nf*-&~ z?&z65UkBW>K~F-4r*3v@wJ8u|^mZ7n_rtUXnKX)7Dn`2KZJ!Gz`SloP&;pmG)KF|E ziB*8>1z7&W=9X+qE(gqZ7I1eJ_h^MAM%1N>Vy#DNKbPyi9$Xa5f`%E8>Ky((u$QHJcs0#CCr?KM&neDf?S|P)C!I_ridiYx)bhyki(EpUdrd zYBnT*fX}sKpBO)ALm*(ZKpoHEbAI#p z60c$EXYJ>D+iM|owEV}#qqp40OojB4r-NQhiytb0g<%dXlTf!tt7$B;^zsNm5#+gT z-fCVYR025j8NNOe^QEV#H7(-oAlj+;2P(Ud)F79zv$0j$Ul5wa&|kOsyG(3v!#w1E zw(*Je<4{Fbql&joCD!yx>AR%qlwhXGR2N2I7(vyO*fjbMPt#dw)D)weuNfSQeu&3>osF~xk)u~ZT|3QheTCEtZZRGzl7b*`v zeQ=+AB=$Xic>JZ1g%F`CvLJ>CHnoh+WR6w^sL-Yw{a*n8Kmfn5uk6>`3SnZ3wfc!G zsv*07jq)G4NF5=_S&YN$6!_dyOe>woL(Gwil*7c5#pujpRDFbnP|<}sor@O*XAa>s zLQptzTwlb%8LbJQ_WxuL+3kfl@0zw5ZBMC?o>L9Wty0xs#>NKD+d98U4 zdp-g{3`gww3})q!TE!79JiJvS0bvwASq21%5RiRZXQAdFIUwbUJT6L(uGPS)F?$ma z@osC43mIz;24GZL)T+NP>43s(tA=M-4R`Uc6B`}bq*49UwDh>x=zB*FUABA`0Q~y< z)-OMO_u%2pD1_U%9P;&W3M ze6iH!_B3f!zg~QujlcbQ#b!4lD?7J#?bwP-uc3R_j>k`&F3axY31=e0!(yT%;Tn4i z02t$vA*Bq%$g*4(kr*R}xk0}$W=XBKMQI1Gs6cDQMW0K&T(RCh+F(y)^8&YB!anxE zx{5N$o}h1gOPWXD-X5^(drZnaiHM63^S z+jEVzTX<}Fq9KH_riDoY=9C7klpPM1RZ7}mJ}2F6$xx{EHicH!>Y0K>WX-AYjToGl z#8`8EE&Di6?^JjlEFl1Z5F)zZ;;4AL?LuVvDKl>kW@P|W=_QkI29c00%ODepkQ&+w zVa?$HATO0^(3y7@$~nn_euLouE=iM;Qx6_F@yQ2ogoTFW7Zk2u_ghJmWnxmwymvo& zZT7P9l|C*a!fxzx`2JN6?XDCj~)B&&Vz;x*WK3 z-uU39nbUq>|ARuQIG>XC^|vbkVA$Y(FV38%QLB6R==$Q!X<1o04?HrZY?G^HW#>Ab zu8!?nA3R*zm~b6E@9Of`fx~6LN|JQo;L+Yay8iaZwo3OD0A7CnsnPcj2Y{1@w!Jv# z?XvFp$rB!#JmHbDySf_Y>)WqcTX`420FTXGlm?efN zD^}YCx5gap*tPs0{>Gi(`#<*HD@d~azVG{ollz>`aeDIX%xt*3d-vvhaRCA#00y(l zgd~y>Nr8e*%d}j4aFtD$rIO?-O0Kdjy}10Ovda%H$+F7~qDdMA0|F5)ZoYT(?Bvur zogDtb4?TBwwzp??!tP>0^yg`}`%HJA?(_eiU;6)k@Z)bNqU^gp0U}hGBQi>R?U}|SiSpK;{bs4{LanqJfJL- zmxFi?LKLmOCrvHtosIOtX8{1BM&;c0y|*L)fTXeTijS5Vz{e zse`9_&JhetRzU4maqzhV#L^*GD;P`8Zh?^@pBW-<It>qGPSPZ=d1*6$i5yzf(ASe*Yyzw_JY=jZR--~9IXI-TC%{iR?0`JegxAN|QU2A_WFkN|Ub zf5H6pXW#tqe&@IU`nx~;@BfE?{cyU8bN=-||JH@Y`LBKTS57Ua@uCg2=K4*F1?IbO z`G+zI(D=oux{RYA#Xg?_(i7y|^O6=*83i1h^&Pjd1?FDln>QX%($c#owAXJ^ zBMlJMNjUhivBZ)kf8ym`HEnZFR^Jmn3lB*4GsPK|bmZNScr?ZHX1A*P2PIxu1IDq;9^R4Wv|S`yTB**xeE${`}9nAN=W=LRycDnHPPlg##OUCSnw-aXNij zaHI;stW~O=0`P{Lu|q6J-l>keI3y zf-3j8@8Zb?v3ldgZMhQ@t@Ybpvcxr5?C+G_M^I>PacAQON*7@~D@DAg#K5g@$&Y1X z>l5OP9ZW_x>4--#@zSnuidOZ}uHwU-!ZMY0VvMyqo!-Vr$hQU+L5;ISp4Qh+tm&r* z@`IL?ATcc&T^zcoI8P_epMcpO+}J*(>7iN5!MNM2jjF)3x1oZ|yzNbJ_SJRK-+#J#&iMDLEEJ+;iF} zQ-;3zz}Yc^NPs!^H*R2vqIg;q6oL?Pdhm4Ni>JUDZPJmFjyQ_^g(?YgYx(r!nEGOR z<+%&L@$0{Iw3rGCjTh|*v^H*1t04^a1obpU675z_f6*Te7FjGwjVwuxaY}i1lFeL( zTAV>l^)#Ki#^zoLb45{ral!)CpsGQ~7XkEgb~WW&G8S0je0}o{vs-&|Cde!^CiXUS z55CVJsp-bj58=`N_|eS2OnV!pN4n&UARbCk^zF9bTR2_7NZ?3vA%rXvPn4tzY-Q{m zZSE2^8A28t$lw!SO6EjCbt=oaTW4kyC9}AE9=aCsZ7fKv-wFHKVWgxZo)qb+mZ;LB z6S&8rFQ%6-oj*cMQ{yI5+uJLCV?!942=0@}Q_g_ZJiYBU6iK0}F*>#Yic_Lt=&GDR z%*YfGA}OZk=RARDz?|pKX$#KbIq)O?~Io1lLp=cz;{5jif03(3`)zq}jd?m0?EG0A) zv$N*PyF&S*>vxQSXMIalb)=@vZdLSpxUq?RmoB^l3)4KAgN}LMY=0IQDd~tOf>G=# zX{&a#{75tBI55Tz6H|zIdak~H+pVqQM=q`G1Pxs1K8{T(eI%6?=V@_TR)nv|!iF}L%R(Nh_`(C*IF?737(+sDf0{|i)hn^5R0%x#zrP6J86dfXr>KpXn z7RlTc6JauR4q2rTWarx(w|)P#J(7{Yi?g(J4pC1z^j#hzbVXT(N-~J&S$ie#G~1}>=l4PIEcw{wDaJ+*bNwP$zE=a)5+4Xqn z2t${2VWI1J0SmDlBk>$VVfNwC0G!BLEJj1Ay6N`n7yuw?bo>I#l(_;k?jhAkO43P8 zG&XKh`wR`&IfI267Bq`)XHdnCCa`4@X<^SG0XoagGO)x%K5Fi8&xvx=5hv1sOA)$~ z*EM2sAwNxW(?Cm-?OQ@;7qzP_krYz}Y<0-dvE8S`NJ&RLW+38Y7u)r_+0Z@xwKbFh zG2QCD?~~^02l)8$!R#cp+xQf<>kor4zw}e2eycpZ77_pe0G5~_0>7I`muag>a)o$r zN7s^(Ug!vF7}^SiK+idn?l9~$tA1;1?}L>WxUOb{PSQWbWkw}v9e=)qyo5S=BYun+N-^5sr*8xrP=F*i5glT_BXPi4b1#(GM!i{(I67ywMu zQK}R+w*(R($0DhWmYIy2+m9}~deV%Pbj0I^!(LUV!DEg^_UVi1)hml%{ncMyS>E{O z*Y6Gt*w}*YZJ~efi~`Y;q@*K$oY1pQ2%2jjqCfnjufOp8<$w5}|NRq* zsh(j7@v}5)gNR-EENb2@9Va$NLsYo5O+(CxxF7!Wds=BOY*mSG!xtJ)R_{ar3E^10fH#rUd{c;W%MBXb*Z9C89|AH zV>-Rc8t~0SV>rk8A)W#wB^~i&LoDN%R;Rim000w0R^^;HhaRa$@@_saVdguJQdM^F%2u6p|3)>P8THNYZG2nmL~g6Fo@0 z2%{uK&1Bxb>`pLJ%&6G9MK_QF;?AB5aoeOLB+hsx+P10N~rh#wEc znD3ExZSB5e-WStXUw+}Ye)Frx6jLm-WP!D}Pp_l^z<3Vu&^W9Y+(G0Rv21Jg0~8Tj zngxL+F$&|wUSroa8~0D7Fa>y!6jN;y^2v)Jnbvw6IrgA-XlXA#(Wq?N-Ilkr1by=~ z0g70X0>F_>5_+~*Ia#v)q#%Kd3N?zBr~n86WAOMfpIF}AUGW>+thOpX^BM}`8Cp6Y zI<4U)7RO64=tKE73!|MYF48R#IUx=#9 zr#Bw}gI7SNLP!e@foiU-4-@>7bPA4v+N-w-gkia|>DXJV;PjEd-8codXc!5=2 z3n{cylNN|HjQL@Pe7xkVDOX9@5Q-$gTE4k`2L{eFZHhw3Gvj38wGd0BwI#CXsO`K* z6CIXY95LcCq8L%Y+B>&~8tC`2mjaq@o)a+zxXErfdBP>|F?rj93b)$36LNW z5}xwXO%_OK9omzrj~b6e!(6}X9h^&nF%C@`03bk75NUo204f3i=3XRzqr?g9?F?@6 z=_AElH*9U*IIHl@z7*0>n|dxVt8#1Q3HtTPvM1`jrFWrk3B_~K_;Y@3S)RDGwR=}i zmjIv&K$KI+iAp>vaD>RmBt)t4&fOn?>B}}krEVSY$21@5$-y}cJcuw`dp`yMP)~1? z0sz3sCLQr)!4i|xwY86qa%L%|earMWzxHd7v`mozj9hjQ-ag%@y^o^P$Ol@S z^GI#n%OA0!_Dn#YUZ`xXIE@YN+gMcD#m~5J|9jN~LV=&JU1T#{(tnjKJ)q?{|^_fWVfDi=MfY3hlVl zNN{?TO3J$5?YhnhcQGXjQDGLuk|3Gq@hlr#0I8g!3K^@Kw5s}(bD7gKt<@XB+)Mua z8!ic8ekP&>)Yl|2Mpy*wmcTir1ThLZg`ta_4(e1;yUH>%JxFy(V%e!+?WVu81dbDi zeira;5sES^jxUF(o0&j1#*J9_}vuNEDsKQ*vMp z??kERtexd>V75x1iAxNH+0fmSZ?|c%NT4A)dd!ie6D~J)?i?kx14tU3zRHbQir6Vx zQW4h?)4f*0>%>BLub}-2q30aOZ_Zo`kN}px7n{E3dmXg&w#F&!Y)gqeoqsiKYzX}^ zc@S|dZ~#ERL{wCwbP-dbX?2+0215&JpIJf|Rqjaw9@(TLo=M_k-Q7+1L?x5Q6w|h{de?vPJA_W}oQ!Rwv)`cFA0U=lu!yp60AuGYrR2dnRCn;$B6TiCg!#0yl>nB5Wp z0A^iC6e7<;fr9}6i*JMz=RvxN^3xzyWU8WJ32xqr8tdZ2eF>g@ID;eae#Engk#pOv zUblMUMRgo84PBIQv(7Sm;{`|X6=jxjpyPoA)r#>X3GFK|0T<*u?H zim_XG?xnDLZ%<;H8^VRp1XdGAJ~A7SF)qt;cfCj)ol}|mFqZQ>m0=(LSp{Jp%aDto z^%8m7J5?|9J|iU^@kCGz-)GI*>Ja4Fn3#GdTztbDzZh1QPHf$GEV9H@%_x{bFNP(i7=(lvq zR;NZbNI*?E6u+%mo=~r7eJ| z8mH}Nrc2&&n7k5>o%gT*Sx4-hA{@%a;--gzi ziV8EbWci23&9@e2DT?x;i;=*A+`0bE{*{jbI7${th;DwXFAV}jAUA>9pSZe5Bgiyj zmiu6T07+$+J`KE9+NoX1EbDC+Ll2Y4ptRF}aQ%bWg`cvCFLWvx0MOXPRwoc;MnlBUY#l#kydKEUob?Or zbAq39#E3_t=bh@7_gMOef=|Tst+(I%m;d6Q{N~qw?ch_9kDRWcCBlOb9!9zx#p4OP zB>@1^bJdl1k5bRWNEV{dOb$MJ2%^lOKu|xs{R#6gv-<6^-mZSquAtrRbm;TQNBcYd zIfF>xf&e0V))1;uaH^|p?2=zu8nmlgThPcmS~3bz`(T%V+uzpD|CAj|k^X;u3tLU` zEbRdw7ZaDg%U`mL9Kj+Rd~O(?g|)=lzP?WwdG{k88-hZi+Sq+)L7oLd$YE}N@m$zz z;79t}l19g7WxJ9F0Hn{=ZvTLtE)_oY9B^un7$Uz939ujt zZ-;sWk{XH{K@tUkVSy)$v^WO}GZ+OauRXk?>zIfdC8*h07m}qgUFMAq;b7Et_A0lk z8Ld!XeIE@7c5_{rc`?w_y!+r7?WYIi@f=MQqkdyBh&Tiwp63WrBLl`3BZPr(4+d=& zoq~S+7XU1B5}@2PX;&a4XZ7w!N;={(0eNDwvh?<8l;UU(6I0hh^DhO}l}9XqWRb>{ zG!}Vsx_;}stX~d!QgYLwBBYNW*#rPYo`krpB)fJ8ExyXac8Q*Lhim9cPCc&3TB;x< zvQQP$p_y>&@yI_@gj7vLLbA5@0gmTLc8cEpu6l6m)Yy3fyqu))ZpU)EgFhn0FWFDh%a=j_k}()85(ld@2PT}c#i9uL*6bw=Q|y- zUv2vIDJ{~?>q2KoHXCsAIsg4XHab<5n~rvF?xo=Erck{n>FH?pS{N@x=ihV_MRxtK z)a{#!tVg26%%-q$U75HLrN*gdaJzZ>-dZCi9r4&uvYp!62^z1RlzlP%>aYINzL++* zaDI*i4(OMQ55;byUW0UYg;SeOsWQbR^~f;75I6`d#cgX(?rS*(5Q5aX>eiCm{A8MR z-uiX!m2m5Zv>&>CnoL~wdUe#RNB{s5qWYQ) z0N@O^wg!!KyDd~#Btc>fpzD98MLq@qxE;Z4h+Ypf0>c23fOTsk@y}ERHRM(^V#G;N zjL7bsGX8jc`U$9a-~Z@$|LK4GU;ftD004}j$cIPIc8+{>#$-t7a&){5#*YQ*nfBec zsdd1X3|%4gp{U$HN6rBMBwI#2E%l(erDw>@HJ1}e!zcTT4<(i+nKEl{oxmBdtthv@ z8DqoRQ@LFMKsV{mh%M{rXq_cHc5BUx*s3_^`g2 zj|CFJ{3LvMnEQ_@k{&qbV4-WLim!apt1j)yliS1DSx10sf5&P(7ip=;Y`}PqOkRSC zL>xwGNMp&e)!KRDKl(xPvr&05y#5zw%Cj9La1j!i76*}cdVL#t_ahzyfcR%7WAZbCbxmQ~FbZ}hv%fI}!zMKD*pZ`t9p18mXBJ3A4 z{S6@Uv1$ySOQJ~HyMvnObhsezNkr)4-d0YGIcvAB;ghB>rXO7Y@V9>XpY~&>PYx{dSW5J}CkV_v z%lHnCCGIbLEb_~rqq8pum8A#NM2_*&jNr8IpEV7USv5-Y%*cjXimtyePhNgJ8-$LD z+Y@emM_GK+9em;pI9(hCXyxtGw=d~4^6p2R2_xrJw%q|&@#zpn(YN3Kz1Lp&)UW>1 z-`UURKM6R4u>@BXxu5xc)`1{B)e*H&)JXJD^FROqXHZQ<0DEo^Ye};3qS#s*lT_BO zu!D*C@r#Vv`Ota5-q+Ji1X_NvE6Ol8K?-x;&Yk=7tDgcSKoggPom;2Rvp)pvR?*@c zL1+8)VmgYGjyMx~Ht<=ie%hW-XJ_F}>wo#5{_NAQzpKv5wv zRX-RS&Mwq;*KIA10*@@eEt?Irbz8dp(?R8vJk?VG3m~55<%^*jr`^g~UGhF8KoG;g zI=woNlyt5$z7R@9prSy zfo%R^VyY$R^z&q5K~^M5i9s4*;;I-!G0~AgGCdh`7y-c3V{GOsOlFkvMP8Z@QYE;nb@09xpB+)A2ix=+DLVgJ zFt!+toex6~ti7#0uI^K*5T2-P?Ot ze_u?0`g3po-CzFl!(ytZ$@JA|=6UKnXlIEucW7-5bQ`pMrRTNcgoUCW*_*{=R!tVL zgp$4Ol$!9GHJ?+tx0xkp+ur^(p^>1ZO{;+c;MabJw3hQn|1?@MYSnzFEtD<z< z7mGY__`=H=gbAk=0|&ZUDJrMjX>Q=kT`h2g&bH`u0Ysp^BL$Ao-IcmkJo{qU+9;mcAH5kV>4;Mj zFSj@EFj1koNxFOY^ls7Vh^5H%^Woj^K9C}aqUiVk!=HZsv!5Ce(~0N8%byLi(_ToT zkH4I}TvB*&p1d52y;`sy;|}*D&PQ%OwR?3KqN*= zw%e}Y%v6+~2wR&H0N~{>TX(+`+piBJ0WzEL%1^rh^0Vy6R}8xNhWGv->$MfJvMl&E z1c=Hyz5Q*2MvzhX*!O_6HZex0*SC?9jyMgmblB;1)8oX*`k^PDeW%@tNaUm07o(5= zd`PBMN!Z_d=Z{{z^qF7%mB01-|KU&D?G6ASSqyp&;l^LYI7Nv<*sDnZfb*|YZWrx_ z4mboH_y2(eW)v*~Tld~Zu@n_BrcsPO;lSTxK{2B7mp2JF5kh`X3yB-p*zE|Elk6Ds z%|lmi=nAC^PAu;wazhQ=aOG zpJbFwvtzMr!RU6Q=EZE0}k0o-_QU62(gPl?YM2c`kq!g@8zes(?PcB{vt)iQ1Z*K{SY&VvJPGfl92>{@=^=`+v zJ7DJWZWKw4N+&(u2|EcnW$ms+W?ck8>Qp%3DgX>12ABYVHv6*2Kv)^JFG$ituOro# zh2p$tWZ1p8PUJQ7+*FtuCoAtBs{YR=Bb#)@$uNp`vu5W@vB;Gfw4DxiI*-}aI*f~- zvwV*N4g`rMi)8YeTf3(?CO-FaV6}vuTT)|Pw3>Kll`L()J9#OT6i{0g``cHp{*3qG z*Y}q6rO!mMOxW8_^#2PXKmyBM+PU)sc(60P-3EFt3Ofd8Pw50tfnr2lu5Vlyoi3sw z&Xpu{Hz8_N#3IF(+ZDQ1l$-G)+Zc!{YN;?$^0l!l7Rb&$>|3}~h3yKnTDY|hr(bHU ze=Jzd{aZ-?Zz1?(S8lf|EW8@+E=y1+aeG?~T?_z76hl!Ztt}Yh4N2FT44fC{c`* z7)y>tu@ssAl<9TE8-Hn7bs=<6EXAfSN4*y4mjNKej?NUtvt;E1sj)6StkF-7b8q<8 zXiD>lr$)SJIi4xfoRYTJu1DF)uv-xx?p*nVaC^wC3xSQz2DV#xznjs}OmTn01QNIs zW7$cTDM?y_tMRb8DJeQH&QXq-qaj@l4Hzn4v8*0U9|9;U%Pkunxx}1_p-O}Mv$G1s!M0>PdemGMvOQN zA?6s09CpM`qa8XzZCTFGaJw~l*pHmdc$6MP7-56~Cu(RLcHL284iXRmVC@6k-l0k| zh}>{Ok@g#L0suHcvJvLT;?25~EC6#WegC;<4?$#F){1kOD>Doky0V zpa}XlBA!S?3;4Nn^Nd6RPneH-UzgY-lcOK`J(=#qQNOkJUdmiC%yziW8yxZl(C zLT7u`>DB;eFh9jhb1;#^iY#kVvbU9D2TWQTB6Bwp*htU$0!{noGu@MvG3d5*%(bu= z_c|J9efJzsUNu7>I_kMF4{12bwbD!NTi-(-u4v^@BO1IO&L|L@eiU!NJUE zH*KrAcgb39D9KDqu)qaR&CNf8^2JD`1*fHQwl@kzQYlo;R365(1ZIiIOn4o`ZN~ks z9@x@B8Qq6bfx5B4KK;^qdT>Ca`+WoC7?IPB<#(|pBR$1(le}~e=BGifBtZyjyJmjQ zTlqj-eMh4aA3GmzT_3bbA>zgPaC{+L{-L^aON|$UOP}*f^O2+i8iB|M{h)!Qk;%(` zb5lO1P5Ll_i%N?GBI@?5oesbm>{W%%uHf|G)h~I04f18(+9@zkC!UcSH+%K_VtV1z zZf!;KOq43|ndgJlctirwpOT;@!?{<2L_Q2XG|<_4>_X^UeEEm5{nFGkD(T=kj2Lkk zqG6IirqFHg-dCT{7Itn4&wbu~(i^T1LypmOIdXa^@(`t9;sWTdGVj0vp@(5B@A$%r znrWVNB>gi&YPRN?^29kIG!=*h9)a$vBq%hNbpp?-vR(+odouyRRuym z`=SphYpf18iu>42arteq_$t_VD-8f(07@#&mBre6)HgpDKkaVamiqD5UKIc+YH?mX zM+)cMD1f2_w{A$H#OGe|w{D1?o%^<+k)c|gt-cE~Q(>B$dAY=11S&9%8YWHFQQsUBHb{O-c7re&0 zh%qZ&a+bbtRPQQ@Vq`WLCCDh^$b}Gc008GujM0VHUBFP})AlyrAGbFYB!G08Glm6; z9evY+5VqI%^jg%Yl&x;uiNa4do_Sqhq?z6P^s(9hk9wU4E zG6aP&iaNXapZl!Ljom7U5wVMyIZZ`Efax5N>@J9zCp3 z*4VjgQhRML?pyj}UjesC>~SzOZ>+ zisz%d-_Zq$Qwk&Z^fB>KoOHya(euIXy2}|%rt~268=Hd`L~bUqJA&6cYDqjsE`PyJ z6v)^G-!KxL)jTCA@&^~vPcr$1*4905`!=$BQF9x5z2R~O0N@n)HqK7a?b{;4kP*fQO)%eu%Wui`RZ)=1$~!UN z5^F2c+zY{-zgF`zp=|KTgEP-Zfe#P_i~vF6^Dkj;=bc78uoNw4cPmHza7v6OvXa-{ zivYyS9WU?)CWSaXG;wLKwIdez)Kwn<5O`>y9F;RzTanZ_zw~*RxKeT~%uJBlsycqj zPnYT1dy0ThuWzF`>4-;zCC6@{$;*%vx!bTFo>-F|=QqFkG-OoIkm;*Ir;1Z~k@j-t zR($Y?5dbvqrAkxXWIkB`=+QlyG818{6lNwM@gs(!peyM)$|;Wm%o*qx>JuNSD*E{U zQwamayYB)gi|p37)c)w>=Ei-4Zs`Z=3qNmj#IoZgTQKaM@u~A&2q6%io8J;C3$ely zaZAz3%Juy}8jjNyy3NoiI94qN0O+h`)RZy*a%1hI`+;n`DS-JXSs>k-ke!UQ6cH6V zcAnh&mI?p>kRO!P#=6j0j{^X-Brcy1$1k|?VzBmJEH@jP+xthIhLKG=;t{AB%kGg> zT4NEidhS3xG&AXQBD8m&#w}S=>HN!_65d%WdF?Yrwf+Xfh~Rg19vV|u+{V@eIx+wj z`TT3%y?5lbca_SDSiaEB%|wBXT~ojUkYhkiMp}|Cyl%@n;{>)p$=H-Hcyq5gwPkf^ zj}k^?KR9NEU?Rkw7GwkuFl=;Re|cS%}!BdD(lGcWo#{=#T)OMwSwUi9-bq&Oee*TheD zyMq0HL_W&RM81u@uH4=h0RW*h^6p1GF(BrN$xh$`Of#Zx*Ea_1qUT@n*FKbvPBnS#3YUYP`gpJBvM7=suK zNHq@&mHHNr0)FXpu9^hCCEWRIt+geR5CZ@Z=H+=YQx1^;bJPCa@2XBmiaeskX>$i* z0WEz`oqj%yr6bS84;SqN4!dxu~`(0RW!+oY&esy_Yjm(h-k9iANM# zvY;Uhnic=yDI?_z!PxmI@Msj^@JV*qi)Wa?v&X4b9I=m{CcTb#Sb-YnF!B+W`SK6? zemdNDekZRG+AAO-5*6f|pm;8f=LrB%R6uq-OcvPgZKbs-#?x%}70McBwu#1-EQ)<00~_K+6`095ZuvPQ?wQzOk7<537XMP^;-*6@W-d-XL* ziBqR_RAuYYj51Cm9)X|)Sfze5uB6+ZIYcPeK9t%!;@pcK#0R#oKW?zd^OH(vWppn; z84LtN48{Y+YxksO7oN*0LFS{Ps6>006># z>Z*0|vtD7wkTiDVn`q{_T5mJgZ_s5oVp3{z^ENW;k9e=fy4+X?iBg!Kjb;)d7WwXy zSY48_2=z=@S_tZQ2mjM~{o&s=i?7kE8EP^jIMumGy7*lwd93$6GqXlZBTYdvtBJhJZo@Y^J5{NkF+?{lLF}#e{%LI9Us~7^-_EL9*w7< z5aWV~BpJ|9MwnrYjhwgoF?SydlEzZR$N))&fy)Dz10s0Uf>|*D0KTP8U){a)Jwyp! zehX)(+xbb}*-Ugda=D^m*LpAiVpom_%WoO+EV=T9R&7;mZi!lwZr_o@1A!NWSZ>zG zq3g6BFcq;Bq-WZlI<-tjLXaE7qAW5`C8110s3tr~3o0Ao4}Z@90Eh~^^m*sTU#gQ= zT^fmjjrX*Yb4Gw&-wSJ+m4w02#HH5O4XNKs@i=G+P+!B1RRKa21<36Rqh3%Wo(PH& z`B7Jm2|?F@YO8W@xQqe-$`}1^MfA)E4(MA+2Ol{;5c1MIO^<ck12jc~D?s=WNY39c@ zMT;j?ubuX~3VA~$AqI{hNDNC{jeAV1FTaa=b>w!jZ{hYX>^7($ zx(qr%v}>C|V~6f%H5q|sQ@HXa*SAr2D&Q139h{j6rmuz7Wt2$A0&DN82pu`5E2&Ah zU#K8RtS}d*#t7hmGLGlI zA2`8o!bo{tohjAL>xU}ol`lGXzNZ}AjGr2d@>2prbm{G3iQOa7)1-6`P_xJw46H$W zYQ#bE=WBYQedh;?tg_uZ!)+=xPBIfw;DPbW4g?q@!Cad(YlE!`;zhsNs^%w@?rKrb zIRWo%-Q4q+6GfVzfU*WVtEGMbN037A2naBML8|P3 z|Nl%O%;sK>Vlk<)12_l03T*8hdKDdpsIaSFa^l5+5$<+mt0{577$>wf;dUQ5<NxH~&I~2xg~ZZzhrmui>I$`Z(BOf1ef=4KkW29FV%_a*Ynwt)=076e>1R>1oYcM}cLl@1x z>W4nuy`@l!6h#z7U^gYZ0~cSCd8m3`wDf(kvx_`y@J){cBQP^bZ+}~pRV+yC`d?_R zEphTPRdirK7}?}R)UsB7CR~0;=~X4q!mTZ_x-8dL#mrPVb1lft(B`_pIg~XzelZ&8 z&3Z*XvwJEb`I;In=FL@q0X*=1a|2&P~`d0jQc$WaKIwOsg|DT zwYKs2d6G!x;~548Kl0(j-d1j!7RGhElJmOq5j$Q+9E36Ixk2TQtQgE{V7Ggy39smE z<^__Ul%h_dUn)OBja+**&xt&7fmFA=$||ca4_3vWlwKXpUh}X2m9}$R;T&=f zD@&4Nld*F|R6ykKy*{I`FmE?^X=`Ipsmz+#SVts;<;Bpq(B$)eeO(;r6mdo+9rB%y z7y$qfWP&6_A_OJZ=^ScJ6wi^Z8C0 zo@b)gu<2E2VWgxZh5!-AY7lgF000#HBRWXNlHBPCGtU#Jnj3r$08U|Nt!U(J`;&RU zc0-nQC7yQzXRp6qT0%#3L>GzEW0Aweli=T6^e94`7&fB>w z)>nnw-&U^uM+b)?+$V7G!@KW>Vl|61Aju=8LYjY}?yKyWthOBON_+=XT zsC>cK4D8gh{Grh2VT6wCbz(}|ZfrtHWtpNnYV34UAm&=iY;Hl$p(t@Auzjn402-mp z1Z6?&;VjcZXoMtDbZWW4zW+K9b1ZNGfvnMZE`VxJ)AY{zfw9#bGEdLWnVkw^1TYZf z&-eUxf-@M{LT)PRH3$2G4}b)Y1r8A~(nK}b{A)oxN5?OPjPR}NqA0AAR&^ zv4z)t&f)1M@kKsbeoLNz&Aa>E$9&a|lyt-p_U#u*qs{hFN}4T;Tkj1fnjVR$Qs1Qj zU?T;+?rE0923P|9E+34fH92CJmi9DOQ06MEj?Sm9#3NeUW3;@tlp%@FSY78Mj zLgaTf4BM(cUNz_5JNya^{M&euD}~t}H(=Bd@iRJ$JRv00V$lR%m9DXkyOm z!TeM&3RpY?+AH}^UG8o~xyzgH{6QK3U^nl-#qM1pI~^RHVnRaX_7FNllLyDd8NL^S zc#Mpcbi|P$cVGn2K?-vu>SoCy5z-^jGS>DA2LQwpsMkI8^+z0mAhURyOax_B>e#^u61Bh&9Y#Siqv-{E`won1 zZ1TBIbJ*5jaEMv;$vRA zT<`1(mp;P-Q|BCrB6quLcWdw0NsgO9Hr*buTpoIiQAi0CB1t z>OBzv=$W{@K)h}Yd}4zlF~Ardrx%wTqp9hJmNN0P8}Xr?xhX*aqId@M){Fg1 zNY7gFlIPoKKbus(7)T1+xjk616gWsRU}nOnAv$Kt{$ZM1f~>NMOHp%UFSsQUJjH9yHOhXB>GwapSFNEHO!?t7|Aa{0gzFal5+L z$^%ObN|DnM_wz^#Z@Aq$-nljWeXC1ivIHic3!{K6|8P)hj{_sHvZQ3E+=s&vr{gia z#E8GKNa0~^@blBaYoD^C4Hih`Lx{K%6S_47AlSEkMw|{c+g$m!2mn}mtN#E}41eYY z-#10yI+m#=$i%mC-+z}>ZdH;G*9jdT8X|94Zt5@~;^}e6clQ7SLH)jDbn%VA?jk+K z>JJ`vkZwinR>W9}T>89y^RJFdsU3!-F;Ss?8AWI?8hcVk-u;N-V39$k)7ThdQ)nrY zP8(k5lmUAs)2(m7WRYl6GBevw&ozt;HUEG1-upR@B+K)B?%^R*3jhgC03--%QCf6$ zb$7L#nVsF)wY@XD|LlG|vokxhow1!+o8Fo3X;CdoD{2K0TBTN@!^QoOAVeY)NC0FN zi;T}NRg8=bL}q$?{rU4JHjjC=mmJw(naT2_FIZdHCiO9Zh@?fcQ~S^TT>F)M`#+49 z5qj!6)#Yd_{QlcPi!voujrRGPj?+Ul|Cp4Pl!aWa|d)mU+hFh0UzZP8liJcks+TR8M z0Qtw#vUsH>}zx z$V!S2H$Y;9rhQBCOf8o6eHS;@k1x$HCw(*Pk8kO^;yxT&WcH6lRZjWP1x+>Vas&Vn2D7MH<>UCdUS?8bmAM;!w^D}y5Y12{!L=B-YCScE;S7~ljMSLwv<#oJ?v`t$-4^wYA(KuICb@S%9@FS@~;rm`U|9(d{=akg2-+a=}^}TNP#>!XS0iRTixXK~EAq`xBme|RRt*m!B*|j_4!Qh6AP}??UmGPf z`MSG*Q{JkPTfZflvEbUTtog5Hgh1BB=mqcohk7h60~Wqbd^=vey{)NHcJ?j*)^Ck&;j2zvDlL)z z2^L8rBE!Z*C6eZ;oRi1}TYdd%k?|{bd7U3A{2+`c4SCuKz!(#y!|GnvxCHY4;|HV0 z0!)M?3A3~_83(SE&hX|+hsQPKU<5-QJINE3&%EO@CT2f6{zBEPqga*|7dkIH1V`l+ zr3|owgdQ`~BhC1@G1bfSptu+lC531N^(yCIMoFFHX*PuJ@eH#=?xj>0Jc07(*&v|m|D zhD-aSLR9Y4#&-K5Lk8n^k}RPK6}%RG;kD z+m#ey$eb>y$vQDCB@%F|aEbwo+{N{3*-d0*6vQ3JUAm2vqb9)-=3~xKGan6Q^r#S> zDT(~bJsAM>1RK2&3}2+_p+Io)@Dr_<>Ujs_G|1p-T3RDL)mHhyZ~A5CTBr`1%&E?n63*k<_u_k7@|PIy@N3Q~5_<`MyN}AT`t+n&6fB zED}giS#mR#Sxrkg@l2z%gbEAj+-ud^TGFW>|ABcqQDan%H$2aN^tl88qnF%xA76h+ z7QQ~zemokUjWvT?`&J}J#dna@gRpNtmW?F3{1a+!W>QHcP1n~S_3*YXST*Uvm%-WB z7Aud(6oWZ6#j}WK#QPUn(X-EeGN6wrw z%WLh=QZz+1HPM!*Y$W|gvr*sNI+z>)9Hd(b*H$UQ0s;WklTi>Iz0z2FAk`~0Hr&K4 z(rrs2qzxkT#8}y9wT%V8xJ&>*B4X+_@8)kJ2LwVLo8b#y{;_g^vDqsEWrk^^)HOqC zn??zx`jz@}#%rpPxI_%wIzg>P=1YS!Zg#Tf1eWl&YL>Uq`%BCBP-X}!3u&)mxHZG8 zMV(5_DaTx|bL4+7ggH(jonZkcA|1`N=N(}g_AmOBc(b~`buc?lBU;L?cCcGLo0J}o zoW2f7g5m;F6P_D@EB8i>~ z)YsNY05zg90IUhyQ!hgMs_XkcWUjXYVO)i!1kL^k7t&G>-Z zYRhyztO&V6|xOcd2%BE=yMUcnEIG{IB;>`wu*8h)j*ypjhy$kD{MY3;#uyP$nO%b zdL)P{QaM^)?XX7KPi+$qU$ES23;?{kF?z|VZ17`8E;ApMS4ncj={wc19h)I@bq;(R zPrT-AK2}RhQotDIT2Y-XoksXYFQ=t(o0jkbjxhO{6WGX_`h{Z(#BNqR6yjxgpU!NGTs zVo*-S+5@Ftz}NrQn)^a&929JH1QIz90CnqBdQ^NH5$y<4xNwV}nyJ)R(*R%>)5)QH z=@`uxpWrsh%59i<#b3O&BjtgOS`j0yTBx-R7`sr8B~rEe_9@39v`Is{LL?b$R-5l% zaO7DM^)U6YL`3U3Hxl&X2bNdt_n(xQJb=WIShDK3J4A%*Y94WEyB_WnGS7*I# z!*J?NuU-Pr#GHv%Ke**v8fVCNaQ?A8JVTTHL2dK!FaJLt{4CY01%CN0;$nJ&TU9oWfc1j-K{_6=*aIQsmaX;UoyVSb0U#e@#YTbNp3gA z{0#$3V&)yUyo&etJ~|TAA*=V<)t_5VL%R1T{n!%LqFKUvl3SI|H{Tf~WNmAo%4-rq z`^PVDEPQiZ8(AQ`zURF{h@o@d>fN1@7LAkQt`m;IQ9fSC%ZJ;LH8qy#r$pt0XI1mqWJI& z=Itu=BJu3OB$gE+%(gVJ#F7_Q(c#9wOTB<72V-G65+|@;8Thx*hgX@VAe_NI);AIkV6P8ZD__# z4oJxBA3SRpmjM7_A`nm`#k2^Ph!9TNw-4E$m1Lfn$k)n^SReIG0|1nWn;5Z}FDp@# z3uacN(xPIdz0@GJD?K?1UOZxbUNPU;?W4?{_RjslF0aegwa(r~Ey5#7T3z4z{>_SH z)$rvHTpEb&vUta1@QkO&gb;Y@RWCE<73NhfPS5|qH7n%oJFbxktQzT7XL=i=ay`Mf zTitbn6HO=v)1owzX0a?ySVz`zbcIz8)03Zr5I8nI%Zj1zzRnaKQ03gX?`VD3k z(^lj75v-w~G^8hrv;8fXKT#6N!LrjJmw#pl9<1G!M=nseq0~x;Pw6bcc0LZMBF7q0 zKW3Jd*nnv{_1IV~@OUgkXFoMC5zDuwiEE~!Cl9U$^rC_lm-;*XTos*V$LVMPl-PUL z9vDSruT0rB>8pQ@j9&Dn-?koo+%>%S0HPT>^_sUiCx89xC;%*c1!{y{{<)p#^JhQP zH)oa2StXeZrr&gF0IT;Dvy&&iMc|_0w;V<1SO$y{Mo1z8u#i>3nS?RN7#IcWW2cD( zLzF_`Vygzt5{aaOXx27MhSQK!V^U$E{o==CcMNGHLxWns*X(-#J#y0bhrAR#**Ogy zHJ+BnE_vVlo1ti&Qxu7N_U14qocECW>DD930m0e3oQ<&GN7NZ0?yTDl{b zmkwDm>}Kk9hsfx`Uv$sfxvXbNcmJTpvLrpUmHt%Qlxv%EEJH`mF-h^)9+27-yLdN5 z6=qp2uPB^>;D|He47L8BQQ!<6P`RqMNzT5}L={~y#GA?NSf#Xl()qP-JjhM5o4?y~ zk_Il~$OAa3cRp0okRuSdQvYe%ta0k%RxP#CnqZ_58N!(BKmzXQ&CP=hs78L*W{7}h zF#-U-sVB$j#;svMAUFU(vjMqFD}@z5*4JeI*h{jrpPDG6B8{X7a1a793V|o|!%}@X zMMUnL+-a7{H~(82yW(fY>_>k&++h+Q2qvxtOE;C;Mh9hJ0j_N*({DBBzuIy1HOu6| zUx}Vz{o{1}l9ivAHfQ(jcey4GT&cEkoavCL906%btywZ+Nfx7YT|3!$Gh>B>nq>KwQeH!5(=V+E+jTOd z%x@n4(C&u$*eb*UV0V!{-;5YWRJgj^d?^N=tg-ljwe}DN9-;woCIEy)VC{k0v32M+ zSb~8me{-&bJqQ2*sJ=;j7hU?1V>e*;Mphf+mz_kvxc_JM;HoHAO^jdm$}4;R9QANL zPpTWlNQ&vVTv=n=mNla=cHZBZ?RI+y!6{A-QsG8h@dMOVWhv5sy1Bo$PB$>-nXzDa z#+`b@iDvk{5B1u{&YeUvbnHx|zMAC}pD@QMRML>6;oG>hP6HP!nm=+ec>G06G!gYM zXE?B>^svL-_yJ3{9$^9YEV8qag#b&O=u9K(_xdCuV!o5fgi)Lywm>>9Bu#4M9$ zi5x7W002nzjq&{aLEnjQ;mtXD{IV~E*d3<2&BYJw%9^}-S3NWa-Ze=g$9xCvFJH?7 zWR|7Ef=pC6_XF2R(8Pd0emM{b3iEQSN7GRem?tu_Z*2_&>Pd*{@!{tFJm&pe_;GXO zJo8;#StA<{mHsid{%DtoA(0rM(P*MoaOZ?d+QEho2{{0#79E&uEPNwg{rhHRW6$I| z^Mi(vXe=QGx?Pw%d=KiV^qsam3+&oSU0TmAj3RvWz(gJ(q8=XeBshBXu|EB-o1L)c zKGC^}lndj}Yo$WF1W4U|APVqy2bCI72IUwZQ;nMLLFzDhBuLUf)H1q(n~oYo&(h z^jpr2-{>Q!s!4uBTpb*{w5({ba8vdyLOrBL7$%_V;^uEVTj;3))Lb3%Dp9+) znV@%`^5sHa9(bU5rJ+bNxcdivd-EaDhg+Q;pAnhyf}ZH^qI>>OVvb_;T8~+hxj@i+ zv5#%24~o_~5ULxT19Xs@!y$zGPOtA|K9ZGQPwq%GLkCW~pZ!z3S&*9zN00CP`kqM) zC5;tsRb}7CoFS({tO}{D$xfq#ji?$dk&(^K_@UiUj=|HvV#v#bRZ^=f3HM36U;xnc zXIs^2&GqS>sln(#`Q*_`gqb2K^K|3=}5Fnzs>yPB( zLQmf(^&t{HnqWneqO#t>lXxiolYahDuag<|k#sVRku|~ntpX@^U0Rv-GySGn*oq7h z805o@afC&7H0T>8Ub)XIhe{gqT*3ocHMZ0(GbWs3a_{R;6NF&sYN4`_a%#Ok$DOKLh=riqkX7N@7yuFjem$?)CgY+qJn1&pQ`D6LN7AwfPOeCt zdm9Cf+@akZPDrSvAt%DDs_8MQxCnrRZs6dE)q1p8;P#wWPgG`=G^Zv@8e`v|SSZtyj`)j+1516ZS0rlk8!kz`v+-JtndB1PsND zQo;m)YVZdibyf-`!u%&Om1o~I5tc9#@jia%!z0%)?VI!@!h1B60pRT0ZebZO-#Ssi zrmTaku;hS$`VGHcdk3|W3@z-?&AO(t@cdZ&H?iJYICz|EE69wQA-La3x6 zCjuj3#Mz~vx|MY-l)ky>pj#l9yIQAFid zS#@hU&+PEDw@8iGD#d1HrTv8Ud&=2&y#5JmbAiPAgTR4$fh^sQZhi9Be=q<5-}miB zQgmo0kQJa5q8S?4c;RbJ2w)U^TRJovbU)eAVD)aV`Ws17&P8#)*Ymq!R?x&NG(7?j zKhbyqR#j4?Tv7SNtG;5ac=yMxve7qGuW#pgfmp zfAu-WsTu%4pA^dLNMj?O8Mihc0{}>}*j@B<j0R47xzqma zr>b33hA*0dBQM-g;OJ2SyFnOSvseA)4A8E+;Kv3_usJKwf3Z8qN%BnT)^Fr<@7Zc* z9sB*7t`Nm<&BUj!(nwThp4MDT9AmaPHerra$ca#6)EBkt8dYIf67-7*rK{sc6divBT_7s&BG;!TClH7N2 z-vq-*_of>;&^s>MHK6x8n zO4eEb`AxSP>1L>gN*eMVLtTSeQnSXQX}5pUZ*0a}$F*3nTUBFyUTMQ>mB~2!jx+zY zGBhnpD|ox9hN83n315l0(SFORML>X_@MBp|jnPQjmo=^>o4&1m?*gHEgeb^$8;zoz z8srG$z(wgHs>MVQFvZ|w7ya$JpAz96t-`*Ez-_|pC(&SEy8*%Rz*I1Jh9V?vQwRZL z7wFOrjWYxSd8SlaBEE-~Z)t85rAAmR!yo=tFD{VEn!GV5Qy-OAl=>zayJi!WZ#+=D z>CrX=XM8<|Dyv6R($UNI<)2w*1+_x!$F6vV1!UK{R^%JIwRU%Z&o&gXv_$@q{xR#8uA^(0_--7!LyCjsO$U0tHvaSXC}%{P|1usb|u=f zUlJqb&3VysW(}Y79Sc6_qzxtq_zq=Vro_2HT1MA^mwL~tcuBlp#4NV6tx4TAwA|!@peAg6u z+KXqIS=jL`NivUSZDXKXuQV!UbMrB(=dl*!h7tAc&UYRvX~=gEl7x|I`joHVM|~3( zh33jE9XgF3e9lKMm`)`g%hmI1Rz zsk+`-k9OmjA~)?-SG!u2`%w*Gl&c0*R+a22-)Vw*P#r1cSh#OAP&H}pYdkOxf=jV} z+vu-KdZSpdS08{`kvwZFP(h2bSS;e1o$vgFO4|9NAt6UXFcjEo?oxB*rgr}mjIlWV zD%2KolULR^=Gpll&VT*ys{JIKKL1F4?Y}fP9!46CdU3Jy^vnWWS$k64*Ol&kC=xlA z9gxK#`7GaWoVwxLqp$tV>fMi|MnT=3%P0MC9L0|4NDYS;xD^lGJT%n|}QC z+pcB+#zJsl6ryR$86Zh4exnr^A^@;_L)DL7q6r~!;m7vl&$Yf&hrc(PV#70mvbS}L zV(^xEyBnhL)=DKcLGu(bpon4&lT?T{+BW|1se+Voq2RVI0(Zba%U^T?`7 zg5&+E@QDm|5A!u2o6six?$Hwd3$T|GScX@Rr3WS3bSJKe#_ACFB_(0gfHte5yu4$W z2!Wz$)+mwuW2K|NZ$E+~r-2711HTbH>YnWP3&BxsH8FOzo}b?_Ib(eR##@dN0Pt)n zIT$ctNZ?qOjbC-J%%fRaoL2!ri?Wfk{=<*;(lRM6%he4jm7{A9R3eL|8(XnN2#L&~ zD6jAQiC&m~+gZ7*niVo~!8NN=;IvECHb#<7ziZz5_jur-%qVRX2+{cUziVcOSZM?A zZk~u0e&L5^cAV8WrE~8&v!7^;;^LzG#(%AE&MF7?cHV*oSYS3V>u!=Le^*r^n5f2YKc_Q;)&G6b&43x4$tgM$g%a0S*Yv zsxabU*Oj5uUf<~;J4)3UEZxvpfEh(B!1cV89p{dTqegtjx2}^-=Iq$RFmVh zw$$JL+KUBqRU!?JUD`~KnscA)W=R2nYrnGVMbg@ycIw!yYIC1#IY#rd005a$Y}XNI z=+aLuqA~g;-;85GSd0ar zOuy;f|Etz&JxesI8p5}w#9-ikrUSs&zcyl-VC|l!#i^|F)!SO&NdR#F!#(%2_E1p{ z^7^*ZEGk;e9lJ~w&EI%L>iPEmS9+X5aFi<^k)%s!*f+fNnf(T>8Md{};t-(18i&){iX2-!E8z<7p_Y1l6^z=Pr?@ z3{z@LoFVGtvv0dAclJDzPD7#|W&uw2Gpj23PgdVZ@Zp(Y^`4fdRK4cN$!k0G#wO|_J))q@y0(i15d=V!M#64wln=X#f}Nr|HgdysbROG>jm;` zi3P|rCA&^Kh7apeHgwJ}uaP6ITI?z*Ey?8-DKQv~T?k@*JeFYyz_l;{L^D)ZQ@+*J zc08d?+Tmk_e47Y{7XI|YT3DV%jCcood;OknH?bCDBj=sWnBV?#X9Q;gV=&9IW!YNv z`&94wc+f!E9rESc=)!y6%nv;P$ei*w9(VTl0YJTs)acHp5cNr;BE|ayi3mY4AnEXa zrF)rr)m^$Nw>FCwzm9kg#QS!(k`#lVf6uw`o5;dfk-1M}Z9$#YHTB_V^3Zf(Bzh_e zg|K+_AIxSM>bu%0_YU>(>K*;&ZzG#?cyQVco(z+8PU_KDa6FFog@%M22?WrsB4>V1 zTfL*-{*U;nD}H*+izI1s@Bm2_XMf;&Hn=7M0N>|IqS=1R3x`$E`bM`N{%Dq}2LJ2- zld7#rr(bVe`mt49=xUYsjk8w3**38R_ic<22mpiy#vP`&Zpa#sq*y(_qiahy^fPa{ zLo?pFA6ggQx2NBB9(|@*m9FMqc_DJ=cacj!GiB}YO@G1BH@}Whk0{2`%3ZgS9%S=h z8Lhh_D%W&*f5O63q{}c533(bQQQ9bVHJw^K{8UR01S6N-u}hxTrIsa@gdXLypKLh| zHXq6P4KqHtC8k6<{Q3MoA_O#+a~I#^@jn05WpC~)1pqc?Wm(0QRmCiIR<6{DU*C}1 zmYY}>fs0iGfCCb^m-q)v_~ffLLSpc&mtWd*wbWoB5Oteq?Y{i@OXbe*BGm1CGrRfX zf5xuTw^u=N7?Hd3Jd6 zQq-zw+$R9Q0yO`X9&~RFmFT1OLi^X~G_anab`!}OBPvr2u0^=EH`sGGnK5trEw{Wz zuKdE1FwQ^PWB*RP;(h%usmhwtC@8H}LN9QNzxe0axgR=2J!D9<`09Vf&c5X-Mo%ZV zG5wY|_r;DAxo-^Hm1nr!1mTWT$TNi~oFjWz7E@Pp(~eb^n&r-qW#HgwnxDF673S4e zw4h?p>=?WCA9Ah8i;GfqLrlC@u}oJ}QQ*921Jx=S+=~uhtT(HI`IrS*F~smWue8*` zlbAh4>qXKQ08f1}`AUF8yX05a$)TadLLjS(XWq4Ytb?`9={N252dZ7)TFXb$G?9$CwXV*P z7U7Ol$ny(P1E+cTY7PLjm~guoqyPXQ7!%2ym&{QBAR52;W9Q*Vst~9ZKiEG-=RVgK zzmW^2Mq;Ga{_gKToZ{xn$mB&mnPUL3c2C`Sq)ffO<18jB*Wyfz(Zw6;*hL@E*4G~I z3ns6#;faX7I%+PBt$coJ{dTUpn5iwL&Go+1SLOY_%b~Nu!#{5&Q0=b?qQ$t^MK^GF zH%tGd3jn9zG}EI2;NZ3YTt`pt@BnCl0EugV+mlZ`Gv-adV_o}I!>P-=O9~8(gI#*& zNyf*VSVBU2A#kvKh$*lI50E79JX(V@9(7PHPY{CC5FNefFMgwb{l63aBqT zjW~^+4Fp9Ko{0dUu_+9m93IgFASWb+ES)(u&(OO@;ZuVd1XV^6EryhseTNC zaG!7vSn*?N=$~NJ7x64sP|B?u)h@jZn)%egU!3?)S7RD4J%q_4eaL z;g^15bB5O+jnK*SedeK|Ht;rgbRoJ#4cO&b3 z>NW4izeO+n*zKF}d8AiQ)SD2fLSVqgdT9aczY5@7oSkR1A=jH9>4kQV4O(fz0 zjtjdkHxCpMuSp`=^yr1WRmc6K1YsnJc)i$YKW`V!5*eHhR`2XNs2KG8``(RziztT3 zjI)bBwrRi_6RLspv*hlFYT)9Pdpj%o@-p;K(QCgl0~cgNH1g!}7rUlhOe1k|>8H-8 z|050ncYddzy5=SNM6%ymy0vv$Bt@rQ^~|yan5IWiVP0DJszaxf;b~l(f93`$0HC3% z>+Q$7kW9R2lYGcCg(zIltv~wgpeK17qVSpb+`E6!TMt`m$WIP>3tz>y?G6AKxnz3{ zQe091;LZQqy!qRR)7*MVR{8lK**E_^3IJDrVb6Xpk59#GtIx2}>35DAp@F|AhyB>7 zQ7Y@qEUQR>5D@Kec&xU3r|Ud4G~;;=l$TThn10uGnvfn0R`2SqnG68b2$P7253s^x zxnt~o3nfZ@lK?>Wlov^g^e{CmI1(3tg;SS`%Tg>$mu~Fr6lKPOfk|Hg7XmQGv!Ccj zf}Q)J{ny`Y;9O4azUdc+&aOU1Mng%snh5#w258Z( zMeOFBkr`%Mj9vPvb?F0V^t|V}NH%ES7%MI)oFUg{MC%-#8geLR*@&gLemlI~*lt&c zyZe9E-~8`2MdxNguBSMbu#ryY!YPlxyY|@fZB|=pL zI@X+44VKDA>+4*Ft@G%=8-fri!x`}wM2OZn>Dg>TLl0m!V-OS<@Slb>a|B??232q zkJ9d%c!dS2e==wkI?EIfFi|=L0K~F%a8hlqe5(y;JKthR$jJ~`b=4T!sRGx9u`7Py zQnw-3i-agb);Ux`*7)#wx3nrZ@_UwM#_T9(Qyk`_V995aig zRWenNv1au|1}R`Z{f7VLzeL+hiy{!TYh)D%K>Pk|cARDUVvUt=+p!Zy=7&6Gh{mEr zYq$TPOkDF-oi)n@FmHcCoSSRUNCc(dtwjawK8{H96v?M|ft01`e*S%hboVg`+7kdEHyQp*M=8 z{G{7mdYCaE%r03Ky>RY*=i$fN{(9%9U-KS+t?rL$ZGn&&oT3}EJE2j-Gc;~wn)%~w z)}Jsk|M(w1B%~v;K5uQ21Hgm7=$C(P8kt73AaBlf2rI=zOk8(M%cQlfR9;f+dFj+u z_nZG6>GtpdKyjg`89kbz@no#=q=iYy!KhKXyTK6`P%B{SVgPJDspxDL2x4F)+VxJ7 zgy(cvW%o!lOMMf&jdm^SpYkhf=%9>#zGtIn=qx3)&#ZTtfWHO0j@OWo;~}uU-7V+N z?<3`9&1ou^ep=nxxOjp@gb?uPuR9h5b;;bP(F0_(SCG)6h!Bw&a-x05w>4f85QfyL zlKdnc9!tUxSY=sh6iA~W^IhQ+$zitsuwB|@O}NdjD}zIkRldI?h!UZFqjY0$zJD9L z$J5|6izsQ|`fg+tLM07(x?q`8?t9kOxZ)I5R+V~QiloTJpEyL>vkx1%xKWVe{Rb4& zJ1zp1mZXIT*5-QAmsS%)ZhWw5B%Z+^dLa-T@^^E=liJT}+^KAI4trR+rA}OM3h!w(Iv}R-|YjYvi|1n0n2<{d=9#_Fuer;#sI~is`p3BZ(LVi2#;_LxQJ~dnm0mqyI=NMsr>Ppae%6{;duD{g6H}b{z{o=jjY%x7u zy3RZyA;&=Yn!0b;XUE<3heQZeSdb^KQ2^MEz?ZP#&$x|9s|?-tKkJ+FgO7<1B_r*> zs3oFLh*eQC*@$B7EUx1N{?)%RV|_uaFG%#WdO-nzL@o$?R$DufYciS&>IG^3OG5$x zK-4AF$1TsS;CSI1b@iU|%HLUo(;W)3A}n$fc;m*H`y2$ig;7u;PZOg1u5Sen-krcV z^PV^RnFaz0jwB)`UbWJLB9ROFC;euH#L}X)@@+o}T8!nU0t$`9kfj(*A{YQ7gJ~Flo4>!t^Z%c(m*=^!_kxaen_&!t)^o2bOToaepSaC@zEP`XZ zAX{?O1Z)P(P7Vgl?Ha@Q@(?s5{b!n$H5}__Jb==YT3Jy_i}LmyIXvT)mX&R3J06Uo zsn@NK|KC*KI5VrbTgOwgEH%sc+z;*AhSc(LCkCjY^gGq3HgZBG4S9~Bo*Xn|o^RC) zSTXqJpE?izs_(6@j@+iieC*qj7U6?ueXEQ+_D_GN2#&Uw{DF(DDz4{oy?~o#)TsKY zQBzeV-~P7m>bZh51b#F((@6CD4?oe`ax0?gKu@5;(w^kbV}KB7I(8aZ)=+8jpf8+y znE6t6!mX|;fW-JE++0g<*AhHACsfkTGeAhlu}O{AniUQJldrh5pQs14sTe-%7Z=EO z@Xd3AXGxF0k}B0|q_3w^?JqEahcU|(msH?*XvPD8>?uz%n5^-cA2<&`(sozsIwk_5 z{r;(|{^B=>8*0TRLS1?MiWARJ9K;Um5caJS+N2>*6UCrvwg8CN3exC>VCmLD+Yy}e znRlGRf^w2X!)Jukz+AFZ10c981UjMR_5HN^WUM-5r6hXmt8*f4`C<4840W?FLq3dvb^mMv?_l zk=U1~|DAKR*&rn3V5pgh_cI|-aZ%~m69NEa4S3H_+H(T+kmpkJq{hd~Mtwb&&BYaC z&rZ4T62^p)+|j}G5Iy%p>y^K4Byxcs>*>4Vl;r26;d8zEC|Q6u9)p&8?luEMB@KC+ zc($Y+xMbI2lm_CUQfbdCl|0j5;u9J1e*4wOJ*1 z#=ribnmwkF73S5{5YwWE)hl^IbsfcXX8Y0an(yC$4tbst94TGBqW}PIlSGoe8X(UV zs*c!8T=&GYv}8YS6!si+O|p6yz54gf${LBL`R(6EsE^GGYyhY~wJ;HI*wmxPsT$#u z;-`ku#>1YxpUI)XD(2dce%FLb8uBy=97)!4r!JQkZ*^YUpStcm`n27%_PszifHq&= zL{b(Yxs#W;S&}~c#}5750}sin@a^{FyXl{x{ga+uBc(;7|5Sj9U0hPO8;*7ZqvtUs z?U0)e2{|fuRZ*g;p_$V9gZ9ydkRS@s?`J-UYLG_hdwJ(ig=n9-^sxQl0Vu{Hon^Hs z&5rrok)&()mF$=|bv>|Ztgt}b?vqyFV~GR+&sTW+K_4|Fq-v6`iJMhZi)z7}| z>^gT3%_70ZbLS@wl{Dm;;MJpvfp#SYfYLJQ8#_YO%kzM&^W2!)*gSA6?M26J%E`2{ zT@LY3>IITIP9XX9=6z=Rcq@Sr7Szrx!xjY$nyh5KS-v(ecC@pNXS#cDn+t6 zLy5Excc&qhSCx_T2l~&RGtRt<>MQ;2M_)diayoaqS0z<+t|$D|us?C#9ldPr?Yaa2 z5bL9rjm}H>Mp0%Q5<~5SXPeD=G<jY-yfRU zQ^Xe`ksk4b>?~?CXDH zwtn=M+b59?>}m)7ku{bY^4ISfMx5_n`vZWHppkSiddZu-<`tKbw9kF?9n!uh5EAmV zuxm>8v{GDTZQ0p&UAq5gcyWpo-HDAp+(sNb)>!>^cag8 zM)gUX;+Gtv1a_&{>5Wsoa@zoa;dA!fN0H6Psv4o!erY#LC^^U$Zz+l{%vy)5MN+(8 zM81tvgWkCxf}oI}mtz?&$)FgNb0{szE4Ph{KNRMZpfrSq8f7PGf^u@gT2LX+5D8;Y zOuOE$L{3vGugb9uoBLePO$D2CTZJjl{lIznsajl6BPri)N}kpJ#&4O-7{ft2tfCJ9 ziov*A+??xGtuW>Y2_cZAQauKZ0$~BpKbD;)Ub&-9T=xJ_B*_ORX`_U92kOeYNDeaU zL*S!Fe>EBRqk0q}X*yQg||py~bAirf8oRAIh7h#7WAPhP9wVo?pze z(KkU#%k9Sjz_;=09SuuDiSY5OrbLJqW7Ty;T?qhcc_lH(>wDwCzhxAiXZwxH!a?PS zUlJslE9t`Q7e|;;Uj2tAbqK;BYwZ4?x3V=jL#=hj?cYYz!+vtmPY%1Pp?JHt;v-2` zFCwA}<{<#^OtNyjU8WEK+I25xLBmR-|7@|bmfYXdDKXfzszz&EJv-WOF(l+^B7ob8 z)KIy)-afutaE9*u-iT%BsVn}2zi6#iYXD$X@bI+XNrAs5FcFj2X=An572AtVY_PF# zp8@nLMv6i0ntbPX1^~1y)Alm}Dr-t&K*$Pn%^ibOF<5Sr-uO)y&`{Po-1>$`a+;ppD&`XXaa|)K*=v77mKsCT^ZhdtfWwgb@*Xn2gBeC7% z3jiVs2802CRgqHtBAV$O2qnovus!!9INC3x0Dy2%FG!#~^Z3(npoBbg{Aw~Y+WC># zCOKIIez_*O`5OWNQ?IzA zmx7f$GM0FG<=fc#3>+-U{_~cS_?@7{%*N^=vekyHbN|3p(QObGmwsY7ODn&o@mJcd-x|pw-$>GP?{&>1e2VxE!t!B-j9vnW%zfrKM_JkffT9W4YCpIi zBS~l8vEn(pctgq0ZOJGAm}LSKQ4fg1X(vV2A_8c;yzWNPnUO0j-q@OzWf?!~Oy3T7 z84~i;u_{WsFQUZ`5>u;&4nASw%gD;@h@x?#9(3AM!FMo+&P&Ue3fW+e+48F#!Mj3T zAs-}k004ax_QW-R`L>pyRcGGur{8jjv6V)g7zoUYA~=dd)Bj+(U5I8!=5eAeJN89D-kw)Hb4j=EC2xl0SFKRB#B0zS~cR?xV1vZm~T9k zum0R#xvT0i?mKAtrn>DVA3WnX%Tj4+&yQ`FsV&5p9gZ;ajN zL^CusfJAf9ciO!T(OjL8T44n>?-E9LWDOG$@56Q}w*M_pmrzMVz9j?)T94<>6gFqu zt&A2%lGpPGSq&|gZyQ&C=4?DvBpI+I4laUuY!DI$n=mg4LV!~z)WZPaThhWexT7yS zH|-Bh(MVDdh07X~b?(^+6Ar+95Bg8}6W8tfrfS!*7NzTt)HWGyK@{#k$!e>tYL(TU zm-@#2>?i>*>C|-3YF8~J2|>)qpLe*X0O8xDzM5=*;c3%;Paz@C4zpxL2NKb&Wp>JB zZx-;xD}H{q{dgOk;`Leb)_-r>4Ox%U8^19Qs0w^+gg^)hKnK{+F9n`SVv$sOq*7TW z0MJoJ0bujdmWm~Z{Il-{`A3S?!1V$-b;;kHM>iiuCa=32vvS~I&eZKt(>930J+J-i z#*#Sm8sko`zMyuiBa<4b&E9H%V~gAbudig*F>GcV`zz{umZTe< zAJjHBXVsQrJN>q;X#80yX*5Ndn|jG*v_&%?=^wY6rJxt{Kb{ryU+TsAt!2lZKW_cX zbDta2Z@BmVv}d*6MrxQ97xs(_Jwd0g$d$)~hwQw|e#aJDn278!DLp)F^XqBQ;m?PJ zJX4w*2@MTg{Go`X_mq4V9L;^HPQHGGAg8%6wVC%Ez2~-+y@N24rKc~@-&2HV=<%Mu zWLX8@>Y#em#Q@^qi=+oxqqw7_xhXbwCR(1&9U`LuoYS^?V=at03(T%t{7;uqNkhH^ zoSIU8G&FK5cIpb-{d8e0Fz&L1>jd}l=l>Kx_r8suc8m+>5b)z~=DuKf4K4luw|8If zZCux)z}MbW(F+0gE>c~hx~yi&vJ}TfaeSO8ah#l+?>wCEKHNX&KHP`%eKmb`TvT1u z^`J<1cT0~b-Q5iX3=K*n<Xd=cgM(E>iNJV#k3@w%psWcy|z!_MJdAMPx{ z1G{;35l+I(@^^EQBFcnpQrm~{;{&m&kt=a_CV*YeTfUE#KI(jI_6+z)agkttm%zCcv_Zi8UC-hT z4chChSj}@f+Em}Xc!SL(t>go;uvqzKnonx6Bfo1g~u~`=7qeuNw*q_6Gb0=XR^dMKDz{ zAP(EEa=$BD%yWcYA#4|R(=>*` z{cwIRF|XR!|7v`(PHkoiUG%-04J;`k=g;;}Ut^x)0%-wl*V*dbE8xG}BGP5SlD1Pe ziEb~s)DmMW2*3LgQVjfw4IRE7P2L7~AW{*=)6{B-iE-)<|K>h=ZzP1~RnGi0+z$I7 zryYVt26&s5TyC=6PP~@$qf*AB24>kOqoJrvL=m_`w2%w6)!&j9DunDYveXGmWiNV8S90SHYuTgBr;xHN;y1}2w=~xWuoTDL%2Zy5z(^hYB44;&7_ar)X7@F zGrs;)pHlZ;O#RDX|C@CSQR$3iqeX=hKE&k<0hxdA)7e&*%0-P0D)8eP_X2&iE-2Ko zIQc9+>XKm0j*kO}sGw7xL^^Yfb;@x0Vx~5hEyX=!TFKkGCDU^ff)obfj@Z)RV zFI5k-P!1P)W@(vfyxAM4G=+XMiSH{NbUl84UL-)ydPU@~7dDbs?IVnQq4)HKdW9DA zMV{HO&s;Y47`rAG8i!|+A+qtRHpk;t3`&Ro1ncV;oi;XCTj#4&vSxTO1&Tm7CC}>I z#RM22YK*#rjO|OOMtLkm>m+Jm zKPQT$EIwoNf#Q)nB?vX{FhjM zc9~|UleTxp5U@ETsf%P;#{d|7u7leAq~f17@ACQse!=&>-`@;wzcP0Pr?Y&dY6z># z(rf4FDGO|pQION24P$wWmyb4A3eG=avpLKhAztlqu?Bp3Fmx8=Xi&(XonKfOgvY+N z%l6`-7I0IITIUqx(oF9sn@VR_mA!uZ{$s#C<{s-T~fxTQUT?&j(@wa zmOoz-0JrV;vPYc0c7d3?hw3}z``P*V+r{|fwhh9JTRT)4wGs)biX$Af4SsNLfWo;M zC04k=nRNU}?rJXBCnpUv1KKTMCiQb-WnQc(U}L3MzMnItG8(vQ}pV^L|`t$3RF&bcVs4=P0_41*RO&y zTeUefnHn>1TnIgVS>;`>Q{yfo%kB)1dBMvMAwQ*bqOO4n%Bftk>e$kJb`@RMj-`S2 z(|#Dydd8W)z(X5bW8+D*Ny#WdM@?*Y_+~VvBsX@iBmUW$kg7K+$LaTH;mq zDja^nzRTPYCeNQ1ebSk9&TlPy0;q4o+)E>`{WT9Uz%V3Eat!2tp_{8$8eW=8zRoTn zXSv?+fmAbXh+!#r(G#ad^QB9XNa?T|3>zFPwuum$>%?hI-EQ@dGh|mPj?U9cF#_N` zk2o^l;IF-FmJR|l^a^ALL+7YlscDym%L6JZeu%Q*XApIQetp*rVO&~k-k#NXXX&Bu zt8z%EHSrfpZmAh!d1)rwD@^?HK)ASD`%qks^Usxcezt;dt?lcJTKLFEX&|qdV=h@W zU%~e2Z%g~0@###Z;ML9(!WxXL3N&Q2JNn&hou?>YR(;}{lbnFWdUIO1UJr8b6?)#& zC_2R!qVS0&z+yl4oad15oTVhq!^SkCPWt!{($6E0PzG16)?jH{s=xa!vCHBF4l@VYVZY}JrO^-Gv@I>m8U zDgl+|t&8#GsC5Io!-xRUS2%{Ddl43aB4wl|&hy9&22LGfJ--|ONdGr8twebVxiwWm zQh6-#Kka`k9QBDbWKB9F%tRn+%v}oMTosSJSJN^V@aZwmI14-ev(T+#>mC}DfWozA zX=yOmIdH@s>ja+a6f5#kWf<_}D{bkGflc!VhyfpXL9$QtYF#Z?JHOdI8G8vI=}3ld zNfQumC?vD}0XDjgy_oBKfoKT2d2)ac12XOh1^Vo?>rkj0x6;A$j{Xps06^}#BR)lJ~zMhr=WT6K2+So3YOfmPHRpQ)03vU4mC9h-z=?(YS(uZNUH`~A2ub4 zek<9r{R=ITOHUI0;>oLpF@>)Mr=12Xx6o_;vM6H{5{iL>rt}uP1N5UV>5}Zqn;d z8#kf57;WFT96L^fcnHol$SWWQ{EUVqconB5WlV#mOoWR9F$NZ%T0Sx8d^Z%EVhtdx zYl{A5-->`c&MM&3Y0Yvtx#@d5Y3oFJQdl1Nj~AozFoWyYsMVFQl70Go)t~6Lb=@gG z?*of079)4FgxP*b(W~$~nPD(+1XmT{12$hIE;M(%jWPPVDQDT*n!{8>4PeWri9ges zv=SM%(yj9H6o-`g(LISW1P*II^&N!NSYCr{qvandK z4l>!oz)Bk|E|3{-p>57%8ai8DS7b9$jU*mmZ!Y@S5v~<0Qu$S?D^kCWs2lkShXc{W zuF=D~L0w;65z@Rq`nhb(qrl9RaP~_sQ>tUt=^v3rl}DKr4l#_6GW}H!P1tG#;q*nR zW)5-_vI~M23Zy`P-R!4o21yj)8SRwGZHOKT{u#kh7speLC)yiUlCf0Z{J}o-8+Pj_r|tLi)^NVqm9wAK zRtAZb?mKUWJcpc3GxppDEe&0zCb+pemIvv|9h8f`aHgr6h{ow@7d24etBfF29fOx+ z^8^{U92$2rx#Slu1t58&YIYIerlF8a!n>;+AtbhP-X^OV)v)a~8 z&LpGN!Pw}vX@H_y8q*tDepK>I*njF4`-rci+Xm64pC=BV{h>QjK;#M=5}bhC<~l_; zjuVIp7dGU>Ip57RON^5L$HWiz(RwZU>reC;Twe_bYB zLK@S_QtHMh8)X&jP#?3U`OVi5Pnq zRDHhqJ_FBmUuXJ$dz)+OI+gUHuOmp!w>0R9@&$G%%5|)mO|!x8mH8LFokkI3PLZQ> z1id>Y(A;5{%gBV{`fRp^1DbK4Nd;);+sVCciB#`#QYTUxF)tLJ?Irj~_NE$7oOF!~xn#tyDdz|v9tBTT6tI$IkG8Pe8j}NFxcY2l5 zx6vp`?;@H#$#<4Ze90-wnbL<%Zu!&rTj997GxYO=%qviQFv8@6z$&FMOgf`(1X8vb z()}F=Z<5v{y|hBxpi|}Q69f4Ze8)D`bP+LrcwFYmXJ>H|i4q<{44Rsxx@|)zC1*^I zFtIe}f9+KitB5Eb=&~c`dJ{ky0>N11sh|u)wbdAiv-C5_yHoYEoKBU*z@eN(jzF<* z{+pCSIt&auX7dWL^ zd+n3}ehdJ#V3~hl{ER`0X~E5b21{<{!P@KU8GmB*F_0Xyf-U@Jq)C|X|AP>cJ4vga z5bw+~0iVx?i#>G~z1n#B@YfM(9CLt=p(Rs!h)N8kae3C)w8pbVWpWs#DF9`Me$Ozz zEXVL?;%zFmy7v<4CecFMMBw!2Hi6uZ9U}=llN>?9wd$U2YP`w+#!T)PA_mta@Bfz1fsItFJi<|I5sZ&{w zZ31_W1J^Jn@R$i3xqKNa2@wPwAuy8NKr=yGZ8#NIdyo6Vtcoz3Q&a;J>L4mP6Y%}C zAxTb~?7gM>VfbH@ZS30OlHmW;uS9P3`WN-}FGWE^W_5N160|&fptn$Uq;hLM**Np& z6J~qNdHXEJiSlpDuN_E--fCmO$otiANU-<$)q#!QA%~v2TCf{7)hwGb18pC;FbU-Z z=ozppEQ4%HS9)E=Nd_?%OQ?d>!fvjiTcYgK?R&!dW0M1L3a`pT|HWQZj{t*H%ppKxSINJH&Lncgh8o

    lrV&n54i&NMr~+F#~%Kk!ZjEeU^aS`9-UcfSzo(Kv$Z?4e5( zri{t4bfZ>D<%?Y?ujk2?T^pXKal~ZR*nhPnC!!JxXKxV??4G3TBA*8%To5?G<3$ms@3Ub`Z3VmI6GP9H4Koeb*= zpZNXbNTVoB2~Xa_WPY!JzM%!UdQ`*Od=XuQ*&`jfNydLi5JGlcYr*vwOE*K; z)Ik3>G4xf{0Az}kWu@h=%acdHu<)*bJSO#$ojgswM~c|V*)fKd`W{bdK1| zgq^^u=|H)oF`+Y_M|Y2ZKkg$aA|pwEXrIKdDR4p7(lgUlWuhT zHVQMPJ^es1+~`e0jYMF_>%0*1T&o;vZocvaK?3_Fp_qXt-CYZc@~`}ZE+72c7CJS?N{|H+*9 zqg`d9S`LM99!CH)D@3ZM9}MXm08#Z&@lKnDf%{XHsoR95N{k@^WJEU|-W!)41L*l? z&v=!8S3tu~fk+-9`N+#j&Pun9PXCVT;Qqs|)2*VePw1|m zst#dmWaGfC+Sb=%MR=H)W{01Lq3OOs<|~*Q5VZY{|JUnmc%cF3 zc=7y1-+tfr*3=v*d^Aw@_5Frn)gfi!XiFg@BjR5E+-e|%6K!Wim9Ou@pNRt)F_$W+ z(_>t=$nrn^tCu}*(RtrTDvt$7fnBW$#ESt#5mS9bZL!^);b>%hARaqnsV?kaTlT~6 z$gL-UqUBv5$!GUI6(uDBr^lHc=j+o4ED^2lHMQ7EN2iQG(BQ27?zOxN1#23$CJcFM z#%H!?e%wH(Eit%m4)5185`$0qC6EhD=lEGzll9V+4;o*i3DV2b_NW$NMgB=Q_v zDF{CEP!E+T?D6>kSXeTtx7m1D1&@}^(tRy+yz4rt)uq$QR!}NdQ1~;C+C)1d4n97s z+U-Lr9OR>SJ}!^&F!)a40a4o9OnB_EzRGkCF;oV1RM_ka51{veuJFT%{wq-#X2zxC zxHlNCJffCmLCs2}Sog05Bd))7=4!imt@l!rfOW~WE+h|^rM*vKeIPPySUaig0OI@S z`ETFKP~F|A)6J%r|MD<=Kj>I*c@4vuDrLaOceGp68@-5-z+$5@I9YA`he1VeCj;_t zTb$G*zKuJ*d9jzD!n%oM^?+5z000%Ozqdh_VS9%j3p5BzZ3$l80i zslgg?AIzT_f$B@~+UV!edey(ksr3q$a4=LEKf1fwsY1+^zgYgo!`netJK}tmhejO0z!r2$w!7^3 zDkQ*bOSY_QA&qMvy@yN60TpkU!0jYPm?<13Q+fX_8!Sn!9Qk{1XJiN7_0tz&M!*Xj zM{~pMu@tGW0mT_!tF0x!@pL!A=&v&)SFiunnzeQ8Pv3lm2I4)v)lz}VEN%4$OAH{B zuEk#Ox2w*iwRl~PQv>yGi|8EyKKt&6sbCTbv8Af{T+Q>Z6ADr{Q$6QaSy#m}a|`BZ zh0O=2XH}#rNfEv~JwxP4UflFR_)}SX29X^WSynZ{_Y?saZ%?RUm}RHf@YYB2Y_Ez>LE4pyRui+m9}-jTX?!-q4sC z$7n^nfAEsVekrM*ZDV=0)C-_c(e&Mfgza65LNBQIiKTfj&_le@4&be7B+L&lHK$)}7rNv&=iLzX9y^xs1; zMkD>Na-6ZoBqewyU6@pvOxYKc^svVq9HSq{X6NS)fUAWubuj>1YWk`T%J$L!15BXe AS^xk5 literal 0 HcmV?d00001